From e1a840772d6d3008d8610c53c636e804d3ae0fda Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Fri, 19 Feb 2021 20:25:17 +0800
Subject: [PATCH 001/102] RTC: Refine TWCC and RTCP timer to 100ms.

---
 trunk/src/app/srs_app_rtc_conn.cpp | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index 981a59c33..de6ec39c2 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -874,7 +874,7 @@ srs_error_t SrsRtcPlayStream::do_request_keyframe(uint32_t ssrc, SrsContextId ci
 
 SrsRtcPublishStream::SrsRtcPublishStream(SrsRtcConnection* session, const SrsContextId& cid)
 {
-    timer_ = new SrsHourGlass("publish", this, 20 * SRS_UTIME_MILLISECONDS);
+    timer_ = new SrsHourGlass("publish", this, 100 * SRS_UTIME_MILLISECONDS);
 
     cid_ = cid;
     is_started = false;
@@ -985,11 +985,11 @@ srs_error_t SrsRtcPublishStream::start()
         return err;
     }
 
-    if ((err = timer_->tick(SRS_TICKID_TWCC, 40 * SRS_UTIME_MILLISECONDS)) != srs_success) {
+    if ((err = timer_->tick(SRS_TICKID_TWCC, 100 * SRS_UTIME_MILLISECONDS)) != srs_success) {
         return srs_error_wrap(err, "twcc tick");
     }
 
-    if ((err = timer_->tick(SRS_TICKID_RTCP, 200 * SRS_UTIME_MILLISECONDS)) != srs_success) {
+    if ((err = timer_->tick(SRS_TICKID_RTCP, 1000 * SRS_UTIME_MILLISECONDS)) != srs_success) {
         return srs_error_wrap(err, "rtcp tick");
     }
 
@@ -1282,7 +1282,7 @@ srs_error_t SrsRtcPublishStream::send_periodic_twcc()
     if (last_time_send_twcc_) {
         uint32_t nn = 0;
         srs_utime_t duration = srs_duration(last_time_send_twcc_, srs_get_system_time());
-        if (duration > 100 * SRS_UTIME_MILLISECONDS && twcc_epp_->can_print(0, &nn)) {
+        if (duration > 130 * SRS_UTIME_MILLISECONDS && twcc_epp_->can_print(0, &nn)) {
             srs_warn2(TAG_LARGE_TIMER, "twcc delay %dms > 100ms, count=%u/%u",
                 srsu2msi(duration), nn, twcc_epp_->nn_count);
         }

From 33f4e0207244095e3451d18a49c860a0f912940b Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Tue, 23 Feb 2021 17:10:27 +0800
Subject: [PATCH 002/102] RTC: Send NACK one by one to avoid packet freed by
 context switching

---
 trunk/src/app/srs_app_rtc_source.cpp | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index 5988119b5..e7d52da2d 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -2042,14 +2042,12 @@ srs_error_t SrsRtcSendTrack::on_recv_nack(const vector<uint16_t>& lost_seqs, Srs
 
     statistic->nacks++;
 
-    vector<SrsRtpPacket2*> resend_pkts;
     for(int i = 0; i < (int)lost_seqs.size(); ++i) {
         uint16_t seq = lost_seqs.at(i);
         SrsRtpPacket2* pkt = fetch_rtp_packet(seq);
         if (pkt == NULL) {
             continue;
         }
-        resend_pkts.push_back(pkt);
 
         info.nn_bytes += pkt->nb_bytes();
         uint32_t nn = 0;
@@ -2057,11 +2055,14 @@ srs_error_t SrsRtcSendTrack::on_recv_nack(const vector<uint16_t>& lost_seqs, Srs
             srs_trace("RTC NACK ARQ seq=%u, ssrc=%u, ts=%u, count=%u/%u, %d bytes", pkt->header.get_sequence(),
                 pkt->header.get_ssrc(), pkt->header.get_timestamp(), nn, nack_epp->nn_count, pkt->nb_bytes());
         }
-    }
 
-    // By default, we send packets by sendmmsg.
-    if ((err = session_->do_send_packets(resend_pkts, info)) != srs_success) {
-        return srs_error_wrap(err, "raw send");
+        vector<SrsRtpPacket2*> resend_pkts;
+        resend_pkts.push_back(pkt);
+
+        // By default, we send packets by sendmmsg.
+        if ((err = session_->do_send_packets(resend_pkts, info)) != srs_success) {
+            return srs_error_wrap(err, "raw send");
+        }
     }
 
     return err;

From 2f1e8a69118d9ee713b5f99f894e9678b4a6f301 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Wed, 24 Feb 2021 11:39:30 +0800
Subject: [PATCH 003/102] RTC: Refine logs

---
 trunk/src/app/srs_app_rtc_api.cpp    | 2 +-
 trunk/src/app/srs_app_rtc_conn.cpp   | 6 +++---
 trunk/src/app/srs_app_rtc_source.cpp | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_api.cpp b/trunk/src/app/srs_app_rtc_api.cpp
index e1fa754ac..b35340b0c 100644
--- a/trunk/src/app/srs_app_rtc_api.cpp
+++ b/trunk/src/app/srs_app_rtc_api.cpp
@@ -786,7 +786,7 @@ srs_error_t SrsGoApiRtcNACK::serve_http(ISrsHttpResponseWriter* w, ISrsHttpMessa
     res->set("code", SrsJsonAny::integer(ERROR_SUCCESS));
 
     if ((err = do_serve_http(w, r, res)) != srs_success) {
-        srs_warn("RTC NACK err %s", srs_error_desc(err).c_str());
+        srs_warn("RTC: NACK err %s", srs_error_desc(err).c_str());
         res->set("code", SrsJsonAny::integer(srs_error_code(err)));
         srs_freep(err);
     }
diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index de6ec39c2..cd28f9824 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -768,7 +768,7 @@ srs_error_t SrsRtcPlayStream::on_rtcp_nack(SrsRtcpNack* rtcp)
     // If NACK disabled, print a log.
     if (!nack_enabled_) {
         vector<uint16_t> sns = rtcp->get_lost_sns();
-        srs_trace("RTC NACK ssrc=%u, seq=%s, ignored", ssrc, srs_join_vector_string(sns, ",").c_str());
+        srs_trace("RTC: NACK ssrc=%u, seq=%s, ignored", ssrc, srs_join_vector_string(sns, ",").c_str());
         return err;
     }
 
@@ -1475,7 +1475,7 @@ void SrsRtcPublishStream::simulate_nack_drop(int nn)
 
 void SrsRtcPublishStream::simulate_drop_packet(SrsRtpHeader* h, int nn_bytes)
 {
-    srs_warn("RTC NACK simulator #%d drop seq=%u, ssrc=%u/%s, ts=%u, %d bytes", nn_simulate_nack_drop,
+    srs_warn("RTC: NACK simulator #%d drop seq=%u, ssrc=%u/%s, ts=%u, %d bytes", nn_simulate_nack_drop,
         h->get_sequence(), h->get_ssrc(), (get_video_track(h->get_ssrc())? "Video":"Audio"), h->get_timestamp(),
         nn_bytes);
 
@@ -2478,7 +2478,7 @@ void SrsRtcConnection::simulate_nack_drop(int nn)
 
 void SrsRtcConnection::simulate_player_drop_packet(SrsRtpHeader* h, int nn_bytes)
 {
-    srs_warn("RTC NACK simulator #%d player drop seq=%u, ssrc=%u, ts=%u, %d bytes", nn_simulate_player_nack_drop,
+    srs_warn("RTC: NACK simulator #%d player drop seq=%u, ssrc=%u, ts=%u, %d bytes", nn_simulate_player_nack_drop,
         h->get_sequence(), h->get_ssrc(), h->get_timestamp(),
         nn_bytes);
 
diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index e7d52da2d..5adb0c905 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -2052,7 +2052,7 @@ srs_error_t SrsRtcSendTrack::on_recv_nack(const vector<uint16_t>& lost_seqs, Srs
         info.nn_bytes += pkt->nb_bytes();
         uint32_t nn = 0;
         if (nack_epp->can_print(pkt->header.get_ssrc(), &nn)) {
-            srs_trace("RTC NACK ARQ seq=%u, ssrc=%u, ts=%u, count=%u/%u, %d bytes", pkt->header.get_sequence(),
+            srs_trace("RTC: NACK ARQ seq=%u, ssrc=%u, ts=%u, count=%u/%u, %d bytes", pkt->header.get_sequence(),
                 pkt->header.get_ssrc(), pkt->header.get_timestamp(), nn, nack_epp->nn_count, pkt->nb_bytes());
         }
 

From 6c24f2e353559f3bb5d6eddc169881533b69af31 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Wed, 24 Feb 2021 17:22:49 +0800
Subject: [PATCH 004/102] Refine logs

---
 trunk/src/app/srs_app_rtc_server.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index f5f4dfe73..c83c0677e 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -666,7 +666,7 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
     _srs_pps_rnack->update(); _srs_pps_rnack2->update();
 
     // TODO: FIXME: Show more data for RTC server.
-    srs_trace("RTC: Server conns=%u, pkts=%d, addrs=%d,%d, fid=%d,%d,%d, rtcp=%d,%d,%d, snk=%d,%d,%d,%d, rnk=%d,%d",
+    srs_trace("RTC: Server conns=%u, pkts=%d,%d,%d, fid=%d,%d,%d, rtcp=%d,%d,%d, snk=%d,%d,%d,%d, rnk=%d,%d",
         nn_rtc_conns,
         _srs_pps_pkts->r10s(), _srs_pps_addrs->r10s(), _srs_pps_fast_addrs->r10s(),
         _srs_pps_ids->r10s(), _srs_pps_fids->r10s(), _srs_pps_fids_level0->r10s(),

From d92ceaca39cdd6c3e93aea5591049e6851dd8f83 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Wed, 24 Feb 2021 17:33:20 +0800
Subject: [PATCH 005/102] RTC: Stat the detail of received packets

---
 trunk/src/app/srs_app_listener.cpp   |  4 ++--
 trunk/src/app/srs_app_rtc_server.cpp | 18 ++++++++++++++----
 2 files changed, 16 insertions(+), 6 deletions(-)

diff --git a/trunk/src/app/srs_app_listener.cpp b/trunk/src/app/srs_app_listener.cpp
index a2aaa7407..c6cb51d6e 100755
--- a/trunk/src/app/srs_app_listener.cpp
+++ b/trunk/src/app/srs_app_listener.cpp
@@ -45,7 +45,7 @@ using namespace std;
 
 #include <srs_protocol_kbps.hpp>
 
-SrsPps* _srs_pps_pkts = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_rpkts = new SrsPps(_srs_clock);
 SrsPps* _srs_pps_addrs = new SrsPps(_srs_clock);
 SrsPps* _srs_pps_fast_addrs = new SrsPps(_srs_clock);
 
@@ -343,7 +343,7 @@ int SrsUdpMuxSocket::recvfrom(srs_utime_t timeout)
     address_changed_ = true;
 
     // Update the stat.
-    ++_srs_pps_pkts->sugar;
+    ++_srs_pps_rpkts->sugar;
 
     return nread;
 }
diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index c83c0677e..8a2c0a324 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -45,7 +45,10 @@ using namespace std;
 #include <srs_app_rtc_api.hpp>
 #include <srs_protocol_utility.hpp>
 
-extern SrsPps* _srs_pps_pkts;
+extern SrsPps* _srs_pps_rpkts;
+SrsPps* _srs_pps_rstuns = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_rrtps = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_rrtcps = new SrsPps(_srs_clock);
 extern SrsPps* _srs_pps_addrs;
 extern SrsPps* _srs_pps_fast_addrs;
 
@@ -357,6 +360,7 @@ srs_error_t SrsRtcServer::on_udp_packet(SrsUdpMuxSocket* skt)
 
     // For STUN, the peer address may change.
     if (!is_rtp_or_rtcp && srs_is_stun((uint8_t*)data, size)) {
+        ++_srs_pps_rstuns->sugar;
         string peer_id = skt->peer_id();
 
         SrsStunPacket ping;
@@ -390,6 +394,8 @@ srs_error_t SrsRtcServer::on_udp_packet(SrsUdpMuxSocket* skt)
 
     // Note that we don't(except error) switch to the context of session, for performance issue.
     if (is_rtp_or_rtcp && !is_rtcp) {
+        ++_srs_pps_rrtps->sugar;
+
         err = session->on_rtp(data, size);
         if (err != srs_success) {
             session->switch_to_context();
@@ -399,9 +405,13 @@ srs_error_t SrsRtcServer::on_udp_packet(SrsUdpMuxSocket* skt)
 
     session->switch_to_context();
     if (is_rtp_or_rtcp && is_rtcp) {
+        ++_srs_pps_rrtcps->sugar;
+
         return session->on_rtcp(data, size);
     }
     if (srs_is_dtls((uint8_t*)data, size)) {
+        ++_srs_pps_rstuns->sugar;
+
         return session->on_dtls(data, size);
     }
     return srs_error_new(ERROR_RTC_UDP, "unknown packet");
@@ -659,16 +669,16 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
     }
 
     // Update the pps stat for UDP socket and adddresses.
-    _srs_pps_pkts->update(); _srs_pps_addrs->update(); _srs_pps_fast_addrs->update();
+    _srs_pps_rpkts->update(); _srs_pps_rstuns->update(); _srs_pps_rrtps->update(); _srs_pps_rrtcps->update(); _srs_pps_addrs->update(); _srs_pps_fast_addrs->update();
     _srs_pps_ids->update(); _srs_pps_fids->update(); _srs_pps_fids_level0->update();
     _srs_pps_pli->update(); _srs_pps_twcc->update(); _srs_pps_rr->update();
     _srs_pps_snack->update(); _srs_pps_snack2->update(); _srs_pps_sanack->update(); _srs_pps_svnack->update();
     _srs_pps_rnack->update(); _srs_pps_rnack2->update();
 
     // TODO: FIXME: Show more data for RTC server.
-    srs_trace("RTC: Server conns=%u, pkts=%d,%d,%d, fid=%d,%d,%d, rtcp=%d,%d,%d, snk=%d,%d,%d,%d, rnk=%d,%d",
+    srs_trace("RTC: Server conns=%u, rpkts=%d,%d,%d,%d,%d,%d, fid=%d,%d,%d, rtcp=%d,%d,%d, snk=%d,%d,%d,%d, rnk=%d,%d",
         nn_rtc_conns,
-        _srs_pps_pkts->r10s(), _srs_pps_addrs->r10s(), _srs_pps_fast_addrs->r10s(),
+        _srs_pps_rpkts->r10s(), _srs_pps_rstuns->r10s(), _srs_pps_rrtps->r10s(), _srs_pps_rrtcps->r10s(), _srs_pps_addrs->r10s(), _srs_pps_fast_addrs->r10s(),
         _srs_pps_ids->r10s(), _srs_pps_fids->r10s(), _srs_pps_fids_level0->r10s(),
         _srs_pps_pli->r10s(), _srs_pps_twcc->r10s(), _srs_pps_rr->r10s(),
         _srs_pps_snack->r10s(), _srs_pps_snack2->r10s(), _srs_pps_sanack->r10s(), _srs_pps_svnack->r10s(),

From 09bd1b9faad4b5aad43d4e921fed20373e356e55 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Wed, 24 Feb 2021 17:55:27 +0800
Subject: [PATCH 006/102] RTC Stat the detail of send packets

---
 trunk/src/app/srs_app_listener.cpp   |  4 ++++
 trunk/src/app/srs_app_rtc_conn.cpp   | 22 ++++++++++++++++++++++
 trunk/src/app/srs_app_rtc_server.cpp | 14 +++++++++++---
 3 files changed, 37 insertions(+), 3 deletions(-)

diff --git a/trunk/src/app/srs_app_listener.cpp b/trunk/src/app/srs_app_listener.cpp
index c6cb51d6e..ce335ce6d 100755
--- a/trunk/src/app/srs_app_listener.cpp
+++ b/trunk/src/app/srs_app_listener.cpp
@@ -49,6 +49,8 @@ SrsPps* _srs_pps_rpkts = new SrsPps(_srs_clock);
 SrsPps* _srs_pps_addrs = new SrsPps(_srs_clock);
 SrsPps* _srs_pps_fast_addrs = new SrsPps(_srs_clock);
 
+SrsPps* _srs_pps_spkts = new SrsPps(_srs_clock);
+
 // set the max packet size.
 #define SRS_UDP_MAX_PACKET_SIZE 65535
 
@@ -352,6 +354,8 @@ srs_error_t SrsUdpMuxSocket::sendto(void* data, int size, srs_utime_t timeout)
 {
     srs_error_t err = srs_success;
 
+    ++_srs_pps_spkts->sugar;
+
     int nb_write = srs_sendto(lfd, data, size, (sockaddr*)&from, fromlen, timeout);
 
     if (nb_write <= 0) {
diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index cd28f9824..dffd10b6e 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -60,6 +60,11 @@ using namespace std;
 
 #include <srs_protocol_kbps.hpp>
 
+SrsPps* _srs_pps_sstuns = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_stwcc = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_srtcps = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_srtps = new SrsPps(_srs_clock);
+
 SrsPps* _srs_pps_pli = new SrsPps(_srs_clock);
 SrsPps* _srs_pps_twcc = new SrsPps(_srs_clock);
 SrsPps* _srs_pps_rr = new SrsPps(_srs_clock);
@@ -118,6 +123,8 @@ srs_error_t SrsSecurityTransport::write_dtls_data(void* data, int size)
         return err;
     }
 
+    ++_srs_pps_sstuns->sugar;
+
     if ((err = session_->sendonly_skt->sendto(data, size, 0)) != srs_success) {
         return srs_error_wrap(err, "send dtls packet");
     }
@@ -1293,6 +1300,8 @@ srs_error_t SrsRtcPublishStream::send_periodic_twcc()
         return err;
     }
 
+    ++_srs_pps_stwcc->sugar;
+
     char pkt[kRtcpPacketSize];
     SrsBuffer *buffer = new SrsBuffer(pkt, sizeof(pkt));
     SrsAutoFree(SrsBuffer, buffer);
@@ -2298,6 +2307,8 @@ srs_error_t SrsRtcConnection::send_rtcp(char *data, int nb_data)
 {
     srs_error_t err = srs_success;
 
+    ++_srs_pps_srtcps->sugar;
+
     int  nb_buf = nb_data;
     if ((err = transport_->protect_rtcp(data, &nb_buf)) != srs_success) {
         return srs_error_wrap(err, "protect rtcp");
@@ -2324,6 +2335,7 @@ void SrsRtcConnection::check_send_nacks(SrsRtpNackForReceiver* nack, uint32_t ss
     }
 
     ++_srs_pps_snack2->sugar;
+    ++_srs_pps_srtcps->sugar;
 
     char buf[kRtcpPacketSize];
     SrsBuffer stream(buf, sizeof(buf));
@@ -2343,6 +2355,8 @@ srs_error_t SrsRtcConnection::send_rtcp_rr(uint32_t ssrc, SrsRtpRingBuffer* rtp_
 {
     srs_error_t err = srs_success;
 
+    ++_srs_pps_srtcps->sugar;
+
     // @see https://tools.ietf.org/html/rfc3550#section-6.4.2
     char buf[kRtpPacketSize];
     SrsBuffer stream(buf, sizeof(buf));
@@ -2388,6 +2402,8 @@ srs_error_t SrsRtcConnection::send_rtcp_xr_rrtr(uint32_t ssrc)
 {
     srs_error_t err = srs_success;
 
+    ++_srs_pps_srtcps->sugar;
+
     /*
      @see: http://www.rfc-editor.org/rfc/rfc3611.html#section-2
 
@@ -2440,6 +2456,8 @@ srs_error_t SrsRtcConnection::send_rtcp_fb_pli(uint32_t ssrc, const SrsContextId
 {
     srs_error_t err = srs_success;
 
+    ++_srs_pps_srtcps->sugar;
+
     char buf[kRtpPacketSize];
     SrsBuffer stream(buf, sizeof(buf));
     stream.write_1bytes(0x81);
@@ -2532,6 +2550,8 @@ srs_error_t SrsRtcConnection::do_send_packets(const std::vector<SrsRtpPacket2*>&
             continue;
         }
 
+        ++_srs_pps_srtps->sugar;
+
         // TODO: FIXME: Handle error.
         sendonly_skt->sendto(iov->iov_base, iov->iov_len, 0);
 
@@ -2578,6 +2598,8 @@ srs_error_t SrsRtcConnection::on_binding_request(SrsStunPacket* r)
 {
     srs_error_t err = srs_success;
 
+    ++_srs_pps_sstuns->sugar;
+
     bool strict_check = _srs_config->get_rtc_stun_strict_check(req->vhost);
     if (strict_check && r->get_ice_controlled()) {
         // @see: https://tools.ietf.org/html/draft-ietf-ice-rfc5245bis-00#section-6.1.3.1
diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index 8a2c0a324..49782d401 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -52,6 +52,12 @@ SrsPps* _srs_pps_rrtcps = new SrsPps(_srs_clock);
 extern SrsPps* _srs_pps_addrs;
 extern SrsPps* _srs_pps_fast_addrs;
 
+extern SrsPps* _srs_pps_spkts;
+extern SrsPps* _srs_pps_sstuns;
+extern SrsPps* _srs_pps_stwcc;
+extern SrsPps* _srs_pps_srtcps;
+extern SrsPps* _srs_pps_srtps;
+
 extern SrsPps* _srs_pps_ids;
 extern SrsPps* _srs_pps_fids;
 extern SrsPps* _srs_pps_fids_level0;
@@ -669,16 +675,18 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
     }
 
     // Update the pps stat for UDP socket and adddresses.
-    _srs_pps_rpkts->update(); _srs_pps_rstuns->update(); _srs_pps_rrtps->update(); _srs_pps_rrtcps->update(); _srs_pps_addrs->update(); _srs_pps_fast_addrs->update();
+    _srs_pps_rpkts->update(); _srs_pps_rrtps->update(); _srs_pps_rstuns->update(); _srs_pps_rrtcps->update(); _srs_pps_addrs->update(); _srs_pps_fast_addrs->update();
+    _srs_pps_spkts->update(); _srs_pps_srtps->update(); _srs_pps_sstuns->update(); _srs_pps_stwcc->update(); _srs_pps_srtcps->update();
     _srs_pps_ids->update(); _srs_pps_fids->update(); _srs_pps_fids_level0->update();
     _srs_pps_pli->update(); _srs_pps_twcc->update(); _srs_pps_rr->update();
     _srs_pps_snack->update(); _srs_pps_snack2->update(); _srs_pps_sanack->update(); _srs_pps_svnack->update();
     _srs_pps_rnack->update(); _srs_pps_rnack2->update();
 
     // TODO: FIXME: Show more data for RTC server.
-    srs_trace("RTC: Server conns=%u, rpkts=%d,%d,%d,%d,%d,%d, fid=%d,%d,%d, rtcp=%d,%d,%d, snk=%d,%d,%d,%d, rnk=%d,%d",
+    srs_trace("RTC: Server conns=%u, rpkts=%d,%d,%d,%d,%d,%d, spkts=%d,%d,%d,%d,%d, fid=%d,%d,%d, rtcp=%d,%d,%d, snk=%d,%d,%d,%d, rnk=%d,%d",
         nn_rtc_conns,
-        _srs_pps_rpkts->r10s(), _srs_pps_rstuns->r10s(), _srs_pps_rrtps->r10s(), _srs_pps_rrtcps->r10s(), _srs_pps_addrs->r10s(), _srs_pps_fast_addrs->r10s(),
+        _srs_pps_rpkts->r10s(), _srs_pps_rrtps->r10s(), _srs_pps_rstuns->r10s(), _srs_pps_rrtcps->r10s(), _srs_pps_addrs->r10s(), _srs_pps_fast_addrs->r10s(),
+        _srs_pps_spkts->r10s(), _srs_pps_srtps->r10s(), _srs_pps_sstuns->r10s(), _srs_pps_stwcc->r10s(), _srs_pps_srtcps->r10s(),
         _srs_pps_ids->r10s(), _srs_pps_fids->r10s(), _srs_pps_fids_level0->r10s(),
         _srs_pps_pli->r10s(), _srs_pps_twcc->r10s(), _srs_pps_rr->r10s(),
         _srs_pps_snack->r10s(), _srs_pps_snack2->r10s(), _srs_pps_sanack->r10s(), _srs_pps_svnack->r10s(),

From b9352eac0c3d16e6770ab97c6afa8cfb0b2bb018 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Wed, 24 Feb 2021 18:39:07 +0800
Subject: [PATCH 007/102] RTC: Refine stat logs

---
 trunk/src/app/srs_app_rtc_conn.cpp   |  3 +--
 trunk/src/app/srs_app_rtc_server.cpp | 23 ++++++++++++-----------
 trunk/src/app/srs_app_rtc_source.cpp |  4 ++++
 3 files changed, 17 insertions(+), 13 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index dffd10b6e..1b3329fe7 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -61,7 +61,6 @@ using namespace std;
 #include <srs_protocol_kbps.hpp>
 
 SrsPps* _srs_pps_sstuns = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_stwcc = new SrsPps(_srs_clock);
 SrsPps* _srs_pps_srtcps = new SrsPps(_srs_clock);
 SrsPps* _srs_pps_srtps = new SrsPps(_srs_clock);
 
@@ -1300,7 +1299,7 @@ srs_error_t SrsRtcPublishStream::send_periodic_twcc()
         return err;
     }
 
-    ++_srs_pps_stwcc->sugar;
+    ++_srs_pps_srtcps->sugar;
 
     char pkt[kRtcpPacketSize];
     SrsBuffer *buffer = new SrsBuffer(pkt, sizeof(pkt));
diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index 49782d401..67698172f 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -54,7 +54,6 @@ extern SrsPps* _srs_pps_fast_addrs;
 
 extern SrsPps* _srs_pps_spkts;
 extern SrsPps* _srs_pps_sstuns;
-extern SrsPps* _srs_pps_stwcc;
 extern SrsPps* _srs_pps_srtcps;
 extern SrsPps* _srs_pps_srtps;
 
@@ -73,6 +72,8 @@ extern SrsPps* _srs_pps_svnack;
 
 extern SrsPps* _srs_pps_rnack;
 extern SrsPps* _srs_pps_rnack2;
+extern SrsPps* _srs_pps_rhnack;
+extern SrsPps* _srs_pps_rmnack;
 
 SrsRtcBlackhole::SrsRtcBlackhole()
 {
@@ -675,22 +676,22 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
     }
 
     // Update the pps stat for UDP socket and adddresses.
-    _srs_pps_rpkts->update(); _srs_pps_rrtps->update(); _srs_pps_rstuns->update(); _srs_pps_rrtcps->update(); _srs_pps_addrs->update(); _srs_pps_fast_addrs->update();
-    _srs_pps_spkts->update(); _srs_pps_srtps->update(); _srs_pps_sstuns->update(); _srs_pps_stwcc->update(); _srs_pps_srtcps->update();
-    _srs_pps_ids->update(); _srs_pps_fids->update(); _srs_pps_fids_level0->update();
+    _srs_pps_rpkts->update(); _srs_pps_rrtps->update(); _srs_pps_rstuns->update(); _srs_pps_rrtcps->update();
+    _srs_pps_spkts->update(); _srs_pps_srtps->update(); _srs_pps_sstuns->update(); _srs_pps_srtcps->update();
     _srs_pps_pli->update(); _srs_pps_twcc->update(); _srs_pps_rr->update();
     _srs_pps_snack->update(); _srs_pps_snack2->update(); _srs_pps_sanack->update(); _srs_pps_svnack->update();
-    _srs_pps_rnack->update(); _srs_pps_rnack2->update();
+    _srs_pps_rnack->update(); _srs_pps_rnack2->update(); _srs_pps_rhnack->update(); _srs_pps_rmnack->update();
+    _srs_pps_ids->update(); _srs_pps_fids->update(); _srs_pps_fids_level0->update(); _srs_pps_addrs->update(); _srs_pps_fast_addrs->update();
 
     // TODO: FIXME: Show more data for RTC server.
-    srs_trace("RTC: Server conns=%u, rpkts=%d,%d,%d,%d,%d,%d, spkts=%d,%d,%d,%d,%d, fid=%d,%d,%d, rtcp=%d,%d,%d, snk=%d,%d,%d,%d, rnk=%d,%d",
+    srs_trace("RTC: Server conns=%u, rpkts=%d,%d,%d,%d, spkts=%d,%d,%d,%d, rtcp=%d,%d,%d, snk=%d,%d,%d,%d, rnk=%d,%d,%d,%d, fid=%d,%d,%d,%d,%d",
         nn_rtc_conns,
-        _srs_pps_rpkts->r10s(), _srs_pps_rrtps->r10s(), _srs_pps_rstuns->r10s(), _srs_pps_rrtcps->r10s(), _srs_pps_addrs->r10s(), _srs_pps_fast_addrs->r10s(),
-        _srs_pps_spkts->r10s(), _srs_pps_srtps->r10s(), _srs_pps_sstuns->r10s(), _srs_pps_stwcc->r10s(), _srs_pps_srtcps->r10s(),
-        _srs_pps_ids->r10s(), _srs_pps_fids->r10s(), _srs_pps_fids_level0->r10s(),
+        _srs_pps_rpkts->r10s(), _srs_pps_rrtps->r10s(), _srs_pps_rstuns->r10s(), _srs_pps_rrtcps->r10s(),
+        _srs_pps_spkts->r10s(), _srs_pps_srtps->r10s(), _srs_pps_sstuns->r10s(), _srs_pps_srtcps->r10s(),
         _srs_pps_pli->r10s(), _srs_pps_twcc->r10s(), _srs_pps_rr->r10s(),
-        _srs_pps_snack->r10s(), _srs_pps_snack2->r10s(), _srs_pps_sanack->r10s(), _srs_pps_svnack->r10s(),
-        _srs_pps_rnack->r10s(), _srs_pps_rnack2->r10s()
+        _srs_pps_snack->r10s(), _srs_pps_sanack->r10s(), _srs_pps_svnack->r10s(), _srs_pps_snack2->r10s(),
+        _srs_pps_rnack->r10s(), _srs_pps_rnack2->r10s(), _srs_pps_rhnack->r10s(), _srs_pps_rmnack->r10s(),
+        _srs_pps_ids->r10s(), _srs_pps_fids->r10s(), _srs_pps_fids_level0->r10s(), _srs_pps_addrs->r10s(), _srs_pps_fast_addrs->r10s()
     );
 
     return err;
diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index 5adb0c905..eb5d30f20 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -58,6 +58,8 @@ SrsPps* _srs_pps_svnack = new SrsPps(_srs_clock);
 
 SrsPps* _srs_pps_rnack = new SrsPps(_srs_clock);
 SrsPps* _srs_pps_rnack2 = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_rhnack = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_rmnack = new SrsPps(_srs_clock);
 
 // Firefox defaults as 109, Chrome is 111.
 const int kAudioPayloadType     = 111;
@@ -2002,8 +2004,10 @@ SrsRtpPacket2* SrsRtcSendTrack::fetch_rtp_packet(uint16_t seq)
     // For NACK, it sequence must match exactly, or it cause SRTP fail.
     // Return packet only when sequence is equal.
     if (pkt->header.get_sequence() == seq) {
+        ++_srs_pps_rhnack->sugar;
         return pkt;
     }
+    ++_srs_pps_rmnack->sugar;
 
     // Ignore if sequence not match.
     uint32_t nn = 0;

From 9ab12f9f2f45966b0d699a5d18e4e44effff8430 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Wed, 24 Feb 2021 18:53:49 +0800
Subject: [PATCH 008/102] RTC: Stat the drop of UDP packets.

---
 trunk/src/app/srs_app_rtc_server.cpp |  6 +-
 trunk/src/app/srs_app_server.cpp     |  5 ++
 trunk/src/app/srs_app_utility.cpp    | 88 ++++++++++++++++++++++++++++
 trunk/src/app/srs_app_utility.hpp    | 42 +++++++++++++
 4 files changed, 140 insertions(+), 1 deletion(-)

diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index 67698172f..1a8c9dbf7 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -675,6 +675,9 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
         return err;
     }
 
+    // Show udp snmp statistic for RTC server.
+    SrsSnmpUdpStat* s = srs_get_udp_snmp_stat();
+
     // Update the pps stat for UDP socket and adddresses.
     _srs_pps_rpkts->update(); _srs_pps_rrtps->update(); _srs_pps_rstuns->update(); _srs_pps_rrtcps->update();
     _srs_pps_spkts->update(); _srs_pps_srtps->update(); _srs_pps_sstuns->update(); _srs_pps_srtcps->update();
@@ -684,13 +687,14 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
     _srs_pps_ids->update(); _srs_pps_fids->update(); _srs_pps_fids_level0->update(); _srs_pps_addrs->update(); _srs_pps_fast_addrs->update();
 
     // TODO: FIXME: Show more data for RTC server.
-    srs_trace("RTC: Server conns=%u, rpkts=%d,%d,%d,%d, spkts=%d,%d,%d,%d, rtcp=%d,%d,%d, snk=%d,%d,%d,%d, rnk=%d,%d,%d,%d, fid=%d,%d,%d,%d,%d",
+    srs_trace("RTC: Server conns=%u, rpkts=%d,%d,%d,%d, spkts=%d,%d,%d,%d, rtcp=%d,%d,%d, snk=%d,%d,%d,%d, rnk=%d,%d,%d,%d, drop=%d,%d, fid=%d,%d,%d,%d,%d",
         nn_rtc_conns,
         _srs_pps_rpkts->r10s(), _srs_pps_rrtps->r10s(), _srs_pps_rstuns->r10s(), _srs_pps_rrtcps->r10s(),
         _srs_pps_spkts->r10s(), _srs_pps_srtps->r10s(), _srs_pps_sstuns->r10s(), _srs_pps_srtcps->r10s(),
         _srs_pps_pli->r10s(), _srs_pps_twcc->r10s(), _srs_pps_rr->r10s(),
         _srs_pps_snack->r10s(), _srs_pps_sanack->r10s(), _srs_pps_svnack->r10s(), _srs_pps_snack2->r10s(),
         _srs_pps_rnack->r10s(), _srs_pps_rnack2->r10s(), _srs_pps_rhnack->r10s(), _srs_pps_rmnack->r10s(),
+        s->rcv_buf_errors_delta, s->snd_buf_errors_delta,
         _srs_pps_ids->r10s(), _srs_pps_fids->r10s(), _srs_pps_fids_level0->r10s(), _srs_pps_addrs->r10s(), _srs_pps_fast_addrs->r10s()
     );
 
diff --git a/trunk/src/app/srs_app_server.cpp b/trunk/src/app/srs_app_server.cpp
index 39141bf55..cf3f553d6 100644
--- a/trunk/src/app/srs_app_server.cpp
+++ b/trunk/src/app/srs_app_server.cpp
@@ -1280,6 +1280,10 @@ srs_error_t SrsServer::setup_ticks()
         if ((err = timer_->tick(8, 3 * SRS_UTIME_SECONDS)) != srs_success) {
             return srs_error_wrap(err, "tick");
         }
+
+        if ((err = timer_->tick(10, 9 * SRS_UTIME_SECONDS)) != srs_success) {
+            return srs_error_wrap(err, "tick");
+        }
     }
 
     if (_srs_config->get_heartbeat_enabled()) {
@@ -1308,6 +1312,7 @@ srs_error_t SrsServer::notify(int event, srs_utime_t interval, srs_utime_t tick)
         case 7: srs_update_network_devices(); break;
         case 8: resample_kbps(); break;
         case 9: http_heartbeat->heartbeat(); break;
+        case 10: srs_update_udp_snmp_statistic(); break;
     }
 
     return err;
diff --git a/trunk/src/app/srs_app_utility.cpp b/trunk/src/app/srs_app_utility.cpp
index bde16dc83..a7251cf22 100644
--- a/trunk/src/app/srs_app_utility.cpp
+++ b/trunk/src/app/srs_app_utility.cpp
@@ -851,6 +851,94 @@ void srs_update_platform_info()
     r.ok = true;
 }
 
+SrsSnmpUdpStat::SrsSnmpUdpStat()
+{
+    ok = false;
+
+    in_datagrams = 0;
+    no_ports = 0;
+    in_errors = 0;
+    out_datagrams = 0;
+    rcv_buf_errors = 0;
+    snd_buf_errors = 0;
+    in_csum_errors = 0;
+
+    rcv_buf_errors_delta = 0;
+    snd_buf_errors_delta = 0;
+}
+
+SrsSnmpUdpStat::~SrsSnmpUdpStat()
+{
+}
+
+static SrsSnmpUdpStat _srs_snmp_udp_stat;
+
+bool get_udp_snmp_statistic(SrsSnmpUdpStat& r)
+{
+#ifndef SRS_OSX
+    if (true) {
+        FILE* f = fopen("/proc/net/snmp", "r");
+        if (f == NULL) {
+            srs_warn("open proc network snmp failed, ignore");
+            return false;
+        }
+
+        // ignore title.
+        static char buf[1024];
+        fgets(buf, sizeof(buf), f);
+
+        while (fgets(buf, sizeof(buf), f)) {
+            // udp stat title
+            if (strncmp(buf, "Udp: ", 5) == 0) {
+                // read tcp stat data
+                if (!fgets(buf, sizeof(buf), f)) {
+                    break;
+                }
+                // parse tcp stat data
+                if (strncmp(buf, "Udp: ", 5) == 0) {
+                    sscanf(buf + 5, "%llu %llu %llu %llu %llu %llu %llu\n",
+                        &r.in_datagrams,
+                        &r.no_ports,
+                        &r.in_errors,
+                        &r.out_datagrams,
+                        &r.rcv_buf_errors,
+                        &r.snd_buf_errors,
+                        &r.in_csum_errors);
+                }
+            }
+        }
+        fclose(f);
+    }
+#endif
+    r.ok = true;
+
+    return true;
+}
+
+SrsSnmpUdpStat* srs_get_udp_snmp_stat()
+{
+    return &_srs_snmp_udp_stat;
+}
+
+void srs_update_udp_snmp_statistic()
+{
+    SrsSnmpUdpStat r;
+    if (!get_udp_snmp_statistic(r)) {
+        return;
+    }
+
+    SrsSnmpUdpStat& o = _srs_snmp_udp_stat;
+    if (o.rcv_buf_errors > 0) {
+        r.rcv_buf_errors_delta = int(r.rcv_buf_errors - o.rcv_buf_errors);
+    }
+
+    if (o.snd_buf_errors > 0) {
+        r.snd_buf_errors_delta = int(r.snd_buf_errors - o.snd_buf_errors);
+    }
+
+    _srs_snmp_udp_stat = r;
+}
+
 SrsNetworkDevices::SrsNetworkDevices()
 {
     ok = false;
diff --git a/trunk/src/app/srs_app_utility.hpp b/trunk/src/app/srs_app_utility.hpp
index 63bfef577..117f7e67d 100644
--- a/trunk/src/app/srs_app_utility.hpp
+++ b/trunk/src/app/srs_app_utility.hpp
@@ -547,6 +547,48 @@ extern SrsPlatformInfo* srs_get_platform_info();
 // The daemon st-thread will update it.
 extern void srs_update_platform_info();
 
+class SrsSnmpUdpStat
+{
+public:
+    // Whether the data is ok.
+    bool ok;
+    // send and recv buffer error delta
+    int rcv_buf_errors_delta;
+    int snd_buf_errors_delta;
+
+public:
+    // @see: cat /proc/uptimecat /proc/net/snmp|grep 'Udp:'
+    // @see: https://blog.packagecloud.io/eng/2017/02/06/monitoring-tuning-linux-networking-stack-sending-data/#procnetsnmp
+    // InDatagrams: incremented when recvmsg was used by a userland program to read datagram.
+    // also incremented when a UDP packet is encapsulated and sent back for processing.
+    unsigned long long in_datagrams;
+    // NoPorts: incremented when UDP packets arrive destined for a port where no program is listening.
+    unsigned long long no_ports;
+    // InErrors: incremented in several cases: no memory in the receive queue, when a bad checksum is seen,
+    // and if sk_add_backlog fails to add the datagram.
+    unsigned long long in_errors;
+    // OutDatagrams: incremented when a UDP packet is handed down without error to the IP protocol layer to be sent.
+    unsigned long long out_datagrams;
+    // RcvbufErrors: incremented when sock_queue_rcv_skb reports that no memory is available;
+    // this happens if sk->sk_rmem_alloc is greater than or equal to sk->sk_rcvbuf.
+    unsigned long long rcv_buf_errors;
+    // SndbufErrors: incremented if the IP protocol layer reported an error when trying to send the packet
+    // and no error queue has been setup. also incremented if no send queue space or kernel memory are available.
+    unsigned long long snd_buf_errors;
+    // InCsumErrors: incremented when a UDP checksum failure is detected.
+    // Note that in all cases I could find, InCsumErrors is incremented at the same time as InErrors.
+    // Thus, InErrors - InCsumErros should yield the count of memory related errors on the receive side.
+    unsigned long long in_csum_errors;
+public:
+    SrsSnmpUdpStat();
+    ~SrsSnmpUdpStat();
+};
+
+// Get SNMP udp statistic, use cache to avoid performance problem.
+extern SrsSnmpUdpStat* srs_get_udp_snmp_stat();
+// The daemon st-thread will update it.
+void srs_update_udp_snmp_statistic();
+
 // The network device summary for each network device, for example, eth0, eth1, ethN
 class SrsNetworkDevices
 {

From 5ff9977572e7f82572432388324c2d62e3ad78b8 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Wed, 24 Feb 2021 20:56:17 +0800
Subject: [PATCH 009/102] Perf: Improve fast find for pithy print

---
 trunk/src/app/srs_app_pithy_print.cpp | 11 +++++++++--
 trunk/src/app/srs_app_pithy_print.hpp |  1 +
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/trunk/src/app/srs_app_pithy_print.cpp b/trunk/src/app/srs_app_pithy_print.cpp
index f408d08c5..ebf70def8 100644
--- a/trunk/src/app/srs_app_pithy_print.cpp
+++ b/trunk/src/app/srs_app_pithy_print.cpp
@@ -171,6 +171,7 @@ static SrsStageManager* _srs_stages = new SrsStageManager();
 SrsPithyPrint::SrsPithyPrint(int _stage_id)
 {
     stage_id = _stage_id;
+    cache_ = NULL;
     client_id = enter_stage();
     previous_tick = srs_get_system_time();
     _age = 0;
@@ -308,7 +309,10 @@ void SrsPithyPrint::leave_stage()
 
 void SrsPithyPrint::elapse()
 {
-    SrsStageInfo* stage = _srs_stages->fetch_or_create(stage_id);
+    SrsStageInfo* stage = cache_;
+    if (!stage) {
+        stage = cache_ = _srs_stages->fetch_or_create(stage_id);
+    }
     srs_assert(stage != NULL);
     
     srs_utime_t diff = srs_get_system_time() - previous_tick;
@@ -321,7 +325,10 @@ void SrsPithyPrint::elapse()
 
 bool SrsPithyPrint::can_print()
 {
-    SrsStageInfo* stage = _srs_stages->fetch_or_create(stage_id);
+    SrsStageInfo* stage = cache_;
+    if (!stage) {
+        stage = cache_ = _srs_stages->fetch_or_create(stage_id);
+    }
     srs_assert(stage != NULL);
     
     return stage->can_print();
diff --git a/trunk/src/app/srs_app_pithy_print.hpp b/trunk/src/app/srs_app_pithy_print.hpp
index 0fa3b6da2..bc966db98 100644
--- a/trunk/src/app/srs_app_pithy_print.hpp
+++ b/trunk/src/app/srs_app_pithy_print.hpp
@@ -111,6 +111,7 @@ class SrsPithyPrint
 {
 private:
     int client_id;
+    SrsStageInfo* cache_;
     int stage_id;
     srs_utime_t _age;
     srs_utime_t previous_tick;

From df6e47ebfc6f12b43d8f9affde8e79b7031213df Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Thu, 25 Feb 2021 12:32:58 +0800
Subject: [PATCH 010/102] RTC: Refine stat for RTC server

---
 trunk/src/app/srs_app_rtc_server.cpp | 68 ++++++++++++++++++++--------
 1 file changed, 50 insertions(+), 18 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index 1a8c9dbf7..455696cce 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -674,28 +674,60 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
     if (!nn_rtc_conns) {
         return err;
     }
+    static char buf[128];
 
-    // Show udp snmp statistic for RTC server.
-    SrsSnmpUdpStat* s = srs_get_udp_snmp_stat();
-
-    // Update the pps stat for UDP socket and adddresses.
+    string rpkts_desc;
     _srs_pps_rpkts->update(); _srs_pps_rrtps->update(); _srs_pps_rstuns->update(); _srs_pps_rrtcps->update();
-    _srs_pps_spkts->update(); _srs_pps_srtps->update(); _srs_pps_sstuns->update(); _srs_pps_srtcps->update();
-    _srs_pps_pli->update(); _srs_pps_twcc->update(); _srs_pps_rr->update();
-    _srs_pps_snack->update(); _srs_pps_snack2->update(); _srs_pps_sanack->update(); _srs_pps_svnack->update();
-    _srs_pps_rnack->update(); _srs_pps_rnack2->update(); _srs_pps_rhnack->update(); _srs_pps_rmnack->update();
-    _srs_pps_ids->update(); _srs_pps_fids->update(); _srs_pps_fids_level0->update(); _srs_pps_addrs->update(); _srs_pps_fast_addrs->update();
+    if (_srs_pps_rpkts->r10s() || _srs_pps_rrtps->r10s() || _srs_pps_rstuns->r10s() || _srs_pps_rrtcps->r10s()) {
+        snprintf(buf, sizeof(buf), ", rpkts=%d,%d,%d,%d", _srs_pps_rpkts->r10s(), _srs_pps_rrtps->r10s(), _srs_pps_rstuns->r10s(), _srs_pps_rrtcps->r10s());
+        rpkts_desc = buf;
+    }
 
-    // TODO: FIXME: Show more data for RTC server.
-    srs_trace("RTC: Server conns=%u, rpkts=%d,%d,%d,%d, spkts=%d,%d,%d,%d, rtcp=%d,%d,%d, snk=%d,%d,%d,%d, rnk=%d,%d,%d,%d, drop=%d,%d, fid=%d,%d,%d,%d,%d",
+    string spkts_desc;
+    _srs_pps_spkts->update(); _srs_pps_srtps->update(); _srs_pps_sstuns->update(); _srs_pps_srtcps->update();
+    if (_srs_pps_spkts->r10s() || _srs_pps_srtps->r10s() || _srs_pps_sstuns->r10s() || _srs_pps_srtcps->r10s()) {
+        snprintf(buf, sizeof(buf), ", spkts=%d,%d,%d,%d", _srs_pps_spkts->r10s(), _srs_pps_srtps->r10s(), _srs_pps_sstuns->r10s(), _srs_pps_srtcps->r10s());
+        spkts_desc = buf;
+    }
+
+    string rtcp_desc;
+    _srs_pps_pli->update(); _srs_pps_twcc->update(); _srs_pps_rr->update();
+    if (_srs_pps_pli->r10s() || _srs_pps_twcc->r10s() || _srs_pps_rr->r10s()) {
+        snprintf(buf, sizeof(buf), ", rtcp=%d,%d,%d", _srs_pps_pli->r10s(), _srs_pps_twcc->r10s(), _srs_pps_rr->r10s());
+        rtcp_desc = buf;
+    }
+
+    string snk_desc;
+    _srs_pps_snack->update(); _srs_pps_snack2->update(); _srs_pps_sanack->update(); _srs_pps_svnack->update();
+    if (_srs_pps_snack->r10s() || _srs_pps_sanack->r10s() || _srs_pps_svnack->r10s() || _srs_pps_snack2->r10s()) {
+        snprintf(buf, sizeof(buf), ", snk=%d,%d,%d,%d", _srs_pps_snack->r10s(), _srs_pps_sanack->r10s(), _srs_pps_svnack->r10s(), _srs_pps_snack2->r10s());
+        snk_desc = buf;
+    }
+
+    string rnk_desc;
+    _srs_pps_rnack->update(); _srs_pps_rnack2->update(); _srs_pps_rhnack->update(); _srs_pps_rmnack->update();
+    if (_srs_pps_rnack->r10s() || _srs_pps_rnack2->r10s() || _srs_pps_rhnack->r10s() || _srs_pps_rmnack->r10s()) {
+        snprintf(buf, sizeof(buf), ", rnk=%d,%d,%d,%d", _srs_pps_rnack->r10s(), _srs_pps_rnack2->r10s(), _srs_pps_rhnack->r10s(), _srs_pps_rmnack->r10s());
+        rnk_desc = buf;
+    }
+
+    string drop_desc;
+    SrsSnmpUdpStat* s = srs_get_udp_snmp_stat();
+    if (s->rcv_buf_errors_delta || s->snd_buf_errors_delta) {
+        snprintf(buf, sizeof(buf), ", drop=%d,%d", s->rcv_buf_errors_delta, s->snd_buf_errors_delta);
+        drop_desc = buf;
+    }
+
+    string fid_desc;
+    _srs_pps_ids->update(); _srs_pps_fids->update(); _srs_pps_fids_level0->update(); _srs_pps_addrs->update(); _srs_pps_fast_addrs->update();
+    if (_srs_pps_ids->r10s(), _srs_pps_fids->r10s(), _srs_pps_fids_level0->r10s(), _srs_pps_addrs->r10s(), _srs_pps_fast_addrs->r10s()) {
+        snprintf(buf, sizeof(buf), ", fid=%d,%d,%d,%d,%d", _srs_pps_ids->r10s(), _srs_pps_fids->r10s(), _srs_pps_fids_level0->r10s(), _srs_pps_addrs->r10s(), _srs_pps_fast_addrs->r10s());
+        fid_desc = buf;
+    }
+
+    srs_trace("RTC: Server conns=%u%s%s%s%s%s%s%s",
         nn_rtc_conns,
-        _srs_pps_rpkts->r10s(), _srs_pps_rrtps->r10s(), _srs_pps_rstuns->r10s(), _srs_pps_rrtcps->r10s(),
-        _srs_pps_spkts->r10s(), _srs_pps_srtps->r10s(), _srs_pps_sstuns->r10s(), _srs_pps_srtcps->r10s(),
-        _srs_pps_pli->r10s(), _srs_pps_twcc->r10s(), _srs_pps_rr->r10s(),
-        _srs_pps_snack->r10s(), _srs_pps_sanack->r10s(), _srs_pps_svnack->r10s(), _srs_pps_snack2->r10s(),
-        _srs_pps_rnack->r10s(), _srs_pps_rnack2->r10s(), _srs_pps_rhnack->r10s(), _srs_pps_rmnack->r10s(),
-        s->rcv_buf_errors_delta, s->snd_buf_errors_delta,
-        _srs_pps_ids->r10s(), _srs_pps_fids->r10s(), _srs_pps_fids_level0->r10s(), _srs_pps_addrs->r10s(), _srs_pps_fast_addrs->r10s()
+        rpkts_desc.c_str(), spkts_desc.c_str(), rtcp_desc.c_str(), snk_desc.c_str(), rnk_desc.c_str(), drop_desc.c_str(), fid_desc.c_str()
     );
 
     return err;

From d8ba72fdc5484fb94e05ed431d6e21d6097bf8b6 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Thu, 25 Feb 2021 13:46:52 +0800
Subject: [PATCH 011/102] Kernel: Extract SrsPps to kernel

---
 trunk/configure                          |   3 +-
 trunk/src/app/srs_app_rtc_server.cpp     |  13 ++-
 trunk/src/kernel/srs_kernel_kbps.cpp     | 123 +++++++++++++++++++++++
 trunk/src/kernel/srs_kernel_kbps.hpp     |  93 +++++++++++++++++
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp  |   6 ++
 trunk/src/protocol/srs_protocol_kbps.cpp |  96 ------------------
 trunk/src/protocol/srs_protocol_kbps.hpp |  63 +-----------
 7 files changed, 236 insertions(+), 161 deletions(-)
 create mode 100644 trunk/src/kernel/srs_kernel_kbps.cpp
 create mode 100644 trunk/src/kernel/srs_kernel_kbps.hpp

diff --git a/trunk/configure b/trunk/configure
index 2a715da88..02dc2a0cc 100755
--- a/trunk/configure
+++ b/trunk/configure
@@ -216,7 +216,8 @@ ModuleLibIncs=(${SRS_OBJS_DIR} ${LibSSLRoot})
 MODULE_FILES=("srs_kernel_error" "srs_kernel_log" "srs_kernel_buffer"
         "srs_kernel_utility" "srs_kernel_flv" "srs_kernel_codec" "srs_kernel_io"
         "srs_kernel_consts" "srs_kernel_aac" "srs_kernel_mp3" "srs_kernel_ts"
-        "srs_kernel_stream" "srs_kernel_balance" "srs_kernel_mp4" "srs_kernel_file")
+        "srs_kernel_stream" "srs_kernel_balance" "srs_kernel_mp4" "srs_kernel_file"
+        "srs_kernel_kbps")
 if [[ $SRS_RTC == YES ]]; then
     MODULE_FILES+=("srs_kernel_rtc_rtp" "srs_kernel_rtc_rtcp")
 fi
diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index 455696cce..5dc93c269 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -75,6 +75,8 @@ extern SrsPps* _srs_pps_rnack2;
 extern SrsPps* _srs_pps_rhnack;
 extern SrsPps* _srs_pps_rmnack;
 
+extern SrsPps* _srs_pps_objs_rtps;
+
 SrsRtcBlackhole::SrsRtcBlackhole()
 {
     blackhole = false;
@@ -676,6 +678,13 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
     }
     static char buf[128];
 
+    string objs_desc;
+    _srs_pps_objs_rtps->update();
+    if (_srs_pps_objs_rtps->r10s()) {
+        snprintf(buf, sizeof(buf), ", objs=%d", _srs_pps_objs_rtps->r10s());
+        objs_desc = buf;
+    }
+
     string rpkts_desc;
     _srs_pps_rpkts->update(); _srs_pps_rrtps->update(); _srs_pps_rstuns->update(); _srs_pps_rrtcps->update();
     if (_srs_pps_rpkts->r10s() || _srs_pps_rrtps->r10s() || _srs_pps_rstuns->r10s() || _srs_pps_rrtcps->r10s()) {
@@ -725,9 +734,9 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
         fid_desc = buf;
     }
 
-    srs_trace("RTC: Server conns=%u%s%s%s%s%s%s%s",
+    srs_trace("RTC: Server conns=%u%s%s%s%s%s%s%s%s",
         nn_rtc_conns,
-        rpkts_desc.c_str(), spkts_desc.c_str(), rtcp_desc.c_str(), snk_desc.c_str(), rnk_desc.c_str(), drop_desc.c_str(), fid_desc.c_str()
+        rpkts_desc.c_str(), spkts_desc.c_str(), rtcp_desc.c_str(), snk_desc.c_str(), rnk_desc.c_str(), drop_desc.c_str(), fid_desc.c_str(), objs_desc.c_str()
     );
 
     return err;
diff --git a/trunk/src/kernel/srs_kernel_kbps.cpp b/trunk/src/kernel/srs_kernel_kbps.cpp
new file mode 100644
index 000000000..c76f4c33e
--- /dev/null
+++ b/trunk/src/kernel/srs_kernel_kbps.cpp
@@ -0,0 +1,123 @@
+/**
+ * The MIT License (MIT)
+ *
+ * Copyright (c) 2013-2020 Winlin
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy of
+ * this software and associated documentation files (the "Software"), to deal in
+ * the Software without restriction, including without limitation the rights to
+ * use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+ * the Software, and to permit persons to whom the Software is furnished to do so,
+ * subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in all
+ * copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+ * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+ * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+ * IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+ * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+ */
+
+#include <srs_kernel_kbps.hpp>
+
+#include <srs_kernel_utility.hpp>
+
+SrsRateSample::SrsRateSample()
+{
+    total = time = -1;
+    rate = 0;
+}
+
+SrsRateSample::~SrsRateSample()
+{
+}
+
+SrsRateSample* SrsRateSample::update(int64_t nn, srs_utime_t t, int k)
+{
+    total = nn;
+    time = t;
+    rate = k;
+    return this;
+}
+
+void srs_pps_init(SrsRateSample& sample, int64_t nn, srs_utime_t now)
+{
+    if (sample.time < 0 || nn < sample.total) {
+        sample.update(nn, now, 0);
+    }
+}
+
+void srs_pps_update(SrsRateSample& sample, int64_t nn, srs_utime_t now)
+{
+    int pps = (int)((nn - sample.total) * 1000 / srsu2ms(now - sample.time));
+    if (pps == 0 && nn > sample.total) {
+        pps = 1; // For pps in (0, 1), we set to 1.
+    }
+    sample.update(nn, now, pps);
+}
+
+SrsPps::SrsPps(SrsWallClock* c)
+{
+    clk_ = c;
+    sugar = 0;
+}
+
+SrsPps::~SrsPps()
+{
+}
+
+void SrsPps::update()
+{
+    update(sugar);
+}
+
+void SrsPps::update(int64_t nn)
+{
+    srs_utime_t now = clk_->now();
+
+    srs_pps_init(sample_10s_, nn, now);
+    srs_pps_init(sample_30s_, nn, now);
+    srs_pps_init(sample_1m_, nn, now);
+    srs_pps_init(sample_5m_, nn, now);
+    srs_pps_init(sample_60m_, nn, now);
+
+    if (now - sample_10s_.time >= 10 * SRS_UTIME_SECONDS) {
+        srs_pps_update(sample_10s_, nn, now);
+    }
+    if (now - sample_30s_.time >= 30 * SRS_UTIME_SECONDS) {
+        srs_pps_update(sample_30s_, nn, now);
+    }
+    if (now - sample_1m_.time >= 60 * SRS_UTIME_SECONDS) {
+        srs_pps_update(sample_1m_, nn, now);
+    }
+    if (now - sample_5m_.time >= 300 * SRS_UTIME_SECONDS) {
+        srs_pps_update(sample_5m_, nn, now);
+    }
+    if (now - sample_60m_.time >= 3600 * SRS_UTIME_SECONDS) {
+        srs_pps_update(sample_60m_, nn, now);
+    }
+}
+
+int SrsPps::r10s()
+{
+    return sample_10s_.rate;
+}
+
+SrsWallClock::SrsWallClock()
+{
+}
+
+SrsWallClock::~SrsWallClock()
+{
+}
+
+srs_utime_t SrsWallClock::now()
+{
+    return srs_get_system_time();
+}
+
+SrsWallClock* _srs_clock = new SrsWallClock();
+
diff --git a/trunk/src/kernel/srs_kernel_kbps.hpp b/trunk/src/kernel/srs_kernel_kbps.hpp
new file mode 100644
index 000000000..deddf8166
--- /dev/null
+++ b/trunk/src/kernel/srs_kernel_kbps.hpp
@@ -0,0 +1,93 @@
+/**
+ * The MIT License (MIT)
+ *
+ * Copyright (c) 2013-2020 Winlin
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy of
+ * this software and associated documentation files (the "Software"), to deal in
+ * the Software without restriction, including without limitation the rights to
+ * use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+ * the Software, and to permit persons to whom the Software is furnished to do so,
+ * subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in all
+ * copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+ * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+ * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+ * IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+ * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+ */
+
+#ifndef SRS_KERNEL_KBPS_HPP
+#define SRS_KERNEL_KBPS_HPP
+
+#include <srs_core.hpp>
+
+#include <srs_kernel_kbps.hpp>
+
+class SrsWallClock;
+
+// A sample for rate-based stat, such as kbps or kps.
+class SrsRateSample
+{
+public:
+    int64_t total;
+    srs_utime_t time;
+    // kbps or kps
+    int rate;
+public:
+    SrsRateSample();
+    virtual ~SrsRateSample();
+public:
+    virtual SrsRateSample* update(int64_t nn, srs_utime_t t, int k);
+};
+
+// A pps manager every some duration.
+class SrsPps
+{
+private:
+    SrsWallClock* clk_;
+private:
+    // samples
+    SrsRateSample sample_10s_;
+    SrsRateSample sample_30s_;
+    SrsRateSample sample_1m_;
+    SrsRateSample sample_5m_;
+    SrsRateSample sample_60m_;
+public:
+    // Sugar for target to stat.
+    int64_t sugar;
+public:
+    SrsPps(SrsWallClock* clk);
+    virtual ~SrsPps();
+public:
+    // Update with the nn which is target.
+    void update();
+    // Update with the nn.
+    void update(int64_t nn);
+    // Get the 10s average stat.
+    int r10s();
+};
+
+/**
+ * A time source to provide wall clock.
+ */
+class SrsWallClock
+{
+public:
+    SrsWallClock();
+    virtual ~SrsWallClock();
+public:
+    /**
+     * Current time in srs_utime_t.
+     */
+    virtual srs_utime_t now();
+};
+
+// The global clock.
+extern SrsWallClock* _srs_clock;
+
+#endif
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index a542d59b4..806ba3e67 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -34,6 +34,10 @@ using namespace std;
 #include <srs_kernel_utility.hpp>
 #include <srs_kernel_flv.hpp>
 
+#include <srs_kernel_kbps.hpp>
+
+SrsPps* _srs_pps_objs_rtps = new SrsPps(_srs_clock);
+
 /* @see https://tools.ietf.org/html/rfc1889#section-5.1
   0                   1                   2                   3
   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
@@ -764,6 +768,8 @@ SrsRtpPacket2::SrsRtpPacket2()
     shared_msg = NULL;
     frame_type = SrsFrameTypeReserved;
     cached_payload_size = 0;
+
+    ++_srs_pps_objs_rtps->sugar;
 }
 
 SrsRtpPacket2::~SrsRtpPacket2()
diff --git a/trunk/src/protocol/srs_protocol_kbps.cpp b/trunk/src/protocol/srs_protocol_kbps.cpp
index b0d4bfa0f..f0af4b210 100644
--- a/trunk/src/protocol/srs_protocol_kbps.cpp
+++ b/trunk/src/protocol/srs_protocol_kbps.cpp
@@ -25,87 +25,6 @@
 
 #include <srs_kernel_utility.hpp>
 
-SrsRateSample::SrsRateSample()
-{
-    total = time = -1;
-    rate = 0;
-}
-
-SrsRateSample::~SrsRateSample()
-{
-}
-
-SrsRateSample* SrsRateSample::update(int64_t nn, srs_utime_t t, int k)
-{
-    total = nn;
-    time = t;
-    rate = k;
-    return this;
-}
-
-void srs_pps_init(SrsRateSample& sample, int64_t nn, srs_utime_t now)
-{
-    if (sample.time < 0 || nn < sample.total) {
-        sample.update(nn, now, 0);
-    }
-}
-
-void srs_pps_update(SrsRateSample& sample, int64_t nn, srs_utime_t now)
-{
-    int pps = (int)((nn - sample.total) * 1000 / srsu2ms(now - sample.time));
-    if (pps == 0 && nn > sample.total) {
-        pps = 1; // For pps in (0, 1), we set to 1.
-    }
-    sample.update(nn, now, pps);
-}
-
-SrsPps::SrsPps(SrsWallClock* c)
-{
-    clk_ = c;
-    sugar = 0;
-}
-
-SrsPps::~SrsPps()
-{
-}
-
-void SrsPps::update()
-{
-    update(sugar);
-}
-
-void SrsPps::update(int64_t nn)
-{
-    srs_utime_t now = clk_->now();
-
-    srs_pps_init(sample_10s_, nn, now);
-    srs_pps_init(sample_30s_, nn, now);
-    srs_pps_init(sample_1m_, nn, now);
-    srs_pps_init(sample_5m_, nn, now);
-    srs_pps_init(sample_60m_, nn, now);
-
-    if (now - sample_10s_.time >= 10 * SRS_UTIME_SECONDS) {
-        srs_pps_update(sample_10s_, nn, now);
-    }
-    if (now - sample_30s_.time >= 30 * SRS_UTIME_SECONDS) {
-        srs_pps_update(sample_30s_, nn, now);
-    }
-    if (now - sample_1m_.time >= 60 * SRS_UTIME_SECONDS) {
-        srs_pps_update(sample_1m_, nn, now);
-    }
-    if (now - sample_5m_.time >= 300 * SRS_UTIME_SECONDS) {
-        srs_pps_update(sample_5m_, nn, now);
-    }
-    if (now - sample_60m_.time >= 3600 * SRS_UTIME_SECONDS) {
-        srs_pps_update(sample_60m_, nn, now);
-    }
-}
-
-int SrsPps::r10s()
-{
-    return sample_10s_.rate;
-}
-
 SrsKbpsSlice::SrsKbpsSlice(SrsWallClock* c)
 {
     clk = c;
@@ -166,19 +85,6 @@ ISrsKbpsDelta::~ISrsKbpsDelta()
 {
 }
 
-SrsWallClock::SrsWallClock()
-{
-}
-
-SrsWallClock::~SrsWallClock()
-{
-}
-
-srs_utime_t SrsWallClock::now()
-{
-    return srs_get_system_time();
-}
-
 SrsKbps::SrsKbps(SrsWallClock* c) : is(c), os(c)
 {
     clk = c;
@@ -360,5 +266,3 @@ int SrsKbps::size_memory()
     return sizeof(SrsKbps);
 }
 
-SrsWallClock* _srs_clock = new SrsWallClock();
-
diff --git a/trunk/src/protocol/srs_protocol_kbps.hpp b/trunk/src/protocol/srs_protocol_kbps.hpp
index 014038e85..429f7375b 100644
--- a/trunk/src/protocol/srs_protocol_kbps.hpp
+++ b/trunk/src/protocol/srs_protocol_kbps.hpp
@@ -27,50 +27,7 @@
 #include <srs_core.hpp>
 
 #include <srs_protocol_io.hpp>
-
-class SrsWallClock;
-
-// A sample for rate-based stat, such as kbps or kps.
-class SrsRateSample
-{
-public:
-    int64_t total;
-    srs_utime_t time;
-    // kbps or kps
-    int rate;
-public:
-    SrsRateSample();
-    virtual ~SrsRateSample();
-public:
-    virtual SrsRateSample* update(int64_t nn, srs_utime_t t, int k);
-};
-
-// A pps manager every some duration.
-class SrsPps
-{
-private:
-    SrsWallClock* clk_;
-private:
-    // samples
-    SrsRateSample sample_10s_;
-    SrsRateSample sample_30s_;
-    SrsRateSample sample_1m_;
-    SrsRateSample sample_5m_;
-    SrsRateSample sample_60m_;
-public:
-    // Sugar for target to stat.
-    int64_t sugar;
-public:
-    SrsPps(SrsWallClock* clk);
-    virtual ~SrsPps();
-public:
-    // Update with the nn which is target.
-    void update();
-    // Update with the nn.
-    void update(int64_t nn);
-    // Get the 10s average stat.
-    int r10s();
-};
+#include <srs_kernel_kbps.hpp>
 
 /**
  * a slice of kbps statistic, for input or output.
@@ -144,21 +101,6 @@ public:
     virtual void remark(int64_t* in, int64_t* out) = 0;
 };
 
-/**
- * A time source to provide wall clock.
- */
-class SrsWallClock
-{
-public:
-    SrsWallClock();
-    virtual ~SrsWallClock();
-public:
-    /**
-     * Current time in srs_utime_t.
-     */
-    virtual srs_utime_t now();
-};
-
 /**
  * to statistic the kbps of io.
  * itself can be a statistic source, for example, used for SRS bytes stat.
@@ -258,7 +200,4 @@ public:
     virtual int size_memory();
 };
 
-// The global clock.
-extern SrsWallClock* _srs_clock;
-
 #endif

From 6dac1806279b85e4a82da608ba0eb65d839eb3ce Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Thu, 25 Feb 2021 14:06:18 +0800
Subject: [PATCH 012/102] Kernel: Never depends on another globals for global
 variables

---
 trunk/src/app/srs_app_conn.cpp          |  8 +--
 trunk/src/app/srs_app_hourglass.cpp     |  2 +-
 trunk/src/app/srs_app_hybrid.cpp        | 84 ++++++++++++-------------
 trunk/src/app/srs_app_listener.cpp      |  8 +--
 trunk/src/app/srs_app_rtc_conn.cpp      | 16 ++---
 trunk/src/app/srs_app_rtc_server.cpp    |  6 +-
 trunk/src/app/srs_app_rtc_source.cpp    | 16 ++---
 trunk/src/kernel/srs_kernel_kbps.cpp    | 14 ++++-
 trunk/src/kernel/srs_kernel_kbps.hpp    |  4 +-
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp |  2 +-
 trunk/src/protocol/srs_service_log.cpp  |  4 +-
 11 files changed, 88 insertions(+), 76 deletions(-)

diff --git a/trunk/src/app/srs_app_conn.cpp b/trunk/src/app/srs_app_conn.cpp
index 17301c4c4..9851313ea 100644
--- a/trunk/src/app/srs_app_conn.cpp
+++ b/trunk/src/app/srs_app_conn.cpp
@@ -38,10 +38,10 @@ using namespace std;
 
 #include <srs_protocol_kbps.hpp>
 
-SrsPps* _srs_pps_ids = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_fids = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_fids_level0 = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_dispose = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_ids = new SrsPps();
+SrsPps* _srs_pps_fids = new SrsPps();
+SrsPps* _srs_pps_fids_level0 = new SrsPps();
+SrsPps* _srs_pps_dispose = new SrsPps();
 
 ISrsDisposingHandler::ISrsDisposingHandler()
 {
diff --git a/trunk/src/app/srs_app_hourglass.cpp b/trunk/src/app/srs_app_hourglass.cpp
index f899a8b6b..b5c84ed9a 100644
--- a/trunk/src/app/srs_app_hourglass.cpp
+++ b/trunk/src/app/srs_app_hourglass.cpp
@@ -30,7 +30,7 @@ using namespace std;
 
 #include <srs_protocol_kbps.hpp>
 
-SrsPps* _srs_pps_timer = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_timer = new SrsPps();
 
 ISrsHourGlass::ISrsHourGlass()
 {
diff --git a/trunk/src/app/srs_app_hybrid.cpp b/trunk/src/app/srs_app_hybrid.cpp
index b8645bb4f..9a310b2ae 100644
--- a/trunk/src/app/srs_app_hybrid.cpp
+++ b/trunk/src/app/srs_app_hybrid.cpp
@@ -44,10 +44,10 @@ extern unsigned long long _st_stat_recvfrom;
 extern unsigned long long _st_stat_recvfrom_eagain;
 extern unsigned long long _st_stat_sendto;
 extern unsigned long long _st_stat_sendto_eagain;
-SrsPps* _srs_pps_recvfrom = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_recvfrom_eagain = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_sendto = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_sendto_eagain = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_recvfrom = new SrsPps();
+SrsPps* _srs_pps_recvfrom_eagain = new SrsPps();
+SrsPps* _srs_pps_sendto = new SrsPps();
+SrsPps* _srs_pps_sendto_eagain = new SrsPps();
 
 extern unsigned long long _st_stat_read;
 extern unsigned long long _st_stat_read_eagain;
@@ -55,12 +55,12 @@ extern unsigned long long _st_stat_readv;
 extern unsigned long long _st_stat_readv_eagain;
 extern unsigned long long _st_stat_writev;
 extern unsigned long long _st_stat_writev_eagain;
-SrsPps* _srs_pps_read = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_read_eagain = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_readv = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_readv_eagain = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_writev = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_writev_eagain = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_read = new SrsPps();
+SrsPps* _srs_pps_read_eagain = new SrsPps();
+SrsPps* _srs_pps_readv = new SrsPps();
+SrsPps* _srs_pps_readv_eagain = new SrsPps();
+SrsPps* _srs_pps_writev = new SrsPps();
+SrsPps* _srs_pps_writev_eagain = new SrsPps();
 
 extern unsigned long long _st_stat_recvmsg;
 extern unsigned long long _st_stat_recvmsg_eagain;
@@ -68,21 +68,21 @@ extern unsigned long long _st_stat_sendmsg;
 extern unsigned long long _st_stat_sendmsg_eagain;
 extern unsigned long long _st_stat_sendmmsg;
 extern unsigned long long _st_stat_sendmmsg_eagain;
-SrsPps* _srs_pps_recvmsg = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_recvmsg_eagain = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_sendmsg = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_sendmsg_eagain = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_sendmmsg = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_sendmmsg_eagain = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_recvmsg = new SrsPps();
+SrsPps* _srs_pps_recvmsg_eagain = new SrsPps();
+SrsPps* _srs_pps_sendmsg = new SrsPps();
+SrsPps* _srs_pps_sendmsg_eagain = new SrsPps();
+SrsPps* _srs_pps_sendmmsg = new SrsPps();
+SrsPps* _srs_pps_sendmmsg_eagain = new SrsPps();
 
 extern unsigned long long _st_stat_epoll;
 extern unsigned long long _st_stat_epoll_zero;
 extern unsigned long long _st_stat_epoll_shake;
 extern unsigned long long _st_stat_epoll_spin;
-SrsPps* _srs_pps_epoll = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_epoll_zero = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_epoll_shake = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_epoll_spin = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_epoll = new SrsPps();
+SrsPps* _srs_pps_epoll_zero = new SrsPps();
+SrsPps* _srs_pps_epoll_shake = new SrsPps();
+SrsPps* _srs_pps_epoll_spin = new SrsPps();
 
 extern unsigned long long _st_stat_sched_15ms;
 extern unsigned long long _st_stat_sched_20ms;
@@ -93,26 +93,26 @@ extern unsigned long long _st_stat_sched_40ms;
 extern unsigned long long _st_stat_sched_80ms;
 extern unsigned long long _st_stat_sched_160ms;
 extern unsigned long long _st_stat_sched_s;
-SrsPps* _srs_pps_sched_15ms = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_sched_20ms = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_sched_25ms = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_sched_30ms = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_sched_35ms = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_sched_40ms = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_sched_80ms = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_sched_160ms = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_sched_s = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_sched_15ms = new SrsPps();
+SrsPps* _srs_pps_sched_20ms = new SrsPps();
+SrsPps* _srs_pps_sched_25ms = new SrsPps();
+SrsPps* _srs_pps_sched_30ms = new SrsPps();
+SrsPps* _srs_pps_sched_35ms = new SrsPps();
+SrsPps* _srs_pps_sched_40ms = new SrsPps();
+SrsPps* _srs_pps_sched_80ms = new SrsPps();
+SrsPps* _srs_pps_sched_160ms = new SrsPps();
+SrsPps* _srs_pps_sched_s = new SrsPps();
 #endif
 
-SrsPps* _srs_pps_clock_15ms = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_clock_20ms = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_clock_25ms = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_clock_30ms = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_clock_35ms = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_clock_40ms = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_clock_80ms = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_clock_160ms = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_timer_s = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_clock_15ms = new SrsPps();
+SrsPps* _srs_pps_clock_20ms = new SrsPps();
+SrsPps* _srs_pps_clock_25ms = new SrsPps();
+SrsPps* _srs_pps_clock_30ms = new SrsPps();
+SrsPps* _srs_pps_clock_35ms = new SrsPps();
+SrsPps* _srs_pps_clock_40ms = new SrsPps();
+SrsPps* _srs_pps_clock_80ms = new SrsPps();
+SrsPps* _srs_pps_clock_160ms = new SrsPps();
+SrsPps* _srs_pps_timer_s = new SrsPps();
 
 #if defined(SRS_DEBUG) && defined(SRS_DEBUG_STATS)
 extern int _st_active_count;
@@ -120,10 +120,10 @@ extern unsigned long long _st_stat_thread_run;
 extern unsigned long long _st_stat_thread_idle;
 extern unsigned long long _st_stat_thread_yield;
 extern unsigned long long _st_stat_thread_yield2;
-SrsPps* _srs_pps_thread_run = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_thread_idle = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_thread_yield = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_thread_yield2 = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_thread_run = new SrsPps();
+SrsPps* _srs_pps_thread_idle = new SrsPps();
+SrsPps* _srs_pps_thread_yield = new SrsPps();
+SrsPps* _srs_pps_thread_yield2 = new SrsPps();
 #endif
 
 ISrsHybridServer::ISrsHybridServer()
diff --git a/trunk/src/app/srs_app_listener.cpp b/trunk/src/app/srs_app_listener.cpp
index ce335ce6d..ec131230b 100755
--- a/trunk/src/app/srs_app_listener.cpp
+++ b/trunk/src/app/srs_app_listener.cpp
@@ -45,11 +45,11 @@ using namespace std;
 
 #include <srs_protocol_kbps.hpp>
 
-SrsPps* _srs_pps_rpkts = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_addrs = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_fast_addrs = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_rpkts = new SrsPps();
+SrsPps* _srs_pps_addrs = new SrsPps();
+SrsPps* _srs_pps_fast_addrs = new SrsPps();
 
-SrsPps* _srs_pps_spkts = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_spkts = new SrsPps();
 
 // set the max packet size.
 #define SRS_UDP_MAX_PACKET_SIZE 65535
diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index 1b3329fe7..683247235 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -60,15 +60,15 @@ using namespace std;
 
 #include <srs_protocol_kbps.hpp>
 
-SrsPps* _srs_pps_sstuns = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_srtcps = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_srtps = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_sstuns = new SrsPps();
+SrsPps* _srs_pps_srtcps = new SrsPps();
+SrsPps* _srs_pps_srtps = new SrsPps();
 
-SrsPps* _srs_pps_pli = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_twcc = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_rr = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_pub = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_conn = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_pli = new SrsPps();
+SrsPps* _srs_pps_twcc = new SrsPps();
+SrsPps* _srs_pps_rr = new SrsPps();
+SrsPps* _srs_pps_pub = new SrsPps();
+SrsPps* _srs_pps_conn = new SrsPps();
 
 extern SrsPps* _srs_pps_snack;
 extern SrsPps* _srs_pps_snack2;
diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index 5dc93c269..c4453a8d7 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -46,9 +46,9 @@ using namespace std;
 #include <srs_protocol_utility.hpp>
 
 extern SrsPps* _srs_pps_rpkts;
-SrsPps* _srs_pps_rstuns = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_rrtps = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_rrtcps = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_rstuns = new SrsPps();
+SrsPps* _srs_pps_rrtps = new SrsPps();
+SrsPps* _srs_pps_rrtcps = new SrsPps();
 extern SrsPps* _srs_pps_addrs;
 extern SrsPps* _srs_pps_fast_addrs;
 
diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index eb5d30f20..95e0cc17e 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -51,15 +51,15 @@
 #include <srs_protocol_kbps.hpp>
 
 // The NACK sent by us(SFU).
-SrsPps* _srs_pps_snack = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_snack2 = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_sanack = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_svnack = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_snack = new SrsPps();
+SrsPps* _srs_pps_snack2 = new SrsPps();
+SrsPps* _srs_pps_sanack = new SrsPps();
+SrsPps* _srs_pps_svnack = new SrsPps();
 
-SrsPps* _srs_pps_rnack = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_rnack2 = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_rhnack = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_rmnack = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_rnack = new SrsPps();
+SrsPps* _srs_pps_rnack2 = new SrsPps();
+SrsPps* _srs_pps_rhnack = new SrsPps();
+SrsPps* _srs_pps_rmnack = new SrsPps();
 
 // Firefox defaults as 109, Chrome is 111.
 const int kAudioPayloadType     = 111;
diff --git a/trunk/src/kernel/srs_kernel_kbps.cpp b/trunk/src/kernel/srs_kernel_kbps.cpp
index c76f4c33e..6c2e9cb2a 100644
--- a/trunk/src/kernel/srs_kernel_kbps.cpp
+++ b/trunk/src/kernel/srs_kernel_kbps.cpp
@@ -59,9 +59,9 @@ void srs_pps_update(SrsRateSample& sample, int64_t nn, srs_utime_t now)
     sample.update(nn, now, pps);
 }
 
-SrsPps::SrsPps(SrsWallClock* c)
+SrsPps::SrsPps()
 {
-    clk_ = c;
+    clk_ = NULL;
     sugar = 0;
 }
 
@@ -69,6 +69,11 @@ SrsPps::~SrsPps()
 {
 }
 
+void SrsPps::set_clock(SrsWallClock* clk)
+{
+    clk_ = clk;
+}
+
 void SrsPps::update()
 {
     update(sugar);
@@ -76,6 +81,11 @@ void SrsPps::update()
 
 void SrsPps::update(int64_t nn)
 {
+    // Lazy setup the clock.
+    if (!clk_) {
+        clk_ = _srs_clock;
+    }
+
     srs_utime_t now = clk_->now();
 
     srs_pps_init(sample_10s_, nn, now);
diff --git a/trunk/src/kernel/srs_kernel_kbps.hpp b/trunk/src/kernel/srs_kernel_kbps.hpp
index deddf8166..99842a26e 100644
--- a/trunk/src/kernel/srs_kernel_kbps.hpp
+++ b/trunk/src/kernel/srs_kernel_kbps.hpp
@@ -61,9 +61,11 @@ public:
     // Sugar for target to stat.
     int64_t sugar;
 public:
-    SrsPps(SrsWallClock* clk);
+    SrsPps();
     virtual ~SrsPps();
 public:
+    // Setup the clock, use global clock if not set.
+    void set_clock(SrsWallClock* clk);
     // Update with the nn which is target.
     void update();
     // Update with the nn.
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 806ba3e67..979bdf3de 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -36,7 +36,7 @@ using namespace std;
 
 #include <srs_kernel_kbps.hpp>
 
-SrsPps* _srs_pps_objs_rtps = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_objs_rtps = new SrsPps();
 
 /* @see https://tools.ietf.org/html/rfc1889#section-5.1
   0                   1                   2                   3
diff --git a/trunk/src/protocol/srs_service_log.cpp b/trunk/src/protocol/srs_service_log.cpp
index fbd1e4b9e..8c3be6eda 100644
--- a/trunk/src/protocol/srs_service_log.cpp
+++ b/trunk/src/protocol/srs_service_log.cpp
@@ -35,8 +35,8 @@ using namespace std;
 
 #include <srs_protocol_kbps.hpp>
 
-SrsPps* _srs_pps_cids_get = new SrsPps(_srs_clock);
-SrsPps* _srs_pps_cids_set = new SrsPps(_srs_clock);
+SrsPps* _srs_pps_cids_get = new SrsPps();
+SrsPps* _srs_pps_cids_set = new SrsPps();
 
 #define SRS_BASIC_LOG_SIZE 8192
 

From e7529ce9dc09f9cdeb36e70f4aecdc1e70075459 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Thu, 25 Feb 2021 14:25:54 +0800
Subject: [PATCH 013/102] RTC: Stat the RTP and payload objects

---
 trunk/src/app/srs_app_rtc_server.cpp    | 8 +++++---
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 8 ++++++++
 2 files changed, 13 insertions(+), 3 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index c4453a8d7..2315e3d10 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -76,6 +76,8 @@ extern SrsPps* _srs_pps_rhnack;
 extern SrsPps* _srs_pps_rmnack;
 
 extern SrsPps* _srs_pps_objs_rtps;
+extern SrsPps* _srs_pps_objs_rraw;
+extern SrsPps* _srs_pps_objs_rfua;
 
 SrsRtcBlackhole::SrsRtcBlackhole()
 {
@@ -679,9 +681,9 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
     static char buf[128];
 
     string objs_desc;
-    _srs_pps_objs_rtps->update();
-    if (_srs_pps_objs_rtps->r10s()) {
-        snprintf(buf, sizeof(buf), ", objs=%d", _srs_pps_objs_rtps->r10s());
+    _srs_pps_objs_rtps->update(); _srs_pps_objs_rraw->update(); _srs_pps_objs_rfua->update();
+    if (_srs_pps_objs_rtps->r10s() || _srs_pps_objs_rraw->r10s() || _srs_pps_objs_rfua->r10s()) {
+        snprintf(buf, sizeof(buf), ", objs=%d,%d,%d", _srs_pps_objs_rtps->r10s(), _srs_pps_objs_rraw->r10s(), _srs_pps_objs_rfua->r10s());
         objs_desc = buf;
     }
 
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 979bdf3de..ab2d07a34 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -37,6 +37,8 @@ using namespace std;
 #include <srs_kernel_kbps.hpp>
 
 SrsPps* _srs_pps_objs_rtps = new SrsPps();
+SrsPps* _srs_pps_objs_rraw = new SrsPps();
+SrsPps* _srs_pps_objs_rfua = new SrsPps();
 
 /* @see https://tools.ietf.org/html/rfc1889#section-5.1
   0                   1                   2                   3
@@ -900,6 +902,8 @@ SrsRtpRawPayload::SrsRtpRawPayload()
 {
     payload = NULL;
     nn_payload = 0;
+
+    ++_srs_pps_objs_rraw->sugar;
 }
 
 SrsRtpRawPayload::~SrsRtpRawPayload()
@@ -1237,6 +1241,8 @@ SrsRtpFUAPayload::SrsRtpFUAPayload()
 {
     start = end = false;
     nri = nalu_type = (SrsAvcNaluType)0;
+
+    ++_srs_pps_objs_rfua->sugar;
 }
 
 SrsRtpFUAPayload::~SrsRtpFUAPayload()
@@ -1352,6 +1358,8 @@ SrsRtpFUAPayload2::SrsRtpFUAPayload2()
 
     payload = NULL;
     size = 0;
+
+    ++_srs_pps_objs_rfua->sugar;
 }
 
 SrsRtpFUAPayload2::~SrsRtpFUAPayload2()

From edb8a0f497191aeb913d185fdd120814cf4b400c Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Thu, 25 Feb 2021 17:56:15 +0800
Subject: [PATCH 014/102] RTC: Cache the buffer for player

---
 trunk/src/app/srs_app_rtc_conn.cpp | 22 ++++++++++++----------
 trunk/src/app/srs_app_rtc_conn.hpp |  3 +++
 2 files changed, 15 insertions(+), 10 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index 683247235..14564fb86 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -1605,6 +1605,11 @@ SrsRtcConnection::SrsRtcConnection(SrsRtcServer* s, const SrsContextId& cid)
     server_ = s;
     transport_ = new SrsSecurityTransport(this);
 
+    cache_iov_ = new iovec();
+    cache_iov_->iov_base = new char[kRtpPacketSize];
+    cache_iov_->iov_len = kRtpPacketSize;
+    cache_buffer_ = new SrsBuffer((char*)cache_iov_->iov_base, kRtpPacketSize);
+
     state_ = INIT;
     last_stun_time = 0;
     session_timeout = 0;
@@ -1648,6 +1653,9 @@ SrsRtcConnection::~SrsRtcConnection()
         srs_freep(addr);
     }
 
+    srs_freep(cache_iov_);
+    srs_freep(cache_buffer_);
+
     srs_freep(transport_);
     srs_freep(req);
     srs_freep(stat_);
@@ -2510,22 +2518,16 @@ srs_error_t SrsRtcConnection::do_send_packets(const std::vector<SrsRtpPacket2*>&
         SrsRtpPacket2* pkt = pkts.at(i);
 
         // For this message, select the first iovec.
-        iovec* iov = new iovec();
-        SrsAutoFree(iovec, iov);
-
-        char* iov_base = new char[kRtpPacketSize];
-        SrsAutoFreeA(char, iov_base);
-
-        iov->iov_base = iov_base;
+        iovec* iov = cache_iov_;
         iov->iov_len = kRtpPacketSize;
+        cache_buffer_->skip(-1 * cache_buffer_->pos());
 
         // Marshal packet to bytes in iovec.
         if (true) {
-            SrsBuffer stream((char*)iov->iov_base, iov->iov_len);
-            if ((err = pkt->encode(&stream)) != srs_success) {
+            if ((err = pkt->encode(cache_buffer_)) != srs_success) {
                 return srs_error_wrap(err, "encode packet");
             }
-            iov->iov_len = stream.pos();
+            iov->iov_len = cache_buffer_->pos();
         }
 
         // Cipher RTP to SRTP packet.
diff --git a/trunk/src/app/srs_app_rtc_conn.hpp b/trunk/src/app/srs_app_rtc_conn.hpp
index 6b84e108a..93d43db0e 100644
--- a/trunk/src/app/srs_app_rtc_conn.hpp
+++ b/trunk/src/app/srs_app_rtc_conn.hpp
@@ -431,6 +431,9 @@ private:
     SrsRtcConnectionStateType state_;
     ISrsRtcTransport* transport_;
     SrsHourGlass* timer_;
+private:
+    iovec* cache_iov_;
+    SrsBuffer* cache_buffer_;
 private:
     // key: stream id
     std::map<std::string, SrsRtcPlayStream*> players_;

From 4aa82b2fbf91bb151f44c1503ff15519e80fab6e Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Thu, 25 Feb 2021 19:02:38 +0800
Subject: [PATCH 015/102] RTC: Refine memory copy, allocate it later

---
 trunk/src/app/srs_app_rtc_conn.cpp | 19 +++++++++----------
 1 file changed, 9 insertions(+), 10 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index 14564fb86..3ed1ca932 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -1152,8 +1152,9 @@ srs_error_t SrsRtcPublishStream::on_rtp(char* data, int nb_data)
     }
 
     // Decrypt the cipher to plaintext RTP data.
-    int nb_unprotected_buf = nb_data;
-    if ((err = session_->transport_->unprotect_rtp(data, &nb_unprotected_buf)) != srs_success) {
+    char* plaintext = data;
+    int nb_plaintext = nb_data;
+    if ((err = session_->transport_->unprotect_rtp(plaintext, &nb_plaintext)) != srs_success) {
         // We try to decode the RTP header for more detail error informations.
         SrsBuffer b(data, nb_data); SrsRtpHeader h; h.ignore_padding(true);
         srs_error_t r0 = h.decode(&b); srs_freep(r0); // Ignore any error for header decoding.
@@ -1163,17 +1164,14 @@ srs_error_t SrsRtcPublishStream::on_rtp(char* data, int nb_data)
 
         return err;
     }
-
-    srs_assert(nb_unprotected_buf > 0);
-    char* unprotected_buf = new char[nb_unprotected_buf];
-    memcpy(unprotected_buf, data, nb_unprotected_buf);
+    srs_assert(nb_plaintext > 0);
 
     if (_srs_blackhole->blackhole) {
-        _srs_blackhole->sendto(unprotected_buf, nb_unprotected_buf);
+        _srs_blackhole->sendto(plaintext, nb_plaintext);
     }
 
     // Handle the plaintext RTP packet.
-    if ((err = do_on_rtp(unprotected_buf, nb_unprotected_buf)) != srs_success) {
+    if ((err = do_on_rtp(plaintext, nb_plaintext)) != srs_success) {
         // We try to decode the RTP header for more detail error informations.
         SrsBuffer b(data, nb_data); SrsRtpHeader h; h.ignore_padding(true);
         srs_error_t r0 = h.decode(&b); srs_freep(r0); // Ignore any error for header decoding.
@@ -1181,7 +1179,7 @@ srs_error_t SrsRtcPublishStream::on_rtp(char* data, int nb_data)
         int nb_header = h.nb_bytes();
         const char* body = data + nb_header;
         int nb_body = nb_data - nb_header;
-        return srs_error_wrap(err, "cipher=%u, plaintext=%u, body=[%s]", nb_data, nb_unprotected_buf,
+        return srs_error_wrap(err, "cipher=%u, plaintext=%u, body=[%s]", nb_data, nb_plaintext,
             srs_string_dumps_hex(body, nb_body, 8).c_str());
     }
 
@@ -1192,8 +1190,9 @@ srs_error_t SrsRtcPublishStream::do_on_rtp(char* plaintext, int nb_plaintext)
 {
     srs_error_t err = srs_success;
 
-    char* buf = plaintext;
+    char* buf = new char[nb_plaintext];
     int nb_buf = nb_plaintext;
+    memcpy(buf, plaintext, nb_plaintext);
 
     // Decode the RTP packet from buffer.
     SrsRtpPacket2* pkt = new SrsRtpPacket2();

From 23fa3fb35036de2a507e6cb43cfdfbfe31d7b846 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Thu, 25 Feb 2021 19:15:34 +0800
Subject: [PATCH 016/102] RTC: Refine memory allocate for publisher

---
 trunk/src/app/srs_app_rtc_conn.cpp | 22 ++++++++++------------
 trunk/src/app/srs_app_rtc_conn.hpp |  2 +-
 2 files changed, 11 insertions(+), 13 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index 3ed1ca932..ffcf053d5 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -1164,14 +1164,9 @@ srs_error_t SrsRtcPublishStream::on_rtp(char* data, int nb_data)
 
         return err;
     }
-    srs_assert(nb_plaintext > 0);
-
-    if (_srs_blackhole->blackhole) {
-        _srs_blackhole->sendto(plaintext, nb_plaintext);
-    }
 
     // Handle the plaintext RTP packet.
-    if ((err = do_on_rtp(plaintext, nb_plaintext)) != srs_success) {
+    if ((err = on_rtp_plaintext(plaintext, nb_plaintext)) != srs_success) {
         // We try to decode the RTP header for more detail error informations.
         SrsBuffer b(data, nb_data); SrsRtpHeader h; h.ignore_padding(true);
         srs_error_t r0 = h.decode(&b); srs_freep(r0); // Ignore any error for header decoding.
@@ -1186,13 +1181,13 @@ srs_error_t SrsRtcPublishStream::on_rtp(char* data, int nb_data)
     return err;
 }
 
-srs_error_t SrsRtcPublishStream::do_on_rtp(char* plaintext, int nb_plaintext)
+srs_error_t SrsRtcPublishStream::on_rtp_plaintext(char* plaintext, int nb_plaintext)
 {
     srs_error_t err = srs_success;
 
-    char* buf = new char[nb_plaintext];
-    int nb_buf = nb_plaintext;
-    memcpy(buf, plaintext, nb_plaintext);
+    if (_srs_blackhole->blackhole) {
+        _srs_blackhole->sendto(plaintext, nb_plaintext);
+    }
 
     // Decode the RTP packet from buffer.
     SrsRtpPacket2* pkt = new SrsRtpPacket2();
@@ -1202,9 +1197,12 @@ srs_error_t SrsRtcPublishStream::do_on_rtp(char* plaintext, int nb_plaintext)
         pkt->set_decode_handler(this);
         pkt->set_extension_types(&extension_types_);
         pkt->shared_msg = new SrsSharedPtrMessage();
-        pkt->shared_msg->wrap(buf, nb_buf);
 
-        SrsBuffer b(buf, nb_buf);
+        char* buf = new char[nb_plaintext];
+        memcpy(buf, plaintext, nb_plaintext);
+        pkt->shared_msg->wrap(buf, nb_plaintext);
+
+        SrsBuffer b(buf, nb_plaintext);
         if ((err = pkt->decode(&b)) != srs_success) {
             return srs_error_wrap(err, "decode rtp packet");
         }
diff --git a/trunk/src/app/srs_app_rtc_conn.hpp b/trunk/src/app/srs_app_rtc_conn.hpp
index 93d43db0e..33e4aea70 100644
--- a/trunk/src/app/srs_app_rtc_conn.hpp
+++ b/trunk/src/app/srs_app_rtc_conn.hpp
@@ -354,7 +354,7 @@ private:
 public:
     srs_error_t on_rtp(char* buf, int nb_buf);
 private:
-    srs_error_t do_on_rtp(char* plaintext, int nb_plaintext);
+    srs_error_t on_rtp_plaintext(char* plaintext, int nb_plaintext);
 public:
     srs_error_t check_send_nacks();
 public:

From 048a72ab6e32b0f6aaeb72663bfffa6d843b8ab8 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Thu, 25 Feb 2021 19:16:50 +0800
Subject: [PATCH 017/102] RTC: Refine memory allocate for publisher

---
 trunk/src/app/srs_app_rtc_conn.hpp | 1 +
 1 file changed, 1 insertion(+)

diff --git a/trunk/src/app/srs_app_rtc_conn.hpp b/trunk/src/app/srs_app_rtc_conn.hpp
index 33e4aea70..538eca984 100644
--- a/trunk/src/app/srs_app_rtc_conn.hpp
+++ b/trunk/src/app/srs_app_rtc_conn.hpp
@@ -354,6 +354,7 @@ private:
 public:
     srs_error_t on_rtp(char* buf, int nb_buf);
 private:
+    // @remark We copy the plaintext, user should free it.
     srs_error_t on_rtp_plaintext(char* plaintext, int nb_plaintext);
 public:
     srs_error_t check_send_nacks();

From d7bc8b98fb191c1ee020331f5a8b7052286653c2 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Fri, 26 Feb 2021 07:05:20 +0800
Subject: [PATCH 018/102] Fix build warning

---
 trunk/src/app/srs_app_rtc_jitbuffer.cpp | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/trunk/src/app/srs_app_rtc_jitbuffer.cpp b/trunk/src/app/srs_app_rtc_jitbuffer.cpp
index 69d6becbc..cf3c172e2 100644
--- a/trunk/src/app/srs_app_rtc_jitbuffer.cpp
+++ b/trunk/src/app/srs_app_rtc_jitbuffer.cpp
@@ -1800,6 +1800,9 @@ SrsRtpFrameBuffer* SrsRtpJitterBuffer::ExtractAndSetDecode(uint32_t timestamp)
         }
     }
 
+    // Fix build warnings: variable ‘continuous’ set but not used
+    (void)continuous;
+
     // The state must be changed to decoding before cleaning up zero sized
     // frames to avoid empty frames being cleaned up and then given to the
     // decoder. Propagates the missing_frame bit.

From cec588e08a66a6c782f04d1974349f26931d46bb Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Fri, 26 Feb 2021 09:13:21 +0800
Subject: [PATCH 019/102] For #2188: Remove sendmmsg from ST.

---
 trunk/3rdparty/st-srs/Makefile        |  4 --
 trunk/3rdparty/st-srs/README.md       |  2 +-
 trunk/3rdparty/st-srs/io.c            | 65 ---------------------------
 trunk/3rdparty/st-srs/public.h        |  8 ----
 trunk/auto/depends.sh                 |  8 ----
 trunk/auto/options.sh                 | 10 -----
 trunk/src/app/srs_app_hybrid.cpp      |  9 +---
 trunk/src/protocol/srs_service_st.cpp |  5 ---
 trunk/src/protocol/srs_service_st.hpp |  8 ----
 9 files changed, 3 insertions(+), 116 deletions(-)

diff --git a/trunk/3rdparty/st-srs/Makefile b/trunk/3rdparty/st-srs/Makefile
index 71f96ba4e..cf4d51946 100644
--- a/trunk/3rdparty/st-srs/Makefile
+++ b/trunk/3rdparty/st-srs/Makefile
@@ -282,10 +282,6 @@ endif
 #
 # make EXTRA_CFLAGS=-UMD_HAVE_EPOLL <target>
 #
-# or to enable sendmmsg(2) support:
-#
-# make EXTRA_CFLAGS="-DMD_HAVE_SENDMMSG -D_GNU_SOURCE"
-#
 # or to enable stats for ST:
 #
 # make EXTRA_CFLAGS=-DDEBUG_STATS
diff --git a/trunk/3rdparty/st-srs/README.md b/trunk/3rdparty/st-srs/README.md
index aa8ad70bc..8a5eba94f 100644
--- a/trunk/3rdparty/st-srs/README.md
+++ b/trunk/3rdparty/st-srs/README.md
@@ -66,7 +66,7 @@ The branch [srs](https://github.com/ossrs/state-threads/tree/srs) will be patche
 - [x] Support macro `MD_ST_NO_ASM` to disable ASM, [#8](https://github.com/ossrs/state-threads/issues/8).
 - [x] Merge patch [srs#1282](https://github.com/ossrs/srs/issues/1282#issuecomment-445539513) to support aarch64, [#9](https://github.com/ossrs/state-threads/issues/9).
 - [x] Support OSX for Apple Darwin, macOS, [#11](https://github.com/ossrs/state-threads/issues/11).
-- [x] Support sendmmsg for UDP, [#12](https://github.com/ossrs/state-threads/issues/12).
+- [ ] Support sendmmsg for UDP, [#12](https://github.com/ossrs/state-threads/issues/12).
 - [x] Refine performance for sleep or epoll_wait(0), [#17](https://github.com/ossrs/state-threads/issues/17).
 - [ ] Improve the performance of timer. [9fe8cfe5b](https://github.com/ossrs/state-threads/commit/9fe8cfe5b1c9741a2e671a46215184f267fba400), [7879c2b](https://github.com/ossrs/state-threads/commit/7879c2b), [387cddb](https://github.com/ossrs/state-threads/commit/387cddb)
 
diff --git a/trunk/3rdparty/st-srs/io.c b/trunk/3rdparty/st-srs/io.c
index da9184091..788a1046f 100644
--- a/trunk/3rdparty/st-srs/io.c
+++ b/trunk/3rdparty/st-srs/io.c
@@ -68,8 +68,6 @@ unsigned long long _st_stat_recvmsg = 0;
 unsigned long long _st_stat_recvmsg_eagain = 0;
 unsigned long long _st_stat_sendmsg = 0;
 unsigned long long _st_stat_sendmsg_eagain = 0;
-unsigned long long _st_stat_sendmmsg = 0;
-unsigned long long _st_stat_sendmmsg_eagain = 0;
 #endif
 
 #if EAGAIN != EWOULDBLOCK
@@ -833,69 +831,6 @@ int st_sendmsg(_st_netfd_t *fd, const struct msghdr *msg, int flags, st_utime_t
     return n;
 }
 
-int st_sendmmsg(st_netfd_t fd, struct st_mmsghdr *msgvec, unsigned int vlen, int flags, st_utime_t timeout)
-{
-#if defined(MD_HAVE_SENDMMSG) && defined(_GNU_SOURCE)
-    int n;
-    int left;
-    struct mmsghdr *p;
-
-    #if defined(DEBUG) && defined(DEBUG_STATS)
-    ++_st_stat_sendmmsg;
-    #endif
-
-    left = (int)vlen;
-    while (left > 0) {
-        p = (struct mmsghdr*)msgvec + (vlen - left);
-
-        if ((n = sendmmsg(fd->osfd, p, left, flags)) < 0) {
-            if (errno == EINTR)
-                continue;
-            if (!_IO_NOT_READY_ERROR)
-                break;
-
-            #if defined(DEBUG) && defined(DEBUG_STATS)
-            ++_st_stat_sendmmsg_eagain;
-            #endif
-
-            /* Wait until the socket becomes writable */
-            if (st_netfd_poll(fd, POLLOUT, timeout) < 0)
-                break;
-        }
-
-        left -= n;
-    }
-
-    // An error is returned only if no datagrams could be sent.
-    if (left == (int)vlen) {
-        return n;
-    }
-    return (int)vlen - left;
-#else
-    struct st_mmsghdr *p;
-    int i, n;
-
-    // @see http://man7.org/linux/man-pages/man2/sendmmsg.2.html
-    for (i = 0; i < (int)vlen; ++i) {
-        p = msgvec + i;
-        n = st_sendmsg(fd, &p->msg_hdr, flags, timeout);
-        if (n < 0) {
-            // An error is returned only if no datagrams could be sent.
-            if (i == 0) {
-                return n;
-            }
-            return i + 1;
-        }
-
-        p->msg_len = n;
-    }
-
-    // Returns the number of messages sent from msgvec; if this is less than vlen, the caller can retry with a
-    // further sendmmsg() call to send the remaining messages.
-    return vlen;
-#endif
-}
-
 
 /*
  * To open FIFOs or other special files.
diff --git a/trunk/3rdparty/st-srs/public.h b/trunk/3rdparty/st-srs/public.h
index c911912b8..df7c5c967 100644
--- a/trunk/3rdparty/st-srs/public.h
+++ b/trunk/3rdparty/st-srs/public.h
@@ -153,14 +153,6 @@ extern int st_sendto(st_netfd_t fd, const void *msg, int len, const struct socka
 extern int st_recvmsg(st_netfd_t fd, struct msghdr *msg, int flags, st_utime_t timeout);
 extern int st_sendmsg(st_netfd_t fd, const struct msghdr *msg, int flags, st_utime_t timeout);
 
-// @see http://man7.org/linux/man-pages/man2/sendmmsg.2.html
-#include <sys/socket.h>
-struct st_mmsghdr {
-   struct msghdr msg_hdr;  /* Message header */
-   unsigned int  msg_len;  /* Number of bytes transmitted */
-};
-extern int st_sendmmsg(st_netfd_t fd, struct st_mmsghdr *msgvec, unsigned int vlen, int flags, st_utime_t timeout);
-
 extern st_netfd_t st_open(const char *path, int oflags, mode_t mode);
 
 #ifdef DEBUG
diff --git a/trunk/auto/depends.sh b/trunk/auto/depends.sh
index cda4091ea..c58f81d53 100755
--- a/trunk/auto/depends.sh
+++ b/trunk/auto/depends.sh
@@ -348,14 +348,6 @@ fi
 if [[ $SRS_OSX == YES ]]; then
     _ST_MAKE=darwin-debug && _ST_EXTRA_CFLAGS="-DMD_HAVE_KQUEUE" && _ST_LD=${SRS_TOOL_CC} && _ST_OBJ="DARWIN_`uname -r`_DBG"
 fi
-# For UDP sendmmsg, disable it if not suppported.
-if [[ $SRS_SENDMMSG == YES ]]; then
-    echo "Build ST with UDP sendmmsg support."
-    _ST_EXTRA_CFLAGS="$_ST_EXTRA_CFLAGS -DMD_HAVE_SENDMMSG -D_GNU_SOURCE"
-else
-    echo "Build ST without UDP sendmmsg support."
-    _ST_EXTRA_CFLAGS="$_ST_EXTRA_CFLAGS -UMD_HAVE_SENDMMSG -U_GNU_SOURCE"
-fi
 # Whether enable debug stats.
 if [[ $SRS_DEBUG_STATS == YES ]]; then
     _ST_EXTRA_CFLAGS="$_ST_EXTRA_CFLAGS -DDEBUG_STATS"
diff --git a/trunk/auto/options.sh b/trunk/auto/options.sh
index eb4433ecb..284965715 100755
--- a/trunk/auto/options.sh
+++ b/trunk/auto/options.sh
@@ -128,7 +128,6 @@ SRS_EXTRA_FLAGS=
 # Performance optimize.
 SRS_NASM=YES
 SRS_SRTP_ASM=YES
-SRS_SENDMMSG=NO
 SRS_DEBUG=NO
 SRS_DEBUG_STATS=NO
 
@@ -177,7 +176,6 @@ Performance:                @see https://blog.csdn.net/win_lin/article/details/5
 
   --nasm=on|off             Whether build FFMPEG for RTC with nasm. Default: $(value2switch $SRS_NASM)
   --srtp-nasm=on|off        Whether build SRTP with ASM(openssl-asm), requires RTC and openssl-1.0.*. Default: $(value2switch $SRS_SRTP_ASM)
-  --sendmmsg=on|off         Whether enable UDP sendmmsg. Default: $(value2switch $SRS_SENDMMSG). @see http://man7.org/linux/man-pages/man2/sendmmsg.2.html
 
 Toolchain options:          @see https://github.com/ossrs/srs/issues/1547#issuecomment-576078411
   --static=on|off           Whether add '-static' to link options. Default: $(value2switch $SRS_STATIC)
@@ -230,8 +228,6 @@ function parse_user_option() {
         --x86-64)                       SRS_X86_X64=YES             ;;
         --osx)                          SRS_OSX=YES                 ;;
 
-        --sendmmsg)                     if [[ $value == off ]]; then SRS_SENDMMSG=NO; else SRS_SENDMMSG=YES; fi    ;;
-
         --without-srtp-nasm)            SRS_SRTP_ASM=NO             ;;
         --with-srtp-nasm)               SRS_SRTP_ASM=YES            ;;
         --srtp-nasm)                    if [[ $value == off ]]; then SRS_SRTP_ASM=NO; else SRS_SRTP_ASM=YES; fi    ;;
@@ -523,11 +519,6 @@ function apply_detail_options() {
         echo "Use openssl-1.0 for SRTP-ASM."
         SRS_SSL_1_0=YES
     fi
-
-    if [[ $SRS_OSX == YES && $SRS_SENDMMSG == YES ]]; then
-        echo "Disable sendmmsg for OSX"
-        SRS_SENDMMSG=NO
-    fi
 }
 apply_detail_options
 
@@ -562,7 +553,6 @@ function regenerate_options() {
     SRS_AUTO_CONFIGURE="${SRS_AUTO_CONFIGURE} --ffmpeg-fit=$(value2switch $SRS_FFMPEG_FIT)"
     SRS_AUTO_CONFIGURE="${SRS_AUTO_CONFIGURE} --nasm=$(value2switch $SRS_NASM)"
     SRS_AUTO_CONFIGURE="${SRS_AUTO_CONFIGURE} --srtp-nasm=$(value2switch $SRS_SRTP_ASM)"
-    SRS_AUTO_CONFIGURE="${SRS_AUTO_CONFIGURE} --sendmmsg=$(value2switch $SRS_SENDMMSG)"
     SRS_AUTO_CONFIGURE="${SRS_AUTO_CONFIGURE} --clean=$(value2switch $SRS_CLEAN)"
     SRS_AUTO_CONFIGURE="${SRS_AUTO_CONFIGURE} --gperf=$(value2switch $SRS_GPERF)"
     SRS_AUTO_CONFIGURE="${SRS_AUTO_CONFIGURE} --gmc=$(value2switch $SRS_GPERF_MC)"
diff --git a/trunk/src/app/srs_app_hybrid.cpp b/trunk/src/app/srs_app_hybrid.cpp
index 9a310b2ae..446593ee5 100644
--- a/trunk/src/app/srs_app_hybrid.cpp
+++ b/trunk/src/app/srs_app_hybrid.cpp
@@ -66,14 +66,10 @@ extern unsigned long long _st_stat_recvmsg;
 extern unsigned long long _st_stat_recvmsg_eagain;
 extern unsigned long long _st_stat_sendmsg;
 extern unsigned long long _st_stat_sendmsg_eagain;
-extern unsigned long long _st_stat_sendmmsg;
-extern unsigned long long _st_stat_sendmmsg_eagain;
 SrsPps* _srs_pps_recvmsg = new SrsPps();
 SrsPps* _srs_pps_recvmsg_eagain = new SrsPps();
 SrsPps* _srs_pps_sendmsg = new SrsPps();
 SrsPps* _srs_pps_sendmsg_eagain = new SrsPps();
-SrsPps* _srs_pps_sendmmsg = new SrsPps();
-SrsPps* _srs_pps_sendmmsg_eagain = new SrsPps();
 
 extern unsigned long long _st_stat_epoll;
 extern unsigned long long _st_stat_epoll_zero;
@@ -400,9 +396,8 @@ srs_error_t SrsHybridServer::notify(int event, srs_utime_t interval, srs_utime_t
 #if defined(SRS_DEBUG) && defined(SRS_DEBUG_STATS)
     _srs_pps_recvmsg->update(_st_stat_recvmsg); _srs_pps_recvmsg_eagain->update(_st_stat_recvmsg_eagain);
     _srs_pps_sendmsg->update(_st_stat_sendmsg); _srs_pps_sendmsg_eagain->update(_st_stat_sendmsg_eagain);
-    _srs_pps_sendmmsg->update(_st_stat_sendmmsg); _srs_pps_sendmmsg_eagain->update(_st_stat_sendmmsg_eagain);
-    if (_srs_pps_recvmsg->r10s() || _srs_pps_recvmsg_eagain->r10s() || _srs_pps_sendmsg->r10s() || _srs_pps_sendmsg_eagain->r10s() || _srs_pps_sendmmsg->r10s() || _srs_pps_sendmmsg_eagain->r10s()) {
-        snprintf(buf, sizeof(buf), ", msg=%d,%d,%d,%d,%d,%d", _srs_pps_recvmsg->r10s(), _srs_pps_recvmsg_eagain->r10s(), _srs_pps_sendmsg->r10s(), _srs_pps_sendmsg_eagain->r10s(), _srs_pps_sendmmsg->r10s(), _srs_pps_sendmmsg_eagain->r10s());
+    if (_srs_pps_recvmsg->r10s() || _srs_pps_recvmsg_eagain->r10s() || _srs_pps_sendmsg->r10s() || _srs_pps_sendmsg_eagain->r10s()) {
+        snprintf(buf, sizeof(buf), ", msg=%d,%d,%d,%d", _srs_pps_recvmsg->r10s(), _srs_pps_recvmsg_eagain->r10s(), _srs_pps_sendmsg->r10s(), _srs_pps_sendmsg_eagain->r10s());
         msg_desc = buf;
     }
 #endif
diff --git a/trunk/src/protocol/srs_service_st.cpp b/trunk/src/protocol/srs_service_st.cpp
index a4189dd8e..6c55c586b 100644
--- a/trunk/src/protocol/srs_service_st.cpp
+++ b/trunk/src/protocol/srs_service_st.cpp
@@ -431,11 +431,6 @@ int srs_sendmsg(srs_netfd_t stfd, const struct msghdr *msg, int flags, srs_utime
     return st_sendmsg((st_netfd_t)stfd, msg, flags, (st_utime_t)timeout);
 }
 
-int srs_sendmmsg(srs_netfd_t stfd, struct srs_mmsghdr *msgvec, unsigned int vlen, int flags, srs_utime_t timeout)
-{
-    return st_sendmmsg((st_netfd_t)stfd, (struct st_mmsghdr*)msgvec, vlen, flags, (st_utime_t)timeout);
-}
-
 srs_netfd_t srs_accept(srs_netfd_t stfd, struct sockaddr *addr, int *addrlen, srs_utime_t timeout)
 {
     return (srs_netfd_t)st_accept((st_netfd_t)stfd, addr, addrlen, (st_utime_t)timeout);
diff --git a/trunk/src/protocol/srs_service_st.hpp b/trunk/src/protocol/srs_service_st.hpp
index bcad9c8b9..3d51675e8 100644
--- a/trunk/src/protocol/srs_service_st.hpp
+++ b/trunk/src/protocol/srs_service_st.hpp
@@ -95,14 +95,6 @@ extern int srs_sendto(srs_netfd_t stfd, void *buf, int len, const struct sockadd
 extern int srs_recvmsg(srs_netfd_t stfd, struct msghdr *msg, int flags, srs_utime_t timeout);
 extern int srs_sendmsg(srs_netfd_t stfd, const struct msghdr *msg, int flags, srs_utime_t timeout);
 
-// @see http://man7.org/linux/man-pages/man2/sendmmsg.2.html
-#include <sys/socket.h>
-struct srs_mmsghdr {
-   struct msghdr msg_hdr;  /* Message header */
-   unsigned int  msg_len;  /* Number of bytes transmitted */
-};
-extern int srs_sendmmsg(srs_netfd_t stfd, struct srs_mmsghdr *msgvec, unsigned int vlen, int flags, srs_utime_t timeout);
-
 extern srs_netfd_t srs_accept(srs_netfd_t stfd, struct sockaddr *addr, int *addrlen, srs_utime_t timeout);
 
 extern ssize_t srs_read(srs_netfd_t stfd, void *buf, size_t nbyte, srs_utime_t timeout);

From 81060a17e637d1fabb4cb1f43d14df95354e8751 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Fri, 26 Feb 2021 10:20:22 +0800
Subject: [PATCH 020/102] Build: Add gcc version in cache directory

---
 trunk/auto/setup_variables.sh | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/trunk/auto/setup_variables.sh b/trunk/auto/setup_variables.sh
index 0fcc1a67a..cf26ea0c3 100755
--- a/trunk/auto/setup_variables.sh
+++ b/trunk/auto/setup_variables.sh
@@ -7,8 +7,13 @@ OS_PREFIX="Platform"
 
 # Build platform cache.
 SRS_PLATFORM="${OS_PREFIX}-${OS_KERNEL_NAME}-${OS_KERNRL_RELEASE}"
-if [[ ${SRS_BUILD_TAG} != "" ]]; then
-  SRS_PLATFORM="${SRS_PLATFORM}-${SRS_BUILD_TAG}"
+# Build platform cache with gcc version.
+if [[ $OS_KERNEL_NAME == Darwin ]]; then
+  GCC_VERSION="Clang$(gcc --version 2>/dev/null|grep clang|awk '{print $4}')"
+  SRS_PLATFORM="${SRS_PLATFORM}-${GCC_VERSION}"
+else
+  GCC_VERSION="GCC$(gcc --version 2>/dev/null|grep gcc|awk '{print $3}')"
+  SRS_PLATFORM="${SRS_PLATFORM}-${GCC_VERSION}"
 fi
 # Use isolate cache for different SRS version.
 SRS_PLATFORM="${SRS_PLATFORM}-SRS4"

From 0cb125e53d5bfececf2685420dc24b58401dfc79 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Fri, 26 Feb 2021 11:18:15 +0800
Subject: [PATCH 021/102] RTC: Refine publisher memory allocate, by packet
 itself

---
 trunk/src/app/srs_app_rtc_conn.cpp      | 18 +++++-------------
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 20 ++++++++++++++++++++
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp |  5 +++++
 3 files changed, 30 insertions(+), 13 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index ffcf053d5..829a447f0 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -1193,19 +1193,11 @@ srs_error_t SrsRtcPublishStream::on_rtp_plaintext(char* plaintext, int nb_plaint
     SrsRtpPacket2* pkt = new SrsRtpPacket2();
     SrsAutoFree(SrsRtpPacket2, pkt);
 
-    if (true) {
-        pkt->set_decode_handler(this);
-        pkt->set_extension_types(&extension_types_);
-        pkt->shared_msg = new SrsSharedPtrMessage();
-
-        char* buf = new char[nb_plaintext];
-        memcpy(buf, plaintext, nb_plaintext);
-        pkt->shared_msg->wrap(buf, nb_plaintext);
-
-        SrsBuffer b(buf, nb_plaintext);
-        if ((err = pkt->decode(&b)) != srs_success) {
-            return srs_error_wrap(err, "decode rtp packet");
-        }
+    pkt->set_decode_handler(this);
+    pkt->set_extension_types(&extension_types_);
+    pkt->wrap(plaintext, nb_plaintext);
+    if ((err = pkt->decode(pkt->cache_buffer())) != srs_success) {
+        return srs_error_wrap(err, "decode rtp packet");
     }
 
     // For source to consume packet.
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index ab2d07a34..86ee1770c 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -768,6 +768,7 @@ SrsRtpPacket2::SrsRtpPacket2()
 
     nalu_type = SrsAvcNaluTypeReserved;
     shared_msg = NULL;
+    cache_buffer_ = NULL;
     frame_type = SrsFrameTypeReserved;
     cached_payload_size = 0;
 
@@ -778,6 +779,25 @@ SrsRtpPacket2::~SrsRtpPacket2()
 {
     srs_freep(payload);
     srs_freep(shared_msg);
+    srs_freep(cache_buffer_);
+}
+
+void SrsRtpPacket2::wrap(char* data, int size)
+{
+    srs_freep(shared_msg);
+    shared_msg = new SrsSharedPtrMessage();
+
+    char* buf = new char[size];
+    memcpy(buf, data, size);
+    shared_msg->wrap(buf, size);
+
+    srs_freep(cache_buffer_);
+    cache_buffer_ = new SrsBuffer(buf, size);
+}
+
+SrsBuffer* SrsRtpPacket2::cache_buffer()
+{
+    return cache_buffer_;
 }
 
 void SrsRtpPacket2::set_padding(int size)
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 741a4fafb..9f6d2bb83 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -268,6 +268,7 @@ class SrsRtpPacket2
 public:
     SrsRtpHeader header;
     ISrsRtpPayloader* payload;
+    SrsBuffer* cache_buffer_;
 // Helper fields.
 public:
     // The first byte as nalu type, for video decoder only.
@@ -285,6 +286,10 @@ private:
 public:
     SrsRtpPacket2();
     virtual ~SrsRtpPacket2();
+public:
+    // Wrap buffer to shared_message, which is managed by us.
+    void wrap(char* data, int size);
+    SrsBuffer* cache_buffer();
 public:
     // Set the padding of RTP packet.
     void set_padding(int size);

From b2d546156e8f79edaa60089abf3b0b93e9817e1c Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Fri, 26 Feb 2021 12:25:35 +0800
Subject: [PATCH 022/102] RTC: Refine RTP packet api, keep shared message to
 private

---
 trunk/src/app/srs_app_rtc_jitbuffer.cpp | 220 ------------------------
 trunk/src/app/srs_app_rtc_jitbuffer.hpp |   1 -
 trunk/src/app/srs_app_rtc_source.cpp    |  20 +--
 trunk/src/kernel/srs_kernel_buffer.cpp  |  10 +-
 trunk/src/kernel/srs_kernel_buffer.hpp  |   2 +
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp |  26 ++-
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp |  14 +-
 7 files changed, 50 insertions(+), 243 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_jitbuffer.cpp b/trunk/src/app/srs_app_rtc_jitbuffer.cpp
index cf3c172e2..f030932d2 100644
--- a/trunk/src/app/srs_app_rtc_jitbuffer.cpp
+++ b/trunk/src/app/srs_app_rtc_jitbuffer.cpp
@@ -1273,226 +1273,6 @@ SrsRtpFrameBufferEnum SrsRtpJitterBuffer::InsertPacket(uint16_t seq, uint32_t ts
     return buffer_state;
 }
 
-
-SrsRtpFrameBufferEnum SrsRtpJitterBuffer::InsertPacket2(const SrsRtpPacket2 &pkt,
-        bool* retransmitted)
-{
-    bool singlenual = false;
-    H264PacketizationTypes packetyType = kH264SingleNalu;
-
-    //char *buf = pkt.shared_msg->payload; //rtp packet data
-    //int size = pkt.shared_msg->size; //rtp size
-
-    //rtp header: total size - rtp payload size
-    int rtp_header_size = pkt.shared_msg->size - pkt.payload->nb_bytes();
-   
-    char *rtp_payload_buf = pkt.shared_msg->payload + rtp_header_size;  //rtp payload data
-    int rtp_payload_size = pkt.shared_msg->size - rtp_header_size;  //rtp payload size;
-
-    bool is_first_packet_in_frame = false;
-  
-    if (rtp_payload_size == 0){ 
-        //B0(1011):pad+ext, A0(1010):pad
-        if ((pkt.shared_msg->payload[0] & 0xFF) == 0xB0 || (pkt.shared_msg->payload[0] & 0xFF) == 0xA0){
-            //uint8_t padding_length = (uint8_t)(pkt.shared_msg->payload[pkt.shared_msg->size-1] & 0xFF);
-            srs_info("RTP: jitbuffer padding packet ts:%u, seq:%u, payload size:%d, padding size:%d", 
-                pkt.header.get_timestamp(),pkt.header.get_sequence(),
-                rtp_payload_size, padding_length);
-        }
-        return kNoError;
-    }
-    
-    SrsAvcNaluType nal_unit_type = SrsAvcNaluTypeReserved;
-    FrameType frameType = kVideoFrameDelta;
-
-    int8_t v = (uint8_t)pkt.nalu_type;
-    if (v == kStapA) {
-        singlenual = false;
-        packetyType = kH264StapA;
-
-        is_first_packet_in_frame = true;
-        
-        SrsRtpSTAPPayload *payload = (SrsRtpSTAPPayload*)pkt.payload;
-        if (payload->get_sps() != NULL){
-            nal_unit_type = SrsAvcNaluTypeSPS;
-            frameType = kVideoFrameKey;
-        }
-    } else if (v == kFuA) {
-        SrsRtpFUAPayload2 *payload = (SrsRtpFUAPayload2*)pkt.payload;
-        int8_t nalu_byte0 = ((int8_t)payload->nri & 0xE0) | ((int8_t)payload->nalu_type & 0x1F);
-        nal_unit_type = (SrsAvcNaluType)(nalu_byte0 & 0x1f);
-
-        if (nal_unit_type == SrsAvcNaluTypeIDR){
-            frameType = kVideoFrameKey;
-        }
- 
-        if (payload->start){
-            //xx xx ....
-            //xx nalu ....
-            rtp_payload_buf[1] = nalu_byte0;
-
-            //nalu ....
-            rtp_payload_buf = rtp_payload_buf + 1;
-            rtp_payload_size = rtp_payload_size - 1;
-
-            is_first_packet_in_frame = true;
-        }else {
-            //xx xx ....
-            //....
-            rtp_payload_buf = rtp_payload_buf + 2;
-            rtp_payload_size = rtp_payload_size - 2;
-        }
-
-        singlenual = false;
-        packetyType = kH264FuA;
-
-    } else {
-        singlenual = true;
-        packetyType = kH264SingleNalu;
-        is_first_packet_in_frame = true;
-    }
-
-    const VCMPacket packet((const uint8_t*)rtp_payload_buf, rtp_payload_size,
-        pkt.header.get_sequence(), pkt.header.get_timestamp(), pkt.header.get_marker(), 
-        packetyType, kRtpVideoH264, singlenual, is_first_packet_in_frame, frameType);
-
-    ++num_packets_;
-
-    if (num_packets_ == 1) {
-        time_first_packet_ms_ =  srs_update_system_time();
-    }
-
-    //Does this packet belong to an old frame?
-    // if (last_decoded_state_.IsOldPacket(&packet)) {
-     
-    //     //return kOldPacket;
-    // }
-
-    //num_consecutive_old_packets_ = 0;
-
-    SrsRtpFrameBuffer* frame;
-    FrameList* frame_list;
-
-    const SrsRtpFrameBufferEnum error = GetFrameByRtpPacket(packet, &frame, &frame_list);
-
-    if (error != kNoError) {
-        return error;
-    }
-
-
-    //srs_utime_t now_ms =  srs_update_system_time();
-
-    FrameData frame_data;
-    frame_data.rtt_ms = 0; //rtt_ms_;
-    frame_data.rolling_average_packets_per_frame = 25;//average_packets_per_frame_;
-
-    SrsRtpFrameBufferEnum buffer_state = frame->InsertPacket(packet, frame_data);
-    
-    if (buffer_state > 0) {
-        incoming_bit_count_ += packet.sizeBytes << 3;
-
-        if (first_packet_since_reset_) {
-            latest_received_sequence_number_ = packet.seqNum;
-            first_packet_since_reset_ = false;
-        } else {
-            // if (IsPacketRetransmitted(packet)) {
-            //     frame->IncrementNackCount();
-            // }
-
-            UpdateNackList(packet.seqNum);
-
-            latest_received_sequence_number_ = LatestSequenceNumber(
-                                                   latest_received_sequence_number_, packet.seqNum);
-        }
-    }
-
-    // Is the frame already in the decodable list?
-    bool continuous = IsContinuous(*frame);
-    
-    switch (buffer_state) {
-    case kGeneralError:
-    case kTimeStampError:
-    case kSizeError: {
-        free_frames_.push_back(frame);
-        break;
-    }
-
-    case kCompleteSession: {
-        //CountFrame(*frame);
-        // if (previous_state != kStateDecodable &&
-        //         previous_state != kStateComplete) {
-        //     /*CountFrame(*frame);*/ //????????????????????�?? by ylr
-        //     if (continuous) {
-        //         // Signal that we have a complete session.
-        //         frame_event_->Set();
-        //     }
-        // }
-    }
-
-    // Note: There is no break here - continuing to kDecodableSession.
-    case kDecodableSession: {
-        // *retransmitted = (frame->GetNackCount() > 0);
-
-        if (true || continuous) {
-            decodable_frames_.InsertFrame(frame);
-            FindAndInsertContinuousFrames(*frame);
-        } else {
-            incomplete_frames_.InsertFrame(frame);
-
-            // If NACKs are enabled, keyframes are triggered by |GetNackList|.
-            // if (nack_mode_ == kNoNack && NonContinuousOrIncompleteDuration() >
-            //         90 * kMaxDiscontinuousFramesTime) {
-            //     return kFlushIndicator;
-            // }
-        }
-
-        break;
-    }
-
-    case kIncomplete: {
-        if (frame->GetState() == kStateEmpty &&
-                last_decoded_state_.UpdateEmptyFrame(frame)) {
-            free_frames_.push_back(frame);
-            return kNoError;
-        } else {
-            incomplete_frames_.InsertFrame(frame);
-
-            // If NACKs are enabled, keyframes are triggered by |GetNackList|.
-            // if (nack_mode_ == kNoNack && NonContinuousOrIncompleteDuration() >
-            //         90 * kMaxDiscontinuousFramesTime) {
-            //     return kFlushIndicator;
-            // }
-        }
-
-        break;
-    }
-
-    case kNoError:
-    case kOutOfBoundsPacket:
-    case kDuplicatePacket: {
-        // Put back the frame where it came from.
-        if (frame_list != NULL) {
-            frame_list->InsertFrame(frame);
-        } else {
-            free_frames_.push_back(frame);
-        }
-
-        ++num_duplicated_packets_;
-        break;
-    }
-
-    case kFlushIndicator:{
-            free_frames_.push_back(frame);
-        }
-        return kFlushIndicator;
-
-    default:
-        assert(false);
-    }
-
-    return buffer_state;
-}
-
 // Gets frame to use for this timestamp. If no match, get empty frame.
 SrsRtpFrameBufferEnum SrsRtpJitterBuffer::GetFrameByRtpPacket(const VCMPacket& packet,
         SrsRtpFrameBuffer** frame,
diff --git a/trunk/src/app/srs_app_rtc_jitbuffer.hpp b/trunk/src/app/srs_app_rtc_jitbuffer.hpp
index 8a03efa67..a7682a2b9 100644
--- a/trunk/src/app/srs_app_rtc_jitbuffer.hpp
+++ b/trunk/src/app/srs_app_rtc_jitbuffer.hpp
@@ -413,7 +413,6 @@ public:
 public:
     srs_error_t start();
     void Reset();
-    SrsRtpFrameBufferEnum InsertPacket2(const SrsRtpPacket2 &pkt, bool* retransmitted);
     SrsRtpFrameBufferEnum InsertPacket(uint16_t seq, uint32_t ts, bool maker, char *buf, int size,
         bool* retransmitted);
     void ReleaseFrame(SrsRtpFrameBuffer* frame);
diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index 95e0cc17e..c6a66e8df 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -818,12 +818,8 @@ srs_error_t SrsRtcFromRtmpBridger::package_opus(char* data, int size, SrsRtpPack
     SrsRtpRawPayload* raw = new SrsRtpRawPayload();
     pkt->payload = raw;
 
-    raw->payload = new char[size];
+    raw->payload = pkt->wrap(data, size);
     raw->nn_payload = size;
-    memcpy(raw->payload, data, size);
-
-    pkt->shared_msg = new SrsSharedPtrMessage();
-    pkt->shared_msg->wrap(raw->payload, size);
 
     *ppkt = pkt;
 
@@ -964,9 +960,7 @@ srs_error_t SrsRtcFromRtmpBridger::package_stap_a(SrsRtcStream* source, SrsShare
 
     // Copy the SPS/PPS bytes, because it may change.
     int size = (int)(sps.size() + pps.size());
-    char* payload = new char[size];
-    pkt->shared_msg = new SrsSharedPtrMessage();
-    pkt->shared_msg->wrap(payload, size);
+    char* payload = pkt->wrap(size);
 
     if (true) {
         SrsSample* sample = new SrsSample();
@@ -1038,7 +1032,7 @@ srs_error_t SrsRtcFromRtmpBridger::package_nalus(SrsSharedPtrMessage* msg, const
         pkt->header.set_sequence(video_sequence++);
         pkt->header.set_timestamp(msg->timestamp * 90);
         pkt->payload = raw;
-        pkt->shared_msg = msg->copy();
+        pkt->wrap(msg);
         pkts.push_back(pkt);
     } else {
         // We must free it, should never use RTP packets to free it,
@@ -1077,7 +1071,7 @@ srs_error_t SrsRtcFromRtmpBridger::package_nalus(SrsSharedPtrMessage* msg, const
             fua->end = bool(i == num_of_packet - 1);
 
             pkt->payload = fua;
-            pkt->shared_msg = msg->copy();
+            pkt->wrap(msg);
             pkts.push_back(pkt);
 
             nb_left -= packet_size;
@@ -1105,7 +1099,8 @@ srs_error_t SrsRtcFromRtmpBridger::package_single_nalu(SrsSharedPtrMessage* msg,
     raw->payload = sample->bytes;
     raw->nn_payload = sample->size;
 
-    pkt->shared_msg = msg->copy();
+    pkt->wrap(msg);
+
     pkts.push_back(pkt);
 
     return err;
@@ -1142,7 +1137,8 @@ srs_error_t SrsRtcFromRtmpBridger::package_fu_a(SrsSharedPtrMessage* msg, SrsSam
         fua->payload = p;
         fua->size = packet_size;
 
-        pkt->shared_msg = msg->copy();
+        pkt->wrap(msg);
+
         pkts.push_back(pkt);
 
         p += packet_size;
diff --git a/trunk/src/kernel/srs_kernel_buffer.cpp b/trunk/src/kernel/srs_kernel_buffer.cpp
index 255357878..ff5cdbeb8 100644
--- a/trunk/src/kernel/srs_kernel_buffer.cpp
+++ b/trunk/src/kernel/srs_kernel_buffer.cpp
@@ -49,15 +49,19 @@ SrsBuffer::SrsBuffer(char* b, int nn)
 {
     p = bytes = b;
     nb_bytes = nn;
-    
-    // TODO: support both little and big endian.
-    srs_assert(srs_is_little_endian());
 }
 
 SrsBuffer::~SrsBuffer()
 {
 }
 
+SrsBuffer* SrsBuffer::copy()
+{
+    SrsBuffer* cp = new SrsBuffer(bytes, nb_bytes);
+    cp->p = p;
+    return cp;
+}
+
 char* SrsBuffer::data()
 {
     return bytes;
diff --git a/trunk/src/kernel/srs_kernel_buffer.hpp b/trunk/src/kernel/srs_kernel_buffer.hpp
index 061ea8338..c406d0906 100644
--- a/trunk/src/kernel/srs_kernel_buffer.hpp
+++ b/trunk/src/kernel/srs_kernel_buffer.hpp
@@ -109,6 +109,8 @@ public:
     SrsBuffer(char* b, int nn);
     ~SrsBuffer();
 public:
+    // Copy the object, keep position of buffer.
+    SrsBuffer* copy();
     // Get the data and head of buffer.
     //      current-bytes = head() = data() + pos()
     char* data();
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 86ee1770c..ec028bbfa 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -782,20 +782,39 @@ SrsRtpPacket2::~SrsRtpPacket2()
     srs_freep(cache_buffer_);
 }
 
-void SrsRtpPacket2::wrap(char* data, int size)
+char* SrsRtpPacket2::wrap(int size)
 {
     srs_freep(shared_msg);
     shared_msg = new SrsSharedPtrMessage();
 
     char* buf = new char[size];
-    memcpy(buf, data, size);
     shared_msg->wrap(buf, size);
 
     srs_freep(cache_buffer_);
     cache_buffer_ = new SrsBuffer(buf, size);
+
+    return buf;
 }
 
-SrsBuffer* SrsRtpPacket2::cache_buffer()
+char* SrsRtpPacket2::wrap(char* data, int size)
+{
+    char* buf = wrap(size);
+    memcpy(buf, data, size);
+    return buf;
+}
+
+char* SrsRtpPacket2::wrap(SrsSharedPtrMessage* msg)
+{
+    srs_freep(shared_msg);
+    shared_msg = msg->copy();
+
+    srs_freep(cache_buffer_);
+    cache_buffer_ = new SrsBuffer(msg->payload, msg->size);
+
+    return msg->payload;
+}
+
+SrsBuffer* SrsRtpPacket2::cache_buffer() const
 {
     return cache_buffer_;
 }
@@ -835,6 +854,7 @@ SrsRtpPacket2* SrsRtpPacket2::copy()
 
     cp->nalu_type = nalu_type;
     cp->shared_msg = shared_msg? shared_msg->copy():NULL;
+    cp->cache_buffer_ = cache_buffer_? cache_buffer_->copy():NULL;
     cp->frame_type = frame_type;
 
     cp->cached_payload_size = cached_payload_size;
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 9f6d2bb83..920e91588 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -268,13 +268,15 @@ class SrsRtpPacket2
 public:
     SrsRtpHeader header;
     ISrsRtpPayloader* payload;
+private:
+    // The buffer bind to the shared message.
     SrsBuffer* cache_buffer_;
+    // The original shared message, all RTP packets can refer to its data.
+    SrsSharedPtrMessage* shared_msg;
 // Helper fields.
 public:
     // The first byte as nalu type, for video decoder only.
     SrsAvcNaluType nalu_type;
-    // The original shared message, all RTP packets can refer to its data.
-    SrsSharedPtrMessage* shared_msg;
     // The frame type, for RTMP bridger or SFU source.
     SrsFrameType frame_type;
 // Fast cache for performance.
@@ -288,8 +290,12 @@ public:
     virtual ~SrsRtpPacket2();
 public:
     // Wrap buffer to shared_message, which is managed by us.
-    void wrap(char* data, int size);
-    SrsBuffer* cache_buffer();
+    char* wrap(int size);
+    char* wrap(char* data, int size);
+    // Wrap the shared message, we copy it.
+    char* wrap(SrsSharedPtrMessage* msg);
+    // Get the cache buffer which binds to the shared message.
+    SrsBuffer* cache_buffer() const;
 public:
     // Set the padding of RTP packet.
     void set_padding(int size);

From bde86a2b234b1ec3157ad6fd910ffca3cdd98941 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Fri, 26 Feb 2021 13:11:56 +0800
Subject: [PATCH 023/102] RTC: Refine RTP packet buffer allocate, align to
 about 1500 bytes

---
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index ec028bbfa..0fa2dc689 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -784,11 +784,19 @@ SrsRtpPacket2::~SrsRtpPacket2()
 
 char* SrsRtpPacket2::wrap(int size)
 {
+    // If the buffer is large enough, reuse it.
+    if (shared_msg && shared_msg->size >= size) {
+        return shared_msg->payload;
+    }
+
+    // Create buffer if empty or not large enough.
     srs_freep(shared_msg);
     shared_msg = new SrsSharedPtrMessage();
 
-    char* buf = new char[size];
-    shared_msg->wrap(buf, size);
+    // For RTC, we use larger under-layer buffer for each packet.
+    int nb_buffer = srs_max(size, kRtpPacketSize);
+    char* buf = new char[nb_buffer];
+    shared_msg->wrap(buf, nb_buffer);
 
     srs_freep(cache_buffer_);
     cache_buffer_ = new SrsBuffer(buf, size);

From 86f43d4f72f97539011f5fd22df4443fe040053f Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Fri, 26 Feb 2021 16:21:59 +0800
Subject: [PATCH 024/102] RTC: Support RTP packet cache manager

---
 trunk/conf/full.conf                    |   3 +
 trunk/src/app/srs_app_config.cpp        |  19 ++-
 trunk/src/app/srs_app_config.hpp        |   1 +
 trunk/src/app/srs_app_rtc_server.cpp    |   5 +-
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 172 +++++++++++++++++++++---
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp |  49 ++++++-
 6 files changed, 229 insertions(+), 20 deletions(-)

diff --git a/trunk/conf/full.conf b/trunk/conf/full.conf
index 4e0c76424..b850003e5 100644
--- a/trunk/conf/full.conf
+++ b/trunk/conf/full.conf
@@ -497,6 +497,9 @@ rtc_server {
     #       then system queue is 2000*4 = 8k, user can incrase reuseport to incrase the queue.
     # default: 2000
     queue_length    2000;
+    # Whether enable the RTP packet cache.
+    # default: off
+    rtp_cache off;
     # The black-hole to copy packet to, for debugging.
     # For example, when debugging Chrome publish stream, the received packets are encrypted cipher,
     # we can set the publisher black-hole, SRS will copy the plaintext packets to black-hole, and
diff --git a/trunk/src/app/srs_app_config.cpp b/trunk/src/app/srs_app_config.cpp
index efd7e236b..52fadae34 100644
--- a/trunk/src/app/srs_app_config.cpp
+++ b/trunk/src/app/srs_app_config.cpp
@@ -3651,7 +3651,7 @@ srs_error_t SrsConfig::check_normal_config()
             string n = conf->at(i)->name;
             if (n != "enabled" && n != "listen" && n != "dir" && n != "candidate" && n != "ecdsa"
                 && n != "encrypt" && n != "reuseport" && n != "merge_nalus" && n != "perf_stat" && n != "black_hole"
-                && n != "ip_family") {
+                && n != "ip_family" && n != "rtp_cache") {
                 return srs_error_new(ERROR_SYSTEM_CONFIG_INVALID, "illegal rtc_server.%s", n.c_str());
             }
         }
@@ -4902,6 +4902,23 @@ bool SrsConfig::get_rtc_server_perf_stat()
     return SRS_CONF_PERFER_TRUE(conf->arg0());
 }
 
+bool SrsConfig::get_rtc_server_rtp_cache()
+{
+    static bool DEFAULT = false;
+
+    SrsConfDirective* conf = root->get("rtc_server");
+    if (!conf) {
+        return DEFAULT;
+    }
+
+    conf = conf->get("rtp_cache");
+    if (!conf || conf->arg0().empty()) {
+        return DEFAULT;
+    }
+
+    return SRS_CONF_PERFER_FALSE(conf->arg0());
+}
+
 bool SrsConfig::get_rtc_server_black_hole()
 {
     static bool DEFAULT = false;
diff --git a/trunk/src/app/srs_app_config.hpp b/trunk/src/app/srs_app_config.hpp
index 507467073..a6cebc7c3 100644
--- a/trunk/src/app/srs_app_config.hpp
+++ b/trunk/src/app/srs_app_config.hpp
@@ -534,6 +534,7 @@ public:
     virtual int get_rtc_server_reuseport();
     virtual bool get_rtc_server_merge_nalus();
     virtual bool get_rtc_server_perf_stat();
+    virtual bool get_rtc_server_rtp_cache();
     virtual bool get_rtc_server_black_hole();
     virtual std::string get_rtc_server_black_hole_addr();
 private:
diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index 2315e3d10..d4996de4c 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -283,7 +283,10 @@ srs_error_t SrsRtcServer::initialize()
         return srs_error_wrap(err, "black hole");
     }
 
-    srs_trace("RTC server init ok");
+    bool rtp_cache = _srs_config->get_rtc_server_rtp_cache();
+    _srs_rtp_cache->set_enabled(rtp_cache);
+
+    srs_trace("RTC server init ok, rtp_cache=%d", rtp_cache);
 
     return err;
 }
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 0fa2dc689..352fed02e 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -162,13 +162,18 @@ int32_t srs_seq_distance(uint16_t value, uint16_t pre_value)
 
 SrsRtpExtensionTypes::SrsRtpExtensionTypes()
 {
-    memset(ids_, kRtpExtensionNone, sizeof(ids_));
+    reset();
 }
 
 SrsRtpExtensionTypes::~SrsRtpExtensionTypes()
 {
 }
 
+void SrsRtpExtensionTypes::reset()
+{
+    memset(ids_, kRtpExtensionNone, sizeof(ids_));
+}
+
 bool SrsRtpExtensionTypes::register_by_uri(int id, std::string uri)
 {
     for (int i = 0; i < (int)(sizeof(kExtensions)/sizeof(kExtensions[0])); ++i) {
@@ -201,14 +206,22 @@ SrsRtpExtensionType SrsRtpExtensionTypes::get_type(int id) const
 
 
 
-SrsRtpExtensionTwcc::SrsRtpExtensionTwcc(): has_twcc_(false), id_(0), sn_(0)
+SrsRtpExtensionTwcc::SrsRtpExtensionTwcc()
 {
+    reset();
 }
 
 SrsRtpExtensionTwcc::~SrsRtpExtensionTwcc()
 {
 }
 
+void SrsRtpExtensionTwcc::reset()
+{
+    has_twcc_ = false;
+    id_ = 0;
+    sn_ = 0;
+}
+
 bool SrsRtpExtensionTwcc::has_twcc_ext()
 {
     return has_twcc_;
@@ -286,8 +299,20 @@ void SrsRtpExtensionTwcc::set_sn(uint16_t sn)
     has_twcc_ = true;
 }
 
-SrsRtpExtensionOneByte::SrsRtpExtensionOneByte() : has_ext_(false), id_(0), value_(0)
+SrsRtpExtensionOneByte::SrsRtpExtensionOneByte()
 {
+    reset();
+}
+
+SrsRtpExtensionOneByte::~SrsRtpExtensionOneByte()
+{
+}
+
+void SrsRtpExtensionOneByte::reset()
+{
+    has_ext_ = false;
+    id_ = 0;
+    value_ = 0;
 }
 
 void SrsRtpExtensionOneByte::set_id(int id)
@@ -338,14 +363,26 @@ srs_error_t SrsRtpExtensionOneByte::encode(SrsBuffer* buf)
     return err;
 }
 
-SrsRtpExtensions::SrsRtpExtensions() : has_ext_(false)
+SrsRtpExtensions::SrsRtpExtensions()
 {
+    reset();
 }
 
 SrsRtpExtensions::~SrsRtpExtensions()
 {
 }
 
+void SrsRtpExtensions::reset()
+{
+    if (has_ext_) {
+        types_.reset();
+        twcc_.reset();
+        audio_level_.reset();
+    }
+
+    has_ext_ = false;
+}
+
 srs_error_t SrsRtpExtensions::decode(SrsBuffer* buf)
 {
     srs_error_t err = srs_success;
@@ -524,6 +561,15 @@ srs_error_t SrsRtpExtensions::set_audio_level(int id, uint8_t level)
 }
 
 SrsRtpHeader::SrsRtpHeader()
+{
+    reset();
+}
+
+SrsRtpHeader::~SrsRtpHeader()
+{
+}
+
+void SrsRtpHeader::reset()
 {
     padding_length   = 0;
     cc               = 0;
@@ -532,11 +578,10 @@ SrsRtpHeader::SrsRtpHeader()
     sequence         = 0;
     timestamp        = 0;
     ssrc             = 0;
+    memset(csrc, 0, sizeof(csrc));
     ignore_padding_  = false;
-}
 
-SrsRtpHeader::~SrsRtpHeader()
-{
+    extensions_.reset();
 }
 
 srs_error_t SrsRtpHeader::decode(SrsBuffer* buf)
@@ -764,13 +809,10 @@ ISrsRtpPacketDecodeHandler::~ISrsRtpPacketDecodeHandler()
 SrsRtpPacket2::SrsRtpPacket2()
 {
     payload = NULL;
-    decode_handler = NULL;
-
-    nalu_type = SrsAvcNaluTypeReserved;
     shared_msg = NULL;
     cache_buffer_ = NULL;
-    frame_type = SrsFrameTypeReserved;
-    cached_payload_size = 0;
+
+    reset();
 
     ++_srs_pps_objs_rtps->sugar;
 }
@@ -782,10 +824,33 @@ SrsRtpPacket2::~SrsRtpPacket2()
     srs_freep(cache_buffer_);
 }
 
+void SrsRtpPacket2::reset()
+{
+    nalu_type = SrsAvcNaluTypeReserved;
+    frame_type = SrsFrameTypeReserved;
+    cached_payload_size = 0;
+    decode_handler = NULL;
+
+    header.reset();
+
+    // We do not cache the payload, it will be created even
+    // we cache it, because it only stores pointers to the shared message,
+    // and it's different for each packet.
+    srs_freep(payload);
+
+    // We should reset the cached buffer.
+    if (cache_buffer_) {
+        cache_buffer_->skip(-1 * cache_buffer_->pos());
+    }
+}
+
 char* SrsRtpPacket2::wrap(int size)
 {
     // If the buffer is large enough, reuse it.
     if (shared_msg && shared_msg->size >= size) {
+        // The size maybe changed, so we MUST reset it.
+        cache_buffer_->set_size(size);
+
         return shared_msg->payload;
     }
 
@@ -798,6 +863,7 @@ char* SrsRtpPacket2::wrap(int size)
     char* buf = new char[nb_buffer];
     shared_msg->wrap(buf, nb_buffer);
 
+    // The size of buffer must equal to the actual size.
     srs_freep(cache_buffer_);
     cache_buffer_ = new SrsBuffer(buf, size);
 
@@ -827,6 +893,18 @@ SrsBuffer* SrsRtpPacket2::cache_buffer() const
     return cache_buffer_;
 }
 
+bool SrsRtpPacket2::try_recycle()
+{
+    // When recycling, and there is references about he shared buffer, we must free
+    // the shared message(may not free the buffer) to stop reuse the shared message.
+    if (shared_msg && shared_msg->count() > 0) {
+        srs_freep(shared_msg);
+    }
+
+    // OK, allow to recycle this object.
+    return true;
+}
+
 void SrsRtpPacket2::set_padding(int size)
 {
     header.set_padding(size);
@@ -855,14 +933,13 @@ bool SrsRtpPacket2::is_audio()
 
 SrsRtpPacket2* SrsRtpPacket2::copy()
 {
-    SrsRtpPacket2* cp = new SrsRtpPacket2();
+    SrsRtpPacket2* cp = _srs_rtp_cache->allocate();
 
     cp->header = header;
     cp->payload = payload? payload->copy():NULL;
 
     cp->nalu_type = nalu_type;
-    cp->shared_msg = shared_msg? shared_msg->copy():NULL;
-    cp->cache_buffer_ = cache_buffer_? cache_buffer_->copy():NULL;
+    cp->wrap(shared_msg); // Wrap the shared message and buffer.
     cp->frame_type = frame_type;
 
     cp->cached_payload_size = cached_payload_size;
@@ -946,6 +1023,71 @@ srs_error_t SrsRtpPacket2::decode(SrsBuffer* buf)
     return err;
 }
 
+SrsRtpPacketCacheManager::SrsRtpPacketCacheManager()
+{
+    enabled_ = false;
+}
+
+SrsRtpPacketCacheManager::~SrsRtpPacketCacheManager()
+{
+    list<SrsRtpPacket2*>::iterator it;
+    for (it = cache_pkts_.begin(); it != cache_pkts_.end(); ++it) {
+        SrsRtpPacket2* pkt = *it;
+        srs_freep(pkt);
+    }
+}
+
+void SrsRtpPacketCacheManager::set_enabled(bool v)
+{
+    enabled_ = v;
+}
+
+bool SrsRtpPacketCacheManager::enabled()
+{
+    return enabled_;
+}
+
+SrsRtpPacket2* SrsRtpPacketCacheManager::allocate()
+{
+    if (!enabled_ || cache_pkts_.empty()) {
+        return new SrsRtpPacket2();
+    }
+
+    SrsRtpPacket2* pkt = cache_pkts_.back();
+    cache_pkts_.pop_back();
+
+    // We MUST reset it to reuse it.
+    pkt->reset();
+
+    return pkt;
+}
+
+void SrsRtpPacketCacheManager::recycle(SrsRtpPacket2* p)
+{
+    // The p may be NULL, because srs_freep(NULL) is ok.
+    if (!p) {
+        return;
+    }
+
+    // TODO: FIXME: Directly free to keep low memory?
+    if (!enabled_) {
+        srs_freep(p);
+        return;
+    }
+
+    // If there is any reference about the message, we should free the
+    // shared message then recycle it(or free it).
+    if (!p->try_recycle()) {
+        srs_freep(p);
+        return;
+    }
+
+    // Recycle it.
+    cache_pkts_.push_back(p);
+}
+
+SrsRtpPacketCacheManager* _srs_rtp_cache = new SrsRtpPacketCacheManager();
+
 SrsRtpRawPayload::SrsRtpRawPayload()
 {
     payload = NULL;
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 920e91588..4174f68bb 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -30,6 +30,7 @@
 #include <srs_kernel_codec.hpp>
 
 #include <string>
+#include <list>
 
 class SrsRtpPacket2;
 
@@ -120,6 +121,9 @@ public:
 public:
     SrsRtpExtensionTypes();
     virtual ~SrsRtpExtensionTypes();
+public:
+    // Reset the object to reuse it.
+    void reset();
 private:
     bool register_id(int id, SrsRtpExtensionType type, std::string uri);
 private:
@@ -135,6 +139,9 @@ class SrsRtpExtensionTwcc// : public ISrsCodec
 public:
     SrsRtpExtensionTwcc();
     virtual ~SrsRtpExtensionTwcc();
+public:
+    // Reset the object to reuse it.
+    void reset();
 
     bool has_twcc_ext();
     uint8_t get_id();
@@ -157,7 +164,10 @@ class SrsRtpExtensionOneByte// : public ISrsCodec
     uint8_t value_;
 public:
     SrsRtpExtensionOneByte();
-    virtual ~SrsRtpExtensionOneByte() {}
+    virtual ~SrsRtpExtensionOneByte();
+public:
+    // Reset the object to reuse it.
+    void reset();
 
     bool exists() { return has_ext_; }
     int get_id() { return id_; }
@@ -182,14 +192,16 @@ private:
 public:
     SrsRtpExtensions();
     virtual ~SrsRtpExtensions();
-
+public:
+    // Reset the object to reuse it.
+    void reset();
+public:
     bool exists();
     void set_types_(const SrsRtpExtensionTypes* types);
     srs_error_t get_twcc_sequence_number(uint16_t& twcc_sn);
     srs_error_t set_twcc_sequence_number(uint8_t id, uint16_t sn);
     srs_error_t get_audio_level(uint8_t& level);
     srs_error_t set_audio_level(int id, uint8_t level);
-
 // ISrsCodec
 public:
     virtual srs_error_t decode(SrsBuffer* buf);
@@ -217,6 +229,9 @@ private:
 public:
     SrsRtpHeader();
     virtual ~SrsRtpHeader();
+public:
+    // Reset the object to reuse it.
+    void reset();
 public:
     virtual srs_error_t decode(SrsBuffer* buf);
 private:
@@ -262,6 +277,7 @@ public:
     virtual void on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload) = 0;
 };
 
+// The RTP packet with cached shared message.
 class SrsRtpPacket2
 {
 // RTP packet fields.
@@ -289,6 +305,8 @@ public:
     SrsRtpPacket2();
     virtual ~SrsRtpPacket2();
 public:
+    // Reset the object to reuse it.
+    void reset();
     // Wrap buffer to shared_message, which is managed by us.
     char* wrap(int size);
     char* wrap(char* data, int size);
@@ -296,6 +314,9 @@ public:
     char* wrap(SrsSharedPtrMessage* msg);
     // Get the cache buffer which binds to the shared message.
     SrsBuffer* cache_buffer() const;
+    // Try to start recycle, return whether it's reusable.
+    // @remark If not reusable, user should free it directly.
+    bool try_recycle();
 public:
     // Set the padding of RTP packet.
     void set_padding(int size);
@@ -316,6 +337,28 @@ public:
     virtual srs_error_t decode(SrsBuffer* buf);
 };
 
+// The RTP packet cache manager.
+class SrsRtpPacketCacheManager
+{
+private:
+    bool enabled_;
+    std::list<SrsRtpPacket2*> cache_pkts_;
+public:
+    SrsRtpPacketCacheManager();
+    virtual ~SrsRtpPacketCacheManager();
+public:
+    // Enable or disable cache.
+    void set_enabled(bool v);
+    bool enabled();
+    // Try to allocate from cache, create new packet if no cache.
+    SrsRtpPacket2* allocate();
+    // Recycle the packet to cache.
+    // @remark User can directly free the packet.
+    void recycle(SrsRtpPacket2* p);
+};
+
+extern SrsRtpPacketCacheManager* _srs_rtp_cache;
+
 // Single payload data.
 class SrsRtpRawPayload : public ISrsRtpPayloader
 {

From 4cb3a18d1e7a9e4d2d8801c43d9987e6d43be3d7 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Fri, 26 Feb 2021 16:36:21 +0800
Subject: [PATCH 025/102] RTC: Apply RTP packet cache manager

---
 trunk/src/app/srs_app_rtc_conn.cpp   | 26 ++++++--
 trunk/src/app/srs_app_rtc_conn.hpp   |  2 +
 trunk/src/app/srs_app_rtc_queue.cpp  |  8 +--
 trunk/src/app/srs_app_rtc_source.cpp | 99 ++++++++++++++++------------
 trunk/src/app/srs_app_rtc_source.hpp | 23 +++++--
 5 files changed, 100 insertions(+), 58 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index 829a447f0..290fbe40f 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -606,7 +606,7 @@ srs_error_t SrsRtcPlayStream::cycle()
 
             for (int i = 0; i < msg_count; i++) {
                 SrsRtpPacket2* pkt = pkts[i];
-                srs_freep(pkt);
+                _srs_rtp_cache->recycle(pkt);
             }
             pkts.clear();
         }
@@ -1189,13 +1189,29 @@ srs_error_t SrsRtcPublishStream::on_rtp_plaintext(char* plaintext, int nb_plaint
         _srs_blackhole->sendto(plaintext, nb_plaintext);
     }
 
-    // Decode the RTP packet from buffer.
-    SrsRtpPacket2* pkt = new SrsRtpPacket2();
-    SrsAutoFree(SrsRtpPacket2, pkt);
+    // Allocate packet form cache.
+    SrsRtpPacket2* pkt = _srs_rtp_cache->allocate();
+
+    // Copy the packet body.
+    pkt->wrap(plaintext, nb_plaintext);
+    srs_assert(pkt->cache_buffer()->pos() == 0);
+
+    // Handle the packet.
+    err = do_on_rtp_plaintext(pkt);
+
+    // Release the packet to cache.
+    _srs_rtp_cache->recycle(pkt);
+
+    return err;
+}
+
+srs_error_t SrsRtcPublishStream::do_on_rtp_plaintext(SrsRtpPacket2* pkt)
+{
+    srs_error_t err = srs_success;
 
     pkt->set_decode_handler(this);
     pkt->set_extension_types(&extension_types_);
-    pkt->wrap(plaintext, nb_plaintext);
+
     if ((err = pkt->decode(pkt->cache_buffer())) != srs_success) {
         return srs_error_wrap(err, "decode rtp packet");
     }
diff --git a/trunk/src/app/srs_app_rtc_conn.hpp b/trunk/src/app/srs_app_rtc_conn.hpp
index 538eca984..3483862cb 100644
--- a/trunk/src/app/srs_app_rtc_conn.hpp
+++ b/trunk/src/app/srs_app_rtc_conn.hpp
@@ -356,6 +356,8 @@ public:
 private:
     // @remark We copy the plaintext, user should free it.
     srs_error_t on_rtp_plaintext(char* plaintext, int nb_plaintext);
+private:
+    srs_error_t do_on_rtp_plaintext(SrsRtpPacket2* pkt);
 public:
     srs_error_t check_send_nacks();
 public:
diff --git a/trunk/src/app/srs_app_rtc_queue.cpp b/trunk/src/app/srs_app_rtc_queue.cpp
index 2bba97b57..ee166eacd 100644
--- a/trunk/src/app/srs_app_rtc_queue.cpp
+++ b/trunk/src/app/srs_app_rtc_queue.cpp
@@ -49,7 +49,7 @@ SrsRtpRingBuffer::~SrsRtpRingBuffer()
 {
     for (int i = 0; i < capacity_; ++i) {
         SrsRtpPacket2* pkt = queue_[i];
-        srs_freep(pkt);
+        _srs_rtp_cache->recycle(pkt);
     }
     srs_freepa(queue_);
 }
@@ -76,7 +76,7 @@ void SrsRtpRingBuffer::set(uint16_t at, SrsRtpPacket2* pkt)
     SrsRtpPacket2* p = queue_[at % capacity_];
 
     if (p) {
-        srs_freep(p);
+        _srs_rtp_cache->recycle(p);
     }
 
     queue_[at % capacity_] = pkt;
@@ -164,7 +164,7 @@ void SrsRtpRingBuffer::clear_histroy(uint16_t seq)
     for (uint16_t i = 0; i < capacity_; i++) {
         SrsRtpPacket2* p = queue_[i];
         if (p && p->header.get_sequence() < seq) {
-            srs_freep(p);
+            _srs_rtp_cache->recycle(p);
             queue_[i] = NULL;
         }
     }
@@ -175,7 +175,7 @@ void SrsRtpRingBuffer::clear_all_histroy()
     for (uint16_t i = 0; i < capacity_; i++) {
         SrsRtpPacket2* p = queue_[i];
         if (p) {
-            srs_freep(p);
+            _srs_rtp_cache->recycle(p);
             queue_[i] = NULL;
         }
     }
diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index c6a66e8df..8d9bd3cc6 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -169,7 +169,7 @@ SrsRtcConsumer::~SrsRtcConsumer()
     vector<SrsRtpPacket2*>::iterator it;
     for (it = queue.begin(); it != queue.end(); ++it) {
         SrsRtpPacket2* pkt = *it;
-        srs_freep(pkt);
+        _srs_rtp_cache->recycle(pkt);
     }
 
     srs_cond_destroy(mw_wait);
@@ -582,6 +582,16 @@ std::vector<SrsRtcTrackDescription*> SrsRtcStream::get_track_desc(std::string ty
     return track_descs;
 }
 
+SrsRtpPacketCacheHelper::SrsRtpPacketCacheHelper()
+{
+    pkt = _srs_rtp_cache->allocate();
+}
+
+SrsRtpPacketCacheHelper::~SrsRtpPacketCacheHelper()
+{
+    _srs_rtp_cache->recycle(pkt);
+}
+
 #ifdef SRS_FFMPEG_FIT
 SrsRtcFromRtmpBridger::SrsRtcFromRtmpBridger(SrsRtcStream* source)
 {
@@ -785,14 +795,14 @@ srs_error_t SrsRtcFromRtmpBridger::transcode(char* adts_audio, int nn_adts_audio
         // TODO: FIXME: Use it to padding audios.
         nn_max_extra_payload = srs_max(nn_max_extra_payload, size);
 
-        SrsRtpPacket2* pkt = NULL;
-        SrsAutoFree(SrsRtpPacket2, pkt);
+        SrsRtpPacketCacheHelper* helper = new SrsRtpPacketCacheHelper();
+        SrsAutoFree(SrsRtpPacketCacheHelper, helper);
 
-        if ((err = package_opus(data, size, &pkt)) != srs_success) {
+        if ((err = package_opus(data, size, helper)) != srs_success) {
             return srs_error_wrap(err, "package opus");
         }
 
-        if ((err = source_->on_rtp(pkt)) != srs_success) {
+        if ((err = source_->on_rtp(helper->pkt)) != srs_success) {
             return srs_error_wrap(err, "consume opus");
         }
     }
@@ -800,11 +810,11 @@ srs_error_t SrsRtcFromRtmpBridger::transcode(char* adts_audio, int nn_adts_audio
     return err;
 }
 
-srs_error_t SrsRtcFromRtmpBridger::package_opus(char* data, int size, SrsRtpPacket2** ppkt)
+srs_error_t SrsRtcFromRtmpBridger::package_opus(char* data, int size, SrsRtpPacketCacheHelper* helper)
 {
     srs_error_t err = srs_success;
 
-    SrsRtpPacket2* pkt = new SrsRtpPacket2();
+    SrsRtpPacket2* pkt = helper->pkt;
     pkt->header.set_payload_type(kAudioPayloadType);
     pkt->header.set_ssrc(audio_ssrc);
     pkt->frame_type = SrsFrameTypeAudio;
@@ -821,8 +831,6 @@ srs_error_t SrsRtcFromRtmpBridger::package_opus(char* data, int size, SrsRtpPack
     raw->payload = pkt->wrap(data, size);
     raw->nn_payload = size;
 
-    *ppkt = pkt;
-
     return err;
 }
 
@@ -849,22 +857,22 @@ srs_error_t SrsRtcFromRtmpBridger::on_video(SrsSharedPtrMessage* msg)
 
     // Well, for each IDR, we append a SPS/PPS before it, which is packaged in STAP-A.
     if (has_idr) {
-        SrsRtpPacket2* pkt = NULL;
-        SrsAutoFree(SrsRtpPacket2, pkt);
+        SrsRtpPacketCacheHelper* helper = new SrsRtpPacketCacheHelper();
+        SrsAutoFree(SrsRtpPacketCacheHelper, helper);
 
-        if ((err = package_stap_a(source_, msg, &pkt)) != srs_success) {
+        if ((err = package_stap_a(source_, msg, helper)) != srs_success) {
             return srs_error_wrap(err, "package stap-a");
         }
 
-        if ((err = source_->on_rtp(pkt)) != srs_success) {
+        if ((err = source_->on_rtp(helper->pkt)) != srs_success) {
             return srs_error_wrap(err, "consume sps/pps");
         }
     }
 
     // If merge Nalus, we pcakges all NALUs(samples) as one NALU, in a RTP or FUA packet.
-    vector<SrsRtpPacket2*> pkts;
+    vector<SrsRtpPacketCacheHelper*> helpers;
     if (merge_nalus && nn_samples > 1) {
-        if ((err = package_nalus(msg, samples, pkts)) != srs_success) {
+        if ((err = package_nalus(msg, samples, helpers)) != srs_success) {
             return srs_error_wrap(err, "package nalus as one");
         }
     } else {
@@ -879,22 +887,22 @@ srs_error_t SrsRtcFromRtmpBridger::on_video(SrsSharedPtrMessage* msg)
             }
 
             if (sample->size <= kRtpMaxPayloadSize) {
-                if ((err = package_single_nalu(msg, sample, pkts)) != srs_success) {
+                if ((err = package_single_nalu(msg, sample, helpers)) != srs_success) {
                     return srs_error_wrap(err, "package single nalu");
                 }
             } else {
-                if ((err = package_fu_a(msg, sample, kRtpMaxPayloadSize, pkts)) != srs_success) {
+                if ((err = package_fu_a(msg, sample, kRtpMaxPayloadSize, helpers)) != srs_success) {
                     return srs_error_wrap(err, "package fu-a");
                 }
             }
         }
     }
 
-    if (pkts.size() > 0) {
-        pkts.back()->header.set_marker(true);
+    if (!helpers.empty()) {
+        helpers.back()->pkt->header.set_marker(true);
     }
 
-    return consume_packets(pkts);
+    return consume_packets(helpers);
 }
 
 srs_error_t SrsRtcFromRtmpBridger::filter(SrsSharedPtrMessage* msg, SrsFormat* format, bool& has_idr, vector<SrsSample*>& samples)
@@ -927,7 +935,7 @@ srs_error_t SrsRtcFromRtmpBridger::filter(SrsSharedPtrMessage* msg, SrsFormat* f
     return err;
 }
 
-srs_error_t SrsRtcFromRtmpBridger::package_stap_a(SrsRtcStream* source, SrsSharedPtrMessage* msg, SrsRtpPacket2** ppkt)
+srs_error_t SrsRtcFromRtmpBridger::package_stap_a(SrsRtcStream* source, SrsSharedPtrMessage* msg, SrsRtpPacketCacheHelper* helper)
 {
     srs_error_t err = srs_success;
 
@@ -943,7 +951,7 @@ srs_error_t SrsRtcFromRtmpBridger::package_stap_a(SrsRtcStream* source, SrsShare
         return srs_error_new(ERROR_RTC_RTP_MUXER, "sps/pps empty");
     }
 
-    SrsRtpPacket2* pkt = new SrsRtpPacket2();
+    SrsRtpPacket2* pkt = helper->pkt;
     pkt->header.set_payload_type(kVideoPayloadType);
     pkt->header.set_ssrc(video_ssrc);
     pkt->frame_type = SrsFrameTypeVideo;
@@ -982,13 +990,12 @@ srs_error_t SrsRtcFromRtmpBridger::package_stap_a(SrsRtcStream* source, SrsShare
         payload += (int)pps.size();
     }
 
-    *ppkt = pkt;
     srs_info("RTC STAP-A seq=%u, sps %d, pps %d bytes", pkt->header.get_sequence(), sps.size(), pps.size());
 
     return err;
 }
 
-srs_error_t SrsRtcFromRtmpBridger::package_nalus(SrsSharedPtrMessage* msg, const vector<SrsSample*>& samples, vector<SrsRtpPacket2*>& pkts)
+srs_error_t SrsRtcFromRtmpBridger::package_nalus(SrsSharedPtrMessage* msg, const vector<SrsSample*>& samples, vector<SrsRtpPacketCacheHelper*>& helpers)
 {
     srs_error_t err = srs_success;
 
@@ -1024,7 +1031,10 @@ srs_error_t SrsRtcFromRtmpBridger::package_nalus(SrsSharedPtrMessage* msg, const
 
     if (nn_bytes < kRtpMaxPayloadSize) {
         // Package NALUs in a single RTP packet.
-        SrsRtpPacket2* pkt = new SrsRtpPacket2();
+        SrsRtpPacketCacheHelper* helper = new SrsRtpPacketCacheHelper();
+        helpers.push_back(helper);
+
+        SrsRtpPacket2* pkt = helper->pkt;
         pkt->header.set_payload_type(kVideoPayloadType);
         pkt->header.set_ssrc(video_ssrc);
         pkt->frame_type = SrsFrameTypeVideo;
@@ -1033,7 +1043,6 @@ srs_error_t SrsRtcFromRtmpBridger::package_nalus(SrsSharedPtrMessage* msg, const
         pkt->header.set_timestamp(msg->timestamp * 90);
         pkt->payload = raw;
         pkt->wrap(msg);
-        pkts.push_back(pkt);
     } else {
         // We must free it, should never use RTP packets to free it,
         // because more than one RTP packet will refer to it.
@@ -1057,7 +1066,10 @@ srs_error_t SrsRtcFromRtmpBridger::package_nalus(SrsSharedPtrMessage* msg, const
                 return srs_error_wrap(err, "read samples %d bytes, left %d, total %d", packet_size, nb_left, nn_bytes);
             }
 
-            SrsRtpPacket2* pkt = new SrsRtpPacket2();
+            SrsRtpPacketCacheHelper* helper = new SrsRtpPacketCacheHelper();
+            helpers.push_back(helper);
+
+            SrsRtpPacket2* pkt = helper->pkt;
             pkt->header.set_payload_type(kVideoPayloadType);
             pkt->header.set_ssrc(video_ssrc);
             pkt->frame_type = SrsFrameTypeVideo;
@@ -1072,7 +1084,6 @@ srs_error_t SrsRtcFromRtmpBridger::package_nalus(SrsSharedPtrMessage* msg, const
 
             pkt->payload = fua;
             pkt->wrap(msg);
-            pkts.push_back(pkt);
 
             nb_left -= packet_size;
         }
@@ -1082,11 +1093,14 @@ srs_error_t SrsRtcFromRtmpBridger::package_nalus(SrsSharedPtrMessage* msg, const
 }
 
 // Single NAL Unit Packet @see https://tools.ietf.org/html/rfc6184#section-5.6
-srs_error_t SrsRtcFromRtmpBridger::package_single_nalu(SrsSharedPtrMessage* msg, SrsSample* sample, vector<SrsRtpPacket2*>& pkts)
+srs_error_t SrsRtcFromRtmpBridger::package_single_nalu(SrsSharedPtrMessage* msg, SrsSample* sample, vector<SrsRtpPacketCacheHelper*>& helpers)
 {
     srs_error_t err = srs_success;
 
-    SrsRtpPacket2* pkt = new SrsRtpPacket2();
+    SrsRtpPacketCacheHelper* helper = new SrsRtpPacketCacheHelper();
+    helpers.push_back(helper);
+
+    SrsRtpPacket2* pkt = helper->pkt;
     pkt->header.set_payload_type(kVideoPayloadType);
     pkt->header.set_ssrc(video_ssrc);
     pkt->frame_type = SrsFrameTypeVideo;
@@ -1101,12 +1115,10 @@ srs_error_t SrsRtcFromRtmpBridger::package_single_nalu(SrsSharedPtrMessage* msg,
 
     pkt->wrap(msg);
 
-    pkts.push_back(pkt);
-
     return err;
 }
 
-srs_error_t SrsRtcFromRtmpBridger::package_fu_a(SrsSharedPtrMessage* msg, SrsSample* sample, int fu_payload_size, vector<SrsRtpPacket2*>& pkts)
+srs_error_t SrsRtcFromRtmpBridger::package_fu_a(SrsSharedPtrMessage* msg, SrsSample* sample, int fu_payload_size, vector<SrsRtpPacketCacheHelper*>& helpers)
 {
     srs_error_t err = srs_success;
 
@@ -1119,7 +1131,10 @@ srs_error_t SrsRtcFromRtmpBridger::package_fu_a(SrsSharedPtrMessage* msg, SrsSam
     for (int i = 0; i < num_of_packet; ++i) {
         int packet_size = srs_min(nb_left, fu_payload_size);
 
-        SrsRtpPacket2* pkt = new SrsRtpPacket2();
+        SrsRtpPacketCacheHelper* helper = new SrsRtpPacketCacheHelper();
+        helpers.push_back(helper);
+
+        SrsRtpPacket2* pkt = helper->pkt;
         pkt->header.set_payload_type(kVideoPayloadType);
         pkt->header.set_ssrc(video_ssrc);
         pkt->frame_type = SrsFrameTypeVideo;
@@ -1139,8 +1154,6 @@ srs_error_t SrsRtcFromRtmpBridger::package_fu_a(SrsSharedPtrMessage* msg, SrsSam
 
         pkt->wrap(msg);
 
-        pkts.push_back(pkt);
-
         p += packet_size;
         nb_left -= packet_size;
     }
@@ -1148,22 +1161,22 @@ srs_error_t SrsRtcFromRtmpBridger::package_fu_a(SrsSharedPtrMessage* msg, SrsSam
     return err;
 }
 
-srs_error_t SrsRtcFromRtmpBridger::consume_packets(vector<SrsRtpPacket2*>& pkts)
+srs_error_t SrsRtcFromRtmpBridger::consume_packets(vector<SrsRtpPacketCacheHelper*>& helpers)
 {
     srs_error_t err = srs_success;
 
     // TODO: FIXME: Consume a range of packets.
-    for (int i = 0; i < (int)pkts.size(); i++) {
-        SrsRtpPacket2* pkt = pkts[i];
-        if ((err = source_->on_rtp(pkt)) != srs_success) {
+    for (int i = 0; i < (int)helpers.size(); i++) {
+        SrsRtpPacketCacheHelper* helper = helpers[i];
+        if ((err = source_->on_rtp(helper->pkt)) != srs_success) {
             err = srs_error_wrap(err, "consume sps/pps");
             break;
         }
     }
 
-    for (int i = 0; i < (int)pkts.size(); i++) {
-        SrsRtpPacket2* pkt = pkts[i];
-        srs_freep(pkt);
+    for (int i = 0; i < (int)helpers.size(); i++) {
+        SrsRtpPacketCacheHelper* helper = helpers[i];
+        srs_freep(helper);
     }
 
     return err;
diff --git a/trunk/src/app/srs_app_rtc_source.hpp b/trunk/src/app/srs_app_rtc_source.hpp
index 6d2334083..5d8f03f99 100644
--- a/trunk/src/app/srs_app_rtc_source.hpp
+++ b/trunk/src/app/srs_app_rtc_source.hpp
@@ -47,6 +47,7 @@ class SrsRtcStream;
 class SrsRtcFromRtmpBridger;
 class SrsAudioRecode;
 class SrsRtpPacket2;
+class SrsRtpPacketCacheHelper;
 class SrsSample;
 class SrsRtcStreamDescription;
 class SrsRtcTrackDescription;
@@ -222,6 +223,16 @@ public:
     std::vector<SrsRtcTrackDescription*> get_track_desc(std::string type, std::string media_type);
 };
 
+// A helper class, to release the packet to cache.
+class SrsRtpPacketCacheHelper
+{
+public:
+    SrsRtpPacket2* pkt;
+public:
+    SrsRtpPacketCacheHelper();
+    virtual ~SrsRtpPacketCacheHelper();
+};
+
 #ifdef SRS_FFMPEG_FIT
 class SrsRtcFromRtmpBridger : public ISrsSourceBridger
 {
@@ -252,16 +263,16 @@ public:
     virtual srs_error_t on_audio(SrsSharedPtrMessage* msg);
 private:
     srs_error_t transcode(char* adts_audio, int nn_adts_audio);
-    srs_error_t package_opus(char* data, int size, SrsRtpPacket2** ppkt);
+    srs_error_t package_opus(char* data, int size, SrsRtpPacketCacheHelper* helper);
 public:
     virtual srs_error_t on_video(SrsSharedPtrMessage* msg);
 private:
     srs_error_t filter(SrsSharedPtrMessage* msg, SrsFormat* format, bool& has_idr, std::vector<SrsSample*>& samples);
-    srs_error_t package_stap_a(SrsRtcStream* source, SrsSharedPtrMessage* msg, SrsRtpPacket2** ppkt);
-    srs_error_t package_nalus(SrsSharedPtrMessage* msg, const std::vector<SrsSample*>& samples, std::vector<SrsRtpPacket2*>& pkts);
-    srs_error_t package_single_nalu(SrsSharedPtrMessage* msg, SrsSample* sample, std::vector<SrsRtpPacket2*>& pkts);
-    srs_error_t package_fu_a(SrsSharedPtrMessage* msg, SrsSample* sample, int fu_payload_size, std::vector<SrsRtpPacket2*>& pkts);
-    srs_error_t consume_packets(std::vector<SrsRtpPacket2*>& pkts);
+    srs_error_t package_stap_a(SrsRtcStream* source, SrsSharedPtrMessage* msg, SrsRtpPacketCacheHelper* helper);
+    srs_error_t package_nalus(SrsSharedPtrMessage* msg, const std::vector<SrsSample*>& samples, std::vector<SrsRtpPacketCacheHelper*>& helpers);
+    srs_error_t package_single_nalu(SrsSharedPtrMessage* msg, SrsSample* sample, std::vector<SrsRtpPacketCacheHelper*>& helpers);
+    srs_error_t package_fu_a(SrsSharedPtrMessage* msg, SrsSample* sample, int fu_payload_size, std::vector<SrsRtpPacketCacheHelper*>& helpers);
+    srs_error_t consume_packets(std::vector<SrsRtpPacketCacheHelper*>& helpers);
 };
 #endif
 

From 6e9cb059b32d6c480e826375f08f23b43ea8cbd6 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Fri, 26 Feb 2021 18:32:29 +0800
Subject: [PATCH 026/102] RTC: Stat the large buffer allocation

---
 trunk/src/app/srs_app_rtc_server.cpp    | 7 ++++---
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 3 +++
 2 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index d4996de4c..40bc4dae9 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -78,6 +78,7 @@ extern SrsPps* _srs_pps_rmnack;
 extern SrsPps* _srs_pps_objs_rtps;
 extern SrsPps* _srs_pps_objs_rraw;
 extern SrsPps* _srs_pps_objs_rfua;
+extern SrsPps* _srs_pps_objs_rbuf;
 
 SrsRtcBlackhole::SrsRtcBlackhole()
 {
@@ -684,9 +685,9 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
     static char buf[128];
 
     string objs_desc;
-    _srs_pps_objs_rtps->update(); _srs_pps_objs_rraw->update(); _srs_pps_objs_rfua->update();
-    if (_srs_pps_objs_rtps->r10s() || _srs_pps_objs_rraw->r10s() || _srs_pps_objs_rfua->r10s()) {
-        snprintf(buf, sizeof(buf), ", objs=%d,%d,%d", _srs_pps_objs_rtps->r10s(), _srs_pps_objs_rraw->r10s(), _srs_pps_objs_rfua->r10s());
+    _srs_pps_objs_rtps->update(); _srs_pps_objs_rraw->update(); _srs_pps_objs_rfua->update(); _srs_pps_objs_rbuf->update();
+    if (_srs_pps_objs_rtps->r10s() || _srs_pps_objs_rraw->r10s() || _srs_pps_objs_rfua->r10s() || _srs_pps_objs_rbuf->r10s()) {
+        snprintf(buf, sizeof(buf), ", objs=%d,%d,%d,%d", _srs_pps_objs_rtps->r10s(), _srs_pps_objs_rraw->r10s(), _srs_pps_objs_rfua->r10s(), _srs_pps_objs_rbuf->r10s());
         objs_desc = buf;
     }
 
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 352fed02e..cbbe7741a 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -39,6 +39,7 @@ using namespace std;
 SrsPps* _srs_pps_objs_rtps = new SrsPps();
 SrsPps* _srs_pps_objs_rraw = new SrsPps();
 SrsPps* _srs_pps_objs_rfua = new SrsPps();
+SrsPps* _srs_pps_objs_rbuf = new SrsPps();
 
 /* @see https://tools.ietf.org/html/rfc1889#section-5.1
   0                   1                   2                   3
@@ -867,6 +868,8 @@ char* SrsRtpPacket2::wrap(int size)
     srs_freep(cache_buffer_);
     cache_buffer_ = new SrsBuffer(buf, size);
 
+    ++_srs_pps_objs_rbuf->sugar;
+
     return buf;
 }
 

From 4d0863468af1ea580540aabc7f71fa746625b754 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Fri, 26 Feb 2021 19:46:52 +0800
Subject: [PATCH 027/102] RTC: Cache the large buffer allocation

---
 trunk/conf/full.conf                    |   3 +
 trunk/src/app/srs_app_config.cpp        |  19 +++-
 trunk/src/app/srs_app_config.hpp        |   1 +
 trunk/src/app/srs_app_rtc_conn.cpp      |  10 +-
 trunk/src/app/srs_app_rtc_conn.hpp      |   2 +-
 trunk/src/app/srs_app_rtc_server.cpp    |   5 +-
 trunk/src/kernel/srs_kernel_flv.hpp     |   2 +
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 145 +++++++-----------------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp |  81 +++++++++----
 9 files changed, 135 insertions(+), 133 deletions(-)

diff --git a/trunk/conf/full.conf b/trunk/conf/full.conf
index b850003e5..19bd6f7e1 100644
--- a/trunk/conf/full.conf
+++ b/trunk/conf/full.conf
@@ -500,6 +500,9 @@ rtc_server {
     # Whether enable the RTP packet cache.
     # default: off
     rtp_cache off;
+    #Whether enable the RTP message(a large buffer) cache.
+    # default: off
+    rtp_msg_cache off;
     # The black-hole to copy packet to, for debugging.
     # For example, when debugging Chrome publish stream, the received packets are encrypted cipher,
     # we can set the publisher black-hole, SRS will copy the plaintext packets to black-hole, and
diff --git a/trunk/src/app/srs_app_config.cpp b/trunk/src/app/srs_app_config.cpp
index 52fadae34..49ff10fea 100644
--- a/trunk/src/app/srs_app_config.cpp
+++ b/trunk/src/app/srs_app_config.cpp
@@ -3651,7 +3651,7 @@ srs_error_t SrsConfig::check_normal_config()
             string n = conf->at(i)->name;
             if (n != "enabled" && n != "listen" && n != "dir" && n != "candidate" && n != "ecdsa"
                 && n != "encrypt" && n != "reuseport" && n != "merge_nalus" && n != "perf_stat" && n != "black_hole"
-                && n != "ip_family" && n != "rtp_cache") {
+                && n != "ip_family" && n != "rtp_cache" && n != "rtp_msg_cache") {
                 return srs_error_new(ERROR_SYSTEM_CONFIG_INVALID, "illegal rtc_server.%s", n.c_str());
             }
         }
@@ -4919,6 +4919,23 @@ bool SrsConfig::get_rtc_server_rtp_cache()
     return SRS_CONF_PERFER_FALSE(conf->arg0());
 }
 
+bool SrsConfig::get_rtc_server_rtp_msg_cache()
+{
+    static bool DEFAULT = false;
+
+    SrsConfDirective* conf = root->get("rtc_server");
+    if (!conf) {
+        return DEFAULT;
+    }
+
+    conf = conf->get("rtp_msg_cache");
+    if (!conf || conf->arg0().empty()) {
+        return DEFAULT;
+    }
+
+    return SRS_CONF_PERFER_FALSE(conf->arg0());
+}
+
 bool SrsConfig::get_rtc_server_black_hole()
 {
     static bool DEFAULT = false;
diff --git a/trunk/src/app/srs_app_config.hpp b/trunk/src/app/srs_app_config.hpp
index a6cebc7c3..5ba3e36f9 100644
--- a/trunk/src/app/srs_app_config.hpp
+++ b/trunk/src/app/srs_app_config.hpp
@@ -535,6 +535,7 @@ public:
     virtual bool get_rtc_server_merge_nalus();
     virtual bool get_rtc_server_perf_stat();
     virtual bool get_rtc_server_rtp_cache();
+    virtual bool get_rtc_server_rtp_msg_cache();
     virtual bool get_rtc_server_black_hole();
     virtual std::string get_rtc_server_black_hole_addr();
 private:
diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index 290fbe40f..2ac360d5d 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -1193,11 +1193,11 @@ srs_error_t SrsRtcPublishStream::on_rtp_plaintext(char* plaintext, int nb_plaint
     SrsRtpPacket2* pkt = _srs_rtp_cache->allocate();
 
     // Copy the packet body.
-    pkt->wrap(plaintext, nb_plaintext);
-    srs_assert(pkt->cache_buffer()->pos() == 0);
+    char* p = pkt->wrap(plaintext, nb_plaintext);
 
     // Handle the packet.
-    err = do_on_rtp_plaintext(pkt);
+    SrsBuffer buf(p, nb_plaintext);
+    err = do_on_rtp_plaintext(pkt, &buf);
 
     // Release the packet to cache.
     _srs_rtp_cache->recycle(pkt);
@@ -1205,14 +1205,14 @@ srs_error_t SrsRtcPublishStream::on_rtp_plaintext(char* plaintext, int nb_plaint
     return err;
 }
 
-srs_error_t SrsRtcPublishStream::do_on_rtp_plaintext(SrsRtpPacket2* pkt)
+srs_error_t SrsRtcPublishStream::do_on_rtp_plaintext(SrsRtpPacket2* pkt, SrsBuffer* buf)
 {
     srs_error_t err = srs_success;
 
     pkt->set_decode_handler(this);
     pkt->set_extension_types(&extension_types_);
 
-    if ((err = pkt->decode(pkt->cache_buffer())) != srs_success) {
+    if ((err = pkt->decode(buf)) != srs_success) {
         return srs_error_wrap(err, "decode rtp packet");
     }
 
diff --git a/trunk/src/app/srs_app_rtc_conn.hpp b/trunk/src/app/srs_app_rtc_conn.hpp
index 3483862cb..644c718f9 100644
--- a/trunk/src/app/srs_app_rtc_conn.hpp
+++ b/trunk/src/app/srs_app_rtc_conn.hpp
@@ -357,7 +357,7 @@ private:
     // @remark We copy the plaintext, user should free it.
     srs_error_t on_rtp_plaintext(char* plaintext, int nb_plaintext);
 private:
-    srs_error_t do_on_rtp_plaintext(SrsRtpPacket2* pkt);
+    srs_error_t do_on_rtp_plaintext(SrsRtpPacket2* pkt, SrsBuffer* buf);
 public:
     srs_error_t check_send_nacks();
 public:
diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index 40bc4dae9..36b4b53ee 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -287,7 +287,10 @@ srs_error_t SrsRtcServer::initialize()
     bool rtp_cache = _srs_config->get_rtc_server_rtp_cache();
     _srs_rtp_cache->set_enabled(rtp_cache);
 
-    srs_trace("RTC server init ok, rtp_cache=%d", rtp_cache);
+    bool rtp_msg_cache = _srs_config->get_rtc_server_rtp_msg_cache();
+    _srs_rtp_msg_cache->set_enabled(rtp_msg_cache);
+
+    srs_trace("RTC server init ok, rc=%d, rmc=%d", rtp_cache, rtp_msg_cache);
 
     return err;
 }
diff --git a/trunk/src/kernel/srs_kernel_flv.hpp b/trunk/src/kernel/srs_kernel_flv.hpp
index f3be5931b..ba53e92db 100644
--- a/trunk/src/kernel/srs_kernel_flv.hpp
+++ b/trunk/src/kernel/srs_kernel_flv.hpp
@@ -312,6 +312,8 @@ public:
     SrsSharedPtrMessage();
     virtual ~SrsSharedPtrMessage();
 public:
+    // For object cache to reset and reuse it.
+    bool reset() { return true; }
     // Create shared ptr message,
     // copy header, manage the payload of msg,
     // set the payload to NULL to prevent double free.
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index cbbe7741a..60c076a9d 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -811,7 +811,6 @@ SrsRtpPacket2::SrsRtpPacket2()
 {
     payload = NULL;
     shared_msg = NULL;
-    cache_buffer_ = NULL;
 
     reset();
 
@@ -821,11 +820,17 @@ SrsRtpPacket2::SrsRtpPacket2()
 SrsRtpPacket2::~SrsRtpPacket2()
 {
     srs_freep(payload);
-    srs_freep(shared_msg);
-    srs_freep(cache_buffer_);
+
+    // Recyle the real owner of message, no other reference object.
+    if (shared_msg && shared_msg->count() == 0) {
+        _srs_rtp_msg_cache->recycle(shared_msg);
+        shared_msg = NULL;
+    } else {
+        srs_freep(shared_msg);
+    }
 }
 
-void SrsRtpPacket2::reset()
+bool SrsRtpPacket2::reset()
 {
     nalu_type = SrsAvcNaluTypeReserved;
     frame_type = SrsFrameTypeReserved;
@@ -839,38 +844,49 @@ void SrsRtpPacket2::reset()
     // and it's different for each packet.
     srs_freep(payload);
 
-    // We should reset the cached buffer.
-    if (cache_buffer_) {
-        cache_buffer_->skip(-1 * cache_buffer_->pos());
+    // Recyle the real owner of message, no other reference object.
+    if (shared_msg && shared_msg->count() == 0) {
+        _srs_rtp_msg_cache->recycle(shared_msg);
+        shared_msg = NULL;
+    } else {
+        srs_freep(shared_msg);
     }
+
+    return true;
 }
 
 char* SrsRtpPacket2::wrap(int size)
 {
     // If the buffer is large enough, reuse it.
     if (shared_msg && shared_msg->size >= size) {
-        // The size maybe changed, so we MUST reset it.
-        cache_buffer_->set_size(size);
-
         return shared_msg->payload;
     }
 
-    // Create buffer if empty or not large enough.
-    srs_freep(shared_msg);
-    shared_msg = new SrsSharedPtrMessage();
+    // Create a large enough message, with under-layer buffer.
+    while (true) {
+        srs_freep(shared_msg);
+        shared_msg = _srs_rtp_msg_cache->allocate();
 
-    // For RTC, we use larger under-layer buffer for each packet.
-    int nb_buffer = srs_max(size, kRtpPacketSize);
-    char* buf = new char[nb_buffer];
-    shared_msg->wrap(buf, nb_buffer);
+        // If got a cached message(which has payload), but it's too small,
+        // we free it and allocate a larger one.
+        if (shared_msg->payload && shared_msg->size < size) {
+            continue;
+        }
 
-    // The size of buffer must equal to the actual size.
-    srs_freep(cache_buffer_);
-    cache_buffer_ = new SrsBuffer(buf, size);
+        // Create under-layer buffer for new message
+        if (!shared_msg->payload) {
+            // For RTC, we use larger under-layer buffer for each packet.
+            int nb_buffer = srs_max(size, kRtpPacketSize);
+            char* buf = new char[nb_buffer];
+            shared_msg->wrap(buf, nb_buffer);
 
-    ++_srs_pps_objs_rbuf->sugar;
+            ++_srs_pps_objs_rbuf->sugar;
+        }
 
-    return buf;
+        break;
+    }
+
+    return shared_msg->payload;
 }
 
 char* SrsRtpPacket2::wrap(char* data, int size)
@@ -885,29 +901,9 @@ char* SrsRtpPacket2::wrap(SrsSharedPtrMessage* msg)
     srs_freep(shared_msg);
     shared_msg = msg->copy();
 
-    srs_freep(cache_buffer_);
-    cache_buffer_ = new SrsBuffer(msg->payload, msg->size);
-
     return msg->payload;
 }
 
-SrsBuffer* SrsRtpPacket2::cache_buffer() const
-{
-    return cache_buffer_;
-}
-
-bool SrsRtpPacket2::try_recycle()
-{
-    // When recycling, and there is references about he shared buffer, we must free
-    // the shared message(may not free the buffer) to stop reuse the shared message.
-    if (shared_msg && shared_msg->count() > 0) {
-        srs_freep(shared_msg);
-    }
-
-    // OK, allow to recycle this object.
-    return true;
-}
-
 void SrsRtpPacket2::set_padding(int size)
 {
     header.set_padding(size);
@@ -1026,70 +1022,9 @@ srs_error_t SrsRtpPacket2::decode(SrsBuffer* buf)
     return err;
 }
 
-SrsRtpPacketCacheManager::SrsRtpPacketCacheManager()
-{
-    enabled_ = false;
-}
+SrsRtpObjectCacheManager<SrsRtpPacket2>* _srs_rtp_cache = new SrsRtpObjectCacheManager<SrsRtpPacket2>();
 
-SrsRtpPacketCacheManager::~SrsRtpPacketCacheManager()
-{
-    list<SrsRtpPacket2*>::iterator it;
-    for (it = cache_pkts_.begin(); it != cache_pkts_.end(); ++it) {
-        SrsRtpPacket2* pkt = *it;
-        srs_freep(pkt);
-    }
-}
-
-void SrsRtpPacketCacheManager::set_enabled(bool v)
-{
-    enabled_ = v;
-}
-
-bool SrsRtpPacketCacheManager::enabled()
-{
-    return enabled_;
-}
-
-SrsRtpPacket2* SrsRtpPacketCacheManager::allocate()
-{
-    if (!enabled_ || cache_pkts_.empty()) {
-        return new SrsRtpPacket2();
-    }
-
-    SrsRtpPacket2* pkt = cache_pkts_.back();
-    cache_pkts_.pop_back();
-
-    // We MUST reset it to reuse it.
-    pkt->reset();
-
-    return pkt;
-}
-
-void SrsRtpPacketCacheManager::recycle(SrsRtpPacket2* p)
-{
-    // The p may be NULL, because srs_freep(NULL) is ok.
-    if (!p) {
-        return;
-    }
-
-    // TODO: FIXME: Directly free to keep low memory?
-    if (!enabled_) {
-        srs_freep(p);
-        return;
-    }
-
-    // If there is any reference about the message, we should free the
-    // shared message then recycle it(or free it).
-    if (!p->try_recycle()) {
-        srs_freep(p);
-        return;
-    }
-
-    // Recycle it.
-    cache_pkts_.push_back(p);
-}
-
-SrsRtpPacketCacheManager* _srs_rtp_cache = new SrsRtpPacketCacheManager();
+SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache = new SrsRtpObjectCacheManager<SrsSharedPtrMessage>();
 
 SrsRtpRawPayload::SrsRtpRawPayload()
 {
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 4174f68bb..d8995a39a 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -285,8 +285,6 @@ public:
     SrsRtpHeader header;
     ISrsRtpPayloader* payload;
 private:
-    // The buffer bind to the shared message.
-    SrsBuffer* cache_buffer_;
     // The original shared message, all RTP packets can refer to its data.
     SrsSharedPtrMessage* shared_msg;
 // Helper fields.
@@ -306,17 +304,12 @@ public:
     virtual ~SrsRtpPacket2();
 public:
     // Reset the object to reuse it.
-    void reset();
+    virtual bool reset();
     // Wrap buffer to shared_message, which is managed by us.
     char* wrap(int size);
     char* wrap(char* data, int size);
     // Wrap the shared message, we copy it.
     char* wrap(SrsSharedPtrMessage* msg);
-    // Get the cache buffer which binds to the shared message.
-    SrsBuffer* cache_buffer() const;
-    // Try to start recycle, return whether it's reusable.
-    // @remark If not reusable, user should free it directly.
-    bool try_recycle();
 public:
     // Set the padding of RTP packet.
     void set_padding(int size);
@@ -337,27 +330,75 @@ public:
     virtual srs_error_t decode(SrsBuffer* buf);
 };
 
-// The RTP packet cache manager.
-class SrsRtpPacketCacheManager
+// The RTP packet or message cache manager.
+template<typename T>
+class SrsRtpObjectCacheManager
 {
 private:
     bool enabled_;
-    std::list<SrsRtpPacket2*> cache_pkts_;
+    std::list<T*> cache_objs_;
 public:
-    SrsRtpPacketCacheManager();
-    virtual ~SrsRtpPacketCacheManager();
+    SrsRtpObjectCacheManager() {
+        enabled_ = false;
+    }
+    virtual ~SrsRtpObjectCacheManager() {
+        typedef typename std::list<T*>::iterator iterator;
+        for (iterator it = cache_objs_.begin(); it != cache_objs_.end(); ++it) {
+            T* obj = *it;
+            srs_freep(obj);
+        }
+    }
 public:
     // Enable or disable cache.
-    void set_enabled(bool v);
-    bool enabled();
-    // Try to allocate from cache, create new packet if no cache.
-    SrsRtpPacket2* allocate();
-    // Recycle the packet to cache.
+    void set_enabled(bool v) {
+        enabled_ = v;
+    }
+    bool enabled() {
+        return enabled_;
+    }
+    // Try to allocate from cache, create new object if no cache.
+    T* allocate() {
+        while (true) {
+            if (!enabled_ || cache_objs_.empty()) {
+                return new T();
+            }
+
+            T* obj = cache_objs_.back();
+            cache_objs_.pop_back();
+
+            // If reset the object fail, drop the cached object.
+            if (!obj->reset()) {
+                srs_freep(obj);
+                continue;
+            }
+
+            return obj;
+        }
+    }
+    // Recycle the object to cache.
     // @remark User can directly free the packet.
-    void recycle(SrsRtpPacket2* p);
+    void recycle(T* p) {
+        // The p may be NULL, because srs_freep(NULL) is ok.
+        if (!p) {
+            return;
+        }
+
+        // TODO: FIXME: Directly free to keep low memory?
+        if (!enabled_) {
+            srs_freep(p);
+            return;
+        }
+
+        // Recycle it.
+        cache_objs_.push_back(p);
+    }
 };
 
-extern SrsRtpPacketCacheManager* _srs_rtp_cache;
+// For RTP packets cache.
+extern SrsRtpObjectCacheManager<SrsRtpPacket2>* _srs_rtp_cache;
+
+// For RTP packet shared messages cache.
+extern SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache;
 
 // Single payload data.
 class SrsRtpRawPayload : public ISrsRtpPayloader

From fc4d7080c69a9629997ce255cb97df62c414951a Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Fri, 26 Feb 2021 20:28:05 +0800
Subject: [PATCH 028/102] RTC: Cache the RTP payload objects

---
 trunk/src/app/srs_app_rtc_server.cpp    |  2 ++
 trunk/src/app/srs_app_rtc_source.cpp    | 12 ++++++------
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 25 ++++++++++++++++++-------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp | 18 ++++++++++++------
 4 files changed, 38 insertions(+), 19 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index 36b4b53ee..e1b601478 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -286,6 +286,8 @@ srs_error_t SrsRtcServer::initialize()
 
     bool rtp_cache = _srs_config->get_rtc_server_rtp_cache();
     _srs_rtp_cache->set_enabled(rtp_cache);
+    _srs_rtp_raw_cache->set_enabled(rtp_cache);
+    _srs_rtp_fua_cache->set_enabled(rtp_cache);
 
     bool rtp_msg_cache = _srs_config->get_rtc_server_rtp_msg_cache();
     _srs_rtp_msg_cache->set_enabled(rtp_msg_cache);
diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index 8d9bd3cc6..87ef3fb24 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -825,7 +825,7 @@ srs_error_t SrsRtcFromRtmpBridger::package_opus(char* data, int size, SrsRtpPack
     // TODO: FIXME: Why 960? Need Refactoring?
     audio_timestamp += 960;
 
-    SrsRtpRawPayload* raw = new SrsRtpRawPayload();
+    SrsRtpRawPayload* raw = _srs_rtp_raw_cache->allocate();
     pkt->payload = raw;
 
     raw->payload = pkt->wrap(data, size);
@@ -1107,7 +1107,7 @@ srs_error_t SrsRtcFromRtmpBridger::package_single_nalu(SrsSharedPtrMessage* msg,
     pkt->header.set_sequence(video_sequence++);
     pkt->header.set_timestamp(msg->timestamp * 90);
 
-    SrsRtpRawPayload* raw = new SrsRtpRawPayload();
+    SrsRtpRawPayload* raw = _srs_rtp_raw_cache->allocate();
     pkt->payload = raw;
 
     raw->payload = sample->bytes;
@@ -1141,7 +1141,7 @@ srs_error_t SrsRtcFromRtmpBridger::package_fu_a(SrsSharedPtrMessage* msg, SrsSam
         pkt->header.set_sequence(video_sequence++);
         pkt->header.set_timestamp(msg->timestamp * 90);
 
-        SrsRtpFUAPayload2* fua = new SrsRtpFUAPayload2();
+        SrsRtpFUAPayload2* fua = _srs_rtp_fua_cache->allocate();
         pkt->payload = fua;
 
         fua->nri = (SrsAvcNaluType)header;
@@ -1861,7 +1861,7 @@ void SrsRtcAudioRecvTrack::on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffe
         return;
     }
 
-    *ppayload = new SrsRtpRawPayload();
+    *ppayload = _srs_rtp_raw_cache->allocate();
 }
 
 srs_error_t SrsRtcAudioRecvTrack::on_rtp(SrsRtcStream* source, SrsRtpPacket2* pkt, bool nack_enabled)
@@ -1921,9 +1921,9 @@ void SrsRtcVideoRecvTrack::on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffe
     if (v == kStapA) {
         *ppayload = new SrsRtpSTAPPayload();
     } else if (v == kFuA) {
-        *ppayload = new SrsRtpFUAPayload2();
+        *ppayload = _srs_rtp_fua_cache->allocate();
     } else {
-        *ppayload = new SrsRtpRawPayload();
+        *ppayload = _srs_rtp_raw_cache->allocate();
     }
 }
 
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 60c076a9d..ca248c196 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -839,10 +839,19 @@ bool SrsRtpPacket2::reset()
 
     header.reset();
 
-    // We do not cache the payload, it will be created even
-    // we cache it, because it only stores pointers to the shared message,
-    // and it's different for each packet.
-    srs_freep(payload);
+    // Only recycle some common payloads.
+    SrsRtpRawPayload* raw_payload;
+    SrsRtpFUAPayload2* fua_payload;
+
+    if ((raw_payload = dynamic_cast<SrsRtpRawPayload*>(payload)) != NULL) {
+        _srs_rtp_raw_cache->recycle(raw_payload);
+        payload = NULL;
+    } else if ((fua_payload = dynamic_cast<SrsRtpFUAPayload2*>(payload)) != NULL) {
+        _srs_rtp_fua_cache->recycle(fua_payload);
+        payload = NULL;
+    } else {
+        srs_freep(payload);
+    }
 
     // Recyle the real owner of message, no other reference object.
     if (shared_msg && shared_msg->count() == 0) {
@@ -1012,7 +1021,7 @@ srs_error_t SrsRtpPacket2::decode(SrsBuffer* buf)
 
     // By default, we always use the RAW payload.
     if (!payload) {
-        payload = new SrsRtpRawPayload();
+        payload = _srs_rtp_raw_cache->allocate();
     }
 
     if ((err = payload->decode(buf)) != srs_success) {
@@ -1023,6 +1032,8 @@ srs_error_t SrsRtpPacket2::decode(SrsBuffer* buf)
 }
 
 SrsRtpObjectCacheManager<SrsRtpPacket2>* _srs_rtp_cache = new SrsRtpObjectCacheManager<SrsRtpPacket2>();
+SrsRtpObjectCacheManager<SrsRtpRawPayload>* _srs_rtp_raw_cache = new SrsRtpObjectCacheManager<SrsRtpRawPayload>();
+SrsRtpObjectCacheManager<SrsRtpFUAPayload2>* _srs_rtp_fua_cache = new SrsRtpObjectCacheManager<SrsRtpFUAPayload2>();
 
 SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache = new SrsRtpObjectCacheManager<SrsSharedPtrMessage>();
 
@@ -1072,7 +1083,7 @@ srs_error_t SrsRtpRawPayload::decode(SrsBuffer* buf)
 
 ISrsRtpPayloader* SrsRtpRawPayload::copy()
 {
-    SrsRtpRawPayload* cp = new SrsRtpRawPayload();
+    SrsRtpRawPayload* cp = _srs_rtp_raw_cache->allocate();
 
     cp->payload = payload;
     cp->nn_payload = nn_payload;
@@ -1561,7 +1572,7 @@ srs_error_t SrsRtpFUAPayload2::decode(SrsBuffer* buf)
 
 ISrsRtpPayloader* SrsRtpFUAPayload2::copy()
 {
-    SrsRtpFUAPayload2* cp = new SrsRtpFUAPayload2();
+    SrsRtpFUAPayload2* cp = _srs_rtp_fua_cache->allocate();
 
     cp->nri = nri;
     cp->start = start;
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index d8995a39a..be54e856f 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -394,12 +394,6 @@ public:
     }
 };
 
-// For RTP packets cache.
-extern SrsRtpObjectCacheManager<SrsRtpPacket2>* _srs_rtp_cache;
-
-// For RTP packet shared messages cache.
-extern SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache;
-
 // Single payload data.
 class SrsRtpRawPayload : public ISrsRtpPayloader
 {
@@ -411,6 +405,8 @@ public:
 public:
     SrsRtpRawPayload();
     virtual ~SrsRtpRawPayload();
+public:
+    bool reset() { return true; }
 // interface ISrsRtpPayloader
 public:
     virtual uint64_t nb_bytes();
@@ -509,6 +505,8 @@ public:
 public:
     SrsRtpFUAPayload2();
     virtual ~SrsRtpFUAPayload2();
+public:
+    bool reset() { return true; }
 // interface ISrsRtpPayloader
 public:
     virtual uint64_t nb_bytes();
@@ -517,4 +515,12 @@ public:
     virtual ISrsRtpPayloader* copy();
 };
 
+// For RTP packets cache.
+extern SrsRtpObjectCacheManager<SrsRtpPacket2>* _srs_rtp_cache;
+extern SrsRtpObjectCacheManager<SrsRtpRawPayload>* _srs_rtp_raw_cache;
+extern SrsRtpObjectCacheManager<SrsRtpFUAPayload2>* _srs_rtp_fua_cache;
+
+// For RTP packet shared messages cache.
+extern SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache;
+
 #endif

From 919107c6745e9372217d77f12194f4c9c97a155f Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Fri, 26 Feb 2021 20:38:50 +0800
Subject: [PATCH 029/102] Perf: Stat the shared messages.

---
 trunk/src/app/srs_app_rtc_server.cpp | 7 ++++---
 trunk/src/kernel/srs_kernel_flv.cpp  | 6 ++++++
 2 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index e1b601478..45be1e6ba 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -79,6 +79,7 @@ extern SrsPps* _srs_pps_objs_rtps;
 extern SrsPps* _srs_pps_objs_rraw;
 extern SrsPps* _srs_pps_objs_rfua;
 extern SrsPps* _srs_pps_objs_rbuf;
+extern SrsPps* _srs_pps_objs_msgs;
 
 SrsRtcBlackhole::SrsRtcBlackhole()
 {
@@ -690,9 +691,9 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
     static char buf[128];
 
     string objs_desc;
-    _srs_pps_objs_rtps->update(); _srs_pps_objs_rraw->update(); _srs_pps_objs_rfua->update(); _srs_pps_objs_rbuf->update();
-    if (_srs_pps_objs_rtps->r10s() || _srs_pps_objs_rraw->r10s() || _srs_pps_objs_rfua->r10s() || _srs_pps_objs_rbuf->r10s()) {
-        snprintf(buf, sizeof(buf), ", objs=%d,%d,%d,%d", _srs_pps_objs_rtps->r10s(), _srs_pps_objs_rraw->r10s(), _srs_pps_objs_rfua->r10s(), _srs_pps_objs_rbuf->r10s());
+    _srs_pps_objs_rtps->update(); _srs_pps_objs_rraw->update(); _srs_pps_objs_rfua->update(); _srs_pps_objs_rbuf->update(); _srs_pps_objs_msgs->update();
+    if (_srs_pps_objs_rtps->r10s() || _srs_pps_objs_rraw->r10s() || _srs_pps_objs_rfua->r10s() || _srs_pps_objs_rbuf->r10s() || _srs_pps_objs_msgs->r10s()) {
+        snprintf(buf, sizeof(buf), ", objs=%d,%d,%d,%d,%d", _srs_pps_objs_rtps->r10s(), _srs_pps_objs_rraw->r10s(), _srs_pps_objs_rfua->r10s(), _srs_pps_objs_rbuf->r10s(), _srs_pps_objs_msgs->r10s());
         objs_desc = buf;
     }
 
diff --git a/trunk/src/kernel/srs_kernel_flv.cpp b/trunk/src/kernel/srs_kernel_flv.cpp
index ff41f6f4c..e5c27b673 100644
--- a/trunk/src/kernel/srs_kernel_flv.cpp
+++ b/trunk/src/kernel/srs_kernel_flv.cpp
@@ -40,6 +40,10 @@ using namespace std;
 #include <srs_kernel_utility.hpp>
 #include <srs_core_autofree.hpp>
 
+#include <srs_kernel_kbps.hpp>
+
+SrsPps* _srs_pps_objs_msgs = new SrsPps();
+
 SrsMessageHeader::SrsMessageHeader()
 {
     message_type = 0;
@@ -209,6 +213,8 @@ SrsSharedPtrMessage::SrsSharedPtrPayload::~SrsSharedPtrPayload()
 SrsSharedPtrMessage::SrsSharedPtrMessage() : timestamp(0), stream_id(0), size(0), payload(NULL)
 {
     ptr = NULL;
+
+    ++ _srs_pps_objs_msgs->sugar;
 }
 
 SrsSharedPtrMessage::~SrsSharedPtrMessage()

From c00d286344dfba54606bb042663647cc492d1a1d Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Fri, 26 Feb 2021 21:35:51 +0800
Subject: [PATCH 030/102] Perf: Refine the stat

---
 trunk/src/app/srs_app_hybrid.cpp        | 25 +++++++++++--
 trunk/src/app/srs_app_rtc_server.cpp    | 17 ++-------
 trunk/src/kernel/srs_kernel_flv.cpp     | 21 +++++++++--
 trunk/src/kernel/srs_kernel_flv.hpp     |  2 ++
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 48 +++++++++++++------------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp |  5 +++
 6 files changed, 75 insertions(+), 43 deletions(-)

diff --git a/trunk/src/app/srs_app_hybrid.cpp b/trunk/src/app/srs_app_hybrid.cpp
index 446593ee5..94a1a72a4 100644
--- a/trunk/src/app/srs_app_hybrid.cpp
+++ b/trunk/src/app/srs_app_hybrid.cpp
@@ -122,6 +122,13 @@ SrsPps* _srs_pps_thread_yield = new SrsPps();
 SrsPps* _srs_pps_thread_yield2 = new SrsPps();
 #endif
 
+extern SrsPps* _srs_pps_objs_rtps;
+extern SrsPps* _srs_pps_objs_rraw;
+extern SrsPps* _srs_pps_objs_rfua;
+extern SrsPps* _srs_pps_objs_rbuf;
+extern SrsPps* _srs_pps_objs_msgs;
+extern SrsPps* _srs_pps_objs_rothers;
+
 ISrsHybridServer::ISrsHybridServer()
 {
 }
@@ -446,13 +453,25 @@ srs_error_t SrsHybridServer::notify(int event, srs_utime_t interval, srs_utime_t
     }
 #endif
 
-    srs_trace("Hybrid cpu=%.2f%%,%dMB%s%s%s%s%s%s%s%s%s%s",
+    string objs_desc;
+    _srs_pps_objs_rtps->update(); _srs_pps_objs_rraw->update(); _srs_pps_objs_rfua->update(); _srs_pps_objs_rbuf->update(); _srs_pps_objs_msgs->update(); _srs_pps_objs_rothers->update();
+    if (_srs_pps_objs_rtps->r10s() || _srs_pps_objs_rraw->r10s() || _srs_pps_objs_rfua->r10s() || _srs_pps_objs_rbuf->r10s() || _srs_pps_objs_msgs->r10s() || _srs_pps_objs_rothers->r10s()) {
+        snprintf(buf, sizeof(buf), ", objs=%d,%d,%d,%d,%d,%d", _srs_pps_objs_rtps->r10s(), _srs_pps_objs_rraw->r10s(), _srs_pps_objs_rfua->r10s(), _srs_pps_objs_msgs->r10s(), _srs_pps_objs_rothers->r10s(), _srs_pps_objs_rbuf->r10s());
+        objs_desc = buf;
+    }
+
+    string cache_desc;
+    if (true) {
+        snprintf(buf, sizeof(buf), ", cache=%d,%d,%d,%d", _srs_rtp_cache->size(), _srs_rtp_raw_cache->size(), _srs_rtp_fua_cache->size(), _srs_rtp_msg_cache->size());
+        cache_desc = buf;
+    }
+
+    srs_trace("Hybrid cpu=%.2f%%,%dMB%s%s%s%s%s%s%s%s%s%s%s%s",
         u->percent * 100, memory,
         cid_desc.c_str(), timer_desc.c_str(),
         recvfrom_desc.c_str(), io_desc.c_str(), msg_desc.c_str(),
         epoll_desc.c_str(), sched_desc.c_str(), clock_desc.c_str(),
-        thread_desc.c_str(),
-        free_desc.c_str()
+        thread_desc.c_str(), free_desc.c_str(), objs_desc.c_str(), cache_desc.c_str()
     );
 
     return err;
diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index 45be1e6ba..748b24aa9 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -75,12 +75,6 @@ extern SrsPps* _srs_pps_rnack2;
 extern SrsPps* _srs_pps_rhnack;
 extern SrsPps* _srs_pps_rmnack;
 
-extern SrsPps* _srs_pps_objs_rtps;
-extern SrsPps* _srs_pps_objs_rraw;
-extern SrsPps* _srs_pps_objs_rfua;
-extern SrsPps* _srs_pps_objs_rbuf;
-extern SrsPps* _srs_pps_objs_msgs;
-
 SrsRtcBlackhole::SrsRtcBlackhole()
 {
     blackhole = false;
@@ -690,13 +684,6 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
     }
     static char buf[128];
 
-    string objs_desc;
-    _srs_pps_objs_rtps->update(); _srs_pps_objs_rraw->update(); _srs_pps_objs_rfua->update(); _srs_pps_objs_rbuf->update(); _srs_pps_objs_msgs->update();
-    if (_srs_pps_objs_rtps->r10s() || _srs_pps_objs_rraw->r10s() || _srs_pps_objs_rfua->r10s() || _srs_pps_objs_rbuf->r10s() || _srs_pps_objs_msgs->r10s()) {
-        snprintf(buf, sizeof(buf), ", objs=%d,%d,%d,%d,%d", _srs_pps_objs_rtps->r10s(), _srs_pps_objs_rraw->r10s(), _srs_pps_objs_rfua->r10s(), _srs_pps_objs_rbuf->r10s(), _srs_pps_objs_msgs->r10s());
-        objs_desc = buf;
-    }
-
     string rpkts_desc;
     _srs_pps_rpkts->update(); _srs_pps_rrtps->update(); _srs_pps_rstuns->update(); _srs_pps_rrtcps->update();
     if (_srs_pps_rpkts->r10s() || _srs_pps_rrtps->r10s() || _srs_pps_rstuns->r10s() || _srs_pps_rrtcps->r10s()) {
@@ -746,9 +733,9 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
         fid_desc = buf;
     }
 
-    srs_trace("RTC: Server conns=%u%s%s%s%s%s%s%s%s",
+    srs_trace("RTC: Server conns=%u%s%s%s%s%s%s%s",
         nn_rtc_conns,
-        rpkts_desc.c_str(), spkts_desc.c_str(), rtcp_desc.c_str(), snk_desc.c_str(), rnk_desc.c_str(), drop_desc.c_str(), fid_desc.c_str(), objs_desc.c_str()
+        rpkts_desc.c_str(), spkts_desc.c_str(), rtcp_desc.c_str(), snk_desc.c_str(), rnk_desc.c_str(), drop_desc.c_str(), fid_desc.c_str()
     );
 
     return err;
diff --git a/trunk/src/kernel/srs_kernel_flv.cpp b/trunk/src/kernel/srs_kernel_flv.cpp
index e5c27b673..95422eefd 100644
--- a/trunk/src/kernel/srs_kernel_flv.cpp
+++ b/trunk/src/kernel/srs_kernel_flv.cpp
@@ -39,6 +39,7 @@ using namespace std;
 #include <srs_kernel_codec.hpp>
 #include <srs_kernel_utility.hpp>
 #include <srs_core_autofree.hpp>
+#include <srs_kernel_rtc_rtp.hpp>
 
 #include <srs_kernel_kbps.hpp>
 
@@ -286,10 +287,24 @@ void SrsSharedPtrMessage::wrap(char* payload, int size)
     this->size = ptr->size;
 }
 
+void SrsSharedPtrMessage::unwrap()
+{
+    if (ptr) {
+        if (ptr->shared_count == 0) {
+            srs_freep(ptr);
+        } else {
+            ptr->shared_count--;
+            ptr = NULL;
+        }
+    }
+
+    payload = NULL;
+    size = 0;
+}
+
 int SrsSharedPtrMessage::count()
 {
-    srs_assert(ptr);
-    return ptr->shared_count;
+    return ptr? ptr->shared_count : 0;
 }
 
 bool SrsSharedPtrMessage::check(int stream_id)
@@ -346,7 +361,7 @@ SrsSharedPtrMessage* SrsSharedPtrMessage::copy()
 {
     srs_assert(ptr);
     
-    SrsSharedPtrMessage* copy = new SrsSharedPtrMessage();
+    SrsSharedPtrMessage* copy = _srs_rtp_msg_cache->allocate();
     
     copy->ptr = ptr;
     ptr->shared_count++;
diff --git a/trunk/src/kernel/srs_kernel_flv.hpp b/trunk/src/kernel/srs_kernel_flv.hpp
index ba53e92db..0fc501331 100644
--- a/trunk/src/kernel/srs_kernel_flv.hpp
+++ b/trunk/src/kernel/srs_kernel_flv.hpp
@@ -328,6 +328,8 @@ public:
     // Create shared ptr message from RAW payload.
     // @remark Note that the header is set to zero.
     virtual void wrap(char* payload, int size);
+    // Decrease the reference, if the last one, free it.
+    void unwrap();
     // Get current reference count.
     // when this object created, count set to 0.
     // if copy() this object, count increase 1.
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index ca248c196..96077d60c 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -40,6 +40,7 @@ SrsPps* _srs_pps_objs_rtps = new SrsPps();
 SrsPps* _srs_pps_objs_rraw = new SrsPps();
 SrsPps* _srs_pps_objs_rfua = new SrsPps();
 SrsPps* _srs_pps_objs_rbuf = new SrsPps();
+SrsPps* _srs_pps_objs_rothers = new SrsPps();
 
 /* @see https://tools.ietf.org/html/rfc1889#section-5.1
   0                   1                   2                   3
@@ -819,26 +820,11 @@ SrsRtpPacket2::SrsRtpPacket2()
 
 SrsRtpPacket2::~SrsRtpPacket2()
 {
-    srs_freep(payload);
-
-    // Recyle the real owner of message, no other reference object.
-    if (shared_msg && shared_msg->count() == 0) {
-        _srs_rtp_msg_cache->recycle(shared_msg);
-        shared_msg = NULL;
-    } else {
-        srs_freep(shared_msg);
-    }
+    reuse();
 }
 
-bool SrsRtpPacket2::reset()
+void SrsRtpPacket2::reuse()
 {
-    nalu_type = SrsAvcNaluTypeReserved;
-    frame_type = SrsFrameTypeReserved;
-    cached_payload_size = 0;
-    decode_handler = NULL;
-
-    header.reset();
-
     // Only recycle some common payloads.
     SrsRtpRawPayload* raw_payload;
     SrsRtpFUAPayload2* fua_payload;
@@ -853,13 +839,27 @@ bool SrsRtpPacket2::reset()
         srs_freep(payload);
     }
 
-    // Recyle the real owner of message, no other reference object.
-    if (shared_msg && shared_msg->count() == 0) {
+    // Recycle the real owner of message, clear the reference.
+    if (shared_msg) {
+        if (shared_msg->count() > 0) {
+            shared_msg->unwrap();
+        }
         _srs_rtp_msg_cache->recycle(shared_msg);
         shared_msg = NULL;
-    } else {
-        srs_freep(shared_msg);
     }
+}
+
+bool SrsRtpPacket2::reset()
+{
+    nalu_type = SrsAvcNaluTypeReserved;
+    frame_type = SrsFrameTypeReserved;
+    cached_payload_size = 0;
+    decode_handler = NULL;
+
+    header.reset();
+
+    // Reset and reuse the payload and shared message.
+    reuse();
 
     return true;
 }
@@ -1095,6 +1095,8 @@ SrsRtpRawNALUs::SrsRtpRawNALUs()
 {
     cursor = 0;
     nn_bytes = 0;
+
+    ++_srs_pps_objs_rothers->sugar;
 }
 
 SrsRtpRawNALUs::~SrsRtpRawNALUs()
@@ -1232,6 +1234,8 @@ ISrsRtpPayloader* SrsRtpRawNALUs::copy()
 SrsRtpSTAPPayload::SrsRtpSTAPPayload()
 {
     nri = (SrsAvcNaluType)0;
+
+    ++_srs_pps_objs_rothers->sugar;
 }
 
 SrsRtpSTAPPayload::~SrsRtpSTAPPayload()
@@ -1381,7 +1385,7 @@ SrsRtpFUAPayload::SrsRtpFUAPayload()
     start = end = false;
     nri = nalu_type = (SrsAvcNaluType)0;
 
-    ++_srs_pps_objs_rfua->sugar;
+    ++_srs_pps_objs_rothers->sugar;
 }
 
 SrsRtpFUAPayload::~SrsRtpFUAPayload()
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index be54e856f..fff24942d 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -302,6 +302,8 @@ private:
 public:
     SrsRtpPacket2();
     virtual ~SrsRtpPacket2();
+private:
+    void reuse();
 public:
     // Reset the object to reuse it.
     virtual bool reset();
@@ -356,6 +358,9 @@ public:
     bool enabled() {
         return enabled_;
     }
+    int size() {
+        return (int)cache_objs_.size();
+    }
     // Try to allocate from cache, create new object if no cache.
     T* allocate() {
         while (true) {

From 30d760f909d204f971d5b2fcb2d291ade7855b40 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Fri, 26 Feb 2021 22:55:27 +0800
Subject: [PATCH 031/102] RTC: Only cache the UDP packet message

---
 trunk/src/app/srs_app_hybrid.cpp        |  2 +-
 trunk/src/app/srs_app_rtc_server.cpp    |  1 +
 trunk/src/kernel/srs_kernel_flv.cpp     |  8 +++++--
 trunk/src/kernel/srs_kernel_flv.hpp     |  2 +-
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 30 +++++++++++++++++++------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp |  2 ++
 6 files changed, 34 insertions(+), 11 deletions(-)

diff --git a/trunk/src/app/srs_app_hybrid.cpp b/trunk/src/app/srs_app_hybrid.cpp
index 94a1a72a4..5ce5aad32 100644
--- a/trunk/src/app/srs_app_hybrid.cpp
+++ b/trunk/src/app/srs_app_hybrid.cpp
@@ -462,7 +462,7 @@ srs_error_t SrsHybridServer::notify(int event, srs_utime_t interval, srs_utime_t
 
     string cache_desc;
     if (true) {
-        snprintf(buf, sizeof(buf), ", cache=%d,%d,%d,%d", _srs_rtp_cache->size(), _srs_rtp_raw_cache->size(), _srs_rtp_fua_cache->size(), _srs_rtp_msg_cache->size());
+        snprintf(buf, sizeof(buf), ", cache=%d,%d,%d,%d,%d", _srs_rtp_cache->size(), _srs_rtp_raw_cache->size(), _srs_rtp_fua_cache->size(), _srs_rtp_msg_cache->size(), _srs_rtp_msg_cache2->size());
         cache_desc = buf;
     }
 
diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index 748b24aa9..b1b5a0982 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -286,6 +286,7 @@ srs_error_t SrsRtcServer::initialize()
 
     bool rtp_msg_cache = _srs_config->get_rtc_server_rtp_msg_cache();
     _srs_rtp_msg_cache->set_enabled(rtp_msg_cache);
+    _srs_rtp_msg_cache2->set_enabled(rtp_msg_cache);
 
     srs_trace("RTC server init ok, rc=%d, rmc=%d", rtp_cache, rtp_msg_cache);
 
diff --git a/trunk/src/kernel/srs_kernel_flv.cpp b/trunk/src/kernel/srs_kernel_flv.cpp
index 95422eefd..f0184cf7d 100644
--- a/trunk/src/kernel/srs_kernel_flv.cpp
+++ b/trunk/src/kernel/srs_kernel_flv.cpp
@@ -361,8 +361,12 @@ SrsSharedPtrMessage* SrsSharedPtrMessage::copy()
 {
     srs_assert(ptr);
     
-    SrsSharedPtrMessage* copy = _srs_rtp_msg_cache->allocate();
-    
+    SrsSharedPtrMessage* copy = _srs_rtp_msg_cache2->allocate();
+
+    // We got an object from cache, the ptr might exists, so unwrap it.
+    copy->unwrap();
+
+    // Reference to this message instead.
     copy->ptr = ptr;
     ptr->shared_count++;
     
diff --git a/trunk/src/kernel/srs_kernel_flv.hpp b/trunk/src/kernel/srs_kernel_flv.hpp
index 0fc501331..d5a2bd2c3 100644
--- a/trunk/src/kernel/srs_kernel_flv.hpp
+++ b/trunk/src/kernel/srs_kernel_flv.hpp
@@ -290,7 +290,7 @@ public:
     //       video/audio packet use raw bytes, no video/audio packet.
     char* payload;
 
-private:
+public:
     class SrsSharedPtrPayload
     {
     public:
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 96077d60c..9bcbf0efb 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -840,13 +840,24 @@ void SrsRtpPacket2::reuse()
     }
 
     // Recycle the real owner of message, clear the reference.
-    if (shared_msg) {
-        if (shared_msg->count() > 0) {
-            shared_msg->unwrap();
-        }
-        _srs_rtp_msg_cache->recycle(shared_msg);
-        shared_msg = NULL;
+    reuse_shared_msg();
+}
+
+void SrsRtpPacket2::reuse_shared_msg()
+{
+    if (!shared_msg) {
+        return;
     }
+
+    // We only recycle the RTC UDP packet messages.
+    if (shared_msg->payload && shared_msg->size == kRtpPacketSize && shared_msg->count() == 0) {
+        _srs_rtp_msg_cache->recycle(shared_msg);
+    } else {
+        shared_msg->unwrap();
+        _srs_rtp_msg_cache2->recycle(shared_msg);
+    }
+
+    shared_msg = NULL;
 }
 
 bool SrsRtpPacket2::reset()
@@ -879,6 +890,7 @@ char* SrsRtpPacket2::wrap(int size)
         // If got a cached message(which has payload), but it's too small,
         // we free it and allocate a larger one.
         if (shared_msg->payload && shared_msg->size < size) {
+            ++_srs_pps_objs_rothers->sugar;
             continue;
         }
 
@@ -907,7 +919,10 @@ char* SrsRtpPacket2::wrap(char* data, int size)
 
 char* SrsRtpPacket2::wrap(SrsSharedPtrMessage* msg)
 {
-    srs_freep(shared_msg);
+    // Recycle the shared message.
+    reuse_shared_msg();
+
+    // Copy from the new message.
     shared_msg = msg->copy();
 
     return msg->payload;
@@ -1036,6 +1051,7 @@ SrsRtpObjectCacheManager<SrsRtpRawPayload>* _srs_rtp_raw_cache = new SrsRtpObjec
 SrsRtpObjectCacheManager<SrsRtpFUAPayload2>* _srs_rtp_fua_cache = new SrsRtpObjectCacheManager<SrsRtpFUAPayload2>();
 
 SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache = new SrsRtpObjectCacheManager<SrsSharedPtrMessage>();
+SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache2 = new SrsRtpObjectCacheManager<SrsSharedPtrMessage>();
 
 SrsRtpRawPayload::SrsRtpRawPayload()
 {
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index fff24942d..63183bb22 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -304,6 +304,7 @@ public:
     virtual ~SrsRtpPacket2();
 private:
     void reuse();
+    void reuse_shared_msg();
 public:
     // Reset the object to reuse it.
     virtual bool reset();
@@ -527,5 +528,6 @@ extern SrsRtpObjectCacheManager<SrsRtpFUAPayload2>* _srs_rtp_fua_cache;
 
 // For RTP packet shared messages cache.
 extern SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache;
+extern SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache2;
 
 #endif

From 3989f2d5536406b787b51c1123efc17219ea7ee8 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 07:41:51 +0800
Subject: [PATCH 032/102] RTC: Refine the stat logs, limit the object cache
 pool

---
 trunk/conf/full.conf                    |  30 +++++--
 trunk/src/app/srs_app_config.cpp        | 110 ++++++++++++++++++++++--
 trunk/src/app/srs_app_config.hpp        |  15 +++-
 trunk/src/app/srs_app_hybrid.cpp        |  14 +--
 trunk/src/app/srs_app_rtc_server.cpp    |  38 ++++----
 trunk/src/kernel/srs_kernel_flv.cpp     |   2 +-
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp |  11 +--
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp |  26 +++++-
 8 files changed, 202 insertions(+), 44 deletions(-)

diff --git a/trunk/conf/full.conf b/trunk/conf/full.conf
index 19bd6f7e1..4bee21e02 100644
--- a/trunk/conf/full.conf
+++ b/trunk/conf/full.conf
@@ -497,12 +497,30 @@ rtc_server {
     #       then system queue is 2000*4 = 8k, user can incrase reuseport to incrase the queue.
     # default: 2000
     queue_length    2000;
-    # Whether enable the RTP packet cache.
-    # default: off
-    rtp_cache off;
-    #Whether enable the RTP message(a large buffer) cache.
-    # default: off
-    rtp_msg_cache off;
+    # For RTP packet and its payload cache.
+    rtp_cache {
+        # Whether enable the RTP packet cache.
+        # default: off
+        enabled off;
+        # The cache size for rtp packet in MB, each object is about 300B..
+        # default: 128
+        pkt_size 128.0;
+        # The cache size for rtp payload in MB, each object is about 40B.
+        # default: 32
+        payload_size 32.0;
+    }
+    # For RTP shared message and the large buffer cache.
+    rtp_msg_cache {
+        #Whether enable the RTP message(a large buffer) cache.
+        # default: off
+        enabled off;
+        # The cache size for message object in MB, each object is about 40B.
+        # default: 32
+        msg_size 32.0;
+        # The cache size for message large buffer in MB, each object is about 1500B.
+        # default: 1024
+        buffer_size 1024.0;
+    }
     # The black-hole to copy packet to, for debugging.
     # For example, when debugging Chrome publish stream, the received packets are encrypted cipher,
     # we can set the publisher black-hole, SRS will copy the plaintext packets to black-hole, and
diff --git a/trunk/src/app/srs_app_config.cpp b/trunk/src/app/srs_app_config.cpp
index 49ff10fea..ff295d45f 100644
--- a/trunk/src/app/srs_app_config.cpp
+++ b/trunk/src/app/srs_app_config.cpp
@@ -4902,16 +4902,31 @@ bool SrsConfig::get_rtc_server_perf_stat()
     return SRS_CONF_PERFER_TRUE(conf->arg0());
 }
 
-bool SrsConfig::get_rtc_server_rtp_cache()
+SrsConfDirective* SrsConfig::get_rtc_server_rtp_cache()
+{
+    SrsConfDirective* conf = root->get("rtc_server");
+    if (!conf) {
+        return NULL;
+    }
+
+    conf = conf->get("rtp_cache");
+    if (!conf) {
+        return NULL;
+    }
+
+    return conf;
+}
+
+bool SrsConfig::get_rtc_server_rtp_cache_enabled()
 {
     static bool DEFAULT = false;
 
-    SrsConfDirective* conf = root->get("rtc_server");
+    SrsConfDirective* conf = get_rtc_server_rtp_cache();
     if (!conf) {
         return DEFAULT;
     }
 
-    conf = conf->get("rtp_cache");
+    conf = conf->get("enabled");
     if (!conf || conf->arg0().empty()) {
         return DEFAULT;
     }
@@ -4919,16 +4934,65 @@ bool SrsConfig::get_rtc_server_rtp_cache()
     return SRS_CONF_PERFER_FALSE(conf->arg0());
 }
 
-bool SrsConfig::get_rtc_server_rtp_msg_cache()
+uint64_t SrsConfig::get_rtc_server_rtp_cache_pkt_size()
 {
-    static bool DEFAULT = false;
+    int DEFAULT = 128 * 1024 * 1024;
 
-    SrsConfDirective* conf = root->get("rtc_server");
+    SrsConfDirective* conf = get_rtc_server_rtp_cache();
     if (!conf) {
         return DEFAULT;
     }
 
+    conf = conf->get("pkt_size");
+    if (!conf || conf->arg0().empty()) {
+        return DEFAULT;
+    }
+
+    return (uint64_t)(1024 * ::atof(conf->arg0().c_str()));
+}
+
+uint64_t SrsConfig::get_rtc_server_rtp_cache_payload_size()
+{
+    int DEFAULT = 32 * 1024 * 1024;
+
+    SrsConfDirective* conf = get_rtc_server_rtp_cache();
+    if (!conf) {
+        return DEFAULT;
+    }
+
+    conf = conf->get("payload_size");
+    if (!conf || conf->arg0().empty()) {
+        return DEFAULT;
+    }
+
+    return (uint64_t)(1024 * ::atof(conf->arg0().c_str()));
+}
+
+SrsConfDirective* SrsConfig::get_rtc_server_rtp_msg_cache()
+{
+    SrsConfDirective* conf = root->get("rtc_server");
+    if (!conf) {
+        return NULL;
+    }
+
     conf = conf->get("rtp_msg_cache");
+    if (!conf) {
+        return NULL;
+    }
+
+    return conf;
+}
+
+bool SrsConfig::get_rtc_server_rtp_msg_cache_enabled()
+{
+    static bool DEFAULT = false;
+
+    SrsConfDirective* conf = get_rtc_server_rtp_msg_cache();
+    if (!conf) {
+        return DEFAULT;
+    }
+
+    conf = conf->get("enabled");
     if (!conf || conf->arg0().empty()) {
         return DEFAULT;
     }
@@ -4936,6 +5000,40 @@ bool SrsConfig::get_rtc_server_rtp_msg_cache()
     return SRS_CONF_PERFER_FALSE(conf->arg0());
 }
 
+uint64_t SrsConfig::get_rtc_server_rtp_msg_cache_msg_size()
+{
+    int DEFAULT = 32 * 1024 * 1024;
+
+    SrsConfDirective* conf = get_rtc_server_rtp_msg_cache();
+    if (!conf) {
+        return DEFAULT;
+    }
+
+    conf = conf->get("msg_size");
+    if (!conf || conf->arg0().empty()) {
+        return DEFAULT;
+    }
+
+    return (uint64_t)(1024 * ::atof(conf->arg0().c_str()));
+}
+
+uint64_t SrsConfig::get_rtc_server_rtp_msg_cache_buffer_size()
+{
+    int DEFAULT = 1024 * 1024 * 1024;
+
+    SrsConfDirective* conf = get_rtc_server_rtp_msg_cache();
+    if (!conf) {
+        return DEFAULT;
+    }
+
+    conf = conf->get("buffer_size");
+    if (!conf || conf->arg0().empty()) {
+        return DEFAULT;
+    }
+
+    return (uint64_t)(1024 * ::atof(conf->arg0().c_str()));
+}
+
 bool SrsConfig::get_rtc_server_black_hole()
 {
     static bool DEFAULT = false;
diff --git a/trunk/src/app/srs_app_config.hpp b/trunk/src/app/srs_app_config.hpp
index 5ba3e36f9..a027e5f2f 100644
--- a/trunk/src/app/srs_app_config.hpp
+++ b/trunk/src/app/srs_app_config.hpp
@@ -534,8 +534,19 @@ public:
     virtual int get_rtc_server_reuseport();
     virtual bool get_rtc_server_merge_nalus();
     virtual bool get_rtc_server_perf_stat();
-    virtual bool get_rtc_server_rtp_cache();
-    virtual bool get_rtc_server_rtp_msg_cache();
+private:
+    SrsConfDirective* get_rtc_server_rtp_cache();
+public:
+    virtual bool get_rtc_server_rtp_cache_enabled();
+    virtual uint64_t get_rtc_server_rtp_cache_pkt_size();
+    virtual uint64_t get_rtc_server_rtp_cache_payload_size();
+private:
+    virtual SrsConfDirective* get_rtc_server_rtp_msg_cache();
+public:
+    virtual bool get_rtc_server_rtp_msg_cache_enabled();
+    virtual uint64_t get_rtc_server_rtp_msg_cache_msg_size();
+    virtual uint64_t get_rtc_server_rtp_msg_cache_buffer_size();
+public:
     virtual bool get_rtc_server_black_hole();
     virtual std::string get_rtc_server_black_hole_addr();
 private:
diff --git a/trunk/src/app/srs_app_hybrid.cpp b/trunk/src/app/srs_app_hybrid.cpp
index 5ce5aad32..f0ff56f35 100644
--- a/trunk/src/app/srs_app_hybrid.cpp
+++ b/trunk/src/app/srs_app_hybrid.cpp
@@ -454,15 +454,19 @@ srs_error_t SrsHybridServer::notify(int event, srs_utime_t interval, srs_utime_t
 #endif
 
     string objs_desc;
-    _srs_pps_objs_rtps->update(); _srs_pps_objs_rraw->update(); _srs_pps_objs_rfua->update(); _srs_pps_objs_rbuf->update(); _srs_pps_objs_msgs->update(); _srs_pps_objs_rothers->update();
-    if (_srs_pps_objs_rtps->r10s() || _srs_pps_objs_rraw->r10s() || _srs_pps_objs_rfua->r10s() || _srs_pps_objs_rbuf->r10s() || _srs_pps_objs_msgs->r10s() || _srs_pps_objs_rothers->r10s()) {
-        snprintf(buf, sizeof(buf), ", objs=%d,%d,%d,%d,%d,%d", _srs_pps_objs_rtps->r10s(), _srs_pps_objs_rraw->r10s(), _srs_pps_objs_rfua->r10s(), _srs_pps_objs_msgs->r10s(), _srs_pps_objs_rothers->r10s(), _srs_pps_objs_rbuf->r10s());
+    _srs_pps_objs_rtps->update(); _srs_pps_objs_rraw->update(); _srs_pps_objs_rfua->update(); _srs_pps_objs_rbuf->update(); _srs_pps_objs_msgs->update(); _srs_pps_objs_rothers->update(); _srs_pps_objs_drop->update();
+    if (_srs_pps_objs_rtps->r10s() || _srs_pps_objs_rraw->r10s() || _srs_pps_objs_rfua->r10s() || _srs_pps_objs_rbuf->r10s() || _srs_pps_objs_msgs->r10s() || _srs_pps_objs_rothers->r10s() || _srs_pps_objs_drop->r10s()) {
+        snprintf(buf, sizeof(buf), ", objs=(pkt:%d,raw:%d,fua:%d,msg:%d,oth:%d,buf:%d,drop:%d)",
+            _srs_pps_objs_rtps->r10s(), _srs_pps_objs_rraw->r10s(), _srs_pps_objs_rfua->r10s(),
+            _srs_pps_objs_msgs->r10s(), _srs_pps_objs_rothers->r10s(), _srs_pps_objs_rbuf->r10s(), _srs_pps_objs_drop->r10s());
         objs_desc = buf;
     }
 
     string cache_desc;
-    if (true) {
-        snprintf(buf, sizeof(buf), ", cache=%d,%d,%d,%d,%d", _srs_rtp_cache->size(), _srs_rtp_raw_cache->size(), _srs_rtp_fua_cache->size(), _srs_rtp_msg_cache->size(), _srs_rtp_msg_cache2->size());
+    if (_srs_rtp_cache->size() || _srs_rtp_raw_cache->size() || _srs_rtp_fua_cache->size() || _srs_rtp_msg_cache_buffers->size() || _srs_rtp_msg_cache_objs->size()) {
+        snprintf(buf, sizeof(buf), ", cache=(pkt:%d-%dw,raw:%d-%dw,fua:%d-%dw,msg:%d-%dw,buf:%d-%dw)",
+            _srs_rtp_cache->size(), _srs_rtp_cache->capacity()/10000, _srs_rtp_raw_cache->size(), _srs_rtp_raw_cache->capacity()/10000,
+            _srs_rtp_fua_cache->size(), _srs_rtp_fua_cache->capacity()/10000, _srs_rtp_msg_cache_buffers->size(), _srs_rtp_msg_cache_buffers->capacity()/10000, _srs_rtp_msg_cache_objs->size(), _srs_rtp_msg_cache_objs->capacity()/10000);
         cache_desc = buf;
     }
 
diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index b1b5a0982..b2bad7285 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -279,16 +279,24 @@ srs_error_t SrsRtcServer::initialize()
         return srs_error_wrap(err, "black hole");
     }
 
-    bool rtp_cache = _srs_config->get_rtc_server_rtp_cache();
-    _srs_rtp_cache->set_enabled(rtp_cache);
-    _srs_rtp_raw_cache->set_enabled(rtp_cache);
-    _srs_rtp_fua_cache->set_enabled(rtp_cache);
+    bool rtp_cache_enabled = _srs_config->get_rtc_server_rtp_cache_enabled();
+    uint64_t rtp_cache_pkt_size = _srs_config->get_rtc_server_rtp_cache_pkt_size();
+    uint64_t rtp_cache_payload_size = _srs_config->get_rtc_server_rtp_cache_payload_size();
+    _srs_rtp_cache->set_enabled(rtp_cache_enabled, rtp_cache_pkt_size);
+    _srs_rtp_raw_cache->set_enabled(rtp_cache_enabled, rtp_cache_payload_size);
+    _srs_rtp_fua_cache->set_enabled(rtp_cache_enabled, rtp_cache_payload_size);
 
-    bool rtp_msg_cache = _srs_config->get_rtc_server_rtp_msg_cache();
-    _srs_rtp_msg_cache->set_enabled(rtp_msg_cache);
-    _srs_rtp_msg_cache2->set_enabled(rtp_msg_cache);
+    bool rtp_msg_cache_enabled = _srs_config->get_rtc_server_rtp_msg_cache_enabled();
+    uint64_t rtp_msg_cache_msg_size = _srs_config->get_rtc_server_rtp_msg_cache_msg_size();
+    uint64_t rtp_msg_cache_buffer_size = _srs_config->get_rtc_server_rtp_msg_cache_buffer_size();
+    _srs_rtp_msg_cache_buffers->set_enabled(rtp_msg_cache_enabled, rtp_msg_cache_msg_size);
+    _srs_rtp_msg_cache_objs->set_enabled(rtp_msg_cache_enabled, rtp_msg_cache_buffer_size);
 
-    srs_trace("RTC server init ok, rc=%d, rmc=%d", rtp_cache, rtp_msg_cache);
+    srs_trace("RTC server init ok, rtp-cache=(enabled:%d,pkt:%dm-%dw,payload:%dm-%dw-%dw), msg-cache=(enabled:%d,obj:%dm-%dw,buf:%dm-%dw)",
+        rtp_cache_enabled, (int)(rtp_cache_pkt_size/1024/1024), _srs_rtp_cache->capacity()/10000,
+        (int)(rtp_cache_payload_size/1024/1024), _srs_rtp_raw_cache->capacity()/10000, _srs_rtp_fua_cache->capacity()/10000,
+        rtp_msg_cache_enabled, (int)(rtp_msg_cache_msg_size/1024/1024), _srs_rtp_msg_cache_objs->capacity()/10000,
+        (int)(rtp_msg_cache_buffer_size/1024/1024), _srs_rtp_msg_cache_buffers->capacity()/10000);
 
     return err;
 }
@@ -688,49 +696,49 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
     string rpkts_desc;
     _srs_pps_rpkts->update(); _srs_pps_rrtps->update(); _srs_pps_rstuns->update(); _srs_pps_rrtcps->update();
     if (_srs_pps_rpkts->r10s() || _srs_pps_rrtps->r10s() || _srs_pps_rstuns->r10s() || _srs_pps_rrtcps->r10s()) {
-        snprintf(buf, sizeof(buf), ", rpkts=%d,%d,%d,%d", _srs_pps_rpkts->r10s(), _srs_pps_rrtps->r10s(), _srs_pps_rstuns->r10s(), _srs_pps_rrtcps->r10s());
+        snprintf(buf, sizeof(buf), ", rpkts=(%d,rtp:%d,stun:%d,rtcp:%d)", _srs_pps_rpkts->r10s(), _srs_pps_rrtps->r10s(), _srs_pps_rstuns->r10s(), _srs_pps_rrtcps->r10s());
         rpkts_desc = buf;
     }
 
     string spkts_desc;
     _srs_pps_spkts->update(); _srs_pps_srtps->update(); _srs_pps_sstuns->update(); _srs_pps_srtcps->update();
     if (_srs_pps_spkts->r10s() || _srs_pps_srtps->r10s() || _srs_pps_sstuns->r10s() || _srs_pps_srtcps->r10s()) {
-        snprintf(buf, sizeof(buf), ", spkts=%d,%d,%d,%d", _srs_pps_spkts->r10s(), _srs_pps_srtps->r10s(), _srs_pps_sstuns->r10s(), _srs_pps_srtcps->r10s());
+        snprintf(buf, sizeof(buf), ", spkts=(%d,rtp:%d,stun:%d,rtcp:%d)", _srs_pps_spkts->r10s(), _srs_pps_srtps->r10s(), _srs_pps_sstuns->r10s(), _srs_pps_srtcps->r10s());
         spkts_desc = buf;
     }
 
     string rtcp_desc;
     _srs_pps_pli->update(); _srs_pps_twcc->update(); _srs_pps_rr->update();
     if (_srs_pps_pli->r10s() || _srs_pps_twcc->r10s() || _srs_pps_rr->r10s()) {
-        snprintf(buf, sizeof(buf), ", rtcp=%d,%d,%d", _srs_pps_pli->r10s(), _srs_pps_twcc->r10s(), _srs_pps_rr->r10s());
+        snprintf(buf, sizeof(buf), ", rtcp=(pli:%d,twcc:%d,rr:%d)", _srs_pps_pli->r10s(), _srs_pps_twcc->r10s(), _srs_pps_rr->r10s());
         rtcp_desc = buf;
     }
 
     string snk_desc;
     _srs_pps_snack->update(); _srs_pps_snack2->update(); _srs_pps_sanack->update(); _srs_pps_svnack->update();
     if (_srs_pps_snack->r10s() || _srs_pps_sanack->r10s() || _srs_pps_svnack->r10s() || _srs_pps_snack2->r10s()) {
-        snprintf(buf, sizeof(buf), ", snk=%d,%d,%d,%d", _srs_pps_snack->r10s(), _srs_pps_sanack->r10s(), _srs_pps_svnack->r10s(), _srs_pps_snack2->r10s());
+        snprintf(buf, sizeof(buf), ", snk=(%d,a:%d,v:%d,h:%d)", _srs_pps_snack->r10s(), _srs_pps_sanack->r10s(), _srs_pps_svnack->r10s(), _srs_pps_snack2->r10s());
         snk_desc = buf;
     }
 
     string rnk_desc;
     _srs_pps_rnack->update(); _srs_pps_rnack2->update(); _srs_pps_rhnack->update(); _srs_pps_rmnack->update();
     if (_srs_pps_rnack->r10s() || _srs_pps_rnack2->r10s() || _srs_pps_rhnack->r10s() || _srs_pps_rmnack->r10s()) {
-        snprintf(buf, sizeof(buf), ", rnk=%d,%d,%d,%d", _srs_pps_rnack->r10s(), _srs_pps_rnack2->r10s(), _srs_pps_rhnack->r10s(), _srs_pps_rmnack->r10s());
+        snprintf(buf, sizeof(buf), ", rnk=(%d,%d,h:%d,m:%d)", _srs_pps_rnack->r10s(), _srs_pps_rnack2->r10s(), _srs_pps_rhnack->r10s(), _srs_pps_rmnack->r10s());
         rnk_desc = buf;
     }
 
     string drop_desc;
     SrsSnmpUdpStat* s = srs_get_udp_snmp_stat();
     if (s->rcv_buf_errors_delta || s->snd_buf_errors_delta) {
-        snprintf(buf, sizeof(buf), ", drop=%d,%d", s->rcv_buf_errors_delta, s->snd_buf_errors_delta);
+        snprintf(buf, sizeof(buf), ", drop=(r:%d,s:%d)", s->rcv_buf_errors_delta, s->snd_buf_errors_delta);
         drop_desc = buf;
     }
 
     string fid_desc;
     _srs_pps_ids->update(); _srs_pps_fids->update(); _srs_pps_fids_level0->update(); _srs_pps_addrs->update(); _srs_pps_fast_addrs->update();
     if (_srs_pps_ids->r10s(), _srs_pps_fids->r10s(), _srs_pps_fids_level0->r10s(), _srs_pps_addrs->r10s(), _srs_pps_fast_addrs->r10s()) {
-        snprintf(buf, sizeof(buf), ", fid=%d,%d,%d,%d,%d", _srs_pps_ids->r10s(), _srs_pps_fids->r10s(), _srs_pps_fids_level0->r10s(), _srs_pps_addrs->r10s(), _srs_pps_fast_addrs->r10s());
+        snprintf(buf, sizeof(buf), ", fid=(id:%d,fid:%d,ffid:%d,addr:%d,faddr:%d)", _srs_pps_ids->r10s(), _srs_pps_fids->r10s(), _srs_pps_fids_level0->r10s(), _srs_pps_addrs->r10s(), _srs_pps_fast_addrs->r10s());
         fid_desc = buf;
     }
 
diff --git a/trunk/src/kernel/srs_kernel_flv.cpp b/trunk/src/kernel/srs_kernel_flv.cpp
index f0184cf7d..5fd1f0929 100644
--- a/trunk/src/kernel/srs_kernel_flv.cpp
+++ b/trunk/src/kernel/srs_kernel_flv.cpp
@@ -361,7 +361,7 @@ SrsSharedPtrMessage* SrsSharedPtrMessage::copy()
 {
     srs_assert(ptr);
     
-    SrsSharedPtrMessage* copy = _srs_rtp_msg_cache2->allocate();
+    SrsSharedPtrMessage* copy = _srs_rtp_msg_cache_objs->allocate();
 
     // We got an object from cache, the ptr might exists, so unwrap it.
     copy->unwrap();
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 9bcbf0efb..4d3b7271a 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -41,6 +41,7 @@ SrsPps* _srs_pps_objs_rraw = new SrsPps();
 SrsPps* _srs_pps_objs_rfua = new SrsPps();
 SrsPps* _srs_pps_objs_rbuf = new SrsPps();
 SrsPps* _srs_pps_objs_rothers = new SrsPps();
+SrsPps* _srs_pps_objs_drop = new SrsPps();
 
 /* @see https://tools.ietf.org/html/rfc1889#section-5.1
   0                   1                   2                   3
@@ -851,10 +852,10 @@ void SrsRtpPacket2::reuse_shared_msg()
 
     // We only recycle the RTC UDP packet messages.
     if (shared_msg->payload && shared_msg->size == kRtpPacketSize && shared_msg->count() == 0) {
-        _srs_rtp_msg_cache->recycle(shared_msg);
+        _srs_rtp_msg_cache_buffers->recycle(shared_msg);
     } else {
         shared_msg->unwrap();
-        _srs_rtp_msg_cache2->recycle(shared_msg);
+        _srs_rtp_msg_cache_objs->recycle(shared_msg);
     }
 
     shared_msg = NULL;
@@ -885,7 +886,7 @@ char* SrsRtpPacket2::wrap(int size)
     // Create a large enough message, with under-layer buffer.
     while (true) {
         srs_freep(shared_msg);
-        shared_msg = _srs_rtp_msg_cache->allocate();
+        shared_msg = _srs_rtp_msg_cache_buffers->allocate();
 
         // If got a cached message(which has payload), but it's too small,
         // we free it and allocate a larger one.
@@ -1050,8 +1051,8 @@ SrsRtpObjectCacheManager<SrsRtpPacket2>* _srs_rtp_cache = new SrsRtpObjectCacheM
 SrsRtpObjectCacheManager<SrsRtpRawPayload>* _srs_rtp_raw_cache = new SrsRtpObjectCacheManager<SrsRtpRawPayload>();
 SrsRtpObjectCacheManager<SrsRtpFUAPayload2>* _srs_rtp_fua_cache = new SrsRtpObjectCacheManager<SrsRtpFUAPayload2>();
 
-SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache = new SrsRtpObjectCacheManager<SrsSharedPtrMessage>();
-SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache2 = new SrsRtpObjectCacheManager<SrsSharedPtrMessage>();
+SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache_buffers = new SrsRtpObjectCacheManager<SrsSharedPtrMessage>();
+SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache_objs = new SrsRtpObjectCacheManager<SrsSharedPtrMessage>();
 
 SrsRtpRawPayload::SrsRtpRawPayload()
 {
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 63183bb22..77366e714 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -333,6 +333,10 @@ public:
     virtual srs_error_t decode(SrsBuffer* buf);
 };
 
+// For object cache manager to stat the object dropped.
+#include <srs_kernel_kbps.hpp>
+extern SrsPps* _srs_pps_objs_drop;
+
 // The RTP packet or message cache manager.
 template<typename T>
 class SrsRtpObjectCacheManager
@@ -340,9 +344,11 @@ class SrsRtpObjectCacheManager
 private:
     bool enabled_;
     std::list<T*> cache_objs_;
+    size_t capacity_;
 public:
     SrsRtpObjectCacheManager() {
         enabled_ = false;
+        capacity_ = 0;
     }
     virtual ~SrsRtpObjectCacheManager() {
         typedef typename std::list<T*>::iterator iterator;
@@ -353,8 +359,9 @@ public:
     }
 public:
     // Enable or disable cache.
-    void set_enabled(bool v) {
+    void set_enabled(bool v, uint64_t memory) {
         enabled_ = v;
+        capacity_ = (size_t)(memory / sizeof(T));
     }
     bool enabled() {
         return enabled_;
@@ -362,6 +369,9 @@ public:
     int size() {
         return (int)cache_objs_.size();
     }
+    int capacity() {
+        return (int)capacity_;
+    }
     // Try to allocate from cache, create new object if no cache.
     T* allocate() {
         while (true) {
@@ -389,12 +399,20 @@ public:
             return;
         }
 
-        // TODO: FIXME: Directly free to keep low memory?
+        // If disabled, drop the object.
         if (!enabled_) {
             srs_freep(p);
             return;
         }
 
+        // If exceed the capacity, drop the object.
+        if (cache_objs_.size() > capacity_) {
+            ++_srs_pps_objs_drop->sugar;
+
+            srs_freep(p);
+            return;
+        }
+
         // Recycle it.
         cache_objs_.push_back(p);
     }
@@ -527,7 +545,7 @@ extern SrsRtpObjectCacheManager<SrsRtpRawPayload>* _srs_rtp_raw_cache;
 extern SrsRtpObjectCacheManager<SrsRtpFUAPayload2>* _srs_rtp_fua_cache;
 
 // For RTP packet shared messages cache.
-extern SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache;
-extern SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache2;
+extern SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache_buffers;
+extern SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache_objs;
 
 #endif

From 501104e728872dc3394282eb6241010a8e2563be Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 08:18:08 +0800
Subject: [PATCH 033/102] Perf: Limit the size of object cache pool

---
 trunk/conf/full.conf                    | 16 ++++----
 trunk/src/app/srs_app_config.cpp        | 16 ++++----
 trunk/src/app/srs_app_rtc_server.cpp    | 12 +++---
 trunk/src/app/srs_app_rtc_server.hpp    |  1 +
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 52 ++++++++++++++-----------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp | 23 +++++++++--
 6 files changed, 72 insertions(+), 48 deletions(-)

diff --git a/trunk/conf/full.conf b/trunk/conf/full.conf
index 4bee21e02..3f31d0750 100644
--- a/trunk/conf/full.conf
+++ b/trunk/conf/full.conf
@@ -503,11 +503,11 @@ rtc_server {
         # default: off
         enabled off;
         # The cache size for rtp packet in MB, each object is about 300B..
-        # default: 128
-        pkt_size 128.0;
+        # default: 64
+        pkt_size 64.0;
         # The cache size for rtp payload in MB, each object is about 40B.
-        # default: 32
-        payload_size 32.0;
+        # default: 16
+        payload_size 16.0;
     }
     # For RTP shared message and the large buffer cache.
     rtp_msg_cache {
@@ -515,11 +515,11 @@ rtc_server {
         # default: off
         enabled off;
         # The cache size for message object in MB, each object is about 40B.
-        # default: 32
-        msg_size 32.0;
+        # default: 16
+        msg_size 16.0;
         # The cache size for message large buffer in MB, each object is about 1500B.
-        # default: 1024
-        buffer_size 1024.0;
+        # default: 512
+        buffer_size 512.0;
     }
     # The black-hole to copy packet to, for debugging.
     # For example, when debugging Chrome publish stream, the received packets are encrypted cipher,
diff --git a/trunk/src/app/srs_app_config.cpp b/trunk/src/app/srs_app_config.cpp
index ff295d45f..5780cc489 100644
--- a/trunk/src/app/srs_app_config.cpp
+++ b/trunk/src/app/srs_app_config.cpp
@@ -4936,7 +4936,7 @@ bool SrsConfig::get_rtc_server_rtp_cache_enabled()
 
 uint64_t SrsConfig::get_rtc_server_rtp_cache_pkt_size()
 {
-    int DEFAULT = 128 * 1024 * 1024;
+    int DEFAULT = 64 * 1024 * 1024;
 
     SrsConfDirective* conf = get_rtc_server_rtp_cache();
     if (!conf) {
@@ -4948,12 +4948,12 @@ uint64_t SrsConfig::get_rtc_server_rtp_cache_pkt_size()
         return DEFAULT;
     }
 
-    return (uint64_t)(1024 * ::atof(conf->arg0().c_str()));
+    return 1024 * (uint64_t)(1024 * ::atof(conf->arg0().c_str()));
 }
 
 uint64_t SrsConfig::get_rtc_server_rtp_cache_payload_size()
 {
-    int DEFAULT = 32 * 1024 * 1024;
+    int DEFAULT = 16 * 1024 * 1024;
 
     SrsConfDirective* conf = get_rtc_server_rtp_cache();
     if (!conf) {
@@ -4965,7 +4965,7 @@ uint64_t SrsConfig::get_rtc_server_rtp_cache_payload_size()
         return DEFAULT;
     }
 
-    return (uint64_t)(1024 * ::atof(conf->arg0().c_str()));
+    return 1024 * (uint64_t)(1024 * ::atof(conf->arg0().c_str()));
 }
 
 SrsConfDirective* SrsConfig::get_rtc_server_rtp_msg_cache()
@@ -5002,7 +5002,7 @@ bool SrsConfig::get_rtc_server_rtp_msg_cache_enabled()
 
 uint64_t SrsConfig::get_rtc_server_rtp_msg_cache_msg_size()
 {
-    int DEFAULT = 32 * 1024 * 1024;
+    int DEFAULT = 16 * 1024 * 1024;
 
     SrsConfDirective* conf = get_rtc_server_rtp_msg_cache();
     if (!conf) {
@@ -5014,12 +5014,12 @@ uint64_t SrsConfig::get_rtc_server_rtp_msg_cache_msg_size()
         return DEFAULT;
     }
 
-    return (uint64_t)(1024 * ::atof(conf->arg0().c_str()));
+    return 1024 * (uint64_t)(1024 * ::atof(conf->arg0().c_str()));
 }
 
 uint64_t SrsConfig::get_rtc_server_rtp_msg_cache_buffer_size()
 {
-    int DEFAULT = 1024 * 1024 * 1024;
+    int DEFAULT = 512 * 1024 * 1024;
 
     SrsConfDirective* conf = get_rtc_server_rtp_msg_cache();
     if (!conf) {
@@ -5031,7 +5031,7 @@ uint64_t SrsConfig::get_rtc_server_rtp_msg_cache_buffer_size()
         return DEFAULT;
     }
 
-    return (uint64_t)(1024 * ::atof(conf->arg0().c_str()));
+    return 1024 * (uint64_t)(1024 * ::atof(conf->arg0().c_str()));
 }
 
 bool SrsConfig::get_rtc_server_black_hole()
diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index b2bad7285..9dbb9342b 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -282,17 +282,17 @@ srs_error_t SrsRtcServer::initialize()
     bool rtp_cache_enabled = _srs_config->get_rtc_server_rtp_cache_enabled();
     uint64_t rtp_cache_pkt_size = _srs_config->get_rtc_server_rtp_cache_pkt_size();
     uint64_t rtp_cache_payload_size = _srs_config->get_rtc_server_rtp_cache_payload_size();
-    _srs_rtp_cache->set_enabled(rtp_cache_enabled, rtp_cache_pkt_size);
-    _srs_rtp_raw_cache->set_enabled(rtp_cache_enabled, rtp_cache_payload_size);
-    _srs_rtp_fua_cache->set_enabled(rtp_cache_enabled, rtp_cache_payload_size);
+    _srs_rtp_cache->setup(rtp_cache_enabled, rtp_cache_pkt_size);
+    _srs_rtp_raw_cache->setup(rtp_cache_enabled, rtp_cache_payload_size);
+    _srs_rtp_fua_cache->setup(rtp_cache_enabled, rtp_cache_payload_size);
 
     bool rtp_msg_cache_enabled = _srs_config->get_rtc_server_rtp_msg_cache_enabled();
     uint64_t rtp_msg_cache_msg_size = _srs_config->get_rtc_server_rtp_msg_cache_msg_size();
     uint64_t rtp_msg_cache_buffer_size = _srs_config->get_rtc_server_rtp_msg_cache_buffer_size();
-    _srs_rtp_msg_cache_buffers->set_enabled(rtp_msg_cache_enabled, rtp_msg_cache_msg_size);
-    _srs_rtp_msg_cache_objs->set_enabled(rtp_msg_cache_enabled, rtp_msg_cache_buffer_size);
+    _srs_rtp_msg_cache_buffers->setup(rtp_msg_cache_enabled, rtp_msg_cache_buffer_size);
+    _srs_rtp_msg_cache_objs->setup(rtp_msg_cache_enabled, rtp_msg_cache_msg_size);
 
-    srs_trace("RTC server init ok, rtp-cache=(enabled:%d,pkt:%dm-%dw,payload:%dm-%dw-%dw), msg-cache=(enabled:%d,obj:%dm-%dw,buf:%dm-%dw)",
+    srs_trace("RTC: Object cache init, rtp-cache=(enabled:%d,pkt:%dm-%dw,payload:%dm-%dw-%dw), msg-cache=(enabled:%d,obj:%dm-%dw,buf:%dm-%dw)",
         rtp_cache_enabled, (int)(rtp_cache_pkt_size/1024/1024), _srs_rtp_cache->capacity()/10000,
         (int)(rtp_cache_payload_size/1024/1024), _srs_rtp_raw_cache->capacity()/10000, _srs_rtp_fua_cache->capacity()/10000,
         rtp_msg_cache_enabled, (int)(rtp_msg_cache_msg_size/1024/1024), _srs_rtp_msg_cache_objs->capacity()/10000,
diff --git a/trunk/src/app/srs_app_rtc_server.hpp b/trunk/src/app/srs_app_rtc_server.hpp
index 8dd4b5530..5ec4efbe5 100644
--- a/trunk/src/app/srs_app_rtc_server.hpp
+++ b/trunk/src/app/srs_app_rtc_server.hpp
@@ -97,6 +97,7 @@ public:
     virtual ~SrsRtcServer();
 public:
     virtual srs_error_t initialize();
+public:
     // Set the handler for server events.
     void set_handler(ISrsRtcServerHandler* h);
     void set_hijacker(ISrsRtcServerHijacker* h);
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 4d3b7271a..5b6bcab7f 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -826,16 +826,20 @@ SrsRtpPacket2::~SrsRtpPacket2()
 
 void SrsRtpPacket2::reuse()
 {
-    // Only recycle some common payloads.
-    SrsRtpRawPayload* raw_payload;
-    SrsRtpFUAPayload2* fua_payload;
+    if (_srs_rtp_raw_cache->enabled() || _srs_rtp_fua_cache->enabled()) {
+        // Only recycle some common payloads.
+        SrsRtpRawPayload* raw_payload;
+        SrsRtpFUAPayload2* fua_payload;
 
-    if ((raw_payload = dynamic_cast<SrsRtpRawPayload*>(payload)) != NULL) {
-        _srs_rtp_raw_cache->recycle(raw_payload);
-        payload = NULL;
-    } else if ((fua_payload = dynamic_cast<SrsRtpFUAPayload2*>(payload)) != NULL) {
-        _srs_rtp_fua_cache->recycle(fua_payload);
-        payload = NULL;
+        if ((raw_payload = dynamic_cast<SrsRtpRawPayload*>(payload)) != NULL) {
+            _srs_rtp_raw_cache->recycle(raw_payload);
+            payload = NULL;
+        } else if ((fua_payload = dynamic_cast<SrsRtpFUAPayload2*>(payload)) != NULL) {
+            _srs_rtp_fua_cache->recycle(fua_payload);
+            payload = NULL;
+        } else {
+            srs_freep(payload);
+        }
     } else {
         srs_freep(payload);
     }
@@ -850,15 +854,19 @@ void SrsRtpPacket2::reuse_shared_msg()
         return;
     }
 
-    // We only recycle the RTC UDP packet messages.
-    if (shared_msg->payload && shared_msg->size == kRtpPacketSize && shared_msg->count() == 0) {
-        _srs_rtp_msg_cache_buffers->recycle(shared_msg);
-    } else {
-        shared_msg->unwrap();
-        _srs_rtp_msg_cache_objs->recycle(shared_msg);
-    }
+    if (_srs_rtp_msg_cache_buffers->enabled() || _srs_rtp_msg_cache_objs->enabled()) {
+        // We only recycle the RTC UDP packet messages.
+        if (shared_msg->payload && shared_msg->size == kRtpPacketSize && shared_msg->count() == 0) {
+            _srs_rtp_msg_cache_buffers->recycle(shared_msg);
+        } else {
+            shared_msg->unwrap();
+            _srs_rtp_msg_cache_objs->recycle(shared_msg);
+        }
 
-    shared_msg = NULL;
+        shared_msg = NULL;
+    } else {
+        srs_freep(shared_msg);
+    }
 }
 
 bool SrsRtpPacket2::reset()
@@ -1047,12 +1055,12 @@ srs_error_t SrsRtpPacket2::decode(SrsBuffer* buf)
     return err;
 }
 
-SrsRtpObjectCacheManager<SrsRtpPacket2>* _srs_rtp_cache = new SrsRtpObjectCacheManager<SrsRtpPacket2>();
-SrsRtpObjectCacheManager<SrsRtpRawPayload>* _srs_rtp_raw_cache = new SrsRtpObjectCacheManager<SrsRtpRawPayload>();
-SrsRtpObjectCacheManager<SrsRtpFUAPayload2>* _srs_rtp_fua_cache = new SrsRtpObjectCacheManager<SrsRtpFUAPayload2>();
+SrsRtpObjectCacheManager<SrsRtpPacket2>* _srs_rtp_cache = new SrsRtpObjectCacheManager<SrsRtpPacket2>(sizeof(SrsRtpPacket2));
+SrsRtpObjectCacheManager<SrsRtpRawPayload>* _srs_rtp_raw_cache = new SrsRtpObjectCacheManager<SrsRtpRawPayload>(sizeof(SrsRtpRawPayload));
+SrsRtpObjectCacheManager<SrsRtpFUAPayload2>* _srs_rtp_fua_cache = new SrsRtpObjectCacheManager<SrsRtpFUAPayload2>(sizeof(SrsRtpFUAPayload2));
 
-SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache_buffers = new SrsRtpObjectCacheManager<SrsSharedPtrMessage>();
-SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache_objs = new SrsRtpObjectCacheManager<SrsSharedPtrMessage>();
+SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache_buffers = new SrsRtpObjectCacheManager<SrsSharedPtrMessage>(sizeof(SrsSharedPtrMessage) + kRtpPacketSize);
+SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache_objs = new SrsRtpObjectCacheManager<SrsSharedPtrMessage>(sizeof(SrsSharedPtrMessage));
 
 SrsRtpRawPayload::SrsRtpRawPayload()
 {
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 77366e714..652128c88 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -345,10 +345,12 @@ private:
     bool enabled_;
     std::list<T*> cache_objs_;
     size_t capacity_;
+    size_t object_size_;
 public:
-    SrsRtpObjectCacheManager() {
+    SrsRtpObjectCacheManager(size_t size_of_object) {
         enabled_ = false;
         capacity_ = 0;
+        object_size_ = size_of_object;
     }
     virtual ~SrsRtpObjectCacheManager() {
         typedef typename std::list<T*>::iterator iterator;
@@ -358,11 +360,24 @@ public:
         }
     }
 public:
-    // Enable or disable cache.
-    void set_enabled(bool v, uint64_t memory) {
+    // Setup the object cache, shrink if capacity changed.
+    void setup(bool v, uint64_t memory) {
         enabled_ = v;
-        capacity_ = (size_t)(memory / sizeof(T));
+        capacity_ = (size_t)(memory / object_size_);
+
+
+        if (!enabled_) {
+            capacity_ = 0;
+        }
+
+        // Shrink the cache.
+        while (cache_objs_.size() > capacity_) {
+            T* obj = cache_objs_.back();
+            cache_objs_.pop_back();
+            srs_freep(obj);
+        }
     }
+    // Get the status of object cache.
     bool enabled() {
         return enabled_;
     }

From 8e4f252686607100959923bc74ac0441357337a9 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 08:21:04 +0800
Subject: [PATCH 034/102] Support reload the object cache pool

---
 trunk/src/app/srs_app_rtc_server.cpp | 40 ++++++++++++++++++++++++++++
 trunk/src/app/srs_app_rtc_server.hpp |  5 +++-
 2 files changed, 44 insertions(+), 1 deletion(-)

diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index 9dbb9342b..45a4dc010 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -248,10 +248,14 @@ SrsRtcServer::SrsRtcServer()
     handler = NULL;
     hijacker = NULL;
     timer = new SrsHourGlass("server", this, 1 * SRS_UTIME_SECONDS);
+
+    _srs_config->subscribe(this);
 }
 
 SrsRtcServer::~SrsRtcServer()
 {
+    _srs_config->unsubscribe(this);
+
     srs_freep(timer);
 
     if (true) {
@@ -301,6 +305,42 @@ srs_error_t SrsRtcServer::initialize()
     return err;
 }
 
+srs_error_t SrsRtcServer::on_reload_rtc_server()
+{
+    bool changed = false;
+
+    bool rtp_cache_enabled = _srs_config->get_rtc_server_rtp_cache_enabled();
+    uint64_t rtp_cache_pkt_size = _srs_config->get_rtc_server_rtp_cache_pkt_size();
+    uint64_t rtp_cache_payload_size = _srs_config->get_rtc_server_rtp_cache_payload_size();
+    if (_srs_rtp_cache->enabled() != rtp_cache_enabled) {
+        _srs_rtp_cache->setup(rtp_cache_enabled, rtp_cache_pkt_size);
+        _srs_rtp_raw_cache->setup(rtp_cache_enabled, rtp_cache_payload_size);
+        _srs_rtp_fua_cache->setup(rtp_cache_enabled, rtp_cache_payload_size);
+
+        changed = true;
+    }
+
+    bool rtp_msg_cache_enabled = _srs_config->get_rtc_server_rtp_msg_cache_enabled();
+    uint64_t rtp_msg_cache_msg_size = _srs_config->get_rtc_server_rtp_msg_cache_msg_size();
+    uint64_t rtp_msg_cache_buffer_size = _srs_config->get_rtc_server_rtp_msg_cache_buffer_size();
+    if (_srs_rtp_msg_cache_buffers->enabled() != rtp_msg_cache_enabled) {
+        _srs_rtp_msg_cache_buffers->setup(rtp_msg_cache_enabled, rtp_msg_cache_buffer_size);
+        _srs_rtp_msg_cache_objs->setup(rtp_msg_cache_enabled, rtp_msg_cache_msg_size);
+
+        changed = true;
+    }
+
+    if (changed) {
+        srs_trace("RTC: Object cache reload, rtp-cache=(enabled:%d,pkt:%dm-%dw,payload:%dm-%dw-%dw), msg-cache=(enabled:%d,obj:%dm-%dw,buf:%dm-%dw)",
+            rtp_cache_enabled, (int)(rtp_cache_pkt_size/1024/1024), _srs_rtp_cache->capacity()/10000,
+            (int)(rtp_cache_payload_size/1024/1024), _srs_rtp_raw_cache->capacity()/10000, _srs_rtp_fua_cache->capacity()/10000,
+            rtp_msg_cache_enabled, (int)(rtp_msg_cache_msg_size/1024/1024), _srs_rtp_msg_cache_objs->capacity()/10000,
+            (int)(rtp_msg_cache_buffer_size/1024/1024), _srs_rtp_msg_cache_buffers->capacity()/10000);
+    }
+
+    return srs_success;
+}
+
 void SrsRtcServer::set_handler(ISrsRtcServerHandler* h)
 {
     handler = h;
diff --git a/trunk/src/app/srs_app_rtc_server.hpp b/trunk/src/app/srs_app_rtc_server.hpp
index 5ec4efbe5..0507666ea 100644
--- a/trunk/src/app/srs_app_rtc_server.hpp
+++ b/trunk/src/app/srs_app_rtc_server.hpp
@@ -85,7 +85,7 @@ public:
 };
 
 // The RTC server instance, listen UDP port, handle UDP packet, manage RTC connections.
-class SrsRtcServer : virtual public ISrsUdpMuxHandler, virtual public ISrsHourGlass
+class SrsRtcServer : virtual public ISrsUdpMuxHandler, virtual public ISrsHourGlass, virtual public ISrsReloadHandler
 {
 private:
     SrsHourGlass* timer;
@@ -97,6 +97,9 @@ public:
     virtual ~SrsRtcServer();
 public:
     virtual srs_error_t initialize();
+// interface ISrsReloadHandler
+public:
+    virtual srs_error_t on_reload_rtc_server();
 public:
     // Set the handler for server events.
     void set_handler(ISrsRtcServerHandler* h);

From 73e357a93f231a4f6202474ad27f152186910bd4 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 09:18:02 +0800
Subject: [PATCH 035/102] RTC: Support object cache pool. 4.0.75

---
 README.md                            | 1 +
 trunk/src/core/srs_core_version4.hpp | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 186a90f85..8ef8ca3d1 100755
--- a/README.md
+++ b/README.md
@@ -156,6 +156,7 @@ For previous versions, please read:
 
 ## V4 changes
 
+* v4.0, 2021-02-27, RTC: Support object cache pool. 4.0.75
 * v4.0, 2021-02-12, RTC: Support high performance timer about 25ms resolution. 4.0.72
 * v4.0, 2021-02-10, RTC: Refine performance about 700+ streams. 4.0.71
 * v4.0, 2021-02-08, RTC: Print stat for pli and timer every 5s. 4.0.70
diff --git a/trunk/src/core/srs_core_version4.hpp b/trunk/src/core/srs_core_version4.hpp
index 3db4f439e..405bea09e 100644
--- a/trunk/src/core/srs_core_version4.hpp
+++ b/trunk/src/core/srs_core_version4.hpp
@@ -24,6 +24,6 @@
 #ifndef SRS_CORE_VERSION4_HPP
 #define SRS_CORE_VERSION4_HPP
 
-#define SRS_VERSION4_REVISION 74
+#define SRS_VERSION4_REVISION 75
 
 #endif

From 8d7a2017424beaa3a5f4afcea05f3b3fb57ee46b Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 10:41:48 +0800
Subject: [PATCH 036/102] RTC: Remove unused config

---
 trunk/conf/full.conf | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/trunk/conf/full.conf b/trunk/conf/full.conf
index 3f31d0750..13bdc7638 100644
--- a/trunk/conf/full.conf
+++ b/trunk/conf/full.conf
@@ -490,13 +490,6 @@ rtc_server {
     # Whether enable the perf stat at http://localhost:1985/api/v1/perf
     # default: on
     perf_stat       on;
-    # The queue length, in number of mmsghdr, in messages.
-    # For example, 30 means we will cache 30K messages at most.
-    # If exceed, we will drop messages.
-    # @remark Each reuseport use a dedicated queue, if queue is 2000, reuseport is 4,
-    #       then system queue is 2000*4 = 8k, user can incrase reuseport to incrase the queue.
-    # default: 2000
-    queue_length    2000;
     # For RTP packet and its payload cache.
     rtp_cache {
         # Whether enable the RTP packet cache.

From f2d9eb345c712a145ac4bd847b71aea2bd29417c Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 11:23:50 +0800
Subject: [PATCH 037/102] Perf: Refine object cache, avoid dynamic cast

---
 trunk/src/app/srs_app_rtc_conn.cpp      |  6 +--
 trunk/src/app/srs_app_rtc_conn.hpp      |  2 +-
 trunk/src/app/srs_app_rtc_source.cpp    | 20 ++++---
 trunk/src/app/srs_app_rtc_source.hpp    |  4 +-
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 70 ++++++++++++++-----------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp | 23 ++++++--
 6 files changed, 76 insertions(+), 49 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index 2ac360d5d..894d5c65f 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -1268,7 +1268,7 @@ srs_error_t SrsRtcPublishStream::check_send_nacks()
     return err;
 }
 
-void SrsRtcPublishStream::on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload)
+void SrsRtcPublishStream::on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload, SrsRtpPacketPayloadType* ppt)
 {
     // No payload, ignore.
     if (buf->empty()) {
@@ -1280,9 +1280,9 @@ void SrsRtcPublishStream::on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer
     SrsRtcVideoRecvTrack* video_track = get_video_track(ssrc);
 
     if (audio_track) {
-        audio_track->on_before_decode_payload(pkt, buf, ppayload);
+        audio_track->on_before_decode_payload(pkt, buf, ppayload, ppt);
     } else if (video_track) {
-        video_track->on_before_decode_payload(pkt, buf, ppayload);
+        video_track->on_before_decode_payload(pkt, buf, ppayload, ppt);
     }
 }
 
diff --git a/trunk/src/app/srs_app_rtc_conn.hpp b/trunk/src/app/srs_app_rtc_conn.hpp
index 644c718f9..437857833 100644
--- a/trunk/src/app/srs_app_rtc_conn.hpp
+++ b/trunk/src/app/srs_app_rtc_conn.hpp
@@ -361,7 +361,7 @@ private:
 public:
     srs_error_t check_send_nacks();
 public:
-    virtual void on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload);
+    virtual void on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload, SrsRtpPacketPayloadType* ppt);
 private:
     srs_error_t send_periodic_twcc();
 public:
diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index 87ef3fb24..54d7e2a1e 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -826,7 +826,7 @@ srs_error_t SrsRtcFromRtmpBridger::package_opus(char* data, int size, SrsRtpPack
     audio_timestamp += 960;
 
     SrsRtpRawPayload* raw = _srs_rtp_raw_cache->allocate();
-    pkt->payload = raw;
+    pkt->set_payload(raw, SrsRtpPacketPayloadTypeRaw);
 
     raw->payload = pkt->wrap(data, size);
     raw->nn_payload = size;
@@ -961,7 +961,7 @@ srs_error_t SrsRtcFromRtmpBridger::package_stap_a(SrsRtcStream* source, SrsShare
     pkt->header.set_timestamp(msg->timestamp * 90);
 
     SrsRtpSTAPPayload* stap = new SrsRtpSTAPPayload();
-    pkt->payload = stap;
+    pkt->set_payload(stap, SrsRtpPacketPayloadTypeSTAP);
 
     uint8_t header = sps[0];
     stap->nri = (SrsAvcNaluType)header;
@@ -1041,7 +1041,7 @@ srs_error_t SrsRtcFromRtmpBridger::package_nalus(SrsSharedPtrMessage* msg, const
         pkt->nalu_type = (SrsAvcNaluType)first_nalu_type;
         pkt->header.set_sequence(video_sequence++);
         pkt->header.set_timestamp(msg->timestamp * 90);
-        pkt->payload = raw;
+        pkt->set_payload(raw, SrsRtpPacketPayloadTypeNALU);
         pkt->wrap(msg);
     } else {
         // We must free it, should never use RTP packets to free it,
@@ -1082,7 +1082,7 @@ srs_error_t SrsRtcFromRtmpBridger::package_nalus(SrsSharedPtrMessage* msg, const
             fua->start = bool(i == 0);
             fua->end = bool(i == num_of_packet - 1);
 
-            pkt->payload = fua;
+            pkt->set_payload(fua, SrsRtpPacketPayloadTypeFUA);
             pkt->wrap(msg);
 
             nb_left -= packet_size;
@@ -1108,7 +1108,7 @@ srs_error_t SrsRtcFromRtmpBridger::package_single_nalu(SrsSharedPtrMessage* msg,
     pkt->header.set_timestamp(msg->timestamp * 90);
 
     SrsRtpRawPayload* raw = _srs_rtp_raw_cache->allocate();
-    pkt->payload = raw;
+    pkt->set_payload(raw, SrsRtpPacketPayloadTypeRaw);
 
     raw->payload = sample->bytes;
     raw->nn_payload = sample->size;
@@ -1142,7 +1142,7 @@ srs_error_t SrsRtcFromRtmpBridger::package_fu_a(SrsSharedPtrMessage* msg, SrsSam
         pkt->header.set_timestamp(msg->timestamp * 90);
 
         SrsRtpFUAPayload2* fua = _srs_rtp_fua_cache->allocate();
-        pkt->payload = fua;
+        pkt->set_payload(fua, SrsRtpPacketPayloadTypeFUA2);
 
         fua->nri = (SrsAvcNaluType)header;
         fua->nalu_type = (SrsAvcNaluType)nal_type;
@@ -1854,7 +1854,7 @@ SrsRtcAudioRecvTrack::~SrsRtcAudioRecvTrack()
 {
 }
 
-void SrsRtcAudioRecvTrack::on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload)
+void SrsRtcAudioRecvTrack::on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload, SrsRtpPacketPayloadType* ppt)
 {
     // No payload, ignore.
     if (buf->empty()) {
@@ -1862,6 +1862,7 @@ void SrsRtcAudioRecvTrack::on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffe
     }
 
     *ppayload = _srs_rtp_raw_cache->allocate();
+    *ppt = SrsRtpPacketPayloadTypeRaw;
 }
 
 srs_error_t SrsRtcAudioRecvTrack::on_rtp(SrsRtcStream* source, SrsRtpPacket2* pkt, bool nack_enabled)
@@ -1910,7 +1911,7 @@ SrsRtcVideoRecvTrack::~SrsRtcVideoRecvTrack()
 {
 }
 
-void SrsRtcVideoRecvTrack::on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload)
+void SrsRtcVideoRecvTrack::on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload, SrsRtpPacketPayloadType* ppt)
 {
     // No payload, ignore.
     if (buf->empty()) {
@@ -1920,10 +1921,13 @@ void SrsRtcVideoRecvTrack::on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffe
     uint8_t v = (uint8_t)pkt->nalu_type;
     if (v == kStapA) {
         *ppayload = new SrsRtpSTAPPayload();
+        *ppt = SrsRtpPacketPayloadTypeUnknown;
     } else if (v == kFuA) {
         *ppayload = _srs_rtp_fua_cache->allocate();
+        *ppt = SrsRtpPacketPayloadTypeFUA2;
     } else {
         *ppayload = _srs_rtp_raw_cache->allocate();
+        *ppt = SrsRtpPacketPayloadTypeRaw;
     }
 }
 
diff --git a/trunk/src/app/srs_app_rtc_source.hpp b/trunk/src/app/srs_app_rtc_source.hpp
index 5d8f03f99..d5155c263 100644
--- a/trunk/src/app/srs_app_rtc_source.hpp
+++ b/trunk/src/app/srs_app_rtc_source.hpp
@@ -549,7 +549,7 @@ public:
     SrsRtcAudioRecvTrack(SrsRtcConnection* session, SrsRtcTrackDescription* track_desc);
     virtual ~SrsRtcAudioRecvTrack();
 public:
-    virtual void on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload);
+    virtual void on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload, SrsRtpPacketPayloadType* ppt);
 public:
     virtual srs_error_t on_rtp(SrsRtcStream* source, SrsRtpPacket2* pkt, bool nack_enabled);
     virtual srs_error_t check_send_nacks();
@@ -561,7 +561,7 @@ public:
     SrsRtcVideoRecvTrack(SrsRtcConnection* session, SrsRtcTrackDescription* stream_descs);
     virtual ~SrsRtcVideoRecvTrack();
 public:
-    virtual void on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload);
+    virtual void on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload, SrsRtpPacketPayloadType* ppt);
 public:
     virtual srs_error_t on_rtp(SrsRtcStream* source, SrsRtpPacket2* pkt, bool nack_enabled);
     virtual srs_error_t check_send_nacks();
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 5b6bcab7f..e60be64d6 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -811,7 +811,7 @@ ISrsRtpPacketDecodeHandler::~ISrsRtpPacketDecodeHandler()
 
 SrsRtpPacket2::SrsRtpPacket2()
 {
-    payload = NULL;
+    payload_ = NULL; payload_type_ = SrsRtpPacketPayloadTypeUnknown;
     shared_msg = NULL;
 
     reset();
@@ -821,31 +821,31 @@ SrsRtpPacket2::SrsRtpPacket2()
 
 SrsRtpPacket2::~SrsRtpPacket2()
 {
-    reuse();
+    reuse_payload();
+    reuse_shared_msg();
 }
 
-void SrsRtpPacket2::reuse()
+void SrsRtpPacket2::reuse_payload()
 {
-    if (_srs_rtp_raw_cache->enabled() || _srs_rtp_fua_cache->enabled()) {
-        // Only recycle some common payloads.
-        SrsRtpRawPayload* raw_payload;
-        SrsRtpFUAPayload2* fua_payload;
-
-        if ((raw_payload = dynamic_cast<SrsRtpRawPayload*>(payload)) != NULL) {
-            _srs_rtp_raw_cache->recycle(raw_payload);
-            payload = NULL;
-        } else if ((fua_payload = dynamic_cast<SrsRtpFUAPayload2*>(payload)) != NULL) {
-            _srs_rtp_fua_cache->recycle(fua_payload);
-            payload = NULL;
-        } else {
-            srs_freep(payload);
-        }
-    } else {
-        srs_freep(payload);
+    if (!payload_) {
+        return;
     }
 
-    // Recycle the real owner of message, clear the reference.
-    reuse_shared_msg();
+    if (_srs_rtp_raw_cache->enabled() || _srs_rtp_fua_cache->enabled()) {
+        // Only recycle some common payloads.
+        if (payload_type_ == SrsRtpPacketPayloadTypeRaw) {
+            _srs_rtp_raw_cache->recycle((SrsRtpRawPayload*)payload_);
+        } else if (payload_type_ == SrsRtpPacketPayloadTypeFUA2) {
+            _srs_rtp_fua_cache->recycle((SrsRtpFUAPayload2*)payload_);
+        } else {
+            srs_freep(payload_);
+        }
+    } else {
+        srs_freep(payload_);
+    }
+
+    // Reset the payload and its type.
+    payload_ = NULL; payload_type_ = SrsRtpPacketPayloadTypeUnknown;
 }
 
 void SrsRtpPacket2::reuse_shared_msg()
@@ -854,6 +854,7 @@ void SrsRtpPacket2::reuse_shared_msg()
         return;
     }
 
+    // Recycle the real owner of message, clear the reference.
     if (_srs_rtp_msg_cache_buffers->enabled() || _srs_rtp_msg_cache_objs->enabled()) {
         // We only recycle the RTC UDP packet messages.
         if (shared_msg->payload && shared_msg->size == kRtpPacketSize && shared_msg->count() == 0) {
@@ -877,9 +878,8 @@ bool SrsRtpPacket2::reset()
     decode_handler = NULL;
 
     header.reset();
-
-    // Reset and reuse the payload and shared message.
-    reuse();
+    reuse_payload();
+    reuse_shared_msg();
 
     return true;
 }
@@ -967,11 +967,16 @@ SrsRtpPacket2* SrsRtpPacket2::copy()
 {
     SrsRtpPacket2* cp = _srs_rtp_cache->allocate();
 
+    // We got packet from cache, so we must recycle it.
+    cp->reuse_payload();
+    cp->reuse_shared_msg();
+
     cp->header = header;
-    cp->payload = payload? payload->copy():NULL;
+    cp->payload_ = payload_? payload_->copy():NULL;
+    cp->payload_type_ = payload_type_;
 
     cp->nalu_type = nalu_type;
-    cp->wrap(shared_msg); // Wrap the shared message and buffer.
+    cp->shared_msg = shared_msg->copy();
     cp->frame_type = frame_type;
 
     cp->cached_payload_size = cached_payload_size;
@@ -988,7 +993,7 @@ void SrsRtpPacket2::set_extension_types(const SrsRtpExtensionTypes* v)
 uint64_t SrsRtpPacket2::nb_bytes()
 {
     if (!cached_payload_size) {
-        int nn_payload = (payload? payload->nb_bytes():0);
+        int nn_payload = (payload_? payload_->nb_bytes():0);
         cached_payload_size = header.nb_bytes() + nn_payload + header.get_padding();
     }
     return cached_payload_size;
@@ -1002,7 +1007,7 @@ srs_error_t SrsRtpPacket2::encode(SrsBuffer* buf)
         return srs_error_wrap(err, "rtp header");
     }
 
-    if (payload && (err = payload->encode(buf)) != srs_success) {
+    if (payload_ && (err = payload_->encode(buf)) != srs_success) {
         return srs_error_wrap(err, "rtp payload");
     }
 
@@ -1040,15 +1045,16 @@ srs_error_t SrsRtpPacket2::decode(SrsBuffer* buf)
 
     // If user set the decode handler, call it to set the payload.
     if (decode_handler) {
-        decode_handler->on_before_decode_payload(this, buf, &payload);
+        decode_handler->on_before_decode_payload(this, buf, &payload_, &payload_type_);
     }
 
     // By default, we always use the RAW payload.
-    if (!payload) {
-        payload = _srs_rtp_raw_cache->allocate();
+    if (!payload_) {
+        payload_ = _srs_rtp_raw_cache->allocate();
+        payload_type_ = SrsRtpPacketPayloadTypeRaw;
     }
 
-    if ((err = payload->decode(buf)) != srs_success) {
+    if ((err = payload_->decode(buf)) != srs_success) {
         return srs_error_wrap(err, "rtp payload");
     }
 
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 652128c88..7d3fd5f44 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -258,6 +258,7 @@ public:
     srs_error_t set_twcc_sequence_number(uint8_t id, uint16_t sn);
 };
 
+// The common payload interface for RTP packet.
 class ISrsRtpPayloader : public ISrsCodec
 {
 public:
@@ -267,6 +268,17 @@ public:
     virtual ISrsRtpPayloader* copy() = 0;
 };
 
+// The payload type, for performance to avoid dynamic cast.
+enum SrsRtpPacketPayloadType
+{
+    SrsRtpPacketPayloadTypeRaw,
+    SrsRtpPacketPayloadTypeFUA2,
+    SrsRtpPacketPayloadTypeFUA,
+    SrsRtpPacketPayloadTypeNALU,
+    SrsRtpPacketPayloadTypeSTAP,
+    SrsRtpPacketPayloadTypeUnknown,
+};
+
 class ISrsRtpPacketDecodeHandler
 {
 public:
@@ -274,7 +286,7 @@ public:
     virtual ~ISrsRtpPacketDecodeHandler();
 public:
     // We don't know the actual payload, so we depends on external handler.
-    virtual void on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload) = 0;
+    virtual void on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload, SrsRtpPacketPayloadType* ppt) = 0;
 };
 
 // The RTP packet with cached shared message.
@@ -283,7 +295,9 @@ class SrsRtpPacket2
 // RTP packet fields.
 public:
     SrsRtpHeader header;
-    ISrsRtpPayloader* payload;
+private:
+    ISrsRtpPayloader* payload_;
+    SrsRtpPacketPayloadType payload_type_;
 private:
     // The original shared message, all RTP packets can refer to its data.
     SrsSharedPtrMessage* shared_msg;
@@ -303,7 +317,7 @@ public:
     SrsRtpPacket2();
     virtual ~SrsRtpPacket2();
 private:
-    void reuse();
+    void reuse_payload();
     void reuse_shared_msg();
 public:
     // Reset the object to reuse it.
@@ -314,6 +328,9 @@ public:
     // Wrap the shared message, we copy it.
     char* wrap(SrsSharedPtrMessage* msg);
 public:
+    // Get and set the payload of packet.
+    void set_payload(ISrsRtpPayloader* p, SrsRtpPacketPayloadType pt) { payload_ = p; payload_type_ = pt; }
+    ISrsRtpPayloader* payload() { return payload_; }
     // Set the padding of RTP packet.
     void set_padding(int size);
     // Increase the padding of RTP packet.

From 6656330d2aad6433452be793c56fef6f1ce8ea5b Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 11:40:46 +0800
Subject: [PATCH 038/102] Perf: Use vector to replace list for object cache

---
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 7d3fd5f44..005da46d3 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -31,6 +31,7 @@
 
 #include <string>
 #include <list>
+#include <vector>
 
 class SrsRtpPacket2;
 
@@ -360,7 +361,7 @@ class SrsRtpObjectCacheManager
 {
 private:
     bool enabled_;
-    std::list<T*> cache_objs_;
+    std::vector<T*> cache_objs_;
     size_t capacity_;
     size_t object_size_;
 public:
@@ -370,7 +371,7 @@ public:
         object_size_ = size_of_object;
     }
     virtual ~SrsRtpObjectCacheManager() {
-        typedef typename std::list<T*>::iterator iterator;
+        typedef typename std::vector<T*>::iterator iterator;
         for (iterator it = cache_objs_.begin(); it != cache_objs_.end(); ++it) {
             T* obj = *it;
             srs_freep(obj);

From 1e2daf9ea389bc4428a81d10a420c7f806ea2d5f Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 12:14:48 +0800
Subject: [PATCH 039/102] Refine comments for object cache

---
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 005da46d3..70a128089 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -321,7 +321,7 @@ private:
     void reuse_payload();
     void reuse_shared_msg();
 public:
-    // Reset the object to reuse it.
+    // Recycle the object to reuse it.
     virtual bool reset();
     // Wrap buffer to shared_message, which is managed by us.
     char* wrap(int size);
@@ -365,11 +365,13 @@ private:
     size_t capacity_;
     size_t object_size_;
 public:
+    // SrsRtpObjectCacheManager::SrsRtpObjectCacheManager
     SrsRtpObjectCacheManager(size_t size_of_object) {
         enabled_ = false;
         capacity_ = 0;
         object_size_ = size_of_object;
     }
+    // SrsRtpObjectCacheManager::~SrsRtpObjectCacheManager
     virtual ~SrsRtpObjectCacheManager() {
         typedef typename std::vector<T*>::iterator iterator;
         for (iterator it = cache_objs_.begin(); it != cache_objs_.end(); ++it) {
@@ -379,6 +381,7 @@ public:
     }
 public:
     // Setup the object cache, shrink if capacity changed.
+    // SrsRtpObjectCacheManager::setup
     void setup(bool v, uint64_t memory) {
         enabled_ = v;
         capacity_ = (size_t)(memory / object_size_);
@@ -396,16 +399,20 @@ public:
         }
     }
     // Get the status of object cache.
+    // SrsRtpObjectCacheManager::enabled
     bool enabled() {
         return enabled_;
     }
+    // SrsRtpObjectCacheManager::size
     int size() {
         return (int)cache_objs_.size();
     }
+    // SrsRtpObjectCacheManager::capacity
     int capacity() {
         return (int)capacity_;
     }
     // Try to allocate from cache, create new object if no cache.
+    // SrsRtpObjectCacheManager::allocate
     T* allocate() {
         while (true) {
             if (!enabled_ || cache_objs_.empty()) {
@@ -426,6 +433,7 @@ public:
     }
     // Recycle the object to cache.
     // @remark User can directly free the packet.
+    // SrsRtpObjectCacheManager::recycle
     void recycle(T* p) {
         // The p may be NULL, because srs_freep(NULL) is ok.
         if (!p) {

From aacdc21d1c72a9a55a5a8a797b0fc611fe63e44e Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 12:32:46 +0800
Subject: [PATCH 040/102] Refine object cache.

---
 trunk/src/kernel/srs_kernel_flv.hpp     |  2 +-
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 29 +++++++++++--------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp | 38 ++++++++++++-------------
 3 files changed, 36 insertions(+), 33 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_flv.hpp b/trunk/src/kernel/srs_kernel_flv.hpp
index d5a2bd2c3..c5e96394d 100644
--- a/trunk/src/kernel/srs_kernel_flv.hpp
+++ b/trunk/src/kernel/srs_kernel_flv.hpp
@@ -313,7 +313,7 @@ public:
     virtual ~SrsSharedPtrMessage();
 public:
     // For object cache to reset and reuse it.
-    bool reset() { return true; }
+    bool recycle() { return true; }
     // Create shared ptr message,
     // copy header, manage the payload of msg,
     // set the payload to NULL to prevent double free.
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index e60be64d6..d292be75b 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -811,21 +811,25 @@ ISrsRtpPacketDecodeHandler::~ISrsRtpPacketDecodeHandler()
 
 SrsRtpPacket2::SrsRtpPacket2()
 {
-    payload_ = NULL; payload_type_ = SrsRtpPacketPayloadTypeUnknown;
+    payload_ = NULL;
+    payload_type_ = SrsRtpPacketPayloadTypeUnknown;
     shared_msg = NULL;
 
-    reset();
+    nalu_type = SrsAvcNaluTypeReserved;
+    frame_type = SrsFrameTypeReserved;
+    cached_payload_size = 0;
+    decode_handler = NULL;
 
     ++_srs_pps_objs_rtps->sugar;
 }
 
 SrsRtpPacket2::~SrsRtpPacket2()
 {
-    reuse_payload();
-    reuse_shared_msg();
+    recycle_payload();
+    recycle_shared_msg();
 }
 
-void SrsRtpPacket2::reuse_payload()
+void SrsRtpPacket2::recycle_payload()
 {
     if (!payload_) {
         return;
@@ -848,7 +852,7 @@ void SrsRtpPacket2::reuse_payload()
     payload_ = NULL; payload_type_ = SrsRtpPacketPayloadTypeUnknown;
 }
 
-void SrsRtpPacket2::reuse_shared_msg()
+void SrsRtpPacket2::recycle_shared_msg()
 {
     if (!shared_msg) {
         return;
@@ -870,7 +874,7 @@ void SrsRtpPacket2::reuse_shared_msg()
     }
 }
 
-bool SrsRtpPacket2::reset()
+bool SrsRtpPacket2::recycle()
 {
     nalu_type = SrsAvcNaluTypeReserved;
     frame_type = SrsFrameTypeReserved;
@@ -878,8 +882,9 @@ bool SrsRtpPacket2::reset()
     decode_handler = NULL;
 
     header.reset();
-    reuse_payload();
-    reuse_shared_msg();
+
+    recycle_payload();
+    recycle_shared_msg();
 
     return true;
 }
@@ -929,7 +934,7 @@ char* SrsRtpPacket2::wrap(char* data, int size)
 char* SrsRtpPacket2::wrap(SrsSharedPtrMessage* msg)
 {
     // Recycle the shared message.
-    reuse_shared_msg();
+    recycle_shared_msg();
 
     // Copy from the new message.
     shared_msg = msg->copy();
@@ -968,8 +973,8 @@ SrsRtpPacket2* SrsRtpPacket2::copy()
     SrsRtpPacket2* cp = _srs_rtp_cache->allocate();
 
     // We got packet from cache, so we must recycle it.
-    cp->reuse_payload();
-    cp->reuse_shared_msg();
+    cp->recycle_payload();
+    cp->recycle_shared_msg();
 
     cp->header = header;
     cp->payload_ = payload_? payload_->copy():NULL;
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 70a128089..4a8e70938 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -318,11 +318,11 @@ public:
     SrsRtpPacket2();
     virtual ~SrsRtpPacket2();
 private:
-    void reuse_payload();
-    void reuse_shared_msg();
+    void recycle_payload();
+    void recycle_shared_msg();
 public:
     // Recycle the object to reuse it.
-    virtual bool reset();
+    virtual bool recycle();
     // Wrap buffer to shared_message, which is managed by us.
     char* wrap(int size);
     char* wrap(char* data, int size);
@@ -414,22 +414,14 @@ public:
     // Try to allocate from cache, create new object if no cache.
     // SrsRtpObjectCacheManager::allocate
     T* allocate() {
-        while (true) {
-            if (!enabled_ || cache_objs_.empty()) {
-                return new T();
-            }
-
-            T* obj = cache_objs_.back();
-            cache_objs_.pop_back();
-
-            // If reset the object fail, drop the cached object.
-            if (!obj->reset()) {
-                srs_freep(obj);
-                continue;
-            }
-
-            return obj;
+        if (!enabled_ || cache_objs_.empty()) {
+            return new T();
         }
+
+        T* obj = cache_objs_.back();
+        cache_objs_.pop_back();
+
+        return obj;
     }
     // Recycle the object to cache.
     // @remark User can directly free the packet.
@@ -446,6 +438,12 @@ public:
             return;
         }
 
+        // If recycle the object fail, drop the cached object.
+        if (!p->recycle()) {
+            srs_freep(p);
+            return;
+        }
+
         // If exceed the capacity, drop the object.
         if (cache_objs_.size() > capacity_) {
             ++_srs_pps_objs_drop->sugar;
@@ -471,7 +469,7 @@ public:
     SrsRtpRawPayload();
     virtual ~SrsRtpRawPayload();
 public:
-    bool reset() { return true; }
+    bool recycle() { return true; }
 // interface ISrsRtpPayloader
 public:
     virtual uint64_t nb_bytes();
@@ -571,7 +569,7 @@ public:
     SrsRtpFUAPayload2();
     virtual ~SrsRtpFUAPayload2();
 public:
-    bool reset() { return true; }
+    bool recycle() { return true; }
 // interface ISrsRtpPayloader
 public:
     virtual uint64_t nb_bytes();

From db0090be05f3ec7986df079c0e140069b5053d4f Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 12:33:33 +0800
Subject: [PATCH 041/102] Refine code

---
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 44 ++++++++++++-------------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp |  4 +--
 2 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index d292be75b..65cc16a40 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -942,6 +942,28 @@ char* SrsRtpPacket2::wrap(SrsSharedPtrMessage* msg)
     return msg->payload;
 }
 
+SrsRtpPacket2* SrsRtpPacket2::copy()
+{
+    SrsRtpPacket2* cp = _srs_rtp_cache->allocate();
+
+    // We got packet from cache, so we must recycle it.
+    cp->recycle_payload();
+    cp->recycle_shared_msg();
+
+    cp->header = header;
+    cp->payload_ = payload_? payload_->copy():NULL;
+    cp->payload_type_ = payload_type_;
+
+    cp->nalu_type = nalu_type;
+    cp->shared_msg = shared_msg->copy();
+    cp->frame_type = frame_type;
+
+    cp->cached_payload_size = cached_payload_size;
+    cp->decode_handler = decode_handler;
+
+    return cp;
+}
+
 void SrsRtpPacket2::set_padding(int size)
 {
     header.set_padding(size);
@@ -968,28 +990,6 @@ bool SrsRtpPacket2::is_audio()
     return frame_type == SrsFrameTypeAudio;
 }
 
-SrsRtpPacket2* SrsRtpPacket2::copy()
-{
-    SrsRtpPacket2* cp = _srs_rtp_cache->allocate();
-
-    // We got packet from cache, so we must recycle it.
-    cp->recycle_payload();
-    cp->recycle_shared_msg();
-
-    cp->header = header;
-    cp->payload_ = payload_? payload_->copy():NULL;
-    cp->payload_type_ = payload_type_;
-
-    cp->nalu_type = nalu_type;
-    cp->shared_msg = shared_msg->copy();
-    cp->frame_type = frame_type;
-
-    cp->cached_payload_size = cached_payload_size;
-    cp->decode_handler = decode_handler;
-
-    return cp;
-}
-
 void SrsRtpPacket2::set_extension_types(const SrsRtpExtensionTypes* v)
 {
     return header.set_extensions(v);
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 4a8e70938..15961894e 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -328,6 +328,8 @@ public:
     char* wrap(char* data, int size);
     // Wrap the shared message, we copy it.
     char* wrap(SrsSharedPtrMessage* msg);
+    // Copy the RTP packet.
+    virtual SrsRtpPacket2* copy();
 public:
     // Get and set the payload of packet.
     void set_payload(ISrsRtpPayloader* p, SrsRtpPacketPayloadType pt) { payload_ = p; payload_type_ = pt; }
@@ -340,8 +342,6 @@ public:
     void set_decode_handler(ISrsRtpPacketDecodeHandler* h);
     // Whether the packet is Audio packet.
     bool is_audio();
-    // Copy the RTP packet.
-    virtual SrsRtpPacket2* copy();
     // Set RTP header extensions for encoding or decoding header extension
     void set_extension_types(const SrsRtpExtensionTypes* v);
 // interface ISrsEncoder

From 561acd26c5f7712a1a3595d6304285416b018174 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 12:34:12 +0800
Subject: [PATCH 042/102] Refine code

---
 trunk/src/app/srs_app_rtc_source.cpp    | 2 +-
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index 54d7e2a1e..21c7f8c7b 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -1921,7 +1921,7 @@ void SrsRtcVideoRecvTrack::on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffe
     uint8_t v = (uint8_t)pkt->nalu_type;
     if (v == kStapA) {
         *ppayload = new SrsRtpSTAPPayload();
-        *ppt = SrsRtpPacketPayloadTypeUnknown;
+        *ppt = SrsRtpPacketPayloadTypeSTAP;
     } else if (v == kFuA) {
         *ppayload = _srs_rtp_fua_cache->allocate();
         *ppt = SrsRtpPacketPayloadTypeFUA2;
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 65cc16a40..028677409 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -849,7 +849,8 @@ void SrsRtpPacket2::recycle_payload()
     }
 
     // Reset the payload and its type.
-    payload_ = NULL; payload_type_ = SrsRtpPacketPayloadTypeUnknown;
+    payload_ = NULL;
+    payload_type_ = SrsRtpPacketPayloadTypeUnknown;
 }
 
 void SrsRtpPacket2::recycle_shared_msg()

From 29b33e6303b28289e4100de1029261b72742b787 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 12:54:06 +0800
Subject: [PATCH 043/102] RTC: Disable player perf stat, because it should be
 refined.

---
 trunk/conf/full.conf               |  5 +++--
 trunk/src/app/srs_app_config.cpp   |  4 ++--
 trunk/src/app/srs_app_rtc_conn.cpp | 10 +++++-----
 3 files changed, 10 insertions(+), 9 deletions(-)

diff --git a/trunk/conf/full.conf b/trunk/conf/full.conf
index 13bdc7638..8cdbe363e 100644
--- a/trunk/conf/full.conf
+++ b/trunk/conf/full.conf
@@ -488,8 +488,9 @@ rtc_server {
     # default: off
     merge_nalus     off;
     # Whether enable the perf stat at http://localhost:1985/api/v1/perf
-    # default: on
-    perf_stat       on;
+    # TODO: FIXME: We should enable it when refined.
+    # default: off
+    perf_stat       off;
     # For RTP packet and its payload cache.
     rtp_cache {
         # Whether enable the RTP packet cache.
diff --git a/trunk/src/app/srs_app_config.cpp b/trunk/src/app/srs_app_config.cpp
index 5780cc489..164def7ef 100644
--- a/trunk/src/app/srs_app_config.cpp
+++ b/trunk/src/app/srs_app_config.cpp
@@ -4887,7 +4887,7 @@ bool SrsConfig::get_rtc_server_merge_nalus()
 
 bool SrsConfig::get_rtc_server_perf_stat()
 {
-    static bool DEFAULT = true;
+    static bool DEFAULT = false;
 
     SrsConfDirective* conf = root->get("rtc_server");
     if (!conf) {
@@ -4899,7 +4899,7 @@ bool SrsConfig::get_rtc_server_perf_stat()
         return DEFAULT;
     }
 
-    return SRS_CONF_PERFER_TRUE(conf->arg0());
+    return SRS_CONF_PERFER_FALSE(conf->arg0());
 }
 
 SrsConfDirective* SrsConfig::get_rtc_server_rtp_cache()
diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index 894d5c65f..23e7b6dc6 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -550,10 +550,13 @@ srs_error_t SrsRtcPlayStream::cycle()
     realtime = _srs_config->get_realtime_enabled(req_->vhost, true);
     mw_msgs = _srs_config->get_mw_msgs(req_->vhost, realtime, true);
 
+    bool stat_enabled = _srs_config->get_rtc_server_perf_stat();
+    SrsStatistic* stat = SrsStatistic::instance();
+
     // TODO: FIXME: Add cost in ms.
     SrsContextId cid = source->source_id();
-    srs_trace("RTC: start play url=%s, source_id=%s/%s, realtime=%d, mw_msgs=%d", req_->get_stream_url().c_str(),
-        cid.c_str(), source->pre_source_id().c_str(), realtime, mw_msgs);
+    srs_trace("RTC: start play url=%s, source_id=%s/%s, realtime=%d, mw_msgs=%d, stat=%d", req_->get_stream_url().c_str(),
+        cid.c_str(), source->pre_source_id().c_str(), realtime, mw_msgs, stat_enabled);
 
     SrsErrorPithyPrint* epp = new SrsErrorPithyPrint();
     SrsAutoFree(SrsErrorPithyPrint, epp);
@@ -561,9 +564,6 @@ srs_error_t SrsRtcPlayStream::cycle()
     SrsPithyPrint* pprint = SrsPithyPrint::create_rtc_play();
     SrsAutoFree(SrsPithyPrint, pprint);
 
-    bool stat_enabled = _srs_config->get_rtc_server_perf_stat();
-    SrsStatistic* stat = SrsStatistic::instance();
-
     // TODO: FIXME: Use cache for performance?
     vector<SrsRtpPacket2*> pkts;
     uint64_t total_pkts = 0;

From ecef3e7f0a9c994953f679736314a32ee0825045 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 17:40:19 +0800
Subject: [PATCH 044/102] Perf: Refine player cycle, use fast coroutine

---
 trunk/src/app/srs_app_rtc_conn.cpp   | 180 ++++++++++++++++-----------
 trunk/src/app/srs_app_rtc_conn.hpp   |   6 +-
 trunk/src/app/srs_app_rtc_source.cpp |  44 +++----
 trunk/src/app/srs_app_rtc_source.hpp |  12 +-
 trunk/src/app/srs_app_st.cpp         |  72 ++++++++---
 trunk/src/app/srs_app_st.hpp         |  63 +++++++---
 6 files changed, 236 insertions(+), 141 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index 23e7b6dc6..85b134f6a 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -382,7 +382,7 @@ SrsRtcPlayStreamStatistic::~SrsRtcPlayStreamStatistic()
 SrsRtcPlayStream::SrsRtcPlayStream(SrsRtcConnection* s, const SrsContextId& cid)
 {
     cid_ = cid;
-    trd = new SrsDummyCoroutine();
+    trd_ = NULL;
 
     req_ = NULL;
     source_ = NULL;
@@ -412,7 +412,7 @@ SrsRtcPlayStream::~SrsRtcPlayStream()
 
     srs_freep(nack_epp);
     srs_freep(pli_worker_);
-    srs_freep(trd);
+    srs_freep(trd_);
     srs_freep(timer_);
     srs_freep(req_);
 
@@ -499,10 +499,10 @@ srs_error_t SrsRtcPlayStream::start()
         return err;
     }
 
-    srs_freep(trd);
-    trd = new SrsSTCoroutine("rtc_sender", this, cid_);
+    srs_freep(trd_);
+    trd_ = new SrsFastCoroutine("rtc_sender", this, cid_);
 
-    if ((err = trd->start()) != srs_success) {
+    if ((err = trd_->start()) != srs_success) {
         return srs_error_wrap(err, "rtc_sender");
     }
 
@@ -527,7 +527,9 @@ srs_error_t SrsRtcPlayStream::start()
 
 void SrsRtcPlayStream::stop()
 {
-    trd->stop();
+    if (trd_) {
+        trd_->stop();
+    }
 }
 
 srs_error_t SrsRtcPlayStream::cycle()
@@ -550,24 +552,14 @@ srs_error_t SrsRtcPlayStream::cycle()
     realtime = _srs_config->get_realtime_enabled(req_->vhost, true);
     mw_msgs = _srs_config->get_mw_msgs(req_->vhost, realtime, true);
 
-    bool stat_enabled = _srs_config->get_rtc_server_perf_stat();
-    SrsStatistic* stat = SrsStatistic::instance();
-
     // TODO: FIXME: Add cost in ms.
     SrsContextId cid = source->source_id();
-    srs_trace("RTC: start play url=%s, source_id=%s/%s, realtime=%d, mw_msgs=%d, stat=%d", req_->get_stream_url().c_str(),
-        cid.c_str(), source->pre_source_id().c_str(), realtime, mw_msgs, stat_enabled);
+    srs_trace("RTC: start play url=%s, source_id=%s/%s, realtime=%d, mw_msgs=%d", req_->get_stream_url().c_str(),
+        cid.c_str(), source->pre_source_id().c_str(), realtime, mw_msgs);
 
     SrsErrorPithyPrint* epp = new SrsErrorPithyPrint();
     SrsAutoFree(SrsErrorPithyPrint, epp);
 
-    SrsPithyPrint* pprint = SrsPithyPrint::create_rtc_play();
-    SrsAutoFree(SrsPithyPrint, pprint);
-
-    // TODO: FIXME: Use cache for performance?
-    vector<SrsRtpPacket2*> pkts;
-    uint64_t total_pkts = 0;
-
     if (_srs_rtc_hijacker) {
         if ((err = _srs_rtc_hijacker->on_start_consume(session_, this, req_, consumer)) != srs_success) {
             return srs_error_wrap(err, "on start consuming");
@@ -575,64 +567,30 @@ srs_error_t SrsRtcPlayStream::cycle()
     }
 
     while (true) {
-        if ((err = trd->pull()) != srs_success) {
+        if ((err = trd_->pull()) != srs_success) {
             return srs_error_wrap(err, "rtc sender thread");
         }
 
         // Wait for amount of packets.
-        consumer->wait(mw_msgs);
-
-        // TODO: FIXME: Handle error.
-        consumer->dump_packets(pkts);
-
-        int msg_count = (int)pkts.size();
-        if (!msg_count) {
-            continue;
+try_dump_again:
+        SrsRtpPacket2* pkt = NULL;
+        consumer->dump_packet(&pkt);
+        if (!pkt) {
+            // TODO: FIXME: We should check the quit event.
+            consumer->wait(mw_msgs);
+            goto try_dump_again;
         }
 
-        // Update stats for session.
-        session_->stat_->nn_out_rtp += msg_count;
-        total_pkts += msg_count;
-
-        // Send-out all RTP packets and do cleanup
-        if (true) {
-            if ((err = send_packets(source, pkts, info)) != srs_success) {
-                uint32_t nn = 0;
-                if (epp->can_print(err, &nn)) {
-                    srs_warn("play send packets=%u, nn=%u/%u, err: %s", pkts.size(), epp->nn_count, nn, srs_error_desc(err).c_str());
-                }
-                srs_freep(err);
+        // Send-out the RTP packet and do cleanup
+        if ((err = send_packet(pkt)) != srs_success) {
+            uint32_t nn = 0;
+            if (epp->can_print(err, &nn)) {
+                srs_warn("play send packets=%u, nn=%u/%u, err: %s", 1, epp->nn_count, nn, srs_error_desc(err).c_str());
             }
-
-            for (int i = 0; i < msg_count; i++) {
-                SrsRtpPacket2* pkt = pkts[i];
-                _srs_rtp_cache->recycle(pkt);
-            }
-            pkts.clear();
+            srs_freep(err);
         }
 
-        // Stat for performance analysis.
-        if (!stat_enabled) {
-            continue;
-        }
-
-        // Stat the original RAW AV frame, maybe h264+aac.
-        stat->perf_on_msgs(msg_count);
-        // Stat the RTC packets, RAW AV frame, maybe h.264+opus.
-        int nn_rtc_packets = srs_max(info.nn_audios, info.nn_extras) + info.nn_videos;
-        stat->perf_on_rtc_packets(nn_rtc_packets);
-        // Stat the RAW RTP packets, which maybe group by GSO.
-        stat->perf_on_rtp_packets(msg_count);
-        // Stat the bytes and paddings.
-        stat->perf_on_rtc_bytes(info.nn_bytes, info.nn_rtp_bytes, info.nn_padding_bytes);
-
-        pprint->elapse();
-        if (pprint->can_print()) {
-            // TODO: FIXME: Print stat like frame/s, packet/s, loss_packets.
-            srs_trace("-> RTC PLAY %d msgs, %d/%d packets, %d audios, %d extras, %d videos, %d samples, %d/%d/%d bytes, %d pad, %d/%d cache",
-                total_pkts, msg_count, info.nn_rtp_pkts, info.nn_audios, info.nn_extras, info.nn_videos, info.nn_samples, info.nn_bytes,
-                info.nn_rtp_bytes, info.nn_padding_bytes, info.nn_paddings, msg_count, msg_count);
-        }
+        _srs_rtp_cache->recycle(pkt);
     }
 }
 
@@ -640,7 +598,6 @@ srs_error_t SrsRtcPlayStream::send_packets(SrsRtcStream* source, const vector<Sr
 {
     srs_error_t err = srs_success;
 
-    vector<SrsRtpPacket2*> send_pkts;
     // Covert kernel messages to RTP packets.
     for (int i = 0; i < (int)pkts.size(); i++) {
         SrsRtpPacket2* pkt = pkts[i];
@@ -656,7 +613,7 @@ srs_error_t SrsRtcPlayStream::send_packets(SrsRtcStream* source, const vector<Sr
             // TODO: FIXME: Any simple solution?
             SrsRtcAudioSendTrack* audio_track = audio_tracks_[pkt->header.get_ssrc()];
 
-            if ((err = audio_track->on_rtp(pkt, info)) != srs_success) {
+            if ((err = audio_track->on_rtp(pkt)) != srs_success) {
                 return srs_error_wrap(err, "audio track, SSRC=%u, SEQ=%u", pkt->header.get_ssrc(), pkt->header.get_sequence());
             }
 
@@ -665,7 +622,7 @@ srs_error_t SrsRtcPlayStream::send_packets(SrsRtcStream* source, const vector<Sr
             // TODO: FIXME: Any simple solution?
             SrsRtcVideoSendTrack* video_track = video_tracks_[pkt->header.get_ssrc()];
 
-            if ((err = video_track->on_rtp(pkt, info)) != srs_success) {
+            if ((err = video_track->on_rtp(pkt)) != srs_success) {
                 return srs_error_wrap(err, "video track, SSRC=%u, SEQ=%u", pkt->header.get_ssrc(), pkt->header.get_sequence());
             }
         }
@@ -678,6 +635,42 @@ srs_error_t SrsRtcPlayStream::send_packets(SrsRtcStream* source, const vector<Sr
     return err;
 }
 
+srs_error_t SrsRtcPlayStream::send_packet(SrsRtpPacket2* pkt)
+{
+    srs_error_t err = srs_success;
+
+    // TODO: FIXME: Maybe refine for performance issue.
+    if (!audio_tracks_.count(pkt->header.get_ssrc()) && !video_tracks_.count(pkt->header.get_ssrc())) {
+        srs_warn("ssrc %u not found", pkt->header.get_ssrc());
+        return err;
+    }
+
+    // For audio, we transcoded AAC to opus in extra payloads.
+    if (pkt->is_audio()) {
+        // TODO: FIXME: Any simple solution?
+        SrsRtcAudioSendTrack* audio_track = audio_tracks_[pkt->header.get_ssrc()];
+
+        if ((err = audio_track->on_rtp(pkt)) != srs_success) {
+            return srs_error_wrap(err, "audio track, SSRC=%u, SEQ=%u", pkt->header.get_ssrc(), pkt->header.get_sequence());
+        }
+
+        // TODO: FIXME: Padding audio to the max payload in RTP packets.
+    } else {
+        // TODO: FIXME: Any simple solution?
+        SrsRtcVideoSendTrack* video_track = video_tracks_[pkt->header.get_ssrc()];
+
+        if ((err = video_track->on_rtp(pkt)) != srs_success) {
+            return srs_error_wrap(err, "video track, SSRC=%u, SEQ=%u", pkt->header.get_ssrc(), pkt->header.get_sequence());
+        }
+    }
+
+    // Detail log, should disable it in release version.
+    srs_info("RTC: Update PT=%u, SSRC=%#x, Time=%u, %u bytes", pkt->header.get_payload_type(), pkt->header.get_ssrc(),
+        pkt->header.get_timestamp(), pkt->nb_bytes());
+
+    return err;
+}
+
 void SrsRtcPlayStream::set_all_tracks_status(bool status)
 {
     std::ostringstream merged_log;
@@ -805,7 +798,7 @@ srs_error_t SrsRtcPlayStream::on_rtcp_nack(SrsRtcpNack* rtcp)
     }
 
     vector<uint16_t> seqs = rtcp->get_lost_sns();
-    if((err = target->on_recv_nack(seqs, info)) != srs_success) {
+    if((err = target->on_recv_nack(seqs)) != srs_success) {
         return srs_error_wrap(err, "track response nack. id:%s, ssrc=%u", target->get_track_id().c_str(), ssrc);
     }
 
@@ -2569,6 +2562,51 @@ srs_error_t SrsRtcConnection::do_send_packets(const std::vector<SrsRtpPacket2*>&
     return err;
 }
 
+srs_error_t SrsRtcConnection::do_send_packet(SrsRtpPacket2* pkt)
+{
+    srs_error_t err = srs_success;
+
+    // For this message, select the first iovec.
+    iovec* iov = cache_iov_;
+    iov->iov_len = kRtpPacketSize;
+    cache_buffer_->skip(-1 * cache_buffer_->pos());
+
+    // Marshal packet to bytes in iovec.
+    if (true) {
+        if ((err = pkt->encode(cache_buffer_)) != srs_success) {
+            return srs_error_wrap(err, "encode packet");
+        }
+        iov->iov_len = cache_buffer_->pos();
+    }
+
+    // Cipher RTP to SRTP packet.
+    if (true) {
+        int nn_encrypt = (int)iov->iov_len;
+        if ((err = transport_->protect_rtp(iov->iov_base, &nn_encrypt)) != srs_success) {
+            return srs_error_wrap(err, "srtp protect");
+        }
+        iov->iov_len = (size_t)nn_encrypt;
+    }
+
+    // For NACK simulator, drop packet.
+    if (nn_simulate_player_nack_drop) {
+        simulate_player_drop_packet(&pkt->header, (int)iov->iov_len);
+        iov->iov_len = 0;
+        return err;
+    }
+
+    ++_srs_pps_srtps->sugar;
+
+    // TODO: FIXME: Handle error.
+    sendonly_skt->sendto(iov->iov_base, iov->iov_len, 0);
+
+    // Detail log, should disable it in release version.
+    srs_info("RTC: SEND PT=%u, SSRC=%#x, SEQ=%u, Time=%u, %u/%u bytes", pkt->header.get_payload_type(), pkt->header.get_ssrc(),
+        pkt->header.get_sequence(), pkt->header.get_timestamp(), pkt->nb_bytes(), iov->iov_len);
+
+    return err;
+}
+
 void SrsRtcConnection::set_all_tracks_status(std::string stream_uri, bool is_publish, bool status)
 {
     // For publishers.
diff --git a/trunk/src/app/srs_app_rtc_conn.hpp b/trunk/src/app/srs_app_rtc_conn.hpp
index 437857833..69c620b03 100644
--- a/trunk/src/app/srs_app_rtc_conn.hpp
+++ b/trunk/src/app/srs_app_rtc_conn.hpp
@@ -62,6 +62,8 @@ class SrsRtcConsumer;
 class SrsRtcAudioSendTrack;
 class SrsRtcVideoSendTrack;
 class SrsErrorPithyPrint;
+class SrsPithyPrint;
+class SrsStatistic;
 
 const uint8_t kSR   = 200;
 const uint8_t kRR   = 201;
@@ -245,7 +247,7 @@ class SrsRtcPlayStream : virtual public ISrsCoroutineHandler, virtual public ISr
 {
 private:
     SrsContextId cid_;
-    SrsCoroutine* trd;
+    SrsFastCoroutine* trd_;
     SrsRtcConnection* session_;
     SrsRtcPLIWorker* pli_worker_;
 private:
@@ -285,6 +287,7 @@ public:
     virtual srs_error_t cycle();
 private:
     srs_error_t send_packets(SrsRtcStream* source, const std::vector<SrsRtpPacket2*>& pkts, SrsRtcPlayStreamStatistic& info);
+    srs_error_t send_packet(SrsRtpPacket2* pkt);
 public:
     // Directly set the status of track, generally for init to set the default value.
     void set_all_tracks_status(bool status);
@@ -549,6 +552,7 @@ public:
     void simulate_nack_drop(int nn);
     void simulate_player_drop_packet(SrsRtpHeader* h, int nn_bytes);
     srs_error_t do_send_packets(const std::vector<SrsRtpPacket2*>& pkts, SrsRtcPlayStreamStatistic& info);
+    srs_error_t do_send_packet(SrsRtpPacket2* pkt);
     // Directly set the status of play track, generally for init to set the default value.
     void set_all_tracks_status(std::string stream_uri, bool is_publish, bool status);
 private:
diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index 21c7f8c7b..7d2c149b7 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -197,7 +197,7 @@ srs_error_t SrsRtcConsumer::enqueue(SrsRtpPacket2* pkt)
     return err;
 }
 
-srs_error_t SrsRtcConsumer::dump_packets(std::vector<SrsRtpPacket2*>& pkts)
+srs_error_t SrsRtcConsumer::dump_packet(SrsRtpPacket2** ppkt)
 {
     srs_error_t err = srs_success;
 
@@ -206,7 +206,11 @@ srs_error_t SrsRtcConsumer::dump_packets(std::vector<SrsRtpPacket2*>& pkts)
         should_update_source_id = false;
     }
 
-    queue.swap(pkts);
+    // TODO: FIXME: Refine performance by ring buffer.
+    if (!queue.empty()) {
+        *ppkt = queue.front();
+        queue.erase(queue.begin());
+    }
 
     return err;
 }
@@ -2049,7 +2053,7 @@ std::string SrsRtcSendTrack::get_track_id()
     return track_desc_->id_;
 }
 
-srs_error_t SrsRtcSendTrack::on_recv_nack(const vector<uint16_t>& lost_seqs, SrsRtcPlayStreamStatistic& info)
+srs_error_t SrsRtcSendTrack::on_recv_nack(const vector<uint16_t>& lost_seqs)
 {
     srs_error_t err = srs_success;
 
@@ -2066,18 +2070,14 @@ srs_error_t SrsRtcSendTrack::on_recv_nack(const vector<uint16_t>& lost_seqs, Srs
             continue;
         }
 
-        info.nn_bytes += pkt->nb_bytes();
         uint32_t nn = 0;
         if (nack_epp->can_print(pkt->header.get_ssrc(), &nn)) {
             srs_trace("RTC: NACK ARQ seq=%u, ssrc=%u, ts=%u, count=%u/%u, %d bytes", pkt->header.get_sequence(),
                 pkt->header.get_ssrc(), pkt->header.get_timestamp(), nn, nack_epp->nn_count, pkt->nb_bytes());
         }
 
-        vector<SrsRtpPacket2*> resend_pkts;
-        resend_pkts.push_back(pkt);
-
         // By default, we send packets by sendmmsg.
-        if ((err = session_->do_send_packets(resend_pkts, info)) != srs_success) {
+        if ((err = session_->do_send_packet(pkt)) != srs_success) {
             return srs_error_wrap(err, "raw send");
         }
     }
@@ -2094,7 +2094,7 @@ SrsRtcAudioSendTrack::~SrsRtcAudioSendTrack()
 {
 }
 
-srs_error_t SrsRtcAudioSendTrack::on_rtp(SrsRtpPacket2* pkt, SrsRtcPlayStreamStatistic& info)
+srs_error_t SrsRtcAudioSendTrack::on_rtp(SrsRtpPacket2* pkt)
 {
     srs_error_t err = srs_success;
 
@@ -2122,8 +2122,6 @@ srs_error_t SrsRtcAudioSendTrack::on_rtp(SrsRtpPacket2* pkt, SrsRtcPlayStreamSta
     }
 
     // Update stats.
-    info.nn_bytes += pkt->nb_bytes();
-    info.nn_audios++;
     session_->stat_->nn_out_audios++;
 
     // track level statistic
@@ -2131,13 +2129,8 @@ srs_error_t SrsRtcAudioSendTrack::on_rtp(SrsRtpPacket2* pkt, SrsRtcPlayStreamSta
     statistic_->packets++;
     statistic_->bytes += pkt->nb_bytes();
 
-    if (true) {
-        std::vector<SrsRtpPacket2*> pkts;
-        pkts.push_back(pkt);
-
-        if ((err = session_->do_send_packets(pkts, info)) != srs_success) {
-            return srs_error_wrap(err, "raw send");
-        }
+    if ((err = session_->do_send_packet(pkt)) != srs_success) {
+        return srs_error_wrap(err, "raw send");
     }
 
     return err;
@@ -2159,7 +2152,7 @@ SrsRtcVideoSendTrack::~SrsRtcVideoSendTrack()
 {
 }
 
-srs_error_t SrsRtcVideoSendTrack::on_rtp(SrsRtpPacket2* pkt, SrsRtcPlayStreamStatistic& info)
+srs_error_t SrsRtcVideoSendTrack::on_rtp(SrsRtpPacket2* pkt)
 {
     srs_error_t err = srs_success;
 
@@ -2189,8 +2182,6 @@ srs_error_t SrsRtcVideoSendTrack::on_rtp(SrsRtpPacket2* pkt, SrsRtcPlayStreamSta
     }
 
     // Update stats.
-    info.nn_bytes += pkt->nb_bytes();
-    info.nn_videos++;
     session_->stat_->nn_out_videos++;
 
     // track level statistic
@@ -2198,15 +2189,10 @@ srs_error_t SrsRtcVideoSendTrack::on_rtp(SrsRtpPacket2* pkt, SrsRtcPlayStreamSta
     statistic->packets++;
     statistic->bytes += pkt->nb_bytes();
 
-    if (true) {
-        std::vector<SrsRtpPacket2*> pkts;
-        pkts.push_back(pkt);
-
-        if ((err = session_->do_send_packets(pkts, info)) != srs_success) {
-            return srs_error_wrap(err, "raw send");
-        }
+    if ((err = session_->do_send_packet(pkt)) != srs_success) {
+        return srs_error_wrap(err, "raw send");
     }
-    
+
     return err;
 }
 
diff --git a/trunk/src/app/srs_app_rtc_source.hpp b/trunk/src/app/srs_app_rtc_source.hpp
index d5155c263..5bb7c42d9 100644
--- a/trunk/src/app/srs_app_rtc_source.hpp
+++ b/trunk/src/app/srs_app_rtc_source.hpp
@@ -97,8 +97,8 @@ public:
     // Put RTP packet into queue.
     // @note We do not drop packet here, but drop it in sender.
     srs_error_t enqueue(SrsRtpPacket2* pkt);
-    // Get all RTP packets from queue.
-    virtual srs_error_t dump_packets(std::vector<SrsRtpPacket2*>& pkts);
+    // For RTC, we only got one packet, because there is not many packets in queue.
+    virtual srs_error_t dump_packet(SrsRtpPacket2** ppkt);
     // Wait for at-least some messages incoming in queue.
     virtual void wait(int nb_msgs);
 };
@@ -591,9 +591,9 @@ public:
     bool get_track_status();
     std::string get_track_id();
 public:
-    virtual srs_error_t on_rtp(SrsRtpPacket2* pkt, SrsRtcPlayStreamStatistic& info) = 0;
+    virtual srs_error_t on_rtp(SrsRtpPacket2* pkt) = 0;
     virtual srs_error_t on_rtcp(SrsRtpPacket2* pkt) = 0;
-    virtual srs_error_t on_recv_nack(const std::vector<uint16_t>& lost_seqs, SrsRtcPlayStreamStatistic& info);
+    virtual srs_error_t on_recv_nack(const std::vector<uint16_t>& lost_seqs);
 };
 
 class SrsRtcAudioSendTrack : public SrsRtcSendTrack
@@ -602,7 +602,7 @@ public:
     SrsRtcAudioSendTrack(SrsRtcConnection* session, SrsRtcTrackDescription* track_desc);
     virtual ~SrsRtcAudioSendTrack();
 public:
-    virtual srs_error_t on_rtp(SrsRtpPacket2* pkt, SrsRtcPlayStreamStatistic& info);
+    virtual srs_error_t on_rtp(SrsRtpPacket2* pkt);
     virtual srs_error_t on_rtcp(SrsRtpPacket2* pkt);
 };
 
@@ -612,7 +612,7 @@ public:
     SrsRtcVideoSendTrack(SrsRtcConnection* session, SrsRtcTrackDescription* track_desc);
     virtual ~SrsRtcVideoSendTrack();
 public:
-    virtual srs_error_t on_rtp(SrsRtpPacket2* pkt, SrsRtcPlayStreamStatistic& info);
+    virtual srs_error_t on_rtp(SrsRtpPacket2* pkt);
     virtual srs_error_t on_rtcp(SrsRtpPacket2* pkt);
 };
 
diff --git a/trunk/src/app/srs_app_st.cpp b/trunk/src/app/srs_app_st.cpp
index b11c50fd1..5a1954a4b 100755
--- a/trunk/src/app/srs_app_st.cpp
+++ b/trunk/src/app/srs_app_st.cpp
@@ -87,9 +87,54 @@ const SrsContextId& SrsDummyCoroutine::cid()
     return _srs_context->get_id();
 }
 
+SrsSTCoroutine::SrsSTCoroutine(string n, ISrsCoroutineHandler* h)
+{
+    impl_ = new SrsFastCoroutine(n, h);
+}
+
+SrsSTCoroutine::SrsSTCoroutine(string n, ISrsCoroutineHandler* h, SrsContextId cid)
+{
+    impl_ = new SrsFastCoroutine(n, h, cid);
+}
+
+SrsSTCoroutine::~SrsSTCoroutine()
+{
+    srs_freep(impl_);
+}
+
+void SrsSTCoroutine::set_stack_size(int v)
+{
+    impl_->set_stack_size(v);
+}
+
+srs_error_t SrsSTCoroutine::start()
+{
+    return impl_->start();
+}
+
+void SrsSTCoroutine::stop()
+{
+    impl_->stop();
+}
+
+void SrsSTCoroutine::interrupt()
+{
+    impl_->interrupt();
+}
+
+srs_error_t SrsSTCoroutine::pull()
+{
+    return impl_->pull();
+}
+
+const SrsContextId& SrsSTCoroutine::cid()
+{
+    return impl_->cid();
+}
+
 _ST_THREAD_CREATE_PFN _pfn_st_thread_create = (_ST_THREAD_CREATE_PFN)st_thread_create;
 
-SrsSTCoroutine::SrsSTCoroutine(string n, ISrsCoroutineHandler* h)
+SrsFastCoroutine::SrsFastCoroutine(string n, ISrsCoroutineHandler* h)
 {
     // TODO: FIXME: Reduce duplicated code.
     name = n;
@@ -102,7 +147,7 @@ SrsSTCoroutine::SrsSTCoroutine(string n, ISrsCoroutineHandler* h)
     stack_size = 0;
 }
 
-SrsSTCoroutine::SrsSTCoroutine(string n, ISrsCoroutineHandler* h, SrsContextId cid)
+SrsFastCoroutine::SrsFastCoroutine(string n, ISrsCoroutineHandler* h, SrsContextId cid)
 {
     name = n;
     handler = h;
@@ -115,19 +160,19 @@ SrsSTCoroutine::SrsSTCoroutine(string n, ISrsCoroutineHandler* h, SrsContextId c
     stack_size = 0;
 }
 
-SrsSTCoroutine::~SrsSTCoroutine()
+SrsFastCoroutine::~SrsFastCoroutine()
 {
     stop();
     
     srs_freep(trd_err);
 }
 
-void SrsSTCoroutine::set_stack_size(int v)
+void SrsFastCoroutine::set_stack_size(int v)
 {
     stack_size = v;
 }
 
-srs_error_t SrsSTCoroutine::start()
+srs_error_t SrsFastCoroutine::start()
 {
     srs_error_t err = srs_success;
     
@@ -159,7 +204,7 @@ srs_error_t SrsSTCoroutine::start()
     return err;
 }
 
-void SrsSTCoroutine::stop()
+void SrsFastCoroutine::stop()
 {
     if (disposed) {
         return;
@@ -190,7 +235,7 @@ void SrsSTCoroutine::stop()
     return;
 }
 
-void SrsSTCoroutine::interrupt()
+void SrsFastCoroutine::interrupt()
 {
     if (!started || interrupted || cycle_done) {
         return;
@@ -204,17 +249,12 @@ void SrsSTCoroutine::interrupt()
     st_thread_interrupt((st_thread_t)trd);
 }
 
-srs_error_t SrsSTCoroutine::pull()
-{
-    return srs_error_copy(trd_err);
-}
-
-const SrsContextId& SrsSTCoroutine::cid()
+const SrsContextId& SrsFastCoroutine::cid()
 {
     return cid_;
 }
 
-srs_error_t SrsSTCoroutine::cycle()
+srs_error_t SrsFastCoroutine::cycle()
 {
     if (_srs_context) {
         if (cid_.empty()) {
@@ -234,9 +274,9 @@ srs_error_t SrsSTCoroutine::cycle()
     return err;
 }
 
-void* SrsSTCoroutine::pfn(void* arg)
+void* SrsFastCoroutine::pfn(void* arg)
 {
-    SrsSTCoroutine* p = (SrsSTCoroutine*)arg;
+    SrsFastCoroutine* p = (SrsFastCoroutine*)arg;
 
     srs_error_t err = p->cycle();
 
diff --git a/trunk/src/app/srs_app_st.hpp b/trunk/src/app/srs_app_st.hpp
index 42313ed7a..89d118ce9 100644
--- a/trunk/src/app/srs_app_st.hpp
+++ b/trunk/src/app/srs_app_st.hpp
@@ -29,9 +29,12 @@
 #include <string>
 
 #include <srs_kernel_log.hpp>
+#include <srs_kernel_error.hpp>
 #include <srs_service_st.hpp>
 #include <srs_protocol_io.hpp>
 
+class SrsFastCoroutine;
+
 // Each ST-coroutine must implements this interface,
 // to do the cycle job and handle some events.
 //
@@ -108,10 +111,6 @@ public:
     virtual const SrsContextId& cid();
 };
 
-// For utest to mock the thread create.
-typedef void* (*_ST_THREAD_CREATE_PFN)(void *(*start)(void *arg), void *arg, int joinable, int stack_size);
-extern _ST_THREAD_CREATE_PFN _pfn_st_thread_create;
-
 // A ST-coroutine is a lightweight thread, just like the goroutine.
 // But the goroutine maybe run on different thread, while ST-coroutine only
 // run in single thread, because it use setjmp and longjmp, so it may cause
@@ -127,19 +126,7 @@ extern _ST_THREAD_CREATE_PFN _pfn_st_thread_create;
 class SrsSTCoroutine : public SrsCoroutine
 {
 private:
-    std::string name;
-    int stack_size;
-    ISrsCoroutineHandler* handler;
-private:
-    srs_thread_t trd;
-    SrsContextId cid_;
-    srs_error_t trd_err;
-private:
-    bool started;
-    bool interrupted;
-    bool disposed;
-    // Cycle done, no need to interrupt it.
-    bool cycle_done;
+    SrsFastCoroutine* impl_;
 public:
     // Create a thread with name n and handler h.
     // @remark User can specify a cid for thread to use, or we will allocate a new one.
@@ -170,8 +157,48 @@ public:
     virtual srs_error_t pull();
     // Get the context id of thread.
     virtual const SrsContextId& cid();
+};
+
+// For utest to mock the thread create.
+typedef void* (*_ST_THREAD_CREATE_PFN)(void *(*start)(void *arg), void *arg, int joinable, int stack_size);
+extern _ST_THREAD_CREATE_PFN _pfn_st_thread_create;
+
+// High performance coroutine.
+class SrsFastCoroutine
+{
 private:
-    virtual srs_error_t cycle();
+    std::string name;
+    int stack_size;
+    ISrsCoroutineHandler* handler;
+private:
+    srs_thread_t trd;
+    SrsContextId cid_;
+    srs_error_t trd_err;
+private:
+    bool started;
+    bool interrupted;
+    bool disposed;
+    // Cycle done, no need to interrupt it.
+    bool cycle_done;
+public:
+    SrsFastCoroutine(std::string n, ISrsCoroutineHandler* h);
+    SrsFastCoroutine(std::string n, ISrsCoroutineHandler* h, SrsContextId cid);
+    ~SrsFastCoroutine();
+public:
+    void set_stack_size(int v);
+public:
+    srs_error_t start();
+    void stop();
+    void interrupt();
+    inline srs_error_t pull() {
+        if (trd_err == srs_success) {
+            return srs_success;
+        }
+        return srs_error_copy(trd_err);
+    }
+    const SrsContextId& cid();
+private:
+    srs_error_t cycle();
     static void* pfn(void* arg);
 };
 

From e2bf9f3623fc8e4aabe2fe9f2ef32cbaafd05bb9 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 17:53:59 +0800
Subject: [PATCH 045/102] Refine code, remove goto

---
 trunk/src/app/srs_app_rtc_conn.cpp | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index 85b134f6a..d14e3d8d7 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -572,13 +572,12 @@ srs_error_t SrsRtcPlayStream::cycle()
         }
 
         // Wait for amount of packets.
-try_dump_again:
         SrsRtpPacket2* pkt = NULL;
         consumer->dump_packet(&pkt);
         if (!pkt) {
             // TODO: FIXME: We should check the quit event.
             consumer->wait(mw_msgs);
-            goto try_dump_again;
+            continue;
         }
 
         // Send-out the RTP packet and do cleanup

From e44170224698c12a404c44a81ae90aced9ccf072 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 18:39:09 +0800
Subject: [PATCH 046/102] Refine code

---
 trunk/src/kernel/srs_kernel_flv.cpp     |  6 +--
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 67 +++++++++++++------------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp |  7 ++-
 3 files changed, 42 insertions(+), 38 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_flv.cpp b/trunk/src/kernel/srs_kernel_flv.cpp
index 5fd1f0929..a06e387df 100644
--- a/trunk/src/kernel/srs_kernel_flv.cpp
+++ b/trunk/src/kernel/srs_kernel_flv.cpp
@@ -290,11 +290,11 @@ void SrsSharedPtrMessage::wrap(char* payload, int size)
 void SrsSharedPtrMessage::unwrap()
 {
     if (ptr) {
-        if (ptr->shared_count == 0) {
-            srs_freep(ptr);
-        } else {
+        if (ptr->shared_count > 0) {
             ptr->shared_count--;
             ptr = NULL;
+        } else {
+            srs_freep(ptr);
         }
     }
 
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 028677409..072d9bfd4 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -778,11 +778,6 @@ void SrsRtpHeader::set_ssrc(uint32_t v)
     ssrc = v;
 }
 
-uint32_t SrsRtpHeader::get_ssrc() const
-{
-    return ssrc;
-}
-
 void SrsRtpHeader::set_padding(uint8_t v)
 {
     padding_length = v;
@@ -835,21 +830,21 @@ void SrsRtpPacket2::recycle_payload()
         return;
     }
 
-    if (_srs_rtp_raw_cache->enabled() || _srs_rtp_fua_cache->enabled()) {
-        // Only recycle some common payloads.
-        if (payload_type_ == SrsRtpPacketPayloadTypeRaw) {
-            _srs_rtp_raw_cache->recycle((SrsRtpRawPayload*)payload_);
-        } else if (payload_type_ == SrsRtpPacketPayloadTypeFUA2) {
-            _srs_rtp_fua_cache->recycle((SrsRtpFUAPayload2*)payload_);
-        } else {
-            srs_freep(payload_);
-        }
-    } else {
-        srs_freep(payload_);
+    if (payload_type_ == SrsRtpPacketPayloadTypeRaw && _srs_rtp_raw_cache->enabled()) {
+        _srs_rtp_raw_cache->recycle((SrsRtpRawPayload*)payload_);
+        payload_ = NULL;
+        goto cleanup;
     }
 
-    // Reset the payload and its type.
-    payload_ = NULL;
+    if (payload_type_ == SrsRtpPacketPayloadTypeFUA2 && _srs_rtp_fua_cache->enabled()) {
+        _srs_rtp_fua_cache->recycle((SrsRtpFUAPayload2*)payload_);
+        payload_ = NULL;
+        goto cleanup;
+    }
+
+    srs_freep(payload_);
+
+cleanup:
     payload_type_ = SrsRtpPacketPayloadTypeUnknown;
 }
 
@@ -859,20 +854,22 @@ void SrsRtpPacket2::recycle_shared_msg()
         return;
     }
 
-    // Recycle the real owner of message, clear the reference.
-    if (_srs_rtp_msg_cache_buffers->enabled() || _srs_rtp_msg_cache_objs->enabled()) {
-        // We only recycle the RTC UDP packet messages.
-        if (shared_msg->payload && shared_msg->size == kRtpPacketSize && shared_msg->count() == 0) {
-            _srs_rtp_msg_cache_buffers->recycle(shared_msg);
-        } else {
-            shared_msg->unwrap();
-            _srs_rtp_msg_cache_objs->recycle(shared_msg);
-        }
-
-        shared_msg = NULL;
-    } else {
-        srs_freep(shared_msg);
+    if (!shared_msg->payload || shared_msg->size != kRtpPacketSize || shared_msg->count() > 0) {
+        shared_msg->unwrap();
+        _srs_rtp_msg_cache_objs->recycle(shared_msg);
+        goto cleanup;
     }
+
+    if (_srs_rtp_msg_cache_buffers->enabled()) {
+        _srs_rtp_msg_cache_buffers->recycle(shared_msg);
+        goto cleanup;
+    }
+
+    srs_freep(shared_msg);
+    return;
+
+cleanup:
+    shared_msg = NULL;
 }
 
 bool SrsRtpPacket2::recycle()
@@ -948,8 +945,12 @@ SrsRtpPacket2* SrsRtpPacket2::copy()
     SrsRtpPacket2* cp = _srs_rtp_cache->allocate();
 
     // We got packet from cache, so we must recycle it.
-    cp->recycle_payload();
-    cp->recycle_shared_msg();
+    if (cp->payload_) {
+        cp->recycle_payload();
+    }
+    if (cp->shared_msg) {
+        cp->recycle_shared_msg();
+    }
 
     cp->header = header;
     cp->payload_ = payload_? payload_->copy():NULL;
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 15961894e..e3fb55eb6 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -250,7 +250,10 @@ public:
     void set_timestamp(uint32_t v);
     uint32_t get_timestamp() const;
     void set_ssrc(uint32_t v);
-    uint32_t get_ssrc() const;
+    // SrsRtpHeader::get_ssrc
+    inline uint32_t get_ssrc() const {
+        return ssrc;
+    }
     void set_padding(uint8_t v);
     uint8_t get_padding() const;
     void set_extensions(const SrsRtpExtensionTypes* extmap);
@@ -400,7 +403,7 @@ public:
     }
     // Get the status of object cache.
     // SrsRtpObjectCacheManager::enabled
-    bool enabled() {
+    inline bool enabled() {
         return enabled_;
     }
     // SrsRtpObjectCacheManager::size

From 0fa3646c4a11b73bec77857fa32a4e32560cd1f2 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 19:41:16 +0800
Subject: [PATCH 047/102] Perf: Directly reference the extmap

---
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 28 ++++++++-----------------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp | 15 ++++++-------
 2 files changed, 17 insertions(+), 26 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 072d9bfd4..17f2bf7b3 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -165,18 +165,13 @@ int32_t srs_seq_distance(uint16_t value, uint16_t pre_value)
 
 SrsRtpExtensionTypes::SrsRtpExtensionTypes()
 {
-    reset();
+    memset(ids_, kRtpExtensionNone, sizeof(ids_));
 }
 
 SrsRtpExtensionTypes::~SrsRtpExtensionTypes()
 {
 }
 
-void SrsRtpExtensionTypes::reset()
-{
-    memset(ids_, kRtpExtensionNone, sizeof(ids_));
-}
-
 bool SrsRtpExtensionTypes::register_by_uri(int id, std::string uri)
 {
     for (int i = 0; i < (int)(sizeof(kExtensions)/sizeof(kExtensions[0])); ++i) {
@@ -377,13 +372,10 @@ SrsRtpExtensions::~SrsRtpExtensions()
 
 void SrsRtpExtensions::reset()
 {
-    if (has_ext_) {
-        types_.reset();
-        twcc_.reset();
-        audio_level_.reset();
-    }
-
     has_ext_ = false;
+    types_ = NULL;
+    twcc_.reset();
+    audio_level_.reset();
 }
 
 srs_error_t SrsRtpExtensions::decode(SrsBuffer* buf)
@@ -445,7 +437,7 @@ srs_error_t SrsRtpExtensions::decode_0xbede(SrsBuffer* buf)
         uint8_t id = (v & 0xF0) >> 4;
         uint8_t len = (v & 0x0F);
 
-        SrsRtpExtensionType xtype = types_.get_type(id);
+        SrsRtpExtensionType xtype = types_? types_->get_type(id) : kRtpExtensionNone;
         if (xtype == kRtpExtensionTransportSequenceNumber) {
             if ((err = twcc_.decode(buf)) != srs_success) {
                 return srs_error_wrap(err, "decode twcc extension");
@@ -522,11 +514,9 @@ bool SrsRtpExtensions::exists()
     return has_ext_;
 }
 
-void SrsRtpExtensions::set_types_(const SrsRtpExtensionTypes* types)
+void SrsRtpExtensions::set_types_(SrsRtpExtensionTypes* types)
 {
-    if(types) {
-        types_ = *types;
-    }
+    types_ = types;
 }
 
 srs_error_t SrsRtpExtensions::get_twcc_sequence_number(uint16_t& twcc_sn)
@@ -703,7 +693,7 @@ srs_error_t SrsRtpHeader::encode(SrsBuffer* buf)
 
     return err;
 }
-void SrsRtpHeader::set_extensions(const SrsRtpExtensionTypes* extmap)
+void SrsRtpHeader::set_extensions(SrsRtpExtensionTypes* extmap)
 {
     if (extmap) {
         extensions_.set_types_(extmap);
@@ -992,7 +982,7 @@ bool SrsRtpPacket2::is_audio()
     return frame_type == SrsFrameTypeAudio;
 }
 
-void SrsRtpPacket2::set_extension_types(const SrsRtpExtensionTypes* v)
+void SrsRtpPacket2::set_extension_types(SrsRtpExtensionTypes* v)
 {
     return header.set_extensions(v);
 }
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index e3fb55eb6..34baa77e2 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -122,9 +122,6 @@ public:
 public:
     SrsRtpExtensionTypes();
     virtual ~SrsRtpExtensionTypes();
-public:
-    // Reset the object to reuse it.
-    void reset();
 private:
     bool register_id(int id, SrsRtpExtensionType type, std::string uri);
 private:
@@ -187,7 +184,11 @@ class SrsRtpExtensions// : public ISrsCodec
 {
 private:
     bool has_ext_;
-    SrsRtpExtensionTypes types_;
+private:
+    // The extension types is used to decode the packet, which is reference to
+    // the types in publish stream.
+    SrsRtpExtensionTypes* types_;
+private:
     SrsRtpExtensionTwcc twcc_;
     SrsRtpExtensionOneByte audio_level_;
 public:
@@ -198,7 +199,7 @@ public:
     void reset();
 public:
     bool exists();
-    void set_types_(const SrsRtpExtensionTypes* types);
+    void set_types_(SrsRtpExtensionTypes* types);
     srs_error_t get_twcc_sequence_number(uint16_t& twcc_sn);
     srs_error_t set_twcc_sequence_number(uint8_t id, uint16_t sn);
     srs_error_t get_audio_level(uint8_t& level);
@@ -256,7 +257,7 @@ public:
     }
     void set_padding(uint8_t v);
     uint8_t get_padding() const;
-    void set_extensions(const SrsRtpExtensionTypes* extmap);
+    void set_extensions(SrsRtpExtensionTypes* extmap);
     void ignore_padding(bool v);
     srs_error_t get_twcc_sequence_number(uint16_t& twcc_sn);
     srs_error_t set_twcc_sequence_number(uint8_t id, uint16_t sn);
@@ -346,7 +347,7 @@ public:
     // Whether the packet is Audio packet.
     bool is_audio();
     // Set RTP header extensions for encoding or decoding header extension
-    void set_extension_types(const SrsRtpExtensionTypes* v);
+    void set_extension_types(SrsRtpExtensionTypes* v);
 // interface ISrsEncoder
 public:
     virtual uint64_t nb_bytes();

From 6d64490d738ff6b8f51f80dce80bb1297bec9416 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 19:49:44 +0800
Subject: [PATCH 048/102] Perf: Never reset the csrc

---
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 16 +++++++++++-----
 1 file changed, 11 insertions(+), 5 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 17f2bf7b3..76d651da9 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -202,8 +202,6 @@ SrsRtpExtensionType SrsRtpExtensionTypes::get_type(int id) const
     return kInvalidType;
 }
 
-
-
 SrsRtpExtensionTwcc::SrsRtpExtensionTwcc()
 {
     reset();
@@ -556,6 +554,8 @@ srs_error_t SrsRtpExtensions::set_audio_level(int id, uint8_t level)
 SrsRtpHeader::SrsRtpHeader()
 {
     reset();
+
+    memset(csrc, 0, sizeof(csrc));
 }
 
 SrsRtpHeader::~SrsRtpHeader()
@@ -564,17 +564,23 @@ SrsRtpHeader::~SrsRtpHeader()
 
 void SrsRtpHeader::reset()
 {
-    padding_length   = 0;
+    // Reset the fields in protocol.
     cc               = 0;
     marker           = false;
     payload_type     = 0;
     sequence         = 0;
     timestamp        = 0;
     ssrc             = 0;
-    memset(csrc, 0, sizeof(csrc));
+
+    // Reset the parsed fields.
+    padding_length   = 0;
+    extensions_.reset();
+
+    // Reset other fields.
     ignore_padding_  = false;
 
-    extensions_.reset();
+    // The CSRC is not used yet, so we never reset it.
+    //memset(csrc, 0, sizeof(csrc));
 }
 
 srs_error_t SrsRtpHeader::decode(SrsBuffer* buf)

From cca5f8db826833dd180f208723ea320e01e362db Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 19:55:57 +0800
Subject: [PATCH 049/102] Refine code

---
 trunk/src/app/srs_app_rtc_conn.cpp | 1 +
 1 file changed, 1 insertion(+)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index d14e3d8d7..e3d228846 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -1203,6 +1203,7 @@ srs_error_t SrsRtcPublishStream::do_on_rtp_plaintext(SrsRtpPacket2* pkt, SrsBuff
 
     pkt->set_decode_handler(this);
     pkt->set_extension_types(&extension_types_);
+    pkt->ignore_padding(false);
 
     if ((err = pkt->decode(buf)) != srs_success) {
         return srs_error_wrap(err, "decode rtp packet");

From 00b0e22402a50939755e36ec2f3c9dad6581fd50 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 20:05:28 +0800
Subject: [PATCH 050/102] Refine code

---
 trunk/src/app/srs_app_rtc_conn.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index e3d228846..3b63af1cc 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -1203,7 +1203,7 @@ srs_error_t SrsRtcPublishStream::do_on_rtp_plaintext(SrsRtpPacket2* pkt, SrsBuff
 
     pkt->set_decode_handler(this);
     pkt->set_extension_types(&extension_types_);
-    pkt->ignore_padding(false);
+    pkt->header.ignore_padding(false);
 
     if ((err = pkt->decode(buf)) != srs_success) {
         return srs_error_wrap(err, "decode rtp packet");

From 81dddcbd93891b13760d1b03ce7b0964f777b14b Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 21:46:50 +0800
Subject: [PATCH 051/102] RTC: Remove dead code

---
 trunk/src/app/srs_app_rtc_conn.cpp   | 108 ---------------------------
 trunk/src/app/srs_app_rtc_conn.hpp   |  36 ---------
 trunk/src/app/srs_app_rtc_source.hpp |   1 -
 3 files changed, 145 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index 3b63af1cc..a8b205b84 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -366,19 +366,6 @@ srs_error_t SrsRtcPLIWorker::cycle()
     return err;
 }
 
-SrsRtcPlayStreamStatistic::SrsRtcPlayStreamStatistic()
-{
-    nn_rtp_pkts = 0;
-    nn_audios = nn_extras = 0;
-    nn_videos = nn_samples = 0;
-    nn_bytes = nn_rtp_bytes = 0;
-    nn_padding_bytes = nn_paddings = 0;
-}
-
-SrsRtcPlayStreamStatistic::~SrsRtcPlayStreamStatistic()
-{
-}
-
 SrsRtcPlayStream::SrsRtcPlayStream(SrsRtcConnection* s, const SrsContextId& cid)
 {
     cid_ = cid;
@@ -593,47 +580,6 @@ srs_error_t SrsRtcPlayStream::cycle()
     }
 }
 
-srs_error_t SrsRtcPlayStream::send_packets(SrsRtcStream* source, const vector<SrsRtpPacket2*>& pkts, SrsRtcPlayStreamStatistic& info)
-{
-    srs_error_t err = srs_success;
-
-    // Covert kernel messages to RTP packets.
-    for (int i = 0; i < (int)pkts.size(); i++) {
-        SrsRtpPacket2* pkt = pkts[i];
-
-        // TODO: FIXME: Maybe refine for performance issue.
-        if (!audio_tracks_.count(pkt->header.get_ssrc()) && !video_tracks_.count(pkt->header.get_ssrc())) {
-            srs_warn("ssrc %u not found", pkt->header.get_ssrc());
-            continue;
-        }
-        
-        // For audio, we transcoded AAC to opus in extra payloads.
-        if (pkt->is_audio()) {
-            // TODO: FIXME: Any simple solution?
-            SrsRtcAudioSendTrack* audio_track = audio_tracks_[pkt->header.get_ssrc()];
-
-            if ((err = audio_track->on_rtp(pkt)) != srs_success) {
-                return srs_error_wrap(err, "audio track, SSRC=%u, SEQ=%u", pkt->header.get_ssrc(), pkt->header.get_sequence());
-            }
-
-            // TODO: FIXME: Padding audio to the max payload in RTP packets.
-        } else {
-            // TODO: FIXME: Any simple solution?
-            SrsRtcVideoSendTrack* video_track = video_tracks_[pkt->header.get_ssrc()];
-
-            if ((err = video_track->on_rtp(pkt)) != srs_success) {
-                return srs_error_wrap(err, "video track, SSRC=%u, SEQ=%u", pkt->header.get_ssrc(), pkt->header.get_sequence());
-            }
-        }
-
-        // Detail log, should disable it in release version.
-        srs_info("RTC: Update PT=%u, SSRC=%#x, Time=%u, %u bytes", pkt->header.get_payload_type(), pkt->header.get_ssrc(),
-            pkt->header.get_timestamp(), pkt->nb_bytes());
-    }
-
-    return err;
-}
-
 srs_error_t SrsRtcPlayStream::send_packet(SrsRtpPacket2* pkt)
 {
     srs_error_t err = srs_success;
@@ -2508,60 +2454,6 @@ void SrsRtcConnection::simulate_player_drop_packet(SrsRtpHeader* h, int nn_bytes
     nn_simulate_player_nack_drop--;
 }
 
-srs_error_t SrsRtcConnection::do_send_packets(const std::vector<SrsRtpPacket2*>& pkts, SrsRtcPlayStreamStatistic& info)
-{
-    srs_error_t err = srs_success;
-
-    for (int i = 0; i < (int)pkts.size(); i++) {
-        SrsRtpPacket2* pkt = pkts.at(i);
-
-        // For this message, select the first iovec.
-        iovec* iov = cache_iov_;
-        iov->iov_len = kRtpPacketSize;
-        cache_buffer_->skip(-1 * cache_buffer_->pos());
-
-        // Marshal packet to bytes in iovec.
-        if (true) {
-            if ((err = pkt->encode(cache_buffer_)) != srs_success) {
-                return srs_error_wrap(err, "encode packet");
-            }
-            iov->iov_len = cache_buffer_->pos();
-        }
-
-        // Cipher RTP to SRTP packet.
-        if (true) {
-            int nn_encrypt = (int)iov->iov_len;
-            if ((err = transport_->protect_rtp(iov->iov_base, &nn_encrypt)) != srs_success) {
-                return srs_error_wrap(err, "srtp protect");
-            }
-            iov->iov_len = (size_t)nn_encrypt;
-        }
-
-        info.nn_rtp_bytes += (int)iov->iov_len;
-
-        // When we send out a packet, increase the stat counter.
-        info.nn_rtp_pkts++;
-
-        // For NACK simulator, drop packet.
-        if (nn_simulate_player_nack_drop) {
-            simulate_player_drop_packet(&pkt->header, (int)iov->iov_len);
-            iov->iov_len = 0;
-            continue;
-        }
-
-        ++_srs_pps_srtps->sugar;
-
-        // TODO: FIXME: Handle error.
-        sendonly_skt->sendto(iov->iov_base, iov->iov_len, 0);
-
-        // Detail log, should disable it in release version.
-        srs_info("RTC: SEND PT=%u, SSRC=%#x, SEQ=%u, Time=%u, %u/%u bytes", pkt->header.get_payload_type(), pkt->header.get_ssrc(),
-            pkt->header.get_sequence(), pkt->header.get_timestamp(), pkt->nb_bytes(), iov->iov_len);
-    }
-
-    return err;
-}
-
 srs_error_t SrsRtcConnection::do_send_packet(SrsRtpPacket2* pkt)
 {
     srs_error_t err = srs_success;
diff --git a/trunk/src/app/srs_app_rtc_conn.hpp b/trunk/src/app/srs_app_rtc_conn.hpp
index 69c620b03..f3aa8e2e4 100644
--- a/trunk/src/app/srs_app_rtc_conn.hpp
+++ b/trunk/src/app/srs_app_rtc_conn.hpp
@@ -209,38 +209,6 @@ public:
     virtual srs_error_t cycle();
 };
 
-// A group of RTP packets for outgoing(send to players).
-class SrsRtcPlayStreamStatistic
-{
-public:
-    // The total bytes of AVFrame packets.
-    int nn_bytes;
-    // The total bytes of RTP packets.
-    int nn_rtp_bytes;
-    // The total padded bytes.
-    int nn_padding_bytes;
-public:
-    // The RTP packets send out by sendmmsg or sendmsg. Note that if many packets group to
-    // one msghdr by GSO, it's only one RTP packet, because we only send once.
-    int nn_rtp_pkts;
-    // For video, the samples or NALUs.
-    // TODO: FIXME: Remove it because we may don't know.
-    int nn_samples;
-    // For audio, the generated extra audio packets.
-    // For example, when transcoding AAC to opus, may many extra payloads for a audio.
-    // TODO: FIXME: Remove it because we may don't know.
-    int nn_extras;
-    // The original audio messages.
-    int nn_audios;
-    // The original video messages.
-    int nn_videos;
-    // The number of padded packet.
-    int nn_paddings;
-public:
-    SrsRtcPlayStreamStatistic();
-    virtual ~SrsRtcPlayStreamStatistic();
-};
-
 // A RTC play stream, client pull and play stream from SRS.
 class SrsRtcPlayStream : virtual public ISrsCoroutineHandler, virtual public ISrsReloadHandler
     , virtual public ISrsHourGlass, virtual public ISrsRtcPLIWorkerHandler
@@ -268,8 +236,6 @@ private:
 private:
     // Whether palyer started.
     bool is_started;
-    // The statistic for consumer to send packets to player.
-    SrsRtcPlayStreamStatistic info;
 public:
     SrsRtcPlayStream(SrsRtcConnection* s, const SrsContextId& cid);
     virtual ~SrsRtcPlayStream();
@@ -286,7 +252,6 @@ public:
 public:
     virtual srs_error_t cycle();
 private:
-    srs_error_t send_packets(SrsRtcStream* source, const std::vector<SrsRtpPacket2*>& pkts, SrsRtcPlayStreamStatistic& info);
     srs_error_t send_packet(SrsRtpPacket2* pkt);
 public:
     // Directly set the status of track, generally for init to set the default value.
@@ -551,7 +516,6 @@ public:
     // Simulate the NACK to drop nn packets.
     void simulate_nack_drop(int nn);
     void simulate_player_drop_packet(SrsRtpHeader* h, int nn_bytes);
-    srs_error_t do_send_packets(const std::vector<SrsRtpPacket2*>& pkts, SrsRtcPlayStreamStatistic& info);
     srs_error_t do_send_packet(SrsRtpPacket2* pkt);
     // Directly set the status of play track, generally for init to set the default value.
     void set_all_tracks_status(std::string stream_uri, bool is_publish, bool status);
diff --git a/trunk/src/app/srs_app_rtc_source.hpp b/trunk/src/app/srs_app_rtc_source.hpp
index 5bb7c42d9..a1fe0b4f7 100644
--- a/trunk/src/app/srs_app_rtc_source.hpp
+++ b/trunk/src/app/srs_app_rtc_source.hpp
@@ -55,7 +55,6 @@ class SrsRtcConnection;
 class SrsRtpRingBuffer;
 class SrsRtpNackForReceiver;
 class SrsJsonObject;
-class SrsRtcPlayStreamStatistic;
 class SrsErrorPithyPrint;
 class SrsRtcDummyBridger;
 

From b1457dfc16e83354e9e172852a7aea2558f0740b Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 22:00:00 +0800
Subject: [PATCH 052/102] Perf: Refine copy RTP header.

---
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 50 ++++++++++++++++++++++++-
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp | 11 ++++--
 2 files changed, 55 insertions(+), 6 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 76d651da9..488fccea7 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -218,6 +218,13 @@ void SrsRtpExtensionTwcc::reset()
     sn_ = 0;
 }
 
+void SrsRtpExtensionTwcc::assign(const SrsRtpExtensionTwcc& h)
+{
+    has_twcc_ = h.has_twcc_;
+    id_ = h.id_;
+    sn_ = h.sn_;
+}
+
 bool SrsRtpExtensionTwcc::has_twcc_ext()
 {
     return has_twcc_;
@@ -311,6 +318,13 @@ void SrsRtpExtensionOneByte::reset()
     value_ = 0;
 }
 
+void SrsRtpExtensionOneByte::assign(const SrsRtpExtensionOneByte& h)
+{
+    has_ext_ = h.has_ext_;
+    id_ = h.id_;
+    value_ = h.value_;
+}
+
 void SrsRtpExtensionOneByte::set_id(int id)
 {
     id_ = id;
@@ -370,10 +384,21 @@ SrsRtpExtensions::~SrsRtpExtensions()
 
 void SrsRtpExtensions::reset()
 {
-    has_ext_ = false;
     types_ = NULL;
     twcc_.reset();
     audio_level_.reset();
+    has_ext_ = false;
+}
+
+void SrsRtpExtensions::assign(const SrsRtpExtensions& h)
+{
+    has_ext_ = h.has_ext_;
+    types_ = h.types_;
+
+    if (has_ext_) {
+        twcc_.assign(h.twcc_);
+        audio_level_.assign(h.audio_level_);
+    }
 }
 
 srs_error_t SrsRtpExtensions::decode(SrsBuffer* buf)
@@ -583,6 +608,27 @@ void SrsRtpHeader::reset()
     //memset(csrc, 0, sizeof(csrc));
 }
 
+void SrsRtpHeader::assign(const SrsRtpHeader& h)
+{
+    // Reset the fields in protocol.
+    cc               = h.cc;
+    marker           = h.marker;
+    payload_type     = h.payload_type;
+    sequence         = h.sequence;
+    timestamp        = h.timestamp;
+    ssrc             = h.ssrc;
+
+    // Reset the parsed fields.
+    padding_length   = h.padding_length;
+    extensions_.assign(h.extensions_);
+
+    // Reset other fields.
+    ignore_padding_  = h.ignore_padding_;
+
+    // The CSRC is not used yet, so we never reset it.
+    //memcpy(csrc, h.csrc, sizeof(csrc));
+}
+
 srs_error_t SrsRtpHeader::decode(SrsBuffer* buf)
 {
     srs_error_t err = srs_success;
@@ -948,7 +994,7 @@ SrsRtpPacket2* SrsRtpPacket2::copy()
         cp->recycle_shared_msg();
     }
 
-    cp->header = header;
+    cp->header.assign(header);
     cp->payload_ = payload_? payload_->copy():NULL;
     cp->payload_type_ = payload_type_;
 
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 34baa77e2..4503a73e6 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -140,14 +140,14 @@ public:
 public:
     // Reset the object to reuse it.
     void reset();
-
+    void assign(const SrsRtpExtensionTwcc& h);
+public:
     bool has_twcc_ext();
     uint8_t get_id();
     void set_id(uint8_t id);
     uint16_t get_sn();
     void set_sn(uint16_t sn);
-
-public:  
+public:
     // ISrsCodec
     virtual srs_error_t decode(SrsBuffer* buf);
     virtual srs_error_t encode(SrsBuffer* buf);
@@ -166,7 +166,8 @@ public:
 public:
     // Reset the object to reuse it.
     void reset();
-
+    void assign(const SrsRtpExtensionOneByte& h);
+public:
     bool exists() { return has_ext_; }
     int get_id() { return id_; }
     uint8_t get_value() { return value_; }
@@ -197,6 +198,7 @@ public:
 public:
     // Reset the object to reuse it.
     void reset();
+    void assign(const SrsRtpExtensions& h);
 public:
     bool exists();
     void set_types_(SrsRtpExtensionTypes* types);
@@ -234,6 +236,7 @@ public:
 public:
     // Reset the object to reuse it.
     void reset();
+    void assign(const SrsRtpHeader& h);
 public:
     virtual srs_error_t decode(SrsBuffer* buf);
 private:

From 033f341ce1023c0c9c95880a7734ec6fd0862359 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 22:09:06 +0800
Subject: [PATCH 053/102] Perf: Refine the recycle RTP packet, user should
 reset it

---
 trunk/src/app/srs_app_rtc_conn.cpp      |  3 +++
 trunk/src/app/srs_app_rtc_source.cpp    |  3 +++
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 25 +++++++++++++++++--------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp |  4 ++++
 4 files changed, 27 insertions(+), 8 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index a8b205b84..cdd528b0a 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -1130,6 +1130,9 @@ srs_error_t SrsRtcPublishStream::on_rtp_plaintext(char* plaintext, int nb_plaint
     // Allocate packet form cache.
     SrsRtpPacket2* pkt = _srs_rtp_cache->allocate();
 
+    // It's better to reset it before decode it.
+    pkt->reset();
+
     // Copy the packet body.
     char* p = pkt->wrap(plaintext, nb_plaintext);
 
diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index 7d2c149b7..c2f96f918 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -589,6 +589,9 @@ std::vector<SrsRtcTrackDescription*> SrsRtcStream::get_track_desc(std::string ty
 SrsRtpPacketCacheHelper::SrsRtpPacketCacheHelper()
 {
     pkt = _srs_rtp_cache->allocate();
+
+    // We MUST reset the packet, when got from cache.
+    pkt->reset();
 }
 
 SrsRtpPacketCacheHelper::~SrsRtpPacketCacheHelper()
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 488fccea7..1b387fde0 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -866,6 +866,21 @@ SrsRtpPacket2::~SrsRtpPacket2()
     recycle_shared_msg();
 }
 
+void SrsRtpPacket2::reset()
+{
+    nalu_type = SrsAvcNaluTypeReserved;
+    frame_type = SrsFrameTypeReserved;
+    cached_payload_size = 0;
+    decode_handler = NULL;
+
+    // It's important to reset the header.
+    header.reset();
+
+    // Recyle the payload again, to ensure the packet is new one.
+    recycle_payload();
+    recycle_shared_msg();
+}
+
 void SrsRtpPacket2::recycle_payload()
 {
     if (!payload_) {
@@ -916,16 +931,10 @@ cleanup:
 
 bool SrsRtpPacket2::recycle()
 {
-    nalu_type = SrsAvcNaluTypeReserved;
-    frame_type = SrsFrameTypeReserved;
-    cached_payload_size = 0;
-    decode_handler = NULL;
-
-    header.reset();
-
+    // We only recycle the payload and shared messages,
+    // for header and fields, user will reset or copy it.
     recycle_payload();
     recycle_shared_msg();
-
     return true;
 }
 
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 4503a73e6..ec4b44a99 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -324,6 +324,10 @@ private:
 public:
     SrsRtpPacket2();
     virtual ~SrsRtpPacket2();
+public:
+    // User MUST reset the packet if got from cache,
+    // except copy(we will assign the header and copy payload).
+    void reset();
 private:
     void recycle_payload();
     void recycle_shared_msg();

From 3728b07c49bf623c258812ddbf6ff513c5c5910b Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 23:03:08 +0800
Subject: [PATCH 054/102] Perf: Refine RTP packet copy

---
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 22 +++++++++++++---------
 1 file changed, 13 insertions(+), 9 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 1b387fde0..3e2d12677 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -931,10 +931,16 @@ cleanup:
 
 bool SrsRtpPacket2::recycle()
 {
+    // Clear the cache size, it may change when reuse it.
+    cached_payload_size = 0;
+    // Reset the handler, for decode only.
+    decode_handler = NULL;
+
     // We only recycle the payload and shared messages,
     // for header and fields, user will reset or copy it.
     recycle_payload();
     recycle_shared_msg();
+
     return true;
 }
 
@@ -995,13 +1001,10 @@ SrsRtpPacket2* SrsRtpPacket2::copy()
 {
     SrsRtpPacket2* cp = _srs_rtp_cache->allocate();
 
-    // We got packet from cache, so we must recycle it.
-    if (cp->payload_) {
-        cp->recycle_payload();
-    }
-    if (cp->shared_msg) {
-        cp->recycle_shared_msg();
-    }
+    // We got packet from cache, the payload and message MUST be NULL,
+    // because we had clear it in recycle.
+    //srs_assert(!cp->payload_);
+    //srs_assert(!cp->shared_msg);
 
     cp->header.assign(header);
     cp->payload_ = payload_? payload_->copy():NULL;
@@ -1011,8 +1014,9 @@ SrsRtpPacket2* SrsRtpPacket2::copy()
     cp->shared_msg = shared_msg->copy();
     cp->frame_type = frame_type;
 
-    cp->cached_payload_size = cached_payload_size;
-    cp->decode_handler = decode_handler;
+    // For performance issue, do not copy the unused field.
+    //cp->cached_payload_size = cached_payload_size;
+    //cp->decode_handler = decode_handler;
 
     return cp;
 }

From 42223b3f2e4afbb267fe875b326778d5eff472e2 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 23:10:46 +0800
Subject: [PATCH 055/102] RTC: No cache for RTP packet size.

---
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 18 ++----------------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp |  3 ---
 2 files changed, 2 insertions(+), 19 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 3e2d12677..eb770735c 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -854,7 +854,6 @@ SrsRtpPacket2::SrsRtpPacket2()
 
     nalu_type = SrsAvcNaluTypeReserved;
     frame_type = SrsFrameTypeReserved;
-    cached_payload_size = 0;
     decode_handler = NULL;
 
     ++_srs_pps_objs_rtps->sugar;
@@ -870,7 +869,6 @@ void SrsRtpPacket2::reset()
 {
     nalu_type = SrsAvcNaluTypeReserved;
     frame_type = SrsFrameTypeReserved;
-    cached_payload_size = 0;
     decode_handler = NULL;
 
     // It's important to reset the header.
@@ -931,8 +929,6 @@ cleanup:
 
 bool SrsRtpPacket2::recycle()
 {
-    // Clear the cache size, it may change when reuse it.
-    cached_payload_size = 0;
     // Reset the handler, for decode only.
     decode_handler = NULL;
 
@@ -1015,7 +1011,6 @@ SrsRtpPacket2* SrsRtpPacket2::copy()
     cp->frame_type = frame_type;
 
     // For performance issue, do not copy the unused field.
-    //cp->cached_payload_size = cached_payload_size;
     //cp->decode_handler = decode_handler;
 
     return cp;
@@ -1024,17 +1019,11 @@ SrsRtpPacket2* SrsRtpPacket2::copy()
 void SrsRtpPacket2::set_padding(int size)
 {
     header.set_padding(size);
-    if (cached_payload_size) {
-        cached_payload_size += size - header.get_padding();
-    }
 }
 
 void SrsRtpPacket2::add_padding(int size)
 {
     header.set_padding(header.get_padding() + size);
-    if (cached_payload_size) {
-        cached_payload_size += size;
-    }
 }
 
 void SrsRtpPacket2::set_decode_handler(ISrsRtpPacketDecodeHandler* h)
@@ -1054,11 +1043,8 @@ void SrsRtpPacket2::set_extension_types(SrsRtpExtensionTypes* v)
 
 uint64_t SrsRtpPacket2::nb_bytes()
 {
-    if (!cached_payload_size) {
-        int nn_payload = (payload_? payload_->nb_bytes():0);
-        cached_payload_size = header.nb_bytes() + nn_payload + header.get_padding();
-    }
-    return cached_payload_size;
+    int nn_payload = (payload_? payload_->nb_bytes():0);
+    return header.nb_bytes() + nn_payload + header.get_padding();
 }
 
 srs_error_t SrsRtpPacket2::encode(SrsBuffer* buf)
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index ec4b44a99..1c119e0bc 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -315,10 +315,7 @@ public:
     SrsAvcNaluType nalu_type;
     // The frame type, for RTMP bridger or SFU source.
     SrsFrameType frame_type;
-// Fast cache for performance.
 private:
-    // The cached payload size for packet.
-    int cached_payload_size;
     // The helper handler for decoder, use RAW payload if NULL.
     ISrsRtpPacketDecodeHandler* decode_handler;
 public:

From f831e9240ed0fc83810b8838d6817ff88b0bc319 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sat, 27 Feb 2021 23:29:52 +0800
Subject: [PATCH 056/102] RTC: Fast copy shared message for RTP

---
 trunk/src/kernel/srs_kernel_flv.cpp     | 23 +++++++++++++++--------
 trunk/src/kernel/srs_kernel_flv.hpp     |  2 ++
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp |  4 +++-
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp |  4 +++-
 4 files changed, 23 insertions(+), 10 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_flv.cpp b/trunk/src/kernel/srs_kernel_flv.cpp
index a06e387df..0706cd487 100644
--- a/trunk/src/kernel/srs_kernel_flv.cpp
+++ b/trunk/src/kernel/srs_kernel_flv.cpp
@@ -361,14 +361,7 @@ SrsSharedPtrMessage* SrsSharedPtrMessage::copy()
 {
     srs_assert(ptr);
     
-    SrsSharedPtrMessage* copy = _srs_rtp_msg_cache_objs->allocate();
-
-    // We got an object from cache, the ptr might exists, so unwrap it.
-    copy->unwrap();
-
-    // Reference to this message instead.
-    copy->ptr = ptr;
-    ptr->shared_count++;
+    SrsSharedPtrMessage* copy = copy2();
     
     copy->timestamp = timestamp;
     copy->stream_id = stream_id;
@@ -378,6 +371,20 @@ SrsSharedPtrMessage* SrsSharedPtrMessage::copy()
     return copy;
 }
 
+SrsSharedPtrMessage* SrsSharedPtrMessage::copy2()
+{
+    SrsSharedPtrMessage* copy = _srs_rtp_msg_cache_objs->allocate();
+
+    // We got an object from cache, the ptr might exists, so unwrap it.
+    //srs_assert(!copy->ptr);
+
+    // Reference to this message instead.
+    copy->ptr = ptr;
+    ptr->shared_count++;
+
+    return copy;
+}
+
 SrsFlvTransmuxer::SrsFlvTransmuxer()
 {
     writer = NULL;
diff --git a/trunk/src/kernel/srs_kernel_flv.hpp b/trunk/src/kernel/srs_kernel_flv.hpp
index c5e96394d..0cc6102ac 100644
--- a/trunk/src/kernel/srs_kernel_flv.hpp
+++ b/trunk/src/kernel/srs_kernel_flv.hpp
@@ -351,6 +351,8 @@ public:
     // copy current shared ptr message, use ref-count.
     // @remark, assert object is created.
     virtual SrsSharedPtrMessage* copy();
+    // Only copy the buffer, without header fields.
+    virtual SrsSharedPtrMessage* copy2();
 };
 
 // Transmux RTMP packets to FLV stream.
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index eb770735c..36822a43f 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -910,6 +910,8 @@ void SrsRtpPacket2::recycle_shared_msg()
     }
 
     if (!shared_msg->payload || shared_msg->size != kRtpPacketSize || shared_msg->count() > 0) {
+        // Note that we must unwrap the shared message, because this object pool only cache the
+        // shared message itself without payload.
         shared_msg->unwrap();
         _srs_rtp_msg_cache_objs->recycle(shared_msg);
         goto cleanup;
@@ -1007,7 +1009,7 @@ SrsRtpPacket2* SrsRtpPacket2::copy()
     cp->payload_type_ = payload_type_;
 
     cp->nalu_type = nalu_type;
-    cp->shared_msg = shared_msg->copy();
+    cp->shared_msg = shared_msg->copy2();
     cp->frame_type = frame_type;
 
     // For performance issue, do not copy the unused field.
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 1c119e0bc..b7947fa8c 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -591,8 +591,10 @@ extern SrsRtpObjectCacheManager<SrsRtpPacket2>* _srs_rtp_cache;
 extern SrsRtpObjectCacheManager<SrsRtpRawPayload>* _srs_rtp_raw_cache;
 extern SrsRtpObjectCacheManager<SrsRtpFUAPayload2>* _srs_rtp_fua_cache;
 
-// For RTP packet shared messages cache.
+// For shared message cache, with payload.
 extern SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache_buffers;
+// For shared message cache, without payload.
+// Note that user must unwrap the shared message, before recycle it.
 extern SrsRtpObjectCacheManager<SrsSharedPtrMessage>* _srs_rtp_msg_cache_objs;
 
 #endif

From 0aeaf442f77c24c83a82b0f35e69c251a9f79f5d Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 06:56:53 +0800
Subject: [PATCH 057/102] RTC: Ignore NACK when disable for player.

---
 trunk/src/app/srs_app_rtc_conn.cpp   | 32 ++++++++++++++++++++++++----
 trunk/src/app/srs_app_rtc_source.cpp | 24 +++++++++++++++------
 trunk/src/app/srs_app_rtc_source.hpp | 13 ++++++++---
 3 files changed, 56 insertions(+), 13 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index cdd528b0a..57a428e7d 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -432,11 +432,13 @@ srs_error_t SrsRtcPlayStream::initialize(SrsRequest* req, std::map<uint32_t, Srs
         std::map<uint32_t, SrsRtcTrackDescription*>::iterator it = sub_relations.begin();
         while (it != sub_relations.end()) {
             if (it->second->type_ == "audio") {
-                audio_tracks_.insert(make_pair(it->first, new SrsRtcAudioSendTrack(session_, it->second)));
+                SrsRtcAudioSendTrack* track = new SrsRtcAudioSendTrack(session_, it->second);
+                audio_tracks_.insert(make_pair(it->first, track));
             }
 
             if (it->second->type_ == "video") {
-                video_tracks_.insert(make_pair(it->first, new SrsRtcVideoSendTrack(session_, it->second)));
+                SrsRtcVideoSendTrack* track = new SrsRtcVideoSendTrack(session_, it->second);
+                video_tracks_.insert(make_pair(it->first, track));
             }
             ++it;
         }
@@ -446,6 +448,18 @@ srs_error_t SrsRtcPlayStream::initialize(SrsRequest* req, std::map<uint32_t, Srs
     nack_enabled_ = _srs_config->get_rtc_nack_enabled(req->vhost);
     srs_trace("RTC player nack=%d", nack_enabled_);
 
+    // Apply configs for all tracks.
+    for (map<uint32_t, SrsRtcAudioSendTrack*>::iterator it = audio_tracks_.begin(); it != audio_tracks_.end(); ++it) {
+        SrsRtcAudioSendTrack* track = it->second;
+        track->set_nack_enabled(nack_enabled_);
+    }
+
+    for (map<uint32_t, SrsRtcVideoSendTrack*>::iterator it = video_tracks_.begin(); it != video_tracks_.end(); ++it) {
+        SrsRtcVideoSendTrack* track = it->second;
+        track->set_nack_enabled(nack_enabled_);
+    }
+
+    // Update stat for session.
     session_->stat_->nn_subscribers++;
 
     return err;
@@ -910,6 +924,16 @@ srs_error_t SrsRtcPublishStream::initialize(SrsRequest* r, SrsRtcStreamDescripti
 
     srs_trace("RTC publisher nack=%d, pt-drop=%u, twcc=%u/%d", nack_enabled_, pt_to_drop_, twcc_enabled_, twcc_id);
 
+    for (vector<SrsRtcAudioRecvTrack*>::iterator it = audio_tracks_.begin(); it != audio_tracks_.end(); ++it) {
+        SrsRtcAudioRecvTrack* track = *it;
+        track->set_nack_enabled(nack_enabled_);
+    }
+    for (vector<SrsRtcVideoRecvTrack*>::iterator it = video_tracks_.begin(); it != video_tracks_.end(); ++it) {
+        SrsRtcVideoRecvTrack* track = *it;
+        track->set_nack_enabled(nack_enabled_);
+    }
+
+    // Update stat for session.
     session_->stat_->nn_publishers++;
 
     // Setup the publish stream in source to enable PLI as such.
@@ -1164,12 +1188,12 @@ srs_error_t SrsRtcPublishStream::do_on_rtp_plaintext(SrsRtpPacket2* pkt, SrsBuff
     SrsRtcVideoRecvTrack* video_track = get_video_track(ssrc);
     if (audio_track) {
         pkt->frame_type = SrsFrameTypeAudio;
-        if ((err = audio_track->on_rtp(source, pkt, nack_enabled_)) != srs_success) {
+        if ((err = audio_track->on_rtp(source, pkt)) != srs_success) {
             return srs_error_wrap(err, "on audio");
         }
     } else if (video_track) {
         pkt->frame_type = SrsFrameTypeVideo;
-        if ((err = video_track->on_rtp(source, pkt, nack_enabled_)) != srs_success) {
+        if ((err = video_track->on_rtp(source, pkt)) != srs_success) {
             return srs_error_wrap(err, "on video");
         }
     } else {
diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index c2f96f918..84af630e2 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -1729,6 +1729,7 @@ SrsRtcRecvTrack::SrsRtcRecvTrack(SrsRtcConnection* session, SrsRtcTrackDescripti
     session_ = session;
     track_desc_ = track_desc->copy();
     statistic_ = new SrsRtcTrackStatistic();
+    nack_enabled_ = false;
 
     if (is_audio) {
         rtp_queue_ = new SrsRtpRingBuffer(100);
@@ -1749,6 +1750,11 @@ SrsRtcRecvTrack::~SrsRtcRecvTrack()
     srs_freep(statistic_);
 }
 
+void SrsRtcRecvTrack::set_nack_enabled(bool v)
+{
+    nack_enabled_ = v;
+}
+
 bool SrsRtcRecvTrack::has_ssrc(uint32_t ssrc)
 {
     return track_desc_->has_ssrc(ssrc);
@@ -1872,7 +1878,7 @@ void SrsRtcAudioRecvTrack::on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffe
     *ppt = SrsRtpPacketPayloadTypeRaw;
 }
 
-srs_error_t SrsRtcAudioRecvTrack::on_rtp(SrsRtcStream* source, SrsRtpPacket2* pkt, bool nack_enabled)
+srs_error_t SrsRtcAudioRecvTrack::on_rtp(SrsRtcStream* source, SrsRtpPacket2* pkt)
 {
     srs_error_t err = srs_success;
 
@@ -1888,7 +1894,7 @@ srs_error_t SrsRtcAudioRecvTrack::on_rtp(SrsRtcStream* source, SrsRtpPacket2* pk
     }
 
     // For NACK to handle packet.
-    if (nack_enabled && (err = on_nack(pkt)) != srs_success) {
+    if (nack_enabled_ && (err = on_nack(pkt)) != srs_success) {
         return srs_error_wrap(err, "on nack");
     }
 
@@ -1938,7 +1944,7 @@ void SrsRtcVideoRecvTrack::on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffe
     }
 }
 
-srs_error_t SrsRtcVideoRecvTrack::on_rtp(SrsRtcStream* source, SrsRtpPacket2* pkt, bool nack_enabled)
+srs_error_t SrsRtcVideoRecvTrack::on_rtp(SrsRtcStream* source, SrsRtpPacket2* pkt)
 {
     srs_error_t err = srs_success;
 
@@ -1956,7 +1962,7 @@ srs_error_t SrsRtcVideoRecvTrack::on_rtp(SrsRtcStream* source, SrsRtpPacket2* pk
     }
 
     // For NACK to handle packet.
-    if (nack_enabled && (err = on_nack(pkt)) != srs_success) {
+    if ((err = on_nack(pkt)) != srs_success) {
         return srs_error_wrap(err, "on nack");
     }
 
@@ -1990,6 +1996,7 @@ SrsRtcSendTrack::SrsRtcSendTrack(SrsRtcConnection* session, SrsRtcTrackDescripti
     session_ = session;
     track_desc_ = track_desc->copy();
     statistic_ = new SrsRtcTrackStatistic();
+    nack_enabled_ = false;
 
     if (is_audio) {
         rtp_queue_ = new SrsRtpRingBuffer(100);
@@ -2008,6 +2015,11 @@ SrsRtcSendTrack::~SrsRtcSendTrack()
     srs_freep(nack_epp);
 }
 
+void SrsRtcSendTrack::set_nack_enabled(bool v)
+{
+    nack_enabled_ = v;
+}
+
 bool SrsRtcSendTrack::has_ssrc(uint32_t ssrc)
 {
     return track_desc_->has_ssrc(ssrc);
@@ -2119,7 +2131,7 @@ srs_error_t SrsRtcAudioSendTrack::on_rtp(SrsRtpPacket2* pkt)
     }
 
     // Put rtp packet to NACK/ARQ queue
-    if (true) {
+    if (nack_enabled_) {
         SrsRtpPacket2* nack = pkt->copy();
         rtp_queue_->set(nack->header.get_sequence(), nack);
     }
@@ -2179,7 +2191,7 @@ srs_error_t SrsRtcVideoSendTrack::on_rtp(SrsRtpPacket2* pkt)
     }
 
     // Put rtp packet to NACK/ARQ queue
-    if (true) {
+    if (nack_enabled_) {
         SrsRtpPacket2* nack = pkt->copy();
         rtp_queue_->set(nack->header.get_sequence(), nack);
     }
diff --git a/trunk/src/app/srs_app_rtc_source.hpp b/trunk/src/app/srs_app_rtc_source.hpp
index a1fe0b4f7..a267adf57 100644
--- a/trunk/src/app/srs_app_rtc_source.hpp
+++ b/trunk/src/app/srs_app_rtc_source.hpp
@@ -510,6 +510,9 @@ public:
 class SrsRtcRecvTrack
 {
 protected:
+    // Whether enabled nack.
+    bool nack_enabled_;
+
     SrsRtcTrackDescription* track_desc_;
     SrsRtcTrackStatistic* statistic_;
 
@@ -524,6 +527,7 @@ public:
     SrsRtcRecvTrack(SrsRtcConnection* session, SrsRtcTrackDescription* stream_descs, bool is_audio);
     virtual ~SrsRtcRecvTrack();
 public:
+    void set_nack_enabled(bool v);
     bool has_ssrc(uint32_t ssrc);
     uint32_t get_ssrc();
     void update_rtt(int rtt);
@@ -536,7 +540,7 @@ public:
 protected:
     srs_error_t on_nack(SrsRtpPacket2* pkt);
 public:
-    virtual srs_error_t on_rtp(SrsRtcStream* source, SrsRtpPacket2* pkt, bool nack_enabled) = 0;
+    virtual srs_error_t on_rtp(SrsRtcStream* source, SrsRtpPacket2* pkt) = 0;
     virtual srs_error_t check_send_nacks() = 0;
 protected:
     virtual srs_error_t do_check_send_nacks(uint32_t& timeout_nacks);
@@ -550,7 +554,7 @@ public:
 public:
     virtual void on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload, SrsRtpPacketPayloadType* ppt);
 public:
-    virtual srs_error_t on_rtp(SrsRtcStream* source, SrsRtpPacket2* pkt, bool nack_enabled);
+    virtual srs_error_t on_rtp(SrsRtcStream* source, SrsRtpPacket2* pkt);
     virtual srs_error_t check_send_nacks();
 };
 
@@ -562,7 +566,7 @@ public:
 public:
     virtual void on_before_decode_payload(SrsRtpPacket2* pkt, SrsBuffer* buf, ISrsRtpPayloader** ppayload, SrsRtpPacketPayloadType* ppt);
 public:
-    virtual srs_error_t on_rtp(SrsRtcStream* source, SrsRtpPacket2* pkt, bool nack_enabled);
+    virtual srs_error_t on_rtp(SrsRtcStream* source, SrsRtpPacket2* pkt);
     virtual srs_error_t check_send_nacks();
 };
 
@@ -577,6 +581,8 @@ protected:
     SrsRtcConnection* session_;
     // NACK ARQ ring buffer.
     SrsRtpRingBuffer* rtp_queue_;
+    // Whether enabled nack.
+    bool nack_enabled_;
 private:
     // The pithy print for special stage.
     SrsErrorPithyPrint* nack_epp;
@@ -584,6 +590,7 @@ public:
     SrsRtcSendTrack(SrsRtcConnection* session, SrsRtcTrackDescription* track_desc, bool is_audio);
     virtual ~SrsRtcSendTrack();
 public:
+    void set_nack_enabled(bool v);
     bool has_ssrc(uint32_t ssrc);
     SrsRtpPacket2* fetch_rtp_packet(uint16_t seq);
     bool set_track_status(bool active);

From 74f63d6b1480432c034ff94fc2fd8b9f870266c1 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 07:09:27 +0800
Subject: [PATCH 058/102] RTC: Ignore NACK when disable for player.

---
 trunk/src/app/srs_app_rtc_source.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index 84af630e2..fb62a374c 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -1962,7 +1962,7 @@ srs_error_t SrsRtcVideoRecvTrack::on_rtp(SrsRtcStream* source, SrsRtpPacket2* pk
     }
 
     // For NACK to handle packet.
-    if ((err = on_nack(pkt)) != srs_success) {
+    if (nack_enabled_ && (err = on_nack(pkt)) != srs_success) {
         return srs_error_wrap(err, "on nack");
     }
 

From 51a5e283fc08f231bb95e8a645865e0ee3ff5c82 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 07:27:14 +0800
Subject: [PATCH 059/102] Perf: Avoid RTP packet copy for publisher NACK.

---
 trunk/src/app/srs_app_rtc_conn.cpp   | 27 +++++++++++++++++----------
 trunk/src/app/srs_app_rtc_conn.hpp   |  2 +-
 trunk/src/app/srs_app_rtc_source.cpp | 23 +++++------------------
 trunk/src/app/srs_app_rtc_source.hpp | 10 ++++------
 4 files changed, 27 insertions(+), 35 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index 57a428e7d..9ede8164c 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -924,15 +924,6 @@ srs_error_t SrsRtcPublishStream::initialize(SrsRequest* r, SrsRtcStreamDescripti
 
     srs_trace("RTC publisher nack=%d, pt-drop=%u, twcc=%u/%d", nack_enabled_, pt_to_drop_, twcc_enabled_, twcc_id);
 
-    for (vector<SrsRtcAudioRecvTrack*>::iterator it = audio_tracks_.begin(); it != audio_tracks_.end(); ++it) {
-        SrsRtcAudioRecvTrack* track = *it;
-        track->set_nack_enabled(nack_enabled_);
-    }
-    for (vector<SrsRtcVideoRecvTrack*>::iterator it = video_tracks_.begin(); it != video_tracks_.end(); ++it) {
-        SrsRtcVideoRecvTrack* track = *it;
-        track->set_nack_enabled(nack_enabled_);
-    }
-
     // Update stat for session.
     session_->stat_->nn_publishers++;
 
@@ -1162,6 +1153,8 @@ srs_error_t SrsRtcPublishStream::on_rtp_plaintext(char* plaintext, int nb_plaint
 
     // Handle the packet.
     SrsBuffer buf(p, nb_plaintext);
+
+    // @remark Note that the pkt might be set to NULL.
     err = do_on_rtp_plaintext(pkt, &buf);
 
     // Release the packet to cache.
@@ -1170,7 +1163,7 @@ srs_error_t SrsRtcPublishStream::on_rtp_plaintext(char* plaintext, int nb_plaint
     return err;
 }
 
-srs_error_t SrsRtcPublishStream::do_on_rtp_plaintext(SrsRtpPacket2* pkt, SrsBuffer* buf)
+srs_error_t SrsRtcPublishStream::do_on_rtp_plaintext(SrsRtpPacket2*& pkt, SrsBuffer* buf)
 {
     srs_error_t err = srs_success;
 
@@ -1206,6 +1199,20 @@ srs_error_t SrsRtcPublishStream::do_on_rtp_plaintext(SrsRtpPacket2* pkt, SrsBuff
         }
     }
 
+    // For NACK to handle packet.
+    // @remark Note that the pkt might be set to NULL.
+    if (nack_enabled_) {
+        if (audio_track) {
+            if ((err = audio_track->on_nack(&pkt)) != srs_success) {
+                return srs_error_wrap(err, "on nack");
+            }
+        } else if (video_track) {
+            if ((err = video_track->on_nack(&pkt)) != srs_success) {
+                return srs_error_wrap(err, "on nack");
+            }
+        }
+    }
+
     return err;
 }
 
diff --git a/trunk/src/app/srs_app_rtc_conn.hpp b/trunk/src/app/srs_app_rtc_conn.hpp
index f3aa8e2e4..eacc8e6e9 100644
--- a/trunk/src/app/srs_app_rtc_conn.hpp
+++ b/trunk/src/app/srs_app_rtc_conn.hpp
@@ -325,7 +325,7 @@ private:
     // @remark We copy the plaintext, user should free it.
     srs_error_t on_rtp_plaintext(char* plaintext, int nb_plaintext);
 private:
-    srs_error_t do_on_rtp_plaintext(SrsRtpPacket2* pkt, SrsBuffer* buf);
+    srs_error_t do_on_rtp_plaintext(SrsRtpPacket2*& pkt, SrsBuffer* buf);
 public:
     srs_error_t check_send_nacks();
 public:
diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index fb62a374c..c0c87785c 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -1729,7 +1729,6 @@ SrsRtcRecvTrack::SrsRtcRecvTrack(SrsRtcConnection* session, SrsRtcTrackDescripti
     session_ = session;
     track_desc_ = track_desc->copy();
     statistic_ = new SrsRtcTrackStatistic();
-    nack_enabled_ = false;
 
     if (is_audio) {
         rtp_queue_ = new SrsRtpRingBuffer(100);
@@ -1750,11 +1749,6 @@ SrsRtcRecvTrack::~SrsRtcRecvTrack()
     srs_freep(statistic_);
 }
 
-void SrsRtcRecvTrack::set_nack_enabled(bool v)
-{
-    nack_enabled_ = v;
-}
-
 bool SrsRtcRecvTrack::has_ssrc(uint32_t ssrc)
 {
     return track_desc_->has_ssrc(ssrc);
@@ -1818,10 +1812,11 @@ std::string SrsRtcRecvTrack::get_track_id()
     return track_desc_->id_;
 }
 
-srs_error_t SrsRtcRecvTrack::on_nack(SrsRtpPacket2* pkt)
+srs_error_t SrsRtcRecvTrack::on_nack(SrsRtpPacket2** ppkt)
 {
     srs_error_t err = srs_success;
 
+    SrsRtpPacket2* pkt = *ppkt;
     uint16_t seq = pkt->header.get_sequence();
     SrsRtpNackInfo* nack_info = nack_receiver_->find(seq);
     if (nack_info) {
@@ -1842,7 +1837,9 @@ srs_error_t SrsRtcRecvTrack::on_nack(SrsRtpPacket2* pkt)
     }
 
     // insert into video_queue and audio_queue
-    rtp_queue_->set(seq, pkt->copy());
+    // We directly use the pkt, never copy it, so we should set the pkt to NULL.
+    rtp_queue_->set(seq, pkt);
+    *ppkt = NULL;
 
     return err;
 }
@@ -1893,11 +1890,6 @@ srs_error_t SrsRtcAudioRecvTrack::on_rtp(SrsRtcStream* source, SrsRtpPacket2* pk
         return srs_error_wrap(err, "source on rtp");
     }
 
-    // For NACK to handle packet.
-    if (nack_enabled_ && (err = on_nack(pkt)) != srs_success) {
-        return srs_error_wrap(err, "on nack");
-    }
-
     return err;
 }
 
@@ -1961,11 +1953,6 @@ srs_error_t SrsRtcVideoRecvTrack::on_rtp(SrsRtcStream* source, SrsRtpPacket2* pk
         return srs_error_wrap(err, "source on rtp");
     }
 
-    // For NACK to handle packet.
-    if (nack_enabled_ && (err = on_nack(pkt)) != srs_success) {
-        return srs_error_wrap(err, "on nack");
-    }
-
     return err;
 }
 
diff --git a/trunk/src/app/srs_app_rtc_source.hpp b/trunk/src/app/srs_app_rtc_source.hpp
index a267adf57..aed39ec31 100644
--- a/trunk/src/app/srs_app_rtc_source.hpp
+++ b/trunk/src/app/srs_app_rtc_source.hpp
@@ -510,9 +510,6 @@ public:
 class SrsRtcRecvTrack
 {
 protected:
-    // Whether enabled nack.
-    bool nack_enabled_;
-
     SrsRtcTrackDescription* track_desc_;
     SrsRtcTrackStatistic* statistic_;
 
@@ -527,7 +524,6 @@ public:
     SrsRtcRecvTrack(SrsRtcConnection* session, SrsRtcTrackDescription* stream_descs, bool is_audio);
     virtual ~SrsRtcRecvTrack();
 public:
-    void set_nack_enabled(bool v);
     bool has_ssrc(uint32_t ssrc);
     uint32_t get_ssrc();
     void update_rtt(int rtt);
@@ -537,8 +533,10 @@ public:
     bool set_track_status(bool active);
     bool get_track_status();
     std::string get_track_id();
-protected:
-    srs_error_t on_nack(SrsRtpPacket2* pkt);
+public:
+    // Note that we can set the pkt to NULL to avoid copy, for example, if the NACK cache the pkt and
+    // set to NULL, nack nerver copy it but set the pkt to NULL.
+    srs_error_t on_nack(SrsRtpPacket2** ppkt);
 public:
     virtual srs_error_t on_rtp(SrsRtcStream* source, SrsRtpPacket2* pkt) = 0;
     virtual srs_error_t check_send_nacks() = 0;

From 11454b3ced7189feb466b8f14e259326160322cd Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 08:07:06 +0800
Subject: [PATCH 060/102] Perf: Avoid RTP packet copy for player NACK.

---
 trunk/src/app/srs_app_rtc_conn.cpp   | 39 ++++++++++++++++------------
 trunk/src/app/srs_app_rtc_conn.hpp   |  2 +-
 trunk/src/app/srs_app_rtc_source.cpp | 33 +++++++++++------------
 trunk/src/app/srs_app_rtc_source.hpp |  7 ++---
 4 files changed, 42 insertions(+), 39 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index 9ede8164c..68a581460 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -448,17 +448,6 @@ srs_error_t SrsRtcPlayStream::initialize(SrsRequest* req, std::map<uint32_t, Srs
     nack_enabled_ = _srs_config->get_rtc_nack_enabled(req->vhost);
     srs_trace("RTC player nack=%d", nack_enabled_);
 
-    // Apply configs for all tracks.
-    for (map<uint32_t, SrsRtcAudioSendTrack*>::iterator it = audio_tracks_.begin(); it != audio_tracks_.end(); ++it) {
-        SrsRtcAudioSendTrack* track = it->second;
-        track->set_nack_enabled(nack_enabled_);
-    }
-
-    for (map<uint32_t, SrsRtcVideoSendTrack*>::iterator it = video_tracks_.begin(); it != video_tracks_.end(); ++it) {
-        SrsRtcVideoSendTrack* track = it->second;
-        track->set_nack_enabled(nack_enabled_);
-    }
-
     // Update stat for session.
     session_->stat_->nn_subscribers++;
 
@@ -582,6 +571,7 @@ srs_error_t SrsRtcPlayStream::cycle()
         }
 
         // Send-out the RTP packet and do cleanup
+        // @remark Note that the pkt might be set to NULL.
         if ((err = send_packet(pkt)) != srs_success) {
             uint32_t nn = 0;
             if (epp->can_print(err, &nn)) {
@@ -590,11 +580,13 @@ srs_error_t SrsRtcPlayStream::cycle()
             srs_freep(err);
         }
 
+        // Release the packet to cache.
+        // @remark Note that the pkt might be set to NULL.
         _srs_rtp_cache->recycle(pkt);
     }
 }
 
-srs_error_t SrsRtcPlayStream::send_packet(SrsRtpPacket2* pkt)
+srs_error_t SrsRtcPlayStream::send_packet(SrsRtpPacket2*& pkt)
 {
     srs_error_t err = srs_success;
 
@@ -605,9 +597,11 @@ srs_error_t SrsRtcPlayStream::send_packet(SrsRtpPacket2* pkt)
     }
 
     // For audio, we transcoded AAC to opus in extra payloads.
+    SrsRtcAudioSendTrack* audio_track = NULL;
+    SrsRtcVideoSendTrack* video_track = NULL;
     if (pkt->is_audio()) {
         // TODO: FIXME: Any simple solution?
-        SrsRtcAudioSendTrack* audio_track = audio_tracks_[pkt->header.get_ssrc()];
+        audio_track = audio_tracks_[pkt->header.get_ssrc()];
 
         if ((err = audio_track->on_rtp(pkt)) != srs_success) {
             return srs_error_wrap(err, "audio track, SSRC=%u, SEQ=%u", pkt->header.get_ssrc(), pkt->header.get_sequence());
@@ -616,16 +610,26 @@ srs_error_t SrsRtcPlayStream::send_packet(SrsRtpPacket2* pkt)
         // TODO: FIXME: Padding audio to the max payload in RTP packets.
     } else {
         // TODO: FIXME: Any simple solution?
-        SrsRtcVideoSendTrack* video_track = video_tracks_[pkt->header.get_ssrc()];
+        video_track = video_tracks_[pkt->header.get_ssrc()];
 
         if ((err = video_track->on_rtp(pkt)) != srs_success) {
             return srs_error_wrap(err, "video track, SSRC=%u, SEQ=%u", pkt->header.get_ssrc(), pkt->header.get_sequence());
         }
     }
 
-    // Detail log, should disable it in release version.
-    srs_info("RTC: Update PT=%u, SSRC=%#x, Time=%u, %u bytes", pkt->header.get_payload_type(), pkt->header.get_ssrc(),
-        pkt->header.get_timestamp(), pkt->nb_bytes());
+    // For NACK to handle packet.
+    // @remark Note that the pkt might be set to NULL.
+    if (nack_enabled_) {
+        if (audio_track) {
+            if ((err = audio_track->on_nack(&pkt)) != srs_success) {
+                return srs_error_wrap(err, "on nack");
+            }
+        } else if (video_track) {
+            if ((err = video_track->on_nack(&pkt)) != srs_success) {
+                return srs_error_wrap(err, "on nack");
+            }
+        }
+    }
 
     return err;
 }
@@ -1158,6 +1162,7 @@ srs_error_t SrsRtcPublishStream::on_rtp_plaintext(char* plaintext, int nb_plaint
     err = do_on_rtp_plaintext(pkt, &buf);
 
     // Release the packet to cache.
+    // @remark Note that the pkt might be set to NULL.
     _srs_rtp_cache->recycle(pkt);
 
     return err;
diff --git a/trunk/src/app/srs_app_rtc_conn.hpp b/trunk/src/app/srs_app_rtc_conn.hpp
index eacc8e6e9..4d662320b 100644
--- a/trunk/src/app/srs_app_rtc_conn.hpp
+++ b/trunk/src/app/srs_app_rtc_conn.hpp
@@ -252,7 +252,7 @@ public:
 public:
     virtual srs_error_t cycle();
 private:
-    srs_error_t send_packet(SrsRtpPacket2* pkt);
+    srs_error_t send_packet(SrsRtpPacket2*& pkt);
 public:
     // Directly set the status of track, generally for init to set the default value.
     void set_all_tracks_status(bool status);
diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index c0c87785c..429b949c7 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -1983,7 +1983,6 @@ SrsRtcSendTrack::SrsRtcSendTrack(SrsRtcConnection* session, SrsRtcTrackDescripti
     session_ = session;
     track_desc_ = track_desc->copy();
     statistic_ = new SrsRtcTrackStatistic();
-    nack_enabled_ = false;
 
     if (is_audio) {
         rtp_queue_ = new SrsRtpRingBuffer(100);
@@ -2002,11 +2001,6 @@ SrsRtcSendTrack::~SrsRtcSendTrack()
     srs_freep(nack_epp);
 }
 
-void SrsRtcSendTrack::set_nack_enabled(bool v)
-{
-    nack_enabled_ = v;
-}
-
 bool SrsRtcSendTrack::has_ssrc(uint32_t ssrc)
 {
     return track_desc_->has_ssrc(ssrc);
@@ -2055,6 +2049,21 @@ std::string SrsRtcSendTrack::get_track_id()
     return track_desc_->id_;
 }
 
+srs_error_t SrsRtcSendTrack::on_nack(SrsRtpPacket2** ppkt)
+{
+    srs_error_t err = srs_success;
+
+    SrsRtpPacket2* pkt = *ppkt;
+    uint16_t seq = pkt->header.get_sequence();
+
+    // insert into video_queue and audio_queue
+    // We directly use the pkt, never copy it, so we should set the pkt to NULL.
+    rtp_queue_->set(seq, pkt);
+    *ppkt = NULL;
+
+    return err;
+}
+
 srs_error_t SrsRtcSendTrack::on_recv_nack(const vector<uint16_t>& lost_seqs)
 {
     srs_error_t err = srs_success;
@@ -2117,12 +2126,6 @@ srs_error_t SrsRtcAudioSendTrack::on_rtp(SrsRtpPacket2* pkt)
         // TODO: FIXME: Should update PT for RTX.
     }
 
-    // Put rtp packet to NACK/ARQ queue
-    if (nack_enabled_) {
-        SrsRtpPacket2* nack = pkt->copy();
-        rtp_queue_->set(nack->header.get_sequence(), nack);
-    }
-
     // Update stats.
     session_->stat_->nn_out_audios++;
 
@@ -2177,12 +2180,6 @@ srs_error_t SrsRtcVideoSendTrack::on_rtp(SrsRtpPacket2* pkt)
         // TODO: FIXME: Should update PT for RTX.
     }
 
-    // Put rtp packet to NACK/ARQ queue
-    if (nack_enabled_) {
-        SrsRtpPacket2* nack = pkt->copy();
-        rtp_queue_->set(nack->header.get_sequence(), nack);
-    }
-
     // Update stats.
     session_->stat_->nn_out_videos++;
 
diff --git a/trunk/src/app/srs_app_rtc_source.hpp b/trunk/src/app/srs_app_rtc_source.hpp
index aed39ec31..db187faf6 100644
--- a/trunk/src/app/srs_app_rtc_source.hpp
+++ b/trunk/src/app/srs_app_rtc_source.hpp
@@ -579,8 +579,6 @@ protected:
     SrsRtcConnection* session_;
     // NACK ARQ ring buffer.
     SrsRtpRingBuffer* rtp_queue_;
-    // Whether enabled nack.
-    bool nack_enabled_;
 private:
     // The pithy print for special stage.
     SrsErrorPithyPrint* nack_epp;
@@ -588,12 +586,15 @@ public:
     SrsRtcSendTrack(SrsRtcConnection* session, SrsRtcTrackDescription* track_desc, bool is_audio);
     virtual ~SrsRtcSendTrack();
 public:
-    void set_nack_enabled(bool v);
     bool has_ssrc(uint32_t ssrc);
     SrsRtpPacket2* fetch_rtp_packet(uint16_t seq);
     bool set_track_status(bool active);
     bool get_track_status();
     std::string get_track_id();
+public:
+    // Note that we can set the pkt to NULL to avoid copy, for example, if the NACK cache the pkt and
+    // set to NULL, nack nerver copy it but set the pkt to NULL.
+    srs_error_t on_nack(SrsRtpPacket2** ppkt);
 public:
     virtual srs_error_t on_rtp(SrsRtpPacket2* pkt) = 0;
     virtual srs_error_t on_rtcp(SrsRtpPacket2* pkt) = 0;

From eb9a2634338c482b3f4fd18e8b523f53690a960d Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 08:23:35 +0800
Subject: [PATCH 061/102] Cache RTP packet size, revert 9ee0ed919a

---
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 18 ++++++++++++++++--
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp |  3 +++
 2 files changed, 19 insertions(+), 2 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 36822a43f..b633653f0 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -854,6 +854,7 @@ SrsRtpPacket2::SrsRtpPacket2()
 
     nalu_type = SrsAvcNaluTypeReserved;
     frame_type = SrsFrameTypeReserved;
+    cached_payload_size = 0;
     decode_handler = NULL;
 
     ++_srs_pps_objs_rtps->sugar;
@@ -869,6 +870,7 @@ void SrsRtpPacket2::reset()
 {
     nalu_type = SrsAvcNaluTypeReserved;
     frame_type = SrsFrameTypeReserved;
+    cached_payload_size = 0;
     decode_handler = NULL;
 
     // It's important to reset the header.
@@ -931,6 +933,8 @@ cleanup:
 
 bool SrsRtpPacket2::recycle()
 {
+    // Clear the cache size, it may change when reuse it.
+    cached_payload_size = 0;
     // Reset the handler, for decode only.
     decode_handler = NULL;
 
@@ -1012,6 +1016,7 @@ SrsRtpPacket2* SrsRtpPacket2::copy()
     cp->shared_msg = shared_msg->copy2();
     cp->frame_type = frame_type;
 
+    cp->cached_payload_size = cached_payload_size;
     // For performance issue, do not copy the unused field.
     //cp->decode_handler = decode_handler;
 
@@ -1021,11 +1026,17 @@ SrsRtpPacket2* SrsRtpPacket2::copy()
 void SrsRtpPacket2::set_padding(int size)
 {
     header.set_padding(size);
+    if (cached_payload_size) {
+        cached_payload_size += size - header.get_padding();
+    }
 }
 
 void SrsRtpPacket2::add_padding(int size)
 {
     header.set_padding(header.get_padding() + size);
+    if (cached_payload_size) {
+        cached_payload_size += size;
+    }
 }
 
 void SrsRtpPacket2::set_decode_handler(ISrsRtpPacketDecodeHandler* h)
@@ -1045,8 +1056,11 @@ void SrsRtpPacket2::set_extension_types(SrsRtpExtensionTypes* v)
 
 uint64_t SrsRtpPacket2::nb_bytes()
 {
-    int nn_payload = (payload_? payload_->nb_bytes():0);
-    return header.nb_bytes() + nn_payload + header.get_padding();
+    if (!cached_payload_size) {
+        int nn_payload = (payload_? payload_->nb_bytes():0);
+        cached_payload_size = header.nb_bytes() + nn_payload + header.get_padding();
+    }
+    return cached_payload_size;
 }
 
 srs_error_t SrsRtpPacket2::encode(SrsBuffer* buf)
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index b7947fa8c..7227fb004 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -315,7 +315,10 @@ public:
     SrsAvcNaluType nalu_type;
     // The frame type, for RTMP bridger or SFU source.
     SrsFrameType frame_type;
+// Fast cache for performance.
 private:
+    // The cached payload size for packet.
+    int cached_payload_size;
     // The helper handler for decoder, use RAW payload if NULL.
     ISrsRtpPacketDecodeHandler* decode_handler;
 public:

From 7c517988a6e36326fee115da5e3e7a10ef80042c Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 09:51:28 +0800
Subject: [PATCH 062/102] Perf: Refine header extensions marshal

---
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 30 ++++++++++---------------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp | 11 ++++-----
 2 files changed, 16 insertions(+), 25 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index b633653f0..64ec08bc8 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -225,11 +225,6 @@ void SrsRtpExtensionTwcc::assign(const SrsRtpExtensionTwcc& h)
     sn_ = h.sn_;
 }
 
-bool SrsRtpExtensionTwcc::has_twcc_ext()
-{
-    return has_twcc_;
-}
-
 srs_error_t SrsRtpExtensionTwcc::decode(SrsBuffer* buf)
 {
     srs_error_t err = srs_success;
@@ -481,7 +476,7 @@ srs_error_t SrsRtpExtensions::decode_0xbede(SrsBuffer* buf)
 
 uint64_t SrsRtpExtensions::nb_bytes()
 {
-    int size =  4 + (twcc_.has_twcc_ext() ? twcc_.nb_bytes() : 0);
+    int size =  4 + (twcc_.exists() ? twcc_.nb_bytes() : 0);
     size += (audio_level_.exists() ? audio_level_.nb_bytes() : 0);
     // add padding
     size += (size % 4 == 0) ? 0 : (4 - size % 4);
@@ -497,7 +492,7 @@ srs_error_t SrsRtpExtensions::encode(SrsBuffer* buf)
     // Write length.
     int len = 0;
 
-    if (twcc_.has_twcc_ext()) {
+    if (twcc_.exists()) {
         len += twcc_.nb_bytes();
     }
 
@@ -508,10 +503,14 @@ srs_error_t SrsRtpExtensions::encode(SrsBuffer* buf)
     int padding_count = (len % 4 == 0) ? 0 : (4 - len % 4);
     len += padding_count;
 
+    if (!buf->require(len)) {
+        return srs_error_new(ERROR_RTC_RTP_MUXER, "requires %d bytes", len);
+    }
+
     buf->write_2bytes(len / 4);
 
     // Write extensions.
-    if (twcc_.has_twcc_ext()) {
+    if (twcc_.exists()) {
         if ((err = twcc_.encode(buf)) != srs_success) {
             return srs_error_wrap(err, "encode twcc extension");
         }
@@ -524,19 +523,14 @@ srs_error_t SrsRtpExtensions::encode(SrsBuffer* buf)
     }
 
     // add padding
-    while(padding_count > 0) {
-        buf->write_1bytes(0);
-        padding_count--;
+    if (padding_count) {
+        memset(buf->head(), 0, padding_count);
+        buf->skip(padding_count);
     }
 
     return err;
 }
 
-bool SrsRtpExtensions::exists()
-{
-    return has_ext_;
-}
-
 void SrsRtpExtensions::set_types_(SrsRtpExtensionTypes* types)
 {
     types_ = types;
@@ -544,7 +538,7 @@ void SrsRtpExtensions::set_types_(SrsRtpExtensionTypes* types)
 
 srs_error_t SrsRtpExtensions::get_twcc_sequence_number(uint16_t& twcc_sn)
 {
-    if (twcc_.has_twcc_ext()) {
+    if (twcc_.exists()) {
         twcc_sn = twcc_.get_sn();
         return srs_success;
     }
@@ -1080,7 +1074,7 @@ srs_error_t SrsRtpPacket2::encode(SrsBuffer* buf)
         if (!buf->require(padding)) {
             return srs_error_new(ERROR_RTC_RTP_MUXER, "requires %d bytes", padding);
         }
-        memset(buf->data() + buf->pos(), padding, padding);
+        memset(buf->head(), padding, padding);
         buf->skip(padding);
     }
 
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 7227fb004..4f3e28524 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -142,7 +142,7 @@ public:
     void reset();
     void assign(const SrsRtpExtensionTwcc& h);
 public:
-    bool has_twcc_ext();
+    inline bool exists() { return has_twcc_; } // SrsRtpExtensionTwcc::exists
     uint8_t get_id();
     void set_id(uint8_t id);
     uint16_t get_sn();
@@ -168,7 +168,7 @@ public:
     void reset();
     void assign(const SrsRtpExtensionOneByte& h);
 public:
-    bool exists() { return has_ext_; }
+    inline bool exists() { return has_ext_; } // SrsRtpExtensionOneByte::exists
     int get_id() { return id_; }
     uint8_t get_value() { return value_; }
     void set_id(int id);
@@ -200,7 +200,7 @@ public:
     void reset();
     void assign(const SrsRtpExtensions& h);
 public:
-    bool exists();
+    inline bool exists() { return has_ext_; } // SrsRtpExtensions::exists
     void set_types_(SrsRtpExtensionTypes* types);
     srs_error_t get_twcc_sequence_number(uint16_t& twcc_sn);
     srs_error_t set_twcc_sequence_number(uint8_t id, uint16_t sn);
@@ -254,10 +254,7 @@ public:
     void set_timestamp(uint32_t v);
     uint32_t get_timestamp() const;
     void set_ssrc(uint32_t v);
-    // SrsRtpHeader::get_ssrc
-    inline uint32_t get_ssrc() const {
-        return ssrc;
-    }
+    inline uint32_t get_ssrc() const { return ssrc; } // SrsRtpHeader::get_ssrc
     void set_padding(uint8_t v);
     uint8_t get_padding() const;
     void set_extensions(SrsRtpExtensionTypes* extmap);

From 5d4baf4eca21bc6ab8d26953d17a29ae5749e6e0 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 10:04:30 +0800
Subject: [PATCH 063/102] RTC: Refine code, remove the assign

---
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 48 +------------------------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp |  4 ---
 2 files changed, 1 insertion(+), 51 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 64ec08bc8..2098d44eb 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -218,13 +218,6 @@ void SrsRtpExtensionTwcc::reset()
     sn_ = 0;
 }
 
-void SrsRtpExtensionTwcc::assign(const SrsRtpExtensionTwcc& h)
-{
-    has_twcc_ = h.has_twcc_;
-    id_ = h.id_;
-    sn_ = h.sn_;
-}
-
 srs_error_t SrsRtpExtensionTwcc::decode(SrsBuffer* buf)
 {
     srs_error_t err = srs_success;
@@ -313,13 +306,6 @@ void SrsRtpExtensionOneByte::reset()
     value_ = 0;
 }
 
-void SrsRtpExtensionOneByte::assign(const SrsRtpExtensionOneByte& h)
-{
-    has_ext_ = h.has_ext_;
-    id_ = h.id_;
-    value_ = h.value_;
-}
-
 void SrsRtpExtensionOneByte::set_id(int id)
 {
     id_ = id;
@@ -385,17 +371,6 @@ void SrsRtpExtensions::reset()
     has_ext_ = false;
 }
 
-void SrsRtpExtensions::assign(const SrsRtpExtensions& h)
-{
-    has_ext_ = h.has_ext_;
-    types_ = h.types_;
-
-    if (has_ext_) {
-        twcc_.assign(h.twcc_);
-        audio_level_.assign(h.audio_level_);
-    }
-}
-
 srs_error_t SrsRtpExtensions::decode(SrsBuffer* buf)
 {
     srs_error_t err = srs_success;
@@ -602,27 +577,6 @@ void SrsRtpHeader::reset()
     //memset(csrc, 0, sizeof(csrc));
 }
 
-void SrsRtpHeader::assign(const SrsRtpHeader& h)
-{
-    // Reset the fields in protocol.
-    cc               = h.cc;
-    marker           = h.marker;
-    payload_type     = h.payload_type;
-    sequence         = h.sequence;
-    timestamp        = h.timestamp;
-    ssrc             = h.ssrc;
-
-    // Reset the parsed fields.
-    padding_length   = h.padding_length;
-    extensions_.assign(h.extensions_);
-
-    // Reset other fields.
-    ignore_padding_  = h.ignore_padding_;
-
-    // The CSRC is not used yet, so we never reset it.
-    //memcpy(csrc, h.csrc, sizeof(csrc));
-}
-
 srs_error_t SrsRtpHeader::decode(SrsBuffer* buf)
 {
     srs_error_t err = srs_success;
@@ -1002,7 +956,7 @@ SrsRtpPacket2* SrsRtpPacket2::copy()
     //srs_assert(!cp->payload_);
     //srs_assert(!cp->shared_msg);
 
-    cp->header.assign(header);
+    cp->header = header;
     cp->payload_ = payload_? payload_->copy():NULL;
     cp->payload_type_ = payload_type_;
 
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 4f3e28524..ae403bc65 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -140,7 +140,6 @@ public:
 public:
     // Reset the object to reuse it.
     void reset();
-    void assign(const SrsRtpExtensionTwcc& h);
 public:
     inline bool exists() { return has_twcc_; } // SrsRtpExtensionTwcc::exists
     uint8_t get_id();
@@ -166,7 +165,6 @@ public:
 public:
     // Reset the object to reuse it.
     void reset();
-    void assign(const SrsRtpExtensionOneByte& h);
 public:
     inline bool exists() { return has_ext_; } // SrsRtpExtensionOneByte::exists
     int get_id() { return id_; }
@@ -198,7 +196,6 @@ public:
 public:
     // Reset the object to reuse it.
     void reset();
-    void assign(const SrsRtpExtensions& h);
 public:
     inline bool exists() { return has_ext_; } // SrsRtpExtensions::exists
     void set_types_(SrsRtpExtensionTypes* types);
@@ -236,7 +233,6 @@ public:
 public:
     // Reset the object to reuse it.
     void reset();
-    void assign(const SrsRtpHeader& h);
 public:
     virtual srs_error_t decode(SrsBuffer* buf);
 private:

From eed98dd85b95a32828d9d5be1f98e815e37364f0 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 10:06:52 +0800
Subject: [PATCH 064/102] RTC: Refine code, remove the reset for header

---
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 58 ++++++-------------------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp | 12 -----
 2 files changed, 13 insertions(+), 57 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 2098d44eb..3d150d03f 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -204,20 +204,15 @@ SrsRtpExtensionType SrsRtpExtensionTypes::get_type(int id) const
 
 SrsRtpExtensionTwcc::SrsRtpExtensionTwcc()
 {
-    reset();
+    has_twcc_ = false;
+    id_ = 0;
+    sn_ = 0;
 }
 
 SrsRtpExtensionTwcc::~SrsRtpExtensionTwcc()
 {
 }
 
-void SrsRtpExtensionTwcc::reset()
-{
-    has_twcc_ = false;
-    id_ = 0;
-    sn_ = 0;
-}
-
 srs_error_t SrsRtpExtensionTwcc::decode(SrsBuffer* buf)
 {
     srs_error_t err = srs_success;
@@ -292,20 +287,15 @@ void SrsRtpExtensionTwcc::set_sn(uint16_t sn)
 
 SrsRtpExtensionOneByte::SrsRtpExtensionOneByte()
 {
-    reset();
+    has_ext_ = false;
+    id_ = 0;
+    value_ = 0;
 }
 
 SrsRtpExtensionOneByte::~SrsRtpExtensionOneByte()
 {
 }
 
-void SrsRtpExtensionOneByte::reset()
-{
-    has_ext_ = false;
-    id_ = 0;
-    value_ = 0;
-}
-
 void SrsRtpExtensionOneByte::set_id(int id)
 {
     id_ = id;
@@ -356,21 +346,14 @@ srs_error_t SrsRtpExtensionOneByte::encode(SrsBuffer* buf)
 
 SrsRtpExtensions::SrsRtpExtensions()
 {
-    reset();
+    types_ = NULL;
+    has_ext_ = false;
 }
 
 SrsRtpExtensions::~SrsRtpExtensions()
 {
 }
 
-void SrsRtpExtensions::reset()
-{
-    types_ = NULL;
-    twcc_.reset();
-    audio_level_.reset();
-    has_ext_ = false;
-}
-
 srs_error_t SrsRtpExtensions::decode(SrsBuffer* buf)
 {
     srs_error_t err = srs_success;
@@ -547,34 +530,19 @@ srs_error_t SrsRtpExtensions::set_audio_level(int id, uint8_t level)
 
 SrsRtpHeader::SrsRtpHeader()
 {
-    reset();
-
-    memset(csrc, 0, sizeof(csrc));
-}
-
-SrsRtpHeader::~SrsRtpHeader()
-{
-}
-
-void SrsRtpHeader::reset()
-{
-    // Reset the fields in protocol.
     cc               = 0;
     marker           = false;
     payload_type     = 0;
     sequence         = 0;
     timestamp        = 0;
     ssrc             = 0;
-
-    // Reset the parsed fields.
     padding_length   = 0;
-    extensions_.reset();
-
-    // Reset other fields.
     ignore_padding_  = false;
+    memset(csrc, 0, sizeof(csrc));
+}
 
-    // The CSRC is not used yet, so we never reset it.
-    //memset(csrc, 0, sizeof(csrc));
+SrsRtpHeader::~SrsRtpHeader()
+{
 }
 
 srs_error_t SrsRtpHeader::decode(SrsBuffer* buf)
@@ -822,7 +790,7 @@ void SrsRtpPacket2::reset()
     decode_handler = NULL;
 
     // It's important to reset the header.
-    header.reset();
+    header = SrsRtpHeader();
 
     // Recyle the payload again, to ensure the packet is new one.
     recycle_payload();
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index ae403bc65..967462903 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -137,9 +137,6 @@ class SrsRtpExtensionTwcc// : public ISrsCodec
 public:
     SrsRtpExtensionTwcc();
     virtual ~SrsRtpExtensionTwcc();
-public:
-    // Reset the object to reuse it.
-    void reset();
 public:
     inline bool exists() { return has_twcc_; } // SrsRtpExtensionTwcc::exists
     uint8_t get_id();
@@ -162,9 +159,6 @@ class SrsRtpExtensionOneByte// : public ISrsCodec
 public:
     SrsRtpExtensionOneByte();
     virtual ~SrsRtpExtensionOneByte();
-public:
-    // Reset the object to reuse it.
-    void reset();
 public:
     inline bool exists() { return has_ext_; } // SrsRtpExtensionOneByte::exists
     int get_id() { return id_; }
@@ -193,9 +187,6 @@ private:
 public:
     SrsRtpExtensions();
     virtual ~SrsRtpExtensions();
-public:
-    // Reset the object to reuse it.
-    void reset();
 public:
     inline bool exists() { return has_ext_; } // SrsRtpExtensions::exists
     void set_types_(SrsRtpExtensionTypes* types);
@@ -230,9 +221,6 @@ private:
 public:
     SrsRtpHeader();
     virtual ~SrsRtpHeader();
-public:
-    // Reset the object to reuse it.
-    void reset();
 public:
     virtual srs_error_t decode(SrsBuffer* buf);
 private:

From 171ae5dd2dc6d717941a234c3fdf3a7b7601639d Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 11:26:50 +0800
Subject: [PATCH 065/102] RTC: Fix shared msg cache bug

---
 trunk/src/app/srs_app_hybrid.cpp        |  3 ++-
 trunk/src/kernel/srs_kernel_flv.cpp     | 33 ++++++++++++-------------
 trunk/src/kernel/srs_kernel_flv.hpp     |  4 +--
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 22 +++++++++--------
 4 files changed, 31 insertions(+), 31 deletions(-)

diff --git a/trunk/src/app/srs_app_hybrid.cpp b/trunk/src/app/srs_app_hybrid.cpp
index f0ff56f35..f9365f60a 100644
--- a/trunk/src/app/srs_app_hybrid.cpp
+++ b/trunk/src/app/srs_app_hybrid.cpp
@@ -466,7 +466,8 @@ srs_error_t SrsHybridServer::notify(int event, srs_utime_t interval, srs_utime_t
     if (_srs_rtp_cache->size() || _srs_rtp_raw_cache->size() || _srs_rtp_fua_cache->size() || _srs_rtp_msg_cache_buffers->size() || _srs_rtp_msg_cache_objs->size()) {
         snprintf(buf, sizeof(buf), ", cache=(pkt:%d-%dw,raw:%d-%dw,fua:%d-%dw,msg:%d-%dw,buf:%d-%dw)",
             _srs_rtp_cache->size(), _srs_rtp_cache->capacity()/10000, _srs_rtp_raw_cache->size(), _srs_rtp_raw_cache->capacity()/10000,
-            _srs_rtp_fua_cache->size(), _srs_rtp_fua_cache->capacity()/10000, _srs_rtp_msg_cache_buffers->size(), _srs_rtp_msg_cache_buffers->capacity()/10000, _srs_rtp_msg_cache_objs->size(), _srs_rtp_msg_cache_objs->capacity()/10000);
+            _srs_rtp_fua_cache->size(), _srs_rtp_fua_cache->capacity()/10000, _srs_rtp_msg_cache_objs->size(), _srs_rtp_msg_cache_objs->capacity()/10000,
+            _srs_rtp_msg_cache_buffers->size(), _srs_rtp_msg_cache_buffers->capacity()/10000);
         cache_desc = buf;
     }
 
diff --git a/trunk/src/kernel/srs_kernel_flv.cpp b/trunk/src/kernel/srs_kernel_flv.cpp
index 0706cd487..102165ec3 100644
--- a/trunk/src/kernel/srs_kernel_flv.cpp
+++ b/trunk/src/kernel/srs_kernel_flv.cpp
@@ -229,6 +229,19 @@ SrsSharedPtrMessage::~SrsSharedPtrMessage()
     }
 }
 
+bool SrsSharedPtrMessage::recycle()
+{
+    // When recycle, unwrap if not the last reference.
+    if (ptr && ptr->shared_count > 0) {
+        ptr->shared_count--;
+        ptr = NULL;
+        payload = NULL;
+        size = 0;
+    }
+
+    return true;
+}
+
 srs_error_t SrsSharedPtrMessage::create(SrsCommonMessage* msg)
 {
     srs_error_t err = srs_success;
@@ -287,21 +300,6 @@ void SrsSharedPtrMessage::wrap(char* payload, int size)
     this->size = ptr->size;
 }
 
-void SrsSharedPtrMessage::unwrap()
-{
-    if (ptr) {
-        if (ptr->shared_count > 0) {
-            ptr->shared_count--;
-            ptr = NULL;
-        } else {
-            srs_freep(ptr);
-        }
-    }
-
-    payload = NULL;
-    size = 0;
-}
-
 int SrsSharedPtrMessage::count()
 {
     return ptr? ptr->shared_count : 0;
@@ -365,8 +363,6 @@ SrsSharedPtrMessage* SrsSharedPtrMessage::copy()
     
     copy->timestamp = timestamp;
     copy->stream_id = stream_id;
-    copy->payload = ptr->payload;
-    copy->size = ptr->size;
 
     return copy;
 }
@@ -382,6 +378,9 @@ SrsSharedPtrMessage* SrsSharedPtrMessage::copy2()
     copy->ptr = ptr;
     ptr->shared_count++;
 
+    copy->payload = ptr->payload;
+    copy->size = ptr->size;
+
     return copy;
 }
 
diff --git a/trunk/src/kernel/srs_kernel_flv.hpp b/trunk/src/kernel/srs_kernel_flv.hpp
index 0cc6102ac..5250c12b2 100644
--- a/trunk/src/kernel/srs_kernel_flv.hpp
+++ b/trunk/src/kernel/srs_kernel_flv.hpp
@@ -313,7 +313,7 @@ public:
     virtual ~SrsSharedPtrMessage();
 public:
     // For object cache to reset and reuse it.
-    bool recycle() { return true; }
+    bool recycle();
     // Create shared ptr message,
     // copy header, manage the payload of msg,
     // set the payload to NULL to prevent double free.
@@ -328,8 +328,6 @@ public:
     // Create shared ptr message from RAW payload.
     // @remark Note that the header is set to zero.
     virtual void wrap(char* payload, int size);
-    // Decrease the reference, if the last one, free it.
-    void unwrap();
     // Get current reference count.
     // when this object created, count set to 0.
     // if copy() this object, count increase 1.
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 3d150d03f..2086040c3 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -827,17 +827,19 @@ void SrsRtpPacket2::recycle_shared_msg()
         return;
     }
 
-    if (!shared_msg->payload || shared_msg->size != kRtpPacketSize || shared_msg->count() > 0) {
-        // Note that we must unwrap the shared message, because this object pool only cache the
-        // shared message itself without payload.
-        shared_msg->unwrap();
-        _srs_rtp_msg_cache_objs->recycle(shared_msg);
-        goto cleanup;
-    }
+    // Only recycle the message for UDP packets.
+    if (shared_msg->payload && shared_msg->size == kRtpPacketSize) {
+        if (_srs_rtp_msg_cache_objs->enabled() && shared_msg->count() > 0) {
+            // Recycle the small shared message objects.
+            _srs_rtp_msg_cache_objs->recycle(shared_msg);
+            goto cleanup;
+        }
 
-    if (_srs_rtp_msg_cache_buffers->enabled()) {
-        _srs_rtp_msg_cache_buffers->recycle(shared_msg);
-        goto cleanup;
+        if (_srs_rtp_msg_cache_buffers->enabled() && shared_msg->count() == 0) {
+            // Recycle the UDP large buffer.
+            _srs_rtp_msg_cache_buffers->recycle(shared_msg);
+            goto cleanup;
+        }
     }
 
     srs_freep(shared_msg);

From b91d37b78aa21f1fae50826c9ee950df64e6d873 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 17:26:08 +0800
Subject: [PATCH 066/102] RTC: Store the actual size of buffer for RTP packet.

---
 trunk/src/kernel/srs_kernel_flv.hpp     |  2 +-
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 67 ++++++++++++++-----------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp |  7 ++-
 3 files changed, 43 insertions(+), 33 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_flv.hpp b/trunk/src/kernel/srs_kernel_flv.hpp
index 5250c12b2..67a7241ae 100644
--- a/trunk/src/kernel/srs_kernel_flv.hpp
+++ b/trunk/src/kernel/srs_kernel_flv.hpp
@@ -290,7 +290,7 @@ public:
     //       video/audio packet use raw bytes, no video/audio packet.
     char* payload;
 
-public:
+private:
     class SrsSharedPtrPayload
     {
     public:
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 2086040c3..b3fe73479 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -766,7 +766,8 @@ SrsRtpPacket2::SrsRtpPacket2()
 {
     payload_ = NULL;
     payload_type_ = SrsRtpPacketPayloadTypeUnknown;
-    shared_msg = NULL;
+    shared_buffer = NULL;
+    actual_buffer_size_ = 0;
 
     nalu_type = SrsAvcNaluTypeReserved;
     frame_type = SrsFrameTypeReserved;
@@ -779,7 +780,7 @@ SrsRtpPacket2::SrsRtpPacket2()
 SrsRtpPacket2::~SrsRtpPacket2()
 {
     recycle_payload();
-    recycle_shared_msg();
+    recycle_shared_buffer();
 }
 
 void SrsRtpPacket2::reset()
@@ -794,7 +795,7 @@ void SrsRtpPacket2::reset()
 
     // Recyle the payload again, to ensure the packet is new one.
     recycle_payload();
-    recycle_shared_msg();
+    recycle_shared_buffer();
 }
 
 void SrsRtpPacket2::recycle_payload()
@@ -805,48 +806,47 @@ void SrsRtpPacket2::recycle_payload()
 
     if (payload_type_ == SrsRtpPacketPayloadTypeRaw && _srs_rtp_raw_cache->enabled()) {
         _srs_rtp_raw_cache->recycle((SrsRtpRawPayload*)payload_);
-        payload_ = NULL;
         goto cleanup;
     }
 
     if (payload_type_ == SrsRtpPacketPayloadTypeFUA2 && _srs_rtp_fua_cache->enabled()) {
         _srs_rtp_fua_cache->recycle((SrsRtpFUAPayload2*)payload_);
-        payload_ = NULL;
         goto cleanup;
     }
 
     srs_freep(payload_);
 
 cleanup:
+    payload_ = NULL;
     payload_type_ = SrsRtpPacketPayloadTypeUnknown;
 }
 
-void SrsRtpPacket2::recycle_shared_msg()
+void SrsRtpPacket2::recycle_shared_buffer()
 {
-    if (!shared_msg) {
+    if (!shared_buffer) {
         return;
     }
 
     // Only recycle the message for UDP packets.
-    if (shared_msg->payload && shared_msg->size == kRtpPacketSize) {
-        if (_srs_rtp_msg_cache_objs->enabled() && shared_msg->count() > 0) {
+    if (shared_buffer->payload && shared_buffer->size == kRtpPacketSize) {
+        if (_srs_rtp_msg_cache_objs->enabled() && shared_buffer->count() > 0) {
             // Recycle the small shared message objects.
-            _srs_rtp_msg_cache_objs->recycle(shared_msg);
+            _srs_rtp_msg_cache_objs->recycle(shared_buffer);
             goto cleanup;
         }
 
-        if (_srs_rtp_msg_cache_buffers->enabled() && shared_msg->count() == 0) {
+        if (_srs_rtp_msg_cache_buffers->enabled() && shared_buffer->count() == 0) {
             // Recycle the UDP large buffer.
-            _srs_rtp_msg_cache_buffers->recycle(shared_msg);
+            _srs_rtp_msg_cache_buffers->recycle(shared_buffer);
             goto cleanup;
         }
     }
 
-    srs_freep(shared_msg);
-    return;
+    srs_freep(shared_buffer);
 
 cleanup:
-    shared_msg = NULL;
+    shared_buffer = NULL;
+    actual_buffer_size_ = 0;
 }
 
 bool SrsRtpPacket2::recycle()
@@ -859,7 +859,7 @@ bool SrsRtpPacket2::recycle()
     // We only recycle the payload and shared messages,
     // for header and fields, user will reset or copy it.
     recycle_payload();
-    recycle_shared_msg();
+    recycle_shared_buffer();
 
     return true;
 }
@@ -867,28 +867,30 @@ bool SrsRtpPacket2::recycle()
 char* SrsRtpPacket2::wrap(int size)
 {
     // If the buffer is large enough, reuse it.
-    if (shared_msg && shared_msg->size >= size) {
-        return shared_msg->payload;
+    if (shared_buffer && shared_buffer->size >= size) {
+        return shared_buffer->payload;
     }
 
     // Create a large enough message, with under-layer buffer.
     while (true) {
-        srs_freep(shared_msg);
-        shared_msg = _srs_rtp_msg_cache_buffers->allocate();
+        srs_freep(shared_buffer);
+        shared_buffer = _srs_rtp_msg_cache_buffers->allocate();
+        // The buffer size is larger or equals to the size of packet.
+        actual_buffer_size_ = size;
 
         // If got a cached message(which has payload), but it's too small,
         // we free it and allocate a larger one.
-        if (shared_msg->payload && shared_msg->size < size) {
+        if (shared_buffer->payload && shared_buffer->size < size) {
             ++_srs_pps_objs_rothers->sugar;
             continue;
         }
 
         // Create under-layer buffer for new message
-        if (!shared_msg->payload) {
+        if (!shared_buffer->payload) {
             // For RTC, we use larger under-layer buffer for each packet.
             int nb_buffer = srs_max(size, kRtpPacketSize);
             char* buf = new char[nb_buffer];
-            shared_msg->wrap(buf, nb_buffer);
+            shared_buffer->wrap(buf, nb_buffer);
 
             ++_srs_pps_objs_rbuf->sugar;
         }
@@ -896,7 +898,7 @@ char* SrsRtpPacket2::wrap(int size)
         break;
     }
 
-    return shared_msg->payload;
+    return shared_buffer->payload;
 }
 
 char* SrsRtpPacket2::wrap(char* data, int size)
@@ -908,11 +910,15 @@ char* SrsRtpPacket2::wrap(char* data, int size)
 
 char* SrsRtpPacket2::wrap(SrsSharedPtrMessage* msg)
 {
-    // Recycle the shared message.
-    recycle_shared_msg();
+    // Generally, the wrap(msg) is used for RTMP to RTC, which is not generated by RTC,
+    // so we do not recycle the msg. It's ok to directly free the msg, event the msg is
+    // allocated by object cache manager.
+    srs_freep(shared_buffer);
 
     // Copy from the new message.
-    shared_msg = msg->copy();
+    shared_buffer = msg->copy();
+    // If we wrap a message, the size of packet equals to the message size.
+    actual_buffer_size_ = shared_buffer->size;
 
     return msg->payload;
 }
@@ -924,19 +930,20 @@ SrsRtpPacket2* SrsRtpPacket2::copy()
     // We got packet from cache, the payload and message MUST be NULL,
     // because we had clear it in recycle.
     //srs_assert(!cp->payload_);
-    //srs_assert(!cp->shared_msg);
+    //srs_assert(!cp->shared_buffer);
 
     cp->header = header;
     cp->payload_ = payload_? payload_->copy():NULL;
     cp->payload_type_ = payload_type_;
 
     cp->nalu_type = nalu_type;
-    cp->shared_msg = shared_msg->copy2();
+    cp->shared_buffer = shared_buffer->copy2();
+    cp->actual_buffer_size_ = actual_buffer_size_;
     cp->frame_type = frame_type;
 
     cp->cached_payload_size = cached_payload_size;
     // For performance issue, do not copy the unused field.
-    //cp->decode_handler = decode_handler;
+    cp->decode_handler = decode_handler;
 
     return cp;
 }
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index 967462903..da885d4d5 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -289,7 +289,10 @@ private:
     SrsRtpPacketPayloadType payload_type_;
 private:
     // The original shared message, all RTP packets can refer to its data.
-    SrsSharedPtrMessage* shared_msg;
+    // Note that the size of shared msg, is not the packet size, it's a larger aligned buffer.
+    SrsSharedPtrMessage* shared_buffer;
+    // The size of original packet.
+    int actual_buffer_size_;
 // Helper fields.
 public:
     // The first byte as nalu type, for video decoder only.
@@ -311,7 +314,7 @@ public:
     void reset();
 private:
     void recycle_payload();
-    void recycle_shared_msg();
+    void recycle_shared_buffer();
 public:
     // Recycle the object to reuse it.
     virtual bool recycle();

From ee9ef378f9aa04aea48e2117c4eb1bc1c4970bd7 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 17:36:03 +0800
Subject: [PATCH 067/102] RTC: Fix bug for wrap exists buffer size

---
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index b3fe73479..80d6b8ff5 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -866,6 +866,9 @@ bool SrsRtpPacket2::recycle()
 
 char* SrsRtpPacket2::wrap(int size)
 {
+    // The buffer size is larger or equals to the size of packet.
+    actual_buffer_size_ = size;
+
     // If the buffer is large enough, reuse it.
     if (shared_buffer && shared_buffer->size >= size) {
         return shared_buffer->payload;
@@ -875,8 +878,6 @@ char* SrsRtpPacket2::wrap(int size)
     while (true) {
         srs_freep(shared_buffer);
         shared_buffer = _srs_rtp_msg_cache_buffers->allocate();
-        // The buffer size is larger or equals to the size of packet.
-        actual_buffer_size_ = size;
 
         // If got a cached message(which has payload), but it's too small,
         // we free it and allocate a larger one.

From 2719e4c0be8a7202fb10f06a2cf0d64fe3f07fba Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 17:47:35 +0800
Subject: [PATCH 068/102] Refine code

---
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 44 ++++++++++++-------------
 trunk/src/kernel/srs_kernel_rtc_rtp.hpp |  2 +-
 2 files changed, 23 insertions(+), 23 deletions(-)

diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index 80d6b8ff5..cbfe372af 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -766,7 +766,7 @@ SrsRtpPacket2::SrsRtpPacket2()
 {
     payload_ = NULL;
     payload_type_ = SrsRtpPacketPayloadTypeUnknown;
-    shared_buffer = NULL;
+    shared_buffer_ = NULL;
     actual_buffer_size_ = 0;
 
     nalu_type = SrsAvcNaluTypeReserved;
@@ -823,29 +823,29 @@ cleanup:
 
 void SrsRtpPacket2::recycle_shared_buffer()
 {
-    if (!shared_buffer) {
+    if (!shared_buffer_) {
         return;
     }
 
     // Only recycle the message for UDP packets.
-    if (shared_buffer->payload && shared_buffer->size == kRtpPacketSize) {
-        if (_srs_rtp_msg_cache_objs->enabled() && shared_buffer->count() > 0) {
+    if (shared_buffer_->payload && shared_buffer_->size == kRtpPacketSize) {
+        if (_srs_rtp_msg_cache_objs->enabled() && shared_buffer_->count() > 0) {
             // Recycle the small shared message objects.
-            _srs_rtp_msg_cache_objs->recycle(shared_buffer);
+            _srs_rtp_msg_cache_objs->recycle(shared_buffer_);
             goto cleanup;
         }
 
-        if (_srs_rtp_msg_cache_buffers->enabled() && shared_buffer->count() == 0) {
+        if (_srs_rtp_msg_cache_buffers->enabled() && shared_buffer_->count() == 0) {
             // Recycle the UDP large buffer.
-            _srs_rtp_msg_cache_buffers->recycle(shared_buffer);
+            _srs_rtp_msg_cache_buffers->recycle(shared_buffer_);
             goto cleanup;
         }
     }
 
-    srs_freep(shared_buffer);
+    srs_freep(shared_buffer_);
 
 cleanup:
-    shared_buffer = NULL;
+    shared_buffer_ = NULL;
     actual_buffer_size_ = 0;
 }
 
@@ -870,28 +870,28 @@ char* SrsRtpPacket2::wrap(int size)
     actual_buffer_size_ = size;
 
     // If the buffer is large enough, reuse it.
-    if (shared_buffer && shared_buffer->size >= size) {
-        return shared_buffer->payload;
+    if (shared_buffer_ && shared_buffer_->size >= size) {
+        return shared_buffer_->payload;
     }
 
     // Create a large enough message, with under-layer buffer.
     while (true) {
-        srs_freep(shared_buffer);
-        shared_buffer = _srs_rtp_msg_cache_buffers->allocate();
+        srs_freep(shared_buffer_);
+        shared_buffer_ = _srs_rtp_msg_cache_buffers->allocate();
 
         // If got a cached message(which has payload), but it's too small,
         // we free it and allocate a larger one.
-        if (shared_buffer->payload && shared_buffer->size < size) {
+        if (shared_buffer_->payload && shared_buffer_->size < size) {
             ++_srs_pps_objs_rothers->sugar;
             continue;
         }
 
         // Create under-layer buffer for new message
-        if (!shared_buffer->payload) {
+        if (!shared_buffer_->payload) {
             // For RTC, we use larger under-layer buffer for each packet.
             int nb_buffer = srs_max(size, kRtpPacketSize);
             char* buf = new char[nb_buffer];
-            shared_buffer->wrap(buf, nb_buffer);
+            shared_buffer_->wrap(buf, nb_buffer);
 
             ++_srs_pps_objs_rbuf->sugar;
         }
@@ -899,7 +899,7 @@ char* SrsRtpPacket2::wrap(int size)
         break;
     }
 
-    return shared_buffer->payload;
+    return shared_buffer_->payload;
 }
 
 char* SrsRtpPacket2::wrap(char* data, int size)
@@ -914,12 +914,12 @@ char* SrsRtpPacket2::wrap(SrsSharedPtrMessage* msg)
     // Generally, the wrap(msg) is used for RTMP to RTC, which is not generated by RTC,
     // so we do not recycle the msg. It's ok to directly free the msg, event the msg is
     // allocated by object cache manager.
-    srs_freep(shared_buffer);
+    srs_freep(shared_buffer_);
 
     // Copy from the new message.
-    shared_buffer = msg->copy();
+    shared_buffer_ = msg->copy();
     // If we wrap a message, the size of packet equals to the message size.
-    actual_buffer_size_ = shared_buffer->size;
+    actual_buffer_size_ = shared_buffer_->size;
 
     return msg->payload;
 }
@@ -931,14 +931,14 @@ SrsRtpPacket2* SrsRtpPacket2::copy()
     // We got packet from cache, the payload and message MUST be NULL,
     // because we had clear it in recycle.
     //srs_assert(!cp->payload_);
-    //srs_assert(!cp->shared_buffer);
+    //srs_assert(!cp->shared_buffer_);
 
     cp->header = header;
     cp->payload_ = payload_? payload_->copy():NULL;
     cp->payload_type_ = payload_type_;
 
     cp->nalu_type = nalu_type;
-    cp->shared_buffer = shared_buffer->copy2();
+    cp->shared_buffer_ = shared_buffer_->copy2();
     cp->actual_buffer_size_ = actual_buffer_size_;
     cp->frame_type = frame_type;
 
diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
index da885d4d5..5c29d67b5 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.hpp
@@ -290,7 +290,7 @@ private:
 private:
     // The original shared message, all RTP packets can refer to its data.
     // Note that the size of shared msg, is not the packet size, it's a larger aligned buffer.
-    SrsSharedPtrMessage* shared_buffer;
+    SrsSharedPtrMessage* shared_buffer_;
     // The size of original packet.
     int actual_buffer_size_;
 // Helper fields.

From 50860325dd230a0a3667e2132d7a6a31cc870d3d Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 18:22:04 +0800
Subject: [PATCH 069/102] RTC: Fix copy RTP packet bug

---
 trunk/src/kernel/srs_kernel_rtc_rtp.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
index cbfe372af..30d42e017 100644
--- a/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
+++ b/trunk/src/kernel/srs_kernel_rtc_rtp.cpp
@@ -938,7 +938,7 @@ SrsRtpPacket2* SrsRtpPacket2::copy()
     cp->payload_type_ = payload_type_;
 
     cp->nalu_type = nalu_type;
-    cp->shared_buffer_ = shared_buffer_->copy2();
+    cp->shared_buffer_ = shared_buffer_? shared_buffer_->copy2() : NULL;
     cp->actual_buffer_size_ = actual_buffer_size_;
     cp->frame_type = frame_type;
 

From f63441413d62f1914f554c48c4a5a316e3df4cc5 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 18:51:27 +0800
Subject: [PATCH 070/102] RTC: Support disable the NACK no-copy, enable copy by
 default

---
 trunk/conf/full.conf                 |  3 +++
 trunk/src/app/srs_app_config.cpp     | 22 ++++++++++++++++++++
 trunk/src/app/srs_app_config.hpp     |  1 +
 trunk/src/app/srs_app_rtc_conn.cpp   | 30 ++++++++++++++++++++++++++--
 trunk/src/app/srs_app_rtc_conn.hpp   |  2 ++
 trunk/src/app/srs_app_rtc_source.cpp | 18 +++++++++++++----
 trunk/src/app/srs_app_rtc_source.hpp | 13 ++++++++++--
 7 files changed, 81 insertions(+), 8 deletions(-)

diff --git a/trunk/conf/full.conf b/trunk/conf/full.conf
index 8cdbe363e..fa30db474 100644
--- a/trunk/conf/full.conf
+++ b/trunk/conf/full.conf
@@ -578,6 +578,9 @@ vhost rtc.vhost.srs.com {
         # Whether support NACK.
         # default: on
         enabled on;
+        # Whether directly use the packet, avoid copy.
+        # default: off
+        no_copy off;
     }
     # For TWCC.
     twcc {
diff --git a/trunk/src/app/srs_app_config.cpp b/trunk/src/app/srs_app_config.cpp
index 164def7ef..fa16cc1aa 100644
--- a/trunk/src/app/srs_app_config.cpp
+++ b/trunk/src/app/srs_app_config.cpp
@@ -5249,6 +5249,28 @@ bool SrsConfig::get_rtc_nack_enabled(string vhost)
     return SRS_CONF_PERFER_TRUE(conf->arg0());
 }
 
+bool SrsConfig::get_rtc_nack_no_copy(string vhost)
+{
+    static bool DEFAULT = false;
+
+    SrsConfDirective* conf = get_vhost(vhost);
+    if (!conf) {
+        return DEFAULT;
+    }
+
+    conf = conf->get("nack");
+    if (!conf) {
+        return DEFAULT;
+    }
+
+    conf = conf->get("no_copy");
+    if (!conf || conf->arg0().empty()) {
+        return DEFAULT;
+    }
+
+    return SRS_CONF_PERFER_FALSE(conf->arg0());
+}
+
 bool SrsConfig::get_rtc_twcc_enabled(string vhost)
 {
     static bool DEFAULT = true;
diff --git a/trunk/src/app/srs_app_config.hpp b/trunk/src/app/srs_app_config.hpp
index a027e5f2f..31e174dc2 100644
--- a/trunk/src/app/srs_app_config.hpp
+++ b/trunk/src/app/srs_app_config.hpp
@@ -563,6 +563,7 @@ public:
     std::string get_rtc_dtls_version(std::string vhost);
     int get_rtc_drop_for_pt(std::string vhost);
     bool get_rtc_nack_enabled(std::string vhost);
+    bool get_rtc_nack_no_copy(std::string vhost);
     bool get_rtc_twcc_enabled(std::string vhost);
 
 // vhost specified section
diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index 68a581460..f0c9d18e6 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -381,6 +381,7 @@ SrsRtcPlayStream::SrsRtcPlayStream(SrsRtcConnection* s, const SrsContextId& cid)
     realtime = true;
 
     nack_enabled_ = false;
+    nack_no_copy_ = false;
 
     _srs_config->subscribe(this);
     timer_ = new SrsHourGlass("play", this, 1000 * SRS_UTIME_MILLISECONDS);
@@ -446,7 +447,19 @@ srs_error_t SrsRtcPlayStream::initialize(SrsRequest* req, std::map<uint32_t, Srs
 
     // TODO: FIXME: Support reload.
     nack_enabled_ = _srs_config->get_rtc_nack_enabled(req->vhost);
-    srs_trace("RTC player nack=%d", nack_enabled_);
+    nack_no_copy_ = _srs_config->get_rtc_nack_no_copy(req->vhost);
+    srs_trace("RTC player nack=%d, nnc=%d", nack_enabled_, nack_no_copy_);
+
+    // Setup tracks.
+    for (map<uint32_t, SrsRtcAudioSendTrack*>::iterator it = audio_tracks_.begin(); it != audio_tracks_.end(); ++it) {
+        SrsRtcAudioSendTrack* track = it->second;
+        track->set_nack_no_copy(nack_no_copy_);
+    }
+
+    for (map<uint32_t, SrsRtcVideoSendTrack*>::iterator it = video_tracks_.begin(); it != video_tracks_.end(); ++it) {
+        SrsRtcVideoSendTrack* track = it->second;
+        track->set_nack_no_copy(nack_no_copy_);
+    }
 
     // Update stat for session.
     session_->stat_->nn_subscribers++;
@@ -849,6 +862,7 @@ SrsRtcPublishStream::SrsRtcPublishStream(SrsRtcConnection* session, const SrsCon
     source = NULL;
     nn_simulate_nack_drop = 0;
     nack_enabled_ = false;
+    nack_no_copy_ = false;
     pt_to_drop_ = 0;
 
     nn_audio_frames = 0;
@@ -923,10 +937,22 @@ srs_error_t SrsRtcPublishStream::initialize(SrsRequest* r, SrsRtcStreamDescripti
     }
 
     nack_enabled_ = _srs_config->get_rtc_nack_enabled(req->vhost);
+    nack_no_copy_ = _srs_config->get_rtc_nack_no_copy(req->vhost);
     pt_to_drop_ = (uint16_t)_srs_config->get_rtc_drop_for_pt(req->vhost);
     twcc_enabled_ = _srs_config->get_rtc_twcc_enabled(req->vhost);
 
-    srs_trace("RTC publisher nack=%d, pt-drop=%u, twcc=%u/%d", nack_enabled_, pt_to_drop_, twcc_enabled_, twcc_id);
+    srs_trace("RTC publisher nack=%d, nnc=%d, pt-drop=%u, twcc=%u/%d", nack_enabled_, nack_no_copy_, pt_to_drop_, twcc_enabled_, twcc_id);
+
+    // Setup tracks.
+    for (int i = 0; i < (int)audio_tracks_.size(); i++) {
+        SrsRtcAudioRecvTrack* track = audio_tracks_.at(i);
+        track->set_nack_no_copy(nack_no_copy_);
+    }
+
+    for (int i = 0; i < (int)video_tracks_.size(); i++) {
+        SrsRtcVideoRecvTrack* track = video_tracks_.at(i);
+        track->set_nack_no_copy(nack_no_copy_);
+    }
 
     // Update stat for session.
     session_->stat_->nn_publishers++;
diff --git a/trunk/src/app/srs_app_rtc_conn.hpp b/trunk/src/app/srs_app_rtc_conn.hpp
index 4d662320b..4f0373a46 100644
--- a/trunk/src/app/srs_app_rtc_conn.hpp
+++ b/trunk/src/app/srs_app_rtc_conn.hpp
@@ -233,6 +233,7 @@ private:
     bool realtime;
     // Whether enabled nack.
     bool nack_enabled_;
+    bool nack_no_copy_;
 private:
     // Whether palyer started.
     bool is_started;
@@ -287,6 +288,7 @@ private:
     uint16_t pt_to_drop_;
     // Whether enabled nack.
     bool nack_enabled_;
+    bool nack_no_copy_;
     bool twcc_enabled_;
 private:
     bool request_keyframe_;
diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index 429b949c7..cc328b176 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -1729,6 +1729,7 @@ SrsRtcRecvTrack::SrsRtcRecvTrack(SrsRtcConnection* session, SrsRtcTrackDescripti
     session_ = session;
     track_desc_ = track_desc->copy();
     statistic_ = new SrsRtcTrackStatistic();
+    nack_no_copy_ = false;
 
     if (is_audio) {
         rtp_queue_ = new SrsRtpRingBuffer(100);
@@ -1838,8 +1839,12 @@ srs_error_t SrsRtcRecvTrack::on_nack(SrsRtpPacket2** ppkt)
 
     // insert into video_queue and audio_queue
     // We directly use the pkt, never copy it, so we should set the pkt to NULL.
-    rtp_queue_->set(seq, pkt);
-    *ppkt = NULL;
+    if (nack_no_copy_) {
+        rtp_queue_->set(seq, pkt);
+        *ppkt = NULL;
+    } else {
+        rtp_queue_->set(seq, pkt->copy());
+    }
 
     return err;
 }
@@ -1983,6 +1988,7 @@ SrsRtcSendTrack::SrsRtcSendTrack(SrsRtcConnection* session, SrsRtcTrackDescripti
     session_ = session;
     track_desc_ = track_desc->copy();
     statistic_ = new SrsRtcTrackStatistic();
+    nack_no_copy_ = false;
 
     if (is_audio) {
         rtp_queue_ = new SrsRtpRingBuffer(100);
@@ -2058,8 +2064,12 @@ srs_error_t SrsRtcSendTrack::on_nack(SrsRtpPacket2** ppkt)
 
     // insert into video_queue and audio_queue
     // We directly use the pkt, never copy it, so we should set the pkt to NULL.
-    rtp_queue_->set(seq, pkt);
-    *ppkt = NULL;
+    if (nack_no_copy_) {
+        rtp_queue_->set(seq, pkt);
+        *ppkt = NULL;
+    } else {
+        rtp_queue_->set(seq, pkt->copy());
+    }
 
     return err;
 }
diff --git a/trunk/src/app/srs_app_rtc_source.hpp b/trunk/src/app/srs_app_rtc_source.hpp
index db187faf6..8f29946f3 100644
--- a/trunk/src/app/srs_app_rtc_source.hpp
+++ b/trunk/src/app/srs_app_rtc_source.hpp
@@ -512,11 +512,14 @@ class SrsRtcRecvTrack
 protected:
     SrsRtcTrackDescription* track_desc_;
     SrsRtcTrackStatistic* statistic_;
-
+protected:
     SrsRtcConnection* session_;
     SrsRtpRingBuffer* rtp_queue_;
     SrsRtpNackForReceiver* nack_receiver_;
-
+private:
+    // By config, whether no copy.
+    bool nack_no_copy_;
+protected:
     // send report ntp and received time.
     SrsNtp last_sender_report_ntp;
     uint64_t last_sender_report_sys_time;
@@ -524,6 +527,8 @@ public:
     SrsRtcRecvTrack(SrsRtcConnection* session, SrsRtcTrackDescription* stream_descs, bool is_audio);
     virtual ~SrsRtcRecvTrack();
 public:
+    // SrsRtcSendTrack::set_nack_no_copy
+    void set_nack_no_copy(bool v) { nack_no_copy_ = v; }
     bool has_ssrc(uint32_t ssrc);
     uint32_t get_ssrc();
     void update_rtt(int rtt);
@@ -580,12 +585,16 @@ protected:
     // NACK ARQ ring buffer.
     SrsRtpRingBuffer* rtp_queue_;
 private:
+    // By config, whether no copy.
+    bool nack_no_copy_;
     // The pithy print for special stage.
     SrsErrorPithyPrint* nack_epp;
 public:
     SrsRtcSendTrack(SrsRtcConnection* session, SrsRtcTrackDescription* track_desc, bool is_audio);
     virtual ~SrsRtcSendTrack();
 public:
+    // SrsRtcSendTrack::set_nack_no_copy
+    void set_nack_no_copy(bool v) { nack_no_copy_ = v; }
     bool has_ssrc(uint32_t ssrc);
     SrsRtpPacket2* fetch_rtp_packet(uint16_t seq);
     bool set_track_status(bool active);

From 58924d41b1664eb717d8216193e3e90e59b6b8bf Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 20:27:34 +0800
Subject: [PATCH 071/102] RTC: Support high performance NO-COPY-NACK. 4.0.76

---
 README.md                            | 1 +
 trunk/src/core/srs_core_version4.hpp | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 8ef8ca3d1..cfc264ee1 100755
--- a/README.md
+++ b/README.md
@@ -156,6 +156,7 @@ For previous versions, please read:
 
 ## V4 changes
 
+* v4.0, 2021-02-28, RTC: Support high performance NO-COPY-NACK. 4.0.76
 * v4.0, 2021-02-27, RTC: Support object cache pool. 4.0.75
 * v4.0, 2021-02-12, RTC: Support high performance timer about 25ms resolution. 4.0.72
 * v4.0, 2021-02-10, RTC: Refine performance about 700+ streams. 4.0.71
diff --git a/trunk/src/core/srs_core_version4.hpp b/trunk/src/core/srs_core_version4.hpp
index 405bea09e..05bc29894 100644
--- a/trunk/src/core/srs_core_version4.hpp
+++ b/trunk/src/core/srs_core_version4.hpp
@@ -24,6 +24,6 @@
 #ifndef SRS_CORE_VERSION4_HPP
 #define SRS_CORE_VERSION4_HPP
 
-#define SRS_VERSION4_REVISION 75
+#define SRS_VERSION4_REVISION 76
 
 #endif

From 781cd8e9de48adcc3009434bacafc532ed5296dd Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 21:58:39 +0800
Subject: [PATCH 072/102] Update README

---
 README.md | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)

diff --git a/README.md b/README.md
index cfc264ee1..d1b09747e 100755
--- a/README.md
+++ b/README.md
@@ -156,14 +156,10 @@ For previous versions, please read:
 
 ## V4 changes
 
-* v4.0, 2021-02-28, RTC: Support high performance NO-COPY-NACK. 4.0.76
-* v4.0, 2021-02-27, RTC: Support object cache pool. 4.0.75
-* v4.0, 2021-02-12, RTC: Support high performance timer about 25ms resolution. 4.0.72
-* v4.0, 2021-02-10, RTC: Refine performance about 700+ streams. 4.0.71
-* v4.0, 2021-02-08, RTC: Print stat for pli and timer every 5s. 4.0.70
-* v4.0, 2021-02-07, RTC: Parse PT fast and refine udp handler. 4.0.69
-* v4.0, 2021-02-05, RTC: Refine UDP packet peer fast id. 4.0.68
-* v4.0, 2021-02-04, RTC: Reuse UDP socket to receive packet. 4.0.67
+* v4.0, 2021-02-28, RTC: Support high performance [NO-COPY-NACK](https://github.com/ossrs/srs/commit/36ea67359e55c94ab044cee4b6a4ec901a83a287#commitcomment-47654868). 4.0.76
+* v4.0, 2021-02-27, RTC: Support [Object Cache Pool](https://github.com/ossrs/srs/commit/14bfc98122bba369572417c19ebb2a61b373fc45#commitcomment-47655008) for performance. 4.0.75
+* v4.0, 2021-02-12, RTC: Support [High Resolution(about 25ms) Timer](https://github.com/ossrs/srs/commit/c5d2027f9af77fc2d34a6b6ca941c0f0fbdd10c4#commitcomment-47655747). 4.0.72
+* v4.0, 2021-02-10, RTC: [Improve performance about 700+](https://github.com/ossrs/srs/commit/b431ad738c39f34a5a0a39e81beb7854223db761#commitcomment-47655935) streams. 4.0.71
 * v4.0, 2021-02-04, At least wait 1ms when <1ms, to avoid epoll_wait spin loop. 4.0.66
 * v4.0, 2021-01-31, Enable -std=c++11 by default. 4.0.65
 * v4.0, 2021-01-25, Enable --nasm and --srtp-asm by default for performance. 4.0.64

From eaf9ec6de860adde30b27161fa260b08c96bfd56 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Sun, 28 Feb 2021 22:02:24 +0800
Subject: [PATCH 073/102] Update README

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index d1b09747e..dd3c6629d 100755
--- a/README.md
+++ b/README.md
@@ -156,7 +156,7 @@ For previous versions, please read:
 
 ## V4 changes
 
-* v4.0, 2021-02-28, RTC: Support high performance [NO-COPY-NACK](https://github.com/ossrs/srs/commit/36ea67359e55c94ab044cee4b6a4ec901a83a287#commitcomment-47654868). 4.0.76
+* v4.0, 2021-02-28, RTC: Support high performance [Zero Copy NACK](https://github.com/ossrs/srs/commit/36ea67359e55c94ab044cee4b6a4ec901a83a287#commitcomment-47654868). 4.0.76
 * v4.0, 2021-02-27, RTC: Support [Object Cache Pool](https://github.com/ossrs/srs/commit/14bfc98122bba369572417c19ebb2a61b373fc45#commitcomment-47655008) for performance. 4.0.75
 * v4.0, 2021-02-12, RTC: Support [High Resolution(about 25ms) Timer](https://github.com/ossrs/srs/commit/c5d2027f9af77fc2d34a6b6ca941c0f0fbdd10c4#commitcomment-47655747). 4.0.72
 * v4.0, 2021-02-10, RTC: [Improve performance about 700+](https://github.com/ossrs/srs/commit/b431ad738c39f34a5a0a39e81beb7854223db761#commitcomment-47655935) streams. 4.0.71

From 969b94784926fa342fa9a6d5cd30c386da031f93 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Tue, 2 Mar 2021 20:51:31 +0800
Subject: [PATCH 074/102] Hotfix 4.0.76, fix build fail for FFmpeg-fit CentOS6

---
 trunk/configure | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/trunk/configure b/trunk/configure
index 02dc2a0cc..e5bb595ba 100755
--- a/trunk/configure
+++ b/trunk/configure
@@ -193,7 +193,7 @@ if [[ $SRS_GCOV == YES ]]; then
 fi
 
 # For FFMPEG/RTC.
-if [[ $SRS_RTC == YES && $SRS_NASM == NO && $SRS_OSX == NO ]]; then
+if [[ $SRS_RTC == YES && $SRS_FFMPEG_FIT == YES ]]; then
     SrsLinkOptions="${SrsLinkOptions} -lrt";
 fi
 

From 57f16299f4fb34c2307e435008782f0212df90df Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Wed, 3 Mar 2021 21:15:26 +0800
Subject: [PATCH 075/102] Fix #2219, Ubuntu build fail. Add CI for ubuntu20

---
 .circleci/config.yml                 | 14 ++++++++++++--
 trunk/auto/setup_variables.sh        |  1 +
 trunk/src/core/srs_core_version4.hpp |  2 +-
 3 files changed, 14 insertions(+), 3 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index d62fc838d..1bd67557b 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -1,6 +1,6 @@
 version: 2
 jobs:
-  build:
+  build-centos7:
     docker:
       - image: ossrs/srs:dev
     steps:
@@ -9,6 +9,15 @@ jobs:
           cd trunk &&
           ./configure --gb28181=off --utest=off --srtp-nasm=off && make &&
           ./configure --gb28181=on --utest=on --srtp-nasm=on && make clean && make
+  build-ubuntu20:
+    docker:
+      - image: ossrs/srs:ubuntu20
+    steps:
+      - checkout
+      - run: |
+          cd trunk &&
+          ./configure --gb28181=off --utest=off --srtp-nasm=off && make &&
+          ./configure --gb28181=on --utest=on --srtp-nasm=on && make clean && make
   test:
     docker:
       - image: ossrs/srs:dev
@@ -22,5 +31,6 @@ workflows:
   version: 2
   build_and_test:
     jobs:
-      - build
+      - build-centos7
+      - build-ubuntu20
       - test
diff --git a/trunk/auto/setup_variables.sh b/trunk/auto/setup_variables.sh
index cf26ea0c3..1a1bcb4d1 100755
--- a/trunk/auto/setup_variables.sh
+++ b/trunk/auto/setup_variables.sh
@@ -13,6 +13,7 @@ if [[ $OS_KERNEL_NAME == Darwin ]]; then
   SRS_PLATFORM="${SRS_PLATFORM}-${GCC_VERSION}"
 else
   GCC_VERSION="GCC$(gcc --version 2>/dev/null|grep gcc|awk '{print $3}')"
+  echo $GCC_VERSION| grep '-' >/dev/null && GCC_VERSION=$(echo $GCC_VERSION| awk -F '-' '{print$1}')
   SRS_PLATFORM="${SRS_PLATFORM}-${GCC_VERSION}"
 fi
 # Use isolate cache for different SRS version.
diff --git a/trunk/src/core/srs_core_version4.hpp b/trunk/src/core/srs_core_version4.hpp
index 05bc29894..11c87cb3a 100644
--- a/trunk/src/core/srs_core_version4.hpp
+++ b/trunk/src/core/srs_core_version4.hpp
@@ -24,6 +24,6 @@
 #ifndef SRS_CORE_VERSION4_HPP
 #define SRS_CORE_VERSION4_HPP
 
-#define SRS_VERSION4_REVISION 76
+#define SRS_VERSION4_REVISION 77
 
 #endif

From 6b2eb43e5cfa6f689696e82adc497b34b7d5b28f Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Wed, 3 Mar 2021 21:37:15 +0800
Subject: [PATCH 076/102] Fix #2219, Refine CI for ubuntu20

---
 .circleci/config.yml | 30 +++++++++++++++++++-----------
 1 file changed, 19 insertions(+), 11 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 1bd67557b..b3fe5f8a1 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -1,23 +1,29 @@
 version: 2
 jobs:
-  build-centos7:
+  build-centos7-default:
     docker:
       - image: ossrs/srs:dev
     steps:
       - checkout
-      - run: |
-          cd trunk &&
-          ./configure --gb28181=off --utest=off --srtp-nasm=off && make &&
-          ./configure --gb28181=on --utest=on --srtp-nasm=on && make clean && make
+      - run: cd trunk && ./configure && make
+  build-centos7-noasm:
+    docker:
+      - image: ossrs/srs:dev
+    steps:
+      - checkout
+      - run: cd trunk && ./configure --nasm=off --srtp-nasm=off && make &&
+  build-centos7-gb28181:
+    docker:
+      - image: ossrs/srs:dev
+    steps:
+      - checkout
+      - run: cd trunk && ./configure --gb28181=on && make
   build-ubuntu20:
     docker:
       - image: ossrs/srs:ubuntu20
     steps:
       - checkout
-      - run: |
-          cd trunk &&
-          ./configure --gb28181=off --utest=off --srtp-nasm=off && make &&
-          ./configure --gb28181=on --utest=on --srtp-nasm=on && make clean && make
+      - run: cd trunk && ./configure && make
   test:
     docker:
       - image: ossrs/srs:dev
@@ -25,12 +31,14 @@ jobs:
       - checkout
       - run: |
           cd trunk &&
-          ./configure --gb28181=on --srtp-nasm=on --utest=on --gcov=on && make &&
+          ./configure --gb28181=on --utest=on --gcov=on && make &&
           ./objs/srs_utest && bash auto/coverage.sh
 workflows:
   version: 2
   build_and_test:
     jobs:
-      - build-centos7
+      - build-centos7-default
+      - build-centos7-noasm
+      - build-centos7-gb28181
       - build-ubuntu20
       - test

From feca8f25783fcf06542a2bddf218d3f57c6dc1ae Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Wed, 3 Mar 2021 21:39:17 +0800
Subject: [PATCH 077/102] Fix #2219, Refine CI for ubuntu20

---
 .circleci/config.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index b3fe5f8a1..b5aa81f9a 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -11,7 +11,7 @@ jobs:
       - image: ossrs/srs:dev
     steps:
       - checkout
-      - run: cd trunk && ./configure --nasm=off --srtp-nasm=off && make &&
+      - run: cd trunk && ./configure --nasm=off --srtp-nasm=off && make
   build-centos7-gb28181:
     docker:
       - image: ossrs/srs:dev

From 71876361019ad2a7244a5b150b6f5d483b620ef0 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Wed, 3 Mar 2021 21:59:06 +0800
Subject: [PATCH 078/102] Fix #2219, Refine CI for ubuntu20

---
 .circleci/config.yml | 23 ++++++-----------------
 1 file changed, 6 insertions(+), 17 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index b5aa81f9a..e185dbbeb 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -1,23 +1,14 @@
 version: 2
 jobs:
-  build-centos7-default:
+  build-centos7:
     docker:
       - image: ossrs/srs:dev
     steps:
       - checkout
-      - run: cd trunk && ./configure && make
-  build-centos7-noasm:
-    docker:
-      - image: ossrs/srs:dev
-    steps:
-      - checkout
-      - run: cd trunk && ./configure --nasm=off --srtp-nasm=off && make
-  build-centos7-gb28181:
-    docker:
-      - image: ossrs/srs:dev
-    steps:
-      - checkout
-      - run: cd trunk && ./configure --gb28181=on && make
+      - run: |
+          cd trunk && ./configure && make &&
+          ./configure --nasm=off --srtp-nasm=off && make clean && make &&
+          ./configure --gb28181=on && make clean && make
   build-ubuntu20:
     docker:
       - image: ossrs/srs:ubuntu20
@@ -37,8 +28,6 @@ workflows:
   version: 2
   build_and_test:
     jobs:
-      - build-centos7-default
-      - build-centos7-noasm
-      - build-centos7-gb28181
+      - build-centos7
       - build-ubuntu20
       - test

From f4331be2ef572dcd90711cc3cd91d5e879adb02c Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Wed, 3 Mar 2021 22:09:24 +0800
Subject: [PATCH 079/102] For #2219, Remove ubuntu20 CI

---
 .circleci/config.yml | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index e185dbbeb..3a5dbe4cc 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -9,12 +9,6 @@ jobs:
           cd trunk && ./configure && make &&
           ./configure --nasm=off --srtp-nasm=off && make clean && make &&
           ./configure --gb28181=on && make clean && make
-  build-ubuntu20:
-    docker:
-      - image: ossrs/srs:ubuntu20
-    steps:
-      - checkout
-      - run: cd trunk && ./configure && make
   test:
     docker:
       - image: ossrs/srs:dev
@@ -29,5 +23,4 @@ workflows:
   build_and_test:
     jobs:
       - build-centos7
-      - build-ubuntu20
       - test

From d4b8a57cf7a5eb2e7f9c331df83c1f3487ba3058 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Mon, 1 Mar 2021 13:14:21 +0800
Subject: [PATCH 080/102] Enable Object Cache and Zero Copy Nack by default.
 4.0.77

---
 README.md                        |  1 +
 trunk/conf/full.conf             | 12 ++++++------
 trunk/src/app/srs_app_config.cpp | 12 ++++++------
 3 files changed, 13 insertions(+), 12 deletions(-)

diff --git a/README.md b/README.md
index dd3c6629d..a9bed81fd 100755
--- a/README.md
+++ b/README.md
@@ -156,6 +156,7 @@ For previous versions, please read:
 
 ## V4 changes
 
+* v4.0, 2021-03-01, Enable Object Cache and Zero Copy Nack by default. 4.0.77
 * v4.0, 2021-02-28, RTC: Support high performance [Zero Copy NACK](https://github.com/ossrs/srs/commit/36ea67359e55c94ab044cee4b6a4ec901a83a287#commitcomment-47654868). 4.0.76
 * v4.0, 2021-02-27, RTC: Support [Object Cache Pool](https://github.com/ossrs/srs/commit/14bfc98122bba369572417c19ebb2a61b373fc45#commitcomment-47655008) for performance. 4.0.75
 * v4.0, 2021-02-12, RTC: Support [High Resolution(about 25ms) Timer](https://github.com/ossrs/srs/commit/c5d2027f9af77fc2d34a6b6ca941c0f0fbdd10c4#commitcomment-47655747). 4.0.72
diff --git a/trunk/conf/full.conf b/trunk/conf/full.conf
index fa30db474..62307d2b5 100644
--- a/trunk/conf/full.conf
+++ b/trunk/conf/full.conf
@@ -494,8 +494,8 @@ rtc_server {
     # For RTP packet and its payload cache.
     rtp_cache {
         # Whether enable the RTP packet cache.
-        # default: off
-        enabled off;
+        # default: on
+        enabled on;
         # The cache size for rtp packet in MB, each object is about 300B..
         # default: 64
         pkt_size 64.0;
@@ -506,8 +506,8 @@ rtc_server {
     # For RTP shared message and the large buffer cache.
     rtp_msg_cache {
         #Whether enable the RTP message(a large buffer) cache.
-        # default: off
-        enabled off;
+        # default: on
+        enabled on;
         # The cache size for message object in MB, each object is about 40B.
         # default: 16
         msg_size 16.0;
@@ -579,8 +579,8 @@ vhost rtc.vhost.srs.com {
         # default: on
         enabled on;
         # Whether directly use the packet, avoid copy.
-        # default: off
-        no_copy off;
+        # default: on
+        no_copy on;
     }
     # For TWCC.
     twcc {
diff --git a/trunk/src/app/srs_app_config.cpp b/trunk/src/app/srs_app_config.cpp
index fa16cc1aa..a0e78dec6 100644
--- a/trunk/src/app/srs_app_config.cpp
+++ b/trunk/src/app/srs_app_config.cpp
@@ -4919,7 +4919,7 @@ SrsConfDirective* SrsConfig::get_rtc_server_rtp_cache()
 
 bool SrsConfig::get_rtc_server_rtp_cache_enabled()
 {
-    static bool DEFAULT = false;
+    static bool DEFAULT = true;
 
     SrsConfDirective* conf = get_rtc_server_rtp_cache();
     if (!conf) {
@@ -4931,7 +4931,7 @@ bool SrsConfig::get_rtc_server_rtp_cache_enabled()
         return DEFAULT;
     }
 
-    return SRS_CONF_PERFER_FALSE(conf->arg0());
+    return SRS_CONF_PERFER_TRUE(conf->arg0());
 }
 
 uint64_t SrsConfig::get_rtc_server_rtp_cache_pkt_size()
@@ -4985,7 +4985,7 @@ SrsConfDirective* SrsConfig::get_rtc_server_rtp_msg_cache()
 
 bool SrsConfig::get_rtc_server_rtp_msg_cache_enabled()
 {
-    static bool DEFAULT = false;
+    static bool DEFAULT = true;
 
     SrsConfDirective* conf = get_rtc_server_rtp_msg_cache();
     if (!conf) {
@@ -4997,7 +4997,7 @@ bool SrsConfig::get_rtc_server_rtp_msg_cache_enabled()
         return DEFAULT;
     }
 
-    return SRS_CONF_PERFER_FALSE(conf->arg0());
+    return SRS_CONF_PERFER_TRUE(conf->arg0());
 }
 
 uint64_t SrsConfig::get_rtc_server_rtp_msg_cache_msg_size()
@@ -5251,7 +5251,7 @@ bool SrsConfig::get_rtc_nack_enabled(string vhost)
 
 bool SrsConfig::get_rtc_nack_no_copy(string vhost)
 {
-    static bool DEFAULT = false;
+    static bool DEFAULT = true;
 
     SrsConfDirective* conf = get_vhost(vhost);
     if (!conf) {
@@ -5268,7 +5268,7 @@ bool SrsConfig::get_rtc_nack_no_copy(string vhost)
         return DEFAULT;
     }
 
-    return SRS_CONF_PERFER_FALSE(conf->arg0());
+    return SRS_CONF_PERFER_TRUE(conf->arg0());
 }
 
 bool SrsConfig::get_rtc_twcc_enabled(string vhost)

From 8f1c9923795143a2afc13d1def94a5500243b34e Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Mon, 1 Mar 2021 14:36:38 +0800
Subject: [PATCH 081/102] Refine code, rename drop to loss

---
 trunk/src/app/srs_app_rtc_server.cpp | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_server.cpp b/trunk/src/app/srs_app_rtc_server.cpp
index 45a4dc010..617337889 100644
--- a/trunk/src/app/srs_app_rtc_server.cpp
+++ b/trunk/src/app/srs_app_rtc_server.cpp
@@ -768,11 +768,11 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
         rnk_desc = buf;
     }
 
-    string drop_desc;
+    string loss_desc;
     SrsSnmpUdpStat* s = srs_get_udp_snmp_stat();
     if (s->rcv_buf_errors_delta || s->snd_buf_errors_delta) {
-        snprintf(buf, sizeof(buf), ", drop=(r:%d,s:%d)", s->rcv_buf_errors_delta, s->snd_buf_errors_delta);
-        drop_desc = buf;
+        snprintf(buf, sizeof(buf), ", loss=(r:%d,s:%d)", s->rcv_buf_errors_delta, s->snd_buf_errors_delta);
+        loss_desc = buf;
     }
 
     string fid_desc;
@@ -784,7 +784,7 @@ srs_error_t SrsRtcServer::notify(int type, srs_utime_t interval, srs_utime_t tic
 
     srs_trace("RTC: Server conns=%u%s%s%s%s%s%s%s",
         nn_rtc_conns,
-        rpkts_desc.c_str(), spkts_desc.c_str(), rtcp_desc.c_str(), snk_desc.c_str(), rnk_desc.c_str(), drop_desc.c_str(), fid_desc.c_str()
+        rpkts_desc.c_str(), spkts_desc.c_str(), rtcp_desc.c_str(), snk_desc.c_str(), rnk_desc.c_str(), loss_desc.c_str(), fid_desc.c_str()
     );
 
     return err;

From 96dbd7bced868ec21e92c7c727819b991012bfd6 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Mon, 1 Mar 2021 20:47:57 +0800
Subject: [PATCH 082/102] Upgrade openssl from 1.1.0e to 1.1.1b, with source
 code. 4.0.78

---
 README.md                                     |    1 +
 .../Configurations/00-base-templates.conf     |  356 +
 .../Configurations/10-main.conf               | 1802 ++++
 .../Configurations/15-android.conf            |  261 +
 .../Configurations/15-ios.conf                |   62 +
 .../Configurations/50-djgpp.conf              |   17 +
 .../Configurations/50-haiku.conf              |   30 +
 .../Configurations/50-masm.conf               |   23 +
 .../Configurations/50-win-onecore.conf        |   64 +
 .../Configurations/INTERNALS.Configure        |  136 +
 .../openssl-1.1-fit/Configurations/README     |  763 ++
 .../Configurations/README.design              |  623 ++
 .../Configurations/common.tmpl                |  221 +
 .../Configurations/common0.tmpl               |   31 +
 .../Configurations/descrip.mms.tmpl           | 1125 ++
 .../Configurations/shared-info.pl             |   82 +
 .../Configurations/unix-Makefile.tmpl         | 1253 +++
 .../Configurations/unix-checker.pm            |   22 +
 .../Configurations/windows-checker.pm         |   22 +
 .../Configurations/windows-makefile.tmpl      |  760 ++
 trunk/3rdparty/openssl-1.1-fit/Configure      | 3519 ++++++
 trunk/3rdparty/openssl-1.1-fit/LICENSE        |  125 +
 trunk/3rdparty/openssl-1.1-fit/README.md      |    3 +
 trunk/3rdparty/openssl-1.1-fit/apps/CA.pl.in  |  214 +
 .../3rdparty/openssl-1.1-fit/apps/app_rand.c  |   93 +
 trunk/3rdparty/openssl-1.1-fit/apps/apps.c    | 2752 +++++
 trunk/3rdparty/openssl-1.1-fit/apps/apps.h    |  634 ++
 .../3rdparty/openssl-1.1-fit/apps/asn1pars.c  |  357 +
 .../3rdparty/openssl-1.1-fit/apps/bf_prefix.c |  177 +
 .../3rdparty/openssl-1.1-fit/apps/build.info  |   38 +
 .../3rdparty/openssl-1.1-fit/apps/ca-cert.srl |    1 +
 .../3rdparty/openssl-1.1-fit/apps/ca-key.pem  |   16 +
 .../3rdparty/openssl-1.1-fit/apps/ca-req.pem  |   11 +
 trunk/3rdparty/openssl-1.1-fit/apps/ca.c      | 2606 +++++
 trunk/3rdparty/openssl-1.1-fit/apps/cert.pem  |   11 +
 trunk/3rdparty/openssl-1.1-fit/apps/ciphers.c |  266 +
 .../3rdparty/openssl-1.1-fit/apps/client.pem  |   52 +
 trunk/3rdparty/openssl-1.1-fit/apps/cms.c     | 1289 +++
 trunk/3rdparty/openssl-1.1-fit/apps/crl.c     |  342 +
 trunk/3rdparty/openssl-1.1-fit/apps/crl2p7.c  |  217 +
 .../openssl-1.1-fit/apps/ct_log_list.cnf      |    9 +
 .../apps/demoSRP/srp_verifier.txt             |    6 +
 .../apps/demoSRP/srp_verifier.txt.attr        |    1 +
 trunk/3rdparty/openssl-1.1-fit/apps/dgst.c    |  492 +
 .../3rdparty/openssl-1.1-fit/apps/dh1024.pem  |   10 +
 .../3rdparty/openssl-1.1-fit/apps/dh2048.pem  |   14 +
 .../3rdparty/openssl-1.1-fit/apps/dh4096.pem  |   19 +
 trunk/3rdparty/openssl-1.1-fit/apps/dhparam.c |  379 +
 .../3rdparty/openssl-1.1-fit/apps/dsa-ca.pem  |   47 +
 .../3rdparty/openssl-1.1-fit/apps/dsa-pca.pem |   47 +
 trunk/3rdparty/openssl-1.1-fit/apps/dsa.c     |  265 +
 .../3rdparty/openssl-1.1-fit/apps/dsa1024.pem |    9 +
 .../3rdparty/openssl-1.1-fit/apps/dsa512.pem  |    6 +
 trunk/3rdparty/openssl-1.1-fit/apps/dsap.pem  |    6 +
 .../3rdparty/openssl-1.1-fit/apps/dsaparam.c  |  258 +
 trunk/3rdparty/openssl-1.1-fit/apps/ec.c      |  283 +
 trunk/3rdparty/openssl-1.1-fit/apps/ecparam.c |  450 +
 trunk/3rdparty/openssl-1.1-fit/apps/enc.c     |  675 ++
 trunk/3rdparty/openssl-1.1-fit/apps/engine.c  |  489 +
 trunk/3rdparty/openssl-1.1-fit/apps/errstr.c  |   67 +
 trunk/3rdparty/openssl-1.1-fit/apps/gendsa.c  |  146 +
 trunk/3rdparty/openssl-1.1-fit/apps/genpkey.c |  322 +
 trunk/3rdparty/openssl-1.1-fit/apps/genrsa.c  |  201 +
 trunk/3rdparty/openssl-1.1-fit/apps/nseq.c    |  114 +
 trunk/3rdparty/openssl-1.1-fit/apps/ocsp.c    | 1621 +++
 .../openssl-1.1-fit/apps/openssl-vms.cnf      |  350 +
 trunk/3rdparty/openssl-1.1-fit/apps/openssl.c |  826 ++
 .../3rdparty/openssl-1.1-fit/apps/openssl.cnf |  350 +
 trunk/3rdparty/openssl-1.1-fit/apps/opt.c     |  898 ++
 trunk/3rdparty/openssl-1.1-fit/apps/passwd.c  |  853 ++
 .../openssl-1.1-fit/apps/pca-cert.srl         |    1 +
 .../3rdparty/openssl-1.1-fit/apps/pca-key.pem |   16 +
 .../3rdparty/openssl-1.1-fit/apps/pca-req.pem |   11 +
 trunk/3rdparty/openssl-1.1-fit/apps/pkcs12.c  |  968 ++
 trunk/3rdparty/openssl-1.1-fit/apps/pkcs7.c   |  198 +
 trunk/3rdparty/openssl-1.1-fit/apps/pkcs8.c   |  359 +
 trunk/3rdparty/openssl-1.1-fit/apps/pkey.c    |  243 +
 .../3rdparty/openssl-1.1-fit/apps/pkeyparam.c |  142 +
 trunk/3rdparty/openssl-1.1-fit/apps/pkeyutl.c |  525 +
 trunk/3rdparty/openssl-1.1-fit/apps/prime.c   |  133 +
 .../3rdparty/openssl-1.1-fit/apps/privkey.pem |   16 +
 trunk/3rdparty/openssl-1.1-fit/apps/progs.pl  |  181 +
 trunk/3rdparty/openssl-1.1-fit/apps/rand.c    |  133 +
 trunk/3rdparty/openssl-1.1-fit/apps/rehash.c  |  532 +
 trunk/3rdparty/openssl-1.1-fit/apps/req.c     | 1664 +++
 trunk/3rdparty/openssl-1.1-fit/apps/req.pem   |   11 +
 trunk/3rdparty/openssl-1.1-fit/apps/rsa.c     |  316 +
 .../3rdparty/openssl-1.1-fit/apps/rsa8192.pem |  101 +
 trunk/3rdparty/openssl-1.1-fit/apps/rsautl.c  |  282 +
 .../openssl-1.1-fit/apps/s1024key.pem         |   15 +
 .../openssl-1.1-fit/apps/s1024req.pem         |   11 +
 .../openssl-1.1-fit/apps/s512-key.pem         |    9 +
 .../openssl-1.1-fit/apps/s512-req.pem         |    8 +
 trunk/3rdparty/openssl-1.1-fit/apps/s_apps.h  |   89 +
 trunk/3rdparty/openssl-1.1-fit/apps/s_cb.c    | 1481 +++
 .../3rdparty/openssl-1.1-fit/apps/s_client.c  | 3544 ++++++
 .../3rdparty/openssl-1.1-fit/apps/s_server.c  | 3632 +++++++
 .../3rdparty/openssl-1.1-fit/apps/s_socket.c  |  395 +
 trunk/3rdparty/openssl-1.1-fit/apps/s_time.c  |  405 +
 .../3rdparty/openssl-1.1-fit/apps/server.pem  |   52 +
 .../3rdparty/openssl-1.1-fit/apps/server.srl  |    1 +
 .../3rdparty/openssl-1.1-fit/apps/server2.pem |   52 +
 trunk/3rdparty/openssl-1.1-fit/apps/sess_id.c |  191 +
 trunk/3rdparty/openssl-1.1-fit/apps/smime.c   |  647 ++
 trunk/3rdparty/openssl-1.1-fit/apps/speed.c   | 3691 +++++++
 trunk/3rdparty/openssl-1.1-fit/apps/spkac.c   |  202 +
 trunk/3rdparty/openssl-1.1-fit/apps/srp.c     |  613 ++
 .../3rdparty/openssl-1.1-fit/apps/storeutl.c  |  473 +
 .../3rdparty/openssl-1.1-fit/apps/testCA.pem  |    8 +
 trunk/3rdparty/openssl-1.1-fit/apps/testdsa.h |  260 +
 trunk/3rdparty/openssl-1.1-fit/apps/testrsa.h | 1960 ++++
 .../3rdparty/openssl-1.1-fit/apps/timeouts.h  |   17 +
 trunk/3rdparty/openssl-1.1-fit/apps/ts.c      |  986 ++
 trunk/3rdparty/openssl-1.1-fit/apps/tsget.in  |  200 +
 trunk/3rdparty/openssl-1.1-fit/apps/verify.c  |  322 +
 trunk/3rdparty/openssl-1.1-fit/apps/version.c |  194 +
 .../openssl-1.1-fit/apps/vms_decc_init.c      |  214 +
 .../openssl-1.1-fit/apps/vms_term_sock.c      |  591 +
 .../openssl-1.1-fit/apps/vms_term_sock.h      |   31 +
 .../openssl-1.1-fit/apps/win32_init.c         |  307 +
 trunk/3rdparty/openssl-1.1-fit/apps/x509.c    | 1196 +++
 trunk/3rdparty/openssl-1.1-fit/appveyor.yml   |   66 +
 trunk/3rdparty/openssl-1.1-fit/build.info     |  103 +
 trunk/3rdparty/openssl-1.1-fit/config         |  946 ++
 trunk/3rdparty/openssl-1.1-fit/config.com     |   93 +
 .../openssl-1.1-fit/crypto/LPdir_nyi.c        |   56 +
 .../openssl-1.1-fit/crypto/LPdir_unix.c       |  169 +
 .../openssl-1.1-fit/crypto/LPdir_vms.c        |  207 +
 .../openssl-1.1-fit/crypto/LPdir_win.c        |  214 +
 .../openssl-1.1-fit/crypto/LPdir_win32.c      |   41 +
 .../openssl-1.1-fit/crypto/LPdir_wince.c      |   44 +
 .../openssl-1.1-fit/crypto/aes/aes_cbc.c      |   24 +
 .../openssl-1.1-fit/crypto/aes/aes_cfb.c      |   43 +
 .../openssl-1.1-fit/crypto/aes/aes_core.c     | 1367 +++
 .../openssl-1.1-fit/crypto/aes/aes_ecb.c      |   26 +
 .../openssl-1.1-fit/crypto/aes/aes_ige.c      |  284 +
 .../openssl-1.1-fit/crypto/aes/aes_locl.h     |   42 +
 .../openssl-1.1-fit/crypto/aes/aes_misc.c     |   21 +
 .../openssl-1.1-fit/crypto/aes/aes_ofb.c      |   19 +
 .../openssl-1.1-fit/crypto/aes/aes_wrap.c     |   27 +
 .../openssl-1.1-fit/crypto/aes/aes_x86core.c  | 1074 ++
 .../openssl-1.1-fit/crypto/aes/asm/aes-586.pl | 3000 ++++++
 .../crypto/aes/asm/aes-armv4.pl               | 1245 +++
 .../crypto/aes/asm/aes-c64xplus.pl            | 1382 +++
 .../openssl-1.1-fit/crypto/aes/asm/aes-ia64.S | 1130 ++
 .../crypto/aes/asm/aes-mips.pl                | 2170 ++++
 .../crypto/aes/asm/aes-parisc.pl              | 1038 ++
 .../openssl-1.1-fit/crypto/aes/asm/aes-ppc.pl | 1459 +++
 .../crypto/aes/asm/aes-s390x.pl               | 2282 ++++
 .../crypto/aes/asm/aes-sparcv9.pl             | 1192 ++
 .../crypto/aes/asm/aes-x86_64.pl              | 2916 +++++
 .../crypto/aes/asm/aesfx-sparcv9.pl           | 1270 +++
 .../crypto/aes/asm/aesni-mb-x86_64.pl         | 1474 +++
 .../crypto/aes/asm/aesni-sha1-x86_64.pl       | 2140 ++++
 .../crypto/aes/asm/aesni-sha256-x86_64.pl     | 1770 +++
 .../crypto/aes/asm/aesni-x86.pl               | 3415 ++++++
 .../crypto/aes/asm/aesni-x86_64.pl            | 5141 +++++++++
 .../crypto/aes/asm/aesp8-ppc.pl               | 3807 +++++++
 .../crypto/aes/asm/aest4-sparcv9.pl           |  929 ++
 .../crypto/aes/asm/aesv8-armx.pl              | 1011 ++
 .../crypto/aes/asm/bsaes-armv7.pl             | 2491 +++++
 .../crypto/aes/asm/bsaes-x86_64.pl            | 3239 ++++++
 .../crypto/aes/asm/vpaes-armv8.pl             | 1277 +++
 .../crypto/aes/asm/vpaes-ppc.pl               | 1594 +++
 .../crypto/aes/asm/vpaes-x86.pl               |  916 ++
 .../crypto/aes/asm/vpaes-x86_64.pl            | 1241 +++
 .../openssl-1.1-fit/crypto/aes/build.info     |   64 +
 .../openssl-1.1-fit/crypto/alphacpuid.pl      |  257 +
 .../openssl-1.1-fit/crypto/aria/aria.c        | 1212 +++
 .../openssl-1.1-fit/crypto/aria/build.info    |    4 +
 .../openssl-1.1-fit/crypto/arm64cpuid.pl      |  147 +
 .../openssl-1.1-fit/crypto/arm_arch.h         |   84 +
 .../3rdparty/openssl-1.1-fit/crypto/armcap.c  |  214 +
 .../openssl-1.1-fit/crypto/armv4cpuid.pl      |  296 +
 .../openssl-1.1-fit/crypto/asn1/a_bitstr.c    |  216 +
 .../openssl-1.1-fit/crypto/asn1/a_d2i_fp.c    |  234 +
 .../openssl-1.1-fit/crypto/asn1/a_digest.c    |   67 +
 .../openssl-1.1-fit/crypto/asn1/a_dup.c       |   68 +
 .../openssl-1.1-fit/crypto/asn1/a_gentm.c     |   82 +
 .../openssl-1.1-fit/crypto/asn1/a_i2d_fp.c    |  111 +
 .../openssl-1.1-fit/crypto/asn1/a_int.c       |  630 ++
 .../openssl-1.1-fit/crypto/asn1/a_mbstr.c     |  343 +
 .../openssl-1.1-fit/crypto/asn1/a_object.c    |  383 +
 .../openssl-1.1-fit/crypto/asn1/a_octet.c     |   29 +
 .../openssl-1.1-fit/crypto/asn1/a_print.c     |   95 +
 .../openssl-1.1-fit/crypto/asn1/a_sign.c      |  241 +
 .../openssl-1.1-fit/crypto/asn1/a_strex.c     |  626 ++
 .../openssl-1.1-fit/crypto/asn1/a_strnid.c    |  219 +
 .../openssl-1.1-fit/crypto/asn1/a_time.c      |  553 +
 .../openssl-1.1-fit/crypto/asn1/a_type.c      |  134 +
 .../openssl-1.1-fit/crypto/asn1/a_utctm.c     |   98 +
 .../openssl-1.1-fit/crypto/asn1/a_utf8.c      |  188 +
 .../openssl-1.1-fit/crypto/asn1/a_verify.c    |  178 +
 .../openssl-1.1-fit/crypto/asn1/ameth_lib.c   |  451 +
 .../openssl-1.1-fit/crypto/asn1/asn1_err.c    |  350 +
 .../openssl-1.1-fit/crypto/asn1/asn1_gen.c    |  789 ++
 .../crypto/asn1/asn1_item_list.c              |   42 +
 .../crypto/asn1/asn1_item_list.h              |  178 +
 .../openssl-1.1-fit/crypto/asn1/asn1_lib.c    |  391 +
 .../openssl-1.1-fit/crypto/asn1/asn1_locl.h   |   83 +
 .../openssl-1.1-fit/crypto/asn1/asn1_par.c    |  375 +
 .../openssl-1.1-fit/crypto/asn1/asn_mime.c    |  963 ++
 .../openssl-1.1-fit/crypto/asn1/asn_moid.c    |  100 +
 .../openssl-1.1-fit/crypto/asn1/asn_mstbl.c   |  113 +
 .../openssl-1.1-fit/crypto/asn1/asn_pack.c    |   62 +
 .../openssl-1.1-fit/crypto/asn1/bio_asn1.c    |  444 +
 .../openssl-1.1-fit/crypto/asn1/bio_ndef.c    |  201 +
 .../openssl-1.1-fit/crypto/asn1/build.info    |   16 +
 .../openssl-1.1-fit/crypto/asn1/charmap.h     |   34 +
 .../openssl-1.1-fit/crypto/asn1/charmap.pl    |  119 +
 .../openssl-1.1-fit/crypto/asn1/d2i_pr.c      |  125 +
 .../openssl-1.1-fit/crypto/asn1/d2i_pu.c      |   77 +
 .../openssl-1.1-fit/crypto/asn1/evp_asn1.c    |  115 +
 .../openssl-1.1-fit/crypto/asn1/f_int.c       |  156 +
 .../openssl-1.1-fit/crypto/asn1/f_string.c    |  136 +
 .../openssl-1.1-fit/crypto/asn1/i2d_pr.c      |   33 +
 .../openssl-1.1-fit/crypto/asn1/i2d_pu.c      |   38 +
 .../openssl-1.1-fit/crypto/asn1/n_pkey.c      |   62 +
 .../openssl-1.1-fit/crypto/asn1/nsseq.c       |   34 +
 .../openssl-1.1-fit/crypto/asn1/p5_pbe.c      |   96 +
 .../openssl-1.1-fit/crypto/asn1/p5_pbev2.c    |  221 +
 .../openssl-1.1-fit/crypto/asn1/p5_scrypt.c   |  274 +
 .../openssl-1.1-fit/crypto/asn1/p8_pkey.c     |   80 +
 .../crypto/asn1/standard_methods.h            |   61 +
 .../openssl-1.1-fit/crypto/asn1/t_bitst.c     |   56 +
 .../openssl-1.1-fit/crypto/asn1/t_pkey.c      |   93 +
 .../openssl-1.1-fit/crypto/asn1/t_spki.c      |   56 +
 .../openssl-1.1-fit/crypto/asn1/tasn_dec.c    | 1160 ++
 .../openssl-1.1-fit/crypto/asn1/tasn_enc.c    |  609 ++
 .../openssl-1.1-fit/crypto/asn1/tasn_fre.c    |  208 +
 .../openssl-1.1-fit/crypto/asn1/tasn_new.c    |  349 +
 .../openssl-1.1-fit/crypto/asn1/tasn_prn.c    |  539 +
 .../openssl-1.1-fit/crypto/asn1/tasn_scn.c    |   65 +
 .../openssl-1.1-fit/crypto/asn1/tasn_typ.c    |   84 +
 .../openssl-1.1-fit/crypto/asn1/tasn_utl.c    |  253 +
 .../crypto/asn1/tbl_standard.h                |   61 +
 .../openssl-1.1-fit/crypto/asn1/x_algor.c     |   94 +
 .../openssl-1.1-fit/crypto/asn1/x_bignum.c    |  146 +
 .../openssl-1.1-fit/crypto/asn1/x_info.c      |   39 +
 .../openssl-1.1-fit/crypto/asn1/x_int64.c     |  291 +
 .../openssl-1.1-fit/crypto/asn1/x_long.c      |  201 +
 .../openssl-1.1-fit/crypto/asn1/x_pkey.c      |   47 +
 .../openssl-1.1-fit/crypto/asn1/x_sig.c       |   39 +
 .../openssl-1.1-fit/crypto/asn1/x_spki.c      |   28 +
 .../openssl-1.1-fit/crypto/asn1/x_val.c       |   20 +
 .../crypto/async/arch/async_null.c            |   23 +
 .../crypto/async/arch/async_null.h            |   30 +
 .../crypto/async/arch/async_posix.c           |   58 +
 .../crypto/async/arch/async_posix.h           |   58 +
 .../crypto/async/arch/async_win.c             |   55 +
 .../crypto/async/arch/async_win.h             |   36 +
 .../openssl-1.1-fit/crypto/async/async.c      |  451 +
 .../openssl-1.1-fit/crypto/async/async_err.c  |   51 +
 .../openssl-1.1-fit/crypto/async/async_locl.h |   77 +
 .../openssl-1.1-fit/crypto/async/async_wait.c |  213 +
 .../openssl-1.1-fit/crypto/async/build.info   |    4 +
 .../openssl-1.1-fit/crypto/bf/asm/bf-586.pl   |  149 +
 .../openssl-1.1-fit/crypto/bf/bf_cfb64.c      |   74 +
 .../openssl-1.1-fit/crypto/bf/bf_ecb.c        |   43 +
 .../openssl-1.1-fit/crypto/bf/bf_enc.c        |  175 +
 .../openssl-1.1-fit/crypto/bf/bf_locl.h       |   84 +
 .../openssl-1.1-fit/crypto/bf/bf_ofb64.c      |   61 +
 .../openssl-1.1-fit/crypto/bf/bf_pi.h         |  530 +
 .../openssl-1.1-fit/crypto/bf/bf_skey.c       |   67 +
 .../openssl-1.1-fit/crypto/bf/build.info      |    7 +
 .../openssl-1.1-fit/crypto/bio/b_addr.c       |  902 ++
 .../openssl-1.1-fit/crypto/bio/b_dump.c       |  148 +
 .../openssl-1.1-fit/crypto/bio/b_print.c      |  930 ++
 .../openssl-1.1-fit/crypto/bio/b_sock.c       |  369 +
 .../openssl-1.1-fit/crypto/bio/b_sock2.c      |  317 +
 .../openssl-1.1-fit/crypto/bio/bf_buff.c      |  475 +
 .../openssl-1.1-fit/crypto/bio/bf_lbuf.c      |  326 +
 .../openssl-1.1-fit/crypto/bio/bf_nbio.c      |  200 +
 .../openssl-1.1-fit/crypto/bio/bf_null.c      |  122 +
 .../openssl-1.1-fit/crypto/bio/bio_cb.c       |   98 +
 .../openssl-1.1-fit/crypto/bio/bio_err.c      |  145 +
 .../openssl-1.1-fit/crypto/bio/bio_lcl.h      |  190 +
 .../openssl-1.1-fit/crypto/bio/bio_lib.c      |  786 ++
 .../openssl-1.1-fit/crypto/bio/bio_meth.c     |  220 +
 .../openssl-1.1-fit/crypto/bio/bss_acpt.c     |  560 +
 .../openssl-1.1-fit/crypto/bio/bss_bio.c      |  808 ++
 .../openssl-1.1-fit/crypto/bio/bss_conn.c     |  540 +
 .../openssl-1.1-fit/crypto/bio/bss_dgram.c    | 1925 ++++
 .../openssl-1.1-fit/crypto/bio/bss_fd.c       |  280 +
 .../openssl-1.1-fit/crypto/bio/bss_file.c     |  427 +
 .../openssl-1.1-fit/crypto/bio/bss_log.c      |  416 +
 .../openssl-1.1-fit/crypto/bio/bss_mem.c      |  357 +
 .../openssl-1.1-fit/crypto/bio/bss_null.c     |   87 +
 .../openssl-1.1-fit/crypto/bio/bss_sock.c     |  233 +
 .../openssl-1.1-fit/crypto/bio/build.info     |    8 +
 .../crypto/blake2/blake2_impl.h               |  129 +
 .../crypto/blake2/blake2_locl.h               |   90 +
 .../openssl-1.1-fit/crypto/blake2/blake2b.c   |  269 +
 .../openssl-1.1-fit/crypto/blake2/blake2s.c   |  263 +
 .../openssl-1.1-fit/crypto/blake2/build.info  |    3 +
 .../openssl-1.1-fit/crypto/blake2/m_blake2b.c |   59 +
 .../openssl-1.1-fit/crypto/blake2/m_blake2s.c |   59 +
 .../openssl-1.1-fit/crypto/bn/README.pod      |  241 +
 .../crypto/bn/asm/alpha-mont.pl               |  328 +
 .../crypto/bn/asm/armv4-gf2m.pl               |  332 +
 .../crypto/bn/asm/armv4-mont.pl               |  757 ++
 .../crypto/bn/asm/armv8-mont.pl               | 1514 +++
 .../openssl-1.1-fit/crypto/bn/asm/bn-586.pl   |  785 ++
 .../crypto/bn/asm/bn-c64xplus.asm             |  382 +
 .../crypto/bn/asm/c64xplus-gf2m.pl            |  160 +
 .../openssl-1.1-fit/crypto/bn/asm/co-586.pl   |  298 +
 .../crypto/bn/asm/ia64-mont.pl                |  860 ++
 .../openssl-1.1-fit/crypto/bn/asm/ia64.S      | 1565 +++
 .../crypto/bn/asm/mips-mont.pl                |  433 +
 .../openssl-1.1-fit/crypto/bn/asm/mips.pl     | 2263 ++++
 .../crypto/bn/asm/parisc-mont.pl              | 1006 ++
 .../openssl-1.1-fit/crypto/bn/asm/ppc-mont.pl | 1990 ++++
 .../openssl-1.1-fit/crypto/bn/asm/ppc.pl      | 2011 ++++
 .../crypto/bn/asm/ppc64-mont.pl               | 1652 +++
 .../crypto/bn/asm/rsaz-avx2.pl                | 1982 ++++
 .../crypto/bn/asm/rsaz-x86_64.pl              | 2404 +++++
 .../crypto/bn/asm/s390x-gf2m.pl               |  228 +
 .../crypto/bn/asm/s390x-mont.pl               |  284 +
 .../openssl-1.1-fit/crypto/bn/asm/s390x.S     |  713 ++
 .../crypto/bn/asm/sparct4-mont.pl             | 1228 +++
 .../openssl-1.1-fit/crypto/bn/asm/sparcv8.S   | 1458 +++
 .../crypto/bn/asm/sparcv8plus.S               | 1558 +++
 .../crypto/bn/asm/sparcv9-gf2m.pl             |  200 +
 .../crypto/bn/asm/sparcv9-mont.pl             |  620 ++
 .../crypto/bn/asm/sparcv9a-mont.pl            |  887 ++
 .../openssl-1.1-fit/crypto/bn/asm/via-mont.pl |  251 +
 .../crypto/bn/asm/vis3-mont.pl                |  384 +
 .../openssl-1.1-fit/crypto/bn/asm/x86-gf2m.pl |  325 +
 .../openssl-1.1-fit/crypto/bn/asm/x86-mont.pl |  631 ++
 .../crypto/bn/asm/x86_64-gcc.c                |  643 ++
 .../crypto/bn/asm/x86_64-gf2m.pl              |  424 +
 .../crypto/bn/asm/x86_64-mont.pl              | 1592 +++
 .../crypto/bn/asm/x86_64-mont5.pl             | 3945 +++++++
 .../openssl-1.1-fit/crypto/bn/bn_add.c        |  171 +
 .../openssl-1.1-fit/crypto/bn/bn_asm.c        | 1039 ++
 .../openssl-1.1-fit/crypto/bn/bn_blind.c      |  312 +
 .../openssl-1.1-fit/crypto/bn/bn_const.c      |  553 +
 .../openssl-1.1-fit/crypto/bn/bn_ctx.c        |  361 +
 .../openssl-1.1-fit/crypto/bn/bn_depr.c       |   68 +
 .../openssl-1.1-fit/crypto/bn/bn_dh.c         |  512 +
 .../openssl-1.1-fit/crypto/bn/bn_div.c        |  457 +
 .../openssl-1.1-fit/crypto/bn/bn_err.c        |  118 +
 .../openssl-1.1-fit/crypto/bn/bn_exp.c        | 1395 +++
 .../openssl-1.1-fit/crypto/bn/bn_exp2.c       |  201 +
 .../openssl-1.1-fit/crypto/bn/bn_gcd.c        |  623 ++
 .../openssl-1.1-fit/crypto/bn/bn_gf2m.c       | 1166 ++
 .../openssl-1.1-fit/crypto/bn/bn_intern.c     |  199 +
 .../openssl-1.1-fit/crypto/bn/bn_kron.c       |  140 +
 .../openssl-1.1-fit/crypto/bn/bn_lcl.h        |  671 ++
 .../openssl-1.1-fit/crypto/bn/bn_lib.c        |  964 ++
 .../openssl-1.1-fit/crypto/bn/bn_mod.c        |  321 +
 .../openssl-1.1-fit/crypto/bn/bn_mont.c       |  464 +
 .../openssl-1.1-fit/crypto/bn/bn_mpi.c        |   86 +
 .../openssl-1.1-fit/crypto/bn/bn_mul.c        |  684 ++
 .../openssl-1.1-fit/crypto/bn/bn_nist.c       | 1239 +++
 .../openssl-1.1-fit/crypto/bn/bn_prime.c      |  469 +
 .../openssl-1.1-fit/crypto/bn/bn_prime.h      |  273 +
 .../openssl-1.1-fit/crypto/bn/bn_prime.pl     |   48 +
 .../openssl-1.1-fit/crypto/bn/bn_print.c      |  345 +
 .../openssl-1.1-fit/crypto/bn/bn_rand.c       |  268 +
 .../openssl-1.1-fit/crypto/bn/bn_recp.c       |  194 +
 .../openssl-1.1-fit/crypto/bn/bn_shift.c      |  257 +
 .../openssl-1.1-fit/crypto/bn/bn_sqr.c        |  239 +
 .../openssl-1.1-fit/crypto/bn/bn_sqrt.c       |  358 +
 .../openssl-1.1-fit/crypto/bn/bn_srp.c        |  545 +
 .../openssl-1.1-fit/crypto/bn/bn_word.c       |  201 +
 .../openssl-1.1-fit/crypto/bn/bn_x931p.c      |  244 +
 .../openssl-1.1-fit/crypto/bn/build.info      |   67 +
 .../openssl-1.1-fit/crypto/bn/rsaz_exp.c      |  315 +
 .../openssl-1.1-fit/crypto/bn/rsaz_exp.h      |   40 +
 .../openssl-1.1-fit/crypto/buffer/buf_err.c   |   38 +
 .../openssl-1.1-fit/crypto/buffer/buffer.c    |  165 +
 .../openssl-1.1-fit/crypto/buffer/build.info  |    2 +
 .../openssl-1.1-fit/crypto/build.info         |   39 +
 .../openssl-1.1-fit/crypto/c64xpluscpuid.pl   |  287 +
 .../crypto/camellia/asm/cmll-x86.pl           | 1150 ++
 .../crypto/camellia/asm/cmll-x86_64.pl        | 1145 ++
 .../crypto/camellia/asm/cmllt4-sparcv9.pl     |  939 ++
 .../crypto/camellia/build.info                |   13 +
 .../crypto/camellia/camellia.c                |  501 +
 .../crypto/camellia/cmll_cbc.c                |   24 +
 .../crypto/camellia/cmll_cfb.c                |   43 +
 .../crypto/camellia/cmll_ctr.c                |   22 +
 .../crypto/camellia/cmll_ecb.c                |   20 +
 .../crypto/camellia/cmll_locl.h               |   43 +
 .../crypto/camellia/cmll_misc.c               |   35 +
 .../crypto/camellia/cmll_ofb.c                |   24 +
 .../crypto/cast/asm/cast-586.pl               |  192 +
 .../openssl-1.1-fit/crypto/cast/build.info    |    7 +
 .../openssl-1.1-fit/crypto/cast/c_cfb64.c     |   74 +
 .../openssl-1.1-fit/crypto/cast/c_ecb.c       |   32 +
 .../openssl-1.1-fit/crypto/cast/c_enc.c       |  151 +
 .../openssl-1.1-fit/crypto/cast/c_ofb64.c     |   61 +
 .../openssl-1.1-fit/crypto/cast/c_skey.c      |  118 +
 .../openssl-1.1-fit/crypto/cast/cast_lcl.h    |  188 +
 .../openssl-1.1-fit/crypto/cast/cast_s.h      |  544 +
 .../crypto/chacha/asm/chacha-armv4.pl         | 1160 ++
 .../crypto/chacha/asm/chacha-armv8.pl         | 1144 ++
 .../crypto/chacha/asm/chacha-c64xplus.pl      |  926 ++
 .../crypto/chacha/asm/chacha-ppc.pl           | 1348 +++
 .../crypto/chacha/asm/chacha-s390x.pl         |  326 +
 .../crypto/chacha/asm/chacha-x86.pl           | 1155 ++
 .../crypto/chacha/asm/chacha-x86_64.pl        | 4005 +++++++
 .../openssl-1.1-fit/crypto/chacha/build.info  |   18 +
 .../crypto/chacha/chacha_enc.c                |  121 +
 .../openssl-1.1-fit/crypto/cmac/build.info    |    2 +
 .../openssl-1.1-fit/crypto/cmac/cm_ameth.c    |   51 +
 .../openssl-1.1-fit/crypto/cmac/cm_pmeth.c    |  161 +
 .../openssl-1.1-fit/crypto/cmac/cmac.c        |  226 +
 .../openssl-1.1-fit/crypto/cms/build.info     |    5 +
 .../openssl-1.1-fit/crypto/cms/cms_asn1.c     |  403 +
 .../openssl-1.1-fit/crypto/cms/cms_att.c      |  152 +
 .../openssl-1.1-fit/crypto/cms/cms_cd.c       |   82 +
 .../openssl-1.1-fit/crypto/cms/cms_dd.c       |   99 +
 .../openssl-1.1-fit/crypto/cms/cms_enc.c      |  213 +
 .../openssl-1.1-fit/crypto/cms/cms_env.c      |  903 ++
 .../openssl-1.1-fit/crypto/cms/cms_err.c      |  294 +
 .../openssl-1.1-fit/crypto/cms/cms_ess.c      |  337 +
 .../openssl-1.1-fit/crypto/cms/cms_io.c       |   88 +
 .../openssl-1.1-fit/crypto/cms/cms_kari.c     |  414 +
 .../openssl-1.1-fit/crypto/cms/cms_lcl.h      |  437 +
 .../openssl-1.1-fit/crypto/cms/cms_lib.c      |  587 +
 .../openssl-1.1-fit/crypto/cms/cms_pwri.c     |  394 +
 .../openssl-1.1-fit/crypto/cms/cms_sd.c       |  926 ++
 .../openssl-1.1-fit/crypto/cms/cms_smime.c    |  843 ++
 .../openssl-1.1-fit/crypto/comp/build.info    |    4 +
 .../openssl-1.1-fit/crypto/comp/c_zlib.c      |  618 ++
 .../openssl-1.1-fit/crypto/comp/comp_err.c    |   46 +
 .../openssl-1.1-fit/crypto/comp/comp_lcl.h    |   30 +
 .../openssl-1.1-fit/crypto/comp/comp_lib.c    |   93 +
 .../openssl-1.1-fit/crypto/conf/build.info    |    4 +
 .../openssl-1.1-fit/crypto/conf/conf_api.c    |  218 +
 .../openssl-1.1-fit/crypto/conf/conf_def.c    |  878 ++
 .../openssl-1.1-fit/crypto/conf/conf_def.h    |   76 +
 .../openssl-1.1-fit/crypto/conf/conf_err.c    |   95 +
 .../openssl-1.1-fit/crypto/conf/conf_lcl.h    |   11 +
 .../openssl-1.1-fit/crypto/conf/conf_lib.c    |  414 +
 .../openssl-1.1-fit/crypto/conf/conf_mall.c   |   31 +
 .../openssl-1.1-fit/crypto/conf/conf_mod.c    |  551 +
 .../openssl-1.1-fit/crypto/conf/conf_sap.c    |   77 +
 .../openssl-1.1-fit/crypto/conf/conf_ssl.c    |  181 +
 .../openssl-1.1-fit/crypto/conf/keysets.pl    |  116 +
 .../3rdparty/openssl-1.1-fit/crypto/cpt_err.c |   77 +
 .../openssl-1.1-fit/crypto/cryptlib.c         |  473 +
 .../openssl-1.1-fit/crypto/ct/build.info      |    3 +
 .../openssl-1.1-fit/crypto/ct/ct_b64.c        |  168 +
 .../openssl-1.1-fit/crypto/ct/ct_err.c        |   96 +
 .../openssl-1.1-fit/crypto/ct/ct_locl.h       |  216 +
 .../openssl-1.1-fit/crypto/ct/ct_log.c        |  306 +
 .../openssl-1.1-fit/crypto/ct/ct_oct.c        |  407 +
 .../openssl-1.1-fit/crypto/ct/ct_policy.c     |   98 +
 .../openssl-1.1-fit/crypto/ct/ct_prn.c        |  127 +
 .../openssl-1.1-fit/crypto/ct/ct_sct.c        |  396 +
 .../openssl-1.1-fit/crypto/ct/ct_sct_ctx.c    |  263 +
 .../openssl-1.1-fit/crypto/ct/ct_vfy.c        |  140 +
 .../openssl-1.1-fit/crypto/ct/ct_x509v3.c     |  104 +
 trunk/3rdparty/openssl-1.1-fit/crypto/ctype.c |  274 +
 .../openssl-1.1-fit/crypto/cversion.c         |   44 +
 .../crypto/des/asm/crypt586.pl                |  217 +
 .../openssl-1.1-fit/crypto/des/asm/des-586.pl |  465 +
 .../openssl-1.1-fit/crypto/des/asm/des_enc.m4 | 1968 ++++
 .../openssl-1.1-fit/crypto/des/asm/desboth.pl |   86 +
 .../crypto/des/asm/dest4-sparcv9.pl           |  627 ++
 .../openssl-1.1-fit/crypto/des/build.info     |   19 +
 .../openssl-1.1-fit/crypto/des/cbc_cksm.c     |   53 +
 .../openssl-1.1-fit/crypto/des/cbc_enc.c      |   12 +
 .../openssl-1.1-fit/crypto/des/cfb64ede.c     |  189 +
 .../openssl-1.1-fit/crypto/des/cfb64enc.c     |   73 +
 .../openssl-1.1-fit/crypto/des/cfb_enc.c      |  150 +
 .../openssl-1.1-fit/crypto/des/des_enc.c      |  299 +
 .../openssl-1.1-fit/crypto/des/des_locl.h     |  226 +
 .../openssl-1.1-fit/crypto/des/ecb3_enc.c     |   33 +
 .../openssl-1.1-fit/crypto/des/ecb_enc.c      |   48 +
 .../openssl-1.1-fit/crypto/des/fcrypt.c       |  149 +
 .../openssl-1.1-fit/crypto/des/fcrypt_b.c     |   72 +
 .../openssl-1.1-fit/crypto/des/ncbc_enc.c     |  106 +
 .../openssl-1.1-fit/crypto/des/ofb64ede.c     |   62 +
 .../openssl-1.1-fit/crypto/des/ofb64enc.c     |   60 +
 .../openssl-1.1-fit/crypto/des/ofb_enc.c      |   82 +
 .../openssl-1.1-fit/crypto/des/pcbc_enc.c     |   66 +
 .../openssl-1.1-fit/crypto/des/qud_cksm.c     |   76 +
 .../openssl-1.1-fit/crypto/des/rand_key.c     |   21 +
 .../openssl-1.1-fit/crypto/des/set_key.c      |  372 +
 .../3rdparty/openssl-1.1-fit/crypto/des/spr.h |  163 +
 .../openssl-1.1-fit/crypto/des/str2key.c      |   77 +
 .../openssl-1.1-fit/crypto/des/xcbc_enc.c     |  103 +
 .../openssl-1.1-fit/crypto/dh/build.info      |    5 +
 .../openssl-1.1-fit/crypto/dh/dh1024.pem      |    5 +
 .../openssl-1.1-fit/crypto/dh/dh192.pem       |    3 +
 .../openssl-1.1-fit/crypto/dh/dh2048.pem      |   16 +
 .../openssl-1.1-fit/crypto/dh/dh4096.pem      |   14 +
 .../openssl-1.1-fit/crypto/dh/dh512.pem       |    4 +
 .../openssl-1.1-fit/crypto/dh/dh_ameth.c      |  907 ++
 .../openssl-1.1-fit/crypto/dh/dh_asn1.c       |  138 +
 .../openssl-1.1-fit/crypto/dh/dh_check.c      |  233 +
 .../openssl-1.1-fit/crypto/dh/dh_depr.c       |   46 +
 .../openssl-1.1-fit/crypto/dh/dh_err.c        |  101 +
 .../openssl-1.1-fit/crypto/dh/dh_gen.c        |  130 +
 .../openssl-1.1-fit/crypto/dh/dh_kdf.c        |  150 +
 .../openssl-1.1-fit/crypto/dh/dh_key.c        |  232 +
 .../openssl-1.1-fit/crypto/dh/dh_lib.c        |  291 +
 .../openssl-1.1-fit/crypto/dh/dh_locl.h       |   57 +
 .../openssl-1.1-fit/crypto/dh/dh_meth.c       |  173 +
 .../openssl-1.1-fit/crypto/dh/dh_pmeth.c      |  547 +
 .../openssl-1.1-fit/crypto/dh/dh_prn.c        |   30 +
 .../openssl-1.1-fit/crypto/dh/dh_rfc5114.c    |   41 +
 .../openssl-1.1-fit/crypto/dh/dh_rfc7919.c    |   74 +
 .../3rdparty/openssl-1.1-fit/crypto/dllmain.c |   46 +
 .../openssl-1.1-fit/crypto/dsa/build.info     |    5 +
 .../openssl-1.1-fit/crypto/dsa/dsa_ameth.c    |  572 +
 .../openssl-1.1-fit/crypto/dsa/dsa_asn1.c     |  155 +
 .../openssl-1.1-fit/crypto/dsa/dsa_depr.c     |   62 +
 .../openssl-1.1-fit/crypto/dsa/dsa_err.c      |   76 +
 .../openssl-1.1-fit/crypto/dsa/dsa_gen.c      |  616 ++
 .../openssl-1.1-fit/crypto/dsa/dsa_key.c      |   77 +
 .../openssl-1.1-fit/crypto/dsa/dsa_lib.c      |  358 +
 .../openssl-1.1-fit/crypto/dsa/dsa_locl.h     |   77 +
 .../openssl-1.1-fit/crypto/dsa/dsa_meth.c     |  224 +
 .../openssl-1.1-fit/crypto/dsa/dsa_ossl.c     |  428 +
 .../openssl-1.1-fit/crypto/dsa/dsa_pmeth.c    |  273 +
 .../openssl-1.1-fit/crypto/dsa/dsa_prn.c      |   69 +
 .../openssl-1.1-fit/crypto/dsa/dsa_sign.c     |   24 +
 .../openssl-1.1-fit/crypto/dsa/dsa_vrf.c      |   17 +
 .../openssl-1.1-fit/crypto/dso/build.info     |    4 +
 .../openssl-1.1-fit/crypto/dso/dso_dl.c       |  279 +
 .../openssl-1.1-fit/crypto/dso/dso_dlfcn.c    |  457 +
 .../openssl-1.1-fit/crypto/dso/dso_err.c      |  100 +
 .../openssl-1.1-fit/crypto/dso/dso_lib.c      |  350 +
 .../openssl-1.1-fit/crypto/dso/dso_locl.h     |  107 +
 .../openssl-1.1-fit/crypto/dso/dso_openssl.c  |   22 +
 .../openssl-1.1-fit/crypto/dso/dso_vms.c      |  466 +
 .../openssl-1.1-fit/crypto/dso/dso_win32.c    |  566 +
 .../3rdparty/openssl-1.1-fit/crypto/ebcdic.c  |  361 +
 .../crypto/ec/asm/ecp_nistz256-armv4.pl       | 1865 ++++
 .../crypto/ec/asm/ecp_nistz256-armv8.pl       | 1883 ++++
 .../crypto/ec/asm/ecp_nistz256-avx2.pl        | 2080 ++++
 .../crypto/ec/asm/ecp_nistz256-ppc64.pl       | 2382 ++++
 .../crypto/ec/asm/ecp_nistz256-sparcv9.pl     | 3061 ++++++
 .../crypto/ec/asm/ecp_nistz256-x86.pl         | 1866 ++++
 .../crypto/ec/asm/ecp_nistz256-x86_64.pl      | 4741 ++++++++
 .../crypto/ec/asm/x25519-ppc64.pl             |  824 ++
 .../crypto/ec/asm/x25519-x86_64.pl            | 1117 ++
 .../openssl-1.1-fit/crypto/ec/build.info      |   42 +
 .../openssl-1.1-fit/crypto/ec/curve25519.c    | 5596 ++++++++++
 .../ec/curve448/arch_32/arch_intrinsics.h     |   27 +
 .../crypto/ec/curve448/arch_32/f_impl.c       |   95 +
 .../crypto/ec/curve448/arch_32/f_impl.h       |   60 +
 .../crypto/ec/curve448/curve448.c             |  727 ++
 .../crypto/ec/curve448/curve448_lcl.h         |   38 +
 .../crypto/ec/curve448/curve448_tables.c      |  475 +
 .../crypto/ec/curve448/curve448utils.h        |   78 +
 .../crypto/ec/curve448/ed448.h                |  195 +
 .../crypto/ec/curve448/eddsa.c                |  372 +
 .../crypto/ec/curve448/f_generic.c            |  204 +
 .../crypto/ec/curve448/field.h                |  168 +
 .../crypto/ec/curve448/point_448.h            |  301 +
 .../crypto/ec/curve448/scalar.c               |  235 +
 .../openssl-1.1-fit/crypto/ec/curve448/word.h |   81 +
 .../openssl-1.1-fit/crypto/ec/ec2_oct.c       |  337 +
 .../openssl-1.1-fit/crypto/ec/ec2_smpl.c      |  970 ++
 .../openssl-1.1-fit/crypto/ec/ec_ameth.c      |  942 ++
 .../openssl-1.1-fit/crypto/ec/ec_asn1.c       | 1221 +++
 .../openssl-1.1-fit/crypto/ec/ec_check.c      |   72 +
 .../openssl-1.1-fit/crypto/ec/ec_curve.c      | 3199 ++++++
 .../openssl-1.1-fit/crypto/ec/ec_cvt.c        |   82 +
 .../openssl-1.1-fit/crypto/ec/ec_err.c        |  394 +
 .../openssl-1.1-fit/crypto/ec/ec_key.c        |  618 ++
 .../openssl-1.1-fit/crypto/ec/ec_kmeth.c      |  317 +
 .../openssl-1.1-fit/crypto/ec/ec_lcl.h        |  737 ++
 .../openssl-1.1-fit/crypto/ec/ec_lib.c        | 1121 ++
 .../openssl-1.1-fit/crypto/ec/ec_mult.c       |  970 ++
 .../openssl-1.1-fit/crypto/ec/ec_oct.c        |  150 +
 .../openssl-1.1-fit/crypto/ec/ec_pmeth.c      |  472 +
 .../openssl-1.1-fit/crypto/ec/ec_print.c      |  121 +
 .../openssl-1.1-fit/crypto/ec/ecdh_kdf.c      |   81 +
 .../openssl-1.1-fit/crypto/ec/ecdh_ossl.c     |  121 +
 .../openssl-1.1-fit/crypto/ec/ecdsa_ossl.c    |  417 +
 .../openssl-1.1-fit/crypto/ec/ecdsa_sign.c    |   52 +
 .../openssl-1.1-fit/crypto/ec/ecdsa_vrf.c     |   43 +
 .../openssl-1.1-fit/crypto/ec/eck_prn.c       |  259 +
 .../openssl-1.1-fit/crypto/ec/ecp_mont.c      |  291 +
 .../openssl-1.1-fit/crypto/ec/ecp_nist.c      |  168 +
 .../openssl-1.1-fit/crypto/ec/ecp_nistp224.c  | 1716 +++
 .../openssl-1.1-fit/crypto/ec/ecp_nistp256.c  | 2355 ++++
 .../openssl-1.1-fit/crypto/ec/ecp_nistp521.c  | 2159 ++++
 .../openssl-1.1-fit/crypto/ec/ecp_nistputil.c |  223 +
 .../openssl-1.1-fit/crypto/ec/ecp_nistz256.c  | 1701 +++
 .../crypto/ec/ecp_nistz256_table.c            | 9542 +++++++++++++++++
 .../openssl-1.1-fit/crypto/ec/ecp_oct.c       |  366 +
 .../openssl-1.1-fit/crypto/ec/ecp_smpl.c      | 1689 +++
 .../openssl-1.1-fit/crypto/ec/ecx_meth.c      |  841 ++
 .../openssl-1.1-fit/crypto/engine/README      |  211 +
 .../openssl-1.1-fit/crypto/engine/build.info  |   11 +
 .../openssl-1.1-fit/crypto/engine/eng_all.c   |   25 +
 .../openssl-1.1-fit/crypto/engine/eng_cnf.c   |  192 +
 .../openssl-1.1-fit/crypto/engine/eng_ctrl.c  |  330 +
 .../crypto/engine/eng_devcrypto.c             |  836 ++
 .../openssl-1.1-fit/crypto/engine/eng_dyn.c   |  510 +
 .../openssl-1.1-fit/crypto/engine/eng_err.c   |  154 +
 .../openssl-1.1-fit/crypto/engine/eng_fat.c   |  123 +
 .../openssl-1.1-fit/crypto/engine/eng_init.c  |  109 +
 .../openssl-1.1-fit/crypto/engine/eng_int.h   |  171 +
 .../openssl-1.1-fit/crypto/engine/eng_lib.c   |  299 +
 .../openssl-1.1-fit/crypto/engine/eng_list.c  |  349 +
 .../crypto/engine/eng_openssl.c               |  648 ++
 .../openssl-1.1-fit/crypto/engine/eng_pkey.c  |  140 +
 .../crypto/engine/eng_rdrand.c                |   97 +
 .../openssl-1.1-fit/crypto/engine/eng_table.c |  308 +
 .../openssl-1.1-fit/crypto/engine/tb_asnmth.c |  209 +
 .../openssl-1.1-fit/crypto/engine/tb_cipher.c |   91 +
 .../openssl-1.1-fit/crypto/engine/tb_dh.c     |   72 +
 .../openssl-1.1-fit/crypto/engine/tb_digest.c |   91 +
 .../openssl-1.1-fit/crypto/engine/tb_dsa.c    |   72 +
 .../openssl-1.1-fit/crypto/engine/tb_eckey.c  |   72 +
 .../openssl-1.1-fit/crypto/engine/tb_pkmeth.c |  114 +
 .../openssl-1.1-fit/crypto/engine/tb_rand.c   |   72 +
 .../openssl-1.1-fit/crypto/engine/tb_rsa.c    |   72 +
 .../openssl-1.1-fit/crypto/err/README         |   44 +
 .../openssl-1.1-fit/crypto/err/build.info     |    3 +
 .../3rdparty/openssl-1.1-fit/crypto/err/err.c |  953 ++
 .../openssl-1.1-fit/crypto/err/err_all.c      |  101 +
 .../openssl-1.1-fit/crypto/err/err_prn.c      |   65 +
 .../openssl-1.1-fit/crypto/err/openssl.ec     |   78 +
 .../openssl-1.1-fit/crypto/err/openssl.txt    | 3033 ++++++
 .../openssl-1.1-fit/crypto/evp/bio_b64.c      |  553 +
 .../openssl-1.1-fit/crypto/evp/bio_enc.c      |  429 +
 .../openssl-1.1-fit/crypto/evp/bio_md.c       |  233 +
 .../openssl-1.1-fit/crypto/evp/bio_ok.c       |  610 ++
 .../openssl-1.1-fit/crypto/evp/build.info     |   25 +
 .../openssl-1.1-fit/crypto/evp/c_allc.c       |  266 +
 .../openssl-1.1-fit/crypto/evp/c_alld.c       |   60 +
 .../openssl-1.1-fit/crypto/evp/cmeth_lib.c    |  151 +
 .../openssl-1.1-fit/crypto/evp/digest.c       |  298 +
 .../openssl-1.1-fit/crypto/evp/e_aes.c        | 4210 ++++++++
 .../crypto/evp/e_aes_cbc_hmac_sha1.c          |  964 ++
 .../crypto/evp/e_aes_cbc_hmac_sha256.c        |  950 ++
 .../openssl-1.1-fit/crypto/evp/e_aria.c       |  756 ++
 .../openssl-1.1-fit/crypto/evp/e_bf.c         |   38 +
 .../openssl-1.1-fit/crypto/evp/e_camellia.c   |  366 +
 .../openssl-1.1-fit/crypto/evp/e_cast.c       |   40 +
 .../crypto/evp/e_chacha20_poly1305.c          |  630 ++
 .../openssl-1.1-fit/crypto/evp/e_des.c        |  242 +
 .../openssl-1.1-fit/crypto/evp/e_des3.c       |  424 +
 .../openssl-1.1-fit/crypto/evp/e_idea.c       |   70 +
 .../openssl-1.1-fit/crypto/evp/e_null.c       |   50 +
 .../openssl-1.1-fit/crypto/evp/e_old.c        |  113 +
 .../openssl-1.1-fit/crypto/evp/e_rc2.c        |  191 +
 .../openssl-1.1-fit/crypto/evp/e_rc4.c        |   82 +
 .../crypto/evp/e_rc4_hmac_md5.c               |  262 +
 .../openssl-1.1-fit/crypto/evp/e_rc5.c        |   74 +
 .../openssl-1.1-fit/crypto/evp/e_seed.c       |   39 +
 .../openssl-1.1-fit/crypto/evp/e_sm4.c        |  100 +
 .../openssl-1.1-fit/crypto/evp/e_xcbc_d.c     |   83 +
 .../openssl-1.1-fit/crypto/evp/encode.c       |  478 +
 .../openssl-1.1-fit/crypto/evp/evp_cnf.c      |   56 +
 .../openssl-1.1-fit/crypto/evp/evp_enc.c      |  677 ++
 .../openssl-1.1-fit/crypto/evp/evp_err.c      |  283 +
 .../openssl-1.1-fit/crypto/evp/evp_key.c      |  150 +
 .../openssl-1.1-fit/crypto/evp/evp_lib.c      |  528 +
 .../openssl-1.1-fit/crypto/evp/evp_locl.h     |   68 +
 .../openssl-1.1-fit/crypto/evp/evp_pbe.c      |  262 +
 .../openssl-1.1-fit/crypto/evp/evp_pkey.c     |  149 +
 .../openssl-1.1-fit/crypto/evp/m_md2.c        |   56 +
 .../openssl-1.1-fit/crypto/evp/m_md4.c        |   55 +
 .../openssl-1.1-fit/crypto/evp/m_md5.c        |   55 +
 .../openssl-1.1-fit/crypto/evp/m_md5_sha1.c   |  142 +
 .../openssl-1.1-fit/crypto/evp/m_mdc2.c       |   55 +
 .../openssl-1.1-fit/crypto/evp/m_null.c       |   49 +
 .../openssl-1.1-fit/crypto/evp/m_ripemd.c     |   55 +
 .../openssl-1.1-fit/crypto/evp/m_sha1.c       |  297 +
 .../openssl-1.1-fit/crypto/evp/m_sha3.c       |  406 +
 .../openssl-1.1-fit/crypto/evp/m_sigver.c     |  218 +
 .../openssl-1.1-fit/crypto/evp/m_wp.c         |   54 +
 .../openssl-1.1-fit/crypto/evp/names.c        |  180 +
 .../openssl-1.1-fit/crypto/evp/p5_crpt.c      |  103 +
 .../openssl-1.1-fit/crypto/evp/p5_crpt2.c     |  265 +
 .../openssl-1.1-fit/crypto/evp/p_dec.c        |   36 +
 .../openssl-1.1-fit/crypto/evp/p_enc.c        |   35 +
 .../openssl-1.1-fit/crypto/evp/p_lib.c        |  686 ++
 .../openssl-1.1-fit/crypto/evp/p_open.c       |   73 +
 .../openssl-1.1-fit/crypto/evp/p_seal.c       |   65 +
 .../openssl-1.1-fit/crypto/evp/p_sign.c       |   61 +
 .../openssl-1.1-fit/crypto/evp/p_verify.c     |   55 +
 .../openssl-1.1-fit/crypto/evp/pbe_scrypt.c   |  266 +
 .../openssl-1.1-fit/crypto/evp/pmeth_fn.c     |  297 +
 .../openssl-1.1-fit/crypto/evp/pmeth_gn.c     |  239 +
 .../openssl-1.1-fit/crypto/evp/pmeth_lib.c    |  864 ++
 .../3rdparty/openssl-1.1-fit/crypto/ex_data.c |  399 +
 .../3rdparty/openssl-1.1-fit/crypto/getenv.c  |   31 +
 .../openssl-1.1-fit/crypto/hmac/build.info    |    3 +
 .../openssl-1.1-fit/crypto/hmac/hm_ameth.c    |  127 +
 .../openssl-1.1-fit/crypto/hmac/hm_pmeth.c    |  212 +
 .../openssl-1.1-fit/crypto/hmac/hmac.c        |  247 +
 .../openssl-1.1-fit/crypto/hmac/hmac_lcl.h    |   25 +
 .../openssl-1.1-fit/crypto/ia64cpuid.S        |  297 +
 .../openssl-1.1-fit/crypto/idea/build.info    |    3 +
 .../openssl-1.1-fit/crypto/idea/i_cbc.c       |  122 +
 .../openssl-1.1-fit/crypto/idea/i_cfb64.c     |   74 +
 .../openssl-1.1-fit/crypto/idea/i_ecb.c       |   34 +
 .../openssl-1.1-fit/crypto/idea/i_ofb64.c     |   61 +
 .../openssl-1.1-fit/crypto/idea/i_skey.c      |  112 +
 .../openssl-1.1-fit/crypto/idea/idea_lcl.h    |  102 +
 .../internal/__DECC_INCLUDE_EPILOGUE.H        |   16 +
 .../internal/__DECC_INCLUDE_PROLOGUE.H        |   20 +
 .../crypto/include/internal/aria.h            |   50 +
 .../crypto/include/internal/asn1_int.h        |  113 +
 .../crypto/include/internal/async.h           |   15 +
 .../crypto/include/internal/bn_conf.h.in      |   27 +
 .../crypto/include/internal/bn_dh.h           |   24 +
 .../crypto/include/internal/bn_int.h          |   90 +
 .../crypto/include/internal/bn_srp.h          |   32 +
 .../crypto/include/internal/chacha.h          |   42 +
 .../crypto/include/internal/cryptlib_int.h    |   35 +
 .../crypto/include/internal/ctype.h           |   80 +
 .../crypto/include/internal/dso_conf.h.in     |   30 +
 .../crypto/include/internal/ec_int.h          |   53 +
 .../crypto/include/internal/engine.h          |   20 +
 .../crypto/include/internal/err_int.h         |   19 +
 .../crypto/include/internal/evp_int.h         |  442 +
 .../crypto/include/internal/lhash.h           |   15 +
 .../crypto/include/internal/md32_common.h     |  256 +
 .../crypto/include/internal/objects.h         |   12 +
 .../crypto/include/internal/poly1305.h        |   21 +
 .../crypto/include/internal/rand_int.h        |  134 +
 .../crypto/include/internal/sha.h             |   19 +
 .../crypto/include/internal/siphash.h         |   25 +
 .../crypto/include/internal/sm2.h             |   78 +
 .../crypto/include/internal/sm2err.h          |   61 +
 .../crypto/include/internal/sm3.h             |   39 +
 .../crypto/include/internal/sm4.h             |   37 +
 .../crypto/include/internal/store.h           |   10 +
 .../crypto/include/internal/store_int.h       |   26 +
 .../crypto/include/internal/x509_int.h        |  286 +
 trunk/3rdparty/openssl-1.1-fit/crypto/init.c  |  854 ++
 .../openssl-1.1-fit/crypto/kdf/build.info     |    3 +
 .../openssl-1.1-fit/crypto/kdf/hkdf.c         |  352 +
 .../openssl-1.1-fit/crypto/kdf/kdf_err.c      |   67 +
 .../openssl-1.1-fit/crypto/kdf/scrypt.c       |  266 +
 .../openssl-1.1-fit/crypto/kdf/tls1_prf.c     |  278 +
 .../openssl-1.1-fit/crypto/lhash/build.info   |    3 +
 .../openssl-1.1-fit/crypto/lhash/lh_stats.c   |  117 +
 .../openssl-1.1-fit/crypto/lhash/lhash.c      |  393 +
 .../openssl-1.1-fit/crypto/lhash/lhash_lcl.h  |   44 +
 .../openssl-1.1-fit/crypto/md2/build.info     |    3 +
 .../openssl-1.1-fit/crypto/md2/md2_dgst.c     |  173 +
 .../openssl-1.1-fit/crypto/md2/md2_one.c      |   47 +
 .../openssl-1.1-fit/crypto/md4/build.info     |    3 +
 .../openssl-1.1-fit/crypto/md4/md4_dgst.c     |  147 +
 .../openssl-1.1-fit/crypto/md4/md4_locl.h     |   60 +
 .../openssl-1.1-fit/crypto/md4/md4_one.c      |   47 +
 .../openssl-1.1-fit/crypto/md5/asm/md5-586.pl |  318 +
 .../crypto/md5/asm/md5-sparcv9.pl             |  437 +
 .../crypto/md5/asm/md5-x86_64.pl              |  393 +
 .../openssl-1.1-fit/crypto/md5/build.info     |   11 +
 .../openssl-1.1-fit/crypto/md5/md5_dgst.c     |  164 +
 .../openssl-1.1-fit/crypto/md5/md5_locl.h     |   80 +
 .../openssl-1.1-fit/crypto/md5/md5_one.c      |   47 +
 .../openssl-1.1-fit/crypto/mdc2/build.info    |    3 +
 .../openssl-1.1-fit/crypto/mdc2/mdc2_one.c    |   27 +
 .../openssl-1.1-fit/crypto/mdc2/mdc2dgst.c    |  126 +
 trunk/3rdparty/openssl-1.1-fit/crypto/mem.c   |  323 +
 .../3rdparty/openssl-1.1-fit/crypto/mem_clr.c |   25 +
 .../3rdparty/openssl-1.1-fit/crypto/mem_dbg.c |  670 ++
 .../3rdparty/openssl-1.1-fit/crypto/mem_sec.c |  646 ++
 .../openssl-1.1-fit/crypto/mips_arch.h        |   40 +
 .../crypto/modes/asm/aesni-gcm-x86_64.pl      | 1099 ++
 .../crypto/modes/asm/ghash-alpha.pl           |  467 +
 .../crypto/modes/asm/ghash-armv4.pl           |  551 +
 .../crypto/modes/asm/ghash-c64xplus.pl        |  247 +
 .../crypto/modes/asm/ghash-ia64.pl            |  470 +
 .../crypto/modes/asm/ghash-parisc.pl          |  748 ++
 .../crypto/modes/asm/ghash-s390x.pl           |  262 +
 .../crypto/modes/asm/ghash-sparcv9.pl         |  581 +
 .../crypto/modes/asm/ghash-x86.pl             | 1404 +++
 .../crypto/modes/asm/ghash-x86_64.pl          | 1816 ++++
 .../crypto/modes/asm/ghashp8-ppc.pl           |  671 ++
 .../crypto/modes/asm/ghashv8-armx.pl          |  781 ++
 .../openssl-1.1-fit/crypto/modes/build.info   |   30 +
 .../openssl-1.1-fit/crypto/modes/cbc128.c     |  161 +
 .../openssl-1.1-fit/crypto/modes/ccm128.c     |  432 +
 .../openssl-1.1-fit/crypto/modes/cfb128.c     |  198 +
 .../openssl-1.1-fit/crypto/modes/ctr128.c     |  209 +
 .../openssl-1.1-fit/crypto/modes/cts128.c     |  330 +
 .../openssl-1.1-fit/crypto/modes/gcm128.c     | 1888 ++++
 .../openssl-1.1-fit/crypto/modes/modes_lcl.h  |  190 +
 .../openssl-1.1-fit/crypto/modes/ocb128.c     |  562 +
 .../openssl-1.1-fit/crypto/modes/ofb128.c     |   74 +
 .../openssl-1.1-fit/crypto/modes/wrap128.c    |  331 +
 .../openssl-1.1-fit/crypto/modes/xts128.c     |  157 +
 trunk/3rdparty/openssl-1.1-fit/crypto/o_dir.c |   37 +
 .../3rdparty/openssl-1.1-fit/crypto/o_fips.c  |   24 +
 .../3rdparty/openssl-1.1-fit/crypto/o_fopen.c |  126 +
 .../3rdparty/openssl-1.1-fit/crypto/o_init.c  |   21 +
 trunk/3rdparty/openssl-1.1-fit/crypto/o_str.c |  248 +
 .../3rdparty/openssl-1.1-fit/crypto/o_time.c  |  200 +
 .../openssl-1.1-fit/crypto/objects/README     |   44 +
 .../openssl-1.1-fit/crypto/objects/build.info |    3 +
 .../openssl-1.1-fit/crypto/objects/o_names.c  |  406 +
 .../openssl-1.1-fit/crypto/objects/obj_dat.c  |  739 ++
 .../openssl-1.1-fit/crypto/objects/obj_dat.h  | 5733 ++++++++++
 .../openssl-1.1-fit/crypto/objects/obj_dat.pl |  228 +
 .../openssl-1.1-fit/crypto/objects/obj_err.c  |   46 +
 .../openssl-1.1-fit/crypto/objects/obj_lcl.h  |   14 +
 .../openssl-1.1-fit/crypto/objects/obj_lib.c  |   65 +
 .../crypto/objects/obj_mac.num                | 1194 +++
 .../openssl-1.1-fit/crypto/objects/obj_xref.c |  139 +
 .../openssl-1.1-fit/crypto/objects/obj_xref.h |  128 +
 .../crypto/objects/obj_xref.txt               |   66 +
 .../openssl-1.1-fit/crypto/objects/objects.pl |  203 +
 .../crypto/objects/objects.txt                | 1677 +++
 .../openssl-1.1-fit/crypto/objects/objxref.pl |  142 +
 .../openssl-1.1-fit/crypto/ocsp/build.info    |    4 +
 .../openssl-1.1-fit/crypto/ocsp/ocsp_asn.c    |  135 +
 .../openssl-1.1-fit/crypto/ocsp/ocsp_cl.c     |  396 +
 .../openssl-1.1-fit/crypto/ocsp/ocsp_err.c    |  101 +
 .../openssl-1.1-fit/crypto/ocsp/ocsp_ext.c    |  472 +
 .../openssl-1.1-fit/crypto/ocsp/ocsp_ht.c     |  502 +
 .../openssl-1.1-fit/crypto/ocsp/ocsp_lcl.h    |  236 +
 .../openssl-1.1-fit/crypto/ocsp/ocsp_lib.c    |  222 +
 .../openssl-1.1-fit/crypto/ocsp/ocsp_prn.c    |  246 +
 .../openssl-1.1-fit/crypto/ocsp/ocsp_srv.c    |  310 +
 .../openssl-1.1-fit/crypto/ocsp/ocsp_vfy.c    |  435 +
 .../openssl-1.1-fit/crypto/ocsp/v3_ocsp.c     |  264 +
 .../openssl-1.1-fit/crypto/pariscid.pl        |  276 +
 .../openssl-1.1-fit/crypto/pem/build.info     |    4 +
 .../openssl-1.1-fit/crypto/pem/pem_all.c      |  181 +
 .../openssl-1.1-fit/crypto/pem/pem_err.c      |  126 +
 .../openssl-1.1-fit/crypto/pem/pem_info.c     |  337 +
 .../openssl-1.1-fit/crypto/pem/pem_lib.c      |  988 ++
 .../openssl-1.1-fit/crypto/pem/pem_oth.c      |   36 +
 .../openssl-1.1-fit/crypto/pem/pem_pk8.c      |  214 +
 .../openssl-1.1-fit/crypto/pem/pem_pkey.c     |  245 +
 .../openssl-1.1-fit/crypto/pem/pem_sign.c     |   50 +
 .../openssl-1.1-fit/crypto/pem/pem_x509.c     |   18 +
 .../openssl-1.1-fit/crypto/pem/pem_xaux.c     |   18 +
 .../openssl-1.1-fit/crypto/pem/pvkfmt.c       |  883 ++
 .../openssl-1.1-fit/crypto/perlasm/README     |  124 +
 .../crypto/perlasm/arm-xlate.pl               |  177 +
 .../openssl-1.1-fit/crypto/perlasm/cbc.pl     |  356 +
 .../crypto/perlasm/ppc-xlate.pl               |  344 +
 .../crypto/perlasm/sparcv9_modes.pl           | 1702 +++
 .../crypto/perlasm/x86_64-xlate.pl            | 1447 +++
 .../openssl-1.1-fit/crypto/perlasm/x86asm.pl  |  303 +
 .../openssl-1.1-fit/crypto/perlasm/x86gas.pl  |  265 +
 .../openssl-1.1-fit/crypto/perlasm/x86masm.pl |  206 +
 .../openssl-1.1-fit/crypto/perlasm/x86nasm.pl |  186 +
 .../openssl-1.1-fit/crypto/pkcs12/build.info  |    5 +
 .../openssl-1.1-fit/crypto/pkcs12/p12_add.c   |  164 +
 .../openssl-1.1-fit/crypto/pkcs12/p12_asn.c   |   76 +
 .../openssl-1.1-fit/crypto/pkcs12/p12_attr.c  |  103 +
 .../openssl-1.1-fit/crypto/pkcs12/p12_crpt.c  |   70 +
 .../openssl-1.1-fit/crypto/pkcs12/p12_crt.c   |  291 +
 .../openssl-1.1-fit/crypto/pkcs12/p12_decr.c  |  155 +
 .../openssl-1.1-fit/crypto/pkcs12/p12_init.c  |   44 +
 .../openssl-1.1-fit/crypto/pkcs12/p12_key.c   |  183 +
 .../openssl-1.1-fit/crypto/pkcs12/p12_kiss.c  |  250 +
 .../openssl-1.1-fit/crypto/pkcs12/p12_lcl.h   |   43 +
 .../openssl-1.1-fit/crypto/pkcs12/p12_mutl.c  |  246 +
 .../openssl-1.1-fit/crypto/pkcs12/p12_npas.c  |  184 +
 .../openssl-1.1-fit/crypto/pkcs12/p12_p8d.c   |   23 +
 .../openssl-1.1-fit/crypto/pkcs12/p12_p8e.c   |   69 +
 .../openssl-1.1-fit/crypto/pkcs12/p12_sbag.c  |  162 +
 .../openssl-1.1-fit/crypto/pkcs12/p12_utl.c   |  244 +
 .../openssl-1.1-fit/crypto/pkcs12/pk12err.c   |  117 +
 .../openssl-1.1-fit/crypto/pkcs7/bio_pk7.c    |   24 +
 .../openssl-1.1-fit/crypto/pkcs7/build.info   |    4 +
 .../openssl-1.1-fit/crypto/pkcs7/pk7_asn1.c   |  202 +
 .../openssl-1.1-fit/crypto/pkcs7/pk7_attr.c   |  121 +
 .../openssl-1.1-fit/crypto/pkcs7/pk7_doit.c   | 1180 ++
 .../openssl-1.1-fit/crypto/pkcs7/pk7_lib.c    |  588 +
 .../openssl-1.1-fit/crypto/pkcs7/pk7_mime.c   |   48 +
 .../openssl-1.1-fit/crypto/pkcs7/pk7_smime.c  |  549 +
 .../openssl-1.1-fit/crypto/pkcs7/pkcs7err.c   |  156 +
 .../crypto/poly1305/asm/poly1305-armv4.pl     | 1253 +++
 .../crypto/poly1305/asm/poly1305-armv8.pl     |  946 ++
 .../crypto/poly1305/asm/poly1305-c64xplus.pl  |  331 +
 .../crypto/poly1305/asm/poly1305-mips.pl      |  437 +
 .../crypto/poly1305/asm/poly1305-ppc.pl       |  645 ++
 .../crypto/poly1305/asm/poly1305-ppcfp.pl     |  739 ++
 .../crypto/poly1305/asm/poly1305-s390x.pl     |  227 +
 .../crypto/poly1305/asm/poly1305-sparcv9.pl   | 1120 ++
 .../crypto/poly1305/asm/poly1305-x86.pl       | 1815 ++++
 .../crypto/poly1305/asm/poly1305-x86_64.pl    | 4159 +++++++
 .../crypto/poly1305/build.info                |   24 +
 .../crypto/poly1305/poly1305.c                |  531 +
 .../crypto/poly1305/poly1305_ameth.c          |  122 +
 .../crypto/poly1305/poly1305_base2_44.c       |  171 +
 .../crypto/poly1305/poly1305_ieee754.c        |  488 +
 .../crypto/poly1305/poly1305_local.h          |   27 +
 .../crypto/poly1305/poly1305_pmeth.c          |  194 +
 .../openssl-1.1-fit/crypto/ppc_arch.h         |   28 +
 .../3rdparty/openssl-1.1-fit/crypto/ppccap.c  |  408 +
 .../openssl-1.1-fit/crypto/ppccpuid.pl        |  382 +
 .../openssl-1.1-fit/crypto/rand/build.info    |    4 +
 .../openssl-1.1-fit/crypto/rand/drbg_ctr.c    |  438 +
 .../openssl-1.1-fit/crypto/rand/drbg_lib.c    | 1159 ++
 .../openssl-1.1-fit/crypto/rand/rand_egd.c    |  158 +
 .../openssl-1.1-fit/crypto/rand/rand_err.c    |  135 +
 .../openssl-1.1-fit/crypto/rand/rand_lcl.h    |  293 +
 .../openssl-1.1-fit/crypto/rand/rand_lib.c    |  859 ++
 .../openssl-1.1-fit/crypto/rand/rand_unix.c   |  707 ++
 .../openssl-1.1-fit/crypto/rand/rand_vms.c    |  528 +
 .../openssl-1.1-fit/crypto/rand/rand_win.c    |  185 +
 .../openssl-1.1-fit/crypto/rand/randfile.c    |  314 +
 .../openssl-1.1-fit/crypto/rc2/build.info     |    3 +
 .../openssl-1.1-fit/crypto/rc2/rc2_cbc.c      |  179 +
 .../openssl-1.1-fit/crypto/rc2/rc2_ecb.c      |   40 +
 .../openssl-1.1-fit/crypto/rc2/rc2_locl.h     |  134 +
 .../openssl-1.1-fit/crypto/rc2/rc2_skey.c     |   98 +
 .../openssl-1.1-fit/crypto/rc2/rc2cfb64.c     |   74 +
 .../openssl-1.1-fit/crypto/rc2/rc2ofb64.c     |   61 +
 .../openssl-1.1-fit/crypto/rc4/asm/rc4-586.pl |  426 +
 .../crypto/rc4/asm/rc4-c64xplus.pl            |  192 +
 .../crypto/rc4/asm/rc4-md5-x86_64.pl          |  661 ++
 .../crypto/rc4/asm/rc4-parisc.pl              |  333 +
 .../crypto/rc4/asm/rc4-s390x.pl               |  241 +
 .../crypto/rc4/asm/rc4-x86_64.pl              |  696 ++
 .../openssl-1.1-fit/crypto/rc4/build.info     |   18 +
 .../openssl-1.1-fit/crypto/rc4/rc4_enc.c      |   85 +
 .../openssl-1.1-fit/crypto/rc4/rc4_locl.h     |   16 +
 .../openssl-1.1-fit/crypto/rc4/rc4_skey.c     |   57 +
 .../openssl-1.1-fit/crypto/rc5/asm/rc5-586.pl |  122 +
 .../openssl-1.1-fit/crypto/rc5/build.info     |    7 +
 .../openssl-1.1-fit/crypto/rc5/rc5_ecb.c      |   32 +
 .../openssl-1.1-fit/crypto/rc5/rc5_enc.c      |  160 +
 .../openssl-1.1-fit/crypto/rc5/rc5_locl.h     |  186 +
 .../openssl-1.1-fit/crypto/rc5/rc5_skey.c     |   61 +
 .../openssl-1.1-fit/crypto/rc5/rc5cfb64.c     |   74 +
 .../openssl-1.1-fit/crypto/rc5/rc5ofb64.c     |   61 +
 .../crypto/ripemd/asm/rmd-586.pl              |  602 ++
 .../openssl-1.1-fit/crypto/ripemd/build.info  |    7 +
 .../openssl-1.1-fit/crypto/ripemd/rmd_dgst.c  |  282 +
 .../openssl-1.1-fit/crypto/ripemd/rmd_locl.h  |   87 +
 .../openssl-1.1-fit/crypto/ripemd/rmd_one.c   |   28 +
 .../openssl-1.1-fit/crypto/ripemd/rmdconst.h  |  350 +
 .../openssl-1.1-fit/crypto/rsa/build.info     |    6 +
 .../openssl-1.1-fit/crypto/rsa/rsa_ameth.c    | 1105 ++
 .../openssl-1.1-fit/crypto/rsa/rsa_asn1.c     |  121 +
 .../openssl-1.1-fit/crypto/rsa/rsa_chk.c      |  228 +
 .../openssl-1.1-fit/crypto/rsa/rsa_crpt.c     |  169 +
 .../openssl-1.1-fit/crypto/rsa/rsa_depr.c     |   61 +
 .../openssl-1.1-fit/crypto/rsa/rsa_err.c      |  246 +
 .../openssl-1.1-fit/crypto/rsa/rsa_gen.c      |  394 +
 .../openssl-1.1-fit/crypto/rsa/rsa_lib.c      |  479 +
 .../openssl-1.1-fit/crypto/rsa/rsa_locl.h     |  132 +
 .../openssl-1.1-fit/crypto/rsa/rsa_meth.c     |  287 +
 .../openssl-1.1-fit/crypto/rsa/rsa_mp.c       |  115 +
 .../openssl-1.1-fit/crypto/rsa/rsa_none.c     |   43 +
 .../openssl-1.1-fit/crypto/rsa/rsa_oaep.c     |  313 +
 .../openssl-1.1-fit/crypto/rsa/rsa_ossl.c     |  970 ++
 .../openssl-1.1-fit/crypto/rsa/rsa_pk1.c      |  255 +
 .../openssl-1.1-fit/crypto/rsa/rsa_pmeth.c    |  860 ++
 .../openssl-1.1-fit/crypto/rsa/rsa_prn.c      |   42 +
 .../openssl-1.1-fit/crypto/rsa/rsa_pss.c      |  255 +
 .../openssl-1.1-fit/crypto/rsa/rsa_saos.c     |   95 +
 .../openssl-1.1-fit/crypto/rsa/rsa_sign.c     |  248 +
 .../openssl-1.1-fit/crypto/rsa/rsa_ssl.c      |  167 +
 .../openssl-1.1-fit/crypto/rsa/rsa_x931.c     |  117 +
 .../openssl-1.1-fit/crypto/rsa/rsa_x931g.c    |  200 +
 .../openssl-1.1-fit/crypto/s390x_arch.h       |  103 +
 .../openssl-1.1-fit/crypto/s390xcap.c         |   67 +
 .../openssl-1.1-fit/crypto/s390xcpuid.pl      |  421 +
 .../openssl-1.1-fit/crypto/seed/build.info    |    2 +
 .../openssl-1.1-fit/crypto/seed/seed.c        |  590 +
 .../openssl-1.1-fit/crypto/seed/seed_cbc.c    |   23 +
 .../openssl-1.1-fit/crypto/seed/seed_cfb.c    |   20 +
 .../openssl-1.1-fit/crypto/seed/seed_ecb.c    |   19 +
 .../openssl-1.1-fit/crypto/seed/seed_locl.h   |  112 +
 .../openssl-1.1-fit/crypto/seed/seed_ofb.c    |   19 +
 .../crypto/sha/asm/keccak1600-armv4.pl        | 1606 +++
 .../crypto/sha/asm/keccak1600-armv8.pl        |  880 ++
 .../crypto/sha/asm/keccak1600-avx2.pl         |  482 +
 .../crypto/sha/asm/keccak1600-avx512.pl       |  551 +
 .../crypto/sha/asm/keccak1600-avx512vl.pl     |  392 +
 .../crypto/sha/asm/keccak1600-c64x.pl         |  885 ++
 .../crypto/sha/asm/keccak1600-mmx.pl          |  440 +
 .../crypto/sha/asm/keccak1600-ppc64.pl        |  758 ++
 .../crypto/sha/asm/keccak1600-s390x.pl        |  560 +
 .../crypto/sha/asm/keccak1600-x86_64.pl       |  607 ++
 .../crypto/sha/asm/keccak1600p8-ppc.pl        |  850 ++
 .../crypto/sha/asm/sha1-586.pl                | 1491 +++
 .../crypto/sha/asm/sha1-alpha.pl              |  329 +
 .../crypto/sha/asm/sha1-armv4-large.pl        |  742 ++
 .../crypto/sha/asm/sha1-armv8.pl              |  364 +
 .../crypto/sha/asm/sha1-c64xplus.pl           |  337 +
 .../crypto/sha/asm/sha1-ia64.pl               |  314 +
 .../crypto/sha/asm/sha1-mb-x86_64.pl          | 1628 +++
 .../crypto/sha/asm/sha1-mips.pl               |  461 +
 .../crypto/sha/asm/sha1-parisc.pl             |  279 +
 .../crypto/sha/asm/sha1-ppc.pl                |  351 +
 .../crypto/sha/asm/sha1-s390x.pl              |  249 +
 .../crypto/sha/asm/sha1-sparcv9.pl            |  434 +
 .../crypto/sha/asm/sha1-sparcv9a.pl           |  608 ++
 .../crypto/sha/asm/sha1-thumb.pl              |  266 +
 .../crypto/sha/asm/sha1-x86_64.pl             | 2132 ++++
 .../crypto/sha/asm/sha256-586.pl              | 1296 +++
 .../crypto/sha/asm/sha256-armv4.pl            |  732 ++
 .../crypto/sha/asm/sha256-c64xplus.pl         |  320 +
 .../crypto/sha/asm/sha256-mb-x86_64.pl        | 1614 +++
 .../crypto/sha/asm/sha512-586.pl              |  925 ++
 .../crypto/sha/asm/sha512-armv4.pl            |  668 ++
 .../crypto/sha/asm/sha512-armv8.pl            |  905 ++
 .../crypto/sha/asm/sha512-c64xplus.pl         |  438 +
 .../crypto/sha/asm/sha512-ia64.pl             |  692 ++
 .../crypto/sha/asm/sha512-mips.pl             |  521 +
 .../crypto/sha/asm/sha512-parisc.pl           |  807 ++
 .../crypto/sha/asm/sha512-ppc.pl              |  799 ++
 .../crypto/sha/asm/sha512-s390x.pl            |  324 +
 .../crypto/sha/asm/sha512-sparcv9.pl          |  857 ++
 .../crypto/sha/asm/sha512-x86_64.pl           | 2498 +++++
 .../crypto/sha/asm/sha512p8-ppc.pl            |  420 +
 .../openssl-1.1-fit/crypto/sha/build.info     |   89 +
 .../openssl-1.1-fit/crypto/sha/keccak1600.c   | 1246 +++
 .../openssl-1.1-fit/crypto/sha/sha1_one.c     |   28 +
 .../openssl-1.1-fit/crypto/sha/sha1dgst.c     |   17 +
 .../openssl-1.1-fit/crypto/sha/sha256.c       |  386 +
 .../openssl-1.1-fit/crypto/sha/sha512.c       |  765 ++
 .../openssl-1.1-fit/crypto/sha/sha_locl.h     |  424 +
 .../openssl-1.1-fit/crypto/siphash/build.info |    5 +
 .../openssl-1.1-fit/crypto/siphash/siphash.c  |  260 +
 .../crypto/siphash/siphash_ameth.c            |  123 +
 .../crypto/siphash/siphash_local.h            |   23 +
 .../crypto/siphash/siphash_pmeth.c            |  205 +
 .../openssl-1.1-fit/crypto/sm2/build.info     |    5 +
 .../openssl-1.1-fit/crypto/sm2/sm2_crypt.c    |  393 +
 .../openssl-1.1-fit/crypto/sm2/sm2_err.c      |   69 +
 .../openssl-1.1-fit/crypto/sm2/sm2_pmeth.c    |  325 +
 .../openssl-1.1-fit/crypto/sm2/sm2_sign.c     |  479 +
 .../openssl-1.1-fit/crypto/sm3/build.info     |    2 +
 .../openssl-1.1-fit/crypto/sm3/m_sm3.c        |   52 +
 .../3rdparty/openssl-1.1-fit/crypto/sm3/sm3.c |  196 +
 .../openssl-1.1-fit/crypto/sm3/sm3_locl.h     |   79 +
 .../openssl-1.1-fit/crypto/sm4/build.info     |    4 +
 .../3rdparty/openssl-1.1-fit/crypto/sm4/sm4.c |  233 +
 .../openssl-1.1-fit/crypto/sparc_arch.h       |  118 +
 .../openssl-1.1-fit/crypto/sparccpuid.S       |  578 +
 .../openssl-1.1-fit/crypto/sparcv9cap.c       |  295 +
 .../openssl-1.1-fit/crypto/srp/build.info     |    2 +
 .../openssl-1.1-fit/crypto/srp/srp_lib.c      |  286 +
 .../openssl-1.1-fit/crypto/srp/srp_vfy.c      |  730 ++
 .../openssl-1.1-fit/crypto/stack/build.info   |    2 +
 .../openssl-1.1-fit/crypto/stack/stack.c      |  413 +
 .../openssl-1.1-fit/crypto/store/build.info   |    4 +
 .../crypto/store/loader_file.c                | 1440 +++
 .../openssl-1.1-fit/crypto/store/store_err.c  |  146 +
 .../openssl-1.1-fit/crypto/store/store_init.c |   33 +
 .../openssl-1.1-fit/crypto/store/store_lib.c  |  681 ++
 .../openssl-1.1-fit/crypto/store/store_locl.h |  132 +
 .../crypto/store/store_register.c             |  297 +
 .../crypto/store/store_strings.c              |   28 +
 .../openssl-1.1-fit/crypto/threads_none.c     |  136 +
 .../openssl-1.1-fit/crypto/threads_pthread.c  |  196 +
 .../openssl-1.1-fit/crypto/threads_win.c      |  163 +
 .../openssl-1.1-fit/crypto/ts/build.info      |    5 +
 .../openssl-1.1-fit/crypto/ts/ts_asn1.c       |  276 +
 .../openssl-1.1-fit/crypto/ts/ts_conf.c       |  493 +
 .../openssl-1.1-fit/crypto/ts/ts_err.c        |  184 +
 .../openssl-1.1-fit/crypto/ts/ts_lcl.h        |  211 +
 .../openssl-1.1-fit/crypto/ts/ts_lib.c        |   92 +
 .../openssl-1.1-fit/crypto/ts/ts_req_print.c  |   51 +
 .../openssl-1.1-fit/crypto/ts/ts_req_utils.c  |  183 +
 .../openssl-1.1-fit/crypto/ts/ts_rsp_print.c  |  195 +
 .../openssl-1.1-fit/crypto/ts/ts_rsp_sign.c   | 1057 ++
 .../openssl-1.1-fit/crypto/ts/ts_rsp_utils.c  |  365 +
 .../openssl-1.1-fit/crypto/ts/ts_rsp_verify.c |  704 ++
 .../openssl-1.1-fit/crypto/ts/ts_verify_ctx.c |  146 +
 .../openssl-1.1-fit/crypto/txt_db/build.info  |    2 +
 .../openssl-1.1-fit/crypto/txt_db/txt_db.c    |  317 +
 .../openssl-1.1-fit/crypto/ui/build.info      |    3 +
 .../openssl-1.1-fit/crypto/ui/ui_err.c        |   78 +
 .../openssl-1.1-fit/crypto/ui/ui_lib.c        |  954 ++
 .../openssl-1.1-fit/crypto/ui/ui_locl.h       |  109 +
 .../openssl-1.1-fit/crypto/ui/ui_null.c       |   26 +
 .../openssl-1.1-fit/crypto/ui/ui_openssl.c    |  744 ++
 .../openssl-1.1-fit/crypto/ui/ui_util.c       |  162 +
 trunk/3rdparty/openssl-1.1-fit/crypto/uid.c   |   49 +
 .../3rdparty/openssl-1.1-fit/crypto/vms_rms.h |   58 +
 .../crypto/whrlpool/asm/wp-mmx.pl             |  507 +
 .../crypto/whrlpool/asm/wp-x86_64.pl          |  617 ++
 .../crypto/whrlpool/build.info                |    8 +
 .../crypto/whrlpool/wp_block.c                |  784 ++
 .../openssl-1.1-fit/crypto/whrlpool/wp_dgst.c |  258 +
 .../openssl-1.1-fit/crypto/whrlpool/wp_locl.h |   12 +
 .../openssl-1.1-fit/crypto/x509/build.info    |   10 +
 .../openssl-1.1-fit/crypto/x509/by_dir.c      |  390 +
 .../openssl-1.1-fit/crypto/x509/by_file.c     |  227 +
 .../openssl-1.1-fit/crypto/x509/t_crl.c       |   94 +
 .../openssl-1.1-fit/crypto/x509/t_req.c       |  210 +
 .../openssl-1.1-fit/crypto/x509/t_x509.c      |  379 +
 .../openssl-1.1-fit/crypto/x509/x509_att.c    |  329 +
 .../openssl-1.1-fit/crypto/x509/x509_cmp.c    |  458 +
 .../openssl-1.1-fit/crypto/x509/x509_d2.c     |   57 +
 .../openssl-1.1-fit/crypto/x509/x509_def.c    |   43 +
 .../openssl-1.1-fit/crypto/x509/x509_err.c    |  181 +
 .../openssl-1.1-fit/crypto/x509/x509_ext.c    |  159 +
 .../openssl-1.1-fit/crypto/x509/x509_lcl.h    |  147 +
 .../openssl-1.1-fit/crypto/x509/x509_lu.c     |  898 ++
 .../openssl-1.1-fit/crypto/x509/x509_meth.c   |  166 +
 .../openssl-1.1-fit/crypto/x509/x509_obj.c    |  181 +
 .../openssl-1.1-fit/crypto/x509/x509_r2x.c    |   67 +
 .../openssl-1.1-fit/crypto/x509/x509_req.c    |  298 +
 .../openssl-1.1-fit/crypto/x509/x509_set.c    |  237 +
 .../openssl-1.1-fit/crypto/x509/x509_trs.c    |  299 +
 .../openssl-1.1-fit/crypto/x509/x509_txt.c    |  182 +
 .../openssl-1.1-fit/crypto/x509/x509_v3.c     |  235 +
 .../openssl-1.1-fit/crypto/x509/x509_vfy.c    | 3275 ++++++
 .../openssl-1.1-fit/crypto/x509/x509_vpm.c    |  602 ++
 .../openssl-1.1-fit/crypto/x509/x509cset.c    |  183 +
 .../openssl-1.1-fit/crypto/x509/x509name.c    |  360 +
 .../openssl-1.1-fit/crypto/x509/x509rset.c    |   40 +
 .../openssl-1.1-fit/crypto/x509/x509spki.c    |   75 +
 .../openssl-1.1-fit/crypto/x509/x509type.c    |   84 +
 .../openssl-1.1-fit/crypto/x509/x_all.c       |  525 +
 .../openssl-1.1-fit/crypto/x509/x_attrib.c    |   55 +
 .../openssl-1.1-fit/crypto/x509/x_crl.c       |  478 +
 .../openssl-1.1-fit/crypto/x509/x_exten.c     |   28 +
 .../openssl-1.1-fit/crypto/x509/x_name.c      |  551 +
 .../openssl-1.1-fit/crypto/x509/x_pubkey.c    |  375 +
 .../openssl-1.1-fit/crypto/x509/x_req.c       |   68 +
 .../openssl-1.1-fit/crypto/x509/x_x509.c      |  247 +
 .../openssl-1.1-fit/crypto/x509/x_x509a.c     |  169 +
 .../openssl-1.1-fit/crypto/x509v3/build.info  |    8 +
 .../openssl-1.1-fit/crypto/x509v3/ext_dat.h   |   25 +
 .../openssl-1.1-fit/crypto/x509v3/pcy_cache.c |  224 +
 .../openssl-1.1-fit/crypto/x509v3/pcy_data.c  |   81 +
 .../openssl-1.1-fit/crypto/x509v3/pcy_int.h   |  167 +
 .../openssl-1.1-fit/crypto/x509v3/pcy_lib.c   |  108 +
 .../openssl-1.1-fit/crypto/x509v3/pcy_map.c   |   81 +
 .../openssl-1.1-fit/crypto/x509v3/pcy_node.c  |  147 +
 .../openssl-1.1-fit/crypto/x509v3/pcy_tree.c  |  703 ++
 .../crypto/x509v3/standard_exts.h             |   78 +
 .../openssl-1.1-fit/crypto/x509v3/v3_addr.c   | 1315 +++
 .../openssl-1.1-fit/crypto/x509v3/v3_admis.c  |  356 +
 .../openssl-1.1-fit/crypto/x509v3/v3_admis.h  |   38 +
 .../openssl-1.1-fit/crypto/x509v3/v3_akey.c   |  160 +
 .../openssl-1.1-fit/crypto/x509v3/v3_akeya.c  |   23 +
 .../openssl-1.1-fit/crypto/x509v3/v3_alt.c    |  592 +
 .../openssl-1.1-fit/crypto/x509v3/v3_asid.c   |  880 ++
 .../openssl-1.1-fit/crypto/x509v3/v3_bcons.c  |   84 +
 .../openssl-1.1-fit/crypto/x509v3/v3_bitst.c  |   93 +
 .../openssl-1.1-fit/crypto/x509v3/v3_conf.c   |  511 +
 .../openssl-1.1-fit/crypto/x509v3/v3_cpols.c  |  491 +
 .../openssl-1.1-fit/crypto/x509v3/v3_crld.c   |  506 +
 .../openssl-1.1-fit/crypto/x509v3/v3_enum.c   |   53 +
 .../openssl-1.1-fit/crypto/x509v3/v3_extku.c  |  103 +
 .../openssl-1.1-fit/crypto/x509v3/v3_genn.c   |  201 +
 .../openssl-1.1-fit/crypto/x509v3/v3_ia5.c    |   65 +
 .../openssl-1.1-fit/crypto/x509v3/v3_info.c   |  162 +
 .../openssl-1.1-fit/crypto/x509v3/v3_int.c    |   43 +
 .../openssl-1.1-fit/crypto/x509v3/v3_lib.c    |  303 +
 .../openssl-1.1-fit/crypto/x509v3/v3_ncons.c  |  675 ++
 .../openssl-1.1-fit/crypto/x509v3/v3_pci.c    |  325 +
 .../openssl-1.1-fit/crypto/x509v3/v3_pcia.c   |   64 +
 .../openssl-1.1-fit/crypto/x509v3/v3_pcons.c  |   91 +
 .../openssl-1.1-fit/crypto/x509v3/v3_pku.c    |   52 +
 .../openssl-1.1-fit/crypto/x509v3/v3_pmaps.c  |  112 +
 .../openssl-1.1-fit/crypto/x509v3/v3_prn.c    |  210 +
 .../openssl-1.1-fit/crypto/x509v3/v3_purp.c   |  890 ++
 .../openssl-1.1-fit/crypto/x509v3/v3_skey.c   |  106 +
 .../openssl-1.1-fit/crypto/x509v3/v3_sxnet.c  |  226 +
 .../openssl-1.1-fit/crypto/x509v3/v3_tlsf.c   |  137 +
 .../openssl-1.1-fit/crypto/x509v3/v3_utl.c    | 1239 +++
 .../openssl-1.1-fit/crypto/x509v3/v3err.c     |  257 +
 .../openssl-1.1-fit/crypto/x86_64cpuid.pl     |  495 +
 .../openssl-1.1-fit/crypto/x86cpuid.pl        |  509 +
 trunk/3rdparty/openssl-1.1-fit/e_os.h         |  334 +
 .../engines/asm/e_padlock-x86.pl              |  627 ++
 .../engines/asm/e_padlock-x86_64.pl           |  583 +
 .../openssl-1.1-fit/engines/build.info        |   43 +
 .../openssl-1.1-fit/engines/e_afalg.c         |  870 ++
 .../openssl-1.1-fit/engines/e_afalg.ec        |    3 +
 .../openssl-1.1-fit/engines/e_afalg.h         |   95 +
 .../openssl-1.1-fit/engines/e_afalg.txt       |   30 +
 .../openssl-1.1-fit/engines/e_afalg_err.c     |   83 +
 .../openssl-1.1-fit/engines/e_afalg_err.h     |   43 +
 .../3rdparty/openssl-1.1-fit/engines/e_capi.c | 1904 ++++
 .../openssl-1.1-fit/engines/e_capi.ec         |    3 +
 .../openssl-1.1-fit/engines/e_capi.txt        |   62 +
 .../openssl-1.1-fit/engines/e_capi_err.c      |  119 +
 .../openssl-1.1-fit/engines/e_capi_err.h      |   75 +
 .../openssl-1.1-fit/engines/e_dasync.c        |  785 ++
 .../openssl-1.1-fit/engines/e_dasync.ec       |    3 +
 .../openssl-1.1-fit/engines/e_dasync.txt      |   22 +
 .../openssl-1.1-fit/engines/e_dasync_err.c    |   73 +
 .../openssl-1.1-fit/engines/e_dasync_err.h    |   37 +
 .../openssl-1.1-fit/engines/e_ossltest.c      |  696 ++
 .../openssl-1.1-fit/engines/e_ossltest.ec     |    3 +
 .../openssl-1.1-fit/engines/e_ossltest.txt    |   13 +
 .../openssl-1.1-fit/engines/e_ossltest_err.c  |   63 +
 .../openssl-1.1-fit/engines/e_ossltest_err.h  |   28 +
 .../openssl-1.1-fit/engines/e_padlock.c       |  747 ++
 .../external/perl/Downloaded.txt              |   13 +
 .../external/perl/Text-Template-1.46/Artistic |  131 +
 .../external/perl/Text-Template-1.46/COPYING  |  340 +
 .../external/perl/Text-Template-1.46/INSTALL  |   31 +
 .../external/perl/Text-Template-1.46/MANIFEST |   25 +
 .../perl/Text-Template-1.46/META.json         |   39 +
 .../external/perl/Text-Template-1.46/META.yml |   21 +
 .../perl/Text-Template-1.46/Makefile.PL       |    7 +
 .../external/perl/Text-Template-1.46/README   |  339 +
 .../Text-Template-1.46/lib/Text/Template.pm   | 1973 ++++
 .../lib/Text/Template/Preprocess.pm           |  144 +
 .../perl/Text-Template-1.46/t/00-version.t    |   11 +
 .../perl/Text-Template-1.46/t/01-basic.t      |  266 +
 .../perl/Text-Template-1.46/t/02-hash.t       |  111 +
 .../perl/Text-Template-1.46/t/03-out.t        |   56 +
 .../perl/Text-Template-1.46/t/04-safe.t       |  161 +
 .../perl/Text-Template-1.46/t/05-safe2.t      |  105 +
 .../perl/Text-Template-1.46/t/06-ofh.t        |   39 +
 .../perl/Text-Template-1.46/t/07-safe3.t      |   91 +
 .../perl/Text-Template-1.46/t/08-exported.t   |   75 +
 .../perl/Text-Template-1.46/t/09-error.t      |   63 +
 .../perl/Text-Template-1.46/t/10-delimiters.t |   99 +
 .../perl/Text-Template-1.46/t/11-prepend.t    |   94 +
 .../perl/Text-Template-1.46/t/12-preprocess.t |   52 +
 .../perl/Text-Template-1.46/t/13-taint.t      |  119 +
 .../perl/Text-Template-1.46/t/14-broken.t     |   82 +
 .../external/perl/transfer/Text/Template.pm   |   23 +
 trunk/3rdparty/openssl-1.1-fit/fuzz/README.md |  131 +
 trunk/3rdparty/openssl-1.1-fit/fuzz/asn1.c    |  352 +
 .../3rdparty/openssl-1.1-fit/fuzz/asn1parse.c |   43 +
 trunk/3rdparty/openssl-1.1-fit/fuzz/bignum.c  |  109 +
 trunk/3rdparty/openssl-1.1-fit/fuzz/bndiv.c   |  131 +
 .../3rdparty/openssl-1.1-fit/fuzz/build.info  |  121 +
 trunk/3rdparty/openssl-1.1-fit/fuzz/client.c  |  102 +
 trunk/3rdparty/openssl-1.1-fit/fuzz/cms.c     |   55 +
 trunk/3rdparty/openssl-1.1-fit/fuzz/conf.c    |   48 +
 trunk/3rdparty/openssl-1.1-fit/fuzz/crl.c     |   47 +
 trunk/3rdparty/openssl-1.1-fit/fuzz/ct.c      |   51 +
 trunk/3rdparty/openssl-1.1-fit/fuzz/driver.c  |   55 +
 trunk/3rdparty/openssl-1.1-fit/fuzz/fuzzer.h  |   14 +
 trunk/3rdparty/openssl-1.1-fit/fuzz/helper.py |   52 +
 .../openssl-1.1-fit/fuzz/mkfuzzoids.pl        |   32 +
 trunk/3rdparty/openssl-1.1-fit/fuzz/oids.txt  | 1065 ++
 trunk/3rdparty/openssl-1.1-fit/fuzz/rand.inc  |   40 +
 trunk/3rdparty/openssl-1.1-fit/fuzz/server.c  |  650 ++
 .../openssl-1.1-fit/fuzz/test-corpus.c        |  104 +
 trunk/3rdparty/openssl-1.1-fit/fuzz/x509.c    |   51 +
 .../internal/__DECC_INCLUDE_EPILOGUE.H        |   16 +
 .../internal/__DECC_INCLUDE_PROLOGUE.H        |   20 +
 .../openssl-1.1-fit/include/internal/bio.h    |   33 +
 .../openssl-1.1-fit/include/internal/comp.h   |   12 +
 .../openssl-1.1-fit/include/internal/conf.h   |   30 +
 .../include/internal/constant_time_locl.h     |  333 +
 .../include/internal/cryptlib.h               |   98 +
 .../openssl-1.1-fit/include/internal/dane.h   |  103 +
 .../openssl-1.1-fit/include/internal/dso.h    |  165 +
 .../openssl-1.1-fit/include/internal/dsoerr.h |   83 +
 .../openssl-1.1-fit/include/internal/err.h    |   15 +
 .../openssl-1.1-fit/include/internal/nelem.h  |   14 +
 .../include/internal/numbers.h                |   68 +
 .../openssl-1.1-fit/include/internal/o_dir.h  |   52 +
 .../openssl-1.1-fit/include/internal/o_str.h  |   17 +
 .../include/internal/refcount.h               |  140 +
 .../include/internal/sockets.h                |  155 +
 .../include/internal/sslconf.h                |   20 +
 .../include/internal/thread_once.h            |  137 +
 .../include/internal/tsan_assist.h            |  144 +
 .../include/openssl/__DECC_INCLUDE_EPILOGUE.H |   16 +
 .../include/openssl/__DECC_INCLUDE_PROLOGUE.H |   20 +
 .../openssl-1.1-fit/include/openssl/aes.h     |   92 +
 .../openssl-1.1-fit/include/openssl/asn1.h    |  886 ++
 .../include/openssl/asn1_mac.h                |   10 +
 .../openssl-1.1-fit/include/openssl/asn1err.h |  252 +
 .../openssl-1.1-fit/include/openssl/asn1t.h   |  945 ++
 .../openssl-1.1-fit/include/openssl/async.h   |   76 +
 .../include/openssl/asyncerr.h                |   38 +
 .../openssl-1.1-fit/include/openssl/bio.h     |  804 ++
 .../openssl-1.1-fit/include/openssl/bioerr.h  |  120 +
 .../include/openssl/blowfish.h                |   61 +
 .../openssl-1.1-fit/include/openssl/bn.h      |  539 +
 .../openssl-1.1-fit/include/openssl/bnerr.h   |   96 +
 .../openssl-1.1-fit/include/openssl/buffer.h  |   58 +
 .../include/openssl/buffererr.h               |   30 +
 .../include/openssl/camellia.h                |   83 +
 .../openssl-1.1-fit/include/openssl/cast.h    |   53 +
 .../openssl-1.1-fit/include/openssl/cmac.h    |   41 +
 .../openssl-1.1-fit/include/openssl/cms.h     |  342 +
 .../openssl-1.1-fit/include/openssl/cmserr.h  |  196 +
 .../openssl-1.1-fit/include/openssl/comp.h    |   53 +
 .../openssl-1.1-fit/include/openssl/comperr.h |   40 +
 .../openssl-1.1-fit/include/openssl/conf.h    |  168 +
 .../include/openssl/conf_api.h                |   40 +
 .../openssl-1.1-fit/include/openssl/conferr.h |   72 +
 .../openssl-1.1-fit/include/openssl/crypto.h  |  445 +
 .../include/openssl/cryptoerr.h               |   56 +
 .../openssl-1.1-fit/include/openssl/ct.h      |  476 +
 .../openssl-1.1-fit/include/openssl/cterr.h   |   76 +
 .../openssl-1.1-fit/include/openssl/des.h     |  174 +
 .../openssl-1.1-fit/include/openssl/dh.h      |  340 +
 .../openssl-1.1-fit/include/openssl/dherr.h   |   84 +
 .../openssl-1.1-fit/include/openssl/dsa.h     |  238 +
 .../openssl-1.1-fit/include/openssl/dsaerr.h  |   67 +
 .../openssl-1.1-fit/include/openssl/dtls1.h   |   55 +
 .../openssl-1.1-fit/include/openssl/e_os2.h   |  300 +
 .../openssl-1.1-fit/include/openssl/ebcdic.h  |   33 +
 .../openssl-1.1-fit/include/openssl/ec.h      | 1478 +++
 .../openssl-1.1-fit/include/openssl/ecdh.h    |   10 +
 .../openssl-1.1-fit/include/openssl/ecdsa.h   |   10 +
 .../openssl-1.1-fit/include/openssl/ecerr.h   |  271 +
 .../openssl-1.1-fit/include/openssl/engine.h  |  751 ++
 .../include/openssl/engineerr.h               |  107 +
 .../openssl-1.1-fit/include/openssl/err.h     |  273 +
 .../openssl-1.1-fit/include/openssl/evp.h     | 1633 +++
 .../openssl-1.1-fit/include/openssl/evperr.h  |  194 +
 .../openssl-1.1-fit/include/openssl/hmac.h    |   51 +
 .../openssl-1.1-fit/include/openssl/idea.h    |   64 +
 .../openssl-1.1-fit/include/openssl/kdf.h     |   97 +
 .../openssl-1.1-fit/include/openssl/kdferr.h  |   51 +
 .../openssl-1.1-fit/include/openssl/lhash.h   |  242 +
 .../openssl-1.1-fit/include/openssl/md2.h     |   44 +
 .../openssl-1.1-fit/include/openssl/md4.h     |   51 +
 .../openssl-1.1-fit/include/openssl/md5.h     |   50 +
 .../openssl-1.1-fit/include/openssl/mdc2.h    |   42 +
 .../openssl-1.1-fit/include/openssl/modes.h   |  208 +
 .../openssl-1.1-fit/include/openssl/obj_mac.h | 5198 +++++++++
 .../openssl-1.1-fit/include/openssl/objects.h |  175 +
 .../include/openssl/objectserr.h              |   38 +
 .../openssl-1.1-fit/include/openssl/ocsp.h    |  352 +
 .../openssl-1.1-fit/include/openssl/ocsperr.h |   74 +
 .../include/openssl/opensslconf.h.in          |  155 +
 .../include/openssl/opensslv.h                |  101 +
 .../include/openssl/ossl_typ.h                |  196 +
 .../openssl-1.1-fit/include/openssl/pem.h     |  378 +
 .../openssl-1.1-fit/include/openssl/pem2.h    |   13 +
 .../openssl-1.1-fit/include/openssl/pemerr.h  |   99 +
 .../openssl-1.1-fit/include/openssl/pkcs12.h  |  223 +
 .../include/openssl/pkcs12err.h               |   77 +
 .../openssl-1.1-fit/include/openssl/pkcs7.h   |  319 +
 .../include/openssl/pkcs7err.h                |   99 +
 .../openssl-1.1-fit/include/openssl/rand.h    |   77 +
 .../include/openssl/rand_drbg.h               |  130 +
 .../openssl-1.1-fit/include/openssl/randerr.h |   89 +
 .../openssl-1.1-fit/include/openssl/rc2.h     |   51 +
 .../openssl-1.1-fit/include/openssl/rc4.h     |   36 +
 .../openssl-1.1-fit/include/openssl/rc5.h     |   63 +
 .../openssl-1.1-fit/include/openssl/ripemd.h  |   47 +
 .../openssl-1.1-fit/include/openssl/rsa.h     |  512 +
 .../openssl-1.1-fit/include/openssl/rsaerr.h  |  162 +
 .../include/openssl/safestack.h               |  207 +
 .../openssl-1.1-fit/include/openssl/seed.h    |   96 +
 .../openssl-1.1-fit/include/openssl/sha.h     |  119 +
 .../openssl-1.1-fit/include/openssl/srp.h     |  135 +
 .../openssl-1.1-fit/include/openssl/srtp.h    |   50 +
 .../openssl-1.1-fit/include/openssl/ssl.h     | 2438 +++++
 .../openssl-1.1-fit/include/openssl/ssl2.h    |   24 +
 .../openssl-1.1-fit/include/openssl/ssl3.h    |  339 +
 .../openssl-1.1-fit/include/openssl/sslerr.h  |  768 ++
 .../openssl-1.1-fit/include/openssl/stack.h   |   83 +
 .../openssl-1.1-fit/include/openssl/store.h   |  266 +
 .../include/openssl/storeerr.h                |   87 +
 .../include/openssl/symhacks.h                |   37 +
 .../openssl-1.1-fit/include/openssl/tls1.h    | 1237 +++
 .../openssl-1.1-fit/include/openssl/ts.h      |  559 +
 .../openssl-1.1-fit/include/openssl/tserr.h   |  128 +
 .../openssl-1.1-fit/include/openssl/txt_db.h  |   57 +
 .../openssl-1.1-fit/include/openssl/ui.h      |  368 +
 .../openssl-1.1-fit/include/openssl/uierr.h   |   61 +
 .../include/openssl/whrlpool.h                |   48 +
 .../openssl-1.1-fit/include/openssl/x509.h    | 1047 ++
 .../include/openssl/x509_vfy.h                |  628 ++
 .../openssl-1.1-fit/include/openssl/x509err.h |  125 +
 .../openssl-1.1-fit/include/openssl/x509v3.h  |  935 ++
 .../include/openssl/x509v3err.h               |  158 +
 trunk/3rdparty/openssl-1.1-fit/ms/applink.c   |  138 +
 trunk/3rdparty/openssl-1.1-fit/ms/cmp.pl      |   53 +
 .../openssl-1.1-fit/ms/uplink-common.pl       |   28 +
 .../openssl-1.1-fit/ms/uplink-ia64.pl         |   61 +
 .../3rdparty/openssl-1.1-fit/ms/uplink-x86.pl |   44 +
 .../openssl-1.1-fit/ms/uplink-x86_64.pl       |   71 +
 trunk/3rdparty/openssl-1.1-fit/ms/uplink.c    |  135 +
 trunk/3rdparty/openssl-1.1-fit/ms/uplink.h    |   38 +
 trunk/3rdparty/openssl-1.1-fit/os-dep/haiku.h |    2 +
 trunk/3rdparty/openssl-1.1-fit/ssl/bio_ssl.c  |  505 +
 trunk/3rdparty/openssl-1.1-fit/ssl/build.info |   15 +
 trunk/3rdparty/openssl-1.1-fit/ssl/d1_lib.c   |  972 ++
 trunk/3rdparty/openssl-1.1-fit/ssl/d1_msg.c   |   73 +
 trunk/3rdparty/openssl-1.1-fit/ssl/d1_srtp.c  |  139 +
 trunk/3rdparty/openssl-1.1-fit/ssl/methods.c  |  278 +
 trunk/3rdparty/openssl-1.1-fit/ssl/packet.c   |  424 +
 .../openssl-1.1-fit/ssl/packet_locl.h         |  874 ++
 trunk/3rdparty/openssl-1.1-fit/ssl/pqueue.c   |  158 +
 .../openssl-1.1-fit/ssl/record/README         |   74 +
 .../openssl-1.1-fit/ssl/record/dtls1_bitmap.c |   78 +
 .../openssl-1.1-fit/ssl/record/rec_layer_d1.c | 1059 ++
 .../openssl-1.1-fit/ssl/record/rec_layer_s3.c | 1771 +++
 .../openssl-1.1-fit/ssl/record/record.h       |  236 +
 .../openssl-1.1-fit/ssl/record/record_locl.h  |  116 +
 .../openssl-1.1-fit/ssl/record/ssl3_buffer.c  |  179 +
 .../openssl-1.1-fit/ssl/record/ssl3_record.c  | 2057 ++++
 .../ssl/record/ssl3_record_tls13.c            |  196 +
 trunk/3rdparty/openssl-1.1-fit/ssl/s3_cbc.c   |  487 +
 trunk/3rdparty/openssl-1.1-fit/ssl/s3_enc.c   |  595 +
 trunk/3rdparty/openssl-1.1-fit/ssl/s3_lib.c   | 4864 +++++++++
 trunk/3rdparty/openssl-1.1-fit/ssl/s3_msg.c   |  104 +
 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_asn1.c |  393 +
 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_cert.c | 1040 ++
 .../openssl-1.1-fit/ssl/ssl_cert_table.h      |   23 +
 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_ciph.c | 2163 ++++
 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_conf.c |  993 ++
 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_err.c  | 1277 +++
 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_init.c |  221 +
 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_lib.c  | 5581 ++++++++++
 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_locl.h | 2666 +++++
 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_mcnf.c |   99 +
 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_rsa.c  | 1148 ++
 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_sess.c | 1317 +++
 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_stat.c |  388 +
 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_txt.c  |  203 +
 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_utst.c |   24 +
 .../openssl-1.1-fit/ssl/statem/README         |   63 +
 .../openssl-1.1-fit/ssl/statem/extensions.c   | 1700 +++
 .../ssl/statem/extensions_clnt.c              | 1991 ++++
 .../ssl/statem/extensions_cust.c              |  533 +
 .../ssl/statem/extensions_srvr.c              | 1959 ++++
 .../openssl-1.1-fit/ssl/statem/statem.c       |  972 ++
 .../openssl-1.1-fit/ssl/statem/statem.h       |  157 +
 .../openssl-1.1-fit/ssl/statem/statem_clnt.c  | 3851 +++++++
 .../openssl-1.1-fit/ssl/statem/statem_dtls.c  | 1281 +++
 .../openssl-1.1-fit/ssl/statem/statem_lib.c   | 2403 +++++
 .../openssl-1.1-fit/ssl/statem/statem_locl.h  |  420 +
 .../openssl-1.1-fit/ssl/statem/statem_srvr.c  | 4272 ++++++++
 trunk/3rdparty/openssl-1.1-fit/ssl/t1_enc.c   |  678 ++
 trunk/3rdparty/openssl-1.1-fit/ssl/t1_lib.c   | 2792 +++++
 trunk/3rdparty/openssl-1.1-fit/ssl/t1_trce.c  | 1566 +++
 .../3rdparty/openssl-1.1-fit/ssl/tls13_enc.c  |  833 ++
 trunk/3rdparty/openssl-1.1-fit/ssl/tls_srp.c  |  456 +
 .../3rdparty/openssl-1.1-fit/tools/build.info |    7 +
 .../openssl-1.1-fit/tools/c_rehash.in         |  231 +
 .../openssl-1.1-fit/util/add-depends.pl       |  288 +
 .../3rdparty/openssl-1.1-fit/util/build.info  |    8 +
 .../openssl-1.1-fit/util/check-malloc-errs    |   16 +
 .../3rdparty/openssl-1.1-fit/util/ck_errf.pl  |  152 +
 trunk/3rdparty/openssl-1.1-fit/util/copy.pl   |   84 +
 trunk/3rdparty/openssl-1.1-fit/util/dofile.pl |  210 +
 trunk/3rdparty/openssl-1.1-fit/util/echo.pl   |   12 +
 .../openssl-1.1-fit/util/find-doc-nits        |  545 +
 .../openssl-1.1-fit/util/find-unused-errs     |   54 +
 .../3rdparty/openssl-1.1-fit/util/indent.pro  |  643 ++
 .../openssl-1.1-fit/util/libcrypto.num        | 4581 ++++++++
 .../3rdparty/openssl-1.1-fit/util/libssl.num  |  500 +
 .../openssl-1.1-fit/util/local_shlib.com.in   |   30 +
 .../openssl-1.1-fit/util/mkbuildinf.pl        |   56 +
 trunk/3rdparty/openssl-1.1-fit/util/mkdef.pl  | 1633 +++
 .../3rdparty/openssl-1.1-fit/util/mkdir-p.pl  |   44 +
 trunk/3rdparty/openssl-1.1-fit/util/mkerr.pl  |  753 ++
 trunk/3rdparty/openssl-1.1-fit/util/mkrc.pl   |   93 +
 .../util/openssl-format-source                |  175 +
 .../util/openssl-update-copyright             |   63 +
 .../openssl-1.1-fit/util/opensslwrap.sh       |   26 +
 .../openssl-1.1-fit/util/perl/OpenSSL/Glob.pm |   21 +
 .../openssl-1.1-fit/util/perl/OpenSSL/Test.pm | 1216 +++
 .../util/perl/OpenSSL/Test/Simple.pm          |   91 +
 .../util/perl/OpenSSL/Test/Utils.pm           |  240 +
 .../util/perl/OpenSSL/Util/Pod.pm             |  149 +
 .../util/perl/TLSProxy/Alert.pm               |   51 +
 .../util/perl/TLSProxy/Certificate.pm         |  214 +
 .../util/perl/TLSProxy/CertificateVerify.pm   |   96 +
 .../util/perl/TLSProxy/ClientHello.pm         |  258 +
 .../util/perl/TLSProxy/EncryptedExtensions.pm |  110 +
 .../util/perl/TLSProxy/Message.pm             |  592 +
 .../util/perl/TLSProxy/NewSessionTicket.pm    |   81 +
 .../util/perl/TLSProxy/Proxy.pm               |  728 ++
 .../util/perl/TLSProxy/Record.pm              |  401 +
 .../util/perl/TLSProxy/ServerHello.pm         |  236 +
 .../util/perl/TLSProxy/ServerKeyExchange.pm   |  157 +
 .../util/perl/checkhandshake.pm               |  228 +
 .../util/perl/with_fallback.pm                |   27 +
 .../3rdparty/openssl-1.1-fit/util/private.num |  457 +
 .../openssl-1.1-fit/util/process_docs.pl      |  271 +
 .../openssl-1.1-fit/util/shlib_wrap.sh.in     |  138 +
 .../openssl-1.1-fit/util/su-filter.pl         |  264 +
 .../openssl-1.1-fit/util/unlocal_shlib.com.in |   26 +
 trunk/3rdparty/openssl-1.1.0e.zip             |  Bin 6623784 -> 0 bytes
 trunk/auto/depends.sh                         |   17 +-
 trunk/src/core/srs_core_version4.hpp          |    2 +-
 1476 files changed, 616554 insertions(+), 4 deletions(-)
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/00-base-templates.conf
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/10-main.conf
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/15-android.conf
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/15-ios.conf
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/50-djgpp.conf
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/50-haiku.conf
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/50-masm.conf
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/50-win-onecore.conf
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/INTERNALS.Configure
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/README
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/README.design
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/common.tmpl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/common0.tmpl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/descrip.mms.tmpl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/shared-info.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/unix-Makefile.tmpl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/unix-checker.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/windows-checker.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/Configurations/windows-makefile.tmpl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/Configure
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/LICENSE
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/README.md
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/CA.pl.in
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/app_rand.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/apps.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/apps.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/asn1pars.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/bf_prefix.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/ca-cert.srl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/ca-key.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/ca-req.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/ca.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/cert.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/ciphers.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/client.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/cms.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/crl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/crl2p7.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/ct_log_list.cnf
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/demoSRP/srp_verifier.txt
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/demoSRP/srp_verifier.txt.attr
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/dgst.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/dh1024.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/dh2048.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/dh4096.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/dhparam.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/dsa-ca.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/dsa-pca.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/dsa.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/dsa1024.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/dsa512.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/dsap.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/dsaparam.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/ec.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/ecparam.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/engine.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/errstr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/gendsa.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/genpkey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/genrsa.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/nseq.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/ocsp.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/openssl-vms.cnf
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/openssl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/openssl.cnf
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/opt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/passwd.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/pca-cert.srl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/pca-key.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/pca-req.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/pkcs12.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/pkcs7.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/pkcs8.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/pkey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/pkeyparam.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/pkeyutl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/prime.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/privkey.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/progs.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/rand.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/rehash.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/req.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/req.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/rsa.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/rsa8192.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/rsautl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/s1024key.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/s1024req.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/s512-key.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/s512-req.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/s_apps.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/s_cb.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/s_client.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/s_server.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/s_socket.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/s_time.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/server.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/server.srl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/server2.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/sess_id.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/smime.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/speed.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/spkac.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/srp.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/storeutl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/testCA.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/testdsa.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/testrsa.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/timeouts.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/ts.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/tsget.in
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/verify.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/version.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/vms_decc_init.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/vms_term_sock.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/vms_term_sock.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/win32_init.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/apps/x509.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/appveyor.yml
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/build.info
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/config
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/config.com
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_nyi.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_unix.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_vms.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_win.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_win32.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_wince.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_cbc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_cfb.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_core.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_ecb.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_ige.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_misc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_ofb.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_wrap.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_x86core.c
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-586.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-armv4.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-c64xplus.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-ia64.S
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-mips.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-parisc.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-ppc.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-s390x.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-sparcv9.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesfx-sparcv9.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-mb-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-sha1-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-sha256-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-x86.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-x86_64.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesp8-ppc.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aest4-sparcv9.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesv8-armx.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/bsaes-armv7.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/bsaes-x86_64.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/vpaes-armv8.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/vpaes-ppc.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/vpaes-x86.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/vpaes-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aes/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/alphacpuid.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aria/aria.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/aria/build.info
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/arm64cpuid.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/arm_arch.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/armcap.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/armv4cpuid.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_bitstr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_d2i_fp.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_digest.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_dup.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_gentm.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_i2d_fp.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_int.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_mbstr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_object.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_octet.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_print.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_sign.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_strex.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_strnid.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_time.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_type.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_utctm.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_utf8.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_verify.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/ameth_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_gen.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_item_list.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_item_list.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_par.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn_mime.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn_moid.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn_mstbl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn_pack.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/bio_asn1.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/bio_ndef.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/charmap.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/charmap.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/d2i_pr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/d2i_pu.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/evp_asn1.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/f_int.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/f_string.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/i2d_pr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/i2d_pu.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/n_pkey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/nsseq.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/p5_pbe.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/p5_pbev2.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/p5_scrypt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/p8_pkey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/standard_methods.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/t_bitst.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/t_pkey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/t_spki.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_dec.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_fre.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_new.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_prn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_scn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_typ.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_utl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tbl_standard.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_algor.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_bignum.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_info.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_int64.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_long.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_pkey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_sig.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_spki.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_val.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_null.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_null.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_posix.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_posix.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_win.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_win.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/async/async.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/async/async_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/async/async_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/async/async_wait.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/async/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bf/asm/bf-586.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_cfb64.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_ecb.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_ofb64.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_pi.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_skey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bf/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_addr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_dump.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_print.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_sock.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_sock2.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bf_buff.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bf_lbuf.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bf_nbio.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bf_null.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_cb.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_meth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_acpt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_bio.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_conn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_dgram.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_fd.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_file.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_log.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_mem.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_null.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_sock.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bio/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/blake2/blake2_impl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/blake2/blake2_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/blake2/blake2b.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/blake2/blake2s.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/blake2/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/blake2/m_blake2b.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/blake2/m_blake2s.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/README.pod
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/alpha-mont.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/armv4-gf2m.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/armv4-mont.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/armv8-mont.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/bn-586.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/bn-c64xplus.asm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/c64xplus-gf2m.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/co-586.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ia64-mont.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ia64.S
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/mips-mont.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/mips.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/parisc-mont.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ppc-mont.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ppc.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ppc64-mont.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/rsaz-avx2.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/rsaz-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/s390x-gf2m.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/s390x-mont.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/s390x.S
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparct4-mont.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv8.S
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv8plus.S
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv9-gf2m.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv9-mont.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv9a-mont.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/via-mont.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/vis3-mont.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86-gf2m.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86-mont.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86_64-gcc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86_64-gf2m.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86_64-mont.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86_64-mont5.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_add.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_asm.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_blind.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_const.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_ctx.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_depr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_dh.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_div.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_exp.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_exp2.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_gcd.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_gf2m.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_intern.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_kron.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_mod.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_mont.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_mpi.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_mul.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_nist.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_prime.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_prime.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_prime.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_print.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_rand.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_recp.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_shift.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_sqr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_sqrt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_srp.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_word.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_x931p.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/rsaz_exp.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/bn/rsaz_exp.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/buffer/buf_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/buffer/buffer.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/buffer/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/c64xpluscpuid.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/camellia/asm/cmll-x86.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/camellia/asm/cmll-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/camellia/asm/cmllt4-sparcv9.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/camellia/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/camellia/camellia.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_cbc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_cfb.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_ctr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_ecb.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_misc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_ofb.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cast/asm/cast-586.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cast/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_cfb64.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_ecb.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_ofb64.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_skey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cast/cast_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cast/cast_s.h
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-armv4.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-armv8.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-c64xplus.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-ppc.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-s390x.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-x86.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/chacha/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/chacha/chacha_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cmac/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cmac/cm_ameth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cmac/cm_pmeth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cmac/cmac.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cms/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_asn1.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_att.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_cd.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_dd.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_env.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_ess.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_io.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_kari.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_pwri.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_sd.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_smime.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/comp/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/comp/c_zlib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/comp/comp_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/comp/comp_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/comp/comp_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/conf/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_api.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_def.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_def.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_mall.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_mod.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_sap.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_ssl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/conf/keysets.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cpt_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cryptlib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ct/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_b64.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_log.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_oct.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_policy.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_prn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_sct.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_sct_ctx.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_vfy.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_x509v3.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ctype.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/cversion.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/crypt586.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/des-586.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/des_enc.m4
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/desboth.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/dest4-sparcv9.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/cbc_cksm.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/cbc_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/cfb64ede.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/cfb64enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/cfb_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/des_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/des_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/ecb3_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/ecb_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/fcrypt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/fcrypt_b.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/ncbc_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/ofb64ede.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/ofb64enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/ofb_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/pcbc_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/qud_cksm.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/rand_key.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/set_key.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/spr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/str2key.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/des/xcbc_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh1024.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh192.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh2048.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh4096.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh512.pem
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_ameth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_asn1.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_check.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_depr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_gen.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_kdf.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_key.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_meth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_pmeth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_prn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_rfc5114.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_rfc7919.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dllmain.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dsa/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_ameth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_asn1.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_depr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_gen.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_key.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_meth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_ossl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_pmeth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_prn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_sign.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_vrf.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dso/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_dl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_dlfcn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_openssl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_vms.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_win32.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ebcdic.c
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-armv4.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-armv8.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-avx2.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-ppc64.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-sparcv9.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-x86.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-x86_64.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/x25519-ppc64.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/x25519-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve25519.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/arch_32/arch_intrinsics.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/arch_32/f_impl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/arch_32/f_impl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/curve448.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/curve448_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/curve448_tables.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/curve448utils.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/ed448.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/eddsa.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/f_generic.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/field.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/point_448.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/scalar.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/word.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec2_oct.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec2_smpl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_ameth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_asn1.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_check.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_curve.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_cvt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_key.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_kmeth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_mult.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_oct.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_pmeth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_print.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdh_kdf.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdh_ossl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdsa_ossl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdsa_sign.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdsa_vrf.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/eck_prn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_mont.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nist.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistp224.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistp256.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistp521.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistputil.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistz256.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistz256_table.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_oct.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_smpl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecx_meth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/README
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_all.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_cnf.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_ctrl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_devcrypto.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_dyn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_fat.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_init.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_int.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_list.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_openssl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_pkey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_rdrand.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_table.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_asnmth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_cipher.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_dh.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_digest.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_dsa.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_eckey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_pkmeth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_rand.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_rsa.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/err/README
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/err/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/err/err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/err/err_all.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/err/err_prn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/err/openssl.ec
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/err/openssl.txt
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/bio_b64.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/bio_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/bio_md.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/bio_ok.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/c_allc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/c_alld.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/cmeth_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/digest.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_aes.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_aes_cbc_hmac_sha1.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_aes_cbc_hmac_sha256.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_aria.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_bf.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_camellia.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_cast.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_chacha20_poly1305.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_des.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_des3.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_idea.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_null.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_old.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_rc2.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_rc4.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_rc4_hmac_md5.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_rc5.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_seed.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_sm4.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_xcbc_d.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/encode.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_cnf.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_key.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_pbe.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_pkey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_md2.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_md4.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_md5.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_md5_sha1.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_mdc2.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_null.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_ripemd.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_sha1.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_sha3.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_sigver.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_wp.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/names.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/p5_crpt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/p5_crpt2.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_dec.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_open.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_seal.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_sign.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_verify.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/pbe_scrypt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/pmeth_fn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/pmeth_gn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/evp/pmeth_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ex_data.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/getenv.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/hmac/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/hmac/hm_ameth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/hmac/hm_pmeth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/hmac/hmac.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/hmac/hmac_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ia64cpuid.S
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/idea/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_cbc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_cfb64.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_ecb.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_ofb64.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_skey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/idea/idea_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/__DECC_INCLUDE_EPILOGUE.H
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/__DECC_INCLUDE_PROLOGUE.H
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/aria.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/asn1_int.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/async.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/bn_conf.h.in
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/bn_dh.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/bn_int.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/bn_srp.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/chacha.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/cryptlib_int.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/ctype.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/dso_conf.h.in
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/ec_int.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/engine.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/err_int.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/evp_int.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/lhash.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/md32_common.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/objects.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/poly1305.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/rand_int.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sha.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/siphash.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sm2.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sm2err.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sm3.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sm4.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/store.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/store_int.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/x509_int.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/init.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/kdf/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/kdf/hkdf.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/kdf/kdf_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/kdf/scrypt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/kdf/tls1_prf.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/lhash/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/lhash/lh_stats.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/lhash/lhash.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/lhash/lhash_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/md2/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/md2/md2_dgst.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/md2/md2_one.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/md4/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/md4/md4_dgst.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/md4/md4_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/md4/md4_one.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/md5/asm/md5-586.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/md5/asm/md5-sparcv9.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/md5/asm/md5-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/md5/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/md5/md5_dgst.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/md5/md5_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/md5/md5_one.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/mdc2/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/mdc2/mdc2_one.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/mdc2/mdc2dgst.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/mem.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/mem_clr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/mem_dbg.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/mem_sec.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/mips_arch.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/aesni-gcm-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-alpha.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-armv4.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-c64xplus.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-ia64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-parisc.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-s390x.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-sparcv9.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-x86.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-x86_64.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghashp8-ppc.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghashv8-armx.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/cbc128.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/ccm128.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/cfb128.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/ctr128.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/cts128.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/gcm128.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/modes_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/ocb128.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/ofb128.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/wrap128.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/modes/xts128.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/o_dir.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/o_fips.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/o_fopen.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/o_init.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/o_str.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/o_time.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/objects/README
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/objects/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/objects/o_names.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_dat.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_dat.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_dat.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_mac.num
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_xref.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_xref.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_xref.txt
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/objects/objects.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/objects/objects.txt
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/objects/objxref.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_asn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_cl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_ext.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_ht.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_prn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_srv.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_vfy.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/v3_ocsp.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pariscid.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pem/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_all.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_info.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_oth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_pk8.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_pkey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_sign.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_x509.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_xaux.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pem/pvkfmt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/README
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/arm-xlate.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/cbc.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/ppc-xlate.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/sparcv9_modes.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86_64-xlate.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86asm.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86gas.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86masm.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86nasm.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_add.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_asn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_attr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_crpt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_crt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_decr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_init.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_key.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_kiss.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_mutl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_npas.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_p8d.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_p8e.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_sbag.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_utl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/pk12err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/bio_pk7.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_asn1.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_attr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_doit.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_mime.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_smime.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pkcs7err.c
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-armv4.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-armv8.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-c64xplus.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-mips.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-ppc.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-ppcfp.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-s390x.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-sparcv9.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-x86.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_ameth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_base2_44.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_ieee754.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_local.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_pmeth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ppc_arch.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ppccap.c
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/ppccpuid.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rand/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rand/drbg_ctr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rand/drbg_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_egd.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_unix.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_vms.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_win.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rand/randfile.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc2/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2_cbc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2_ecb.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2_skey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2cfb64.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2ofb64.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-586.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-c64xplus.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-md5-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-parisc.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-s390x.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc4/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc4/rc4_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc4/rc4_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc4/rc4_skey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc5/asm/rc5-586.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc5/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5_ecb.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5_skey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5cfb64.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5ofb64.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/asm/rmd-586.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/rmd_dgst.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/rmd_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/rmd_one.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/rmdconst.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_ameth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_asn1.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_chk.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_crpt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_depr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_gen.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_meth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_mp.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_none.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_oaep.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_ossl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_pk1.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_pmeth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_prn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_pss.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_saos.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_sign.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_ssl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_x931.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_x931g.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/s390x_arch.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/s390xcap.c
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/s390xcpuid.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/seed/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_cbc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_cfb.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_ecb.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_ofb.c
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-armv4.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-armv8.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-avx2.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-avx512.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-avx512vl.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-c64x.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-mmx.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-ppc64.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-s390x.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-x86_64.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600p8-ppc.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-586.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-alpha.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-armv4-large.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-armv8.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-c64xplus.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-ia64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-mb-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-mips.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-parisc.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-ppc.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-s390x.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-sparcv9.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-sparcv9a.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-thumb.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha256-586.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha256-armv4.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha256-c64xplus.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha256-mb-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-586.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-armv4.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-armv8.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-c64xplus.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-ia64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-mips.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-parisc.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-ppc.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-s390x.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-sparcv9.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-x86_64.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512p8-ppc.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/keccak1600.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha1_one.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha1dgst.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha256.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha512.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/siphash/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/siphash/siphash.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/siphash/siphash_ameth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/siphash/siphash_local.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/siphash/siphash_pmeth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sm2/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sm2/sm2_crypt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sm2/sm2_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sm2/sm2_pmeth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sm2/sm2_sign.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sm3/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sm3/m_sm3.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sm3/sm3.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sm3/sm3_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sm4/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sm4/sm4.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sparc_arch.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sparccpuid.S
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/sparcv9cap.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/srp/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/srp/srp_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/srp/srp_vfy.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/stack/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/stack/stack.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/store/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/store/loader_file.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/store/store_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/store/store_init.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/store/store_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/store/store_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/store/store_register.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/store/store_strings.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/threads_none.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/threads_pthread.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/threads_win.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ts/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_asn1.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_conf.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_req_print.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_req_utils.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_rsp_print.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_rsp_sign.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_rsp_utils.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_rsp_verify.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_verify_ctx.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/txt_db/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/txt_db/txt_db.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ui/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_null.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_openssl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_util.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/uid.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/vms_rms.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/asm/wp-mmx.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/asm/wp-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/wp_block.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/wp_dgst.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/wp_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/by_dir.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/by_file.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/t_crl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/t_req.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/t_x509.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_att.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_cmp.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_d2.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_def.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_ext.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_lcl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_lu.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_meth.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_obj.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_r2x.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_req.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_set.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_trs.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_txt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_v3.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_vfy.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_vpm.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509cset.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509name.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509rset.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509spki.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509type.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_all.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_attrib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_crl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_exten.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_name.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_pubkey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_req.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_x509.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_x509a.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/ext_dat.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_cache.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_data.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_int.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_map.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_node.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_tree.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/standard_exts.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_addr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_admis.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_admis.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_akey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_akeya.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_alt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_asid.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_bcons.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_bitst.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_conf.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_cpols.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_crld.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_enum.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_extku.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_genn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_ia5.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_info.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_int.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_ncons.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pci.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pcia.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pcons.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pku.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pmaps.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_prn.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_purp.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_skey.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_sxnet.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_tlsf.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_utl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x86_64cpuid.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/crypto/x86cpuid.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/e_os.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/asm/e_padlock-x86.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/asm/e_padlock-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_afalg.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_afalg.ec
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_afalg.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_afalg.txt
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_afalg_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_afalg_err.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_capi.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_capi.ec
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_capi.txt
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_capi_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_capi_err.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_dasync.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_dasync.ec
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_dasync.txt
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_dasync_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_dasync_err.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest.ec
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest.txt
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest_err.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/engines/e_padlock.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Downloaded.txt
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/Artistic
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/COPYING
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/INSTALL
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/MANIFEST
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/META.json
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/META.yml
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/Makefile.PL
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/README
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/lib/Text/Template.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/lib/Text/Template/Preprocess.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/00-version.t
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/01-basic.t
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/02-hash.t
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/03-out.t
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/04-safe.t
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/05-safe2.t
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/06-ofh.t
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/07-safe3.t
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/08-exported.t
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/09-error.t
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/10-delimiters.t
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/11-prepend.t
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/12-preprocess.t
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/13-taint.t
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/14-broken.t
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/external/perl/transfer/Text/Template.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/README.md
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/asn1.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/asn1parse.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/bignum.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/bndiv.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/client.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/cms.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/conf.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/crl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/ct.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/driver.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/fuzzer.h
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/fuzz/helper.py
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/fuzz/mkfuzzoids.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/oids.txt
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/rand.inc
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/server.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/test-corpus.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/fuzz/x509.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/__DECC_INCLUDE_EPILOGUE.H
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/__DECC_INCLUDE_PROLOGUE.H
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/bio.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/comp.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/conf.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/constant_time_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/cryptlib.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/dane.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/dso.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/dsoerr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/err.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/nelem.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/numbers.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/o_dir.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/o_str.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/refcount.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/sockets.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/sslconf.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/thread_once.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/internal/tsan_assist.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/__DECC_INCLUDE_EPILOGUE.H
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/__DECC_INCLUDE_PROLOGUE.H
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/aes.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/asn1.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/asn1_mac.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/asn1err.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/asn1t.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/async.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/asyncerr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/bio.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/bioerr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/blowfish.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/bn.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/bnerr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/buffer.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/buffererr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/camellia.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/cast.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/cmac.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/cms.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/cmserr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/comp.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/comperr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/conf.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/conf_api.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/conferr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/crypto.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/cryptoerr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/ct.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/cterr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/des.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/dh.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/dherr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/dsa.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/dsaerr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/dtls1.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/e_os2.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/ebcdic.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/ec.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/ecdh.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/ecdsa.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/ecerr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/engine.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/engineerr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/err.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/evp.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/evperr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/hmac.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/idea.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/kdf.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/kdferr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/lhash.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/md2.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/md4.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/md5.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/mdc2.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/modes.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/obj_mac.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/objects.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/objectserr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/ocsp.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/ocsperr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/opensslconf.h.in
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/opensslv.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/ossl_typ.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/pem.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/pem2.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/pemerr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/pkcs12.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/pkcs12err.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/pkcs7.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/pkcs7err.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/rand.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/rand_drbg.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/randerr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/rc2.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/rc4.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/rc5.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/ripemd.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/rsa.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/rsaerr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/safestack.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/seed.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/sha.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/srp.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/srtp.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/ssl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/ssl2.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/ssl3.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/sslerr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/stack.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/store.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/storeerr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/symhacks.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/tls1.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/ts.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/tserr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/txt_db.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/ui.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/uierr.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/whrlpool.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/x509.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/x509_vfy.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/x509err.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/x509v3.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/include/openssl/x509v3err.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ms/applink.c
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/ms/cmp.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/ms/uplink-common.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/ms/uplink-ia64.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/ms/uplink-x86.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/ms/uplink-x86_64.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ms/uplink.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ms/uplink.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/os-dep/haiku.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/bio_ssl.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/d1_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/d1_msg.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/d1_srtp.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/methods.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/packet.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/packet_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/pqueue.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/record/README
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/record/dtls1_bitmap.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/record/rec_layer_d1.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/record/rec_layer_s3.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/record/record.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/record/record_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/record/ssl3_buffer.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/record/ssl3_record.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/record/ssl3_record_tls13.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/s3_cbc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/s3_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/s3_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/s3_msg.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_asn1.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_cert.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_cert_table.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_ciph.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_conf.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_err.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_init.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_mcnf.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_rsa.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_sess.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_stat.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_txt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/ssl_utst.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/statem/README
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/statem/extensions.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/statem/extensions_clnt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/statem/extensions_cust.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/statem/extensions_srvr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_clnt.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_dtls.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_locl.h
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_srvr.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/t1_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/t1_lib.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/t1_trce.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/tls13_enc.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/ssl/tls_srp.c
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/tools/build.info
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/tools/c_rehash.in
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/add-depends.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/build.info
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/util/check-malloc-errs
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/util/ck_errf.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/copy.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/dofile.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/echo.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/util/find-doc-nits
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/util/find-unused-errs
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/indent.pro
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/libcrypto.num
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/libssl.num
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/local_shlib.com.in
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/util/mkbuildinf.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/util/mkdef.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/util/mkdir-p.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/util/mkerr.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/util/mkrc.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/util/openssl-format-source
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/util/openssl-update-copyright
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/util/opensslwrap.sh
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Glob.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Test.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Test/Simple.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Test/Utils.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Util/Pod.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Alert.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Certificate.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/CertificateVerify.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/ClientHello.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/EncryptedExtensions.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Message.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/NewSessionTicket.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Proxy.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Record.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/ServerHello.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/ServerKeyExchange.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/checkhandshake.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/perl/with_fallback.pm
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/private.num
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/util/process_docs.pl
 create mode 100755 trunk/3rdparty/openssl-1.1-fit/util/shlib_wrap.sh.in
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/su-filter.pl
 create mode 100644 trunk/3rdparty/openssl-1.1-fit/util/unlocal_shlib.com.in
 delete mode 100644 trunk/3rdparty/openssl-1.1.0e.zip

diff --git a/README.md b/README.md
index a9bed81fd..5dbb1013a 100755
--- a/README.md
+++ b/README.md
@@ -156,6 +156,7 @@ For previous versions, please read:
 
 ## V4 changes
 
+* v4.0, 2021-03-01, Upgrade openssl from 1.1.0e to 1.1.1b, with source code. 4.0.78
 * v4.0, 2021-03-01, Enable Object Cache and Zero Copy Nack by default. 4.0.77
 * v4.0, 2021-02-28, RTC: Support high performance [Zero Copy NACK](https://github.com/ossrs/srs/commit/36ea67359e55c94ab044cee4b6a4ec901a83a287#commitcomment-47654868). 4.0.76
 * v4.0, 2021-02-27, RTC: Support [Object Cache Pool](https://github.com/ossrs/srs/commit/14bfc98122bba369572417c19ebb2a61b373fc45#commitcomment-47655008) for performance. 4.0.75
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/00-base-templates.conf b/trunk/3rdparty/openssl-1.1-fit/Configurations/00-base-templates.conf
new file mode 100644
index 000000000..5fd995cb3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/00-base-templates.conf
@@ -0,0 +1,356 @@
+# -*- Mode: perl -*-
+my %targets=(
+    DEFAULTS => {
+	template	=> 1,
+
+	cflags		=> "",
+	cppflags	=> "",
+	lflags		=> "",
+	defines		=> [],
+	includes	=> [],
+	lib_cflags	=> "",
+	lib_cppflags	=> "",
+	lib_defines	=> [],
+	thread_scheme	=> "(unknown)", # Assume we don't know
+	thread_defines	=> [],
+
+	apps_aux_src	=> "",
+	apps_init_src	=> "",
+	cpuid_asm_src	=> "mem_clr.c",
+	uplink_aux_src	=> "",
+	bn_asm_src	=> "bn_asm.c",
+	ec_asm_src	=> "",
+	des_asm_src	=> "des_enc.c fcrypt_b.c",
+	aes_asm_src	=> "aes_core.c aes_cbc.c",
+	bf_asm_src	=> "bf_enc.c",
+	md5_asm_src	=> "",
+	cast_asm_src	=> "c_enc.c",
+	rc4_asm_src	=> "rc4_enc.c rc4_skey.c",
+	rmd160_asm_src	=> "",
+	rc5_asm_src	=> "rc5_enc.c",
+	wp_asm_src	=> "wp_block.c",
+	cmll_asm_src	=> "camellia.c cmll_misc.c cmll_cbc.c",
+	modes_asm_src	=> "",
+	padlock_asm_src	=> "",
+	chacha_asm_src	=> "chacha_enc.c",
+	poly1305_asm_src	=> "",
+	keccak1600_asm_src	=> "keccak1600.c",
+
+	unistd		=> "<unistd.h>",
+	shared_target	=> "",
+	shared_cflag	=> "",
+	shared_defines	=> [],
+	shared_ldflag	=> "",
+	shared_rcflag	=> "",
+	shared_extension	=> "",
+
+	#### Defaults for the benefit of the config targets who don't inherit
+	#### a BASE and assume Unix defaults
+	#### THESE WILL DISAPPEAR IN OpenSSL 1.2
+	build_scheme	=> [ "unified", "unix" ],
+	build_file	=> "Makefile",
+
+	AR		=> "ar",
+	ARFLAGS		=> "r",
+	CC		=> "cc",
+	HASHBANGPERL	=> "/usr/bin/env perl",
+	RANLIB		=> sub { which("$config{cross_compile_prefix}ranlib")
+                                     ? "ranlib" : "" },
+	RC		=> "windres",
+
+	#### THESE WILL BE ENABLED IN OpenSSL 1.2
+	#HASHBANGPERL	=> "PERL", # Only Unix actually cares
+    },
+
+    BASE_common => {
+	template	=> 1,
+
+	enable		=> [],
+	disable		=> [],
+
+	defines		=>
+	    sub {
+                my @defs = ();
+                push @defs, "ZLIB" unless $disabled{zlib};
+                push @defs, "ZLIB_SHARED" unless $disabled{"zlib-dynamic"};
+                return [ @defs ];
+            },
+        includes        =>
+            sub {
+                my @incs = ();
+                push @incs, $withargs{zlib_include}
+                    if !$disabled{zlib} && $withargs{zlib_include};
+                return [ @incs ];
+            },
+    },
+
+    BASE_unix => {
+        inherit_from    => [ "BASE_common" ],
+        template        => 1,
+
+        AR              => "ar",
+        ARFLAGS         => "r",
+        CC              => "cc",
+        lflags          =>
+            sub { $withargs{zlib_lib} ? "-L".$withargs{zlib_lib} : () },
+        ex_libs         =>
+            sub { !defined($disabled{zlib})
+                  && defined($disabled{"zlib-dynamic"})
+                  ? "-lz" : () },
+        HASHBANGPERL    => "/usr/bin/env perl", # Only Unix actually cares
+        RANLIB          => sub { which("$config{cross_compile_prefix}ranlib")
+                                     ? "ranlib" : "" },
+        RC              => "windres",
+
+        shared_extension => ".so",
+
+        build_scheme    => [ "unified", "unix" ],
+        build_file      => "Makefile",
+    },
+
+    BASE_Windows => {
+        inherit_from    => [ "BASE_common" ],
+        template        => 1,
+
+        lib_defines      =>
+            sub {
+                my @defs = ();
+                unless ($disabled{"zlib-dynamic"}) {
+                    my $zlib = $withargs{zlib_lib} // "ZLIB1";
+                    push @defs, 'LIBZ=' . (quotify("perl", $zlib))[0];
+                }
+                return [ @defs ];
+            },
+        ex_libs         =>
+            sub {
+                unless ($disabled{zlib}) {
+                    if (defined($disabled{"zlib-dynamic"})) {
+                        return $withargs{zlib_lib} // "ZLIB1";
+                    }
+                }
+                return ();
+            },
+
+        LD              => "link",
+        LDFLAGS         => "/nologo",
+        ldoutflag       => "/out:",
+        AR              => "lib",
+        ARFLAGS         => "/nologo",
+        aroutflag       => "/out:",
+        RC               => "rc",
+        rcoutflag        => "/fo",
+        MT              => "mt",
+        MTFLAGS         => "-nologo",
+        mtinflag        => "-manifest ",
+        mtoutflag       => "-outputresource:",
+
+        shared_extension => ".dll",
+
+        build_file      => "makefile",
+        build_scheme    => [ "unified", "windows" ],
+    },
+
+    BASE_VMS => {
+        inherit_from    => [ "BASE_common" ],
+        template        => 1,
+
+        includes        =>
+            add(sub {
+                    my @incs = ();
+                    # GNV$ZLIB_INCLUDE is the standard logical name for later
+                    # zlib incarnations.
+                    push @incs, 'GNV$ZLIB_INCLUDE:'
+                        if !$disabled{zlib} && !$withargs{zlib_include};
+                    return [ @incs ];
+                }),
+
+        shared_extension => ".exe",
+
+        build_file       => "descrip.mms",
+        build_scheme     => [ "unified", "VMS" ],
+    },
+
+    uplink_common => {
+	template	=> 1,
+	apps_init_src	=> add("../ms/applink.c"),
+	uplink_aux_src	=> add("../ms/uplink.c"),
+	defines		=> add("OPENSSL_USE_APPLINK"),
+    },
+    x86_uplink => {
+	inherit_from	=> [ "uplink_common" ],
+	template	=> 1,
+	uplink_aux_src	=> add("uplink-x86.s"),
+    },
+    x86_64_uplink => {
+	inherit_from	=> [ "uplink_common" ],
+	template	=> 1,
+	uplink_aux_src	=> add("uplink-x86_64.s"),
+    },
+    ia64_uplink => {
+	inherit_from	=> [ "uplink_common" ],
+	template	=> 1,
+	uplink_aux_src	=> add("uplink-ia64.s"),
+    },
+
+    x86_asm => {
+	template	=> 1,
+	cpuid_asm_src	=> "x86cpuid.s",
+	bn_asm_src	=> "bn-586.s co-586.s x86-mont.s x86-gf2m.s",
+	ec_asm_src	=> "ecp_nistz256.c ecp_nistz256-x86.s",
+	des_asm_src	=> "des-586.s crypt586.s",
+	aes_asm_src	=> "aes-586.s vpaes-x86.s aesni-x86.s",
+	bf_asm_src	=> "bf-586.s",
+	md5_asm_src	=> "md5-586.s",
+	cast_asm_src	=> "cast-586.s",
+	sha1_asm_src	=> "sha1-586.s sha256-586.s sha512-586.s",
+	rc4_asm_src	=> "rc4-586.s",
+	rmd160_asm_src	=> "rmd-586.s",
+	rc5_asm_src	=> "rc5-586.s",
+	wp_asm_src	=> "wp_block.c wp-mmx.s",
+	cmll_asm_src	=> "cmll-x86.s",
+	modes_asm_src	=> "ghash-x86.s",
+	padlock_asm_src	=> "e_padlock-x86.s",
+	chacha_asm_src	=> "chacha-x86.s",
+	poly1305_asm_src=> "poly1305-x86.s",
+    },
+    x86_elf_asm => {
+	template	=> 1,
+	inherit_from	=> [ "x86_asm" ],
+	perlasm_scheme	=> "elf"
+    },
+    x86_64_asm => {
+	template	=> 1,
+	cpuid_asm_src   => "x86_64cpuid.s",
+	bn_asm_src      => "asm/x86_64-gcc.c x86_64-mont.s x86_64-mont5.s x86_64-gf2m.s rsaz_exp.c rsaz-x86_64.s rsaz-avx2.s",
+	ec_asm_src      => "ecp_nistz256.c ecp_nistz256-x86_64.s x25519-x86_64.s",
+	aes_asm_src     => "aes-x86_64.s vpaes-x86_64.s bsaes-x86_64.s aesni-x86_64.s aesni-sha1-x86_64.s aesni-sha256-x86_64.s aesni-mb-x86_64.s",
+	md5_asm_src     => "md5-x86_64.s",
+	sha1_asm_src    => "sha1-x86_64.s sha256-x86_64.s sha512-x86_64.s sha1-mb-x86_64.s sha256-mb-x86_64.s",
+	rc4_asm_src     => "rc4-x86_64.s rc4-md5-x86_64.s",
+	wp_asm_src      => "wp-x86_64.s",
+	cmll_asm_src    => "cmll-x86_64.s cmll_misc.c",
+	modes_asm_src   => "ghash-x86_64.s aesni-gcm-x86_64.s",
+	padlock_asm_src => "e_padlock-x86_64.s",
+	chacha_asm_src	=> "chacha-x86_64.s",
+	poly1305_asm_src=> "poly1305-x86_64.s",
+	keccak1600_asm_src	=> "keccak1600-x86_64.s",
+    },
+    ia64_asm => {
+	template	=> 1,
+	cpuid_asm_src   => "ia64cpuid.s",
+	bn_asm_src      => "bn-ia64.s ia64-mont.s",
+	aes_asm_src     => "aes_core.c aes_cbc.c aes-ia64.s",
+	sha1_asm_src    => "sha1-ia64.s sha256-ia64.s sha512-ia64.s",
+	modes_asm_src   => "ghash-ia64.s",
+	perlasm_scheme	=> "void"
+    },
+    sparcv9_asm => {
+	template	=> 1,
+	cpuid_asm_src   => "sparcv9cap.c sparccpuid.S",
+	bn_asm_src      => "asm/sparcv8plus.S sparcv9-mont.S sparcv9a-mont.S vis3-mont.S sparct4-mont.S sparcv9-gf2m.S",
+	ec_asm_src      => "ecp_nistz256.c ecp_nistz256-sparcv9.S",
+	des_asm_src     => "des_enc-sparc.S fcrypt_b.c dest4-sparcv9.S",
+	aes_asm_src     => "aes_core.c aes_cbc.c aes-sparcv9.S aest4-sparcv9.S aesfx-sparcv9.S",
+	md5_asm_src     => "md5-sparcv9.S",
+	sha1_asm_src    => "sha1-sparcv9.S sha256-sparcv9.S sha512-sparcv9.S",
+	cmll_asm_src    => "camellia.c cmll_misc.c cmll_cbc.c cmllt4-sparcv9.S",
+	modes_asm_src   => "ghash-sparcv9.S",
+	poly1305_asm_src=> "poly1305-sparcv9.S",
+	perlasm_scheme	=> "void"
+    },
+    sparcv8_asm => {
+	template	=> 1,
+	cpuid_asm_src   => "",
+	bn_asm_src      => "asm/sparcv8.S",
+	des_asm_src     => "des_enc-sparc.S fcrypt_b.c",
+	perlasm_scheme	=> "void"
+    },
+    alpha_asm => {
+	template	=> 1,
+	cpuid_asm_src   => "alphacpuid.s",
+	bn_asm_src      => "bn_asm.c alpha-mont.S",
+	sha1_asm_src    => "sha1-alpha.S",
+	modes_asm_src   => "ghash-alpha.S",
+	perlasm_scheme	=> "void"
+    },
+    mips32_asm => {
+	template	=> 1,
+	bn_asm_src      => "bn-mips.S mips-mont.S",
+	aes_asm_src     => "aes_cbc.c aes-mips.S",
+	sha1_asm_src    => "sha1-mips.S sha256-mips.S",
+    },
+    mips64_asm => {
+	inherit_from	=> [ "mips32_asm" ],
+	template	=> 1,
+	sha1_asm_src    => add("sha512-mips.S"),
+	poly1305_asm_src=> "poly1305-mips.S",
+    },
+    s390x_asm => {
+	template	=> 1,
+	cpuid_asm_src   => "s390xcap.c s390xcpuid.S",
+	bn_asm_src      => "asm/s390x.S s390x-mont.S s390x-gf2m.s",
+	aes_asm_src     => "aes-s390x.S aes-ctr.fake aes-xts.fake",
+	sha1_asm_src    => "sha1-s390x.S sha256-s390x.S sha512-s390x.S",
+	rc4_asm_src     => "rc4-s390x.s",
+	modes_asm_src   => "ghash-s390x.S",
+	chacha_asm_src  => "chacha-s390x.S",
+	poly1305_asm_src=> "poly1305-s390x.S",
+	keccak1600_asm_src	=> "keccak1600-s390x.S",
+    },
+    armv4_asm => {
+	template	=> 1,
+	cpuid_asm_src   => "armcap.c armv4cpuid.S",
+	bn_asm_src      => "bn_asm.c armv4-mont.S armv4-gf2m.S",
+	ec_asm_src      => "ecp_nistz256.c ecp_nistz256-armv4.S",
+	aes_asm_src     => "aes_cbc.c aes-armv4.S bsaes-armv7.S aesv8-armx.S",
+	sha1_asm_src    => "sha1-armv4-large.S sha256-armv4.S sha512-armv4.S",
+	modes_asm_src   => "ghash-armv4.S ghashv8-armx.S",
+	chacha_asm_src  => "chacha-armv4.S",
+	poly1305_asm_src=> "poly1305-armv4.S",
+	keccak1600_asm_src	=> "keccak1600-armv4.S",
+	perlasm_scheme	=> "void"
+    },
+    aarch64_asm => {
+	template	=> 1,
+	cpuid_asm_src   => "armcap.c arm64cpuid.S",
+	ec_asm_src      => "ecp_nistz256.c ecp_nistz256-armv8.S",
+	bn_asm_src      => "bn_asm.c armv8-mont.S",
+	aes_asm_src     => "aes_core.c aes_cbc.c aesv8-armx.S vpaes-armv8.S",
+	sha1_asm_src    => "sha1-armv8.S sha256-armv8.S sha512-armv8.S",
+	modes_asm_src   => "ghashv8-armx.S",
+	chacha_asm_src  => "chacha-armv8.S",
+	poly1305_asm_src=> "poly1305-armv8.S",
+	keccak1600_asm_src	=> "keccak1600-armv8.S",
+    },
+    parisc11_asm => {
+	template	=> 1,
+	cpuid_asm_src   => "pariscid.s",
+	bn_asm_src      => "bn_asm.c parisc-mont.s",
+	aes_asm_src     => "aes_core.c aes_cbc.c aes-parisc.s",
+	sha1_asm_src    => "sha1-parisc.s sha256-parisc.s sha512-parisc.s",
+	rc4_asm_src     => "rc4-parisc.s",
+	modes_asm_src   => "ghash-parisc.s",
+	perlasm_scheme	=> "32"
+    },
+    parisc20_64_asm => {
+	template	=> 1,
+	inherit_from	=> [ "parisc11_asm" ],
+	perlasm_scheme	=> "64",
+    },
+    ppc32_asm => {
+	template	=> 1,
+	cpuid_asm_src   => "ppccpuid.s ppccap.c",
+	bn_asm_src      => "bn-ppc.s ppc-mont.s",
+	aes_asm_src     => "aes_core.c aes_cbc.c aes-ppc.s vpaes-ppc.s aesp8-ppc.s",
+	sha1_asm_src    => "sha1-ppc.s sha256-ppc.s sha512-ppc.s sha256p8-ppc.s sha512p8-ppc.s",
+	modes_asm_src   => "ghashp8-ppc.s",
+	chacha_asm_src	=> "chacha-ppc.s",
+	poly1305_asm_src=> "poly1305-ppc.s poly1305-ppcfp.s",
+    },
+    ppc64_asm => {
+	inherit_from	=> [ "ppc32_asm" ],
+	template	=> 1,
+	ec_asm_src	=> "ecp_nistz256.c ecp_nistz256-ppc64.s x25519-ppc64.s",
+	keccak1600_asm_src	=> "keccak1600-ppc64.s",
+    },
+);
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/10-main.conf b/trunk/3rdparty/openssl-1.1-fit/Configurations/10-main.conf
new file mode 100644
index 000000000..930f2d3c9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/10-main.conf
@@ -0,0 +1,1802 @@
+## -*- mode: perl; -*-
+## Standard openssl configuration targets.
+
+# Helper functions for the Windows configs
+my $vc_win64a_info = {};
+sub vc_win64a_info {
+    unless (%$vc_win64a_info) {
+        if (`nasm -v 2>NUL` =~ /NASM version ([0-9]+\.[0-9]+)/ && $1 >= 2.0) {
+            $vc_win64a_info = { AS        => "nasm",
+                                ASFLAGS   => "-g",
+                                asflags   => "-Ox -f win64 -DNEAR",
+                                asoutflag => "-o " };
+        } elsif ($disabled{asm}) {
+            # assembler is still used to compile uplink shim
+            $vc_win64a_info = { AS        => "ml64",
+                                ASFLAGS   => "/nologo /Zi",
+                                asflags   => "/c /Cp /Cx",
+                                asoutflag => "/Fo" };
+        } else {
+            $die->("NASM not found - make sure it's installed and available on %PATH%\n");
+            $vc_win64a_info = { AS        => "{unknown}",
+                                ASFLAGS   => "",
+                                asflags   => "",
+                                asoutflag => "" };
+        }
+    }
+    return $vc_win64a_info;
+}
+
+my $vc_win32_info = {};
+sub vc_win32_info {
+    unless (%$vc_win32_info) {
+        my $ver=`nasm -v 2>NUL`;
+        my $vew=`nasmw -v 2>NUL`;
+        if ($ver ne "" || $vew ne "") {
+            $vc_win32_info = { AS        => $ver ge $vew ? "nasm" : "nasmw",
+                               ASFLAGS   => "",
+                               asflags   => "-f win32",
+                               asoutflag => "-o ",
+                               perlasm_scheme => "win32n" };
+        } elsif ($disabled{asm}) {
+            # not actually used, uplink shim is inlined into C code
+            $vc_win32_info = { AS        => "ml",
+                               ASFLAGS   => "/nologo /Zi",
+                               asflags   => "/Cp /coff /c /Cx",
+                               asoutflag => "/Fo",
+                               perlasm_scheme => "win32" };
+        } else {
+            $die->("NASM not found - make sure it's installed and available on %PATH%\n");
+            $vc_win32_info = { AS        => "{unknown}",
+                               ASFLAGS   => "",
+                               asflags   => "",
+                               asoutflag => "",
+                               perlasm_scheme => "win32" };
+        }
+    }
+    return $vc_win32_info;
+}
+
+my $vc_wince_info = {};
+sub vc_wince_info {
+    unless (%$vc_wince_info) {
+        # sanity check
+        $die->('%OSVERSION% is not defined') if (!defined(env('OSVERSION')));
+        $die->('%PLATFORM% is not defined')  if (!defined(env('PLATFORM')));
+        $die->('%TARGETCPU% is not defined') if (!defined(env('TARGETCPU')));
+
+        #
+        # Idea behind this is to mimic flags set by eVC++ IDE...
+        #
+        my $wcevers = env('OSVERSION');                     # WCENNN
+	my $wcevernum;
+	my $wceverdotnum;
+	if ($wcevers =~ /^WCE([1-9])([0-9]{2})$/) {
+	    $wcevernum = "$1$2";
+	    $wceverdotnum = "$1.$2";
+	} else {
+	    $die->('%OSVERSION% value is insane');
+	    $wcevernum = "{unknown}";
+	    $wceverdotnum = "{unknown}";
+	}
+        my $wcecdefs = "-D_WIN32_WCE=$wcevernum -DUNDER_CE=$wcevernum"; # -D_WIN32_WCE=NNN
+        my $wcelflag = "/subsystem:windowsce,$wceverdotnum";        # ...,N.NN
+
+        my $wceplatf =  env('PLATFORM');
+
+        $wceplatf =~ tr/a-z0-9 /A-Z0-9_/;
+        $wcecdefs .= " -DWCE_PLATFORM_$wceplatf";
+
+        my $wcetgt = env('TARGETCPU');                      # just shorter name...
+      SWITCH: for($wcetgt) {
+          /^X86/        && do { $wcecdefs.=" -Dx86 -D_X86_ -D_i386_ -Di_386_";
+                                $wcelflag.=" /machine:X86";     last; };
+          /^ARMV4[IT]/  && do { $wcecdefs.=" -DARM -D_ARM_ -D$wcetgt";
+                                $wcecdefs.=" -DTHUMB -D_THUMB_" if($wcetgt=~/T$/);
+                                $wcecdefs.=" -QRarch4T -QRinterwork-return";
+                                $wcelflag.=" /machine:THUMB";   last; };
+          /^ARM/        && do { $wcecdefs.=" -DARM -D_ARM_ -D$wcetgt";
+                                $wcelflag.=" /machine:ARM";     last; };
+          /^MIPSIV/     && do { $wcecdefs.=" -DMIPS -D_MIPS_ -DR4000 -D$wcetgt";
+                                $wcecdefs.=" -D_MIPS64 -QMmips4 -QMn32";
+                                $wcelflag.=" /machine:MIPSFPU"; last; };
+          /^MIPS16/     && do { $wcecdefs.=" -DMIPS -D_MIPS_ -DR4000 -D$wcetgt";
+                                $wcecdefs.=" -DMIPSII -QMmips16";
+                                $wcelflag.=" /machine:MIPS16";  last; };
+          /^MIPSII/     && do { $wcecdefs.=" -DMIPS -D_MIPS_ -DR4000 -D$wcetgt";
+                                $wcecdefs.=" -QMmips2";
+                                $wcelflag.=" /machine:MIPS";    last; };
+          /^R4[0-9]{3}/ && do { $wcecdefs.=" -DMIPS -D_MIPS_ -DR4000";
+                                $wcelflag.=" /machine:MIPS";    last; };
+          /^SH[0-9]/    && do { $wcecdefs.=" -D$wcetgt -D_${wcetgt}_ -DSHx";
+                                $wcecdefs.=" -Qsh4" if ($wcetgt =~ /^SH4/);
+                                $wcelflag.=" /machine:$wcetgt"; last; };
+          { $wcecdefs.=" -D$wcetgt -D_${wcetgt}_";
+            $wcelflag.=" /machine:$wcetgt";                     last; };
+      }
+
+        $vc_wince_info = { cppflags => $wcecdefs,
+                           lflags => $wcelflag };
+    }
+    return $vc_wince_info;
+}
+
+# Helper functions for the VMS configs
+my $vms_info = {};
+sub vms_info {
+    my $pointer_size_str = $config{target} =~ m|-p(\d+)$| ? $1 : "";
+
+    # For the case where Configure iterate through all config targets, such
+    # as when listing them and their details, we reset info if the pointer
+    # size changes.
+    if (%$vms_info && $vms_info->{pointer_size} ne $pointer_size_str) {
+        $vms_info = {};
+    }
+
+    unless (%$vms_info) {
+        $vms_info->{disable_warns} = [ ];
+        $vms_info->{pointer_size} = $pointer_size_str;
+        if ($pointer_size_str eq "64") {
+            `PIPE CC /NOCROSS_REFERENCE /NOLIST /NOOBJECT /WARNINGS = DISABLE = ( MAYLOSEDATA3, EMPTYFILE ) NL: 2> NL:`;
+            if ($? == 0) {
+                push @{$vms_info->{disable_warns}}, "MAYLOSEDATA3";
+            }
+        }
+
+        unless ($disabled{zlib}) {
+            my $default_zlib = 'GNV$LIBZSHR' . $pointer_size_str;
+            if (defined($disabled{"zlib-dynamic"})) {
+                $vms_info->{zlib} = $withargs{zlib_lib} || "$default_zlib/SHARE";
+            } else {
+                $vms_info->{def_zlib} = $withargs{zlib_lib} || $default_zlib;
+                # In case the --with-zlib-lib value contains something like
+                # /SHARE or /LIB or so at the end, remove it.
+                $vms_info->{def_zlib} =~ s|/.*$||g;
+            }
+        }
+
+        if ($config{target} =~ /-ia64/) {
+            `PIPE ias -H 2> NL:`;
+            if ($? == 0) {
+                $vms_info->{AS} = "ias";
+                $vms_info->{ASFLAGS} = '-d debug';
+                $vms_info->{asflags} = '"-N" vms_upcase';
+                $vms_info->{asoutflag} = "-o ";
+                $vms_info->{perlasm_scheme} = "ias";
+            }
+        }
+    }
+    return $vms_info;
+}
+
+my %targets = (
+
+#### Basic configs that should work on any 32-bit box
+    "gcc" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "gcc",
+        CFLAGS           => picker(debug   => "-O0 -g",
+                                   release => "-O3"),
+        thread_scheme    => "(unknown)",
+        bn_ops           => "BN_LLONG",
+    },
+    "cc" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "cc",
+        CFLAGS           => "-O",
+        thread_scheme    => "(unknown)",
+    },
+
+#### VOS Configurations
+    "vos-gcc" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "gcc",
+        CFLAGS           => picker(default => "-Wall",
+                                   debug   => "-O0 -g",
+                                   release => "-O3"),
+        cppflags         => "-D_POSIX_C_SOURCE=200112L -D_BSD -D_VOS_EXTENDED_NAMES",
+        lib_cppflags     => "-DB_ENDIAN",
+        thread_scheme    => "(unknown)",
+        sys_id           => "VOS",
+        lflags           => add("-Wl,-map"),
+        bn_ops           => "BN_LLONG",
+        shared_extension => ".so",
+    },
+
+#### Solaris configurations
+    "solaris-common" => {
+        inherit_from     => [ "BASE_unix" ],
+        template         => 1,
+        lib_cppflags     => "-DFILIO_H",
+        ex_libs          => add("-lsocket -lnsl -ldl"),
+        dso_scheme       => "dlfcn",
+        thread_scheme    => "pthreads",
+        shared_target    => "self",
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+        shared_ldflag    => "-Wl,-Bsymbolic",
+        shared_defflag   => "-Wl,-M,",
+        shared_sonameflag=> "-Wl,-h,",
+    },
+#### Solaris x86 with GNU C setups
+    "solaris-x86-gcc" => {
+        # NB. GNU C has to be configured to use GNU assembler, and not
+        # /usr/ccs/bin/as. Failure to comply will result in compile
+        # failures [at least] in 32-bit build.
+        inherit_from     => [ "solaris-common", asm("x86_elf_asm") ],
+        CC               => "gcc",
+        CFLAGS           => add_before(picker(default => "-Wall",
+                                              debug   => "-O0 -g",
+                                              release => "-O3 -fomit-frame-pointer")),
+        cflags           => add(threads("-pthread")),
+        lib_cppflags     => add("-DL_ENDIAN"),
+        ex_libs          => add(threads("-pthread")),
+        bn_ops           => "BN_LLONG",
+        shared_cflag     => "-fPIC",
+        shared_ldflag    => add_before("-shared -static-libgcc"),
+    },
+    "solaris64-x86_64-gcc" => {
+        # -shared -static-libgcc might appear controversial, but modules
+        # taken from static libgcc do not have relocations and linking
+        # them into our shared objects doesn't have any negative side
+        # effects. On the contrary, doing so makes it possible to use
+        # gcc shared build with Sun C. Given that gcc generates faster
+        # code [thanks to inline assembler], I would actually recommend
+        # to consider using gcc shared build even with vendor compiler:-)
+        #                        -- <appro@openssl.org>
+        inherit_from     => [ "solaris-common", asm("x86_64_asm") ],
+        CC               => "gcc",
+        CFLAGS           => add_before(picker(default => "-Wall",
+                                              debug   => "-O0 -g",
+                                              release => "-O3")),
+        cflags           => add_before("-m64", threads("-pthread")),
+        lib_cppflags     => add("-DL_ENDIAN"),
+        ex_libs          => add(threads("-pthread")),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG",
+        perlasm_scheme   => "elf",
+        shared_cflag     => "-fPIC",
+        shared_ldflag    => add_before("-shared -static-libgcc"),
+        multilib         => "/64",
+    },
+
+#### Solaris x86 with Sun C setups
+    # There used to be solaris-x86-cc target, but it was removed,
+    # primarily because vendor assembler can't assemble our modules
+    # with -KPIC flag. As result it, assembly support, was not even
+    # available as option. But its lack means lack of side-channel
+    # resistant code, which is incompatible with security by todays
+    # standards. Fortunately gcc is readily available prepackaged
+    # option, which we can firmly point at...
+    #
+    # On related note, solaris64-x86_64-cc target won't compile code
+    # paths utilizing AVX and post-Haswell instruction extensions.
+    # Consider switching to solaris64-x86_64-gcc even here...
+    #
+    "solaris64-x86_64-cc" => {
+        inherit_from     => [ "solaris-common", asm("x86_64_asm") ],
+        CC               => "cc",
+        CFLAGS           => add_before(picker(debug   => "-g",
+                                              release => "-xO5 -xdepend -xbuiltin")),
+        cflags           => add_before("-xarch=generic64 -xstrconst -Xa"),
+        cppflags         => add(threads("-D_REENTRANT")),
+        lib_cppflags     => add("-DL_ENDIAN"),
+        thread_scheme    => "pthreads",
+        lflags           => add(threads("-mt")),
+        ex_libs          => add(threads("-lpthread")),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG",
+        perlasm_scheme   => "elf",
+        shared_cflag     => "-KPIC",
+        shared_ldflag    => add_before("-G -dy -z text"),
+        multilib         => "/64",
+    },
+
+#### SPARC Solaris with GNU C setups
+    "solaris-sparcv7-gcc" => {
+        inherit_from     => [ "solaris-common" ],
+        CC               => "gcc",
+        CFLAGS           => add_before(picker(default => "-Wall",
+                                              debug   => "-O0 -g",
+                                              release => "-O3")),
+        cflags           => add(threads("-pthread")),
+        lib_cppflags     => add("-DB_ENDIAN -DBN_DIV2W"),
+        ex_libs          => add(threads("-pthread")),
+        bn_ops           => "BN_LLONG RC4_CHAR",
+        shared_cflag     => "-fPIC",
+        shared_ldflag    => add_before("-shared"),
+    },
+    "solaris-sparcv8-gcc" => {
+        inherit_from     => [ "solaris-sparcv7-gcc", asm("sparcv8_asm") ],
+        cflags           => add_before("-mcpu=v8"),
+    },
+    "solaris-sparcv9-gcc" => {
+        # -m32 should be safe to add as long as driver recognizes
+        # -mcpu=ultrasparc
+        inherit_from     => [ "solaris-sparcv7-gcc", asm("sparcv9_asm") ],
+        cflags           => add_before("-m32 -mcpu=ultrasparc"),
+    },
+    "solaris64-sparcv9-gcc" => {
+        inherit_from     => [ "solaris-sparcv9-gcc" ],
+        cflags           => sub { my $f=join(" ",@_); $f =~ s/\-m32/-m64/; $f; },
+        bn_ops           => "BN_LLONG RC4_CHAR",
+        multilib         => "/64",
+    },
+
+#### SPARC Solaris with Sun C setups
+# SC4.0 doesn't pass 'make test', upgrade to SC5.0 or SC4.2.
+# SC4.2 is ok, better than gcc even on bn as long as you tell it -xarch=v8
+# SC5.0 note: Compiler common patch 107357-01 or later is required!
+    "solaris-sparcv7-cc" => {
+        inherit_from     => [ "solaris-common" ],
+        CC               => "cc",
+        CFLAGS           => add_before(picker(debug   => "-g",
+                                              release => "-xO5 -xdepend")),
+        cflags           => add_before("-xstrconst -Xa"),
+        cppflags         => add(threads("-D_REENTRANT")),
+        lib_cppflags     => add("-DB_ENDIAN -DBN_DIV2W"),
+        lflags           => add(threads("-mt")),
+        ex_libs          => add(threads("-lpthread")),
+        bn_ops           => "BN_LLONG RC4_CHAR",
+        shared_cflag     => "-KPIC",
+        shared_ldflag    => add_before("-G -dy -z text"),
+    },
+####
+    "solaris-sparcv8-cc" => {
+        inherit_from     => [ "solaris-sparcv7-cc", asm("sparcv8_asm") ],
+        cflags           => add_before("-xarch=v8"),
+    },
+    "solaris-sparcv9-cc" => {
+        inherit_from     => [ "solaris-sparcv7-cc", asm("sparcv9_asm") ],
+        cflags           => add_before("-xarch=v8plus"),
+    },
+    "solaris64-sparcv9-cc" => {
+        inherit_from     => [ "solaris-sparcv7-cc", asm("sparcv9_asm") ],
+        cflags           => add_before("-xarch=v9"),
+        bn_ops           => "BN_LLONG RC4_CHAR",
+        multilib         => "/64",
+    },
+
+#### IRIX 6.x configs
+# Only N32 and N64 ABIs are supported.
+    "irix-common" => {
+        inherit_from     => [ "BASE_unix" ],
+        template         => 1,
+        cppflags         => threads("-D_SGI_MP_SOURCE"),
+        lib_cppflags     => "-DB_ENDIAN",
+        ex_libs          => add(threads("-lpthread")),
+        thread_scheme    => "pthreads",
+        dso_scheme       => "dlfcn",
+        shared_target    => "self",
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+        shared_ldflag    => "-shared -Wl,-Bsymbolic",
+        shared_sonameflag=> "-Wl,-soname,",
+    },
+    "irix-mips3-gcc" => {
+        inherit_from     => [ "irix-common", asm("mips64_asm") ],
+        CC               => "gcc",
+        CFLAGS           => picker(debug   => "-g -O0",
+                                   release => "-O3"),
+        LDFLAGS          => "-static-libgcc",
+        cflags           => "-mabi=n32",
+        bn_ops           => "RC4_CHAR SIXTY_FOUR_BIT",
+        perlasm_scheme   => "n32",
+        multilib         => "32",
+    },
+    "irix-mips3-cc" => {
+        inherit_from     => [ "irix-common", asm("mips64_asm") ],
+        CC               => "cc",
+        CFLAGS           => picker(debug   => "-g -O0",
+                                   release => "-O2"),
+        cflags           => "-n32 -mips3 -use_readonly_const -G0 -rdata_shared",
+        bn_ops           => "RC4_CHAR SIXTY_FOUR_BIT",
+        perlasm_scheme   => "n32",
+        multilib         => "32",
+    },
+    # N64 ABI builds.
+    "irix64-mips4-gcc" => {
+        inherit_from     => [ "irix-common", asm("mips64_asm") ],
+        CC               => "gcc",
+        CFLAGS           => picker(debug   => "-g -O0",
+                                   release => "-O3"),
+        LDFLAGS          => "-static-libgcc",
+        cflags           => "-mabi=64 -mips4",
+        bn_ops           => "RC4_CHAR SIXTY_FOUR_BIT_LONG",
+        perlasm_scheme   => "64",
+        multilib         => "64",
+    },
+    "irix64-mips4-cc" => {
+        inherit_from     => [ "irix-common", asm("mips64_asm") ],
+        CC               => "cc",
+        CFLAGS           => picker(debug   => "-g -O0",
+                                   release => "-O2"),
+        cflags           => "-64 -mips4 -use_readonly_const -G0 -rdata_shared",
+        bn_ops           => "RC4_CHAR SIXTY_FOUR_BIT_LONG",
+        perlasm_scheme   => "64",
+        multilib         => "64",
+    },
+
+#### Unified HP-UX ANSI C configs.
+# Special notes:
+# - Originally we were optimizing at +O4 level. It should be noted
+#   that the only difference between +O3 and +O4 is global inter-
+#   procedural analysis. As it has to be performed during the link
+#   stage the compiler leaves behind certain pseudo-code in lib*.a
+#   which might be release or even patch level specific. Generating
+#   the machine code for and analyzing the *whole* program appears
+#   to be *extremely* memory demanding while the performance gain is
+#   actually questionable. The situation is intensified by the default
+#   HP-UX data set size limit (infamous 'maxdsiz' tunable) of 64MB
+#   which is way too low for +O4. In other words, doesn't +O3 make
+#   more sense?
+# - Keep in mind that the HP compiler by default generates code
+#   suitable for execution on the host you're currently compiling at.
+#   If the toolkit is meant to be used on various PA-RISC processors
+#   consider './Configure hpux-parisc-[g]cc +DAportable'.
+# - -DMD32_XARRAY triggers workaround for compiler bug we ran into in
+#   32-bit message digests. (For the moment of this writing) HP C
+#   doesn't seem to "digest" too many local variables (they make "him"
+#   chew forever:-). For more details look-up MD32_XARRAY comment in
+#   crypto/sha/sha_lcl.h.
+# - originally there were 32-bit hpux-parisc2-* targets. They were
+#   scrapped, because a) they were not interchangeable with other 32-bit
+#   targets; b) performance-critical 32-bit assembly modules implement
+#   even PA-RISC 2.0-specific code paths, which are chosen at run-time,
+#   thus adequate performance is provided even with PA-RISC 1.1 build.
+    "hpux-common" => {
+        inherit_from     => [ "BASE_unix" ],
+        template         => 1,
+        defines          => add("_XOPEN_SOURCE", "_XOPEN_SOURCE_EXTENDED",
+                                "_HPUX_ALT_XOPEN_SOCKET_API"),
+        lib_cppflags     => "-DB_ENDIAN",
+        thread_scheme    => "pthreads",
+        dso_scheme       => "dlfcn",    # overridden in 32-bit PA-RISC builds
+        shared_target    => "self",
+        bin_lflags       => "-Wl,+s,+cdp,../:,+cdp,./:",
+        shared_ldflag    => "-Wl,-B,symbolic,+vnocompatwarnings,-z,+s,+cdp,../:,+cdp,./:",
+        shared_sonameflag=> "-Wl,+h,",
+    },
+    "hpux-parisc-gcc" => {
+        inherit_from     => [ "hpux-common" ],
+        CC               => "gcc",
+        CFLAGS           => picker(debug   => "-O0 -g",
+                                   release => "-O3"),
+        cflags           => add(threads("-pthread")),
+        lib_cppflags     => add("-DBN_DIV2W"),
+        ex_libs          => add("-ldld", threads("-pthread")),
+        bn_ops           => "BN_LLONG RC4_CHAR",
+        dso_scheme       => "dl",
+        shared_cflag     => "-fPIC",
+        shared_ldflag    => add_before("-shared"),
+        shared_extension => ".sl.\$(SHLIB_VERSION_NUMBER)",
+    },
+    "hpux-parisc1_1-gcc" => {
+        inherit_from     => [ "hpux-parisc-gcc", asm("parisc11_asm") ],
+        multilib         => "/pa1.1",
+    },
+    "hpux64-parisc2-gcc" => {
+        inherit_from     => [ "hpux-common", asm("parisc20_64_asm") ],
+        CC               => "gcc",
+        CFLAGS           => combine(picker(debug   => "-O0 -g",
+                                           release => "-O3")),
+        cflags           => add(threads("-pthread")),
+        ex_libs          => add("-ldl", threads("-pthread")),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG RC4_CHAR",
+        shared_cflag     => "-fpic",
+        shared_ldflag    => add_before("-shared"),
+        shared_extension => ".sl.\$(SHLIB_VERSION_NUMBER)",
+        multilib         => "/pa20_64",
+    },
+
+    # More attempts at unified 10.X and 11.X targets for HP C compiler.
+    "hpux-parisc-cc" => {
+        inherit_from     => [ "hpux-common" ],
+        CC               => "cc",
+        CFLAGS           => picker(debug   => "+O0 +d -g",
+                                   release => "+O3"),
+        cflags           => "+Optrs_strongly_typed -Ae +ESlit",
+        cppflags         => threads("-D_REENTRANT"),
+        lib_cppflags     => add("-DBN_DIV2W -DMD32_XARRAY"),
+        ex_libs          => add("-ldld", threads("-lpthread")),
+        bn_ops           => "RC4_CHAR",
+        dso_scheme       => "dl",
+        shared_cflag     => "+Z",
+        shared_ldflag    => add_before("-b"),
+        shared_extension => ".sl.\$(SHLIB_VERSION_NUMBER)",
+    },
+    "hpux-parisc1_1-cc" => {
+        inherit_from     => [ "hpux-parisc-cc", asm("parisc11_asm") ],
+        cflags           => add_before("+DA1.1"),
+        multilib         => "/pa1.1",
+    },
+    "hpux64-parisc2-cc" => {
+        inherit_from     => [ "hpux-common", asm("parisc20_64_asm") ],
+        CC               => "cc",
+        CFLAGS           => picker(debug   => "+O0 +d -g",
+                                   release => "+O3") ,
+        cflags           => "+DD64 +Optrs_strongly_typed -Ae +ESlit",
+        cppflags         => threads("-D_REENTRANT") ,
+        lib_cppflags     => add("-DMD32_XARRAY"),
+        ex_libs          => add("-ldl", threads("-lpthread")),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG RC4_CHAR",
+        shared_cflag     => "+Z",
+        shared_ldflag    => add_before("-b"),
+        shared_extension => ".sl.\$(SHLIB_VERSION_NUMBER)",
+        multilib         => "/pa20_64",
+    },
+
+    # HP/UX IA-64 targets
+    "hpux-ia64-cc" => {
+        inherit_from     => [ "hpux-common", asm("ia64_asm") ],
+        CC               => "cc",
+        CFLAGS           => picker(debug   => "+O0 +d -g",
+                                   release => "+O2"),
+        cflags           => "-Ae +DD32 +Olit=all -z",
+        cppflags         => add(threads("-D_REENTRANT")),
+        ex_libs          => add("-ldl", threads("-lpthread")),
+        bn_ops           => "SIXTY_FOUR_BIT",
+        shared_cflag     => "+Z",
+        shared_ldflag    => add_before("-b"),
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+        multilib         => "/hpux32",
+    },
+    "hpux64-ia64-cc" => {
+        inherit_from     => [ "hpux-common", asm("ia64_asm") ],
+        CC               => "cc",
+        CFLAGS           => picker(debug   => "+O0 +d -g",
+                                   release => "+O3"),
+        cflags           => "-Ae +DD64 +Olit=all -z",
+        cppflags         => threads("-D_REENTRANT"),
+        ex_libs          => add("-ldl", threads("-lpthread")),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG",
+        shared_cflag     => "+Z",
+        shared_ldflag    => add_before("-b"),
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+        multilib         => "/hpux64",
+    },
+    # GCC builds...
+    "hpux-ia64-gcc" => {
+        inherit_from     => [ "hpux-common", asm("ia64_asm") ],
+        CC               => "gcc",
+        CFLAGS           => picker(debug   => "-O0 -g",
+                                   release => "-O3"),
+        cflags           => add(threads("-pthread")),
+        ex_libs          => add("-ldl", threads("-pthread")),
+        bn_ops           => "SIXTY_FOUR_BIT",
+        shared_cflag     => "-fpic",
+        shared_ldflag    => add_before("-shared"),
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+        multilib         => "/hpux32",
+    },
+    "hpux64-ia64-gcc" => {
+        inherit_from     => [ "hpux-common", asm("ia64_asm") ],
+        CC               => "gcc",
+        CFLAGS           => picker(debug   => "-O0 -g",
+                                   release => "-O3"),
+        cflags           => combine("-mlp64", threads("-pthread")),
+        ex_libs          => add("-ldl", threads("-pthread")),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG",
+        shared_cflag     => "-fpic",
+        shared_ldflag    => add_before("-shared"),
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+        multilib         => "/hpux64",
+    },
+
+#### HP MPE/iX http://jazz.external.hp.com/src/openssl/
+    "MPE/iX-gcc" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "gcc",
+        CFLAGS           => "-O3",
+        cppflags         => "-D_POSIX_SOURCE -D_SOCKET_SOURCE",
+        includes         => [ "/SYSLOG/PUB" ],
+        lib_cppflags     => "-DBN_DIV2W",
+        sys_id           => "MPE",
+        lflags           => add("-L/SYSLOG/PUB"),
+        ex_libs          => add("-lsyslog -lsocket -lcurses"),
+        thread_scheme    => "(unknown)",
+        bn_ops           => "BN_LLONG",
+    },
+
+#### DEC Alpha Tru64 targets. Tru64 is marketing name for OSF/1 version 4
+#### and forward. In reality 'uname -s' still returns "OSF1". Originally
+#### there were even osf1-* configs targeting prior versions provided,
+#### but not anymore...
+    "tru64-alpha-gcc" => {
+        inherit_from     => [ "BASE_unix", asm("alpha_asm") ],
+        CC               => "gcc",
+        CFLAGS           => "-O3",
+        cflags           => add("-std=c9x", threads("-pthread")),
+        cppflags         => "-D_XOPEN_SOURCE=500 -D_OSF_SOURCE",
+        ex_libs          => add("-lrt", threads("-pthread")), # for mlock(2)
+        bn_ops           => "SIXTY_FOUR_BIT_LONG",
+        thread_scheme    => "pthreads",
+        dso_scheme       => "dlfcn",
+        shared_target    => "alpha-osf1-shared",
+        shared_extension => ".so",
+    },
+    "tru64-alpha-cc" => {
+        inherit_from     => [ "BASE_unix", asm("alpha_asm") ],
+        CC               => "cc",
+        CFLAGS           => "-tune host -fast",
+        cflags           => add("-std1 -readonly_strings",
+                                threads("-pthread")),
+        cppflags         => "-D_XOPEN_SOURCE=500 -D_OSF_SOURCE",
+        ex_libs          => add("-lrt", threads("-pthread")), # for mlock(2)
+        bn_ops           => "SIXTY_FOUR_BIT_LONG",
+        thread_scheme    => "pthreads",
+        dso_scheme       => "dlfcn",
+        shared_target    => "alpha-osf1-shared",
+        shared_ldflag    => "-msym",
+        shared_extension => ".so",
+    },
+
+####
+#### Variety of LINUX:-)
+####
+# *-generic* is endian-neutral target, but ./config is free to
+# throw in -D[BL]_ENDIAN, whichever appropriate...
+    "linux-generic32" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "gcc",
+        CXX              => "g++",
+        CFLAGS           => picker(default => "-Wall",
+                                   debug   => "-O0 -g",
+                                   release => "-O3"),
+        CXXFLAGS         => picker(default => "-Wall",
+                                   debug   => "-O0 -g",
+                                   release => "-O3"),
+        cflags           => threads("-pthread"),
+        cxxflags         => combine("-std=c++11", threads("-pthread")),
+        lib_cppflags     => "-DOPENSSL_USE_NODELETE",
+        ex_libs          => add("-ldl", threads("-pthread")),
+        bn_ops           => "BN_LLONG RC4_CHAR",
+        thread_scheme    => "pthreads",
+        dso_scheme       => "dlfcn",
+        shared_target    => "linux-shared",
+        shared_cflag     => "-fPIC",
+        shared_ldflag    => sub { $disabled{pinshared} ? () : "-Wl,-znodelete" },
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+        enable           => [ "afalgeng" ],
+    },
+    "linux-generic64" => {
+        inherit_from     => [ "linux-generic32" ],
+        bn_ops           => "SIXTY_FOUR_BIT_LONG RC4_CHAR",
+    },
+
+    "linux-ppc" => {
+        inherit_from     => [ "linux-generic32", asm("ppc32_asm") ],
+        perlasm_scheme   => "linux32",
+    },
+    "linux-ppc64" => {
+        inherit_from     => [ "linux-generic64", asm("ppc64_asm") ],
+        cflags           => add("-m64"),
+        cxxflags         => add("-m64"),
+        lib_cppflags     => add("-DB_ENDIAN"),
+        perlasm_scheme   => "linux64",
+        multilib         => "64",
+    },
+    "linux-ppc64le" => {
+        inherit_from     => [ "linux-generic64", asm("ppc64_asm") ],
+        cflags           => add("-m64"),
+        cxxflags         => add("-m64"),
+        lib_cppflags     => add("-DL_ENDIAN"),
+        perlasm_scheme   => "linux64le",
+    },
+
+    "linux-armv4" => {
+        ################################################################
+        # Note that -march is not among compiler options in linux-armv4
+        # target description. Not specifying one is intentional to give
+        # you choice to:
+        #
+        # a) rely on your compiler default by not specifying one;
+        # b) specify your target platform explicitly for optimal
+        # performance, e.g. -march=armv6 or -march=armv7-a;
+        # c) build "universal" binary that targets *range* of platforms
+        # by specifying minimum and maximum supported architecture;
+        #
+        # As for c) option. It actually makes no sense to specify
+        # maximum to be less than ARMv7, because it's the least
+        # requirement for run-time switch between platform-specific
+        # code paths. And without run-time switch performance would be
+        # equivalent to one for minimum. Secondly, there are some
+        # natural limitations that you'd have to accept and respect.
+        # Most notably you can *not* build "universal" binary for
+        # big-endian platform. This is because ARMv7 processor always
+        # picks instructions in little-endian order. Another similar
+        # limitation is that -mthumb can't "cross" -march=armv6t2
+        # boundary, because that's where it became Thumb-2. Well, this
+        # limitation is a bit artificial, because it's not really
+        # impossible, but it's deemed too tricky to support. And of
+        # course you have to be sure that your binutils are actually
+        # up to the task of handling maximum target platform. With all
+        # this in mind here is an example of how to configure
+        # "universal" build:
+        #
+        # ./Configure linux-armv4 -march=armv6 -D__ARM_MAX_ARCH__=8
+        #
+        inherit_from     => [ "linux-generic32", asm("armv4_asm") ],
+        perlasm_scheme   => "linux32",
+    },
+    "linux-aarch64" => {
+        inherit_from     => [ "linux-generic64", asm("aarch64_asm") ],
+        perlasm_scheme   => "linux64",
+    },
+    "linux-arm64ilp32" => {  # https://wiki.linaro.org/Platform/arm64-ilp32
+        inherit_from     => [ "linux-generic32", asm("aarch64_asm") ],
+        cflags           => add("-mabi=ilp32"),
+        cxxflags         => add("-mabi=ilp32"),
+        bn_ops           => "SIXTY_FOUR_BIT RC4_CHAR",
+        perlasm_scheme   => "linux64",
+    },
+
+    "linux-mips32" => {
+        # Configure script adds minimally required -march for assembly
+        # support, if no -march was specified at command line.
+        inherit_from     => [ "linux-generic32", asm("mips32_asm") ],
+        cflags           => add("-mabi=32"),
+        cxxflags         => add("-mabi=32"),
+        perlasm_scheme   => "o32",
+    },
+    # mips32 and mips64 below refer to contemporary MIPS Architecture
+    # specifications, MIPS32 and MIPS64, rather than to kernel bitness.
+    "linux-mips64" => {
+        inherit_from     => [ "linux-generic32", asm("mips64_asm") ],
+        cflags           => add("-mabi=n32"),
+        cxxflags         => add("-mabi=n32"),
+        bn_ops           => "SIXTY_FOUR_BIT RC4_CHAR",
+        perlasm_scheme   => "n32",
+        multilib         => "32",
+    },
+    "linux64-mips64" => {
+        inherit_from     => [ "linux-generic64", asm("mips64_asm") ],
+        cflags           => add("-mabi=64"),
+        cxxflags         => add("-mabi=64"),
+        perlasm_scheme   => "64",
+        multilib         => "64",
+    },
+
+    #### IA-32 targets...
+    #### These two targets are a bit aged and are to be used on older Linux
+    #### machines where gcc doesn't understand -m32 and -m64
+    "linux-elf" => {
+        inherit_from     => [ "linux-generic32", asm("x86_elf_asm") ],
+        CFLAGS           => add(picker(release => "-fomit-frame-pointer")),
+        lib_cppflags     => add("-DL_ENDIAN"),
+        bn_ops           => "BN_LLONG",
+    },
+    "linux-aout" => {
+        inherit_from     => [ "BASE_unix", asm("x86_asm") ],
+        CC               => "gcc",
+        CFLAGS           => add(picker(default => "-Wall",
+                                       debug   => "-O0 -g",
+                                       release => "-O3 -fomit-frame-pointer")),
+        lib_cppflags     => add("-DL_ENDIAN"),
+        bn_ops           => "BN_LLONG",
+        thread_scheme    => "(unknown)",
+        perlasm_scheme   => "a.out",
+    },
+
+    #### X86 / X86_64 targets
+    "linux-x86" => {
+        inherit_from     => [ "linux-generic32", asm("x86_asm") ],
+        CFLAGS           => add(picker(release => "-fomit-frame-pointer")),
+        cflags           => add("-m32"),
+        cxxflags         => add("-m32"),
+        lib_cppflags     => add("-DL_ENDIAN"),
+        bn_ops           => "BN_LLONG",
+        perlasm_scheme   => "elf",
+    },
+    "linux-x86-clang" => {
+        inherit_from     => [ "linux-x86" ],
+        CC               => "clang",
+        CXX              => "clang++",
+    },
+    "linux-x86_64" => {
+        inherit_from     => [ "linux-generic64", asm("x86_64_asm") ],
+        cflags           => add("-m64"),
+        cxxflags         => add("-m64"),
+        lib_cppflags     => add("-DL_ENDIAN"),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG",
+        perlasm_scheme   => "elf",
+        multilib         => "64",
+    },
+    "linux-x86_64-clang" => {
+        inherit_from     => [ "linux-x86_64" ],
+        CC               => "clang",
+        CXX              => "clang++",
+    },
+    "linux-x32" => {
+        inherit_from     => [ "linux-generic32", asm("x86_64_asm") ],
+        cflags           => add("-mx32"),
+        cxxflags         => add("-mx32"),
+        lib_cppflags     => add("-DL_ENDIAN"),
+        bn_ops           => "SIXTY_FOUR_BIT",
+        perlasm_scheme   => "elf32",
+        multilib         => "x32",
+    },
+
+    "linux-ia64" => {
+        inherit_from     => [ "linux-generic64", asm("ia64_asm") ],
+        bn_ops           => "SIXTY_FOUR_BIT_LONG",
+    },
+
+    "linux64-s390x" => {
+        inherit_from     => [ "linux-generic64", asm("s390x_asm") ],
+        cflags           => add("-m64"),
+        cxxflags         => add("-m64"),
+        lib_cppflags     => add("-DB_ENDIAN"),
+        perlasm_scheme   => "64",
+        multilib         => "64",
+    },
+    "linux32-s390x" => {
+        #### So called "highgprs" target for z/Architecture CPUs
+        # "Highgprs" is kernel feature first implemented in Linux
+        # 2.6.32, see /proc/cpuinfo. The idea is to preserve most
+        # significant bits of general purpose registers not only
+        # upon 32-bit process context switch, but even on
+        # asynchronous signal delivery to such process. This makes
+        # it possible to deploy 64-bit instructions even in legacy
+        # application context and achieve better [or should we say
+        # adequate] performance. The build is binary compatible with
+        # linux-generic32, and the idea is to be able to install the
+        # resulting libcrypto.so alongside generic one, e.g. as
+        # /lib/highgprs/libcrypto.so.x.y, for ldconfig and run-time
+        # linker to autodiscover. Unfortunately it doesn't work just
+        # yet, because of couple of bugs in glibc
+        # sysdeps/s390/dl-procinfo.c affecting ldconfig and ld.so.1...
+        #
+        inherit_from     => [ "linux-generic32", asm("s390x_asm") ],
+        cflags           => add("-m31 -Wa,-mzarch"),
+        cxxflags         => add("-m31 -Wa,-mzarch"),
+        lib_cppflags     => add("-DB_ENDIAN"),
+        bn_asm_src       => sub { my $r=join(" ",@_); $r=~s|asm/s390x\.S|bn_asm.c|; $r; },
+        perlasm_scheme   => "31",
+        multilib         => "/highgprs",
+    },
+
+    #### SPARC Linux setups
+    "linux-sparcv8" => {
+        inherit_from     => [ "linux-generic32", asm("sparcv8_asm") ],
+        cflags           => add("-mcpu=v8"),
+        cxxflags         => add("-mcpu=v8"),
+        lib_cppflags     => add("-DB_ENDIAN -DBN_DIV2W"),
+    },
+    "linux-sparcv9" => {
+        # it's a real mess with -mcpu=ultrasparc option under Linux,
+        # but -Wa,-Av8plus should do the trick no matter what.
+        inherit_from     => [ "linux-generic32", asm("sparcv9_asm") ],
+        cflags           => add("-m32 -mcpu=ultrasparc -Wa,-Av8plus"),
+        cxxflags         => add("-m32 -mcpu=ultrasparc -Wa,-Av8plus"),
+        lib_cppflags     => add("-DB_ENDIAN -DBN_DIV2W"),
+    },
+    "linux64-sparcv9" => {
+        # GCC 3.1 is a requirement
+        inherit_from     => [ "linux-generic64", asm("sparcv9_asm") ],
+        cflags           => add("-m64 -mcpu=ultrasparc"),
+        cxxflags         => add("-m64 -mcpu=ultrasparc"),
+        lib_cppflags     => add("-DB_ENDIAN"),
+        bn_ops           => "BN_LLONG RC4_CHAR",
+        multilib         => "64",
+    },
+
+    "linux-alpha-gcc" => {
+        inherit_from     => [ "linux-generic64", asm("alpha_asm") ],
+        lib_cppflags     => add("-DL_ENDIAN"),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG",
+    },
+    "linux-c64xplus" => {
+        inherit_from     => [ "BASE_unix" ],
+        # TI_CGT_C6000_7.3.x is a requirement
+        CC               => "cl6x",
+        CFLAGS           => "-o2 -ox -ms",
+        cflags           => "--linux -ea=.s -eo=.o -mv6400+ -pden",
+        cxxflags         => "--linux -ea=.s -eo=.o -mv6400+ -pden",
+        cppflags         => combine("-DOPENSSL_SMALL_FOOTPRINT",
+                                    threads("-D_REENTRANT")),
+        bn_ops           => "BN_LLONG",
+        cpuid_asm_src    => "c64xpluscpuid.s",
+        bn_asm_src       => "asm/bn-c64xplus.asm c64xplus-gf2m.s",
+        aes_asm_src      => "aes-c64xplus.s aes_cbc.c aes-ctr.fake",
+        sha1_asm_src     => "sha1-c64xplus.s sha256-c64xplus.s sha512-c64xplus.s",
+        rc4_asm_src      => "rc4-c64xplus.s",
+        modes_asm_src    => "ghash-c64xplus.s",
+        chacha_asm_src   => "chacha-c64xplus.s",
+        poly1305_asm_src => "poly1305-c64xplus.s",
+        thread_scheme    => "pthreads",
+        perlasm_scheme   => "void",
+        dso_scheme       => "dlfcn",
+        shared_target    => "linux-shared",
+        shared_cflag     => "--pic",
+        shared_ldflag    => add("-z --sysv --shared"),
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+        ranlib           => "true",
+    },
+
+#### *BSD
+    "BSD-generic32" => {
+        # As for thread cflag. Idea is to maintain "collective" set of
+        # flags, which would cover all BSD flavors. -pthread applies
+        # to them all, but is treated differently. OpenBSD expands is
+        # as -D_POSIX_THREAD -lc_r, which is sufficient. FreeBSD 4.x
+        # expands it as -lc_r, which has to be accompanied by explicit
+        # -D_THREAD_SAFE and sometimes -D_REENTRANT. FreeBSD 5.x
+        # expands it as -lc_r, which seems to be sufficient?
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "cc",
+        CFLAGS           => picker(default => "-Wall",
+                                   debug   => "-O0 -g",
+                                   release => "-O3"),
+        cflags           => threads("-pthread"),
+        cppflags         => threads("-D_THREAD_SAFE -D_REENTRANT"),
+        ex_libs          => add(threads("-pthread")),
+        enable           => add("devcryptoeng"),
+        bn_ops           => "BN_LLONG",
+        thread_scheme    => "pthreads",
+        dso_scheme       => "dlfcn",
+        shared_target    => "bsd-gcc-shared",
+        shared_cflag     => "-fPIC",
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+    },
+    "BSD-generic64" => {
+        inherit_from     => [ "BSD-generic32" ],
+        bn_ops           => "SIXTY_FOUR_BIT_LONG",
+    },
+
+    "BSD-x86" => {
+        inherit_from     => [ "BSD-generic32", asm("x86_asm") ],
+        CFLAGS           => add(picker(release => "-fomit-frame-pointer")),
+        lib_cppflags     => add("-DL_ENDIAN"),
+        bn_ops           => "BN_LLONG",
+        shared_target    => "bsd-shared",
+        perlasm_scheme   => "a.out",
+    },
+    "BSD-x86-elf" => {
+        inherit_from     => [ "BSD-x86" ],
+        perlasm_scheme   => "elf",
+    },
+
+    "BSD-sparcv8" => {
+        inherit_from     => [ "BSD-generic32", asm("sparcv8_asm") ],
+        cflags           => add("-mcpu=v8"),
+        lib_cppflags     => add("-DB_ENDIAN"),
+    },
+    "BSD-sparc64" => {
+        # -DMD32_REG_T=int doesn't actually belong in sparc64 target, it
+        # simply *happens* to work around a compiler bug in gcc 3.3.3,
+        # triggered by RIPEMD160 code.
+        inherit_from     => [ "BSD-generic64", asm("sparcv9_asm") ],
+        lib_cppflags     => add("-DB_ENDIAN -DMD32_REG_T=int"),
+        bn_ops           => "BN_LLONG",
+    },
+
+    "BSD-ia64" => {
+        inherit_from     => [ "BSD-generic64", asm("ia64_asm") ],
+        lib_cppflags     => add("-DL_ENDIAN"),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG",
+    },
+
+    "BSD-x86_64" => {
+        inherit_from     => [ "BSD-generic64", asm("x86_64_asm") ],
+        lib_cppflags     => add("-DL_ENDIAN"),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG",
+        perlasm_scheme   => "elf",
+    },
+
+    "bsdi-elf-gcc" => {
+        inherit_from     => [ "BASE_unix", asm("x86_elf_asm") ],
+        CC               => "gcc",
+        CFLAGS           => "-fomit-frame-pointer -O3 -Wall",
+        lib_cppflags     => "-DPERL5 -DL_ENDIAN",
+        ex_libs          => add("-ldl"),
+        bn_ops           => "BN_LLONG",
+        thread_scheme    => "(unknown)",
+        dso_scheme       => "dlfcn",
+        shared_target    => "bsd-gcc-shared",
+        shared_cflag     => "-fPIC",
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+    },
+
+    "nextstep" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "cc",
+        CFLAGS           => "-O -Wall",
+        unistd           => "<libc.h>",
+        bn_ops           => "BN_LLONG",
+        thread_scheme    => "(unknown)",
+    },
+    "nextstep3.3" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "cc",
+        CFLAGS           => "-O3 -Wall",
+        unistd           => "<libc.h>",
+        bn_ops           => "BN_LLONG",
+        thread_scheme    => "(unknown)",
+    },
+
+#### SCO/Caldera targets.
+#
+# Originally we had like unixware-*, unixware-*-pentium, unixware-*-p6, etc.
+# Now we only have blended unixware-* as it's the only one used by ./config.
+# If you want to optimize for particular microarchitecture, bypass ./config
+# and './Configure unixware-7 -Kpentium_pro' or whatever appropriate.
+# Note that not all targets include assembler support. Mostly because of
+# lack of motivation to support out-of-date platforms with out-of-date
+# compiler drivers and assemblers.
+#
+# UnixWare 2.0x fails destest with -O.
+    "unixware-2.0" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "cc",
+        cflags           => threads("-Kthread"),
+        lib_cppflags     => "-DFILIO_H -DNO_STRINGS_H",
+        ex_libs          => add("-lsocket -lnsl -lresolv -lx"),
+        thread_scheme    => "uithreads",
+    },
+    "unixware-2.1" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "cc",
+        CFLAGS           => "-O",
+        cflags           => threads("-Kthread"),
+        lib_cppflags     => "-DFILIO_H",
+        ex_libs          => add("-lsocket -lnsl -lresolv -lx"),
+        thread_scheme    => "uithreads",
+    },
+    "unixware-7" => {
+        inherit_from     => [ "BASE_unix", asm("x86_elf_asm") ],
+        CC               => "cc",
+        CFLAGS           => "-O",
+        cflags           => combine("-Kalloca", threads("-Kthread")),
+        lib_cppflags     => "-DFILIO_H",
+        ex_libs          => add("-lsocket -lnsl"),
+        thread_scheme    => "uithreads",
+        bn_ops           => "BN_LLONG",
+        perlasm_scheme   => "elf-1",
+        dso_scheme       => "dlfcn",
+        shared_target    => "svr5-shared",
+        shared_cflag     => "-Kpic",
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+    },
+    "unixware-7-gcc" => {
+        inherit_from     => [ "BASE_unix", asm("x86_elf_asm") ],
+        CC               => "gcc",
+        CFLAGS           => "-O3 -fomit-frame-pointer -Wall",
+        cppflags         => add(threads("-D_REENTRANT")),
+        lib_cppflags     => add("-DL_ENDIAN -DFILIO_H"),
+        ex_libs          => add("-lsocket -lnsl"),
+        bn_ops           => "BN_LLONG",
+        thread_scheme    => "pthreads",
+        perlasm_scheme   => "elf-1",
+        dso_scheme       => "dlfcn",
+        shared_target    => "gnu-shared",
+        shared_cflag     => "-fPIC",
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+    },
+# SCO 5 - Ben Laurie says the -O breaks the SCO cc.
+    "sco5-cc" => {
+        inherit_from     => [ "BASE_unix", asm("x86_elf_asm") ],
+        cc               => "cc",
+        cflags           => "-belf",
+        ex_libs          => add("-lsocket -lnsl"),
+        thread_scheme    => "(unknown)",
+        perlasm_scheme   => "elf-1",
+        dso_scheme       => "dlfcn",
+        shared_target    => "svr3-shared",
+        shared_cflag     => "-Kpic",
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+    },
+    "sco5-gcc" => {
+        inherit_from     => [ "BASE_unix", asm("x86_elf_asm") ],
+        cc               => "gcc",
+        cflags           => "-O3 -fomit-frame-pointer",
+        ex_libs          => add("-lsocket -lnsl"),
+        bn_ops           => "BN_LLONG",
+        thread_scheme    => "(unknown)",
+        perlasm_scheme   => "elf-1",
+        dso_scheme       => "dlfcn",
+        shared_target    => "svr3-shared",
+        shared_cflag     => "-fPIC",
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+    },
+
+#### IBM's AIX.
+    # Below targets assume AIX >=5. Caveat lector. If you are accustomed
+    # to control compilation "bitness" by setting $OBJECT_MODE environment
+    # variable, then you should know that in OpenSSL case it's considered
+    # only in ./config. Once configured, build procedure remains "deaf" to
+    # current value of $OBJECT_MODE.
+    "aix-common" => {
+        inherit_from     => [ "BASE_unix" ],
+        template         => 1,
+        sys_id           => "AIX",
+        lib_cppflags     => "-DB_ENDIAN",
+        lflags           => "-Wl,-bsvr4",
+        thread_scheme    => "pthreads",
+        dso_scheme       => "dlfcn",
+        shared_target    => "self",
+        module_ldflags   => "-Wl,-G,-bsymbolic,-bexpall",
+        shared_ldflag    => "-Wl,-G,-bsymbolic,-bnoentry",
+        shared_defflag   => "-Wl,-bE:",
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+        dso_extension    => ".so",
+        lib_extension    => shared("_a.a"),
+        shared_extension_simple => shared(".a"),
+    },
+    "aix-gcc" => {
+        inherit_from     => [ "aix-common", asm("ppc32_asm") ],
+        CC               => "gcc",
+        CFLAGS           => picker(debug   => "-O0 -g",
+                                   release => "-O"),
+        cflags           => add(threads("-pthread")),
+        ex_libs          => threads("-pthread"),
+        bn_ops           => "BN_LLONG RC4_CHAR",
+        perlasm_scheme   => "aix32",
+        shared_ldflag    => add_before("-shared -static-libgcc"),
+        AR               => add("-X32"),
+        RANLIB           => add("-X32"),
+    },
+    "aix64-gcc" => {
+        inherit_from     => [ "aix-common", asm("ppc64_asm") ],
+        CC               => "gcc",
+        CFLAGS           => picker(debug   => "-O0 -g",
+                                   release => "-O"),
+        cflags           => combine("-maix64", threads("-pthread")),
+        ex_libs          => threads("-pthread"),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG RC4_CHAR",
+        perlasm_scheme   => "aix64",
+        shared_ldflag    => add_before("-shared -static-libgcc"),
+        shared_extension => "64.so.\$(SHLIB_VERSION_NUMBER)",
+        AR               => add("-X64"),
+        RANLIB           => add("-X64"),
+    },
+    "aix-cc" => {
+        inherit_from     => [ "aix-common", asm("ppc32_asm") ],
+        CC               => "cc",
+        CFLAGS           => picker(debug   => "-O0 -g",
+                                   release => "-O"),
+        cflags           => combine("-q32 -qmaxmem=16384 -qro -qroconst",
+                                    threads("-qthreaded")),
+        cppflags         => threads("-D_THREAD_SAFE"),
+        ex_libs          => threads("-lpthreads"),
+        bn_ops           => "BN_LLONG RC4_CHAR",
+        perlasm_scheme   => "aix32",
+        shared_cflag     => "-qpic",
+        AR               => add("-X32"),
+        RANLIB           => add("-X32"),
+    },
+    "aix64-cc" => {
+        inherit_from     => [ "aix-common", asm("ppc64_asm") ],
+        CC               => "cc",
+        CFLAGS           => picker(debug   => "-O0 -g",
+                                   release => "-O"),
+        cflags           => combine("-q64 -qmaxmem=16384 -qro -qroconst",
+                                    threads("-qthreaded")),
+        cppflags         => threads("-D_THREAD_SAFE"),
+        ex_libs          => threads("-lpthreads"),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG RC4_CHAR",
+        perlasm_scheme   => "aix64",
+        dso_scheme       => "dlfcn",
+        shared_cflag     => "-qpic",
+        shared_extension => "64.so.\$(SHLIB_VERSION_NUMBER)",
+        AR               => add("-X64"),
+        RANLIB           => add("-X64"),
+    },
+
+# SIEMENS BS2000/OSD: an EBCDIC-based mainframe
+    "BS2000-OSD" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "c89",
+        CFLAGS           => "-O",
+        cflags           => "-XLLML -XLLMK -XL",
+        cppflags         => "-DCHARSET_EBCDIC",
+        lib_cppflags     => "-DB_ENDIAN",
+        ex_libs          => add("-lsocket -lnsl"),
+        bn_ops           => "THIRTY_TWO_BIT RC4_CHAR",
+        thread_scheme    => "(unknown)",
+    },
+
+#### Visual C targets
+#
+# Win64 targets, WIN64I denotes IA-64/Itanium and WIN64A - AMD64
+#
+# Note about /wd4090, disable warning C4090. This warning returns false
+# positives in some situations. Disabling it altogether masks both
+# legitimate and false cases, but as we compile on multiple platforms,
+# we rely on other compilers to catch legitimate cases.
+#
+# Also note that we force threads no matter what.  Configuring "no-threads"
+# is ignored.
+#
+# UNICODE is defined in VC-common and applies to all targets. It used to
+# be an opt-in option for VC-WIN32, but not anymore. The original reason
+# was because ANSI API was *native* system interface for no longer
+# supported Windows 9x. Keep in mind that UNICODE only affects how
+# OpenSSL libraries interact with underlying OS, it doesn't affect API
+# that OpenSSL presents to application.
+
+    "VC-common" => {
+        inherit_from     => [ "BASE_Windows" ],
+        template         => 1,
+        CC               => "cl",
+        CPP              => '$(CC) /EP /C',
+        CFLAGS           => "/W3 /wd4090 /nologo",
+        LDFLAGS          => add("/debug"),
+        coutflag         => "/Fo",
+        defines          => add("OPENSSL_SYS_WIN32", "WIN32_LEAN_AND_MEAN",
+                                "UNICODE", "_UNICODE",
+                                "_CRT_SECURE_NO_DEPRECATE",
+                                "_WINSOCK_DEPRECATED_NO_WARNINGS"),
+        lib_cflags       => add("/Zi /Fdossl_static.pdb"),
+        lib_defines      => add("L_ENDIAN"),
+        dso_cflags       => "/Zi /Fddso.pdb",
+        bin_cflags       => "/Zi /Fdapp.pdb",
+        shared_ldflag    => "/dll",
+        shared_target    => "win-shared", # meaningless except it gives Configure a hint
+        thread_scheme    => "winthreads",
+        dso_scheme       => "win32",
+        apps_aux_src     => add("win32_init.c"),
+        bn_ops           => "EXPORT_VAR_AS_FN",
+        # additional parameter to build_scheme denotes install-path "flavour"
+        build_scheme     => add("VC-common", { separator => undef }),
+    },
+    "VC-noCE-common" => {
+        inherit_from     => [ "VC-common" ],
+        template         => 1,
+        CFLAGS           => add(picker(debug   => '/Od',
+                                       release => '/O2')),
+        cflags           => add(picker(default => '/Gs0 /GF /Gy',
+                                       debug   =>
+                                       sub {
+                                           ($disabled{shared} ? "" : "/MDd");
+                                       },
+                                       release =>
+                                       sub {
+                                           ($disabled{shared} ? "" : "/MD");
+                                       })),
+        defines          => add(picker(default => [], # works as type cast
+                                       debug   => [ "DEBUG", "_DEBUG" ])),
+        lib_cflags       => add(sub { $disabled{shared} ? "/MT /Zl" : () }),
+        # Following might/should appears controversial, i.e. defining
+        # /MDd without evaluating $disabled{shared}. It works in
+        # non-shared build because static library is compiled with /Zl
+        # and bares no reference to specific RTL. And it works in
+        # shared build because multiple /MDd options are not prohibited.
+        # But why /MDd in static build? Well, basically this is just a
+        # reference point, which allows to catch eventual errors that
+        # would prevent those who want to wrap OpenSSL into own .DLL.
+        # Why not /MD in release build then? Well, some are likely to
+        # prefer [non-debug] openssl.exe to be free from Micorosoft RTL
+        # redistributable.
+        bin_cflags       => add(picker(debug   => "/MDd",
+                                       release => sub { $disabled{shared} ? "/MT" : () },
+                                      )),
+        bin_lflags       => add("/subsystem:console /opt:ref"),
+        ex_libs          => add(sub {
+            my @ex_libs = ();
+            push @ex_libs, 'ws2_32.lib' unless $disabled{sock};
+            push @ex_libs, 'gdi32.lib advapi32.lib crypt32.lib user32.lib';
+            return join(" ", @ex_libs);
+        }),
+    },
+    "VC-WIN64-common" => {
+        inherit_from     => [ "VC-noCE-common" ],
+        template         => 1,
+        ex_libs          => add(sub {
+            my @ex_libs = ();
+            push @ex_libs, 'bufferoverflowu.lib' if (`cl 2>&1` =~ /14\.00\.4[0-9]{4}\./);
+            return join(" ", @_, @ex_libs);
+        }),
+        bn_ops           => add("SIXTY_FOUR_BIT"),
+    },
+    "VC-WIN64I" => {
+        inherit_from     => [ "VC-WIN64-common", asm("ia64_asm"),
+                              sub { $disabled{shared} ? () : "ia64_uplink" } ],
+        AS               => "ias",
+        ASFLAGS          => "-d debug",
+        asoutflag        => "-o ",
+        sys_id           => "WIN64I",
+        bn_asm_src       => sub { return undef unless @_;
+                                  my $r=join(" ",@_); $r=~s|bn-ia64.s|bn_asm.c|; $r; },
+        perlasm_scheme   => "ias",
+        multilib         => "-ia64",
+    },
+    "VC-WIN64A" => {
+        inherit_from     => [ "VC-WIN64-common", asm("x86_64_asm"),
+                              sub { $disabled{shared} ? () : "x86_64_uplink" } ],
+        AS               => sub { vc_win64a_info()->{AS} },
+        ASFLAGS          => sub { vc_win64a_info()->{ASFLAGS} },
+        asoutflag        => sub { vc_win64a_info()->{asoutflag} },
+        asflags          => sub { vc_win64a_info()->{asflags} },
+        sys_id           => "WIN64A",
+        bn_asm_src       => sub { return undef unless @_;
+                                  my $r=join(" ",@_); $r=~s|asm/x86_64-gcc|bn_asm|; $r; },
+        perlasm_scheme   => "auto",
+        multilib         => "-x64",
+    },
+    "VC-WIN32" => {
+        inherit_from     => [ "VC-noCE-common", asm("x86_asm"),
+                              sub { $disabled{shared} ? () : "uplink_common" } ],
+        CFLAGS           => add("/WX"),
+        AS               => sub { vc_win32_info()->{AS} },
+        ASFLAGS          => sub { vc_win32_info()->{ASFLAGS} },
+        asoutflag        => sub { vc_win32_info()->{asoutflag} },
+        asflags          => sub { vc_win32_info()->{asflags} },
+        sys_id           => "WIN32",
+        bn_ops           => add("BN_LLONG"),
+        perlasm_scheme   => sub { vc_win32_info()->{perlasm_scheme} },
+        # "WOW" stands for "Windows on Windows", and "VC-WOW" engages
+        # some installation path heuristics in windows-makefile.tmpl...
+        build_scheme     => add("VC-WOW", { separator => undef }),
+    },
+    "VC-CE" => {
+        inherit_from     => [ "VC-common" ],
+        CFLAGS           => add(picker(debug   => "/Od",
+                                       release => "/O1i")),
+        CPPDEFINES       => picker(debug   => [ "DEBUG", "_DEBUG" ]),
+        LDFLAGS          => add("/nologo /opt:ref"),
+        cflags           =>
+            combine('/GF /Gy',
+                    sub { vc_wince_info()->{cflags}; },
+                    sub { `cl 2>&1` =~ /Version ([0-9]+)\./ && $1>=14
+                              ? ($disabled{shared} ? " /MT" : " /MD")
+                              : " /MC"; }),
+        cppflags         => sub { vc_wince_info()->{cppflags}; },
+        lib_defines      => add("NO_CHMOD", "OPENSSL_SMALL_FOOTPRINT"),
+        lib_cppflags     => sub { vc_wince_info()->{cppflags}; },
+        includes         =>
+            add(combine(sub { defined(env('WCECOMPAT'))
+                              ? '$(WCECOMPAT)/include' : (); },
+                        sub { defined(env('PORTSDK_LIBPATH'))
+                                  ? '$(PORTSDK_LIBPATH)/../../include'
+                                  : (); })),
+        lflags           => add(combine(sub { vc_wince_info()->{lflags}; },
+                                        sub { defined(env('PORTSDK_LIBPATH'))
+                                                  ? "/entry:mainCRTstartup" : (); })),
+        sys_id           => "WINCE",
+        bn_ops           => add("BN_LLONG"),
+        ex_libs          => add(sub {
+            my @ex_libs = ();
+            push @ex_libs, 'ws2.lib' unless $disabled{sock};
+            push @ex_libs, 'crypt32.lib';
+            if (defined(env('WCECOMPAT'))) {
+                my $x = '$(WCECOMPAT)/lib';
+                if (-f "$x/env('TARGETCPU')/wcecompatex.lib") {
+                    $x .= '/$(TARGETCPU)/wcecompatex.lib';
+                } else {
+                    $x .= '/wcecompatex.lib';
+                }
+                push @ex_libs, $x;
+            }
+            push @ex_libs, '$(PORTSDK_LIBPATH)/portlib.lib'
+                if (defined(env('PORTSDK_LIBPATH')));
+            push @ex_libs, ' /nodefaultlib coredll.lib corelibc.lib'
+                if (env('TARGETCPU') eq "X86");
+            return @ex_libs;
+        }),
+    },
+
+#### MinGW
+    "mingw" => {
+        inherit_from     => [ "BASE_unix", asm("x86_asm"),
+                              sub { $disabled{shared} ? () : "x86_uplink" } ],
+        CC               => "gcc",
+        CFLAGS           => picker(default => "-Wall",
+                                   debug   => "-g -O0",
+                                   release => "-O3 -fomit-frame-pointer"),
+        cflags           => "-m32",
+        cppflags         => combine("-DUNICODE -D_UNICODE -DWIN32_LEAN_AND_MEAN",
+                                    threads("-D_MT")),
+        lib_cppflags     => "-DL_ENDIAN",
+        sys_id           => "MINGW32",
+        ex_libs          => add("-lws2_32 -lgdi32 -lcrypt32"),
+        bn_ops           => "BN_LLONG EXPORT_VAR_AS_FN",
+        thread_scheme    => "winthreads",
+        perlasm_scheme   => "coff",
+        dso_scheme       => "win32",
+        shared_target    => "mingw-shared",
+        shared_cppflags  => add("_WINDLL"),
+        shared_ldflag    => "-static-libgcc",
+        shared_rcflag    => "--target=pe-i386",
+        shared_extension => ".dll",
+        multilib         => "",
+        apps_aux_src     => add("win32_init.c"),
+    },
+    "mingw64" => {
+        # As for OPENSSL_USE_APPLINK. Applink makes it possible to use
+        # .dll compiled with one compiler with application compiled with
+        # another compiler. It's possible to engage Applink support in
+        # mingw64 build, but it's not done, because till mingw64
+        # supports structured exception handling, one can't seriously
+        # consider its binaries for using with non-mingw64 run-time
+        # environment. And as mingw64 is always consistent with itself,
+        # Applink is never engaged and can as well be omitted.
+        inherit_from     => [ "BASE_unix", asm("x86_64_asm") ],
+        CC               => "gcc",
+        CFLAGS           => picker(default => "-Wall",
+                                   debug   => "-g -O0",
+                                   release => "-O3"),
+        cflags           => "-m64",
+        cppflags         => combine("-DUNICODE -D_UNICODE -DWIN32_LEAN_AND_MEAN",
+                                    threads("-D_MT")),
+        lib_cppflags     => "-DL_ENDIAN",
+        sys_id           => "MINGW64",
+        ex_libs          => add("-lws2_32 -lgdi32 -lcrypt32"),
+        bn_ops           => "SIXTY_FOUR_BIT EXPORT_VAR_AS_FN",
+        thread_scheme    => "winthreads",
+        perlasm_scheme   => "mingw64",
+        dso_scheme       => "win32",
+        shared_target    => "mingw-shared",
+        shared_cppflags  => add("_WINDLL"),
+        shared_ldflag    => "-static-libgcc",
+        shared_rcflag    => "--target=pe-x86-64",
+        shared_extension => ".dll",
+        multilib         => "64",
+        apps_aux_src     => add("win32_init.c"),
+    },
+
+#### UEFI
+    "UEFI" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "cc",
+        CFLAGS           => "-O",
+        lib_cppflags     => "-DL_ENDIAN",
+        sys_id           => "UEFI",
+    },
+
+#### UWIN
+    "UWIN" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "cc",
+        CFLAGS           => "-O -Wall",
+        lib_cppflags     => "-DTERMIOS -DL_ENDIAN",
+        sys_id           => "UWIN",
+        bn_ops           => "BN_LLONG",
+        dso_scheme       => "win32",
+    },
+
+#### Cygwin
+    "Cygwin-x86" => {
+        inherit_from     => [ "BASE_unix", asm("x86_asm") ],
+        CC               => "gcc",
+        CFLAGS           => picker(default => "-Wall",
+                                   debug   => "-g -O0",
+                                   release => "-O3 -fomit-frame-pointer"),
+        lib_cppflags     => "-DTERMIOS -DL_ENDIAN",
+        sys_id           => "CYGWIN",
+        bn_ops           => "BN_LLONG",
+        thread_scheme    => "pthread",
+        perlasm_scheme   => "coff",
+        dso_scheme       => "dlfcn",
+        shared_target    => "cygwin-shared",
+        shared_cppflags  => "-D_WINDLL",
+        shared_extension => ".dll",
+    },
+    "Cygwin-x86_64" => {
+        inherit_from     => [ "BASE_unix", asm("x86_64_asm") ],
+        CC               => "gcc",
+        CFLAGS           => picker(default => "-Wall",
+                                   debug   => "-g -O0",
+                                   release => "-O3"),
+        lib_cppflags     => "-DTERMIOS -DL_ENDIAN",
+        sys_id           => "CYGWIN",
+        bn_ops           => "SIXTY_FOUR_BIT_LONG",
+        thread_scheme    => "pthread",
+        perlasm_scheme   => "mingw64",
+        dso_scheme       => "dlfcn",
+        shared_target    => "cygwin-shared",
+        shared_cppflags  => "-D_WINDLL",
+        shared_extension => ".dll",
+    },
+    # Backward compatibility for those using this target
+    "Cygwin" => {
+	inherit_from     => [ "Cygwin-x86" ]
+    },
+    # In case someone constructs the Cygwin target name themself
+    "Cygwin-i386" => {
+	inherit_from     => [ "Cygwin-x86" ]
+    },
+    "Cygwin-i486" => {
+	inherit_from     => [ "Cygwin-x86" ]
+    },
+    "Cygwin-i586" => {
+	inherit_from     => [ "Cygwin-x86" ]
+    },
+    "Cygwin-i686" => {
+	inherit_from     => [ "Cygwin-x86" ]
+    },
+
+##### MacOS X (a.k.a. Darwin) setup
+    "darwin-common" => {
+        inherit_from     => [ "BASE_unix" ],
+        template         => 1,
+        CC               => "cc",
+        CFLAGS           => picker(debug   => "-g -O0",
+                                   release => "-O3"),
+        cppflags         => threads("-D_REENTRANT"),
+        lflags           => "-Wl,-search_paths_first",
+        sys_id           => "MACOSX",
+        bn_ops           => "BN_LLONG RC4_CHAR",
+        thread_scheme    => "pthreads",
+        perlasm_scheme   => "osx32",
+        dso_scheme       => "dlfcn",
+        ranlib           => "ranlib -c",
+        shared_target    => "darwin-shared",
+        shared_cflag     => "-fPIC",
+        shared_extension => ".\$(SHLIB_VERSION_NUMBER).dylib",
+    },
+    # Option "freeze" such as -std=gnu9x can't negatively interfere
+    # with future defaults for below two targets, because MacOS X
+    # for PPC has no future, it was discontinued by vendor in 2009.
+    "darwin-ppc-cc" => {
+        inherit_from     => [ "darwin-common", asm("ppc32_asm") ],
+        cflags           => add("-arch ppc -std=gnu9x -Wa,-force_cpusubtype_ALL"),
+        lib_cppflags     => add("-DB_ENDIAN"),
+        shared_cflag     => add("-fno-common"),
+        perlasm_scheme   => "osx32",
+    },
+    "darwin64-ppc-cc" => {
+        inherit_from     => [ "darwin-common", asm("ppc64_asm") ],
+        cflags           => add("-arch ppc64 -std=gnu9x"),
+        lib_cppflags     => add("-DB_ENDIAN"),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG RC4_CHAR",
+        perlasm_scheme   => "osx64",
+    },
+    "darwin-i386-cc" => {
+        inherit_from     => [ "darwin-common", asm("x86_asm") ],
+        CFLAGS           => add(picker(release => "-fomit-frame-pointer")),
+        cflags           => add("-arch i386"),
+        lib_cppflags     => add("-DL_ENDIAN"),
+        bn_ops           => "BN_LLONG RC4_INT",
+        perlasm_scheme   => "macosx",
+    },
+    "darwin64-x86_64-cc" => {
+        inherit_from     => [ "darwin-common", asm("x86_64_asm") ],
+        CFLAGS           => add("-Wall"),
+        cflags           => add("-arch x86_64"),
+        lib_cppflags     => add("-DL_ENDIAN"),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG",
+        perlasm_scheme   => "macosx",
+    },
+
+##### GNU Hurd
+    "hurd-x86" => {
+        inherit_from     => [ "BASE_unix" ],
+        inherit_from     => [ asm("x86_elf_asm") ],
+        CC               => "gcc",
+        CFLAGS           => "-O3 -fomit-frame-pointer -Wall",
+        cflags           => threads("-pthread"),
+        lib_cppflags     => "-DL_ENDIAN",
+        ex_libs          => add("-ldl", threads("-pthread")),
+        bn_ops           => "BN_LLONG",
+        thread_scheme    => "pthreads",
+        dso_scheme       => "dlfcn",
+        shared_target    => "linux-shared",
+        shared_cflag     => "-fPIC",
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+    },
+
+##### VxWorks for various targets
+    "vxworks-ppc60x" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "ccppc",
+        CFLAGS           => "-O2 -Wall -fstrength-reduce",
+        cflags           => "-mrtp -mhard-float -mstrict-align -fno-implicit-fp -fno-builtin -fno-strict-aliasing",
+        cppflags         => combine("-D_REENTRANT -DPPC32_fp60x -DCPU=PPC32",
+                                    "_DTOOL_FAMILY=gnu -DTOOL=gnu",
+                                    "-I\$(WIND_BASE)/target/usr/h",
+                                    "-I\$(WIND_BASE)/target/usr/h/wrn/coreip"),
+        sys_id           => "VXWORKS",
+        lflags           => add("-L \$(WIND_BASE)/target/usr/lib/ppc/PPC32/common"),
+        ex_libs          => add("-Wl,--defsym,__wrs_rtp_base=0xe0000000"),
+    },
+    "vxworks-ppcgen" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "ccppc",
+        CFLAGS           => "-O1 -Wall",
+        cflags           => "-mrtp -msoft-float -mstrict-align -fno-builtin -fno-strict-aliasing",
+        cppflags         => combine("-D_REENTRANT -DPPC32 -DCPU=PPC32",
+                                    "-DTOOL_FAMILY=gnu -DTOOL=gnu",
+                                    "-I\$(WIND_BASE)/target/usr/h",
+                                    "-I\$(WIND_BASE)/target/usr/h/wrn/coreip"),
+        sys_id           => "VXWORKS",
+        lflags           => add("-L \$(WIND_BASE)/target/usr/lib/ppc/PPC32/sfcommon"),
+        ex_libs          => add("-Wl,--defsym,__wrs_rtp_base=0xe0000000"),
+    },
+    "vxworks-ppc405" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "ccppc",
+        CFLAGS           => "-g",
+        cflags           => "-msoft-float -mlongcall",
+        cppflags         => combine("-D_REENTRANT -DPPC32 -DCPU=PPC405",
+                                    "-DTOOL_FAMILY=gnu -DTOOL=gnu",
+                                    "-I\$(WIND_BASE)/target/h"),
+        sys_id           => "VXWORKS",
+        lflags           => add("-r"),
+    },
+    "vxworks-ppc750" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "ccppc",
+        CFLAGS           => "-ansi -fvolatile -Wall \$(DEBUG_FLAG)",
+        cflags           => "-nostdinc -fno-builtin -fno-for-scope -fsigned-char -msoft-float -mlongcall",
+        cppflags         => combine("-DPPC750 -D_REENTRANT -DCPU=PPC604",
+                                    "-I\$(WIND_BASE)/target/h"),
+        sys_id           => "VXWORKS",
+        lflags           => add("-r"),
+    },
+    "vxworks-ppc750-debug" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "ccppc",
+        CFLAGS           => "-ansi -fvolatile -Wall -g",
+        cflags           => "-nostdinc -fno-builtin -fno-for-scope -fsigned-char -msoft-float -mlongcall",
+        cppflags         => combine("-DPPC750 -D_REENTRANT -DCPU=PPC604",
+                                    "-DPEDANTIC -DDEBUG",
+                                    "-I\$(WIND_BASE)/target/h"),
+        sys_id           => "VXWORKS",
+        lflags           => add("-r"),
+    },
+    "vxworks-ppc860" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "ccppc",
+        cflags           => "-nostdinc -msoft-float",
+        cppflags         => combine("-DCPU=PPC860 -DNO_STRINGS_H",
+                                    "-I\$(WIND_BASE)/target/h"),
+        sys_id           => "VXWORKS",
+        lflags           => add("-r"),
+    },
+    "vxworks-simlinux" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => "ccpentium",
+        cflags           => "-B\$(WIND_BASE)/host/\$(WIND_HOST_TYPE)/lib/gcc-lib/ -fno-builtin -fno-defer-pop",
+        cppflags         => combine("-D_VSB_CONFIG_FILE=\"\$(WIND_BASE)/target/lib/h/config/vsbConfig.h\"",
+                                    "-DL_ENDIAN -DCPU=SIMLINUX -DNO_STRINGS_H",
+                                    "-DTOOL_FAMILY=gnu -DTOOL=gnu",
+                                    "-DOPENSSL_NO_HW_PADLOCK",
+                                    "-I\$(WIND_BASE)/target/h",
+                                    "-I\$(WIND_BASE)/target/h/wrn/coreip"),
+        sys_id           => "VXWORKS",
+        lflags           => add("-r"),
+        ranlib           => "ranlibpentium",
+    },
+    "vxworks-mips" => {
+        inherit_from     => [ "BASE_unix", asm("mips32_asm") ],
+        CC               => "ccmips",
+        CFLAGS           => "-O -G 0",
+        cflags           => "-mrtp -mips2 -B\$(WIND_BASE)/host/\$(WIND_HOST_TYPE)/lib/gcc-lib/ -msoft-float -mno-branch-likely -fno-builtin -fno-defer-pop",
+        cppflags         => combine("-D_VSB_CONFIG_FILE=\"\$(WIND_BASE)/target/lib/h/config/vsbConfig.h\"",
+                                    "-DCPU=MIPS32 -DNO_STRINGS_H",
+                                    "-DTOOL_FAMILY=gnu -DTOOL=gnu",
+                                    "-DOPENSSL_NO_HW_PADLOCK",
+                                    threads("-D_REENTRANT"),
+                                    "-I\$(WIND_BASE)/target/h",
+                                    "-I\$(WIND_BASE)/target/h/wrn/coreip"),
+        sys_id           => "VXWORKS",
+        lflags           => add("-L \$(WIND_BASE)/target/usr/lib/mips/MIPSI32/sfcommon"),
+        ex_libs          => add("-Wl,--defsym,__wrs_rtp_base=0xe0000000"),
+        thread_scheme    => "pthreads",
+        perlasm_scheme   => "o32",
+        ranlib           => "ranlibmips",
+    },
+
+#### uClinux
+    "uClinux-dist" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => sub { env('CC') },
+        cppflags         => threads("-D_REENTRANT"),
+        ex_libs          => add("\$(LDLIBS)"),
+        bn_ops           => "BN_LLONG",
+        thread_scheme    => "pthreads",
+        dso_scheme       => sub { env('LIBSSL_dlfcn') },
+        shared_target    => "linux-shared",
+        shared_cflag     => "-fPIC",
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+        ranlib           => sub { env('RANLIB') },
+    },
+    "uClinux-dist64" => {
+        inherit_from     => [ "BASE_unix" ],
+        CC               => sub { env('CC') },
+        cppflags         => threads("-D_REENTRANT"),
+        ex_libs          => add("\$(LDLIBS)"),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG",
+        thread_scheme    => "pthreads",
+        dso_scheme       => sub { env('LIBSSL_dlfcn') },
+        shared_target    => "linux-shared",
+        shared_cflag     => "-fPIC",
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+        ranlib           => sub { env('RANLIB') },
+    },
+
+    ##### VMS
+    # Most things happen in vms-generic.
+    # Note that vms_info extracts the pointer size from the end of
+    # the target name, and will assume that anything matching /-p\d+$/
+    # indicates the pointer size setting for the desired target.
+    "vms-generic" => {
+        inherit_from     => [ "BASE_VMS" ],
+        template         => 1,
+        CC               => "CC/DECC",
+        CPP              => '$(CC)/PREPROCESS_ONLY=SYS$OUTPUT:',
+        CFLAGS           =>
+            combine(picker(default => "/STANDARD=(ISOC94,RELAXED)/NOLIST/PREFIX=ALL",
+                           debug   => "/NOOPTIMIZE/DEBUG",
+                           release => "/OPTIMIZE/NODEBUG"),
+                    sub { my @warnings =
+                              @{vms_info()->{disable_warns}};
+                          @warnings
+                              ? "/WARNINGS=DISABLE=(".join(",",@warnings).")" : (); }),
+        lib_defines      =>
+            add("OPENSSL_USE_NODELETE",
+                sub {
+                    return vms_info()->{def_zlib}
+                        ? "LIBZ=\"\"\"".vms_info()->{def_zlib}."\"\"\"" : ();
+                }),
+        lflags           => picker(default => "/MAP='F\$PARSE(\".MAP\",\"\$\@\")'",
+                                   debug   => "/DEBUG/TRACEBACK",
+                                   release => "/NODEBUG/NOTRACEBACK"),
+        lib_cflags       => add("/NAMES=(AS_IS,SHORTENED)/EXTERN_MODEL=STRICT_REFDEF"),
+        # no_inst_lib_cflags is used instead of lib_cflags by descrip.mms.tmpl
+        # for object files belonging to selected internal libraries
+        no_inst_lib_cflags => "",
+        ex_libs          => add(sub { return vms_info()->{zlib} || (); }),
+        shared_target    => "vms-shared",
+        dso_scheme       => "vms",
+        thread_scheme    => "pthreads",
+
+        AS               => sub { vms_info()->{AS} },
+        ASFLAGS          => sub { vms_info()->{ASFLAGS} },
+        asoutflag        => sub { vms_info()->{asoutflag} },
+        asflags          => sub { vms_info()->{asflags} },
+        perlasm_scheme   => sub { vms_info()->{perlasm_scheme} },
+
+        disable          => add('pinshared'),
+
+        apps_aux_src     => "vms_term_sock.c",
+        apps_init_src    => "vms_decc_init.c",
+    },
+
+    # From HELP CC/POINTER_SIZE:
+    #
+    # ----------
+    # LONG[=ARGV] The compiler assumes 64-bit pointers. If the ARGV option to
+    #             LONG or 64 is present, the main argument argv will be an
+    #             array of long pointers instead of an array of short pointers.
+    #
+    # 64[=ARGV]   Same as LONG.
+    # ----------
+    #
+    # We don't want the hassle of dealing with 32-bit pointers with argv, so
+    # we force it to have 64-bit pointers, see the added cflags in the -p64
+    # config targets below.
+
+    "vms-alpha" => {
+        inherit_from     => [ "vms-generic" ],
+        bn_ops           => "SIXTY_FOUR_BIT RC4_INT",
+        pointer_size     => "",
+    },
+    "vms-alpha-p32" => {
+        inherit_from     => [ "vms-alpha" ],
+        cflags           => add("/POINTER_SIZE=32"),
+        pointer_size     => "32",
+    },
+    "vms-alpha-p64" => {
+        inherit_from     => [ "vms-alpha" ],
+        cflags           => add("/POINTER_SIZE=64=ARGV"),
+        pointer_size     => "64",
+    },
+    "vms-ia64" => {
+        inherit_from     => [ "vms-generic",
+                              sub { vms_info()->{AS}
+                                        ? asm("ia64_asm")->() : () } ],
+        bn_ops           => "SIXTY_FOUR_BIT RC4_INT",
+        pointer_size     => "",
+
+        modes_asm_src    => "", # Because ghash-ia64.s doesn't work on VMS
+    },
+    "vms-ia64-p32" => {
+        inherit_from     => [ "vms-ia64" ],
+        cflags           => add("/POINTER_SIZE=32"),
+        pointer_size     => "32",
+    },
+    "vms-ia64-p64" => {
+        inherit_from     => [ "vms-ia64" ],
+        cflags           => add("/POINTER_SIZE=64=ARGV"),
+        pointer_size     => "64",
+    },
+
+);
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/15-android.conf b/trunk/3rdparty/openssl-1.1-fit/Configurations/15-android.conf
new file mode 100644
index 000000000..7b496a452
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/15-android.conf
@@ -0,0 +1,261 @@
+#### Android...
+#
+# See NOTES.ANDROID for details, and don't miss platform-specific
+# comments below...
+
+{
+    use File::Spec::Functions;
+
+    my $android_ndk = {};
+    my %triplet = (
+        arm    => "arm-linux-androideabi",
+        arm64  => "aarch64-linux-android",
+        mips   => "mipsel-linux-android",
+        mips64 => "mips64el-linux-android",
+        x86    => "i686-linux-android",
+        x86_64 => "x86_64-linux-android",
+    );
+
+    sub android_ndk {
+        unless (%$android_ndk) {
+            if ($now_printing =~ m|^android|) {
+                return $android_ndk = { bn_ops => "BN_AUTO" };
+            }
+
+            my $ndk_var;
+            my $ndk;
+            foreach (qw(ANDROID_NDK_HOME ANDROID_NDK)) {
+                $ndk_var = $_;
+                $ndk = $ENV{$ndk_var};
+                last if defined $ndk;
+            }
+            die "\$ANDROID_NDK_HOME is not defined"  if (!$ndk);
+            if (!-d "$ndk/platforms" && !-f "$ndk/AndroidVersion.txt") {
+                # $ndk/platforms is traditional "all-inclusive" NDK, while
+                # $ndk/AndroidVersion.txt is so-called standalone toolchain
+                # tailored for specific target down to API level.
+                die "\$ANDROID_NDK_HOME=$ndk is invalid";
+            }
+            $ndk = canonpath($ndk);
+
+            my $ndkver = undef;
+
+            if (open my $fh, "<$ndk/source.properties") {
+                local $_;
+                while(<$fh>) {
+                    if (m|Pkg\.Revision\s*=\s*([0-9]+)|) {
+                        $ndkver = $1;
+                        last;
+                    }
+                }
+                close $fh;
+            }
+
+            my ($sysroot, $api, $arch);
+
+            $config{target} =~ m|[^-]+-([^-]+)$|;	# split on dash
+            $arch = $1;
+
+            if ($sysroot = $ENV{CROSS_SYSROOT}) {
+                $sysroot =~ m|/android-([0-9]+)/arch-(\w+)/?$|;
+                ($api, $arch) = ($1, $2);
+            } elsif (-f "$ndk/AndroidVersion.txt") {
+                $sysroot = "$ndk/sysroot";
+            } else {
+                $api = "*";
+
+                # see if user passed -D__ANDROID_API__=N
+                foreach (@{$useradd{CPPDEFINES}}, @{$user{CPPFLAGS}}) {
+                    if (m|__ANDROID_API__=([0-9]+)|) {
+                        $api = $1;
+                        last;
+                    }
+                }
+
+                # list available platforms (numerically)
+                my @platforms = sort { $a =~ m/-([0-9]+)$/; my $aa = $1;
+                                       $b =~ m/-([0-9]+)$/; $aa <=> $1;
+                                     } glob("$ndk/platforms/android-$api");
+                die "no $ndk/platforms/android-$api" if ($#platforms < 0);
+
+                $sysroot = "@platforms[$#platforms]/arch-$arch";
+                $sysroot =~ m|/android-([0-9]+)/arch-$arch|;
+                $api = $1;
+            }
+            die "no sysroot=$sysroot"   if (!-d $sysroot);
+
+            my $triarch = $triplet{$arch};
+            my $cflags;
+            my $cppflags;
+
+            # see if there is NDK clang on $PATH, "universal" or "standalone"
+            if (which("clang") =~ m|^$ndk/.*/prebuilt/([^/]+)/|) {
+                my $host=$1;
+                # harmonize with gcc default
+                my $arm = $ndkver > 16 ? "armv7a" : "armv5te";
+                (my $tridefault = $triarch) =~ s/^arm-/$arm-/;
+                (my $tritools   = $triarch) =~ s/(?:x|i6)86(_64)?-.*/x86$1/;
+                $cflags .= " -target $tridefault "
+                        .  "-gcc-toolchain \$($ndk_var)/toolchains"
+                        .  "/$tritools-4.9/prebuilt/$host";
+                $user{CC} = "clang" if ($user{CC} !~ m|clang|);
+                $user{CROSS_COMPILE} = undef;
+                if (which("llvm-ar") =~ m|^$ndk/.*/prebuilt/([^/]+)/|) {
+                    $user{AR} = "llvm-ar";
+                    $user{ARFLAGS} = [ "rs" ];
+                    $user{RANLIB} = ":";
+                }
+            } elsif (-f "$ndk/AndroidVersion.txt") {    #"standalone toolchain"
+                my $cc = $user{CC} // "clang";
+                # One can probably argue that both clang and gcc should be
+                # probed, but support for "standalone toolchain" was added
+                # *after* announcement that gcc is being phased out, so
+                # favouring clang is considered adequate. Those who insist
+                # have option to enforce test for gcc with CC=gcc.
+                if (which("$triarch-$cc") !~ m|^$ndk|) {
+                    die "no NDK $triarch-$cc on \$PATH";
+                }
+                $user{CC} = $cc;
+                $user{CROSS_COMPILE} = "$triarch-";
+            } elsif ($user{CC} eq "clang") {
+                die "no NDK clang on \$PATH";
+            } else {
+                if (which("$triarch-gcc") !~ m|^$ndk/.*/prebuilt/([^/]+)/|) {
+                    die "no NDK $triarch-gcc on \$PATH";
+                }
+                $cflags .= " -mandroid";
+                $user{CROSS_COMPILE} = "$triarch-";
+            }
+
+            if (!-d "$sysroot/usr/include") {
+                my $incroot = "$ndk/sysroot/usr/include";
+                die "no $incroot"          if (!-d $incroot);
+                die "no $incroot/$triarch" if (!-d "$incroot/$triarch");
+                $incroot =~ s|^$ndk/||;
+                $cppflags  = "-D__ANDROID_API__=$api";
+                $cppflags .= " -isystem \$($ndk_var)/$incroot/$triarch";
+                $cppflags .= " -isystem \$($ndk_var)/$incroot";
+            }
+
+            $sysroot =~ s|^$ndk/||;
+            $android_ndk = {
+                cflags   => "$cflags --sysroot=\$($ndk_var)/$sysroot",
+                cppflags => $cppflags,
+                bn_ops   => $arch =~ m/64$/ ? "SIXTY_FOUR_BIT_LONG"
+                                            : "BN_LLONG",
+            };
+        }
+
+        return $android_ndk;
+    }
+}
+
+my %targets = (
+    "android" => {
+        inherit_from     => [ "linux-generic32" ],
+        template         => 1,
+        ################################################################
+        # Special note about -pie. The underlying reason is that
+        # Lollipop refuses to run non-PIE. But what about older systems
+        # and NDKs? -fPIC was never problem, so the only concern is -pie.
+        # Older toolchains, e.g. r4, appear to handle it and binaries
+        # turn out mostly functional. "Mostly" means that oldest
+        # Androids, such as Froyo, fail to handle executable, but newer
+        # systems are perfectly capable of executing binaries targeting
+        # Froyo. Keep in mind that in the nutshell Android builds are
+        # about JNI, i.e. shared libraries, not applications.
+        cflags           => add(sub { android_ndk()->{cflags} }),
+        cppflags         => add(sub { android_ndk()->{cppflags} }),
+        cxxflags         => add(sub { android_ndk()->{cflags} }),
+        bn_ops           => sub { android_ndk()->{bn_ops} },
+        bin_cflags       => "-pie",
+        enable           => [ ],
+    },
+    "android-arm" => {
+        ################################################################
+        # Contemporary Android applications can provide multiple JNI
+        # providers in .apk, targeting multiple architectures. Among
+        # them there is "place" for two ARM flavours: generic eabi and
+        # armv7-a/hard-float. However, it should be noted that OpenSSL's
+        # ability to engage NEON is not constrained by ABI choice, nor
+        # is your ability to call OpenSSL from your application code
+        # compiled with floating-point ABI other than default 'soft'.
+        # (Latter thanks to __attribute__((pcs("aapcs"))) declaration.)
+        # This means that choice of ARM libraries you provide in .apk
+        # is driven by application needs. For example if application
+        # itself benefits from NEON or is floating-point intensive, then
+        # it might be appropriate to provide both libraries. Otherwise
+        # just generic eabi would do. But in latter case it would be
+        # appropriate to
+        #
+        #   ./Configure android-arm -D__ARM_MAX_ARCH__=8
+        #
+        # in order to build "universal" binary and allow OpenSSL take
+        # advantage of NEON when it's available.
+        #
+        # Keep in mind that (just like with linux-armv4) we rely on
+        # compiler defaults, which is not necessarily what you had
+        # in mind, in which case you would have to pass additional
+        # -march and/or -mfloat-abi flags. NDK defaults to armv5te.
+        # Newer NDK versions reportedly require additional -latomic.
+        #
+        inherit_from     => [ "android", asm("armv4_asm") ],
+        bn_ops           => add("RC4_CHAR"),
+    },
+    "android-arm64" => {
+        inherit_from     => [ "android", asm("aarch64_asm") ],
+        bn_ops           => add("RC4_CHAR"),
+        perlasm_scheme   => "linux64",
+    },
+
+    "android-mips" => {
+        inherit_from     => [ "android", asm("mips32_asm") ],
+        bn_ops           => add("RC4_CHAR"),
+        perlasm_scheme   => "o32",
+    },
+    "android-mips64" => {
+        ################################################################
+        # You are more than likely have to specify target processor
+        # on ./Configure command line. Trouble is that toolchain's
+        # default is MIPS64r6 (at least in r10d), but there are no
+        # such processors around (or they are too rare to spot one).
+        # Actual problem is that MIPS64r6 is binary incompatible
+        # with previous MIPS ISA versions, in sense that unlike
+        # prior versions original MIPS binary code will fail.
+        #
+        inherit_from     => [ "android", asm("mips64_asm") ],
+        bn_ops           => add("RC4_CHAR"),
+        perlasm_scheme   => "64",
+    },
+
+    "android-x86" => {
+        inherit_from     => [ "android", asm("x86_asm") ],
+        CFLAGS           => add(picker(release => "-fomit-frame-pointer")),
+        bn_ops           => add("RC4_INT"),
+        perlasm_scheme   => "android",
+    },
+    "android-x86_64" => {
+        inherit_from     => [ "android", asm("x86_64_asm") ],
+        bn_ops           => add("RC4_INT"),
+        perlasm_scheme   => "elf",
+    },
+
+    ####################################################################
+    # Backward compatible targets, (might) requre $CROSS_SYSROOT
+    #
+    "android-armeabi" => {
+        inherit_from     => [ "android-arm" ],
+    },
+    "android64" => {
+        inherit_from     => [ "android" ],
+    },
+    "android64-aarch64" => {
+        inherit_from     => [ "android-arm64" ],
+    },
+    "android64-x86_64" => {
+        inherit_from     => [ "android-x86_64" ],
+    },
+    "android64-mips64" => {
+        inherit_from     => [ "android-mips64" ],
+    },
+);
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/15-ios.conf b/trunk/3rdparty/openssl-1.1-fit/Configurations/15-ios.conf
new file mode 100644
index 000000000..1bb9f48d0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/15-ios.conf
@@ -0,0 +1,62 @@
+#### iPhoneOS/iOS
+#
+# It takes recent enough XCode to use following two targets. It shouldn't
+# be a problem by now, but if they don't work, original targets below
+# that depend on manual definition of environment variables should still
+# work...
+#
+my %targets = (
+    "ios-common" => {
+        template         => 1,
+        inherit_from     => [ "darwin-common" ],
+        sys_id           => "iOS",
+        disable          => [ "engine", "async" ],
+    },
+    "ios-xcrun" => {
+        inherit_from     => [ "ios-common", asm("armv4_asm") ],
+        # It should be possible to go below iOS 6 and even add -arch armv6,
+        # thus targeting iPhone pre-3GS, but it's assumed to be irrelevant
+        # at this point.
+        CC               => "xcrun -sdk iphoneos cc",
+        cflags           => add("-arch armv7 -mios-version-min=6.0.0 -fno-common"),
+        perlasm_scheme   => "ios32",
+    },
+    "ios64-xcrun" => {
+        inherit_from     => [ "ios-common", asm("aarch64_asm") ],
+        CC               => "xcrun -sdk iphoneos cc",
+        cflags           => add("-arch arm64 -mios-version-min=7.0.0 -fno-common"),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG RC4_CHAR",
+        perlasm_scheme   => "ios64",
+    },
+    "iossimulator-xcrun" => {
+        inherit_from     => [ "ios-common" ],
+        CC               => "xcrun -sdk iphonesimulator cc",
+    },
+# It takes three prior-set environment variables to make it work:
+#
+# CROSS_COMPILE=/where/toolchain/is/usr/bin/ [note ending slash]
+# CROSS_TOP=/where/SDKs/are
+# CROSS_SDK=iPhoneOSx.y.sdk
+#
+# Exact paths vary with Xcode releases, but for couple of last ones
+# they would look like this:
+#
+# CROSS_COMPILE=`xcode-select --print-path`/Toolchains/XcodeDefault.xctoolchain/usr/bin/
+# CROSS_TOP=`xcode-select --print-path`/Platforms/iPhoneOS.platform/Developer
+# CROSS_SDK=iPhoneOS.sdk
+#
+    "iphoneos-cross" => {
+        inherit_from     => [ "ios-common" ],
+        cflags           => add("-isysroot \$(CROSS_TOP)/SDKs/\$(CROSS_SDK) -fno-common"),
+    },
+    "ios-cross" => {
+        inherit_from     => [ "ios-xcrun" ],
+        CC               => "cc",
+        cflags           => add("-isysroot \$(CROSS_TOP)/SDKs/\$(CROSS_SDK)"),
+    },
+    "ios64-cross" => {
+        inherit_from     => [ "ios64-xcrun" ],
+        CC               => "cc",
+        cflags           => add("-isysroot \$(CROSS_TOP)/SDKs/\$(CROSS_SDK)"),
+    },
+);
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/50-djgpp.conf b/trunk/3rdparty/openssl-1.1-fit/Configurations/50-djgpp.conf
new file mode 100644
index 000000000..a8853a81a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/50-djgpp.conf
@@ -0,0 +1,17 @@
+# We can't make any commitment to support the DJGPP platform,
+# and rely entirely on the OpenSSL community to help is fine
+# tune and test.
+
+my %targets = (
+    "DJGPP" => {
+        inherit_from     => [ asm("x86_asm") ],
+        CC               => "gcc",
+        CFLAGS           => "-fomit-frame-pointer -O2 -Wall",
+        cflags           => "-I/dev/env/WATT_ROOT/inc -DTERMIOS -DL_ENDIAN",
+        sys_id           => "MSDOS",
+        lflags           => add("-L/dev/env/WATT_ROOT/lib"),
+        ex_libs          => add("-lwatt"),
+        bn_ops           => "BN_LLONG",
+        perlasm_scheme   => "a.out",
+    },
+);
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/50-haiku.conf b/trunk/3rdparty/openssl-1.1-fit/Configurations/50-haiku.conf
new file mode 100644
index 000000000..cd6d10e5f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/50-haiku.conf
@@ -0,0 +1,30 @@
+my %targets = (
+    "haiku-common" => {
+        template         => 1,
+        CC               => "cc",
+        CFLAGS           => add_before(picker(default => "-Wall",
+                                              debug   => "-g -O0",
+                                              release => "-O2")),
+        cflags           => add_before("-DL_ENDIAN -include \$(SRCDIR)/os-dep/haiku.h",
+                                       threads("-D_REENTRANT")),
+        sys_id           => "HAIKU",
+        ex_libs          => "-lnetwork",
+        perlasm_scheme   => "elf",
+        thread_scheme    => "pthreads",
+        dso_scheme       => "dlfcn",
+        shared_target    => "gnu-shared",
+        shared_cflag     => "-fPIC",
+        shared_ldflag    => "-shared",
+        shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
+    },
+    "haiku-x86" => {
+        inherit_from     => [ "haiku-common", asm("x86_elf_asm") ],
+        CFLAGS           => add(picker(release => "-fomit-frame-pointer")),
+        bn_ops           => "BN_LLONG",
+    },
+    "haiku-x86_64" => {
+        inherit_from     => [ "haiku-common" ],
+        cflags           => add("-m64"),
+        bn_ops           => "SIXTY_FOUR_BIT_LONG",
+    },
+);
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/50-masm.conf b/trunk/3rdparty/openssl-1.1-fit/Configurations/50-masm.conf
new file mode 100644
index 000000000..2c55dddc2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/50-masm.conf
@@ -0,0 +1,23 @@
+# We can't make commitment to supporting Microsoft assembler,
+# because it would mean supporting all masm versions. This in
+# in turn is because masm is not really an interchangeable option,
+# while users tend to have reasons to stick with specific Visual
+# Studio versions. It's usually lesser hassle to make it work
+# with latest assembler, but tweaking for older versions had
+# proven to be daunting task. This is experimental target, for
+# production builds stick with [up-to-date version of] nasm.
+
+my %targets = (
+    "VC-WIN64A-masm" => {
+        inherit_from    => [ "VC-WIN64-common", asm("x86_64_asm"),
+                             sub { $disabled{shared} ? () : "x86_64_uplink" } ],
+        AS              => "ml64",
+        ASFLAGS         => "/nologo /Zi",
+        asoutflag       => "/Fo",
+        asflags         => "/c /Cp /Cx",
+        sys_id          => "WIN64A",
+        bn_asm_src      => sub { return undef unless @_;
+                                 my $r=join(" ",@_); $r=~s|asm/x86_64-gcc|bn_asm|; $r; },
+        perlasm_scheme   => "masm",
+    },
+);
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/50-win-onecore.conf b/trunk/3rdparty/openssl-1.1-fit/Configurations/50-win-onecore.conf
new file mode 100644
index 000000000..51cb3819c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/50-win-onecore.conf
@@ -0,0 +1,64 @@
+# Windows OneCore targets.
+#
+# OneCore is new API stability "contract" that transends Desktop, IoT and
+# Mobile[?] Windows editions. It's a set up "umbrella" libraries that
+# export subset of Win32 API that are common to all Windows 10 devices.
+#
+# OneCore Configuration temporarly dedicated for console applications
+# due to disabled event logging, which is incompatible with one core.
+# Error messages are provided via standard error only.
+# TODO: extend error handling to use ETW based eventing
+# (Or rework whole error messaging)
+
+my %targets = (
+    "VC-WIN32-ONECORE" => {
+        inherit_from    => [ "VC-WIN32" ],
+        # /NODEFAULTLIB:kernel32.lib is needed, because MSVCRT.LIB has
+        # hidden reference to kernel32.lib, but we don't actually want
+        # it in "onecore" build.
+        lflags          => add("/NODEFAULTLIB:kernel32.lib"),
+        defines         => add("OPENSSL_SYS_WIN_CORE"),
+        ex_libs         => "onecore.lib",
+    },
+    "VC-WIN64A-ONECORE" => {
+        inherit_from    => [ "VC-WIN64A" ],
+        lflags          => add("/NODEFAULTLIB:kernel32.lib"),
+        defines         => add("OPENSSL_SYS_WIN_CORE"),
+        ex_libs         => "onecore.lib",
+    },
+
+    # Windows on ARM targets. ARM compilers are additional components in
+    # VS2017, i.e. they are not installed by default. And when installed,
+    # there are no "ARM Tool Command Prompt"s on Start menu, you have
+    # to locate vcvarsall.bat and act accordingly. VC-WIN32-ARM has
+    # received limited testing with evp_test.exe on Windows 10 IoT Core,
+    # but not VC-WIN64-ARM, no hardware... In other words they are not
+    # actually supported...
+    #
+    # Another thing to keep in mind [in cross-compilation scenario such
+    # as this one] is that target's file system has nothing to do with
+    # compilation system's one. This means that you're are likely to use
+    # --prefix and --openssldir with target-specific values. 'nmake install'
+    # step is effectively meaningless in cross-compilation case, though
+    # it might be useful to 'nmake install DESTDIR=S:\ome\where' where you
+    # can point Visual Studio to when compiling custom application code.
+
+    "VC-WIN32-ARM" => {
+        inherit_from    => [ "VC-noCE-common" ],
+        defines         => add("_ARM_WINAPI_PARTITION_DESKTOP_SDK_AVAILABLE",
+                               "OPENSSL_SYS_WIN_CORE"),
+        bn_ops          => "BN_LLONG RC4_CHAR EXPORT_VAR_AS_FN",
+        lflags          => add("/NODEFAULTLIB:kernel32.lib"),
+        ex_libs         => "onecore.lib",
+        multilib        => "-arm",
+    },
+    "VC-WIN64-ARM" => {
+        inherit_from    => [ "VC-noCE-common" ],
+        defines         => add("_ARM_WINAPI_PARTITION_DESKTOP_SDK_AVAILABLE",
+                               "OPENSSL_SYS_WIN_CORE"),
+        bn_ops          => "SIXTY_FOUR_BIT RC4_CHAR EXPORT_VAR_AS_FN",
+        lflags          => add("/NODEFAULTLIB:kernel32.lib"),
+        ex_libs         => "onecore.lib",
+        multilib        => "-arm64",
+    },
+);
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/INTERNALS.Configure b/trunk/3rdparty/openssl-1.1-fit/Configurations/INTERNALS.Configure
new file mode 100644
index 000000000..b28305dec
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/INTERNALS.Configure
@@ -0,0 +1,136 @@
+Configure Internals
+===================
+
+[ note: this file uses markdown for formatting ]
+
+Intro
+-----
+
+This is a collection of notes that are hopefully of interest to those
+who decide to dive into Configure and what it does.  This is a living
+document and anyone is encouraged to add to it and submit changes.
+There's no claim for this document to be complete at any time, but it
+will hopefully reach such a point in time.
+
+
+----------------------------------------------------------------------
+
+Parsing build.info files, processing conditions
+-----------------------------------------------
+
+Processing conditions in build.info files is done with the help of a
+condition stack that tell if a build.info should be processed or if it
+should just be skipped over.  The possible states of the stack top are
+expressed in the following comment from Configure:
+
+    # The top item of this stack has the following values
+    # -2 positive already run and we found ELSE (following ELSIF should fail)
+    # -1 positive already run (skip until ENDIF)
+    # 0 negatives so far (if we're at a condition, check it)
+    # 1 last was positive (don't skip lines until next ELSE, ELSIF or ENDIF)
+    # 2 positive ELSE (following ELSIF should fail)
+
+Ground rule is that non-condition lines are skipped over if the
+stack top is > 0.  Condition lines (IF, ELSIF, ELSE and ENDIF
+statements) need to be processed either way to keep track of the skip
+stack states, so they are a little more intricate.
+
+Instead of trying to describe in words, here are some example of what
+the skip stack should look like after each line is processed:
+
+Example 1:
+
+| IF[1]                     |  1        |                               |
+|   ... whatever ...        |           | this line is processed        |
+|   IF[1]                   |  1  1     |                               |
+|     ... whatever ...      |           | this line is processed        |
+|   ELSIF[1]                |  1 -1     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ELSE                    |  1 -2     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ENDIF                   |  1        |                               |
+|   ... whatever ...        |           | this line is processed        |
+| ELSIF[1]                  | -1        |                               |
+|   ... whatever ...        |           | this line is skipped over     |
+|   IF[1]                   | -1 -1     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ELSIF[1]                | -1 -1     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ELSE                    | -1 -2     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ENDIF                   | -1        |                               |
+|   ... whatever ...        |           | this line is skipped over     |
+| ENDIF                     |           |                               |
+
+Example 2:
+
+| IF[0]                     |  0        |                               |
+|   ... whatever ...        |           | this line is skipped over     |
+|   IF[1]                   |  0 -1     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ELSIF[1]                |  0 -1     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ELSE                    |  0 -2     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ENDIF                   |  0        |                               |
+|   ... whatever ...        |           | this line is skipped over     |
+| ELSIF[1]                  |  1        |                               |
+|   ... whatever ...        |           | this line is processed        |
+|   IF[1]                   |  1  1     |                               |
+|     ... whatever ...      |           | this line is processed        |
+|   ELSIF[1]                |  1 -1     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ELSE                    |  1 -2     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ENDIF                   |  1        |                               |
+|   ... whatever ...        |           | this line is processed        |
+| ENDIF                     |           |                               |
+
+Example 3:
+
+| IF[0]                     |  0        |                               |
+|   ... whatever ...        |           | this line is skipped over     |
+|   IF[0]                   |  0 -1     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ELSIF[1]                |  0 -1     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ELSE                    |  0 -2     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ENDIF                   |  0        |                               |
+|   ... whatever ...        |           | this line is skipped over     |
+| ELSIF[1]                  |  1        |                               |
+|   ... whatever ...        |           | this line is processed        |
+|   IF[0]                   |  1  0     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ELSIF[1]                |  1  1     |                               |
+|     ... whatever ...      |           | this line is processed        |
+|   ELSE                    |  1 -2     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ENDIF                   |  1        |                               |
+|   ... whatever ...        |           | this line is processed        |
+| ENDIF                     |           |                               |
+
+Example 4:
+
+| IF[0]                     |  0        |                               |
+|   ... whatever ...        |           | this line is skipped over     |
+|   IF[0]                   |  0 -1     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ELSIF[0]                |  0 -1     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ELSE                    |  0 -2     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ENDIF                   |  0        |                               |
+|   ... whatever ...        |           | this line is skipped over     |
+| ELSIF[1]                  |  1        |                               |
+|   ... whatever ...        |           | this line is processed        |
+|   IF[0]                   |  1  0     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ELSIF[0]                |  1  0     |                               |
+|     ... whatever ...      |           | this line is skipped over     |
+|   ELSE                    |  1  2     |                               |
+|     ... whatever ...      |           | this line is processed        |
+|   ENDIF                   |  1        |                               |
+|   ... whatever ...        |           | this line is processed        |
+| ENDIF                     |           |                               |
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/README b/trunk/3rdparty/openssl-1.1-fit/Configurations/README
new file mode 100644
index 000000000..0b856284d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/README
@@ -0,0 +1,763 @@
+Intro
+=====
+
+This directory contains a few sets of files that are used for
+configuration in diverse ways:
+
+    *.conf      Target platform configurations, please read
+                'Configurations of OpenSSL target platforms' for more
+                information.
+    *.tmpl      Build file templates, please read 'Build-file
+                programming with the "unified" build system' as well
+                as 'Build info files' for more information.
+    *.pm        Helper scripts / modules for the main `Configure`
+                script.  See 'Configure helper scripts for more
+                information.
+
+
+Configurations of OpenSSL target platforms
+==========================================
+
+Configuration targets are a collection of facts that we know about
+different platforms and their capabilities.  We organise them in a
+hash table, where each entry represent a specific target.
+
+Note that configuration target names must be unique across all config
+files.  The Configure script does check that a config file doesn't
+have config targets that shadow config targets from other files.
+
+In each table entry, the following keys are significant:
+
+        inherit_from    => Other targets to inherit values from.
+                           Explained further below. [1]
+        template        => Set to 1 if this isn't really a platform
+                           target.  Instead, this target is a template
+                           upon which other targets can be built.
+                           Explained further below.  [1]
+
+        sys_id          => System identity for systems where that
+                           is difficult to determine automatically.
+
+        enable          => Enable specific configuration features.
+                           This MUST be an array of words.
+        disable         => Disable specific configuration features.
+                           This MUST be an array of words.
+                           Note: if the same feature is both enabled
+                           and disabled, disable wins.
+
+        as              => The assembler command.  This is not always
+                           used (for example on Unix, where the C
+                           compiler is used instead).
+        asflags         => Default assembler command flags [4].
+        cpp             => The C preprocessor command, normally not
+                           given, as the build file defaults are
+                           usually good enough.
+        cppflags        => Default C preprocessor flags [4].
+        defines         => As an alternative, macro definitions may be
+                           given here instead of in `cppflags' [4].
+                           If given here, they MUST be as an array of
+                           the string such as "MACRO=value", or just
+                           "MACRO" for definitions without value.
+        includes        => As an alternative, inclusion directories
+                           may be given here instead of in `cppflags'
+                           [4].  If given here, the MUST be an array
+                           of strings, one directory specification
+                           each.
+        cc              => The C compiler command, usually one of "cc",
+                           "gcc" or "clang".  This command is normally
+                           also used to link object files and
+                           libraries into the final program.
+        cxx             => The C++ compiler command, usually one of
+                           "c++", "g++" or "clang++".  This command is
+                           also used when linking a program where at
+                           least one of the object file is made from
+                           C++ source.
+        cflags          => Defaults C compiler flags [4].
+        cxxflags        => Default  C++ compiler flags [4].  If unset,
+                           it gets the same value as cflags.
+
+        (linking is a complex thing, see [3] below)
+        ld              => Linker command, usually not defined
+                           (meaning the compiler command is used
+                           instead).
+                           (NOTE: this is here for future use, it's
+                           not implemented yet)
+        lflags          => Default flags used when linking apps,
+                           shared libraries or DSOs [4].
+        ex_libs         => Extra libraries that are needed when
+                           linking shared libraries, DSOs or programs.
+                           The value is also assigned to Libs.private
+                           in $(libdir)/pkgconfig/libcrypto.pc.
+
+        shared_cppflags => Extra C preprocessor flags used when
+                           processing C files for shared libraries.
+        shared_cflag    => Extra C compiler flags used when compiling
+                           for shared libraries, typically something
+                           like "-fPIC".
+        shared_ldflag   => Extra linking flags used when linking
+                           shared libraries.
+        module_cppflags
+        module_cflags
+        module_ldflags  => Has the same function as the corresponding
+                           `shared_' attributes, but for building DSOs.
+                           When unset, they get the same values as the
+                           corresponding `shared_' attributes.
+
+        ar              => The library archive command, the default is
+                           "ar".
+                           (NOTE: this is here for future use, it's
+                           not implemented yet)
+        arflags         => Flags to be used with the library archive
+                           command.  On Unix, this includes the
+                           command letter, 'r' by default.
+
+        ranlib          => The library archive indexing command, the
+                           default is 'ranlib' it it exists.
+
+        unistd          => An alternative header to the typical
+                           '<unistd.h>'.  This is very rarely needed.
+
+        shared_extension => File name extension used for shared
+                            libraries.
+        obj_extension   => File name extension used for object files.
+                           On unix, this defaults to ".o" (NOTE: this
+                           is here for future use, it's not
+                           implemented yet)
+        exe_extension   => File name extension used for executable
+                           files.  On unix, this defaults to "" (NOTE:
+                           this is here for future use, it's not
+                           implemented yet)
+        shlib_variant   => A "variant" identifier inserted between the base
+                           shared library name and the extension.  On "unixy"
+                           platforms (BSD, Linux, Solaris, MacOS/X, ...) this
+                           supports installation of custom OpenSSL libraries
+                           that don't conflict with other builds of OpenSSL
+                           installed on the system.  The variant identifier
+                           becomes part of the SONAME of the library and also
+                           any symbol versions (symbol versions are not used or
+                           needed with MacOS/X).  For example, on a system
+                           where a default build would normally create the SSL
+                           shared library as 'libssl.so -> libssl.so.1.1' with
+                           the value of the symlink as the SONAME, a target
+                           definition that sets 'shlib_variant => "-abc"' will
+                           create 'libssl.so -> libssl-abc.so.1.1', again with
+                           an SONAME equal to the value of the symlink.  The
+                           symbol versions associated with the variant library
+                           would then be 'OPENSSL_ABC_<version>' rather than
+                           the default 'OPENSSL_<version>'. The string inserted
+                           into symbol versions is obtained by mapping all
+                           letters in the "variant" identifier to upper case
+                           and all non-alphanumeric characters to '_'.
+
+        thread_scheme   => The type of threads is used on the
+                           configured platform.  Currently known
+                           values are "(unknown)", "pthreads",
+                           "uithreads" (a.k.a solaris threads) and
+                           "winthreads".  Except for "(unknown)", the
+                           actual value is currently ignored but may
+                           be used in the future.  See further notes
+                           below [2].
+        dso_scheme      => The type of dynamic shared objects to build
+                           for.  This mostly comes into play with
+                           engines, but can be used for other purposes
+                           as well.  Valid values are "DLFCN"
+                           (dlopen() et al), "DLFCN_NO_H" (for systems
+                           that use dlopen() et al but do not have
+                           fcntl.h), "DL" (shl_load() et al), "WIN32"
+                           and "VMS".
+        perlasm_scheme  => The perlasm method used to create the
+                           assembler files used when compiling with
+                           assembler implementations.
+        shared_target   => The shared library building method used.
+                           This is a target found in Makefile.shared.
+        build_scheme    => The scheme used to build up a Makefile.
+                           In its simplest form, the value is a string
+                           with the name of the build scheme.
+                           The value may also take the form of a list
+                           of strings, if the build_scheme is to have
+                           some options.  In this case, the first
+                           string in the list is the name of the build
+                           scheme.
+                           Currently recognised build scheme is "unified".
+                           For the "unified" build scheme, this item
+                           *must* be an array with the first being the
+                           word "unified" and the second being a word
+                           to identify the platform family.
+
+        multilib        => On systems that support having multiple
+                           implementations of a library (typically a
+                           32-bit and a 64-bit variant), this is used
+                           to have the different variants in different
+                           directories.
+
+        bn_ops          => Building options (was just bignum options in
+                           the earlier history of this option, hence the
+                           name). This is a string of words that describe
+                           algorithms' implementation parameters that
+                           are optimal for the designated target platform,
+                           such as the type of integers used to build up
+                           the bignum, different ways to implement certain
+                           ciphers and so on. To fully comprehend the
+                           meaning, the best is to read the affected
+                           source.
+                           The valid words are:
+
+                           THIRTY_TWO_BIT       bignum limbs are 32 bits,
+                                                this is default if no
+                                                option is specified, it
+                                                works on any supported
+                                                system [unless "wider"
+                                                limb size is implied in
+                                                assembly code];
+                           BN_LLONG             bignum limbs are 32 bits,
+                                                but 64-bit 'unsigned long
+                                                long' is used internally
+                                                in calculations;
+                           SIXTY_FOUR_BIT_LONG  bignum limbs are 64 bits
+                                                and sizeof(long) is 8;
+                           SIXTY_FOUR_BIT       bignums limbs are 64 bits,
+                                                but execution environment
+                                                is ILP32;
+                           RC4_CHAR             RC4 key schedule is made
+                                                up of 'unsigned char's;
+                           RC4_INT              RC4 key schedule is made
+                                                up of 'unsigned int's;
+                           EXPORT_VAR_AS_FN     for shared libraries,
+                                                export vars as
+                                                accessor functions.
+
+        apps_aux_src    => Extra source to build apps/openssl and other
+                           apps, as needed by the target and that can be
+                           collected in a library.
+        apps_init_src   => Init source to build apps/openssl and other
+                           apps, as needed by the target.  This code
+                           cannot be placed in a library, as the rest
+                           of the code isn't expected to link to it
+                           explicitly.
+        cpuid_asm_src   => assembler implementation of cpuid code as
+                           well as OPENSSL_cleanse().
+                           Default to mem_clr.c
+        bn_asm_src      => Assembler implementation of core bignum
+                           functions.
+                           Defaults to bn_asm.c
+        ec_asm_src      => Assembler implementation of core EC
+                           functions.
+        des_asm_src     => Assembler implementation of core DES
+                           encryption functions.
+                           Defaults to 'des_enc.c fcrypt_b.c'
+        aes_asm_src     => Assembler implementation of core AES
+                           functions.
+                           Defaults to 'aes_core.c aes_cbc.c'
+        bf_asm_src      => Assembler implementation of core BlowFish
+                           functions.
+                           Defaults to 'bf_enc.c'
+        md5_asm_src     => Assembler implementation of core MD5
+                           functions.
+        sha1_asm_src    => Assembler implementation of core SHA1,
+                           functions, and also possibly SHA256 and
+                           SHA512 ones.
+        cast_asm_src    => Assembler implementation of core CAST
+                           functions.
+                           Defaults to 'c_enc.c'
+        rc4_asm_src     => Assembler implementation of core RC4
+                           functions.
+                           Defaults to 'rc4_enc.c rc4_skey.c'
+        rmd160_asm_src  => Assembler implementation of core RMD160
+                           functions.
+        rc5_asm_src     => Assembler implementation of core RC5
+                           functions.
+                           Defaults to 'rc5_enc.c'
+        wp_asm_src      => Assembler implementation of core WHIRLPOOL
+                           functions.
+        cmll_asm_src    => Assembler implementation of core CAMELLIA
+                           functions.
+                           Defaults to 'camellia.c cmll_misc.c cmll_cbc.c'
+        modes_asm_src   => Assembler implementation of cipher modes,
+                           currently the functions gcm_gmult_4bit and
+                           gcm_ghash_4bit.
+        padlock_asm_src => Assembler implementation of core parts of
+                           the padlock engine.  This is mandatory on
+                           any platform where the padlock engine might
+                           actually be built.
+
+
+[1] as part of the target configuration, one can have a key called
+    'inherit_from' that indicate what other configurations to inherit
+    data from.  These are resolved recursively.
+
+    Inheritance works as a set of default values that can be overridden
+    by corresponding key values in the inheriting configuration.
+
+    Note 1: any configuration table can be used as a template.
+    Note 2: pure templates have the attribute 'template => 1' and
+            cannot be used as build targets.
+
+    If several configurations are given in the 'inherit_from' array,
+    the values of same attribute are concatenated with space
+    separation.  With this, it's possible to have several smaller
+    templates for different configuration aspects that can be combined
+    into a complete configuration.
+
+    instead of a scalar value or an array, a value can be a code block
+    of the form 'sub { /* your code here */ }'.  This code block will
+    be called with the list of inherited values for that key as
+    arguments.  In fact, the concatenation of strings is really done
+    by using 'sub { join(" ",@_) }' on the list of inherited values.
+
+    An example:
+
+        "foo" => {
+                template => 1,
+                haha => "ha ha",
+                hoho => "ho",
+                ignored => "This should not appear in the end result",
+        },
+        "bar" => {
+                template => 1,
+                haha => "ah",
+                hoho => "haho",
+                hehe => "hehe"
+        },
+        "laughter" => {
+                inherit_from => [ "foo", "bar" ],
+                hehe => sub { join(" ",(@_,"!!!")) },
+                ignored => "",
+        }
+
+        The entry for "laughter" will become as follows after processing:
+
+        "laughter" => {
+                haha => "ha ha ah",
+                hoho => "ho haho",
+                hehe => "hehe !!!",
+                ignored => ""
+        }
+
+[2] OpenSSL is built with threading capabilities unless the user
+    specifies 'no-threads'.  The value of the key 'thread_scheme' may
+    be "(unknown)", in which case the user MUST give some compilation
+    flags to Configure.
+
+[3] OpenSSL has three types of things to link from object files or
+    static libraries:
+
+    - shared libraries; that would be libcrypto and libssl.
+    - shared objects (sometimes called dynamic libraries);  that would
+      be the engines.
+    - applications; those are apps/openssl and all the test apps.
+
+    Very roughly speaking, linking is done like this (words in braces
+    represent the configuration settings documented at the beginning
+    of this file):
+
+    shared libraries:
+        {ld} $(CFLAGS) {lflags} {shared_ldflag} -o libfoo.so \
+            foo/something.o foo/somethingelse.o {ex_libs}
+
+    shared objects:
+        {ld} $(CFLAGS) {lflags} {module_ldflags} -o libeng.so \
+            blah1.o blah2.o -lcrypto {ex_libs}
+
+    applications:
+        {ld} $(CFLAGS) {lflags} -o app \
+            app1.o utils.o -lssl -lcrypto {ex_libs}
+
+[4] There are variants of these attribute, prefixed with `lib_',
+    `dso_' or `bin_'.  Those variants replace the unprefixed attribute
+    when building library, DSO or program modules specifically.
+
+Historically, the target configurations came in form of a string with
+values separated by colons.  This use is deprecated.  The string form
+looked like this:
+
+   "target" => "{cc}:{cflags}:{unistd}:{thread_cflag}:{sys_id}:{lflags}:{bn_ops}:{cpuid_obj}:{bn_obj}:{ec_obj}:{des_obj}:{aes_obj}:{bf_obj}:{md5_obj}:{sha1_obj}:{cast_obj}:{rc4_obj}:{rmd160_obj}:{rc5_obj}:{wp_obj}:{cmll_obj}:{modes_obj}:{padlock_obj}:{perlasm_scheme}:{dso_scheme}:{shared_target}:{shared_cflag}:{shared_ldflag}:{shared_extension}:{ranlib}:{arflags}:{multilib}"
+
+
+Build info files
+================
+
+The build.info files that are spread over the source tree contain the
+minimum information needed to build and distribute OpenSSL.  It uses a
+simple and yet fairly powerful language to determine what needs to be
+built, from what sources, and other relationships between files.
+
+For every build.info file, all file references are relative to the
+directory of the build.info file for source files, and the
+corresponding build directory for built files if the build tree
+differs from the source tree.
+
+When processed, every line is processed with the perl module
+Text::Template, using the delimiters "{-" and "-}".  The hashes
+%config and %target are passed to the perl fragments, along with
+$sourcedir and $builddir, which are the locations of the source
+directory for the current build.info file and the corresponding build
+directory, all relative to the top of the build tree.
+
+To begin with, things to be built are declared by setting specific
+variables:
+
+    PROGRAMS=foo bar
+    LIBS=libsomething
+    ENGINES=libeng
+    SCRIPTS=myhack
+    EXTRA=file1 file2
+
+Note that the files mentioned for PROGRAMS, LIBS and ENGINES *must* be
+without extensions.  The build file templates will figure them out.
+
+For each thing to be built, it is then possible to say what sources
+they are built from:
+
+    PROGRAMS=foo bar
+    SOURCE[foo]=foo.c common.c
+    SOURCE[bar]=bar.c extra.c common.c
+
+It's also possible to tell some other dependencies:
+
+    DEPEND[foo]=libsomething
+    DEPEND[libbar]=libsomethingelse
+
+(it could be argued that 'libsomething' and 'libsomethingelse' are
+source as well.  However, the files given through SOURCE are expected
+to be located in the source tree while files given through DEPEND are
+expected to be located in the build tree)
+
+It's also possible to depend on static libraries explicitly:
+
+    DEPEND[foo]=libsomething.a
+    DEPEND[libbar]=libsomethingelse.a
+
+This should be rarely used, and care should be taken to make sure it's
+only used when supported.  For example, native Windows build doesn't
+support building static libraries and DLLs at the same time, so using
+static libraries on Windows can only be done when configured
+'no-shared'.
+
+One some platforms, shared libraries come with a name that's different
+from their static counterpart.  That's declared as follows:
+
+    SHARED_NAME[libfoo]=cygfoo-{- $config{shlibver} -}
+
+The example is from Cygwin, which has a required naming convention.
+
+Sometimes, it makes sense to rename an output file, for example a
+library:
+
+    RENAME[libfoo]=libbar
+
+That line has "libfoo" renamed to "libbar".  While it makes no
+sense at all to just have a rename like that (why not just use
+"libbar" everywhere?), it does make sense when it can be used
+conditionally.  See a little further below for an example.
+
+In some cases, it's desirable to include some source files in the
+shared form of a library only:
+
+    SHARED_SOURCE[libfoo]=dllmain.c
+
+For any file to be built, it's also possible to tell what extra
+include paths the build of their source files should use:
+
+    INCLUDE[foo]=include
+
+In some cases, one might want to generate some source files from
+others, that's done as follows:
+
+    GENERATE[foo.s]=asm/something.pl $(CFLAGS)
+    GENERATE[bar.s]=asm/bar.S
+
+The value of each GENERATE line is a command line or part of it.
+Configure places no rules on the command line, except that the first
+item must be the generator file.  It is, however, entirely up to the
+build file template to define exactly how those command lines should
+be handled, how the output is captured and so on.
+
+Sometimes, the generator file itself depends on other files, for
+example if it is a perl script that depends on other perl modules.
+This can be expressed using DEPEND like this:
+
+    DEPEND[asm/something.pl]=../perlasm/Foo.pm
+
+There may also be cases where the exact file isn't easily specified,
+but an inclusion directory still needs to be specified.  INCLUDE can
+be used in that case:
+
+    INCLUDE[asm/something.pl]=../perlasm
+
+NOTE: GENERATE lines are limited to one command only per GENERATE.
+
+As a last resort, it's possible to have raw build file lines, between
+BEGINRAW and ENDRAW lines as follows:
+
+    BEGINRAW[Makefile(unix)]
+    haha.h: {- $builddir -}/Makefile
+        echo "/* haha */" > haha.h
+    ENDRAW[Makefile(unix)]
+
+The word within square brackets is the build_file configuration item
+or the build_file configuration item followed by the second word in the
+build_scheme configuration item for the configured target within
+parenthesis as shown above.  For example, with the following relevant
+configuration items:
+
+   build_file   => "build.ninja"
+   build_scheme => [ "unified", "unix" ]
+
+... these lines will be considered:
+
+   BEGINRAW[build.ninja]
+   build haha.h: echo "/* haha */" > haha.h
+   ENDRAW[build.ninja]
+
+   BEGINRAW[build.ninja(unix)]
+   build hoho.h: echo "/* hoho */" > hoho.h
+   ENDRAW[build.ninja(unix)]
+
+Should it be needed because the recipes within a RAW section might
+clash with those generated by Configure, it's possible to tell it
+not to generate them with the use of OVERRIDES, for example:
+
+    SOURCE[libfoo]=foo.c bar.c
+
+    OVERRIDES=bar.o
+    BEGINRAW[Makefile(unix)]
+    bar.o: bar.c
+    	$(CC) $(CFLAGS) -DSPECIAL -c -o $@ $<
+    ENDRAW[Makefile(unix)]
+
+See the documentation further up for more information on configuration
+items.
+
+Finally, you can have some simple conditional use of the build.info
+information, looking like this:
+
+    IF[1]
+     something
+    ELSIF[2]
+     something other
+    ELSE
+     something else
+    ENDIF
+
+The expression in square brackets is interpreted as a string in perl,
+and will be seen as true if perl thinks it is, otherwise false.  For
+example, the above would have "something" used, since 1 is true.
+
+Together with the use of Text::Template, this can be used as
+conditions based on something in the passed variables, for example:
+
+    IF[{- $disabled{shared} -}]
+      LIBS=libcrypto
+      SOURCE[libcrypto]=...
+    ELSE
+      LIBS=libfoo
+      SOURCE[libfoo]=...
+    ENDIF
+
+or:
+
+    # VMS has a cultural standard where all libraries are prefixed.
+    # For OpenSSL, the choice is 'ossl_'
+    IF[{- $config{target} =~ /^vms/ -}]
+     RENAME[libcrypto]=ossl_libcrypto
+     RENAME[libssl]=ossl_libssl
+    ENDIF
+
+
+Build-file programming with the "unified" build system
+======================================================
+
+"Build files" are called "Makefile" on Unix-like operating systems,
+"descrip.mms" for MMS on VMS, "makefile" for nmake on Windows, etc.
+
+To use the "unified" build system, the target configuration needs to
+set the three items 'build_scheme', 'build_file' and 'build_command'.
+In the rest of this section, we will assume that 'build_scheme' is set
+to "unified" (see the configurations documentation above for the
+details).
+
+For any name given by 'build_file', the "unified" system expects a
+template file in Configurations/ named like the build file, with
+".tmpl" appended, or in case of possible ambiguity, a combination of
+the second 'build_scheme' list item and the 'build_file' name.  For
+example, if 'build_file' is set to "Makefile", the template could be
+Configurations/Makefile.tmpl or Configurations/unix-Makefile.tmpl.
+In case both Configurations/unix-Makefile.tmpl and
+Configurations/Makefile.tmpl are present, the former takes
+precedence.
+
+The build-file template is processed with the perl module
+Text::Template, using "{-" and "-}" as delimiters that enclose the
+perl code fragments that generate configuration-dependent content.
+Those perl fragments have access to all the hash variables from
+configdata.pem.
+
+The build-file template is expected to define at least the following
+perl functions in a perl code fragment enclosed with "{-" and "-}".
+They are all expected to return a string with the lines they produce.
+
+    generatesrc - function that produces build file lines to generate
+                  a source file from some input.
+
+                  It's called like this:
+
+                        generatesrc(src => "PATH/TO/tobegenerated",
+                                    generator => [ "generatingfile", ... ]
+                                    generator_incs => [ "INCL/PATH", ... ]
+                                    generator_deps => [ "dep1", ... ]
+                                    generator => [ "generatingfile", ... ]
+                                    incs => [ "INCL/PATH", ... ],
+                                    deps => [ "dep1", ... ],
+                                    intent => one of "libs", "dso", "bin" );
+
+                  'src' has the name of the file to be generated.
+                  'generator' is the command or part of command to
+                  generate the file, of which the first item is
+                  expected to be the file to generate from.
+                  generatesrc() is expected to analyse and figure out
+                  exactly how to apply that file and how to capture
+                  the result.  'generator_incs' and 'generator_deps'
+                  are include directories and files that the generator
+                  file itself depends on.  'incs' and 'deps' are
+                  include directories and files that are used if $(CC)
+                  is used as an intermediary step when generating the
+                  end product (the file indicated by 'src').  'intent'
+                  indicates what the generated file is going to be
+                  used for.
+
+    src2obj     - function that produces build file lines to build an
+                  object file from source files and associated data.
+
+                  It's called like this:
+
+                        src2obj(obj => "PATH/TO/objectfile",
+                                srcs => [ "PATH/TO/sourcefile", ... ],
+                                deps => [ "dep1", ... ],
+                                incs => [ "INCL/PATH", ... ]
+                                intent => one of "lib", "dso", "bin" );
+
+                  'obj' has the intended object file *without*
+                  extension, src2obj() is expected to add that.
+                  'srcs' has the list of source files to build the
+                  object file, with the first item being the source
+                  file that directly corresponds to the object file.
+                  'deps' is a list of explicit dependencies.  'incs'
+                  is a list of include file directories.  Finally,
+                  'intent' indicates what this object file is going
+                  to be used for.
+
+    obj2lib     - function that produces build file lines to build a
+                  static library file ("libfoo.a" in Unix terms) from
+                  object files.
+
+                  called like this:
+
+                        obj2lib(lib => "PATH/TO/libfile",
+                                objs => [ "PATH/TO/objectfile", ... ]);
+
+                  'lib' has the intended library file name *without*
+                  extension, obj2lib is expected to add that.  'objs'
+                  has the list of object files (also *without*
+                  extension) to build this library.
+
+    libobj2shlib - function that produces build file lines to build a
+                  shareable object library file ("libfoo.so" in Unix
+                  terms) from the corresponding static library file
+                  or object files.
+
+                  called like this:
+
+                        libobj2shlib(shlib => "PATH/TO/shlibfile",
+                                     lib => "PATH/TO/libfile",
+                                     objs => [ "PATH/TO/objectfile", ... ],
+                                     deps => [ "PATH/TO/otherlibfile", ... ]);
+
+                  'lib' has the intended library file name *without*
+                  extension, libobj2shlib is expected to add that.
+                  'shlib' has the corresponding shared library name
+                  *without* extension.  'deps' has the list of other
+                  libraries (also *without* extension) this library
+                  needs to be linked with.  'objs' has the list of
+                  object files (also *without* extension) to build
+                  this library.
+
+                  This function has a choice; it can use the
+                  corresponding static library as input to make the
+                  shared library, or the list of object files.
+
+    obj2dso     - function that produces build file lines to build a
+                  dynamic shared object file from object files.
+
+                  called like this:
+
+                        obj2dso(lib => "PATH/TO/libfile",
+                                objs => [ "PATH/TO/objectfile", ... ],
+                                deps => [ "PATH/TO/otherlibfile",
+                                ... ]);
+
+                  This is almost the same as libobj2shlib, but the
+                  intent is to build a shareable library that can be
+                  loaded in runtime (a "plugin"...).  The differences
+                  are subtle, one of the most visible ones is that the
+                  resulting shareable library is produced from object
+                  files only.
+
+    obj2bin     - function that produces build file lines to build an
+                  executable file from object files.
+
+                  called like this:
+
+                        obj2bin(bin => "PATH/TO/binfile",
+                                objs => [ "PATH/TO/objectfile", ... ],
+                                deps => [ "PATH/TO/libfile", ... ]);
+
+                  'bin' has the intended executable file name
+                  *without* extension, obj2bin is expected to add
+                  that.  'objs' has the list of object files (also
+                  *without* extension) to build this library.  'deps'
+                  has the list of library files (also *without*
+                  extension) that the programs needs to be linked
+                  with.
+
+    in2script   - function that produces build file lines to build a
+                  script file from some input.
+
+                  called like this:
+
+                        in2script(script => "PATH/TO/scriptfile",
+                                  sources => [ "PATH/TO/infile", ... ]);
+
+                  'script' has the intended script file name.
+                  'sources' has the list of source files to build the
+                  resulting script from.
+
+In all cases, file file paths are relative to the build tree top, and
+the build file actions run with the build tree top as current working
+directory.
+
+Make sure to end the section with these functions with a string that
+you thing is appropriate for the resulting build file.  If nothing
+else, end it like this:
+
+      "";       # Make sure no lingering values end up in the Makefile
+    -}
+
+
+Configure helper scripts
+========================
+
+Configure uses helper scripts in this directory:
+
+Checker scripts
+---------------
+
+These scripts are per platform family, to check the integrity of the
+tools used for configuration and building.  The checker script used is
+either {build_platform}-{build_file}-checker.pm or
+{build_platform}-checker.pm, where {build_platform} is the second
+'build_scheme' list element from the configuration target data, and
+{build_file} is 'build_file' from the same target data.
+
+If the check succeeds, the script is expected to end with a non-zero
+expression.  If the check fails, the script can end with a zero, or
+with a `die`.
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/README.design b/trunk/3rdparty/openssl-1.1-fit/Configurations/README.design
new file mode 100644
index 000000000..5fb2737c2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/README.design
@@ -0,0 +1,623 @@
+Design document for the unified scheme data
+===========================================
+
+How are things connected?
+-------------------------
+
+The unified scheme takes all its data from the build.info files seen
+throughout the source tree.  These files hold the minimum information
+needed to build end product files from diverse sources.  See the
+section on build.info files below.
+
+From the information in build.info files, Configure builds up an
+information database as a hash table called %unified_info, which is
+stored in configdata.pm, found at the top of the build tree (which may
+or may not be the same as the source tree).
+
+Configurations/common.tmpl uses the data from %unified_info to
+generate the rules for building end product files as well as
+intermediary files with the help of a few functions found in the
+build-file templates.  See the section on build-file templates further
+down for more information.
+
+build.info files
+----------------
+
+As mentioned earlier, build.info files are meant to hold the minimum
+information needed to build output files, and therefore only (with a
+few possible exceptions [1]) have information about end products (such
+as scripts, library files and programs) and source files (such as C
+files, C header files, assembler files, etc).  Intermediate files such
+as object files are rarely directly referred to in build.info files (and
+when they are, it's always with the file name extension .o), they are
+inferred by Configure.  By the same rule of minimalism, end product
+file name extensions (such as .so, .a, .exe, etc) are never mentioned
+in build.info.  Their file name extensions will be inferred by the
+build-file templates, adapted for the platform they are meant for (see
+sections on %unified_info and build-file templates further down).
+
+The variables PROGRAMS, LIBS, ENGINES and SCRIPTS are used to declare
+end products.  There are variants for them with '_NO_INST' as suffix
+(PROGRAM_NO_INST etc) to specify end products that shouldn't get
+installed.
+
+The variables SOURCE, DEPEND and INCLUDE are indexed by a produced
+file, and their values are the source used to produce that particular
+produced file, extra dependencies, and include directories needed.
+
+All their values in all the build.info throughout the source tree are
+collected together and form a set of programs, libraries, engines and
+scripts to be produced, source files, dependencies, etc etc etc.
+
+Let's have a pretend example, a very limited contraption of OpenSSL,
+composed of the program 'apps/openssl', the libraries 'libssl' and
+'libcrypto', an engine 'engines/ossltest' and their sources and
+dependencies.
+
+    # build.info
+    LIBS=libcrypto libssl
+    INCLUDE[libcrypto]=include
+    INCLUDE[libssl]=include
+    DEPEND[libssl]=libcrypto
+
+This is the top directory build.info file, and it tells us that two
+libraries are to be built, the include directory 'include/' shall be
+used throughout when building anything that will end up in each
+library, and that the library 'libssl' depend on the library
+'libcrypto' to function properly.
+
+    # apps/build.info
+    PROGRAMS=openssl
+    SOURCE[openssl]=openssl.c
+    INCLUDE[openssl]=.. ../include
+    DEPEND[openssl]=../libssl
+
+This is the build.info file in 'apps/', one may notice that all file
+paths mentioned are relative to the directory the build.info file is
+located in.  This one tells us that there's a program to be built
+called 'apps/openssl' (the file name extension will depend on the
+platform and is therefore not mentioned in the build.info file).  It's
+built from one source file, 'apps/openssl.c', and building it requires
+the use of '.' and 'include' include directories (both are declared
+from the point of view of the 'apps/' directory), and that the program
+depends on the library 'libssl' to function properly.
+
+    # crypto/build.info
+    LIBS=../libcrypto
+    SOURCE[../libcrypto]=aes.c evp.c cversion.c
+    DEPEND[cversion.o]=buildinf.h
+
+    GENERATE[buildinf.h]=../util/mkbuildinf.pl "$(CC) $(CFLAGS)" "$(PLATFORM)"
+    DEPEND[buildinf.h]=../Makefile
+    DEPEND[../util/mkbuildinf.pl]=../util/Foo.pm
+
+This is the build.info file in 'crypto', and it tells us a little more
+about what's needed to produce 'libcrypto'.  LIBS is used again to
+declare that 'libcrypto' is to be produced.  This declaration is
+really unnecessary as it's already mentioned in the top build.info
+file, but can make the info file easier to understand.  This is to
+show that duplicate information isn't an issue.
+
+This build.info file informs us that 'libcrypto' is built from a few
+source files, 'crypto/aes.c', 'crypto/evp.c' and 'crypto/cversion.c'.
+It also shows us that building the object file inferred from
+'crypto/cversion.c' depends on 'crypto/buildinf.h'.  Finally, it
+also shows the possibility to declare how some files are generated
+using some script, in this case a perl script, and how such scripts
+can be declared to depend on other files, in this case a perl module.
+
+Two things are worth an extra note:
+
+'DEPEND[cversion.o]' mentions an object file.  DEPEND indexes is the
+only location where it's valid to mention them
+
+Lines in 'BEGINRAW'..'ENDRAW' sections must always mention files as
+seen from the top directory, no exception.
+
+    # ssl/build.info
+    LIBS=../libssl
+    SOURCE[../libssl]=tls.c
+
+This is the build.info file in 'ssl/', and it tells us that the
+library 'libssl' is built from the source file 'ssl/tls.c'.
+
+    # engines/build.info
+    ENGINES=dasync
+    SOURCE[dasync]=e_dasync.c
+    DEPEND[dasync]=../libcrypto
+    INCLUDE[dasync]=../include
+
+    ENGINES_NO_INST=ossltest
+    SOURCE[ossltest]=e_ossltest.c
+    DEPEND[ossltest]=../libcrypto.a
+    INCLUDE[ossltest]=../include
+
+This is the build.info file in 'engines/', telling us that two engines
+called 'engines/dasync' and 'engines/ossltest' shall be built, that
+dasync's source is 'engines/e_dasync.c' and ossltest's source is
+'engines/e_ossltest.c' and that the include directory 'include/' may
+be used when building anything that will be part of these engines.
+Also, both engines depend on the library 'libcrypto' to function
+properly.  ossltest is explicitly linked with the static variant of
+the library 'libcrypto'.  Finally, only dasync is being installed, as
+ossltest is only for internal testing.
+
+When Configure digests these build.info files, the accumulated
+information comes down to this:
+
+    LIBS=libcrypto libssl
+    SOURCE[libcrypto]=crypto/aes.c crypto/evp.c crypto/cversion.c
+    DEPEND[crypto/cversion.o]=crypto/buildinf.h
+    INCLUDE[libcrypto]=include
+    SOURCE[libssl]=ssl/tls.c
+    INCLUDE[libssl]=include
+    DEPEND[libssl]=libcrypto
+
+    PROGRAMS=apps/openssl
+    SOURCE[apps/openssl]=apps/openssl.c
+    INCLUDE[apps/openssl]=. include
+    DEPEND[apps/openssl]=libssl
+
+    ENGINES=engines/dasync
+    SOURCE[engines/dasync]=engines/e_dasync.c
+    DEPEND[engines/dasync]=libcrypto
+    INCLUDE[engines/dasync]=include
+
+    ENGINES_NO_INST=engines/ossltest
+    SOURCE[engines/ossltest]=engines/e_ossltest.c
+    DEPEND[engines/ossltest]=libcrypto.a
+    INCLUDE[engines/ossltest]=include
+
+    GENERATE[crypto/buildinf.h]=util/mkbuildinf.pl "$(CC) $(CFLAGS)" "$(PLATFORM)"
+    DEPEND[crypto/buildinf.h]=Makefile
+    DEPEND[util/mkbuildinf.pl]=util/Foo.pm
+
+
+A few notes worth mentioning:
+
+LIBS may be used to declare routine libraries only.
+
+PROGRAMS may be used to declare programs only.
+
+ENGINES may be used to declare engines only.
+
+The indexes for SOURCE must only be end product files, such as
+libraries, programs or engines.  The values of SOURCE variables must
+only be source files (possibly generated).
+
+INCLUDE and DEPEND shows a relationship between different files
+(usually produced files) or between files and directories, such as a
+program depending on a library, or between an object file and some
+extra source file.
+
+When Configure processes the build.info files, it will take it as
+truth without question, and will therefore perform very few checks.
+If the build tree is separate from the source tree, it will assume
+that all built files and up in the build directory and that all source
+files are to be found in the source tree, if they can be found there.
+Configure will assume that source files that can't be found in the
+source tree (such as 'crypto/bildinf.h' in the example above) are
+generated and will be found in the build tree.
+
+
+The %unified_info database
+--------------------------
+
+The information in all the build.info get digested by Configure and
+collected into the %unified_info database, divided into the following
+indexes:
+
+  depends   => a hash table containing 'file' => [ 'dependency' ... ]
+               pairs.  These are directly inferred from the DEPEND
+               variables in build.info files.
+
+  engines   => a list of engines.  These are directly inferred from
+               the ENGINES variable in build.info files.
+
+  generate  => a hash table containing 'file' => [ 'generator' ... ]
+               pairs.  These are directly inferred from the GENERATE
+               variables in build.info files.
+
+  includes  => a hash table containing 'file' => [ 'include' ... ]
+               pairs.  These are directly inferred from the INCLUDE
+               variables in build.info files.
+
+  install   => a hash table containing 'type' => [ 'file' ... ] pairs.
+               The types are 'programs', 'libraries', 'engines' and
+               'scripts', and the array of files list the files of
+               that type that should be installed.
+
+  libraries => a list of libraries.  These are directly inferred from
+               the LIBS variable in build.info files.
+
+  programs  => a list of programs.  These are directly inferred from
+               the PROGRAMS variable in build.info files.
+
+  rawlines  => a list of build-file lines.  These are a direct copy of
+               the BEGINRAW..ENDRAW lines in build.info files.  Note:
+               only the BEGINRAW..ENDRAW section for the current
+               platform are copied, the rest are ignored.
+
+  scripts   => a list of scripts.  There are directly inferred from
+               the SCRIPTS variable in build.info files.
+
+  sources   => a hash table containing 'file' => [ 'sourcefile' ... ]
+               pairs.  These are indirectly inferred from the SOURCE
+               variables in build.info files.  Object files are
+               mentioned in this hash table, with source files from
+               SOURCE variables, and AS source files for programs and
+               libraries.
+
+  shared_sources =>
+               a hash table just like 'sources', but only as source
+               files (object files) for building shared libraries.
+
+As an example, here is how the build.info files example from the
+section above would be digested into a %unified_info table:
+
+    our %unified_info = (
+        "depends" =>
+            {
+                "apps/openssl" =>
+                    [
+                        "libssl",
+                    ],
+                "crypto/buildinf.h" =>
+                    [
+                        "Makefile",
+                    ],
+                "crypto/cversion.o" =>
+                    [
+                        "crypto/buildinf.h",
+                    ],
+                "engines/dasync" =>
+                    [
+                        "libcrypto",
+                    ],
+                "engines/ossltest" =>
+                    [
+                        "libcrypto.a",
+                    ],
+                "libssl" =>
+                    [
+                        "libcrypto",
+                    ],
+                "util/mkbuildinf.pl" =>
+                    [
+                        "util/Foo.pm",
+                    ],
+            },
+        "engines" =>
+            [
+                "engines/dasync",
+                "engines/ossltest",
+            ],
+        "generate" =>
+            {
+                "crypto/buildinf.h" =>
+                    [
+                        "util/mkbuildinf.pl",
+                        "\"\$(CC)",
+                        "\$(CFLAGS)\"",
+                        "\"$(PLATFORM)\"",
+                    ],
+            },
+        "includes" =>
+            {
+                "apps/openssl" =>
+                    [
+                        ".",
+                        "include",
+                    ],
+                "engines/ossltest" =>
+                    [
+                        "include"
+                    ],
+                "libcrypto" =>
+                    [
+                        "include",
+                    ],
+                "libssl" =>
+                    [
+                        "include",
+                    ],
+                "util/mkbuildinf.pl" =>
+                    [
+                        "util",
+                    ],
+            }
+        "install" =>
+            {
+                "engines" =>
+                    [
+                        "engines/dasync",
+                    ],
+                "libraries" =>
+                    [
+                        "libcrypto",
+                        "libssl",
+                    ],
+                "programs" =>
+                    [
+                        "apps/openssl",
+                    ],
+           },
+        "libraries" =>
+            [
+                "libcrypto",
+                "libssl",
+            ],
+        "programs" =>
+            [
+                "apps/openssl",
+            ],
+        "rawlines" =>
+            [
+            ],
+        "sources" =>
+            {
+                "apps/openssl" =>
+                    [
+                        "apps/openssl.o",
+                    ],
+                "apps/openssl.o" =>
+                    [
+                        "apps/openssl.c",
+                    ],
+                "crypto/aes.o" =>
+                    [
+                        "crypto/aes.c",
+                    ],
+                "crypto/cversion.o" =>
+                    [
+                        "crypto/cversion.c",
+                    ],
+                "crypto/evp.o" =>
+                    [
+                        "crypto/evp.c",
+                    ],
+                "engines/e_dasync.o" =>
+                    [
+                        "engines/e_dasync.c",
+                    ],
+                "engines/dasync" =>
+                    [
+                        "engines/e_dasync.o",
+                    ],
+                "engines/e_ossltest.o" =>
+                    [
+                        "engines/e_ossltest.c",
+                    ],
+                "engines/ossltest" =>
+                    [
+                        "engines/e_ossltest.o",
+                    ],
+                "libcrypto" =>
+                    [
+                        "crypto/aes.c",
+                        "crypto/cversion.c",
+                        "crypto/evp.c",
+                    ],
+                "libssl" =>
+                    [
+                        "ssl/tls.c",
+                    ],
+                "ssl/tls.o" =>
+                    [
+                        "ssl/tls.c",
+                    ],
+            },
+    );
+
+As can be seen, everything in %unified_info is fairly simple suggest
+of information.  Still, it tells us that to build all programs, we
+must build 'apps/openssl', and to build the latter, we will need to
+build all its sources ('apps/openssl.o' in this case) and all the
+other things it depends on (such as 'libssl').  All those dependencies
+need to be built as well, using the same logic, so to build 'libssl',
+we need to build 'ssl/tls.o' as well as 'libcrypto', and to build the
+latter...
+
+
+Build-file templates
+--------------------
+
+Build-file templates are essentially build-files (such as Makefile on
+Unix) with perl code fragments mixed in.  Those perl code fragment
+will generate all the configuration dependent data, including all the
+rules needed to build end product files and intermediary files alike.
+At a minimum, there must be a perl code fragment that defines a set of
+functions that are used to generates specific build-file rules, to
+build static libraries from object files, to build shared libraries
+from static libraries, to programs from object files and libraries,
+etc.
+
+    generatesrc - function that produces build file lines to generate
+                  a source file from some input.
+
+                  It's called like this:
+
+                        generatesrc(src => "PATH/TO/tobegenerated",
+                                    generator => [ "generatingfile", ... ]
+                                    generator_incs => [ "INCL/PATH", ... ]
+                                    generator_deps => [ "dep1", ... ]
+                                    incs => [ "INCL/PATH", ... ],
+                                    deps => [ "dep1", ... ],
+                                    intent => one of "libs", "dso", "bin" );
+
+                  'src' has the name of the file to be generated.
+                  'generator' is the command or part of command to
+                  generate the file, of which the first item is
+                  expected to be the file to generate from.
+                  generatesrc() is expected to analyse and figure out
+                  exactly how to apply that file and how to capture
+                  the result.  'generator_incs' and 'generator_deps'
+                  are include directories and files that the generator
+                  file itself depends on.  'incs' and 'deps' are
+                  include directories and files that are used if $(CC)
+                  is used as an intermediary step when generating the
+                  end product (the file indicated by 'src').  'intent'
+                  indicates what the generated file is going to be
+                  used for.
+
+    src2obj     - function that produces build file lines to build an
+                  object file from source files and associated data.
+
+                  It's called like this:
+
+                        src2obj(obj => "PATH/TO/objectfile",
+                                srcs => [ "PATH/TO/sourcefile", ... ],
+                                deps => [ "dep1", ... ],
+                                incs => [ "INCL/PATH", ... ]
+                                intent => one of "lib", "dso", "bin" );
+
+                  'obj' has the intended object file *without*
+                  extension, src2obj() is expected to add that.
+                  'srcs' has the list of source files to build the
+                  object file, with the first item being the source
+                  file that directly corresponds to the object file.
+                  'deps' is a list of explicit dependencies.  'incs'
+                  is a list of include file directories.  Finally,
+                  'intent' indicates what this object file is going
+                  to be used for.
+
+    obj2lib     - function that produces build file lines to build a
+                  static library file ("libfoo.a" in Unix terms) from
+                  object files.
+
+                  called like this:
+
+                        obj2lib(lib => "PATH/TO/libfile",
+                                objs => [ "PATH/TO/objectfile", ... ]);
+
+                  'lib' has the intended library file name *without*
+                  extension, obj2lib is expected to add that.  'objs'
+                  has the list of object files (also *without*
+                  extension) to build this library.
+
+    libobj2shlib - function that produces build file lines to build a
+                  shareable object library file ("libfoo.so" in Unix
+                  terms) from the corresponding static library file
+                  or object files.
+
+                  called like this:
+
+                        libobj2shlib(shlib => "PATH/TO/shlibfile",
+                                     lib => "PATH/TO/libfile",
+                                     objs => [ "PATH/TO/objectfile", ... ],
+                                     deps => [ "PATH/TO/otherlibfile", ... ]);
+
+                  'lib' has the intended library file name *without*
+                  extension, libobj2shlib is expected to add that.
+                  'shlib' has the corresponding shared library name
+                  *without* extension.  'deps' has the list of other
+                  libraries (also *without* extension) this library
+                  needs to be linked with.  'objs' has the list of
+                  object files (also *without* extension) to build
+                  this library.
+
+                  This function has a choice; it can use the
+                  corresponding static library as input to make the
+                  shared library, or the list of object files.
+
+    obj2dynlib  - function that produces build file lines to build a
+                  dynamically loadable library file ("libfoo.so" on
+                  Unix) from object files.
+
+                  called like this:
+
+                        obj2dynlib(lib => "PATH/TO/libfile",
+                                   objs => [ "PATH/TO/objectfile", ... ],
+                                   deps => [ "PATH/TO/otherlibfile",
+                                   ... ]);
+
+                  This is almost the same as libobj2shlib, but the
+                  intent is to build a shareable library that can be
+                  loaded in runtime (a "plugin"...).  The differences
+                  are subtle, one of the most visible ones is that the
+                  resulting shareable library is produced from object
+                  files only.
+
+    obj2bin     - function that produces build file lines to build an
+                  executable file from object files.
+
+                  called like this:
+
+                        obj2bin(bin => "PATH/TO/binfile",
+                                objs => [ "PATH/TO/objectfile", ... ],
+                                deps => [ "PATH/TO/libfile", ... ]);
+
+                  'bin' has the intended executable file name
+                  *without* extension, obj2bin is expected to add
+                  that.  'objs' has the list of object files (also
+                  *without* extension) to build this library.  'deps'
+                  has the list of library files (also *without*
+                  extension) that the programs needs to be linked
+                  with.
+
+    in2script   - function that produces build file lines to build a
+                  script file from some input.
+
+                  called like this:
+
+                        in2script(script => "PATH/TO/scriptfile",
+                                  sources => [ "PATH/TO/infile", ... ]);
+
+                  'script' has the intended script file name.
+                  'sources' has the list of source files to build the
+                  resulting script from.
+
+Along with the build-file templates is the driving engine
+Configurations/common.tmpl, which looks through all the information in
+%unified_info and generates all the rulesets to build libraries,
+programs and all intermediate files, using the rule generating
+functions defined in the build-file template.
+
+As an example with the smaller build.info set we've seen as an
+example, producing the rules to build 'libcrypto' would result in the
+following calls:
+
+    # Note: libobj2shlib will only be called if shared libraries are
+    # to be produced.
+    # Note 2: libobj2shlib gets both the name of the static library
+    # and the names of all the object files that go into it.  It's up
+    # to the implementation to decide which to use as input.
+    # Note 3: common.tmpl peals off the ".o" extension from all object
+    # files, as the platform at hand may have a different one.
+    libobj2shlib(shlib => "libcrypto",
+                 lib => "libcrypto",
+                 objs => [ "crypto/aes", "crypto/evp", "crypto/cversion" ],
+                 deps => [  ]);
+
+    obj2lib(lib => "libcrypto"
+            objs => [ "crypto/aes", "crypto/evp", "crypto/cversion" ]);
+
+    src2obj(obj => "crypto/aes"
+            srcs => [ "crypto/aes.c" ],
+            deps => [ ],
+            incs => [ "include" ],
+            intent => "lib");
+
+    src2obj(obj => "crypto/evp"
+            srcs => [ "crypto/evp.c" ],
+            deps => [ ],
+            incs => [ "include" ],
+            intent => "lib");
+
+    src2obj(obj => "crypto/cversion"
+            srcs => [ "crypto/cversion.c" ],
+            deps => [ "crypto/buildinf.h" ],
+            incs => [ "include" ],
+            intent => "lib");
+
+    generatesrc(src => "crypto/buildinf.h",
+                generator => [ "util/mkbuildinf.pl", "\"$(CC)",
+                               "$(CFLAGS)\"", "\"$(PLATFORM)\"" ],
+                generator_incs => [ "util" ],
+                generator_deps => [ "util/Foo.pm" ],
+                incs => [ ],
+                deps => [ ],
+                intent => "lib");
+
+The returned strings from all those calls are then concatenated
+together and written to the resulting build-file.
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/common.tmpl b/trunk/3rdparty/openssl-1.1-fit/Configurations/common.tmpl
new file mode 100644
index 000000000..3a466eeb6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/common.tmpl
@@ -0,0 +1,221 @@
+{- # -*- Mode: perl -*-
+
+ use File::Basename;
+
+ # A cache of objects for which a recipe has already been generated
+ my %cache;
+
+ # resolvedepends and reducedepends work in tandem to make sure
+ # there are no duplicate dependencies and that they are in the
+ # right order.  This is especially used to sort the list of
+ # libraries that a build depends on.
+ sub extensionlesslib {
+     my @result = map { $_ =~ /(\.a)?$/; $` } @_;
+     return @result if wantarray;
+     return $result[0];
+ }
+ sub resolvedepends {
+     my $thing = shift;
+     my $extensionlessthing = extensionlesslib($thing);
+     my @listsofar = @_;    # to check if we're looping
+     my @list = @{$unified_info{depends}->{$thing} //
+                      $unified_info{depends}->{$extensionlessthing}};
+     my @newlist = ();
+     if (scalar @list) {
+         foreach my $item (@list) {
+             my $extensionlessitem = extensionlesslib($item);
+             # It's time to break off when the dependency list starts looping
+             next if grep { extensionlesslib($_) eq $extensionlessitem } @listsofar;
+             push @newlist, $item, resolvedepends($item, @listsofar, $item);
+         }
+     }
+     @newlist;
+ }
+ sub reducedepends {
+     my @list = @_;
+     my @newlist = ();
+     my %replace = ();
+     while (@list) {
+         my $item = shift @list;
+         my $extensionlessitem = extensionlesslib($item);
+         if (grep { $extensionlessitem eq extensionlesslib($_) } @list) {
+             if ($item ne $extensionlessitem) {
+                 # If this instance of the library is explicitly static, we
+                 # prefer that to any shared library name, since it must have
+                 # been done on purpose.
+                 $replace{$extensionlessitem} = $item;
+             }
+         } else {
+             push @newlist, $item;
+         }
+     }
+     map { $replace{$_} // $_; } @newlist;
+ }
+
+ # is_installed checks if a given file will be installed (i.e. they are
+ # not defined _NO_INST in build.info)
+ sub is_installed {
+     my $product = shift;
+     if (grep { $product eq $_ }
+         map { (@{$unified_info{install}->{$_}}) }
+         keys %{$unified_info{install}}) {
+         return 1;
+     }
+     return 0;
+ }
+
+ # dogenerate is responsible for producing all the recipes that build
+ # generated source files.  It recurses in case a dependency is also a
+ # generated source file.
+ sub dogenerate {
+     my $src = shift;
+     return "" if $cache{$src};
+     my $obj = shift;
+     my $bin = shift;
+     my %opts = @_;
+     if ($unified_info{generate}->{$src}) {
+         die "$src is generated by Configure, should not appear in build file\n"
+             if ref $unified_info{generate}->{$src} eq "";
+         my $script = $unified_info{generate}->{$src}->[0];
+         $OUT .= generatesrc(src => $src,
+                             generator => $unified_info{generate}->{$src},
+                             generator_incs => $unified_info{includes}->{$script},
+                             generator_deps => $unified_info{depends}->{$script},
+                             deps => $unified_info{depends}->{$src},
+                             incs => $unified_info{includes}->{$obj},
+                             %opts);
+         foreach (@{$unified_info{depends}->{$src}}) {
+             dogenerate($_, $obj, $bin, %opts);
+         }
+     }
+     $cache{$src} = 1;
+ }
+
+ # doobj is responsible for producing all the recipes that build
+ # object files as well as dependency files.
+ sub doobj {
+     my $obj = shift;
+     return "" if $cache{$obj};
+     my $bin = shift;
+     my %opts = @_;
+     if (@{$unified_info{sources}->{$obj}}) {
+         $OUT .= src2obj(obj => $obj,
+                         product => $bin,
+                         srcs => $unified_info{sources}->{$obj},
+                         deps => $unified_info{depends}->{$obj},
+                         incs => $unified_info{includes}->{$obj},
+                         %opts);
+         foreach ((@{$unified_info{sources}->{$obj}},
+                   @{$unified_info{depends}->{$obj}})) {
+             dogenerate($_, $obj, $bin, %opts);
+         }
+     }
+     $cache{$obj} = 1;
+ }
+
+ # dolib is responsible for building libraries.  It will call
+ # libobj2shlib is shared libraries are produced, and obj2lib in all
+ # cases.  It also makes sure all object files for the library are
+ # built.
+ sub dolib {
+     my $lib = shift;
+     return "" if $cache{$lib};
+     unless ($disabled{shared} || $lib =~ /\.a$/) {
+         $OUT .= libobj2shlib(shlib => $unified_info{sharednames}->{$lib},
+                              lib => $lib,
+                              objs => [ @{$unified_info{shared_sources}->{$lib}},
+                                        @{$unified_info{sources}->{$lib}} ],
+                              deps => [ reducedepends(resolvedepends($lib)) ],
+                              installed => is_installed($lib));
+         foreach ((@{$unified_info{shared_sources}->{$lib}},
+                   @{$unified_info{sources}->{$lib}})) {
+             # If this is somehow a compiled object, take care of it that way
+             # Otherwise, it might simply be generated
+             if (defined $unified_info{sources}->{$_}) {
+                 doobj($_, $lib, intent => "lib", installed => is_installed($lib));
+             } else {
+                 dogenerate($_, undef, undef, intent => "lib");
+             }
+         }
+     }
+     $OUT .= obj2lib(lib => $lib,
+                     objs => [ @{$unified_info{sources}->{$lib}} ]);
+     foreach (@{$unified_info{sources}->{$lib}}) {
+         doobj($_, $lib, intent => "lib", installed => is_installed($lib));
+     }
+     $cache{$lib} = 1;
+ }
+
+ # doengine is responsible for building engines.  It will call
+ # obj2dso, and also makes sure all object files for the library
+ # are built.
+ sub doengine {
+     my $lib = shift;
+     return "" if $cache{$lib};
+     $OUT .= obj2dso(lib => $lib,
+                     objs => [ @{$unified_info{sources}->{$lib}},
+                               @{$unified_info{shared_sources}->{$lib}} ],
+                     deps => [ resolvedepends($lib) ],
+                     installed => is_installed($lib));
+     foreach ((@{$unified_info{sources}->{$lib}},
+               @{$unified_info{shared_sources}->{$lib}})) {
+         doobj($_, $lib, intent => "dso", installed => is_installed($lib));
+     }
+     $cache{$lib} = 1;
+ }
+
+ # dobin is responsible for building programs.  It will call obj2bin,
+ # and also makes sure all object files for the library are built.
+ sub dobin {
+     my $bin = shift;
+     return "" if $cache{$bin};
+     my $deps = [ reducedepends(resolvedepends($bin)) ];
+     $OUT .= obj2bin(bin => $bin,
+                     objs => [ @{$unified_info{sources}->{$bin}} ],
+                     deps => $deps,
+                     installed => is_installed($bin));
+     foreach (@{$unified_info{sources}->{$bin}}) {
+         doobj($_, $bin, intent => "bin", installed => is_installed($bin));
+     }
+     $cache{$bin} = 1;
+ }
+
+ # dobin is responsible for building scripts from templates.  It will
+ # call in2script.
+ sub doscript {
+     my $script = shift;
+     return "" if $cache{$script};
+     $OUT .= in2script(script => $script,
+                       sources => $unified_info{sources}->{$script},
+                       installed => is_installed($script));
+     $cache{$script} = 1;
+ }
+
+ sub dodir {
+     my $dir = shift;
+     return "" if !exists(&generatedir) or $cache{$dir};
+     $OUT .= generatedir(dir => $dir,
+                         deps => $unified_info{dirinfo}->{$dir}->{deps},
+                         %{$unified_info{dirinfo}->{$_}->{products}});
+     $cache{$dir} = 1;
+ }
+
+ # Start with populating the cache with all the overrides
+ %cache = map { $_ => 1 } @{$unified_info{overrides}};
+
+ # Build mandatory generated headers
+ foreach (@{$unified_info{depends}->{""}}) { dogenerate($_); }
+
+ # Build all known libraries, engines, programs and scripts.
+ # Everything else will be handled as a consequence.
+ foreach (@{$unified_info{libraries}}) { dolib($_);    }
+ foreach (@{$unified_info{engines}})   { doengine($_); }
+ foreach (@{$unified_info{programs}})  { dobin($_);    }
+ foreach (@{$unified_info{scripts}})   { doscript($_); }
+
+ foreach (sort keys %{$unified_info{dirinfo}})  { dodir($_); }
+
+ # Finally, should there be any applicable BEGINRAW/ENDRAW sections,
+ # they are added here.
+ $OUT .= $_."\n" foreach @{$unified_info{rawlines}};
+-}
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/common0.tmpl b/trunk/3rdparty/openssl-1.1-fit/Configurations/common0.tmpl
new file mode 100644
index 000000000..03acb3e0b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/common0.tmpl
@@ -0,0 +1,31 @@
+{- # -*- Mode: perl -*-
+
+ # Commonly used list of generated files
+ # The reason for the complexity is that the build.info files provide
+ # GENERATE rules for *all* platforms without discrimination, while the
+ # build files only want those for a particular build.  Therefore, we
+ # need to extrapolate exactly what we need to generate.  The way to do
+ # that is to extract all possible source files from diverse tables and
+ # filter out all that are not generated
+ my %generatables =
+     map { $_ => 1 }
+     ( # The sources of stuff may be generated
+         ( map { @{$unified_info{sources}->{$_}} }
+               keys %{$unified_info{sources}} ),
+         $disabled{shared}
+             ? ()
+             : ( map { @{$unified_info{shared_sources}->{$_}} }
+                 keys %{$unified_info{shared_sources}} ),
+         # Things we explicitly depend on are usually generated
+         ( map { $_ eq "" ? () : @{$unified_info{depends}->{$_}} }
+               keys %{$unified_info{depends}} ));
+ our @generated =
+     sort ( ( grep { defined $unified_info{generate}->{$_} }
+              sort keys %generatables ),
+            # Scripts are assumed to be generated, so add thhem too
+            ( grep { defined $unified_info{sources}->{$_} }
+              @{$unified_info{scripts}} ) );
+
+ # Avoid strange output
+ "";
+-}
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/descrip.mms.tmpl b/trunk/3rdparty/openssl-1.1-fit/Configurations/descrip.mms.tmpl
new file mode 100644
index 000000000..0ccd5f075
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/descrip.mms.tmpl
@@ -0,0 +1,1125 @@
+## descrip.mms to build OpenSSL on OpenVMS
+##
+## {- join("\n## ", @autowarntext) -}
+{-
+  use File::Spec::Functions qw/:DEFAULT abs2rel rel2abs/;
+  use File::Basename;
+
+  # Our prefix, claimed when speaking with the VSI folks Tuesday
+  # January 26th 2016
+  our $osslprefix = 'OSSL$';
+  (our $osslprefix_q = $osslprefix) =~ s/\$/\\\$/;
+
+  our $sover_dirname = sprintf "%02d%02d", split(/\./, $config{shlib_version_number});
+  our $osslver = sprintf "%02d%02d", split(/\./, $config{version});
+
+  our $sourcedir = $config{sourcedir};
+  our $builddir = $config{builddir};
+  sub sourcefile {
+      catfile($sourcedir, @_);
+  }
+  sub buildfile {
+      catfile($builddir, @_);
+  }
+  sub sourcedir {
+      catdir($sourcedir, @_);
+  }
+  sub builddir {
+      catdir($builddir, @_);
+  }
+  sub tree {
+      (my $x = shift) =~ s|\]$|...]|;
+      $x
+  }
+  sub move {
+      my $f = catdir(@_);
+      my $b = abs2rel(rel2abs("."),rel2abs($f));
+      $sourcedir = catdir($b,$sourcedir)
+          if !file_name_is_absolute($sourcedir);
+      $builddir = catdir($b,$builddir)
+          if !file_name_is_absolute($builddir);
+      "";
+  }
+
+  # Because we need to make two computations of these data,
+  # we store them in arrays for reuse
+  our @libs =
+      map { (my $x = $_) =~ s/\.a$//; $x }
+      @{$unified_info{libraries}};
+  our @shlibs =
+      map { $unified_info{sharednames}->{$_} || () }
+      grep(!/\.a$/, @{$unified_info{libraries}});
+  our @install_libs =
+      map { (my $x = $_) =~ s/\.a$//; $x }
+      @{$unified_info{install}->{libraries}};
+  our @install_shlibs =
+      map { $unified_info{sharednames}->{$_} || () }
+      grep(!/\.a$/, @{$unified_info{install}->{libraries}});
+
+  # This is a horrible hack, but is needed because recursive inclusion of files
+  # in different directories does not work well with HP C.
+  my $sd = sourcedir("crypto", "async", "arch");
+  foreach (grep /\[\.crypto\.async\.arch\].*\.o$/, keys %{$unified_info{sources}}) {
+      (my $x = $_) =~ s|\.o$|.OBJ|;
+      $unified_info{before}->{$x}
+          = qq(arch_include = F\$PARSE("$sd","A.;",,,"SYNTAX_ONLY") - "A.;"
+        define arch 'arch_include');
+      $unified_info{after}->{$x}
+          = qq(deassign arch);
+  }
+  my $sd1 = sourcedir("ssl","record");
+  my $sd2 = sourcedir("ssl","statem");
+  my @ssl_locl_users = grep(/^\[\.(?:ssl\.(?:record|statem)|test)\].*\.o$/,
+                            keys %{$unified_info{sources}});
+  foreach (@ssl_locl_users) {
+      (my $x = $_) =~ s|\.o$|.OBJ|;
+      $unified_info{before}->{$x}
+          = qq(record_include = F\$PARSE("$sd1","A.;",,,"SYNTAX_ONLY") - "A.;"
+        define record 'record_include'
+        statem_include = F\$PARSE("$sd2","A.;",,,"SYNTAX_ONLY") - "A.;"
+        define statem 'statem_include');
+      $unified_info{after}->{$x}
+          = qq(deassign statem
+        deassign record);
+  }
+  # This makes sure things get built in the order they need
+  # to. You're welcome.
+  sub dependmagic {
+      my $target = shift;
+
+      return "$target : build_generated\n\t\pipe \$(MMS) \$(MMSQUALIFIERS) depend && \$(MMS) \$(MMSQUALIFIERS) _$target\n_$target";
+  }
+  #use Data::Dumper;
+  #print STDERR "DEBUG: before:\n", Dumper($unified_info{before});
+  #print STDERR "DEBUG: after:\n", Dumper($unified_info{after});
+  "";
+-}
+PLATFORM={- $config{target} -}
+OPTIONS={- $config{options} -}
+CONFIGURE_ARGS=({- join(", ",quotify_l(@{$config{perlargv}})) -})
+SRCDIR={- $config{sourcedir} -}
+BLDDIR={- $config{builddir} -}
+
+# Allow both V and VERBOSE to indicate verbosity.  This only applies
+# to testing.
+VERBOSE=$(V)
+
+VERSION={- $config{version} -}
+MAJOR={- $config{major} -}
+MINOR={- $config{minor} -}
+SHLIB_VERSION_NUMBER={- $config{shlib_version_number} -}
+SHLIB_VERSION_HISTORY={- $config{shlib_version_history} -}
+SHLIB_MAJOR={- $config{shlib_major} -}
+SHLIB_MINOR={- $config{shlib_minor} -}
+SHLIB_TARGET={- $target{shared_target} -}
+
+EXE_EXT=.EXE
+LIB_EXT=.OLB
+SHLIB_EXT=.EXE
+OBJ_EXT=.OBJ
+DEP_EXT=.D
+
+LIBS={- join(", ", map { "-\n\t".$_.".OLB" } @libs) -}
+SHLIBS={- join(", ", map { "-\n\t".$_.".EXE" } @shlibs) -}
+ENGINES={- join(", ", map { "-\n\t".$_.".EXE" } @{$unified_info{engines}}) -}
+PROGRAMS={- join(", ", map { "-\n\t".$_.".EXE" } @{$unified_info{programs}}) -}
+SCRIPTS={- join(", ", map { "-\n\t".$_ } @{$unified_info{scripts}}) -}
+{- output_off() if $disabled{makedepend}; "" -}
+DEPS={- our @deps = map { (my $x = $_) =~ s|\.o$|\$(DEP_EXT)|; $x; }
+                    grep { $unified_info{sources}->{$_}->[0] =~ /\.c$/ }
+                    keys %{$unified_info{sources}};
+        join(", ", map { "-\n\t".$_ } @deps); -}
+{- output_on() if $disabled{makedepend}; "" -}
+GENERATED_MANDATORY={- join(", ", map { "-\n\t".$_ } @{$unified_info{depends}->{""}} ) -}
+GENERATED={- # common0.tmpl provides @generated
+             join(", ", map { (my $x = $_) =~ s|\.[sS]$|.asm|; "-\n\t".$x }
+                        @generated) -}
+
+INSTALL_LIBS={- join(", ", map { "-\n\t".$_.".OLB" } @install_libs) -}
+INSTALL_SHLIBS={- join(", ", map { "-\n\t".$_.".EXE" } @install_shlibs) -}
+INSTALL_ENGINES={- join(", ", map { "-\n\t".$_.".EXE" } @{$unified_info{install}->{engines}}) -}
+INSTALL_PROGRAMS={- join(", ", map { "-\n\t".$_.".EXE" } @{$unified_info{install}->{programs}}) -}
+{- output_off() if $disabled{apps}; "" -}
+BIN_SCRIPTS=[.tools]c_rehash.pl
+MISC_SCRIPTS=[.apps]CA.pl, [.apps]tsget.pl
+{- output_on() if $disabled{apps}; "" -}
+
+APPS_OPENSSL={- use File::Spec::Functions;
+                catfile("apps","openssl") -}
+
+# DESTDIR is for package builders so that they can configure for, say,
+# SYS$COMMON:[OPENSSL] and yet have everything installed in STAGING:[USER].
+# In that case, configure with --prefix=SYS$COMMON:[OPENSSL] and then run
+# MMS with /MACROS=(DESTDIR=STAGING:[USER]).  The result will end up in
+# STAGING:[USER.OPENSSL].
+# Normally it is left empty.
+DESTDIR=
+
+# Do not edit this manually. Use Configure --prefix=DIR to change this!
+INSTALLTOP={- our $installtop =
+                  catdir($config{prefix}) || "SYS\$COMMON:[OPENSSL]";
+              $installtop -}
+SYSTARTUP={- catdir($installtop, '[.SYS$STARTUP]'); -}
+# This is the standard central area to store certificates, private keys...
+OPENSSLDIR={- catdir($config{openssldir}) or
+              $config{prefix} ? catdir($config{prefix},"COMMON")
+                              : "SYS\$COMMON:[OPENSSL-COMMON]" -}
+# The same, but for C
+OPENSSLDIR_C={- $osslprefix -}DATAROOT:[000000]
+# Where installed engines reside, for C
+ENGINESDIR_C={- $osslprefix -}ENGINES{- $sover_dirname.$target{pointer_size} -}:
+
+##### User defined commands and flags ################################
+
+CC={- $config{CC} -}
+CPP={- $config{CPP} -}
+DEFINES={- our $defines1 = join('', map { ",$_" } @{$config{CPPDEFINES}}) -}
+INCLUDES={- our $includes1 = join(',', @{$config{CPPINCLUDES}}) -}
+CPPFLAGS={- our $cppflags1 = join('', @{$config{CPPFLAGS}}) -}
+CFLAGS={- join('', @{$config{CFLAGS}}) -}
+LDFLAGS={- join('', @{$config{LFLAGS}}) -}
+EX_LIBS={- join('', map { ",$_" } @{$config{LDLIBS}}) -}
+
+PERL={- $config{PERL} -}
+
+AS={- $config{AS} -}
+ASFLAGS={- join(' ', @{$config{ASFLAGS}}) -}
+
+##### Special command flags ##########################################
+
+ASOUTFLAG={- $target{asoutflag} -}$(OSSL_EMPTY)
+
+##### Project flags ##################################################
+
+# Variables starting with CNF_ are common variables for all product types
+
+CNF_ASFLAGS={- join('', $target{asflags} || (),
+                        @{$config{asflags}}) -}
+CNF_DEFINES={- our $defines2 = join('', map { ",$_" } @{$target{defines}},
+                                                      @{$config{defines}}) -}
+CNF_INCLUDES={- our $includes2 = join(',', @{$target{includes}},
+                                           @{$config{includes}}) -}
+CNF_CPPFLAGS={- our $cppflags2 = join('', $target{cppflags} || (),
+                                          @{$config{cppflags}}) -}
+CNF_CFLAGS={- join('', $target{cflags} || (),
+                       @{$config{cflags}}) -}
+CNF_CXXFLAGS={- join('', $target{cxxflags} || (),
+                         @{$config{cxxflags}}) -}
+CNF_LDFLAGS={- join('', $target{lflags} || (),
+                        @{$config{lflags}}) -}
+CNF_EX_LIBS={- join('', map{ ",$_" } @{$target{ex_libs}},
+                                     @{$config{ex_libs}}) -}
+
+# Variables starting with LIB_ are used to build library object files
+# and shared libraries.
+# Variables starting with DSO_ are used to build DSOs and their object files.
+# Variables starting with BIN_ are used to build programs and their object
+# files.
+
+LIB_ASFLAGS={- join(' ', $target{lib_asflags} || (),
+                         @{$config{lib_asflags}},
+                         '$(CNF_ASFLAGS)', '$(ASFLAGS)') -}
+LIB_DEFINES={- our $lib_defines =
+               join('', (map { ",$_" } @{$target{lib_defines}},
+                                       @{$target{shared_defines}},
+                                       @{$config{lib_defines}},
+                                       @{$config{shared_defines}}));
+               join('', $lib_defines,
+                        (map { ",$_" } 'OPENSSLDIR="""$(OPENSSLDIR_C)"""',
+                                       'ENGINESDIR="""$(ENGINESDIR_C)"""'),
+                        '$(CNF_DEFINES)', '$(DEFINES)') -}
+LIB_INCLUDES={- our $lib_includes =
+                join(',', @{$target{lib_includes}},
+                          @{$target{shared_includes}},
+                          @{$config{lib_includes}},
+                          @{$config{shared_includes}}) -}
+LIB_CPPFLAGS={- our $lib_cppflags =
+                join('', $target{lib_cppflags} || (),
+                         $target{shared_cppflags} || (),
+                         @{$config{lib_cppflags}},
+                         @{$config{shared_cppflag}});
+                join('', "'qual_includes'",
+                         '/DEFINE=(__dummy$(LIB_DEFINES))',
+                         $lib_cppflags,
+                         '$(CNF_CPPFLAGS)', '$(CPPFLAGS)') -}
+LIB_CFLAGS={- join('', $target{lib_cflags} || (),
+                       $target{shared_cflag} || (),
+                       @{$config{lib_cflags}},
+                       @{$config{shared_cflag}},
+                       '$(CNF_CFLAGS)', '$(CFLAGS)') -}
+LIB_LDFLAGS={- join('', $target{lib_lflags} || (),
+                        $target{shared_ldflag} || (),
+                        @{$config{lib_lflags}},
+                        @{$config{shared_ldflag}},
+                        '$(CNF_LDFLAGS)', '$(LDFLAGS)') -}
+LIB_EX_LIBS=$(CNF_EX_LIBS)$(EX_LIBS)
+DSO_ASFLAGS={- join(' ', $target{dso_asflags} || (),
+                         $target{module_asflags} || (),
+                         @{$config{dso_asflags}},
+                         @{$config{module_asflags}},
+                         '$(CNF_ASFLAGS)', '$(ASFLAGS)') -}
+DSO_DEFINES={- join('', (map { ",$_" } @{$target{dso_defines}},
+                                       @{$target{module_defines}},
+                                       @{$config{dso_defines}},
+                                       @{$config{module_defines}}),
+                        '$(CNF_DEFINES)', '$(DEFINES)') -}
+DSO_INCLUDES={- join(',', @{$target{dso_includes}},
+                          @{$target{module_includes}},
+                          @{$config{dso_includes}},
+                          @{$config{module_includes}}) -}
+DSO_CPPFLAGS={- join('', "'qual_includes'",
+                         '/DEFINE=(__dummy$(DSO_DEFINES))',
+                         $target{dso_cppflags} || (),
+                         $target{module_cppflags} || (),
+                         @{$config{dso_cppflags}},
+                         @{$config{module_cppflags}},
+                         '$(CNF_CPPFLAGS)', '$(CPPFLAGS)') -}
+DSO_CFLAGS={- join('', $target{dso_cflags} || (),
+                       $target{module_cflags} || (),
+                       @{$config{dso_cflags}},
+                       @{$config{module_cflags}},
+                       '$(CNF_CFLAGS)', '$(CFLAGS)') -}
+DSO_LDFLAGS={- join('', $target{dso_lflags} || (),
+                        $target{module_ldflags} || (),
+                        @{$config{dso_lflags}},
+                        @{$config{module_ldflags}},
+                        '$(CNF_LDFLAGS)', '$(LDFLAGS)') -}
+DSO_EX_LIBS=$(CNF_EX_LIBS) $(EX_LIBS)
+BIN_ASFLAGS={- join(' ', $target{bin_asflags} || (),
+                         @{$config{bin_asflags}},
+                         '$(CNF_ASFLAGS)', '$(ASFLAGS)') -}
+BIN_DEFINES={- join('', (map { ",$_" } @{$target{bin_defines}},
+                                       @{$config{bin_defines}}),
+                        '$(CNF_DEFINES)', '$(DEFINES)') -}
+BIN_INCLUDES={- join(',', @{$target{bin_includes}},
+                          @{$config{bin_includes}}) -}
+BIN_CPPFLAGS={- join('', "'qual_includes'",
+                         '/DEFINE=(__dummy$(DSO_DEFINES))',
+                         $target{bin_cppflags} || (),
+                         @{$config{bin_cppflag}},
+                         '$(CNF_CPPFLAGS)', '$(CPPFLAGS)') -}
+BIN_CFLAGS={- join('', $target{bin_cflag} || (),
+                       @{$config{bin_cflag}},
+                       '$(CNF_CFLAGS)', '$(CFLAGS)') -}
+BIN_LDFLAGS={- join('', $target{bin_lflags} || (),
+                        @{$config{bin_lflags}} || (),
+                        '$(CNF_LDFLAGS)', '$(LDFLAGS)') -}
+BIN_EX_LIBS=$(CNF_EX_LIBS) $(EX_LIBS)
+NO_INST_LIB_CFLAGS={- join('', $target{no_inst_lib_cflags}
+                               // $target{lib_cflags}
+                               // (),
+                               $target{shared_cflag} || (),
+                               @{$config{lib_cflags}},
+                               @{$config{shared_cflag}},
+                               '$(CNF_CFLAGS)', '$(CFLAGS)') -}
+NO_INST_DSO_CFLAGS={- join('', $target{no_inst_lib_cflags}
+                               // $target{lib_cflags}
+                               // (),
+                               $target{dso_cflags} || (),
+                               @{$config{lib_cflags}},
+                               @{$config{dso_cflags}},
+                               '$(CNF_CFLAGS)', '$(CFLAGS)') -}
+NO_INST_BIN_CFLAGS={- join('', $target{no_inst_bin_cflags}
+                               // $target{bin_cflags}
+                               // (),
+                               @{$config{bin_cflags}},
+                               '$(CNF_CFLAGS)', '$(CFLAGS)') -}
+
+PERLASM_SCHEME={- $target{perlasm_scheme} -}
+
+# CPPFLAGS_Q is used for one thing only: to build up buildinf.h
+CPPFLAGS_Q={- (my $c = $lib_cppflags.$cppflags2.$cppflags1) =~ s|"|""|g;
+              (my $d = $lib_defines.$defines2.$defines1) =~ s|"|""|g;
+              my $i = join(',', $lib_includes || (), $includes2 || (),
+                                $includes1 || ());
+              my $x = $c;
+              $x .= "/INCLUDE=($i)" if $i;
+              $x .= "/DEFINE=($d)" if $d;
+              $x; -}
+
+# .FIRST and .LAST are special targets with MMS and MMK.
+# The defines in there are for C.  includes that look like
+# this:
+#
+#    #include <openssl/foo.h>
+#    #include "internal/bar.h"
+#
+# will use the logical names to find the files.  Expecting
+# DECompHP C to find files in subdirectories of whatever was
+# given with /INCLUDE is a fantasy, unfortunately.
+NODEBUG=@
+.FIRST :
+        $(NODEBUG) openssl_inc1 = F$PARSE("[.include.openssl]","A.;",,,"syntax_only") - "A.;"
+        $(NODEBUG) openssl_inc2 = F$PARSE("{- catdir($config{sourcedir},"[.include.openssl]") -}","A.;",,,"SYNTAX_ONLY") - "A.;"
+        $(NODEBUG) internal_inc1 = F$PARSE("[.crypto.include.internal]","A.;",,,"SYNTAX_ONLY") - "A.;"
+        $(NODEBUG) internal_inc2 = F$PARSE("{- catdir($config{sourcedir},"[.include.internal]") -}","A.;",,,"SYNTAX_ONLY") - "A.;"
+        $(NODEBUG) internal_inc3 = F$PARSE("{- catdir($config{sourcedir},"[.crypto.include.internal]") -}","A.;",,,"SYNTAX_ONLY") - "A.;"
+        $(NODEBUG) DEFINE openssl 'openssl_inc1','openssl_inc2'
+        $(NODEBUG) DEFINE internal 'internal_inc1','internal_inc2','internal_inc3'
+        $(NODEBUG) staging_dir = "$(DESTDIR)"
+        $(NODEBUG) staging_instdir = ""
+        $(NODEBUG) staging_datadir = ""
+        $(NODEBUG) IF staging_dir .NES. "" THEN -
+                staging_instdir = F$PARSE("A.;",staging_dir,"[]",,"SYNTAX_ONLY")
+        $(NODEBUG) IF staging_instdir - "]A.;" .NES. staging_instdir THEN -
+                staging_instdir = staging_instdir - "]A.;" + ".OPENSSL-INSTALL]"
+        $(NODEBUG) IF staging_instdir - "A.;" .NES. staging_instdir THEN -
+                staging_instdir = staging_instdir - "A.;" + "[OPENSSL-INSTALL]"
+        $(NODEBUG) IF staging_dir .NES. "" THEN -
+                staging_datadir = F$PARSE("A.;",staging_dir,"[]",,"SYNTAX_ONLY")
+        $(NODEBUG) IF staging_datadir - "]A.;" .NES. staging_datadir THEN -
+                staging_datadir = staging_datadir - "]A.;" + ".OPENSSL-COMMON]"
+        $(NODEBUG) IF staging_datadir - "A.;" .NES. staging_datadir THEN -
+                staging_datadir = staging_datadir - "A.;" + "[OPENSSL-COMMON]"
+        $(NODEBUG) !
+        $(NODEBUG) ! Installation logical names
+        $(NODEBUG) !
+        $(NODEBUG) installtop = F$PARSE(staging_instdir,"$(INSTALLTOP)","[]A.;",,"SYNTAX_ONLY,NO_CONCEAL") - ".][000000" - "[000000." - "][" - "]A.;" + ".]"
+        $(NODEBUG) datatop = F$PARSE(staging_datadir,"$(OPENSSLDIR)","[]A.;",,"SYNTAX_ONLY,NO_CONCEAL") - ".][000000" - "[000000." - "][" - "]A.;" + ".]"
+        $(NODEBUG) DEFINE ossl_installroot 'installtop'
+        $(NODEBUG) DEFINE ossl_dataroot 'datatop'
+        $(NODEBUG) !
+        $(NODEBUG) ! Figure out the architecture
+        $(NODEBUG) !
+        $(NODEBUG) arch = f$edit( f$getsyi( "arch_name"), "upcase")
+        $(NODEBUG) !
+        $(NODEBUG) ! Set up logical names for the libraries, so LINK and
+        $(NODEBUG) ! running programs can use them.
+        $(NODEBUG) !
+        $(NODEBUG) {- join("\n\t\$(NODEBUG) ", map { "DEFINE ".uc($_)." 'F\$ENV(\"DEFAULT\")'".uc($_)."\$(SHLIB_EXT)" } @shlibs) || "!" -}
+
+.LAST :
+        $(NODEBUG) {- join("\n\t\$(NODEBUG) ", map { "DEASSIGN ".uc($_) } @shlibs) || "!" -}
+        $(NODEBUG) DEASSIGN ossl_dataroot
+        $(NODEBUG) DEASSIGN ossl_installroot
+        $(NODEBUG) DEASSIGN internal
+        $(NODEBUG) DEASSIGN openssl
+.DEFAULT :
+        @ ! MMS cannot handle no actions...
+
+# The main targets ###################################################
+
+{- dependmagic('all'); -} : build_libs_nodep, build_engines_nodep, build_programs_nodep
+{- dependmagic('build_libs'); -} : build_libs_nodep
+{- dependmagic('build_engines'); -} : build_engines_nodep
+{- dependmagic('build_programs'); -} : build_programs_nodep
+
+build_generated : $(GENERATED_MANDATORY)
+build_libs_nodep : $(LIBS), $(SHLIBS)
+build_engines_nodep : $(ENGINES)
+build_programs_nodep : $(PROGRAMS), $(SCRIPTS)
+
+# Kept around for backward compatibility
+build_apps build_tests : build_programs
+
+# Convenience target to prebuild all generated files, not just the mandatory
+# ones
+build_all_generated : $(GENERATED_MANDATORY) $(GENERATED)
+	@ ! {- output_off() if $disabled{makedepend}; "" -}
+	@ WRITE SYS$OUTPUT "Warning: consider configuring with no-makedepend, because if"
+	@ WRITE SYS$OUTPUT "         target system doesn't have $(PERL),"
+	@ WRITE SYS$OUTPUT "         then make will fail..."
+	@ ! {- output_on() if $disabled{makedepend}; "" -}
+
+test : tests
+{- dependmagic('tests'); -} : build_programs_nodep, build_engines_nodep
+        @ ! {- output_off() if $disabled{tests}; "" -}
+        SET DEFAULT [.test]{- move("test") -}
+        CREATE/DIR [.test-runs]
+        DEFINE SRCTOP {- sourcedir() -}
+        DEFINE BLDTOP {- builddir() -}
+        DEFINE RESULT_D {- builddir(qw(test test-runs)) -}
+        DEFINE OPENSSL_ENGINES {- builddir("engines") -}
+        DEFINE OPENSSL_DEBUG_MEMORY "on"
+        IF "$(VERBOSE)" .NES. "" THEN DEFINE VERBOSE "$(VERBOSE)"
+        $(PERL) {- sourcefile("test", "run_tests.pl") -} $(TESTS)
+        DEASSIGN OPENSSL_DEBUG_MEMORY
+        DEASSIGN OPENSSL_ENGINES
+        DEASSIGN BLDTOP
+        DEASSIGN SRCTOP
+        SET DEFAULT [-]{- move("..") -}
+        @ ! {- if ($disabled{tests}) { output_on(); } else { output_off(); } "" -}
+        @ WRITE SYS$OUTPUT "Tests are not supported with your chosen Configure options"
+        @ ! {- output_on() if !$disabled{tests}; "" -}
+
+list-tests :
+        @ ! {- output_off() if $disabled{tests}; "" -}
+        @ DEFINE SRCTOP {- sourcedir() -}
+        @ $(PERL) {- sourcefile("test", "run_tests.pl") -} list
+        @ DEASSIGN SRCTOP
+        @ ! {- if ($disabled{tests}) { output_on(); } else { output_off(); } "" -}
+        @ WRITE SYS$OUTPUT "Tests are not supported with your chosen Configure options"
+        @ ! {- output_on() if !$disabled{tests}; "" -}
+
+install : install_sw install_ssldirs install_docs
+        @ WRITE SYS$OUTPUT ""
+        @ WRITE SYS$OUTPUT "######################################################################"
+        @ WRITE SYS$OUTPUT ""
+        @ IF "$(DESTDIR)" .EQS. "" THEN -
+             PIPE ( WRITE SYS$OUTPUT "Installation complete" ; -
+                    WRITE SYS$OUTPUT "" ; -
+                    WRITE SYS$OUTPUT "Run @$(SYSTARTUP)openssl_startup{- $osslver -} to set up logical names" ; -
+                    WRITE SYS$OUTPUT "then run @$(SYSTARTUP)openssl_utils{- $osslver -} to define commands" ; -
+                    WRITE SYS$OUTPUT "" )
+        @ IF "$(DESTDIR)" .NES. "" THEN -
+             PIPE ( WRITE SYS$OUTPUT "Staging installation complete" ; -
+                    WRITE SYS$OUTPUT "" ; -
+                    WRITE SYS$OUTPUT "Finish or package in such a way that the contents of the directory tree" ; -
+                    WRITE SYS$OUTPUT staging_instdir ; -
+                    WRITE SYS$OUTPUT "ends up in $(INSTALLTOP)," ; -
+                    WRITE SYS$OUTPUT "and that the contents of the contents of the directory tree" ; -
+                    WRITE SYS$OUTPUT staging_datadir ; -
+                    WRITE SYS$OUTPUT "ends up in $(OPENSSLDIR)" ; -
+                    WRITE SYS$OUTPUT "" ; -
+                    WRITE SYS$OUTPUT "When in its final destination," ; -
+                    WRITE SYS$OUTPUT "Run @$(SYSTARTUP)openssl_startup{- $osslver -} to set up logical names" ; -
+                    WRITE SYS$OUTPUT "then run @$(SYSTARTUP)openssl_utils{- $osslver -} to define commands" ; -
+                    WRITE SYS$OUTPUT "" )
+
+check_install :
+        spawn/nolog @ossl_installroot:[SYSTEST]openssl_ivp{- $osslver -}.com
+
+uninstall : uninstall_docs uninstall_sw
+
+# Because VMS wants the generation number (or *) to delete files, we can't
+# use $(LIBS), $(PROGRAMS), $(GENERATED) and $(ENGINES)directly.
+libclean :
+        {- join("\n\t", map { "- DELETE $_.OLB;*" } @libs) || "@ !" -}
+        {- join("\n\t", map { "- DELETE $_.EXE;*,$_.MAP;*" } @shlibs) || "@ !" -}
+
+clean : libclean
+        {- join("\n\t", map { "- DELETE $_.EXE;*,$_.OPT;*" } @{$unified_info{programs}}) || "@ !" -}
+        {- join("\n\t", map { "- DELETE $_.EXE;*,$_.OPT;*" } @{$unified_info{engines}}) || "@ !" -}
+        {- join("\n\t", map { "- DELETE $_;*" } @{$unified_info{scripts}}) || "@ !" -}
+        {- join("\n\t", map { "- DELETE $_;*" } @{$unified_info{depends}->{""}}) || "@ !" -}
+        {- join("\n\t", map { "- DELETE $_;*" } @generated) || "@ !" -}
+        - DELETE [...]*.MAP;*
+        - DELETE [...]*.D;*
+        - DELETE [...]*.OBJ;*,*.LIS;*
+        - DELETE []CXX$DEMANGLER_DB.;*
+        - DELETE [.VMS]openssl_startup.com;*
+        - DELETE [.VMS]openssl_shutdown.com;*
+        - DELETE []vmsconfig.pm;*
+
+distclean : clean
+        - DELETE configdata.pm;*
+        - DELETE descrip.mms;*
+
+depend : descrip.mms
+descrip.mms : FORCE
+	@ ! {- output_off() if $disabled{makedepend}; "" -}
+	@ $(PERL) {- sourcefile("util", "add-depends.pl") -} "VMS C"
+	@ ! {- output_on() if $disabled{makedepend}; "" -}
+
+# Install helper targets #############################################
+
+install_sw : install_dev install_engines install_runtime -
+             install_startup install_ivp
+
+uninstall_sw : uninstall_dev uninstall_engines uninstall_runtime -
+               uninstall_startup uninstall_ivp
+
+install_docs : install_html_docs
+
+uninstall_docs : uninstall_html_docs
+
+install_ssldirs : check_INSTALLTOP
+        - CREATE/DIR/PROT=(S:RWED,O:RWE,G:RE,W:RE) OSSL_DATAROOT:[000000]
+        IF F$SEARCH("OSSL_DATAROOT:[000000]CERTS.DIR;1") .EQS. "" THEN -
+                CREATE/DIR/PROT=(S:RWED,O:RWE,G:RE,W:RE) OSSL_DATAROOT:[CERTS]
+        IF F$SEARCH("OSSL_DATAROOT:[000000]PRIVATE.DIR;1") .EQS. "" THEN -
+                CREATE/DIR/PROT=(S:RWED,O:RWE,G,W) OSSL_DATAROOT:[PRIVATE]
+        IF F$SEARCH("OSSL_DATAROOT:[000000]MISC.DIR;1") .EQS. "" THEN -
+                CREATE/DIR/PROT=(S:RWED,O:RWE,G,W) OSSL_DATAROOT:[MISC]
+        COPY/PROT=W:RE $(MISC_SCRIPTS) OSSL_DATAROOT:[MISC]
+        @ ! Install configuration file
+        COPY/PROT=W:R {- sourcefile("apps", "openssl-vms.cnf") -} -
+                ossl_dataroot:[000000]openssl.cnf-dist
+        IF F$SEARCH("OSSL_DATAROOT:[000000]openssl.cnf") .EQS. "" THEN -
+                COPY/PROT=W:R {- sourcefile("apps", "openssl-vms.cnf") -} -
+                        ossl_dataroot:[000000]openssl.cnf
+        @ ! Install CTLOG configuration file
+        COPY/PROT=W:R {- sourcefile("apps", "ct_log_list.cnf") -} -
+                ossl_dataroot:[000000]ct_log_list.cnf-dist
+        IF F$SEARCH("OSSL_DATAROOT:[000000]ct_log_list.cnf") .EQS. "" THEN -
+                COPY/PROT=W:R {- sourcefile("apps", "ct_log_list.cnf") -} -
+                        ossl_dataroot:[000000]ct_log_list.cnf
+
+install_dev : check_INSTALLTOP install_runtime_libs
+        @ WRITE SYS$OUTPUT "*** Installing development files"
+        @ ! Install header files
+        - CREATE/DIR ossl_installroot:[include.openssl]
+        COPY/PROT=W:R openssl:*.h ossl_installroot:[include.openssl]
+        @ ! Install static (development) libraries
+        - CREATE/DIR ossl_installroot:[LIB.'arch']
+        {- join("\n        ",
+                map { "COPY/PROT=W:R $_.OLB ossl_installroot:[LIB.'arch']" }
+                @install_libs) -}
+
+install_engines : check_INSTALLTOP install_runtime_libs build_engines
+        @ {- output_off() unless scalar @{$unified_info{engines}}; "" -} !
+        @ WRITE SYS$OUTPUT "*** Installing engines"
+        - CREATE/DIR ossl_installroot:[ENGINES{- $sover_dirname.$target{pointer_size} -}.'arch']
+        {- join("\n        ",
+                map { "COPY/PROT=W:RE $_.EXE ossl_installroot:[ENGINES$sover_dirname$target{pointer_size}.'arch']" }
+                @{$unified_info{install}->{engines}}) -}
+        @ {- output_on() unless scalar @{$unified_info{engines}}; "" -} !
+
+install_runtime : install_programs
+
+install_runtime_libs : check_INSTALLTOP build_libs
+        @ {- output_off() if $disabled{shared}; "" -} !
+        @ WRITE SYS$OUTPUT "*** Installing shareable images"
+        @ ! Install shared (runtime) libraries
+        - CREATE/DIR ossl_installroot:[LIB.'arch']
+        {- join("\n        ",
+                map { "COPY/PROT=W:R $_.EXE ossl_installroot:[LIB.'arch']" }
+                @install_shlibs) -}
+        @ {- output_on() if $disabled{shared}; "" -} !
+
+install_programs : check_INSTALLTOP install_runtime_libs build_programs
+        @ {- output_off() if $disabled{apps}; "" -} !
+        @ ! Install the main program
+        - CREATE/DIR ossl_installroot:[EXE.'arch']
+        COPY/PROT=W:RE [.APPS]openssl.EXE -
+                ossl_installroot:[EXE.'arch']openssl{- $osslver -}.EXE
+        @ ! Install scripts
+        COPY/PROT=W:RE $(BIN_SCRIPTS) ossl_installroot:[EXE]
+        @ ! {- output_on() if $disabled{apps}; "" -}
+
+install_startup : [.VMS]openssl_startup.com [.VMS]openssl_shutdown.com -
+                 [.VMS]openssl_utils.com, check_INSTALLTOP
+        - CREATE/DIR ossl_installroot:[SYS$STARTUP]
+        COPY/PROT=W:RE [.VMS]openssl_startup.com -
+                ossl_installroot:[SYS$STARTUP]openssl_startup{- $osslver -}.com
+        COPY/PROT=W:RE [.VMS]openssl_shutdown.com -
+                ossl_installroot:[SYS$STARTUP]openssl_shutdown{- $osslver -}.com
+        COPY/PROT=W:RE [.VMS]openssl_utils.com -
+                ossl_installroot:[SYS$STARTUP]openssl_utils{- $osslver -}.com
+
+install_ivp : [.VMS]openssl_ivp.com check_INSTALLTOP
+        - CREATE/DIR ossl_installroot:[SYSTEST]
+        COPY/PROT=W:RE [.VMS]openssl_ivp.com -
+                ossl_installroot:[SYSTEST]openssl_ivp{- $osslver -}.com
+
+[.VMS]openssl_startup.com : vmsconfig.pm {- sourcefile("VMS", "openssl_startup.com.in") -}
+        - CREATE/DIR [.VMS]
+        $(PERL) "-I." "-Mvmsconfig" {- sourcefile("util", "dofile.pl") -} -
+                {- sourcefile("VMS", "openssl_startup.com.in") -} -
+                > [.VMS]openssl_startup.com
+
+[.VMS]openssl_utils.com : vmsconfig.pm {- sourcefile("VMS", "openssl_utils.com.in") -}
+        - CREATE/DIR [.VMS]
+        $(PERL) "-I." "-Mvmsconfig" {- sourcefile("util", "dofile.pl") -} -
+                {- sourcefile("VMS", "openssl_utils.com.in") -} -
+                > [.VMS]openssl_utils.com
+
+[.VMS]openssl_shutdown.com : vmsconfig.pm {- sourcefile("VMS", "openssl_shutdown.com.in") -}
+        - CREATE/DIR [.VMS]
+        $(PERL) "-I." "-Mvmsconfig" {- sourcefile("util", "dofile.pl") -} -
+                {- sourcefile("VMS", "openssl_shutdown.com.in") -} -
+                > [.VMS]openssl_shutdown.com
+
+[.VMS]openssl_ivp.com : vmsconfig.pm {- sourcefile("VMS", "openssl_ivp.com.in") -}
+        - CREATE/DIR [.VMS]
+        $(PERL) "-I." "-Mvmsconfig" {- sourcefile("util", "dofile.pl") -} -
+                {- sourcefile("VMS", "openssl_ivp.com.in") -} -
+                > [.VMS]openssl_ivp.com
+
+vmsconfig.pm : configdata.pm
+        OPEN/WRITE/SHARE=READ CONFIG []vmsconfig.pm
+        WRITE CONFIG "package vmsconfig;"
+        WRITE CONFIG "use strict; use warnings;"
+        WRITE CONFIG "use Exporter;"
+        WRITE CONFIG "our @ISA = qw(Exporter);"
+        WRITE CONFIG "our @EXPORT = qw(%config %target %withargs %unified_info %disabled);"
+        WRITE CONFIG "our %config = ("
+        WRITE CONFIG "  target => '","{- $config{target} -}","',"
+        WRITE CONFIG "  version => '","{- $config{version} -}","',"
+        WRITE CONFIG "  shlib_version_number => '","{- $config{shlib_version_number} -}","',"
+        WRITE CONFIG "  shlib_major => '","{- $config{shlib_major} -}","',"
+        WRITE CONFIG "  shlib_minor => '","{- $config{shlib_minor} -}","',"
+        WRITE CONFIG "  no_shared => '","{- $disabled{shared} -}","',"
+        WRITE CONFIG "  INSTALLTOP => '$(INSTALLTOP)',"
+        WRITE CONFIG "  OPENSSLDIR => '$(OPENSSLDIR)',"
+        WRITE CONFIG "  pointer_size => '","{- $target{pointer_size} -}","',"
+        WRITE CONFIG ");"
+        WRITE CONFIG "our %target = ();"
+        WRITE CONFIG "our %disabled = ();"
+        WRITE CONFIG "our %withargs = ();"
+        WRITE CONFIG "our %unified_info = ();"
+        WRITE CONFIG "1;"
+        CLOSE CONFIG
+
+install_html_docs : check_INSTALLTOP
+        sourcedir = F$PARSE("{- $sourcedir -}A.;","[]") - "]A.;" + ".DOC]"
+        $(PERL) {- sourcefile("util", "process_docs.pl") -} -
+                --sourcedir='sourcedir' --destdir=ossl_installroot:[HTML] -
+                --type=html
+
+check_INSTALLTOP :
+        @ IF "$(INSTALLTOP)" .EQS. "" THEN -
+                WRITE SYS$ERROR "INSTALLTOP should not be empty"
+        @ IF "$(INSTALLTOP)" .EQS. "" THEN -
+                EXIT %x10000002
+
+# Helper targets #####################################################
+
+# Developer targets ##################################################
+
+debug_logicals :
+        SH LOGICAL/PROC openssl,internal,ossl_installroot,ossl_dataroot
+
+# Building targets ###################################################
+
+configdata.pm : $(SRCDIR)Configure $(SRCDIR)config.com {- join(" ", @{$config{build_file_templates}}, @{$config{build_infos}}, @{$config{conf_files}}) -}
+        perl configdata.pm -r
+        @ WRITE SYS$OUTPUT "*************************************************"
+        @ WRITE SYS$OUTPUT "***                                           ***"
+        @ WRITE SYS$OUTPUT "***   Please run the same mms command again   ***"
+        @ WRITE SYS$OUTPUT "***                                           ***"
+        @ WRITE SYS$OUTPUT "*************************************************"
+        @ PIPE ( EXIT %X10000000 )
+
+reconfigure reconf :
+	perl configdata.pm -r
+
+{-
+  use File::Basename;
+  use File::Spec::Functions qw/abs2rel rel2abs catfile catdir/;
+
+  # Helper function to figure out dependencies on libraries
+  # It takes a list of library names and outputs a list of dependencies
+  sub compute_lib_depends {
+      if ($disabled{shared}) {
+          return map { $_ =~ /\.a$/ ? $`.".OLB" : $_.".OLB" } @_;
+      }
+      return map { $_ =~ /\.a$/
+                   ? $`.".OLB"
+                   : $unified_info{sharednames}->{$_}.".EXE" } @_;
+  }
+
+  # Helper function to deal with inclusion directory specs.
+  # We have to deal with two things:
+  # 1. comma separation and no possibility of trailing comma
+  # 2. no inclusion directories given at all
+  # 3. long compiler command lines
+  # To resolve 1, we need to iterate through the sources of inclusion
+  # directories, and only add a comma when needed.
+  # To resolve 2, we need to have a variable that will hold the whole
+  # inclusion qualifier, or be the empty string if there are no inclusion
+  # directories.  That's the symbol 'qual_includes' that's used in CPPFLAGS
+  # To resolve 3, we creata a logical name TMP_INCLUDES: to hold the list
+  # of inclusion directories.
+  #
+  # This function returns a list of two lists, one being the collection of
+  # commands to execute before the compiler is called, and the other being
+  # the collection of commands to execute after.  It takes as arguments the
+  # collection of strings to include as directory specs.
+  sub includes {
+      my @stuff = ( @_ );
+      my @before = (
+          'qual_includes :=',
+      );
+      my @after = (
+          'DELETE/SYMBOL/LOCAL qual_includes',
+      );
+
+      if (scalar @stuff > 0) {
+          push @before, 'tmp_includes := '.shift(@stuff);
+          while (@stuff) {
+              push @before, 'tmp_add := '.shift(@stuff);
+              push @before, 'IF tmp_includes .NES. "" .AND. tmp_add .NES. "" THEN tmp_includes = tmp_includes + ","';
+              push @before, 'tmp_includes = tmp_includes + tmp_add';
+          }
+          push @before, "IF tmp_includes .NES. \"\" THEN DEFINE tmp_includes 'tmp_includes'";
+          push @before, 'IF tmp_includes .NES. "" THEN qual_includes := /INCLUDE=(tmp_includes:)';
+          push @before, 'DELETE/SYMBOL/LOCAL tmp_includes';
+          push @before, 'DELETE/SYMBOL/LOCAL tmp_add';
+          push @after, 'DEASSIGN tmp_includes:'
+      }
+      return ([ @before ], [ @after ]);
+  }
+
+  sub generatesrc {
+      my %args = @_;
+      (my $target = $args{src}) =~ s/\.[sS]$/.asm/;
+      my $generator = join(" ", @{$args{generator}});
+      my $generator_incs = join("", map { ' "-I'.$_.'"' } @{$args{generator_incs}});
+      my $deps = join(", -\n\t\t", @{$args{generator_deps}}, @{$args{deps}});
+
+      if ($target !~ /\.asm$/) {
+          if ($args{generator}->[0] =~ m|^.*\.in$|) {
+	      my $dofile = abs2rel(rel2abs(catfile($config{sourcedir},
+                                                   "util", "dofile.pl")),
+                                   rel2abs($config{builddir}));
+              return <<"EOF";
+$target : $args{generator}->[0] $deps
+	\$(PERL) "-I\$(BLDDIR)" "-Mconfigdata" $dofile \\
+	    "-o$target{build_file}" $generator > \$\@
+EOF
+	  } else {
+              return <<"EOF";
+$target : $args{generator}->[0] $deps
+	\$(PERL)$generator_incs $generator > \$\@
+EOF
+	  }
+      } else {
+          if ($args{generator}->[0] =~ /\.pl$/) {
+              $generator = '$(PERL)'.$generator_incs.' '.$generator;
+          } elsif ($args{generator}->[0] =~ /\.S$/) {
+              $generator = undef;
+          } else {
+              die "Generator type for $src unknown: $generator\n";
+          }
+
+          my $cppflags = {
+              lib => '$(LIB_CFLAGS) $(LIB_CPPFLAGS)',
+              dso => '$(DSO_CFLAGS) $(DSO_CPPFLAGS)',
+              bin => '$(BIN_CFLAGS) $(BIN_CPPFLAGS)'
+          } -> {$args{intent}};
+          my @incs_cmds = includes({ lib => '$(LIB_INCLUDES)',
+                                     dso => '$(DSO_INCLUDES)',
+                                     bin => '$(BIN_INCLUDES)' } -> {$args{intent}},
+                                   '$(CNF_INCLUDES)',
+                                   '$(INCLUDES)',
+                                   @{$args{incs}});
+          my $incs_on = join("\n\t\@ ", @{$incs_cmds[0]}) || '!';
+          my $incs_off = join("\n\t\@ ", @{$incs_cmds[1]}) || '!';
+          if (defined($generator)) {
+              # If the target is named foo.S in build.info, we want to
+              # end up generating foo.s in two steps.
+              if ($args{src} =~ /\.S$/) {
+                   return <<"EOF";
+$target : $args{generator}->[0] $deps
+	$generator \$\@-S
+        \@ $incs_on
+	PIPE \$(CPP) $cppflags \$\@-S | -
+             \$(PERL) -ne "/^#(\\s*line)?\\s*[0-9]+\\s+""/ or print" > \$\@-i
+        \@ $incs_off
+        RENAME \$\@-i \$\@
+        DELETE \$\@-S;
+EOF
+              }
+              # Otherwise....
+              return <<"EOF";
+$target : $args{generator}->[0] $deps
+	$generator \$\@
+EOF
+          }
+          return <<"EOF";
+$target : $args{generator}->[0] $deps
+        \@ $incs_on
+        SHOW SYMBOL qual_includes
+        PIPE \$(CPP) $cppflags $args{generator}->[0] | -
+        \$(PERL) "-ne" "/^#(\\s*line)?\\s*[0-9]+\\s+""/ or print" > \$\@
+        \@ $incs_off
+EOF
+      }
+  }
+
+  sub src2obj {
+      my %args = @_;
+      my @srcs = map { (my $x = $_) =~ s/\.s$/.asm/; $x
+                     } ( @{$args{srcs}} );
+      (my $obj = $args{obj}) =~ s|\.o$||;
+      my $deps = join(", -\n\t\t", @srcs, @{$args{deps}});
+
+      # Because VMS C isn't very good at combining a /INCLUDE path with
+      # #includes having a relative directory (like '#include "../foo.h"),
+      # the best choice is to move to the first source file's intended
+      # directory before compiling, and make sure to write the object file
+      # in the correct position (important when the object tree is other
+      # than the source tree).
+      my $forward = dirname($args{srcs}->[0]);
+      my $backward = abs2rel(rel2abs("."), rel2abs($forward));
+      my $objd = abs2rel(rel2abs(dirname($obj)), rel2abs($forward));
+      my $objn = basename($obj);
+      my $srcs =
+          join(", ", map { abs2rel(rel2abs($_), rel2abs($forward)) } @srcs);
+      my $before = $unified_info{before}->{$obj.".OBJ"} || "\@ !";
+      my $after = $unified_info{after}->{$obj.".OBJ"} || "\@ !";
+
+      my $cflags;
+      if ($args{installed}) {
+          $cflags = { lib => '$(LIB_CFLAGS)',
+                      dso => '$(DSO_CFLAGS)',
+                      bin => '$(BIN_CFLAGS)' } -> {$args{intent}};
+      } else {
+          $cflags = { lib => '$(NO_INST_LIB_CFLAGS)',
+                      dso => '$(NO_INST_DSO_CFLAGS)',
+                      bin => '$(NO_INST_BIN_CFLAGS)' } -> {$args{intent}};
+      }
+      $cflags .= { lib => '$(LIB_CPPFLAGS)',
+		   dso => '$(DSO_CPPFLAGS)',
+		   bin => '$(BIN_CPPFLAGS)' } -> {$args{intent}};
+      my $asflags = { lib => ' $(LIB_ASFLAGS)',
+		      dso => ' $(DSO_ASFLAGS)',
+		      bin => ' $(BIN_ASFLAGS)' } -> {$args{intent}};
+
+      my @incs_cmds = includes({ lib => '$(LIB_INCLUDES)',
+                                 dso => '$(DSO_INCLUDES)',
+                                 bin => '$(BIN_INCLUDES)' } -> {$args{intent}},
+                               '$(INCLUDES)',
+                               map {
+                                   file_name_is_absolute($_)
+                                   ? $_ : catdir($backward,$_)
+                               } @{$args{incs}});
+      my $incs_on = join("\n\t\@ ", @{$incs_cmds[0]}) || '!';
+      my $incs_off = join("\n\t\@ ", @{$incs_cmds[1]}) || '!';
+
+      if ($srcs[0] =~ /\.asm$/) {
+          return <<"EOF";
+$obj.OBJ : $deps
+        ${before}
+        SET DEFAULT $forward
+        \$(AS) $asflags \$(ASOUTFLAG)${objd}${objn}.OBJ $srcs
+        SET DEFAULT $backward
+        ${after}
+        - PURGE $obj.OBJ
+EOF
+      } elsif ($srcs[0] =~ /.S$/) {
+         return <<"EOF";
+$obj.OBJ : $deps
+        ${before}
+        SET DEFAULT $forward
+        \@ $incs_on
+        PIPE \$(CPP) ${cflags} $srcs | -
+             \$(PERL) -ne "/^#(\\s*line)?\\s*[0-9]+\\s+""/ or print" -
+             > ${objd}${objn}.asm
+        \@ $incs_off
+        SET DEFAULT $backward
+        ${after}
+        \$(AS) $asflags \$(ASOUTFLAG)$obj.OBJ $obj.asm
+        - PURGE $obj.OBJ
+EOF
+      }
+
+      my $depbuild = $disabled{makedepend} ? ""
+          : " /MMS=(FILE=${objd}${objn}.D,TARGET=$obj.OBJ)";
+
+      return <<"EOF";
+$obj.OBJ : $deps
+        ${before}
+        SET DEFAULT $forward
+        \@ $incs_on
+        \$(CC) ${cflags}${depbuild} /OBJECT=${objd}${objn}.OBJ /REPOSITORY=$backward $srcs
+        \@ $incs_off
+        SET DEFAULT $backward
+        ${after}
+        - PURGE $obj.OBJ
+EOF
+  }
+  sub libobj2shlib {
+      my %args = @_;
+      my $lib = $args{lib};
+      my $shlib = $args{shlib};
+      my $libd = dirname($lib);
+      my $libn = basename($lib);
+      my @objs = map { (my $x = $_) =~ s|\.o$|.OBJ|; $x }
+                 grep { $_ =~ m|\.o$| }
+                 @{$args{objs}};
+      my @defs = grep { $_ =~ /\.opt$/ } @{$args{objs}};
+      my @deps = compute_lib_depends(@{$args{deps}});
+      die "More than one symbol vector" if scalar @defs > 1;
+      my $deps = join(", -\n\t\t", @defs, @deps);
+      my $shlib_target = $disabled{shared} ? "" : $target{shared_target};
+      my $translatesyms_pl = abs2rel(rel2abs(catfile($config{sourcedir},
+                                                     "VMS", "translatesyms.pl")),
+                                     rel2abs($config{builddir}));
+      # The "[]" hack is because in .OPT files, each line inherits the
+      # previous line's file spec as default, so if no directory spec
+      # is present in the current line and the previous line has one that
+      # doesn't apply, you're in for a surprise.
+      my $write_opt1 =
+          join(",-\"\n\t", map { my $x = $_ =~ /\[/ ? $_ : "[]".$_;
+                                 "WRITE OPT_FILE \"$x" } @objs).
+          "\"";
+      my $write_opt2 =
+          join("\n\t", map { my $x = $_ =~ /\[/ ? $_ : "[]".$_;
+                             $x =~ s|(\.EXE)|$1/SHARE|;
+                             $x =~ s|(\.OLB)|$1/LIB|;
+                             "WRITE OPT_FILE \"$x\"" } @deps)
+          || "\@ !";
+      return <<"EOF"
+$shlib.EXE : $lib.OLB $deps
+        \$(PERL) $translatesyms_pl \$(BLDDIR)CXX\$DEMANGLER_DB. < $defs[0] > $defs[0]-translated
+        OPEN/WRITE/SHARE=READ OPT_FILE $lib-components.OPT
+        $write_opt1
+        $write_opt2
+        CLOSE OPT_FILE
+        LINK \$(LIB_LDFLAGS)/SHARE=\$\@ $defs[0]-translated/OPT,-
+                $lib-components.OPT/OPT \$(LIB_EX_LIBS)
+        DELETE $defs[0]-translated;*,$lib-components.OPT;*
+        PURGE $shlib.EXE,$shlib.MAP
+EOF
+        . ($config{target} =~ m|alpha| ? "" : <<"EOF"
+        SET IMAGE/FLAGS=(NOCALL_DEBUG) \$\@
+EOF
+        );
+  }
+  sub obj2dso {
+      my %args = @_;
+      my $lib = $args{lib};
+      my $libd = dirname($lib);
+      my $libn = basename($lib);
+      (my $libn_nolib = $libn) =~ s/^lib//;
+      my @objs = map { (my $x = $_) =~ s|\.o$|.OBJ|; $x } @{$args{objs}};
+      my @deps = compute_lib_depends(@{$args{deps}});
+      my $deps = join(", -\n\t\t", @objs, @deps);
+      my $shlib_target = $disabled{shared} ? "" : $target{shared_target};
+      my $engine_opt = abs2rel(rel2abs(catfile($config{sourcedir},
+                                               "VMS", "engine.opt")),
+                               rel2abs($config{builddir}));
+      # The "[]" hack is because in .OPT files, each line inherits the
+      # previous line's file spec as default, so if no directory spec
+      # is present in the current line and the previous line has one that
+      # doesn't apply, you're in for a surprise.
+      my $write_opt1 =
+          join(",-\"\n\t", map { my $x = $_ =~ /\[/ ? $_ : "[]".$_;
+                                 "WRITE OPT_FILE \"$x" } @objs).
+          "\"";
+      my $write_opt2 =
+          join("\n\t", map { my $x = $_ =~ /\[/ ? $_ : "[]".$_;
+                             $x =~ s|(\.EXE)|$1/SHARE|;
+                             $x =~ s|(\.OLB)|$1/LIB|;
+                             "WRITE OPT_FILE \"$x\"" } @deps)
+          || "\@ !";
+      return <<"EOF"
+$lib.EXE : $deps
+        OPEN/WRITE/SHARE=READ OPT_FILE $lib.OPT
+        TYPE $engine_opt /OUTPUT=OPT_FILE:
+        $write_opt1
+        $write_opt2
+        CLOSE OPT_FILE
+        LINK \$(DSO_LDFLAGS)/SHARE=\$\@ $lib.OPT/OPT \$(DSO_EX_LIBS)
+        - PURGE $lib.EXE,$lib.OPT,$lib.MAP
+EOF
+        . ($config{target} =~ m|alpha| ? "" : <<"EOF"
+        SET IMAGE/FLAGS=(NOCALL_DEBUG) \$\@
+EOF
+        );
+  }
+  sub obj2lib {
+      my %args = @_;
+      (my $lib = $args{lib}) =~ s/\.a$//;
+      my @objs = map { (my $x = $_) =~ s|\.o$|.OBJ|; $x } @{$args{objs}};
+      my $objs = join(", -\n\t\t", @objs);
+      my $fill_lib = join("\n\t", (map { "LIBRARY/REPLACE $lib.OLB $_" }
+                                   @objs));
+      return <<"EOF";
+$lib.OLB : $objs
+        LIBRARY/CREATE/OBJECT $lib.OLB
+        $fill_lib
+        - PURGE $lib.OLB
+EOF
+  }
+  sub obj2bin {
+      my %args = @_;
+      my $bin = $args{bin};
+      my $bind = dirname($bin);
+      my $binn = basename($bin);
+      my @objs = map { (my $x = $_) =~ s|\.o$|.OBJ|; $x } @{$args{objs}};
+      my $objs = join(",", @objs);
+      my @deps = compute_lib_depends(@{$args{deps}});
+      my $deps = join(", -\n\t\t", @objs, @deps);
+
+      my $olb_count = scalar grep(m|\.OLB$|, @deps);
+      my $analyse_objs = "@ !";
+      if ($olb_count > 0) {
+          my $analyse_quals =
+              $config{target} =~ m|alpha| ? "/GSD" : "/SECTIONS=SYMTAB";
+          $analyse_objs = "- pipe ANALYSE/OBJECT$analyse_quals $objs | SEARCH SYS\$INPUT \"\"\"main\"\"\" ; nomain = \$severity .NE. 1"
+      }
+      # The "[]" hack is because in .OPT files, each line inherits the
+      # previous line's file spec as default, so if no directory spec
+      # is present in the current line and the previous line has one that
+      # doesn't apply, you're in for a surprise.
+      my $write_opt1 =
+          join(",-\"\n\t", map { my $x = $_ =~ /\[/ ? $_ : "[]".$_;
+                                 "\@ WRITE OPT_FILE \"$x" } @objs).
+          "\"";
+      my $write_opt2 =
+          join("\n\t", map { my @lines = ();
+                             my $x = $_ =~ /\[/ ? $_ : "[]".$_;
+                             if ($x =~ m|\.EXE$|) {
+                                 push @lines, "\@ WRITE OPT_FILE \"$x/SHARE\"";
+                             } elsif ($x =~ m|\.OLB$|) {
+                                 (my $l = $x) =~ s/\W/_/g;
+                                 push @lines,
+                                     "\@ IF nomain THEN WRITE OPT_FILE \"$x/LIB\$(INCLUDE_MAIN_$l)\"",
+                                     "\@ IF .NOT. nomain THEN WRITE OPT_FILE \"$x/LIB\""
+                             }
+                             @lines
+                           } @deps)
+          || "\@ !";
+      # The linking commands looks a bit complex, but it's for good reason.
+      # When you link, say, foo.obj, bar.obj and libsomething.exe/share, and
+      # bar.obj happens to have a symbol that also exists in libsomething.exe,
+      # the linker will warn about it, loudly, and will then choose to pick
+      # the first copy encountered (the one in bar.obj in this example).
+      # On Unix and on Windows, the corresponding maneuvre goes through
+      # silently with the same effect.
+      # With some test programs, made for checking the internals of OpenSSL,
+      # we do this kind of linking deliberately, picking a few specific object
+      # files from within [.crypto] or [.ssl] so we can reach symbols that are
+      # otherwise unreachable (since the shareable images only exports the
+      # symbols listed in [.util]*.num), and then with the shared libraries
+      # themselves.  So we need to silence the warning about multiply defined
+      # symbols, to mimic the way linking work on Unix and Windows, and so
+      # the build isn't interrupted (MMS stops when warnings are signaled,
+      # by default), and so someone building doesn't have to worry where it
+      # isn't necessary.  If there are other warnings, however, we show them
+      # and let it break the build.
+      return <<"EOF"
+$bin.EXE : $deps
+        $analyse_objs
+        @ OPEN/WRITE/SHARE=READ OPT_FILE $bin.OPT
+        $write_opt1
+        $write_opt2
+        @ CLOSE OPT_FILE
+        TYPE $bin.opt ! For debugging
+        - pipe SPAWN/WAIT/NOLOG/OUT=$bin.LINKLOG -
+                    LINK \$(BIN_LDFLAGS)/EXEC=\$\@ $bin.OPT/OPT \$(BIN_EX_LIBS) ; -
+               link_status = \$status ; link_severity = link_status .AND. 7
+        @ search_severity = 1
+        -@ IF link_severity .EQ. 0 THEN -
+                pipe SEARCH $bin.LINKLOG "%","-"/MATCH=AND | -
+                     SPAWN/WAIT/NOLOG/OUT=NLA0: -
+                          SEARCH SYS\$INPUT: "-W-MULDEF,"/MATCH=NOR ; -
+                     search_severity = \$severity
+        @ ! search_severity is 3 when the last search didn't find any matching
+        @ ! string: %SEARCH-I-NOMATCHES, no strings matched
+        @ ! If that was the result, we pretend linking got through without
+        @ ! fault or warning.
+        @ IF search_severity .EQ. 3 THEN link_severity = 1
+        @ ! At this point, if link_severity shows that there was a fault
+        @ ! or warning, make sure to restore the linking status.
+        -@ IF .NOT. link_severity THEN TYPE $bin.LINKLOG
+        -@ DELETE $bin.LINKLOG;*
+        @ IF .NOT. link_severity THEN SPAWN/WAIT/NOLOG EXIT 'link_status'
+        - PURGE $bin.EXE,$bin.OPT
+EOF
+      . ($config{target} =~ m|alpha| ? "" : <<"EOF"
+        SET IMAGE/FLAGS=(NOCALL_DEBUG) \$\@
+EOF
+        );
+  }
+  sub in2script {
+      my %args = @_;
+      my $script = $args{script};
+      return "" if grep { $_ eq $script } @{$args{sources}}; # No overwrite!
+      my $sources = join(" ", @{$args{sources}});
+      my $dofile = abs2rel(rel2abs(catfile($config{sourcedir},
+                                           "util", "dofile.pl")),
+                           rel2abs($config{builddir}));
+      return <<"EOF";
+$script : $sources
+        \$(PERL) "-I\$(BLDDIR)" "-Mconfigdata" $dofile -
+	    "-o$target{build_file}" $sources > $script
+        SET FILE/PROT=(S:RWED,O:RWED,G:RE,W:RE) $script
+        PURGE $script
+EOF
+  }
+  ""    # Important!  This becomes part of the template result.
+-}
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/shared-info.pl b/trunk/3rdparty/openssl-1.1-fit/Configurations/shared-info.pl
new file mode 100644
index 000000000..47eddd683
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/shared-info.pl
@@ -0,0 +1,82 @@
+#! /usr/bin/env perl
+# -*- mode: perl; -*-
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# This is a collection of extra attributes to be used as input for creating
+# shared libraries, currently on any Unix variant, including Unix like
+# environments on Windows.
+
+sub detect_gnu_ld {
+    my @lines =
+        `$config{CROSS_COMPILE}$config{CC} -Wl,-V /dev/null 2>&1`;
+    return grep /^GNU ld/, @lines;
+}
+sub detect_gnu_cc {
+    my @lines =
+        `$config{CROSS_COMPILE}$config{CC} -v 2>&1`;
+    return grep /gcc/, @lines;
+}
+
+my %shared_info;
+%shared_info = (
+    'gnu-shared' => {
+        shared_ldflag         => '-shared -Wl,-Bsymbolic',
+        shared_sonameflag     => '-Wl,-soname=',
+    },
+    'linux-shared' => sub {
+        return {
+            %{$shared_info{'gnu-shared'}},
+            shared_defflag    => '-Wl,--version-script=',
+        };
+    },
+    'bsd-gcc-shared' => sub { return $shared_info{'linux-shared'}; },
+    'bsd-shared' => sub {
+        return $shared_info{'gnu-shared'} if detect_gnu_ld();
+        return {
+            shared_ldflag     => '-shared -nostdlib',
+        };
+    },
+    'darwin-shared' => {
+        module_ldflags        => '-bundle',
+        shared_ldflag         => '-dynamiclib -current_version $(SHLIB_VERSION_NUMBER) -compatibility_version $(SHLIB_VERSION_NUMBER)',
+        shared_sonameflag     => '-install_name $(INSTALLTOP)/$(LIBDIR)/',
+    },
+    'cygwin-shared' => {
+        shared_ldflag         => '-shared -Wl,--enable-auto-image-base',
+        shared_impflag        => '-Wl,--out-implib=',
+    },
+    'mingw-shared' => sub {
+        return {
+            %{$shared_info{'cygwin-shared'}},
+            # def_flag made to empty string so  it still generates
+            # something
+            shared_defflag    => '',
+        };
+    },
+    'alpha-osf1-shared' => sub {
+        return $shared_info{'gnu-shared'} if detect_gnu_ld();
+        return {
+            module_ldflags    => '-shared -Wl,-Bsymbolic',
+            shared_ldflag     => '-shared -Wl,-Bsymbolic -set_version $(SHLIB_VERSION_NUMBER)',
+        };
+    },
+    'svr3-shared' => sub {
+        return $shared_info{'gnu-shared'} if detect_gnu_ld();
+        return {
+            shared_ldflag     => '-G',
+            shared_sonameflag => '-h ',
+        };
+    },
+    'svr5-shared' => sub {
+        return $shared_info{'gnu-shared'} if detect_gnu_ld();
+        return {
+            shared_ldflag     => detect_gnu_cc() ? '-shared' : '-G',
+            shared_sonameflag => '-h ',
+        };
+    },
+);
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/unix-Makefile.tmpl b/trunk/3rdparty/openssl-1.1-fit/Configurations/unix-Makefile.tmpl
new file mode 100644
index 000000000..288b79202
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/unix-Makefile.tmpl
@@ -0,0 +1,1253 @@
+##
+## Makefile for OpenSSL
+##
+## {- join("\n## ", @autowarntext) -}
+{-
+     our $objext = $target{obj_extension} || ".o";
+     our $depext = $target{dep_extension} || ".d";
+     our $exeext = $target{exe_extension} || "";
+     our $libext = $target{lib_extension} || ".a";
+     our $shlibext = $target{shared_extension} || ".so";
+     our $shlibvariant = $target{shlib_variant} || "";
+     our $shlibextsimple = $target{shared_extension_simple} || ".so";
+     our $shlibextimport = $target{shared_import_extension} || "";
+     our $dsoext = $target{dso_extension} || ".so";
+     our $makedepprog = $disabled{makedepend} ? undef : $config{makedepprog};
+
+     sub windowsdll { $config{target} =~ /^(?:Cygwin|mingw)/ }
+
+     # Shared AIX support is special. We put libcrypto[64].so.ver into
+     # libcrypto.a and use libcrypto_a.a as static one.
+     sub sharedaix  { !$disabled{shared} && $config{target} =~ /^aix/ }
+
+     our $sover_dirname = $config{shlib_version_number};
+     $sover_dirname =~ s|\.|_|g
+         if $config{target} =~ /^mingw/;
+
+     # shlib and shlib_simple both take a static library name and figure
+     # out what the shlib name should be.
+     #
+     # When OpenSSL is configured "no-shared", these functions will just
+     # return empty lists, making them suitable to join().
+     #
+     # With Windows DLL producers, shlib($libname) will return the shared
+     # library name (which usually is different from the static library
+     # name) with the default shared extension appended to it, while
+     # shlib_simple($libname) will return the static library name with
+     # the shared extension followed by ".a" appended to it.  The former
+     # result is used as the runtime shared library while the latter is
+     # used as the DLL import library.
+     #
+     # On all Unix systems, shlib($libname) will return the library name
+     # with the default shared extension, while shlib_simple($libname)
+     # will return the name from shlib($libname) with any SO version number
+     # removed.  On some systems, they may therefore return the exact same
+     # string.
+     sub shlib {
+         my $lib = shift;
+         return () if $disabled{shared} || $lib =~ /\.a$/;
+         return $unified_info{sharednames}->{$lib}. $shlibvariant. '$(SHLIB_EXT)';
+     }
+     sub shlib_simple {
+         my $lib = shift;
+         return () if $disabled{shared} || $lib =~ /\.a$/;
+
+         if (windowsdll()) {
+             return $lib . '$(SHLIB_EXT_IMPORT)';
+         }
+         return $lib .  '$(SHLIB_EXT_SIMPLE)';
+     }
+
+     # Easy fixing of static library names
+     sub lib {
+         (my $lib = shift) =~ s/\.a$//;
+         return $lib . $libext;
+     }
+
+     # dso is a complement to shlib / shlib_simple that returns the
+     # given libname with the simple shared extension (possible SO version
+     # removed).  This differs from shlib_simple() by being unconditional.
+     sub dso {
+         my $engine = shift;
+
+         return $engine . $dsoext;
+     }
+     # This makes sure things get built in the order they need
+     # to. You're welcome.
+     sub dependmagic {
+         my $target = shift;
+
+         return "$target: build_generated\n\t\$(MAKE) depend && \$(MAKE) _$target\n_$target";
+     }
+     '';
+-}
+PLATFORM={- $config{target} -}
+OPTIONS={- $config{options} -}
+CONFIGURE_ARGS=({- join(", ",quotify_l(@{$config{perlargv}})) -})
+SRCDIR={- $config{sourcedir} -}
+BLDDIR={- $config{builddir} -}
+
+VERSION={- $config{version} -}
+MAJOR={- $config{major} -}
+MINOR={- $config{minor} -}
+SHLIB_VERSION_NUMBER={- $config{shlib_version_number} -}
+SHLIB_VERSION_HISTORY={- $config{shlib_version_history} -}
+SHLIB_MAJOR={- $config{shlib_major} -}
+SHLIB_MINOR={- $config{shlib_minor} -}
+SHLIB_TARGET={- $target{shared_target} -}
+SHLIB_EXT={- $shlibext -}
+SHLIB_EXT_SIMPLE={- $shlibextsimple -}
+SHLIB_EXT_IMPORT={- $shlibextimport -}
+
+LIBS={- join(" ", map { lib($_) } @{$unified_info{libraries}}) -}
+SHLIBS={- join(" ", map { shlib($_) } @{$unified_info{libraries}}) -}
+SHLIB_INFO={- join(" ", map { "\"".shlib($_).";".shlib_simple($_)."\"" } @{$unified_info{libraries}}) -}
+ENGINES={- join(" ", map { dso($_) } @{$unified_info{engines}}) -}
+PROGRAMS={- join(" ", map { $_.$exeext } @{$unified_info{programs}}) -}
+SCRIPTS={- join(" ", @{$unified_info{scripts}}) -}
+{- output_off() if $disabled{makedepend}; "" -}
+DEPS={- join(" ", map { (my $x = $_) =~ s|\.o$|$depext|; $x; }
+                  grep { $unified_info{sources}->{$_}->[0] =~ /\.c$/ }
+                  keys %{$unified_info{sources}}); -}
+{- output_on() if $disabled{makedepend}; "" -}
+GENERATED_MANDATORY={- join(" ", @{$unified_info{depends}->{""}}) -}
+GENERATED={- # common0.tmpl provides @generated
+             join(" ", @generated ) -}
+
+INSTALL_LIBS={- join(" ", map { lib($_) } @{$unified_info{install}->{libraries}}) -}
+INSTALL_SHLIBS={- join(" ", map { shlib($_) } @{$unified_info{install}->{libraries}}) -}
+INSTALL_SHLIB_INFO={- join(" ", map { "\"".shlib($_).";".shlib_simple($_)."\"" } @{$unified_info{install}->{libraries}}) -}
+INSTALL_ENGINES={- join(" ", map { dso($_) } @{$unified_info{install}->{engines}}) -}
+INSTALL_PROGRAMS={- join(" ", map { $_.$exeext } @{$unified_info{install}->{programs}}) -}
+{- output_off() if $disabled{apps}; "" -}
+BIN_SCRIPTS=$(BLDDIR)/tools/c_rehash
+MISC_SCRIPTS=$(BLDDIR)/apps/CA.pl $(BLDDIR)/apps/tsget.pl:tsget
+{- output_on() if $disabled{apps}; "" -}
+
+APPS_OPENSSL={- use File::Spec::Functions;
+                catfile("apps","openssl") -}
+
+# DESTDIR is for package builders so that they can configure for, say,
+# /usr/ and yet have everything installed to /tmp/somedir/usr/.
+# Normally it is left empty.
+DESTDIR=
+
+# Do not edit these manually. Use Configure with --prefix or --openssldir
+# to change this!  Short explanation in the top comment in Configure
+INSTALLTOP={- # $prefix is used in the OPENSSLDIR perl snippet
+	      #
+	      our $prefix = $config{prefix} || "/usr/local";
+              $prefix -}
+OPENSSLDIR={- #
+	      # The logic here is that if no --openssldir was given,
+	      # OPENSSLDIR will get the value from $prefix plus "/ssl".
+	      # If --openssldir was given and the value is an absolute
+	      # path, OPENSSLDIR will get its value without change.
+	      # If the value from --openssldir is a relative path,
+	      # OPENSSLDIR will get $prefix with the --openssldir
+	      # value appended as a subdirectory.
+	      #
+              use File::Spec::Functions;
+              our $openssldir =
+                  $config{openssldir} ?
+                      (file_name_is_absolute($config{openssldir}) ?
+                           $config{openssldir}
+                           : catdir($prefix, $config{openssldir}))
+                      : catdir($prefix, "ssl");
+              $openssldir -}
+LIBDIR={- our $libdir = $config{libdir};
+          unless ($libdir) {
+              #
+              # if $prefix/lib$target{multilib} is not an existing
+              # directory, then assume that it's not searched by linker
+              # automatically, in which case adding $target{multilib} suffix
+              # causes more grief than we're ready to tolerate, so don't...
+              our $multilib =
+                  -d "$prefix/lib$target{multilib}" ? $target{multilib} : "";
+              $libdir = "lib$multilib";
+          }
+          file_name_is_absolute($libdir) ? "" : $libdir -}
+# $(libdir) is chosen to be compatible with the GNU coding standards
+libdir={- file_name_is_absolute($libdir)
+          ? $libdir : '$(INSTALLTOP)/$(LIBDIR)' -}
+ENGINESDIR=$(libdir)/engines-{- $sover_dirname -}
+
+# Convenience variable for those who want to set the rpath in shared
+# libraries and applications
+LIBRPATH=$(libdir)
+
+MANDIR=$(INSTALLTOP)/share/man
+DOCDIR=$(INSTALLTOP)/share/doc/$(BASENAME)
+HTMLDIR=$(DOCDIR)/html
+
+# MANSUFFIX is for the benefit of anyone who may want to have a suffix
+# appended after the manpage file section number.  "ssl" is popular,
+# resulting in files such as config.5ssl rather than config.5.
+MANSUFFIX=
+HTMLSUFFIX=html
+
+# For "optional" echo messages, to get "real" silence
+ECHO = echo
+
+##### User defined commands and flags ################################
+
+# We let the C compiler driver to take care of .s files. This is done in
+# order to be excused from maintaining a separate set of architecture
+# dependent assembler flags. E.g. if you throw -mcpu=ultrasparc at SPARC
+# gcc, then the driver will automatically translate it to -xarch=v8plus
+# and pass it down to assembler.  In any case, we do not define AS or
+# ASFLAGS for this reason.
+
+CROSS_COMPILE={- $config{CROSS_COMPILE} -}
+CC=$(CROSS_COMPILE){- $config{CC} -}
+CXX={- $config{CXX} ? "\$(CROSS_COMPILE)$config{CXX}" : '' -}
+CPPFLAGS={- our $cppflags1 = join(" ",
+                                  (map { "-D".$_} @{$config{CPPDEFINES}}),
+                                  (map { "-I".$_} @{$config{CPPINCLUDES}}),
+                                  @{$config{CPPFLAGS}}) -}
+CFLAGS={- join(' ', @{$config{CFLAGS}}) -}
+CXXFLAGS={- join(' ', @{$config{CXXFLAGS}}) -}
+LDFLAGS= {- join(' ', @{$config{LDFLAGS}}) -}
+EX_LIBS= {- join(' ', @{$config{LDLIBS}}) -}
+
+MAKEDEPEND={- $config{makedepprog} -}
+
+PERL={- $config{PERL} -}
+
+AR=$(CROSS_COMPILE){- $config{AR} -}
+ARFLAGS= {- join(' ', @{$config{ARFLAGS}}) -}
+RANLIB={- $config{RANLIB} ? "\$(CROSS_COMPILE)$config{RANLIB}" : "true"; -}
+RC= $(CROSS_COMPILE){- $config{RC} -}
+RCFLAGS={- join(' ', @{$config{RCFLAGS}}) -} {- $target{shared_rcflag} -}
+
+RM= rm -f
+RMDIR= rmdir
+TAR= {- $target{TAR} || "tar" -}
+TARFLAGS= {- $target{TARFLAGS} -}
+
+BASENAME=       openssl
+NAME=           $(BASENAME)-$(VERSION)
+# Relative to $(SRCDIR)
+TARFILE=        ../$(NAME).tar
+
+##### Project flags ##################################################
+
+# Variables starting with CNF_ are common variables for all product types
+
+CNF_CPPFLAGS={- our $cppflags2 =
+                    join(' ', $target{cppflags} || (),
+                              (map { "-D".$_} @{$target{defines}},
+                                              @{$config{defines}}),
+                              (map { "-I".$_} @{$target{includes}},
+                                              @{$config{includes}}),
+                              @{$config{cppflags}}) -}
+CNF_CFLAGS={- join(' ', $target{cflags} || (),
+                        @{$config{cflags}}) -}
+CNF_CXXFLAGS={- join(' ', $target{cxxflags} || (),
+                          @{$config{cxxflags}}) -}
+CNF_LDFLAGS={- join(' ', $target{lflags} || (),
+                         @{$config{lflags}}) -}
+CNF_EX_LIBS={- join(' ', $target{ex_libs} || (),
+                         @{$config{ex_libs}}) -}
+
+# Variables starting with LIB_ are used to build library object files
+# and shared libraries.
+# Variables starting with DSO_ are used to build DSOs and their object files.
+# Variables starting with BIN_ are used to build programs and their object
+# files.
+
+LIB_CPPFLAGS={- our $lib_cppflags =
+                join(' ', $target{lib_cppflags} || (),
+                          $target{shared_cppflag} || (),
+                          (map { '-D'.$_ }
+                               @{$config{lib_defines}},
+                               @{$config{shared_defines}}),
+                          @{$config{lib_cppflags}},
+                          @{$config{shared_cppflag}});
+                join(' ', $lib_cppflags,
+                          (map { '-D'.$_ }
+                               'OPENSSLDIR="\"$(OPENSSLDIR)\""',
+                               'ENGINESDIR="\"$(ENGINESDIR)\""'),
+                          '$(CNF_CPPFLAGS)', '$(CPPFLAGS)') -}
+LIB_CFLAGS={- join(' ', $target{lib_cflags} || (),
+                        $target{shared_cflag} || (),
+                        @{$config{lib_cflags}},
+                        @{$config{shared_cflag}},
+                        '$(CNF_CFLAGS)', '$(CFLAGS)') -}
+LIB_CXXFLAGS={- join(' ', $target{lib_cxxflags} || (),
+                          $target{shared_cxxflag} || (),
+                          @{$config{lib_cxxflags}},
+                          @{$config{shared_cxxflag}},
+                          '$(CNF_CXXFLAGS)', '$(CXXFLAGS)') -}
+LIB_LDFLAGS={- join(' ', $target{shared_ldflag} || (),
+                         $config{shared_ldflag} || (),
+                         '$(CNF_LDFLAGS)', '$(LDFLAGS)') -}
+LIB_EX_LIBS=$(CNF_EX_LIBS) $(EX_LIBS)
+DSO_CPPFLAGS={- join(' ', $target{dso_cppflags} || (),
+                          $target{module_cppflags} || (),
+                          @{$config{dso_cppflags}},
+                          @{$config{module_cppflags}},
+                          '$(CNF_CPPFLAGS)', '$(CPPFLAGS)') -}
+DSO_CFLAGS={- join(' ', $target{dso_cflags} || (),
+                        $target{module_cflags} || (),
+                        @{$config{dso_cflags}},
+                        @{$config{module_cflags}},
+                        '$(CNF_CFLAGS)', '$(CFLAGS)') -}
+DSO_CXXFLAGS={- join(' ', $target{dso_cxxflags} || (),
+                          $target{module_cxxflags} || (),
+                          @{$config{dso_cxxflags}},
+                          @{$config{module_cxxflag}},
+                          '$(CNF_CXXFLAGS)', '$(CXXFLAGS)') -}
+DSO_LDFLAGS={- join(' ', $target{dso_ldflags} || (),
+                         $target{module_ldflags} || (),
+                         @{$config{dso_ldflags}},
+                         @{$config{module_ldflags}},
+                         '$(CNF_LDFLAGS)', '$(LDFLAGS)') -}
+DSO_EX_LIBS=$(CNF_EX_LIBS) $(EX_LIBS)
+BIN_CPPFLAGS={- join(' ', $target{bin_cppflags} || (),
+                          @{$config{bin_cppflags}},
+                          '$(CNF_CPPFLAGS)', '$(CPPFLAGS)') -}
+BIN_CFLAGS={- join(' ', $target{bin_cflags} || (),
+                        @{$config{bin_cflags}},
+                        '$(CNF_CFLAGS)', '$(CFLAGS)') -}
+BIN_CXXFLAGS={- join(' ', $target{bin_cxxflags} || (),
+                          @{$config{bin_cxxflags}},
+                          '$(CNF_CXXFLAGS)', '$(CXXFLAGS)') -}
+BIN_LDFLAGS={- join(' ', $target{bin_lflags} || (),
+                         @{$config{bin_lflags}},
+                         '$(CNF_LDFLAGS)', '$(LDFLAGS)') -}
+BIN_EX_LIBS=$(CNF_EX_LIBS) $(EX_LIBS)
+
+# CPPFLAGS_Q is used for one thing only: to build up buildinf.h
+CPPFLAGS_Q={- $cppflags1 =~ s|([\\"])|\\$1|g;
+              $cppflags2 =~ s|([\\"])|\\$1|g;
+              $lib_cppflags =~ s|([\\"])|\\$1|g;
+              join(' ', $lib_cppflags || (), $cppflags2 || (),
+                        $cppflags1 || ()) -}
+
+PERLASM_SCHEME= {- $target{perlasm_scheme} -}
+
+# For x86 assembler: Set PROCESSOR to 386 if you want to support
+# the 80386.
+PROCESSOR= {- $config{processor} -}
+
+# We want error [and other] messages in English. Trouble is that make(1)
+# doesn't pass macros down as environment variables unless there already
+# was corresponding variable originally set. In other words we can only
+# reassign environment variables, but not set new ones, not in portable
+# manner that is. That's why we reassign several, just to be sure...
+LC_ALL=C
+LC_MESSAGES=C
+LANG=C
+
+# The main targets ###################################################
+
+{- dependmagic('all'); -}: build_libs_nodep build_engines_nodep build_programs_nodep link-utils
+{- dependmagic('build_libs'); -}: build_libs_nodep
+{- dependmagic('build_engines'); -}: build_engines_nodep
+{- dependmagic('build_programs'); -}: build_programs_nodep
+
+build_generated: $(GENERATED_MANDATORY)
+build_libs_nodep: libcrypto.pc libssl.pc openssl.pc
+build_engines_nodep: $(ENGINES)
+build_programs_nodep: $(PROGRAMS) $(SCRIPTS)
+
+# Kept around for backward compatibility
+build_apps build_tests: build_programs
+
+# Convenience target to prebuild all generated files, not just the mandatory
+# ones
+build_all_generated: $(GENERATED_MANDATORY) $(GENERATED)
+	@ : {- output_off() if $disabled{makedepend}; "" -}
+	@echo "Warning: consider configuring with no-makedepend, because if"
+	@echo "         target system doesn't have $(PERL),"
+	@echo "         then make will fail..."
+	@ : {- output_on() if $disabled{makedepend}; "" -}
+
+test: tests
+{- dependmagic('tests'); -}: build_programs_nodep build_engines_nodep link-utils
+	@ : {- output_off() if $disabled{tests}; "" -}
+	( cd test; \
+	  mkdir -p test-runs; \
+	  SRCTOP=../$(SRCDIR) \
+	  BLDTOP=../$(BLDDIR) \
+	  RESULT_D=test-runs \
+	  PERL="$(PERL)" \
+	  EXE_EXT={- $exeext -} \
+	  OPENSSL_ENGINES=`cd ../$(BLDDIR)/engines 2>/dev/null && pwd` \
+	  OPENSSL_DEBUG_MEMORY=on \
+	    $(PERL) ../$(SRCDIR)/test/run_tests.pl $(TESTS) )
+	@ : {- if ($disabled{tests}) { output_on(); } else { output_off(); } "" -}
+	@echo "Tests are not supported with your chosen Configure options"
+	@ : {- output_on() if !$disabled{tests}; "" -}
+
+list-tests:
+	@ : {- output_off() if $disabled{tests}; "" -}
+	@SRCTOP="$(SRCDIR)" \
+	 $(PERL) $(SRCDIR)/test/run_tests.pl list
+	@ : {- if ($disabled{tests}) { output_on(); } else { output_off(); } "" -}
+	@echo "Tests are not supported with your chosen Configure options"
+	@ : {- output_on() if !$disabled{tests}; "" -}
+
+install: install_sw install_ssldirs install_docs
+
+uninstall: uninstall_docs uninstall_sw
+
+libclean:
+	@set -e; for s in $(SHLIB_INFO); do \
+		if [ "$$s" = ";" ]; then continue; fi; \
+		s1=`echo "$$s" | cut -f1 -d";"`; \
+		s2=`echo "$$s" | cut -f2 -d";"`; \
+		$(ECHO) $(RM) $$s1; {- output_off() unless windowsdll(); "" -}\
+		$(RM) apps/$$s1; \
+		$(RM) test/$$s1; \
+		$(RM) fuzz/$$s1; {- output_on() unless windowsdll(); "" -}\
+		$(RM) $$s1; \
+		if [ "$$s1" != "$$s2" ]; then \
+			$(ECHO) $(RM) $$s2; \
+			$(RM) $$s2; \
+		fi; \
+	done
+	$(RM) $(LIBS)
+	$(RM) *.map
+
+clean: libclean
+	$(RM) $(PROGRAMS) $(TESTPROGS) $(ENGINES) $(SCRIPTS)
+	$(RM) $(GENERATED_MANDATORY) $(GENERATED)
+	-$(RM) `find . -name .git -prune -o -name '*{- $depext -}' -print`
+	-$(RM) `find . -name .git -prune -o -name '*{- $objext -}' -print`
+	$(RM) core
+	$(RM) tags TAGS doc-nits
+	$(RM) -r test/test-runs
+	$(RM) openssl.pc libcrypto.pc libssl.pc
+	-$(RM) `find . -name .git -prune -o -type l -print`
+	$(RM) $(TARFILE)
+
+distclean: clean
+	$(RM) configdata.pm
+	$(RM) Makefile
+
+# We check if any depfile is newer than Makefile and decide to
+# concatenate only if that is true.
+depend:
+	@: {- output_off() if $disabled{makedepend}; "" -}
+	@$(PERL) $(SRCDIR)/util/add-depends.pl {-
+		 defined $makedepprog  && $makedepprog =~ /\/makedepend/
+                 ? 'makedepend' : 'gcc' -}
+	@: {- output_on() if $disabled{makedepend}; "" -}
+
+# Install helper targets #############################################
+
+install_sw: install_dev install_engines install_runtime
+
+uninstall_sw: uninstall_runtime uninstall_engines uninstall_dev
+
+install_docs: install_man_docs install_html_docs
+
+uninstall_docs: uninstall_man_docs uninstall_html_docs
+	$(RM) -r -v $(DESTDIR)$(DOCDIR)
+
+install_ssldirs:
+	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(OPENSSLDIR)/certs
+	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(OPENSSLDIR)/private
+	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(OPENSSLDIR)/misc
+	@set -e; for x in dummy $(MISC_SCRIPTS); do \
+		if [ "$$x" = "dummy" ]; then continue; fi; \
+		x1=`echo "$$x" | cut -f1 -d:`; \
+		x2=`echo "$$x" | cut -f2 -d:`; \
+		fn=`basename $$x1`; \
+		$(ECHO) "install $$x1 -> $(DESTDIR)$(OPENSSLDIR)/misc/$$fn"; \
+		cp $$x1 $(DESTDIR)$(OPENSSLDIR)/misc/$$fn.new; \
+		chmod 755 $(DESTDIR)$(OPENSSLDIR)/misc/$$fn.new; \
+		mv -f $(DESTDIR)$(OPENSSLDIR)/misc/$$fn.new \
+		      $(DESTDIR)$(OPENSSLDIR)/misc/$$fn; \
+		if [ "$$x1" != "$$x2" ]; then \
+			ln=`basename "$$x2"`; \
+			: {- output_off() unless windowsdll(); "" -}; \
+			$(ECHO) "copy $(DESTDIR)$(OPENSSLDIR)/misc/$$ln -> $(DESTDIR)$(OPENSSLDIR)/misc/$$fn"; \
+			cp $(DESTDIR)$(OPENSSLDIR)/misc/$$fn $(DESTDIR)$(OPENSSLDIR)/misc/$$ln; \
+			: {- output_on() unless windowsdll();
+			     output_off() if windowsdll(); "" -}; \
+			$(ECHO) "link $(DESTDIR)$(OPENSSLDIR)/misc/$$ln -> $(DESTDIR)$(OPENSSLDIR)/misc/$$fn"; \
+			ln -sf $$fn $(DESTDIR)$(OPENSSLDIR)/misc/$$ln; \
+			: {- output_on() if windowsdll(); "" -}; \
+		fi; \
+	done
+	@$(ECHO) "install $(SRCDIR)/apps/openssl.cnf -> $(DESTDIR)$(OPENSSLDIR)/openssl.cnf.dist"
+	@cp $(SRCDIR)/apps/openssl.cnf $(DESTDIR)$(OPENSSLDIR)/openssl.cnf.new
+	@chmod 644 $(DESTDIR)$(OPENSSLDIR)/openssl.cnf.new
+	@mv -f  $(DESTDIR)$(OPENSSLDIR)/openssl.cnf.new $(DESTDIR)$(OPENSSLDIR)/openssl.cnf.dist
+	@if [ ! -f "$(DESTDIR)$(OPENSSLDIR)/openssl.cnf" ]; then \
+		$(ECHO) "install $(SRCDIR)/apps/openssl.cnf -> $(DESTDIR)$(OPENSSLDIR)/openssl.cnf"; \
+		cp $(SRCDIR)/apps/openssl.cnf $(DESTDIR)$(OPENSSLDIR)/openssl.cnf; \
+		chmod 644 $(DESTDIR)$(OPENSSLDIR)/openssl.cnf; \
+	fi
+	@$(ECHO) "install $(SRCDIR)/apps/ct_log_list.cnf -> $(DESTDIR)$(OPENSSLDIR)/ct_log_list.cnf.dist"
+	@cp $(SRCDIR)/apps/ct_log_list.cnf $(DESTDIR)$(OPENSSLDIR)/ct_log_list.cnf.new
+	@chmod 644 $(DESTDIR)$(OPENSSLDIR)/ct_log_list.cnf.new
+	@mv -f  $(DESTDIR)$(OPENSSLDIR)/ct_log_list.cnf.new $(DESTDIR)$(OPENSSLDIR)/ct_log_list.cnf.dist
+	@if [ ! -f "$(DESTDIR)$(OPENSSLDIR)/ct_log_list.cnf" ]; then \
+		$(ECHO) "install $(SRCDIR)/apps/ct_log_list.cnf -> $(DESTDIR)$(OPENSSLDIR)/ct_log_list.cnf"; \
+		cp $(SRCDIR)/apps/ct_log_list.cnf $(DESTDIR)$(OPENSSLDIR)/ct_log_list.cnf; \
+		chmod 644 $(DESTDIR)$(OPENSSLDIR)/ct_log_list.cnf; \
+	fi
+
+install_dev: install_runtime_libs
+	@[ -n "$(INSTALLTOP)" ] || (echo INSTALLTOP should not be empty; exit 1)
+	@$(ECHO) "*** Installing development files"
+	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(INSTALLTOP)/include/openssl
+	@ : {- output_off() unless grep { $_ eq "OPENSSL_USE_APPLINK" } (@{$target{defines}}, @{$config{defines}}); "" -}
+	@$(ECHO) "install $(SRCDIR)/ms/applink.c -> $(DESTDIR)$(INSTALLTOP)/include/openssl/applink.c"
+	@cp $(SRCDIR)/ms/applink.c $(DESTDIR)$(INSTALLTOP)/include/openssl/applink.c
+	@chmod 644 $(DESTDIR)$(INSTALLTOP)/include/openssl/applink.c
+	@ : {- output_on() unless grep { $_ eq "OPENSSL_USE_APPLINK" } (@{$target{defines}}, @{$config{defines}}); "" -}
+	@set -e; for i in $(SRCDIR)/include/openssl/*.h \
+			  $(BLDDIR)/include/openssl/*.h; do \
+		fn=`basename $$i`; \
+		$(ECHO) "install $$i -> $(DESTDIR)$(INSTALLTOP)/include/openssl/$$fn"; \
+		cp $$i $(DESTDIR)$(INSTALLTOP)/include/openssl/$$fn; \
+		chmod 644 $(DESTDIR)$(INSTALLTOP)/include/openssl/$$fn; \
+	done
+	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(libdir)
+	@set -e; for l in $(INSTALL_LIBS); do \
+		fn=`basename $$l`; \
+		$(ECHO) "install $$l -> $(DESTDIR)$(libdir)/$$fn"; \
+		cp $$l $(DESTDIR)$(libdir)/$$fn.new; \
+		$(RANLIB) $(DESTDIR)$(libdir)/$$fn.new; \
+		chmod 644 $(DESTDIR)$(libdir)/$$fn.new; \
+		mv -f $(DESTDIR)$(libdir)/$$fn.new \
+		      $(DESTDIR)$(libdir)/$$fn; \
+	done
+	@ : {- output_off() if $disabled{shared}; "" -}
+	@set -e; for s in $(INSTALL_SHLIB_INFO); do \
+		s1=`echo "$$s" | cut -f1 -d";"`; \
+		s2=`echo "$$s" | cut -f2 -d";"`; \
+		fn1=`basename $$s1`; \
+		fn2=`basename $$s2`; \
+		: {- output_off(); output_on() unless windowsdll() or sharedaix(); "" -}; \
+		if [ "$$fn1" != "$$fn2" ]; then \
+			$(ECHO) "link $(DESTDIR)$(libdir)/$$fn2 -> $(DESTDIR)$(libdir)/$$fn1"; \
+			ln -sf $$fn1 $(DESTDIR)$(libdir)/$$fn2; \
+		fi; \
+		: {- output_off() unless windowsdll() or sharedaix(); output_on() if windowsdll(); "" -}; \
+		$(ECHO) "install $$s2 -> $(DESTDIR)$(libdir)/$$fn2"; \
+		cp $$s2 $(DESTDIR)$(libdir)/$$fn2.new; \
+		chmod 755 $(DESTDIR)$(libdir)/$$fn2.new; \
+		mv -f $(DESTDIR)$(libdir)/$$fn2.new \
+		      $(DESTDIR)$(libdir)/$$fn2; \
+		: {- output_off() if windowsdll(); output_on() if sharedaix(); "" -}; \
+		a=$(DESTDIR)$(libdir)/$$fn2; \
+		$(ECHO) "install $$s1 -> $$a"; \
+		if [ -f $$a ]; then ( trap "rm -rf /tmp/ar.$$$$" INT 0; \
+			mkdir /tmp/ar.$$$$; ( cd /tmp/ar.$$$$; \
+			cp -f $$a $$a.new; \
+			for so in `$(AR) t $$a`; do \
+				$(AR) x $$a $$so; \
+				chmod u+w $$so; \
+				strip -X32_64 -e $$so; \
+				$(AR) r $$a.new $$so; \
+			done; \
+		)); fi; \
+		$(AR) r $$a.new $$s1; \
+		mv -f $$a.new $$a; \
+		: {- output_off() if sharedaix(); output_on(); "" -}; \
+	done
+	@ : {- output_on() if $disabled{shared}; "" -}
+	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(libdir)/pkgconfig
+	@$(ECHO) "install libcrypto.pc -> $(DESTDIR)$(libdir)/pkgconfig/libcrypto.pc"
+	@cp libcrypto.pc $(DESTDIR)$(libdir)/pkgconfig
+	@chmod 644 $(DESTDIR)$(libdir)/pkgconfig/libcrypto.pc
+	@$(ECHO) "install libssl.pc -> $(DESTDIR)$(libdir)/pkgconfig/libssl.pc"
+	@cp libssl.pc $(DESTDIR)$(libdir)/pkgconfig
+	@chmod 644 $(DESTDIR)$(libdir)/pkgconfig/libssl.pc
+	@$(ECHO) "install openssl.pc -> $(DESTDIR)$(libdir)/pkgconfig/openssl.pc"
+	@cp openssl.pc $(DESTDIR)$(libdir)/pkgconfig
+	@chmod 644 $(DESTDIR)$(libdir)/pkgconfig/openssl.pc
+
+uninstall_dev: uninstall_runtime_libs
+	@$(ECHO) "*** Uninstalling development files"
+	@ : {- output_off() unless grep { $_ eq "OPENSSL_USE_APPLINK" } (@{$target{defines}}, @{$config{defines}}); "" -}
+	@$(ECHO) "$(RM) $(DESTDIR)$(INSTALLTOP)/include/openssl/applink.c"
+	@$(RM) $(DESTDIR)$(INSTALLTOP)/include/openssl/applink.c
+	@ : {- output_on() unless grep { $_ eq "OPENSSL_USE_APPLINK" } (@{$target{defines}}, @{$config{defines}}); "" -}
+	@set -e; for i in $(SRCDIR)/include/openssl/*.h \
+			  $(BLDDIR)/include/openssl/*.h; do \
+		fn=`basename $$i`; \
+		$(ECHO) "$(RM) $(DESTDIR)$(INSTALLTOP)/include/openssl/$$fn"; \
+		$(RM) $(DESTDIR)$(INSTALLTOP)/include/openssl/$$fn; \
+	done
+	-$(RMDIR) $(DESTDIR)$(INSTALLTOP)/include/openssl
+	-$(RMDIR) $(DESTDIR)$(INSTALLTOP)/include
+	@set -e; for l in $(INSTALL_LIBS); do \
+		fn=`basename $$l`; \
+		$(ECHO) "$(RM) $(DESTDIR)$(libdir)/$$fn"; \
+		$(RM) $(DESTDIR)$(libdir)/$$fn; \
+	done
+	@ : {- output_off() if $disabled{shared}; "" -}
+	@set -e; for s in $(INSTALL_SHLIB_INFO); do \
+		s1=`echo "$$s" | cut -f1 -d";"`; \
+		s2=`echo "$$s" | cut -f2 -d";"`; \
+		fn1=`basename $$s1`; \
+		fn2=`basename $$s2`; \
+		: {- output_off() if windowsdll(); "" -}; \
+		$(ECHO) "$(RM) $(DESTDIR)$(libdir)/$$fn2"; \
+		$(RM) $(DESTDIR)$(libdir)/$$fn2; \
+		if [ "$$fn1" != "$$fn2" -a -f "$(DESTDIR)$(libdir)/$$fn1" ]; then \
+			$(ECHO) "$(RM) $(DESTDIR)$(libdir)/$$fn1"; \
+			$(RM) $(DESTDIR)$(libdir)/$$fn1; \
+		fi; \
+		: {- output_on() if windowsdll(); "" -}{- output_off() unless windowsdll(); "" -}; \
+		$(ECHO) "$(RM) $(DESTDIR)$(libdir)/$$fn2"; \
+		$(RM) $(DESTDIR)$(libdir)/$$fn2; \
+		: {- output_on() unless windowsdll(); "" -}; \
+	done
+	@ : {- output_on() if $disabled{shared}; "" -}
+	$(RM) $(DESTDIR)$(libdir)/pkgconfig/libcrypto.pc
+	$(RM) $(DESTDIR)$(libdir)/pkgconfig/libssl.pc
+	$(RM) $(DESTDIR)$(libdir)/pkgconfig/openssl.pc
+	-$(RMDIR) $(DESTDIR)$(libdir)/pkgconfig
+	-$(RMDIR) $(DESTDIR)$(libdir)
+
+install_engines: install_runtime_libs build_engines
+	@[ -n "$(INSTALLTOP)" ] || (echo INSTALLTOP should not be empty; exit 1)
+	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(ENGINESDIR)/
+	@$(ECHO) "*** Installing engines"
+	@set -e; for e in dummy $(INSTALL_ENGINES); do \
+		if [ "$$e" = "dummy" ]; then continue; fi; \
+		fn=`basename $$e`; \
+		$(ECHO) "install $$e -> $(DESTDIR)$(ENGINESDIR)/$$fn"; \
+		cp $$e $(DESTDIR)$(ENGINESDIR)/$$fn.new; \
+		chmod 755 $(DESTDIR)$(ENGINESDIR)/$$fn.new; \
+		mv -f $(DESTDIR)$(ENGINESDIR)/$$fn.new \
+		      $(DESTDIR)$(ENGINESDIR)/$$fn; \
+	done
+
+uninstall_engines:
+	@$(ECHO) "*** Uninstalling engines"
+	@set -e; for e in dummy $(INSTALL_ENGINES); do \
+		if [ "$$e" = "dummy" ]; then continue; fi; \
+		fn=`basename $$e`; \
+		if [ "$$fn" = '{- dso("ossltest") -}' ]; then \
+			continue; \
+		fi; \
+		$(ECHO) "$(RM) $(DESTDIR)$(ENGINESDIR)/$$fn"; \
+		$(RM) $(DESTDIR)$(ENGINESDIR)/$$fn; \
+	done
+	-$(RMDIR) $(DESTDIR)$(ENGINESDIR)
+
+install_runtime: install_programs
+
+install_runtime_libs: build_libs
+	@[ -n "$(INSTALLTOP)" ] || (echo INSTALLTOP should not be empty; exit 1)
+	@ : {- output_off() if windowsdll(); "" -}
+	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(libdir)
+	@ : {- output_on() if windowsdll(); output_off() unless windowsdll(); "" -}
+	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(INSTALLTOP)/bin
+	@ : {- output_on() unless windowsdll(); "" -}
+	@$(ECHO) "*** Installing runtime libraries"
+	@set -e; for s in dummy $(INSTALL_SHLIBS); do \
+		if [ "$$s" = "dummy" ]; then continue; fi; \
+		fn=`basename $$s`; \
+		: {- output_off() unless windowsdll(); "" -}; \
+		$(ECHO) "install $$s -> $(DESTDIR)$(INSTALLTOP)/bin/$$fn"; \
+		cp $$s $(DESTDIR)$(INSTALLTOP)/bin/$$fn.new; \
+		chmod 755 $(DESTDIR)$(INSTALLTOP)/bin/$$fn.new; \
+		mv -f $(DESTDIR)$(INSTALLTOP)/bin/$$fn.new \
+		      $(DESTDIR)$(INSTALLTOP)/bin/$$fn; \
+		: {- output_on() unless windowsdll(); "" -}{- output_off() if windowsdll(); "" -}; \
+		$(ECHO) "install $$s -> $(DESTDIR)$(libdir)/$$fn"; \
+		cp $$s $(DESTDIR)$(libdir)/$$fn.new; \
+		chmod 755 $(DESTDIR)$(libdir)/$$fn.new; \
+		mv -f $(DESTDIR)$(libdir)/$$fn.new \
+		      $(DESTDIR)$(libdir)/$$fn; \
+		: {- output_on() if windowsdll(); "" -}; \
+	done
+
+install_programs: install_runtime_libs build_programs
+	@[ -n "$(INSTALLTOP)" ] || (echo INSTALLTOP should not be empty; exit 1)
+	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(INSTALLTOP)/bin
+	@$(ECHO) "*** Installing runtime programs"
+	@set -e; for x in dummy $(INSTALL_PROGRAMS); do \
+		if [ "$$x" = "dummy" ]; then continue; fi; \
+		fn=`basename $$x`; \
+		$(ECHO) "install $$x -> $(DESTDIR)$(INSTALLTOP)/bin/$$fn"; \
+		cp $$x $(DESTDIR)$(INSTALLTOP)/bin/$$fn.new; \
+		chmod 755 $(DESTDIR)$(INSTALLTOP)/bin/$$fn.new; \
+		mv -f $(DESTDIR)$(INSTALLTOP)/bin/$$fn.new \
+		      $(DESTDIR)$(INSTALLTOP)/bin/$$fn; \
+	done
+	@set -e; for x in dummy $(BIN_SCRIPTS); do \
+		if [ "$$x" = "dummy" ]; then continue; fi; \
+		fn=`basename $$x`; \
+		$(ECHO) "install $$x -> $(DESTDIR)$(INSTALLTOP)/bin/$$fn"; \
+		cp $$x $(DESTDIR)$(INSTALLTOP)/bin/$$fn.new; \
+		chmod 755 $(DESTDIR)$(INSTALLTOP)/bin/$$fn.new; \
+		mv -f $(DESTDIR)$(INSTALLTOP)/bin/$$fn.new \
+		      $(DESTDIR)$(INSTALLTOP)/bin/$$fn; \
+	done
+
+uninstall_runtime: uninstall_programs uninstall_runtime_libs
+
+uninstall_programs:
+	@$(ECHO) "*** Uninstalling runtime programs"
+	@set -e; for x in dummy $(INSTALL_PROGRAMS); \
+	do  \
+		if [ "$$x" = "dummy" ]; then continue; fi; \
+		fn=`basename $$x`; \
+		$(ECHO) "$(RM) $(DESTDIR)$(INSTALLTOP)/bin/$$fn"; \
+		$(RM) $(DESTDIR)$(INSTALLTOP)/bin/$$fn; \
+	done;
+	@set -e; for x in dummy $(BIN_SCRIPTS); \
+	do  \
+		if [ "$$x" = "dummy" ]; then continue; fi; \
+		fn=`basename $$x`; \
+		$(ECHO) "$(RM) $(DESTDIR)$(INSTALLTOP)/bin/$$fn"; \
+		$(RM) $(DESTDIR)$(INSTALLTOP)/bin/$$fn; \
+	done
+	-$(RMDIR) $(DESTDIR)$(INSTALLTOP)/bin
+
+uninstall_runtime_libs:
+	@$(ECHO) "*** Uninstalling runtime libraries"
+	@ : {- output_off() unless windowsdll(); "" -}
+	@set -e; for s in dummy $(INSTALL_SHLIBS); do \
+		if [ "$$s" = "dummy" ]; then continue; fi; \
+		fn=`basename $$s`; \
+		$(ECHO) "$(RM) $(DESTDIR)$(INSTALLTOP)/bin/$$fn"; \
+		$(RM) $(DESTDIR)$(INSTALLTOP)/bin/$$fn; \
+	done
+	@ : {- output_on() unless windowsdll(); "" -}
+
+
+install_man_docs:
+	@[ -n "$(INSTALLTOP)" ] || (echo INSTALLTOP should not be empty; exit 1)
+	@$(ECHO) "*** Installing manpages"
+	$(PERL) $(SRCDIR)/util/process_docs.pl \
+		--destdir=$(DESTDIR)$(MANDIR) --type=man --suffix=$(MANSUFFIX)
+
+uninstall_man_docs:
+	@$(ECHO) "*** Uninstalling manpages"
+	$(PERL) $(SRCDIR)/util/process_docs.pl \
+		--destdir=$(DESTDIR)$(MANDIR) --type=man --suffix=$(MANSUFFIX) \
+		--remove
+
+install_html_docs:
+	@[ -n "$(INSTALLTOP)" ] || (echo INSTALLTOP should not be empty; exit 1)
+	@$(ECHO) "*** Installing HTML manpages"
+	$(PERL) $(SRCDIR)/util/process_docs.pl \
+		--destdir=$(DESTDIR)$(HTMLDIR) --type=html
+
+uninstall_html_docs:
+	@$(ECHO) "*** Uninstalling manpages"
+	$(PERL) $(SRCDIR)/util/process_docs.pl \
+		--destdir=$(DESTDIR)$(HTMLDIR) --type=html --remove
+
+
+# Developer targets (note: these are only available on Unix) #########
+
+update: generate errors ordinals
+
+generate: generate_apps generate_crypto_bn generate_crypto_objects \
+          generate_crypto_conf generate_crypto_asn1 generate_fuzz_oids
+
+.PHONY: doc-nits
+doc-nits:
+	(cd $(SRCDIR); $(PERL) util/find-doc-nits -n -p ) >doc-nits
+	@if [ -s doc-nits ] ; then cat doc-nits ; exit 1; \
+	else echo 'doc-nits: no errors.'; rm doc-nits ; fi
+
+# Test coverage is a good idea for the future
+#coverage: $(PROGRAMS) $(TESTPROGRAMS)
+#	...
+
+lint:
+	lint -DLINT $(INCLUDES) $(SRCS)
+
+generate_apps:
+	( cd $(SRCDIR); $(PERL) VMS/VMSify-conf.pl \
+				< apps/openssl.cnf > apps/openssl-vms.cnf )
+
+generate_crypto_bn:
+	( cd $(SRCDIR); $(PERL) crypto/bn/bn_prime.pl > crypto/bn/bn_prime.h )
+
+generate_crypto_objects:
+	( cd $(SRCDIR); $(PERL) crypto/objects/objects.pl -n \
+				crypto/objects/objects.txt \
+				crypto/objects/obj_mac.num \
+				> crypto/objects/obj_mac.new && \
+	    mv crypto/objects/obj_mac.new crypto/objects/obj_mac.num )
+	( cd $(SRCDIR); $(PERL) crypto/objects/objects.pl \
+				crypto/objects/objects.txt \
+				crypto/objects/obj_mac.num \
+				> include/openssl/obj_mac.h )
+	( cd $(SRCDIR); $(PERL) crypto/objects/obj_dat.pl \
+				include/openssl/obj_mac.h \
+				> crypto/objects/obj_dat.h )
+	( cd $(SRCDIR); $(PERL) crypto/objects/objxref.pl \
+				crypto/objects/obj_mac.num \
+				crypto/objects/obj_xref.txt \
+				> crypto/objects/obj_xref.h )
+
+generate_crypto_conf:
+	( cd $(SRCDIR); $(PERL) crypto/conf/keysets.pl \
+			        > crypto/conf/conf_def.h )
+
+generate_crypto_asn1:
+	( cd $(SRCDIR); $(PERL) crypto/asn1/charmap.pl \
+			        > crypto/asn1/charmap.h )
+
+generate_fuzz_oids:
+	( cd $(SRCDIR); $(PERL) fuzz/mkfuzzoids.pl \
+				crypto/objects/obj_dat.h \
+				> fuzz/oids.txt )
+
+# Set to -force to force a rebuild
+ERROR_REBUILD=
+errors:
+	( b=`pwd`; set -e; cd $(SRCDIR); \
+          $(PERL) util/ck_errf.pl -strict -internal; \
+          $(PERL) -I$$b util/mkerr.pl $(ERROR_REBUILD) -internal )
+	( b=`pwd`; set -e; cd $(SRCDIR)/engines; \
+          for E in *.ec ; do \
+              $(PERL) ../util/ck_errf.pl -strict \
+                -conf $$E `basename $$E .ec`.c; \
+              $(PERL) -I$$b ../util/mkerr.pl $(ERROR_REBUILD) -static \
+                -conf $$E `basename $$E .ec`.c ; \
+          done )
+
+ordinals:
+	( b=`pwd`; cd $(SRCDIR); $(PERL) -I$$b util/mkdef.pl crypto update )
+	( b=`pwd`; cd $(SRCDIR); $(PERL) -I$$b util/mkdef.pl ssl update )
+
+test_ordinals:
+	( cd test; \
+	  SRCTOP=../$(SRCDIR) \
+	  BLDTOP=../$(BLDDIR) \
+	    $(PERL) ../$(SRCDIR)/test/run_tests.pl test_ordinals )
+
+tags TAGS: FORCE
+	rm -f TAGS tags
+	-ctags -R .
+	-etags `find . -name '*.[ch]' -o -name '*.pm'`
+
+# Release targets (note: only available on Unix) #####################
+
+tar:
+	(cd $(SRCDIR); ./util/mktar.sh --name='$(NAME)' --tarfile='$(TARFILE)')
+
+# Helper targets #####################################################
+
+link-utils: $(BLDDIR)/util/opensslwrap.sh
+
+$(BLDDIR)/util/opensslwrap.sh: configdata.pm
+	@if [ "$(SRCDIR)" != "$(BLDDIR)" ]; then \
+	    mkdir -p "$(BLDDIR)/util"; \
+	    ln -sf "../$(SRCDIR)/util/opensslwrap.sh" "$(BLDDIR)/util"; \
+	fi
+
+FORCE:
+
+# Building targets ###################################################
+
+libcrypto.pc libssl.pc openssl.pc: configdata.pm $(LIBS) {- join(" ",map { shlib_simple($_) } @{$unified_info{libraries}}) -}
+libcrypto.pc:
+	@ ( echo 'prefix=$(INSTALLTOP)'; \
+	    echo 'exec_prefix=$${prefix}'; \
+	    if [ -n "$(LIBDIR)" ]; then \
+	        echo 'libdir=$${exec_prefix}/$(LIBDIR)'; \
+	    else \
+	        echo 'libdir=$(libdir)'; \
+	    fi; \
+	    echo 'includedir=$${prefix}/include'; \
+	    echo 'enginesdir=$${libdir}/engines-{- $sover_dirname -}'; \
+	    echo ''; \
+	    echo 'Name: OpenSSL-libcrypto'; \
+	    echo 'Description: OpenSSL cryptography library'; \
+	    echo 'Version: '$(VERSION); \
+	    echo 'Libs: -L$${libdir} -lcrypto'; \
+	    echo 'Libs.private: $(LIB_EX_LIBS)'; \
+	    echo 'Cflags: -I$${includedir}' ) > libcrypto.pc
+
+libssl.pc:
+	@ ( echo 'prefix=$(INSTALLTOP)'; \
+	    echo 'exec_prefix=$${prefix}'; \
+	    if [ -n "$(LIBDIR)" ]; then \
+	        echo 'libdir=$${exec_prefix}/$(LIBDIR)'; \
+	    else \
+	        echo 'libdir=$(libdir)'; \
+	    fi; \
+	    echo 'includedir=$${prefix}/include'; \
+	    echo ''; \
+	    echo 'Name: OpenSSL-libssl'; \
+	    echo 'Description: Secure Sockets Layer and cryptography libraries'; \
+	    echo 'Version: '$(VERSION); \
+	    echo 'Requires.private: libcrypto'; \
+	    echo 'Libs: -L$${libdir} -lssl'; \
+	    echo 'Cflags: -I$${includedir}' ) > libssl.pc
+
+openssl.pc:
+	@ ( echo 'prefix=$(INSTALLTOP)'; \
+	    echo 'exec_prefix=$${prefix}'; \
+	    if [ -n "$(LIBDIR)" ]; then \
+	        echo 'libdir=$${exec_prefix}/$(LIBDIR)'; \
+	    else \
+	        echo 'libdir=$(libdir)'; \
+	    fi; \
+	    echo 'includedir=$${prefix}/include'; \
+	    echo ''; \
+	    echo 'Name: OpenSSL'; \
+	    echo 'Description: Secure Sockets Layer and cryptography libraries and tools'; \
+	    echo 'Version: '$(VERSION); \
+	    echo 'Requires: libssl libcrypto' ) > openssl.pc
+
+configdata.pm: $(SRCDIR)/Configure $(SRCDIR)/config {- join(" ", @{$config{build_file_templates}}, @{$config{build_infos}}, @{$config{conf_files}}) -}
+	@echo "Detected changed: $?"
+	$(PERL) configdata.pm -r
+	@echo "**************************************************"
+	@echo "***                                            ***"
+	@echo "***   Please run the same make command again   ***"
+	@echo "***                                            ***"
+	@echo "**************************************************"
+	@false
+
+reconfigure reconf:
+	$(PERL) configdata.pm -r
+
+{-
+  use File::Basename;
+  use File::Spec::Functions qw/:DEFAULT abs2rel rel2abs/;
+
+  # Helper function to figure out dependencies on libraries
+  # It takes a list of library names and outputs a list of dependencies
+  sub compute_lib_depends {
+      if ($disabled{shared}) {
+          return map { lib($_) } @_;
+      }
+
+      # Depending on shared libraries:
+      # On Windows POSIX layers, we depend on {libname}.dll.a
+      # On Unix platforms, we depend on {shlibname}.so
+      return map { $_ =~ /\.a$/ ? $`.$libext : shlib_simple($_) } @_;
+  }
+
+  sub generatesrc {
+      my %args = @_;
+      my $generator = join(" ", @{$args{generator}});
+      my $generator_incs = join("", map { " -I".$_ } @{$args{generator_incs}});
+      my $incs = join("", map { " -I".$_ } @{$args{incs}});
+      my $deps = join(" ", @{$args{generator_deps}}, @{$args{deps}});
+
+      if ($args{src} !~ /\.[sS]$/) {
+          if ($args{generator}->[0] =~ m|^.*\.in$|) {
+              my $dofile = abs2rel(rel2abs(catfile($config{sourcedir},
+                                                   "util", "dofile.pl")),
+                                   rel2abs($config{builddir}));
+              return <<"EOF";
+$args{src}: $args{generator}->[0] $deps
+	\$(PERL) "-I\$(BLDDIR)" -Mconfigdata "$dofile" \\
+	    "-o$target{build_file}" $generator > \$@
+EOF
+	  } else {
+              return <<"EOF";
+$args{src}: $args{generator}->[0] $deps
+	\$(PERL)$generator_incs $generator > \$@
+EOF
+	  }
+      } else {
+          if ($args{generator}->[0] =~ /\.pl$/) {
+              $generator = 'CC="$(CC)" $(PERL)'.$generator_incs.' '.$generator;
+          } elsif ($args{generator}->[0] =~ /\.m4$/) {
+              $generator = 'm4 -B 8192'.$generator_incs.' '.$generator.' >'
+          } elsif ($args{generator}->[0] =~ /\.S$/) {
+              $generator = undef;
+          } else {
+              die "Generator type for $args{src} unknown: $generator\n";
+          }
+
+          my $cppflags = {
+              lib => '$(LIB_CFLAGS) $(LIB_CPPFLAGS)',
+              dso => '$(DSO_CFLAGS) $(DSO_CPPFLAGS)',
+              bin => '$(BIN_CFLAGS) $(BIN_CPPFLAGS)'
+          } -> {$args{intent}};
+          if (defined($generator)) {
+              return <<"EOF";
+$args{src}: $args{generator}->[0] $deps
+	$generator \$@
+EOF
+          }
+          return <<"EOF";
+$args{src}: $args{generator}->[0] $deps
+	\$(CC) $incs $cppflags -E $args{generator}->[0] | \\
+	\$(PERL) -ne '/^#(line)?\\s*[0-9]+/ or print' > \$@
+EOF
+      }
+  }
+
+  # Should one wonder about the end of the Perl snippet, it's because this
+  # second regexp eats up line endings as well, if the removed path is the
+  # last in the line.  We may therefore need to put back a line ending.
+  sub src2obj {
+      my %args = @_;
+      (my $obj = $args{obj}) =~ s|\.o$||;
+      my @srcs = @{$args{srcs}};
+      my $srcs = join(" ",  @srcs);
+      my $deps = join(" ", @srcs, @{$args{deps}});
+      my $incs = join("", map { " -I".$_ } @{$args{incs}});
+      my $cmd;
+      my $cmdflags;
+      my $cmdcompile;
+      if (grep /\.rc$/, @srcs) {
+          $cmd = '$(RC)';
+          $cmdflags = '$(RCFLAGS)';
+          $cmdcompile = '';
+      } elsif (grep /\.(cc|cpp)$/, @srcs) {
+          $cmd = '$(CXX)';
+          $cmdcompile = ' -c';
+          $cmdflags = {
+              lib => '$(LIB_CXXFLAGS) $(LIB_CPPFLAGS)',
+              dso => '$(DSO_CXXFLAGS) $(DSO_CPPFLAGS)',
+              bin => '$(BIN_CXXFLAGS) $(BIN_CPPFLAGS)'
+          } -> {$args{intent}};
+      } else {
+          $cmd = '$(CC)';
+          $cmdcompile = ' -c';
+          $cmdflags = {
+              lib => '$(LIB_CFLAGS) $(LIB_CPPFLAGS)',
+              dso => '$(DSO_CFLAGS) $(DSO_CPPFLAGS)',
+              bin => '$(BIN_CFLAGS) $(BIN_CPPFLAGS)'
+          } -> {$args{intent}};
+      }
+      my $recipe;
+      # extension-specific rules
+      if (grep /\.s$/, @srcs) {
+          $recipe .= <<"EOF";
+$obj$objext: $deps
+	$cmd $cmdflags -c -o \$\@ $srcs
+EOF
+      } elsif (grep /\.S$/, @srcs) {
+          # Originally there was mutli-step rule with $(CC) -E file.S
+          # followed by $(CC) -c file.s. It compensated for one of
+          # legacy platform compiler's inability to handle .S files.
+          # The platform is long discontinued by vendor so there is
+          # hardly a point to drag it along...
+          $recipe .= <<"EOF";
+$obj$objext: $deps
+	$cmd $incs $cmdflags -c -o \$\@ $srcs
+EOF
+      } elsif (defined $makedepprog && $makedepprog !~ /\/makedepend/
+               && !grep /\.rc$/, @srcs) {
+          $recipe .= <<"EOF";
+$obj$objext: $deps
+	$cmd $incs $cmdflags -MMD -MF $obj$depext.tmp -MT \$\@ -c -o \$\@ $srcs
+	\@touch $obj$depext.tmp
+	\@if cmp $obj$depext.tmp $obj$depext > /dev/null 2> /dev/null; then \\
+		rm -f $obj$depext.tmp; \\
+	else \\
+		mv $obj$depext.tmp $obj$depext; \\
+	fi
+EOF
+      } else {
+          $recipe .= <<"EOF";
+$obj$objext: $deps
+	$cmd $incs $cmdflags $cmdcompile -o \$\@ $srcs
+EOF
+          if (defined $makedepprog  && $makedepprog =~ /\/makedepend/) {
+              $recipe .= <<"EOF";
+	\$(MAKEDEPEND) -f- -Y -- $incs $cmdflags -- $srcs 2>/dev/null \\
+	    > $obj$depext
+EOF
+          }
+      }
+      return $recipe;
+  }
+  # We *know* this routine is only called when we've configure 'shared'.
+  sub libobj2shlib {
+      my %args = @_;
+      my $lib = $args{lib};
+      my $shlib = $args{shlib};
+      my $libd = dirname($lib);
+      my $libn = basename($lib);
+      (my $libname = $libn) =~ s/^lib//;
+      my @linkdirs = ();
+      foreach (@{args{deps}}) {
+          my $d = dirname($_);
+          push @linkdirs, $d unless grep { $d eq $_ } @linkdirs;
+      }
+      my $linkflags = join("", map { "-L$_ " } @linkdirs);
+      my $linklibs = join("", map { my $f = basename($_);
+                                    (my $l = $f) =~ s/^lib//;
+                                    " -l$l" } @{$args{deps}});
+      my @objs = map { (my $x = $_) =~ s|\.o$||; "$x$objext" }
+                 grep { $_ !~ m/\.(?:def|map)$/ }
+                 @{$args{objs}};
+      my @defs = grep { $_ =~ /\.(?:def|map)$/ } @{$args{objs}};
+      my @deps = compute_lib_depends(@{$args{deps}});
+      die "More than one exported symbol map" if scalar @defs > 1;
+      my $objs = join(" ", @objs);
+      my $deps = join(" ", @objs, @defs, @deps);
+      my $simple = shlib_simple($lib);
+      my $full = shlib($lib);
+      my $target = "$simple $full";
+      my $shared_soname = "";
+      $shared_soname .= ' '.$target{shared_sonameflag}.basename($full)
+          if defined $target{shared_sonameflag};
+      my $shared_imp = "";
+      $shared_imp .= ' '.$target{shared_impflag}.basename($simple)
+          if defined $target{shared_impflag};
+      my $shared_def = join("", map { ' '.$target{shared_defflag}.$_ } @defs);
+      my $recipe = <<"EOF";
+$target: $deps
+	\$(CC) \$(LIB_CFLAGS) $linkflags\$(LIB_LDFLAGS)$shared_soname$shared_imp \\
+		-o $full$shared_def $objs \\
+                $linklibs \$(LIB_EX_LIBS)
+EOF
+      if (windowsdll()) {
+          $recipe .= <<"EOF";
+	rm -f apps/$shlib'\$(SHLIB_EXT)'
+	rm -f test/$shlib'\$(SHLIB_EXT)'
+	rm -f fuzz/$shlib'\$(SHLIB_EXT)'
+	cp -p $shlib'\$(SHLIB_EXT)' apps/
+	cp -p $shlib'\$(SHLIB_EXT)' test/
+	cp -p $shlib'\$(SHLIB_EXT)' fuzz/
+EOF
+      } elsif (sharedaix()) {
+          $recipe .= <<"EOF";
+	rm -f $simple && \\
+	\$(AR) r $simple $full
+EOF
+      } else {
+          $recipe .= <<"EOF";
+	if [ '$simple' != '$full' ]; then \\
+		rm -f $simple; \\
+		ln -s $full $simple; \\
+	fi
+EOF
+      }
+  }
+  sub obj2dso {
+      my %args = @_;
+      my $dso = $args{lib};
+      my $dsod = dirname($dso);
+      my $dson = basename($dso);
+      my @linkdirs = ();
+      foreach (@{args{deps}}) {
+          my $d = dirname($_);
+          push @linkdirs, $d unless grep { $d eq $_ } @linkdirs;
+      }
+      my $linkflags = join("", map { "-L$_ " } @linkdirs);
+      my $linklibs = join("", map { my $f = basename($_);
+                                    (my $l = $f) =~ s/^lib//;
+                                    " -l$l" } @{$args{deps}});
+      my @objs = map { (my $x = $_) =~ s|\.o$||; "$x$objext" }
+                 grep { $_ !~ m/\.(?:def|map)$/ }
+                 @{$args{objs}};
+      my @deps = compute_lib_depends(@{$args{deps}});
+      my $objs = join(" ", @objs);
+      my $deps = join(" ", @deps);
+      my $target = dso($dso);
+      return <<"EOF";
+$target: $objs $deps
+	\$(CC) \$(DSO_CFLAGS) $linkflags\$(DSO_LDFLAGS) \\
+		-o $target $objs \\
+                $linklibs \$(DSO_EX_LIBS)
+EOF
+  }
+  sub obj2lib {
+      my %args = @_;
+      (my $lib = $args{lib}) =~ s/\.a$//;
+      my @objs = map { (my $x = $_) =~ s|\.o$|$objext|; $x } @{$args{objs}};
+      my $objs = join(" ", @objs);
+      return <<"EOF";
+$lib$libext: $objs
+	\$(AR) \$(ARFLAGS) \$\@ \$\?
+	\$(RANLIB) \$\@ || echo Never mind.
+EOF
+  }
+  sub obj2bin {
+      my %args = @_;
+      my $bin = $args{bin};
+      my $bind = dirname($bin);
+      my $binn = basename($bin);
+      my $objs = join(" ", map { (my $x = $_) =~ s|\.o$||; "$x$objext" }
+                           @{$args{objs}});
+      my $deps = join(" ",compute_lib_depends(@{$args{deps}}));
+      my @linkdirs = ();
+      foreach (@{args{deps}}) {
+          next if $_ =~ /\.a$/;
+          my $d = dirname($_);
+          push @linkdirs, $d unless grep { $d eq $_ } @linkdirs;
+      }
+      my $linkflags = join("", map { "-L$_ " } @linkdirs);
+      my $linklibs = join("", map { if ($_ =~ s/\.a$//) {
+                                        " $_$libext";
+                                    } else {
+                                        my $f = basename($_);
+                                        (my $l = $f) =~ s/^lib//;
+                                        " -l$l"
+                                    }
+                                  } @{$args{deps}});
+      my $cmd = '$(CC)';
+      my $cmdflags = '$(BIN_CFLAGS)';
+      if (grep /_cc\.o$/, @{$args{objs}}) {
+          $cmd = '$(CXX)';
+          $cmdflags = '$(BIN_CXXFLAGS)';
+      }
+      return <<"EOF";
+$bin$exeext: $objs $deps
+	rm -f $bin$exeext
+	\$\${LDCMD:-$cmd} $cmdflags $linkflags\$(BIN_LDFLAGS) \\
+		-o $bin$exeext $objs \\
+		$linklibs \$(BIN_EX_LIBS)
+EOF
+  }
+  sub in2script {
+      my %args = @_;
+      my $script = $args{script};
+      my $sources = join(" ", @{$args{sources}});
+      my $dofile = abs2rel(rel2abs(catfile($config{sourcedir},
+                                           "util", "dofile.pl")),
+                           rel2abs($config{builddir}));
+      return <<"EOF";
+$script: $sources
+	\$(PERL) "-I\$(BLDDIR)" -Mconfigdata "$dofile" \\
+	    "-o$target{build_file}" $sources > "$script"
+	chmod a+x $script
+EOF
+  }
+  sub generatedir {
+      my %args = @_;
+      my $dir = $args{dir};
+      my @deps = map { s|\.o$|$objext|; $_ } @{$args{deps}};
+      my @actions = ();
+      my %extinfo = ( dso => $dsoext,
+                      lib => $libext,
+                      bin => $exeext );
+
+      # We already have a 'test' target, and the top directory is just plain
+      # silly
+      return if $dir eq "test" || $dir eq ".";
+
+      foreach my $type (("dso", "lib", "bin", "script")) {
+          next unless defined($unified_info{dirinfo}->{$dir}->{products}->{$type});
+          # For lib object files, we could update the library.  However, it
+          # was decided that it's enough to build the directory local object
+          # files, so we don't need to add any actions, and the dependencies
+          # are already taken care of.
+          if ($type ne "lib") {
+              foreach my $prod (@{$unified_info{dirinfo}->{$dir}->{products}->{$type}}) {
+                  if (dirname($prod) eq $dir) {
+                      push @deps, $prod.$extinfo{$type};
+                  } else {
+                      push @actions, "\t@ : No support to produce $type ".join(", ", @{$unified_info{dirinfo}->{$dir}->{products}->{$type}});
+                  }
+              }
+          }
+      }
+
+      my $deps = join(" ", @deps);
+      my $actions = join("\n", "", @actions);
+      return <<"EOF";
+$dir $dir/: $deps$actions
+EOF
+  }
+  ""    # Important!  This becomes part of the template result.
+-}
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/unix-checker.pm b/trunk/3rdparty/openssl-1.1-fit/Configurations/unix-checker.pm
new file mode 100644
index 000000000..b39b0eb7c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/unix-checker.pm
@@ -0,0 +1,22 @@
+#! /usr/bin/perl
+
+use Config;
+
+# Check that the perl implementation file modules generate paths that
+# we expect for the platform
+use File::Spec::Functions qw(:DEFAULT rel2abs);
+
+if (rel2abs('.') !~ m|/|) {
+    die <<EOF;
+
+******************************************************************************
+This perl implementation doesn't produce Unix like paths (with forward slash
+directory separators).  Please use an implementation that matches your
+building platform.
+
+This Perl version: $Config{version} for $Config{archname}
+******************************************************************************
+EOF
+}
+
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/windows-checker.pm b/trunk/3rdparty/openssl-1.1-fit/Configurations/windows-checker.pm
new file mode 100644
index 000000000..4b7105df3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/windows-checker.pm
@@ -0,0 +1,22 @@
+#! /usr/bin/perl
+
+use Config;
+
+# Check that the perl implementation file modules generate paths that
+# we expect for the platform
+use File::Spec::Functions qw(:DEFAULT rel2abs);
+
+if (!$ENV{CONFIGURE_INSIST} && rel2abs('.') !~ m|\\|) {
+    die <<EOF;
+
+******************************************************************************
+This perl implementation doesn't produce Windows like paths (with backward
+slash directory separators).  Please use an implementation that matches your
+building platform.
+
+This Perl version: $Config{version} for $Config{archname}
+******************************************************************************
+EOF
+}
+
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configurations/windows-makefile.tmpl b/trunk/3rdparty/openssl-1.1-fit/Configurations/windows-makefile.tmpl
new file mode 100644
index 000000000..d420bfff3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configurations/windows-makefile.tmpl
@@ -0,0 +1,760 @@
+##
+## Makefile for OpenSSL
+##
+## {- join("\n## ", @autowarntext) -}
+{-
+ our $objext = $target{obj_extension} || ".obj";
+ our $resext = $target{res_extension} || ".res";
+ our $depext = $target{dep_extension} || ".d";
+ our $exeext = $target{exe_extension} || ".exe";
+ our $libext = $target{lib_extension} || ".lib";
+ our $shlibext = $target{shared_extension} || ".dll";
+ our $shlibextimport = $target{shared_import_extension} || ".lib";
+ our $dsoext = $target{dso_extension} || ".dll";
+
+ (our $sover_dirname = $config{shlib_version_number}) =~ s|\.|_|g;
+
+ my $build_scheme = $target{build_scheme};
+ my $install_flavour = $build_scheme->[$#$build_scheme]; # last element
+ my $win_installenv =
+     $install_flavour eq "VC-WOW" ? "ProgramFiles(x86)"
+                                  : "ProgramW6432";
+ my $win_commonenv =
+     $install_flavour eq "VC-WOW" ? "CommonProgramFiles(x86)"
+                                  : "CommonProgramW6432";
+ our $win_installroot =
+     defined($ENV{$win_installenv}) ? $win_installenv : 'ProgramFiles';
+ our $win_commonroot =
+     defined($ENV{$win_commonenv}) ? $win_commonenv : 'CommonProgramFiles';
+
+ # expand variables early
+ $win_installroot = $ENV{$win_installroot};
+ $win_commonroot = $ENV{$win_commonroot};
+
+ sub shlib {
+     my $lib = shift;
+     return () if $disabled{shared} || $lib =~ /\.a$/;
+     return () unless defined $unified_info{sharednames}->{$lib};
+     return $unified_info{sharednames}->{$lib} . $shlibext;
+ }
+
+ sub lib {
+     (my $lib = shift) =~ s/\.a$//;
+     $lib .= '_static'
+         if (defined $unified_info{sharednames}->{$lib});
+     return $lib . $libext;
+ }
+
+ sub shlib_import {
+     my $lib = shift;
+     return () if $disabled{shared} || $lib =~ /\.a$/;
+     return $lib . $shlibextimport;
+ }
+
+ sub dso {
+     my $dso = shift;
+
+     return $dso . $dsoext;
+ }
+ # This makes sure things get built in the order they need
+ # to. You're welcome.
+ sub dependmagic {
+     my $target = shift;
+
+     return "$target: build_generated\n\t\$(MAKE) /\$(MAKEFLAGS) depend && \$(MAKE) /\$(MAKEFLAGS) _$target\n_$target";
+ }
+ '';
+-}
+
+PLATFORM={- $config{target} -}
+SRCDIR={- $config{sourcedir} -}
+BLDDIR={- $config{builddir} -}
+
+VERSION={- $config{version} -}
+MAJOR={- $config{major} -}
+MINOR={- $config{minor} -}
+
+SHLIB_VERSION_NUMBER={- $config{shlib_version_number} -}
+
+LIBS={- join(" ", map { ( shlib_import($_), lib($_) ) } @{$unified_info{libraries}}) -}
+SHLIBS={- join(" ", map { shlib($_) } @{$unified_info{libraries}}) -}
+SHLIBPDBS={- join(" ", map { local $shlibext = ".pdb"; shlib($_) } @{$unified_info{libraries}}) -}
+ENGINES={- join(" ", map { dso($_) } @{$unified_info{engines}}) -}
+ENGINEPDBS={- join(" ", map { local $dsoext = ".pdb"; dso($_) } @{$unified_info{engines}}) -}
+PROGRAMS={- our @PROGRAMS = map { $_.$exeext } @{$unified_info{programs}}; join(" ", @PROGRAMS) -}
+PROGRAMPDBS={- join(" ", map { $_.".pdb" } @{$unified_info{programs}}) -}
+SCRIPTS={- join(" ", @{$unified_info{scripts}}) -}
+{- output_off() if $disabled{makedepend}; "" -}
+DEPS={- join(" ", map { (my $x = $_) =~ s|\.o$|$depext|; $x; }
+                  grep { $unified_info{sources}->{$_}->[0] =~ /\.c$/ }
+                  keys %{$unified_info{sources}}); -}
+{- output_on() if $disabled{makedepend}; "" -}
+GENERATED_MANDATORY={- join(" ", @{$unified_info{depends}->{""}} ) -}
+GENERATED={- # common0.tmpl provides @generated
+             join(" ", map { (my $x = $_) =~ s|\.[sS]$|.asm|; $x }
+                       @generated) -}
+
+INSTALL_LIBS={- join(" ", map { quotify1(shlib_import($_) or lib($_)) } @{$unified_info{install}->{libraries}}) -}
+INSTALL_SHLIBS={- join(" ", map { quotify_l(shlib($_)) } @{$unified_info{install}->{libraries}}) -}
+INSTALL_SHLIBPDBS={- join(" ", map { local $shlibext = ".pdb"; quotify_l(shlib($_)) } @{$unified_info{install}->{libraries}}) -}
+INSTALL_ENGINES={- join(" ", map { quotify1(dso($_)) } @{$unified_info{install}->{engines}}) -}
+INSTALL_ENGINEPDBS={- join(" ", map { local $dsoext = ".pdb"; quotify1(dso($_)) } @{$unified_info{install}->{engines}}) -}
+INSTALL_PROGRAMS={- join(" ", map { quotify1($_.$exeext) } grep { !m|^test\\| } @{$unified_info{install}->{programs}}) -}
+INSTALL_PROGRAMPDBS={- join(" ", map { quotify1($_.".pdb") } grep { !m|^test\\| } @{$unified_info{install}->{programs}}) -}
+{- output_off() if $disabled{apps}; "" -}
+BIN_SCRIPTS="$(BLDDIR)\tools\c_rehash.pl"
+MISC_SCRIPTS="$(BLDDIR)\apps\CA.pl" "$(BLDDIR)\apps\tsget.pl"
+{- output_on() if $disabled{apps}; "" -}
+
+APPS_OPENSSL={- use File::Spec::Functions;
+                "\"".catfile("apps","openssl")."\"" -}
+
+# Do not edit these manually. Use Configure with --prefix or --openssldir
+# to change this!  Short explanation in the top comment in Configure
+INSTALLTOP_dev={- # $prefix is used in the OPENSSLDIR perl snippet
+                  #
+                  use File::Spec::Functions qw(:DEFAULT splitpath);
+                  our $prefix = canonpath($config{prefix}
+                                          || "$win_installroot\\OpenSSL");
+                  our ($prefix_dev, $prefix_dir, $prefix_file) =
+                      splitpath($prefix, 1);
+                  $prefix_dev -}
+INSTALLTOP_dir={- canonpath($prefix_dir) -}
+OPENSSLDIR_dev={- #
+                  # The logic here is that if no --openssldir was given,
+                  # OPENSSLDIR will get the value "$win_commonroot\\SSL".
+                  # If --openssldir was given and the value is an absolute
+                  # path, OPENSSLDIR will get its value without change.
+                  # If the value from --openssldir is a relative path,
+                  # OPENSSLDIR will get $prefix with the --openssldir
+                  # value appended as a subdirectory.
+                  #
+                  use File::Spec::Functions qw(:DEFAULT splitpath);
+                  our $openssldir =
+                      $config{openssldir} ?
+                          (file_name_is_absolute($config{openssldir}) ?
+                               canonpath($config{openssldir})
+                               : catdir($prefix, $config{openssldir}))
+                          : canonpath("$win_commonroot\\SSL");
+                  our ($openssldir_dev, $openssldir_dir, $openssldir_file) =
+                      splitpath($openssldir, 1);
+                  $openssldir_dev -}
+OPENSSLDIR_dir={- canonpath($openssldir_dir) -}
+LIBDIR={- our $libdir = $config{libdir} || "lib";
+          file_name_is_absolute($libdir) ? "" : $libdir -}
+ENGINESDIR_dev={- use File::Spec::Functions qw(:DEFAULT splitpath);
+                  our $enginesdir = catdir($prefix,$libdir,"engines-$sover_dirname");
+                  our ($enginesdir_dev, $enginesdir_dir, $enginesdir_file) =
+                      splitpath($enginesdir, 1);
+                  $enginesdir_dev -}
+ENGINESDIR_dir={- canonpath($enginesdir_dir) -}
+!IF "$(DESTDIR)" != ""
+INSTALLTOP=$(DESTDIR)$(INSTALLTOP_dir)
+OPENSSLDIR=$(DESTDIR)$(OPENSSLDIR_dir)
+ENGINESDIR=$(DESTDIR)$(ENGINESDIR_dir)
+!ELSE
+INSTALLTOP=$(INSTALLTOP_dev)$(INSTALLTOP_dir)
+OPENSSLDIR=$(OPENSSLDIR_dev)$(OPENSSLDIR_dir)
+ENGINESDIR=$(ENGINESDIR_dev)$(ENGINESDIR_dir)
+!ENDIF
+
+# $(libdir) is chosen to be compatible with the GNU coding standards
+libdir={- file_name_is_absolute($libdir)
+          ? $libdir : '$(INSTALLTOP)\$(LIBDIR)' -}
+
+##### User defined commands and flags ################################
+
+CC={- $config{CC} -}
+CPP={- $config{CPP} -}
+CPPFLAGS={- our $cppflags1 = join(" ",
+                                  (map { "-D".$_} @{$config{CPPDEFINES}}),
+                                  (map { " /I ".$_} @{$config{CPPINCLUDES}}),
+                                  @{$config{CPPFLAGS}}) -}
+CFLAGS={- join(' ', @{$config{CFLAGS}}) -}
+LD={- $config{LD} -}
+LDFLAGS={- join(' ', @{$config{LDFLAGS}}) -}
+EX_LIBS={- join(' ', @{$config{LDLIBS}}) -}
+
+PERL={- $config{PERL} -}
+
+AR={- $config{AR} -}
+ARFLAGS= {- join(' ', @{$config{ARFLAGS}}) -}
+
+MT={- $config{MT} -}
+MTFLAGS= {- join(' ', @{$config{MTFLAGS}}) -}
+
+AS={- $config{AS} -}
+ASFLAGS={- join(' ', @{$config{ASFLAGS}}) -}
+
+RC={- $config{RC} -}
+
+ECHO="$(PERL)" "$(SRCDIR)\util\echo.pl"
+
+##### Special command flags ##########################################
+
+COUTFLAG={- $target{coutflag} -}$(OSSL_EMPTY)
+LDOUTFLAG={- $target{ldoutflag} -}$(OSSL_EMPTY)
+AROUTFLAG={- $target{aroutflag} -}$(OSSL_EMPTY)
+MTINFLAG={- $target{mtinflag} -}$(OSSL_EMPTY)
+MTOUTFLAG={- $target{mtoutflag} -}$(OSSL_EMPTY)
+ASOUTFLAG={- $target{asoutflag} -}$(OSSL_EMPTY)
+RCOUTFLAG={- $target{rcoutflag} -}$(OSSL_EMPTY)
+
+##### Project flags ##################################################
+
+# Variables starting with CNF_ are common variables for all product types
+
+CNF_ASFLAGS={- join(' ', $target{asflags} || (),
+                         @{$config{asflags}}) -}
+CNF_CPPFLAGS={- our $cppfags2 =
+                    join(' ', $target{cppflags} || (),
+                              (map { '-D'.quotify1($_) } @{$target{defines}},
+                                                         @{$config{defines}}),
+                              (map { '-I'.quotify1($_) } @{$target{includes}},
+                                                         @{$config{includes}}),
+                              @{$config{cppflags}}) -}
+CNF_CFLAGS={- join(' ', $target{cflags} || (),
+                        @{$config{cflags}}) -}
+CNF_CXXFLAGS={- join(' ', $target{cxxflags} || (),
+                          @{$config{cxxflags}}) -}
+CNF_LDFLAGS={- join(' ', $target{lflags} || (),
+                         @{$config{lflags}}) -}
+CNF_EX_LIBS={- join(' ', $target{ex_libs} || (),
+                         @{$config{ex_libs}}) -}
+
+# Variables starting with LIB_ are used to build library object files
+# and shared libraries.
+# Variables starting with DSO_ are used to build DSOs and their object files.
+# Variables starting with BIN_ are used to build programs and their object
+# files.
+
+LIB_ASFLAGS={- join(' ', $target{lib_asflags} || (),
+                         @{$config{lib_asflags}},
+                         '$(CNF_ASFLAGS)', '$(ASFLAGS)') -}
+LIB_CPPFLAGS={- our $lib_cppflags =
+                join(' ', $target{lib_cppflags} || (),
+                          $target{shared_cppflag} || (),
+                          (map { '-D'.quotify1($_) }
+                               @{$target{lib_defines}},
+                               @{$target{shared_defines}},
+                               @{$config{lib_defines}},
+                               @{$config{shared_defines}}),
+                          (map { '-I'.quotify1($_) }
+                               @{$target{lib_includes}},
+                               @{$target{shared_includes}},
+                               @{$config{lib_includes}},
+                               @{$config{shared_includes}}),
+                          @{$config{lib_cppflags}},
+                          @{$config{shared_cppflag}});
+                join(' ', $lib_cppflags,
+                          (map { '-D'.quotify1($_) }
+                               "OPENSSLDIR=\"$openssldir\"",
+                               "ENGINESDIR=\"$enginesdir\""),
+                          '$(CNF_CPPFLAGS)', '$(CPPFLAGS)') -}
+LIB_CFLAGS={- join(' ', $target{lib_cflags} || (),
+                        $target{shared_cflag} || (),
+                        @{$config{lib_cflags}},
+                        @{$config{shared_cflag}},
+                        '$(CNF_CFLAGS)', '$(CFLAGS)') -}
+LIB_LDFLAGS={- join(' ', $target{shared_ldflag} || (),
+                         $config{shared_ldflag} || (),
+                         '$(CNF_LDFLAGS)', '$(LDFLAGS)') -}
+LIB_EX_LIBS=$(CNF_EX_LIBS) $(EX_LIBS)
+DSO_ASFLAGS={- join(' ', $target{dso_asflags} || (),
+                         $target{module_asflags} || (),
+                         @{$config{dso_asflags}},
+                         @{$config{module_asflags}},
+                         '$(CNF_ASFLAGS)', '$(ASFLAGS)') -}
+DSO_CPPFLAGS={- join(' ', $target{dso_cppflags} || (),
+                          $target{module_cppflags} || (),
+                          @{$config{dso_cppflags}},
+                          @{$config{module_cppflags}},
+                          '$(CNF_CPPFLAGS)', '$(CPPFLAGS)') -}
+DSO_CFLAGS={- join(' ', $target{dso_cflags} || (),
+                        $target{module_cflags} || (),
+                        @{$config{dso_cflags}},
+                        @{$config{module_cflags}},
+                        '$(CNF_CFLAGS)', '$(CFLAGS)') -}
+DSO_LDFLAGS={- join(' ', $target{dso_lflags} || (),
+                         $target{module_ldflags} || (),
+                         @{$config{dso_lflags}},
+                         @{$config{module_ldflags}},
+                         '$(CNF_LDFLAGS)', '$(LDFLAGS)') -}
+DSO_EX_LIBS=$(CNF_EX_LIBS) $(EX_LIBS)
+BIN_ASFLAGS={- join(' ', $target{bin_asflags} || (),
+                         @{$config{bin_asflags}},
+                         '$(CNF_ASFLAGS)', '$(ASFLAGS)') -}
+BIN_CPPFLAGS={- join(' ', $target{bin_cppflags} || (),
+                          @{$config{bin_cppflags}},
+                          '$(CNF_CPPFLAGS)', '$(CPPFLAGS)') -}
+BIN_CFLAGS={- join(' ', $target{bin_cflags} || (),
+                        @{$config{bin_cflags}},
+                        '$(CNF_CFLAGS)', '$(CFLAGS)') -}
+BIN_LDFLAGS={- join(' ', $target{bin_lflags} || (),
+                         @{$config{bin_lflags}},
+                         '$(CNF_LDFLAGS)', '$(LDFLAGS)') -}
+BIN_EX_LIBS=$(CNF_EX_LIBS) $(EX_LIBS)
+
+# CPPFLAGS_Q is used for one thing only: to build up buildinf.h
+CPPFLAGS_Q={- $cppflags1 =~ s|([\\"])|\\$1|g;
+              $cppflags2 =~ s|([\\"])|\\$1|g;
+              join(' ', $lib_cppflags || (), $cppflags2 || (),
+                        $cppflags1 || ()) -}
+
+PERLASM_SCHEME= {- $target{perlasm_scheme} -}
+
+PROCESSOR= {- $config{processor} -}
+
+# The main targets ###################################################
+
+{- dependmagic('all'); -}: build_libs_nodep build_engines_nodep build_programs_nodep
+{- dependmagic('build_libs'); -}: build_libs_nodep
+{- dependmagic('build_engines'); -}: build_engines_nodep
+{- dependmagic('build_programs'); -}: build_programs_nodep
+
+build_generated: $(GENERATED_MANDATORY)
+build_libs_nodep: $(LIBS) {- join(" ",map { shlib_import($_) } @{$unified_info{libraries}}) -}
+build_engines_nodep: $(ENGINES)
+build_programs_nodep: $(PROGRAMS) $(SCRIPTS)
+
+# Kept around for backward compatibility
+build_apps build_tests: build_programs
+
+# Convenience target to prebuild all generated files, not just the mandatory
+# ones
+build_all_generated: $(GENERATED_MANDATORY) $(GENERATED)
+	@{- output_off() if $disabled{makedepend}; "" -}
+	@$(ECHO) "Warning: consider configuring with no-makedepend, because if"
+	@$(ECHO) "         target system doesn't have $(PERL),"
+	@$(ECHO) "         then make will fail..."
+	@{- output_on() if $disabled{makedepend}; "" -}
+
+test: tests
+{- dependmagic('tests'); -}: build_programs_nodep build_engines_nodep
+	@{- output_off() if $disabled{tests}; "" -}
+	-mkdir $(BLDDIR)\test\test-runs
+	set SRCTOP=$(SRCDIR)
+	set BLDTOP=$(BLDDIR)
+	set RESULT_D=$(BLDDIR)\test\test-runs
+	set PERL=$(PERL)
+	set OPENSSL_ENGINES=$(MAKEDIR)\engines
+	set OPENSSL_DEBUG_MEMORY=on
+	"$(PERL)" "$(SRCDIR)\test\run_tests.pl" $(TESTS)
+	@{- if ($disabled{tests}) { output_on(); } else { output_off(); } "" -}
+	@$(ECHO) "Tests are not supported with your chosen Configure options"
+	@{- output_on() if !$disabled{tests}; "" -}
+
+list-tests:
+	@{- output_off() if $disabled{tests}; "" -}
+	@set SRCTOP=$(SRCDIR)
+	@"$(PERL)" "$(SRCDIR)\test\run_tests.pl" list
+	@{- if ($disabled{tests}) { output_on(); } else { output_off(); } "" -}
+	@$(ECHO) "Tests are not supported with your chosen Configure options"
+	@{- output_on() if !$disabled{tests}; "" -}
+
+install: install_sw install_ssldirs install_docs
+
+uninstall: uninstall_docs uninstall_sw
+
+libclean:
+	"$(PERL)" -e "map { m/(.*)\.dll$$/; unlink glob """{.,apps,test,fuzz}/$$1.*"""; } @ARGV" $(SHLIBS)
+	-del /Q /F $(LIBS) libcrypto.* libssl.* ossl_static.pdb
+
+clean: libclean
+	{- join("\n\t", map { "-del /Q /F $_" } @PROGRAMS) -}
+	-del /Q /F $(ENGINES)
+	-del /Q /F $(SCRIPTS)
+	-del /Q /F $(GENERATED_MANDATORY)
+	-del /Q /F $(GENERATED)
+	-del /Q /S /F *.d *.obj *.pdb *.ilk *.manifest
+	-del /Q /S /F engines\*.lib engines\*.exp
+	-del /Q /S /F apps\*.lib apps\*.rc apps\*.res apps\*.exp
+	-del /Q /S /F test\*.exp
+	-rmdir /Q /S test\test-runs
+
+distclean: clean
+	-del /Q /F configdata.pm
+	-del /Q /F makefile
+
+depend:
+	@ {- output_off() if $disabled{makedepend}; "" -}
+	@ "$(PERL)" "$(SRCDIR)\util\add-depends.pl" "VC"
+	@ {- output_on() if $disabled{makedepend}; "" -}
+
+# Install helper targets #############################################
+
+install_sw: install_dev install_engines install_runtime
+
+uninstall_sw: uninstall_runtime uninstall_engines uninstall_dev
+
+install_docs: install_html_docs
+
+uninstall_docs: uninstall_html_docs
+
+install_ssldirs:
+	@"$(PERL)" "$(SRCDIR)\util\mkdir-p.pl" "$(OPENSSLDIR)\certs"
+	@"$(PERL)" "$(SRCDIR)\util\mkdir-p.pl" "$(OPENSSLDIR)\private"
+	@"$(PERL)" "$(SRCDIR)\util\mkdir-p.pl" "$(OPENSSLDIR)\misc"
+	@"$(PERL)" "$(SRCDIR)\util\copy.pl" "$(SRCDIR)\apps\openssl.cnf" \
+                                        "$(OPENSSLDIR)\openssl.cnf.dist"
+	@IF NOT EXIST "$(OPENSSLDIR)\openssl.cnf" \
+         "$(PERL)" "$(SRCDIR)\util\copy.pl" "$(SRCDIR)\apps\openssl.cnf" \
+                                        "$(OPENSSLDIR)\openssl.cnf"
+	@"$(PERL)" "$(SRCDIR)\util\copy.pl" $(MISC_SCRIPTS) \
+                                        "$(OPENSSLDIR)\misc"
+	@"$(PERL)" "$(SRCDIR)\util\copy.pl" "$(SRCDIR)\apps\ct_log_list.cnf" \
+                                        "$(OPENSSLDIR)\ct_log_list.cnf.dist"
+	@IF NOT EXIST "$(OPENSSLDIR)\ct_log_list.cnf" \
+         "$(PERL)" "$(SRCDIR)\util\copy.pl" "$(SRCDIR)\apps\ct_log_list.cnf" \
+                                        "$(OPENSSLDIR)\ct_log_list.cnf"
+
+install_dev: install_runtime_libs
+	@if "$(INSTALLTOP)"=="" ( $(ECHO) "INSTALLTOP should not be empty" & exit 1 )
+	@$(ECHO) "*** Installing development files"
+	@"$(PERL)" "$(SRCDIR)\util\mkdir-p.pl" "$(INSTALLTOP)\include\openssl"
+	@{- output_off() unless grep { $_ eq "OPENSSL_USE_APPLINK" } (@{$target{defines}}, @{$config{defines}}); "" -}
+	@"$(PERL)" "$(SRCDIR)\util\copy.pl" "$(SRCDIR)\ms\applink.c" \
+				       "$(INSTALLTOP)\include\openssl"
+	@{- output_on() unless grep { $_ eq "OPENSSL_USE_APPLINK" } (@{$target{defines}}, @{$config{defines}}); "" -}
+	@"$(PERL)" "$(SRCDIR)\util\copy.pl" "-exclude_re=/__DECC_" \
+				       "$(SRCDIR)\include\openssl\*.h" \
+				       "$(INSTALLTOP)\include\openssl"
+	@"$(PERL)" "$(SRCDIR)\util\copy.pl" "$(BLDDIR)\include\openssl\*.h" \
+				       "$(INSTALLTOP)\include\openssl"
+	@"$(PERL)" "$(SRCDIR)\util\mkdir-p.pl" "$(libdir)"
+	@"$(PERL)" "$(SRCDIR)\util\copy.pl" $(INSTALL_LIBS) "$(libdir)"
+	@if "$(SHLIBS)"=="" \
+	 "$(PERL)" "$(SRCDIR)\util\copy.pl" ossl_static.pdb "$(libdir)"
+
+uninstall_dev:
+
+install_engines: install_runtime_libs build_engines
+	@if "$(INSTALLTOP)"=="" ( $(ECHO) "INSTALLTOP should not be empty" & exit 1 )
+	@$(ECHO) "*** Installing engines"
+	@"$(PERL)" "$(SRCDIR)\util\mkdir-p.pl" "$(ENGINESDIR)"
+	@if not "$(ENGINES)"=="" \
+	 "$(PERL)" "$(SRCDIR)\util\copy.pl" $(INSTALL_ENGINES) "$(ENGINESDIR)"
+	@if not "$(ENGINES)"=="" \
+	 "$(PERL)" "$(SRCDIR)\util\copy.pl" $(INSTALL_ENGINEPDBS) "$(ENGINESDIR)"
+
+uninstall_engines:
+
+install_runtime: install_programs
+
+install_runtime_libs: build_libs
+	@if "$(INSTALLTOP)"=="" ( $(ECHO) "INSTALLTOP should not be empty" & exit 1 )
+	@$(ECHO) "*** Installing runtime libraries"
+	@"$(PERL)" "$(SRCDIR)\util\mkdir-p.pl" "$(INSTALLTOP)\bin"
+	@if not "$(SHLIBS)"=="" \
+	 "$(PERL)" "$(SRCDIR)\util\copy.pl" $(INSTALL_SHLIBS) "$(INSTALLTOP)\bin"
+	@if not "$(SHLIBS)"=="" \
+	 "$(PERL)" "$(SRCDIR)\util\copy.pl" $(INSTALL_SHLIBPDBS) \
+                                        "$(INSTALLTOP)\bin"
+
+install_programs: install_runtime_libs build_programs
+	@if "$(INSTALLTOP)"=="" ( $(ECHO) "INSTALLTOP should not be empty" & exit 1 )
+	@$(ECHO) "*** Installing runtime programs"
+	@"$(PERL)" "$(SRCDIR)\util\mkdir-p.pl" "$(INSTALLTOP)\bin"
+	@"$(PERL)" "$(SRCDIR)\util\copy.pl" $(INSTALL_PROGRAMS) \
+                                        "$(INSTALLTOP)\bin"
+	@"$(PERL)" "$(SRCDIR)\util\copy.pl" $(INSTALL_PROGRAMPDBS) \
+                                        "$(INSTALLTOP)\bin"
+	@"$(PERL)" "$(SRCDIR)\util\copy.pl" $(BIN_SCRIPTS) \
+                                        "$(INSTALLTOP)\bin"
+
+uninstall_runtime:
+
+install_html_docs:
+        "$(PERL)" "$(SRCDIR)\util\process_docs.pl" \
+                "--destdir=$(INSTALLTOP)\html" --type=html
+
+uninstall_html_docs:
+
+# Building targets ###################################################
+
+configdata.pm: "$(SRCDIR)\Configure" {- join(" ", map { '"'.$_.'"' } @{$config{build_file_templates}}, @{$config{build_infos}}, @{$config{conf_files}}) -}
+	@$(ECHO) "Detected changed: $?"
+	"$(PERL)" configdata.pm -r
+	@$(ECHO) "**************************************************"
+	@$(ECHO) "***                                            ***"
+	@$(ECHO) "***   Please run the same make command again   ***"
+	@$(ECHO) "***                                            ***"
+	@$(ECHO) "**************************************************"
+	@exit 1
+
+reconfigure reconf:
+	"$(PERL)" configdata.pm -r
+
+{-
+ use File::Basename;
+ use File::Spec::Functions qw/:DEFAULT abs2rel rel2abs/;
+
+ # Helper function to figure out dependencies on libraries
+ # It takes a list of library names and outputs a list of dependencies
+ sub compute_lib_depends {
+     if ($disabled{shared}) {
+	 return map { lib($_) } @_;
+     }
+     return map { shlib_import($_) or lib($_) } @_;
+ }
+
+  sub generatesrc {
+      my %args = @_;
+      (my $target = $args{src}) =~ s/\.[sS]$/.asm/;
+      my ($gen0, @gens) = @{$args{generator}};
+      my $generator = '"'.$gen0.'"'.join('', map { " $_" } @gens);
+      my $generator_incs = join("", map { " -I \"$_\"" } @{$args{generator_incs}});
+      my $incs = join("", map { " /I \"$_\"" } @{$args{incs}});
+      my $deps = @{$args{deps}} ?
+          '"'.join('" "', @{$args{generator_deps}}, @{$args{deps}}).'"' : '';
+
+      if ($target !~ /\.asm$/) {
+          if ($args{generator}->[0] =~ m|^.*\.in$|) {
+              my $dofile = abs2rel(rel2abs(catfile($config{sourcedir},
+                                                   "util", "dofile.pl")),
+                                   rel2abs($config{builddir}));
+              return <<"EOF";
+$target: "$args{generator}->[0]" $deps
+	"\$(PERL)" "-I\$(BLDDIR)" -Mconfigdata "$dofile" \\
+	    "-o$target{build_file}" $generator > \$@
+EOF
+	  } else {
+              return <<"EOF";
+$target: "$args{generator}->[0]" $deps
+	"\$(PERL)"$generator_incs $generator > \$@
+EOF
+	  }
+      } else {
+          if ($args{generator}->[0] =~ /\.pl$/) {
+              $generator = '"$(PERL)"'.$generator_incs.' '.$generator;
+          } elsif ($args{generator}->[0] =~ /\.S$/) {
+              $generator = undef;
+          } else {
+              die "Generator type for $src unknown: $generator\n";
+          }
+
+          my $cppflags = $incs;
+          $cppflags .= {
+              lib => ' $(LIB_CFLAGS) $(LIB_CPPFLAGS)',
+              dso => ' $(DSO_CFLAGS) $(DSO_CPPFLAGS)',
+              bin => ' $(BIN_CFLAGS) $(BIN_CPPFLAGS)'
+          } -> {$args{intent}};
+          if (defined($generator)) {
+              # If the target is named foo.S in build.info, we want to
+              # end up generating foo.s in two steps.
+              if ($args{src} =~ /\.S$/) {
+                   return <<"EOF";
+$target: "$args{generator}->[0]" $deps
+	set ASM=\$(AS)
+	$generator \$@.S
+	\$(CPP) $cppflags \$@.S > \$@.i && move /Y \$@.i \$@
+        del /Q \$@.S
+EOF
+              }
+              # Otherwise....
+              return <<"EOF";
+$target: "$args{generator}->[0]" $deps
+	set ASM=\$(AS)
+	$generator \$@
+EOF
+          }
+          return <<"EOF";
+$target: "$args{generator}->[0]" $deps
+	\$(CPP) $incs $cppflags "$args{generator}->[0]" > \$@.i && move /Y \$@.i \$@
+EOF
+      }
+  }
+
+ sub src2obj {
+     my %args = @_;
+     my @srcs = map { (my $x = $_) =~ s/\.s$/.asm/; $x
+                    } ( @{$args{srcs}} );
+     my $srcs = '"'.join('" "',  @srcs).'"';
+     my $deps = '"'.join('" "', @srcs, @{$args{deps}}).'"';
+     my $incs = join("", map { ' /I "'.$_.'"' } @{$args{incs}});
+     my $cflags = { lib => ' $(LIB_CFLAGS)',
+		    dso => ' $(DSO_CFLAGS)',
+		    bin => ' $(BIN_CFLAGS)' } -> {$args{intent}};
+     $cflags .= $incs;
+     $cflags .= { lib => ' $(LIB_CPPFLAGS)',
+		  dso => ' $(DSO_CPPFLAGS)',
+		  bin => ' $(BIN_CPPFLAGS)' } -> {$args{intent}};
+     my $asflags = { lib => ' $(LIB_ASFLAGS)',
+		     dso => ' $(DSO_ASFLAGS)',
+		     bin => ' $(BIN_ASFLAGS)' } -> {$args{intent}};
+     my $makedepprog = $config{makedepprog};
+     if ($srcs[0] =~ /\.rc$/) {
+         return <<"EOF";
+$args{obj}: $deps
+	\$(RC) \$(RCOUTFLAG)\$\@ $srcs
+EOF
+     }
+     (my $obj = $args{obj}) =~ s|\.o$||;
+     if ($srcs[0] =~ /\.asm$/) {
+         return <<"EOF";
+$obj$objext: $deps
+	\$(AS) $asflags \$(ASOUTFLAG)\$\@ $srcs
+EOF
+     } elsif ($srcs[0] =~ /.S$/) {
+         return <<"EOF";
+$obj$objext: $deps
+	\$(CC) /EP /D__ASSEMBLER__ $cflags $srcs > \$@.asm && \$(AS) $asflags \$(ASOUTFLAG)\$\@ \$@.asm
+EOF
+     }
+     my $recipe = <<"EOF";
+$obj$objext: $deps
+	\$(CC) $cflags -c \$(COUTFLAG)\$\@ $srcs
+EOF
+     $recipe .= <<"EOF"	unless $disabled{makedepend};
+	\$(CC) $cflags /Zs /showIncludes $srcs 2>&1 > $obj$depext
+EOF
+     return $recipe;
+ }
+
+ # We *know* this routine is only called when we've configure 'shared'.
+ # Also, note that even though the import library built here looks like
+ # a static library, it really isn't.
+ sub libobj2shlib {
+     my %args = @_;
+     my $lib = $args{lib};
+     my @objs = map { (my $x = $_) =~ s|\.o$|$objext|; $x }
+                grep { $_ =~ m/\.(?:o|res)$/ }
+                @{$args{objs}};
+     my @defs = grep { $_ =~ /\.def$/ } @{$args{objs}};
+     my @deps = compute_lib_depends(@{$args{deps}});
+     die "More than one exported symbols list" if scalar @defs > 1;
+     my $linklibs = join("", map { "$_\n" } @deps);
+     my $objs = join("\n", @objs);
+     my $deps = join(" ", @objs, @defs, @deps);
+     my $import = shlib_import($lib);
+     my $dll =  shlib($lib);
+     my $shared_def = join("", map { " /def:$_" } @defs);
+     return <<"EOF"
+# The import library may look like a static library, but it is not.
+# We MUST make the import library depend on the DLL, in case someone
+# mistakenly removes the latter.
+$import: $dll
+$dll: $deps
+	IF EXIST $full.manifest DEL /F /Q $full.manifest
+	IF EXIST \$@ DEL /F /Q \$@
+	\$(LD) \$(LDFLAGS) \$(LIB_LDFLAGS) \\
+		/implib:$import \$(LDOUTFLAG)$dll$shared_def @<< || (DEL /Q \$(\@B).* $import && EXIT 1)
+$objs
+$linklibs\$(LIB_EX_LIBS)
+<<
+	IF EXIST $dll.manifest \\
+	   \$(MT) \$(MTFLAGS) \$(MTINFLAG)$dll.manifest \$(MTOUTFLAG)$dll
+	IF EXIST apps\\$dll DEL /Q /F apps\\$dll
+	IF EXIST test\\$dll DEL /Q /F test\\$dll
+	IF EXIST fuzz\\$dll DEL /Q /F fuzz\\$dll
+	COPY $dll apps
+	COPY $dll test
+	COPY $dll fuzz
+EOF
+ }
+ sub obj2dso {
+     my %args = @_;
+     my $dso = $args{lib};
+     my $dso_n = basename($dso);
+     my @objs = map { (my $x = $_) =~ s|\.o$|$objext|; $x } @{$args{objs}};
+     my @deps = compute_lib_depends(@{$args{deps}});
+     my $objs = join("\n", @objs);
+     my $linklibs = join("", map { "$_\n" } @deps);
+     my $deps = join(" ", @objs, @deps);
+     return <<"EOF";
+$dso$dsoext: $deps
+	IF EXIST $dso$dsoext.manifest DEL /F /Q $dso$dsoext.manifest
+	\$(LD) \$(LDFLAGS) \$(DSO_LDFLAGS) \$(LDOUTFLAG)$dso$dsoext /def:<< @<<
+LIBRARY         $dso_n
+EXPORTS
+    bind_engine		@1
+    v_check		@2
+<<
+$objs
+$linklibs \$(DSO_EX_LIBS)
+<<
+	IF EXIST $dso$dsoext.manifest \\
+	   \$(MT) \$(MTFLAGS) \$(MTINFLAG)$dso$dsoext.manifest \$(MTOUTFLAG)$dso$dsoext
+EOF
+ }
+ sub obj2lib {
+     my %args = @_;
+     my $lib = lib($args{lib});
+     my @objs = map { (my $x = $_) =~ s|\.o$|$objext|; $x } @{$args{objs}};
+     my $objs = join("\n", @objs);
+     my $deps = join(" ", @objs);
+     return <<"EOF";
+$lib: $deps
+	\$(AR) \$(ARFLAGS) \$(AROUTFLAG)$lib @<<
+$objs
+<<
+EOF
+ }
+ sub obj2bin {
+     my %args = @_;
+     my $bin = $args{bin};
+     my @objs = map { (my $x = $_) =~ s|\.o$|$objext|; $x } @{$args{objs}};
+     my @deps = compute_lib_depends(@{$args{deps}});
+     my $objs = join("\n", @objs);
+     my $linklibs = join("", map { "$_\n" } @deps);
+     my $deps = join(" ", @objs, @deps);
+     return <<"EOF";
+$bin$exeext: $deps
+	IF EXIST $bin$exeext.manifest DEL /F /Q $bin$exeext.manifest
+	\$(LD) \$(LDFLAGS) \$(BIN_LDFLAGS) \$(LDOUTFLAG)$bin$exeext @<<
+$objs
+setargv.obj
+$linklibs\$(BIN_EX_LIBS)
+<<
+	IF EXIST $bin$exeext.manifest \\
+	   \$(MT) \$(MTFLAGS) \$(MTINFLAG)$bin$exeext.manifest \$(MTOUTFLAG)$bin$exeext
+EOF
+  }
+  sub in2script {
+      my %args = @_;
+      my $script = $args{script};
+      my $sources = '"'.join('" "', @{$args{sources}}).'"';
+      my $dofile = abs2rel(rel2abs(catfile($config{sourcedir},
+                                           "util", "dofile.pl")),
+                           rel2abs($config{builddir}));
+      return <<"EOF";
+$script: $sources
+	"\$(PERL)" "-I\$(BLDDIR)" -Mconfigdata "$dofile" \\
+	    "-o$target{build_file}" $sources > "$script"
+EOF
+  }
+  sub generatedir {
+      my %args = @_;
+      my $dir = $args{dir};
+      my @deps = map { s|\.o$|$objext|; $_ } @{$args{deps}};
+      my @actions = ();
+      my %extinfo = ( dso => $dsoext,
+                      lib => $libext,
+                      bin => $exeext );
+
+      # We already have a 'test' target, and the top directory is just plain
+      # silly
+      return if $dir eq "test" || $dir eq ".";
+
+      foreach my $type (("dso", "lib", "bin", "script")) {
+          next unless defined($unified_info{dirinfo}->{$dir}->{products}->{$type});
+          # For lib object files, we could update the library.  However,
+          # LIB on Windows doesn't work that way, so we won't create any
+          # actions for it, and the dependencies are already taken care of.
+          if ($type ne "lib") {
+              foreach my $prod (@{$unified_info{dirinfo}->{$dir}->{products}->{$type}}) {
+                  if (dirname($prod) eq $dir) {
+                      push @deps, $prod.$extinfo{$type};
+                  }
+              }
+          }
+      }
+
+      my $deps = join(" ", @deps);
+      my $actions = join("\n", "", @actions);
+      return <<"EOF";
+$dir $dir\\ : $deps$actions
+EOF
+  }
+  ""    # Important!  This becomes part of the template result.
+-}
diff --git a/trunk/3rdparty/openssl-1.1-fit/Configure b/trunk/3rdparty/openssl-1.1-fit/Configure
new file mode 100755
index 000000000..608012225
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/Configure
@@ -0,0 +1,3519 @@
+#! /usr/bin/env perl
+# -*- mode: perl; -*-
+# Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+##  Configure -- OpenSSL source tree configuration script
+
+use 5.10.0;
+use strict;
+use Config;
+use FindBin;
+use lib "$FindBin::Bin/util/perl";
+use File::Basename;
+use File::Spec::Functions qw/:DEFAULT abs2rel rel2abs/;
+use File::Path qw/mkpath/;
+use OpenSSL::Glob;
+
+# see INSTALL for instructions.
+
+my $orig_death_handler = $SIG{__DIE__};
+$SIG{__DIE__} = \&death_handler;
+
+my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-dso] [no-egd] [sctp] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--config=FILE] os/compiler[:flags]\n";
+
+# Options:
+#
+# --config      add the given configuration file, which will be read after
+#               any "Configurations*" files that are found in the same
+#               directory as this script.
+# --prefix      prefix for the OpenSSL installation, which includes the
+#               directories bin, lib, include, share/man, share/doc/openssl
+#               This becomes the value of INSTALLTOP in Makefile
+#               (Default: /usr/local)
+# --openssldir  OpenSSL data area, such as openssl.cnf, certificates and keys.
+#               If it's a relative directory, it will be added on the directory
+#               given with --prefix.
+#               This becomes the value of OPENSSLDIR in Makefile and in C.
+#               (Default: PREFIX/ssl)
+#
+# --cross-compile-prefix Add specified prefix to binutils components.
+#
+# --api         One of 0.9.8, 1.0.0 or 1.1.0.  Do not compile support for
+#               interfaces deprecated as of the specified OpenSSL version.
+#
+# no-hw-xxx     do not compile support for specific crypto hardware.
+#               Generic OpenSSL-style methods relating to this support
+#               are always compiled but return NULL if the hardware
+#               support isn't compiled.
+# no-hw         do not compile support for any crypto hardware.
+# [no-]threads  [don't] try to create a library that is suitable for
+#               multithreaded applications (default is "threads" if we
+#               know how to do it)
+# [no-]shared	[don't] try to create shared libraries when supported.
+# [no-]pic      [don't] try to build position independent code when supported.
+#               If disabled, it also disables shared and dynamic-engine.
+# no-asm        do not use assembler
+# no-dso        do not compile in any native shared-library methods. This
+#               will ensure that all methods just return NULL.
+# no-egd        do not compile support for the entropy-gathering daemon APIs
+# [no-]zlib     [don't] compile support for zlib compression.
+# zlib-dynamic	Like "zlib", but the zlib library is expected to be a shared
+#		library and will be loaded in run-time by the OpenSSL library.
+# sctp          include SCTP support
+# enable-weak-ssl-ciphers
+#               Enable weak ciphers that are disabled by default.
+# 386           generate 80386 code in assembly modules
+# no-sse2       disables IA-32 SSE2 code in assembly modules, the above
+#               mentioned '386' option implies this one
+# no-<cipher>   build without specified algorithm (rsa, idea, rc5, ...)
+# -<xxx> +<xxx> compiler options are passed through
+# -static       while -static is also a pass-through compiler option (and
+#               as such is limited to environments where it's actually
+#               meaningful), it triggers a number configuration options,
+#               namely no-dso, no-pic, no-shared and no-threads. It is
+#               argued that the only reason to produce statically linked
+#               binaries (and in context it means executables linked with
+#               -static flag, and not just executables linked with static
+#               libcrypto.a) is to eliminate dependency on specific run-time,
+#               a.k.a. libc version. The mentioned config options are meant
+#               to achieve just that. Unfortunately on Linux it's impossible
+#               to eliminate the dependency completely for openssl executable
+#               because of getaddrinfo and gethostbyname calls, which can
+#               invoke dynamically loadable library facility anyway to meet
+#               the lookup requests. For this reason on Linux statically
+#               linked openssl executable has rather debugging value than
+#               production quality.
+#
+# DEBUG_SAFESTACK use type-safe stacks to enforce type-safety on stack items
+#		provided to stack calls. Generates unique stack functions for
+#		each possible stack type.
+# BN_LLONG	use the type 'long long' in crypto/bn/bn.h
+# RC4_CHAR	use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
+# Following are set automatically by this script
+#
+# MD5_ASM	use some extra md5 assembler,
+# SHA1_ASM	use some extra sha1 assembler, must define L_ENDIAN for x86
+# RMD160_ASM	use some extra ripemd160 assembler,
+# SHA256_ASM	sha256_block is implemented in assembler
+# SHA512_ASM	sha512_block is implemented in assembler
+# AES_ASM	AES_[en|de]crypt is implemented in assembler
+
+# Minimum warning options... any contributions to OpenSSL should at least get
+# past these.
+
+# DEBUG_UNUSED enables __owur (warn unused result) checks.
+# -DPEDANTIC complements -pedantic and is meant to mask code that
+# is not strictly standard-compliant and/or implementation-specific,
+# e.g. inline assembly, disregards to alignment requirements, such
+# that -pedantic would complain about. Incidentally -DPEDANTIC has
+# to be used even in sanitized builds, because sanitizer too is
+# supposed to and does take notice of non-standard behaviour. Then
+# -pedantic with pre-C9x compiler would also complain about 'long
+# long' not being supported. As 64-bit algorithms are common now,
+# it grew impossible to resolve this without sizeable additional
+# code, so we just tell compiler to be pedantic about everything
+# but 'long long' type.
+
+my $gcc_devteam_warn = "-DDEBUG_UNUSED"
+        . " -DPEDANTIC -pedantic -Wno-long-long"
+        . " -Wall"
+        . " -Wextra"
+        . " -Wno-unused-parameter"
+        . " -Wno-missing-field-initializers"
+        . " -Wswitch"
+        . " -Wsign-compare"
+        . " -Wmissing-prototypes"
+        . " -Wstrict-prototypes"
+        . " -Wshadow"
+        . " -Wformat"
+        . " -Wtype-limits"
+        . " -Wundef"
+        . " -Werror"
+        ;
+
+# These are used in addition to $gcc_devteam_warn when the compiler is clang.
+# TODO(openssl-team): fix problems and investigate if (at least) the
+# following warnings can also be enabled:
+#       -Wcast-align
+#       -Wunreachable-code -- no, too ugly/compiler-specific
+#       -Wlanguage-extension-token -- no, we use asm()
+#       -Wunused-macros -- no, too tricky for BN and _XOPEN_SOURCE etc
+#       -Wextended-offsetof -- no, needed in CMS ASN1 code
+#       -Wunused-function -- no, it forces header use of safestack et al
+#                            DEFINE macros
+my $clang_devteam_warn = ""
+        . " -Wswitch-default"
+        . " -Wno-parentheses-equality"
+        . " -Wno-language-extension-token"
+        . " -Wno-extended-offsetof"
+        . " -Wconditional-uninitialized"
+        . " -Wincompatible-pointer-types-discards-qualifiers"
+        . " -Wmissing-variable-declarations"
+        . " -Wno-unknown-warning-option"
+        . " -Wno-unused-function"
+        ;
+
+# This adds backtrace information to the memory leak info.  Is only used
+# when crypto-mdebug-backtrace is enabled.
+my $memleak_devteam_backtrace = "-rdynamic";
+
+my $strict_warnings = 0;
+
+# As for $BSDthreads. Idea is to maintain "collective" set of flags,
+# which would cover all BSD flavors. -pthread applies to them all,
+# but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
+# -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
+# which has to be accompanied by explicit -D_THREAD_SAFE and
+# sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
+# seems to be sufficient?
+our $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
+
+#
+# API compatibility name to version number mapping.
+#
+my $maxapi = "1.1.0";           # API for "no-deprecated" builds
+my $apitable = {
+    "1.1.0" => "0x10100000L",
+    "1.0.0" => "0x10000000L",
+    "0.9.8" => "0x00908000L",
+};
+
+our %table = ();
+our %config = ();
+our %withargs = ();
+our $now_printing;      # set to current entry's name in print_table_entry
+                        # (todo: right thing would be to encapsulate name
+                        # into %target [class] and make print_table_entry
+                        # a method)
+
+# Forward declarations ###############################################
+
+# read_config(filename)
+#
+# Reads a configuration file and populates %table with the contents
+# (which the configuration file places in %targets).
+sub read_config;
+
+# resolve_config(target)
+#
+# Resolves all the late evaluations, inheritances and so on for the
+# chosen target and any target it inherits from.
+sub resolve_config;
+
+
+# Information collection #############################################
+
+# Unified build supports separate build dir
+my $srcdir = catdir(absolutedir(dirname($0))); # catdir ensures local syntax
+my $blddir = catdir(absolutedir("."));         # catdir ensures local syntax
+my $dofile = abs2rel(catfile($srcdir, "util/dofile.pl"));
+
+my $local_config_envname = 'OPENSSL_LOCAL_CONFIG_DIR';
+
+$config{sourcedir} = abs2rel($srcdir);
+$config{builddir} = abs2rel($blddir);
+
+# Collect reconfiguration information if needed
+my @argvcopy=@ARGV;
+
+if (grep /^reconf(igure)?$/, @argvcopy) {
+    die "reconfiguring with other arguments present isn't supported"
+        if scalar @argvcopy > 1;
+    if (-f "./configdata.pm") {
+	my $file = "./configdata.pm";
+	unless (my $return = do $file) {
+	    die "couldn't parse $file: $@" if $@;
+            die "couldn't do $file: $!"    unless defined $return;
+            die "couldn't run $file"       unless $return;
+	}
+
+	@argvcopy = defined($configdata::config{perlargv}) ?
+	    @{$configdata::config{perlargv}} : ();
+	die "Incorrect data to reconfigure, please do a normal configuration\n"
+	    if (grep(/^reconf/,@argvcopy));
+	$config{perlenv} = $configdata::config{perlenv} // {};
+    } else {
+	die "Insufficient data to reconfigure, please do a normal configuration\n";
+    }
+}
+
+$config{perlargv} = [ @argvcopy ];
+
+# Collect version numbers
+$config{version} = "unknown";
+$config{version_num} = "unknown";
+$config{shlib_version_number} = "unknown";
+$config{shlib_version_history} = "unknown";
+
+collect_information(
+    collect_from_file(catfile($srcdir,'include/openssl/opensslv.h')),
+    qr/OPENSSL.VERSION.TEXT.*OpenSSL (\S+) / => sub { $config{version} = $1; },
+    qr/OPENSSL.VERSION.NUMBER.*(0x\S+)/	     => sub { $config{version_num}=$1 },
+    qr/SHLIB_VERSION_NUMBER *"([^"]+)"/	     => sub { $config{shlib_version_number}=$1 },
+    qr/SHLIB_VERSION_HISTORY *"([^"]*)"/     => sub { $config{shlib_version_history}=$1 }
+    );
+if ($config{shlib_version_history} ne "") { $config{shlib_version_history} .= ":"; }
+
+($config{major}, $config{minor})
+    = ($config{version} =~ /^([0-9]+)\.([0-9\.]+)/);
+($config{shlib_major}, $config{shlib_minor})
+    = ($config{shlib_version_number} =~ /^([0-9]+)\.([0-9\.]+)/);
+die "erroneous version information in opensslv.h: ",
+    "$config{major}, $config{minor}, $config{shlib_major}, $config{shlib_minor}\n"
+    if ($config{major} eq "" || $config{minor} eq ""
+	|| $config{shlib_major} eq "" ||  $config{shlib_minor} eq "");
+
+# Collect target configurations
+
+my $pattern = catfile(dirname($0), "Configurations", "*.conf");
+foreach (sort glob($pattern)) {
+    &read_config($_);
+}
+
+if (defined env($local_config_envname)) {
+    if ($^O eq 'VMS') {
+        # VMS environment variables are logical names,
+        # which can be used as is
+        $pattern = $local_config_envname . ':' . '*.conf';
+    } else {
+        $pattern = catfile(env($local_config_envname), '*.conf');
+    }
+
+    foreach (sort glob($pattern)) {
+        &read_config($_);
+    }
+}
+
+# Save away perl command information
+$config{perl_cmd} = $^X;
+$config{perl_version} = $Config{version};
+$config{perl_archname} = $Config{archname};
+
+$config{prefix}="";
+$config{openssldir}="";
+$config{processor}="";
+$config{libdir}="";
+my $auto_threads=1;    # enable threads automatically? true by default
+my $default_ranlib;
+
+# Top level directories to build
+$config{dirs} = [ "crypto", "ssl", "engines", "apps", "test", "util", "tools", "fuzz" ];
+# crypto/ subdirectories to build
+$config{sdirs} = [
+    "objects",
+    "md2", "md4", "md5", "sha", "mdc2", "hmac", "ripemd", "whrlpool", "poly1305", "blake2", "siphash", "sm3",
+    "des", "aes", "rc2", "rc4", "rc5", "idea", "aria", "bf", "cast", "camellia", "seed", "sm4", "chacha", "modes",
+    "bn", "ec", "rsa", "dsa", "dh", "sm2", "dso", "engine",
+    "buffer", "bio", "stack", "lhash", "rand", "err",
+    "evp", "asn1", "pem", "x509", "x509v3", "conf", "txt_db", "pkcs7", "pkcs12", "comp", "ocsp", "ui",
+    "cms", "ts", "srp", "cmac", "ct", "async", "kdf", "store"
+    ];
+# test/ subdirectories to build
+$config{tdirs} = [ "ossl_shim" ];
+
+# Known TLS and DTLS protocols
+my @tls = qw(ssl3 tls1 tls1_1 tls1_2 tls1_3);
+my @dtls = qw(dtls1 dtls1_2);
+
+# Explicitly known options that are possible to disable.  They can
+# be regexps, and will be used like this: /^no-${option}$/
+# For developers: keep it sorted alphabetically
+
+my @disablables = (
+    "afalgeng",
+    "aria",
+    "asan",
+    "asm",
+    "async",
+    "autoalginit",
+    "autoerrinit",
+    "autoload-config",
+    "bf",
+    "blake2",
+    "camellia",
+    "capieng",
+    "cast",
+    "chacha",
+    "cmac",
+    "cms",
+    "comp",
+    "crypto-mdebug",
+    "crypto-mdebug-backtrace",
+    "ct",
+    "deprecated",
+    "des",
+    "devcryptoeng",
+    "dgram",
+    "dh",
+    "dsa",
+    "dso",
+    "dtls",
+    "dynamic-engine",
+    "ec",
+    "ec2m",
+    "ecdh",
+    "ecdsa",
+    "ec_nistp_64_gcc_128",
+    "egd",
+    "engine",
+    "err",
+    "external-tests",
+    "filenames",
+    "fuzz-libfuzzer",
+    "fuzz-afl",
+    "gost",
+    "heartbeats",
+    "hw(-.+)?",
+    "idea",
+    "makedepend",
+    "md2",
+    "md4",
+    "mdc2",
+    "msan",
+    "multiblock",
+    "nextprotoneg",
+    "pinshared",
+    "ocb",
+    "ocsp",
+    "pic",
+    "poly1305",
+    "posix-io",
+    "psk",
+    "rc2",
+    "rc4",
+    "rc5",
+    "rdrand",
+    "rfc3779",
+    "rmd160",
+    "scrypt",
+    "sctp",
+    "seed",
+    "shared",
+    "siphash",
+    "sm2",
+    "sm3",
+    "sm4",
+    "sock",
+    "srp",
+    "srtp",
+    "sse2",
+    "ssl",
+    "ssl-trace",
+    "static-engine",
+    "stdio",
+    "tests",
+    "threads",
+    "tls",
+    "ts",
+    "ubsan",
+    "ui-console",
+    "unit-test",
+    "whirlpool",
+    "weak-ssl-ciphers",
+    "zlib",
+    "zlib-dynamic",
+    );
+foreach my $proto ((@tls, @dtls))
+	{
+	push(@disablables, $proto);
+	push(@disablables, "$proto-method") unless $proto eq "tls1_3";
+	}
+
+my %deprecated_disablables = (
+    "ssl2" => undef,
+    "buf-freelists" => undef,
+    "ripemd" => "rmd160",
+    "ui" => "ui-console",
+    );
+
+# All of the following are disabled by default:
+
+our %disabled = ( # "what"         => "comment"
+		  "asan"		=> "default",
+		  "crypto-mdebug"       => "default",
+		  "crypto-mdebug-backtrace" => "default",
+		  "devcryptoeng"	=> "default",
+		  "ec_nistp_64_gcc_128" => "default",
+		  "egd"                 => "default",
+		  "external-tests"	=> "default",
+		  "fuzz-libfuzzer"	=> "default",
+		  "fuzz-afl"		=> "default",
+		  "heartbeats"          => "default",
+		  "md2"                 => "default",
+                  "msan"                => "default",
+		  "rc5"                 => "default",
+		  "sctp"                => "default",
+		  "ssl-trace"           => "default",
+		  "ssl3"                => "default",
+		  "ssl3-method"         => "default",
+                  "ubsan"		=> "default",
+		  "unit-test"           => "default",
+		  "weak-ssl-ciphers"    => "default",
+		  "zlib"                => "default",
+		  "zlib-dynamic"        => "default",
+		);
+
+# Note: => pair form used for aesthetics, not to truly make a hash table
+my @disable_cascades = (
+    # "what"		=> [ "cascade", ... ]
+    sub { $config{processor} eq "386" }
+			=> [ "sse2" ],
+    "ssl"		=> [ "ssl3" ],
+    "ssl3-method"	=> [ "ssl3" ],
+    "zlib"		=> [ "zlib-dynamic" ],
+    "des"		=> [ "mdc2" ],
+    "ec"		=> [ "ecdsa", "ecdh" ],
+
+    "dgram"		=> [ "dtls", "sctp" ],
+    "sock"		=> [ "dgram" ],
+    "dtls"		=> [ @dtls ],
+    sub { 0 == scalar grep { !$disabled{$_} } @dtls }
+			=> [ "dtls" ],
+
+    "tls"		=> [ @tls ],
+    sub { 0 == scalar grep { !$disabled{$_} } @tls }
+			=> [ "tls" ],
+
+    "crypto-mdebug"     => [ "crypto-mdebug-backtrace" ],
+
+    # Without DSO, we can't load dynamic engines, so don't build them dynamic
+    "dso"               => [ "dynamic-engine" ],
+
+    # Without position independent code, there can be no shared libraries or DSOs
+    "pic"               => [ "shared" ],
+    "shared"            => [ "dynamic-engine" ],
+    "engine"            => [ "afalgeng", "devcryptoeng" ],
+
+    # no-autoalginit is only useful when building non-shared
+    "autoalginit"       => [ "shared", "apps" ],
+
+    "stdio"             => [ "apps", "capieng", "egd" ],
+    "apps"              => [ "tests" ],
+    "tests"             => [ "external-tests" ],
+    "comp"              => [ "zlib" ],
+    "ec"                => [ "tls1_3", "sm2" ],
+    "sm3"               => [ "sm2" ],
+    sub { !$disabled{"unit-test"} } => [ "heartbeats" ],
+
+    sub { !$disabled{"msan"} } => [ "asm" ],
+    );
+
+# Avoid protocol support holes.  Also disable all versions below N, if version
+# N is disabled while N+1 is enabled.
+#
+my @list = (reverse @tls);
+while ((my $first, my $second) = (shift @list, shift @list)) {
+    last unless @list;
+    push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
+			      => [ @list ] );
+    unshift @list, $second;
+}
+my @list = (reverse @dtls);
+while ((my $first, my $second) = (shift @list, shift @list)) {
+    last unless @list;
+    push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
+			      => [ @list ] );
+    unshift @list, $second;
+}
+
+# Explicit "no-..." options will be collected in %disabled along with the defaults.
+# To remove something from %disabled, use "enable-foo".
+# For symmetry, "disable-foo" is a synonym for "no-foo".
+
+&usage if ($#ARGV < 0);
+
+# For the "make variables" CINCLUDES and CDEFINES, we support lists with
+# platform specific list separators.  Users from those platforms should
+# recognise those separators from how you set up the PATH to find executables.
+# The default is the Unix like separator, :, but as an exception, we also
+# support the space as separator.
+my $list_separator_re =
+    { VMS           => qr/(?<!\^),/,
+      MSWin32       => qr/(?<!\\);/ } -> {$^O} // qr/(?<!\\)[:\s]/;
+# All the "make variables" we support
+# Some get pre-populated for the sake of backward compatibility
+# (we supported those before the change to "make variable" support.
+my %user = (
+    AR          => env('AR'),
+    ARFLAGS     => [],
+    AS          => undef,
+    ASFLAGS     => [],
+    CC          => env('CC'),
+    CFLAGS      => [],
+    CXX         => env('CXX'),
+    CXXFLAGS    => [],
+    CPP         => undef,
+    CPPFLAGS    => [],  # -D, -I, -Wp,
+    CPPDEFINES  => [],  # Alternative for -D
+    CPPINCLUDES => [],  # Alternative for -I
+    CROSS_COMPILE => env('CROSS_COMPILE'),
+    HASHBANGPERL=> env('HASHBANGPERL') || env('PERL'),
+    LD          => undef,
+    LDFLAGS     => [],  # -L, -Wl,
+    LDLIBS      => [],  # -l
+    MT          => undef,
+    MTFLAGS     => [],
+    PERL        => env('PERL') || ($^O ne "VMS" ? $^X : "perl"),
+    RANLIB      => env('RANLIB'),
+    RC          => env('RC') || env('WINDRES'),
+    RCFLAGS     => [],
+    RM          => undef,
+   );
+# Info about what "make variables" may be prefixed with the cross compiler
+# prefix.  This should NEVER mention any such variable with a list for value.
+my @user_crossable = qw ( AR AS CC CXX CPP LD MT RANLIB RC );
+# The same but for flags given as Configure options.  These are *additional*
+# input, as opposed to the VAR=string option that override the corresponding
+# config target attributes
+my %useradd = (
+    CPPDEFINES  => [],
+    CPPINCLUDES => [],
+    CPPFLAGS    => [],
+    CFLAGS      => [],
+    CXXFLAGS    => [],
+    LDFLAGS     => [],
+    LDLIBS      => [],
+   );
+
+my %user_synonyms = (
+    HASHBANGPERL=> 'PERL',
+    RC          => 'WINDRES',
+   );
+
+# Some target attributes have been renamed, this is the translation table
+my %target_attr_translate =(
+    ar          => 'AR',
+    as          => 'AS',
+    cc          => 'CC',
+    cxx         => 'CXX',
+    cpp         => 'CPP',
+    hashbangperl => 'HASHBANGPERL',
+    ld          => 'LD',
+    mt          => 'MT',
+    ranlib      => 'RANLIB',
+    rc          => 'RC',
+    rm          => 'RM',
+   );
+
+# Initialisers coming from 'config' scripts
+$config{defines} = [ split(/$list_separator_re/, env('__CNF_CPPDEFINES')) ];
+$config{includes} = [ split(/$list_separator_re/, env('__CNF_CPPINCLUDES')) ];
+$config{cppflags} = [ env('__CNF_CPPFLAGS') || () ];
+$config{cflags} = [ env('__CNF_CFLAGS') || () ];
+$config{cxxflags} = [ env('__CNF_CXXFLAGS') || () ];
+$config{lflags} = [ env('__CNF_LDFLAGS') || () ];
+$config{ex_libs} = [ env('__CNF_LDLIBS') || () ];
+
+$config{openssl_api_defines}=[];
+$config{openssl_algorithm_defines}=[];
+$config{openssl_thread_defines}=[];
+$config{openssl_sys_defines}=[];
+$config{openssl_other_defines}=[];
+$config{options}="";
+$config{build_type} = "release";
+my $target="";
+
+my %cmdvars = ();               # Stores FOO='blah' type arguments
+my %unsupported_options = ();
+my %deprecated_options = ();
+# If you change this, update apps/version.c
+my @known_seed_sources = qw(getrandom devrandom os egd none rdcpu librandom);
+my @seed_sources = ();
+while (@argvcopy)
+	{
+	$_ = shift @argvcopy;
+
+	# Support env variable assignments among the options
+	if (m|^(\w+)=(.+)?$|)
+		{
+		$cmdvars{$1} = $2;
+		# Every time a variable is given as a configuration argument,
+		# it acts as a reset if the variable.
+		if (exists $user{$1})
+			{
+			$user{$1} = ref $user{$1} eq "ARRAY" ? [] : undef;
+			}
+		#if (exists $useradd{$1})
+		#	{
+		#	$useradd{$1} = [];
+		#	}
+		next;
+		}
+
+	# VMS is a case insensitive environment, and depending on settings
+	# out of our control, we may receive options uppercased.  Let's
+	# downcase at least the part before any equal sign.
+	if ($^O eq "VMS")
+		{
+		s/^([^=]*)/lc($1)/e;
+		}
+
+	# some people just can't read the instructions, clang people have to...
+	s/^-no-(?!integrated-as)/no-/;
+
+	# rewrite some options in "enable-..." form
+	s /^-?-?shared$/enable-shared/;
+	s /^sctp$/enable-sctp/;
+	s /^threads$/enable-threads/;
+	s /^zlib$/enable-zlib/;
+	s /^zlib-dynamic$/enable-zlib-dynamic/;
+
+        if (/^(no|disable|enable)-(.+)$/)
+                {
+                my $word = $2;
+                if (!exists $deprecated_disablables{$word}
+                        && !grep { $word =~ /^${_}$/ } @disablables)
+                        {
+                        $unsupported_options{$_} = 1;
+                        next;
+                        }
+                }
+        if (/^no-(.+)$/ || /^disable-(.+)$/)
+                {
+                foreach my $proto ((@tls, @dtls))
+                        {
+                        if ($1 eq "$proto-method")
+                                {
+                                $disabled{"$proto"} = "option($proto-method)";
+                                last;
+                                }
+                        }
+                if ($1 eq "dtls")
+                        {
+                        foreach my $proto (@dtls)
+                                {
+                                $disabled{$proto} = "option(dtls)";
+                                }
+                        $disabled{"dtls"} = "option(dtls)";
+                        }
+                elsif ($1 eq "ssl")
+                        {
+                        # Last one of its kind
+                        $disabled{"ssl3"} = "option(ssl)";
+                        }
+                elsif ($1 eq "tls")
+                        {
+                        # XXX: Tests will fail if all SSL/TLS
+                        # protocols are disabled.
+                        foreach my $proto (@tls)
+                                {
+                                $disabled{$proto} = "option(tls)";
+                                }
+                        }
+                elsif ($1 eq "static-engine")
+                        {
+                        delete $disabled{"dynamic-engine"};
+                        }
+                elsif ($1 eq "dynamic-engine")
+                        {
+                        $disabled{"dynamic-engine"} = "option";
+                        }
+                elsif (exists $deprecated_disablables{$1})
+                        {
+                        $deprecated_options{$_} = 1;
+                        if (defined $deprecated_disablables{$1})
+                                {
+                                $disabled{$deprecated_disablables{$1}} = "option";
+                                }
+                        }
+                else
+                        {
+                        $disabled{$1} = "option";
+                        }
+		# No longer an automatic choice
+		$auto_threads = 0 if ($1 eq "threads");
+		}
+	elsif (/^enable-(.+)$/)
+		{
+                if ($1 eq "static-engine")
+                        {
+                        $disabled{"dynamic-engine"} = "option";
+                        }
+                elsif ($1 eq "dynamic-engine")
+                        {
+                        delete $disabled{"dynamic-engine"};
+                        }
+                elsif ($1 eq "zlib-dynamic")
+                        {
+                        delete $disabled{"zlib"};
+                        }
+		my $algo = $1;
+		delete $disabled{$algo};
+
+		# No longer an automatic choice
+		$auto_threads = 0 if ($1 eq "threads");
+		}
+	elsif (/^--strict-warnings$/)
+		{
+		$strict_warnings = 1;
+		}
+	elsif (/^--debug$/)
+		{
+		$config{build_type} = "debug";
+		}
+	elsif (/^--release$/)
+		{
+		$config{build_type} = "release";
+		}
+	elsif (/^386$/)
+		{ $config{processor}=386; }
+	elsif (/^fips$/)
+		{
+		die "FIPS mode not supported\n";
+		}
+	elsif (/^rsaref$/)
+		{
+		# No RSAref support any more since it's not needed.
+		# The check for the option is there so scripts aren't
+		# broken
+		}
+	elsif (/^nofipscanistercheck$/)
+		{
+		die "FIPS mode not supported\n";
+		}
+	elsif (/^[-+]/)
+		{
+		if (/^--prefix=(.*)$/)
+			{
+			$config{prefix}=$1;
+			die "Directory given with --prefix MUST be absolute\n"
+				unless file_name_is_absolute($config{prefix});
+			}
+		elsif (/^--api=(.*)$/)
+			{
+			$config{api}=$1;
+			}
+		elsif (/^--libdir=(.*)$/)
+			{
+			$config{libdir}=$1;
+			}
+		elsif (/^--openssldir=(.*)$/)
+			{
+			$config{openssldir}=$1;
+			}
+		elsif (/^--with-zlib-lib=(.*)$/)
+			{
+			$withargs{zlib_lib}=$1;
+			}
+		elsif (/^--with-zlib-include=(.*)$/)
+			{
+			$withargs{zlib_include}=$1;
+			}
+		elsif (/^--with-fuzzer-lib=(.*)$/)
+			{
+			$withargs{fuzzer_lib}=$1;
+			}
+		elsif (/^--with-fuzzer-include=(.*)$/)
+			{
+			$withargs{fuzzer_include}=$1;
+			}
+		elsif (/^--with-rand-seed=(.*)$/)
+			{
+			foreach my $x (split(m|,|, $1))
+			    {
+			    die "Unknown --with-rand-seed choice $x\n"
+				if ! grep { $x eq $_ } @known_seed_sources;
+			    push @seed_sources, $x;
+			    }
+                        }
+		elsif (/^--cross-compile-prefix=(.*)$/)
+			{
+			$user{CROSS_COMPILE}=$1;
+			}
+		elsif (/^--config=(.*)$/)
+			{
+			read_config $1;
+			}
+		elsif (/^-l(.*)$/)
+			{
+			push @{$useradd{LDLIBS}}, $_;
+			}
+		elsif (/^-framework$/)
+			{
+			push @{$useradd{LDLIBS}}, $_, shift(@argvcopy);
+			}
+		elsif (/^-L(.*)$/ or /^-Wl,/)
+			{
+			push @{$useradd{LDFLAGS}}, $_;
+			}
+		elsif (/^-rpath$/ or /^-R$/)
+			# -rpath is the OSF1 rpath flag
+			# -R is the old Solaris rpath flag
+			{
+			my $rpath = shift(@argvcopy) || "";
+			$rpath .= " " if $rpath ne "";
+			push @{$useradd{LDFLAGS}}, $_, $rpath;
+			}
+		elsif (/^-static$/)
+			{
+			push @{$useradd{LDFLAGS}}, $_;
+			$disabled{"dso"} = "forced";
+			$disabled{"pic"} = "forced";
+			$disabled{"shared"} = "forced";
+			$disabled{"threads"} = "forced";
+			}
+		elsif (/^-D(.*)$/)
+			{
+			push @{$useradd{CPPDEFINES}}, $1;
+			}
+		elsif (/^-I(.*)$/)
+			{
+			push @{$useradd{CPPINCLUDES}}, $1;
+			}
+		elsif (/^-Wp,$/)
+			{
+			push @{$useradd{CPPFLAGS}}, $1;
+			}
+		else	# common if (/^[-+]/), just pass down...
+			{
+			$_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
+			push @{$useradd{CFLAGS}}, $_;
+			push @{$useradd{CXXFLAGS}}, $_;
+			}
+		}
+	else
+		{
+		die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
+		$target=$_;
+		}
+	unless ($_ eq $target || /^no-/ || /^disable-/)
+		{
+		# "no-..." follows later after implied deactivations
+		# have been derived.  (Don't take this too seriously,
+		# we really only write OPTIONS to the Makefile out of
+		# nostalgia.)
+
+		if ($config{options} eq "")
+			{ $config{options} = $_; }
+		else
+			{ $config{options} .= " ".$_; }
+		}
+	}
+
+if (defined($config{api}) && !exists $apitable->{$config{api}}) {
+	die "***** Unsupported api compatibility level: $config{api}\n",
+}
+
+if (keys %deprecated_options)
+	{
+	warn "***** Deprecated options: ",
+		join(", ", keys %deprecated_options), "\n";
+	}
+if (keys %unsupported_options)
+	{
+	die "***** Unsupported options: ",
+		join(", ", keys %unsupported_options), "\n";
+	}
+
+# If any %useradd entry has been set, we must check that the "make
+# variables" haven't been set.  We start by checking of any %useradd entry
+# is set.
+if (grep { scalar @$_ > 0 } values %useradd) {
+    # Hash of env / make variables names.  The possible values are:
+    # 1 - "make vars"
+    # 2 - %useradd entry set
+    # 3 - both set
+    my %detected_vars =
+        map { my $v = 0;
+              $v += 1 if $cmdvars{$_};
+              $v += 2 if @{$useradd{$_}};
+              $_ => $v }
+        keys %useradd;
+
+    # If any of the corresponding "make variables" is set, we error
+    if (grep { $_ & 1 } values %detected_vars) {
+        my $names = join(', ', grep { $detected_vars{$_} > 0 }
+                               sort keys %detected_vars);
+        die <<"_____";
+***** Mixing make variables and additional compiler/linker flags as
+***** configure command line option is not permitted.
+***** Affected make variables: $names
+_____
+    }
+}
+
+# Check through all supported command line variables to see if any of them
+# were set, and canonicalise the values we got.  If no compiler or linker
+# flag or anything else that affects %useradd was set, we also check the
+# environment for values.
+my $anyuseradd =
+    grep { defined $_ && (ref $_ ne 'ARRAY' || @$_) } values %useradd;
+foreach (keys %user) {
+    my $value = $cmdvars{$_};
+    $value //= env($_) unless $anyuseradd;
+    $value //=
+        defined $user_synonyms{$_} ? $cmdvars{$user_synonyms{$_}} : undef;
+    $value //= defined $user_synonyms{$_} ? env($user_synonyms{$_}) : undef
+        unless $anyuseradd;
+
+    if (defined $value) {
+        if (ref $user{$_} eq 'ARRAY') {
+            $user{$_} = [ split /$list_separator_re/, $value ];
+        } elsif (!defined $user{$_}) {
+            $user{$_} = $value;
+        }
+    }
+}
+
+if (grep { /-rpath\b/ } ($user{LDFLAGS} ? @{$user{LDFLAGS}} : ())
+    && !$disabled{shared}
+    && !($disabled{asan} && $disabled{msan} && $disabled{ubsan})) {
+    die "***** Cannot simultaneously use -rpath, shared libraries, and\n",
+	"***** any of asan, msan or ubsan\n";
+}
+
+my @tocheckfor = (keys %disabled);
+while (@tocheckfor) {
+    my %new_tocheckfor = ();
+    my @cascade_copy = (@disable_cascades);
+    while (@cascade_copy) {
+	my ($test, $descendents) = (shift @cascade_copy, shift @cascade_copy);
+	if (ref($test) eq "CODE" ? $test->() : defined($disabled{$test})) {
+	    foreach(grep { !defined($disabled{$_}) } @$descendents) {
+		$new_tocheckfor{$_} = 1; $disabled{$_} = "forced";
+	    }
+	}
+    }
+    @tocheckfor = (keys %new_tocheckfor);
+}
+
+our $die = sub { die @_; };
+if ($target eq "TABLE") {
+    local $die = sub { warn @_; };
+    foreach (sort keys %table) {
+	print_table_entry($_, "TABLE");
+    }
+    exit 0;
+}
+
+if ($target eq "LIST") {
+    foreach (sort keys %table) {
+	print $_,"\n" unless $table{$_}->{template};
+    }
+    exit 0;
+}
+
+if ($target eq "HASH") {
+    local $die = sub { warn @_; };
+    print "%table = (\n";
+    foreach (sort keys %table) {
+	print_table_entry($_, "HASH");
+    }
+    exit 0;
+}
+
+print "Configuring OpenSSL version $config{version} ($config{version_num}) ";
+print "for $target\n";
+
+if (scalar(@seed_sources) == 0) {
+    print "Using os-specific seed configuration\n";
+    push @seed_sources, 'os';
+}
+if (scalar(grep { $_ eq 'none' } @seed_sources) > 0) {
+    die "Cannot seed with none and anything else" if scalar(@seed_sources) > 1;
+    warn <<_____ if scalar(@seed_sources) == 1;
+
+============================== WARNING ===============================
+You have selected the --with-rand-seed=none option, which effectively
+disables automatic reseeding of the OpenSSL random generator.
+All operations depending on the random generator such as creating keys
+will not work unless the random generator is seeded manually by the
+application.
+
+Please read the 'Note on random number generation' section in the
+INSTALL instructions and the RAND_DRBG(7) manual page for more details.
+============================== WARNING ===============================
+
+_____
+}
+push @{$config{openssl_other_defines}},
+     map { (my $x = $_) =~ tr|[\-a-z]|[_A-Z]|; "OPENSSL_RAND_SEED_$x" }
+	@seed_sources;
+
+# Backward compatibility?
+if ($target =~ m/^CygWin32(-.*)$/) {
+    $target = "Cygwin".$1;
+}
+
+# Support for legacy targets having a name starting with 'debug-'
+my ($d, $t) = $target =~ m/^(debug-)?(.*)$/;
+if ($d) {
+    $config{build_type} = "debug";
+
+    # If we do not find debug-foo in the table, the target is set to foo.
+    if (!$table{$target}) {
+	$target = $t;
+    }
+}
+
+&usage if !$table{$target} || $table{$target}->{template};
+
+$config{target} = $target;
+my %target = resolve_config($target);
+
+foreach (keys %target_attr_translate) {
+    $target{$target_attr_translate{$_}} = $target{$_}
+        if $target{$_};
+    delete $target{$_};
+}
+
+%target = ( %{$table{DEFAULTS}}, %target );
+
+# Make the flags to build DSOs the same as for shared libraries unless they
+# are already defined
+$target{module_cflags} = $target{shared_cflag} unless defined $target{module_cflags};
+$target{module_cxxflags} = $target{shared_cxxflag} unless defined $target{module_cxxflags};
+$target{module_ldflags} = $target{shared_ldflag} unless defined $target{module_ldflags};
+{
+    my $shared_info_pl =
+        catfile(dirname($0), "Configurations", "shared-info.pl");
+    my %shared_info = read_eval_file($shared_info_pl);
+    push @{$target{_conf_fname_int}}, $shared_info_pl;
+    my $si = $target{shared_target};
+    while (ref $si ne "HASH") {
+        last if ! defined $si;
+        if (ref $si eq "CODE") {
+            $si = $si->();
+        } else {
+            $si = $shared_info{$si};
+        }
+    }
+
+    # Some of the 'shared_target' values don't have any entried in
+    # %shared_info.  That's perfectly fine, AS LONG AS the build file
+    # template knows how to handle this.  That is currently the case for
+    # Windows and VMS.
+    if (defined $si) {
+        # Just as above, copy certain shared_* attributes to the corresponding
+        # module_ attribute unless the latter is already defined
+        $si->{module_cflags} = $si->{shared_cflag} unless defined $si->{module_cflags};
+        $si->{module_cxxflags} = $si->{shared_cxxflag} unless defined $si->{module_cxxflags};
+        $si->{module_ldflags} = $si->{shared_ldflag} unless defined $si->{module_ldflags};
+        foreach (sort keys %$si) {
+            $target{$_} = defined $target{$_}
+                ? add($si->{$_})->($target{$_})
+                : $si->{$_};
+        }
+    }
+}
+
+my %conf_files = map { $_ => 1 } (@{$target{_conf_fname_int}});
+$config{conf_files} = [ sort keys %conf_files ];
+
+foreach my $feature (@{$target{disable}}) {
+    if (exists $deprecated_disablables{$feature}) {
+        warn "***** config $target disables deprecated feature $feature\n";
+    } elsif (!grep { $feature eq $_ } @disablables) {
+        die "***** config $target disables unknown feature $feature\n";
+    }
+    $disabled{$feature} = 'config';
+}
+foreach my $feature (@{$target{enable}}) {
+    if ("default" eq ($disabled{$feature} // "")) {
+        if (exists $deprecated_disablables{$feature}) {
+            warn "***** config $target enables deprecated feature $feature\n";
+        } elsif (!grep { $feature eq $_ } @disablables) {
+            die "***** config $target enables unknown feature $feature\n";
+        }
+        delete $disabled{$feature};
+    }
+}
+
+$target{CXXFLAGS}//=$target{CFLAGS} if $target{CXX};
+$target{cxxflags}//=$target{cflags} if $target{CXX};
+$target{exe_extension}="";
+$target{exe_extension}=".exe" if ($config{target} eq "DJGPP"
+                                  || $config{target} =~ /^(?:Cygwin|mingw)/);
+$target{exe_extension}=".pm"  if ($config{target} =~ /vos/);
+
+($target{shared_extension_simple}=$target{shared_extension})
+    =~ s|\.\$\(SHLIB_VERSION_NUMBER\)||
+    unless defined($target{shared_extension_simple});
+$target{dso_extension}//=$target{shared_extension_simple};
+($target{shared_import_extension}=$target{shared_extension_simple}.".a")
+    if ($config{target} =~ /^(?:Cygwin|mingw)/);
+
+# Fill %config with values from %user, and in case those are undefined or
+# empty, use values from %target (acting as a default).
+foreach (keys %user) {
+    my $ref_type = ref $user{$_};
+
+    # Temporary function.  Takes an intended ref type (empty string or "ARRAY")
+    # and a value that's to be coerced into that type.
+    my $mkvalue = sub {
+        my $type = shift;
+        my $value = shift;
+        my $undef_p = shift;
+
+        die "Too many arguments for \$mkvalue" if @_;
+
+        while (ref $value eq 'CODE') {
+            $value = $value->();
+        }
+
+        if ($type eq 'ARRAY') {
+            return undef unless defined $value;
+            return undef if ref $value ne 'ARRAY' && !$value;
+            return undef if ref $value eq 'ARRAY' && !@$value;
+            return [ $value ] unless ref $value eq 'ARRAY';
+        }
+        return undef unless $value;
+        return $value;
+    };
+
+    $config{$_} =
+        $mkvalue->($ref_type, $user{$_})
+        || $mkvalue->($ref_type, $target{$_});
+    delete $config{$_} unless defined $config{$_};
+}
+
+# Allow overriding the build file name
+$config{build_file} = env('BUILDFILE') || $target{build_file} || "Makefile";
+
+my %disabled_info = ();         # For configdata.pm
+foreach my $what (sort keys %disabled) {
+    $config{options} .= " no-$what";
+
+    if (!grep { $what eq $_ } ( 'dso', 'threads', 'shared', 'pic',
+                                'dynamic-engine', 'makedepend',
+                                'zlib-dynamic', 'zlib', 'sse2' )) {
+        (my $WHAT = uc $what) =~ s|-|_|g;
+
+        # Fix up C macro end names
+        $WHAT = "RMD160" if $what eq "ripemd";
+
+        # fix-up crypto/directory name(s)
+        $what = "ripemd" if $what eq "rmd160";
+        $what = "whrlpool" if $what eq "whirlpool";
+
+        my $macro = $disabled_info{$what}->{macro} = "OPENSSL_NO_$WHAT";
+
+        if ((grep { $what eq $_ } @{$config{sdirs}})
+                && $what ne 'async' && $what ne 'err') {
+            @{$config{sdirs}} = grep { $what ne $_} @{$config{sdirs}};
+            $disabled_info{$what}->{skipped} = [ catdir('crypto', $what) ];
+
+            if ($what ne 'engine') {
+                push @{$config{openssl_algorithm_defines}}, $macro;
+            } else {
+                @{$config{dirs}} = grep !/^engines$/, @{$config{dirs}};
+                push @{$disabled_info{engine}->{skipped}}, catdir('engines');
+                push @{$config{openssl_other_defines}}, $macro;
+            }
+        } else {
+            push @{$config{openssl_other_defines}}, $macro;
+        }
+
+    }
+}
+
+# Make sure build_scheme is consistent.
+$target{build_scheme} = [ $target{build_scheme} ]
+    if ref($target{build_scheme}) ne "ARRAY";
+
+my ($builder, $builder_platform, @builder_opts) =
+    @{$target{build_scheme}};
+
+foreach my $checker (($builder_platform."-".$target{build_file}."-checker.pm",
+                      $builder_platform."-checker.pm")) {
+    my $checker_path = catfile($srcdir, "Configurations", $checker);
+    if (-f $checker_path) {
+        my $fn = $ENV{CONFIGURE_CHECKER_WARN}
+            ? sub { warn $@; } : sub { die $@; };
+        if (! do $checker_path) {
+            if ($@) {
+                $fn->($@);
+            } elsif ($!) {
+                $fn->($!);
+            } else {
+                $fn->("The detected tools didn't match the platform\n");
+            }
+        }
+        last;
+    }
+}
+
+push @{$config{defines}}, "NDEBUG"    if $config{build_type} eq "release";
+
+if ($target =~ /^mingw/ && `$config{CC} --target-help 2>&1` =~ m/-mno-cygwin/m)
+	{
+	push @{$config{cflags}}, "-mno-cygwin";
+	push @{$config{cxxflags}}, "-mno-cygwin" if $config{CXX};
+	push @{$config{shared_ldflag}}, "-mno-cygwin";
+	}
+
+if ($target =~ /linux.*-mips/ && !$disabled{asm}
+        && !grep { $_ !~ /-m(ips|arch=)/ } (@{$user{CFLAGS}},
+                                            @{$useradd{CFLAGS}})) {
+	# minimally required architecture flags for assembly modules
+	my $value;
+	$value = '-mips2' if ($target =~ /mips32/);
+	$value = '-mips3' if ($target =~ /mips64/);
+	unshift @{$config{cflags}}, $value;
+	unshift @{$config{cxxflags}}, $value if $config{CXX};
+}
+
+# If threads aren't disabled, check how possible they are
+unless ($disabled{threads}) {
+    if ($auto_threads) {
+        # Enabled by default, disable it forcibly if unavailable
+        if ($target{thread_scheme} eq "(unknown)") {
+            $disabled{threads} = "unavailable";
+        }
+    } else {
+        # The user chose to enable threads explicitly, let's see
+        # if there's a chance that's possible
+        if ($target{thread_scheme} eq "(unknown)") {
+            # If the user asked for "threads" and we don't have internal
+            # knowledge how to do it, [s]he is expected to provide any
+            # system-dependent compiler options that are necessary.  We
+            # can't truly check that the given options are correct, but
+            # we expect the user to know what [s]He is doing.
+            if (!@{$user{CFLAGS}} && !@{$useradd{CFLAGS}}
+                    && !@{$user{CPPDEFINES}} && !@{$useradd{CPPDEFINES}}) {
+                die "You asked for multi-threading support, but didn't\n"
+                    ,"provide any system-specific compiler options\n";
+            }
+        }
+    }
+}
+
+# If threads still aren't disabled, add a C macro to ensure the source
+# code knows about it.  Any other flag is taken care of by the configs.
+unless($disabled{threads}) {
+    push @{$config{openssl_thread_defines}}, "OPENSSL_THREADS";
+}
+
+# With "deprecated" disable all deprecated features.
+if (defined($disabled{"deprecated"})) {
+        $config{api} = $maxapi;
+}
+
+my $no_shared_warn=0;
+if ($target{shared_target} eq "")
+	{
+	$no_shared_warn = 1
+	    if (!$disabled{shared} || !$disabled{"dynamic-engine"});
+	$disabled{shared} = "no-shared-target";
+	$disabled{pic} = $disabled{shared} = $disabled{"dynamic-engine"} =
+	    "no-shared-target";
+	}
+
+if ($disabled{"dynamic-engine"}) {
+        push @{$config{openssl_other_defines}}, "OPENSSL_NO_DYNAMIC_ENGINE";
+        $config{dynamic_engines} = 0;
+} else {
+        push @{$config{openssl_other_defines}}, "OPENSSL_NO_STATIC_ENGINE";
+        $config{dynamic_engines} = 1;
+}
+
+unless ($disabled{asan}) {
+    push @{$config{cflags}}, "-fsanitize=address";
+    push @{$config{cxxflags}}, "-fsanitize=address" if $config{CXX};
+}
+
+unless ($disabled{ubsan}) {
+    # -DPEDANTIC or -fnosanitize=alignment may also be required on some
+    # platforms.
+    push @{$config{cflags}}, "-fsanitize=undefined", "-fno-sanitize-recover=all";
+    push @{$config{cxxflags}}, "-fsanitize=undefined", "-fno-sanitize-recover=all"
+        if $config{CXX};
+}
+
+unless ($disabled{msan}) {
+  push @{$config{cflags}}, "-fsanitize=memory";
+  push @{$config{cxxflags}}, "-fsanitize=memory" if $config{CXX};
+}
+
+unless ($disabled{"fuzz-libfuzzer"} && $disabled{"fuzz-afl"}
+        && $disabled{asan} && $disabled{ubsan} && $disabled{msan}) {
+    push @{$config{cflags}}, "-fno-omit-frame-pointer", "-g";
+    push @{$config{cxxflags}}, "-fno-omit-frame-pointer", "-g" if $config{CXX};
+}
+#
+# Platform fix-ups
+#
+
+# This saves the build files from having to check
+if ($disabled{pic})
+	{
+	foreach (qw(shared_cflag shared_cxxflag shared_cppflag
+		    shared_defines shared_includes shared_ldflag
+		    module_cflags module_cxxflags module_cppflags
+		    module_defines module_includes module_lflags))
+		{
+		delete $config{$_};
+		$target{$_} = "";
+		}
+	}
+else
+	{
+	push @{$config{lib_defines}}, "OPENSSL_PIC";
+	}
+
+if ($target{sys_id} ne "")
+	{
+	push @{$config{openssl_sys_defines}}, "OPENSSL_SYS_$target{sys_id}";
+	}
+
+unless ($disabled{asm}) {
+    $target{cpuid_asm_src}=$table{DEFAULTS}->{cpuid_asm_src} if ($config{processor} eq "386");
+    push @{$config{lib_defines}}, "OPENSSL_CPUID_OBJ" if ($target{cpuid_asm_src} ne "mem_clr.c");
+
+    $target{bn_asm_src} =~ s/\w+-gf2m.c// if (defined($disabled{ec2m}));
+
+    # bn-586 is the only one implementing bn_*_part_words
+    push @{$config{lib_defines}}, "OPENSSL_BN_ASM_PART_WORDS" if ($target{bn_asm_src} =~ /bn-586/);
+    push @{$config{lib_defines}}, "OPENSSL_IA32_SSE2" if (!$disabled{sse2} && $target{bn_asm_src} =~ /86/);
+
+    push @{$config{lib_defines}}, "OPENSSL_BN_ASM_MONT" if ($target{bn_asm_src} =~ /-mont/);
+    push @{$config{lib_defines}}, "OPENSSL_BN_ASM_MONT5" if ($target{bn_asm_src} =~ /-mont5/);
+    push @{$config{lib_defines}}, "OPENSSL_BN_ASM_GF2m" if ($target{bn_asm_src} =~ /-gf2m/);
+    push @{$config{lib_defines}}, "BN_DIV3W" if ($target{bn_asm_src} =~ /-div3w/);
+
+    if ($target{sha1_asm_src}) {
+	push @{$config{lib_defines}}, "SHA1_ASM"   if ($target{sha1_asm_src} =~ /sx86/ || $target{sha1_asm_src} =~ /sha1/);
+	push @{$config{lib_defines}}, "SHA256_ASM" if ($target{sha1_asm_src} =~ /sha256/);
+	push @{$config{lib_defines}}, "SHA512_ASM" if ($target{sha1_asm_src} =~ /sha512/);
+    }
+    if ($target{keccak1600_asm_src} ne $table{DEFAULTS}->{keccak1600_asm_src}) {
+	push @{$config{lib_defines}}, "KECCAK1600_ASM";
+    }
+    if ($target{rc4_asm_src} ne $table{DEFAULTS}->{rc4_asm_src}) {
+	push @{$config{lib_defines}}, "RC4_ASM";
+    }
+    if ($target{md5_asm_src}) {
+	push @{$config{lib_defines}}, "MD5_ASM";
+    }
+    $target{cast_asm_src}=$table{DEFAULTS}->{cast_asm_src} unless $disabled{pic}; # CAST assembler is not PIC
+    if ($target{rmd160_asm_src}) {
+	push @{$config{lib_defines}}, "RMD160_ASM";
+    }
+    if ($target{aes_asm_src}) {
+	push @{$config{lib_defines}}, "AES_ASM" if ($target{aes_asm_src} =~ m/\baes-/);;
+	# aes-ctr.fake is not a real file, only indication that assembler
+	# module implements AES_ctr32_encrypt...
+	push @{$config{lib_defines}}, "AES_CTR_ASM" if ($target{aes_asm_src} =~ s/\s*aes-ctr\.fake//);
+	# aes-xts.fake indicates presence of AES_xts_[en|de]crypt...
+	push @{$config{lib_defines}}, "AES_XTS_ASM" if ($target{aes_asm_src} =~ s/\s*aes-xts\.fake//);
+	$target{aes_asm_src} =~ s/\s*(vpaes|aesni)-x86\.s//g if ($disabled{sse2});
+	push @{$config{lib_defines}}, "VPAES_ASM" if ($target{aes_asm_src} =~ m/vpaes/);
+	push @{$config{lib_defines}}, "BSAES_ASM" if ($target{aes_asm_src} =~ m/bsaes/);
+    }
+    if ($target{wp_asm_src} =~ /mmx/) {
+        if ($config{processor} eq "386") {
+	    $target{wp_asm_src}=$table{DEFAULTS}->{wp_asm_src};
+	} elsif (!$disabled{"whirlpool"}) {
+	    push @{$config{lib_defines}}, "WHIRLPOOL_ASM";
+	}
+    }
+    if ($target{modes_asm_src} =~ /ghash-/) {
+	push @{$config{lib_defines}}, "GHASH_ASM";
+    }
+    if ($target{ec_asm_src} =~ /ecp_nistz256/) {
+	push @{$config{lib_defines}}, "ECP_NISTZ256_ASM";
+    }
+    if ($target{ec_asm_src} =~ /x25519/) {
+	push @{$config{lib_defines}}, "X25519_ASM";
+    }
+    if ($target{padlock_asm_src} ne $table{DEFAULTS}->{padlock_asm_src}) {
+	push @{$config{lib_defines}}, "PADLOCK_ASM";
+    }
+    if ($target{poly1305_asm_src} ne "") {
+	push @{$config{lib_defines}}, "POLY1305_ASM";
+    }
+}
+
+my %predefined = compiler_predefined($config{CROSS_COMPILE}.$config{CC});
+
+# Check for makedepend capabilities.
+if (!$disabled{makedepend}) {
+    if ($config{target} =~ /^(VC|vms)-/) {
+        # For VC- and vms- targets, there's nothing more to do here.  The
+        # functionality is hard coded in the corresponding build files for
+        # cl (Windows) and CC/DECC (VMS).
+    } elsif (($predefined{__GNUC__} // -1) >= 3
+	     && !($predefined{__APPLE_CC__} && !$predefined{__clang__})) {
+        # We know that GNU C version 3 and up as well as all clang
+        # versions support dependency generation, but Xcode did not
+        # handle $cc -M before clang support (but claims __GNUC__ = 3)
+        $config{makedepprog} = "\$(CROSS_COMPILE)$config{CC}";
+    } else {
+        # In all other cases, we look for 'makedepend', and disable the
+        # capability if not found.
+        $config{makedepprog} = which('makedepend');
+        $disabled{makedepend} = "unavailable" unless $config{makedepprog};
+    }
+}
+
+if (!$disabled{asm} && !$predefined{__MACH__} && $^O ne 'VMS') {
+    # probe for -Wa,--noexecstack option...
+    if ($predefined{__clang__}) {
+        # clang has builtin assembler, which doesn't recognize --help,
+        # but it apparently recognizes the option in question on all
+        # supported platforms even when it's meaningless. In other words
+        # probe would fail, but probed option always accepted...
+        push @{$config{cflags}}, "-Wa,--noexecstack", "-Qunused-arguments";
+    } else {
+        my $cc = $config{CROSS_COMPILE}.$config{CC};
+        open(PIPE, "$cc -Wa,--help -c -o null.$$.o -x assembler /dev/null 2>&1 |");
+        while(<PIPE>) {
+            if (m/--noexecstack/) {
+                push @{$config{cflags}}, "-Wa,--noexecstack";
+                last;
+            }
+        }
+        close(PIPE);
+        unlink("null.$$.o");
+    }
+}
+
+# Deal with bn_ops ###################################################
+
+$config{bn_ll}			=0;
+$config{export_var_as_fn}	=0;
+my $def_int="unsigned int";
+$config{rc4_int}		=$def_int;
+($config{b64l},$config{b64},$config{b32})=(0,0,1);
+
+my $count = 0;
+foreach (sort split(/\s+/,$target{bn_ops})) {
+    $count++ if /SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT/;
+    $config{export_var_as_fn}=1                 if $_ eq 'EXPORT_VAR_AS_FN';
+    $config{bn_ll}=1				if $_ eq 'BN_LLONG';
+    $config{rc4_int}="unsigned char"		if $_ eq 'RC4_CHAR';
+    ($config{b64l},$config{b64},$config{b32})
+	=(0,1,0)				if $_ eq 'SIXTY_FOUR_BIT';
+    ($config{b64l},$config{b64},$config{b32})
+	=(1,0,0)				if $_ eq 'SIXTY_FOUR_BIT_LONG';
+    ($config{b64l},$config{b64},$config{b32})
+	=(0,0,1)				if $_ eq 'THIRTY_TWO_BIT';
+}
+die "Exactly one of SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT can be set in bn_ops\n"
+    if $count > 1;
+
+
+# Hack cflags for better warnings (dev option) #######################
+
+# "Stringify" the C and C++ flags string.  This permits it to be made part of
+# a string and works as well on command lines.
+$config{cflags} = [ map { (my $x = $_) =~ s/([\\\"])/\\$1/g; $x }
+                        @{$config{cflags}} ];
+$config{cxxflags} = [ map { (my $x = $_) =~ s/([\\\"])/\\$1/g; $x }
+                          @{$config{cxxflags}} ] if $config{CXX};
+
+if (defined($config{api})) {
+    $config{openssl_api_defines} = [ "OPENSSL_MIN_API=".$apitable->{$config{api}} ];
+    my $apiflag = sprintf("OPENSSL_API_COMPAT=%s", $apitable->{$config{api}});
+    push @{$config{defines}}, $apiflag;
+}
+
+if ($strict_warnings)
+	{
+	my $wopt;
+	my $gccver = $predefined{__GNUC__} // -1;
+
+	die "ERROR --strict-warnings requires gcc[>=4] or gcc-alike"
+            unless $gccver >= 4;
+	foreach $wopt (split /\s+/, $gcc_devteam_warn)
+		{
+		push @{$config{cflags}}, $wopt
+			unless grep { $_ eq $wopt } @{$config{cflags}};
+		push @{$config{cxxflags}}, $wopt
+			if ($config{CXX}
+			    && !grep { $_ eq $wopt } @{$config{cxxflags}});
+		}
+	if (defined($predefined{__clang__}))
+		{
+		foreach $wopt (split /\s+/, $clang_devteam_warn)
+			{
+			push @{$config{cflags}}, $wopt
+				unless grep { $_ eq $wopt } @{$config{cflags}};
+			push @{$config{cxxflags}}, $wopt
+				if ($config{CXX}
+				    && !grep { $_ eq $wopt } @{$config{cxxflags}});
+			}
+		}
+	}
+
+unless ($disabled{"crypto-mdebug-backtrace"})
+	{
+	foreach my $wopt (split /\s+/, $memleak_devteam_backtrace)
+		{
+		push @{$config{cflags}}, $wopt
+			unless grep { $_ eq $wopt } @{$config{cflags}};
+		push @{$config{cxxflags}}, $wopt
+			if ($config{CXX}
+			    && !grep { $_ eq $wopt } @{$config{cxxflags}});
+		}
+	if ($target =~ /^BSD-/)
+		{
+		push @{$config{ex_libs}}, "-lexecinfo";
+		}
+	}
+
+unless ($disabled{afalgeng}) {
+    $config{afalgeng}="";
+    if (grep { $_ eq 'afalgeng' } @{$target{enable}}) {
+        my $minver = 4*10000 + 1*100 + 0;
+        if ($config{CROSS_COMPILE} eq "") {
+            my $verstr = `uname -r`;
+            my ($ma, $mi1, $mi2) = split("\\.", $verstr);
+            ($mi2) = $mi2 =~ /(\d+)/;
+            my $ver = $ma*10000 + $mi1*100 + $mi2;
+            if ($ver < $minver) {
+                $disabled{afalgeng} = "too-old-kernel";
+            } else {
+                push @{$config{engdirs}}, "afalg";
+            }
+        } else {
+            $disabled{afalgeng} = "cross-compiling";
+        }
+    } else {
+        $disabled{afalgeng}  = "not-linux";
+    }
+}
+
+push @{$config{openssl_other_defines}}, "OPENSSL_NO_AFALGENG" if ($disabled{afalgeng});
+
+# Finish up %config by appending things the user gave us on the command line
+# apart from "make variables"
+foreach (keys %useradd) {
+    # The must all be lists, so we assert that here
+    die "internal error: \$useradd{$_} isn't an ARRAY\n"
+        unless ref $useradd{$_} eq 'ARRAY';
+
+    if (defined $config{$_}) {
+        push @{$config{$_}}, @{$useradd{$_}};
+    } else {
+        $config{$_} = [ @{$useradd{$_}} ];
+    }
+}
+
+# ALL MODIFICATIONS TO %config and %target MUST BE DONE FROM HERE ON
+
+# If we use the unified build, collect information from build.info files
+my %unified_info = ();
+
+my $buildinfo_debug = defined($ENV{CONFIGURE_DEBUG_BUILDINFO});
+if ($builder eq "unified") {
+    use with_fallback qw(Text::Template);
+
+    sub cleandir {
+        my $base = shift;
+        my $dir = shift;
+        my $relativeto = shift || ".";
+
+        $dir = catdir($base,$dir) unless isabsolute($dir);
+
+        # Make sure the directories we're building in exists
+        mkpath($dir);
+
+        my $res = abs2rel(absolutedir($dir), rel2abs($relativeto));
+        #print STDERR "DEBUG[cleandir]: $dir , $base => $res\n";
+        return $res;
+    }
+
+    sub cleanfile {
+        my $base = shift;
+        my $file = shift;
+        my $relativeto = shift || ".";
+
+        $file = catfile($base,$file) unless isabsolute($file);
+
+        my $d = dirname($file);
+        my $f = basename($file);
+
+        # Make sure the directories we're building in exists
+        mkpath($d);
+
+        my $res = abs2rel(catfile(absolutedir($d), $f), rel2abs($relativeto));
+        #print STDERR "DEBUG[cleanfile]: $d , $f => $res\n";
+        return $res;
+    }
+
+    # Store the name of the template file we will build the build file from
+    # in %config.  This may be useful for the build file itself.
+    my @build_file_template_names =
+	( $builder_platform."-".$target{build_file}.".tmpl",
+	  $target{build_file}.".tmpl" );
+    my @build_file_templates = ();
+
+    # First, look in the user provided directory, if given
+    if (defined env($local_config_envname)) {
+	@build_file_templates =
+	    map {
+		if ($^O eq 'VMS') {
+		    # VMS environment variables are logical names,
+		    # which can be used as is
+		    $local_config_envname . ':' . $_;
+		} else {
+		    catfile(env($local_config_envname), $_);
+		}
+	    }
+	    @build_file_template_names;
+    }
+    # Then, look in our standard directory
+    push @build_file_templates,
+	( map { cleanfile($srcdir, catfile("Configurations", $_), $blddir) }
+	  @build_file_template_names );
+
+    my $build_file_template;
+    for $_ (@build_file_templates) {
+	$build_file_template = $_;
+        last if -f $build_file_template;
+
+        $build_file_template = undef;
+    }
+    if (!defined $build_file_template) {
+	die "*** Couldn't find any of:\n", join("\n", @build_file_templates), "\n";
+    }
+    $config{build_file_templates}
+      = [ cleanfile($srcdir, catfile("Configurations", "common0.tmpl"),
+                    $blddir),
+          $build_file_template,
+          cleanfile($srcdir, catfile("Configurations", "common.tmpl"),
+                    $blddir) ];
+
+    my @build_infos = ( [ ".", "build.info" ] );
+    foreach (@{$config{dirs}}) {
+        push @build_infos, [ $_, "build.info" ]
+            if (-f catfile($srcdir, $_, "build.info"));
+    }
+    foreach (@{$config{sdirs}}) {
+        push @build_infos, [ catdir("crypto", $_), "build.info" ]
+            if (-f catfile($srcdir, "crypto", $_, "build.info"));
+    }
+    foreach (@{$config{engdirs}}) {
+        push @build_infos, [ catdir("engines", $_), "build.info" ]
+            if (-f catfile($srcdir, "engines", $_, "build.info"));
+    }
+    foreach (@{$config{tdirs}}) {
+        push @build_infos, [ catdir("test", $_), "build.info" ]
+            if (-f catfile($srcdir, "test", $_, "build.info"));
+    }
+
+    $config{build_infos} = [ ];
+
+    my %ordinals = ();
+    foreach (@build_infos) {
+        my $sourced = catdir($srcdir, $_->[0]);
+        my $buildd = catdir($blddir, $_->[0]);
+
+        mkpath($buildd);
+
+        my $f = $_->[1];
+        # The basic things we're trying to build
+        my @programs = ();
+        my @programs_install = ();
+        my @libraries = ();
+        my @libraries_install = ();
+        my @engines = ();
+        my @engines_install = ();
+        my @scripts = ();
+        my @scripts_install = ();
+        my @extra = ();
+        my @overrides = ();
+        my @intermediates = ();
+        my @rawlines = ();
+
+        my %sources = ();
+        my %shared_sources = ();
+        my %includes = ();
+        my %depends = ();
+        my %renames = ();
+        my %sharednames = ();
+        my %generate = ();
+
+        # We want to detect configdata.pm in the source tree, so we
+        # don't use it if the build tree is different.
+        my $src_configdata = cleanfile($srcdir, "configdata.pm", $blddir);
+
+        push @{$config{build_infos}}, catfile(abs2rel($sourced, $blddir), $f);
+        my $template =
+            Text::Template->new(TYPE => 'FILE',
+                                SOURCE => catfile($sourced, $f),
+                                PREPEND => qq{use lib "$FindBin::Bin/util/perl";});
+        die "Something went wrong with $sourced/$f: $!\n" unless $template;
+        my @text =
+            split /^/m,
+            $template->fill_in(HASH => { config => \%config,
+                                         target => \%target,
+                                         disabled => \%disabled,
+                                         withargs => \%withargs,
+                                         builddir => abs2rel($buildd, $blddir),
+                                         sourcedir => abs2rel($sourced, $blddir),
+                                         buildtop => abs2rel($blddir, $blddir),
+                                         sourcetop => abs2rel($srcdir, $blddir) },
+                               DELIMITERS => [ "{-", "-}" ]);
+
+        # The top item of this stack has the following values
+        # -2 positive already run and we found ELSE (following ELSIF should fail)
+        # -1 positive already run (skip until ENDIF)
+        # 0 negatives so far (if we're at a condition, check it)
+        # 1 last was positive (don't skip lines until next ELSE, ELSIF or ENDIF)
+        # 2 positive ELSE (following ELSIF should fail)
+        my @skip = ();
+        collect_information(
+            collect_from_array([ @text ],
+                               qr/\\$/ => sub { my $l1 = shift; my $l2 = shift;
+                                                $l1 =~ s/\\$//; $l1.$l2 }),
+            # Info we're looking for
+            qr/^\s*IF\[((?:\\.|[^\\\]])*)\]\s*$/
+            => sub {
+                if (! @skip || $skip[$#skip] > 0) {
+                    push @skip, !! $1;
+                } else {
+                    push @skip, -1;
+                }
+            },
+            qr/^\s*ELSIF\[((?:\\.|[^\\\]])*)\]\s*$/
+            => sub { die "ELSIF out of scope" if ! @skip;
+                     die "ELSIF following ELSE" if abs($skip[$#skip]) == 2;
+                     $skip[$#skip] = -1 if $skip[$#skip] != 0;
+                     $skip[$#skip] = !! $1
+                         if $skip[$#skip] == 0; },
+            qr/^\s*ELSE\s*$/
+            => sub { die "ELSE out of scope" if ! @skip;
+                     $skip[$#skip] = -2 if $skip[$#skip] != 0;
+                     $skip[$#skip] = 2 if $skip[$#skip] == 0; },
+            qr/^\s*ENDIF\s*$/
+            => sub { die "ENDIF out of scope" if ! @skip;
+                     pop @skip; },
+            qr/^\s*PROGRAMS(_NO_INST)?\s*=\s*(.*)\s*$/
+            => sub {
+                if (!@skip || $skip[$#skip] > 0) {
+                    my $install = $1;
+                    my @x = tokenize($2);
+                    push @programs, @x;
+                    push @programs_install, @x unless $install;
+                }
+            },
+            qr/^\s*LIBS(_NO_INST)?\s*=\s*(.*)\s*$/
+            => sub {
+                if (!@skip || $skip[$#skip] > 0) {
+                    my $install = $1;
+                    my @x = tokenize($2);
+                    push @libraries, @x;
+                    push @libraries_install, @x unless $install;
+                }
+            },
+            qr/^\s*ENGINES(_NO_INST)?\s*=\s*(.*)\s*$/
+            => sub {
+                if (!@skip || $skip[$#skip] > 0) {
+                    my $install = $1;
+                    my @x = tokenize($2);
+                    push @engines, @x;
+                    push @engines_install, @x unless $install;
+                }
+            },
+            qr/^\s*SCRIPTS(_NO_INST)?\s*=\s*(.*)\s*$/
+            => sub {
+                if (!@skip || $skip[$#skip] > 0) {
+                    my $install = $1;
+                    my @x = tokenize($2);
+                    push @scripts, @x;
+                    push @scripts_install, @x unless $install;
+                }
+            },
+            qr/^\s*EXTRA\s*=\s*(.*)\s*$/
+            => sub { push @extra, tokenize($1)
+                         if !@skip || $skip[$#skip] > 0 },
+            qr/^\s*OVERRIDES\s*=\s*(.*)\s*$/
+            => sub { push @overrides, tokenize($1)
+                         if !@skip || $skip[$#skip] > 0 },
+
+            qr/^\s*ORDINALS\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/,
+            => sub { push @{$ordinals{$1}}, tokenize($2)
+                         if !@skip || $skip[$#skip] > 0 },
+            qr/^\s*SOURCE\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
+            => sub { push @{$sources{$1}}, tokenize($2)
+                         if !@skip || $skip[$#skip] > 0 },
+            qr/^\s*SHARED_SOURCE\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
+            => sub { push @{$shared_sources{$1}}, tokenize($2)
+                         if !@skip || $skip[$#skip] > 0 },
+            qr/^\s*INCLUDE\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
+            => sub { push @{$includes{$1}}, tokenize($2)
+                         if !@skip || $skip[$#skip] > 0 },
+            qr/^\s*DEPEND\[((?:\\.|[^\\\]])*)\]\s*=\s*(.*)\s*$/
+            => sub { push @{$depends{$1}}, tokenize($2)
+                         if !@skip || $skip[$#skip] > 0 },
+            qr/^\s*GENERATE\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
+            => sub { push @{$generate{$1}}, $2
+                         if !@skip || $skip[$#skip] > 0 },
+            qr/^\s*RENAME\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
+            => sub { push @{$renames{$1}}, tokenize($2)
+                         if !@skip || $skip[$#skip] > 0 },
+            qr/^\s*SHARED_NAME\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
+            => sub { push @{$sharednames{$1}}, tokenize($2)
+                         if !@skip || $skip[$#skip] > 0 },
+            qr/^\s*BEGINRAW\[((?:\\.|[^\\\]])+)\]\s*$/
+            => sub {
+                my $lineiterator = shift;
+                my $target_kind = $1;
+                while (defined $lineiterator->()) {
+                    s|\R$||;
+                    if (/^\s*ENDRAW\[((?:\\.|[^\\\]])+)\]\s*$/) {
+                        die "ENDRAW doesn't match BEGINRAW"
+                            if $1 ne $target_kind;
+                        last;
+                    }
+                    next if @skip && $skip[$#skip] <= 0;
+                    push @rawlines,  $_
+                        if ($target_kind eq $target{build_file}
+                            || $target_kind eq $target{build_file}."(".$builder_platform.")");
+                }
+            },
+            qr/^\s*(?:#.*)?$/ => sub { },
+            "OTHERWISE" => sub { die "Something wrong with this line:\n$_\nat $sourced/$f" },
+            "BEFORE" => sub {
+                if ($buildinfo_debug) {
+                    print STDERR "DEBUG: Parsing ",join(" ", @_),"\n";
+                    print STDERR "DEBUG: ... before parsing, skip stack is ",join(" ", map { int($_) } @skip),"\n";
+                }
+            },
+            "AFTER" => sub {
+                if ($buildinfo_debug) {
+                    print STDERR "DEBUG: .... after parsing, skip stack is ",join(" ", map { int($_) } @skip),"\n";
+                }
+            },
+            );
+        die "runaway IF?" if (@skip);
+
+        foreach (keys %renames) {
+            die "$_ renamed to more than one thing: "
+                ,join(" ", @{$renames{$_}}),"\n"
+                if scalar @{$renames{$_}} > 1;
+            my $dest = cleanfile($buildd, $_, $blddir);
+            my $to = cleanfile($buildd, $renames{$_}->[0], $blddir);
+            die "$dest renamed to more than one thing: "
+                ,$unified_info{rename}->{$dest}, $to
+                unless !defined($unified_info{rename}->{$dest})
+                or $unified_info{rename}->{$dest} eq $to;
+            $unified_info{rename}->{$dest} = $to;
+        }
+
+        foreach (@programs) {
+            my $program = cleanfile($buildd, $_, $blddir);
+            if ($unified_info{rename}->{$program}) {
+                $program = $unified_info{rename}->{$program};
+            }
+            $unified_info{programs}->{$program} = 1;
+        }
+
+        foreach (@programs_install) {
+            my $program = cleanfile($buildd, $_, $blddir);
+            if ($unified_info{rename}->{$program}) {
+                $program = $unified_info{rename}->{$program};
+            }
+            $unified_info{install}->{programs}->{$program} = 1;
+        }
+
+        foreach (@libraries) {
+            my $library = cleanfile($buildd, $_, $blddir);
+            if ($unified_info{rename}->{$library}) {
+                $library = $unified_info{rename}->{$library};
+            }
+            $unified_info{libraries}->{$library} = 1;
+        }
+
+        foreach (@libraries_install) {
+            my $library = cleanfile($buildd, $_, $blddir);
+            if ($unified_info{rename}->{$library}) {
+                $library = $unified_info{rename}->{$library};
+            }
+            $unified_info{install}->{libraries}->{$library} = 1;
+        }
+
+        die <<"EOF" if scalar @engines and !$config{dynamic_engines};
+ENGINES can only be used if configured with 'dynamic-engine'.
+This is usually a fault in a build.info file.
+EOF
+        foreach (@engines) {
+            my $library = cleanfile($buildd, $_, $blddir);
+            if ($unified_info{rename}->{$library}) {
+                $library = $unified_info{rename}->{$library};
+            }
+            $unified_info{engines}->{$library} = 1;
+        }
+
+        foreach (@engines_install) {
+            my $library = cleanfile($buildd, $_, $blddir);
+            if ($unified_info{rename}->{$library}) {
+                $library = $unified_info{rename}->{$library};
+            }
+            $unified_info{install}->{engines}->{$library} = 1;
+        }
+
+        foreach (@scripts) {
+            my $script = cleanfile($buildd, $_, $blddir);
+            if ($unified_info{rename}->{$script}) {
+                $script = $unified_info{rename}->{$script};
+            }
+            $unified_info{scripts}->{$script} = 1;
+        }
+
+        foreach (@scripts_install) {
+            my $script = cleanfile($buildd, $_, $blddir);
+            if ($unified_info{rename}->{$script}) {
+                $script = $unified_info{rename}->{$script};
+            }
+            $unified_info{install}->{scripts}->{$script} = 1;
+        }
+
+        foreach (@extra) {
+            my $extra = cleanfile($buildd, $_, $blddir);
+            $unified_info{extra}->{$extra} = 1;
+        }
+
+        foreach (@overrides) {
+            my $override = cleanfile($buildd, $_, $blddir);
+            $unified_info{overrides}->{$override} = 1;
+        }
+
+        push @{$unified_info{rawlines}}, @rawlines;
+
+        unless ($disabled{shared}) {
+            # Check sharednames.
+            foreach (keys %sharednames) {
+                my $dest = cleanfile($buildd, $_, $blddir);
+                if ($unified_info{rename}->{$dest}) {
+                    $dest = $unified_info{rename}->{$dest};
+                }
+                die "shared_name for $dest with multiple values: "
+                    ,join(" ", @{$sharednames{$_}}),"\n"
+                    if scalar @{$sharednames{$_}} > 1;
+                my $to = cleanfile($buildd, $sharednames{$_}->[0], $blddir);
+                die "shared_name found for a library $dest that isn't defined\n"
+                    unless $unified_info{libraries}->{$dest};
+                die "shared_name for $dest with multiple values: "
+                    ,$unified_info{sharednames}->{$dest}, ", ", $to
+                    unless !defined($unified_info{sharednames}->{$dest})
+                    or $unified_info{sharednames}->{$dest} eq $to;
+                $unified_info{sharednames}->{$dest} = $to;
+            }
+
+            # Additionally, we set up sharednames for libraries that don't
+            # have any, as themselves.  Only for libraries that aren't
+            # explicitly static.
+            foreach (grep !/\.a$/, keys %{$unified_info{libraries}}) {
+                if (!defined $unified_info{sharednames}->{$_}) {
+                    $unified_info{sharednames}->{$_} = $_
+                }
+            }
+
+            # Check that we haven't defined any library as both shared and
+            # explicitly static.  That is forbidden.
+            my @doubles = ();
+            foreach (grep /\.a$/, keys %{$unified_info{libraries}}) {
+                (my $l = $_) =~ s/\.a$//;
+                push @doubles, $l if defined $unified_info{sharednames}->{$l};
+            }
+            die "these libraries are both explicitly static and shared:\n  ",
+                join(" ", @doubles), "\n"
+                if @doubles;
+        }
+
+        foreach (keys %sources) {
+            my $dest = $_;
+            my $ddest = cleanfile($buildd, $_, $blddir);
+            if ($unified_info{rename}->{$ddest}) {
+                $ddest = $unified_info{rename}->{$ddest};
+            }
+            foreach (@{$sources{$dest}}) {
+                my $s = cleanfile($sourced, $_, $blddir);
+
+                # If it isn't in the source tree, we assume it's generated
+                # in the build tree
+                if ($s eq $src_configdata || ! -f $s || $generate{$_}) {
+                    $s = cleanfile($buildd, $_, $blddir);
+                }
+                # We recognise C++, C and asm files
+                if ($s =~ /\.(cc|cpp|c|s|S)$/) {
+                    my $o = $_;
+                    $o =~ s/\.[csS]$/.o/; # C and assembler
+                    $o =~ s/\.(cc|cpp)$/_cc.o/; # C++
+                    $o = cleanfile($buildd, $o, $blddir);
+                    $unified_info{sources}->{$ddest}->{$o} = 1;
+                    $unified_info{sources}->{$o}->{$s} = 1;
+                } elsif ($s =~ /\.rc$/) {
+                    # We also recognise resource files
+                    my $o = $_;
+                    $o =~ s/\.rc$/.res/; # Resource configuration
+                    my $o = cleanfile($buildd, $o, $blddir);
+                    $unified_info{sources}->{$ddest}->{$o} = 1;
+                    $unified_info{sources}->{$o}->{$s} = 1;
+                } else {
+                    $unified_info{sources}->{$ddest}->{$s} = 1;
+                }
+            }
+        }
+
+        foreach (keys %shared_sources) {
+            my $dest = $_;
+            my $ddest = cleanfile($buildd, $_, $blddir);
+            if ($unified_info{rename}->{$ddest}) {
+                $ddest = $unified_info{rename}->{$ddest};
+            }
+            foreach (@{$shared_sources{$dest}}) {
+                my $s = cleanfile($sourced, $_, $blddir);
+
+                # If it isn't in the source tree, we assume it's generated
+                # in the build tree
+                if ($s eq $src_configdata || ! -f $s || $generate{$_}) {
+                    $s = cleanfile($buildd, $_, $blddir);
+                }
+
+                if ($s =~ /\.(cc|cpp|c|s|S)$/) {
+                    # We recognise C++, C and asm files
+                    my $o = $_;
+                    $o =~ s/\.[csS]$/.o/; # C and assembler
+                    $o =~ s/\.(cc|cpp)$/_cc.o/; # C++
+                    $o = cleanfile($buildd, $o, $blddir);
+                    $unified_info{shared_sources}->{$ddest}->{$o} = 1;
+                    $unified_info{sources}->{$o}->{$s} = 1;
+                } elsif ($s =~ /\.rc$/) {
+                    # We also recognise resource files
+                    my $o = $_;
+                    $o =~ s/\.rc$/.res/; # Resource configuration
+                    my $o = cleanfile($buildd, $o, $blddir);
+                    $unified_info{shared_sources}->{$ddest}->{$o} = 1;
+                    $unified_info{sources}->{$o}->{$s} = 1;
+                } elsif ($s =~ /\.(def|map|opt)$/) {
+                    # We also recognise .def / .map / .opt files
+                    # We know they are generated files
+                    my $def = cleanfile($buildd, $s, $blddir);
+                    $unified_info{shared_sources}->{$ddest}->{$def} = 1;
+                } else {
+                    die "unrecognised source file type for shared library: $s\n";
+                }
+            }
+        }
+
+        foreach (keys %generate) {
+            my $dest = $_;
+            my $ddest = cleanfile($buildd, $_, $blddir);
+            if ($unified_info{rename}->{$ddest}) {
+                $ddest = $unified_info{rename}->{$ddest};
+            }
+            die "more than one generator for $dest: "
+                    ,join(" ", @{$generate{$_}}),"\n"
+                    if scalar @{$generate{$_}} > 1;
+            my @generator = split /\s+/, $generate{$dest}->[0];
+            $generator[0] = cleanfile($sourced, $generator[0], $blddir),
+            $unified_info{generate}->{$ddest} = [ @generator ];
+        }
+
+        foreach (keys %depends) {
+            my $dest = $_;
+            my $ddest = $dest eq "" ? "" : cleanfile($sourced, $_, $blddir);
+
+            # If the destination doesn't exist in source, it can only be
+            # a generated file in the build tree.
+            if ($ddest ne "" && ($ddest eq $src_configdata || ! -f $ddest)) {
+                $ddest = cleanfile($buildd, $_, $blddir);
+                if ($unified_info{rename}->{$ddest}) {
+                    $ddest = $unified_info{rename}->{$ddest};
+                }
+            }
+            foreach (@{$depends{$dest}}) {
+                my $d = cleanfile($sourced, $_, $blddir);
+
+                # If we know it's generated, or assume it is because we can't
+                # find it in the source tree, we set file we depend on to be
+                # in the build tree rather than the source tree, and assume
+                # and that there are lines to build it in a BEGINRAW..ENDRAW
+                # section or in the Makefile template.
+                if ($d eq $src_configdata
+                    || ! -f $d
+                    || (grep { $d eq $_ }
+                        map { cleanfile($srcdir, $_, $blddir) }
+                        grep { /\.h$/ } keys %{$unified_info{generate}})) {
+                    $d = cleanfile($buildd, $_, $blddir);
+                }
+                # Take note if the file to depend on is being renamed
+                # Take extra care with files ending with .a, they should
+                # be treated without that extension, and the extension
+                # should be added back after treatment.
+                $d =~ /(\.a)?$/;
+                my $e = $1 // "";
+                $d = $`;
+                if ($unified_info{rename}->{$d}) {
+                    $d = $unified_info{rename}->{$d};
+                }
+                $d .= $e;
+                $unified_info{depends}->{$ddest}->{$d} = 1;
+            }
+        }
+
+        foreach (keys %includes) {
+            my $dest = $_;
+            my $ddest = cleanfile($sourced, $_, $blddir);
+
+            # If the destination doesn't exist in source, it can only be
+            # a generated file in the build tree.
+            if ($ddest eq $src_configdata || ! -f $ddest) {
+                $ddest = cleanfile($buildd, $_, $blddir);
+                if ($unified_info{rename}->{$ddest}) {
+                    $ddest = $unified_info{rename}->{$ddest};
+                }
+            }
+            foreach (@{$includes{$dest}}) {
+                my $is = cleandir($sourced, $_, $blddir);
+                my $ib = cleandir($buildd, $_, $blddir);
+                push @{$unified_info{includes}->{$ddest}->{source}}, $is
+                    unless grep { $_ eq $is } @{$unified_info{includes}->{$ddest}->{source}};
+                push @{$unified_info{includes}->{$ddest}->{build}}, $ib
+                    unless grep { $_ eq $ib } @{$unified_info{includes}->{$ddest}->{build}};
+            }
+        }
+    }
+
+    my $ordinals_text = join(', ', sort keys %ordinals);
+    warn <<"EOF" if $ordinals_text;
+
+WARNING: ORDINALS were specified for $ordinals_text
+They are ignored and should be replaced with a combination of GENERATE,
+DEPEND and SHARED_SOURCE.
+EOF
+
+    # Massage the result
+
+    # If the user configured no-shared, we allow no shared sources
+    if ($disabled{shared}) {
+        foreach (keys %{$unified_info{shared_sources}}) {
+            foreach (keys %{$unified_info{shared_sources}->{$_}}) {
+                delete $unified_info{sources}->{$_};
+            }
+        }
+        $unified_info{shared_sources} = {};
+    }
+
+    # If we depend on a header file or a perl module, add an inclusion of
+    # its directory to allow smoothe inclusion
+    foreach my $dest (keys %{$unified_info{depends}}) {
+        next if $dest eq "";
+        foreach my $d (keys %{$unified_info{depends}->{$dest}}) {
+            next unless $d =~ /\.(h|pm)$/;
+            my $i = dirname($d);
+            my $spot =
+                $d eq "configdata.pm" || defined($unified_info{generate}->{$d})
+                ? 'build' : 'source';
+            push @{$unified_info{includes}->{$dest}->{$spot}}, $i
+                unless grep { $_ eq $i } @{$unified_info{includes}->{$dest}->{$spot}};
+        }
+    }
+
+    # Trickle down includes placed on libraries, engines and programs to
+    # their sources (i.e. object files)
+    foreach my $dest (keys %{$unified_info{engines}},
+                      keys %{$unified_info{libraries}},
+                      keys %{$unified_info{programs}}) {
+        foreach my $k (("source", "build")) {
+            next unless defined($unified_info{includes}->{$dest}->{$k});
+            my @incs = reverse @{$unified_info{includes}->{$dest}->{$k}};
+            foreach my $obj (grep /\.o$/,
+                             (keys %{$unified_info{sources}->{$dest} // {}},
+                              keys %{$unified_info{shared_sources}->{$dest} // {}})) {
+                foreach my $inc (@incs) {
+                    unshift @{$unified_info{includes}->{$obj}->{$k}}, $inc
+                        unless grep { $_ eq $inc } @{$unified_info{includes}->{$obj}->{$k}};
+                }
+            }
+        }
+        delete $unified_info{includes}->{$dest};
+    }
+
+    ### Make unified_info a bit more efficient
+    # One level structures
+    foreach (("programs", "libraries", "engines", "scripts", "extra", "overrides")) {
+        $unified_info{$_} = [ sort keys %{$unified_info{$_}} ];
+    }
+    # Two level structures
+    foreach my $l1 (("install", "sources", "shared_sources", "ldadd", "depends")) {
+        foreach my $l2 (sort keys %{$unified_info{$l1}}) {
+            $unified_info{$l1}->{$l2} =
+                [ sort keys %{$unified_info{$l1}->{$l2}} ];
+        }
+    }
+    # Includes
+    foreach my $dest (sort keys %{$unified_info{includes}}) {
+        if (defined($unified_info{includes}->{$dest}->{build})) {
+            my @source_includes = ();
+            @source_includes = ( @{$unified_info{includes}->{$dest}->{source}} )
+                if defined($unified_info{includes}->{$dest}->{source});
+            $unified_info{includes}->{$dest} =
+                [ @{$unified_info{includes}->{$dest}->{build}} ];
+            foreach my $inc (@source_includes) {
+                push @{$unified_info{includes}->{$dest}}, $inc
+                    unless grep { $_ eq $inc } @{$unified_info{includes}->{$dest}};
+            }
+        } else {
+            $unified_info{includes}->{$dest} =
+                [ @{$unified_info{includes}->{$dest}->{source}} ];
+        }
+    }
+
+    # For convenience collect information regarding directories where
+    # files are generated, those generated files and the end product
+    # they end up in where applicable.  Then, add build rules for those
+    # directories
+    my %loopinfo = ( "lib" => [ @{$unified_info{libraries}} ],
+                     "dso" => [ @{$unified_info{engines}} ],
+                     "bin" => [ @{$unified_info{programs}} ],
+                     "script" => [ @{$unified_info{scripts}} ] );
+    foreach my $type (keys %loopinfo) {
+        foreach my $product (@{$loopinfo{$type}}) {
+            my %dirs = ();
+            my $pd = dirname($product);
+
+            foreach (@{$unified_info{sources}->{$product} // []},
+                     @{$unified_info{shared_sources}->{$product} // []}) {
+                my $d = dirname($_);
+
+                # We don't want to create targets for source directories
+                # when building out of source
+                next if ($config{sourcedir} ne $config{builddir}
+                             && $d =~ m|^\Q$config{sourcedir}\E|);
+                # We already have a "test" target, and the current directory
+                # is just silly to make a target for
+                next if $d eq "test" || $d eq ".";
+
+                $dirs{$d} = 1;
+                push @{$unified_info{dirinfo}->{$d}->{deps}}, $_
+                    if $d ne $pd;
+            }
+            foreach (keys %dirs) {
+                push @{$unified_info{dirinfo}->{$_}->{products}->{$type}},
+                    $product;
+            }
+        }
+    }
+}
+
+# For the schemes that need it, we provide the old *_obj configs
+# from the *_asm_obj ones
+foreach (grep /_(asm|aux)_src$/, keys %target) {
+    my $src = $_;
+    (my $obj = $_) =~ s/_(asm|aux)_src$/_obj/;
+    $target{$obj} = $target{$src};
+    $target{$obj} =~ s/\.[csS]\b/.o/g; # C and assembler
+    $target{$obj} =~ s/\.(cc|cpp)\b/_cc.o/g; # C++
+}
+
+# Write down our configuration where it fits #########################
+
+print "Creating configdata.pm\n";
+open(OUT,">configdata.pm") || die "unable to create configdata.pm: $!\n";
+print OUT <<"EOF";
+#! $config{HASHBANGPERL}
+
+package configdata;
+
+use strict;
+use warnings;
+
+use Exporter;
+#use vars qw(\@ISA \@EXPORT);
+our \@ISA = qw(Exporter);
+our \@EXPORT = qw(\%config \%target \%disabled \%withargs \%unified_info \@disablables);
+
+EOF
+print OUT "our %config = (\n";
+foreach (sort keys %config) {
+    if (ref($config{$_}) eq "ARRAY") {
+	print OUT "  ", $_, " => [ ", join(", ",
+					   map { quotify("perl", $_) }
+					   @{$config{$_}}), " ],\n";
+    } elsif (ref($config{$_}) eq "HASH") {
+	print OUT "  ", $_, " => {";
+        if (scalar keys %{$config{$_}} > 0) {
+            print OUT "\n";
+            foreach my $key (sort keys %{$config{$_}}) {
+                print OUT "      ",
+                    join(" => ",
+                         quotify("perl", $key),
+                         defined $config{$_}->{$key}
+                             ? quotify("perl", $config{$_}->{$key})
+                             : "undef");
+                print OUT ",\n";
+            }
+            print OUT "  ";
+        }
+        print OUT "},\n";
+    } else {
+	print OUT "  ", $_, " => ", quotify("perl", $config{$_}), ",\n"
+    }
+}
+print OUT <<"EOF";
+);
+
+EOF
+print OUT "our %target = (\n";
+foreach (sort keys %target) {
+    if (ref($target{$_}) eq "ARRAY") {
+	print OUT "  ", $_, " => [ ", join(", ",
+					   map { quotify("perl", $_) }
+					   @{$target{$_}}), " ],\n";
+    } else {
+	print OUT "  ", $_, " => ", quotify("perl", $target{$_}), ",\n"
+    }
+}
+print OUT <<"EOF";
+);
+
+EOF
+print OUT "our \%available_protocols = (\n";
+print OUT "  tls => [ ", join(", ", map { quotify("perl", $_) } @tls), " ],\n";
+print OUT "  dtls => [ ", join(", ", map { quotify("perl", $_) } @dtls), " ],\n";
+print OUT <<"EOF";
+);
+
+EOF
+print OUT "our \@disablables = (\n";
+foreach (@disablables) {
+    print OUT "  ", quotify("perl", $_), ",\n";
+}
+print OUT <<"EOF";
+);
+
+EOF
+print OUT "our \%disabled = (\n";
+foreach (sort keys %disabled) {
+    print OUT "  ", quotify("perl", $_), " => ", quotify("perl", $disabled{$_}), ",\n";
+}
+print OUT <<"EOF";
+);
+
+EOF
+print OUT "our %withargs = (\n";
+foreach (sort keys %withargs) {
+    if (ref($withargs{$_}) eq "ARRAY") {
+	print OUT "  ", $_, " => [ ", join(", ",
+					   map { quotify("perl", $_) }
+					   @{$withargs{$_}}), " ],\n";
+    } else {
+	print OUT "  ", $_, " => ", quotify("perl", $withargs{$_}), ",\n"
+    }
+}
+print OUT <<"EOF";
+);
+
+EOF
+if ($builder eq "unified") {
+    my $recurse;
+    $recurse = sub {
+        my $indent = shift;
+        foreach (@_) {
+            if (ref $_ eq "ARRAY") {
+                print OUT " "x$indent, "[\n";
+                foreach (@$_) {
+                    $recurse->($indent + 4, $_);
+                }
+                print OUT " "x$indent, "],\n";
+            } elsif (ref $_ eq "HASH") {
+                my %h = %$_;
+                print OUT " "x$indent, "{\n";
+                foreach (sort keys %h) {
+                    if (ref $h{$_} eq "") {
+                        print OUT " "x($indent + 4), quotify("perl", $_), " => ", quotify("perl", $h{$_}), ",\n";
+                    } else {
+                        print OUT " "x($indent + 4), quotify("perl", $_), " =>\n";
+                        $recurse->($indent + 8, $h{$_});
+                    }
+                }
+                print OUT " "x$indent, "},\n";
+            } else {
+                print OUT " "x$indent, quotify("perl", $_), ",\n";
+            }
+        }
+    };
+    print OUT "our %unified_info = (\n";
+    foreach (sort keys %unified_info) {
+        if (ref $unified_info{$_} eq "") {
+            print OUT " "x4, quotify("perl", $_), " => ", quotify("perl", $unified_info{$_}), ",\n";
+        } else {
+            print OUT " "x4, quotify("perl", $_), " =>\n";
+            $recurse->(8, $unified_info{$_});
+        }
+    }
+    print OUT <<"EOF";
+);
+
+EOF
+}
+print OUT
+    "# The following data is only used when this files is use as a script\n";
+print OUT "my \@makevars = (\n";
+foreach (sort keys %user) {
+    print OUT "    '",$_,"',\n";
+}
+print OUT ");\n";
+print OUT "my \%disabled_info = (\n";
+foreach my $what (sort keys %disabled_info) {
+    print OUT "    '$what' => {\n";
+    foreach my $info (sort keys %{$disabled_info{$what}}) {
+        if (ref $disabled_info{$what}->{$info} eq 'ARRAY') {
+            print OUT "        $info => [ ",
+                join(', ', map { "'$_'" } @{$disabled_info{$what}->{$info}}),
+                " ],\n";
+        } else {
+            print OUT "        $info => '", $disabled_info{$what}->{$info},
+                "',\n";
+        }
+    }
+    print OUT "    },\n";
+}
+print OUT ");\n";
+print OUT 'my @user_crossable = qw( ', join (' ', @user_crossable), " );\n";
+print OUT << 'EOF';
+# If run directly, we can give some answers, and even reconfigure
+unless (caller) {
+    use Getopt::Long;
+    use File::Spec::Functions;
+    use File::Basename;
+    use Pod::Usage;
+
+    my $here = dirname($0);
+
+    my $dump = undef;
+    my $cmdline = undef;
+    my $options = undef;
+    my $target = undef;
+    my $envvars = undef;
+    my $makevars = undef;
+    my $buildparams = undef;
+    my $reconf = undef;
+    my $verbose = undef;
+    my $help = undef;
+    my $man = undef;
+    GetOptions('dump|d'                 => \$dump,
+               'command-line|c'         => \$cmdline,
+               'options|o'              => \$options,
+               'target|t'               => \$target,
+               'environment|e'          => \$envvars,
+               'make-variables|m'       => \$makevars,
+               'build-parameters|b'     => \$buildparams,
+               'reconfigure|reconf|r'   => \$reconf,
+               'verbose|v'              => \$verbose,
+               'help'                   => \$help,
+               'man'                    => \$man)
+        or die "Errors in command line arguments\n";
+
+    unless ($dump || $cmdline || $options || $target || $envvars || $makevars
+            || $buildparams || $reconf || $verbose || $help || $man) {
+        print STDERR <<"_____";
+You must give at least one option.
+For more information, do '$0 --help'
+_____
+        exit(2);
+    }
+
+    if ($help) {
+        pod2usage(-exitval => 0,
+                  -verbose => 1);
+    }
+    if ($man) {
+        pod2usage(-exitval => 0,
+                  -verbose => 2);
+    }
+    if ($dump || $cmdline) {
+        print "\nCommand line (with current working directory = $here):\n\n";
+        print '    ',join(' ',
+                          $config{PERL},
+                          catfile($config{sourcedir}, 'Configure'),
+                          @{$config{perlargv}}), "\n";
+        print "\nPerl information:\n\n";
+        print '    ',$config{perl_cmd},"\n";
+        print '    ',$config{perl_version},' for ',$config{perl_archname},"\n";
+    }
+    if ($dump || $options) {
+        my $longest = 0;
+        my $longest2 = 0;
+        foreach my $what (@disablables) {
+            $longest = length($what) if $longest < length($what);
+            $longest2 = length($disabled{$what})
+                if $disabled{$what} && $longest2 < length($disabled{$what});
+        }
+        print "\nEnabled features:\n\n";
+        foreach my $what (@disablables) {
+            print "    $what\n" unless $disabled{$what};
+        }
+        print "\nDisabled features:\n\n";
+        foreach my $what (@disablables) {
+            if ($disabled{$what}) {
+                print "    $what", ' ' x ($longest - length($what) + 1),
+                    "[$disabled{$what}]", ' ' x ($longest2 - length($disabled{$what}) + 1);
+                print $disabled_info{$what}->{macro}
+                    if $disabled_info{$what}->{macro};
+                print ' (skip ',
+                    join(', ', @{$disabled_info{$what}->{skipped}}),
+                    ')'
+                    if $disabled_info{$what}->{skipped};
+                print "\n";
+            }
+        }
+    }
+    if ($dump || $target) {
+        print "\nConfig target attributes:\n\n";
+        foreach (sort keys %target) {
+            next if $_ =~ m|^_| || $_ eq 'template';
+            my $quotify = sub {
+                map { (my $x = $_) =~ s|([\\\$\@"])|\\$1|g; "\"$x\""} @_;
+            };
+            print '    ', $_, ' => ';
+            if (ref($target{$_}) eq "ARRAY") {
+                print '[ ', join(', ', $quotify->(@{$target{$_}})), " ],\n";
+            } else {
+                print $quotify->($target{$_}), ",\n"
+            }
+        }
+    }
+    if ($dump || $envvars) {
+        print "\nRecorded environment:\n\n";
+        foreach (sort keys %{$config{perlenv}}) {
+            print '    ',$_,' = ',($config{perlenv}->{$_} || ''),"\n";
+        }
+    }
+    if ($dump || $makevars) {
+        print "\nMakevars:\n\n";
+        foreach my $var (@makevars) {
+            my $prefix = '';
+            $prefix = $config{CROSS_COMPILE}
+                if grep { $var eq $_ } @user_crossable;
+            $prefix //= '';
+            print '    ',$var,' ' x (16 - length $var),'= ',
+                (ref $config{$var} eq 'ARRAY'
+                 ? join(' ', @{$config{$var}})
+                 : $prefix.$config{$var}),
+                "\n"
+                if defined $config{$var};
+        }
+
+        my @buildfile = ($config{builddir}, $config{build_file});
+        unshift @buildfile, $here
+            unless file_name_is_absolute($config{builddir});
+        my $buildfile = canonpath(catdir(@buildfile));
+        print <<"_____";
+
+NOTE: These variables only represent the configuration view.  The build file
+template may have processed these variables further, please have a look at the
+build file for more exact data:
+    $buildfile
+_____
+    }
+    if ($dump || $buildparams) {
+        my @buildfile = ($config{builddir}, $config{build_file});
+        unshift @buildfile, $here
+            unless file_name_is_absolute($config{builddir});
+        print "\nbuild file:\n\n";
+        print "    ", canonpath(catfile(@buildfile)),"\n";
+
+        print "\nbuild file templates:\n\n";
+        foreach (@{$config{build_file_templates}}) {
+            my @tmpl = ($_);
+            unshift @tmpl, $here
+                unless file_name_is_absolute($config{sourcedir});
+            print '    ',canonpath(catfile(@tmpl)),"\n";
+        }
+    }
+    if ($reconf) {
+        if ($verbose) {
+            print 'Reconfiguring with: ', join(' ',@{$config{perlargv}}), "\n";
+	    foreach (sort keys %{$config{perlenv}}) {
+	        print '    ',$_,' = ',($config{perlenv}->{$_} || ""),"\n";
+	    }
+        }
+
+        chdir $here;
+        exec $^X,catfile($config{sourcedir}, 'Configure'),'reconf';
+    }
+}
+
+1;
+
+__END__
+
+=head1 NAME
+
+configdata.pm - configuration data for OpenSSL builds
+
+=head1 SYNOPSIS
+
+Interactive:
+
+  perl configdata.pm [options]
+
+As data bank module:
+
+  use configdata;
+
+=head1 DESCRIPTION
+
+This module can be used in two modes, interactively and as a module containing
+all the data recorded by OpenSSL's Configure script.
+
+When used interactively, simply run it as any perl script, with at least one
+option, and you will get the information you ask for.  See L</OPTIONS> below.
+
+When loaded as a module, you get a few databanks with useful information to
+perform build related tasks.  The databanks are:
+
+    %config             Configured things.
+    %target             The OpenSSL config target with all inheritances
+                        resolved.
+    %disabled           The features that are disabled.
+    @disablables        The list of features that can be disabled.
+    %withargs           All data given through --with-THING options.
+    %unified_info       All information that was computed from the build.info
+                        files.
+
+=head1 OPTIONS
+
+=over 4
+
+=item B<--help>
+
+Print a brief help message and exit.
+
+=item B<--man>
+
+Print the manual page and exit.
+
+=item B<--dump> | B<-d>
+
+Print all relevant configuration data.  This is equivalent to B<--command-line>
+B<--options> B<--target> B<--environment> B<--make-variables>
+B<--build-parameters>.
+
+=item B<--command-line> | B<-c>
+
+Print the current configuration command line.
+
+=item B<--options> | B<-o>
+
+Print the features, both enabled and disabled, and display defined macro and
+skipped directories where applicable.
+
+=item B<--target> | B<-t>
+
+Print the config attributes for this config target.
+
+=item B<--environment> | B<-e>
+
+Print the environment variables and their values at the time of configuration.
+
+=item B<--make-variables> | B<-m>
+
+Print the main make variables generated in the current configuration
+
+=item B<--build-parameters> | B<-b>
+
+Print the build parameters, i.e. build file and build file templates.
+
+=item B<--reconfigure> | B<--reconf> | B<-r>
+
+Redo the configuration.
+
+=item B<--verbose> | B<-v>
+
+Verbose output.
+
+=back
+
+=cut
+
+EOF
+close(OUT);
+if ($builder_platform eq 'unix') {
+    my $mode = (0755 & ~umask);
+    chmod $mode, 'configdata.pm'
+        or warn sprintf("WARNING: Couldn't change mode for 'configdata.pm' to 0%03o: %s\n",$mode,$!);
+}
+
+my %builders = (
+    unified => sub {
+        print 'Creating ',$target{build_file},"\n";
+        run_dofile(catfile($blddir, $target{build_file}),
+                   @{$config{build_file_templates}});
+    },
+    );
+
+$builders{$builder}->($builder_platform, @builder_opts);
+
+$SIG{__DIE__} = $orig_death_handler;
+
+print <<"EOF" if ($disabled{threads} eq "unavailable");
+
+The library could not be configured for supporting multi-threaded
+applications as the compiler options required on this system are not known.
+See file INSTALL for details if you need multi-threading.
+EOF
+
+print <<"EOF" if ($no_shared_warn);
+
+The options 'shared', 'pic' and 'dynamic-engine' aren't supported on this
+platform, so we will pretend you gave the option 'no-pic', which also disables
+'shared' and 'dynamic-engine'.  If you know how to implement shared libraries
+or position independent code, please let us know (but please first make sure
+you have tried with a current version of OpenSSL).
+EOF
+
+print <<"EOF";
+
+**********************************************************************
+***                                                                ***
+***   OpenSSL has been successfully configured                     ***
+***                                                                ***
+***   If you encounter a problem while building, please open an    ***
+***   issue on GitHub <https://github.com/openssl/openssl/issues>  ***
+***   and include the output from the following command:           ***
+***                                                                ***
+***       perl configdata.pm --dump                                ***
+***                                                                ***
+***   (If you are new to OpenSSL, you might want to consult the    ***
+***   'Troubleshooting' section in the INSTALL file first)         ***
+***                                                                ***
+**********************************************************************
+EOF
+
+exit(0);
+
+######################################################################
+#
+# Helpers and utility functions
+#
+
+# Death handler, to print a helpful message in case of failure #######
+#
+sub death_handler {
+    die @_ if $^S;              # To prevent the added message in eval blocks
+    my $build_file = $target{build_file} // "build file";
+    my @message = ( <<"_____", @_ );
+
+Failure!  $build_file wasn't produced.
+Please read INSTALL and associated NOTES files.  You may also have to look over
+your available compiler tool chain or change your configuration.
+
+_____
+
+    # Dying is terminal, so it's ok to reset the signal handler here.
+    $SIG{__DIE__} = $orig_death_handler;
+    die @message;
+}
+
+# Configuration file reading #########################################
+
+# Note: All of the helper functions are for lazy evaluation.  They all
+# return a CODE ref, which will return the intended value when evaluated.
+# Thus, whenever there's mention of a returned value, it's about that
+# intended value.
+
+# Helper function to implement conditional inheritance depending on the
+# value of $disabled{asm}.  Used in inherit_from values as follows:
+#
+#      inherit_from => [ "template", asm("asm_tmpl") ]
+#
+sub asm {
+    my @x = @_;
+    sub {
+	$disabled{asm} ? () : @x;
+    }
+}
+
+# Helper function to implement conditional value variants, with a default
+# plus additional values based on the value of $config{build_type}.
+# Arguments are given in hash table form:
+#
+#       picker(default => "Basic string: ",
+#              debug   => "debug",
+#              release => "release")
+#
+# When configuring with --debug, the resulting string will be
+# "Basic string: debug", and when not, it will be "Basic string: release"
+#
+# This can be used to create variants of sets of flags according to the
+# build type:
+#
+#       cflags => picker(default => "-Wall",
+#                        debug   => "-g -O0",
+#                        release => "-O3")
+#
+sub picker {
+    my %opts = @_;
+    return sub { add($opts{default} || (),
+                     $opts{$config{build_type}} || ())->(); }
+}
+
+# Helper function to combine several values of different types into one.
+# This is useful if you want to combine a string with the result of a
+# lazy function, such as:
+#
+#       cflags => combine("-Wall", sub { $disabled{zlib} ? () : "-DZLIB" })
+#
+sub combine {
+    my @stuff = @_;
+    return sub { add(@stuff)->(); }
+}
+
+# Helper function to implement conditional values depending on the value
+# of $disabled{threads}.  Can be used as follows:
+#
+#       cflags => combine("-Wall", threads("-pthread"))
+#
+sub threads {
+    my @flags = @_;
+    return sub { add($disabled{threads} ? () : @flags)->(); }
+}
+
+sub shared {
+    my @flags = @_;
+    return sub { add($disabled{shared} ? () : @flags)->(); }
+}
+
+our $add_called = 0;
+# Helper function to implement adding values to already existing configuration
+# values.  It handles elements that are ARRAYs, CODEs and scalars
+sub _add {
+    my $separator = shift;
+
+    # If there's any ARRAY in the collection of values OR the separator
+    # is undef, we will return an ARRAY of combined values, otherwise a
+    # string of joined values with $separator as the separator.
+    my $found_array = !defined($separator);
+
+    my @values =
+	map {
+	    my $res = $_;
+	    while (ref($res) eq "CODE") {
+		$res = $res->();
+	    }
+	    if (defined($res)) {
+		if (ref($res) eq "ARRAY") {
+		    $found_array = 1;
+		    @$res;
+		} else {
+		    $res;
+		}
+	    } else {
+		();
+	    }
+    } (@_);
+
+    $add_called = 1;
+
+    if ($found_array) {
+	[ @values ];
+    } else {
+	join($separator, grep { defined($_) && $_ ne "" } @values);
+    }
+}
+sub add_before {
+    my $separator = " ";
+    if (ref($_[$#_]) eq "HASH") {
+        my $opts = pop;
+        $separator = $opts->{separator};
+    }
+    my @x = @_;
+    sub { _add($separator, @x, @_) };
+}
+sub add {
+    my $separator = " ";
+    if (ref($_[$#_]) eq "HASH") {
+        my $opts = pop;
+        $separator = $opts->{separator};
+    }
+    my @x = @_;
+    sub { _add($separator, @_, @x) };
+}
+
+sub read_eval_file {
+    my $fname = shift;
+    my $content;
+    my @result;
+
+    open F, "< $fname" or die "Can't open '$fname': $!\n";
+    {
+        undef local $/;
+        $content = <F>;
+    }
+    close F;
+    {
+        local $@;
+
+        @result = ( eval $content );
+        warn $@ if $@;
+    }
+    return wantarray ? @result : $result[0];
+}
+
+# configuration reader, evaluates the input file as a perl script and expects
+# it to fill %targets with target configurations.  Those are then added to
+# %table.
+sub read_config {
+    my $fname = shift;
+    my %targets;
+
+    {
+	# Protect certain tables from tampering
+	local %table = ();
+
+	%targets = read_eval_file($fname);
+    }
+    my %preexisting = ();
+    foreach (sort keys %targets) {
+        $preexisting{$_} = 1 if $table{$_};
+    }
+    die <<"EOF",
+The following config targets from $fname
+shadow pre-existing config targets with the same name:
+EOF
+        map { "  $_\n" } sort keys %preexisting
+        if %preexisting;
+
+
+    # For each target, check that it's configured with a hash table.
+    foreach (keys %targets) {
+	if (ref($targets{$_}) ne "HASH") {
+	    if (ref($targets{$_}) eq "") {
+		warn "Deprecated target configuration for $_, ignoring...\n";
+	    } else {
+		warn "Misconfigured target configuration for $_ (should be a hash table), ignoring...\n";
+	    }
+	    delete $targets{$_};
+	} else {
+            $targets{$_}->{_conf_fname_int} = add([ $fname ]);
+        }
+    }
+
+    %table = (%table, %targets);
+
+}
+
+# configuration resolver.  Will only resolve all the lazy evaluation
+# codeblocks for the chosen target and all those it inherits from,
+# recursively
+sub resolve_config {
+    my $target = shift;
+    my @breadcrumbs = @_;
+
+#    my $extra_checks = defined($ENV{CONFIGURE_EXTRA_CHECKS});
+
+    if (grep { $_ eq $target } @breadcrumbs) {
+	die "inherit_from loop!  target backtrace:\n  "
+	    ,$target,"\n  ",join("\n  ", @breadcrumbs),"\n";
+    }
+
+    if (!defined($table{$target})) {
+	warn "Warning! target $target doesn't exist!\n";
+	return ();
+    }
+    # Recurse through all inheritances.  They will be resolved on the
+    # fly, so when this operation is done, they will all just be a
+    # bunch of attributes with string values.
+    # What we get here, though, are keys with references to lists of
+    # the combined values of them all.  We will deal with lists after
+    # this stage is done.
+    my %combined_inheritance = ();
+    if ($table{$target}->{inherit_from}) {
+	my @inherit_from =
+	    map { ref($_) eq "CODE" ? $_->() : $_ } @{$table{$target}->{inherit_from}};
+	foreach (@inherit_from) {
+	    my %inherited_config = resolve_config($_, $target, @breadcrumbs);
+
+	    # 'template' is a marker that's considered private to
+	    # the config that had it.
+	    delete $inherited_config{template};
+
+	    foreach (keys %inherited_config) {
+		if (!$combined_inheritance{$_}) {
+		    $combined_inheritance{$_} = [];
+		}
+		push @{$combined_inheritance{$_}}, $inherited_config{$_};
+	    }
+	}
+    }
+
+    # We won't need inherit_from in this target any more, since we've
+    # resolved all the inheritances that lead to this
+    delete $table{$target}->{inherit_from};
+
+    # Now is the time to deal with those lists.  Here's the place to
+    # decide what shall be done with those lists, all based on the
+    # values of the target we're currently dealing with.
+    # - If a value is a coderef, it will be executed with the list of
+    #   inherited values as arguments.
+    # - If the corresponding key doesn't have a value at all or is the
+    #   empty string, the inherited value list will be run through the
+    #   default combiner (below), and the result becomes this target's
+    #   value.
+    # - Otherwise, this target's value is assumed to be a string that
+    #   will simply override the inherited list of values.
+    my $default_combiner = add();
+
+    my %all_keys =
+	map { $_ => 1 } (keys %combined_inheritance,
+			 keys %{$table{$target}});
+
+    sub process_values {
+	my $object    = shift;
+	my $inherited = shift;  # Always a [ list ]
+	my $target    = shift;
+	my $entry     = shift;
+
+        $add_called = 0;
+
+        while(ref($object) eq "CODE") {
+            $object = $object->(@$inherited);
+        }
+        if (!defined($object)) {
+            return ();
+        }
+        elsif (ref($object) eq "ARRAY") {
+            local $add_called;  # To make sure recursive calls don't affect it
+            return [ map { process_values($_, $inherited, $target, $entry) }
+                     @$object ];
+        } elsif (ref($object) eq "") {
+            return $object;
+        } else {
+            die "cannot handle reference type ",ref($object)
+                ," found in target ",$target," -> ",$entry,"\n";
+        }
+    }
+
+    foreach (sort keys %all_keys) {
+        my $previous = $combined_inheritance{$_};
+
+	# Current target doesn't have a value for the current key?
+	# Assign it the default combiner, the rest of this loop body
+	# will handle it just like any other coderef.
+	if (!exists $table{$target}->{$_}) {
+	    $table{$target}->{$_} = $default_combiner;
+	}
+
+	$table{$target}->{$_} = process_values($table{$target}->{$_},
+					       $combined_inheritance{$_},
+					       $target, $_);
+        unless(defined($table{$target}->{$_})) {
+            delete $table{$target}->{$_};
+        }
+#        if ($extra_checks &&
+#            $previous && !($add_called ||  $previous ~~ $table{$target}->{$_})) {
+#            warn "$_ got replaced in $target\n";
+#        }
+    }
+
+    # Finally done, return the result.
+    return %{$table{$target}};
+}
+
+sub usage
+	{
+	print STDERR $usage;
+	print STDERR "\npick os/compiler from:\n";
+	my $j=0;
+	my $i;
+        my $k=0;
+	foreach $i (sort keys %table)
+		{
+		next if $table{$i}->{template};
+		next if $i =~ /^debug/;
+		$k += length($i) + 1;
+		if ($k > 78)
+			{
+			print STDERR "\n";
+			$k=length($i);
+			}
+		print STDERR $i . " ";
+		}
+	foreach $i (sort keys %table)
+		{
+		next if $table{$i}->{template};
+		next if $i !~ /^debug/;
+		$k += length($i) + 1;
+		if ($k > 78)
+			{
+			print STDERR "\n";
+			$k=length($i);
+			}
+		print STDERR $i . " ";
+		}
+	print STDERR "\n\nNOTE: If in doubt, on Unix-ish systems use './config'.\n";
+	exit(1);
+	}
+
+sub run_dofile
+{
+    my $out = shift;
+    my @templates = @_;
+
+    unlink $out || warn "Can't remove $out, $!"
+        if -f $out;
+    foreach (@templates) {
+        die "Can't open $_, $!" unless -f $_;
+    }
+    my $perlcmd = (quotify("maybeshell", $config{PERL}))[0];
+    my $cmd = "$perlcmd \"-I.\" \"-Mconfigdata\" \"$dofile\" -o\"Configure\" \"".join("\" \"",@templates)."\" > \"$out.new\"";
+    #print STDERR "DEBUG[run_dofile]: \$cmd = $cmd\n";
+    system($cmd);
+    exit 1 if $? != 0;
+    rename("$out.new", $out) || die "Can't rename $out.new, $!";
+}
+
+sub compiler_predefined {
+    state %predefined;
+    my $cc = shift;
+
+    return () if $^O eq 'VMS';
+
+    die 'compiler_predefined called without a compiler command'
+        unless $cc;
+
+    if (! $predefined{$cc}) {
+
+        $predefined{$cc} = {};
+
+        # collect compiler pre-defines from gcc or gcc-alike...
+        open(PIPE, "$cc -dM -E -x c /dev/null 2>&1 |");
+        while (my $l = <PIPE>) {
+            $l =~ m/^#define\s+(\w+(?:\(\w+\))?)(?:\s+(.+))?/ or last;
+            $predefined{$cc}->{$1} = $2 // '';
+        }
+        close(PIPE);
+    }
+
+    return %{$predefined{$cc}};
+}
+
+sub which
+{
+    my ($name)=@_;
+
+    if (eval { require IPC::Cmd; 1; }) {
+        IPC::Cmd->import();
+        return scalar IPC::Cmd::can_run($name);
+    } else {
+        # if there is $directories component in splitpath,
+        # then it's not something to test with $PATH...
+        return $name if (File::Spec->splitpath($name))[1];
+
+        foreach (File::Spec->path()) {
+            my $fullpath = catfile($_, "$name$target{exe_extension}");
+            if (-f $fullpath and -x $fullpath) {
+                return $fullpath;
+            }
+        }
+    }
+}
+
+sub env
+{
+    my $name = shift;
+    my %opts = @_;
+
+    unless ($opts{cacheonly}) {
+        # Note that if $ENV{$name} doesn't exist or is undefined,
+        # $config{perlenv}->{$name} will be created with the value
+        # undef.  This is intentional.
+
+        $config{perlenv}->{$name} = $ENV{$name}
+            if ! exists $config{perlenv}->{$name};
+    }
+    return $config{perlenv}->{$name};
+}
+
+# Configuration printer ##############################################
+
+sub print_table_entry
+{
+    local $now_printing = shift;
+    my %target = resolve_config($now_printing);
+    my $type = shift;
+
+    # Don't print the templates
+    return if $target{template};
+
+    my @sequence = (
+	"sys_id",
+	"cpp",
+	"cppflags",
+	"defines",
+	"includes",
+	"cc",
+	"cflags",
+	"unistd",
+	"ld",
+	"lflags",
+	"loutflag",
+	"ex_libs",
+	"bn_ops",
+	"apps_aux_src",
+	"cpuid_asm_src",
+	"uplink_aux_src",
+	"bn_asm_src",
+	"ec_asm_src",
+	"des_asm_src",
+	"aes_asm_src",
+	"bf_asm_src",
+	"md5_asm_src",
+	"cast_asm_src",
+	"sha1_asm_src",
+	"rc4_asm_src",
+	"rmd160_asm_src",
+	"rc5_asm_src",
+	"wp_asm_src",
+	"cmll_asm_src",
+	"modes_asm_src",
+	"padlock_asm_src",
+	"chacha_asm_src",
+	"poly1035_asm_src",
+	"thread_scheme",
+	"perlasm_scheme",
+	"dso_scheme",
+	"shared_target",
+	"shared_cflag",
+	"shared_defines",
+	"shared_ldflag",
+	"shared_rcflag",
+	"shared_extension",
+	"dso_extension",
+	"obj_extension",
+	"exe_extension",
+	"ranlib",
+	"ar",
+	"arflags",
+	"aroutflag",
+	"rc",
+	"rcflags",
+	"rcoutflag",
+	"mt",
+	"mtflags",
+	"mtinflag",
+	"mtoutflag",
+	"multilib",
+	"build_scheme",
+	);
+
+    if ($type eq "TABLE") {
+	print "\n";
+	print "*** $now_printing\n";
+        foreach (@sequence) {
+            if (ref($target{$_}) eq "ARRAY") {
+                printf "\$%-12s = %s\n", $_, join(" ", @{$target{$_}});
+            } else {
+                printf "\$%-12s = %s\n", $_, $target{$_};
+            }
+        }
+    } elsif ($type eq "HASH") {
+	my $largest =
+	    length((sort { length($a) <=> length($b) } @sequence)[-1]);
+	print "    '$now_printing' => {\n";
+	foreach (@sequence) {
+	    if ($target{$_}) {
+                if (ref($target{$_}) eq "ARRAY") {
+                    print "      '",$_,"'"," " x ($largest - length($_))," => [ ",join(", ", map { "'$_'" } @{$target{$_}})," ],\n";
+                } else {
+                    print "      '",$_,"'"," " x ($largest - length($_))," => '",$target{$_},"',\n";
+                }
+	    }
+	}
+	print "    },\n";
+    }
+}
+
+# Utility routines ###################################################
+
+# On VMS, if the given file is a logical name, File::Spec::Functions
+# will consider it an absolute path.  There are cases when we want a
+# purely syntactic check without checking the environment.
+sub isabsolute {
+    my $file = shift;
+
+    # On non-platforms, we just use file_name_is_absolute().
+    return file_name_is_absolute($file) unless $^O eq "VMS";
+
+    # If the file spec includes a device or a directory spec,
+    # file_name_is_absolute() is perfectly safe.
+    return file_name_is_absolute($file) if $file =~ m|[:\[]|;
+
+    # Here, we know the given file spec isn't absolute
+    return 0;
+}
+
+# Makes a directory absolute and cleans out /../ in paths like foo/../bar
+# On some platforms, this uses rel2abs(), while on others, realpath() is used.
+# realpath() requires that at least all path components except the last is an
+# existing directory.  On VMS, the last component of the directory spec must
+# exist.
+sub absolutedir {
+    my $dir = shift;
+
+    # realpath() is quite buggy on VMS.  It uses LIB$FID_TO_NAME, which
+    # will return the volume name for the device, no matter what.  Also,
+    # it will return an incorrect directory spec if the argument is a
+    # directory that doesn't exist.
+    if ($^O eq "VMS") {
+        return rel2abs($dir);
+    }
+
+    # We use realpath() on Unix, since no other will properly clean out
+    # a directory spec.
+    use Cwd qw/realpath/;
+
+    return realpath($dir);
+}
+
+sub quotify {
+    my %processors = (
+	perl    => sub { my $x = shift;
+			 $x =~ s/([\\\$\@"])/\\$1/g;
+			 return '"'.$x.'"'; },
+	maybeshell => sub { my $x = shift;
+			    (my $y = $x) =~ s/([\\\"])/\\$1/g;
+			    if ($x ne $y || $x =~ m|\s|) {
+				return '"'.$y.'"';
+			    } else {
+				return $x;
+			    }
+			},
+	);
+    my $for = shift;
+    my $processor =
+	defined($processors{$for}) ? $processors{$for} : sub { shift; };
+
+    return map { $processor->($_); } @_;
+}
+
+# collect_from_file($filename, $line_concat_cond_re, $line_concat)
+# $filename is a file name to read from
+# $line_concat_cond_re is a regexp detecting a line continuation ending
+# $line_concat is a CODEref that takes care of concatenating two lines
+sub collect_from_file {
+    my $filename = shift;
+    my $line_concat_cond_re = shift;
+    my $line_concat = shift;
+
+    open my $fh, $filename || die "unable to read $filename: $!\n";
+    return sub {
+        my $saved_line = "";
+        $_ = "";
+        while (<$fh>) {
+            s|\R$||;
+            if (defined $line_concat) {
+                $_ = $line_concat->($saved_line, $_);
+                $saved_line = "";
+            }
+            if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
+                $saved_line = $_;
+                next;
+            }
+            return $_;
+        }
+        die "$filename ending with continuation line\n" if $_;
+        close $fh;
+        return undef;
+    }
+}
+
+# collect_from_array($array, $line_concat_cond_re, $line_concat)
+# $array is an ARRAYref of lines
+# $line_concat_cond_re is a regexp detecting a line continuation ending
+# $line_concat is a CODEref that takes care of concatenating two lines
+sub collect_from_array {
+    my $array = shift;
+    my $line_concat_cond_re = shift;
+    my $line_concat = shift;
+    my @array = (@$array);
+
+    return sub {
+        my $saved_line = "";
+        $_ = "";
+        while (defined($_ = shift @array)) {
+            s|\R$||;
+            if (defined $line_concat) {
+                $_ = $line_concat->($saved_line, $_);
+                $saved_line = "";
+            }
+            if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
+                $saved_line = $_;
+                next;
+            }
+            return $_;
+        }
+        die "input text ending with continuation line\n" if $_;
+        return undef;
+    }
+}
+
+# collect_information($lineiterator, $line_continue, $regexp => $CODEref, ...)
+# $lineiterator is a CODEref that delivers one line at a time.
+# All following arguments are regex/CODEref pairs, where the regexp detects a
+# line and the CODEref does something with the result of the regexp.
+sub collect_information {
+    my $lineiterator = shift;
+    my %collectors = @_;
+
+    while(defined($_ = $lineiterator->())) {
+        s|\R$||;
+        my $found = 0;
+        if ($collectors{"BEFORE"}) {
+            $collectors{"BEFORE"}->($_);
+        }
+        foreach my $re (keys %collectors) {
+            if ($re !~ /^OTHERWISE|BEFORE|AFTER$/ && /$re/) {
+                $collectors{$re}->($lineiterator);
+                $found = 1;
+            };
+        }
+        if ($collectors{"OTHERWISE"}) {
+            $collectors{"OTHERWISE"}->($lineiterator, $_)
+                unless $found || !defined $collectors{"OTHERWISE"};
+        }
+        if ($collectors{"AFTER"}) {
+            $collectors{"AFTER"}->($_);
+        }
+    }
+}
+
+# tokenize($line)
+# $line is a line of text to split up into tokens
+# returns a list of tokens
+#
+# Tokens are divided by spaces.  If the tokens include spaces, they
+# have to be quoted with single or double quotes.  Double quotes
+# inside a double quoted token must be escaped.  Escaping is done
+# with backslash.
+# Basically, the same quoting rules apply for " and ' as in any
+# Unix shell.
+sub tokenize {
+    my $line = my $debug_line = shift;
+    my @result = ();
+
+    while ($line =~ s|^\s+||, $line ne "") {
+        my $token = "";
+        while ($line ne "" && $line !~ m|^\s|) {
+            if ($line =~ m/^"((?:[^"\\]+|\\.)*)"/) {
+                $token .= $1;
+                $line = $';
+            } elsif ($line =~ m/^'([^']*)'/) {
+                $token .= $1;
+                $line = $';
+            } elsif ($line =~ m/^(\S+)/) {
+                $token .= $1;
+                $line = $';
+            }
+        }
+        push @result, $token;
+    }
+
+    if ($ENV{CONFIGURE_DEBUG_TOKENIZE}) {
+	print STDERR "DEBUG[tokenize]: Parsed '$debug_line' into:\n";
+	print STDERR "DEBUG[tokenize]: ('", join("', '", @result), "')\n";
+    }
+    return @result;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/LICENSE b/trunk/3rdparty/openssl-1.1-fit/LICENSE
new file mode 100644
index 000000000..9601ab435
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/LICENSE
@@ -0,0 +1,125 @@
+
+  LICENSE ISSUES
+  ==============
+
+  The OpenSSL toolkit stays under a double license, i.e. both the conditions of
+  the OpenSSL License and the original SSLeay license apply to the toolkit.
+  See below for the actual license texts.
+
+  OpenSSL License
+  ---------------
+
+/* ====================================================================
+ * Copyright (c) 1998-2019 The OpenSSL Project.  All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ *
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in
+ *    the documentation and/or other materials provided with the
+ *    distribution.
+ *
+ * 3. All advertising materials mentioning features or use of this
+ *    software must display the following acknowledgment:
+ *    "This product includes software developed by the OpenSSL Project
+ *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
+ *
+ * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
+ *    endorse or promote products derived from this software without
+ *    prior written permission. For written permission, please contact
+ *    openssl-core@openssl.org.
+ *
+ * 5. Products derived from this software may not be called "OpenSSL"
+ *    nor may "OpenSSL" appear in their names without prior written
+ *    permission of the OpenSSL Project.
+ *
+ * 6. Redistributions of any form whatsoever must retain the following
+ *    acknowledgment:
+ *    "This product includes software developed by the OpenSSL Project
+ *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
+ * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+ * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
+ * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+ * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ * ====================================================================
+ *
+ * This product includes cryptographic software written by Eric Young
+ * (eay@cryptsoft.com).  This product includes software written by Tim
+ * Hudson (tjh@cryptsoft.com).
+ *
+ */
+
+ Original SSLeay License
+ -----------------------
+
+/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
+ * All rights reserved.
+ *
+ * This package is an SSL implementation written
+ * by Eric Young (eay@cryptsoft.com).
+ * The implementation was written so as to conform with Netscapes SSL.
+ *
+ * This library is free for commercial and non-commercial use as long as
+ * the following conditions are aheared to.  The following conditions
+ * apply to all code found in this distribution, be it the RC4, RSA,
+ * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
+ * included with this distribution is covered by the same copyright terms
+ * except that the holder is Tim Hudson (tjh@cryptsoft.com).
+ *
+ * Copyright remains Eric Young's, and as such any Copyright notices in
+ * the code are not to be removed.
+ * If this package is used in a product, Eric Young should be given attribution
+ * as the author of the parts of the library used.
+ * This can be in the form of a textual message at program startup or
+ * in documentation (online or textual) provided with the package.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. All advertising materials mentioning features or use of this software
+ *    must display the following acknowledgement:
+ *    "This product includes cryptographic software written by
+ *     Eric Young (eay@cryptsoft.com)"
+ *    The word 'cryptographic' can be left out if the rouines from the library
+ *    being used are not cryptographic related :-).
+ * 4. If you include any Windows specific code (or a derivative thereof) from
+ *    the apps directory (application code) you must include an acknowledgement:
+ *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
+ *
+ * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ * The licence and distribution terms for any publically available version or
+ * derivative of this code cannot be changed.  i.e. this code cannot simply be
+ * copied and put under another distribution licence
+ * [including the GNU Public Licence.]
+ */
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/README.md b/trunk/3rdparty/openssl-1.1-fit/README.md
new file mode 100644
index 000000000..d7c5dbc2f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/README.md
@@ -0,0 +1,3 @@
+
+For openssl-1.1.1b.tar.gz
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/CA.pl.in b/trunk/3rdparty/openssl-1.1-fit/apps/CA.pl.in
new file mode 100644
index 000000000..db3cc3831
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/CA.pl.in
@@ -0,0 +1,214 @@
+#!{- $config{HASHBANGPERL} -}
+# Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# Wrapper around the ca to make it easier to use
+#
+# {- join("\n# ", @autowarntext) -}
+
+use strict;
+use warnings;
+
+my $openssl = "openssl";
+if(defined $ENV{'OPENSSL'}) {
+    $openssl = $ENV{'OPENSSL'};
+} else {
+    $ENV{'OPENSSL'} = $openssl;
+}
+
+my $verbose = 1;
+
+my $OPENSSL_CONFIG = $ENV{"OPENSSL_CONFIG"} || "";
+my $DAYS = "-days 365";
+my $CADAYS = "-days 1095";	# 3 years
+my $REQ = "$openssl req $OPENSSL_CONFIG";
+my $CA = "$openssl ca $OPENSSL_CONFIG";
+my $VERIFY = "$openssl verify";
+my $X509 = "$openssl x509";
+my $PKCS12 = "$openssl pkcs12";
+
+# default openssl.cnf file has setup as per the following
+my $CATOP = "./demoCA";
+my $CAKEY = "cakey.pem";
+my $CAREQ = "careq.pem";
+my $CACERT = "cacert.pem";
+my $CACRL = "crl.pem";
+my $DIRMODE = 0777;
+
+my $NEWKEY = "newkey.pem";
+my $NEWREQ = "newreq.pem";
+my $NEWCERT = "newcert.pem";
+my $NEWP12 = "newcert.p12";
+my $RET = 0;
+my $WHAT = shift @ARGV || "";
+my @OPENSSL_CMDS = ("req", "ca", "pkcs12", "x509", "verify");
+my %EXTRA = extra_args(\@ARGV, "-extra-");
+my $FILE;
+
+sub extra_args {
+    my ($args_ref, $arg_prefix) = @_;
+    my %eargs = map {
+	if ($_ < $#$args_ref) {
+	    my ($arg, $value) = splice(@$args_ref, $_, 2);
+	    $arg =~ s/$arg_prefix//;
+	    ($arg, $value);
+	} else {
+	    ();
+	}
+    } reverse grep($$args_ref[$_] =~ /$arg_prefix/, 0..$#$args_ref);
+    my %empty = map { ($_, "") } @OPENSSL_CMDS;
+    return (%empty, %eargs);
+}
+
+# See if reason for a CRL entry is valid; exit if not.
+sub crl_reason_ok
+{
+    my $r = shift;
+
+    if ($r eq 'unspecified' || $r eq 'keyCompromise'
+        || $r eq 'CACompromise' || $r eq 'affiliationChanged'
+        || $r eq 'superseded' || $r eq 'cessationOfOperation'
+        || $r eq 'certificateHold' || $r eq 'removeFromCRL') {
+        return 1;
+    }
+    print STDERR "Invalid CRL reason; must be one of:\n";
+    print STDERR "    unspecified, keyCompromise, CACompromise,\n";
+    print STDERR "    affiliationChanged, superseded, cessationOfOperation\n";
+    print STDERR "    certificateHold, removeFromCRL";
+    exit 1;
+}
+
+# Copy a PEM-format file; return like exit status (zero means ok)
+sub copy_pemfile
+{
+    my ($infile, $outfile, $bound) = @_;
+    my $found = 0;
+
+    open IN, $infile || die "Cannot open $infile, $!";
+    open OUT, ">$outfile" || die "Cannot write to $outfile, $!";
+    while (<IN>) {
+        $found = 1 if /^-----BEGIN.*$bound/;
+        print OUT $_ if $found;
+        $found = 2, last if /^-----END.*$bound/;
+    }
+    close IN;
+    close OUT;
+    return $found == 2 ? 0 : 1;
+}
+
+# Wrapper around system; useful for debugging.  Returns just the exit status
+sub run
+{
+    my $cmd = shift;
+    print "====\n$cmd\n" if $verbose;
+    my $status = system($cmd);
+    print "==> $status\n====\n" if $verbose;
+    return $status >> 8;
+}
+
+
+if ( $WHAT =~ /^(-\?|-h|-help)$/ ) {
+    print STDERR "usage: CA.pl -newcert | -newreq | -newreq-nodes | -xsign | -sign | -signCA | -signcert | -crl | -newca [-extra-cmd extra-params]\n";
+    print STDERR "       CA.pl -pkcs12 [-extra-pkcs12 extra-params] [certname]\n";
+    print STDERR "       CA.pl -verify [-extra-verify extra-params] certfile ...\n";
+    print STDERR "       CA.pl -revoke [-extra-ca extra-params] certfile [reason]\n";
+    exit 0;
+}
+if ($WHAT eq '-newcert' ) {
+    # create a certificate
+    $RET = run("$REQ -new -x509 -keyout $NEWKEY -out $NEWCERT $DAYS $EXTRA{req}");
+    print "Cert is in $NEWCERT, private key is in $NEWKEY\n" if $RET == 0;
+} elsif ($WHAT eq '-precert' ) {
+    # create a pre-certificate
+    $RET = run("$REQ -x509 -precert -keyout $NEWKEY -out $NEWCERT $DAYS");
+    print "Pre-cert is in $NEWCERT, private key is in $NEWKEY\n" if $RET == 0;
+} elsif ($WHAT =~ /^\-newreq(\-nodes)?$/ ) {
+    # create a certificate request
+    $RET = run("$REQ -new $1 -keyout $NEWKEY -out $NEWREQ $DAYS $EXTRA{req}");
+    print "Request is in $NEWREQ, private key is in $NEWKEY\n" if $RET == 0;
+} elsif ($WHAT eq '-newca' ) {
+    # create the directory hierarchy
+    mkdir ${CATOP}, $DIRMODE;
+    mkdir "${CATOP}/certs", $DIRMODE;
+    mkdir "${CATOP}/crl", $DIRMODE ;
+    mkdir "${CATOP}/newcerts", $DIRMODE;
+    mkdir "${CATOP}/private", $DIRMODE;
+    open OUT, ">${CATOP}/index.txt";
+    close OUT;
+    open OUT, ">${CATOP}/crlnumber";
+    print OUT "01\n";
+    close OUT;
+    # ask user for existing CA certificate
+    print "CA certificate filename (or enter to create)\n";
+    $FILE = "" unless defined($FILE = <STDIN>);
+    $FILE =~ s{\R$}{};
+    if ($FILE ne "") {
+        copy_pemfile($FILE,"${CATOP}/private/$CAKEY", "PRIVATE");
+        copy_pemfile($FILE,"${CATOP}/$CACERT", "CERTIFICATE");
+    } else {
+        print "Making CA certificate ...\n";
+        $RET = run("$REQ -new -keyout"
+                . " ${CATOP}/private/$CAKEY"
+                . " -out ${CATOP}/$CAREQ $EXTRA{req}");
+        $RET = run("$CA -create_serial"
+                . " -out ${CATOP}/$CACERT $CADAYS -batch"
+                . " -keyfile ${CATOP}/private/$CAKEY -selfsign"
+                . " -extensions v3_ca $EXTRA{ca}"
+                . " -infiles ${CATOP}/$CAREQ") if $RET == 0;
+        print "CA certificate is in ${CATOP}/$CACERT\n" if $RET == 0;
+    }
+} elsif ($WHAT eq '-pkcs12' ) {
+    my $cname = $ARGV[0];
+    $cname = "My Certificate" unless defined $cname;
+    $RET = run("$PKCS12 -in $NEWCERT -inkey $NEWKEY"
+            . " -certfile ${CATOP}/$CACERT"
+            . " -out $NEWP12"
+            . " -export -name \"$cname\" $EXTRA{pkcs12}");
+    print "PKCS #12 file is in $NEWP12\n" if $RET == 0;
+} elsif ($WHAT eq '-xsign' ) {
+    $RET = run("$CA -policy policy_anything $EXTRA{ca} -infiles $NEWREQ");
+} elsif ($WHAT eq '-sign' ) {
+    $RET = run("$CA -policy policy_anything -out $NEWCERT $EXTRA{ca} -infiles $NEWREQ");
+    print "Signed certificate is in $NEWCERT\n" if $RET == 0;
+} elsif ($WHAT eq '-signCA' ) {
+    $RET = run("$CA -policy policy_anything -out $NEWCERT"
+            . " -extensions v3_ca $EXTRA{ca} -infiles $NEWREQ");
+    print "Signed CA certificate is in $NEWCERT\n" if $RET == 0;
+} elsif ($WHAT eq '-signcert' ) {
+    $RET = run("$X509 -x509toreq -in $NEWREQ -signkey $NEWREQ"
+            . " -out tmp.pem $EXTRA{x509}");
+    $RET = run("$CA -policy policy_anything -out $NEWCERT"
+            . "$EXTRA{ca} -infiles tmp.pem") if $RET == 0;
+    print "Signed certificate is in $NEWCERT\n" if $RET == 0;
+} elsif ($WHAT eq '-verify' ) {
+    my @files = @ARGV ? @ARGV : ( $NEWCERT );
+    my $file;
+    foreach $file (@files) {
+        my $status = run("$VERIFY \"-CAfile\" ${CATOP}/$CACERT $file $EXTRA{verify}");
+        $RET = $status if $status != 0;
+    }
+} elsif ($WHAT eq '-crl' ) {
+    $RET = run("$CA -gencrl -out ${CATOP}/crl/$CACRL $EXTRA{ca}");
+    print "Generated CRL is in ${CATOP}/crl/$CACRL\n" if $RET == 0;
+} elsif ($WHAT eq '-revoke' ) {
+    my $cname = $ARGV[0];
+    if (!defined $cname) {
+        print "Certificate filename is required; reason optional.\n";
+        exit 1;
+    }
+    my $reason = $ARGV[1];
+    $reason = " -crl_reason $reason"
+        if defined $reason && crl_reason_ok($reason);
+    $RET = run("$CA -revoke \"$cname\"" . $reason . $EXTRA{ca});
+} else {
+    print STDERR "Unknown arg \"$WHAT\"\n";
+    print STDERR "Use -help for help.\n";
+    exit 1;
+}
+
+exit $RET;
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/app_rand.c b/trunk/3rdparty/openssl-1.1-fit/apps/app_rand.c
new file mode 100644
index 000000000..2b0bbde03
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/app_rand.c
@@ -0,0 +1,93 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "apps.h"
+#include <openssl/bio.h>
+#include <openssl/err.h>
+#include <openssl/rand.h>
+#include <openssl/conf.h>
+
+static char *save_rand_file;
+
+void app_RAND_load_conf(CONF *c, const char *section)
+{
+    const char *randfile = NCONF_get_string(c, section, "RANDFILE");
+
+    if (randfile == NULL) {
+        ERR_clear_error();
+        return;
+    }
+    if (RAND_load_file(randfile, -1) < 0) {
+        BIO_printf(bio_err, "Can't load %s into RNG\n", randfile);
+        ERR_print_errors(bio_err);
+    }
+    if (save_rand_file == NULL)
+        save_rand_file = OPENSSL_strdup(randfile);
+}
+
+static int loadfiles(char *name)
+{
+    char *p;
+    int last, ret = 1;
+
+    for ( ; ; ) {
+        last = 0;
+        for (p = name; *p != '\0' && *p != LIST_SEPARATOR_CHAR; p++)
+            continue;
+        if (*p == '\0')
+            last = 1;
+        *p = '\0';
+        if (RAND_load_file(name, -1) < 0) {
+            BIO_printf(bio_err, "Can't load %s into RNG\n", name);
+            ERR_print_errors(bio_err);
+            ret = 0;
+        }
+        if (last)
+            break;
+        name = p + 1;
+        if (*name == '\0')
+            break;
+    }
+    return ret;
+}
+
+void app_RAND_write(void)
+{
+    if (save_rand_file == NULL)
+        return;
+    if (RAND_write_file(save_rand_file) == -1) {
+        BIO_printf(bio_err, "Cannot write random bytes:\n");
+        ERR_print_errors(bio_err);
+    }
+    OPENSSL_free(save_rand_file);
+    save_rand_file =  NULL;
+}
+
+
+/*
+ * See comments in opt_verify for explanation of this.
+ */
+enum r_range { OPT_R_ENUM };
+
+int opt_rand(int opt)
+{
+    switch ((enum r_range)opt) {
+    case OPT_R__FIRST:
+    case OPT_R__LAST:
+        break;
+    case OPT_R_RAND:
+        return loadfiles(opt_arg());
+        break;
+    case OPT_R_WRITERAND:
+        OPENSSL_free(save_rand_file);
+        save_rand_file = OPENSSL_strdup(opt_arg());
+        break;
+    }
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/apps.c b/trunk/3rdparty/openssl-1.1-fit/apps/apps.c
new file mode 100644
index 000000000..36cb0b278
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/apps.c
@@ -0,0 +1,2752 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#if !defined(_POSIX_C_SOURCE) && defined(OPENSSL_SYS_VMS)
+/*
+ * On VMS, you need to define this to get the declaration of fileno().  The
+ * value 2 is to make sure no function defined in POSIX-2 is left undefined.
+ */
+# define _POSIX_C_SOURCE 2
+#endif
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <sys/types.h>
+#ifndef OPENSSL_NO_POSIX_IO
+# include <sys/stat.h>
+# include <fcntl.h>
+#endif
+#include <ctype.h>
+#include <errno.h>
+#include <openssl/err.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/pem.h>
+#include <openssl/pkcs12.h>
+#include <openssl/ui.h>
+#include <openssl/safestack.h>
+#ifndef OPENSSL_NO_ENGINE
+# include <openssl/engine.h>
+#endif
+#ifndef OPENSSL_NO_RSA
+# include <openssl/rsa.h>
+#endif
+#include <openssl/bn.h>
+#include <openssl/ssl.h>
+#include "s_apps.h"
+#include "apps.h"
+
+#ifdef _WIN32
+static int WIN32_rename(const char *from, const char *to);
+# define rename(from,to) WIN32_rename((from),(to))
+#endif
+
+typedef struct {
+    const char *name;
+    unsigned long flag;
+    unsigned long mask;
+} NAME_EX_TBL;
+
+static UI_METHOD *ui_method = NULL;
+static const UI_METHOD *ui_fallback_method = NULL;
+
+static int set_table_opts(unsigned long *flags, const char *arg,
+                          const NAME_EX_TBL * in_tbl);
+static int set_multi_opts(unsigned long *flags, const char *arg,
+                          const NAME_EX_TBL * in_tbl);
+
+int app_init(long mesgwin);
+
+int chopup_args(ARGS *arg, char *buf)
+{
+    int quoted;
+    char c = '\0', *p = NULL;
+
+    arg->argc = 0;
+    if (arg->size == 0) {
+        arg->size = 20;
+        arg->argv = app_malloc(sizeof(*arg->argv) * arg->size, "argv space");
+    }
+
+    for (p = buf;;) {
+        /* Skip whitespace. */
+        while (*p && isspace(_UC(*p)))
+            p++;
+        if (!*p)
+            break;
+
+        /* The start of something good :-) */
+        if (arg->argc >= arg->size) {
+            char **tmp;
+            arg->size += 20;
+            tmp = OPENSSL_realloc(arg->argv, sizeof(*arg->argv) * arg->size);
+            if (tmp == NULL)
+                return 0;
+            arg->argv = tmp;
+        }
+        quoted = *p == '\'' || *p == '"';
+        if (quoted)
+            c = *p++;
+        arg->argv[arg->argc++] = p;
+
+        /* now look for the end of this */
+        if (quoted) {
+            while (*p && *p != c)
+                p++;
+            *p++ = '\0';
+        } else {
+            while (*p && !isspace(_UC(*p)))
+                p++;
+            if (*p)
+                *p++ = '\0';
+        }
+    }
+    arg->argv[arg->argc] = NULL;
+    return 1;
+}
+
+#ifndef APP_INIT
+int app_init(long mesgwin)
+{
+    return 1;
+}
+#endif
+
+int ctx_set_verify_locations(SSL_CTX *ctx, const char *CAfile,
+                             const char *CApath, int noCAfile, int noCApath)
+{
+    if (CAfile == NULL && CApath == NULL) {
+        if (!noCAfile && SSL_CTX_set_default_verify_file(ctx) <= 0)
+            return 0;
+        if (!noCApath && SSL_CTX_set_default_verify_dir(ctx) <= 0)
+            return 0;
+
+        return 1;
+    }
+    return SSL_CTX_load_verify_locations(ctx, CAfile, CApath);
+}
+
+#ifndef OPENSSL_NO_CT
+
+int ctx_set_ctlog_list_file(SSL_CTX *ctx, const char *path)
+{
+    if (path == NULL)
+        return SSL_CTX_set_default_ctlog_list_file(ctx);
+
+    return SSL_CTX_set_ctlog_list_file(ctx, path);
+}
+
+#endif
+
+static unsigned long nmflag = 0;
+static char nmflag_set = 0;
+
+int set_nameopt(const char *arg)
+{
+    int ret = set_name_ex(&nmflag, arg);
+
+    if (ret)
+        nmflag_set = 1;
+
+    return ret;
+}
+
+unsigned long get_nameopt(void)
+{
+    return (nmflag_set) ? nmflag : XN_FLAG_ONELINE;
+}
+
+int dump_cert_text(BIO *out, X509 *x)
+{
+    print_name(out, "subject=", X509_get_subject_name(x), get_nameopt());
+    BIO_puts(out, "\n");
+    print_name(out, "issuer=", X509_get_issuer_name(x), get_nameopt());
+    BIO_puts(out, "\n");
+
+    return 0;
+}
+
+static int ui_open(UI *ui)
+{
+    int (*opener)(UI *ui) = UI_method_get_opener(ui_fallback_method);
+
+    if (opener)
+        return opener(ui);
+    return 1;
+}
+
+static int ui_read(UI *ui, UI_STRING *uis)
+{
+    int (*reader)(UI *ui, UI_STRING *uis) = NULL;
+
+    if (UI_get_input_flags(uis) & UI_INPUT_FLAG_DEFAULT_PWD
+        && UI_get0_user_data(ui)) {
+        switch (UI_get_string_type(uis)) {
+        case UIT_PROMPT:
+        case UIT_VERIFY:
+            {
+                const char *password =
+                    ((PW_CB_DATA *)UI_get0_user_data(ui))->password;
+                if (password && password[0] != '\0') {
+                    UI_set_result(ui, uis, password);
+                    return 1;
+                }
+            }
+            break;
+        case UIT_NONE:
+        case UIT_BOOLEAN:
+        case UIT_INFO:
+        case UIT_ERROR:
+            break;
+        }
+    }
+
+    reader = UI_method_get_reader(ui_fallback_method);
+    if (reader)
+        return reader(ui, uis);
+    return 1;
+}
+
+static int ui_write(UI *ui, UI_STRING *uis)
+{
+    int (*writer)(UI *ui, UI_STRING *uis) = NULL;
+
+    if (UI_get_input_flags(uis) & UI_INPUT_FLAG_DEFAULT_PWD
+        && UI_get0_user_data(ui)) {
+        switch (UI_get_string_type(uis)) {
+        case UIT_PROMPT:
+        case UIT_VERIFY:
+            {
+                const char *password =
+                    ((PW_CB_DATA *)UI_get0_user_data(ui))->password;
+                if (password && password[0] != '\0')
+                    return 1;
+            }
+            break;
+        case UIT_NONE:
+        case UIT_BOOLEAN:
+        case UIT_INFO:
+        case UIT_ERROR:
+            break;
+        }
+    }
+
+    writer = UI_method_get_writer(ui_fallback_method);
+    if (writer)
+        return writer(ui, uis);
+    return 1;
+}
+
+static int ui_close(UI *ui)
+{
+    int (*closer)(UI *ui) = UI_method_get_closer(ui_fallback_method);
+
+    if (closer)
+        return closer(ui);
+    return 1;
+}
+
+int setup_ui_method(void)
+{
+    ui_fallback_method = UI_null();
+#ifndef OPENSSL_NO_UI_CONSOLE
+    ui_fallback_method = UI_OpenSSL();
+#endif
+    ui_method = UI_create_method("OpenSSL application user interface");
+    UI_method_set_opener(ui_method, ui_open);
+    UI_method_set_reader(ui_method, ui_read);
+    UI_method_set_writer(ui_method, ui_write);
+    UI_method_set_closer(ui_method, ui_close);
+    return 0;
+}
+
+void destroy_ui_method(void)
+{
+    if (ui_method) {
+        UI_destroy_method(ui_method);
+        ui_method = NULL;
+    }
+}
+
+const UI_METHOD *get_ui_method(void)
+{
+    return ui_method;
+}
+
+int password_callback(char *buf, int bufsiz, int verify, PW_CB_DATA *cb_tmp)
+{
+    int res = 0;
+    UI *ui = NULL;
+    PW_CB_DATA *cb_data = (PW_CB_DATA *)cb_tmp;
+
+    ui = UI_new_method(ui_method);
+    if (ui) {
+        int ok = 0;
+        char *buff = NULL;
+        int ui_flags = 0;
+        const char *prompt_info = NULL;
+        char *prompt;
+
+        if (cb_data != NULL && cb_data->prompt_info != NULL)
+            prompt_info = cb_data->prompt_info;
+        prompt = UI_construct_prompt(ui, "pass phrase", prompt_info);
+        if (!prompt) {
+            BIO_printf(bio_err, "Out of memory\n");
+            UI_free(ui);
+            return 0;
+        }
+
+        ui_flags |= UI_INPUT_FLAG_DEFAULT_PWD;
+        UI_ctrl(ui, UI_CTRL_PRINT_ERRORS, 1, 0, 0);
+
+        /* We know that there is no previous user data to return to us */
+        (void)UI_add_user_data(ui, cb_data);
+
+        ok = UI_add_input_string(ui, prompt, ui_flags, buf,
+                                 PW_MIN_LENGTH, bufsiz - 1);
+
+        if (ok >= 0 && verify) {
+            buff = app_malloc(bufsiz, "password buffer");
+            ok = UI_add_verify_string(ui, prompt, ui_flags, buff,
+                                      PW_MIN_LENGTH, bufsiz - 1, buf);
+        }
+        if (ok >= 0)
+            do {
+                ok = UI_process(ui);
+            } while (ok < 0 && UI_ctrl(ui, UI_CTRL_IS_REDOABLE, 0, 0, 0));
+
+        OPENSSL_clear_free(buff, (unsigned int)bufsiz);
+
+        if (ok >= 0)
+            res = strlen(buf);
+        if (ok == -1) {
+            BIO_printf(bio_err, "User interface error\n");
+            ERR_print_errors(bio_err);
+            OPENSSL_cleanse(buf, (unsigned int)bufsiz);
+            res = 0;
+        }
+        if (ok == -2) {
+            BIO_printf(bio_err, "aborted!\n");
+            OPENSSL_cleanse(buf, (unsigned int)bufsiz);
+            res = 0;
+        }
+        UI_free(ui);
+        OPENSSL_free(prompt);
+    }
+    return res;
+}
+
+static char *app_get_pass(const char *arg, int keepbio);
+
+int app_passwd(const char *arg1, const char *arg2, char **pass1, char **pass2)
+{
+    int same;
+    if (arg2 == NULL || arg1 == NULL || strcmp(arg1, arg2))
+        same = 0;
+    else
+        same = 1;
+    if (arg1 != NULL) {
+        *pass1 = app_get_pass(arg1, same);
+        if (*pass1 == NULL)
+            return 0;
+    } else if (pass1 != NULL) {
+        *pass1 = NULL;
+    }
+    if (arg2 != NULL) {
+        *pass2 = app_get_pass(arg2, same ? 2 : 0);
+        if (*pass2 == NULL)
+            return 0;
+    } else if (pass2 != NULL) {
+        *pass2 = NULL;
+    }
+    return 1;
+}
+
+static char *app_get_pass(const char *arg, int keepbio)
+{
+    char *tmp, tpass[APP_PASS_LEN];
+    static BIO *pwdbio = NULL;
+    int i;
+
+    if (strncmp(arg, "pass:", 5) == 0)
+        return OPENSSL_strdup(arg + 5);
+    if (strncmp(arg, "env:", 4) == 0) {
+        tmp = getenv(arg + 4);
+        if (tmp == NULL) {
+            BIO_printf(bio_err, "Can't read environment variable %s\n", arg + 4);
+            return NULL;
+        }
+        return OPENSSL_strdup(tmp);
+    }
+    if (!keepbio || pwdbio == NULL) {
+        if (strncmp(arg, "file:", 5) == 0) {
+            pwdbio = BIO_new_file(arg + 5, "r");
+            if (pwdbio == NULL) {
+                BIO_printf(bio_err, "Can't open file %s\n", arg + 5);
+                return NULL;
+            }
+#if !defined(_WIN32)
+            /*
+             * Under _WIN32, which covers even Win64 and CE, file
+             * descriptors referenced by BIO_s_fd are not inherited
+             * by child process and therefore below is not an option.
+             * It could have been an option if bss_fd.c was operating
+             * on real Windows descriptors, such as those obtained
+             * with CreateFile.
+             */
+        } else if (strncmp(arg, "fd:", 3) == 0) {
+            BIO *btmp;
+            i = atoi(arg + 3);
+            if (i >= 0)
+                pwdbio = BIO_new_fd(i, BIO_NOCLOSE);
+            if ((i < 0) || !pwdbio) {
+                BIO_printf(bio_err, "Can't access file descriptor %s\n", arg + 3);
+                return NULL;
+            }
+            /*
+             * Can't do BIO_gets on an fd BIO so add a buffering BIO
+             */
+            btmp = BIO_new(BIO_f_buffer());
+            pwdbio = BIO_push(btmp, pwdbio);
+#endif
+        } else if (strcmp(arg, "stdin") == 0) {
+            pwdbio = dup_bio_in(FORMAT_TEXT);
+            if (!pwdbio) {
+                BIO_printf(bio_err, "Can't open BIO for stdin\n");
+                return NULL;
+            }
+        } else {
+            BIO_printf(bio_err, "Invalid password argument \"%s\"\n", arg);
+            return NULL;
+        }
+    }
+    i = BIO_gets(pwdbio, tpass, APP_PASS_LEN);
+    if (keepbio != 1) {
+        BIO_free_all(pwdbio);
+        pwdbio = NULL;
+    }
+    if (i <= 0) {
+        BIO_printf(bio_err, "Error reading password from BIO\n");
+        return NULL;
+    }
+    tmp = strchr(tpass, '\n');
+    if (tmp != NULL)
+        *tmp = 0;
+    return OPENSSL_strdup(tpass);
+}
+
+CONF *app_load_config_bio(BIO *in, const char *filename)
+{
+    long errorline = -1;
+    CONF *conf;
+    int i;
+
+    conf = NCONF_new(NULL);
+    i = NCONF_load_bio(conf, in, &errorline);
+    if (i > 0)
+        return conf;
+
+    if (errorline <= 0) {
+        BIO_printf(bio_err, "%s: Can't load ", opt_getprog());
+    } else {
+        BIO_printf(bio_err, "%s: Error on line %ld of ", opt_getprog(),
+                   errorline);
+    }
+    if (filename != NULL)
+        BIO_printf(bio_err, "config file \"%s\"\n", filename);
+    else
+        BIO_printf(bio_err, "config input");
+
+    NCONF_free(conf);
+    return NULL;
+}
+
+CONF *app_load_config(const char *filename)
+{
+    BIO *in;
+    CONF *conf;
+
+    in = bio_open_default(filename, 'r', FORMAT_TEXT);
+    if (in == NULL)
+        return NULL;
+
+    conf = app_load_config_bio(in, filename);
+    BIO_free(in);
+    return conf;
+}
+
+CONF *app_load_config_quiet(const char *filename)
+{
+    BIO *in;
+    CONF *conf;
+
+    in = bio_open_default_quiet(filename, 'r', FORMAT_TEXT);
+    if (in == NULL)
+        return NULL;
+
+    conf = app_load_config_bio(in, filename);
+    BIO_free(in);
+    return conf;
+}
+
+int app_load_modules(const CONF *config)
+{
+    CONF *to_free = NULL;
+
+    if (config == NULL)
+        config = to_free = app_load_config_quiet(default_config_file);
+    if (config == NULL)
+        return 1;
+
+    if (CONF_modules_load(config, NULL, 0) <= 0) {
+        BIO_printf(bio_err, "Error configuring OpenSSL modules\n");
+        ERR_print_errors(bio_err);
+        NCONF_free(to_free);
+        return 0;
+    }
+    NCONF_free(to_free);
+    return 1;
+}
+
+int add_oid_section(CONF *conf)
+{
+    char *p;
+    STACK_OF(CONF_VALUE) *sktmp;
+    CONF_VALUE *cnf;
+    int i;
+
+    if ((p = NCONF_get_string(conf, NULL, "oid_section")) == NULL) {
+        ERR_clear_error();
+        return 1;
+    }
+    if ((sktmp = NCONF_get_section(conf, p)) == NULL) {
+        BIO_printf(bio_err, "problem loading oid section %s\n", p);
+        return 0;
+    }
+    for (i = 0; i < sk_CONF_VALUE_num(sktmp); i++) {
+        cnf = sk_CONF_VALUE_value(sktmp, i);
+        if (OBJ_create(cnf->value, cnf->name, cnf->name) == NID_undef) {
+            BIO_printf(bio_err, "problem creating object %s=%s\n",
+                       cnf->name, cnf->value);
+            return 0;
+        }
+    }
+    return 1;
+}
+
+static int load_pkcs12(BIO *in, const char *desc,
+                       pem_password_cb *pem_cb, void *cb_data,
+                       EVP_PKEY **pkey, X509 **cert, STACK_OF(X509) **ca)
+{
+    const char *pass;
+    char tpass[PEM_BUFSIZE];
+    int len, ret = 0;
+    PKCS12 *p12;
+    p12 = d2i_PKCS12_bio(in, NULL);
+    if (p12 == NULL) {
+        BIO_printf(bio_err, "Error loading PKCS12 file for %s\n", desc);
+        goto die;
+    }
+    /* See if an empty password will do */
+    if (PKCS12_verify_mac(p12, "", 0) || PKCS12_verify_mac(p12, NULL, 0)) {
+        pass = "";
+    } else {
+        if (!pem_cb)
+            pem_cb = (pem_password_cb *)password_callback;
+        len = pem_cb(tpass, PEM_BUFSIZE, 0, cb_data);
+        if (len < 0) {
+            BIO_printf(bio_err, "Passphrase callback error for %s\n", desc);
+            goto die;
+        }
+        if (len < PEM_BUFSIZE)
+            tpass[len] = 0;
+        if (!PKCS12_verify_mac(p12, tpass, len)) {
+            BIO_printf(bio_err,
+                       "Mac verify error (wrong password?) in PKCS12 file for %s\n",
+                       desc);
+            goto die;
+        }
+        pass = tpass;
+    }
+    ret = PKCS12_parse(p12, pass, pkey, cert, ca);
+ die:
+    PKCS12_free(p12);
+    return ret;
+}
+
+#if !defined(OPENSSL_NO_OCSP) && !defined(OPENSSL_NO_SOCK)
+static int load_cert_crl_http(const char *url, X509 **pcert, X509_CRL **pcrl)
+{
+    char *host = NULL, *port = NULL, *path = NULL;
+    BIO *bio = NULL;
+    OCSP_REQ_CTX *rctx = NULL;
+    int use_ssl, rv = 0;
+    if (!OCSP_parse_url(url, &host, &port, &path, &use_ssl))
+        goto err;
+    if (use_ssl) {
+        BIO_puts(bio_err, "https not supported\n");
+        goto err;
+    }
+    bio = BIO_new_connect(host);
+    if (!bio || !BIO_set_conn_port(bio, port))
+        goto err;
+    rctx = OCSP_REQ_CTX_new(bio, 1024);
+    if (rctx == NULL)
+        goto err;
+    if (!OCSP_REQ_CTX_http(rctx, "GET", path))
+        goto err;
+    if (!OCSP_REQ_CTX_add1_header(rctx, "Host", host))
+        goto err;
+    if (pcert) {
+        do {
+            rv = X509_http_nbio(rctx, pcert);
+        } while (rv == -1);
+    } else {
+        do {
+            rv = X509_CRL_http_nbio(rctx, pcrl);
+        } while (rv == -1);
+    }
+
+ err:
+    OPENSSL_free(host);
+    OPENSSL_free(path);
+    OPENSSL_free(port);
+    BIO_free_all(bio);
+    OCSP_REQ_CTX_free(rctx);
+    if (rv != 1) {
+        BIO_printf(bio_err, "Error loading %s from %s\n",
+                   pcert ? "certificate" : "CRL", url);
+        ERR_print_errors(bio_err);
+    }
+    return rv;
+}
+#endif
+
+X509 *load_cert(const char *file, int format, const char *cert_descrip)
+{
+    X509 *x = NULL;
+    BIO *cert;
+
+    if (format == FORMAT_HTTP) {
+#if !defined(OPENSSL_NO_OCSP) && !defined(OPENSSL_NO_SOCK)
+        load_cert_crl_http(file, &x, NULL);
+#endif
+        return x;
+    }
+
+    if (file == NULL) {
+        unbuffer(stdin);
+        cert = dup_bio_in(format);
+    } else {
+        cert = bio_open_default(file, 'r', format);
+    }
+    if (cert == NULL)
+        goto end;
+
+    if (format == FORMAT_ASN1) {
+        x = d2i_X509_bio(cert, NULL);
+    } else if (format == FORMAT_PEM) {
+        x = PEM_read_bio_X509_AUX(cert, NULL,
+                                  (pem_password_cb *)password_callback, NULL);
+    } else if (format == FORMAT_PKCS12) {
+        if (!load_pkcs12(cert, cert_descrip, NULL, NULL, NULL, &x, NULL))
+            goto end;
+    } else {
+        BIO_printf(bio_err, "bad input format specified for %s\n", cert_descrip);
+        goto end;
+    }
+ end:
+    if (x == NULL) {
+        BIO_printf(bio_err, "unable to load certificate\n");
+        ERR_print_errors(bio_err);
+    }
+    BIO_free(cert);
+    return x;
+}
+
+X509_CRL *load_crl(const char *infile, int format)
+{
+    X509_CRL *x = NULL;
+    BIO *in = NULL;
+
+    if (format == FORMAT_HTTP) {
+#if !defined(OPENSSL_NO_OCSP) && !defined(OPENSSL_NO_SOCK)
+        load_cert_crl_http(infile, NULL, &x);
+#endif
+        return x;
+    }
+
+    in = bio_open_default(infile, 'r', format);
+    if (in == NULL)
+        goto end;
+    if (format == FORMAT_ASN1) {
+        x = d2i_X509_CRL_bio(in, NULL);
+    } else if (format == FORMAT_PEM) {
+        x = PEM_read_bio_X509_CRL(in, NULL, NULL, NULL);
+    } else {
+        BIO_printf(bio_err, "bad input format specified for input crl\n");
+        goto end;
+    }
+    if (x == NULL) {
+        BIO_printf(bio_err, "unable to load CRL\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+ end:
+    BIO_free(in);
+    return x;
+}
+
+EVP_PKEY *load_key(const char *file, int format, int maybe_stdin,
+                   const char *pass, ENGINE *e, const char *key_descrip)
+{
+    BIO *key = NULL;
+    EVP_PKEY *pkey = NULL;
+    PW_CB_DATA cb_data;
+
+    cb_data.password = pass;
+    cb_data.prompt_info = file;
+
+    if (file == NULL && (!maybe_stdin || format == FORMAT_ENGINE)) {
+        BIO_printf(bio_err, "no keyfile specified\n");
+        goto end;
+    }
+    if (format == FORMAT_ENGINE) {
+        if (e == NULL) {
+            BIO_printf(bio_err, "no engine specified\n");
+        } else {
+#ifndef OPENSSL_NO_ENGINE
+            if (ENGINE_init(e)) {
+                pkey = ENGINE_load_private_key(e, file, ui_method, &cb_data);
+                ENGINE_finish(e);
+            }
+            if (pkey == NULL) {
+                BIO_printf(bio_err, "cannot load %s from engine\n", key_descrip);
+                ERR_print_errors(bio_err);
+            }
+#else
+            BIO_printf(bio_err, "engines not supported\n");
+#endif
+        }
+        goto end;
+    }
+    if (file == NULL && maybe_stdin) {
+        unbuffer(stdin);
+        key = dup_bio_in(format);
+    } else {
+        key = bio_open_default(file, 'r', format);
+    }
+    if (key == NULL)
+        goto end;
+    if (format == FORMAT_ASN1) {
+        pkey = d2i_PrivateKey_bio(key, NULL);
+    } else if (format == FORMAT_PEM) {
+        pkey = PEM_read_bio_PrivateKey(key, NULL,
+                                       (pem_password_cb *)password_callback,
+                                       &cb_data);
+    } else if (format == FORMAT_PKCS12) {
+        if (!load_pkcs12(key, key_descrip,
+                         (pem_password_cb *)password_callback, &cb_data,
+                         &pkey, NULL, NULL))
+            goto end;
+#if !defined(OPENSSL_NO_RSA) && !defined(OPENSSL_NO_DSA) && !defined (OPENSSL_NO_RC4)
+    } else if (format == FORMAT_MSBLOB) {
+        pkey = b2i_PrivateKey_bio(key);
+    } else if (format == FORMAT_PVK) {
+        pkey = b2i_PVK_bio(key, (pem_password_cb *)password_callback,
+                           &cb_data);
+#endif
+    } else {
+        BIO_printf(bio_err, "bad input format specified for key file\n");
+        goto end;
+    }
+ end:
+    BIO_free(key);
+    if (pkey == NULL) {
+        BIO_printf(bio_err, "unable to load %s\n", key_descrip);
+        ERR_print_errors(bio_err);
+    }
+    return pkey;
+}
+
+EVP_PKEY *load_pubkey(const char *file, int format, int maybe_stdin,
+                      const char *pass, ENGINE *e, const char *key_descrip)
+{
+    BIO *key = NULL;
+    EVP_PKEY *pkey = NULL;
+    PW_CB_DATA cb_data;
+
+    cb_data.password = pass;
+    cb_data.prompt_info = file;
+
+    if (file == NULL && (!maybe_stdin || format == FORMAT_ENGINE)) {
+        BIO_printf(bio_err, "no keyfile specified\n");
+        goto end;
+    }
+    if (format == FORMAT_ENGINE) {
+        if (e == NULL) {
+            BIO_printf(bio_err, "no engine specified\n");
+        } else {
+#ifndef OPENSSL_NO_ENGINE
+            pkey = ENGINE_load_public_key(e, file, ui_method, &cb_data);
+            if (pkey == NULL) {
+                BIO_printf(bio_err, "cannot load %s from engine\n", key_descrip);
+                ERR_print_errors(bio_err);
+            }
+#else
+            BIO_printf(bio_err, "engines not supported\n");
+#endif
+        }
+        goto end;
+    }
+    if (file == NULL && maybe_stdin) {
+        unbuffer(stdin);
+        key = dup_bio_in(format);
+    } else {
+        key = bio_open_default(file, 'r', format);
+    }
+    if (key == NULL)
+        goto end;
+    if (format == FORMAT_ASN1) {
+        pkey = d2i_PUBKEY_bio(key, NULL);
+    } else if (format == FORMAT_ASN1RSA) {
+#ifndef OPENSSL_NO_RSA
+        RSA *rsa;
+        rsa = d2i_RSAPublicKey_bio(key, NULL);
+        if (rsa) {
+            pkey = EVP_PKEY_new();
+            if (pkey != NULL)
+                EVP_PKEY_set1_RSA(pkey, rsa);
+            RSA_free(rsa);
+        } else
+#else
+        BIO_printf(bio_err, "RSA keys not supported\n");
+#endif
+            pkey = NULL;
+    } else if (format == FORMAT_PEMRSA) {
+#ifndef OPENSSL_NO_RSA
+        RSA *rsa;
+        rsa = PEM_read_bio_RSAPublicKey(key, NULL,
+                                        (pem_password_cb *)password_callback,
+                                        &cb_data);
+        if (rsa != NULL) {
+            pkey = EVP_PKEY_new();
+            if (pkey != NULL)
+                EVP_PKEY_set1_RSA(pkey, rsa);
+            RSA_free(rsa);
+        } else
+#else
+        BIO_printf(bio_err, "RSA keys not supported\n");
+#endif
+            pkey = NULL;
+    } else if (format == FORMAT_PEM) {
+        pkey = PEM_read_bio_PUBKEY(key, NULL,
+                                   (pem_password_cb *)password_callback,
+                                   &cb_data);
+#if !defined(OPENSSL_NO_RSA) && !defined(OPENSSL_NO_DSA)
+    } else if (format == FORMAT_MSBLOB) {
+        pkey = b2i_PublicKey_bio(key);
+#endif
+    }
+ end:
+    BIO_free(key);
+    if (pkey == NULL)
+        BIO_printf(bio_err, "unable to load %s\n", key_descrip);
+    return pkey;
+}
+
+static int load_certs_crls(const char *file, int format,
+                           const char *pass, const char *desc,
+                           STACK_OF(X509) **pcerts,
+                           STACK_OF(X509_CRL) **pcrls)
+{
+    int i;
+    BIO *bio;
+    STACK_OF(X509_INFO) *xis = NULL;
+    X509_INFO *xi;
+    PW_CB_DATA cb_data;
+    int rv = 0;
+
+    cb_data.password = pass;
+    cb_data.prompt_info = file;
+
+    if (format != FORMAT_PEM) {
+        BIO_printf(bio_err, "bad input format specified for %s\n", desc);
+        return 0;
+    }
+
+    bio = bio_open_default(file, 'r', FORMAT_PEM);
+    if (bio == NULL)
+        return 0;
+
+    xis = PEM_X509_INFO_read_bio(bio, NULL,
+                                 (pem_password_cb *)password_callback,
+                                 &cb_data);
+
+    BIO_free(bio);
+
+    if (pcerts != NULL && *pcerts == NULL) {
+        *pcerts = sk_X509_new_null();
+        if (*pcerts == NULL)
+            goto end;
+    }
+
+    if (pcrls != NULL && *pcrls == NULL) {
+        *pcrls = sk_X509_CRL_new_null();
+        if (*pcrls == NULL)
+            goto end;
+    }
+
+    for (i = 0; i < sk_X509_INFO_num(xis); i++) {
+        xi = sk_X509_INFO_value(xis, i);
+        if (xi->x509 != NULL && pcerts != NULL) {
+            if (!sk_X509_push(*pcerts, xi->x509))
+                goto end;
+            xi->x509 = NULL;
+        }
+        if (xi->crl != NULL && pcrls != NULL) {
+            if (!sk_X509_CRL_push(*pcrls, xi->crl))
+                goto end;
+            xi->crl = NULL;
+        }
+    }
+
+    if (pcerts != NULL && sk_X509_num(*pcerts) > 0)
+        rv = 1;
+
+    if (pcrls != NULL && sk_X509_CRL_num(*pcrls) > 0)
+        rv = 1;
+
+ end:
+
+    sk_X509_INFO_pop_free(xis, X509_INFO_free);
+
+    if (rv == 0) {
+        if (pcerts != NULL) {
+            sk_X509_pop_free(*pcerts, X509_free);
+            *pcerts = NULL;
+        }
+        if (pcrls != NULL) {
+            sk_X509_CRL_pop_free(*pcrls, X509_CRL_free);
+            *pcrls = NULL;
+        }
+        BIO_printf(bio_err, "unable to load %s\n",
+                   pcerts ? "certificates" : "CRLs");
+        ERR_print_errors(bio_err);
+    }
+    return rv;
+}
+
+void* app_malloc(int sz, const char *what)
+{
+    void *vp = OPENSSL_malloc(sz);
+
+    if (vp == NULL) {
+        BIO_printf(bio_err, "%s: Could not allocate %d bytes for %s\n",
+                opt_getprog(), sz, what);
+        ERR_print_errors(bio_err);
+        exit(1);
+    }
+    return vp;
+}
+
+/*
+ * Initialize or extend, if *certs != NULL, a certificate stack.
+ */
+int load_certs(const char *file, STACK_OF(X509) **certs, int format,
+               const char *pass, const char *desc)
+{
+    return load_certs_crls(file, format, pass, desc, certs, NULL);
+}
+
+/*
+ * Initialize or extend, if *crls != NULL, a certificate stack.
+ */
+int load_crls(const char *file, STACK_OF(X509_CRL) **crls, int format,
+              const char *pass, const char *desc)
+{
+    return load_certs_crls(file, format, pass, desc, NULL, crls);
+}
+
+#define X509V3_EXT_UNKNOWN_MASK         (0xfL << 16)
+/* Return error for unknown extensions */
+#define X509V3_EXT_DEFAULT              0
+/* Print error for unknown extensions */
+#define X509V3_EXT_ERROR_UNKNOWN        (1L << 16)
+/* ASN1 parse unknown extensions */
+#define X509V3_EXT_PARSE_UNKNOWN        (2L << 16)
+/* BIO_dump unknown extensions */
+#define X509V3_EXT_DUMP_UNKNOWN         (3L << 16)
+
+#define X509_FLAG_CA (X509_FLAG_NO_ISSUER | X509_FLAG_NO_PUBKEY | \
+                         X509_FLAG_NO_HEADER | X509_FLAG_NO_VERSION)
+
+int set_cert_ex(unsigned long *flags, const char *arg)
+{
+    static const NAME_EX_TBL cert_tbl[] = {
+        {"compatible", X509_FLAG_COMPAT, 0xffffffffl},
+        {"ca_default", X509_FLAG_CA, 0xffffffffl},
+        {"no_header", X509_FLAG_NO_HEADER, 0},
+        {"no_version", X509_FLAG_NO_VERSION, 0},
+        {"no_serial", X509_FLAG_NO_SERIAL, 0},
+        {"no_signame", X509_FLAG_NO_SIGNAME, 0},
+        {"no_validity", X509_FLAG_NO_VALIDITY, 0},
+        {"no_subject", X509_FLAG_NO_SUBJECT, 0},
+        {"no_issuer", X509_FLAG_NO_ISSUER, 0},
+        {"no_pubkey", X509_FLAG_NO_PUBKEY, 0},
+        {"no_extensions", X509_FLAG_NO_EXTENSIONS, 0},
+        {"no_sigdump", X509_FLAG_NO_SIGDUMP, 0},
+        {"no_aux", X509_FLAG_NO_AUX, 0},
+        {"no_attributes", X509_FLAG_NO_ATTRIBUTES, 0},
+        {"ext_default", X509V3_EXT_DEFAULT, X509V3_EXT_UNKNOWN_MASK},
+        {"ext_error", X509V3_EXT_ERROR_UNKNOWN, X509V3_EXT_UNKNOWN_MASK},
+        {"ext_parse", X509V3_EXT_PARSE_UNKNOWN, X509V3_EXT_UNKNOWN_MASK},
+        {"ext_dump", X509V3_EXT_DUMP_UNKNOWN, X509V3_EXT_UNKNOWN_MASK},
+        {NULL, 0, 0}
+    };
+    return set_multi_opts(flags, arg, cert_tbl);
+}
+
+int set_name_ex(unsigned long *flags, const char *arg)
+{
+    static const NAME_EX_TBL ex_tbl[] = {
+        {"esc_2253", ASN1_STRFLGS_ESC_2253, 0},
+        {"esc_2254", ASN1_STRFLGS_ESC_2254, 0},
+        {"esc_ctrl", ASN1_STRFLGS_ESC_CTRL, 0},
+        {"esc_msb", ASN1_STRFLGS_ESC_MSB, 0},
+        {"use_quote", ASN1_STRFLGS_ESC_QUOTE, 0},
+        {"utf8", ASN1_STRFLGS_UTF8_CONVERT, 0},
+        {"ignore_type", ASN1_STRFLGS_IGNORE_TYPE, 0},
+        {"show_type", ASN1_STRFLGS_SHOW_TYPE, 0},
+        {"dump_all", ASN1_STRFLGS_DUMP_ALL, 0},
+        {"dump_nostr", ASN1_STRFLGS_DUMP_UNKNOWN, 0},
+        {"dump_der", ASN1_STRFLGS_DUMP_DER, 0},
+        {"compat", XN_FLAG_COMPAT, 0xffffffffL},
+        {"sep_comma_plus", XN_FLAG_SEP_COMMA_PLUS, XN_FLAG_SEP_MASK},
+        {"sep_comma_plus_space", XN_FLAG_SEP_CPLUS_SPC, XN_FLAG_SEP_MASK},
+        {"sep_semi_plus_space", XN_FLAG_SEP_SPLUS_SPC, XN_FLAG_SEP_MASK},
+        {"sep_multiline", XN_FLAG_SEP_MULTILINE, XN_FLAG_SEP_MASK},
+        {"dn_rev", XN_FLAG_DN_REV, 0},
+        {"nofname", XN_FLAG_FN_NONE, XN_FLAG_FN_MASK},
+        {"sname", XN_FLAG_FN_SN, XN_FLAG_FN_MASK},
+        {"lname", XN_FLAG_FN_LN, XN_FLAG_FN_MASK},
+        {"align", XN_FLAG_FN_ALIGN, 0},
+        {"oid", XN_FLAG_FN_OID, XN_FLAG_FN_MASK},
+        {"space_eq", XN_FLAG_SPC_EQ, 0},
+        {"dump_unknown", XN_FLAG_DUMP_UNKNOWN_FIELDS, 0},
+        {"RFC2253", XN_FLAG_RFC2253, 0xffffffffL},
+        {"oneline", XN_FLAG_ONELINE, 0xffffffffL},
+        {"multiline", XN_FLAG_MULTILINE, 0xffffffffL},
+        {"ca_default", XN_FLAG_MULTILINE, 0xffffffffL},
+        {NULL, 0, 0}
+    };
+    if (set_multi_opts(flags, arg, ex_tbl) == 0)
+        return 0;
+    if (*flags != XN_FLAG_COMPAT
+        && (*flags & XN_FLAG_SEP_MASK) == 0)
+        *flags |= XN_FLAG_SEP_CPLUS_SPC;
+    return 1;
+}
+
+int set_ext_copy(int *copy_type, const char *arg)
+{
+    if (strcasecmp(arg, "none") == 0)
+        *copy_type = EXT_COPY_NONE;
+    else if (strcasecmp(arg, "copy") == 0)
+        *copy_type = EXT_COPY_ADD;
+    else if (strcasecmp(arg, "copyall") == 0)
+        *copy_type = EXT_COPY_ALL;
+    else
+        return 0;
+    return 1;
+}
+
+int copy_extensions(X509 *x, X509_REQ *req, int copy_type)
+{
+    STACK_OF(X509_EXTENSION) *exts = NULL;
+    X509_EXTENSION *ext, *tmpext;
+    ASN1_OBJECT *obj;
+    int i, idx, ret = 0;
+    if (!x || !req || (copy_type == EXT_COPY_NONE))
+        return 1;
+    exts = X509_REQ_get_extensions(req);
+
+    for (i = 0; i < sk_X509_EXTENSION_num(exts); i++) {
+        ext = sk_X509_EXTENSION_value(exts, i);
+        obj = X509_EXTENSION_get_object(ext);
+        idx = X509_get_ext_by_OBJ(x, obj, -1);
+        /* Does extension exist? */
+        if (idx != -1) {
+            /* If normal copy don't override existing extension */
+            if (copy_type == EXT_COPY_ADD)
+                continue;
+            /* Delete all extensions of same type */
+            do {
+                tmpext = X509_get_ext(x, idx);
+                X509_delete_ext(x, idx);
+                X509_EXTENSION_free(tmpext);
+                idx = X509_get_ext_by_OBJ(x, obj, -1);
+            } while (idx != -1);
+        }
+        if (!X509_add_ext(x, ext, -1))
+            goto end;
+    }
+
+    ret = 1;
+
+ end:
+
+    sk_X509_EXTENSION_pop_free(exts, X509_EXTENSION_free);
+
+    return ret;
+}
+
+static int set_multi_opts(unsigned long *flags, const char *arg,
+                          const NAME_EX_TBL * in_tbl)
+{
+    STACK_OF(CONF_VALUE) *vals;
+    CONF_VALUE *val;
+    int i, ret = 1;
+    if (!arg)
+        return 0;
+    vals = X509V3_parse_list(arg);
+    for (i = 0; i < sk_CONF_VALUE_num(vals); i++) {
+        val = sk_CONF_VALUE_value(vals, i);
+        if (!set_table_opts(flags, val->name, in_tbl))
+            ret = 0;
+    }
+    sk_CONF_VALUE_pop_free(vals, X509V3_conf_free);
+    return ret;
+}
+
+static int set_table_opts(unsigned long *flags, const char *arg,
+                          const NAME_EX_TBL * in_tbl)
+{
+    char c;
+    const NAME_EX_TBL *ptbl;
+    c = arg[0];
+
+    if (c == '-') {
+        c = 0;
+        arg++;
+    } else if (c == '+') {
+        c = 1;
+        arg++;
+    } else {
+        c = 1;
+    }
+
+    for (ptbl = in_tbl; ptbl->name; ptbl++) {
+        if (strcasecmp(arg, ptbl->name) == 0) {
+            *flags &= ~ptbl->mask;
+            if (c)
+                *flags |= ptbl->flag;
+            else
+                *flags &= ~ptbl->flag;
+            return 1;
+        }
+    }
+    return 0;
+}
+
+void print_name(BIO *out, const char *title, X509_NAME *nm,
+                unsigned long lflags)
+{
+    char *buf;
+    char mline = 0;
+    int indent = 0;
+
+    if (title)
+        BIO_puts(out, title);
+    if ((lflags & XN_FLAG_SEP_MASK) == XN_FLAG_SEP_MULTILINE) {
+        mline = 1;
+        indent = 4;
+    }
+    if (lflags == XN_FLAG_COMPAT) {
+        buf = X509_NAME_oneline(nm, 0, 0);
+        BIO_puts(out, buf);
+        BIO_puts(out, "\n");
+        OPENSSL_free(buf);
+    } else {
+        if (mline)
+            BIO_puts(out, "\n");
+        X509_NAME_print_ex(out, nm, indent, lflags);
+        BIO_puts(out, "\n");
+    }
+}
+
+void print_bignum_var(BIO *out, const BIGNUM *in, const char *var,
+                      int len, unsigned char *buffer)
+{
+    BIO_printf(out, "    static unsigned char %s_%d[] = {", var, len);
+    if (BN_is_zero(in)) {
+        BIO_printf(out, "\n        0x00");
+    } else {
+        int i, l;
+
+        l = BN_bn2bin(in, buffer);
+        for (i = 0; i < l; i++) {
+            BIO_printf(out, (i % 10) == 0 ? "\n        " : " ");
+            if (i < l - 1)
+                BIO_printf(out, "0x%02X,", buffer[i]);
+            else
+                BIO_printf(out, "0x%02X", buffer[i]);
+        }
+    }
+    BIO_printf(out, "\n    };\n");
+}
+
+void print_array(BIO *out, const char* title, int len, const unsigned char* d)
+{
+    int i;
+
+    BIO_printf(out, "unsigned char %s[%d] = {", title, len);
+    for (i = 0; i < len; i++) {
+        if ((i % 10) == 0)
+            BIO_printf(out, "\n    ");
+        if (i < len - 1)
+            BIO_printf(out, "0x%02X, ", d[i]);
+        else
+            BIO_printf(out, "0x%02X", d[i]);
+    }
+    BIO_printf(out, "\n};\n");
+}
+
+X509_STORE *setup_verify(const char *CAfile, const char *CApath, int noCAfile, int noCApath)
+{
+    X509_STORE *store = X509_STORE_new();
+    X509_LOOKUP *lookup;
+
+    if (store == NULL)
+        goto end;
+
+    if (CAfile != NULL || !noCAfile) {
+        lookup = X509_STORE_add_lookup(store, X509_LOOKUP_file());
+        if (lookup == NULL)
+            goto end;
+        if (CAfile) {
+            if (!X509_LOOKUP_load_file(lookup, CAfile, X509_FILETYPE_PEM)) {
+                BIO_printf(bio_err, "Error loading file %s\n", CAfile);
+                goto end;
+            }
+        } else {
+            X509_LOOKUP_load_file(lookup, NULL, X509_FILETYPE_DEFAULT);
+        }
+    }
+
+    if (CApath != NULL || !noCApath) {
+        lookup = X509_STORE_add_lookup(store, X509_LOOKUP_hash_dir());
+        if (lookup == NULL)
+            goto end;
+        if (CApath) {
+            if (!X509_LOOKUP_add_dir(lookup, CApath, X509_FILETYPE_PEM)) {
+                BIO_printf(bio_err, "Error loading directory %s\n", CApath);
+                goto end;
+            }
+        } else {
+            X509_LOOKUP_add_dir(lookup, NULL, X509_FILETYPE_DEFAULT);
+        }
+    }
+
+    ERR_clear_error();
+    return store;
+ end:
+    X509_STORE_free(store);
+    return NULL;
+}
+
+#ifndef OPENSSL_NO_ENGINE
+/* Try to load an engine in a shareable library */
+static ENGINE *try_load_engine(const char *engine)
+{
+    ENGINE *e = ENGINE_by_id("dynamic");
+    if (e) {
+        if (!ENGINE_ctrl_cmd_string(e, "SO_PATH", engine, 0)
+            || !ENGINE_ctrl_cmd_string(e, "LOAD", NULL, 0)) {
+            ENGINE_free(e);
+            e = NULL;
+        }
+    }
+    return e;
+}
+#endif
+
+ENGINE *setup_engine(const char *engine, int debug)
+{
+    ENGINE *e = NULL;
+
+#ifndef OPENSSL_NO_ENGINE
+    if (engine != NULL) {
+        if (strcmp(engine, "auto") == 0) {
+            BIO_printf(bio_err, "enabling auto ENGINE support\n");
+            ENGINE_register_all_complete();
+            return NULL;
+        }
+        if ((e = ENGINE_by_id(engine)) == NULL
+            && (e = try_load_engine(engine)) == NULL) {
+            BIO_printf(bio_err, "invalid engine \"%s\"\n", engine);
+            ERR_print_errors(bio_err);
+            return NULL;
+        }
+        if (debug) {
+            ENGINE_ctrl(e, ENGINE_CTRL_SET_LOGSTREAM, 0, bio_err, 0);
+        }
+        ENGINE_ctrl_cmd(e, "SET_USER_INTERFACE", 0, ui_method, 0, 1);
+        if (!ENGINE_set_default(e, ENGINE_METHOD_ALL)) {
+            BIO_printf(bio_err, "can't use that engine\n");
+            ERR_print_errors(bio_err);
+            ENGINE_free(e);
+            return NULL;
+        }
+
+        BIO_printf(bio_err, "engine \"%s\" set.\n", ENGINE_get_id(e));
+    }
+#endif
+    return e;
+}
+
+void release_engine(ENGINE *e)
+{
+#ifndef OPENSSL_NO_ENGINE
+    if (e != NULL)
+        /* Free our "structural" reference. */
+        ENGINE_free(e);
+#endif
+}
+
+static unsigned long index_serial_hash(const OPENSSL_CSTRING *a)
+{
+    const char *n;
+
+    n = a[DB_serial];
+    while (*n == '0')
+        n++;
+    return OPENSSL_LH_strhash(n);
+}
+
+static int index_serial_cmp(const OPENSSL_CSTRING *a,
+                            const OPENSSL_CSTRING *b)
+{
+    const char *aa, *bb;
+
+    for (aa = a[DB_serial]; *aa == '0'; aa++) ;
+    for (bb = b[DB_serial]; *bb == '0'; bb++) ;
+    return strcmp(aa, bb);
+}
+
+static int index_name_qual(char **a)
+{
+    return (a[0][0] == 'V');
+}
+
+static unsigned long index_name_hash(const OPENSSL_CSTRING *a)
+{
+    return OPENSSL_LH_strhash(a[DB_name]);
+}
+
+int index_name_cmp(const OPENSSL_CSTRING *a, const OPENSSL_CSTRING *b)
+{
+    return strcmp(a[DB_name], b[DB_name]);
+}
+
+static IMPLEMENT_LHASH_HASH_FN(index_serial, OPENSSL_CSTRING)
+static IMPLEMENT_LHASH_COMP_FN(index_serial, OPENSSL_CSTRING)
+static IMPLEMENT_LHASH_HASH_FN(index_name, OPENSSL_CSTRING)
+static IMPLEMENT_LHASH_COMP_FN(index_name, OPENSSL_CSTRING)
+#undef BSIZE
+#define BSIZE 256
+BIGNUM *load_serial(const char *serialfile, int create, ASN1_INTEGER **retai)
+{
+    BIO *in = NULL;
+    BIGNUM *ret = NULL;
+    char buf[1024];
+    ASN1_INTEGER *ai = NULL;
+
+    ai = ASN1_INTEGER_new();
+    if (ai == NULL)
+        goto err;
+
+    in = BIO_new_file(serialfile, "r");
+    if (in == NULL) {
+        if (!create) {
+            perror(serialfile);
+            goto err;
+        }
+        ERR_clear_error();
+        ret = BN_new();
+        if (ret == NULL || !rand_serial(ret, ai))
+            BIO_printf(bio_err, "Out of memory\n");
+    } else {
+        if (!a2i_ASN1_INTEGER(in, ai, buf, 1024)) {
+            BIO_printf(bio_err, "unable to load number from %s\n",
+                       serialfile);
+            goto err;
+        }
+        ret = ASN1_INTEGER_to_BN(ai, NULL);
+        if (ret == NULL) {
+            BIO_printf(bio_err,
+                       "error converting number from bin to BIGNUM\n");
+            goto err;
+        }
+    }
+
+    if (ret && retai) {
+        *retai = ai;
+        ai = NULL;
+    }
+ err:
+    BIO_free(in);
+    ASN1_INTEGER_free(ai);
+    return ret;
+}
+
+int save_serial(const char *serialfile, const char *suffix, const BIGNUM *serial,
+                ASN1_INTEGER **retai)
+{
+    char buf[1][BSIZE];
+    BIO *out = NULL;
+    int ret = 0;
+    ASN1_INTEGER *ai = NULL;
+    int j;
+
+    if (suffix == NULL)
+        j = strlen(serialfile);
+    else
+        j = strlen(serialfile) + strlen(suffix) + 1;
+    if (j >= BSIZE) {
+        BIO_printf(bio_err, "file name too long\n");
+        goto err;
+    }
+
+    if (suffix == NULL)
+        OPENSSL_strlcpy(buf[0], serialfile, BSIZE);
+    else {
+#ifndef OPENSSL_SYS_VMS
+        j = BIO_snprintf(buf[0], sizeof(buf[0]), "%s.%s", serialfile, suffix);
+#else
+        j = BIO_snprintf(buf[0], sizeof(buf[0]), "%s-%s", serialfile, suffix);
+#endif
+    }
+    out = BIO_new_file(buf[0], "w");
+    if (out == NULL) {
+        ERR_print_errors(bio_err);
+        goto err;
+    }
+
+    if ((ai = BN_to_ASN1_INTEGER(serial, NULL)) == NULL) {
+        BIO_printf(bio_err, "error converting serial to ASN.1 format\n");
+        goto err;
+    }
+    i2a_ASN1_INTEGER(out, ai);
+    BIO_puts(out, "\n");
+    ret = 1;
+    if (retai) {
+        *retai = ai;
+        ai = NULL;
+    }
+ err:
+    BIO_free_all(out);
+    ASN1_INTEGER_free(ai);
+    return ret;
+}
+
+int rotate_serial(const char *serialfile, const char *new_suffix,
+                  const char *old_suffix)
+{
+    char buf[2][BSIZE];
+    int i, j;
+
+    i = strlen(serialfile) + strlen(old_suffix);
+    j = strlen(serialfile) + strlen(new_suffix);
+    if (i > j)
+        j = i;
+    if (j + 1 >= BSIZE) {
+        BIO_printf(bio_err, "file name too long\n");
+        goto err;
+    }
+#ifndef OPENSSL_SYS_VMS
+    j = BIO_snprintf(buf[0], sizeof(buf[0]), "%s.%s", serialfile, new_suffix);
+    j = BIO_snprintf(buf[1], sizeof(buf[1]), "%s.%s", serialfile, old_suffix);
+#else
+    j = BIO_snprintf(buf[0], sizeof(buf[0]), "%s-%s", serialfile, new_suffix);
+    j = BIO_snprintf(buf[1], sizeof(buf[1]), "%s-%s", serialfile, old_suffix);
+#endif
+    if (rename(serialfile, buf[1]) < 0 && errno != ENOENT
+#ifdef ENOTDIR
+        && errno != ENOTDIR
+#endif
+        ) {
+        BIO_printf(bio_err,
+                   "unable to rename %s to %s\n", serialfile, buf[1]);
+        perror("reason");
+        goto err;
+    }
+    if (rename(buf[0], serialfile) < 0) {
+        BIO_printf(bio_err,
+                   "unable to rename %s to %s\n", buf[0], serialfile);
+        perror("reason");
+        rename(buf[1], serialfile);
+        goto err;
+    }
+    return 1;
+ err:
+    return 0;
+}
+
+int rand_serial(BIGNUM *b, ASN1_INTEGER *ai)
+{
+    BIGNUM *btmp;
+    int ret = 0;
+
+    btmp = b == NULL ? BN_new() : b;
+    if (btmp == NULL)
+        return 0;
+
+    if (!BN_rand(btmp, SERIAL_RAND_BITS, BN_RAND_TOP_ANY, BN_RAND_BOTTOM_ANY))
+        goto error;
+    if (ai && !BN_to_ASN1_INTEGER(btmp, ai))
+        goto error;
+
+    ret = 1;
+
+ error:
+
+    if (btmp != b)
+        BN_free(btmp);
+
+    return ret;
+}
+
+CA_DB *load_index(const char *dbfile, DB_ATTR *db_attr)
+{
+    CA_DB *retdb = NULL;
+    TXT_DB *tmpdb = NULL;
+    BIO *in;
+    CONF *dbattr_conf = NULL;
+    char buf[BSIZE];
+#ifndef OPENSSL_NO_POSIX_IO
+    FILE *dbfp;
+    struct stat dbst;
+#endif
+
+    in = BIO_new_file(dbfile, "r");
+    if (in == NULL) {
+        ERR_print_errors(bio_err);
+        goto err;
+    }
+
+#ifndef OPENSSL_NO_POSIX_IO
+    BIO_get_fp(in, &dbfp);
+    if (fstat(fileno(dbfp), &dbst) == -1) {
+        SYSerr(SYS_F_FSTAT, errno);
+        ERR_add_error_data(3, "fstat('", dbfile, "')");
+        ERR_print_errors(bio_err);
+        goto err;
+    }
+#endif
+
+    if ((tmpdb = TXT_DB_read(in, DB_NUMBER)) == NULL)
+        goto err;
+
+#ifndef OPENSSL_SYS_VMS
+    BIO_snprintf(buf, sizeof(buf), "%s.attr", dbfile);
+#else
+    BIO_snprintf(buf, sizeof(buf), "%s-attr", dbfile);
+#endif
+    dbattr_conf = app_load_config_quiet(buf);
+
+    retdb = app_malloc(sizeof(*retdb), "new DB");
+    retdb->db = tmpdb;
+    tmpdb = NULL;
+    if (db_attr)
+        retdb->attributes = *db_attr;
+    else {
+        retdb->attributes.unique_subject = 1;
+    }
+
+    if (dbattr_conf) {
+        char *p = NCONF_get_string(dbattr_conf, NULL, "unique_subject");
+        if (p) {
+            retdb->attributes.unique_subject = parse_yesno(p, 1);
+        }
+    }
+
+    retdb->dbfname = OPENSSL_strdup(dbfile);
+#ifndef OPENSSL_NO_POSIX_IO
+    retdb->dbst = dbst;
+#endif
+
+ err:
+    NCONF_free(dbattr_conf);
+    TXT_DB_free(tmpdb);
+    BIO_free_all(in);
+    return retdb;
+}
+
+/*
+ * Returns > 0 on success, <= 0 on error
+ */
+int index_index(CA_DB *db)
+{
+    if (!TXT_DB_create_index(db->db, DB_serial, NULL,
+                             LHASH_HASH_FN(index_serial),
+                             LHASH_COMP_FN(index_serial))) {
+        BIO_printf(bio_err,
+                   "error creating serial number index:(%ld,%ld,%ld)\n",
+                   db->db->error, db->db->arg1, db->db->arg2);
+        return 0;
+    }
+
+    if (db->attributes.unique_subject
+        && !TXT_DB_create_index(db->db, DB_name, index_name_qual,
+                                LHASH_HASH_FN(index_name),
+                                LHASH_COMP_FN(index_name))) {
+        BIO_printf(bio_err, "error creating name index:(%ld,%ld,%ld)\n",
+                   db->db->error, db->db->arg1, db->db->arg2);
+        return 0;
+    }
+    return 1;
+}
+
+int save_index(const char *dbfile, const char *suffix, CA_DB *db)
+{
+    char buf[3][BSIZE];
+    BIO *out;
+    int j;
+
+    j = strlen(dbfile) + strlen(suffix);
+    if (j + 6 >= BSIZE) {
+        BIO_printf(bio_err, "file name too long\n");
+        goto err;
+    }
+#ifndef OPENSSL_SYS_VMS
+    j = BIO_snprintf(buf[2], sizeof(buf[2]), "%s.attr", dbfile);
+    j = BIO_snprintf(buf[1], sizeof(buf[1]), "%s.attr.%s", dbfile, suffix);
+    j = BIO_snprintf(buf[0], sizeof(buf[0]), "%s.%s", dbfile, suffix);
+#else
+    j = BIO_snprintf(buf[2], sizeof(buf[2]), "%s-attr", dbfile);
+    j = BIO_snprintf(buf[1], sizeof(buf[1]), "%s-attr-%s", dbfile, suffix);
+    j = BIO_snprintf(buf[0], sizeof(buf[0]), "%s-%s", dbfile, suffix);
+#endif
+    out = BIO_new_file(buf[0], "w");
+    if (out == NULL) {
+        perror(dbfile);
+        BIO_printf(bio_err, "unable to open '%s'\n", dbfile);
+        goto err;
+    }
+    j = TXT_DB_write(out, db->db);
+    BIO_free(out);
+    if (j <= 0)
+        goto err;
+
+    out = BIO_new_file(buf[1], "w");
+    if (out == NULL) {
+        perror(buf[2]);
+        BIO_printf(bio_err, "unable to open '%s'\n", buf[2]);
+        goto err;
+    }
+    BIO_printf(out, "unique_subject = %s\n",
+               db->attributes.unique_subject ? "yes" : "no");
+    BIO_free(out);
+
+    return 1;
+ err:
+    return 0;
+}
+
+int rotate_index(const char *dbfile, const char *new_suffix,
+                 const char *old_suffix)
+{
+    char buf[5][BSIZE];
+    int i, j;
+
+    i = strlen(dbfile) + strlen(old_suffix);
+    j = strlen(dbfile) + strlen(new_suffix);
+    if (i > j)
+        j = i;
+    if (j + 6 >= BSIZE) {
+        BIO_printf(bio_err, "file name too long\n");
+        goto err;
+    }
+#ifndef OPENSSL_SYS_VMS
+    j = BIO_snprintf(buf[4], sizeof(buf[4]), "%s.attr", dbfile);
+    j = BIO_snprintf(buf[3], sizeof(buf[3]), "%s.attr.%s", dbfile, old_suffix);
+    j = BIO_snprintf(buf[2], sizeof(buf[2]), "%s.attr.%s", dbfile, new_suffix);
+    j = BIO_snprintf(buf[1], sizeof(buf[1]), "%s.%s", dbfile, old_suffix);
+    j = BIO_snprintf(buf[0], sizeof(buf[0]), "%s.%s", dbfile, new_suffix);
+#else
+    j = BIO_snprintf(buf[4], sizeof(buf[4]), "%s-attr", dbfile);
+    j = BIO_snprintf(buf[3], sizeof(buf[3]), "%s-attr-%s", dbfile, old_suffix);
+    j = BIO_snprintf(buf[2], sizeof(buf[2]), "%s-attr-%s", dbfile, new_suffix);
+    j = BIO_snprintf(buf[1], sizeof(buf[1]), "%s-%s", dbfile, old_suffix);
+    j = BIO_snprintf(buf[0], sizeof(buf[0]), "%s-%s", dbfile, new_suffix);
+#endif
+    if (rename(dbfile, buf[1]) < 0 && errno != ENOENT
+#ifdef ENOTDIR
+        && errno != ENOTDIR
+#endif
+        ) {
+        BIO_printf(bio_err, "unable to rename %s to %s\n", dbfile, buf[1]);
+        perror("reason");
+        goto err;
+    }
+    if (rename(buf[0], dbfile) < 0) {
+        BIO_printf(bio_err, "unable to rename %s to %s\n", buf[0], dbfile);
+        perror("reason");
+        rename(buf[1], dbfile);
+        goto err;
+    }
+    if (rename(buf[4], buf[3]) < 0 && errno != ENOENT
+#ifdef ENOTDIR
+        && errno != ENOTDIR
+#endif
+        ) {
+        BIO_printf(bio_err, "unable to rename %s to %s\n", buf[4], buf[3]);
+        perror("reason");
+        rename(dbfile, buf[0]);
+        rename(buf[1], dbfile);
+        goto err;
+    }
+    if (rename(buf[2], buf[4]) < 0) {
+        BIO_printf(bio_err, "unable to rename %s to %s\n", buf[2], buf[4]);
+        perror("reason");
+        rename(buf[3], buf[4]);
+        rename(dbfile, buf[0]);
+        rename(buf[1], dbfile);
+        goto err;
+    }
+    return 1;
+ err:
+    return 0;
+}
+
+void free_index(CA_DB *db)
+{
+    if (db) {
+        TXT_DB_free(db->db);
+        OPENSSL_free(db->dbfname);
+        OPENSSL_free(db);
+    }
+}
+
+int parse_yesno(const char *str, int def)
+{
+    if (str) {
+        switch (*str) {
+        case 'f':              /* false */
+        case 'F':              /* FALSE */
+        case 'n':              /* no */
+        case 'N':              /* NO */
+        case '0':              /* 0 */
+            return 0;
+        case 't':              /* true */
+        case 'T':              /* TRUE */
+        case 'y':              /* yes */
+        case 'Y':              /* YES */
+        case '1':              /* 1 */
+            return 1;
+        }
+    }
+    return def;
+}
+
+/*
+ * name is expected to be in the format /type0=value0/type1=value1/type2=...
+ * where characters may be escaped by \
+ */
+X509_NAME *parse_name(const char *cp, long chtype, int canmulti)
+{
+    int nextismulti = 0;
+    char *work;
+    X509_NAME *n;
+
+    if (*cp++ != '/') {
+        BIO_printf(bio_err,
+                   "name is expected to be in the format "
+                   "/type0=value0/type1=value1/type2=... where characters may "
+                   "be escaped by \\. This name is not in that format: '%s'\n",
+                   --cp);
+        return NULL;
+    }
+
+    n = X509_NAME_new();
+    if (n == NULL)
+        return NULL;
+    work = OPENSSL_strdup(cp);
+    if (work == NULL)
+        goto err;
+
+    while (*cp) {
+        char *bp = work;
+        char *typestr = bp;
+        unsigned char *valstr;
+        int nid;
+        int ismulti = nextismulti;
+        nextismulti = 0;
+
+        /* Collect the type */
+        while (*cp && *cp != '=')
+            *bp++ = *cp++;
+        if (*cp == '\0') {
+            BIO_printf(bio_err,
+                    "%s: Hit end of string before finding the equals.\n",
+                    opt_getprog());
+            goto err;
+        }
+        *bp++ = '\0';
+        ++cp;
+
+        /* Collect the value. */
+        valstr = (unsigned char *)bp;
+        for (; *cp && *cp != '/'; *bp++ = *cp++) {
+            if (canmulti && *cp == '+') {
+                nextismulti = 1;
+                break;
+            }
+            if (*cp == '\\' && *++cp == '\0') {
+                BIO_printf(bio_err,
+                        "%s: escape character at end of string\n",
+                        opt_getprog());
+                goto err;
+            }
+        }
+        *bp++ = '\0';
+
+        /* If not at EOS (must be + or /), move forward. */
+        if (*cp)
+            ++cp;
+
+        /* Parse */
+        nid = OBJ_txt2nid(typestr);
+        if (nid == NID_undef) {
+            BIO_printf(bio_err, "%s: Skipping unknown attribute \"%s\"\n",
+                      opt_getprog(), typestr);
+            continue;
+        }
+        if (*valstr == '\0') {
+            BIO_printf(bio_err,
+                       "%s: No value provided for Subject Attribute %s, skipped\n",
+                       opt_getprog(), typestr);
+            continue;
+        }
+        if (!X509_NAME_add_entry_by_NID(n, nid, chtype,
+                                        valstr, strlen((char *)valstr),
+                                        -1, ismulti ? -1 : 0))
+            goto err;
+    }
+
+    OPENSSL_free(work);
+    return n;
+
+ err:
+    X509_NAME_free(n);
+    OPENSSL_free(work);
+    return NULL;
+}
+
+/*
+ * Read whole contents of a BIO into an allocated memory buffer and return
+ * it.
+ */
+
+int bio_to_mem(unsigned char **out, int maxlen, BIO *in)
+{
+    BIO *mem;
+    int len, ret;
+    unsigned char tbuf[1024];
+
+    mem = BIO_new(BIO_s_mem());
+    if (mem == NULL)
+        return -1;
+    for (;;) {
+        if ((maxlen != -1) && maxlen < 1024)
+            len = maxlen;
+        else
+            len = 1024;
+        len = BIO_read(in, tbuf, len);
+        if (len < 0) {
+            BIO_free(mem);
+            return -1;
+        }
+        if (len == 0)
+            break;
+        if (BIO_write(mem, tbuf, len) != len) {
+            BIO_free(mem);
+            return -1;
+        }
+        maxlen -= len;
+
+        if (maxlen == 0)
+            break;
+    }
+    ret = BIO_get_mem_data(mem, (char **)out);
+    BIO_set_flags(mem, BIO_FLAGS_MEM_RDONLY);
+    BIO_free(mem);
+    return ret;
+}
+
+int pkey_ctrl_string(EVP_PKEY_CTX *ctx, const char *value)
+{
+    int rv;
+    char *stmp, *vtmp = NULL;
+    stmp = OPENSSL_strdup(value);
+    if (!stmp)
+        return -1;
+    vtmp = strchr(stmp, ':');
+    if (vtmp) {
+        *vtmp = 0;
+        vtmp++;
+    }
+    rv = EVP_PKEY_CTX_ctrl_str(ctx, stmp, vtmp);
+    OPENSSL_free(stmp);
+    return rv;
+}
+
+static void nodes_print(const char *name, STACK_OF(X509_POLICY_NODE) *nodes)
+{
+    X509_POLICY_NODE *node;
+    int i;
+
+    BIO_printf(bio_err, "%s Policies:", name);
+    if (nodes) {
+        BIO_puts(bio_err, "\n");
+        for (i = 0; i < sk_X509_POLICY_NODE_num(nodes); i++) {
+            node = sk_X509_POLICY_NODE_value(nodes, i);
+            X509_POLICY_NODE_print(bio_err, node, 2);
+        }
+    } else {
+        BIO_puts(bio_err, " <empty>\n");
+    }
+}
+
+void policies_print(X509_STORE_CTX *ctx)
+{
+    X509_POLICY_TREE *tree;
+    int explicit_policy;
+    tree = X509_STORE_CTX_get0_policy_tree(ctx);
+    explicit_policy = X509_STORE_CTX_get_explicit_policy(ctx);
+
+    BIO_printf(bio_err, "Require explicit Policy: %s\n",
+               explicit_policy ? "True" : "False");
+
+    nodes_print("Authority", X509_policy_tree_get0_policies(tree));
+    nodes_print("User", X509_policy_tree_get0_user_policies(tree));
+}
+
+/*-
+ * next_protos_parse parses a comma separated list of strings into a string
+ * in a format suitable for passing to SSL_CTX_set_next_protos_advertised.
+ *   outlen: (output) set to the length of the resulting buffer on success.
+ *   err: (maybe NULL) on failure, an error message line is written to this BIO.
+ *   in: a NUL terminated string like "abc,def,ghi"
+ *
+ *   returns: a malloc'd buffer or NULL on failure.
+ */
+unsigned char *next_protos_parse(size_t *outlen, const char *in)
+{
+    size_t len;
+    unsigned char *out;
+    size_t i, start = 0;
+
+    len = strlen(in);
+    if (len >= 65535)
+        return NULL;
+
+    out = app_malloc(strlen(in) + 1, "NPN buffer");
+    for (i = 0; i <= len; ++i) {
+        if (i == len || in[i] == ',') {
+            if (i - start > 255) {
+                OPENSSL_free(out);
+                return NULL;
+            }
+            out[start] = (unsigned char)(i - start);
+            start = i + 1;
+        } else {
+            out[i + 1] = in[i];
+        }
+    }
+
+    *outlen = len + 1;
+    return out;
+}
+
+void print_cert_checks(BIO *bio, X509 *x,
+                       const char *checkhost,
+                       const char *checkemail, const char *checkip)
+{
+    if (x == NULL)
+        return;
+    if (checkhost) {
+        BIO_printf(bio, "Hostname %s does%s match certificate\n",
+                   checkhost,
+                   X509_check_host(x, checkhost, 0, 0, NULL) == 1
+                       ? "" : " NOT");
+    }
+
+    if (checkemail) {
+        BIO_printf(bio, "Email %s does%s match certificate\n",
+                   checkemail, X509_check_email(x, checkemail, 0, 0)
+                   ? "" : " NOT");
+    }
+
+    if (checkip) {
+        BIO_printf(bio, "IP %s does%s match certificate\n",
+                   checkip, X509_check_ip_asc(x, checkip, 0) ? "" : " NOT");
+    }
+}
+
+/* Get first http URL from a DIST_POINT structure */
+
+static const char *get_dp_url(DIST_POINT *dp)
+{
+    GENERAL_NAMES *gens;
+    GENERAL_NAME *gen;
+    int i, gtype;
+    ASN1_STRING *uri;
+    if (!dp->distpoint || dp->distpoint->type != 0)
+        return NULL;
+    gens = dp->distpoint->name.fullname;
+    for (i = 0; i < sk_GENERAL_NAME_num(gens); i++) {
+        gen = sk_GENERAL_NAME_value(gens, i);
+        uri = GENERAL_NAME_get0_value(gen, &gtype);
+        if (gtype == GEN_URI && ASN1_STRING_length(uri) > 6) {
+            const char *uptr = (const char *)ASN1_STRING_get0_data(uri);
+            if (strncmp(uptr, "http://", 7) == 0)
+                return uptr;
+        }
+    }
+    return NULL;
+}
+
+/*
+ * Look through a CRLDP structure and attempt to find an http URL to
+ * downloads a CRL from.
+ */
+
+static X509_CRL *load_crl_crldp(STACK_OF(DIST_POINT) *crldp)
+{
+    int i;
+    const char *urlptr = NULL;
+    for (i = 0; i < sk_DIST_POINT_num(crldp); i++) {
+        DIST_POINT *dp = sk_DIST_POINT_value(crldp, i);
+        urlptr = get_dp_url(dp);
+        if (urlptr)
+            return load_crl(urlptr, FORMAT_HTTP);
+    }
+    return NULL;
+}
+
+/*
+ * Example of downloading CRLs from CRLDP: not usable for real world as it
+ * always downloads, doesn't support non-blocking I/O and doesn't cache
+ * anything.
+ */
+
+static STACK_OF(X509_CRL) *crls_http_cb(X509_STORE_CTX *ctx, X509_NAME *nm)
+{
+    X509 *x;
+    STACK_OF(X509_CRL) *crls = NULL;
+    X509_CRL *crl;
+    STACK_OF(DIST_POINT) *crldp;
+
+    crls = sk_X509_CRL_new_null();
+    if (!crls)
+        return NULL;
+    x = X509_STORE_CTX_get_current_cert(ctx);
+    crldp = X509_get_ext_d2i(x, NID_crl_distribution_points, NULL, NULL);
+    crl = load_crl_crldp(crldp);
+    sk_DIST_POINT_pop_free(crldp, DIST_POINT_free);
+    if (!crl) {
+        sk_X509_CRL_free(crls);
+        return NULL;
+    }
+    sk_X509_CRL_push(crls, crl);
+    /* Try to download delta CRL */
+    crldp = X509_get_ext_d2i(x, NID_freshest_crl, NULL, NULL);
+    crl = load_crl_crldp(crldp);
+    sk_DIST_POINT_pop_free(crldp, DIST_POINT_free);
+    if (crl)
+        sk_X509_CRL_push(crls, crl);
+    return crls;
+}
+
+void store_setup_crl_download(X509_STORE *st)
+{
+    X509_STORE_set_lookup_crls_cb(st, crls_http_cb);
+}
+
+/*
+ * Platform-specific sections
+ */
+#if defined(_WIN32)
+# ifdef fileno
+#  undef fileno
+#  define fileno(a) (int)_fileno(a)
+# endif
+
+# include <windows.h>
+# include <tchar.h>
+
+static int WIN32_rename(const char *from, const char *to)
+{
+    TCHAR *tfrom = NULL, *tto;
+    DWORD err;
+    int ret = 0;
+
+    if (sizeof(TCHAR) == 1) {
+        tfrom = (TCHAR *)from;
+        tto = (TCHAR *)to;
+    } else {                    /* UNICODE path */
+
+        size_t i, flen = strlen(from) + 1, tlen = strlen(to) + 1;
+        tfrom = malloc(sizeof(*tfrom) * (flen + tlen));
+        if (tfrom == NULL)
+            goto err;
+        tto = tfrom + flen;
+# if !defined(_WIN32_WCE) || _WIN32_WCE>=101
+        if (!MultiByteToWideChar(CP_ACP, 0, from, flen, (WCHAR *)tfrom, flen))
+# endif
+            for (i = 0; i < flen; i++)
+                tfrom[i] = (TCHAR)from[i];
+# if !defined(_WIN32_WCE) || _WIN32_WCE>=101
+        if (!MultiByteToWideChar(CP_ACP, 0, to, tlen, (WCHAR *)tto, tlen))
+# endif
+            for (i = 0; i < tlen; i++)
+                tto[i] = (TCHAR)to[i];
+    }
+
+    if (MoveFile(tfrom, tto))
+        goto ok;
+    err = GetLastError();
+    if (err == ERROR_ALREADY_EXISTS || err == ERROR_FILE_EXISTS) {
+        if (DeleteFile(tto) && MoveFile(tfrom, tto))
+            goto ok;
+        err = GetLastError();
+    }
+    if (err == ERROR_FILE_NOT_FOUND || err == ERROR_PATH_NOT_FOUND)
+        errno = ENOENT;
+    else if (err == ERROR_ACCESS_DENIED)
+        errno = EACCES;
+    else
+        errno = EINVAL;         /* we could map more codes... */
+ err:
+    ret = -1;
+ ok:
+    if (tfrom != NULL && tfrom != (TCHAR *)from)
+        free(tfrom);
+    return ret;
+}
+#endif
+
+/* app_tminterval section */
+#if defined(_WIN32)
+double app_tminterval(int stop, int usertime)
+{
+    FILETIME now;
+    double ret = 0;
+    static ULARGE_INTEGER tmstart;
+    static int warning = 1;
+# ifdef _WIN32_WINNT
+    static HANDLE proc = NULL;
+
+    if (proc == NULL) {
+        if (check_winnt())
+            proc = OpenProcess(PROCESS_QUERY_INFORMATION, FALSE,
+                               GetCurrentProcessId());
+        if (proc == NULL)
+            proc = (HANDLE) - 1;
+    }
+
+    if (usertime && proc != (HANDLE) - 1) {
+        FILETIME junk;
+        GetProcessTimes(proc, &junk, &junk, &junk, &now);
+    } else
+# endif
+    {
+        SYSTEMTIME systime;
+
+        if (usertime && warning) {
+            BIO_printf(bio_err, "To get meaningful results, run "
+                       "this program on idle system.\n");
+            warning = 0;
+        }
+        GetSystemTime(&systime);
+        SystemTimeToFileTime(&systime, &now);
+    }
+
+    if (stop == TM_START) {
+        tmstart.u.LowPart = now.dwLowDateTime;
+        tmstart.u.HighPart = now.dwHighDateTime;
+    } else {
+        ULARGE_INTEGER tmstop;
+
+        tmstop.u.LowPart = now.dwLowDateTime;
+        tmstop.u.HighPart = now.dwHighDateTime;
+
+        ret = (__int64)(tmstop.QuadPart - tmstart.QuadPart) * 1e-7;
+    }
+
+    return ret;
+}
+#elif defined(OPENSSL_SYS_VXWORKS)
+# include <time.h>
+
+double app_tminterval(int stop, int usertime)
+{
+    double ret = 0;
+# ifdef CLOCK_REALTIME
+    static struct timespec tmstart;
+    struct timespec now;
+# else
+    static unsigned long tmstart;
+    unsigned long now;
+# endif
+    static int warning = 1;
+
+    if (usertime && warning) {
+        BIO_printf(bio_err, "To get meaningful results, run "
+                   "this program on idle system.\n");
+        warning = 0;
+    }
+# ifdef CLOCK_REALTIME
+    clock_gettime(CLOCK_REALTIME, &now);
+    if (stop == TM_START)
+        tmstart = now;
+    else
+        ret = ((now.tv_sec + now.tv_nsec * 1e-9)
+               - (tmstart.tv_sec + tmstart.tv_nsec * 1e-9));
+# else
+    now = tickGet();
+    if (stop == TM_START)
+        tmstart = now;
+    else
+        ret = (now - tmstart) / (double)sysClkRateGet();
+# endif
+    return ret;
+}
+
+#elif defined(OPENSSL_SYSTEM_VMS)
+# include <time.h>
+# include <times.h>
+
+double app_tminterval(int stop, int usertime)
+{
+    static clock_t tmstart;
+    double ret = 0;
+    clock_t now;
+# ifdef __TMS
+    struct tms rus;
+
+    now = times(&rus);
+    if (usertime)
+        now = rus.tms_utime;
+# else
+    if (usertime)
+        now = clock();          /* sum of user and kernel times */
+    else {
+        struct timeval tv;
+        gettimeofday(&tv, NULL);
+        now = (clock_t)((unsigned long long)tv.tv_sec * CLK_TCK +
+                        (unsigned long long)tv.tv_usec * (1000000 / CLK_TCK)
+            );
+    }
+# endif
+    if (stop == TM_START)
+        tmstart = now;
+    else
+        ret = (now - tmstart) / (double)(CLK_TCK);
+
+    return ret;
+}
+
+#elif defined(_SC_CLK_TCK)      /* by means of unistd.h */
+# include <sys/times.h>
+
+double app_tminterval(int stop, int usertime)
+{
+    double ret = 0;
+    struct tms rus;
+    clock_t now = times(&rus);
+    static clock_t tmstart;
+
+    if (usertime)
+        now = rus.tms_utime;
+
+    if (stop == TM_START) {
+        tmstart = now;
+    } else {
+        long int tck = sysconf(_SC_CLK_TCK);
+        ret = (now - tmstart) / (double)tck;
+    }
+
+    return ret;
+}
+
+#else
+# include <sys/time.h>
+# include <sys/resource.h>
+
+double app_tminterval(int stop, int usertime)
+{
+    double ret = 0;
+    struct rusage rus;
+    struct timeval now;
+    static struct timeval tmstart;
+
+    if (usertime)
+        getrusage(RUSAGE_SELF, &rus), now = rus.ru_utime;
+    else
+        gettimeofday(&now, NULL);
+
+    if (stop == TM_START)
+        tmstart = now;
+    else
+        ret = ((now.tv_sec + now.tv_usec * 1e-6)
+               - (tmstart.tv_sec + tmstart.tv_usec * 1e-6));
+
+    return ret;
+}
+#endif
+
+int app_access(const char* name, int flag)
+{
+#ifdef _WIN32
+    return _access(name, flag);
+#else
+    return access(name, flag);
+#endif
+}
+
+/* app_isdir section */
+#ifdef _WIN32
+int app_isdir(const char *name)
+{
+    DWORD attr;
+# if defined(UNICODE) || defined(_UNICODE)
+    size_t i, len_0 = strlen(name) + 1;
+    WCHAR tempname[MAX_PATH];
+
+    if (len_0 > MAX_PATH)
+        return -1;
+
+#  if !defined(_WIN32_WCE) || _WIN32_WCE>=101
+    if (!MultiByteToWideChar(CP_ACP, 0, name, len_0, tempname, MAX_PATH))
+#  endif
+        for (i = 0; i < len_0; i++)
+            tempname[i] = (WCHAR)name[i];
+
+    attr = GetFileAttributes(tempname);
+# else
+    attr = GetFileAttributes(name);
+# endif
+    if (attr == INVALID_FILE_ATTRIBUTES)
+        return -1;
+    return ((attr & FILE_ATTRIBUTE_DIRECTORY) != 0);
+}
+#else
+# include <sys/stat.h>
+# ifndef S_ISDIR
+#  if defined(_S_IFMT) && defined(_S_IFDIR)
+#   define S_ISDIR(a)   (((a) & _S_IFMT) == _S_IFDIR)
+#  else
+#   define S_ISDIR(a)   (((a) & S_IFMT) == S_IFDIR)
+#  endif
+# endif
+
+int app_isdir(const char *name)
+{
+# if defined(S_ISDIR)
+    struct stat st;
+
+    if (stat(name, &st) == 0)
+        return S_ISDIR(st.st_mode);
+    else
+        return -1;
+# else
+    return -1;
+# endif
+}
+#endif
+
+/* raw_read|write section */
+#if defined(__VMS)
+# include "vms_term_sock.h"
+static int stdin_sock = -1;
+
+static void close_stdin_sock(void)
+{
+    TerminalSocket (TERM_SOCK_DELETE, &stdin_sock);
+}
+
+int fileno_stdin(void)
+{
+    if (stdin_sock == -1) {
+        TerminalSocket(TERM_SOCK_CREATE, &stdin_sock);
+        atexit(close_stdin_sock);
+    }
+
+    return stdin_sock;
+}
+#else
+int fileno_stdin(void)
+{
+    return fileno(stdin);
+}
+#endif
+
+int fileno_stdout(void)
+{
+    return fileno(stdout);
+}
+
+#if defined(_WIN32) && defined(STD_INPUT_HANDLE)
+int raw_read_stdin(void *buf, int siz)
+{
+    DWORD n;
+    if (ReadFile(GetStdHandle(STD_INPUT_HANDLE), buf, siz, &n, NULL))
+        return n;
+    else
+        return -1;
+}
+#elif defined(__VMS)
+# include <sys/socket.h>
+
+int raw_read_stdin(void *buf, int siz)
+{
+    return recv(fileno_stdin(), buf, siz, 0);
+}
+#else
+int raw_read_stdin(void *buf, int siz)
+{
+    return read(fileno_stdin(), buf, siz);
+}
+#endif
+
+#if defined(_WIN32) && defined(STD_OUTPUT_HANDLE)
+int raw_write_stdout(const void *buf, int siz)
+{
+    DWORD n;
+    if (WriteFile(GetStdHandle(STD_OUTPUT_HANDLE), buf, siz, &n, NULL))
+        return n;
+    else
+        return -1;
+}
+#else
+int raw_write_stdout(const void *buf, int siz)
+{
+    return write(fileno_stdout(), buf, siz);
+}
+#endif
+
+/*
+ * Centralized handling if input and output files with format specification
+ * The format is meant to show what the input and output is supposed to be,
+ * and is therefore a show of intent more than anything else.  However, it
+ * does impact behavior on some platform, such as differentiating between
+ * text and binary input/output on non-Unix platforms
+ */
+static int istext(int format)
+{
+    return (format & B_FORMAT_TEXT) == B_FORMAT_TEXT;
+}
+
+BIO *dup_bio_in(int format)
+{
+    return BIO_new_fp(stdin,
+                      BIO_NOCLOSE | (istext(format) ? BIO_FP_TEXT : 0));
+}
+
+static BIO_METHOD *prefix_method = NULL;
+
+BIO *dup_bio_out(int format)
+{
+    BIO *b = BIO_new_fp(stdout,
+                        BIO_NOCLOSE | (istext(format) ? BIO_FP_TEXT : 0));
+    void *prefix = NULL;
+
+#ifdef OPENSSL_SYS_VMS
+    if (istext(format))
+        b = BIO_push(BIO_new(BIO_f_linebuffer()), b);
+#endif
+
+    if (istext(format) && (prefix = getenv("HARNESS_OSSL_PREFIX")) != NULL) {
+        if (prefix_method == NULL)
+            prefix_method = apps_bf_prefix();
+        b = BIO_push(BIO_new(prefix_method), b);
+        BIO_ctrl(b, PREFIX_CTRL_SET_PREFIX, 0, prefix);
+    }
+
+    return b;
+}
+
+BIO *dup_bio_err(int format)
+{
+    BIO *b = BIO_new_fp(stderr,
+                        BIO_NOCLOSE | (istext(format) ? BIO_FP_TEXT : 0));
+#ifdef OPENSSL_SYS_VMS
+    if (istext(format))
+        b = BIO_push(BIO_new(BIO_f_linebuffer()), b);
+#endif
+    return b;
+}
+
+void destroy_prefix_method(void)
+{
+    BIO_meth_free(prefix_method);
+    prefix_method = NULL;
+}
+
+void unbuffer(FILE *fp)
+{
+/*
+ * On VMS, setbuf() will only take 32-bit pointers, and a compilation
+ * with /POINTER_SIZE=64 will give off a MAYLOSEDATA2 warning here.
+ * However, we trust that the C RTL will never give us a FILE pointer
+ * above the first 4 GB of memory, so we simply turn off the warning
+ * temporarily.
+ */
+#if defined(OPENSSL_SYS_VMS) && defined(__DECC)
+# pragma environment save
+# pragma message disable maylosedata2
+#endif
+    setbuf(fp, NULL);
+#if defined(OPENSSL_SYS_VMS) && defined(__DECC)
+# pragma environment restore
+#endif
+}
+
+static const char *modestr(char mode, int format)
+{
+    OPENSSL_assert(mode == 'a' || mode == 'r' || mode == 'w');
+
+    switch (mode) {
+    case 'a':
+        return istext(format) ? "a" : "ab";
+    case 'r':
+        return istext(format) ? "r" : "rb";
+    case 'w':
+        return istext(format) ? "w" : "wb";
+    }
+    /* The assert above should make sure we never reach this point */
+    return NULL;
+}
+
+static const char *modeverb(char mode)
+{
+    switch (mode) {
+    case 'a':
+        return "appending";
+    case 'r':
+        return "reading";
+    case 'w':
+        return "writing";
+    }
+    return "(doing something)";
+}
+
+/*
+ * Open a file for writing, owner-read-only.
+ */
+BIO *bio_open_owner(const char *filename, int format, int private)
+{
+    FILE *fp = NULL;
+    BIO *b = NULL;
+    int fd = -1, bflags, mode, textmode;
+
+    if (!private || filename == NULL || strcmp(filename, "-") == 0)
+        return bio_open_default(filename, 'w', format);
+
+    mode = O_WRONLY;
+#ifdef O_CREAT
+    mode |= O_CREAT;
+#endif
+#ifdef O_TRUNC
+    mode |= O_TRUNC;
+#endif
+    textmode = istext(format);
+    if (!textmode) {
+#ifdef O_BINARY
+        mode |= O_BINARY;
+#elif defined(_O_BINARY)
+        mode |= _O_BINARY;
+#endif
+    }
+
+#ifdef OPENSSL_SYS_VMS
+    /* VMS doesn't have O_BINARY, it just doesn't make sense.  But,
+     * it still needs to know that we're going binary, or fdopen()
+     * will fail with "invalid argument"...  so we tell VMS what the
+     * context is.
+     */
+    if (!textmode)
+        fd = open(filename, mode, 0600, "ctx=bin");
+    else
+#endif
+        fd = open(filename, mode, 0600);
+    if (fd < 0)
+        goto err;
+    fp = fdopen(fd, modestr('w', format));
+    if (fp == NULL)
+        goto err;
+    bflags = BIO_CLOSE;
+    if (textmode)
+        bflags |= BIO_FP_TEXT;
+    b = BIO_new_fp(fp, bflags);
+    if (b)
+        return b;
+
+ err:
+    BIO_printf(bio_err, "%s: Can't open \"%s\" for writing, %s\n",
+               opt_getprog(), filename, strerror(errno));
+    ERR_print_errors(bio_err);
+    /* If we have fp, then fdopen took over fd, so don't close both. */
+    if (fp)
+        fclose(fp);
+    else if (fd >= 0)
+        close(fd);
+    return NULL;
+}
+
+static BIO *bio_open_default_(const char *filename, char mode, int format,
+                              int quiet)
+{
+    BIO *ret;
+
+    if (filename == NULL || strcmp(filename, "-") == 0) {
+        ret = mode == 'r' ? dup_bio_in(format) : dup_bio_out(format);
+        if (quiet) {
+            ERR_clear_error();
+            return ret;
+        }
+        if (ret != NULL)
+            return ret;
+        BIO_printf(bio_err,
+                   "Can't open %s, %s\n",
+                   mode == 'r' ? "stdin" : "stdout", strerror(errno));
+    } else {
+        ret = BIO_new_file(filename, modestr(mode, format));
+        if (quiet) {
+            ERR_clear_error();
+            return ret;
+        }
+        if (ret != NULL)
+            return ret;
+        BIO_printf(bio_err,
+                   "Can't open %s for %s, %s\n",
+                   filename, modeverb(mode), strerror(errno));
+    }
+    ERR_print_errors(bio_err);
+    return NULL;
+}
+
+BIO *bio_open_default(const char *filename, char mode, int format)
+{
+    return bio_open_default_(filename, mode, format, 0);
+}
+
+BIO *bio_open_default_quiet(const char *filename, char mode, int format)
+{
+    return bio_open_default_(filename, mode, format, 1);
+}
+
+void wait_for_async(SSL *s)
+{
+    /* On Windows select only works for sockets, so we simply don't wait  */
+#ifndef OPENSSL_SYS_WINDOWS
+    int width = 0;
+    fd_set asyncfds;
+    OSSL_ASYNC_FD *fds;
+    size_t numfds;
+    size_t i;
+
+    if (!SSL_get_all_async_fds(s, NULL, &numfds))
+        return;
+    if (numfds == 0)
+        return;
+    fds = app_malloc(sizeof(OSSL_ASYNC_FD) * numfds, "allocate async fds");
+    if (!SSL_get_all_async_fds(s, fds, &numfds)) {
+        OPENSSL_free(fds);
+        return;
+    }
+
+    FD_ZERO(&asyncfds);
+    for (i = 0; i < numfds; i++) {
+        if (width <= (int)fds[i])
+            width = (int)fds[i] + 1;
+        openssl_fdset((int)fds[i], &asyncfds);
+    }
+    select(width, (void *)&asyncfds, NULL, NULL, NULL);
+    OPENSSL_free(fds);
+#endif
+}
+
+/* if OPENSSL_SYS_WINDOWS is defined then so is OPENSSL_SYS_MSDOS */
+#if defined(OPENSSL_SYS_MSDOS)
+int has_stdin_waiting(void)
+{
+# if defined(OPENSSL_SYS_WINDOWS)
+    HANDLE inhand = GetStdHandle(STD_INPUT_HANDLE);
+    DWORD events = 0;
+    INPUT_RECORD inputrec;
+    DWORD insize = 1;
+    BOOL peeked;
+
+    if (inhand == INVALID_HANDLE_VALUE) {
+        return 0;
+    }
+
+    peeked = PeekConsoleInput(inhand, &inputrec, insize, &events);
+    if (!peeked) {
+        /* Probably redirected input? _kbhit() does not work in this case */
+        if (!feof(stdin)) {
+            return 1;
+        }
+        return 0;
+    }
+# endif
+    return _kbhit();
+}
+#endif
+
+/* Corrupt a signature by modifying final byte */
+void corrupt_signature(const ASN1_STRING *signature)
+{
+        unsigned char *s = signature->data;
+        s[signature->length - 1] ^= 0x1;
+}
+
+int set_cert_times(X509 *x, const char *startdate, const char *enddate,
+                   int days)
+{
+    if (startdate == NULL || strcmp(startdate, "today") == 0) {
+        if (X509_gmtime_adj(X509_getm_notBefore(x), 0) == NULL)
+            return 0;
+    } else {
+        if (!ASN1_TIME_set_string_X509(X509_getm_notBefore(x), startdate))
+            return 0;
+    }
+    if (enddate == NULL) {
+        if (X509_time_adj_ex(X509_getm_notAfter(x), days, 0, NULL)
+            == NULL)
+            return 0;
+    } else if (!ASN1_TIME_set_string_X509(X509_getm_notAfter(x), enddate)) {
+        return 0;
+    }
+    return 1;
+}
+
+void make_uppercase(char *string)
+{
+    int i;
+
+    for (i = 0; string[i] != '\0'; i++)
+        string[i] = toupper((unsigned char)string[i]);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/apps.h b/trunk/3rdparty/openssl-1.1-fit/apps/apps.h
new file mode 100644
index 000000000..d9eb650eb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/apps.h
@@ -0,0 +1,634 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_APPS_H
+# define HEADER_APPS_H
+
+# include "e_os.h" /* struct timeval for DTLS */
+# include "internal/nelem.h"
+# include <assert.h>
+
+# include <sys/types.h>
+# ifndef OPENSSL_NO_POSIX_IO
+#  include <sys/stat.h>
+#  include <fcntl.h>
+# endif
+
+# include <openssl/e_os2.h>
+# include <openssl/ossl_typ.h>
+# include <openssl/bio.h>
+# include <openssl/x509.h>
+# include <openssl/conf.h>
+# include <openssl/txt_db.h>
+# include <openssl/engine.h>
+# include <openssl/ocsp.h>
+# include <signal.h>
+
+# if defined(OPENSSL_SYS_WIN32) || defined(OPENSSL_SYS_WINCE)
+#  define openssl_fdset(a,b) FD_SET((unsigned int)a, b)
+# else
+#  define openssl_fdset(a,b) FD_SET(a, b)
+# endif
+
+/*
+ * quick macro when you need to pass an unsigned char instead of a char.
+ * this is true for some implementations of the is*() functions, for
+ * example.
+ */
+#define _UC(c) ((unsigned char)(c))
+
+void app_RAND_load_conf(CONF *c, const char *section);
+void app_RAND_write(void);
+
+extern char *default_config_file;
+extern BIO *bio_in;
+extern BIO *bio_out;
+extern BIO *bio_err;
+extern const unsigned char tls13_aes128gcmsha256_id[];
+extern const unsigned char tls13_aes256gcmsha384_id[];
+extern BIO_ADDR *ourpeer;
+
+BIO_METHOD *apps_bf_prefix(void);
+/*
+ * The control used to set the prefix with BIO_ctrl()
+ * We make it high enough so the chance of ever clashing with the BIO library
+ * remains unlikely for the foreseeable future and beyond.
+ */
+#define PREFIX_CTRL_SET_PREFIX  (1 << 15)
+/*
+ * apps_bf_prefix() returns a dynamically created BIO_METHOD, which we
+ * need to destroy at some point.  When created internally, it's stored
+ * in an internal pointer which can be freed with the following function
+ */
+void destroy_prefix_method(void);
+
+BIO *dup_bio_in(int format);
+BIO *dup_bio_out(int format);
+BIO *dup_bio_err(int format);
+BIO *bio_open_owner(const char *filename, int format, int private);
+BIO *bio_open_default(const char *filename, char mode, int format);
+BIO *bio_open_default_quiet(const char *filename, char mode, int format);
+CONF *app_load_config_bio(BIO *in, const char *filename);
+CONF *app_load_config(const char *filename);
+CONF *app_load_config_quiet(const char *filename);
+int app_load_modules(const CONF *config);
+void unbuffer(FILE *fp);
+void wait_for_async(SSL *s);
+# if defined(OPENSSL_SYS_MSDOS)
+int has_stdin_waiting(void);
+# endif
+
+void corrupt_signature(const ASN1_STRING *signature);
+int set_cert_times(X509 *x, const char *startdate, const char *enddate,
+                   int days);
+
+/*
+ * Common verification options.
+ */
+# define OPT_V_ENUM \
+        OPT_V__FIRST=2000, \
+        OPT_V_POLICY, OPT_V_PURPOSE, OPT_V_VERIFY_NAME, OPT_V_VERIFY_DEPTH, \
+        OPT_V_ATTIME, OPT_V_VERIFY_HOSTNAME, OPT_V_VERIFY_EMAIL, \
+        OPT_V_VERIFY_IP, OPT_V_IGNORE_CRITICAL, OPT_V_ISSUER_CHECKS, \
+        OPT_V_CRL_CHECK, OPT_V_CRL_CHECK_ALL, OPT_V_POLICY_CHECK, \
+        OPT_V_EXPLICIT_POLICY, OPT_V_INHIBIT_ANY, OPT_V_INHIBIT_MAP, \
+        OPT_V_X509_STRICT, OPT_V_EXTENDED_CRL, OPT_V_USE_DELTAS, \
+        OPT_V_POLICY_PRINT, OPT_V_CHECK_SS_SIG, OPT_V_TRUSTED_FIRST, \
+        OPT_V_SUITEB_128_ONLY, OPT_V_SUITEB_128, OPT_V_SUITEB_192, \
+        OPT_V_PARTIAL_CHAIN, OPT_V_NO_ALT_CHAINS, OPT_V_NO_CHECK_TIME, \
+        OPT_V_VERIFY_AUTH_LEVEL, OPT_V_ALLOW_PROXY_CERTS, \
+        OPT_V__LAST
+
+# define OPT_V_OPTIONS \
+        { "policy", OPT_V_POLICY, 's', "adds policy to the acceptable policy set"}, \
+        { "purpose", OPT_V_PURPOSE, 's', \
+            "certificate chain purpose"}, \
+        { "verify_name", OPT_V_VERIFY_NAME, 's', "verification policy name"}, \
+        { "verify_depth", OPT_V_VERIFY_DEPTH, 'n', \
+            "chain depth limit" }, \
+        { "auth_level", OPT_V_VERIFY_AUTH_LEVEL, 'n', \
+            "chain authentication security level" }, \
+        { "attime", OPT_V_ATTIME, 'M', "verification epoch time" }, \
+        { "verify_hostname", OPT_V_VERIFY_HOSTNAME, 's', \
+            "expected peer hostname" }, \
+        { "verify_email", OPT_V_VERIFY_EMAIL, 's', \
+            "expected peer email" }, \
+        { "verify_ip", OPT_V_VERIFY_IP, 's', \
+            "expected peer IP address" }, \
+        { "ignore_critical", OPT_V_IGNORE_CRITICAL, '-', \
+            "permit unhandled critical extensions"}, \
+        { "issuer_checks", OPT_V_ISSUER_CHECKS, '-', "(deprecated)"}, \
+        { "crl_check", OPT_V_CRL_CHECK, '-', "check leaf certificate revocation" }, \
+        { "crl_check_all", OPT_V_CRL_CHECK_ALL, '-', "check full chain revocation" }, \
+        { "policy_check", OPT_V_POLICY_CHECK, '-', "perform rfc5280 policy checks"}, \
+        { "explicit_policy", OPT_V_EXPLICIT_POLICY, '-', \
+            "set policy variable require-explicit-policy"}, \
+        { "inhibit_any", OPT_V_INHIBIT_ANY, '-', \
+            "set policy variable inhibit-any-policy"}, \
+        { "inhibit_map", OPT_V_INHIBIT_MAP, '-', \
+            "set policy variable inhibit-policy-mapping"}, \
+        { "x509_strict", OPT_V_X509_STRICT, '-', \
+            "disable certificate compatibility work-arounds"}, \
+        { "extended_crl", OPT_V_EXTENDED_CRL, '-', \
+            "enable extended CRL features"}, \
+        { "use_deltas", OPT_V_USE_DELTAS, '-', \
+            "use delta CRLs"}, \
+        { "policy_print", OPT_V_POLICY_PRINT, '-', \
+            "print policy processing diagnostics"}, \
+        { "check_ss_sig", OPT_V_CHECK_SS_SIG, '-', \
+            "check root CA self-signatures"}, \
+        { "trusted_first", OPT_V_TRUSTED_FIRST, '-', \
+            "search trust store first (default)" }, \
+        { "suiteB_128_only", OPT_V_SUITEB_128_ONLY, '-', "Suite B 128-bit-only mode"}, \
+        { "suiteB_128", OPT_V_SUITEB_128, '-', \
+            "Suite B 128-bit mode allowing 192-bit algorithms"}, \
+        { "suiteB_192", OPT_V_SUITEB_192, '-', "Suite B 192-bit-only mode" }, \
+        { "partial_chain", OPT_V_PARTIAL_CHAIN, '-', \
+            "accept chains anchored by intermediate trust-store CAs"}, \
+        { "no_alt_chains", OPT_V_NO_ALT_CHAINS, '-', "(deprecated)" }, \
+        { "no_check_time", OPT_V_NO_CHECK_TIME, '-', "ignore certificate validity time" }, \
+        { "allow_proxy_certs", OPT_V_ALLOW_PROXY_CERTS, '-', "allow the use of proxy certificates" }
+
+# define OPT_V_CASES \
+        OPT_V__FIRST: case OPT_V__LAST: break; \
+        case OPT_V_POLICY: \
+        case OPT_V_PURPOSE: \
+        case OPT_V_VERIFY_NAME: \
+        case OPT_V_VERIFY_DEPTH: \
+        case OPT_V_VERIFY_AUTH_LEVEL: \
+        case OPT_V_ATTIME: \
+        case OPT_V_VERIFY_HOSTNAME: \
+        case OPT_V_VERIFY_EMAIL: \
+        case OPT_V_VERIFY_IP: \
+        case OPT_V_IGNORE_CRITICAL: \
+        case OPT_V_ISSUER_CHECKS: \
+        case OPT_V_CRL_CHECK: \
+        case OPT_V_CRL_CHECK_ALL: \
+        case OPT_V_POLICY_CHECK: \
+        case OPT_V_EXPLICIT_POLICY: \
+        case OPT_V_INHIBIT_ANY: \
+        case OPT_V_INHIBIT_MAP: \
+        case OPT_V_X509_STRICT: \
+        case OPT_V_EXTENDED_CRL: \
+        case OPT_V_USE_DELTAS: \
+        case OPT_V_POLICY_PRINT: \
+        case OPT_V_CHECK_SS_SIG: \
+        case OPT_V_TRUSTED_FIRST: \
+        case OPT_V_SUITEB_128_ONLY: \
+        case OPT_V_SUITEB_128: \
+        case OPT_V_SUITEB_192: \
+        case OPT_V_PARTIAL_CHAIN: \
+        case OPT_V_NO_ALT_CHAINS: \
+        case OPT_V_NO_CHECK_TIME: \
+        case OPT_V_ALLOW_PROXY_CERTS
+
+/*
+ * Common "extended validation" options.
+ */
+# define OPT_X_ENUM \
+        OPT_X__FIRST=1000, \
+        OPT_X_KEY, OPT_X_CERT, OPT_X_CHAIN, OPT_X_CHAIN_BUILD, \
+        OPT_X_CERTFORM, OPT_X_KEYFORM, \
+        OPT_X__LAST
+
+# define OPT_X_OPTIONS \
+        { "xkey", OPT_X_KEY, '<', "key for Extended certificates"}, \
+        { "xcert", OPT_X_CERT, '<', "cert for Extended certificates"}, \
+        { "xchain", OPT_X_CHAIN, '<', "chain for Extended certificates"}, \
+        { "xchain_build", OPT_X_CHAIN_BUILD, '-', \
+            "build certificate chain for the extended certificates"}, \
+        { "xcertform", OPT_X_CERTFORM, 'F', \
+            "format of Extended certificate (PEM or DER) PEM default " }, \
+        { "xkeyform", OPT_X_KEYFORM, 'F', \
+            "format of Extended certificate's key (PEM or DER) PEM default"}
+
+# define OPT_X_CASES \
+        OPT_X__FIRST: case OPT_X__LAST: break; \
+        case OPT_X_KEY: \
+        case OPT_X_CERT: \
+        case OPT_X_CHAIN: \
+        case OPT_X_CHAIN_BUILD: \
+        case OPT_X_CERTFORM: \
+        case OPT_X_KEYFORM
+
+/*
+ * Common SSL options.
+ * Any changes here must be coordinated with ../ssl/ssl_conf.c
+ */
+# define OPT_S_ENUM \
+        OPT_S__FIRST=3000, \
+        OPT_S_NOSSL3, OPT_S_NOTLS1, OPT_S_NOTLS1_1, OPT_S_NOTLS1_2, \
+        OPT_S_NOTLS1_3, OPT_S_BUGS, OPT_S_NO_COMP, OPT_S_NOTICKET, \
+        OPT_S_SERVERPREF, OPT_S_LEGACYRENEG, OPT_S_LEGACYCONN, \
+        OPT_S_ONRESUMP, OPT_S_NOLEGACYCONN, OPT_S_ALLOW_NO_DHE_KEX, \
+        OPT_S_PRIORITIZE_CHACHA, \
+        OPT_S_STRICT, OPT_S_SIGALGS, OPT_S_CLIENTSIGALGS, OPT_S_GROUPS, \
+        OPT_S_CURVES, OPT_S_NAMEDCURVE, OPT_S_CIPHER, OPT_S_CIPHERSUITES, \
+        OPT_S_RECORD_PADDING, OPT_S_DEBUGBROKE, OPT_S_COMP, \
+        OPT_S_MINPROTO, OPT_S_MAXPROTO, \
+        OPT_S_NO_RENEGOTIATION, OPT_S_NO_MIDDLEBOX, OPT_S__LAST
+
+# define OPT_S_OPTIONS \
+        {"no_ssl3", OPT_S_NOSSL3, '-',"Just disable SSLv3" }, \
+        {"no_tls1", OPT_S_NOTLS1, '-', "Just disable TLSv1"}, \
+        {"no_tls1_1", OPT_S_NOTLS1_1, '-', "Just disable TLSv1.1" }, \
+        {"no_tls1_2", OPT_S_NOTLS1_2, '-', "Just disable TLSv1.2"}, \
+        {"no_tls1_3", OPT_S_NOTLS1_3, '-', "Just disable TLSv1.3"}, \
+        {"bugs", OPT_S_BUGS, '-', "Turn on SSL bug compatibility"}, \
+        {"no_comp", OPT_S_NO_COMP, '-', "Disable SSL/TLS compression (default)" }, \
+        {"comp", OPT_S_COMP, '-', "Use SSL/TLS-level compression" }, \
+        {"no_ticket", OPT_S_NOTICKET, '-', \
+            "Disable use of TLS session tickets"}, \
+        {"serverpref", OPT_S_SERVERPREF, '-', "Use server's cipher preferences"}, \
+        {"legacy_renegotiation", OPT_S_LEGACYRENEG, '-', \
+            "Enable use of legacy renegotiation (dangerous)"}, \
+        {"no_renegotiation", OPT_S_NO_RENEGOTIATION, '-', \
+            "Disable all renegotiation."}, \
+        {"legacy_server_connect", OPT_S_LEGACYCONN, '-', \
+            "Allow initial connection to servers that don't support RI"}, \
+        {"no_resumption_on_reneg", OPT_S_ONRESUMP, '-', \
+            "Disallow session resumption on renegotiation"}, \
+        {"no_legacy_server_connect", OPT_S_NOLEGACYCONN, '-', \
+            "Disallow initial connection to servers that don't support RI"}, \
+        {"allow_no_dhe_kex", OPT_S_ALLOW_NO_DHE_KEX, '-', \
+            "In TLSv1.3 allow non-(ec)dhe based key exchange on resumption"}, \
+        {"prioritize_chacha", OPT_S_PRIORITIZE_CHACHA, '-', \
+            "Prioritize ChaCha ciphers when preferred by clients"}, \
+        {"strict", OPT_S_STRICT, '-', \
+            "Enforce strict certificate checks as per TLS standard"}, \
+        {"sigalgs", OPT_S_SIGALGS, 's', \
+            "Signature algorithms to support (colon-separated list)" }, \
+        {"client_sigalgs", OPT_S_CLIENTSIGALGS, 's', \
+            "Signature algorithms to support for client certificate" \
+            " authentication (colon-separated list)" }, \
+        {"groups", OPT_S_GROUPS, 's', \
+            "Groups to advertise (colon-separated list)" }, \
+        {"curves", OPT_S_CURVES, 's', \
+            "Groups to advertise (colon-separated list)" }, \
+        {"named_curve", OPT_S_NAMEDCURVE, 's', \
+            "Elliptic curve used for ECDHE (server-side only)" }, \
+        {"cipher", OPT_S_CIPHER, 's', "Specify TLSv1.2 and below cipher list to be used"}, \
+        {"ciphersuites", OPT_S_CIPHERSUITES, 's', "Specify TLSv1.3 ciphersuites to be used"}, \
+        {"min_protocol", OPT_S_MINPROTO, 's', "Specify the minimum protocol version to be used"}, \
+        {"max_protocol", OPT_S_MAXPROTO, 's', "Specify the maximum protocol version to be used"}, \
+        {"record_padding", OPT_S_RECORD_PADDING, 's', \
+            "Block size to pad TLS 1.3 records to."}, \
+        {"debug_broken_protocol", OPT_S_DEBUGBROKE, '-', \
+            "Perform all sorts of protocol violations for testing purposes"}, \
+        {"no_middlebox", OPT_S_NO_MIDDLEBOX, '-', \
+            "Disable TLSv1.3 middlebox compat mode" }
+
+# define OPT_S_CASES \
+        OPT_S__FIRST: case OPT_S__LAST: break; \
+        case OPT_S_NOSSL3: \
+        case OPT_S_NOTLS1: \
+        case OPT_S_NOTLS1_1: \
+        case OPT_S_NOTLS1_2: \
+        case OPT_S_NOTLS1_3: \
+        case OPT_S_BUGS: \
+        case OPT_S_NO_COMP: \
+        case OPT_S_COMP: \
+        case OPT_S_NOTICKET: \
+        case OPT_S_SERVERPREF: \
+        case OPT_S_LEGACYRENEG: \
+        case OPT_S_LEGACYCONN: \
+        case OPT_S_ONRESUMP: \
+        case OPT_S_NOLEGACYCONN: \
+        case OPT_S_ALLOW_NO_DHE_KEX: \
+        case OPT_S_PRIORITIZE_CHACHA: \
+        case OPT_S_STRICT: \
+        case OPT_S_SIGALGS: \
+        case OPT_S_CLIENTSIGALGS: \
+        case OPT_S_GROUPS: \
+        case OPT_S_CURVES: \
+        case OPT_S_NAMEDCURVE: \
+        case OPT_S_CIPHER: \
+        case OPT_S_CIPHERSUITES: \
+        case OPT_S_RECORD_PADDING: \
+        case OPT_S_NO_RENEGOTIATION: \
+        case OPT_S_MINPROTO: \
+        case OPT_S_MAXPROTO: \
+        case OPT_S_DEBUGBROKE: \
+        case OPT_S_NO_MIDDLEBOX
+
+#define IS_NO_PROT_FLAG(o) \
+ (o == OPT_S_NOSSL3 || o == OPT_S_NOTLS1 || o == OPT_S_NOTLS1_1 \
+  || o == OPT_S_NOTLS1_2 || o == OPT_S_NOTLS1_3)
+
+/*
+ * Random state options.
+ */
+# define OPT_R_ENUM \
+        OPT_R__FIRST=1500, OPT_R_RAND, OPT_R_WRITERAND, OPT_R__LAST
+
+# define OPT_R_OPTIONS \
+    {"rand", OPT_R_RAND, 's', "Load the file(s) into the random number generator"}, \
+    {"writerand", OPT_R_WRITERAND, '>', "Write random data to the specified file"}
+
+# define OPT_R_CASES \
+        OPT_R__FIRST: case OPT_R__LAST: break; \
+        case OPT_R_RAND: case OPT_R_WRITERAND
+
+/*
+ * Option parsing.
+ */
+extern const char OPT_HELP_STR[];
+extern const char OPT_MORE_STR[];
+typedef struct options_st {
+    const char *name;
+    int retval;
+    /*
+     * value type: - no value (also the value zero), n number, p positive
+     * number, u unsigned, l long, s string, < input file, > output file,
+     * f any format, F der/pem format, E der/pem/engine format identifier.
+     * l, n and u include zero; p does not.
+     */
+    int valtype;
+    const char *helpstr;
+} OPTIONS;
+
+/*
+ * A string/int pairing; widely use for option value lookup, hence the
+ * name OPT_PAIR. But that name is misleading in s_cb.c, so we also use
+ * the "generic" name STRINT_PAIR.
+ */
+typedef struct string_int_pair_st {
+    const char *name;
+    int retval;
+} OPT_PAIR, STRINT_PAIR;
+
+/* Flags to pass into opt_format; see FORMAT_xxx, below. */
+# define OPT_FMT_PEMDER          (1L <<  1)
+# define OPT_FMT_PKCS12          (1L <<  2)
+# define OPT_FMT_SMIME           (1L <<  3)
+# define OPT_FMT_ENGINE          (1L <<  4)
+# define OPT_FMT_MSBLOB          (1L <<  5)
+/* (1L <<  6) was OPT_FMT_NETSCAPE, but wasn't used */
+# define OPT_FMT_NSS             (1L <<  7)
+# define OPT_FMT_TEXT            (1L <<  8)
+# define OPT_FMT_HTTP            (1L <<  9)
+# define OPT_FMT_PVK             (1L << 10)
+# define OPT_FMT_PDE     (OPT_FMT_PEMDER | OPT_FMT_ENGINE)
+# define OPT_FMT_PDS     (OPT_FMT_PEMDER | OPT_FMT_SMIME)
+# define OPT_FMT_ANY     ( \
+        OPT_FMT_PEMDER | OPT_FMT_PKCS12 | OPT_FMT_SMIME | \
+        OPT_FMT_ENGINE | OPT_FMT_MSBLOB | OPT_FMT_NSS   | \
+        OPT_FMT_TEXT   | OPT_FMT_HTTP   | OPT_FMT_PVK)
+
+char *opt_progname(const char *argv0);
+char *opt_getprog(void);
+char *opt_init(int ac, char **av, const OPTIONS * o);
+int opt_next(void);
+int opt_format(const char *s, unsigned long flags, int *result);
+int opt_int(const char *arg, int *result);
+int opt_ulong(const char *arg, unsigned long *result);
+int opt_long(const char *arg, long *result);
+#if defined(__STDC_VERSION__) && __STDC_VERSION__ >= 199901L && \
+    defined(INTMAX_MAX) && defined(UINTMAX_MAX)
+int opt_imax(const char *arg, intmax_t *result);
+int opt_umax(const char *arg, uintmax_t *result);
+#else
+# define opt_imax opt_long
+# define opt_umax opt_ulong
+# define intmax_t long
+# define uintmax_t unsigned long
+#endif
+int opt_pair(const char *arg, const OPT_PAIR * pairs, int *result);
+int opt_cipher(const char *name, const EVP_CIPHER **cipherp);
+int opt_md(const char *name, const EVP_MD **mdp);
+char *opt_arg(void);
+char *opt_flag(void);
+char *opt_unknown(void);
+char **opt_rest(void);
+int opt_num_rest(void);
+int opt_verify(int i, X509_VERIFY_PARAM *vpm);
+int opt_rand(int i);
+void opt_help(const OPTIONS * list);
+int opt_format_error(const char *s, unsigned long flags);
+
+typedef struct args_st {
+    int size;
+    int argc;
+    char **argv;
+} ARGS;
+
+/*
+ * VMS C only for now, implemented in vms_decc_init.c
+ * If other C compilers forget to terminate argv with NULL, this function
+ * can be re-used.
+ */
+char **copy_argv(int *argc, char *argv[]);
+/*
+ * Win32-specific argv initialization that splits OS-supplied UNICODE
+ * command line string to array of UTF8-encoded strings.
+ */
+void win32_utf8argv(int *argc, char **argv[]);
+
+
+# define PW_MIN_LENGTH 4
+typedef struct pw_cb_data {
+    const void *password;
+    const char *prompt_info;
+} PW_CB_DATA;
+
+int password_callback(char *buf, int bufsiz, int verify, PW_CB_DATA *cb_data);
+
+int setup_ui_method(void);
+void destroy_ui_method(void);
+const UI_METHOD *get_ui_method(void);
+
+int chopup_args(ARGS *arg, char *buf);
+# ifdef HEADER_X509_H
+int dump_cert_text(BIO *out, X509 *x);
+void print_name(BIO *out, const char *title, X509_NAME *nm,
+                unsigned long lflags);
+# endif
+void print_bignum_var(BIO *, const BIGNUM *, const char*,
+                      int, unsigned char *);
+void print_array(BIO *, const char *, int, const unsigned char *);
+int set_nameopt(const char *arg);
+unsigned long get_nameopt(void);
+int set_cert_ex(unsigned long *flags, const char *arg);
+int set_name_ex(unsigned long *flags, const char *arg);
+int set_ext_copy(int *copy_type, const char *arg);
+int copy_extensions(X509 *x, X509_REQ *req, int copy_type);
+int app_passwd(const char *arg1, const char *arg2, char **pass1, char **pass2);
+int add_oid_section(CONF *conf);
+X509 *load_cert(const char *file, int format, const char *cert_descrip);
+X509_CRL *load_crl(const char *infile, int format);
+EVP_PKEY *load_key(const char *file, int format, int maybe_stdin,
+                   const char *pass, ENGINE *e, const char *key_descrip);
+EVP_PKEY *load_pubkey(const char *file, int format, int maybe_stdin,
+                      const char *pass, ENGINE *e, const char *key_descrip);
+int load_certs(const char *file, STACK_OF(X509) **certs, int format,
+               const char *pass, const char *cert_descrip);
+int load_crls(const char *file, STACK_OF(X509_CRL) **crls, int format,
+              const char *pass, const char *cert_descrip);
+X509_STORE *setup_verify(const char *CAfile, const char *CApath,
+                         int noCAfile, int noCApath);
+__owur int ctx_set_verify_locations(SSL_CTX *ctx, const char *CAfile,
+                                    const char *CApath, int noCAfile,
+                                    int noCApath);
+
+#ifndef OPENSSL_NO_CT
+
+/*
+ * Sets the file to load the Certificate Transparency log list from.
+ * If path is NULL, loads from the default file path.
+ * Returns 1 on success, 0 otherwise.
+ */
+__owur int ctx_set_ctlog_list_file(SSL_CTX *ctx, const char *path);
+
+#endif
+
+ENGINE *setup_engine(const char *engine, int debug);
+void release_engine(ENGINE *e);
+
+# ifndef OPENSSL_NO_OCSP
+OCSP_RESPONSE *process_responder(OCSP_REQUEST *req,
+                                 const char *host, const char *path,
+                                 const char *port, int use_ssl,
+                                 STACK_OF(CONF_VALUE) *headers,
+                                 int req_timeout);
+# endif
+
+/* Functions defined in ca.c and also used in ocsp.c */
+int unpack_revinfo(ASN1_TIME **prevtm, int *preason, ASN1_OBJECT **phold,
+                   ASN1_GENERALIZEDTIME **pinvtm, const char *str);
+
+# define DB_type         0
+# define DB_exp_date     1
+# define DB_rev_date     2
+# define DB_serial       3      /* index - unique */
+# define DB_file         4
+# define DB_name         5      /* index - unique when active and not
+                                 * disabled */
+# define DB_NUMBER       6
+
+# define DB_TYPE_REV     'R'    /* Revoked  */
+# define DB_TYPE_EXP     'E'    /* Expired  */
+# define DB_TYPE_VAL     'V'    /* Valid ; inserted with: ca ... -valid */
+# define DB_TYPE_SUSP    'S'    /* Suspended  */
+
+typedef struct db_attr_st {
+    int unique_subject;
+} DB_ATTR;
+typedef struct ca_db_st {
+    DB_ATTR attributes;
+    TXT_DB *db;
+    char *dbfname;
+# ifndef OPENSSL_NO_POSIX_IO
+    struct stat dbst;
+# endif
+} CA_DB;
+
+void* app_malloc(int sz, const char *what);
+BIGNUM *load_serial(const char *serialfile, int create, ASN1_INTEGER **retai);
+int save_serial(const char *serialfile, const char *suffix, const BIGNUM *serial,
+                ASN1_INTEGER **retai);
+int rotate_serial(const char *serialfile, const char *new_suffix,
+                  const char *old_suffix);
+int rand_serial(BIGNUM *b, ASN1_INTEGER *ai);
+CA_DB *load_index(const char *dbfile, DB_ATTR *dbattr);
+int index_index(CA_DB *db);
+int save_index(const char *dbfile, const char *suffix, CA_DB *db);
+int rotate_index(const char *dbfile, const char *new_suffix,
+                 const char *old_suffix);
+void free_index(CA_DB *db);
+# define index_name_cmp_noconst(a, b) \
+        index_name_cmp((const OPENSSL_CSTRING *)CHECKED_PTR_OF(OPENSSL_STRING, a), \
+        (const OPENSSL_CSTRING *)CHECKED_PTR_OF(OPENSSL_STRING, b))
+int index_name_cmp(const OPENSSL_CSTRING *a, const OPENSSL_CSTRING *b);
+int parse_yesno(const char *str, int def);
+
+X509_NAME *parse_name(const char *str, long chtype, int multirdn);
+void policies_print(X509_STORE_CTX *ctx);
+int bio_to_mem(unsigned char **out, int maxlen, BIO *in);
+int pkey_ctrl_string(EVP_PKEY_CTX *ctx, const char *value);
+int init_gen_str(EVP_PKEY_CTX **pctx,
+                 const char *algname, ENGINE *e, int do_param);
+int do_X509_sign(X509 *x, EVP_PKEY *pkey, const EVP_MD *md,
+                 STACK_OF(OPENSSL_STRING) *sigopts);
+int do_X509_REQ_sign(X509_REQ *x, EVP_PKEY *pkey, const EVP_MD *md,
+                     STACK_OF(OPENSSL_STRING) *sigopts);
+int do_X509_CRL_sign(X509_CRL *x, EVP_PKEY *pkey, const EVP_MD *md,
+                     STACK_OF(OPENSSL_STRING) *sigopts);
+
+extern char *psk_key;
+
+
+unsigned char *next_protos_parse(size_t *outlen, const char *in);
+
+void print_cert_checks(BIO *bio, X509 *x,
+                       const char *checkhost,
+                       const char *checkemail, const char *checkip);
+
+void store_setup_crl_download(X509_STORE *st);
+
+/* See OPT_FMT_xxx, above. */
+/* On some platforms, it's important to distinguish between text and binary
+ * files.  On some, there might even be specific file formats for different
+ * contents.  The FORMAT_xxx macros are meant to express an intent with the
+ * file being read or created.
+ */
+# define B_FORMAT_TEXT   0x8000
+# define FORMAT_UNDEF    0
+# define FORMAT_TEXT    (1 | B_FORMAT_TEXT)     /* Generic text */
+# define FORMAT_BINARY   2                      /* Generic binary */
+# define FORMAT_BASE64  (3 | B_FORMAT_TEXT)     /* Base64 */
+# define FORMAT_ASN1     4                      /* ASN.1/DER */
+# define FORMAT_PEM     (5 | B_FORMAT_TEXT)
+# define FORMAT_PKCS12   6
+# define FORMAT_SMIME   (7 | B_FORMAT_TEXT)
+# define FORMAT_ENGINE   8                      /* Not really a file format */
+# define FORMAT_PEMRSA  (9 | B_FORMAT_TEXT)     /* PEM RSAPubicKey format */
+# define FORMAT_ASN1RSA  10                     /* DER RSAPubicKey format */
+# define FORMAT_MSBLOB   11                     /* MS Key blob format */
+# define FORMAT_PVK      12                     /* MS PVK file format */
+# define FORMAT_HTTP     13                     /* Download using HTTP */
+# define FORMAT_NSS      14                     /* NSS keylog format */
+
+# define EXT_COPY_NONE   0
+# define EXT_COPY_ADD    1
+# define EXT_COPY_ALL    2
+
+# define NETSCAPE_CERT_HDR       "certificate"
+
+# define APP_PASS_LEN    1024
+
+/*
+ * IETF RFC 5280 says serial number must be <= 20 bytes. Use 159 bits
+ * so that the first bit will never be one, so that the DER encoding
+ * rules won't force a leading octet.
+ */
+# define SERIAL_RAND_BITS        159
+
+int app_isdir(const char *);
+int app_access(const char *, int flag);
+int fileno_stdin(void);
+int fileno_stdout(void);
+int raw_read_stdin(void *, int);
+int raw_write_stdout(const void *, int);
+
+# define TM_START        0
+# define TM_STOP         1
+double app_tminterval(int stop, int usertime);
+
+void make_uppercase(char *string);
+
+typedef struct verify_options_st {
+    int depth;
+    int quiet;
+    int error;
+    int return_error;
+} VERIFY_CB_ARGS;
+
+extern VERIFY_CB_ARGS verify_args;
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/asn1pars.c b/trunk/3rdparty/openssl-1.1-fit/apps/asn1pars.c
new file mode 100644
index 000000000..62c70b9cc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/asn1pars.c
@@ -0,0 +1,357 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/pem.h>
+#include <openssl/asn1t.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_INFORM, OPT_IN, OPT_OUT, OPT_INDENT, OPT_NOOUT,
+    OPT_OID, OPT_OFFSET, OPT_LENGTH, OPT_DUMP, OPT_DLIMIT,
+    OPT_STRPARSE, OPT_GENSTR, OPT_GENCONF, OPT_STRICTPEM,
+    OPT_ITEM
+} OPTION_CHOICE;
+
+const OPTIONS asn1parse_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"inform", OPT_INFORM, 'F', "input format - one of DER PEM"},
+    {"in", OPT_IN, '<', "input file"},
+    {"out", OPT_OUT, '>', "output file (output format is always DER)"},
+    {"i", OPT_INDENT, 0, "indents the output"},
+    {"noout", OPT_NOOUT, 0, "do not produce any output"},
+    {"offset", OPT_OFFSET, 'p', "offset into file"},
+    {"length", OPT_LENGTH, 'p', "length of section in file"},
+    {"oid", OPT_OID, '<', "file of extra oid definitions"},
+    {"dump", OPT_DUMP, 0, "unknown data in hex form"},
+    {"dlimit", OPT_DLIMIT, 'p',
+     "dump the first arg bytes of unknown data in hex form"},
+    {"strparse", OPT_STRPARSE, 'p',
+     "offset; a series of these can be used to 'dig'"},
+    {OPT_MORE_STR, 0, 0, "into multiple ASN1 blob wrappings"},
+    {"genstr", OPT_GENSTR, 's', "string to generate ASN1 structure from"},
+    {"genconf", OPT_GENCONF, 's', "file to generate ASN1 structure from"},
+    {OPT_MORE_STR, 0, 0, "(-inform  will be ignored)"},
+    {"strictpem", OPT_STRICTPEM, 0,
+     "do not attempt base64 decode outside PEM markers"},
+    {"item", OPT_ITEM, 's', "item to parse and print"},
+    {NULL}
+};
+
+static int do_generate(char *genstr, const char *genconf, BUF_MEM *buf);
+
+int asn1parse_main(int argc, char **argv)
+{
+    ASN1_TYPE *at = NULL;
+    BIO *in = NULL, *b64 = NULL, *derout = NULL;
+    BUF_MEM *buf = NULL;
+    STACK_OF(OPENSSL_STRING) *osk = NULL;
+    char *genstr = NULL, *genconf = NULL;
+    char *infile = NULL, *oidfile = NULL, *derfile = NULL;
+    unsigned char *str = NULL;
+    char *name = NULL, *header = NULL, *prog;
+    const unsigned char *ctmpbuf;
+    int indent = 0, noout = 0, dump = 0, strictpem = 0, informat = FORMAT_PEM;
+    int offset = 0, ret = 1, i, j;
+    long num, tmplen;
+    unsigned char *tmpbuf;
+    unsigned int length = 0;
+    OPTION_CHOICE o;
+    const ASN1_ITEM *it = NULL;
+
+    prog = opt_init(argc, argv, asn1parse_options);
+
+    if ((osk = sk_OPENSSL_STRING_new_null()) == NULL) {
+        BIO_printf(bio_err, "%s: Memory allocation failure\n", prog);
+        goto end;
+    }
+
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(asn1parse_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &informat))
+                goto opthelp;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUT:
+            derfile = opt_arg();
+            break;
+        case OPT_INDENT:
+            indent = 1;
+            break;
+        case OPT_NOOUT:
+            noout = 1;
+            break;
+        case OPT_OID:
+            oidfile = opt_arg();
+            break;
+        case OPT_OFFSET:
+            offset = strtol(opt_arg(), NULL, 0);
+            break;
+        case OPT_LENGTH:
+            length = strtol(opt_arg(), NULL, 0);
+            break;
+        case OPT_DUMP:
+            dump = -1;
+            break;
+        case OPT_DLIMIT:
+            dump = strtol(opt_arg(), NULL, 0);
+            break;
+        case OPT_STRPARSE:
+            sk_OPENSSL_STRING_push(osk, opt_arg());
+            break;
+        case OPT_GENSTR:
+            genstr = opt_arg();
+            break;
+        case OPT_GENCONF:
+            genconf = opt_arg();
+            break;
+        case OPT_STRICTPEM:
+            strictpem = 1;
+            informat = FORMAT_PEM;
+            break;
+        case OPT_ITEM:
+            it = ASN1_ITEM_lookup(opt_arg());
+            if (it == NULL) {
+                size_t tmp;
+
+                BIO_printf(bio_err, "Unknown item name %s\n", opt_arg());
+                BIO_puts(bio_err, "Supported types:\n");
+                for (tmp = 0;; tmp++) {
+                    it = ASN1_ITEM_get(tmp);
+                    if (it == NULL)
+                        break;
+                    BIO_printf(bio_err, "    %s\n", it->sname);
+                }
+                goto end;
+            }
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    if (oidfile != NULL) {
+        in = bio_open_default(oidfile, 'r', FORMAT_TEXT);
+        if (in == NULL)
+            goto end;
+        OBJ_create_objects(in);
+        BIO_free(in);
+    }
+
+    if ((in = bio_open_default(infile, 'r', informat)) == NULL)
+        goto end;
+
+    if (derfile && (derout = bio_open_default(derfile, 'w', FORMAT_ASN1)) == NULL)
+        goto end;
+
+    if (strictpem) {
+        if (PEM_read_bio(in, &name, &header, &str, &num) !=
+            1) {
+            BIO_printf(bio_err, "Error reading PEM file\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    } else {
+
+        if ((buf = BUF_MEM_new()) == NULL)
+            goto end;
+        if (!BUF_MEM_grow(buf, BUFSIZ * 8))
+            goto end;           /* Pre-allocate :-) */
+
+        if (genstr || genconf) {
+            num = do_generate(genstr, genconf, buf);
+            if (num < 0) {
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+        } else {
+
+            if (informat == FORMAT_PEM) {
+                BIO *tmp;
+
+                if ((b64 = BIO_new(BIO_f_base64())) == NULL)
+                    goto end;
+                BIO_push(b64, in);
+                tmp = in;
+                in = b64;
+                b64 = tmp;
+            }
+
+            num = 0;
+            for (;;) {
+                if (!BUF_MEM_grow(buf, num + BUFSIZ))
+                    goto end;
+                i = BIO_read(in, &(buf->data[num]), BUFSIZ);
+                if (i <= 0)
+                    break;
+                num += i;
+            }
+        }
+        str = (unsigned char *)buf->data;
+
+    }
+
+    /* If any structs to parse go through in sequence */
+
+    if (sk_OPENSSL_STRING_num(osk)) {
+        tmpbuf = str;
+        tmplen = num;
+        for (i = 0; i < sk_OPENSSL_STRING_num(osk); i++) {
+            ASN1_TYPE *atmp;
+            int typ;
+            j = strtol(sk_OPENSSL_STRING_value(osk, i), NULL, 0);
+            if (j <= 0 || j >= tmplen) {
+                BIO_printf(bio_err, "'%s' is out of range\n",
+                           sk_OPENSSL_STRING_value(osk, i));
+                continue;
+            }
+            tmpbuf += j;
+            tmplen -= j;
+            atmp = at;
+            ctmpbuf = tmpbuf;
+            at = d2i_ASN1_TYPE(NULL, &ctmpbuf, tmplen);
+            ASN1_TYPE_free(atmp);
+            if (!at) {
+                BIO_printf(bio_err, "Error parsing structure\n");
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            typ = ASN1_TYPE_get(at);
+            if ((typ == V_ASN1_OBJECT)
+                || (typ == V_ASN1_BOOLEAN)
+                || (typ == V_ASN1_NULL)) {
+                BIO_printf(bio_err, "Can't parse %s type\n", ASN1_tag2str(typ));
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            /* hmm... this is a little evil but it works */
+            tmpbuf = at->value.asn1_string->data;
+            tmplen = at->value.asn1_string->length;
+        }
+        str = tmpbuf;
+        num = tmplen;
+    }
+
+    if (offset < 0 || offset >= num) {
+        BIO_printf(bio_err, "Error: offset out of range\n");
+        goto end;
+    }
+
+    num -= offset;
+
+    if (length == 0 || length > (unsigned int)num)
+        length = (unsigned int)num;
+    if (derout != NULL) {
+        if (BIO_write(derout, str + offset, length) != (int)length) {
+            BIO_printf(bio_err, "Error writing output\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+    if (!noout) {
+        const unsigned char *p = str + offset;
+
+        if (it != NULL) {
+            ASN1_VALUE *value = ASN1_item_d2i(NULL, &p, length, it);
+            if (value == NULL) {
+                BIO_printf(bio_err, "Error parsing item %s\n", it->sname);
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            ASN1_item_print(bio_out, value, 0, it, NULL);
+            ASN1_item_free(value, it);
+        } else {
+            if (!ASN1_parse_dump(bio_out, p, length, indent, dump)) {
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+        }
+    }
+    ret = 0;
+ end:
+    BIO_free(derout);
+    BIO_free(in);
+    BIO_free(b64);
+    if (ret != 0)
+        ERR_print_errors(bio_err);
+    BUF_MEM_free(buf);
+    OPENSSL_free(name);
+    OPENSSL_free(header);
+    if (strictpem)
+        OPENSSL_free(str);
+    ASN1_TYPE_free(at);
+    sk_OPENSSL_STRING_free(osk);
+    return ret;
+}
+
+static int do_generate(char *genstr, const char *genconf, BUF_MEM *buf)
+{
+    CONF *cnf = NULL;
+    int len;
+    unsigned char *p;
+    ASN1_TYPE *atyp = NULL;
+
+    if (genconf != NULL) {
+        if ((cnf = app_load_config(genconf)) == NULL)
+            goto err;
+        if (genstr == NULL)
+            genstr = NCONF_get_string(cnf, "default", "asn1");
+        if (genstr == NULL) {
+            BIO_printf(bio_err, "Can't find 'asn1' in '%s'\n", genconf);
+            goto err;
+        }
+    }
+
+    atyp = ASN1_generate_nconf(genstr, cnf);
+    NCONF_free(cnf);
+    cnf = NULL;
+
+    if (atyp == NULL)
+        return -1;
+
+    len = i2d_ASN1_TYPE(atyp, NULL);
+
+    if (len <= 0)
+        goto err;
+
+    if (!BUF_MEM_grow(buf, len))
+        goto err;
+
+    p = (unsigned char *)buf->data;
+
+    i2d_ASN1_TYPE(atyp, &p);
+
+    ASN1_TYPE_free(atyp);
+    return len;
+
+ err:
+    NCONF_free(cnf);
+    ASN1_TYPE_free(atyp);
+    return -1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/bf_prefix.c b/trunk/3rdparty/openssl-1.1-fit/apps/bf_prefix.c
new file mode 100644
index 000000000..bae3c91bf
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/bf_prefix.c
@@ -0,0 +1,177 @@
+/*
+ * Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include <errno.h>
+#include <openssl/bio.h>
+#include "apps.h"
+
+static int prefix_write(BIO *b, const char *out, size_t outl,
+                        size_t *numwritten);
+static int prefix_read(BIO *b, char *buf, size_t size, size_t *numread);
+static int prefix_puts(BIO *b, const char *str);
+static int prefix_gets(BIO *b, char *str, int size);
+static long prefix_ctrl(BIO *b, int cmd, long arg1, void *arg2);
+static int prefix_create(BIO *b);
+static int prefix_destroy(BIO *b);
+static long prefix_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp);
+
+static BIO_METHOD *prefix_meth = NULL;
+
+BIO_METHOD *apps_bf_prefix(void)
+{
+    if (prefix_meth == NULL) {
+        if ((prefix_meth =
+             BIO_meth_new(BIO_TYPE_FILTER, "Prefix filter")) == NULL
+            || !BIO_meth_set_create(prefix_meth, prefix_create)
+            || !BIO_meth_set_destroy(prefix_meth, prefix_destroy)
+            || !BIO_meth_set_write_ex(prefix_meth, prefix_write)
+            || !BIO_meth_set_read_ex(prefix_meth, prefix_read)
+            || !BIO_meth_set_puts(prefix_meth, prefix_puts)
+            || !BIO_meth_set_gets(prefix_meth, prefix_gets)
+            || !BIO_meth_set_ctrl(prefix_meth, prefix_ctrl)
+            || !BIO_meth_set_callback_ctrl(prefix_meth, prefix_callback_ctrl)) {
+            BIO_meth_free(prefix_meth);
+            prefix_meth = NULL;
+        }
+    }
+    return prefix_meth;
+}
+
+typedef struct prefix_ctx_st {
+    char *prefix;
+    int linestart;               /* flag to indicate we're at the line start */
+} PREFIX_CTX;
+
+static int prefix_create(BIO *b)
+{
+    PREFIX_CTX *ctx = OPENSSL_zalloc(sizeof(*ctx));
+
+    if (ctx == NULL)
+        return 0;
+
+    ctx->prefix = NULL;
+    ctx->linestart = 1;
+    BIO_set_data(b, ctx);
+    BIO_set_init(b, 1);
+    return 1;
+}
+
+static int prefix_destroy(BIO *b)
+{
+    PREFIX_CTX *ctx = BIO_get_data(b);
+
+    OPENSSL_free(ctx->prefix);
+    OPENSSL_free(ctx);
+    return 1;
+}
+
+static int prefix_read(BIO *b, char *in, size_t size, size_t *numread)
+{
+    return BIO_read_ex(BIO_next(b), in, size, numread);
+}
+
+static int prefix_write(BIO *b, const char *out, size_t outl,
+                        size_t *numwritten)
+{
+    PREFIX_CTX *ctx = BIO_get_data(b);
+
+    if (ctx == NULL)
+        return 0;
+
+    /* If no prefix is set or if it's empty, we've got nothing to do here */
+    if (ctx->prefix == NULL || *ctx->prefix == '\0') {
+        /* We do note if what comes next will be a new line, though */
+        if (outl > 0)
+            ctx->linestart = (out[outl-1] == '\n');
+        return BIO_write_ex(BIO_next(b), out, outl, numwritten);
+    }
+
+    *numwritten = 0;
+
+    while (outl > 0) {
+        size_t i;
+        char c;
+
+        /* If we know that we're at the start of the line, output the prefix */
+        if (ctx->linestart) {
+            size_t dontcare;
+
+            if (!BIO_write_ex(BIO_next(b), ctx->prefix, strlen(ctx->prefix),
+                              &dontcare))
+                return 0;
+            ctx->linestart = 0;
+        }
+
+        /* Now, go look for the next LF, or the end of the string */
+        for (i = 0, c = '\0'; i < outl && (c = out[i]) != '\n'; i++)
+            continue;
+        if (c == '\n')
+            i++;
+
+        /* Output what we found so far */
+        while (i > 0) {
+            size_t num = 0;
+
+            if (!BIO_write_ex(BIO_next(b), out, i, &num))
+                return 0;
+            out += num;
+            outl -= num;
+            *numwritten += num;
+            i -= num;
+        }
+
+        /* If we found a LF, what follows is a new line, so take note */
+        if (c == '\n')
+            ctx->linestart = 1;
+    }
+
+    return 1;
+}
+
+static long prefix_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    long ret = 0;
+
+    switch (cmd) {
+    case PREFIX_CTRL_SET_PREFIX:
+        {
+            PREFIX_CTX *ctx = BIO_get_data(b);
+
+            if (ctx == NULL)
+                break;
+
+            OPENSSL_free(ctx->prefix);
+            ctx->prefix = OPENSSL_strdup((const char *)ptr);
+            ret = ctx->prefix != NULL;
+        }
+        break;
+    default:
+        if (BIO_next(b) != NULL)
+            ret = BIO_ctrl(BIO_next(b), cmd, num, ptr);
+        break;
+    }
+    return ret;
+}
+
+static long prefix_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
+{
+    return BIO_callback_ctrl(BIO_next(b), cmd, fp);
+}
+
+static int prefix_gets(BIO *b, char *buf, int size)
+{
+    return BIO_gets(BIO_next(b), buf, size);
+}
+
+static int prefix_puts(BIO *b, const char *str)
+{
+    return BIO_write(b, str, strlen(str));
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/build.info b/trunk/3rdparty/openssl-1.1-fit/apps/build.info
new file mode 100644
index 000000000..751d8da82
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/build.info
@@ -0,0 +1,38 @@
+{- our @apps_openssl_src =
+       qw(openssl.c
+          asn1pars.c ca.c ciphers.c cms.c crl.c crl2p7.c dgst.c dhparam.c
+          dsa.c dsaparam.c ec.c ecparam.c enc.c engine.c errstr.c gendsa.c
+          genpkey.c genrsa.c nseq.c ocsp.c passwd.c pkcs12.c pkcs7.c pkcs8.c
+          pkey.c pkeyparam.c pkeyutl.c prime.c rand.c req.c rsa.c rsautl.c
+          s_client.c s_server.c s_time.c sess_id.c smime.c speed.c spkac.c
+          srp.c ts.c verify.c version.c x509.c rehash.c storeutl.c);
+   our @apps_lib_src =
+       ( qw(apps.c opt.c s_cb.c s_socket.c app_rand.c bf_prefix.c),
+         split(/\s+/, $target{apps_aux_src}) );
+   our @apps_init_src = split(/\s+/, $target{apps_init_src});
+   "" -}
+IF[{- !$disabled{apps} -}]
+  LIBS_NO_INST=libapps.a
+  SOURCE[libapps.a]={- join(" ", @apps_lib_src) -}
+  INCLUDE[libapps.a]=.. ../include
+
+  PROGRAMS=openssl
+  SOURCE[openssl]={- join(" ", @apps_init_src) -}
+  SOURCE[openssl]={- join(" ", @apps_openssl_src) -}
+  INCLUDE[openssl]=.. ../include
+  DEPEND[openssl]=libapps.a ../libssl
+
+IF[{- $config{target} =~ /^(?:Cygwin|mingw|VC-)/ -}]
+  GENERATE[openssl.rc]=../util/mkrc.pl openssl
+  SOURCE[openssl]=openssl.rc
+ENDIF
+
+  {- join("\n  ", map { (my $x = $_) =~ s|\.c$|.o|; "DEPEND[$x]=progs.h" }
+                  @apps_openssl_src) -}
+  GENERATE[progs.h]=progs.pl $(APPS_OPENSSL)
+  DEPEND[progs.h]=../configdata.pm
+
+  SCRIPTS=CA.pl tsget.pl
+  SOURCE[CA.pl]=CA.pl.in
+  SOURCE[tsget.pl]=tsget.in
+ENDIF
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/ca-cert.srl b/trunk/3rdparty/openssl-1.1-fit/apps/ca-cert.srl
new file mode 100644
index 000000000..2c7456e3e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/ca-cert.srl
@@ -0,0 +1 @@
+07
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/ca-key.pem b/trunk/3rdparty/openssl-1.1-fit/apps/ca-key.pem
new file mode 100644
index 000000000..4e7424906
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/ca-key.pem
@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----
+MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAL4tQNyKy4U2zX6l
+IZvORB1edmwMwIgSB4cgoFECrG5pixzYxKauZkAwKG9/+L4DB8qXRjfXWcvafcOU
+DlYpRROykJ7wGkiqmqbZyrxY8DWjk5ZZQXiSuhYOAJB+Fyfb11JZV6+CvBQX/1g+
+vhJr39Gmp6oAesoYrj90ecozClmnAgMBAAECgYA3j6sSg+5f9hnldUMzbPjTh8Sb
+XsJlPrc6UFrmMBzGiUleXSpe9Dbla+x0XvQCN4pwMvAN4nnWp/f0Su5BV/9Y93nb
+im5ijGNrfN9i6QrnqGCr+MMute+4E8HR2pCScX0mBLDDf40SmDvMzCaxtd21keyr
+9DqHgInQZNEi6NKlkQJBAPCbUTFg6iQ6VTCQ8CsEf5q2xHhuTK23fJ999lvWVxN7
+QsvWb9RP9Ng34HVtvB7Pl6P7FyHLQYiDJhhvYR0L0+kCQQDKV/09Kt6Wjf5Omp1I
+wd3A+tFnipdqnPw+qNHGjevv0hYiEIWQOYbx00zXgaX+WN/pzV9eeNN2XAxlNJ++
+dxcPAkBrzeuPKFFAcjKBVC+H1rgl5gYZv7Hzk+buv02G0H6rZ+sB0c7BXiHiTwbv
+Fn/XfkP/YR14Ms3mEH0dLaphjU8hAkEAh3Ar/rRiN04mCcEuRFQXtaNtZSv8PA2G
+Pf7MI2Y9pdHupLCAZlBLRjTUO2/5hu1AO4QPMPIZQSFN3rRBtMCL+wJAMp/m2hvI
+TmtbMp/IrKGfma09e3yFiCmoNn7cHLJ7jLvXcacV2XNzpr9YHfBxiZo0g9FqZKvv
+PZoQ5B2XJ7bhTQ==
+-----END PRIVATE KEY-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/ca-req.pem b/trunk/3rdparty/openssl-1.1-fit/apps/ca-req.pem
new file mode 100644
index 000000000..84c6dbb68
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/ca-req.pem
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/ca.c b/trunk/3rdparty/openssl-1.1-fit/apps/ca.c
new file mode 100644
index 000000000..69207c066
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/ca.c
@@ -0,0 +1,2606 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <ctype.h>
+#include <sys/types.h>
+#include <openssl/conf.h>
+#include <openssl/bio.h>
+#include <openssl/err.h>
+#include <openssl/bn.h>
+#include <openssl/txt_db.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/objects.h>
+#include <openssl/ocsp.h>
+#include <openssl/pem.h>
+
+#ifndef W_OK
+# ifdef OPENSSL_SYS_VMS
+#  include <unistd.h>
+# elif !defined(OPENSSL_SYS_VXWORKS) && !defined(OPENSSL_SYS_WINDOWS)
+#  include <sys/file.h>
+# endif
+#endif
+
+#include "apps.h"
+#include "progs.h"
+
+#ifndef W_OK
+# define F_OK 0
+# define W_OK 2
+# define R_OK 4
+#endif
+
+#ifndef PATH_MAX
+# define PATH_MAX 4096
+#endif
+
+#define BASE_SECTION            "ca"
+
+#define ENV_DEFAULT_CA          "default_ca"
+
+#define STRING_MASK             "string_mask"
+#define UTF8_IN                 "utf8"
+
+#define ENV_NEW_CERTS_DIR       "new_certs_dir"
+#define ENV_CERTIFICATE         "certificate"
+#define ENV_SERIAL              "serial"
+#define ENV_RAND_SERIAL         "rand_serial"
+#define ENV_CRLNUMBER           "crlnumber"
+#define ENV_PRIVATE_KEY         "private_key"
+#define ENV_DEFAULT_DAYS        "default_days"
+#define ENV_DEFAULT_STARTDATE   "default_startdate"
+#define ENV_DEFAULT_ENDDATE     "default_enddate"
+#define ENV_DEFAULT_CRL_DAYS    "default_crl_days"
+#define ENV_DEFAULT_CRL_HOURS   "default_crl_hours"
+#define ENV_DEFAULT_MD          "default_md"
+#define ENV_DEFAULT_EMAIL_DN    "email_in_dn"
+#define ENV_PRESERVE            "preserve"
+#define ENV_POLICY              "policy"
+#define ENV_EXTENSIONS          "x509_extensions"
+#define ENV_CRLEXT              "crl_extensions"
+#define ENV_MSIE_HACK           "msie_hack"
+#define ENV_NAMEOPT             "name_opt"
+#define ENV_CERTOPT             "cert_opt"
+#define ENV_EXTCOPY             "copy_extensions"
+#define ENV_UNIQUE_SUBJECT      "unique_subject"
+
+#define ENV_DATABASE            "database"
+
+/* Additional revocation information types */
+typedef enum {
+    REV_VALID             = -1, /* Valid (not-revoked) status */
+    REV_NONE              = 0, /* No additional information */
+    REV_CRL_REASON        = 1, /* Value is CRL reason code */
+    REV_HOLD              = 2, /* Value is hold instruction */
+    REV_KEY_COMPROMISE    = 3, /* Value is cert key compromise time */
+    REV_CA_COMPROMISE     = 4  /* Value is CA key compromise time */
+} REVINFO_TYPE;
+
+static char *lookup_conf(const CONF *conf, const char *group, const char *tag);
+
+static int certify(X509 **xret, const char *infile, EVP_PKEY *pkey, X509 *x509,
+                   const EVP_MD *dgst, STACK_OF(OPENSSL_STRING) *sigopts,
+                   STACK_OF(CONF_VALUE) *policy, CA_DB *db,
+                   BIGNUM *serial, const char *subj, unsigned long chtype,
+                   int multirdn, int email_dn, const char *startdate,
+                   const char *enddate,
+                   long days, int batch, const char *ext_sect, CONF *conf,
+                   int verbose, unsigned long certopt, unsigned long nameopt,
+                   int default_op, int ext_copy, int selfsign);
+static int certify_cert(X509 **xret, const char *infile, EVP_PKEY *pkey, X509 *x509,
+                        const EVP_MD *dgst, STACK_OF(OPENSSL_STRING) *sigopts,
+                        STACK_OF(CONF_VALUE) *policy, CA_DB *db,
+                        BIGNUM *serial, const char *subj, unsigned long chtype,
+                        int multirdn, int email_dn, const char *startdate,
+                        const char *enddate, long days, int batch, const char *ext_sect,
+                        CONF *conf, int verbose, unsigned long certopt,
+                        unsigned long nameopt, int default_op, int ext_copy);
+static int certify_spkac(X509 **xret, const char *infile, EVP_PKEY *pkey,
+                         X509 *x509, const EVP_MD *dgst,
+                         STACK_OF(OPENSSL_STRING) *sigopts,
+                         STACK_OF(CONF_VALUE) *policy, CA_DB *db,
+                         BIGNUM *serial, const char *subj, unsigned long chtype,
+                         int multirdn, int email_dn, const char *startdate,
+                         const char *enddate, long days, const char *ext_sect, CONF *conf,
+                         int verbose, unsigned long certopt,
+                         unsigned long nameopt, int default_op, int ext_copy);
+static int do_body(X509 **xret, EVP_PKEY *pkey, X509 *x509,
+                   const EVP_MD *dgst, STACK_OF(OPENSSL_STRING) *sigopts,
+                   STACK_OF(CONF_VALUE) *policy, CA_DB *db, BIGNUM *serial,
+                   const char *subj, unsigned long chtype, int multirdn,
+                   int email_dn, const char *startdate, const char *enddate, long days,
+                   int batch, int verbose, X509_REQ *req, const char *ext_sect,
+                   CONF *conf, unsigned long certopt, unsigned long nameopt,
+                   int default_op, int ext_copy, int selfsign);
+static int get_certificate_status(const char *ser_status, CA_DB *db);
+static int do_updatedb(CA_DB *db);
+static int check_time_format(const char *str);
+static int do_revoke(X509 *x509, CA_DB *db, REVINFO_TYPE rev_type,
+                     const char *extval);
+static char *make_revocation_str(REVINFO_TYPE rev_type, const char *rev_arg);
+static int make_revoked(X509_REVOKED *rev, const char *str);
+static int old_entry_print(const ASN1_OBJECT *obj, const ASN1_STRING *str);
+static void write_new_certificate(BIO *bp, X509 *x, int output_der, int notext);
+
+static CONF *extconf = NULL;
+static int preserve = 0;
+static int msie_hack = 0;
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_ENGINE, OPT_VERBOSE, OPT_CONFIG, OPT_NAME, OPT_SUBJ, OPT_UTF8,
+    OPT_CREATE_SERIAL, OPT_MULTIVALUE_RDN, OPT_STARTDATE, OPT_ENDDATE,
+    OPT_DAYS, OPT_MD, OPT_POLICY, OPT_KEYFILE, OPT_KEYFORM, OPT_PASSIN,
+    OPT_KEY, OPT_CERT, OPT_SELFSIGN, OPT_IN, OPT_OUT, OPT_OUTDIR,
+    OPT_SIGOPT, OPT_NOTEXT, OPT_BATCH, OPT_PRESERVEDN, OPT_NOEMAILDN,
+    OPT_GENCRL, OPT_MSIE_HACK, OPT_CRLDAYS, OPT_CRLHOURS, OPT_CRLSEC,
+    OPT_INFILES, OPT_SS_CERT, OPT_SPKAC, OPT_REVOKE, OPT_VALID,
+    OPT_EXTENSIONS, OPT_EXTFILE, OPT_STATUS, OPT_UPDATEDB, OPT_CRLEXTS,
+    OPT_RAND_SERIAL,
+    OPT_R_ENUM,
+    /* Do not change the order here; see related case statements below */
+    OPT_CRL_REASON, OPT_CRL_HOLD, OPT_CRL_COMPROMISE, OPT_CRL_CA_COMPROMISE
+} OPTION_CHOICE;
+
+const OPTIONS ca_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"verbose", OPT_VERBOSE, '-', "Verbose output during processing"},
+    {"config", OPT_CONFIG, 's', "A config file"},
+    {"name", OPT_NAME, 's', "The particular CA definition to use"},
+    {"subj", OPT_SUBJ, 's', "Use arg instead of request's subject"},
+    {"utf8", OPT_UTF8, '-', "Input characters are UTF8 (default ASCII)"},
+    {"create_serial", OPT_CREATE_SERIAL, '-',
+     "If reading serial fails, create a new random serial"},
+    {"rand_serial", OPT_RAND_SERIAL, '-',
+     "Always create a random serial; do not store it"},
+    {"multivalue-rdn", OPT_MULTIVALUE_RDN, '-',
+     "Enable support for multivalued RDNs"},
+    {"startdate", OPT_STARTDATE, 's', "Cert notBefore, YYMMDDHHMMSSZ"},
+    {"enddate", OPT_ENDDATE, 's',
+     "YYMMDDHHMMSSZ cert notAfter (overrides -days)"},
+    {"days", OPT_DAYS, 'p', "Number of days to certify the cert for"},
+    {"md", OPT_MD, 's', "md to use; one of md2, md5, sha or sha1"},
+    {"policy", OPT_POLICY, 's', "The CA 'policy' to support"},
+    {"keyfile", OPT_KEYFILE, 's', "Private key"},
+    {"keyform", OPT_KEYFORM, 'f', "Private key file format (PEM or ENGINE)"},
+    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
+    {"key", OPT_KEY, 's', "Key to decode the private key if it is encrypted"},
+    {"cert", OPT_CERT, '<', "The CA cert"},
+    {"selfsign", OPT_SELFSIGN, '-',
+     "Sign a cert with the key associated with it"},
+    {"in", OPT_IN, '<', "The input PEM encoded cert request(s)"},
+    {"out", OPT_OUT, '>', "Where to put the output file(s)"},
+    {"outdir", OPT_OUTDIR, '/', "Where to put output cert"},
+    {"sigopt", OPT_SIGOPT, 's', "Signature parameter in n:v form"},
+    {"notext", OPT_NOTEXT, '-', "Do not print the generated certificate"},
+    {"batch", OPT_BATCH, '-', "Don't ask questions"},
+    {"preserveDN", OPT_PRESERVEDN, '-', "Don't re-order the DN"},
+    {"noemailDN", OPT_NOEMAILDN, '-', "Don't add the EMAIL field to the DN"},
+    {"gencrl", OPT_GENCRL, '-', "Generate a new CRL"},
+    {"msie_hack", OPT_MSIE_HACK, '-',
+     "msie modifications to handle all those universal strings"},
+    {"crldays", OPT_CRLDAYS, 'p', "Days until the next CRL is due"},
+    {"crlhours", OPT_CRLHOURS, 'p', "Hours until the next CRL is due"},
+    {"crlsec", OPT_CRLSEC, 'p', "Seconds until the next CRL is due"},
+    {"infiles", OPT_INFILES, '-', "The last argument, requests to process"},
+    {"ss_cert", OPT_SS_CERT, '<', "File contains a self signed cert to sign"},
+    {"spkac", OPT_SPKAC, '<',
+     "File contains DN and signed public key and challenge"},
+    {"revoke", OPT_REVOKE, '<', "Revoke a cert (given in file)"},
+    {"valid", OPT_VALID, 's',
+     "Add a Valid(not-revoked) DB entry about a cert (given in file)"},
+    {"extensions", OPT_EXTENSIONS, 's',
+     "Extension section (override value in config file)"},
+    {"extfile", OPT_EXTFILE, '<',
+     "Configuration file with X509v3 extensions to add"},
+    {"status", OPT_STATUS, 's', "Shows cert status given the serial number"},
+    {"updatedb", OPT_UPDATEDB, '-', "Updates db for expired cert"},
+    {"crlexts", OPT_CRLEXTS, 's',
+     "CRL extension section (override value in config file)"},
+    {"crl_reason", OPT_CRL_REASON, 's', "revocation reason"},
+    {"crl_hold", OPT_CRL_HOLD, 's',
+     "the hold instruction, an OID. Sets revocation reason to certificateHold"},
+    {"crl_compromise", OPT_CRL_COMPROMISE, 's',
+     "sets compromise time to val and the revocation reason to keyCompromise"},
+    {"crl_CA_compromise", OPT_CRL_CA_COMPROMISE, 's',
+     "sets compromise time to val and the revocation reason to CACompromise"},
+    OPT_R_OPTIONS,
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+#endif
+    {NULL}
+};
+
+int ca_main(int argc, char **argv)
+{
+    CONF *conf = NULL;
+    ENGINE *e = NULL;
+    BIGNUM *crlnumber = NULL, *serial = NULL;
+    EVP_PKEY *pkey = NULL;
+    BIO *in = NULL, *out = NULL, *Sout = NULL;
+    ASN1_INTEGER *tmpser;
+    ASN1_TIME *tmptm;
+    CA_DB *db = NULL;
+    DB_ATTR db_attr;
+    STACK_OF(CONF_VALUE) *attribs = NULL;
+    STACK_OF(OPENSSL_STRING) *sigopts = NULL;
+    STACK_OF(X509) *cert_sk = NULL;
+    X509_CRL *crl = NULL;
+    const EVP_MD *dgst = NULL;
+    char *configfile = default_config_file, *section = NULL;
+    char *md = NULL, *policy = NULL, *keyfile = NULL;
+    char *certfile = NULL, *crl_ext = NULL, *crlnumberfile = NULL, *key = NULL;
+    const char *infile = NULL, *spkac_file = NULL, *ss_cert_file = NULL;
+    const char *extensions = NULL, *extfile = NULL, *passinarg = NULL;
+    char *outdir = NULL, *outfile = NULL, *rev_arg = NULL, *ser_status = NULL;
+    const char *serialfile = NULL, *subj = NULL;
+    char *prog, *startdate = NULL, *enddate = NULL;
+    char *dbfile = NULL, *f;
+    char new_cert[PATH_MAX];
+    char tmp[10 + 1] = "\0";
+    char *const *pp;
+    const char *p;
+    size_t outdirlen = 0;
+    int create_ser = 0, free_key = 0, total = 0, total_done = 0;
+    int batch = 0, default_op = 1, doupdatedb = 0, ext_copy = EXT_COPY_NONE;
+    int keyformat = FORMAT_PEM, multirdn = 0, notext = 0, output_der = 0;
+    int ret = 1, email_dn = 1, req = 0, verbose = 0, gencrl = 0, dorevoke = 0;
+    int rand_ser = 0, i, j, selfsign = 0, def_nid, def_ret;
+    long crldays = 0, crlhours = 0, crlsec = 0, days = 0;
+    unsigned long chtype = MBSTRING_ASC, certopt = 0;
+    X509 *x509 = NULL, *x509p = NULL, *x = NULL;
+    REVINFO_TYPE rev_type = REV_NONE;
+    X509_REVOKED *r = NULL;
+    OPTION_CHOICE o;
+
+    prog = opt_init(argc, argv, ca_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(ca_options);
+            ret = 0;
+            goto end;
+        case OPT_IN:
+            req = 1;
+            infile = opt_arg();
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_VERBOSE:
+            verbose = 1;
+            break;
+        case OPT_CONFIG:
+            configfile = opt_arg();
+            break;
+        case OPT_NAME:
+            section = opt_arg();
+            break;
+        case OPT_SUBJ:
+            subj = opt_arg();
+            /* preserve=1; */
+            break;
+        case OPT_UTF8:
+            chtype = MBSTRING_UTF8;
+            break;
+        case OPT_RAND_SERIAL:
+            rand_ser = 1;
+            break;
+        case OPT_CREATE_SERIAL:
+            create_ser = 1;
+            break;
+        case OPT_MULTIVALUE_RDN:
+            multirdn = 1;
+            break;
+        case OPT_STARTDATE:
+            startdate = opt_arg();
+            break;
+        case OPT_ENDDATE:
+            enddate = opt_arg();
+            break;
+        case OPT_DAYS:
+            days = atoi(opt_arg());
+            break;
+        case OPT_MD:
+            md = opt_arg();
+            break;
+        case OPT_POLICY:
+            policy = opt_arg();
+            break;
+        case OPT_KEYFILE:
+            keyfile = opt_arg();
+            break;
+        case OPT_KEYFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_ANY, &keyformat))
+                goto opthelp;
+            break;
+        case OPT_PASSIN:
+            passinarg = opt_arg();
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_KEY:
+            key = opt_arg();
+            break;
+        case OPT_CERT:
+            certfile = opt_arg();
+            break;
+        case OPT_SELFSIGN:
+            selfsign = 1;
+            break;
+        case OPT_OUTDIR:
+            outdir = opt_arg();
+            break;
+        case OPT_SIGOPT:
+            if (sigopts == NULL)
+                sigopts = sk_OPENSSL_STRING_new_null();
+            if (sigopts == NULL || !sk_OPENSSL_STRING_push(sigopts, opt_arg()))
+                goto end;
+            break;
+        case OPT_NOTEXT:
+            notext = 1;
+            break;
+        case OPT_BATCH:
+            batch = 1;
+            break;
+        case OPT_PRESERVEDN:
+            preserve = 1;
+            break;
+        case OPT_NOEMAILDN:
+            email_dn = 0;
+            break;
+        case OPT_GENCRL:
+            gencrl = 1;
+            break;
+        case OPT_MSIE_HACK:
+            msie_hack = 1;
+            break;
+        case OPT_CRLDAYS:
+            crldays = atol(opt_arg());
+            break;
+        case OPT_CRLHOURS:
+            crlhours = atol(opt_arg());
+            break;
+        case OPT_CRLSEC:
+            crlsec = atol(opt_arg());
+            break;
+        case OPT_INFILES:
+            req = 1;
+            goto end_of_options;
+        case OPT_SS_CERT:
+            ss_cert_file = opt_arg();
+            req = 1;
+            break;
+        case OPT_SPKAC:
+            spkac_file = opt_arg();
+            req = 1;
+            break;
+        case OPT_REVOKE:
+            infile = opt_arg();
+            dorevoke = 1;
+            break;
+        case OPT_VALID:
+            infile = opt_arg();
+            dorevoke = 2;
+            break;
+        case OPT_EXTENSIONS:
+            extensions = opt_arg();
+            break;
+        case OPT_EXTFILE:
+            extfile = opt_arg();
+            break;
+        case OPT_STATUS:
+            ser_status = opt_arg();
+            break;
+        case OPT_UPDATEDB:
+            doupdatedb = 1;
+            break;
+        case OPT_CRLEXTS:
+            crl_ext = opt_arg();
+            break;
+        case OPT_CRL_REASON:   /* := REV_CRL_REASON */
+        case OPT_CRL_HOLD:
+        case OPT_CRL_COMPROMISE:
+        case OPT_CRL_CA_COMPROMISE:
+            rev_arg = opt_arg();
+            rev_type = (o - OPT_CRL_REASON) + REV_CRL_REASON;
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        }
+    }
+end_of_options:
+    argc = opt_num_rest();
+    argv = opt_rest();
+
+    BIO_printf(bio_err, "Using configuration from %s\n", configfile);
+
+    if ((conf = app_load_config(configfile)) == NULL)
+        goto end;
+    if (configfile != default_config_file && !app_load_modules(conf))
+        goto end;
+
+    /* Lets get the config section we are using */
+    if (section == NULL
+        && (section = lookup_conf(conf, BASE_SECTION, ENV_DEFAULT_CA)) == NULL)
+        goto end;
+
+    p = NCONF_get_string(conf, NULL, "oid_file");
+    if (p == NULL)
+        ERR_clear_error();
+    if (p != NULL) {
+        BIO *oid_bio = BIO_new_file(p, "r");
+
+        if (oid_bio == NULL) {
+            ERR_clear_error();
+        } else {
+            OBJ_create_objects(oid_bio);
+            BIO_free(oid_bio);
+        }
+    }
+    if (!add_oid_section(conf)) {
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    app_RAND_load_conf(conf, BASE_SECTION);
+
+    f = NCONF_get_string(conf, section, STRING_MASK);
+    if (f == NULL)
+        ERR_clear_error();
+
+    if (f != NULL && !ASN1_STRING_set_default_mask_asc(f)) {
+        BIO_printf(bio_err, "Invalid global string mask setting %s\n", f);
+        goto end;
+    }
+
+    if (chtype != MBSTRING_UTF8) {
+        f = NCONF_get_string(conf, section, UTF8_IN);
+        if (f == NULL)
+            ERR_clear_error();
+        else if (strcmp(f, "yes") == 0)
+            chtype = MBSTRING_UTF8;
+    }
+
+    db_attr.unique_subject = 1;
+    p = NCONF_get_string(conf, section, ENV_UNIQUE_SUBJECT);
+    if (p != NULL)
+        db_attr.unique_subject = parse_yesno(p, 1);
+    else
+        ERR_clear_error();
+
+    /*****************************************************************/
+    /* report status of cert with serial number given on command line */
+    if (ser_status) {
+        dbfile = lookup_conf(conf, section, ENV_DATABASE);
+        if (dbfile == NULL)
+            goto end;
+
+        db = load_index(dbfile, &db_attr);
+        if (db == NULL)
+            goto end;
+
+        if (index_index(db) <= 0)
+            goto end;
+
+        if (get_certificate_status(ser_status, db) != 1)
+            BIO_printf(bio_err, "Error verifying serial %s!\n", ser_status);
+        goto end;
+    }
+
+    /*****************************************************************/
+    /* we definitely need a private key, so let's get it */
+
+    if (keyfile == NULL
+        && (keyfile = lookup_conf(conf, section, ENV_PRIVATE_KEY)) == NULL)
+        goto end;
+
+    if (key == NULL) {
+        free_key = 1;
+        if (!app_passwd(passinarg, NULL, &key, NULL)) {
+            BIO_printf(bio_err, "Error getting password\n");
+            goto end;
+        }
+    }
+    pkey = load_key(keyfile, keyformat, 0, key, e, "CA private key");
+    if (key != NULL)
+        OPENSSL_cleanse(key, strlen(key));
+    if (pkey == NULL)
+        /* load_key() has already printed an appropriate message */
+        goto end;
+
+    /*****************************************************************/
+    /* we need a certificate */
+    if (!selfsign || spkac_file || ss_cert_file || gencrl) {
+        if (certfile == NULL
+            && (certfile = lookup_conf(conf, section, ENV_CERTIFICATE)) == NULL)
+            goto end;
+
+        x509 = load_cert(certfile, FORMAT_PEM, "CA certificate");
+        if (x509 == NULL)
+            goto end;
+
+        if (!X509_check_private_key(x509, pkey)) {
+            BIO_printf(bio_err,
+                       "CA certificate and CA private key do not match\n");
+            goto end;
+        }
+    }
+    if (!selfsign)
+        x509p = x509;
+
+    f = NCONF_get_string(conf, BASE_SECTION, ENV_PRESERVE);
+    if (f == NULL)
+        ERR_clear_error();
+    if ((f != NULL) && ((*f == 'y') || (*f == 'Y')))
+        preserve = 1;
+    f = NCONF_get_string(conf, BASE_SECTION, ENV_MSIE_HACK);
+    if (f == NULL)
+        ERR_clear_error();
+    if ((f != NULL) && ((*f == 'y') || (*f == 'Y')))
+        msie_hack = 1;
+
+    f = NCONF_get_string(conf, section, ENV_NAMEOPT);
+
+    if (f != NULL) {
+        if (!set_nameopt(f)) {
+            BIO_printf(bio_err, "Invalid name options: \"%s\"\n", f);
+            goto end;
+        }
+        default_op = 0;
+    }
+
+    f = NCONF_get_string(conf, section, ENV_CERTOPT);
+
+    if (f != NULL) {
+        if (!set_cert_ex(&certopt, f)) {
+            BIO_printf(bio_err, "Invalid certificate options: \"%s\"\n", f);
+            goto end;
+        }
+        default_op = 0;
+    } else {
+        ERR_clear_error();
+    }
+
+    f = NCONF_get_string(conf, section, ENV_EXTCOPY);
+
+    if (f != NULL) {
+        if (!set_ext_copy(&ext_copy, f)) {
+            BIO_printf(bio_err, "Invalid extension copy option: \"%s\"\n", f);
+            goto end;
+        }
+    } else {
+        ERR_clear_error();
+    }
+
+    /*****************************************************************/
+    /* lookup where to write new certificates */
+    if ((outdir == NULL) && (req)) {
+
+        outdir = NCONF_get_string(conf, section, ENV_NEW_CERTS_DIR);
+        if (outdir == NULL) {
+            BIO_printf(bio_err,
+                       "there needs to be defined a directory for new certificate to be placed in\n");
+            goto end;
+        }
+#ifndef OPENSSL_SYS_VMS
+        /*
+         * outdir is a directory spec, but access() for VMS demands a
+         * filename.  We could use the DEC C routine to convert the
+         * directory syntax to Unix, and give that to app_isdir,
+         * but for now the fopen will catch the error if it's not a
+         * directory
+         */
+        if (app_isdir(outdir) <= 0) {
+            BIO_printf(bio_err, "%s: %s is not a directory\n", prog, outdir);
+            perror(outdir);
+            goto end;
+        }
+#endif
+    }
+
+    /*****************************************************************/
+    /* we need to load the database file */
+    dbfile = lookup_conf(conf, section, ENV_DATABASE);
+    if (dbfile == NULL)
+        goto end;
+
+    db = load_index(dbfile, &db_attr);
+    if (db == NULL)
+        goto end;
+
+    /* Lets check some fields */
+    for (i = 0; i < sk_OPENSSL_PSTRING_num(db->db->data); i++) {
+        pp = sk_OPENSSL_PSTRING_value(db->db->data, i);
+        if ((pp[DB_type][0] != DB_TYPE_REV) && (pp[DB_rev_date][0] != '\0')) {
+            BIO_printf(bio_err,
+                       "entry %d: not revoked yet, but has a revocation date\n",
+                       i + 1);
+            goto end;
+        }
+        if ((pp[DB_type][0] == DB_TYPE_REV) &&
+            !make_revoked(NULL, pp[DB_rev_date])) {
+            BIO_printf(bio_err, " in entry %d\n", i + 1);
+            goto end;
+        }
+        if (!check_time_format((char *)pp[DB_exp_date])) {
+            BIO_printf(bio_err, "entry %d: invalid expiry date\n", i + 1);
+            goto end;
+        }
+        p = pp[DB_serial];
+        j = strlen(p);
+        if (*p == '-') {
+            p++;
+            j--;
+        }
+        if ((j & 1) || (j < 2)) {
+            BIO_printf(bio_err, "entry %d: bad serial number length (%d)\n",
+                       i + 1, j);
+            goto end;
+        }
+        for ( ; *p; p++) {
+            if (!isxdigit(_UC(*p))) {
+                BIO_printf(bio_err,
+                           "entry %d: bad char 0%o '%c' in serial number\n",
+                           i + 1, *p, *p);
+                goto end;
+            }
+        }
+    }
+    if (verbose) {
+        TXT_DB_write(bio_out, db->db);
+        BIO_printf(bio_err, "%d entries loaded from the database\n",
+                   sk_OPENSSL_PSTRING_num(db->db->data));
+        BIO_printf(bio_err, "generating index\n");
+    }
+
+    if (index_index(db) <= 0)
+        goto end;
+
+    /*****************************************************************/
+    /* Update the db file for expired certificates */
+    if (doupdatedb) {
+        if (verbose)
+            BIO_printf(bio_err, "Updating %s ...\n", dbfile);
+
+        i = do_updatedb(db);
+        if (i == -1) {
+            BIO_printf(bio_err, "Malloc failure\n");
+            goto end;
+        } else if (i == 0) {
+            if (verbose)
+                BIO_printf(bio_err, "No entries found to mark expired\n");
+        } else {
+            if (!save_index(dbfile, "new", db))
+                goto end;
+
+            if (!rotate_index(dbfile, "new", "old"))
+                goto end;
+
+            if (verbose)
+                BIO_printf(bio_err, "Done. %d entries marked as expired\n", i);
+        }
+    }
+
+    /*****************************************************************/
+    /* Read extensions config file                                   */
+    if (extfile) {
+        if ((extconf = app_load_config(extfile)) == NULL) {
+            ret = 1;
+            goto end;
+        }
+
+        if (verbose)
+            BIO_printf(bio_err, "Successfully loaded extensions file %s\n",
+                       extfile);
+
+        /* We can have sections in the ext file */
+        if (extensions == NULL) {
+            extensions = NCONF_get_string(extconf, "default", "extensions");
+            if (extensions == NULL)
+                extensions = "default";
+        }
+    }
+
+    /*****************************************************************/
+    if (req || gencrl) {
+        if (spkac_file != NULL) {
+            output_der = 1;
+            batch = 1;
+        }
+    }
+
+    def_ret = EVP_PKEY_get_default_digest_nid(pkey, &def_nid);
+    /*
+     * EVP_PKEY_get_default_digest_nid() returns 2 if the digest is
+     * mandatory for this algorithm.
+     */
+    if (def_ret == 2 && def_nid == NID_undef) {
+        /* The signing algorithm requires there to be no digest */
+        dgst = EVP_md_null();
+    } else if (md == NULL
+               && (md = lookup_conf(conf, section, ENV_DEFAULT_MD)) == NULL) {
+        goto end;
+    } else {
+        if (strcmp(md, "default") == 0) {
+            if (def_ret <= 0) {
+                BIO_puts(bio_err, "no default digest\n");
+                goto end;
+            }
+            md = (char *)OBJ_nid2sn(def_nid);
+        }
+
+        if (!opt_md(md, &dgst))
+            goto end;
+    }
+
+    if (req) {
+        if (email_dn == 1) {
+            char *tmp_email_dn = NULL;
+
+            tmp_email_dn = NCONF_get_string(conf, section, ENV_DEFAULT_EMAIL_DN);
+            if (tmp_email_dn != NULL && strcmp(tmp_email_dn, "no") == 0)
+                email_dn = 0;
+        }
+        if (verbose)
+            BIO_printf(bio_err, "message digest is %s\n",
+                       OBJ_nid2ln(EVP_MD_type(dgst)));
+        if (policy == NULL
+            && (policy = lookup_conf(conf, section, ENV_POLICY)) == NULL)
+            goto end;
+
+        if (verbose)
+            BIO_printf(bio_err, "policy is %s\n", policy);
+
+        if (NCONF_get_string(conf, section, ENV_RAND_SERIAL) != NULL) {
+            rand_ser = 1;
+        } else {
+            serialfile = lookup_conf(conf, section, ENV_SERIAL);
+            if (serialfile == NULL)
+                goto end;
+        }
+
+        if (extconf == NULL) {
+            /*
+             * no '-extfile' option, so we look for extensions in the main
+             * configuration file
+             */
+            if (extensions == NULL) {
+                extensions = NCONF_get_string(conf, section, ENV_EXTENSIONS);
+                if (extensions == NULL)
+                    ERR_clear_error();
+            }
+            if (extensions != NULL) {
+                /* Check syntax of file */
+                X509V3_CTX ctx;
+                X509V3_set_ctx_test(&ctx);
+                X509V3_set_nconf(&ctx, conf);
+                if (!X509V3_EXT_add_nconf(conf, &ctx, extensions, NULL)) {
+                    BIO_printf(bio_err,
+                               "Error Loading extension section %s\n",
+                               extensions);
+                    ret = 1;
+                    goto end;
+                }
+            }
+        }
+
+        if (startdate == NULL) {
+            startdate = NCONF_get_string(conf, section, ENV_DEFAULT_STARTDATE);
+            if (startdate == NULL)
+                ERR_clear_error();
+        }
+        if (startdate != NULL && !ASN1_TIME_set_string_X509(NULL, startdate)) {
+            BIO_printf(bio_err,
+                       "start date is invalid, it should be YYMMDDHHMMSSZ or YYYYMMDDHHMMSSZ\n");
+            goto end;
+        }
+        if (startdate == NULL)
+            startdate = "today";
+
+        if (enddate == NULL) {
+            enddate = NCONF_get_string(conf, section, ENV_DEFAULT_ENDDATE);
+            if (enddate == NULL)
+                ERR_clear_error();
+        }
+        if (enddate != NULL && !ASN1_TIME_set_string_X509(NULL, enddate)) {
+            BIO_printf(bio_err,
+                       "end date is invalid, it should be YYMMDDHHMMSSZ or YYYYMMDDHHMMSSZ\n");
+            goto end;
+        }
+
+        if (days == 0) {
+            if (!NCONF_get_number(conf, section, ENV_DEFAULT_DAYS, &days))
+                days = 0;
+        }
+        if (enddate == NULL && days == 0) {
+            BIO_printf(bio_err, "cannot lookup how many days to certify for\n");
+            goto end;
+        }
+
+        if (rand_ser) {
+            if ((serial = BN_new()) == NULL || !rand_serial(serial, NULL)) {
+                BIO_printf(bio_err, "error generating serial number\n");
+                goto end;
+            }
+        } else {
+            if ((serial = load_serial(serialfile, create_ser, NULL)) == NULL) {
+                BIO_printf(bio_err, "error while loading serial number\n");
+                goto end;
+            }
+            if (verbose) {
+                if (BN_is_zero(serial)) {
+                    BIO_printf(bio_err, "next serial number is 00\n");
+                } else {
+                    if ((f = BN_bn2hex(serial)) == NULL)
+                        goto end;
+                    BIO_printf(bio_err, "next serial number is %s\n", f);
+                    OPENSSL_free(f);
+                }
+            }
+        }
+
+        if ((attribs = NCONF_get_section(conf, policy)) == NULL) {
+            BIO_printf(bio_err, "unable to find 'section' for %s\n", policy);
+            goto end;
+        }
+
+        if ((cert_sk = sk_X509_new_null()) == NULL) {
+            BIO_printf(bio_err, "Memory allocation failure\n");
+            goto end;
+        }
+        if (spkac_file != NULL) {
+            total++;
+            j = certify_spkac(&x, spkac_file, pkey, x509, dgst, sigopts,
+                              attribs, db, serial, subj, chtype, multirdn,
+                              email_dn, startdate, enddate, days, extensions,
+                              conf, verbose, certopt, get_nameopt(), default_op,
+                              ext_copy);
+            if (j < 0)
+                goto end;
+            if (j > 0) {
+                total_done++;
+                BIO_printf(bio_err, "\n");
+                if (!BN_add_word(serial, 1))
+                    goto end;
+                if (!sk_X509_push(cert_sk, x)) {
+                    BIO_printf(bio_err, "Memory allocation failure\n");
+                    goto end;
+                }
+            }
+        }
+        if (ss_cert_file != NULL) {
+            total++;
+            j = certify_cert(&x, ss_cert_file, pkey, x509, dgst, sigopts,
+                             attribs,
+                             db, serial, subj, chtype, multirdn, email_dn,
+                             startdate, enddate, days, batch, extensions,
+                             conf, verbose, certopt, get_nameopt(), default_op,
+                             ext_copy);
+            if (j < 0)
+                goto end;
+            if (j > 0) {
+                total_done++;
+                BIO_printf(bio_err, "\n");
+                if (!BN_add_word(serial, 1))
+                    goto end;
+                if (!sk_X509_push(cert_sk, x)) {
+                    BIO_printf(bio_err, "Memory allocation failure\n");
+                    goto end;
+                }
+            }
+        }
+        if (infile != NULL) {
+            total++;
+            j = certify(&x, infile, pkey, x509p, dgst, sigopts, attribs, db,
+                        serial, subj, chtype, multirdn, email_dn, startdate,
+                        enddate, days, batch, extensions, conf, verbose,
+                        certopt, get_nameopt(), default_op, ext_copy, selfsign);
+            if (j < 0)
+                goto end;
+            if (j > 0) {
+                total_done++;
+                BIO_printf(bio_err, "\n");
+                if (!BN_add_word(serial, 1))
+                    goto end;
+                if (!sk_X509_push(cert_sk, x)) {
+                    BIO_printf(bio_err, "Memory allocation failure\n");
+                    goto end;
+                }
+            }
+        }
+        for (i = 0; i < argc; i++) {
+            total++;
+            j = certify(&x, argv[i], pkey, x509p, dgst, sigopts, attribs, db,
+                        serial, subj, chtype, multirdn, email_dn, startdate,
+                        enddate, days, batch, extensions, conf, verbose,
+                        certopt, get_nameopt(), default_op, ext_copy, selfsign);
+            if (j < 0)
+                goto end;
+            if (j > 0) {
+                total_done++;
+                BIO_printf(bio_err, "\n");
+                if (!BN_add_word(serial, 1)) {
+                    X509_free(x);
+                    goto end;
+                }
+                if (!sk_X509_push(cert_sk, x)) {
+                    BIO_printf(bio_err, "Memory allocation failure\n");
+                    X509_free(x);
+                    goto end;
+                }
+            }
+        }
+        /*
+         * we have a stack of newly certified certificates and a data base
+         * and serial number that need updating
+         */
+
+        if (sk_X509_num(cert_sk) > 0) {
+            if (!batch) {
+                BIO_printf(bio_err,
+                           "\n%d out of %d certificate requests certified, commit? [y/n]",
+                           total_done, total);
+                (void)BIO_flush(bio_err);
+                tmp[0] = '\0';
+                if (fgets(tmp, sizeof(tmp), stdin) == NULL) {
+                    BIO_printf(bio_err, "CERTIFICATION CANCELED: I/O error\n");
+                    ret = 0;
+                    goto end;
+                }
+                if (tmp[0] != 'y' && tmp[0] != 'Y') {
+                    BIO_printf(bio_err, "CERTIFICATION CANCELED\n");
+                    ret = 0;
+                    goto end;
+                }
+            }
+
+            BIO_printf(bio_err, "Write out database with %d new entries\n",
+                       sk_X509_num(cert_sk));
+
+            if (serialfile != NULL
+                    && !save_serial(serialfile, "new", serial, NULL))
+                goto end;
+
+            if (!save_index(dbfile, "new", db))
+                goto end;
+        }
+
+        outdirlen = OPENSSL_strlcpy(new_cert, outdir, sizeof(new_cert));
+#ifndef OPENSSL_SYS_VMS
+        outdirlen = OPENSSL_strlcat(new_cert, "/", sizeof(new_cert));
+#endif
+
+        if (verbose)
+            BIO_printf(bio_err, "writing new certificates\n");
+
+        for (i = 0; i < sk_X509_num(cert_sk); i++) {
+            BIO *Cout = NULL;
+            X509 *xi = sk_X509_value(cert_sk, i);
+            ASN1_INTEGER *serialNumber = X509_get_serialNumber(xi);
+            const unsigned char *psn = ASN1_STRING_get0_data(serialNumber);
+            const int snl = ASN1_STRING_length(serialNumber);
+            const int filen_len = 2 * (snl > 0 ? snl : 1) + sizeof(".pem");
+            char *n = new_cert + outdirlen;
+
+            if (outdirlen + filen_len > PATH_MAX) {
+                BIO_printf(bio_err, "certificate file name too long\n");
+                goto end;
+            }
+
+            if (snl > 0) {
+                static const char HEX_DIGITS[] = "0123456789ABCDEF";
+
+                for (j = 0; j < snl; j++, psn++) {
+                    *n++ = HEX_DIGITS[*psn >> 4];
+                    *n++ = HEX_DIGITS[*psn & 0x0F];
+                }
+            } else {
+                *(n++) = '0';
+                *(n++) = '0';
+            }
+            *(n++) = '.';
+            *(n++) = 'p';
+            *(n++) = 'e';
+            *(n++) = 'm';
+            *n = '\0';          /* closing new_cert */
+            if (verbose)
+                BIO_printf(bio_err, "writing %s\n", new_cert);
+
+            Sout = bio_open_default(outfile, 'w',
+                                    output_der ? FORMAT_ASN1 : FORMAT_TEXT);
+            if (Sout == NULL)
+                goto end;
+
+            Cout = BIO_new_file(new_cert, "w");
+            if (Cout == NULL) {
+                perror(new_cert);
+                goto end;
+            }
+            write_new_certificate(Cout, xi, 0, notext);
+            write_new_certificate(Sout, xi, output_der, notext);
+            BIO_free_all(Cout);
+            BIO_free_all(Sout);
+            Sout = NULL;
+        }
+
+        if (sk_X509_num(cert_sk)) {
+            /* Rename the database and the serial file */
+            if (serialfile != NULL
+                    && !rotate_serial(serialfile, "new", "old"))
+                goto end;
+
+            if (!rotate_index(dbfile, "new", "old"))
+                goto end;
+
+            BIO_printf(bio_err, "Data Base Updated\n");
+        }
+    }
+
+    /*****************************************************************/
+    if (gencrl) {
+        int crl_v2 = 0;
+        if (crl_ext == NULL) {
+            crl_ext = NCONF_get_string(conf, section, ENV_CRLEXT);
+            if (crl_ext == NULL)
+                ERR_clear_error();
+        }
+        if (crl_ext != NULL) {
+            /* Check syntax of file */
+            X509V3_CTX ctx;
+            X509V3_set_ctx_test(&ctx);
+            X509V3_set_nconf(&ctx, conf);
+            if (!X509V3_EXT_add_nconf(conf, &ctx, crl_ext, NULL)) {
+                BIO_printf(bio_err,
+                           "Error Loading CRL extension section %s\n", crl_ext);
+                ret = 1;
+                goto end;
+            }
+        }
+
+        if ((crlnumberfile = NCONF_get_string(conf, section, ENV_CRLNUMBER))
+            != NULL)
+            if ((crlnumber = load_serial(crlnumberfile, 0, NULL)) == NULL) {
+                BIO_printf(bio_err, "error while loading CRL number\n");
+                goto end;
+            }
+
+        if (!crldays && !crlhours && !crlsec) {
+            if (!NCONF_get_number(conf, section,
+                                  ENV_DEFAULT_CRL_DAYS, &crldays))
+                crldays = 0;
+            if (!NCONF_get_number(conf, section,
+                                  ENV_DEFAULT_CRL_HOURS, &crlhours))
+                crlhours = 0;
+            ERR_clear_error();
+        }
+        if ((crldays == 0) && (crlhours == 0) && (crlsec == 0)) {
+            BIO_printf(bio_err,
+                       "cannot lookup how long until the next CRL is issued\n");
+            goto end;
+        }
+
+        if (verbose)
+            BIO_printf(bio_err, "making CRL\n");
+        if ((crl = X509_CRL_new()) == NULL)
+            goto end;
+        if (!X509_CRL_set_issuer_name(crl, X509_get_subject_name(x509)))
+            goto end;
+
+        tmptm = ASN1_TIME_new();
+        if (tmptm == NULL
+                || X509_gmtime_adj(tmptm, 0) == NULL
+                || !X509_CRL_set1_lastUpdate(crl, tmptm)
+                || X509_time_adj_ex(tmptm, crldays, crlhours * 60 * 60 + crlsec,
+                                    NULL) == NULL) {
+            BIO_puts(bio_err, "error setting CRL nextUpdate\n");
+            ASN1_TIME_free(tmptm);
+            goto end;
+        }
+        X509_CRL_set1_nextUpdate(crl, tmptm);
+
+        ASN1_TIME_free(tmptm);
+
+        for (i = 0; i < sk_OPENSSL_PSTRING_num(db->db->data); i++) {
+            pp = sk_OPENSSL_PSTRING_value(db->db->data, i);
+            if (pp[DB_type][0] == DB_TYPE_REV) {
+                if ((r = X509_REVOKED_new()) == NULL)
+                    goto end;
+                j = make_revoked(r, pp[DB_rev_date]);
+                if (!j)
+                    goto end;
+                if (j == 2)
+                    crl_v2 = 1;
+                if (!BN_hex2bn(&serial, pp[DB_serial]))
+                    goto end;
+                tmpser = BN_to_ASN1_INTEGER(serial, NULL);
+                BN_free(serial);
+                serial = NULL;
+                if (!tmpser)
+                    goto end;
+                X509_REVOKED_set_serialNumber(r, tmpser);
+                ASN1_INTEGER_free(tmpser);
+                X509_CRL_add0_revoked(crl, r);
+            }
+        }
+
+        /*
+         * sort the data so it will be written in serial number order
+         */
+        X509_CRL_sort(crl);
+
+        /* we now have a CRL */
+        if (verbose)
+            BIO_printf(bio_err, "signing CRL\n");
+
+        /* Add any extensions asked for */
+
+        if (crl_ext != NULL || crlnumberfile != NULL) {
+            X509V3_CTX crlctx;
+            X509V3_set_ctx(&crlctx, x509, NULL, NULL, crl, 0);
+            X509V3_set_nconf(&crlctx, conf);
+
+            if (crl_ext != NULL)
+                if (!X509V3_EXT_CRL_add_nconf(conf, &crlctx, crl_ext, crl))
+                    goto end;
+            if (crlnumberfile != NULL) {
+                tmpser = BN_to_ASN1_INTEGER(crlnumber, NULL);
+                if (!tmpser)
+                    goto end;
+                X509_CRL_add1_ext_i2d(crl, NID_crl_number, tmpser, 0, 0);
+                ASN1_INTEGER_free(tmpser);
+                crl_v2 = 1;
+                if (!BN_add_word(crlnumber, 1))
+                    goto end;
+            }
+        }
+        if (crl_ext != NULL || crl_v2) {
+            if (!X509_CRL_set_version(crl, 1))
+                goto end;       /* version 2 CRL */
+        }
+
+        /* we have a CRL number that need updating */
+        if (crlnumberfile != NULL
+                && !save_serial(crlnumberfile, "new", crlnumber, NULL))
+            goto end;
+
+        BN_free(crlnumber);
+        crlnumber = NULL;
+
+        if (!do_X509_CRL_sign(crl, pkey, dgst, sigopts))
+            goto end;
+
+        Sout = bio_open_default(outfile, 'w',
+                                output_der ? FORMAT_ASN1 : FORMAT_TEXT);
+        if (Sout == NULL)
+            goto end;
+
+        PEM_write_bio_X509_CRL(Sout, crl);
+
+        /* Rename the crlnumber file */
+        if (crlnumberfile != NULL
+                && !rotate_serial(crlnumberfile, "new", "old"))
+            goto end;
+
+    }
+    /*****************************************************************/
+    if (dorevoke) {
+        if (infile == NULL) {
+            BIO_printf(bio_err, "no input files\n");
+            goto end;
+        } else {
+            X509 *revcert;
+            revcert = load_cert(infile, FORMAT_PEM, infile);
+            if (revcert == NULL)
+                goto end;
+            if (dorevoke == 2)
+                rev_type = REV_VALID;
+            j = do_revoke(revcert, db, rev_type, rev_arg);
+            if (j <= 0)
+                goto end;
+            X509_free(revcert);
+
+            if (!save_index(dbfile, "new", db))
+                goto end;
+
+            if (!rotate_index(dbfile, "new", "old"))
+                goto end;
+
+            BIO_printf(bio_err, "Data Base Updated\n");
+        }
+    }
+    ret = 0;
+
+ end:
+    if (ret)
+        ERR_print_errors(bio_err);
+    BIO_free_all(Sout);
+    BIO_free_all(out);
+    BIO_free_all(in);
+    sk_X509_pop_free(cert_sk, X509_free);
+
+    if (free_key)
+        OPENSSL_free(key);
+    BN_free(serial);
+    BN_free(crlnumber);
+    free_index(db);
+    sk_OPENSSL_STRING_free(sigopts);
+    EVP_PKEY_free(pkey);
+    X509_free(x509);
+    X509_CRL_free(crl);
+    NCONF_free(conf);
+    NCONF_free(extconf);
+    release_engine(e);
+    return ret;
+}
+
+static char *lookup_conf(const CONF *conf, const char *section, const char *tag)
+{
+    char *entry = NCONF_get_string(conf, section, tag);
+    if (entry == NULL)
+        BIO_printf(bio_err, "variable lookup failed for %s::%s\n", section, tag);
+    return entry;
+}
+
+static int certify(X509 **xret, const char *infile, EVP_PKEY *pkey, X509 *x509,
+                   const EVP_MD *dgst, STACK_OF(OPENSSL_STRING) *sigopts,
+                   STACK_OF(CONF_VALUE) *policy, CA_DB *db,
+                   BIGNUM *serial, const char *subj, unsigned long chtype,
+                   int multirdn, int email_dn, const char *startdate,
+                   const char *enddate,
+                   long days, int batch, const char *ext_sect, CONF *lconf,
+                   int verbose, unsigned long certopt, unsigned long nameopt,
+                   int default_op, int ext_copy, int selfsign)
+{
+    X509_REQ *req = NULL;
+    BIO *in = NULL;
+    EVP_PKEY *pktmp = NULL;
+    int ok = -1, i;
+
+    in = BIO_new_file(infile, "r");
+    if (in == NULL) {
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+    if ((req = PEM_read_bio_X509_REQ(in, NULL, NULL, NULL)) == NULL) {
+        BIO_printf(bio_err, "Error reading certificate request in %s\n",
+                   infile);
+        goto end;
+    }
+    if (verbose)
+        X509_REQ_print_ex(bio_err, req, nameopt, X509_FLAG_COMPAT);
+
+    BIO_printf(bio_err, "Check that the request matches the signature\n");
+
+    if (selfsign && !X509_REQ_check_private_key(req, pkey)) {
+        BIO_printf(bio_err,
+                   "Certificate request and CA private key do not match\n");
+        ok = 0;
+        goto end;
+    }
+    if ((pktmp = X509_REQ_get0_pubkey(req)) == NULL) {
+        BIO_printf(bio_err, "error unpacking public key\n");
+        goto end;
+    }
+    i = X509_REQ_verify(req, pktmp);
+    pktmp = NULL;
+    if (i < 0) {
+        ok = 0;
+        BIO_printf(bio_err, "Signature verification problems....\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+    if (i == 0) {
+        ok = 0;
+        BIO_printf(bio_err,
+                   "Signature did not match the certificate request\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    } else {
+        BIO_printf(bio_err, "Signature ok\n");
+    }
+
+    ok = do_body(xret, pkey, x509, dgst, sigopts, policy, db, serial, subj,
+                 chtype, multirdn, email_dn, startdate, enddate, days, batch,
+                 verbose, req, ext_sect, lconf, certopt, nameopt, default_op,
+                 ext_copy, selfsign);
+
+ end:
+    X509_REQ_free(req);
+    BIO_free(in);
+    return ok;
+}
+
+static int certify_cert(X509 **xret, const char *infile, EVP_PKEY *pkey, X509 *x509,
+                        const EVP_MD *dgst, STACK_OF(OPENSSL_STRING) *sigopts,
+                        STACK_OF(CONF_VALUE) *policy, CA_DB *db,
+                        BIGNUM *serial, const char *subj, unsigned long chtype,
+                        int multirdn, int email_dn, const char *startdate,
+                        const char *enddate, long days, int batch, const char *ext_sect,
+                        CONF *lconf, int verbose, unsigned long certopt,
+                        unsigned long nameopt, int default_op, int ext_copy)
+{
+    X509 *req = NULL;
+    X509_REQ *rreq = NULL;
+    EVP_PKEY *pktmp = NULL;
+    int ok = -1, i;
+
+    if ((req = load_cert(infile, FORMAT_PEM, infile)) == NULL)
+        goto end;
+    if (verbose)
+        X509_print(bio_err, req);
+
+    BIO_printf(bio_err, "Check that the request matches the signature\n");
+
+    if ((pktmp = X509_get0_pubkey(req)) == NULL) {
+        BIO_printf(bio_err, "error unpacking public key\n");
+        goto end;
+    }
+    i = X509_verify(req, pktmp);
+    if (i < 0) {
+        ok = 0;
+        BIO_printf(bio_err, "Signature verification problems....\n");
+        goto end;
+    }
+    if (i == 0) {
+        ok = 0;
+        BIO_printf(bio_err, "Signature did not match the certificate\n");
+        goto end;
+    } else {
+        BIO_printf(bio_err, "Signature ok\n");
+    }
+
+    if ((rreq = X509_to_X509_REQ(req, NULL, NULL)) == NULL)
+        goto end;
+
+    ok = do_body(xret, pkey, x509, dgst, sigopts, policy, db, serial, subj,
+                 chtype, multirdn, email_dn, startdate, enddate, days, batch,
+                 verbose, rreq, ext_sect, lconf, certopt, nameopt, default_op,
+                 ext_copy, 0);
+
+ end:
+    X509_REQ_free(rreq);
+    X509_free(req);
+    return ok;
+}
+
+static int do_body(X509 **xret, EVP_PKEY *pkey, X509 *x509,
+                   const EVP_MD *dgst, STACK_OF(OPENSSL_STRING) *sigopts,
+                   STACK_OF(CONF_VALUE) *policy, CA_DB *db, BIGNUM *serial,
+                   const char *subj, unsigned long chtype, int multirdn,
+                   int email_dn, const char *startdate, const char *enddate, long days,
+                   int batch, int verbose, X509_REQ *req, const char *ext_sect,
+                   CONF *lconf, unsigned long certopt, unsigned long nameopt,
+                   int default_op, int ext_copy, int selfsign)
+{
+    X509_NAME *name = NULL, *CAname = NULL, *subject = NULL;
+    const ASN1_TIME *tm;
+    ASN1_STRING *str, *str2;
+    ASN1_OBJECT *obj;
+    X509 *ret = NULL;
+    X509_NAME_ENTRY *ne, *tne;
+    EVP_PKEY *pktmp;
+    int ok = -1, i, j, last, nid;
+    const char *p;
+    CONF_VALUE *cv;
+    OPENSSL_STRING row[DB_NUMBER];
+    OPENSSL_STRING *irow = NULL;
+    OPENSSL_STRING *rrow = NULL;
+    char buf[25];
+
+    for (i = 0; i < DB_NUMBER; i++)
+        row[i] = NULL;
+
+    if (subj) {
+        X509_NAME *n = parse_name(subj, chtype, multirdn);
+
+        if (!n) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        X509_REQ_set_subject_name(req, n);
+        X509_NAME_free(n);
+    }
+
+    if (default_op)
+        BIO_printf(bio_err, "The Subject's Distinguished Name is as follows\n");
+
+    name = X509_REQ_get_subject_name(req);
+    for (i = 0; i < X509_NAME_entry_count(name); i++) {
+        ne = X509_NAME_get_entry(name, i);
+        str = X509_NAME_ENTRY_get_data(ne);
+        obj = X509_NAME_ENTRY_get_object(ne);
+        nid = OBJ_obj2nid(obj);
+
+        if (msie_hack) {
+            /* assume all type should be strings */
+
+            if (str->type == V_ASN1_UNIVERSALSTRING)
+                ASN1_UNIVERSALSTRING_to_string(str);
+
+            if (str->type == V_ASN1_IA5STRING && nid != NID_pkcs9_emailAddress)
+                str->type = V_ASN1_T61STRING;
+
+            if (nid == NID_pkcs9_emailAddress
+                && str->type == V_ASN1_PRINTABLESTRING)
+                str->type = V_ASN1_IA5STRING;
+        }
+
+        /* If no EMAIL is wanted in the subject */
+        if (nid == NID_pkcs9_emailAddress && !email_dn)
+            continue;
+
+        /* check some things */
+        if (nid == NID_pkcs9_emailAddress && str->type != V_ASN1_IA5STRING) {
+            BIO_printf(bio_err,
+                       "\nemailAddress type needs to be of type IA5STRING\n");
+            goto end;
+        }
+        if (str->type != V_ASN1_BMPSTRING && str->type != V_ASN1_UTF8STRING) {
+            j = ASN1_PRINTABLE_type(str->data, str->length);
+            if ((j == V_ASN1_T61STRING && str->type != V_ASN1_T61STRING) ||
+                (j == V_ASN1_IA5STRING && str->type == V_ASN1_PRINTABLESTRING))
+            {
+                BIO_printf(bio_err,
+                           "\nThe string contains characters that are illegal for the ASN.1 type\n");
+                goto end;
+            }
+        }
+
+        if (default_op)
+            old_entry_print(obj, str);
+    }
+
+    /* Ok, now we check the 'policy' stuff. */
+    if ((subject = X509_NAME_new()) == NULL) {
+        BIO_printf(bio_err, "Memory allocation failure\n");
+        goto end;
+    }
+
+    /* take a copy of the issuer name before we mess with it. */
+    if (selfsign)
+        CAname = X509_NAME_dup(name);
+    else
+        CAname = X509_NAME_dup(X509_get_subject_name(x509));
+    if (CAname == NULL)
+        goto end;
+    str = str2 = NULL;
+
+    for (i = 0; i < sk_CONF_VALUE_num(policy); i++) {
+        cv = sk_CONF_VALUE_value(policy, i); /* get the object id */
+        if ((j = OBJ_txt2nid(cv->name)) == NID_undef) {
+            BIO_printf(bio_err,
+                       "%s:unknown object type in 'policy' configuration\n",
+                       cv->name);
+            goto end;
+        }
+        obj = OBJ_nid2obj(j);
+
+        last = -1;
+        for (;;) {
+            X509_NAME_ENTRY *push = NULL;
+
+            /* lookup the object in the supplied name list */
+            j = X509_NAME_get_index_by_OBJ(name, obj, last);
+            if (j < 0) {
+                if (last != -1)
+                    break;
+                tne = NULL;
+            } else {
+                tne = X509_NAME_get_entry(name, j);
+            }
+            last = j;
+
+            /* depending on the 'policy', decide what to do. */
+            if (strcmp(cv->value, "optional") == 0) {
+                if (tne != NULL)
+                    push = tne;
+            } else if (strcmp(cv->value, "supplied") == 0) {
+                if (tne == NULL) {
+                    BIO_printf(bio_err,
+                               "The %s field needed to be supplied and was missing\n",
+                               cv->name);
+                    goto end;
+                } else {
+                    push = tne;
+                }
+            } else if (strcmp(cv->value, "match") == 0) {
+                int last2;
+
+                if (tne == NULL) {
+                    BIO_printf(bio_err,
+                               "The mandatory %s field was missing\n",
+                               cv->name);
+                    goto end;
+                }
+
+                last2 = -1;
+
+ again2:
+                j = X509_NAME_get_index_by_OBJ(CAname, obj, last2);
+                if ((j < 0) && (last2 == -1)) {
+                    BIO_printf(bio_err,
+                               "The %s field does not exist in the CA certificate,\n"
+                               "the 'policy' is misconfigured\n", cv->name);
+                    goto end;
+                }
+                if (j >= 0) {
+                    push = X509_NAME_get_entry(CAname, j);
+                    str = X509_NAME_ENTRY_get_data(tne);
+                    str2 = X509_NAME_ENTRY_get_data(push);
+                    last2 = j;
+                    if (ASN1_STRING_cmp(str, str2) != 0)
+                        goto again2;
+                }
+                if (j < 0) {
+                    BIO_printf(bio_err,
+                               "The %s field is different between\n"
+                               "CA certificate (%s) and the request (%s)\n",
+                               cv->name,
+                               ((str2 == NULL) ? "NULL" : (char *)str2->data),
+                               ((str == NULL) ? "NULL" : (char *)str->data));
+                    goto end;
+                }
+            } else {
+                BIO_printf(bio_err,
+                           "%s:invalid type in 'policy' configuration\n",
+                           cv->value);
+                goto end;
+            }
+
+            if (push != NULL) {
+                if (!X509_NAME_add_entry(subject, push, -1, 0)) {
+                    BIO_printf(bio_err, "Memory allocation failure\n");
+                    goto end;
+                }
+            }
+            if (j < 0)
+                break;
+        }
+    }
+
+    if (preserve) {
+        X509_NAME_free(subject);
+        /* subject=X509_NAME_dup(X509_REQ_get_subject_name(req)); */
+        subject = X509_NAME_dup(name);
+        if (subject == NULL)
+            goto end;
+    }
+
+    /* We are now totally happy, lets make and sign the certificate */
+    if (verbose)
+        BIO_printf(bio_err,
+                   "Everything appears to be ok, creating and signing the certificate\n");
+
+    if ((ret = X509_new()) == NULL)
+        goto end;
+
+#ifdef X509_V3
+    /* Make it an X509 v3 certificate. */
+    if (!X509_set_version(ret, 2))
+        goto end;
+#endif
+
+    if (BN_to_ASN1_INTEGER(serial, X509_get_serialNumber(ret)) == NULL)
+        goto end;
+    if (selfsign) {
+        if (!X509_set_issuer_name(ret, subject))
+            goto end;
+    } else {
+        if (!X509_set_issuer_name(ret, X509_get_subject_name(x509)))
+            goto end;
+    }
+
+    if (!set_cert_times(ret, startdate, enddate, days))
+        goto end;
+
+    if (enddate != NULL) {
+        int tdays;
+
+        if (!ASN1_TIME_diff(&tdays, NULL, NULL, X509_get0_notAfter(ret)))
+            goto end;
+        days = tdays;
+    }
+
+    if (!X509_set_subject_name(ret, subject))
+        goto end;
+
+    pktmp = X509_REQ_get0_pubkey(req);
+    i = X509_set_pubkey(ret, pktmp);
+    if (!i)
+        goto end;
+
+    /* Lets add the extensions, if there are any */
+    if (ext_sect) {
+        X509V3_CTX ctx;
+
+        /* Initialize the context structure */
+        if (selfsign)
+            X509V3_set_ctx(&ctx, ret, ret, req, NULL, 0);
+        else
+            X509V3_set_ctx(&ctx, x509, ret, req, NULL, 0);
+
+        if (extconf != NULL) {
+            if (verbose)
+                BIO_printf(bio_err, "Extra configuration file found\n");
+
+            /* Use the extconf configuration db LHASH */
+            X509V3_set_nconf(&ctx, extconf);
+
+            /* Test the structure (needed?) */
+            /* X509V3_set_ctx_test(&ctx); */
+
+            /* Adds exts contained in the configuration file */
+            if (!X509V3_EXT_add_nconf(extconf, &ctx, ext_sect, ret)) {
+                BIO_printf(bio_err,
+                           "ERROR: adding extensions in section %s\n",
+                           ext_sect);
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            if (verbose)
+                BIO_printf(bio_err,
+                           "Successfully added extensions from file.\n");
+        } else if (ext_sect) {
+            /* We found extensions to be set from config file */
+            X509V3_set_nconf(&ctx, lconf);
+
+            if (!X509V3_EXT_add_nconf(lconf, &ctx, ext_sect, ret)) {
+                BIO_printf(bio_err,
+                           "ERROR: adding extensions in section %s\n",
+                           ext_sect);
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+
+            if (verbose)
+                BIO_printf(bio_err,
+                           "Successfully added extensions from config\n");
+        }
+    }
+
+    /* Copy extensions from request (if any) */
+
+    if (!copy_extensions(ret, req, ext_copy)) {
+        BIO_printf(bio_err, "ERROR: adding extensions from request\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    {
+        const STACK_OF(X509_EXTENSION) *exts = X509_get0_extensions(ret);
+
+        if (exts != NULL && sk_X509_EXTENSION_num(exts) > 0)
+            /* Make it an X509 v3 certificate. */
+            if (!X509_set_version(ret, 2))
+                goto end;
+    }
+
+    if (verbose)
+        BIO_printf(bio_err,
+                   "The subject name appears to be ok, checking data base for clashes\n");
+
+    /* Build the correct Subject if no e-mail is wanted in the subject. */
+    if (!email_dn) {
+        X509_NAME_ENTRY *tmpne;
+        X509_NAME *dn_subject;
+
+        /*
+         * Its best to dup the subject DN and then delete any email addresses
+         * because this retains its structure.
+         */
+        if ((dn_subject = X509_NAME_dup(subject)) == NULL) {
+            BIO_printf(bio_err, "Memory allocation failure\n");
+            goto end;
+        }
+        i = -1;
+        while ((i = X509_NAME_get_index_by_NID(dn_subject,
+                                               NID_pkcs9_emailAddress,
+                                               i)) >= 0) {
+            tmpne = X509_NAME_delete_entry(dn_subject, i--);
+            X509_NAME_ENTRY_free(tmpne);
+        }
+
+        if (!X509_set_subject_name(ret, dn_subject)) {
+            X509_NAME_free(dn_subject);
+            goto end;
+        }
+        X509_NAME_free(dn_subject);
+    }
+
+    row[DB_name] = X509_NAME_oneline(X509_get_subject_name(ret), NULL, 0);
+    if (row[DB_name] == NULL) {
+        BIO_printf(bio_err, "Memory allocation failure\n");
+        goto end;
+    }
+
+    if (BN_is_zero(serial))
+        row[DB_serial] = OPENSSL_strdup("00");
+    else
+        row[DB_serial] = BN_bn2hex(serial);
+    if (row[DB_serial] == NULL) {
+        BIO_printf(bio_err, "Memory allocation failure\n");
+        goto end;
+    }
+
+    if (row[DB_name][0] == '\0') {
+        /*
+         * An empty subject! We'll use the serial number instead. If
+         * unique_subject is in use then we don't want different entries with
+         * empty subjects matching each other.
+         */
+        OPENSSL_free(row[DB_name]);
+        row[DB_name] = OPENSSL_strdup(row[DB_serial]);
+        if (row[DB_name] == NULL) {
+            BIO_printf(bio_err, "Memory allocation failure\n");
+            goto end;
+        }
+    }
+
+    if (db->attributes.unique_subject) {
+        OPENSSL_STRING *crow = row;
+
+        rrow = TXT_DB_get_by_index(db->db, DB_name, crow);
+        if (rrow != NULL) {
+            BIO_printf(bio_err,
+                       "ERROR:There is already a certificate for %s\n",
+                       row[DB_name]);
+        }
+    }
+    if (rrow == NULL) {
+        rrow = TXT_DB_get_by_index(db->db, DB_serial, row);
+        if (rrow != NULL) {
+            BIO_printf(bio_err,
+                       "ERROR:Serial number %s has already been issued,\n",
+                       row[DB_serial]);
+            BIO_printf(bio_err,
+                       "      check the database/serial_file for corruption\n");
+        }
+    }
+
+    if (rrow != NULL) {
+        BIO_printf(bio_err, "The matching entry has the following details\n");
+        if (rrow[DB_type][0] == DB_TYPE_EXP)
+            p = "Expired";
+        else if (rrow[DB_type][0] == DB_TYPE_REV)
+            p = "Revoked";
+        else if (rrow[DB_type][0] == DB_TYPE_VAL)
+            p = "Valid";
+        else
+            p = "\ninvalid type, Data base error\n";
+        BIO_printf(bio_err, "Type          :%s\n", p);;
+        if (rrow[DB_type][0] == DB_TYPE_REV) {
+            p = rrow[DB_exp_date];
+            if (p == NULL)
+                p = "undef";
+            BIO_printf(bio_err, "Was revoked on:%s\n", p);
+        }
+        p = rrow[DB_exp_date];
+        if (p == NULL)
+            p = "undef";
+        BIO_printf(bio_err, "Expires on    :%s\n", p);
+        p = rrow[DB_serial];
+        if (p == NULL)
+            p = "undef";
+        BIO_printf(bio_err, "Serial Number :%s\n", p);
+        p = rrow[DB_file];
+        if (p == NULL)
+            p = "undef";
+        BIO_printf(bio_err, "File name     :%s\n", p);
+        p = rrow[DB_name];
+        if (p == NULL)
+            p = "undef";
+        BIO_printf(bio_err, "Subject Name  :%s\n", p);
+        ok = -1;                /* This is now a 'bad' error. */
+        goto end;
+    }
+
+    if (!default_op) {
+        BIO_printf(bio_err, "Certificate Details:\n");
+        /*
+         * Never print signature details because signature not present
+         */
+        certopt |= X509_FLAG_NO_SIGDUMP | X509_FLAG_NO_SIGNAME;
+        X509_print_ex(bio_err, ret, nameopt, certopt);
+    }
+
+    BIO_printf(bio_err, "Certificate is to be certified until ");
+    ASN1_TIME_print(bio_err, X509_get0_notAfter(ret));
+    if (days)
+        BIO_printf(bio_err, " (%ld days)", days);
+    BIO_printf(bio_err, "\n");
+
+    if (!batch) {
+
+        BIO_printf(bio_err, "Sign the certificate? [y/n]:");
+        (void)BIO_flush(bio_err);
+        buf[0] = '\0';
+        if (fgets(buf, sizeof(buf), stdin) == NULL) {
+            BIO_printf(bio_err,
+                       "CERTIFICATE WILL NOT BE CERTIFIED: I/O error\n");
+            ok = 0;
+            goto end;
+        }
+        if (!(buf[0] == 'y' || buf[0] == 'Y')) {
+            BIO_printf(bio_err, "CERTIFICATE WILL NOT BE CERTIFIED\n");
+            ok = 0;
+            goto end;
+        }
+    }
+
+    pktmp = X509_get0_pubkey(ret);
+    if (EVP_PKEY_missing_parameters(pktmp) &&
+        !EVP_PKEY_missing_parameters(pkey))
+        EVP_PKEY_copy_parameters(pktmp, pkey);
+
+    if (!do_X509_sign(ret, pkey, dgst, sigopts))
+        goto end;
+
+    /* We now just add it to the database as DB_TYPE_VAL('V') */
+    row[DB_type] = OPENSSL_strdup("V");
+    tm = X509_get0_notAfter(ret);
+    row[DB_exp_date] = app_malloc(tm->length + 1, "row expdate");
+    memcpy(row[DB_exp_date], tm->data, tm->length);
+    row[DB_exp_date][tm->length] = '\0';
+    row[DB_rev_date] = NULL;
+    row[DB_file] = OPENSSL_strdup("unknown");
+    if ((row[DB_type] == NULL) || (row[DB_exp_date] == NULL) ||
+        (row[DB_file] == NULL) || (row[DB_name] == NULL)) {
+        BIO_printf(bio_err, "Memory allocation failure\n");
+        goto end;
+    }
+
+    irow = app_malloc(sizeof(*irow) * (DB_NUMBER + 1), "row space");
+    for (i = 0; i < DB_NUMBER; i++)
+        irow[i] = row[i];
+    irow[DB_NUMBER] = NULL;
+
+    if (!TXT_DB_insert(db->db, irow)) {
+        BIO_printf(bio_err, "failed to update database\n");
+        BIO_printf(bio_err, "TXT_DB error number %ld\n", db->db->error);
+        goto end;
+    }
+    irow = NULL;
+    ok = 1;
+ end:
+    if (ok != 1) {
+        for (i = 0; i < DB_NUMBER; i++)
+            OPENSSL_free(row[i]);
+    }
+    OPENSSL_free(irow);
+
+    X509_NAME_free(CAname);
+    X509_NAME_free(subject);
+    if (ok <= 0)
+        X509_free(ret);
+    else
+        *xret = ret;
+    return ok;
+}
+
+static void write_new_certificate(BIO *bp, X509 *x, int output_der, int notext)
+{
+
+    if (output_der) {
+        (void)i2d_X509_bio(bp, x);
+        return;
+    }
+    if (!notext)
+        X509_print(bp, x);
+    PEM_write_bio_X509(bp, x);
+}
+
+static int certify_spkac(X509 **xret, const char *infile, EVP_PKEY *pkey,
+                         X509 *x509, const EVP_MD *dgst,
+                         STACK_OF(OPENSSL_STRING) *sigopts,
+                         STACK_OF(CONF_VALUE) *policy, CA_DB *db,
+                         BIGNUM *serial, const char *subj, unsigned long chtype,
+                         int multirdn, int email_dn, const char *startdate,
+                         const char *enddate, long days, const char *ext_sect,
+                         CONF *lconf, int verbose, unsigned long certopt,
+                         unsigned long nameopt, int default_op, int ext_copy)
+{
+    STACK_OF(CONF_VALUE) *sk = NULL;
+    LHASH_OF(CONF_VALUE) *parms = NULL;
+    X509_REQ *req = NULL;
+    CONF_VALUE *cv = NULL;
+    NETSCAPE_SPKI *spki = NULL;
+    char *type, *buf;
+    EVP_PKEY *pktmp = NULL;
+    X509_NAME *n = NULL;
+    X509_NAME_ENTRY *ne = NULL;
+    int ok = -1, i, j;
+    long errline;
+    int nid;
+
+    /*
+     * Load input file into a hash table.  (This is just an easy
+     * way to read and parse the file, then put it into a convenient
+     * STACK format).
+     */
+    parms = CONF_load(NULL, infile, &errline);
+    if (parms == NULL) {
+        BIO_printf(bio_err, "error on line %ld of %s\n", errline, infile);
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    sk = CONF_get_section(parms, "default");
+    if (sk_CONF_VALUE_num(sk) == 0) {
+        BIO_printf(bio_err, "no name/value pairs found in %s\n", infile);
+        goto end;
+    }
+
+    /*
+     * Now create a dummy X509 request structure.  We don't actually
+     * have an X509 request, but we have many of the components
+     * (a public key, various DN components).  The idea is that we
+     * put these components into the right X509 request structure
+     * and we can use the same code as if you had a real X509 request.
+     */
+    req = X509_REQ_new();
+    if (req == NULL) {
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    /*
+     * Build up the subject name set.
+     */
+    n = X509_REQ_get_subject_name(req);
+
+    for (i = 0;; i++) {
+        if (sk_CONF_VALUE_num(sk) <= i)
+            break;
+
+        cv = sk_CONF_VALUE_value(sk, i);
+        type = cv->name;
+        /*
+         * Skip past any leading X. X: X, etc to allow for multiple instances
+         */
+        for (buf = cv->name; *buf; buf++)
+            if ((*buf == ':') || (*buf == ',') || (*buf == '.')) {
+                buf++;
+                if (*buf)
+                    type = buf;
+                break;
+            }
+
+        buf = cv->value;
+        if ((nid = OBJ_txt2nid(type)) == NID_undef) {
+            if (strcmp(type, "SPKAC") == 0) {
+                spki = NETSCAPE_SPKI_b64_decode(cv->value, -1);
+                if (spki == NULL) {
+                    BIO_printf(bio_err,
+                               "unable to load Netscape SPKAC structure\n");
+                    ERR_print_errors(bio_err);
+                    goto end;
+                }
+            }
+            continue;
+        }
+
+        if (!X509_NAME_add_entry_by_NID(n, nid, chtype,
+                                        (unsigned char *)buf, -1, -1, 0))
+            goto end;
+    }
+    if (spki == NULL) {
+        BIO_printf(bio_err, "Netscape SPKAC structure not found in %s\n",
+                   infile);
+        goto end;
+    }
+
+    /*
+     * Now extract the key from the SPKI structure.
+     */
+
+    BIO_printf(bio_err, "Check that the SPKAC request matches the signature\n");
+
+    if ((pktmp = NETSCAPE_SPKI_get_pubkey(spki)) == NULL) {
+        BIO_printf(bio_err, "error unpacking SPKAC public key\n");
+        goto end;
+    }
+
+    j = NETSCAPE_SPKI_verify(spki, pktmp);
+    if (j <= 0) {
+        EVP_PKEY_free(pktmp);
+        BIO_printf(bio_err,
+                   "signature verification failed on SPKAC public key\n");
+        goto end;
+    }
+    BIO_printf(bio_err, "Signature ok\n");
+
+    X509_REQ_set_pubkey(req, pktmp);
+    EVP_PKEY_free(pktmp);
+    ok = do_body(xret, pkey, x509, dgst, sigopts, policy, db, serial, subj,
+                 chtype, multirdn, email_dn, startdate, enddate, days, 1,
+                 verbose, req, ext_sect, lconf, certopt, nameopt, default_op,
+                 ext_copy, 0);
+ end:
+    X509_REQ_free(req);
+    CONF_free(parms);
+    NETSCAPE_SPKI_free(spki);
+    X509_NAME_ENTRY_free(ne);
+
+    return ok;
+}
+
+static int check_time_format(const char *str)
+{
+    return ASN1_TIME_set_string(NULL, str);
+}
+
+static int do_revoke(X509 *x509, CA_DB *db, REVINFO_TYPE rev_type,
+                     const char *value)
+{
+    const ASN1_TIME *tm = NULL;
+    char *row[DB_NUMBER], **rrow, **irow;
+    char *rev_str = NULL;
+    BIGNUM *bn = NULL;
+    int ok = -1, i;
+
+    for (i = 0; i < DB_NUMBER; i++)
+        row[i] = NULL;
+    row[DB_name] = X509_NAME_oneline(X509_get_subject_name(x509), NULL, 0);
+    bn = ASN1_INTEGER_to_BN(X509_get_serialNumber(x509), NULL);
+    if (!bn)
+        goto end;
+    if (BN_is_zero(bn))
+        row[DB_serial] = OPENSSL_strdup("00");
+    else
+        row[DB_serial] = BN_bn2hex(bn);
+    BN_free(bn);
+    if (row[DB_name] != NULL && row[DB_name][0] == '\0') {
+        /* Entries with empty Subjects actually use the serial number instead */
+        OPENSSL_free(row[DB_name]);
+        row[DB_name] = OPENSSL_strdup(row[DB_serial]);
+    }
+    if ((row[DB_name] == NULL) || (row[DB_serial] == NULL)) {
+        BIO_printf(bio_err, "Memory allocation failure\n");
+        goto end;
+    }
+    /*
+     * We have to lookup by serial number because name lookup skips revoked
+     * certs
+     */
+    rrow = TXT_DB_get_by_index(db->db, DB_serial, row);
+    if (rrow == NULL) {
+        BIO_printf(bio_err,
+                   "Adding Entry with serial number %s to DB for %s\n",
+                   row[DB_serial], row[DB_name]);
+
+        /* We now just add it to the database as DB_TYPE_REV('V') */
+        row[DB_type] = OPENSSL_strdup("V");
+        tm = X509_get0_notAfter(x509);
+        row[DB_exp_date] = app_malloc(tm->length + 1, "row exp_data");
+        memcpy(row[DB_exp_date], tm->data, tm->length);
+        row[DB_exp_date][tm->length] = '\0';
+        row[DB_rev_date] = NULL;
+        row[DB_file] = OPENSSL_strdup("unknown");
+
+        if (row[DB_type] == NULL || row[DB_file] == NULL) {
+            BIO_printf(bio_err, "Memory allocation failure\n");
+            goto end;
+        }
+
+        irow = app_malloc(sizeof(*irow) * (DB_NUMBER + 1), "row ptr");
+        for (i = 0; i < DB_NUMBER; i++)
+            irow[i] = row[i];
+        irow[DB_NUMBER] = NULL;
+
+        if (!TXT_DB_insert(db->db, irow)) {
+            BIO_printf(bio_err, "failed to update database\n");
+            BIO_printf(bio_err, "TXT_DB error number %ld\n", db->db->error);
+            OPENSSL_free(irow);
+            goto end;
+        }
+
+        for (i = 0; i < DB_NUMBER; i++)
+            row[i] = NULL;
+
+        /* Revoke Certificate */
+        if (rev_type == REV_VALID)
+            ok = 1;
+        else
+            /* Retry revocation after DB insertion */
+            ok = do_revoke(x509, db, rev_type, value);
+
+        goto end;
+
+    } else if (index_name_cmp_noconst(row, rrow)) {
+        BIO_printf(bio_err, "ERROR:name does not match %s\n", row[DB_name]);
+        goto end;
+    } else if (rev_type == REV_VALID) {
+        BIO_printf(bio_err, "ERROR:Already present, serial number %s\n",
+                   row[DB_serial]);
+        goto end;
+    } else if (rrow[DB_type][0] == DB_TYPE_REV) {
+        BIO_printf(bio_err, "ERROR:Already revoked, serial number %s\n",
+                   row[DB_serial]);
+        goto end;
+    } else {
+        BIO_printf(bio_err, "Revoking Certificate %s.\n", rrow[DB_serial]);
+        rev_str = make_revocation_str(rev_type, value);
+        if (!rev_str) {
+            BIO_printf(bio_err, "Error in revocation arguments\n");
+            goto end;
+        }
+        rrow[DB_type][0] = DB_TYPE_REV;
+        rrow[DB_type][1] = '\0';
+        rrow[DB_rev_date] = rev_str;
+    }
+    ok = 1;
+ end:
+    for (i = 0; i < DB_NUMBER; i++)
+        OPENSSL_free(row[i]);
+    return ok;
+}
+
+static int get_certificate_status(const char *serial, CA_DB *db)
+{
+    char *row[DB_NUMBER], **rrow;
+    int ok = -1, i;
+    size_t serial_len = strlen(serial);
+
+    /* Free Resources */
+    for (i = 0; i < DB_NUMBER; i++)
+        row[i] = NULL;
+
+    /* Malloc needed char spaces */
+    row[DB_serial] = app_malloc(serial_len + 2, "row serial#");
+
+    if (serial_len % 2) {
+        /*
+         * Set the first char to 0
+         */
+        row[DB_serial][0] = '0';
+
+        /* Copy String from serial to row[DB_serial] */
+        memcpy(row[DB_serial] + 1, serial, serial_len);
+        row[DB_serial][serial_len + 1] = '\0';
+    } else {
+        /* Copy String from serial to row[DB_serial] */
+        memcpy(row[DB_serial], serial, serial_len);
+        row[DB_serial][serial_len] = '\0';
+    }
+
+    /* Make it Upper Case */
+    make_uppercase(row[DB_serial]);
+
+    ok = 1;
+
+    /* Search for the certificate */
+    rrow = TXT_DB_get_by_index(db->db, DB_serial, row);
+    if (rrow == NULL) {
+        BIO_printf(bio_err, "Serial %s not present in db.\n", row[DB_serial]);
+        ok = -1;
+        goto end;
+    } else if (rrow[DB_type][0] == DB_TYPE_VAL) {
+        BIO_printf(bio_err, "%s=Valid (%c)\n",
+                   row[DB_serial], rrow[DB_type][0]);
+        goto end;
+    } else if (rrow[DB_type][0] == DB_TYPE_REV) {
+        BIO_printf(bio_err, "%s=Revoked (%c)\n",
+                   row[DB_serial], rrow[DB_type][0]);
+        goto end;
+    } else if (rrow[DB_type][0] == DB_TYPE_EXP) {
+        BIO_printf(bio_err, "%s=Expired (%c)\n",
+                   row[DB_serial], rrow[DB_type][0]);
+        goto end;
+    } else if (rrow[DB_type][0] == DB_TYPE_SUSP) {
+        BIO_printf(bio_err, "%s=Suspended (%c)\n",
+                   row[DB_serial], rrow[DB_type][0]);
+        goto end;
+    } else {
+        BIO_printf(bio_err, "%s=Unknown (%c).\n",
+                   row[DB_serial], rrow[DB_type][0]);
+        ok = -1;
+    }
+ end:
+    for (i = 0; i < DB_NUMBER; i++) {
+        OPENSSL_free(row[i]);
+    }
+    return ok;
+}
+
+static int do_updatedb(CA_DB *db)
+{
+    ASN1_UTCTIME *a_tm = NULL;
+    int i, cnt = 0;
+    int db_y2k, a_y2k;          /* flags = 1 if y >= 2000 */
+    char **rrow, *a_tm_s;
+
+    a_tm = ASN1_UTCTIME_new();
+    if (a_tm == NULL)
+        return -1;
+
+    /* get actual time and make a string */
+    if (X509_gmtime_adj(a_tm, 0) == NULL) {
+        ASN1_UTCTIME_free(a_tm);
+        return -1;
+    }
+    a_tm_s = app_malloc(a_tm->length + 1, "time string");
+
+    memcpy(a_tm_s, a_tm->data, a_tm->length);
+    a_tm_s[a_tm->length] = '\0';
+
+    if (strncmp(a_tm_s, "49", 2) <= 0)
+        a_y2k = 1;
+    else
+        a_y2k = 0;
+
+    for (i = 0; i < sk_OPENSSL_PSTRING_num(db->db->data); i++) {
+        rrow = sk_OPENSSL_PSTRING_value(db->db->data, i);
+
+        if (rrow[DB_type][0] == DB_TYPE_VAL) {
+            /* ignore entries that are not valid */
+            if (strncmp(rrow[DB_exp_date], "49", 2) <= 0)
+                db_y2k = 1;
+            else
+                db_y2k = 0;
+
+            if (db_y2k == a_y2k) {
+                /* all on the same y2k side */
+                if (strcmp(rrow[DB_exp_date], a_tm_s) <= 0) {
+                    rrow[DB_type][0] = DB_TYPE_EXP;
+                    rrow[DB_type][1] = '\0';
+                    cnt++;
+
+                    BIO_printf(bio_err, "%s=Expired\n", rrow[DB_serial]);
+                }
+            } else if (db_y2k < a_y2k) {
+                rrow[DB_type][0] = DB_TYPE_EXP;
+                rrow[DB_type][1] = '\0';
+                cnt++;
+
+                BIO_printf(bio_err, "%s=Expired\n", rrow[DB_serial]);
+            }
+
+        }
+    }
+
+    ASN1_UTCTIME_free(a_tm);
+    OPENSSL_free(a_tm_s);
+    return cnt;
+}
+
+static const char *crl_reasons[] = {
+    /* CRL reason strings */
+    "unspecified",
+    "keyCompromise",
+    "CACompromise",
+    "affiliationChanged",
+    "superseded",
+    "cessationOfOperation",
+    "certificateHold",
+    "removeFromCRL",
+    /* Additional pseudo reasons */
+    "holdInstruction",
+    "keyTime",
+    "CAkeyTime"
+};
+
+#define NUM_REASONS OSSL_NELEM(crl_reasons)
+
+/*
+ * Given revocation information convert to a DB string. The format of the
+ * string is: revtime[,reason,extra]. Where 'revtime' is the revocation time
+ * (the current time). 'reason' is the optional CRL reason and 'extra' is any
+ * additional argument
+ */
+
+static char *make_revocation_str(REVINFO_TYPE rev_type, const char *rev_arg)
+{
+    char *str;
+    const char *reason = NULL, *other = NULL;
+    ASN1_OBJECT *otmp;
+    ASN1_UTCTIME *revtm = NULL;
+    int i;
+
+    switch (rev_type) {
+    case REV_NONE:
+    case REV_VALID:
+        break;
+
+    case REV_CRL_REASON:
+        for (i = 0; i < 8; i++) {
+            if (strcasecmp(rev_arg, crl_reasons[i]) == 0) {
+                reason = crl_reasons[i];
+                break;
+            }
+        }
+        if (reason == NULL) {
+            BIO_printf(bio_err, "Unknown CRL reason %s\n", rev_arg);
+            return NULL;
+        }
+        break;
+
+    case REV_HOLD:
+        /* Argument is an OID */
+        otmp = OBJ_txt2obj(rev_arg, 0);
+        ASN1_OBJECT_free(otmp);
+
+        if (otmp == NULL) {
+            BIO_printf(bio_err, "Invalid object identifier %s\n", rev_arg);
+            return NULL;
+        }
+
+        reason = "holdInstruction";
+        other = rev_arg;
+        break;
+
+    case REV_KEY_COMPROMISE:
+    case REV_CA_COMPROMISE:
+        /* Argument is the key compromise time  */
+        if (!ASN1_GENERALIZEDTIME_set_string(NULL, rev_arg)) {
+            BIO_printf(bio_err,
+                       "Invalid time format %s. Need YYYYMMDDHHMMSSZ\n",
+                       rev_arg);
+            return NULL;
+        }
+        other = rev_arg;
+        if (rev_type == REV_KEY_COMPROMISE)
+            reason = "keyTime";
+        else
+            reason = "CAkeyTime";
+
+        break;
+    }
+
+    revtm = X509_gmtime_adj(NULL, 0);
+
+    if (!revtm)
+        return NULL;
+
+    i = revtm->length + 1;
+
+    if (reason)
+        i += strlen(reason) + 1;
+    if (other)
+        i += strlen(other) + 1;
+
+    str = app_malloc(i, "revocation reason");
+    OPENSSL_strlcpy(str, (char *)revtm->data, i);
+    if (reason) {
+        OPENSSL_strlcat(str, ",", i);
+        OPENSSL_strlcat(str, reason, i);
+    }
+    if (other) {
+        OPENSSL_strlcat(str, ",", i);
+        OPENSSL_strlcat(str, other, i);
+    }
+    ASN1_UTCTIME_free(revtm);
+    return str;
+}
+
+/*-
+ * Convert revocation field to X509_REVOKED entry
+ * return code:
+ * 0 error
+ * 1 OK
+ * 2 OK and some extensions added (i.e. V2 CRL)
+ */
+
+static int make_revoked(X509_REVOKED *rev, const char *str)
+{
+    char *tmp = NULL;
+    int reason_code = -1;
+    int i, ret = 0;
+    ASN1_OBJECT *hold = NULL;
+    ASN1_GENERALIZEDTIME *comp_time = NULL;
+    ASN1_ENUMERATED *rtmp = NULL;
+
+    ASN1_TIME *revDate = NULL;
+
+    i = unpack_revinfo(&revDate, &reason_code, &hold, &comp_time, str);
+
+    if (i == 0)
+        goto end;
+
+    if (rev && !X509_REVOKED_set_revocationDate(rev, revDate))
+        goto end;
+
+    if (rev && (reason_code != OCSP_REVOKED_STATUS_NOSTATUS)) {
+        rtmp = ASN1_ENUMERATED_new();
+        if (rtmp == NULL || !ASN1_ENUMERATED_set(rtmp, reason_code))
+            goto end;
+        if (!X509_REVOKED_add1_ext_i2d(rev, NID_crl_reason, rtmp, 0, 0))
+            goto end;
+    }
+
+    if (rev && comp_time) {
+        if (!X509_REVOKED_add1_ext_i2d
+            (rev, NID_invalidity_date, comp_time, 0, 0))
+            goto end;
+    }
+    if (rev && hold) {
+        if (!X509_REVOKED_add1_ext_i2d
+            (rev, NID_hold_instruction_code, hold, 0, 0))
+            goto end;
+    }
+
+    if (reason_code != OCSP_REVOKED_STATUS_NOSTATUS)
+        ret = 2;
+    else
+        ret = 1;
+
+ end:
+
+    OPENSSL_free(tmp);
+    ASN1_OBJECT_free(hold);
+    ASN1_GENERALIZEDTIME_free(comp_time);
+    ASN1_ENUMERATED_free(rtmp);
+    ASN1_TIME_free(revDate);
+
+    return ret;
+}
+
+static int old_entry_print(const ASN1_OBJECT *obj, const ASN1_STRING *str)
+{
+    char buf[25], *pbuf;
+    const char *p;
+    int j;
+
+    j = i2a_ASN1_OBJECT(bio_err, obj);
+    pbuf = buf;
+    for (j = 22 - j; j > 0; j--)
+        *(pbuf++) = ' ';
+    *(pbuf++) = ':';
+    *(pbuf++) = '\0';
+    BIO_puts(bio_err, buf);
+
+    if (str->type == V_ASN1_PRINTABLESTRING)
+        BIO_printf(bio_err, "PRINTABLE:'");
+    else if (str->type == V_ASN1_T61STRING)
+        BIO_printf(bio_err, "T61STRING:'");
+    else if (str->type == V_ASN1_IA5STRING)
+        BIO_printf(bio_err, "IA5STRING:'");
+    else if (str->type == V_ASN1_UNIVERSALSTRING)
+        BIO_printf(bio_err, "UNIVERSALSTRING:'");
+    else
+        BIO_printf(bio_err, "ASN.1 %2d:'", str->type);
+
+    p = (const char *)str->data;
+    for (j = str->length; j > 0; j--) {
+        if ((*p >= ' ') && (*p <= '~'))
+            BIO_printf(bio_err, "%c", *p);
+        else if (*p & 0x80)
+            BIO_printf(bio_err, "\\0x%02X", *p);
+        else if ((unsigned char)*p == 0xf7)
+            BIO_printf(bio_err, "^?");
+        else
+            BIO_printf(bio_err, "^%c", *p + '@');
+        p++;
+    }
+    BIO_printf(bio_err, "'\n");
+    return 1;
+}
+
+int unpack_revinfo(ASN1_TIME **prevtm, int *preason, ASN1_OBJECT **phold,
+                   ASN1_GENERALIZEDTIME **pinvtm, const char *str)
+{
+    char *tmp;
+    char *rtime_str, *reason_str = NULL, *arg_str = NULL, *p;
+    int reason_code = -1;
+    int ret = 0;
+    unsigned int i;
+    ASN1_OBJECT *hold = NULL;
+    ASN1_GENERALIZEDTIME *comp_time = NULL;
+
+    tmp = OPENSSL_strdup(str);
+    if (!tmp) {
+        BIO_printf(bio_err, "memory allocation failure\n");
+        goto end;
+    }
+
+    p = strchr(tmp, ',');
+
+    rtime_str = tmp;
+
+    if (p) {
+        *p = '\0';
+        p++;
+        reason_str = p;
+        p = strchr(p, ',');
+        if (p) {
+            *p = '\0';
+            arg_str = p + 1;
+        }
+    }
+
+    if (prevtm) {
+        *prevtm = ASN1_UTCTIME_new();
+        if (*prevtm == NULL) {
+            BIO_printf(bio_err, "memory allocation failure\n");
+            goto end;
+        }
+        if (!ASN1_UTCTIME_set_string(*prevtm, rtime_str)) {
+            BIO_printf(bio_err, "invalid revocation date %s\n", rtime_str);
+            goto end;
+        }
+    }
+    if (reason_str) {
+        for (i = 0; i < NUM_REASONS; i++) {
+            if (strcasecmp(reason_str, crl_reasons[i]) == 0) {
+                reason_code = i;
+                break;
+            }
+        }
+        if (reason_code == OCSP_REVOKED_STATUS_NOSTATUS) {
+            BIO_printf(bio_err, "invalid reason code %s\n", reason_str);
+            goto end;
+        }
+
+        if (reason_code == 7) {
+            reason_code = OCSP_REVOKED_STATUS_REMOVEFROMCRL;
+        } else if (reason_code == 8) { /* Hold instruction */
+            if (!arg_str) {
+                BIO_printf(bio_err, "missing hold instruction\n");
+                goto end;
+            }
+            reason_code = OCSP_REVOKED_STATUS_CERTIFICATEHOLD;
+            hold = OBJ_txt2obj(arg_str, 0);
+
+            if (!hold) {
+                BIO_printf(bio_err, "invalid object identifier %s\n", arg_str);
+                goto end;
+            }
+            if (phold)
+                *phold = hold;
+            else
+                ASN1_OBJECT_free(hold);
+        } else if ((reason_code == 9) || (reason_code == 10)) {
+            if (!arg_str) {
+                BIO_printf(bio_err, "missing compromised time\n");
+                goto end;
+            }
+            comp_time = ASN1_GENERALIZEDTIME_new();
+            if (comp_time == NULL) {
+                BIO_printf(bio_err, "memory allocation failure\n");
+                goto end;
+            }
+            if (!ASN1_GENERALIZEDTIME_set_string(comp_time, arg_str)) {
+                BIO_printf(bio_err, "invalid compromised time %s\n", arg_str);
+                goto end;
+            }
+            if (reason_code == 9)
+                reason_code = OCSP_REVOKED_STATUS_KEYCOMPROMISE;
+            else
+                reason_code = OCSP_REVOKED_STATUS_CACOMPROMISE;
+        }
+    }
+
+    if (preason)
+        *preason = reason_code;
+    if (pinvtm) {
+        *pinvtm = comp_time;
+        comp_time = NULL;
+    }
+
+    ret = 1;
+
+ end:
+
+    OPENSSL_free(tmp);
+    ASN1_GENERALIZEDTIME_free(comp_time);
+
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/cert.pem b/trunk/3rdparty/openssl-1.1-fit/apps/cert.pem
new file mode 100644
index 000000000..de4a77ac6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/cert.pem
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/ciphers.c b/trunk/3rdparty/openssl-1.1-fit/apps/ciphers.c
new file mode 100644
index 000000000..0bb33a4ac
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/ciphers.c
@@ -0,0 +1,266 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/err.h>
+#include <openssl/ssl.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_STDNAME,
+    OPT_CONVERT,
+    OPT_SSL3,
+    OPT_TLS1,
+    OPT_TLS1_1,
+    OPT_TLS1_2,
+    OPT_TLS1_3,
+    OPT_PSK,
+    OPT_SRP,
+    OPT_CIPHERSUITES,
+    OPT_V, OPT_UPPER_V, OPT_S
+} OPTION_CHOICE;
+
+const OPTIONS ciphers_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"v", OPT_V, '-', "Verbose listing of the SSL/TLS ciphers"},
+    {"V", OPT_UPPER_V, '-', "Even more verbose"},
+    {"s", OPT_S, '-', "Only supported ciphers"},
+#ifndef OPENSSL_NO_SSL3
+    {"ssl3", OPT_SSL3, '-', "SSL3 mode"},
+#endif
+#ifndef OPENSSL_NO_TLS1
+    {"tls1", OPT_TLS1, '-', "TLS1 mode"},
+#endif
+#ifndef OPENSSL_NO_TLS1_1
+    {"tls1_1", OPT_TLS1_1, '-', "TLS1.1 mode"},
+#endif
+#ifndef OPENSSL_NO_TLS1_2
+    {"tls1_2", OPT_TLS1_2, '-', "TLS1.2 mode"},
+#endif
+#ifndef OPENSSL_NO_TLS1_3
+    {"tls1_3", OPT_TLS1_3, '-', "TLS1.3 mode"},
+#endif
+    {"stdname", OPT_STDNAME, '-', "Show standard cipher names"},
+#ifndef OPENSSL_NO_PSK
+    {"psk", OPT_PSK, '-', "include ciphersuites requiring PSK"},
+#endif
+#ifndef OPENSSL_NO_SRP
+    {"srp", OPT_SRP, '-', "include ciphersuites requiring SRP"},
+#endif
+    {"convert", OPT_CONVERT, 's', "Convert standard name into OpenSSL name"},
+    {"ciphersuites", OPT_CIPHERSUITES, 's',
+     "Configure the TLSv1.3 ciphersuites to use"},
+    {NULL}
+};
+
+#ifndef OPENSSL_NO_PSK
+static unsigned int dummy_psk(SSL *ssl, const char *hint, char *identity,
+                              unsigned int max_identity_len,
+                              unsigned char *psk,
+                              unsigned int max_psk_len)
+{
+    return 0;
+}
+#endif
+#ifndef OPENSSL_NO_SRP
+static char *dummy_srp(SSL *ssl, void *arg)
+{
+    return "";
+}
+#endif
+
+int ciphers_main(int argc, char **argv)
+{
+    SSL_CTX *ctx = NULL;
+    SSL *ssl = NULL;
+    STACK_OF(SSL_CIPHER) *sk = NULL;
+    const SSL_METHOD *meth = TLS_server_method();
+    int ret = 1, i, verbose = 0, Verbose = 0, use_supported = 0;
+    int stdname = 0;
+#ifndef OPENSSL_NO_PSK
+    int psk = 0;
+#endif
+#ifndef OPENSSL_NO_SRP
+    int srp = 0;
+#endif
+    const char *p;
+    char *ciphers = NULL, *prog, *convert = NULL, *ciphersuites = NULL;
+    char buf[512];
+    OPTION_CHOICE o;
+    int min_version = 0, max_version = 0;
+
+    prog = opt_init(argc, argv, ciphers_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(ciphers_options);
+            ret = 0;
+            goto end;
+        case OPT_V:
+            verbose = 1;
+            break;
+        case OPT_UPPER_V:
+            verbose = Verbose = 1;
+            break;
+        case OPT_S:
+            use_supported = 1;
+            break;
+        case OPT_STDNAME:
+            stdname = verbose = 1;
+            break;
+        case OPT_CONVERT:
+            convert = opt_arg();
+            break;
+        case OPT_SSL3:
+            min_version = SSL3_VERSION;
+            max_version = SSL3_VERSION;
+            break;
+        case OPT_TLS1:
+            min_version = TLS1_VERSION;
+            max_version = TLS1_VERSION;
+            break;
+        case OPT_TLS1_1:
+            min_version = TLS1_1_VERSION;
+            max_version = TLS1_1_VERSION;
+            break;
+        case OPT_TLS1_2:
+            min_version = TLS1_2_VERSION;
+            max_version = TLS1_2_VERSION;
+            break;
+        case OPT_TLS1_3:
+            min_version = TLS1_3_VERSION;
+            max_version = TLS1_3_VERSION;
+            break;
+        case OPT_PSK:
+#ifndef OPENSSL_NO_PSK
+            psk = 1;
+#endif
+            break;
+        case OPT_SRP:
+#ifndef OPENSSL_NO_SRP
+            srp = 1;
+#endif
+            break;
+        case OPT_CIPHERSUITES:
+            ciphersuites = opt_arg();
+            break;
+        }
+    }
+    argv = opt_rest();
+    argc = opt_num_rest();
+
+    if (argc == 1)
+        ciphers = *argv;
+    else if (argc != 0)
+        goto opthelp;
+
+    if (convert != NULL) {
+        BIO_printf(bio_out, "OpenSSL cipher name: %s\n",
+                   OPENSSL_cipher_name(convert));
+        goto end;
+    }
+
+    ctx = SSL_CTX_new(meth);
+    if (ctx == NULL)
+        goto err;
+    if (SSL_CTX_set_min_proto_version(ctx, min_version) == 0)
+        goto err;
+    if (SSL_CTX_set_max_proto_version(ctx, max_version) == 0)
+        goto err;
+
+#ifndef OPENSSL_NO_PSK
+    if (psk)
+        SSL_CTX_set_psk_client_callback(ctx, dummy_psk);
+#endif
+#ifndef OPENSSL_NO_SRP
+    if (srp)
+        SSL_CTX_set_srp_client_pwd_callback(ctx, dummy_srp);
+#endif
+
+    if (ciphersuites != NULL && !SSL_CTX_set_ciphersuites(ctx, ciphersuites)) {
+        BIO_printf(bio_err, "Error setting TLSv1.3 ciphersuites\n");
+        goto err;
+    }
+
+    if (ciphers != NULL) {
+        if (!SSL_CTX_set_cipher_list(ctx, ciphers)) {
+            BIO_printf(bio_err, "Error in cipher list\n");
+            goto err;
+        }
+    }
+    ssl = SSL_new(ctx);
+    if (ssl == NULL)
+        goto err;
+
+    if (use_supported)
+        sk = SSL_get1_supported_ciphers(ssl);
+    else
+        sk = SSL_get_ciphers(ssl);
+
+    if (!verbose) {
+        for (i = 0; i < sk_SSL_CIPHER_num(sk); i++) {
+            const SSL_CIPHER *c = sk_SSL_CIPHER_value(sk, i);
+            p = SSL_CIPHER_get_name(c);
+            if (p == NULL)
+                break;
+            if (i != 0)
+                BIO_printf(bio_out, ":");
+            BIO_printf(bio_out, "%s", p);
+        }
+        BIO_printf(bio_out, "\n");
+    } else {
+
+        for (i = 0; i < sk_SSL_CIPHER_num(sk); i++) {
+            const SSL_CIPHER *c;
+
+            c = sk_SSL_CIPHER_value(sk, i);
+
+            if (Verbose) {
+                unsigned long id = SSL_CIPHER_get_id(c);
+                int id0 = (int)(id >> 24);
+                int id1 = (int)((id >> 16) & 0xffL);
+                int id2 = (int)((id >> 8) & 0xffL);
+                int id3 = (int)(id & 0xffL);
+
+                if ((id & 0xff000000L) == 0x03000000L)
+                    BIO_printf(bio_out, "          0x%02X,0x%02X - ", id2, id3); /* SSL3
+                                                                                  * cipher */
+                else
+                    BIO_printf(bio_out, "0x%02X,0x%02X,0x%02X,0x%02X - ", id0, id1, id2, id3); /* whatever */
+            }
+            if (stdname) {
+                const char *nm = SSL_CIPHER_standard_name(c);
+                if (nm == NULL)
+                    nm = "UNKNOWN";
+                BIO_printf(bio_out, "%s - ", nm);
+            }
+            BIO_puts(bio_out, SSL_CIPHER_description(c, buf, sizeof(buf)));
+        }
+    }
+
+    ret = 0;
+    goto end;
+ err:
+    ERR_print_errors(bio_err);
+ end:
+    if (use_supported)
+        sk_SSL_CIPHER_free(sk);
+    SSL_CTX_free(ctx);
+    SSL_free(ssl);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/client.pem b/trunk/3rdparty/openssl-1.1-fit/apps/client.pem
new file mode 100644
index 000000000..e7a47a73f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/client.pem
@@ -0,0 +1,52 @@
+subject= C = UK, O = OpenSSL Group, OU = FOR TESTING PURPOSES ONLY, CN = Test Client Cert
+issuer= C = UK, O = OpenSSL Group, OU = FOR TESTING PURPOSES ONLY, CN = OpenSSL Test Intermediate CA
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/cms.c b/trunk/3rdparty/openssl-1.1-fit/apps/cms.c
new file mode 100644
index 000000000..e9d760c99
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/cms.c
@@ -0,0 +1,1289 @@
+/*
+ * Copyright 2008-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* CMS utility function */
+
+#include <stdio.h>
+#include <string.h>
+#include "apps.h"
+#include "progs.h"
+
+#ifndef OPENSSL_NO_CMS
+
+# include <openssl/crypto.h>
+# include <openssl/pem.h>
+# include <openssl/err.h>
+# include <openssl/x509_vfy.h>
+# include <openssl/x509v3.h>
+# include <openssl/cms.h>
+
+static int save_certs(char *signerfile, STACK_OF(X509) *signers);
+static int cms_cb(int ok, X509_STORE_CTX *ctx);
+static void receipt_request_print(CMS_ContentInfo *cms);
+static CMS_ReceiptRequest *make_receipt_request(STACK_OF(OPENSSL_STRING)
+                                                *rr_to, int rr_allorfirst, STACK_OF(OPENSSL_STRING)
+                                                *rr_from);
+static int cms_set_pkey_param(EVP_PKEY_CTX *pctx,
+                              STACK_OF(OPENSSL_STRING) *param);
+
+# define SMIME_OP        0x10
+# define SMIME_IP        0x20
+# define SMIME_SIGNERS   0x40
+# define SMIME_ENCRYPT           (1 | SMIME_OP)
+# define SMIME_DECRYPT           (2 | SMIME_IP)
+# define SMIME_SIGN              (3 | SMIME_OP | SMIME_SIGNERS)
+# define SMIME_VERIFY            (4 | SMIME_IP)
+# define SMIME_CMSOUT            (5 | SMIME_IP | SMIME_OP)
+# define SMIME_RESIGN            (6 | SMIME_IP | SMIME_OP | SMIME_SIGNERS)
+# define SMIME_DATAOUT           (7 | SMIME_IP)
+# define SMIME_DATA_CREATE       (8 | SMIME_OP)
+# define SMIME_DIGEST_VERIFY     (9 | SMIME_IP)
+# define SMIME_DIGEST_CREATE     (10 | SMIME_OP)
+# define SMIME_UNCOMPRESS        (11 | SMIME_IP)
+# define SMIME_COMPRESS          (12 | SMIME_OP)
+# define SMIME_ENCRYPTED_DECRYPT (13 | SMIME_IP)
+# define SMIME_ENCRYPTED_ENCRYPT (14 | SMIME_OP)
+# define SMIME_SIGN_RECEIPT      (15 | SMIME_IP | SMIME_OP)
+# define SMIME_VERIFY_RECEIPT    (16 | SMIME_IP)
+
+static int verify_err = 0;
+
+typedef struct cms_key_param_st cms_key_param;
+
+struct cms_key_param_st {
+    int idx;
+    STACK_OF(OPENSSL_STRING) *param;
+    cms_key_param *next;
+};
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_INFORM, OPT_OUTFORM, OPT_IN, OPT_OUT, OPT_ENCRYPT,
+    OPT_DECRYPT, OPT_SIGN, OPT_SIGN_RECEIPT, OPT_RESIGN,
+    OPT_VERIFY, OPT_VERIFY_RETCODE, OPT_VERIFY_RECEIPT,
+    OPT_CMSOUT, OPT_DATA_OUT, OPT_DATA_CREATE, OPT_DIGEST_VERIFY,
+    OPT_DIGEST_CREATE, OPT_COMPRESS, OPT_UNCOMPRESS,
+    OPT_ED_DECRYPT, OPT_ED_ENCRYPT, OPT_DEBUG_DECRYPT, OPT_TEXT,
+    OPT_ASCIICRLF, OPT_NOINTERN, OPT_NOVERIFY, OPT_NOCERTS,
+    OPT_NOATTR, OPT_NODETACH, OPT_NOSMIMECAP, OPT_BINARY, OPT_KEYID,
+    OPT_NOSIGS, OPT_NO_CONTENT_VERIFY, OPT_NO_ATTR_VERIFY, OPT_INDEF,
+    OPT_NOINDEF, OPT_CRLFEOL, OPT_NOOUT, OPT_RR_PRINT,
+    OPT_RR_ALL, OPT_RR_FIRST, OPT_RCTFORM, OPT_CERTFILE, OPT_CAFILE,
+    OPT_CAPATH, OPT_NOCAPATH, OPT_NOCAFILE,OPT_CONTENT, OPT_PRINT,
+    OPT_SECRETKEY, OPT_SECRETKEYID, OPT_PWRI_PASSWORD, OPT_ECONTENT_TYPE,
+    OPT_PASSIN, OPT_TO, OPT_FROM, OPT_SUBJECT, OPT_SIGNER, OPT_RECIP,
+    OPT_CERTSOUT, OPT_MD, OPT_INKEY, OPT_KEYFORM, OPT_KEYOPT, OPT_RR_FROM,
+    OPT_RR_TO, OPT_AES128_WRAP, OPT_AES192_WRAP, OPT_AES256_WRAP,
+    OPT_3DES_WRAP, OPT_ENGINE,
+    OPT_R_ENUM,
+    OPT_V_ENUM,
+    OPT_CIPHER
+} OPTION_CHOICE;
+
+const OPTIONS cms_options[] = {
+    {OPT_HELP_STR, 1, '-', "Usage: %s [options] cert.pem...\n"},
+    {OPT_HELP_STR, 1, '-',
+        "  cert.pem... recipient certs for encryption\n"},
+    {OPT_HELP_STR, 1, '-', "Valid options are:\n"},
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"inform", OPT_INFORM, 'c', "Input format SMIME (default), PEM or DER"},
+    {"outform", OPT_OUTFORM, 'c',
+     "Output format SMIME (default), PEM or DER"},
+    {"in", OPT_IN, '<', "Input file"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"encrypt", OPT_ENCRYPT, '-', "Encrypt message"},
+    {"decrypt", OPT_DECRYPT, '-', "Decrypt encrypted message"},
+    {"sign", OPT_SIGN, '-', "Sign message"},
+    {"sign_receipt", OPT_SIGN_RECEIPT, '-', "Generate a signed receipt for the message"},
+    {"resign", OPT_RESIGN, '-', "Resign a signed message"},
+    {"verify", OPT_VERIFY, '-', "Verify signed message"},
+    {"verify_retcode", OPT_VERIFY_RETCODE, '-'},
+    {"verify_receipt", OPT_VERIFY_RECEIPT, '<'},
+    {"cmsout", OPT_CMSOUT, '-', "Output CMS structure"},
+    {"data_out", OPT_DATA_OUT, '-'},
+    {"data_create", OPT_DATA_CREATE, '-'},
+    {"digest_verify", OPT_DIGEST_VERIFY, '-'},
+    {"digest_create", OPT_DIGEST_CREATE, '-'},
+    {"compress", OPT_COMPRESS, '-'},
+    {"uncompress", OPT_UNCOMPRESS, '-'},
+    {"EncryptedData_decrypt", OPT_ED_DECRYPT, '-'},
+    {"EncryptedData_encrypt", OPT_ED_ENCRYPT, '-'},
+    {"debug_decrypt", OPT_DEBUG_DECRYPT, '-'},
+    {"text", OPT_TEXT, '-', "Include or delete text MIME headers"},
+    {"asciicrlf", OPT_ASCIICRLF, '-'},
+    {"nointern", OPT_NOINTERN, '-',
+     "Don't search certificates in message for signer"},
+    {"noverify", OPT_NOVERIFY, '-', "Don't verify signers certificate"},
+    {"nocerts", OPT_NOCERTS, '-',
+     "Don't include signers certificate when signing"},
+    {"noattr", OPT_NOATTR, '-', "Don't include any signed attributes"},
+    {"nodetach", OPT_NODETACH, '-', "Use opaque signing"},
+    {"nosmimecap", OPT_NOSMIMECAP, '-', "Omit the SMIMECapabilities attribute"},
+    {"binary", OPT_BINARY, '-', "Don't translate message to text"},
+    {"keyid", OPT_KEYID, '-', "Use subject key identifier"},
+    {"nosigs", OPT_NOSIGS, '-', "Don't verify message signature"},
+    {"no_content_verify", OPT_NO_CONTENT_VERIFY, '-'},
+    {"no_attr_verify", OPT_NO_ATTR_VERIFY, '-'},
+    {"stream", OPT_INDEF, '-', "Enable CMS streaming"},
+    {"indef", OPT_INDEF, '-', "Same as -stream"},
+    {"noindef", OPT_NOINDEF, '-', "Disable CMS streaming"},
+    {"crlfeol", OPT_CRLFEOL, '-', "Use CRLF as EOL termination instead of CR only" },
+    {"noout", OPT_NOOUT, '-', "For the -cmsout operation do not output the parsed CMS structure"},
+    {"receipt_request_print", OPT_RR_PRINT, '-', "Print CMS Receipt Request" },
+    {"receipt_request_all", OPT_RR_ALL, '-'},
+    {"receipt_request_first", OPT_RR_FIRST, '-'},
+    {"rctform", OPT_RCTFORM, 'F', "Receipt file format"},
+    {"certfile", OPT_CERTFILE, '<', "Other certificates file"},
+    {"CAfile", OPT_CAFILE, '<', "Trusted certificates file"},
+    {"CApath", OPT_CAPATH, '/', "trusted certificates directory"},
+    {"no-CAfile", OPT_NOCAFILE, '-',
+     "Do not load the default certificates file"},
+    {"no-CApath", OPT_NOCAPATH, '-',
+     "Do not load certificates from the default certificates directory"},
+    {"content", OPT_CONTENT, '<',
+     "Supply or override content for detached signature"},
+    {"print", OPT_PRINT, '-',
+     "For the -cmsout operation print out all fields of the CMS structure"},
+    {"secretkey", OPT_SECRETKEY, 's'},
+    {"secretkeyid", OPT_SECRETKEYID, 's'},
+    {"pwri_password", OPT_PWRI_PASSWORD, 's'},
+    {"econtent_type", OPT_ECONTENT_TYPE, 's'},
+    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
+    {"to", OPT_TO, 's', "To address"},
+    {"from", OPT_FROM, 's', "From address"},
+    {"subject", OPT_SUBJECT, 's', "Subject"},
+    {"signer", OPT_SIGNER, 's', "Signer certificate file"},
+    {"recip", OPT_RECIP, '<', "Recipient cert file for decryption"},
+    {"certsout", OPT_CERTSOUT, '>', "Certificate output file"},
+    {"md", OPT_MD, 's', "Digest algorithm to use when signing or resigning"},
+    {"inkey", OPT_INKEY, 's',
+     "Input private key (if not signer or recipient)"},
+    {"keyform", OPT_KEYFORM, 'f', "Input private key format (PEM or ENGINE)"},
+    {"keyopt", OPT_KEYOPT, 's', "Set public key parameters as n:v pairs"},
+    {"receipt_request_from", OPT_RR_FROM, 's'},
+    {"receipt_request_to", OPT_RR_TO, 's'},
+    {"", OPT_CIPHER, '-', "Any supported cipher"},
+    OPT_R_OPTIONS,
+    OPT_V_OPTIONS,
+    {"aes128-wrap", OPT_AES128_WRAP, '-', "Use AES128 to wrap key"},
+    {"aes192-wrap", OPT_AES192_WRAP, '-', "Use AES192 to wrap key"},
+    {"aes256-wrap", OPT_AES256_WRAP, '-', "Use AES256 to wrap key"},
+# ifndef OPENSSL_NO_DES
+    {"des3-wrap", OPT_3DES_WRAP, '-', "Use 3DES-EDE to wrap key"},
+# endif
+# ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine e, possibly a hardware device"},
+# endif
+    {NULL}
+};
+
+int cms_main(int argc, char **argv)
+{
+    ASN1_OBJECT *econtent_type = NULL;
+    BIO *in = NULL, *out = NULL, *indata = NULL, *rctin = NULL;
+    CMS_ContentInfo *cms = NULL, *rcms = NULL;
+    CMS_ReceiptRequest *rr = NULL;
+    ENGINE *e = NULL;
+    EVP_PKEY *key = NULL;
+    const EVP_CIPHER *cipher = NULL, *wrap_cipher = NULL;
+    const EVP_MD *sign_md = NULL;
+    STACK_OF(OPENSSL_STRING) *rr_to = NULL, *rr_from = NULL;
+    STACK_OF(OPENSSL_STRING) *sksigners = NULL, *skkeys = NULL;
+    STACK_OF(X509) *encerts = NULL, *other = NULL;
+    X509 *cert = NULL, *recip = NULL, *signer = NULL;
+    X509_STORE *store = NULL;
+    X509_VERIFY_PARAM *vpm = NULL;
+    char *certfile = NULL, *keyfile = NULL, *contfile = NULL;
+    const char *CAfile = NULL, *CApath = NULL;
+    char *certsoutfile = NULL;
+    int noCAfile = 0, noCApath = 0;
+    char *infile = NULL, *outfile = NULL, *rctfile = NULL;
+    char *passinarg = NULL, *passin = NULL, *signerfile = NULL, *recipfile = NULL;
+    char *to = NULL, *from = NULL, *subject = NULL, *prog;
+    cms_key_param *key_first = NULL, *key_param = NULL;
+    int flags = CMS_DETACHED, noout = 0, print = 0, keyidx = -1, vpmtouched = 0;
+    int informat = FORMAT_SMIME, outformat = FORMAT_SMIME;
+    int operation = 0, ret = 1, rr_print = 0, rr_allorfirst = -1;
+    int verify_retcode = 0, rctformat = FORMAT_SMIME, keyform = FORMAT_PEM;
+    size_t secret_keylen = 0, secret_keyidlen = 0;
+    unsigned char *pwri_pass = NULL, *pwri_tmp = NULL;
+    unsigned char *secret_key = NULL, *secret_keyid = NULL;
+    long ltmp;
+    const char *mime_eol = "\n";
+    OPTION_CHOICE o;
+
+    if ((vpm = X509_VERIFY_PARAM_new()) == NULL)
+        return 1;
+
+    prog = opt_init(argc, argv, cms_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(cms_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PDS, &informat))
+                goto opthelp;
+            break;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PDS, &outformat))
+                goto opthelp;
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_ENCRYPT:
+            operation = SMIME_ENCRYPT;
+            break;
+        case OPT_DECRYPT:
+            operation = SMIME_DECRYPT;
+            break;
+        case OPT_SIGN:
+            operation = SMIME_SIGN;
+            break;
+        case OPT_SIGN_RECEIPT:
+            operation = SMIME_SIGN_RECEIPT;
+            break;
+        case OPT_RESIGN:
+            operation = SMIME_RESIGN;
+            break;
+        case OPT_VERIFY:
+            operation = SMIME_VERIFY;
+            break;
+        case OPT_VERIFY_RETCODE:
+            verify_retcode = 1;
+            break;
+        case OPT_VERIFY_RECEIPT:
+            operation = SMIME_VERIFY_RECEIPT;
+            rctfile = opt_arg();
+            break;
+        case OPT_CMSOUT:
+            operation = SMIME_CMSOUT;
+            break;
+        case OPT_DATA_OUT:
+            operation = SMIME_DATAOUT;
+            break;
+        case OPT_DATA_CREATE:
+            operation = SMIME_DATA_CREATE;
+            break;
+        case OPT_DIGEST_VERIFY:
+            operation = SMIME_DIGEST_VERIFY;
+            break;
+        case OPT_DIGEST_CREATE:
+            operation = SMIME_DIGEST_CREATE;
+            break;
+        case OPT_COMPRESS:
+            operation = SMIME_COMPRESS;
+            break;
+        case OPT_UNCOMPRESS:
+            operation = SMIME_UNCOMPRESS;
+            break;
+        case OPT_ED_DECRYPT:
+            operation = SMIME_ENCRYPTED_DECRYPT;
+            break;
+        case OPT_ED_ENCRYPT:
+            operation = SMIME_ENCRYPTED_ENCRYPT;
+            break;
+        case OPT_DEBUG_DECRYPT:
+            flags |= CMS_DEBUG_DECRYPT;
+            break;
+        case OPT_TEXT:
+            flags |= CMS_TEXT;
+            break;
+        case OPT_ASCIICRLF:
+            flags |= CMS_ASCIICRLF;
+            break;
+        case OPT_NOINTERN:
+            flags |= CMS_NOINTERN;
+            break;
+        case OPT_NOVERIFY:
+            flags |= CMS_NO_SIGNER_CERT_VERIFY;
+            break;
+        case OPT_NOCERTS:
+            flags |= CMS_NOCERTS;
+            break;
+        case OPT_NOATTR:
+            flags |= CMS_NOATTR;
+            break;
+        case OPT_NODETACH:
+            flags &= ~CMS_DETACHED;
+            break;
+        case OPT_NOSMIMECAP:
+            flags |= CMS_NOSMIMECAP;
+            break;
+        case OPT_BINARY:
+            flags |= CMS_BINARY;
+            break;
+        case OPT_KEYID:
+            flags |= CMS_USE_KEYID;
+            break;
+        case OPT_NOSIGS:
+            flags |= CMS_NOSIGS;
+            break;
+        case OPT_NO_CONTENT_VERIFY:
+            flags |= CMS_NO_CONTENT_VERIFY;
+            break;
+        case OPT_NO_ATTR_VERIFY:
+            flags |= CMS_NO_ATTR_VERIFY;
+            break;
+        case OPT_INDEF:
+            flags |= CMS_STREAM;
+            break;
+        case OPT_NOINDEF:
+            flags &= ~CMS_STREAM;
+            break;
+        case OPT_CRLFEOL:
+            mime_eol = "\r\n";
+            flags |= CMS_CRLFEOL;
+            break;
+        case OPT_NOOUT:
+            noout = 1;
+            break;
+        case OPT_RR_PRINT:
+            rr_print = 1;
+            break;
+        case OPT_RR_ALL:
+            rr_allorfirst = 0;
+            break;
+        case OPT_RR_FIRST:
+            rr_allorfirst = 1;
+            break;
+        case OPT_RCTFORM:
+            if (rctformat == FORMAT_SMIME)
+                rcms = SMIME_read_CMS(rctin, NULL);
+            else if (rctformat == FORMAT_PEM)
+                rcms = PEM_read_bio_CMS(rctin, NULL, NULL, NULL);
+            else if (rctformat == FORMAT_ASN1)
+                if (!opt_format(opt_arg(),
+                                OPT_FMT_PEMDER | OPT_FMT_SMIME, &rctformat))
+                    goto opthelp;
+            break;
+        case OPT_CERTFILE:
+            certfile = opt_arg();
+            break;
+        case OPT_CAFILE:
+            CAfile = opt_arg();
+            break;
+        case OPT_CAPATH:
+            CApath = opt_arg();
+            break;
+        case OPT_NOCAFILE:
+            noCAfile = 1;
+            break;
+        case OPT_NOCAPATH:
+            noCApath = 1;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_CONTENT:
+            contfile = opt_arg();
+            break;
+        case OPT_RR_FROM:
+            if (rr_from == NULL
+                && (rr_from = sk_OPENSSL_STRING_new_null()) == NULL)
+                goto end;
+            sk_OPENSSL_STRING_push(rr_from, opt_arg());
+            break;
+        case OPT_RR_TO:
+            if (rr_to == NULL
+                && (rr_to = sk_OPENSSL_STRING_new_null()) == NULL)
+                goto end;
+            sk_OPENSSL_STRING_push(rr_to, opt_arg());
+            break;
+        case OPT_PRINT:
+            noout = print = 1;
+            break;
+        case OPT_SECRETKEY:
+            if (secret_key != NULL) {
+                BIO_printf(bio_err, "Invalid key (supplied twice) %s\n",
+                           opt_arg());
+                goto opthelp;
+            }
+            secret_key = OPENSSL_hexstr2buf(opt_arg(), &ltmp);
+            if (secret_key == NULL) {
+                BIO_printf(bio_err, "Invalid key %s\n", opt_arg());
+                goto end;
+            }
+            secret_keylen = (size_t)ltmp;
+            break;
+        case OPT_SECRETKEYID:
+            if (secret_keyid != NULL) {
+                BIO_printf(bio_err, "Invalid id (supplied twice) %s\n",
+                           opt_arg());
+                goto opthelp;
+            }
+            secret_keyid = OPENSSL_hexstr2buf(opt_arg(), &ltmp);
+            if (secret_keyid == NULL) {
+                BIO_printf(bio_err, "Invalid id %s\n", opt_arg());
+                goto opthelp;
+            }
+            secret_keyidlen = (size_t)ltmp;
+            break;
+        case OPT_PWRI_PASSWORD:
+            pwri_pass = (unsigned char *)opt_arg();
+            break;
+        case OPT_ECONTENT_TYPE:
+            if (econtent_type != NULL) {
+                BIO_printf(bio_err, "Invalid OID (supplied twice) %s\n",
+                           opt_arg());
+                goto opthelp;
+            }
+            econtent_type = OBJ_txt2obj(opt_arg(), 0);
+            if (econtent_type == NULL) {
+                BIO_printf(bio_err, "Invalid OID %s\n", opt_arg());
+                goto opthelp;
+            }
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_PASSIN:
+            passinarg = opt_arg();
+            break;
+        case OPT_TO:
+            to = opt_arg();
+            break;
+        case OPT_FROM:
+            from = opt_arg();
+            break;
+        case OPT_SUBJECT:
+            subject = opt_arg();
+            break;
+        case OPT_CERTSOUT:
+            certsoutfile = opt_arg();
+            break;
+        case OPT_MD:
+            if (!opt_md(opt_arg(), &sign_md))
+                goto end;
+            break;
+        case OPT_SIGNER:
+            /* If previous -signer argument add signer to list */
+            if (signerfile != NULL) {
+                if (sksigners == NULL
+                    && (sksigners = sk_OPENSSL_STRING_new_null()) == NULL)
+                    goto end;
+                sk_OPENSSL_STRING_push(sksigners, signerfile);
+                if (keyfile == NULL)
+                    keyfile = signerfile;
+                if (skkeys == NULL
+                    && (skkeys = sk_OPENSSL_STRING_new_null()) == NULL)
+                    goto end;
+                sk_OPENSSL_STRING_push(skkeys, keyfile);
+                keyfile = NULL;
+            }
+            signerfile = opt_arg();
+            break;
+        case OPT_INKEY:
+            /* If previous -inkey argument add signer to list */
+            if (keyfile != NULL) {
+                if (signerfile == NULL) {
+                    BIO_puts(bio_err, "Illegal -inkey without -signer\n");
+                    goto end;
+                }
+                if (sksigners == NULL
+                    && (sksigners = sk_OPENSSL_STRING_new_null()) == NULL)
+                    goto end;
+                sk_OPENSSL_STRING_push(sksigners, signerfile);
+                signerfile = NULL;
+                if (skkeys == NULL
+                    && (skkeys = sk_OPENSSL_STRING_new_null()) == NULL)
+                    goto end;
+                sk_OPENSSL_STRING_push(skkeys, keyfile);
+            }
+            keyfile = opt_arg();
+            break;
+        case OPT_KEYFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_ANY, &keyform))
+                goto opthelp;
+            break;
+        case OPT_RECIP:
+            if (operation == SMIME_ENCRYPT) {
+                if (encerts == NULL && (encerts = sk_X509_new_null()) == NULL)
+                    goto end;
+                cert = load_cert(opt_arg(), FORMAT_PEM,
+                                 "recipient certificate file");
+                if (cert == NULL)
+                    goto end;
+                sk_X509_push(encerts, cert);
+                cert = NULL;
+            } else {
+                recipfile = opt_arg();
+            }
+            break;
+        case OPT_CIPHER:
+            if (!opt_cipher(opt_unknown(), &cipher))
+                goto end;
+            break;
+        case OPT_KEYOPT:
+            keyidx = -1;
+            if (operation == SMIME_ENCRYPT) {
+                if (encerts != NULL)
+                    keyidx += sk_X509_num(encerts);
+            } else {
+                if (keyfile != NULL || signerfile != NULL)
+                    keyidx++;
+                if (skkeys != NULL)
+                    keyidx += sk_OPENSSL_STRING_num(skkeys);
+            }
+            if (keyidx < 0) {
+                BIO_printf(bio_err, "No key specified\n");
+                goto opthelp;
+            }
+            if (key_param == NULL || key_param->idx != keyidx) {
+                cms_key_param *nparam;
+                nparam = app_malloc(sizeof(*nparam), "key param buffer");
+                nparam->idx = keyidx;
+                if ((nparam->param = sk_OPENSSL_STRING_new_null()) == NULL)
+                    goto end;
+                nparam->next = NULL;
+                if (key_first == NULL)
+                    key_first = nparam;
+                else
+                    key_param->next = nparam;
+                key_param = nparam;
+            }
+            sk_OPENSSL_STRING_push(key_param->param, opt_arg());
+            break;
+        case OPT_V_CASES:
+            if (!opt_verify(o, vpm))
+                goto end;
+            vpmtouched++;
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_3DES_WRAP:
+# ifndef OPENSSL_NO_DES
+            wrap_cipher = EVP_des_ede3_wrap();
+# endif
+            break;
+        case OPT_AES128_WRAP:
+            wrap_cipher = EVP_aes_128_wrap();
+            break;
+        case OPT_AES192_WRAP:
+            wrap_cipher = EVP_aes_192_wrap();
+            break;
+        case OPT_AES256_WRAP:
+            wrap_cipher = EVP_aes_256_wrap();
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+
+    if ((rr_allorfirst != -1 || rr_from != NULL) && rr_to == NULL) {
+        BIO_puts(bio_err, "No Signed Receipts Recipients\n");
+        goto opthelp;
+    }
+
+    if (!(operation & SMIME_SIGNERS) && (rr_to != NULL || rr_from != NULL)) {
+        BIO_puts(bio_err, "Signed receipts only allowed with -sign\n");
+        goto opthelp;
+    }
+    if (!(operation & SMIME_SIGNERS) && (skkeys != NULL || sksigners != NULL)) {
+        BIO_puts(bio_err, "Multiple signers or keys not allowed\n");
+        goto opthelp;
+    }
+
+    if (operation & SMIME_SIGNERS) {
+        if (keyfile != NULL && signerfile == NULL) {
+            BIO_puts(bio_err, "Illegal -inkey without -signer\n");
+            goto opthelp;
+        }
+        /* Check to see if any final signer needs to be appended */
+        if (signerfile != NULL) {
+            if (sksigners == NULL
+                && (sksigners = sk_OPENSSL_STRING_new_null()) == NULL)
+                goto end;
+            sk_OPENSSL_STRING_push(sksigners, signerfile);
+            if (skkeys == NULL && (skkeys = sk_OPENSSL_STRING_new_null()) == NULL)
+                goto end;
+            if (keyfile == NULL)
+                keyfile = signerfile;
+            sk_OPENSSL_STRING_push(skkeys, keyfile);
+        }
+        if (sksigners == NULL) {
+            BIO_printf(bio_err, "No signer certificate specified\n");
+            goto opthelp;
+        }
+        signerfile = NULL;
+        keyfile = NULL;
+    } else if (operation == SMIME_DECRYPT) {
+        if (recipfile == NULL && keyfile == NULL
+            && secret_key == NULL && pwri_pass == NULL) {
+            BIO_printf(bio_err,
+                       "No recipient certificate or key specified\n");
+            goto opthelp;
+        }
+    } else if (operation == SMIME_ENCRYPT) {
+        if (*argv == NULL && secret_key == NULL
+            && pwri_pass == NULL && encerts == NULL) {
+            BIO_printf(bio_err, "No recipient(s) certificate(s) specified\n");
+            goto opthelp;
+        }
+    } else if (!operation) {
+        goto opthelp;
+    }
+
+    if (!app_passwd(passinarg, NULL, &passin, NULL)) {
+        BIO_printf(bio_err, "Error getting password\n");
+        goto end;
+    }
+
+    ret = 2;
+
+    if (!(operation & SMIME_SIGNERS))
+        flags &= ~CMS_DETACHED;
+
+    if (!(operation & SMIME_OP))
+        if (flags & CMS_BINARY)
+            outformat = FORMAT_BINARY;
+
+    if (!(operation & SMIME_IP))
+        if (flags & CMS_BINARY)
+            informat = FORMAT_BINARY;
+
+    if (operation == SMIME_ENCRYPT) {
+        if (!cipher) {
+# ifndef OPENSSL_NO_DES
+            cipher = EVP_des_ede3_cbc();
+# else
+            BIO_printf(bio_err, "No cipher selected\n");
+            goto end;
+# endif
+        }
+
+        if (secret_key && !secret_keyid) {
+            BIO_printf(bio_err, "No secret key id\n");
+            goto end;
+        }
+
+        if (*argv && encerts == NULL)
+            if ((encerts = sk_X509_new_null()) == NULL)
+                goto end;
+        while (*argv) {
+            if ((cert = load_cert(*argv, FORMAT_PEM,
+                                  "recipient certificate file")) == NULL)
+                goto end;
+            sk_X509_push(encerts, cert);
+            cert = NULL;
+            argv++;
+        }
+    }
+
+    if (certfile != NULL) {
+        if (!load_certs(certfile, &other, FORMAT_PEM, NULL,
+                        "certificate file")) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (recipfile != NULL && (operation == SMIME_DECRYPT)) {
+        if ((recip = load_cert(recipfile, FORMAT_PEM,
+                               "recipient certificate file")) == NULL) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (operation == SMIME_SIGN_RECEIPT) {
+        if ((signer = load_cert(signerfile, FORMAT_PEM,
+                                "receipt signer certificate file")) == NULL) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (operation == SMIME_DECRYPT) {
+        if (keyfile == NULL)
+            keyfile = recipfile;
+    } else if ((operation == SMIME_SIGN) || (operation == SMIME_SIGN_RECEIPT)) {
+        if (keyfile == NULL)
+            keyfile = signerfile;
+    } else {
+        keyfile = NULL;
+    }
+
+    if (keyfile != NULL) {
+        key = load_key(keyfile, keyform, 0, passin, e, "signing key file");
+        if (key == NULL)
+            goto end;
+    }
+
+    in = bio_open_default(infile, 'r', informat);
+    if (in == NULL)
+        goto end;
+
+    if (operation & SMIME_IP) {
+        if (informat == FORMAT_SMIME) {
+            cms = SMIME_read_CMS(in, &indata);
+        } else if (informat == FORMAT_PEM) {
+            cms = PEM_read_bio_CMS(in, NULL, NULL, NULL);
+        } else if (informat == FORMAT_ASN1) {
+            cms = d2i_CMS_bio(in, NULL);
+        } else {
+            BIO_printf(bio_err, "Bad input format for CMS file\n");
+            goto end;
+        }
+
+        if (cms == NULL) {
+            BIO_printf(bio_err, "Error reading S/MIME message\n");
+            goto end;
+        }
+        if (contfile != NULL) {
+            BIO_free(indata);
+            if ((indata = BIO_new_file(contfile, "rb")) == NULL) {
+                BIO_printf(bio_err, "Can't read content file %s\n", contfile);
+                goto end;
+            }
+        }
+        if (certsoutfile != NULL) {
+            STACK_OF(X509) *allcerts;
+            allcerts = CMS_get1_certs(cms);
+            if (!save_certs(certsoutfile, allcerts)) {
+                BIO_printf(bio_err,
+                           "Error writing certs to %s\n", certsoutfile);
+                ret = 5;
+                goto end;
+            }
+            sk_X509_pop_free(allcerts, X509_free);
+        }
+    }
+
+    if (rctfile != NULL) {
+        char *rctmode = (rctformat == FORMAT_ASN1) ? "rb" : "r";
+        if ((rctin = BIO_new_file(rctfile, rctmode)) == NULL) {
+            BIO_printf(bio_err, "Can't open receipt file %s\n", rctfile);
+            goto end;
+        }
+
+        if (rctformat == FORMAT_SMIME) {
+            rcms = SMIME_read_CMS(rctin, NULL);
+        } else if (rctformat == FORMAT_PEM) {
+            rcms = PEM_read_bio_CMS(rctin, NULL, NULL, NULL);
+        } else if (rctformat == FORMAT_ASN1) {
+            rcms = d2i_CMS_bio(rctin, NULL);
+        } else {
+            BIO_printf(bio_err, "Bad input format for receipt\n");
+            goto end;
+        }
+
+        if (rcms == NULL) {
+            BIO_printf(bio_err, "Error reading receipt\n");
+            goto end;
+        }
+    }
+
+    out = bio_open_default(outfile, 'w', outformat);
+    if (out == NULL)
+        goto end;
+
+    if ((operation == SMIME_VERIFY) || (operation == SMIME_VERIFY_RECEIPT)) {
+        if ((store = setup_verify(CAfile, CApath, noCAfile, noCApath)) == NULL)
+            goto end;
+        X509_STORE_set_verify_cb(store, cms_cb);
+        if (vpmtouched)
+            X509_STORE_set1_param(store, vpm);
+    }
+
+    ret = 3;
+
+    if (operation == SMIME_DATA_CREATE) {
+        cms = CMS_data_create(in, flags);
+    } else if (operation == SMIME_DIGEST_CREATE) {
+        cms = CMS_digest_create(in, sign_md, flags);
+    } else if (operation == SMIME_COMPRESS) {
+        cms = CMS_compress(in, -1, flags);
+    } else if (operation == SMIME_ENCRYPT) {
+        int i;
+        flags |= CMS_PARTIAL;
+        cms = CMS_encrypt(NULL, in, cipher, flags);
+        if (cms == NULL)
+            goto end;
+        for (i = 0; i < sk_X509_num(encerts); i++) {
+            CMS_RecipientInfo *ri;
+            cms_key_param *kparam;
+            int tflags = flags;
+            X509 *x = sk_X509_value(encerts, i);
+            for (kparam = key_first; kparam; kparam = kparam->next) {
+                if (kparam->idx == i) {
+                    tflags |= CMS_KEY_PARAM;
+                    break;
+                }
+            }
+            ri = CMS_add1_recipient_cert(cms, x, tflags);
+            if (ri == NULL)
+                goto end;
+            if (kparam != NULL) {
+                EVP_PKEY_CTX *pctx;
+                pctx = CMS_RecipientInfo_get0_pkey_ctx(ri);
+                if (!cms_set_pkey_param(pctx, kparam->param))
+                    goto end;
+            }
+            if (CMS_RecipientInfo_type(ri) == CMS_RECIPINFO_AGREE
+                && wrap_cipher) {
+                EVP_CIPHER_CTX *wctx;
+                wctx = CMS_RecipientInfo_kari_get0_ctx(ri);
+                EVP_EncryptInit_ex(wctx, wrap_cipher, NULL, NULL, NULL);
+            }
+        }
+
+        if (secret_key != NULL) {
+            if (!CMS_add0_recipient_key(cms, NID_undef,
+                                        secret_key, secret_keylen,
+                                        secret_keyid, secret_keyidlen,
+                                        NULL, NULL, NULL))
+                goto end;
+            /* NULL these because call absorbs them */
+            secret_key = NULL;
+            secret_keyid = NULL;
+        }
+        if (pwri_pass != NULL) {
+            pwri_tmp = (unsigned char *)OPENSSL_strdup((char *)pwri_pass);
+            if (pwri_tmp == NULL)
+                goto end;
+            if (CMS_add0_recipient_password(cms,
+                                            -1, NID_undef, NID_undef,
+                                            pwri_tmp, -1, NULL) == NULL)
+                goto end;
+            pwri_tmp = NULL;
+        }
+        if (!(flags & CMS_STREAM)) {
+            if (!CMS_final(cms, in, NULL, flags))
+                goto end;
+        }
+    } else if (operation == SMIME_ENCRYPTED_ENCRYPT) {
+        cms = CMS_EncryptedData_encrypt(in, cipher,
+                                        secret_key, secret_keylen, flags);
+
+    } else if (operation == SMIME_SIGN_RECEIPT) {
+        CMS_ContentInfo *srcms = NULL;
+        STACK_OF(CMS_SignerInfo) *sis;
+        CMS_SignerInfo *si;
+        sis = CMS_get0_SignerInfos(cms);
+        if (sis == NULL)
+            goto end;
+        si = sk_CMS_SignerInfo_value(sis, 0);
+        srcms = CMS_sign_receipt(si, signer, key, other, flags);
+        if (srcms == NULL)
+            goto end;
+        CMS_ContentInfo_free(cms);
+        cms = srcms;
+    } else if (operation & SMIME_SIGNERS) {
+        int i;
+        /*
+         * If detached data content we enable streaming if S/MIME output
+         * format.
+         */
+        if (operation == SMIME_SIGN) {
+
+            if (flags & CMS_DETACHED) {
+                if (outformat == FORMAT_SMIME)
+                    flags |= CMS_STREAM;
+            }
+            flags |= CMS_PARTIAL;
+            cms = CMS_sign(NULL, NULL, other, in, flags);
+            if (cms == NULL)
+                goto end;
+            if (econtent_type != NULL)
+                CMS_set1_eContentType(cms, econtent_type);
+
+            if (rr_to != NULL) {
+                rr = make_receipt_request(rr_to, rr_allorfirst, rr_from);
+                if (rr == NULL) {
+                    BIO_puts(bio_err,
+                             "Signed Receipt Request Creation Error\n");
+                    goto end;
+                }
+            }
+        } else {
+            flags |= CMS_REUSE_DIGEST;
+        }
+        for (i = 0; i < sk_OPENSSL_STRING_num(sksigners); i++) {
+            CMS_SignerInfo *si;
+            cms_key_param *kparam;
+            int tflags = flags;
+            signerfile = sk_OPENSSL_STRING_value(sksigners, i);
+            keyfile = sk_OPENSSL_STRING_value(skkeys, i);
+
+            signer = load_cert(signerfile, FORMAT_PEM, "signer certificate");
+            if (signer == NULL) {
+                ret = 2;
+                goto end;
+            }
+            key = load_key(keyfile, keyform, 0, passin, e, "signing key file");
+            if (key == NULL) {
+                ret = 2;
+                goto end;
+            }
+            for (kparam = key_first; kparam; kparam = kparam->next) {
+                if (kparam->idx == i) {
+                    tflags |= CMS_KEY_PARAM;
+                    break;
+                }
+            }
+            si = CMS_add1_signer(cms, signer, key, sign_md, tflags);
+            if (si == NULL)
+                goto end;
+            if (kparam != NULL) {
+                EVP_PKEY_CTX *pctx;
+                pctx = CMS_SignerInfo_get0_pkey_ctx(si);
+                if (!cms_set_pkey_param(pctx, kparam->param))
+                    goto end;
+            }
+            if (rr != NULL && !CMS_add1_ReceiptRequest(si, rr))
+                goto end;
+            X509_free(signer);
+            signer = NULL;
+            EVP_PKEY_free(key);
+            key = NULL;
+        }
+        /* If not streaming or resigning finalize structure */
+        if ((operation == SMIME_SIGN) && !(flags & CMS_STREAM)) {
+            if (!CMS_final(cms, in, NULL, flags))
+                goto end;
+        }
+    }
+
+    if (cms == NULL) {
+        BIO_printf(bio_err, "Error creating CMS structure\n");
+        goto end;
+    }
+
+    ret = 4;
+    if (operation == SMIME_DECRYPT) {
+        if (flags & CMS_DEBUG_DECRYPT)
+            CMS_decrypt(cms, NULL, NULL, NULL, NULL, flags);
+
+        if (secret_key != NULL) {
+            if (!CMS_decrypt_set1_key(cms,
+                                      secret_key, secret_keylen,
+                                      secret_keyid, secret_keyidlen)) {
+                BIO_puts(bio_err, "Error decrypting CMS using secret key\n");
+                goto end;
+            }
+        }
+
+        if (key != NULL) {
+            if (!CMS_decrypt_set1_pkey(cms, key, recip)) {
+                BIO_puts(bio_err, "Error decrypting CMS using private key\n");
+                goto end;
+            }
+        }
+
+        if (pwri_pass != NULL) {
+            if (!CMS_decrypt_set1_password(cms, pwri_pass, -1)) {
+                BIO_puts(bio_err, "Error decrypting CMS using password\n");
+                goto end;
+            }
+        }
+
+        if (!CMS_decrypt(cms, NULL, NULL, indata, out, flags)) {
+            BIO_printf(bio_err, "Error decrypting CMS structure\n");
+            goto end;
+        }
+    } else if (operation == SMIME_DATAOUT) {
+        if (!CMS_data(cms, out, flags))
+            goto end;
+    } else if (operation == SMIME_UNCOMPRESS) {
+        if (!CMS_uncompress(cms, indata, out, flags))
+            goto end;
+    } else if (operation == SMIME_DIGEST_VERIFY) {
+        if (CMS_digest_verify(cms, indata, out, flags) > 0) {
+            BIO_printf(bio_err, "Verification successful\n");
+        } else {
+            BIO_printf(bio_err, "Verification failure\n");
+            goto end;
+        }
+    } else if (operation == SMIME_ENCRYPTED_DECRYPT) {
+        if (!CMS_EncryptedData_decrypt(cms, secret_key, secret_keylen,
+                                       indata, out, flags))
+            goto end;
+    } else if (operation == SMIME_VERIFY) {
+        if (CMS_verify(cms, other, store, indata, out, flags) > 0) {
+            BIO_printf(bio_err, "Verification successful\n");
+        } else {
+            BIO_printf(bio_err, "Verification failure\n");
+            if (verify_retcode)
+                ret = verify_err + 32;
+            goto end;
+        }
+        if (signerfile != NULL) {
+            STACK_OF(X509) *signers;
+            signers = CMS_get0_signers(cms);
+            if (!save_certs(signerfile, signers)) {
+                BIO_printf(bio_err,
+                           "Error writing signers to %s\n", signerfile);
+                ret = 5;
+                goto end;
+            }
+            sk_X509_free(signers);
+        }
+        if (rr_print)
+            receipt_request_print(cms);
+
+    } else if (operation == SMIME_VERIFY_RECEIPT) {
+        if (CMS_verify_receipt(rcms, cms, other, store, flags) > 0) {
+            BIO_printf(bio_err, "Verification successful\n");
+        } else {
+            BIO_printf(bio_err, "Verification failure\n");
+            goto end;
+        }
+    } else {
+        if (noout) {
+            if (print)
+                CMS_ContentInfo_print_ctx(out, cms, 0, NULL);
+        } else if (outformat == FORMAT_SMIME) {
+            if (to)
+                BIO_printf(out, "To: %s%s", to, mime_eol);
+            if (from)
+                BIO_printf(out, "From: %s%s", from, mime_eol);
+            if (subject)
+                BIO_printf(out, "Subject: %s%s", subject, mime_eol);
+            if (operation == SMIME_RESIGN)
+                ret = SMIME_write_CMS(out, cms, indata, flags);
+            else
+                ret = SMIME_write_CMS(out, cms, in, flags);
+        } else if (outformat == FORMAT_PEM) {
+            ret = PEM_write_bio_CMS_stream(out, cms, in, flags);
+        } else if (outformat == FORMAT_ASN1) {
+            ret = i2d_CMS_bio_stream(out, cms, in, flags);
+        } else {
+            BIO_printf(bio_err, "Bad output format for CMS file\n");
+            goto end;
+        }
+        if (ret <= 0) {
+            ret = 6;
+            goto end;
+        }
+    }
+    ret = 0;
+ end:
+    if (ret)
+        ERR_print_errors(bio_err);
+    sk_X509_pop_free(encerts, X509_free);
+    sk_X509_pop_free(other, X509_free);
+    X509_VERIFY_PARAM_free(vpm);
+    sk_OPENSSL_STRING_free(sksigners);
+    sk_OPENSSL_STRING_free(skkeys);
+    OPENSSL_free(secret_key);
+    OPENSSL_free(secret_keyid);
+    OPENSSL_free(pwri_tmp);
+    ASN1_OBJECT_free(econtent_type);
+    CMS_ReceiptRequest_free(rr);
+    sk_OPENSSL_STRING_free(rr_to);
+    sk_OPENSSL_STRING_free(rr_from);
+    for (key_param = key_first; key_param;) {
+        cms_key_param *tparam;
+        sk_OPENSSL_STRING_free(key_param->param);
+        tparam = key_param->next;
+        OPENSSL_free(key_param);
+        key_param = tparam;
+    }
+    X509_STORE_free(store);
+    X509_free(cert);
+    X509_free(recip);
+    X509_free(signer);
+    EVP_PKEY_free(key);
+    CMS_ContentInfo_free(cms);
+    CMS_ContentInfo_free(rcms);
+    release_engine(e);
+    BIO_free(rctin);
+    BIO_free(in);
+    BIO_free(indata);
+    BIO_free_all(out);
+    OPENSSL_free(passin);
+    return ret;
+}
+
+static int save_certs(char *signerfile, STACK_OF(X509) *signers)
+{
+    int i;
+    BIO *tmp;
+    if (signerfile == NULL)
+        return 1;
+    tmp = BIO_new_file(signerfile, "w");
+    if (tmp == NULL)
+        return 0;
+    for (i = 0; i < sk_X509_num(signers); i++)
+        PEM_write_bio_X509(tmp, sk_X509_value(signers, i));
+    BIO_free(tmp);
+    return 1;
+}
+
+/* Minimal callback just to output policy info (if any) */
+
+static int cms_cb(int ok, X509_STORE_CTX *ctx)
+{
+    int error;
+
+    error = X509_STORE_CTX_get_error(ctx);
+
+    verify_err = error;
+
+    if ((error != X509_V_ERR_NO_EXPLICIT_POLICY)
+        && ((error != X509_V_OK) || (ok != 2)))
+        return ok;
+
+    policies_print(ctx);
+
+    return ok;
+
+}
+
+static void gnames_stack_print(STACK_OF(GENERAL_NAMES) *gns)
+{
+    STACK_OF(GENERAL_NAME) *gens;
+    GENERAL_NAME *gen;
+    int i, j;
+
+    for (i = 0; i < sk_GENERAL_NAMES_num(gns); i++) {
+        gens = sk_GENERAL_NAMES_value(gns, i);
+        for (j = 0; j < sk_GENERAL_NAME_num(gens); j++) {
+            gen = sk_GENERAL_NAME_value(gens, j);
+            BIO_puts(bio_err, "    ");
+            GENERAL_NAME_print(bio_err, gen);
+            BIO_puts(bio_err, "\n");
+        }
+    }
+    return;
+}
+
+static void receipt_request_print(CMS_ContentInfo *cms)
+{
+    STACK_OF(CMS_SignerInfo) *sis;
+    CMS_SignerInfo *si;
+    CMS_ReceiptRequest *rr;
+    int allorfirst;
+    STACK_OF(GENERAL_NAMES) *rto, *rlist;
+    ASN1_STRING *scid;
+    int i, rv;
+    sis = CMS_get0_SignerInfos(cms);
+    for (i = 0; i < sk_CMS_SignerInfo_num(sis); i++) {
+        si = sk_CMS_SignerInfo_value(sis, i);
+        rv = CMS_get1_ReceiptRequest(si, &rr);
+        BIO_printf(bio_err, "Signer %d:\n", i + 1);
+        if (rv == 0) {
+            BIO_puts(bio_err, "  No Receipt Request\n");
+        } else if (rv < 0) {
+            BIO_puts(bio_err, "  Receipt Request Parse Error\n");
+            ERR_print_errors(bio_err);
+        } else {
+            const char *id;
+            int idlen;
+            CMS_ReceiptRequest_get0_values(rr, &scid, &allorfirst,
+                                           &rlist, &rto);
+            BIO_puts(bio_err, "  Signed Content ID:\n");
+            idlen = ASN1_STRING_length(scid);
+            id = (const char *)ASN1_STRING_get0_data(scid);
+            BIO_dump_indent(bio_err, id, idlen, 4);
+            BIO_puts(bio_err, "  Receipts From");
+            if (rlist != NULL) {
+                BIO_puts(bio_err, " List:\n");
+                gnames_stack_print(rlist);
+            } else if (allorfirst == 1) {
+                BIO_puts(bio_err, ": First Tier\n");
+            } else if (allorfirst == 0) {
+                BIO_puts(bio_err, ": All\n");
+            } else {
+                BIO_printf(bio_err, " Unknown (%d)\n", allorfirst);
+            }
+            BIO_puts(bio_err, "  Receipts To:\n");
+            gnames_stack_print(rto);
+        }
+        CMS_ReceiptRequest_free(rr);
+    }
+}
+
+static STACK_OF(GENERAL_NAMES) *make_names_stack(STACK_OF(OPENSSL_STRING) *ns)
+{
+    int i;
+    STACK_OF(GENERAL_NAMES) *ret;
+    GENERAL_NAMES *gens = NULL;
+    GENERAL_NAME *gen = NULL;
+    ret = sk_GENERAL_NAMES_new_null();
+    if (ret == NULL)
+        goto err;
+    for (i = 0; i < sk_OPENSSL_STRING_num(ns); i++) {
+        char *str = sk_OPENSSL_STRING_value(ns, i);
+        gen = a2i_GENERAL_NAME(NULL, NULL, NULL, GEN_EMAIL, str, 0);
+        if (gen == NULL)
+            goto err;
+        gens = GENERAL_NAMES_new();
+        if (gens == NULL)
+            goto err;
+        if (!sk_GENERAL_NAME_push(gens, gen))
+            goto err;
+        gen = NULL;
+        if (!sk_GENERAL_NAMES_push(ret, gens))
+            goto err;
+        gens = NULL;
+    }
+
+    return ret;
+
+ err:
+    sk_GENERAL_NAMES_pop_free(ret, GENERAL_NAMES_free);
+    GENERAL_NAMES_free(gens);
+    GENERAL_NAME_free(gen);
+    return NULL;
+}
+
+static CMS_ReceiptRequest *make_receipt_request(STACK_OF(OPENSSL_STRING)
+                                                *rr_to, int rr_allorfirst, STACK_OF(OPENSSL_STRING)
+                                                *rr_from)
+{
+    STACK_OF(GENERAL_NAMES) *rct_to = NULL, *rct_from = NULL;
+    CMS_ReceiptRequest *rr;
+    rct_to = make_names_stack(rr_to);
+    if (rct_to == NULL)
+        goto err;
+    if (rr_from != NULL) {
+        rct_from = make_names_stack(rr_from);
+        if (rct_from == NULL)
+            goto err;
+    } else {
+        rct_from = NULL;
+    }
+    rr = CMS_ReceiptRequest_create0(NULL, -1, rr_allorfirst, rct_from,
+                                    rct_to);
+    return rr;
+ err:
+    sk_GENERAL_NAMES_pop_free(rct_to, GENERAL_NAMES_free);
+    return NULL;
+}
+
+static int cms_set_pkey_param(EVP_PKEY_CTX *pctx,
+                              STACK_OF(OPENSSL_STRING) *param)
+{
+    char *keyopt;
+    int i;
+    if (sk_OPENSSL_STRING_num(param) <= 0)
+        return 1;
+    for (i = 0; i < sk_OPENSSL_STRING_num(param); i++) {
+        keyopt = sk_OPENSSL_STRING_value(param, i);
+        if (pkey_ctrl_string(pctx, keyopt) <= 0) {
+            BIO_printf(bio_err, "parameter error \"%s\"\n", keyopt);
+            ERR_print_errors(bio_err);
+            return 0;
+        }
+    }
+    return 1;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/crl.c b/trunk/3rdparty/openssl-1.1-fit/apps/crl.c
new file mode 100644
index 000000000..031fada14
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/crl.c
@@ -0,0 +1,342 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/bio.h>
+#include <openssl/err.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/pem.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_INFORM, OPT_IN, OPT_OUTFORM, OPT_OUT, OPT_KEYFORM, OPT_KEY,
+    OPT_ISSUER, OPT_LASTUPDATE, OPT_NEXTUPDATE, OPT_FINGERPRINT,
+    OPT_CRLNUMBER, OPT_BADSIG, OPT_GENDELTA, OPT_CAPATH, OPT_CAFILE,
+    OPT_NOCAPATH, OPT_NOCAFILE, OPT_VERIFY, OPT_TEXT, OPT_HASH, OPT_HASH_OLD,
+    OPT_NOOUT, OPT_NAMEOPT, OPT_MD
+} OPTION_CHOICE;
+
+const OPTIONS crl_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"inform", OPT_INFORM, 'F', "Input format; default PEM"},
+    {"in", OPT_IN, '<', "Input file - default stdin"},
+    {"outform", OPT_OUTFORM, 'F', "Output format - default PEM"},
+    {"out", OPT_OUT, '>', "output file - default stdout"},
+    {"keyform", OPT_KEYFORM, 'F', "Private key file format (PEM or ENGINE)"},
+    {"key", OPT_KEY, '<', "CRL signing Private key to use"},
+    {"issuer", OPT_ISSUER, '-', "Print issuer DN"},
+    {"lastupdate", OPT_LASTUPDATE, '-', "Set lastUpdate field"},
+    {"nextupdate", OPT_NEXTUPDATE, '-', "Set nextUpdate field"},
+    {"noout", OPT_NOOUT, '-', "No CRL output"},
+    {"fingerprint", OPT_FINGERPRINT, '-', "Print the crl fingerprint"},
+    {"crlnumber", OPT_CRLNUMBER, '-', "Print CRL number"},
+    {"badsig", OPT_BADSIG, '-', "Corrupt last byte of loaded CRL signature (for test)" },
+    {"gendelta", OPT_GENDELTA, '<', "Other CRL to compare/diff to the Input one"},
+    {"CApath", OPT_CAPATH, '/', "Verify CRL using certificates in dir"},
+    {"CAfile", OPT_CAFILE, '<', "Verify CRL using certificates in file name"},
+    {"no-CAfile", OPT_NOCAFILE, '-',
+     "Do not load the default certificates file"},
+    {"no-CApath", OPT_NOCAPATH, '-',
+     "Do not load certificates from the default certificates directory"},
+    {"verify", OPT_VERIFY, '-', "Verify CRL signature"},
+    {"text", OPT_TEXT, '-', "Print out a text format version"},
+    {"hash", OPT_HASH, '-', "Print hash value"},
+    {"nameopt", OPT_NAMEOPT, 's', "Various certificate name options"},
+    {"", OPT_MD, '-', "Any supported digest"},
+#ifndef OPENSSL_NO_MD5
+    {"hash_old", OPT_HASH_OLD, '-', "Print old-style (MD5) hash value"},
+#endif
+    {NULL}
+};
+
+int crl_main(int argc, char **argv)
+{
+    X509_CRL *x = NULL;
+    BIO *out = NULL;
+    X509_STORE *store = NULL;
+    X509_STORE_CTX *ctx = NULL;
+    X509_LOOKUP *lookup = NULL;
+    X509_OBJECT *xobj = NULL;
+    EVP_PKEY *pkey;
+    const EVP_MD *digest = EVP_sha1();
+    char *infile = NULL, *outfile = NULL, *crldiff = NULL, *keyfile = NULL;
+    const char *CAfile = NULL, *CApath = NULL, *prog;
+    OPTION_CHOICE o;
+    int hash = 0, issuer = 0, lastupdate = 0, nextupdate = 0, noout = 0;
+    int informat = FORMAT_PEM, outformat = FORMAT_PEM, keyformat = FORMAT_PEM;
+    int ret = 1, num = 0, badsig = 0, fingerprint = 0, crlnumber = 0;
+    int text = 0, do_ver = 0, noCAfile = 0, noCApath = 0;
+    int i;
+#ifndef OPENSSL_NO_MD5
+    int hash_old = 0;
+#endif
+
+    prog = opt_init(argc, argv, crl_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(crl_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &informat))
+                goto opthelp;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &outformat))
+                goto opthelp;
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_KEYFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &keyformat))
+                goto opthelp;
+            break;
+        case OPT_KEY:
+            keyfile = opt_arg();
+            break;
+        case OPT_GENDELTA:
+            crldiff = opt_arg();
+            break;
+        case OPT_CAPATH:
+            CApath = opt_arg();
+            do_ver = 1;
+            break;
+        case OPT_CAFILE:
+            CAfile = opt_arg();
+            do_ver = 1;
+            break;
+        case OPT_NOCAPATH:
+            noCApath =  1;
+            break;
+        case OPT_NOCAFILE:
+            noCAfile =  1;
+            break;
+        case OPT_HASH_OLD:
+#ifndef OPENSSL_NO_MD5
+            hash_old = ++num;
+#endif
+            break;
+        case OPT_VERIFY:
+            do_ver = 1;
+            break;
+        case OPT_TEXT:
+            text = 1;
+            break;
+        case OPT_HASH:
+            hash = ++num;
+            break;
+        case OPT_ISSUER:
+            issuer = ++num;
+            break;
+        case OPT_LASTUPDATE:
+            lastupdate = ++num;
+            break;
+        case OPT_NEXTUPDATE:
+            nextupdate = ++num;
+            break;
+        case OPT_NOOUT:
+            noout = ++num;
+            break;
+        case OPT_FINGERPRINT:
+            fingerprint = ++num;
+            break;
+        case OPT_CRLNUMBER:
+            crlnumber = ++num;
+            break;
+        case OPT_BADSIG:
+            badsig = 1;
+            break;
+        case OPT_NAMEOPT:
+            if (!set_nameopt(opt_arg()))
+                goto opthelp;
+            break;
+        case OPT_MD:
+            if (!opt_md(opt_unknown(), &digest))
+                goto opthelp;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    x = load_crl(infile, informat);
+    if (x == NULL)
+        goto end;
+
+    if (do_ver) {
+        if ((store = setup_verify(CAfile, CApath, noCAfile, noCApath)) == NULL)
+            goto end;
+        lookup = X509_STORE_add_lookup(store, X509_LOOKUP_file());
+        if (lookup == NULL)
+            goto end;
+        ctx = X509_STORE_CTX_new();
+        if (ctx == NULL || !X509_STORE_CTX_init(ctx, store, NULL, NULL)) {
+            BIO_printf(bio_err, "Error initialising X509 store\n");
+            goto end;
+        }
+
+        xobj = X509_STORE_CTX_get_obj_by_subject(ctx, X509_LU_X509,
+                                                 X509_CRL_get_issuer(x));
+        if (xobj == NULL) {
+            BIO_printf(bio_err, "Error getting CRL issuer certificate\n");
+            goto end;
+        }
+        pkey = X509_get_pubkey(X509_OBJECT_get0_X509(xobj));
+        X509_OBJECT_free(xobj);
+        if (!pkey) {
+            BIO_printf(bio_err, "Error getting CRL issuer public key\n");
+            goto end;
+        }
+        i = X509_CRL_verify(x, pkey);
+        EVP_PKEY_free(pkey);
+        if (i < 0)
+            goto end;
+        if (i == 0)
+            BIO_printf(bio_err, "verify failure\n");
+        else
+            BIO_printf(bio_err, "verify OK\n");
+    }
+
+    if (crldiff) {
+        X509_CRL *newcrl, *delta;
+        if (!keyfile) {
+            BIO_puts(bio_err, "Missing CRL signing key\n");
+            goto end;
+        }
+        newcrl = load_crl(crldiff, informat);
+        if (!newcrl)
+            goto end;
+        pkey = load_key(keyfile, keyformat, 0, NULL, NULL, "CRL signing key");
+        if (!pkey) {
+            X509_CRL_free(newcrl);
+            goto end;
+        }
+        delta = X509_CRL_diff(x, newcrl, pkey, digest, 0);
+        X509_CRL_free(newcrl);
+        EVP_PKEY_free(pkey);
+        if (delta) {
+            X509_CRL_free(x);
+            x = delta;
+        } else {
+            BIO_puts(bio_err, "Error creating delta CRL\n");
+            goto end;
+        }
+    }
+
+    if (badsig) {
+        const ASN1_BIT_STRING *sig;
+
+        X509_CRL_get0_signature(x, &sig, NULL);
+        corrupt_signature(sig);
+    }
+
+    if (num) {
+        for (i = 1; i <= num; i++) {
+            if (issuer == i) {
+                print_name(bio_out, "issuer=", X509_CRL_get_issuer(x),
+                           get_nameopt());
+            }
+            if (crlnumber == i) {
+                ASN1_INTEGER *crlnum;
+                crlnum = X509_CRL_get_ext_d2i(x, NID_crl_number, NULL, NULL);
+                BIO_printf(bio_out, "crlNumber=");
+                if (crlnum) {
+                    i2a_ASN1_INTEGER(bio_out, crlnum);
+                    ASN1_INTEGER_free(crlnum);
+                } else
+                    BIO_puts(bio_out, "<NONE>");
+                BIO_printf(bio_out, "\n");
+            }
+            if (hash == i) {
+                BIO_printf(bio_out, "%08lx\n",
+                           X509_NAME_hash(X509_CRL_get_issuer(x)));
+            }
+#ifndef OPENSSL_NO_MD5
+            if (hash_old == i) {
+                BIO_printf(bio_out, "%08lx\n",
+                           X509_NAME_hash_old(X509_CRL_get_issuer(x)));
+            }
+#endif
+            if (lastupdate == i) {
+                BIO_printf(bio_out, "lastUpdate=");
+                ASN1_TIME_print(bio_out, X509_CRL_get0_lastUpdate(x));
+                BIO_printf(bio_out, "\n");
+            }
+            if (nextupdate == i) {
+                BIO_printf(bio_out, "nextUpdate=");
+                if (X509_CRL_get0_nextUpdate(x))
+                    ASN1_TIME_print(bio_out, X509_CRL_get0_nextUpdate(x));
+                else
+                    BIO_printf(bio_out, "NONE");
+                BIO_printf(bio_out, "\n");
+            }
+            if (fingerprint == i) {
+                int j;
+                unsigned int n;
+                unsigned char md[EVP_MAX_MD_SIZE];
+
+                if (!X509_CRL_digest(x, digest, md, &n)) {
+                    BIO_printf(bio_err, "out of memory\n");
+                    goto end;
+                }
+                BIO_printf(bio_out, "%s Fingerprint=",
+                           OBJ_nid2sn(EVP_MD_type(digest)));
+                for (j = 0; j < (int)n; j++) {
+                    BIO_printf(bio_out, "%02X%c", md[j], (j + 1 == (int)n)
+                               ? '\n' : ':');
+                }
+            }
+        }
+    }
+    out = bio_open_default(outfile, 'w', outformat);
+    if (out == NULL)
+        goto end;
+
+    if (text)
+        X509_CRL_print_ex(out, x, get_nameopt());
+
+    if (noout) {
+        ret = 0;
+        goto end;
+    }
+
+    if (outformat == FORMAT_ASN1)
+        i = (int)i2d_X509_CRL_bio(out, x);
+    else
+        i = PEM_write_bio_X509_CRL(out, x);
+    if (!i) {
+        BIO_printf(bio_err, "unable to write CRL\n");
+        goto end;
+    }
+    ret = 0;
+
+ end:
+    if (ret != 0)
+        ERR_print_errors(bio_err);
+    BIO_free_all(out);
+    X509_CRL_free(x);
+    X509_STORE_CTX_free(ctx);
+    X509_STORE_free(store);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/crl2p7.c b/trunk/3rdparty/openssl-1.1-fit/apps/crl2p7.c
new file mode 100644
index 000000000..88fabcb22
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/crl2p7.c
@@ -0,0 +1,217 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include <sys/types.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/pkcs7.h>
+#include <openssl/pem.h>
+#include <openssl/objects.h>
+
+static int add_certs_from_file(STACK_OF(X509) *stack, char *certfile);
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_INFORM, OPT_OUTFORM, OPT_IN, OPT_OUT, OPT_NOCRL, OPT_CERTFILE
+} OPTION_CHOICE;
+
+const OPTIONS crl2pkcs7_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"inform", OPT_INFORM, 'F', "Input format - DER or PEM"},
+    {"outform", OPT_OUTFORM, 'F', "Output format - DER or PEM"},
+    {"in", OPT_IN, '<', "Input file"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"nocrl", OPT_NOCRL, '-', "No crl to load, just certs from '-certfile'"},
+    {"certfile", OPT_CERTFILE, '<',
+     "File of chain of certs to a trusted CA; can be repeated"},
+    {NULL}
+};
+
+int crl2pkcs7_main(int argc, char **argv)
+{
+    BIO *in = NULL, *out = NULL;
+    PKCS7 *p7 = NULL;
+    PKCS7_SIGNED *p7s = NULL;
+    STACK_OF(OPENSSL_STRING) *certflst = NULL;
+    STACK_OF(X509) *cert_stack = NULL;
+    STACK_OF(X509_CRL) *crl_stack = NULL;
+    X509_CRL *crl = NULL;
+    char *infile = NULL, *outfile = NULL, *prog, *certfile;
+    int i = 0, informat = FORMAT_PEM, outformat = FORMAT_PEM, ret = 1, nocrl =
+        0;
+    OPTION_CHOICE o;
+
+    prog = opt_init(argc, argv, crl2pkcs7_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(crl2pkcs7_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &informat))
+                goto opthelp;
+            break;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &outformat))
+                goto opthelp;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_NOCRL:
+            nocrl = 1;
+            break;
+        case OPT_CERTFILE:
+            if ((certflst == NULL)
+                && (certflst = sk_OPENSSL_STRING_new_null()) == NULL)
+                goto end;
+            if (!sk_OPENSSL_STRING_push(certflst, opt_arg()))
+                goto end;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    if (!nocrl) {
+        in = bio_open_default(infile, 'r', informat);
+        if (in == NULL)
+            goto end;
+
+        if (informat == FORMAT_ASN1)
+            crl = d2i_X509_CRL_bio(in, NULL);
+        else if (informat == FORMAT_PEM)
+            crl = PEM_read_bio_X509_CRL(in, NULL, NULL, NULL);
+        if (crl == NULL) {
+            BIO_printf(bio_err, "unable to load CRL\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if ((p7 = PKCS7_new()) == NULL)
+        goto end;
+    if ((p7s = PKCS7_SIGNED_new()) == NULL)
+        goto end;
+    p7->type = OBJ_nid2obj(NID_pkcs7_signed);
+    p7->d.sign = p7s;
+    p7s->contents->type = OBJ_nid2obj(NID_pkcs7_data);
+
+    if (!ASN1_INTEGER_set(p7s->version, 1))
+        goto end;
+    if ((crl_stack = sk_X509_CRL_new_null()) == NULL)
+        goto end;
+    p7s->crl = crl_stack;
+    if (crl != NULL) {
+        sk_X509_CRL_push(crl_stack, crl);
+        crl = NULL;             /* now part of p7 for OPENSSL_freeing */
+    }
+
+    if ((cert_stack = sk_X509_new_null()) == NULL)
+        goto end;
+    p7s->cert = cert_stack;
+
+    if (certflst != NULL)
+        for (i = 0; i < sk_OPENSSL_STRING_num(certflst); i++) {
+            certfile = sk_OPENSSL_STRING_value(certflst, i);
+            if (add_certs_from_file(cert_stack, certfile) < 0) {
+                BIO_printf(bio_err, "error loading certificates\n");
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+        }
+
+    out = bio_open_default(outfile, 'w', outformat);
+    if (out == NULL)
+        goto end;
+
+    if (outformat == FORMAT_ASN1)
+        i = i2d_PKCS7_bio(out, p7);
+    else if (outformat == FORMAT_PEM)
+        i = PEM_write_bio_PKCS7(out, p7);
+    if (!i) {
+        BIO_printf(bio_err, "unable to write pkcs7 object\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+    ret = 0;
+ end:
+    sk_OPENSSL_STRING_free(certflst);
+    BIO_free(in);
+    BIO_free_all(out);
+    PKCS7_free(p7);
+    X509_CRL_free(crl);
+
+    return ret;
+}
+
+/*-
+ *----------------------------------------------------------------------
+ * int add_certs_from_file
+ *
+ *      Read a list of certificates to be checked from a file.
+ *
+ * Results:
+ *      number of certs added if successful, -1 if not.
+ *----------------------------------------------------------------------
+ */
+static int add_certs_from_file(STACK_OF(X509) *stack, char *certfile)
+{
+    BIO *in = NULL;
+    int count = 0;
+    int ret = -1;
+    STACK_OF(X509_INFO) *sk = NULL;
+    X509_INFO *xi;
+
+    in = BIO_new_file(certfile, "r");
+    if (in == NULL) {
+        BIO_printf(bio_err, "error opening the file, %s\n", certfile);
+        goto end;
+    }
+
+    /* This loads from a file, a stack of x509/crl/pkey sets */
+    sk = PEM_X509_INFO_read_bio(in, NULL, NULL, NULL);
+    if (sk == NULL) {
+        BIO_printf(bio_err, "error reading the file, %s\n", certfile);
+        goto end;
+    }
+
+    /* scan over it and pull out the CRL's */
+    while (sk_X509_INFO_num(sk)) {
+        xi = sk_X509_INFO_shift(sk);
+        if (xi->x509 != NULL) {
+            sk_X509_push(stack, xi->x509);
+            xi->x509 = NULL;
+            count++;
+        }
+        X509_INFO_free(xi);
+    }
+
+    ret = count;
+ end:
+    /* never need to OPENSSL_free x */
+    BIO_free(in);
+    sk_X509_INFO_free(sk);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/ct_log_list.cnf b/trunk/3rdparty/openssl-1.1-fit/apps/ct_log_list.cnf
new file mode 100644
index 000000000..e643cfdbd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/ct_log_list.cnf
@@ -0,0 +1,9 @@
+# This file specifies the Certificate Transparency logs
+# that are to be trusted.
+
+# Google's list of logs can be found here:
+#       www.certificate-transparency.org/known-logs
+# A Python program to convert the log list to OpenSSL's format can be
+# found here:
+#       https://github.com/google/certificate-transparency/blob/master/python/utilities/log_list/print_log_list.py
+# Use the "--openssl_output" flag.
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/demoSRP/srp_verifier.txt b/trunk/3rdparty/openssl-1.1-fit/apps/demoSRP/srp_verifier.txt
new file mode 100644
index 000000000..c2d5c6033
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/demoSRP/srp_verifier.txt
@@ -0,0 +1,6 @@
+# This is a file that will be filled by the openssl srp routine.
+# You can initialize the file with additional groups, these are
+# records starting with a I followed by the g and N values and the id.
+# The exact values ... you have to dig this out from the source of srp.c
+# or srp_vfy.c
+# The last value of an I is used as the default group for new users.
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/demoSRP/srp_verifier.txt.attr b/trunk/3rdparty/openssl-1.1-fit/apps/demoSRP/srp_verifier.txt.attr
new file mode 100644
index 000000000..8f7e63a34
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/demoSRP/srp_verifier.txt.attr
@@ -0,0 +1 @@
+unique_subject = yes
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/dgst.c b/trunk/3rdparty/openssl-1.1-fit/apps/dgst.c
new file mode 100644
index 000000000..d158a0ccb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/dgst.c
@@ -0,0 +1,492 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include <stdlib.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/bio.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include <openssl/pem.h>
+#include <openssl/hmac.h>
+
+#undef BUFSIZE
+#define BUFSIZE 1024*8
+
+int do_fp(BIO *out, unsigned char *buf, BIO *bp, int sep, int binout,
+          EVP_PKEY *key, unsigned char *sigin, int siglen,
+          const char *sig_name, const char *md_name,
+          const char *file);
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_C, OPT_R, OPT_OUT, OPT_SIGN, OPT_PASSIN, OPT_VERIFY,
+    OPT_PRVERIFY, OPT_SIGNATURE, OPT_KEYFORM, OPT_ENGINE, OPT_ENGINE_IMPL,
+    OPT_HEX, OPT_BINARY, OPT_DEBUG, OPT_FIPS_FINGERPRINT,
+    OPT_HMAC, OPT_MAC, OPT_SIGOPT, OPT_MACOPT,
+    OPT_DIGEST,
+    OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS dgst_options[] = {
+    {OPT_HELP_STR, 1, '-', "Usage: %s [options] [file...]\n"},
+    {OPT_HELP_STR, 1, '-',
+        "  file... files to digest (default is stdin)\n"},
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"c", OPT_C, '-', "Print the digest with separating colons"},
+    {"r", OPT_R, '-', "Print the digest in coreutils format"},
+    {"out", OPT_OUT, '>', "Output to filename rather than stdout"},
+    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
+    {"sign", OPT_SIGN, 's', "Sign digest using private key"},
+    {"verify", OPT_VERIFY, 's',
+     "Verify a signature using public key"},
+    {"prverify", OPT_PRVERIFY, 's',
+     "Verify a signature using private key"},
+    {"signature", OPT_SIGNATURE, '<', "File with signature to verify"},
+    {"keyform", OPT_KEYFORM, 'f', "Key file format (PEM or ENGINE)"},
+    {"hex", OPT_HEX, '-', "Print as hex dump"},
+    {"binary", OPT_BINARY, '-', "Print in binary form"},
+    {"d", OPT_DEBUG, '-', "Print debug info"},
+    {"debug", OPT_DEBUG, '-', "Print debug info"},
+    {"fips-fingerprint", OPT_FIPS_FINGERPRINT, '-',
+     "Compute HMAC with the key used in OpenSSL-FIPS fingerprint"},
+    {"hmac", OPT_HMAC, 's', "Create hashed MAC with key"},
+    {"mac", OPT_MAC, 's', "Create MAC (not necessarily HMAC)"},
+    {"sigopt", OPT_SIGOPT, 's', "Signature parameter in n:v form"},
+    {"macopt", OPT_MACOPT, 's', "MAC algorithm parameters in n:v form or key"},
+    {"", OPT_DIGEST, '-', "Any supported digest"},
+    OPT_R_OPTIONS,
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine e, possibly a hardware device"},
+    {"engine_impl", OPT_ENGINE_IMPL, '-',
+     "Also use engine given by -engine for digest operations"},
+#endif
+    {NULL}
+};
+
+int dgst_main(int argc, char **argv)
+{
+    BIO *in = NULL, *inp, *bmd = NULL, *out = NULL;
+    ENGINE *e = NULL, *impl = NULL;
+    EVP_PKEY *sigkey = NULL;
+    STACK_OF(OPENSSL_STRING) *sigopts = NULL, *macopts = NULL;
+    char *hmac_key = NULL;
+    char *mac_name = NULL;
+    char *passinarg = NULL, *passin = NULL;
+    const EVP_MD *md = NULL, *m;
+    const char *outfile = NULL, *keyfile = NULL, *prog = NULL;
+    const char *sigfile = NULL;
+    OPTION_CHOICE o;
+    int separator = 0, debug = 0, keyform = FORMAT_PEM, siglen = 0;
+    int i, ret = 1, out_bin = -1, want_pub = 0, do_verify = 0;
+    unsigned char *buf = NULL, *sigbuf = NULL;
+    int engine_impl = 0;
+
+    prog = opt_progname(argv[0]);
+    buf = app_malloc(BUFSIZE, "I/O buffer");
+    md = EVP_get_digestbyname(prog);
+
+    prog = opt_init(argc, argv, dgst_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(dgst_options);
+            ret = 0;
+            goto end;
+        case OPT_C:
+            separator = 1;
+            break;
+        case OPT_R:
+            separator = 2;
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_SIGN:
+            keyfile = opt_arg();
+            break;
+        case OPT_PASSIN:
+            passinarg = opt_arg();
+            break;
+        case OPT_VERIFY:
+            keyfile = opt_arg();
+            want_pub = do_verify = 1;
+            break;
+        case OPT_PRVERIFY:
+            keyfile = opt_arg();
+            do_verify = 1;
+            break;
+        case OPT_SIGNATURE:
+            sigfile = opt_arg();
+            break;
+        case OPT_KEYFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_ANY, &keyform))
+                goto opthelp;
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_ENGINE_IMPL:
+            engine_impl = 1;
+            break;
+        case OPT_HEX:
+            out_bin = 0;
+            break;
+        case OPT_BINARY:
+            out_bin = 1;
+            break;
+        case OPT_DEBUG:
+            debug = 1;
+            break;
+        case OPT_FIPS_FINGERPRINT:
+            hmac_key = "etaonrishdlcupfm";
+            break;
+        case OPT_HMAC:
+            hmac_key = opt_arg();
+            break;
+        case OPT_MAC:
+            mac_name = opt_arg();
+            break;
+        case OPT_SIGOPT:
+            if (!sigopts)
+                sigopts = sk_OPENSSL_STRING_new_null();
+            if (!sigopts || !sk_OPENSSL_STRING_push(sigopts, opt_arg()))
+                goto opthelp;
+            break;
+        case OPT_MACOPT:
+            if (!macopts)
+                macopts = sk_OPENSSL_STRING_new_null();
+            if (!macopts || !sk_OPENSSL_STRING_push(macopts, opt_arg()))
+                goto opthelp;
+            break;
+        case OPT_DIGEST:
+            if (!opt_md(opt_unknown(), &m))
+                goto opthelp;
+            md = m;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+    if (keyfile != NULL && argc > 1) {
+        BIO_printf(bio_err, "%s: Can only sign or verify one file.\n", prog);
+        goto end;
+    }
+
+    if (do_verify && sigfile == NULL) {
+        BIO_printf(bio_err,
+                   "No signature to verify: use the -signature option\n");
+        goto end;
+    }
+    if (engine_impl)
+        impl = e;
+
+    in = BIO_new(BIO_s_file());
+    bmd = BIO_new(BIO_f_md());
+    if ((in == NULL) || (bmd == NULL)) {
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    if (debug) {
+        BIO_set_callback(in, BIO_debug_callback);
+        /* needed for windows 3.1 */
+        BIO_set_callback_arg(in, (char *)bio_err);
+    }
+
+    if (!app_passwd(passinarg, NULL, &passin, NULL)) {
+        BIO_printf(bio_err, "Error getting password\n");
+        goto end;
+    }
+
+    if (out_bin == -1) {
+        if (keyfile != NULL)
+            out_bin = 1;
+        else
+            out_bin = 0;
+    }
+
+    out = bio_open_default(outfile, 'w', out_bin ? FORMAT_BINARY : FORMAT_TEXT);
+    if (out == NULL)
+        goto end;
+
+    if ((!(mac_name == NULL) + !(keyfile == NULL) + !(hmac_key == NULL)) > 1) {
+        BIO_printf(bio_err, "MAC and Signing key cannot both be specified\n");
+        goto end;
+    }
+
+    if (keyfile != NULL) {
+        int type;
+
+        if (want_pub)
+            sigkey = load_pubkey(keyfile, keyform, 0, NULL, e, "key file");
+        else
+            sigkey = load_key(keyfile, keyform, 0, passin, e, "key file");
+        if (sigkey == NULL) {
+            /*
+             * load_[pub]key() has already printed an appropriate message
+             */
+            goto end;
+        }
+        type = EVP_PKEY_id(sigkey);
+        if (type == EVP_PKEY_ED25519 || type == EVP_PKEY_ED448) {
+            /*
+             * We implement PureEdDSA for these which doesn't have a separate
+             * digest, and only supports one shot.
+             */
+            BIO_printf(bio_err, "Key type not supported for this operation\n");
+            goto end;
+        }
+    }
+
+    if (mac_name != NULL) {
+        EVP_PKEY_CTX *mac_ctx = NULL;
+        int r = 0;
+        if (!init_gen_str(&mac_ctx, mac_name, impl, 0))
+            goto mac_end;
+        if (macopts != NULL) {
+            char *macopt;
+            for (i = 0; i < sk_OPENSSL_STRING_num(macopts); i++) {
+                macopt = sk_OPENSSL_STRING_value(macopts, i);
+                if (pkey_ctrl_string(mac_ctx, macopt) <= 0) {
+                    BIO_printf(bio_err,
+                               "MAC parameter error \"%s\"\n", macopt);
+                    ERR_print_errors(bio_err);
+                    goto mac_end;
+                }
+            }
+        }
+        if (EVP_PKEY_keygen(mac_ctx, &sigkey) <= 0) {
+            BIO_puts(bio_err, "Error generating key\n");
+            ERR_print_errors(bio_err);
+            goto mac_end;
+        }
+        r = 1;
+ mac_end:
+        EVP_PKEY_CTX_free(mac_ctx);
+        if (r == 0)
+            goto end;
+    }
+
+    if (hmac_key != NULL) {
+        sigkey = EVP_PKEY_new_raw_private_key(EVP_PKEY_HMAC, impl,
+                                              (unsigned char *)hmac_key, -1);
+        if (sigkey == NULL)
+            goto end;
+    }
+
+    if (sigkey != NULL) {
+        EVP_MD_CTX *mctx = NULL;
+        EVP_PKEY_CTX *pctx = NULL;
+        int r;
+        if (!BIO_get_md_ctx(bmd, &mctx)) {
+            BIO_printf(bio_err, "Error getting context\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        if (do_verify)
+            r = EVP_DigestVerifyInit(mctx, &pctx, md, impl, sigkey);
+        else
+            r = EVP_DigestSignInit(mctx, &pctx, md, impl, sigkey);
+        if (!r) {
+            BIO_printf(bio_err, "Error setting context\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        if (sigopts != NULL) {
+            char *sigopt;
+            for (i = 0; i < sk_OPENSSL_STRING_num(sigopts); i++) {
+                sigopt = sk_OPENSSL_STRING_value(sigopts, i);
+                if (pkey_ctrl_string(pctx, sigopt) <= 0) {
+                    BIO_printf(bio_err, "parameter error \"%s\"\n", sigopt);
+                    ERR_print_errors(bio_err);
+                    goto end;
+                }
+            }
+        }
+    }
+    /* we use md as a filter, reading from 'in' */
+    else {
+        EVP_MD_CTX *mctx = NULL;
+        if (!BIO_get_md_ctx(bmd, &mctx)) {
+            BIO_printf(bio_err, "Error getting context\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        if (md == NULL)
+            md = EVP_sha256();
+        if (!EVP_DigestInit_ex(mctx, md, impl)) {
+            BIO_printf(bio_err, "Error setting digest\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (sigfile != NULL && sigkey != NULL) {
+        BIO *sigbio = BIO_new_file(sigfile, "rb");
+        if (sigbio == NULL) {
+            BIO_printf(bio_err, "Error opening signature file %s\n", sigfile);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        siglen = EVP_PKEY_size(sigkey);
+        sigbuf = app_malloc(siglen, "signature buffer");
+        siglen = BIO_read(sigbio, sigbuf, siglen);
+        BIO_free(sigbio);
+        if (siglen <= 0) {
+            BIO_printf(bio_err, "Error reading signature file %s\n", sigfile);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+    inp = BIO_push(bmd, in);
+
+    if (md == NULL) {
+        EVP_MD_CTX *tctx;
+        BIO_get_md_ctx(bmd, &tctx);
+        md = EVP_MD_CTX_md(tctx);
+    }
+
+    if (argc == 0) {
+        BIO_set_fp(in, stdin, BIO_NOCLOSE);
+        ret = do_fp(out, buf, inp, separator, out_bin, sigkey, sigbuf,
+                    siglen, NULL, NULL, "stdin");
+    } else {
+        const char *md_name = NULL, *sig_name = NULL;
+        if (!out_bin) {
+            if (sigkey != NULL) {
+                const EVP_PKEY_ASN1_METHOD *ameth;
+                ameth = EVP_PKEY_get0_asn1(sigkey);
+                if (ameth)
+                    EVP_PKEY_asn1_get0_info(NULL, NULL,
+                                            NULL, NULL, &sig_name, ameth);
+            }
+            if (md != NULL)
+                md_name = EVP_MD_name(md);
+        }
+        ret = 0;
+        for (i = 0; i < argc; i++) {
+            int r;
+            if (BIO_read_filename(in, argv[i]) <= 0) {
+                perror(argv[i]);
+                ret++;
+                continue;
+            } else {
+                r = do_fp(out, buf, inp, separator, out_bin, sigkey, sigbuf,
+                          siglen, sig_name, md_name, argv[i]);
+            }
+            if (r)
+                ret = r;
+            (void)BIO_reset(bmd);
+        }
+    }
+ end:
+    OPENSSL_clear_free(buf, BUFSIZE);
+    BIO_free(in);
+    OPENSSL_free(passin);
+    BIO_free_all(out);
+    EVP_PKEY_free(sigkey);
+    sk_OPENSSL_STRING_free(sigopts);
+    sk_OPENSSL_STRING_free(macopts);
+    OPENSSL_free(sigbuf);
+    BIO_free(bmd);
+    release_engine(e);
+    return ret;
+}
+
+int do_fp(BIO *out, unsigned char *buf, BIO *bp, int sep, int binout,
+          EVP_PKEY *key, unsigned char *sigin, int siglen,
+          const char *sig_name, const char *md_name,
+          const char *file)
+{
+    size_t len;
+    int i;
+
+    for (;;) {
+        i = BIO_read(bp, (char *)buf, BUFSIZE);
+        if (i < 0) {
+            BIO_printf(bio_err, "Read Error in %s\n", file);
+            ERR_print_errors(bio_err);
+            return 1;
+        }
+        if (i == 0)
+            break;
+    }
+    if (sigin != NULL) {
+        EVP_MD_CTX *ctx;
+        BIO_get_md_ctx(bp, &ctx);
+        i = EVP_DigestVerifyFinal(ctx, sigin, (unsigned int)siglen);
+        if (i > 0) {
+            BIO_printf(out, "Verified OK\n");
+        } else if (i == 0) {
+            BIO_printf(out, "Verification Failure\n");
+            return 1;
+        } else {
+            BIO_printf(bio_err, "Error Verifying Data\n");
+            ERR_print_errors(bio_err);
+            return 1;
+        }
+        return 0;
+    }
+    if (key != NULL) {
+        EVP_MD_CTX *ctx;
+        BIO_get_md_ctx(bp, &ctx);
+        len = BUFSIZE;
+        if (!EVP_DigestSignFinal(ctx, buf, &len)) {
+            BIO_printf(bio_err, "Error Signing Data\n");
+            ERR_print_errors(bio_err);
+            return 1;
+        }
+    } else {
+        len = BIO_gets(bp, (char *)buf, BUFSIZE);
+        if ((int)len < 0) {
+            ERR_print_errors(bio_err);
+            return 1;
+        }
+    }
+
+    if (binout) {
+        BIO_write(out, buf, len);
+    } else if (sep == 2) {
+        for (i = 0; i < (int)len; i++)
+            BIO_printf(out, "%02x", buf[i]);
+        BIO_printf(out, " *%s\n", file);
+    } else {
+        if (sig_name != NULL) {
+            BIO_puts(out, sig_name);
+            if (md_name != NULL)
+                BIO_printf(out, "-%s", md_name);
+            BIO_printf(out, "(%s)= ", file);
+        } else if (md_name != NULL) {
+            BIO_printf(out, "%s(%s)= ", md_name, file);
+        } else {
+            BIO_printf(out, "(%s)= ", file);
+        }
+        for (i = 0; i < (int)len; i++) {
+            if (sep && (i != 0))
+                BIO_printf(out, ":");
+            BIO_printf(out, "%02x", buf[i]);
+        }
+        BIO_printf(out, "\n");
+    }
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/dh1024.pem b/trunk/3rdparty/openssl-1.1-fit/apps/dh1024.pem
new file mode 100644
index 000000000..813e8a4a4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/dh1024.pem
@@ -0,0 +1,10 @@
+-----BEGIN DH PARAMETERS-----
+MIGHAoGBAP//////////yQ/aoiFowjTExmKLgNwc0SkCTgiKZ8x0Agu+pjsTmyJR
+Sgh5jjQE3e+VGbPNOkMbMCsKbfJfFDdP4TVtbVHCReSFtXZiXn7G9ExC6aY37WsL
+/1y29Aa37e44a/taiZ+lrp8kEXxLH+ZJKGZR7OZTgf//////////AgEC
+-----END DH PARAMETERS-----
+
+These are the 1024-bit DH parameters from "Internet Key Exchange
+Protocol Version 2 (IKEv2)": https://tools.ietf.org/html/rfc5996
+
+See https://tools.ietf.org/html/rfc2412 for how they were generated.
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/dh2048.pem b/trunk/3rdparty/openssl-1.1-fit/apps/dh2048.pem
new file mode 100644
index 000000000..288a20997
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/dh2048.pem
@@ -0,0 +1,14 @@
+-----BEGIN DH PARAMETERS-----
+MIIBCAKCAQEA///////////JD9qiIWjCNMTGYouA3BzRKQJOCIpnzHQCC76mOxOb
+IlFKCHmONATd75UZs806QxswKwpt8l8UN0/hNW1tUcJF5IW1dmJefsb0TELppjft
+awv/XLb0Brft7jhr+1qJn6WunyQRfEsf5kkoZlHs5Fs9wgB8uKFjvwWY2kg2HFXT
+mmkWP6j9JM9fg2VdI9yjrZYcYvNWIIVSu57VKQdwlpZtZww1Tkq8mATxdGwIyhgh
+fDKQXkYuNs474553LBgOhgObJ4Oi7Aeij7XFXfBvTFLJ3ivL9pVYFxg5lUl86pVq
+5RXSJhiY+gUQFXKOWoqsqmj//////////wIBAg==
+-----END DH PARAMETERS-----
+
+These are the 2048-bit DH parameters from "More Modular Exponential
+(MODP) Diffie-Hellman groups for Internet Key Exchange (IKE)":
+https://tools.ietf.org/html/rfc3526
+
+See https://tools.ietf.org/html/rfc2412 for how they were generated.
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/dh4096.pem b/trunk/3rdparty/openssl-1.1-fit/apps/dh4096.pem
new file mode 100644
index 000000000..08560e128
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/dh4096.pem
@@ -0,0 +1,19 @@
+-----BEGIN DH PARAMETERS-----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=
+-----END DH PARAMETERS-----
+
+These are the 4096-bit DH parameters from "More Modular Exponential
+(MODP) Diffie-Hellman groups for Internet Key Exchange (IKE)":
+https://tools.ietf.org/html/rfc3526
+
+See https://tools.ietf.org/html/rfc2412 for how they were generated.
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/dhparam.c b/trunk/3rdparty/openssl-1.1-fit/apps/dhparam.c
new file mode 100644
index 000000000..13f76754d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/dhparam.c
@@ -0,0 +1,379 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_DH
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <stdio.h>
+# include <stdlib.h>
+# include <time.h>
+# include <string.h>
+# include "apps.h"
+# include "progs.h"
+# include <openssl/bio.h>
+# include <openssl/err.h>
+# include <openssl/bn.h>
+# include <openssl/dh.h>
+# include <openssl/x509.h>
+# include <openssl/pem.h>
+
+# ifndef OPENSSL_NO_DSA
+#  include <openssl/dsa.h>
+# endif
+
+# define DEFBITS 2048
+
+static int dh_cb(int p, int n, BN_GENCB *cb);
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_INFORM, OPT_OUTFORM, OPT_IN, OPT_OUT,
+    OPT_ENGINE, OPT_CHECK, OPT_TEXT, OPT_NOOUT,
+    OPT_DSAPARAM, OPT_C, OPT_2, OPT_5,
+    OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS dhparam_options[] = {
+    {OPT_HELP_STR, 1, '-', "Usage: %s [flags] [numbits]\n"},
+    {OPT_HELP_STR, 1, '-', "Valid options are:\n"},
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"in", OPT_IN, '<', "Input file"},
+    {"inform", OPT_INFORM, 'F', "Input format, DER or PEM"},
+    {"outform", OPT_OUTFORM, 'F', "Output format, DER or PEM"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"check", OPT_CHECK, '-', "Check the DH parameters"},
+    {"text", OPT_TEXT, '-', "Print a text form of the DH parameters"},
+    {"noout", OPT_NOOUT, '-', "Don't output any DH parameters"},
+    OPT_R_OPTIONS,
+    {"C", OPT_C, '-', "Print C code"},
+    {"2", OPT_2, '-', "Generate parameters using 2 as the generator value"},
+    {"5", OPT_5, '-', "Generate parameters using 5 as the generator value"},
+# ifndef OPENSSL_NO_DSA
+    {"dsaparam", OPT_DSAPARAM, '-',
+     "Read or generate DSA parameters, convert to DH"},
+# endif
+# ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine e, possibly a hardware device"},
+# endif
+    {NULL}
+};
+
+int dhparam_main(int argc, char **argv)
+{
+    BIO *in = NULL, *out = NULL;
+    DH *dh = NULL;
+    char *infile = NULL, *outfile = NULL, *prog;
+    ENGINE *e = NULL;
+#ifndef OPENSSL_NO_DSA
+    int dsaparam = 0;
+#endif
+    int i, text = 0, C = 0, ret = 1, num = 0, g = 0;
+    int informat = FORMAT_PEM, outformat = FORMAT_PEM, check = 0, noout = 0;
+    OPTION_CHOICE o;
+
+    prog = opt_init(argc, argv, dhparam_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(dhparam_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &informat))
+                goto opthelp;
+            break;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &outformat))
+                goto opthelp;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_CHECK:
+            check = 1;
+            break;
+        case OPT_TEXT:
+            text = 1;
+            break;
+        case OPT_DSAPARAM:
+#ifndef OPENSSL_NO_DSA
+            dsaparam = 1;
+#endif
+            break;
+        case OPT_C:
+            C = 1;
+            break;
+        case OPT_2:
+            g = 2;
+            break;
+        case OPT_5:
+            g = 5;
+            break;
+        case OPT_NOOUT:
+            noout = 1;
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+
+    if (argv[0] != NULL && (!opt_int(argv[0], &num) || num <= 0))
+        goto end;
+
+    if (g && !num)
+        num = DEFBITS;
+
+# ifndef OPENSSL_NO_DSA
+    if (dsaparam && g) {
+        BIO_printf(bio_err,
+                   "generator may not be chosen for DSA parameters\n");
+        goto end;
+    }
+# endif
+
+    out = bio_open_default(outfile, 'w', outformat);
+    if (out == NULL)
+        goto end;
+
+    /* DH parameters */
+    if (num && !g)
+        g = 2;
+
+    if (num) {
+
+        BN_GENCB *cb;
+        cb = BN_GENCB_new();
+        if (cb == NULL) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+
+        BN_GENCB_set(cb, dh_cb, bio_err);
+
+# ifndef OPENSSL_NO_DSA
+        if (dsaparam) {
+            DSA *dsa = DSA_new();
+
+            BIO_printf(bio_err,
+                       "Generating DSA parameters, %d bit long prime\n", num);
+            if (dsa == NULL
+                || !DSA_generate_parameters_ex(dsa, num, NULL, 0, NULL, NULL,
+                                               cb)) {
+                DSA_free(dsa);
+                BN_GENCB_free(cb);
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+
+            dh = DSA_dup_DH(dsa);
+            DSA_free(dsa);
+            if (dh == NULL) {
+                BN_GENCB_free(cb);
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+        } else
+# endif
+        {
+            dh = DH_new();
+            BIO_printf(bio_err,
+                       "Generating DH parameters, %d bit long safe prime, generator %d\n",
+                       num, g);
+            BIO_printf(bio_err, "This is going to take a long time\n");
+            if (dh == NULL || !DH_generate_parameters_ex(dh, num, g, cb)) {
+                BN_GENCB_free(cb);
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+        }
+
+        BN_GENCB_free(cb);
+    } else {
+
+        in = bio_open_default(infile, 'r', informat);
+        if (in == NULL)
+            goto end;
+
+# ifndef OPENSSL_NO_DSA
+        if (dsaparam) {
+            DSA *dsa;
+
+            if (informat == FORMAT_ASN1)
+                dsa = d2i_DSAparams_bio(in, NULL);
+            else                /* informat == FORMAT_PEM */
+                dsa = PEM_read_bio_DSAparams(in, NULL, NULL, NULL);
+
+            if (dsa == NULL) {
+                BIO_printf(bio_err, "unable to load DSA parameters\n");
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+
+            dh = DSA_dup_DH(dsa);
+            DSA_free(dsa);
+            if (dh == NULL) {
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+        } else
+# endif
+        {
+            if (informat == FORMAT_ASN1) {
+                /*
+                 * We have no PEM header to determine what type of DH params it
+                 * is. We'll just try both.
+                 */
+                dh = d2i_DHparams_bio(in, NULL);
+                /* BIO_reset() returns 0 for success for file BIOs only!!! */
+                if (dh == NULL && BIO_reset(in) == 0)
+                    dh = d2i_DHxparams_bio(in, NULL);
+            } else {
+                /* informat == FORMAT_PEM */
+                dh = PEM_read_bio_DHparams(in, NULL, NULL, NULL);
+            }
+
+            if (dh == NULL) {
+                BIO_printf(bio_err, "unable to load DH parameters\n");
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+        }
+
+        /* dh != NULL */
+    }
+
+    if (text) {
+        DHparams_print(out, dh);
+    }
+
+    if (check) {
+        if (!DH_check(dh, &i)) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        if (i & DH_CHECK_P_NOT_PRIME)
+            BIO_printf(bio_err, "WARNING: p value is not prime\n");
+        if (i & DH_CHECK_P_NOT_SAFE_PRIME)
+            BIO_printf(bio_err, "WARNING: p value is not a safe prime\n");
+        if (i & DH_CHECK_Q_NOT_PRIME)
+            BIO_printf(bio_err, "WARNING: q value is not a prime\n");
+        if (i & DH_CHECK_INVALID_Q_VALUE)
+            BIO_printf(bio_err, "WARNING: q value is invalid\n");
+        if (i & DH_CHECK_INVALID_J_VALUE)
+            BIO_printf(bio_err, "WARNING: j value is invalid\n");
+        if (i & DH_UNABLE_TO_CHECK_GENERATOR)
+            BIO_printf(bio_err,
+                       "WARNING: unable to check the generator value\n");
+        if (i & DH_NOT_SUITABLE_GENERATOR)
+            BIO_printf(bio_err, "WARNING: the g value is not a generator\n");
+        if (i == 0)
+            BIO_printf(bio_err, "DH parameters appear to be ok.\n");
+        if (num != 0 && i != 0) {
+            /*
+             * We have generated parameters but DH_check() indicates they are
+             * invalid! This should never happen!
+             */
+            BIO_printf(bio_err, "ERROR: Invalid parameters generated\n");
+            goto end;
+        }
+    }
+    if (C) {
+        unsigned char *data;
+        int len, bits;
+        const BIGNUM *pbn, *gbn;
+
+        len = DH_size(dh);
+        bits = DH_bits(dh);
+        DH_get0_pqg(dh, &pbn, NULL, &gbn);
+        data = app_malloc(len, "print a BN");
+
+        BIO_printf(out, "static DH *get_dh%d(void)\n{\n", bits);
+        print_bignum_var(out, pbn, "dhp", bits, data);
+        print_bignum_var(out, gbn, "dhg", bits, data);
+        BIO_printf(out, "    DH *dh = DH_new();\n"
+                        "    BIGNUM *p, *g;\n"
+                        "\n"
+                        "    if (dh == NULL)\n"
+                        "        return NULL;\n");
+        BIO_printf(out, "    p = BN_bin2bn(dhp_%d, sizeof(dhp_%d), NULL);\n",
+                   bits, bits);
+        BIO_printf(out, "    g = BN_bin2bn(dhg_%d, sizeof(dhg_%d), NULL);\n",
+                   bits, bits);
+        BIO_printf(out, "    if (p == NULL || g == NULL\n"
+                        "            || !DH_set0_pqg(dh, p, NULL, g)) {\n"
+                        "        DH_free(dh);\n"
+                        "        BN_free(p);\n"
+                        "        BN_free(g);\n"
+                        "        return NULL;\n"
+                        "    }\n");
+        if (DH_get_length(dh) > 0)
+            BIO_printf(out,
+                        "    if (!DH_set_length(dh, %ld)) {\n"
+                        "        DH_free(dh);\n"
+                        "        return NULL;\n"
+                        "    }\n", DH_get_length(dh));
+        BIO_printf(out, "    return dh;\n}\n");
+        OPENSSL_free(data);
+    }
+
+    if (!noout) {
+        const BIGNUM *q;
+        DH_get0_pqg(dh, NULL, &q, NULL);
+        if (outformat == FORMAT_ASN1) {
+            if (q != NULL)
+                i = i2d_DHxparams_bio(out, dh);
+            else
+                i = i2d_DHparams_bio(out, dh);
+        } else if (q != NULL) {
+            i = PEM_write_bio_DHxparams(out, dh);
+        } else {
+            i = PEM_write_bio_DHparams(out, dh);
+        }
+        if (!i) {
+            BIO_printf(bio_err, "unable to write DH parameters\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+    ret = 0;
+ end:
+    BIO_free(in);
+    BIO_free_all(out);
+    DH_free(dh);
+    release_engine(e);
+    return ret;
+}
+
+static int dh_cb(int p, int n, BN_GENCB *cb)
+{
+    static const char symbols[] = ".+*\n";
+    char c = (p >= 0 && (size_t)p < sizeof(symbols) - 1) ? symbols[p] : '?';
+
+    BIO_write(BN_GENCB_get_arg(cb), &c, 1);
+    (void)BIO_flush(BN_GENCB_get_arg(cb));
+    return 1;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/dsa-ca.pem b/trunk/3rdparty/openssl-1.1-fit/apps/dsa-ca.pem
new file mode 100644
index 000000000..3ce8dc605
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/dsa-ca.pem
@@ -0,0 +1,47 @@
+-----BEGIN DSA PRIVATE KEY-----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+-----END DSA PRIVATE KEY-----
+-----BEGIN CERTIFICATE REQUEST-----
+MIICVjCCAhMCAQAwUjELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUx
+ITAfBgNVBAoMGEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDELMAkGA1UEAwwCQ0Ew
+ggG2MIIBKwYHKoZIzjgEATCCAR4CgYEApz9uhb9Bail98J9HGTCQmgkd2mozHsU9
+hpazFeBTLo/gWYJzkD51MZlHelL7heTZpns4m2iKhJuHxh61foZLU1tZz3FlGYhu
+zmaua4g2++wo3MLXpbvlLDkmS9qacBiVN5UQViP2Fe26BF7eOU/9t0MftaRlb82A
+EeRwlVtQzUkCFQD3BzHt+mwGA9WFihysnGXnUGZlbwKBgE3fTAOmkYr1GW9QRiWZ
+5WhvMONp4eWzXZi7KIZI/N6ZBD9fiAyccyQNIF25Kpo/GJYn5GKHwXt0YlP8YSeo
+epEJnbbxTZxUD1gG7kl0B85VfiPOFvbK3FphAX7JcbVN9tw0KYdo9l4gk7Pb9eQJ
+bEEXlZLrAbVzpWp+2DLtDgK4A4GEAAKBgBqmWXqKrP1etkWWTYYJVwH4qKHFacfs
+i4e9IvD1hSslqFwEeZum+3j3iUXiALnDdY8z69cmh9u6yTgahAQSxA0wNpqHibj2
+5SoDKU5UUkkle6KtUn6j7RO04UMhMQCX5hllquJc4Pu105I6X1Esw8Lr51ocpL17
+ry7d6fGGqcMZoAAwCwYJYIZIAWUDBAMCAzAAMC0CFCp7rUwGJNtxK6Aqo6k6US+S
+KP8sAhUAyfSi8Zs3QAvkJoFG0IMRaq8M03I=
+-----END CERTIFICATE REQUEST-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/dsa-pca.pem b/trunk/3rdparty/openssl-1.1-fit/apps/dsa-pca.pem
new file mode 100644
index 000000000..a51a06ed1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/dsa-pca.pem
@@ -0,0 +1,47 @@
+-----BEGIN DSA PRIVATE KEY-----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+-----END DSA PRIVATE KEY-----
+-----BEGIN CERTIFICATE REQUEST-----
+MIICWDCCAhUCAQAwUzELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUx
+ITAfBgNVBAoMGEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDEMMAoGA1UEAwwDUENB
+MIIBtzCCASsGByqGSM44BAEwggEeAoGBAKc/boW/QWopffCfRxkwkJoJHdpqMx7F
+PYaWsxXgUy6P4FmCc5A+dTGZR3pS+4Xk2aZ7OJtoioSbh8YetX6GS1NbWc9xZRmI
+bs5mrmuINvvsKNzC16W75Sw5JkvamnAYlTeVEFYj9hXtugRe3jlP/bdDH7WkZW/N
+gBHkcJVbUM1JAhUA9wcx7fpsBgPVhYocrJxl51BmZW8CgYBN30wDppGK9RlvUEYl
+meVobzDjaeHls12YuyiGSPzemQQ/X4gMnHMkDSBduSqaPxiWJ+Rih8F7dGJT/GEn
+qHqRCZ228U2cVA9YBu5JdAfOVX4jzhb2ytxaYQF+yXG1TfbcNCmHaPZeIJOz2/Xk
+CWxBF5WS6wG1c6Vqftgy7Q4CuAOBhQACgYEApu25HkB1b4gKMIV7aLGNSIknMzYg
+rB7o1kQxeDf34dDVRM9OZ8tkumz6tl+iUcNe5EoxdsYV1IXSddjOi08LOLsZq7AQ
+lNnKvbtlmMDULpqkZJD0bO7A29nisJfKy1URqABLw5DgfcPh1ZLXtmDfUgJvmjgT
+mvTPT2j9TPjq7RWgADALBglghkgBZQMEAwIDMAAwLQIVAPA6/jxCT1D2HgzE4iZR
+AEup/C7YAhRPLTQvQnAiS5FRrA+8SwBLvDAsaw==
+-----END CERTIFICATE REQUEST-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/dsa.c b/trunk/3rdparty/openssl-1.1-fit/apps/dsa.c
new file mode 100644
index 000000000..6022e64cd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/dsa.c
@@ -0,0 +1,265 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_DSA
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <stdio.h>
+# include <stdlib.h>
+# include <string.h>
+# include <time.h>
+# include "apps.h"
+# include "progs.h"
+# include <openssl/bio.h>
+# include <openssl/err.h>
+# include <openssl/dsa.h>
+# include <openssl/evp.h>
+# include <openssl/x509.h>
+# include <openssl/pem.h>
+# include <openssl/bn.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_INFORM, OPT_OUTFORM, OPT_IN, OPT_OUT, OPT_ENGINE,
+    /* Do not change the order here; see case statements below */
+    OPT_PVK_NONE, OPT_PVK_WEAK, OPT_PVK_STRONG,
+    OPT_NOOUT, OPT_TEXT, OPT_MODULUS, OPT_PUBIN,
+    OPT_PUBOUT, OPT_CIPHER, OPT_PASSIN, OPT_PASSOUT
+} OPTION_CHOICE;
+
+const OPTIONS dsa_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"inform", OPT_INFORM, 'f', "Input format, DER PEM PVK"},
+    {"outform", OPT_OUTFORM, 'f', "Output format, DER PEM PVK"},
+    {"in", OPT_IN, 's', "Input key"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"noout", OPT_NOOUT, '-', "Don't print key out"},
+    {"text", OPT_TEXT, '-', "Print the key in text"},
+    {"modulus", OPT_MODULUS, '-', "Print the DSA public value"},
+    {"pubin", OPT_PUBIN, '-', "Expect a public key in input file"},
+    {"pubout", OPT_PUBOUT, '-', "Output public key, not private"},
+    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
+    {"passout", OPT_PASSOUT, 's', "Output file pass phrase source"},
+    {"", OPT_CIPHER, '-', "Any supported cipher"},
+# ifndef OPENSSL_NO_RC4
+    {"pvk-strong", OPT_PVK_STRONG, '-', "Enable 'Strong' PVK encoding level (default)"},
+    {"pvk-weak", OPT_PVK_WEAK, '-', "Enable 'Weak' PVK encoding level"},
+    {"pvk-none", OPT_PVK_NONE, '-', "Don't enforce PVK encoding"},
+# endif
+# ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine e, possibly a hardware device"},
+# endif
+    {NULL}
+};
+
+int dsa_main(int argc, char **argv)
+{
+    BIO *out = NULL;
+    DSA *dsa = NULL;
+    ENGINE *e = NULL;
+    const EVP_CIPHER *enc = NULL;
+    char *infile = NULL, *outfile = NULL, *prog;
+    char *passin = NULL, *passout = NULL, *passinarg = NULL, *passoutarg = NULL;
+    OPTION_CHOICE o;
+    int informat = FORMAT_PEM, outformat = FORMAT_PEM, text = 0, noout = 0;
+    int i, modulus = 0, pubin = 0, pubout = 0, ret = 1;
+# ifndef OPENSSL_NO_RC4
+    int pvk_encr = 2;
+# endif
+    int private = 0;
+
+    prog = opt_init(argc, argv, dsa_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            ret = 0;
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(dsa_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_ANY, &informat))
+                goto opthelp;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_ANY, &outformat))
+                goto opthelp;
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_PASSIN:
+            passinarg = opt_arg();
+            break;
+        case OPT_PASSOUT:
+            passoutarg = opt_arg();
+            break;
+        case OPT_PVK_STRONG:    /* pvk_encr:= 2 */
+        case OPT_PVK_WEAK:      /* pvk_encr:= 1 */
+        case OPT_PVK_NONE:      /* pvk_encr:= 0 */
+#ifndef OPENSSL_NO_RC4
+            pvk_encr = (o - OPT_PVK_NONE);
+#endif
+            break;
+        case OPT_NOOUT:
+            noout = 1;
+            break;
+        case OPT_TEXT:
+            text = 1;
+            break;
+        case OPT_MODULUS:
+            modulus = 1;
+            break;
+        case OPT_PUBIN:
+            pubin = 1;
+            break;
+        case OPT_PUBOUT:
+            pubout = 1;
+            break;
+        case OPT_CIPHER:
+            if (!opt_cipher(opt_unknown(), &enc))
+                goto end;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    private = pubin || pubout ? 0 : 1;
+    if (text && !pubin)
+        private = 1;
+
+    if (!app_passwd(passinarg, passoutarg, &passin, &passout)) {
+        BIO_printf(bio_err, "Error getting passwords\n");
+        goto end;
+    }
+
+    BIO_printf(bio_err, "read DSA key\n");
+    {
+        EVP_PKEY *pkey;
+
+        if (pubin)
+            pkey = load_pubkey(infile, informat, 1, passin, e, "Public Key");
+        else
+            pkey = load_key(infile, informat, 1, passin, e, "Private Key");
+
+        if (pkey != NULL) {
+            dsa = EVP_PKEY_get1_DSA(pkey);
+            EVP_PKEY_free(pkey);
+        }
+    }
+    if (dsa == NULL) {
+        BIO_printf(bio_err, "unable to load Key\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    out = bio_open_owner(outfile, outformat, private);
+    if (out == NULL)
+        goto end;
+
+    if (text) {
+        assert(pubin || private);
+        if (!DSA_print(out, dsa, 0)) {
+            perror(outfile);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (modulus) {
+        const BIGNUM *pub_key = NULL;
+        DSA_get0_key(dsa, &pub_key, NULL);
+        BIO_printf(out, "Public Key=");
+        BN_print(out, pub_key);
+        BIO_printf(out, "\n");
+    }
+
+    if (noout) {
+        ret = 0;
+        goto end;
+    }
+    BIO_printf(bio_err, "writing DSA key\n");
+    if (outformat == FORMAT_ASN1) {
+        if (pubin || pubout) {
+            i = i2d_DSA_PUBKEY_bio(out, dsa);
+        } else {
+            assert(private);
+            i = i2d_DSAPrivateKey_bio(out, dsa);
+        }
+    } else if (outformat == FORMAT_PEM) {
+        if (pubin || pubout) {
+            i = PEM_write_bio_DSA_PUBKEY(out, dsa);
+        } else {
+            assert(private);
+            i = PEM_write_bio_DSAPrivateKey(out, dsa, enc,
+                                            NULL, 0, NULL, passout);
+        }
+# ifndef OPENSSL_NO_RSA
+    } else if (outformat == FORMAT_MSBLOB || outformat == FORMAT_PVK) {
+        EVP_PKEY *pk;
+        pk = EVP_PKEY_new();
+        if (pk == NULL)
+           goto end;
+
+        EVP_PKEY_set1_DSA(pk, dsa);
+        if (outformat == FORMAT_PVK) {
+            if (pubin) {
+                BIO_printf(bio_err, "PVK form impossible with public key input\n");
+                EVP_PKEY_free(pk);
+                goto end;
+            }
+            assert(private);
+#  ifdef OPENSSL_NO_RC4
+            BIO_printf(bio_err, "PVK format not supported\n");
+            EVP_PKEY_free(pk);
+            goto end;
+#  else
+            i = i2b_PVK_bio(out, pk, pvk_encr, 0, passout);
+#  endif
+        } else if (pubin || pubout) {
+            i = i2b_PublicKey_bio(out, pk);
+        } else {
+            assert(private);
+            i = i2b_PrivateKey_bio(out, pk);
+        }
+        EVP_PKEY_free(pk);
+# endif
+    } else {
+        BIO_printf(bio_err, "bad output format specified for outfile\n");
+        goto end;
+    }
+    if (i <= 0) {
+        BIO_printf(bio_err, "unable to write private key\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+    ret = 0;
+ end:
+    BIO_free_all(out);
+    DSA_free(dsa);
+    release_engine(e);
+    OPENSSL_free(passin);
+    OPENSSL_free(passout);
+    return ret;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/dsa1024.pem b/trunk/3rdparty/openssl-1.1-fit/apps/dsa1024.pem
new file mode 100644
index 000000000..082dec389
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/dsa1024.pem
@@ -0,0 +1,9 @@
+-----BEGIN DSA PARAMETERS-----
+MIIBHgKBgQCnP26Fv0FqKX3wn0cZMJCaCR3aajMexT2GlrMV4FMuj+BZgnOQPnUx
+mUd6UvuF5NmmezibaIqEm4fGHrV+hktTW1nPcWUZiG7OZq5riDb77Cjcwtelu+Us
+OSZL2ppwGJU3lRBWI/YV7boEXt45T/23Qx+1pGVvzYAR5HCVW1DNSQIVAPcHMe36
+bAYD1YWKHKycZedQZmVvAoGATd9MA6aRivUZb1BGJZnlaG8w42nh5bNdmLsohkj8
+3pkEP1+IDJxzJA0gXbkqmj8YlifkYofBe3RiU/xhJ6h6kQmdtvFNnFQPWAbuSXQH
+zlV+I84W9srcWmEBfslxtU323DQph2j2XiCTs9v15AlsQReVkusBtXOlan7YMu0O
+Arg=
+-----END DSA PARAMETERS-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/dsa512.pem b/trunk/3rdparty/openssl-1.1-fit/apps/dsa512.pem
new file mode 100644
index 000000000..5f86d1a6e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/dsa512.pem
@@ -0,0 +1,6 @@
+-----BEGIN DSA PARAMETERS-----
+MIGdAkEAnRtpjibb8isRcBmG9hnI+BnyGFOURgbQYlAzSwI8UjADizv5X9EkBk97
+TLqqQJv9luQ3M7stWtdaEUBmonZ9MQIVAPtT71C0QJIxVoZTeuiLIppJ+3GPAkEA
+gz6I5cWJc847bAFJv7PHnwrqRJHlMKrZvltftxDXibeOdPvPKR7rqCxUUbgQ3qDO
+L8wka5B33qJoplISogOdIA==
+-----END DSA PARAMETERS-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/dsap.pem b/trunk/3rdparty/openssl-1.1-fit/apps/dsap.pem
new file mode 100644
index 000000000..d4dfdb305
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/dsap.pem
@@ -0,0 +1,6 @@
+-----BEGIN DSA PARAMETERS-----
+MIGcAkEA+ZiKEvZmc9MtnaFZh4NiZ3oZS4J1PHvPrm9MXj5ntVheDPkdmBDTncya
+GAJcMjwsyB/GvLDGd6yGCw/8eF+09wIVAK3VagOxGd/Q4Af5NbxR5FB7CXEjAkA2
+t/q7HgVLi0KeKvcDG8BRl3wuy7bCvpjgtWiJc/tpvcuzeuAayH89UofjAGueKjXD
+ADiRffvSdhrNw5dkqdql
+-----END DSA PARAMETERS-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/dsaparam.c b/trunk/3rdparty/openssl-1.1-fit/apps/dsaparam.c
new file mode 100644
index 000000000..b227b76a3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/dsaparam.c
@@ -0,0 +1,258 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_DSA
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <stdio.h>
+# include <stdlib.h>
+# include <time.h>
+# include <string.h>
+# include "apps.h"
+# include "progs.h"
+# include <openssl/bio.h>
+# include <openssl/err.h>
+# include <openssl/bn.h>
+# include <openssl/dsa.h>
+# include <openssl/x509.h>
+# include <openssl/pem.h>
+
+static int dsa_cb(int p, int n, BN_GENCB *cb);
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_INFORM, OPT_OUTFORM, OPT_IN, OPT_OUT, OPT_TEXT, OPT_C,
+    OPT_NOOUT, OPT_GENKEY, OPT_ENGINE, OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS dsaparam_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"inform", OPT_INFORM, 'F', "Input format - DER or PEM"},
+    {"in", OPT_IN, '<', "Input file"},
+    {"outform", OPT_OUTFORM, 'F', "Output format - DER or PEM"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"text", OPT_TEXT, '-', "Print as text"},
+    {"C", OPT_C, '-', "Output C code"},
+    {"noout", OPT_NOOUT, '-', "No output"},
+    {"genkey", OPT_GENKEY, '-', "Generate a DSA key"},
+    OPT_R_OPTIONS,
+# ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine e, possibly a hardware device"},
+# endif
+    {NULL}
+};
+
+int dsaparam_main(int argc, char **argv)
+{
+    ENGINE *e = NULL;
+    DSA *dsa = NULL;
+    BIO *in = NULL, *out = NULL;
+    BN_GENCB *cb = NULL;
+    int numbits = -1, num = 0, genkey = 0;
+    int informat = FORMAT_PEM, outformat = FORMAT_PEM, noout = 0, C = 0;
+    int ret = 1, i, text = 0, private = 0;
+    char *infile = NULL, *outfile = NULL, *prog;
+    OPTION_CHOICE o;
+
+    prog = opt_init(argc, argv, dsaparam_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(dsaparam_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &informat))
+                goto opthelp;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &outformat))
+                goto opthelp;
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_TEXT:
+            text = 1;
+            break;
+        case OPT_C:
+            C = 1;
+            break;
+        case OPT_GENKEY:
+            genkey = 1;
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_NOOUT:
+            noout = 1;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+
+    if (argc == 1) {
+        if (!opt_int(argv[0], &num) || num < 0)
+            goto end;
+        /* generate a key */
+        numbits = num;
+    }
+    private = genkey ? 1 : 0;
+
+    in = bio_open_default(infile, 'r', informat);
+    if (in == NULL)
+        goto end;
+    out = bio_open_owner(outfile, outformat, private);
+    if (out == NULL)
+        goto end;
+
+    if (numbits > 0) {
+        if (numbits > OPENSSL_DSA_MAX_MODULUS_BITS)
+            BIO_printf(bio_err,
+                       "Warning: It is not recommended to use more than %d bit for DSA keys.\n"
+                       "         Your key size is %d! Larger key size may behave not as expected.\n",
+                       OPENSSL_DSA_MAX_MODULUS_BITS, numbits);
+
+        cb = BN_GENCB_new();
+        if (cb == NULL) {
+            BIO_printf(bio_err, "Error allocating BN_GENCB object\n");
+            goto end;
+        }
+        BN_GENCB_set(cb, dsa_cb, bio_err);
+        dsa = DSA_new();
+        if (dsa == NULL) {
+            BIO_printf(bio_err, "Error allocating DSA object\n");
+            goto end;
+        }
+        BIO_printf(bio_err, "Generating DSA parameters, %d bit long prime\n",
+                   num);
+        BIO_printf(bio_err, "This could take some time\n");
+        if (!DSA_generate_parameters_ex(dsa, num, NULL, 0, NULL, NULL, cb)) {
+            ERR_print_errors(bio_err);
+            BIO_printf(bio_err, "Error, DSA key generation failed\n");
+            goto end;
+        }
+    } else if (informat == FORMAT_ASN1) {
+        dsa = d2i_DSAparams_bio(in, NULL);
+    } else {
+        dsa = PEM_read_bio_DSAparams(in, NULL, NULL, NULL);
+    }
+    if (dsa == NULL) {
+        BIO_printf(bio_err, "unable to load DSA parameters\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    if (text) {
+        DSAparams_print(out, dsa);
+    }
+
+    if (C) {
+        const BIGNUM *p = NULL, *q = NULL, *g = NULL;
+        unsigned char *data;
+        int len, bits_p;
+
+        DSA_get0_pqg(dsa, &p, &q, &g);
+        len = BN_num_bytes(p);
+        bits_p = BN_num_bits(p);
+
+        data = app_malloc(len + 20, "BN space");
+
+        BIO_printf(bio_out, "static DSA *get_dsa%d(void)\n{\n", bits_p);
+        print_bignum_var(bio_out, p, "dsap", bits_p, data);
+        print_bignum_var(bio_out, q, "dsaq", bits_p, data);
+        print_bignum_var(bio_out, g, "dsag", bits_p, data);
+        BIO_printf(bio_out, "    DSA *dsa = DSA_new();\n"
+                            "    BIGNUM *p, *q, *g;\n"
+                            "\n");
+        BIO_printf(bio_out, "    if (dsa == NULL)\n"
+                            "        return NULL;\n");
+        BIO_printf(bio_out, "    if (!DSA_set0_pqg(dsa, p = BN_bin2bn(dsap_%d, sizeof(dsap_%d), NULL),\n",
+                   bits_p, bits_p);
+        BIO_printf(bio_out, "                           q = BN_bin2bn(dsaq_%d, sizeof(dsaq_%d), NULL),\n",
+                   bits_p, bits_p);
+        BIO_printf(bio_out, "                           g = BN_bin2bn(dsag_%d, sizeof(dsag_%d), NULL))) {\n",
+                   bits_p, bits_p);
+        BIO_printf(bio_out, "        DSA_free(dsa);\n"
+                            "        BN_free(p);\n"
+                            "        BN_free(q);\n"
+                            "        BN_free(g);\n"
+                            "        return NULL;\n"
+                            "    }\n"
+                            "    return dsa;\n}\n");
+        OPENSSL_free(data);
+    }
+
+    if (outformat == FORMAT_ASN1 && genkey)
+        noout = 1;
+
+    if (!noout) {
+        if (outformat == FORMAT_ASN1)
+            i = i2d_DSAparams_bio(out, dsa);
+        else
+            i = PEM_write_bio_DSAparams(out, dsa);
+        if (!i) {
+            BIO_printf(bio_err, "unable to write DSA parameters\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+    if (genkey) {
+        DSA *dsakey;
+
+        if ((dsakey = DSAparams_dup(dsa)) == NULL)
+            goto end;
+        if (!DSA_generate_key(dsakey)) {
+            ERR_print_errors(bio_err);
+            DSA_free(dsakey);
+            goto end;
+        }
+        assert(private);
+        if (outformat == FORMAT_ASN1)
+            i = i2d_DSAPrivateKey_bio(out, dsakey);
+        else
+            i = PEM_write_bio_DSAPrivateKey(out, dsakey, NULL, NULL, 0, NULL,
+                                            NULL);
+        DSA_free(dsakey);
+    }
+    ret = 0;
+ end:
+    BN_GENCB_free(cb);
+    BIO_free(in);
+    BIO_free_all(out);
+    DSA_free(dsa);
+    release_engine(e);
+    return ret;
+}
+
+static int dsa_cb(int p, int n, BN_GENCB *cb)
+{
+    static const char symbols[] = ".+*\n";
+    char c = (p >= 0 && (size_t)p < sizeof(symbols) - 1) ? symbols[p] : '?';
+
+    BIO_write(BN_GENCB_get_arg(cb), &c, 1);
+    (void)BIO_flush(BN_GENCB_get_arg(cb));
+    return 1;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/ec.c b/trunk/3rdparty/openssl-1.1-fit/apps/ec.c
new file mode 100644
index 000000000..03abb0068
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/ec.c
@@ -0,0 +1,283 @@
+/*
+ * Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_EC
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <stdio.h>
+# include <stdlib.h>
+# include <string.h>
+# include "apps.h"
+# include "progs.h"
+# include <openssl/bio.h>
+# include <openssl/err.h>
+# include <openssl/evp.h>
+# include <openssl/pem.h>
+
+static OPT_PAIR conv_forms[] = {
+    {"compressed", POINT_CONVERSION_COMPRESSED},
+    {"uncompressed", POINT_CONVERSION_UNCOMPRESSED},
+    {"hybrid", POINT_CONVERSION_HYBRID},
+    {NULL}
+};
+
+static OPT_PAIR param_enc[] = {
+    {"named_curve", OPENSSL_EC_NAMED_CURVE},
+    {"explicit", 0},
+    {NULL}
+};
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_INFORM, OPT_OUTFORM, OPT_ENGINE, OPT_IN, OPT_OUT,
+    OPT_NOOUT, OPT_TEXT, OPT_PARAM_OUT, OPT_PUBIN, OPT_PUBOUT,
+    OPT_PASSIN, OPT_PASSOUT, OPT_PARAM_ENC, OPT_CONV_FORM, OPT_CIPHER,
+    OPT_NO_PUBLIC, OPT_CHECK
+} OPTION_CHOICE;
+
+const OPTIONS ec_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"in", OPT_IN, 's', "Input file"},
+    {"inform", OPT_INFORM, 'f', "Input format - DER or PEM"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"outform", OPT_OUTFORM, 'F', "Output format - DER or PEM"},
+    {"noout", OPT_NOOUT, '-', "Don't print key out"},
+    {"text", OPT_TEXT, '-', "Print the key"},
+    {"param_out", OPT_PARAM_OUT, '-', "Print the elliptic curve parameters"},
+    {"pubin", OPT_PUBIN, '-', "Expect a public key in input file"},
+    {"pubout", OPT_PUBOUT, '-', "Output public key, not private"},
+    {"no_public", OPT_NO_PUBLIC, '-', "exclude public key from private key"},
+    {"check", OPT_CHECK, '-', "check key consistency"},
+    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
+    {"passout", OPT_PASSOUT, 's', "Output file pass phrase source"},
+    {"param_enc", OPT_PARAM_ENC, 's',
+     "Specifies the way the ec parameters are encoded"},
+    {"conv_form", OPT_CONV_FORM, 's', "Specifies the point conversion form "},
+    {"", OPT_CIPHER, '-', "Any supported cipher"},
+# ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+# endif
+    {NULL}
+};
+
+int ec_main(int argc, char **argv)
+{
+    BIO *in = NULL, *out = NULL;
+    ENGINE *e = NULL;
+    EC_KEY *eckey = NULL;
+    const EC_GROUP *group;
+    const EVP_CIPHER *enc = NULL;
+    point_conversion_form_t form = POINT_CONVERSION_UNCOMPRESSED;
+    char *infile = NULL, *outfile = NULL, *prog;
+    char *passin = NULL, *passout = NULL, *passinarg = NULL, *passoutarg = NULL;
+    OPTION_CHOICE o;
+    int asn1_flag = OPENSSL_EC_NAMED_CURVE, new_form = 0, new_asn1_flag = 0;
+    int informat = FORMAT_PEM, outformat = FORMAT_PEM, text = 0, noout = 0;
+    int pubin = 0, pubout = 0, param_out = 0, i, ret = 1, private = 0;
+    int no_public = 0, check = 0;
+
+    prog = opt_init(argc, argv, ec_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(ec_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_ANY, &informat))
+                goto opthelp;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &outformat))
+                goto opthelp;
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_NOOUT:
+            noout = 1;
+            break;
+        case OPT_TEXT:
+            text = 1;
+            break;
+        case OPT_PARAM_OUT:
+            param_out = 1;
+            break;
+        case OPT_PUBIN:
+            pubin = 1;
+            break;
+        case OPT_PUBOUT:
+            pubout = 1;
+            break;
+        case OPT_PASSIN:
+            passinarg = opt_arg();
+            break;
+        case OPT_PASSOUT:
+            passoutarg = opt_arg();
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_CIPHER:
+            if (!opt_cipher(opt_unknown(), &enc))
+                goto opthelp;
+            break;
+        case OPT_CONV_FORM:
+            if (!opt_pair(opt_arg(), conv_forms, &i))
+                goto opthelp;
+            new_form = 1;
+            form = i;
+            break;
+        case OPT_PARAM_ENC:
+            if (!opt_pair(opt_arg(), param_enc, &i))
+                goto opthelp;
+            new_asn1_flag = 1;
+            asn1_flag = i;
+            break;
+        case OPT_NO_PUBLIC:
+            no_public = 1;
+            break;
+        case OPT_CHECK:
+            check = 1;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    private = param_out || pubin || pubout ? 0 : 1;
+    if (text && !pubin)
+        private = 1;
+
+    if (!app_passwd(passinarg, passoutarg, &passin, &passout)) {
+        BIO_printf(bio_err, "Error getting passwords\n");
+        goto end;
+    }
+
+    if (informat != FORMAT_ENGINE) {
+        in = bio_open_default(infile, 'r', informat);
+        if (in == NULL)
+            goto end;
+    }
+
+    BIO_printf(bio_err, "read EC key\n");
+    if (informat == FORMAT_ASN1) {
+        if (pubin)
+            eckey = d2i_EC_PUBKEY_bio(in, NULL);
+        else
+            eckey = d2i_ECPrivateKey_bio(in, NULL);
+    } else if (informat == FORMAT_ENGINE) {
+        EVP_PKEY *pkey;
+        if (pubin)
+            pkey = load_pubkey(infile, informat, 1, passin, e, "Public Key");
+        else
+            pkey = load_key(infile, informat, 1, passin, e, "Private Key");
+        if (pkey != NULL) {
+            eckey = EVP_PKEY_get1_EC_KEY(pkey);
+            EVP_PKEY_free(pkey);
+        }
+    } else {
+        if (pubin)
+            eckey = PEM_read_bio_EC_PUBKEY(in, NULL, NULL, NULL);
+        else
+            eckey = PEM_read_bio_ECPrivateKey(in, NULL, NULL, passin);
+    }
+    if (eckey == NULL) {
+        BIO_printf(bio_err, "unable to load Key\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    out = bio_open_owner(outfile, outformat, private);
+    if (out == NULL)
+        goto end;
+
+    group = EC_KEY_get0_group(eckey);
+
+    if (new_form)
+        EC_KEY_set_conv_form(eckey, form);
+
+    if (new_asn1_flag)
+        EC_KEY_set_asn1_flag(eckey, asn1_flag);
+
+    if (no_public)
+        EC_KEY_set_enc_flags(eckey, EC_PKEY_NO_PUBKEY);
+
+    if (text) {
+        assert(pubin || private);
+        if (!EC_KEY_print(out, eckey, 0)) {
+            perror(outfile);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (check) {
+        if (EC_KEY_check_key(eckey) == 1) {
+            BIO_printf(bio_err, "EC Key valid.\n");
+        } else {
+            BIO_printf(bio_err, "EC Key Invalid!\n");
+            ERR_print_errors(bio_err);
+        }
+    }
+
+    if (noout) {
+        ret = 0;
+        goto end;
+    }
+
+    BIO_printf(bio_err, "writing EC key\n");
+    if (outformat == FORMAT_ASN1) {
+        if (param_out) {
+            i = i2d_ECPKParameters_bio(out, group);
+        } else if (pubin || pubout) {
+            i = i2d_EC_PUBKEY_bio(out, eckey);
+        } else {
+            assert(private);
+            i = i2d_ECPrivateKey_bio(out, eckey);
+        }
+    } else {
+        if (param_out) {
+            i = PEM_write_bio_ECPKParameters(out, group);
+        } else if (pubin || pubout) {
+            i = PEM_write_bio_EC_PUBKEY(out, eckey);
+        } else {
+            assert(private);
+            i = PEM_write_bio_ECPrivateKey(out, eckey, enc,
+                                           NULL, 0, NULL, passout);
+        }
+    }
+
+    if (!i) {
+        BIO_printf(bio_err, "unable to write private key\n");
+        ERR_print_errors(bio_err);
+    } else {
+        ret = 0;
+    }
+ end:
+    BIO_free(in);
+    BIO_free_all(out);
+    EC_KEY_free(eckey);
+    release_engine(e);
+    OPENSSL_free(passin);
+    OPENSSL_free(passout);
+    return ret;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/ecparam.c b/trunk/3rdparty/openssl-1.1-fit/apps/ecparam.c
new file mode 100644
index 000000000..917f1a86b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/ecparam.c
@@ -0,0 +1,450 @@
+/*
+ * Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_EC
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <stdio.h>
+# include <stdlib.h>
+# include <time.h>
+# include <string.h>
+# include "apps.h"
+# include "progs.h"
+# include <openssl/bio.h>
+# include <openssl/err.h>
+# include <openssl/bn.h>
+# include <openssl/ec.h>
+# include <openssl/x509.h>
+# include <openssl/pem.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_INFORM, OPT_OUTFORM, OPT_IN, OPT_OUT, OPT_TEXT, OPT_C,
+    OPT_CHECK, OPT_LIST_CURVES, OPT_NO_SEED, OPT_NOOUT, OPT_NAME,
+    OPT_CONV_FORM, OPT_PARAM_ENC, OPT_GENKEY, OPT_ENGINE,
+    OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS ecparam_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"inform", OPT_INFORM, 'F', "Input format - default PEM (DER or PEM)"},
+    {"outform", OPT_OUTFORM, 'F', "Output format - default PEM"},
+    {"in", OPT_IN, '<', "Input file  - default stdin"},
+    {"out", OPT_OUT, '>', "Output file - default stdout"},
+    {"text", OPT_TEXT, '-', "Print the ec parameters in text form"},
+    {"C", OPT_C, '-', "Print a 'C' function creating the parameters"},
+    {"check", OPT_CHECK, '-', "Validate the ec parameters"},
+    {"list_curves", OPT_LIST_CURVES, '-',
+     "Prints a list of all curve 'short names'"},
+    {"no_seed", OPT_NO_SEED, '-',
+     "If 'explicit' parameters are chosen do not use the seed"},
+    {"noout", OPT_NOOUT, '-', "Do not print the ec parameter"},
+    {"name", OPT_NAME, 's',
+     "Use the ec parameters with specified 'short name'"},
+    {"conv_form", OPT_CONV_FORM, 's', "Specifies the point conversion form "},
+    {"param_enc", OPT_PARAM_ENC, 's',
+     "Specifies the way the ec parameters are encoded"},
+    {"genkey", OPT_GENKEY, '-', "Generate ec key"},
+    OPT_R_OPTIONS,
+# ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+# endif
+    {NULL}
+};
+
+static OPT_PAIR forms[] = {
+    {"compressed", POINT_CONVERSION_COMPRESSED},
+    {"uncompressed", POINT_CONVERSION_UNCOMPRESSED},
+    {"hybrid", POINT_CONVERSION_HYBRID},
+    {NULL}
+};
+
+static OPT_PAIR encodings[] = {
+    {"named_curve", OPENSSL_EC_NAMED_CURVE},
+    {"explicit", 0},
+    {NULL}
+};
+
+int ecparam_main(int argc, char **argv)
+{
+    ENGINE *e = NULL;
+    BIGNUM *ec_gen = NULL, *ec_order = NULL, *ec_cofactor = NULL;
+    BIGNUM *ec_p = NULL, *ec_a = NULL, *ec_b = NULL;
+    BIO *in = NULL, *out = NULL;
+    EC_GROUP *group = NULL;
+    point_conversion_form_t form = POINT_CONVERSION_UNCOMPRESSED;
+    char *curve_name = NULL;
+    char *infile = NULL, *outfile = NULL, *prog;
+    unsigned char *buffer = NULL;
+    OPTION_CHOICE o;
+    int asn1_flag = OPENSSL_EC_NAMED_CURVE, new_asn1_flag = 0;
+    int informat = FORMAT_PEM, outformat = FORMAT_PEM, noout = 0, C = 0;
+    int ret = 1, private = 0;
+    int list_curves = 0, no_seed = 0, check = 0, new_form = 0;
+    int text = 0, i, genkey = 0;
+
+    prog = opt_init(argc, argv, ecparam_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(ecparam_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &informat))
+                goto opthelp;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &outformat))
+                goto opthelp;
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_TEXT:
+            text = 1;
+            break;
+        case OPT_C:
+            C = 1;
+            break;
+        case OPT_CHECK:
+            check = 1;
+            break;
+        case OPT_LIST_CURVES:
+            list_curves = 1;
+            break;
+        case OPT_NO_SEED:
+            no_seed = 1;
+            break;
+        case OPT_NOOUT:
+            noout = 1;
+            break;
+        case OPT_NAME:
+            curve_name = opt_arg();
+            break;
+        case OPT_CONV_FORM:
+            if (!opt_pair(opt_arg(), forms, &new_form))
+                goto opthelp;
+            form = new_form;
+            new_form = 1;
+            break;
+        case OPT_PARAM_ENC:
+            if (!opt_pair(opt_arg(), encodings, &asn1_flag))
+                goto opthelp;
+            new_asn1_flag = 1;
+            break;
+        case OPT_GENKEY:
+            genkey = 1;
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    private = genkey ? 1 : 0;
+
+    in = bio_open_default(infile, 'r', informat);
+    if (in == NULL)
+        goto end;
+    out = bio_open_owner(outfile, outformat, private);
+    if (out == NULL)
+        goto end;
+
+    if (list_curves) {
+        EC_builtin_curve *curves = NULL;
+        size_t crv_len = EC_get_builtin_curves(NULL, 0);
+        size_t n;
+
+        curves = app_malloc((int)sizeof(*curves) * crv_len, "list curves");
+        if (!EC_get_builtin_curves(curves, crv_len)) {
+            OPENSSL_free(curves);
+            goto end;
+        }
+
+        for (n = 0; n < crv_len; n++) {
+            const char *comment;
+            const char *sname;
+            comment = curves[n].comment;
+            sname = OBJ_nid2sn(curves[n].nid);
+            if (comment == NULL)
+                comment = "CURVE DESCRIPTION NOT AVAILABLE";
+            if (sname == NULL)
+                sname = "";
+
+            BIO_printf(out, "  %-10s: ", sname);
+            BIO_printf(out, "%s\n", comment);
+        }
+
+        OPENSSL_free(curves);
+        ret = 0;
+        goto end;
+    }
+
+    if (curve_name != NULL) {
+        int nid;
+
+        /*
+         * workaround for the SECG curve names secp192r1 and secp256r1 (which
+         * are the same as the curves prime192v1 and prime256v1 defined in
+         * X9.62)
+         */
+        if (strcmp(curve_name, "secp192r1") == 0) {
+            BIO_printf(bio_err, "using curve name prime192v1 "
+                       "instead of secp192r1\n");
+            nid = NID_X9_62_prime192v1;
+        } else if (strcmp(curve_name, "secp256r1") == 0) {
+            BIO_printf(bio_err, "using curve name prime256v1 "
+                       "instead of secp256r1\n");
+            nid = NID_X9_62_prime256v1;
+        } else {
+            nid = OBJ_sn2nid(curve_name);
+        }
+
+        if (nid == 0)
+            nid = EC_curve_nist2nid(curve_name);
+
+        if (nid == 0) {
+            BIO_printf(bio_err, "unknown curve name (%s)\n", curve_name);
+            goto end;
+        }
+
+        group = EC_GROUP_new_by_curve_name(nid);
+        if (group == NULL) {
+            BIO_printf(bio_err, "unable to create curve (%s)\n", curve_name);
+            goto end;
+        }
+        EC_GROUP_set_asn1_flag(group, asn1_flag);
+        EC_GROUP_set_point_conversion_form(group, form);
+    } else if (informat == FORMAT_ASN1) {
+        group = d2i_ECPKParameters_bio(in, NULL);
+    } else {
+        group = PEM_read_bio_ECPKParameters(in, NULL, NULL, NULL);
+    }
+    if (group == NULL) {
+        BIO_printf(bio_err, "unable to load elliptic curve parameters\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    if (new_form)
+        EC_GROUP_set_point_conversion_form(group, form);
+
+    if (new_asn1_flag)
+        EC_GROUP_set_asn1_flag(group, asn1_flag);
+
+    if (no_seed) {
+        EC_GROUP_set_seed(group, NULL, 0);
+    }
+
+    if (text) {
+        if (!ECPKParameters_print(out, group, 0))
+            goto end;
+    }
+
+    if (check) {
+        BIO_printf(bio_err, "checking elliptic curve parameters: ");
+        if (!EC_GROUP_check(group, NULL)) {
+            BIO_printf(bio_err, "failed\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        BIO_printf(bio_err, "ok\n");
+
+    }
+
+    if (C) {
+        size_t buf_len = 0, tmp_len = 0;
+        const EC_POINT *point;
+        int is_prime, len = 0;
+        const EC_METHOD *meth = EC_GROUP_method_of(group);
+
+        if ((ec_p = BN_new()) == NULL
+                || (ec_a = BN_new()) == NULL
+                || (ec_b = BN_new()) == NULL
+                || (ec_gen = BN_new()) == NULL
+                || (ec_order = BN_new()) == NULL
+                || (ec_cofactor = BN_new()) == NULL) {
+            perror("Can't allocate BN");
+            goto end;
+        }
+
+        is_prime = (EC_METHOD_get_field_type(meth) == NID_X9_62_prime_field);
+        if (!is_prime) {
+            BIO_printf(bio_err, "Can only handle X9.62 prime fields\n");
+            goto end;
+        }
+
+        if (!EC_GROUP_get_curve(group, ec_p, ec_a, ec_b, NULL))
+            goto end;
+
+        if ((point = EC_GROUP_get0_generator(group)) == NULL)
+            goto end;
+        if (!EC_POINT_point2bn(group, point,
+                               EC_GROUP_get_point_conversion_form(group),
+                               ec_gen, NULL))
+            goto end;
+        if (!EC_GROUP_get_order(group, ec_order, NULL))
+            goto end;
+        if (!EC_GROUP_get_cofactor(group, ec_cofactor, NULL))
+            goto end;
+
+        if (!ec_p || !ec_a || !ec_b || !ec_gen || !ec_order || !ec_cofactor)
+            goto end;
+
+        len = BN_num_bits(ec_order);
+
+        if ((tmp_len = (size_t)BN_num_bytes(ec_p)) > buf_len)
+            buf_len = tmp_len;
+        if ((tmp_len = (size_t)BN_num_bytes(ec_a)) > buf_len)
+            buf_len = tmp_len;
+        if ((tmp_len = (size_t)BN_num_bytes(ec_b)) > buf_len)
+            buf_len = tmp_len;
+        if ((tmp_len = (size_t)BN_num_bytes(ec_gen)) > buf_len)
+            buf_len = tmp_len;
+        if ((tmp_len = (size_t)BN_num_bytes(ec_order)) > buf_len)
+            buf_len = tmp_len;
+        if ((tmp_len = (size_t)BN_num_bytes(ec_cofactor)) > buf_len)
+            buf_len = tmp_len;
+
+        buffer = app_malloc(buf_len, "BN buffer");
+
+        BIO_printf(out, "EC_GROUP *get_ec_group_%d(void)\n{\n", len);
+        print_bignum_var(out, ec_p, "ec_p", len, buffer);
+        print_bignum_var(out, ec_a, "ec_a", len, buffer);
+        print_bignum_var(out, ec_b, "ec_b", len, buffer);
+        print_bignum_var(out, ec_gen, "ec_gen", len, buffer);
+        print_bignum_var(out, ec_order, "ec_order", len, buffer);
+        print_bignum_var(out, ec_cofactor, "ec_cofactor", len, buffer);
+        BIO_printf(out, "    int ok = 0;\n"
+                        "    EC_GROUP *group = NULL;\n"
+                        "    EC_POINT *point = NULL;\n"
+                        "    BIGNUM *tmp_1 = NULL;\n"
+                        "    BIGNUM *tmp_2 = NULL;\n"
+                        "    BIGNUM *tmp_3 = NULL;\n"
+                        "\n");
+
+        BIO_printf(out, "    if ((tmp_1 = BN_bin2bn(ec_p_%d, sizeof(ec_p_%d), NULL)) == NULL)\n"
+                        "        goto err;\n", len, len);
+        BIO_printf(out, "    if ((tmp_2 = BN_bin2bn(ec_a_%d, sizeof(ec_a_%d), NULL)) == NULL)\n"
+                        "        goto err;\n", len, len);
+        BIO_printf(out, "    if ((tmp_3 = BN_bin2bn(ec_b_%d, sizeof(ec_b_%d), NULL)) == NULL)\n"
+                        "        goto err;\n", len, len);
+        BIO_printf(out, "    if ((group = EC_GROUP_new_curve_GFp(tmp_1, tmp_2, tmp_3, NULL)) == NULL)\n"
+                        "        goto err;\n"
+                        "\n");
+        BIO_printf(out, "    /* build generator */\n");
+        BIO_printf(out, "    if ((tmp_1 = BN_bin2bn(ec_gen_%d, sizeof(ec_gen_%d), tmp_1)) == NULL)\n"
+                        "        goto err;\n", len, len);
+        BIO_printf(out, "    point = EC_POINT_bn2point(group, tmp_1, NULL, NULL);\n");
+        BIO_printf(out, "    if (point == NULL)\n"
+                        "        goto err;\n");
+        BIO_printf(out, "    if ((tmp_2 = BN_bin2bn(ec_order_%d, sizeof(ec_order_%d), tmp_2)) == NULL)\n"
+                        "        goto err;\n", len, len);
+        BIO_printf(out, "    if ((tmp_3 = BN_bin2bn(ec_cofactor_%d, sizeof(ec_cofactor_%d), tmp_3)) == NULL)\n"
+                        "        goto err;\n", len, len);
+        BIO_printf(out, "    if (!EC_GROUP_set_generator(group, point, tmp_2, tmp_3))\n"
+                        "        goto err;\n"
+                        "ok = 1;"
+                        "\n");
+        BIO_printf(out, "err:\n"
+                        "    BN_free(tmp_1);\n"
+                        "    BN_free(tmp_2);\n"
+                        "    BN_free(tmp_3);\n"
+                        "    EC_POINT_free(point);\n"
+                        "    if (!ok) {\n"
+                        "        EC_GROUP_free(group);\n"
+                        "        return NULL;\n"
+                        "    }\n"
+                        "    return (group);\n"
+                        "}\n");
+    }
+
+    if (outformat == FORMAT_ASN1 && genkey)
+        noout = 1;
+
+    if (!noout) {
+        if (outformat == FORMAT_ASN1)
+            i = i2d_ECPKParameters_bio(out, group);
+        else
+            i = PEM_write_bio_ECPKParameters(out, group);
+        if (!i) {
+            BIO_printf(bio_err, "unable to write elliptic "
+                       "curve parameters\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (genkey) {
+        EC_KEY *eckey = EC_KEY_new();
+
+        if (eckey == NULL)
+            goto end;
+
+        if (EC_KEY_set_group(eckey, group) == 0) {
+            BIO_printf(bio_err, "unable to set group when generating key\n");
+            EC_KEY_free(eckey);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+
+        if (new_form)
+            EC_KEY_set_conv_form(eckey, form);
+
+        if (!EC_KEY_generate_key(eckey)) {
+            BIO_printf(bio_err, "unable to generate key\n");
+            EC_KEY_free(eckey);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        assert(private);
+        if (outformat == FORMAT_ASN1)
+            i = i2d_ECPrivateKey_bio(out, eckey);
+        else
+            i = PEM_write_bio_ECPrivateKey(out, eckey, NULL,
+                                           NULL, 0, NULL, NULL);
+        EC_KEY_free(eckey);
+    }
+
+    ret = 0;
+ end:
+    BN_free(ec_p);
+    BN_free(ec_a);
+    BN_free(ec_b);
+    BN_free(ec_gen);
+    BN_free(ec_order);
+    BN_free(ec_cofactor);
+    OPENSSL_free(buffer);
+    EC_GROUP_free(group);
+    release_engine(e);
+    BIO_free(in);
+    BIO_free_all(out);
+    return ret;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/enc.c b/trunk/3rdparty/openssl-1.1-fit/apps/enc.c
new file mode 100644
index 000000000..8e5a57d3e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/enc.c
@@ -0,0 +1,675 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <limits.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/bio.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include <openssl/rand.h>
+#include <openssl/pem.h>
+#ifndef OPENSSL_NO_COMP
+# include <openssl/comp.h>
+#endif
+#include <ctype.h>
+
+#undef SIZE
+#undef BSIZE
+#define SIZE    (512)
+#define BSIZE   (8*1024)
+
+static int set_hex(const char *in, unsigned char *out, int size);
+static void show_ciphers(const OBJ_NAME *name, void *bio_);
+
+struct doall_enc_ciphers {
+    BIO *bio;
+    int n;
+};
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_LIST,
+    OPT_E, OPT_IN, OPT_OUT, OPT_PASS, OPT_ENGINE, OPT_D, OPT_P, OPT_V,
+    OPT_NOPAD, OPT_SALT, OPT_NOSALT, OPT_DEBUG, OPT_UPPER_P, OPT_UPPER_A,
+    OPT_A, OPT_Z, OPT_BUFSIZE, OPT_K, OPT_KFILE, OPT_UPPER_K, OPT_NONE,
+    OPT_UPPER_S, OPT_IV, OPT_MD, OPT_ITER, OPT_PBKDF2, OPT_CIPHER,
+    OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS enc_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"ciphers", OPT_LIST, '-', "List ciphers"},
+    {"in", OPT_IN, '<', "Input file"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"pass", OPT_PASS, 's', "Passphrase source"},
+    {"e", OPT_E, '-', "Encrypt"},
+    {"d", OPT_D, '-', "Decrypt"},
+    {"p", OPT_P, '-', "Print the iv/key"},
+    {"P", OPT_UPPER_P, '-', "Print the iv/key and exit"},
+    {"v", OPT_V, '-', "Verbose output"},
+    {"nopad", OPT_NOPAD, '-', "Disable standard block padding"},
+    {"salt", OPT_SALT, '-', "Use salt in the KDF (default)"},
+    {"nosalt", OPT_NOSALT, '-', "Do not use salt in the KDF"},
+    {"debug", OPT_DEBUG, '-', "Print debug info"},
+    {"a", OPT_A, '-', "Base64 encode/decode, depending on encryption flag"},
+    {"base64", OPT_A, '-', "Same as option -a"},
+    {"A", OPT_UPPER_A, '-',
+     "Used with -[base64|a] to specify base64 buffer as a single line"},
+    {"bufsize", OPT_BUFSIZE, 's', "Buffer size"},
+    {"k", OPT_K, 's', "Passphrase"},
+    {"kfile", OPT_KFILE, '<', "Read passphrase from file"},
+    {"K", OPT_UPPER_K, 's', "Raw key, in hex"},
+    {"S", OPT_UPPER_S, 's', "Salt, in hex"},
+    {"iv", OPT_IV, 's', "IV in hex"},
+    {"md", OPT_MD, 's', "Use specified digest to create a key from the passphrase"},
+    {"iter", OPT_ITER, 'p', "Specify the iteration count and force use of PBKDF2"},
+    {"pbkdf2", OPT_PBKDF2, '-', "Use password-based key derivation function 2"},
+    {"none", OPT_NONE, '-', "Don't encrypt"},
+    {"", OPT_CIPHER, '-', "Any supported cipher"},
+    OPT_R_OPTIONS,
+#ifdef ZLIB
+    {"z", OPT_Z, '-', "Use zlib as the 'encryption'"},
+#endif
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+#endif
+    {NULL}
+};
+
+int enc_main(int argc, char **argv)
+{
+    static char buf[128];
+    static const char magic[] = "Salted__";
+    ENGINE *e = NULL;
+    BIO *in = NULL, *out = NULL, *b64 = NULL, *benc = NULL, *rbio =
+        NULL, *wbio = NULL;
+    EVP_CIPHER_CTX *ctx = NULL;
+    const EVP_CIPHER *cipher = NULL, *c;
+    const EVP_MD *dgst = NULL;
+    char *hkey = NULL, *hiv = NULL, *hsalt = NULL, *p;
+    char *infile = NULL, *outfile = NULL, *prog;
+    char *str = NULL, *passarg = NULL, *pass = NULL, *strbuf = NULL;
+    char mbuf[sizeof(magic) - 1];
+    OPTION_CHOICE o;
+    int bsize = BSIZE, verbose = 0, debug = 0, olb64 = 0, nosalt = 0;
+    int enc = 1, printkey = 0, i, k;
+    int base64 = 0, informat = FORMAT_BINARY, outformat = FORMAT_BINARY;
+    int ret = 1, inl, nopad = 0;
+    unsigned char key[EVP_MAX_KEY_LENGTH], iv[EVP_MAX_IV_LENGTH];
+    unsigned char *buff = NULL, salt[PKCS5_SALT_LEN];
+    int pbkdf2 = 0;
+    int iter = 0;
+    long n;
+    struct doall_enc_ciphers dec;
+#ifdef ZLIB
+    int do_zlib = 0;
+    BIO *bzl = NULL;
+#endif
+
+    /* first check the program name */
+    prog = opt_progname(argv[0]);
+    if (strcmp(prog, "base64") == 0) {
+        base64 = 1;
+#ifdef ZLIB
+    } else if (strcmp(prog, "zlib") == 0) {
+        do_zlib = 1;
+#endif
+    } else {
+        cipher = EVP_get_cipherbyname(prog);
+        if (cipher == NULL && strcmp(prog, "enc") != 0) {
+            BIO_printf(bio_err, "%s is not a known cipher\n", prog);
+            goto end;
+        }
+    }
+
+    prog = opt_init(argc, argv, enc_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(enc_options);
+            ret = 0;
+            goto end;
+        case OPT_LIST:
+            BIO_printf(bio_out, "Supported ciphers:\n");
+            dec.bio = bio_out;
+            dec.n = 0;
+            OBJ_NAME_do_all_sorted(OBJ_NAME_TYPE_CIPHER_METH,
+                                   show_ciphers, &dec);
+            BIO_printf(bio_out, "\n");
+            ret = 0;
+            goto end;
+        case OPT_E:
+            enc = 1;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_PASS:
+            passarg = opt_arg();
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_D:
+            enc = 0;
+            break;
+        case OPT_P:
+            printkey = 1;
+            break;
+        case OPT_V:
+            verbose = 1;
+            break;
+        case OPT_NOPAD:
+            nopad = 1;
+            break;
+        case OPT_SALT:
+            nosalt = 0;
+            break;
+        case OPT_NOSALT:
+            nosalt = 1;
+            break;
+        case OPT_DEBUG:
+            debug = 1;
+            break;
+        case OPT_UPPER_P:
+            printkey = 2;
+            break;
+        case OPT_UPPER_A:
+            olb64 = 1;
+            break;
+        case OPT_A:
+            base64 = 1;
+            break;
+        case OPT_Z:
+#ifdef ZLIB
+            do_zlib = 1;
+#endif
+            break;
+        case OPT_BUFSIZE:
+            p = opt_arg();
+            i = (int)strlen(p) - 1;
+            k = i >= 1 && p[i] == 'k';
+            if (k)
+                p[i] = '\0';
+            if (!opt_long(opt_arg(), &n)
+                    || n < 0 || (k && n >= LONG_MAX / 1024))
+                goto opthelp;
+            if (k)
+                n *= 1024;
+            bsize = (int)n;
+            break;
+        case OPT_K:
+            str = opt_arg();
+            break;
+        case OPT_KFILE:
+            in = bio_open_default(opt_arg(), 'r', FORMAT_TEXT);
+            if (in == NULL)
+                goto opthelp;
+            i = BIO_gets(in, buf, sizeof(buf));
+            BIO_free(in);
+            in = NULL;
+            if (i <= 0) {
+                BIO_printf(bio_err,
+                           "%s Can't read key from %s\n", prog, opt_arg());
+                goto opthelp;
+            }
+            while (--i > 0 && (buf[i] == '\r' || buf[i] == '\n'))
+                buf[i] = '\0';
+            if (i <= 0) {
+                BIO_printf(bio_err, "%s: zero length password\n", prog);
+                goto opthelp;
+            }
+            str = buf;
+            break;
+        case OPT_UPPER_K:
+            hkey = opt_arg();
+            break;
+        case OPT_UPPER_S:
+            hsalt = opt_arg();
+            break;
+        case OPT_IV:
+            hiv = opt_arg();
+            break;
+        case OPT_MD:
+            if (!opt_md(opt_arg(), &dgst))
+                goto opthelp;
+            break;
+        case OPT_CIPHER:
+            if (!opt_cipher(opt_unknown(), &c))
+                goto opthelp;
+            cipher = c;
+            break;
+        case OPT_ITER:
+            if (!opt_int(opt_arg(), &iter))
+                goto opthelp;
+            pbkdf2 = 1;
+            break;
+        case OPT_PBKDF2:
+            pbkdf2 = 1;
+            if (iter == 0)    /* do not overwrite a chosen value */
+                iter = 10000;
+            break;
+        case OPT_NONE:
+            cipher = NULL;
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        }
+    }
+    if (opt_num_rest() != 0) {
+        BIO_printf(bio_err, "Extra arguments given.\n");
+        goto opthelp;
+    }
+
+    if (cipher && EVP_CIPHER_flags(cipher) & EVP_CIPH_FLAG_AEAD_CIPHER) {
+        BIO_printf(bio_err, "%s: AEAD ciphers not supported\n", prog);
+        goto end;
+    }
+
+    if (cipher && (EVP_CIPHER_mode(cipher) == EVP_CIPH_XTS_MODE)) {
+        BIO_printf(bio_err, "%s XTS ciphers not supported\n", prog);
+        goto end;
+    }
+
+    if (dgst == NULL)
+        dgst = EVP_sha256();
+
+    if (iter == 0)
+        iter = 1;
+
+    /* It must be large enough for a base64 encoded line */
+    if (base64 && bsize < 80)
+        bsize = 80;
+    if (verbose)
+        BIO_printf(bio_err, "bufsize=%d\n", bsize);
+
+#ifdef ZLIB
+    if (!do_zlib)
+#endif
+        if (base64) {
+            if (enc)
+                outformat = FORMAT_BASE64;
+            else
+                informat = FORMAT_BASE64;
+        }
+
+    strbuf = app_malloc(SIZE, "strbuf");
+    buff = app_malloc(EVP_ENCODE_LENGTH(bsize), "evp buffer");
+
+    if (infile == NULL) {
+        in = dup_bio_in(informat);
+    } else {
+        in = bio_open_default(infile, 'r', informat);
+    }
+    if (in == NULL)
+        goto end;
+
+    if (str == NULL && passarg != NULL) {
+        if (!app_passwd(passarg, NULL, &pass, NULL)) {
+            BIO_printf(bio_err, "Error getting password\n");
+            goto end;
+        }
+        str = pass;
+    }
+
+    if ((str == NULL) && (cipher != NULL) && (hkey == NULL)) {
+        if (1) {
+#ifndef OPENSSL_NO_UI_CONSOLE
+            for (;;) {
+                char prompt[200];
+
+                BIO_snprintf(prompt, sizeof(prompt), "enter %s %s password:",
+                        OBJ_nid2ln(EVP_CIPHER_nid(cipher)),
+                        (enc) ? "encryption" : "decryption");
+                strbuf[0] = '\0';
+                i = EVP_read_pw_string((char *)strbuf, SIZE, prompt, enc);
+                if (i == 0) {
+                    if (strbuf[0] == '\0') {
+                        ret = 1;
+                        goto end;
+                    }
+                    str = strbuf;
+                    break;
+                }
+                if (i < 0) {
+                    BIO_printf(bio_err, "bad password read\n");
+                    goto end;
+                }
+            }
+        } else {
+#endif
+            BIO_printf(bio_err, "password required\n");
+            goto end;
+        }
+    }
+
+    out = bio_open_default(outfile, 'w', outformat);
+    if (out == NULL)
+        goto end;
+
+    if (debug) {
+        BIO_set_callback(in, BIO_debug_callback);
+        BIO_set_callback(out, BIO_debug_callback);
+        BIO_set_callback_arg(in, (char *)bio_err);
+        BIO_set_callback_arg(out, (char *)bio_err);
+    }
+
+    rbio = in;
+    wbio = out;
+
+#ifdef ZLIB
+    if (do_zlib) {
+        if ((bzl = BIO_new(BIO_f_zlib())) == NULL)
+            goto end;
+        if (debug) {
+            BIO_set_callback(bzl, BIO_debug_callback);
+            BIO_set_callback_arg(bzl, (char *)bio_err);
+        }
+        if (enc)
+            wbio = BIO_push(bzl, wbio);
+        else
+            rbio = BIO_push(bzl, rbio);
+    }
+#endif
+
+    if (base64) {
+        if ((b64 = BIO_new(BIO_f_base64())) == NULL)
+            goto end;
+        if (debug) {
+            BIO_set_callback(b64, BIO_debug_callback);
+            BIO_set_callback_arg(b64, (char *)bio_err);
+        }
+        if (olb64)
+            BIO_set_flags(b64, BIO_FLAGS_BASE64_NO_NL);
+        if (enc)
+            wbio = BIO_push(b64, wbio);
+        else
+            rbio = BIO_push(b64, rbio);
+    }
+
+    if (cipher != NULL) {
+        /*
+         * Note that str is NULL if a key was passed on the command line, so
+         * we get no salt in that case. Is this a bug?
+         */
+        if (str != NULL) {
+            /*
+             * Salt handling: if encrypting generate a salt and write to
+             * output BIO. If decrypting read salt from input BIO.
+             */
+            unsigned char *sptr;
+            size_t str_len = strlen(str);
+
+            if (nosalt) {
+                sptr = NULL;
+            } else {
+                if (enc) {
+                    if (hsalt) {
+                        if (!set_hex(hsalt, salt, sizeof(salt))) {
+                            BIO_printf(bio_err, "invalid hex salt value\n");
+                            goto end;
+                        }
+                    } else if (RAND_bytes(salt, sizeof(salt)) <= 0) {
+                        goto end;
+                    }
+                    /*
+                     * If -P option then don't bother writing
+                     */
+                    if ((printkey != 2)
+                        && (BIO_write(wbio, magic,
+                                      sizeof(magic) - 1) != sizeof(magic) - 1
+                            || BIO_write(wbio,
+                                         (char *)salt,
+                                         sizeof(salt)) != sizeof(salt))) {
+                        BIO_printf(bio_err, "error writing output file\n");
+                        goto end;
+                    }
+                } else if (BIO_read(rbio, mbuf, sizeof(mbuf)) != sizeof(mbuf)
+                           || BIO_read(rbio,
+                                       (unsigned char *)salt,
+                                       sizeof(salt)) != sizeof(salt)) {
+                    BIO_printf(bio_err, "error reading input file\n");
+                    goto end;
+                } else if (memcmp(mbuf, magic, sizeof(magic) - 1)) {
+                    BIO_printf(bio_err, "bad magic number\n");
+                    goto end;
+                }
+                sptr = salt;
+            }
+
+            if (pbkdf2 == 1) {
+                /*
+                * derive key and default iv
+                * concatenated into a temporary buffer
+                */
+                unsigned char tmpkeyiv[EVP_MAX_KEY_LENGTH + EVP_MAX_IV_LENGTH];
+                int iklen = EVP_CIPHER_key_length(cipher);
+                int ivlen = EVP_CIPHER_iv_length(cipher);
+                /* not needed if HASH_UPDATE() is fixed : */
+                int islen = (sptr != NULL ? sizeof(salt) : 0);
+                if (!PKCS5_PBKDF2_HMAC(str, str_len, sptr, islen,
+                                       iter, dgst, iklen+ivlen, tmpkeyiv)) {
+                    BIO_printf(bio_err, "PKCS5_PBKDF2_HMAC failed\n");
+                    goto end;
+                }
+                /* split and move data back to global buffer */
+                memcpy(key, tmpkeyiv, iklen);
+                memcpy(iv, tmpkeyiv+iklen, ivlen);
+            } else {
+                BIO_printf(bio_err, "*** WARNING : "
+                                    "deprecated key derivation used.\n"
+                                    "Using -iter or -pbkdf2 would be better.\n");
+                if (!EVP_BytesToKey(cipher, dgst, sptr,
+                                    (unsigned char *)str, str_len,
+                                    1, key, iv)) {
+                    BIO_printf(bio_err, "EVP_BytesToKey failed\n");
+                    goto end;
+                }
+            }
+            /*
+             * zero the complete buffer or the string passed from the command
+             * line.
+             */
+            if (str == strbuf)
+                OPENSSL_cleanse(str, SIZE);
+            else
+                OPENSSL_cleanse(str, str_len);
+        }
+        if (hiv != NULL) {
+            int siz = EVP_CIPHER_iv_length(cipher);
+            if (siz == 0) {
+                BIO_printf(bio_err, "warning: iv not use by this cipher\n");
+            } else if (!set_hex(hiv, iv, siz)) {
+                BIO_printf(bio_err, "invalid hex iv value\n");
+                goto end;
+            }
+        }
+        if ((hiv == NULL) && (str == NULL)
+            && EVP_CIPHER_iv_length(cipher) != 0) {
+            /*
+             * No IV was explicitly set and no IV was generated.
+             * Hence the IV is undefined, making correct decryption impossible.
+             */
+            BIO_printf(bio_err, "iv undefined\n");
+            goto end;
+        }
+        if (hkey != NULL) {
+            if (!set_hex(hkey, key, EVP_CIPHER_key_length(cipher))) {
+                BIO_printf(bio_err, "invalid hex key value\n");
+                goto end;
+            }
+            /* wiping secret data as we no longer need it */
+            OPENSSL_cleanse(hkey, strlen(hkey));
+        }
+
+        if ((benc = BIO_new(BIO_f_cipher())) == NULL)
+            goto end;
+
+        /*
+         * Since we may be changing parameters work on the encryption context
+         * rather than calling BIO_set_cipher().
+         */
+
+        BIO_get_cipher_ctx(benc, &ctx);
+
+        if (!EVP_CipherInit_ex(ctx, cipher, NULL, NULL, NULL, enc)) {
+            BIO_printf(bio_err, "Error setting cipher %s\n",
+                       EVP_CIPHER_name(cipher));
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+
+        if (nopad)
+            EVP_CIPHER_CTX_set_padding(ctx, 0);
+
+        if (!EVP_CipherInit_ex(ctx, NULL, NULL, key, iv, enc)) {
+            BIO_printf(bio_err, "Error setting cipher %s\n",
+                       EVP_CIPHER_name(cipher));
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+
+        if (debug) {
+            BIO_set_callback(benc, BIO_debug_callback);
+            BIO_set_callback_arg(benc, (char *)bio_err);
+        }
+
+        if (printkey) {
+            if (!nosalt) {
+                printf("salt=");
+                for (i = 0; i < (int)sizeof(salt); i++)
+                    printf("%02X", salt[i]);
+                printf("\n");
+            }
+            if (EVP_CIPHER_key_length(cipher) > 0) {
+                printf("key=");
+                for (i = 0; i < EVP_CIPHER_key_length(cipher); i++)
+                    printf("%02X", key[i]);
+                printf("\n");
+            }
+            if (EVP_CIPHER_iv_length(cipher) > 0) {
+                printf("iv =");
+                for (i = 0; i < EVP_CIPHER_iv_length(cipher); i++)
+                    printf("%02X", iv[i]);
+                printf("\n");
+            }
+            if (printkey == 2) {
+                ret = 0;
+                goto end;
+            }
+        }
+    }
+
+    /* Only encrypt/decrypt as we write the file */
+    if (benc != NULL)
+        wbio = BIO_push(benc, wbio);
+
+    for (;;) {
+        inl = BIO_read(rbio, (char *)buff, bsize);
+        if (inl <= 0)
+            break;
+        if (BIO_write(wbio, (char *)buff, inl) != inl) {
+            BIO_printf(bio_err, "error writing output file\n");
+            goto end;
+        }
+    }
+    if (!BIO_flush(wbio)) {
+        BIO_printf(bio_err, "bad decrypt\n");
+        goto end;
+    }
+
+    ret = 0;
+    if (verbose) {
+        BIO_printf(bio_err, "bytes read   : %8ju\n", BIO_number_read(in));
+        BIO_printf(bio_err, "bytes written: %8ju\n", BIO_number_written(out));
+    }
+ end:
+    ERR_print_errors(bio_err);
+    OPENSSL_free(strbuf);
+    OPENSSL_free(buff);
+    BIO_free(in);
+    BIO_free_all(out);
+    BIO_free(benc);
+    BIO_free(b64);
+#ifdef ZLIB
+    BIO_free(bzl);
+#endif
+    release_engine(e);
+    OPENSSL_free(pass);
+    return ret;
+}
+
+static void show_ciphers(const OBJ_NAME *name, void *arg)
+{
+    struct doall_enc_ciphers *dec = (struct doall_enc_ciphers *)arg;
+    const EVP_CIPHER *cipher;
+
+    if (!islower((unsigned char)*name->name))
+        return;
+
+    /* Filter out ciphers that we cannot use */
+    cipher = EVP_get_cipherbyname(name->name);
+    if (cipher == NULL ||
+            (EVP_CIPHER_flags(cipher) & EVP_CIPH_FLAG_AEAD_CIPHER) != 0 ||
+            EVP_CIPHER_mode(cipher) == EVP_CIPH_XTS_MODE)
+        return;
+
+    BIO_printf(dec->bio, "-%-25s", name->name);
+    if (++dec->n == 3) {
+        BIO_printf(dec->bio, "\n");
+        dec->n = 0;
+    } else
+        BIO_printf(dec->bio, " ");
+}
+
+static int set_hex(const char *in, unsigned char *out, int size)
+{
+    int i, n;
+    unsigned char j;
+
+    i = size * 2;
+    n = strlen(in);
+    if (n > i) {
+        BIO_printf(bio_err, "hex string is too long, ignoring excess\n");
+        n = i; /* ignore exceeding part */
+    } else if (n < i) {
+        BIO_printf(bio_err, "hex string is too short, padding with zero bytes to length\n");
+    }
+
+    memset(out, 0, size);
+    for (i = 0; i < n; i++) {
+        j = (unsigned char)*in++;
+        if (!isxdigit(j)) {
+            BIO_printf(bio_err, "non-hex digit\n");
+            return 0;
+        }
+        j = (unsigned char)OPENSSL_hexchar2int(j);
+        if (i & 1)
+            out[i / 2] |= j;
+        else
+            out[i / 2] = (j << 4);
+    }
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/engine.c b/trunk/3rdparty/openssl-1.1-fit/apps/engine.c
new file mode 100644
index 000000000..83f9588a0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/engine.c
@@ -0,0 +1,489 @@
+/*
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_ENGINE
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include "apps.h"
+# include "progs.h"
+# include <stdio.h>
+# include <stdlib.h>
+# include <string.h>
+# include <openssl/err.h>
+# include <openssl/engine.h>
+# include <openssl/ssl.h>
+# include <openssl/store.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_C, OPT_T, OPT_TT, OPT_PRE, OPT_POST,
+    OPT_V = 100, OPT_VV, OPT_VVV, OPT_VVVV
+} OPTION_CHOICE;
+
+const OPTIONS engine_options[] = {
+    {OPT_HELP_STR, 1, '-', "Usage: %s [options] engine...\n"},
+    {OPT_HELP_STR, 1, '-',
+        "  engine... Engines to load\n"},
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"v", OPT_V, '-', "List 'control commands' For each specified engine"},
+    {"vv", OPT_VV, '-', "Also display each command's description"},
+    {"vvv", OPT_VVV, '-', "Also add the input flags for each command"},
+    {"vvvv", OPT_VVVV, '-', "Also show internal input flags"},
+    {"c", OPT_C, '-', "List the capabilities of specified engine"},
+    {"t", OPT_T, '-', "Check that specified engine is available"},
+    {"tt", OPT_TT, '-', "Display error trace for unavailable engines"},
+    {"pre", OPT_PRE, 's', "Run command against the ENGINE before loading it"},
+    {"post", OPT_POST, 's', "Run command against the ENGINE after loading it"},
+    {OPT_MORE_STR, OPT_EOF, 1,
+     "Commands are like \"SO_PATH:/lib/libdriver.so\""},
+    {NULL}
+};
+
+static int append_buf(char **buf, int *size, const char *s)
+{
+    const int expand = 256;
+    int len = strlen(s) + 1;
+    char *p = *buf;
+
+    if (p == NULL) {
+        *size = ((len + expand - 1) / expand) * expand;
+        p = *buf = app_malloc(*size, "engine buffer");
+    } else {
+        const int blen = strlen(p);
+
+        if (blen > 0)
+            len += 2 + blen;
+
+        if (len > *size) {
+            *size = ((len + expand - 1) / expand) * expand;
+            p = OPENSSL_realloc(p, *size);
+            if (p == NULL) {
+                OPENSSL_free(*buf);
+                *buf = NULL;
+                return 0;
+            }
+            *buf = p;
+        }
+
+        if (blen > 0) {
+            p += blen;
+            *p++ = ',';
+            *p++ = ' ';
+        }
+    }
+
+    strcpy(p, s);
+    return 1;
+}
+
+static int util_flags(BIO *out, unsigned int flags, const char *indent)
+{
+    int started = 0, err = 0;
+    /* Indent before displaying input flags */
+    BIO_printf(out, "%s%s(input flags): ", indent, indent);
+    if (flags == 0) {
+        BIO_printf(out, "<no flags>\n");
+        return 1;
+    }
+    /*
+     * If the object is internal, mark it in a way that shows instead of
+     * having it part of all the other flags, even if it really is.
+     */
+    if (flags & ENGINE_CMD_FLAG_INTERNAL) {
+        BIO_printf(out, "[Internal] ");
+    }
+
+    if (flags & ENGINE_CMD_FLAG_NUMERIC) {
+        BIO_printf(out, "NUMERIC");
+        started = 1;
+    }
+    /*
+     * Now we check that no combinations of the mutually exclusive NUMERIC,
+     * STRING, and NO_INPUT flags have been used. Future flags that can be
+     * OR'd together with these would need to added after these to preserve
+     * the testing logic.
+     */
+    if (flags & ENGINE_CMD_FLAG_STRING) {
+        if (started) {
+            BIO_printf(out, "|");
+            err = 1;
+        }
+        BIO_printf(out, "STRING");
+        started = 1;
+    }
+    if (flags & ENGINE_CMD_FLAG_NO_INPUT) {
+        if (started) {
+            BIO_printf(out, "|");
+            err = 1;
+        }
+        BIO_printf(out, "NO_INPUT");
+        started = 1;
+    }
+    /* Check for unknown flags */
+    flags = flags & ~ENGINE_CMD_FLAG_NUMERIC &
+        ~ENGINE_CMD_FLAG_STRING &
+        ~ENGINE_CMD_FLAG_NO_INPUT & ~ENGINE_CMD_FLAG_INTERNAL;
+    if (flags) {
+        if (started)
+            BIO_printf(out, "|");
+        BIO_printf(out, "<0x%04X>", flags);
+    }
+    if (err)
+        BIO_printf(out, "  <illegal flags!>");
+    BIO_printf(out, "\n");
+    return 1;
+}
+
+static int util_verbose(ENGINE *e, int verbose, BIO *out, const char *indent)
+{
+    static const int line_wrap = 78;
+    int num;
+    int ret = 0;
+    char *name = NULL;
+    char *desc = NULL;
+    int flags;
+    int xpos = 0;
+    STACK_OF(OPENSSL_STRING) *cmds = NULL;
+    if (!ENGINE_ctrl(e, ENGINE_CTRL_HAS_CTRL_FUNCTION, 0, NULL, NULL) ||
+        ((num = ENGINE_ctrl(e, ENGINE_CTRL_GET_FIRST_CMD_TYPE,
+                            0, NULL, NULL)) <= 0)) {
+        return 1;
+    }
+
+    cmds = sk_OPENSSL_STRING_new_null();
+    if (cmds == NULL)
+        goto err;
+
+    do {
+        int len;
+        /* Get the command input flags */
+        if ((flags = ENGINE_ctrl(e, ENGINE_CTRL_GET_CMD_FLAGS, num,
+                                 NULL, NULL)) < 0)
+            goto err;
+        if (!(flags & ENGINE_CMD_FLAG_INTERNAL) || verbose >= 4) {
+            /* Get the command name */
+            if ((len = ENGINE_ctrl(e, ENGINE_CTRL_GET_NAME_LEN_FROM_CMD, num,
+                                   NULL, NULL)) <= 0)
+                goto err;
+            name = app_malloc(len + 1, "name buffer");
+            if (ENGINE_ctrl(e, ENGINE_CTRL_GET_NAME_FROM_CMD, num, name,
+                            NULL) <= 0)
+                goto err;
+            /* Get the command description */
+            if ((len = ENGINE_ctrl(e, ENGINE_CTRL_GET_DESC_LEN_FROM_CMD, num,
+                                   NULL, NULL)) < 0)
+                goto err;
+            if (len > 0) {
+                desc = app_malloc(len + 1, "description buffer");
+                if (ENGINE_ctrl(e, ENGINE_CTRL_GET_DESC_FROM_CMD, num, desc,
+                                NULL) <= 0)
+                    goto err;
+            }
+            /* Now decide on the output */
+            if (xpos == 0)
+                /* Do an indent */
+                xpos = BIO_puts(out, indent);
+            else
+                /* Otherwise prepend a ", " */
+                xpos += BIO_printf(out, ", ");
+            if (verbose == 1) {
+                /*
+                 * We're just listing names, comma-delimited
+                 */
+                if ((xpos > (int)strlen(indent)) &&
+                    (xpos + (int)strlen(name) > line_wrap)) {
+                    BIO_printf(out, "\n");
+                    xpos = BIO_puts(out, indent);
+                }
+                xpos += BIO_printf(out, "%s", name);
+            } else {
+                /* We're listing names plus descriptions */
+                BIO_printf(out, "%s: %s\n", name,
+                           (desc == NULL) ? "<no description>" : desc);
+                /* ... and sometimes input flags */
+                if ((verbose >= 3) && !util_flags(out, flags, indent))
+                    goto err;
+                xpos = 0;
+            }
+        }
+        OPENSSL_free(name);
+        name = NULL;
+        OPENSSL_free(desc);
+        desc = NULL;
+        /* Move to the next command */
+        num = ENGINE_ctrl(e, ENGINE_CTRL_GET_NEXT_CMD_TYPE, num, NULL, NULL);
+    } while (num > 0);
+    if (xpos > 0)
+        BIO_printf(out, "\n");
+    ret = 1;
+ err:
+    sk_OPENSSL_STRING_free(cmds);
+    OPENSSL_free(name);
+    OPENSSL_free(desc);
+    return ret;
+}
+
+static void util_do_cmds(ENGINE *e, STACK_OF(OPENSSL_STRING) *cmds,
+                         BIO *out, const char *indent)
+{
+    int loop, res, num = sk_OPENSSL_STRING_num(cmds);
+
+    if (num < 0) {
+        BIO_printf(out, "[Error]: internal stack error\n");
+        return;
+    }
+    for (loop = 0; loop < num; loop++) {
+        char buf[256];
+        const char *cmd, *arg;
+        cmd = sk_OPENSSL_STRING_value(cmds, loop);
+        res = 1;                /* assume success */
+        /* Check if this command has no ":arg" */
+        if ((arg = strstr(cmd, ":")) == NULL) {
+            if (!ENGINE_ctrl_cmd_string(e, cmd, NULL, 0))
+                res = 0;
+        } else {
+            if ((int)(arg - cmd) > 254) {
+                BIO_printf(out, "[Error]: command name too long\n");
+                return;
+            }
+            memcpy(buf, cmd, (int)(arg - cmd));
+            buf[arg - cmd] = '\0';
+            arg++;              /* Move past the ":" */
+            /* Call the command with the argument */
+            if (!ENGINE_ctrl_cmd_string(e, buf, arg, 0))
+                res = 0;
+        }
+        if (res) {
+            BIO_printf(out, "[Success]: %s\n", cmd);
+        } else {
+            BIO_printf(out, "[Failure]: %s\n", cmd);
+            ERR_print_errors(out);
+        }
+    }
+}
+
+struct util_store_cap_data {
+    ENGINE *engine;
+    char **cap_buf;
+    int *cap_size;
+    int ok;
+};
+static void util_store_cap(const OSSL_STORE_LOADER *loader, void *arg)
+{
+    struct util_store_cap_data *ctx = arg;
+
+    if (OSSL_STORE_LOADER_get0_engine(loader) == ctx->engine) {
+        char buf[256];
+        BIO_snprintf(buf, sizeof(buf), "STORE(%s)",
+                     OSSL_STORE_LOADER_get0_scheme(loader));
+        if (!append_buf(ctx->cap_buf, ctx->cap_size, buf))
+            ctx->ok = 0;
+    }
+}
+
+int engine_main(int argc, char **argv)
+{
+    int ret = 1, i;
+    int verbose = 0, list_cap = 0, test_avail = 0, test_avail_noise = 0;
+    ENGINE *e;
+    STACK_OF(OPENSSL_CSTRING) *engines = sk_OPENSSL_CSTRING_new_null();
+    STACK_OF(OPENSSL_STRING) *pre_cmds = sk_OPENSSL_STRING_new_null();
+    STACK_OF(OPENSSL_STRING) *post_cmds = sk_OPENSSL_STRING_new_null();
+    BIO *out;
+    const char *indent = "     ";
+    OPTION_CHOICE o;
+    char *prog;
+    char *argv1;
+
+    out = dup_bio_out(FORMAT_TEXT);
+    if (engines == NULL || pre_cmds == NULL || post_cmds == NULL)
+        goto end;
+
+    /* Remember the original command name, parse/skip any leading engine
+     * names, and then setup to parse the rest of the line as flags. */
+    prog = argv[0];
+    while ((argv1 = argv[1]) != NULL && *argv1 != '-') {
+        sk_OPENSSL_CSTRING_push(engines, argv1);
+        argc--;
+        argv++;
+    }
+    argv[0] = prog;
+    opt_init(argc, argv, engine_options);
+
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(engine_options);
+            ret = 0;
+            goto end;
+        case OPT_VVVV:
+        case OPT_VVV:
+        case OPT_VV:
+        case OPT_V:
+            /* Convert to an integer from one to four. */
+            i = (int)(o - OPT_V) + 1;
+            if (verbose < i)
+                verbose = i;
+            break;
+        case OPT_C:
+            list_cap = 1;
+            break;
+        case OPT_TT:
+            test_avail_noise++;
+            /* fall thru */
+        case OPT_T:
+            test_avail++;
+            break;
+        case OPT_PRE:
+            sk_OPENSSL_STRING_push(pre_cmds, opt_arg());
+            break;
+        case OPT_POST:
+            sk_OPENSSL_STRING_push(post_cmds, opt_arg());
+            break;
+        }
+    }
+
+    /* Allow any trailing parameters as engine names. */
+    argc = opt_num_rest();
+    argv = opt_rest();
+    for ( ; *argv; argv++) {
+        if (**argv == '-') {
+            BIO_printf(bio_err, "%s: Cannot mix flags and engine names.\n",
+                       prog);
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        }
+        sk_OPENSSL_CSTRING_push(engines, *argv);
+    }
+
+    if (sk_OPENSSL_CSTRING_num(engines) == 0) {
+        for (e = ENGINE_get_first(); e != NULL; e = ENGINE_get_next(e)) {
+            sk_OPENSSL_CSTRING_push(engines, ENGINE_get_id(e));
+        }
+    }
+
+    ret = 0;
+    for (i = 0; i < sk_OPENSSL_CSTRING_num(engines); i++) {
+        const char *id = sk_OPENSSL_CSTRING_value(engines, i);
+        if ((e = ENGINE_by_id(id)) != NULL) {
+            const char *name = ENGINE_get_name(e);
+            /*
+             * Do "id" first, then "name". Easier to auto-parse.
+             */
+            BIO_printf(out, "(%s) %s\n", id, name);
+            util_do_cmds(e, pre_cmds, out, indent);
+            if (strcmp(ENGINE_get_id(e), id) != 0) {
+                BIO_printf(out, "Loaded: (%s) %s\n",
+                           ENGINE_get_id(e), ENGINE_get_name(e));
+            }
+            if (list_cap) {
+                int cap_size = 256;
+                char *cap_buf = NULL;
+                int k, n;
+                const int *nids;
+                ENGINE_CIPHERS_PTR fn_c;
+                ENGINE_DIGESTS_PTR fn_d;
+                ENGINE_PKEY_METHS_PTR fn_pk;
+
+                if (ENGINE_get_RSA(e) != NULL
+                    && !append_buf(&cap_buf, &cap_size, "RSA"))
+                    goto end;
+                if (ENGINE_get_DSA(e) != NULL
+                    && !append_buf(&cap_buf, &cap_size, "DSA"))
+                    goto end;
+                if (ENGINE_get_DH(e) != NULL
+                    && !append_buf(&cap_buf, &cap_size, "DH"))
+                    goto end;
+                if (ENGINE_get_RAND(e) != NULL
+                    && !append_buf(&cap_buf, &cap_size, "RAND"))
+                    goto end;
+
+                fn_c = ENGINE_get_ciphers(e);
+                if (fn_c == NULL)
+                    goto skip_ciphers;
+                n = fn_c(e, NULL, &nids, 0);
+                for (k = 0; k < n; ++k)
+                    if (!append_buf(&cap_buf, &cap_size, OBJ_nid2sn(nids[k])))
+                        goto end;
+
+ skip_ciphers:
+                fn_d = ENGINE_get_digests(e);
+                if (fn_d == NULL)
+                    goto skip_digests;
+                n = fn_d(e, NULL, &nids, 0);
+                for (k = 0; k < n; ++k)
+                    if (!append_buf(&cap_buf, &cap_size, OBJ_nid2sn(nids[k])))
+                        goto end;
+
+ skip_digests:
+                fn_pk = ENGINE_get_pkey_meths(e);
+                if (fn_pk == NULL)
+                    goto skip_pmeths;
+                n = fn_pk(e, NULL, &nids, 0);
+                for (k = 0; k < n; ++k)
+                    if (!append_buf(&cap_buf, &cap_size, OBJ_nid2sn(nids[k])))
+                        goto end;
+ skip_pmeths:
+                {
+                    struct util_store_cap_data store_ctx;
+
+                    store_ctx.engine = e;
+                    store_ctx.cap_buf = &cap_buf;
+                    store_ctx.cap_size = &cap_size;
+                    store_ctx.ok = 1;
+
+                    OSSL_STORE_do_all_loaders(util_store_cap, &store_ctx);
+                    if (!store_ctx.ok)
+                        goto end;
+                }
+                if (cap_buf != NULL && (*cap_buf != '\0'))
+                    BIO_printf(out, " [%s]\n", cap_buf);
+
+                OPENSSL_free(cap_buf);
+            }
+            if (test_avail) {
+                BIO_printf(out, "%s", indent);
+                if (ENGINE_init(e)) {
+                    BIO_printf(out, "[ available ]\n");
+                    util_do_cmds(e, post_cmds, out, indent);
+                    ENGINE_finish(e);
+                } else {
+                    BIO_printf(out, "[ unavailable ]\n");
+                    if (test_avail_noise)
+                        ERR_print_errors_fp(stdout);
+                    ERR_clear_error();
+                }
+            }
+            if ((verbose > 0) && !util_verbose(e, verbose, out, indent))
+                goto end;
+            ENGINE_free(e);
+        } else {
+            ERR_print_errors(bio_err);
+            /* because exit codes above 127 have special meaning on Unix */
+            if (++ret > 127)
+                ret = 127;
+        }
+    }
+
+ end:
+
+    ERR_print_errors(bio_err);
+    sk_OPENSSL_CSTRING_free(engines);
+    sk_OPENSSL_STRING_free(pre_cmds);
+    sk_OPENSSL_STRING_free(post_cmds);
+    BIO_free_all(out);
+    return ret;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/errstr.c b/trunk/3rdparty/openssl-1.1-fit/apps/errstr.c
new file mode 100644
index 000000000..3ef01f076
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/errstr.c
@@ -0,0 +1,67 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/bio.h>
+#include <openssl/err.h>
+#include <openssl/ssl.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP
+} OPTION_CHOICE;
+
+const OPTIONS errstr_options[] = {
+    {OPT_HELP_STR, 1, '-', "Usage: %s [options] errnum...\n"},
+    {OPT_HELP_STR, 1, '-', "  errnum  Error number\n"},
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {NULL}
+};
+
+int errstr_main(int argc, char **argv)
+{
+    OPTION_CHOICE o;
+    char buf[256], *prog;
+    int ret = 1;
+    unsigned long l;
+
+    prog = opt_init(argc, argv, errstr_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(errstr_options);
+            ret = 0;
+            goto end;
+        }
+    }
+
+    ret = 0;
+    for (argv = opt_rest(); *argv; argv++) {
+        if (sscanf(*argv, "%lx", &l) == 0) {
+            ret++;
+        } else {
+            /* We're not really an SSL application so this won't auto-init, but
+             * we're still interested in SSL error strings
+             */
+            OPENSSL_init_ssl(OPENSSL_INIT_LOAD_SSL_STRINGS
+                             | OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL);
+            ERR_error_string_n(l, buf, sizeof(buf));
+            BIO_printf(bio_out, "%s\n", buf);
+        }
+    }
+ end:
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/gendsa.c b/trunk/3rdparty/openssl-1.1-fit/apps/gendsa.c
new file mode 100644
index 000000000..401375420
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/gendsa.c
@@ -0,0 +1,146 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_DSA
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <stdio.h>
+# include <string.h>
+# include <sys/types.h>
+# include <sys/stat.h>
+# include "apps.h"
+# include "progs.h"
+# include <openssl/bio.h>
+# include <openssl/err.h>
+# include <openssl/bn.h>
+# include <openssl/dsa.h>
+# include <openssl/x509.h>
+# include <openssl/pem.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_OUT, OPT_PASSOUT, OPT_ENGINE, OPT_CIPHER,
+    OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS gendsa_options[] = {
+    {OPT_HELP_STR, 1, '-', "Usage: %s [args] dsaparam-file\n"},
+    {OPT_HELP_STR, 1, '-', "Valid options are:\n"},
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"out", OPT_OUT, '>', "Output the key to the specified file"},
+    {"passout", OPT_PASSOUT, 's', "Output file pass phrase source"},
+    OPT_R_OPTIONS,
+    {"", OPT_CIPHER, '-', "Encrypt the output with any supported cipher"},
+# ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+# endif
+    {NULL}
+};
+
+int gendsa_main(int argc, char **argv)
+{
+    ENGINE *e = NULL;
+    BIO *out = NULL, *in = NULL;
+    DSA *dsa = NULL;
+    const EVP_CIPHER *enc = NULL;
+    char *dsaparams = NULL;
+    char *outfile = NULL, *passoutarg = NULL, *passout = NULL, *prog;
+    OPTION_CHOICE o;
+    int ret = 1, private = 0;
+    const BIGNUM *p = NULL;
+
+    prog = opt_init(argc, argv, gendsa_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            ret = 0;
+            opt_help(gendsa_options);
+            goto end;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_PASSOUT:
+            passoutarg = opt_arg();
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_CIPHER:
+            if (!opt_cipher(opt_unknown(), &enc))
+                goto end;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+    private = 1;
+
+    if (argc != 1)
+        goto opthelp;
+    dsaparams = *argv;
+
+    if (!app_passwd(NULL, passoutarg, NULL, &passout)) {
+        BIO_printf(bio_err, "Error getting password\n");
+        goto end;
+    }
+
+    in = bio_open_default(dsaparams, 'r', FORMAT_PEM);
+    if (in == NULL)
+        goto end2;
+
+    if ((dsa = PEM_read_bio_DSAparams(in, NULL, NULL, NULL)) == NULL) {
+        BIO_printf(bio_err, "unable to load DSA parameter file\n");
+        goto end;
+    }
+    BIO_free(in);
+    in = NULL;
+
+    out = bio_open_owner(outfile, FORMAT_PEM, private);
+    if (out == NULL)
+        goto end2;
+
+    DSA_get0_pqg(dsa, &p, NULL, NULL);
+
+    if (BN_num_bits(p) > OPENSSL_DSA_MAX_MODULUS_BITS)
+        BIO_printf(bio_err,
+                   "Warning: It is not recommended to use more than %d bit for DSA keys.\n"
+                   "         Your key size is %d! Larger key size may behave not as expected.\n",
+                   OPENSSL_DSA_MAX_MODULUS_BITS, BN_num_bits(p));
+
+    BIO_printf(bio_err, "Generating DSA key, %d bits\n", BN_num_bits(p));
+    if (!DSA_generate_key(dsa))
+        goto end;
+
+    assert(private);
+    if (!PEM_write_bio_DSAPrivateKey(out, dsa, enc, NULL, 0, NULL, passout))
+        goto end;
+    ret = 0;
+ end:
+    if (ret != 0)
+        ERR_print_errors(bio_err);
+ end2:
+    BIO_free(in);
+    BIO_free_all(out);
+    DSA_free(dsa);
+    release_engine(e);
+    OPENSSL_free(passout);
+    return ret;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/genpkey.c b/trunk/3rdparty/openssl-1.1-fit/apps/genpkey.c
new file mode 100644
index 000000000..39fa73c91
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/genpkey.c
@@ -0,0 +1,322 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/pem.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#ifndef OPENSSL_NO_ENGINE
+# include <openssl/engine.h>
+#endif
+
+static int init_keygen_file(EVP_PKEY_CTX **pctx, const char *file, ENGINE *e);
+static int genpkey_cb(EVP_PKEY_CTX *ctx);
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_ENGINE, OPT_OUTFORM, OPT_OUT, OPT_PASS, OPT_PARAMFILE,
+    OPT_ALGORITHM, OPT_PKEYOPT, OPT_GENPARAM, OPT_TEXT, OPT_CIPHER
+} OPTION_CHOICE;
+
+const OPTIONS genpkey_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"outform", OPT_OUTFORM, 'F', "output format (DER or PEM)"},
+    {"pass", OPT_PASS, 's', "Output file pass phrase source"},
+    {"paramfile", OPT_PARAMFILE, '<', "Parameters file"},
+    {"algorithm", OPT_ALGORITHM, 's', "The public key algorithm"},
+    {"pkeyopt", OPT_PKEYOPT, 's',
+     "Set the public key algorithm option as opt:value"},
+    {"genparam", OPT_GENPARAM, '-', "Generate parameters, not key"},
+    {"text", OPT_TEXT, '-', "Print the in text"},
+    {"", OPT_CIPHER, '-', "Cipher to use to encrypt the key"},
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+#endif
+    /* This is deliberately last. */
+    {OPT_HELP_STR, 1, 1,
+     "Order of options may be important!  See the documentation.\n"},
+    {NULL}
+};
+
+int genpkey_main(int argc, char **argv)
+{
+    BIO *in = NULL, *out = NULL;
+    ENGINE *e = NULL;
+    EVP_PKEY *pkey = NULL;
+    EVP_PKEY_CTX *ctx = NULL;
+    char *outfile = NULL, *passarg = NULL, *pass = NULL, *prog;
+    const EVP_CIPHER *cipher = NULL;
+    OPTION_CHOICE o;
+    int outformat = FORMAT_PEM, text = 0, ret = 1, rv, do_param = 0;
+    int private = 0;
+
+    prog = opt_init(argc, argv, genpkey_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            ret = 0;
+            opt_help(genpkey_options);
+            goto end;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &outformat))
+                goto opthelp;
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_PASS:
+            passarg = opt_arg();
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_PARAMFILE:
+            if (do_param == 1)
+                goto opthelp;
+            if (!init_keygen_file(&ctx, opt_arg(), e))
+                goto end;
+            break;
+        case OPT_ALGORITHM:
+            if (!init_gen_str(&ctx, opt_arg(), e, do_param))
+                goto end;
+            break;
+        case OPT_PKEYOPT:
+            if (ctx == NULL) {
+                BIO_printf(bio_err, "%s: No keytype specified.\n", prog);
+                goto opthelp;
+            }
+            if (pkey_ctrl_string(ctx, opt_arg()) <= 0) {
+                BIO_printf(bio_err,
+                           "%s: Error setting %s parameter:\n",
+                           prog, opt_arg());
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            break;
+        case OPT_GENPARAM:
+            if (ctx != NULL)
+                goto opthelp;
+            do_param = 1;
+            break;
+        case OPT_TEXT:
+            text = 1;
+            break;
+        case OPT_CIPHER:
+            if (!opt_cipher(opt_unknown(), &cipher)
+                || do_param == 1)
+                goto opthelp;
+            if (EVP_CIPHER_mode(cipher) == EVP_CIPH_GCM_MODE ||
+                EVP_CIPHER_mode(cipher) == EVP_CIPH_CCM_MODE ||
+                EVP_CIPHER_mode(cipher) == EVP_CIPH_XTS_MODE ||
+                EVP_CIPHER_mode(cipher) == EVP_CIPH_OCB_MODE) {
+                BIO_printf(bio_err, "%s: cipher mode not supported\n", prog);
+                goto end;
+            }
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    private = do_param ? 0 : 1;
+
+    if (ctx == NULL)
+        goto opthelp;
+
+    if (!app_passwd(passarg, NULL, &pass, NULL)) {
+        BIO_puts(bio_err, "Error getting password\n");
+        goto end;
+    }
+
+    out = bio_open_owner(outfile, outformat, private);
+    if (out == NULL)
+        goto end;
+
+    EVP_PKEY_CTX_set_cb(ctx, genpkey_cb);
+    EVP_PKEY_CTX_set_app_data(ctx, bio_err);
+
+    if (do_param) {
+        if (EVP_PKEY_paramgen(ctx, &pkey) <= 0) {
+            BIO_puts(bio_err, "Error generating parameters\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    } else {
+        if (EVP_PKEY_keygen(ctx, &pkey) <= 0) {
+            BIO_puts(bio_err, "Error generating key\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (do_param) {
+        rv = PEM_write_bio_Parameters(out, pkey);
+    } else if (outformat == FORMAT_PEM) {
+        assert(private);
+        rv = PEM_write_bio_PrivateKey(out, pkey, cipher, NULL, 0, NULL, pass);
+    } else if (outformat == FORMAT_ASN1) {
+        assert(private);
+        rv = i2d_PrivateKey_bio(out, pkey);
+    } else {
+        BIO_printf(bio_err, "Bad format specified for key\n");
+        goto end;
+    }
+
+    if (rv <= 0) {
+        BIO_puts(bio_err, "Error writing key\n");
+        ERR_print_errors(bio_err);
+    }
+
+    if (text) {
+        if (do_param)
+            rv = EVP_PKEY_print_params(out, pkey, 0, NULL);
+        else
+            rv = EVP_PKEY_print_private(out, pkey, 0, NULL);
+
+        if (rv <= 0) {
+            BIO_puts(bio_err, "Error printing key\n");
+            ERR_print_errors(bio_err);
+        }
+    }
+
+    ret = 0;
+
+ end:
+    EVP_PKEY_free(pkey);
+    EVP_PKEY_CTX_free(ctx);
+    BIO_free_all(out);
+    BIO_free(in);
+    release_engine(e);
+    OPENSSL_free(pass);
+    return ret;
+}
+
+static int init_keygen_file(EVP_PKEY_CTX **pctx, const char *file, ENGINE *e)
+{
+    BIO *pbio;
+    EVP_PKEY *pkey = NULL;
+    EVP_PKEY_CTX *ctx = NULL;
+    if (*pctx) {
+        BIO_puts(bio_err, "Parameters already set!\n");
+        return 0;
+    }
+
+    pbio = BIO_new_file(file, "r");
+    if (!pbio) {
+        BIO_printf(bio_err, "Can't open parameter file %s\n", file);
+        return 0;
+    }
+
+    pkey = PEM_read_bio_Parameters(pbio, NULL);
+    BIO_free(pbio);
+
+    if (!pkey) {
+        BIO_printf(bio_err, "Error reading parameter file %s\n", file);
+        return 0;
+    }
+
+    ctx = EVP_PKEY_CTX_new(pkey, e);
+    if (ctx == NULL)
+        goto err;
+    if (EVP_PKEY_keygen_init(ctx) <= 0)
+        goto err;
+    EVP_PKEY_free(pkey);
+    *pctx = ctx;
+    return 1;
+
+ err:
+    BIO_puts(bio_err, "Error initializing context\n");
+    ERR_print_errors(bio_err);
+    EVP_PKEY_CTX_free(ctx);
+    EVP_PKEY_free(pkey);
+    return 0;
+
+}
+
+int init_gen_str(EVP_PKEY_CTX **pctx,
+                 const char *algname, ENGINE *e, int do_param)
+{
+    EVP_PKEY_CTX *ctx = NULL;
+    const EVP_PKEY_ASN1_METHOD *ameth;
+    ENGINE *tmpeng = NULL;
+    int pkey_id;
+
+    if (*pctx) {
+        BIO_puts(bio_err, "Algorithm already set!\n");
+        return 0;
+    }
+
+    ameth = EVP_PKEY_asn1_find_str(&tmpeng, algname, -1);
+
+#ifndef OPENSSL_NO_ENGINE
+    if (!ameth && e)
+        ameth = ENGINE_get_pkey_asn1_meth_str(e, algname, -1);
+#endif
+
+    if (!ameth) {
+        BIO_printf(bio_err, "Algorithm %s not found\n", algname);
+        return 0;
+    }
+
+    ERR_clear_error();
+
+    EVP_PKEY_asn1_get0_info(&pkey_id, NULL, NULL, NULL, NULL, ameth);
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_finish(tmpeng);
+#endif
+    ctx = EVP_PKEY_CTX_new_id(pkey_id, e);
+
+    if (!ctx)
+        goto err;
+    if (do_param) {
+        if (EVP_PKEY_paramgen_init(ctx) <= 0)
+            goto err;
+    } else {
+        if (EVP_PKEY_keygen_init(ctx) <= 0)
+            goto err;
+    }
+
+    *pctx = ctx;
+    return 1;
+
+ err:
+    BIO_printf(bio_err, "Error initializing %s context\n", algname);
+    ERR_print_errors(bio_err);
+    EVP_PKEY_CTX_free(ctx);
+    return 0;
+
+}
+
+static int genpkey_cb(EVP_PKEY_CTX *ctx)
+{
+    char c = '*';
+    BIO *b = EVP_PKEY_CTX_get_app_data(ctx);
+    int p;
+    p = EVP_PKEY_CTX_get_keygen_info(ctx, 0);
+    if (p == 0)
+        c = '.';
+    if (p == 1)
+        c = '+';
+    if (p == 2)
+        c = '*';
+    if (p == 3)
+        c = '\n';
+    BIO_write(b, &c, 1);
+    (void)BIO_flush(b);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/genrsa.c b/trunk/3rdparty/openssl-1.1-fit/apps/genrsa.c
new file mode 100644
index 000000000..c17cd1471
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/genrsa.c
@@ -0,0 +1,201 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_RSA
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <stdio.h>
+# include <string.h>
+# include <sys/types.h>
+# include <sys/stat.h>
+# include "apps.h"
+# include "progs.h"
+# include <openssl/bio.h>
+# include <openssl/err.h>
+# include <openssl/bn.h>
+# include <openssl/rsa.h>
+# include <openssl/evp.h>
+# include <openssl/x509.h>
+# include <openssl/pem.h>
+# include <openssl/rand.h>
+
+# define DEFBITS 2048
+# define DEFPRIMES 2
+
+static int genrsa_cb(int p, int n, BN_GENCB *cb);
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_3, OPT_F4, OPT_ENGINE,
+    OPT_OUT, OPT_PASSOUT, OPT_CIPHER, OPT_PRIMES,
+    OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS genrsa_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"3", OPT_3, '-', "Use 3 for the E value"},
+    {"F4", OPT_F4, '-', "Use F4 (0x10001) for the E value"},
+    {"f4", OPT_F4, '-', "Use F4 (0x10001) for the E value"},
+    {"out", OPT_OUT, '>', "Output the key to specified file"},
+    OPT_R_OPTIONS,
+    {"passout", OPT_PASSOUT, 's', "Output file pass phrase source"},
+    {"", OPT_CIPHER, '-', "Encrypt the output with any supported cipher"},
+# ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+# endif
+    {"primes", OPT_PRIMES, 'p', "Specify number of primes"},
+    {NULL}
+};
+
+int genrsa_main(int argc, char **argv)
+{
+    BN_GENCB *cb = BN_GENCB_new();
+    PW_CB_DATA cb_data;
+    ENGINE *eng = NULL;
+    BIGNUM *bn = BN_new();
+    BIO *out = NULL;
+    const BIGNUM *e;
+    RSA *rsa = NULL;
+    const EVP_CIPHER *enc = NULL;
+    int ret = 1, num = DEFBITS, private = 0, primes = DEFPRIMES;
+    unsigned long f4 = RSA_F4;
+    char *outfile = NULL, *passoutarg = NULL, *passout = NULL;
+    char *prog, *hexe, *dece;
+    OPTION_CHOICE o;
+
+    if (bn == NULL || cb == NULL)
+        goto end;
+
+    BN_GENCB_set(cb, genrsa_cb, bio_err);
+
+    prog = opt_init(argc, argv, genrsa_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            ret = 0;
+            opt_help(genrsa_options);
+            goto end;
+        case OPT_3:
+            f4 = 3;
+            break;
+        case OPT_F4:
+            f4 = RSA_F4;
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_ENGINE:
+            eng = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_PASSOUT:
+            passoutarg = opt_arg();
+            break;
+        case OPT_CIPHER:
+            if (!opt_cipher(opt_unknown(), &enc))
+                goto end;
+            break;
+        case OPT_PRIMES:
+            if (!opt_int(opt_arg(), &primes))
+                goto end;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+
+    if (argc == 1) {
+        if (!opt_int(argv[0], &num) || num <= 0)
+            goto end;
+        if (num > OPENSSL_RSA_MAX_MODULUS_BITS)
+            BIO_printf(bio_err,
+                       "Warning: It is not recommended to use more than %d bit for RSA keys.\n"
+                       "         Your key size is %d! Larger key size may behave not as expected.\n",
+                       OPENSSL_RSA_MAX_MODULUS_BITS, num);
+    } else if (argc > 0) {
+        BIO_printf(bio_err, "Extra arguments given.\n");
+        goto opthelp;
+    }
+
+    private = 1;
+    if (!app_passwd(NULL, passoutarg, NULL, &passout)) {
+        BIO_printf(bio_err, "Error getting password\n");
+        goto end;
+    }
+
+    out = bio_open_owner(outfile, FORMAT_PEM, private);
+    if (out == NULL)
+        goto end;
+
+    BIO_printf(bio_err, "Generating RSA private key, %d bit long modulus (%d primes)\n",
+               num, primes);
+    rsa = eng ? RSA_new_method(eng) : RSA_new();
+    if (rsa == NULL)
+        goto end;
+
+    if (!BN_set_word(bn, f4)
+        || !RSA_generate_multi_prime_key(rsa, num, primes, bn, cb))
+        goto end;
+
+    RSA_get0_key(rsa, NULL, &e, NULL);
+    hexe = BN_bn2hex(e);
+    dece = BN_bn2dec(e);
+    if (hexe && dece) {
+        BIO_printf(bio_err, "e is %s (0x%s)\n", dece, hexe);
+    }
+    OPENSSL_free(hexe);
+    OPENSSL_free(dece);
+    cb_data.password = passout;
+    cb_data.prompt_info = outfile;
+    assert(private);
+    if (!PEM_write_bio_RSAPrivateKey(out, rsa, enc, NULL, 0,
+                                     (pem_password_cb *)password_callback,
+                                     &cb_data))
+        goto end;
+
+    ret = 0;
+ end:
+    BN_free(bn);
+    BN_GENCB_free(cb);
+    RSA_free(rsa);
+    BIO_free_all(out);
+    release_engine(eng);
+    OPENSSL_free(passout);
+    if (ret != 0)
+        ERR_print_errors(bio_err);
+    return ret;
+}
+
+static int genrsa_cb(int p, int n, BN_GENCB *cb)
+{
+    char c = '*';
+
+    if (p == 0)
+        c = '.';
+    if (p == 1)
+        c = '+';
+    if (p == 2)
+        c = '*';
+    if (p == 3)
+        c = '\n';
+    BIO_write(BN_GENCB_get_arg(cb), &c, 1);
+    (void)BIO_flush(BN_GENCB_get_arg(cb));
+    return 1;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/nseq.c b/trunk/3rdparty/openssl-1.1-fit/apps/nseq.c
new file mode 100644
index 000000000..a067c9159
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/nseq.c
@@ -0,0 +1,114 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/pem.h>
+#include <openssl/err.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_TOSEQ, OPT_IN, OPT_OUT
+} OPTION_CHOICE;
+
+const OPTIONS nseq_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"toseq", OPT_TOSEQ, '-', "Output NS Sequence file"},
+    {"in", OPT_IN, '<', "Input file"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {NULL}
+};
+
+int nseq_main(int argc, char **argv)
+{
+    BIO *in = NULL, *out = NULL;
+    X509 *x509 = NULL;
+    NETSCAPE_CERT_SEQUENCE *seq = NULL;
+    OPTION_CHOICE o;
+    int toseq = 0, ret = 1, i;
+    char *infile = NULL, *outfile = NULL, *prog;
+
+    prog = opt_init(argc, argv, nseq_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            ret = 0;
+            opt_help(nseq_options);
+            goto end;
+        case OPT_TOSEQ:
+            toseq = 1;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    in = bio_open_default(infile, 'r', FORMAT_PEM);
+    if (in == NULL)
+        goto end;
+    out = bio_open_default(outfile, 'w', FORMAT_PEM);
+    if (out == NULL)
+        goto end;
+
+    if (toseq) {
+        seq = NETSCAPE_CERT_SEQUENCE_new();
+        if (seq == NULL)
+            goto end;
+        seq->certs = sk_X509_new_null();
+        if (seq->certs == NULL)
+            goto end;
+        while ((x509 = PEM_read_bio_X509(in, NULL, NULL, NULL)))
+            sk_X509_push(seq->certs, x509);
+
+        if (!sk_X509_num(seq->certs)) {
+            BIO_printf(bio_err, "%s: Error reading certs file %s\n",
+                       prog, infile);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        PEM_write_bio_NETSCAPE_CERT_SEQUENCE(out, seq);
+        ret = 0;
+        goto end;
+    }
+
+    seq = PEM_read_bio_NETSCAPE_CERT_SEQUENCE(in, NULL, NULL, NULL);
+    if (seq == NULL) {
+        BIO_printf(bio_err, "%s: Error reading sequence file %s\n",
+                   prog, infile);
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    for (i = 0; i < sk_X509_num(seq->certs); i++) {
+        x509 = sk_X509_value(seq->certs, i);
+        dump_cert_text(out, x509);
+        PEM_write_bio_X509(out, x509);
+    }
+    ret = 0;
+ end:
+    BIO_free(in);
+    BIO_free_all(out);
+    NETSCAPE_CERT_SEQUENCE_free(seq);
+
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/ocsp.c b/trunk/3rdparty/openssl-1.1-fit/apps/ocsp.c
new file mode 100644
index 000000000..e8aeb11cc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/ocsp.c
@@ -0,0 +1,1621 @@
+/*
+ * Copyright 2001-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+
+#ifdef OPENSSL_NO_OCSP
+NON_EMPTY_TRANSLATION_UNIT
+#else
+# ifdef OPENSSL_SYS_VMS
+#  define _XOPEN_SOURCE_EXTENDED/* So fd_set and friends get properly defined
+                                 * on OpenVMS */
+# endif
+
+# include <stdio.h>
+# include <stdlib.h>
+# include <string.h>
+# include <time.h>
+# include <ctype.h>
+
+/* Needs to be included before the openssl headers */
+# include "apps.h"
+# include "progs.h"
+# include "internal/sockets.h"
+# include <openssl/e_os2.h>
+# include <openssl/crypto.h>
+# include <openssl/err.h>
+# include <openssl/ssl.h>
+# include <openssl/evp.h>
+# include <openssl/bn.h>
+# include <openssl/x509v3.h>
+# include <openssl/rand.h>
+
+#ifndef HAVE_FORK
+# if defined(OPENSSL_SYS_VMS) || defined(OPENSSL_SYS_WINDOWS)
+#  define HAVE_FORK 0
+# else
+#  define HAVE_FORK 1
+# endif
+#endif
+
+#if HAVE_FORK
+# undef NO_FORK
+#else
+# define NO_FORK
+#endif
+
+# if !defined(NO_FORK) && !defined(OPENSSL_NO_SOCK) \
+     && !defined(OPENSSL_NO_POSIX_IO)
+#  define OCSP_DAEMON
+#  include <sys/types.h>
+#  include <sys/wait.h>
+#  include <syslog.h>
+#  include <signal.h>
+#  define MAXERRLEN 1000 /* limit error text sent to syslog to 1000 bytes */
+# else
+#  undef LOG_INFO
+#  undef LOG_WARNING
+#  undef LOG_ERR
+#  define LOG_INFO      0
+#  define LOG_WARNING   1
+#  define LOG_ERR       2
+# endif
+
+# if defined(OPENSSL_SYS_VXWORKS)
+/* not supported */
+int setpgid(pid_t pid, pid_t pgid)
+{
+    errno = ENOSYS;
+    return 0;
+}
+/* not supported */
+pid_t fork(void)
+{
+    errno = ENOSYS;
+    return (pid_t) -1;
+}
+# endif
+/* Maximum leeway in validity period: default 5 minutes */
+# define MAX_VALIDITY_PERIOD    (5 * 60)
+
+static int add_ocsp_cert(OCSP_REQUEST **req, X509 *cert,
+                         const EVP_MD *cert_id_md, X509 *issuer,
+                         STACK_OF(OCSP_CERTID) *ids);
+static int add_ocsp_serial(OCSP_REQUEST **req, char *serial,
+                           const EVP_MD *cert_id_md, X509 *issuer,
+                           STACK_OF(OCSP_CERTID) *ids);
+static void print_ocsp_summary(BIO *out, OCSP_BASICRESP *bs, OCSP_REQUEST *req,
+                              STACK_OF(OPENSSL_STRING) *names,
+                              STACK_OF(OCSP_CERTID) *ids, long nsec,
+                              long maxage);
+static void make_ocsp_response(BIO *err, OCSP_RESPONSE **resp, OCSP_REQUEST *req,
+                              CA_DB *db, STACK_OF(X509) *ca, X509 *rcert,
+                              EVP_PKEY *rkey, const EVP_MD *md,
+                              STACK_OF(OPENSSL_STRING) *sigopts,
+                              STACK_OF(X509) *rother, unsigned long flags,
+                              int nmin, int ndays, int badsig);
+
+static char **lookup_serial(CA_DB *db, ASN1_INTEGER *ser);
+static BIO *init_responder(const char *port);
+static int do_responder(OCSP_REQUEST **preq, BIO **pcbio, BIO *acbio, int timeout);
+static int send_ocsp_response(BIO *cbio, OCSP_RESPONSE *resp);
+static void log_message(int level, const char *fmt, ...);
+static char *prog;
+static int multi = 0;
+
+# ifdef OCSP_DAEMON
+static int acfd = (int) INVALID_SOCKET;
+static int index_changed(CA_DB *);
+static void spawn_loop(void);
+static int print_syslog(const char *str, size_t len, void *levPtr);
+static void sock_timeout(int signum);
+# endif
+
+# ifndef OPENSSL_NO_SOCK
+static OCSP_RESPONSE *query_responder(BIO *cbio, const char *host,
+                                      const char *path,
+                                      const STACK_OF(CONF_VALUE) *headers,
+                                      OCSP_REQUEST *req, int req_timeout);
+# endif
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_OUTFILE, OPT_TIMEOUT, OPT_URL, OPT_HOST, OPT_PORT,
+    OPT_IGNORE_ERR, OPT_NOVERIFY, OPT_NONCE, OPT_NO_NONCE,
+    OPT_RESP_NO_CERTS, OPT_RESP_KEY_ID, OPT_NO_CERTS,
+    OPT_NO_SIGNATURE_VERIFY, OPT_NO_CERT_VERIFY, OPT_NO_CHAIN,
+    OPT_NO_CERT_CHECKS, OPT_NO_EXPLICIT, OPT_TRUST_OTHER,
+    OPT_NO_INTERN, OPT_BADSIG, OPT_TEXT, OPT_REQ_TEXT, OPT_RESP_TEXT,
+    OPT_REQIN, OPT_RESPIN, OPT_SIGNER, OPT_VAFILE, OPT_SIGN_OTHER,
+    OPT_VERIFY_OTHER, OPT_CAFILE, OPT_CAPATH, OPT_NOCAFILE, OPT_NOCAPATH,
+    OPT_VALIDITY_PERIOD, OPT_STATUS_AGE, OPT_SIGNKEY, OPT_REQOUT,
+    OPT_RESPOUT, OPT_PATH, OPT_ISSUER, OPT_CERT, OPT_SERIAL,
+    OPT_INDEX, OPT_CA, OPT_NMIN, OPT_REQUEST, OPT_NDAYS, OPT_RSIGNER,
+    OPT_RKEY, OPT_ROTHER, OPT_RMD, OPT_RSIGOPT, OPT_HEADER,
+    OPT_V_ENUM,
+    OPT_MD,
+    OPT_MULTI
+} OPTION_CHOICE;
+
+const OPTIONS ocsp_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"out", OPT_OUTFILE, '>', "Output filename"},
+    {"timeout", OPT_TIMEOUT, 'p',
+     "Connection timeout (in seconds) to the OCSP responder"},
+    {"url", OPT_URL, 's', "Responder URL"},
+    {"host", OPT_HOST, 's', "TCP/IP hostname:port to connect to"},
+    {"port", OPT_PORT, 'p', "Port to run responder on"},
+    {"ignore_err", OPT_IGNORE_ERR, '-',
+     "Ignore error on OCSP request or response and continue running"},
+    {"noverify", OPT_NOVERIFY, '-', "Don't verify response at all"},
+    {"nonce", OPT_NONCE, '-', "Add OCSP nonce to request"},
+    {"no_nonce", OPT_NO_NONCE, '-', "Don't add OCSP nonce to request"},
+    {"resp_no_certs", OPT_RESP_NO_CERTS, '-',
+     "Don't include any certificates in response"},
+    {"resp_key_id", OPT_RESP_KEY_ID, '-',
+     "Identify response by signing certificate key ID"},
+# ifdef OCSP_DAEMON
+    {"multi", OPT_MULTI, 'p', "run multiple responder processes"},
+# endif
+    {"no_certs", OPT_NO_CERTS, '-',
+     "Don't include any certificates in signed request"},
+    {"no_signature_verify", OPT_NO_SIGNATURE_VERIFY, '-',
+     "Don't check signature on response"},
+    {"no_cert_verify", OPT_NO_CERT_VERIFY, '-',
+     "Don't check signing certificate"},
+    {"no_chain", OPT_NO_CHAIN, '-', "Don't chain verify response"},
+    {"no_cert_checks", OPT_NO_CERT_CHECKS, '-',
+     "Don't do additional checks on signing certificate"},
+    {"no_explicit", OPT_NO_EXPLICIT, '-',
+     "Do not explicitly check the chain, just verify the root"},
+    {"trust_other", OPT_TRUST_OTHER, '-',
+     "Don't verify additional certificates"},
+    {"no_intern", OPT_NO_INTERN, '-',
+     "Don't search certificates contained in response for signer"},
+    {"badsig", OPT_BADSIG, '-',
+        "Corrupt last byte of loaded OSCP response signature (for test)"},
+    {"text", OPT_TEXT, '-', "Print text form of request and response"},
+    {"req_text", OPT_REQ_TEXT, '-', "Print text form of request"},
+    {"resp_text", OPT_RESP_TEXT, '-', "Print text form of response"},
+    {"reqin", OPT_REQIN, 's', "File with the DER-encoded request"},
+    {"respin", OPT_RESPIN, 's', "File with the DER-encoded response"},
+    {"signer", OPT_SIGNER, '<', "Certificate to sign OCSP request with"},
+    {"VAfile", OPT_VAFILE, '<', "Validator certificates file"},
+    {"sign_other", OPT_SIGN_OTHER, '<',
+     "Additional certificates to include in signed request"},
+    {"verify_other", OPT_VERIFY_OTHER, '<',
+     "Additional certificates to search for signer"},
+    {"CAfile", OPT_CAFILE, '<', "Trusted certificates file"},
+    {"CApath", OPT_CAPATH, '<', "Trusted certificates directory"},
+    {"no-CAfile", OPT_NOCAFILE, '-',
+     "Do not load the default certificates file"},
+    {"no-CApath", OPT_NOCAPATH, '-',
+     "Do not load certificates from the default certificates directory"},
+    {"validity_period", OPT_VALIDITY_PERIOD, 'u',
+     "Maximum validity discrepancy in seconds"},
+    {"status_age", OPT_STATUS_AGE, 'p', "Maximum status age in seconds"},
+    {"signkey", OPT_SIGNKEY, 's', "Private key to sign OCSP request with"},
+    {"reqout", OPT_REQOUT, 's', "Output file for the DER-encoded request"},
+    {"respout", OPT_RESPOUT, 's', "Output file for the DER-encoded response"},
+    {"path", OPT_PATH, 's', "Path to use in OCSP request"},
+    {"issuer", OPT_ISSUER, '<', "Issuer certificate"},
+    {"cert", OPT_CERT, '<', "Certificate to check"},
+    {"serial", OPT_SERIAL, 's', "Serial number to check"},
+    {"index", OPT_INDEX, '<', "Certificate status index file"},
+    {"CA", OPT_CA, '<', "CA certificate"},
+    {"nmin", OPT_NMIN, 'p', "Number of minutes before next update"},
+    {"nrequest", OPT_REQUEST, 'p',
+     "Number of requests to accept (default unlimited)"},
+    {"ndays", OPT_NDAYS, 'p', "Number of days before next update"},
+    {"rsigner", OPT_RSIGNER, '<',
+     "Responder certificate to sign responses with"},
+    {"rkey", OPT_RKEY, '<', "Responder key to sign responses with"},
+    {"rother", OPT_ROTHER, '<', "Other certificates to include in response"},
+    {"rmd", OPT_RMD, 's', "Digest Algorithm to use in signature of OCSP response"},
+    {"rsigopt", OPT_RSIGOPT, 's', "OCSP response signature parameter in n:v form"},
+    {"header", OPT_HEADER, 's', "key=value header to add"},
+    {"", OPT_MD, '-', "Any supported digest algorithm (sha1,sha256, ... )"},
+    OPT_V_OPTIONS,
+    {NULL}
+};
+
+int ocsp_main(int argc, char **argv)
+{
+    BIO *acbio = NULL, *cbio = NULL, *derbio = NULL, *out = NULL;
+    const EVP_MD *cert_id_md = NULL, *rsign_md = NULL;
+    STACK_OF(OPENSSL_STRING) *rsign_sigopts = NULL;
+    int trailing_md = 0;
+    CA_DB *rdb = NULL;
+    EVP_PKEY *key = NULL, *rkey = NULL;
+    OCSP_BASICRESP *bs = NULL;
+    OCSP_REQUEST *req = NULL;
+    OCSP_RESPONSE *resp = NULL;
+    STACK_OF(CONF_VALUE) *headers = NULL;
+    STACK_OF(OCSP_CERTID) *ids = NULL;
+    STACK_OF(OPENSSL_STRING) *reqnames = NULL;
+    STACK_OF(X509) *sign_other = NULL, *verify_other = NULL, *rother = NULL;
+    STACK_OF(X509) *issuers = NULL;
+    X509 *issuer = NULL, *cert = NULL;
+    STACK_OF(X509) *rca_cert = NULL;
+    X509 *signer = NULL, *rsigner = NULL;
+    X509_STORE *store = NULL;
+    X509_VERIFY_PARAM *vpm = NULL;
+    const char *CAfile = NULL, *CApath = NULL;
+    char *header, *value;
+    char *host = NULL, *port = NULL, *path = "/", *outfile = NULL;
+    char *rca_filename = NULL, *reqin = NULL, *respin = NULL;
+    char *reqout = NULL, *respout = NULL, *ridx_filename = NULL;
+    char *rsignfile = NULL, *rkeyfile = NULL;
+    char *sign_certfile = NULL, *verify_certfile = NULL, *rcertfile = NULL;
+    char *signfile = NULL, *keyfile = NULL;
+    char *thost = NULL, *tport = NULL, *tpath = NULL;
+    int noCAfile = 0, noCApath = 0;
+    int accept_count = -1, add_nonce = 1, noverify = 0, use_ssl = -1;
+    int vpmtouched = 0, badsig = 0, i, ignore_err = 0, nmin = 0, ndays = -1;
+    int req_text = 0, resp_text = 0, ret = 1;
+    int req_timeout = -1;
+    long nsec = MAX_VALIDITY_PERIOD, maxage = -1;
+    unsigned long sign_flags = 0, verify_flags = 0, rflags = 0;
+    OPTION_CHOICE o;
+
+    reqnames = sk_OPENSSL_STRING_new_null();
+    if (reqnames == NULL)
+        goto end;
+    ids = sk_OCSP_CERTID_new_null();
+    if (ids == NULL)
+        goto end;
+    if ((vpm = X509_VERIFY_PARAM_new()) == NULL)
+        return 1;
+
+    prog = opt_init(argc, argv, ocsp_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            ret = 0;
+            opt_help(ocsp_options);
+            goto end;
+        case OPT_OUTFILE:
+            outfile = opt_arg();
+            break;
+        case OPT_TIMEOUT:
+#ifndef OPENSSL_NO_SOCK
+            req_timeout = atoi(opt_arg());
+#endif
+            break;
+        case OPT_URL:
+            OPENSSL_free(thost);
+            OPENSSL_free(tport);
+            OPENSSL_free(tpath);
+            thost = tport = tpath = NULL;
+            if (!OCSP_parse_url(opt_arg(), &host, &port, &path, &use_ssl)) {
+                BIO_printf(bio_err, "%s Error parsing URL\n", prog);
+                goto end;
+            }
+            thost = host;
+            tport = port;
+            tpath = path;
+            break;
+        case OPT_HOST:
+            host = opt_arg();
+            break;
+        case OPT_PORT:
+            port = opt_arg();
+            break;
+        case OPT_IGNORE_ERR:
+            ignore_err = 1;
+            break;
+        case OPT_NOVERIFY:
+            noverify = 1;
+            break;
+        case OPT_NONCE:
+            add_nonce = 2;
+            break;
+        case OPT_NO_NONCE:
+            add_nonce = 0;
+            break;
+        case OPT_RESP_NO_CERTS:
+            rflags |= OCSP_NOCERTS;
+            break;
+        case OPT_RESP_KEY_ID:
+            rflags |= OCSP_RESPID_KEY;
+            break;
+        case OPT_NO_CERTS:
+            sign_flags |= OCSP_NOCERTS;
+            break;
+        case OPT_NO_SIGNATURE_VERIFY:
+            verify_flags |= OCSP_NOSIGS;
+            break;
+        case OPT_NO_CERT_VERIFY:
+            verify_flags |= OCSP_NOVERIFY;
+            break;
+        case OPT_NO_CHAIN:
+            verify_flags |= OCSP_NOCHAIN;
+            break;
+        case OPT_NO_CERT_CHECKS:
+            verify_flags |= OCSP_NOCHECKS;
+            break;
+        case OPT_NO_EXPLICIT:
+            verify_flags |= OCSP_NOEXPLICIT;
+            break;
+        case OPT_TRUST_OTHER:
+            verify_flags |= OCSP_TRUSTOTHER;
+            break;
+        case OPT_NO_INTERN:
+            verify_flags |= OCSP_NOINTERN;
+            break;
+        case OPT_BADSIG:
+            badsig = 1;
+            break;
+        case OPT_TEXT:
+            req_text = resp_text = 1;
+            break;
+        case OPT_REQ_TEXT:
+            req_text = 1;
+            break;
+        case OPT_RESP_TEXT:
+            resp_text = 1;
+            break;
+        case OPT_REQIN:
+            reqin = opt_arg();
+            break;
+        case OPT_RESPIN:
+            respin = opt_arg();
+            break;
+        case OPT_SIGNER:
+            signfile = opt_arg();
+            break;
+        case OPT_VAFILE:
+            verify_certfile = opt_arg();
+            verify_flags |= OCSP_TRUSTOTHER;
+            break;
+        case OPT_SIGN_OTHER:
+            sign_certfile = opt_arg();
+            break;
+        case OPT_VERIFY_OTHER:
+            verify_certfile = opt_arg();
+            break;
+        case OPT_CAFILE:
+            CAfile = opt_arg();
+            break;
+        case OPT_CAPATH:
+            CApath = opt_arg();
+            break;
+        case OPT_NOCAFILE:
+            noCAfile = 1;
+            break;
+        case OPT_NOCAPATH:
+            noCApath = 1;
+            break;
+        case OPT_V_CASES:
+            if (!opt_verify(o, vpm))
+                goto end;
+            vpmtouched++;
+            break;
+        case OPT_VALIDITY_PERIOD:
+            opt_long(opt_arg(), &nsec);
+            break;
+        case OPT_STATUS_AGE:
+            opt_long(opt_arg(), &maxage);
+            break;
+        case OPT_SIGNKEY:
+            keyfile = opt_arg();
+            break;
+        case OPT_REQOUT:
+            reqout = opt_arg();
+            break;
+        case OPT_RESPOUT:
+            respout = opt_arg();
+            break;
+        case OPT_PATH:
+            path = opt_arg();
+            break;
+        case OPT_ISSUER:
+            issuer = load_cert(opt_arg(), FORMAT_PEM, "issuer certificate");
+            if (issuer == NULL)
+                goto end;
+            if (issuers == NULL) {
+                if ((issuers = sk_X509_new_null()) == NULL)
+                    goto end;
+            }
+            sk_X509_push(issuers, issuer);
+            break;
+        case OPT_CERT:
+            X509_free(cert);
+            cert = load_cert(opt_arg(), FORMAT_PEM, "certificate");
+            if (cert == NULL)
+                goto end;
+            if (cert_id_md == NULL)
+                cert_id_md = EVP_sha1();
+            if (!add_ocsp_cert(&req, cert, cert_id_md, issuer, ids))
+                goto end;
+            if (!sk_OPENSSL_STRING_push(reqnames, opt_arg()))
+                goto end;
+            trailing_md = 0;
+            break;
+        case OPT_SERIAL:
+            if (cert_id_md == NULL)
+                cert_id_md = EVP_sha1();
+            if (!add_ocsp_serial(&req, opt_arg(), cert_id_md, issuer, ids))
+                goto end;
+            if (!sk_OPENSSL_STRING_push(reqnames, opt_arg()))
+                goto end;
+            trailing_md = 0;
+            break;
+        case OPT_INDEX:
+            ridx_filename = opt_arg();
+            break;
+        case OPT_CA:
+            rca_filename = opt_arg();
+            break;
+        case OPT_NMIN:
+            opt_int(opt_arg(), &nmin);
+            if (ndays == -1)
+                ndays = 0;
+            break;
+        case OPT_REQUEST:
+            opt_int(opt_arg(), &accept_count);
+            break;
+        case OPT_NDAYS:
+            ndays = atoi(opt_arg());
+            break;
+        case OPT_RSIGNER:
+            rsignfile = opt_arg();
+            break;
+        case OPT_RKEY:
+            rkeyfile = opt_arg();
+            break;
+        case OPT_ROTHER:
+            rcertfile = opt_arg();
+            break;
+        case OPT_RMD:   /* Response MessageDigest */
+            if (!opt_md(opt_arg(), &rsign_md))
+                goto end;
+            break;
+        case OPT_RSIGOPT:
+            if (rsign_sigopts == NULL)
+                rsign_sigopts = sk_OPENSSL_STRING_new_null();
+            if (rsign_sigopts == NULL || !sk_OPENSSL_STRING_push(rsign_sigopts, opt_arg()))
+                goto end;
+            break;
+        case OPT_HEADER:
+            header = opt_arg();
+            value = strchr(header, '=');
+            if (value == NULL) {
+                BIO_printf(bio_err, "Missing = in header key=value\n");
+                goto opthelp;
+            }
+            *value++ = '\0';
+            if (!X509V3_add_value(header, value, &headers))
+                goto end;
+            break;
+        case OPT_MD:
+            if (trailing_md) {
+                BIO_printf(bio_err,
+                           "%s: Digest must be before -cert or -serial\n",
+                           prog);
+                goto opthelp;
+            }
+            if (!opt_md(opt_unknown(), &cert_id_md))
+                goto opthelp;
+            trailing_md = 1;
+            break;
+        case OPT_MULTI:
+# ifdef OCSP_DAEMON
+            multi = atoi(opt_arg());
+# endif
+            break;
+        }
+    }
+    if (trailing_md) {
+        BIO_printf(bio_err, "%s: Digest must be before -cert or -serial\n",
+                   prog);
+        goto opthelp;
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    /* Have we anything to do? */
+    if (req == NULL && reqin == NULL
+        && respin == NULL && !(port != NULL && ridx_filename != NULL))
+        goto opthelp;
+
+    out = bio_open_default(outfile, 'w', FORMAT_TEXT);
+    if (out == NULL)
+        goto end;
+
+    if (req == NULL && (add_nonce != 2))
+        add_nonce = 0;
+
+    if (req == NULL && reqin != NULL) {
+        derbio = bio_open_default(reqin, 'r', FORMAT_ASN1);
+        if (derbio == NULL)
+            goto end;
+        req = d2i_OCSP_REQUEST_bio(derbio, NULL);
+        BIO_free(derbio);
+        if (req == NULL) {
+            BIO_printf(bio_err, "Error reading OCSP request\n");
+            goto end;
+        }
+    }
+
+    if (req == NULL && port != NULL) {
+        acbio = init_responder(port);
+        if (acbio == NULL)
+            goto end;
+    }
+
+    if (rsignfile != NULL) {
+        if (rkeyfile == NULL)
+            rkeyfile = rsignfile;
+        rsigner = load_cert(rsignfile, FORMAT_PEM, "responder certificate");
+        if (rsigner == NULL) {
+            BIO_printf(bio_err, "Error loading responder certificate\n");
+            goto end;
+        }
+        if (!load_certs(rca_filename, &rca_cert, FORMAT_PEM,
+                        NULL, "CA certificate"))
+            goto end;
+        if (rcertfile != NULL) {
+            if (!load_certs(rcertfile, &rother, FORMAT_PEM, NULL,
+                            "responder other certificates"))
+                goto end;
+        }
+        rkey = load_key(rkeyfile, FORMAT_PEM, 0, NULL, NULL,
+                        "responder private key");
+        if (rkey == NULL)
+            goto end;
+    }
+
+    if (ridx_filename != NULL
+        && (rkey == NULL || rsigner == NULL || rca_cert == NULL)) {
+        BIO_printf(bio_err,
+                   "Responder mode requires certificate, key, and CA.\n");
+        goto end;
+    }
+
+    if (ridx_filename != NULL) {
+        rdb = load_index(ridx_filename, NULL);
+        if (rdb == NULL || index_index(rdb) <= 0) {
+            ret = 1;
+            goto end;
+        }
+    }
+
+# ifdef OCSP_DAEMON
+    if (multi && acbio != NULL)
+        spawn_loop();
+    if (acbio != NULL && req_timeout > 0)
+        signal(SIGALRM, sock_timeout);
+#endif
+
+    if (acbio != NULL)
+        log_message(LOG_INFO, "waiting for OCSP client connections...");
+
+redo_accept:
+
+    if (acbio != NULL) {
+# ifdef OCSP_DAEMON
+        if (index_changed(rdb)) {
+            CA_DB *newrdb = load_index(ridx_filename, NULL);
+
+            if (newrdb != NULL && index_index(newrdb) > 0) {
+                free_index(rdb);
+                rdb = newrdb;
+            } else {
+                free_index(newrdb);
+                log_message(LOG_ERR, "error reloading updated index: %s",
+                            ridx_filename);
+            }
+        }
+# endif
+
+        req = NULL;
+        if (!do_responder(&req, &cbio, acbio, req_timeout))
+            goto redo_accept;
+
+        if (req == NULL) {
+            resp =
+                OCSP_response_create(OCSP_RESPONSE_STATUS_MALFORMEDREQUEST,
+                                     NULL);
+            send_ocsp_response(cbio, resp);
+            goto done_resp;
+        }
+    }
+
+    if (req == NULL
+        && (signfile != NULL || reqout != NULL
+            || host != NULL || add_nonce || ridx_filename != NULL)) {
+        BIO_printf(bio_err, "Need an OCSP request for this operation!\n");
+        goto end;
+    }
+
+    if (req != NULL && add_nonce)
+        OCSP_request_add1_nonce(req, NULL, -1);
+
+    if (signfile != NULL) {
+        if (keyfile == NULL)
+            keyfile = signfile;
+        signer = load_cert(signfile, FORMAT_PEM, "signer certificate");
+        if (signer == NULL) {
+            BIO_printf(bio_err, "Error loading signer certificate\n");
+            goto end;
+        }
+        if (sign_certfile != NULL) {
+            if (!load_certs(sign_certfile, &sign_other, FORMAT_PEM, NULL,
+                            "signer certificates"))
+                goto end;
+        }
+        key = load_key(keyfile, FORMAT_PEM, 0, NULL, NULL,
+                       "signer private key");
+        if (key == NULL)
+            goto end;
+
+        if (!OCSP_request_sign
+            (req, signer, key, NULL, sign_other, sign_flags)) {
+            BIO_printf(bio_err, "Error signing OCSP request\n");
+            goto end;
+        }
+    }
+
+    if (req_text && req != NULL)
+        OCSP_REQUEST_print(out, req, 0);
+
+    if (reqout != NULL) {
+        derbio = bio_open_default(reqout, 'w', FORMAT_ASN1);
+        if (derbio == NULL)
+            goto end;
+        i2d_OCSP_REQUEST_bio(derbio, req);
+        BIO_free(derbio);
+    }
+
+    if (rdb != NULL) {
+        make_ocsp_response(bio_err, &resp, req, rdb, rca_cert, rsigner, rkey,
+                               rsign_md, rsign_sigopts, rother, rflags, nmin, ndays, badsig);
+        if (cbio != NULL)
+            send_ocsp_response(cbio, resp);
+    } else if (host != NULL) {
+# ifndef OPENSSL_NO_SOCK
+        resp = process_responder(req, host, path,
+                                 port, use_ssl, headers, req_timeout);
+        if (resp == NULL)
+            goto end;
+# else
+        BIO_printf(bio_err,
+                   "Error creating connect BIO - sockets not supported.\n");
+        goto end;
+# endif
+    } else if (respin != NULL) {
+        derbio = bio_open_default(respin, 'r', FORMAT_ASN1);
+        if (derbio == NULL)
+            goto end;
+        resp = d2i_OCSP_RESPONSE_bio(derbio, NULL);
+        BIO_free(derbio);
+        if (resp == NULL) {
+            BIO_printf(bio_err, "Error reading OCSP response\n");
+            goto end;
+        }
+    } else {
+        ret = 0;
+        goto end;
+    }
+
+ done_resp:
+
+    if (respout != NULL) {
+        derbio = bio_open_default(respout, 'w', FORMAT_ASN1);
+        if (derbio == NULL)
+            goto end;
+        i2d_OCSP_RESPONSE_bio(derbio, resp);
+        BIO_free(derbio);
+    }
+
+    i = OCSP_response_status(resp);
+    if (i != OCSP_RESPONSE_STATUS_SUCCESSFUL) {
+        BIO_printf(out, "Responder Error: %s (%d)\n",
+                   OCSP_response_status_str(i), i);
+        if (!ignore_err)
+                goto end;
+    }
+
+    if (resp_text)
+        OCSP_RESPONSE_print(out, resp, 0);
+
+    /* If running as responder don't verify our own response */
+    if (cbio != NULL) {
+        /* If not unlimited, see if we took all we should. */
+        if (accept_count != -1 && --accept_count <= 0) {
+            ret = 0;
+            goto end;
+        }
+        BIO_free_all(cbio);
+        cbio = NULL;
+        OCSP_REQUEST_free(req);
+        req = NULL;
+        OCSP_RESPONSE_free(resp);
+        resp = NULL;
+        goto redo_accept;
+    }
+    if (ridx_filename != NULL) {
+        ret = 0;
+        goto end;
+    }
+
+    if (store == NULL) {
+        store = setup_verify(CAfile, CApath, noCAfile, noCApath);
+        if (!store)
+            goto end;
+    }
+    if (vpmtouched)
+        X509_STORE_set1_param(store, vpm);
+    if (verify_certfile != NULL) {
+        if (!load_certs(verify_certfile, &verify_other, FORMAT_PEM, NULL,
+                        "validator certificate"))
+            goto end;
+    }
+
+    bs = OCSP_response_get1_basic(resp);
+    if (bs == NULL) {
+        BIO_printf(bio_err, "Error parsing response\n");
+        goto end;
+    }
+
+    ret = 0;
+
+    if (!noverify) {
+        if (req != NULL && ((i = OCSP_check_nonce(req, bs)) <= 0)) {
+            if (i == -1)
+                BIO_printf(bio_err, "WARNING: no nonce in response\n");
+            else {
+                BIO_printf(bio_err, "Nonce Verify error\n");
+                ret = 1;
+                goto end;
+            }
+        }
+
+        i = OCSP_basic_verify(bs, verify_other, store, verify_flags);
+        if (i <= 0 && issuers) {
+            i = OCSP_basic_verify(bs, issuers, store, OCSP_TRUSTOTHER);
+            if (i > 0)
+                ERR_clear_error();
+        }
+        if (i <= 0) {
+            BIO_printf(bio_err, "Response Verify Failure\n");
+            ERR_print_errors(bio_err);
+            ret = 1;
+        } else {
+            BIO_printf(bio_err, "Response verify OK\n");
+        }
+    }
+
+    print_ocsp_summary(out, bs, req, reqnames, ids, nsec, maxage);
+
+ end:
+    ERR_print_errors(bio_err);
+    X509_free(signer);
+    X509_STORE_free(store);
+    X509_VERIFY_PARAM_free(vpm);
+    sk_OPENSSL_STRING_free(rsign_sigopts);
+    EVP_PKEY_free(key);
+    EVP_PKEY_free(rkey);
+    X509_free(cert);
+    sk_X509_pop_free(issuers, X509_free);
+    X509_free(rsigner);
+    sk_X509_pop_free(rca_cert, X509_free);
+    free_index(rdb);
+    BIO_free_all(cbio);
+    BIO_free_all(acbio);
+    BIO_free_all(out);
+    OCSP_REQUEST_free(req);
+    OCSP_RESPONSE_free(resp);
+    OCSP_BASICRESP_free(bs);
+    sk_OPENSSL_STRING_free(reqnames);
+    sk_OCSP_CERTID_free(ids);
+    sk_X509_pop_free(sign_other, X509_free);
+    sk_X509_pop_free(verify_other, X509_free);
+    sk_CONF_VALUE_pop_free(headers, X509V3_conf_free);
+    OPENSSL_free(thost);
+    OPENSSL_free(tport);
+    OPENSSL_free(tpath);
+
+    return ret;
+}
+
+static void
+log_message(int level, const char *fmt, ...)
+{
+    va_list ap;
+
+    va_start(ap, fmt);
+# ifdef OCSP_DAEMON
+    if (multi) {
+        char buf[1024];
+        if (vsnprintf(buf, sizeof(buf), fmt, ap) > 0) {
+            syslog(level, "%s", buf);
+        }
+        if (level >= LOG_ERR)
+            ERR_print_errors_cb(print_syslog, &level);
+    }
+# endif
+    if (!multi) {
+        BIO_printf(bio_err, "%s: ", prog);
+        BIO_vprintf(bio_err, fmt, ap);
+        BIO_printf(bio_err, "\n");
+    }
+    va_end(ap);
+}
+
+# ifdef OCSP_DAEMON
+
+static int print_syslog(const char *str, size_t len, void *levPtr)
+{
+    int level = *(int *)levPtr;
+    int ilen = (len > MAXERRLEN) ? MAXERRLEN : len;
+
+    syslog(level, "%.*s", ilen, str);
+
+    return ilen;
+}
+
+static int index_changed(CA_DB *rdb)
+{
+    struct stat sb;
+
+    if (rdb != NULL && stat(rdb->dbfname, &sb) != -1) {
+        if (rdb->dbst.st_mtime != sb.st_mtime
+            || rdb->dbst.st_ctime != sb.st_ctime
+            || rdb->dbst.st_ino != sb.st_ino
+            || rdb->dbst.st_dev != sb.st_dev) {
+            syslog(LOG_INFO, "index file changed, reloading");
+            return 1;
+        }
+    }
+    return 0;
+}
+
+static void killall(int ret, pid_t *kidpids)
+{
+    int i;
+
+    for (i = 0; i < multi; ++i)
+        if (kidpids[i] != 0)
+            (void)kill(kidpids[i], SIGTERM);
+    OPENSSL_free(kidpids);
+    sleep(1);
+    exit(ret);
+}
+
+static int termsig = 0;
+
+static void noteterm (int sig)
+{
+    termsig = sig;
+}
+
+/*
+ * Loop spawning up to `multi` child processes, only child processes return
+ * from this function.  The parent process loops until receiving a termination
+ * signal, kills extant children and exits without returning.
+ */
+static void spawn_loop(void)
+{
+    pid_t *kidpids = NULL;
+    int status;
+    int procs = 0;
+    int i;
+
+    openlog(prog, LOG_PID, LOG_DAEMON);
+
+    if (setpgid(0, 0)) {
+        syslog(LOG_ERR, "fatal: error detaching from parent process group: %s",
+               strerror(errno));
+        exit(1);
+    }
+    kidpids = app_malloc(multi * sizeof(*kidpids), "child PID array");
+    for (i = 0; i < multi; ++i)
+        kidpids[i] = 0;
+
+    signal(SIGINT, noteterm);
+    signal(SIGTERM, noteterm);
+
+    while (termsig == 0) {
+        pid_t fpid;
+
+        /*
+         * Wait for a child to replace when we're at the limit.
+         * Slow down if a child exited abnormally or waitpid() < 0
+         */
+        while (termsig == 0 && procs >= multi) {
+            if ((fpid = waitpid(-1, &status, 0)) > 0) {
+                for (i = 0; i < procs; ++i) {
+                    if (kidpids[i] == fpid) {
+                        kidpids[i] = 0;
+                        --procs;
+                        break;
+                    }
+                }
+                if (i >= multi) {
+                    syslog(LOG_ERR, "fatal: internal error: "
+                           "no matching child slot for pid: %ld",
+                           (long) fpid);
+                    killall(1, kidpids);
+                }
+                if (status != 0) {
+                    if (WIFEXITED(status))
+                        syslog(LOG_WARNING, "child process: %ld, exit status: %d",
+                               (long)fpid, WEXITSTATUS(status));
+                    else if (WIFSIGNALED(status))
+                        syslog(LOG_WARNING, "child process: %ld, term signal %d%s",
+                               (long)fpid, WTERMSIG(status),
+#ifdef WCOREDUMP
+                               WCOREDUMP(status) ? " (core dumped)" :
+#endif
+                               "");
+                    sleep(1);
+                }
+                break;
+            } else if (errno != EINTR) {
+                syslog(LOG_ERR, "fatal: waitpid(): %s", strerror(errno));
+                killall(1, kidpids);
+            }
+        }
+        if (termsig)
+            break;
+
+        switch(fpid = fork()) {
+        case -1:            /* error */
+            /* System critically low on memory, pause and try again later */
+            sleep(30);
+            break;
+        case 0:             /* child */
+            OPENSSL_free(kidpids);
+            signal(SIGINT, SIG_DFL);
+            signal(SIGTERM, SIG_DFL);
+            if (termsig)
+                _exit(0);
+            if (RAND_poll() <= 0) {
+                syslog(LOG_ERR, "fatal: RAND_poll() failed");
+                _exit(1);
+            }
+            return;
+        default:            /* parent */
+            for (i = 0; i < multi; ++i) {
+                if (kidpids[i] == 0) {
+                    kidpids[i] = fpid;
+                    procs++;
+                    break;
+                }
+            }
+            if (i >= multi) {
+                syslog(LOG_ERR, "fatal: internal error: no free child slots");
+                killall(1, kidpids);
+            }
+            break;
+        }
+    }
+
+    /* The loop above can only break on termsig */
+    syslog(LOG_INFO, "terminating on signal: %d", termsig);
+    killall(0, kidpids);
+}
+# endif
+
+static int add_ocsp_cert(OCSP_REQUEST **req, X509 *cert,
+                         const EVP_MD *cert_id_md, X509 *issuer,
+                         STACK_OF(OCSP_CERTID) *ids)
+{
+    OCSP_CERTID *id;
+
+    if (issuer == NULL) {
+        BIO_printf(bio_err, "No issuer certificate specified\n");
+        return 0;
+    }
+    if (*req == NULL)
+        *req = OCSP_REQUEST_new();
+    if (*req == NULL)
+        goto err;
+    id = OCSP_cert_to_id(cert_id_md, cert, issuer);
+    if (id == NULL || !sk_OCSP_CERTID_push(ids, id))
+        goto err;
+    if (!OCSP_request_add0_id(*req, id))
+        goto err;
+    return 1;
+
+ err:
+    BIO_printf(bio_err, "Error Creating OCSP request\n");
+    return 0;
+}
+
+static int add_ocsp_serial(OCSP_REQUEST **req, char *serial,
+                           const EVP_MD *cert_id_md, X509 *issuer,
+                           STACK_OF(OCSP_CERTID) *ids)
+{
+    OCSP_CERTID *id;
+    X509_NAME *iname;
+    ASN1_BIT_STRING *ikey;
+    ASN1_INTEGER *sno;
+
+    if (issuer == NULL) {
+        BIO_printf(bio_err, "No issuer certificate specified\n");
+        return 0;
+    }
+    if (*req == NULL)
+        *req = OCSP_REQUEST_new();
+    if (*req == NULL)
+        goto err;
+    iname = X509_get_subject_name(issuer);
+    ikey = X509_get0_pubkey_bitstr(issuer);
+    sno = s2i_ASN1_INTEGER(NULL, serial);
+    if (sno == NULL) {
+        BIO_printf(bio_err, "Error converting serial number %s\n", serial);
+        return 0;
+    }
+    id = OCSP_cert_id_new(cert_id_md, iname, ikey, sno);
+    ASN1_INTEGER_free(sno);
+    if (id == NULL || !sk_OCSP_CERTID_push(ids, id))
+        goto err;
+    if (!OCSP_request_add0_id(*req, id))
+        goto err;
+    return 1;
+
+ err:
+    BIO_printf(bio_err, "Error Creating OCSP request\n");
+    return 0;
+}
+
+static void print_ocsp_summary(BIO *out, OCSP_BASICRESP *bs, OCSP_REQUEST *req,
+                              STACK_OF(OPENSSL_STRING) *names,
+                              STACK_OF(OCSP_CERTID) *ids, long nsec,
+                              long maxage)
+{
+    OCSP_CERTID *id;
+    const char *name;
+    int i, status, reason;
+    ASN1_GENERALIZEDTIME *rev, *thisupd, *nextupd;
+
+    if (bs == NULL || req == NULL || !sk_OPENSSL_STRING_num(names)
+        || !sk_OCSP_CERTID_num(ids))
+        return;
+
+    for (i = 0; i < sk_OCSP_CERTID_num(ids); i++) {
+        id = sk_OCSP_CERTID_value(ids, i);
+        name = sk_OPENSSL_STRING_value(names, i);
+        BIO_printf(out, "%s: ", name);
+
+        if (!OCSP_resp_find_status(bs, id, &status, &reason,
+                                   &rev, &thisupd, &nextupd)) {
+            BIO_puts(out, "ERROR: No Status found.\n");
+            continue;
+        }
+
+        /*
+         * Check validity: if invalid write to output BIO so we know which
+         * response this refers to.
+         */
+        if (!OCSP_check_validity(thisupd, nextupd, nsec, maxage)) {
+            BIO_puts(out, "WARNING: Status times invalid.\n");
+            ERR_print_errors(out);
+        }
+        BIO_printf(out, "%s\n", OCSP_cert_status_str(status));
+
+        BIO_puts(out, "\tThis Update: ");
+        ASN1_GENERALIZEDTIME_print(out, thisupd);
+        BIO_puts(out, "\n");
+
+        if (nextupd) {
+            BIO_puts(out, "\tNext Update: ");
+            ASN1_GENERALIZEDTIME_print(out, nextupd);
+            BIO_puts(out, "\n");
+        }
+
+        if (status != V_OCSP_CERTSTATUS_REVOKED)
+            continue;
+
+        if (reason != -1)
+            BIO_printf(out, "\tReason: %s\n", OCSP_crl_reason_str(reason));
+
+        BIO_puts(out, "\tRevocation Time: ");
+        ASN1_GENERALIZEDTIME_print(out, rev);
+        BIO_puts(out, "\n");
+    }
+}
+
+static void make_ocsp_response(BIO *err, OCSP_RESPONSE **resp, OCSP_REQUEST *req,
+                              CA_DB *db, STACK_OF(X509) *ca, X509 *rcert,
+                              EVP_PKEY *rkey, const EVP_MD *rmd,
+                              STACK_OF(OPENSSL_STRING) *sigopts,
+                              STACK_OF(X509) *rother, unsigned long flags,
+                              int nmin, int ndays, int badsig)
+{
+    ASN1_TIME *thisupd = NULL, *nextupd = NULL;
+    OCSP_CERTID *cid;
+    OCSP_BASICRESP *bs = NULL;
+    int i, id_count;
+    EVP_MD_CTX *mctx = NULL;
+    EVP_PKEY_CTX *pkctx = NULL;
+
+    id_count = OCSP_request_onereq_count(req);
+
+    if (id_count <= 0) {
+        *resp =
+            OCSP_response_create(OCSP_RESPONSE_STATUS_MALFORMEDREQUEST, NULL);
+        goto end;
+    }
+
+    bs = OCSP_BASICRESP_new();
+    thisupd = X509_gmtime_adj(NULL, 0);
+    if (ndays != -1)
+        nextupd = X509_time_adj_ex(NULL, ndays, nmin * 60, NULL);
+
+    /* Examine each certificate id in the request */
+    for (i = 0; i < id_count; i++) {
+        OCSP_ONEREQ *one;
+        ASN1_INTEGER *serial;
+        char **inf;
+        int jj;
+        int found = 0;
+        ASN1_OBJECT *cert_id_md_oid;
+        const EVP_MD *cert_id_md;
+        one = OCSP_request_onereq_get0(req, i);
+        cid = OCSP_onereq_get0_id(one);
+
+        OCSP_id_get0_info(NULL, &cert_id_md_oid, NULL, NULL, cid);
+
+        cert_id_md = EVP_get_digestbyobj(cert_id_md_oid);
+        if (cert_id_md == NULL) {
+            *resp = OCSP_response_create(OCSP_RESPONSE_STATUS_INTERNALERROR,
+                                         NULL);
+            goto end;
+        }
+        for (jj = 0; jj < sk_X509_num(ca) && !found; jj++) {
+            X509 *ca_cert = sk_X509_value(ca, jj);
+            OCSP_CERTID *ca_id = OCSP_cert_to_id(cert_id_md, NULL, ca_cert);
+
+            if (OCSP_id_issuer_cmp(ca_id, cid) == 0)
+                found = 1;
+
+            OCSP_CERTID_free(ca_id);
+        }
+
+        if (!found) {
+            OCSP_basic_add1_status(bs, cid,
+                                   V_OCSP_CERTSTATUS_UNKNOWN,
+                                   0, NULL, thisupd, nextupd);
+            continue;
+        }
+        OCSP_id_get0_info(NULL, NULL, NULL, &serial, cid);
+        inf = lookup_serial(db, serial);
+        if (inf == NULL) {
+            OCSP_basic_add1_status(bs, cid,
+                                   V_OCSP_CERTSTATUS_UNKNOWN,
+                                   0, NULL, thisupd, nextupd);
+        } else if (inf[DB_type][0] == DB_TYPE_VAL) {
+            OCSP_basic_add1_status(bs, cid,
+                                   V_OCSP_CERTSTATUS_GOOD,
+                                   0, NULL, thisupd, nextupd);
+        } else if (inf[DB_type][0] == DB_TYPE_REV) {
+            ASN1_OBJECT *inst = NULL;
+            ASN1_TIME *revtm = NULL;
+            ASN1_GENERALIZEDTIME *invtm = NULL;
+            OCSP_SINGLERESP *single;
+            int reason = -1;
+            unpack_revinfo(&revtm, &reason, &inst, &invtm, inf[DB_rev_date]);
+            single = OCSP_basic_add1_status(bs, cid,
+                                            V_OCSP_CERTSTATUS_REVOKED,
+                                            reason, revtm, thisupd, nextupd);
+            if (invtm != NULL)
+                OCSP_SINGLERESP_add1_ext_i2d(single, NID_invalidity_date,
+                                             invtm, 0, 0);
+            else if (inst != NULL)
+                OCSP_SINGLERESP_add1_ext_i2d(single,
+                                             NID_hold_instruction_code, inst,
+                                             0, 0);
+            ASN1_OBJECT_free(inst);
+            ASN1_TIME_free(revtm);
+            ASN1_GENERALIZEDTIME_free(invtm);
+        }
+    }
+
+    OCSP_copy_nonce(bs, req);
+
+    mctx = EVP_MD_CTX_new();
+    if ( mctx == NULL || !EVP_DigestSignInit(mctx, &pkctx, rmd, NULL, rkey)) {
+        *resp = OCSP_response_create(OCSP_RESPONSE_STATUS_INTERNALERROR, NULL);
+        goto end;
+    }
+    for (i = 0; i < sk_OPENSSL_STRING_num(sigopts); i++) {
+        char *sigopt = sk_OPENSSL_STRING_value(sigopts, i);
+
+        if (pkey_ctrl_string(pkctx, sigopt) <= 0) {
+            BIO_printf(err, "parameter error \"%s\"\n", sigopt);
+            ERR_print_errors(bio_err);
+            *resp = OCSP_response_create(OCSP_RESPONSE_STATUS_INTERNALERROR,
+                                         NULL);
+            goto end;
+        }
+    }
+    OCSP_basic_sign_ctx(bs, rcert, mctx, rother, flags);
+
+    if (badsig) {
+        const ASN1_OCTET_STRING *sig = OCSP_resp_get0_signature(bs);
+        corrupt_signature(sig);
+    }
+
+    *resp = OCSP_response_create(OCSP_RESPONSE_STATUS_SUCCESSFUL, bs);
+
+ end:
+    EVP_MD_CTX_free(mctx);
+    ASN1_TIME_free(thisupd);
+    ASN1_TIME_free(nextupd);
+    OCSP_BASICRESP_free(bs);
+}
+
+static char **lookup_serial(CA_DB *db, ASN1_INTEGER *ser)
+{
+    int i;
+    BIGNUM *bn = NULL;
+    char *itmp, *row[DB_NUMBER], **rrow;
+    for (i = 0; i < DB_NUMBER; i++)
+        row[i] = NULL;
+    bn = ASN1_INTEGER_to_BN(ser, NULL);
+    OPENSSL_assert(bn);         /* FIXME: should report an error at this
+                                 * point and abort */
+    if (BN_is_zero(bn))
+        itmp = OPENSSL_strdup("00");
+    else
+        itmp = BN_bn2hex(bn);
+    row[DB_serial] = itmp;
+    BN_free(bn);
+    rrow = TXT_DB_get_by_index(db->db, DB_serial, row);
+    OPENSSL_free(itmp);
+    return rrow;
+}
+
+/* Quick and dirty OCSP server: read in and parse input request */
+
+static BIO *init_responder(const char *port)
+{
+# ifdef OPENSSL_NO_SOCK
+    BIO_printf(bio_err,
+               "Error setting up accept BIO - sockets not supported.\n");
+    return NULL;
+# else
+    BIO *acbio = NULL, *bufbio = NULL;
+
+    bufbio = BIO_new(BIO_f_buffer());
+    if (bufbio == NULL)
+        goto err;
+    acbio = BIO_new(BIO_s_accept());
+    if (acbio == NULL
+        || BIO_set_bind_mode(acbio, BIO_BIND_REUSEADDR) < 0
+        || BIO_set_accept_port(acbio, port) < 0) {
+        log_message(LOG_ERR, "Error setting up accept BIO");
+        goto err;
+    }
+
+    BIO_set_accept_bios(acbio, bufbio);
+    bufbio = NULL;
+    if (BIO_do_accept(acbio) <= 0) {
+        log_message(LOG_ERR, "Error starting accept");
+        goto err;
+    }
+
+    return acbio;
+
+ err:
+    BIO_free_all(acbio);
+    BIO_free(bufbio);
+    return NULL;
+# endif
+}
+
+# ifndef OPENSSL_NO_SOCK
+/*
+ * Decode %xx URL-decoding in-place. Ignores mal-formed sequences.
+ */
+static int urldecode(char *p)
+{
+    unsigned char *out = (unsigned char *)p;
+    unsigned char *save = out;
+
+    for (; *p; p++) {
+        if (*p != '%')
+            *out++ = *p;
+        else if (isxdigit(_UC(p[1])) && isxdigit(_UC(p[2]))) {
+            /* Don't check, can't fail because of ixdigit() call. */
+            *out++ = (OPENSSL_hexchar2int(p[1]) << 4)
+                   | OPENSSL_hexchar2int(p[2]);
+            p += 2;
+        }
+        else
+            return -1;
+    }
+    *out = '\0';
+    return (int)(out - save);
+}
+# endif
+
+# ifdef OCSP_DAEMON
+static void sock_timeout(int signum)
+{
+    if (acfd != (int)INVALID_SOCKET)
+        (void)shutdown(acfd, SHUT_RD);
+}
+# endif
+
+static int do_responder(OCSP_REQUEST **preq, BIO **pcbio, BIO *acbio,
+                        int timeout)
+{
+# ifdef OPENSSL_NO_SOCK
+    return 0;
+# else
+    int len;
+    OCSP_REQUEST *req = NULL;
+    char inbuf[2048], reqbuf[2048];
+    char *p, *q;
+    BIO *cbio = NULL, *getbio = NULL, *b64 = NULL;
+    const char *client;
+
+    *preq = NULL;
+
+    /* Connection loss before accept() is routine, ignore silently */
+    if (BIO_do_accept(acbio) <= 0)
+        return 0;
+
+    cbio = BIO_pop(acbio);
+    *pcbio = cbio;
+    client = BIO_get_peer_name(cbio);
+
+#  ifdef OCSP_DAEMON
+    if (timeout > 0) {
+        (void) BIO_get_fd(cbio, &acfd);
+        alarm(timeout);
+    }
+#  endif
+
+    /* Read the request line. */
+    len = BIO_gets(cbio, reqbuf, sizeof(reqbuf));
+    if (len <= 0)
+        goto out;
+
+    if (strncmp(reqbuf, "GET ", 4) == 0) {
+        /* Expecting GET {sp} /URL {sp} HTTP/1.x */
+        for (p = reqbuf + 4; *p == ' '; ++p)
+            continue;
+        if (*p != '/') {
+            log_message(LOG_INFO, "Invalid request -- bad URL: %s", client);
+            goto out;
+        }
+        p++;
+
+        /* Splice off the HTTP version identifier. */
+        for (q = p; *q; q++)
+            if (*q == ' ')
+                break;
+        if (strncmp(q, " HTTP/1.", 8) != 0) {
+            log_message(LOG_INFO,
+                        "Invalid request -- bad HTTP version: %s", client);
+            goto out;
+        }
+        *q = '\0';
+
+        /*
+         * Skip "GET / HTTP..." requests often used by load-balancers
+         */
+        if (p[1] == '\0')
+            goto out;
+
+        len = urldecode(p);
+        if (len <= 0) {
+            log_message(LOG_INFO,
+                        "Invalid request -- bad URL encoding: %s", client);
+            goto out;
+        }
+        if ((getbio = BIO_new_mem_buf(p, len)) == NULL
+            || (b64 = BIO_new(BIO_f_base64())) == NULL) {
+            log_message(LOG_ERR, "Could not allocate base64 bio: %s", client);
+            goto out;
+        }
+        BIO_set_flags(b64, BIO_FLAGS_BASE64_NO_NL);
+        getbio = BIO_push(b64, getbio);
+    } else if (strncmp(reqbuf, "POST ", 5) != 0) {
+        log_message(LOG_INFO, "Invalid request -- bad HTTP verb: %s", client);
+        goto out;
+    }
+
+    /* Read and skip past the headers. */
+    for (;;) {
+        len = BIO_gets(cbio, inbuf, sizeof(inbuf));
+        if (len <= 0)
+            goto out;
+        if ((inbuf[0] == '\r') || (inbuf[0] == '\n'))
+            break;
+    }
+
+#  ifdef OCSP_DAEMON
+    /* Clear alarm before we close the client socket */
+    alarm(0);
+    timeout = 0;
+#  endif
+
+    /* Try to read OCSP request */
+    if (getbio != NULL) {
+        req = d2i_OCSP_REQUEST_bio(getbio, NULL);
+        BIO_free_all(getbio);
+    } else {
+        req = d2i_OCSP_REQUEST_bio(cbio, NULL);
+    }
+
+    if (req == NULL)
+        log_message(LOG_ERR, "Error parsing OCSP request");
+
+    *preq = req;
+
+out:
+#  ifdef OCSP_DAEMON
+    if (timeout > 0)
+        alarm(0);
+    acfd = (int)INVALID_SOCKET;
+#  endif
+    return 1;
+# endif
+}
+
+static int send_ocsp_response(BIO *cbio, OCSP_RESPONSE *resp)
+{
+    char http_resp[] =
+        "HTTP/1.0 200 OK\r\nContent-type: application/ocsp-response\r\n"
+        "Content-Length: %d\r\n\r\n";
+    if (cbio == NULL)
+        return 0;
+    BIO_printf(cbio, http_resp, i2d_OCSP_RESPONSE(resp, NULL));
+    i2d_OCSP_RESPONSE_bio(cbio, resp);
+    (void)BIO_flush(cbio);
+    return 1;
+}
+
+# ifndef OPENSSL_NO_SOCK
+static OCSP_RESPONSE *query_responder(BIO *cbio, const char *host,
+                                      const char *path,
+                                      const STACK_OF(CONF_VALUE) *headers,
+                                      OCSP_REQUEST *req, int req_timeout)
+{
+    int fd;
+    int rv;
+    int i;
+    int add_host = 1;
+    OCSP_REQ_CTX *ctx = NULL;
+    OCSP_RESPONSE *rsp = NULL;
+    fd_set confds;
+    struct timeval tv;
+
+    if (req_timeout != -1)
+        BIO_set_nbio(cbio, 1);
+
+    rv = BIO_do_connect(cbio);
+
+    if ((rv <= 0) && ((req_timeout == -1) || !BIO_should_retry(cbio))) {
+        BIO_puts(bio_err, "Error connecting BIO\n");
+        return NULL;
+    }
+
+    if (BIO_get_fd(cbio, &fd) < 0) {
+        BIO_puts(bio_err, "Can't get connection fd\n");
+        goto err;
+    }
+
+    if (req_timeout != -1 && rv <= 0) {
+        FD_ZERO(&confds);
+        openssl_fdset(fd, &confds);
+        tv.tv_usec = 0;
+        tv.tv_sec = req_timeout;
+        rv = select(fd + 1, NULL, (void *)&confds, NULL, &tv);
+        if (rv == 0) {
+            BIO_puts(bio_err, "Timeout on connect\n");
+            return NULL;
+        }
+    }
+
+    ctx = OCSP_sendreq_new(cbio, path, NULL, -1);
+    if (ctx == NULL)
+        return NULL;
+
+    for (i = 0; i < sk_CONF_VALUE_num(headers); i++) {
+        CONF_VALUE *hdr = sk_CONF_VALUE_value(headers, i);
+        if (add_host == 1 && strcasecmp("host", hdr->name) == 0)
+            add_host = 0;
+        if (!OCSP_REQ_CTX_add1_header(ctx, hdr->name, hdr->value))
+            goto err;
+    }
+
+    if (add_host == 1 && OCSP_REQ_CTX_add1_header(ctx, "Host", host) == 0)
+        goto err;
+
+    if (!OCSP_REQ_CTX_set1_req(ctx, req))
+        goto err;
+
+    for (;;) {
+        rv = OCSP_sendreq_nbio(&rsp, ctx);
+        if (rv != -1)
+            break;
+        if (req_timeout == -1)
+            continue;
+        FD_ZERO(&confds);
+        openssl_fdset(fd, &confds);
+        tv.tv_usec = 0;
+        tv.tv_sec = req_timeout;
+        if (BIO_should_read(cbio)) {
+            rv = select(fd + 1, (void *)&confds, NULL, NULL, &tv);
+        } else if (BIO_should_write(cbio)) {
+            rv = select(fd + 1, NULL, (void *)&confds, NULL, &tv);
+        } else {
+            BIO_puts(bio_err, "Unexpected retry condition\n");
+            goto err;
+        }
+        if (rv == 0) {
+            BIO_puts(bio_err, "Timeout on request\n");
+            break;
+        }
+        if (rv == -1) {
+            BIO_puts(bio_err, "Select error\n");
+            break;
+        }
+
+    }
+ err:
+    OCSP_REQ_CTX_free(ctx);
+
+    return rsp;
+}
+
+OCSP_RESPONSE *process_responder(OCSP_REQUEST *req,
+                                 const char *host, const char *path,
+                                 const char *port, int use_ssl,
+                                 STACK_OF(CONF_VALUE) *headers,
+                                 int req_timeout)
+{
+    BIO *cbio = NULL;
+    SSL_CTX *ctx = NULL;
+    OCSP_RESPONSE *resp = NULL;
+
+    cbio = BIO_new_connect(host);
+    if (cbio == NULL) {
+        BIO_printf(bio_err, "Error creating connect BIO\n");
+        goto end;
+    }
+    if (port != NULL)
+        BIO_set_conn_port(cbio, port);
+    if (use_ssl == 1) {
+        BIO *sbio;
+        ctx = SSL_CTX_new(TLS_client_method());
+        if (ctx == NULL) {
+            BIO_printf(bio_err, "Error creating SSL context.\n");
+            goto end;
+        }
+        SSL_CTX_set_mode(ctx, SSL_MODE_AUTO_RETRY);
+        sbio = BIO_new_ssl(ctx, 1);
+        cbio = BIO_push(sbio, cbio);
+    }
+
+    resp = query_responder(cbio, host, path, headers, req, req_timeout);
+    if (resp == NULL)
+        BIO_printf(bio_err, "Error querying OCSP responder\n");
+ end:
+    BIO_free_all(cbio);
+    SSL_CTX_free(ctx);
+    return resp;
+}
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/openssl-vms.cnf b/trunk/3rdparty/openssl-1.1-fit/apps/openssl-vms.cnf
new file mode 100644
index 000000000..e64cc9f3a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/openssl-vms.cnf
@@ -0,0 +1,350 @@
+#
+# OpenSSL example configuration file.
+# This is mostly being used for generation of certificate requests.
+#
+
+# Note that you can include other files from the main configuration
+# file using the .include directive.
+#.include filename
+
+# This definition stops the following lines choking if HOME isn't
+# defined.
+HOME			= .
+
+# Extra OBJECT IDENTIFIER info:
+#oid_file		= $ENV::HOME/.oid
+oid_section		= new_oids
+
+# To use this configuration file with the "-extfile" option of the
+# "openssl x509" utility, name here the section containing the
+# X.509v3 extensions to use:
+# extensions		=
+# (Alternatively, use a configuration file that has only
+# X.509v3 extensions in its main [= default] section.)
+
+[ new_oids ]
+
+# We can add new OIDs in here for use by 'ca', 'req' and 'ts'.
+# Add a simple OID like this:
+# testoid1=1.2.3.4
+# Or use config file substitution like this:
+# testoid2=${testoid1}.5.6
+
+# Policies used by the TSA examples.
+tsa_policy1 = 1.2.3.4.1
+tsa_policy2 = 1.2.3.4.5.6
+tsa_policy3 = 1.2.3.4.5.7
+
+####################################################################
+[ ca ]
+default_ca	= CA_default		# The default ca section
+
+####################################################################
+[ CA_default ]
+
+dir		= sys\$disk:[.demoCA		# Where everything is kept
+certs		= $dir.certs]		# Where the issued certs are kept
+crl_dir		= $dir.crl]		# Where the issued crl are kept
+database	= $dir]index.txt	# database index file.
+#unique_subject	= no			# Set to 'no' to allow creation of
+					# several certs with same subject.
+new_certs_dir	= $dir.newcerts]		# default place for new certs.
+
+certificate	= $dir]cacert.pem 	# The CA certificate
+serial		= $dir]serial. 		# The current serial number
+crlnumber	= $dir]crlnumber.	# the current crl number
+					# must be commented out to leave a V1 CRL
+crl		= $dir]crl.pem 		# The current CRL
+private_key	= $dir.private]cakey.pem# The private key
+
+x509_extensions	= usr_cert		# The extensions to add to the cert
+
+# Comment out the following two lines for the "traditional"
+# (and highly broken) format.
+name_opt 	= ca_default		# Subject Name options
+cert_opt 	= ca_default		# Certificate field options
+
+# Extension copying option: use with caution.
+# copy_extensions = copy
+
+# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
+# so this is commented out by default to leave a V1 CRL.
+# crlnumber must also be commented out to leave a V1 CRL.
+# crl_extensions	= crl_ext
+
+default_days	= 365			# how long to certify for
+default_crl_days= 30			# how long before next CRL
+default_md	= default		# use public key default MD
+preserve	= no			# keep passed DN ordering
+
+# A few difference way of specifying how similar the request should look
+# For type CA, the listed attributes must be the same, and the optional
+# and supplied fields are just that :-)
+policy		= policy_match
+
+# For the CA policy
+[ policy_match ]
+countryName		= match
+stateOrProvinceName	= match
+organizationName	= match
+organizationalUnitName	= optional
+commonName		= supplied
+emailAddress		= optional
+
+# For the 'anything' policy
+# At this point in time, you must list all acceptable 'object'
+# types.
+[ policy_anything ]
+countryName		= optional
+stateOrProvinceName	= optional
+localityName		= optional
+organizationName	= optional
+organizationalUnitName	= optional
+commonName		= supplied
+emailAddress		= optional
+
+####################################################################
+[ req ]
+default_bits		= 2048
+default_keyfile 	= privkey.pem
+distinguished_name	= req_distinguished_name
+attributes		= req_attributes
+x509_extensions	= v3_ca	# The extensions to add to the self signed cert
+
+# Passwords for private keys if not present they will be prompted for
+# input_password = secret
+# output_password = secret
+
+# This sets a mask for permitted string types. There are several options.
+# default: PrintableString, T61String, BMPString.
+# pkix	 : PrintableString, BMPString (PKIX recommendation before 2004)
+# utf8only: only UTF8Strings (PKIX recommendation after 2004).
+# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
+# MASK:XXXX a literal mask value.
+# WARNING: ancient versions of Netscape crash on BMPStrings or UTF8Strings.
+string_mask = utf8only
+
+# req_extensions = v3_req # The extensions to add to a certificate request
+
+[ req_distinguished_name ]
+countryName			= Country Name (2 letter code)
+countryName_default		= AU
+countryName_min			= 2
+countryName_max			= 2
+
+stateOrProvinceName		= State or Province Name (full name)
+stateOrProvinceName_default	= Some-State
+
+localityName			= Locality Name (eg, city)
+
+0.organizationName		= Organization Name (eg, company)
+0.organizationName_default	= Internet Widgits Pty Ltd
+
+# we can do this but it is not needed normally :-)
+#1.organizationName		= Second Organization Name (eg, company)
+#1.organizationName_default	= World Wide Web Pty Ltd
+
+organizationalUnitName		= Organizational Unit Name (eg, section)
+#organizationalUnitName_default	=
+
+commonName			= Common Name (e.g. server FQDN or YOUR name)
+commonName_max			= 64
+
+emailAddress			= Email Address
+emailAddress_max		= 64
+
+# SET-ex3			= SET extension number 3
+
+[ req_attributes ]
+challengePassword		= A challenge password
+challengePassword_min		= 4
+challengePassword_max		= 20
+
+unstructuredName		= An optional company name
+
+[ usr_cert ]
+
+# These extensions are added when 'ca' signs a request.
+
+# This goes against PKIX guidelines but some CAs do it and some software
+# requires this to avoid interpreting an end user certificate as a CA.
+
+basicConstraints=CA:FALSE
+
+# Here are some examples of the usage of nsCertType. If it is omitted
+# the certificate can be used for anything *except* object signing.
+
+# This is OK for an SSL server.
+# nsCertType			= server
+
+# For an object signing certificate this would be used.
+# nsCertType = objsign
+
+# For normal client use this is typical
+# nsCertType = client, email
+
+# and for everything including object signing:
+# nsCertType = client, email, objsign
+
+# This is typical in keyUsage for a client certificate.
+# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+# This will be displayed in Netscape's comment listbox.
+nsComment			= "OpenSSL Generated Certificate"
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+
+# This stuff is for subjectAltName and issuerAltname.
+# Import the email address.
+# subjectAltName=email:copy
+# An alternative to produce certificates that aren't
+# deprecated according to PKIX.
+# subjectAltName=email:move
+
+# Copy subject details
+# issuerAltName=issuer:copy
+
+#nsCaRevocationUrl		= http://www.domain.dom/ca-crl.pem
+#nsBaseUrl
+#nsRevocationUrl
+#nsRenewalUrl
+#nsCaPolicyUrl
+#nsSslServerName
+
+# This is required for TSA certificates.
+# extendedKeyUsage = critical,timeStamping
+
+[ v3_req ]
+
+# Extensions to add to a certificate request
+
+basicConstraints = CA:FALSE
+keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+[ v3_ca ]
+
+
+# Extensions for a typical CA
+
+
+# PKIX recommendation.
+
+subjectKeyIdentifier=hash
+
+authorityKeyIdentifier=keyid:always,issuer
+
+basicConstraints = critical,CA:true
+
+# Key usage: this is typical for a CA certificate. However since it will
+# prevent it being used as an test self-signed certificate it is best
+# left out by default.
+# keyUsage = cRLSign, keyCertSign
+
+# Some might want this also
+# nsCertType = sslCA, emailCA
+
+# Include email address in subject alt name: another PKIX recommendation
+# subjectAltName=email:copy
+# Copy issuer details
+# issuerAltName=issuer:copy
+
+# DER hex encoding of an extension: beware experts only!
+# obj=DER:02:03
+# Where 'obj' is a standard or added object
+# You can even override a supported extension:
+# basicConstraints= critical, DER:30:03:01:01:FF
+
+[ crl_ext ]
+
+# CRL extensions.
+# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
+
+# issuerAltName=issuer:copy
+authorityKeyIdentifier=keyid:always
+
+[ proxy_cert_ext ]
+# These extensions should be added when creating a proxy certificate
+
+# This goes against PKIX guidelines but some CAs do it and some software
+# requires this to avoid interpreting an end user certificate as a CA.
+
+basicConstraints=CA:FALSE
+
+# Here are some examples of the usage of nsCertType. If it is omitted
+# the certificate can be used for anything *except* object signing.
+
+# This is OK for an SSL server.
+# nsCertType			= server
+
+# For an object signing certificate this would be used.
+# nsCertType = objsign
+
+# For normal client use this is typical
+# nsCertType = client, email
+
+# and for everything including object signing:
+# nsCertType = client, email, objsign
+
+# This is typical in keyUsage for a client certificate.
+# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+# This will be displayed in Netscape's comment listbox.
+nsComment			= "OpenSSL Generated Certificate"
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+
+# This stuff is for subjectAltName and issuerAltname.
+# Import the email address.
+# subjectAltName=email:copy
+# An alternative to produce certificates that aren't
+# deprecated according to PKIX.
+# subjectAltName=email:move
+
+# Copy subject details
+# issuerAltName=issuer:copy
+
+#nsCaRevocationUrl		= http://www.domain.dom/ca-crl.pem
+#nsBaseUrl
+#nsRevocationUrl
+#nsRenewalUrl
+#nsCaPolicyUrl
+#nsSslServerName
+
+# This really needs to be in place for it to be a proxy certificate.
+proxyCertInfo=critical,language:id-ppl-anyLanguage,pathlen:3,policy:foo
+
+####################################################################
+[ tsa ]
+
+default_tsa = tsa_config1	# the default TSA section
+
+[ tsa_config1 ]
+
+# These are used by the TSA reply generation only.
+dir		= sys\$disk:[.demoCA		# TSA root directory
+serial		= $dir]tsaserial.	# The current serial number (mandatory)
+crypto_device	= builtin		# OpenSSL engine to use for signing
+signer_cert	= $dir/tsacert.pem 	# The TSA signing certificate
+					# (optional)
+certs		= $dir.cacert.pem]	# Certificate chain to include in reply
+					# (optional)
+signer_key	= $dir/private/tsakey.pem # The TSA private key (optional)
+signer_digest  = sha256			# Signing digest to use. (Optional)
+default_policy	= tsa_policy1		# Policy if request did not specify it
+					# (optional)
+other_policies	= tsa_policy2, tsa_policy3	# acceptable policies (optional)
+digests     = sha1, sha256, sha384, sha512  # Acceptable message digests (mandatory)
+accuracy	= secs:1, millisecs:500, microsecs:100	# (optional)
+clock_precision_digits  = 0	# number of digits after dot. (optional)
+ordering		= yes	# Is ordering defined for timestamps?
+				# (optional, default: no)
+tsa_name		= yes	# Must the TSA name be included in the reply?
+				# (optional, default: no)
+ess_cert_id_chain	= no	# Must the ESS cert id chain be included?
+				# (optional, default: no)
+ess_cert_id_alg		= sha1	# algorithm to compute certificate
+				# identifier (optional, default: sha1)
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/openssl.c b/trunk/3rdparty/openssl-1.1-fit/apps/openssl.c
new file mode 100644
index 000000000..a872e2c5e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/openssl.c
@@ -0,0 +1,826 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <internal/cryptlib.h>
+#include <stdio.h>
+#include <string.h>
+#include <stdlib.h>
+#include <openssl/bio.h>
+#include <openssl/crypto.h>
+#include <openssl/lhash.h>
+#include <openssl/conf.h>
+#include <openssl/x509.h>
+#include <openssl/pem.h>
+#include <openssl/ssl.h>
+#ifndef OPENSSL_NO_ENGINE
+# include <openssl/engine.h>
+#endif
+#include <openssl/err.h>
+#include "s_apps.h"
+/* Needed to get the other O_xxx flags. */
+#ifdef OPENSSL_SYS_VMS
+# include <unixio.h>
+#endif
+#include "apps.h"
+#define INCLUDE_FUNCTION_TABLE
+#include "progs.h"
+
+/* Structure to hold the number of columns to be displayed and the
+ * field width used to display them.
+ */
+typedef struct {
+    int columns;
+    int width;
+} DISPLAY_COLUMNS;
+
+/* Special sentinel to exit the program. */
+#define EXIT_THE_PROGRAM (-1)
+
+/*
+ * The LHASH callbacks ("hash" & "cmp") have been replaced by functions with
+ * the base prototypes (we cast each variable inside the function to the
+ * required type of "FUNCTION*"). This removes the necessity for
+ * macro-generated wrapper functions.
+ */
+static LHASH_OF(FUNCTION) *prog_init(void);
+static int do_cmd(LHASH_OF(FUNCTION) *prog, int argc, char *argv[]);
+static void list_pkey(void);
+static void list_pkey_meth(void);
+static void list_type(FUNC_TYPE ft, int one);
+static void list_disabled(void);
+char *default_config_file = NULL;
+
+BIO *bio_in = NULL;
+BIO *bio_out = NULL;
+BIO *bio_err = NULL;
+
+static void calculate_columns(DISPLAY_COLUMNS *dc)
+{
+    FUNCTION *f;
+    int len, maxlen = 0;
+
+    for (f = functions; f->name != NULL; ++f)
+        if (f->type == FT_general || f->type == FT_md || f->type == FT_cipher)
+            if ((len = strlen(f->name)) > maxlen)
+                maxlen = len;
+
+    dc->width = maxlen + 2;
+    dc->columns = (80 - 1) / dc->width;
+}
+
+static int apps_startup(void)
+{
+#ifdef SIGPIPE
+    signal(SIGPIPE, SIG_IGN);
+#endif
+
+    /* Set non-default library initialisation settings */
+    if (!OPENSSL_init_ssl(OPENSSL_INIT_ENGINE_ALL_BUILTIN
+                          | OPENSSL_INIT_LOAD_CONFIG, NULL))
+        return 0;
+
+    setup_ui_method();
+
+    return 1;
+}
+
+static void apps_shutdown(void)
+{
+    destroy_ui_method();
+    destroy_prefix_method();
+}
+
+static char *make_config_name(void)
+{
+    const char *t;
+    size_t len;
+    char *p;
+
+    if ((t = getenv("OPENSSL_CONF")) != NULL)
+        return OPENSSL_strdup(t);
+
+    t = X509_get_default_cert_area();
+    len = strlen(t) + 1 + strlen(OPENSSL_CONF) + 1;
+    p = app_malloc(len, "config filename buffer");
+    strcpy(p, t);
+#ifndef OPENSSL_SYS_VMS
+    strcat(p, "/");
+#endif
+    strcat(p, OPENSSL_CONF);
+
+    return p;
+}
+
+int main(int argc, char *argv[])
+{
+    FUNCTION f, *fp;
+    LHASH_OF(FUNCTION) *prog = NULL;
+    char **copied_argv = NULL;
+    char *p, *pname;
+    char buf[1024];
+    const char *prompt;
+    ARGS arg;
+    int first, n, i, ret = 0;
+
+    arg.argv = NULL;
+    arg.size = 0;
+
+    /* Set up some of the environment. */
+    default_config_file = make_config_name();
+    bio_in = dup_bio_in(FORMAT_TEXT);
+    bio_out = dup_bio_out(FORMAT_TEXT);
+    bio_err = dup_bio_err(FORMAT_TEXT);
+
+#if defined(OPENSSL_SYS_VMS) && defined(__DECC)
+    copied_argv = argv = copy_argv(&argc, argv);
+#elif defined(_WIN32)
+    /*
+     * Replace argv[] with UTF-8 encoded strings.
+     */
+    win32_utf8argv(&argc, &argv);
+#endif
+
+    p = getenv("OPENSSL_DEBUG_MEMORY");
+    if (p != NULL && strcmp(p, "on") == 0)
+        CRYPTO_set_mem_debug(1);
+    CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ON);
+
+    if (getenv("OPENSSL_FIPS")) {
+        BIO_printf(bio_err, "FIPS mode not supported.\n");
+        return 1;
+    }
+
+    if (!apps_startup()) {
+        BIO_printf(bio_err,
+                   "FATAL: Startup failure (dev note: apps_startup() failed)\n");
+        ERR_print_errors(bio_err);
+        ret = 1;
+        goto end;
+    }
+
+    prog = prog_init();
+    pname = opt_progname(argv[0]);
+
+    /* first check the program name */
+    f.name = pname;
+    fp = lh_FUNCTION_retrieve(prog, &f);
+    if (fp != NULL) {
+        argv[0] = pname;
+        ret = fp->func(argc, argv);
+        goto end;
+    }
+
+    /* If there is stuff on the command line, run with that. */
+    if (argc != 1) {
+        argc--;
+        argv++;
+        ret = do_cmd(prog, argc, argv);
+        if (ret < 0)
+            ret = 0;
+        goto end;
+    }
+
+    /* ok, lets enter interactive mode */
+    for (;;) {
+        ret = 0;
+        /* Read a line, continue reading if line ends with \ */
+        for (p = buf, n = sizeof(buf), i = 0, first = 1; n > 0; first = 0) {
+            prompt = first ? "OpenSSL> " : "> ";
+            p[0] = '\0';
+#ifndef READLINE
+            fputs(prompt, stdout);
+            fflush(stdout);
+            if (!fgets(p, n, stdin))
+                goto end;
+            if (p[0] == '\0')
+                goto end;
+            i = strlen(p);
+            if (i <= 1)
+                break;
+            if (p[i - 2] != '\\')
+                break;
+            i -= 2;
+            p += i;
+            n -= i;
+#else
+            {
+                extern char *readline(const char *);
+                extern void add_history(const char *cp);
+                char *text;
+
+                text = readline(prompt);
+                if (text == NULL)
+                    goto end;
+                i = strlen(text);
+                if (i == 0 || i > n)
+                    break;
+                if (text[i - 1] != '\\') {
+                    p += strlen(strcpy(p, text));
+                    free(text);
+                    add_history(buf);
+                    break;
+                }
+
+                text[i - 1] = '\0';
+                p += strlen(strcpy(p, text));
+                free(text);
+                n -= i;
+            }
+#endif
+        }
+
+        if (!chopup_args(&arg, buf)) {
+            BIO_printf(bio_err, "Can't parse (no memory?)\n");
+            break;
+        }
+
+        ret = do_cmd(prog, arg.argc, arg.argv);
+        if (ret == EXIT_THE_PROGRAM) {
+            ret = 0;
+            goto end;
+        }
+        if (ret != 0)
+            BIO_printf(bio_err, "error in %s\n", arg.argv[0]);
+        (void)BIO_flush(bio_out);
+        (void)BIO_flush(bio_err);
+    }
+    ret = 1;
+ end:
+    OPENSSL_free(copied_argv);
+    OPENSSL_free(default_config_file);
+    lh_FUNCTION_free(prog);
+    OPENSSL_free(arg.argv);
+    app_RAND_write();
+
+    BIO_free(bio_in);
+    BIO_free_all(bio_out);
+    apps_shutdown();
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+    if (CRYPTO_mem_leaks(bio_err) <= 0)
+        ret = 1;
+#endif
+    BIO_free(bio_err);
+    EXIT(ret);
+}
+
+static void list_cipher_fn(const EVP_CIPHER *c,
+                           const char *from, const char *to, void *arg)
+{
+    if (c != NULL) {
+        BIO_printf(arg, "%s\n", EVP_CIPHER_name(c));
+    } else {
+        if (from == NULL)
+            from = "<undefined>";
+        if (to == NULL)
+            to = "<undefined>";
+        BIO_printf(arg, "%s => %s\n", from, to);
+    }
+}
+
+static void list_md_fn(const EVP_MD *m,
+                       const char *from, const char *to, void *arg)
+{
+    if (m != NULL) {
+        BIO_printf(arg, "%s\n", EVP_MD_name(m));
+    } else {
+        if (from == NULL)
+            from = "<undefined>";
+        if (to == NULL)
+            to = "<undefined>";
+        BIO_printf((BIO *)arg, "%s => %s\n", from, to);
+    }
+}
+
+static void list_missing_help(void)
+{
+    const FUNCTION *fp;
+    const OPTIONS *o;
+
+    for (fp = functions; fp->name != NULL; fp++) {
+        if ((o = fp->help) != NULL) {
+            /* If there is help, list what flags are not documented. */
+            for ( ; o->name != NULL; o++) {
+                if (o->helpstr == NULL)
+                    BIO_printf(bio_out, "%s %s\n", fp->name, o->name);
+            }
+        } else if (fp->func != dgst_main) {
+            /* If not aliased to the dgst command, */
+            BIO_printf(bio_out, "%s *\n", fp->name);
+        }
+    }
+}
+
+static void list_options_for_command(const char *command)
+{
+    const FUNCTION *fp;
+    const OPTIONS *o;
+
+    for (fp = functions; fp->name != NULL; fp++)
+        if (strcmp(fp->name, command) == 0)
+            break;
+    if (fp->name == NULL) {
+        BIO_printf(bio_err, "Invalid command '%s'; type \"help\" for a list.\n",
+                command);
+        return;
+    }
+
+    if ((o = fp->help) == NULL)
+        return;
+
+    for ( ; o->name != NULL; o++) {
+        if (o->name == OPT_HELP_STR
+                || o->name == OPT_MORE_STR
+                || o->name[0] == '\0')
+            continue;
+        BIO_printf(bio_out, "%s %c\n", o->name, o->valtype);
+    }
+}
+
+
+/* Unified enum for help and list commands. */
+typedef enum HELPLIST_CHOICE {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP, OPT_ONE,
+    OPT_COMMANDS, OPT_DIGEST_COMMANDS, OPT_OPTIONS,
+    OPT_DIGEST_ALGORITHMS, OPT_CIPHER_COMMANDS, OPT_CIPHER_ALGORITHMS,
+    OPT_PK_ALGORITHMS, OPT_PK_METHOD, OPT_DISABLED, OPT_MISSING_HELP
+} HELPLIST_CHOICE;
+
+const OPTIONS list_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"1", OPT_ONE, '-', "List in one column"},
+    {"commands", OPT_COMMANDS, '-', "List of standard commands"},
+    {"digest-commands", OPT_DIGEST_COMMANDS, '-',
+     "List of message digest commands"},
+    {"digest-algorithms", OPT_DIGEST_ALGORITHMS, '-',
+     "List of message digest algorithms"},
+    {"cipher-commands", OPT_CIPHER_COMMANDS, '-', "List of cipher commands"},
+    {"cipher-algorithms", OPT_CIPHER_ALGORITHMS, '-',
+     "List of cipher algorithms"},
+    {"public-key-algorithms", OPT_PK_ALGORITHMS, '-',
+     "List of public key algorithms"},
+    {"public-key-methods", OPT_PK_METHOD, '-',
+     "List of public key methods"},
+    {"disabled", OPT_DISABLED, '-',
+     "List of disabled features"},
+    {"missing-help", OPT_MISSING_HELP, '-',
+     "List missing detailed help strings"},
+    {"options", OPT_OPTIONS, 's',
+     "List options for specified command"},
+    {NULL}
+};
+
+int list_main(int argc, char **argv)
+{
+    char *prog;
+    HELPLIST_CHOICE o;
+    int one = 0, done = 0;
+
+    prog = opt_init(argc, argv, list_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:  /* Never hit, but suppresses warning */
+        case OPT_ERR:
+opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            return 1;
+        case OPT_HELP:
+            opt_help(list_options);
+            break;
+        case OPT_ONE:
+            one = 1;
+            break;
+        case OPT_COMMANDS:
+            list_type(FT_general, one);
+            break;
+        case OPT_DIGEST_COMMANDS:
+            list_type(FT_md, one);
+            break;
+        case OPT_DIGEST_ALGORITHMS:
+            EVP_MD_do_all_sorted(list_md_fn, bio_out);
+            break;
+        case OPT_CIPHER_COMMANDS:
+            list_type(FT_cipher, one);
+            break;
+        case OPT_CIPHER_ALGORITHMS:
+            EVP_CIPHER_do_all_sorted(list_cipher_fn, bio_out);
+            break;
+        case OPT_PK_ALGORITHMS:
+            list_pkey();
+            break;
+        case OPT_PK_METHOD:
+            list_pkey_meth();
+            break;
+        case OPT_DISABLED:
+            list_disabled();
+            break;
+        case OPT_MISSING_HELP:
+            list_missing_help();
+            break;
+        case OPT_OPTIONS:
+            list_options_for_command(opt_arg());
+            break;
+        }
+        done = 1;
+    }
+    if (opt_num_rest() != 0) {
+        BIO_printf(bio_err, "Extra arguments given.\n");
+        goto opthelp;
+    }
+
+    if (!done)
+        goto opthelp;
+
+    return 0;
+}
+
+typedef enum HELP_CHOICE {
+    OPT_hERR = -1, OPT_hEOF = 0, OPT_hHELP
+} HELP_CHOICE;
+
+const OPTIONS help_options[] = {
+    {OPT_HELP_STR, 1, '-', "Usage: help [options]\n"},
+    {OPT_HELP_STR, 1, '-', "       help [command]\n"},
+    {"help", OPT_hHELP, '-', "Display this summary"},
+    {NULL}
+};
+
+
+int help_main(int argc, char **argv)
+{
+    FUNCTION *fp;
+    int i, nl;
+    FUNC_TYPE tp;
+    char *prog;
+    HELP_CHOICE o;
+    DISPLAY_COLUMNS dc;
+
+    prog = opt_init(argc, argv, help_options);
+    while ((o = opt_next()) != OPT_hEOF) {
+        switch (o) {
+        case OPT_hERR:
+        case OPT_hEOF:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            return 1;
+        case OPT_hHELP:
+            opt_help(help_options);
+            return 0;
+        }
+    }
+
+    if (opt_num_rest() == 1) {
+        char *new_argv[3];
+
+        new_argv[0] = opt_rest()[0];
+        new_argv[1] = "--help";
+        new_argv[2] = NULL;
+        return do_cmd(prog_init(), 2, new_argv);
+    }
+    if (opt_num_rest() != 0) {
+        BIO_printf(bio_err, "Usage: %s\n", prog);
+        return 1;
+    }
+
+    calculate_columns(&dc);
+    BIO_printf(bio_err, "Standard commands");
+    i = 0;
+    tp = FT_none;
+    for (fp = functions; fp->name != NULL; fp++) {
+        nl = 0;
+        if (i++ % dc.columns == 0) {
+            BIO_printf(bio_err, "\n");
+            nl = 1;
+        }
+        if (fp->type != tp) {
+            tp = fp->type;
+            if (!nl)
+                BIO_printf(bio_err, "\n");
+            if (tp == FT_md) {
+                i = 1;
+                BIO_printf(bio_err,
+                           "\nMessage Digest commands (see the `dgst' command for more details)\n");
+            } else if (tp == FT_cipher) {
+                i = 1;
+                BIO_printf(bio_err,
+                           "\nCipher commands (see the `enc' command for more details)\n");
+            }
+        }
+        BIO_printf(bio_err, "%-*s", dc.width, fp->name);
+    }
+    BIO_printf(bio_err, "\n\n");
+    return 0;
+}
+
+static void list_type(FUNC_TYPE ft, int one)
+{
+    FUNCTION *fp;
+    int i = 0;
+    DISPLAY_COLUMNS dc = {0};
+
+    if (!one)
+        calculate_columns(&dc);
+
+    for (fp = functions; fp->name != NULL; fp++) {
+        if (fp->type != ft)
+            continue;
+        if (one) {
+            BIO_printf(bio_out, "%s\n", fp->name);
+        } else {
+            if (i % dc.columns == 0 && i > 0)
+                BIO_printf(bio_out, "\n");
+            BIO_printf(bio_out, "%-*s", dc.width, fp->name);
+            i++;
+        }
+    }
+    if (!one)
+        BIO_printf(bio_out, "\n\n");
+}
+
+static int do_cmd(LHASH_OF(FUNCTION) *prog, int argc, char *argv[])
+{
+    FUNCTION f, *fp;
+
+    if (argc <= 0 || argv[0] == NULL)
+        return 0;
+    f.name = argv[0];
+    fp = lh_FUNCTION_retrieve(prog, &f);
+    if (fp == NULL) {
+        if (EVP_get_digestbyname(argv[0])) {
+            f.type = FT_md;
+            f.func = dgst_main;
+            fp = &f;
+        } else if (EVP_get_cipherbyname(argv[0])) {
+            f.type = FT_cipher;
+            f.func = enc_main;
+            fp = &f;
+        }
+    }
+    if (fp != NULL) {
+        return fp->func(argc, argv);
+    }
+    if ((strncmp(argv[0], "no-", 3)) == 0) {
+        /*
+         * User is asking if foo is unsupported, by trying to "run" the
+         * no-foo command.  Strange.
+         */
+        f.name = argv[0] + 3;
+        if (lh_FUNCTION_retrieve(prog, &f) == NULL) {
+            BIO_printf(bio_out, "%s\n", argv[0]);
+            return 0;
+        }
+        BIO_printf(bio_out, "%s\n", argv[0] + 3);
+        return 1;
+    }
+    if (strcmp(argv[0], "quit") == 0 || strcmp(argv[0], "q") == 0 ||
+        strcmp(argv[0], "exit") == 0 || strcmp(argv[0], "bye") == 0)
+        /* Special value to mean "exit the program. */
+        return EXIT_THE_PROGRAM;
+
+    BIO_printf(bio_err, "Invalid command '%s'; type \"help\" for a list.\n",
+               argv[0]);
+    return 1;
+}
+
+static void list_pkey(void)
+{
+    int i;
+
+    for (i = 0; i < EVP_PKEY_asn1_get_count(); i++) {
+        const EVP_PKEY_ASN1_METHOD *ameth;
+        int pkey_id, pkey_base_id, pkey_flags;
+        const char *pinfo, *pem_str;
+        ameth = EVP_PKEY_asn1_get0(i);
+        EVP_PKEY_asn1_get0_info(&pkey_id, &pkey_base_id, &pkey_flags,
+                                &pinfo, &pem_str, ameth);
+        if (pkey_flags & ASN1_PKEY_ALIAS) {
+            BIO_printf(bio_out, "Name: %s\n", OBJ_nid2ln(pkey_id));
+            BIO_printf(bio_out, "\tAlias for: %s\n",
+                       OBJ_nid2ln(pkey_base_id));
+        } else {
+            BIO_printf(bio_out, "Name: %s\n", pinfo);
+            BIO_printf(bio_out, "\tType: %s Algorithm\n",
+                       pkey_flags & ASN1_PKEY_DYNAMIC ?
+                       "External" : "Builtin");
+            BIO_printf(bio_out, "\tOID: %s\n", OBJ_nid2ln(pkey_id));
+            if (pem_str == NULL)
+                pem_str = "(none)";
+            BIO_printf(bio_out, "\tPEM string: %s\n", pem_str);
+        }
+
+    }
+}
+
+static void list_pkey_meth(void)
+{
+    size_t i;
+    size_t meth_count = EVP_PKEY_meth_get_count();
+
+    for (i = 0; i < meth_count; i++) {
+        const EVP_PKEY_METHOD *pmeth = EVP_PKEY_meth_get0(i);
+        int pkey_id, pkey_flags;
+
+        EVP_PKEY_meth_get0_info(&pkey_id, &pkey_flags, pmeth);
+        BIO_printf(bio_out, "%s\n", OBJ_nid2ln(pkey_id));
+        BIO_printf(bio_out, "\tType: %s Algorithm\n",
+                   pkey_flags & ASN1_PKEY_DYNAMIC ?  "External" : "Builtin");
+    }
+}
+
+static int function_cmp(const FUNCTION * a, const FUNCTION * b)
+{
+    return strncmp(a->name, b->name, 8);
+}
+
+static unsigned long function_hash(const FUNCTION * a)
+{
+    return OPENSSL_LH_strhash(a->name);
+}
+
+static int SortFnByName(const void *_f1, const void *_f2)
+{
+    const FUNCTION *f1 = _f1;
+    const FUNCTION *f2 = _f2;
+
+    if (f1->type != f2->type)
+        return f1->type - f2->type;
+    return strcmp(f1->name, f2->name);
+}
+
+static void list_disabled(void)
+{
+    BIO_puts(bio_out, "Disabled algorithms:\n");
+#ifdef OPENSSL_NO_ARIA
+    BIO_puts(bio_out, "ARIA\n");
+#endif
+#ifdef OPENSSL_NO_BF
+    BIO_puts(bio_out, "BF\n");
+#endif
+#ifdef OPENSSL_NO_BLAKE2
+    BIO_puts(bio_out, "BLAKE2\n");
+#endif
+#ifdef OPENSSL_NO_CAMELLIA
+    BIO_puts(bio_out, "CAMELLIA\n");
+#endif
+#ifdef OPENSSL_NO_CAST
+    BIO_puts(bio_out, "CAST\n");
+#endif
+#ifdef OPENSSL_NO_CMAC
+    BIO_puts(bio_out, "CMAC\n");
+#endif
+#ifdef OPENSSL_NO_CMS
+    BIO_puts(bio_out, "CMS\n");
+#endif
+#ifdef OPENSSL_NO_COMP
+    BIO_puts(bio_out, "COMP\n");
+#endif
+#ifdef OPENSSL_NO_DES
+    BIO_puts(bio_out, "DES\n");
+#endif
+#ifdef OPENSSL_NO_DGRAM
+    BIO_puts(bio_out, "DGRAM\n");
+#endif
+#ifdef OPENSSL_NO_DH
+    BIO_puts(bio_out, "DH\n");
+#endif
+#ifdef OPENSSL_NO_DSA
+    BIO_puts(bio_out, "DSA\n");
+#endif
+#if defined(OPENSSL_NO_DTLS)
+    BIO_puts(bio_out, "DTLS\n");
+#endif
+#if defined(OPENSSL_NO_DTLS1)
+    BIO_puts(bio_out, "DTLS1\n");
+#endif
+#if defined(OPENSSL_NO_DTLS1_2)
+    BIO_puts(bio_out, "DTLS1_2\n");
+#endif
+#ifdef OPENSSL_NO_EC
+    BIO_puts(bio_out, "EC\n");
+#endif
+#ifdef OPENSSL_NO_EC2M
+    BIO_puts(bio_out, "EC2M\n");
+#endif
+#ifdef OPENSSL_NO_ENGINE
+    BIO_puts(bio_out, "ENGINE\n");
+#endif
+#ifdef OPENSSL_NO_GOST
+    BIO_puts(bio_out, "GOST\n");
+#endif
+#ifdef OPENSSL_NO_HEARTBEATS
+    BIO_puts(bio_out, "HEARTBEATS\n");
+#endif
+#ifdef OPENSSL_NO_IDEA
+    BIO_puts(bio_out, "IDEA\n");
+#endif
+#ifdef OPENSSL_NO_MD2
+    BIO_puts(bio_out, "MD2\n");
+#endif
+#ifdef OPENSSL_NO_MD4
+    BIO_puts(bio_out, "MD4\n");
+#endif
+#ifdef OPENSSL_NO_MD5
+    BIO_puts(bio_out, "MD5\n");
+#endif
+#ifdef OPENSSL_NO_MDC2
+    BIO_puts(bio_out, "MDC2\n");
+#endif
+#ifdef OPENSSL_NO_OCB
+    BIO_puts(bio_out, "OCB\n");
+#endif
+#ifdef OPENSSL_NO_OCSP
+    BIO_puts(bio_out, "OCSP\n");
+#endif
+#ifdef OPENSSL_NO_PSK
+    BIO_puts(bio_out, "PSK\n");
+#endif
+#ifdef OPENSSL_NO_RC2
+    BIO_puts(bio_out, "RC2\n");
+#endif
+#ifdef OPENSSL_NO_RC4
+    BIO_puts(bio_out, "RC4\n");
+#endif
+#ifdef OPENSSL_NO_RC5
+    BIO_puts(bio_out, "RC5\n");
+#endif
+#ifdef OPENSSL_NO_RMD160
+    BIO_puts(bio_out, "RMD160\n");
+#endif
+#ifdef OPENSSL_NO_RSA
+    BIO_puts(bio_out, "RSA\n");
+#endif
+#ifdef OPENSSL_NO_SCRYPT
+    BIO_puts(bio_out, "SCRYPT\n");
+#endif
+#ifdef OPENSSL_NO_SCTP
+    BIO_puts(bio_out, "SCTP\n");
+#endif
+#ifdef OPENSSL_NO_SEED
+    BIO_puts(bio_out, "SEED\n");
+#endif
+#ifdef OPENSSL_NO_SM2
+    BIO_puts(bio_out, "SM2\n");
+#endif
+#ifdef OPENSSL_NO_SM3
+    BIO_puts(bio_out, "SM3\n");
+#endif
+#ifdef OPENSSL_NO_SM4
+    BIO_puts(bio_out, "SM4\n");
+#endif
+#ifdef OPENSSL_NO_SOCK
+    BIO_puts(bio_out, "SOCK\n");
+#endif
+#ifdef OPENSSL_NO_SRP
+    BIO_puts(bio_out, "SRP\n");
+#endif
+#ifdef OPENSSL_NO_SRTP
+    BIO_puts(bio_out, "SRTP\n");
+#endif
+#ifdef OPENSSL_NO_SSL3
+    BIO_puts(bio_out, "SSL3\n");
+#endif
+#ifdef OPENSSL_NO_TLS1
+    BIO_puts(bio_out, "TLS1\n");
+#endif
+#ifdef OPENSSL_NO_TLS1_1
+    BIO_puts(bio_out, "TLS1_1\n");
+#endif
+#ifdef OPENSSL_NO_TLS1_2
+    BIO_puts(bio_out, "TLS1_2\n");
+#endif
+#ifdef OPENSSL_NO_WHIRLPOOL
+    BIO_puts(bio_out, "WHIRLPOOL\n");
+#endif
+#ifndef ZLIB
+    BIO_puts(bio_out, "ZLIB\n");
+#endif
+}
+
+static LHASH_OF(FUNCTION) *prog_init(void)
+{
+    static LHASH_OF(FUNCTION) *ret = NULL;
+    static int prog_inited = 0;
+    FUNCTION *f;
+    size_t i;
+
+    if (prog_inited)
+        return ret;
+
+    prog_inited = 1;
+
+    /* Sort alphabetically within category. For nicer help displays. */
+    for (i = 0, f = functions; f->name != NULL; ++f, ++i)
+        ;
+    qsort(functions, i, sizeof(*functions), SortFnByName);
+
+    if ((ret = lh_FUNCTION_new(function_hash, function_cmp)) == NULL)
+        return NULL;
+
+    for (f = functions; f->name != NULL; f++)
+        (void)lh_FUNCTION_insert(ret, f);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/openssl.cnf b/trunk/3rdparty/openssl-1.1-fit/apps/openssl.cnf
new file mode 100644
index 000000000..4acca4b04
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/openssl.cnf
@@ -0,0 +1,350 @@
+#
+# OpenSSL example configuration file.
+# This is mostly being used for generation of certificate requests.
+#
+
+# Note that you can include other files from the main configuration
+# file using the .include directive.
+#.include filename
+
+# This definition stops the following lines choking if HOME isn't
+# defined.
+HOME			= .
+
+# Extra OBJECT IDENTIFIER info:
+#oid_file		= $ENV::HOME/.oid
+oid_section		= new_oids
+
+# To use this configuration file with the "-extfile" option of the
+# "openssl x509" utility, name here the section containing the
+# X.509v3 extensions to use:
+# extensions		=
+# (Alternatively, use a configuration file that has only
+# X.509v3 extensions in its main [= default] section.)
+
+[ new_oids ]
+
+# We can add new OIDs in here for use by 'ca', 'req' and 'ts'.
+# Add a simple OID like this:
+# testoid1=1.2.3.4
+# Or use config file substitution like this:
+# testoid2=${testoid1}.5.6
+
+# Policies used by the TSA examples.
+tsa_policy1 = 1.2.3.4.1
+tsa_policy2 = 1.2.3.4.5.6
+tsa_policy3 = 1.2.3.4.5.7
+
+####################################################################
+[ ca ]
+default_ca	= CA_default		# The default ca section
+
+####################################################################
+[ CA_default ]
+
+dir		= ./demoCA		# Where everything is kept
+certs		= $dir/certs		# Where the issued certs are kept
+crl_dir		= $dir/crl		# Where the issued crl are kept
+database	= $dir/index.txt	# database index file.
+#unique_subject	= no			# Set to 'no' to allow creation of
+					# several certs with same subject.
+new_certs_dir	= $dir/newcerts		# default place for new certs.
+
+certificate	= $dir/cacert.pem 	# The CA certificate
+serial		= $dir/serial 		# The current serial number
+crlnumber	= $dir/crlnumber	# the current crl number
+					# must be commented out to leave a V1 CRL
+crl		= $dir/crl.pem 		# The current CRL
+private_key	= $dir/private/cakey.pem# The private key
+
+x509_extensions	= usr_cert		# The extensions to add to the cert
+
+# Comment out the following two lines for the "traditional"
+# (and highly broken) format.
+name_opt 	= ca_default		# Subject Name options
+cert_opt 	= ca_default		# Certificate field options
+
+# Extension copying option: use with caution.
+# copy_extensions = copy
+
+# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
+# so this is commented out by default to leave a V1 CRL.
+# crlnumber must also be commented out to leave a V1 CRL.
+# crl_extensions	= crl_ext
+
+default_days	= 365			# how long to certify for
+default_crl_days= 30			# how long before next CRL
+default_md	= default		# use public key default MD
+preserve	= no			# keep passed DN ordering
+
+# A few difference way of specifying how similar the request should look
+# For type CA, the listed attributes must be the same, and the optional
+# and supplied fields are just that :-)
+policy		= policy_match
+
+# For the CA policy
+[ policy_match ]
+countryName		= match
+stateOrProvinceName	= match
+organizationName	= match
+organizationalUnitName	= optional
+commonName		= supplied
+emailAddress		= optional
+
+# For the 'anything' policy
+# At this point in time, you must list all acceptable 'object'
+# types.
+[ policy_anything ]
+countryName		= optional
+stateOrProvinceName	= optional
+localityName		= optional
+organizationName	= optional
+organizationalUnitName	= optional
+commonName		= supplied
+emailAddress		= optional
+
+####################################################################
+[ req ]
+default_bits		= 2048
+default_keyfile 	= privkey.pem
+distinguished_name	= req_distinguished_name
+attributes		= req_attributes
+x509_extensions	= v3_ca	# The extensions to add to the self signed cert
+
+# Passwords for private keys if not present they will be prompted for
+# input_password = secret
+# output_password = secret
+
+# This sets a mask for permitted string types. There are several options.
+# default: PrintableString, T61String, BMPString.
+# pkix	 : PrintableString, BMPString (PKIX recommendation before 2004)
+# utf8only: only UTF8Strings (PKIX recommendation after 2004).
+# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
+# MASK:XXXX a literal mask value.
+# WARNING: ancient versions of Netscape crash on BMPStrings or UTF8Strings.
+string_mask = utf8only
+
+# req_extensions = v3_req # The extensions to add to a certificate request
+
+[ req_distinguished_name ]
+countryName			= Country Name (2 letter code)
+countryName_default		= AU
+countryName_min			= 2
+countryName_max			= 2
+
+stateOrProvinceName		= State or Province Name (full name)
+stateOrProvinceName_default	= Some-State
+
+localityName			= Locality Name (eg, city)
+
+0.organizationName		= Organization Name (eg, company)
+0.organizationName_default	= Internet Widgits Pty Ltd
+
+# we can do this but it is not needed normally :-)
+#1.organizationName		= Second Organization Name (eg, company)
+#1.organizationName_default	= World Wide Web Pty Ltd
+
+organizationalUnitName		= Organizational Unit Name (eg, section)
+#organizationalUnitName_default	=
+
+commonName			= Common Name (e.g. server FQDN or YOUR name)
+commonName_max			= 64
+
+emailAddress			= Email Address
+emailAddress_max		= 64
+
+# SET-ex3			= SET extension number 3
+
+[ req_attributes ]
+challengePassword		= A challenge password
+challengePassword_min		= 4
+challengePassword_max		= 20
+
+unstructuredName		= An optional company name
+
+[ usr_cert ]
+
+# These extensions are added when 'ca' signs a request.
+
+# This goes against PKIX guidelines but some CAs do it and some software
+# requires this to avoid interpreting an end user certificate as a CA.
+
+basicConstraints=CA:FALSE
+
+# Here are some examples of the usage of nsCertType. If it is omitted
+# the certificate can be used for anything *except* object signing.
+
+# This is OK for an SSL server.
+# nsCertType			= server
+
+# For an object signing certificate this would be used.
+# nsCertType = objsign
+
+# For normal client use this is typical
+# nsCertType = client, email
+
+# and for everything including object signing:
+# nsCertType = client, email, objsign
+
+# This is typical in keyUsage for a client certificate.
+# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+# This will be displayed in Netscape's comment listbox.
+nsComment			= "OpenSSL Generated Certificate"
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+
+# This stuff is for subjectAltName and issuerAltname.
+# Import the email address.
+# subjectAltName=email:copy
+# An alternative to produce certificates that aren't
+# deprecated according to PKIX.
+# subjectAltName=email:move
+
+# Copy subject details
+# issuerAltName=issuer:copy
+
+#nsCaRevocationUrl		= http://www.domain.dom/ca-crl.pem
+#nsBaseUrl
+#nsRevocationUrl
+#nsRenewalUrl
+#nsCaPolicyUrl
+#nsSslServerName
+
+# This is required for TSA certificates.
+# extendedKeyUsage = critical,timeStamping
+
+[ v3_req ]
+
+# Extensions to add to a certificate request
+
+basicConstraints = CA:FALSE
+keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+[ v3_ca ]
+
+
+# Extensions for a typical CA
+
+
+# PKIX recommendation.
+
+subjectKeyIdentifier=hash
+
+authorityKeyIdentifier=keyid:always,issuer
+
+basicConstraints = critical,CA:true
+
+# Key usage: this is typical for a CA certificate. However since it will
+# prevent it being used as an test self-signed certificate it is best
+# left out by default.
+# keyUsage = cRLSign, keyCertSign
+
+# Some might want this also
+# nsCertType = sslCA, emailCA
+
+# Include email address in subject alt name: another PKIX recommendation
+# subjectAltName=email:copy
+# Copy issuer details
+# issuerAltName=issuer:copy
+
+# DER hex encoding of an extension: beware experts only!
+# obj=DER:02:03
+# Where 'obj' is a standard or added object
+# You can even override a supported extension:
+# basicConstraints= critical, DER:30:03:01:01:FF
+
+[ crl_ext ]
+
+# CRL extensions.
+# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
+
+# issuerAltName=issuer:copy
+authorityKeyIdentifier=keyid:always
+
+[ proxy_cert_ext ]
+# These extensions should be added when creating a proxy certificate
+
+# This goes against PKIX guidelines but some CAs do it and some software
+# requires this to avoid interpreting an end user certificate as a CA.
+
+basicConstraints=CA:FALSE
+
+# Here are some examples of the usage of nsCertType. If it is omitted
+# the certificate can be used for anything *except* object signing.
+
+# This is OK for an SSL server.
+# nsCertType			= server
+
+# For an object signing certificate this would be used.
+# nsCertType = objsign
+
+# For normal client use this is typical
+# nsCertType = client, email
+
+# and for everything including object signing:
+# nsCertType = client, email, objsign
+
+# This is typical in keyUsage for a client certificate.
+# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+# This will be displayed in Netscape's comment listbox.
+nsComment			= "OpenSSL Generated Certificate"
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+
+# This stuff is for subjectAltName and issuerAltname.
+# Import the email address.
+# subjectAltName=email:copy
+# An alternative to produce certificates that aren't
+# deprecated according to PKIX.
+# subjectAltName=email:move
+
+# Copy subject details
+# issuerAltName=issuer:copy
+
+#nsCaRevocationUrl		= http://www.domain.dom/ca-crl.pem
+#nsBaseUrl
+#nsRevocationUrl
+#nsRenewalUrl
+#nsCaPolicyUrl
+#nsSslServerName
+
+# This really needs to be in place for it to be a proxy certificate.
+proxyCertInfo=critical,language:id-ppl-anyLanguage,pathlen:3,policy:foo
+
+####################################################################
+[ tsa ]
+
+default_tsa = tsa_config1	# the default TSA section
+
+[ tsa_config1 ]
+
+# These are used by the TSA reply generation only.
+dir		= ./demoCA		# TSA root directory
+serial		= $dir/tsaserial	# The current serial number (mandatory)
+crypto_device	= builtin		# OpenSSL engine to use for signing
+signer_cert	= $dir/tsacert.pem 	# The TSA signing certificate
+					# (optional)
+certs		= $dir/cacert.pem	# Certificate chain to include in reply
+					# (optional)
+signer_key	= $dir/private/tsakey.pem # The TSA private key (optional)
+signer_digest  = sha256			# Signing digest to use. (Optional)
+default_policy	= tsa_policy1		# Policy if request did not specify it
+					# (optional)
+other_policies	= tsa_policy2, tsa_policy3	# acceptable policies (optional)
+digests     = sha1, sha256, sha384, sha512  # Acceptable message digests (mandatory)
+accuracy	= secs:1, millisecs:500, microsecs:100	# (optional)
+clock_precision_digits  = 0	# number of digits after dot. (optional)
+ordering		= yes	# Is ordering defined for timestamps?
+				# (optional, default: no)
+tsa_name		= yes	# Must the TSA name be included in the reply?
+				# (optional, default: no)
+ess_cert_id_chain	= no	# Must the ESS cert id chain be included?
+				# (optional, default: no)
+ess_cert_id_alg		= sha1	# algorithm to compute certificate
+				# identifier (optional, default: sha1)
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/opt.c b/trunk/3rdparty/openssl-1.1-fit/apps/opt.c
new file mode 100644
index 000000000..666856535
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/opt.c
@@ -0,0 +1,898 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+#include "apps.h"
+#include <string.h>
+#if !defined(OPENSSL_SYS_MSDOS)
+# include OPENSSL_UNISTD
+#endif
+
+#include <stdlib.h>
+#include <errno.h>
+#include <ctype.h>
+#include <limits.h>
+#include <openssl/bio.h>
+#include <openssl/x509v3.h>
+
+#define MAX_OPT_HELP_WIDTH 30
+const char OPT_HELP_STR[] = "--";
+const char OPT_MORE_STR[] = "---";
+
+/* Our state */
+static char **argv;
+static int argc;
+static int opt_index;
+static char *arg;
+static char *flag;
+static char *dunno;
+static const OPTIONS *unknown;
+static const OPTIONS *opts;
+static char prog[40];
+
+/*
+ * Return the simple name of the program; removing various platform gunk.
+ */
+#if defined(OPENSSL_SYS_WIN32)
+char *opt_progname(const char *argv0)
+{
+    size_t i, n;
+    const char *p;
+    char *q;
+
+    /* find the last '/', '\' or ':' */
+    for (p = argv0 + strlen(argv0); --p > argv0;)
+        if (*p == '/' || *p == '\\' || *p == ':') {
+            p++;
+            break;
+        }
+
+    /* Strip off trailing nonsense. */
+    n = strlen(p);
+    if (n > 4 &&
+        (strcmp(&p[n - 4], ".exe") == 0 || strcmp(&p[n - 4], ".EXE") == 0))
+        n -= 4;
+
+    /* Copy over the name, in lowercase. */
+    if (n > sizeof(prog) - 1)
+        n = sizeof(prog) - 1;
+    for (q = prog, i = 0; i < n; i++, p++)
+        *q++ = tolower((unsigned char)*p);
+    *q = '\0';
+    return prog;
+}
+
+#elif defined(OPENSSL_SYS_VMS)
+
+char *opt_progname(const char *argv0)
+{
+    const char *p, *q;
+
+    /* Find last special character sys:[foo.bar]openssl */
+    for (p = argv0 + strlen(argv0); --p > argv0;)
+        if (*p == ':' || *p == ']' || *p == '>') {
+            p++;
+            break;
+        }
+
+    q = strrchr(p, '.');
+    strncpy(prog, p, sizeof(prog) - 1);
+    prog[sizeof(prog) - 1] = '\0';
+    if (q != NULL && q - p < sizeof(prog))
+        prog[q - p] = '\0';
+    return prog;
+}
+
+#else
+
+char *opt_progname(const char *argv0)
+{
+    const char *p;
+
+    /* Could use strchr, but this is like the ones above. */
+    for (p = argv0 + strlen(argv0); --p > argv0;)
+        if (*p == '/') {
+            p++;
+            break;
+        }
+    strncpy(prog, p, sizeof(prog) - 1);
+    prog[sizeof(prog) - 1] = '\0';
+    return prog;
+}
+#endif
+
+char *opt_getprog(void)
+{
+    return prog;
+}
+
+/* Set up the arg parsing. */
+char *opt_init(int ac, char **av, const OPTIONS *o)
+{
+    /* Store state. */
+    argc = ac;
+    argv = av;
+    opt_index = 1;
+    opts = o;
+    opt_progname(av[0]);
+    unknown = NULL;
+
+    for (; o->name; ++o) {
+#ifndef NDEBUG
+        const OPTIONS *next;
+        int duplicated, i;
+#endif
+
+        if (o->name == OPT_HELP_STR || o->name == OPT_MORE_STR)
+            continue;
+#ifndef NDEBUG
+        i = o->valtype;
+
+        /* Make sure options are legit. */
+        assert(o->name[0] != '-');
+        assert(o->retval > 0);
+        switch (i) {
+        case   0: case '-': case '/': case '<': case '>': case 'E': case 'F':
+        case 'M': case 'U': case 'f': case 'l': case 'n': case 'p': case 's':
+        case 'u': case 'c':
+            break;
+        default:
+            assert(0);
+        }
+
+        /* Make sure there are no duplicates. */
+        for (next = o + 1; next->name; ++next) {
+            /*
+             * Some compilers inline strcmp and the assert string is too long.
+             */
+            duplicated = strcmp(o->name, next->name) == 0;
+            assert(!duplicated);
+        }
+#endif
+        if (o->name[0] == '\0') {
+            assert(unknown == NULL);
+            unknown = o;
+            assert(unknown->valtype == 0 || unknown->valtype == '-');
+        }
+    }
+    return prog;
+}
+
+static OPT_PAIR formats[] = {
+    {"PEM/DER", OPT_FMT_PEMDER},
+    {"pkcs12", OPT_FMT_PKCS12},
+    {"smime", OPT_FMT_SMIME},
+    {"engine", OPT_FMT_ENGINE},
+    {"msblob", OPT_FMT_MSBLOB},
+    {"nss", OPT_FMT_NSS},
+    {"text", OPT_FMT_TEXT},
+    {"http", OPT_FMT_HTTP},
+    {"pvk", OPT_FMT_PVK},
+    {NULL}
+};
+
+/* Print an error message about a failed format parse. */
+int opt_format_error(const char *s, unsigned long flags)
+{
+    OPT_PAIR *ap;
+
+    if (flags == OPT_FMT_PEMDER) {
+        BIO_printf(bio_err, "%s: Bad format \"%s\"; must be pem or der\n",
+                   prog, s);
+    } else {
+        BIO_printf(bio_err, "%s: Bad format \"%s\"; must be one of:\n",
+                   prog, s);
+        for (ap = formats; ap->name; ap++)
+            if (flags & ap->retval)
+                BIO_printf(bio_err, "   %s\n", ap->name);
+    }
+    return 0;
+}
+
+/* Parse a format string, put it into *result; return 0 on failure, else 1. */
+int opt_format(const char *s, unsigned long flags, int *result)
+{
+    switch (*s) {
+    default:
+        return 0;
+    case 'D':
+    case 'd':
+        if ((flags & OPT_FMT_PEMDER) == 0)
+            return opt_format_error(s, flags);
+        *result = FORMAT_ASN1;
+        break;
+    case 'T':
+    case 't':
+        if ((flags & OPT_FMT_TEXT) == 0)
+            return opt_format_error(s, flags);
+        *result = FORMAT_TEXT;
+        break;
+    case 'N':
+    case 'n':
+        if ((flags & OPT_FMT_NSS) == 0)
+            return opt_format_error(s, flags);
+        if (strcmp(s, "NSS") != 0 && strcmp(s, "nss") != 0)
+            return opt_format_error(s, flags);
+        *result = FORMAT_NSS;
+        break;
+    case 'S':
+    case 's':
+        if ((flags & OPT_FMT_SMIME) == 0)
+            return opt_format_error(s, flags);
+        *result = FORMAT_SMIME;
+        break;
+    case 'M':
+    case 'm':
+        if ((flags & OPT_FMT_MSBLOB) == 0)
+            return opt_format_error(s, flags);
+        *result = FORMAT_MSBLOB;
+        break;
+    case 'E':
+    case 'e':
+        if ((flags & OPT_FMT_ENGINE) == 0)
+            return opt_format_error(s, flags);
+        *result = FORMAT_ENGINE;
+        break;
+    case 'H':
+    case 'h':
+        if ((flags & OPT_FMT_HTTP) == 0)
+            return opt_format_error(s, flags);
+        *result = FORMAT_HTTP;
+        break;
+    case '1':
+        if ((flags & OPT_FMT_PKCS12) == 0)
+            return opt_format_error(s, flags);
+        *result = FORMAT_PKCS12;
+        break;
+    case 'P':
+    case 'p':
+        if (s[1] == '\0' || strcmp(s, "PEM") == 0 || strcmp(s, "pem") == 0) {
+            if ((flags & OPT_FMT_PEMDER) == 0)
+                return opt_format_error(s, flags);
+            *result = FORMAT_PEM;
+        } else if (strcmp(s, "PVK") == 0 || strcmp(s, "pvk") == 0) {
+            if ((flags & OPT_FMT_PVK) == 0)
+                return opt_format_error(s, flags);
+            *result = FORMAT_PVK;
+        } else if (strcmp(s, "P12") == 0 || strcmp(s, "p12") == 0
+                   || strcmp(s, "PKCS12") == 0 || strcmp(s, "pkcs12") == 0) {
+            if ((flags & OPT_FMT_PKCS12) == 0)
+                return opt_format_error(s, flags);
+            *result = FORMAT_PKCS12;
+        } else {
+            return 0;
+        }
+        break;
+    }
+    return 1;
+}
+
+/* Parse a cipher name, put it in *EVP_CIPHER; return 0 on failure, else 1. */
+int opt_cipher(const char *name, const EVP_CIPHER **cipherp)
+{
+    *cipherp = EVP_get_cipherbyname(name);
+    if (*cipherp != NULL)
+        return 1;
+    BIO_printf(bio_err, "%s: Unrecognized flag %s\n", prog, name);
+    return 0;
+}
+
+/*
+ * Parse message digest name, put it in *EVP_MD; return 0 on failure, else 1.
+ */
+int opt_md(const char *name, const EVP_MD **mdp)
+{
+    *mdp = EVP_get_digestbyname(name);
+    if (*mdp != NULL)
+        return 1;
+    BIO_printf(bio_err, "%s: Unrecognized flag %s\n", prog, name);
+    return 0;
+}
+
+/* Look through a list of name/value pairs. */
+int opt_pair(const char *name, const OPT_PAIR* pairs, int *result)
+{
+    const OPT_PAIR *pp;
+
+    for (pp = pairs; pp->name; pp++)
+        if (strcmp(pp->name, name) == 0) {
+            *result = pp->retval;
+            return 1;
+        }
+    BIO_printf(bio_err, "%s: Value must be one of:\n", prog);
+    for (pp = pairs; pp->name; pp++)
+        BIO_printf(bio_err, "\t%s\n", pp->name);
+    return 0;
+}
+
+/* Parse an int, put it into *result; return 0 on failure, else 1. */
+int opt_int(const char *value, int *result)
+{
+    long l;
+
+    if (!opt_long(value, &l))
+        return 0;
+    *result = (int)l;
+    if (*result != l) {
+        BIO_printf(bio_err, "%s: Value \"%s\" outside integer range\n",
+                   prog, value);
+        return 0;
+    }
+    return 1;
+}
+
+static void opt_number_error(const char *v)
+{
+    size_t i = 0;
+    struct strstr_pair_st {
+        char *prefix;
+        char *name;
+    } b[] = {
+        {"0x", "a hexadecimal"},
+        {"0X", "a hexadecimal"},
+        {"0", "an octal"}
+    };
+
+    for (i = 0; i < OSSL_NELEM(b); i++) {
+        if (strncmp(v, b[i].prefix, strlen(b[i].prefix)) == 0) {
+            BIO_printf(bio_err,
+                       "%s: Can't parse \"%s\" as %s number\n",
+                       prog, v, b[i].name);
+            return;
+        }
+    }
+    BIO_printf(bio_err, "%s: Can't parse \"%s\" as a number\n", prog, v);
+    return;
+}
+
+/* Parse a long, put it into *result; return 0 on failure, else 1. */
+int opt_long(const char *value, long *result)
+{
+    int oerrno = errno;
+    long l;
+    char *endp;
+
+    errno = 0;
+    l = strtol(value, &endp, 0);
+    if (*endp
+            || endp == value
+            || ((l == LONG_MAX || l == LONG_MIN) && errno == ERANGE)
+            || (l == 0 && errno != 0)) {
+        opt_number_error(value);
+        errno = oerrno;
+        return 0;
+    }
+    *result = l;
+    errno = oerrno;
+    return 1;
+}
+
+#if defined(__STDC_VERSION__) && __STDC_VERSION__ >= 199901L && \
+    defined(INTMAX_MAX) && defined(UINTMAX_MAX)
+
+/* Parse an intmax_t, put it into *result; return 0 on failure, else 1. */
+int opt_imax(const char *value, intmax_t *result)
+{
+    int oerrno = errno;
+    intmax_t m;
+    char *endp;
+
+    errno = 0;
+    m = strtoimax(value, &endp, 0);
+    if (*endp
+            || endp == value
+            || ((m == INTMAX_MAX || m == INTMAX_MIN) && errno == ERANGE)
+            || (m == 0 && errno != 0)) {
+        opt_number_error(value);
+        errno = oerrno;
+        return 0;
+    }
+    *result = m;
+    errno = oerrno;
+    return 1;
+}
+
+/* Parse a uintmax_t, put it into *result; return 0 on failure, else 1. */
+int opt_umax(const char *value, uintmax_t *result)
+{
+    int oerrno = errno;
+    uintmax_t m;
+    char *endp;
+
+    errno = 0;
+    m = strtoumax(value, &endp, 0);
+    if (*endp
+            || endp == value
+            || (m == UINTMAX_MAX && errno == ERANGE)
+            || (m == 0 && errno != 0)) {
+        opt_number_error(value);
+        errno = oerrno;
+        return 0;
+    }
+    *result = m;
+    errno = oerrno;
+    return 1;
+}
+#endif
+
+/*
+ * Parse an unsigned long, put it into *result; return 0 on failure, else 1.
+ */
+int opt_ulong(const char *value, unsigned long *result)
+{
+    int oerrno = errno;
+    char *endptr;
+    unsigned long l;
+
+    errno = 0;
+    l = strtoul(value, &endptr, 0);
+    if (*endptr
+            || endptr == value
+            || ((l == ULONG_MAX) && errno == ERANGE)
+            || (l == 0 && errno != 0)) {
+        opt_number_error(value);
+        errno = oerrno;
+        return 0;
+    }
+    *result = l;
+    errno = oerrno;
+    return 1;
+}
+
+/*
+ * We pass opt as an int but cast it to "enum range" so that all the
+ * items in the OPT_V_ENUM enumeration are caught; this makes -Wswitch
+ * in gcc do the right thing.
+ */
+enum range { OPT_V_ENUM };
+
+int opt_verify(int opt, X509_VERIFY_PARAM *vpm)
+{
+    int i;
+    ossl_intmax_t t = 0;
+    ASN1_OBJECT *otmp;
+    X509_PURPOSE *xptmp;
+    const X509_VERIFY_PARAM *vtmp;
+
+    assert(vpm != NULL);
+    assert(opt > OPT_V__FIRST);
+    assert(opt < OPT_V__LAST);
+
+    switch ((enum range)opt) {
+    case OPT_V__FIRST:
+    case OPT_V__LAST:
+        return 0;
+    case OPT_V_POLICY:
+        otmp = OBJ_txt2obj(opt_arg(), 0);
+        if (otmp == NULL) {
+            BIO_printf(bio_err, "%s: Invalid Policy %s\n", prog, opt_arg());
+            return 0;
+        }
+        X509_VERIFY_PARAM_add0_policy(vpm, otmp);
+        break;
+    case OPT_V_PURPOSE:
+        /* purpose name -> purpose index */
+        i = X509_PURPOSE_get_by_sname(opt_arg());
+        if (i < 0) {
+            BIO_printf(bio_err, "%s: Invalid purpose %s\n", prog, opt_arg());
+            return 0;
+        }
+
+        /* purpose index -> purpose object */
+        xptmp = X509_PURPOSE_get0(i);
+
+        /* purpose object -> purpose value */
+        i = X509_PURPOSE_get_id(xptmp);
+
+        if (!X509_VERIFY_PARAM_set_purpose(vpm, i)) {
+            BIO_printf(bio_err,
+                       "%s: Internal error setting purpose %s\n",
+                       prog, opt_arg());
+            return 0;
+        }
+        break;
+    case OPT_V_VERIFY_NAME:
+        vtmp = X509_VERIFY_PARAM_lookup(opt_arg());
+        if (vtmp == NULL) {
+            BIO_printf(bio_err, "%s: Invalid verify name %s\n",
+                       prog, opt_arg());
+            return 0;
+        }
+        X509_VERIFY_PARAM_set1(vpm, vtmp);
+        break;
+    case OPT_V_VERIFY_DEPTH:
+        i = atoi(opt_arg());
+        if (i >= 0)
+            X509_VERIFY_PARAM_set_depth(vpm, i);
+        break;
+    case OPT_V_VERIFY_AUTH_LEVEL:
+        i = atoi(opt_arg());
+        if (i >= 0)
+            X509_VERIFY_PARAM_set_auth_level(vpm, i);
+        break;
+    case OPT_V_ATTIME:
+        if (!opt_imax(opt_arg(), &t))
+            return 0;
+        if (t != (time_t)t) {
+            BIO_printf(bio_err, "%s: epoch time out of range %s\n",
+                       prog, opt_arg());
+            return 0;
+        }
+        X509_VERIFY_PARAM_set_time(vpm, (time_t)t);
+        break;
+    case OPT_V_VERIFY_HOSTNAME:
+        if (!X509_VERIFY_PARAM_set1_host(vpm, opt_arg(), 0))
+            return 0;
+        break;
+    case OPT_V_VERIFY_EMAIL:
+        if (!X509_VERIFY_PARAM_set1_email(vpm, opt_arg(), 0))
+            return 0;
+        break;
+    case OPT_V_VERIFY_IP:
+        if (!X509_VERIFY_PARAM_set1_ip_asc(vpm, opt_arg()))
+            return 0;
+        break;
+    case OPT_V_IGNORE_CRITICAL:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_IGNORE_CRITICAL);
+        break;
+    case OPT_V_ISSUER_CHECKS:
+        /* NOP, deprecated */
+        break;
+    case OPT_V_CRL_CHECK:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_CRL_CHECK);
+        break;
+    case OPT_V_CRL_CHECK_ALL:
+        X509_VERIFY_PARAM_set_flags(vpm,
+                                    X509_V_FLAG_CRL_CHECK |
+                                    X509_V_FLAG_CRL_CHECK_ALL);
+        break;
+    case OPT_V_POLICY_CHECK:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_POLICY_CHECK);
+        break;
+    case OPT_V_EXPLICIT_POLICY:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_EXPLICIT_POLICY);
+        break;
+    case OPT_V_INHIBIT_ANY:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_INHIBIT_ANY);
+        break;
+    case OPT_V_INHIBIT_MAP:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_INHIBIT_MAP);
+        break;
+    case OPT_V_X509_STRICT:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_X509_STRICT);
+        break;
+    case OPT_V_EXTENDED_CRL:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_EXTENDED_CRL_SUPPORT);
+        break;
+    case OPT_V_USE_DELTAS:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_USE_DELTAS);
+        break;
+    case OPT_V_POLICY_PRINT:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_NOTIFY_POLICY);
+        break;
+    case OPT_V_CHECK_SS_SIG:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_CHECK_SS_SIGNATURE);
+        break;
+    case OPT_V_TRUSTED_FIRST:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_TRUSTED_FIRST);
+        break;
+    case OPT_V_SUITEB_128_ONLY:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_SUITEB_128_LOS_ONLY);
+        break;
+    case OPT_V_SUITEB_128:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_SUITEB_128_LOS);
+        break;
+    case OPT_V_SUITEB_192:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_SUITEB_192_LOS);
+        break;
+    case OPT_V_PARTIAL_CHAIN:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_PARTIAL_CHAIN);
+        break;
+    case OPT_V_NO_ALT_CHAINS:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_NO_ALT_CHAINS);
+        break;
+    case OPT_V_NO_CHECK_TIME:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_NO_CHECK_TIME);
+        break;
+    case OPT_V_ALLOW_PROXY_CERTS:
+        X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_ALLOW_PROXY_CERTS);
+        break;
+    }
+    return 1;
+
+}
+
+/*
+ * Parse the next flag (and value if specified), return 0 if done, -1 on
+ * error, otherwise the flag's retval.
+ */
+int opt_next(void)
+{
+    char *p;
+    const OPTIONS *o;
+    int ival;
+    long lval;
+    unsigned long ulval;
+    ossl_intmax_t imval;
+    ossl_uintmax_t umval;
+
+    /* Look at current arg; at end of the list? */
+    arg = NULL;
+    p = argv[opt_index];
+    if (p == NULL)
+        return 0;
+
+    /* If word doesn't start with a -, we're done. */
+    if (*p != '-')
+        return 0;
+
+    /* Hit "--" ? We're done. */
+    opt_index++;
+    if (strcmp(p, "--") == 0)
+        return 0;
+
+    /* Allow -nnn and --nnn */
+    if (*++p == '-')
+        p++;
+    flag = p - 1;
+
+    /* If we have --flag=foo, snip it off */
+    if ((arg = strchr(p, '=')) != NULL)
+        *arg++ = '\0';
+    for (o = opts; o->name; ++o) {
+        /* If not this option, move on to the next one. */
+        if (strcmp(p, o->name) != 0)
+            continue;
+
+        /* If it doesn't take a value, make sure none was given. */
+        if (o->valtype == 0 || o->valtype == '-') {
+            if (arg) {
+                BIO_printf(bio_err,
+                           "%s: Option -%s does not take a value\n", prog, p);
+                return -1;
+            }
+            return o->retval;
+        }
+
+        /* Want a value; get the next param if =foo not used. */
+        if (arg == NULL) {
+            if (argv[opt_index] == NULL) {
+                BIO_printf(bio_err,
+                           "%s: Option -%s needs a value\n", prog, o->name);
+                return -1;
+            }
+            arg = argv[opt_index++];
+        }
+
+        /* Syntax-check value. */
+        switch (o->valtype) {
+        default:
+        case 's':
+            /* Just a string. */
+            break;
+        case '/':
+            if (app_isdir(arg) > 0)
+                break;
+            BIO_printf(bio_err, "%s: Not a directory: %s\n", prog, arg);
+            return -1;
+        case '<':
+            /* Input file. */
+            break;
+        case '>':
+            /* Output file. */
+            break;
+        case 'p':
+        case 'n':
+            if (!opt_int(arg, &ival)
+                    || (o->valtype == 'p' && ival <= 0)) {
+                BIO_printf(bio_err,
+                           "%s: Non-positive number \"%s\" for -%s\n",
+                           prog, arg, o->name);
+                return -1;
+            }
+            break;
+        case 'M':
+            if (!opt_imax(arg, &imval)) {
+                BIO_printf(bio_err,
+                           "%s: Invalid number \"%s\" for -%s\n",
+                           prog, arg, o->name);
+                return -1;
+            }
+            break;
+        case 'U':
+            if (!opt_umax(arg, &umval)) {
+                BIO_printf(bio_err,
+                           "%s: Invalid number \"%s\" for -%s\n",
+                           prog, arg, o->name);
+                return -1;
+            }
+            break;
+        case 'l':
+            if (!opt_long(arg, &lval)) {
+                BIO_printf(bio_err,
+                           "%s: Invalid number \"%s\" for -%s\n",
+                           prog, arg, o->name);
+                return -1;
+            }
+            break;
+        case 'u':
+            if (!opt_ulong(arg, &ulval)) {
+                BIO_printf(bio_err,
+                           "%s: Invalid number \"%s\" for -%s\n",
+                           prog, arg, o->name);
+                return -1;
+            }
+            break;
+        case 'c':
+        case 'E':
+        case 'F':
+        case 'f':
+            if (opt_format(arg,
+                           o->valtype == 'c' ? OPT_FMT_PDS :
+                           o->valtype == 'E' ? OPT_FMT_PDE :
+                           o->valtype == 'F' ? OPT_FMT_PEMDER
+                           : OPT_FMT_ANY, &ival))
+                break;
+            BIO_printf(bio_err,
+                       "%s: Invalid format \"%s\" for -%s\n",
+                       prog, arg, o->name);
+            return -1;
+        }
+
+        /* Return the flag value. */
+        return o->retval;
+    }
+    if (unknown != NULL) {
+        dunno = p;
+        return unknown->retval;
+    }
+    BIO_printf(bio_err, "%s: Option unknown option -%s\n", prog, p);
+    return -1;
+}
+
+/* Return the most recent flag parameter. */
+char *opt_arg(void)
+{
+    return arg;
+}
+
+/* Return the most recent flag. */
+char *opt_flag(void)
+{
+    return flag;
+}
+
+/* Return the unknown option. */
+char *opt_unknown(void)
+{
+    return dunno;
+}
+
+/* Return the rest of the arguments after parsing flags. */
+char **opt_rest(void)
+{
+    return &argv[opt_index];
+}
+
+/* How many items in remaining args? */
+int opt_num_rest(void)
+{
+    int i = 0;
+    char **pp;
+
+    for (pp = opt_rest(); *pp; pp++, i++)
+        continue;
+    return i;
+}
+
+/* Return a string describing the parameter type. */
+static const char *valtype2param(const OPTIONS *o)
+{
+    switch (o->valtype) {
+    case 0:
+    case '-':
+        return "";
+    case 's':
+        return "val";
+    case '/':
+        return "dir";
+    case '<':
+        return "infile";
+    case '>':
+        return "outfile";
+    case 'p':
+        return "+int";
+    case 'n':
+        return "int";
+    case 'l':
+        return "long";
+    case 'u':
+        return "ulong";
+    case 'E':
+        return "PEM|DER|ENGINE";
+    case 'F':
+        return "PEM|DER";
+    case 'f':
+        return "format";
+    case 'M':
+        return "intmax";
+    case 'U':
+        return "uintmax";
+    }
+    return "parm";
+}
+
+void opt_help(const OPTIONS *list)
+{
+    const OPTIONS *o;
+    int i;
+    int standard_prolog;
+    int width = 5;
+    char start[80 + 1];
+    char *p;
+    const char *help;
+
+    /* Starts with its own help message? */
+    standard_prolog = list[0].name != OPT_HELP_STR;
+
+    /* Find the widest help. */
+    for (o = list; o->name; o++) {
+        if (o->name == OPT_MORE_STR)
+            continue;
+        i = 2 + (int)strlen(o->name);
+        if (o->valtype != '-')
+            i += 1 + strlen(valtype2param(o));
+        if (i < MAX_OPT_HELP_WIDTH && i > width)
+            width = i;
+        assert(i < (int)sizeof(start));
+    }
+
+    if (standard_prolog)
+        BIO_printf(bio_err, "Usage: %s [options]\nValid options are:\n",
+                   prog);
+
+    /* Now let's print. */
+    for (o = list; o->name; o++) {
+        help = o->helpstr ? o->helpstr : "(No additional info)";
+        if (o->name == OPT_HELP_STR) {
+            BIO_printf(bio_err, help, prog);
+            continue;
+        }
+
+        /* Pad out prefix */
+        memset(start, ' ', sizeof(start) - 1);
+        start[sizeof(start) - 1] = '\0';
+
+        if (o->name == OPT_MORE_STR) {
+            /* Continuation of previous line; pad and print. */
+            start[width] = '\0';
+            BIO_printf(bio_err, "%s  %s\n", start, help);
+            continue;
+        }
+
+        /* Build up the "-flag [param]" part. */
+        p = start;
+        *p++ = ' ';
+        *p++ = '-';
+        if (o->name[0])
+            p += strlen(strcpy(p, o->name));
+        else
+            *p++ = '*';
+        if (o->valtype != '-') {
+            *p++ = ' ';
+            p += strlen(strcpy(p, valtype2param(o)));
+        }
+        *p = ' ';
+        if ((int)(p - start) >= MAX_OPT_HELP_WIDTH) {
+            *p = '\0';
+            BIO_printf(bio_err, "%s\n", start);
+            memset(start, ' ', sizeof(start));
+        }
+        start[width] = '\0';
+        BIO_printf(bio_err, "%s  %s\n", start, help);
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/passwd.c b/trunk/3rdparty/openssl-1.1-fit/apps/passwd.c
new file mode 100644
index 000000000..aa516c874
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/passwd.c
@@ -0,0 +1,853 @@
+/*
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+
+#include "apps.h"
+#include "progs.h"
+
+#include <openssl/bio.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/rand.h>
+#ifndef OPENSSL_NO_DES
+# include <openssl/des.h>
+#endif
+#include <openssl/md5.h>
+#include <openssl/sha.h>
+
+static unsigned const char cov_2char[64] = {
+    /* from crypto/des/fcrypt.c */
+    0x2E, 0x2F, 0x30, 0x31, 0x32, 0x33, 0x34, 0x35,
+    0x36, 0x37, 0x38, 0x39, 0x41, 0x42, 0x43, 0x44,
+    0x45, 0x46, 0x47, 0x48, 0x49, 0x4A, 0x4B, 0x4C,
+    0x4D, 0x4E, 0x4F, 0x50, 0x51, 0x52, 0x53, 0x54,
+    0x55, 0x56, 0x57, 0x58, 0x59, 0x5A, 0x61, 0x62,
+    0x63, 0x64, 0x65, 0x66, 0x67, 0x68, 0x69, 0x6A,
+    0x6B, 0x6C, 0x6D, 0x6E, 0x6F, 0x70, 0x71, 0x72,
+    0x73, 0x74, 0x75, 0x76, 0x77, 0x78, 0x79, 0x7A
+};
+
+static const char ascii_dollar[] = { 0x24, 0x00 };
+
+typedef enum {
+    passwd_unset = 0,
+    passwd_crypt,
+    passwd_md5,
+    passwd_apr1,
+    passwd_sha256,
+    passwd_sha512,
+    passwd_aixmd5
+} passwd_modes;
+
+static int do_passwd(int passed_salt, char **salt_p, char **salt_malloc_p,
+                     char *passwd, BIO *out, int quiet, int table,
+                     int reverse, size_t pw_maxlen, passwd_modes mode);
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_IN,
+    OPT_NOVERIFY, OPT_QUIET, OPT_TABLE, OPT_REVERSE, OPT_APR1,
+    OPT_1, OPT_5, OPT_6, OPT_CRYPT, OPT_AIXMD5, OPT_SALT, OPT_STDIN,
+    OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS passwd_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"in", OPT_IN, '<', "Read passwords from file"},
+    {"noverify", OPT_NOVERIFY, '-',
+     "Never verify when reading password from terminal"},
+    {"quiet", OPT_QUIET, '-', "No warnings"},
+    {"table", OPT_TABLE, '-', "Format output as table"},
+    {"reverse", OPT_REVERSE, '-', "Switch table columns"},
+    {"salt", OPT_SALT, 's', "Use provided salt"},
+    {"stdin", OPT_STDIN, '-', "Read passwords from stdin"},
+    {"6", OPT_6, '-', "SHA512-based password algorithm"},
+    {"5", OPT_5, '-', "SHA256-based password algorithm"},
+    {"apr1", OPT_APR1, '-', "MD5-based password algorithm, Apache variant"},
+    {"1", OPT_1, '-', "MD5-based password algorithm"},
+    {"aixmd5", OPT_AIXMD5, '-', "AIX MD5-based password algorithm"},
+#ifndef OPENSSL_NO_DES
+    {"crypt", OPT_CRYPT, '-', "Standard Unix password algorithm (default)"},
+#endif
+    OPT_R_OPTIONS,
+    {NULL}
+};
+
+int passwd_main(int argc, char **argv)
+{
+    BIO *in = NULL;
+    char *infile = NULL, *salt = NULL, *passwd = NULL, **passwds = NULL;
+    char *salt_malloc = NULL, *passwd_malloc = NULL, *prog;
+    OPTION_CHOICE o;
+    int in_stdin = 0, pw_source_defined = 0;
+#ifndef OPENSSL_NO_UI_CONSOLE
+    int in_noverify = 0;
+#endif
+    int passed_salt = 0, quiet = 0, table = 0, reverse = 0;
+    int ret = 1;
+    passwd_modes mode = passwd_unset;
+    size_t passwd_malloc_size = 0;
+    size_t pw_maxlen = 256; /* arbitrary limit, should be enough for most
+                             * passwords */
+
+    prog = opt_init(argc, argv, passwd_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(passwd_options);
+            ret = 0;
+            goto end;
+        case OPT_IN:
+            if (pw_source_defined)
+                goto opthelp;
+            infile = opt_arg();
+            pw_source_defined = 1;
+            break;
+        case OPT_NOVERIFY:
+#ifndef OPENSSL_NO_UI_CONSOLE
+            in_noverify = 1;
+#endif
+            break;
+        case OPT_QUIET:
+            quiet = 1;
+            break;
+        case OPT_TABLE:
+            table = 1;
+            break;
+        case OPT_REVERSE:
+            reverse = 1;
+            break;
+        case OPT_1:
+            if (mode != passwd_unset)
+                goto opthelp;
+            mode = passwd_md5;
+            break;
+        case OPT_5:
+            if (mode != passwd_unset)
+                goto opthelp;
+            mode = passwd_sha256;
+            break;
+        case OPT_6:
+            if (mode != passwd_unset)
+                goto opthelp;
+            mode = passwd_sha512;
+            break;
+        case OPT_APR1:
+            if (mode != passwd_unset)
+                goto opthelp;
+            mode = passwd_apr1;
+            break;
+        case OPT_AIXMD5:
+            if (mode != passwd_unset)
+                goto opthelp;
+            mode = passwd_aixmd5;
+            break;
+        case OPT_CRYPT:
+#ifndef OPENSSL_NO_DES
+            if (mode != passwd_unset)
+                goto opthelp;
+            mode = passwd_crypt;
+#endif
+            break;
+        case OPT_SALT:
+            passed_salt = 1;
+            salt = opt_arg();
+            break;
+        case OPT_STDIN:
+            if (pw_source_defined)
+                goto opthelp;
+            in_stdin = 1;
+            pw_source_defined = 1;
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+
+    if (*argv != NULL) {
+        if (pw_source_defined)
+            goto opthelp;
+        pw_source_defined = 1;
+        passwds = argv;
+    }
+
+    if (mode == passwd_unset) {
+        /* use default */
+        mode = passwd_crypt;
+    }
+
+#ifdef OPENSSL_NO_DES
+    if (mode == passwd_crypt)
+        goto opthelp;
+#endif
+
+    if (infile != NULL && in_stdin) {
+        BIO_printf(bio_err, "%s: Can't combine -in and -stdin\n", prog);
+        goto end;
+    }
+
+    if (infile != NULL || in_stdin) {
+        /*
+         * If in_stdin is true, we know that infile is NULL, and that
+         * bio_open_default() will give us back an alias for stdin.
+         */
+        in = bio_open_default(infile, 'r', FORMAT_TEXT);
+        if (in == NULL)
+            goto end;
+    }
+
+    if (mode == passwd_crypt)
+        pw_maxlen = 8;
+
+    if (passwds == NULL) {
+        /* no passwords on the command line */
+
+        passwd_malloc_size = pw_maxlen + 2;
+        /* longer than necessary so that we can warn about truncation */
+        passwd = passwd_malloc =
+            app_malloc(passwd_malloc_size, "password buffer");
+    }
+
+    if ((in == NULL) && (passwds == NULL)) {
+        /*
+         * we use the following method to make sure what
+         * in the 'else' section is always compiled, to
+         * avoid rot of not-frequently-used code.
+         */
+        if (1) {
+#ifndef OPENSSL_NO_UI_CONSOLE
+            /* build a null-terminated list */
+            static char *passwds_static[2] = { NULL, NULL };
+
+            passwds = passwds_static;
+            if (in == NULL) {
+                if (EVP_read_pw_string
+                    (passwd_malloc, passwd_malloc_size, "Password: ",
+                     !(passed_salt || in_noverify)) != 0)
+                    goto end;
+            }
+            passwds[0] = passwd_malloc;
+        } else {
+#endif
+            BIO_printf(bio_err, "password required\n");
+            goto end;
+        }
+    }
+
+    if (in == NULL) {
+        assert(passwds != NULL);
+        assert(*passwds != NULL);
+
+        do {                    /* loop over list of passwords */
+            passwd = *passwds++;
+            if (!do_passwd(passed_salt, &salt, &salt_malloc, passwd, bio_out,
+                           quiet, table, reverse, pw_maxlen, mode))
+                goto end;
+        } while (*passwds != NULL);
+    } else {
+        /* in != NULL */
+        int done;
+
+        assert(passwd != NULL);
+        do {
+            int r = BIO_gets(in, passwd, pw_maxlen + 1);
+            if (r > 0) {
+                char *c = (strchr(passwd, '\n'));
+                if (c != NULL) {
+                    *c = 0;     /* truncate at newline */
+                } else {
+                    /* ignore rest of line */
+                    char trash[BUFSIZ];
+                    do
+                        r = BIO_gets(in, trash, sizeof(trash));
+                    while ((r > 0) && (!strchr(trash, '\n')));
+                }
+
+                if (!do_passwd
+                    (passed_salt, &salt, &salt_malloc, passwd, bio_out, quiet,
+                     table, reverse, pw_maxlen, mode))
+                    goto end;
+            }
+            done = (r <= 0);
+        } while (!done);
+    }
+    ret = 0;
+
+ end:
+#if 0
+    ERR_print_errors(bio_err);
+#endif
+    OPENSSL_free(salt_malloc);
+    OPENSSL_free(passwd_malloc);
+    BIO_free(in);
+    return ret;
+}
+
+/*
+ * MD5-based password algorithm (should probably be available as a library
+ * function; then the static buffer would not be acceptable). For magic
+ * string "1", this should be compatible to the MD5-based BSD password
+ * algorithm. For 'magic' string "apr1", this is compatible to the MD5-based
+ * Apache password algorithm. (Apparently, the Apache password algorithm is
+ * identical except that the 'magic' string was changed -- the laziest
+ * application of the NIH principle I've ever encountered.)
+ */
+static char *md5crypt(const char *passwd, const char *magic, const char *salt)
+{
+    /* "$apr1$..salt..$.......md5hash..........\0" */
+    static char out_buf[6 + 9 + 24 + 2];
+    unsigned char buf[MD5_DIGEST_LENGTH];
+    char ascii_magic[5];         /* "apr1" plus '\0' */
+    char ascii_salt[9];          /* Max 8 chars plus '\0' */
+    char *ascii_passwd = NULL;
+    char *salt_out;
+    int n;
+    unsigned int i;
+    EVP_MD_CTX *md = NULL, *md2 = NULL;
+    size_t passwd_len, salt_len, magic_len;
+
+    passwd_len = strlen(passwd);
+
+    out_buf[0] = 0;
+    magic_len = strlen(magic);
+    OPENSSL_strlcpy(ascii_magic, magic, sizeof(ascii_magic));
+#ifdef CHARSET_EBCDIC
+    if ((magic[0] & 0x80) != 0)    /* High bit is 1 in EBCDIC alnums */
+        ebcdic2ascii(ascii_magic, ascii_magic, magic_len);
+#endif
+
+    /* The salt gets truncated to 8 chars */
+    OPENSSL_strlcpy(ascii_salt, salt, sizeof(ascii_salt));
+    salt_len = strlen(ascii_salt);
+#ifdef CHARSET_EBCDIC
+    ebcdic2ascii(ascii_salt, ascii_salt, salt_len);
+#endif
+
+#ifdef CHARSET_EBCDIC
+    ascii_passwd = OPENSSL_strdup(passwd);
+    if (ascii_passwd == NULL)
+        return NULL;
+    ebcdic2ascii(ascii_passwd, ascii_passwd, passwd_len);
+    passwd = ascii_passwd;
+#endif
+
+    if (magic_len > 0) {
+        OPENSSL_strlcat(out_buf, ascii_dollar, sizeof(out_buf));
+
+        if (magic_len > 4)    /* assert it's  "1" or "apr1" */
+            goto err;
+
+        OPENSSL_strlcat(out_buf, ascii_magic, sizeof(out_buf));
+        OPENSSL_strlcat(out_buf, ascii_dollar, sizeof(out_buf));
+    }
+
+    OPENSSL_strlcat(out_buf, ascii_salt, sizeof(out_buf));
+
+    if (strlen(out_buf) > 6 + 8) /* assert "$apr1$..salt.." */
+        goto err;
+
+    salt_out = out_buf;
+    if (magic_len > 0)
+        salt_out += 2 + magic_len;
+
+    if (salt_len > 8)
+        goto err;
+
+    md = EVP_MD_CTX_new();
+    if (md == NULL
+        || !EVP_DigestInit_ex(md, EVP_md5(), NULL)
+        || !EVP_DigestUpdate(md, passwd, passwd_len))
+        goto err;
+
+    if (magic_len > 0)
+        if (!EVP_DigestUpdate(md, ascii_dollar, 1)
+            || !EVP_DigestUpdate(md, ascii_magic, magic_len)
+            || !EVP_DigestUpdate(md, ascii_dollar, 1))
+          goto err;
+
+    if (!EVP_DigestUpdate(md, ascii_salt, salt_len))
+        goto err;
+
+    md2 = EVP_MD_CTX_new();
+    if (md2 == NULL
+        || !EVP_DigestInit_ex(md2, EVP_md5(), NULL)
+        || !EVP_DigestUpdate(md2, passwd, passwd_len)
+        || !EVP_DigestUpdate(md2, ascii_salt, salt_len)
+        || !EVP_DigestUpdate(md2, passwd, passwd_len)
+        || !EVP_DigestFinal_ex(md2, buf, NULL))
+        goto err;
+
+    for (i = passwd_len; i > sizeof(buf); i -= sizeof(buf)) {
+        if (!EVP_DigestUpdate(md, buf, sizeof(buf)))
+            goto err;
+    }
+    if (!EVP_DigestUpdate(md, buf, i))
+        goto err;
+
+    n = passwd_len;
+    while (n) {
+        if (!EVP_DigestUpdate(md, (n & 1) ? "\0" : passwd, 1))
+            goto err;
+        n >>= 1;
+    }
+    if (!EVP_DigestFinal_ex(md, buf, NULL))
+        return NULL;
+
+    for (i = 0; i < 1000; i++) {
+        if (!EVP_DigestInit_ex(md2, EVP_md5(), NULL))
+            goto err;
+        if (!EVP_DigestUpdate(md2,
+                              (i & 1) ? (unsigned const char *)passwd : buf,
+                              (i & 1) ? passwd_len : sizeof(buf)))
+            goto err;
+        if (i % 3) {
+            if (!EVP_DigestUpdate(md2, ascii_salt, salt_len))
+                goto err;
+        }
+        if (i % 7) {
+            if (!EVP_DigestUpdate(md2, passwd, passwd_len))
+                goto err;
+        }
+        if (!EVP_DigestUpdate(md2,
+                              (i & 1) ? buf : (unsigned const char *)passwd,
+                              (i & 1) ? sizeof(buf) : passwd_len))
+                goto err;
+        if (!EVP_DigestFinal_ex(md2, buf, NULL))
+                goto err;
+    }
+    EVP_MD_CTX_free(md2);
+    EVP_MD_CTX_free(md);
+    md2 = NULL;
+    md = NULL;
+
+    {
+        /* transform buf into output string */
+        unsigned char buf_perm[sizeof(buf)];
+        int dest, source;
+        char *output;
+
+        /* silly output permutation */
+        for (dest = 0, source = 0; dest < 14;
+             dest++, source = (source + 6) % 17)
+            buf_perm[dest] = buf[source];
+        buf_perm[14] = buf[5];
+        buf_perm[15] = buf[11];
+# ifndef PEDANTIC              /* Unfortunately, this generates a "no
+                                 * effect" warning */
+        assert(16 == sizeof(buf_perm));
+# endif
+
+        output = salt_out + salt_len;
+        assert(output == out_buf + strlen(out_buf));
+
+        *output++ = ascii_dollar[0];
+
+        for (i = 0; i < 15; i += 3) {
+            *output++ = cov_2char[buf_perm[i + 2] & 0x3f];
+            *output++ = cov_2char[((buf_perm[i + 1] & 0xf) << 2) |
+                                  (buf_perm[i + 2] >> 6)];
+            *output++ = cov_2char[((buf_perm[i] & 3) << 4) |
+                                  (buf_perm[i + 1] >> 4)];
+            *output++ = cov_2char[buf_perm[i] >> 2];
+        }
+        assert(i == 15);
+        *output++ = cov_2char[buf_perm[i] & 0x3f];
+        *output++ = cov_2char[buf_perm[i] >> 6];
+        *output = 0;
+        assert(strlen(out_buf) < sizeof(out_buf));
+#ifdef CHARSET_EBCDIC
+        ascii2ebcdic(out_buf, out_buf, strlen(out_buf));
+#endif
+    }
+
+    return out_buf;
+
+ err:
+    OPENSSL_free(ascii_passwd);
+    EVP_MD_CTX_free(md2);
+    EVP_MD_CTX_free(md);
+    return NULL;
+}
+
+/*
+ * SHA based password algorithm, describe by Ulrich Drepper here:
+ * https://www.akkadia.org/drepper/SHA-crypt.txt
+ * (note that it's in the public domain)
+ */
+static char *shacrypt(const char *passwd, const char *magic, const char *salt)
+{
+    /* Prefix for optional rounds specification.  */
+    static const char rounds_prefix[] = "rounds=";
+    /* Maximum salt string length.  */
+# define SALT_LEN_MAX 16
+    /* Default number of rounds if not explicitly specified.  */
+# define ROUNDS_DEFAULT 5000
+    /* Minimum number of rounds.  */
+# define ROUNDS_MIN 1000
+    /* Maximum number of rounds.  */
+# define ROUNDS_MAX 999999999
+
+    /* "$6$rounds=<N>$......salt......$...shahash(up to 86 chars)...\0" */
+    static char out_buf[3 + 17 + 17 + 86 + 1];
+    unsigned char buf[SHA512_DIGEST_LENGTH];
+    unsigned char temp_buf[SHA512_DIGEST_LENGTH];
+    size_t buf_size = 0;
+    char ascii_magic[2];
+    char ascii_salt[17];          /* Max 16 chars plus '\0' */
+    char *ascii_passwd = NULL;
+    size_t n;
+    EVP_MD_CTX *md = NULL, *md2 = NULL;
+    const EVP_MD *sha = NULL;
+    size_t passwd_len, salt_len, magic_len;
+    unsigned int rounds = 5000;        /* Default */
+    char rounds_custom = 0;
+    char *p_bytes = NULL;
+    char *s_bytes = NULL;
+    char *cp = NULL;
+
+    passwd_len = strlen(passwd);
+    magic_len = strlen(magic);
+
+    /* assert it's "5" or "6" */
+    if (magic_len != 1)
+        return NULL;
+
+    switch (magic[0]) {
+    case '5':
+        sha = EVP_sha256();
+        buf_size = 32;
+        break;
+    case '6':
+        sha = EVP_sha512();
+        buf_size = 64;
+        break;
+    default:
+        return NULL;
+    }
+
+    if (strncmp(salt, rounds_prefix, sizeof(rounds_prefix) - 1) == 0) {
+        const char *num = salt + sizeof(rounds_prefix) - 1;
+        char *endp;
+        unsigned long int srounds = strtoul (num, &endp, 10);
+        if (*endp == '$') {
+            salt = endp + 1;
+            if (srounds > ROUNDS_MAX)
+                rounds = ROUNDS_MAX;
+            else if (srounds < ROUNDS_MIN)
+                rounds = ROUNDS_MIN;
+            else
+                rounds = (unsigned int)srounds;
+            rounds_custom = 1;
+        } else {
+            return NULL;
+        }
+    }
+
+    OPENSSL_strlcpy(ascii_magic, magic, sizeof(ascii_magic));
+#ifdef CHARSET_EBCDIC
+    if ((magic[0] & 0x80) != 0)    /* High bit is 1 in EBCDIC alnums */
+        ebcdic2ascii(ascii_magic, ascii_magic, magic_len);
+#endif
+
+    /* The salt gets truncated to 16 chars */
+    OPENSSL_strlcpy(ascii_salt, salt, sizeof(ascii_salt));
+    salt_len = strlen(ascii_salt);
+#ifdef CHARSET_EBCDIC
+    ebcdic2ascii(ascii_salt, ascii_salt, salt_len);
+#endif
+
+#ifdef CHARSET_EBCDIC
+    ascii_passwd = OPENSSL_strdup(passwd);
+    if (ascii_passwd == NULL)
+        return NULL;
+    ebcdic2ascii(ascii_passwd, ascii_passwd, passwd_len);
+    passwd = ascii_passwd;
+#endif
+
+    out_buf[0] = 0;
+    OPENSSL_strlcat(out_buf, ascii_dollar, sizeof(out_buf));
+    OPENSSL_strlcat(out_buf, ascii_magic, sizeof(out_buf));
+    OPENSSL_strlcat(out_buf, ascii_dollar, sizeof(out_buf));
+    if (rounds_custom) {
+        char tmp_buf[80]; /* "rounds=999999999" */
+        sprintf(tmp_buf, "rounds=%u", rounds);
+#ifdef CHARSET_EBCDIC
+        /* In case we're really on a ASCII based platform and just pretend */
+        if (tmp_buf[0] != 0x72)  /* ASCII 'r' */
+            ebcdic2ascii(tmp_buf, tmp_buf, strlen(tmp_buf));
+#endif
+        OPENSSL_strlcat(out_buf, tmp_buf, sizeof(out_buf));
+        OPENSSL_strlcat(out_buf, ascii_dollar, sizeof(out_buf));
+    }
+    OPENSSL_strlcat(out_buf, ascii_salt, sizeof(out_buf));
+
+    /* assert "$5$rounds=999999999$......salt......" */
+    if (strlen(out_buf) > 3 + 17 * rounds_custom + salt_len )
+        goto err;
+
+    md = EVP_MD_CTX_new();
+    if (md == NULL
+        || !EVP_DigestInit_ex(md, sha, NULL)
+        || !EVP_DigestUpdate(md, passwd, passwd_len)
+        || !EVP_DigestUpdate(md, ascii_salt, salt_len))
+        goto err;
+
+    md2 = EVP_MD_CTX_new();
+    if (md2 == NULL
+        || !EVP_DigestInit_ex(md2, sha, NULL)
+        || !EVP_DigestUpdate(md2, passwd, passwd_len)
+        || !EVP_DigestUpdate(md2, ascii_salt, salt_len)
+        || !EVP_DigestUpdate(md2, passwd, passwd_len)
+        || !EVP_DigestFinal_ex(md2, buf, NULL))
+        goto err;
+
+    for (n = passwd_len; n > buf_size; n -= buf_size) {
+        if (!EVP_DigestUpdate(md, buf, buf_size))
+            goto err;
+    }
+    if (!EVP_DigestUpdate(md, buf, n))
+        goto err;
+
+    n = passwd_len;
+    while (n) {
+        if (!EVP_DigestUpdate(md,
+                              (n & 1) ? buf : (unsigned const char *)passwd,
+                              (n & 1) ? buf_size : passwd_len))
+            goto err;
+        n >>= 1;
+    }
+    if (!EVP_DigestFinal_ex(md, buf, NULL))
+        return NULL;
+
+    /* P sequence */
+    if (!EVP_DigestInit_ex(md2, sha, NULL))
+        goto err;
+
+    for (n = passwd_len; n > 0; n--)
+        if (!EVP_DigestUpdate(md2, passwd, passwd_len))
+            goto err;
+
+    if (!EVP_DigestFinal_ex(md2, temp_buf, NULL))
+        return NULL;
+
+    if ((p_bytes = OPENSSL_zalloc(passwd_len)) == NULL)
+        goto err;
+    for (cp = p_bytes, n = passwd_len; n > buf_size; n -= buf_size, cp += buf_size)
+        memcpy(cp, temp_buf, buf_size);
+    memcpy(cp, temp_buf, n);
+
+    /* S sequence */
+    if (!EVP_DigestInit_ex(md2, sha, NULL))
+        goto err;
+
+    for (n = 16 + buf[0]; n > 0; n--)
+        if (!EVP_DigestUpdate(md2, ascii_salt, salt_len))
+            goto err;
+
+    if (!EVP_DigestFinal_ex(md2, temp_buf, NULL))
+        return NULL;
+
+    if ((s_bytes = OPENSSL_zalloc(salt_len)) == NULL)
+        goto err;
+    for (cp = s_bytes, n = salt_len; n > buf_size; n -= buf_size, cp += buf_size)
+        memcpy(cp, temp_buf, buf_size);
+    memcpy(cp, temp_buf, n);
+
+    for (n = 0; n < rounds; n++) {
+        if (!EVP_DigestInit_ex(md2, sha, NULL))
+            goto err;
+        if (!EVP_DigestUpdate(md2,
+                              (n & 1) ? (unsigned const char *)p_bytes : buf,
+                              (n & 1) ? passwd_len : buf_size))
+            goto err;
+        if (n % 3) {
+            if (!EVP_DigestUpdate(md2, s_bytes, salt_len))
+                goto err;
+        }
+        if (n % 7) {
+            if (!EVP_DigestUpdate(md2, p_bytes, passwd_len))
+                goto err;
+        }
+        if (!EVP_DigestUpdate(md2,
+                              (n & 1) ? buf : (unsigned const char *)p_bytes,
+                              (n & 1) ? buf_size : passwd_len))
+                goto err;
+        if (!EVP_DigestFinal_ex(md2, buf, NULL))
+                goto err;
+    }
+    EVP_MD_CTX_free(md2);
+    EVP_MD_CTX_free(md);
+    md2 = NULL;
+    md = NULL;
+    OPENSSL_free(p_bytes);
+    OPENSSL_free(s_bytes);
+    p_bytes = NULL;
+    s_bytes = NULL;
+
+    cp = out_buf + strlen(out_buf);
+    *cp++ = ascii_dollar[0];
+
+# define b64_from_24bit(B2, B1, B0, N)                                   \
+    do {                                                                \
+        unsigned int w = ((B2) << 16) | ((B1) << 8) | (B0);             \
+        int i = (N);                                                    \
+        while (i-- > 0)                                                 \
+            {                                                           \
+                *cp++ = cov_2char[w & 0x3f];                            \
+                w >>= 6;                                                \
+            }                                                           \
+    } while (0)
+
+    switch (magic[0]) {
+    case '5':
+        b64_from_24bit (buf[0], buf[10], buf[20], 4);
+        b64_from_24bit (buf[21], buf[1], buf[11], 4);
+        b64_from_24bit (buf[12], buf[22], buf[2], 4);
+        b64_from_24bit (buf[3], buf[13], buf[23], 4);
+        b64_from_24bit (buf[24], buf[4], buf[14], 4);
+        b64_from_24bit (buf[15], buf[25], buf[5], 4);
+        b64_from_24bit (buf[6], buf[16], buf[26], 4);
+        b64_from_24bit (buf[27], buf[7], buf[17], 4);
+        b64_from_24bit (buf[18], buf[28], buf[8], 4);
+        b64_from_24bit (buf[9], buf[19], buf[29], 4);
+        b64_from_24bit (0, buf[31], buf[30], 3);
+        break;
+    case '6':
+        b64_from_24bit (buf[0], buf[21], buf[42], 4);
+        b64_from_24bit (buf[22], buf[43], buf[1], 4);
+        b64_from_24bit (buf[44], buf[2], buf[23], 4);
+        b64_from_24bit (buf[3], buf[24], buf[45], 4);
+        b64_from_24bit (buf[25], buf[46], buf[4], 4);
+        b64_from_24bit (buf[47], buf[5], buf[26], 4);
+        b64_from_24bit (buf[6], buf[27], buf[48], 4);
+        b64_from_24bit (buf[28], buf[49], buf[7], 4);
+        b64_from_24bit (buf[50], buf[8], buf[29], 4);
+        b64_from_24bit (buf[9], buf[30], buf[51], 4);
+        b64_from_24bit (buf[31], buf[52], buf[10], 4);
+        b64_from_24bit (buf[53], buf[11], buf[32], 4);
+        b64_from_24bit (buf[12], buf[33], buf[54], 4);
+        b64_from_24bit (buf[34], buf[55], buf[13], 4);
+        b64_from_24bit (buf[56], buf[14], buf[35], 4);
+        b64_from_24bit (buf[15], buf[36], buf[57], 4);
+        b64_from_24bit (buf[37], buf[58], buf[16], 4);
+        b64_from_24bit (buf[59], buf[17], buf[38], 4);
+        b64_from_24bit (buf[18], buf[39], buf[60], 4);
+        b64_from_24bit (buf[40], buf[61], buf[19], 4);
+        b64_from_24bit (buf[62], buf[20], buf[41], 4);
+        b64_from_24bit (0, 0, buf[63], 2);
+        break;
+    default:
+        goto err;
+    }
+    *cp = '\0';
+#ifdef CHARSET_EBCDIC
+    ascii2ebcdic(out_buf, out_buf, strlen(out_buf));
+#endif
+
+    return out_buf;
+
+ err:
+    EVP_MD_CTX_free(md2);
+    EVP_MD_CTX_free(md);
+    OPENSSL_free(p_bytes);
+    OPENSSL_free(s_bytes);
+    OPENSSL_free(ascii_passwd);
+    return NULL;
+}
+
+static int do_passwd(int passed_salt, char **salt_p, char **salt_malloc_p,
+                     char *passwd, BIO *out, int quiet, int table,
+                     int reverse, size_t pw_maxlen, passwd_modes mode)
+{
+    char *hash = NULL;
+
+    assert(salt_p != NULL);
+    assert(salt_malloc_p != NULL);
+
+    /* first make sure we have a salt */
+    if (!passed_salt) {
+        size_t saltlen = 0;
+        size_t i;
+
+#ifndef OPENSSL_NO_DES
+        if (mode == passwd_crypt)
+            saltlen = 2;
+#endif                         /* !OPENSSL_NO_DES */
+
+        if (mode == passwd_md5 || mode == passwd_apr1 || mode == passwd_aixmd5)
+            saltlen = 8;
+
+        if (mode == passwd_sha256 || mode == passwd_sha512)
+            saltlen = 16;
+
+        assert(saltlen != 0);
+
+        if (*salt_malloc_p == NULL)
+            *salt_p = *salt_malloc_p = app_malloc(saltlen + 1, "salt buffer");
+        if (RAND_bytes((unsigned char *)*salt_p, saltlen) <= 0)
+            goto end;
+
+        for (i = 0; i < saltlen; i++)
+            (*salt_p)[i] = cov_2char[(*salt_p)[i] & 0x3f]; /* 6 bits */
+        (*salt_p)[i] = 0;
+# ifdef CHARSET_EBCDIC
+        /* The password encryption funtion will convert back to ASCII */
+        ascii2ebcdic(*salt_p, *salt_p, saltlen);
+# endif
+    }
+
+    assert(*salt_p != NULL);
+
+    /* truncate password if necessary */
+    if ((strlen(passwd) > pw_maxlen)) {
+        if (!quiet)
+            /*
+             * XXX: really we should know how to print a size_t, not cast it
+             */
+            BIO_printf(bio_err,
+                       "Warning: truncating password to %u characters\n",
+                       (unsigned)pw_maxlen);
+        passwd[pw_maxlen] = 0;
+    }
+    assert(strlen(passwd) <= pw_maxlen);
+
+    /* now compute password hash */
+#ifndef OPENSSL_NO_DES
+    if (mode == passwd_crypt)
+        hash = DES_crypt(passwd, *salt_p);
+#endif
+    if (mode == passwd_md5 || mode == passwd_apr1)
+        hash = md5crypt(passwd, (mode == passwd_md5 ? "1" : "apr1"), *salt_p);
+    if (mode == passwd_aixmd5)
+        hash = md5crypt(passwd, "", *salt_p);
+    if (mode == passwd_sha256 || mode == passwd_sha512)
+        hash = shacrypt(passwd, (mode == passwd_sha256 ? "5" : "6"), *salt_p);
+    assert(hash != NULL);
+
+    if (table && !reverse)
+        BIO_printf(out, "%s\t%s\n", passwd, hash);
+    else if (table && reverse)
+        BIO_printf(out, "%s\t%s\n", hash, passwd);
+    else
+        BIO_printf(out, "%s\n", hash);
+    return 1;
+
+ end:
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/pca-cert.srl b/trunk/3rdparty/openssl-1.1-fit/apps/pca-cert.srl
new file mode 100644
index 000000000..2c7456e3e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/pca-cert.srl
@@ -0,0 +1 @@
+07
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/pca-key.pem b/trunk/3rdparty/openssl-1.1-fit/apps/pca-key.pem
new file mode 100644
index 000000000..c6ad0e92d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/pca-key.pem
@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----
+MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBALYYjjtpLs/lfkPF
+xAFZ4V3He5mZFbsEakK9bA2fQaryreRwyfhbXbDJHyBV+c4xI5fbmmVd2t/us4k4
+rMhGsBtL89SqCEHhPJpLFywiQVmJTAjANYrWkZK5uR/++YmZyzuLfPHLButuK6cF
+GKXw3NNToxjYooMf0mad2rPX3cKTAgMBAAECgYBvrJ+Nz/Pli9jjt2V9bqHH4Y7r
+o/avuwVv6Ltbn0+mhy4d6w3yQhYzVSTBr/iDe59YglUt1WFl8/4nKZrNOIzHJlav
+Sw4hd3fYBHxbT+DgZMQ9ikjHECWRdDffrnlTLsSJAcxnpMJBPe3dKCRDMUrqWUvB
+IIKaxyqmXJms5Y/wAQJBAPFL9NMKJcWBftMKXCasxsV0ZGjgqHGZODYjtGFN9jJO
+6AbZrxfCcapTWG4RCC2o/EDEMN8aArEhfdrYY3lhXGsCQQDBMRzFevkD7SYXTw5G
+NA/gJOAsFMYbt7tebcCRsHT7t3ymVfO2QwK7ZF0f/SYvi7cMAPraHvO7s3kFdGTB
+kDx5AkAHBICASsFCdzurA5gef9PgFjx9WFtNwnkCChPK6KuKVwUkfdw7wqnvnDDs
+Mo6cVVfQwmPxeR4u7JxuavCprQ01AkEAp5ZGAh1J9Jj9CQ1AMbAp8WOrvzGKJTM9
+641Dll4/LLif/d7j2kDJFuvaSMyeGnKVqGkVMq/U+QeYPR4Z5TuM6QJAWK05qFed
+wYgTZyVN0MY53ZOMAIWwjz0cr24TvDfmsZqIvguGL616GKQZKdKDZQyQHg+dCzqJ
+HgIoacuFDKz5CA==
+-----END PRIVATE KEY-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/pca-req.pem b/trunk/3rdparty/openssl-1.1-fit/apps/pca-req.pem
new file mode 100644
index 000000000..5a8c5cbf1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/pca-req.pem
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/pkcs12.c b/trunk/3rdparty/openssl-1.1-fit/apps/pkcs12.c
new file mode 100644
index 000000000..719a309a8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/pkcs12.c
@@ -0,0 +1,968 @@
+/*
+ * Copyright 1999-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#if defined(OPENSSL_NO_DES)
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <stdio.h>
+# include <stdlib.h>
+# include <string.h>
+# include "apps.h"
+# include "progs.h"
+# include <openssl/crypto.h>
+# include <openssl/err.h>
+# include <openssl/pem.h>
+# include <openssl/pkcs12.h>
+
+# define NOKEYS          0x1
+# define NOCERTS         0x2
+# define INFO            0x4
+# define CLCERTS         0x8
+# define CACERTS         0x10
+
+#define PASSWD_BUF_SIZE 2048
+
+static int get_cert_chain(X509 *cert, X509_STORE *store,
+                          STACK_OF(X509) **chain);
+int dump_certs_keys_p12(BIO *out, const PKCS12 *p12,
+                        const char *pass, int passlen, int options,
+                        char *pempass, const EVP_CIPHER *enc);
+int dump_certs_pkeys_bags(BIO *out, const STACK_OF(PKCS12_SAFEBAG) *bags,
+                          const char *pass, int passlen, int options,
+                          char *pempass, const EVP_CIPHER *enc);
+int dump_certs_pkeys_bag(BIO *out, const PKCS12_SAFEBAG *bags,
+                         const char *pass, int passlen,
+                         int options, char *pempass, const EVP_CIPHER *enc);
+int print_attribs(BIO *out, const STACK_OF(X509_ATTRIBUTE) *attrlst,
+                  const char *name);
+void hex_prin(BIO *out, unsigned char *buf, int len);
+static int alg_print(const X509_ALGOR *alg);
+int cert_load(BIO *in, STACK_OF(X509) *sk);
+static int set_pbe(int *ppbe, const char *str);
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_CIPHER, OPT_NOKEYS, OPT_KEYEX, OPT_KEYSIG, OPT_NOCERTS, OPT_CLCERTS,
+    OPT_CACERTS, OPT_NOOUT, OPT_INFO, OPT_CHAIN, OPT_TWOPASS, OPT_NOMACVER,
+    OPT_DESCERT, OPT_EXPORT, OPT_NOITER, OPT_MACITER, OPT_NOMACITER,
+    OPT_NOMAC, OPT_LMK, OPT_NODES, OPT_MACALG, OPT_CERTPBE, OPT_KEYPBE,
+    OPT_INKEY, OPT_CERTFILE, OPT_NAME, OPT_CSP, OPT_CANAME,
+    OPT_IN, OPT_OUT, OPT_PASSIN, OPT_PASSOUT, OPT_PASSWORD, OPT_CAPATH,
+    OPT_CAFILE, OPT_NOCAPATH, OPT_NOCAFILE, OPT_ENGINE,
+    OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS pkcs12_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"nokeys", OPT_NOKEYS, '-', "Don't output private keys"},
+    {"keyex", OPT_KEYEX, '-', "Set MS key exchange type"},
+    {"keysig", OPT_KEYSIG, '-', "Set MS key signature type"},
+    {"nocerts", OPT_NOCERTS, '-', "Don't output certificates"},
+    {"clcerts", OPT_CLCERTS, '-', "Only output client certificates"},
+    {"cacerts", OPT_CACERTS, '-', "Only output CA certificates"},
+    {"noout", OPT_NOOUT, '-', "Don't output anything, just verify"},
+    {"info", OPT_INFO, '-', "Print info about PKCS#12 structure"},
+    {"chain", OPT_CHAIN, '-', "Add certificate chain"},
+    {"twopass", OPT_TWOPASS, '-', "Separate MAC, encryption passwords"},
+    {"nomacver", OPT_NOMACVER, '-', "Don't verify MAC"},
+# ifndef OPENSSL_NO_RC2
+    {"descert", OPT_DESCERT, '-',
+     "Encrypt output with 3DES (default RC2-40)"},
+    {"certpbe", OPT_CERTPBE, 's',
+     "Certificate PBE algorithm (default RC2-40)"},
+# else
+    {"descert", OPT_DESCERT, '-', "Encrypt output with 3DES (the default)"},
+    {"certpbe", OPT_CERTPBE, 's', "Certificate PBE algorithm (default 3DES)"},
+# endif
+    {"export", OPT_EXPORT, '-', "Output PKCS12 file"},
+    {"noiter", OPT_NOITER, '-', "Don't use encryption iteration"},
+    {"maciter", OPT_MACITER, '-', "Use MAC iteration"},
+    {"nomaciter", OPT_NOMACITER, '-', "Don't use MAC iteration"},
+    {"nomac", OPT_NOMAC, '-', "Don't generate MAC"},
+    {"LMK", OPT_LMK, '-',
+     "Add local machine keyset attribute to private key"},
+    {"nodes", OPT_NODES, '-', "Don't encrypt private keys"},
+    {"macalg", OPT_MACALG, 's',
+     "Digest algorithm used in MAC (default SHA1)"},
+    {"keypbe", OPT_KEYPBE, 's', "Private key PBE algorithm (default 3DES)"},
+    OPT_R_OPTIONS,
+    {"inkey", OPT_INKEY, 's', "Private key if not infile"},
+    {"certfile", OPT_CERTFILE, '<', "Load certs from file"},
+    {"name", OPT_NAME, 's', "Use name as friendly name"},
+    {"CSP", OPT_CSP, 's', "Microsoft CSP name"},
+    {"caname", OPT_CANAME, 's',
+     "Use name as CA friendly name (can be repeated)"},
+    {"in", OPT_IN, '<', "Input filename"},
+    {"out", OPT_OUT, '>', "Output filename"},
+    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
+    {"passout", OPT_PASSOUT, 's', "Output file pass phrase source"},
+    {"password", OPT_PASSWORD, 's', "Set import/export password source"},
+    {"CApath", OPT_CAPATH, '/', "PEM-format directory of CA's"},
+    {"CAfile", OPT_CAFILE, '<', "PEM-format file of CA's"},
+    {"no-CAfile", OPT_NOCAFILE, '-',
+     "Do not load the default certificates file"},
+    {"no-CApath", OPT_NOCAPATH, '-',
+     "Do not load certificates from the default certificates directory"},
+    {"", OPT_CIPHER, '-', "Any supported cipher"},
+# ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+# endif
+    {NULL}
+};
+
+int pkcs12_main(int argc, char **argv)
+{
+    char *infile = NULL, *outfile = NULL, *keyname = NULL, *certfile = NULL;
+    char *name = NULL, *csp_name = NULL;
+    char pass[PASSWD_BUF_SIZE] = "", macpass[PASSWD_BUF_SIZE] = "";
+    int export_cert = 0, options = 0, chain = 0, twopass = 0, keytype = 0;
+    int iter = PKCS12_DEFAULT_ITER, maciter = PKCS12_DEFAULT_ITER;
+# ifndef OPENSSL_NO_RC2
+    int cert_pbe = NID_pbe_WithSHA1And40BitRC2_CBC;
+# else
+    int cert_pbe = NID_pbe_WithSHA1And3_Key_TripleDES_CBC;
+# endif
+    int key_pbe = NID_pbe_WithSHA1And3_Key_TripleDES_CBC;
+    int ret = 1, macver = 1, add_lmk = 0, private = 0;
+    int noprompt = 0;
+    char *passinarg = NULL, *passoutarg = NULL, *passarg = NULL;
+    char *passin = NULL, *passout = NULL, *macalg = NULL;
+    char *cpass = NULL, *mpass = NULL, *badpass = NULL;
+    const char *CApath = NULL, *CAfile = NULL, *prog;
+    int noCApath = 0, noCAfile = 0;
+    ENGINE *e = NULL;
+    BIO *in = NULL, *out = NULL;
+    PKCS12 *p12 = NULL;
+    STACK_OF(OPENSSL_STRING) *canames = NULL;
+    const EVP_CIPHER *enc = EVP_des_ede3_cbc();
+    OPTION_CHOICE o;
+
+    prog = opt_init(argc, argv, pkcs12_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(pkcs12_options);
+            ret = 0;
+            goto end;
+        case OPT_NOKEYS:
+            options |= NOKEYS;
+            break;
+        case OPT_KEYEX:
+            keytype = KEY_EX;
+            break;
+        case OPT_KEYSIG:
+            keytype = KEY_SIG;
+            break;
+        case OPT_NOCERTS:
+            options |= NOCERTS;
+            break;
+        case OPT_CLCERTS:
+            options |= CLCERTS;
+            break;
+        case OPT_CACERTS:
+            options |= CACERTS;
+            break;
+        case OPT_NOOUT:
+            options |= (NOKEYS | NOCERTS);
+            break;
+        case OPT_INFO:
+            options |= INFO;
+            break;
+        case OPT_CHAIN:
+            chain = 1;
+            break;
+        case OPT_TWOPASS:
+            twopass = 1;
+            break;
+        case OPT_NOMACVER:
+            macver = 0;
+            break;
+        case OPT_DESCERT:
+            cert_pbe = NID_pbe_WithSHA1And3_Key_TripleDES_CBC;
+            break;
+        case OPT_EXPORT:
+            export_cert = 1;
+            break;
+        case OPT_CIPHER:
+            if (!opt_cipher(opt_unknown(), &enc))
+                goto opthelp;
+            break;
+        case OPT_NOITER:
+            iter = 1;
+            break;
+        case OPT_MACITER:
+            maciter = PKCS12_DEFAULT_ITER;
+            break;
+        case OPT_NOMACITER:
+            maciter = 1;
+            break;
+        case OPT_NOMAC:
+            maciter = -1;
+            break;
+        case OPT_MACALG:
+            macalg = opt_arg();
+            break;
+        case OPT_NODES:
+            enc = NULL;
+            break;
+        case OPT_CERTPBE:
+            if (!set_pbe(&cert_pbe, opt_arg()))
+                goto opthelp;
+            break;
+        case OPT_KEYPBE:
+            if (!set_pbe(&key_pbe, opt_arg()))
+                goto opthelp;
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_INKEY:
+            keyname = opt_arg();
+            break;
+        case OPT_CERTFILE:
+            certfile = opt_arg();
+            break;
+        case OPT_NAME:
+            name = opt_arg();
+            break;
+        case OPT_LMK:
+            add_lmk = 1;
+            break;
+        case OPT_CSP:
+            csp_name = opt_arg();
+            break;
+        case OPT_CANAME:
+            if (canames == NULL
+                && (canames = sk_OPENSSL_STRING_new_null()) == NULL)
+                goto end;
+            sk_OPENSSL_STRING_push(canames, opt_arg());
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_PASSIN:
+            passinarg = opt_arg();
+            break;
+        case OPT_PASSOUT:
+            passoutarg = opt_arg();
+            break;
+        case OPT_PASSWORD:
+            passarg = opt_arg();
+            break;
+        case OPT_CAPATH:
+            CApath = opt_arg();
+            break;
+        case OPT_CAFILE:
+            CAfile = opt_arg();
+            break;
+        case OPT_NOCAPATH:
+            noCApath = 1;
+            break;
+        case OPT_NOCAFILE:
+            noCAfile = 1;
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    private = 1;
+
+    if (passarg != NULL) {
+        if (export_cert)
+            passoutarg = passarg;
+        else
+            passinarg = passarg;
+    }
+
+    if (!app_passwd(passinarg, passoutarg, &passin, &passout)) {
+        BIO_printf(bio_err, "Error getting passwords\n");
+        goto end;
+    }
+
+    if (cpass == NULL) {
+        if (export_cert)
+            cpass = passout;
+        else
+            cpass = passin;
+    }
+
+    if (cpass != NULL) {
+        mpass = cpass;
+        noprompt = 1;
+        if (twopass) {
+            if (export_cert)
+                BIO_printf(bio_err, "Option -twopass cannot be used with -passout or -password\n");
+            else
+                BIO_printf(bio_err, "Option -twopass cannot be used with -passin or -password\n");
+            goto end;
+        }
+    } else {
+        cpass = pass;
+        mpass = macpass;
+    }
+
+    if (twopass) {
+        /* To avoid bit rot */
+        if (1) {
+#ifndef OPENSSL_NO_UI_CONSOLE
+            if (EVP_read_pw_string(
+                macpass, sizeof(macpass), "Enter MAC Password:", export_cert)) {
+                BIO_printf(bio_err, "Can't read Password\n");
+                goto end;
+            }
+        } else {
+#endif
+            BIO_printf(bio_err, "Unsupported option -twopass\n");
+            goto end;
+        }
+    }
+
+    if (export_cert) {
+        EVP_PKEY *key = NULL;
+        X509 *ucert = NULL, *x = NULL;
+        STACK_OF(X509) *certs = NULL;
+        const EVP_MD *macmd = NULL;
+        unsigned char *catmp = NULL;
+        int i;
+
+        if ((options & (NOCERTS | NOKEYS)) == (NOCERTS | NOKEYS)) {
+            BIO_printf(bio_err, "Nothing to do!\n");
+            goto export_end;
+        }
+
+        if (options & NOCERTS)
+            chain = 0;
+
+        if (!(options & NOKEYS)) {
+            key = load_key(keyname ? keyname : infile,
+                           FORMAT_PEM, 1, passin, e, "private key");
+            if (key == NULL)
+                goto export_end;
+        }
+
+        /* Load in all certs in input file */
+        if (!(options & NOCERTS)) {
+            if (!load_certs(infile, &certs, FORMAT_PEM, NULL,
+                            "certificates"))
+                goto export_end;
+
+            if (key != NULL) {
+                /* Look for matching private key */
+                for (i = 0; i < sk_X509_num(certs); i++) {
+                    x = sk_X509_value(certs, i);
+                    if (X509_check_private_key(x, key)) {
+                        ucert = x;
+                        /* Zero keyid and alias */
+                        X509_keyid_set1(ucert, NULL, 0);
+                        X509_alias_set1(ucert, NULL, 0);
+                        /* Remove from list */
+                        (void)sk_X509_delete(certs, i);
+                        break;
+                    }
+                }
+                if (ucert == NULL) {
+                    BIO_printf(bio_err,
+                               "No certificate matches private key\n");
+                    goto export_end;
+                }
+            }
+
+        }
+
+        /* Add any more certificates asked for */
+        if (certfile != NULL) {
+            if (!load_certs(certfile, &certs, FORMAT_PEM, NULL,
+                            "certificates from certfile"))
+                goto export_end;
+        }
+
+        /* If chaining get chain from user cert */
+        if (chain) {
+            int vret;
+            STACK_OF(X509) *chain2;
+            X509_STORE *store;
+            if ((store = setup_verify(CAfile, CApath, noCAfile, noCApath))
+                    == NULL)
+                goto export_end;
+
+            vret = get_cert_chain(ucert, store, &chain2);
+            X509_STORE_free(store);
+
+            if (vret == X509_V_OK) {
+                /* Exclude verified certificate */
+                for (i = 1; i < sk_X509_num(chain2); i++)
+                    sk_X509_push(certs, sk_X509_value(chain2, i));
+                /* Free first certificate */
+                X509_free(sk_X509_value(chain2, 0));
+                sk_X509_free(chain2);
+            } else {
+                if (vret != X509_V_ERR_UNSPECIFIED)
+                    BIO_printf(bio_err, "Error %s getting chain.\n",
+                               X509_verify_cert_error_string(vret));
+                else
+                    ERR_print_errors(bio_err);
+                goto export_end;
+            }
+        }
+
+        /* Add any CA names */
+
+        for (i = 0; i < sk_OPENSSL_STRING_num(canames); i++) {
+            catmp = (unsigned char *)sk_OPENSSL_STRING_value(canames, i);
+            X509_alias_set1(sk_X509_value(certs, i), catmp, -1);
+        }
+
+        if (csp_name != NULL && key != NULL)
+            EVP_PKEY_add1_attr_by_NID(key, NID_ms_csp_name,
+                                      MBSTRING_ASC, (unsigned char *)csp_name,
+                                      -1);
+
+        if (add_lmk && key != NULL)
+            EVP_PKEY_add1_attr_by_NID(key, NID_LocalKeySet, 0, NULL, -1);
+
+        if (!noprompt) {
+            /* To avoid bit rot */
+            if (1) {
+#ifndef OPENSSL_NO_UI_CONSOLE
+                if (EVP_read_pw_string(pass, sizeof(pass),
+                                       "Enter Export Password:", 1)) {
+                    BIO_printf(bio_err, "Can't read Password\n");
+                    goto export_end;
+                }
+            } else {
+#endif
+                BIO_printf(bio_err, "Password required\n");
+                goto export_end;
+            }
+        }
+
+        if (!twopass)
+            OPENSSL_strlcpy(macpass, pass, sizeof(macpass));
+
+        p12 = PKCS12_create(cpass, name, key, ucert, certs,
+                            key_pbe, cert_pbe, iter, -1, keytype);
+
+        if (!p12) {
+            ERR_print_errors(bio_err);
+            goto export_end;
+        }
+
+        if (macalg) {
+            if (!opt_md(macalg, &macmd))
+                goto opthelp;
+        }
+
+        if (maciter != -1)
+            PKCS12_set_mac(p12, mpass, -1, NULL, 0, maciter, macmd);
+
+        assert(private);
+
+        out = bio_open_owner(outfile, FORMAT_PKCS12, private);
+        if (out == NULL)
+            goto end;
+
+        i2d_PKCS12_bio(out, p12);
+
+        ret = 0;
+
+ export_end:
+
+        EVP_PKEY_free(key);
+        sk_X509_pop_free(certs, X509_free);
+        X509_free(ucert);
+
+        goto end;
+
+    }
+
+    in = bio_open_default(infile, 'r', FORMAT_PKCS12);
+    if (in == NULL)
+        goto end;
+    out = bio_open_owner(outfile, FORMAT_PEM, private);
+    if (out == NULL)
+        goto end;
+
+    if ((p12 = d2i_PKCS12_bio(in, NULL)) == NULL) {
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    if (!noprompt) {
+        if (1) {
+#ifndef OPENSSL_NO_UI_CONSOLE
+            if (EVP_read_pw_string(pass, sizeof(pass), "Enter Import Password:",
+                                   0)) {
+                BIO_printf(bio_err, "Can't read Password\n");
+                goto end;
+            }
+        } else {
+#endif
+            BIO_printf(bio_err, "Password required\n");
+            goto end;
+        }
+    }
+
+    if (!twopass)
+        OPENSSL_strlcpy(macpass, pass, sizeof(macpass));
+
+    if ((options & INFO) && PKCS12_mac_present(p12)) {
+        const ASN1_INTEGER *tmaciter;
+        const X509_ALGOR *macalgid;
+        const ASN1_OBJECT *macobj;
+        const ASN1_OCTET_STRING *tmac;
+        const ASN1_OCTET_STRING *tsalt;
+
+        PKCS12_get0_mac(&tmac, &macalgid, &tsalt, &tmaciter, p12);
+        /* current hash algorithms do not use parameters so extract just name,
+           in future alg_print() may be needed */
+        X509_ALGOR_get0(&macobj, NULL, NULL, macalgid);
+        BIO_puts(bio_err, "MAC: ");
+        i2a_ASN1_OBJECT(bio_err, macobj);
+        BIO_printf(bio_err, ", Iteration %ld\n",
+                   tmaciter != NULL ? ASN1_INTEGER_get(tmaciter) : 1L);
+        BIO_printf(bio_err, "MAC length: %ld, salt length: %ld\n",
+                   tmac != NULL ? ASN1_STRING_length(tmac) : 0L,
+                   tsalt != NULL ? ASN1_STRING_length(tsalt) : 0L);
+    }
+    if (macver) {
+        /* If we enter empty password try no password first */
+        if (!mpass[0] && PKCS12_verify_mac(p12, NULL, 0)) {
+            /* If mac and crypto pass the same set it to NULL too */
+            if (!twopass)
+                cpass = NULL;
+        } else if (!PKCS12_verify_mac(p12, mpass, -1)) {
+            /*
+             * May be UTF8 from previous version of OpenSSL:
+             * convert to a UTF8 form which will translate
+             * to the same Unicode password.
+             */
+            unsigned char *utmp;
+            int utmplen;
+            utmp = OPENSSL_asc2uni(mpass, -1, NULL, &utmplen);
+            if (utmp == NULL)
+                goto end;
+            badpass = OPENSSL_uni2utf8(utmp, utmplen);
+            OPENSSL_free(utmp);
+            if (!PKCS12_verify_mac(p12, badpass, -1)) {
+                BIO_printf(bio_err, "Mac verify error: invalid password?\n");
+                ERR_print_errors(bio_err);
+                goto end;
+            } else {
+                BIO_printf(bio_err, "Warning: using broken algorithm\n");
+                if (!twopass)
+                    cpass = badpass;
+            }
+        }
+    }
+
+    assert(private);
+    if (!dump_certs_keys_p12(out, p12, cpass, -1, options, passout, enc)) {
+        BIO_printf(bio_err, "Error outputting keys and certificates\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+    ret = 0;
+ end:
+    PKCS12_free(p12);
+    release_engine(e);
+    BIO_free(in);
+    BIO_free_all(out);
+    sk_OPENSSL_STRING_free(canames);
+    OPENSSL_free(badpass);
+    OPENSSL_free(passin);
+    OPENSSL_free(passout);
+    return ret;
+}
+
+int dump_certs_keys_p12(BIO *out, const PKCS12 *p12, const char *pass,
+                        int passlen, int options, char *pempass,
+                        const EVP_CIPHER *enc)
+{
+    STACK_OF(PKCS7) *asafes = NULL;
+    STACK_OF(PKCS12_SAFEBAG) *bags;
+    int i, bagnid;
+    int ret = 0;
+    PKCS7 *p7;
+
+    if ((asafes = PKCS12_unpack_authsafes(p12)) == NULL)
+        return 0;
+    for (i = 0; i < sk_PKCS7_num(asafes); i++) {
+        p7 = sk_PKCS7_value(asafes, i);
+        bagnid = OBJ_obj2nid(p7->type);
+        if (bagnid == NID_pkcs7_data) {
+            bags = PKCS12_unpack_p7data(p7);
+            if (options & INFO)
+                BIO_printf(bio_err, "PKCS7 Data\n");
+        } else if (bagnid == NID_pkcs7_encrypted) {
+            if (options & INFO) {
+                BIO_printf(bio_err, "PKCS7 Encrypted data: ");
+                alg_print(p7->d.encrypted->enc_data->algorithm);
+            }
+            bags = PKCS12_unpack_p7encdata(p7, pass, passlen);
+        } else {
+            continue;
+        }
+        if (!bags)
+            goto err;
+        if (!dump_certs_pkeys_bags(out, bags, pass, passlen,
+                                   options, pempass, enc)) {
+            sk_PKCS12_SAFEBAG_pop_free(bags, PKCS12_SAFEBAG_free);
+            goto err;
+        }
+        sk_PKCS12_SAFEBAG_pop_free(bags, PKCS12_SAFEBAG_free);
+        bags = NULL;
+    }
+    ret = 1;
+
+ err:
+    sk_PKCS7_pop_free(asafes, PKCS7_free);
+    return ret;
+}
+
+int dump_certs_pkeys_bags(BIO *out, const STACK_OF(PKCS12_SAFEBAG) *bags,
+                          const char *pass, int passlen, int options,
+                          char *pempass, const EVP_CIPHER *enc)
+{
+    int i;
+    for (i = 0; i < sk_PKCS12_SAFEBAG_num(bags); i++) {
+        if (!dump_certs_pkeys_bag(out,
+                                  sk_PKCS12_SAFEBAG_value(bags, i),
+                                  pass, passlen, options, pempass, enc))
+            return 0;
+    }
+    return 1;
+}
+
+int dump_certs_pkeys_bag(BIO *out, const PKCS12_SAFEBAG *bag,
+                         const char *pass, int passlen, int options,
+                         char *pempass, const EVP_CIPHER *enc)
+{
+    EVP_PKEY *pkey;
+    PKCS8_PRIV_KEY_INFO *p8;
+    const PKCS8_PRIV_KEY_INFO *p8c;
+    X509 *x509;
+    const STACK_OF(X509_ATTRIBUTE) *attrs;
+    int ret = 0;
+
+    attrs = PKCS12_SAFEBAG_get0_attrs(bag);
+
+    switch (PKCS12_SAFEBAG_get_nid(bag)) {
+    case NID_keyBag:
+        if (options & INFO)
+            BIO_printf(bio_err, "Key bag\n");
+        if (options & NOKEYS)
+            return 1;
+        print_attribs(out, attrs, "Bag Attributes");
+        p8c = PKCS12_SAFEBAG_get0_p8inf(bag);
+        if ((pkey = EVP_PKCS82PKEY(p8c)) == NULL)
+            return 0;
+        print_attribs(out, PKCS8_pkey_get0_attrs(p8c), "Key Attributes");
+        ret = PEM_write_bio_PrivateKey(out, pkey, enc, NULL, 0, NULL, pempass);
+        EVP_PKEY_free(pkey);
+        break;
+
+    case NID_pkcs8ShroudedKeyBag:
+        if (options & INFO) {
+            const X509_SIG *tp8;
+            const X509_ALGOR *tp8alg;
+
+            BIO_printf(bio_err, "Shrouded Keybag: ");
+            tp8 = PKCS12_SAFEBAG_get0_pkcs8(bag);
+            X509_SIG_get0(tp8, &tp8alg, NULL);
+            alg_print(tp8alg);
+        }
+        if (options & NOKEYS)
+            return 1;
+        print_attribs(out, attrs, "Bag Attributes");
+        if ((p8 = PKCS12_decrypt_skey(bag, pass, passlen)) == NULL)
+            return 0;
+        if ((pkey = EVP_PKCS82PKEY(p8)) == NULL) {
+            PKCS8_PRIV_KEY_INFO_free(p8);
+            return 0;
+        }
+        print_attribs(out, PKCS8_pkey_get0_attrs(p8), "Key Attributes");
+        PKCS8_PRIV_KEY_INFO_free(p8);
+        ret = PEM_write_bio_PrivateKey(out, pkey, enc, NULL, 0, NULL, pempass);
+        EVP_PKEY_free(pkey);
+        break;
+
+    case NID_certBag:
+        if (options & INFO)
+            BIO_printf(bio_err, "Certificate bag\n");
+        if (options & NOCERTS)
+            return 1;
+        if (PKCS12_SAFEBAG_get0_attr(bag, NID_localKeyID)) {
+            if (options & CACERTS)
+                return 1;
+        } else if (options & CLCERTS)
+            return 1;
+        print_attribs(out, attrs, "Bag Attributes");
+        if (PKCS12_SAFEBAG_get_bag_nid(bag) != NID_x509Certificate)
+            return 1;
+        if ((x509 = PKCS12_SAFEBAG_get1_cert(bag)) == NULL)
+            return 0;
+        dump_cert_text(out, x509);
+        ret = PEM_write_bio_X509(out, x509);
+        X509_free(x509);
+        break;
+
+    case NID_safeContentsBag:
+        if (options & INFO)
+            BIO_printf(bio_err, "Safe Contents bag\n");
+        print_attribs(out, attrs, "Bag Attributes");
+        return dump_certs_pkeys_bags(out, PKCS12_SAFEBAG_get0_safes(bag),
+                                     pass, passlen, options, pempass, enc);
+
+    default:
+        BIO_printf(bio_err, "Warning unsupported bag type: ");
+        i2a_ASN1_OBJECT(bio_err, PKCS12_SAFEBAG_get0_type(bag));
+        BIO_printf(bio_err, "\n");
+        return 1;
+    }
+    return ret;
+}
+
+/* Given a single certificate return a verified chain or NULL if error */
+
+static int get_cert_chain(X509 *cert, X509_STORE *store,
+                          STACK_OF(X509) **chain)
+{
+    X509_STORE_CTX *store_ctx = NULL;
+    STACK_OF(X509) *chn = NULL;
+    int i = 0;
+
+    store_ctx = X509_STORE_CTX_new();
+    if (store_ctx == NULL) {
+        i =  X509_V_ERR_UNSPECIFIED;
+        goto end;
+    }
+    if (!X509_STORE_CTX_init(store_ctx, store, cert, NULL)) {
+        i =  X509_V_ERR_UNSPECIFIED;
+        goto end;
+    }
+
+
+    if (X509_verify_cert(store_ctx) > 0)
+        chn = X509_STORE_CTX_get1_chain(store_ctx);
+    else if ((i = X509_STORE_CTX_get_error(store_ctx)) == 0)
+        i = X509_V_ERR_UNSPECIFIED;
+
+end:
+    X509_STORE_CTX_free(store_ctx);
+    *chain = chn;
+    return i;
+}
+
+static int alg_print(const X509_ALGOR *alg)
+{
+    int pbenid, aparamtype;
+    const ASN1_OBJECT *aoid;
+    const void *aparam;
+    PBEPARAM *pbe = NULL;
+
+    X509_ALGOR_get0(&aoid, &aparamtype, &aparam, alg);
+
+    pbenid = OBJ_obj2nid(aoid);
+
+    BIO_printf(bio_err, "%s", OBJ_nid2ln(pbenid));
+
+    /*
+     * If PBE algorithm is PBES2 decode algorithm parameters
+     * for additional details.
+     */
+    if (pbenid == NID_pbes2) {
+        PBE2PARAM *pbe2 = NULL;
+        int encnid;
+        if (aparamtype == V_ASN1_SEQUENCE)
+            pbe2 = ASN1_item_unpack(aparam, ASN1_ITEM_rptr(PBE2PARAM));
+        if (pbe2 == NULL) {
+            BIO_puts(bio_err, ", <unsupported parameters>");
+            goto done;
+        }
+        X509_ALGOR_get0(&aoid, &aparamtype, &aparam, pbe2->keyfunc);
+        pbenid = OBJ_obj2nid(aoid);
+        X509_ALGOR_get0(&aoid, NULL, NULL, pbe2->encryption);
+        encnid = OBJ_obj2nid(aoid);
+        BIO_printf(bio_err, ", %s, %s", OBJ_nid2ln(pbenid),
+                   OBJ_nid2sn(encnid));
+        /* If KDF is PBKDF2 decode parameters */
+        if (pbenid == NID_id_pbkdf2) {
+            PBKDF2PARAM *kdf = NULL;
+            int prfnid;
+            if (aparamtype == V_ASN1_SEQUENCE)
+                kdf = ASN1_item_unpack(aparam, ASN1_ITEM_rptr(PBKDF2PARAM));
+            if (kdf == NULL) {
+                BIO_puts(bio_err, ", <unsupported parameters>");
+                goto done;
+            }
+
+            if (kdf->prf == NULL) {
+                prfnid = NID_hmacWithSHA1;
+            } else {
+                X509_ALGOR_get0(&aoid, NULL, NULL, kdf->prf);
+                prfnid = OBJ_obj2nid(aoid);
+            }
+            BIO_printf(bio_err, ", Iteration %ld, PRF %s",
+                       ASN1_INTEGER_get(kdf->iter), OBJ_nid2sn(prfnid));
+            PBKDF2PARAM_free(kdf);
+#ifndef OPENSSL_NO_SCRYPT
+        } else if (pbenid == NID_id_scrypt) {
+            SCRYPT_PARAMS *kdf = NULL;
+
+            if (aparamtype == V_ASN1_SEQUENCE)
+                kdf = ASN1_item_unpack(aparam, ASN1_ITEM_rptr(SCRYPT_PARAMS));
+            if (kdf == NULL) {
+                BIO_puts(bio_err, ", <unsupported parameters>");
+                goto done;
+            }
+            BIO_printf(bio_err, ", Salt length: %d, Cost(N): %ld, "
+                       "Block size(r): %ld, Paralelizm(p): %ld",
+                       ASN1_STRING_length(kdf->salt),
+                       ASN1_INTEGER_get(kdf->costParameter),
+                       ASN1_INTEGER_get(kdf->blockSize),
+                       ASN1_INTEGER_get(kdf->parallelizationParameter));
+            SCRYPT_PARAMS_free(kdf);
+#endif
+        }
+        PBE2PARAM_free(pbe2);
+    } else {
+        if (aparamtype == V_ASN1_SEQUENCE)
+            pbe = ASN1_item_unpack(aparam, ASN1_ITEM_rptr(PBEPARAM));
+        if (pbe == NULL) {
+            BIO_puts(bio_err, ", <unsupported parameters>");
+            goto done;
+        }
+        BIO_printf(bio_err, ", Iteration %ld", ASN1_INTEGER_get(pbe->iter));
+        PBEPARAM_free(pbe);
+    }
+ done:
+    BIO_puts(bio_err, "\n");
+    return 1;
+}
+
+/* Load all certificates from a given file */
+
+int cert_load(BIO *in, STACK_OF(X509) *sk)
+{
+    int ret;
+    X509 *cert;
+    ret = 0;
+    while ((cert = PEM_read_bio_X509(in, NULL, NULL, NULL))) {
+        ret = 1;
+        sk_X509_push(sk, cert);
+    }
+    if (ret)
+        ERR_clear_error();
+    return ret;
+}
+
+/* Generalised attribute print: handle PKCS#8 and bag attributes */
+
+int print_attribs(BIO *out, const STACK_OF(X509_ATTRIBUTE) *attrlst,
+                  const char *name)
+{
+    X509_ATTRIBUTE *attr;
+    ASN1_TYPE *av;
+    char *value;
+    int i, attr_nid;
+    if (!attrlst) {
+        BIO_printf(out, "%s: <No Attributes>\n", name);
+        return 1;
+    }
+    if (!sk_X509_ATTRIBUTE_num(attrlst)) {
+        BIO_printf(out, "%s: <Empty Attributes>\n", name);
+        return 1;
+    }
+    BIO_printf(out, "%s\n", name);
+    for (i = 0; i < sk_X509_ATTRIBUTE_num(attrlst); i++) {
+        ASN1_OBJECT *attr_obj;
+        attr = sk_X509_ATTRIBUTE_value(attrlst, i);
+        attr_obj = X509_ATTRIBUTE_get0_object(attr);
+        attr_nid = OBJ_obj2nid(attr_obj);
+        BIO_printf(out, "    ");
+        if (attr_nid == NID_undef) {
+            i2a_ASN1_OBJECT(out, attr_obj);
+            BIO_printf(out, ": ");
+        } else {
+            BIO_printf(out, "%s: ", OBJ_nid2ln(attr_nid));
+        }
+
+        if (X509_ATTRIBUTE_count(attr)) {
+            av = X509_ATTRIBUTE_get0_type(attr, 0);
+            switch (av->type) {
+            case V_ASN1_BMPSTRING:
+                value = OPENSSL_uni2asc(av->value.bmpstring->data,
+                                        av->value.bmpstring->length);
+                BIO_printf(out, "%s\n", value);
+                OPENSSL_free(value);
+                break;
+
+            case V_ASN1_OCTET_STRING:
+                hex_prin(out, av->value.octet_string->data,
+                         av->value.octet_string->length);
+                BIO_printf(out, "\n");
+                break;
+
+            case V_ASN1_BIT_STRING:
+                hex_prin(out, av->value.bit_string->data,
+                         av->value.bit_string->length);
+                BIO_printf(out, "\n");
+                break;
+
+            default:
+                BIO_printf(out, "<Unsupported tag %d>\n", av->type);
+                break;
+            }
+        } else {
+            BIO_printf(out, "<No Values>\n");
+        }
+    }
+    return 1;
+}
+
+void hex_prin(BIO *out, unsigned char *buf, int len)
+{
+    int i;
+    for (i = 0; i < len; i++)
+        BIO_printf(out, "%02X ", buf[i]);
+}
+
+static int set_pbe(int *ppbe, const char *str)
+{
+    if (!str)
+        return 0;
+    if (strcmp(str, "NONE") == 0) {
+        *ppbe = -1;
+        return 1;
+    }
+    *ppbe = OBJ_txt2nid(str);
+    if (*ppbe == NID_undef) {
+        BIO_printf(bio_err, "Unknown PBE algorithm %s\n", str);
+        return 0;
+    }
+    return 1;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/pkcs7.c b/trunk/3rdparty/openssl-1.1-fit/apps/pkcs7.c
new file mode 100644
index 000000000..c3e9f5c69
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/pkcs7.c
@@ -0,0 +1,198 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <time.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/err.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/pkcs7.h>
+#include <openssl/pem.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_INFORM, OPT_OUTFORM, OPT_IN, OPT_OUT, OPT_NOOUT,
+    OPT_TEXT, OPT_PRINT, OPT_PRINT_CERTS, OPT_ENGINE
+} OPTION_CHOICE;
+
+const OPTIONS pkcs7_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"inform", OPT_INFORM, 'F', "Input format - DER or PEM"},
+    {"in", OPT_IN, '<', "Input file"},
+    {"outform", OPT_OUTFORM, 'F', "Output format - DER or PEM"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"noout", OPT_NOOUT, '-', "Don't output encoded data"},
+    {"text", OPT_TEXT, '-', "Print full details of certificates"},
+    {"print", OPT_PRINT, '-', "Print out all fields of the PKCS7 structure"},
+    {"print_certs", OPT_PRINT_CERTS, '-',
+     "Print_certs  print any certs or crl in the input"},
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+#endif
+    {NULL}
+};
+
+int pkcs7_main(int argc, char **argv)
+{
+    ENGINE *e = NULL;
+    PKCS7 *p7 = NULL;
+    BIO *in = NULL, *out = NULL;
+    int informat = FORMAT_PEM, outformat = FORMAT_PEM;
+    char *infile = NULL, *outfile = NULL, *prog;
+    int i, print_certs = 0, text = 0, noout = 0, p7_print = 0, ret = 1;
+    OPTION_CHOICE o;
+
+    prog = opt_init(argc, argv, pkcs7_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(pkcs7_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &informat))
+                goto opthelp;
+            break;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &outformat))
+                goto opthelp;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_NOOUT:
+            noout = 1;
+            break;
+        case OPT_TEXT:
+            text = 1;
+            break;
+        case OPT_PRINT:
+            p7_print = 1;
+            break;
+        case OPT_PRINT_CERTS:
+            print_certs = 1;
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    in = bio_open_default(infile, 'r', informat);
+    if (in == NULL)
+        goto end;
+
+    if (informat == FORMAT_ASN1)
+        p7 = d2i_PKCS7_bio(in, NULL);
+    else
+        p7 = PEM_read_bio_PKCS7(in, NULL, NULL, NULL);
+    if (p7 == NULL) {
+        BIO_printf(bio_err, "unable to load PKCS7 object\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    out = bio_open_default(outfile, 'w', outformat);
+    if (out == NULL)
+        goto end;
+
+    if (p7_print)
+        PKCS7_print_ctx(out, p7, 0, NULL);
+
+    if (print_certs) {
+        STACK_OF(X509) *certs = NULL;
+        STACK_OF(X509_CRL) *crls = NULL;
+
+        i = OBJ_obj2nid(p7->type);
+        switch (i) {
+        case NID_pkcs7_signed:
+            if (p7->d.sign != NULL) {
+                certs = p7->d.sign->cert;
+                crls = p7->d.sign->crl;
+            }
+            break;
+        case NID_pkcs7_signedAndEnveloped:
+            if (p7->d.signed_and_enveloped != NULL) {
+                certs = p7->d.signed_and_enveloped->cert;
+                crls = p7->d.signed_and_enveloped->crl;
+            }
+            break;
+        default:
+            break;
+        }
+
+        if (certs != NULL) {
+            X509 *x;
+
+            for (i = 0; i < sk_X509_num(certs); i++) {
+                x = sk_X509_value(certs, i);
+                if (text)
+                    X509_print(out, x);
+                else
+                    dump_cert_text(out, x);
+
+                if (!noout)
+                    PEM_write_bio_X509(out, x);
+                BIO_puts(out, "\n");
+            }
+        }
+        if (crls != NULL) {
+            X509_CRL *crl;
+
+            for (i = 0; i < sk_X509_CRL_num(crls); i++) {
+                crl = sk_X509_CRL_value(crls, i);
+
+                X509_CRL_print_ex(out, crl, get_nameopt());
+
+                if (!noout)
+                    PEM_write_bio_X509_CRL(out, crl);
+                BIO_puts(out, "\n");
+            }
+        }
+
+        ret = 0;
+        goto end;
+    }
+
+    if (!noout) {
+        if (outformat == FORMAT_ASN1)
+            i = i2d_PKCS7_bio(out, p7);
+        else
+            i = PEM_write_bio_PKCS7(out, p7);
+
+        if (!i) {
+            BIO_printf(bio_err, "unable to write pkcs7 object\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+    ret = 0;
+ end:
+    PKCS7_free(p7);
+    release_engine(e);
+    BIO_free(in);
+    BIO_free_all(out);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/pkcs8.c b/trunk/3rdparty/openssl-1.1-fit/apps/pkcs8.c
new file mode 100644
index 000000000..205536560
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/pkcs8.c
@@ -0,0 +1,359 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/pem.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/pkcs12.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_INFORM, OPT_OUTFORM, OPT_ENGINE, OPT_IN, OPT_OUT,
+    OPT_TOPK8, OPT_NOITER, OPT_NOCRYPT,
+#ifndef OPENSSL_NO_SCRYPT
+    OPT_SCRYPT, OPT_SCRYPT_N, OPT_SCRYPT_R, OPT_SCRYPT_P,
+#endif
+    OPT_V2, OPT_V1, OPT_V2PRF, OPT_ITER, OPT_PASSIN, OPT_PASSOUT,
+    OPT_TRADITIONAL,
+    OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS pkcs8_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"inform", OPT_INFORM, 'F', "Input format (DER or PEM)"},
+    {"outform", OPT_OUTFORM, 'F', "Output format (DER or PEM)"},
+    {"in", OPT_IN, '<', "Input file"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"topk8", OPT_TOPK8, '-', "Output PKCS8 file"},
+    {"noiter", OPT_NOITER, '-', "Use 1 as iteration count"},
+    {"nocrypt", OPT_NOCRYPT, '-', "Use or expect unencrypted private key"},
+    OPT_R_OPTIONS,
+    {"v2", OPT_V2, 's', "Use PKCS#5 v2.0 and cipher"},
+    {"v1", OPT_V1, 's', "Use PKCS#5 v1.5 and cipher"},
+    {"v2prf", OPT_V2PRF, 's', "Set the PRF algorithm to use with PKCS#5 v2.0"},
+    {"iter", OPT_ITER, 'p', "Specify the iteration count"},
+    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
+    {"passout", OPT_PASSOUT, 's', "Output file pass phrase source"},
+    {"traditional", OPT_TRADITIONAL, '-', "use traditional format private key"},
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+#endif
+#ifndef OPENSSL_NO_SCRYPT
+    {"scrypt", OPT_SCRYPT, '-', "Use scrypt algorithm"},
+    {"scrypt_N", OPT_SCRYPT_N, 's', "Set scrypt N parameter"},
+    {"scrypt_r", OPT_SCRYPT_R, 's', "Set scrypt r parameter"},
+    {"scrypt_p", OPT_SCRYPT_P, 's', "Set scrypt p parameter"},
+#endif
+    {NULL}
+};
+
+int pkcs8_main(int argc, char **argv)
+{
+    BIO *in = NULL, *out = NULL;
+    ENGINE *e = NULL;
+    EVP_PKEY *pkey = NULL;
+    PKCS8_PRIV_KEY_INFO *p8inf = NULL;
+    X509_SIG *p8 = NULL;
+    const EVP_CIPHER *cipher = NULL;
+    char *infile = NULL, *outfile = NULL;
+    char *passinarg = NULL, *passoutarg = NULL, *prog;
+#ifndef OPENSSL_NO_UI_CONSOLE
+    char pass[APP_PASS_LEN];
+#endif
+    char *passin = NULL, *passout = NULL, *p8pass = NULL;
+    OPTION_CHOICE o;
+    int nocrypt = 0, ret = 1, iter = PKCS12_DEFAULT_ITER;
+    int informat = FORMAT_PEM, outformat = FORMAT_PEM, topk8 = 0, pbe_nid = -1;
+    int private = 0, traditional = 0;
+#ifndef OPENSSL_NO_SCRYPT
+    long scrypt_N = 0, scrypt_r = 0, scrypt_p = 0;
+#endif
+
+    prog = opt_init(argc, argv, pkcs8_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(pkcs8_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &informat))
+                goto opthelp;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &outformat))
+                goto opthelp;
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_TOPK8:
+            topk8 = 1;
+            break;
+        case OPT_NOITER:
+            iter = 1;
+            break;
+        case OPT_NOCRYPT:
+            nocrypt = 1;
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_TRADITIONAL:
+            traditional = 1;
+            break;
+        case OPT_V2:
+            if (!opt_cipher(opt_arg(), &cipher))
+                goto opthelp;
+            break;
+        case OPT_V1:
+            pbe_nid = OBJ_txt2nid(opt_arg());
+            if (pbe_nid == NID_undef) {
+                BIO_printf(bio_err,
+                           "%s: Unknown PBE algorithm %s\n", prog, opt_arg());
+                goto opthelp;
+            }
+            break;
+        case OPT_V2PRF:
+            pbe_nid = OBJ_txt2nid(opt_arg());
+            if (!EVP_PBE_find(EVP_PBE_TYPE_PRF, pbe_nid, NULL, NULL, 0)) {
+                BIO_printf(bio_err,
+                           "%s: Unknown PRF algorithm %s\n", prog, opt_arg());
+                goto opthelp;
+            }
+            if (cipher == NULL)
+                cipher = EVP_aes_256_cbc();
+            break;
+        case OPT_ITER:
+            if (!opt_int(opt_arg(), &iter))
+                goto opthelp;
+            break;
+        case OPT_PASSIN:
+            passinarg = opt_arg();
+            break;
+        case OPT_PASSOUT:
+            passoutarg = opt_arg();
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+#ifndef OPENSSL_NO_SCRYPT
+        case OPT_SCRYPT:
+            scrypt_N = 16384;
+            scrypt_r = 8;
+            scrypt_p = 1;
+            if (cipher == NULL)
+                cipher = EVP_aes_256_cbc();
+            break;
+        case OPT_SCRYPT_N:
+            if (!opt_long(opt_arg(), &scrypt_N) || scrypt_N <= 0)
+                goto opthelp;
+            break;
+        case OPT_SCRYPT_R:
+            if (!opt_long(opt_arg(), &scrypt_r) || scrypt_r <= 0)
+                goto opthelp;
+            break;
+        case OPT_SCRYPT_P:
+            if (!opt_long(opt_arg(), &scrypt_p) || scrypt_p <= 0)
+                goto opthelp;
+            break;
+#endif
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    private = 1;
+
+    if (!app_passwd(passinarg, passoutarg, &passin, &passout)) {
+        BIO_printf(bio_err, "Error getting passwords\n");
+        goto end;
+    }
+
+    if ((pbe_nid == -1) && cipher == NULL)
+        cipher = EVP_aes_256_cbc();
+
+    in = bio_open_default(infile, 'r', informat);
+    if (in == NULL)
+        goto end;
+    out = bio_open_owner(outfile, outformat, private);
+    if (out == NULL)
+        goto end;
+
+    if (topk8) {
+        pkey = load_key(infile, informat, 1, passin, e, "key");
+        if (pkey == NULL)
+            goto end;
+        if ((p8inf = EVP_PKEY2PKCS8(pkey)) == NULL) {
+            BIO_printf(bio_err, "Error converting key\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        if (nocrypt) {
+            assert(private);
+            if (outformat == FORMAT_PEM) {
+                PEM_write_bio_PKCS8_PRIV_KEY_INFO(out, p8inf);
+            } else if (outformat == FORMAT_ASN1) {
+                i2d_PKCS8_PRIV_KEY_INFO_bio(out, p8inf);
+            } else {
+                BIO_printf(bio_err, "Bad format specified for key\n");
+                goto end;
+            }
+        } else {
+            X509_ALGOR *pbe;
+            if (cipher) {
+#ifndef OPENSSL_NO_SCRYPT
+                if (scrypt_N && scrypt_r && scrypt_p)
+                    pbe = PKCS5_pbe2_set_scrypt(cipher, NULL, 0, NULL,
+                                                scrypt_N, scrypt_r, scrypt_p);
+                else
+#endif
+                    pbe = PKCS5_pbe2_set_iv(cipher, iter, NULL, 0, NULL,
+                                            pbe_nid);
+            } else {
+                pbe = PKCS5_pbe_set(pbe_nid, iter, NULL, 0);
+            }
+            if (pbe == NULL) {
+                BIO_printf(bio_err, "Error setting PBE algorithm\n");
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            if (passout != NULL) {
+                p8pass = passout;
+            } else if (1) {
+                /* To avoid bit rot */
+#ifndef OPENSSL_NO_UI_CONSOLE
+                p8pass = pass;
+                if (EVP_read_pw_string
+                    (pass, sizeof(pass), "Enter Encryption Password:", 1)) {
+                    X509_ALGOR_free(pbe);
+                    goto end;
+                }
+            } else {
+#endif
+                BIO_printf(bio_err, "Password required\n");
+                goto end;
+            }
+            p8 = PKCS8_set0_pbe(p8pass, strlen(p8pass), p8inf, pbe);
+            if (p8 == NULL) {
+                X509_ALGOR_free(pbe);
+                BIO_printf(bio_err, "Error encrypting key\n");
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            assert(private);
+            if (outformat == FORMAT_PEM)
+                PEM_write_bio_PKCS8(out, p8);
+            else if (outformat == FORMAT_ASN1)
+                i2d_PKCS8_bio(out, p8);
+            else {
+                BIO_printf(bio_err, "Bad format specified for key\n");
+                goto end;
+            }
+        }
+
+        ret = 0;
+        goto end;
+    }
+
+    if (nocrypt) {
+        if (informat == FORMAT_PEM) {
+            p8inf = PEM_read_bio_PKCS8_PRIV_KEY_INFO(in, NULL, NULL, NULL);
+        } else if (informat == FORMAT_ASN1) {
+            p8inf = d2i_PKCS8_PRIV_KEY_INFO_bio(in, NULL);
+        } else {
+            BIO_printf(bio_err, "Bad format specified for key\n");
+            goto end;
+        }
+    } else {
+        if (informat == FORMAT_PEM) {
+            p8 = PEM_read_bio_PKCS8(in, NULL, NULL, NULL);
+        } else if (informat == FORMAT_ASN1) {
+            p8 = d2i_PKCS8_bio(in, NULL);
+        } else {
+            BIO_printf(bio_err, "Bad format specified for key\n");
+            goto end;
+        }
+
+        if (p8 == NULL) {
+            BIO_printf(bio_err, "Error reading key\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        if (passin != NULL) {
+            p8pass = passin;
+        } else if (1) {
+#ifndef OPENSSL_NO_UI_CONSOLE
+            p8pass = pass;
+            if (EVP_read_pw_string(pass, sizeof(pass), "Enter Password:", 0)) {
+                BIO_printf(bio_err, "Can't read Password\n");
+                goto end;
+            }
+        } else {
+#endif
+            BIO_printf(bio_err, "Password required\n");
+            goto end;
+        }
+        p8inf = PKCS8_decrypt(p8, p8pass, strlen(p8pass));
+    }
+
+    if (p8inf == NULL) {
+        BIO_printf(bio_err, "Error decrypting key\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    if ((pkey = EVP_PKCS82PKEY(p8inf)) == NULL) {
+        BIO_printf(bio_err, "Error converting key\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    assert(private);
+    if (outformat == FORMAT_PEM) {
+        if (traditional)
+            PEM_write_bio_PrivateKey_traditional(out, pkey, NULL, NULL, 0,
+                                                 NULL, passout);
+        else
+            PEM_write_bio_PrivateKey(out, pkey, NULL, NULL, 0, NULL, passout);
+    } else if (outformat == FORMAT_ASN1) {
+        i2d_PrivateKey_bio(out, pkey);
+    } else {
+        BIO_printf(bio_err, "Bad format specified for key\n");
+        goto end;
+    }
+    ret = 0;
+
+ end:
+    X509_SIG_free(p8);
+    PKCS8_PRIV_KEY_INFO_free(p8inf);
+    EVP_PKEY_free(pkey);
+    release_engine(e);
+    BIO_free_all(out);
+    BIO_free(in);
+    OPENSSL_free(passin);
+    OPENSSL_free(passout);
+
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/pkey.c b/trunk/3rdparty/openssl-1.1-fit/apps/pkey.c
new file mode 100644
index 000000000..0dd5590bd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/pkey.c
@@ -0,0 +1,243 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/pem.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_INFORM, OPT_OUTFORM, OPT_PASSIN, OPT_PASSOUT, OPT_ENGINE,
+    OPT_IN, OPT_OUT, OPT_PUBIN, OPT_PUBOUT, OPT_TEXT_PUB,
+    OPT_TEXT, OPT_NOOUT, OPT_MD, OPT_TRADITIONAL, OPT_CHECK, OPT_PUB_CHECK
+} OPTION_CHOICE;
+
+const OPTIONS pkey_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"inform", OPT_INFORM, 'f', "Input format (DER or PEM)"},
+    {"outform", OPT_OUTFORM, 'F', "Output format (DER or PEM)"},
+    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
+    {"passout", OPT_PASSOUT, 's', "Output file pass phrase source"},
+    {"in", OPT_IN, 's', "Input key"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"pubin", OPT_PUBIN, '-',
+     "Read public key from input (default is private key)"},
+    {"pubout", OPT_PUBOUT, '-', "Output public key, not private"},
+    {"text_pub", OPT_TEXT_PUB, '-', "Only output public key components"},
+    {"text", OPT_TEXT, '-', "Output in plaintext as well"},
+    {"noout", OPT_NOOUT, '-', "Don't output the key"},
+    {"", OPT_MD, '-', "Any supported cipher"},
+    {"traditional", OPT_TRADITIONAL, '-',
+     "Use traditional format for private keys"},
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+#endif
+    {"check", OPT_CHECK, '-', "Check key consistency"},
+    {"pubcheck", OPT_PUB_CHECK, '-', "Check public key consistency"},
+    {NULL}
+};
+
+int pkey_main(int argc, char **argv)
+{
+    BIO *in = NULL, *out = NULL;
+    ENGINE *e = NULL;
+    EVP_PKEY *pkey = NULL;
+    const EVP_CIPHER *cipher = NULL;
+    char *infile = NULL, *outfile = NULL, *passin = NULL, *passout = NULL;
+    char *passinarg = NULL, *passoutarg = NULL, *prog;
+    OPTION_CHOICE o;
+    int informat = FORMAT_PEM, outformat = FORMAT_PEM;
+    int pubin = 0, pubout = 0, pubtext = 0, text = 0, noout = 0, ret = 1;
+    int private = 0, traditional = 0, check = 0, pub_check = 0;
+
+    prog = opt_init(argc, argv, pkey_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(pkey_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_ANY, &informat))
+                goto opthelp;
+            break;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &outformat))
+                goto opthelp;
+            break;
+        case OPT_PASSIN:
+            passinarg = opt_arg();
+            break;
+        case OPT_PASSOUT:
+            passoutarg = opt_arg();
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_PUBIN:
+            pubin = pubout = pubtext = 1;
+            break;
+        case OPT_PUBOUT:
+            pubout = 1;
+            break;
+        case OPT_TEXT_PUB:
+            pubtext = text = 1;
+            break;
+        case OPT_TEXT:
+            text = 1;
+            break;
+        case OPT_NOOUT:
+            noout = 1;
+            break;
+        case OPT_TRADITIONAL:
+            traditional = 1;
+            break;
+        case OPT_CHECK:
+            check = 1;
+            break;
+        case OPT_PUB_CHECK:
+            pub_check = 1;
+            break;
+        case OPT_MD:
+            if (!opt_cipher(opt_unknown(), &cipher))
+                goto opthelp;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    private = !noout && !pubout ? 1 : 0;
+    if (text && !pubtext)
+        private = 1;
+
+    if (!app_passwd(passinarg, passoutarg, &passin, &passout)) {
+        BIO_printf(bio_err, "Error getting passwords\n");
+        goto end;
+    }
+
+    out = bio_open_owner(outfile, outformat, private);
+    if (out == NULL)
+        goto end;
+
+    if (pubin)
+        pkey = load_pubkey(infile, informat, 1, passin, e, "Public Key");
+    else
+        pkey = load_key(infile, informat, 1, passin, e, "key");
+    if (pkey == NULL)
+        goto end;
+
+    if (check || pub_check) {
+        int r;
+        EVP_PKEY_CTX *ctx;
+
+        ctx = EVP_PKEY_CTX_new(pkey, e);
+        if (ctx == NULL) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+
+        if (check)
+            r = EVP_PKEY_check(ctx);
+        else
+            r = EVP_PKEY_public_check(ctx);
+
+        if (r == 1) {
+            BIO_printf(out, "Key is valid\n");
+        } else {
+            /*
+             * Note: at least for RSA keys if this function returns
+             * -1, there will be no error reasons.
+             */
+            unsigned long err;
+
+            BIO_printf(out, "Key is invalid\n");
+
+            while ((err = ERR_peek_error()) != 0) {
+                BIO_printf(out, "Detailed error: %s\n",
+                           ERR_reason_error_string(err));
+                ERR_get_error(); /* remove err from error stack */
+            }
+        }
+        EVP_PKEY_CTX_free(ctx);
+    }
+
+    if (!noout) {
+        if (outformat == FORMAT_PEM) {
+            if (pubout) {
+                if (!PEM_write_bio_PUBKEY(out, pkey))
+                    goto end;
+            } else {
+                assert(private);
+                if (traditional) {
+                    if (!PEM_write_bio_PrivateKey_traditional(out, pkey, cipher,
+                                                              NULL, 0, NULL,
+                                                              passout))
+                        goto end;
+                } else {
+                    if (!PEM_write_bio_PrivateKey(out, pkey, cipher,
+                                                  NULL, 0, NULL, passout))
+                        goto end;
+                }
+            }
+        } else if (outformat == FORMAT_ASN1) {
+            if (pubout) {
+                if (!i2d_PUBKEY_bio(out, pkey))
+                    goto end;
+            } else {
+                assert(private);
+                if (!i2d_PrivateKey_bio(out, pkey))
+                    goto end;
+            }
+        } else {
+            BIO_printf(bio_err, "Bad format specified for key\n");
+            goto end;
+        }
+    }
+
+    if (text) {
+        if (pubtext) {
+            if (EVP_PKEY_print_public(out, pkey, 0, NULL) <= 0)
+                goto end;
+        } else {
+            assert(private);
+            if (EVP_PKEY_print_private(out, pkey, 0, NULL) <= 0)
+                goto end;
+        }
+    }
+
+    ret = 0;
+
+ end:
+    if (ret != 0)
+        ERR_print_errors(bio_err);
+    EVP_PKEY_free(pkey);
+    release_engine(e);
+    BIO_free_all(out);
+    BIO_free(in);
+    OPENSSL_free(passin);
+    OPENSSL_free(passout);
+
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/pkeyparam.c b/trunk/3rdparty/openssl-1.1-fit/apps/pkeyparam.c
new file mode 100644
index 000000000..41c3f532b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/pkeyparam.c
@@ -0,0 +1,142 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/pem.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_IN, OPT_OUT, OPT_TEXT, OPT_NOOUT,
+    OPT_ENGINE, OPT_CHECK
+} OPTION_CHOICE;
+
+const OPTIONS pkeyparam_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"in", OPT_IN, '<', "Input file"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"text", OPT_TEXT, '-', "Print parameters as text"},
+    {"noout", OPT_NOOUT, '-', "Don't output encoded parameters"},
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+#endif
+    {"check", OPT_CHECK, '-', "Check key param consistency"},
+    {NULL}
+};
+
+int pkeyparam_main(int argc, char **argv)
+{
+    ENGINE *e = NULL;
+    BIO *in = NULL, *out = NULL;
+    EVP_PKEY *pkey = NULL;
+    int text = 0, noout = 0, ret = 1, check = 0;
+    OPTION_CHOICE o;
+    char *infile = NULL, *outfile = NULL, *prog;
+
+    prog = opt_init(argc, argv, pkeyparam_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(pkeyparam_options);
+            ret = 0;
+            goto end;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_TEXT:
+            text = 1;
+            break;
+        case OPT_NOOUT:
+            noout = 1;
+            break;
+        case OPT_CHECK:
+            check = 1;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    in = bio_open_default(infile, 'r', FORMAT_PEM);
+    if (in == NULL)
+        goto end;
+    out = bio_open_default(outfile, 'w', FORMAT_PEM);
+    if (out == NULL)
+        goto end;
+    pkey = PEM_read_bio_Parameters(in, NULL);
+    if (pkey == NULL) {
+        BIO_printf(bio_err, "Error reading parameters\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    if (check) {
+        int r;
+        EVP_PKEY_CTX *ctx;
+
+        ctx = EVP_PKEY_CTX_new(pkey, e);
+        if (ctx == NULL) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+
+        r = EVP_PKEY_param_check(ctx);
+
+        if (r == 1) {
+            BIO_printf(out, "Parameters are valid\n");
+        } else {
+            /*
+             * Note: at least for RSA keys if this function returns
+             * -1, there will be no error reasons.
+             */
+            unsigned long err;
+
+            BIO_printf(out, "Parameters are invalid\n");
+
+            while ((err = ERR_peek_error()) != 0) {
+                BIO_printf(out, "Detailed error: %s\n",
+                           ERR_reason_error_string(err));
+                ERR_get_error(); /* remove err from error stack */
+            }
+        }
+        EVP_PKEY_CTX_free(ctx);
+    }
+
+    if (!noout)
+        PEM_write_bio_Parameters(out, pkey);
+
+    if (text)
+        EVP_PKEY_print_params(out, pkey, 0, NULL);
+
+    ret = 0;
+
+ end:
+    EVP_PKEY_free(pkey);
+    release_engine(e);
+    BIO_free_all(out);
+    BIO_free(in);
+
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/pkeyutl.c b/trunk/3rdparty/openssl-1.1-fit/apps/pkeyutl.c
new file mode 100644
index 000000000..2c4e524b6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/pkeyutl.c
@@ -0,0 +1,525 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "apps.h"
+#include "progs.h"
+#include <string.h>
+#include <openssl/err.h>
+#include <openssl/pem.h>
+#include <openssl/evp.h>
+
+#define KEY_NONE        0
+#define KEY_PRIVKEY     1
+#define KEY_PUBKEY      2
+#define KEY_CERT        3
+
+static EVP_PKEY_CTX *init_ctx(const char *kdfalg, int *pkeysize,
+                              const char *keyfile, int keyform, int key_type,
+                              char *passinarg, int pkey_op, ENGINE *e,
+                              const int impl);
+
+static int setup_peer(EVP_PKEY_CTX *ctx, int peerform, const char *file,
+                      ENGINE *e);
+
+static int do_keyop(EVP_PKEY_CTX *ctx, int pkey_op,
+                    unsigned char *out, size_t *poutlen,
+                    const unsigned char *in, size_t inlen);
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_ENGINE, OPT_ENGINE_IMPL, OPT_IN, OPT_OUT,
+    OPT_PUBIN, OPT_CERTIN, OPT_ASN1PARSE, OPT_HEXDUMP, OPT_SIGN,
+    OPT_VERIFY, OPT_VERIFYRECOVER, OPT_REV, OPT_ENCRYPT, OPT_DECRYPT,
+    OPT_DERIVE, OPT_SIGFILE, OPT_INKEY, OPT_PEERKEY, OPT_PASSIN,
+    OPT_PEERFORM, OPT_KEYFORM, OPT_PKEYOPT, OPT_KDF, OPT_KDFLEN,
+    OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS pkeyutl_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"in", OPT_IN, '<', "Input file - default stdin"},
+    {"out", OPT_OUT, '>', "Output file - default stdout"},
+    {"pubin", OPT_PUBIN, '-', "Input is a public key"},
+    {"certin", OPT_CERTIN, '-', "Input is a cert with a public key"},
+    {"asn1parse", OPT_ASN1PARSE, '-', "asn1parse the output data"},
+    {"hexdump", OPT_HEXDUMP, '-', "Hex dump output"},
+    {"sign", OPT_SIGN, '-', "Sign input data with private key"},
+    {"verify", OPT_VERIFY, '-', "Verify with public key"},
+    {"verifyrecover", OPT_VERIFYRECOVER, '-',
+     "Verify with public key, recover original data"},
+    {"rev", OPT_REV, '-', "Reverse the order of the input buffer"},
+    {"encrypt", OPT_ENCRYPT, '-', "Encrypt input data with public key"},
+    {"decrypt", OPT_DECRYPT, '-', "Decrypt input data with private key"},
+    {"derive", OPT_DERIVE, '-', "Derive shared secret"},
+    {"kdf", OPT_KDF, 's', "Use KDF algorithm"},
+    {"kdflen", OPT_KDFLEN, 'p', "KDF algorithm output length"},
+    {"sigfile", OPT_SIGFILE, '<', "Signature file (verify operation only)"},
+    {"inkey", OPT_INKEY, 's', "Input private key file"},
+    {"peerkey", OPT_PEERKEY, 's', "Peer key file used in key derivation"},
+    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
+    {"peerform", OPT_PEERFORM, 'E', "Peer key format - default PEM"},
+    {"keyform", OPT_KEYFORM, 'E', "Private key format - default PEM"},
+    {"pkeyopt", OPT_PKEYOPT, 's', "Public key options as opt:value"},
+    OPT_R_OPTIONS,
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+    {"engine_impl", OPT_ENGINE_IMPL, '-',
+     "Also use engine given by -engine for crypto operations"},
+#endif
+    {NULL}
+};
+
+int pkeyutl_main(int argc, char **argv)
+{
+    BIO *in = NULL, *out = NULL;
+    ENGINE *e = NULL;
+    EVP_PKEY_CTX *ctx = NULL;
+    char *infile = NULL, *outfile = NULL, *sigfile = NULL, *passinarg = NULL;
+    char hexdump = 0, asn1parse = 0, rev = 0, *prog;
+    unsigned char *buf_in = NULL, *buf_out = NULL, *sig = NULL;
+    OPTION_CHOICE o;
+    int buf_inlen = 0, siglen = -1, keyform = FORMAT_PEM, peerform = FORMAT_PEM;
+    int keysize = -1, pkey_op = EVP_PKEY_OP_SIGN, key_type = KEY_PRIVKEY;
+    int engine_impl = 0;
+    int ret = 1, rv = -1;
+    size_t buf_outlen;
+    const char *inkey = NULL;
+    const char *peerkey = NULL;
+    const char *kdfalg = NULL;
+    int kdflen = 0;
+    STACK_OF(OPENSSL_STRING) *pkeyopts = NULL;
+
+    prog = opt_init(argc, argv, pkeyutl_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(pkeyutl_options);
+            ret = 0;
+            goto end;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_SIGFILE:
+            sigfile = opt_arg();
+            break;
+        case OPT_ENGINE_IMPL:
+            engine_impl = 1;
+            break;
+        case OPT_INKEY:
+            inkey = opt_arg();
+            break;
+        case OPT_PEERKEY:
+            peerkey = opt_arg();
+            break;
+        case OPT_PASSIN:
+            passinarg = opt_arg();
+            break;
+        case OPT_PEERFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PDE, &peerform))
+                goto opthelp;
+            break;
+        case OPT_KEYFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PDE, &keyform))
+                goto opthelp;
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_PUBIN:
+            key_type = KEY_PUBKEY;
+            break;
+        case OPT_CERTIN:
+            key_type = KEY_CERT;
+            break;
+        case OPT_ASN1PARSE:
+            asn1parse = 1;
+            break;
+        case OPT_HEXDUMP:
+            hexdump = 1;
+            break;
+        case OPT_SIGN:
+            pkey_op = EVP_PKEY_OP_SIGN;
+            break;
+        case OPT_VERIFY:
+            pkey_op = EVP_PKEY_OP_VERIFY;
+            break;
+        case OPT_VERIFYRECOVER:
+            pkey_op = EVP_PKEY_OP_VERIFYRECOVER;
+            break;
+        case OPT_ENCRYPT:
+            pkey_op = EVP_PKEY_OP_ENCRYPT;
+            break;
+        case OPT_DECRYPT:
+            pkey_op = EVP_PKEY_OP_DECRYPT;
+            break;
+        case OPT_DERIVE:
+            pkey_op = EVP_PKEY_OP_DERIVE;
+            break;
+        case OPT_KDF:
+            pkey_op = EVP_PKEY_OP_DERIVE;
+            key_type = KEY_NONE;
+            kdfalg = opt_arg();
+            break;
+        case OPT_KDFLEN:
+            kdflen = atoi(opt_arg());
+            break;
+        case OPT_REV:
+            rev = 1;
+            break;
+        case OPT_PKEYOPT:
+            if ((pkeyopts == NULL &&
+                 (pkeyopts = sk_OPENSSL_STRING_new_null()) == NULL) ||
+                sk_OPENSSL_STRING_push(pkeyopts, opt_arg()) == 0) {
+                BIO_puts(bio_err, "out of memory\n");
+                goto end;
+            }
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    if (kdfalg != NULL) {
+        if (kdflen == 0) {
+            BIO_printf(bio_err,
+                       "%s: no KDF length given (-kdflen parameter).\n", prog);
+            goto opthelp;
+        }
+    } else if (inkey == NULL) {
+        BIO_printf(bio_err,
+                   "%s: no private key given (-inkey parameter).\n", prog);
+        goto opthelp;
+    } else if (peerkey != NULL && pkey_op != EVP_PKEY_OP_DERIVE) {
+        BIO_printf(bio_err,
+                   "%s: no peer key given (-peerkey parameter).\n", prog);
+        goto opthelp;
+    }
+    ctx = init_ctx(kdfalg, &keysize, inkey, keyform, key_type,
+                   passinarg, pkey_op, e, engine_impl);
+    if (ctx == NULL) {
+        BIO_printf(bio_err, "%s: Error initializing context\n", prog);
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+    if (peerkey != NULL && !setup_peer(ctx, peerform, peerkey, e)) {
+        BIO_printf(bio_err, "%s: Error setting up peer key\n", prog);
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+    if (pkeyopts != NULL) {
+        int num = sk_OPENSSL_STRING_num(pkeyopts);
+        int i;
+
+        for (i = 0; i < num; ++i) {
+            const char *opt = sk_OPENSSL_STRING_value(pkeyopts, i);
+
+            if (pkey_ctrl_string(ctx, opt) <= 0) {
+                BIO_printf(bio_err, "%s: Can't set parameter \"%s\":\n",
+                           prog, opt);
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+        }
+    }
+
+    if (sigfile != NULL && (pkey_op != EVP_PKEY_OP_VERIFY)) {
+        BIO_printf(bio_err,
+                   "%s: Signature file specified for non verify\n", prog);
+        goto end;
+    }
+
+    if (sigfile == NULL && (pkey_op == EVP_PKEY_OP_VERIFY)) {
+        BIO_printf(bio_err,
+                   "%s: No signature file specified for verify\n", prog);
+        goto end;
+    }
+
+    if (pkey_op != EVP_PKEY_OP_DERIVE) {
+        in = bio_open_default(infile, 'r', FORMAT_BINARY);
+        if (in == NULL)
+            goto end;
+    }
+    out = bio_open_default(outfile, 'w', FORMAT_BINARY);
+    if (out == NULL)
+        goto end;
+
+    if (sigfile != NULL) {
+        BIO *sigbio = BIO_new_file(sigfile, "rb");
+
+        if (sigbio == NULL) {
+            BIO_printf(bio_err, "Can't open signature file %s\n", sigfile);
+            goto end;
+        }
+        siglen = bio_to_mem(&sig, keysize * 10, sigbio);
+        BIO_free(sigbio);
+        if (siglen < 0) {
+            BIO_printf(bio_err, "Error reading signature data\n");
+            goto end;
+        }
+    }
+
+    if (in != NULL) {
+        /* Read the input data */
+        buf_inlen = bio_to_mem(&buf_in, keysize * 10, in);
+        if (buf_inlen < 0) {
+            BIO_printf(bio_err, "Error reading input Data\n");
+            goto end;
+        }
+        if (rev) {
+            size_t i;
+            unsigned char ctmp;
+            size_t l = (size_t)buf_inlen;
+            for (i = 0; i < l / 2; i++) {
+                ctmp = buf_in[i];
+                buf_in[i] = buf_in[l - 1 - i];
+                buf_in[l - 1 - i] = ctmp;
+            }
+        }
+    }
+
+    /* Sanity check the input */
+    if (buf_inlen > EVP_MAX_MD_SIZE
+            && (pkey_op == EVP_PKEY_OP_SIGN
+                || pkey_op == EVP_PKEY_OP_VERIFY
+                || pkey_op == EVP_PKEY_OP_VERIFYRECOVER)) {
+        BIO_printf(bio_err,
+                   "Error: The input data looks too long to be a hash\n");
+        goto end;
+    }
+
+    if (pkey_op == EVP_PKEY_OP_VERIFY) {
+        rv = EVP_PKEY_verify(ctx, sig, (size_t)siglen,
+                             buf_in, (size_t)buf_inlen);
+        if (rv == 1) {
+            BIO_puts(out, "Signature Verified Successfully\n");
+            ret = 0;
+        } else {
+            BIO_puts(out, "Signature Verification Failure\n");
+        }
+        goto end;
+    }
+    if (kdflen != 0) {
+        buf_outlen = kdflen;
+        rv = 1;
+    } else {
+        rv = do_keyop(ctx, pkey_op, NULL, (size_t *)&buf_outlen,
+                      buf_in, (size_t)buf_inlen);
+    }
+    if (rv > 0 && buf_outlen != 0) {
+        buf_out = app_malloc(buf_outlen, "buffer output");
+        rv = do_keyop(ctx, pkey_op,
+                      buf_out, (size_t *)&buf_outlen,
+                      buf_in, (size_t)buf_inlen);
+    }
+    if (rv <= 0) {
+        if (pkey_op != EVP_PKEY_OP_DERIVE) {
+            BIO_puts(bio_err, "Public Key operation error\n");
+        } else {
+            BIO_puts(bio_err, "Key derivation failed\n");
+        }
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+    ret = 0;
+
+    if (asn1parse) {
+        if (!ASN1_parse_dump(out, buf_out, buf_outlen, 1, -1))
+            ERR_print_errors(bio_err);
+    } else if (hexdump) {
+        BIO_dump(out, (char *)buf_out, buf_outlen);
+    } else {
+        BIO_write(out, buf_out, buf_outlen);
+    }
+
+ end:
+    EVP_PKEY_CTX_free(ctx);
+    release_engine(e);
+    BIO_free(in);
+    BIO_free_all(out);
+    OPENSSL_free(buf_in);
+    OPENSSL_free(buf_out);
+    OPENSSL_free(sig);
+    sk_OPENSSL_STRING_free(pkeyopts);
+    return ret;
+}
+
+static EVP_PKEY_CTX *init_ctx(const char *kdfalg, int *pkeysize,
+                              const char *keyfile, int keyform, int key_type,
+                              char *passinarg, int pkey_op, ENGINE *e,
+                              const int engine_impl)
+{
+    EVP_PKEY *pkey = NULL;
+    EVP_PKEY_CTX *ctx = NULL;
+    ENGINE *impl = NULL;
+    char *passin = NULL;
+    int rv = -1;
+    X509 *x;
+    if (((pkey_op == EVP_PKEY_OP_SIGN) || (pkey_op == EVP_PKEY_OP_DECRYPT)
+         || (pkey_op == EVP_PKEY_OP_DERIVE))
+        && (key_type != KEY_PRIVKEY && kdfalg == NULL)) {
+        BIO_printf(bio_err, "A private key is needed for this operation\n");
+        goto end;
+    }
+    if (!app_passwd(passinarg, NULL, &passin, NULL)) {
+        BIO_printf(bio_err, "Error getting password\n");
+        goto end;
+    }
+    switch (key_type) {
+    case KEY_PRIVKEY:
+        pkey = load_key(keyfile, keyform, 0, passin, e, "Private Key");
+        break;
+
+    case KEY_PUBKEY:
+        pkey = load_pubkey(keyfile, keyform, 0, NULL, e, "Public Key");
+        break;
+
+    case KEY_CERT:
+        x = load_cert(keyfile, keyform, "Certificate");
+        if (x) {
+            pkey = X509_get_pubkey(x);
+            X509_free(x);
+        }
+        break;
+
+    case KEY_NONE:
+        break;
+
+    }
+
+#ifndef OPENSSL_NO_ENGINE
+    if (engine_impl)
+        impl = e;
+#endif
+
+    if (kdfalg != NULL) {
+        int kdfnid = OBJ_sn2nid(kdfalg);
+
+        if (kdfnid == NID_undef) {
+            kdfnid = OBJ_ln2nid(kdfalg);
+            if (kdfnid == NID_undef) {
+                BIO_printf(bio_err, "The given KDF \"%s\" is unknown.\n",
+                           kdfalg);
+                goto end;
+            }
+        }
+        ctx = EVP_PKEY_CTX_new_id(kdfnid, impl);
+    } else {
+        if (pkey == NULL)
+            goto end;
+        *pkeysize = EVP_PKEY_size(pkey);
+        ctx = EVP_PKEY_CTX_new(pkey, impl);
+        EVP_PKEY_free(pkey);
+    }
+
+    if (ctx == NULL)
+        goto end;
+
+    switch (pkey_op) {
+    case EVP_PKEY_OP_SIGN:
+        rv = EVP_PKEY_sign_init(ctx);
+        break;
+
+    case EVP_PKEY_OP_VERIFY:
+        rv = EVP_PKEY_verify_init(ctx);
+        break;
+
+    case EVP_PKEY_OP_VERIFYRECOVER:
+        rv = EVP_PKEY_verify_recover_init(ctx);
+        break;
+
+    case EVP_PKEY_OP_ENCRYPT:
+        rv = EVP_PKEY_encrypt_init(ctx);
+        break;
+
+    case EVP_PKEY_OP_DECRYPT:
+        rv = EVP_PKEY_decrypt_init(ctx);
+        break;
+
+    case EVP_PKEY_OP_DERIVE:
+        rv = EVP_PKEY_derive_init(ctx);
+        break;
+    }
+
+    if (rv <= 0) {
+        EVP_PKEY_CTX_free(ctx);
+        ctx = NULL;
+    }
+
+ end:
+    OPENSSL_free(passin);
+    return ctx;
+
+}
+
+static int setup_peer(EVP_PKEY_CTX *ctx, int peerform, const char *file,
+                      ENGINE *e)
+{
+    EVP_PKEY *peer = NULL;
+    ENGINE *engine = NULL;
+    int ret;
+
+    if (peerform == FORMAT_ENGINE)
+        engine = e;
+    peer = load_pubkey(file, peerform, 0, NULL, engine, "Peer Key");
+    if (peer == NULL) {
+        BIO_printf(bio_err, "Error reading peer key %s\n", file);
+        ERR_print_errors(bio_err);
+        return 0;
+    }
+
+    ret = EVP_PKEY_derive_set_peer(ctx, peer);
+
+    EVP_PKEY_free(peer);
+    if (ret <= 0)
+        ERR_print_errors(bio_err);
+    return ret;
+}
+
+static int do_keyop(EVP_PKEY_CTX *ctx, int pkey_op,
+                    unsigned char *out, size_t *poutlen,
+                    const unsigned char *in, size_t inlen)
+{
+    int rv = 0;
+    switch (pkey_op) {
+    case EVP_PKEY_OP_VERIFYRECOVER:
+        rv = EVP_PKEY_verify_recover(ctx, out, poutlen, in, inlen);
+        break;
+
+    case EVP_PKEY_OP_SIGN:
+        rv = EVP_PKEY_sign(ctx, out, poutlen, in, inlen);
+        break;
+
+    case EVP_PKEY_OP_ENCRYPT:
+        rv = EVP_PKEY_encrypt(ctx, out, poutlen, in, inlen);
+        break;
+
+    case EVP_PKEY_OP_DECRYPT:
+        rv = EVP_PKEY_decrypt(ctx, out, poutlen, in, inlen);
+        break;
+
+    case EVP_PKEY_OP_DERIVE:
+        rv = EVP_PKEY_derive(ctx, out, poutlen);
+        break;
+
+    }
+    return rv;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/prime.c b/trunk/3rdparty/openssl-1.1-fit/apps/prime.c
new file mode 100644
index 000000000..694479764
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/prime.c
@@ -0,0 +1,133 @@
+/*
+ * Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+
+#include "apps.h"
+#include "progs.h"
+#include <openssl/bn.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_HEX, OPT_GENERATE, OPT_BITS, OPT_SAFE, OPT_CHECKS
+} OPTION_CHOICE;
+
+const OPTIONS prime_options[] = {
+    {OPT_HELP_STR, 1, '-', "Usage: %s [options] [number...]\n"},
+    {OPT_HELP_STR, 1, '-',
+        "  number Number to check for primality\n"},
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"hex", OPT_HEX, '-', "Hex output"},
+    {"generate", OPT_GENERATE, '-', "Generate a prime"},
+    {"bits", OPT_BITS, 'p', "Size of number in bits"},
+    {"safe", OPT_SAFE, '-',
+     "When used with -generate, generate a safe prime"},
+    {"checks", OPT_CHECKS, 'p', "Number of checks"},
+    {NULL}
+};
+
+int prime_main(int argc, char **argv)
+{
+    BIGNUM *bn = NULL;
+    int hex = 0, checks = 20, generate = 0, bits = 0, safe = 0, ret = 1;
+    char *prog;
+    OPTION_CHOICE o;
+
+    prog = opt_init(argc, argv, prime_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(prime_options);
+            ret = 0;
+            goto end;
+        case OPT_HEX:
+            hex = 1;
+            break;
+        case OPT_GENERATE:
+            generate = 1;
+            break;
+        case OPT_BITS:
+            bits = atoi(opt_arg());
+            break;
+        case OPT_SAFE:
+            safe = 1;
+            break;
+        case OPT_CHECKS:
+            checks = atoi(opt_arg());
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+
+    if (generate) {
+        if (argc != 0) {
+            BIO_printf(bio_err, "Extra arguments given.\n");
+            goto opthelp;
+        }
+    } else if (argc == 0) {
+        BIO_printf(bio_err, "%s: No prime specified\n", prog);
+        goto opthelp;
+    }
+
+    if (generate) {
+        char *s;
+
+        if (!bits) {
+            BIO_printf(bio_err, "Specify the number of bits.\n");
+            goto end;
+        }
+        bn = BN_new();
+        if (bn == NULL) {
+            BIO_printf(bio_err, "Out of memory.\n");
+            goto end;
+        }
+        if (!BN_generate_prime_ex(bn, bits, safe, NULL, NULL, NULL)) {
+            BIO_printf(bio_err, "Failed to generate prime.\n");
+            goto end;
+        }
+        s = hex ? BN_bn2hex(bn) : BN_bn2dec(bn);
+        if (s == NULL) {
+            BIO_printf(bio_err, "Out of memory.\n");
+            goto end;
+        }
+        BIO_printf(bio_out, "%s\n", s);
+        OPENSSL_free(s);
+    } else {
+        for ( ; *argv; argv++) {
+            int r;
+
+            if (hex)
+                r = BN_hex2bn(&bn, argv[0]);
+            else
+                r = BN_dec2bn(&bn, argv[0]);
+
+            if (!r) {
+                BIO_printf(bio_err, "Failed to process value (%s)\n", argv[0]);
+                goto end;
+            }
+
+            BN_print(bio_out, bn);
+            BIO_printf(bio_out, " (%s) %s prime\n",
+                       argv[0],
+                       BN_is_prime_ex(bn, checks, NULL, NULL)
+                           ? "is" : "is not");
+        }
+    }
+
+    ret = 0;
+ end:
+    BN_free(bn);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/privkey.pem b/trunk/3rdparty/openssl-1.1-fit/apps/privkey.pem
new file mode 100644
index 000000000..02f34981e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/privkey.pem
@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/progs.pl b/trunk/3rdparty/openssl-1.1-fit/apps/progs.pl
new file mode 100644
index 000000000..57671405d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/progs.pl
@@ -0,0 +1,181 @@
+#! /usr/bin/env perl
+# Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# Generate progs.h file by looking for command mains in list of C files
+# passed on the command line.
+
+use strict;
+use warnings;
+use lib '.';
+use configdata qw/@disablables %unified_info/;
+
+my %commands     = ();
+my $cmdre        = qr/^\s*int\s+([a-z_][a-z0-9_]*)_main\(\s*int\s+argc\s*,/;
+my $apps_openssl = shift @ARGV;
+my $YEAR         = [localtime()]->[5] + 1900;
+
+# because the program apps/openssl has object files as sources, and
+# they then have the corresponding C files as source, we need to chain
+# the lookups in %unified_info
+my @openssl_source =
+    map { @{$unified_info{sources}->{$_}} }
+    grep { /\.o$/ }
+        @{$unified_info{sources}->{$apps_openssl}};
+
+foreach my $filename (@openssl_source) {
+    open F, $filename or die "Couldn't open $filename: $!\n";
+    foreach ( grep /$cmdre/, <F> ) {
+        my @foo = /$cmdre/;
+        $commands{$1} = 1;
+    }
+    close F;
+}
+
+@ARGV = sort keys %commands;
+
+print <<"EOF";
+/*
+ * WARNING: do not edit!
+ * Generated by apps/progs.pl
+ *
+ * Copyright 1995-$YEAR The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+typedef enum FUNC_TYPE {
+    FT_none, FT_general, FT_md, FT_cipher, FT_pkey,
+    FT_md_alg, FT_cipher_alg
+} FUNC_TYPE;
+
+typedef struct function_st {
+    FUNC_TYPE type;
+    const char *name;
+    int (*func)(int argc, char *argv[]);
+    const OPTIONS *help;
+} FUNCTION;
+
+DEFINE_LHASH_OF(FUNCTION);
+
+EOF
+
+foreach (@ARGV) {
+    printf "extern int %s_main(int argc, char *argv[]);\n", $_;
+}
+print "\n";
+
+foreach (@ARGV) {
+    printf "extern const OPTIONS %s_options[];\n", $_;
+}
+print "\n";
+
+my %cmd_disabler = (
+    ciphers  => "sock",
+    genrsa   => "rsa",
+    rsautl   => "rsa",
+    gendsa   => "dsa",
+    dsaparam => "dsa",
+    gendh    => "dh",
+    dhparam  => "dh",
+    ecparam  => "ec",
+    pkcs12   => "des",
+);
+
+print "#ifdef INCLUDE_FUNCTION_TABLE\n";
+print "static FUNCTION functions[] = {\n";
+foreach my $cmd ( @ARGV ) {
+    my $str = "    {FT_general, \"$cmd\", ${cmd}_main, ${cmd}_options},\n";
+    if ($cmd =~ /^s_/) {
+        print "#ifndef OPENSSL_NO_SOCK\n${str}#endif\n";
+    } elsif (grep { $cmd eq $_ } @disablables) {
+        print "#ifndef OPENSSL_NO_" . uc($cmd) . "\n${str}#endif\n";
+    } elsif (my $disabler = $cmd_disabler{$cmd}) {
+        print "#ifndef OPENSSL_NO_" . uc($disabler) . "\n${str}#endif\n";
+    } else {
+        print $str;
+    }
+}
+
+my %md_disabler = (
+    blake2b512 => "blake2",
+    blake2s256 => "blake2",
+);
+foreach my $cmd (
+    "md2", "md4", "md5",
+    "gost",
+    "sha1", "sha224", "sha256", "sha384",
+    "sha512", "sha512-224", "sha512-256",
+    "sha3-224", "sha3-256", "sha3-384", "sha3-512",
+    "shake128", "shake256",
+    "mdc2", "rmd160", "blake2b512", "blake2s256",
+    "sm3"
+) {
+    my $str = "    {FT_md, \"$cmd\", dgst_main},\n";
+    if (grep { $cmd eq $_ } @disablables) {
+        print "#ifndef OPENSSL_NO_" . uc($cmd) . "\n${str}#endif\n";
+    } elsif (my $disabler = $md_disabler{$cmd}) {
+        print "#ifndef OPENSSL_NO_" . uc($disabler) . "\n${str}#endif\n";
+    } else {
+        print $str;
+    }
+}
+
+my %cipher_disabler = (
+    des3  => "des",
+    desx  => "des",
+    cast5 => "cast",
+);
+foreach my $cmd (
+    "aes-128-cbc", "aes-128-ecb",
+    "aes-192-cbc", "aes-192-ecb",
+    "aes-256-cbc", "aes-256-ecb",
+    "aria-128-cbc", "aria-128-cfb",
+    "aria-128-ctr", "aria-128-ecb", "aria-128-ofb",
+    "aria-128-cfb1", "aria-128-cfb8",
+    "aria-192-cbc", "aria-192-cfb",
+    "aria-192-ctr", "aria-192-ecb", "aria-192-ofb",
+    "aria-192-cfb1", "aria-192-cfb8",
+    "aria-256-cbc", "aria-256-cfb",
+    "aria-256-ctr", "aria-256-ecb", "aria-256-ofb",
+    "aria-256-cfb1", "aria-256-cfb8",
+    "camellia-128-cbc", "camellia-128-ecb",
+    "camellia-192-cbc", "camellia-192-ecb",
+    "camellia-256-cbc", "camellia-256-ecb",
+    "base64", "zlib",
+    "des", "des3", "desx", "idea", "seed", "rc4", "rc4-40",
+    "rc2", "bf", "cast", "rc5",
+    "des-ecb", "des-ede", "des-ede3",
+    "des-cbc", "des-ede-cbc","des-ede3-cbc",
+    "des-cfb", "des-ede-cfb","des-ede3-cfb",
+    "des-ofb", "des-ede-ofb","des-ede3-ofb",
+    "idea-cbc","idea-ecb", "idea-cfb", "idea-ofb",
+    "seed-cbc","seed-ecb", "seed-cfb", "seed-ofb",
+    "rc2-cbc", "rc2-ecb", "rc2-cfb","rc2-ofb", "rc2-64-cbc", "rc2-40-cbc",
+    "bf-cbc", "bf-ecb", "bf-cfb", "bf-ofb",
+    "cast5-cbc","cast5-ecb", "cast5-cfb","cast5-ofb",
+    "cast-cbc", "rc5-cbc", "rc5-ecb", "rc5-cfb", "rc5-ofb",
+    "sm4-cbc", "sm4-ecb", "sm4-cfb", "sm4-ofb", "sm4-ctr"
+) {
+    my $str = "    {FT_cipher, \"$cmd\", enc_main, enc_options},\n";
+    (my $algo = $cmd) =~ s/-.*//g;
+    if ($cmd eq "zlib") {
+        print "#ifdef ZLIB\n${str}#endif\n";
+    } elsif (grep { $algo eq $_ } @disablables) {
+        print "#ifndef OPENSSL_NO_" . uc($algo) . "\n${str}#endif\n";
+    } elsif (my $disabler = $cipher_disabler{$algo}) {
+        print "#ifndef OPENSSL_NO_" . uc($disabler) . "\n${str}#endif\n";
+    } else {
+        print $str;
+    }
+}
+
+print "    {0, NULL, NULL}\n};\n";
+print "#endif\n";
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/rand.c b/trunk/3rdparty/openssl-1.1-fit/apps/rand.c
new file mode 100644
index 000000000..4c6181507
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/rand.c
@@ -0,0 +1,133 @@
+/*
+ * Copyright 1998-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "apps.h"
+#include "progs.h"
+
+#include <ctype.h>
+#include <stdio.h>
+#include <string.h>
+
+#include <openssl/bio.h>
+#include <openssl/err.h>
+#include <openssl/rand.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_OUT, OPT_ENGINE, OPT_BASE64, OPT_HEX,
+    OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS rand_options[] = {
+    {OPT_HELP_STR, 1, '-', "Usage: %s [flags] num\n"},
+    {OPT_HELP_STR, 1, '-', "Valid options are:\n"},
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"out", OPT_OUT, '>', "Output file"},
+    OPT_R_OPTIONS,
+    {"base64", OPT_BASE64, '-', "Base64 encode output"},
+    {"hex", OPT_HEX, '-', "Hex encode output"},
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+#endif
+    {NULL}
+};
+
+int rand_main(int argc, char **argv)
+{
+    ENGINE *e = NULL;
+    BIO *out = NULL;
+    char *outfile = NULL, *prog;
+    OPTION_CHOICE o;
+    int format = FORMAT_BINARY, i, num = -1, r, ret = 1;
+
+    prog = opt_init(argc, argv, rand_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(rand_options);
+            ret = 0;
+            goto end;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_BASE64:
+            format = FORMAT_BASE64;
+            break;
+        case OPT_HEX:
+            format = FORMAT_TEXT;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+    if (argc == 1) {
+        if (!opt_int(argv[0], &num) || num <= 0)
+            goto end;
+    } else if (argc > 0) {
+        BIO_printf(bio_err, "Extra arguments given.\n");
+        goto opthelp;
+    }
+
+    out = bio_open_default(outfile, 'w', format);
+    if (out == NULL)
+        goto end;
+
+    if (format == FORMAT_BASE64) {
+        BIO *b64 = BIO_new(BIO_f_base64());
+        if (b64 == NULL)
+            goto end;
+        out = BIO_push(b64, out);
+    }
+
+    while (num > 0) {
+        unsigned char buf[4096];
+        int chunk;
+
+        chunk = num;
+        if (chunk > (int)sizeof(buf))
+            chunk = sizeof(buf);
+        r = RAND_bytes(buf, chunk);
+        if (r <= 0)
+            goto end;
+        if (format != FORMAT_TEXT) {
+            if (BIO_write(out, buf, chunk) != chunk)
+                goto end;
+        } else {
+            for (i = 0; i < chunk; i++)
+                if (BIO_printf(out, "%02x", buf[i]) != 2)
+                    goto end;
+        }
+        num -= chunk;
+    }
+    if (format == FORMAT_TEXT)
+        BIO_puts(out, "\n");
+    if (BIO_flush(out) <= 0)
+        goto end;
+
+    ret = 0;
+
+ end:
+    if (ret != 0)
+        ERR_print_errors(bio_err);
+    release_engine(e);
+    BIO_free_all(out);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/rehash.c b/trunk/3rdparty/openssl-1.1-fit/apps/rehash.c
new file mode 100644
index 000000000..2b769fbce
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/rehash.c
@@ -0,0 +1,532 @@
+/*
+ * Copyright 2015-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2013-2014 Timo Teräs <timo.teras@gmail.com>
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "apps.h"
+#include "progs.h"
+
+#if defined(OPENSSL_SYS_UNIX) || defined(__APPLE__) || \
+    (defined(__VMS) && defined(__DECC) && __CRTL_VER >= 80300000)
+# include <unistd.h>
+# include <stdio.h>
+# include <limits.h>
+# include <errno.h>
+# include <string.h>
+# include <ctype.h>
+# include <sys/stat.h>
+
+/*
+ * Make sure that the processing of symbol names is treated the same as when
+ * libcrypto is built.  This is done automatically for public headers (see
+ * include/openssl/__DECC_INCLUDE_PROLOGUE.H and __DECC_INCLUDE_EPILOGUE.H),
+ * but not for internal headers.
+ */
+# ifdef __VMS
+#  pragma names save
+#  pragma names as_is,shortened
+# endif
+
+# include "internal/o_dir.h"
+
+# ifdef __VMS
+#  pragma names restore
+# endif
+
+# include <openssl/evp.h>
+# include <openssl/pem.h>
+# include <openssl/x509.h>
+
+
+# ifndef PATH_MAX
+#  define PATH_MAX 4096
+# endif
+# ifndef NAME_MAX
+#  define NAME_MAX 255
+# endif
+# define MAX_COLLISIONS  256
+
+# if defined(OPENSSL_SYS_VXWORKS)
+/*
+ * VxWorks has no symbolic links
+ */
+
+#  define lstat(path, buf) stat(path, buf)
+
+int symlink(const char *target, const char *linkpath)
+{
+    errno = ENOSYS;
+    return -1;
+}
+
+ssize_t readlink(const char *pathname, char *buf, size_t bufsiz)
+{
+    errno = ENOSYS;
+    return -1;
+}
+# endif
+
+typedef struct hentry_st {
+    struct hentry_st *next;
+    char *filename;
+    unsigned short old_id;
+    unsigned char need_symlink;
+    unsigned char digest[EVP_MAX_MD_SIZE];
+} HENTRY;
+
+typedef struct bucket_st {
+    struct bucket_st *next;
+    HENTRY *first_entry, *last_entry;
+    unsigned int hash;
+    unsigned short type;
+    unsigned short num_needed;
+} BUCKET;
+
+enum Type {
+    /* Keep in sync with |suffixes|, below. */
+    TYPE_CERT=0, TYPE_CRL=1
+};
+
+enum Hash {
+    HASH_OLD, HASH_NEW, HASH_BOTH
+};
+
+
+static int evpmdsize;
+static const EVP_MD *evpmd;
+static int remove_links = 1;
+static int verbose = 0;
+static BUCKET *hash_table[257];
+
+static const char *suffixes[] = { "", "r" };
+static const char *extensions[] = { "pem", "crt", "cer", "crl" };
+
+
+static void bit_set(unsigned char *set, unsigned int bit)
+{
+    set[bit >> 3] |= 1 << (bit & 0x7);
+}
+
+static int bit_isset(unsigned char *set, unsigned int bit)
+{
+    return set[bit >> 3] & (1 << (bit & 0x7));
+}
+
+
+/*
+ * Process an entry; return number of errors.
+ */
+static int add_entry(enum Type type, unsigned int hash, const char *filename,
+                      const unsigned char *digest, int need_symlink,
+                      unsigned short old_id)
+{
+    static BUCKET nilbucket;
+    static HENTRY nilhentry;
+    BUCKET *bp;
+    HENTRY *ep, *found = NULL;
+    unsigned int ndx = (type + hash) % OSSL_NELEM(hash_table);
+
+    for (bp = hash_table[ndx]; bp; bp = bp->next)
+        if (bp->type == type && bp->hash == hash)
+            break;
+    if (bp == NULL) {
+        bp = app_malloc(sizeof(*bp), "hash bucket");
+        *bp = nilbucket;
+        bp->next = hash_table[ndx];
+        bp->type = type;
+        bp->hash = hash;
+        hash_table[ndx] = bp;
+    }
+
+    for (ep = bp->first_entry; ep; ep = ep->next) {
+        if (digest && memcmp(digest, ep->digest, evpmdsize) == 0) {
+            BIO_printf(bio_err,
+                       "%s: warning: skipping duplicate %s in %s\n",
+                       opt_getprog(),
+                       type == TYPE_CERT ? "certificate" : "CRL", filename);
+            return 0;
+        }
+        if (strcmp(filename, ep->filename) == 0) {
+            found = ep;
+            if (digest == NULL)
+                break;
+        }
+    }
+    ep = found;
+    if (ep == NULL) {
+        if (bp->num_needed >= MAX_COLLISIONS) {
+            BIO_printf(bio_err,
+                       "%s: error: hash table overflow for %s\n",
+                       opt_getprog(), filename);
+            return 1;
+        }
+        ep = app_malloc(sizeof(*ep), "collision bucket");
+        *ep = nilhentry;
+        ep->old_id = ~0;
+        ep->filename = OPENSSL_strdup(filename);
+        if (bp->last_entry)
+            bp->last_entry->next = ep;
+        if (bp->first_entry == NULL)
+            bp->first_entry = ep;
+        bp->last_entry = ep;
+    }
+
+    if (old_id < ep->old_id)
+        ep->old_id = old_id;
+    if (need_symlink && !ep->need_symlink) {
+        ep->need_symlink = 1;
+        bp->num_needed++;
+        memcpy(ep->digest, digest, evpmdsize);
+    }
+    return 0;
+}
+
+/*
+ * Check if a symlink goes to the right spot; return 0 if okay.
+ * This can be -1 if bad filename, or an error count.
+ */
+static int handle_symlink(const char *filename, const char *fullpath)
+{
+    unsigned int hash = 0;
+    int i, type, id;
+    unsigned char ch;
+    char linktarget[PATH_MAX], *endptr;
+    ossl_ssize_t n;
+
+    for (i = 0; i < 8; i++) {
+        ch = filename[i];
+        if (!isxdigit(ch))
+            return -1;
+        hash <<= 4;
+        hash += OPENSSL_hexchar2int(ch);
+    }
+    if (filename[i++] != '.')
+        return -1;
+    for (type = OSSL_NELEM(suffixes) - 1; type > 0; type--) {
+        const char *suffix = suffixes[type];
+        if (strncasecmp(suffix, &filename[i], strlen(suffix)) == 0)
+            break;
+    }
+    i += strlen(suffixes[type]);
+
+    id = strtoul(&filename[i], &endptr, 10);
+    if (*endptr != '\0')
+        return -1;
+
+    n = readlink(fullpath, linktarget, sizeof(linktarget));
+    if (n < 0 || n >= (int)sizeof(linktarget))
+        return -1;
+    linktarget[n] = 0;
+
+    return add_entry(type, hash, linktarget, NULL, 0, id);
+}
+
+/*
+ * process a file, return number of errors.
+ */
+static int do_file(const char *filename, const char *fullpath, enum Hash h)
+{
+    STACK_OF (X509_INFO) *inf = NULL;
+    X509_INFO *x;
+    X509_NAME *name = NULL;
+    BIO *b;
+    const char *ext;
+    unsigned char digest[EVP_MAX_MD_SIZE];
+    int type, errs = 0;
+    size_t i;
+
+    /* Does it end with a recognized extension? */
+    if ((ext = strrchr(filename, '.')) == NULL)
+        goto end;
+    for (i = 0; i < OSSL_NELEM(extensions); i++) {
+        if (strcasecmp(extensions[i], ext + 1) == 0)
+            break;
+    }
+    if (i >= OSSL_NELEM(extensions))
+        goto end;
+
+    /* Does it have X.509 data in it? */
+    if ((b = BIO_new_file(fullpath, "r")) == NULL) {
+        BIO_printf(bio_err, "%s: error: skipping %s, cannot open file\n",
+                   opt_getprog(), filename);
+        errs++;
+        goto end;
+    }
+    inf = PEM_X509_INFO_read_bio(b, NULL, NULL, NULL);
+    BIO_free(b);
+    if (inf == NULL)
+        goto end;
+
+    if (sk_X509_INFO_num(inf) != 1) {
+        BIO_printf(bio_err,
+                   "%s: warning: skipping %s,"
+                   "it does not contain exactly one certificate or CRL\n",
+                   opt_getprog(), filename);
+        /* This is not an error. */
+        goto end;
+    }
+    x = sk_X509_INFO_value(inf, 0);
+    if (x->x509 != NULL) {
+        type = TYPE_CERT;
+        name = X509_get_subject_name(x->x509);
+        X509_digest(x->x509, evpmd, digest, NULL);
+    } else if (x->crl != NULL) {
+        type = TYPE_CRL;
+        name = X509_CRL_get_issuer(x->crl);
+        X509_CRL_digest(x->crl, evpmd, digest, NULL);
+    } else {
+        ++errs;
+        goto end;
+    }
+    if (name != NULL) {
+        if ((h == HASH_NEW) || (h == HASH_BOTH))
+            errs += add_entry(type, X509_NAME_hash(name), filename, digest, 1, ~0);
+        if ((h == HASH_OLD) || (h == HASH_BOTH))
+            errs += add_entry(type, X509_NAME_hash_old(name), filename, digest, 1, ~0);
+    }
+
+end:
+    sk_X509_INFO_pop_free(inf, X509_INFO_free);
+    return errs;
+}
+
+static void str_free(char *s)
+{
+    OPENSSL_free(s);
+}
+
+static int ends_with_dirsep(const char *path)
+{
+    if (*path != '\0')
+        path += strlen(path) - 1;
+# if defined __VMS
+    if (*path == ']' || *path == '>' || *path == ':')
+        return 1;
+# elif defined _WIN32
+    if (*path == '\\')
+        return 1;
+# endif
+    return *path == '/';
+}
+
+/*
+ * Process a directory; return number of errors found.
+ */
+static int do_dir(const char *dirname, enum Hash h)
+{
+    BUCKET *bp, *nextbp;
+    HENTRY *ep, *nextep;
+    OPENSSL_DIR_CTX *d = NULL;
+    struct stat st;
+    unsigned char idmask[MAX_COLLISIONS / 8];
+    int n, numfiles, nextid, buflen, errs = 0;
+    size_t i;
+    const char *pathsep;
+    const char *filename;
+    char *buf, *copy = NULL;
+    STACK_OF(OPENSSL_STRING) *files = NULL;
+
+    if (app_access(dirname, W_OK) < 0) {
+        BIO_printf(bio_err, "Skipping %s, can't write\n", dirname);
+        return 1;
+    }
+    buflen = strlen(dirname);
+    pathsep = (buflen && !ends_with_dirsep(dirname)) ? "/": "";
+    buflen += NAME_MAX + 1 + 1;
+    buf = app_malloc(buflen, "filename buffer");
+
+    if (verbose)
+        BIO_printf(bio_out, "Doing %s\n", dirname);
+
+    if ((files = sk_OPENSSL_STRING_new_null()) == NULL) {
+        BIO_printf(bio_err, "Skipping %s, out of memory\n", dirname);
+        errs = 1;
+        goto err;
+    }
+    while ((filename = OPENSSL_DIR_read(&d, dirname)) != NULL) {
+        if ((copy = OPENSSL_strdup(filename)) == NULL
+                || sk_OPENSSL_STRING_push(files, copy) == 0) {
+            OPENSSL_free(copy);
+            BIO_puts(bio_err, "out of memory\n");
+            errs = 1;
+            goto err;
+        }
+    }
+    OPENSSL_DIR_end(&d);
+    sk_OPENSSL_STRING_sort(files);
+
+    numfiles = sk_OPENSSL_STRING_num(files);
+    for (n = 0; n < numfiles; ++n) {
+        filename = sk_OPENSSL_STRING_value(files, n);
+        if (BIO_snprintf(buf, buflen, "%s%s%s",
+                         dirname, pathsep, filename) >= buflen)
+            continue;
+        if (lstat(buf, &st) < 0)
+            continue;
+        if (S_ISLNK(st.st_mode) && handle_symlink(filename, buf) == 0)
+            continue;
+        errs += do_file(filename, buf, h);
+    }
+
+    for (i = 0; i < OSSL_NELEM(hash_table); i++) {
+        for (bp = hash_table[i]; bp; bp = nextbp) {
+            nextbp = bp->next;
+            nextid = 0;
+            memset(idmask, 0, (bp->num_needed + 7) / 8);
+            for (ep = bp->first_entry; ep; ep = ep->next)
+                if (ep->old_id < bp->num_needed)
+                    bit_set(idmask, ep->old_id);
+
+            for (ep = bp->first_entry; ep; ep = nextep) {
+                nextep = ep->next;
+                if (ep->old_id < bp->num_needed) {
+                    /* Link exists, and is used as-is */
+                    BIO_snprintf(buf, buflen, "%08x.%s%d", bp->hash,
+                                 suffixes[bp->type], ep->old_id);
+                    if (verbose)
+                        BIO_printf(bio_out, "link %s -> %s\n",
+                                   ep->filename, buf);
+                } else if (ep->need_symlink) {
+                    /* New link needed (it may replace something) */
+                    while (bit_isset(idmask, nextid))
+                        nextid++;
+
+                    BIO_snprintf(buf, buflen, "%s%s%n%08x.%s%d",
+                                 dirname, pathsep, &n, bp->hash,
+                                 suffixes[bp->type], nextid);
+                    if (verbose)
+                        BIO_printf(bio_out, "link %s -> %s\n",
+                                   ep->filename, &buf[n]);
+                    if (unlink(buf) < 0 && errno != ENOENT) {
+                        BIO_printf(bio_err,
+                                   "%s: Can't unlink %s, %s\n",
+                                   opt_getprog(), buf, strerror(errno));
+                        errs++;
+                    }
+                    if (symlink(ep->filename, buf) < 0) {
+                        BIO_printf(bio_err,
+                                   "%s: Can't symlink %s, %s\n",
+                                   opt_getprog(), ep->filename,
+                                   strerror(errno));
+                        errs++;
+                    }
+                    bit_set(idmask, nextid);
+                } else if (remove_links) {
+                    /* Link to be deleted */
+                    BIO_snprintf(buf, buflen, "%s%s%n%08x.%s%d",
+                                 dirname, pathsep, &n, bp->hash,
+                                 suffixes[bp->type], ep->old_id);
+                    if (verbose)
+                        BIO_printf(bio_out, "unlink %s\n",
+                                   &buf[n]);
+                    if (unlink(buf) < 0 && errno != ENOENT) {
+                        BIO_printf(bio_err,
+                                   "%s: Can't unlink %s, %s\n",
+                                   opt_getprog(), buf, strerror(errno));
+                        errs++;
+                    }
+                }
+                OPENSSL_free(ep->filename);
+                OPENSSL_free(ep);
+            }
+            OPENSSL_free(bp);
+        }
+        hash_table[i] = NULL;
+    }
+
+ err:
+    sk_OPENSSL_STRING_pop_free(files, str_free);
+    OPENSSL_free(buf);
+    return errs;
+}
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_COMPAT, OPT_OLD, OPT_N, OPT_VERBOSE
+} OPTION_CHOICE;
+
+const OPTIONS rehash_options[] = {
+    {OPT_HELP_STR, 1, '-', "Usage: %s [options] [cert-directory...]\n"},
+    {OPT_HELP_STR, 1, '-', "Valid options are:\n"},
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"h", OPT_HELP, '-', "Display this summary"},
+    {"compat", OPT_COMPAT, '-', "Create both new- and old-style hash links"},
+    {"old", OPT_OLD, '-', "Use old-style hash to generate links"},
+    {"n", OPT_N, '-', "Do not remove existing links"},
+    {"v", OPT_VERBOSE, '-', "Verbose output"},
+    {NULL}
+};
+
+
+int rehash_main(int argc, char **argv)
+{
+    const char *env, *prog;
+    char *e, *m;
+    int errs = 0;
+    OPTION_CHOICE o;
+    enum Hash h = HASH_NEW;
+
+    prog = opt_init(argc, argv, rehash_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(rehash_options);
+            goto end;
+        case OPT_COMPAT:
+            h = HASH_BOTH;
+            break;
+        case OPT_OLD:
+            h = HASH_OLD;
+            break;
+        case OPT_N:
+            remove_links = 0;
+            break;
+        case OPT_VERBOSE:
+            verbose = 1;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+
+    evpmd = EVP_sha1();
+    evpmdsize = EVP_MD_size(evpmd);
+
+    if (*argv != NULL) {
+        while (*argv != NULL)
+            errs += do_dir(*argv++, h);
+    } else if ((env = getenv(X509_get_default_cert_dir_env())) != NULL) {
+        char lsc[2] = { LIST_SEPARATOR_CHAR, '\0' };
+        m = OPENSSL_strdup(env);
+        for (e = strtok(m, lsc); e != NULL; e = strtok(NULL, lsc))
+            errs += do_dir(e, h);
+        OPENSSL_free(m);
+    } else {
+        errs += do_dir(X509_get_default_cert_dir(), h);
+    }
+
+ end:
+    return errs;
+}
+
+#else
+const OPTIONS rehash_options[] = {
+    {NULL}
+};
+
+int rehash_main(int argc, char **argv)
+{
+    BIO_printf(bio_err, "Not available; use c_rehash script\n");
+    return 1;
+}
+
+#endif /* defined(OPENSSL_SYS_UNIX) || defined(__APPLE__) */
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/req.c b/trunk/3rdparty/openssl-1.1-fit/apps/req.c
new file mode 100644
index 000000000..6fd28a2ab
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/req.c
@@ -0,0 +1,1664 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <time.h>
+#include <string.h>
+#include <ctype.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/bio.h>
+#include <openssl/evp.h>
+#include <openssl/conf.h>
+#include <openssl/err.h>
+#include <openssl/asn1.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/objects.h>
+#include <openssl/pem.h>
+#include <openssl/bn.h>
+#include <openssl/lhash.h>
+#ifndef OPENSSL_NO_RSA
+# include <openssl/rsa.h>
+#endif
+#ifndef OPENSSL_NO_DSA
+# include <openssl/dsa.h>
+#endif
+
+#define SECTION         "req"
+
+#define BITS            "default_bits"
+#define KEYFILE         "default_keyfile"
+#define PROMPT          "prompt"
+#define DISTINGUISHED_NAME      "distinguished_name"
+#define ATTRIBUTES      "attributes"
+#define V3_EXTENSIONS   "x509_extensions"
+#define REQ_EXTENSIONS  "req_extensions"
+#define STRING_MASK     "string_mask"
+#define UTF8_IN         "utf8"
+
+#define DEFAULT_KEY_LENGTH      2048
+#define MIN_KEY_LENGTH          512
+
+static int make_REQ(X509_REQ *req, EVP_PKEY *pkey, char *dn, int mutlirdn,
+                    int attribs, unsigned long chtype);
+static int build_subject(X509_REQ *req, const char *subj, unsigned long chtype,
+                         int multirdn);
+static int prompt_info(X509_REQ *req,
+                       STACK_OF(CONF_VALUE) *dn_sk, const char *dn_sect,
+                       STACK_OF(CONF_VALUE) *attr_sk, const char *attr_sect,
+                       int attribs, unsigned long chtype);
+static int auto_info(X509_REQ *req, STACK_OF(CONF_VALUE) *sk,
+                     STACK_OF(CONF_VALUE) *attr, int attribs,
+                     unsigned long chtype);
+static int add_attribute_object(X509_REQ *req, char *text, const char *def,
+                                char *value, int nid, int n_min, int n_max,
+                                unsigned long chtype);
+static int add_DN_object(X509_NAME *n, char *text, const char *def,
+                         char *value, int nid, int n_min, int n_max,
+                         unsigned long chtype, int mval);
+static int genpkey_cb(EVP_PKEY_CTX *ctx);
+static int build_data(char *text, const char *def,
+                      char *value, int n_min, int n_max,
+                      char *buf, const int buf_size,
+                      const char *desc1, const char *desc2
+                      );
+static int req_check_len(int len, int n_min, int n_max);
+static int check_end(const char *str, const char *end);
+static int join(char buf[], size_t buf_size, const char *name,
+                const char *tail, const char *desc);
+static EVP_PKEY_CTX *set_keygen_ctx(const char *gstr,
+                                    int *pkey_type, long *pkeylen,
+                                    char **palgnam, ENGINE *keygen_engine);
+static CONF *req_conf = NULL;
+static CONF *addext_conf = NULL;
+static int batch = 0;
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_INFORM, OPT_OUTFORM, OPT_ENGINE, OPT_KEYGEN_ENGINE, OPT_KEY,
+    OPT_PUBKEY, OPT_NEW, OPT_CONFIG, OPT_KEYFORM, OPT_IN, OPT_OUT,
+    OPT_KEYOUT, OPT_PASSIN, OPT_PASSOUT, OPT_NEWKEY,
+    OPT_PKEYOPT, OPT_SIGOPT, OPT_BATCH, OPT_NEWHDR, OPT_MODULUS,
+    OPT_VERIFY, OPT_NODES, OPT_NOOUT, OPT_VERBOSE, OPT_UTF8,
+    OPT_NAMEOPT, OPT_REQOPT, OPT_SUBJ, OPT_SUBJECT, OPT_TEXT, OPT_X509,
+    OPT_MULTIVALUE_RDN, OPT_DAYS, OPT_SET_SERIAL, OPT_ADDEXT, OPT_EXTENSIONS,
+    OPT_REQEXTS, OPT_PRECERT, OPT_MD,
+    OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS req_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"inform", OPT_INFORM, 'F', "Input format - DER or PEM"},
+    {"outform", OPT_OUTFORM, 'F', "Output format - DER or PEM"},
+    {"in", OPT_IN, '<', "Input file"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"key", OPT_KEY, 's', "Private key to use"},
+    {"keyform", OPT_KEYFORM, 'f', "Key file format"},
+    {"pubkey", OPT_PUBKEY, '-', "Output public key"},
+    {"new", OPT_NEW, '-', "New request"},
+    {"config", OPT_CONFIG, '<', "Request template file"},
+    {"keyout", OPT_KEYOUT, '>', "File to send the key to"},
+    {"passin", OPT_PASSIN, 's', "Private key password source"},
+    {"passout", OPT_PASSOUT, 's', "Output file pass phrase source"},
+    OPT_R_OPTIONS,
+    {"newkey", OPT_NEWKEY, 's', "Specify as type:bits"},
+    {"pkeyopt", OPT_PKEYOPT, 's', "Public key options as opt:value"},
+    {"sigopt", OPT_SIGOPT, 's', "Signature parameter in n:v form"},
+    {"batch", OPT_BATCH, '-',
+     "Do not ask anything during request generation"},
+    {"newhdr", OPT_NEWHDR, '-', "Output \"NEW\" in the header lines"},
+    {"modulus", OPT_MODULUS, '-', "RSA modulus"},
+    {"verify", OPT_VERIFY, '-', "Verify signature on REQ"},
+    {"nodes", OPT_NODES, '-', "Don't encrypt the output key"},
+    {"noout", OPT_NOOUT, '-', "Do not output REQ"},
+    {"verbose", OPT_VERBOSE, '-', "Verbose output"},
+    {"utf8", OPT_UTF8, '-', "Input characters are UTF8 (default ASCII)"},
+    {"nameopt", OPT_NAMEOPT, 's', "Various certificate name options"},
+    {"reqopt", OPT_REQOPT, 's', "Various request text options"},
+    {"text", OPT_TEXT, '-', "Text form of request"},
+    {"x509", OPT_X509, '-',
+     "Output a x509 structure instead of a cert request"},
+    {OPT_MORE_STR, 1, 1, "(Required by some CA's)"},
+    {"subj", OPT_SUBJ, 's', "Set or modify request subject"},
+    {"subject", OPT_SUBJECT, '-', "Output the request's subject"},
+    {"multivalue-rdn", OPT_MULTIVALUE_RDN, '-',
+     "Enable support for multivalued RDNs"},
+    {"days", OPT_DAYS, 'p', "Number of days cert is valid for"},
+    {"set_serial", OPT_SET_SERIAL, 's', "Serial number to use"},
+    {"addext", OPT_ADDEXT, 's',
+     "Additional cert extension key=value pair (may be given more than once)"},
+    {"extensions", OPT_EXTENSIONS, 's',
+     "Cert extension section (override value in config file)"},
+    {"reqexts", OPT_REQEXTS, 's',
+     "Request extension section (override value in config file)"},
+    {"precert", OPT_PRECERT, '-', "Add a poison extension (implies -new)"},
+    {"", OPT_MD, '-', "Any supported digest"},
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+    {"keygen_engine", OPT_KEYGEN_ENGINE, 's',
+     "Specify engine to be used for key generation operations"},
+#endif
+    {NULL}
+};
+
+
+/*
+ * An LHASH of strings, where each string is an extension name.
+ */
+static unsigned long ext_name_hash(const OPENSSL_STRING *a)
+{
+    return OPENSSL_LH_strhash((const char *)a);
+}
+
+static int ext_name_cmp(const OPENSSL_STRING *a, const OPENSSL_STRING *b)
+{
+    return strcmp((const char *)a, (const char *)b);
+}
+
+static void exts_cleanup(OPENSSL_STRING *x)
+{
+    OPENSSL_free((char *)x);
+}
+
+/*
+ * Is the |kv| key already duplicated?  This is remarkably tricky to get
+ * right.  Return 0 if unique, -1 on runtime error; 1 if found or a syntax
+ * error.
+ */
+static int duplicated(LHASH_OF(OPENSSL_STRING) *addexts, char *kv)
+{
+    char *p;
+    size_t off;
+
+    /* Check syntax. */
+    /* Skip leading whitespace, make a copy. */
+    while (*kv && isspace(*kv))
+        if (*++kv == '\0')
+            return 1;
+    if ((p = strchr(kv, '=')) == NULL)
+        return 1;
+    off = p - kv;
+    if ((kv = OPENSSL_strdup(kv)) == NULL)
+        return -1;
+
+    /* Skip trailing space before the equal sign. */
+    for (p = kv + off; p > kv; --p)
+        if (!isspace(p[-1]))
+            break;
+    if (p == kv) {
+        OPENSSL_free(kv);
+        return 1;
+    }
+    *p = '\0';
+
+    /* Finally have a clean "key"; see if it's there [by attempt to add it]. */
+    if ((p = (char *)lh_OPENSSL_STRING_insert(addexts, (OPENSSL_STRING*)kv))
+        != NULL || lh_OPENSSL_STRING_error(addexts)) {
+        OPENSSL_free(p != NULL ? p : kv);
+        return -1;
+    }
+
+    return 0;
+}
+
+int req_main(int argc, char **argv)
+{
+    ASN1_INTEGER *serial = NULL;
+    BIO *in = NULL, *out = NULL;
+    ENGINE *e = NULL, *gen_eng = NULL;
+    EVP_PKEY *pkey = NULL;
+    EVP_PKEY_CTX *genctx = NULL;
+    STACK_OF(OPENSSL_STRING) *pkeyopts = NULL, *sigopts = NULL;
+    LHASH_OF(OPENSSL_STRING) *addexts = NULL;
+    X509 *x509ss = NULL;
+    X509_REQ *req = NULL;
+    const EVP_CIPHER *cipher = NULL;
+    const EVP_MD *md_alg = NULL, *digest = NULL;
+    BIO *addext_bio = NULL;
+    char *extensions = NULL, *infile = NULL;
+    char *outfile = NULL, *keyfile = NULL;
+    char *keyalgstr = NULL, *p, *prog, *passargin = NULL, *passargout = NULL;
+    char *passin = NULL, *passout = NULL;
+    char *nofree_passin = NULL, *nofree_passout = NULL;
+    char *req_exts = NULL, *subj = NULL;
+    char *template = default_config_file, *keyout = NULL;
+    const char *keyalg = NULL;
+    OPTION_CHOICE o;
+    int ret = 1, x509 = 0, days = 0, i = 0, newreq = 0, verbose = 0;
+    int pkey_type = -1, private = 0;
+    int informat = FORMAT_PEM, outformat = FORMAT_PEM, keyform = FORMAT_PEM;
+    int modulus = 0, multirdn = 0, verify = 0, noout = 0, text = 0;
+    int nodes = 0, newhdr = 0, subject = 0, pubkey = 0, precert = 0;
+    long newkey = -1;
+    unsigned long chtype = MBSTRING_ASC, reqflag = 0;
+
+#ifndef OPENSSL_NO_DES
+    cipher = EVP_des_ede3_cbc();
+#endif
+
+    prog = opt_init(argc, argv, req_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(req_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &informat))
+                goto opthelp;
+            break;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &outformat))
+                goto opthelp;
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_KEYGEN_ENGINE:
+#ifndef OPENSSL_NO_ENGINE
+            gen_eng = ENGINE_by_id(opt_arg());
+            if (gen_eng == NULL) {
+                BIO_printf(bio_err, "Can't find keygen engine %s\n", *argv);
+                goto opthelp;
+            }
+#endif
+            break;
+        case OPT_KEY:
+            keyfile = opt_arg();
+            break;
+        case OPT_PUBKEY:
+            pubkey = 1;
+            break;
+        case OPT_NEW:
+            newreq = 1;
+            break;
+        case OPT_CONFIG:
+            template = opt_arg();
+            break;
+        case OPT_KEYFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_ANY, &keyform))
+                goto opthelp;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_KEYOUT:
+            keyout = opt_arg();
+            break;
+        case OPT_PASSIN:
+            passargin = opt_arg();
+            break;
+        case OPT_PASSOUT:
+            passargout = opt_arg();
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_NEWKEY:
+            keyalg = opt_arg();
+            newreq = 1;
+            break;
+        case OPT_PKEYOPT:
+            if (!pkeyopts)
+                pkeyopts = sk_OPENSSL_STRING_new_null();
+            if (!pkeyopts || !sk_OPENSSL_STRING_push(pkeyopts, opt_arg()))
+                goto opthelp;
+            break;
+        case OPT_SIGOPT:
+            if (!sigopts)
+                sigopts = sk_OPENSSL_STRING_new_null();
+            if (!sigopts || !sk_OPENSSL_STRING_push(sigopts, opt_arg()))
+                goto opthelp;
+            break;
+        case OPT_BATCH:
+            batch = 1;
+            break;
+        case OPT_NEWHDR:
+            newhdr = 1;
+            break;
+        case OPT_MODULUS:
+            modulus = 1;
+            break;
+        case OPT_VERIFY:
+            verify = 1;
+            break;
+        case OPT_NODES:
+            nodes = 1;
+            break;
+        case OPT_NOOUT:
+            noout = 1;
+            break;
+        case OPT_VERBOSE:
+            verbose = 1;
+            break;
+        case OPT_UTF8:
+            chtype = MBSTRING_UTF8;
+            break;
+        case OPT_NAMEOPT:
+            if (!set_nameopt(opt_arg()))
+                goto opthelp;
+            break;
+        case OPT_REQOPT:
+            if (!set_cert_ex(&reqflag, opt_arg()))
+                goto opthelp;
+            break;
+        case OPT_TEXT:
+            text = 1;
+            break;
+        case OPT_X509:
+            x509 = 1;
+            break;
+        case OPT_DAYS:
+            days = atoi(opt_arg());
+            break;
+        case OPT_SET_SERIAL:
+            if (serial != NULL) {
+                BIO_printf(bio_err, "Serial number supplied twice\n");
+                goto opthelp;
+            }
+            serial = s2i_ASN1_INTEGER(NULL, opt_arg());
+            if (serial == NULL)
+                goto opthelp;
+            break;
+        case OPT_SUBJECT:
+            subject = 1;
+            break;
+        case OPT_SUBJ:
+            subj = opt_arg();
+            break;
+        case OPT_MULTIVALUE_RDN:
+            multirdn = 1;
+            break;
+        case OPT_ADDEXT:
+            p = opt_arg();
+            if (addexts == NULL) {
+                addexts = lh_OPENSSL_STRING_new(ext_name_hash, ext_name_cmp);
+                addext_bio = BIO_new(BIO_s_mem());
+                if (addexts == NULL || addext_bio == NULL)
+                    goto end;
+            }
+            i = duplicated(addexts, p);
+            if (i == 1)
+                goto opthelp;
+            if (i < 0 || BIO_printf(addext_bio, "%s\n", opt_arg()) < 0)
+                goto end;
+            break;
+        case OPT_EXTENSIONS:
+            extensions = opt_arg();
+            break;
+        case OPT_REQEXTS:
+            req_exts = opt_arg();
+            break;
+        case OPT_PRECERT:
+            newreq = precert = 1;
+            break;
+        case OPT_MD:
+            if (!opt_md(opt_unknown(), &md_alg))
+                goto opthelp;
+            digest = md_alg;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    if (days && !x509)
+        BIO_printf(bio_err, "Ignoring -days; not generating a certificate\n");
+    if (x509 && infile == NULL)
+        newreq = 1;
+
+    /* TODO: simplify this as pkey is still always NULL here */
+    private = newreq && (pkey == NULL) ? 1 : 0;
+
+    if (!app_passwd(passargin, passargout, &passin, &passout)) {
+        BIO_printf(bio_err, "Error getting passwords\n");
+        goto end;
+    }
+
+    if (verbose)
+        BIO_printf(bio_err, "Using configuration from %s\n", template);
+    req_conf = app_load_config(template);
+    if (addext_bio) {
+        if (verbose)
+            BIO_printf(bio_err,
+                       "Using additional configuration from command line\n");
+        addext_conf = app_load_config_bio(addext_bio, NULL);
+    }
+    if (template != default_config_file && !app_load_modules(req_conf))
+        goto end;
+
+    if (req_conf != NULL) {
+        p = NCONF_get_string(req_conf, NULL, "oid_file");
+        if (p == NULL)
+            ERR_clear_error();
+        if (p != NULL) {
+            BIO *oid_bio;
+
+            oid_bio = BIO_new_file(p, "r");
+            if (oid_bio == NULL) {
+                /*-
+                BIO_printf(bio_err,"problems opening %s for extra oid's\n",p);
+                ERR_print_errors(bio_err);
+                */
+            } else {
+                OBJ_create_objects(oid_bio);
+                BIO_free(oid_bio);
+            }
+        }
+    }
+    if (!add_oid_section(req_conf))
+        goto end;
+
+    if (md_alg == NULL) {
+        p = NCONF_get_string(req_conf, SECTION, "default_md");
+        if (p == NULL) {
+            ERR_clear_error();
+        } else {
+            if (!opt_md(p, &md_alg))
+                goto opthelp;
+            digest = md_alg;
+        }
+    }
+
+    if (extensions == NULL) {
+        extensions = NCONF_get_string(req_conf, SECTION, V3_EXTENSIONS);
+        if (extensions == NULL)
+            ERR_clear_error();
+    }
+    if (extensions != NULL) {
+        /* Check syntax of file */
+        X509V3_CTX ctx;
+        X509V3_set_ctx_test(&ctx);
+        X509V3_set_nconf(&ctx, req_conf);
+        if (!X509V3_EXT_add_nconf(req_conf, &ctx, extensions, NULL)) {
+            BIO_printf(bio_err,
+                       "Error Loading extension section %s\n", extensions);
+            goto end;
+        }
+    }
+    if (addext_conf != NULL) {
+        /* Check syntax of command line extensions */
+        X509V3_CTX ctx;
+        X509V3_set_ctx_test(&ctx);
+        X509V3_set_nconf(&ctx, addext_conf);
+        if (!X509V3_EXT_add_nconf(addext_conf, &ctx, "default", NULL)) {
+            BIO_printf(bio_err, "Error Loading command line extensions\n");
+            goto end;
+        }
+    }
+
+    if (passin == NULL) {
+        passin = nofree_passin =
+            NCONF_get_string(req_conf, SECTION, "input_password");
+        if (passin == NULL)
+            ERR_clear_error();
+    }
+
+    if (passout == NULL) {
+        passout = nofree_passout =
+            NCONF_get_string(req_conf, SECTION, "output_password");
+        if (passout == NULL)
+            ERR_clear_error();
+    }
+
+    p = NCONF_get_string(req_conf, SECTION, STRING_MASK);
+    if (p == NULL)
+        ERR_clear_error();
+
+    if (p != NULL && !ASN1_STRING_set_default_mask_asc(p)) {
+        BIO_printf(bio_err, "Invalid global string mask setting %s\n", p);
+        goto end;
+    }
+
+    if (chtype != MBSTRING_UTF8) {
+        p = NCONF_get_string(req_conf, SECTION, UTF8_IN);
+        if (p == NULL)
+            ERR_clear_error();
+        else if (strcmp(p, "yes") == 0)
+            chtype = MBSTRING_UTF8;
+    }
+
+    if (req_exts == NULL) {
+        req_exts = NCONF_get_string(req_conf, SECTION, REQ_EXTENSIONS);
+        if (req_exts == NULL)
+            ERR_clear_error();
+    }
+    if (req_exts != NULL) {
+        /* Check syntax of file */
+        X509V3_CTX ctx;
+        X509V3_set_ctx_test(&ctx);
+        X509V3_set_nconf(&ctx, req_conf);
+        if (!X509V3_EXT_add_nconf(req_conf, &ctx, req_exts, NULL)) {
+            BIO_printf(bio_err,
+                       "Error Loading request extension section %s\n",
+                       req_exts);
+            goto end;
+        }
+    }
+
+    if (keyfile != NULL) {
+        pkey = load_key(keyfile, keyform, 0, passin, e, "Private Key");
+        if (pkey == NULL) {
+            /* load_key() has already printed an appropriate message */
+            goto end;
+        } else {
+            app_RAND_load_conf(req_conf, SECTION);
+        }
+    }
+
+    if (newreq && (pkey == NULL)) {
+        app_RAND_load_conf(req_conf, SECTION);
+
+        if (!NCONF_get_number(req_conf, SECTION, BITS, &newkey)) {
+            newkey = DEFAULT_KEY_LENGTH;
+        }
+
+        if (keyalg != NULL) {
+            genctx = set_keygen_ctx(keyalg, &pkey_type, &newkey,
+                                    &keyalgstr, gen_eng);
+            if (genctx == NULL)
+                goto end;
+        }
+
+        if (newkey < MIN_KEY_LENGTH
+            && (pkey_type == EVP_PKEY_RSA || pkey_type == EVP_PKEY_DSA)) {
+            BIO_printf(bio_err, "private key length is too short,\n");
+            BIO_printf(bio_err, "it needs to be at least %d bits, not %ld\n",
+                       MIN_KEY_LENGTH, newkey);
+            goto end;
+        }
+
+        if (pkey_type == EVP_PKEY_RSA && newkey > OPENSSL_RSA_MAX_MODULUS_BITS)
+            BIO_printf(bio_err,
+                       "Warning: It is not recommended to use more than %d bit for RSA keys.\n"
+                       "         Your key size is %ld! Larger key size may behave not as expected.\n",
+                       OPENSSL_RSA_MAX_MODULUS_BITS, newkey);
+
+#ifndef OPENSSL_NO_DSA
+        if (pkey_type == EVP_PKEY_DSA && newkey > OPENSSL_DSA_MAX_MODULUS_BITS)
+            BIO_printf(bio_err,
+                       "Warning: It is not recommended to use more than %d bit for DSA keys.\n"
+                       "         Your key size is %ld! Larger key size may behave not as expected.\n",
+                       OPENSSL_DSA_MAX_MODULUS_BITS, newkey);
+#endif
+
+        if (genctx == NULL) {
+            genctx = set_keygen_ctx(NULL, &pkey_type, &newkey,
+                                    &keyalgstr, gen_eng);
+            if (!genctx)
+                goto end;
+        }
+
+        if (pkeyopts != NULL) {
+            char *genopt;
+            for (i = 0; i < sk_OPENSSL_STRING_num(pkeyopts); i++) {
+                genopt = sk_OPENSSL_STRING_value(pkeyopts, i);
+                if (pkey_ctrl_string(genctx, genopt) <= 0) {
+                    BIO_printf(bio_err, "parameter error \"%s\"\n", genopt);
+                    ERR_print_errors(bio_err);
+                    goto end;
+                }
+            }
+        }
+
+        if (pkey_type == EVP_PKEY_EC) {
+            BIO_printf(bio_err, "Generating an EC private key\n");
+        } else {
+            BIO_printf(bio_err, "Generating a %s private key\n", keyalgstr);
+        }
+
+        EVP_PKEY_CTX_set_cb(genctx, genpkey_cb);
+        EVP_PKEY_CTX_set_app_data(genctx, bio_err);
+
+        if (EVP_PKEY_keygen(genctx, &pkey) <= 0) {
+            BIO_puts(bio_err, "Error Generating Key\n");
+            goto end;
+        }
+
+        EVP_PKEY_CTX_free(genctx);
+        genctx = NULL;
+
+        if (keyout == NULL) {
+            keyout = NCONF_get_string(req_conf, SECTION, KEYFILE);
+            if (keyout == NULL)
+                ERR_clear_error();
+        }
+
+        if (keyout == NULL)
+            BIO_printf(bio_err, "writing new private key to stdout\n");
+        else
+            BIO_printf(bio_err, "writing new private key to '%s'\n", keyout);
+        out = bio_open_owner(keyout, outformat, private);
+        if (out == NULL)
+            goto end;
+
+        p = NCONF_get_string(req_conf, SECTION, "encrypt_rsa_key");
+        if (p == NULL) {
+            ERR_clear_error();
+            p = NCONF_get_string(req_conf, SECTION, "encrypt_key");
+            if (p == NULL)
+                ERR_clear_error();
+        }
+        if ((p != NULL) && (strcmp(p, "no") == 0))
+            cipher = NULL;
+        if (nodes)
+            cipher = NULL;
+
+        i = 0;
+ loop:
+        assert(private);
+        if (!PEM_write_bio_PrivateKey(out, pkey, cipher,
+                                      NULL, 0, NULL, passout)) {
+            if ((ERR_GET_REASON(ERR_peek_error()) ==
+                 PEM_R_PROBLEMS_GETTING_PASSWORD) && (i < 3)) {
+                ERR_clear_error();
+                i++;
+                goto loop;
+            }
+            goto end;
+        }
+        BIO_free(out);
+        out = NULL;
+        BIO_printf(bio_err, "-----\n");
+    }
+
+    if (!newreq) {
+        in = bio_open_default(infile, 'r', informat);
+        if (in == NULL)
+            goto end;
+
+        if (informat == FORMAT_ASN1)
+            req = d2i_X509_REQ_bio(in, NULL);
+        else
+            req = PEM_read_bio_X509_REQ(in, NULL, NULL, NULL);
+        if (req == NULL) {
+            BIO_printf(bio_err, "unable to load X509 request\n");
+            goto end;
+        }
+    }
+
+    if (newreq || x509) {
+        if (pkey == NULL) {
+            BIO_printf(bio_err, "you need to specify a private key\n");
+            goto end;
+        }
+
+        if (req == NULL) {
+            req = X509_REQ_new();
+            if (req == NULL) {
+                goto end;
+            }
+
+            i = make_REQ(req, pkey, subj, multirdn, !x509, chtype);
+            subj = NULL;        /* done processing '-subj' option */
+            if (!i) {
+                BIO_printf(bio_err, "problems making Certificate Request\n");
+                goto end;
+            }
+        }
+        if (x509) {
+            EVP_PKEY *tmppkey;
+            X509V3_CTX ext_ctx;
+            if ((x509ss = X509_new()) == NULL)
+                goto end;
+
+            /* Set version to V3 */
+            if ((extensions != NULL || addext_conf != NULL)
+                && !X509_set_version(x509ss, 2))
+                goto end;
+            if (serial != NULL) {
+                if (!X509_set_serialNumber(x509ss, serial))
+                    goto end;
+            } else {
+                if (!rand_serial(NULL, X509_get_serialNumber(x509ss)))
+                    goto end;
+            }
+
+            if (!X509_set_issuer_name(x509ss, X509_REQ_get_subject_name(req)))
+                goto end;
+            if (days == 0) {
+                /* set default days if it's not specified */
+                days = 30;
+            }
+            if (!set_cert_times(x509ss, NULL, NULL, days))
+                goto end;
+            if (!X509_set_subject_name
+                (x509ss, X509_REQ_get_subject_name(req)))
+                goto end;
+            tmppkey = X509_REQ_get0_pubkey(req);
+            if (!tmppkey || !X509_set_pubkey(x509ss, tmppkey))
+                goto end;
+
+            /* Set up V3 context struct */
+
+            X509V3_set_ctx(&ext_ctx, x509ss, x509ss, NULL, NULL, 0);
+            X509V3_set_nconf(&ext_ctx, req_conf);
+
+            /* Add extensions */
+            if (extensions != NULL && !X509V3_EXT_add_nconf(req_conf,
+                                                            &ext_ctx, extensions,
+                                                            x509ss)) {
+                BIO_printf(bio_err, "Error Loading extension section %s\n",
+                           extensions);
+                goto end;
+            }
+            if (addext_conf != NULL
+                && !X509V3_EXT_add_nconf(addext_conf, &ext_ctx, "default",
+                                         x509ss)) {
+                BIO_printf(bio_err, "Error Loading command line extensions\n");
+                goto end;
+            }
+
+            /* If a pre-cert was requested, we need to add a poison extension */
+            if (precert) {
+                if (X509_add1_ext_i2d(x509ss, NID_ct_precert_poison, NULL, 1, 0)
+                    != 1) {
+                    BIO_printf(bio_err, "Error adding poison extension\n");
+                    goto end;
+                }
+            }
+
+            i = do_X509_sign(x509ss, pkey, digest, sigopts);
+            if (!i) {
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+        } else {
+            X509V3_CTX ext_ctx;
+
+            /* Set up V3 context struct */
+
+            X509V3_set_ctx(&ext_ctx, NULL, NULL, req, NULL, 0);
+            X509V3_set_nconf(&ext_ctx, req_conf);
+
+            /* Add extensions */
+            if (req_exts != NULL
+                && !X509V3_EXT_REQ_add_nconf(req_conf, &ext_ctx,
+                                             req_exts, req)) {
+                BIO_printf(bio_err, "Error Loading extension section %s\n",
+                           req_exts);
+                goto end;
+            }
+            if (addext_conf != NULL
+                && !X509V3_EXT_REQ_add_nconf(addext_conf, &ext_ctx, "default",
+                                             req)) {
+                BIO_printf(bio_err, "Error Loading command line extensions\n");
+                goto end;
+            }
+            i = do_X509_REQ_sign(req, pkey, digest, sigopts);
+            if (!i) {
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+        }
+    }
+
+    if (subj && x509) {
+        BIO_printf(bio_err, "Cannot modify certificate subject\n");
+        goto end;
+    }
+
+    if (subj && !x509) {
+        if (verbose) {
+            BIO_printf(bio_err, "Modifying Request's Subject\n");
+            print_name(bio_err, "old subject=",
+                       X509_REQ_get_subject_name(req), get_nameopt());
+        }
+
+        if (build_subject(req, subj, chtype, multirdn) == 0) {
+            BIO_printf(bio_err, "ERROR: cannot modify subject\n");
+            ret = 1;
+            goto end;
+        }
+
+        if (verbose) {
+            print_name(bio_err, "new subject=",
+                       X509_REQ_get_subject_name(req), get_nameopt());
+        }
+    }
+
+    if (verify && !x509) {
+        EVP_PKEY *tpubkey = pkey;
+
+        if (tpubkey == NULL) {
+            tpubkey = X509_REQ_get0_pubkey(req);
+            if (tpubkey == NULL)
+                goto end;
+        }
+
+        i = X509_REQ_verify(req, tpubkey);
+
+        if (i < 0) {
+            goto end;
+        } else if (i == 0) {
+            BIO_printf(bio_err, "verify failure\n");
+            ERR_print_errors(bio_err);
+        } else {                 /* if (i > 0) */
+            BIO_printf(bio_err, "verify OK\n");
+        }
+    }
+
+    if (noout && !text && !modulus && !subject && !pubkey) {
+        ret = 0;
+        goto end;
+    }
+
+    out = bio_open_default(outfile,
+                           keyout != NULL && outfile != NULL &&
+                           strcmp(keyout, outfile) == 0 ? 'a' : 'w',
+                           outformat);
+    if (out == NULL)
+        goto end;
+
+    if (pubkey) {
+        EVP_PKEY *tpubkey = X509_REQ_get0_pubkey(req);
+
+        if (tpubkey == NULL) {
+            BIO_printf(bio_err, "Error getting public key\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        PEM_write_bio_PUBKEY(out, tpubkey);
+    }
+
+    if (text) {
+        if (x509)
+            X509_print_ex(out, x509ss, get_nameopt(), reqflag);
+        else
+            X509_REQ_print_ex(out, req, get_nameopt(), reqflag);
+    }
+
+    if (subject) {
+        if (x509)
+            print_name(out, "subject=", X509_get_subject_name(x509ss),
+                       get_nameopt());
+        else
+            print_name(out, "subject=", X509_REQ_get_subject_name(req),
+                       get_nameopt());
+    }
+
+    if (modulus) {
+        EVP_PKEY *tpubkey;
+
+        if (x509)
+            tpubkey = X509_get0_pubkey(x509ss);
+        else
+            tpubkey = X509_REQ_get0_pubkey(req);
+        if (tpubkey == NULL) {
+            fprintf(stdout, "Modulus=unavailable\n");
+            goto end;
+        }
+        fprintf(stdout, "Modulus=");
+#ifndef OPENSSL_NO_RSA
+        if (EVP_PKEY_base_id(tpubkey) == EVP_PKEY_RSA) {
+            const BIGNUM *n;
+            RSA_get0_key(EVP_PKEY_get0_RSA(tpubkey), &n, NULL, NULL);
+            BN_print(out, n);
+        } else
+#endif
+            fprintf(stdout, "Wrong Algorithm type");
+        fprintf(stdout, "\n");
+    }
+
+    if (!noout && !x509) {
+        if (outformat == FORMAT_ASN1)
+            i = i2d_X509_REQ_bio(out, req);
+        else if (newhdr)
+            i = PEM_write_bio_X509_REQ_NEW(out, req);
+        else
+            i = PEM_write_bio_X509_REQ(out, req);
+        if (!i) {
+            BIO_printf(bio_err, "unable to write X509 request\n");
+            goto end;
+        }
+    }
+    if (!noout && x509 && (x509ss != NULL)) {
+        if (outformat == FORMAT_ASN1)
+            i = i2d_X509_bio(out, x509ss);
+        else
+            i = PEM_write_bio_X509(out, x509ss);
+        if (!i) {
+            BIO_printf(bio_err, "unable to write X509 certificate\n");
+            goto end;
+        }
+    }
+    ret = 0;
+ end:
+    if (ret) {
+        ERR_print_errors(bio_err);
+    }
+    NCONF_free(req_conf);
+    NCONF_free(addext_conf);
+    BIO_free(addext_bio);
+    BIO_free(in);
+    BIO_free_all(out);
+    EVP_PKEY_free(pkey);
+    EVP_PKEY_CTX_free(genctx);
+    sk_OPENSSL_STRING_free(pkeyopts);
+    sk_OPENSSL_STRING_free(sigopts);
+    lh_OPENSSL_STRING_doall(addexts, exts_cleanup);
+    lh_OPENSSL_STRING_free(addexts);
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_free(gen_eng);
+#endif
+    OPENSSL_free(keyalgstr);
+    X509_REQ_free(req);
+    X509_free(x509ss);
+    ASN1_INTEGER_free(serial);
+    release_engine(e);
+    if (passin != nofree_passin)
+        OPENSSL_free(passin);
+    if (passout != nofree_passout)
+        OPENSSL_free(passout);
+    return ret;
+}
+
+static int make_REQ(X509_REQ *req, EVP_PKEY *pkey, char *subj, int multirdn,
+                    int attribs, unsigned long chtype)
+{
+    int ret = 0, i;
+    char no_prompt = 0;
+    STACK_OF(CONF_VALUE) *dn_sk, *attr_sk = NULL;
+    char *tmp, *dn_sect, *attr_sect;
+
+    tmp = NCONF_get_string(req_conf, SECTION, PROMPT);
+    if (tmp == NULL)
+        ERR_clear_error();
+    if ((tmp != NULL) && strcmp(tmp, "no") == 0)
+        no_prompt = 1;
+
+    dn_sect = NCONF_get_string(req_conf, SECTION, DISTINGUISHED_NAME);
+    if (dn_sect == NULL) {
+        BIO_printf(bio_err, "unable to find '%s' in config\n",
+                   DISTINGUISHED_NAME);
+        goto err;
+    }
+    dn_sk = NCONF_get_section(req_conf, dn_sect);
+    if (dn_sk == NULL) {
+        BIO_printf(bio_err, "unable to get '%s' section\n", dn_sect);
+        goto err;
+    }
+
+    attr_sect = NCONF_get_string(req_conf, SECTION, ATTRIBUTES);
+    if (attr_sect == NULL) {
+        ERR_clear_error();
+        attr_sk = NULL;
+    } else {
+        attr_sk = NCONF_get_section(req_conf, attr_sect);
+        if (attr_sk == NULL) {
+            BIO_printf(bio_err, "unable to get '%s' section\n", attr_sect);
+            goto err;
+        }
+    }
+
+    /* setup version number */
+    if (!X509_REQ_set_version(req, 0L))
+        goto err;               /* version 1 */
+
+    if (subj)
+        i = build_subject(req, subj, chtype, multirdn);
+    else if (no_prompt)
+        i = auto_info(req, dn_sk, attr_sk, attribs, chtype);
+    else
+        i = prompt_info(req, dn_sk, dn_sect, attr_sk, attr_sect, attribs,
+                        chtype);
+    if (!i)
+        goto err;
+
+    if (!X509_REQ_set_pubkey(req, pkey))
+        goto err;
+
+    ret = 1;
+ err:
+    return ret;
+}
+
+/*
+ * subject is expected to be in the format /type0=value0/type1=value1/type2=...
+ * where characters may be escaped by \
+ */
+static int build_subject(X509_REQ *req, const char *subject, unsigned long chtype,
+                         int multirdn)
+{
+    X509_NAME *n;
+
+    if ((n = parse_name(subject, chtype, multirdn)) == NULL)
+        return 0;
+
+    if (!X509_REQ_set_subject_name(req, n)) {
+        X509_NAME_free(n);
+        return 0;
+    }
+    X509_NAME_free(n);
+    return 1;
+}
+
+static int prompt_info(X509_REQ *req,
+                       STACK_OF(CONF_VALUE) *dn_sk, const char *dn_sect,
+                       STACK_OF(CONF_VALUE) *attr_sk, const char *attr_sect,
+                       int attribs, unsigned long chtype)
+{
+    int i;
+    char *p, *q;
+    char buf[100];
+    int nid, mval;
+    long n_min, n_max;
+    char *type, *value;
+    const char *def;
+    CONF_VALUE *v;
+    X509_NAME *subj;
+    subj = X509_REQ_get_subject_name(req);
+
+    if (!batch) {
+        BIO_printf(bio_err,
+                   "You are about to be asked to enter information that will be incorporated\n");
+        BIO_printf(bio_err, "into your certificate request.\n");
+        BIO_printf(bio_err,
+                   "What you are about to enter is what is called a Distinguished Name or a DN.\n");
+        BIO_printf(bio_err,
+                   "There are quite a few fields but you can leave some blank\n");
+        BIO_printf(bio_err,
+                   "For some fields there will be a default value,\n");
+        BIO_printf(bio_err,
+                   "If you enter '.', the field will be left blank.\n");
+        BIO_printf(bio_err, "-----\n");
+    }
+
+    if (sk_CONF_VALUE_num(dn_sk)) {
+        i = -1;
+ start:
+        for ( ; ; ) {
+            i++;
+            if (sk_CONF_VALUE_num(dn_sk) <= i)
+                break;
+
+            v = sk_CONF_VALUE_value(dn_sk, i);
+            p = q = NULL;
+            type = v->name;
+            if (!check_end(type, "_min") || !check_end(type, "_max") ||
+                !check_end(type, "_default") || !check_end(type, "_value"))
+                continue;
+            /*
+             * Skip past any leading X. X: X, etc to allow for multiple
+             * instances
+             */
+            for (p = v->name; *p; p++)
+                if ((*p == ':') || (*p == ',') || (*p == '.')) {
+                    p++;
+                    if (*p)
+                        type = p;
+                    break;
+                }
+            if (*type == '+') {
+                mval = -1;
+                type++;
+            } else {
+                mval = 0;
+            }
+            /* If OBJ not recognised ignore it */
+            if ((nid = OBJ_txt2nid(type)) == NID_undef)
+                goto start;
+            if (!join(buf, sizeof(buf), v->name, "_default", "Name"))
+                return 0;
+            if ((def = NCONF_get_string(req_conf, dn_sect, buf)) == NULL) {
+                ERR_clear_error();
+                def = "";
+            }
+
+            if (!join(buf, sizeof(buf), v->name, "_value", "Name"))
+                return 0;
+            if ((value = NCONF_get_string(req_conf, dn_sect, buf)) == NULL) {
+                ERR_clear_error();
+                value = NULL;
+            }
+
+            if (!join(buf, sizeof(buf), v->name, "_min", "Name"))
+                return 0;
+            if (!NCONF_get_number(req_conf, dn_sect, buf, &n_min)) {
+                ERR_clear_error();
+                n_min = -1;
+            }
+
+
+            if (!join(buf, sizeof(buf), v->name, "_max", "Name"))
+                return 0;
+            if (!NCONF_get_number(req_conf, dn_sect, buf, &n_max)) {
+                ERR_clear_error();
+                n_max = -1;
+            }
+
+            if (!add_DN_object(subj, v->value, def, value, nid,
+                               n_min, n_max, chtype, mval))
+                return 0;
+        }
+        if (X509_NAME_entry_count(subj) == 0) {
+            BIO_printf(bio_err,
+                       "error, no objects specified in config file\n");
+            return 0;
+        }
+
+        if (attribs) {
+            if ((attr_sk != NULL) && (sk_CONF_VALUE_num(attr_sk) > 0)
+                && (!batch)) {
+                BIO_printf(bio_err,
+                           "\nPlease enter the following 'extra' attributes\n");
+                BIO_printf(bio_err,
+                           "to be sent with your certificate request\n");
+            }
+
+            i = -1;
+ start2:
+            for ( ; ; ) {
+                i++;
+                if ((attr_sk == NULL) || (sk_CONF_VALUE_num(attr_sk) <= i))
+                    break;
+
+                v = sk_CONF_VALUE_value(attr_sk, i);
+                type = v->name;
+                if ((nid = OBJ_txt2nid(type)) == NID_undef)
+                    goto start2;
+
+                if (!join(buf, sizeof(buf), type, "_default", "Name"))
+                    return 0;
+                if ((def = NCONF_get_string(req_conf, attr_sect, buf))
+                    == NULL) {
+                    ERR_clear_error();
+                    def = "";
+                }
+
+                if (!join(buf, sizeof(buf), type, "_value", "Name"))
+                    return 0;
+                if ((value = NCONF_get_string(req_conf, attr_sect, buf))
+                    == NULL) {
+                    ERR_clear_error();
+                    value = NULL;
+                }
+
+                if (!join(buf, sizeof(buf), type,"_min", "Name"))
+                    return 0;
+                if (!NCONF_get_number(req_conf, attr_sect, buf, &n_min)) {
+                    ERR_clear_error();
+                    n_min = -1;
+                }
+
+                if (!join(buf, sizeof(buf), type, "_max", "Name"))
+                    return 0;
+                if (!NCONF_get_number(req_conf, attr_sect, buf, &n_max)) {
+                    ERR_clear_error();
+                    n_max = -1;
+                }
+
+                if (!add_attribute_object(req,
+                                          v->value, def, value, nid, n_min,
+                                          n_max, chtype))
+                    return 0;
+            }
+        }
+    } else {
+        BIO_printf(bio_err, "No template, please set one up.\n");
+        return 0;
+    }
+
+    return 1;
+
+}
+
+static int auto_info(X509_REQ *req, STACK_OF(CONF_VALUE) *dn_sk,
+                     STACK_OF(CONF_VALUE) *attr_sk, int attribs,
+                     unsigned long chtype)
+{
+    int i, spec_char, plus_char;
+    char *p, *q;
+    char *type;
+    CONF_VALUE *v;
+    X509_NAME *subj;
+
+    subj = X509_REQ_get_subject_name(req);
+
+    for (i = 0; i < sk_CONF_VALUE_num(dn_sk); i++) {
+        int mval;
+        v = sk_CONF_VALUE_value(dn_sk, i);
+        p = q = NULL;
+        type = v->name;
+        /*
+         * Skip past any leading X. X: X, etc to allow for multiple instances
+         */
+        for (p = v->name; *p; p++) {
+#ifndef CHARSET_EBCDIC
+            spec_char = ((*p == ':') || (*p == ',') || (*p == '.'));
+#else
+            spec_char = ((*p == os_toascii[':']) || (*p == os_toascii[','])
+                    || (*p == os_toascii['.']));
+#endif
+            if (spec_char) {
+                p++;
+                if (*p)
+                    type = p;
+                break;
+            }
+        }
+#ifndef CHARSET_EBCDIC
+        plus_char = (*type == '+');
+#else
+        plus_char = (*type == os_toascii['+']);
+#endif
+        if (plus_char) {
+            type++;
+            mval = -1;
+        } else {
+            mval = 0;
+        }
+        if (!X509_NAME_add_entry_by_txt(subj, type, chtype,
+                                        (unsigned char *)v->value, -1, -1,
+                                        mval))
+            return 0;
+
+    }
+
+    if (!X509_NAME_entry_count(subj)) {
+        BIO_printf(bio_err, "error, no objects specified in config file\n");
+        return 0;
+    }
+    if (attribs) {
+        for (i = 0; i < sk_CONF_VALUE_num(attr_sk); i++) {
+            v = sk_CONF_VALUE_value(attr_sk, i);
+            if (!X509_REQ_add1_attr_by_txt(req, v->name, chtype,
+                                           (unsigned char *)v->value, -1))
+                return 0;
+        }
+    }
+    return 1;
+}
+
+static int add_DN_object(X509_NAME *n, char *text, const char *def,
+                         char *value, int nid, int n_min, int n_max,
+                         unsigned long chtype, int mval)
+{
+    int ret = 0;
+    char buf[1024];
+
+    ret = build_data(text, def, value, n_min, n_max, buf, sizeof(buf),
+                     "DN value", "DN default");
+    if ((ret == 0) || (ret == 1))
+        return ret;
+    ret = 1;
+
+    if (!X509_NAME_add_entry_by_NID(n, nid, chtype,
+                                    (unsigned char *)buf, -1, -1, mval))
+        ret = 0;
+
+    return ret;
+}
+
+static int add_attribute_object(X509_REQ *req, char *text, const char *def,
+                                char *value, int nid, int n_min,
+                                int n_max, unsigned long chtype)
+{
+    int ret = 0;
+    char buf[1024];
+
+    ret = build_data(text, def, value, n_min, n_max, buf, sizeof(buf),
+                     "Attribute value", "Attribute default");
+    if ((ret == 0) || (ret == 1))
+        return ret;
+    ret = 1;
+
+    if (!X509_REQ_add1_attr_by_NID(req, nid, chtype,
+                                   (unsigned char *)buf, -1)) {
+        BIO_printf(bio_err, "Error adding attribute\n");
+        ERR_print_errors(bio_err);
+        ret = 0;
+    }
+
+    return ret;
+}
+
+
+static int build_data(char *text, const char *def,
+                         char *value, int n_min, int n_max,
+                         char *buf, const int buf_size,
+                         const char *desc1, const char *desc2
+                         )
+{
+    int i;
+ start:
+    if (!batch)
+        BIO_printf(bio_err, "%s [%s]:", text, def);
+    (void)BIO_flush(bio_err);
+    if (value != NULL) {
+        if (!join(buf, buf_size, value, "\n", desc1))
+            return 0;
+        BIO_printf(bio_err, "%s\n", value);
+    } else {
+        buf[0] = '\0';
+        if (!batch) {
+            if (!fgets(buf, buf_size, stdin))
+                return 0;
+        } else {
+            buf[0] = '\n';
+            buf[1] = '\0';
+        }
+    }
+
+    if (buf[0] == '\0')
+        return 0;
+    if (buf[0] == '\n') {
+        if ((def == NULL) || (def[0] == '\0'))
+            return 1;
+        if (!join(buf, buf_size, def, "\n", desc2))
+            return 0;
+    } else if ((buf[0] == '.') && (buf[1] == '\n')) {
+        return 1;
+    }
+
+    i = strlen(buf);
+    if (buf[i - 1] != '\n') {
+        BIO_printf(bio_err, "weird input :-(\n");
+        return 0;
+    }
+    buf[--i] = '\0';
+#ifdef CHARSET_EBCDIC
+    ebcdic2ascii(buf, buf, i);
+#endif
+    if (!req_check_len(i, n_min, n_max)) {
+        if (batch || value)
+            return 0;
+        goto start;
+    }
+    return 2;
+}
+
+static int req_check_len(int len, int n_min, int n_max)
+{
+    if ((n_min > 0) && (len < n_min)) {
+        BIO_printf(bio_err,
+                   "string is too short, it needs to be at least %d bytes long\n",
+                   n_min);
+        return 0;
+    }
+    if ((n_max >= 0) && (len > n_max)) {
+        BIO_printf(bio_err,
+                   "string is too long, it needs to be no more than %d bytes long\n",
+                   n_max);
+        return 0;
+    }
+    return 1;
+}
+
+/* Check if the end of a string matches 'end' */
+static int check_end(const char *str, const char *end)
+{
+    size_t elen, slen;
+    const char *tmp;
+
+    elen = strlen(end);
+    slen = strlen(str);
+    if (elen > slen)
+        return 1;
+    tmp = str + slen - elen;
+    return strcmp(tmp, end);
+}
+
+/*
+ * Merge the two strings together into the result buffer checking for
+ * overflow and producing an error message if there is.
+ */
+static int join(char buf[], size_t buf_size, const char *name,
+                const char *tail, const char *desc)
+{
+    const size_t name_len = strlen(name), tail_len = strlen(tail);
+
+    if (name_len + tail_len + 1 > buf_size) {
+        BIO_printf(bio_err, "%s '%s' too long\n", desc, name);
+        return 0;
+    }
+    memcpy(buf, name, name_len);
+    memcpy(buf + name_len, tail, tail_len + 1);
+    return 1;
+}
+
+static EVP_PKEY_CTX *set_keygen_ctx(const char *gstr,
+                                    int *pkey_type, long *pkeylen,
+                                    char **palgnam, ENGINE *keygen_engine)
+{
+    EVP_PKEY_CTX *gctx = NULL;
+    EVP_PKEY *param = NULL;
+    long keylen = -1;
+    BIO *pbio = NULL;
+    const char *paramfile = NULL;
+
+    if (gstr == NULL) {
+        *pkey_type = EVP_PKEY_RSA;
+        keylen = *pkeylen;
+    } else if (gstr[0] >= '0' && gstr[0] <= '9') {
+        *pkey_type = EVP_PKEY_RSA;
+        keylen = atol(gstr);
+        *pkeylen = keylen;
+    } else if (strncmp(gstr, "param:", 6) == 0) {
+        paramfile = gstr + 6;
+    } else {
+        const char *p = strchr(gstr, ':');
+        int len;
+        ENGINE *tmpeng;
+        const EVP_PKEY_ASN1_METHOD *ameth;
+
+        if (p != NULL)
+            len = p - gstr;
+        else
+            len = strlen(gstr);
+        /*
+         * The lookup of a the string will cover all engines so keep a note
+         * of the implementation.
+         */
+
+        ameth = EVP_PKEY_asn1_find_str(&tmpeng, gstr, len);
+
+        if (ameth == NULL) {
+            BIO_printf(bio_err, "Unknown algorithm %.*s\n", len, gstr);
+            return NULL;
+        }
+
+        EVP_PKEY_asn1_get0_info(NULL, pkey_type, NULL, NULL, NULL, ameth);
+#ifndef OPENSSL_NO_ENGINE
+        ENGINE_finish(tmpeng);
+#endif
+        if (*pkey_type == EVP_PKEY_RSA) {
+            if (p != NULL) {
+                keylen = atol(p + 1);
+                *pkeylen = keylen;
+            } else {
+                keylen = *pkeylen;
+            }
+        } else if (p != NULL) {
+            paramfile = p + 1;
+        }
+    }
+
+    if (paramfile != NULL) {
+        pbio = BIO_new_file(paramfile, "r");
+        if (pbio == NULL) {
+            BIO_printf(bio_err, "Can't open parameter file %s\n", paramfile);
+            return NULL;
+        }
+        param = PEM_read_bio_Parameters(pbio, NULL);
+
+        if (param == NULL) {
+            X509 *x;
+
+            (void)BIO_reset(pbio);
+            x = PEM_read_bio_X509(pbio, NULL, NULL, NULL);
+            if (x != NULL) {
+                param = X509_get_pubkey(x);
+                X509_free(x);
+            }
+        }
+
+        BIO_free(pbio);
+
+        if (param == NULL) {
+            BIO_printf(bio_err, "Error reading parameter file %s\n", paramfile);
+            return NULL;
+        }
+        if (*pkey_type == -1) {
+            *pkey_type = EVP_PKEY_id(param);
+        } else if (*pkey_type != EVP_PKEY_base_id(param)) {
+            BIO_printf(bio_err, "Key Type does not match parameters\n");
+            EVP_PKEY_free(param);
+            return NULL;
+        }
+    }
+
+    if (palgnam != NULL) {
+        const EVP_PKEY_ASN1_METHOD *ameth;
+        ENGINE *tmpeng;
+        const char *anam;
+
+        ameth = EVP_PKEY_asn1_find(&tmpeng, *pkey_type);
+        if (ameth == NULL) {
+            BIO_puts(bio_err, "Internal error: can't find key algorithm\n");
+            return NULL;
+        }
+        EVP_PKEY_asn1_get0_info(NULL, NULL, NULL, NULL, &anam, ameth);
+        *palgnam = OPENSSL_strdup(anam);
+#ifndef OPENSSL_NO_ENGINE
+        ENGINE_finish(tmpeng);
+#endif
+    }
+
+    if (param != NULL) {
+        gctx = EVP_PKEY_CTX_new(param, keygen_engine);
+        *pkeylen = EVP_PKEY_bits(param);
+        EVP_PKEY_free(param);
+    } else {
+        gctx = EVP_PKEY_CTX_new_id(*pkey_type, keygen_engine);
+    }
+
+    if (gctx == NULL) {
+        BIO_puts(bio_err, "Error allocating keygen context\n");
+        ERR_print_errors(bio_err);
+        return NULL;
+    }
+
+    if (EVP_PKEY_keygen_init(gctx) <= 0) {
+        BIO_puts(bio_err, "Error initializing keygen context\n");
+        ERR_print_errors(bio_err);
+        EVP_PKEY_CTX_free(gctx);
+        return NULL;
+    }
+#ifndef OPENSSL_NO_RSA
+    if ((*pkey_type == EVP_PKEY_RSA) && (keylen != -1)) {
+        if (EVP_PKEY_CTX_set_rsa_keygen_bits(gctx, keylen) <= 0) {
+            BIO_puts(bio_err, "Error setting RSA keysize\n");
+            ERR_print_errors(bio_err);
+            EVP_PKEY_CTX_free(gctx);
+            return NULL;
+        }
+    }
+#endif
+
+    return gctx;
+}
+
+static int genpkey_cb(EVP_PKEY_CTX *ctx)
+{
+    char c = '*';
+    BIO *b = EVP_PKEY_CTX_get_app_data(ctx);
+    int p;
+    p = EVP_PKEY_CTX_get_keygen_info(ctx, 0);
+    if (p == 0)
+        c = '.';
+    if (p == 1)
+        c = '+';
+    if (p == 2)
+        c = '*';
+    if (p == 3)
+        c = '\n';
+    BIO_write(b, &c, 1);
+    (void)BIO_flush(b);
+    return 1;
+}
+
+static int do_sign_init(EVP_MD_CTX *ctx, EVP_PKEY *pkey,
+                        const EVP_MD *md, STACK_OF(OPENSSL_STRING) *sigopts)
+{
+    EVP_PKEY_CTX *pkctx = NULL;
+    int i, def_nid;
+
+    if (ctx == NULL)
+        return 0;
+    /*
+     * EVP_PKEY_get_default_digest_nid() returns 2 if the digest is mandatory
+     * for this algorithm.
+     */
+    if (EVP_PKEY_get_default_digest_nid(pkey, &def_nid) == 2
+            && def_nid == NID_undef) {
+        /* The signing algorithm requires there to be no digest */
+        md = NULL;
+    }
+    if (!EVP_DigestSignInit(ctx, &pkctx, md, NULL, pkey))
+        return 0;
+    for (i = 0; i < sk_OPENSSL_STRING_num(sigopts); i++) {
+        char *sigopt = sk_OPENSSL_STRING_value(sigopts, i);
+        if (pkey_ctrl_string(pkctx, sigopt) <= 0) {
+            BIO_printf(bio_err, "parameter error \"%s\"\n", sigopt);
+            ERR_print_errors(bio_err);
+            return 0;
+        }
+    }
+    return 1;
+}
+
+int do_X509_sign(X509 *x, EVP_PKEY *pkey, const EVP_MD *md,
+                 STACK_OF(OPENSSL_STRING) *sigopts)
+{
+    int rv;
+    EVP_MD_CTX *mctx = EVP_MD_CTX_new();
+
+    rv = do_sign_init(mctx, pkey, md, sigopts);
+    if (rv > 0)
+        rv = X509_sign_ctx(x, mctx);
+    EVP_MD_CTX_free(mctx);
+    return rv > 0 ? 1 : 0;
+}
+
+int do_X509_REQ_sign(X509_REQ *x, EVP_PKEY *pkey, const EVP_MD *md,
+                     STACK_OF(OPENSSL_STRING) *sigopts)
+{
+    int rv;
+    EVP_MD_CTX *mctx = EVP_MD_CTX_new();
+    rv = do_sign_init(mctx, pkey, md, sigopts);
+    if (rv > 0)
+        rv = X509_REQ_sign_ctx(x, mctx);
+    EVP_MD_CTX_free(mctx);
+    return rv > 0 ? 1 : 0;
+}
+
+int do_X509_CRL_sign(X509_CRL *x, EVP_PKEY *pkey, const EVP_MD *md,
+                     STACK_OF(OPENSSL_STRING) *sigopts)
+{
+    int rv;
+    EVP_MD_CTX *mctx = EVP_MD_CTX_new();
+    rv = do_sign_init(mctx, pkey, md, sigopts);
+    if (rv > 0)
+        rv = X509_CRL_sign_ctx(x, mctx);
+    EVP_MD_CTX_free(mctx);
+    return rv > 0 ? 1 : 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/req.pem b/trunk/3rdparty/openssl-1.1-fit/apps/req.pem
new file mode 100644
index 000000000..5537df601
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/req.pem
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/rsa.c b/trunk/3rdparty/openssl-1.1-fit/apps/rsa.c
new file mode 100644
index 000000000..fdd02dce3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/rsa.c
@@ -0,0 +1,316 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_RSA
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <stdio.h>
+# include <stdlib.h>
+# include <string.h>
+# include <time.h>
+# include "apps.h"
+# include "progs.h"
+# include <openssl/bio.h>
+# include <openssl/err.h>
+# include <openssl/rsa.h>
+# include <openssl/evp.h>
+# include <openssl/x509.h>
+# include <openssl/pem.h>
+# include <openssl/bn.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_INFORM, OPT_OUTFORM, OPT_ENGINE, OPT_IN, OPT_OUT,
+    OPT_PUBIN, OPT_PUBOUT, OPT_PASSOUT, OPT_PASSIN,
+    OPT_RSAPUBKEY_IN, OPT_RSAPUBKEY_OUT,
+    /* Do not change the order here; see case statements below */
+    OPT_PVK_NONE, OPT_PVK_WEAK, OPT_PVK_STRONG,
+    OPT_NOOUT, OPT_TEXT, OPT_MODULUS, OPT_CHECK, OPT_CIPHER
+} OPTION_CHOICE;
+
+const OPTIONS rsa_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"inform", OPT_INFORM, 'f', "Input format, one of DER PEM"},
+    {"outform", OPT_OUTFORM, 'f', "Output format, one of DER PEM PVK"},
+    {"in", OPT_IN, 's', "Input file"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"pubin", OPT_PUBIN, '-', "Expect a public key in input file"},
+    {"pubout", OPT_PUBOUT, '-', "Output a public key"},
+    {"passout", OPT_PASSOUT, 's', "Output file pass phrase source"},
+    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
+    {"RSAPublicKey_in", OPT_RSAPUBKEY_IN, '-', "Input is an RSAPublicKey"},
+    {"RSAPublicKey_out", OPT_RSAPUBKEY_OUT, '-', "Output is an RSAPublicKey"},
+    {"noout", OPT_NOOUT, '-', "Don't print key out"},
+    {"text", OPT_TEXT, '-', "Print the key in text"},
+    {"modulus", OPT_MODULUS, '-', "Print the RSA key modulus"},
+    {"check", OPT_CHECK, '-', "Verify key consistency"},
+    {"", OPT_CIPHER, '-', "Any supported cipher"},
+# if !defined(OPENSSL_NO_DSA) && !defined(OPENSSL_NO_RC4)
+    {"pvk-strong", OPT_PVK_STRONG, '-', "Enable 'Strong' PVK encoding level (default)"},
+    {"pvk-weak", OPT_PVK_WEAK, '-', "Enable 'Weak' PVK encoding level"},
+    {"pvk-none", OPT_PVK_NONE, '-', "Don't enforce PVK encoding"},
+# endif
+# ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+# endif
+    {NULL}
+};
+
+int rsa_main(int argc, char **argv)
+{
+    ENGINE *e = NULL;
+    BIO *out = NULL;
+    RSA *rsa = NULL;
+    const EVP_CIPHER *enc = NULL;
+    char *infile = NULL, *outfile = NULL, *prog;
+    char *passin = NULL, *passout = NULL, *passinarg = NULL, *passoutarg = NULL;
+    int i, private = 0;
+    int informat = FORMAT_PEM, outformat = FORMAT_PEM, text = 0, check = 0;
+    int noout = 0, modulus = 0, pubin = 0, pubout = 0, ret = 1;
+# if !defined(OPENSSL_NO_DSA) && !defined(OPENSSL_NO_RC4)
+    int pvk_encr = 2;
+# endif
+    OPTION_CHOICE o;
+
+    prog = opt_init(argc, argv, rsa_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(rsa_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_ANY, &informat))
+                goto opthelp;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_ANY, &outformat))
+                goto opthelp;
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_PASSIN:
+            passinarg = opt_arg();
+            break;
+        case OPT_PASSOUT:
+            passoutarg = opt_arg();
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_PUBIN:
+            pubin = 1;
+            break;
+        case OPT_PUBOUT:
+            pubout = 1;
+            break;
+        case OPT_RSAPUBKEY_IN:
+            pubin = 2;
+            break;
+        case OPT_RSAPUBKEY_OUT:
+            pubout = 2;
+            break;
+        case OPT_PVK_STRONG:    /* pvk_encr:= 2 */
+        case OPT_PVK_WEAK:      /* pvk_encr:= 1 */
+        case OPT_PVK_NONE:      /* pvk_encr:= 0 */
+# if !defined(OPENSSL_NO_DSA) && !defined(OPENSSL_NO_RC4)
+            pvk_encr = (o - OPT_PVK_NONE);
+# endif
+            break;
+        case OPT_NOOUT:
+            noout = 1;
+            break;
+        case OPT_TEXT:
+            text = 1;
+            break;
+        case OPT_MODULUS:
+            modulus = 1;
+            break;
+        case OPT_CHECK:
+            check = 1;
+            break;
+        case OPT_CIPHER:
+            if (!opt_cipher(opt_unknown(), &enc))
+                goto opthelp;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    private = (text && !pubin) || (!pubout && !noout) ? 1 : 0;
+
+    if (!app_passwd(passinarg, passoutarg, &passin, &passout)) {
+        BIO_printf(bio_err, "Error getting passwords\n");
+        goto end;
+    }
+    if (check && pubin) {
+        BIO_printf(bio_err, "Only private keys can be checked\n");
+        goto end;
+    }
+
+    {
+        EVP_PKEY *pkey;
+
+        if (pubin) {
+            int tmpformat = -1;
+            if (pubin == 2) {
+                if (informat == FORMAT_PEM)
+                    tmpformat = FORMAT_PEMRSA;
+                else if (informat == FORMAT_ASN1)
+                    tmpformat = FORMAT_ASN1RSA;
+            } else {
+                tmpformat = informat;
+            }
+
+            pkey = load_pubkey(infile, tmpformat, 1, passin, e, "Public Key");
+        } else {
+            pkey = load_key(infile, informat, 1, passin, e, "Private Key");
+        }
+
+        if (pkey != NULL)
+            rsa = EVP_PKEY_get1_RSA(pkey);
+        EVP_PKEY_free(pkey);
+    }
+
+    if (rsa == NULL) {
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    out = bio_open_owner(outfile, outformat, private);
+    if (out == NULL)
+        goto end;
+
+    if (text) {
+        assert(pubin || private);
+        if (!RSA_print(out, rsa, 0)) {
+            perror(outfile);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (modulus) {
+        const BIGNUM *n;
+        RSA_get0_key(rsa, &n, NULL, NULL);
+        BIO_printf(out, "Modulus=");
+        BN_print(out, n);
+        BIO_printf(out, "\n");
+    }
+
+    if (check) {
+        int r = RSA_check_key_ex(rsa, NULL);
+
+        if (r == 1) {
+            BIO_printf(out, "RSA key ok\n");
+        } else if (r == 0) {
+            unsigned long err;
+
+            while ((err = ERR_peek_error()) != 0 &&
+                   ERR_GET_LIB(err) == ERR_LIB_RSA &&
+                   ERR_GET_FUNC(err) == RSA_F_RSA_CHECK_KEY_EX &&
+                   ERR_GET_REASON(err) != ERR_R_MALLOC_FAILURE) {
+                BIO_printf(out, "RSA key error: %s\n",
+                           ERR_reason_error_string(err));
+                ERR_get_error(); /* remove err from error stack */
+            }
+        } else if (r == -1) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (noout) {
+        ret = 0;
+        goto end;
+    }
+    BIO_printf(bio_err, "writing RSA key\n");
+    if (outformat == FORMAT_ASN1) {
+        if (pubout || pubin) {
+            if (pubout == 2)
+                i = i2d_RSAPublicKey_bio(out, rsa);
+            else
+                i = i2d_RSA_PUBKEY_bio(out, rsa);
+        } else {
+            assert(private);
+            i = i2d_RSAPrivateKey_bio(out, rsa);
+        }
+    } else if (outformat == FORMAT_PEM) {
+        if (pubout || pubin) {
+            if (pubout == 2)
+                i = PEM_write_bio_RSAPublicKey(out, rsa);
+            else
+                i = PEM_write_bio_RSA_PUBKEY(out, rsa);
+        } else {
+            assert(private);
+            i = PEM_write_bio_RSAPrivateKey(out, rsa,
+                                            enc, NULL, 0, NULL, passout);
+        }
+# ifndef OPENSSL_NO_DSA
+    } else if (outformat == FORMAT_MSBLOB || outformat == FORMAT_PVK) {
+        EVP_PKEY *pk;
+        pk = EVP_PKEY_new();
+        if (pk == NULL)
+            goto end;
+
+        EVP_PKEY_set1_RSA(pk, rsa);
+        if (outformat == FORMAT_PVK) {
+            if (pubin) {
+                BIO_printf(bio_err, "PVK form impossible with public key input\n");
+                EVP_PKEY_free(pk);
+                goto end;
+            }
+            assert(private);
+#  ifdef OPENSSL_NO_RC4
+            BIO_printf(bio_err, "PVK format not supported\n");
+            EVP_PKEY_free(pk);
+            goto end;
+#  else
+            i = i2b_PVK_bio(out, pk, pvk_encr, 0, passout);
+#  endif
+        } else if (pubin || pubout) {
+            i = i2b_PublicKey_bio(out, pk);
+        } else {
+            assert(private);
+            i = i2b_PrivateKey_bio(out, pk);
+        }
+        EVP_PKEY_free(pk);
+# endif
+    } else {
+        BIO_printf(bio_err, "bad output format specified for outfile\n");
+        goto end;
+    }
+    if (i <= 0) {
+        BIO_printf(bio_err, "unable to write key\n");
+        ERR_print_errors(bio_err);
+    } else {
+        ret = 0;
+    }
+ end:
+    release_engine(e);
+    BIO_free_all(out);
+    RSA_free(rsa);
+    OPENSSL_free(passin);
+    OPENSSL_free(passout);
+    return ret;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/rsa8192.pem b/trunk/3rdparty/openssl-1.1-fit/apps/rsa8192.pem
new file mode 100644
index 000000000..946a6e543
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/rsa8192.pem
@@ -0,0 +1,101 @@
+-----BEGIN RSA PRIVATE KEY-----
+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=
+-----END RSA PRIVATE KEY-----
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/rsautl.c b/trunk/3rdparty/openssl-1.1-fit/apps/rsautl.c
new file mode 100644
index 000000000..5da8504d3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/rsautl.c
@@ -0,0 +1,282 @@
+/*
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_RSA
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include "apps.h"
+# include "progs.h"
+# include <string.h>
+# include <openssl/err.h>
+# include <openssl/pem.h>
+# include <openssl/rsa.h>
+
+# define RSA_SIGN        1
+# define RSA_VERIFY      2
+# define RSA_ENCRYPT     3
+# define RSA_DECRYPT     4
+
+# define KEY_PRIVKEY     1
+# define KEY_PUBKEY      2
+# define KEY_CERT        3
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_ENGINE, OPT_IN, OPT_OUT, OPT_ASN1PARSE, OPT_HEXDUMP,
+    OPT_RAW, OPT_OAEP, OPT_SSL, OPT_PKCS, OPT_X931,
+    OPT_SIGN, OPT_VERIFY, OPT_REV, OPT_ENCRYPT, OPT_DECRYPT,
+    OPT_PUBIN, OPT_CERTIN, OPT_INKEY, OPT_PASSIN, OPT_KEYFORM,
+    OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS rsautl_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"in", OPT_IN, '<', "Input file"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"inkey", OPT_INKEY, 's', "Input key"},
+    {"keyform", OPT_KEYFORM, 'E', "Private key format - default PEM"},
+    {"pubin", OPT_PUBIN, '-', "Input is an RSA public"},
+    {"certin", OPT_CERTIN, '-', "Input is a cert carrying an RSA public key"},
+    {"ssl", OPT_SSL, '-', "Use SSL v2 padding"},
+    {"raw", OPT_RAW, '-', "Use no padding"},
+    {"pkcs", OPT_PKCS, '-', "Use PKCS#1 v1.5 padding (default)"},
+    {"oaep", OPT_OAEP, '-', "Use PKCS#1 OAEP"},
+    {"sign", OPT_SIGN, '-', "Sign with private key"},
+    {"verify", OPT_VERIFY, '-', "Verify with public key"},
+    {"asn1parse", OPT_ASN1PARSE, '-',
+     "Run output through asn1parse; useful with -verify"},
+    {"hexdump", OPT_HEXDUMP, '-', "Hex dump output"},
+    {"x931", OPT_X931, '-', "Use ANSI X9.31 padding"},
+    {"rev", OPT_REV, '-', "Reverse the order of the input buffer"},
+    {"encrypt", OPT_ENCRYPT, '-', "Encrypt with public key"},
+    {"decrypt", OPT_DECRYPT, '-', "Decrypt with private key"},
+    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
+    OPT_R_OPTIONS,
+# ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+# endif
+    {NULL}
+};
+
+int rsautl_main(int argc, char **argv)
+{
+    BIO *in = NULL, *out = NULL;
+    ENGINE *e = NULL;
+    EVP_PKEY *pkey = NULL;
+    RSA *rsa = NULL;
+    X509 *x;
+    char *infile = NULL, *outfile = NULL, *keyfile = NULL;
+    char *passinarg = NULL, *passin = NULL, *prog;
+    char rsa_mode = RSA_VERIFY, key_type = KEY_PRIVKEY;
+    unsigned char *rsa_in = NULL, *rsa_out = NULL, pad = RSA_PKCS1_PADDING;
+    int rsa_inlen, keyformat = FORMAT_PEM, keysize, ret = 1;
+    int rsa_outlen = 0, hexdump = 0, asn1parse = 0, need_priv = 0, rev = 0;
+    OPTION_CHOICE o;
+
+    prog = opt_init(argc, argv, rsautl_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(rsautl_options);
+            ret = 0;
+            goto end;
+        case OPT_KEYFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PDE, &keyformat))
+                goto opthelp;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_ASN1PARSE:
+            asn1parse = 1;
+            break;
+        case OPT_HEXDUMP:
+            hexdump = 1;
+            break;
+        case OPT_RAW:
+            pad = RSA_NO_PADDING;
+            break;
+        case OPT_OAEP:
+            pad = RSA_PKCS1_OAEP_PADDING;
+            break;
+        case OPT_SSL:
+            pad = RSA_SSLV23_PADDING;
+            break;
+        case OPT_PKCS:
+            pad = RSA_PKCS1_PADDING;
+            break;
+        case OPT_X931:
+            pad = RSA_X931_PADDING;
+            break;
+        case OPT_SIGN:
+            rsa_mode = RSA_SIGN;
+            need_priv = 1;
+            break;
+        case OPT_VERIFY:
+            rsa_mode = RSA_VERIFY;
+            break;
+        case OPT_REV:
+            rev = 1;
+            break;
+        case OPT_ENCRYPT:
+            rsa_mode = RSA_ENCRYPT;
+            break;
+        case OPT_DECRYPT:
+            rsa_mode = RSA_DECRYPT;
+            need_priv = 1;
+            break;
+        case OPT_PUBIN:
+            key_type = KEY_PUBKEY;
+            break;
+        case OPT_CERTIN:
+            key_type = KEY_CERT;
+            break;
+        case OPT_INKEY:
+            keyfile = opt_arg();
+            break;
+        case OPT_PASSIN:
+            passinarg = opt_arg();
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    if (need_priv && (key_type != KEY_PRIVKEY)) {
+        BIO_printf(bio_err, "A private key is needed for this operation\n");
+        goto end;
+    }
+
+    if (!app_passwd(passinarg, NULL, &passin, NULL)) {
+        BIO_printf(bio_err, "Error getting password\n");
+        goto end;
+    }
+
+    switch (key_type) {
+    case KEY_PRIVKEY:
+        pkey = load_key(keyfile, keyformat, 0, passin, e, "Private Key");
+        break;
+
+    case KEY_PUBKEY:
+        pkey = load_pubkey(keyfile, keyformat, 0, NULL, e, "Public Key");
+        break;
+
+    case KEY_CERT:
+        x = load_cert(keyfile, keyformat, "Certificate");
+        if (x) {
+            pkey = X509_get_pubkey(x);
+            X509_free(x);
+        }
+        break;
+    }
+
+    if (pkey == NULL)
+        return 1;
+
+    rsa = EVP_PKEY_get1_RSA(pkey);
+    EVP_PKEY_free(pkey);
+
+    if (rsa == NULL) {
+        BIO_printf(bio_err, "Error getting RSA key\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    in = bio_open_default(infile, 'r', FORMAT_BINARY);
+    if (in == NULL)
+        goto end;
+    out = bio_open_default(outfile, 'w', FORMAT_BINARY);
+    if (out == NULL)
+        goto end;
+
+    keysize = RSA_size(rsa);
+
+    rsa_in = app_malloc(keysize * 2, "hold rsa key");
+    rsa_out = app_malloc(keysize, "output rsa key");
+
+    /* Read the input data */
+    rsa_inlen = BIO_read(in, rsa_in, keysize * 2);
+    if (rsa_inlen < 0) {
+        BIO_printf(bio_err, "Error reading input Data\n");
+        goto end;
+    }
+    if (rev) {
+        int i;
+        unsigned char ctmp;
+        for (i = 0; i < rsa_inlen / 2; i++) {
+            ctmp = rsa_in[i];
+            rsa_in[i] = rsa_in[rsa_inlen - 1 - i];
+            rsa_in[rsa_inlen - 1 - i] = ctmp;
+        }
+    }
+    switch (rsa_mode) {
+
+    case RSA_VERIFY:
+        rsa_outlen = RSA_public_decrypt(rsa_inlen, rsa_in, rsa_out, rsa, pad);
+        break;
+
+    case RSA_SIGN:
+        rsa_outlen =
+            RSA_private_encrypt(rsa_inlen, rsa_in, rsa_out, rsa, pad);
+        break;
+
+    case RSA_ENCRYPT:
+        rsa_outlen = RSA_public_encrypt(rsa_inlen, rsa_in, rsa_out, rsa, pad);
+        break;
+
+    case RSA_DECRYPT:
+        rsa_outlen =
+            RSA_private_decrypt(rsa_inlen, rsa_in, rsa_out, rsa, pad);
+        break;
+    }
+
+    if (rsa_outlen < 0) {
+        BIO_printf(bio_err, "RSA operation error\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+    ret = 0;
+    if (asn1parse) {
+        if (!ASN1_parse_dump(out, rsa_out, rsa_outlen, 1, -1)) {
+            ERR_print_errors(bio_err);
+        }
+    } else if (hexdump) {
+        BIO_dump(out, (char *)rsa_out, rsa_outlen);
+    } else {
+        BIO_write(out, rsa_out, rsa_outlen);
+    }
+ end:
+    RSA_free(rsa);
+    release_engine(e);
+    BIO_free(in);
+    BIO_free_all(out);
+    OPENSSL_free(rsa_in);
+    OPENSSL_free(rsa_out);
+    OPENSSL_free(passin);
+    return ret;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/s1024key.pem b/trunk/3rdparty/openssl-1.1-fit/apps/s1024key.pem
new file mode 100644
index 000000000..19e040357
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/s1024key.pem
@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/s1024req.pem b/trunk/3rdparty/openssl-1.1-fit/apps/s1024req.pem
new file mode 100644
index 000000000..bb75e7eeb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/s1024req.pem
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/s512-key.pem b/trunk/3rdparty/openssl-1.1-fit/apps/s512-key.pem
new file mode 100644
index 000000000..0e3ff2d37
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/s512-key.pem
@@ -0,0 +1,9 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIBPAIBAAJBAJ+zw4Qnlf8SMVIPFe9GEcStgOY2Ww/dgNdhjeD8ckUJNP5VZkVD
+TGiXav6ooKXfX3j/7tdkuD8Ey2//Kv7+ue0CAwEAAQJAN6W31vDEP2DjdqhzCDDu
+OA4NACqoiFqyblo7yc2tM4h4xMbC3Yx5UKMN9ZkCtX0gzrz6DyF47bdKcWBzNWCj
+gQIhANEoojVt7hq+SQ6MCN6FTAysGgQf56Q3TYoJMoWvdiXVAiEAw3e3rc+VJpOz
+rHuDo6bgpjUAAXM+v3fcpsfZSNO6V7kCIQCtbVjanpUwvZkMI9by02oUk9taki3b
+PzPfAfNPYAbCJQIhAJXNQDWyqwn/lGmR11cqY2y9nZ1+5w3yHGatLrcDnQHxAiEA
+vnlEGo8K85u+KwIOimM48ZG8oTk7iFdkqLJR1utT3aU=
+-----END RSA PRIVATE KEY-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/s512-req.pem b/trunk/3rdparty/openssl-1.1-fit/apps/s512-req.pem
new file mode 100644
index 000000000..ea314be55
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/s512-req.pem
@@ -0,0 +1,8 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBGzCBxgIBADBjMQswCQYDVQQGEwJBVTETMBEGA1UECBMKUXVlZW5zbGFuZDEa
+MBgGA1UEChMRQ3J5cHRTb2Z0IFB0eSBMdGQxIzAhBgNVBAMTGlNlcnZlciB0ZXN0
+IGNlcnQgKDUxMiBiaXQpMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJ+zw4Qnlf8S
+MVIPFe9GEcStgOY2Ww/dgNdhjeD8ckUJNP5VZkVDTGiXav6ooKXfX3j/7tdkuD8E
+y2//Kv7+ue0CAwEAATANBgkqhkiG9w0BAQQFAANBAAB+uQi+qwn6qRSHB8EUTvsm
+5TNTHzYDeN39nyIbZNX2s0se3Srn2Bxft5YCwD3moFZ9QoyDHxE0h6qLX5yjD+8=
+-----END CERTIFICATE REQUEST-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/s_apps.h b/trunk/3rdparty/openssl-1.1-fit/apps/s_apps.h
new file mode 100644
index 000000000..0a3bc9628
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/s_apps.h
@@ -0,0 +1,89 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+
+#if defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_MSDOS)
+# include <conio.h>
+#endif
+
+#if defined(OPENSSL_SYS_MSDOS) && !defined(_WIN32)
+# define _kbhit kbhit
+#endif
+
+#define PORT            "4433"
+#define PROTOCOL        "tcp"
+
+typedef int (*do_server_cb)(int s, int stype, int prot, unsigned char *context);
+int do_server(int *accept_sock, const char *host, const char *port,
+              int family, int type, int protocol, do_server_cb cb,
+              unsigned char *context, int naccept, BIO *bio_s_out);
+#ifdef HEADER_X509_H
+int verify_callback(int ok, X509_STORE_CTX *ctx);
+#endif
+#ifdef HEADER_SSL_H
+int set_cert_stuff(SSL_CTX *ctx, char *cert_file, char *key_file);
+int set_cert_key_stuff(SSL_CTX *ctx, X509 *cert, EVP_PKEY *key,
+                       STACK_OF(X509) *chain, int build_chain);
+int ssl_print_sigalgs(BIO *out, SSL *s);
+int ssl_print_point_formats(BIO *out, SSL *s);
+int ssl_print_groups(BIO *out, SSL *s, int noshared);
+#endif
+int ssl_print_tmp_key(BIO *out, SSL *s);
+int init_client(int *sock, const char *host, const char *port,
+                const char *bindhost, const char *bindport,
+                int family, int type, int protocol);
+int should_retry(int i);
+
+long bio_dump_callback(BIO *bio, int cmd, const char *argp,
+                       int argi, long argl, long ret);
+
+#ifdef HEADER_SSL_H
+void apps_ssl_info_callback(const SSL *s, int where, int ret);
+void msg_cb(int write_p, int version, int content_type, const void *buf,
+            size_t len, SSL *ssl, void *arg);
+void tlsext_cb(SSL *s, int client_server, int type, const unsigned char *data,
+               int len, void *arg);
+#endif
+
+int generate_cookie_callback(SSL *ssl, unsigned char *cookie,
+                             unsigned int *cookie_len);
+int verify_cookie_callback(SSL *ssl, const unsigned char *cookie,
+                           unsigned int cookie_len);
+
+#ifdef __VMS                     /* 31 char symbol name limit */
+# define generate_stateless_cookie_callback      generate_stateless_cookie_cb
+# define verify_stateless_cookie_callback        verify_stateless_cookie_cb
+#endif
+
+int generate_stateless_cookie_callback(SSL *ssl, unsigned char *cookie,
+                                       size_t *cookie_len);
+int verify_stateless_cookie_callback(SSL *ssl, const unsigned char *cookie,
+                                     size_t cookie_len);
+
+typedef struct ssl_excert_st SSL_EXCERT;
+
+void ssl_ctx_set_excert(SSL_CTX *ctx, SSL_EXCERT *exc);
+void ssl_excert_free(SSL_EXCERT *exc);
+int args_excert(int option, SSL_EXCERT **pexc);
+int load_excert(SSL_EXCERT **pexc);
+void print_verify_detail(SSL *s, BIO *bio);
+void print_ssl_summary(SSL *s);
+#ifdef HEADER_SSL_H
+int config_ctx(SSL_CONF_CTX *cctx, STACK_OF(OPENSSL_STRING) *str, SSL_CTX *ctx);
+int ssl_ctx_add_crls(SSL_CTX *ctx, STACK_OF(X509_CRL) *crls,
+                     int crl_download);
+int ssl_load_stores(SSL_CTX *ctx, const char *vfyCApath,
+                    const char *vfyCAfile, const char *chCApath,
+                    const char *chCAfile, STACK_OF(X509_CRL) *crls,
+                    int crl_download);
+void ssl_ctx_security_debug(SSL_CTX *ctx, int verbose);
+int set_keylog_file(SSL_CTX *ctx, const char *keylog_file);
+void print_ca_names(BIO *bio, SSL *s);
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/s_cb.c b/trunk/3rdparty/openssl-1.1-fit/apps/s_cb.c
new file mode 100644
index 000000000..d0e332a70
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/s_cb.c
@@ -0,0 +1,1481 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* callback functions used by s_client, s_server, and s_time */
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h> /* for memcpy() and strcmp() */
+#include "apps.h"
+#include <openssl/err.h>
+#include <openssl/rand.h>
+#include <openssl/x509.h>
+#include <openssl/ssl.h>
+#include <openssl/bn.h>
+#ifndef OPENSSL_NO_DH
+# include <openssl/dh.h>
+#endif
+#include "s_apps.h"
+
+#define COOKIE_SECRET_LENGTH    16
+
+VERIFY_CB_ARGS verify_args = { -1, 0, X509_V_OK, 0 };
+
+#ifndef OPENSSL_NO_SOCK
+static unsigned char cookie_secret[COOKIE_SECRET_LENGTH];
+static int cookie_initialized = 0;
+#endif
+static BIO *bio_keylog = NULL;
+
+static const char *lookup(int val, const STRINT_PAIR* list, const char* def)
+{
+    for ( ; list->name; ++list)
+        if (list->retval == val)
+            return list->name;
+    return def;
+}
+
+int verify_callback(int ok, X509_STORE_CTX *ctx)
+{
+    X509 *err_cert;
+    int err, depth;
+
+    err_cert = X509_STORE_CTX_get_current_cert(ctx);
+    err = X509_STORE_CTX_get_error(ctx);
+    depth = X509_STORE_CTX_get_error_depth(ctx);
+
+    if (!verify_args.quiet || !ok) {
+        BIO_printf(bio_err, "depth=%d ", depth);
+        if (err_cert != NULL) {
+            X509_NAME_print_ex(bio_err,
+                               X509_get_subject_name(err_cert),
+                               0, get_nameopt());
+            BIO_puts(bio_err, "\n");
+        } else {
+            BIO_puts(bio_err, "<no cert>\n");
+        }
+    }
+    if (!ok) {
+        BIO_printf(bio_err, "verify error:num=%d:%s\n", err,
+                   X509_verify_cert_error_string(err));
+        if (verify_args.depth < 0 || verify_args.depth >= depth) {
+            if (!verify_args.return_error)
+                ok = 1;
+            verify_args.error = err;
+        } else {
+            ok = 0;
+            verify_args.error = X509_V_ERR_CERT_CHAIN_TOO_LONG;
+        }
+    }
+    switch (err) {
+    case X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT:
+        BIO_puts(bio_err, "issuer= ");
+        X509_NAME_print_ex(bio_err, X509_get_issuer_name(err_cert),
+                           0, get_nameopt());
+        BIO_puts(bio_err, "\n");
+        break;
+    case X509_V_ERR_CERT_NOT_YET_VALID:
+    case X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD:
+        BIO_printf(bio_err, "notBefore=");
+        ASN1_TIME_print(bio_err, X509_get0_notBefore(err_cert));
+        BIO_printf(bio_err, "\n");
+        break;
+    case X509_V_ERR_CERT_HAS_EXPIRED:
+    case X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD:
+        BIO_printf(bio_err, "notAfter=");
+        ASN1_TIME_print(bio_err, X509_get0_notAfter(err_cert));
+        BIO_printf(bio_err, "\n");
+        break;
+    case X509_V_ERR_NO_EXPLICIT_POLICY:
+        if (!verify_args.quiet)
+            policies_print(ctx);
+        break;
+    }
+    if (err == X509_V_OK && ok == 2 && !verify_args.quiet)
+        policies_print(ctx);
+    if (ok && !verify_args.quiet)
+        BIO_printf(bio_err, "verify return:%d\n", ok);
+    return ok;
+}
+
+int set_cert_stuff(SSL_CTX *ctx, char *cert_file, char *key_file)
+{
+    if (cert_file != NULL) {
+        if (SSL_CTX_use_certificate_file(ctx, cert_file,
+                                         SSL_FILETYPE_PEM) <= 0) {
+            BIO_printf(bio_err, "unable to get certificate from '%s'\n",
+                       cert_file);
+            ERR_print_errors(bio_err);
+            return 0;
+        }
+        if (key_file == NULL)
+            key_file = cert_file;
+        if (SSL_CTX_use_PrivateKey_file(ctx, key_file, SSL_FILETYPE_PEM) <= 0) {
+            BIO_printf(bio_err, "unable to get private key from '%s'\n",
+                       key_file);
+            ERR_print_errors(bio_err);
+            return 0;
+        }
+
+        /*
+         * If we are using DSA, we can copy the parameters from the private
+         * key
+         */
+
+        /*
+         * Now we know that a key and cert have been set against the SSL
+         * context
+         */
+        if (!SSL_CTX_check_private_key(ctx)) {
+            BIO_printf(bio_err,
+                       "Private key does not match the certificate public key\n");
+            return 0;
+        }
+    }
+    return 1;
+}
+
+int set_cert_key_stuff(SSL_CTX *ctx, X509 *cert, EVP_PKEY *key,
+                       STACK_OF(X509) *chain, int build_chain)
+{
+    int chflags = chain ? SSL_BUILD_CHAIN_FLAG_CHECK : 0;
+    if (cert == NULL)
+        return 1;
+    if (SSL_CTX_use_certificate(ctx, cert) <= 0) {
+        BIO_printf(bio_err, "error setting certificate\n");
+        ERR_print_errors(bio_err);
+        return 0;
+    }
+
+    if (SSL_CTX_use_PrivateKey(ctx, key) <= 0) {
+        BIO_printf(bio_err, "error setting private key\n");
+        ERR_print_errors(bio_err);
+        return 0;
+    }
+
+    /*
+     * Now we know that a key and cert have been set against the SSL context
+     */
+    if (!SSL_CTX_check_private_key(ctx)) {
+        BIO_printf(bio_err,
+                   "Private key does not match the certificate public key\n");
+        return 0;
+    }
+    if (chain && !SSL_CTX_set1_chain(ctx, chain)) {
+        BIO_printf(bio_err, "error setting certificate chain\n");
+        ERR_print_errors(bio_err);
+        return 0;
+    }
+    if (build_chain && !SSL_CTX_build_cert_chain(ctx, chflags)) {
+        BIO_printf(bio_err, "error building certificate chain\n");
+        ERR_print_errors(bio_err);
+        return 0;
+    }
+    return 1;
+}
+
+static STRINT_PAIR cert_type_list[] = {
+    {"RSA sign", TLS_CT_RSA_SIGN},
+    {"DSA sign", TLS_CT_DSS_SIGN},
+    {"RSA fixed DH", TLS_CT_RSA_FIXED_DH},
+    {"DSS fixed DH", TLS_CT_DSS_FIXED_DH},
+    {"ECDSA sign", TLS_CT_ECDSA_SIGN},
+    {"RSA fixed ECDH", TLS_CT_RSA_FIXED_ECDH},
+    {"ECDSA fixed ECDH", TLS_CT_ECDSA_FIXED_ECDH},
+    {"GOST01 Sign", TLS_CT_GOST01_SIGN},
+    {NULL}
+};
+
+static void ssl_print_client_cert_types(BIO *bio, SSL *s)
+{
+    const unsigned char *p;
+    int i;
+    int cert_type_num = SSL_get0_certificate_types(s, &p);
+    if (!cert_type_num)
+        return;
+    BIO_puts(bio, "Client Certificate Types: ");
+    for (i = 0; i < cert_type_num; i++) {
+        unsigned char cert_type = p[i];
+        const char *cname = lookup((int)cert_type, cert_type_list, NULL);
+
+        if (i)
+            BIO_puts(bio, ", ");
+        if (cname != NULL)
+            BIO_puts(bio, cname);
+        else
+            BIO_printf(bio, "UNKNOWN (%d),", cert_type);
+    }
+    BIO_puts(bio, "\n");
+}
+
+static const char *get_sigtype(int nid)
+{
+    switch (nid) {
+    case EVP_PKEY_RSA:
+        return "RSA";
+
+    case EVP_PKEY_RSA_PSS:
+        return "RSA-PSS";
+
+    case EVP_PKEY_DSA:
+        return "DSA";
+
+     case EVP_PKEY_EC:
+        return "ECDSA";
+
+     case NID_ED25519:
+        return "Ed25519";
+
+     case NID_ED448:
+        return "Ed448";
+
+     case NID_id_GostR3410_2001:
+        return "gost2001";
+
+     case NID_id_GostR3410_2012_256:
+        return "gost2012_256";
+
+     case NID_id_GostR3410_2012_512:
+        return "gost2012_512";
+
+    default:
+        return NULL;
+    }
+}
+
+static int do_print_sigalgs(BIO *out, SSL *s, int shared)
+{
+    int i, nsig, client;
+    client = SSL_is_server(s) ? 0 : 1;
+    if (shared)
+        nsig = SSL_get_shared_sigalgs(s, 0, NULL, NULL, NULL, NULL, NULL);
+    else
+        nsig = SSL_get_sigalgs(s, -1, NULL, NULL, NULL, NULL, NULL);
+    if (nsig == 0)
+        return 1;
+
+    if (shared)
+        BIO_puts(out, "Shared ");
+
+    if (client)
+        BIO_puts(out, "Requested ");
+    BIO_puts(out, "Signature Algorithms: ");
+    for (i = 0; i < nsig; i++) {
+        int hash_nid, sign_nid;
+        unsigned char rhash, rsign;
+        const char *sstr = NULL;
+        if (shared)
+            SSL_get_shared_sigalgs(s, i, &sign_nid, &hash_nid, NULL,
+                                   &rsign, &rhash);
+        else
+            SSL_get_sigalgs(s, i, &sign_nid, &hash_nid, NULL, &rsign, &rhash);
+        if (i)
+            BIO_puts(out, ":");
+        sstr = get_sigtype(sign_nid);
+        if (sstr)
+            BIO_printf(out, "%s", sstr);
+        else
+            BIO_printf(out, "0x%02X", (int)rsign);
+        if (hash_nid != NID_undef)
+            BIO_printf(out, "+%s", OBJ_nid2sn(hash_nid));
+        else if (sstr == NULL)
+            BIO_printf(out, "+0x%02X", (int)rhash);
+    }
+    BIO_puts(out, "\n");
+    return 1;
+}
+
+int ssl_print_sigalgs(BIO *out, SSL *s)
+{
+    int nid;
+    if (!SSL_is_server(s))
+        ssl_print_client_cert_types(out, s);
+    do_print_sigalgs(out, s, 0);
+    do_print_sigalgs(out, s, 1);
+    if (SSL_get_peer_signature_nid(s, &nid) && nid != NID_undef)
+        BIO_printf(out, "Peer signing digest: %s\n", OBJ_nid2sn(nid));
+    if (SSL_get_peer_signature_type_nid(s, &nid))
+        BIO_printf(out, "Peer signature type: %s\n", get_sigtype(nid));
+    return 1;
+}
+
+#ifndef OPENSSL_NO_EC
+int ssl_print_point_formats(BIO *out, SSL *s)
+{
+    int i, nformats;
+    const char *pformats;
+    nformats = SSL_get0_ec_point_formats(s, &pformats);
+    if (nformats <= 0)
+        return 1;
+    BIO_puts(out, "Supported Elliptic Curve Point Formats: ");
+    for (i = 0; i < nformats; i++, pformats++) {
+        if (i)
+            BIO_puts(out, ":");
+        switch (*pformats) {
+        case TLSEXT_ECPOINTFORMAT_uncompressed:
+            BIO_puts(out, "uncompressed");
+            break;
+
+        case TLSEXT_ECPOINTFORMAT_ansiX962_compressed_prime:
+            BIO_puts(out, "ansiX962_compressed_prime");
+            break;
+
+        case TLSEXT_ECPOINTFORMAT_ansiX962_compressed_char2:
+            BIO_puts(out, "ansiX962_compressed_char2");
+            break;
+
+        default:
+            BIO_printf(out, "unknown(%d)", (int)*pformats);
+            break;
+
+        }
+    }
+    BIO_puts(out, "\n");
+    return 1;
+}
+
+int ssl_print_groups(BIO *out, SSL *s, int noshared)
+{
+    int i, ngroups, *groups, nid;
+    const char *gname;
+
+    ngroups = SSL_get1_groups(s, NULL);
+    if (ngroups <= 0)
+        return 1;
+    groups = app_malloc(ngroups * sizeof(int), "groups to print");
+    SSL_get1_groups(s, groups);
+
+    BIO_puts(out, "Supported Elliptic Groups: ");
+    for (i = 0; i < ngroups; i++) {
+        if (i)
+            BIO_puts(out, ":");
+        nid = groups[i];
+        /* If unrecognised print out hex version */
+        if (nid & TLSEXT_nid_unknown) {
+            BIO_printf(out, "0x%04X", nid & 0xFFFF);
+        } else {
+            /* TODO(TLS1.3): Get group name here */
+            /* Use NIST name for curve if it exists */
+            gname = EC_curve_nid2nist(nid);
+            if (gname == NULL)
+                gname = OBJ_nid2sn(nid);
+            BIO_printf(out, "%s", gname);
+        }
+    }
+    OPENSSL_free(groups);
+    if (noshared) {
+        BIO_puts(out, "\n");
+        return 1;
+    }
+    BIO_puts(out, "\nShared Elliptic groups: ");
+    ngroups = SSL_get_shared_group(s, -1);
+    for (i = 0; i < ngroups; i++) {
+        if (i)
+            BIO_puts(out, ":");
+        nid = SSL_get_shared_group(s, i);
+        /* TODO(TLS1.3): Convert for DH groups */
+        gname = EC_curve_nid2nist(nid);
+        if (gname == NULL)
+            gname = OBJ_nid2sn(nid);
+        BIO_printf(out, "%s", gname);
+    }
+    if (ngroups == 0)
+        BIO_puts(out, "NONE");
+    BIO_puts(out, "\n");
+    return 1;
+}
+#endif
+
+int ssl_print_tmp_key(BIO *out, SSL *s)
+{
+    EVP_PKEY *key;
+
+    if (!SSL_get_peer_tmp_key(s, &key))
+        return 1;
+    BIO_puts(out, "Server Temp Key: ");
+    switch (EVP_PKEY_id(key)) {
+    case EVP_PKEY_RSA:
+        BIO_printf(out, "RSA, %d bits\n", EVP_PKEY_bits(key));
+        break;
+
+    case EVP_PKEY_DH:
+        BIO_printf(out, "DH, %d bits\n", EVP_PKEY_bits(key));
+        break;
+#ifndef OPENSSL_NO_EC
+    case EVP_PKEY_EC:
+        {
+            EC_KEY *ec = EVP_PKEY_get1_EC_KEY(key);
+            int nid;
+            const char *cname;
+            nid = EC_GROUP_get_curve_name(EC_KEY_get0_group(ec));
+            EC_KEY_free(ec);
+            cname = EC_curve_nid2nist(nid);
+            if (cname == NULL)
+                cname = OBJ_nid2sn(nid);
+            BIO_printf(out, "ECDH, %s, %d bits\n", cname, EVP_PKEY_bits(key));
+        }
+    break;
+#endif
+    default:
+        BIO_printf(out, "%s, %d bits\n", OBJ_nid2sn(EVP_PKEY_id(key)),
+                   EVP_PKEY_bits(key));
+    }
+    EVP_PKEY_free(key);
+    return 1;
+}
+
+long bio_dump_callback(BIO *bio, int cmd, const char *argp,
+                       int argi, long argl, long ret)
+{
+    BIO *out;
+
+    out = (BIO *)BIO_get_callback_arg(bio);
+    if (out == NULL)
+        return ret;
+
+    if (cmd == (BIO_CB_READ | BIO_CB_RETURN)) {
+        BIO_printf(out, "read from %p [%p] (%lu bytes => %ld (0x%lX))\n",
+                   (void *)bio, (void *)argp, (unsigned long)argi, ret, ret);
+        BIO_dump(out, argp, (int)ret);
+        return ret;
+    } else if (cmd == (BIO_CB_WRITE | BIO_CB_RETURN)) {
+        BIO_printf(out, "write to %p [%p] (%lu bytes => %ld (0x%lX))\n",
+                   (void *)bio, (void *)argp, (unsigned long)argi, ret, ret);
+        BIO_dump(out, argp, (int)ret);
+    }
+    return ret;
+}
+
+void apps_ssl_info_callback(const SSL *s, int where, int ret)
+{
+    const char *str;
+    int w;
+
+    w = where & ~SSL_ST_MASK;
+
+    if (w & SSL_ST_CONNECT)
+        str = "SSL_connect";
+    else if (w & SSL_ST_ACCEPT)
+        str = "SSL_accept";
+    else
+        str = "undefined";
+
+    if (where & SSL_CB_LOOP) {
+        BIO_printf(bio_err, "%s:%s\n", str, SSL_state_string_long(s));
+    } else if (where & SSL_CB_ALERT) {
+        str = (where & SSL_CB_READ) ? "read" : "write";
+        BIO_printf(bio_err, "SSL3 alert %s:%s:%s\n",
+                   str,
+                   SSL_alert_type_string_long(ret),
+                   SSL_alert_desc_string_long(ret));
+    } else if (where & SSL_CB_EXIT) {
+        if (ret == 0)
+            BIO_printf(bio_err, "%s:failed in %s\n",
+                       str, SSL_state_string_long(s));
+        else if (ret < 0)
+            BIO_printf(bio_err, "%s:error in %s\n",
+                       str, SSL_state_string_long(s));
+    }
+}
+
+static STRINT_PAIR ssl_versions[] = {
+    {"SSL 3.0", SSL3_VERSION},
+    {"TLS 1.0", TLS1_VERSION},
+    {"TLS 1.1", TLS1_1_VERSION},
+    {"TLS 1.2", TLS1_2_VERSION},
+    {"TLS 1.3", TLS1_3_VERSION},
+    {"DTLS 1.0", DTLS1_VERSION},
+    {"DTLS 1.0 (bad)", DTLS1_BAD_VER},
+    {NULL}
+};
+
+static STRINT_PAIR alert_types[] = {
+    {" close_notify", 0},
+    {" end_of_early_data", 1},
+    {" unexpected_message", 10},
+    {" bad_record_mac", 20},
+    {" decryption_failed", 21},
+    {" record_overflow", 22},
+    {" decompression_failure", 30},
+    {" handshake_failure", 40},
+    {" bad_certificate", 42},
+    {" unsupported_certificate", 43},
+    {" certificate_revoked", 44},
+    {" certificate_expired", 45},
+    {" certificate_unknown", 46},
+    {" illegal_parameter", 47},
+    {" unknown_ca", 48},
+    {" access_denied", 49},
+    {" decode_error", 50},
+    {" decrypt_error", 51},
+    {" export_restriction", 60},
+    {" protocol_version", 70},
+    {" insufficient_security", 71},
+    {" internal_error", 80},
+    {" inappropriate_fallback", 86},
+    {" user_canceled", 90},
+    {" no_renegotiation", 100},
+    {" missing_extension", 109},
+    {" unsupported_extension", 110},
+    {" certificate_unobtainable", 111},
+    {" unrecognized_name", 112},
+    {" bad_certificate_status_response", 113},
+    {" bad_certificate_hash_value", 114},
+    {" unknown_psk_identity", 115},
+    {" certificate_required", 116},
+    {NULL}
+};
+
+static STRINT_PAIR handshakes[] = {
+    {", HelloRequest", SSL3_MT_HELLO_REQUEST},
+    {", ClientHello", SSL3_MT_CLIENT_HELLO},
+    {", ServerHello", SSL3_MT_SERVER_HELLO},
+    {", HelloVerifyRequest", DTLS1_MT_HELLO_VERIFY_REQUEST},
+    {", NewSessionTicket", SSL3_MT_NEWSESSION_TICKET},
+    {", EndOfEarlyData", SSL3_MT_END_OF_EARLY_DATA},
+    {", EncryptedExtensions", SSL3_MT_ENCRYPTED_EXTENSIONS},
+    {", Certificate", SSL3_MT_CERTIFICATE},
+    {", ServerKeyExchange", SSL3_MT_SERVER_KEY_EXCHANGE},
+    {", CertificateRequest", SSL3_MT_CERTIFICATE_REQUEST},
+    {", ServerHelloDone", SSL3_MT_SERVER_DONE},
+    {", CertificateVerify", SSL3_MT_CERTIFICATE_VERIFY},
+    {", ClientKeyExchange", SSL3_MT_CLIENT_KEY_EXCHANGE},
+    {", Finished", SSL3_MT_FINISHED},
+    {", CertificateUrl", SSL3_MT_CERTIFICATE_URL},
+    {", CertificateStatus", SSL3_MT_CERTIFICATE_STATUS},
+    {", SupplementalData", SSL3_MT_SUPPLEMENTAL_DATA},
+    {", KeyUpdate", SSL3_MT_KEY_UPDATE},
+#ifndef OPENSSL_NO_NEXTPROTONEG
+    {", NextProto", SSL3_MT_NEXT_PROTO},
+#endif
+    {", MessageHash", SSL3_MT_MESSAGE_HASH},
+    {NULL}
+};
+
+void msg_cb(int write_p, int version, int content_type, const void *buf,
+            size_t len, SSL *ssl, void *arg)
+{
+    BIO *bio = arg;
+    const char *str_write_p = write_p ? ">>>" : "<<<";
+    const char *str_version = lookup(version, ssl_versions, "???");
+    const char *str_content_type = "", *str_details1 = "", *str_details2 = "";
+    const unsigned char* bp = buf;
+
+    if (version == SSL3_VERSION ||
+        version == TLS1_VERSION ||
+        version == TLS1_1_VERSION ||
+        version == TLS1_2_VERSION ||
+        version == TLS1_3_VERSION ||
+        version == DTLS1_VERSION || version == DTLS1_BAD_VER) {
+        switch (content_type) {
+        case 20:
+            str_content_type = ", ChangeCipherSpec";
+            break;
+        case 21:
+            str_content_type = ", Alert";
+            str_details1 = ", ???";
+            if (len == 2) {
+                switch (bp[0]) {
+                case 1:
+                    str_details1 = ", warning";
+                    break;
+                case 2:
+                    str_details1 = ", fatal";
+                    break;
+                }
+                str_details2 = lookup((int)bp[1], alert_types, " ???");
+            }
+            break;
+        case 22:
+            str_content_type = ", Handshake";
+            str_details1 = "???";
+            if (len > 0)
+                str_details1 = lookup((int)bp[0], handshakes, "???");
+            break;
+        case 23:
+            str_content_type = ", ApplicationData";
+            break;
+#ifndef OPENSSL_NO_HEARTBEATS
+        case 24:
+            str_details1 = ", Heartbeat";
+
+            if (len > 0) {
+                switch (bp[0]) {
+                case 1:
+                    str_details1 = ", HeartbeatRequest";
+                    break;
+                case 2:
+                    str_details1 = ", HeartbeatResponse";
+                    break;
+                }
+            }
+            break;
+#endif
+        }
+    }
+
+    BIO_printf(bio, "%s %s%s [length %04lx]%s%s\n", str_write_p, str_version,
+               str_content_type, (unsigned long)len, str_details1,
+               str_details2);
+
+    if (len > 0) {
+        size_t num, i;
+
+        BIO_printf(bio, "   ");
+        num = len;
+        for (i = 0; i < num; i++) {
+            if (i % 16 == 0 && i > 0)
+                BIO_printf(bio, "\n   ");
+            BIO_printf(bio, " %02x", ((const unsigned char *)buf)[i]);
+        }
+        if (i < len)
+            BIO_printf(bio, " ...");
+        BIO_printf(bio, "\n");
+    }
+    (void)BIO_flush(bio);
+}
+
+static STRINT_PAIR tlsext_types[] = {
+    {"server name", TLSEXT_TYPE_server_name},
+    {"max fragment length", TLSEXT_TYPE_max_fragment_length},
+    {"client certificate URL", TLSEXT_TYPE_client_certificate_url},
+    {"trusted CA keys", TLSEXT_TYPE_trusted_ca_keys},
+    {"truncated HMAC", TLSEXT_TYPE_truncated_hmac},
+    {"status request", TLSEXT_TYPE_status_request},
+    {"user mapping", TLSEXT_TYPE_user_mapping},
+    {"client authz", TLSEXT_TYPE_client_authz},
+    {"server authz", TLSEXT_TYPE_server_authz},
+    {"cert type", TLSEXT_TYPE_cert_type},
+    {"supported_groups", TLSEXT_TYPE_supported_groups},
+    {"EC point formats", TLSEXT_TYPE_ec_point_formats},
+    {"SRP", TLSEXT_TYPE_srp},
+    {"signature algorithms", TLSEXT_TYPE_signature_algorithms},
+    {"use SRTP", TLSEXT_TYPE_use_srtp},
+    {"heartbeat", TLSEXT_TYPE_heartbeat},
+    {"session ticket", TLSEXT_TYPE_session_ticket},
+    {"renegotiation info", TLSEXT_TYPE_renegotiate},
+    {"signed certificate timestamps", TLSEXT_TYPE_signed_certificate_timestamp},
+    {"TLS padding", TLSEXT_TYPE_padding},
+#ifdef TLSEXT_TYPE_next_proto_neg
+    {"next protocol", TLSEXT_TYPE_next_proto_neg},
+#endif
+#ifdef TLSEXT_TYPE_encrypt_then_mac
+    {"encrypt-then-mac", TLSEXT_TYPE_encrypt_then_mac},
+#endif
+#ifdef TLSEXT_TYPE_application_layer_protocol_negotiation
+    {"application layer protocol negotiation",
+     TLSEXT_TYPE_application_layer_protocol_negotiation},
+#endif
+#ifdef TLSEXT_TYPE_extended_master_secret
+    {"extended master secret", TLSEXT_TYPE_extended_master_secret},
+#endif
+    {"key share", TLSEXT_TYPE_key_share},
+    {"supported versions", TLSEXT_TYPE_supported_versions},
+    {"psk", TLSEXT_TYPE_psk},
+    {"psk kex modes", TLSEXT_TYPE_psk_kex_modes},
+    {"certificate authorities", TLSEXT_TYPE_certificate_authorities},
+    {"post handshake auth", TLSEXT_TYPE_post_handshake_auth},
+    {NULL}
+};
+
+void tlsext_cb(SSL *s, int client_server, int type,
+               const unsigned char *data, int len, void *arg)
+{
+    BIO *bio = arg;
+    const char *extname = lookup(type, tlsext_types, "unknown");
+
+    BIO_printf(bio, "TLS %s extension \"%s\" (id=%d), len=%d\n",
+               client_server ? "server" : "client", extname, type, len);
+    BIO_dump(bio, (const char *)data, len);
+    (void)BIO_flush(bio);
+}
+
+#ifndef OPENSSL_NO_SOCK
+int generate_cookie_callback(SSL *ssl, unsigned char *cookie,
+                             unsigned int *cookie_len)
+{
+    unsigned char *buffer;
+    size_t length = 0;
+    unsigned short port;
+    BIO_ADDR *lpeer = NULL, *peer = NULL;
+
+    /* Initialize a random secret */
+    if (!cookie_initialized) {
+        if (RAND_bytes(cookie_secret, COOKIE_SECRET_LENGTH) <= 0) {
+            BIO_printf(bio_err, "error setting random cookie secret\n");
+            return 0;
+        }
+        cookie_initialized = 1;
+    }
+
+    if (SSL_is_dtls(ssl)) {
+        lpeer = peer = BIO_ADDR_new();
+        if (peer == NULL) {
+            BIO_printf(bio_err, "memory full\n");
+            return 0;
+        }
+
+        /* Read peer information */
+        (void)BIO_dgram_get_peer(SSL_get_rbio(ssl), peer);
+    } else {
+        peer = ourpeer;
+    }
+
+    /* Create buffer with peer's address and port */
+    if (!BIO_ADDR_rawaddress(peer, NULL, &length)) {
+        BIO_printf(bio_err, "Failed getting peer address\n");
+        return 0;
+    }
+    OPENSSL_assert(length != 0);
+    port = BIO_ADDR_rawport(peer);
+    length += sizeof(port);
+    buffer = app_malloc(length, "cookie generate buffer");
+
+    memcpy(buffer, &port, sizeof(port));
+    BIO_ADDR_rawaddress(peer, buffer + sizeof(port), NULL);
+
+    /* Calculate HMAC of buffer using the secret */
+    HMAC(EVP_sha1(), cookie_secret, COOKIE_SECRET_LENGTH,
+         buffer, length, cookie, cookie_len);
+
+    OPENSSL_free(buffer);
+    BIO_ADDR_free(lpeer);
+
+    return 1;
+}
+
+int verify_cookie_callback(SSL *ssl, const unsigned char *cookie,
+                           unsigned int cookie_len)
+{
+    unsigned char result[EVP_MAX_MD_SIZE];
+    unsigned int resultlength;
+
+    /* Note: we check cookie_initialized because if it's not,
+     * it cannot be valid */
+    if (cookie_initialized
+        && generate_cookie_callback(ssl, result, &resultlength)
+        && cookie_len == resultlength
+        && memcmp(result, cookie, resultlength) == 0)
+        return 1;
+
+    return 0;
+}
+
+int generate_stateless_cookie_callback(SSL *ssl, unsigned char *cookie,
+                                       size_t *cookie_len)
+{
+    unsigned int temp;
+    int res = generate_cookie_callback(ssl, cookie, &temp);
+    *cookie_len = temp;
+    return res;
+}
+
+int verify_stateless_cookie_callback(SSL *ssl, const unsigned char *cookie,
+                                     size_t cookie_len)
+{
+    return verify_cookie_callback(ssl, cookie, cookie_len);
+}
+
+#endif
+
+/*
+ * Example of extended certificate handling. Where the standard support of
+ * one certificate per algorithm is not sufficient an application can decide
+ * which certificate(s) to use at runtime based on whatever criteria it deems
+ * appropriate.
+ */
+
+/* Linked list of certificates, keys and chains */
+struct ssl_excert_st {
+    int certform;
+    const char *certfile;
+    int keyform;
+    const char *keyfile;
+    const char *chainfile;
+    X509 *cert;
+    EVP_PKEY *key;
+    STACK_OF(X509) *chain;
+    int build_chain;
+    struct ssl_excert_st *next, *prev;
+};
+
+static STRINT_PAIR chain_flags[] = {
+    {"Overall Validity", CERT_PKEY_VALID},
+    {"Sign with EE key", CERT_PKEY_SIGN},
+    {"EE signature", CERT_PKEY_EE_SIGNATURE},
+    {"CA signature", CERT_PKEY_CA_SIGNATURE},
+    {"EE key parameters", CERT_PKEY_EE_PARAM},
+    {"CA key parameters", CERT_PKEY_CA_PARAM},
+    {"Explicitly sign with EE key", CERT_PKEY_EXPLICIT_SIGN},
+    {"Issuer Name", CERT_PKEY_ISSUER_NAME},
+    {"Certificate Type", CERT_PKEY_CERT_TYPE},
+    {NULL}
+};
+
+static void print_chain_flags(SSL *s, int flags)
+{
+    STRINT_PAIR *pp;
+
+    for (pp = chain_flags; pp->name; ++pp)
+        BIO_printf(bio_err, "\t%s: %s\n",
+                   pp->name,
+                   (flags & pp->retval) ? "OK" : "NOT OK");
+    BIO_printf(bio_err, "\tSuite B: ");
+    if (SSL_set_cert_flags(s, 0) & SSL_CERT_FLAG_SUITEB_128_LOS)
+        BIO_puts(bio_err, flags & CERT_PKEY_SUITEB ? "OK\n" : "NOT OK\n");
+    else
+        BIO_printf(bio_err, "not tested\n");
+}
+
+/*
+ * Very basic selection callback: just use any certificate chain reported as
+ * valid. More sophisticated could prioritise according to local policy.
+ */
+static int set_cert_cb(SSL *ssl, void *arg)
+{
+    int i, rv;
+    SSL_EXCERT *exc = arg;
+#ifdef CERT_CB_TEST_RETRY
+    static int retry_cnt;
+    if (retry_cnt < 5) {
+        retry_cnt++;
+        BIO_printf(bio_err,
+                   "Certificate callback retry test: count %d\n",
+                   retry_cnt);
+        return -1;
+    }
+#endif
+    SSL_certs_clear(ssl);
+
+    if (exc == NULL)
+        return 1;
+
+    /*
+     * Go to end of list and traverse backwards since we prepend newer
+     * entries this retains the original order.
+     */
+    while (exc->next != NULL)
+        exc = exc->next;
+
+    i = 0;
+
+    while (exc != NULL) {
+        i++;
+        rv = SSL_check_chain(ssl, exc->cert, exc->key, exc->chain);
+        BIO_printf(bio_err, "Checking cert chain %d:\nSubject: ", i);
+        X509_NAME_print_ex(bio_err, X509_get_subject_name(exc->cert), 0,
+                           get_nameopt());
+        BIO_puts(bio_err, "\n");
+        print_chain_flags(ssl, rv);
+        if (rv & CERT_PKEY_VALID) {
+            if (!SSL_use_certificate(ssl, exc->cert)
+                    || !SSL_use_PrivateKey(ssl, exc->key)) {
+                return 0;
+            }
+            /*
+             * NB: we wouldn't normally do this as it is not efficient
+             * building chains on each connection better to cache the chain
+             * in advance.
+             */
+            if (exc->build_chain) {
+                if (!SSL_build_cert_chain(ssl, 0))
+                    return 0;
+            } else if (exc->chain != NULL) {
+                SSL_set1_chain(ssl, exc->chain);
+            }
+        }
+        exc = exc->prev;
+    }
+    return 1;
+}
+
+void ssl_ctx_set_excert(SSL_CTX *ctx, SSL_EXCERT *exc)
+{
+    SSL_CTX_set_cert_cb(ctx, set_cert_cb, exc);
+}
+
+static int ssl_excert_prepend(SSL_EXCERT **pexc)
+{
+    SSL_EXCERT *exc = app_malloc(sizeof(*exc), "prepend cert");
+
+    memset(exc, 0, sizeof(*exc));
+
+    exc->next = *pexc;
+    *pexc = exc;
+
+    if (exc->next) {
+        exc->certform = exc->next->certform;
+        exc->keyform = exc->next->keyform;
+        exc->next->prev = exc;
+    } else {
+        exc->certform = FORMAT_PEM;
+        exc->keyform = FORMAT_PEM;
+    }
+    return 1;
+
+}
+
+void ssl_excert_free(SSL_EXCERT *exc)
+{
+    SSL_EXCERT *curr;
+
+    if (exc == NULL)
+        return;
+    while (exc) {
+        X509_free(exc->cert);
+        EVP_PKEY_free(exc->key);
+        sk_X509_pop_free(exc->chain, X509_free);
+        curr = exc;
+        exc = exc->next;
+        OPENSSL_free(curr);
+    }
+}
+
+int load_excert(SSL_EXCERT **pexc)
+{
+    SSL_EXCERT *exc = *pexc;
+    if (exc == NULL)
+        return 1;
+    /* If nothing in list, free and set to NULL */
+    if (exc->certfile == NULL && exc->next == NULL) {
+        ssl_excert_free(exc);
+        *pexc = NULL;
+        return 1;
+    }
+    for (; exc; exc = exc->next) {
+        if (exc->certfile == NULL) {
+            BIO_printf(bio_err, "Missing filename\n");
+            return 0;
+        }
+        exc->cert = load_cert(exc->certfile, exc->certform,
+                              "Server Certificate");
+        if (exc->cert == NULL)
+            return 0;
+        if (exc->keyfile != NULL) {
+            exc->key = load_key(exc->keyfile, exc->keyform,
+                                0, NULL, NULL, "Server Key");
+        } else {
+            exc->key = load_key(exc->certfile, exc->certform,
+                                0, NULL, NULL, "Server Key");
+        }
+        if (exc->key == NULL)
+            return 0;
+        if (exc->chainfile != NULL) {
+            if (!load_certs(exc->chainfile, &exc->chain, FORMAT_PEM, NULL,
+                            "Server Chain"))
+                return 0;
+        }
+    }
+    return 1;
+}
+
+enum range { OPT_X_ENUM };
+
+int args_excert(int opt, SSL_EXCERT **pexc)
+{
+    SSL_EXCERT *exc = *pexc;
+
+    assert(opt > OPT_X__FIRST);
+    assert(opt < OPT_X__LAST);
+
+    if (exc == NULL) {
+        if (!ssl_excert_prepend(&exc)) {
+            BIO_printf(bio_err, " %s: Error initialising xcert\n",
+                       opt_getprog());
+            goto err;
+        }
+        *pexc = exc;
+    }
+
+    switch ((enum range)opt) {
+    case OPT_X__FIRST:
+    case OPT_X__LAST:
+        return 0;
+    case OPT_X_CERT:
+        if (exc->certfile != NULL && !ssl_excert_prepend(&exc)) {
+            BIO_printf(bio_err, "%s: Error adding xcert\n", opt_getprog());
+            goto err;
+        }
+        *pexc = exc;
+        exc->certfile = opt_arg();
+        break;
+    case OPT_X_KEY:
+        if (exc->keyfile != NULL) {
+            BIO_printf(bio_err, "%s: Key already specified\n", opt_getprog());
+            goto err;
+        }
+        exc->keyfile = opt_arg();
+        break;
+    case OPT_X_CHAIN:
+        if (exc->chainfile != NULL) {
+            BIO_printf(bio_err, "%s: Chain already specified\n",
+                       opt_getprog());
+            goto err;
+        }
+        exc->chainfile = opt_arg();
+        break;
+    case OPT_X_CHAIN_BUILD:
+        exc->build_chain = 1;
+        break;
+    case OPT_X_CERTFORM:
+        if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &exc->certform))
+            return 0;
+        break;
+    case OPT_X_KEYFORM:
+        if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &exc->keyform))
+            return 0;
+        break;
+    }
+    return 1;
+
+ err:
+    ERR_print_errors(bio_err);
+    ssl_excert_free(exc);
+    *pexc = NULL;
+    return 0;
+}
+
+static void print_raw_cipherlist(SSL *s)
+{
+    const unsigned char *rlist;
+    static const unsigned char scsv_id[] = { 0, 0xFF };
+    size_t i, rlistlen, num;
+    if (!SSL_is_server(s))
+        return;
+    num = SSL_get0_raw_cipherlist(s, NULL);
+    OPENSSL_assert(num == 2);
+    rlistlen = SSL_get0_raw_cipherlist(s, &rlist);
+    BIO_puts(bio_err, "Client cipher list: ");
+    for (i = 0; i < rlistlen; i += num, rlist += num) {
+        const SSL_CIPHER *c = SSL_CIPHER_find(s, rlist);
+        if (i)
+            BIO_puts(bio_err, ":");
+        if (c != NULL) {
+            BIO_puts(bio_err, SSL_CIPHER_get_name(c));
+        } else if (memcmp(rlist, scsv_id, num) == 0) {
+            BIO_puts(bio_err, "SCSV");
+        } else {
+            size_t j;
+            BIO_puts(bio_err, "0x");
+            for (j = 0; j < num; j++)
+                BIO_printf(bio_err, "%02X", rlist[j]);
+        }
+    }
+    BIO_puts(bio_err, "\n");
+}
+
+/*
+ * Hex encoder for TLSA RRdata, not ':' delimited.
+ */
+static char *hexencode(const unsigned char *data, size_t len)
+{
+    static const char *hex = "0123456789abcdef";
+    char *out;
+    char *cp;
+    size_t outlen = 2 * len + 1;
+    int ilen = (int) outlen;
+
+    if (outlen < len || ilen < 0 || outlen != (size_t)ilen) {
+        BIO_printf(bio_err, "%s: %zu-byte buffer too large to hexencode\n",
+                   opt_getprog(), len);
+        exit(1);
+    }
+    cp = out = app_malloc(ilen, "TLSA hex data buffer");
+
+    while (len-- > 0) {
+        *cp++ = hex[(*data >> 4) & 0x0f];
+        *cp++ = hex[*data++ & 0x0f];
+    }
+    *cp = '\0';
+    return out;
+}
+
+void print_verify_detail(SSL *s, BIO *bio)
+{
+    int mdpth;
+    EVP_PKEY *mspki;
+    long verify_err = SSL_get_verify_result(s);
+
+    if (verify_err == X509_V_OK) {
+        const char *peername = SSL_get0_peername(s);
+
+        BIO_printf(bio, "Verification: OK\n");
+        if (peername != NULL)
+            BIO_printf(bio, "Verified peername: %s\n", peername);
+    } else {
+        const char *reason = X509_verify_cert_error_string(verify_err);
+
+        BIO_printf(bio, "Verification error: %s\n", reason);
+    }
+
+    if ((mdpth = SSL_get0_dane_authority(s, NULL, &mspki)) >= 0) {
+        uint8_t usage, selector, mtype;
+        const unsigned char *data = NULL;
+        size_t dlen = 0;
+        char *hexdata;
+
+        mdpth = SSL_get0_dane_tlsa(s, &usage, &selector, &mtype, &data, &dlen);
+
+        /*
+         * The TLSA data field can be quite long when it is a certificate,
+         * public key or even a SHA2-512 digest.  Because the initial octets of
+         * ASN.1 certificates and public keys contain mostly boilerplate OIDs
+         * and lengths, we show the last 12 bytes of the data instead, as these
+         * are more likely to distinguish distinct TLSA records.
+         */
+#define TLSA_TAIL_SIZE 12
+        if (dlen > TLSA_TAIL_SIZE)
+            hexdata = hexencode(data + dlen - TLSA_TAIL_SIZE, TLSA_TAIL_SIZE);
+        else
+            hexdata = hexencode(data, dlen);
+        BIO_printf(bio, "DANE TLSA %d %d %d %s%s %s at depth %d\n",
+                   usage, selector, mtype,
+                   (dlen > TLSA_TAIL_SIZE) ? "..." : "", hexdata,
+                   (mspki != NULL) ? "signed the certificate" :
+                   mdpth ? "matched TA certificate" : "matched EE certificate",
+                   mdpth);
+        OPENSSL_free(hexdata);
+    }
+}
+
+void print_ssl_summary(SSL *s)
+{
+    const SSL_CIPHER *c;
+    X509 *peer;
+
+    BIO_printf(bio_err, "Protocol version: %s\n", SSL_get_version(s));
+    print_raw_cipherlist(s);
+    c = SSL_get_current_cipher(s);
+    BIO_printf(bio_err, "Ciphersuite: %s\n", SSL_CIPHER_get_name(c));
+    do_print_sigalgs(bio_err, s, 0);
+    peer = SSL_get_peer_certificate(s);
+    if (peer != NULL) {
+        int nid;
+
+        BIO_puts(bio_err, "Peer certificate: ");
+        X509_NAME_print_ex(bio_err, X509_get_subject_name(peer),
+                           0, get_nameopt());
+        BIO_puts(bio_err, "\n");
+        if (SSL_get_peer_signature_nid(s, &nid))
+            BIO_printf(bio_err, "Hash used: %s\n", OBJ_nid2sn(nid));
+        if (SSL_get_peer_signature_type_nid(s, &nid))
+            BIO_printf(bio_err, "Signature type: %s\n", get_sigtype(nid));
+        print_verify_detail(s, bio_err);
+    } else {
+        BIO_puts(bio_err, "No peer certificate\n");
+    }
+    X509_free(peer);
+#ifndef OPENSSL_NO_EC
+    ssl_print_point_formats(bio_err, s);
+    if (SSL_is_server(s))
+        ssl_print_groups(bio_err, s, 1);
+    else
+        ssl_print_tmp_key(bio_err, s);
+#else
+    if (!SSL_is_server(s))
+        ssl_print_tmp_key(bio_err, s);
+#endif
+}
+
+int config_ctx(SSL_CONF_CTX *cctx, STACK_OF(OPENSSL_STRING) *str,
+               SSL_CTX *ctx)
+{
+    int i;
+
+    SSL_CONF_CTX_set_ssl_ctx(cctx, ctx);
+    for (i = 0; i < sk_OPENSSL_STRING_num(str); i += 2) {
+        const char *flag = sk_OPENSSL_STRING_value(str, i);
+        const char *arg = sk_OPENSSL_STRING_value(str, i + 1);
+        if (SSL_CONF_cmd(cctx, flag, arg) <= 0) {
+            if (arg != NULL)
+                BIO_printf(bio_err, "Error with command: \"%s %s\"\n",
+                           flag, arg);
+            else
+                BIO_printf(bio_err, "Error with command: \"%s\"\n", flag);
+            ERR_print_errors(bio_err);
+            return 0;
+        }
+    }
+    if (!SSL_CONF_CTX_finish(cctx)) {
+        BIO_puts(bio_err, "Error finishing context\n");
+        ERR_print_errors(bio_err);
+        return 0;
+    }
+    return 1;
+}
+
+static int add_crls_store(X509_STORE *st, STACK_OF(X509_CRL) *crls)
+{
+    X509_CRL *crl;
+    int i;
+    for (i = 0; i < sk_X509_CRL_num(crls); i++) {
+        crl = sk_X509_CRL_value(crls, i);
+        X509_STORE_add_crl(st, crl);
+    }
+    return 1;
+}
+
+int ssl_ctx_add_crls(SSL_CTX *ctx, STACK_OF(X509_CRL) *crls, int crl_download)
+{
+    X509_STORE *st;
+    st = SSL_CTX_get_cert_store(ctx);
+    add_crls_store(st, crls);
+    if (crl_download)
+        store_setup_crl_download(st);
+    return 1;
+}
+
+int ssl_load_stores(SSL_CTX *ctx,
+                    const char *vfyCApath, const char *vfyCAfile,
+                    const char *chCApath, const char *chCAfile,
+                    STACK_OF(X509_CRL) *crls, int crl_download)
+{
+    X509_STORE *vfy = NULL, *ch = NULL;
+    int rv = 0;
+    if (vfyCApath != NULL || vfyCAfile != NULL) {
+        vfy = X509_STORE_new();
+        if (vfy == NULL)
+            goto err;
+        if (!X509_STORE_load_locations(vfy, vfyCAfile, vfyCApath))
+            goto err;
+        add_crls_store(vfy, crls);
+        SSL_CTX_set1_verify_cert_store(ctx, vfy);
+        if (crl_download)
+            store_setup_crl_download(vfy);
+    }
+    if (chCApath != NULL || chCAfile != NULL) {
+        ch = X509_STORE_new();
+        if (ch == NULL)
+            goto err;
+        if (!X509_STORE_load_locations(ch, chCAfile, chCApath))
+            goto err;
+        SSL_CTX_set1_chain_cert_store(ctx, ch);
+    }
+    rv = 1;
+ err:
+    X509_STORE_free(vfy);
+    X509_STORE_free(ch);
+    return rv;
+}
+
+/* Verbose print out of security callback */
+
+typedef struct {
+    BIO *out;
+    int verbose;
+    int (*old_cb) (const SSL *s, const SSL_CTX *ctx, int op, int bits, int nid,
+                   void *other, void *ex);
+} security_debug_ex;
+
+static STRINT_PAIR callback_types[] = {
+    {"Supported Ciphersuite", SSL_SECOP_CIPHER_SUPPORTED},
+    {"Shared Ciphersuite", SSL_SECOP_CIPHER_SHARED},
+    {"Check Ciphersuite", SSL_SECOP_CIPHER_CHECK},
+#ifndef OPENSSL_NO_DH
+    {"Temp DH key bits", SSL_SECOP_TMP_DH},
+#endif
+    {"Supported Curve", SSL_SECOP_CURVE_SUPPORTED},
+    {"Shared Curve", SSL_SECOP_CURVE_SHARED},
+    {"Check Curve", SSL_SECOP_CURVE_CHECK},
+    {"Supported Signature Algorithm digest", SSL_SECOP_SIGALG_SUPPORTED},
+    {"Shared Signature Algorithm digest", SSL_SECOP_SIGALG_SHARED},
+    {"Check Signature Algorithm digest", SSL_SECOP_SIGALG_CHECK},
+    {"Signature Algorithm mask", SSL_SECOP_SIGALG_MASK},
+    {"Certificate chain EE key", SSL_SECOP_EE_KEY},
+    {"Certificate chain CA key", SSL_SECOP_CA_KEY},
+    {"Peer Chain EE key", SSL_SECOP_PEER_EE_KEY},
+    {"Peer Chain CA key", SSL_SECOP_PEER_CA_KEY},
+    {"Certificate chain CA digest", SSL_SECOP_CA_MD},
+    {"Peer chain CA digest", SSL_SECOP_PEER_CA_MD},
+    {"SSL compression", SSL_SECOP_COMPRESSION},
+    {"Session ticket", SSL_SECOP_TICKET},
+    {NULL}
+};
+
+static int security_callback_debug(const SSL *s, const SSL_CTX *ctx,
+                                   int op, int bits, int nid,
+                                   void *other, void *ex)
+{
+    security_debug_ex *sdb = ex;
+    int rv, show_bits = 1, cert_md = 0;
+    const char *nm;
+    rv = sdb->old_cb(s, ctx, op, bits, nid, other, ex);
+    if (rv == 1 && sdb->verbose < 2)
+        return 1;
+    BIO_puts(sdb->out, "Security callback: ");
+
+    nm = lookup(op, callback_types, NULL);
+    switch (op) {
+    case SSL_SECOP_TICKET:
+    case SSL_SECOP_COMPRESSION:
+        show_bits = 0;
+        nm = NULL;
+        break;
+    case SSL_SECOP_VERSION:
+        BIO_printf(sdb->out, "Version=%s", lookup(nid, ssl_versions, "???"));
+        show_bits = 0;
+        nm = NULL;
+        break;
+    case SSL_SECOP_CA_MD:
+    case SSL_SECOP_PEER_CA_MD:
+        cert_md = 1;
+        break;
+    }
+    if (nm != NULL)
+        BIO_printf(sdb->out, "%s=", nm);
+
+    switch (op & SSL_SECOP_OTHER_TYPE) {
+
+    case SSL_SECOP_OTHER_CIPHER:
+        BIO_puts(sdb->out, SSL_CIPHER_get_name(other));
+        break;
+
+#ifndef OPENSSL_NO_EC
+    case SSL_SECOP_OTHER_CURVE:
+        {
+            const char *cname;
+            cname = EC_curve_nid2nist(nid);
+            if (cname == NULL)
+                cname = OBJ_nid2sn(nid);
+            BIO_puts(sdb->out, cname);
+        }
+        break;
+#endif
+#ifndef OPENSSL_NO_DH
+    case SSL_SECOP_OTHER_DH:
+        {
+            DH *dh = other;
+            BIO_printf(sdb->out, "%d", DH_bits(dh));
+            break;
+        }
+#endif
+    case SSL_SECOP_OTHER_CERT:
+        {
+            if (cert_md) {
+                int sig_nid = X509_get_signature_nid(other);
+                BIO_puts(sdb->out, OBJ_nid2sn(sig_nid));
+            } else {
+                EVP_PKEY *pkey = X509_get0_pubkey(other);
+                const char *algname = "";
+                EVP_PKEY_asn1_get0_info(NULL, NULL, NULL, NULL,
+                                        &algname, EVP_PKEY_get0_asn1(pkey));
+                BIO_printf(sdb->out, "%s, bits=%d",
+                           algname, EVP_PKEY_bits(pkey));
+            }
+            break;
+        }
+    case SSL_SECOP_OTHER_SIGALG:
+        {
+            const unsigned char *salg = other;
+            const char *sname = NULL;
+            switch (salg[1]) {
+            case TLSEXT_signature_anonymous:
+                sname = "anonymous";
+                break;
+            case TLSEXT_signature_rsa:
+                sname = "RSA";
+                break;
+            case TLSEXT_signature_dsa:
+                sname = "DSA";
+                break;
+            case TLSEXT_signature_ecdsa:
+                sname = "ECDSA";
+                break;
+            }
+
+            BIO_puts(sdb->out, OBJ_nid2sn(nid));
+            if (sname)
+                BIO_printf(sdb->out, ", algorithm=%s", sname);
+            else
+                BIO_printf(sdb->out, ", algid=%d", salg[1]);
+            break;
+        }
+
+    }
+
+    if (show_bits)
+        BIO_printf(sdb->out, ", security bits=%d", bits);
+    BIO_printf(sdb->out, ": %s\n", rv ? "yes" : "no");
+    return rv;
+}
+
+void ssl_ctx_security_debug(SSL_CTX *ctx, int verbose)
+{
+    static security_debug_ex sdb;
+
+    sdb.out = bio_err;
+    sdb.verbose = verbose;
+    sdb.old_cb = SSL_CTX_get_security_callback(ctx);
+    SSL_CTX_set_security_callback(ctx, security_callback_debug);
+    SSL_CTX_set0_security_ex_data(ctx, &sdb);
+}
+
+static void keylog_callback(const SSL *ssl, const char *line)
+{
+    if (bio_keylog == NULL) {
+        BIO_printf(bio_err, "Keylog callback is invoked without valid file!\n");
+        return;
+    }
+
+    /*
+     * There might be concurrent writers to the keylog file, so we must ensure
+     * that the given line is written at once.
+     */
+    BIO_printf(bio_keylog, "%s\n", line);
+    (void)BIO_flush(bio_keylog);
+}
+
+int set_keylog_file(SSL_CTX *ctx, const char *keylog_file)
+{
+    /* Close any open files */
+    BIO_free_all(bio_keylog);
+    bio_keylog = NULL;
+
+    if (ctx == NULL || keylog_file == NULL) {
+        /* Keylogging is disabled, OK. */
+        return 0;
+    }
+
+    /*
+     * Append rather than write in order to allow concurrent modification.
+     * Furthermore, this preserves existing keylog files which is useful when
+     * the tool is run multiple times.
+     */
+    bio_keylog = BIO_new_file(keylog_file, "a");
+    if (bio_keylog == NULL) {
+        BIO_printf(bio_err, "Error writing keylog file %s\n", keylog_file);
+        return 1;
+    }
+
+    /* Write a header for seekable, empty files (this excludes pipes). */
+    if (BIO_tell(bio_keylog) == 0) {
+        BIO_puts(bio_keylog,
+                 "# SSL/TLS secrets log file, generated by OpenSSL\n");
+        (void)BIO_flush(bio_keylog);
+    }
+    SSL_CTX_set_keylog_callback(ctx, keylog_callback);
+    return 0;
+}
+
+void print_ca_names(BIO *bio, SSL *s)
+{
+    const char *cs = SSL_is_server(s) ? "server" : "client";
+    const STACK_OF(X509_NAME) *sk = SSL_get0_peer_CA_list(s);
+    int i;
+
+    if (sk == NULL || sk_X509_NAME_num(sk) == 0) {
+        BIO_printf(bio, "---\nNo %s certificate CA names sent\n", cs);
+        return;
+    }
+
+    BIO_printf(bio, "---\nAcceptable %s certificate CA names\n",cs);
+    for (i = 0; i < sk_X509_NAME_num(sk); i++) {
+        X509_NAME_print_ex(bio, sk_X509_NAME_value(sk, i), 0, get_nameopt());
+        BIO_write(bio, "\n", 1);
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/s_client.c b/trunk/3rdparty/openssl-1.1-fit/apps/s_client.c
new file mode 100644
index 000000000..4dd6e2fef
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/s_client.c
@@ -0,0 +1,3544 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2005 Nokia. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include <ctype.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <errno.h>
+#include <openssl/e_os2.h>
+
+#ifndef OPENSSL_NO_SOCK
+
+/*
+ * With IPv6, it looks like Digital has mixed up the proper order of
+ * recursive header file inclusion, resulting in the compiler complaining
+ * that u_int isn't defined, but only if _POSIX_C_SOURCE is defined, which is
+ * needed to have fileno() declared correctly...  So let's define u_int
+ */
+#if defined(OPENSSL_SYS_VMS_DECC) && !defined(__U_INT)
+# define __U_INT
+typedef unsigned int u_int;
+#endif
+
+#include "apps.h"
+#include "progs.h"
+#include <openssl/x509.h>
+#include <openssl/ssl.h>
+#include <openssl/err.h>
+#include <openssl/pem.h>
+#include <openssl/rand.h>
+#include <openssl/ocsp.h>
+#include <openssl/bn.h>
+#include <openssl/async.h>
+#ifndef OPENSSL_NO_SRP
+# include <openssl/srp.h>
+#endif
+#ifndef OPENSSL_NO_CT
+# include <openssl/ct.h>
+#endif
+#include "s_apps.h"
+#include "timeouts.h"
+#include "internal/sockets.h"
+
+#if defined(__has_feature)
+# if __has_feature(memory_sanitizer)
+#  include <sanitizer/msan_interface.h>
+# endif
+#endif
+
+#undef BUFSIZZ
+#define BUFSIZZ 1024*8
+#define S_CLIENT_IRC_READ_TIMEOUT 8
+
+static char *prog;
+static int c_debug = 0;
+static int c_showcerts = 0;
+static char *keymatexportlabel = NULL;
+static int keymatexportlen = 20;
+static BIO *bio_c_out = NULL;
+static int c_quiet = 0;
+static char *sess_out = NULL;
+static SSL_SESSION *psksess = NULL;
+
+static void print_stuff(BIO *berr, SSL *con, int full);
+#ifndef OPENSSL_NO_OCSP
+static int ocsp_resp_cb(SSL *s, void *arg);
+#endif
+static int ldap_ExtendedResponse_parse(const char *buf, long rem);
+static int is_dNS_name(const char *host);
+
+static int saved_errno;
+
+static void save_errno(void)
+{
+    saved_errno = errno;
+    errno = 0;
+}
+
+static int restore_errno(void)
+{
+    int ret = errno;
+    errno = saved_errno;
+    return ret;
+}
+
+static void do_ssl_shutdown(SSL *ssl)
+{
+    int ret;
+
+    do {
+        /* We only do unidirectional shutdown */
+        ret = SSL_shutdown(ssl);
+        if (ret < 0) {
+            switch (SSL_get_error(ssl, ret)) {
+            case SSL_ERROR_WANT_READ:
+            case SSL_ERROR_WANT_WRITE:
+            case SSL_ERROR_WANT_ASYNC:
+            case SSL_ERROR_WANT_ASYNC_JOB:
+                /* We just do busy waiting. Nothing clever */
+                continue;
+            }
+            ret = 0;
+        }
+    } while (ret < 0);
+}
+
+/* Default PSK identity and key */
+static char *psk_identity = "Client_identity";
+
+#ifndef OPENSSL_NO_PSK
+static unsigned int psk_client_cb(SSL *ssl, const char *hint, char *identity,
+                                  unsigned int max_identity_len,
+                                  unsigned char *psk,
+                                  unsigned int max_psk_len)
+{
+    int ret;
+    long key_len;
+    unsigned char *key;
+
+    if (c_debug)
+        BIO_printf(bio_c_out, "psk_client_cb\n");
+    if (!hint) {
+        /* no ServerKeyExchange message */
+        if (c_debug)
+            BIO_printf(bio_c_out,
+                       "NULL received PSK identity hint, continuing anyway\n");
+    } else if (c_debug) {
+        BIO_printf(bio_c_out, "Received PSK identity hint '%s'\n", hint);
+    }
+
+    /*
+     * lookup PSK identity and PSK key based on the given identity hint here
+     */
+    ret = BIO_snprintf(identity, max_identity_len, "%s", psk_identity);
+    if (ret < 0 || (unsigned int)ret > max_identity_len)
+        goto out_err;
+    if (c_debug)
+        BIO_printf(bio_c_out, "created identity '%s' len=%d\n", identity,
+                   ret);
+
+    /* convert the PSK key to binary */
+    key = OPENSSL_hexstr2buf(psk_key, &key_len);
+    if (key == NULL) {
+        BIO_printf(bio_err, "Could not convert PSK key '%s' to buffer\n",
+                   psk_key);
+        return 0;
+    }
+    if (max_psk_len > INT_MAX || key_len > (long)max_psk_len) {
+        BIO_printf(bio_err,
+                   "psk buffer of callback is too small (%d) for key (%ld)\n",
+                   max_psk_len, key_len);
+        OPENSSL_free(key);
+        return 0;
+    }
+
+    memcpy(psk, key, key_len);
+    OPENSSL_free(key);
+
+    if (c_debug)
+        BIO_printf(bio_c_out, "created PSK len=%ld\n", key_len);
+
+    return key_len;
+ out_err:
+    if (c_debug)
+        BIO_printf(bio_err, "Error in PSK client callback\n");
+    return 0;
+}
+#endif
+
+const unsigned char tls13_aes128gcmsha256_id[] = { 0x13, 0x01 };
+const unsigned char tls13_aes256gcmsha384_id[] = { 0x13, 0x02 };
+
+static int psk_use_session_cb(SSL *s, const EVP_MD *md,
+                              const unsigned char **id, size_t *idlen,
+                              SSL_SESSION **sess)
+{
+    SSL_SESSION *usesess = NULL;
+    const SSL_CIPHER *cipher = NULL;
+
+    if (psksess != NULL) {
+        SSL_SESSION_up_ref(psksess);
+        usesess = psksess;
+    } else {
+        long key_len;
+        unsigned char *key = OPENSSL_hexstr2buf(psk_key, &key_len);
+
+        if (key == NULL) {
+            BIO_printf(bio_err, "Could not convert PSK key '%s' to buffer\n",
+                       psk_key);
+            return 0;
+        }
+
+        /* We default to SHA-256 */
+        cipher = SSL_CIPHER_find(s, tls13_aes128gcmsha256_id);
+        if (cipher == NULL) {
+            BIO_printf(bio_err, "Error finding suitable ciphersuite\n");
+            OPENSSL_free(key);
+            return 0;
+        }
+
+        usesess = SSL_SESSION_new();
+        if (usesess == NULL
+                || !SSL_SESSION_set1_master_key(usesess, key, key_len)
+                || !SSL_SESSION_set_cipher(usesess, cipher)
+                || !SSL_SESSION_set_protocol_version(usesess, TLS1_3_VERSION)) {
+            OPENSSL_free(key);
+            goto err;
+        }
+        OPENSSL_free(key);
+    }
+
+    cipher = SSL_SESSION_get0_cipher(usesess);
+    if (cipher == NULL)
+        goto err;
+
+    if (md != NULL && SSL_CIPHER_get_handshake_digest(cipher) != md) {
+        /* PSK not usable, ignore it */
+        *id = NULL;
+        *idlen = 0;
+        *sess = NULL;
+        SSL_SESSION_free(usesess);
+    } else {
+        *sess = usesess;
+        *id = (unsigned char *)psk_identity;
+        *idlen = strlen(psk_identity);
+    }
+
+    return 1;
+
+ err:
+    SSL_SESSION_free(usesess);
+    return 0;
+}
+
+/* This is a context that we pass to callbacks */
+typedef struct tlsextctx_st {
+    BIO *biodebug;
+    int ack;
+} tlsextctx;
+
+static int ssl_servername_cb(SSL *s, int *ad, void *arg)
+{
+    tlsextctx *p = (tlsextctx *) arg;
+    const char *hn = SSL_get_servername(s, TLSEXT_NAMETYPE_host_name);
+    if (SSL_get_servername_type(s) != -1)
+        p->ack = !SSL_session_reused(s) && hn != NULL;
+    else
+        BIO_printf(bio_err, "Can't use SSL_get_servername\n");
+
+    return SSL_TLSEXT_ERR_OK;
+}
+
+#ifndef OPENSSL_NO_SRP
+
+/* This is a context that we pass to all callbacks */
+typedef struct srp_arg_st {
+    char *srppassin;
+    char *srplogin;
+    int msg;                    /* copy from c_msg */
+    int debug;                  /* copy from c_debug */
+    int amp;                    /* allow more groups */
+    int strength;               /* minimal size for N */
+} SRP_ARG;
+
+# define SRP_NUMBER_ITERATIONS_FOR_PRIME 64
+
+static int srp_Verify_N_and_g(const BIGNUM *N, const BIGNUM *g)
+{
+    BN_CTX *bn_ctx = BN_CTX_new();
+    BIGNUM *p = BN_new();
+    BIGNUM *r = BN_new();
+    int ret =
+        g != NULL && N != NULL && bn_ctx != NULL && BN_is_odd(N) &&
+        BN_is_prime_ex(N, SRP_NUMBER_ITERATIONS_FOR_PRIME, bn_ctx, NULL) == 1 &&
+        p != NULL && BN_rshift1(p, N) &&
+        /* p = (N-1)/2 */
+        BN_is_prime_ex(p, SRP_NUMBER_ITERATIONS_FOR_PRIME, bn_ctx, NULL) == 1 &&
+        r != NULL &&
+        /* verify g^((N-1)/2) == -1 (mod N) */
+        BN_mod_exp(r, g, p, N, bn_ctx) &&
+        BN_add_word(r, 1) && BN_cmp(r, N) == 0;
+
+    BN_free(r);
+    BN_free(p);
+    BN_CTX_free(bn_ctx);
+    return ret;
+}
+
+/*-
+ * This callback is used here for two purposes:
+ * - extended debugging
+ * - making some primality tests for unknown groups
+ * The callback is only called for a non default group.
+ *
+ * An application does not need the call back at all if
+ * only the standard groups are used.  In real life situations,
+ * client and server already share well known groups,
+ * thus there is no need to verify them.
+ * Furthermore, in case that a server actually proposes a group that
+ * is not one of those defined in RFC 5054, it is more appropriate
+ * to add the group to a static list and then compare since
+ * primality tests are rather cpu consuming.
+ */
+
+static int ssl_srp_verify_param_cb(SSL *s, void *arg)
+{
+    SRP_ARG *srp_arg = (SRP_ARG *)arg;
+    BIGNUM *N = NULL, *g = NULL;
+
+    if (((N = SSL_get_srp_N(s)) == NULL) || ((g = SSL_get_srp_g(s)) == NULL))
+        return 0;
+    if (srp_arg->debug || srp_arg->msg || srp_arg->amp == 1) {
+        BIO_printf(bio_err, "SRP parameters:\n");
+        BIO_printf(bio_err, "\tN=");
+        BN_print(bio_err, N);
+        BIO_printf(bio_err, "\n\tg=");
+        BN_print(bio_err, g);
+        BIO_printf(bio_err, "\n");
+    }
+
+    if (SRP_check_known_gN_param(g, N))
+        return 1;
+
+    if (srp_arg->amp == 1) {
+        if (srp_arg->debug)
+            BIO_printf(bio_err,
+                       "SRP param N and g are not known params, going to check deeper.\n");
+
+        /*
+         * The srp_moregroups is a real debugging feature. Implementors
+         * should rather add the value to the known ones. The minimal size
+         * has already been tested.
+         */
+        if (BN_num_bits(g) <= BN_BITS && srp_Verify_N_and_g(N, g))
+            return 1;
+    }
+    BIO_printf(bio_err, "SRP param N and g rejected.\n");
+    return 0;
+}
+
+# define PWD_STRLEN 1024
+
+static char *ssl_give_srp_client_pwd_cb(SSL *s, void *arg)
+{
+    SRP_ARG *srp_arg = (SRP_ARG *)arg;
+    char *pass = app_malloc(PWD_STRLEN + 1, "SRP password buffer");
+    PW_CB_DATA cb_tmp;
+    int l;
+
+    cb_tmp.password = (char *)srp_arg->srppassin;
+    cb_tmp.prompt_info = "SRP user";
+    if ((l = password_callback(pass, PWD_STRLEN, 0, &cb_tmp)) < 0) {
+        BIO_printf(bio_err, "Can't read Password\n");
+        OPENSSL_free(pass);
+        return NULL;
+    }
+    *(pass + l) = '\0';
+
+    return pass;
+}
+
+#endif
+
+#ifndef OPENSSL_NO_NEXTPROTONEG
+/* This the context that we pass to next_proto_cb */
+typedef struct tlsextnextprotoctx_st {
+    unsigned char *data;
+    size_t len;
+    int status;
+} tlsextnextprotoctx;
+
+static tlsextnextprotoctx next_proto;
+
+static int next_proto_cb(SSL *s, unsigned char **out, unsigned char *outlen,
+                         const unsigned char *in, unsigned int inlen,
+                         void *arg)
+{
+    tlsextnextprotoctx *ctx = arg;
+
+    if (!c_quiet) {
+        /* We can assume that |in| is syntactically valid. */
+        unsigned i;
+        BIO_printf(bio_c_out, "Protocols advertised by server: ");
+        for (i = 0; i < inlen;) {
+            if (i)
+                BIO_write(bio_c_out, ", ", 2);
+            BIO_write(bio_c_out, &in[i + 1], in[i]);
+            i += in[i] + 1;
+        }
+        BIO_write(bio_c_out, "\n", 1);
+    }
+
+    ctx->status =
+        SSL_select_next_proto(out, outlen, in, inlen, ctx->data, ctx->len);
+    return SSL_TLSEXT_ERR_OK;
+}
+#endif                         /* ndef OPENSSL_NO_NEXTPROTONEG */
+
+static int serverinfo_cli_parse_cb(SSL *s, unsigned int ext_type,
+                                   const unsigned char *in, size_t inlen,
+                                   int *al, void *arg)
+{
+    char pem_name[100];
+    unsigned char ext_buf[4 + 65536];
+
+    /* Reconstruct the type/len fields prior to extension data */
+    inlen &= 0xffff; /* for formal memcmpy correctness */
+    ext_buf[0] = (unsigned char)(ext_type >> 8);
+    ext_buf[1] = (unsigned char)(ext_type);
+    ext_buf[2] = (unsigned char)(inlen >> 8);
+    ext_buf[3] = (unsigned char)(inlen);
+    memcpy(ext_buf + 4, in, inlen);
+
+    BIO_snprintf(pem_name, sizeof(pem_name), "SERVERINFO FOR EXTENSION %d",
+                 ext_type);
+    PEM_write_bio(bio_c_out, pem_name, "", ext_buf, 4 + inlen);
+    return 1;
+}
+
+/*
+ * Hex decoder that tolerates optional whitespace.  Returns number of bytes
+ * produced, advances inptr to end of input string.
+ */
+static ossl_ssize_t hexdecode(const char **inptr, void *result)
+{
+    unsigned char **out = (unsigned char **)result;
+    const char *in = *inptr;
+    unsigned char *ret = app_malloc(strlen(in) / 2, "hexdecode");
+    unsigned char *cp = ret;
+    uint8_t byte;
+    int nibble = 0;
+
+    if (ret == NULL)
+        return -1;
+
+    for (byte = 0; *in; ++in) {
+        int x;
+
+        if (isspace(_UC(*in)))
+            continue;
+        x = OPENSSL_hexchar2int(*in);
+        if (x < 0) {
+            OPENSSL_free(ret);
+            return 0;
+        }
+        byte |= (char)x;
+        if ((nibble ^= 1) == 0) {
+            *cp++ = byte;
+            byte = 0;
+        } else {
+            byte <<= 4;
+        }
+    }
+    if (nibble != 0) {
+        OPENSSL_free(ret);
+        return 0;
+    }
+    *inptr = in;
+
+    return cp - (*out = ret);
+}
+
+/*
+ * Decode unsigned 0..255, returns 1 on success, <= 0 on failure. Advances
+ * inptr to next field skipping leading whitespace.
+ */
+static ossl_ssize_t checked_uint8(const char **inptr, void *out)
+{
+    uint8_t *result = (uint8_t *)out;
+    const char *in = *inptr;
+    char *endp;
+    long v;
+    int e;
+
+    save_errno();
+    v = strtol(in, &endp, 10);
+    e = restore_errno();
+
+    if (((v == LONG_MIN || v == LONG_MAX) && e == ERANGE) ||
+        endp == in || !isspace(_UC(*endp)) ||
+        v != (*result = (uint8_t) v)) {
+        return -1;
+    }
+    for (in = endp; isspace(_UC(*in)); ++in)
+        continue;
+
+    *inptr = in;
+    return 1;
+}
+
+struct tlsa_field {
+    void *var;
+    const char *name;
+    ossl_ssize_t (*parser)(const char **, void *);
+};
+
+static int tlsa_import_rr(SSL *con, const char *rrdata)
+{
+    /* Not necessary to re-init these values; the "parsers" do that. */
+    static uint8_t usage;
+    static uint8_t selector;
+    static uint8_t mtype;
+    static unsigned char *data;
+    static struct tlsa_field tlsa_fields[] = {
+        { &usage, "usage", checked_uint8 },
+        { &selector, "selector", checked_uint8 },
+        { &mtype, "mtype", checked_uint8 },
+        { &data, "data", hexdecode },
+        { NULL, }
+    };
+    struct tlsa_field *f;
+    int ret;
+    const char *cp = rrdata;
+    ossl_ssize_t len = 0;
+
+    for (f = tlsa_fields; f->var; ++f) {
+        /* Returns number of bytes produced, advances cp to next field */
+        if ((len = f->parser(&cp, f->var)) <= 0) {
+            BIO_printf(bio_err, "%s: warning: bad TLSA %s field in: %s\n",
+                       prog, f->name, rrdata);
+            return 0;
+        }
+    }
+    /* The data field is last, so len is its length */
+    ret = SSL_dane_tlsa_add(con, usage, selector, mtype, data, len);
+    OPENSSL_free(data);
+
+    if (ret == 0) {
+        ERR_print_errors(bio_err);
+        BIO_printf(bio_err, "%s: warning: unusable TLSA rrdata: %s\n",
+                   prog, rrdata);
+        return 0;
+    }
+    if (ret < 0) {
+        ERR_print_errors(bio_err);
+        BIO_printf(bio_err, "%s: warning: error loading TLSA rrdata: %s\n",
+                   prog, rrdata);
+        return 0;
+    }
+    return ret;
+}
+
+static int tlsa_import_rrset(SSL *con, STACK_OF(OPENSSL_STRING) *rrset)
+{
+    int num = sk_OPENSSL_STRING_num(rrset);
+    int count = 0;
+    int i;
+
+    for (i = 0; i < num; ++i) {
+        char *rrdata = sk_OPENSSL_STRING_value(rrset, i);
+        if (tlsa_import_rr(con, rrdata) > 0)
+            ++count;
+    }
+    return count > 0;
+}
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_4, OPT_6, OPT_HOST, OPT_PORT, OPT_CONNECT, OPT_BIND, OPT_UNIX,
+    OPT_XMPPHOST, OPT_VERIFY, OPT_NAMEOPT,
+    OPT_CERT, OPT_CRL, OPT_CRL_DOWNLOAD, OPT_SESS_OUT, OPT_SESS_IN,
+    OPT_CERTFORM, OPT_CRLFORM, OPT_VERIFY_RET_ERROR, OPT_VERIFY_QUIET,
+    OPT_BRIEF, OPT_PREXIT, OPT_CRLF, OPT_QUIET, OPT_NBIO,
+    OPT_SSL_CLIENT_ENGINE, OPT_IGN_EOF, OPT_NO_IGN_EOF,
+    OPT_DEBUG, OPT_TLSEXTDEBUG, OPT_STATUS, OPT_WDEBUG,
+    OPT_MSG, OPT_MSGFILE, OPT_ENGINE, OPT_TRACE, OPT_SECURITY_DEBUG,
+    OPT_SECURITY_DEBUG_VERBOSE, OPT_SHOWCERTS, OPT_NBIO_TEST, OPT_STATE,
+    OPT_PSK_IDENTITY, OPT_PSK, OPT_PSK_SESS,
+#ifndef OPENSSL_NO_SRP
+    OPT_SRPUSER, OPT_SRPPASS, OPT_SRP_STRENGTH, OPT_SRP_LATEUSER,
+    OPT_SRP_MOREGROUPS,
+#endif
+    OPT_SSL3, OPT_SSL_CONFIG,
+    OPT_TLS1_3, OPT_TLS1_2, OPT_TLS1_1, OPT_TLS1, OPT_DTLS, OPT_DTLS1,
+    OPT_DTLS1_2, OPT_SCTP, OPT_TIMEOUT, OPT_MTU, OPT_KEYFORM, OPT_PASS,
+    OPT_CERT_CHAIN, OPT_CAPATH, OPT_NOCAPATH, OPT_CHAINCAPATH, OPT_VERIFYCAPATH,
+    OPT_KEY, OPT_RECONNECT, OPT_BUILD_CHAIN, OPT_CAFILE, OPT_NOCAFILE,
+    OPT_CHAINCAFILE, OPT_VERIFYCAFILE, OPT_NEXTPROTONEG, OPT_ALPN,
+    OPT_SERVERINFO, OPT_STARTTLS, OPT_SERVERNAME, OPT_NOSERVERNAME, OPT_ASYNC,
+    OPT_USE_SRTP, OPT_KEYMATEXPORT, OPT_KEYMATEXPORTLEN, OPT_PROTOHOST,
+    OPT_MAXFRAGLEN, OPT_MAX_SEND_FRAG, OPT_SPLIT_SEND_FRAG, OPT_MAX_PIPELINES,
+    OPT_READ_BUF, OPT_KEYLOG_FILE, OPT_EARLY_DATA, OPT_REQCAFILE,
+    OPT_V_ENUM,
+    OPT_X_ENUM,
+    OPT_S_ENUM,
+    OPT_FALLBACKSCSV, OPT_NOCMDS, OPT_PROXY, OPT_DANE_TLSA_DOMAIN,
+#ifndef OPENSSL_NO_CT
+    OPT_CT, OPT_NOCT, OPT_CTLOG_FILE,
+#endif
+    OPT_DANE_TLSA_RRDATA, OPT_DANE_EE_NO_NAME,
+    OPT_ENABLE_PHA,
+    OPT_SCTP_LABEL_BUG,
+    OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS s_client_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"host", OPT_HOST, 's', "Use -connect instead"},
+    {"port", OPT_PORT, 'p', "Use -connect instead"},
+    {"connect", OPT_CONNECT, 's',
+     "TCP/IP where to connect (default is :" PORT ")"},
+    {"bind", OPT_BIND, 's', "bind local address for connection"},
+    {"proxy", OPT_PROXY, 's',
+     "Connect to via specified proxy to the real server"},
+#ifdef AF_UNIX
+    {"unix", OPT_UNIX, 's', "Connect over the specified Unix-domain socket"},
+#endif
+    {"4", OPT_4, '-', "Use IPv4 only"},
+#ifdef AF_INET6
+    {"6", OPT_6, '-', "Use IPv6 only"},
+#endif
+    {"verify", OPT_VERIFY, 'p', "Turn on peer certificate verification"},
+    {"cert", OPT_CERT, '<', "Certificate file to use, PEM format assumed"},
+    {"certform", OPT_CERTFORM, 'F',
+     "Certificate format (PEM or DER) PEM default"},
+    {"nameopt", OPT_NAMEOPT, 's', "Various certificate name options"},
+    {"key", OPT_KEY, 's', "Private key file to use, if not in -cert file"},
+    {"keyform", OPT_KEYFORM, 'E', "Key format (PEM, DER or engine) PEM default"},
+    {"pass", OPT_PASS, 's', "Private key file pass phrase source"},
+    {"CApath", OPT_CAPATH, '/', "PEM format directory of CA's"},
+    {"CAfile", OPT_CAFILE, '<', "PEM format file of CA's"},
+    {"no-CAfile", OPT_NOCAFILE, '-',
+     "Do not load the default certificates file"},
+    {"no-CApath", OPT_NOCAPATH, '-',
+     "Do not load certificates from the default certificates directory"},
+    {"requestCAfile", OPT_REQCAFILE, '<',
+      "PEM format file of CA names to send to the server"},
+    {"dane_tlsa_domain", OPT_DANE_TLSA_DOMAIN, 's', "DANE TLSA base domain"},
+    {"dane_tlsa_rrdata", OPT_DANE_TLSA_RRDATA, 's',
+     "DANE TLSA rrdata presentation form"},
+    {"dane_ee_no_namechecks", OPT_DANE_EE_NO_NAME, '-',
+     "Disable name checks when matching DANE-EE(3) TLSA records"},
+    {"reconnect", OPT_RECONNECT, '-',
+     "Drop and re-make the connection with the same Session-ID"},
+    {"showcerts", OPT_SHOWCERTS, '-',
+     "Show all certificates sent by the server"},
+    {"debug", OPT_DEBUG, '-', "Extra output"},
+    {"msg", OPT_MSG, '-', "Show protocol messages"},
+    {"msgfile", OPT_MSGFILE, '>',
+     "File to send output of -msg or -trace, instead of stdout"},
+    {"nbio_test", OPT_NBIO_TEST, '-', "More ssl protocol testing"},
+    {"state", OPT_STATE, '-', "Print the ssl states"},
+    {"crlf", OPT_CRLF, '-', "Convert LF from terminal into CRLF"},
+    {"quiet", OPT_QUIET, '-', "No s_client output"},
+    {"ign_eof", OPT_IGN_EOF, '-', "Ignore input eof (default when -quiet)"},
+    {"no_ign_eof", OPT_NO_IGN_EOF, '-', "Don't ignore input eof"},
+    {"starttls", OPT_STARTTLS, 's',
+     "Use the appropriate STARTTLS command before starting TLS"},
+    {"xmpphost", OPT_XMPPHOST, 's',
+     "Alias of -name option for \"-starttls xmpp[-server]\""},
+    OPT_R_OPTIONS,
+    {"sess_out", OPT_SESS_OUT, '>', "File to write SSL session to"},
+    {"sess_in", OPT_SESS_IN, '<', "File to read SSL session from"},
+#ifndef OPENSSL_NO_SRTP
+    {"use_srtp", OPT_USE_SRTP, 's',
+     "Offer SRTP key management with a colon-separated profile list"},
+#endif
+    {"keymatexport", OPT_KEYMATEXPORT, 's',
+     "Export keying material using label"},
+    {"keymatexportlen", OPT_KEYMATEXPORTLEN, 'p',
+     "Export len bytes of keying material (default 20)"},
+    {"maxfraglen", OPT_MAXFRAGLEN, 'p',
+     "Enable Maximum Fragment Length Negotiation (len values: 512, 1024, 2048 and 4096)"},
+    {"fallback_scsv", OPT_FALLBACKSCSV, '-', "Send the fallback SCSV"},
+    {"name", OPT_PROTOHOST, 's',
+     "Hostname to use for \"-starttls lmtp\", \"-starttls smtp\" or \"-starttls xmpp[-server]\""},
+    {"CRL", OPT_CRL, '<', "CRL file to use"},
+    {"crl_download", OPT_CRL_DOWNLOAD, '-', "Download CRL from distribution points"},
+    {"CRLform", OPT_CRLFORM, 'F', "CRL format (PEM or DER) PEM is default"},
+    {"verify_return_error", OPT_VERIFY_RET_ERROR, '-',
+     "Close connection on verification error"},
+    {"verify_quiet", OPT_VERIFY_QUIET, '-', "Restrict verify output to errors"},
+    {"brief", OPT_BRIEF, '-',
+     "Restrict output to brief summary of connection parameters"},
+    {"prexit", OPT_PREXIT, '-',
+     "Print session information when the program exits"},
+    {"security_debug", OPT_SECURITY_DEBUG, '-',
+     "Enable security debug messages"},
+    {"security_debug_verbose", OPT_SECURITY_DEBUG_VERBOSE, '-',
+     "Output more security debug output"},
+    {"cert_chain", OPT_CERT_CHAIN, '<',
+     "Certificate chain file (in PEM format)"},
+    {"chainCApath", OPT_CHAINCAPATH, '/',
+     "Use dir as certificate store path to build CA certificate chain"},
+    {"verifyCApath", OPT_VERIFYCAPATH, '/',
+     "Use dir as certificate store path to verify CA certificate"},
+    {"build_chain", OPT_BUILD_CHAIN, '-', "Build certificate chain"},
+    {"chainCAfile", OPT_CHAINCAFILE, '<',
+     "CA file for certificate chain (PEM format)"},
+    {"verifyCAfile", OPT_VERIFYCAFILE, '<',
+     "CA file for certificate verification (PEM format)"},
+    {"nocommands", OPT_NOCMDS, '-', "Do not use interactive command letters"},
+    {"servername", OPT_SERVERNAME, 's',
+     "Set TLS extension servername (SNI) in ClientHello (default)"},
+    {"noservername", OPT_NOSERVERNAME, '-',
+     "Do not send the server name (SNI) extension in the ClientHello"},
+    {"tlsextdebug", OPT_TLSEXTDEBUG, '-',
+     "Hex dump of all TLS extensions received"},
+#ifndef OPENSSL_NO_OCSP
+    {"status", OPT_STATUS, '-', "Request certificate status from server"},
+#endif
+    {"serverinfo", OPT_SERVERINFO, 's',
+     "types  Send empty ClientHello extensions (comma-separated numbers)"},
+    {"alpn", OPT_ALPN, 's',
+     "Enable ALPN extension, considering named protocols supported (comma-separated list)"},
+    {"async", OPT_ASYNC, '-', "Support asynchronous operation"},
+    {"ssl_config", OPT_SSL_CONFIG, 's', "Use specified configuration file"},
+    {"max_send_frag", OPT_MAX_SEND_FRAG, 'p', "Maximum Size of send frames "},
+    {"split_send_frag", OPT_SPLIT_SEND_FRAG, 'p',
+     "Size used to split data for encrypt pipelines"},
+    {"max_pipelines", OPT_MAX_PIPELINES, 'p',
+     "Maximum number of encrypt/decrypt pipelines to be used"},
+    {"read_buf", OPT_READ_BUF, 'p',
+     "Default read buffer size to be used for connections"},
+    OPT_S_OPTIONS,
+    OPT_V_OPTIONS,
+    OPT_X_OPTIONS,
+#ifndef OPENSSL_NO_SSL3
+    {"ssl3", OPT_SSL3, '-', "Just use SSLv3"},
+#endif
+#ifndef OPENSSL_NO_TLS1
+    {"tls1", OPT_TLS1, '-', "Just use TLSv1"},
+#endif
+#ifndef OPENSSL_NO_TLS1_1
+    {"tls1_1", OPT_TLS1_1, '-', "Just use TLSv1.1"},
+#endif
+#ifndef OPENSSL_NO_TLS1_2
+    {"tls1_2", OPT_TLS1_2, '-', "Just use TLSv1.2"},
+#endif
+#ifndef OPENSSL_NO_TLS1_3
+    {"tls1_3", OPT_TLS1_3, '-', "Just use TLSv1.3"},
+#endif
+#ifndef OPENSSL_NO_DTLS
+    {"dtls", OPT_DTLS, '-', "Use any version of DTLS"},
+    {"timeout", OPT_TIMEOUT, '-',
+     "Enable send/receive timeout on DTLS connections"},
+    {"mtu", OPT_MTU, 'p', "Set the link layer MTU"},
+#endif
+#ifndef OPENSSL_NO_DTLS1
+    {"dtls1", OPT_DTLS1, '-', "Just use DTLSv1"},
+#endif
+#ifndef OPENSSL_NO_DTLS1_2
+    {"dtls1_2", OPT_DTLS1_2, '-', "Just use DTLSv1.2"},
+#endif
+#ifndef OPENSSL_NO_SCTP
+    {"sctp", OPT_SCTP, '-', "Use SCTP"},
+    {"sctp_label_bug", OPT_SCTP_LABEL_BUG, '-', "Enable SCTP label length bug"},
+#endif
+#ifndef OPENSSL_NO_SSL_TRACE
+    {"trace", OPT_TRACE, '-', "Show trace output of protocol messages"},
+#endif
+#ifdef WATT32
+    {"wdebug", OPT_WDEBUG, '-', "WATT-32 tcp debugging"},
+#endif
+    {"nbio", OPT_NBIO, '-', "Use non-blocking IO"},
+    {"psk_identity", OPT_PSK_IDENTITY, 's', "PSK identity"},
+    {"psk", OPT_PSK, 's', "PSK in hex (without 0x)"},
+    {"psk_session", OPT_PSK_SESS, '<', "File to read PSK SSL session from"},
+#ifndef OPENSSL_NO_SRP
+    {"srpuser", OPT_SRPUSER, 's', "SRP authentication for 'user'"},
+    {"srppass", OPT_SRPPASS, 's', "Password for 'user'"},
+    {"srp_lateuser", OPT_SRP_LATEUSER, '-',
+     "SRP username into second ClientHello message"},
+    {"srp_moregroups", OPT_SRP_MOREGROUPS, '-',
+     "Tolerate other than the known g N values."},
+    {"srp_strength", OPT_SRP_STRENGTH, 'p', "Minimal length in bits for N"},
+#endif
+#ifndef OPENSSL_NO_NEXTPROTONEG
+    {"nextprotoneg", OPT_NEXTPROTONEG, 's',
+     "Enable NPN extension, considering named protocols supported (comma-separated list)"},
+#endif
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+    {"ssl_client_engine", OPT_SSL_CLIENT_ENGINE, 's',
+     "Specify engine to be used for client certificate operations"},
+#endif
+#ifndef OPENSSL_NO_CT
+    {"ct", OPT_CT, '-', "Request and parse SCTs (also enables OCSP stapling)"},
+    {"noct", OPT_NOCT, '-', "Do not request or parse SCTs (default)"},
+    {"ctlogfile", OPT_CTLOG_FILE, '<', "CT log list CONF file"},
+#endif
+    {"keylogfile", OPT_KEYLOG_FILE, '>', "Write TLS secrets to file"},
+    {"early_data", OPT_EARLY_DATA, '<', "File to send as early data"},
+    {"enable_pha", OPT_ENABLE_PHA, '-', "Enable post-handshake-authentication"},
+    {NULL, OPT_EOF, 0x00, NULL}
+};
+
+typedef enum PROTOCOL_choice {
+    PROTO_OFF,
+    PROTO_SMTP,
+    PROTO_POP3,
+    PROTO_IMAP,
+    PROTO_FTP,
+    PROTO_TELNET,
+    PROTO_XMPP,
+    PROTO_XMPP_SERVER,
+    PROTO_CONNECT,
+    PROTO_IRC,
+    PROTO_MYSQL,
+    PROTO_POSTGRES,
+    PROTO_LMTP,
+    PROTO_NNTP,
+    PROTO_SIEVE,
+    PROTO_LDAP
+} PROTOCOL_CHOICE;
+
+static const OPT_PAIR services[] = {
+    {"smtp", PROTO_SMTP},
+    {"pop3", PROTO_POP3},
+    {"imap", PROTO_IMAP},
+    {"ftp", PROTO_FTP},
+    {"xmpp", PROTO_XMPP},
+    {"xmpp-server", PROTO_XMPP_SERVER},
+    {"telnet", PROTO_TELNET},
+    {"irc", PROTO_IRC},
+    {"mysql", PROTO_MYSQL},
+    {"postgres", PROTO_POSTGRES},
+    {"lmtp", PROTO_LMTP},
+    {"nntp", PROTO_NNTP},
+    {"sieve", PROTO_SIEVE},
+    {"ldap", PROTO_LDAP},
+    {NULL, 0}
+};
+
+#define IS_INET_FLAG(o) \
+ (o == OPT_4 || o == OPT_6 || o == OPT_HOST || o == OPT_PORT || o == OPT_CONNECT)
+#define IS_UNIX_FLAG(o) (o == OPT_UNIX)
+
+#define IS_PROT_FLAG(o) \
+ (o == OPT_SSL3 || o == OPT_TLS1 || o == OPT_TLS1_1 || o == OPT_TLS1_2 \
+  || o == OPT_TLS1_3 || o == OPT_DTLS || o == OPT_DTLS1 || o == OPT_DTLS1_2)
+
+/* Free |*dest| and optionally set it to a copy of |source|. */
+static void freeandcopy(char **dest, const char *source)
+{
+    OPENSSL_free(*dest);
+    *dest = NULL;
+    if (source != NULL)
+        *dest = OPENSSL_strdup(source);
+}
+
+static int new_session_cb(SSL *s, SSL_SESSION *sess)
+{
+
+    if (sess_out != NULL) {
+        BIO *stmp = BIO_new_file(sess_out, "w");
+
+        if (stmp == NULL) {
+            BIO_printf(bio_err, "Error writing session file %s\n", sess_out);
+        } else {
+            PEM_write_bio_SSL_SESSION(stmp, sess);
+            BIO_free(stmp);
+        }
+    }
+
+    /*
+     * Session data gets dumped on connection for TLSv1.2 and below, and on
+     * arrival of the NewSessionTicket for TLSv1.3.
+     */
+    if (SSL_version(s) == TLS1_3_VERSION) {
+        BIO_printf(bio_c_out,
+                   "---\nPost-Handshake New Session Ticket arrived:\n");
+        SSL_SESSION_print(bio_c_out, sess);
+        BIO_printf(bio_c_out, "---\n");
+    }
+
+    /*
+     * We always return a "fail" response so that the session gets freed again
+     * because we haven't used the reference.
+     */
+    return 0;
+}
+
+int s_client_main(int argc, char **argv)
+{
+    BIO *sbio;
+    EVP_PKEY *key = NULL;
+    SSL *con = NULL;
+    SSL_CTX *ctx = NULL;
+    STACK_OF(X509) *chain = NULL;
+    X509 *cert = NULL;
+    X509_VERIFY_PARAM *vpm = NULL;
+    SSL_EXCERT *exc = NULL;
+    SSL_CONF_CTX *cctx = NULL;
+    STACK_OF(OPENSSL_STRING) *ssl_args = NULL;
+    char *dane_tlsa_domain = NULL;
+    STACK_OF(OPENSSL_STRING) *dane_tlsa_rrset = NULL;
+    int dane_ee_no_name = 0;
+    STACK_OF(X509_CRL) *crls = NULL;
+    const SSL_METHOD *meth = TLS_client_method();
+    const char *CApath = NULL, *CAfile = NULL;
+    char *cbuf = NULL, *sbuf = NULL;
+    char *mbuf = NULL, *proxystr = NULL, *connectstr = NULL, *bindstr = NULL;
+    char *cert_file = NULL, *key_file = NULL, *chain_file = NULL;
+    char *chCApath = NULL, *chCAfile = NULL, *host = NULL;
+    char *port = OPENSSL_strdup(PORT);
+    char *bindhost = NULL, *bindport = NULL;
+    char *passarg = NULL, *pass = NULL, *vfyCApath = NULL, *vfyCAfile = NULL;
+    char *ReqCAfile = NULL;
+    char *sess_in = NULL, *crl_file = NULL, *p;
+    const char *protohost = NULL;
+    struct timeval timeout, *timeoutp;
+    fd_set readfds, writefds;
+    int noCApath = 0, noCAfile = 0;
+    int build_chain = 0, cbuf_len, cbuf_off, cert_format = FORMAT_PEM;
+    int key_format = FORMAT_PEM, crlf = 0, full_log = 1, mbuf_len = 0;
+    int prexit = 0;
+    int sdebug = 0;
+    int reconnect = 0, verify = SSL_VERIFY_NONE, vpmtouched = 0;
+    int ret = 1, in_init = 1, i, nbio_test = 0, s = -1, k, width, state = 0;
+    int sbuf_len, sbuf_off, cmdletters = 1;
+    int socket_family = AF_UNSPEC, socket_type = SOCK_STREAM, protocol = 0;
+    int starttls_proto = PROTO_OFF, crl_format = FORMAT_PEM, crl_download = 0;
+    int write_tty, read_tty, write_ssl, read_ssl, tty_on, ssl_pending;
+#if !defined(OPENSSL_SYS_WINDOWS) && !defined(OPENSSL_SYS_MSDOS)
+    int at_eof = 0;
+#endif
+    int read_buf_len = 0;
+    int fallback_scsv = 0;
+    OPTION_CHOICE o;
+#ifndef OPENSSL_NO_DTLS
+    int enable_timeouts = 0;
+    long socket_mtu = 0;
+#endif
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE *ssl_client_engine = NULL;
+#endif
+    ENGINE *e = NULL;
+#if defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_MSDOS)
+    struct timeval tv;
+#endif
+    const char *servername = NULL;
+    int noservername = 0;
+    const char *alpn_in = NULL;
+    tlsextctx tlsextcbp = { NULL, 0 };
+    const char *ssl_config = NULL;
+#define MAX_SI_TYPES 100
+    unsigned short serverinfo_types[MAX_SI_TYPES];
+    int serverinfo_count = 0, start = 0, len;
+#ifndef OPENSSL_NO_NEXTPROTONEG
+    const char *next_proto_neg_in = NULL;
+#endif
+#ifndef OPENSSL_NO_SRP
+    char *srppass = NULL;
+    int srp_lateuser = 0;
+    SRP_ARG srp_arg = { NULL, NULL, 0, 0, 0, 1024 };
+#endif
+#ifndef OPENSSL_NO_SRTP
+    char *srtp_profiles = NULL;
+#endif
+#ifndef OPENSSL_NO_CT
+    char *ctlog_file = NULL;
+    int ct_validation = 0;
+#endif
+    int min_version = 0, max_version = 0, prot_opt = 0, no_prot_opt = 0;
+    int async = 0;
+    unsigned int max_send_fragment = 0;
+    unsigned int split_send_fragment = 0, max_pipelines = 0;
+    enum { use_inet, use_unix, use_unknown } connect_type = use_unknown;
+    int count4or6 = 0;
+    uint8_t maxfraglen = 0;
+    int c_nbio = 0, c_msg = 0, c_ign_eof = 0, c_brief = 0;
+    int c_tlsextdebug = 0;
+#ifndef OPENSSL_NO_OCSP
+    int c_status_req = 0;
+#endif
+    BIO *bio_c_msg = NULL;
+    const char *keylog_file = NULL, *early_data_file = NULL;
+#ifndef OPENSSL_NO_DTLS
+    int isdtls = 0;
+#endif
+    char *psksessf = NULL;
+    int enable_pha = 0;
+#ifndef OPENSSL_NO_SCTP
+    int sctp_label_bug = 0;
+#endif
+
+    FD_ZERO(&readfds);
+    FD_ZERO(&writefds);
+/* Known false-positive of MemorySanitizer. */
+#if defined(__has_feature)
+# if __has_feature(memory_sanitizer)
+    __msan_unpoison(&readfds, sizeof(readfds));
+    __msan_unpoison(&writefds, sizeof(writefds));
+# endif
+#endif
+
+    prog = opt_progname(argv[0]);
+    c_quiet = 0;
+    c_debug = 0;
+    c_showcerts = 0;
+    c_nbio = 0;
+    vpm = X509_VERIFY_PARAM_new();
+    cctx = SSL_CONF_CTX_new();
+
+    if (vpm == NULL || cctx == NULL) {
+        BIO_printf(bio_err, "%s: out of memory\n", prog);
+        goto end;
+    }
+
+    cbuf = app_malloc(BUFSIZZ, "cbuf");
+    sbuf = app_malloc(BUFSIZZ, "sbuf");
+    mbuf = app_malloc(BUFSIZZ, "mbuf");
+
+    SSL_CONF_CTX_set_flags(cctx, SSL_CONF_FLAG_CLIENT | SSL_CONF_FLAG_CMDLINE);
+
+    prog = opt_init(argc, argv, s_client_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        /* Check for intermixing flags. */
+        if (connect_type == use_unix && IS_INET_FLAG(o)) {
+            BIO_printf(bio_err,
+                       "%s: Intermixed protocol flags (unix and internet domains)\n",
+                       prog);
+            goto end;
+        }
+        if (connect_type == use_inet && IS_UNIX_FLAG(o)) {
+            BIO_printf(bio_err,
+                       "%s: Intermixed protocol flags (internet and unix domains)\n",
+                       prog);
+            goto end;
+        }
+
+        if (IS_PROT_FLAG(o) && ++prot_opt > 1) {
+            BIO_printf(bio_err, "Cannot supply multiple protocol flags\n");
+            goto end;
+        }
+        if (IS_NO_PROT_FLAG(o))
+            no_prot_opt++;
+        if (prot_opt == 1 && no_prot_opt) {
+            BIO_printf(bio_err,
+                       "Cannot supply both a protocol flag and '-no_<prot>'\n");
+            goto end;
+        }
+
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(s_client_options);
+            ret = 0;
+            goto end;
+        case OPT_4:
+            connect_type = use_inet;
+            socket_family = AF_INET;
+            count4or6++;
+            break;
+#ifdef AF_INET6
+        case OPT_6:
+            connect_type = use_inet;
+            socket_family = AF_INET6;
+            count4or6++;
+            break;
+#endif
+        case OPT_HOST:
+            connect_type = use_inet;
+            freeandcopy(&host, opt_arg());
+            break;
+        case OPT_PORT:
+            connect_type = use_inet;
+            freeandcopy(&port, opt_arg());
+            break;
+        case OPT_CONNECT:
+            connect_type = use_inet;
+            freeandcopy(&connectstr, opt_arg());
+            break;
+        case OPT_BIND:
+            freeandcopy(&bindstr, opt_arg());
+            break;
+        case OPT_PROXY:
+            proxystr = opt_arg();
+            starttls_proto = PROTO_CONNECT;
+            break;
+#ifdef AF_UNIX
+        case OPT_UNIX:
+            connect_type = use_unix;
+            socket_family = AF_UNIX;
+            freeandcopy(&host, opt_arg());
+            break;
+#endif
+        case OPT_XMPPHOST:
+            /* fall through, since this is an alias */
+        case OPT_PROTOHOST:
+            protohost = opt_arg();
+            break;
+        case OPT_VERIFY:
+            verify = SSL_VERIFY_PEER;
+            verify_args.depth = atoi(opt_arg());
+            if (!c_quiet)
+                BIO_printf(bio_err, "verify depth is %d\n", verify_args.depth);
+            break;
+        case OPT_CERT:
+            cert_file = opt_arg();
+            break;
+        case OPT_NAMEOPT:
+            if (!set_nameopt(opt_arg()))
+                goto end;
+            break;
+        case OPT_CRL:
+            crl_file = opt_arg();
+            break;
+        case OPT_CRL_DOWNLOAD:
+            crl_download = 1;
+            break;
+        case OPT_SESS_OUT:
+            sess_out = opt_arg();
+            break;
+        case OPT_SESS_IN:
+            sess_in = opt_arg();
+            break;
+        case OPT_CERTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &cert_format))
+                goto opthelp;
+            break;
+        case OPT_CRLFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &crl_format))
+                goto opthelp;
+            break;
+        case OPT_VERIFY_RET_ERROR:
+            verify = SSL_VERIFY_PEER;
+            verify_args.return_error = 1;
+            break;
+        case OPT_VERIFY_QUIET:
+            verify_args.quiet = 1;
+            break;
+        case OPT_BRIEF:
+            c_brief = verify_args.quiet = c_quiet = 1;
+            break;
+        case OPT_S_CASES:
+            if (ssl_args == NULL)
+                ssl_args = sk_OPENSSL_STRING_new_null();
+            if (ssl_args == NULL
+                || !sk_OPENSSL_STRING_push(ssl_args, opt_flag())
+                || !sk_OPENSSL_STRING_push(ssl_args, opt_arg())) {
+                BIO_printf(bio_err, "%s: Memory allocation failure\n", prog);
+                goto end;
+            }
+            break;
+        case OPT_V_CASES:
+            if (!opt_verify(o, vpm))
+                goto end;
+            vpmtouched++;
+            break;
+        case OPT_X_CASES:
+            if (!args_excert(o, &exc))
+                goto end;
+            break;
+        case OPT_PREXIT:
+            prexit = 1;
+            break;
+        case OPT_CRLF:
+            crlf = 1;
+            break;
+        case OPT_QUIET:
+            c_quiet = c_ign_eof = 1;
+            break;
+        case OPT_NBIO:
+            c_nbio = 1;
+            break;
+        case OPT_NOCMDS:
+            cmdletters = 0;
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 1);
+            break;
+        case OPT_SSL_CLIENT_ENGINE:
+#ifndef OPENSSL_NO_ENGINE
+            ssl_client_engine = ENGINE_by_id(opt_arg());
+            if (ssl_client_engine == NULL) {
+                BIO_printf(bio_err, "Error getting client auth engine\n");
+                goto opthelp;
+            }
+#endif
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_IGN_EOF:
+            c_ign_eof = 1;
+            break;
+        case OPT_NO_IGN_EOF:
+            c_ign_eof = 0;
+            break;
+        case OPT_DEBUG:
+            c_debug = 1;
+            break;
+        case OPT_TLSEXTDEBUG:
+            c_tlsextdebug = 1;
+            break;
+        case OPT_STATUS:
+#ifndef OPENSSL_NO_OCSP
+            c_status_req = 1;
+#endif
+            break;
+        case OPT_WDEBUG:
+#ifdef WATT32
+            dbug_init();
+#endif
+            break;
+        case OPT_MSG:
+            c_msg = 1;
+            break;
+        case OPT_MSGFILE:
+            bio_c_msg = BIO_new_file(opt_arg(), "w");
+            break;
+        case OPT_TRACE:
+#ifndef OPENSSL_NO_SSL_TRACE
+            c_msg = 2;
+#endif
+            break;
+        case OPT_SECURITY_DEBUG:
+            sdebug = 1;
+            break;
+        case OPT_SECURITY_DEBUG_VERBOSE:
+            sdebug = 2;
+            break;
+        case OPT_SHOWCERTS:
+            c_showcerts = 1;
+            break;
+        case OPT_NBIO_TEST:
+            nbio_test = 1;
+            break;
+        case OPT_STATE:
+            state = 1;
+            break;
+        case OPT_PSK_IDENTITY:
+            psk_identity = opt_arg();
+            break;
+        case OPT_PSK:
+            for (p = psk_key = opt_arg(); *p; p++) {
+                if (isxdigit(_UC(*p)))
+                    continue;
+                BIO_printf(bio_err, "Not a hex number '%s'\n", psk_key);
+                goto end;
+            }
+            break;
+        case OPT_PSK_SESS:
+            psksessf = opt_arg();
+            break;
+#ifndef OPENSSL_NO_SRP
+        case OPT_SRPUSER:
+            srp_arg.srplogin = opt_arg();
+            if (min_version < TLS1_VERSION)
+                min_version = TLS1_VERSION;
+            break;
+        case OPT_SRPPASS:
+            srppass = opt_arg();
+            if (min_version < TLS1_VERSION)
+                min_version = TLS1_VERSION;
+            break;
+        case OPT_SRP_STRENGTH:
+            srp_arg.strength = atoi(opt_arg());
+            BIO_printf(bio_err, "SRP minimal length for N is %d\n",
+                       srp_arg.strength);
+            if (min_version < TLS1_VERSION)
+                min_version = TLS1_VERSION;
+            break;
+        case OPT_SRP_LATEUSER:
+            srp_lateuser = 1;
+            if (min_version < TLS1_VERSION)
+                min_version = TLS1_VERSION;
+            break;
+        case OPT_SRP_MOREGROUPS:
+            srp_arg.amp = 1;
+            if (min_version < TLS1_VERSION)
+                min_version = TLS1_VERSION;
+            break;
+#endif
+        case OPT_SSL_CONFIG:
+            ssl_config = opt_arg();
+            break;
+        case OPT_SSL3:
+            min_version = SSL3_VERSION;
+            max_version = SSL3_VERSION;
+            break;
+        case OPT_TLS1_3:
+            min_version = TLS1_3_VERSION;
+            max_version = TLS1_3_VERSION;
+            break;
+        case OPT_TLS1_2:
+            min_version = TLS1_2_VERSION;
+            max_version = TLS1_2_VERSION;
+            break;
+        case OPT_TLS1_1:
+            min_version = TLS1_1_VERSION;
+            max_version = TLS1_1_VERSION;
+            break;
+        case OPT_TLS1:
+            min_version = TLS1_VERSION;
+            max_version = TLS1_VERSION;
+            break;
+        case OPT_DTLS:
+#ifndef OPENSSL_NO_DTLS
+            meth = DTLS_client_method();
+            socket_type = SOCK_DGRAM;
+            isdtls = 1;
+#endif
+            break;
+        case OPT_DTLS1:
+#ifndef OPENSSL_NO_DTLS1
+            meth = DTLS_client_method();
+            min_version = DTLS1_VERSION;
+            max_version = DTLS1_VERSION;
+            socket_type = SOCK_DGRAM;
+            isdtls = 1;
+#endif
+            break;
+        case OPT_DTLS1_2:
+#ifndef OPENSSL_NO_DTLS1_2
+            meth = DTLS_client_method();
+            min_version = DTLS1_2_VERSION;
+            max_version = DTLS1_2_VERSION;
+            socket_type = SOCK_DGRAM;
+            isdtls = 1;
+#endif
+            break;
+        case OPT_SCTP:
+#ifndef OPENSSL_NO_SCTP
+            protocol = IPPROTO_SCTP;
+#endif
+            break;
+        case OPT_SCTP_LABEL_BUG:
+#ifndef OPENSSL_NO_SCTP
+            sctp_label_bug = 1;
+#endif
+            break;
+        case OPT_TIMEOUT:
+#ifndef OPENSSL_NO_DTLS
+            enable_timeouts = 1;
+#endif
+            break;
+        case OPT_MTU:
+#ifndef OPENSSL_NO_DTLS
+            socket_mtu = atol(opt_arg());
+#endif
+            break;
+        case OPT_FALLBACKSCSV:
+            fallback_scsv = 1;
+            break;
+        case OPT_KEYFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PDE, &key_format))
+                goto opthelp;
+            break;
+        case OPT_PASS:
+            passarg = opt_arg();
+            break;
+        case OPT_CERT_CHAIN:
+            chain_file = opt_arg();
+            break;
+        case OPT_KEY:
+            key_file = opt_arg();
+            break;
+        case OPT_RECONNECT:
+            reconnect = 5;
+            break;
+        case OPT_CAPATH:
+            CApath = opt_arg();
+            break;
+        case OPT_NOCAPATH:
+            noCApath = 1;
+            break;
+        case OPT_CHAINCAPATH:
+            chCApath = opt_arg();
+            break;
+        case OPT_VERIFYCAPATH:
+            vfyCApath = opt_arg();
+            break;
+        case OPT_BUILD_CHAIN:
+            build_chain = 1;
+            break;
+        case OPT_REQCAFILE:
+            ReqCAfile = opt_arg();
+            break;
+        case OPT_CAFILE:
+            CAfile = opt_arg();
+            break;
+        case OPT_NOCAFILE:
+            noCAfile = 1;
+            break;
+#ifndef OPENSSL_NO_CT
+        case OPT_NOCT:
+            ct_validation = 0;
+            break;
+        case OPT_CT:
+            ct_validation = 1;
+            break;
+        case OPT_CTLOG_FILE:
+            ctlog_file = opt_arg();
+            break;
+#endif
+        case OPT_CHAINCAFILE:
+            chCAfile = opt_arg();
+            break;
+        case OPT_VERIFYCAFILE:
+            vfyCAfile = opt_arg();
+            break;
+        case OPT_DANE_TLSA_DOMAIN:
+            dane_tlsa_domain = opt_arg();
+            break;
+        case OPT_DANE_TLSA_RRDATA:
+            if (dane_tlsa_rrset == NULL)
+                dane_tlsa_rrset = sk_OPENSSL_STRING_new_null();
+            if (dane_tlsa_rrset == NULL ||
+                !sk_OPENSSL_STRING_push(dane_tlsa_rrset, opt_arg())) {
+                BIO_printf(bio_err, "%s: Memory allocation failure\n", prog);
+                goto end;
+            }
+            break;
+        case OPT_DANE_EE_NO_NAME:
+            dane_ee_no_name = 1;
+            break;
+        case OPT_NEXTPROTONEG:
+#ifndef OPENSSL_NO_NEXTPROTONEG
+            next_proto_neg_in = opt_arg();
+#endif
+            break;
+        case OPT_ALPN:
+            alpn_in = opt_arg();
+            break;
+        case OPT_SERVERINFO:
+            p = opt_arg();
+            len = strlen(p);
+            for (start = 0, i = 0; i <= len; ++i) {
+                if (i == len || p[i] == ',') {
+                    serverinfo_types[serverinfo_count] = atoi(p + start);
+                    if (++serverinfo_count == MAX_SI_TYPES)
+                        break;
+                    start = i + 1;
+                }
+            }
+            break;
+        case OPT_STARTTLS:
+            if (!opt_pair(opt_arg(), services, &starttls_proto))
+                goto end;
+            break;
+        case OPT_SERVERNAME:
+            servername = opt_arg();
+            break;
+        case OPT_NOSERVERNAME:
+            noservername = 1;
+            break;
+        case OPT_USE_SRTP:
+#ifndef OPENSSL_NO_SRTP
+            srtp_profiles = opt_arg();
+#endif
+            break;
+        case OPT_KEYMATEXPORT:
+            keymatexportlabel = opt_arg();
+            break;
+        case OPT_KEYMATEXPORTLEN:
+            keymatexportlen = atoi(opt_arg());
+            break;
+        case OPT_ASYNC:
+            async = 1;
+            break;
+        case OPT_MAXFRAGLEN:
+            len = atoi(opt_arg());
+            switch (len) {
+            case 512:
+                maxfraglen = TLSEXT_max_fragment_length_512;
+                break;
+            case 1024:
+                maxfraglen = TLSEXT_max_fragment_length_1024;
+                break;
+            case 2048:
+                maxfraglen = TLSEXT_max_fragment_length_2048;
+                break;
+            case 4096:
+                maxfraglen = TLSEXT_max_fragment_length_4096;
+                break;
+            default:
+                BIO_printf(bio_err,
+                           "%s: Max Fragment Len %u is out of permitted values",
+                           prog, len);
+                goto opthelp;
+            }
+            break;
+        case OPT_MAX_SEND_FRAG:
+            max_send_fragment = atoi(opt_arg());
+            break;
+        case OPT_SPLIT_SEND_FRAG:
+            split_send_fragment = atoi(opt_arg());
+            break;
+        case OPT_MAX_PIPELINES:
+            max_pipelines = atoi(opt_arg());
+            break;
+        case OPT_READ_BUF:
+            read_buf_len = atoi(opt_arg());
+            break;
+        case OPT_KEYLOG_FILE:
+            keylog_file = opt_arg();
+            break;
+        case OPT_EARLY_DATA:
+            early_data_file = opt_arg();
+            break;
+        case OPT_ENABLE_PHA:
+            enable_pha = 1;
+            break;
+        }
+    }
+    if (count4or6 >= 2) {
+        BIO_printf(bio_err, "%s: Can't use both -4 and -6\n", prog);
+        goto opthelp;
+    }
+    if (noservername) {
+        if (servername != NULL) {
+            BIO_printf(bio_err,
+                       "%s: Can't use -servername and -noservername together\n",
+                       prog);
+            goto opthelp;
+        }
+        if (dane_tlsa_domain != NULL) {
+            BIO_printf(bio_err,
+               "%s: Can't use -dane_tlsa_domain and -noservername together\n",
+               prog);
+            goto opthelp;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc == 1) {
+        /* If there's a positional argument, it's the equivalent of
+         * OPT_CONNECT.
+         * Don't allow -connect and a separate argument.
+         */
+        if (connectstr != NULL) {
+            BIO_printf(bio_err,
+                       "%s: must not provide both -connect option and target parameter\n",
+                       prog);
+            goto opthelp;
+        }
+        connect_type = use_inet;
+        freeandcopy(&connectstr, *opt_rest());
+    } else if (argc != 0) {
+        goto opthelp;
+    }
+
+#ifndef OPENSSL_NO_NEXTPROTONEG
+    if (min_version == TLS1_3_VERSION && next_proto_neg_in != NULL) {
+        BIO_printf(bio_err, "Cannot supply -nextprotoneg with TLSv1.3\n");
+        goto opthelp;
+    }
+#endif
+    if (proxystr != NULL) {
+        int res;
+        char *tmp_host = host, *tmp_port = port;
+        if (connectstr == NULL) {
+            BIO_printf(bio_err, "%s: -proxy requires use of -connect or target parameter\n", prog);
+            goto opthelp;
+        }
+        res = BIO_parse_hostserv(proxystr, &host, &port, BIO_PARSE_PRIO_HOST);
+        if (tmp_host != host)
+            OPENSSL_free(tmp_host);
+        if (tmp_port != port)
+            OPENSSL_free(tmp_port);
+        if (!res) {
+            BIO_printf(bio_err,
+                       "%s: -proxy argument malformed or ambiguous\n", prog);
+            goto end;
+        }
+    } else {
+        int res = 1;
+        char *tmp_host = host, *tmp_port = port;
+        if (connectstr != NULL)
+            res = BIO_parse_hostserv(connectstr, &host, &port,
+                                     BIO_PARSE_PRIO_HOST);
+        if (tmp_host != host)
+            OPENSSL_free(tmp_host);
+        if (tmp_port != port)
+            OPENSSL_free(tmp_port);
+        if (!res) {
+            BIO_printf(bio_err,
+                       "%s: -connect argument or target parameter malformed or ambiguous\n",
+                       prog);
+            goto end;
+        }
+    }
+
+    if (bindstr != NULL) {
+        int res;
+        res = BIO_parse_hostserv(bindstr, &bindhost, &bindport,
+                                 BIO_PARSE_PRIO_HOST);
+        if (!res) {
+            BIO_printf(bio_err,
+                       "%s: -bind argument parameter malformed or ambiguous\n",
+                       prog);
+            goto end;
+        }
+    }
+
+#ifdef AF_UNIX
+    if (socket_family == AF_UNIX && socket_type != SOCK_STREAM) {
+        BIO_printf(bio_err,
+                   "Can't use unix sockets and datagrams together\n");
+        goto end;
+    }
+#endif
+
+#ifndef OPENSSL_NO_SCTP
+    if (protocol == IPPROTO_SCTP) {
+        if (socket_type != SOCK_DGRAM) {
+            BIO_printf(bio_err, "Can't use -sctp without DTLS\n");
+            goto end;
+        }
+        /* SCTP is unusual. It uses DTLS over a SOCK_STREAM protocol */
+        socket_type = SOCK_STREAM;
+    }
+#endif
+
+#if !defined(OPENSSL_NO_NEXTPROTONEG)
+    next_proto.status = -1;
+    if (next_proto_neg_in) {
+        next_proto.data =
+            next_protos_parse(&next_proto.len, next_proto_neg_in);
+        if (next_proto.data == NULL) {
+            BIO_printf(bio_err, "Error parsing -nextprotoneg argument\n");
+            goto end;
+        }
+    } else
+        next_proto.data = NULL;
+#endif
+
+    if (!app_passwd(passarg, NULL, &pass, NULL)) {
+        BIO_printf(bio_err, "Error getting password\n");
+        goto end;
+    }
+
+    if (key_file == NULL)
+        key_file = cert_file;
+
+    if (key_file != NULL) {
+        key = load_key(key_file, key_format, 0, pass, e,
+                       "client certificate private key file");
+        if (key == NULL) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (cert_file != NULL) {
+        cert = load_cert(cert_file, cert_format, "client certificate file");
+        if (cert == NULL) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (chain_file != NULL) {
+        if (!load_certs(chain_file, &chain, FORMAT_PEM, NULL,
+                        "client certificate chain"))
+            goto end;
+    }
+
+    if (crl_file != NULL) {
+        X509_CRL *crl;
+        crl = load_crl(crl_file, crl_format);
+        if (crl == NULL) {
+            BIO_puts(bio_err, "Error loading CRL\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        crls = sk_X509_CRL_new_null();
+        if (crls == NULL || !sk_X509_CRL_push(crls, crl)) {
+            BIO_puts(bio_err, "Error adding CRL\n");
+            ERR_print_errors(bio_err);
+            X509_CRL_free(crl);
+            goto end;
+        }
+    }
+
+    if (!load_excert(&exc))
+        goto end;
+
+    if (bio_c_out == NULL) {
+        if (c_quiet && !c_debug) {
+            bio_c_out = BIO_new(BIO_s_null());
+            if (c_msg && bio_c_msg == NULL)
+                bio_c_msg = dup_bio_out(FORMAT_TEXT);
+        } else if (bio_c_out == NULL)
+            bio_c_out = dup_bio_out(FORMAT_TEXT);
+    }
+#ifndef OPENSSL_NO_SRP
+    if (!app_passwd(srppass, NULL, &srp_arg.srppassin, NULL)) {
+        BIO_printf(bio_err, "Error getting password\n");
+        goto end;
+    }
+#endif
+
+    ctx = SSL_CTX_new(meth);
+    if (ctx == NULL) {
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    SSL_CTX_clear_mode(ctx, SSL_MODE_AUTO_RETRY);
+
+    if (sdebug)
+        ssl_ctx_security_debug(ctx, sdebug);
+
+    if (!config_ctx(cctx, ssl_args, ctx))
+        goto end;
+
+    if (ssl_config != NULL) {
+        if (SSL_CTX_config(ctx, ssl_config) == 0) {
+            BIO_printf(bio_err, "Error using configuration \"%s\"\n",
+                       ssl_config);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+#ifndef OPENSSL_NO_SCTP
+    if (protocol == IPPROTO_SCTP && sctp_label_bug == 1)
+        SSL_CTX_set_mode(ctx, SSL_MODE_DTLS_SCTP_LABEL_LENGTH_BUG);
+#endif
+
+    if (min_version != 0
+        && SSL_CTX_set_min_proto_version(ctx, min_version) == 0)
+        goto end;
+    if (max_version != 0
+        && SSL_CTX_set_max_proto_version(ctx, max_version) == 0)
+        goto end;
+
+    if (vpmtouched && !SSL_CTX_set1_param(ctx, vpm)) {
+        BIO_printf(bio_err, "Error setting verify params\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    if (async) {
+        SSL_CTX_set_mode(ctx, SSL_MODE_ASYNC);
+    }
+
+    if (max_send_fragment > 0
+        && !SSL_CTX_set_max_send_fragment(ctx, max_send_fragment)) {
+        BIO_printf(bio_err, "%s: Max send fragment size %u is out of permitted range\n",
+                   prog, max_send_fragment);
+        goto end;
+    }
+
+    if (split_send_fragment > 0
+        && !SSL_CTX_set_split_send_fragment(ctx, split_send_fragment)) {
+        BIO_printf(bio_err, "%s: Split send fragment size %u is out of permitted range\n",
+                   prog, split_send_fragment);
+        goto end;
+    }
+
+    if (max_pipelines > 0
+        && !SSL_CTX_set_max_pipelines(ctx, max_pipelines)) {
+        BIO_printf(bio_err, "%s: Max pipelines %u is out of permitted range\n",
+                   prog, max_pipelines);
+        goto end;
+    }
+
+    if (read_buf_len > 0) {
+        SSL_CTX_set_default_read_buffer_len(ctx, read_buf_len);
+    }
+
+    if (maxfraglen > 0
+            && !SSL_CTX_set_tlsext_max_fragment_length(ctx, maxfraglen)) {
+        BIO_printf(bio_err,
+                   "%s: Max Fragment Length code %u is out of permitted values"
+                   "\n", prog, maxfraglen);
+        goto end;
+    }
+
+    if (!ssl_load_stores(ctx, vfyCApath, vfyCAfile, chCApath, chCAfile,
+                         crls, crl_download)) {
+        BIO_printf(bio_err, "Error loading store locations\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+    if (ReqCAfile != NULL) {
+        STACK_OF(X509_NAME) *nm = sk_X509_NAME_new_null();
+
+        if (nm == NULL || !SSL_add_file_cert_subjects_to_stack(nm, ReqCAfile)) {
+            sk_X509_NAME_pop_free(nm, X509_NAME_free);
+            BIO_printf(bio_err, "Error loading CA names\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        SSL_CTX_set0_CA_list(ctx, nm);
+    }
+#ifndef OPENSSL_NO_ENGINE
+    if (ssl_client_engine) {
+        if (!SSL_CTX_set_client_cert_engine(ctx, ssl_client_engine)) {
+            BIO_puts(bio_err, "Error setting client auth engine\n");
+            ERR_print_errors(bio_err);
+            ENGINE_free(ssl_client_engine);
+            goto end;
+        }
+        ENGINE_free(ssl_client_engine);
+    }
+#endif
+
+#ifndef OPENSSL_NO_PSK
+    if (psk_key != NULL) {
+        if (c_debug)
+            BIO_printf(bio_c_out, "PSK key given, setting client callback\n");
+        SSL_CTX_set_psk_client_callback(ctx, psk_client_cb);
+    }
+#endif
+    if (psksessf != NULL) {
+        BIO *stmp = BIO_new_file(psksessf, "r");
+
+        if (stmp == NULL) {
+            BIO_printf(bio_err, "Can't open PSK session file %s\n", psksessf);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        psksess = PEM_read_bio_SSL_SESSION(stmp, NULL, 0, NULL);
+        BIO_free(stmp);
+        if (psksess == NULL) {
+            BIO_printf(bio_err, "Can't read PSK session file %s\n", psksessf);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+    if (psk_key != NULL || psksess != NULL)
+        SSL_CTX_set_psk_use_session_callback(ctx, psk_use_session_cb);
+
+#ifndef OPENSSL_NO_SRTP
+    if (srtp_profiles != NULL) {
+        /* Returns 0 on success! */
+        if (SSL_CTX_set_tlsext_use_srtp(ctx, srtp_profiles) != 0) {
+            BIO_printf(bio_err, "Error setting SRTP profile\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+#endif
+
+    if (exc != NULL)
+        ssl_ctx_set_excert(ctx, exc);
+
+#if !defined(OPENSSL_NO_NEXTPROTONEG)
+    if (next_proto.data != NULL)
+        SSL_CTX_set_next_proto_select_cb(ctx, next_proto_cb, &next_proto);
+#endif
+    if (alpn_in) {
+        size_t alpn_len;
+        unsigned char *alpn = next_protos_parse(&alpn_len, alpn_in);
+
+        if (alpn == NULL) {
+            BIO_printf(bio_err, "Error parsing -alpn argument\n");
+            goto end;
+        }
+        /* Returns 0 on success! */
+        if (SSL_CTX_set_alpn_protos(ctx, alpn, alpn_len) != 0) {
+            BIO_printf(bio_err, "Error setting ALPN\n");
+            goto end;
+        }
+        OPENSSL_free(alpn);
+    }
+
+    for (i = 0; i < serverinfo_count; i++) {
+        if (!SSL_CTX_add_client_custom_ext(ctx,
+                                           serverinfo_types[i],
+                                           NULL, NULL, NULL,
+                                           serverinfo_cli_parse_cb, NULL)) {
+            BIO_printf(bio_err,
+                       "Warning: Unable to add custom extension %u, skipping\n",
+                       serverinfo_types[i]);
+        }
+    }
+
+    if (state)
+        SSL_CTX_set_info_callback(ctx, apps_ssl_info_callback);
+
+#ifndef OPENSSL_NO_CT
+    /* Enable SCT processing, without early connection termination */
+    if (ct_validation &&
+        !SSL_CTX_enable_ct(ctx, SSL_CT_VALIDATION_PERMISSIVE)) {
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    if (!ctx_set_ctlog_list_file(ctx, ctlog_file)) {
+        if (ct_validation) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+
+        /*
+         * If CT validation is not enabled, the log list isn't needed so don't
+         * show errors or abort. We try to load it regardless because then we
+         * can show the names of the logs any SCTs came from (SCTs may be seen
+         * even with validation disabled).
+         */
+        ERR_clear_error();
+    }
+#endif
+
+    SSL_CTX_set_verify(ctx, verify, verify_callback);
+
+    if (!ctx_set_verify_locations(ctx, CAfile, CApath, noCAfile, noCApath)) {
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    ssl_ctx_add_crls(ctx, crls, crl_download);
+
+    if (!set_cert_key_stuff(ctx, cert, key, chain, build_chain))
+        goto end;
+
+    if (!noservername) {
+        tlsextcbp.biodebug = bio_err;
+        SSL_CTX_set_tlsext_servername_callback(ctx, ssl_servername_cb);
+        SSL_CTX_set_tlsext_servername_arg(ctx, &tlsextcbp);
+    }
+# ifndef OPENSSL_NO_SRP
+    if (srp_arg.srplogin) {
+        if (!srp_lateuser && !SSL_CTX_set_srp_username(ctx, srp_arg.srplogin)) {
+            BIO_printf(bio_err, "Unable to set SRP username\n");
+            goto end;
+        }
+        srp_arg.msg = c_msg;
+        srp_arg.debug = c_debug;
+        SSL_CTX_set_srp_cb_arg(ctx, &srp_arg);
+        SSL_CTX_set_srp_client_pwd_callback(ctx, ssl_give_srp_client_pwd_cb);
+        SSL_CTX_set_srp_strength(ctx, srp_arg.strength);
+        if (c_msg || c_debug || srp_arg.amp == 0)
+            SSL_CTX_set_srp_verify_param_callback(ctx,
+                                                  ssl_srp_verify_param_cb);
+    }
+# endif
+
+    if (dane_tlsa_domain != NULL) {
+        if (SSL_CTX_dane_enable(ctx) <= 0) {
+            BIO_printf(bio_err,
+                       "%s: Error enabling DANE TLSA authentication.\n",
+                       prog);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    /*
+     * In TLSv1.3 NewSessionTicket messages arrive after the handshake and can
+     * come at any time. Therefore we use a callback to write out the session
+     * when we know about it. This approach works for < TLSv1.3 as well.
+     */
+    SSL_CTX_set_session_cache_mode(ctx, SSL_SESS_CACHE_CLIENT
+                                        | SSL_SESS_CACHE_NO_INTERNAL_STORE);
+    SSL_CTX_sess_set_new_cb(ctx, new_session_cb);
+
+    if (set_keylog_file(ctx, keylog_file))
+        goto end;
+
+    con = SSL_new(ctx);
+    if (con == NULL)
+        goto end;
+
+    if (enable_pha)
+        SSL_set_post_handshake_auth(con, 1);
+
+    if (sess_in != NULL) {
+        SSL_SESSION *sess;
+        BIO *stmp = BIO_new_file(sess_in, "r");
+        if (stmp == NULL) {
+            BIO_printf(bio_err, "Can't open session file %s\n", sess_in);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        sess = PEM_read_bio_SSL_SESSION(stmp, NULL, 0, NULL);
+        BIO_free(stmp);
+        if (sess == NULL) {
+            BIO_printf(bio_err, "Can't open session file %s\n", sess_in);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        if (!SSL_set_session(con, sess)) {
+            BIO_printf(bio_err, "Can't set session\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+
+        SSL_SESSION_free(sess);
+    }
+
+    if (fallback_scsv)
+        SSL_set_mode(con, SSL_MODE_SEND_FALLBACK_SCSV);
+
+    if (!noservername && (servername != NULL || dane_tlsa_domain == NULL)) {
+        if (servername == NULL) {
+            if(host == NULL || is_dNS_name(host)) 
+                servername = (host == NULL) ? "localhost" : host;
+        }
+        if (servername != NULL && !SSL_set_tlsext_host_name(con, servername)) {
+            BIO_printf(bio_err, "Unable to set TLS servername extension.\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (dane_tlsa_domain != NULL) {
+        if (SSL_dane_enable(con, dane_tlsa_domain) <= 0) {
+            BIO_printf(bio_err, "%s: Error enabling DANE TLSA "
+                       "authentication.\n", prog);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        if (dane_tlsa_rrset == NULL) {
+            BIO_printf(bio_err, "%s: DANE TLSA authentication requires at "
+                       "least one -dane_tlsa_rrdata option.\n", prog);
+            goto end;
+        }
+        if (tlsa_import_rrset(con, dane_tlsa_rrset) <= 0) {
+            BIO_printf(bio_err, "%s: Failed to import any TLSA "
+                       "records.\n", prog);
+            goto end;
+        }
+        if (dane_ee_no_name)
+            SSL_dane_set_flags(con, DANE_FLAG_NO_DANE_EE_NAMECHECKS);
+    } else if (dane_tlsa_rrset != NULL) {
+        BIO_printf(bio_err, "%s: DANE TLSA authentication requires the "
+                   "-dane_tlsa_domain option.\n", prog);
+        goto end;
+    }
+
+ re_start:
+    if (init_client(&s, host, port, bindhost, bindport, socket_family,
+                    socket_type, protocol) == 0) {
+        BIO_printf(bio_err, "connect:errno=%d\n", get_last_socket_error());
+        BIO_closesocket(s);
+        goto end;
+    }
+    BIO_printf(bio_c_out, "CONNECTED(%08X)\n", s);
+
+    if (c_nbio) {
+        if (!BIO_socket_nbio(s, 1)) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        BIO_printf(bio_c_out, "Turned on non blocking io\n");
+    }
+#ifndef OPENSSL_NO_DTLS
+    if (isdtls) {
+        union BIO_sock_info_u peer_info;
+
+#ifndef OPENSSL_NO_SCTP
+        if (protocol == IPPROTO_SCTP)
+            sbio = BIO_new_dgram_sctp(s, BIO_NOCLOSE);
+        else
+#endif
+            sbio = BIO_new_dgram(s, BIO_NOCLOSE);
+
+        if ((peer_info.addr = BIO_ADDR_new()) == NULL) {
+            BIO_printf(bio_err, "memory allocation failure\n");
+            BIO_closesocket(s);
+            goto end;
+        }
+        if (!BIO_sock_info(s, BIO_SOCK_INFO_ADDRESS, &peer_info)) {
+            BIO_printf(bio_err, "getsockname:errno=%d\n",
+                       get_last_socket_error());
+            BIO_ADDR_free(peer_info.addr);
+            BIO_closesocket(s);
+            goto end;
+        }
+
+        (void)BIO_ctrl_set_connected(sbio, peer_info.addr);
+        BIO_ADDR_free(peer_info.addr);
+        peer_info.addr = NULL;
+
+        if (enable_timeouts) {
+            timeout.tv_sec = 0;
+            timeout.tv_usec = DGRAM_RCV_TIMEOUT;
+            BIO_ctrl(sbio, BIO_CTRL_DGRAM_SET_RECV_TIMEOUT, 0, &timeout);
+
+            timeout.tv_sec = 0;
+            timeout.tv_usec = DGRAM_SND_TIMEOUT;
+            BIO_ctrl(sbio, BIO_CTRL_DGRAM_SET_SEND_TIMEOUT, 0, &timeout);
+        }
+
+        if (socket_mtu) {
+            if (socket_mtu < DTLS_get_link_min_mtu(con)) {
+                BIO_printf(bio_err, "MTU too small. Must be at least %ld\n",
+                           DTLS_get_link_min_mtu(con));
+                BIO_free(sbio);
+                goto shut;
+            }
+            SSL_set_options(con, SSL_OP_NO_QUERY_MTU);
+            if (!DTLS_set_link_mtu(con, socket_mtu)) {
+                BIO_printf(bio_err, "Failed to set MTU\n");
+                BIO_free(sbio);
+                goto shut;
+            }
+        } else {
+            /* want to do MTU discovery */
+            BIO_ctrl(sbio, BIO_CTRL_DGRAM_MTU_DISCOVER, 0, NULL);
+        }
+    } else
+#endif /* OPENSSL_NO_DTLS */
+        sbio = BIO_new_socket(s, BIO_NOCLOSE);
+
+    if (nbio_test) {
+        BIO *test;
+
+        test = BIO_new(BIO_f_nbio_test());
+        sbio = BIO_push(test, sbio);
+    }
+
+    if (c_debug) {
+        BIO_set_callback(sbio, bio_dump_callback);
+        BIO_set_callback_arg(sbio, (char *)bio_c_out);
+    }
+    if (c_msg) {
+#ifndef OPENSSL_NO_SSL_TRACE
+        if (c_msg == 2)
+            SSL_set_msg_callback(con, SSL_trace);
+        else
+#endif
+            SSL_set_msg_callback(con, msg_cb);
+        SSL_set_msg_callback_arg(con, bio_c_msg ? bio_c_msg : bio_c_out);
+    }
+
+    if (c_tlsextdebug) {
+        SSL_set_tlsext_debug_callback(con, tlsext_cb);
+        SSL_set_tlsext_debug_arg(con, bio_c_out);
+    }
+#ifndef OPENSSL_NO_OCSP
+    if (c_status_req) {
+        SSL_set_tlsext_status_type(con, TLSEXT_STATUSTYPE_ocsp);
+        SSL_CTX_set_tlsext_status_cb(ctx, ocsp_resp_cb);
+        SSL_CTX_set_tlsext_status_arg(ctx, bio_c_out);
+    }
+#endif
+
+    SSL_set_bio(con, sbio, sbio);
+    SSL_set_connect_state(con);
+
+    /* ok, lets connect */
+    if (fileno_stdin() > SSL_get_fd(con))
+        width = fileno_stdin() + 1;
+    else
+        width = SSL_get_fd(con) + 1;
+
+    read_tty = 1;
+    write_tty = 0;
+    tty_on = 0;
+    read_ssl = 1;
+    write_ssl = 1;
+
+    cbuf_len = 0;
+    cbuf_off = 0;
+    sbuf_len = 0;
+    sbuf_off = 0;
+
+    switch ((PROTOCOL_CHOICE) starttls_proto) {
+    case PROTO_OFF:
+        break;
+    case PROTO_LMTP:
+    case PROTO_SMTP:
+        {
+            /*
+             * This is an ugly hack that does a lot of assumptions. We do
+             * have to handle multi-line responses which may come in a single
+             * packet or not. We therefore have to use BIO_gets() which does
+             * need a buffering BIO. So during the initial chitchat we do
+             * push a buffering BIO into the chain that is removed again
+             * later on to not disturb the rest of the s_client operation.
+             */
+            int foundit = 0;
+            BIO *fbio = BIO_new(BIO_f_buffer());
+
+            BIO_push(fbio, sbio);
+            /* Wait for multi-line response to end from LMTP or SMTP */
+            do {
+                mbuf_len = BIO_gets(fbio, mbuf, BUFSIZZ);
+            } while (mbuf_len > 3 && mbuf[3] == '-');
+            if (protohost == NULL)
+                protohost = "mail.example.com";
+            if (starttls_proto == (int)PROTO_LMTP)
+                BIO_printf(fbio, "LHLO %s\r\n", protohost);
+            else
+                BIO_printf(fbio, "EHLO %s\r\n", protohost);
+            (void)BIO_flush(fbio);
+            /*
+             * Wait for multi-line response to end LHLO LMTP or EHLO SMTP
+             * response.
+             */
+            do {
+                mbuf_len = BIO_gets(fbio, mbuf, BUFSIZZ);
+                if (strstr(mbuf, "STARTTLS"))
+                    foundit = 1;
+            } while (mbuf_len > 3 && mbuf[3] == '-');
+            (void)BIO_flush(fbio);
+            BIO_pop(fbio);
+            BIO_free(fbio);
+            if (!foundit)
+                BIO_printf(bio_err,
+                           "Didn't find STARTTLS in server response,"
+                           " trying anyway...\n");
+            BIO_printf(sbio, "STARTTLS\r\n");
+            BIO_read(sbio, sbuf, BUFSIZZ);
+        }
+        break;
+    case PROTO_POP3:
+        {
+            BIO_read(sbio, mbuf, BUFSIZZ);
+            BIO_printf(sbio, "STLS\r\n");
+            mbuf_len = BIO_read(sbio, sbuf, BUFSIZZ);
+            if (mbuf_len < 0) {
+                BIO_printf(bio_err, "BIO_read failed\n");
+                goto end;
+            }
+        }
+        break;
+    case PROTO_IMAP:
+        {
+            int foundit = 0;
+            BIO *fbio = BIO_new(BIO_f_buffer());
+
+            BIO_push(fbio, sbio);
+            BIO_gets(fbio, mbuf, BUFSIZZ);
+            /* STARTTLS command requires CAPABILITY... */
+            BIO_printf(fbio, ". CAPABILITY\r\n");
+            (void)BIO_flush(fbio);
+            /* wait for multi-line CAPABILITY response */
+            do {
+                mbuf_len = BIO_gets(fbio, mbuf, BUFSIZZ);
+                if (strstr(mbuf, "STARTTLS"))
+                    foundit = 1;
+            }
+            while (mbuf_len > 3 && mbuf[0] != '.');
+            (void)BIO_flush(fbio);
+            BIO_pop(fbio);
+            BIO_free(fbio);
+            if (!foundit)
+                BIO_printf(bio_err,
+                           "Didn't find STARTTLS in server response,"
+                           " trying anyway...\n");
+            BIO_printf(sbio, ". STARTTLS\r\n");
+            BIO_read(sbio, sbuf, BUFSIZZ);
+        }
+        break;
+    case PROTO_FTP:
+        {
+            BIO *fbio = BIO_new(BIO_f_buffer());
+
+            BIO_push(fbio, sbio);
+            /* wait for multi-line response to end from FTP */
+            do {
+                mbuf_len = BIO_gets(fbio, mbuf, BUFSIZZ);
+            }
+            while (mbuf_len > 3 && mbuf[3] == '-');
+            (void)BIO_flush(fbio);
+            BIO_pop(fbio);
+            BIO_free(fbio);
+            BIO_printf(sbio, "AUTH TLS\r\n");
+            BIO_read(sbio, sbuf, BUFSIZZ);
+        }
+        break;
+    case PROTO_XMPP:
+    case PROTO_XMPP_SERVER:
+        {
+            int seen = 0;
+            BIO_printf(sbio, "<stream:stream "
+                       "xmlns:stream='http://etherx.jabber.org/streams' "
+                       "xmlns='jabber:%s' to='%s' version='1.0'>",
+                       starttls_proto == PROTO_XMPP ? "client" : "server",
+                       protohost ? protohost : host);
+            seen = BIO_read(sbio, mbuf, BUFSIZZ);
+            if (seen < 0) {
+                BIO_printf(bio_err, "BIO_read failed\n");
+                goto end;
+            }
+            mbuf[seen] = '\0';
+            while (!strstr
+                   (mbuf, "<starttls xmlns='urn:ietf:params:xml:ns:xmpp-tls'")
+                   && !strstr(mbuf,
+                              "<starttls xmlns=\"urn:ietf:params:xml:ns:xmpp-tls\""))
+            {
+                seen = BIO_read(sbio, mbuf, BUFSIZZ);
+
+                if (seen <= 0)
+                    goto shut;
+
+                mbuf[seen] = '\0';
+            }
+            BIO_printf(sbio,
+                       "<starttls xmlns='urn:ietf:params:xml:ns:xmpp-tls'/>");
+            seen = BIO_read(sbio, sbuf, BUFSIZZ);
+            if (seen < 0) {
+                BIO_printf(bio_err, "BIO_read failed\n");
+                goto shut;
+            }
+            sbuf[seen] = '\0';
+            if (!strstr(sbuf, "<proceed"))
+                goto shut;
+            mbuf[0] = '\0';
+        }
+        break;
+    case PROTO_TELNET:
+        {
+            static const unsigned char tls_do[] = {
+                /* IAC    DO   START_TLS */
+                   255,   253, 46
+            };
+            static const unsigned char tls_will[] = {
+                /* IAC  WILL START_TLS */
+                   255, 251, 46
+            };
+            static const unsigned char tls_follows[] = {
+                /* IAC  SB   START_TLS FOLLOWS IAC  SE */
+                   255, 250, 46,       1,      255, 240
+            };
+            int bytes;
+
+            /* Telnet server should demand we issue START_TLS */
+            bytes = BIO_read(sbio, mbuf, BUFSIZZ);
+            if (bytes != 3 || memcmp(mbuf, tls_do, 3) != 0)
+                goto shut;
+            /* Agree to issue START_TLS and send the FOLLOWS sub-command */
+            BIO_write(sbio, tls_will, 3);
+            BIO_write(sbio, tls_follows, 6);
+            (void)BIO_flush(sbio);
+            /* Telnet server also sent the FOLLOWS sub-command */
+            bytes = BIO_read(sbio, mbuf, BUFSIZZ);
+            if (bytes != 6 || memcmp(mbuf, tls_follows, 6) != 0)
+                goto shut;
+        }
+        break;
+    case PROTO_CONNECT:
+        {
+            enum {
+                error_proto,     /* Wrong protocol, not even HTTP */
+                error_connect,   /* CONNECT failed */
+                success
+            } foundit = error_connect;
+            BIO *fbio = BIO_new(BIO_f_buffer());
+
+            BIO_push(fbio, sbio);
+            BIO_printf(fbio, "CONNECT %s HTTP/1.0\r\n\r\n", connectstr);
+            (void)BIO_flush(fbio);
+            /*
+             * The first line is the HTTP response.  According to RFC 7230,
+             * it's formated exactly like this:
+             *
+             * HTTP/d.d ddd Reason text\r\n
+             */
+            mbuf_len = BIO_gets(fbio, mbuf, BUFSIZZ);
+            if (mbuf_len < (int)strlen("HTTP/1.0 200")) {
+                BIO_printf(bio_err,
+                           "%s: HTTP CONNECT failed, insufficient response "
+                           "from proxy (got %d octets)\n", prog, mbuf_len);
+                (void)BIO_flush(fbio);
+                BIO_pop(fbio);
+                BIO_free(fbio);
+                goto shut;
+            }
+            if (mbuf[8] != ' ') {
+                BIO_printf(bio_err,
+                           "%s: HTTP CONNECT failed, incorrect response "
+                           "from proxy\n", prog);
+                foundit = error_proto;
+            } else if (mbuf[9] != '2') {
+                BIO_printf(bio_err, "%s: HTTP CONNECT failed: %s ", prog,
+                           &mbuf[9]);
+            } else {
+                foundit = success;
+            }
+            if (foundit != error_proto) {
+                /* Read past all following headers */
+                do {
+                    mbuf_len = BIO_gets(fbio, mbuf, BUFSIZZ);
+                } while (mbuf_len > 2);
+            }
+            (void)BIO_flush(fbio);
+            BIO_pop(fbio);
+            BIO_free(fbio);
+            if (foundit != success) {
+                goto shut;
+            }
+        }
+        break;
+    case PROTO_IRC:
+        {
+            int numeric;
+            BIO *fbio = BIO_new(BIO_f_buffer());
+
+            BIO_push(fbio, sbio);
+            BIO_printf(fbio, "STARTTLS\r\n");
+            (void)BIO_flush(fbio);
+            width = SSL_get_fd(con) + 1;
+
+            do {
+                numeric = 0;
+
+                FD_ZERO(&readfds);
+                openssl_fdset(SSL_get_fd(con), &readfds);
+                timeout.tv_sec = S_CLIENT_IRC_READ_TIMEOUT;
+                timeout.tv_usec = 0;
+                /*
+                 * If the IRCd doesn't respond within
+                 * S_CLIENT_IRC_READ_TIMEOUT seconds, assume
+                 * it doesn't support STARTTLS. Many IRCds
+                 * will not give _any_ sort of response to a
+                 * STARTTLS command when it's not supported.
+                 */
+                if (!BIO_get_buffer_num_lines(fbio)
+                    && !BIO_pending(fbio)
+                    && !BIO_pending(sbio)
+                    && select(width, (void *)&readfds, NULL, NULL,
+                              &timeout) < 1) {
+                    BIO_printf(bio_err,
+                               "Timeout waiting for response (%d seconds).\n",
+                               S_CLIENT_IRC_READ_TIMEOUT);
+                    break;
+                }
+
+                mbuf_len = BIO_gets(fbio, mbuf, BUFSIZZ);
+                if (mbuf_len < 1 || sscanf(mbuf, "%*s %d", &numeric) != 1)
+                    break;
+                /* :example.net 451 STARTTLS :You have not registered */
+                /* :example.net 421 STARTTLS :Unknown command */
+                if ((numeric == 451 || numeric == 421)
+                    && strstr(mbuf, "STARTTLS") != NULL) {
+                    BIO_printf(bio_err, "STARTTLS not supported: %s", mbuf);
+                    break;
+                }
+                if (numeric == 691) {
+                    BIO_printf(bio_err, "STARTTLS negotiation failed: ");
+                    ERR_print_errors(bio_err);
+                    break;
+                }
+            } while (numeric != 670);
+
+            (void)BIO_flush(fbio);
+            BIO_pop(fbio);
+            BIO_free(fbio);
+            if (numeric != 670) {
+                BIO_printf(bio_err, "Server does not support STARTTLS.\n");
+                ret = 1;
+                goto shut;
+            }
+        }
+        break;
+    case PROTO_MYSQL:
+        {
+            /* SSL request packet */
+            static const unsigned char ssl_req[] = {
+                /* payload_length,   sequence_id */
+                   0x20, 0x00, 0x00, 0x01,
+                /* payload */
+                /* capability flags, CLIENT_SSL always set */
+                   0x85, 0xae, 0x7f, 0x00,
+                /* max-packet size */
+                   0x00, 0x00, 0x00, 0x01,
+                /* character set */
+                   0x21,
+                /* string[23] reserved (all [0]) */
+                   0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+                   0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+                   0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
+            };
+            int bytes = 0;
+            int ssl_flg = 0x800;
+            int pos;
+            const unsigned char *packet = (const unsigned char *)sbuf;
+
+            /* Receiving Initial Handshake packet. */
+            bytes = BIO_read(sbio, (void *)packet, BUFSIZZ);
+            if (bytes < 0) {
+                BIO_printf(bio_err, "BIO_read failed\n");
+                goto shut;
+            /* Packet length[3], Packet number[1] + minimum payload[17] */
+            } else if (bytes < 21) {
+                BIO_printf(bio_err, "MySQL packet too short.\n");
+                goto shut;
+            } else if (bytes != (4 + packet[0] +
+                                 (packet[1] << 8) +
+                                 (packet[2] << 16))) {
+                BIO_printf(bio_err, "MySQL packet length does not match.\n");
+                goto shut;
+            /* protocol version[1] */
+            } else if (packet[4] != 0xA) {
+                BIO_printf(bio_err,
+                           "Only MySQL protocol version 10 is supported.\n");
+                goto shut;
+            }
+
+            pos = 5;
+            /* server version[string+NULL] */
+            for (;;) {
+                if (pos >= bytes) {
+                    BIO_printf(bio_err, "Cannot confirm server version. ");
+                    goto shut;
+                } else if (packet[pos++] == '\0') {
+                    break;
+                }
+            }
+
+            /* make sure we have at least 15 bytes left in the packet */
+            if (pos + 15 > bytes) {
+                BIO_printf(bio_err,
+                           "MySQL server handshake packet is broken.\n");
+                goto shut;
+            }
+
+            pos += 12; /* skip over conn id[4] + SALT[8] */
+            if (packet[pos++] != '\0') { /* verify filler */
+                BIO_printf(bio_err,
+                           "MySQL packet is broken.\n");
+                goto shut;
+            }
+
+            /* capability flags[2] */
+            if (!((packet[pos] + (packet[pos + 1] << 8)) & ssl_flg)) {
+                BIO_printf(bio_err, "MySQL server does not support SSL.\n");
+                goto shut;
+            }
+
+            /* Sending SSL Handshake packet. */
+            BIO_write(sbio, ssl_req, sizeof(ssl_req));
+            (void)BIO_flush(sbio);
+        }
+        break;
+    case PROTO_POSTGRES:
+        {
+            static const unsigned char ssl_request[] = {
+                /* Length        SSLRequest */
+                   0, 0, 0, 8,   4, 210, 22, 47
+            };
+            int bytes;
+
+            /* Send SSLRequest packet */
+            BIO_write(sbio, ssl_request, 8);
+            (void)BIO_flush(sbio);
+
+            /* Reply will be a single S if SSL is enabled */
+            bytes = BIO_read(sbio, sbuf, BUFSIZZ);
+            if (bytes != 1 || sbuf[0] != 'S')
+                goto shut;
+        }
+        break;
+    case PROTO_NNTP:
+        {
+            int foundit = 0;
+            BIO *fbio = BIO_new(BIO_f_buffer());
+
+            BIO_push(fbio, sbio);
+            BIO_gets(fbio, mbuf, BUFSIZZ);
+            /* STARTTLS command requires CAPABILITIES... */
+            BIO_printf(fbio, "CAPABILITIES\r\n");
+            (void)BIO_flush(fbio);
+            /* wait for multi-line CAPABILITIES response */
+            do {
+                mbuf_len = BIO_gets(fbio, mbuf, BUFSIZZ);
+                if (strstr(mbuf, "STARTTLS"))
+                    foundit = 1;
+            } while (mbuf_len > 1 && mbuf[0] != '.');
+            (void)BIO_flush(fbio);
+            BIO_pop(fbio);
+            BIO_free(fbio);
+            if (!foundit)
+                BIO_printf(bio_err,
+                           "Didn't find STARTTLS in server response,"
+                           " trying anyway...\n");
+            BIO_printf(sbio, "STARTTLS\r\n");
+            mbuf_len = BIO_read(sbio, mbuf, BUFSIZZ);
+            if (mbuf_len < 0) {
+                BIO_printf(bio_err, "BIO_read failed\n");
+                goto end;
+            }
+            mbuf[mbuf_len] = '\0';
+            if (strstr(mbuf, "382") == NULL) {
+                BIO_printf(bio_err, "STARTTLS failed: %s", mbuf);
+                goto shut;
+            }
+        }
+        break;
+    case PROTO_SIEVE:
+        {
+            int foundit = 0;
+            BIO *fbio = BIO_new(BIO_f_buffer());
+
+            BIO_push(fbio, sbio);
+            /* wait for multi-line response to end from Sieve */
+            do {
+                mbuf_len = BIO_gets(fbio, mbuf, BUFSIZZ);
+                /*
+                 * According to RFC 5804 § 1.7, capability
+                 * is case-insensitive, make it uppercase
+                 */
+                if (mbuf_len > 1 && mbuf[0] == '"') {
+                    make_uppercase(mbuf);
+                    if (strncmp(mbuf, "\"STARTTLS\"", 10) == 0)
+                        foundit = 1;
+                }
+            } while (mbuf_len > 1 && mbuf[0] == '"');
+            (void)BIO_flush(fbio);
+            BIO_pop(fbio);
+            BIO_free(fbio);
+            if (!foundit)
+                BIO_printf(bio_err,
+                           "Didn't find STARTTLS in server response,"
+                           " trying anyway...\n");
+            BIO_printf(sbio, "STARTTLS\r\n");
+            mbuf_len = BIO_read(sbio, mbuf, BUFSIZZ);
+            if (mbuf_len < 0) {
+                BIO_printf(bio_err, "BIO_read failed\n");
+                goto end;
+            }
+            mbuf[mbuf_len] = '\0';
+            if (mbuf_len < 2) {
+                BIO_printf(bio_err, "STARTTLS failed: %s", mbuf);
+                goto shut;
+            }
+            /*
+             * According to RFC 5804 § 2.2, response codes are case-
+             * insensitive, make it uppercase but preserve the response.
+             */
+            strncpy(sbuf, mbuf, 2);
+            make_uppercase(sbuf);
+            if (strncmp(sbuf, "OK", 2) != 0) {
+                BIO_printf(bio_err, "STARTTLS not supported: %s", mbuf);
+                goto shut;
+            }
+        }
+        break;
+    case PROTO_LDAP:
+        {
+            /* StartTLS Operation according to RFC 4511 */
+            static char ldap_tls_genconf[] = "asn1=SEQUENCE:LDAPMessage\n"
+                "[LDAPMessage]\n"
+                "messageID=INTEGER:1\n"
+                "extendedReq=EXPLICIT:23A,IMPLICIT:0C,"
+                "FORMAT:ASCII,OCT:1.3.6.1.4.1.1466.20037\n";
+            long errline = -1;
+            char *genstr = NULL;
+            int result = -1;
+            ASN1_TYPE *atyp = NULL;
+            BIO *ldapbio = BIO_new(BIO_s_mem());
+            CONF *cnf = NCONF_new(NULL);
+
+            if (cnf == NULL) {
+                BIO_free(ldapbio);
+                goto end;
+            }
+            BIO_puts(ldapbio, ldap_tls_genconf);
+            if (NCONF_load_bio(cnf, ldapbio, &errline) <= 0) {
+                BIO_free(ldapbio);
+                NCONF_free(cnf);
+                if (errline <= 0) {
+                    BIO_printf(bio_err, "NCONF_load_bio failed\n");
+                    goto end;
+                } else {
+                    BIO_printf(bio_err, "Error on line %ld\n", errline);
+                    goto end;
+                }
+            }
+            BIO_free(ldapbio);
+            genstr = NCONF_get_string(cnf, "default", "asn1");
+            if (genstr == NULL) {
+                NCONF_free(cnf);
+                BIO_printf(bio_err, "NCONF_get_string failed\n");
+                goto end;
+            }
+            atyp = ASN1_generate_nconf(genstr, cnf);
+            if (atyp == NULL) {
+                NCONF_free(cnf);
+                BIO_printf(bio_err, "ASN1_generate_nconf failed\n");
+                goto end;
+            }
+            NCONF_free(cnf);
+
+            /* Send SSLRequest packet */
+            BIO_write(sbio, atyp->value.sequence->data,
+                      atyp->value.sequence->length);
+            (void)BIO_flush(sbio);
+            ASN1_TYPE_free(atyp);
+
+            mbuf_len = BIO_read(sbio, mbuf, BUFSIZZ);
+            if (mbuf_len < 0) {
+                BIO_printf(bio_err, "BIO_read failed\n");
+                goto end;
+            }
+            result = ldap_ExtendedResponse_parse(mbuf, mbuf_len);
+            if (result < 0) {
+                BIO_printf(bio_err, "ldap_ExtendedResponse_parse failed\n");
+                goto shut;
+            } else if (result > 0) {
+                BIO_printf(bio_err, "STARTTLS failed, LDAP Result Code: %i\n",
+                           result);
+                goto shut;
+            }
+            mbuf_len = 0;
+        }
+        break;
+    }
+
+    if (early_data_file != NULL
+            && ((SSL_get0_session(con) != NULL
+                 && SSL_SESSION_get_max_early_data(SSL_get0_session(con)) > 0)
+                || (psksess != NULL
+                    && SSL_SESSION_get_max_early_data(psksess) > 0))) {
+        BIO *edfile = BIO_new_file(early_data_file, "r");
+        size_t readbytes, writtenbytes;
+        int finish = 0;
+
+        if (edfile == NULL) {
+            BIO_printf(bio_err, "Cannot open early data file\n");
+            goto shut;
+        }
+
+        while (!finish) {
+            if (!BIO_read_ex(edfile, cbuf, BUFSIZZ, &readbytes))
+                finish = 1;
+
+            while (!SSL_write_early_data(con, cbuf, readbytes, &writtenbytes)) {
+                switch (SSL_get_error(con, 0)) {
+                case SSL_ERROR_WANT_WRITE:
+                case SSL_ERROR_WANT_ASYNC:
+                case SSL_ERROR_WANT_READ:
+                    /* Just keep trying - busy waiting */
+                    continue;
+                default:
+                    BIO_printf(bio_err, "Error writing early data\n");
+                    BIO_free(edfile);
+                    ERR_print_errors(bio_err);
+                    goto shut;
+                }
+            }
+        }
+
+        BIO_free(edfile);
+    }
+
+    for (;;) {
+        FD_ZERO(&readfds);
+        FD_ZERO(&writefds);
+
+        if (SSL_is_dtls(con) && DTLSv1_get_timeout(con, &timeout))
+            timeoutp = &timeout;
+        else
+            timeoutp = NULL;
+
+        if (!SSL_is_init_finished(con) && SSL_total_renegotiations(con) == 0
+                && SSL_get_key_update_type(con) == SSL_KEY_UPDATE_NONE) {
+            in_init = 1;
+            tty_on = 0;
+        } else {
+            tty_on = 1;
+            if (in_init) {
+                in_init = 0;
+
+                if (c_brief) {
+                    BIO_puts(bio_err, "CONNECTION ESTABLISHED\n");
+                    print_ssl_summary(con);
+                }
+
+                print_stuff(bio_c_out, con, full_log);
+                if (full_log > 0)
+                    full_log--;
+
+                if (starttls_proto) {
+                    BIO_write(bio_err, mbuf, mbuf_len);
+                    /* We don't need to know any more */
+                    if (!reconnect)
+                        starttls_proto = PROTO_OFF;
+                }
+
+                if (reconnect) {
+                    reconnect--;
+                    BIO_printf(bio_c_out,
+                               "drop connection and then reconnect\n");
+                    do_ssl_shutdown(con);
+                    SSL_set_connect_state(con);
+                    BIO_closesocket(SSL_get_fd(con));
+                    goto re_start;
+                }
+            }
+        }
+
+        ssl_pending = read_ssl && SSL_has_pending(con);
+
+        if (!ssl_pending) {
+#if !defined(OPENSSL_SYS_WINDOWS) && !defined(OPENSSL_SYS_MSDOS)
+            if (tty_on) {
+                /*
+                 * Note that select() returns when read _would not block_,
+                 * and EOF satisfies that.  To avoid a CPU-hogging loop,
+                 * set the flag so we exit.
+                 */
+                if (read_tty && !at_eof)
+                    openssl_fdset(fileno_stdin(), &readfds);
+#if !defined(OPENSSL_SYS_VMS)
+                if (write_tty)
+                    openssl_fdset(fileno_stdout(), &writefds);
+#endif
+            }
+            if (read_ssl)
+                openssl_fdset(SSL_get_fd(con), &readfds);
+            if (write_ssl)
+                openssl_fdset(SSL_get_fd(con), &writefds);
+#else
+            if (!tty_on || !write_tty) {
+                if (read_ssl)
+                    openssl_fdset(SSL_get_fd(con), &readfds);
+                if (write_ssl)
+                    openssl_fdset(SSL_get_fd(con), &writefds);
+            }
+#endif
+
+            /*
+             * Note: under VMS with SOCKETSHR the second parameter is
+             * currently of type (int *) whereas under other systems it is
+             * (void *) if you don't have a cast it will choke the compiler:
+             * if you do have a cast then you can either go for (int *) or
+             * (void *).
+             */
+#if defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_MSDOS)
+            /*
+             * Under Windows/DOS we make the assumption that we can always
+             * write to the tty: therefore if we need to write to the tty we
+             * just fall through. Otherwise we timeout the select every
+             * second and see if there are any keypresses. Note: this is a
+             * hack, in a proper Windows application we wouldn't do this.
+             */
+            i = 0;
+            if (!write_tty) {
+                if (read_tty) {
+                    tv.tv_sec = 1;
+                    tv.tv_usec = 0;
+                    i = select(width, (void *)&readfds, (void *)&writefds,
+                               NULL, &tv);
+                    if (!i && (!has_stdin_waiting() || !read_tty))
+                        continue;
+                } else
+                    i = select(width, (void *)&readfds, (void *)&writefds,
+                               NULL, timeoutp);
+            }
+#else
+            i = select(width, (void *)&readfds, (void *)&writefds,
+                       NULL, timeoutp);
+#endif
+            if (i < 0) {
+                BIO_printf(bio_err, "bad select %d\n",
+                           get_last_socket_error());
+                goto shut;
+            }
+        }
+
+        if (SSL_is_dtls(con) && DTLSv1_handle_timeout(con) > 0)
+            BIO_printf(bio_err, "TIMEOUT occurred\n");
+
+        if (!ssl_pending && FD_ISSET(SSL_get_fd(con), &writefds)) {
+            k = SSL_write(con, &(cbuf[cbuf_off]), (unsigned int)cbuf_len);
+            switch (SSL_get_error(con, k)) {
+            case SSL_ERROR_NONE:
+                cbuf_off += k;
+                cbuf_len -= k;
+                if (k <= 0)
+                    goto end;
+                /* we have done a  write(con,NULL,0); */
+                if (cbuf_len <= 0) {
+                    read_tty = 1;
+                    write_ssl = 0;
+                } else {        /* if (cbuf_len > 0) */
+
+                    read_tty = 0;
+                    write_ssl = 1;
+                }
+                break;
+            case SSL_ERROR_WANT_WRITE:
+                BIO_printf(bio_c_out, "write W BLOCK\n");
+                write_ssl = 1;
+                read_tty = 0;
+                break;
+            case SSL_ERROR_WANT_ASYNC:
+                BIO_printf(bio_c_out, "write A BLOCK\n");
+                wait_for_async(con);
+                write_ssl = 1;
+                read_tty = 0;
+                break;
+            case SSL_ERROR_WANT_READ:
+                BIO_printf(bio_c_out, "write R BLOCK\n");
+                write_tty = 0;
+                read_ssl = 1;
+                write_ssl = 0;
+                break;
+            case SSL_ERROR_WANT_X509_LOOKUP:
+                BIO_printf(bio_c_out, "write X BLOCK\n");
+                break;
+            case SSL_ERROR_ZERO_RETURN:
+                if (cbuf_len != 0) {
+                    BIO_printf(bio_c_out, "shutdown\n");
+                    ret = 0;
+                    goto shut;
+                } else {
+                    read_tty = 1;
+                    write_ssl = 0;
+                    break;
+                }
+
+            case SSL_ERROR_SYSCALL:
+                if ((k != 0) || (cbuf_len != 0)) {
+                    BIO_printf(bio_err, "write:errno=%d\n",
+                               get_last_socket_error());
+                    goto shut;
+                } else {
+                    read_tty = 1;
+                    write_ssl = 0;
+                }
+                break;
+            case SSL_ERROR_WANT_ASYNC_JOB:
+                /* This shouldn't ever happen in s_client - treat as an error */
+            case SSL_ERROR_SSL:
+                ERR_print_errors(bio_err);
+                goto shut;
+            }
+        }
+#if defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_MSDOS) || defined(OPENSSL_SYS_VMS)
+        /* Assume Windows/DOS/BeOS can always write */
+        else if (!ssl_pending && write_tty)
+#else
+        else if (!ssl_pending && FD_ISSET(fileno_stdout(), &writefds))
+#endif
+        {
+#ifdef CHARSET_EBCDIC
+            ascii2ebcdic(&(sbuf[sbuf_off]), &(sbuf[sbuf_off]), sbuf_len);
+#endif
+            i = raw_write_stdout(&(sbuf[sbuf_off]), sbuf_len);
+
+            if (i <= 0) {
+                BIO_printf(bio_c_out, "DONE\n");
+                ret = 0;
+                goto shut;
+            }
+
+            sbuf_len -= i;
+            sbuf_off += i;
+            if (sbuf_len <= 0) {
+                read_ssl = 1;
+                write_tty = 0;
+            }
+        } else if (ssl_pending || FD_ISSET(SSL_get_fd(con), &readfds)) {
+#ifdef RENEG
+            {
+                static int iiii;
+                if (++iiii == 52) {
+                    SSL_renegotiate(con);
+                    iiii = 0;
+                }
+            }
+#endif
+            k = SSL_read(con, sbuf, 1024 /* BUFSIZZ */ );
+
+            switch (SSL_get_error(con, k)) {
+            case SSL_ERROR_NONE:
+                if (k <= 0)
+                    goto end;
+                sbuf_off = 0;
+                sbuf_len = k;
+
+                read_ssl = 0;
+                write_tty = 1;
+                break;
+            case SSL_ERROR_WANT_ASYNC:
+                BIO_printf(bio_c_out, "read A BLOCK\n");
+                wait_for_async(con);
+                write_tty = 0;
+                read_ssl = 1;
+                if ((read_tty == 0) && (write_ssl == 0))
+                    write_ssl = 1;
+                break;
+            case SSL_ERROR_WANT_WRITE:
+                BIO_printf(bio_c_out, "read W BLOCK\n");
+                write_ssl = 1;
+                read_tty = 0;
+                break;
+            case SSL_ERROR_WANT_READ:
+                BIO_printf(bio_c_out, "read R BLOCK\n");
+                write_tty = 0;
+                read_ssl = 1;
+                if ((read_tty == 0) && (write_ssl == 0))
+                    write_ssl = 1;
+                break;
+            case SSL_ERROR_WANT_X509_LOOKUP:
+                BIO_printf(bio_c_out, "read X BLOCK\n");
+                break;
+            case SSL_ERROR_SYSCALL:
+                ret = get_last_socket_error();
+                if (c_brief)
+                    BIO_puts(bio_err, "CONNECTION CLOSED BY SERVER\n");
+                else
+                    BIO_printf(bio_err, "read:errno=%d\n", ret);
+                goto shut;
+            case SSL_ERROR_ZERO_RETURN:
+                BIO_printf(bio_c_out, "closed\n");
+                ret = 0;
+                goto shut;
+            case SSL_ERROR_WANT_ASYNC_JOB:
+                /* This shouldn't ever happen in s_client. Treat as an error */
+            case SSL_ERROR_SSL:
+                ERR_print_errors(bio_err);
+                goto shut;
+            }
+        }
+/* OPENSSL_SYS_MSDOS includes OPENSSL_SYS_WINDOWS */
+#if defined(OPENSSL_SYS_MSDOS)
+        else if (has_stdin_waiting())
+#else
+        else if (FD_ISSET(fileno_stdin(), &readfds))
+#endif
+        {
+            if (crlf) {
+                int j, lf_num;
+
+                i = raw_read_stdin(cbuf, BUFSIZZ / 2);
+                lf_num = 0;
+                /* both loops are skipped when i <= 0 */
+                for (j = 0; j < i; j++)
+                    if (cbuf[j] == '\n')
+                        lf_num++;
+                for (j = i - 1; j >= 0; j--) {
+                    cbuf[j + lf_num] = cbuf[j];
+                    if (cbuf[j] == '\n') {
+                        lf_num--;
+                        i++;
+                        cbuf[j + lf_num] = '\r';
+                    }
+                }
+                assert(lf_num == 0);
+            } else
+                i = raw_read_stdin(cbuf, BUFSIZZ);
+#if !defined(OPENSSL_SYS_WINDOWS) && !defined(OPENSSL_SYS_MSDOS)
+            if (i == 0)
+                at_eof = 1;
+#endif
+
+            if ((!c_ign_eof) && ((i <= 0) || (cbuf[0] == 'Q' && cmdletters))) {
+                BIO_printf(bio_err, "DONE\n");
+                ret = 0;
+                goto shut;
+            }
+
+            if ((!c_ign_eof) && (cbuf[0] == 'R' && cmdletters)) {
+                BIO_printf(bio_err, "RENEGOTIATING\n");
+                SSL_renegotiate(con);
+                cbuf_len = 0;
+	    } else if (!c_ign_eof && (cbuf[0] == 'K' || cbuf[0] == 'k' )
+                    && cmdletters) {
+                BIO_printf(bio_err, "KEYUPDATE\n");
+                SSL_key_update(con,
+                               cbuf[0] == 'K' ? SSL_KEY_UPDATE_REQUESTED
+                                              : SSL_KEY_UPDATE_NOT_REQUESTED);
+                cbuf_len = 0;
+            }
+#ifndef OPENSSL_NO_HEARTBEATS
+            else if ((!c_ign_eof) && (cbuf[0] == 'B' && cmdletters)) {
+                BIO_printf(bio_err, "HEARTBEATING\n");
+                SSL_heartbeat(con);
+                cbuf_len = 0;
+            }
+#endif
+            else {
+                cbuf_len = i;
+                cbuf_off = 0;
+#ifdef CHARSET_EBCDIC
+                ebcdic2ascii(cbuf, cbuf, i);
+#endif
+            }
+
+            write_ssl = 1;
+            read_tty = 0;
+        }
+    }
+
+    ret = 0;
+ shut:
+    if (in_init)
+        print_stuff(bio_c_out, con, full_log);
+    do_ssl_shutdown(con);
+
+    /*
+     * If we ended with an alert being sent, but still with data in the
+     * network buffer to be read, then calling BIO_closesocket() will
+     * result in a TCP-RST being sent. On some platforms (notably
+     * Windows) then this will result in the peer immediately abandoning
+     * the connection including any buffered alert data before it has
+     * had a chance to be read. Shutting down the sending side first,
+     * and then closing the socket sends TCP-FIN first followed by
+     * TCP-RST. This seems to allow the peer to read the alert data.
+     */
+    shutdown(SSL_get_fd(con), 1); /* SHUT_WR */
+    /*
+     * We just said we have nothing else to say, but it doesn't mean that
+     * the other side has nothing. It's even recommended to consume incoming
+     * data. [In testing context this ensures that alerts are passed on...]
+     */
+    timeout.tv_sec = 0;
+    timeout.tv_usec = 500000;  /* some extreme round-trip */
+    do {
+        FD_ZERO(&readfds);
+        openssl_fdset(s, &readfds);
+    } while (select(s + 1, &readfds, NULL, NULL, &timeout) > 0
+             && BIO_read(sbio, sbuf, BUFSIZZ) > 0);
+
+    BIO_closesocket(SSL_get_fd(con));
+ end:
+    if (con != NULL) {
+        if (prexit != 0)
+            print_stuff(bio_c_out, con, 1);
+        SSL_free(con);
+    }
+    SSL_SESSION_free(psksess);
+#if !defined(OPENSSL_NO_NEXTPROTONEG)
+    OPENSSL_free(next_proto.data);
+#endif
+    SSL_CTX_free(ctx);
+    set_keylog_file(NULL, NULL);
+    X509_free(cert);
+    sk_X509_CRL_pop_free(crls, X509_CRL_free);
+    EVP_PKEY_free(key);
+    sk_X509_pop_free(chain, X509_free);
+    OPENSSL_free(pass);
+#ifndef OPENSSL_NO_SRP
+    OPENSSL_free(srp_arg.srppassin);
+#endif
+    OPENSSL_free(connectstr);
+    OPENSSL_free(bindstr);
+    OPENSSL_free(host);
+    OPENSSL_free(port);
+    X509_VERIFY_PARAM_free(vpm);
+    ssl_excert_free(exc);
+    sk_OPENSSL_STRING_free(ssl_args);
+    sk_OPENSSL_STRING_free(dane_tlsa_rrset);
+    SSL_CONF_CTX_free(cctx);
+    OPENSSL_clear_free(cbuf, BUFSIZZ);
+    OPENSSL_clear_free(sbuf, BUFSIZZ);
+    OPENSSL_clear_free(mbuf, BUFSIZZ);
+    release_engine(e);
+    BIO_free(bio_c_out);
+    bio_c_out = NULL;
+    BIO_free(bio_c_msg);
+    bio_c_msg = NULL;
+    return ret;
+}
+
+static void print_stuff(BIO *bio, SSL *s, int full)
+{
+    X509 *peer = NULL;
+    STACK_OF(X509) *sk;
+    const SSL_CIPHER *c;
+    int i, istls13 = (SSL_version(s) == TLS1_3_VERSION);
+    long verify_result;
+#ifndef OPENSSL_NO_COMP
+    const COMP_METHOD *comp, *expansion;
+#endif
+    unsigned char *exportedkeymat;
+#ifndef OPENSSL_NO_CT
+    const SSL_CTX *ctx = SSL_get_SSL_CTX(s);
+#endif
+
+    if (full) {
+        int got_a_chain = 0;
+
+        sk = SSL_get_peer_cert_chain(s);
+        if (sk != NULL) {
+            got_a_chain = 1;
+
+            BIO_printf(bio, "---\nCertificate chain\n");
+            for (i = 0; i < sk_X509_num(sk); i++) {
+                BIO_printf(bio, "%2d s:", i);
+                X509_NAME_print_ex(bio, X509_get_subject_name(sk_X509_value(sk, i)), 0, get_nameopt());
+                BIO_puts(bio, "\n");
+                BIO_printf(bio, "   i:");
+                X509_NAME_print_ex(bio, X509_get_issuer_name(sk_X509_value(sk, i)), 0, get_nameopt());
+                BIO_puts(bio, "\n");
+                if (c_showcerts)
+                    PEM_write_bio_X509(bio, sk_X509_value(sk, i));
+            }
+        }
+
+        BIO_printf(bio, "---\n");
+        peer = SSL_get_peer_certificate(s);
+        if (peer != NULL) {
+            BIO_printf(bio, "Server certificate\n");
+
+            /* Redundant if we showed the whole chain */
+            if (!(c_showcerts && got_a_chain))
+                PEM_write_bio_X509(bio, peer);
+            dump_cert_text(bio, peer);
+        } else {
+            BIO_printf(bio, "no peer certificate available\n");
+        }
+        print_ca_names(bio, s);
+
+        ssl_print_sigalgs(bio, s);
+        ssl_print_tmp_key(bio, s);
+
+#ifndef OPENSSL_NO_CT
+        /*
+         * When the SSL session is anonymous, or resumed via an abbreviated
+         * handshake, no SCTs are provided as part of the handshake.  While in
+         * a resumed session SCTs may be present in the session's certificate,
+         * no callbacks are invoked to revalidate these, and in any case that
+         * set of SCTs may be incomplete.  Thus it makes little sense to
+         * attempt to display SCTs from a resumed session's certificate, and of
+         * course none are associated with an anonymous peer.
+         */
+        if (peer != NULL && !SSL_session_reused(s) && SSL_ct_is_enabled(s)) {
+            const STACK_OF(SCT) *scts = SSL_get0_peer_scts(s);
+            int sct_count = scts != NULL ? sk_SCT_num(scts) : 0;
+
+            BIO_printf(bio, "---\nSCTs present (%i)\n", sct_count);
+            if (sct_count > 0) {
+                const CTLOG_STORE *log_store = SSL_CTX_get0_ctlog_store(ctx);
+
+                BIO_printf(bio, "---\n");
+                for (i = 0; i < sct_count; ++i) {
+                    SCT *sct = sk_SCT_value(scts, i);
+
+                    BIO_printf(bio, "SCT validation status: %s\n",
+                               SCT_validation_status_string(sct));
+                    SCT_print(sct, bio, 0, log_store);
+                    if (i < sct_count - 1)
+                        BIO_printf(bio, "\n---\n");
+                }
+                BIO_printf(bio, "\n");
+            }
+        }
+#endif
+
+        BIO_printf(bio,
+                   "---\nSSL handshake has read %ju bytes "
+                   "and written %ju bytes\n",
+                   BIO_number_read(SSL_get_rbio(s)),
+                   BIO_number_written(SSL_get_wbio(s)));
+    }
+    print_verify_detail(s, bio);
+    BIO_printf(bio, (SSL_session_reused(s) ? "---\nReused, " : "---\nNew, "));
+    c = SSL_get_current_cipher(s);
+    BIO_printf(bio, "%s, Cipher is %s\n",
+               SSL_CIPHER_get_version(c), SSL_CIPHER_get_name(c));
+    if (peer != NULL) {
+        EVP_PKEY *pktmp;
+
+        pktmp = X509_get0_pubkey(peer);
+        BIO_printf(bio, "Server public key is %d bit\n",
+                   EVP_PKEY_bits(pktmp));
+    }
+    BIO_printf(bio, "Secure Renegotiation IS%s supported\n",
+               SSL_get_secure_renegotiation_support(s) ? "" : " NOT");
+#ifndef OPENSSL_NO_COMP
+    comp = SSL_get_current_compression(s);
+    expansion = SSL_get_current_expansion(s);
+    BIO_printf(bio, "Compression: %s\n",
+               comp ? SSL_COMP_get_name(comp) : "NONE");
+    BIO_printf(bio, "Expansion: %s\n",
+               expansion ? SSL_COMP_get_name(expansion) : "NONE");
+#endif
+
+#ifdef SSL_DEBUG
+    {
+        /* Print out local port of connection: useful for debugging */
+        int sock;
+        union BIO_sock_info_u info;
+
+        sock = SSL_get_fd(s);
+        if ((info.addr = BIO_ADDR_new()) != NULL
+            && BIO_sock_info(sock, BIO_SOCK_INFO_ADDRESS, &info)) {
+            BIO_printf(bio_c_out, "LOCAL PORT is %u\n",
+                       ntohs(BIO_ADDR_rawport(info.addr)));
+        }
+        BIO_ADDR_free(info.addr);
+    }
+#endif
+
+#if !defined(OPENSSL_NO_NEXTPROTONEG)
+    if (next_proto.status != -1) {
+        const unsigned char *proto;
+        unsigned int proto_len;
+        SSL_get0_next_proto_negotiated(s, &proto, &proto_len);
+        BIO_printf(bio, "Next protocol: (%d) ", next_proto.status);
+        BIO_write(bio, proto, proto_len);
+        BIO_write(bio, "\n", 1);
+    }
+#endif
+    {
+        const unsigned char *proto;
+        unsigned int proto_len;
+        SSL_get0_alpn_selected(s, &proto, &proto_len);
+        if (proto_len > 0) {
+            BIO_printf(bio, "ALPN protocol: ");
+            BIO_write(bio, proto, proto_len);
+            BIO_write(bio, "\n", 1);
+        } else
+            BIO_printf(bio, "No ALPN negotiated\n");
+    }
+
+#ifndef OPENSSL_NO_SRTP
+    {
+        SRTP_PROTECTION_PROFILE *srtp_profile =
+            SSL_get_selected_srtp_profile(s);
+
+        if (srtp_profile)
+            BIO_printf(bio, "SRTP Extension negotiated, profile=%s\n",
+                       srtp_profile->name);
+    }
+#endif
+
+    if (istls13) {
+        switch (SSL_get_early_data_status(s)) {
+        case SSL_EARLY_DATA_NOT_SENT:
+            BIO_printf(bio, "Early data was not sent\n");
+            break;
+
+        case SSL_EARLY_DATA_REJECTED:
+            BIO_printf(bio, "Early data was rejected\n");
+            break;
+
+        case SSL_EARLY_DATA_ACCEPTED:
+            BIO_printf(bio, "Early data was accepted\n");
+            break;
+
+        }
+
+        /*
+         * We also print the verify results when we dump session information,
+         * but in TLSv1.3 we may not get that right away (or at all) depending
+         * on when we get a NewSessionTicket. Therefore we print it now as well.
+         */
+        verify_result = SSL_get_verify_result(s);
+        BIO_printf(bio, "Verify return code: %ld (%s)\n", verify_result,
+                   X509_verify_cert_error_string(verify_result));
+    } else {
+        /* In TLSv1.3 we do this on arrival of a NewSessionTicket */
+        SSL_SESSION_print(bio, SSL_get_session(s));
+    }
+
+    if (SSL_get_session(s) != NULL && keymatexportlabel != NULL) {
+        BIO_printf(bio, "Keying material exporter:\n");
+        BIO_printf(bio, "    Label: '%s'\n", keymatexportlabel);
+        BIO_printf(bio, "    Length: %i bytes\n", keymatexportlen);
+        exportedkeymat = app_malloc(keymatexportlen, "export key");
+        if (!SSL_export_keying_material(s, exportedkeymat,
+                                        keymatexportlen,
+                                        keymatexportlabel,
+                                        strlen(keymatexportlabel),
+                                        NULL, 0, 0)) {
+            BIO_printf(bio, "    Error\n");
+        } else {
+            BIO_printf(bio, "    Keying material: ");
+            for (i = 0; i < keymatexportlen; i++)
+                BIO_printf(bio, "%02X", exportedkeymat[i]);
+            BIO_printf(bio, "\n");
+        }
+        OPENSSL_free(exportedkeymat);
+    }
+    BIO_printf(bio, "---\n");
+    X509_free(peer);
+    /* flush, or debugging output gets mixed with http response */
+    (void)BIO_flush(bio);
+}
+
+# ifndef OPENSSL_NO_OCSP
+static int ocsp_resp_cb(SSL *s, void *arg)
+{
+    const unsigned char *p;
+    int len;
+    OCSP_RESPONSE *rsp;
+    len = SSL_get_tlsext_status_ocsp_resp(s, &p);
+    BIO_puts(arg, "OCSP response: ");
+    if (p == NULL) {
+        BIO_puts(arg, "no response sent\n");
+        return 1;
+    }
+    rsp = d2i_OCSP_RESPONSE(NULL, &p, len);
+    if (rsp == NULL) {
+        BIO_puts(arg, "response parse error\n");
+        BIO_dump_indent(arg, (char *)p, len, 4);
+        return 0;
+    }
+    BIO_puts(arg, "\n======================================\n");
+    OCSP_RESPONSE_print(arg, rsp, 0);
+    BIO_puts(arg, "======================================\n");
+    OCSP_RESPONSE_free(rsp);
+    return 1;
+}
+# endif
+
+static int ldap_ExtendedResponse_parse(const char *buf, long rem)
+{
+    const unsigned char *cur, *end;
+    long len;
+    int tag, xclass, inf, ret = -1;
+
+    cur = (const unsigned char *)buf;
+    end = cur + rem;
+
+    /*
+     * From RFC 4511:
+     *
+     *    LDAPMessage ::= SEQUENCE {
+     *         messageID       MessageID,
+     *         protocolOp      CHOICE {
+     *              ...
+     *              extendedResp          ExtendedResponse,
+     *              ... },
+     *         controls       [0] Controls OPTIONAL }
+     *
+     *    ExtendedResponse ::= [APPLICATION 24] SEQUENCE {
+     *         COMPONENTS OF LDAPResult,
+     *         responseName     [10] LDAPOID OPTIONAL,
+     *         responseValue    [11] OCTET STRING OPTIONAL }
+     *
+     *    LDAPResult ::= SEQUENCE {
+     *         resultCode         ENUMERATED {
+     *              success                      (0),
+     *              ...
+     *              other                        (80),
+     *              ...  },
+     *         matchedDN          LDAPDN,
+     *         diagnosticMessage  LDAPString,
+     *         referral           [3] Referral OPTIONAL }
+     */
+
+    /* pull SEQUENCE */
+    inf = ASN1_get_object(&cur, &len, &tag, &xclass, rem);
+    if (inf != V_ASN1_CONSTRUCTED || tag != V_ASN1_SEQUENCE ||
+        (rem = end - cur, len > rem)) {
+        BIO_printf(bio_err, "Unexpected LDAP response\n");
+        goto end;
+    }
+
+    rem = len;  /* ensure that we don't overstep the SEQUENCE */
+
+    /* pull MessageID */
+    inf = ASN1_get_object(&cur, &len, &tag, &xclass, rem);
+    if (inf != V_ASN1_UNIVERSAL || tag != V_ASN1_INTEGER ||
+        (rem = end - cur, len > rem)) {
+        BIO_printf(bio_err, "No MessageID\n");
+        goto end;
+    }
+
+    cur += len; /* shall we check for MessageId match or just skip? */
+
+    /* pull [APPLICATION 24] */
+    rem = end - cur;
+    inf = ASN1_get_object(&cur, &len, &tag, &xclass, rem);
+    if (inf != V_ASN1_CONSTRUCTED || xclass != V_ASN1_APPLICATION ||
+        tag != 24) {
+        BIO_printf(bio_err, "Not ExtendedResponse\n");
+        goto end;
+    }
+
+    /* pull resultCode */
+    rem = end - cur;
+    inf = ASN1_get_object(&cur, &len, &tag, &xclass, rem);
+    if (inf != V_ASN1_UNIVERSAL || tag != V_ASN1_ENUMERATED || len == 0 ||
+        (rem = end - cur, len > rem)) {
+        BIO_printf(bio_err, "Not LDAPResult\n");
+        goto end;
+    }
+
+    /* len should always be one, but just in case... */
+    for (ret = 0, inf = 0; inf < len; inf++) {
+        ret <<= 8;
+        ret |= cur[inf];
+    }
+    /* There is more data, but we don't care... */
+ end:
+    return ret;
+}
+
+/*
+ * Host dNS Name verifier: used for checking that the hostname is in dNS format 
+ * before setting it as SNI
+ */
+static int is_dNS_name(const char *host)
+{
+    const size_t MAX_LABEL_LENGTH = 63;
+    size_t i;
+    int isdnsname = 0;
+    size_t length = strlen(host);
+    size_t label_length = 0;
+    int all_numeric = 1;
+
+    /*
+     * Deviation from strict DNS name syntax, also check names with '_'
+     * Check DNS name syntax, any '-' or '.' must be internal,
+     * and on either side of each '.' we can't have a '-' or '.'.
+     *
+     * If the name has just one label, we don't consider it a DNS name.
+     */
+    for (i = 0; i < length && label_length < MAX_LABEL_LENGTH; ++i) {
+        char c = host[i];
+
+        if ((c >= 'a' && c <= 'z')
+            || (c >= 'A' && c <= 'Z')
+            || c == '_') {
+            label_length += 1;
+            all_numeric = 0;
+            continue;
+        }
+
+        if (c >= '0' && c <= '9') {
+            label_length += 1;
+            continue;
+        }
+
+        /* Dot and hyphen cannot be first or last. */
+        if (i > 0 && i < length - 1) {
+            if (c == '-') {
+                label_length += 1;
+                continue;
+            }
+            /*
+             * Next to a dot the preceding and following characters must not be
+             * another dot or a hyphen.  Otherwise, record that the name is
+             * plausible, since it has two or more labels.
+             */
+            if (c == '.'
+                && host[i + 1] != '.'
+                && host[i - 1] != '-'
+                && host[i + 1] != '-') {
+                label_length = 0;
+                isdnsname = 1;
+                continue;
+            }
+        }
+        isdnsname = 0;
+        break;
+    }
+
+    /* dNS name must not be all numeric and labels must be shorter than 64 characters. */
+    isdnsname &= !all_numeric && !(label_length == MAX_LABEL_LENGTH);
+
+    return isdnsname;
+}
+#endif                          /* OPENSSL_NO_SOCK */
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/s_server.c b/trunk/3rdparty/openssl-1.1-fit/apps/s_server.c
new file mode 100644
index 000000000..929a08bd8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/s_server.c
@@ -0,0 +1,3632 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ * Copyright 2005 Nokia. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <ctype.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#if defined(_WIN32)
+/* Included before async.h to avoid some warnings */
+# include <windows.h>
+#endif
+
+#include <openssl/e_os2.h>
+#include <openssl/async.h>
+#include <openssl/ssl.h>
+
+#ifndef OPENSSL_NO_SOCK
+
+/*
+ * With IPv6, it looks like Digital has mixed up the proper order of
+ * recursive header file inclusion, resulting in the compiler complaining
+ * that u_int isn't defined, but only if _POSIX_C_SOURCE is defined, which is
+ * needed to have fileno() declared correctly...  So let's define u_int
+ */
+#if defined(OPENSSL_SYS_VMS_DECC) && !defined(__U_INT)
+# define __U_INT
+typedef unsigned int u_int;
+#endif
+
+#include <openssl/bn.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/err.h>
+#include <openssl/pem.h>
+#include <openssl/x509.h>
+#include <openssl/ssl.h>
+#include <openssl/rand.h>
+#include <openssl/ocsp.h>
+#ifndef OPENSSL_NO_DH
+# include <openssl/dh.h>
+#endif
+#ifndef OPENSSL_NO_RSA
+# include <openssl/rsa.h>
+#endif
+#ifndef OPENSSL_NO_SRP
+# include <openssl/srp.h>
+#endif
+#include "s_apps.h"
+#include "timeouts.h"
+#ifdef CHARSET_EBCDIC
+#include <openssl/ebcdic.h>
+#endif
+#include "internal/sockets.h"
+
+static int not_resumable_sess_cb(SSL *s, int is_forward_secure);
+static int sv_body(int s, int stype, int prot, unsigned char *context);
+static int www_body(int s, int stype, int prot, unsigned char *context);
+static int rev_body(int s, int stype, int prot, unsigned char *context);
+static void close_accept_socket(void);
+static int init_ssl_connection(SSL *s);
+static void print_stats(BIO *bp, SSL_CTX *ctx);
+static int generate_session_id(SSL *ssl, unsigned char *id,
+                               unsigned int *id_len);
+static void init_session_cache_ctx(SSL_CTX *sctx);
+static void free_sessions(void);
+#ifndef OPENSSL_NO_DH
+static DH *load_dh_param(const char *dhfile);
+#endif
+static void print_connection_info(SSL *con);
+
+static const int bufsize = 16 * 1024;
+static int accept_socket = -1;
+
+#define TEST_CERT       "server.pem"
+#define TEST_CERT2      "server2.pem"
+
+static int s_nbio = 0;
+static int s_nbio_test = 0;
+static int s_crlf = 0;
+static SSL_CTX *ctx = NULL;
+static SSL_CTX *ctx2 = NULL;
+static int www = 0;
+
+static BIO *bio_s_out = NULL;
+static BIO *bio_s_msg = NULL;
+static int s_debug = 0;
+static int s_tlsextdebug = 0;
+static int s_msg = 0;
+static int s_quiet = 0;
+static int s_ign_eof = 0;
+static int s_brief = 0;
+
+static char *keymatexportlabel = NULL;
+static int keymatexportlen = 20;
+
+static int async = 0;
+
+static const char *session_id_prefix = NULL;
+
+#ifndef OPENSSL_NO_DTLS
+static int enable_timeouts = 0;
+static long socket_mtu;
+#endif
+
+/*
+ * We define this but make it always be 0 in no-dtls builds to simplify the
+ * code.
+ */
+static int dtlslisten = 0;
+static int stateless = 0;
+
+static int early_data = 0;
+static SSL_SESSION *psksess = NULL;
+
+static char *psk_identity = "Client_identity";
+char *psk_key = NULL;           /* by default PSK is not used */
+
+#ifndef OPENSSL_NO_PSK
+static unsigned int psk_server_cb(SSL *ssl, const char *identity,
+                                  unsigned char *psk,
+                                  unsigned int max_psk_len)
+{
+    long key_len = 0;
+    unsigned char *key;
+
+    if (s_debug)
+        BIO_printf(bio_s_out, "psk_server_cb\n");
+    if (identity == NULL) {
+        BIO_printf(bio_err, "Error: client did not send PSK identity\n");
+        goto out_err;
+    }
+    if (s_debug)
+        BIO_printf(bio_s_out, "identity_len=%d identity=%s\n",
+                   (int)strlen(identity), identity);
+
+    /* here we could lookup the given identity e.g. from a database */
+    if (strcmp(identity, psk_identity) != 0) {
+        BIO_printf(bio_s_out, "PSK warning: client identity not what we expected"
+                   " (got '%s' expected '%s')\n", identity, psk_identity);
+    } else {
+      if (s_debug)
+        BIO_printf(bio_s_out, "PSK client identity found\n");
+    }
+
+    /* convert the PSK key to binary */
+    key = OPENSSL_hexstr2buf(psk_key, &key_len);
+    if (key == NULL) {
+        BIO_printf(bio_err, "Could not convert PSK key '%s' to buffer\n",
+                   psk_key);
+        return 0;
+    }
+    if (key_len > (int)max_psk_len) {
+        BIO_printf(bio_err,
+                   "psk buffer of callback is too small (%d) for key (%ld)\n",
+                   max_psk_len, key_len);
+        OPENSSL_free(key);
+        return 0;
+    }
+
+    memcpy(psk, key, key_len);
+    OPENSSL_free(key);
+
+    if (s_debug)
+        BIO_printf(bio_s_out, "fetched PSK len=%ld\n", key_len);
+    return key_len;
+ out_err:
+    if (s_debug)
+        BIO_printf(bio_err, "Error in PSK server callback\n");
+    (void)BIO_flush(bio_err);
+    (void)BIO_flush(bio_s_out);
+    return 0;
+}
+#endif
+
+#define TLS13_AES_128_GCM_SHA256_BYTES  ((const unsigned char *)"\x13\x01")
+#define TLS13_AES_256_GCM_SHA384_BYTES  ((const unsigned char *)"\x13\x02")
+
+static int psk_find_session_cb(SSL *ssl, const unsigned char *identity,
+                               size_t identity_len, SSL_SESSION **sess)
+{
+    SSL_SESSION *tmpsess = NULL;
+    unsigned char *key;
+    long key_len;
+    const SSL_CIPHER *cipher = NULL;
+
+    if (strlen(psk_identity) != identity_len
+            || memcmp(psk_identity, identity, identity_len) != 0) {
+        *sess = NULL;
+        return 1;
+    }
+
+    if (psksess != NULL) {
+        SSL_SESSION_up_ref(psksess);
+        *sess = psksess;
+        return 1;
+    }
+
+    key = OPENSSL_hexstr2buf(psk_key, &key_len);
+    if (key == NULL) {
+        BIO_printf(bio_err, "Could not convert PSK key '%s' to buffer\n",
+                   psk_key);
+        return 0;
+    }
+
+    /* We default to SHA256 */
+    cipher = SSL_CIPHER_find(ssl, tls13_aes128gcmsha256_id);
+    if (cipher == NULL) {
+        BIO_printf(bio_err, "Error finding suitable ciphersuite\n");
+        OPENSSL_free(key);
+        return 0;
+    }
+
+    tmpsess = SSL_SESSION_new();
+    if (tmpsess == NULL
+            || !SSL_SESSION_set1_master_key(tmpsess, key, key_len)
+            || !SSL_SESSION_set_cipher(tmpsess, cipher)
+            || !SSL_SESSION_set_protocol_version(tmpsess, SSL_version(ssl))) {
+        OPENSSL_free(key);
+        return 0;
+    }
+    OPENSSL_free(key);
+    *sess = tmpsess;
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_SRP
+/* This is a context that we pass to callbacks */
+typedef struct srpsrvparm_st {
+    char *login;
+    SRP_VBASE *vb;
+    SRP_user_pwd *user;
+} srpsrvparm;
+static srpsrvparm srp_callback_parm;
+
+/*
+ * This callback pretends to require some asynchronous logic in order to
+ * obtain a verifier. When the callback is called for a new connection we
+ * return with a negative value. This will provoke the accept etc to return
+ * with an LOOKUP_X509. The main logic of the reinvokes the suspended call
+ * (which would normally occur after a worker has finished) and we set the
+ * user parameters.
+ */
+static int ssl_srp_server_param_cb(SSL *s, int *ad, void *arg)
+{
+    srpsrvparm *p = (srpsrvparm *) arg;
+    int ret = SSL3_AL_FATAL;
+
+    if (p->login == NULL && p->user == NULL) {
+        p->login = SSL_get_srp_username(s);
+        BIO_printf(bio_err, "SRP username = \"%s\"\n", p->login);
+        return -1;
+    }
+
+    if (p->user == NULL) {
+        BIO_printf(bio_err, "User %s doesn't exist\n", p->login);
+        goto err;
+    }
+
+    if (SSL_set_srp_server_param
+        (s, p->user->N, p->user->g, p->user->s, p->user->v,
+         p->user->info) < 0) {
+        *ad = SSL_AD_INTERNAL_ERROR;
+        goto err;
+    }
+    BIO_printf(bio_err,
+               "SRP parameters set: username = \"%s\" info=\"%s\" \n",
+               p->login, p->user->info);
+    ret = SSL_ERROR_NONE;
+
+ err:
+    SRP_user_pwd_free(p->user);
+    p->user = NULL;
+    p->login = NULL;
+    return ret;
+}
+
+#endif
+
+static int local_argc = 0;
+static char **local_argv;
+
+#ifdef CHARSET_EBCDIC
+static int ebcdic_new(BIO *bi);
+static int ebcdic_free(BIO *a);
+static int ebcdic_read(BIO *b, char *out, int outl);
+static int ebcdic_write(BIO *b, const char *in, int inl);
+static long ebcdic_ctrl(BIO *b, int cmd, long num, void *ptr);
+static int ebcdic_gets(BIO *bp, char *buf, int size);
+static int ebcdic_puts(BIO *bp, const char *str);
+
+# define BIO_TYPE_EBCDIC_FILTER  (18|0x0200)
+static BIO_METHOD *methods_ebcdic = NULL;
+
+/* This struct is "unwarranted chumminess with the compiler." */
+typedef struct {
+    size_t alloced;
+    char buff[1];
+} EBCDIC_OUTBUFF;
+
+static const BIO_METHOD *BIO_f_ebcdic_filter()
+{
+    if (methods_ebcdic == NULL) {
+        methods_ebcdic = BIO_meth_new(BIO_TYPE_EBCDIC_FILTER,
+                                      "EBCDIC/ASCII filter");
+        if (methods_ebcdic == NULL
+            || !BIO_meth_set_write(methods_ebcdic, ebcdic_write)
+            || !BIO_meth_set_read(methods_ebcdic, ebcdic_read)
+            || !BIO_meth_set_puts(methods_ebcdic, ebcdic_puts)
+            || !BIO_meth_set_gets(methods_ebcdic, ebcdic_gets)
+            || !BIO_meth_set_ctrl(methods_ebcdic, ebcdic_ctrl)
+            || !BIO_meth_set_create(methods_ebcdic, ebcdic_new)
+            || !BIO_meth_set_destroy(methods_ebcdic, ebcdic_free))
+            return NULL;
+    }
+    return methods_ebcdic;
+}
+
+static int ebcdic_new(BIO *bi)
+{
+    EBCDIC_OUTBUFF *wbuf;
+
+    wbuf = app_malloc(sizeof(*wbuf) + 1024, "ebcdic wbuf");
+    wbuf->alloced = 1024;
+    wbuf->buff[0] = '\0';
+
+    BIO_set_data(bi, wbuf);
+    BIO_set_init(bi, 1);
+    return 1;
+}
+
+static int ebcdic_free(BIO *a)
+{
+    EBCDIC_OUTBUFF *wbuf;
+
+    if (a == NULL)
+        return 0;
+    wbuf = BIO_get_data(a);
+    OPENSSL_free(wbuf);
+    BIO_set_data(a, NULL);
+    BIO_set_init(a, 0);
+
+    return 1;
+}
+
+static int ebcdic_read(BIO *b, char *out, int outl)
+{
+    int ret = 0;
+    BIO *next = BIO_next(b);
+
+    if (out == NULL || outl == 0)
+        return 0;
+    if (next == NULL)
+        return 0;
+
+    ret = BIO_read(next, out, outl);
+    if (ret > 0)
+        ascii2ebcdic(out, out, ret);
+    return ret;
+}
+
+static int ebcdic_write(BIO *b, const char *in, int inl)
+{
+    EBCDIC_OUTBUFF *wbuf;
+    BIO *next = BIO_next(b);
+    int ret = 0;
+    int num;
+
+    if ((in == NULL) || (inl <= 0))
+        return 0;
+    if (next == NULL)
+        return 0;
+
+    wbuf = (EBCDIC_OUTBUFF *) BIO_get_data(b);
+
+    if (inl > (num = wbuf->alloced)) {
+        num = num + num;        /* double the size */
+        if (num < inl)
+            num = inl;
+        OPENSSL_free(wbuf);
+        wbuf = app_malloc(sizeof(*wbuf) + num, "grow ebcdic wbuf");
+
+        wbuf->alloced = num;
+        wbuf->buff[0] = '\0';
+
+        BIO_set_data(b, wbuf);
+    }
+
+    ebcdic2ascii(wbuf->buff, in, inl);
+
+    ret = BIO_write(next, wbuf->buff, inl);
+
+    return ret;
+}
+
+static long ebcdic_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    long ret;
+    BIO *next = BIO_next(b);
+
+    if (next == NULL)
+        return 0;
+    switch (cmd) {
+    case BIO_CTRL_DUP:
+        ret = 0L;
+        break;
+    default:
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    }
+    return ret;
+}
+
+static int ebcdic_gets(BIO *bp, char *buf, int size)
+{
+    int i, ret = 0;
+    BIO *next = BIO_next(bp);
+
+    if (next == NULL)
+        return 0;
+/*      return(BIO_gets(bp->next_bio,buf,size));*/
+    for (i = 0; i < size - 1; ++i) {
+        ret = ebcdic_read(bp, &buf[i], 1);
+        if (ret <= 0)
+            break;
+        else if (buf[i] == '\n') {
+            ++i;
+            break;
+        }
+    }
+    if (i < size)
+        buf[i] = '\0';
+    return (ret < 0 && i == 0) ? ret : i;
+}
+
+static int ebcdic_puts(BIO *bp, const char *str)
+{
+    if (BIO_next(bp) == NULL)
+        return 0;
+    return ebcdic_write(bp, str, strlen(str));
+}
+#endif
+
+/* This is a context that we pass to callbacks */
+typedef struct tlsextctx_st {
+    char *servername;
+    BIO *biodebug;
+    int extension_error;
+} tlsextctx;
+
+static int ssl_servername_cb(SSL *s, int *ad, void *arg)
+{
+    tlsextctx *p = (tlsextctx *) arg;
+    const char *servername = SSL_get_servername(s, TLSEXT_NAMETYPE_host_name);
+
+    if (servername != NULL && p->biodebug != NULL) {
+        const char *cp = servername;
+        unsigned char uc;
+
+        BIO_printf(p->biodebug, "Hostname in TLS extension: \"");
+        while ((uc = *cp++) != 0)
+            BIO_printf(p->biodebug,
+                       isascii(uc) && isprint(uc) ? "%c" : "\\x%02x", uc);
+        BIO_printf(p->biodebug, "\"\n");
+    }
+
+    if (p->servername == NULL)
+        return SSL_TLSEXT_ERR_NOACK;
+
+    if (servername != NULL) {
+        if (strcasecmp(servername, p->servername))
+            return p->extension_error;
+        if (ctx2 != NULL) {
+            BIO_printf(p->biodebug, "Switching server context.\n");
+            SSL_set_SSL_CTX(s, ctx2);
+        }
+    }
+    return SSL_TLSEXT_ERR_OK;
+}
+
+/* Structure passed to cert status callback */
+typedef struct tlsextstatusctx_st {
+    int timeout;
+    /* File to load OCSP Response from (or NULL if no file) */
+    char *respin;
+    /* Default responder to use */
+    char *host, *path, *port;
+    int use_ssl;
+    int verbose;
+} tlsextstatusctx;
+
+static tlsextstatusctx tlscstatp = { -1 };
+
+#ifndef OPENSSL_NO_OCSP
+
+/*
+ * Helper function to get an OCSP_RESPONSE from a responder. This is a
+ * simplified version. It examines certificates each time and makes one OCSP
+ * responder query for each request. A full version would store details such as
+ * the OCSP certificate IDs and minimise the number of OCSP responses by caching
+ * them until they were considered "expired".
+ */
+static int get_ocsp_resp_from_responder(SSL *s, tlsextstatusctx *srctx,
+                                        OCSP_RESPONSE **resp)
+{
+    char *host = NULL, *port = NULL, *path = NULL;
+    int use_ssl;
+    STACK_OF(OPENSSL_STRING) *aia = NULL;
+    X509 *x = NULL;
+    X509_STORE_CTX *inctx = NULL;
+    X509_OBJECT *obj;
+    OCSP_REQUEST *req = NULL;
+    OCSP_CERTID *id = NULL;
+    STACK_OF(X509_EXTENSION) *exts;
+    int ret = SSL_TLSEXT_ERR_NOACK;
+    int i;
+
+    /* Build up OCSP query from server certificate */
+    x = SSL_get_certificate(s);
+    aia = X509_get1_ocsp(x);
+    if (aia != NULL) {
+        if (!OCSP_parse_url(sk_OPENSSL_STRING_value(aia, 0),
+                            &host, &port, &path, &use_ssl)) {
+            BIO_puts(bio_err, "cert_status: can't parse AIA URL\n");
+            goto err;
+        }
+        if (srctx->verbose)
+            BIO_printf(bio_err, "cert_status: AIA URL: %s\n",
+                       sk_OPENSSL_STRING_value(aia, 0));
+    } else {
+        if (srctx->host == NULL) {
+            BIO_puts(bio_err,
+                     "cert_status: no AIA and no default responder URL\n");
+            goto done;
+        }
+        host = srctx->host;
+        path = srctx->path;
+        port = srctx->port;
+        use_ssl = srctx->use_ssl;
+    }
+
+    inctx = X509_STORE_CTX_new();
+    if (inctx == NULL)
+        goto err;
+    if (!X509_STORE_CTX_init(inctx,
+                             SSL_CTX_get_cert_store(SSL_get_SSL_CTX(s)),
+                             NULL, NULL))
+        goto err;
+    obj = X509_STORE_CTX_get_obj_by_subject(inctx, X509_LU_X509,
+                                            X509_get_issuer_name(x));
+    if (obj == NULL) {
+        BIO_puts(bio_err, "cert_status: Can't retrieve issuer certificate.\n");
+        goto done;
+    }
+    id = OCSP_cert_to_id(NULL, x, X509_OBJECT_get0_X509(obj));
+    X509_OBJECT_free(obj);
+    if (id == NULL)
+        goto err;
+    req = OCSP_REQUEST_new();
+    if (req == NULL)
+        goto err;
+    if (!OCSP_request_add0_id(req, id))
+        goto err;
+    id = NULL;
+    /* Add any extensions to the request */
+    SSL_get_tlsext_status_exts(s, &exts);
+    for (i = 0; i < sk_X509_EXTENSION_num(exts); i++) {
+        X509_EXTENSION *ext = sk_X509_EXTENSION_value(exts, i);
+        if (!OCSP_REQUEST_add_ext(req, ext, -1))
+            goto err;
+    }
+    *resp = process_responder(req, host, path, port, use_ssl, NULL,
+                             srctx->timeout);
+    if (*resp == NULL) {
+        BIO_puts(bio_err, "cert_status: error querying responder\n");
+        goto done;
+    }
+
+    ret = SSL_TLSEXT_ERR_OK;
+    goto done;
+
+ err:
+    ret = SSL_TLSEXT_ERR_ALERT_FATAL;
+ done:
+    /*
+     * If we parsed aia we need to free; otherwise they were copied and we
+     * don't
+     */
+    if (aia != NULL) {
+        OPENSSL_free(host);
+        OPENSSL_free(path);
+        OPENSSL_free(port);
+        X509_email_free(aia);
+    }
+    OCSP_CERTID_free(id);
+    OCSP_REQUEST_free(req);
+    X509_STORE_CTX_free(inctx);
+    return ret;
+}
+
+/*
+ * Certificate Status callback. This is called when a client includes a
+ * certificate status request extension. The response is either obtained from a
+ * file, or from an OCSP responder.
+ */
+static int cert_status_cb(SSL *s, void *arg)
+{
+    tlsextstatusctx *srctx = arg;
+    OCSP_RESPONSE *resp = NULL;
+    unsigned char *rspder = NULL;
+    int rspderlen;
+    int ret = SSL_TLSEXT_ERR_ALERT_FATAL;
+
+    if (srctx->verbose)
+        BIO_puts(bio_err, "cert_status: callback called\n");
+
+    if (srctx->respin != NULL) {
+        BIO *derbio = bio_open_default(srctx->respin, 'r', FORMAT_ASN1);
+        if (derbio == NULL) {
+            BIO_puts(bio_err, "cert_status: Cannot open OCSP response file\n");
+            goto err;
+        }
+        resp = d2i_OCSP_RESPONSE_bio(derbio, NULL);
+        BIO_free(derbio);
+        if (resp == NULL) {
+            BIO_puts(bio_err, "cert_status: Error reading OCSP response\n");
+            goto err;
+        }
+    } else {
+        ret = get_ocsp_resp_from_responder(s, srctx, &resp);
+        if (ret != SSL_TLSEXT_ERR_OK)
+            goto err;
+    }
+
+    rspderlen = i2d_OCSP_RESPONSE(resp, &rspder);
+    if (rspderlen <= 0)
+        goto err;
+
+    SSL_set_tlsext_status_ocsp_resp(s, rspder, rspderlen);
+    if (srctx->verbose) {
+        BIO_puts(bio_err, "cert_status: ocsp response sent:\n");
+        OCSP_RESPONSE_print(bio_err, resp, 2);
+    }
+
+    ret = SSL_TLSEXT_ERR_OK;
+
+ err:
+    if (ret != SSL_TLSEXT_ERR_OK)
+        ERR_print_errors(bio_err);
+
+    OCSP_RESPONSE_free(resp);
+
+    return ret;
+}
+#endif
+
+#ifndef OPENSSL_NO_NEXTPROTONEG
+/* This is the context that we pass to next_proto_cb */
+typedef struct tlsextnextprotoctx_st {
+    unsigned char *data;
+    size_t len;
+} tlsextnextprotoctx;
+
+static int next_proto_cb(SSL *s, const unsigned char **data,
+                         unsigned int *len, void *arg)
+{
+    tlsextnextprotoctx *next_proto = arg;
+
+    *data = next_proto->data;
+    *len = next_proto->len;
+
+    return SSL_TLSEXT_ERR_OK;
+}
+#endif                         /* ndef OPENSSL_NO_NEXTPROTONEG */
+
+/* This the context that we pass to alpn_cb */
+typedef struct tlsextalpnctx_st {
+    unsigned char *data;
+    size_t len;
+} tlsextalpnctx;
+
+static int alpn_cb(SSL *s, const unsigned char **out, unsigned char *outlen,
+                   const unsigned char *in, unsigned int inlen, void *arg)
+{
+    tlsextalpnctx *alpn_ctx = arg;
+
+    if (!s_quiet) {
+        /* We can assume that |in| is syntactically valid. */
+        unsigned int i;
+        BIO_printf(bio_s_out, "ALPN protocols advertised by the client: ");
+        for (i = 0; i < inlen;) {
+            if (i)
+                BIO_write(bio_s_out, ", ", 2);
+            BIO_write(bio_s_out, &in[i + 1], in[i]);
+            i += in[i] + 1;
+        }
+        BIO_write(bio_s_out, "\n", 1);
+    }
+
+    if (SSL_select_next_proto
+        ((unsigned char **)out, outlen, alpn_ctx->data, alpn_ctx->len, in,
+         inlen) != OPENSSL_NPN_NEGOTIATED) {
+        return SSL_TLSEXT_ERR_NOACK;
+    }
+
+    if (!s_quiet) {
+        BIO_printf(bio_s_out, "ALPN protocols selected: ");
+        BIO_write(bio_s_out, *out, *outlen);
+        BIO_write(bio_s_out, "\n", 1);
+    }
+
+    return SSL_TLSEXT_ERR_OK;
+}
+
+static int not_resumable_sess_cb(SSL *s, int is_forward_secure)
+{
+    /* disable resumption for sessions with forward secure ciphers */
+    return is_forward_secure;
+}
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP, OPT_ENGINE,
+    OPT_4, OPT_6, OPT_ACCEPT, OPT_PORT, OPT_UNIX, OPT_UNLINK, OPT_NACCEPT,
+    OPT_VERIFY, OPT_NAMEOPT, OPT_UPPER_V_VERIFY, OPT_CONTEXT, OPT_CERT, OPT_CRL,
+    OPT_CRL_DOWNLOAD, OPT_SERVERINFO, OPT_CERTFORM, OPT_KEY, OPT_KEYFORM,
+    OPT_PASS, OPT_CERT_CHAIN, OPT_DHPARAM, OPT_DCERTFORM, OPT_DCERT,
+    OPT_DKEYFORM, OPT_DPASS, OPT_DKEY, OPT_DCERT_CHAIN, OPT_NOCERT,
+    OPT_CAPATH, OPT_NOCAPATH, OPT_CHAINCAPATH, OPT_VERIFYCAPATH, OPT_NO_CACHE,
+    OPT_EXT_CACHE, OPT_CRLFORM, OPT_VERIFY_RET_ERROR, OPT_VERIFY_QUIET,
+    OPT_BUILD_CHAIN, OPT_CAFILE, OPT_NOCAFILE, OPT_CHAINCAFILE,
+    OPT_VERIFYCAFILE, OPT_NBIO, OPT_NBIO_TEST, OPT_IGN_EOF, OPT_NO_IGN_EOF,
+    OPT_DEBUG, OPT_TLSEXTDEBUG, OPT_STATUS, OPT_STATUS_VERBOSE,
+    OPT_STATUS_TIMEOUT, OPT_STATUS_URL, OPT_STATUS_FILE, OPT_MSG, OPT_MSGFILE,
+    OPT_TRACE, OPT_SECURITY_DEBUG, OPT_SECURITY_DEBUG_VERBOSE, OPT_STATE,
+    OPT_CRLF, OPT_QUIET, OPT_BRIEF, OPT_NO_DHE,
+    OPT_NO_RESUME_EPHEMERAL, OPT_PSK_IDENTITY, OPT_PSK_HINT, OPT_PSK,
+    OPT_PSK_SESS, OPT_SRPVFILE, OPT_SRPUSERSEED, OPT_REV, OPT_WWW,
+    OPT_UPPER_WWW, OPT_HTTP, OPT_ASYNC, OPT_SSL_CONFIG,
+    OPT_MAX_SEND_FRAG, OPT_SPLIT_SEND_FRAG, OPT_MAX_PIPELINES, OPT_READ_BUF,
+    OPT_SSL3, OPT_TLS1_3, OPT_TLS1_2, OPT_TLS1_1, OPT_TLS1, OPT_DTLS, OPT_DTLS1,
+    OPT_DTLS1_2, OPT_SCTP, OPT_TIMEOUT, OPT_MTU, OPT_LISTEN, OPT_STATELESS,
+    OPT_ID_PREFIX, OPT_SERVERNAME, OPT_SERVERNAME_FATAL,
+    OPT_CERT2, OPT_KEY2, OPT_NEXTPROTONEG, OPT_ALPN,
+    OPT_SRTP_PROFILES, OPT_KEYMATEXPORT, OPT_KEYMATEXPORTLEN,
+    OPT_KEYLOG_FILE, OPT_MAX_EARLY, OPT_RECV_MAX_EARLY, OPT_EARLY_DATA,
+    OPT_S_NUM_TICKETS, OPT_ANTI_REPLAY, OPT_NO_ANTI_REPLAY, OPT_SCTP_LABEL_BUG,
+    OPT_R_ENUM,
+    OPT_S_ENUM,
+    OPT_V_ENUM,
+    OPT_X_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS s_server_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"port", OPT_PORT, 'p',
+     "TCP/IP port to listen on for connections (default is " PORT ")"},
+    {"accept", OPT_ACCEPT, 's',
+     "TCP/IP optional host and port to listen on for connections (default is *:" PORT ")"},
+#ifdef AF_UNIX
+    {"unix", OPT_UNIX, 's', "Unix domain socket to accept on"},
+#endif
+    {"4", OPT_4, '-', "Use IPv4 only"},
+    {"6", OPT_6, '-', "Use IPv6 only"},
+#ifdef AF_UNIX
+    {"unlink", OPT_UNLINK, '-', "For -unix, unlink existing socket first"},
+#endif
+    {"context", OPT_CONTEXT, 's', "Set session ID context"},
+    {"verify", OPT_VERIFY, 'n', "Turn on peer certificate verification"},
+    {"Verify", OPT_UPPER_V_VERIFY, 'n',
+     "Turn on peer certificate verification, must have a cert"},
+    {"cert", OPT_CERT, '<', "Certificate file to use; default is " TEST_CERT},
+    {"nameopt", OPT_NAMEOPT, 's', "Various certificate name options"},
+    {"naccept", OPT_NACCEPT, 'p', "Terminate after #num connections"},
+    {"serverinfo", OPT_SERVERINFO, 's',
+     "PEM serverinfo file for certificate"},
+    {"certform", OPT_CERTFORM, 'F',
+     "Certificate format (PEM or DER) PEM default"},
+    {"key", OPT_KEY, 's',
+     "Private Key if not in -cert; default is " TEST_CERT},
+    {"keyform", OPT_KEYFORM, 'f',
+     "Key format (PEM, DER or ENGINE) PEM default"},
+    {"pass", OPT_PASS, 's', "Private key file pass phrase source"},
+    {"dcert", OPT_DCERT, '<',
+     "Second certificate file to use (usually for DSA)"},
+    {"dhparam", OPT_DHPARAM, '<', "DH parameters file to use"},
+    {"dcertform", OPT_DCERTFORM, 'F',
+     "Second certificate format (PEM or DER) PEM default"},
+    {"dkey", OPT_DKEY, '<',
+     "Second private key file to use (usually for DSA)"},
+    {"dkeyform", OPT_DKEYFORM, 'F',
+     "Second key format (PEM, DER or ENGINE) PEM default"},
+    {"dpass", OPT_DPASS, 's', "Second private key file pass phrase source"},
+    {"nbio_test", OPT_NBIO_TEST, '-', "Test with the non-blocking test bio"},
+    {"crlf", OPT_CRLF, '-', "Convert LF from terminal into CRLF"},
+    {"debug", OPT_DEBUG, '-', "Print more output"},
+    {"msg", OPT_MSG, '-', "Show protocol messages"},
+    {"msgfile", OPT_MSGFILE, '>',
+     "File to send output of -msg or -trace, instead of stdout"},
+    {"state", OPT_STATE, '-', "Print the SSL states"},
+    {"CAfile", OPT_CAFILE, '<', "PEM format file of CA's"},
+    {"CApath", OPT_CAPATH, '/', "PEM format directory of CA's"},
+    {"no-CAfile", OPT_NOCAFILE, '-',
+     "Do not load the default certificates file"},
+    {"no-CApath", OPT_NOCAPATH, '-',
+     "Do not load certificates from the default certificates directory"},
+    {"nocert", OPT_NOCERT, '-', "Don't use any certificates (Anon-DH)"},
+    {"quiet", OPT_QUIET, '-', "No server output"},
+    {"no_resume_ephemeral", OPT_NO_RESUME_EPHEMERAL, '-',
+     "Disable caching and tickets if ephemeral (EC)DH is used"},
+    {"www", OPT_WWW, '-', "Respond to a 'GET /' with a status page"},
+    {"WWW", OPT_UPPER_WWW, '-', "Respond to a 'GET with the file ./path"},
+    {"servername", OPT_SERVERNAME, 's',
+     "Servername for HostName TLS extension"},
+    {"servername_fatal", OPT_SERVERNAME_FATAL, '-',
+     "mismatch send fatal alert (default warning alert)"},
+    {"cert2", OPT_CERT2, '<',
+     "Certificate file to use for servername; default is" TEST_CERT2},
+    {"key2", OPT_KEY2, '<',
+     "-Private Key file to use for servername if not in -cert2"},
+    {"tlsextdebug", OPT_TLSEXTDEBUG, '-',
+     "Hex dump of all TLS extensions received"},
+    {"HTTP", OPT_HTTP, '-', "Like -WWW but ./path includes HTTP headers"},
+    {"id_prefix", OPT_ID_PREFIX, 's',
+     "Generate SSL/TLS session IDs prefixed by arg"},
+    OPT_R_OPTIONS,
+    {"keymatexport", OPT_KEYMATEXPORT, 's',
+     "Export keying material using label"},
+    {"keymatexportlen", OPT_KEYMATEXPORTLEN, 'p',
+     "Export len bytes of keying material (default 20)"},
+    {"CRL", OPT_CRL, '<', "CRL file to use"},
+    {"crl_download", OPT_CRL_DOWNLOAD, '-',
+     "Download CRL from distribution points"},
+    {"cert_chain", OPT_CERT_CHAIN, '<',
+     "certificate chain file in PEM format"},
+    {"dcert_chain", OPT_DCERT_CHAIN, '<',
+     "second certificate chain file in PEM format"},
+    {"chainCApath", OPT_CHAINCAPATH, '/',
+     "use dir as certificate store path to build CA certificate chain"},
+    {"verifyCApath", OPT_VERIFYCAPATH, '/',
+     "use dir as certificate store path to verify CA certificate"},
+    {"no_cache", OPT_NO_CACHE, '-', "Disable session cache"},
+    {"ext_cache", OPT_EXT_CACHE, '-',
+     "Disable internal cache, setup and use external cache"},
+    {"CRLform", OPT_CRLFORM, 'F', "CRL format (PEM or DER) PEM is default"},
+    {"verify_return_error", OPT_VERIFY_RET_ERROR, '-',
+     "Close connection on verification error"},
+    {"verify_quiet", OPT_VERIFY_QUIET, '-',
+     "No verify output except verify errors"},
+    {"build_chain", OPT_BUILD_CHAIN, '-', "Build certificate chain"},
+    {"chainCAfile", OPT_CHAINCAFILE, '<',
+     "CA file for certificate chain (PEM format)"},
+    {"verifyCAfile", OPT_VERIFYCAFILE, '<',
+     "CA file for certificate verification (PEM format)"},
+    {"ign_eof", OPT_IGN_EOF, '-', "ignore input eof (default when -quiet)"},
+    {"no_ign_eof", OPT_NO_IGN_EOF, '-', "Do not ignore input eof"},
+#ifndef OPENSSL_NO_OCSP
+    {"status", OPT_STATUS, '-', "Request certificate status from server"},
+    {"status_verbose", OPT_STATUS_VERBOSE, '-',
+     "Print more output in certificate status callback"},
+    {"status_timeout", OPT_STATUS_TIMEOUT, 'n',
+     "Status request responder timeout"},
+    {"status_url", OPT_STATUS_URL, 's', "Status request fallback URL"},
+    {"status_file", OPT_STATUS_FILE, '<',
+     "File containing DER encoded OCSP Response"},
+#endif
+#ifndef OPENSSL_NO_SSL_TRACE
+    {"trace", OPT_TRACE, '-', "trace protocol messages"},
+#endif
+    {"security_debug", OPT_SECURITY_DEBUG, '-',
+     "Print output from SSL/TLS security framework"},
+    {"security_debug_verbose", OPT_SECURITY_DEBUG_VERBOSE, '-',
+     "Print more output from SSL/TLS security framework"},
+    {"brief", OPT_BRIEF, '-',
+     "Restrict output to brief summary of connection parameters"},
+    {"rev", OPT_REV, '-',
+     "act as a simple test server which just sends back with the received text reversed"},
+    {"async", OPT_ASYNC, '-', "Operate in asynchronous mode"},
+    {"ssl_config", OPT_SSL_CONFIG, 's',
+     "Configure SSL_CTX using the configuration 'val'"},
+    {"max_send_frag", OPT_MAX_SEND_FRAG, 'p', "Maximum Size of send frames "},
+    {"split_send_frag", OPT_SPLIT_SEND_FRAG, 'p',
+     "Size used to split data for encrypt pipelines"},
+    {"max_pipelines", OPT_MAX_PIPELINES, 'p',
+     "Maximum number of encrypt/decrypt pipelines to be used"},
+    {"read_buf", OPT_READ_BUF, 'p',
+     "Default read buffer size to be used for connections"},
+    OPT_S_OPTIONS,
+    OPT_V_OPTIONS,
+    OPT_X_OPTIONS,
+    {"nbio", OPT_NBIO, '-', "Use non-blocking IO"},
+    {"psk_identity", OPT_PSK_IDENTITY, 's', "PSK identity to expect"},
+#ifndef OPENSSL_NO_PSK
+    {"psk_hint", OPT_PSK_HINT, 's', "PSK identity hint to use"},
+#endif
+    {"psk", OPT_PSK, 's', "PSK in hex (without 0x)"},
+    {"psk_session", OPT_PSK_SESS, '<', "File to read PSK SSL session from"},
+#ifndef OPENSSL_NO_SRP
+    {"srpvfile", OPT_SRPVFILE, '<', "The verifier file for SRP"},
+    {"srpuserseed", OPT_SRPUSERSEED, 's',
+     "A seed string for a default user salt"},
+#endif
+#ifndef OPENSSL_NO_SSL3
+    {"ssl3", OPT_SSL3, '-', "Just talk SSLv3"},
+#endif
+#ifndef OPENSSL_NO_TLS1
+    {"tls1", OPT_TLS1, '-', "Just talk TLSv1"},
+#endif
+#ifndef OPENSSL_NO_TLS1_1
+    {"tls1_1", OPT_TLS1_1, '-', "Just talk TLSv1.1"},
+#endif
+#ifndef OPENSSL_NO_TLS1_2
+    {"tls1_2", OPT_TLS1_2, '-', "just talk TLSv1.2"},
+#endif
+#ifndef OPENSSL_NO_TLS1_3
+    {"tls1_3", OPT_TLS1_3, '-', "just talk TLSv1.3"},
+#endif
+#ifndef OPENSSL_NO_DTLS
+    {"dtls", OPT_DTLS, '-', "Use any DTLS version"},
+    {"timeout", OPT_TIMEOUT, '-', "Enable timeouts"},
+    {"mtu", OPT_MTU, 'p', "Set link layer MTU"},
+    {"listen", OPT_LISTEN, '-',
+     "Listen for a DTLS ClientHello with a cookie and then connect"},
+#endif
+    {"stateless", OPT_STATELESS, '-', "Require TLSv1.3 cookies"},
+#ifndef OPENSSL_NO_DTLS1
+    {"dtls1", OPT_DTLS1, '-', "Just talk DTLSv1"},
+#endif
+#ifndef OPENSSL_NO_DTLS1_2
+    {"dtls1_2", OPT_DTLS1_2, '-', "Just talk DTLSv1.2"},
+#endif
+#ifndef OPENSSL_NO_SCTP
+    {"sctp", OPT_SCTP, '-', "Use SCTP"},
+    {"sctp_label_bug", OPT_SCTP_LABEL_BUG, '-', "Enable SCTP label length bug"},
+#endif
+#ifndef OPENSSL_NO_DH
+    {"no_dhe", OPT_NO_DHE, '-', "Disable ephemeral DH"},
+#endif
+#ifndef OPENSSL_NO_NEXTPROTONEG
+    {"nextprotoneg", OPT_NEXTPROTONEG, 's',
+     "Set the advertised protocols for the NPN extension (comma-separated list)"},
+#endif
+#ifndef OPENSSL_NO_SRTP
+    {"use_srtp", OPT_SRTP_PROFILES, 's',
+     "Offer SRTP key management with a colon-separated profile list"},
+#endif
+    {"alpn", OPT_ALPN, 's',
+     "Set the advertised protocols for the ALPN extension (comma-separated list)"},
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+#endif
+    {"keylogfile", OPT_KEYLOG_FILE, '>', "Write TLS secrets to file"},
+    {"max_early_data", OPT_MAX_EARLY, 'n',
+     "The maximum number of bytes of early data as advertised in tickets"},
+    {"recv_max_early_data", OPT_RECV_MAX_EARLY, 'n',
+     "The maximum number of bytes of early data (hard limit)"},
+    {"early_data", OPT_EARLY_DATA, '-', "Attempt to read early data"},
+    {"num_tickets", OPT_S_NUM_TICKETS, 'n',
+     "The number of TLSv1.3 session tickets that a server will automatically  issue" },
+    {"anti_replay", OPT_ANTI_REPLAY, '-', "Switch on anti-replay protection (default)"},
+    {"no_anti_replay", OPT_NO_ANTI_REPLAY, '-', "Switch off anti-replay protection"},
+    {NULL, OPT_EOF, 0, NULL}
+};
+
+#define IS_PROT_FLAG(o) \
+ (o == OPT_SSL3 || o == OPT_TLS1 || o == OPT_TLS1_1 || o == OPT_TLS1_2 \
+  || o == OPT_TLS1_3 || o == OPT_DTLS || o == OPT_DTLS1 || o == OPT_DTLS1_2)
+
+int s_server_main(int argc, char *argv[])
+{
+    ENGINE *engine = NULL;
+    EVP_PKEY *s_key = NULL, *s_dkey = NULL;
+    SSL_CONF_CTX *cctx = NULL;
+    const SSL_METHOD *meth = TLS_server_method();
+    SSL_EXCERT *exc = NULL;
+    STACK_OF(OPENSSL_STRING) *ssl_args = NULL;
+    STACK_OF(X509) *s_chain = NULL, *s_dchain = NULL;
+    STACK_OF(X509_CRL) *crls = NULL;
+    X509 *s_cert = NULL, *s_dcert = NULL;
+    X509_VERIFY_PARAM *vpm = NULL;
+    const char *CApath = NULL, *CAfile = NULL, *chCApath = NULL, *chCAfile = NULL;
+    char *dpassarg = NULL, *dpass = NULL;
+    char *passarg = NULL, *pass = NULL, *vfyCApath = NULL, *vfyCAfile = NULL;
+    char *crl_file = NULL, *prog;
+#ifdef AF_UNIX
+    int unlink_unix_path = 0;
+#endif
+    do_server_cb server_cb;
+    int vpmtouched = 0, build_chain = 0, no_cache = 0, ext_cache = 0;
+#ifndef OPENSSL_NO_DH
+    char *dhfile = NULL;
+    int no_dhe = 0;
+#endif
+    int nocert = 0, ret = 1;
+    int noCApath = 0, noCAfile = 0;
+    int s_cert_format = FORMAT_PEM, s_key_format = FORMAT_PEM;
+    int s_dcert_format = FORMAT_PEM, s_dkey_format = FORMAT_PEM;
+    int rev = 0, naccept = -1, sdebug = 0;
+    int socket_family = AF_UNSPEC, socket_type = SOCK_STREAM, protocol = 0;
+    int state = 0, crl_format = FORMAT_PEM, crl_download = 0;
+    char *host = NULL;
+    char *port = BUF_strdup(PORT);
+    unsigned char *context = NULL;
+    OPTION_CHOICE o;
+    EVP_PKEY *s_key2 = NULL;
+    X509 *s_cert2 = NULL;
+    tlsextctx tlsextcbp = { NULL, NULL, SSL_TLSEXT_ERR_ALERT_WARNING };
+    const char *ssl_config = NULL;
+    int read_buf_len = 0;
+#ifndef OPENSSL_NO_NEXTPROTONEG
+    const char *next_proto_neg_in = NULL;
+    tlsextnextprotoctx next_proto = { NULL, 0 };
+#endif
+    const char *alpn_in = NULL;
+    tlsextalpnctx alpn_ctx = { NULL, 0 };
+#ifndef OPENSSL_NO_PSK
+    /* by default do not send a PSK identity hint */
+    char *psk_identity_hint = NULL;
+#endif
+    char *p;
+#ifndef OPENSSL_NO_SRP
+    char *srpuserseed = NULL;
+    char *srp_verifier_file = NULL;
+#endif
+#ifndef OPENSSL_NO_SRTP
+    char *srtp_profiles = NULL;
+#endif
+    int min_version = 0, max_version = 0, prot_opt = 0, no_prot_opt = 0;
+    int s_server_verify = SSL_VERIFY_NONE;
+    int s_server_session_id_context = 1; /* anything will do */
+    const char *s_cert_file = TEST_CERT, *s_key_file = NULL, *s_chain_file = NULL;
+    const char *s_cert_file2 = TEST_CERT2, *s_key_file2 = NULL;
+    char *s_dcert_file = NULL, *s_dkey_file = NULL, *s_dchain_file = NULL;
+#ifndef OPENSSL_NO_OCSP
+    int s_tlsextstatus = 0;
+#endif
+    int no_resume_ephemeral = 0;
+    unsigned int max_send_fragment = 0;
+    unsigned int split_send_fragment = 0, max_pipelines = 0;
+    const char *s_serverinfo_file = NULL;
+    const char *keylog_file = NULL;
+    int max_early_data = -1, recv_max_early_data = -1;
+    char *psksessf = NULL;
+#ifndef OPENSSL_NO_SCTP
+    int sctp_label_bug = 0;
+#endif
+
+    /* Init of few remaining global variables */
+    local_argc = argc;
+    local_argv = argv;
+
+    ctx = ctx2 = NULL;
+    s_nbio = s_nbio_test = 0;
+    www = 0;
+    bio_s_out = NULL;
+    s_debug = 0;
+    s_msg = 0;
+    s_quiet = 0;
+    s_brief = 0;
+    async = 0;
+
+    cctx = SSL_CONF_CTX_new();
+    vpm = X509_VERIFY_PARAM_new();
+    if (cctx == NULL || vpm == NULL)
+        goto end;
+    SSL_CONF_CTX_set_flags(cctx,
+                           SSL_CONF_FLAG_SERVER | SSL_CONF_FLAG_CMDLINE);
+
+    prog = opt_init(argc, argv, s_server_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        if (IS_PROT_FLAG(o) && ++prot_opt > 1) {
+            BIO_printf(bio_err, "Cannot supply multiple protocol flags\n");
+            goto end;
+        }
+        if (IS_NO_PROT_FLAG(o))
+            no_prot_opt++;
+        if (prot_opt == 1 && no_prot_opt) {
+            BIO_printf(bio_err,
+                       "Cannot supply both a protocol flag and '-no_<prot>'\n");
+            goto end;
+        }
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(s_server_options);
+            ret = 0;
+            goto end;
+
+        case OPT_4:
+#ifdef AF_UNIX
+            if (socket_family == AF_UNIX) {
+                OPENSSL_free(host); host = NULL;
+                OPENSSL_free(port); port = NULL;
+            }
+#endif
+            socket_family = AF_INET;
+            break;
+        case OPT_6:
+            if (1) {
+#ifdef AF_INET6
+#ifdef AF_UNIX
+                if (socket_family == AF_UNIX) {
+                    OPENSSL_free(host); host = NULL;
+                    OPENSSL_free(port); port = NULL;
+                }
+#endif
+                socket_family = AF_INET6;
+            } else {
+#endif
+                BIO_printf(bio_err, "%s: IPv6 domain sockets unsupported\n", prog);
+                goto end;
+            }
+            break;
+        case OPT_PORT:
+#ifdef AF_UNIX
+            if (socket_family == AF_UNIX) {
+                socket_family = AF_UNSPEC;
+            }
+#endif
+            OPENSSL_free(port); port = NULL;
+            OPENSSL_free(host); host = NULL;
+            if (BIO_parse_hostserv(opt_arg(), NULL, &port, BIO_PARSE_PRIO_SERV) < 1) {
+                BIO_printf(bio_err,
+                           "%s: -port argument malformed or ambiguous\n",
+                           port);
+                goto end;
+            }
+            break;
+        case OPT_ACCEPT:
+#ifdef AF_UNIX
+            if (socket_family == AF_UNIX) {
+                socket_family = AF_UNSPEC;
+            }
+#endif
+            OPENSSL_free(port); port = NULL;
+            OPENSSL_free(host); host = NULL;
+            if (BIO_parse_hostserv(opt_arg(), &host, &port, BIO_PARSE_PRIO_SERV) < 1) {
+                BIO_printf(bio_err,
+                           "%s: -accept argument malformed or ambiguous\n",
+                           port);
+                goto end;
+            }
+            break;
+#ifdef AF_UNIX
+        case OPT_UNIX:
+            socket_family = AF_UNIX;
+            OPENSSL_free(host); host = BUF_strdup(opt_arg());
+            OPENSSL_free(port); port = NULL;
+            break;
+        case OPT_UNLINK:
+            unlink_unix_path = 1;
+            break;
+#endif
+        case OPT_NACCEPT:
+            naccept = atol(opt_arg());
+            break;
+        case OPT_VERIFY:
+            s_server_verify = SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE;
+            verify_args.depth = atoi(opt_arg());
+            if (!s_quiet)
+                BIO_printf(bio_err, "verify depth is %d\n", verify_args.depth);
+            break;
+        case OPT_UPPER_V_VERIFY:
+            s_server_verify =
+                SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT |
+                SSL_VERIFY_CLIENT_ONCE;
+            verify_args.depth = atoi(opt_arg());
+            if (!s_quiet)
+                BIO_printf(bio_err,
+                           "verify depth is %d, must return a certificate\n",
+                           verify_args.depth);
+            break;
+        case OPT_CONTEXT:
+            context = (unsigned char *)opt_arg();
+            break;
+        case OPT_CERT:
+            s_cert_file = opt_arg();
+            break;
+        case OPT_NAMEOPT:
+            if (!set_nameopt(opt_arg()))
+                goto end;
+            break;
+        case OPT_CRL:
+            crl_file = opt_arg();
+            break;
+        case OPT_CRL_DOWNLOAD:
+            crl_download = 1;
+            break;
+        case OPT_SERVERINFO:
+            s_serverinfo_file = opt_arg();
+            break;
+        case OPT_CERTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &s_cert_format))
+                goto opthelp;
+            break;
+        case OPT_KEY:
+            s_key_file = opt_arg();
+            break;
+        case OPT_KEYFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_ANY, &s_key_format))
+                goto opthelp;
+            break;
+        case OPT_PASS:
+            passarg = opt_arg();
+            break;
+        case OPT_CERT_CHAIN:
+            s_chain_file = opt_arg();
+            break;
+        case OPT_DHPARAM:
+#ifndef OPENSSL_NO_DH
+            dhfile = opt_arg();
+#endif
+            break;
+        case OPT_DCERTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &s_dcert_format))
+                goto opthelp;
+            break;
+        case OPT_DCERT:
+            s_dcert_file = opt_arg();
+            break;
+        case OPT_DKEYFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &s_dkey_format))
+                goto opthelp;
+            break;
+        case OPT_DPASS:
+            dpassarg = opt_arg();
+            break;
+        case OPT_DKEY:
+            s_dkey_file = opt_arg();
+            break;
+        case OPT_DCERT_CHAIN:
+            s_dchain_file = opt_arg();
+            break;
+        case OPT_NOCERT:
+            nocert = 1;
+            break;
+        case OPT_CAPATH:
+            CApath = opt_arg();
+            break;
+        case OPT_NOCAPATH:
+            noCApath = 1;
+            break;
+        case OPT_CHAINCAPATH:
+            chCApath = opt_arg();
+            break;
+        case OPT_VERIFYCAPATH:
+            vfyCApath = opt_arg();
+            break;
+        case OPT_NO_CACHE:
+            no_cache = 1;
+            break;
+        case OPT_EXT_CACHE:
+            ext_cache = 1;
+            break;
+        case OPT_CRLFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &crl_format))
+                goto opthelp;
+            break;
+        case OPT_S_CASES:
+        case OPT_S_NUM_TICKETS:
+        case OPT_ANTI_REPLAY:
+        case OPT_NO_ANTI_REPLAY:
+            if (ssl_args == NULL)
+                ssl_args = sk_OPENSSL_STRING_new_null();
+            if (ssl_args == NULL
+                || !sk_OPENSSL_STRING_push(ssl_args, opt_flag())
+                || !sk_OPENSSL_STRING_push(ssl_args, opt_arg())) {
+                BIO_printf(bio_err, "%s: Memory allocation failure\n", prog);
+                goto end;
+            }
+            break;
+        case OPT_V_CASES:
+            if (!opt_verify(o, vpm))
+                goto end;
+            vpmtouched++;
+            break;
+        case OPT_X_CASES:
+            if (!args_excert(o, &exc))
+                goto end;
+            break;
+        case OPT_VERIFY_RET_ERROR:
+            verify_args.return_error = 1;
+            break;
+        case OPT_VERIFY_QUIET:
+            verify_args.quiet = 1;
+            break;
+        case OPT_BUILD_CHAIN:
+            build_chain = 1;
+            break;
+        case OPT_CAFILE:
+            CAfile = opt_arg();
+            break;
+        case OPT_NOCAFILE:
+            noCAfile = 1;
+            break;
+        case OPT_CHAINCAFILE:
+            chCAfile = opt_arg();
+            break;
+        case OPT_VERIFYCAFILE:
+            vfyCAfile = opt_arg();
+            break;
+        case OPT_NBIO:
+            s_nbio = 1;
+            break;
+        case OPT_NBIO_TEST:
+            s_nbio = s_nbio_test = 1;
+            break;
+        case OPT_IGN_EOF:
+            s_ign_eof = 1;
+            break;
+        case OPT_NO_IGN_EOF:
+            s_ign_eof = 0;
+            break;
+        case OPT_DEBUG:
+            s_debug = 1;
+            break;
+        case OPT_TLSEXTDEBUG:
+            s_tlsextdebug = 1;
+            break;
+        case OPT_STATUS:
+#ifndef OPENSSL_NO_OCSP
+            s_tlsextstatus = 1;
+#endif
+            break;
+        case OPT_STATUS_VERBOSE:
+#ifndef OPENSSL_NO_OCSP
+            s_tlsextstatus = tlscstatp.verbose = 1;
+#endif
+            break;
+        case OPT_STATUS_TIMEOUT:
+#ifndef OPENSSL_NO_OCSP
+            s_tlsextstatus = 1;
+            tlscstatp.timeout = atoi(opt_arg());
+#endif
+            break;
+        case OPT_STATUS_URL:
+#ifndef OPENSSL_NO_OCSP
+            s_tlsextstatus = 1;
+            if (!OCSP_parse_url(opt_arg(),
+                                &tlscstatp.host,
+                                &tlscstatp.port,
+                                &tlscstatp.path, &tlscstatp.use_ssl)) {
+                BIO_printf(bio_err, "Error parsing URL\n");
+                goto end;
+            }
+#endif
+            break;
+        case OPT_STATUS_FILE:
+#ifndef OPENSSL_NO_OCSP
+            s_tlsextstatus = 1;
+            tlscstatp.respin = opt_arg();
+#endif
+            break;
+        case OPT_MSG:
+            s_msg = 1;
+            break;
+        case OPT_MSGFILE:
+            bio_s_msg = BIO_new_file(opt_arg(), "w");
+            break;
+        case OPT_TRACE:
+#ifndef OPENSSL_NO_SSL_TRACE
+            s_msg = 2;
+#endif
+            break;
+        case OPT_SECURITY_DEBUG:
+            sdebug = 1;
+            break;
+        case OPT_SECURITY_DEBUG_VERBOSE:
+            sdebug = 2;
+            break;
+        case OPT_STATE:
+            state = 1;
+            break;
+        case OPT_CRLF:
+            s_crlf = 1;
+            break;
+        case OPT_QUIET:
+            s_quiet = 1;
+            break;
+        case OPT_BRIEF:
+            s_quiet = s_brief = verify_args.quiet = 1;
+            break;
+        case OPT_NO_DHE:
+#ifndef OPENSSL_NO_DH
+            no_dhe = 1;
+#endif
+            break;
+        case OPT_NO_RESUME_EPHEMERAL:
+            no_resume_ephemeral = 1;
+            break;
+        case OPT_PSK_IDENTITY:
+            psk_identity = opt_arg();
+            break;
+        case OPT_PSK_HINT:
+#ifndef OPENSSL_NO_PSK
+            psk_identity_hint = opt_arg();
+#endif
+            break;
+        case OPT_PSK:
+            for (p = psk_key = opt_arg(); *p; p++) {
+                if (isxdigit(_UC(*p)))
+                    continue;
+                BIO_printf(bio_err, "Not a hex number '%s'\n", psk_key);
+                goto end;
+            }
+            break;
+        case OPT_PSK_SESS:
+            psksessf = opt_arg();
+            break;
+        case OPT_SRPVFILE:
+#ifndef OPENSSL_NO_SRP
+            srp_verifier_file = opt_arg();
+            if (min_version < TLS1_VERSION)
+                min_version = TLS1_VERSION;
+#endif
+            break;
+        case OPT_SRPUSERSEED:
+#ifndef OPENSSL_NO_SRP
+            srpuserseed = opt_arg();
+            if (min_version < TLS1_VERSION)
+                min_version = TLS1_VERSION;
+#endif
+            break;
+        case OPT_REV:
+            rev = 1;
+            break;
+        case OPT_WWW:
+            www = 1;
+            break;
+        case OPT_UPPER_WWW:
+            www = 2;
+            break;
+        case OPT_HTTP:
+            www = 3;
+            break;
+        case OPT_SSL_CONFIG:
+            ssl_config = opt_arg();
+            break;
+        case OPT_SSL3:
+            min_version = SSL3_VERSION;
+            max_version = SSL3_VERSION;
+            break;
+        case OPT_TLS1_3:
+            min_version = TLS1_3_VERSION;
+            max_version = TLS1_3_VERSION;
+            break;
+        case OPT_TLS1_2:
+            min_version = TLS1_2_VERSION;
+            max_version = TLS1_2_VERSION;
+            break;
+        case OPT_TLS1_1:
+            min_version = TLS1_1_VERSION;
+            max_version = TLS1_1_VERSION;
+            break;
+        case OPT_TLS1:
+            min_version = TLS1_VERSION;
+            max_version = TLS1_VERSION;
+            break;
+        case OPT_DTLS:
+#ifndef OPENSSL_NO_DTLS
+            meth = DTLS_server_method();
+            socket_type = SOCK_DGRAM;
+#endif
+            break;
+        case OPT_DTLS1:
+#ifndef OPENSSL_NO_DTLS
+            meth = DTLS_server_method();
+            min_version = DTLS1_VERSION;
+            max_version = DTLS1_VERSION;
+            socket_type = SOCK_DGRAM;
+#endif
+            break;
+        case OPT_DTLS1_2:
+#ifndef OPENSSL_NO_DTLS
+            meth = DTLS_server_method();
+            min_version = DTLS1_2_VERSION;
+            max_version = DTLS1_2_VERSION;
+            socket_type = SOCK_DGRAM;
+#endif
+            break;
+        case OPT_SCTP:
+#ifndef OPENSSL_NO_SCTP
+            protocol = IPPROTO_SCTP;
+#endif
+            break;
+        case OPT_SCTP_LABEL_BUG:
+#ifndef OPENSSL_NO_SCTP
+            sctp_label_bug = 1;
+#endif
+            break;
+        case OPT_TIMEOUT:
+#ifndef OPENSSL_NO_DTLS
+            enable_timeouts = 1;
+#endif
+            break;
+        case OPT_MTU:
+#ifndef OPENSSL_NO_DTLS
+            socket_mtu = atol(opt_arg());
+#endif
+            break;
+        case OPT_LISTEN:
+#ifndef OPENSSL_NO_DTLS
+            dtlslisten = 1;
+#endif
+            break;
+        case OPT_STATELESS:
+            stateless = 1;
+            break;
+        case OPT_ID_PREFIX:
+            session_id_prefix = opt_arg();
+            break;
+        case OPT_ENGINE:
+            engine = setup_engine(opt_arg(), 1);
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_SERVERNAME:
+            tlsextcbp.servername = opt_arg();
+            break;
+        case OPT_SERVERNAME_FATAL:
+            tlsextcbp.extension_error = SSL_TLSEXT_ERR_ALERT_FATAL;
+            break;
+        case OPT_CERT2:
+            s_cert_file2 = opt_arg();
+            break;
+        case OPT_KEY2:
+            s_key_file2 = opt_arg();
+            break;
+        case OPT_NEXTPROTONEG:
+# ifndef OPENSSL_NO_NEXTPROTONEG
+            next_proto_neg_in = opt_arg();
+#endif
+            break;
+        case OPT_ALPN:
+            alpn_in = opt_arg();
+            break;
+        case OPT_SRTP_PROFILES:
+#ifndef OPENSSL_NO_SRTP
+            srtp_profiles = opt_arg();
+#endif
+            break;
+        case OPT_KEYMATEXPORT:
+            keymatexportlabel = opt_arg();
+            break;
+        case OPT_KEYMATEXPORTLEN:
+            keymatexportlen = atoi(opt_arg());
+            break;
+        case OPT_ASYNC:
+            async = 1;
+            break;
+        case OPT_MAX_SEND_FRAG:
+            max_send_fragment = atoi(opt_arg());
+            break;
+        case OPT_SPLIT_SEND_FRAG:
+            split_send_fragment = atoi(opt_arg());
+            break;
+        case OPT_MAX_PIPELINES:
+            max_pipelines = atoi(opt_arg());
+            break;
+        case OPT_READ_BUF:
+            read_buf_len = atoi(opt_arg());
+            break;
+        case OPT_KEYLOG_FILE:
+            keylog_file = opt_arg();
+            break;
+        case OPT_MAX_EARLY:
+            max_early_data = atoi(opt_arg());
+            if (max_early_data < 0) {
+                BIO_printf(bio_err, "Invalid value for max_early_data\n");
+                goto end;
+            }
+            break;
+        case OPT_RECV_MAX_EARLY:
+            recv_max_early_data = atoi(opt_arg());
+            if (recv_max_early_data < 0) {
+                BIO_printf(bio_err, "Invalid value for recv_max_early_data\n");
+                goto end;
+            }
+            break;
+        case OPT_EARLY_DATA:
+            early_data = 1;
+            if (max_early_data == -1)
+                max_early_data = SSL3_RT_MAX_PLAIN_LENGTH;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+
+#ifndef OPENSSL_NO_NEXTPROTONEG
+    if (min_version == TLS1_3_VERSION && next_proto_neg_in != NULL) {
+        BIO_printf(bio_err, "Cannot supply -nextprotoneg with TLSv1.3\n");
+        goto opthelp;
+    }
+#endif
+#ifndef OPENSSL_NO_DTLS
+    if (www && socket_type == SOCK_DGRAM) {
+        BIO_printf(bio_err, "Can't use -HTTP, -www or -WWW with DTLS\n");
+        goto end;
+    }
+
+    if (dtlslisten && socket_type != SOCK_DGRAM) {
+        BIO_printf(bio_err, "Can only use -listen with DTLS\n");
+        goto end;
+    }
+#endif
+
+    if (stateless && socket_type != SOCK_STREAM) {
+        BIO_printf(bio_err, "Can only use --stateless with TLS\n");
+        goto end;
+    }
+
+#ifdef AF_UNIX
+    if (socket_family == AF_UNIX && socket_type != SOCK_STREAM) {
+        BIO_printf(bio_err,
+                   "Can't use unix sockets and datagrams together\n");
+        goto end;
+    }
+#endif
+    if (early_data && (www > 0 || rev)) {
+        BIO_printf(bio_err,
+                   "Can't use -early_data in combination with -www, -WWW, -HTTP, or -rev\n");
+        goto end;
+    }
+
+#ifndef OPENSSL_NO_SCTP
+    if (protocol == IPPROTO_SCTP) {
+        if (socket_type != SOCK_DGRAM) {
+            BIO_printf(bio_err, "Can't use -sctp without DTLS\n");
+            goto end;
+        }
+        /* SCTP is unusual. It uses DTLS over a SOCK_STREAM protocol */
+        socket_type = SOCK_STREAM;
+    }
+#endif
+
+    if (!app_passwd(passarg, dpassarg, &pass, &dpass)) {
+        BIO_printf(bio_err, "Error getting password\n");
+        goto end;
+    }
+
+    if (s_key_file == NULL)
+        s_key_file = s_cert_file;
+
+    if (s_key_file2 == NULL)
+        s_key_file2 = s_cert_file2;
+
+    if (!load_excert(&exc))
+        goto end;
+
+    if (nocert == 0) {
+        s_key = load_key(s_key_file, s_key_format, 0, pass, engine,
+                         "server certificate private key file");
+        if (s_key == NULL) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+
+        s_cert = load_cert(s_cert_file, s_cert_format,
+                           "server certificate file");
+
+        if (s_cert == NULL) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        if (s_chain_file != NULL) {
+            if (!load_certs(s_chain_file, &s_chain, FORMAT_PEM, NULL,
+                            "server certificate chain"))
+                goto end;
+        }
+
+        if (tlsextcbp.servername != NULL) {
+            s_key2 = load_key(s_key_file2, s_key_format, 0, pass, engine,
+                              "second server certificate private key file");
+            if (s_key2 == NULL) {
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+
+            s_cert2 = load_cert(s_cert_file2, s_cert_format,
+                                "second server certificate file");
+
+            if (s_cert2 == NULL) {
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+        }
+    }
+#if !defined(OPENSSL_NO_NEXTPROTONEG)
+    if (next_proto_neg_in) {
+        next_proto.data = next_protos_parse(&next_proto.len, next_proto_neg_in);
+        if (next_proto.data == NULL)
+            goto end;
+    }
+#endif
+    alpn_ctx.data = NULL;
+    if (alpn_in) {
+        alpn_ctx.data = next_protos_parse(&alpn_ctx.len, alpn_in);
+        if (alpn_ctx.data == NULL)
+            goto end;
+    }
+
+    if (crl_file != NULL) {
+        X509_CRL *crl;
+        crl = load_crl(crl_file, crl_format);
+        if (crl == NULL) {
+            BIO_puts(bio_err, "Error loading CRL\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        crls = sk_X509_CRL_new_null();
+        if (crls == NULL || !sk_X509_CRL_push(crls, crl)) {
+            BIO_puts(bio_err, "Error adding CRL\n");
+            ERR_print_errors(bio_err);
+            X509_CRL_free(crl);
+            goto end;
+        }
+    }
+
+    if (s_dcert_file != NULL) {
+
+        if (s_dkey_file == NULL)
+            s_dkey_file = s_dcert_file;
+
+        s_dkey = load_key(s_dkey_file, s_dkey_format,
+                          0, dpass, engine, "second certificate private key file");
+        if (s_dkey == NULL) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+
+        s_dcert = load_cert(s_dcert_file, s_dcert_format,
+                            "second server certificate file");
+
+        if (s_dcert == NULL) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        if (s_dchain_file != NULL) {
+            if (!load_certs(s_dchain_file, &s_dchain, FORMAT_PEM, NULL,
+                            "second server certificate chain"))
+                goto end;
+        }
+
+    }
+
+    if (bio_s_out == NULL) {
+        if (s_quiet && !s_debug) {
+            bio_s_out = BIO_new(BIO_s_null());
+            if (s_msg && bio_s_msg == NULL)
+                bio_s_msg = dup_bio_out(FORMAT_TEXT);
+        } else {
+            if (bio_s_out == NULL)
+                bio_s_out = dup_bio_out(FORMAT_TEXT);
+        }
+    }
+#if !defined(OPENSSL_NO_RSA) || !defined(OPENSSL_NO_DSA) || !defined(OPENSSL_NO_EC)
+    if (nocert)
+#endif
+    {
+        s_cert_file = NULL;
+        s_key_file = NULL;
+        s_dcert_file = NULL;
+        s_dkey_file = NULL;
+        s_cert_file2 = NULL;
+        s_key_file2 = NULL;
+    }
+
+    ctx = SSL_CTX_new(meth);
+    if (ctx == NULL) {
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    SSL_CTX_clear_mode(ctx, SSL_MODE_AUTO_RETRY);
+
+    if (sdebug)
+        ssl_ctx_security_debug(ctx, sdebug);
+
+    if (!config_ctx(cctx, ssl_args, ctx))
+        goto end;
+
+    if (ssl_config) {
+        if (SSL_CTX_config(ctx, ssl_config) == 0) {
+            BIO_printf(bio_err, "Error using configuration \"%s\"\n",
+                       ssl_config);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+#ifndef OPENSSL_NO_SCTP
+    if (protocol == IPPROTO_SCTP && sctp_label_bug == 1)
+        SSL_CTX_set_mode(ctx, SSL_MODE_DTLS_SCTP_LABEL_LENGTH_BUG);
+#endif
+
+    if (min_version != 0
+        && SSL_CTX_set_min_proto_version(ctx, min_version) == 0)
+        goto end;
+    if (max_version != 0
+        && SSL_CTX_set_max_proto_version(ctx, max_version) == 0)
+        goto end;
+
+    if (session_id_prefix) {
+        if (strlen(session_id_prefix) >= 32)
+            BIO_printf(bio_err,
+                       "warning: id_prefix is too long, only one new session will be possible\n");
+        if (!SSL_CTX_set_generate_session_id(ctx, generate_session_id)) {
+            BIO_printf(bio_err, "error setting 'id_prefix'\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        BIO_printf(bio_err, "id_prefix '%s' set.\n", session_id_prefix);
+    }
+    SSL_CTX_set_quiet_shutdown(ctx, 1);
+    if (exc != NULL)
+        ssl_ctx_set_excert(ctx, exc);
+
+    if (state)
+        SSL_CTX_set_info_callback(ctx, apps_ssl_info_callback);
+    if (no_cache)
+        SSL_CTX_set_session_cache_mode(ctx, SSL_SESS_CACHE_OFF);
+    else if (ext_cache)
+        init_session_cache_ctx(ctx);
+    else
+        SSL_CTX_sess_set_cache_size(ctx, 128);
+
+    if (async) {
+        SSL_CTX_set_mode(ctx, SSL_MODE_ASYNC);
+    }
+
+    if (max_send_fragment > 0
+        && !SSL_CTX_set_max_send_fragment(ctx, max_send_fragment)) {
+        BIO_printf(bio_err, "%s: Max send fragment size %u is out of permitted range\n",
+                   prog, max_send_fragment);
+        goto end;
+    }
+
+    if (split_send_fragment > 0
+        && !SSL_CTX_set_split_send_fragment(ctx, split_send_fragment)) {
+        BIO_printf(bio_err, "%s: Split send fragment size %u is out of permitted range\n",
+                   prog, split_send_fragment);
+        goto end;
+    }
+    if (max_pipelines > 0
+        && !SSL_CTX_set_max_pipelines(ctx, max_pipelines)) {
+        BIO_printf(bio_err, "%s: Max pipelines %u is out of permitted range\n",
+                   prog, max_pipelines);
+        goto end;
+    }
+
+    if (read_buf_len > 0) {
+        SSL_CTX_set_default_read_buffer_len(ctx, read_buf_len);
+    }
+#ifndef OPENSSL_NO_SRTP
+    if (srtp_profiles != NULL) {
+        /* Returns 0 on success! */
+        if (SSL_CTX_set_tlsext_use_srtp(ctx, srtp_profiles) != 0) {
+            BIO_printf(bio_err, "Error setting SRTP profile\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+#endif
+
+    if (!ctx_set_verify_locations(ctx, CAfile, CApath, noCAfile, noCApath)) {
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+    if (vpmtouched && !SSL_CTX_set1_param(ctx, vpm)) {
+        BIO_printf(bio_err, "Error setting verify params\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    ssl_ctx_add_crls(ctx, crls, 0);
+
+    if (!ssl_load_stores(ctx, vfyCApath, vfyCAfile, chCApath, chCAfile,
+                         crls, crl_download)) {
+        BIO_printf(bio_err, "Error loading store locations\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    if (s_cert2) {
+        ctx2 = SSL_CTX_new(meth);
+        if (ctx2 == NULL) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (ctx2 != NULL) {
+        BIO_printf(bio_s_out, "Setting secondary ctx parameters\n");
+
+        if (sdebug)
+            ssl_ctx_security_debug(ctx, sdebug);
+
+        if (session_id_prefix) {
+            if (strlen(session_id_prefix) >= 32)
+                BIO_printf(bio_err,
+                           "warning: id_prefix is too long, only one new session will be possible\n");
+            if (!SSL_CTX_set_generate_session_id(ctx2, generate_session_id)) {
+                BIO_printf(bio_err, "error setting 'id_prefix'\n");
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            BIO_printf(bio_err, "id_prefix '%s' set.\n", session_id_prefix);
+        }
+        SSL_CTX_set_quiet_shutdown(ctx2, 1);
+        if (exc != NULL)
+            ssl_ctx_set_excert(ctx2, exc);
+
+        if (state)
+            SSL_CTX_set_info_callback(ctx2, apps_ssl_info_callback);
+
+        if (no_cache)
+            SSL_CTX_set_session_cache_mode(ctx2, SSL_SESS_CACHE_OFF);
+        else if (ext_cache)
+            init_session_cache_ctx(ctx2);
+        else
+            SSL_CTX_sess_set_cache_size(ctx2, 128);
+
+        if (async)
+            SSL_CTX_set_mode(ctx2, SSL_MODE_ASYNC);
+
+        if (!ctx_set_verify_locations(ctx2, CAfile, CApath, noCAfile,
+                                      noCApath)) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        if (vpmtouched && !SSL_CTX_set1_param(ctx2, vpm)) {
+            BIO_printf(bio_err, "Error setting verify params\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+
+        ssl_ctx_add_crls(ctx2, crls, 0);
+        if (!config_ctx(cctx, ssl_args, ctx2))
+            goto end;
+    }
+#ifndef OPENSSL_NO_NEXTPROTONEG
+    if (next_proto.data)
+        SSL_CTX_set_next_protos_advertised_cb(ctx, next_proto_cb,
+                                              &next_proto);
+#endif
+    if (alpn_ctx.data)
+        SSL_CTX_set_alpn_select_cb(ctx, alpn_cb, &alpn_ctx);
+
+#ifndef OPENSSL_NO_DH
+    if (!no_dhe) {
+        DH *dh = NULL;
+
+        if (dhfile != NULL)
+            dh = load_dh_param(dhfile);
+        else if (s_cert_file != NULL)
+            dh = load_dh_param(s_cert_file);
+
+        if (dh != NULL) {
+            BIO_printf(bio_s_out, "Setting temp DH parameters\n");
+        } else {
+            BIO_printf(bio_s_out, "Using default temp DH parameters\n");
+        }
+        (void)BIO_flush(bio_s_out);
+
+        if (dh == NULL) {
+            SSL_CTX_set_dh_auto(ctx, 1);
+        } else if (!SSL_CTX_set_tmp_dh(ctx, dh)) {
+            BIO_puts(bio_err, "Error setting temp DH parameters\n");
+            ERR_print_errors(bio_err);
+            DH_free(dh);
+            goto end;
+        }
+
+        if (ctx2 != NULL) {
+            if (!dhfile) {
+                DH *dh2 = load_dh_param(s_cert_file2);
+                if (dh2 != NULL) {
+                    BIO_printf(bio_s_out, "Setting temp DH parameters\n");
+                    (void)BIO_flush(bio_s_out);
+
+                    DH_free(dh);
+                    dh = dh2;
+                }
+            }
+            if (dh == NULL) {
+                SSL_CTX_set_dh_auto(ctx2, 1);
+            } else if (!SSL_CTX_set_tmp_dh(ctx2, dh)) {
+                BIO_puts(bio_err, "Error setting temp DH parameters\n");
+                ERR_print_errors(bio_err);
+                DH_free(dh);
+                goto end;
+            }
+        }
+        DH_free(dh);
+    }
+#endif
+
+    if (!set_cert_key_stuff(ctx, s_cert, s_key, s_chain, build_chain))
+        goto end;
+
+    if (s_serverinfo_file != NULL
+        && !SSL_CTX_use_serverinfo_file(ctx, s_serverinfo_file)) {
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    if (ctx2 != NULL
+        && !set_cert_key_stuff(ctx2, s_cert2, s_key2, NULL, build_chain))
+        goto end;
+
+    if (s_dcert != NULL) {
+        if (!set_cert_key_stuff(ctx, s_dcert, s_dkey, s_dchain, build_chain))
+            goto end;
+    }
+
+    if (no_resume_ephemeral) {
+        SSL_CTX_set_not_resumable_session_callback(ctx,
+                                                   not_resumable_sess_cb);
+
+        if (ctx2 != NULL)
+            SSL_CTX_set_not_resumable_session_callback(ctx2,
+                                                       not_resumable_sess_cb);
+    }
+#ifndef OPENSSL_NO_PSK
+    if (psk_key != NULL) {
+        if (s_debug)
+            BIO_printf(bio_s_out, "PSK key given, setting server callback\n");
+        SSL_CTX_set_psk_server_callback(ctx, psk_server_cb);
+    }
+
+    if (!SSL_CTX_use_psk_identity_hint(ctx, psk_identity_hint)) {
+        BIO_printf(bio_err, "error setting PSK identity hint to context\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+#endif
+    if (psksessf != NULL) {
+        BIO *stmp = BIO_new_file(psksessf, "r");
+
+        if (stmp == NULL) {
+            BIO_printf(bio_err, "Can't open PSK session file %s\n", psksessf);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        psksess = PEM_read_bio_SSL_SESSION(stmp, NULL, 0, NULL);
+        BIO_free(stmp);
+        if (psksess == NULL) {
+            BIO_printf(bio_err, "Can't read PSK session file %s\n", psksessf);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+
+    }
+
+    if (psk_key != NULL || psksess != NULL)
+        SSL_CTX_set_psk_find_session_callback(ctx, psk_find_session_cb);
+
+    SSL_CTX_set_verify(ctx, s_server_verify, verify_callback);
+    if (!SSL_CTX_set_session_id_context(ctx,
+                                        (void *)&s_server_session_id_context,
+                                        sizeof(s_server_session_id_context))) {
+        BIO_printf(bio_err, "error setting session id context\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    /* Set DTLS cookie generation and verification callbacks */
+    SSL_CTX_set_cookie_generate_cb(ctx, generate_cookie_callback);
+    SSL_CTX_set_cookie_verify_cb(ctx, verify_cookie_callback);
+
+    /* Set TLS1.3 cookie generation and verification callbacks */
+    SSL_CTX_set_stateless_cookie_generate_cb(ctx, generate_stateless_cookie_callback);
+    SSL_CTX_set_stateless_cookie_verify_cb(ctx, verify_stateless_cookie_callback);
+
+    if (ctx2 != NULL) {
+        SSL_CTX_set_verify(ctx2, s_server_verify, verify_callback);
+        if (!SSL_CTX_set_session_id_context(ctx2,
+                    (void *)&s_server_session_id_context,
+                    sizeof(s_server_session_id_context))) {
+            BIO_printf(bio_err, "error setting session id context\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        tlsextcbp.biodebug = bio_s_out;
+        SSL_CTX_set_tlsext_servername_callback(ctx2, ssl_servername_cb);
+        SSL_CTX_set_tlsext_servername_arg(ctx2, &tlsextcbp);
+        SSL_CTX_set_tlsext_servername_callback(ctx, ssl_servername_cb);
+        SSL_CTX_set_tlsext_servername_arg(ctx, &tlsextcbp);
+    }
+
+#ifndef OPENSSL_NO_SRP
+    if (srp_verifier_file != NULL) {
+        srp_callback_parm.vb = SRP_VBASE_new(srpuserseed);
+        srp_callback_parm.user = NULL;
+        srp_callback_parm.login = NULL;
+        if ((ret =
+             SRP_VBASE_init(srp_callback_parm.vb,
+                            srp_verifier_file)) != SRP_NO_ERROR) {
+            BIO_printf(bio_err,
+                       "Cannot initialize SRP verifier file \"%s\":ret=%d\n",
+                       srp_verifier_file, ret);
+            goto end;
+        }
+        SSL_CTX_set_verify(ctx, SSL_VERIFY_NONE, verify_callback);
+        SSL_CTX_set_srp_cb_arg(ctx, &srp_callback_parm);
+        SSL_CTX_set_srp_username_callback(ctx, ssl_srp_server_param_cb);
+    } else
+#endif
+    if (CAfile != NULL) {
+        SSL_CTX_set_client_CA_list(ctx, SSL_load_client_CA_file(CAfile));
+
+        if (ctx2)
+            SSL_CTX_set_client_CA_list(ctx2, SSL_load_client_CA_file(CAfile));
+    }
+#ifndef OPENSSL_NO_OCSP
+    if (s_tlsextstatus) {
+        SSL_CTX_set_tlsext_status_cb(ctx, cert_status_cb);
+        SSL_CTX_set_tlsext_status_arg(ctx, &tlscstatp);
+        if (ctx2) {
+            SSL_CTX_set_tlsext_status_cb(ctx2, cert_status_cb);
+            SSL_CTX_set_tlsext_status_arg(ctx2, &tlscstatp);
+        }
+    }
+#endif
+    if (set_keylog_file(ctx, keylog_file))
+        goto end;
+
+    if (max_early_data >= 0)
+        SSL_CTX_set_max_early_data(ctx, max_early_data);
+    if (recv_max_early_data >= 0)
+        SSL_CTX_set_recv_max_early_data(ctx, recv_max_early_data);
+
+    if (rev)
+        server_cb = rev_body;
+    else if (www)
+        server_cb = www_body;
+    else
+        server_cb = sv_body;
+#ifdef AF_UNIX
+    if (socket_family == AF_UNIX
+        && unlink_unix_path)
+        unlink(host);
+#endif
+    do_server(&accept_socket, host, port, socket_family, socket_type, protocol,
+              server_cb, context, naccept, bio_s_out);
+    print_stats(bio_s_out, ctx);
+    ret = 0;
+ end:
+    SSL_CTX_free(ctx);
+    SSL_SESSION_free(psksess);
+    set_keylog_file(NULL, NULL);
+    X509_free(s_cert);
+    sk_X509_CRL_pop_free(crls, X509_CRL_free);
+    X509_free(s_dcert);
+    EVP_PKEY_free(s_key);
+    EVP_PKEY_free(s_dkey);
+    sk_X509_pop_free(s_chain, X509_free);
+    sk_X509_pop_free(s_dchain, X509_free);
+    OPENSSL_free(pass);
+    OPENSSL_free(dpass);
+    OPENSSL_free(host);
+    OPENSSL_free(port);
+    X509_VERIFY_PARAM_free(vpm);
+    free_sessions();
+    OPENSSL_free(tlscstatp.host);
+    OPENSSL_free(tlscstatp.port);
+    OPENSSL_free(tlscstatp.path);
+    SSL_CTX_free(ctx2);
+    X509_free(s_cert2);
+    EVP_PKEY_free(s_key2);
+#ifndef OPENSSL_NO_NEXTPROTONEG
+    OPENSSL_free(next_proto.data);
+#endif
+    OPENSSL_free(alpn_ctx.data);
+    ssl_excert_free(exc);
+    sk_OPENSSL_STRING_free(ssl_args);
+    SSL_CONF_CTX_free(cctx);
+    release_engine(engine);
+    BIO_free(bio_s_out);
+    bio_s_out = NULL;
+    BIO_free(bio_s_msg);
+    bio_s_msg = NULL;
+#ifdef CHARSET_EBCDIC
+    BIO_meth_free(methods_ebcdic);
+#endif
+    return ret;
+}
+
+static void print_stats(BIO *bio, SSL_CTX *ssl_ctx)
+{
+    BIO_printf(bio, "%4ld items in the session cache\n",
+               SSL_CTX_sess_number(ssl_ctx));
+    BIO_printf(bio, "%4ld client connects (SSL_connect())\n",
+               SSL_CTX_sess_connect(ssl_ctx));
+    BIO_printf(bio, "%4ld client renegotiates (SSL_connect())\n",
+               SSL_CTX_sess_connect_renegotiate(ssl_ctx));
+    BIO_printf(bio, "%4ld client connects that finished\n",
+               SSL_CTX_sess_connect_good(ssl_ctx));
+    BIO_printf(bio, "%4ld server accepts (SSL_accept())\n",
+               SSL_CTX_sess_accept(ssl_ctx));
+    BIO_printf(bio, "%4ld server renegotiates (SSL_accept())\n",
+               SSL_CTX_sess_accept_renegotiate(ssl_ctx));
+    BIO_printf(bio, "%4ld server accepts that finished\n",
+               SSL_CTX_sess_accept_good(ssl_ctx));
+    BIO_printf(bio, "%4ld session cache hits\n", SSL_CTX_sess_hits(ssl_ctx));
+    BIO_printf(bio, "%4ld session cache misses\n",
+               SSL_CTX_sess_misses(ssl_ctx));
+    BIO_printf(bio, "%4ld session cache timeouts\n",
+               SSL_CTX_sess_timeouts(ssl_ctx));
+    BIO_printf(bio, "%4ld callback cache hits\n",
+               SSL_CTX_sess_cb_hits(ssl_ctx));
+    BIO_printf(bio, "%4ld cache full overflows (%ld allowed)\n",
+               SSL_CTX_sess_cache_full(ssl_ctx),
+               SSL_CTX_sess_get_cache_size(ssl_ctx));
+}
+
+static int sv_body(int s, int stype, int prot, unsigned char *context)
+{
+    char *buf = NULL;
+    fd_set readfds;
+    int ret = 1, width;
+    int k, i;
+    unsigned long l;
+    SSL *con = NULL;
+    BIO *sbio;
+    struct timeval timeout;
+#if !(defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_MSDOS))
+    struct timeval *timeoutp;
+#endif
+#ifndef OPENSSL_NO_DTLS
+# ifndef OPENSSL_NO_SCTP
+    int isdtls = (stype == SOCK_DGRAM || prot == IPPROTO_SCTP);
+# else
+    int isdtls = (stype == SOCK_DGRAM);
+# endif
+#endif
+
+    buf = app_malloc(bufsize, "server buffer");
+    if (s_nbio) {
+        if (!BIO_socket_nbio(s, 1))
+            ERR_print_errors(bio_err);
+        else if (!s_quiet)
+            BIO_printf(bio_err, "Turned on non blocking io\n");
+    }
+
+    con = SSL_new(ctx);
+    if (con == NULL) {
+        ret = -1;
+        goto err;
+    }
+
+    if (s_tlsextdebug) {
+        SSL_set_tlsext_debug_callback(con, tlsext_cb);
+        SSL_set_tlsext_debug_arg(con, bio_s_out);
+    }
+
+    if (context != NULL
+        && !SSL_set_session_id_context(con, context,
+                                       strlen((char *)context))) {
+        BIO_printf(bio_err, "Error setting session id context\n");
+        ret = -1;
+        goto err;
+    }
+
+    if (!SSL_clear(con)) {
+        BIO_printf(bio_err, "Error clearing SSL connection\n");
+        ret = -1;
+        goto err;
+    }
+#ifndef OPENSSL_NO_DTLS
+    if (isdtls) {
+# ifndef OPENSSL_NO_SCTP
+        if (prot == IPPROTO_SCTP)
+            sbio = BIO_new_dgram_sctp(s, BIO_NOCLOSE);
+        else
+# endif
+            sbio = BIO_new_dgram(s, BIO_NOCLOSE);
+
+        if (enable_timeouts) {
+            timeout.tv_sec = 0;
+            timeout.tv_usec = DGRAM_RCV_TIMEOUT;
+            BIO_ctrl(sbio, BIO_CTRL_DGRAM_SET_RECV_TIMEOUT, 0, &timeout);
+
+            timeout.tv_sec = 0;
+            timeout.tv_usec = DGRAM_SND_TIMEOUT;
+            BIO_ctrl(sbio, BIO_CTRL_DGRAM_SET_SEND_TIMEOUT, 0, &timeout);
+        }
+
+        if (socket_mtu) {
+            if (socket_mtu < DTLS_get_link_min_mtu(con)) {
+                BIO_printf(bio_err, "MTU too small. Must be at least %ld\n",
+                           DTLS_get_link_min_mtu(con));
+                ret = -1;
+                BIO_free(sbio);
+                goto err;
+            }
+            SSL_set_options(con, SSL_OP_NO_QUERY_MTU);
+            if (!DTLS_set_link_mtu(con, socket_mtu)) {
+                BIO_printf(bio_err, "Failed to set MTU\n");
+                ret = -1;
+                BIO_free(sbio);
+                goto err;
+            }
+        } else
+            /* want to do MTU discovery */
+            BIO_ctrl(sbio, BIO_CTRL_DGRAM_MTU_DISCOVER, 0, NULL);
+
+# ifndef OPENSSL_NO_SCTP
+        if (prot != IPPROTO_SCTP)
+# endif
+            /* Turn on cookie exchange. Not necessary for SCTP */
+            SSL_set_options(con, SSL_OP_COOKIE_EXCHANGE);
+    } else
+#endif
+        sbio = BIO_new_socket(s, BIO_NOCLOSE);
+
+    if (sbio == NULL) {
+        BIO_printf(bio_err, "Unable to create BIO\n");
+        ERR_print_errors(bio_err);
+        goto err;
+    }
+
+    if (s_nbio_test) {
+        BIO *test;
+
+        test = BIO_new(BIO_f_nbio_test());
+        sbio = BIO_push(test, sbio);
+    }
+
+    SSL_set_bio(con, sbio, sbio);
+    SSL_set_accept_state(con);
+    /* SSL_set_fd(con,s); */
+
+    if (s_debug) {
+        BIO_set_callback(SSL_get_rbio(con), bio_dump_callback);
+        BIO_set_callback_arg(SSL_get_rbio(con), (char *)bio_s_out);
+    }
+    if (s_msg) {
+#ifndef OPENSSL_NO_SSL_TRACE
+        if (s_msg == 2)
+            SSL_set_msg_callback(con, SSL_trace);
+        else
+#endif
+            SSL_set_msg_callback(con, msg_cb);
+        SSL_set_msg_callback_arg(con, bio_s_msg ? bio_s_msg : bio_s_out);
+    }
+
+    if (s_tlsextdebug) {
+        SSL_set_tlsext_debug_callback(con, tlsext_cb);
+        SSL_set_tlsext_debug_arg(con, bio_s_out);
+    }
+
+    if (early_data) {
+        int write_header = 1, edret = SSL_READ_EARLY_DATA_ERROR;
+        size_t readbytes;
+
+        while (edret != SSL_READ_EARLY_DATA_FINISH) {
+            for (;;) {
+                edret = SSL_read_early_data(con, buf, bufsize, &readbytes);
+                if (edret != SSL_READ_EARLY_DATA_ERROR)
+                    break;
+
+                switch (SSL_get_error(con, 0)) {
+                case SSL_ERROR_WANT_WRITE:
+                case SSL_ERROR_WANT_ASYNC:
+                case SSL_ERROR_WANT_READ:
+                    /* Just keep trying - busy waiting */
+                    continue;
+                default:
+                    BIO_printf(bio_err, "Error reading early data\n");
+                    ERR_print_errors(bio_err);
+                    goto err;
+                }
+            }
+            if (readbytes > 0) {
+                if (write_header) {
+                    BIO_printf(bio_s_out, "Early data received:\n");
+                    write_header = 0;
+                }
+                raw_write_stdout(buf, (unsigned int)readbytes);
+                (void)BIO_flush(bio_s_out);
+            }
+        }
+        if (write_header) {
+            if (SSL_get_early_data_status(con) == SSL_EARLY_DATA_NOT_SENT)
+                BIO_printf(bio_s_out, "No early data received\n");
+            else
+                BIO_printf(bio_s_out, "Early data was rejected\n");
+        } else {
+            BIO_printf(bio_s_out, "\nEnd of early data\n");
+        }
+        if (SSL_is_init_finished(con))
+            print_connection_info(con);
+    }
+
+    if (fileno_stdin() > s)
+        width = fileno_stdin() + 1;
+    else
+        width = s + 1;
+    for (;;) {
+        int read_from_terminal;
+        int read_from_sslcon;
+
+        read_from_terminal = 0;
+        read_from_sslcon = SSL_has_pending(con)
+                           || (async && SSL_waiting_for_async(con));
+
+        if (!read_from_sslcon) {
+            FD_ZERO(&readfds);
+#if !defined(OPENSSL_SYS_WINDOWS) && !defined(OPENSSL_SYS_MSDOS)
+            openssl_fdset(fileno_stdin(), &readfds);
+#endif
+            openssl_fdset(s, &readfds);
+            /*
+             * Note: under VMS with SOCKETSHR the second parameter is
+             * currently of type (int *) whereas under other systems it is
+             * (void *) if you don't have a cast it will choke the compiler:
+             * if you do have a cast then you can either go for (int *) or
+             * (void *).
+             */
+#if defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_MSDOS)
+            /*
+             * Under DOS (non-djgpp) and Windows we can't select on stdin:
+             * only on sockets. As a workaround we timeout the select every
+             * second and check for any keypress. In a proper Windows
+             * application we wouldn't do this because it is inefficient.
+             */
+            timeout.tv_sec = 1;
+            timeout.tv_usec = 0;
+            i = select(width, (void *)&readfds, NULL, NULL, &timeout);
+            if (has_stdin_waiting())
+                read_from_terminal = 1;
+            if ((i < 0) || (!i && !read_from_terminal))
+                continue;
+#else
+            if (SSL_is_dtls(con) && DTLSv1_get_timeout(con, &timeout))
+                timeoutp = &timeout;
+            else
+                timeoutp = NULL;
+
+            i = select(width, (void *)&readfds, NULL, NULL, timeoutp);
+
+            if ((SSL_is_dtls(con)) && DTLSv1_handle_timeout(con) > 0)
+                BIO_printf(bio_err, "TIMEOUT occurred\n");
+
+            if (i <= 0)
+                continue;
+            if (FD_ISSET(fileno_stdin(), &readfds))
+                read_from_terminal = 1;
+#endif
+            if (FD_ISSET(s, &readfds))
+                read_from_sslcon = 1;
+        }
+        if (read_from_terminal) {
+            if (s_crlf) {
+                int j, lf_num;
+
+                i = raw_read_stdin(buf, bufsize / 2);
+                lf_num = 0;
+                /* both loops are skipped when i <= 0 */
+                for (j = 0; j < i; j++)
+                    if (buf[j] == '\n')
+                        lf_num++;
+                for (j = i - 1; j >= 0; j--) {
+                    buf[j + lf_num] = buf[j];
+                    if (buf[j] == '\n') {
+                        lf_num--;
+                        i++;
+                        buf[j + lf_num] = '\r';
+                    }
+                }
+                assert(lf_num == 0);
+            } else {
+                i = raw_read_stdin(buf, bufsize);
+            }
+
+            if (!s_quiet && !s_brief) {
+                if ((i <= 0) || (buf[0] == 'Q')) {
+                    BIO_printf(bio_s_out, "DONE\n");
+                    (void)BIO_flush(bio_s_out);
+                    BIO_closesocket(s);
+                    close_accept_socket();
+                    ret = -11;
+                    goto err;
+                }
+                if ((i <= 0) || (buf[0] == 'q')) {
+                    BIO_printf(bio_s_out, "DONE\n");
+                    (void)BIO_flush(bio_s_out);
+                    if (SSL_version(con) != DTLS1_VERSION)
+                        BIO_closesocket(s);
+                    /*
+                     * close_accept_socket(); ret= -11;
+                     */
+                    goto err;
+                }
+#ifndef OPENSSL_NO_HEARTBEATS
+                if ((buf[0] == 'B') && ((buf[1] == '\n') || (buf[1] == '\r'))) {
+                    BIO_printf(bio_err, "HEARTBEATING\n");
+                    SSL_heartbeat(con);
+                    i = 0;
+                    continue;
+                }
+#endif
+                if ((buf[0] == 'r') && ((buf[1] == '\n') || (buf[1] == '\r'))) {
+                    SSL_renegotiate(con);
+                    i = SSL_do_handshake(con);
+                    printf("SSL_do_handshake -> %d\n", i);
+                    i = 0;      /* 13; */
+                    continue;
+                }
+                if ((buf[0] == 'R') && ((buf[1] == '\n') || (buf[1] == '\r'))) {
+                    SSL_set_verify(con,
+                                   SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE,
+                                   NULL);
+                    SSL_renegotiate(con);
+                    i = SSL_do_handshake(con);
+                    printf("SSL_do_handshake -> %d\n", i);
+                    i = 0;      /* 13; */
+                    continue;
+                }
+                if ((buf[0] == 'K' || buf[0] == 'k')
+                        && ((buf[1] == '\n') || (buf[1] == '\r'))) {
+                    SSL_key_update(con, buf[0] == 'K' ?
+                                        SSL_KEY_UPDATE_REQUESTED
+                                        : SSL_KEY_UPDATE_NOT_REQUESTED);
+                    i = SSL_do_handshake(con);
+                    printf("SSL_do_handshake -> %d\n", i);
+                    i = 0;
+                    continue;
+                }
+                if (buf[0] == 'c' && ((buf[1] == '\n') || (buf[1] == '\r'))) {
+                    SSL_set_verify(con, SSL_VERIFY_PEER, NULL);
+                    i = SSL_verify_client_post_handshake(con);
+                    if (i == 0) {
+                        printf("Failed to initiate request\n");
+                        ERR_print_errors(bio_err);
+                    } else {
+                        i = SSL_do_handshake(con);
+                        printf("SSL_do_handshake -> %d\n", i);
+                        i = 0;
+                    }
+                    continue;
+                }
+                if (buf[0] == 'P') {
+                    static const char *str = "Lets print some clear text\n";
+                    BIO_write(SSL_get_wbio(con), str, strlen(str));
+                }
+                if (buf[0] == 'S') {
+                    print_stats(bio_s_out, SSL_get_SSL_CTX(con));
+                }
+            }
+#ifdef CHARSET_EBCDIC
+            ebcdic2ascii(buf, buf, i);
+#endif
+            l = k = 0;
+            for (;;) {
+                /* should do a select for the write */
+#ifdef RENEG
+                static count = 0;
+                if (++count == 100) {
+                    count = 0;
+                    SSL_renegotiate(con);
+                }
+#endif
+                k = SSL_write(con, &(buf[l]), (unsigned int)i);
+#ifndef OPENSSL_NO_SRP
+                while (SSL_get_error(con, k) == SSL_ERROR_WANT_X509_LOOKUP) {
+                    BIO_printf(bio_s_out, "LOOKUP renego during write\n");
+                    SRP_user_pwd_free(srp_callback_parm.user);
+                    srp_callback_parm.user =
+                        SRP_VBASE_get1_by_user(srp_callback_parm.vb,
+                                               srp_callback_parm.login);
+                    if (srp_callback_parm.user)
+                        BIO_printf(bio_s_out, "LOOKUP done %s\n",
+                                   srp_callback_parm.user->info);
+                    else
+                        BIO_printf(bio_s_out, "LOOKUP not successful\n");
+                    k = SSL_write(con, &(buf[l]), (unsigned int)i);
+                }
+#endif
+                switch (SSL_get_error(con, k)) {
+                case SSL_ERROR_NONE:
+                    break;
+                case SSL_ERROR_WANT_ASYNC:
+                    BIO_printf(bio_s_out, "Write BLOCK (Async)\n");
+                    (void)BIO_flush(bio_s_out);
+                    wait_for_async(con);
+                    break;
+                case SSL_ERROR_WANT_WRITE:
+                case SSL_ERROR_WANT_READ:
+                case SSL_ERROR_WANT_X509_LOOKUP:
+                    BIO_printf(bio_s_out, "Write BLOCK\n");
+                    (void)BIO_flush(bio_s_out);
+                    break;
+                case SSL_ERROR_WANT_ASYNC_JOB:
+                    /*
+                     * This shouldn't ever happen in s_server. Treat as an error
+                     */
+                case SSL_ERROR_SYSCALL:
+                case SSL_ERROR_SSL:
+                    BIO_printf(bio_s_out, "ERROR\n");
+                    (void)BIO_flush(bio_s_out);
+                    ERR_print_errors(bio_err);
+                    ret = 1;
+                    goto err;
+                    /* break; */
+                case SSL_ERROR_ZERO_RETURN:
+                    BIO_printf(bio_s_out, "DONE\n");
+                    (void)BIO_flush(bio_s_out);
+                    ret = 1;
+                    goto err;
+                }
+                if (k > 0) {
+                    l += k;
+                    i -= k;
+                }
+                if (i <= 0)
+                    break;
+            }
+        }
+        if (read_from_sslcon) {
+            /*
+             * init_ssl_connection handles all async events itself so if we're
+             * waiting for async then we shouldn't go back into
+             * init_ssl_connection
+             */
+            if ((!async || !SSL_waiting_for_async(con))
+                    && !SSL_is_init_finished(con)) {
+                i = init_ssl_connection(con);
+
+                if (i < 0) {
+                    ret = 0;
+                    goto err;
+                } else if (i == 0) {
+                    ret = 1;
+                    goto err;
+                }
+            } else {
+ again:
+                i = SSL_read(con, (char *)buf, bufsize);
+#ifndef OPENSSL_NO_SRP
+                while (SSL_get_error(con, i) == SSL_ERROR_WANT_X509_LOOKUP) {
+                    BIO_printf(bio_s_out, "LOOKUP renego during read\n");
+                    SRP_user_pwd_free(srp_callback_parm.user);
+                    srp_callback_parm.user =
+                        SRP_VBASE_get1_by_user(srp_callback_parm.vb,
+                                               srp_callback_parm.login);
+                    if (srp_callback_parm.user)
+                        BIO_printf(bio_s_out, "LOOKUP done %s\n",
+                                   srp_callback_parm.user->info);
+                    else
+                        BIO_printf(bio_s_out, "LOOKUP not successful\n");
+                    i = SSL_read(con, (char *)buf, bufsize);
+                }
+#endif
+                switch (SSL_get_error(con, i)) {
+                case SSL_ERROR_NONE:
+#ifdef CHARSET_EBCDIC
+                    ascii2ebcdic(buf, buf, i);
+#endif
+                    raw_write_stdout(buf, (unsigned int)i);
+                    (void)BIO_flush(bio_s_out);
+                    if (SSL_has_pending(con))
+                        goto again;
+                    break;
+                case SSL_ERROR_WANT_ASYNC:
+                    BIO_printf(bio_s_out, "Read BLOCK (Async)\n");
+                    (void)BIO_flush(bio_s_out);
+                    wait_for_async(con);
+                    break;
+                case SSL_ERROR_WANT_WRITE:
+                case SSL_ERROR_WANT_READ:
+                    BIO_printf(bio_s_out, "Read BLOCK\n");
+                    (void)BIO_flush(bio_s_out);
+                    break;
+                case SSL_ERROR_WANT_ASYNC_JOB:
+                    /*
+                     * This shouldn't ever happen in s_server. Treat as an error
+                     */
+                case SSL_ERROR_SYSCALL:
+                case SSL_ERROR_SSL:
+                    BIO_printf(bio_s_out, "ERROR\n");
+                    (void)BIO_flush(bio_s_out);
+                    ERR_print_errors(bio_err);
+                    ret = 1;
+                    goto err;
+                case SSL_ERROR_ZERO_RETURN:
+                    BIO_printf(bio_s_out, "DONE\n");
+                    (void)BIO_flush(bio_s_out);
+                    ret = 1;
+                    goto err;
+                }
+            }
+        }
+    }
+ err:
+    if (con != NULL) {
+        BIO_printf(bio_s_out, "shutting down SSL\n");
+        SSL_set_shutdown(con, SSL_SENT_SHUTDOWN | SSL_RECEIVED_SHUTDOWN);
+        SSL_free(con);
+    }
+    BIO_printf(bio_s_out, "CONNECTION CLOSED\n");
+    OPENSSL_clear_free(buf, bufsize);
+    return ret;
+}
+
+static void close_accept_socket(void)
+{
+    BIO_printf(bio_err, "shutdown accept socket\n");
+    if (accept_socket >= 0) {
+        BIO_closesocket(accept_socket);
+    }
+}
+
+static int is_retryable(SSL *con, int i)
+{
+    int err = SSL_get_error(con, i);
+
+    /* If it's not a fatal error, it must be retryable */
+    return (err != SSL_ERROR_SSL)
+           && (err != SSL_ERROR_SYSCALL)
+           && (err != SSL_ERROR_ZERO_RETURN);
+}
+
+static int init_ssl_connection(SSL *con)
+{
+    int i;
+    long verify_err;
+    int retry = 0;
+
+    if (dtlslisten || stateless) {
+        BIO_ADDR *client = NULL;
+
+        if (dtlslisten) {
+            if ((client = BIO_ADDR_new()) == NULL) {
+                BIO_printf(bio_err, "ERROR - memory\n");
+                return 0;
+            }
+            i = DTLSv1_listen(con, client);
+        } else {
+            i = SSL_stateless(con);
+        }
+        if (i > 0) {
+            BIO *wbio;
+            int fd = -1;
+
+            if (dtlslisten) {
+                wbio = SSL_get_wbio(con);
+                if (wbio) {
+                    BIO_get_fd(wbio, &fd);
+                }
+
+                if (!wbio || BIO_connect(fd, client, 0) == 0) {
+                    BIO_printf(bio_err, "ERROR - unable to connect\n");
+                    BIO_ADDR_free(client);
+                    return 0;
+                }
+
+                (void)BIO_ctrl_set_connected(wbio, client);
+                BIO_ADDR_free(client);
+                dtlslisten = 0;
+            } else {
+                stateless = 0;
+            }
+            i = SSL_accept(con);
+        } else {
+            BIO_ADDR_free(client);
+        }
+    } else {
+        do {
+            i = SSL_accept(con);
+
+            if (i <= 0)
+                retry = is_retryable(con, i);
+#ifdef CERT_CB_TEST_RETRY
+            {
+                while (i <= 0
+                        && SSL_get_error(con, i) == SSL_ERROR_WANT_X509_LOOKUP
+                        && SSL_get_state(con) == TLS_ST_SR_CLNT_HELLO) {
+                    BIO_printf(bio_err,
+                               "LOOKUP from certificate callback during accept\n");
+                    i = SSL_accept(con);
+                    if (i <= 0)
+                        retry = is_retryable(con, i);
+                }
+            }
+#endif
+
+#ifndef OPENSSL_NO_SRP
+            while (i <= 0
+                   && SSL_get_error(con, i) == SSL_ERROR_WANT_X509_LOOKUP) {
+                BIO_printf(bio_s_out, "LOOKUP during accept %s\n",
+                           srp_callback_parm.login);
+                SRP_user_pwd_free(srp_callback_parm.user);
+                srp_callback_parm.user =
+                    SRP_VBASE_get1_by_user(srp_callback_parm.vb,
+                                           srp_callback_parm.login);
+                if (srp_callback_parm.user)
+                    BIO_printf(bio_s_out, "LOOKUP done %s\n",
+                               srp_callback_parm.user->info);
+                else
+                    BIO_printf(bio_s_out, "LOOKUP not successful\n");
+                i = SSL_accept(con);
+                if (i <= 0)
+                    retry = is_retryable(con, i);
+            }
+#endif
+        } while (i < 0 && SSL_waiting_for_async(con));
+    }
+
+    if (i <= 0) {
+        if (((dtlslisten || stateless) && i == 0)
+                || (!dtlslisten && !stateless && retry)) {
+            BIO_printf(bio_s_out, "DELAY\n");
+            return 1;
+        }
+
+        BIO_printf(bio_err, "ERROR\n");
+
+        verify_err = SSL_get_verify_result(con);
+        if (verify_err != X509_V_OK) {
+            BIO_printf(bio_err, "verify error:%s\n",
+                       X509_verify_cert_error_string(verify_err));
+        }
+        /* Always print any error messages */
+        ERR_print_errors(bio_err);
+        return 0;
+    }
+
+    print_connection_info(con);
+    return 1;
+}
+
+static void print_connection_info(SSL *con)
+{
+    const char *str;
+    X509 *peer;
+    char buf[BUFSIZ];
+#if !defined(OPENSSL_NO_NEXTPROTONEG)
+    const unsigned char *next_proto_neg;
+    unsigned next_proto_neg_len;
+#endif
+    unsigned char *exportedkeymat;
+    int i;
+
+    if (s_brief)
+        print_ssl_summary(con);
+
+    PEM_write_bio_SSL_SESSION(bio_s_out, SSL_get_session(con));
+
+    peer = SSL_get_peer_certificate(con);
+    if (peer != NULL) {
+        BIO_printf(bio_s_out, "Client certificate\n");
+        PEM_write_bio_X509(bio_s_out, peer);
+        dump_cert_text(bio_s_out, peer);
+        X509_free(peer);
+        peer = NULL;
+    }
+
+    if (SSL_get_shared_ciphers(con, buf, sizeof(buf)) != NULL)
+        BIO_printf(bio_s_out, "Shared ciphers:%s\n", buf);
+    str = SSL_CIPHER_get_name(SSL_get_current_cipher(con));
+    ssl_print_sigalgs(bio_s_out, con);
+#ifndef OPENSSL_NO_EC
+    ssl_print_point_formats(bio_s_out, con);
+    ssl_print_groups(bio_s_out, con, 0);
+#endif
+    print_ca_names(bio_s_out, con);
+    BIO_printf(bio_s_out, "CIPHER is %s\n", (str != NULL) ? str : "(NONE)");
+
+#if !defined(OPENSSL_NO_NEXTPROTONEG)
+    SSL_get0_next_proto_negotiated(con, &next_proto_neg, &next_proto_neg_len);
+    if (next_proto_neg) {
+        BIO_printf(bio_s_out, "NEXTPROTO is ");
+        BIO_write(bio_s_out, next_proto_neg, next_proto_neg_len);
+        BIO_printf(bio_s_out, "\n");
+    }
+#endif
+#ifndef OPENSSL_NO_SRTP
+    {
+        SRTP_PROTECTION_PROFILE *srtp_profile
+            = SSL_get_selected_srtp_profile(con);
+
+        if (srtp_profile)
+            BIO_printf(bio_s_out, "SRTP Extension negotiated, profile=%s\n",
+                       srtp_profile->name);
+    }
+#endif
+    if (SSL_session_reused(con))
+        BIO_printf(bio_s_out, "Reused session-id\n");
+    BIO_printf(bio_s_out, "Secure Renegotiation IS%s supported\n",
+               SSL_get_secure_renegotiation_support(con) ? "" : " NOT");
+    if ((SSL_get_options(con) & SSL_OP_NO_RENEGOTIATION))
+        BIO_printf(bio_s_out, "Renegotiation is DISABLED\n");
+
+    if (keymatexportlabel != NULL) {
+        BIO_printf(bio_s_out, "Keying material exporter:\n");
+        BIO_printf(bio_s_out, "    Label: '%s'\n", keymatexportlabel);
+        BIO_printf(bio_s_out, "    Length: %i bytes\n", keymatexportlen);
+        exportedkeymat = app_malloc(keymatexportlen, "export key");
+        if (!SSL_export_keying_material(con, exportedkeymat,
+                                        keymatexportlen,
+                                        keymatexportlabel,
+                                        strlen(keymatexportlabel),
+                                        NULL, 0, 0)) {
+            BIO_printf(bio_s_out, "    Error\n");
+        } else {
+            BIO_printf(bio_s_out, "    Keying material: ");
+            for (i = 0; i < keymatexportlen; i++)
+                BIO_printf(bio_s_out, "%02X", exportedkeymat[i]);
+            BIO_printf(bio_s_out, "\n");
+        }
+        OPENSSL_free(exportedkeymat);
+    }
+
+    (void)BIO_flush(bio_s_out);
+}
+
+#ifndef OPENSSL_NO_DH
+static DH *load_dh_param(const char *dhfile)
+{
+    DH *ret = NULL;
+    BIO *bio;
+
+    if ((bio = BIO_new_file(dhfile, "r")) == NULL)
+        goto err;
+    ret = PEM_read_bio_DHparams(bio, NULL, NULL, NULL);
+ err:
+    BIO_free(bio);
+    return ret;
+}
+#endif
+
+static int www_body(int s, int stype, int prot, unsigned char *context)
+{
+    char *buf = NULL;
+    int ret = 1;
+    int i, j, k, dot;
+    SSL *con;
+    const SSL_CIPHER *c;
+    BIO *io, *ssl_bio, *sbio;
+#ifdef RENEG
+    int total_bytes = 0;
+#endif
+    int width;
+    fd_set readfds;
+
+    /* Set width for a select call if needed */
+    width = s + 1;
+
+    buf = app_malloc(bufsize, "server www buffer");
+    io = BIO_new(BIO_f_buffer());
+    ssl_bio = BIO_new(BIO_f_ssl());
+    if ((io == NULL) || (ssl_bio == NULL))
+        goto err;
+
+    if (s_nbio) {
+        if (!BIO_socket_nbio(s, 1))
+            ERR_print_errors(bio_err);
+        else if (!s_quiet)
+            BIO_printf(bio_err, "Turned on non blocking io\n");
+    }
+
+    /* lets make the output buffer a reasonable size */
+    if (!BIO_set_write_buffer_size(io, bufsize))
+        goto err;
+
+    if ((con = SSL_new(ctx)) == NULL)
+        goto err;
+
+    if (s_tlsextdebug) {
+        SSL_set_tlsext_debug_callback(con, tlsext_cb);
+        SSL_set_tlsext_debug_arg(con, bio_s_out);
+    }
+
+    if (context != NULL
+        && !SSL_set_session_id_context(con, context,
+                                       strlen((char *)context))) {
+        SSL_free(con);
+        goto err;
+    }
+
+    sbio = BIO_new_socket(s, BIO_NOCLOSE);
+    if (s_nbio_test) {
+        BIO *test;
+
+        test = BIO_new(BIO_f_nbio_test());
+        sbio = BIO_push(test, sbio);
+    }
+    SSL_set_bio(con, sbio, sbio);
+    SSL_set_accept_state(con);
+
+    /* No need to free |con| after this. Done by BIO_free(ssl_bio) */
+    BIO_set_ssl(ssl_bio, con, BIO_CLOSE);
+    BIO_push(io, ssl_bio);
+#ifdef CHARSET_EBCDIC
+    io = BIO_push(BIO_new(BIO_f_ebcdic_filter()), io);
+#endif
+
+    if (s_debug) {
+        BIO_set_callback(SSL_get_rbio(con), bio_dump_callback);
+        BIO_set_callback_arg(SSL_get_rbio(con), (char *)bio_s_out);
+    }
+    if (s_msg) {
+#ifndef OPENSSL_NO_SSL_TRACE
+        if (s_msg == 2)
+            SSL_set_msg_callback(con, SSL_trace);
+        else
+#endif
+            SSL_set_msg_callback(con, msg_cb);
+        SSL_set_msg_callback_arg(con, bio_s_msg ? bio_s_msg : bio_s_out);
+    }
+
+    for (;;) {
+        i = BIO_gets(io, buf, bufsize - 1);
+        if (i < 0) {            /* error */
+            if (!BIO_should_retry(io) && !SSL_waiting_for_async(con)) {
+                if (!s_quiet)
+                    ERR_print_errors(bio_err);
+                goto err;
+            } else {
+                BIO_printf(bio_s_out, "read R BLOCK\n");
+#ifndef OPENSSL_NO_SRP
+                if (BIO_should_io_special(io)
+                    && BIO_get_retry_reason(io) == BIO_RR_SSL_X509_LOOKUP) {
+                    BIO_printf(bio_s_out, "LOOKUP renego during read\n");
+                    SRP_user_pwd_free(srp_callback_parm.user);
+                    srp_callback_parm.user =
+                        SRP_VBASE_get1_by_user(srp_callback_parm.vb,
+                                               srp_callback_parm.login);
+                    if (srp_callback_parm.user)
+                        BIO_printf(bio_s_out, "LOOKUP done %s\n",
+                                   srp_callback_parm.user->info);
+                    else
+                        BIO_printf(bio_s_out, "LOOKUP not successful\n");
+                    continue;
+                }
+#endif
+#if !defined(OPENSSL_SYS_MSDOS)
+                sleep(1);
+#endif
+                continue;
+            }
+        } else if (i == 0) {    /* end of input */
+            ret = 1;
+            goto end;
+        }
+
+        /* else we have data */
+        if (((www == 1) && (strncmp("GET ", buf, 4) == 0)) ||
+            ((www == 2) && (strncmp("GET /stats ", buf, 11) == 0))) {
+            char *p;
+            X509 *peer = NULL;
+            STACK_OF(SSL_CIPHER) *sk;
+            static const char *space = "                          ";
+
+            if (www == 1 && strncmp("GET /reneg", buf, 10) == 0) {
+                if (strncmp("GET /renegcert", buf, 14) == 0)
+                    SSL_set_verify(con,
+                                   SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE,
+                                   NULL);
+                i = SSL_renegotiate(con);
+                BIO_printf(bio_s_out, "SSL_renegotiate -> %d\n", i);
+                /* Send the HelloRequest */
+                i = SSL_do_handshake(con);
+                if (i <= 0) {
+                    BIO_printf(bio_s_out, "SSL_do_handshake() Retval %d\n",
+                               SSL_get_error(con, i));
+                    ERR_print_errors(bio_err);
+                    goto err;
+                }
+                /* Wait for a ClientHello to come back */
+                FD_ZERO(&readfds);
+                openssl_fdset(s, &readfds);
+                i = select(width, (void *)&readfds, NULL, NULL, NULL);
+                if (i <= 0 || !FD_ISSET(s, &readfds)) {
+                    BIO_printf(bio_s_out,
+                               "Error waiting for client response\n");
+                    ERR_print_errors(bio_err);
+                    goto err;
+                }
+                /*
+                 * We're not actually expecting any data here and we ignore
+                 * any that is sent. This is just to force the handshake that
+                 * we're expecting to come from the client. If they haven't
+                 * sent one there's not much we can do.
+                 */
+                BIO_gets(io, buf, bufsize - 1);
+            }
+
+            BIO_puts(io,
+                     "HTTP/1.0 200 ok\r\nContent-type: text/html\r\n\r\n");
+            BIO_puts(io, "<HTML><BODY BGCOLOR=\"#ffffff\">\n");
+            BIO_puts(io, "<pre>\n");
+            /* BIO_puts(io, OpenSSL_version(OPENSSL_VERSION)); */
+            BIO_puts(io, "\n");
+            for (i = 0; i < local_argc; i++) {
+                const char *myp;
+                for (myp = local_argv[i]; *myp; myp++)
+                    switch (*myp) {
+                    case '<':
+                        BIO_puts(io, "&lt;");
+                        break;
+                    case '>':
+                        BIO_puts(io, "&gt;");
+                        break;
+                    case '&':
+                        BIO_puts(io, "&amp;");
+                        break;
+                    default:
+                        BIO_write(io, myp, 1);
+                        break;
+                    }
+                BIO_write(io, " ", 1);
+            }
+            BIO_puts(io, "\n");
+
+            BIO_printf(io,
+                       "Secure Renegotiation IS%s supported\n",
+                       SSL_get_secure_renegotiation_support(con) ?
+                       "" : " NOT");
+
+            /*
+             * The following is evil and should not really be done
+             */
+            BIO_printf(io, "Ciphers supported in s_server binary\n");
+            sk = SSL_get_ciphers(con);
+            j = sk_SSL_CIPHER_num(sk);
+            for (i = 0; i < j; i++) {
+                c = sk_SSL_CIPHER_value(sk, i);
+                BIO_printf(io, "%-11s:%-25s ",
+                           SSL_CIPHER_get_version(c), SSL_CIPHER_get_name(c));
+                if ((((i + 1) % 2) == 0) && (i + 1 != j))
+                    BIO_puts(io, "\n");
+            }
+            BIO_puts(io, "\n");
+            p = SSL_get_shared_ciphers(con, buf, bufsize);
+            if (p != NULL) {
+                BIO_printf(io,
+                           "---\nCiphers common between both SSL end points:\n");
+                j = i = 0;
+                while (*p) {
+                    if (*p == ':') {
+                        BIO_write(io, space, 26 - j);
+                        i++;
+                        j = 0;
+                        BIO_write(io, ((i % 3) ? " " : "\n"), 1);
+                    } else {
+                        BIO_write(io, p, 1);
+                        j++;
+                    }
+                    p++;
+                }
+                BIO_puts(io, "\n");
+            }
+            ssl_print_sigalgs(io, con);
+#ifndef OPENSSL_NO_EC
+            ssl_print_groups(io, con, 0);
+#endif
+            print_ca_names(io, con);
+            BIO_printf(io, (SSL_session_reused(con)
+                            ? "---\nReused, " : "---\nNew, "));
+            c = SSL_get_current_cipher(con);
+            BIO_printf(io, "%s, Cipher is %s\n",
+                       SSL_CIPHER_get_version(c), SSL_CIPHER_get_name(c));
+            SSL_SESSION_print(io, SSL_get_session(con));
+            BIO_printf(io, "---\n");
+            print_stats(io, SSL_get_SSL_CTX(con));
+            BIO_printf(io, "---\n");
+            peer = SSL_get_peer_certificate(con);
+            if (peer != NULL) {
+                BIO_printf(io, "Client certificate\n");
+                X509_print(io, peer);
+                PEM_write_bio_X509(io, peer);
+                X509_free(peer);
+                peer = NULL;
+            } else {
+                BIO_puts(io, "no client certificate available\n");
+            }
+            BIO_puts(io, "</pre></BODY></HTML>\r\n\r\n");
+            break;
+        } else if ((www == 2 || www == 3)
+                   && (strncmp("GET /", buf, 5) == 0)) {
+            BIO *file;
+            char *p, *e;
+            static const char *text =
+                "HTTP/1.0 200 ok\r\nContent-type: text/plain\r\n\r\n";
+
+            /* skip the '/' */
+            p = &(buf[5]);
+
+            dot = 1;
+            for (e = p; *e != '\0'; e++) {
+                if (e[0] == ' ')
+                    break;
+
+                switch (dot) {
+                case 1:
+                    dot = (e[0] == '.') ? 2 : 0;
+                    break;
+                case 2:
+                    dot = (e[0] == '.') ? 3 : 0;
+                    break;
+                case 3:
+                    dot = (e[0] == '/') ? -1 : 0;
+                    break;
+                }
+                if (dot == 0)
+                    dot = (e[0] == '/') ? 1 : 0;
+            }
+            dot = (dot == 3) || (dot == -1); /* filename contains ".."
+                                              * component */
+
+            if (*e == '\0') {
+                BIO_puts(io, text);
+                BIO_printf(io, "'%s' is an invalid file name\r\n", p);
+                break;
+            }
+            *e = '\0';
+
+            if (dot) {
+                BIO_puts(io, text);
+                BIO_printf(io, "'%s' contains '..' reference\r\n", p);
+                break;
+            }
+
+            if (*p == '/') {
+                BIO_puts(io, text);
+                BIO_printf(io, "'%s' is an invalid path\r\n", p);
+                break;
+            }
+
+            /* if a directory, do the index thang */
+            if (app_isdir(p) > 0) {
+                BIO_puts(io, text);
+                BIO_printf(io, "'%s' is a directory\r\n", p);
+                break;
+            }
+
+            if ((file = BIO_new_file(p, "r")) == NULL) {
+                BIO_puts(io, text);
+                BIO_printf(io, "Error opening '%s'\r\n", p);
+                ERR_print_errors(io);
+                break;
+            }
+
+            if (!s_quiet)
+                BIO_printf(bio_err, "FILE:%s\n", p);
+
+            if (www == 2) {
+                i = strlen(p);
+                if (((i > 5) && (strcmp(&(p[i - 5]), ".html") == 0)) ||
+                    ((i > 4) && (strcmp(&(p[i - 4]), ".php") == 0)) ||
+                    ((i > 4) && (strcmp(&(p[i - 4]), ".htm") == 0)))
+                    BIO_puts(io,
+                             "HTTP/1.0 200 ok\r\nContent-type: text/html\r\n\r\n");
+                else
+                    BIO_puts(io,
+                             "HTTP/1.0 200 ok\r\nContent-type: text/plain\r\n\r\n");
+            }
+            /* send the file */
+            for (;;) {
+                i = BIO_read(file, buf, bufsize);
+                if (i <= 0)
+                    break;
+
+#ifdef RENEG
+                total_bytes += i;
+                BIO_printf(bio_err, "%d\n", i);
+                if (total_bytes > 3 * 1024) {
+                    total_bytes = 0;
+                    BIO_printf(bio_err, "RENEGOTIATE\n");
+                    SSL_renegotiate(con);
+                }
+#endif
+
+                for (j = 0; j < i;) {
+#ifdef RENEG
+                    static count = 0;
+                    if (++count == 13) {
+                        SSL_renegotiate(con);
+                    }
+#endif
+                    k = BIO_write(io, &(buf[j]), i - j);
+                    if (k <= 0) {
+                        if (!BIO_should_retry(io)
+                            && !SSL_waiting_for_async(con))
+                            goto write_error;
+                        else {
+                            BIO_printf(bio_s_out, "rwrite W BLOCK\n");
+                        }
+                    } else {
+                        j += k;
+                    }
+                }
+            }
+ write_error:
+            BIO_free(file);
+            break;
+        }
+    }
+
+    for (;;) {
+        i = (int)BIO_flush(io);
+        if (i <= 0) {
+            if (!BIO_should_retry(io))
+                break;
+        } else
+            break;
+    }
+ end:
+    /* make sure we re-use sessions */
+    SSL_set_shutdown(con, SSL_SENT_SHUTDOWN | SSL_RECEIVED_SHUTDOWN);
+
+ err:
+    OPENSSL_free(buf);
+    BIO_free_all(io);
+    return ret;
+}
+
+static int rev_body(int s, int stype, int prot, unsigned char *context)
+{
+    char *buf = NULL;
+    int i;
+    int ret = 1;
+    SSL *con;
+    BIO *io, *ssl_bio, *sbio;
+
+    buf = app_malloc(bufsize, "server rev buffer");
+    io = BIO_new(BIO_f_buffer());
+    ssl_bio = BIO_new(BIO_f_ssl());
+    if ((io == NULL) || (ssl_bio == NULL))
+        goto err;
+
+    /* lets make the output buffer a reasonable size */
+    if (!BIO_set_write_buffer_size(io, bufsize))
+        goto err;
+
+    if ((con = SSL_new(ctx)) == NULL)
+        goto err;
+
+    if (s_tlsextdebug) {
+        SSL_set_tlsext_debug_callback(con, tlsext_cb);
+        SSL_set_tlsext_debug_arg(con, bio_s_out);
+    }
+    if (context != NULL
+        && !SSL_set_session_id_context(con, context,
+                                       strlen((char *)context))) {
+        SSL_free(con);
+        ERR_print_errors(bio_err);
+        goto err;
+    }
+
+    sbio = BIO_new_socket(s, BIO_NOCLOSE);
+    SSL_set_bio(con, sbio, sbio);
+    SSL_set_accept_state(con);
+
+    /* No need to free |con| after this. Done by BIO_free(ssl_bio) */
+    BIO_set_ssl(ssl_bio, con, BIO_CLOSE);
+    BIO_push(io, ssl_bio);
+#ifdef CHARSET_EBCDIC
+    io = BIO_push(BIO_new(BIO_f_ebcdic_filter()), io);
+#endif
+
+    if (s_debug) {
+        BIO_set_callback(SSL_get_rbio(con), bio_dump_callback);
+        BIO_set_callback_arg(SSL_get_rbio(con), (char *)bio_s_out);
+    }
+    if (s_msg) {
+#ifndef OPENSSL_NO_SSL_TRACE
+        if (s_msg == 2)
+            SSL_set_msg_callback(con, SSL_trace);
+        else
+#endif
+            SSL_set_msg_callback(con, msg_cb);
+        SSL_set_msg_callback_arg(con, bio_s_msg ? bio_s_msg : bio_s_out);
+    }
+
+    for (;;) {
+        i = BIO_do_handshake(io);
+        if (i > 0)
+            break;
+        if (!BIO_should_retry(io)) {
+            BIO_puts(bio_err, "CONNECTION FAILURE\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+#ifndef OPENSSL_NO_SRP
+        if (BIO_should_io_special(io)
+            && BIO_get_retry_reason(io) == BIO_RR_SSL_X509_LOOKUP) {
+            BIO_printf(bio_s_out, "LOOKUP renego during accept\n");
+            SRP_user_pwd_free(srp_callback_parm.user);
+            srp_callback_parm.user =
+                SRP_VBASE_get1_by_user(srp_callback_parm.vb,
+                                       srp_callback_parm.login);
+            if (srp_callback_parm.user)
+                BIO_printf(bio_s_out, "LOOKUP done %s\n",
+                           srp_callback_parm.user->info);
+            else
+                BIO_printf(bio_s_out, "LOOKUP not successful\n");
+            continue;
+        }
+#endif
+    }
+    BIO_printf(bio_err, "CONNECTION ESTABLISHED\n");
+    print_ssl_summary(con);
+
+    for (;;) {
+        i = BIO_gets(io, buf, bufsize - 1);
+        if (i < 0) {            /* error */
+            if (!BIO_should_retry(io)) {
+                if (!s_quiet)
+                    ERR_print_errors(bio_err);
+                goto err;
+            } else {
+                BIO_printf(bio_s_out, "read R BLOCK\n");
+#ifndef OPENSSL_NO_SRP
+                if (BIO_should_io_special(io)
+                    && BIO_get_retry_reason(io) == BIO_RR_SSL_X509_LOOKUP) {
+                    BIO_printf(bio_s_out, "LOOKUP renego during read\n");
+                    SRP_user_pwd_free(srp_callback_parm.user);
+                    srp_callback_parm.user =
+                        SRP_VBASE_get1_by_user(srp_callback_parm.vb,
+                                               srp_callback_parm.login);
+                    if (srp_callback_parm.user)
+                        BIO_printf(bio_s_out, "LOOKUP done %s\n",
+                                   srp_callback_parm.user->info);
+                    else
+                        BIO_printf(bio_s_out, "LOOKUP not successful\n");
+                    continue;
+                }
+#endif
+#if !defined(OPENSSL_SYS_MSDOS)
+                sleep(1);
+#endif
+                continue;
+            }
+        } else if (i == 0) {    /* end of input */
+            ret = 1;
+            BIO_printf(bio_err, "CONNECTION CLOSED\n");
+            goto end;
+        } else {
+            char *p = buf + i - 1;
+            while (i && (*p == '\n' || *p == '\r')) {
+                p--;
+                i--;
+            }
+            if (!s_ign_eof && (i == 5) && (strncmp(buf, "CLOSE", 5) == 0)) {
+                ret = 1;
+                BIO_printf(bio_err, "CONNECTION CLOSED\n");
+                goto end;
+            }
+            BUF_reverse((unsigned char *)buf, NULL, i);
+            buf[i] = '\n';
+            BIO_write(io, buf, i + 1);
+            for (;;) {
+                i = BIO_flush(io);
+                if (i > 0)
+                    break;
+                if (!BIO_should_retry(io))
+                    goto end;
+            }
+        }
+    }
+ end:
+    /* make sure we re-use sessions */
+    SSL_set_shutdown(con, SSL_SENT_SHUTDOWN | SSL_RECEIVED_SHUTDOWN);
+
+ err:
+
+    OPENSSL_free(buf);
+    BIO_free_all(io);
+    return ret;
+}
+
+#define MAX_SESSION_ID_ATTEMPTS 10
+static int generate_session_id(SSL *ssl, unsigned char *id,
+                               unsigned int *id_len)
+{
+    unsigned int count = 0;
+    do {
+        if (RAND_bytes(id, *id_len) <= 0)
+            return 0;
+        /*
+         * Prefix the session_id with the required prefix. NB: If our prefix
+         * is too long, clip it - but there will be worse effects anyway, eg.
+         * the server could only possibly create 1 session ID (ie. the
+         * prefix!) so all future session negotiations will fail due to
+         * conflicts.
+         */
+        memcpy(id, session_id_prefix,
+               (strlen(session_id_prefix) < *id_len) ?
+               strlen(session_id_prefix) : *id_len);
+    }
+    while (SSL_has_matching_session_id(ssl, id, *id_len) &&
+           (++count < MAX_SESSION_ID_ATTEMPTS));
+    if (count >= MAX_SESSION_ID_ATTEMPTS)
+        return 0;
+    return 1;
+}
+
+/*
+ * By default s_server uses an in-memory cache which caches SSL_SESSION
+ * structures without any serialisation. This hides some bugs which only
+ * become apparent in deployed servers. By implementing a basic external
+ * session cache some issues can be debugged using s_server.
+ */
+
+typedef struct simple_ssl_session_st {
+    unsigned char *id;
+    unsigned int idlen;
+    unsigned char *der;
+    int derlen;
+    struct simple_ssl_session_st *next;
+} simple_ssl_session;
+
+static simple_ssl_session *first = NULL;
+
+static int add_session(SSL *ssl, SSL_SESSION *session)
+{
+    simple_ssl_session *sess = app_malloc(sizeof(*sess), "get session");
+    unsigned char *p;
+
+    SSL_SESSION_get_id(session, &sess->idlen);
+    sess->derlen = i2d_SSL_SESSION(session, NULL);
+    if (sess->derlen < 0) {
+        BIO_printf(bio_err, "Error encoding session\n");
+        OPENSSL_free(sess);
+        return 0;
+    }
+
+    sess->id = OPENSSL_memdup(SSL_SESSION_get_id(session, NULL), sess->idlen);
+    sess->der = app_malloc(sess->derlen, "get session buffer");
+    if (!sess->id) {
+        BIO_printf(bio_err, "Out of memory adding to external cache\n");
+        OPENSSL_free(sess->id);
+        OPENSSL_free(sess->der);
+        OPENSSL_free(sess);
+        return 0;
+    }
+    p = sess->der;
+
+    /* Assume it still works. */
+    if (i2d_SSL_SESSION(session, &p) != sess->derlen) {
+        BIO_printf(bio_err, "Unexpected session encoding length\n");
+        OPENSSL_free(sess->id);
+        OPENSSL_free(sess->der);
+        OPENSSL_free(sess);
+        return 0;
+    }
+
+    sess->next = first;
+    first = sess;
+    BIO_printf(bio_err, "New session added to external cache\n");
+    return 0;
+}
+
+static SSL_SESSION *get_session(SSL *ssl, const unsigned char *id, int idlen,
+                                int *do_copy)
+{
+    simple_ssl_session *sess;
+    *do_copy = 0;
+    for (sess = first; sess; sess = sess->next) {
+        if (idlen == (int)sess->idlen && !memcmp(sess->id, id, idlen)) {
+            const unsigned char *p = sess->der;
+            BIO_printf(bio_err, "Lookup session: cache hit\n");
+            return d2i_SSL_SESSION(NULL, &p, sess->derlen);
+        }
+    }
+    BIO_printf(bio_err, "Lookup session: cache miss\n");
+    return NULL;
+}
+
+static void del_session(SSL_CTX *sctx, SSL_SESSION *session)
+{
+    simple_ssl_session *sess, *prev = NULL;
+    const unsigned char *id;
+    unsigned int idlen;
+    id = SSL_SESSION_get_id(session, &idlen);
+    for (sess = first; sess; sess = sess->next) {
+        if (idlen == sess->idlen && !memcmp(sess->id, id, idlen)) {
+            if (prev)
+                prev->next = sess->next;
+            else
+                first = sess->next;
+            OPENSSL_free(sess->id);
+            OPENSSL_free(sess->der);
+            OPENSSL_free(sess);
+            return;
+        }
+        prev = sess;
+    }
+}
+
+static void init_session_cache_ctx(SSL_CTX *sctx)
+{
+    SSL_CTX_set_session_cache_mode(sctx,
+                                   SSL_SESS_CACHE_NO_INTERNAL |
+                                   SSL_SESS_CACHE_SERVER);
+    SSL_CTX_sess_set_new_cb(sctx, add_session);
+    SSL_CTX_sess_set_get_cb(sctx, get_session);
+    SSL_CTX_sess_set_remove_cb(sctx, del_session);
+}
+
+static void free_sessions(void)
+{
+    simple_ssl_session *sess, *tsess;
+    for (sess = first; sess;) {
+        OPENSSL_free(sess->id);
+        OPENSSL_free(sess->der);
+        tsess = sess;
+        sess = sess->next;
+        OPENSSL_free(tsess);
+    }
+    first = NULL;
+}
+
+#endif                          /* OPENSSL_NO_SOCK */
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/s_socket.c b/trunk/3rdparty/openssl-1.1-fit/apps/s_socket.c
new file mode 100644
index 000000000..76f928900
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/s_socket.c
@@ -0,0 +1,395 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* socket-related functions used by s_client and s_server */
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <errno.h>
+#include <signal.h>
+#include <openssl/opensslconf.h>
+
+/*
+ * With IPv6, it looks like Digital has mixed up the proper order of
+ * recursive header file inclusion, resulting in the compiler complaining
+ * that u_int isn't defined, but only if _POSIX_C_SOURCE is defined, which is
+ * needed to have fileno() declared correctly...  So let's define u_int
+ */
+#if defined(OPENSSL_SYS_VMS_DECC) && !defined(__U_INT)
+# define __U_INT
+typedef unsigned int u_int;
+#endif
+
+#ifndef OPENSSL_NO_SOCK
+
+# include "apps.h"
+# include "s_apps.h"
+# include "internal/sockets.h"
+
+# include <openssl/bio.h>
+# include <openssl/err.h>
+
+/* Keep track of our peer's address for the cookie callback */
+BIO_ADDR *ourpeer = NULL;
+
+/*
+ * init_client - helper routine to set up socket communication
+ * @sock: pointer to storage of resulting socket.
+ * @host: the host name or path (for AF_UNIX) to connect to.
+ * @port: the port to connect to (ignored for AF_UNIX).
+ * @bindhost: source host or path (for AF_UNIX).
+ * @bindport: source port (ignored for AF_UNIX).
+ * @family: desired socket family, may be AF_INET, AF_INET6, AF_UNIX or
+ *  AF_UNSPEC
+ * @type: socket type, must be SOCK_STREAM or SOCK_DGRAM
+ * @protocol: socket protocol, e.g. IPPROTO_TCP or IPPROTO_UDP (or 0 for any)
+ *
+ * This will create a socket and use it to connect to a host:port, or if
+ * family == AF_UNIX, to the path found in host.
+ *
+ * If the host has more than one address, it will try them one by one until
+ * a successful connection is established.  The resulting socket will be
+ * found in *sock on success, it will be given INVALID_SOCKET otherwise.
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+int init_client(int *sock, const char *host, const char *port,
+                const char *bindhost, const char *bindport,
+                int family, int type, int protocol)
+{
+    BIO_ADDRINFO *res = NULL;
+    BIO_ADDRINFO *bindaddr = NULL;
+    const BIO_ADDRINFO *ai = NULL;
+    const BIO_ADDRINFO *bi = NULL;
+    int found = 0;
+    int ret;
+
+    if (BIO_sock_init() != 1)
+        return 0;
+
+    ret = BIO_lookup_ex(host, port, BIO_LOOKUP_CLIENT, family, type, protocol,
+                        &res);
+    if (ret == 0) {
+        ERR_print_errors(bio_err);
+        return 0;
+    }
+
+    if (bindhost != NULL || bindport != NULL) {
+        ret = BIO_lookup_ex(bindhost, bindport, BIO_LOOKUP_CLIENT,
+                            family, type, protocol, &bindaddr);
+        if (ret == 0) {
+            ERR_print_errors (bio_err);
+            goto out;
+        }
+    }
+
+    ret = 0;
+    for (ai = res; ai != NULL; ai = BIO_ADDRINFO_next(ai)) {
+        /* Admittedly, these checks are quite paranoid, we should not get
+         * anything in the BIO_ADDRINFO chain that we haven't
+         * asked for. */
+        OPENSSL_assert((family == AF_UNSPEC
+                        || family == BIO_ADDRINFO_family(ai))
+                       && (type == 0 || type == BIO_ADDRINFO_socktype(ai))
+                       && (protocol == 0
+                           || protocol == BIO_ADDRINFO_protocol(ai)));
+
+        if (bindaddr != NULL) {
+            for (bi = bindaddr; bi != NULL; bi = BIO_ADDRINFO_next(bi)) {
+                if (BIO_ADDRINFO_family(bi) == BIO_ADDRINFO_family(ai))
+                    break;
+            }
+            if (bi == NULL)
+                continue;
+            ++found;
+        }
+
+        *sock = BIO_socket(BIO_ADDRINFO_family(ai), BIO_ADDRINFO_socktype(ai),
+                           BIO_ADDRINFO_protocol(ai), 0);
+        if (*sock == INVALID_SOCKET) {
+            /* Maybe the kernel doesn't support the socket family, even if
+             * BIO_lookup() added it in the returned result...
+             */
+            continue;
+        }
+
+        if (bi != NULL) {
+            if (!BIO_bind(*sock, BIO_ADDRINFO_address(bi),
+                          BIO_SOCK_REUSEADDR)) {
+                BIO_closesocket(*sock);
+                *sock = INVALID_SOCKET;
+                break;
+            }
+        }
+
+#ifndef OPENSSL_NO_SCTP
+        if (protocol == IPPROTO_SCTP) {
+            /*
+             * For SCTP we have to set various options on the socket prior to
+             * connecting. This is done automatically by BIO_new_dgram_sctp().
+             * We don't actually need the created BIO though so we free it again
+             * immediately.
+             */
+            BIO *tmpbio = BIO_new_dgram_sctp(*sock, BIO_NOCLOSE);
+
+            if (tmpbio == NULL) {
+                ERR_print_errors(bio_err);
+                return 0;
+            }
+            BIO_free(tmpbio);
+        }
+#endif
+
+        if (!BIO_connect(*sock, BIO_ADDRINFO_address(ai),
+                         protocol == IPPROTO_TCP ? BIO_SOCK_NODELAY : 0)) {
+            BIO_closesocket(*sock);
+            *sock = INVALID_SOCKET;
+            continue;
+        }
+
+        /* Success, don't try any more addresses */
+        break;
+    }
+
+    if (*sock == INVALID_SOCKET) {
+        if (bindaddr != NULL && !found) {
+            BIO_printf(bio_err, "Can't bind %saddress for %s%s%s\n",
+                       BIO_ADDRINFO_family(res) == AF_INET6 ? "IPv6 " :
+                       BIO_ADDRINFO_family(res) == AF_INET ? "IPv4 " :
+                       BIO_ADDRINFO_family(res) == AF_UNIX ? "unix " : "",
+                       bindhost != NULL ? bindhost : "",
+                       bindport != NULL ? ":" : "",
+                       bindport != NULL ? bindport : "");
+            ERR_clear_error();
+            ret = 0;
+        }
+        ERR_print_errors(bio_err);
+    } else {
+        /* Remove any stale errors from previous connection attempts */
+        ERR_clear_error();
+        ret = 1;
+    }
+out:
+    if (bindaddr != NULL) {
+        BIO_ADDRINFO_free (bindaddr);
+    }
+    BIO_ADDRINFO_free(res);
+    return ret;
+}
+
+/*
+ * do_server - helper routine to perform a server operation
+ * @accept_sock: pointer to storage of resulting socket.
+ * @host: the host name or path (for AF_UNIX) to connect to.
+ * @port: the port to connect to (ignored for AF_UNIX).
+ * @family: desired socket family, may be AF_INET, AF_INET6, AF_UNIX or
+ *  AF_UNSPEC
+ * @type: socket type, must be SOCK_STREAM or SOCK_DGRAM
+ * @cb: pointer to a function that receives the accepted socket and
+ *  should perform the communication with the connecting client.
+ * @context: pointer to memory that's passed verbatim to the cb function.
+ * @naccept: number of times an incoming connect should be accepted.  If -1,
+ *  unlimited number.
+ *
+ * This will create a socket and use it to listen to a host:port, or if
+ * family == AF_UNIX, to the path found in host, then start accepting
+ * incoming connections and run cb on the resulting socket.
+ *
+ * 0 on failure, something other on success.
+ */
+int do_server(int *accept_sock, const char *host, const char *port,
+              int family, int type, int protocol, do_server_cb cb,
+              unsigned char *context, int naccept, BIO *bio_s_out)
+{
+    int asock = 0;
+    int sock;
+    int i;
+    BIO_ADDRINFO *res = NULL;
+    const BIO_ADDRINFO *next;
+    int sock_family, sock_type, sock_protocol, sock_port;
+    const BIO_ADDR *sock_address;
+    int sock_options = BIO_SOCK_REUSEADDR;
+    int ret = 0;
+
+    if (BIO_sock_init() != 1)
+        return 0;
+
+    if (!BIO_lookup_ex(host, port, BIO_LOOKUP_SERVER, family, type, protocol,
+                       &res)) {
+        ERR_print_errors(bio_err);
+        return 0;
+    }
+
+    /* Admittedly, these checks are quite paranoid, we should not get
+     * anything in the BIO_ADDRINFO chain that we haven't asked for */
+    OPENSSL_assert((family == AF_UNSPEC || family == BIO_ADDRINFO_family(res))
+                   && (type == 0 || type == BIO_ADDRINFO_socktype(res))
+                   && (protocol == 0 || protocol == BIO_ADDRINFO_protocol(res)));
+
+    sock_family = BIO_ADDRINFO_family(res);
+    sock_type = BIO_ADDRINFO_socktype(res);
+    sock_protocol = BIO_ADDRINFO_protocol(res);
+    sock_address = BIO_ADDRINFO_address(res);
+    next = BIO_ADDRINFO_next(res);
+    if (sock_family == AF_INET6)
+        sock_options |= BIO_SOCK_V6_ONLY;
+    if (next != NULL
+            && BIO_ADDRINFO_socktype(next) == sock_type
+            && BIO_ADDRINFO_protocol(next) == sock_protocol) {
+        if (sock_family == AF_INET
+                && BIO_ADDRINFO_family(next) == AF_INET6) {
+            sock_family = AF_INET6;
+            sock_address = BIO_ADDRINFO_address(next);
+        } else if (sock_family == AF_INET6
+                   && BIO_ADDRINFO_family(next) == AF_INET) {
+            sock_options &= ~BIO_SOCK_V6_ONLY;
+        }
+    }
+
+    asock = BIO_socket(sock_family, sock_type, sock_protocol, 0);
+    if (asock == INVALID_SOCKET
+        || !BIO_listen(asock, sock_address, sock_options)) {
+        BIO_ADDRINFO_free(res);
+        ERR_print_errors(bio_err);
+        if (asock != INVALID_SOCKET)
+            BIO_closesocket(asock);
+        goto end;
+    }
+
+#ifndef OPENSSL_NO_SCTP
+    if (protocol == IPPROTO_SCTP) {
+        /*
+         * For SCTP we have to set various options on the socket prior to
+         * accepting. This is done automatically by BIO_new_dgram_sctp().
+         * We don't actually need the created BIO though so we free it again
+         * immediately.
+         */
+        BIO *tmpbio = BIO_new_dgram_sctp(asock, BIO_NOCLOSE);
+
+        if (tmpbio == NULL) {
+            BIO_closesocket(asock);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        BIO_free(tmpbio);
+    }
+#endif
+
+    sock_port = BIO_ADDR_rawport(sock_address);
+
+    BIO_ADDRINFO_free(res);
+    res = NULL;
+
+    if (sock_port == 0) {
+        /* dynamically allocated port, report which one */
+        union BIO_sock_info_u info;
+        char *hostname = NULL;
+        char *service = NULL;
+        int success = 0;
+
+        if ((info.addr = BIO_ADDR_new()) != NULL
+            && BIO_sock_info(asock, BIO_SOCK_INFO_ADDRESS, &info)
+            && (hostname = BIO_ADDR_hostname_string(info.addr, 1)) != NULL
+            && (service = BIO_ADDR_service_string(info.addr, 1)) != NULL
+            && BIO_printf(bio_s_out,
+                          strchr(hostname, ':') == NULL
+                          ? /* IPv4 */ "ACCEPT %s:%s\n"
+                          : /* IPv6 */ "ACCEPT [%s]:%s\n",
+                          hostname, service) > 0)
+            success = 1;
+
+        (void)BIO_flush(bio_s_out);
+        OPENSSL_free(hostname);
+        OPENSSL_free(service);
+        BIO_ADDR_free(info.addr);
+        if (!success) {
+            BIO_closesocket(asock);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    } else {
+        (void)BIO_printf(bio_s_out, "ACCEPT\n");
+        (void)BIO_flush(bio_s_out);
+    }
+
+    if (accept_sock != NULL)
+        *accept_sock = asock;
+    for (;;) {
+        char sink[64];
+        struct timeval timeout;
+        fd_set readfds;
+
+        if (type == SOCK_STREAM) {
+            BIO_ADDR_free(ourpeer);
+            ourpeer = BIO_ADDR_new();
+            if (ourpeer == NULL) {
+                BIO_closesocket(asock);
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            do {
+                sock = BIO_accept_ex(asock, ourpeer, 0);
+            } while (sock < 0 && BIO_sock_should_retry(sock));
+            if (sock < 0) {
+                ERR_print_errors(bio_err);
+                BIO_closesocket(asock);
+                break;
+            }
+            BIO_set_tcp_ndelay(sock, 1);
+            i = (*cb)(sock, type, protocol, context);
+
+            /*
+             * If we ended with an alert being sent, but still with data in the
+             * network buffer to be read, then calling BIO_closesocket() will
+             * result in a TCP-RST being sent. On some platforms (notably
+             * Windows) then this will result in the peer immediately abandoning
+             * the connection including any buffered alert data before it has
+             * had a chance to be read. Shutting down the sending side first,
+             * and then closing the socket sends TCP-FIN first followed by
+             * TCP-RST. This seems to allow the peer to read the alert data.
+             */
+            shutdown(sock, 1); /* SHUT_WR */
+            /*
+             * We just said we have nothing else to say, but it doesn't mean
+             * that the other side has nothing. It's even recommended to
+             * consume incoming data. [In testing context this ensures that
+             * alerts are passed on...]
+             */
+            timeout.tv_sec = 0;
+            timeout.tv_usec = 500000;  /* some extreme round-trip */
+            do {
+                FD_ZERO(&readfds);
+                openssl_fdset(sock, &readfds);
+            } while (select(sock + 1, &readfds, NULL, NULL, &timeout) > 0
+                     && readsocket(sock, sink, sizeof(sink)) > 0);
+
+            BIO_closesocket(sock);
+        } else {
+            i = (*cb)(asock, type, protocol, context);
+        }
+
+        if (naccept != -1)
+            naccept--;
+        if (i < 0 || naccept == 0) {
+            BIO_closesocket(asock);
+            ret = i;
+            break;
+        }
+    }
+ end:
+# ifdef AF_UNIX
+    if (family == AF_UNIX)
+        unlink(host);
+# endif
+    BIO_ADDR_free(ourpeer);
+    ourpeer = NULL;
+    return ret;
+}
+
+#endif  /* OPENSSL_NO_SOCK */
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/s_time.c b/trunk/3rdparty/openssl-1.1-fit/apps/s_time.c
new file mode 100644
index 000000000..82d40a5a5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/s_time.c
@@ -0,0 +1,405 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include <openssl/opensslconf.h>
+
+#ifndef OPENSSL_NO_SOCK
+
+#include "apps.h"
+#include "progs.h"
+#include <openssl/x509.h>
+#include <openssl/ssl.h>
+#include <openssl/pem.h>
+#include "s_apps.h"
+#include <openssl/err.h>
+#include <internal/sockets.h>
+#if !defined(OPENSSL_SYS_MSDOS)
+# include OPENSSL_UNISTD
+#endif
+
+#define SSL_CONNECT_NAME        "localhost:4433"
+
+#define SECONDS 30
+#define SECONDSSTR "30"
+
+static SSL *doConnection(SSL *scon, const char *host, SSL_CTX *ctx);
+
+/*
+ * Define a HTTP get command globally.
+ * Also define the size of the command, this is two bytes less than
+ * the size of the string because the %s is replaced by the URL.
+ */
+static const char fmt_http_get_cmd[] = "GET %s HTTP/1.0\r\n\r\n";
+static const size_t fmt_http_get_cmd_size = sizeof(fmt_http_get_cmd) - 2;
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_CONNECT, OPT_CIPHER, OPT_CIPHERSUITES, OPT_CERT, OPT_NAMEOPT, OPT_KEY,
+    OPT_CAPATH, OPT_CAFILE, OPT_NOCAPATH, OPT_NOCAFILE, OPT_NEW, OPT_REUSE,
+    OPT_BUGS, OPT_VERIFY, OPT_TIME, OPT_SSL3,
+    OPT_WWW
+} OPTION_CHOICE;
+
+const OPTIONS s_time_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"connect", OPT_CONNECT, 's',
+     "Where to connect as post:port (default is " SSL_CONNECT_NAME ")"},
+    {"cipher", OPT_CIPHER, 's', "TLSv1.2 and below cipher list to be used"},
+    {"ciphersuites", OPT_CIPHERSUITES, 's',
+     "Specify TLSv1.3 ciphersuites to be used"},
+    {"cert", OPT_CERT, '<', "Cert file to use, PEM format assumed"},
+    {"nameopt", OPT_NAMEOPT, 's', "Various certificate name options"},
+    {"key", OPT_KEY, '<', "File with key, PEM; default is -cert file"},
+    {"CApath", OPT_CAPATH, '/', "PEM format directory of CA's"},
+    {"cafile", OPT_CAFILE, '<', "PEM format file of CA's"},
+    {"no-CAfile", OPT_NOCAFILE, '-',
+     "Do not load the default certificates file"},
+    {"no-CApath", OPT_NOCAPATH, '-',
+     "Do not load certificates from the default certificates directory"},
+    {"new", OPT_NEW, '-', "Just time new connections"},
+    {"reuse", OPT_REUSE, '-', "Just time connection reuse"},
+    {"bugs", OPT_BUGS, '-', "Turn on SSL bug compatibility"},
+    {"verify", OPT_VERIFY, 'p',
+     "Turn on peer certificate verification, set depth"},
+    {"time", OPT_TIME, 'p', "Seconds to collect data, default " SECONDSSTR},
+    {"www", OPT_WWW, 's', "Fetch specified page from the site"},
+#ifndef OPENSSL_NO_SSL3
+    {"ssl3", OPT_SSL3, '-', "Just use SSLv3"},
+#endif
+    {NULL}
+};
+
+#define START   0
+#define STOP    1
+
+static double tm_Time_F(int s)
+{
+    return app_tminterval(s, 1);
+}
+
+int s_time_main(int argc, char **argv)
+{
+    char buf[1024 * 8];
+    SSL *scon = NULL;
+    SSL_CTX *ctx = NULL;
+    const SSL_METHOD *meth = NULL;
+    char *CApath = NULL, *CAfile = NULL, *cipher = NULL, *ciphersuites = NULL;
+    char *www_path = NULL;
+    char *host = SSL_CONNECT_NAME, *certfile = NULL, *keyfile = NULL, *prog;
+    double totalTime = 0.0;
+    int noCApath = 0, noCAfile = 0;
+    int maxtime = SECONDS, nConn = 0, perform = 3, ret = 1, i, st_bugs = 0;
+    long bytes_read = 0, finishtime = 0;
+    OPTION_CHOICE o;
+    int max_version = 0, ver, buf_len;
+    size_t buf_size;
+
+    meth = TLS_client_method();
+
+    prog = opt_init(argc, argv, s_time_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(s_time_options);
+            ret = 0;
+            goto end;
+        case OPT_CONNECT:
+            host = opt_arg();
+            break;
+        case OPT_REUSE:
+            perform = 2;
+            break;
+        case OPT_NEW:
+            perform = 1;
+            break;
+        case OPT_VERIFY:
+            if (!opt_int(opt_arg(), &verify_args.depth))
+                goto opthelp;
+            BIO_printf(bio_err, "%s: verify depth is %d\n",
+                       prog, verify_args.depth);
+            break;
+        case OPT_CERT:
+            certfile = opt_arg();
+            break;
+        case OPT_NAMEOPT:
+            if (!set_nameopt(opt_arg()))
+                goto end;
+            break;
+        case OPT_KEY:
+            keyfile = opt_arg();
+            break;
+        case OPT_CAPATH:
+            CApath = opt_arg();
+            break;
+        case OPT_CAFILE:
+            CAfile = opt_arg();
+            break;
+        case OPT_NOCAPATH:
+            noCApath = 1;
+            break;
+        case OPT_NOCAFILE:
+            noCAfile = 1;
+            break;
+        case OPT_CIPHER:
+            cipher = opt_arg();
+            break;
+        case OPT_CIPHERSUITES:
+            ciphersuites = opt_arg();
+            break;
+        case OPT_BUGS:
+            st_bugs = 1;
+            break;
+        case OPT_TIME:
+            if (!opt_int(opt_arg(), &maxtime))
+                goto opthelp;
+            break;
+        case OPT_WWW:
+            www_path = opt_arg();
+            buf_size = strlen(www_path) + fmt_http_get_cmd_size;
+            if (buf_size > sizeof(buf)) {
+                BIO_printf(bio_err, "%s: -www option is too long\n", prog);
+                goto end;
+            }
+            break;
+        case OPT_SSL3:
+            max_version = SSL3_VERSION;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    if (cipher == NULL)
+        cipher = getenv("SSL_CIPHER");
+
+    if ((ctx = SSL_CTX_new(meth)) == NULL)
+        goto end;
+
+    SSL_CTX_set_mode(ctx, SSL_MODE_AUTO_RETRY);
+    SSL_CTX_set_quiet_shutdown(ctx, 1);
+    if (SSL_CTX_set_max_proto_version(ctx, max_version) == 0)
+        goto end;
+
+    if (st_bugs)
+        SSL_CTX_set_options(ctx, SSL_OP_ALL);
+    if (cipher != NULL && !SSL_CTX_set_cipher_list(ctx, cipher))
+        goto end;
+    if (ciphersuites != NULL && !SSL_CTX_set_ciphersuites(ctx, ciphersuites))
+        goto end;
+    if (!set_cert_stuff(ctx, certfile, keyfile))
+        goto end;
+
+    if (!ctx_set_verify_locations(ctx, CAfile, CApath, noCAfile, noCApath)) {
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+    if (!(perform & 1))
+        goto next;
+    printf("Collecting connection statistics for %d seconds\n", maxtime);
+
+    /* Loop and time how long it takes to make connections */
+
+    bytes_read = 0;
+    finishtime = (long)time(NULL) + maxtime;
+    tm_Time_F(START);
+    for (;;) {
+        if (finishtime < (long)time(NULL))
+            break;
+
+        if ((scon = doConnection(NULL, host, ctx)) == NULL)
+            goto end;
+
+        if (www_path != NULL) {
+            buf_len = BIO_snprintf(buf, sizeof(buf), fmt_http_get_cmd,
+                                   www_path);
+            if (buf_len <= 0 || SSL_write(scon, buf, buf_len) <= 0)
+                goto end;
+            while ((i = SSL_read(scon, buf, sizeof(buf))) > 0)
+                bytes_read += i;
+        }
+        SSL_set_shutdown(scon, SSL_SENT_SHUTDOWN | SSL_RECEIVED_SHUTDOWN);
+        BIO_closesocket(SSL_get_fd(scon));
+
+        nConn += 1;
+        if (SSL_session_reused(scon)) {
+            ver = 'r';
+        } else {
+            ver = SSL_version(scon);
+            if (ver == TLS1_VERSION)
+                ver = 't';
+            else if (ver == SSL3_VERSION)
+                ver = '3';
+            else
+                ver = '*';
+        }
+        fputc(ver, stdout);
+        fflush(stdout);
+
+        SSL_free(scon);
+        scon = NULL;
+    }
+    totalTime += tm_Time_F(STOP); /* Add the time for this iteration */
+
+    i = (int)((long)time(NULL) - finishtime + maxtime);
+    printf
+        ("\n\n%d connections in %.2fs; %.2f connections/user sec, bytes read %ld\n",
+         nConn, totalTime, ((double)nConn / totalTime), bytes_read);
+    printf
+        ("%d connections in %ld real seconds, %ld bytes read per connection\n",
+         nConn, (long)time(NULL) - finishtime + maxtime, bytes_read / nConn);
+
+    /*
+     * Now loop and time connections using the same session id over and over
+     */
+
+ next:
+    if (!(perform & 2))
+        goto end;
+    printf("\n\nNow timing with session id reuse.\n");
+
+    /* Get an SSL object so we can reuse the session id */
+    if ((scon = doConnection(NULL, host, ctx)) == NULL) {
+        BIO_printf(bio_err, "Unable to get connection\n");
+        goto end;
+    }
+
+    if (www_path != NULL) {
+        buf_len = BIO_snprintf(buf, sizeof(buf), fmt_http_get_cmd, www_path);
+        if (buf_len <= 0 || SSL_write(scon, buf, buf_len) <= 0)
+            goto end;
+        while ((i = SSL_read(scon, buf, sizeof(buf))) > 0)
+            continue;
+    }
+    SSL_set_shutdown(scon, SSL_SENT_SHUTDOWN | SSL_RECEIVED_SHUTDOWN);
+    BIO_closesocket(SSL_get_fd(scon));
+
+    nConn = 0;
+    totalTime = 0.0;
+
+    finishtime = (long)time(NULL) + maxtime;
+
+    printf("starting\n");
+    bytes_read = 0;
+    tm_Time_F(START);
+
+    for (;;) {
+        if (finishtime < (long)time(NULL))
+            break;
+
+        if ((doConnection(scon, host, ctx)) == NULL)
+            goto end;
+
+        if (www_path != NULL) {
+            buf_len = BIO_snprintf(buf, sizeof(buf), fmt_http_get_cmd,
+                                   www_path);
+            if (buf_len <= 0 || SSL_write(scon, buf, buf_len) <= 0)
+                goto end;
+            while ((i = SSL_read(scon, buf, sizeof(buf))) > 0)
+                bytes_read += i;
+        }
+        SSL_set_shutdown(scon, SSL_SENT_SHUTDOWN | SSL_RECEIVED_SHUTDOWN);
+        BIO_closesocket(SSL_get_fd(scon));
+
+        nConn += 1;
+        if (SSL_session_reused(scon)) {
+            ver = 'r';
+        } else {
+            ver = SSL_version(scon);
+            if (ver == TLS1_VERSION)
+                ver = 't';
+            else if (ver == SSL3_VERSION)
+                ver = '3';
+            else
+                ver = '*';
+        }
+        fputc(ver, stdout);
+        fflush(stdout);
+    }
+    totalTime += tm_Time_F(STOP); /* Add the time for this iteration */
+
+    printf
+        ("\n\n%d connections in %.2fs; %.2f connections/user sec, bytes read %ld\n",
+         nConn, totalTime, ((double)nConn / totalTime), bytes_read);
+    printf
+        ("%d connections in %ld real seconds, %ld bytes read per connection\n",
+         nConn, (long)time(NULL) - finishtime + maxtime, bytes_read / nConn);
+
+    ret = 0;
+
+ end:
+    SSL_free(scon);
+    SSL_CTX_free(ctx);
+    return ret;
+}
+
+/*-
+ * doConnection - make a connection
+ */
+static SSL *doConnection(SSL *scon, const char *host, SSL_CTX *ctx)
+{
+    BIO *conn;
+    SSL *serverCon;
+    int i;
+
+    if ((conn = BIO_new(BIO_s_connect())) == NULL)
+        return NULL;
+
+    BIO_set_conn_hostname(conn, host);
+    BIO_set_conn_mode(conn, BIO_SOCK_NODELAY);
+
+    if (scon == NULL)
+        serverCon = SSL_new(ctx);
+    else {
+        serverCon = scon;
+        SSL_set_connect_state(serverCon);
+    }
+
+    SSL_set_bio(serverCon, conn, conn);
+
+    /* ok, lets connect */
+    i = SSL_connect(serverCon);
+    if (i <= 0) {
+        BIO_printf(bio_err, "ERROR\n");
+        if (verify_args.error != X509_V_OK)
+            BIO_printf(bio_err, "verify error:%s\n",
+                       X509_verify_cert_error_string(verify_args.error));
+        else
+            ERR_print_errors(bio_err);
+        if (scon == NULL)
+            SSL_free(serverCon);
+        return NULL;
+    }
+
+#if defined(SOL_SOCKET) && defined(SO_LINGER)
+    {
+        struct linger no_linger;
+        int fd;
+
+        no_linger.l_onoff  = 1;
+        no_linger.l_linger = 0;
+        fd = SSL_get_fd(serverCon);
+        if (fd >= 0)
+            (void)setsockopt(fd, SOL_SOCKET, SO_LINGER, (char*)&no_linger,
+                             sizeof(no_linger));
+    }
+#endif
+
+    return serverCon;
+}
+#endif /* OPENSSL_NO_SOCK */
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/server.pem b/trunk/3rdparty/openssl-1.1-fit/apps/server.pem
new file mode 100644
index 000000000..d0fc265f0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/server.pem
@@ -0,0 +1,52 @@
+subject= C = UK, O = OpenSSL Group, OU = FOR TESTING PURPOSES ONLY, CN = Test Server Cert
+issuer= C = UK, O = OpenSSL Group, OU = FOR TESTING PURPOSES ONLY, CN = OpenSSL Test Intermediate CA
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN RSA PRIVATE KEY-----
+MIIEpAIBAAKCAQEA84TzkjbcskbKZnrlKcXzSSgi07n+4N7kOM7uIhzpkTuU0HIv
+h4VZS2axxfV6hV3CD9MuKVg2zEhroqK1Js5n4ke230nSP/qiELfCl0R+hzRtbfKL
+tFUr1iHeU0uQ6v3q+Tg1K/Tmmg72uxKrhyHDL7z0BriPjhAHJ5XlQsvR1RCMkqzu
+D9wjSInJxpMMIgLndOclAKv4D1wQtYU7ZpTw+01XBlUhIiXb86qpYL9NqnnRq5JI
+uhmOEuxo2ca63+xaHNhD/udSyc8C0Md/yX6wlONTRFgLLv0pdLUGm1xEjfsydaQ6
+qGd7hzIKUI3hohNKJa/mHLElv7SZolPTogK/EQIDAQABAoIBAADq9FwNtuE5IRQn
+zGtO4q7Y5uCzZ8GDNYr9RKp+P2cbuWDbvVAecYq2NV9QoIiWJOAYZKklOvekIju3
+r0UZLA0PRiIrTg6NrESx3JrjWDK8QNlUO7CPTZ39/K+FrmMkV9lem9yxjJjyC34D
+AQB+YRTx+l14HppjdxNwHjAVQpIx/uO2F5xAMuk32+3K+pq9CZUtrofe1q4Agj9R
+5s8mSy9pbRo9kW9wl5xdEotz1LivFOEiqPUJTUq5J5PeMKao3vdK726XI4Z455Nm
+W2/MA0YV0ug2FYinHcZdvKM6dimH8GLfa3X8xKRfzjGjTiMSwsdjgMa4awY3tEHH
+674jhAECgYEA/zqMrc0zsbNk83sjgaYIug5kzEpN4ic020rSZsmQxSCerJTgNhmg
+utKSCt0Re09Jt3LqG48msahX8ycqDsHNvlEGPQSbMu9IYeO3Wr3fAm75GEtFWePY
+BhM73I7gkRt4s8bUiUepMG/wY45c5tRF23xi8foReHFFe9MDzh8fJFECgYEA9EFX
+4qAik1pOJGNei9BMwmx0I0gfVEIgu0tzeVqT45vcxbxr7RkTEaDoAG6PlbWP6D9a
+WQNLp4gsgRM90ZXOJ4up5DsAWDluvaF4/omabMA+MJJ5kGZ0gCj5rbZbKqUws7x8
+bp+6iBfUPJUbcqNqFmi/08Yt7vrDnMnyMw2A/sECgYEAiiuRMxnuzVm34hQcsbhH
+6ymVqf7j0PW2qK0F4H1ocT9qhzWFd+RB3kHWrCjnqODQoI6GbGr/4JepHUpre1ex
+4UEN5oSS3G0ru0rC3U4C59dZ5KwDHFm7ffZ1pr52ljfQDUsrjjIMRtuiwNK2OoRa
+WSsqiaL+SDzSB+nBmpnAizECgYBdt/y6rerWUx4MhDwwtTnel7JwHyo2MDFS6/5g
+n8qC2Lj6/fMDRE22w+CA2esp7EJNQJGv+b27iFpbJEDh+/Lf5YzIT4MwVskQ5bYB
+JFcmRxUVmf4e09D7o705U/DjCgMH09iCsbLmqQ38ONIRSHZaJtMDtNTHD1yi+jF+
+OT43gQKBgQC/2OHZoko6iRlNOAQ/tMVFNq7fL81GivoQ9F1U0Qr+DH3ZfaH8eIkX
+xT0ToMPJUzWAn8pZv0snA0um6SIgvkCuxO84OkANCVbttzXImIsL7pFzfcwV/ERK
+UM6j0ZuSMFOCr/lGPAoOQU0fskidGEHi1/kW+suSr28TqsyYZpwBDQ==
+-----END RSA PRIVATE KEY-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/server.srl b/trunk/3rdparty/openssl-1.1-fit/apps/server.srl
new file mode 100644
index 000000000..8a0f05e16
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/server.srl
@@ -0,0 +1 @@
+01
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/server2.pem b/trunk/3rdparty/openssl-1.1-fit/apps/server2.pem
new file mode 100644
index 000000000..a3927cf78
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/server2.pem
@@ -0,0 +1,52 @@
+subject= C = UK, O = OpenSSL Group, OU = FOR TESTING PURPOSES ONLY, CN = Test Server Cert #2
+issuer= C = UK, O = OpenSSL Group, OU = FOR TESTING PURPOSES ONLY, CN = OpenSSL Test Intermediate CA
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/sess_id.c b/trunk/3rdparty/openssl-1.1-fit/apps/sess_id.c
new file mode 100644
index 000000000..8fd584f3b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/sess_id.c
@@ -0,0 +1,191 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/bio.h>
+#include <openssl/err.h>
+#include <openssl/x509.h>
+#include <openssl/pem.h>
+#include <openssl/ssl.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_INFORM, OPT_OUTFORM, OPT_IN, OPT_OUT,
+    OPT_TEXT, OPT_CERT, OPT_NOOUT, OPT_CONTEXT
+} OPTION_CHOICE;
+
+const OPTIONS sess_id_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"inform", OPT_INFORM, 'F', "Input format - default PEM (DER or PEM)"},
+    {"outform", OPT_OUTFORM, 'f',
+     "Output format - default PEM (PEM, DER or NSS)"},
+    {"in", OPT_IN, 's', "Input file - default stdin"},
+    {"out", OPT_OUT, '>', "Output file - default stdout"},
+    {"text", OPT_TEXT, '-', "Print ssl session id details"},
+    {"cert", OPT_CERT, '-', "Output certificate "},
+    {"noout", OPT_NOOUT, '-', "Don't output the encoded session info"},
+    {"context", OPT_CONTEXT, 's', "Set the session ID context"},
+    {NULL}
+};
+
+static SSL_SESSION *load_sess_id(char *file, int format);
+
+int sess_id_main(int argc, char **argv)
+{
+    SSL_SESSION *x = NULL;
+    X509 *peer = NULL;
+    BIO *out = NULL;
+    char *infile = NULL, *outfile = NULL, *context = NULL, *prog;
+    int informat = FORMAT_PEM, outformat = FORMAT_PEM;
+    int cert = 0, noout = 0, text = 0, ret = 1, i, num = 0;
+    OPTION_CHOICE o;
+
+    prog = opt_init(argc, argv, sess_id_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(sess_id_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &informat))
+                goto opthelp;
+            break;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER | OPT_FMT_NSS,
+                            &outformat))
+                goto opthelp;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_TEXT:
+            text = ++num;
+            break;
+        case OPT_CERT:
+            cert = ++num;
+            break;
+        case OPT_NOOUT:
+            noout = ++num;
+            break;
+        case OPT_CONTEXT:
+            context = opt_arg();
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    x = load_sess_id(infile, informat);
+    if (x == NULL) {
+        goto end;
+    }
+    peer = SSL_SESSION_get0_peer(x);
+
+    if (context != NULL) {
+        size_t ctx_len = strlen(context);
+        if (ctx_len > SSL_MAX_SID_CTX_LENGTH) {
+            BIO_printf(bio_err, "Context too long\n");
+            goto end;
+        }
+        if (!SSL_SESSION_set1_id_context(x, (unsigned char *)context,
+                                         ctx_len)) {
+            BIO_printf(bio_err, "Error setting id context\n");
+            goto end;
+        }
+    }
+
+    if (!noout || text) {
+        out = bio_open_default(outfile, 'w', outformat);
+        if (out == NULL)
+            goto end;
+    }
+
+    if (text) {
+        SSL_SESSION_print(out, x);
+
+        if (cert) {
+            if (peer == NULL)
+                BIO_puts(out, "No certificate present\n");
+            else
+                X509_print(out, peer);
+        }
+    }
+
+    if (!noout && !cert) {
+        if (outformat == FORMAT_ASN1) {
+            i = i2d_SSL_SESSION_bio(out, x);
+        } else if (outformat == FORMAT_PEM) {
+            i = PEM_write_bio_SSL_SESSION(out, x);
+        } else if (outformat == FORMAT_NSS) {
+            i = SSL_SESSION_print_keylog(out, x);
+        } else {
+            BIO_printf(bio_err, "bad output format specified for outfile\n");
+            goto end;
+        }
+        if (!i) {
+            BIO_printf(bio_err, "unable to write SSL_SESSION\n");
+            goto end;
+        }
+    } else if (!noout && (peer != NULL)) { /* just print the certificate */
+        if (outformat == FORMAT_ASN1) {
+            i = (int)i2d_X509_bio(out, peer);
+        } else if (outformat == FORMAT_PEM) {
+            i = PEM_write_bio_X509(out, peer);
+        } else {
+            BIO_printf(bio_err, "bad output format specified for outfile\n");
+            goto end;
+        }
+        if (!i) {
+            BIO_printf(bio_err, "unable to write X509\n");
+            goto end;
+        }
+    }
+    ret = 0;
+ end:
+    BIO_free_all(out);
+    SSL_SESSION_free(x);
+    return ret;
+}
+
+static SSL_SESSION *load_sess_id(char *infile, int format)
+{
+    SSL_SESSION *x = NULL;
+    BIO *in = NULL;
+
+    in = bio_open_default(infile, 'r', format);
+    if (in == NULL)
+        goto end;
+    if (format == FORMAT_ASN1)
+        x = d2i_SSL_SESSION_bio(in, NULL);
+    else
+        x = PEM_read_bio_SSL_SESSION(in, NULL, NULL, NULL);
+    if (x == NULL) {
+        BIO_printf(bio_err, "unable to load SSL_SESSION\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+ end:
+    BIO_free(in);
+    return x;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/smime.c b/trunk/3rdparty/openssl-1.1-fit/apps/smime.c
new file mode 100644
index 000000000..6fd473775
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/smime.c
@@ -0,0 +1,647 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* S/MIME utility function */
+
+#include <stdio.h>
+#include <string.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/crypto.h>
+#include <openssl/pem.h>
+#include <openssl/err.h>
+#include <openssl/x509_vfy.h>
+#include <openssl/x509v3.h>
+
+static int save_certs(char *signerfile, STACK_OF(X509) *signers);
+static int smime_cb(int ok, X509_STORE_CTX *ctx);
+
+#define SMIME_OP        0x10
+#define SMIME_IP        0x20
+#define SMIME_SIGNERS   0x40
+#define SMIME_ENCRYPT   (1 | SMIME_OP)
+#define SMIME_DECRYPT   (2 | SMIME_IP)
+#define SMIME_SIGN      (3 | SMIME_OP | SMIME_SIGNERS)
+#define SMIME_VERIFY    (4 | SMIME_IP)
+#define SMIME_PK7OUT    (5 | SMIME_IP | SMIME_OP)
+#define SMIME_RESIGN    (6 | SMIME_IP | SMIME_OP | SMIME_SIGNERS)
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_ENCRYPT, OPT_DECRYPT, OPT_SIGN, OPT_RESIGN, OPT_VERIFY,
+    OPT_PK7OUT, OPT_TEXT, OPT_NOINTERN, OPT_NOVERIFY, OPT_NOCHAIN,
+    OPT_NOCERTS, OPT_NOATTR, OPT_NODETACH, OPT_NOSMIMECAP,
+    OPT_BINARY, OPT_NOSIGS, OPT_STREAM, OPT_INDEF, OPT_NOINDEF,
+    OPT_CRLFEOL, OPT_ENGINE, OPT_PASSIN,
+    OPT_TO, OPT_FROM, OPT_SUBJECT, OPT_SIGNER, OPT_RECIP, OPT_MD,
+    OPT_CIPHER, OPT_INKEY, OPT_KEYFORM, OPT_CERTFILE, OPT_CAFILE,
+    OPT_R_ENUM,
+    OPT_V_ENUM,
+    OPT_CAPATH, OPT_NOCAFILE, OPT_NOCAPATH, OPT_IN, OPT_INFORM, OPT_OUT,
+    OPT_OUTFORM, OPT_CONTENT
+} OPTION_CHOICE;
+
+const OPTIONS smime_options[] = {
+    {OPT_HELP_STR, 1, '-', "Usage: %s [options] cert.pem...\n"},
+    {OPT_HELP_STR, 1, '-',
+        "  cert.pem... recipient certs for encryption\n"},
+    {OPT_HELP_STR, 1, '-', "Valid options are:\n"},
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"encrypt", OPT_ENCRYPT, '-', "Encrypt message"},
+    {"decrypt", OPT_DECRYPT, '-', "Decrypt encrypted message"},
+    {"sign", OPT_SIGN, '-', "Sign message"},
+    {"verify", OPT_VERIFY, '-', "Verify signed message"},
+    {"pk7out", OPT_PK7OUT, '-', "Output PKCS#7 structure"},
+    {"nointern", OPT_NOINTERN, '-',
+     "Don't search certificates in message for signer"},
+    {"nosigs", OPT_NOSIGS, '-', "Don't verify message signature"},
+    {"noverify", OPT_NOVERIFY, '-', "Don't verify signers certificate"},
+    {"nocerts", OPT_NOCERTS, '-',
+     "Don't include signers certificate when signing"},
+    {"nodetach", OPT_NODETACH, '-', "Use opaque signing"},
+    {"noattr", OPT_NOATTR, '-', "Don't include any signed attributes"},
+    {"binary", OPT_BINARY, '-', "Don't translate message to text"},
+    {"certfile", OPT_CERTFILE, '<', "Other certificates file"},
+    {"signer", OPT_SIGNER, 's', "Signer certificate file"},
+    {"recip", OPT_RECIP, '<', "Recipient certificate file for decryption"},
+    {"in", OPT_IN, '<', "Input file"},
+    {"inform", OPT_INFORM, 'c', "Input format SMIME (default), PEM or DER"},
+    {"inkey", OPT_INKEY, 's',
+     "Input private key (if not signer or recipient)"},
+    {"keyform", OPT_KEYFORM, 'f', "Input private key format (PEM or ENGINE)"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"outform", OPT_OUTFORM, 'c',
+     "Output format SMIME (default), PEM or DER"},
+    {"content", OPT_CONTENT, '<',
+     "Supply or override content for detached signature"},
+    {"to", OPT_TO, 's', "To address"},
+    {"from", OPT_FROM, 's', "From address"},
+    {"subject", OPT_SUBJECT, 's', "Subject"},
+    {"text", OPT_TEXT, '-', "Include or delete text MIME headers"},
+    {"CApath", OPT_CAPATH, '/', "Trusted certificates directory"},
+    {"CAfile", OPT_CAFILE, '<', "Trusted certificates file"},
+    {"no-CAfile", OPT_NOCAFILE, '-',
+     "Do not load the default certificates file"},
+    {"no-CApath", OPT_NOCAPATH, '-',
+     "Do not load certificates from the default certificates directory"},
+    {"resign", OPT_RESIGN, '-', "Resign a signed message"},
+    {"nochain", OPT_NOCHAIN, '-',
+     "set PKCS7_NOCHAIN so certificates contained in the message are not used as untrusted CAs" },
+    {"nosmimecap", OPT_NOSMIMECAP, '-', "Omit the SMIMECapabilities attribute"},
+    {"stream", OPT_STREAM, '-', "Enable CMS streaming" },
+    {"indef", OPT_INDEF, '-', "Same as -stream" },
+    {"noindef", OPT_NOINDEF, '-', "Disable CMS streaming"},
+    {"crlfeol", OPT_CRLFEOL, '-', "Use CRLF as EOL termination instead of CR only"},
+    OPT_R_OPTIONS,
+    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
+    {"md", OPT_MD, 's', "Digest algorithm to use when signing or resigning"},
+    {"", OPT_CIPHER, '-', "Any supported cipher"},
+    OPT_V_OPTIONS,
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+#endif
+    {NULL}
+};
+
+int smime_main(int argc, char **argv)
+{
+    BIO *in = NULL, *out = NULL, *indata = NULL;
+    EVP_PKEY *key = NULL;
+    PKCS7 *p7 = NULL;
+    STACK_OF(OPENSSL_STRING) *sksigners = NULL, *skkeys = NULL;
+    STACK_OF(X509) *encerts = NULL, *other = NULL;
+    X509 *cert = NULL, *recip = NULL, *signer = NULL;
+    X509_STORE *store = NULL;
+    X509_VERIFY_PARAM *vpm = NULL;
+    const EVP_CIPHER *cipher = NULL;
+    const EVP_MD *sign_md = NULL;
+    const char *CAfile = NULL, *CApath = NULL, *prog = NULL;
+    char *certfile = NULL, *keyfile = NULL, *contfile = NULL;
+    char *infile = NULL, *outfile = NULL, *signerfile = NULL, *recipfile = NULL;
+    char *passinarg = NULL, *passin = NULL, *to = NULL, *from = NULL, *subject = NULL;
+    OPTION_CHOICE o;
+    int noCApath = 0, noCAfile = 0;
+    int flags = PKCS7_DETACHED, operation = 0, ret = 0, indef = 0;
+    int informat = FORMAT_SMIME, outformat = FORMAT_SMIME, keyform =
+        FORMAT_PEM;
+    int vpmtouched = 0, rv = 0;
+    ENGINE *e = NULL;
+    const char *mime_eol = "\n";
+
+    if ((vpm = X509_VERIFY_PARAM_new()) == NULL)
+        return 1;
+
+    prog = opt_init(argc, argv, smime_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(smime_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PDS, &informat))
+                goto opthelp;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PDS, &outformat))
+                goto opthelp;
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_ENCRYPT:
+            operation = SMIME_ENCRYPT;
+            break;
+        case OPT_DECRYPT:
+            operation = SMIME_DECRYPT;
+            break;
+        case OPT_SIGN:
+            operation = SMIME_SIGN;
+            break;
+        case OPT_RESIGN:
+            operation = SMIME_RESIGN;
+            break;
+        case OPT_VERIFY:
+            operation = SMIME_VERIFY;
+            break;
+        case OPT_PK7OUT:
+            operation = SMIME_PK7OUT;
+            break;
+        case OPT_TEXT:
+            flags |= PKCS7_TEXT;
+            break;
+        case OPT_NOINTERN:
+            flags |= PKCS7_NOINTERN;
+            break;
+        case OPT_NOVERIFY:
+            flags |= PKCS7_NOVERIFY;
+            break;
+        case OPT_NOCHAIN:
+            flags |= PKCS7_NOCHAIN;
+            break;
+        case OPT_NOCERTS:
+            flags |= PKCS7_NOCERTS;
+            break;
+        case OPT_NOATTR:
+            flags |= PKCS7_NOATTR;
+            break;
+        case OPT_NODETACH:
+            flags &= ~PKCS7_DETACHED;
+            break;
+        case OPT_NOSMIMECAP:
+            flags |= PKCS7_NOSMIMECAP;
+            break;
+        case OPT_BINARY:
+            flags |= PKCS7_BINARY;
+            break;
+        case OPT_NOSIGS:
+            flags |= PKCS7_NOSIGS;
+            break;
+        case OPT_STREAM:
+        case OPT_INDEF:
+            indef = 1;
+            break;
+        case OPT_NOINDEF:
+            indef = 0;
+            break;
+        case OPT_CRLFEOL:
+            flags |= PKCS7_CRLFEOL;
+            mime_eol = "\r\n";
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_PASSIN:
+            passinarg = opt_arg();
+            break;
+        case OPT_TO:
+            to = opt_arg();
+            break;
+        case OPT_FROM:
+            from = opt_arg();
+            break;
+        case OPT_SUBJECT:
+            subject = opt_arg();
+            break;
+        case OPT_SIGNER:
+            /* If previous -signer argument add signer to list */
+            if (signerfile != NULL) {
+                if (sksigners == NULL
+                    && (sksigners = sk_OPENSSL_STRING_new_null()) == NULL)
+                    goto end;
+                sk_OPENSSL_STRING_push(sksigners, signerfile);
+                if (keyfile == NULL)
+                    keyfile = signerfile;
+                if (skkeys == NULL
+                    && (skkeys = sk_OPENSSL_STRING_new_null()) == NULL)
+                    goto end;
+                sk_OPENSSL_STRING_push(skkeys, keyfile);
+                keyfile = NULL;
+            }
+            signerfile = opt_arg();
+            break;
+        case OPT_RECIP:
+            recipfile = opt_arg();
+            break;
+        case OPT_MD:
+            if (!opt_md(opt_arg(), &sign_md))
+                goto opthelp;
+            break;
+        case OPT_CIPHER:
+            if (!opt_cipher(opt_unknown(), &cipher))
+                goto opthelp;
+            break;
+        case OPT_INKEY:
+            /* If previous -inkey argument add signer to list */
+            if (keyfile != NULL) {
+                if (signerfile == NULL) {
+                    BIO_printf(bio_err,
+                               "%s: Must have -signer before -inkey\n", prog);
+                    goto opthelp;
+                }
+                if (sksigners == NULL
+                    && (sksigners = sk_OPENSSL_STRING_new_null()) == NULL)
+                    goto end;
+                sk_OPENSSL_STRING_push(sksigners, signerfile);
+                signerfile = NULL;
+                if (skkeys == NULL
+                    && (skkeys = sk_OPENSSL_STRING_new_null()) == NULL)
+                    goto end;
+                sk_OPENSSL_STRING_push(skkeys, keyfile);
+            }
+            keyfile = opt_arg();
+            break;
+        case OPT_KEYFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_ANY, &keyform))
+                goto opthelp;
+            break;
+        case OPT_CERTFILE:
+            certfile = opt_arg();
+            break;
+        case OPT_CAFILE:
+            CAfile = opt_arg();
+            break;
+        case OPT_CAPATH:
+            CApath = opt_arg();
+            break;
+        case OPT_NOCAFILE:
+            noCAfile = 1;
+            break;
+        case OPT_NOCAPATH:
+            noCApath = 1;
+            break;
+        case OPT_CONTENT:
+            contfile = opt_arg();
+            break;
+        case OPT_V_CASES:
+            if (!opt_verify(o, vpm))
+                goto opthelp;
+            vpmtouched++;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+
+    if (!(operation & SMIME_SIGNERS) && (skkeys != NULL || sksigners != NULL)) {
+        BIO_puts(bio_err, "Multiple signers or keys not allowed\n");
+        goto opthelp;
+    }
+
+    if (operation & SMIME_SIGNERS) {
+        /* Check to see if any final signer needs to be appended */
+        if (keyfile && !signerfile) {
+            BIO_puts(bio_err, "Illegal -inkey without -signer\n");
+            goto opthelp;
+        }
+        if (signerfile != NULL) {
+            if (sksigners == NULL
+                && (sksigners = sk_OPENSSL_STRING_new_null()) == NULL)
+                goto end;
+            sk_OPENSSL_STRING_push(sksigners, signerfile);
+            if (!skkeys && (skkeys = sk_OPENSSL_STRING_new_null()) == NULL)
+                goto end;
+            if (!keyfile)
+                keyfile = signerfile;
+            sk_OPENSSL_STRING_push(skkeys, keyfile);
+        }
+        if (sksigners == NULL) {
+            BIO_printf(bio_err, "No signer certificate specified\n");
+            goto opthelp;
+        }
+        signerfile = NULL;
+        keyfile = NULL;
+    } else if (operation == SMIME_DECRYPT) {
+        if (recipfile == NULL && keyfile == NULL) {
+            BIO_printf(bio_err,
+                       "No recipient certificate or key specified\n");
+            goto opthelp;
+        }
+    } else if (operation == SMIME_ENCRYPT) {
+        if (argc == 0) {
+            BIO_printf(bio_err, "No recipient(s) certificate(s) specified\n");
+            goto opthelp;
+        }
+    } else if (!operation) {
+        goto opthelp;
+    }
+
+    if (!app_passwd(passinarg, NULL, &passin, NULL)) {
+        BIO_printf(bio_err, "Error getting password\n");
+        goto end;
+    }
+
+    ret = 2;
+
+    if (!(operation & SMIME_SIGNERS))
+        flags &= ~PKCS7_DETACHED;
+
+    if (!(operation & SMIME_OP)) {
+        if (flags & PKCS7_BINARY)
+            outformat = FORMAT_BINARY;
+    }
+
+    if (!(operation & SMIME_IP)) {
+        if (flags & PKCS7_BINARY)
+            informat = FORMAT_BINARY;
+    }
+
+    if (operation == SMIME_ENCRYPT) {
+        if (cipher == NULL) {
+#ifndef OPENSSL_NO_DES
+            cipher = EVP_des_ede3_cbc();
+#else
+            BIO_printf(bio_err, "No cipher selected\n");
+            goto end;
+#endif
+        }
+        encerts = sk_X509_new_null();
+        if (encerts == NULL)
+            goto end;
+        while (*argv != NULL) {
+            cert = load_cert(*argv, FORMAT_PEM,
+                             "recipient certificate file");
+            if (cert == NULL)
+                goto end;
+            sk_X509_push(encerts, cert);
+            cert = NULL;
+            argv++;
+        }
+    }
+
+    if (certfile != NULL) {
+        if (!load_certs(certfile, &other, FORMAT_PEM, NULL,
+                        "certificate file")) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (recipfile != NULL && (operation == SMIME_DECRYPT)) {
+        if ((recip = load_cert(recipfile, FORMAT_PEM,
+                               "recipient certificate file")) == NULL) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (operation == SMIME_DECRYPT) {
+        if (keyfile == NULL)
+            keyfile = recipfile;
+    } else if (operation == SMIME_SIGN) {
+        if (keyfile == NULL)
+            keyfile = signerfile;
+    } else {
+        keyfile = NULL;
+    }
+
+    if (keyfile != NULL) {
+        key = load_key(keyfile, keyform, 0, passin, e, "signing key file");
+        if (key == NULL)
+            goto end;
+    }
+
+    in = bio_open_default(infile, 'r', informat);
+    if (in == NULL)
+        goto end;
+
+    if (operation & SMIME_IP) {
+        if (informat == FORMAT_SMIME) {
+            p7 = SMIME_read_PKCS7(in, &indata);
+        } else if (informat == FORMAT_PEM) {
+            p7 = PEM_read_bio_PKCS7(in, NULL, NULL, NULL);
+        } else if (informat == FORMAT_ASN1) {
+            p7 = d2i_PKCS7_bio(in, NULL);
+        } else {
+            BIO_printf(bio_err, "Bad input format for PKCS#7 file\n");
+            goto end;
+        }
+
+        if (p7 == NULL) {
+            BIO_printf(bio_err, "Error reading S/MIME message\n");
+            goto end;
+        }
+        if (contfile != NULL) {
+            BIO_free(indata);
+            if ((indata = BIO_new_file(contfile, "rb")) == NULL) {
+                BIO_printf(bio_err, "Can't read content file %s\n", contfile);
+                goto end;
+            }
+        }
+    }
+
+    out = bio_open_default(outfile, 'w', outformat);
+    if (out == NULL)
+        goto end;
+
+    if (operation == SMIME_VERIFY) {
+        if ((store = setup_verify(CAfile, CApath, noCAfile, noCApath)) == NULL)
+            goto end;
+        X509_STORE_set_verify_cb(store, smime_cb);
+        if (vpmtouched)
+            X509_STORE_set1_param(store, vpm);
+    }
+
+    ret = 3;
+
+    if (operation == SMIME_ENCRYPT) {
+        if (indef)
+            flags |= PKCS7_STREAM;
+        p7 = PKCS7_encrypt(encerts, in, cipher, flags);
+    } else if (operation & SMIME_SIGNERS) {
+        int i;
+        /*
+         * If detached data content we only enable streaming if S/MIME output
+         * format.
+         */
+        if (operation == SMIME_SIGN) {
+            if (flags & PKCS7_DETACHED) {
+                if (outformat == FORMAT_SMIME)
+                    flags |= PKCS7_STREAM;
+            } else if (indef) {
+                flags |= PKCS7_STREAM;
+            }
+            flags |= PKCS7_PARTIAL;
+            p7 = PKCS7_sign(NULL, NULL, other, in, flags);
+            if (p7 == NULL)
+                goto end;
+            if (flags & PKCS7_NOCERTS) {
+                for (i = 0; i < sk_X509_num(other); i++) {
+                    X509 *x = sk_X509_value(other, i);
+                    PKCS7_add_certificate(p7, x);
+                }
+            }
+        } else {
+            flags |= PKCS7_REUSE_DIGEST;
+        }
+        for (i = 0; i < sk_OPENSSL_STRING_num(sksigners); i++) {
+            signerfile = sk_OPENSSL_STRING_value(sksigners, i);
+            keyfile = sk_OPENSSL_STRING_value(skkeys, i);
+            signer = load_cert(signerfile, FORMAT_PEM,
+                               "signer certificate");
+            if (signer == NULL)
+                goto end;
+            key = load_key(keyfile, keyform, 0, passin, e, "signing key file");
+            if (key == NULL)
+                goto end;
+            if (!PKCS7_sign_add_signer(p7, signer, key, sign_md, flags))
+                goto end;
+            X509_free(signer);
+            signer = NULL;
+            EVP_PKEY_free(key);
+            key = NULL;
+        }
+        /* If not streaming or resigning finalize structure */
+        if ((operation == SMIME_SIGN) && !(flags & PKCS7_STREAM)) {
+            if (!PKCS7_final(p7, in, flags))
+                goto end;
+        }
+    }
+
+    if (p7 == NULL) {
+        BIO_printf(bio_err, "Error creating PKCS#7 structure\n");
+        goto end;
+    }
+
+    ret = 4;
+    if (operation == SMIME_DECRYPT) {
+        if (!PKCS7_decrypt(p7, key, recip, out, flags)) {
+            BIO_printf(bio_err, "Error decrypting PKCS#7 structure\n");
+            goto end;
+        }
+    } else if (operation == SMIME_VERIFY) {
+        STACK_OF(X509) *signers;
+        if (PKCS7_verify(p7, other, store, indata, out, flags))
+            BIO_printf(bio_err, "Verification successful\n");
+        else {
+            BIO_printf(bio_err, "Verification failure\n");
+            goto end;
+        }
+        signers = PKCS7_get0_signers(p7, other, flags);
+        if (!save_certs(signerfile, signers)) {
+            BIO_printf(bio_err, "Error writing signers to %s\n", signerfile);
+            ret = 5;
+            goto end;
+        }
+        sk_X509_free(signers);
+    } else if (operation == SMIME_PK7OUT) {
+        PEM_write_bio_PKCS7(out, p7);
+    } else {
+        if (to)
+            BIO_printf(out, "To: %s%s", to, mime_eol);
+        if (from)
+            BIO_printf(out, "From: %s%s", from, mime_eol);
+        if (subject)
+            BIO_printf(out, "Subject: %s%s", subject, mime_eol);
+        if (outformat == FORMAT_SMIME) {
+            if (operation == SMIME_RESIGN)
+                rv = SMIME_write_PKCS7(out, p7, indata, flags);
+            else
+                rv = SMIME_write_PKCS7(out, p7, in, flags);
+        } else if (outformat == FORMAT_PEM) {
+            rv = PEM_write_bio_PKCS7_stream(out, p7, in, flags);
+        } else if (outformat == FORMAT_ASN1) {
+            rv = i2d_PKCS7_bio_stream(out, p7, in, flags);
+        } else {
+            BIO_printf(bio_err, "Bad output format for PKCS#7 file\n");
+            goto end;
+        }
+        if (rv == 0) {
+            BIO_printf(bio_err, "Error writing output\n");
+            ret = 3;
+            goto end;
+        }
+    }
+    ret = 0;
+ end:
+    if (ret)
+        ERR_print_errors(bio_err);
+    sk_X509_pop_free(encerts, X509_free);
+    sk_X509_pop_free(other, X509_free);
+    X509_VERIFY_PARAM_free(vpm);
+    sk_OPENSSL_STRING_free(sksigners);
+    sk_OPENSSL_STRING_free(skkeys);
+    X509_STORE_free(store);
+    X509_free(cert);
+    X509_free(recip);
+    X509_free(signer);
+    EVP_PKEY_free(key);
+    PKCS7_free(p7);
+    release_engine(e);
+    BIO_free(in);
+    BIO_free(indata);
+    BIO_free_all(out);
+    OPENSSL_free(passin);
+    return ret;
+}
+
+static int save_certs(char *signerfile, STACK_OF(X509) *signers)
+{
+    int i;
+    BIO *tmp;
+
+    if (signerfile == NULL)
+        return 1;
+    tmp = BIO_new_file(signerfile, "w");
+    if (tmp == NULL)
+        return 0;
+    for (i = 0; i < sk_X509_num(signers); i++)
+        PEM_write_bio_X509(tmp, sk_X509_value(signers, i));
+    BIO_free(tmp);
+    return 1;
+}
+
+/* Minimal callback just to output policy info (if any) */
+
+static int smime_cb(int ok, X509_STORE_CTX *ctx)
+{
+    int error;
+
+    error = X509_STORE_CTX_get_error(ctx);
+
+    if ((error != X509_V_ERR_NO_EXPLICIT_POLICY)
+        && ((error != X509_V_OK) || (ok != 2)))
+        return ok;
+
+    policies_print(ctx);
+
+    return ok;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/speed.c b/trunk/3rdparty/openssl-1.1-fit/apps/speed.c
new file mode 100644
index 000000000..506737d05
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/speed.c
@@ -0,0 +1,3691 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#undef SECONDS
+#define SECONDS                 3
+#define RSA_SECONDS             10
+#define DSA_SECONDS             10
+#define ECDSA_SECONDS   10
+#define ECDH_SECONDS    10
+#define EdDSA_SECONDS   10
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <math.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/crypto.h>
+#include <openssl/rand.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/async.h>
+#if !defined(OPENSSL_SYS_MSDOS)
+# include OPENSSL_UNISTD
+#endif
+
+#if defined(_WIN32)
+# include <windows.h>
+#endif
+
+#include <openssl/bn.h>
+#ifndef OPENSSL_NO_DES
+# include <openssl/des.h>
+#endif
+#include <openssl/aes.h>
+#ifndef OPENSSL_NO_CAMELLIA
+# include <openssl/camellia.h>
+#endif
+#ifndef OPENSSL_NO_MD2
+# include <openssl/md2.h>
+#endif
+#ifndef OPENSSL_NO_MDC2
+# include <openssl/mdc2.h>
+#endif
+#ifndef OPENSSL_NO_MD4
+# include <openssl/md4.h>
+#endif
+#ifndef OPENSSL_NO_MD5
+# include <openssl/md5.h>
+#endif
+#include <openssl/hmac.h>
+#include <openssl/sha.h>
+#ifndef OPENSSL_NO_RMD160
+# include <openssl/ripemd.h>
+#endif
+#ifndef OPENSSL_NO_WHIRLPOOL
+# include <openssl/whrlpool.h>
+#endif
+#ifndef OPENSSL_NO_RC4
+# include <openssl/rc4.h>
+#endif
+#ifndef OPENSSL_NO_RC5
+# include <openssl/rc5.h>
+#endif
+#ifndef OPENSSL_NO_RC2
+# include <openssl/rc2.h>
+#endif
+#ifndef OPENSSL_NO_IDEA
+# include <openssl/idea.h>
+#endif
+#ifndef OPENSSL_NO_SEED
+# include <openssl/seed.h>
+#endif
+#ifndef OPENSSL_NO_BF
+# include <openssl/blowfish.h>
+#endif
+#ifndef OPENSSL_NO_CAST
+# include <openssl/cast.h>
+#endif
+#ifndef OPENSSL_NO_RSA
+# include <openssl/rsa.h>
+# include "./testrsa.h"
+#endif
+#include <openssl/x509.h>
+#ifndef OPENSSL_NO_DSA
+# include <openssl/dsa.h>
+# include "./testdsa.h"
+#endif
+#ifndef OPENSSL_NO_EC
+# include <openssl/ec.h>
+#endif
+#include <openssl/modes.h>
+
+#ifndef HAVE_FORK
+# if defined(OPENSSL_SYS_VMS) || defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_VXWORKS)
+#  define HAVE_FORK 0
+# else
+#  define HAVE_FORK 1
+# endif
+#endif
+
+#if HAVE_FORK
+# undef NO_FORK
+#else
+# define NO_FORK
+#endif
+
+#define MAX_MISALIGNMENT 63
+#define MAX_ECDH_SIZE   256
+#define MISALIGN        64
+
+typedef struct openssl_speed_sec_st {
+    int sym;
+    int rsa;
+    int dsa;
+    int ecdsa;
+    int ecdh;
+    int eddsa;
+} openssl_speed_sec_t;
+
+static volatile int run = 0;
+
+static int mr = 0;
+static int usertime = 1;
+
+#ifndef OPENSSL_NO_MD2
+static int EVP_Digest_MD2_loop(void *args);
+#endif
+
+#ifndef OPENSSL_NO_MDC2
+static int EVP_Digest_MDC2_loop(void *args);
+#endif
+#ifndef OPENSSL_NO_MD4
+static int EVP_Digest_MD4_loop(void *args);
+#endif
+#ifndef OPENSSL_NO_MD5
+static int MD5_loop(void *args);
+static int HMAC_loop(void *args);
+#endif
+static int SHA1_loop(void *args);
+static int SHA256_loop(void *args);
+static int SHA512_loop(void *args);
+#ifndef OPENSSL_NO_WHIRLPOOL
+static int WHIRLPOOL_loop(void *args);
+#endif
+#ifndef OPENSSL_NO_RMD160
+static int EVP_Digest_RMD160_loop(void *args);
+#endif
+#ifndef OPENSSL_NO_RC4
+static int RC4_loop(void *args);
+#endif
+#ifndef OPENSSL_NO_DES
+static int DES_ncbc_encrypt_loop(void *args);
+static int DES_ede3_cbc_encrypt_loop(void *args);
+#endif
+static int AES_cbc_128_encrypt_loop(void *args);
+static int AES_cbc_192_encrypt_loop(void *args);
+static int AES_ige_128_encrypt_loop(void *args);
+static int AES_cbc_256_encrypt_loop(void *args);
+static int AES_ige_192_encrypt_loop(void *args);
+static int AES_ige_256_encrypt_loop(void *args);
+static int CRYPTO_gcm128_aad_loop(void *args);
+static int RAND_bytes_loop(void *args);
+static int EVP_Update_loop(void *args);
+static int EVP_Update_loop_ccm(void *args);
+static int EVP_Update_loop_aead(void *args);
+static int EVP_Digest_loop(void *args);
+#ifndef OPENSSL_NO_RSA
+static int RSA_sign_loop(void *args);
+static int RSA_verify_loop(void *args);
+#endif
+#ifndef OPENSSL_NO_DSA
+static int DSA_sign_loop(void *args);
+static int DSA_verify_loop(void *args);
+#endif
+#ifndef OPENSSL_NO_EC
+static int ECDSA_sign_loop(void *args);
+static int ECDSA_verify_loop(void *args);
+static int EdDSA_sign_loop(void *args);
+static int EdDSA_verify_loop(void *args);
+#endif
+
+static double Time_F(int s);
+static void print_message(const char *s, long num, int length, int tm);
+static void pkey_print_message(const char *str, const char *str2,
+                               long num, unsigned int bits, int sec);
+static void print_result(int alg, int run_no, int count, double time_used);
+#ifndef NO_FORK
+static int do_multi(int multi, int size_num);
+#endif
+
+static const int lengths_list[] = {
+    16, 64, 256, 1024, 8 * 1024, 16 * 1024
+};
+static const int *lengths = lengths_list;
+
+static const int aead_lengths_list[] = {
+    2, 31, 136, 1024, 8 * 1024, 16 * 1024
+};
+
+#define START   0
+#define STOP    1
+
+#ifdef SIGALRM
+
+static void alarmed(int sig)
+{
+    signal(SIGALRM, alarmed);
+    run = 0;
+}
+
+static double Time_F(int s)
+{
+    double ret = app_tminterval(s, usertime);
+    if (s == STOP)
+        alarm(0);
+    return ret;
+}
+
+#elif defined(_WIN32)
+
+# define SIGALRM -1
+
+static unsigned int lapse;
+static volatile unsigned int schlock;
+static void alarm_win32(unsigned int secs)
+{
+    lapse = secs * 1000;
+}
+
+# define alarm alarm_win32
+
+static DWORD WINAPI sleepy(VOID * arg)
+{
+    schlock = 1;
+    Sleep(lapse);
+    run = 0;
+    return 0;
+}
+
+static double Time_F(int s)
+{
+    double ret;
+    static HANDLE thr;
+
+    if (s == START) {
+        schlock = 0;
+        thr = CreateThread(NULL, 4096, sleepy, NULL, 0, NULL);
+        if (thr == NULL) {
+            DWORD err = GetLastError();
+            BIO_printf(bio_err, "unable to CreateThread (%lu)", err);
+            ExitProcess(err);
+        }
+        while (!schlock)
+            Sleep(0);           /* scheduler spinlock */
+        ret = app_tminterval(s, usertime);
+    } else {
+        ret = app_tminterval(s, usertime);
+        if (run)
+            TerminateThread(thr, 0);
+        CloseHandle(thr);
+    }
+
+    return ret;
+}
+#else
+static double Time_F(int s)
+{
+    return app_tminterval(s, usertime);
+}
+#endif
+
+static void multiblock_speed(const EVP_CIPHER *evp_cipher, int lengths_single,
+                             const openssl_speed_sec_t *seconds);
+
+#define found(value, pairs, result)\
+    opt_found(value, result, pairs, OSSL_NELEM(pairs))
+static int opt_found(const char *name, unsigned int *result,
+                     const OPT_PAIR pairs[], unsigned int nbelem)
+{
+    unsigned int idx;
+
+    for (idx = 0; idx < nbelem; ++idx, pairs++)
+        if (strcmp(name, pairs->name) == 0) {
+            *result = pairs->retval;
+            return 1;
+        }
+    return 0;
+}
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_ELAPSED, OPT_EVP, OPT_DECRYPT, OPT_ENGINE, OPT_MULTI,
+    OPT_MR, OPT_MB, OPT_MISALIGN, OPT_ASYNCJOBS, OPT_R_ENUM,
+    OPT_PRIMES, OPT_SECONDS, OPT_BYTES, OPT_AEAD
+} OPTION_CHOICE;
+
+const OPTIONS speed_options[] = {
+    {OPT_HELP_STR, 1, '-', "Usage: %s [options] ciphers...\n"},
+    {OPT_HELP_STR, 1, '-', "Valid options are:\n"},
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"evp", OPT_EVP, 's', "Use EVP-named cipher or digest"},
+    {"decrypt", OPT_DECRYPT, '-',
+     "Time decryption instead of encryption (only EVP)"},
+    {"aead", OPT_AEAD, '-',
+     "Benchmark EVP-named AEAD cipher in TLS-like sequence"},
+    {"mb", OPT_MB, '-',
+     "Enable (tls1>=1) multi-block mode on EVP-named cipher"},
+    {"mr", OPT_MR, '-', "Produce machine readable output"},
+#ifndef NO_FORK
+    {"multi", OPT_MULTI, 'p', "Run benchmarks in parallel"},
+#endif
+#ifndef OPENSSL_NO_ASYNC
+    {"async_jobs", OPT_ASYNCJOBS, 'p',
+     "Enable async mode and start specified number of jobs"},
+#endif
+    OPT_R_OPTIONS,
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+#endif
+    {"elapsed", OPT_ELAPSED, '-',
+     "Use wall-clock time instead of CPU user time as divisor"},
+    {"primes", OPT_PRIMES, 'p', "Specify number of primes (for RSA only)"},
+    {"seconds", OPT_SECONDS, 'p',
+     "Run benchmarks for specified amount of seconds"},
+    {"bytes", OPT_BYTES, 'p',
+     "Run [non-PKI] benchmarks on custom-sized buffer"},
+    {"misalign", OPT_MISALIGN, 'p',
+     "Use specified offset to mis-align buffers"},
+    {NULL}
+};
+
+#define D_MD2           0
+#define D_MDC2          1
+#define D_MD4           2
+#define D_MD5           3
+#define D_HMAC          4
+#define D_SHA1          5
+#define D_RMD160        6
+#define D_RC4           7
+#define D_CBC_DES       8
+#define D_EDE3_DES      9
+#define D_CBC_IDEA      10
+#define D_CBC_SEED      11
+#define D_CBC_RC2       12
+#define D_CBC_RC5       13
+#define D_CBC_BF        14
+#define D_CBC_CAST      15
+#define D_CBC_128_AES   16
+#define D_CBC_192_AES   17
+#define D_CBC_256_AES   18
+#define D_CBC_128_CML   19
+#define D_CBC_192_CML   20
+#define D_CBC_256_CML   21
+#define D_EVP           22
+#define D_SHA256        23
+#define D_SHA512        24
+#define D_WHIRLPOOL     25
+#define D_IGE_128_AES   26
+#define D_IGE_192_AES   27
+#define D_IGE_256_AES   28
+#define D_GHASH         29
+#define D_RAND          30
+/* name of algorithms to test */
+static const char *names[] = {
+    "md2", "mdc2", "md4", "md5", "hmac(md5)", "sha1", "rmd160", "rc4",
+    "des cbc", "des ede3", "idea cbc", "seed cbc",
+    "rc2 cbc", "rc5-32/12 cbc", "blowfish cbc", "cast cbc",
+    "aes-128 cbc", "aes-192 cbc", "aes-256 cbc",
+    "camellia-128 cbc", "camellia-192 cbc", "camellia-256 cbc",
+    "evp", "sha256", "sha512", "whirlpool",
+    "aes-128 ige", "aes-192 ige", "aes-256 ige", "ghash",
+    "rand"
+};
+#define ALGOR_NUM       OSSL_NELEM(names)
+
+/* list of configured algorithm (remaining) */
+static const OPT_PAIR doit_choices[] = {
+#ifndef OPENSSL_NO_MD2
+    {"md2", D_MD2},
+#endif
+#ifndef OPENSSL_NO_MDC2
+    {"mdc2", D_MDC2},
+#endif
+#ifndef OPENSSL_NO_MD4
+    {"md4", D_MD4},
+#endif
+#ifndef OPENSSL_NO_MD5
+    {"md5", D_MD5},
+    {"hmac", D_HMAC},
+#endif
+    {"sha1", D_SHA1},
+    {"sha256", D_SHA256},
+    {"sha512", D_SHA512},
+#ifndef OPENSSL_NO_WHIRLPOOL
+    {"whirlpool", D_WHIRLPOOL},
+#endif
+#ifndef OPENSSL_NO_RMD160
+    {"ripemd", D_RMD160},
+    {"rmd160", D_RMD160},
+    {"ripemd160", D_RMD160},
+#endif
+#ifndef OPENSSL_NO_RC4
+    {"rc4", D_RC4},
+#endif
+#ifndef OPENSSL_NO_DES
+    {"des-cbc", D_CBC_DES},
+    {"des-ede3", D_EDE3_DES},
+#endif
+    {"aes-128-cbc", D_CBC_128_AES},
+    {"aes-192-cbc", D_CBC_192_AES},
+    {"aes-256-cbc", D_CBC_256_AES},
+    {"aes-128-ige", D_IGE_128_AES},
+    {"aes-192-ige", D_IGE_192_AES},
+    {"aes-256-ige", D_IGE_256_AES},
+#ifndef OPENSSL_NO_RC2
+    {"rc2-cbc", D_CBC_RC2},
+    {"rc2", D_CBC_RC2},
+#endif
+#ifndef OPENSSL_NO_RC5
+    {"rc5-cbc", D_CBC_RC5},
+    {"rc5", D_CBC_RC5},
+#endif
+#ifndef OPENSSL_NO_IDEA
+    {"idea-cbc", D_CBC_IDEA},
+    {"idea", D_CBC_IDEA},
+#endif
+#ifndef OPENSSL_NO_SEED
+    {"seed-cbc", D_CBC_SEED},
+    {"seed", D_CBC_SEED},
+#endif
+#ifndef OPENSSL_NO_BF
+    {"bf-cbc", D_CBC_BF},
+    {"blowfish", D_CBC_BF},
+    {"bf", D_CBC_BF},
+#endif
+#ifndef OPENSSL_NO_CAST
+    {"cast-cbc", D_CBC_CAST},
+    {"cast", D_CBC_CAST},
+    {"cast5", D_CBC_CAST},
+#endif
+    {"ghash", D_GHASH},
+    {"rand", D_RAND}
+};
+
+static double results[ALGOR_NUM][OSSL_NELEM(lengths_list)];
+
+#ifndef OPENSSL_NO_DSA
+# define R_DSA_512       0
+# define R_DSA_1024      1
+# define R_DSA_2048      2
+static const OPT_PAIR dsa_choices[] = {
+    {"dsa512", R_DSA_512},
+    {"dsa1024", R_DSA_1024},
+    {"dsa2048", R_DSA_2048}
+};
+# define DSA_NUM         OSSL_NELEM(dsa_choices)
+
+static double dsa_results[DSA_NUM][2];  /* 2 ops: sign then verify */
+#endif  /* OPENSSL_NO_DSA */
+
+#define R_RSA_512       0
+#define R_RSA_1024      1
+#define R_RSA_2048      2
+#define R_RSA_3072      3
+#define R_RSA_4096      4
+#define R_RSA_7680      5
+#define R_RSA_15360     6
+#ifndef OPENSSL_NO_RSA
+static const OPT_PAIR rsa_choices[] = {
+    {"rsa512", R_RSA_512},
+    {"rsa1024", R_RSA_1024},
+    {"rsa2048", R_RSA_2048},
+    {"rsa3072", R_RSA_3072},
+    {"rsa4096", R_RSA_4096},
+    {"rsa7680", R_RSA_7680},
+    {"rsa15360", R_RSA_15360}
+};
+# define RSA_NUM OSSL_NELEM(rsa_choices)
+
+static double rsa_results[RSA_NUM][2];  /* 2 ops: sign then verify */
+#endif /* OPENSSL_NO_RSA */
+
+#define R_EC_P160    0
+#define R_EC_P192    1
+#define R_EC_P224    2
+#define R_EC_P256    3
+#define R_EC_P384    4
+#define R_EC_P521    5
+#define R_EC_K163    6
+#define R_EC_K233    7
+#define R_EC_K283    8
+#define R_EC_K409    9
+#define R_EC_K571    10
+#define R_EC_B163    11
+#define R_EC_B233    12
+#define R_EC_B283    13
+#define R_EC_B409    14
+#define R_EC_B571    15
+#define R_EC_BRP256R1  16
+#define R_EC_BRP256T1  17
+#define R_EC_BRP384R1  18
+#define R_EC_BRP384T1  19
+#define R_EC_BRP512R1  20
+#define R_EC_BRP512T1  21
+#define R_EC_X25519  22
+#define R_EC_X448    23
+#ifndef OPENSSL_NO_EC
+static OPT_PAIR ecdsa_choices[] = {
+    {"ecdsap160", R_EC_P160},
+    {"ecdsap192", R_EC_P192},
+    {"ecdsap224", R_EC_P224},
+    {"ecdsap256", R_EC_P256},
+    {"ecdsap384", R_EC_P384},
+    {"ecdsap521", R_EC_P521},
+    {"ecdsak163", R_EC_K163},
+    {"ecdsak233", R_EC_K233},
+    {"ecdsak283", R_EC_K283},
+    {"ecdsak409", R_EC_K409},
+    {"ecdsak571", R_EC_K571},
+    {"ecdsab163", R_EC_B163},
+    {"ecdsab233", R_EC_B233},
+    {"ecdsab283", R_EC_B283},
+    {"ecdsab409", R_EC_B409},
+    {"ecdsab571", R_EC_B571},
+    {"ecdsabrp256r1", R_EC_BRP256R1},
+    {"ecdsabrp256t1", R_EC_BRP256T1},
+    {"ecdsabrp384r1", R_EC_BRP384R1},
+    {"ecdsabrp384t1", R_EC_BRP384T1},
+    {"ecdsabrp512r1", R_EC_BRP512R1},
+    {"ecdsabrp512t1", R_EC_BRP512T1}
+};
+# define ECDSA_NUM       OSSL_NELEM(ecdsa_choices)
+
+static double ecdsa_results[ECDSA_NUM][2];    /* 2 ops: sign then verify */
+
+static const OPT_PAIR ecdh_choices[] = {
+    {"ecdhp160", R_EC_P160},
+    {"ecdhp192", R_EC_P192},
+    {"ecdhp224", R_EC_P224},
+    {"ecdhp256", R_EC_P256},
+    {"ecdhp384", R_EC_P384},
+    {"ecdhp521", R_EC_P521},
+    {"ecdhk163", R_EC_K163},
+    {"ecdhk233", R_EC_K233},
+    {"ecdhk283", R_EC_K283},
+    {"ecdhk409", R_EC_K409},
+    {"ecdhk571", R_EC_K571},
+    {"ecdhb163", R_EC_B163},
+    {"ecdhb233", R_EC_B233},
+    {"ecdhb283", R_EC_B283},
+    {"ecdhb409", R_EC_B409},
+    {"ecdhb571", R_EC_B571},
+    {"ecdhbrp256r1", R_EC_BRP256R1},
+    {"ecdhbrp256t1", R_EC_BRP256T1},
+    {"ecdhbrp384r1", R_EC_BRP384R1},
+    {"ecdhbrp384t1", R_EC_BRP384T1},
+    {"ecdhbrp512r1", R_EC_BRP512R1},
+    {"ecdhbrp512t1", R_EC_BRP512T1},
+    {"ecdhx25519", R_EC_X25519},
+    {"ecdhx448", R_EC_X448}
+};
+# define EC_NUM       OSSL_NELEM(ecdh_choices)
+
+static double ecdh_results[EC_NUM][1];  /* 1 op: derivation */
+
+#define R_EC_Ed25519    0
+#define R_EC_Ed448      1
+static OPT_PAIR eddsa_choices[] = {
+    {"ed25519", R_EC_Ed25519},
+    {"ed448", R_EC_Ed448}
+};
+# define EdDSA_NUM       OSSL_NELEM(eddsa_choices)
+
+static double eddsa_results[EdDSA_NUM][2];    /* 2 ops: sign then verify */
+#endif /* OPENSSL_NO_EC */
+
+#ifndef SIGALRM
+# define COND(d) (count < (d))
+# define COUNT(d) (d)
+#else
+# define COND(unused_cond) (run && count<0x7fffffff)
+# define COUNT(d) (count)
+#endif                          /* SIGALRM */
+
+typedef struct loopargs_st {
+    ASYNC_JOB *inprogress_job;
+    ASYNC_WAIT_CTX *wait_ctx;
+    unsigned char *buf;
+    unsigned char *buf2;
+    unsigned char *buf_malloc;
+    unsigned char *buf2_malloc;
+    unsigned char *key;
+    unsigned int siglen;
+    size_t sigsize;
+#ifndef OPENSSL_NO_RSA
+    RSA *rsa_key[RSA_NUM];
+#endif
+#ifndef OPENSSL_NO_DSA
+    DSA *dsa_key[DSA_NUM];
+#endif
+#ifndef OPENSSL_NO_EC
+    EC_KEY *ecdsa[ECDSA_NUM];
+    EVP_PKEY_CTX *ecdh_ctx[EC_NUM];
+    EVP_MD_CTX *eddsa_ctx[EdDSA_NUM];
+    unsigned char *secret_a;
+    unsigned char *secret_b;
+    size_t outlen[EC_NUM];
+#endif
+    EVP_CIPHER_CTX *ctx;
+    HMAC_CTX *hctx;
+    GCM128_CONTEXT *gcm_ctx;
+} loopargs_t;
+static int run_benchmark(int async_jobs, int (*loop_function) (void *),
+                         loopargs_t * loopargs);
+
+static unsigned int testnum;
+
+/* Nb of iterations to do per algorithm and key-size */
+static long c[ALGOR_NUM][OSSL_NELEM(lengths_list)];
+
+#ifndef OPENSSL_NO_MD2
+static int EVP_Digest_MD2_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char md2[MD2_DIGEST_LENGTH];
+    int count;
+
+    for (count = 0; COND(c[D_MD2][testnum]); count++) {
+        if (!EVP_Digest(buf, (size_t)lengths[testnum], md2, NULL, EVP_md2(),
+                        NULL))
+            return -1;
+    }
+    return count;
+}
+#endif
+
+#ifndef OPENSSL_NO_MDC2
+static int EVP_Digest_MDC2_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char mdc2[MDC2_DIGEST_LENGTH];
+    int count;
+
+    for (count = 0; COND(c[D_MDC2][testnum]); count++) {
+        if (!EVP_Digest(buf, (size_t)lengths[testnum], mdc2, NULL, EVP_mdc2(),
+                        NULL))
+            return -1;
+    }
+    return count;
+}
+#endif
+
+#ifndef OPENSSL_NO_MD4
+static int EVP_Digest_MD4_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char md4[MD4_DIGEST_LENGTH];
+    int count;
+
+    for (count = 0; COND(c[D_MD4][testnum]); count++) {
+        if (!EVP_Digest(buf, (size_t)lengths[testnum], md4, NULL, EVP_md4(),
+                        NULL))
+            return -1;
+    }
+    return count;
+}
+#endif
+
+#ifndef OPENSSL_NO_MD5
+static int MD5_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char md5[MD5_DIGEST_LENGTH];
+    int count;
+    for (count = 0; COND(c[D_MD5][testnum]); count++)
+        MD5(buf, lengths[testnum], md5);
+    return count;
+}
+
+static int HMAC_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    HMAC_CTX *hctx = tempargs->hctx;
+    unsigned char hmac[MD5_DIGEST_LENGTH];
+    int count;
+
+    for (count = 0; COND(c[D_HMAC][testnum]); count++) {
+        HMAC_Init_ex(hctx, NULL, 0, NULL, NULL);
+        HMAC_Update(hctx, buf, lengths[testnum]);
+        HMAC_Final(hctx, hmac, NULL);
+    }
+    return count;
+}
+#endif
+
+static int SHA1_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char sha[SHA_DIGEST_LENGTH];
+    int count;
+    for (count = 0; COND(c[D_SHA1][testnum]); count++)
+        SHA1(buf, lengths[testnum], sha);
+    return count;
+}
+
+static int SHA256_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char sha256[SHA256_DIGEST_LENGTH];
+    int count;
+    for (count = 0; COND(c[D_SHA256][testnum]); count++)
+        SHA256(buf, lengths[testnum], sha256);
+    return count;
+}
+
+static int SHA512_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char sha512[SHA512_DIGEST_LENGTH];
+    int count;
+    for (count = 0; COND(c[D_SHA512][testnum]); count++)
+        SHA512(buf, lengths[testnum], sha512);
+    return count;
+}
+
+#ifndef OPENSSL_NO_WHIRLPOOL
+static int WHIRLPOOL_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char whirlpool[WHIRLPOOL_DIGEST_LENGTH];
+    int count;
+    for (count = 0; COND(c[D_WHIRLPOOL][testnum]); count++)
+        WHIRLPOOL(buf, lengths[testnum], whirlpool);
+    return count;
+}
+#endif
+
+#ifndef OPENSSL_NO_RMD160
+static int EVP_Digest_RMD160_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char rmd160[RIPEMD160_DIGEST_LENGTH];
+    int count;
+    for (count = 0; COND(c[D_RMD160][testnum]); count++) {
+        if (!EVP_Digest(buf, (size_t)lengths[testnum], &(rmd160[0]),
+                        NULL, EVP_ripemd160(), NULL))
+            return -1;
+    }
+    return count;
+}
+#endif
+
+#ifndef OPENSSL_NO_RC4
+static RC4_KEY rc4_ks;
+static int RC4_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    int count;
+    for (count = 0; COND(c[D_RC4][testnum]); count++)
+        RC4(&rc4_ks, (size_t)lengths[testnum], buf, buf);
+    return count;
+}
+#endif
+
+#ifndef OPENSSL_NO_DES
+static unsigned char DES_iv[8];
+static DES_key_schedule sch;
+static DES_key_schedule sch2;
+static DES_key_schedule sch3;
+static int DES_ncbc_encrypt_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    int count;
+    for (count = 0; COND(c[D_CBC_DES][testnum]); count++)
+        DES_ncbc_encrypt(buf, buf, lengths[testnum], &sch,
+                         &DES_iv, DES_ENCRYPT);
+    return count;
+}
+
+static int DES_ede3_cbc_encrypt_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    int count;
+    for (count = 0; COND(c[D_EDE3_DES][testnum]); count++)
+        DES_ede3_cbc_encrypt(buf, buf, lengths[testnum],
+                             &sch, &sch2, &sch3, &DES_iv, DES_ENCRYPT);
+    return count;
+}
+#endif
+
+#define MAX_BLOCK_SIZE 128
+
+static unsigned char iv[2 * MAX_BLOCK_SIZE / 8];
+static AES_KEY aes_ks1, aes_ks2, aes_ks3;
+static int AES_cbc_128_encrypt_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    int count;
+    for (count = 0; COND(c[D_CBC_128_AES][testnum]); count++)
+        AES_cbc_encrypt(buf, buf,
+                        (size_t)lengths[testnum], &aes_ks1, iv, AES_ENCRYPT);
+    return count;
+}
+
+static int AES_cbc_192_encrypt_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    int count;
+    for (count = 0; COND(c[D_CBC_192_AES][testnum]); count++)
+        AES_cbc_encrypt(buf, buf,
+                        (size_t)lengths[testnum], &aes_ks2, iv, AES_ENCRYPT);
+    return count;
+}
+
+static int AES_cbc_256_encrypt_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    int count;
+    for (count = 0; COND(c[D_CBC_256_AES][testnum]); count++)
+        AES_cbc_encrypt(buf, buf,
+                        (size_t)lengths[testnum], &aes_ks3, iv, AES_ENCRYPT);
+    return count;
+}
+
+static int AES_ige_128_encrypt_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char *buf2 = tempargs->buf2;
+    int count;
+    for (count = 0; COND(c[D_IGE_128_AES][testnum]); count++)
+        AES_ige_encrypt(buf, buf2,
+                        (size_t)lengths[testnum], &aes_ks1, iv, AES_ENCRYPT);
+    return count;
+}
+
+static int AES_ige_192_encrypt_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char *buf2 = tempargs->buf2;
+    int count;
+    for (count = 0; COND(c[D_IGE_192_AES][testnum]); count++)
+        AES_ige_encrypt(buf, buf2,
+                        (size_t)lengths[testnum], &aes_ks2, iv, AES_ENCRYPT);
+    return count;
+}
+
+static int AES_ige_256_encrypt_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char *buf2 = tempargs->buf2;
+    int count;
+    for (count = 0; COND(c[D_IGE_256_AES][testnum]); count++)
+        AES_ige_encrypt(buf, buf2,
+                        (size_t)lengths[testnum], &aes_ks3, iv, AES_ENCRYPT);
+    return count;
+}
+
+static int CRYPTO_gcm128_aad_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    GCM128_CONTEXT *gcm_ctx = tempargs->gcm_ctx;
+    int count;
+    for (count = 0; COND(c[D_GHASH][testnum]); count++)
+        CRYPTO_gcm128_aad(gcm_ctx, buf, lengths[testnum]);
+    return count;
+}
+
+static int RAND_bytes_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    int count;
+
+    for (count = 0; COND(c[D_RAND][testnum]); count++)
+        RAND_bytes(buf, lengths[testnum]);
+    return count;
+}
+
+static long save_count = 0;
+static int decrypt = 0;
+static int EVP_Update_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    EVP_CIPHER_CTX *ctx = tempargs->ctx;
+    int outl, count, rc;
+#ifndef SIGALRM
+    int nb_iter = save_count * 4 * lengths[0] / lengths[testnum];
+#endif
+    if (decrypt) {
+        for (count = 0; COND(nb_iter); count++) {
+            rc = EVP_DecryptUpdate(ctx, buf, &outl, buf, lengths[testnum]);
+            if (rc != 1) {
+                /* reset iv in case of counter overflow */
+                EVP_CipherInit_ex(ctx, NULL, NULL, NULL, iv, -1);
+            }
+        }
+    } else {
+        for (count = 0; COND(nb_iter); count++) {
+            rc = EVP_EncryptUpdate(ctx, buf, &outl, buf, lengths[testnum]);
+            if (rc != 1) {
+                /* reset iv in case of counter overflow */
+                EVP_CipherInit_ex(ctx, NULL, NULL, NULL, iv, -1);
+            }
+        }
+    }
+    if (decrypt)
+        EVP_DecryptFinal_ex(ctx, buf, &outl);
+    else
+        EVP_EncryptFinal_ex(ctx, buf, &outl);
+    return count;
+}
+
+/*
+ * CCM does not support streaming. For the purpose of performance measurement,
+ * each message is encrypted using the same (key,iv)-pair. Do not use this
+ * code in your application.
+ */
+static int EVP_Update_loop_ccm(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    EVP_CIPHER_CTX *ctx = tempargs->ctx;
+    int outl, count;
+    unsigned char tag[12];
+#ifndef SIGALRM
+    int nb_iter = save_count * 4 * lengths[0] / lengths[testnum];
+#endif
+    if (decrypt) {
+        for (count = 0; COND(nb_iter); count++) {
+            EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_SET_TAG, sizeof(tag), tag);
+            /* reset iv */
+            EVP_DecryptInit_ex(ctx, NULL, NULL, NULL, iv);
+            /* counter is reset on every update */
+            EVP_DecryptUpdate(ctx, buf, &outl, buf, lengths[testnum]);
+        }
+    } else {
+        for (count = 0; COND(nb_iter); count++) {
+            /* restore iv length field */
+            EVP_EncryptUpdate(ctx, NULL, &outl, NULL, lengths[testnum]);
+            /* counter is reset on every update */
+            EVP_EncryptUpdate(ctx, buf, &outl, buf, lengths[testnum]);
+        }
+    }
+    if (decrypt)
+        EVP_DecryptFinal_ex(ctx, buf, &outl);
+    else
+        EVP_EncryptFinal_ex(ctx, buf, &outl);
+    return count;
+}
+
+/*
+ * To make AEAD benchmarking more relevant perform TLS-like operations,
+ * 13-byte AAD followed by payload. But don't use TLS-formatted AAD, as
+ * payload length is not actually limited by 16KB...
+ */
+static int EVP_Update_loop_aead(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    EVP_CIPHER_CTX *ctx = tempargs->ctx;
+    int outl, count;
+    unsigned char aad[13] = { 0xcc };
+    unsigned char faketag[16] = { 0xcc };
+#ifndef SIGALRM
+    int nb_iter = save_count * 4 * lengths[0] / lengths[testnum];
+#endif
+    if (decrypt) {
+        for (count = 0; COND(nb_iter); count++) {
+            EVP_DecryptInit_ex(ctx, NULL, NULL, NULL, iv);
+            EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_SET_TAG,
+                                sizeof(faketag), faketag);
+            EVP_DecryptUpdate(ctx, NULL, &outl, aad, sizeof(aad));
+            EVP_DecryptUpdate(ctx, buf, &outl, buf, lengths[testnum]);
+            EVP_DecryptFinal_ex(ctx, buf + outl, &outl);
+        }
+    } else {
+        for (count = 0; COND(nb_iter); count++) {
+            EVP_EncryptInit_ex(ctx, NULL, NULL, NULL, iv);
+            EVP_EncryptUpdate(ctx, NULL, &outl, aad, sizeof(aad));
+            EVP_EncryptUpdate(ctx, buf, &outl, buf, lengths[testnum]);
+            EVP_EncryptFinal_ex(ctx, buf + outl, &outl);
+        }
+    }
+    return count;
+}
+
+static const EVP_MD *evp_md = NULL;
+static int EVP_Digest_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char md[EVP_MAX_MD_SIZE];
+    int count;
+#ifndef SIGALRM
+    int nb_iter = save_count * 4 * lengths[0] / lengths[testnum];
+#endif
+
+    for (count = 0; COND(nb_iter); count++) {
+        if (!EVP_Digest(buf, lengths[testnum], md, NULL, evp_md, NULL))
+            return -1;
+    }
+    return count;
+}
+
+#ifndef OPENSSL_NO_RSA
+static long rsa_c[RSA_NUM][2];  /* # RSA iteration test */
+
+static int RSA_sign_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char *buf2 = tempargs->buf2;
+    unsigned int *rsa_num = &tempargs->siglen;
+    RSA **rsa_key = tempargs->rsa_key;
+    int ret, count;
+    for (count = 0; COND(rsa_c[testnum][0]); count++) {
+        ret = RSA_sign(NID_md5_sha1, buf, 36, buf2, rsa_num, rsa_key[testnum]);
+        if (ret == 0) {
+            BIO_printf(bio_err, "RSA sign failure\n");
+            ERR_print_errors(bio_err);
+            count = -1;
+            break;
+        }
+    }
+    return count;
+}
+
+static int RSA_verify_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char *buf2 = tempargs->buf2;
+    unsigned int rsa_num = tempargs->siglen;
+    RSA **rsa_key = tempargs->rsa_key;
+    int ret, count;
+    for (count = 0; COND(rsa_c[testnum][1]); count++) {
+        ret =
+            RSA_verify(NID_md5_sha1, buf, 36, buf2, rsa_num, rsa_key[testnum]);
+        if (ret <= 0) {
+            BIO_printf(bio_err, "RSA verify failure\n");
+            ERR_print_errors(bio_err);
+            count = -1;
+            break;
+        }
+    }
+    return count;
+}
+#endif
+
+#ifndef OPENSSL_NO_DSA
+static long dsa_c[DSA_NUM][2];
+static int DSA_sign_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char *buf2 = tempargs->buf2;
+    DSA **dsa_key = tempargs->dsa_key;
+    unsigned int *siglen = &tempargs->siglen;
+    int ret, count;
+    for (count = 0; COND(dsa_c[testnum][0]); count++) {
+        ret = DSA_sign(0, buf, 20, buf2, siglen, dsa_key[testnum]);
+        if (ret == 0) {
+            BIO_printf(bio_err, "DSA sign failure\n");
+            ERR_print_errors(bio_err);
+            count = -1;
+            break;
+        }
+    }
+    return count;
+}
+
+static int DSA_verify_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    unsigned char *buf2 = tempargs->buf2;
+    DSA **dsa_key = tempargs->dsa_key;
+    unsigned int siglen = tempargs->siglen;
+    int ret, count;
+    for (count = 0; COND(dsa_c[testnum][1]); count++) {
+        ret = DSA_verify(0, buf, 20, buf2, siglen, dsa_key[testnum]);
+        if (ret <= 0) {
+            BIO_printf(bio_err, "DSA verify failure\n");
+            ERR_print_errors(bio_err);
+            count = -1;
+            break;
+        }
+    }
+    return count;
+}
+#endif
+
+#ifndef OPENSSL_NO_EC
+static long ecdsa_c[ECDSA_NUM][2];
+static int ECDSA_sign_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    EC_KEY **ecdsa = tempargs->ecdsa;
+    unsigned char *ecdsasig = tempargs->buf2;
+    unsigned int *ecdsasiglen = &tempargs->siglen;
+    int ret, count;
+    for (count = 0; COND(ecdsa_c[testnum][0]); count++) {
+        ret = ECDSA_sign(0, buf, 20, ecdsasig, ecdsasiglen, ecdsa[testnum]);
+        if (ret == 0) {
+            BIO_printf(bio_err, "ECDSA sign failure\n");
+            ERR_print_errors(bio_err);
+            count = -1;
+            break;
+        }
+    }
+    return count;
+}
+
+static int ECDSA_verify_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    EC_KEY **ecdsa = tempargs->ecdsa;
+    unsigned char *ecdsasig = tempargs->buf2;
+    unsigned int ecdsasiglen = tempargs->siglen;
+    int ret, count;
+    for (count = 0; COND(ecdsa_c[testnum][1]); count++) {
+        ret = ECDSA_verify(0, buf, 20, ecdsasig, ecdsasiglen, ecdsa[testnum]);
+        if (ret != 1) {
+            BIO_printf(bio_err, "ECDSA verify failure\n");
+            ERR_print_errors(bio_err);
+            count = -1;
+            break;
+        }
+    }
+    return count;
+}
+
+/* ******************************************************************** */
+static long ecdh_c[EC_NUM][1];
+
+static int ECDH_EVP_derive_key_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    EVP_PKEY_CTX *ctx = tempargs->ecdh_ctx[testnum];
+    unsigned char *derived_secret = tempargs->secret_a;
+    int count;
+    size_t *outlen = &(tempargs->outlen[testnum]);
+
+    for (count = 0; COND(ecdh_c[testnum][0]); count++)
+        EVP_PKEY_derive(ctx, derived_secret, outlen);
+
+    return count;
+}
+
+static long eddsa_c[EdDSA_NUM][2];
+static int EdDSA_sign_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    EVP_MD_CTX **edctx = tempargs->eddsa_ctx;
+    unsigned char *eddsasig = tempargs->buf2;
+    size_t *eddsasigsize = &tempargs->sigsize;
+    int ret, count;
+
+    for (count = 0; COND(eddsa_c[testnum][0]); count++) {
+        ret = EVP_DigestSign(edctx[testnum], eddsasig, eddsasigsize, buf, 20);
+        if (ret == 0) {
+            BIO_printf(bio_err, "EdDSA sign failure\n");
+            ERR_print_errors(bio_err);
+            count = -1;
+            break;
+        }
+    }
+    return count;
+}
+
+static int EdDSA_verify_loop(void *args)
+{
+    loopargs_t *tempargs = *(loopargs_t **) args;
+    unsigned char *buf = tempargs->buf;
+    EVP_MD_CTX **edctx = tempargs->eddsa_ctx;
+    unsigned char *eddsasig = tempargs->buf2;
+    size_t eddsasigsize = tempargs->sigsize;
+    int ret, count;
+
+    for (count = 0; COND(eddsa_c[testnum][1]); count++) {
+        ret = EVP_DigestVerify(edctx[testnum], eddsasig, eddsasigsize, buf, 20);
+        if (ret != 1) {
+            BIO_printf(bio_err, "EdDSA verify failure\n");
+            ERR_print_errors(bio_err);
+            count = -1;
+            break;
+        }
+    }
+    return count;
+}
+#endif                          /* OPENSSL_NO_EC */
+
+static int run_benchmark(int async_jobs,
+                         int (*loop_function) (void *), loopargs_t * loopargs)
+{
+    int job_op_count = 0;
+    int total_op_count = 0;
+    int num_inprogress = 0;
+    int error = 0, i = 0, ret = 0;
+    OSSL_ASYNC_FD job_fd = 0;
+    size_t num_job_fds = 0;
+
+    run = 1;
+
+    if (async_jobs == 0) {
+        return loop_function((void *)&loopargs);
+    }
+
+    for (i = 0; i < async_jobs && !error; i++) {
+        loopargs_t *looparg_item = loopargs + i;
+
+        /* Copy pointer content (looparg_t item address) into async context */
+        ret = ASYNC_start_job(&loopargs[i].inprogress_job, loopargs[i].wait_ctx,
+                              &job_op_count, loop_function,
+                              (void *)&looparg_item, sizeof(looparg_item));
+        switch (ret) {
+        case ASYNC_PAUSE:
+            ++num_inprogress;
+            break;
+        case ASYNC_FINISH:
+            if (job_op_count == -1) {
+                error = 1;
+            } else {
+                total_op_count += job_op_count;
+            }
+            break;
+        case ASYNC_NO_JOBS:
+        case ASYNC_ERR:
+            BIO_printf(bio_err, "Failure in the job\n");
+            ERR_print_errors(bio_err);
+            error = 1;
+            break;
+        }
+    }
+
+    while (num_inprogress > 0) {
+#if defined(OPENSSL_SYS_WINDOWS)
+        DWORD avail = 0;
+#elif defined(OPENSSL_SYS_UNIX)
+        int select_result = 0;
+        OSSL_ASYNC_FD max_fd = 0;
+        fd_set waitfdset;
+
+        FD_ZERO(&waitfdset);
+
+        for (i = 0; i < async_jobs && num_inprogress > 0; i++) {
+            if (loopargs[i].inprogress_job == NULL)
+                continue;
+
+            if (!ASYNC_WAIT_CTX_get_all_fds
+                (loopargs[i].wait_ctx, NULL, &num_job_fds)
+                || num_job_fds > 1) {
+                BIO_printf(bio_err, "Too many fds in ASYNC_WAIT_CTX\n");
+                ERR_print_errors(bio_err);
+                error = 1;
+                break;
+            }
+            ASYNC_WAIT_CTX_get_all_fds(loopargs[i].wait_ctx, &job_fd,
+                                       &num_job_fds);
+            FD_SET(job_fd, &waitfdset);
+            if (job_fd > max_fd)
+                max_fd = job_fd;
+        }
+
+        if (max_fd >= (OSSL_ASYNC_FD)FD_SETSIZE) {
+            BIO_printf(bio_err,
+                       "Error: max_fd (%d) must be smaller than FD_SETSIZE (%d). "
+                       "Decrease the value of async_jobs\n",
+                       max_fd, FD_SETSIZE);
+            ERR_print_errors(bio_err);
+            error = 1;
+            break;
+        }
+
+        select_result = select(max_fd + 1, &waitfdset, NULL, NULL, NULL);
+        if (select_result == -1 && errno == EINTR)
+            continue;
+
+        if (select_result == -1) {
+            BIO_printf(bio_err, "Failure in the select\n");
+            ERR_print_errors(bio_err);
+            error = 1;
+            break;
+        }
+
+        if (select_result == 0)
+            continue;
+#endif
+
+        for (i = 0; i < async_jobs; i++) {
+            if (loopargs[i].inprogress_job == NULL)
+                continue;
+
+            if (!ASYNC_WAIT_CTX_get_all_fds
+                (loopargs[i].wait_ctx, NULL, &num_job_fds)
+                || num_job_fds > 1) {
+                BIO_printf(bio_err, "Too many fds in ASYNC_WAIT_CTX\n");
+                ERR_print_errors(bio_err);
+                error = 1;
+                break;
+            }
+            ASYNC_WAIT_CTX_get_all_fds(loopargs[i].wait_ctx, &job_fd,
+                                       &num_job_fds);
+
+#if defined(OPENSSL_SYS_UNIX)
+            if (num_job_fds == 1 && !FD_ISSET(job_fd, &waitfdset))
+                continue;
+#elif defined(OPENSSL_SYS_WINDOWS)
+            if (num_job_fds == 1
+                && !PeekNamedPipe(job_fd, NULL, 0, NULL, &avail, NULL)
+                && avail > 0)
+                continue;
+#endif
+
+            ret = ASYNC_start_job(&loopargs[i].inprogress_job,
+                                  loopargs[i].wait_ctx, &job_op_count,
+                                  loop_function, (void *)(loopargs + i),
+                                  sizeof(loopargs_t));
+            switch (ret) {
+            case ASYNC_PAUSE:
+                break;
+            case ASYNC_FINISH:
+                if (job_op_count == -1) {
+                    error = 1;
+                } else {
+                    total_op_count += job_op_count;
+                }
+                --num_inprogress;
+                loopargs[i].inprogress_job = NULL;
+                break;
+            case ASYNC_NO_JOBS:
+            case ASYNC_ERR:
+                --num_inprogress;
+                loopargs[i].inprogress_job = NULL;
+                BIO_printf(bio_err, "Failure in the job\n");
+                ERR_print_errors(bio_err);
+                error = 1;
+                break;
+            }
+        }
+    }
+
+    return error ? -1 : total_op_count;
+}
+
+int speed_main(int argc, char **argv)
+{
+    ENGINE *e = NULL;
+    loopargs_t *loopargs = NULL;
+    const char *prog;
+    const char *engine_id = NULL;
+    const EVP_CIPHER *evp_cipher = NULL;
+    double d = 0.0;
+    OPTION_CHOICE o;
+    int async_init = 0, multiblock = 0, pr_header = 0;
+    int doit[ALGOR_NUM] = { 0 };
+    int ret = 1, misalign = 0, lengths_single = 0, aead = 0;
+    long count = 0;
+    unsigned int size_num = OSSL_NELEM(lengths_list);
+    unsigned int i, k, loop, loopargs_len = 0, async_jobs = 0;
+    int keylen;
+    int buflen;
+#ifndef NO_FORK
+    int multi = 0;
+#endif
+#if !defined(OPENSSL_NO_RSA) || !defined(OPENSSL_NO_DSA) \
+    || !defined(OPENSSL_NO_EC)
+    long rsa_count = 1;
+#endif
+    openssl_speed_sec_t seconds = { SECONDS, RSA_SECONDS, DSA_SECONDS,
+                                    ECDSA_SECONDS, ECDH_SECONDS,
+                                    EdDSA_SECONDS };
+
+    /* What follows are the buffers and key material. */
+#ifndef OPENSSL_NO_RC5
+    RC5_32_KEY rc5_ks;
+#endif
+#ifndef OPENSSL_NO_RC2
+    RC2_KEY rc2_ks;
+#endif
+#ifndef OPENSSL_NO_IDEA
+    IDEA_KEY_SCHEDULE idea_ks;
+#endif
+#ifndef OPENSSL_NO_SEED
+    SEED_KEY_SCHEDULE seed_ks;
+#endif
+#ifndef OPENSSL_NO_BF
+    BF_KEY bf_ks;
+#endif
+#ifndef OPENSSL_NO_CAST
+    CAST_KEY cast_ks;
+#endif
+    static const unsigned char key16[16] = {
+        0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0,
+        0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12
+    };
+    static const unsigned char key24[24] = {
+        0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0,
+        0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12,
+        0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34
+    };
+    static const unsigned char key32[32] = {
+        0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0,
+        0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12,
+        0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34,
+        0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34, 0x56
+    };
+#ifndef OPENSSL_NO_CAMELLIA
+    static const unsigned char ckey24[24] = {
+        0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0,
+        0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12,
+        0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34
+    };
+    static const unsigned char ckey32[32] = {
+        0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0,
+        0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12,
+        0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34,
+        0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34, 0x56
+    };
+    CAMELLIA_KEY camellia_ks1, camellia_ks2, camellia_ks3;
+#endif
+#ifndef OPENSSL_NO_DES
+    static DES_cblock key = {
+        0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0
+    };
+    static DES_cblock key2 = {
+        0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12
+    };
+    static DES_cblock key3 = {
+        0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12, 0x34
+    };
+#endif
+#ifndef OPENSSL_NO_RSA
+    static const unsigned int rsa_bits[RSA_NUM] = {
+        512, 1024, 2048, 3072, 4096, 7680, 15360
+    };
+    static const unsigned char *rsa_data[RSA_NUM] = {
+        test512, test1024, test2048, test3072, test4096, test7680, test15360
+    };
+    static const int rsa_data_length[RSA_NUM] = {
+        sizeof(test512), sizeof(test1024),
+        sizeof(test2048), sizeof(test3072),
+        sizeof(test4096), sizeof(test7680),
+        sizeof(test15360)
+    };
+    int rsa_doit[RSA_NUM] = { 0 };
+    int primes = RSA_DEFAULT_PRIME_NUM;
+#endif
+#ifndef OPENSSL_NO_DSA
+    static const unsigned int dsa_bits[DSA_NUM] = { 512, 1024, 2048 };
+    int dsa_doit[DSA_NUM] = { 0 };
+#endif
+#ifndef OPENSSL_NO_EC
+    /*
+     * We only test over the following curves as they are representative, To
+     * add tests over more curves, simply add the curve NID and curve name to
+     * the following arrays and increase the |ecdh_choices| list accordingly.
+     */
+    static const struct {
+        const char *name;
+        unsigned int nid;
+        unsigned int bits;
+    } test_curves[] = {
+        /* Prime Curves */
+        {"secp160r1", NID_secp160r1, 160},
+        {"nistp192", NID_X9_62_prime192v1, 192},
+        {"nistp224", NID_secp224r1, 224},
+        {"nistp256", NID_X9_62_prime256v1, 256},
+        {"nistp384", NID_secp384r1, 384},
+        {"nistp521", NID_secp521r1, 521},
+        /* Binary Curves */
+        {"nistk163", NID_sect163k1, 163},
+        {"nistk233", NID_sect233k1, 233},
+        {"nistk283", NID_sect283k1, 283},
+        {"nistk409", NID_sect409k1, 409},
+        {"nistk571", NID_sect571k1, 571},
+        {"nistb163", NID_sect163r2, 163},
+        {"nistb233", NID_sect233r1, 233},
+        {"nistb283", NID_sect283r1, 283},
+        {"nistb409", NID_sect409r1, 409},
+        {"nistb571", NID_sect571r1, 571},
+        {"brainpoolP256r1", NID_brainpoolP256r1, 256},
+        {"brainpoolP256t1", NID_brainpoolP256t1, 256},
+        {"brainpoolP384r1", NID_brainpoolP384r1, 384},
+        {"brainpoolP384t1", NID_brainpoolP384t1, 384},
+        {"brainpoolP512r1", NID_brainpoolP512r1, 512},
+        {"brainpoolP512t1", NID_brainpoolP512t1, 512},
+        /* Other and ECDH only ones */
+        {"X25519", NID_X25519, 253},
+        {"X448", NID_X448, 448}
+    };
+    static const struct {
+        const char *name;
+        unsigned int nid;
+        unsigned int bits;
+        size_t sigsize;
+    } test_ed_curves[] = {
+        /* EdDSA */
+        {"Ed25519", NID_ED25519, 253, 64},
+        {"Ed448", NID_ED448, 456, 114}
+    };
+    int ecdsa_doit[ECDSA_NUM] = { 0 };
+    int ecdh_doit[EC_NUM] = { 0 };
+    int eddsa_doit[EdDSA_NUM] = { 0 };
+    OPENSSL_assert(OSSL_NELEM(test_curves) >= EC_NUM);
+    OPENSSL_assert(OSSL_NELEM(test_ed_curves) >= EdDSA_NUM);
+#endif                          /* ndef OPENSSL_NO_EC */
+
+    prog = opt_init(argc, argv, speed_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opterr:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(speed_options);
+            ret = 0;
+            goto end;
+        case OPT_ELAPSED:
+            usertime = 0;
+            break;
+        case OPT_EVP:
+            evp_md = NULL;
+            evp_cipher = EVP_get_cipherbyname(opt_arg());
+            if (evp_cipher == NULL)
+                evp_md = EVP_get_digestbyname(opt_arg());
+            if (evp_cipher == NULL && evp_md == NULL) {
+                BIO_printf(bio_err,
+                           "%s: %s is an unknown cipher or digest\n",
+                           prog, opt_arg());
+                goto end;
+            }
+            doit[D_EVP] = 1;
+            break;
+        case OPT_DECRYPT:
+            decrypt = 1;
+            break;
+        case OPT_ENGINE:
+            /*
+             * In a forked execution, an engine might need to be
+             * initialised by each child process, not by the parent.
+             * So store the name here and run setup_engine() later on.
+             */
+            engine_id = opt_arg();
+            break;
+        case OPT_MULTI:
+#ifndef NO_FORK
+            multi = atoi(opt_arg());
+#endif
+            break;
+        case OPT_ASYNCJOBS:
+#ifndef OPENSSL_NO_ASYNC
+            async_jobs = atoi(opt_arg());
+            if (!ASYNC_is_capable()) {
+                BIO_printf(bio_err,
+                           "%s: async_jobs specified but async not supported\n",
+                           prog);
+                goto opterr;
+            }
+            if (async_jobs > 99999) {
+                BIO_printf(bio_err, "%s: too many async_jobs\n", prog);
+                goto opterr;
+            }
+#endif
+            break;
+        case OPT_MISALIGN:
+            if (!opt_int(opt_arg(), &misalign))
+                goto end;
+            if (misalign > MISALIGN) {
+                BIO_printf(bio_err,
+                           "%s: Maximum offset is %d\n", prog, MISALIGN);
+                goto opterr;
+            }
+            break;
+        case OPT_MR:
+            mr = 1;
+            break;
+        case OPT_MB:
+            multiblock = 1;
+#ifdef OPENSSL_NO_MULTIBLOCK
+            BIO_printf(bio_err,
+                       "%s: -mb specified but multi-block support is disabled\n",
+                       prog);
+            goto end;
+#endif
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_PRIMES:
+            if (!opt_int(opt_arg(), &primes))
+                goto end;
+            break;
+        case OPT_SECONDS:
+            seconds.sym = seconds.rsa = seconds.dsa = seconds.ecdsa
+                        = seconds.ecdh = seconds.eddsa = atoi(opt_arg());
+            break;
+        case OPT_BYTES:
+            lengths_single = atoi(opt_arg());
+            lengths = &lengths_single;
+            size_num = 1;
+            break;
+        case OPT_AEAD:
+            aead = 1;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+
+    /* Remaining arguments are algorithms. */
+    for (; *argv; argv++) {
+        if (found(*argv, doit_choices, &i)) {
+            doit[i] = 1;
+            continue;
+        }
+#ifndef OPENSSL_NO_DES
+        if (strcmp(*argv, "des") == 0) {
+            doit[D_CBC_DES] = doit[D_EDE3_DES] = 1;
+            continue;
+        }
+#endif
+        if (strcmp(*argv, "sha") == 0) {
+            doit[D_SHA1] = doit[D_SHA256] = doit[D_SHA512] = 1;
+            continue;
+        }
+#ifndef OPENSSL_NO_RSA
+        if (strcmp(*argv, "openssl") == 0)
+            continue;
+        if (strcmp(*argv, "rsa") == 0) {
+            for (loop = 0; loop < OSSL_NELEM(rsa_doit); loop++)
+                rsa_doit[loop] = 1;
+            continue;
+        }
+        if (found(*argv, rsa_choices, &i)) {
+            rsa_doit[i] = 1;
+            continue;
+        }
+#endif
+#ifndef OPENSSL_NO_DSA
+        if (strcmp(*argv, "dsa") == 0) {
+            dsa_doit[R_DSA_512] = dsa_doit[R_DSA_1024] =
+                dsa_doit[R_DSA_2048] = 1;
+            continue;
+        }
+        if (found(*argv, dsa_choices, &i)) {
+            dsa_doit[i] = 2;
+            continue;
+        }
+#endif
+        if (strcmp(*argv, "aes") == 0) {
+            doit[D_CBC_128_AES] = doit[D_CBC_192_AES] = doit[D_CBC_256_AES] = 1;
+            continue;
+        }
+#ifndef OPENSSL_NO_CAMELLIA
+        if (strcmp(*argv, "camellia") == 0) {
+            doit[D_CBC_128_CML] = doit[D_CBC_192_CML] = doit[D_CBC_256_CML] = 1;
+            continue;
+        }
+#endif
+#ifndef OPENSSL_NO_EC
+        if (strcmp(*argv, "ecdsa") == 0) {
+            for (loop = 0; loop < OSSL_NELEM(ecdsa_doit); loop++)
+                ecdsa_doit[loop] = 1;
+            continue;
+        }
+        if (found(*argv, ecdsa_choices, &i)) {
+            ecdsa_doit[i] = 2;
+            continue;
+        }
+        if (strcmp(*argv, "ecdh") == 0) {
+            for (loop = 0; loop < OSSL_NELEM(ecdh_doit); loop++)
+                ecdh_doit[loop] = 1;
+            continue;
+        }
+        if (found(*argv, ecdh_choices, &i)) {
+            ecdh_doit[i] = 2;
+            continue;
+        }
+        if (strcmp(*argv, "eddsa") == 0) {
+            for (loop = 0; loop < OSSL_NELEM(eddsa_doit); loop++)
+                eddsa_doit[loop] = 1;
+            continue;
+        }
+        if (found(*argv, eddsa_choices, &i)) {
+            eddsa_doit[i] = 2;
+            continue;
+        }
+#endif
+        BIO_printf(bio_err, "%s: Unknown algorithm %s\n", prog, *argv);
+        goto end;
+    }
+
+    /* Sanity checks */
+    if (aead) {
+        if (evp_cipher == NULL) {
+            BIO_printf(bio_err, "-aead can be used only with an AEAD cipher\n");
+            goto end;
+        } else if (!(EVP_CIPHER_flags(evp_cipher) &
+                     EVP_CIPH_FLAG_AEAD_CIPHER)) {
+            BIO_printf(bio_err, "%s is not an AEAD cipher\n",
+                       OBJ_nid2ln(EVP_CIPHER_nid(evp_cipher)));
+            goto end;
+        }
+    }
+    if (multiblock) {
+        if (evp_cipher == NULL) {
+            BIO_printf(bio_err,"-mb can be used only with a multi-block"
+                               " capable cipher\n");
+            goto end;
+        } else if (!(EVP_CIPHER_flags(evp_cipher) &
+                     EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK)) {
+            BIO_printf(bio_err, "%s is not a multi-block capable\n",
+                       OBJ_nid2ln(EVP_CIPHER_nid(evp_cipher)));
+            goto end;
+        } else if (async_jobs > 0) {
+            BIO_printf(bio_err, "Async mode is not supported with -mb");
+            goto end;
+        }
+    }
+
+    /* Initialize the job pool if async mode is enabled */
+    if (async_jobs > 0) {
+        async_init = ASYNC_init_thread(async_jobs, async_jobs);
+        if (!async_init) {
+            BIO_printf(bio_err, "Error creating the ASYNC job pool\n");
+            goto end;
+        }
+    }
+
+    loopargs_len = (async_jobs == 0 ? 1 : async_jobs);
+    loopargs =
+        app_malloc(loopargs_len * sizeof(loopargs_t), "array of loopargs");
+    memset(loopargs, 0, loopargs_len * sizeof(loopargs_t));
+
+    for (i = 0; i < loopargs_len; i++) {
+        if (async_jobs > 0) {
+            loopargs[i].wait_ctx = ASYNC_WAIT_CTX_new();
+            if (loopargs[i].wait_ctx == NULL) {
+                BIO_printf(bio_err, "Error creating the ASYNC_WAIT_CTX\n");
+                goto end;
+            }
+        }
+
+        buflen = lengths[size_num - 1];
+        if (buflen < 36)    /* size of random vector in RSA bencmark */
+            buflen = 36;
+        buflen += MAX_MISALIGNMENT + 1;
+        loopargs[i].buf_malloc = app_malloc(buflen, "input buffer");
+        loopargs[i].buf2_malloc = app_malloc(buflen, "input buffer");
+        memset(loopargs[i].buf_malloc, 0, buflen);
+        memset(loopargs[i].buf2_malloc, 0, buflen);
+
+        /* Align the start of buffers on a 64 byte boundary */
+        loopargs[i].buf = loopargs[i].buf_malloc + misalign;
+        loopargs[i].buf2 = loopargs[i].buf2_malloc + misalign;
+#ifndef OPENSSL_NO_EC
+        loopargs[i].secret_a = app_malloc(MAX_ECDH_SIZE, "ECDH secret a");
+        loopargs[i].secret_b = app_malloc(MAX_ECDH_SIZE, "ECDH secret b");
+#endif
+    }
+
+#ifndef NO_FORK
+    if (multi && do_multi(multi, size_num))
+        goto show_res;
+#endif
+
+    /* Initialize the engine after the fork */
+    e = setup_engine(engine_id, 0);
+
+    /* No parameters; turn on everything. */
+    if ((argc == 0) && !doit[D_EVP]) {
+        for (i = 0; i < ALGOR_NUM; i++)
+            if (i != D_EVP)
+                doit[i] = 1;
+#ifndef OPENSSL_NO_RSA
+        for (i = 0; i < RSA_NUM; i++)
+            rsa_doit[i] = 1;
+#endif
+#ifndef OPENSSL_NO_DSA
+        for (i = 0; i < DSA_NUM; i++)
+            dsa_doit[i] = 1;
+#endif
+#ifndef OPENSSL_NO_EC
+        for (loop = 0; loop < OSSL_NELEM(ecdsa_doit); loop++)
+            ecdsa_doit[loop] = 1;
+        for (loop = 0; loop < OSSL_NELEM(ecdh_doit); loop++)
+            ecdh_doit[loop] = 1;
+        for (loop = 0; loop < OSSL_NELEM(eddsa_doit); loop++)
+            eddsa_doit[loop] = 1;
+#endif
+    }
+    for (i = 0; i < ALGOR_NUM; i++)
+        if (doit[i])
+            pr_header++;
+
+    if (usertime == 0 && !mr)
+        BIO_printf(bio_err,
+                   "You have chosen to measure elapsed time "
+                   "instead of user CPU time.\n");
+
+#ifndef OPENSSL_NO_RSA
+    for (i = 0; i < loopargs_len; i++) {
+        if (primes > RSA_DEFAULT_PRIME_NUM) {
+            /* for multi-prime RSA, skip this */
+            break;
+        }
+        for (k = 0; k < RSA_NUM; k++) {
+            const unsigned char *p;
+
+            p = rsa_data[k];
+            loopargs[i].rsa_key[k] =
+                d2i_RSAPrivateKey(NULL, &p, rsa_data_length[k]);
+            if (loopargs[i].rsa_key[k] == NULL) {
+                BIO_printf(bio_err,
+                           "internal error loading RSA key number %d\n", k);
+                goto end;
+            }
+        }
+    }
+#endif
+#ifndef OPENSSL_NO_DSA
+    for (i = 0; i < loopargs_len; i++) {
+        loopargs[i].dsa_key[0] = get_dsa(512);
+        loopargs[i].dsa_key[1] = get_dsa(1024);
+        loopargs[i].dsa_key[2] = get_dsa(2048);
+    }
+#endif
+#ifndef OPENSSL_NO_DES
+    DES_set_key_unchecked(&key, &sch);
+    DES_set_key_unchecked(&key2, &sch2);
+    DES_set_key_unchecked(&key3, &sch3);
+#endif
+    AES_set_encrypt_key(key16, 128, &aes_ks1);
+    AES_set_encrypt_key(key24, 192, &aes_ks2);
+    AES_set_encrypt_key(key32, 256, &aes_ks3);
+#ifndef OPENSSL_NO_CAMELLIA
+    Camellia_set_key(key16, 128, &camellia_ks1);
+    Camellia_set_key(ckey24, 192, &camellia_ks2);
+    Camellia_set_key(ckey32, 256, &camellia_ks3);
+#endif
+#ifndef OPENSSL_NO_IDEA
+    IDEA_set_encrypt_key(key16, &idea_ks);
+#endif
+#ifndef OPENSSL_NO_SEED
+    SEED_set_key(key16, &seed_ks);
+#endif
+#ifndef OPENSSL_NO_RC4
+    RC4_set_key(&rc4_ks, 16, key16);
+#endif
+#ifndef OPENSSL_NO_RC2
+    RC2_set_key(&rc2_ks, 16, key16, 128);
+#endif
+#ifndef OPENSSL_NO_RC5
+    RC5_32_set_key(&rc5_ks, 16, key16, 12);
+#endif
+#ifndef OPENSSL_NO_BF
+    BF_set_key(&bf_ks, 16, key16);
+#endif
+#ifndef OPENSSL_NO_CAST
+    CAST_set_key(&cast_ks, 16, key16);
+#endif
+#ifndef SIGALRM
+# ifndef OPENSSL_NO_DES
+    BIO_printf(bio_err, "First we calculate the approximate speed ...\n");
+    count = 10;
+    do {
+        long it;
+        count *= 2;
+        Time_F(START);
+        for (it = count; it; it--)
+            DES_ecb_encrypt((DES_cblock *)loopargs[0].buf,
+                            (DES_cblock *)loopargs[0].buf, &sch, DES_ENCRYPT);
+        d = Time_F(STOP);
+    } while (d < 3);
+    save_count = count;
+    c[D_MD2][0] = count / 10;
+    c[D_MDC2][0] = count / 10;
+    c[D_MD4][0] = count;
+    c[D_MD5][0] = count;
+    c[D_HMAC][0] = count;
+    c[D_SHA1][0] = count;
+    c[D_RMD160][0] = count;
+    c[D_RC4][0] = count * 5;
+    c[D_CBC_DES][0] = count;
+    c[D_EDE3_DES][0] = count / 3;
+    c[D_CBC_IDEA][0] = count;
+    c[D_CBC_SEED][0] = count;
+    c[D_CBC_RC2][0] = count;
+    c[D_CBC_RC5][0] = count;
+    c[D_CBC_BF][0] = count;
+    c[D_CBC_CAST][0] = count;
+    c[D_CBC_128_AES][0] = count;
+    c[D_CBC_192_AES][0] = count;
+    c[D_CBC_256_AES][0] = count;
+    c[D_CBC_128_CML][0] = count;
+    c[D_CBC_192_CML][0] = count;
+    c[D_CBC_256_CML][0] = count;
+    c[D_SHA256][0] = count;
+    c[D_SHA512][0] = count;
+    c[D_WHIRLPOOL][0] = count;
+    c[D_IGE_128_AES][0] = count;
+    c[D_IGE_192_AES][0] = count;
+    c[D_IGE_256_AES][0] = count;
+    c[D_GHASH][0] = count;
+    c[D_RAND][0] = count;
+
+    for (i = 1; i < size_num; i++) {
+        long l0, l1;
+
+        l0 = (long)lengths[0];
+        l1 = (long)lengths[i];
+
+        c[D_MD2][i] = c[D_MD2][0] * 4 * l0 / l1;
+        c[D_MDC2][i] = c[D_MDC2][0] * 4 * l0 / l1;
+        c[D_MD4][i] = c[D_MD4][0] * 4 * l0 / l1;
+        c[D_MD5][i] = c[D_MD5][0] * 4 * l0 / l1;
+        c[D_HMAC][i] = c[D_HMAC][0] * 4 * l0 / l1;
+        c[D_SHA1][i] = c[D_SHA1][0] * 4 * l0 / l1;
+        c[D_RMD160][i] = c[D_RMD160][0] * 4 * l0 / l1;
+        c[D_SHA256][i] = c[D_SHA256][0] * 4 * l0 / l1;
+        c[D_SHA512][i] = c[D_SHA512][0] * 4 * l0 / l1;
+        c[D_WHIRLPOOL][i] = c[D_WHIRLPOOL][0] * 4 * l0 / l1;
+        c[D_GHASH][i] = c[D_GHASH][0] * 4 * l0 / l1;
+        c[D_RAND][i] = c[D_RAND][0] * 4 * l0 / l1;
+
+        l0 = (long)lengths[i - 1];
+
+        c[D_RC4][i] = c[D_RC4][i - 1] * l0 / l1;
+        c[D_CBC_DES][i] = c[D_CBC_DES][i - 1] * l0 / l1;
+        c[D_EDE3_DES][i] = c[D_EDE3_DES][i - 1] * l0 / l1;
+        c[D_CBC_IDEA][i] = c[D_CBC_IDEA][i - 1] * l0 / l1;
+        c[D_CBC_SEED][i] = c[D_CBC_SEED][i - 1] * l0 / l1;
+        c[D_CBC_RC2][i] = c[D_CBC_RC2][i - 1] * l0 / l1;
+        c[D_CBC_RC5][i] = c[D_CBC_RC5][i - 1] * l0 / l1;
+        c[D_CBC_BF][i] = c[D_CBC_BF][i - 1] * l0 / l1;
+        c[D_CBC_CAST][i] = c[D_CBC_CAST][i - 1] * l0 / l1;
+        c[D_CBC_128_AES][i] = c[D_CBC_128_AES][i - 1] * l0 / l1;
+        c[D_CBC_192_AES][i] = c[D_CBC_192_AES][i - 1] * l0 / l1;
+        c[D_CBC_256_AES][i] = c[D_CBC_256_AES][i - 1] * l0 / l1;
+        c[D_CBC_128_CML][i] = c[D_CBC_128_CML][i - 1] * l0 / l1;
+        c[D_CBC_192_CML][i] = c[D_CBC_192_CML][i - 1] * l0 / l1;
+        c[D_CBC_256_CML][i] = c[D_CBC_256_CML][i - 1] * l0 / l1;
+        c[D_IGE_128_AES][i] = c[D_IGE_128_AES][i - 1] * l0 / l1;
+        c[D_IGE_192_AES][i] = c[D_IGE_192_AES][i - 1] * l0 / l1;
+        c[D_IGE_256_AES][i] = c[D_IGE_256_AES][i - 1] * l0 / l1;
+    }
+
+#  ifndef OPENSSL_NO_RSA
+    rsa_c[R_RSA_512][0] = count / 2000;
+    rsa_c[R_RSA_512][1] = count / 400;
+    for (i = 1; i < RSA_NUM; i++) {
+        rsa_c[i][0] = rsa_c[i - 1][0] / 8;
+        rsa_c[i][1] = rsa_c[i - 1][1] / 4;
+        if (rsa_doit[i] <= 1 && rsa_c[i][0] == 0)
+            rsa_doit[i] = 0;
+        else {
+            if (rsa_c[i][0] == 0) {
+                rsa_c[i][0] = 1; /* Set minimum iteration Nb to 1. */
+                rsa_c[i][1] = 20;
+            }
+        }
+    }
+#  endif
+
+#  ifndef OPENSSL_NO_DSA
+    dsa_c[R_DSA_512][0] = count / 1000;
+    dsa_c[R_DSA_512][1] = count / 1000 / 2;
+    for (i = 1; i < DSA_NUM; i++) {
+        dsa_c[i][0] = dsa_c[i - 1][0] / 4;
+        dsa_c[i][1] = dsa_c[i - 1][1] / 4;
+        if (dsa_doit[i] <= 1 && dsa_c[i][0] == 0)
+            dsa_doit[i] = 0;
+        else {
+            if (dsa_c[i][0] == 0) {
+                dsa_c[i][0] = 1; /* Set minimum iteration Nb to 1. */
+                dsa_c[i][1] = 1;
+            }
+        }
+    }
+#  endif
+
+#  ifndef OPENSSL_NO_EC
+    ecdsa_c[R_EC_P160][0] = count / 1000;
+    ecdsa_c[R_EC_P160][1] = count / 1000 / 2;
+    for (i = R_EC_P192; i <= R_EC_P521; i++) {
+        ecdsa_c[i][0] = ecdsa_c[i - 1][0] / 2;
+        ecdsa_c[i][1] = ecdsa_c[i - 1][1] / 2;
+        if (ecdsa_doit[i] <= 1 && ecdsa_c[i][0] == 0)
+            ecdsa_doit[i] = 0;
+        else {
+            if (ecdsa_c[i][0] == 0) {
+                ecdsa_c[i][0] = 1;
+                ecdsa_c[i][1] = 1;
+            }
+        }
+    }
+    ecdsa_c[R_EC_K163][0] = count / 1000;
+    ecdsa_c[R_EC_K163][1] = count / 1000 / 2;
+    for (i = R_EC_K233; i <= R_EC_K571; i++) {
+        ecdsa_c[i][0] = ecdsa_c[i - 1][0] / 2;
+        ecdsa_c[i][1] = ecdsa_c[i - 1][1] / 2;
+        if (ecdsa_doit[i] <= 1 && ecdsa_c[i][0] == 0)
+            ecdsa_doit[i] = 0;
+        else {
+            if (ecdsa_c[i][0] == 0) {
+                ecdsa_c[i][0] = 1;
+                ecdsa_c[i][1] = 1;
+            }
+        }
+    }
+    ecdsa_c[R_EC_B163][0] = count / 1000;
+    ecdsa_c[R_EC_B163][1] = count / 1000 / 2;
+    for (i = R_EC_B233; i <= R_EC_B571; i++) {
+        ecdsa_c[i][0] = ecdsa_c[i - 1][0] / 2;
+        ecdsa_c[i][1] = ecdsa_c[i - 1][1] / 2;
+        if (ecdsa_doit[i] <= 1 && ecdsa_c[i][0] == 0)
+            ecdsa_doit[i] = 0;
+        else {
+            if (ecdsa_c[i][0] == 0) {
+                ecdsa_c[i][0] = 1;
+                ecdsa_c[i][1] = 1;
+            }
+        }
+    }
+
+    ecdh_c[R_EC_P160][0] = count / 1000;
+    for (i = R_EC_P192; i <= R_EC_P521; i++) {
+        ecdh_c[i][0] = ecdh_c[i - 1][0] / 2;
+        if (ecdh_doit[i] <= 1 && ecdh_c[i][0] == 0)
+            ecdh_doit[i] = 0;
+        else {
+            if (ecdh_c[i][0] == 0) {
+                ecdh_c[i][0] = 1;
+            }
+        }
+    }
+    ecdh_c[R_EC_K163][0] = count / 1000;
+    for (i = R_EC_K233; i <= R_EC_K571; i++) {
+        ecdh_c[i][0] = ecdh_c[i - 1][0] / 2;
+        if (ecdh_doit[i] <= 1 && ecdh_c[i][0] == 0)
+            ecdh_doit[i] = 0;
+        else {
+            if (ecdh_c[i][0] == 0) {
+                ecdh_c[i][0] = 1;
+            }
+        }
+    }
+    ecdh_c[R_EC_B163][0] = count / 1000;
+    for (i = R_EC_B233; i <= R_EC_B571; i++) {
+        ecdh_c[i][0] = ecdh_c[i - 1][0] / 2;
+        if (ecdh_doit[i] <= 1 && ecdh_c[i][0] == 0)
+            ecdh_doit[i] = 0;
+        else {
+            if (ecdh_c[i][0] == 0) {
+                ecdh_c[i][0] = 1;
+            }
+        }
+    }
+    /* repeated code good to factorize */
+    ecdh_c[R_EC_BRP256R1][0] = count / 1000;
+    for (i = R_EC_BRP384R1; i <= R_EC_BRP512R1; i += 2) {
+        ecdh_c[i][0] = ecdh_c[i - 2][0] / 2;
+        if (ecdh_doit[i] <= 1 && ecdh_c[i][0] == 0)
+            ecdh_doit[i] = 0;
+        else {
+            if (ecdh_c[i][0] == 0) {
+                ecdh_c[i][0] = 1;
+            }
+        }
+    }
+    ecdh_c[R_EC_BRP256T1][0] = count / 1000;
+    for (i = R_EC_BRP384T1; i <= R_EC_BRP512T1; i += 2) {
+        ecdh_c[i][0] = ecdh_c[i - 2][0] / 2;
+        if (ecdh_doit[i] <= 1 && ecdh_c[i][0] == 0)
+            ecdh_doit[i] = 0;
+        else {
+            if (ecdh_c[i][0] == 0) {
+                ecdh_c[i][0] = 1;
+            }
+        }
+    }
+    /* default iteration count for the last two EC Curves */
+    ecdh_c[R_EC_X25519][0] = count / 1800;
+    ecdh_c[R_EC_X448][0] = count / 7200;
+
+    eddsa_c[R_EC_Ed25519][0] = count / 1800;
+    eddsa_c[R_EC_Ed448][0] = count / 7200;
+#  endif
+
+# else
+/* not worth fixing */
+#  error "You cannot disable DES on systems without SIGALRM."
+# endif                         /* OPENSSL_NO_DES */
+#elif SIGALRM > 0
+    signal(SIGALRM, alarmed);
+#endif                          /* SIGALRM */
+
+#ifndef OPENSSL_NO_MD2
+    if (doit[D_MD2]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_MD2], c[D_MD2][testnum], lengths[testnum],
+                          seconds.sym);
+            Time_F(START);
+            count = run_benchmark(async_jobs, EVP_Digest_MD2_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_MD2, testnum, count, d);
+        }
+    }
+#endif
+#ifndef OPENSSL_NO_MDC2
+    if (doit[D_MDC2]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_MDC2], c[D_MDC2][testnum], lengths[testnum],
+                          seconds.sym);
+            Time_F(START);
+            count = run_benchmark(async_jobs, EVP_Digest_MDC2_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_MDC2, testnum, count, d);
+        }
+    }
+#endif
+
+#ifndef OPENSSL_NO_MD4
+    if (doit[D_MD4]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_MD4], c[D_MD4][testnum], lengths[testnum],
+                          seconds.sym);
+            Time_F(START);
+            count = run_benchmark(async_jobs, EVP_Digest_MD4_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_MD4, testnum, count, d);
+        }
+    }
+#endif
+
+#ifndef OPENSSL_NO_MD5
+    if (doit[D_MD5]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_MD5], c[D_MD5][testnum], lengths[testnum],
+                          seconds.sym);
+            Time_F(START);
+            count = run_benchmark(async_jobs, MD5_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_MD5, testnum, count, d);
+        }
+    }
+
+    if (doit[D_HMAC]) {
+        static const char hmac_key[] = "This is a key...";
+        int len = strlen(hmac_key);
+
+        for (i = 0; i < loopargs_len; i++) {
+            loopargs[i].hctx = HMAC_CTX_new();
+            if (loopargs[i].hctx == NULL) {
+                BIO_printf(bio_err, "HMAC malloc failure, exiting...");
+                exit(1);
+            }
+
+            HMAC_Init_ex(loopargs[i].hctx, hmac_key, len, EVP_md5(), NULL);
+        }
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_HMAC], c[D_HMAC][testnum], lengths[testnum],
+                          seconds.sym);
+            Time_F(START);
+            count = run_benchmark(async_jobs, HMAC_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_HMAC, testnum, count, d);
+        }
+        for (i = 0; i < loopargs_len; i++) {
+            HMAC_CTX_free(loopargs[i].hctx);
+        }
+    }
+#endif
+    if (doit[D_SHA1]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_SHA1], c[D_SHA1][testnum], lengths[testnum],
+                          seconds.sym);
+            Time_F(START);
+            count = run_benchmark(async_jobs, SHA1_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_SHA1, testnum, count, d);
+        }
+    }
+    if (doit[D_SHA256]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_SHA256], c[D_SHA256][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            count = run_benchmark(async_jobs, SHA256_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_SHA256, testnum, count, d);
+        }
+    }
+    if (doit[D_SHA512]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_SHA512], c[D_SHA512][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            count = run_benchmark(async_jobs, SHA512_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_SHA512, testnum, count, d);
+        }
+    }
+#ifndef OPENSSL_NO_WHIRLPOOL
+    if (doit[D_WHIRLPOOL]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_WHIRLPOOL], c[D_WHIRLPOOL][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            count = run_benchmark(async_jobs, WHIRLPOOL_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_WHIRLPOOL, testnum, count, d);
+        }
+    }
+#endif
+
+#ifndef OPENSSL_NO_RMD160
+    if (doit[D_RMD160]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_RMD160], c[D_RMD160][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            count = run_benchmark(async_jobs, EVP_Digest_RMD160_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_RMD160, testnum, count, d);
+        }
+    }
+#endif
+#ifndef OPENSSL_NO_RC4
+    if (doit[D_RC4]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_RC4], c[D_RC4][testnum], lengths[testnum],
+                          seconds.sym);
+            Time_F(START);
+            count = run_benchmark(async_jobs, RC4_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_RC4, testnum, count, d);
+        }
+    }
+#endif
+#ifndef OPENSSL_NO_DES
+    if (doit[D_CBC_DES]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_CBC_DES], c[D_CBC_DES][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            count = run_benchmark(async_jobs, DES_ncbc_encrypt_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_CBC_DES, testnum, count, d);
+        }
+    }
+
+    if (doit[D_EDE3_DES]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_EDE3_DES], c[D_EDE3_DES][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            count =
+                run_benchmark(async_jobs, DES_ede3_cbc_encrypt_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_EDE3_DES, testnum, count, d);
+        }
+    }
+#endif
+
+    if (doit[D_CBC_128_AES]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_CBC_128_AES], c[D_CBC_128_AES][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            count =
+                run_benchmark(async_jobs, AES_cbc_128_encrypt_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_CBC_128_AES, testnum, count, d);
+        }
+    }
+    if (doit[D_CBC_192_AES]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_CBC_192_AES], c[D_CBC_192_AES][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            count =
+                run_benchmark(async_jobs, AES_cbc_192_encrypt_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_CBC_192_AES, testnum, count, d);
+        }
+    }
+    if (doit[D_CBC_256_AES]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_CBC_256_AES], c[D_CBC_256_AES][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            count =
+                run_benchmark(async_jobs, AES_cbc_256_encrypt_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_CBC_256_AES, testnum, count, d);
+        }
+    }
+
+    if (doit[D_IGE_128_AES]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_IGE_128_AES], c[D_IGE_128_AES][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            count =
+                run_benchmark(async_jobs, AES_ige_128_encrypt_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_IGE_128_AES, testnum, count, d);
+        }
+    }
+    if (doit[D_IGE_192_AES]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_IGE_192_AES], c[D_IGE_192_AES][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            count =
+                run_benchmark(async_jobs, AES_ige_192_encrypt_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_IGE_192_AES, testnum, count, d);
+        }
+    }
+    if (doit[D_IGE_256_AES]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_IGE_256_AES], c[D_IGE_256_AES][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            count =
+                run_benchmark(async_jobs, AES_ige_256_encrypt_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_IGE_256_AES, testnum, count, d);
+        }
+    }
+    if (doit[D_GHASH]) {
+        for (i = 0; i < loopargs_len; i++) {
+            loopargs[i].gcm_ctx =
+                CRYPTO_gcm128_new(&aes_ks1, (block128_f) AES_encrypt);
+            CRYPTO_gcm128_setiv(loopargs[i].gcm_ctx,
+                                (unsigned char *)"0123456789ab", 12);
+        }
+
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_GHASH], c[D_GHASH][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            count = run_benchmark(async_jobs, CRYPTO_gcm128_aad_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_GHASH, testnum, count, d);
+        }
+        for (i = 0; i < loopargs_len; i++)
+            CRYPTO_gcm128_release(loopargs[i].gcm_ctx);
+    }
+#ifndef OPENSSL_NO_CAMELLIA
+    if (doit[D_CBC_128_CML]) {
+        if (async_jobs > 0) {
+            BIO_printf(bio_err, "Async mode is not supported with %s\n",
+                       names[D_CBC_128_CML]);
+            doit[D_CBC_128_CML] = 0;
+        }
+        for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
+            print_message(names[D_CBC_128_CML], c[D_CBC_128_CML][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            for (count = 0, run = 1; COND(c[D_CBC_128_CML][testnum]); count++)
+                Camellia_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
+                                     (size_t)lengths[testnum], &camellia_ks1,
+                                     iv, CAMELLIA_ENCRYPT);
+            d = Time_F(STOP);
+            print_result(D_CBC_128_CML, testnum, count, d);
+        }
+    }
+    if (doit[D_CBC_192_CML]) {
+        if (async_jobs > 0) {
+            BIO_printf(bio_err, "Async mode is not supported with %s\n",
+                       names[D_CBC_192_CML]);
+            doit[D_CBC_192_CML] = 0;
+        }
+        for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
+            print_message(names[D_CBC_192_CML], c[D_CBC_192_CML][testnum],
+                          lengths[testnum], seconds.sym);
+            if (async_jobs > 0) {
+                BIO_printf(bio_err, "Async mode is not supported, exiting...");
+                exit(1);
+            }
+            Time_F(START);
+            for (count = 0, run = 1; COND(c[D_CBC_192_CML][testnum]); count++)
+                Camellia_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
+                                     (size_t)lengths[testnum], &camellia_ks2,
+                                     iv, CAMELLIA_ENCRYPT);
+            d = Time_F(STOP);
+            print_result(D_CBC_192_CML, testnum, count, d);
+        }
+    }
+    if (doit[D_CBC_256_CML]) {
+        if (async_jobs > 0) {
+            BIO_printf(bio_err, "Async mode is not supported with %s\n",
+                       names[D_CBC_256_CML]);
+            doit[D_CBC_256_CML] = 0;
+        }
+        for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
+            print_message(names[D_CBC_256_CML], c[D_CBC_256_CML][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            for (count = 0, run = 1; COND(c[D_CBC_256_CML][testnum]); count++)
+                Camellia_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
+                                     (size_t)lengths[testnum], &camellia_ks3,
+                                     iv, CAMELLIA_ENCRYPT);
+            d = Time_F(STOP);
+            print_result(D_CBC_256_CML, testnum, count, d);
+        }
+    }
+#endif
+#ifndef OPENSSL_NO_IDEA
+    if (doit[D_CBC_IDEA]) {
+        if (async_jobs > 0) {
+            BIO_printf(bio_err, "Async mode is not supported with %s\n",
+                       names[D_CBC_IDEA]);
+            doit[D_CBC_IDEA] = 0;
+        }
+        for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
+            print_message(names[D_CBC_IDEA], c[D_CBC_IDEA][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            for (count = 0, run = 1; COND(c[D_CBC_IDEA][testnum]); count++)
+                IDEA_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
+                                 (size_t)lengths[testnum], &idea_ks,
+                                 iv, IDEA_ENCRYPT);
+            d = Time_F(STOP);
+            print_result(D_CBC_IDEA, testnum, count, d);
+        }
+    }
+#endif
+#ifndef OPENSSL_NO_SEED
+    if (doit[D_CBC_SEED]) {
+        if (async_jobs > 0) {
+            BIO_printf(bio_err, "Async mode is not supported with %s\n",
+                       names[D_CBC_SEED]);
+            doit[D_CBC_SEED] = 0;
+        }
+        for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
+            print_message(names[D_CBC_SEED], c[D_CBC_SEED][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            for (count = 0, run = 1; COND(c[D_CBC_SEED][testnum]); count++)
+                SEED_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
+                                 (size_t)lengths[testnum], &seed_ks, iv, 1);
+            d = Time_F(STOP);
+            print_result(D_CBC_SEED, testnum, count, d);
+        }
+    }
+#endif
+#ifndef OPENSSL_NO_RC2
+    if (doit[D_CBC_RC2]) {
+        if (async_jobs > 0) {
+            BIO_printf(bio_err, "Async mode is not supported with %s\n",
+                       names[D_CBC_RC2]);
+            doit[D_CBC_RC2] = 0;
+        }
+        for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
+            print_message(names[D_CBC_RC2], c[D_CBC_RC2][testnum],
+                          lengths[testnum], seconds.sym);
+            if (async_jobs > 0) {
+                BIO_printf(bio_err, "Async mode is not supported, exiting...");
+                exit(1);
+            }
+            Time_F(START);
+            for (count = 0, run = 1; COND(c[D_CBC_RC2][testnum]); count++)
+                RC2_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
+                                (size_t)lengths[testnum], &rc2_ks,
+                                iv, RC2_ENCRYPT);
+            d = Time_F(STOP);
+            print_result(D_CBC_RC2, testnum, count, d);
+        }
+    }
+#endif
+#ifndef OPENSSL_NO_RC5
+    if (doit[D_CBC_RC5]) {
+        if (async_jobs > 0) {
+            BIO_printf(bio_err, "Async mode is not supported with %s\n",
+                       names[D_CBC_RC5]);
+            doit[D_CBC_RC5] = 0;
+        }
+        for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
+            print_message(names[D_CBC_RC5], c[D_CBC_RC5][testnum],
+                          lengths[testnum], seconds.sym);
+            if (async_jobs > 0) {
+                BIO_printf(bio_err, "Async mode is not supported, exiting...");
+                exit(1);
+            }
+            Time_F(START);
+            for (count = 0, run = 1; COND(c[D_CBC_RC5][testnum]); count++)
+                RC5_32_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
+                                   (size_t)lengths[testnum], &rc5_ks,
+                                   iv, RC5_ENCRYPT);
+            d = Time_F(STOP);
+            print_result(D_CBC_RC5, testnum, count, d);
+        }
+    }
+#endif
+#ifndef OPENSSL_NO_BF
+    if (doit[D_CBC_BF]) {
+        if (async_jobs > 0) {
+            BIO_printf(bio_err, "Async mode is not supported with %s\n",
+                       names[D_CBC_BF]);
+            doit[D_CBC_BF] = 0;
+        }
+        for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
+            print_message(names[D_CBC_BF], c[D_CBC_BF][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            for (count = 0, run = 1; COND(c[D_CBC_BF][testnum]); count++)
+                BF_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
+                               (size_t)lengths[testnum], &bf_ks,
+                               iv, BF_ENCRYPT);
+            d = Time_F(STOP);
+            print_result(D_CBC_BF, testnum, count, d);
+        }
+    }
+#endif
+#ifndef OPENSSL_NO_CAST
+    if (doit[D_CBC_CAST]) {
+        if (async_jobs > 0) {
+            BIO_printf(bio_err, "Async mode is not supported with %s\n",
+                       names[D_CBC_CAST]);
+            doit[D_CBC_CAST] = 0;
+        }
+        for (testnum = 0; testnum < size_num && async_init == 0; testnum++) {
+            print_message(names[D_CBC_CAST], c[D_CBC_CAST][testnum],
+                          lengths[testnum], seconds.sym);
+            Time_F(START);
+            for (count = 0, run = 1; COND(c[D_CBC_CAST][testnum]); count++)
+                CAST_cbc_encrypt(loopargs[0].buf, loopargs[0].buf,
+                                 (size_t)lengths[testnum], &cast_ks,
+                                 iv, CAST_ENCRYPT);
+            d = Time_F(STOP);
+            print_result(D_CBC_CAST, testnum, count, d);
+        }
+    }
+#endif
+    if (doit[D_RAND]) {
+        for (testnum = 0; testnum < size_num; testnum++) {
+            print_message(names[D_RAND], c[D_RAND][testnum], lengths[testnum],
+                          seconds.sym);
+            Time_F(START);
+            count = run_benchmark(async_jobs, RAND_bytes_loop, loopargs);
+            d = Time_F(STOP);
+            print_result(D_RAND, testnum, count, d);
+        }
+    }
+
+    if (doit[D_EVP]) {
+        if (evp_cipher != NULL) {
+            int (*loopfunc)(void *args) = EVP_Update_loop;
+
+            if (multiblock && (EVP_CIPHER_flags(evp_cipher) &
+                               EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK)) {
+                multiblock_speed(evp_cipher, lengths_single, &seconds);
+                ret = 0;
+                goto end;
+            }
+
+            names[D_EVP] = OBJ_nid2ln(EVP_CIPHER_nid(evp_cipher));
+
+            if (EVP_CIPHER_mode(evp_cipher) == EVP_CIPH_CCM_MODE) {
+                loopfunc = EVP_Update_loop_ccm;
+            } else if (aead && (EVP_CIPHER_flags(evp_cipher) &
+                                EVP_CIPH_FLAG_AEAD_CIPHER)) {
+                loopfunc = EVP_Update_loop_aead;
+                if (lengths == lengths_list) {
+                    lengths = aead_lengths_list;
+                    size_num = OSSL_NELEM(aead_lengths_list);
+                }
+            }
+
+            for (testnum = 0; testnum < size_num; testnum++) {
+                print_message(names[D_EVP], save_count, lengths[testnum],
+                              seconds.sym);
+
+                for (k = 0; k < loopargs_len; k++) {
+                    loopargs[k].ctx = EVP_CIPHER_CTX_new();
+                    EVP_CipherInit_ex(loopargs[k].ctx, evp_cipher, NULL, NULL,
+                                      iv, decrypt ? 0 : 1);
+
+                    EVP_CIPHER_CTX_set_padding(loopargs[k].ctx, 0);
+
+                    keylen = EVP_CIPHER_CTX_key_length(loopargs[k].ctx);
+                    loopargs[k].key = app_malloc(keylen, "evp_cipher key");
+                    EVP_CIPHER_CTX_rand_key(loopargs[k].ctx, loopargs[k].key);
+                    EVP_CipherInit_ex(loopargs[k].ctx, NULL, NULL,
+                                      loopargs[k].key, NULL, -1);
+                    OPENSSL_clear_free(loopargs[k].key, keylen);
+                }
+
+                Time_F(START);
+                count = run_benchmark(async_jobs, loopfunc, loopargs);
+                d = Time_F(STOP);
+                for (k = 0; k < loopargs_len; k++) {
+                    EVP_CIPHER_CTX_free(loopargs[k].ctx);
+                }
+                print_result(D_EVP, testnum, count, d);
+            }
+        } else if (evp_md != NULL) {
+            names[D_EVP] = OBJ_nid2ln(EVP_MD_type(evp_md));
+
+            for (testnum = 0; testnum < size_num; testnum++) {
+                print_message(names[D_EVP], save_count, lengths[testnum],
+                              seconds.sym);
+                Time_F(START);
+                count = run_benchmark(async_jobs, EVP_Digest_loop, loopargs);
+                d = Time_F(STOP);
+                print_result(D_EVP, testnum, count, d);
+            }
+        }
+    }
+
+    for (i = 0; i < loopargs_len; i++)
+        if (RAND_bytes(loopargs[i].buf, 36) <= 0)
+            goto end;
+
+#ifndef OPENSSL_NO_RSA
+    for (testnum = 0; testnum < RSA_NUM; testnum++) {
+        int st = 0;
+        if (!rsa_doit[testnum])
+            continue;
+        for (i = 0; i < loopargs_len; i++) {
+            if (primes > 2) {
+                /* we haven't set keys yet,  generate multi-prime RSA keys */
+                BIGNUM *bn = BN_new();
+
+                if (bn == NULL)
+                    goto end;
+                if (!BN_set_word(bn, RSA_F4)) {
+                    BN_free(bn);
+                    goto end;
+                }
+
+                BIO_printf(bio_err, "Generate multi-prime RSA key for %s\n",
+                           rsa_choices[testnum].name);
+
+                loopargs[i].rsa_key[testnum] = RSA_new();
+                if (loopargs[i].rsa_key[testnum] == NULL) {
+                    BN_free(bn);
+                    goto end;
+                }
+
+                if (!RSA_generate_multi_prime_key(loopargs[i].rsa_key[testnum],
+                                                  rsa_bits[testnum],
+                                                  primes, bn, NULL)) {
+                    BN_free(bn);
+                    goto end;
+                }
+                BN_free(bn);
+            }
+            st = RSA_sign(NID_md5_sha1, loopargs[i].buf, 36, loopargs[i].buf2,
+                          &loopargs[i].siglen, loopargs[i].rsa_key[testnum]);
+            if (st == 0)
+                break;
+        }
+        if (st == 0) {
+            BIO_printf(bio_err,
+                       "RSA sign failure.  No RSA sign will be done.\n");
+            ERR_print_errors(bio_err);
+            rsa_count = 1;
+        } else {
+            pkey_print_message("private", "rsa",
+                               rsa_c[testnum][0], rsa_bits[testnum],
+                               seconds.rsa);
+            /* RSA_blinding_on(rsa_key[testnum],NULL); */
+            Time_F(START);
+            count = run_benchmark(async_jobs, RSA_sign_loop, loopargs);
+            d = Time_F(STOP);
+            BIO_printf(bio_err,
+                       mr ? "+R1:%ld:%d:%.2f\n"
+                       : "%ld %u bits private RSA's in %.2fs\n",
+                       count, rsa_bits[testnum], d);
+            rsa_results[testnum][0] = (double)count / d;
+            rsa_count = count;
+        }
+
+        for (i = 0; i < loopargs_len; i++) {
+            st = RSA_verify(NID_md5_sha1, loopargs[i].buf, 36, loopargs[i].buf2,
+                            loopargs[i].siglen, loopargs[i].rsa_key[testnum]);
+            if (st <= 0)
+                break;
+        }
+        if (st <= 0) {
+            BIO_printf(bio_err,
+                       "RSA verify failure.  No RSA verify will be done.\n");
+            ERR_print_errors(bio_err);
+            rsa_doit[testnum] = 0;
+        } else {
+            pkey_print_message("public", "rsa",
+                               rsa_c[testnum][1], rsa_bits[testnum],
+                               seconds.rsa);
+            Time_F(START);
+            count = run_benchmark(async_jobs, RSA_verify_loop, loopargs);
+            d = Time_F(STOP);
+            BIO_printf(bio_err,
+                       mr ? "+R2:%ld:%d:%.2f\n"
+                       : "%ld %u bits public RSA's in %.2fs\n",
+                       count, rsa_bits[testnum], d);
+            rsa_results[testnum][1] = (double)count / d;
+        }
+
+        if (rsa_count <= 1) {
+            /* if longer than 10s, don't do any more */
+            for (testnum++; testnum < RSA_NUM; testnum++)
+                rsa_doit[testnum] = 0;
+        }
+    }
+#endif                          /* OPENSSL_NO_RSA */
+
+    for (i = 0; i < loopargs_len; i++)
+        if (RAND_bytes(loopargs[i].buf, 36) <= 0)
+            goto end;
+
+#ifndef OPENSSL_NO_DSA
+    for (testnum = 0; testnum < DSA_NUM; testnum++) {
+        int st = 0;
+        if (!dsa_doit[testnum])
+            continue;
+
+        /* DSA_generate_key(dsa_key[testnum]); */
+        /* DSA_sign_setup(dsa_key[testnum],NULL); */
+        for (i = 0; i < loopargs_len; i++) {
+            st = DSA_sign(0, loopargs[i].buf, 20, loopargs[i].buf2,
+                          &loopargs[i].siglen, loopargs[i].dsa_key[testnum]);
+            if (st == 0)
+                break;
+        }
+        if (st == 0) {
+            BIO_printf(bio_err,
+                       "DSA sign failure.  No DSA sign will be done.\n");
+            ERR_print_errors(bio_err);
+            rsa_count = 1;
+        } else {
+            pkey_print_message("sign", "dsa",
+                               dsa_c[testnum][0], dsa_bits[testnum],
+                               seconds.dsa);
+            Time_F(START);
+            count = run_benchmark(async_jobs, DSA_sign_loop, loopargs);
+            d = Time_F(STOP);
+            BIO_printf(bio_err,
+                       mr ? "+R3:%ld:%u:%.2f\n"
+                       : "%ld %u bits DSA signs in %.2fs\n",
+                       count, dsa_bits[testnum], d);
+            dsa_results[testnum][0] = (double)count / d;
+            rsa_count = count;
+        }
+
+        for (i = 0; i < loopargs_len; i++) {
+            st = DSA_verify(0, loopargs[i].buf, 20, loopargs[i].buf2,
+                            loopargs[i].siglen, loopargs[i].dsa_key[testnum]);
+            if (st <= 0)
+                break;
+        }
+        if (st <= 0) {
+            BIO_printf(bio_err,
+                       "DSA verify failure.  No DSA verify will be done.\n");
+            ERR_print_errors(bio_err);
+            dsa_doit[testnum] = 0;
+        } else {
+            pkey_print_message("verify", "dsa",
+                               dsa_c[testnum][1], dsa_bits[testnum],
+                               seconds.dsa);
+            Time_F(START);
+            count = run_benchmark(async_jobs, DSA_verify_loop, loopargs);
+            d = Time_F(STOP);
+            BIO_printf(bio_err,
+                       mr ? "+R4:%ld:%u:%.2f\n"
+                       : "%ld %u bits DSA verify in %.2fs\n",
+                       count, dsa_bits[testnum], d);
+            dsa_results[testnum][1] = (double)count / d;
+        }
+
+        if (rsa_count <= 1) {
+            /* if longer than 10s, don't do any more */
+            for (testnum++; testnum < DSA_NUM; testnum++)
+                dsa_doit[testnum] = 0;
+        }
+    }
+#endif                          /* OPENSSL_NO_DSA */
+
+#ifndef OPENSSL_NO_EC
+    for (testnum = 0; testnum < ECDSA_NUM; testnum++) {
+        int st = 1;
+
+        if (!ecdsa_doit[testnum])
+            continue;           /* Ignore Curve */
+        for (i = 0; i < loopargs_len; i++) {
+            loopargs[i].ecdsa[testnum] =
+                EC_KEY_new_by_curve_name(test_curves[testnum].nid);
+            if (loopargs[i].ecdsa[testnum] == NULL) {
+                st = 0;
+                break;
+            }
+        }
+        if (st == 0) {
+            BIO_printf(bio_err, "ECDSA failure.\n");
+            ERR_print_errors(bio_err);
+            rsa_count = 1;
+        } else {
+            for (i = 0; i < loopargs_len; i++) {
+                EC_KEY_precompute_mult(loopargs[i].ecdsa[testnum], NULL);
+                /* Perform ECDSA signature test */
+                EC_KEY_generate_key(loopargs[i].ecdsa[testnum]);
+                st = ECDSA_sign(0, loopargs[i].buf, 20, loopargs[i].buf2,
+                                &loopargs[i].siglen,
+                                loopargs[i].ecdsa[testnum]);
+                if (st == 0)
+                    break;
+            }
+            if (st == 0) {
+                BIO_printf(bio_err,
+                           "ECDSA sign failure.  No ECDSA sign will be done.\n");
+                ERR_print_errors(bio_err);
+                rsa_count = 1;
+            } else {
+                pkey_print_message("sign", "ecdsa",
+                                   ecdsa_c[testnum][0],
+                                   test_curves[testnum].bits, seconds.ecdsa);
+                Time_F(START);
+                count = run_benchmark(async_jobs, ECDSA_sign_loop, loopargs);
+                d = Time_F(STOP);
+
+                BIO_printf(bio_err,
+                           mr ? "+R5:%ld:%u:%.2f\n" :
+                           "%ld %u bits ECDSA signs in %.2fs \n",
+                           count, test_curves[testnum].bits, d);
+                ecdsa_results[testnum][0] = (double)count / d;
+                rsa_count = count;
+            }
+
+            /* Perform ECDSA verification test */
+            for (i = 0; i < loopargs_len; i++) {
+                st = ECDSA_verify(0, loopargs[i].buf, 20, loopargs[i].buf2,
+                                  loopargs[i].siglen,
+                                  loopargs[i].ecdsa[testnum]);
+                if (st != 1)
+                    break;
+            }
+            if (st != 1) {
+                BIO_printf(bio_err,
+                           "ECDSA verify failure.  No ECDSA verify will be done.\n");
+                ERR_print_errors(bio_err);
+                ecdsa_doit[testnum] = 0;
+            } else {
+                pkey_print_message("verify", "ecdsa",
+                                   ecdsa_c[testnum][1],
+                                   test_curves[testnum].bits, seconds.ecdsa);
+                Time_F(START);
+                count = run_benchmark(async_jobs, ECDSA_verify_loop, loopargs);
+                d = Time_F(STOP);
+                BIO_printf(bio_err,
+                           mr ? "+R6:%ld:%u:%.2f\n"
+                           : "%ld %u bits ECDSA verify in %.2fs\n",
+                           count, test_curves[testnum].bits, d);
+                ecdsa_results[testnum][1] = (double)count / d;
+            }
+
+            if (rsa_count <= 1) {
+                /* if longer than 10s, don't do any more */
+                for (testnum++; testnum < ECDSA_NUM; testnum++)
+                    ecdsa_doit[testnum] = 0;
+            }
+        }
+    }
+
+    for (testnum = 0; testnum < EC_NUM; testnum++) {
+        int ecdh_checks = 1;
+
+        if (!ecdh_doit[testnum])
+            continue;
+
+        for (i = 0; i < loopargs_len; i++) {
+            EVP_PKEY_CTX *kctx = NULL;
+            EVP_PKEY_CTX *test_ctx = NULL;
+            EVP_PKEY_CTX *ctx = NULL;
+            EVP_PKEY *key_A = NULL;
+            EVP_PKEY *key_B = NULL;
+            size_t outlen;
+            size_t test_outlen;
+
+            /* Ensure that the error queue is empty */
+            if (ERR_peek_error()) {
+                BIO_printf(bio_err,
+                           "WARNING: the error queue contains previous unhandled errors.\n");
+                ERR_print_errors(bio_err);
+            }
+
+            /* Let's try to create a ctx directly from the NID: this works for
+             * curves like Curve25519 that are not implemented through the low
+             * level EC interface.
+             * If this fails we try creating a EVP_PKEY_EC generic param ctx,
+             * then we set the curve by NID before deriving the actual keygen
+             * ctx for that specific curve. */
+            kctx = EVP_PKEY_CTX_new_id(test_curves[testnum].nid, NULL); /* keygen ctx from NID */
+            if (!kctx) {
+                EVP_PKEY_CTX *pctx = NULL;
+                EVP_PKEY *params = NULL;
+
+                /* If we reach this code EVP_PKEY_CTX_new_id() failed and a
+                 * "int_ctx_new:unsupported algorithm" error was added to the
+                 * error queue.
+                 * We remove it from the error queue as we are handling it. */
+                unsigned long error = ERR_peek_error(); /* peek the latest error in the queue */
+                if (error == ERR_peek_last_error() && /* oldest and latest errors match */
+                    /* check that the error origin matches */
+                    ERR_GET_LIB(error) == ERR_LIB_EVP &&
+                    ERR_GET_FUNC(error) == EVP_F_INT_CTX_NEW &&
+                    ERR_GET_REASON(error) == EVP_R_UNSUPPORTED_ALGORITHM)
+                    ERR_get_error(); /* pop error from queue */
+                if (ERR_peek_error()) {
+                    BIO_printf(bio_err,
+                               "Unhandled error in the error queue during ECDH init.\n");
+                    ERR_print_errors(bio_err);
+                    rsa_count = 1;
+                    break;
+                }
+
+                if (            /* Create the context for parameter generation */
+                       !(pctx = EVP_PKEY_CTX_new_id(EVP_PKEY_EC, NULL)) ||
+                       /* Initialise the parameter generation */
+                       !EVP_PKEY_paramgen_init(pctx) ||
+                       /* Set the curve by NID */
+                       !EVP_PKEY_CTX_set_ec_paramgen_curve_nid(pctx,
+                                                               test_curves
+                                                               [testnum].nid) ||
+                       /* Create the parameter object params */
+                       !EVP_PKEY_paramgen(pctx, &params)) {
+                    ecdh_checks = 0;
+                    BIO_printf(bio_err, "ECDH EC params init failure.\n");
+                    ERR_print_errors(bio_err);
+                    rsa_count = 1;
+                    break;
+                }
+                /* Create the context for the key generation */
+                kctx = EVP_PKEY_CTX_new(params, NULL);
+
+                EVP_PKEY_free(params);
+                params = NULL;
+                EVP_PKEY_CTX_free(pctx);
+                pctx = NULL;
+            }
+            if (kctx == NULL ||      /* keygen ctx is not null */
+                !EVP_PKEY_keygen_init(kctx) /* init keygen ctx */ ) {
+                ecdh_checks = 0;
+                BIO_printf(bio_err, "ECDH keygen failure.\n");
+                ERR_print_errors(bio_err);
+                rsa_count = 1;
+                break;
+            }
+
+            if (!EVP_PKEY_keygen(kctx, &key_A) || /* generate secret key A */
+                !EVP_PKEY_keygen(kctx, &key_B) || /* generate secret key B */
+                !(ctx = EVP_PKEY_CTX_new(key_A, NULL)) || /* derivation ctx from skeyA */
+                !EVP_PKEY_derive_init(ctx) || /* init derivation ctx */
+                !EVP_PKEY_derive_set_peer(ctx, key_B) || /* set peer pubkey in ctx */
+                !EVP_PKEY_derive(ctx, NULL, &outlen) || /* determine max length */
+                outlen == 0 ||  /* ensure outlen is a valid size */
+                outlen > MAX_ECDH_SIZE /* avoid buffer overflow */ ) {
+                ecdh_checks = 0;
+                BIO_printf(bio_err, "ECDH key generation failure.\n");
+                ERR_print_errors(bio_err);
+                rsa_count = 1;
+                break;
+            }
+
+            /* Here we perform a test run, comparing the output of a*B and b*A;
+             * we try this here and assume that further EVP_PKEY_derive calls
+             * never fail, so we can skip checks in the actually benchmarked
+             * code, for maximum performance. */
+            if (!(test_ctx = EVP_PKEY_CTX_new(key_B, NULL)) || /* test ctx from skeyB */
+                !EVP_PKEY_derive_init(test_ctx) || /* init derivation test_ctx */
+                !EVP_PKEY_derive_set_peer(test_ctx, key_A) || /* set peer pubkey in test_ctx */
+                !EVP_PKEY_derive(test_ctx, NULL, &test_outlen) || /* determine max length */
+                !EVP_PKEY_derive(ctx, loopargs[i].secret_a, &outlen) || /* compute a*B */
+                !EVP_PKEY_derive(test_ctx, loopargs[i].secret_b, &test_outlen) || /* compute b*A */
+                test_outlen != outlen /* compare output length */ ) {
+                ecdh_checks = 0;
+                BIO_printf(bio_err, "ECDH computation failure.\n");
+                ERR_print_errors(bio_err);
+                rsa_count = 1;
+                break;
+            }
+
+            /* Compare the computation results: CRYPTO_memcmp() returns 0 if equal */
+            if (CRYPTO_memcmp(loopargs[i].secret_a,
+                              loopargs[i].secret_b, outlen)) {
+                ecdh_checks = 0;
+                BIO_printf(bio_err, "ECDH computations don't match.\n");
+                ERR_print_errors(bio_err);
+                rsa_count = 1;
+                break;
+            }
+
+            loopargs[i].ecdh_ctx[testnum] = ctx;
+            loopargs[i].outlen[testnum] = outlen;
+
+            EVP_PKEY_free(key_A);
+            EVP_PKEY_free(key_B);
+            EVP_PKEY_CTX_free(kctx);
+            kctx = NULL;
+            EVP_PKEY_CTX_free(test_ctx);
+            test_ctx = NULL;
+        }
+        if (ecdh_checks != 0) {
+            pkey_print_message("", "ecdh",
+                               ecdh_c[testnum][0],
+                               test_curves[testnum].bits, seconds.ecdh);
+            Time_F(START);
+            count =
+                run_benchmark(async_jobs, ECDH_EVP_derive_key_loop, loopargs);
+            d = Time_F(STOP);
+            BIO_printf(bio_err,
+                       mr ? "+R7:%ld:%d:%.2f\n" :
+                       "%ld %u-bits ECDH ops in %.2fs\n", count,
+                       test_curves[testnum].bits, d);
+            ecdh_results[testnum][0] = (double)count / d;
+            rsa_count = count;
+        }
+
+        if (rsa_count <= 1) {
+            /* if longer than 10s, don't do any more */
+            for (testnum++; testnum < OSSL_NELEM(ecdh_doit); testnum++)
+                ecdh_doit[testnum] = 0;
+        }
+    }
+
+    for (testnum = 0; testnum < EdDSA_NUM; testnum++) {
+        int st = 1;
+        EVP_PKEY *ed_pkey = NULL;
+        EVP_PKEY_CTX *ed_pctx = NULL;
+
+        if (!eddsa_doit[testnum])
+            continue;           /* Ignore Curve */
+        for (i = 0; i < loopargs_len; i++) {
+            loopargs[i].eddsa_ctx[testnum] = EVP_MD_CTX_new();
+            if (loopargs[i].eddsa_ctx[testnum] == NULL) {
+                st = 0;
+                break;
+            }
+
+            if ((ed_pctx = EVP_PKEY_CTX_new_id(test_ed_curves[testnum].nid, NULL))
+                    == NULL
+                || !EVP_PKEY_keygen_init(ed_pctx)
+                || !EVP_PKEY_keygen(ed_pctx, &ed_pkey)) {
+                st = 0;
+                EVP_PKEY_CTX_free(ed_pctx);
+                break;
+            }
+            EVP_PKEY_CTX_free(ed_pctx);
+
+            if (!EVP_DigestSignInit(loopargs[i].eddsa_ctx[testnum], NULL, NULL,
+                                    NULL, ed_pkey)) {
+                st = 0;
+                EVP_PKEY_free(ed_pkey);
+                break;
+            }
+            EVP_PKEY_free(ed_pkey);
+        }
+        if (st == 0) {
+            BIO_printf(bio_err, "EdDSA failure.\n");
+            ERR_print_errors(bio_err);
+            rsa_count = 1;
+        } else {
+            for (i = 0; i < loopargs_len; i++) {
+                /* Perform EdDSA signature test */
+                loopargs[i].sigsize = test_ed_curves[testnum].sigsize;
+                st = EVP_DigestSign(loopargs[i].eddsa_ctx[testnum],
+                                    loopargs[i].buf2, &loopargs[i].sigsize,
+                                    loopargs[i].buf, 20);
+                if (st == 0)
+                    break;
+            }
+            if (st == 0) {
+                BIO_printf(bio_err,
+                           "EdDSA sign failure.  No EdDSA sign will be done.\n");
+                ERR_print_errors(bio_err);
+                rsa_count = 1;
+            } else {
+                pkey_print_message("sign", test_ed_curves[testnum].name,
+                                   eddsa_c[testnum][0],
+                                   test_ed_curves[testnum].bits, seconds.eddsa);
+                Time_F(START);
+                count = run_benchmark(async_jobs, EdDSA_sign_loop, loopargs);
+                d = Time_F(STOP);
+
+                BIO_printf(bio_err,
+                           mr ? "+R8:%ld:%u:%s:%.2f\n" :
+                           "%ld %u bits %s signs in %.2fs \n",
+                           count, test_ed_curves[testnum].bits,
+                           test_ed_curves[testnum].name, d);
+                eddsa_results[testnum][0] = (double)count / d;
+                rsa_count = count;
+            }
+
+            /* Perform EdDSA verification test */
+            for (i = 0; i < loopargs_len; i++) {
+                st = EVP_DigestVerify(loopargs[i].eddsa_ctx[testnum],
+                                      loopargs[i].buf2, loopargs[i].sigsize,
+                                      loopargs[i].buf, 20);
+                if (st != 1)
+                    break;
+            }
+            if (st != 1) {
+                BIO_printf(bio_err,
+                           "EdDSA verify failure.  No EdDSA verify will be done.\n");
+                ERR_print_errors(bio_err);
+                eddsa_doit[testnum] = 0;
+            } else {
+                pkey_print_message("verify", test_ed_curves[testnum].name,
+                                   eddsa_c[testnum][1],
+                                   test_ed_curves[testnum].bits, seconds.eddsa);
+                Time_F(START);
+                count = run_benchmark(async_jobs, EdDSA_verify_loop, loopargs);
+                d = Time_F(STOP);
+                BIO_printf(bio_err,
+                           mr ? "+R9:%ld:%u:%s:%.2f\n"
+                           : "%ld %u bits %s verify in %.2fs\n",
+                           count, test_ed_curves[testnum].bits,
+                           test_ed_curves[testnum].name, d);
+                eddsa_results[testnum][1] = (double)count / d;
+            }
+
+            if (rsa_count <= 1) {
+                /* if longer than 10s, don't do any more */
+                for (testnum++; testnum < EdDSA_NUM; testnum++)
+                    eddsa_doit[testnum] = 0;
+            }
+        }
+    }
+
+#endif                          /* OPENSSL_NO_EC */
+#ifndef NO_FORK
+ show_res:
+#endif
+    if (!mr) {
+        printf("%s\n", OpenSSL_version(OPENSSL_VERSION));
+        printf("%s\n", OpenSSL_version(OPENSSL_BUILT_ON));
+        printf("options:");
+        printf("%s ", BN_options());
+#ifndef OPENSSL_NO_MD2
+        printf("%s ", MD2_options());
+#endif
+#ifndef OPENSSL_NO_RC4
+        printf("%s ", RC4_options());
+#endif
+#ifndef OPENSSL_NO_DES
+        printf("%s ", DES_options());
+#endif
+        printf("%s ", AES_options());
+#ifndef OPENSSL_NO_IDEA
+        printf("%s ", IDEA_options());
+#endif
+#ifndef OPENSSL_NO_BF
+        printf("%s ", BF_options());
+#endif
+        printf("\n%s\n", OpenSSL_version(OPENSSL_CFLAGS));
+    }
+
+    if (pr_header) {
+        if (mr)
+            printf("+H");
+        else {
+            printf
+                ("The 'numbers' are in 1000s of bytes per second processed.\n");
+            printf("type        ");
+        }
+        for (testnum = 0; testnum < size_num; testnum++)
+            printf(mr ? ":%d" : "%7d bytes", lengths[testnum]);
+        printf("\n");
+    }
+
+    for (k = 0; k < ALGOR_NUM; k++) {
+        if (!doit[k])
+            continue;
+        if (mr)
+            printf("+F:%u:%s", k, names[k]);
+        else
+            printf("%-13s", names[k]);
+        for (testnum = 0; testnum < size_num; testnum++) {
+            if (results[k][testnum] > 10000 && !mr)
+                printf(" %11.2fk", results[k][testnum] / 1e3);
+            else
+                printf(mr ? ":%.2f" : " %11.2f ", results[k][testnum]);
+        }
+        printf("\n");
+    }
+#ifndef OPENSSL_NO_RSA
+    testnum = 1;
+    for (k = 0; k < RSA_NUM; k++) {
+        if (!rsa_doit[k])
+            continue;
+        if (testnum && !mr) {
+            printf("%18ssign    verify    sign/s verify/s\n", " ");
+            testnum = 0;
+        }
+        if (mr)
+            printf("+F2:%u:%u:%f:%f\n",
+                   k, rsa_bits[k], rsa_results[k][0], rsa_results[k][1]);
+        else
+            printf("rsa %4u bits %8.6fs %8.6fs %8.1f %8.1f\n",
+                   rsa_bits[k], 1.0 / rsa_results[k][0], 1.0 / rsa_results[k][1],
+                   rsa_results[k][0], rsa_results[k][1]);
+    }
+#endif
+#ifndef OPENSSL_NO_DSA
+    testnum = 1;
+    for (k = 0; k < DSA_NUM; k++) {
+        if (!dsa_doit[k])
+            continue;
+        if (testnum && !mr) {
+            printf("%18ssign    verify    sign/s verify/s\n", " ");
+            testnum = 0;
+        }
+        if (mr)
+            printf("+F3:%u:%u:%f:%f\n",
+                   k, dsa_bits[k], dsa_results[k][0], dsa_results[k][1]);
+        else
+            printf("dsa %4u bits %8.6fs %8.6fs %8.1f %8.1f\n",
+                   dsa_bits[k], 1.0 / dsa_results[k][0], 1.0 / dsa_results[k][1],
+                   dsa_results[k][0], dsa_results[k][1]);
+    }
+#endif
+#ifndef OPENSSL_NO_EC
+    testnum = 1;
+    for (k = 0; k < OSSL_NELEM(ecdsa_doit); k++) {
+        if (!ecdsa_doit[k])
+            continue;
+        if (testnum && !mr) {
+            printf("%30ssign    verify    sign/s verify/s\n", " ");
+            testnum = 0;
+        }
+
+        if (mr)
+            printf("+F4:%u:%u:%f:%f\n",
+                   k, test_curves[k].bits,
+                   ecdsa_results[k][0], ecdsa_results[k][1]);
+        else
+            printf("%4u bits ecdsa (%s) %8.4fs %8.4fs %8.1f %8.1f\n",
+                   test_curves[k].bits, test_curves[k].name,
+                   1.0 / ecdsa_results[k][0], 1.0 / ecdsa_results[k][1],
+                   ecdsa_results[k][0], ecdsa_results[k][1]);
+    }
+
+    testnum = 1;
+    for (k = 0; k < EC_NUM; k++) {
+        if (!ecdh_doit[k])
+            continue;
+        if (testnum && !mr) {
+            printf("%30sop      op/s\n", " ");
+            testnum = 0;
+        }
+        if (mr)
+            printf("+F5:%u:%u:%f:%f\n",
+                   k, test_curves[k].bits,
+                   ecdh_results[k][0], 1.0 / ecdh_results[k][0]);
+
+        else
+            printf("%4u bits ecdh (%s) %8.4fs %8.1f\n",
+                   test_curves[k].bits, test_curves[k].name,
+                   1.0 / ecdh_results[k][0], ecdh_results[k][0]);
+    }
+
+    testnum = 1;
+    for (k = 0; k < OSSL_NELEM(eddsa_doit); k++) {
+        if (!eddsa_doit[k])
+            continue;
+        if (testnum && !mr) {
+            printf("%30ssign    verify    sign/s verify/s\n", " ");
+            testnum = 0;
+        }
+
+        if (mr)
+            printf("+F6:%u:%u:%s:%f:%f\n",
+                   k, test_ed_curves[k].bits, test_ed_curves[k].name,
+                   eddsa_results[k][0], eddsa_results[k][1]);
+        else
+            printf("%4u bits EdDSA (%s) %8.4fs %8.4fs %8.1f %8.1f\n",
+                   test_ed_curves[k].bits, test_ed_curves[k].name,
+                   1.0 / eddsa_results[k][0], 1.0 / eddsa_results[k][1],
+                   eddsa_results[k][0], eddsa_results[k][1]);
+    }
+#endif
+
+    ret = 0;
+
+ end:
+    ERR_print_errors(bio_err);
+    for (i = 0; i < loopargs_len; i++) {
+        OPENSSL_free(loopargs[i].buf_malloc);
+        OPENSSL_free(loopargs[i].buf2_malloc);
+
+#ifndef OPENSSL_NO_RSA
+        for (k = 0; k < RSA_NUM; k++)
+            RSA_free(loopargs[i].rsa_key[k]);
+#endif
+#ifndef OPENSSL_NO_DSA
+        for (k = 0; k < DSA_NUM; k++)
+            DSA_free(loopargs[i].dsa_key[k]);
+#endif
+#ifndef OPENSSL_NO_EC
+        for (k = 0; k < ECDSA_NUM; k++)
+            EC_KEY_free(loopargs[i].ecdsa[k]);
+        for (k = 0; k < EC_NUM; k++)
+            EVP_PKEY_CTX_free(loopargs[i].ecdh_ctx[k]);
+        for (k = 0; k < EdDSA_NUM; k++)
+            EVP_MD_CTX_free(loopargs[i].eddsa_ctx[k]);
+        OPENSSL_free(loopargs[i].secret_a);
+        OPENSSL_free(loopargs[i].secret_b);
+#endif
+    }
+
+    if (async_jobs > 0) {
+        for (i = 0; i < loopargs_len; i++)
+            ASYNC_WAIT_CTX_free(loopargs[i].wait_ctx);
+    }
+
+    if (async_init) {
+        ASYNC_cleanup_thread();
+    }
+    OPENSSL_free(loopargs);
+    release_engine(e);
+    return ret;
+}
+
+static void print_message(const char *s, long num, int length, int tm)
+{
+#ifdef SIGALRM
+    BIO_printf(bio_err,
+               mr ? "+DT:%s:%d:%d\n"
+               : "Doing %s for %ds on %d size blocks: ", s, tm, length);
+    (void)BIO_flush(bio_err);
+    alarm(tm);
+#else
+    BIO_printf(bio_err,
+               mr ? "+DN:%s:%ld:%d\n"
+               : "Doing %s %ld times on %d size blocks: ", s, num, length);
+    (void)BIO_flush(bio_err);
+#endif
+}
+
+static void pkey_print_message(const char *str, const char *str2, long num,
+                               unsigned int bits, int tm)
+{
+#ifdef SIGALRM
+    BIO_printf(bio_err,
+               mr ? "+DTP:%d:%s:%s:%d\n"
+               : "Doing %u bits %s %s's for %ds: ", bits, str, str2, tm);
+    (void)BIO_flush(bio_err);
+    alarm(tm);
+#else
+    BIO_printf(bio_err,
+               mr ? "+DNP:%ld:%d:%s:%s\n"
+               : "Doing %ld %u bits %s %s's: ", num, bits, str, str2);
+    (void)BIO_flush(bio_err);
+#endif
+}
+
+static void print_result(int alg, int run_no, int count, double time_used)
+{
+    if (count == -1) {
+        BIO_puts(bio_err, "EVP error!\n");
+        exit(1);
+    }
+    BIO_printf(bio_err,
+               mr ? "+R:%d:%s:%f\n"
+               : "%d %s's in %.2fs\n", count, names[alg], time_used);
+    results[alg][run_no] = ((double)count) / time_used * lengths[run_no];
+}
+
+#ifndef NO_FORK
+static char *sstrsep(char **string, const char *delim)
+{
+    char isdelim[256];
+    char *token = *string;
+
+    if (**string == 0)
+        return NULL;
+
+    memset(isdelim, 0, sizeof(isdelim));
+    isdelim[0] = 1;
+
+    while (*delim) {
+        isdelim[(unsigned char)(*delim)] = 1;
+        delim++;
+    }
+
+    while (!isdelim[(unsigned char)(**string)]) {
+        (*string)++;
+    }
+
+    if (**string) {
+        **string = 0;
+        (*string)++;
+    }
+
+    return token;
+}
+
+static int do_multi(int multi, int size_num)
+{
+    int n;
+    int fd[2];
+    int *fds;
+    static char sep[] = ":";
+
+    fds = app_malloc(sizeof(*fds) * multi, "fd buffer for do_multi");
+    for (n = 0; n < multi; ++n) {
+        if (pipe(fd) == -1) {
+            BIO_printf(bio_err, "pipe failure\n");
+            exit(1);
+        }
+        fflush(stdout);
+        (void)BIO_flush(bio_err);
+        if (fork()) {
+            close(fd[1]);
+            fds[n] = fd[0];
+        } else {
+            close(fd[0]);
+            close(1);
+            if (dup(fd[1]) == -1) {
+                BIO_printf(bio_err, "dup failed\n");
+                exit(1);
+            }
+            close(fd[1]);
+            mr = 1;
+            usertime = 0;
+            free(fds);
+            return 0;
+        }
+        printf("Forked child %d\n", n);
+    }
+
+    /* for now, assume the pipe is long enough to take all the output */
+    for (n = 0; n < multi; ++n) {
+        FILE *f;
+        char buf[1024];
+        char *p;
+
+        f = fdopen(fds[n], "r");
+        while (fgets(buf, sizeof(buf), f)) {
+            p = strchr(buf, '\n');
+            if (p)
+                *p = '\0';
+            if (buf[0] != '+') {
+                BIO_printf(bio_err,
+                           "Don't understand line '%s' from child %d\n", buf,
+                           n);
+                continue;
+            }
+            printf("Got: %s from %d\n", buf, n);
+            if (strncmp(buf, "+F:", 3) == 0) {
+                int alg;
+                int j;
+
+                p = buf + 3;
+                alg = atoi(sstrsep(&p, sep));
+                sstrsep(&p, sep);
+                for (j = 0; j < size_num; ++j)
+                    results[alg][j] += atof(sstrsep(&p, sep));
+            } else if (strncmp(buf, "+F2:", 4) == 0) {
+                int k;
+                double d;
+
+                p = buf + 4;
+                k = atoi(sstrsep(&p, sep));
+                sstrsep(&p, sep);
+
+                d = atof(sstrsep(&p, sep));
+                rsa_results[k][0] += d;
+
+                d = atof(sstrsep(&p, sep));
+                rsa_results[k][1] += d;
+            }
+# ifndef OPENSSL_NO_DSA
+            else if (strncmp(buf, "+F3:", 4) == 0) {
+                int k;
+                double d;
+
+                p = buf + 4;
+                k = atoi(sstrsep(&p, sep));
+                sstrsep(&p, sep);
+
+                d = atof(sstrsep(&p, sep));
+                dsa_results[k][0] += d;
+
+                d = atof(sstrsep(&p, sep));
+                dsa_results[k][1] += d;
+            }
+# endif
+# ifndef OPENSSL_NO_EC
+            else if (strncmp(buf, "+F4:", 4) == 0) {
+                int k;
+                double d;
+
+                p = buf + 4;
+                k = atoi(sstrsep(&p, sep));
+                sstrsep(&p, sep);
+
+                d = atof(sstrsep(&p, sep));
+                ecdsa_results[k][0] += d;
+
+                d = atof(sstrsep(&p, sep));
+                ecdsa_results[k][1] += d;
+            } else if (strncmp(buf, "+F5:", 4) == 0) {
+                int k;
+                double d;
+
+                p = buf + 4;
+                k = atoi(sstrsep(&p, sep));
+                sstrsep(&p, sep);
+
+                d = atof(sstrsep(&p, sep));
+                ecdh_results[k][0] += d;
+            } else if (strncmp(buf, "+F6:", 4) == 0) {
+                int k;
+                double d;
+
+                p = buf + 4;
+                k = atoi(sstrsep(&p, sep));
+                sstrsep(&p, sep);
+
+                d = atof(sstrsep(&p, sep));
+                eddsa_results[k][0] += d;
+
+                d = atof(sstrsep(&p, sep));
+                eddsa_results[k][1] += d;
+            }
+# endif
+
+            else if (strncmp(buf, "+H:", 3) == 0) {
+                ;
+            } else
+                BIO_printf(bio_err, "Unknown type '%s' from child %d\n", buf,
+                           n);
+        }
+
+        fclose(f);
+    }
+    free(fds);
+    return 1;
+}
+#endif
+
+static void multiblock_speed(const EVP_CIPHER *evp_cipher, int lengths_single,
+                             const openssl_speed_sec_t *seconds)
+{
+    static const int mblengths_list[] =
+        { 8 * 1024, 2 * 8 * 1024, 4 * 8 * 1024, 8 * 8 * 1024, 8 * 16 * 1024 };
+    const int *mblengths = mblengths_list;
+    int j, count, keylen, num = OSSL_NELEM(mblengths_list);
+    const char *alg_name;
+    unsigned char *inp, *out, *key, no_key[32], no_iv[16];
+    EVP_CIPHER_CTX *ctx;
+    double d = 0.0;
+
+    if (lengths_single) {
+        mblengths = &lengths_single;
+        num = 1;
+    }
+
+    inp = app_malloc(mblengths[num - 1], "multiblock input buffer");
+    out = app_malloc(mblengths[num - 1] + 1024, "multiblock output buffer");
+    ctx = EVP_CIPHER_CTX_new();
+    EVP_EncryptInit_ex(ctx, evp_cipher, NULL, NULL, no_iv);
+
+    keylen = EVP_CIPHER_CTX_key_length(ctx);
+    key = app_malloc(keylen, "evp_cipher key");
+    EVP_CIPHER_CTX_rand_key(ctx, key);
+    EVP_EncryptInit_ex(ctx, NULL, NULL, key, NULL);
+    OPENSSL_clear_free(key, keylen);
+
+    EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_SET_MAC_KEY, sizeof(no_key), no_key);
+    alg_name = OBJ_nid2ln(EVP_CIPHER_nid(evp_cipher));
+
+    for (j = 0; j < num; j++) {
+        print_message(alg_name, 0, mblengths[j], seconds->sym);
+        Time_F(START);
+        for (count = 0, run = 1; run && count < 0x7fffffff; count++) {
+            unsigned char aad[EVP_AEAD_TLS1_AAD_LEN];
+            EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM mb_param;
+            size_t len = mblengths[j];
+            int packlen;
+
+            memset(aad, 0, 8);  /* avoid uninitialized values */
+            aad[8] = 23;        /* SSL3_RT_APPLICATION_DATA */
+            aad[9] = 3;         /* version */
+            aad[10] = 2;
+            aad[11] = 0;        /* length */
+            aad[12] = 0;
+            mb_param.out = NULL;
+            mb_param.inp = aad;
+            mb_param.len = len;
+            mb_param.interleave = 8;
+
+            packlen = EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_TLS1_1_MULTIBLOCK_AAD,
+                                          sizeof(mb_param), &mb_param);
+
+            if (packlen > 0) {
+                mb_param.out = out;
+                mb_param.inp = inp;
+                mb_param.len = len;
+                EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_TLS1_1_MULTIBLOCK_ENCRYPT,
+                                    sizeof(mb_param), &mb_param);
+            } else {
+                int pad;
+
+                RAND_bytes(out, 16);
+                len += 16;
+                aad[11] = (unsigned char)(len >> 8);
+                aad[12] = (unsigned char)(len);
+                pad = EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_TLS1_AAD,
+                                          EVP_AEAD_TLS1_AAD_LEN, aad);
+                EVP_Cipher(ctx, out, inp, len + pad);
+            }
+        }
+        d = Time_F(STOP);
+        BIO_printf(bio_err, mr ? "+R:%d:%s:%f\n"
+                   : "%d %s's in %.2fs\n", count, "evp", d);
+        results[D_EVP][j] = ((double)count) / d * mblengths[j];
+    }
+
+    if (mr) {
+        fprintf(stdout, "+H");
+        for (j = 0; j < num; j++)
+            fprintf(stdout, ":%d", mblengths[j]);
+        fprintf(stdout, "\n");
+        fprintf(stdout, "+F:%d:%s", D_EVP, alg_name);
+        for (j = 0; j < num; j++)
+            fprintf(stdout, ":%.2f", results[D_EVP][j]);
+        fprintf(stdout, "\n");
+    } else {
+        fprintf(stdout,
+                "The 'numbers' are in 1000s of bytes per second processed.\n");
+        fprintf(stdout, "type                    ");
+        for (j = 0; j < num; j++)
+            fprintf(stdout, "%7d bytes", mblengths[j]);
+        fprintf(stdout, "\n");
+        fprintf(stdout, "%-24s", alg_name);
+
+        for (j = 0; j < num; j++) {
+            if (results[D_EVP][j] > 10000)
+                fprintf(stdout, " %11.2fk", results[D_EVP][j] / 1e3);
+            else
+                fprintf(stdout, " %11.2f ", results[D_EVP][j]);
+        }
+        fprintf(stdout, "\n");
+    }
+
+    OPENSSL_free(inp);
+    OPENSSL_free(out);
+    EVP_CIPHER_CTX_free(ctx);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/spkac.c b/trunk/3rdparty/openssl-1.1-fit/apps/spkac.c
new file mode 100644
index 000000000..f384af6eb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/spkac.c
@@ -0,0 +1,202 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <time.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/bio.h>
+#include <openssl/conf.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/pem.h>
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_NOOUT, OPT_PUBKEY, OPT_VERIFY, OPT_IN, OPT_OUT,
+    OPT_ENGINE, OPT_KEY, OPT_CHALLENGE, OPT_PASSIN, OPT_SPKAC,
+    OPT_SPKSECT, OPT_KEYFORM
+} OPTION_CHOICE;
+
+const OPTIONS spkac_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"in", OPT_IN, '<', "Input file"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"key", OPT_KEY, '<', "Create SPKAC using private key"},
+    {"keyform", OPT_KEYFORM, 'f', "Private key file format - default PEM (PEM, DER, or ENGINE)"},
+    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
+    {"challenge", OPT_CHALLENGE, 's', "Challenge string"},
+    {"spkac", OPT_SPKAC, 's', "Alternative SPKAC name"},
+    {"noout", OPT_NOOUT, '-', "Don't print SPKAC"},
+    {"pubkey", OPT_PUBKEY, '-', "Output public key"},
+    {"verify", OPT_VERIFY, '-', "Verify SPKAC signature"},
+    {"spksect", OPT_SPKSECT, 's',
+     "Specify the name of an SPKAC-dedicated section of configuration"},
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+#endif
+    {NULL}
+};
+
+int spkac_main(int argc, char **argv)
+{
+    BIO *out = NULL;
+    CONF *conf = NULL;
+    ENGINE *e = NULL;
+    EVP_PKEY *pkey = NULL;
+    NETSCAPE_SPKI *spki = NULL;
+    char *challenge = NULL, *keyfile = NULL;
+    char *infile = NULL, *outfile = NULL, *passinarg = NULL, *passin = NULL;
+    char *spkstr = NULL, *prog;
+    const char *spkac = "SPKAC", *spksect = "default";
+    int i, ret = 1, verify = 0, noout = 0, pubkey = 0;
+    int keyformat = FORMAT_PEM;
+    OPTION_CHOICE o;
+
+    prog = opt_init(argc, argv, spkac_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(spkac_options);
+            ret = 0;
+            goto end;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_NOOUT:
+            noout = 1;
+            break;
+        case OPT_PUBKEY:
+            pubkey = 1;
+            break;
+        case OPT_VERIFY:
+            verify = 1;
+            break;
+        case OPT_PASSIN:
+            passinarg = opt_arg();
+            break;
+        case OPT_KEY:
+            keyfile = opt_arg();
+            break;
+        case OPT_KEYFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_ANY, &keyformat))
+                goto opthelp;
+            break;
+        case OPT_CHALLENGE:
+            challenge = opt_arg();
+            break;
+        case OPT_SPKAC:
+            spkac = opt_arg();
+            break;
+        case OPT_SPKSECT:
+            spksect = opt_arg();
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    if (argc != 0)
+        goto opthelp;
+
+    if (!app_passwd(passinarg, NULL, &passin, NULL)) {
+        BIO_printf(bio_err, "Error getting password\n");
+        goto end;
+    }
+
+    if (keyfile != NULL) {
+        pkey = load_key(strcmp(keyfile, "-") ? keyfile : NULL,
+                        keyformat, 1, passin, e, "private key");
+        if (pkey == NULL)
+            goto end;
+        spki = NETSCAPE_SPKI_new();
+        if (spki == NULL)
+            goto end;
+        if (challenge != NULL)
+            ASN1_STRING_set(spki->spkac->challenge,
+                            challenge, (int)strlen(challenge));
+        NETSCAPE_SPKI_set_pubkey(spki, pkey);
+        NETSCAPE_SPKI_sign(spki, pkey, EVP_md5());
+        spkstr = NETSCAPE_SPKI_b64_encode(spki);
+        if (spkstr == NULL)
+            goto end;
+
+        out = bio_open_default(outfile, 'w', FORMAT_TEXT);
+        if (out == NULL) {
+            OPENSSL_free(spkstr);
+            goto end;
+        }
+        BIO_printf(out, "SPKAC=%s\n", spkstr);
+        OPENSSL_free(spkstr);
+        ret = 0;
+        goto end;
+    }
+
+    if ((conf = app_load_config(infile)) == NULL)
+        goto end;
+
+    spkstr = NCONF_get_string(conf, spksect, spkac);
+
+    if (spkstr == NULL) {
+        BIO_printf(bio_err, "Can't find SPKAC called \"%s\"\n", spkac);
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    spki = NETSCAPE_SPKI_b64_decode(spkstr, -1);
+
+    if (spki == NULL) {
+        BIO_printf(bio_err, "Error loading SPKAC\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    out = bio_open_default(outfile, 'w', FORMAT_TEXT);
+    if (out == NULL)
+        goto end;
+
+    if (!noout)
+        NETSCAPE_SPKI_print(out, spki);
+    pkey = NETSCAPE_SPKI_get_pubkey(spki);
+    if (verify) {
+        i = NETSCAPE_SPKI_verify(spki, pkey);
+        if (i > 0) {
+            BIO_printf(bio_err, "Signature OK\n");
+        } else {
+            BIO_printf(bio_err, "Signature Failure\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+    if (pubkey)
+        PEM_write_bio_PUBKEY(out, pkey);
+
+    ret = 0;
+
+ end:
+    NCONF_free(conf);
+    NETSCAPE_SPKI_free(spki);
+    BIO_free_all(out);
+    EVP_PKEY_free(pkey);
+    release_engine(e);
+    OPENSSL_free(passin);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/srp.c b/trunk/3rdparty/openssl-1.1-fit/apps/srp.c
new file mode 100644
index 000000000..689574a48
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/srp.c
@@ -0,0 +1,613 @@
+/*
+ * Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2004, EdelKey Project. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Christophe Renou and Peter Sylvester,
+ * for the EdelKey project.
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_SRP
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <stdio.h>
+# include <stdlib.h>
+# include <string.h>
+# include <openssl/conf.h>
+# include <openssl/bio.h>
+# include <openssl/err.h>
+# include <openssl/txt_db.h>
+# include <openssl/buffer.h>
+# include <openssl/srp.h>
+# include "apps.h"
+# include "progs.h"
+
+# define BASE_SECTION    "srp"
+# define CONFIG_FILE "openssl.cnf"
+
+
+# define ENV_DATABASE            "srpvfile"
+# define ENV_DEFAULT_SRP         "default_srp"
+
+static int get_index(CA_DB *db, char *id, char type)
+{
+    char **pp;
+    int i;
+    if (id == NULL)
+        return -1;
+    if (type == DB_SRP_INDEX) {
+        for (i = 0; i < sk_OPENSSL_PSTRING_num(db->db->data); i++) {
+            pp = sk_OPENSSL_PSTRING_value(db->db->data, i);
+            if (pp[DB_srptype][0] == DB_SRP_INDEX
+                && strcmp(id, pp[DB_srpid]) == 0)
+                return i;
+        }
+    } else {
+        for (i = 0; i < sk_OPENSSL_PSTRING_num(db->db->data); i++) {
+            pp = sk_OPENSSL_PSTRING_value(db->db->data, i);
+
+            if (pp[DB_srptype][0] != DB_SRP_INDEX
+                && strcmp(id, pp[DB_srpid]) == 0)
+                return i;
+        }
+    }
+
+    return -1;
+}
+
+static void print_entry(CA_DB *db, int indx, int verbose, char *s)
+{
+    if (indx >= 0 && verbose) {
+        int j;
+        char **pp = sk_OPENSSL_PSTRING_value(db->db->data, indx);
+        BIO_printf(bio_err, "%s \"%s\"\n", s, pp[DB_srpid]);
+        for (j = 0; j < DB_NUMBER; j++) {
+            BIO_printf(bio_err, "  %d = \"%s\"\n", j, pp[j]);
+        }
+    }
+}
+
+static void print_index(CA_DB *db, int indexindex, int verbose)
+{
+    print_entry(db, indexindex, verbose, "g N entry");
+}
+
+static void print_user(CA_DB *db, int userindex, int verbose)
+{
+    if (verbose > 0) {
+        char **pp = sk_OPENSSL_PSTRING_value(db->db->data, userindex);
+
+        if (pp[DB_srptype][0] != 'I') {
+            print_entry(db, userindex, verbose, "User entry");
+            print_entry(db, get_index(db, pp[DB_srpgN], 'I'), verbose,
+                        "g N entry");
+        }
+
+    }
+}
+
+static int update_index(CA_DB *db, char **row)
+{
+    char **irow;
+    int i;
+
+    irow = app_malloc(sizeof(*irow) * (DB_NUMBER + 1), "row pointers");
+    for (i = 0; i < DB_NUMBER; i++)
+        irow[i] = row[i];
+    irow[DB_NUMBER] = NULL;
+
+    if (!TXT_DB_insert(db->db, irow)) {
+        BIO_printf(bio_err, "failed to update srpvfile\n");
+        BIO_printf(bio_err, "TXT_DB error number %ld\n", db->db->error);
+        OPENSSL_free(irow);
+        return 0;
+    }
+    return 1;
+}
+
+static char *lookup_conf(const CONF *conf, const char *section, const char *tag)
+{
+    char *entry = NCONF_get_string(conf, section, tag);
+    if (entry == NULL)
+        BIO_printf(bio_err, "variable lookup failed for %s::%s\n", section, tag);
+    return entry;
+}
+
+static char *srp_verify_user(const char *user, const char *srp_verifier,
+                             char *srp_usersalt, const char *g, const char *N,
+                             const char *passin, int verbose)
+{
+    char password[1025];
+    PW_CB_DATA cb_tmp;
+    char *verifier = NULL;
+    char *gNid = NULL;
+    int len;
+
+    cb_tmp.prompt_info = user;
+    cb_tmp.password = passin;
+
+    len = password_callback(password, sizeof(password)-1, 0, &cb_tmp);
+    if (len > 0) {
+        password[len] = 0;
+        if (verbose)
+            BIO_printf(bio_err,
+                       "Validating\n   user=\"%s\"\n srp_verifier=\"%s\"\n srp_usersalt=\"%s\"\n g=\"%s\"\n N=\"%s\"\n",
+                       user, srp_verifier, srp_usersalt, g, N);
+        if (verbose > 1)
+            BIO_printf(bio_err, "Pass %s\n", password);
+
+        OPENSSL_assert(srp_usersalt != NULL);
+        if ((gNid = SRP_create_verifier(user, password, &srp_usersalt,
+                                        &verifier, N, g)) == NULL) {
+            BIO_printf(bio_err, "Internal error validating SRP verifier\n");
+        } else {
+            if (strcmp(verifier, srp_verifier))
+                gNid = NULL;
+            OPENSSL_free(verifier);
+        }
+        OPENSSL_cleanse(password, len);
+    }
+    return gNid;
+}
+
+static char *srp_create_user(char *user, char **srp_verifier,
+                             char **srp_usersalt, char *g, char *N,
+                             char *passout, int verbose)
+{
+    char password[1025];
+    PW_CB_DATA cb_tmp;
+    char *gNid = NULL;
+    char *salt = NULL;
+    int len;
+    cb_tmp.prompt_info = user;
+    cb_tmp.password = passout;
+
+    len = password_callback(password, sizeof(password)-1, 1, &cb_tmp);
+    if (len > 0) {
+        password[len] = 0;
+        if (verbose)
+            BIO_printf(bio_err, "Creating\n user=\"%s\"\n g=\"%s\"\n N=\"%s\"\n",
+                       user, g, N);
+        if ((gNid = SRP_create_verifier(user, password, &salt,
+                                        srp_verifier, N, g)) == NULL) {
+            BIO_printf(bio_err, "Internal error creating SRP verifier\n");
+        } else {
+            *srp_usersalt = salt;
+        }
+        OPENSSL_cleanse(password, len);
+        if (verbose > 1)
+            BIO_printf(bio_err, "gNid=%s salt =\"%s\"\n verifier =\"%s\"\n",
+                       gNid, salt, *srp_verifier);
+
+    }
+    return gNid;
+}
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_VERBOSE, OPT_CONFIG, OPT_NAME, OPT_SRPVFILE, OPT_ADD,
+    OPT_DELETE, OPT_MODIFY, OPT_LIST, OPT_GN, OPT_USERINFO,
+    OPT_PASSIN, OPT_PASSOUT, OPT_ENGINE, OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS srp_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"verbose", OPT_VERBOSE, '-', "Talk a lot while doing things"},
+    {"config", OPT_CONFIG, '<', "A config file"},
+    {"name", OPT_NAME, 's', "The particular srp definition to use"},
+    {"srpvfile", OPT_SRPVFILE, '<', "The srp verifier file name"},
+    {"add", OPT_ADD, '-', "Add a user and srp verifier"},
+    {"modify", OPT_MODIFY, '-',
+     "Modify the srp verifier of an existing user"},
+    {"delete", OPT_DELETE, '-', "Delete user from verifier file"},
+    {"list", OPT_LIST, '-', "List users"},
+    {"gn", OPT_GN, 's', "Set g and N values to be used for new verifier"},
+    {"userinfo", OPT_USERINFO, 's', "Additional info to be set for user"},
+    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
+    {"passout", OPT_PASSOUT, 's', "Output file pass phrase source"},
+    OPT_R_OPTIONS,
+# ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+# endif
+    {NULL}
+};
+
+int srp_main(int argc, char **argv)
+{
+    ENGINE *e = NULL;
+    CA_DB *db = NULL;
+    CONF *conf = NULL;
+    int gNindex = -1, maxgN = -1, ret = 1, errors = 0, verbose = 0, i;
+    int doupdatedb = 0, mode = OPT_ERR;
+    char *user = NULL, *passinarg = NULL, *passoutarg = NULL;
+    char *passin = NULL, *passout = NULL, *gN = NULL, *userinfo = NULL;
+    char *section = NULL;
+    char **gNrow = NULL, *configfile = NULL;
+    char *srpvfile = NULL, **pp, *prog;
+    OPTION_CHOICE o;
+
+    prog = opt_init(argc, argv, srp_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(srp_options);
+            ret = 0;
+            goto end;
+        case OPT_VERBOSE:
+            verbose++;
+            break;
+        case OPT_CONFIG:
+            configfile = opt_arg();
+            break;
+        case OPT_NAME:
+            section = opt_arg();
+            break;
+        case OPT_SRPVFILE:
+            srpvfile = opt_arg();
+            break;
+        case OPT_ADD:
+        case OPT_DELETE:
+        case OPT_MODIFY:
+        case OPT_LIST:
+            if (mode != OPT_ERR) {
+                BIO_printf(bio_err,
+                           "%s: Only one of -add/-delete/-modify/-list\n",
+                           prog);
+                goto opthelp;
+            }
+            mode = o;
+            break;
+        case OPT_GN:
+            gN = opt_arg();
+            break;
+        case OPT_USERINFO:
+            userinfo = opt_arg();
+            break;
+        case OPT_PASSIN:
+            passinarg = opt_arg();
+            break;
+        case OPT_PASSOUT:
+            passoutarg = opt_arg();
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+
+    if (srpvfile != NULL && configfile != NULL) {
+        BIO_printf(bio_err,
+                   "-srpvfile and -configfile cannot be specified together.\n");
+        goto end;
+    }
+    if (mode == OPT_ERR) {
+        BIO_printf(bio_err,
+                   "Exactly one of the options -add, -delete, -modify -list must be specified.\n");
+        goto opthelp;
+    }
+    if (mode == OPT_DELETE || mode == OPT_MODIFY || mode == OPT_ADD) {
+        if (argc == 0) {
+            BIO_printf(bio_err, "Need at least one user.\n");
+            goto opthelp;
+        }
+        user = *argv++;
+    }
+    if ((passinarg != NULL || passoutarg != NULL) && argc != 1) {
+        BIO_printf(bio_err,
+                   "-passin, -passout arguments only valid with one user.\n");
+        goto opthelp;
+    }
+
+    if (!app_passwd(passinarg, passoutarg, &passin, &passout)) {
+        BIO_printf(bio_err, "Error getting passwords\n");
+        goto end;
+    }
+
+    if (srpvfile == NULL) {
+        if (configfile == NULL)
+            configfile = default_config_file;
+
+        if (verbose)
+            BIO_printf(bio_err, "Using configuration from %s\n",
+                       configfile);
+        conf = app_load_config(configfile);
+        if (conf == NULL)
+            goto end;
+        if (configfile != default_config_file && !app_load_modules(conf))
+            goto end;
+
+        /* Lets get the config section we are using */
+        if (section == NULL) {
+            if (verbose)
+                BIO_printf(bio_err,
+                           "trying to read " ENV_DEFAULT_SRP
+                           " in " BASE_SECTION "\n");
+
+            section = lookup_conf(conf, BASE_SECTION, ENV_DEFAULT_SRP);
+            if (section == NULL)
+                goto end;
+        }
+
+        app_RAND_load_conf(conf, BASE_SECTION);
+
+        if (verbose)
+            BIO_printf(bio_err,
+                       "trying to read " ENV_DATABASE " in section \"%s\"\n",
+                       section);
+
+        srpvfile = lookup_conf(conf, section, ENV_DATABASE);
+        if (srpvfile == NULL)
+            goto end;
+    }
+
+    if (verbose)
+        BIO_printf(bio_err, "Trying to read SRP verifier file \"%s\"\n",
+                   srpvfile);
+
+    db = load_index(srpvfile, NULL);
+    if (db == NULL)
+        goto end;
+
+    /* Lets check some fields */
+    for (i = 0; i < sk_OPENSSL_PSTRING_num(db->db->data); i++) {
+        pp = sk_OPENSSL_PSTRING_value(db->db->data, i);
+
+        if (pp[DB_srptype][0] == DB_SRP_INDEX) {
+            maxgN = i;
+            if ((gNindex < 0) && (gN != NULL) && strcmp(gN, pp[DB_srpid]) == 0)
+                gNindex = i;
+
+            print_index(db, i, verbose > 1);
+        }
+    }
+
+    if (verbose)
+        BIO_printf(bio_err, "Database initialised\n");
+
+    if (gNindex >= 0) {
+        gNrow = sk_OPENSSL_PSTRING_value(db->db->data, gNindex);
+        print_entry(db, gNindex, verbose > 1, "Default g and N");
+    } else if (maxgN > 0 && !SRP_get_default_gN(gN)) {
+        BIO_printf(bio_err, "No g and N value for index \"%s\"\n", gN);
+        goto end;
+    } else {
+        if (verbose)
+            BIO_printf(bio_err, "Database has no g N information.\n");
+        gNrow = NULL;
+    }
+
+    if (verbose > 1)
+        BIO_printf(bio_err, "Starting user processing\n");
+
+    while (mode == OPT_LIST || user != NULL) {
+        int userindex = -1;
+
+        if (user != NULL && verbose > 1)
+            BIO_printf(bio_err, "Processing user \"%s\"\n", user);
+        if ((userindex = get_index(db, user, 'U')) >= 0)
+            print_user(db, userindex, (verbose > 0) || mode == OPT_LIST);
+
+        if (mode == OPT_LIST) {
+            if (user == NULL) {
+                BIO_printf(bio_err, "List all users\n");
+
+                for (i = 0; i < sk_OPENSSL_PSTRING_num(db->db->data); i++)
+                    print_user(db, i, 1);
+            } else if (userindex < 0) {
+                BIO_printf(bio_err,
+                           "user \"%s\" does not exist, ignored. t\n", user);
+                errors++;
+            }
+        } else if (mode == OPT_ADD) {
+            if (userindex >= 0) {
+                /* reactivation of a new user */
+                char **row =
+                    sk_OPENSSL_PSTRING_value(db->db->data, userindex);
+                BIO_printf(bio_err, "user \"%s\" reactivated.\n", user);
+                row[DB_srptype][0] = 'V';
+
+                doupdatedb = 1;
+            } else {
+                char *row[DB_NUMBER];
+                char *gNid;
+                row[DB_srpverifier] = NULL;
+                row[DB_srpsalt] = NULL;
+                row[DB_srpinfo] = NULL;
+                if (!
+                    (gNid =
+                     srp_create_user(user, &(row[DB_srpverifier]),
+                                     &(row[DB_srpsalt]),
+                                     gNrow ? gNrow[DB_srpsalt] : gN,
+                                     gNrow ? gNrow[DB_srpverifier] : NULL,
+                                     passout, verbose))) {
+                    BIO_printf(bio_err,
+                               "Cannot create srp verifier for user \"%s\", operation abandoned .\n",
+                               user);
+                    errors++;
+                    goto end;
+                }
+                row[DB_srpid] = OPENSSL_strdup(user);
+                row[DB_srptype] = OPENSSL_strdup("v");
+                row[DB_srpgN] = OPENSSL_strdup(gNid);
+
+                if ((row[DB_srpid] == NULL)
+                    || (row[DB_srpgN] == NULL)
+                    || (row[DB_srptype] == NULL)
+                    || (row[DB_srpverifier] == NULL)
+                    || (row[DB_srpsalt] == NULL)
+                    || (userinfo
+                        && ((row[DB_srpinfo] = OPENSSL_strdup(userinfo)) == NULL))
+                    || !update_index(db, row)) {
+                    OPENSSL_free(row[DB_srpid]);
+                    OPENSSL_free(row[DB_srpgN]);
+                    OPENSSL_free(row[DB_srpinfo]);
+                    OPENSSL_free(row[DB_srptype]);
+                    OPENSSL_free(row[DB_srpverifier]);
+                    OPENSSL_free(row[DB_srpsalt]);
+                    goto end;
+                }
+                doupdatedb = 1;
+            }
+        } else if (mode == OPT_MODIFY) {
+            if (userindex < 0) {
+                BIO_printf(bio_err,
+                           "user \"%s\" does not exist, operation ignored.\n",
+                           user);
+                errors++;
+            } else {
+
+                char **row =
+                    sk_OPENSSL_PSTRING_value(db->db->data, userindex);
+                char type = row[DB_srptype][0];
+                if (type == 'v') {
+                    BIO_printf(bio_err,
+                               "user \"%s\" already updated, operation ignored.\n",
+                               user);
+                    errors++;
+                } else {
+                    char *gNid;
+
+                    if (row[DB_srptype][0] == 'V') {
+                        int user_gN;
+                        char **irow = NULL;
+                        if (verbose)
+                            BIO_printf(bio_err,
+                                       "Verifying password for user \"%s\"\n",
+                                       user);
+                        if ((user_gN =
+                             get_index(db, row[DB_srpgN], DB_SRP_INDEX)) >= 0)
+                            irow =
+                                sk_OPENSSL_PSTRING_value(db->db->data,
+                                                         userindex);
+
+                        if (!srp_verify_user
+                            (user, row[DB_srpverifier], row[DB_srpsalt],
+                             irow ? irow[DB_srpsalt] : row[DB_srpgN],
+                             irow ? irow[DB_srpverifier] : NULL, passin,
+                             verbose)) {
+                            BIO_printf(bio_err,
+                                       "Invalid password for user \"%s\", operation abandoned.\n",
+                                       user);
+                            errors++;
+                            goto end;
+                        }
+                    }
+                    if (verbose)
+                        BIO_printf(bio_err, "Password for user \"%s\" ok.\n",
+                                   user);
+
+                    if (!
+                        (gNid =
+                         srp_create_user(user, &(row[DB_srpverifier]),
+                                         &(row[DB_srpsalt]),
+                                         gNrow ? gNrow[DB_srpsalt] : NULL,
+                                         gNrow ? gNrow[DB_srpverifier] : NULL,
+                                         passout, verbose))) {
+                        BIO_printf(bio_err,
+                                   "Cannot create srp verifier for user \"%s\", operation abandoned.\n",
+                                   user);
+                        errors++;
+                        goto end;
+                    }
+
+                    row[DB_srptype][0] = 'v';
+                    row[DB_srpgN] = OPENSSL_strdup(gNid);
+
+                    if (row[DB_srpid] == NULL
+                        || row[DB_srpgN] == NULL
+                        || row[DB_srptype] == NULL
+                        || row[DB_srpverifier] == NULL
+                        || row[DB_srpsalt] == NULL
+                        || (userinfo
+                            && ((row[DB_srpinfo] = OPENSSL_strdup(userinfo))
+                                == NULL)))
+                        goto end;
+
+                    doupdatedb = 1;
+                }
+            }
+        } else if (mode == OPT_DELETE) {
+            if (userindex < 0) {
+                BIO_printf(bio_err,
+                           "user \"%s\" does not exist, operation ignored. t\n",
+                           user);
+                errors++;
+            } else {
+                char **xpp = sk_OPENSSL_PSTRING_value(db->db->data, userindex);
+
+                BIO_printf(bio_err, "user \"%s\" revoked. t\n", user);
+                xpp[DB_srptype][0] = 'R';
+                doupdatedb = 1;
+            }
+        }
+        user = *argv++;
+        if (user == NULL) {
+            /* no more processing in any mode if no users left */
+            break;
+        }
+    }
+
+    if (verbose)
+        BIO_printf(bio_err, "User procession done.\n");
+
+    if (doupdatedb) {
+        /* Lets check some fields */
+        for (i = 0; i < sk_OPENSSL_PSTRING_num(db->db->data); i++) {
+            pp = sk_OPENSSL_PSTRING_value(db->db->data, i);
+
+            if (pp[DB_srptype][0] == 'v') {
+                pp[DB_srptype][0] = 'V';
+                print_user(db, i, verbose);
+            }
+        }
+
+        if (verbose)
+            BIO_printf(bio_err, "Trying to update srpvfile.\n");
+        if (!save_index(srpvfile, "new", db))
+            goto end;
+
+        if (verbose)
+            BIO_printf(bio_err, "Temporary srpvfile created.\n");
+        if (!rotate_index(srpvfile, "new", "old"))
+            goto end;
+
+        if (verbose)
+            BIO_printf(bio_err, "srpvfile updated.\n");
+    }
+
+    ret = (errors != 0);
+ end:
+    if (errors != 0)
+        if (verbose)
+            BIO_printf(bio_err, "User errors %d.\n", errors);
+
+    if (verbose)
+        BIO_printf(bio_err, "SRP terminating with code %d.\n", ret);
+
+    OPENSSL_free(passin);
+    OPENSSL_free(passout);
+    if (ret)
+        ERR_print_errors(bio_err);
+    NCONF_free(conf);
+    free_index(db);
+    release_engine(e);
+    return ret;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/storeutl.c b/trunk/3rdparty/openssl-1.1-fit/apps/storeutl.c
new file mode 100644
index 000000000..50007f6e8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/storeutl.c
@@ -0,0 +1,473 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+
+#include "apps.h"
+#include "progs.h"
+#include <openssl/err.h>
+#include <openssl/pem.h>
+#include <openssl/store.h>
+#include <openssl/x509v3.h>      /* s2i_ASN1_INTEGER */
+
+static int process(const char *uri, const UI_METHOD *uimeth, PW_CB_DATA *uidata,
+                   int expected, int criterion, OSSL_STORE_SEARCH *search,
+                   int text, int noout, int recursive, int indent, BIO *out,
+                   const char *prog);
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP, OPT_ENGINE, OPT_OUT, OPT_PASSIN,
+    OPT_NOOUT, OPT_TEXT, OPT_RECURSIVE,
+    OPT_SEARCHFOR_CERTS, OPT_SEARCHFOR_KEYS, OPT_SEARCHFOR_CRLS,
+    OPT_CRITERION_SUBJECT, OPT_CRITERION_ISSUER, OPT_CRITERION_SERIAL,
+    OPT_CRITERION_FINGERPRINT, OPT_CRITERION_ALIAS,
+    OPT_MD
+} OPTION_CHOICE;
+
+const OPTIONS storeutl_options[] = {
+    {OPT_HELP_STR, 1, '-', "Usage: %s [options] uri\nValid options are:\n"},
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"out", OPT_OUT, '>', "Output file - default stdout"},
+    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
+    {"text", OPT_TEXT, '-', "Print a text form of the objects"},
+    {"noout", OPT_NOOUT, '-', "No PEM output, just status"},
+    {"certs", OPT_SEARCHFOR_CERTS, '-', "Search for certificates only"},
+    {"keys", OPT_SEARCHFOR_KEYS, '-', "Search for keys only"},
+    {"crls", OPT_SEARCHFOR_CRLS, '-', "Search for CRLs only"},
+    {"subject", OPT_CRITERION_SUBJECT, 's', "Search by subject"},
+    {"issuer", OPT_CRITERION_ISSUER, 's', "Search by issuer and serial, issuer name"},
+    {"serial", OPT_CRITERION_SERIAL, 's', "Search by issuer and serial, serial number"},
+    {"fingerprint", OPT_CRITERION_FINGERPRINT, 's', "Search by public key fingerprint, given in hex"},
+    {"alias", OPT_CRITERION_ALIAS, 's', "Search by alias"},
+    {"", OPT_MD, '-', "Any supported digest"},
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+#endif
+    {"r", OPT_RECURSIVE, '-', "Recurse through names"},
+    {NULL}
+};
+
+int storeutl_main(int argc, char *argv[])
+{
+    int ret = 1, noout = 0, text = 0, recursive = 0;
+    char *outfile = NULL, *passin = NULL, *passinarg = NULL;
+    BIO *out = NULL;
+    ENGINE *e = NULL;
+    OPTION_CHOICE o;
+    char *prog = opt_init(argc, argv, storeutl_options);
+    PW_CB_DATA pw_cb_data;
+    int expected = 0;
+    int criterion = 0;
+    X509_NAME *subject = NULL, *issuer = NULL;
+    ASN1_INTEGER *serial = NULL;
+    unsigned char *fingerprint = NULL;
+    size_t fingerprintlen = 0;
+    char *alias = NULL;
+    OSSL_STORE_SEARCH *search = NULL;
+    const EVP_MD *digest = NULL;
+
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(storeutl_options);
+            ret = 0;
+            goto end;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_PASSIN:
+            passinarg = opt_arg();
+            break;
+        case OPT_NOOUT:
+            noout = 1;
+            break;
+        case OPT_TEXT:
+            text = 1;
+            break;
+        case OPT_RECURSIVE:
+            recursive = 1;
+            break;
+        case OPT_SEARCHFOR_CERTS:
+        case OPT_SEARCHFOR_KEYS:
+        case OPT_SEARCHFOR_CRLS:
+            if (expected != 0) {
+                BIO_printf(bio_err, "%s: only one search type can be given.\n",
+                           prog);
+                goto end;
+            }
+            {
+                static const struct {
+                    enum OPTION_choice choice;
+                    int type;
+                } map[] = {
+                    {OPT_SEARCHFOR_CERTS, OSSL_STORE_INFO_CERT},
+                    {OPT_SEARCHFOR_KEYS, OSSL_STORE_INFO_PKEY},
+                    {OPT_SEARCHFOR_CRLS, OSSL_STORE_INFO_CRL},
+                };
+                size_t i;
+
+                for (i = 0; i < OSSL_NELEM(map); i++) {
+                    if (o == map[i].choice) {
+                        expected = map[i].type;
+                        break;
+                    }
+                }
+                /*
+                 * If expected wasn't set at this point, it means the map
+                 * isn't syncronised with the possible options leading here.
+                 */
+                OPENSSL_assert(expected != 0);
+            }
+            break;
+        case OPT_CRITERION_SUBJECT:
+            if (criterion != 0) {
+                BIO_printf(bio_err, "%s: criterion already given.\n",
+                           prog);
+                goto end;
+            }
+            criterion = OSSL_STORE_SEARCH_BY_NAME;
+            if (subject != NULL) {
+                BIO_printf(bio_err, "%s: subject already given.\n",
+                           prog);
+                goto end;
+            }
+            if ((subject = parse_name(opt_arg(), MBSTRING_UTF8, 1)) == NULL) {
+                BIO_printf(bio_err, "%s: can't parse subject argument.\n",
+                           prog);
+                goto end;
+            }
+            break;
+        case OPT_CRITERION_ISSUER:
+            if (criterion != 0
+                || (criterion == OSSL_STORE_SEARCH_BY_ISSUER_SERIAL
+                    && issuer != NULL)) {
+                BIO_printf(bio_err, "%s: criterion already given.\n",
+                           prog);
+                goto end;
+            }
+            criterion = OSSL_STORE_SEARCH_BY_ISSUER_SERIAL;
+            if (issuer != NULL) {
+                BIO_printf(bio_err, "%s: issuer already given.\n",
+                           prog);
+                goto end;
+            }
+            if ((issuer = parse_name(opt_arg(), MBSTRING_UTF8, 1)) == NULL) {
+                BIO_printf(bio_err, "%s: can't parse issuer argument.\n",
+                           prog);
+                goto end;
+            }
+            break;
+        case OPT_CRITERION_SERIAL:
+            if (criterion != 0
+                || (criterion == OSSL_STORE_SEARCH_BY_ISSUER_SERIAL
+                    && serial != NULL)) {
+                BIO_printf(bio_err, "%s: criterion already given.\n",
+                           prog);
+                goto end;
+            }
+            criterion = OSSL_STORE_SEARCH_BY_ISSUER_SERIAL;
+            if (serial != NULL) {
+                BIO_printf(bio_err, "%s: serial number already given.\n",
+                           prog);
+                goto end;
+            }
+            if ((serial = s2i_ASN1_INTEGER(NULL, opt_arg())) == NULL) {
+                BIO_printf(bio_err, "%s: can't parse serial number argument.\n",
+                           prog);
+                goto end;
+            }
+            break;
+        case OPT_CRITERION_FINGERPRINT:
+            if (criterion != 0
+                || (criterion == OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT
+                    && fingerprint != NULL)) {
+                BIO_printf(bio_err, "%s: criterion already given.\n",
+                           prog);
+                goto end;
+            }
+            criterion = OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT;
+            if (fingerprint != NULL) {
+                BIO_printf(bio_err, "%s: fingerprint already given.\n",
+                           prog);
+                goto end;
+            }
+            {
+                long tmplen = 0;
+
+                if ((fingerprint = OPENSSL_hexstr2buf(opt_arg(), &tmplen))
+                    == NULL) {
+                    BIO_printf(bio_err,
+                               "%s: can't parse fingerprint argument.\n",
+                               prog);
+                    goto end;
+                }
+                fingerprintlen = (size_t)tmplen;
+            }
+            break;
+        case OPT_CRITERION_ALIAS:
+            if (criterion != 0) {
+                BIO_printf(bio_err, "%s: criterion already given.\n",
+                           prog);
+                goto end;
+            }
+            criterion = OSSL_STORE_SEARCH_BY_ALIAS;
+            if (alias != NULL) {
+                BIO_printf(bio_err, "%s: alias already given.\n",
+                           prog);
+                goto end;
+            }
+            if ((alias = OPENSSL_strdup(opt_arg())) == NULL) {
+                BIO_printf(bio_err, "%s: can't parse alias argument.\n",
+                           prog);
+                goto end;
+            }
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_MD:
+            if (!opt_md(opt_unknown(), &digest))
+                goto opthelp;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+
+    if (argc == 0) {
+        BIO_printf(bio_err, "%s: No URI given, nothing to do...\n", prog);
+        goto opthelp;
+    }
+    if (argc > 1) {
+        BIO_printf(bio_err, "%s: Unknown extra parameters after URI\n", prog);
+        goto opthelp;
+    }
+
+    if (criterion != 0) {
+        switch (criterion) {
+        case OSSL_STORE_SEARCH_BY_NAME:
+            if ((search = OSSL_STORE_SEARCH_by_name(subject)) == NULL) {
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            break;
+        case OSSL_STORE_SEARCH_BY_ISSUER_SERIAL:
+            if (issuer == NULL || serial == NULL) {
+                BIO_printf(bio_err,
+                           "%s: both -issuer and -serial must be given.\n",
+                           prog);
+                goto end;
+            }
+            if ((search = OSSL_STORE_SEARCH_by_issuer_serial(issuer, serial))
+                == NULL) {
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            break;
+        case OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT:
+            if ((search = OSSL_STORE_SEARCH_by_key_fingerprint(digest,
+                                                               fingerprint,
+                                                               fingerprintlen))
+                == NULL) {
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            break;
+        case OSSL_STORE_SEARCH_BY_ALIAS:
+            if ((search = OSSL_STORE_SEARCH_by_alias(alias)) == NULL) {
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            break;
+        }
+    }
+
+    if (!app_passwd(passinarg, NULL, &passin, NULL)) {
+        BIO_printf(bio_err, "Error getting passwords\n");
+        goto end;
+    }
+    pw_cb_data.password = passin;
+    pw_cb_data.prompt_info = argv[0];
+
+    out = bio_open_default(outfile, 'w', FORMAT_TEXT);
+    if (out == NULL)
+        goto end;
+
+    ret = process(argv[0], get_ui_method(), &pw_cb_data,
+                  expected, criterion, search,
+                  text, noout, recursive, 0, out, prog);
+
+ end:
+    OPENSSL_free(fingerprint);
+    OPENSSL_free(alias);
+    ASN1_INTEGER_free(serial);
+    X509_NAME_free(subject);
+    X509_NAME_free(issuer);
+    OSSL_STORE_SEARCH_free(search);
+    BIO_free_all(out);
+    OPENSSL_free(passin);
+    release_engine(e);
+    return ret;
+}
+
+static int indent_printf(int indent, BIO *bio, const char *format, ...)
+{
+    va_list args;
+    int ret;
+
+    va_start(args, format);
+
+    ret = BIO_printf(bio, "%*s", indent, "") + BIO_vprintf(bio, format, args);
+
+    va_end(args);
+    return ret;
+}
+
+static int process(const char *uri, const UI_METHOD *uimeth, PW_CB_DATA *uidata,
+                   int expected, int criterion, OSSL_STORE_SEARCH *search,
+                   int text, int noout, int recursive, int indent, BIO *out,
+                   const char *prog)
+{
+    OSSL_STORE_CTX *store_ctx = NULL;
+    int ret = 1, items = 0;
+
+    if ((store_ctx = OSSL_STORE_open(uri, uimeth, uidata, NULL, NULL))
+        == NULL) {
+        BIO_printf(bio_err, "Couldn't open file or uri %s\n", uri);
+        ERR_print_errors(bio_err);
+        return ret;
+    }
+
+    if (expected != 0) {
+        if (!OSSL_STORE_expect(store_ctx, expected)) {
+            ERR_print_errors(bio_err);
+            goto end2;
+        }
+    }
+
+    if (criterion != 0) {
+        if (!OSSL_STORE_supports_search(store_ctx, criterion)) {
+            BIO_printf(bio_err,
+                       "%s: the store scheme doesn't support the given search criteria.\n",
+                       prog);
+            goto end2;
+        }
+
+        if (!OSSL_STORE_find(store_ctx, search)) {
+            ERR_print_errors(bio_err);
+            goto end2;
+        }
+    }
+
+    /* From here on, we count errors, and we'll return the count at the end */
+    ret = 0;
+
+    for (;;) {
+        OSSL_STORE_INFO *info = OSSL_STORE_load(store_ctx);
+        int type = info == NULL ? 0 : OSSL_STORE_INFO_get_type(info);
+        const char *infostr =
+            info == NULL ? NULL : OSSL_STORE_INFO_type_string(type);
+
+        if (info == NULL) {
+            if (OSSL_STORE_eof(store_ctx))
+                break;
+
+            if (OSSL_STORE_error(store_ctx)) {
+                if (recursive)
+                    ERR_clear_error();
+                else
+                    ERR_print_errors(bio_err);
+                ret++;
+                continue;
+            }
+
+            BIO_printf(bio_err,
+                       "ERROR: OSSL_STORE_load() returned NULL without "
+                       "eof or error indications\n");
+            BIO_printf(bio_err, "       This is an error in the loader\n");
+            ERR_print_errors(bio_err);
+            ret++;
+            break;
+        }
+
+        if (type == OSSL_STORE_INFO_NAME) {
+            const char *name = OSSL_STORE_INFO_get0_NAME(info);
+            const char *desc = OSSL_STORE_INFO_get0_NAME_description(info);
+            indent_printf(indent, bio_out, "%d: %s: %s\n", items, infostr,
+                          name);
+            if (desc != NULL)
+                indent_printf(indent, bio_out, "%s\n", desc);
+        } else {
+            indent_printf(indent, bio_out, "%d: %s\n", items, infostr);
+        }
+
+        /*
+         * Unfortunately, PEM_X509_INFO_write_bio() is sorely lacking in
+         * functionality, so we must figure out how exactly to write things
+         * ourselves...
+         */
+        switch (type) {
+        case OSSL_STORE_INFO_NAME:
+            if (recursive) {
+                const char *suburi = OSSL_STORE_INFO_get0_NAME(info);
+                ret += process(suburi, uimeth, uidata,
+                               expected, criterion, search,
+                               text, noout, recursive, indent + 2, out, prog);
+            }
+            break;
+        case OSSL_STORE_INFO_PARAMS:
+            if (text)
+                EVP_PKEY_print_params(out, OSSL_STORE_INFO_get0_PARAMS(info),
+                                      0, NULL);
+            if (!noout)
+                PEM_write_bio_Parameters(out,
+                                         OSSL_STORE_INFO_get0_PARAMS(info));
+            break;
+        case OSSL_STORE_INFO_PKEY:
+            if (text)
+                EVP_PKEY_print_private(out, OSSL_STORE_INFO_get0_PKEY(info),
+                                       0, NULL);
+            if (!noout)
+                PEM_write_bio_PrivateKey(out, OSSL_STORE_INFO_get0_PKEY(info),
+                                         NULL, NULL, 0, NULL, NULL);
+            break;
+        case OSSL_STORE_INFO_CERT:
+            if (text)
+                X509_print(out, OSSL_STORE_INFO_get0_CERT(info));
+            if (!noout)
+                PEM_write_bio_X509(out, OSSL_STORE_INFO_get0_CERT(info));
+            break;
+        case OSSL_STORE_INFO_CRL:
+            if (text)
+                X509_CRL_print(out, OSSL_STORE_INFO_get0_CRL(info));
+            if (!noout)
+                PEM_write_bio_X509_CRL(out, OSSL_STORE_INFO_get0_CRL(info));
+            break;
+        default:
+            BIO_printf(bio_err, "!!! Unknown code\n");
+            ret++;
+            break;
+        }
+        items++;
+        OSSL_STORE_INFO_free(info);
+    }
+    indent_printf(indent, out, "Total found: %d\n", items);
+
+ end2:
+    if (!OSSL_STORE_close(store_ctx)) {
+        ERR_print_errors(bio_err);
+        ret++;
+    }
+
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/testCA.pem b/trunk/3rdparty/openssl-1.1-fit/apps/testCA.pem
new file mode 100644
index 000000000..dcb710aa9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/testCA.pem
@@ -0,0 +1,8 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBBzCBsgIBADBNMQswCQYDVQQGEwJBVTETMBEGA1UECBMKUXVlZW5zbGFuZDEX
+MBUGA1UEChMOTWluY29tIFB0eSBMdGQxEDAOBgNVBAMTB1RFU1QgQ0EwXDANBgkq
+hkiG9w0BAQEFAANLADBIAkEAzW9brgA8efT2ODB+NrsflJZj3KKqKsm4OrXTRqfL
+VETj1ws/zCXl42XJAxdWQMCP0liKfc9Ut4xi1qCVI7N07wIDAQABoAAwDQYJKoZI
+hvcNAQEEBQADQQBjZZ42Det9Uw0AFwJy4ufUEy5Cv74pxBp5SZnljgHY+Az0Hs2S
+uNkIegr2ITX5azKi9nOkg9ZmsmGG13FIjiC/
+-----END CERTIFICATE REQUEST-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/testdsa.h b/trunk/3rdparty/openssl-1.1-fit/apps/testdsa.h
new file mode 100644
index 000000000..3c4b459db
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/testdsa.h
@@ -0,0 +1,260 @@
+/*
+ * Copyright 1998-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* used by speed.c */
+DSA *get_dsa(int);
+
+static unsigned char dsa512_priv[] = {
+    0x65, 0xe5, 0xc7, 0x38, 0x60, 0x24, 0xb5, 0x89, 0xd4, 0x9c, 0xeb, 0x4c,
+    0x9c, 0x1d, 0x7a, 0x22, 0xbd, 0xd1, 0xc2, 0xd2,
+};
+
+static unsigned char dsa512_pub[] = {
+    0x00, 0x95, 0xa7, 0x0d, 0xec, 0x93, 0x68, 0xba, 0x5f, 0xf7, 0x5f, 0x07,
+    0xf2, 0x3b, 0xad, 0x6b, 0x01, 0xdc, 0xbe, 0xec, 0xde, 0x04, 0x7a, 0x3a,
+    0x27, 0xb3, 0xec, 0x49, 0xfd, 0x08, 0x43, 0x3d, 0x7e, 0xa8, 0x2c, 0x5e,
+    0x7b, 0xbb, 0xfc, 0xf4, 0x6e, 0xeb, 0x6c, 0xb0, 0x6e, 0xf8, 0x02, 0x12,
+    0x8c, 0x38, 0x5d, 0x83, 0x56, 0x7d, 0xee, 0x53, 0x05, 0x3e, 0x24, 0x84,
+    0xbe, 0xba, 0x0a, 0x6b, 0xc8,
+};
+
+static unsigned char dsa512_p[] = {
+    0x9D, 0x1B, 0x69, 0x8E, 0x26, 0xDB, 0xF2, 0x2B, 0x11, 0x70, 0x19, 0x86,
+    0xF6, 0x19, 0xC8, 0xF8, 0x19, 0xF2, 0x18, 0x53, 0x94, 0x46, 0x06, 0xD0,
+    0x62, 0x50, 0x33, 0x4B, 0x02, 0x3C, 0x52, 0x30, 0x03, 0x8B, 0x3B, 0xF9,
+    0x5F, 0xD1, 0x24, 0x06, 0x4F, 0x7B, 0x4C, 0xBA, 0xAA, 0x40, 0x9B, 0xFD,
+    0x96, 0xE4, 0x37, 0x33, 0xBB, 0x2D, 0x5A, 0xD7, 0x5A, 0x11, 0x40, 0x66,
+    0xA2, 0x76, 0x7D, 0x31,
+};
+
+static unsigned char dsa512_q[] = {
+    0xFB, 0x53, 0xEF, 0x50, 0xB4, 0x40, 0x92, 0x31, 0x56, 0x86, 0x53, 0x7A,
+    0xE8, 0x8B, 0x22, 0x9A, 0x49, 0xFB, 0x71, 0x8F,
+};
+
+static unsigned char dsa512_g[] = {
+    0x83, 0x3E, 0x88, 0xE5, 0xC5, 0x89, 0x73, 0xCE, 0x3B, 0x6C, 0x01, 0x49,
+    0xBF, 0xB3, 0xC7, 0x9F, 0x0A, 0xEA, 0x44, 0x91, 0xE5, 0x30, 0xAA, 0xD9,
+    0xBE, 0x5B, 0x5F, 0xB7, 0x10, 0xD7, 0x89, 0xB7, 0x8E, 0x74, 0xFB, 0xCF,
+    0x29, 0x1E, 0xEB, 0xA8, 0x2C, 0x54, 0x51, 0xB8, 0x10, 0xDE, 0xA0, 0xCE,
+    0x2F, 0xCC, 0x24, 0x6B, 0x90, 0x77, 0xDE, 0xA2, 0x68, 0xA6, 0x52, 0x12,
+    0xA2, 0x03, 0x9D, 0x20,
+};
+
+static unsigned char dsa1024_priv[] = {
+    0x7d, 0x21, 0xda, 0xbb, 0x62, 0x15, 0x47, 0x36, 0x07, 0x67, 0x12, 0xe8,
+    0x8c, 0xaa, 0x1c, 0xcd, 0x38, 0x12, 0x61, 0x18,
+};
+
+static unsigned char dsa1024_pub[] = {
+    0x3c, 0x4e, 0x9c, 0x2a, 0x7f, 0x16, 0xc1, 0x25, 0xeb, 0xac, 0x78, 0x63,
+    0x90, 0x14, 0x8c, 0x8b, 0xf4, 0x68, 0x43, 0x3c, 0x2d, 0xee, 0x65, 0x50,
+    0x7d, 0x9c, 0x8f, 0x8c, 0x8a, 0x51, 0xd6, 0x11, 0x2b, 0x99, 0xaf, 0x1e,
+    0x90, 0x97, 0xb5, 0xd3, 0xa6, 0x20, 0x25, 0xd6, 0xfe, 0x43, 0x02, 0xd5,
+    0x91, 0x7d, 0xa7, 0x8c, 0xdb, 0xc9, 0x85, 0xa3, 0x36, 0x48, 0xf7, 0x68,
+    0xaa, 0x60, 0xb1, 0xf7, 0x05, 0x68, 0x3a, 0xa3, 0x3f, 0xd3, 0x19, 0x82,
+    0xd8, 0x82, 0x7a, 0x77, 0xfb, 0xef, 0xf4, 0x15, 0x0a, 0xeb, 0x06, 0x04,
+    0x7f, 0x53, 0x07, 0x0c, 0xbc, 0xcb, 0x2d, 0x83, 0xdb, 0x3e, 0xd1, 0x28,
+    0xa5, 0xa1, 0x31, 0xe0, 0x67, 0xfa, 0x50, 0xde, 0x9b, 0x07, 0x83, 0x7e,
+    0x2c, 0x0b, 0xc3, 0x13, 0x50, 0x61, 0xe5, 0xad, 0xbd, 0x36, 0xb8, 0x97,
+    0x4e, 0x40, 0x7d, 0xe8, 0x83, 0x0d, 0xbc, 0x4b
+};
+
+static unsigned char dsa1024_p[] = {
+    0xA7, 0x3F, 0x6E, 0x85, 0xBF, 0x41, 0x6A, 0x29, 0x7D, 0xF0, 0x9F, 0x47,
+    0x19, 0x30, 0x90, 0x9A, 0x09, 0x1D, 0xDA, 0x6A, 0x33, 0x1E, 0xC5, 0x3D,
+    0x86, 0x96, 0xB3, 0x15, 0xE0, 0x53, 0x2E, 0x8F, 0xE0, 0x59, 0x82, 0x73,
+    0x90, 0x3E, 0x75, 0x31, 0x99, 0x47, 0x7A, 0x52, 0xFB, 0x85, 0xE4, 0xD9,
+    0xA6, 0x7B, 0x38, 0x9B, 0x68, 0x8A, 0x84, 0x9B, 0x87, 0xC6, 0x1E, 0xB5,
+    0x7E, 0x86, 0x4B, 0x53, 0x5B, 0x59, 0xCF, 0x71, 0x65, 0x19, 0x88, 0x6E,
+    0xCE, 0x66, 0xAE, 0x6B, 0x88, 0x36, 0xFB, 0xEC, 0x28, 0xDC, 0xC2, 0xD7,
+    0xA5, 0xBB, 0xE5, 0x2C, 0x39, 0x26, 0x4B, 0xDA, 0x9A, 0x70, 0x18, 0x95,
+    0x37, 0x95, 0x10, 0x56, 0x23, 0xF6, 0x15, 0xED, 0xBA, 0x04, 0x5E, 0xDE,
+    0x39, 0x4F, 0xFD, 0xB7, 0x43, 0x1F, 0xB5, 0xA4, 0x65, 0x6F, 0xCD, 0x80,
+    0x11, 0xE4, 0x70, 0x95, 0x5B, 0x50, 0xCD, 0x49,
+};
+
+static unsigned char dsa1024_q[] = {
+    0xF7, 0x07, 0x31, 0xED, 0xFA, 0x6C, 0x06, 0x03, 0xD5, 0x85, 0x8A, 0x1C,
+    0xAC, 0x9C, 0x65, 0xE7, 0x50, 0x66, 0x65, 0x6F,
+};
+
+static unsigned char dsa1024_g[] = {
+    0x4D, 0xDF, 0x4C, 0x03, 0xA6, 0x91, 0x8A, 0xF5, 0x19, 0x6F, 0x50, 0x46,
+    0x25, 0x99, 0xE5, 0x68, 0x6F, 0x30, 0xE3, 0x69, 0xE1, 0xE5, 0xB3, 0x5D,
+    0x98, 0xBB, 0x28, 0x86, 0x48, 0xFC, 0xDE, 0x99, 0x04, 0x3F, 0x5F, 0x88,
+    0x0C, 0x9C, 0x73, 0x24, 0x0D, 0x20, 0x5D, 0xB9, 0x2A, 0x9A, 0x3F, 0x18,
+    0x96, 0x27, 0xE4, 0x62, 0x87, 0xC1, 0x7B, 0x74, 0x62, 0x53, 0xFC, 0x61,
+    0x27, 0xA8, 0x7A, 0x91, 0x09, 0x9D, 0xB6, 0xF1, 0x4D, 0x9C, 0x54, 0x0F,
+    0x58, 0x06, 0xEE, 0x49, 0x74, 0x07, 0xCE, 0x55, 0x7E, 0x23, 0xCE, 0x16,
+    0xF6, 0xCA, 0xDC, 0x5A, 0x61, 0x01, 0x7E, 0xC9, 0x71, 0xB5, 0x4D, 0xF6,
+    0xDC, 0x34, 0x29, 0x87, 0x68, 0xF6, 0x5E, 0x20, 0x93, 0xB3, 0xDB, 0xF5,
+    0xE4, 0x09, 0x6C, 0x41, 0x17, 0x95, 0x92, 0xEB, 0x01, 0xB5, 0x73, 0xA5,
+    0x6A, 0x7E, 0xD8, 0x32, 0xED, 0x0E, 0x02, 0xB8,
+};
+
+static unsigned char dsa2048_priv[] = {
+    0x32, 0x67, 0x92, 0xf6, 0xc4, 0xe2, 0xe2, 0xe8, 0xa0, 0x8b, 0x6b, 0x45,
+    0x0c, 0x8a, 0x76, 0xb0, 0xee, 0xcf, 0x91, 0xa7,
+};
+
+static unsigned char dsa2048_pub[] = {
+    0x17, 0x8f, 0xa8, 0x11, 0x84, 0x92, 0xec, 0x83, 0x47, 0xc7, 0x6a, 0xb0,
+    0x92, 0xaf, 0x5a, 0x20, 0x37, 0xa3, 0x64, 0x79, 0xd2, 0xd0, 0x3d, 0xcd,
+    0xe0, 0x61, 0x88, 0x88, 0x21, 0xcc, 0x74, 0x5d, 0xce, 0x4c, 0x51, 0x47,
+    0xf0, 0xc5, 0x5c, 0x4c, 0x82, 0x7a, 0xaf, 0x72, 0xad, 0xb9, 0xe0, 0x53,
+    0xf2, 0x78, 0xb7, 0xf0, 0xb5, 0x48, 0x7f, 0x8a, 0x3a, 0x18, 0xd1, 0x9f,
+    0x8b, 0x7d, 0xa5, 0x47, 0xb7, 0x95, 0xab, 0x98, 0xf8, 0x7b, 0x74, 0x50,
+    0x56, 0x8e, 0x57, 0xf0, 0xee, 0xf5, 0xb7, 0xba, 0xab, 0x85, 0x86, 0xf9,
+    0x2b, 0xef, 0x41, 0x56, 0xa0, 0xa4, 0x9f, 0xb7, 0x38, 0x00, 0x46, 0x0a,
+    0xa6, 0xf1, 0xfc, 0x1f, 0xd8, 0x4e, 0x85, 0x44, 0x92, 0x43, 0x21, 0x5d,
+    0x6e, 0xcc, 0xc2, 0xcb, 0x26, 0x31, 0x0d, 0x21, 0xc4, 0xbd, 0x8d, 0x24,
+    0xbc, 0xd9, 0x18, 0x19, 0xd7, 0xdc, 0xf1, 0xe7, 0x93, 0x50, 0x48, 0x03,
+    0x2c, 0xae, 0x2e, 0xe7, 0x49, 0x88, 0x5f, 0x93, 0x57, 0x27, 0x99, 0x36,
+    0xb4, 0x20, 0xab, 0xfc, 0xa7, 0x2b, 0xf2, 0xd9, 0x98, 0xd7, 0xd4, 0x34,
+    0x9d, 0x96, 0x50, 0x58, 0x9a, 0xea, 0x54, 0xf3, 0xee, 0xf5, 0x63, 0x14,
+    0xee, 0x85, 0x83, 0x74, 0x76, 0xe1, 0x52, 0x95, 0xc3, 0xf7, 0xeb, 0x04,
+    0x04, 0x7b, 0xa7, 0x28, 0x1b, 0xcc, 0xea, 0x4a, 0x4e, 0x84, 0xda, 0xd8,
+    0x9c, 0x79, 0xd8, 0x9b, 0x66, 0x89, 0x2f, 0xcf, 0xac, 0xd7, 0x79, 0xf9,
+    0xa9, 0xd8, 0x45, 0x13, 0x78, 0xb9, 0x00, 0x14, 0xc9, 0x7e, 0x22, 0x51,
+    0x86, 0x67, 0xb0, 0x9f, 0x26, 0x11, 0x23, 0xc8, 0x38, 0xd7, 0x70, 0x1d,
+    0x15, 0x8e, 0x4d, 0x4f, 0x95, 0x97, 0x40, 0xa1, 0xc2, 0x7e, 0x01, 0x18,
+    0x72, 0xf4, 0x10, 0xe6, 0x8d, 0x52, 0x16, 0x7f, 0xf2, 0xc9, 0xf8, 0x33,
+    0x8b, 0x33, 0xb7, 0xce,
+};
+
+static unsigned char dsa2048_p[] = {
+    0xA0, 0x25, 0xFA, 0xAD, 0xF4, 0x8E, 0xB9, 0xE5, 0x99, 0xF3, 0x5D, 0x6F,
+    0x4F, 0x83, 0x34, 0xE2, 0x7E, 0xCF, 0x6F, 0xBF, 0x30, 0xAF, 0x6F, 0x81,
+    0xEB, 0xF8, 0xC4, 0x13, 0xD9, 0xA0, 0x5D, 0x8B, 0x5C, 0x8E, 0xDC, 0xC2,
+    0x1D, 0x0B, 0x41, 0x32, 0xB0, 0x1F, 0xFE, 0xEF, 0x0C, 0xC2, 0xA2, 0x7E,
+    0x68, 0x5C, 0x28, 0x21, 0xE9, 0xF5, 0xB1, 0x58, 0x12, 0x63, 0x4C, 0x19,
+    0x4E, 0xFF, 0x02, 0x4B, 0x92, 0xED, 0xD2, 0x07, 0x11, 0x4D, 0x8C, 0x58,
+    0x16, 0x5C, 0x55, 0x8E, 0xAD, 0xA3, 0x67, 0x7D, 0xB9, 0x86, 0x6E, 0x0B,
+    0xE6, 0x54, 0x6F, 0x40, 0xAE, 0x0E, 0x67, 0x4C, 0xF9, 0x12, 0x5B, 0x3C,
+    0x08, 0x7A, 0xF7, 0xFC, 0x67, 0x86, 0x69, 0xE7, 0x0A, 0x94, 0x40, 0xBF,
+    0x8B, 0x76, 0xFE, 0x26, 0xD1, 0xF2, 0xA1, 0x1A, 0x84, 0xA1, 0x43, 0x56,
+    0x28, 0xBC, 0x9A, 0x5F, 0xD7, 0x3B, 0x69, 0x89, 0x8A, 0x36, 0x2C, 0x51,
+    0xDF, 0x12, 0x77, 0x2F, 0x57, 0x7B, 0xA0, 0xAA, 0xDD, 0x7F, 0xA1, 0x62,
+    0x3B, 0x40, 0x7B, 0x68, 0x1A, 0x8F, 0x0D, 0x38, 0xBB, 0x21, 0x5D, 0x18,
+    0xFC, 0x0F, 0x46, 0xF7, 0xA3, 0xB0, 0x1D, 0x23, 0xC3, 0xD2, 0xC7, 0x72,
+    0x51, 0x18, 0xDF, 0x46, 0x95, 0x79, 0xD9, 0xBD, 0xB5, 0x19, 0x02, 0x2C,
+    0x87, 0xDC, 0xE7, 0x57, 0x82, 0x7E, 0xF1, 0x8B, 0x06, 0x3D, 0x00, 0xA5,
+    0x7B, 0x6B, 0x26, 0x27, 0x91, 0x0F, 0x6A, 0x77, 0xE4, 0xD5, 0x04, 0xE4,
+    0x12, 0x2C, 0x42, 0xFF, 0xD2, 0x88, 0xBB, 0xD3, 0x92, 0xA0, 0xF9, 0xC8,
+    0x51, 0x64, 0x14, 0x5C, 0xD8, 0xF9, 0x6C, 0x47, 0x82, 0xB4, 0x1C, 0x7F,
+    0x09, 0xB8, 0xF0, 0x25, 0x83, 0x1D, 0x3F, 0x3F, 0x05, 0xB3, 0x21, 0x0A,
+    0x5D, 0xA7, 0xD8, 0x54, 0xC3, 0x65, 0x7D, 0xC3, 0xB0, 0x1D, 0xBF, 0xAE,
+    0xF8, 0x68, 0xCF, 0x9B,
+};
+
+static unsigned char dsa2048_q[] = {
+    0x97, 0xE7, 0x33, 0x4D, 0xD3, 0x94, 0x3E, 0x0B, 0xDB, 0x62, 0x74, 0xC6,
+    0xA1, 0x08, 0xDD, 0x19, 0xA3, 0x75, 0x17, 0x1B,
+};
+
+static unsigned char dsa2048_g[] = {
+    0x2C, 0x78, 0x16, 0x59, 0x34, 0x63, 0xF4, 0xF3, 0x92, 0xFC, 0xB5, 0xA5,
+    0x4F, 0x13, 0xDE, 0x2F, 0x1C, 0xA4, 0x3C, 0xAE, 0xAD, 0x38, 0x3F, 0x7E,
+    0x90, 0xBF, 0x96, 0xA6, 0xAE, 0x25, 0x90, 0x72, 0xF5, 0x8E, 0x80, 0x0C,
+    0x39, 0x1C, 0xD9, 0xEC, 0xBA, 0x90, 0x5B, 0x3A, 0xE8, 0x58, 0x6C, 0x9E,
+    0x30, 0x42, 0x37, 0x02, 0x31, 0x82, 0xBC, 0x6A, 0xDF, 0x6A, 0x09, 0x29,
+    0xE3, 0xC0, 0x46, 0xD1, 0xCB, 0x85, 0xEC, 0x0C, 0x30, 0x5E, 0xEA, 0xC8,
+    0x39, 0x8E, 0x22, 0x9F, 0x22, 0x10, 0xD2, 0x34, 0x61, 0x68, 0x37, 0x3D,
+    0x2E, 0x4A, 0x5B, 0x9A, 0xF5, 0xC1, 0x48, 0xC6, 0xF6, 0xDC, 0x63, 0x1A,
+    0xD3, 0x96, 0x64, 0xBA, 0x34, 0xC9, 0xD1, 0xA0, 0xD1, 0xAE, 0x6C, 0x2F,
+    0x48, 0x17, 0x93, 0x14, 0x43, 0xED, 0xF0, 0x21, 0x30, 0x19, 0xC3, 0x1B,
+    0x5F, 0xDE, 0xA3, 0xF0, 0x70, 0x78, 0x18, 0xE1, 0xA8, 0xE4, 0xEE, 0x2E,
+    0x00, 0xA5, 0xE4, 0xB3, 0x17, 0xC8, 0x0C, 0x7D, 0x6E, 0x42, 0xDC, 0xB7,
+    0x46, 0x00, 0x36, 0x4D, 0xD4, 0x46, 0xAA, 0x3D, 0x3C, 0x46, 0x89, 0x40,
+    0xBF, 0x1D, 0x84, 0x77, 0x0A, 0x75, 0xF3, 0x87, 0x1D, 0x08, 0x4C, 0xA6,
+    0xD1, 0xA9, 0x1C, 0x1E, 0x12, 0x1E, 0xE1, 0xC7, 0x30, 0x28, 0x76, 0xA5,
+    0x7F, 0x6C, 0x85, 0x96, 0x2B, 0x6F, 0xDB, 0x80, 0x66, 0x26, 0xAE, 0xF5,
+    0x93, 0xC7, 0x8E, 0xAE, 0x9A, 0xED, 0xE4, 0xCA, 0x04, 0xEA, 0x3B, 0x72,
+    0xEF, 0xDC, 0x87, 0xED, 0x0D, 0xA5, 0x4C, 0x4A, 0xDD, 0x71, 0x22, 0x64,
+    0x59, 0x69, 0x4E, 0x8E, 0xBF, 0x43, 0xDC, 0xAB, 0x8E, 0x66, 0xBB, 0x01,
+    0xB6, 0xF4, 0xE7, 0xFD, 0xD2, 0xAD, 0x9F, 0x36, 0xC1, 0xA0, 0x29, 0x99,
+    0xD1, 0x96, 0x70, 0x59, 0x06, 0x78, 0x35, 0xBD, 0x65, 0x55, 0x52, 0x9E,
+    0xF8, 0xB2, 0xE5, 0x38,
+};
+
+typedef struct testdsa_st {
+    unsigned char *priv;
+    unsigned char *pub;
+    unsigned char *p;
+    unsigned char *g;
+    unsigned char *q;
+    int priv_l;
+    int pub_l;
+    int p_l;
+    int g_l;
+    int q_l;
+} testdsa;
+
+#define set_dsa_ptr(st, bits) \
+    do { \
+        st.priv = dsa##bits##_priv; \
+        st.pub = dsa##bits##_pub; \
+        st.p = dsa##bits##_p; \
+        st.g = dsa##bits##_g; \
+        st.q = dsa##bits##_q; \
+        st.priv_l = sizeof(dsa##bits##_priv); \
+        st.pub_l = sizeof(dsa##bits##_pub); \
+        st.p_l = sizeof(dsa##bits##_p); \
+        st.g_l = sizeof(dsa##bits##_g); \
+        st.q_l = sizeof(dsa##bits##_q); \
+    } while (0)
+
+DSA *get_dsa(int dsa_bits)
+{
+    DSA *dsa;
+    BIGNUM *priv_key, *pub_key, *p, *q, *g;
+    testdsa dsa_t;
+
+    switch (dsa_bits) {
+    case 512:
+        set_dsa_ptr(dsa_t, 512);
+        break;
+    case 1024:
+        set_dsa_ptr(dsa_t, 1024);
+        break;
+    case 2048:
+        set_dsa_ptr(dsa_t, 2048);
+        break;
+    default:
+        return NULL;
+    }
+
+    if ((dsa = DSA_new()) == NULL)
+        return NULL;
+    priv_key = BN_bin2bn(dsa_t.priv, dsa_t.priv_l, NULL);
+    pub_key = BN_bin2bn(dsa_t.pub, dsa_t.pub_l, NULL);
+    p = BN_bin2bn(dsa_t.p, dsa_t.p_l, NULL);
+    q = BN_bin2bn(dsa_t.q, dsa_t.q_l, NULL);
+    g = BN_bin2bn(dsa_t.g, dsa_t.g_l, NULL);
+    if ((priv_key == NULL) || (pub_key == NULL) || (p == NULL) || (q == NULL)
+         || (g == NULL)) {
+        goto err;
+    }
+    if (!DSA_set0_pqg(dsa, p, q, g))
+        goto err;
+
+    if (!DSA_set0_key(dsa, pub_key, priv_key))
+        goto err;
+
+    return dsa;
+ err:
+    DSA_free(dsa);
+    BN_free(priv_key);
+    BN_free(pub_key);
+    BN_free(p);
+    BN_free(q);
+    BN_free(g);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/testrsa.h b/trunk/3rdparty/openssl-1.1-fit/apps/testrsa.h
new file mode 100644
index 000000000..1350ce54e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/testrsa.h
@@ -0,0 +1,1960 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+static unsigned char test512[] = {
+    0x30, 0x82, 0x01, 0x3a, 0x02, 0x01, 0x00, 0x02, 0x41, 0x00,
+    0xd6, 0x33, 0xb9, 0xc8, 0xfb, 0x4f, 0x3c, 0x7d, 0xc0, 0x01,
+    0x86, 0xd0, 0xe7, 0xa0, 0x55, 0xf2, 0x95, 0x93, 0xcc, 0x4f,
+    0xb7, 0x5b, 0x67, 0x5b, 0x94, 0x68, 0xc9, 0x34, 0x15, 0xde,
+    0xa5, 0x2e, 0x1c, 0x33, 0xc2, 0x6e, 0xfc, 0x34, 0x5e, 0x71,
+    0x13, 0xb7, 0xd6, 0xee, 0xd8, 0xa5, 0x65, 0x05, 0x72, 0x87,
+    0xa8, 0xb0, 0x77, 0xfe, 0x57, 0xf5, 0xfc, 0x5f, 0x55, 0x83,
+    0x87, 0xdd, 0x57, 0x49, 0x02, 0x03, 0x01, 0x00, 0x01, 0x02,
+    0x41, 0x00, 0xa7, 0xf7, 0x91, 0xc5, 0x0f, 0x84, 0x57, 0xdc,
+    0x07, 0xf7, 0x6a, 0x7f, 0x60, 0x52, 0xb3, 0x72, 0xf1, 0x66,
+    0x1f, 0x7d, 0x97, 0x3b, 0x9e, 0xb6, 0x0a, 0x8f, 0x8c, 0xcf,
+    0x42, 0x23, 0x00, 0x04, 0xd4, 0x28, 0x0e, 0x1c, 0x90, 0xc4,
+    0x11, 0x25, 0x25, 0xa5, 0x93, 0xa5, 0x2f, 0x70, 0x02, 0xdf,
+    0x81, 0x9c, 0x49, 0x03, 0xa0, 0xf8, 0x6d, 0x54, 0x2e, 0x26,
+    0xde, 0xaa, 0x85, 0x59, 0xa8, 0x31, 0x02, 0x21, 0x00, 0xeb,
+    0x47, 0xd7, 0x3b, 0xf6, 0xc3, 0xdd, 0x5a, 0x46, 0xc5, 0xb9,
+    0x2b, 0x9a, 0xa0, 0x09, 0x8f, 0xa6, 0xfb, 0xf3, 0x78, 0x7a,
+    0x33, 0x70, 0x9d, 0x0f, 0x42, 0x6b, 0x13, 0x68, 0x24, 0xd3,
+    0x15, 0x02, 0x21, 0x00, 0xe9, 0x10, 0xb0, 0xb3, 0x0d, 0xe2,
+    0x82, 0x68, 0x77, 0x8a, 0x6e, 0x7c, 0xda, 0xbc, 0x3e, 0x53,
+    0x83, 0xfb, 0xd6, 0x22, 0xe7, 0xb5, 0xae, 0x6e, 0x80, 0xda,
+    0x00, 0x55, 0x97, 0xc1, 0xd0, 0x65, 0x02, 0x20, 0x4c, 0xf8,
+    0x73, 0xb1, 0x6a, 0x49, 0x29, 0x61, 0x1f, 0x46, 0x10, 0x0d,
+    0xf3, 0xc7, 0xe7, 0x58, 0xd7, 0x88, 0x15, 0x5e, 0x94, 0x9b,
+    0xbf, 0x7b, 0xa2, 0x42, 0x58, 0x45, 0x41, 0x0c, 0xcb, 0x01,
+    0x02, 0x20, 0x12, 0x11, 0xba, 0x31, 0x57, 0x9d, 0x3d, 0x11,
+    0x0e, 0x5b, 0x8c, 0x2f, 0x5f, 0xe2, 0x02, 0x4f, 0x05, 0x47,
+    0x8c, 0x15, 0x8e, 0xb3, 0x56, 0x3f, 0xb8, 0xfb, 0xad, 0xd4,
+    0xf4, 0xfc, 0x10, 0xc5, 0x02, 0x20, 0x18, 0xa1, 0x29, 0x99,
+    0x5b, 0xd9, 0xc8, 0xd4, 0xfc, 0x49, 0x7a, 0x2a, 0x21, 0x2c,
+    0x49, 0xe4, 0x4f, 0xeb, 0xef, 0x51, 0xf1, 0xab, 0x6d, 0xfb,
+    0x4b, 0x14, 0xe9, 0x4b, 0x52, 0xb5, 0x82, 0x2c,
+};
+
+static unsigned char test1024[] = {
+    0x30, 0x82, 0x02, 0x5c, 0x02, 0x01, 0x00, 0x02, 0x81, 0x81,
+    0x00, 0xdc, 0x98, 0x43, 0xe8, 0x3d, 0x43, 0x5b, 0xe4, 0x05,
+    0xcd, 0xd0, 0xa9, 0x3e, 0xcb, 0x83, 0x75, 0xf6, 0xb5, 0xa5,
+    0x9f, 0x6b, 0xe9, 0x34, 0x41, 0x29, 0x18, 0xfa, 0x6a, 0x55,
+    0x4d, 0x70, 0xfc, 0xec, 0xae, 0x87, 0x38, 0x0a, 0x20, 0xa9,
+    0xc0, 0x45, 0x77, 0x6e, 0x57, 0x60, 0x57, 0xf4, 0xed, 0x96,
+    0x22, 0xcb, 0x8f, 0xe1, 0x33, 0x3a, 0x17, 0x1f, 0xed, 0x37,
+    0xa5, 0x6f, 0xeb, 0xa6, 0xbc, 0x12, 0x80, 0x1d, 0x53, 0xbd,
+    0x70, 0xeb, 0x21, 0x76, 0x3e, 0xc9, 0x2f, 0x1a, 0x45, 0x24,
+    0x82, 0xff, 0xcd, 0x59, 0x32, 0x06, 0x2e, 0x12, 0x3b, 0x23,
+    0x78, 0xed, 0x12, 0x3d, 0xe0, 0x8d, 0xf9, 0x67, 0x4f, 0x37,
+    0x4e, 0x47, 0x02, 0x4c, 0x2d, 0xc0, 0x4f, 0x1f, 0xb3, 0x94,
+    0xe1, 0x41, 0x2e, 0x2d, 0x90, 0x10, 0xfc, 0x82, 0x91, 0x8b,
+    0x0f, 0x22, 0xd4, 0xf2, 0xfc, 0x2c, 0xab, 0x53, 0x55, 0x02,
+    0x03, 0x01, 0x00, 0x01, 0x02, 0x81, 0x80, 0x2b, 0xcc, 0x3f,
+    0x8f, 0x58, 0xba, 0x8b, 0x00, 0x16, 0xf6, 0xea, 0x3a, 0xf0,
+    0x30, 0xd0, 0x05, 0x17, 0xda, 0xb0, 0xeb, 0x9a, 0x2d, 0x4f,
+    0x26, 0xb0, 0xd6, 0x38, 0xc1, 0xeb, 0xf5, 0xd8, 0x3d, 0x1f,
+    0x70, 0xf7, 0x7f, 0xf4, 0xe2, 0xcf, 0x51, 0x51, 0x79, 0x88,
+    0xfa, 0xe8, 0x32, 0x0e, 0x7b, 0x2d, 0x97, 0xf2, 0xfa, 0xba,
+    0x27, 0xc5, 0x9c, 0xd9, 0xc5, 0xeb, 0x8a, 0x79, 0x52, 0x3c,
+    0x64, 0x34, 0x7d, 0xc2, 0xcf, 0x28, 0xc7, 0x4e, 0xd5, 0x43,
+    0x0b, 0xd1, 0xa6, 0xca, 0x6d, 0x03, 0x2d, 0x72, 0x23, 0xbc,
+    0x6d, 0x05, 0xfa, 0x16, 0x09, 0x2f, 0x2e, 0x5c, 0xb6, 0xee,
+    0x74, 0xdd, 0xd2, 0x48, 0x8e, 0x36, 0x0c, 0x06, 0x3d, 0x4d,
+    0xe5, 0x10, 0x82, 0xeb, 0x6a, 0xf3, 0x4b, 0x9f, 0xd6, 0xed,
+    0x11, 0xb1, 0x6e, 0xec, 0xf4, 0xfe, 0x8e, 0x75, 0x94, 0x20,
+    0x2f, 0xcb, 0xac, 0x46, 0xf1, 0x02, 0x41, 0x00, 0xf9, 0x8c,
+    0xa3, 0x85, 0xb1, 0xdd, 0x29, 0xaf, 0x65, 0xc1, 0x33, 0xf3,
+    0x95, 0xc5, 0x52, 0x68, 0x0b, 0xd4, 0xf1, 0xe5, 0x0e, 0x02,
+    0x9f, 0x4f, 0xfa, 0x77, 0xdc, 0x46, 0x9e, 0xc7, 0xa6, 0xe4,
+    0x16, 0x29, 0xda, 0xb0, 0x07, 0xcf, 0x5b, 0xa9, 0x12, 0x8a,
+    0xdd, 0x63, 0x0a, 0xde, 0x2e, 0x8c, 0x66, 0x8b, 0x8c, 0xdc,
+    0x19, 0xa3, 0x7e, 0xf4, 0x3b, 0xd0, 0x1a, 0x8c, 0xa4, 0xc2,
+    0xe1, 0xd3, 0x02, 0x41, 0x00, 0xe2, 0x4c, 0x05, 0xf2, 0x04,
+    0x86, 0x4e, 0x61, 0x43, 0xdb, 0xb0, 0xb9, 0x96, 0x86, 0x52,
+    0x2c, 0xca, 0x8d, 0x7b, 0xab, 0x0b, 0x13, 0x0d, 0x7e, 0x38,
+    0x5b, 0xe2, 0x2e, 0x7b, 0x0e, 0xe7, 0x19, 0x99, 0x38, 0xe7,
+    0xf2, 0x21, 0xbd, 0x85, 0x85, 0xe3, 0xfd, 0x28, 0x77, 0x20,
+    0x31, 0x71, 0x2c, 0xd0, 0xff, 0xfb, 0x2e, 0xaf, 0x85, 0xb4,
+    0x86, 0xca, 0xf3, 0xbb, 0xca, 0xaa, 0x0f, 0x95, 0x37, 0x02,
+    0x40, 0x0e, 0x41, 0x9a, 0x95, 0xe8, 0xb3, 0x59, 0xce, 0x4b,
+    0x61, 0xde, 0x35, 0xec, 0x38, 0x79, 0x9c, 0xb8, 0x10, 0x52,
+    0x41, 0x63, 0xab, 0x82, 0xae, 0x6f, 0x00, 0xa9, 0xf4, 0xde,
+    0xdd, 0x49, 0x0b, 0x7e, 0xb8, 0xa5, 0x65, 0xa9, 0x0c, 0x8f,
+    0x8f, 0xf9, 0x1f, 0x35, 0xc6, 0x92, 0xb8, 0x5e, 0xb0, 0x66,
+    0xab, 0x52, 0x40, 0xc0, 0xb6, 0x36, 0x6a, 0x7d, 0x80, 0x46,
+    0x04, 0x02, 0xe5, 0x9f, 0x41, 0x02, 0x41, 0x00, 0xc0, 0xad,
+    0xcc, 0x4e, 0x21, 0xee, 0x1d, 0x24, 0x91, 0xfb, 0xa7, 0x80,
+    0x8d, 0x9a, 0xb6, 0xb3, 0x2e, 0x8f, 0xc2, 0xe1, 0x82, 0xdf,
+    0x69, 0x18, 0xb4, 0x71, 0xff, 0xa6, 0x65, 0xde, 0xed, 0x84,
+    0x8d, 0x42, 0xb7, 0xb3, 0x21, 0x69, 0x56, 0x1c, 0x07, 0x60,
+    0x51, 0x29, 0x04, 0xff, 0x34, 0x06, 0xdd, 0xb9, 0x67, 0x2c,
+    0x7c, 0x04, 0x93, 0x0e, 0x46, 0x15, 0xbb, 0x2a, 0xb7, 0x1b,
+    0xe7, 0x87, 0x02, 0x40, 0x78, 0xda, 0x5d, 0x07, 0x51, 0x0c,
+    0x16, 0x7a, 0x9f, 0x29, 0x20, 0x84, 0x0d, 0x42, 0xfa, 0xd7,
+    0x00, 0xd8, 0x77, 0x7e, 0xb0, 0xb0, 0x6b, 0xd6, 0x5b, 0x53,
+    0xb8, 0x9b, 0x7a, 0xcd, 0xc7, 0x2b, 0xb8, 0x6a, 0x63, 0xa9,
+    0xfb, 0x6f, 0xa4, 0x72, 0xbf, 0x4c, 0x5d, 0x00, 0x14, 0xba,
+    0xfa, 0x59, 0x88, 0xed, 0xe4, 0xe0, 0x8c, 0xa2, 0xec, 0x14,
+    0x7e, 0x2d, 0xe2, 0xf0, 0x46, 0x49, 0x95, 0x45,
+};
+
+static unsigned char test2048[] = {
+    0x30, 0x82, 0x04, 0xa3, 0x02, 0x01, 0x00, 0x02, 0x82, 0x01,
+    0x01, 0x00, 0xc0, 0xc0, 0xce, 0x3e, 0x3c, 0x53, 0x67, 0x3f,
+    0x4f, 0xc5, 0x2f, 0xa4, 0xc2, 0x5a, 0x2f, 0x58, 0xfd, 0x27,
+    0x52, 0x6a, 0xe8, 0xcf, 0x4a, 0x73, 0x47, 0x8d, 0x25, 0x0f,
+    0x5f, 0x03, 0x26, 0x78, 0xef, 0xf0, 0x22, 0x12, 0xd3, 0xde,
+    0x47, 0xb2, 0x1c, 0x0b, 0x38, 0x63, 0x1a, 0x6c, 0x85, 0x7a,
+    0x80, 0xc6, 0x8f, 0xa0, 0x41, 0xaf, 0x62, 0xc4, 0x67, 0x32,
+    0x88, 0xf8, 0xa6, 0x9c, 0xf5, 0x23, 0x1d, 0xe4, 0xac, 0x3f,
+    0x29, 0xf9, 0xec, 0xe1, 0x8b, 0x26, 0x03, 0x2c, 0xb2, 0xab,
+    0xf3, 0x7d, 0xb5, 0xca, 0x49, 0xc0, 0x8f, 0x1c, 0xdf, 0x33,
+    0x3a, 0x60, 0xda, 0x3c, 0xb0, 0x16, 0xf8, 0xa9, 0x12, 0x8f,
+    0x64, 0xac, 0x23, 0x0c, 0x69, 0x64, 0x97, 0x5d, 0x99, 0xd4,
+    0x09, 0x83, 0x9b, 0x61, 0xd3, 0xac, 0xf0, 0xde, 0xdd, 0x5e,
+    0x9f, 0x44, 0x94, 0xdb, 0x3a, 0x4d, 0x97, 0xe8, 0x52, 0x29,
+    0xf7, 0xdb, 0x94, 0x07, 0x45, 0x90, 0x78, 0x1e, 0x31, 0x0b,
+    0x80, 0xf7, 0x57, 0xad, 0x1c, 0x79, 0xc5, 0xcb, 0x32, 0xb0,
+    0xce, 0xcd, 0x74, 0xb3, 0xe2, 0x94, 0xc5, 0x78, 0x2f, 0x34,
+    0x1a, 0x45, 0xf7, 0x8c, 0x52, 0xa5, 0xbc, 0x8d, 0xec, 0xd1,
+    0x2f, 0x31, 0x3b, 0xf0, 0x49, 0x59, 0x5e, 0x88, 0x9d, 0x15,
+    0x92, 0x35, 0x32, 0xc1, 0xe7, 0x61, 0xec, 0x50, 0x48, 0x7c,
+    0xba, 0x05, 0xf9, 0xf8, 0xf8, 0xa7, 0x8c, 0x83, 0xe8, 0x66,
+    0x5b, 0xeb, 0xfe, 0xd8, 0x4f, 0xdd, 0x6d, 0x36, 0xc0, 0xb2,
+    0x90, 0x0f, 0xb8, 0x52, 0xf9, 0x04, 0x9b, 0x40, 0x2c, 0x27,
+    0xd6, 0x36, 0x8e, 0xc2, 0x1b, 0x44, 0xf3, 0x92, 0xd5, 0x15,
+    0x9e, 0x9a, 0xbc, 0xf3, 0x7d, 0x03, 0xd7, 0x02, 0x14, 0x20,
+    0xe9, 0x10, 0x92, 0xfd, 0xf9, 0xfc, 0x8f, 0xe5, 0x18, 0xe1,
+    0x95, 0xcc, 0x9e, 0x60, 0xa6, 0xfa, 0x38, 0x4d, 0x02, 0x03,
+    0x01, 0x00, 0x01, 0x02, 0x82, 0x01, 0x00, 0x00, 0xc3, 0xc3,
+    0x0d, 0xb4, 0x27, 0x90, 0x8d, 0x4b, 0xbf, 0xb8, 0x84, 0xaa,
+    0xd0, 0xb8, 0xc7, 0x5d, 0x99, 0xbe, 0x55, 0xf6, 0x3e, 0x7c,
+    0x49, 0x20, 0xcb, 0x8a, 0x8e, 0x19, 0x0e, 0x66, 0x24, 0xac,
+    0xaf, 0x03, 0x33, 0x97, 0xeb, 0x95, 0xd5, 0x3b, 0x0f, 0x40,
+    0x56, 0x04, 0x50, 0xd1, 0xe6, 0xbe, 0x84, 0x0b, 0x25, 0xd3,
+    0x9c, 0xe2, 0x83, 0x6c, 0xf5, 0x62, 0x5d, 0xba, 0x2b, 0x7d,
+    0x3d, 0x7a, 0x6c, 0xe1, 0xd2, 0x0e, 0x54, 0x93, 0x80, 0x01,
+    0x91, 0x51, 0x09, 0xe8, 0x5b, 0x8e, 0x47, 0xbd, 0x64, 0xe4,
+    0x0e, 0x03, 0x83, 0x55, 0xcf, 0x5a, 0x37, 0xf0, 0x25, 0xb5,
+    0x7d, 0x21, 0xd7, 0x69, 0xdf, 0x6f, 0xc2, 0xcf, 0x10, 0xc9,
+    0x8a, 0x40, 0x9f, 0x7a, 0x70, 0xc0, 0xe8, 0xe8, 0xc0, 0xe6,
+    0x9a, 0x15, 0x0a, 0x8d, 0x4e, 0x46, 0xcb, 0x7a, 0xdb, 0xb3,
+    0xcb, 0x83, 0x02, 0xc4, 0xf0, 0xab, 0xeb, 0x02, 0x01, 0x0e,
+    0x23, 0xfc, 0x1d, 0xc4, 0xbd, 0xd4, 0xaa, 0x5d, 0x31, 0x46,
+    0x99, 0xce, 0x9e, 0xf8, 0x04, 0x75, 0x10, 0x67, 0xc4, 0x53,
+    0x47, 0x44, 0xfa, 0xc2, 0x25, 0x73, 0x7e, 0xd0, 0x8e, 0x59,
+    0xd1, 0xb2, 0x5a, 0xf4, 0xc7, 0x18, 0x92, 0x2f, 0x39, 0xab,
+    0xcd, 0xa3, 0xb5, 0xc2, 0xb9, 0xc7, 0xb9, 0x1b, 0x9f, 0x48,
+    0xfa, 0x13, 0xc6, 0x98, 0x4d, 0xca, 0x84, 0x9c, 0x06, 0xca,
+    0xe7, 0x89, 0x01, 0x04, 0xc4, 0x6c, 0xfd, 0x29, 0x59, 0x35,
+    0xe7, 0xf3, 0xdd, 0xce, 0x64, 0x59, 0xbf, 0x21, 0x13, 0xa9,
+    0x9f, 0x0e, 0xc5, 0xff, 0xbd, 0x33, 0x00, 0xec, 0xac, 0x6b,
+    0x11, 0xef, 0x51, 0x5e, 0xad, 0x07, 0x15, 0xde, 0xb8, 0x5f,
+    0xc6, 0xb9, 0xa3, 0x22, 0x65, 0x46, 0x83, 0x14, 0xdf, 0xd0,
+    0xf1, 0x44, 0x8a, 0xe1, 0x9c, 0x23, 0x33, 0xb4, 0x97, 0x33,
+    0xe6, 0x6b, 0x81, 0x02, 0x81, 0x81, 0x00, 0xec, 0x12, 0xa7,
+    0x59, 0x74, 0x6a, 0xde, 0x3e, 0xad, 0xd8, 0x36, 0x80, 0x50,
+    0xa2, 0xd5, 0x21, 0x81, 0x07, 0xf1, 0xd0, 0x91, 0xf2, 0x6c,
+    0x12, 0x2f, 0x9d, 0x1a, 0x26, 0xf8, 0x30, 0x65, 0xdf, 0xe8,
+    0xc0, 0x9b, 0x6a, 0x30, 0x98, 0x82, 0x87, 0xec, 0xa2, 0x56,
+    0x87, 0x62, 0x6f, 0xe7, 0x9f, 0xf6, 0x56, 0xe6, 0x71, 0x8f,
+    0x49, 0x86, 0x93, 0x5a, 0x4d, 0x34, 0x58, 0xfe, 0xd9, 0x04,
+    0x13, 0xaf, 0x79, 0xb7, 0xad, 0x11, 0xd1, 0x30, 0x9a, 0x14,
+    0x06, 0xa0, 0xfa, 0xb7, 0x55, 0xdc, 0x6c, 0x5a, 0x4c, 0x2c,
+    0x59, 0x56, 0xf6, 0xe8, 0x9d, 0xaf, 0x0a, 0x78, 0x99, 0x06,
+    0x06, 0x9e, 0xe7, 0x9c, 0x51, 0x55, 0x43, 0xfc, 0x3b, 0x6c,
+    0x0b, 0xbf, 0x2d, 0x41, 0xa7, 0xaf, 0xb7, 0xe0, 0xe8, 0x28,
+    0x18, 0xb4, 0x13, 0xd1, 0xe6, 0x97, 0xd0, 0x9f, 0x6a, 0x80,
+    0xca, 0xdd, 0x1a, 0x7e, 0x15, 0x02, 0x81, 0x81, 0x00, 0xd1,
+    0x06, 0x0c, 0x1f, 0xe3, 0xd0, 0xab, 0xd6, 0xca, 0x7c, 0xbc,
+    0x7d, 0x13, 0x35, 0xce, 0x27, 0xcd, 0xd8, 0x49, 0x51, 0x63,
+    0x64, 0x0f, 0xca, 0x06, 0x12, 0xfc, 0x07, 0x3e, 0xaf, 0x61,
+    0x6d, 0xe2, 0x53, 0x39, 0x27, 0xae, 0xc3, 0x11, 0x9e, 0x94,
+    0x01, 0x4f, 0xe3, 0xf3, 0x67, 0xf9, 0x77, 0xf9, 0xe7, 0x95,
+    0x3a, 0x6f, 0xe2, 0x20, 0x73, 0x3e, 0xa4, 0x7a, 0x28, 0xd4,
+    0x61, 0x97, 0xf6, 0x17, 0xa0, 0x23, 0x10, 0x2b, 0xce, 0x84,
+    0x57, 0x7e, 0x25, 0x1f, 0xf4, 0xa8, 0x54, 0xd2, 0x65, 0x94,
+    0xcc, 0x95, 0x0a, 0xab, 0x30, 0xc1, 0x59, 0x1f, 0x61, 0x8e,
+    0xb9, 0x6b, 0xd7, 0x4e, 0xb9, 0x83, 0x43, 0x79, 0x85, 0x11,
+    0xbc, 0x0f, 0xae, 0x25, 0x20, 0x05, 0xbc, 0xd2, 0x48, 0xa1,
+    0x68, 0x09, 0x84, 0xf6, 0x12, 0x9a, 0x66, 0xb9, 0x2b, 0xbb,
+    0x76, 0x03, 0x17, 0x46, 0x4e, 0x97, 0x59, 0x02, 0x81, 0x80,
+    0x09, 0x4c, 0xfa, 0xd6, 0xe5, 0x65, 0x48, 0x78, 0x43, 0xb5,
+    0x1f, 0x00, 0x93, 0x2c, 0xb7, 0x24, 0xe8, 0xc6, 0x7d, 0x5a,
+    0x70, 0x45, 0x92, 0xc8, 0x6c, 0xa3, 0xcd, 0xe1, 0xf7, 0x29,
+    0x40, 0xfa, 0x3f, 0x5b, 0x47, 0x44, 0x39, 0xc1, 0xe8, 0x72,
+    0x9e, 0x7a, 0x0e, 0xda, 0xaa, 0xa0, 0x2a, 0x09, 0xfd, 0x54,
+    0x93, 0x23, 0xaa, 0x37, 0x85, 0x5b, 0xcc, 0xd4, 0xf9, 0xd8,
+    0xff, 0xc1, 0x61, 0x0d, 0xbd, 0x7e, 0x18, 0x24, 0x73, 0x6d,
+    0x40, 0x72, 0xf1, 0x93, 0x09, 0x48, 0x97, 0x6c, 0x84, 0x90,
+    0xa8, 0x46, 0x14, 0x01, 0x39, 0x11, 0xe5, 0x3c, 0x41, 0x27,
+    0x32, 0x75, 0x24, 0xed, 0xa1, 0xd9, 0x12, 0x29, 0x8a, 0x28,
+    0x71, 0x89, 0x8d, 0xca, 0x30, 0xb0, 0x01, 0xc4, 0x2f, 0x82,
+    0x19, 0x14, 0x4c, 0x70, 0x1c, 0xb8, 0x23, 0x2e, 0xe8, 0x90,
+    0x49, 0x97, 0x92, 0x97, 0x6b, 0x7a, 0x9d, 0xb9, 0x02, 0x81,
+    0x80, 0x0f, 0x0e, 0xa1, 0x76, 0xf6, 0xa1, 0x44, 0x8f, 0xaf,
+    0x7c, 0x76, 0xd3, 0x87, 0xbb, 0xbb, 0x83, 0x10, 0x88, 0x01,
+    0x18, 0x14, 0xd1, 0xd3, 0x75, 0x59, 0x24, 0xaa, 0xf5, 0x16,
+    0xa5, 0xe9, 0x9d, 0xd1, 0xcc, 0xee, 0xf4, 0x15, 0xd9, 0xc5,
+    0x7e, 0x27, 0xe9, 0x44, 0x49, 0x06, 0x72, 0xb9, 0xfc, 0xd3,
+    0x8a, 0xc4, 0x2c, 0x36, 0x7d, 0x12, 0x9b, 0x5a, 0xaa, 0xdc,
+    0x85, 0xee, 0x6e, 0xad, 0x54, 0xb3, 0xf4, 0xfc, 0x31, 0xa1,
+    0x06, 0x3a, 0x70, 0x57, 0x0c, 0xf3, 0x95, 0x5b, 0x3e, 0xe8,
+    0xfd, 0x1a, 0x4f, 0xf6, 0x78, 0x93, 0x46, 0x6a, 0xd7, 0x31,
+    0xb4, 0x84, 0x64, 0x85, 0x09, 0x38, 0x89, 0x92, 0x94, 0x1c,
+    0xbf, 0xe2, 0x3c, 0x2a, 0xe0, 0xff, 0x99, 0xa3, 0xf0, 0x2b,
+    0x31, 0xc2, 0x36, 0xcd, 0x60, 0xbf, 0x9d, 0x2d, 0x74, 0x32,
+    0xe8, 0x9c, 0x93, 0x6e, 0xbb, 0x91, 0x7b, 0xfd, 0xd9, 0x02,
+    0x81, 0x81, 0x00, 0xa2, 0x71, 0x25, 0x38, 0xeb, 0x2a, 0xe9,
+    0x37, 0xcd, 0xfe, 0x44, 0xce, 0x90, 0x3f, 0x52, 0x87, 0x84,
+    0x52, 0x1b, 0xae, 0x8d, 0x22, 0x94, 0xce, 0x38, 0xe6, 0x04,
+    0x88, 0x76, 0x85, 0x9a, 0xd3, 0x14, 0x09, 0xe5, 0x69, 0x9a,
+    0xff, 0x58, 0x92, 0x02, 0x6a, 0x7d, 0x7c, 0x1e, 0x2c, 0xfd,
+    0xa8, 0xca, 0x32, 0x14, 0x4f, 0x0d, 0x84, 0x0d, 0x37, 0x43,
+    0xbf, 0xe4, 0x5d, 0x12, 0xc8, 0x24, 0x91, 0x27, 0x8d, 0x46,
+    0xd9, 0x54, 0x53, 0xe7, 0x62, 0x71, 0xa8, 0x2b, 0x71, 0x41,
+    0x8d, 0x75, 0xf8, 0x3a, 0xa0, 0x61, 0x29, 0x46, 0xa6, 0xe5,
+    0x82, 0xfa, 0x3a, 0xd9, 0x08, 0xfa, 0xfc, 0x63, 0xfd, 0x6b,
+    0x30, 0xbc, 0xf4, 0x4e, 0x9e, 0x8c, 0x25, 0x0c, 0xb6, 0x55,
+    0xe7, 0x3c, 0xd4, 0x4e, 0x0b, 0xfd, 0x8b, 0xc3, 0x0e, 0x1d,
+    0x9c, 0x44, 0x57, 0x8f, 0x1f, 0x86, 0xf7, 0xd5, 0x1b, 0xe4,
+    0x95,
+};
+
+static unsigned char test3072[] = {
+    0x30, 0x82, 0x06, 0xe3, 0x02, 0x01, 0x00, 0x02, 0x82, 0x01,
+    0x81, 0x00, 0xbc, 0x3b, 0x23, 0xc0, 0x33, 0xa7, 0x8b, 0xaa,
+    0xca, 0xa3, 0x8c, 0x94, 0xf2, 0x4c, 0x52, 0x08, 0x85, 0x80,
+    0xfc, 0x36, 0x15, 0xfa, 0x03, 0x06, 0xb6, 0xd6, 0x3f, 0x60,
+    0x8a, 0x89, 0x0d, 0xba, 0x1a, 0x51, 0x0b, 0x12, 0xea, 0x71,
+    0x77, 0xf6, 0x3a, 0x30, 0x21, 0x3d, 0x24, 0xf8, 0x2e, 0xd0,
+    0x17, 0x3a, 0x85, 0x94, 0x25, 0x42, 0x89, 0xff, 0x6a, 0x68,
+    0xdf, 0x1f, 0x86, 0xae, 0xa5, 0xbb, 0x9a, 0x79, 0xf6, 0x69,
+    0x94, 0xfe, 0xde, 0xfe, 0xce, 0x1b, 0x2e, 0xae, 0x1d, 0x91,
+    0xcb, 0xb9, 0xf1, 0x2d, 0xd8, 0x00, 0x82, 0x51, 0x8e, 0xf9,
+    0xfd, 0xac, 0xf1, 0x0e, 0x7f, 0xb7, 0x95, 0x85, 0x35, 0xf9,
+    0xcb, 0xbe, 0x5f, 0xd3, 0x58, 0xe3, 0xa1, 0x54, 0x9e, 0x30,
+    0xb1, 0x8d, 0x01, 0x97, 0x82, 0x06, 0x8e, 0x77, 0xfb, 0xce,
+    0x50, 0x2f, 0xbf, 0xf1, 0xff, 0x57, 0x0a, 0x42, 0x03, 0xfd,
+    0x0e, 0xba, 0x1e, 0xca, 0x85, 0xc1, 0x9b, 0xa5, 0x9d, 0x09,
+    0x0e, 0xe9, 0xbb, 0xc5, 0x73, 0x47, 0x0d, 0x39, 0x3c, 0x64,
+    0x06, 0x9a, 0x79, 0x3f, 0x50, 0x87, 0x9c, 0x18, 0x2d, 0x62,
+    0x01, 0xfc, 0xed, 0xc1, 0x58, 0x28, 0x21, 0x94, 0x1e, 0xf9,
+    0x2d, 0x96, 0x4f, 0xd0, 0xbc, 0xf1, 0xe0, 0x8a, 0xfa, 0x4d,
+    0xb6, 0x78, 0x4a, 0xde, 0x17, 0x59, 0xb0, 0x22, 0xa0, 0x9a,
+    0xd3, 0x70, 0xb6, 0xc2, 0xbe, 0xbc, 0x96, 0xca, 0x41, 0x5f,
+    0x58, 0x4e, 0xce, 0xef, 0x64, 0x45, 0xdd, 0x3f, 0x81, 0x92,
+    0xcc, 0x40, 0x79, 0xfc, 0x19, 0xe2, 0xbc, 0x77, 0x2f, 0x43,
+    0xfb, 0x8e, 0xad, 0x82, 0x4a, 0x0b, 0xb1, 0xbc, 0x09, 0x8a,
+    0x80, 0xc3, 0x0f, 0xef, 0xd2, 0x06, 0xd3, 0x4b, 0x0c, 0x7f,
+    0xae, 0x60, 0x3f, 0x2e, 0x52, 0xb4, 0xe4, 0xc2, 0x5c, 0xa6,
+    0x71, 0xc0, 0x13, 0x9c, 0xca, 0xa6, 0x0d, 0x13, 0xd7, 0xb7,
+    0x14, 0x94, 0x3f, 0x0d, 0x8b, 0x06, 0x70, 0x2f, 0x15, 0x82,
+    0x8d, 0x47, 0x45, 0xa6, 0x00, 0x8a, 0x14, 0x91, 0xde, 0x2f,
+    0x50, 0x17, 0xe3, 0x1d, 0x34, 0x29, 0x8c, 0xe4, 0x57, 0x74,
+    0x2a, 0x3a, 0x82, 0x65, 0x26, 0xf7, 0x8d, 0xcc, 0x1b, 0x8f,
+    0xaf, 0xe5, 0x85, 0xe5, 0xbe, 0x85, 0xd6, 0xb7, 0x04, 0xe8,
+    0xf5, 0xd4, 0x74, 0xe2, 0x54, 0x14, 0xdd, 0x58, 0xcf, 0x1f,
+    0x11, 0x8a, 0x9f, 0x82, 0xa2, 0x01, 0xf9, 0xc2, 0xdf, 0x7b,
+    0x84, 0xb1, 0xd8, 0x5b, 0x70, 0xbb, 0x24, 0xe7, 0xd0, 0x2a,
+    0x75, 0x3d, 0x55, 0xac, 0x45, 0xe9, 0xab, 0xc6, 0x84, 0x8a,
+    0xe7, 0x6d, 0x26, 0x12, 0x89, 0xb5, 0x67, 0xe8, 0x46, 0x9d,
+    0x46, 0x1a, 0xfa, 0x2d, 0xc0, 0x5b, 0x60, 0x46, 0x8b, 0xb7,
+    0x32, 0x03, 0xff, 0x75, 0xee, 0x9f, 0x3c, 0xdd, 0xb6, 0x35,
+    0x4e, 0x82, 0xbd, 0x99, 0x73, 0x51, 0x02, 0x03, 0x01, 0x00,
+    0x01, 0x02, 0x82, 0x01, 0x80, 0x42, 0xee, 0xa4, 0x9f, 0xcb,
+    0xbe, 0x60, 0x23, 0xb3, 0x3a, 0xc4, 0xda, 0x91, 0xee, 0x21,
+    0x9d, 0x76, 0x1b, 0x8f, 0x93, 0x8b, 0xed, 0x02, 0xf6, 0x78,
+    0x3d, 0x66, 0xfb, 0xe5, 0x47, 0x26, 0xe2, 0x6e, 0x49, 0x33,
+    0x2e, 0xde, 0xbe, 0xca, 0x71, 0x7b, 0xef, 0x71, 0x62, 0x54,
+    0xab, 0x0b, 0xba, 0x63, 0x08, 0x24, 0x47, 0xb1, 0x98, 0x1f,
+    0x89, 0xfb, 0x44, 0x9f, 0x52, 0x8e, 0x89, 0xbb, 0xd5, 0x21,
+    0xf1, 0x0c, 0x76, 0x2e, 0xcd, 0x12, 0x6e, 0x78, 0xcb, 0xa1,
+    0xa5, 0xb8, 0x4e, 0x07, 0xab, 0x6e, 0xdf, 0x66, 0x57, 0x87,
+    0xff, 0x88, 0x5f, 0xcc, 0x9c, 0x9a, 0x7b, 0x15, 0x5f, 0x2a,
+    0x83, 0xdb, 0xd5, 0x9f, 0x65, 0x6a, 0x9d, 0xb4, 0x95, 0xfc,
+    0xe0, 0x22, 0x00, 0x1e, 0xa2, 0x8d, 0x56, 0x5a, 0x9e, 0x0a,
+    0x3b, 0x10, 0x07, 0x24, 0xec, 0x55, 0xcc, 0xaf, 0x87, 0x3b,
+    0xd6, 0x8d, 0xa4, 0x86, 0x80, 0x18, 0x42, 0xdb, 0x9d, 0x24,
+    0xc3, 0x97, 0x3b, 0x89, 0x5a, 0x03, 0xb3, 0x0a, 0x72, 0xd1,
+    0x78, 0xf0, 0xc8, 0x80, 0xb0, 0x9d, 0x3c, 0xae, 0x5e, 0x0a,
+    0x5b, 0x6e, 0x87, 0xd3, 0x3d, 0x25, 0x2e, 0x03, 0x33, 0x01,
+    0xfd, 0xb1, 0xa5, 0xd9, 0x58, 0x01, 0xb9, 0xaf, 0xf6, 0x32,
+    0x6a, 0x38, 0xe7, 0x39, 0x63, 0x3c, 0xfc, 0x0c, 0x41, 0x90,
+    0x28, 0x40, 0x03, 0xcd, 0xfb, 0xde, 0x80, 0x74, 0x21, 0xaa,
+    0xae, 0x58, 0xe9, 0x97, 0x18, 0x85, 0x58, 0x3d, 0x2b, 0xd6,
+    0x61, 0xf6, 0xe8, 0xbc, 0x6d, 0x2a, 0xf3, 0xb8, 0xea, 0x8c,
+    0x64, 0x44, 0xc6, 0xd3, 0x9f, 0x00, 0x7b, 0xb2, 0x52, 0x18,
+    0x11, 0x04, 0x96, 0xb7, 0x05, 0xbb, 0xc2, 0x38, 0x5b, 0xa7,
+    0x0a, 0x84, 0xb6, 0x4f, 0x02, 0x63, 0xa4, 0x57, 0x00, 0xe3,
+    0xde, 0xe4, 0xf2, 0xb3, 0x55, 0xd9, 0x00, 0xa9, 0xd2, 0x5c,
+    0x69, 0x9f, 0xe5, 0x80, 0x4f, 0x23, 0x7c, 0xd9, 0xa7, 0x77,
+    0x4a, 0xbb, 0x09, 0x6d, 0x45, 0x02, 0xcf, 0x32, 0x90, 0xfd,
+    0x10, 0xb6, 0xb3, 0x93, 0xd9, 0x3b, 0x1d, 0x57, 0x66, 0xb5,
+    0xb3, 0xb1, 0x6e, 0x53, 0x5f, 0x04, 0x60, 0x29, 0xcd, 0xe8,
+    0xb8, 0xab, 0x62, 0x82, 0x33, 0x40, 0xc7, 0xf8, 0x64, 0x60,
+    0x0e, 0xab, 0x06, 0x3e, 0xa0, 0xa3, 0x62, 0x11, 0x3f, 0x67,
+    0x5d, 0x24, 0x9e, 0x60, 0x29, 0xdc, 0x4c, 0xd5, 0x13, 0xee,
+    0x3d, 0xb7, 0x84, 0x93, 0x27, 0xb5, 0x6a, 0xf9, 0xf0, 0xdd,
+    0x50, 0xac, 0x46, 0x3c, 0xe6, 0xd5, 0xec, 0xf7, 0xb7, 0x9f,
+    0x23, 0x39, 0x9c, 0x88, 0x8c, 0x5a, 0x62, 0x3f, 0x8d, 0x4a,
+    0xd7, 0xeb, 0x5e, 0x1e, 0x49, 0xf8, 0xa9, 0x53, 0x11, 0x75,
+    0xd0, 0x43, 0x1e, 0xc7, 0x29, 0x22, 0x80, 0x1f, 0xc5, 0x83,
+    0x8d, 0x20, 0x04, 0x87, 0x7f, 0x57, 0x8c, 0xf5, 0xa1, 0x02,
+    0x81, 0xc1, 0x00, 0xf7, 0xaa, 0xf5, 0xa5, 0x00, 0xdb, 0xd6,
+    0x11, 0xfc, 0x07, 0x6d, 0x22, 0x24, 0x2b, 0x4b, 0xc5, 0x67,
+    0x0f, 0x37, 0xa5, 0xdb, 0x8f, 0x38, 0xe2, 0x05, 0x43, 0x9a,
+    0x44, 0x05, 0x3f, 0xa9, 0xac, 0x4c, 0x98, 0x3c, 0x72, 0x38,
+    0xc3, 0x89, 0x33, 0x58, 0x73, 0x51, 0xcc, 0x5d, 0x2f, 0x8f,
+    0x6d, 0x3f, 0xa1, 0x22, 0x9e, 0xfb, 0x9a, 0xb4, 0xb8, 0x79,
+    0x95, 0xaf, 0x83, 0xcf, 0x5a, 0xb7, 0x14, 0x14, 0x0c, 0x51,
+    0x8a, 0x11, 0xe6, 0xd6, 0x21, 0x1e, 0x17, 0x13, 0xd3, 0x69,
+    0x7a, 0x3a, 0xd5, 0xaf, 0x3f, 0xb8, 0x25, 0x01, 0xcb, 0x2b,
+    0xe6, 0xfc, 0x03, 0xd8, 0xd4, 0xf7, 0x20, 0xe0, 0x21, 0xef,
+    0x1a, 0xca, 0x61, 0xeb, 0x8e, 0x96, 0x45, 0x8e, 0x5c, 0xe6,
+    0x81, 0x0b, 0x2d, 0x05, 0x32, 0xf9, 0x41, 0x62, 0xb4, 0x33,
+    0x98, 0x10, 0x3a, 0xcd, 0xf0, 0x7a, 0x8b, 0x1a, 0x48, 0xd7,
+    0x3b, 0x01, 0xf5, 0x18, 0x65, 0x8f, 0x3c, 0xc2, 0x31, 0x3b,
+    0xd3, 0xa7, 0x17, 0x5f, 0x7c, 0x0c, 0xe7, 0x25, 0x18, 0x5a,
+    0x08, 0xe1, 0x09, 0x89, 0x13, 0xa7, 0xc5, 0x12, 0xab, 0x88,
+    0x30, 0xcd, 0x06, 0xf9, 0xba, 0x6f, 0xca, 0x9c, 0x8a, 0xda,
+    0x3e, 0x53, 0x90, 0xd7, 0x16, 0x2e, 0xfc, 0xbc, 0xad, 0xd6,
+    0x3d, 0xc0, 0x66, 0x4c, 0x02, 0x3d, 0x31, 0xfd, 0x6c, 0xdb,
+    0x1c, 0xdf, 0x96, 0x33, 0x23, 0x02, 0x81, 0xc1, 0x00, 0xc2,
+    0x90, 0x47, 0xc4, 0xfb, 0x59, 0xf0, 0xc5, 0x14, 0x75, 0x29,
+    0xfa, 0x77, 0xa1, 0x8d, 0xd4, 0x90, 0xa1, 0x0d, 0x3f, 0x16,
+    0x88, 0xe3, 0x4c, 0x8f, 0x8f, 0x18, 0x8c, 0x9c, 0x8a, 0xd5,
+    0xa7, 0x41, 0x99, 0xf3, 0x80, 0x8e, 0xb1, 0xb8, 0x63, 0xd8,
+    0x3f, 0x95, 0xd0, 0xd0, 0x2b, 0xf5, 0xe6, 0x93, 0xe8, 0xfe,
+    0xd0, 0x73, 0xd5, 0xbd, 0xb4, 0xee, 0x51, 0x19, 0x6a, 0x10,
+    0xca, 0xc8, 0xba, 0xa4, 0x4d, 0x84, 0x54, 0x38, 0x17, 0xb5,
+    0xd0, 0xa8, 0x75, 0x22, 0xc5, 0x1b, 0x61, 0xa6, 0x51, 0x88,
+    0x63, 0xf0, 0x4f, 0xd1, 0x88, 0xd9, 0x16, 0x49, 0x30, 0xe1,
+    0xa8, 0x47, 0xc9, 0x30, 0x1d, 0x5c, 0x75, 0xd8, 0x89, 0xb6,
+    0x1d, 0x45, 0xd8, 0x0f, 0x94, 0x89, 0xb3, 0xe4, 0x51, 0xfa,
+    0x21, 0xff, 0x6f, 0xb6, 0x30, 0x6f, 0x33, 0x24, 0xbc, 0x09,
+    0x98, 0xe9, 0x20, 0x02, 0x0b, 0xde, 0xff, 0xc5, 0x06, 0xb6,
+    0x28, 0xa3, 0xa1, 0x07, 0xe8, 0xe1, 0xd2, 0xc2, 0xf1, 0xd1,
+    0x23, 0x6b, 0x4c, 0x3a, 0xae, 0x85, 0xec, 0xf9, 0xff, 0xa7,
+    0x9b, 0x25, 0xb8, 0x95, 0x1d, 0xa8, 0x14, 0x81, 0x4f, 0x79,
+    0x4f, 0xd6, 0x39, 0x5d, 0xe6, 0x5f, 0xd2, 0x34, 0x54, 0x8b,
+    0x1e, 0x40, 0x4c, 0x15, 0x5a, 0x45, 0xce, 0x0c, 0xb0, 0xdf,
+    0xa1, 0x17, 0xb8, 0xb0, 0x6a, 0x82, 0xa5, 0x97, 0x92, 0x70,
+    0xfb, 0x02, 0x81, 0xc0, 0x77, 0x46, 0x44, 0x2b, 0x04, 0xf0,
+    0xda, 0x75, 0xaa, 0xd4, 0xc0, 0xc0, 0x32, 0x7f, 0x0f, 0x6c,
+    0xb0, 0x27, 0x69, 0xfb, 0x5c, 0x73, 0xeb, 0x47, 0x1e, 0x95,
+    0xe2, 0x13, 0x64, 0x1b, 0xb6, 0xd1, 0x1d, 0xca, 0x2b, 0x42,
+    0x2f, 0x08, 0x2c, 0x69, 0x27, 0xed, 0xd1, 0xb5, 0x04, 0x23,
+    0xc5, 0x85, 0x2d, 0xa1, 0xa2, 0x94, 0xc2, 0x43, 0x4d, 0x49,
+    0x92, 0x74, 0x7e, 0x24, 0x92, 0x95, 0xf3, 0x99, 0x9d, 0xd6,
+    0x18, 0xe6, 0xcf, 0x9c, 0x45, 0xff, 0x89, 0x08, 0x40, 0x2a,
+    0x0e, 0xa0, 0x28, 0xf9, 0x83, 0xfe, 0xc1, 0xe6, 0x40, 0xa8,
+    0xe2, 0x29, 0xc9, 0xb0, 0xe8, 0x9a, 0x17, 0xb2, 0x23, 0x7e,
+    0xf4, 0x32, 0x08, 0xc9, 0x83, 0xb2, 0x15, 0xb8, 0xc5, 0xc9,
+    0x03, 0xd1, 0x9d, 0xda, 0x3e, 0xa8, 0xbf, 0xd5, 0xb7, 0x7d,
+    0x65, 0x63, 0x94, 0x5d, 0x5d, 0x94, 0xb4, 0xcf, 0x8d, 0x07,
+    0x0b, 0x70, 0x85, 0x8e, 0xce, 0x03, 0x0b, 0x2a, 0x8d, 0xb3,
+    0x3c, 0x46, 0xc0, 0x2f, 0xc7, 0x72, 0x6c, 0x9c, 0x5d, 0x07,
+    0x0f, 0x45, 0x3b, 0x6b, 0x66, 0x32, 0xab, 0x17, 0x83, 0xd8,
+    0x4c, 0x2c, 0x84, 0x71, 0x19, 0x8f, 0xaa, 0x0a, 0xff, 0xbc,
+    0xf7, 0x42, 0x10, 0xe8, 0xae, 0x4d, 0x26, 0xaf, 0xdd, 0x06,
+    0x33, 0x29, 0x66, 0x21, 0x5d, 0xf5, 0xae, 0x17, 0x07, 0x1f,
+    0x87, 0x9e, 0xae, 0x27, 0x1d, 0xd5, 0x02, 0x81, 0xc0, 0x56,
+    0x17, 0x4f, 0x9a, 0x8a, 0xf9, 0xde, 0x3e, 0xe6, 0x71, 0x7d,
+    0x94, 0xb5, 0xb0, 0xc7, 0xb8, 0x62, 0x12, 0xd1, 0x70, 0xb4,
+    0x00, 0xf8, 0x4a, 0xdd, 0x4f, 0x1d, 0x36, 0xc2, 0xe1, 0xef,
+    0xee, 0x25, 0x6a, 0x00, 0xc4, 0x46, 0xdf, 0xbe, 0xce, 0x77,
+    0x56, 0x93, 0x6d, 0x25, 0x5f, 0xfe, 0x5b, 0xfb, 0xe0, 0xe2,
+    0x37, 0xcc, 0xb9, 0xac, 0x4a, 0xce, 0x15, 0x16, 0xa0, 0xc7,
+    0x33, 0x63, 0xa4, 0xaa, 0xa5, 0x1e, 0x43, 0xc1, 0xda, 0x43,
+    0xfa, 0x43, 0x40, 0x29, 0x95, 0x7c, 0x2b, 0x36, 0x53, 0xe7,
+    0x7d, 0x09, 0x4d, 0xd8, 0x52, 0xac, 0x74, 0x5f, 0x08, 0x81,
+    0x21, 0x5c, 0x3a, 0x5a, 0xce, 0xf3, 0x25, 0xb6, 0x1e, 0x21,
+    0x76, 0x4c, 0x7c, 0x71, 0x50, 0x71, 0xaa, 0x27, 0x02, 0x5b,
+    0x23, 0x06, 0x0b, 0x21, 0x5b, 0xc7, 0x28, 0xa3, 0x3d, 0x8d,
+    0x25, 0x9b, 0x2a, 0x2d, 0x9d, 0xa1, 0x1c, 0x1d, 0xcb, 0x7d,
+    0x78, 0xf8, 0x06, 0x7e, 0x20, 0x7f, 0x24, 0x2a, 0x5c, 0xa4,
+    0x04, 0xff, 0x2a, 0x68, 0xe0, 0xe6, 0xa3, 0xd8, 0x6f, 0x56,
+    0x73, 0xa1, 0x3a, 0x4e, 0xc9, 0x23, 0xa1, 0x87, 0x22, 0x6a,
+    0x74, 0x78, 0x3f, 0x44, 0x1c, 0x77, 0x13, 0xe5, 0x51, 0xef,
+    0x89, 0x00, 0x3c, 0x6a, 0x4a, 0x5a, 0x8e, 0xf5, 0x30, 0xa2,
+    0x93, 0x7e, 0x92, 0x9b, 0x85, 0x55, 0xaf, 0xfe, 0x24, 0xaf,
+    0x57, 0x02, 0x81, 0xc1, 0x00, 0xa4, 0xc2, 0x6a, 0x59, 0x45,
+    0xea, 0x71, 0x7d, 0x4c, 0xaf, 0xaf, 0xd6, 0x55, 0x97, 0x73,
+    0xc5, 0xa1, 0x3c, 0xf6, 0x59, 0x23, 0xb6, 0x1f, 0x5e, 0x9c,
+    0x96, 0x0f, 0x97, 0x66, 0x82, 0x91, 0x48, 0x36, 0x70, 0x02,
+    0x67, 0xde, 0x34, 0xa6, 0x95, 0x7b, 0x51, 0x43, 0x66, 0xa4,
+    0x16, 0x45, 0x59, 0x12, 0xdb, 0x35, 0x19, 0x4b, 0xbf, 0x1d,
+    0xab, 0xf3, 0x3f, 0xb4, 0xb4, 0x6f, 0x66, 0xb0, 0x67, 0xc6,
+    0x77, 0x2c, 0x46, 0xa8, 0x03, 0x64, 0x9a, 0x13, 0x9d, 0x40,
+    0x22, 0x56, 0x76, 0x1a, 0x7c, 0x1e, 0xe2, 0xda, 0x7f, 0x09,
+    0xcf, 0x10, 0xe3, 0xf2, 0xf4, 0x2a, 0x3b, 0x46, 0xc7, 0x61,
+    0x9b, 0xef, 0x4a, 0x18, 0x60, 0x8c, 0x32, 0x71, 0xb9, 0xdd,
+    0xac, 0xa0, 0xc6, 0x8d, 0x3f, 0xab, 0xc3, 0x21, 0x2c, 0xeb,
+    0x91, 0x8f, 0xc7, 0x43, 0x0d, 0x0c, 0x67, 0x9e, 0xab, 0xe6,
+    0x8d, 0xb6, 0x2d, 0x41, 0xca, 0x43, 0xd8, 0xcb, 0x30, 0xfb,
+    0x3b, 0x40, 0x0d, 0x10, 0x9b, 0xb1, 0x55, 0x93, 0x73, 0x8b,
+    0x60, 0xef, 0xc0, 0xee, 0xc0, 0xa6, 0x7a, 0x79, 0x90, 0xfd,
+    0x4c, 0x25, 0xd4, 0x4f, 0x67, 0xbe, 0xf7, 0x86, 0x3c, 0x5d,
+    0x2b, 0x7d, 0x97, 0x3d, 0xa2, 0x91, 0xa5, 0x06, 0x69, 0xf6,
+    0x7a, 0xb8, 0x77, 0xe6, 0x70, 0xa9, 0xd8, 0x86, 0x4b, 0xa6,
+    0xcf, 0x67, 0x1d, 0x33, 0xcf, 0xfe, 0x3e
+};
+
+static unsigned char test4096[] = {
+    0x30, 0x82, 0x09, 0x29, 0x02, 0x01, 0x00, 0x02, 0x82, 0x02,
+    0x01, 0x00, 0xc0, 0x71, 0xac, 0x1a, 0x13, 0x88, 0x82, 0x43,
+    0x3b, 0x51, 0x57, 0x71, 0x8d, 0xb6, 0x2b, 0x82, 0x65, 0x21,
+    0x53, 0x5f, 0x28, 0x29, 0x4f, 0x8d, 0x7c, 0x8a, 0xb9, 0x44,
+    0xb3, 0x28, 0x41, 0x4f, 0xd3, 0xfa, 0x6a, 0xf8, 0xb9, 0x28,
+    0x50, 0x39, 0x67, 0x53, 0x2c, 0x3c, 0xd7, 0xcb, 0x96, 0x41,
+    0x40, 0x32, 0xbb, 0xeb, 0x70, 0xae, 0x1f, 0xb0, 0x65, 0xf7,
+    0x3a, 0xd9, 0x22, 0xfd, 0x10, 0xae, 0xbd, 0x02, 0xe2, 0xdd,
+    0xf3, 0xc2, 0x79, 0x3c, 0xc6, 0xfc, 0x75, 0xbb, 0xaf, 0x4e,
+    0x3a, 0x36, 0xc2, 0x4f, 0xea, 0x25, 0xdf, 0x13, 0x16, 0x4b,
+    0x20, 0xfe, 0x4b, 0x69, 0x16, 0xc4, 0x7f, 0x1a, 0x43, 0xa6,
+    0x17, 0x1b, 0xb9, 0x0a, 0xf3, 0x09, 0x86, 0x28, 0x89, 0xcf,
+    0x2c, 0xd0, 0xd4, 0x81, 0xaf, 0xc6, 0x6d, 0xe6, 0x21, 0x8d,
+    0xee, 0xef, 0xea, 0xdc, 0xb7, 0xc6, 0x3b, 0x63, 0x9f, 0x0e,
+    0xad, 0x89, 0x78, 0x23, 0x18, 0xbf, 0x70, 0x7e, 0x84, 0xe0,
+    0x37, 0xec, 0xdb, 0x8e, 0x9c, 0x3e, 0x6a, 0x19, 0xcc, 0x99,
+    0x72, 0xe6, 0xb5, 0x7d, 0x6d, 0xfa, 0xe5, 0xd3, 0xe4, 0x90,
+    0xb5, 0xb2, 0xb2, 0x12, 0x70, 0x4e, 0xca, 0xf8, 0x10, 0xf8,
+    0xa3, 0x14, 0xc2, 0x48, 0x19, 0xeb, 0x60, 0x99, 0xbb, 0x2a,
+    0x1f, 0xb1, 0x7a, 0xb1, 0x3d, 0x24, 0xfb, 0xa0, 0x29, 0xda,
+    0xbd, 0x1b, 0xd7, 0xa4, 0xbf, 0xef, 0x60, 0x2d, 0x22, 0xca,
+    0x65, 0x98, 0xf1, 0xc4, 0xe1, 0xc9, 0x02, 0x6b, 0x16, 0x28,
+    0x2f, 0xa1, 0xaa, 0x79, 0x00, 0xda, 0xdc, 0x7c, 0x43, 0xf7,
+    0x42, 0x3c, 0xa0, 0xef, 0x68, 0xf7, 0xdf, 0xb9, 0x69, 0xfb,
+    0x8e, 0x01, 0xed, 0x01, 0x42, 0xb5, 0x4e, 0x57, 0xa6, 0x26,
+    0xb8, 0xd0, 0x7b, 0x56, 0x6d, 0x03, 0xc6, 0x40, 0x8c, 0x8c,
+    0x2a, 0x55, 0xd7, 0x9c, 0x35, 0x00, 0x94, 0x93, 0xec, 0x03,
+    0xeb, 0x22, 0xef, 0x77, 0xbb, 0x79, 0x13, 0x3f, 0x15, 0xa1,
+    0x8f, 0xca, 0xdf, 0xfd, 0xd3, 0xb8, 0xe1, 0xd4, 0xcc, 0x09,
+    0x3f, 0x3c, 0x2c, 0xdb, 0xd1, 0x49, 0x7f, 0x38, 0x07, 0x83,
+    0x6d, 0xeb, 0x08, 0x66, 0xe9, 0x06, 0x44, 0x12, 0xac, 0x95,
+    0x22, 0x90, 0x23, 0x67, 0xd4, 0x08, 0xcc, 0xf4, 0xb7, 0xdc,
+    0xcc, 0x87, 0xd4, 0xac, 0x69, 0x35, 0x4c, 0xb5, 0x39, 0x36,
+    0xcd, 0xa4, 0xd2, 0x95, 0xca, 0x0d, 0xc5, 0xda, 0xc2, 0xc5,
+    0x22, 0x32, 0x28, 0x08, 0xe3, 0xd2, 0x8b, 0x38, 0x30, 0xdc,
+    0x8c, 0x75, 0x4f, 0x6a, 0xec, 0x7a, 0xac, 0x16, 0x3e, 0xa8,
+    0xd4, 0x6a, 0x45, 0xe1, 0xa8, 0x4f, 0x2e, 0x80, 0x34, 0xaa,
+    0x54, 0x1b, 0x02, 0x95, 0x7d, 0x8a, 0x6d, 0xcc, 0x79, 0xca,
+    0xf2, 0xa4, 0x2e, 0x8d, 0xfb, 0xfe, 0x15, 0x51, 0x10, 0x0e,
+    0x4d, 0x88, 0xb1, 0xc7, 0xf4, 0x79, 0xdb, 0xf0, 0xb4, 0x56,
+    0x44, 0x37, 0xca, 0x5a, 0xc1, 0x8c, 0x48, 0xac, 0xae, 0x48,
+    0x80, 0x83, 0x01, 0x3f, 0xde, 0xd9, 0xd3, 0x2c, 0x51, 0x46,
+    0xb1, 0x41, 0xb6, 0xc6, 0x91, 0x72, 0xf9, 0x83, 0x55, 0x1b,
+    0x8c, 0xba, 0xf3, 0x73, 0xe5, 0x2c, 0x74, 0x50, 0x3a, 0xbe,
+    0xc5, 0x2f, 0xa7, 0xb2, 0x6d, 0x8c, 0x9e, 0x13, 0x77, 0xa3,
+    0x13, 0xcd, 0x6d, 0x8c, 0x45, 0xe1, 0xfc, 0x0b, 0xb7, 0x69,
+    0xe9, 0x27, 0xbc, 0x65, 0xc3, 0xfa, 0x9b, 0xd0, 0xef, 0xfe,
+    0xe8, 0x1f, 0xb3, 0x5e, 0x34, 0xf4, 0x8c, 0xea, 0xfc, 0xd3,
+    0x81, 0xbf, 0x3d, 0x30, 0xb2, 0xb4, 0x01, 0xe8, 0x43, 0x0f,
+    0xba, 0x02, 0x23, 0x42, 0x76, 0x82, 0x31, 0x73, 0x91, 0xed,
+    0x07, 0x46, 0x61, 0x0d, 0x39, 0x83, 0x40, 0xce, 0x7a, 0xd4,
+    0xdb, 0x80, 0x2c, 0x1f, 0x0d, 0xd1, 0x34, 0xd4, 0x92, 0xe3,
+    0xd4, 0xf1, 0xc2, 0x01, 0x02, 0x03, 0x01, 0x00, 0x01, 0x02,
+    0x82, 0x02, 0x01, 0x00, 0x97, 0x6c, 0xda, 0x6e, 0xea, 0x4f,
+    0xcf, 0xaf, 0xf7, 0x4c, 0xd9, 0xf1, 0x90, 0x00, 0x77, 0xdb,
+    0xf2, 0x97, 0x76, 0x72, 0xb9, 0xb7, 0x47, 0xd1, 0x9c, 0xdd,
+    0xcb, 0x4a, 0x33, 0x6e, 0xc9, 0x75, 0x76, 0xe6, 0xe4, 0xa5,
+    0x31, 0x8c, 0x77, 0x13, 0xb4, 0x29, 0xcd, 0xf5, 0x52, 0x17,
+    0xef, 0xf3, 0x08, 0x00, 0xe3, 0xbd, 0x2e, 0xbc, 0xd4, 0x52,
+    0x88, 0xe9, 0x30, 0x75, 0x0b, 0x02, 0xf5, 0xcd, 0x89, 0x0c,
+    0x6c, 0x57, 0x19, 0x27, 0x3d, 0x1e, 0x85, 0xb4, 0xc1, 0x2f,
+    0x1d, 0x92, 0x00, 0x5c, 0x76, 0x29, 0x4b, 0xa4, 0xe1, 0x12,
+    0xb3, 0xc8, 0x09, 0xfe, 0x0e, 0x78, 0x72, 0x61, 0xcb, 0x61,
+    0x6f, 0x39, 0x91, 0x95, 0x4e, 0xd5, 0x3e, 0xc7, 0x8f, 0xb8,
+    0xf6, 0x36, 0xfe, 0x9c, 0x93, 0x9a, 0x38, 0x25, 0x7a, 0xf4,
+    0x4a, 0x12, 0xd4, 0xa0, 0x13, 0xbd, 0xf9, 0x1d, 0x12, 0x3e,
+    0x21, 0x39, 0xfb, 0x72, 0xe0, 0x05, 0x3d, 0xc3, 0xe5, 0x50,
+    0xa8, 0x5d, 0x85, 0xa3, 0xea, 0x5f, 0x1c, 0xb2, 0x3f, 0xea,
+    0x6d, 0x03, 0x91, 0x55, 0xd8, 0x19, 0x0a, 0x21, 0x12, 0x16,
+    0xd9, 0x12, 0xc4, 0xe6, 0x07, 0x18, 0x5b, 0x26, 0xa4, 0xae,
+    0xed, 0x2b, 0xb7, 0xa6, 0xed, 0xf8, 0xad, 0xec, 0x77, 0xe6,
+    0x7f, 0x4f, 0x76, 0x00, 0xc0, 0xfa, 0x15, 0x92, 0xb4, 0x2c,
+    0x22, 0xc2, 0xeb, 0x6a, 0xad, 0x14, 0x05, 0xb2, 0xe5, 0x8a,
+    0x9e, 0x85, 0x83, 0xcc, 0x04, 0xf1, 0x56, 0x78, 0x44, 0x5e,
+    0xde, 0xe0, 0x60, 0x1a, 0x65, 0x79, 0x31, 0x23, 0x05, 0xbb,
+    0x01, 0xff, 0xdd, 0x2e, 0xb7, 0xb3, 0xaa, 0x74, 0xe0, 0xa5,
+    0x94, 0xaf, 0x4b, 0xde, 0x58, 0x0f, 0x55, 0xde, 0x33, 0xf6,
+    0xe3, 0xd6, 0x34, 0x36, 0x57, 0xd6, 0x79, 0x91, 0x2e, 0xbe,
+    0x3b, 0xd9, 0x4e, 0xb6, 0x9d, 0x21, 0x5c, 0xd3, 0x48, 0x14,
+    0x7f, 0x4a, 0xc4, 0x60, 0xa9, 0x29, 0xf8, 0x53, 0x7f, 0x88,
+    0x11, 0x2d, 0xb5, 0xc5, 0x2d, 0x6f, 0xee, 0x85, 0x0b, 0xf7,
+    0x8d, 0x9a, 0xbe, 0xb0, 0x42, 0xf2, 0x2e, 0x71, 0xaf, 0x19,
+    0x31, 0x6d, 0xec, 0xcd, 0x6f, 0x2b, 0x23, 0xdf, 0xb4, 0x40,
+    0xaf, 0x2c, 0x0a, 0xc3, 0x1b, 0x7d, 0x7d, 0x03, 0x1d, 0x4b,
+    0xf3, 0xb5, 0xe0, 0x85, 0xd8, 0xdf, 0x91, 0x6b, 0x0a, 0x69,
+    0xf7, 0xf2, 0x69, 0x66, 0x5b, 0xf1, 0xcf, 0x46, 0x7d, 0xe9,
+    0x70, 0xfa, 0x6d, 0x7e, 0x75, 0x4e, 0xa9, 0x77, 0xe6, 0x8c,
+    0x02, 0xf7, 0x14, 0x4d, 0xa5, 0x41, 0x8f, 0x3f, 0xc1, 0x62,
+    0x1e, 0x71, 0x5e, 0x38, 0xb4, 0xd6, 0xe6, 0xe1, 0x4b, 0xc2,
+    0x2c, 0x30, 0x83, 0x81, 0x6f, 0x49, 0x2e, 0x96, 0xe6, 0xc9,
+    0x9a, 0xf7, 0x5d, 0x09, 0xa0, 0x55, 0x02, 0xa5, 0x3a, 0x25,
+    0x23, 0xd0, 0x92, 0xc3, 0xa3, 0xe3, 0x0e, 0x12, 0x2f, 0x4d,
+    0xef, 0xf3, 0x55, 0x5a, 0xbe, 0xe6, 0x19, 0x86, 0x31, 0xab,
+    0x75, 0x9a, 0xd3, 0xf0, 0x2c, 0xc5, 0x41, 0x92, 0xd9, 0x1f,
+    0x5f, 0x11, 0x8c, 0x75, 0x1c, 0x63, 0xd0, 0x02, 0x80, 0x2c,
+    0x68, 0xcb, 0x93, 0xfb, 0x51, 0x73, 0x49, 0xb4, 0x60, 0xda,
+    0xe2, 0x26, 0xaf, 0xa9, 0x46, 0x12, 0xb8, 0xec, 0x50, 0xdd,
+    0x12, 0x06, 0x5f, 0xce, 0x59, 0xe6, 0xf6, 0x1c, 0xe0, 0x54,
+    0x10, 0xad, 0xf6, 0xcd, 0x98, 0xcc, 0x0f, 0xfb, 0xcb, 0x41,
+    0x14, 0x9d, 0xed, 0xe4, 0xb4, 0x74, 0x5f, 0x09, 0x60, 0xc7,
+    0x12, 0xf6, 0x7b, 0x3c, 0x8f, 0xa7, 0x20, 0xbc, 0xe4, 0xb1,
+    0xef, 0xeb, 0xa4, 0x93, 0xc5, 0x06, 0xca, 0x9a, 0x27, 0x9d,
+    0x87, 0xf3, 0xde, 0xca, 0xe5, 0xe7, 0xf6, 0x1c, 0x01, 0x65,
+    0x5b, 0xfb, 0x19, 0x79, 0x6e, 0x08, 0x26, 0xc5, 0xc8, 0x28,
+    0x0e, 0xb6, 0x3b, 0x07, 0x08, 0xc1, 0x02, 0x82, 0x01, 0x01,
+    0x00, 0xe8, 0x1c, 0x73, 0xa6, 0xb8, 0xe0, 0x0e, 0x6d, 0x8d,
+    0x1b, 0xb9, 0x53, 0xed, 0x58, 0x94, 0xe6, 0x1d, 0x60, 0x14,
+    0x5c, 0x76, 0x43, 0xc4, 0x58, 0x19, 0xc4, 0x24, 0xe8, 0xbc,
+    0x1b, 0x3b, 0x0b, 0x13, 0x24, 0x45, 0x54, 0x0e, 0xcc, 0x37,
+    0xf0, 0xe0, 0x63, 0x7d, 0xc3, 0xf7, 0xfb, 0x81, 0x74, 0x81,
+    0xc4, 0x0f, 0x1a, 0x21, 0x48, 0xaf, 0xce, 0xc1, 0xc4, 0x94,
+    0x18, 0x06, 0x44, 0x8d, 0xd3, 0xd2, 0x22, 0x2d, 0x2d, 0x3e,
+    0x5a, 0x31, 0xdc, 0x95, 0x8e, 0xf4, 0x41, 0xfc, 0x58, 0xc9,
+    0x40, 0x92, 0x17, 0x5f, 0xe3, 0xda, 0xac, 0x9e, 0x3f, 0x1c,
+    0x2a, 0x6b, 0x58, 0x5f, 0x48, 0x78, 0x20, 0xb1, 0xaf, 0x24,
+    0x9b, 0x3c, 0x20, 0x8b, 0x93, 0x25, 0x9e, 0xe6, 0x6b, 0xbc,
+    0x13, 0x42, 0x14, 0x6c, 0x36, 0x31, 0xff, 0x7a, 0xd1, 0xc1,
+    0x1a, 0x26, 0x14, 0x7f, 0xa9, 0x76, 0xa7, 0x0c, 0xf8, 0xcc,
+    0xed, 0x07, 0x6a, 0xd2, 0xdf, 0x62, 0xee, 0x0a, 0x7c, 0x84,
+    0xcb, 0x49, 0x90, 0xb2, 0x03, 0x0d, 0xa2, 0x82, 0x06, 0x77,
+    0xf1, 0xcd, 0x67, 0xf2, 0x47, 0x21, 0x02, 0x3f, 0x43, 0x21,
+    0xf0, 0x46, 0x30, 0x62, 0x51, 0x72, 0xb1, 0xe7, 0x48, 0xc6,
+    0x67, 0x12, 0xcd, 0x9e, 0xd6, 0x15, 0xe5, 0x21, 0xed, 0xfa,
+    0x8f, 0x30, 0xa6, 0x41, 0xfe, 0xb6, 0xfa, 0x8f, 0x34, 0x14,
+    0x19, 0xe8, 0x11, 0xf7, 0xa5, 0x77, 0x3e, 0xb7, 0xf9, 0x39,
+    0x07, 0x8c, 0x67, 0x2a, 0xab, 0x7b, 0x08, 0xf8, 0xb0, 0x06,
+    0xa8, 0xea, 0x2f, 0x8f, 0xfa, 0xcc, 0xcc, 0x40, 0xce, 0xf3,
+    0x70, 0x4f, 0x3f, 0x7f, 0xe2, 0x0c, 0xea, 0x76, 0x4a, 0x35,
+    0x4e, 0x47, 0xad, 0x2b, 0xa7, 0x97, 0x5d, 0x74, 0x43, 0x97,
+    0x90, 0xd2, 0xfb, 0xd9, 0xf9, 0x96, 0x01, 0x33, 0x05, 0xed,
+    0x7b, 0x03, 0x05, 0xad, 0xf8, 0x49, 0x03, 0x02, 0x82, 0x01,
+    0x01, 0x00, 0xd4, 0x40, 0x17, 0x66, 0x10, 0x92, 0x95, 0xc8,
+    0xec, 0x62, 0xa9, 0x7a, 0xcb, 0x93, 0x8e, 0xe6, 0x53, 0xd4,
+    0x80, 0x48, 0x27, 0x4b, 0x41, 0xce, 0x61, 0xdf, 0xbf, 0x94,
+    0xa4, 0x3d, 0x71, 0x03, 0x0b, 0xed, 0x25, 0x71, 0x98, 0xa4,
+    0xd6, 0xd5, 0x4a, 0x57, 0xf5, 0x6c, 0x1b, 0xda, 0x21, 0x7d,
+    0x35, 0x45, 0xb3, 0xf3, 0x6a, 0xd9, 0xd3, 0x43, 0xe8, 0x5c,
+    0x54, 0x1c, 0x83, 0x1b, 0xb4, 0x5f, 0xf2, 0x97, 0x24, 0x2e,
+    0xdc, 0x40, 0xde, 0x92, 0x23, 0x59, 0x8e, 0xbc, 0xd2, 0xa1,
+    0xf2, 0xe0, 0x4c, 0xdd, 0x0b, 0xd1, 0xe7, 0xae, 0x65, 0xbc,
+    0xb5, 0xf5, 0x5b, 0x98, 0xe9, 0xd7, 0xc2, 0xb7, 0x0e, 0x55,
+    0x71, 0x0e, 0x3c, 0x0a, 0x24, 0x6b, 0xa6, 0xe6, 0x14, 0x61,
+    0x11, 0xfd, 0x33, 0x42, 0x99, 0x2b, 0x84, 0x77, 0x74, 0x92,
+    0x91, 0xf5, 0x79, 0x79, 0xcf, 0xad, 0x8e, 0x04, 0xef, 0x80,
+    0x1e, 0x57, 0xf4, 0x14, 0xf5, 0x35, 0x09, 0x74, 0xb2, 0x13,
+    0x71, 0x58, 0x6b, 0xea, 0x32, 0x5d, 0xf3, 0xd3, 0x76, 0x48,
+    0x39, 0x10, 0x23, 0x84, 0x9d, 0xbe, 0x92, 0x77, 0x4a, 0xed,
+    0x70, 0x3e, 0x1a, 0xa2, 0x6c, 0xb3, 0x81, 0x00, 0xc3, 0xc9,
+    0xe4, 0x52, 0xc8, 0x24, 0x88, 0x0c, 0x41, 0xad, 0x87, 0x5a,
+    0xea, 0xa3, 0x7a, 0x85, 0x1c, 0x5e, 0x31, 0x7f, 0xc3, 0x35,
+    0xc6, 0xfa, 0x10, 0xc8, 0x75, 0x10, 0xc4, 0x96, 0x99, 0xe7,
+    0xfe, 0x01, 0xb4, 0x74, 0xdb, 0xb4, 0x11, 0xc3, 0xc8, 0x8c,
+    0xf6, 0xf7, 0x3b, 0x66, 0x50, 0xfc, 0xdb, 0xeb, 0xca, 0x47,
+    0x85, 0x89, 0xe1, 0x65, 0xd9, 0x62, 0x34, 0x3c, 0x70, 0xd8,
+    0x2e, 0xb4, 0x2f, 0x65, 0x3c, 0x4a, 0xa6, 0x2a, 0xe7, 0xc7,
+    0xd8, 0x41, 0x8f, 0x8a, 0x43, 0xbf, 0x42, 0xf2, 0x4d, 0xbc,
+    0xfc, 0x9e, 0x27, 0x95, 0xfb, 0x75, 0xff, 0xab, 0x02, 0x82,
+    0x01, 0x00, 0x41, 0x2f, 0x44, 0x57, 0x6d, 0x12, 0x17, 0x5b,
+    0x32, 0xc6, 0xb7, 0x6c, 0x57, 0x7a, 0x8a, 0x0e, 0x79, 0xef,
+    0x72, 0xa8, 0x68, 0xda, 0x2d, 0x38, 0xe4, 0xbb, 0x8d, 0xf6,
+    0x02, 0x65, 0xcf, 0x56, 0x13, 0xe1, 0x1a, 0xcb, 0x39, 0x80,
+    0xa6, 0xb1, 0x32, 0x03, 0x1e, 0xdd, 0xbb, 0x35, 0xd9, 0xac,
+    0x43, 0x89, 0x31, 0x08, 0x90, 0x92, 0x5e, 0x35, 0x3d, 0x7b,
+    0x9c, 0x6f, 0x86, 0xcb, 0x17, 0xdd, 0x85, 0xe4, 0xed, 0x35,
+    0x08, 0x8e, 0xc1, 0xf4, 0x05, 0xd8, 0x68, 0xc6, 0x63, 0x3c,
+    0xf7, 0xff, 0xf7, 0x47, 0x33, 0x39, 0xc5, 0x3e, 0xb7, 0x0e,
+    0x58, 0x35, 0x9d, 0x81, 0xea, 0xf8, 0x6a, 0x2c, 0x1c, 0x5a,
+    0x68, 0x78, 0x64, 0x11, 0x6b, 0xc1, 0x3e, 0x4e, 0x7a, 0xbd,
+    0x84, 0xcb, 0x0f, 0xc2, 0xb6, 0x85, 0x1d, 0xd3, 0x76, 0xc5,
+    0x93, 0x6a, 0x69, 0x89, 0x56, 0x34, 0xdc, 0x4a, 0x9b, 0xbc,
+    0xff, 0xa8, 0x0d, 0x6e, 0x35, 0x9c, 0x60, 0xa7, 0x23, 0x30,
+    0xc7, 0x06, 0x64, 0x39, 0x8b, 0x94, 0x89, 0xee, 0xba, 0x7f,
+    0x60, 0x8d, 0xfa, 0xb6, 0x97, 0x76, 0xdc, 0x51, 0x4a, 0x3c,
+    0xeb, 0x3a, 0x14, 0x2c, 0x20, 0x60, 0x69, 0x4a, 0x86, 0xfe,
+    0x8c, 0x21, 0x84, 0x49, 0x54, 0xb3, 0x20, 0xe1, 0x01, 0x7f,
+    0x58, 0xdf, 0x7f, 0xb5, 0x21, 0x51, 0x8c, 0x47, 0x9f, 0x91,
+    0xeb, 0x97, 0x3e, 0xf2, 0x54, 0xcf, 0x16, 0x46, 0xf9, 0xd9,
+    0xb6, 0xe7, 0x64, 0xc9, 0xd0, 0x54, 0xea, 0x2f, 0xa1, 0xcf,
+    0xa5, 0x7f, 0x28, 0x8d, 0x84, 0xec, 0xd5, 0x39, 0x03, 0x76,
+    0x5b, 0x2d, 0x8e, 0x43, 0xf2, 0x01, 0x24, 0xc9, 0x6f, 0xc0,
+    0xf5, 0x69, 0x6f, 0x7d, 0xb5, 0x85, 0xd2, 0x5f, 0x7f, 0x78,
+    0x40, 0x07, 0x7f, 0x09, 0x15, 0xb5, 0x1f, 0x28, 0x65, 0x10,
+    0xe4, 0x19, 0xa8, 0xc6, 0x9e, 0x8d, 0xdc, 0xcb, 0x02, 0x82,
+    0x01, 0x00, 0x13, 0x01, 0xee, 0x56, 0x80, 0x93, 0x70, 0x00,
+    0x7f, 0x52, 0xd2, 0x94, 0xa1, 0x98, 0x84, 0x4a, 0x92, 0x25,
+    0x4c, 0x9b, 0xa9, 0x91, 0x2e, 0xc2, 0x79, 0xb7, 0x5c, 0xe3,
+    0xc5, 0xd5, 0x8e, 0xc2, 0x54, 0x16, 0x17, 0xad, 0x55, 0x9b,
+    0x25, 0x76, 0x12, 0x63, 0x50, 0x22, 0x2f, 0x58, 0x58, 0x79,
+    0x6b, 0x04, 0xe3, 0xf9, 0x9f, 0x8f, 0x04, 0x41, 0x67, 0x94,
+    0xa5, 0x1f, 0xac, 0x8a, 0x15, 0x9c, 0x26, 0x10, 0x6c, 0xf8,
+    0x19, 0x57, 0x61, 0xd7, 0x3a, 0x7d, 0x31, 0xb0, 0x2d, 0x38,
+    0xbd, 0x94, 0x62, 0xad, 0xc4, 0xfa, 0x36, 0x42, 0x42, 0xf0,
+    0x24, 0x67, 0x65, 0x9d, 0x8b, 0x0b, 0x7c, 0x6f, 0x82, 0x44,
+    0x1a, 0x8c, 0xc8, 0xc9, 0xab, 0xbb, 0x4c, 0x45, 0xfc, 0x7b,
+    0x38, 0xee, 0x30, 0xe1, 0xfc, 0xef, 0x8d, 0xbc, 0x58, 0xdf,
+    0x2b, 0x5d, 0x0d, 0x54, 0xe0, 0x49, 0x4d, 0x97, 0x99, 0x8f,
+    0x22, 0xa8, 0x83, 0xbe, 0x40, 0xbb, 0x50, 0x2e, 0x78, 0x28,
+    0x0f, 0x95, 0x78, 0x8c, 0x8f, 0x98, 0x24, 0x56, 0xc2, 0x97,
+    0xf3, 0x2c, 0x43, 0xd2, 0x03, 0x82, 0x66, 0x81, 0x72, 0x5f,
+    0x53, 0x16, 0xec, 0xb1, 0xb1, 0x04, 0x5e, 0x40, 0x20, 0x48,
+    0x7b, 0x3f, 0x02, 0x97, 0x6a, 0xeb, 0x96, 0x12, 0x21, 0x35,
+    0xfe, 0x1f, 0x47, 0xc0, 0x95, 0xea, 0xc5, 0x8a, 0x08, 0x84,
+    0x4f, 0x5e, 0x63, 0x94, 0x60, 0x0f, 0x71, 0x5b, 0x7f, 0x4a,
+    0xec, 0x4f, 0x60, 0xc6, 0xba, 0x4a, 0x24, 0xf1, 0x20, 0x8b,
+    0xa7, 0x2e, 0x3a, 0xce, 0x8d, 0xe0, 0x27, 0x1d, 0xb5, 0x8e,
+    0xb4, 0x21, 0xc5, 0xe2, 0xa6, 0x16, 0x0a, 0x51, 0x83, 0x55,
+    0x88, 0xd1, 0x30, 0x11, 0x63, 0xd5, 0xd7, 0x8d, 0xae, 0x16,
+    0x12, 0x82, 0xc4, 0x85, 0x00, 0x4e, 0x27, 0x83, 0xa5, 0x7c,
+    0x90, 0x2e, 0xe5, 0xa2, 0xa3, 0xd3, 0x4c, 0x63, 0x02, 0x82,
+    0x01, 0x01, 0x00, 0x86, 0x08, 0x98, 0x98, 0xa5, 0x00, 0x05,
+    0x39, 0x77, 0xd9, 0x66, 0xb3, 0xcf, 0xca, 0xa0, 0x71, 0xb3,
+    0x50, 0xce, 0x3d, 0xb1, 0x93, 0x95, 0x35, 0xc4, 0xd4, 0x2e,
+    0x90, 0xdf, 0x0f, 0xfc, 0x60, 0xc1, 0x94, 0x68, 0x61, 0x43,
+    0xca, 0x9a, 0x23, 0x4a, 0x1e, 0x45, 0x72, 0x99, 0xb5, 0x1e,
+    0x61, 0x8d, 0x77, 0x0f, 0xa0, 0xbb, 0xd7, 0x77, 0xb4, 0x2a,
+    0x15, 0x11, 0x88, 0x2d, 0xb3, 0x56, 0x61, 0x5e, 0x6a, 0xed,
+    0xa4, 0x46, 0x4a, 0x3f, 0x50, 0x11, 0xd6, 0xba, 0xb6, 0xd7,
+    0x95, 0x65, 0x53, 0xc3, 0xa1, 0x8f, 0xe0, 0xa3, 0xf5, 0x1c,
+    0xfd, 0xaf, 0x6e, 0x43, 0xd7, 0x17, 0xa7, 0xd3, 0x81, 0x1b,
+    0xa4, 0xdf, 0xe0, 0x97, 0x8a, 0x46, 0x03, 0xd3, 0x46, 0x0e,
+    0x83, 0x48, 0x4e, 0xd2, 0x02, 0xcb, 0xc0, 0xad, 0x79, 0x95,
+    0x8c, 0x96, 0xba, 0x40, 0x34, 0x11, 0x71, 0x5e, 0xe9, 0x11,
+    0xf9, 0xc5, 0x4a, 0x5e, 0x91, 0x9d, 0xf5, 0x92, 0x4f, 0xeb,
+    0xc6, 0x70, 0x02, 0x2d, 0x3d, 0x04, 0xaa, 0xe9, 0x3a, 0x8e,
+    0xd5, 0xa8, 0xad, 0xf7, 0xce, 0x0d, 0x16, 0xb2, 0xec, 0x0a,
+    0x9c, 0xf5, 0x94, 0x39, 0xb9, 0x8a, 0xfc, 0x1e, 0xf9, 0xcc,
+    0xf2, 0x5f, 0x21, 0x31, 0x74, 0x72, 0x6b, 0x64, 0xae, 0x35,
+    0x61, 0x8d, 0x0d, 0xcb, 0xe7, 0xda, 0x39, 0xca, 0xf3, 0x21,
+    0x66, 0x0b, 0x95, 0xd7, 0x0a, 0x7c, 0xca, 0xa1, 0xa9, 0x5a,
+    0xe8, 0xac, 0xe0, 0x71, 0x54, 0xaf, 0x28, 0xcf, 0xd5, 0x70,
+    0x89, 0xe0, 0xf3, 0x9e, 0x43, 0x6c, 0x8d, 0x7b, 0x99, 0x01,
+    0x68, 0x4d, 0xa1, 0x45, 0x46, 0x0c, 0x43, 0xbc, 0xcc, 0x2c,
+    0xdd, 0xc5, 0x46, 0xc8, 0x4e, 0x0e, 0xbe, 0xed, 0xb9, 0x26,
+    0xab, 0x2e, 0xdb, 0xeb, 0x8f, 0xff, 0xdb, 0xb0, 0xc6, 0x55,
+    0xaf, 0xf8, 0x2a, 0x91, 0x9d, 0x50, 0x44, 0x21, 0x17,
+};
+
+static unsigned char test7680[] = {
+    0x30, 0x82, 0x11, 0x09, 0x02, 0x01, 0x00, 0x02, 0x82, 0x03,
+    0xc1, 0x00, 0xe3, 0x27, 0x46, 0x99, 0xb5, 0x17, 0xab, 0xfa,
+    0x65, 0x05, 0x7a, 0x06, 0x81, 0x14, 0xce, 0x43, 0x21, 0x49,
+    0x0f, 0x08, 0xf1, 0x70, 0xb4, 0xc1, 0x10, 0xd1, 0x87, 0xf8,
+    0x29, 0x91, 0x36, 0x66, 0x2d, 0xbe, 0x7b, 0x1d, 0xa2, 0x0b,
+    0x20, 0x38, 0xd9, 0x8e, 0x78, 0x27, 0xcf, 0xb5, 0x45, 0x58,
+    0x3d, 0xf4, 0xda, 0xf0, 0xdc, 0x21, 0x17, 0x52, 0xcd, 0x68,
+    0xe2, 0x81, 0xac, 0x88, 0x61, 0x10, 0xbc, 0xb0, 0x7f, 0xe4,
+    0xf3, 0x78, 0xb7, 0x28, 0x6c, 0x5f, 0x5c, 0xc2, 0x8d, 0x3d,
+    0xb0, 0x87, 0x41, 0x15, 0x2e, 0x09, 0x5f, 0xea, 0x06, 0x7f,
+    0xe9, 0x35, 0x18, 0x90, 0x50, 0xad, 0xf6, 0xb9, 0xfd, 0x33,
+    0x02, 0x1a, 0x99, 0x9e, 0xa5, 0x7d, 0x2c, 0x3b, 0x24, 0xe7,
+    0x31, 0x35, 0x73, 0x9a, 0xb0, 0xfe, 0x03, 0xfc, 0xc6, 0x98,
+    0x78, 0xd9, 0x66, 0x95, 0xa5, 0x12, 0xbc, 0x1e, 0x82, 0xbc,
+    0xf1, 0xc5, 0x31, 0xcd, 0xa6, 0xb1, 0x0c, 0x02, 0xbf, 0x7f,
+    0xb7, 0xaf, 0x5f, 0xd6, 0xed, 0xf7, 0xc1, 0x59, 0x86, 0x3a,
+    0x35, 0x95, 0x54, 0x21, 0x8d, 0x6a, 0xb3, 0xd1, 0x2b, 0x71,
+    0xf5, 0xf1, 0x66, 0x00, 0xb1, 0x88, 0xee, 0x3b, 0xa4, 0x41,
+    0x52, 0x1a, 0xf5, 0x0e, 0x32, 0xb6, 0xbf, 0x52, 0xab, 0x51,
+    0x55, 0x91, 0x32, 0x4f, 0xaf, 0x91, 0xac, 0xf7, 0xff, 0x8e,
+    0x3b, 0x2b, 0x61, 0xe9, 0x6d, 0x1d, 0x68, 0x80, 0x90, 0x79,
+    0x34, 0x96, 0xca, 0x49, 0x43, 0x7c, 0x89, 0x4e, 0x5e, 0x31,
+    0xb5, 0xce, 0x01, 0x9b, 0x09, 0xaf, 0x92, 0x06, 0x24, 0xe7,
+    0x22, 0x35, 0xcc, 0xa2, 0x0b, 0xfb, 0x5b, 0x87, 0x65, 0x71,
+    0xff, 0x64, 0x3e, 0xf9, 0xe8, 0x33, 0xa0, 0xc3, 0x4e, 0xb2,
+    0x41, 0x98, 0x54, 0xeb, 0x13, 0x99, 0xfb, 0x32, 0x78, 0x7e,
+    0xda, 0x4f, 0xd3, 0x46, 0x6a, 0xb5, 0x78, 0x81, 0x3f, 0x04,
+    0x13, 0x5f, 0x67, 0xaf, 0x88, 0xa5, 0x9e, 0x0d, 0xc5, 0xf3,
+    0xe7, 0x4c, 0x51, 0xf5, 0x51, 0x4a, 0xa4, 0x58, 0x64, 0xd9,
+    0xa2, 0x32, 0x54, 0x36, 0xce, 0x38, 0xd8, 0xc2, 0x0e, 0x0d,
+    0x60, 0x8e, 0x32, 0x7f, 0x90, 0x8a, 0xbc, 0x88, 0xbe, 0x6a,
+    0xc0, 0x47, 0x0f, 0x02, 0x41, 0xff, 0x3b, 0x7e, 0xc5, 0xa6,
+    0x33, 0x1d, 0x19, 0xd1, 0xd5, 0x67, 0x6c, 0xbf, 0x16, 0xb0,
+    0x7e, 0x80, 0x10, 0xbf, 0x7f, 0xdd, 0xd0, 0xf4, 0xc3, 0x94,
+    0x2c, 0x9a, 0x2c, 0xda, 0x69, 0x4e, 0xd6, 0x7b, 0x40, 0x4d,
+    0x2a, 0x27, 0xcb, 0x5a, 0xe5, 0x2d, 0x3f, 0x7d, 0x51, 0x9d,
+    0x9f, 0x70, 0xde, 0x50, 0xb1, 0xd3, 0xd2, 0x38, 0x4d, 0x1c,
+    0xca, 0xc2, 0x1e, 0x80, 0xd0, 0x36, 0x82, 0x04, 0xe6, 0x17,
+    0x79, 0x9f, 0x2e, 0xc9, 0xed, 0x2b, 0xd5, 0x1b, 0xfa, 0x7d,
+    0x1a, 0x80, 0xb5, 0x0e, 0x2f, 0x05, 0xbe, 0x4a, 0x1b, 0xfe,
+    0x0a, 0xad, 0x01, 0xde, 0x91, 0xc8, 0xf9, 0x81, 0xbe, 0xc7,
+    0xaf, 0xe7, 0x87, 0xed, 0x9d, 0xb8, 0x6c, 0xad, 0x65, 0xed,
+    0x5e, 0xd3, 0x67, 0x8c, 0x62, 0x3a, 0xe7, 0xfd, 0x67, 0xe0,
+    0xbb, 0x57, 0xaf, 0x56, 0xeb, 0x4a, 0x58, 0x6e, 0xad, 0xf2,
+    0xbe, 0xc3, 0x70, 0x29, 0xf8, 0xeb, 0x68, 0x45, 0xa0, 0xbd,
+    0xcd, 0xa5, 0xb4, 0xd9, 0x01, 0xb7, 0x44, 0xeb, 0x97, 0xf3,
+    0x0c, 0x56, 0xe4, 0x26, 0xd0, 0xa5, 0xb1, 0xa3, 0x49, 0x6e,
+    0x88, 0xf2, 0x22, 0xe2, 0x7b, 0x58, 0x3a, 0xd9, 0x52, 0xa4,
+    0xb1, 0x4c, 0x5c, 0x7c, 0xf0, 0x88, 0x7b, 0x9f, 0x06, 0xe9,
+    0x32, 0x4e, 0xf2, 0x64, 0x83, 0x8b, 0xa2, 0xea, 0x1d, 0x25,
+    0xf1, 0x8d, 0x16, 0x8b, 0xe0, 0xab, 0xd2, 0xe9, 0xe4, 0x6b,
+    0x7d, 0x76, 0x98, 0x22, 0x53, 0x31, 0x6b, 0xcc, 0xf1, 0xe5,
+    0x1d, 0xd7, 0xa5, 0xb0, 0xea, 0x6b, 0x38, 0x14, 0x0c, 0x06,
+    0x10, 0x27, 0xd8, 0x33, 0xf3, 0x9a, 0xae, 0x94, 0xdd, 0x0b,
+    0xb4, 0x6d, 0xe5, 0x91, 0xdd, 0xf1, 0x0f, 0x27, 0xa4, 0x94,
+    0x55, 0xf0, 0xde, 0x07, 0x29, 0xe6, 0x3f, 0x26, 0x19, 0xa1,
+    0xdd, 0xd1, 0x06, 0x99, 0xda, 0x54, 0x23, 0x3c, 0xf5, 0x5c,
+    0x2e, 0x96, 0xa9, 0x21, 0x23, 0x25, 0x2e, 0x6f, 0xf1, 0xf9,
+    0x11, 0x54, 0xe5, 0x7b, 0xb9, 0x1f, 0x11, 0xe2, 0x9e, 0x6b,
+    0x61, 0x8b, 0xa3, 0x8b, 0xc1, 0x20, 0x9b, 0xfb, 0x51, 0xef,
+    0xbb, 0xb9, 0xf6, 0xaf, 0x66, 0xb3, 0x2c, 0x25, 0xef, 0x76,
+    0xcb, 0xbf, 0x7a, 0x93, 0x2f, 0xe1, 0x17, 0x56, 0xc1, 0x00,
+    0x33, 0xb5, 0xd9, 0x91, 0x05, 0x31, 0xcc, 0x72, 0xcd, 0x4a,
+    0x93, 0x9a, 0xe3, 0x21, 0x42, 0x9e, 0xb8, 0x4e, 0x6c, 0x27,
+    0x93, 0xf0, 0x7f, 0x22, 0xdb, 0xe5, 0xb3, 0xa3, 0xf7, 0xe7,
+    0x80, 0xbb, 0x91, 0xca, 0xf7, 0xe8, 0x52, 0xb8, 0x11, 0x64,
+    0x66, 0x25, 0x94, 0xf8, 0x6f, 0x0b, 0x3b, 0xb7, 0xff, 0x80,
+    0x9e, 0x36, 0xe9, 0x88, 0x2e, 0xab, 0x05, 0xbf, 0x99, 0x9f,
+    0x2b, 0x4f, 0xc6, 0xb1, 0x13, 0x5b, 0x06, 0xff, 0x0a, 0x7b,
+    0xbc, 0x7f, 0x07, 0xa0, 0x35, 0xc2, 0x2d, 0x44, 0x3e, 0xad,
+    0x44, 0xcb, 0x47, 0x18, 0x26, 0x71, 0x7b, 0x17, 0xc9, 0x6d,
+    0xb5, 0x4b, 0xcf, 0xdf, 0x14, 0x2c, 0x6c, 0xdf, 0x21, 0xce,
+    0x93, 0x49, 0x34, 0x69, 0x49, 0xfd, 0x3e, 0x71, 0x5b, 0xfa,
+    0x07, 0xc5, 0x7e, 0x5e, 0x54, 0x1a, 0x3c, 0xa6, 0x29, 0xb5,
+    0xbf, 0x0d, 0xf1, 0xc6, 0xa4, 0x61, 0xd6, 0x17, 0x1d, 0xf0,
+    0xa2, 0x78, 0x8f, 0xbc, 0x7e, 0x0c, 0xb4, 0xf0, 0x1e, 0x05,
+    0xea, 0xb5, 0xad, 0x68, 0x95, 0x0b, 0x27, 0xb4, 0x29, 0x7c,
+    0x70, 0x2a, 0x9a, 0x0a, 0x39, 0xd4, 0x76, 0xb7, 0x72, 0x30,
+    0x5e, 0xae, 0x9c, 0x4a, 0x55, 0xc7, 0x46, 0xd7, 0x5f, 0xbe,
+    0x10, 0x61, 0x25, 0x18, 0x7a, 0x9f, 0xd3, 0x05, 0x3d, 0x6f,
+    0x9a, 0x1e, 0xec, 0x2b, 0x03, 0xe0, 0x49, 0x6a, 0x9c, 0xd6,
+    0xdb, 0xc2, 0xa1, 0xe1, 0x0a, 0xbb, 0x31, 0x42, 0xc8, 0x43,
+    0x4e, 0x7c, 0xa9, 0x7c, 0x60, 0xea, 0xbe, 0xf1, 0x8b, 0xe8,
+    0xb2, 0x90, 0x83, 0x14, 0x21, 0xe4, 0xb3, 0x0d, 0x7c, 0x63,
+    0x3c, 0x98, 0x55, 0xc6, 0x44, 0xa6, 0xa8, 0x1e, 0x42, 0xb7,
+    0x89, 0xa8, 0xbd, 0xb8, 0x34, 0x3d, 0x09, 0x80, 0x99, 0x73,
+    0x9f, 0xaf, 0x17, 0x56, 0xf2, 0x73, 0x3e, 0x1e, 0x6e, 0xe9,
+    0x18, 0xa0, 0x5b, 0x69, 0xce, 0xfd, 0x3d, 0x77, 0x81, 0x95,
+    0x3b, 0xf1, 0xde, 0x26, 0xe9, 0x27, 0xef, 0x92, 0x2a, 0x97,
+    0xdc, 0x95, 0xa5, 0xa3, 0xb0, 0xfb, 0x96, 0x89, 0x4f, 0xe6,
+    0xc1, 0x42, 0x0b, 0xfd, 0xb4, 0x6d, 0x0a, 0x9f, 0x9b, 0x31,
+    0xd8, 0x21, 0x38, 0x8a, 0xee, 0xb6, 0x5c, 0x12, 0xa8, 0xb4,
+    0x07, 0x79, 0x41, 0xa7, 0x7f, 0x13, 0x74, 0xad, 0x0b, 0xee,
+    0x28, 0x52, 0xac, 0x2f, 0x4d, 0x30, 0x1c, 0xc5, 0xa6, 0xa5,
+    0x61, 0x42, 0xbd, 0xe1, 0x4f, 0xd3, 0xec, 0x66, 0xf2, 0x63,
+    0xf4, 0x93, 0xdb, 0x35, 0x2d, 0x3b, 0x71, 0x25, 0x09, 0xde,
+    0xda, 0x46, 0xda, 0xe2, 0xa7, 0xa3, 0xdf, 0xcd, 0xbf, 0x58,
+    0x05, 0x25, 0x02, 0x03, 0x01, 0x00, 0x01, 0x02, 0x82, 0x03,
+    0xc0, 0x5f, 0xd5, 0x15, 0x1b, 0x09, 0xe4, 0xa7, 0xc0, 0xa6,
+    0xd8, 0x0d, 0xa8, 0x2a, 0xd3, 0x1d, 0x46, 0x03, 0x07, 0xf0,
+    0x98, 0xe4, 0x4b, 0x99, 0x66, 0x8e, 0x72, 0xe7, 0xbb, 0x51,
+    0xc6, 0x1a, 0xbe, 0x36, 0xf4, 0x52, 0xba, 0xa8, 0xbf, 0xaa,
+    0xe3, 0x71, 0x1d, 0x83, 0x21, 0xc0, 0xa6, 0x88, 0x4f, 0xf7,
+    0x2b, 0x93, 0x26, 0xe4, 0xa7, 0xed, 0x50, 0x18, 0xaa, 0xf4,
+    0x4c, 0xa2, 0xfe, 0x92, 0x7c, 0xde, 0x2e, 0x54, 0x76, 0xc2,
+    0x25, 0x1e, 0x98, 0xa6, 0x48, 0x01, 0x39, 0x6f, 0x1f, 0x24,
+    0x97, 0x9b, 0x64, 0x95, 0x1c, 0x8d, 0x63, 0x8d, 0x44, 0x6f,
+    0x9d, 0xdf, 0xf4, 0x1a, 0xa5, 0x9a, 0x1e, 0xd3, 0x6c, 0xae,
+    0xa9, 0x8c, 0x3f, 0xfb, 0x2f, 0x78, 0xf6, 0xa6, 0xd6, 0x06,
+    0xd3, 0xb7, 0x26, 0xff, 0x1e, 0xdb, 0x8d, 0xcc, 0x37, 0x4d,
+    0x5c, 0xe2, 0xc3, 0xa5, 0x75, 0xe6, 0xf9, 0xb4, 0x4c, 0x84,
+    0x6f, 0x9e, 0x58, 0x55, 0xc8, 0x01, 0xfa, 0x32, 0xd2, 0x6e,
+    0x2b, 0x45, 0xf2, 0xc6, 0x48, 0xad, 0x40, 0xd8, 0xb9, 0x3c,
+    0x1b, 0xf8, 0xf7, 0x82, 0xd3, 0x0e, 0x73, 0xe3, 0xb1, 0x5b,
+    0x82, 0x71, 0x77, 0x3f, 0x6f, 0x36, 0x9a, 0xe0, 0xec, 0x51,
+    0xf8, 0x5f, 0x84, 0x92, 0xee, 0xb8, 0x7e, 0xe7, 0x1a, 0x14,
+    0x50, 0x82, 0x7a, 0x4d, 0xe6, 0xd6, 0xa3, 0x76, 0x24, 0x8a,
+    0x5f, 0xfe, 0x19, 0xdd, 0xd7, 0xf7, 0x5b, 0xae, 0x18, 0x04,
+    0x90, 0xcd, 0x5c, 0xe5, 0x64, 0xe8, 0x04, 0xb1, 0x06, 0xa5,
+    0xdd, 0xf8, 0x9d, 0x71, 0x13, 0xaa, 0x36, 0x7f, 0x61, 0x27,
+    0xf4, 0xac, 0x95, 0x7d, 0x1a, 0x99, 0x7d, 0xe0, 0xd5, 0x9c,
+    0x5a, 0xad, 0x9a, 0xff, 0x54, 0xb0, 0xb1, 0x55, 0x45, 0x2d,
+    0x19, 0x58, 0x52, 0x28, 0xdd, 0xe0, 0xb5, 0x65, 0x52, 0x97,
+    0x45, 0xf0, 0x2b, 0x98, 0x1f, 0x61, 0x6c, 0x9d, 0xaa, 0x59,
+    0x85, 0xf9, 0x97, 0x7b, 0xbd, 0xeb, 0x95, 0x81, 0xfb, 0x29,
+    0x8c, 0xf0, 0x52, 0xdf, 0xed, 0xee, 0xb2, 0x00, 0x32, 0x35,
+    0x14, 0xa8, 0xa4, 0xca, 0x91, 0xff, 0x18, 0xb7, 0x96, 0xfb,
+    0x32, 0x62, 0xa9, 0xa0, 0xd0, 0x77, 0x43, 0xf5, 0x99, 0xd1,
+    0xee, 0xe8, 0xad, 0x1a, 0x2c, 0xd4, 0xeb, 0xe1, 0xf5, 0x01,
+    0x41, 0x78, 0xc0, 0x27, 0x19, 0x50, 0x2e, 0xba, 0x22, 0xd1,
+    0xeb, 0xb3, 0xa5, 0x27, 0x0b, 0xec, 0xf9, 0x26, 0x7e, 0x1f,
+    0xe7, 0x17, 0x9f, 0x39, 0xa8, 0x72, 0x22, 0x63, 0x79, 0x6a,
+    0x9c, 0x89, 0x55, 0x9a, 0xb4, 0x61, 0x41, 0xbc, 0xaa, 0x14,
+    0x37, 0x29, 0x03, 0xc0, 0x52, 0x4e, 0x31, 0x44, 0x8f, 0x2e,
+    0x17, 0x81, 0x88, 0xf4, 0xce, 0xda, 0x41, 0xb8, 0xd5, 0x14,
+    0x91, 0x8c, 0xca, 0xd2, 0x0d, 0x99, 0x06, 0x09, 0xc2, 0xb7,
+    0xe8, 0xae, 0xfa, 0x01, 0xea, 0x99, 0x62, 0x68, 0xb6, 0xdf,
+    0xc8, 0x27, 0xae, 0xbf, 0xb0, 0x9b, 0x5b, 0x1a, 0xa2, 0xe2,
+    0x5a, 0x7a, 0xe5, 0x4b, 0x92, 0x1f, 0xff, 0x73, 0xae, 0x16,
+    0x40, 0x78, 0x42, 0x28, 0xbb, 0x13, 0x5e, 0xbc, 0x71, 0x7a,
+    0x78, 0x3e, 0xd8, 0x1b, 0xc2, 0x2c, 0xd6, 0xdc, 0xfa, 0x39,
+    0x72, 0xf8, 0xa2, 0x2c, 0x8b, 0x1c, 0x5d, 0xab, 0xb8, 0x07,
+    0xc7, 0xae, 0x29, 0x93, 0x68, 0xbf, 0x61, 0xe9, 0xa4, 0x37,
+    0x83, 0x7d, 0x13, 0xc7, 0x18, 0xf0, 0x7d, 0xa4, 0x20, 0x47,
+    0x14, 0x68, 0x95, 0x46, 0x56, 0x6d, 0xd5, 0x7b, 0xe1, 0x51,
+    0x8f, 0x96, 0xc1, 0x7b, 0x35, 0x09, 0x7a, 0x89, 0x0e, 0xdf,
+    0x12, 0xd5, 0xe1, 0x9c, 0x2a, 0x94, 0x95, 0x43, 0x93, 0x48,
+    0xa6, 0x23, 0xe6, 0xd8, 0xf2, 0xb8, 0x0e, 0xba, 0x6d, 0x61,
+    0x03, 0xaf, 0x40, 0x63, 0x2b, 0x2f, 0xee, 0x61, 0x4c, 0xc4,
+    0x70, 0x3d, 0x78, 0xc1, 0x4f, 0x8e, 0x0b, 0x9b, 0x06, 0x35,
+    0x6d, 0x6d, 0x83, 0x37, 0xbb, 0x39, 0x7d, 0x7f, 0x33, 0x93,
+    0xc4, 0xeb, 0x8e, 0xfc, 0xda, 0xf0, 0x54, 0xfe, 0x1d, 0xc4,
+    0xd3, 0x83, 0x99, 0xdf, 0x65, 0xee, 0x00, 0x7d, 0x86, 0x27,
+    0xd4, 0x3a, 0x6b, 0xe6, 0x82, 0x8e, 0x58, 0x2d, 0x03, 0x38,
+    0xef, 0x6c, 0x82, 0x87, 0x18, 0x3b, 0x47, 0xe7, 0xbc, 0xe1,
+    0x58, 0x70, 0x4d, 0x46, 0x96, 0x34, 0x60, 0x96, 0x15, 0x09,
+    0x3c, 0x84, 0x40, 0xaf, 0x80, 0x32, 0x75, 0xc7, 0x23, 0x6c,
+    0xfb, 0x1d, 0x57, 0x73, 0x19, 0x09, 0xe8, 0x1a, 0x4c, 0x02,
+    0x5c, 0x7e, 0x4e, 0xbe, 0x75, 0xf8, 0x73, 0xff, 0x2d, 0x54,
+    0x19, 0x55, 0xf5, 0xf4, 0x1b, 0xc9, 0xbc, 0xc2, 0x19, 0xcb,
+    0xb7, 0x4e, 0x6a, 0x0d, 0xff, 0xca, 0x7d, 0xd0, 0x88, 0x91,
+    0x8b, 0x9b, 0x21, 0xa4, 0xa2, 0x43, 0x0d, 0xbc, 0x9e, 0x73,
+    0x7d, 0x54, 0x7d, 0x95, 0xcc, 0x63, 0x5e, 0xc1, 0xb8, 0xe6,
+    0x27, 0xff, 0x20, 0x07, 0xe8, 0x6e, 0x7e, 0xf2, 0x0f, 0x5a,
+    0x09, 0xef, 0xe5, 0x4d, 0x80, 0x39, 0x95, 0xd5, 0xf4, 0xee,
+    0x3b, 0xca, 0x7c, 0x73, 0xf8, 0x39, 0x5a, 0xc1, 0x1d, 0x7d,
+    0x94, 0x72, 0x32, 0xad, 0x58, 0xe2, 0xfc, 0x71, 0x6e, 0x66,
+    0xaa, 0xa1, 0x59, 0xd6, 0xac, 0xab, 0xbe, 0x8c, 0x53, 0x99,
+    0xcd, 0xe8, 0x2d, 0xb5, 0xb3, 0x46, 0x58, 0x2e, 0x16, 0xd7,
+    0x4d, 0x8b, 0x7d, 0x4a, 0xb1, 0x4c, 0x85, 0x91, 0x1b, 0x57,
+    0x54, 0xf8, 0x14, 0x59, 0xdb, 0xc4, 0x2c, 0x9c, 0x08, 0x6d,
+    0x3d, 0xd7, 0xf6, 0xa6, 0xe6, 0xb3, 0x2a, 0xe7, 0x29, 0x1c,
+    0xab, 0xb4, 0xed, 0x13, 0x19, 0xf8, 0xb6, 0x60, 0x92, 0x44,
+    0x53, 0xd4, 0xa9, 0x7e, 0xba, 0x21, 0xa2, 0xdc, 0x6e, 0xa5,
+    0x5e, 0x53, 0x59, 0x3c, 0x52, 0x61, 0x7b, 0x5f, 0x19, 0xad,
+    0xc8, 0x6d, 0x68, 0x8d, 0x7a, 0xc9, 0xd6, 0xef, 0xeb, 0x67,
+    0x4f, 0xca, 0xe7, 0xf6, 0x29, 0x36, 0x97, 0xfb, 0x3e, 0x37,
+    0x95, 0x85, 0x71, 0x70, 0xf6, 0x63, 0x86, 0x2a, 0x29, 0xd7,
+    0x9a, 0x96, 0x76, 0xa7, 0x47, 0x98, 0x4e, 0x06, 0x31, 0xaf,
+    0xf3, 0x4f, 0x2a, 0x65, 0x90, 0x6a, 0x4b, 0x8e, 0x43, 0x79,
+    0xe2, 0xdd, 0xce, 0x08, 0x1c, 0x01, 0xec, 0x38, 0x41, 0xdd,
+    0x19, 0xd8, 0xf3, 0x36, 0x03, 0x35, 0x03, 0xaf, 0x1c, 0x45,
+    0x3c, 0xac, 0x13, 0xaa, 0x36, 0x16, 0x48, 0x77, 0xb3, 0xbe,
+    0xa3, 0xb3, 0x9d, 0x7f, 0x20, 0xca, 0x74, 0x65, 0xac, 0x93,
+    0xa7, 0x54, 0xad, 0xc8, 0x68, 0x0e, 0xf8, 0x44, 0x1f, 0xad,
+    0x2c, 0xb7, 0x9a, 0x9a, 0x07, 0xe5, 0xcd, 0x87, 0xe0, 0x14,
+    0xb5, 0xaf, 0xd3, 0xd7, 0xcf, 0x13, 0x9f, 0x3b, 0xbd, 0xfe,
+    0x29, 0x0b, 0x72, 0xf5, 0x4c, 0x54, 0x94, 0xc7, 0x66, 0xec,
+    0xa8, 0x41, 0x96, 0x3d, 0x17, 0xed, 0x19, 0xc0, 0x82, 0x3e,
+    0x5f, 0x9a, 0x91, 0xfe, 0xd1, 0x2f, 0xb8, 0x94, 0xaa, 0x58,
+    0x68, 0x95, 0x31, 0x87, 0x57, 0x9a, 0x75, 0x94, 0x4d, 0x38,
+    0x7d, 0x56, 0x82, 0x81, 0x9c, 0xb9, 0x34, 0x2b, 0xe7, 0x40,
+    0xd9, 0x3c, 0x77, 0x5b, 0x95, 0x51, 0x06, 0x11, 0x41, 0xe3,
+    0x8b, 0xb7, 0x32, 0xeb, 0xe1, 0x05, 0x1b, 0x10, 0xa8, 0x0e,
+    0xa1, 0x02, 0x82, 0x01, 0xe1, 0x00, 0xfa, 0x38, 0x34, 0xfe,
+    0x55, 0x87, 0x71, 0x62, 0x47, 0x00, 0x33, 0x64, 0x67, 0x70,
+    0x79, 0x76, 0xdf, 0xfe, 0xc3, 0x28, 0x38, 0xdf, 0x90, 0xd4,
+    0xc0, 0xee, 0x98, 0xbf, 0x9d, 0x9b, 0x85, 0xd8, 0x61, 0x65,
+    0xa5, 0x70, 0xf5, 0xd2, 0x2c, 0xbf, 0x2f, 0xb5, 0x55, 0x79,
+    0x92, 0x13, 0xba, 0x4d, 0x3c, 0x39, 0xbf, 0xd5, 0x31, 0x13,
+    0x7a, 0x31, 0xf4, 0x8b, 0xce, 0xf8, 0xd0, 0xd3, 0x9b, 0xe2,
+    0xee, 0x31, 0xdb, 0xba, 0xcc, 0x1a, 0xba, 0x1c, 0x8d, 0xee,
+    0xea, 0xcb, 0xd3, 0x5a, 0xad, 0x87, 0xd6, 0xf9, 0x15, 0x2f,
+    0x6e, 0x00, 0x06, 0x74, 0x25, 0x8d, 0xff, 0xc8, 0xa6, 0x11,
+    0x1c, 0xe8, 0x16, 0x1a, 0xde, 0x53, 0x05, 0xb9, 0x53, 0x55,
+    0x28, 0x83, 0x3d, 0xbe, 0x61, 0x0c, 0xc4, 0x98, 0x7d, 0xf6,
+    0xec, 0x36, 0xc3, 0xe5, 0xe7, 0x1d, 0x14, 0x64, 0xcb, 0x0d,
+    0x62, 0x5d, 0x7a, 0xcd, 0x88, 0xfc, 0x66, 0x4e, 0xf9, 0x36,
+    0x47, 0x95, 0x18, 0x3a, 0x48, 0x2a, 0xff, 0x62, 0x8f, 0x6c,
+    0xe2, 0xc2, 0xe9, 0xd3, 0x6a, 0x45, 0x5c, 0xf5, 0x89, 0x53,
+    0x5c, 0xbe, 0xcf, 0xad, 0x87, 0x22, 0x9c, 0x31, 0x48, 0xdb,
+    0xd8, 0xe4, 0xe5, 0x38, 0xae, 0xc2, 0xb0, 0xd2, 0xba, 0xb7,
+    0x30, 0x53, 0x2d, 0xb1, 0x35, 0xf1, 0x58, 0x0f, 0x8a, 0x06,
+    0x51, 0x76, 0xb9, 0x2c, 0x32, 0xe0, 0xd1, 0xaa, 0x82, 0x34,
+    0x69, 0x71, 0x1c, 0x5f, 0x35, 0xa8, 0x9d, 0x11, 0xac, 0x13,
+    0xdb, 0x7b, 0xf6, 0x93, 0xe3, 0xb9, 0xbd, 0xd9, 0xb2, 0x86,
+    0xff, 0x61, 0x88, 0x2b, 0x72, 0x5c, 0x84, 0xe1, 0x0c, 0x72,
+    0xab, 0x44, 0xff, 0x23, 0x13, 0xaf, 0xd1, 0x5a, 0xd3, 0xea,
+    0x73, 0xfe, 0xd5, 0xa4, 0x7d, 0x9e, 0x4e, 0xac, 0x03, 0x93,
+    0x72, 0x14, 0x2d, 0x96, 0x6f, 0xee, 0xb4, 0xcd, 0x4e, 0xab,
+    0xea, 0x71, 0x93, 0x81, 0xe0, 0x3d, 0xcd, 0x61, 0x96, 0x25,
+    0x76, 0xbd, 0xc4, 0xb5, 0xdd, 0x7c, 0xf1, 0xb9, 0xe1, 0x2c,
+    0x58, 0x1b, 0xa4, 0x46, 0x4b, 0x12, 0x57, 0x58, 0xaa, 0x3a,
+    0xae, 0x89, 0xa3, 0xb3, 0xcf, 0x1f, 0x8d, 0x67, 0xdf, 0x6d,
+    0x7e, 0x8e, 0xfa, 0xc5, 0x09, 0x73, 0x46, 0x56, 0x55, 0x90,
+    0xeb, 0x77, 0x4e, 0x16, 0x4f, 0x68, 0x7b, 0x1f, 0x61, 0x23,
+    0xec, 0xa9, 0x71, 0x30, 0x33, 0x25, 0xc7, 0x4e, 0x26, 0x2e,
+    0x4e, 0x2b, 0xc2, 0x64, 0x5f, 0xf5, 0x8f, 0x7a, 0x4b, 0x1c,
+    0x06, 0xb3, 0x91, 0xf6, 0x9b, 0x51, 0xb7, 0xb0, 0x64, 0x72,
+    0x04, 0xe5, 0xfa, 0x14, 0x2f, 0xed, 0x61, 0x29, 0x03, 0x73,
+    0x19, 0x15, 0x6e, 0x2c, 0x8b, 0x0e, 0xec, 0x4d, 0xf1, 0xe3,
+    0x6f, 0x58, 0x7c, 0xc9, 0x48, 0x67, 0x3f, 0x51, 0xb5, 0xb7,
+    0x26, 0x46, 0xa7, 0x25, 0x79, 0x55, 0xfe, 0x3a, 0x44, 0xb4,
+    0x44, 0xfc, 0xb8, 0x14, 0x34, 0x47, 0xd7, 0xa3, 0x0e, 0x76,
+    0xe7, 0x83, 0x9a, 0x02, 0xc3, 0xcf, 0x2b, 0xd9, 0x83, 0x93,
+    0xd5, 0xee, 0x99, 0x74, 0x45, 0x62, 0x23, 0xa6, 0x02, 0xc9,
+    0xc0, 0x10, 0x70, 0x0a, 0x99, 0x29, 0x0c, 0x79, 0x04, 0x4c,
+    0x77, 0x21, 0x96, 0xf0, 0xa5, 0x17, 0x22, 0xbe, 0xab, 0x9b,
+    0xd7, 0x42, 0xd3, 0xe9, 0xc0, 0x42, 0x44, 0x7d, 0x9d, 0xc9,
+    0x3d, 0xf9, 0x36, 0x97, 0x1b, 0x75, 0x52, 0x8f, 0xe9, 0xb9,
+    0x8c, 0xa7, 0x64, 0x19, 0x5b, 0x5d, 0x60, 0xb4, 0x42, 0x95,
+    0xc9, 0xdb, 0x82, 0x03, 0xc6, 0xb0, 0x28, 0x72, 0x64, 0x03,
+    0x41, 0x4d, 0x8f, 0xc6, 0xd0, 0xcd, 0x02, 0x82, 0x01, 0xe1,
+    0x00, 0xe8, 0x66, 0xa7, 0xf9, 0x0f, 0x5a, 0x21, 0xfc, 0x88,
+    0x4e, 0x91, 0xd5, 0x4a, 0xf0, 0xf4, 0x32, 0xe5, 0x0d, 0xf3,
+    0x06, 0x95, 0xd0, 0x4e, 0x47, 0x0c, 0x04, 0x66, 0x77, 0xfd,
+    0xb8, 0x93, 0x0d, 0xff, 0x8f, 0x97, 0xa0, 0x4a, 0x36, 0x37,
+    0xa6, 0x5e, 0x95, 0x79, 0xc8, 0xb2, 0x21, 0x98, 0x81, 0xf1,
+    0xb8, 0xf4, 0x52, 0xaf, 0x3c, 0x8c, 0x86, 0x85, 0x55, 0x56,
+    0xfc, 0x90, 0xe3, 0x32, 0x50, 0x7c, 0x54, 0x07, 0x9e, 0xed,
+    0xfc, 0xd4, 0xb9, 0x5c, 0x98, 0x22, 0xfb, 0x72, 0xd7, 0x83,
+    0xf0, 0xd1, 0x61, 0x10, 0xbd, 0x68, 0x5d, 0x72, 0xc1, 0xce,
+    0x92, 0x43, 0x77, 0x9f, 0xb8, 0x8d, 0x8e, 0xf2, 0xe3, 0x62,
+    0x4a, 0x93, 0x03, 0xd3, 0xd9, 0x01, 0xa8, 0x99, 0x6f, 0xa3,
+    0x4c, 0x6d, 0x7a, 0xf2, 0x9e, 0x8e, 0x6b, 0xbc, 0xe4, 0x9d,
+    0x8e, 0xe7, 0x25, 0x86, 0xa4, 0xa9, 0xc2, 0xef, 0xdf, 0xbb,
+    0x6e, 0x3d, 0x4b, 0x57, 0x95, 0x81, 0x6f, 0x68, 0x3f, 0x19,
+    0xa8, 0xff, 0x5a, 0x08, 0x7a, 0xe4, 0x4c, 0x4e, 0xb4, 0xea,
+    0xf4, 0xc8, 0x2f, 0xef, 0x8c, 0x5e, 0xcd, 0x62, 0x1c, 0x8c,
+    0x93, 0x60, 0x5d, 0xa3, 0x11, 0x64, 0x0b, 0xeb, 0x6d, 0x21,
+    0xbc, 0x3a, 0x5b, 0x5c, 0x0c, 0xa7, 0x8a, 0xc6, 0xa8, 0xe1,
+    0x48, 0x81, 0x01, 0xb5, 0x65, 0xab, 0x2e, 0xbe, 0x38, 0x94,
+    0xf7, 0xa6, 0x33, 0xc1, 0x6e, 0x0b, 0x88, 0x38, 0xe7, 0x1b,
+    0x04, 0x9a, 0x10, 0x2d, 0x1d, 0x3f, 0x5f, 0x5f, 0xc8, 0xef,
+    0xcd, 0xc5, 0x16, 0xdc, 0x84, 0xc0, 0x66, 0xe0, 0xa3, 0xfc,
+    0xfa, 0x96, 0xc7, 0xb7, 0xec, 0x4f, 0x40, 0x0a, 0xc5, 0xbe,
+    0x6d, 0x39, 0x4a, 0x7e, 0x91, 0x4f, 0xe1, 0x03, 0xd2, 0x39,
+    0xbc, 0x87, 0x69, 0xa1, 0xf0, 0x6d, 0x11, 0xf5, 0xb4, 0x9d,
+    0xae, 0x76, 0x6b, 0xc6, 0xbf, 0xe4, 0x47, 0xbc, 0x4d, 0x13,
+    0x88, 0xa8, 0x83, 0xf5, 0xae, 0x1d, 0xfb, 0x4d, 0x4c, 0x44,
+    0x03, 0xd8, 0xa4, 0x2e, 0x4d, 0xf8, 0x5f, 0x45, 0x94, 0x58,
+    0xd7, 0xd9, 0x4b, 0x47, 0xd8, 0xfc, 0x35, 0x05, 0xed, 0xb4,
+    0xb6, 0xc2, 0x36, 0x2e, 0xba, 0xd2, 0x7a, 0xba, 0x69, 0x34,
+    0xbf, 0xf1, 0xa1, 0x5e, 0x17, 0x71, 0x89, 0xd3, 0x54, 0x57,
+    0x05, 0x2b, 0x82, 0xe3, 0x0a, 0x64, 0x5c, 0x3b, 0x8c, 0x6b,
+    0xc7, 0x10, 0x8a, 0xb5, 0xd3, 0xd7, 0x90, 0xeb, 0xdb, 0x1d,
+    0xa0, 0xbf, 0x6b, 0xea, 0xcd, 0x31, 0x7a, 0x8d, 0x64, 0xcc,
+    0x58, 0xc0, 0x07, 0xa4, 0x6e, 0x14, 0x0b, 0xf3, 0xea, 0x3e,
+    0x87, 0x9f, 0x7c, 0xb8, 0x1c, 0x22, 0x26, 0x8a, 0x7d, 0x90,
+    0xdd, 0x57, 0x28, 0x38, 0xcc, 0x0e, 0x71, 0x92, 0x89, 0xee,
+    0x79, 0x88, 0xbc, 0x05, 0x21, 0xda, 0x42, 0x92, 0x52, 0x66,
+    0xac, 0x4a, 0xe5, 0xf5, 0x6e, 0x47, 0xd5, 0xba, 0x37, 0xd3,
+    0x7c, 0x89, 0xd4, 0xd8, 0x6f, 0xde, 0x63, 0x44, 0xb5, 0x88,
+    0xdd, 0xb1, 0x30, 0xb4, 0x6d, 0xcd, 0xbf, 0xc8, 0x34, 0x27,
+    0x59, 0x7d, 0x79, 0xdc, 0x96, 0x5b, 0x8e, 0xc0, 0x87, 0xc0,
+    0x4e, 0x40, 0x07, 0x13, 0x91, 0x6b, 0x3a, 0x12, 0x03, 0x64,
+    0x70, 0xaf, 0x80, 0x24, 0x1c, 0x5c, 0xfb, 0xf5, 0xc0, 0x74,
+    0x5e, 0xaf, 0x06, 0x18, 0x04, 0x67, 0x4a, 0xbd, 0xac, 0xd7,
+    0xca, 0xbe, 0x4e, 0xa1, 0x19, 0x48, 0x7d, 0xa6, 0x59, 0xf6,
+    0x1a, 0x62, 0x50, 0x53, 0x46, 0xa4, 0x5b, 0x9c, 0x5a, 0xfd,
+    0x89, 0x9d, 0xd4, 0xde, 0xf4, 0xa7, 0x3d, 0x88, 0x73, 0xa5,
+    0xb9, 0x02, 0x82, 0x01, 0xe1, 0x00, 0xe7, 0x70, 0x59, 0xc3,
+    0xed, 0xc4, 0x6b, 0xa1, 0xa5, 0x5e, 0x90, 0x2a, 0x8c, 0x6a,
+    0xc2, 0x4e, 0xab, 0xfc, 0xee, 0xf2, 0x23, 0x38, 0xd6, 0xb3,
+    0x93, 0x08, 0x9e, 0x0c, 0x8e, 0x71, 0x2d, 0xa9, 0xe8, 0xdc,
+    0xa5, 0xdc, 0x07, 0xe3, 0xb1, 0x33, 0xdd, 0xa2, 0xf2, 0x3e,
+    0x92, 0x58, 0xe0, 0xf7, 0x53, 0x7f, 0x6e, 0xea, 0x78, 0x8c,
+    0x35, 0x78, 0x43, 0x63, 0x95, 0xbb, 0x1b, 0x1c, 0xbf, 0x91,
+    0x75, 0x14, 0x74, 0xd3, 0x20, 0xba, 0x8f, 0xee, 0x9d, 0x71,
+    0xa1, 0x87, 0x8a, 0x24, 0xd3, 0x61, 0x53, 0xfb, 0xec, 0x16,
+    0x84, 0xbe, 0x4d, 0x39, 0xdd, 0x0a, 0xac, 0xce, 0x20, 0x9c,
+    0xaf, 0x8a, 0x13, 0xf8, 0x22, 0x2f, 0xd4, 0x99, 0x88, 0x74,
+    0xba, 0x16, 0x3a, 0x63, 0xff, 0x4c, 0x5a, 0x03, 0x5a, 0x6f,
+    0xac, 0x29, 0x33, 0xa5, 0x50, 0xd1, 0xda, 0xed, 0x27, 0xcb,
+    0x67, 0x72, 0x63, 0x85, 0xfc, 0xf0, 0xc8, 0x88, 0xbf, 0x85,
+    0xef, 0x4b, 0xfe, 0xae, 0xd9, 0xd5, 0xbb, 0x86, 0xa4, 0x76,
+    0xe8, 0x7f, 0xb4, 0xdb, 0xb1, 0xee, 0x1a, 0x7f, 0x99, 0xd7,
+    0x9b, 0x6f, 0x7a, 0x94, 0x5c, 0xec, 0x2c, 0x60, 0x81, 0xad,
+    0xa7, 0xbe, 0x80, 0x2e, 0x9f, 0xa6, 0xc0, 0xfb, 0x09, 0x6d,
+    0x2b, 0xab, 0xa4, 0x15, 0xc7, 0x79, 0x46, 0x24, 0x89, 0x5c,
+    0x32, 0xb9, 0x87, 0xa9, 0x54, 0x1e, 0x12, 0x90, 0x8e, 0x02,
+    0x80, 0x8c, 0xf8, 0xdb, 0x2f, 0xbc, 0x98, 0x1b, 0xa2, 0x78,
+    0x73, 0x89, 0x03, 0x97, 0xe3, 0x09, 0x08, 0x8b, 0x75, 0xcf,
+    0xdc, 0x23, 0x90, 0x59, 0xef, 0x5b, 0x98, 0x24, 0xb8, 0xe8,
+    0xcf, 0x75, 0xf0, 0x2f, 0xb7, 0xa3, 0xe6, 0x17, 0x06, 0xf0,
+    0x52, 0xfe, 0x21, 0x0a, 0x16, 0x8e, 0xf8, 0xe1, 0xae, 0x25,
+    0x11, 0x5d, 0x8c, 0x95, 0x1b, 0x4f, 0x45, 0xb8, 0xa8, 0xcd,
+    0xe6, 0xf9, 0xca, 0xa0, 0x54, 0x93, 0x95, 0x86, 0x6f, 0xe4,
+    0x93, 0x22, 0x0f, 0xf2, 0xcf, 0xbd, 0x23, 0xb0, 0xf4, 0x8f,
+    0x99, 0xa7, 0x67, 0x99, 0x05, 0x13, 0x1f, 0xeb, 0x88, 0xf8,
+    0xe2, 0x3b, 0xb9, 0x49, 0x35, 0x89, 0x4f, 0xb8, 0x06, 0x37,
+    0x36, 0xda, 0x75, 0x25, 0x0f, 0x0a, 0xaa, 0xc2, 0x6c, 0x3e,
+    0xb1, 0x2d, 0x16, 0xf3, 0x17, 0xdb, 0xe2, 0x16, 0x32, 0x39,
+    0x92, 0x4b, 0x5f, 0xc0, 0x5f, 0x6e, 0xd0, 0x1c, 0x7e, 0xc0,
+    0x51, 0xd9, 0xb3, 0xe2, 0x37, 0xc7, 0xe0, 0x40, 0x13, 0x7d,
+    0x06, 0xcd, 0xcd, 0x72, 0xb6, 0x53, 0x2d, 0x7e, 0x60, 0x49,
+    0xfe, 0x31, 0xe1, 0xd0, 0x0e, 0x4c, 0x98, 0x93, 0xe0, 0xf6,
+    0xf2, 0xfa, 0x99, 0x7f, 0x65, 0xd8, 0x15, 0xc6, 0x3a, 0xb8,
+    0x4d, 0x63, 0x21, 0x78, 0xe4, 0x19, 0x6b, 0xbd, 0xde, 0x40,
+    0x5b, 0x8c, 0xfa, 0x49, 0x75, 0x23, 0x8f, 0x14, 0xc2, 0x3b,
+    0xa3, 0x9b, 0xc5, 0x80, 0x1a, 0xa3, 0x60, 0xd7, 0x17, 0x27,
+    0xf0, 0x18, 0x0f, 0xba, 0x02, 0xf7, 0x7a, 0xed, 0xa4, 0x00,
+    0x77, 0xde, 0x4b, 0xdd, 0xf9, 0xd7, 0x3e, 0x75, 0xed, 0x1a,
+    0x43, 0x26, 0x71, 0x1b, 0xbc, 0x72, 0xf5, 0x70, 0x72, 0x03,
+    0x70, 0x25, 0x87, 0x81, 0x6a, 0x92, 0x2d, 0xb7, 0x02, 0xf0,
+    0x10, 0x79, 0x65, 0x9d, 0x4e, 0x11, 0x7d, 0x5c, 0x5b, 0x37,
+    0xaa, 0xb4, 0xfa, 0x43, 0x66, 0x48, 0x6c, 0x67, 0x64, 0x9e,
+    0x15, 0x75, 0x36, 0xe7, 0x25, 0x55, 0x07, 0x7f, 0x74, 0x1f,
+    0x2c, 0x28, 0x76, 0xe7, 0x9b, 0x3d, 0x91, 0x0b, 0xcd, 0x6a,
+    0x1d, 0x5a, 0xea, 0x63, 0xd0, 0xf9, 0x02, 0x82, 0x01, 0xe0,
+    0x3e, 0x31, 0xf2, 0xf4, 0x29, 0x92, 0xa2, 0x93, 0xd5, 0xda,
+    0xc9, 0x16, 0x7e, 0xf6, 0xdb, 0x33, 0x9f, 0xaf, 0x4b, 0x01,
+    0xd1, 0x28, 0x2d, 0x3a, 0xc0, 0x51, 0x91, 0x26, 0xbd, 0xa5,
+    0x1e, 0xdd, 0xd9, 0x2e, 0x11, 0x93, 0x19, 0x29, 0x47, 0x5d,
+    0x63, 0xe4, 0xb6, 0xf1, 0xea, 0x12, 0x29, 0xa1, 0x65, 0x12,
+    0x6d, 0x78, 0x8f, 0x63, 0x31, 0xec, 0x72, 0x54, 0x73, 0x72,
+    0x26, 0x48, 0x57, 0x57, 0xc8, 0xde, 0x28, 0x27, 0xf5, 0x62,
+    0xfb, 0x7f, 0x1b, 0xf3, 0xaf, 0x31, 0x01, 0xfc, 0x01, 0x58,
+    0x7a, 0x80, 0x72, 0x9d, 0x6e, 0x07, 0xcc, 0x45, 0x67, 0xc6,
+    0x26, 0xfe, 0x25, 0xa5, 0x9b, 0x64, 0xcd, 0x45, 0xe3, 0x31,
+    0x38, 0x05, 0x07, 0x36, 0x05, 0x46, 0x9c, 0xc1, 0x8e, 0xbf,
+    0x4e, 0x71, 0x5f, 0xea, 0xe5, 0x0c, 0x9a, 0x41, 0xc8, 0x94,
+    0xcc, 0xf1, 0x73, 0x06, 0x30, 0x54, 0x76, 0x23, 0xb7, 0x22,
+    0x7a, 0x8e, 0xe6, 0x42, 0xa1, 0xa0, 0x32, 0x12, 0xe9, 0x08,
+    0x1c, 0x46, 0x79, 0x0c, 0x82, 0x7a, 0x95, 0x79, 0xbf, 0x83,
+    0x80, 0xeb, 0xab, 0x3d, 0x32, 0xc5, 0xde, 0x62, 0xeb, 0x90,
+    0x29, 0x73, 0x05, 0xc8, 0x0a, 0xb1, 0x51, 0xf1, 0x23, 0xdd,
+    0x1e, 0xf5, 0x02, 0x3e, 0x74, 0xbc, 0x24, 0x0c, 0x60, 0x36,
+    0x2a, 0x28, 0x4d, 0xe6, 0x86, 0x98, 0x7c, 0xd9, 0xe1, 0xac,
+    0x21, 0x33, 0xaa, 0xa9, 0x8b, 0xb6, 0x8a, 0x1b, 0xf7, 0x54,
+    0x14, 0xf3, 0x0d, 0x4f, 0xcd, 0x7c, 0xf5, 0xc2, 0x6d, 0xc2,
+    0xf0, 0xe2, 0xfc, 0x63, 0x1e, 0xa6, 0xa9, 0xa9, 0xd9, 0x73,
+    0x2a, 0xd5, 0x0a, 0x38, 0xd8, 0xc0, 0xb7, 0xe1, 0x51, 0xe4,
+    0x23, 0x37, 0xf7, 0x85, 0x66, 0x0e, 0x3f, 0x1a, 0x8c, 0xcf,
+    0x12, 0xa2, 0x47, 0x6f, 0x73, 0x91, 0x21, 0xe3, 0x93, 0x6b,
+    0x74, 0x4f, 0xc5, 0xa1, 0xe7, 0x32, 0xf7, 0x86, 0xdd, 0x1a,
+    0x6e, 0x96, 0xda, 0x32, 0x1d, 0xdd, 0xfa, 0x42, 0xd5, 0xd4,
+    0xfd, 0xae, 0x7a, 0xa1, 0xed, 0x3d, 0x79, 0xfe, 0x88, 0x84,
+    0x43, 0xa7, 0xec, 0xf3, 0x7a, 0x13, 0xaa, 0xa1, 0x82, 0x02,
+    0x83, 0x19, 0x43, 0x0a, 0x46, 0x78, 0x07, 0xd9, 0x4d, 0xff,
+    0xac, 0x67, 0xd6, 0x29, 0x89, 0xfe, 0x2b, 0xab, 0x5f, 0x9a,
+    0x87, 0x99, 0x80, 0xaf, 0x70, 0x4a, 0x6a, 0xb9, 0x5a, 0xc2,
+    0xac, 0x7f, 0xa2, 0xc7, 0xad, 0xe2, 0x1f, 0xec, 0xc5, 0x12,
+    0x17, 0x08, 0x87, 0x8f, 0x20, 0x95, 0xbe, 0xaf, 0x62, 0x2c,
+    0xc2, 0x3f, 0x89, 0x56, 0xd8, 0x50, 0x96, 0x97, 0x72, 0xe2,
+    0x92, 0xe1, 0x2a, 0xd8, 0x84, 0x9f, 0x31, 0xe3, 0x06, 0xd8,
+    0xe5, 0x91, 0x63, 0x19, 0xe1, 0x27, 0xad, 0xe2, 0xf2, 0x0a,
+    0x5e, 0x78, 0x8b, 0x1b, 0x13, 0x31, 0x4b, 0xbd, 0x77, 0xb2,
+    0xd6, 0x5c, 0x92, 0x81, 0x50, 0x02, 0x37, 0xd2, 0xe6, 0xeb,
+    0x66, 0x6b, 0xaa, 0xfc, 0xcd, 0x54, 0x5d, 0xb8, 0x03, 0x87,
+    0xe8, 0xfa, 0xb2, 0xde, 0xcb, 0xf8, 0x6e, 0x58, 0xde, 0xcb,
+    0x09, 0x54, 0x8a, 0x9f, 0x46, 0xa3, 0x7e, 0x8d, 0x15, 0xff,
+    0x1b, 0x0d, 0x89, 0xc4, 0x1a, 0x21, 0x31, 0x5e, 0xed, 0x0b,
+    0x67, 0x3c, 0x70, 0xed, 0x92, 0x48, 0xef, 0xec, 0xf0, 0x77,
+    0xc2, 0x79, 0x6c, 0x06, 0x09, 0xaa, 0xab, 0xf6, 0x4c, 0xcd,
+    0xfa, 0x7e, 0x4a, 0x88, 0xdc, 0xa8, 0x9b, 0xd3, 0x69, 0x94,
+    0x88, 0x09, 0x1d, 0x30, 0x43, 0x9e, 0x2c, 0xcb, 0x01, 0x1d,
+    0x4a, 0x3b, 0x04, 0xec, 0x0e, 0xb1, 0xde, 0x09, 0xad, 0x29,
+    0x02, 0x82, 0x01, 0xe1, 0x00, 0x9f, 0x02, 0x13, 0x7a, 0xd0,
+    0xa9, 0x8a, 0x7a, 0xa0, 0x05, 0xbb, 0x44, 0x6f, 0xaf, 0xf7,
+    0xe3, 0xd4, 0x35, 0xef, 0x73, 0x39, 0xd5, 0xe0, 0xa2, 0x0f,
+    0x1a, 0x25, 0xa8, 0xf7, 0xc2, 0xa5, 0xec, 0x57, 0xf8, 0x0d,
+    0x2a, 0xb6, 0x64, 0x03, 0x8c, 0x22, 0x0f, 0xe7, 0x98, 0xa1,
+    0x12, 0xfe, 0x24, 0xef, 0x61, 0x28, 0x9f, 0xa7, 0x22, 0x6b,
+    0x6d, 0xab, 0x8d, 0x7d, 0x2a, 0x8b, 0xae, 0x8b, 0xfd, 0xcb,
+    0xd5, 0x0b, 0x79, 0x1b, 0x89, 0xcb, 0x5b, 0x7a, 0x8c, 0xdc,
+    0xe8, 0x8d, 0xdd, 0x35, 0x9f, 0x06, 0x69, 0x64, 0x12, 0xeb,
+    0x46, 0x79, 0xdf, 0x82, 0x2c, 0x89, 0x75, 0x9e, 0x7a, 0xec,
+    0xad, 0xe5, 0x88, 0x31, 0xfa, 0x86, 0x93, 0xca, 0xf1, 0x2d,
+    0x9b, 0x62, 0x5a, 0xe9, 0x43, 0x09, 0xf3, 0x8c, 0xe5, 0xc7,
+    0xc0, 0xce, 0x86, 0xe7, 0xdb, 0xc7, 0x4d, 0x27, 0xd5, 0xee,
+    0x76, 0xce, 0x35, 0x30, 0x47, 0xef, 0x00, 0x1b, 0x69, 0x9a,
+    0x3f, 0xa5, 0x2a, 0xc9, 0x07, 0xab, 0x99, 0xba, 0x2a, 0xe7,
+    0xfb, 0xa9, 0x4e, 0xb9, 0xae, 0x2c, 0x50, 0xfc, 0x35, 0x49,
+    0xe6, 0x97, 0x78, 0x3c, 0xb1, 0x59, 0xd7, 0x1d, 0x4e, 0x4e,
+    0xea, 0xde, 0xa0, 0xd0, 0xc4, 0x1d, 0xb1, 0xd3, 0x53, 0x1e,
+    0xf9, 0xbf, 0xb3, 0x6a, 0x17, 0xb4, 0xda, 0xcc, 0x27, 0x19,
+    0xc6, 0x35, 0xe8, 0x28, 0xd3, 0xe3, 0x76, 0x3a, 0xdc, 0xd0,
+    0x75, 0xc8, 0xb4, 0x6c, 0xbe, 0x84, 0x2a, 0x45, 0xd1, 0x43,
+    0x22, 0x54, 0xd7, 0xc5, 0xd0, 0xd7, 0x73, 0x35, 0x6b, 0xa8,
+    0xfa, 0xad, 0x60, 0xc0, 0x64, 0xc1, 0x58, 0x89, 0x09, 0x81,
+    0x0a, 0x0b, 0xea, 0x33, 0x91, 0xb0, 0xef, 0x53, 0x50, 0x41,
+    0xae, 0xd9, 0xee, 0xbe, 0x9e, 0xf0, 0x0b, 0xa0, 0x7c, 0xbf,
+    0x3f, 0xc9, 0x4b, 0xe0, 0x48, 0xd8, 0x10, 0xd5, 0x2e, 0xce,
+    0xf0, 0x7c, 0xd8, 0x05, 0xde, 0x09, 0x7e, 0x8c, 0x63, 0x4c,
+    0xdb, 0x8b, 0x91, 0xcd, 0x7f, 0xb6, 0x6b, 0xad, 0xce, 0xb1,
+    0x17, 0x6c, 0xf7, 0x08, 0x0d, 0x7c, 0xda, 0x4f, 0x0a, 0x07,
+    0xd0, 0xae, 0x72, 0x3c, 0x67, 0x4a, 0x44, 0x54, 0x47, 0xce,
+    0xe1, 0x17, 0x07, 0x12, 0xde, 0x52, 0xef, 0xef, 0x4c, 0x2b,
+    0x42, 0x7d, 0x09, 0x80, 0x36, 0x34, 0xdc, 0x45, 0x6f, 0xb0,
+    0x2d, 0xab, 0xa0, 0x0c, 0x58, 0xae, 0x35, 0xd3, 0x9b, 0x37,
+    0xc1, 0x1d, 0xeb, 0xfe, 0xc3, 0x04, 0xc9, 0x1d, 0xe7, 0x3d,
+    0x16, 0x64, 0xed, 0xf5, 0xe8, 0xdf, 0x99, 0xa4, 0xfb, 0xad,
+    0x79, 0x88, 0xd5, 0x8c, 0x62, 0x33, 0x9e, 0x35, 0xa6, 0x7f,
+    0x9d, 0xb6, 0x1a, 0x40, 0x6d, 0xc3, 0x89, 0x5d, 0x7b, 0xe2,
+    0xc8, 0xd3, 0x16, 0x13, 0x07, 0x9a, 0x38, 0x22, 0x33, 0x03,
+    0xac, 0x70, 0x3e, 0xce, 0x32, 0x56, 0x0b, 0x58, 0x56, 0xb8,
+    0xe9, 0xd8, 0x42, 0x35, 0x6c, 0xb9, 0x02, 0xb3, 0x64, 0xeb,
+    0xaa, 0x09, 0x3f, 0xac, 0x66, 0x08, 0xb4, 0x5f, 0x3e, 0xb4,
+    0xec, 0x39, 0xb1, 0x99, 0xe4, 0x5d, 0x1d, 0x32, 0x14, 0xc1,
+    0x48, 0x8f, 0x6c, 0x65, 0x87, 0x34, 0x50, 0xa4, 0xf4, 0x9b,
+    0x5b, 0x2e, 0xb5, 0x79, 0x0d, 0x11, 0x62, 0xa4, 0x35, 0x9c,
+    0x6f, 0x92, 0xd0, 0x68, 0x07, 0xdd, 0x69, 0x85, 0x48, 0xe3,
+    0x5d, 0x10, 0x34, 0xaf, 0xea, 0x41, 0x72, 0x5a, 0x71, 0x00,
+    0xf8, 0xe6, 0x47, 0x7f, 0xa0, 0x6f, 0x91, 0x96, 0x40, 0x00,
+    0x40, 0x70, 0xfb, 0x63, 0xcf, 0xc9, 0x36, 0x04, 0x1c, 0x3b,
+    0x11, 0x08, 0x29, 0x81, 0x9f
+};
+
+static unsigned char test15360[] = {
+    0x30, 0x82, 0x21, 0xe8, 0x02, 0x01, 0x00, 0x02, 0x82, 0x07,
+    0x81, 0x00, 0xad, 0x3f, 0xaa, 0xdc, 0x8c, 0x85, 0xcb, 0x60,
+    0xd2, 0xf5, 0x30, 0xa1, 0x0f, 0x26, 0xec, 0xdf, 0xfc, 0x91,
+    0x39, 0xbd, 0x3e, 0x8f, 0x99, 0x64, 0x1e, 0x51, 0xd2, 0x27,
+    0x5e, 0x76, 0xcd, 0x86, 0x33, 0x07, 0xf9, 0xbd, 0x3b, 0x06,
+    0xc3, 0x3c, 0x85, 0xcb, 0x7e, 0x91, 0x14, 0xb0, 0x0b, 0x77,
+    0x22, 0x30, 0x71, 0xb8, 0xbb, 0x74, 0x30, 0x33, 0x35, 0x56,
+    0x34, 0x47, 0x10, 0x8f, 0x88, 0xe2, 0x6f, 0xdc, 0x3b, 0xe9,
+    0x58, 0x9d, 0x0c, 0xdc, 0x8f, 0x70, 0x41, 0x7a, 0x12, 0xd2,
+    0x9a, 0x35, 0xbe, 0x0a, 0x57, 0x13, 0x0c, 0xe9, 0xbf, 0x77,
+    0x54, 0x00, 0x74, 0xb7, 0x1a, 0x3e, 0xa7, 0xe9, 0xb6, 0xe7,
+    0x4f, 0x1e, 0xa4, 0xc0, 0x7c, 0x4c, 0x66, 0xc5, 0xce, 0xad,
+    0x96, 0x1b, 0xe2, 0x1a, 0xf1, 0x3d, 0x8b, 0x50, 0xcf, 0xe2,
+    0x15, 0x21, 0x6d, 0x83, 0x95, 0x00, 0xee, 0x97, 0xc4, 0xae,
+    0xc9, 0x38, 0x62, 0x6c, 0xb2, 0xe7, 0x7f, 0x15, 0x0a, 0xab,
+    0x86, 0xb9, 0xd9, 0x8a, 0xf8, 0xeb, 0x88, 0x5d, 0xdc, 0x0c,
+    0x1e, 0xc5, 0xe6, 0xa1, 0x7b, 0xbf, 0xf1, 0x02, 0xe3, 0xad,
+    0xf8, 0xed, 0x17, 0x9f, 0x83, 0x11, 0x31, 0x3b, 0xad, 0xb4,
+    0xf9, 0x8d, 0x1d, 0x56, 0x9b, 0xac, 0x68, 0x55, 0x0a, 0x74,
+    0x20, 0xee, 0x57, 0xe7, 0x1c, 0x6d, 0x05, 0xa1, 0x4e, 0xa5,
+    0x11, 0x99, 0xb4, 0x86, 0xdb, 0x58, 0xe7, 0xf6, 0xb6, 0x4f,
+    0x92, 0x58, 0x57, 0x9b, 0x74, 0x04, 0xe5, 0xd1, 0x1d, 0x7c,
+    0x4b, 0xb8, 0x1f, 0x5d, 0x0e, 0x93, 0xee, 0x44, 0x18, 0xb6,
+    0x58, 0x0e, 0xa1, 0x0b, 0x8e, 0x2e, 0x99, 0x4c, 0x72, 0x91,
+    0xfa, 0xfa, 0xe2, 0x22, 0x05, 0x5d, 0x2b, 0x2d, 0xd8, 0x60,
+    0xd5, 0x1b, 0x08, 0x56, 0x2b, 0xb5, 0x21, 0xdb, 0x1a, 0xe6,
+    0xa8, 0x39, 0xa2, 0xf4, 0x58, 0xcb, 0xd2, 0xf9, 0xce, 0xc0,
+    0x1e, 0x1b, 0xf9, 0xa7, 0x37, 0xca, 0xa3, 0x77, 0x6e, 0xb1,
+    0xaf, 0x33, 0xb5, 0x6d, 0x5f, 0x33, 0x2e, 0x1a, 0x34, 0xdb,
+    0x42, 0xbe, 0x5f, 0xf9, 0x09, 0xb7, 0x9f, 0xd4, 0x09, 0xfb,
+    0x87, 0x13, 0x3c, 0xe2, 0x27, 0xb8, 0xf3, 0x1d, 0x7e, 0x92,
+    0xdd, 0x87, 0x86, 0x55, 0x69, 0x9b, 0x55, 0xcd, 0xef, 0x7a,
+    0x71, 0x5d, 0x81, 0x3a, 0xd9, 0xf7, 0x7f, 0xde, 0xe0, 0x92,
+    0xd9, 0x78, 0x0f, 0x1d, 0x43, 0xb1, 0x1e, 0x29, 0xc1, 0x49,
+    0xb6, 0x5e, 0x85, 0x83, 0xd9, 0x04, 0xfd, 0x79, 0xd8, 0x47,
+    0x03, 0x2e, 0x85, 0x19, 0xfd, 0x63, 0xe7, 0xa4, 0x8b, 0xc0,
+    0x94, 0x0e, 0xb7, 0x54, 0x97, 0xd6, 0x44, 0x5d, 0x63, 0x12,
+    0xff, 0xdd, 0xde, 0x2c, 0x00, 0x0e, 0xc9, 0xca, 0x7e, 0xa2,
+    0x65, 0x25, 0xb0, 0x1d, 0xa9, 0x20, 0x4f, 0xdd, 0xea, 0x3a,
+    0xb5, 0xe8, 0x0f, 0xf3, 0xb2, 0xb7, 0x00, 0x4a, 0xe8, 0xa4,
+    0x83, 0x49, 0xbd, 0x78, 0xdf, 0xac, 0x2c, 0x37, 0x81, 0xb3,
+    0xf3, 0xb7, 0x13, 0x93, 0x3e, 0xb2, 0x79, 0x55, 0xf2, 0xd8,
+    0x9c, 0xf7, 0xf2, 0xf1, 0xd5, 0x6c, 0x9c, 0xff, 0xec, 0xf4,
+    0xea, 0x08, 0x3c, 0x65, 0x35, 0xb7, 0x09, 0x03, 0x6d, 0x99,
+    0x1d, 0x5b, 0x73, 0x06, 0x61, 0xb4, 0xf0, 0xc5, 0xdb, 0x3e,
+    0xe0, 0x1d, 0xa8, 0x5b, 0x7a, 0x5b, 0x5b, 0x9c, 0x11, 0x75,
+    0x83, 0x1d, 0xf4, 0x73, 0x27, 0xf3, 0x79, 0xf2, 0x82, 0xd6,
+    0x28, 0x45, 0x58, 0x23, 0x6c, 0x29, 0xd3, 0x50, 0x51, 0x1b,
+    0x38, 0xef, 0x89, 0x90, 0x84, 0xa2, 0x4c, 0x35, 0x7b, 0x30,
+    0x5e, 0xbd, 0x1a, 0xd5, 0xdf, 0xcd, 0xcd, 0x74, 0x3f, 0x2e,
+    0x01, 0xea, 0x33, 0x07, 0x74, 0xfb, 0x86, 0x75, 0x20, 0x0e,
+    0x4f, 0xbf, 0x65, 0xd4, 0x15, 0x19, 0x6f, 0x8d, 0x37, 0xcd,
+    0xb6, 0x6f, 0x50, 0x9d, 0x5e, 0x04, 0x81, 0x7d, 0xec, 0xd6,
+    0xbb, 0x40, 0x1b, 0xe0, 0xf5, 0xd5, 0x86, 0x26, 0xc5, 0x41,
+    0x84, 0x0e, 0x3e, 0x73, 0xb7, 0xa4, 0xbe, 0x2a, 0xfe, 0xd7,
+    0xe4, 0x4d, 0x5c, 0x2d, 0x6a, 0x04, 0xe6, 0xdd, 0x28, 0xa0,
+    0x75, 0x4c, 0xe0, 0x23, 0x2c, 0xad, 0xec, 0xaa, 0x72, 0xfd,
+    0x03, 0xc0, 0x65, 0xfa, 0xc4, 0x3c, 0x25, 0x10, 0xae, 0x3f,
+    0x09, 0x96, 0x4e, 0xff, 0xfe, 0xc7, 0xe4, 0x9e, 0xec, 0xb5,
+    0x6e, 0xec, 0xf3, 0x7a, 0x83, 0x7a, 0x8b, 0xbb, 0x91, 0x8d,
+    0xab, 0x3c, 0x4d, 0x7f, 0x34, 0x77, 0xbe, 0x0c, 0x87, 0xf2,
+    0xc3, 0xd6, 0xcb, 0xcc, 0xfa, 0x1e, 0xaf, 0x21, 0x24, 0xe9,
+    0xaa, 0x89, 0x61, 0x0c, 0x7a, 0x1c, 0x7d, 0x00, 0x87, 0x69,
+    0x30, 0xa0, 0xb4, 0x3b, 0x96, 0x1c, 0x00, 0x14, 0x07, 0xb8,
+    0x3f, 0x59, 0x62, 0x3a, 0x3f, 0xfb, 0x68, 0xb8, 0x81, 0x7d,
+    0x4a, 0x9d, 0x1c, 0xa2, 0x07, 0xa3, 0xb1, 0x42, 0x7b, 0xfa,
+    0x9b, 0xbc, 0x94, 0x30, 0x7e, 0xea, 0xe7, 0x40, 0x7e, 0xd4,
+    0x0f, 0x33, 0x3b, 0x57, 0xda, 0x8b, 0x6d, 0x64, 0xd5, 0xe4,
+    0x91, 0x83, 0xf0, 0x3d, 0xae, 0x8b, 0x91, 0xf0, 0xcd, 0xb1,
+    0xa0, 0xe0, 0x0d, 0xe1, 0xbb, 0x22, 0x78, 0x1f, 0x3a, 0xe5,
+    0x53, 0x28, 0xf0, 0x35, 0xae, 0x71, 0xe6, 0xfd, 0x63, 0xb2,
+    0x9c, 0x3f, 0xdd, 0x95, 0x7b, 0xc4, 0xe9, 0x2f, 0xd9, 0x93,
+    0x3a, 0x10, 0x42, 0x1c, 0x90, 0xab, 0xfb, 0xd3, 0x02, 0xe9,
+    0x59, 0xbc, 0x53, 0x7e, 0xf3, 0xe1, 0x52, 0x15, 0xa6, 0x58,
+    0x9e, 0xc1, 0xa6, 0x0e, 0x2e, 0x35, 0x07, 0x3a, 0xc3, 0x1f,
+    0xaa, 0x58, 0xe7, 0xc6, 0x33, 0x6a, 0x39, 0x4b, 0x21, 0x15,
+    0x3d, 0x92, 0x4e, 0x5e, 0xf9, 0x01, 0xd6, 0x0f, 0x28, 0x61,
+    0x15, 0xdf, 0xed, 0x6f, 0x75, 0xc4, 0x8f, 0xcb, 0x16, 0x55,
+    0x09, 0xc7, 0x24, 0xb2, 0x0c, 0x49, 0x25, 0x8d, 0x5e, 0xf1,
+    0x0e, 0xe0, 0xe2, 0xc4, 0xcc, 0x1f, 0x4e, 0x60, 0x5c, 0x5e,
+    0xc6, 0x7f, 0x68, 0x7f, 0xdb, 0x1a, 0x01, 0x67, 0x07, 0xb1,
+    0x56, 0x93, 0xf2, 0x26, 0x81, 0xc0, 0x33, 0xb8, 0x48, 0xf9,
+    0x2c, 0x5c, 0x18, 0x29, 0xed, 0xe0, 0x6c, 0xa0, 0xac, 0xd2,
+    0x90, 0x4b, 0x52, 0x87, 0xbb, 0xb5, 0x05, 0xd8, 0x56, 0xc5,
+    0xb8, 0x8f, 0x3f, 0x49, 0x52, 0x9a, 0xa2, 0xd0, 0x40, 0x80,
+    0x5b, 0x16, 0x15, 0xbc, 0x74, 0x8e, 0x00, 0x10, 0xaf, 0xfb,
+    0x6d, 0xba, 0xcb, 0xbc, 0xe6, 0x13, 0x75, 0xce, 0x27, 0xae,
+    0x85, 0x57, 0x6c, 0xc0, 0x8a, 0x84, 0x6f, 0x34, 0x16, 0xd4,
+    0x35, 0xd2, 0xcc, 0x55, 0x00, 0xc1, 0xd8, 0x28, 0x2c, 0x9c,
+    0x84, 0x78, 0xbf, 0xf0, 0x3b, 0x0d, 0x9f, 0x81, 0xd4, 0xef,
+    0x99, 0x77, 0x53, 0xd2, 0x8e, 0x43, 0x52, 0xf0, 0x32, 0x7e,
+    0xba, 0xbf, 0xb6, 0x0e, 0x9d, 0x9b, 0x00, 0xd0, 0x50, 0x55,
+    0x67, 0x5a, 0x2c, 0x8b, 0x9b, 0x29, 0xfb, 0x41, 0x74, 0x4c,
+    0xb7, 0xd8, 0x98, 0xa2, 0xfb, 0x73, 0x07, 0x96, 0xef, 0xcd,
+    0x47, 0x13, 0x1d, 0xe2, 0xb1, 0xac, 0xf3, 0xcf, 0x47, 0x98,
+    0x7b, 0x6f, 0xf6, 0x32, 0x44, 0x41, 0x78, 0x09, 0x8e, 0x64,
+    0x0c, 0xbf, 0xe2, 0x0f, 0x8c, 0x44, 0x2f, 0x4e, 0x55, 0xe0,
+    0xc6, 0xfd, 0x05, 0x74, 0x18, 0x1a, 0xb9, 0xfa, 0xcb, 0xd3,
+    0xfa, 0x69, 0x50, 0x63, 0xce, 0x2b, 0xef, 0x92, 0x0f, 0x11,
+    0xd4, 0x9b, 0x53, 0x6c, 0xed, 0xc5, 0x0b, 0x7c, 0xbd, 0xa1,
+    0x5d, 0xdf, 0xab, 0xcf, 0xaa, 0x83, 0x5e, 0xa8, 0xc5, 0xfe,
+    0x91, 0x2b, 0x23, 0x1f, 0x39, 0x3d, 0x71, 0x74, 0xbf, 0xa2,
+    0xf1, 0xda, 0x2f, 0x29, 0x02, 0x9b, 0xea, 0x48, 0x2c, 0xaf,
+    0xe7, 0xa9, 0xf5, 0x68, 0xab, 0x8f, 0x18, 0xb9, 0x7b, 0x28,
+    0xf0, 0x92, 0xfb, 0x07, 0xd7, 0xbd, 0x43, 0xcd, 0x7f, 0xfc,
+    0xb9, 0x5f, 0x24, 0xf8, 0x48, 0x2e, 0xbe, 0x42, 0x87, 0x80,
+    0x38, 0x78, 0x9e, 0x8c, 0x52, 0x6d, 0xfa, 0x2e, 0x46, 0x35,
+    0x7a, 0x59, 0x88, 0xb9, 0x3e, 0xcb, 0x79, 0xb4, 0x8a, 0x9e,
+    0xd5, 0xd0, 0x30, 0x8c, 0xb2, 0x0c, 0x9d, 0x8d, 0x2d, 0x64,
+    0x0b, 0xf6, 0xeb, 0xf1, 0xde, 0xea, 0x74, 0xfc, 0xbc, 0x01,
+    0x18, 0x48, 0x4e, 0x35, 0x02, 0x83, 0x01, 0xb2, 0x50, 0xa0,
+    0x44, 0x19, 0x30, 0x00, 0x12, 0x4a, 0xa0, 0x6d, 0x6b, 0x8b,
+    0xf1, 0xce, 0xda, 0x2e, 0x16, 0x35, 0x52, 0x26, 0xf9, 0xbe,
+    0xb1, 0x37, 0xfc, 0x0a, 0x8b, 0x6f, 0x06, 0x11, 0x7b, 0xf7,
+    0xa8, 0x40, 0xbd, 0x8d, 0x94, 0xa4, 0xa2, 0xe0, 0xb6, 0xdf,
+    0x62, 0xc0, 0x6f, 0xb3, 0x5d, 0x84, 0xb9, 0xaa, 0x2f, 0xc1,
+    0x3b, 0xcb, 0x20, 0xc6, 0x68, 0x69, 0x15, 0x74, 0xbc, 0xdb,
+    0x43, 0x9c, 0x4a, 0xfc, 0x72, 0xc1, 0xf5, 0x87, 0x80, 0xe8,
+    0x6c, 0xd5, 0xc1, 0x2e, 0x34, 0x5e, 0x96, 0x76, 0x08, 0x3e,
+    0x45, 0xe4, 0xa0, 0x4a, 0x7a, 0xc1, 0x67, 0x38, 0xf2, 0x31,
+    0x1f, 0x7b, 0x0f, 0x54, 0xbd, 0x0d, 0x1f, 0x9e, 0x8e, 0x99,
+    0x8b, 0x58, 0xd9, 0x94, 0x87, 0xaa, 0x8b, 0x82, 0x5d, 0x5e,
+    0xe8, 0x50, 0xf4, 0xf2, 0xc7, 0xe9, 0x85, 0x6b, 0xd2, 0xef,
+    0x13, 0xc1, 0xed, 0x57, 0x2a, 0xc5, 0xd6, 0x5d, 0xa4, 0x3b,
+    0x29, 0xba, 0xab, 0x1b, 0xaa, 0x21, 0x41, 0xe9, 0xdc, 0x47,
+    0x88, 0xef, 0x0c, 0xfc, 0xb2, 0xdc, 0xf7, 0xdb, 0x55, 0x4d,
+    0x70, 0xc7, 0xe2, 0x8a, 0x8a, 0xe1, 0xde, 0xcf, 0xe5, 0xca,
+    0x23, 0x36, 0x29, 0xe5, 0xfc, 0x54, 0x66, 0xda, 0xe9, 0xab,
+    0x58, 0x20, 0xb2, 0x8e, 0xb2, 0x7d, 0x5d, 0xb8, 0xc7, 0x6c,
+    0x48, 0x53, 0x2b, 0x47, 0xe0, 0x12, 0x00, 0x0e, 0xfe, 0xa5,
+    0x93, 0x34, 0xf9, 0x3e, 0xa6, 0x3f, 0x56, 0xaa, 0x43, 0x65,
+    0xbb, 0x5a, 0x70, 0x3e, 0x62, 0xac, 0x3f, 0x5b, 0x90, 0x02,
+    0x50, 0x5d, 0x05, 0xa8, 0xd5, 0x67, 0x1a, 0x62, 0xec, 0xd4,
+    0xde, 0x29, 0x04, 0xac, 0x6d, 0x15, 0x5d, 0xa0, 0xec, 0xf2,
+    0x57, 0x13, 0x0e, 0x17, 0x96, 0x0c, 0x32, 0x6a, 0xc5, 0xe0,
+    0xa8, 0xff, 0x85, 0xa4, 0xa3, 0xe3, 0x0e, 0x35, 0x5d, 0xd1,
+    0x28, 0x84, 0xaa, 0xc4, 0x84, 0xcd, 0x25, 0x63, 0x85, 0x82,
+    0x3e, 0x12, 0x30, 0x17, 0x57, 0x45, 0xb8, 0xb4, 0x34, 0x01,
+    0x3a, 0xa2, 0x77, 0x61, 0xc8, 0x3d, 0x1f, 0xc5, 0x0e, 0x4a,
+    0xbb, 0xf6, 0xa0, 0x5d, 0x79, 0x4b, 0xc8, 0xf3, 0x9c, 0x87,
+    0x05, 0x2f, 0xea, 0x25, 0x28, 0x91, 0x69, 0x77, 0x7c, 0xba,
+    0xea, 0x4a, 0x75, 0x2e, 0x2b, 0x17, 0x83, 0x50, 0x32, 0x43,
+    0x4f, 0xcd, 0xf1, 0x77, 0xb1, 0x22, 0x0a, 0x8b, 0x69, 0x58,
+    0x09, 0x35, 0x07, 0x6d, 0x61, 0x4a, 0x8d, 0x18, 0x65, 0x6e,
+    0x9b, 0x62, 0x07, 0xd0, 0x6a, 0x92, 0x39, 0x05, 0x80, 0x14,
+    0xfa, 0x1c, 0x93, 0x84, 0x0c, 0xb5, 0x8c, 0x41, 0x91, 0x4e,
+    0x48, 0xf0, 0xf2, 0xba, 0x1d, 0x73, 0x2f, 0x1e, 0xa1, 0x55,
+    0xc3, 0x02, 0x8c, 0xb1, 0xf2, 0x37, 0xa6, 0x9a, 0x6b, 0xcd,
+    0x45, 0x2e, 0x08, 0x90, 0x26, 0x63, 0x91, 0xff, 0x22, 0x5e,
+    0xcd, 0xae, 0x9b, 0x19, 0x1e, 0x10, 0x62, 0x4e, 0x1f, 0x2d,
+    0x81, 0x69, 0x4f, 0x41, 0xe5, 0x94, 0xff, 0x7e, 0xcc, 0x15,
+    0x36, 0x1e, 0x29, 0x59, 0x37, 0xe7, 0x64, 0x40, 0x17, 0x1a,
+    0x32, 0xba, 0x01, 0x26, 0x30, 0x80, 0x60, 0x07, 0x86, 0x6e,
+    0xd4, 0xb3, 0xe2, 0x44, 0x16, 0x33, 0xf2, 0x4c, 0x84, 0x0e,
+    0xb1, 0x4a, 0xc7, 0x92, 0xa6, 0xa3, 0x42, 0x36, 0x05, 0x3e,
+    0x74, 0xa8, 0xb1, 0xc5, 0x63, 0x59, 0x0d, 0x1e, 0x36, 0x45,
+    0x2b, 0x36, 0x5e, 0xca, 0xab, 0x97, 0x49, 0xd3, 0xab, 0xae,
+    0x63, 0x0a, 0xd1, 0x03, 0x57, 0x88, 0xa4, 0xa4, 0x3c, 0xda,
+    0x15, 0x49, 0x1a, 0x5d, 0xe6, 0x5e, 0xb9, 0x82, 0x23, 0xc0,
+    0x83, 0x96, 0xfe, 0x38, 0x0b, 0x80, 0x0e, 0xde, 0x22, 0xeb,
+    0x5d, 0xe4, 0x56, 0x32, 0xbe, 0xe0, 0xc0, 0x6e, 0x69, 0x63,
+    0x27, 0x4e, 0x00, 0x58, 0x80, 0x70, 0xd9, 0xcc, 0x4e, 0xae,
+    0x6c, 0x5e, 0x6a, 0x43, 0x81, 0xfd, 0x45, 0xb2, 0xa4, 0x6c,
+    0xf0, 0x9c, 0x66, 0x5c, 0x7d, 0x5c, 0x78, 0x55, 0x33, 0x4b,
+    0x3c, 0x3b, 0x1d, 0x18, 0x58, 0x79, 0x6a, 0x02, 0xec, 0xce,
+    0x53, 0x69, 0xc0, 0x17, 0xed, 0x57, 0xaf, 0x71, 0x5b, 0x42,
+    0x1b, 0x49, 0xd8, 0xe8, 0x96, 0x80, 0xb6, 0x48, 0x1b, 0x7c,
+    0xf8, 0x74, 0x1c, 0xb1, 0xc4, 0x10, 0xb7, 0xf4, 0x97, 0x7e,
+    0x6b, 0x8f, 0x54, 0xba, 0x37, 0xb9, 0x35, 0x9e, 0x7b, 0x17,
+    0x16, 0x9b, 0x89, 0x39, 0xae, 0x4f, 0x2e, 0x18, 0x65, 0xb4,
+    0x76, 0x20, 0x9a, 0x58, 0xe2, 0x57, 0x6e, 0x1c, 0x3f, 0x8e,
+    0x9a, 0xbb, 0xd8, 0xfc, 0x4c, 0xd6, 0x2d, 0xc1, 0xa6, 0x46,
+    0xac, 0x13, 0x1e, 0xa7, 0xf7, 0x1d, 0x28, 0x3a, 0xf4, 0xd6,
+    0x48, 0xfb, 0xe5, 0xb3, 0x84, 0x94, 0x47, 0x92, 0xae, 0x9a,
+    0x58, 0xc5, 0xac, 0x23, 0x1b, 0xb5, 0xcd, 0x96, 0xd2, 0x5e,
+    0xb2, 0x41, 0xfc, 0x9a, 0xae, 0x19, 0xf1, 0x7b, 0x4b, 0x53,
+    0x1b, 0xfa, 0xa5, 0x0c, 0x49, 0x6d, 0xff, 0xf4, 0x51, 0x88,
+    0x19, 0x04, 0xd9, 0x85, 0x8e, 0xe2, 0x3a, 0x62, 0x31, 0x5c,
+    0x6e, 0xe8, 0x4d, 0x04, 0x1d, 0xd8, 0xc2, 0x7b, 0x51, 0xe7,
+    0x59, 0xbc, 0x85, 0x5c, 0xc4, 0xcc, 0xad, 0xcb, 0x93, 0x69,
+    0x18, 0xe4, 0x71, 0x9e, 0x63, 0x33, 0x99, 0xb6, 0x3b, 0x23,
+    0x11, 0x17, 0x7a, 0x3d, 0x6f, 0xb9, 0x6b, 0xf1, 0xf2, 0xa7,
+    0x03, 0xfd, 0xf0, 0xcd, 0x5b, 0xb5, 0xda, 0x9a, 0xd9, 0x95,
+    0x02, 0x76, 0xd8, 0x38, 0xd3, 0xbd, 0xa0, 0x4a, 0x9a, 0xab,
+    0x70, 0xde, 0xc6, 0xf9, 0xa5, 0x19, 0x9c, 0xc4, 0xf9, 0x07,
+    0x4d, 0xea, 0x15, 0xc2, 0x91, 0x4d, 0x54, 0xa9, 0x2c, 0xca,
+    0xdf, 0xaa, 0xd1, 0xc4, 0xc0, 0x18, 0x77, 0x28, 0x2a, 0x2c,
+    0xc3, 0x7c, 0x26, 0xbd, 0xd8, 0x0d, 0x51, 0xa1, 0x4d, 0xad,
+    0x76, 0x76, 0xaa, 0xa9, 0x45, 0x82, 0x4f, 0x76, 0xfb, 0x1a,
+    0xd3, 0x71, 0x3c, 0x55, 0xa2, 0x5c, 0xe0, 0xd6, 0xda, 0x35,
+    0xbe, 0x25, 0x23, 0x26, 0x51, 0xc6, 0xb4, 0xf3, 0x3e, 0x2c,
+    0x54, 0x09, 0xc7, 0x6f, 0xa5, 0x08, 0x81, 0xba, 0x75, 0xda,
+    0xcb, 0x4d, 0x05, 0xdd, 0xca, 0x93, 0x48, 0x30, 0xe8, 0x4a,
+    0x1f, 0xfd, 0x02, 0x03, 0x01, 0x00, 0x01, 0x02, 0x82, 0x07,
+    0x80, 0x25, 0x2f, 0xbc, 0x49, 0xf8, 0xb3, 0xa3, 0x32, 0xd6,
+    0x35, 0x20, 0xca, 0x01, 0x49, 0x96, 0xa0, 0x81, 0x42, 0xde,
+    0xc4, 0xdb, 0x0f, 0xd1, 0x99, 0xe6, 0xd4, 0x23, 0x2a, 0xa6,
+    0x21, 0x13, 0xfe, 0x51, 0x27, 0xce, 0x18, 0x2a, 0xfa, 0x49,
+    0x9f, 0xcd, 0x0c, 0x1f, 0xcf, 0x9e, 0x44, 0x27, 0x41, 0xdc,
+    0x09, 0xcf, 0xef, 0x19, 0xf5, 0x57, 0x7f, 0x36, 0x5c, 0x99,
+    0x7e, 0x03, 0x74, 0xfb, 0xa9, 0xb6, 0xde, 0xeb, 0xd1, 0x2b,
+    0x5f, 0x12, 0x6a, 0xa9, 0x33, 0x2c, 0x2a, 0xba, 0xad, 0x8f,
+    0xc2, 0x27, 0x57, 0x6a, 0xd7, 0x40, 0xf7, 0x4f, 0x4c, 0x9a,
+    0xb0, 0x3a, 0x5d, 0x2e, 0xf9, 0xf1, 0xea, 0xbd, 0x82, 0xaa,
+    0xbd, 0xe6, 0x19, 0x16, 0xd5, 0x03, 0x5e, 0x43, 0xfd, 0x88,
+    0x71, 0xd5, 0xb7, 0x78, 0xbe, 0x80, 0x0f, 0xc9, 0x7f, 0x3a,
+    0x8f, 0xe1, 0x44, 0xd4, 0x0f, 0xce, 0x26, 0xaf, 0x65, 0xe0,
+    0xf5, 0x04, 0x53, 0x56, 0x97, 0x4f, 0xf4, 0xc1, 0x44, 0x8d,
+    0xf7, 0x88, 0x55, 0x47, 0x16, 0xaf, 0x3f, 0x8e, 0x42, 0xdf,
+    0xbc, 0x14, 0xc3, 0xe6, 0x9f, 0x0d, 0x69, 0x54, 0x5b, 0x7c,
+    0x49, 0xcf, 0xbf, 0x42, 0x4f, 0xc7, 0x64, 0x8a, 0xe5, 0x84,
+    0x87, 0x20, 0x9b, 0xfd, 0x70, 0x25, 0x38, 0xd3, 0xb4, 0x97,
+    0x78, 0xf1, 0x4f, 0x3f, 0x0f, 0xbb, 0x9c, 0xa3, 0x17, 0xd5,
+    0x4e, 0x4b, 0xac, 0x82, 0x9a, 0x73, 0xb7, 0xc5, 0xec, 0x10,
+    0x7a, 0x7b, 0xdb, 0x77, 0x2c, 0xb1, 0xf3, 0x8f, 0xc3, 0xa5,
+    0x31, 0x11, 0x32, 0x55, 0x35, 0xb5, 0x77, 0xd2, 0x62, 0x19,
+    0x46, 0x92, 0x94, 0xbb, 0x61, 0x0f, 0x30, 0x94, 0x8a, 0xf6,
+    0xf7, 0x30, 0xe0, 0xa2, 0x8c, 0x1b, 0xff, 0x8c, 0x29, 0x44,
+    0xb4, 0xb7, 0xb6, 0x5f, 0x4d, 0x52, 0xc6, 0x07, 0xe1, 0x28,
+    0x8c, 0xae, 0x88, 0x8a, 0x22, 0xbd, 0xd7, 0x36, 0xe4, 0x8f,
+    0xd1, 0xeb, 0x65, 0x54, 0x19, 0x5f, 0xba, 0xfb, 0xfc, 0x91,
+    0xa1, 0xa4, 0xb8, 0xa4, 0x2d, 0x85, 0x20, 0xc4, 0xe5, 0xa7,
+    0x4e, 0xdb, 0xa4, 0xc5, 0xcc, 0x2f, 0x37, 0x41, 0x29, 0x47,
+    0x15, 0xff, 0x04, 0x80, 0x08, 0x37, 0xce, 0xc5, 0xe3, 0x5a,
+    0x3f, 0x83, 0xbb, 0x03, 0x9e, 0xfe, 0xec, 0xe4, 0x11, 0x41,
+    0x12, 0x13, 0xf2, 0x00, 0xe5, 0x1a, 0x02, 0x49, 0xeb, 0xdb,
+    0x57, 0xe4, 0xce, 0xa0, 0x3f, 0xfd, 0x3c, 0x73, 0x2b, 0x92,
+    0x44, 0x79, 0x9e, 0x12, 0x4f, 0xfa, 0xe4, 0x53, 0x62, 0xf2,
+    0xb0, 0xe2, 0x8a, 0xf0, 0x93, 0xa8, 0x1d, 0xee, 0x8d, 0x58,
+    0x7a, 0x4c, 0x29, 0x91, 0x29, 0xc1, 0xa4, 0xd5, 0xe6, 0x37,
+    0x1b, 0x75, 0x5b, 0xb6, 0x6b, 0x76, 0x2e, 0xcb, 0xbd, 0xa9,
+    0xbe, 0x4c, 0x2e, 0x21, 0xa6, 0x38, 0xde, 0x66, 0x2f, 0x51,
+    0xea, 0x4c, 0xba, 0x3f, 0x4a, 0xfe, 0x7a, 0x15, 0xb3, 0x72,
+    0x26, 0xba, 0xcf, 0x9e, 0x1b, 0x03, 0xa6, 0xaa, 0x65, 0x68,
+    0xd3, 0x8c, 0x15, 0x17, 0xe9, 0x11, 0x18, 0x3c, 0xb6, 0xf8,
+    0x02, 0x54, 0x98, 0x49, 0xfa, 0x35, 0x3c, 0xcd, 0xac, 0xc8,
+    0x2b, 0x1a, 0x63, 0x93, 0x03, 0x05, 0xa1, 0x41, 0xbe, 0x12,
+    0xca, 0x15, 0x47, 0x72, 0x63, 0x77, 0x26, 0xd0, 0xe7, 0x8f,
+    0x0d, 0x6e, 0x9c, 0xac, 0x07, 0xbe, 0x03, 0x22, 0xd0, 0x39,
+    0x63, 0x8d, 0x9b, 0xc6, 0x20, 0x81, 0xb5, 0x67, 0x15, 0xf6,
+    0xb0, 0xe3, 0xb9, 0x3e, 0xb7, 0x3f, 0x8f, 0x46, 0xc9, 0x74,
+    0x10, 0x1e, 0x53, 0xf1, 0xd4, 0x30, 0x4d, 0x6e, 0x72, 0xb4,
+    0x73, 0x1c, 0xb6, 0x79, 0x82, 0x60, 0x2e, 0x2a, 0x7d, 0x82,
+    0x95, 0xb5, 0x7c, 0x4d, 0x44, 0xcb, 0xd8, 0x8a, 0x17, 0xe8,
+    0x50, 0x29, 0xd8, 0x3a, 0xeb, 0x29, 0xc1, 0x83, 0x0f, 0xd9,
+    0xaf, 0xcc, 0xfa, 0xea, 0x3a, 0x47, 0x5d, 0x33, 0x1f, 0xe8,
+    0x33, 0x5b, 0x88, 0x8e, 0xdb, 0xd5, 0x1e, 0xaf, 0x4a, 0x5f,
+    0xc0, 0xfa, 0xf0, 0xb5, 0xa3, 0x5b, 0xda, 0x38, 0xb7, 0x38,
+    0x5e, 0xce, 0x81, 0x44, 0xf7, 0x66, 0x62, 0x64, 0x1d, 0x04,
+    0xf0, 0x8a, 0x4f, 0xa2, 0x80, 0x76, 0x83, 0x23, 0x89, 0x61,
+    0x6b, 0xc3, 0xb7, 0xee, 0xb5, 0x06, 0x33, 0xad, 0x63, 0x04,
+    0x78, 0xc9, 0xde, 0x32, 0xde, 0xcf, 0x18, 0xb9, 0xb0, 0x3b,
+    0xee, 0x0a, 0x58, 0xea, 0xad, 0xbc, 0x1e, 0x77, 0xa0, 0x93,
+    0xf7, 0xae, 0x9e, 0xb6, 0x31, 0x59, 0x8e, 0xb1, 0x03, 0x8f,
+    0xbb, 0xa4, 0x25, 0x0c, 0x2e, 0xd7, 0xe2, 0x62, 0x5c, 0xf1,
+    0x68, 0xe9, 0x76, 0xd7, 0x23, 0x14, 0x45, 0xaf, 0xcb, 0x09,
+    0x50, 0x05, 0x3f, 0xa0, 0xf9, 0xc3, 0x9e, 0x89, 0x05, 0xa8,
+    0x3b, 0x54, 0x55, 0x32, 0x74, 0x91, 0x46, 0xc1, 0x2c, 0x96,
+    0x7e, 0x60, 0xad, 0xfa, 0xbb, 0xcd, 0x09, 0x7b, 0x39, 0x10,
+    0x82, 0x8a, 0xc0, 0x5a, 0x0d, 0xab, 0xb3, 0x71, 0x45, 0xad,
+    0x39, 0x8e, 0xec, 0x4d, 0x91, 0x8d, 0xda, 0x8d, 0xfa, 0xb0,
+    0xad, 0x44, 0x3c, 0xc9, 0x21, 0x56, 0x22, 0xfc, 0xd3, 0xba,
+    0xb7, 0x3c, 0xe3, 0x8d, 0xda, 0x59, 0x34, 0x42, 0xdd, 0x04,
+    0x5b, 0x8e, 0x2b, 0xc7, 0x94, 0xd5, 0x42, 0xe0, 0x4a, 0x6f,
+    0x35, 0x5a, 0x27, 0x82, 0xd8, 0x82, 0x40, 0xee, 0x0f, 0xa6,
+    0xef, 0xe4, 0x70, 0xe3, 0x30, 0xb7, 0x2d, 0xd4, 0xbb, 0x27,
+    0xb2, 0xbf, 0xad, 0x49, 0x45, 0xbc, 0xeb, 0xbe, 0xb7, 0xd8,
+    0xe3, 0xb1, 0xf3, 0xeb, 0x41, 0x20, 0x9b, 0x21, 0x54, 0xc3,
+    0xa8, 0xaf, 0x9f, 0x20, 0x5c, 0x15, 0x8e, 0x25, 0xbc, 0xbc,
+    0x69, 0x91, 0xfe, 0xda, 0xad, 0xe5, 0x37, 0x7d, 0xb0, 0x51,
+    0x14, 0xae, 0x8f, 0x35, 0x15, 0x0a, 0xd4, 0x49, 0xa7, 0xd9,
+    0x20, 0x70, 0xa4, 0xf2, 0xf4, 0x24, 0x66, 0x52, 0xd1, 0xa5,
+    0x22, 0xea, 0x29, 0xd9, 0xb2, 0x82, 0x8d, 0x36, 0x66, 0x75,
+    0x6e, 0xd5, 0x8c, 0x54, 0x08, 0x21, 0xf2, 0xee, 0x78, 0xc7,
+    0x1f, 0x9c, 0x63, 0x5d, 0x88, 0x56, 0xd1, 0xa0, 0x80, 0x33,
+    0x60, 0x55, 0x23, 0x72, 0xd6, 0xb0, 0x1a, 0x50, 0xde, 0x25,
+    0x70, 0xb5, 0x77, 0x42, 0xf8, 0x19, 0x18, 0x15, 0x8f, 0xfd,
+    0x0c, 0x6a, 0x46, 0x1f, 0xbf, 0xe7, 0x60, 0x91, 0xe7, 0xbb,
+    0x25, 0x63, 0x66, 0xff, 0x11, 0x97, 0xbb, 0xfd, 0x3a, 0x17,
+    0x94, 0x77, 0xb4, 0xc5, 0x21, 0xba, 0x30, 0x94, 0xdd, 0xe5,
+    0xeb, 0x1d, 0x01, 0xba, 0xf9, 0xb0, 0x30, 0xdb, 0x11, 0x93,
+    0xb7, 0xfa, 0x79, 0xe8, 0x5e, 0xb3, 0x39, 0xf4, 0x51, 0x68,
+    0x31, 0xce, 0xe9, 0x0e, 0x93, 0xde, 0xff, 0xec, 0x27, 0xbd,
+    0xa6, 0x1a, 0x4c, 0xe0, 0x92, 0x5c, 0xd4, 0x07, 0xd2, 0xa1,
+    0xdd, 0x12, 0x83, 0xd2, 0x9a, 0x79, 0xb3, 0x3c, 0xfb, 0x07,
+    0xe3, 0x18, 0x1a, 0xa3, 0x24, 0x80, 0xb4, 0xcc, 0xf4, 0xc6,
+    0xa5, 0x6c, 0x25, 0xd7, 0x99, 0x1a, 0x30, 0xf0, 0xa9, 0xfc,
+    0x2e, 0x83, 0x44, 0xac, 0x64, 0x76, 0x34, 0xb0, 0xa6, 0x6f,
+    0x20, 0x5a, 0x14, 0xf2, 0x07, 0xa7, 0x6f, 0x4d, 0xab, 0xf5,
+    0xfc, 0x9d, 0xd6, 0x3e, 0x82, 0x48, 0x31, 0x25, 0x47, 0xc9,
+    0x0e, 0x1d, 0xdb, 0x98, 0x91, 0x56, 0xf5, 0xfe, 0x66, 0x8d,
+    0x48, 0xf0, 0x4c, 0x6c, 0x2c, 0x96, 0x54, 0x43, 0xec, 0x76,
+    0xf2, 0xe1, 0x76, 0x68, 0xc8, 0xe1, 0xde, 0x0d, 0x8e, 0x6f,
+    0xfc, 0x15, 0xd5, 0x93, 0x92, 0xfe, 0xca, 0x9b, 0x30, 0x61,
+    0x03, 0x0b, 0xca, 0x99, 0x2f, 0xd3, 0x15, 0xe9, 0x66, 0x81,
+    0xbd, 0x56, 0x17, 0x14, 0x4a, 0x2e, 0xf1, 0x34, 0x84, 0x55,
+    0x9d, 0xc0, 0x2b, 0xa7, 0x4a, 0xee, 0xf1, 0x7c, 0x67, 0xc7,
+    0xf3, 0x08, 0x1e, 0x6d, 0x6b, 0x5b, 0xcc, 0x81, 0x91, 0x5c,
+    0x94, 0x1a, 0x80, 0xda, 0x3a, 0xce, 0x36, 0x05, 0xb0, 0x7a,
+    0xe8, 0xd0, 0xb4, 0x57, 0x9c, 0xf9, 0xea, 0xf3, 0x26, 0x1d,
+    0xcb, 0xf8, 0xdd, 0x65, 0xaf, 0xf7, 0xcd, 0xf7, 0xa1, 0x3d,
+    0xfc, 0x9a, 0x3b, 0x08, 0xb9, 0xfa, 0x3c, 0x16, 0x49, 0x4a,
+    0xf1, 0xba, 0x4d, 0x31, 0xdd, 0x5e, 0x4f, 0x3d, 0x66, 0x22,
+    0x1b, 0x08, 0x91, 0x7d, 0xc6, 0xaf, 0x15, 0x07, 0x3c, 0xa1,
+    0xf7, 0x07, 0xfd, 0x3e, 0x90, 0xbb, 0x6f, 0x7a, 0xe9, 0xe1,
+    0x2f, 0xb9, 0xee, 0x91, 0x8e, 0x18, 0xcc, 0x8d, 0x1d, 0x22,
+    0xa0, 0xa0, 0x28, 0x25, 0xfc, 0xd4, 0x94, 0xd3, 0xaa, 0xcf,
+    0xce, 0xd0, 0x85, 0x82, 0x6f, 0x20, 0x9f, 0x55, 0x0e, 0xe5,
+    0x72, 0x0d, 0x17, 0x3e, 0x34, 0xc7, 0x2c, 0x0a, 0x14, 0x45,
+    0x27, 0xe2, 0xc7, 0x2f, 0x86, 0xa1, 0x55, 0x3e, 0x78, 0x03,
+    0xe9, 0x78, 0x2e, 0xd3, 0x99, 0xee, 0xa0, 0x14, 0xf8, 0xe3,
+    0x6c, 0xeb, 0x3f, 0x9a, 0xf3, 0x15, 0xce, 0xd5, 0x76, 0xf6,
+    0x3a, 0x86, 0x30, 0x76, 0xf9, 0x88, 0x30, 0xf5, 0x4a, 0x50,
+    0x58, 0x80, 0xe9, 0xd9, 0xd4, 0xb9, 0x34, 0x42, 0xa6, 0x4e,
+    0x9c, 0x1a, 0x07, 0x16, 0x9e, 0xee, 0xe4, 0x88, 0x04, 0x8e,
+    0xa8, 0xe7, 0xcd, 0xe8, 0x47, 0x1e, 0x54, 0x45, 0xd2, 0x65,
+    0xd8, 0xee, 0x4b, 0xbd, 0xd0, 0x85, 0xaa, 0xfb, 0x06, 0x53,
+    0x91, 0x7e, 0xe0, 0x59, 0x20, 0x57, 0x6a, 0xee, 0xd8, 0x9f,
+    0x77, 0x7f, 0xd7, 0x40, 0x63, 0xbb, 0x21, 0x75, 0x76, 0x11,
+    0x27, 0xcf, 0x05, 0xbb, 0x41, 0x30, 0x98, 0xbf, 0xdc, 0x5f,
+    0xc6, 0xa4, 0x1e, 0x30, 0xa1, 0x53, 0xd4, 0x36, 0x7f, 0x2e,
+    0x86, 0xd7, 0xd9, 0x95, 0x29, 0xd5, 0x46, 0x18, 0x60, 0x27,
+    0xe4, 0x6f, 0xcb, 0xf4, 0xe2, 0xfe, 0xff, 0x3e, 0xff, 0x15,
+    0xc6, 0xf2, 0x31, 0xf9, 0x2a, 0xc8, 0x05, 0x4e, 0x7c, 0x2e,
+    0x92, 0xc8, 0x41, 0x4f, 0x9e, 0x23, 0x21, 0x4d, 0x74, 0xf8,
+    0xc3, 0x44, 0x39, 0xc2, 0x69, 0x4b, 0x2e, 0x76, 0x5e, 0x44,
+    0x12, 0x65, 0x31, 0x98, 0xbe, 0x0a, 0x10, 0x11, 0x12, 0x2c,
+    0x67, 0x3d, 0x85, 0x2e, 0xd3, 0x97, 0x54, 0x1e, 0xb6, 0xad,
+    0xd9, 0x45, 0x11, 0x53, 0x04, 0x7c, 0x3f, 0xf4, 0xc9, 0xac,
+    0x82, 0x1b, 0x84, 0xf4, 0x20, 0x6b, 0xf1, 0xf5, 0x72, 0x04,
+    0x24, 0xc1, 0xd3, 0x42, 0x43, 0x52, 0x9d, 0x2d, 0xd3, 0x89,
+    0x8e, 0xd8, 0x28, 0xb9, 0xa2, 0xb4, 0xed, 0xbc, 0x76, 0x87,
+    0x55, 0x67, 0x39, 0xd9, 0xb7, 0x20, 0x6a, 0xec, 0xec, 0xb8,
+    0x14, 0x51, 0x91, 0xb9, 0x96, 0x0f, 0x7a, 0x3a, 0x12, 0xde,
+    0x14, 0x3b, 0x83, 0xcf, 0x41, 0x5b, 0x5d, 0xff, 0x33, 0x68,
+    0xdb, 0x53, 0x64, 0x93, 0xb1, 0xc3, 0x8a, 0x46, 0xa8, 0x44,
+    0x9c, 0x14, 0x12, 0x6c, 0x92, 0x6f, 0xae, 0xc3, 0x45, 0xb2,
+    0xa1, 0x67, 0x81, 0x3c, 0x22, 0x47, 0xfd, 0xa4, 0x7a, 0x79,
+    0xa8, 0x0a, 0xfb, 0x7a, 0x91, 0x6e, 0xe9, 0x53, 0xec, 0x98,
+    0x82, 0x57, 0xad, 0x05, 0x38, 0x55, 0xc1, 0xce, 0x3a, 0x04,
+    0x4d, 0x12, 0x72, 0x37, 0x4a, 0x36, 0x54, 0x3f, 0x67, 0x8a,
+    0xee, 0xd9, 0xf3, 0x80, 0xd5, 0xd7, 0xb8, 0xfc, 0x6e, 0x4f,
+    0x60, 0x2b, 0x5a, 0xa4, 0xc5, 0x05, 0xdb, 0xe5, 0x09, 0xe3,
+    0xeb, 0xa2, 0x51, 0x33, 0x30, 0x96, 0x46, 0x01, 0x26, 0x8f,
+    0x38, 0xc9, 0x97, 0x32, 0x2d, 0xb4, 0x59, 0x15, 0x15, 0x38,
+    0x66, 0x66, 0xfe, 0xcb, 0xee, 0xc1, 0xf6, 0x4e, 0xb7, 0xdf,
+    0x7b, 0x63, 0xe6, 0x3f, 0xe0, 0x1c, 0x97, 0xed, 0x86, 0xf3,
+    0xd2, 0xad, 0x42, 0x29, 0x20, 0x28, 0xa6, 0x59, 0x58, 0x7d,
+    0x8f, 0x5c, 0x43, 0x07, 0xd1, 0x7e, 0x83, 0xba, 0x9c, 0x1b,
+    0xfe, 0x17, 0x9e, 0xc8, 0x09, 0x63, 0x9a, 0x2d, 0x61, 0x33,
+    0x51, 0x46, 0x01, 0xa8, 0xe9, 0x43, 0x1e, 0x4e, 0xfe, 0x61,
+    0x1a, 0x28, 0x11, 0x65, 0x70, 0x43, 0x9f, 0xfc, 0x21, 0x1d,
+    0x76, 0x7b, 0x40, 0x08, 0x18, 0xd3, 0xe8, 0xc2, 0xe3, 0x8c,
+    0xe7, 0x27, 0xc2, 0xec, 0xb0, 0x08, 0x3e, 0x6b, 0x8f, 0x77,
+    0x6d, 0x9e, 0xa6, 0xab, 0xce, 0x9a, 0xf8, 0x8f, 0x77, 0xb3,
+    0xf4, 0xe8, 0x8b, 0xe7, 0xd9, 0xa1, 0x95, 0x40, 0x6b, 0xca,
+    0x21, 0x98, 0xff, 0xdc, 0xdc, 0x96, 0xc3, 0x08, 0x81, 0x72,
+    0x9a, 0xdd, 0xe2, 0xcf, 0x95, 0x99, 0xa6, 0xa3, 0x5e, 0x9e,
+    0x25, 0x60, 0xa3, 0xc3, 0x39, 0xf7, 0x54, 0x6c, 0xf2, 0x75,
+    0xa9, 0x38, 0x12, 0x38, 0x4d, 0x42, 0xe8, 0xec, 0x13, 0x25,
+    0xa0, 0xf8, 0x04, 0xb8, 0xf6, 0x66, 0x0b, 0x56, 0xe1, 0xfb,
+    0x26, 0x03, 0xe6, 0xa5, 0xf1, 0x4d, 0x7f, 0xa5, 0x9d, 0x58,
+    0x71, 0xd8, 0xc7, 0x6a, 0xbe, 0xdc, 0x90, 0x89, 0xb1, 0x36,
+    0xb4, 0xb6, 0xb4, 0xbb, 0xaf, 0x6e, 0x43, 0x10, 0xa6, 0xea,
+    0xee, 0x12, 0xcb, 0x08, 0x2c, 0x4e, 0x66, 0xf0, 0x1f, 0xf4,
+    0xbf, 0xd3, 0xeb, 0x63, 0x48, 0xd0, 0xbe, 0x8a, 0xed, 0x24,
+    0xdb, 0x0f, 0x23, 0x1d, 0x2e, 0x30, 0x97, 0x0f, 0xd8, 0xc6,
+    0x3b, 0x04, 0x2f, 0x33, 0x78, 0x20, 0x6e, 0xb1, 0x33, 0x03,
+    0x27, 0xac, 0x0a, 0x37, 0x15, 0x31, 0xef, 0x4d, 0x43, 0xcc,
+    0xa0, 0x49, 0x80, 0xe3, 0x8c, 0xc0, 0xf3, 0xf7, 0x2d, 0x37,
+    0x1d, 0xd3, 0x90, 0x5f, 0xad, 0x31, 0xb5, 0x95, 0x17, 0x69,
+    0x4b, 0xec, 0x84, 0x9d, 0x2b, 0x8d, 0xdd, 0x9b, 0x58, 0x04,
+    0xba, 0x28, 0x0e, 0x28, 0xc1, 0x54, 0x6c, 0xb0, 0x25, 0x0c,
+    0x4f, 0x98, 0x47, 0xf7, 0x93, 0xc2, 0xae, 0x2f, 0x6d, 0x29,
+    0x9c, 0x3d, 0xe3, 0xb5, 0xe3, 0x28, 0x43, 0x14, 0xe6, 0x92,
+    0x4c, 0x79, 0x90, 0x59, 0x75, 0x77, 0x56, 0x43, 0xda, 0xac,
+    0xa9, 0x42, 0xd7, 0xca, 0x95, 0x73, 0x26, 0x54, 0x1f, 0x3a,
+    0x8a, 0x37, 0x64, 0xd7, 0xcf, 0xe1, 0x31, 0xf7, 0x40, 0x59,
+    0xfd, 0xff, 0xea, 0x72, 0xfd, 0xc4, 0xde, 0xe3, 0x4d, 0x8a,
+    0xf5, 0x80, 0xc0, 0x61, 0x21, 0xbd, 0xbd, 0x8e, 0x42, 0xd5,
+    0x4c, 0xe4, 0xf4, 0x78, 0x31, 0xca, 0xf1, 0xec, 0x7c, 0x7b,
+    0x85, 0x6a, 0x05, 0x54, 0xbe, 0x38, 0x54, 0x2f, 0x1f, 0xda,
+    0x9f, 0x98, 0xe2, 0x79, 0xd7, 0x42, 0xca, 0xba, 0x85, 0x21,
+    0xe2, 0xcb, 0x2b, 0xae, 0x4a, 0x4e, 0x35, 0xfb, 0xcf, 0x3d,
+    0xc5, 0xae, 0x27, 0x30, 0xa9, 0x45, 0xe6, 0x3b, 0x43, 0x3e,
+    0x35, 0xe3, 0xf2, 0x0d, 0x53, 0x32, 0x2b, 0xf6, 0xe6, 0xc7,
+    0xd5, 0x02, 0x82, 0x03, 0xc1, 0x00, 0xd4, 0x04, 0x9b, 0xef,
+    0x5d, 0x58, 0xb0, 0xa3, 0xaa, 0xd2, 0xab, 0x53, 0x65, 0x99,
+    0x03, 0x49, 0x48, 0x4d, 0xf5, 0xdf, 0x5d, 0x16, 0x14, 0x11,
+    0x60, 0x45, 0x1b, 0xff, 0x4a, 0x60, 0x2b, 0x37, 0x63, 0xf6,
+    0xa7, 0x8a, 0xa8, 0xff, 0x08, 0x97, 0x08, 0xfc, 0xbb, 0xb3,
+    0x20, 0xa3, 0xcd, 0xd9, 0x58, 0xdb, 0x16, 0x1b, 0x88, 0x02,
+    0x1e, 0x0f, 0x43, 0x9b, 0x16, 0x7e, 0xbe, 0xb1, 0x9c, 0x13,
+    0x10, 0xdc, 0xa1, 0x56, 0xff, 0xa3, 0xff, 0x5e, 0x69, 0x30,
+    0xee, 0x7e, 0x76, 0x5f, 0x84, 0x94, 0xeb, 0x8f, 0x58, 0xf8,
+    0xcf, 0xbb, 0x99, 0x6e, 0xf0, 0xd8, 0x32, 0xf6, 0xce, 0x48,
+    0x6f, 0x7c, 0xc8, 0x8f, 0xd3, 0x86, 0x22, 0x49, 0x9f, 0xde,
+    0x11, 0x05, 0xa4, 0xdc, 0x92, 0xfb, 0x0f, 0xfa, 0x09, 0x4d,
+    0x17, 0x1a, 0xe2, 0x76, 0x67, 0x40, 0xa9, 0x5b, 0x1b, 0x54,
+    0x66, 0x48, 0xf7, 0xc3, 0x59, 0xd4, 0xcf, 0x55, 0xd0, 0x7f,
+    0x3b, 0xb0, 0xa2, 0xd8, 0xec, 0xb7, 0x88, 0xe7, 0xb0, 0x30,
+    0x72, 0x42, 0x65, 0xe2, 0x91, 0xa7, 0x9b, 0xf6, 0x07, 0x45,
+    0x52, 0x51, 0xaa, 0xbe, 0x32, 0x35, 0xe4, 0x88, 0x23, 0xe7,
+    0xcb, 0x3c, 0x1c, 0xfb, 0x0b, 0x96, 0xd5, 0xb3, 0x92, 0x86,
+    0x79, 0x5b, 0x47, 0x93, 0xd6, 0xbd, 0xc7, 0x21, 0x17, 0xd0,
+    0xc9, 0xc7, 0x69, 0x84, 0x80, 0x98, 0xaf, 0x2c, 0x63, 0xd1,
+    0xef, 0x6e, 0xca, 0x84, 0x30, 0x32, 0x83, 0x2d, 0x49, 0xbb,
+    0x1f, 0x2a, 0xfe, 0x40, 0x7c, 0x03, 0xd4, 0x45, 0xdc, 0xfe,
+    0x94, 0xf9, 0xe4, 0x36, 0x47, 0xfa, 0x7e, 0x2e, 0x93, 0x03,
+    0xf8, 0x15, 0xf9, 0xce, 0xc3, 0x5b, 0x76, 0x10, 0xec, 0x89,
+    0x8c, 0xce, 0x25, 0xa5, 0x77, 0x9a, 0xc5, 0x1e, 0xdd, 0x07,
+    0x1b, 0x5b, 0xac, 0x6f, 0xdb, 0x94, 0x85, 0xdf, 0x02, 0x22,
+    0xd1, 0xa9, 0x01, 0x8e, 0x63, 0xa1, 0xee, 0x94, 0x9c, 0xdb,
+    0xb4, 0x1a, 0x43, 0xe1, 0x1f, 0x4e, 0x2f, 0x68, 0x50, 0x0c,
+    0x2f, 0x5b, 0xc5, 0x1b, 0xe1, 0x8d, 0x4b, 0xe0, 0x63, 0x8d,
+    0x7a, 0x30, 0xbe, 0xb7, 0x2e, 0x02, 0xc6, 0x02, 0xac, 0xa8,
+    0xb8, 0x65, 0xc6, 0x28, 0xee, 0xe4, 0xec, 0x99, 0xa1, 0x9a,
+    0xfd, 0x1f, 0xb5, 0x85, 0x7a, 0x94, 0x16, 0xe2, 0xe7, 0x74,
+    0x06, 0x54, 0x1b, 0xd0, 0xaf, 0x58, 0x4e, 0x50, 0x7e, 0xd6,
+    0xe4, 0x31, 0xd2, 0x0c, 0xd7, 0x9d, 0xe2, 0x00, 0x30, 0xbe,
+    0x26, 0x30, 0x48, 0x99, 0x98, 0x58, 0x54, 0x5a, 0xc4, 0x0a,
+    0x6c, 0xa1, 0x06, 0xe9, 0x38, 0xe6, 0x79, 0x39, 0x00, 0x9e,
+    0xb6, 0xe3, 0xf7, 0x01, 0xcf, 0x2f, 0x82, 0x5e, 0xc3, 0x21,
+    0x1b, 0x79, 0x93, 0xb5, 0xe4, 0x39, 0x9d, 0x32, 0x9d, 0x72,
+    0xa4, 0xa8, 0xc9, 0x90, 0xce, 0xaf, 0xc0, 0x00, 0xad, 0x20,
+    0x87, 0x26, 0xc7, 0xd3, 0x5f, 0x2e, 0xf0, 0x5e, 0xf8, 0x8b,
+    0x85, 0xa3, 0xc6, 0x66, 0xd8, 0x2f, 0x86, 0xfe, 0x7d, 0x8d,
+    0x22, 0xa5, 0x6d, 0x68, 0x3e, 0x87, 0x6e, 0xf7, 0xf1, 0xf0,
+    0x07, 0xc4, 0xe3, 0xf1, 0x84, 0xc4, 0x93, 0x42, 0x06, 0x20,
+    0x80, 0x64, 0xb3, 0x52, 0x5c, 0xa5, 0xcf, 0xee, 0xfe, 0xa4,
+    0x09, 0x41, 0xbe, 0xaa, 0x78, 0x52, 0x76, 0x3f, 0xf7, 0xe8,
+    0xa1, 0x6b, 0x0a, 0xbc, 0x22, 0xbe, 0xdf, 0x72, 0x7b, 0xea,
+    0x90, 0x43, 0xee, 0xc2, 0x0b, 0x26, 0xdc, 0x02, 0x26, 0xa7,
+    0x50, 0x04, 0x7a, 0x06, 0x91, 0xae, 0x93, 0xd5, 0xd2, 0xc9,
+    0xa1, 0xe1, 0xfc, 0xb9, 0x8c, 0x94, 0xca, 0xa8, 0x1c, 0x2c,
+    0x57, 0x97, 0x3e, 0x50, 0xed, 0x93, 0x45, 0x7a, 0x2c, 0x59,
+    0x7b, 0x34, 0x8f, 0xcd, 0xd6, 0x17, 0x93, 0xd8, 0xde, 0xe8,
+    0xb0, 0x9e, 0x27, 0x15, 0xc5, 0xbb, 0xa5, 0xbb, 0xc2, 0x30,
+    0x9b, 0xc7, 0x27, 0x02, 0x18, 0xd8, 0xdb, 0xa4, 0x84, 0x37,
+    0x64, 0xf7, 0xf7, 0xf1, 0xc8, 0x86, 0x4c, 0x64, 0x97, 0x08,
+    0xe9, 0x4e, 0x0e, 0xb6, 0x92, 0xe9, 0x4c, 0x7b, 0x7f, 0xe1,
+    0xcc, 0xa0, 0x71, 0xa7, 0x34, 0x48, 0x46, 0xbb, 0x37, 0xce,
+    0xb0, 0x4d, 0x39, 0xa8, 0x0e, 0xab, 0xf6, 0x2f, 0x7c, 0x88,
+    0xae, 0xcf, 0x90, 0xc6, 0x01, 0xd3, 0x5b, 0x37, 0xe9, 0xb1,
+    0x28, 0x42, 0x14, 0xbf, 0x59, 0x35, 0x04, 0xab, 0x46, 0x6e,
+    0xa8, 0x29, 0xe2, 0x7a, 0x77, 0x0e, 0x07, 0x67, 0xe4, 0x2b,
+    0x03, 0xd2, 0x02, 0x36, 0x16, 0xd7, 0x81, 0x5d, 0x38, 0x9c,
+    0x68, 0x9c, 0xf5, 0x9e, 0x49, 0x7d, 0x99, 0xfd, 0xcd, 0x1d,
+    0xd2, 0xdf, 0x3c, 0x36, 0x19, 0x85, 0xaa, 0xb1, 0x30, 0x7a,
+    0x21, 0xb1, 0x83, 0x16, 0xcf, 0xd1, 0x75, 0xa5, 0x9d, 0xd7,
+    0xc1, 0x60, 0xa8, 0xdb, 0x1e, 0xb9, 0x3e, 0x9c, 0x12, 0x42,
+    0xe8, 0x47, 0x49, 0x18, 0x9f, 0x5c, 0x12, 0xd1, 0x69, 0xd5,
+    0x7d, 0xa8, 0x3c, 0xda, 0x35, 0x8a, 0x6c, 0x63, 0xb8, 0x62,
+    0x8a, 0x61, 0xfa, 0xf2, 0x61, 0x11, 0x1e, 0xb6, 0xf3, 0x5c,
+    0x62, 0x9d, 0xa7, 0x62, 0x0c, 0x87, 0x93, 0xe2, 0x23, 0x6c,
+    0x3d, 0xa9, 0x2c, 0x4b, 0xd5, 0x7f, 0xfe, 0x72, 0x27, 0x36,
+    0x06, 0xcb, 0x65, 0x38, 0xef, 0x13, 0x57, 0x6a, 0xc9, 0xc6,
+    0x4f, 0x51, 0xd0, 0x90, 0x06, 0xa0, 0x23, 0x65, 0x95, 0xce,
+    0x16, 0x8f, 0x8d, 0xb2, 0xf9, 0x7f, 0x3c, 0x2c, 0x30, 0x5a,
+    0x38, 0xf1, 0x62, 0x79, 0x4b, 0xe5, 0xd7, 0x0a, 0x3f, 0x83,
+    0x5f, 0x46, 0x26, 0x97, 0xb7, 0x08, 0x8c, 0x5b, 0xb8, 0x02,
+    0x28, 0xf2, 0x4d, 0xdf, 0x93, 0x97, 0xc5, 0x94, 0x4b, 0x0e,
+    0x42, 0xc3, 0x35, 0x91, 0x6b, 0x69, 0x61, 0x76, 0x7f, 0x94,
+    0xcf, 0x0b, 0x81, 0x33, 0xff, 0xf3, 0x0c, 0xc7, 0x01, 0x94,
+    0x94, 0xa9, 0xed, 0xcd, 0x4b, 0xc8, 0xcb, 0x91, 0xf9, 0x7a,
+    0x47, 0xcd, 0x79, 0x3c, 0xa6, 0xde, 0x52, 0xd2, 0x47, 0x5c,
+    0x10, 0x62, 0xbb, 0xe5, 0x32, 0xde, 0x83, 0xcf, 0xa8, 0x52,
+    0xb3, 0xe7, 0xf9, 0xec, 0x17, 0x34, 0xbf, 0x33, 0x5d, 0xb2,
+    0x4e, 0x56, 0xf7, 0x29, 0xd9, 0x5c, 0x1b, 0x83, 0x01, 0xbb,
+    0xb9, 0x2b, 0x95, 0x52, 0x08, 0xab, 0xa4, 0x51, 0x03, 0xa1,
+    0xfb, 0x6a, 0x50, 0xcd, 0xa8, 0x9d, 0x95, 0x6f, 0x7e, 0xb1,
+    0x80, 0x1e, 0x9d, 0x81, 0x01, 0x26, 0x41, 0x78, 0x36, 0x3c,
+    0x8a, 0x44, 0xf4, 0x98, 0x88, 0x1c, 0x5d, 0x06, 0xd3, 0xd2,
+    0xb2, 0x58, 0x7d, 0xa1, 0x45, 0x1b, 0xbf, 0x8c, 0xf6, 0x6a,
+    0xfa, 0xfd, 0x08, 0x29, 0x3e, 0x91, 0x57, 0xf1, 0x3d, 0x20,
+    0xed, 0x49, 0x6e, 0x9c, 0x46, 0xd5, 0x08, 0x8d, 0x9b, 0xf8,
+    0xef, 0xa3, 0x3a, 0x98, 0xcb, 0xb4, 0xcb, 0x5b, 0x30, 0x25,
+    0x20, 0xcc, 0x04, 0xa1, 0xeb, 0xeb, 0xee, 0x1b, 0x36, 0x85,
+    0xc1, 0x93, 0x16, 0x5a, 0x31, 0xdf, 0xd6, 0x0e, 0x73, 0x9e,
+    0x63, 0x6e, 0x96, 0x90, 0x54, 0xd2, 0xc2, 0x53, 0x69, 0x93,
+    0xd5, 0x54, 0xca, 0xd8, 0x84, 0xf7, 0x8f, 0x9a, 0xd1, 0x80,
+    0x0d, 0x57, 0xa8, 0x26, 0xbe, 0x45, 0x64, 0xd5, 0x2b, 0xbb,
+    0x45, 0xb5, 0x08, 0xb9, 0x37, 0x57, 0x02, 0x82, 0x03, 0xc1,
+    0x00, 0xd1, 0x30, 0x2e, 0xb7, 0x9b, 0xe7, 0x5d, 0x13, 0x74,
+    0x1f, 0x52, 0xf2, 0x02, 0x18, 0xe9, 0x07, 0x87, 0x9e, 0xed,
+    0xde, 0x83, 0x92, 0xcf, 0x73, 0x61, 0x21, 0xc4, 0x62, 0x30,
+    0x6c, 0xa2, 0x36, 0xbd, 0xe2, 0xc5, 0x19, 0xf6, 0xdf, 0x51,
+    0x7b, 0xca, 0xd4, 0xe4, 0x51, 0x83, 0x49, 0x27, 0xdd, 0xbd,
+    0xb0, 0x10, 0x79, 0x39, 0xdd, 0x0e, 0x3d, 0x65, 0xad, 0x6d,
+    0xa3, 0x95, 0x52, 0x85, 0xdb, 0x18, 0x94, 0x60, 0xaa, 0xc0,
+    0xc8, 0x8b, 0xdb, 0xfe, 0xf9, 0xf0, 0x86, 0xf9, 0x33, 0x8a,
+    0xd7, 0xbe, 0x8d, 0x43, 0x83, 0x4d, 0xe4, 0x17, 0x2b, 0x46,
+    0x54, 0x44, 0x1b, 0xbe, 0x52, 0x64, 0x47, 0x02, 0x6c, 0x4a,
+    0x64, 0xb4, 0x3f, 0x21, 0x2f, 0xbb, 0xe3, 0x72, 0x7c, 0x26,
+    0x14, 0xdf, 0x80, 0x50, 0xd4, 0x94, 0xe9, 0xc6, 0x7d, 0x71,
+    0xd8, 0xaf, 0xfb, 0x74, 0x36, 0x33, 0xbe, 0x58, 0x63, 0xad,
+    0xcb, 0xdf, 0xc0, 0x73, 0x9e, 0x19, 0xb0, 0x65, 0xe1, 0xd1,
+    0x10, 0x44, 0xf1, 0xf0, 0x08, 0xa3, 0x09, 0x25, 0xeb, 0xd5,
+    0xcb, 0xdd, 0x98, 0xdd, 0xbc, 0x09, 0x2c, 0xef, 0xc1, 0x8d,
+    0x43, 0x15, 0x41, 0xc2, 0xa1, 0x84, 0x37, 0x70, 0x5a, 0xd5,
+    0xf5, 0xb2, 0x6a, 0x1f, 0xbb, 0xcc, 0x30, 0xb9, 0xd9, 0xc7,
+    0x36, 0x21, 0xf3, 0x69, 0x3e, 0x91, 0x38, 0x4d, 0xa5, 0xc4,
+    0xf7, 0x84, 0x90, 0x34, 0x0e, 0x47, 0x7e, 0x26, 0xf2, 0x98,
+    0x25, 0x26, 0xda, 0xf0, 0x4e, 0x55, 0xea, 0x4d, 0x9b, 0x8a,
+    0x4a, 0xe1, 0x1f, 0xa0, 0x07, 0x90, 0x9e, 0x59, 0x64, 0xae,
+    0xd9, 0xd6, 0x7e, 0x72, 0xa1, 0xc4, 0xea, 0x7d, 0xbd, 0x1f,
+    0x7d, 0x2b, 0xd9, 0x2c, 0xdc, 0x8b, 0xc0, 0xda, 0x52, 0x0c,
+    0xd1, 0xd0, 0x56, 0xb7, 0x93, 0xc7, 0x26, 0x79, 0x71, 0xd0,
+    0x0d, 0xae, 0xaa, 0xa7, 0xe4, 0xc1, 0x59, 0x27, 0x68, 0x97,
+    0x9a, 0xff, 0x3d, 0x36, 0x07, 0x55, 0x77, 0x07, 0x97, 0x69,
+    0xf3, 0x99, 0x91, 0x3f, 0x63, 0xfd, 0x70, 0x8c, 0xa1, 0xeb,
+    0xc5, 0x21, 0xa3, 0xfe, 0x99, 0x96, 0x11, 0x37, 0xb9, 0xe6,
+    0x93, 0xf8, 0xd0, 0xb1, 0xa3, 0x57, 0x7a, 0xa8, 0x63, 0xdd,
+    0x09, 0x56, 0xb0, 0x3b, 0xa6, 0x59, 0xc7, 0x89, 0x54, 0x16,
+    0xe9, 0x2d, 0x78, 0x7d, 0xaf, 0x4e, 0x0a, 0x5b, 0x62, 0x3b,
+    0x0b, 0xcb, 0x24, 0x89, 0x4e, 0x1c, 0x3d, 0xe1, 0xbd, 0x5a,
+    0x3e, 0xc5, 0xfd, 0x15, 0x3d, 0x08, 0x38, 0x33, 0x5e, 0x37,
+    0x4c, 0xe3, 0xe3, 0xe9, 0xc4, 0x1d, 0x2b, 0xd4, 0x58, 0x25,
+    0x58, 0x23, 0x8e, 0xc6, 0x83, 0x9a, 0xf3, 0x9a, 0x78, 0xe9,
+    0xa7, 0xca, 0xd7, 0xdd, 0x89, 0x20, 0x6e, 0x02, 0xea, 0x6b,
+    0x37, 0x74, 0xda, 0xa0, 0xc2, 0x5a, 0x2b, 0x80, 0x1c, 0x28,
+    0x91, 0x0d, 0x50, 0x64, 0xf0, 0x12, 0xe7, 0xc4, 0x7e, 0xdd,
+    0x28, 0x3b, 0x26, 0x9a, 0xf4, 0x39, 0x56, 0xa4, 0x72, 0x4d,
+    0xcb, 0x67, 0x3c, 0x68, 0xb2, 0x6f, 0xf0, 0xd0, 0x15, 0x90,
+    0xc8, 0x08, 0xbb, 0x0b, 0x08, 0x6b, 0x8a, 0xde, 0x41, 0x57,
+    0xbc, 0x63, 0x0e, 0x00, 0x8d, 0xf8, 0xdd, 0x93, 0xce, 0x58,
+    0x7b, 0xa8, 0xb9, 0x64, 0x26, 0x06, 0xe7, 0x71, 0x23, 0x0f,
+    0x41, 0xf1, 0xb7, 0xae, 0x59, 0x2e, 0xd0, 0x73, 0xc5, 0xd9,
+    0xdc, 0x0e, 0x1c, 0x02, 0x58, 0x69, 0xb3, 0x15, 0x6d, 0x96,
+    0x2b, 0xdb, 0x7b, 0x3b, 0x6c, 0x38, 0x32, 0x6b, 0xd8, 0x08,
+    0xb2, 0xbd, 0xa7, 0x49, 0x43, 0xeb, 0x90, 0x42, 0x70, 0xc5,
+    0xba, 0xcd, 0x4a, 0x44, 0x8f, 0x83, 0x0d, 0x17, 0x51, 0x5a,
+    0x95, 0xa2, 0x57, 0x9a, 0x16, 0x19, 0x91, 0xbb, 0x90, 0x5c,
+    0x2a, 0x16, 0xe8, 0x26, 0x10, 0x3c, 0xb7, 0x10, 0x5c, 0xf8,
+    0xc5, 0x15, 0x2b, 0x70, 0x75, 0x69, 0xba, 0x7b, 0x3d, 0x0b,
+    0x57, 0xac, 0x39, 0x12, 0x2e, 0xd6, 0xd9, 0x13, 0x74, 0x8e,
+    0xa8, 0x0b, 0x17, 0xe1, 0x03, 0x7a, 0xba, 0x1d, 0x07, 0x91,
+    0x8c, 0x2a, 0x3a, 0x8d, 0xe0, 0x2a, 0x94, 0xd4, 0x16, 0x35,
+    0x64, 0x8b, 0x92, 0x2c, 0x2f, 0xa4, 0x18, 0xfe, 0x3f, 0x02,
+    0x19, 0x8c, 0xb9, 0xeb, 0xaf, 0x01, 0x06, 0xa8, 0x37, 0x7f,
+    0xe2, 0x44, 0x10, 0xce, 0xeb, 0x8d, 0xd0, 0x73, 0xc4, 0x1e,
+    0x3d, 0x2c, 0xaf, 0x77, 0xb2, 0xef, 0xe5, 0x95, 0x8b, 0xdf,
+    0x02, 0xfc, 0x93, 0xb8, 0xa9, 0x27, 0x88, 0x1d, 0x1d, 0x82,
+    0x9f, 0xb6, 0xe4, 0x12, 0x05, 0x79, 0xb6, 0x1c, 0x41, 0x0d,
+    0xc1, 0x53, 0x49, 0x8f, 0x3d, 0xc9, 0xad, 0x84, 0xcb, 0x0b,
+    0x88, 0x7e, 0xfe, 0x73, 0x59, 0x21, 0x64, 0xc5, 0x50, 0x53,
+    0xdc, 0x98, 0xc6, 0x43, 0xb8, 0xf5, 0xc3, 0xa1, 0xf5, 0xb2,
+    0xd8, 0x86, 0xe9, 0xae, 0x98, 0xf9, 0x3b, 0x99, 0xc0, 0xe7,
+    0xd7, 0x4a, 0xed, 0xac, 0x89, 0x84, 0xb0, 0x8e, 0xd3, 0xab,
+    0xec, 0x03, 0x02, 0x12, 0x4b, 0x44, 0x17, 0x4d, 0x98, 0x26,
+    0x1e, 0x51, 0xc5, 0xbb, 0xcd, 0xdc, 0x50, 0xab, 0x83, 0x37,
+    0x49, 0x90, 0x1e, 0x34, 0xad, 0x81, 0x22, 0x6c, 0xe4, 0xdd,
+    0x19, 0x01, 0x09, 0x25, 0x2d, 0x9e, 0x52, 0x90, 0x72, 0xa1,
+    0x68, 0x3d, 0x0c, 0x49, 0x99, 0x19, 0x75, 0x5a, 0xca, 0x08,
+    0x69, 0xa1, 0xd2, 0x88, 0x8c, 0xea, 0xcf, 0x9c, 0xbc, 0x23,
+    0xad, 0x3f, 0xb9, 0xfc, 0xb9, 0x30, 0x0d, 0xd6, 0xd9, 0x65,
+    0x0c, 0x7e, 0x99, 0x68, 0x35, 0x26, 0x07, 0xd1, 0x55, 0xbf,
+    0x8e, 0xde, 0xe7, 0xe7, 0x01, 0xcb, 0xca, 0x0a, 0x39, 0x2e,
+    0xcc, 0x19, 0xec, 0x77, 0xf3, 0xab, 0xb2, 0xe6, 0x0e, 0x54,
+    0x06, 0x01, 0x50, 0x77, 0xd3, 0x61, 0x36, 0x05, 0x90, 0xe4,
+    0xd8, 0xc4, 0x1d, 0xf5, 0xc7, 0xfa, 0x65, 0xf0, 0x46, 0x6a,
+    0x5f, 0xa7, 0xc3, 0x8c, 0x6f, 0x04, 0x7f, 0xcf, 0x97, 0xb9,
+    0x68, 0x92, 0x31, 0x09, 0x02, 0x9f, 0x22, 0xc9, 0xf8, 0xe6,
+    0x7e, 0xa8, 0x95, 0x5b, 0x6b, 0xfe, 0x9c, 0x4e, 0x63, 0x2d,
+    0x8c, 0x1a, 0x4c, 0x8b, 0x14, 0x79, 0x08, 0xd5, 0x96, 0x76,
+    0xd1, 0xb4, 0x2f, 0xae, 0x5d, 0x91, 0x88, 0x7c, 0xdd, 0xd2,
+    0x06, 0x86, 0xcf, 0x0a, 0x83, 0x6f, 0xda, 0xca, 0x71, 0x7c,
+    0xe7, 0xe5, 0x34, 0xa8, 0x9a, 0x53, 0x8d, 0xa5, 0xaa, 0x5d,
+    0xb5, 0x17, 0x81, 0x34, 0x6f, 0xbe, 0xbb, 0xb6, 0x58, 0x22,
+    0x90, 0x80, 0xf6, 0x9c, 0x1c, 0xb0, 0x79, 0x8f, 0x92, 0x5b,
+    0x7d, 0x1c, 0x71, 0x5f, 0xb4, 0x87, 0x36, 0xbe, 0x81, 0x8d,
+    0x4a, 0xfc, 0x28, 0x72, 0x81, 0xaf, 0x5f, 0xbd, 0x5f, 0x99,
+    0xe3, 0xc9, 0x37, 0xb0, 0x6e, 0xad, 0x70, 0x96, 0xfa, 0xe3,
+    0x99, 0xf7, 0x08, 0x14, 0x21, 0x21, 0xb7, 0x1a, 0xaa, 0xe8,
+    0x07, 0xb6, 0xfd, 0xa3, 0x7a, 0x2d, 0x93, 0x64, 0x8f, 0x89,
+    0x2c, 0x71, 0x49, 0x71, 0xb8, 0x45, 0xca, 0xe0, 0x7c, 0x00,
+    0x8d, 0xbd, 0xb8, 0x1c, 0x3a, 0x94, 0xa2, 0xa7, 0x6d, 0x0a,
+    0x2e, 0x84, 0xaf, 0xbd, 0xab, 0x05, 0x95, 0x64, 0x8b, 0x05,
+    0xc8, 0xc9, 0x4e, 0xea, 0xb5, 0x96, 0x4a, 0x47, 0xdd, 0xf2,
+    0xcb, 0x02, 0x82, 0x03, 0xc0, 0x59, 0xb3, 0xd9, 0x85, 0xdc,
+    0xa8, 0xb9, 0x93, 0x85, 0xa2, 0xbc, 0x79, 0xfc, 0x72, 0x50,
+    0xc1, 0xa0, 0xa5, 0xdb, 0x71, 0x35, 0xa1, 0x31, 0xbc, 0x68,
+    0x4e, 0xd5, 0x19, 0x9e, 0x0e, 0x32, 0x3a, 0xad, 0x40, 0x9e,
+    0x82, 0x3c, 0x1e, 0x2b, 0x34, 0x3b, 0xc9, 0x32, 0x61, 0x07,
+    0x5e, 0x46, 0xa9, 0xbe, 0xbe, 0x73, 0x0c, 0x12, 0xef, 0x52,
+    0x68, 0x82, 0xe2, 0x0b, 0x12, 0x74, 0xfc, 0x10, 0x5c, 0xc0,
+    0xb5, 0x98, 0x4d, 0x86, 0xbb, 0x8c, 0x40, 0x15, 0xa1, 0x6e,
+    0x46, 0x73, 0x2e, 0xd6, 0x99, 0x6b, 0x50, 0xab, 0x04, 0x1a,
+    0x5f, 0xf4, 0xfa, 0xcb, 0x4b, 0xad, 0xc4, 0x5e, 0x62, 0xa7,
+    0x48, 0xd4, 0x52, 0x85, 0xdc, 0x2a, 0x85, 0x9b, 0xee, 0x08,
+    0xa5, 0xaa, 0xaa, 0xe8, 0x44, 0xf0, 0xed, 0x89, 0x21, 0xe4,
+    0xb4, 0xab, 0x3c, 0x0d, 0x53, 0x7e, 0x53, 0xdd, 0xac, 0x47,
+    0xda, 0x77, 0x79, 0x5f, 0x78, 0x7a, 0x80, 0x84, 0x46, 0x50,
+    0xaa, 0xdb, 0x3b, 0x8c, 0x6b, 0xda, 0xb0, 0xac, 0x0a, 0xd3,
+    0x4c, 0xe4, 0x6e, 0x87, 0xd1, 0xb2, 0x5a, 0xd5, 0x98, 0xae,
+    0xcb, 0x7e, 0xc2, 0x19, 0xdc, 0x53, 0x64, 0x86, 0x4c, 0x7b,
+    0xe0, 0x63, 0x22, 0x94, 0x34, 0xad, 0x15, 0xdc, 0xd8, 0xa8,
+    0x5f, 0xc6, 0x58, 0xf6, 0x72, 0x34, 0xdd, 0xfb, 0x85, 0x8a,
+    0xd9, 0xa3, 0xfb, 0x3b, 0xad, 0x5d, 0xf0, 0x1a, 0x0b, 0xa8,
+    0x91, 0xe7, 0x7d, 0x26, 0x27, 0x38, 0xf8, 0xe0, 0x49, 0x1b,
+    0x56, 0xc5, 0x5b, 0xe3, 0x1c, 0x7b, 0xa3, 0x53, 0x6d, 0x22,
+    0xfa, 0xd7, 0x63, 0x5f, 0xf0, 0xcb, 0x92, 0x49, 0x01, 0x54,
+    0xe5, 0x77, 0x5b, 0xd3, 0xab, 0xce, 0xb8, 0x3a, 0x5b, 0xb8,
+    0x07, 0x40, 0x46, 0x51, 0xe4, 0x59, 0xa2, 0x45, 0x41, 0xcc,
+    0x81, 0x6c, 0xe3, 0xa6, 0xb3, 0xa0, 0x30, 0x4a, 0x67, 0x10,
+    0xed, 0xc0, 0x8a, 0xcd, 0xfc, 0xa5, 0x44, 0x9b, 0x59, 0x19,
+    0x4a, 0x43, 0x8d, 0xec, 0x00, 0xd8, 0x6d, 0xf9, 0xf0, 0x2d,
+    0xd9, 0x55, 0xfc, 0x05, 0xe2, 0x12, 0x48, 0x4d, 0xd6, 0x7d,
+    0xec, 0x41, 0xc4, 0x9e, 0xe2, 0xed, 0x84, 0x14, 0x29, 0x0e,
+    0x5b, 0x81, 0x0b, 0xb0, 0x87, 0x8a, 0xd3, 0x35, 0x5c, 0xad,
+    0xdb, 0xcc, 0xa1, 0x3c, 0xcb, 0x8b, 0x23, 0x55, 0x69, 0xf1,
+    0x83, 0x84, 0x81, 0x36, 0xae, 0xd5, 0xf3, 0x98, 0xb6, 0xb2,
+    0xb5, 0xa1, 0x79, 0x6d, 0x80, 0x8f, 0x2e, 0x25, 0x71, 0x4e,
+    0x16, 0xff, 0xa0, 0x7c, 0xa4, 0x62, 0x8c, 0x44, 0x85, 0x64,
+    0x90, 0x7c, 0xac, 0x10, 0x36, 0xf2, 0xf2, 0xfb, 0x20, 0x2b,
+    0xa1, 0x27, 0xd0, 0xcc, 0x27, 0xfd, 0xb0, 0xba, 0x3e, 0x37,
+    0xb1, 0xa8, 0x9d, 0x3c, 0x82, 0x63, 0xd0, 0x16, 0x6d, 0x7a,
+    0xdd, 0x2e, 0xea, 0xe5, 0x87, 0xd6, 0x64, 0x72, 0xdb, 0x60,
+    0x53, 0x38, 0x18, 0x66, 0x1d, 0x25, 0xf6, 0x08, 0x92, 0x7f,
+    0x68, 0x5b, 0x79, 0x07, 0xde, 0x93, 0xee, 0xf8, 0x8f, 0xce,
+    0x28, 0xcf, 0xb1, 0x5b, 0x43, 0x51, 0xdf, 0xf5, 0xac, 0xe8,
+    0x9c, 0x95, 0x14, 0x8a, 0x67, 0xe1, 0x25, 0xfe, 0x11, 0xa2,
+    0x40, 0xf8, 0xdd, 0xcf, 0xf5, 0x17, 0x94, 0xb6, 0x88, 0x10,
+    0xa2, 0x90, 0x58, 0xef, 0xaf, 0x73, 0xf8, 0x7c, 0x9b, 0x20,
+    0x30, 0x79, 0xca, 0x3f, 0xa9, 0x22, 0x40, 0xfd, 0xcc, 0xb0,
+    0x5d, 0x0d, 0x97, 0x6b, 0xc0, 0x75, 0x35, 0x33, 0xc5, 0x76,
+    0x45, 0x6e, 0x9b, 0x78, 0xe7, 0xb4, 0x04, 0xb3, 0xba, 0x3b,
+    0x93, 0xb1, 0xa9, 0x8f, 0xa1, 0x24, 0x5d, 0x1c, 0x0e, 0x66,
+    0xc0, 0xc6, 0xcc, 0xd6, 0xb7, 0x88, 0x9d, 0xb8, 0x45, 0xe3,
+    0xaa, 0xc9, 0x6c, 0xfd, 0x37, 0xdc, 0x85, 0xd5, 0x49, 0xfd,
+    0xef, 0xeb, 0xf9, 0x7a, 0x3f, 0x7a, 0x4f, 0x86, 0x49, 0xaa,
+    0x9f, 0x08, 0x12, 0x0b, 0x11, 0x35, 0x5c, 0xd5, 0xd3, 0xda,
+    0x14, 0x50, 0x03, 0x2c, 0x24, 0x26, 0x0e, 0x29, 0x18, 0xcc,
+    0x1d, 0x0a, 0x7c, 0x94, 0x8b, 0xc0, 0xa0, 0x3f, 0xea, 0xf8,
+    0xf8, 0xa9, 0x1d, 0x65, 0x31, 0x6f, 0x3b, 0xa6, 0xd0, 0xfc,
+    0x26, 0xb0, 0x4e, 0x3a, 0x66, 0xe7, 0x32, 0x10, 0x2e, 0x84,
+    0x47, 0xad, 0xa9, 0x18, 0xfc, 0xa3, 0x8b, 0x74, 0x84, 0x4f,
+    0xd4, 0x25, 0x93, 0x0f, 0xdb, 0x2e, 0xae, 0x88, 0x8e, 0x28,
+    0xf8, 0x0f, 0xaa, 0x60, 0xd4, 0xbe, 0xad, 0x66, 0x0c, 0x0d,
+    0x01, 0xbd, 0x8d, 0xc4, 0xfc, 0x48, 0xef, 0x78, 0x14, 0x34,
+    0xee, 0xb3, 0xbc, 0xd4, 0xbb, 0x1f, 0x7c, 0x12, 0x5c, 0x9b,
+    0xeb, 0x77, 0x3e, 0x2c, 0x6e, 0x31, 0x59, 0xe6, 0x78, 0xc5,
+    0xe8, 0xa4, 0xdd, 0xf1, 0xef, 0x5d, 0x27, 0x45, 0x31, 0x13,
+    0xd0, 0x21, 0xa1, 0x13, 0xce, 0xac, 0x7e, 0xbb, 0xfb, 0x32,
+    0xeb, 0x76, 0x31, 0xc4, 0xba, 0xdf, 0xfb, 0x5a, 0x1b, 0xc9,
+    0x9e, 0x74, 0xa0, 0x9e, 0x26, 0x82, 0xd5, 0x6e, 0x1d, 0xc3,
+    0x0e, 0xd1, 0x6d, 0xdb, 0x43, 0xb3, 0x0b, 0x14, 0xcb, 0xf1,
+    0xad, 0x62, 0x34, 0x49, 0xb8, 0xd3, 0x08, 0xca, 0x93, 0xf1,
+    0x42, 0xb2, 0x4b, 0x23, 0x79, 0x93, 0xde, 0x18, 0x58, 0xf3,
+    0x66, 0xfa, 0xdc, 0xab, 0xca, 0x33, 0x22, 0x2b, 0x5c, 0x8c,
+    0x12, 0xc1, 0x7b, 0x2e, 0x52, 0x72, 0xa7, 0x78, 0x4a, 0x49,
+    0xa1, 0x53, 0x02, 0x76, 0x2d, 0x2e, 0xf8, 0x43, 0x3c, 0xe8,
+    0xfa, 0xb7, 0xff, 0x39, 0xed, 0x74, 0x9e, 0x11, 0x61, 0x33,
+    0xde, 0x2a, 0x55, 0xe6, 0x4a, 0xe7, 0x97, 0xa6, 0xb2, 0xc3,
+    0x40, 0x41, 0x52, 0x66, 0xcf, 0xbf, 0xf8, 0x8e, 0x08, 0xea,
+    0x96, 0x4d, 0x03, 0xc9, 0xbe, 0x3c, 0x4e, 0x36, 0x8c, 0x6f,
+    0x4d, 0x1e, 0xcd, 0x31, 0x6d, 0x53, 0xea, 0x9e, 0xf0, 0x8e,
+    0x35, 0x97, 0x37, 0x54, 0xe9, 0x0f, 0xb8, 0x23, 0x25, 0x69,
+    0x5b, 0xb5, 0xff, 0xc3, 0x5a, 0x2d, 0x10, 0x6a, 0xc0, 0xb8,
+    0xee, 0x0d, 0x31, 0x5b, 0xe4, 0x69, 0x40, 0x62, 0xa7, 0x1b,
+    0x16, 0xfa, 0xd6, 0xb8, 0xba, 0xc8, 0x6a, 0xa3, 0x29, 0xdd,
+    0x9b, 0x4d, 0xd7, 0x96, 0xef, 0x31, 0x74, 0xac, 0x37, 0x10,
+    0x91, 0x30, 0x0c, 0x15, 0x3f, 0x09, 0xb6, 0x7d, 0x22, 0xfb,
+    0x8c, 0x6f, 0xc3, 0x93, 0xa3, 0x98, 0xa6, 0x23, 0xa4, 0x55,
+    0xe0, 0x9e, 0x23, 0x06, 0xa9, 0x78, 0xe9, 0xb3, 0x88, 0xc9,
+    0xb7, 0x83, 0x05, 0x46, 0x11, 0x3a, 0x0a, 0xb9, 0x74, 0x5b,
+    0xa0, 0xb5, 0x06, 0x96, 0x86, 0xb6, 0xf4, 0x9d, 0x0d, 0x86,
+    0x43, 0xa8, 0x40, 0x4b, 0x08, 0x93, 0x7c, 0xad, 0xb0, 0x50,
+    0xb4, 0xd0, 0xe7, 0xad, 0xd0, 0x54, 0x5e, 0x15, 0xaf, 0xad,
+    0x34, 0x12, 0x86, 0xb3, 0x29, 0x3b, 0x20, 0xc9, 0xad, 0xeb,
+    0xc2, 0x65, 0xf3, 0x5c, 0x2d, 0xe5, 0xff, 0xfd, 0x81, 0x79,
+    0xf5, 0x11, 0x6f, 0xf7, 0xca, 0x0c, 0x76, 0xf0, 0xd4, 0x02,
+    0x9d, 0xb7, 0x76, 0x39, 0x6d, 0x32, 0x6a, 0xb8, 0x30, 0xa4,
+    0x01, 0xcc, 0x10, 0xef, 0xb1, 0x0e, 0x41, 0x22, 0x82, 0x5b,
+    0x22, 0xcb, 0x32, 0x19, 0x2e, 0xa3, 0x0a, 0xce, 0x05, 0xdd,
+    0xe8, 0x4a, 0x58, 0x92, 0xe1, 0x02, 0x82, 0x03, 0xc0, 0x22,
+    0x0f, 0x95, 0x5b, 0xc2, 0x1f, 0xde, 0xf0, 0xde, 0xf4, 0x86,
+    0xbd, 0xef, 0x07, 0x7d, 0x52, 0x03, 0x8c, 0x26, 0x31, 0x17,
+    0xfd, 0x5c, 0x97, 0xed, 0xd5, 0xe0, 0xb3, 0x18, 0x2d, 0x68,
+    0x10, 0x3f, 0xc4, 0xdf, 0xd1, 0x05, 0x78, 0x81, 0x3d, 0x05,
+    0xde, 0xba, 0x3a, 0x67, 0x85, 0x0e, 0xdf, 0xb5, 0x16, 0x28,
+    0xe8, 0x84, 0x3a, 0x71, 0x2a, 0x20, 0x17, 0x28, 0x05, 0xfd,
+    0xb7, 0x4d, 0x22, 0x4a, 0x93, 0x46, 0x56, 0x27, 0x43, 0xc0,
+    0x3a, 0x16, 0xff, 0x3d, 0x61, 0xcc, 0xcb, 0xce, 0xac, 0xa8,
+    0x53, 0x3a, 0x0d, 0xf4, 0x2d, 0xd2, 0x73, 0xf2, 0x64, 0xa0,
+    0x1e, 0x60, 0x53, 0xec, 0x0d, 0xff, 0xe0, 0x00, 0x10, 0xfb,
+    0xa4, 0x57, 0xd3, 0xfc, 0xe4, 0xe0, 0xec, 0x44, 0x0b, 0x1c,
+    0x05, 0x39, 0xa4, 0x13, 0x87, 0x29, 0x11, 0x9d, 0xea, 0xe9,
+    0x64, 0xa9, 0x1c, 0x76, 0x3a, 0x65, 0x0b, 0xfd, 0xed, 0x77,
+    0x46, 0x4f, 0xcd, 0x0b, 0x63, 0xc4, 0x83, 0x0b, 0x56, 0x79,
+    0xd3, 0x67, 0x01, 0x11, 0x02, 0xd9, 0x50, 0xd8, 0x23, 0xf4,
+    0xb6, 0x02, 0x4c, 0xae, 0xb5, 0xc9, 0x68, 0x1b, 0x87, 0x33,
+    0xbb, 0xdc, 0x64, 0x0e, 0x32, 0x34, 0xb2, 0x25, 0xaa, 0x76,
+    0xdd, 0x7e, 0xc3, 0x46, 0x51, 0x1c, 0xc1, 0xd0, 0x05, 0x09,
+    0x6c, 0x27, 0xd3, 0xcf, 0x33, 0x7a, 0xb9, 0x26, 0x24, 0x23,
+    0x4a, 0x93, 0x9f, 0x4b, 0x96, 0xc7, 0xe2, 0xb2, 0x51, 0x42,
+    0x4d, 0x5d, 0xd9, 0x73, 0x75, 0xce, 0x23, 0x28, 0x56, 0x5e,
+    0xe7, 0x96, 0x58, 0x04, 0xfd, 0x33, 0x93, 0x08, 0x41, 0x62,
+    0x02, 0x7e, 0xc9, 0xc6, 0x55, 0x64, 0x19, 0xda, 0x39, 0xb8,
+    0x5d, 0x09, 0x47, 0xf3, 0xdd, 0x77, 0xee, 0xea, 0x35, 0x73,
+    0x95, 0xdb, 0x18, 0x4d, 0xd1, 0xfe, 0xee, 0x40, 0x31, 0x2a,
+    0x22, 0x91, 0x69, 0xd6, 0xed, 0x9c, 0x54, 0x14, 0x73, 0x61,
+    0x61, 0xe7, 0x1d, 0x34, 0x96, 0x47, 0xff, 0x28, 0x7a, 0x48,
+    0xa3, 0xf4, 0xcd, 0x64, 0x23, 0xe2, 0x52, 0x2f, 0x20, 0x8f,
+    0x04, 0xb3, 0xdc, 0xf0, 0x29, 0x67, 0x88, 0x76, 0x79, 0xdb,
+    0x86, 0xa7, 0x95, 0xf0, 0x15, 0x81, 0xbb, 0x98, 0xee, 0xff,
+    0x55, 0x7c, 0xb0, 0xee, 0x67, 0x65, 0xfd, 0xf2, 0x29, 0x0f,
+    0x85, 0x51, 0xf9, 0xac, 0x5c, 0x55, 0x5a, 0xde, 0x40, 0x62,
+    0x58, 0x55, 0x9f, 0x09, 0x4c, 0x2e, 0x28, 0x75, 0xbc, 0x48,
+    0xe2, 0x97, 0x85, 0xb3, 0x83, 0xeb, 0x21, 0x49, 0x21, 0xd4,
+    0xed, 0x74, 0x4f, 0xc1, 0x6c, 0x34, 0x8c, 0x11, 0xb0, 0x93,
+    0x41, 0x99, 0x23, 0x2e, 0xa4, 0xc1, 0x9f, 0x34, 0x74, 0x64,
+    0xbb, 0xd7, 0x4f, 0x8f, 0x9f, 0x3a, 0x0c, 0x4f, 0x5e, 0xdd,
+    0x41, 0x07, 0xf1, 0xfd, 0x5a, 0x9d, 0xe6, 0x77, 0xd8, 0x7e,
+    0x71, 0x7b, 0xad, 0xf7, 0x76, 0x13, 0x71, 0x90, 0xb3, 0x0f,
+    0x46, 0x8e, 0xee, 0x7b, 0x33, 0x97, 0x5d, 0x21, 0x3b, 0xa0,
+    0x58, 0x9e, 0xb7, 0x87, 0x30, 0x8f, 0xc1, 0x23, 0x2c, 0xde,
+    0xf7, 0x0d, 0xa9, 0xd6, 0x50, 0xeb, 0x35, 0x7a, 0x82, 0xab,
+    0x22, 0x49, 0x86, 0xd4, 0x61, 0xc7, 0xc2, 0x4e, 0x77, 0xfc,
+    0x16, 0x0b, 0xaf, 0x81, 0x6a, 0x47, 0xea, 0xac, 0x7e, 0x51,
+    0x4c, 0x56, 0x30, 0x21, 0x46, 0x41, 0xc3, 0x92, 0x60, 0x99,
+    0x4f, 0x88, 0x36, 0x3b, 0x27, 0xb4, 0xb2, 0x7e, 0x44, 0x2f,
+    0xdd, 0x95, 0xe4, 0x5e, 0x16, 0x1f, 0xa7, 0x32, 0x6b, 0x60,
+    0x24, 0x0f, 0xf2, 0xe6, 0x35, 0x3c, 0x0c, 0x3e, 0xb5, 0xd6,
+    0xdd, 0x63, 0xe2, 0x76, 0x35, 0x38, 0x79, 0xbf, 0xa5, 0x23,
+    0xa4, 0xdd, 0xeb, 0x01, 0x48, 0xd0, 0x60, 0x86, 0x11, 0x38,
+    0x5f, 0x9e, 0x6b, 0x00, 0x67, 0xd2, 0x5b, 0x41, 0x0a, 0x5e,
+    0x13, 0x0f, 0xa1, 0x9e, 0x90, 0x85, 0xa6, 0x7f, 0xe5, 0x4b,
+    0x9e, 0x93, 0x4e, 0x5b, 0x1f, 0x47, 0x62, 0xb0, 0x23, 0xbe,
+    0x82, 0xa9, 0xd9, 0xb6, 0x2e, 0xfd, 0xb1, 0x10, 0xca, 0xe0,
+    0xc9, 0x5d, 0xf6, 0x85, 0x18, 0x6c, 0x9c, 0x1d, 0x1f, 0x7c,
+    0xf6, 0x55, 0x09, 0x80, 0xcf, 0xac, 0xfe, 0x37, 0x6a, 0x4f,
+    0x96, 0xaa, 0x40, 0x79, 0x8b, 0x4a, 0xf2, 0x96, 0x79, 0x12,
+    0x1a, 0x26, 0x87, 0x06, 0x35, 0x4d, 0xd4, 0x3e, 0x14, 0x39,
+    0xe5, 0x6c, 0x39, 0x0f, 0x84, 0xb3, 0x5f, 0xed, 0xf4, 0xff,
+    0x89, 0x52, 0x05, 0x00, 0xf1, 0xd1, 0xc3, 0xcf, 0x54, 0x10,
+    0x24, 0x7c, 0xa6, 0xb5, 0x95, 0xa8, 0x6e, 0x13, 0x3e, 0x4a,
+    0x40, 0x6c, 0xf9, 0x63, 0x90, 0x44, 0x52, 0x07, 0x53, 0xb7,
+    0x51, 0xd9, 0x18, 0x47, 0x2e, 0xb0, 0x4e, 0x0f, 0x09, 0x99,
+    0x3a, 0x97, 0x26, 0x53, 0xa6, 0x02, 0x06, 0x0e, 0x93, 0xe1,
+    0x0b, 0xc5, 0xa9, 0x14, 0xd3, 0xd6, 0x8a, 0x29, 0x75, 0xcd,
+    0xb6, 0x7b, 0x64, 0x7c, 0xdd, 0x7e, 0xb4, 0x0a, 0x87, 0x48,
+    0x4a, 0x1b, 0x0e, 0x74, 0x4c, 0xd3, 0x0e, 0x96, 0x0e, 0x53,
+    0xc4, 0x3d, 0x7b, 0x1c, 0x87, 0x6a, 0x15, 0xd8, 0x77, 0xba,
+    0xe6, 0xa0, 0x2f, 0x2c, 0x1a, 0x9d, 0xde, 0x79, 0xfd, 0xab,
+    0x44, 0x80, 0xf0, 0x37, 0x9a, 0x3b, 0xf8, 0xde, 0x3d, 0x29,
+    0xcb, 0x89, 0x64, 0x4b, 0x57, 0xe7, 0x6b, 0x84, 0x09, 0x27,
+    0x17, 0x2f, 0xb2, 0xba, 0x3d, 0x09, 0xc9, 0x3c, 0x89, 0xe6,
+    0x19, 0x73, 0x83, 0xf7, 0xc6, 0x19, 0x18, 0x96, 0xb2, 0x7d,
+    0x1e, 0x9f, 0x70, 0x1f, 0xfc, 0x1f, 0xe2, 0xb5, 0x69, 0x1e,
+    0xf4, 0x65, 0x91, 0xce, 0x4b, 0xdc, 0x74, 0x49, 0x21, 0x64,
+    0x8b, 0x33, 0x50, 0xd2, 0xc1, 0x33, 0x62, 0x5b, 0xde, 0x0a,
+    0x72, 0xbe, 0xc0, 0x05, 0x51, 0x15, 0x80, 0xed, 0x32, 0x3a,
+    0x64, 0xa2, 0x73, 0x68, 0x5b, 0x16, 0xcf, 0x70, 0x5c, 0x98,
+    0xe5, 0x67, 0x45, 0x60, 0x57, 0x2b, 0x47, 0x0a, 0x22, 0x73,
+    0xc3, 0x56, 0x33, 0x3e, 0x14, 0x1d, 0x0c, 0xd1, 0x03, 0x08,
+    0x92, 0x21, 0x2b, 0xa9, 0x6e, 0x6b, 0xf9, 0x0c, 0x1e, 0x86,
+    0xdd, 0xb5, 0xbb, 0xa4, 0xa5, 0x82, 0x99, 0x98, 0x49, 0x36,
+    0xec, 0x98, 0x98, 0x95, 0xac, 0xc2, 0xa0, 0x1f, 0xa5, 0x7e,
+    0x67, 0xd1, 0xcf, 0x6a, 0xf4, 0x16, 0x08, 0x7a, 0x8d, 0x0b,
+    0xae, 0x12, 0x51, 0xe6, 0x8e, 0xe6, 0xcd, 0xa1, 0xaa, 0x6d,
+    0xe4, 0x54, 0xd4, 0x69, 0x1b, 0x09, 0x6a, 0xba, 0x5e, 0x0b,
+    0x11, 0x9c, 0x83, 0xb3, 0x5c, 0x67, 0xbb, 0x2d, 0xf8, 0x66,
+    0x1c, 0x33, 0xb8, 0x22, 0x58, 0x10, 0x96, 0xe9, 0x99, 0xaf,
+    0x0b, 0x2a, 0xf1, 0xe0, 0xcb, 0x56, 0xfb, 0x6d, 0x04, 0x40,
+    0xec, 0x37, 0x67, 0x1e, 0x08, 0x7a, 0x1c, 0xe9, 0xd8, 0x54,
+    0xf7, 0xd4, 0xc7, 0x3c, 0x45, 0x23, 0x2b, 0x76, 0xd2, 0x62,
+    0xc2, 0x53, 0xce, 0xfe, 0x02, 0xc4, 0xd9, 0xf6, 0x3c, 0xed,
+    0x49, 0x47, 0x21, 0xf9, 0x03, 0x3a, 0xa0, 0x16, 0x3a, 0xfe,
+    0x0c, 0x2f, 0x54, 0x7e, 0x85, 0x29, 0x7b, 0xc0, 0xaf, 0xa8,
+    0x5d, 0x31, 0x25, 0xda, 0xa7, 0xe3, 0x92, 0x1b, 0x64, 0x01,
+    0x1b, 0x3f, 0x6e, 0x47, 0xc5, 0x5a, 0x84, 0x52, 0x17, 0x02,
+    0x82, 0x03, 0xc1, 0x00, 0x81, 0x99, 0x2e, 0x72, 0x41, 0x6e,
+    0x86, 0xeb, 0x6f, 0x42, 0xd1, 0x38, 0x6e, 0xaa, 0x1a, 0xd5,
+    0x0a, 0xad, 0x51, 0xb1, 0xce, 0xd6, 0x35, 0xbe, 0x34, 0xd8,
+    0xc1, 0xe4, 0x5f, 0xdf, 0x2e, 0xe4, 0x90, 0xf2, 0x61, 0x21,
+    0x46, 0xc6, 0xfe, 0xab, 0x0f, 0x6c, 0x97, 0x78, 0xcd, 0x55,
+    0x86, 0x83, 0x61, 0x99, 0x49, 0x14, 0x86, 0xc6, 0x86, 0xf1,
+    0x41, 0x66, 0xc9, 0x39, 0x52, 0x99, 0x49, 0x07, 0xd6, 0x9d,
+    0xb7, 0x40, 0x34, 0x5f, 0xe7, 0x3a, 0xfa, 0x95, 0xeb, 0xa1,
+    0x03, 0xb7, 0x52, 0x71, 0x93, 0x30, 0x0b, 0x51, 0x58, 0x82,
+    0x07, 0x2f, 0x44, 0xa9, 0x4f, 0x9b, 0x1b, 0xf3, 0xd6, 0x21,
+    0x3d, 0x68, 0xef, 0x3f, 0xaf, 0xc2, 0x6f, 0xa0, 0xd5, 0x2b,
+    0xb8, 0x73, 0x84, 0x67, 0x36, 0x8b, 0xa4, 0x25, 0xe0, 0x86,
+    0xd9, 0x14, 0x5c, 0x6c, 0xd8, 0x61, 0xe1, 0x0a, 0x6c, 0xaf,
+    0xbb, 0x9c, 0xf6, 0x74, 0xca, 0x5a, 0x04, 0xac, 0x85, 0xc1,
+    0x1b, 0x4d, 0xf2, 0x07, 0xb6, 0x1e, 0x97, 0x7b, 0x75, 0xdf,
+    0x9b, 0x8a, 0x31, 0xc6, 0x90, 0xd5, 0x8d, 0x39, 0xc2, 0x54,
+    0xf4, 0xe2, 0x83, 0x57, 0x12, 0x19, 0xf5, 0xb2, 0xd2, 0x53,
+    0x81, 0x6d, 0xf0, 0x09, 0xc9, 0x80, 0x8b, 0x07, 0x7c, 0x59,
+    0xcd, 0x78, 0x00, 0xd6, 0x44, 0x7f, 0xe4, 0xdb, 0x77, 0x02,
+    0x00, 0x25, 0x79, 0x91, 0xc9, 0xde, 0xd0, 0xed, 0x3f, 0xfc,
+    0x37, 0x36, 0xea, 0xf0, 0x56, 0x50, 0xe7, 0x38, 0xca, 0xe1,
+    0x67, 0x12, 0x96, 0x55, 0x3e, 0xff, 0x97, 0xe5, 0xa7, 0x03,
+    0x5b, 0x72, 0x80, 0xd6, 0xa5, 0x23, 0x39, 0x78, 0x07, 0xc8,
+    0x83, 0x19, 0x74, 0xfb, 0x79, 0xc2, 0x9e, 0xbd, 0xf9, 0xaf,
+    0x09, 0x0f, 0xbd, 0x3d, 0x34, 0xe8, 0x44, 0x89, 0xb1, 0xf1,
+    0x2b, 0xa5, 0xff, 0x22, 0xc9, 0x47, 0xe2, 0x31, 0xb5, 0x6b,
+    0x8a, 0x65, 0x5f, 0x81, 0x5f, 0x89, 0xb0, 0x03, 0x5d, 0x53,
+    0x0e, 0xdd, 0xfb, 0xe5, 0x70, 0xaa, 0xd2, 0x37, 0x4d, 0xa1,
+    0x7c, 0xf2, 0xe4, 0x7f, 0xf1, 0x4a, 0xaf, 0x12, 0xd1, 0x83,
+    0xdc, 0xb2, 0x9e, 0xc1, 0x95, 0x3d, 0x04, 0x9f, 0xa3, 0xad,
+    0xcc, 0x78, 0x14, 0x9a, 0xf9, 0x58, 0x39, 0x08, 0x15, 0xda,
+    0x1b, 0x94, 0x50, 0x2d, 0x44, 0xc0, 0x23, 0x1c, 0x36, 0x5f,
+    0x16, 0x08, 0xa3, 0xdf, 0x9e, 0x4f, 0xbb, 0x07, 0xcd, 0xe3,
+    0x8c, 0xbf, 0xf1, 0xc3, 0x3e, 0x98, 0xf8, 0x49, 0x79, 0x58,
+    0xc9, 0x0f, 0x47, 0xc0, 0xab, 0x2f, 0x21, 0x63, 0xf6, 0xe6,
+    0xfe, 0x8a, 0xea, 0xbc, 0x32, 0x63, 0xca, 0x75, 0xf8, 0xa4,
+    0x1b, 0x6c, 0xfe, 0x9a, 0x6e, 0x68, 0x1f, 0x48, 0x59, 0xfb,
+    0x34, 0x43, 0x10, 0xd5, 0x0d, 0x80, 0x54, 0xcb, 0x67, 0x21,
+    0xc7, 0x13, 0x85, 0x38, 0x0c, 0xf9, 0x40, 0x2e, 0x2e, 0x4a,
+    0x05, 0x9e, 0x51, 0xae, 0xdd, 0xba, 0x23, 0x83, 0x66, 0x2a,
+    0xbf, 0x7f, 0xca, 0x9c, 0x6c, 0x2d, 0x6b, 0x7d, 0x68, 0x52,
+    0x81, 0x56, 0x2f, 0xea, 0xf9, 0xe7, 0xf1, 0x55, 0x16, 0xfc,
+    0x29, 0xe2, 0xa5, 0x1e, 0x0a, 0x06, 0xe0, 0x85, 0x4e, 0xa6,
+    0x5d, 0x20, 0x9d, 0x2b, 0xa2, 0xad, 0xaa, 0xd6, 0x9b, 0xd2,
+    0x98, 0x29, 0x45, 0x5c, 0x55, 0xc0, 0x91, 0xa2, 0x65, 0xcd,
+    0xac, 0xc6, 0x1a, 0x53, 0xa1, 0x46, 0x13, 0xf9, 0xfe, 0x1a,
+    0xf6, 0xdf, 0xa5, 0x1a, 0x58, 0x7c, 0x81, 0x2e, 0x46, 0x46,
+    0xf7, 0x2f, 0xd6, 0xaa, 0x21, 0xb0, 0x0e, 0x7e, 0xac, 0xb8,
+    0xc6, 0x76, 0x62, 0x82, 0x3b, 0x0a, 0x36, 0xbe, 0x97, 0x16,
+    0xd5, 0x79, 0x55, 0x15, 0x64, 0x2a, 0xbe, 0x19, 0x4e, 0x93,
+    0x3b, 0x44, 0x7c, 0xe2, 0xfc, 0x18, 0x4e, 0x83, 0x37, 0xfb,
+    0x26, 0x78, 0x6d, 0x24, 0x6b, 0x48, 0x21, 0x67, 0xde, 0xf5,
+    0x00, 0x22, 0x9a, 0xec, 0x40, 0x16, 0x96, 0x8a, 0x3f, 0xd5,
+    0xa6, 0x5e, 0x03, 0x84, 0xbb, 0x15, 0x4d, 0x55, 0x71, 0x00,
+    0x90, 0xc2, 0x96, 0x25, 0x01, 0xab, 0xe6, 0x47, 0x44, 0x6f,
+    0xf9, 0x53, 0x80, 0x2b, 0xa8, 0x83, 0xc8, 0x14, 0x77, 0x13,
+    0x00, 0x66, 0xee, 0x7e, 0x7a, 0xa0, 0x28, 0x65, 0xf3, 0x31,
+    0xb6, 0xac, 0xd7, 0x87, 0x84, 0x29, 0xed, 0x5b, 0xcd, 0x74,
+    0xc0, 0x89, 0x51, 0x11, 0x9a, 0xd5, 0x7b, 0xe0, 0x9c, 0xd0,
+    0x8d, 0x72, 0xe3, 0x77, 0xda, 0x0a, 0xc2, 0xdc, 0x6f, 0xad,
+    0x49, 0x03, 0xfa, 0xe6, 0x7e, 0xa6, 0x24, 0x32, 0xe6, 0x8f,
+    0xd9, 0x70, 0xfa, 0x59, 0x70, 0xa9, 0xa3, 0x08, 0x7d, 0x89,
+    0xc4, 0x96, 0x61, 0xc2, 0xf5, 0xe5, 0xb5, 0x3b, 0x0d, 0xec,
+    0xb8, 0x9c, 0xee, 0x09, 0x77, 0x27, 0xbd, 0x35, 0x66, 0x90,
+    0x9e, 0x46, 0xf7, 0xbd, 0xa6, 0xc5, 0x31, 0xd4, 0x6a, 0x52,
+    0x17, 0x5d, 0x0a, 0x0e, 0x2c, 0x34, 0x7a, 0x6a, 0x21, 0xac,
+    0x42, 0xf0, 0x31, 0xde, 0x48, 0xe0, 0x27, 0xd0, 0x79, 0xc9,
+    0x06, 0x94, 0x7b, 0x51, 0x4b, 0x5b, 0x02, 0x6a, 0x19, 0xba,
+    0x71, 0x45, 0x9c, 0xdf, 0xe6, 0x30, 0x9e, 0xaa, 0xad, 0xa1,
+    0x87, 0xf6, 0x37, 0xde, 0xa2, 0x97, 0x68, 0x20, 0x2d, 0x5a,
+    0xdc, 0xdd, 0x91, 0x63, 0x5f, 0x79, 0xda, 0x99, 0x20, 0x3a,
+    0x4b, 0xe5, 0x43, 0x0e, 0x12, 0x70, 0x57, 0x91, 0xfa, 0xee,
+    0xc4, 0xb6, 0xb6, 0xb1, 0xf1, 0x06, 0xbd, 0xcf, 0x8d, 0x2a,
+    0x05, 0xc0, 0x07, 0x23, 0x84, 0x85, 0xef, 0x9c, 0xbb, 0x6f,
+    0x5f, 0x4a, 0x9a, 0x27, 0x9f, 0x9f, 0x32, 0x97, 0xe8, 0x24,
+    0xb9, 0x64, 0x2c, 0x39, 0xff, 0x2f, 0x4b, 0xc4, 0x7e, 0x65,
+    0xfe, 0xbb, 0x5c, 0xa0, 0xb2, 0x6e, 0xc4, 0xb6, 0x93, 0x2b,
+    0x51, 0x9e, 0x2e, 0x1f, 0xd8, 0xcf, 0x60, 0xe0, 0x75, 0x15,
+    0xf9, 0xa0, 0x67, 0x99, 0x88, 0x2b, 0x76, 0xce, 0x41, 0x42,
+    0x10, 0x29, 0x89, 0xbf, 0xca, 0xb7, 0x61, 0x08, 0x94, 0xee,
+    0xa0, 0xb3, 0x3a, 0x09, 0xc5, 0x6f, 0x04, 0xf9, 0x1b, 0xb5,
+    0x64, 0x99, 0x08, 0xe4, 0xcc, 0xce, 0xdf, 0x71, 0x65, 0x8a,
+    0x6d, 0x62, 0xde, 0x76, 0x1d, 0x6d, 0x6b, 0x78, 0x22, 0x32,
+    0x63, 0xdd, 0x53, 0x7d, 0xec, 0xed, 0x9d, 0x82, 0xa9, 0x2c,
+    0x5c, 0x8a, 0x17, 0xdd, 0x85, 0xf9, 0xd2, 0xac, 0x6e, 0x98,
+    0x60, 0x2e, 0x08, 0xd4, 0x06, 0x76, 0xf4, 0x97, 0xca, 0xb1,
+    0x72, 0x50, 0x5b, 0x83, 0xea, 0xbb, 0x39, 0x0f, 0x18, 0xb3,
+    0xb8, 0x03, 0xee, 0x7c, 0x84, 0xa9, 0x69, 0xcd, 0x1d, 0xbd,
+    0xe2, 0xb7, 0xce, 0xe2, 0x6f, 0x03, 0x49, 0x52, 0x67, 0xa0,
+    0x1b, 0x23, 0x43, 0x92, 0x2c, 0x7c, 0x3b, 0x65, 0xe8, 0x61,
+    0x99, 0xde, 0xb5, 0xf1, 0x63, 0x73, 0x92, 0x6c, 0x70, 0x8b,
+    0x83, 0x10, 0xb4, 0x06, 0x2c, 0x99, 0x12, 0x73, 0xec, 0x87,
+    0x92, 0x09, 0x67, 0x96, 0xd6, 0x9c, 0x9f, 0x35, 0x48, 0x48,
+    0x3b, 0x44, 0x00, 0x73, 0x1c, 0x59, 0xeb, 0x81, 0x7b, 0xd1,
+    0xda, 0x76, 0xcf, 0xc2, 0x4d, 0xf1, 0xa2, 0x5b, 0x2f, 0x5f,
+    0x91, 0x29, 0x6e, 0x08, 0x37, 0xd6, 0xaa, 0xd2, 0xf8, 0x4f,
+    0x5e, 0x00, 0x16, 0x52
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/timeouts.h b/trunk/3rdparty/openssl-1.1-fit/apps/timeouts.h
new file mode 100644
index 000000000..e023b0aa4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/timeouts.h
@@ -0,0 +1,17 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef INCLUDED_TIMEOUTS_H
+# define INCLUDED_TIMEOUTS_H
+
+/* numbers in us */
+# define DGRAM_RCV_TIMEOUT         250000
+# define DGRAM_SND_TIMEOUT         250000
+
+#endif                          /* ! INCLUDED_TIMEOUTS_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/ts.c b/trunk/3rdparty/openssl-1.1-fit/apps/ts.c
new file mode 100644
index 000000000..930c1daaa
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/ts.c
@@ -0,0 +1,986 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_TS
+NON_EMPTY_TRANSLATION_UNIT
+#else
+# include <stdio.h>
+# include <stdlib.h>
+# include <string.h>
+# include "apps.h"
+# include "progs.h"
+# include <openssl/bio.h>
+# include <openssl/err.h>
+# include <openssl/pem.h>
+# include <openssl/rand.h>
+# include <openssl/ts.h>
+# include <openssl/bn.h>
+
+/* Request nonce length, in bits (must be a multiple of 8). */
+# define NONCE_LENGTH            64
+
+/* Name of config entry that defines the OID file. */
+# define ENV_OID_FILE            "oid_file"
+
+/* Is |EXACTLY_ONE| of three pointers set? */
+# define EXACTLY_ONE(a, b, c) \
+        (( a && !b && !c) || \
+         ( b && !a && !c) || \
+         ( c && !a && !b))
+
+static ASN1_OBJECT *txt2obj(const char *oid);
+static CONF *load_config_file(const char *configfile);
+
+/* Query related functions. */
+static int query_command(const char *data, const char *digest,
+                         const EVP_MD *md, const char *policy, int no_nonce,
+                         int cert, const char *in, const char *out, int text);
+static TS_REQ *create_query(BIO *data_bio, const char *digest, const EVP_MD *md,
+                            const char *policy, int no_nonce, int cert);
+static int create_digest(BIO *input, const char *digest,
+                         const EVP_MD *md, unsigned char **md_value);
+static ASN1_INTEGER *create_nonce(int bits);
+
+/* Reply related functions. */
+static int reply_command(CONF *conf, const char *section, const char *engine,
+                         const char *queryfile, const char *passin, const char *inkey,
+                         const EVP_MD *md, const char *signer, const char *chain,
+                         const char *policy, const char *in, int token_in,
+                         const char *out, int token_out, int text);
+static TS_RESP *read_PKCS7(BIO *in_bio);
+static TS_RESP *create_response(CONF *conf, const char *section, const char *engine,
+                                const char *queryfile, const char *passin,
+                                const char *inkey, const EVP_MD *md, const char *signer,
+                                const char *chain, const char *policy);
+static ASN1_INTEGER *serial_cb(TS_RESP_CTX *ctx, void *data);
+static ASN1_INTEGER *next_serial(const char *serialfile);
+static int save_ts_serial(const char *serialfile, ASN1_INTEGER *serial);
+
+/* Verify related functions. */
+static int verify_command(const char *data, const char *digest, const char *queryfile,
+                          const char *in, int token_in,
+                          const char *CApath, const char *CAfile, const char *untrusted,
+                          X509_VERIFY_PARAM *vpm);
+static TS_VERIFY_CTX *create_verify_ctx(const char *data, const char *digest,
+                                        const char *queryfile,
+                                        const char *CApath, const char *CAfile,
+                                        const char *untrusted,
+                                        X509_VERIFY_PARAM *vpm);
+static X509_STORE *create_cert_store(const char *CApath, const char *CAfile,
+                                     X509_VERIFY_PARAM *vpm);
+static int verify_cb(int ok, X509_STORE_CTX *ctx);
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_ENGINE, OPT_CONFIG, OPT_SECTION, OPT_QUERY, OPT_DATA,
+    OPT_DIGEST, OPT_TSPOLICY, OPT_NO_NONCE, OPT_CERT,
+    OPT_IN, OPT_TOKEN_IN, OPT_OUT, OPT_TOKEN_OUT, OPT_TEXT,
+    OPT_REPLY, OPT_QUERYFILE, OPT_PASSIN, OPT_INKEY, OPT_SIGNER,
+    OPT_CHAIN, OPT_VERIFY, OPT_CAPATH, OPT_CAFILE, OPT_UNTRUSTED,
+    OPT_MD, OPT_V_ENUM, OPT_R_ENUM
+} OPTION_CHOICE;
+
+const OPTIONS ts_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"config", OPT_CONFIG, '<', "Configuration file"},
+    {"section", OPT_SECTION, 's', "Section to use within config file"},
+    {"query", OPT_QUERY, '-', "Generate a TS query"},
+    {"data", OPT_DATA, '<', "File to hash"},
+    {"digest", OPT_DIGEST, 's', "Digest (as a hex string)"},
+    OPT_R_OPTIONS,
+    {"tspolicy", OPT_TSPOLICY, 's', "Policy OID to use"},
+    {"no_nonce", OPT_NO_NONCE, '-', "Do not include a nonce"},
+    {"cert", OPT_CERT, '-', "Put cert request into query"},
+    {"in", OPT_IN, '<', "Input file"},
+    {"token_in", OPT_TOKEN_IN, '-', "Input is a PKCS#7 file"},
+    {"out", OPT_OUT, '>', "Output file"},
+    {"token_out", OPT_TOKEN_OUT, '-', "Output is a PKCS#7 file"},
+    {"text", OPT_TEXT, '-', "Output text (not DER)"},
+    {"reply", OPT_REPLY, '-', "Generate a TS reply"},
+    {"queryfile", OPT_QUERYFILE, '<', "File containing a TS query"},
+    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
+    {"inkey", OPT_INKEY, 's', "File with private key for reply"},
+    {"signer", OPT_SIGNER, 's', "Signer certificate file"},
+    {"chain", OPT_CHAIN, '<', "File with signer CA chain"},
+    {"verify", OPT_VERIFY, '-', "Verify a TS response"},
+    {"CApath", OPT_CAPATH, '/', "Path to trusted CA files"},
+    {"CAfile", OPT_CAFILE, '<', "File with trusted CA certs"},
+    {"untrusted", OPT_UNTRUSTED, '<', "File with untrusted certs"},
+    {"", OPT_MD, '-', "Any supported digest"},
+# ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+# endif
+    {OPT_HELP_STR, 1, '-', "\nOptions specific to 'ts -verify': \n"},
+    OPT_V_OPTIONS,
+    {OPT_HELP_STR, 1, '-', "\n"},
+    {NULL}
+};
+
+/*
+ * This command is so complex, special help is needed.
+ */
+static char* opt_helplist[] = {
+    "Typical uses:",
+    "ts -query [-rand file...] [-config file] [-data file]",
+    "          [-digest hexstring] [-tspolicy oid] [-no_nonce] [-cert]",
+    "          [-in file] [-out file] [-text]",
+    "  or",
+    "ts -reply [-config file] [-section tsa_section]",
+    "          [-queryfile file] [-passin password]",
+    "          [-signer tsa_cert.pem] [-inkey private_key.pem]",
+    "          [-chain certs_file.pem] [-tspolicy oid]",
+    "          [-in file] [-token_in] [-out file] [-token_out]",
+# ifndef OPENSSL_NO_ENGINE
+    "          [-text] [-engine id]",
+# else
+    "          [-text]",
+# endif
+    "  or",
+    "ts -verify -CApath dir -CAfile file.pem -untrusted file.pem",
+    "           [-data file] [-digest hexstring]",
+    "           [-queryfile file] -in file [-token_in]",
+    "           [[options specific to 'ts -verify']]",
+    NULL,
+};
+
+int ts_main(int argc, char **argv)
+{
+    CONF *conf = NULL;
+    const char *CAfile = NULL, *untrusted = NULL, *prog;
+    const char *configfile = default_config_file, *engine = NULL;
+    const char *section = NULL;
+    char **helpp;
+    char *password = NULL;
+    char *data = NULL, *digest = NULL, *policy = NULL;
+    char *in = NULL, *out = NULL, *queryfile = NULL, *passin = NULL;
+    char *inkey = NULL, *signer = NULL, *chain = NULL, *CApath = NULL;
+    const EVP_MD *md = NULL;
+    OPTION_CHOICE o, mode = OPT_ERR;
+    int ret = 1, no_nonce = 0, cert = 0, text = 0;
+    int vpmtouched = 0;
+    X509_VERIFY_PARAM *vpm = NULL;
+    /* Input is ContentInfo instead of TimeStampResp. */
+    int token_in = 0;
+    /* Output is ContentInfo instead of TimeStampResp. */
+    int token_out = 0;
+
+    if ((vpm = X509_VERIFY_PARAM_new()) == NULL)
+        goto end;
+
+    prog = opt_init(argc, argv, ts_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(ts_options);
+            for (helpp = opt_helplist; *helpp; ++helpp)
+                BIO_printf(bio_err, "%s\n", *helpp);
+            ret = 0;
+            goto end;
+        case OPT_CONFIG:
+            configfile = opt_arg();
+            break;
+        case OPT_SECTION:
+            section = opt_arg();
+            break;
+        case OPT_QUERY:
+        case OPT_REPLY:
+        case OPT_VERIFY:
+            if (mode != OPT_ERR)
+                goto opthelp;
+            mode = o;
+            break;
+        case OPT_DATA:
+            data = opt_arg();
+            break;
+        case OPT_DIGEST:
+            digest = opt_arg();
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_TSPOLICY:
+            policy = opt_arg();
+            break;
+        case OPT_NO_NONCE:
+            no_nonce = 1;
+            break;
+        case OPT_CERT:
+            cert = 1;
+            break;
+        case OPT_IN:
+            in = opt_arg();
+            break;
+        case OPT_TOKEN_IN:
+            token_in = 1;
+            break;
+        case OPT_OUT:
+            out = opt_arg();
+            break;
+        case OPT_TOKEN_OUT:
+            token_out = 1;
+            break;
+        case OPT_TEXT:
+            text = 1;
+            break;
+        case OPT_QUERYFILE:
+            queryfile = opt_arg();
+            break;
+        case OPT_PASSIN:
+            passin = opt_arg();
+            break;
+        case OPT_INKEY:
+            inkey = opt_arg();
+            break;
+        case OPT_SIGNER:
+            signer = opt_arg();
+            break;
+        case OPT_CHAIN:
+            chain = opt_arg();
+            break;
+        case OPT_CAPATH:
+            CApath = opt_arg();
+            break;
+        case OPT_CAFILE:
+            CAfile = opt_arg();
+            break;
+        case OPT_UNTRUSTED:
+            untrusted = opt_arg();
+            break;
+        case OPT_ENGINE:
+            engine = opt_arg();
+            break;
+        case OPT_MD:
+            if (!opt_md(opt_unknown(), &md))
+                goto opthelp;
+            break;
+        case OPT_V_CASES:
+            if (!opt_verify(o, vpm))
+                goto end;
+            vpmtouched++;
+            break;
+        }
+    }
+    if (mode == OPT_ERR || opt_num_rest() != 0)
+        goto opthelp;
+
+    if (mode == OPT_REPLY && passin &&
+        !app_passwd(passin, NULL, &password, NULL)) {
+        BIO_printf(bio_err, "Error getting password.\n");
+        goto end;
+    }
+
+    conf = load_config_file(configfile);
+    if (configfile != default_config_file && !app_load_modules(conf))
+        goto end;
+
+    /* Check parameter consistency and execute the appropriate function. */
+    if (mode == OPT_QUERY) {
+        if (vpmtouched)
+            goto opthelp;
+        if ((data != NULL) && (digest != NULL))
+            goto opthelp;
+        ret = !query_command(data, digest, md, policy, no_nonce, cert,
+                             in, out, text);
+    } else if (mode == OPT_REPLY) {
+        if (vpmtouched)
+            goto opthelp;
+        if ((in != NULL) && (queryfile != NULL))
+            goto opthelp;
+        if (in == NULL) {
+            if ((conf == NULL) || (token_in != 0))
+                goto opthelp;
+        }
+        ret = !reply_command(conf, section, engine, queryfile,
+                             password, inkey, md, signer, chain, policy,
+                             in, token_in, out, token_out, text);
+
+    } else if (mode == OPT_VERIFY) {
+        if ((in == NULL) || !EXACTLY_ONE(queryfile, data, digest))
+            goto opthelp;
+        ret = !verify_command(data, digest, queryfile, in, token_in,
+                              CApath, CAfile, untrusted,
+                              vpmtouched ? vpm : NULL);
+    } else {
+        goto opthelp;
+    }
+
+ end:
+    X509_VERIFY_PARAM_free(vpm);
+    NCONF_free(conf);
+    OPENSSL_free(password);
+    return ret;
+}
+
+/*
+ * Configuration file-related function definitions.
+ */
+
+static ASN1_OBJECT *txt2obj(const char *oid)
+{
+    ASN1_OBJECT *oid_obj = NULL;
+
+    if ((oid_obj = OBJ_txt2obj(oid, 0)) == NULL)
+        BIO_printf(bio_err, "cannot convert %s to OID\n", oid);
+
+    return oid_obj;
+}
+
+static CONF *load_config_file(const char *configfile)
+{
+    CONF *conf = app_load_config(configfile);
+
+    if (conf != NULL) {
+        const char *p;
+
+        BIO_printf(bio_err, "Using configuration from %s\n", configfile);
+        p = NCONF_get_string(conf, NULL, ENV_OID_FILE);
+        if (p != NULL) {
+            BIO *oid_bio = BIO_new_file(p, "r");
+            if (!oid_bio)
+                ERR_print_errors(bio_err);
+            else {
+                OBJ_create_objects(oid_bio);
+                BIO_free_all(oid_bio);
+            }
+        } else
+            ERR_clear_error();
+        if (!add_oid_section(conf))
+            ERR_print_errors(bio_err);
+    }
+    return conf;
+}
+
+/*
+ * Query-related method definitions.
+ */
+static int query_command(const char *data, const char *digest, const EVP_MD *md,
+                         const char *policy, int no_nonce,
+                         int cert, const char *in, const char *out, int text)
+{
+    int ret = 0;
+    TS_REQ *query = NULL;
+    BIO *in_bio = NULL;
+    BIO *data_bio = NULL;
+    BIO *out_bio = NULL;
+
+    /* Build query object. */
+    if (in != NULL) {
+        if ((in_bio = bio_open_default(in, 'r', FORMAT_ASN1)) == NULL)
+            goto end;
+        query = d2i_TS_REQ_bio(in_bio, NULL);
+    } else {
+        if (digest == NULL
+            && (data_bio = bio_open_default(data, 'r', FORMAT_ASN1)) == NULL)
+            goto end;
+        query = create_query(data_bio, digest, md, policy, no_nonce, cert);
+    }
+    if (query == NULL)
+        goto end;
+
+    if (text) {
+        if ((out_bio = bio_open_default(out, 'w', FORMAT_TEXT)) == NULL)
+            goto end;
+        if (!TS_REQ_print_bio(out_bio, query))
+            goto end;
+    } else {
+        if ((out_bio = bio_open_default(out, 'w', FORMAT_ASN1)) == NULL)
+            goto end;
+        if (!i2d_TS_REQ_bio(out_bio, query))
+            goto end;
+    }
+
+    ret = 1;
+
+ end:
+    ERR_print_errors(bio_err);
+    BIO_free_all(in_bio);
+    BIO_free_all(data_bio);
+    BIO_free_all(out_bio);
+    TS_REQ_free(query);
+    return ret;
+}
+
+static TS_REQ *create_query(BIO *data_bio, const char *digest, const EVP_MD *md,
+                            const char *policy, int no_nonce, int cert)
+{
+    int ret = 0;
+    TS_REQ *ts_req = NULL;
+    int len;
+    TS_MSG_IMPRINT *msg_imprint = NULL;
+    X509_ALGOR *algo = NULL;
+    unsigned char *data = NULL;
+    ASN1_OBJECT *policy_obj = NULL;
+    ASN1_INTEGER *nonce_asn1 = NULL;
+
+    if (md == NULL && (md = EVP_get_digestbyname("sha1")) == NULL)
+        goto err;
+    if ((ts_req = TS_REQ_new()) == NULL)
+        goto err;
+    if (!TS_REQ_set_version(ts_req, 1))
+        goto err;
+    if ((msg_imprint = TS_MSG_IMPRINT_new()) == NULL)
+        goto err;
+    if ((algo = X509_ALGOR_new()) == NULL)
+        goto err;
+    if ((algo->algorithm = OBJ_nid2obj(EVP_MD_type(md))) == NULL)
+        goto err;
+    if ((algo->parameter = ASN1_TYPE_new()) == NULL)
+        goto err;
+    algo->parameter->type = V_ASN1_NULL;
+    if (!TS_MSG_IMPRINT_set_algo(msg_imprint, algo))
+        goto err;
+    if ((len = create_digest(data_bio, digest, md, &data)) == 0)
+        goto err;
+    if (!TS_MSG_IMPRINT_set_msg(msg_imprint, data, len))
+        goto err;
+    if (!TS_REQ_set_msg_imprint(ts_req, msg_imprint))
+        goto err;
+    if (policy && (policy_obj = txt2obj(policy)) == NULL)
+        goto err;
+    if (policy_obj && !TS_REQ_set_policy_id(ts_req, policy_obj))
+        goto err;
+
+    /* Setting nonce if requested. */
+    if (!no_nonce && (nonce_asn1 = create_nonce(NONCE_LENGTH)) == NULL)
+        goto err;
+    if (nonce_asn1 && !TS_REQ_set_nonce(ts_req, nonce_asn1))
+        goto err;
+    if (!TS_REQ_set_cert_req(ts_req, cert))
+        goto err;
+
+    ret = 1;
+ err:
+    if (!ret) {
+        TS_REQ_free(ts_req);
+        ts_req = NULL;
+        BIO_printf(bio_err, "could not create query\n");
+        ERR_print_errors(bio_err);
+    }
+    TS_MSG_IMPRINT_free(msg_imprint);
+    X509_ALGOR_free(algo);
+    OPENSSL_free(data);
+    ASN1_OBJECT_free(policy_obj);
+    ASN1_INTEGER_free(nonce_asn1);
+    return ts_req;
+}
+
+static int create_digest(BIO *input, const char *digest, const EVP_MD *md,
+                         unsigned char **md_value)
+{
+    int md_value_len;
+    int rv = 0;
+    EVP_MD_CTX *md_ctx = NULL;
+
+    md_value_len = EVP_MD_size(md);
+    if (md_value_len < 0)
+        return 0;
+
+    if (input != NULL) {
+        unsigned char buffer[4096];
+        int length;
+
+        md_ctx = EVP_MD_CTX_new();
+        if (md_ctx == NULL)
+            return 0;
+        *md_value = app_malloc(md_value_len, "digest buffer");
+        if (!EVP_DigestInit(md_ctx, md))
+            goto err;
+        while ((length = BIO_read(input, buffer, sizeof(buffer))) > 0) {
+            if (!EVP_DigestUpdate(md_ctx, buffer, length))
+                goto err;
+        }
+        if (!EVP_DigestFinal(md_ctx, *md_value, NULL))
+            goto err;
+        md_value_len = EVP_MD_size(md);
+    } else {
+        long digest_len;
+        *md_value = OPENSSL_hexstr2buf(digest, &digest_len);
+        if (!*md_value || md_value_len != digest_len) {
+            OPENSSL_free(*md_value);
+            *md_value = NULL;
+            BIO_printf(bio_err, "bad digest, %d bytes "
+                       "must be specified\n", md_value_len);
+            return 0;
+        }
+    }
+    rv = md_value_len;
+ err:
+    EVP_MD_CTX_free(md_ctx);
+    return rv;
+}
+
+static ASN1_INTEGER *create_nonce(int bits)
+{
+    unsigned char buf[20];
+    ASN1_INTEGER *nonce = NULL;
+    int len = (bits - 1) / 8 + 1;
+    int i;
+
+    if (len > (int)sizeof(buf))
+        goto err;
+    if (RAND_bytes(buf, len) <= 0)
+        goto err;
+
+    /* Find the first non-zero byte and creating ASN1_INTEGER object. */
+    for (i = 0; i < len && !buf[i]; ++i)
+        continue;
+    if ((nonce = ASN1_INTEGER_new()) == NULL)
+        goto err;
+    OPENSSL_free(nonce->data);
+    nonce->length = len - i;
+    nonce->data = app_malloc(nonce->length + 1, "nonce buffer");
+    memcpy(nonce->data, buf + i, nonce->length);
+    return nonce;
+
+ err:
+    BIO_printf(bio_err, "could not create nonce\n");
+    ASN1_INTEGER_free(nonce);
+    return NULL;
+}
+
+/*
+ * Reply-related method definitions.
+ */
+
+static int reply_command(CONF *conf, const char *section, const char *engine,
+                         const char *queryfile, const char *passin, const char *inkey,
+                         const EVP_MD *md, const char *signer, const char *chain,
+                         const char *policy, const char *in, int token_in,
+                         const char *out, int token_out, int text)
+{
+    int ret = 0;
+    TS_RESP *response = NULL;
+    BIO *in_bio = NULL;
+    BIO *query_bio = NULL;
+    BIO *inkey_bio = NULL;
+    BIO *signer_bio = NULL;
+    BIO *out_bio = NULL;
+
+    if (in != NULL) {
+        if ((in_bio = BIO_new_file(in, "rb")) == NULL)
+            goto end;
+        if (token_in) {
+            response = read_PKCS7(in_bio);
+        } else {
+            response = d2i_TS_RESP_bio(in_bio, NULL);
+        }
+    } else {
+        response = create_response(conf, section, engine, queryfile,
+                                   passin, inkey, md, signer, chain, policy);
+        if (response != NULL)
+            BIO_printf(bio_err, "Response has been generated.\n");
+        else
+            BIO_printf(bio_err, "Response is not generated.\n");
+    }
+    if (response == NULL)
+        goto end;
+
+    /* Write response. */
+    if (text) {
+        if ((out_bio = bio_open_default(out, 'w', FORMAT_TEXT)) == NULL)
+        goto end;
+        if (token_out) {
+            TS_TST_INFO *tst_info = TS_RESP_get_tst_info(response);
+            if (!TS_TST_INFO_print_bio(out_bio, tst_info))
+                goto end;
+        } else {
+            if (!TS_RESP_print_bio(out_bio, response))
+                goto end;
+        }
+    } else {
+        if ((out_bio = bio_open_default(out, 'w', FORMAT_ASN1)) == NULL)
+            goto end;
+        if (token_out) {
+            PKCS7 *token = TS_RESP_get_token(response);
+            if (!i2d_PKCS7_bio(out_bio, token))
+                goto end;
+        } else {
+            if (!i2d_TS_RESP_bio(out_bio, response))
+                goto end;
+        }
+    }
+
+    ret = 1;
+
+ end:
+    ERR_print_errors(bio_err);
+    BIO_free_all(in_bio);
+    BIO_free_all(query_bio);
+    BIO_free_all(inkey_bio);
+    BIO_free_all(signer_bio);
+    BIO_free_all(out_bio);
+    TS_RESP_free(response);
+    return ret;
+}
+
+/* Reads a PKCS7 token and adds default 'granted' status info to it. */
+static TS_RESP *read_PKCS7(BIO *in_bio)
+{
+    int ret = 0;
+    PKCS7 *token = NULL;
+    TS_TST_INFO *tst_info = NULL;
+    TS_RESP *resp = NULL;
+    TS_STATUS_INFO *si = NULL;
+
+    if ((token = d2i_PKCS7_bio(in_bio, NULL)) == NULL)
+        goto end;
+    if ((tst_info = PKCS7_to_TS_TST_INFO(token)) == NULL)
+        goto end;
+    if ((resp = TS_RESP_new()) == NULL)
+        goto end;
+    if ((si = TS_STATUS_INFO_new()) == NULL)
+        goto end;
+    if (!TS_STATUS_INFO_set_status(si, TS_STATUS_GRANTED))
+        goto end;
+    if (!TS_RESP_set_status_info(resp, si))
+        goto end;
+    TS_RESP_set_tst_info(resp, token, tst_info);
+    token = NULL;               /* Ownership is lost. */
+    tst_info = NULL;            /* Ownership is lost. */
+    ret = 1;
+
+ end:
+    PKCS7_free(token);
+    TS_TST_INFO_free(tst_info);
+    if (!ret) {
+        TS_RESP_free(resp);
+        resp = NULL;
+    }
+    TS_STATUS_INFO_free(si);
+    return resp;
+}
+
+static TS_RESP *create_response(CONF *conf, const char *section, const char *engine,
+                                const char *queryfile, const char *passin,
+                                const char *inkey, const EVP_MD *md, const char *signer,
+                                const char *chain, const char *policy)
+{
+    int ret = 0;
+    TS_RESP *response = NULL;
+    BIO *query_bio = NULL;
+    TS_RESP_CTX *resp_ctx = NULL;
+
+    if ((query_bio = BIO_new_file(queryfile, "rb")) == NULL)
+        goto end;
+    if ((section = TS_CONF_get_tsa_section(conf, section)) == NULL)
+        goto end;
+    if ((resp_ctx = TS_RESP_CTX_new()) == NULL)
+        goto end;
+    if (!TS_CONF_set_serial(conf, section, serial_cb, resp_ctx))
+        goto end;
+# ifndef OPENSSL_NO_ENGINE
+    if (!TS_CONF_set_crypto_device(conf, section, engine))
+        goto end;
+# endif
+    if (!TS_CONF_set_signer_cert(conf, section, signer, resp_ctx))
+        goto end;
+    if (!TS_CONF_set_certs(conf, section, chain, resp_ctx))
+        goto end;
+    if (!TS_CONF_set_signer_key(conf, section, inkey, passin, resp_ctx))
+        goto end;
+
+    if (md) {
+        if (!TS_RESP_CTX_set_signer_digest(resp_ctx, md))
+            goto end;
+    } else if (!TS_CONF_set_signer_digest(conf, section, NULL, resp_ctx)) {
+            goto end;
+    }
+
+    if (!TS_CONF_set_ess_cert_id_digest(conf, section, resp_ctx))
+        goto end;
+    if (!TS_CONF_set_def_policy(conf, section, policy, resp_ctx))
+        goto end;
+    if (!TS_CONF_set_policies(conf, section, resp_ctx))
+        goto end;
+    if (!TS_CONF_set_digests(conf, section, resp_ctx))
+        goto end;
+    if (!TS_CONF_set_accuracy(conf, section, resp_ctx))
+        goto end;
+    if (!TS_CONF_set_clock_precision_digits(conf, section, resp_ctx))
+        goto end;
+    if (!TS_CONF_set_ordering(conf, section, resp_ctx))
+        goto end;
+    if (!TS_CONF_set_tsa_name(conf, section, resp_ctx))
+        goto end;
+    if (!TS_CONF_set_ess_cert_id_chain(conf, section, resp_ctx))
+        goto end;
+    if ((response = TS_RESP_create_response(resp_ctx, query_bio)) == NULL)
+        goto end;
+    ret = 1;
+
+ end:
+    if (!ret) {
+        TS_RESP_free(response);
+        response = NULL;
+    }
+    TS_RESP_CTX_free(resp_ctx);
+    BIO_free_all(query_bio);
+    return response;
+}
+
+static ASN1_INTEGER *serial_cb(TS_RESP_CTX *ctx, void *data)
+{
+    const char *serial_file = (const char *)data;
+    ASN1_INTEGER *serial = next_serial(serial_file);
+
+    if (serial == NULL) {
+        TS_RESP_CTX_set_status_info(ctx, TS_STATUS_REJECTION,
+                                    "Error during serial number "
+                                    "generation.");
+        TS_RESP_CTX_add_failure_info(ctx, TS_INFO_ADD_INFO_NOT_AVAILABLE);
+    } else {
+        save_ts_serial(serial_file, serial);
+    }
+
+    return serial;
+}
+
+static ASN1_INTEGER *next_serial(const char *serialfile)
+{
+    int ret = 0;
+    BIO *in = NULL;
+    ASN1_INTEGER *serial = NULL;
+    BIGNUM *bn = NULL;
+
+    if ((serial = ASN1_INTEGER_new()) == NULL)
+        goto err;
+
+    if ((in = BIO_new_file(serialfile, "r")) == NULL) {
+        ERR_clear_error();
+        BIO_printf(bio_err, "Warning: could not open file %s for "
+                   "reading, using serial number: 1\n", serialfile);
+        if (!ASN1_INTEGER_set(serial, 1))
+            goto err;
+    } else {
+        char buf[1024];
+        if (!a2i_ASN1_INTEGER(in, serial, buf, sizeof(buf))) {
+            BIO_printf(bio_err, "unable to load number from %s\n",
+                       serialfile);
+            goto err;
+        }
+        if ((bn = ASN1_INTEGER_to_BN(serial, NULL)) == NULL)
+            goto err;
+        ASN1_INTEGER_free(serial);
+        serial = NULL;
+        if (!BN_add_word(bn, 1))
+            goto err;
+        if ((serial = BN_to_ASN1_INTEGER(bn, NULL)) == NULL)
+            goto err;
+    }
+    ret = 1;
+
+ err:
+    if (!ret) {
+        ASN1_INTEGER_free(serial);
+        serial = NULL;
+    }
+    BIO_free_all(in);
+    BN_free(bn);
+    return serial;
+}
+
+static int save_ts_serial(const char *serialfile, ASN1_INTEGER *serial)
+{
+    int ret = 0;
+    BIO *out = NULL;
+
+    if ((out = BIO_new_file(serialfile, "w")) == NULL)
+        goto err;
+    if (i2a_ASN1_INTEGER(out, serial) <= 0)
+        goto err;
+    if (BIO_puts(out, "\n") <= 0)
+        goto err;
+    ret = 1;
+ err:
+    if (!ret)
+        BIO_printf(bio_err, "could not save serial number to %s\n",
+                   serialfile);
+    BIO_free_all(out);
+    return ret;
+}
+
+
+/*
+ * Verify-related method definitions.
+ */
+
+static int verify_command(const char *data, const char *digest, const char *queryfile,
+                          const char *in, int token_in,
+                          const char *CApath, const char *CAfile, const char *untrusted,
+                          X509_VERIFY_PARAM *vpm)
+{
+    BIO *in_bio = NULL;
+    PKCS7 *token = NULL;
+    TS_RESP *response = NULL;
+    TS_VERIFY_CTX *verify_ctx = NULL;
+    int ret = 0;
+
+    if ((in_bio = BIO_new_file(in, "rb")) == NULL)
+        goto end;
+    if (token_in) {
+        if ((token = d2i_PKCS7_bio(in_bio, NULL)) == NULL)
+            goto end;
+    } else {
+        if ((response = d2i_TS_RESP_bio(in_bio, NULL)) == NULL)
+            goto end;
+    }
+
+    if ((verify_ctx = create_verify_ctx(data, digest, queryfile,
+                                        CApath, CAfile, untrusted,
+                                        vpm)) == NULL)
+        goto end;
+
+    ret = token_in
+        ? TS_RESP_verify_token(verify_ctx, token)
+        : TS_RESP_verify_response(verify_ctx, response);
+
+ end:
+    printf("Verification: ");
+    if (ret)
+        printf("OK\n");
+    else {
+        printf("FAILED\n");
+        ERR_print_errors(bio_err);
+    }
+
+    BIO_free_all(in_bio);
+    PKCS7_free(token);
+    TS_RESP_free(response);
+    TS_VERIFY_CTX_free(verify_ctx);
+    return ret;
+}
+
+static TS_VERIFY_CTX *create_verify_ctx(const char *data, const char *digest,
+                                        const char *queryfile,
+                                        const char *CApath, const char *CAfile,
+                                        const char *untrusted,
+                                        X509_VERIFY_PARAM *vpm)
+{
+    TS_VERIFY_CTX *ctx = NULL;
+    BIO *input = NULL;
+    TS_REQ *request = NULL;
+    int ret = 0;
+    int f = 0;
+
+    if (data != NULL || digest != NULL) {
+        if ((ctx = TS_VERIFY_CTX_new()) == NULL)
+            goto err;
+        f = TS_VFY_VERSION | TS_VFY_SIGNER;
+        if (data != NULL) {
+            BIO *out = NULL;
+
+            f |= TS_VFY_DATA;
+            if ((out = BIO_new_file(data, "rb")) == NULL)
+                goto err;
+            if (TS_VERIFY_CTX_set_data(ctx, out) == NULL) {
+                BIO_free_all(out);
+                goto err;
+            }
+        } else if (digest != NULL) {
+            long imprint_len;
+            unsigned char *hexstr = OPENSSL_hexstr2buf(digest, &imprint_len);
+            f |= TS_VFY_IMPRINT;
+            if (TS_VERIFY_CTX_set_imprint(ctx, hexstr, imprint_len) == NULL) {
+                BIO_printf(bio_err, "invalid digest string\n");
+                goto err;
+            }
+        }
+
+    } else if (queryfile != NULL) {
+        if ((input = BIO_new_file(queryfile, "rb")) == NULL)
+            goto err;
+        if ((request = d2i_TS_REQ_bio(input, NULL)) == NULL)
+            goto err;
+        if ((ctx = TS_REQ_to_TS_VERIFY_CTX(request, NULL)) == NULL)
+            goto err;
+    } else {
+        return NULL;
+    }
+
+    /* Add the signature verification flag and arguments. */
+    TS_VERIFY_CTX_add_flags(ctx, f | TS_VFY_SIGNATURE);
+
+    /* Initialising the X509_STORE object. */
+    if (TS_VERIFY_CTX_set_store(ctx, create_cert_store(CApath, CAfile, vpm))
+            == NULL)
+        goto err;
+
+    /* Loading untrusted certificates. */
+    if (untrusted
+        && TS_VERIFY_CTS_set_certs(ctx, TS_CONF_load_certs(untrusted)) == NULL)
+        goto err;
+    ret = 1;
+
+ err:
+    if (!ret) {
+        TS_VERIFY_CTX_free(ctx);
+        ctx = NULL;
+    }
+    BIO_free_all(input);
+    TS_REQ_free(request);
+    return ctx;
+}
+
+static X509_STORE *create_cert_store(const char *CApath, const char *CAfile,
+                                     X509_VERIFY_PARAM *vpm)
+{
+    X509_STORE *cert_ctx = NULL;
+    X509_LOOKUP *lookup = NULL;
+    int i;
+
+    cert_ctx = X509_STORE_new();
+    X509_STORE_set_verify_cb(cert_ctx, verify_cb);
+    if (CApath != NULL) {
+        lookup = X509_STORE_add_lookup(cert_ctx, X509_LOOKUP_hash_dir());
+        if (lookup == NULL) {
+            BIO_printf(bio_err, "memory allocation failure\n");
+            goto err;
+        }
+        i = X509_LOOKUP_add_dir(lookup, CApath, X509_FILETYPE_PEM);
+        if (!i) {
+            BIO_printf(bio_err, "Error loading directory %s\n", CApath);
+            goto err;
+        }
+    }
+
+    if (CAfile != NULL) {
+        lookup = X509_STORE_add_lookup(cert_ctx, X509_LOOKUP_file());
+        if (lookup == NULL) {
+            BIO_printf(bio_err, "memory allocation failure\n");
+            goto err;
+        }
+        i = X509_LOOKUP_load_file(lookup, CAfile, X509_FILETYPE_PEM);
+        if (!i) {
+            BIO_printf(bio_err, "Error loading file %s\n", CAfile);
+            goto err;
+        }
+    }
+
+    if (vpm != NULL)
+        X509_STORE_set1_param(cert_ctx, vpm);
+
+    return cert_ctx;
+
+ err:
+    X509_STORE_free(cert_ctx);
+    return NULL;
+}
+
+static int verify_cb(int ok, X509_STORE_CTX *ctx)
+{
+    return ok;
+}
+#endif  /* ndef OPENSSL_NO_TS */
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/tsget.in b/trunk/3rdparty/openssl-1.1-fit/apps/tsget.in
new file mode 100644
index 000000000..bec365e28
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/tsget.in
@@ -0,0 +1,200 @@
+#!{- $config{HASHBANGPERL} -}
+# Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright (c) 2002 The OpenTSA Project. All rights reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+use IO::Handle;
+use Getopt::Std;
+use File::Basename;
+use WWW::Curl::Easy;
+
+use vars qw(%options);
+
+# Callback for reading the body.
+sub read_body {
+    my ($maxlength, $state) = @_;
+    my $return_data = "";
+    my $data_len = length ${$state->{data}};
+    if ($state->{bytes} < $data_len) {
+	$data_len = $data_len - $state->{bytes};
+	$data_len = $maxlength if $data_len > $maxlength;
+	$return_data = substr ${$state->{data}}, $state->{bytes}, $data_len;
+	$state->{bytes} += $data_len;
+    }
+    return $return_data;
+}
+
+# Callback for writing the body into a variable.
+sub write_body {
+    my ($data, $pointer) = @_;
+    ${$pointer} .= $data;
+    return length($data);
+}
+
+# Initialise a new Curl object.
+sub create_curl {
+    my $url = shift;
+
+    # Create Curl object.
+    my $curl = WWW::Curl::Easy::new();
+
+    # Error-handling related options.
+    $curl->setopt(CURLOPT_VERBOSE, 1) if $options{d};
+    $curl->setopt(CURLOPT_FAILONERROR, 1);
+    $curl->setopt(CURLOPT_USERAGENT,
+        "OpenTSA tsget.pl/openssl-{- $config{version} -}");
+
+    # Options for POST method.
+    $curl->setopt(CURLOPT_UPLOAD, 1);
+    $curl->setopt(CURLOPT_CUSTOMREQUEST, "POST");
+    $curl->setopt(CURLOPT_HTTPHEADER,
+		["Content-Type: application/timestamp-query",
+		"Accept: application/timestamp-reply,application/timestamp-response"]);
+    $curl->setopt(CURLOPT_READFUNCTION, \&read_body);
+    $curl->setopt(CURLOPT_HEADERFUNCTION, sub { return length($_[0]); });
+
+    # Options for getting the result.
+    $curl->setopt(CURLOPT_WRITEFUNCTION, \&write_body);
+
+    # SSL related options.
+    $curl->setopt(CURLOPT_SSLKEYTYPE, "PEM");
+    $curl->setopt(CURLOPT_SSL_VERIFYPEER, 1);	# Verify server's certificate.
+    $curl->setopt(CURLOPT_SSL_VERIFYHOST, 2);	# Check server's CN.
+    $curl->setopt(CURLOPT_SSLKEY, $options{k}) if defined($options{k});
+    $curl->setopt(CURLOPT_SSLKEYPASSWD, $options{p}) if defined($options{p});
+    $curl->setopt(CURLOPT_SSLCERT, $options{c}) if defined($options{c});
+    $curl->setopt(CURLOPT_CAINFO, $options{C}) if defined($options{C});
+    $curl->setopt(CURLOPT_CAPATH, $options{P}) if defined($options{P});
+    $curl->setopt(CURLOPT_RANDOM_FILE, $options{r}) if defined($options{r});
+    $curl->setopt(CURLOPT_EGDSOCKET, $options{g}) if defined($options{g});
+
+    # Setting destination.
+    $curl->setopt(CURLOPT_URL, $url);
+
+    return $curl;
+}
+
+# Send a request and returns the body back.
+sub get_timestamp {
+    my $curl = shift;
+    my $body = shift;
+    my $ts_body;
+    local $::error_buf;
+
+    # Error-handling related options.
+    $curl->setopt(CURLOPT_ERRORBUFFER, "::error_buf");
+
+    # Options for POST method.
+    $curl->setopt(CURLOPT_INFILE, {data => $body, bytes => 0});
+    $curl->setopt(CURLOPT_INFILESIZE, length(${$body}));
+
+    # Options for getting the result.
+    $curl->setopt(CURLOPT_FILE, \$ts_body);
+
+    # Send the request...
+    my $error_code = $curl->perform();
+    my $error_string;
+    if ($error_code != 0) {
+        my $http_code = $curl->getinfo(CURLINFO_HTTP_CODE);
+	$error_string = "could not get timestamp";
+	$error_string .= ", http code: $http_code" unless $http_code == 0;
+	$error_string .= ", curl code: $error_code";
+	$error_string .= " ($::error_buf)" if defined($::error_buf);
+    } else {
+        my $ct = $curl->getinfo(CURLINFO_CONTENT_TYPE);
+	if (lc($ct) ne "application/timestamp-reply"
+	    && lc($ct) ne "application/timestamp-response") {
+	    $error_string = "unexpected content type returned: $ct";
+        }
+    }
+    return ($ts_body, $error_string);
+
+}
+
+# Print usage information and exists.
+sub usage {
+
+    print STDERR "usage: $0 -h <server_url> [-e <extension>] [-o <output>] ";
+    print STDERR "[-v] [-d] [-k <private_key.pem>] [-p <key_password>] ";
+    print STDERR "[-c <client_cert.pem>] [-C <CA_certs.pem>] [-P <CA_path>] ";
+    print STDERR "[-r <file:file...>] [-g <EGD_socket>] [<request>]...\n";
+    exit 1;
+}
+
+# ----------------------------------------------------------------------
+#   Main program
+# ----------------------------------------------------------------------
+
+# Getting command-line options (default comes from TSGET environment variable).
+my $getopt_arg =  "h:e:o:vdk:p:c:C:P:r:g:";
+if (exists $ENV{TSGET}) {
+    my @old_argv = @ARGV;
+    @ARGV = split /\s+/, $ENV{TSGET};
+    getopts($getopt_arg, \%options) or usage;
+    @ARGV = @old_argv;
+}
+getopts($getopt_arg, \%options) or usage;
+
+# Checking argument consistency.
+if (!exists($options{h}) || (@ARGV == 0 && !exists($options{o}))
+    || (@ARGV > 1 && exists($options{o}))) {
+    print STDERR "Inconsistent command line options.\n";
+    usage;
+}
+# Setting defaults.
+@ARGV = ("-") unless @ARGV != 0;
+$options{e} = ".tsr" unless defined($options{e});
+
+# Processing requests.
+my $curl = create_curl $options{h};
+undef $/;   # For reading whole files.
+REQUEST: foreach (@ARGV) {
+    my $input = $_;
+    my ($base, $path) = fileparse($input, '\.[^.]*');
+    my $output_base = $base . $options{e};
+    my $output = defined($options{o}) ? $options{o} : $path . $output_base;
+
+    STDERR->printflush("$input: ") if $options{v};
+    # Read request.
+    my $body;
+    if ($input eq "-") {
+	# Read the request from STDIN;
+	$body = <STDIN>;
+    } else {
+	# Read the request from file.
+        open INPUT, "<" . $input
+	    or warn("$input: could not open input file: $!\n"), next REQUEST;
+        $body = <INPUT>;
+        close INPUT
+	    or warn("$input: could not close input file: $!\n"), next REQUEST;
+    }
+
+    # Send request.
+    STDERR->printflush("sending request") if $options{v};
+
+    my ($ts_body, $error) = get_timestamp $curl, \$body;
+    if (defined($error)) {
+	die "$input: fatal error: $error\n";
+    }
+    STDERR->printflush(", reply received") if $options{v};
+
+    # Write response.
+    if ($output eq "-") {
+	# Write to STDOUT.
+        print $ts_body;
+    } else {
+	# Write to file.
+        open OUTPUT, ">", $output
+	    or warn("$output: could not open output file: $!\n"), next REQUEST;
+        print OUTPUT $ts_body;
+        close OUTPUT
+	    or warn("$output: could not close output file: $!\n"), next REQUEST;
+    }
+    STDERR->printflush(", $output written.\n") if $options{v};
+}
+$curl->cleanup();
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/verify.c b/trunk/3rdparty/openssl-1.1-fit/apps/verify.c
new file mode 100644
index 000000000..1f9385606
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/verify.c
@@ -0,0 +1,322 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/bio.h>
+#include <openssl/err.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/pem.h>
+
+static int cb(int ok, X509_STORE_CTX *ctx);
+static int check(X509_STORE *ctx, const char *file,
+                 STACK_OF(X509) *uchain, STACK_OF(X509) *tchain,
+                 STACK_OF(X509_CRL) *crls, int show_chain);
+static int v_verbose = 0, vflags = 0;
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_ENGINE, OPT_CAPATH, OPT_CAFILE, OPT_NOCAPATH, OPT_NOCAFILE,
+    OPT_UNTRUSTED, OPT_TRUSTED, OPT_CRLFILE, OPT_CRL_DOWNLOAD, OPT_SHOW_CHAIN,
+    OPT_V_ENUM, OPT_NAMEOPT,
+    OPT_VERBOSE
+} OPTION_CHOICE;
+
+const OPTIONS verify_options[] = {
+    {OPT_HELP_STR, 1, '-', "Usage: %s [options] cert.pem...\n"},
+    {OPT_HELP_STR, 1, '-', "Valid options are:\n"},
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"verbose", OPT_VERBOSE, '-',
+        "Print extra information about the operations being performed."},
+    {"CApath", OPT_CAPATH, '/', "A directory of trusted certificates"},
+    {"CAfile", OPT_CAFILE, '<', "A file of trusted certificates"},
+    {"no-CAfile", OPT_NOCAFILE, '-',
+     "Do not load the default certificates file"},
+    {"no-CApath", OPT_NOCAPATH, '-',
+     "Do not load certificates from the default certificates directory"},
+    {"untrusted", OPT_UNTRUSTED, '<', "A file of untrusted certificates"},
+    {"trusted", OPT_TRUSTED, '<', "A file of trusted certificates"},
+    {"CRLfile", OPT_CRLFILE, '<',
+        "File containing one or more CRL's (in PEM format) to load"},
+    {"crl_download", OPT_CRL_DOWNLOAD, '-',
+        "Attempt to download CRL information for this certificate"},
+    {"show_chain", OPT_SHOW_CHAIN, '-',
+        "Display information about the certificate chain"},
+    {"nameopt", OPT_NAMEOPT, 's', "Various certificate name options"},
+    OPT_V_OPTIONS,
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+#endif
+    {NULL}
+};
+
+int verify_main(int argc, char **argv)
+{
+    ENGINE *e = NULL;
+    STACK_OF(X509) *untrusted = NULL, *trusted = NULL;
+    STACK_OF(X509_CRL) *crls = NULL;
+    X509_STORE *store = NULL;
+    X509_VERIFY_PARAM *vpm = NULL;
+    const char *prog, *CApath = NULL, *CAfile = NULL;
+    int noCApath = 0, noCAfile = 0;
+    int vpmtouched = 0, crl_download = 0, show_chain = 0, i = 0, ret = 1;
+    OPTION_CHOICE o;
+
+    if ((vpm = X509_VERIFY_PARAM_new()) == NULL)
+        goto end;
+
+    prog = opt_init(argc, argv, verify_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(verify_options);
+            BIO_printf(bio_err, "Recognized usages:\n");
+            for (i = 0; i < X509_PURPOSE_get_count(); i++) {
+                X509_PURPOSE *ptmp;
+                ptmp = X509_PURPOSE_get0(i);
+                BIO_printf(bio_err, "\t%-10s\t%s\n",
+                        X509_PURPOSE_get0_sname(ptmp),
+                        X509_PURPOSE_get0_name(ptmp));
+            }
+
+            BIO_printf(bio_err, "Recognized verify names:\n");
+            for (i = 0; i < X509_VERIFY_PARAM_get_count(); i++) {
+                const X509_VERIFY_PARAM *vptmp;
+                vptmp = X509_VERIFY_PARAM_get0(i);
+                BIO_printf(bio_err, "\t%-10s\n",
+                        X509_VERIFY_PARAM_get0_name(vptmp));
+            }
+            ret = 0;
+            goto end;
+        case OPT_V_CASES:
+            if (!opt_verify(o, vpm))
+                goto end;
+            vpmtouched++;
+            break;
+        case OPT_CAPATH:
+            CApath = opt_arg();
+            break;
+        case OPT_CAFILE:
+            CAfile = opt_arg();
+            break;
+        case OPT_NOCAPATH:
+            noCApath = 1;
+            break;
+        case OPT_NOCAFILE:
+            noCAfile = 1;
+            break;
+        case OPT_UNTRUSTED:
+            /* Zero or more times */
+            if (!load_certs(opt_arg(), &untrusted, FORMAT_PEM, NULL,
+                            "untrusted certificates"))
+                goto end;
+            break;
+        case OPT_TRUSTED:
+            /* Zero or more times */
+            noCAfile = 1;
+            noCApath = 1;
+            if (!load_certs(opt_arg(), &trusted, FORMAT_PEM, NULL,
+                            "trusted certificates"))
+                goto end;
+            break;
+        case OPT_CRLFILE:
+            /* Zero or more times */
+            if (!load_crls(opt_arg(), &crls, FORMAT_PEM, NULL,
+                           "other CRLs"))
+                goto end;
+            break;
+        case OPT_CRL_DOWNLOAD:
+            crl_download = 1;
+            break;
+        case OPT_ENGINE:
+            if ((e = setup_engine(opt_arg(), 0)) == NULL) {
+                /* Failure message already displayed */
+                goto end;
+            }
+            break;
+        case OPT_SHOW_CHAIN:
+            show_chain = 1;
+            break;
+        case OPT_NAMEOPT:
+            if (!set_nameopt(opt_arg()))
+                goto end;
+            break;
+        case OPT_VERBOSE:
+            v_verbose = 1;
+            break;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+    if (trusted != NULL && (CAfile || CApath)) {
+        BIO_printf(bio_err,
+                   "%s: Cannot use -trusted with -CAfile or -CApath\n",
+                   prog);
+        goto end;
+    }
+
+    if ((store = setup_verify(CAfile, CApath, noCAfile, noCApath)) == NULL)
+        goto end;
+    X509_STORE_set_verify_cb(store, cb);
+
+    if (vpmtouched)
+        X509_STORE_set1_param(store, vpm);
+
+    ERR_clear_error();
+
+    if (crl_download)
+        store_setup_crl_download(store);
+
+    ret = 0;
+    if (argc < 1) {
+        if (check(store, NULL, untrusted, trusted, crls, show_chain) != 1)
+            ret = -1;
+    } else {
+        for (i = 0; i < argc; i++)
+            if (check(store, argv[i], untrusted, trusted, crls,
+                      show_chain) != 1)
+                ret = -1;
+    }
+
+ end:
+    X509_VERIFY_PARAM_free(vpm);
+    X509_STORE_free(store);
+    sk_X509_pop_free(untrusted, X509_free);
+    sk_X509_pop_free(trusted, X509_free);
+    sk_X509_CRL_pop_free(crls, X509_CRL_free);
+    release_engine(e);
+    return (ret < 0 ? 2 : ret);
+}
+
+static int check(X509_STORE *ctx, const char *file,
+                 STACK_OF(X509) *uchain, STACK_OF(X509) *tchain,
+                 STACK_OF(X509_CRL) *crls, int show_chain)
+{
+    X509 *x = NULL;
+    int i = 0, ret = 0;
+    X509_STORE_CTX *csc;
+    STACK_OF(X509) *chain = NULL;
+    int num_untrusted;
+
+    x = load_cert(file, FORMAT_PEM, "certificate file");
+    if (x == NULL)
+        goto end;
+
+    csc = X509_STORE_CTX_new();
+    if (csc == NULL) {
+        printf("error %s: X.509 store context allocation failed\n",
+               (file == NULL) ? "stdin" : file);
+        goto end;
+    }
+
+    X509_STORE_set_flags(ctx, vflags);
+    if (!X509_STORE_CTX_init(csc, ctx, x, uchain)) {
+        X509_STORE_CTX_free(csc);
+        printf("error %s: X.509 store context initialization failed\n",
+               (file == NULL) ? "stdin" : file);
+        goto end;
+    }
+    if (tchain != NULL)
+        X509_STORE_CTX_set0_trusted_stack(csc, tchain);
+    if (crls != NULL)
+        X509_STORE_CTX_set0_crls(csc, crls);
+    i = X509_verify_cert(csc);
+    if (i > 0 && X509_STORE_CTX_get_error(csc) == X509_V_OK) {
+        printf("%s: OK\n", (file == NULL) ? "stdin" : file);
+        ret = 1;
+        if (show_chain) {
+            int j;
+
+            chain = X509_STORE_CTX_get1_chain(csc);
+            num_untrusted = X509_STORE_CTX_get_num_untrusted(csc);
+            printf("Chain:\n");
+            for (j = 0; j < sk_X509_num(chain); j++) {
+                X509 *cert = sk_X509_value(chain, j);
+                printf("depth=%d: ", j);
+                X509_NAME_print_ex_fp(stdout,
+                                      X509_get_subject_name(cert),
+                                      0, get_nameopt());
+                if (j < num_untrusted)
+                    printf(" (untrusted)");
+                printf("\n");
+            }
+            sk_X509_pop_free(chain, X509_free);
+        }
+    } else {
+        printf("error %s: verification failed\n", (file == NULL) ? "stdin" : file);
+    }
+    X509_STORE_CTX_free(csc);
+
+ end:
+    if (i <= 0)
+        ERR_print_errors(bio_err);
+    X509_free(x);
+
+    return ret;
+}
+
+static int cb(int ok, X509_STORE_CTX *ctx)
+{
+    int cert_error = X509_STORE_CTX_get_error(ctx);
+    X509 *current_cert = X509_STORE_CTX_get_current_cert(ctx);
+
+    if (!ok) {
+        if (current_cert != NULL) {
+            X509_NAME_print_ex(bio_err,
+                            X509_get_subject_name(current_cert),
+                            0, get_nameopt());
+            BIO_printf(bio_err, "\n");
+        }
+        BIO_printf(bio_err, "%serror %d at %d depth lookup: %s\n",
+               X509_STORE_CTX_get0_parent_ctx(ctx) ? "[CRL path] " : "",
+               cert_error,
+               X509_STORE_CTX_get_error_depth(ctx),
+               X509_verify_cert_error_string(cert_error));
+
+        /*
+         * Pretend that some errors are ok, so they don't stop further
+         * processing of the certificate chain.  Setting ok = 1 does this.
+         * After X509_verify_cert() is done, we verify that there were
+         * no actual errors, even if the returned value was positive.
+         */
+        switch (cert_error) {
+        case X509_V_ERR_NO_EXPLICIT_POLICY:
+            policies_print(ctx);
+            /* fall thru */
+        case X509_V_ERR_CERT_HAS_EXPIRED:
+            /* Continue even if the leaf is a self signed cert */
+        case X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT:
+            /* Continue after extension errors too */
+        case X509_V_ERR_INVALID_CA:
+        case X509_V_ERR_INVALID_NON_CA:
+        case X509_V_ERR_PATH_LENGTH_EXCEEDED:
+        case X509_V_ERR_INVALID_PURPOSE:
+        case X509_V_ERR_CRL_HAS_EXPIRED:
+        case X509_V_ERR_CRL_NOT_YET_VALID:
+        case X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION:
+            ok = 1;
+        }
+
+        return ok;
+
+    }
+    if (cert_error == X509_V_OK && ok == 2)
+        policies_print(ctx);
+    if (!v_verbose)
+        ERR_clear_error();
+    return ok;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/version.c b/trunk/3rdparty/openssl-1.1-fit/apps/version.c
new file mode 100644
index 000000000..2aca16361
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/version.c
@@ -0,0 +1,194 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/evp.h>
+#include <openssl/crypto.h>
+#include <openssl/bn.h>
+#ifndef OPENSSL_NO_MD2
+# include <openssl/md2.h>
+#endif
+#ifndef OPENSSL_NO_RC4
+# include <openssl/rc4.h>
+#endif
+#ifndef OPENSSL_NO_DES
+# include <openssl/des.h>
+#endif
+#ifndef OPENSSL_NO_IDEA
+# include <openssl/idea.h>
+#endif
+#ifndef OPENSSL_NO_BF
+# include <openssl/blowfish.h>
+#endif
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_B, OPT_D, OPT_E, OPT_F, OPT_O, OPT_P, OPT_V, OPT_A, OPT_R
+} OPTION_CHOICE;
+
+const OPTIONS version_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"a", OPT_A, '-', "Show all data"},
+    {"b", OPT_B, '-', "Show build date"},
+    {"d", OPT_D, '-', "Show configuration directory"},
+    {"e", OPT_E, '-', "Show engines directory"},
+    {"f", OPT_F, '-', "Show compiler flags used"},
+    {"o", OPT_O, '-', "Show some internal datatype options"},
+    {"p", OPT_P, '-', "Show target build platform"},
+    {"r", OPT_R, '-', "Show random seeding options"},
+    {"v", OPT_V, '-', "Show library version"},
+    {NULL}
+};
+
+#if defined(OPENSSL_RAND_SEED_DEVRANDOM) || defined(OPENSSL_RAND_SEED_EGD)
+static void printlist(const char *prefix, const char **dev)
+{
+    printf("%s (", prefix);
+    for ( ; *dev != NULL; dev++)
+        printf(" \"%s\"", *dev);
+    printf(" )");
+}
+#endif
+
+int version_main(int argc, char **argv)
+{
+    int ret = 1, dirty = 0, seed = 0;
+    int cflags = 0, version = 0, date = 0, options = 0, platform = 0, dir = 0;
+    int engdir = 0;
+    char *prog;
+    OPTION_CHOICE o;
+
+    prog = opt_init(argc, argv, version_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(version_options);
+            ret = 0;
+            goto end;
+        case OPT_B:
+            dirty = date = 1;
+            break;
+        case OPT_D:
+            dirty = dir = 1;
+            break;
+        case OPT_E:
+            dirty = engdir = 1;
+            break;
+        case OPT_F:
+            dirty = cflags = 1;
+            break;
+        case OPT_O:
+            dirty = options = 1;
+            break;
+        case OPT_P:
+            dirty = platform = 1;
+            break;
+        case OPT_R:
+            dirty = seed = 1;
+            break;
+        case OPT_V:
+            dirty = version = 1;
+            break;
+        case OPT_A:
+            seed = options = cflags = version = date = platform = dir = engdir
+                = 1;
+            break;
+        }
+    }
+    if (opt_num_rest() != 0) {
+        BIO_printf(bio_err, "Extra parameters given.\n");
+        goto opthelp;
+    }
+    if (!dirty)
+        version = 1;
+
+    if (version) {
+        if (OpenSSL_version_num() == OPENSSL_VERSION_NUMBER)
+            printf("%s\n", OpenSSL_version(OPENSSL_VERSION));
+        else
+            printf("%s (Library: %s)\n",
+                   OPENSSL_VERSION_TEXT, OpenSSL_version(OPENSSL_VERSION));
+    }
+    if (date)
+        printf("%s\n", OpenSSL_version(OPENSSL_BUILT_ON));
+    if (platform)
+        printf("%s\n", OpenSSL_version(OPENSSL_PLATFORM));
+    if (options) {
+        printf("options:  ");
+        printf("%s ", BN_options());
+#ifndef OPENSSL_NO_MD2
+        printf("%s ", MD2_options());
+#endif
+#ifndef OPENSSL_NO_RC4
+        printf("%s ", RC4_options());
+#endif
+#ifndef OPENSSL_NO_DES
+        printf("%s ", DES_options());
+#endif
+#ifndef OPENSSL_NO_IDEA
+        printf("%s ", IDEA_options());
+#endif
+#ifndef OPENSSL_NO_BF
+        printf("%s ", BF_options());
+#endif
+        printf("\n");
+    }
+    if (cflags)
+        printf("%s\n", OpenSSL_version(OPENSSL_CFLAGS));
+    if (dir)
+        printf("%s\n", OpenSSL_version(OPENSSL_DIR));
+    if (engdir)
+        printf("%s\n", OpenSSL_version(OPENSSL_ENGINES_DIR));
+    if (seed) {
+        printf("Seeding source:");
+#ifdef OPENSSL_RAND_SEED_RTDSC
+        printf(" rtdsc");
+#endif
+#ifdef OPENSSL_RAND_SEED_RDCPU
+        printf(" rdrand ( rdseed rdrand )");
+#endif
+#ifdef OPENSSL_RAND_SEED_LIBRANDOM
+        printf(" C-library-random");
+#endif
+#ifdef OPENSSL_RAND_SEED_GETRANDOM
+        printf(" getrandom-syscall");
+#endif
+#ifdef OPENSSL_RAND_SEED_DEVRANDOM
+        {
+            static const char *dev[] = { DEVRANDOM, NULL };
+            printlist(" random-device", dev);
+        }
+#endif
+#ifdef OPENSSL_RAND_SEED_EGD
+        {
+            static const char *dev[] = { DEVRANDOM_EGD, NULL };
+            printlist(" EGD", dev);
+        }
+#endif
+#ifdef OPENSSL_RAND_SEED_NONE
+        printf(" none");
+#endif
+#ifdef OPENSSL_RAND_SEED_OS
+        printf(" os-specific");
+#endif
+        printf("\n");
+    }
+    ret = 0;
+ end:
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/vms_decc_init.c b/trunk/3rdparty/openssl-1.1-fit/apps/vms_decc_init.c
new file mode 100644
index 000000000..f83f7168e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/vms_decc_init.c
@@ -0,0 +1,214 @@
+/*
+ * Copyright 2010-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#if defined( __VMS) && !defined( OPENSSL_NO_DECC_INIT) && \
+ defined( __DECC) && !defined( __VAX) && (__CRTL_VER >= 70301000)
+# define USE_DECC_INIT 1
+#endif
+
+#ifdef USE_DECC_INIT
+
+/*
+ * ----------------------------------------------------------------------
+ * decc_init() On non-VAX systems, uses LIB$INITIALIZE to set a collection
+ * of C RTL features without using the DECC$* logical name method.
+ * ----------------------------------------------------------------------
+ */
+
+# include <stdio.h>
+# include <stdlib.h>
+# include <unixlib.h>
+
+# include "apps.h"
+
+/* Global storage. */
+
+/* Flag to sense if decc_init() was called. */
+
+int decc_init_done = -1;
+
+/* Structure to hold a DECC$* feature name and its desired value. */
+
+typedef struct {
+    char *name;
+    int value;
+} decc_feat_t;
+
+/*
+ * Array of DECC$* feature names and their desired values. Note:
+ * DECC$ARGV_PARSE_STYLE is the urgent one.
+ */
+
+decc_feat_t decc_feat_array[] = {
+    /* Preserve command-line case with SET PROCESS/PARSE_STYLE=EXTENDED */
+    {"DECC$ARGV_PARSE_STYLE", 1},
+
+    /* Preserve case for file names on ODS5 disks. */
+    {"DECC$EFS_CASE_PRESERVE", 1},
+
+    /*
+     * Enable multiple dots (and most characters) in ODS5 file names, while
+     * preserving VMS-ness of ";version".
+     */
+    {"DECC$EFS_CHARSET", 1},
+
+    /* List terminator. */
+    {(char *)NULL, 0}
+};
+
+
+char **copy_argv(int *argc, char *argv[])
+{
+    /*-
+     * The note below is for historical purpose.  On VMS now we always
+     * copy argv "safely."
+     *
+     * 2011-03-22 SMS.
+     * If we have 32-bit pointers everywhere, then we're safe, and
+     * we bypass this mess, as on non-VMS systems.
+     * Problem 1: Compaq/HP C before V7.3 always used 32-bit
+     * pointers for argv[].
+     * Fix 1: For a 32-bit argv[], when we're using 64-bit pointers
+     * everywhere else, we always allocate and use a 64-bit
+     * duplicate of argv[].
+     * Problem 2: Compaq/HP C V7.3 (Alpha, IA64) before ECO1 failed
+     * to NULL-terminate a 64-bit argv[].  (As this was written, the
+     * compiler ECO was available only on IA64.)
+     * Fix 2: Unless advised not to (VMS_TRUST_ARGV), we test a
+     * 64-bit argv[argc] for NULL, and, if necessary, use a
+     * (properly) NULL-terminated (64-bit) duplicate of argv[].
+     * The same code is used in either case to duplicate argv[].
+     * Some of these decisions could be handled in preprocessing,
+     * but the code tends to get even uglier, and the penalty for
+     * deciding at compile- or run-time is tiny.
+     */
+
+    int i, count = *argc;
+    char **newargv = app_malloc(sizeof(*newargv) * (count + 1), "argv copy");
+
+    for (i = 0; i < count; i++)
+        newargv[i] = argv[i];
+    newargv[i] = NULL;
+    *argc = i;
+    return newargv;
+}
+
+/* LIB$INITIALIZE initialization function. */
+
+static void decc_init(void)
+{
+    char *openssl_debug_decc_init;
+    int verbose = 0;
+    int feat_index;
+    int feat_value;
+    int feat_value_max;
+    int feat_value_min;
+    int i;
+    int sts;
+
+    /* Get debug option. */
+    openssl_debug_decc_init = getenv("OPENSSL_DEBUG_DECC_INIT");
+    if (openssl_debug_decc_init != NULL) {
+        verbose = strtol(openssl_debug_decc_init, NULL, 10);
+        if (verbose <= 0) {
+            verbose = 1;
+        }
+    }
+
+    /* Set the global flag to indicate that LIB$INITIALIZE worked. */
+    decc_init_done = 1;
+
+    /* Loop through all items in the decc_feat_array[]. */
+
+    for (i = 0; decc_feat_array[i].name != NULL; i++) {
+        /* Get the feature index. */
+        feat_index = decc$feature_get_index(decc_feat_array[i].name);
+        if (feat_index >= 0) {
+            /* Valid item.  Collect its properties. */
+            feat_value = decc$feature_get_value(feat_index, 1);
+            feat_value_min = decc$feature_get_value(feat_index, 2);
+            feat_value_max = decc$feature_get_value(feat_index, 3);
+
+            /* Check the validity of our desired value. */
+            if ((decc_feat_array[i].value >= feat_value_min) &&
+                (decc_feat_array[i].value <= feat_value_max)) {
+                /* Valid value.  Set it if necessary. */
+                if (feat_value != decc_feat_array[i].value) {
+                    sts = decc$feature_set_value(feat_index,
+                                                 1, decc_feat_array[i].value);
+
+                    if (verbose > 1) {
+                        fprintf(stderr, " %s = %d, sts = %d.\n",
+                                decc_feat_array[i].name,
+                                decc_feat_array[i].value, sts);
+                    }
+                }
+            } else {
+                /* Invalid DECC feature value. */
+                fprintf(stderr,
+                        " INVALID DECC$FEATURE VALUE, %d: %d <= %s <= %d.\n",
+                        feat_value,
+                        feat_value_min, decc_feat_array[i].name,
+                        feat_value_max);
+            }
+        } else {
+            /* Invalid DECC feature name. */
+            fprintf(stderr,
+                    " UNKNOWN DECC$FEATURE: %s.\n", decc_feat_array[i].name);
+        }
+    }
+
+    if (verbose > 0) {
+        fprintf(stderr, " DECC_INIT complete.\n");
+    }
+}
+
+/* Get "decc_init()" into a valid, loaded LIB$INITIALIZE PSECT. */
+
+# pragma nostandard
+
+/*
+ * Establish the LIB$INITIALIZE PSECTs, with proper alignment and other
+ * attributes.  Note that "nopic" is significant only on VAX.
+ */
+# pragma extern_model save
+
+# if __INITIAL_POINTER_SIZE == 64
+#  define PSECT_ALIGN 3
+# else
+#  define PSECT_ALIGN 2
+# endif
+
+# pragma extern_model strict_refdef "LIB$INITIALIZ" PSECT_ALIGN, nopic, nowrt
+const int spare[8] = { 0 };
+
+# pragma extern_model strict_refdef "LIB$INITIALIZE" PSECT_ALIGN, nopic, nowrt
+void (*const x_decc_init) () = decc_init;
+
+# pragma extern_model restore
+
+/* Fake reference to ensure loading the LIB$INITIALIZE PSECT. */
+
+# pragma extern_model save
+
+int LIB$INITIALIZE(void);
+
+# pragma extern_model strict_refdef
+int dmy_lib$initialize = (int)LIB$INITIALIZE;
+
+# pragma extern_model restore
+
+# pragma standard
+
+#else                           /* def USE_DECC_INIT */
+
+/* Dummy code to avoid a %CC-W-EMPTYFILE complaint. */
+int decc_init_dummy(void);
+
+#endif                          /* def USE_DECC_INIT */
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/vms_term_sock.c b/trunk/3rdparty/openssl-1.1-fit/apps/vms_term_sock.c
new file mode 100644
index 000000000..9a90a1e79
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/vms_term_sock.c
@@ -0,0 +1,591 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016 VMS Software, Inc. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifdef __VMS
+# define OPENSSL_SYS_VMS
+# pragma message disable DOLLARID
+
+
+# include <openssl/opensslconf.h>
+
+# if !defined(_POSIX_C_SOURCE) && defined(OPENSSL_SYS_VMS)
+/*
+ * On VMS, you need to define this to get the declaration of fileno().  The
+ * value 2 is to make sure no function defined in POSIX-2 is left undefined.
+ */
+#  define _POSIX_C_SOURCE 2
+# endif
+
+# include <stdio.h>
+
+# undef _POSIX_C_SOURCE
+
+# include <sys/types.h>
+# include <sys/socket.h>
+# include <netinet/in.h>
+# include <inet.h>
+# include <unistd.h>
+# include <string.h>
+# include <errno.h>
+# include <starlet.h>
+# include <iodef.h>
+# ifdef __alpha
+#  include <iosbdef.h>
+# else
+typedef struct _iosb {           /* Copied from IOSBDEF.H for Alpha  */
+#  pragma __nomember_alignment
+    __union  {
+        __struct  {
+            unsigned short int iosb$w_status; /* Final I/O status           */
+            __union  {
+                __struct  {             /* 16-bit byte count variant        */
+                    unsigned short int iosb$w_bcnt; /* 16-bit byte count    */
+                    __union  {
+                        unsigned int iosb$l_dev_depend; /* 32-bit device dependent info */
+                        unsigned int iosb$l_pid; /* 32-bit pid              */
+                    } iosb$r_l;
+                } iosb$r_bcnt_16;
+                __struct  {             /* 32-bit byte count variant        */
+                    unsigned int iosb$l_bcnt; /* 32-bit byte count (unaligned) */
+                    unsigned short int iosb$w_dev_depend_high; /* 16-bit device dependent info */
+                } iosb$r_bcnt_32;
+            } iosb$r_devdepend;
+        } iosb$r_io_64;
+        __struct  {
+            __union  {
+                unsigned int iosb$l_getxxi_status; /* Final GETxxI status   */
+                unsigned int iosb$l_reg_status; /* Final $Registry status   */
+            } iosb$r_l_status;
+            unsigned int iosb$l_reserved; /* Reserved field                 */
+        } iosb$r_get_64;
+    } iosb$r_io_get;
+} IOSB;
+
+#  if !defined(__VAXC)
+#   define iosb$w_status iosb$r_io_get.iosb$r_io_64.iosb$w_status
+#   define iosb$w_bcnt iosb$r_io_get.iosb$r_io_64.iosb$r_devdepend.iosb$r_bcnt_16.iosb$w_bcnt
+#   define iosb$r_l        iosb$r_io_get.iosb$r_io_64.iosb$r_devdepend.iosb$r_bcnt_16.iosb$r_l
+#   define iosb$l_dev_depend iosb$r_l.iosb$l_dev_depend
+#   define iosb$l_pid iosb$r_l.iosb$l_pid
+#   define iosb$l_bcnt iosb$r_io_get.iosb$r_io_64.iosb$r_devdepend.iosb$r_bcnt_32.iosb$l_bcnt
+#   define iosb$w_dev_depend_high iosb$r_io_get.iosb$r_io_64.iosb$r_devdepend.iosb$r_bcnt_32.iosb$w_dev_depend_high
+#   define iosb$l_getxxi_status iosb$r_io_get.iosb$r_get_64.iosb$r_l_status.iosb$l_getxxi_status
+#   define iosb$l_reg_status iosb$r_io_get.iosb$r_get_64.iosb$r_l_status.iosb$l_reg_status
+#  endif          /* #if !defined(__VAXC) */
+
+# endif  /* End of IOSBDEF */
+
+# include <efndef.h>
+# include <stdlib.h>
+# include <ssdef.h>
+# include <time.h>
+# include <stdarg.h>
+# include <descrip.h>
+
+# include "vms_term_sock.h"
+
+# ifdef __alpha
+static struct _iosb TerminalDeviceIosb;
+# else
+IOSB TerminalDeviceIosb;
+# endif
+
+static char TerminalDeviceBuff[255 + 2];
+static int TerminalSocketPair[2] = {0, 0};
+static unsigned short TerminalDeviceChan = 0;
+
+static int CreateSocketPair (int, int, int, int *);
+static void SocketPairTimeoutAst (int);
+static int TerminalDeviceAst (int);
+static void LogMessage (char *, ...);
+
+/*
+** Socket Pair Timeout Value (must be 0-59 seconds)
+*/
+# define SOCKET_PAIR_TIMEOUT_VALUE 20
+
+/*
+** Socket Pair Timeout Block which is passed to timeout AST
+*/
+typedef struct _SocketPairTimeoutBlock {
+    unsigned short SockChan1;
+    unsigned short SockChan2;
+} SPTB;
+
+# ifdef TERM_SOCK_TEST
+
+/*----------------------------------------------------------------------------*/
+/*                                                                            */
+/*----------------------------------------------------------------------------*/
+int main (int argc, char *argv[], char *envp[])
+{
+    char TermBuff[80];
+    int TermSock,
+        status,
+        len;
+
+    LogMessage ("Enter 'q' or 'Q' to quit ...");
+    while (strcasecmp (TermBuff, "Q")) {
+        /*
+        ** Create the terminal socket
+        */
+        status = TerminalSocket (TERM_SOCK_CREATE, &TermSock);
+        if (status != TERM_SOCK_SUCCESS)
+            exit (1);
+
+        /*
+        ** Process the terminal input
+        */
+        LogMessage ("Waiting on terminal I/O ...\n");
+        len = recv (TermSock, TermBuff, sizeof(TermBuff), 0) ;
+        TermBuff[len] = '\0';
+        LogMessage ("Received terminal I/O [%s]", TermBuff);
+
+        /*
+        ** Delete the terminal socket
+        */
+        status = TerminalSocket (TERM_SOCK_DELETE, &TermSock);
+        if (status != TERM_SOCK_SUCCESS)
+            exit (1);
+    }
+
+    return 1;
+
+}
+# endif
+
+/*----------------------------------------------------------------------------*/
+/*                                                                            */
+/*----------------------------------------------------------------------------*/
+int TerminalSocket (int FunctionCode, int *ReturnSocket)
+{
+    int status;
+    $DESCRIPTOR (TerminalDeviceDesc, "SYS$COMMAND");
+
+    /*
+    ** Process the requested function code
+    */
+    switch (FunctionCode) {
+    case TERM_SOCK_CREATE:
+        /*
+        ** Create a socket pair
+        */
+        status = CreateSocketPair (AF_INET, SOCK_STREAM, 0, TerminalSocketPair);
+        if (status == -1) {
+            LogMessage ("TerminalSocket: CreateSocketPair () - %08X", status);
+            if (TerminalSocketPair[0])
+                close (TerminalSocketPair[0]);
+            if (TerminalSocketPair[1])
+                close (TerminalSocketPair[1]);
+            return TERM_SOCK_FAILURE;
+        }
+
+        /*
+        ** Assign a channel to the terminal device
+        */
+        status = sys$assign (&TerminalDeviceDesc,
+                             &TerminalDeviceChan,
+                             0, 0, 0);
+        if (! (status & 1)) {
+            LogMessage ("TerminalSocket: SYS$ASSIGN () - %08X", status);
+            close (TerminalSocketPair[0]);
+            close (TerminalSocketPair[1]);
+            return TERM_SOCK_FAILURE;
+        }
+
+        /*
+        ** Queue an async IO to the terminal device
+        */
+        status = sys$qio (EFN$C_ENF,
+                          TerminalDeviceChan,
+                          IO$_READVBLK,
+                          &TerminalDeviceIosb,
+                          TerminalDeviceAst,
+                          0,
+                          TerminalDeviceBuff,
+                          sizeof(TerminalDeviceBuff) - 2,
+                          0, 0, 0, 0);
+        if (! (status & 1)) {
+            LogMessage ("TerminalSocket: SYS$QIO () - %08X", status);
+            close (TerminalSocketPair[0]);
+            close (TerminalSocketPair[1]);
+            return TERM_SOCK_FAILURE;
+        }
+
+        /*
+        ** Return the input side of the socket pair
+        */
+        *ReturnSocket = TerminalSocketPair[1];
+        break;
+
+    case TERM_SOCK_DELETE:
+        /*
+        ** Cancel any pending IO on the terminal channel
+        */
+        status = sys$cancel (TerminalDeviceChan);
+        if (! (status & 1)) {
+            LogMessage ("TerminalSocket: SYS$CANCEL () - %08X", status);
+            close (TerminalSocketPair[0]);
+            close (TerminalSocketPair[1]);
+            return TERM_SOCK_FAILURE;
+        }
+
+        /*
+	** Deassign the terminal channel
+	*/
+        status = sys$dassgn (TerminalDeviceChan);
+        if (! (status & 1)) {
+            LogMessage ("TerminalSocket: SYS$DASSGN () - %08X", status);
+            close (TerminalSocketPair[0]);
+            close (TerminalSocketPair[1]);
+            return TERM_SOCK_FAILURE;
+        }
+
+        /*
+        ** Close the terminal socket pair
+        */
+        close (TerminalSocketPair[0]);
+        close (TerminalSocketPair[1]);
+
+        /*
+	** Return the initialized socket
+	*/
+        *ReturnSocket = 0;
+        break;
+
+    default:
+        /*
+	** Invalid function code
+	*/
+        LogMessage ("TerminalSocket: Invalid Function Code - %d", FunctionCode);
+        return TERM_SOCK_FAILURE;
+        break;
+    }
+
+    /*
+    ** Return success
+    */
+    return TERM_SOCK_SUCCESS;
+
+}
+
+/*----------------------------------------------------------------------------*/
+/*                                                                            */
+/*----------------------------------------------------------------------------*/
+static int CreateSocketPair (int SocketFamily,
+                             int SocketType,
+                             int SocketProtocol,
+                             int *SocketPair)
+{
+    struct dsc$descriptor AscTimeDesc = {0, DSC$K_DTYPE_T, DSC$K_CLASS_S, NULL};
+    static const char* LocalHostAddr = {"127.0.0.1"};
+    unsigned short TcpAcceptChan = 0,
+        TcpDeviceChan = 0;
+    unsigned long BinTimeBuff[2];
+    struct sockaddr_in sin;
+    char AscTimeBuff[32];
+    short LocalHostPort;
+    int status;
+    unsigned int slen;
+
+# ifdef __alpha
+    struct _iosb iosb;
+# else
+    IOSB iosb;
+# endif
+
+    int SockDesc1 = 0,
+        SockDesc2 = 0;
+    SPTB sptb;
+    $DESCRIPTOR (TcpDeviceDesc, "TCPIP$DEVICE");
+
+    /*
+    ** Create a socket
+    */
+    SockDesc1 = socket (SocketFamily, SocketType, 0);
+    if (SockDesc1 < 0) {
+        LogMessage ("CreateSocketPair: socket () - %d", errno);
+        return -1;
+    }
+
+    /*
+    ** Initialize the socket information
+    */
+    slen = sizeof(sin);
+    memset ((char *) &sin, 0, slen);
+    sin.sin_family = SocketFamily;
+    sin.sin_addr.s_addr = inet_addr (LocalHostAddr);
+    sin.sin_port = 0;
+
+    /*
+    ** Bind the socket to the local IP
+    */
+    status = bind (SockDesc1, (struct sockaddr *) &sin, slen);
+    if (status < 0) {
+        LogMessage ("CreateSocketPair: bind () - %d", errno);
+        close (SockDesc1);
+        return -1;
+    }
+
+    /*
+    ** Get the socket name so we can save the port number
+    */
+    status = getsockname (SockDesc1, (struct sockaddr *) &sin, &slen);
+    if (status < 0) {
+        LogMessage ("CreateSocketPair: getsockname () - %d", errno);
+        close (SockDesc1);
+        return -1;
+    } else
+        LocalHostPort = sin.sin_port;
+
+    /*
+    ** Setup a listen for the socket
+    */
+    listen (SockDesc1, 5);
+
+    /*
+    ** Get the binary (64-bit) time of the specified timeout value
+    */
+    sprintf (AscTimeBuff, "0 0:0:%02d.00", SOCKET_PAIR_TIMEOUT_VALUE);
+    AscTimeDesc.dsc$w_length = strlen (AscTimeBuff);
+    AscTimeDesc.dsc$a_pointer = AscTimeBuff;
+    status = sys$bintim (&AscTimeDesc, BinTimeBuff);
+    if (! (status & 1)) {
+        LogMessage ("CreateSocketPair: SYS$BINTIM () - %08X", status);
+        close (SockDesc1);
+        return -1;
+    }
+
+    /*
+    ** Assign another channel to the TCP/IP device for the accept.
+    ** This is the channel that ends up being connected to.
+    */
+    status = sys$assign (&TcpDeviceDesc, &TcpDeviceChan, 0, 0, 0);
+    if (! (status & 1)) {
+        LogMessage ("CreateSocketPair: SYS$ASSIGN () - %08X", status);
+        close (SockDesc1);
+        return -1;
+    }
+
+    /*
+    ** Get the channel of the first socket for the accept
+    */
+    TcpAcceptChan = decc$get_sdc (SockDesc1);
+
+    /*
+    ** Perform the accept using $QIO so we can do this asynchronously
+    */
+    status = sys$qio (EFN$C_ENF,
+                      TcpAcceptChan,
+                      IO$_ACCESS | IO$M_ACCEPT,
+                      &iosb,
+                      0, 0, 0, 0, 0,
+                      &TcpDeviceChan,
+                      0, 0);
+    if (! (status & 1)) {
+        LogMessage ("CreateSocketPair: SYS$QIO () - %08X", status);
+        close (SockDesc1);
+        sys$dassgn (TcpDeviceChan);
+        return -1;
+    }
+
+    /*
+    ** Create the second socket to do the connect
+    */
+    SockDesc2 = socket (SocketFamily, SocketType, 0);
+    if (SockDesc2 < 0) {
+        LogMessage ("CreateSocketPair: socket () - %d", errno);
+        sys$cancel (TcpAcceptChan);
+        close (SockDesc1);
+        sys$dassgn (TcpDeviceChan);
+        return (-1) ;
+    }
+
+    /*
+    ** Setup the Socket Pair Timeout Block
+    */
+    sptb.SockChan1 = TcpAcceptChan;
+    sptb.SockChan2 = decc$get_sdc (SockDesc2);
+
+    /*
+    ** Before we block on the connect, set a timer that can cancel I/O on our
+    ** two sockets if it never connects.
+    */
+    status = sys$setimr (EFN$C_ENF,
+                         BinTimeBuff,
+                         SocketPairTimeoutAst,
+                         &sptb,
+                         0);
+    if (! (status & 1)) {
+        LogMessage ("CreateSocketPair: SYS$SETIMR () - %08X", status);
+        sys$cancel (TcpAcceptChan);
+        close (SockDesc1);
+        close (SockDesc2);
+        sys$dassgn (TcpDeviceChan);
+        return -1;
+    }
+
+    /*
+    ** Now issue the connect
+    */
+    memset ((char *) &sin, 0, sizeof(sin)) ;
+    sin.sin_family = SocketFamily;
+    sin.sin_addr.s_addr = inet_addr (LocalHostAddr) ;
+    sin.sin_port = LocalHostPort ;
+
+    status = connect (SockDesc2, (struct sockaddr *) &sin, sizeof(sin));
+    if (status < 0 ) {
+        LogMessage ("CreateSocketPair: connect () - %d", errno);
+        sys$cantim (&sptb, 0);
+        sys$cancel (TcpAcceptChan);
+        close (SockDesc1);
+        close (SockDesc2);
+        sys$dassgn (TcpDeviceChan);
+        return -1;
+    }
+
+    /*
+    ** Wait for the asynch $QIO to finish.  Note that if the I/O was aborted
+    ** (SS$_ABORT), then we probably canceled it from the AST routine - so log
+    ** a timeout.
+    */
+    status = sys$synch (EFN$C_ENF, &iosb);
+    if (! (iosb.iosb$w_status & 1)) {
+        if (iosb.iosb$w_status == SS$_ABORT)
+            LogMessage ("CreateSocketPair: SYS$QIO(iosb) timeout");
+        else {
+            LogMessage ("CreateSocketPair: SYS$QIO(iosb) - %d",
+                        iosb.iosb$w_status);
+            sys$cantim (&sptb, 0);
+        }
+        close (SockDesc1);
+        close (SockDesc2);
+        sys$dassgn (TcpDeviceChan);
+        return -1;
+    }
+
+    /*
+    ** Here we're successfully connected, so cancel the timer, convert the
+    ** I/O channel to a socket fd, close the listener socket and return the
+    ** connected pair.
+    */
+    sys$cantim (&sptb, 0);
+
+    close (SockDesc1) ;
+    SocketPair[0] = SockDesc2 ;
+    SocketPair[1] = socket_fd (TcpDeviceChan);
+
+    return (0) ;
+
+}
+
+/*----------------------------------------------------------------------------*/
+/*                                                                            */
+/*----------------------------------------------------------------------------*/
+static void SocketPairTimeoutAst (int astparm)
+{
+    SPTB *sptb = (SPTB *) astparm;
+
+    sys$cancel (sptb->SockChan2); /* Cancel the connect() */
+    sys$cancel (sptb->SockChan1); /* Cancel the accept() */
+
+    return;
+
+}
+
+/*----------------------------------------------------------------------------*/
+/*                                                                            */
+/*----------------------------------------------------------------------------*/
+static int TerminalDeviceAst (int astparm)
+{
+    int status;
+
+    /*
+    ** Terminate the terminal buffer
+    */
+    TerminalDeviceBuff[TerminalDeviceIosb.iosb$w_bcnt] = '\0';
+    strcat (TerminalDeviceBuff, "\n");
+
+    /*
+    ** Send the data read from the terminal device through the socket pair
+    */
+    send (TerminalSocketPair[0], TerminalDeviceBuff,
+          TerminalDeviceIosb.iosb$w_bcnt + 1, 0);
+
+    /*
+    ** Queue another async IO to the terminal device
+    */
+    status = sys$qio (EFN$C_ENF,
+                      TerminalDeviceChan,
+                      IO$_READVBLK,
+                      &TerminalDeviceIosb,
+                      TerminalDeviceAst,
+                      0,
+                      TerminalDeviceBuff,
+                      sizeof(TerminalDeviceBuff) - 1,
+                      0, 0, 0, 0);
+
+    /*
+    ** Return status
+    */
+    return status;
+
+}
+
+/*----------------------------------------------------------------------------*/
+/*                                                                            */
+/*----------------------------------------------------------------------------*/
+static void LogMessage (char *msg, ...)
+{
+    char *Month[] = {"Jan", "Feb", "Mar", "Apr", "May", "Jun",
+                     "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"};
+    static unsigned int pid = 0;
+    va_list args;
+    time_t CurTime;
+    struct tm *LocTime;
+    char MsgBuff[256];
+
+    /*
+    ** Get the process pid
+    */
+    if (pid == 0)
+        pid = getpid ();
+
+    /*
+    ** Convert the current time into local time
+    */
+    CurTime = time (NULL);
+    LocTime = localtime (&CurTime);
+
+    /*
+    ** Format the message buffer
+    */
+    sprintf (MsgBuff, "%02d-%s-%04d %02d:%02d:%02d [%08X] %s\n",
+             LocTime->tm_mday, Month[LocTime->tm_mon],
+             (LocTime->tm_year + 1900), LocTime->tm_hour, LocTime->tm_min,
+             LocTime->tm_sec, pid, msg);
+
+    /*
+    ** Get any variable arguments and add them to the print of the message
+    ** buffer
+    */
+    va_start (args, msg);
+    vfprintf (stderr, MsgBuff, args);
+    va_end (args);
+
+    /*
+    ** Flush standard error output
+    */
+    fsync (fileno (stderr));
+
+    return;
+
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/vms_term_sock.h b/trunk/3rdparty/openssl-1.1-fit/apps/vms_term_sock.h
new file mode 100644
index 000000000..c4d1702d7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/vms_term_sock.h
@@ -0,0 +1,31 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016 VMS Software, Inc. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef TERM_SOCK_H
+# define TERM_SOCK_H
+
+/*
+** Terminal Socket Function Codes
+*/
+# define TERM_SOCK_CREATE       1
+# define TERM_SOCK_DELETE       2
+
+/*
+** Terminal Socket Status Codes
+*/
+# define TERM_SOCK_FAILURE      0
+# define TERM_SOCK_SUCCESS      1
+
+/*
+** Terminal Socket Prototype
+*/
+int TerminalSocket (int FunctionCode, int *ReturnSocket);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/win32_init.c b/trunk/3rdparty/openssl-1.1-fit/apps/win32_init.c
new file mode 100644
index 000000000..df4bff41a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/win32_init.c
@@ -0,0 +1,307 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <windows.h>
+#include <stdlib.h>
+#include <string.h>
+#include <malloc.h>
+
+#if defined(CP_UTF8)
+
+static UINT saved_cp;
+static int newargc;
+static char **newargv;
+
+static void cleanup(void)
+{
+    int i;
+
+    SetConsoleOutputCP(saved_cp);
+
+    for (i = 0; i < newargc; i++)
+        free(newargv[i]);
+
+    free(newargv);
+}
+
+/*
+ * Incrementally [re]allocate newargv and keep it NULL-terminated.
+ */
+static int validate_argv(int argc)
+{
+    static int size = 0;
+
+    if (argc >= size) {
+        char **ptr;
+
+        while (argc >= size)
+            size += 64;
+
+        ptr = realloc(newargv, size * sizeof(newargv[0]));
+        if (ptr == NULL)
+            return 0;
+
+        (newargv = ptr)[argc] = NULL;
+    } else {
+        newargv[argc] = NULL;
+    }
+
+    return 1;
+}
+
+static int process_glob(WCHAR *wstr, int wlen)
+{
+    int i, slash, udlen;
+    WCHAR saved_char;
+    WIN32_FIND_DATAW data;
+    HANDLE h;
+
+    /*
+     * Note that we support wildcard characters only in filename part
+     * of the path, and not in directories. Windows users are used to
+     * this, that's why recursive glob processing is not implemented.
+     */
+    /*
+     * Start by looking for last slash or backslash, ...
+     */
+    for (slash = 0, i = 0; i < wlen; i++)
+        if (wstr[i] == L'/' || wstr[i] == L'\\')
+            slash = i + 1;
+    /*
+     * ... then look for asterisk or question mark in the file name.
+     */
+    for (i = slash; i < wlen; i++)
+        if (wstr[i] == L'*' || wstr[i] == L'?')
+            break;
+
+    if (i == wlen)
+        return 0;   /* definitely not a glob */
+
+    saved_char = wstr[wlen];
+    wstr[wlen] = L'\0';
+    h = FindFirstFileW(wstr, &data);
+    wstr[wlen] = saved_char;
+    if (h == INVALID_HANDLE_VALUE)
+        return 0;   /* not a valid glob, just pass... */
+
+    if (slash)
+        udlen = WideCharToMultiByte(CP_UTF8, 0, wstr, slash,
+                                    NULL, 0, NULL, NULL);
+    else
+        udlen = 0;
+
+    do {
+        int uflen;
+        char *arg;
+
+        /*
+         * skip over . and ..
+         */
+        if (data.cFileName[0] == L'.') {
+            if ((data.cFileName[1] == L'\0') ||
+                (data.cFileName[1] == L'.' && data.cFileName[2] == L'\0'))
+                continue;
+        }
+
+        if (!validate_argv(newargc + 1))
+            break;
+
+        /*
+         * -1 below means "scan for trailing '\0' *and* count it",
+         * so that |uflen| covers even trailing '\0'.
+         */
+        uflen = WideCharToMultiByte(CP_UTF8, 0, data.cFileName, -1,
+                                    NULL, 0, NULL, NULL);
+
+        arg = malloc(udlen + uflen);
+        if (arg == NULL)
+            break;
+
+        if (udlen)
+            WideCharToMultiByte(CP_UTF8, 0, wstr, slash,
+                                arg, udlen, NULL, NULL);
+
+        WideCharToMultiByte(CP_UTF8, 0, data.cFileName, -1,
+                            arg + udlen, uflen, NULL, NULL);
+
+        newargv[newargc++] = arg;
+    } while (FindNextFileW(h, &data));
+
+    CloseHandle(h);
+
+    return 1;
+}
+
+void win32_utf8argv(int *argc, char **argv[])
+{
+    const WCHAR *wcmdline;
+    WCHAR *warg, *wend, *p;
+    int wlen, ulen, valid = 1;
+    char *arg;
+
+    if (GetEnvironmentVariableW(L"OPENSSL_WIN32_UTF8", NULL, 0) == 0)
+        return;
+
+    newargc = 0;
+    newargv = NULL;
+    if (!validate_argv(newargc))
+        return;
+
+    wcmdline = GetCommandLineW();
+    if (wcmdline == NULL) return;
+
+    /*
+     * make a copy of the command line, since we might have to modify it...
+     */
+    wlen = wcslen(wcmdline);
+    p = _alloca((wlen + 1) * sizeof(WCHAR));
+    wcscpy(p, wcmdline);
+
+    while (*p != L'\0') {
+        int in_quote = 0;
+
+        if (*p == L' ' || *p == L'\t') {
+            p++; /* skip over white spaces */
+            continue;
+        }
+
+        /*
+         * Note: because we may need to fiddle with the number of backslashes,
+         * the argument string is copied into itself.  This is safe because
+         * the number of characters will never expand.
+         */
+        warg = wend = p;
+        while (*p != L'\0'
+               && (in_quote || (*p != L' ' && *p != L'\t'))) {
+            switch (*p) {
+            case L'\\':
+                /*
+                 * Microsoft documentation on how backslashes are treated
+                 * is:
+                 *
+                 * + Backslashes are interpreted literally, unless they
+                 *   immediately precede a double quotation mark.
+                 * + If an even number of backslashes is followed by a double
+                 *   quotation mark, one backslash is placed in the argv array
+                 *   for every pair of backslashes, and the double quotation
+                 *   mark is interpreted as a string delimiter.
+                 * + If an odd number of backslashes is followed by a double
+                 *   quotation mark, one backslash is placed in the argv array
+                 *   for every pair of backslashes, and the double quotation
+                 *   mark is "escaped" by the remaining backslash, causing a
+                 *   literal double quotation mark (") to be placed in argv.
+                 *
+                 * Ref: https://msdn.microsoft.com/en-us/library/17w5ykft.aspx
+                 *
+                 * Though referred page doesn't mention it, multiple qouble
+                 * quotes are also special. Pair of double quotes in quoted
+                 * string is counted as single double quote.
+                 */
+                {
+                    const WCHAR *q = p;
+                    int i;
+
+                    while (*p == L'\\')
+                        p++;
+
+                    if (*p == L'"') {
+                        int i;
+
+                        for (i = (p - q) / 2; i > 0; i--)
+                            *wend++ = L'\\';
+
+                        /*
+                         * if odd amount of backslashes before the quote,
+                         * said quote is part of the argument, not a delimiter
+                         */
+                        if ((p - q) % 2 == 1)
+                            *wend++ = *p++;
+                    } else {
+                        for (i = p - q; i > 0; i--)
+                            *wend++ = L'\\';
+                    }
+                }
+                break;
+            case L'"':
+                /*
+                 * Without the preceding backslash (or when preceded with an
+                 * even number of backslashes), the double quote is a simple
+                 * string delimiter and just slightly change the parsing state
+                 */
+                if (in_quote && p[1] == L'"')
+                    *wend++ = *p++;
+                else
+                    in_quote = !in_quote;
+                p++;
+                break;
+            default:
+                /*
+                 * Any other non-delimiter character is just taken verbatim
+                 */
+                *wend++ = *p++;
+            }
+        }
+
+        wlen = wend - warg;
+
+        if (wlen == 0 || !process_glob(warg, wlen)) {
+            if (!validate_argv(newargc + 1)) {
+                valid = 0;
+                break;
+            }
+
+            ulen = 0;
+            if (wlen > 0) {
+                ulen = WideCharToMultiByte(CP_UTF8, 0, warg, wlen,
+                                           NULL, 0, NULL, NULL);
+                if (ulen <= 0)
+                    continue;
+            }
+
+            arg = malloc(ulen + 1);
+            if (arg == NULL) {
+                valid = 0;
+                break;
+            }
+
+            if (wlen > 0)
+                WideCharToMultiByte(CP_UTF8, 0, warg, wlen,
+                                    arg, ulen, NULL, NULL);
+            arg[ulen] = '\0';
+
+            newargv[newargc++] = arg;
+        }
+    }
+
+    if (valid) {
+        saved_cp = GetConsoleOutputCP();
+        SetConsoleOutputCP(CP_UTF8);
+
+        *argc = newargc;
+        *argv = newargv;
+
+        atexit(cleanup);
+    } else if (newargv != NULL) {
+        int i;
+
+        for (i = 0; i < newargc; i++)
+            free(newargv[i]);
+
+        free(newargv);
+
+        newargc = 0;
+        newargv = NULL;
+    }
+
+    return;
+}
+#else
+void win32_utf8argv(int *argc, char **argv[])
+{   return;   }
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/apps/x509.c b/trunk/3rdparty/openssl-1.1-fit/apps/x509.c
new file mode 100644
index 000000000..81291a9a4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/apps/x509.c
@@ -0,0 +1,1196 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include "apps.h"
+#include "progs.h"
+#include <openssl/bio.h>
+#include <openssl/asn1.h>
+#include <openssl/err.h>
+#include <openssl/bn.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/objects.h>
+#include <openssl/pem.h>
+#ifndef OPENSSL_NO_RSA
+# include <openssl/rsa.h>
+#endif
+#ifndef OPENSSL_NO_DSA
+# include <openssl/dsa.h>
+#endif
+
+#undef POSTFIX
+#define POSTFIX ".srl"
+#define DEF_DAYS        30
+
+static int callb(int ok, X509_STORE_CTX *ctx);
+static int sign(X509 *x, EVP_PKEY *pkey, int days, int clrext,
+                const EVP_MD *digest, CONF *conf, const char *section,
+                int preserve_dates);
+static int x509_certify(X509_STORE *ctx, const char *CAfile, const EVP_MD *digest,
+                        X509 *x, X509 *xca, EVP_PKEY *pkey,
+                        STACK_OF(OPENSSL_STRING) *sigopts, const char *serialfile,
+                        int create, int days, int clrext, CONF *conf,
+                        const char *section, ASN1_INTEGER *sno, int reqfile,
+                        int preserve_dates);
+static int purpose_print(BIO *bio, X509 *cert, X509_PURPOSE *pt);
+static int print_x509v3_exts(BIO *bio, X509 *x, const char *exts);
+
+typedef enum OPTION_choice {
+    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
+    OPT_INFORM, OPT_OUTFORM, OPT_KEYFORM, OPT_REQ, OPT_CAFORM,
+    OPT_CAKEYFORM, OPT_SIGOPT, OPT_DAYS, OPT_PASSIN, OPT_EXTFILE,
+    OPT_EXTENSIONS, OPT_IN, OPT_OUT, OPT_SIGNKEY, OPT_CA,
+    OPT_CAKEY, OPT_CASERIAL, OPT_SET_SERIAL, OPT_FORCE_PUBKEY,
+    OPT_ADDTRUST, OPT_ADDREJECT, OPT_SETALIAS, OPT_CERTOPT, OPT_NAMEOPT,
+    OPT_C, OPT_EMAIL, OPT_OCSP_URI, OPT_SERIAL, OPT_NEXT_SERIAL,
+    OPT_MODULUS, OPT_PUBKEY, OPT_X509TOREQ, OPT_TEXT, OPT_HASH,
+    OPT_ISSUER_HASH, OPT_SUBJECT, OPT_ISSUER, OPT_FINGERPRINT, OPT_DATES,
+    OPT_PURPOSE, OPT_STARTDATE, OPT_ENDDATE, OPT_CHECKEND, OPT_CHECKHOST,
+    OPT_CHECKEMAIL, OPT_CHECKIP, OPT_NOOUT, OPT_TRUSTOUT, OPT_CLRTRUST,
+    OPT_CLRREJECT, OPT_ALIAS, OPT_CACREATESERIAL, OPT_CLREXT, OPT_OCSPID,
+    OPT_SUBJECT_HASH_OLD,
+    OPT_ISSUER_HASH_OLD,
+    OPT_BADSIG, OPT_MD, OPT_ENGINE, OPT_NOCERT, OPT_PRESERVE_DATES,
+    OPT_R_ENUM, OPT_EXT
+} OPTION_CHOICE;
+
+const OPTIONS x509_options[] = {
+    {"help", OPT_HELP, '-', "Display this summary"},
+    {"inform", OPT_INFORM, 'f',
+     "Input format - default PEM (one of DER or PEM)"},
+    {"in", OPT_IN, '<', "Input file - default stdin"},
+    {"outform", OPT_OUTFORM, 'f',
+     "Output format - default PEM (one of DER or PEM)"},
+    {"out", OPT_OUT, '>', "Output file - default stdout"},
+    {"keyform", OPT_KEYFORM, 'F', "Private key format - default PEM"},
+    {"passin", OPT_PASSIN, 's', "Private key password/pass-phrase source"},
+    {"serial", OPT_SERIAL, '-', "Print serial number value"},
+    {"subject_hash", OPT_HASH, '-', "Print subject hash value"},
+    {"issuer_hash", OPT_ISSUER_HASH, '-', "Print issuer hash value"},
+    {"hash", OPT_HASH, '-', "Synonym for -subject_hash"},
+    {"subject", OPT_SUBJECT, '-', "Print subject DN"},
+    {"issuer", OPT_ISSUER, '-', "Print issuer DN"},
+    {"email", OPT_EMAIL, '-', "Print email address(es)"},
+    {"startdate", OPT_STARTDATE, '-', "Set notBefore field"},
+    {"enddate", OPT_ENDDATE, '-', "Set notAfter field"},
+    {"purpose", OPT_PURPOSE, '-', "Print out certificate purposes"},
+    {"dates", OPT_DATES, '-', "Both Before and After dates"},
+    {"modulus", OPT_MODULUS, '-', "Print the RSA key modulus"},
+    {"pubkey", OPT_PUBKEY, '-', "Output the public key"},
+    {"fingerprint", OPT_FINGERPRINT, '-',
+     "Print the certificate fingerprint"},
+    {"alias", OPT_ALIAS, '-', "Output certificate alias"},
+    {"noout", OPT_NOOUT, '-', "No output, just status"},
+    {"nocert", OPT_NOCERT, '-', "No certificate output"},
+    {"ocspid", OPT_OCSPID, '-',
+     "Print OCSP hash values for the subject name and public key"},
+    {"ocsp_uri", OPT_OCSP_URI, '-', "Print OCSP Responder URL(s)"},
+    {"trustout", OPT_TRUSTOUT, '-', "Output a trusted certificate"},
+    {"clrtrust", OPT_CLRTRUST, '-', "Clear all trusted purposes"},
+    {"clrext", OPT_CLREXT, '-', "Clear all certificate extensions"},
+    {"addtrust", OPT_ADDTRUST, 's', "Trust certificate for a given purpose"},
+    {"addreject", OPT_ADDREJECT, 's',
+     "Reject certificate for a given purpose"},
+    {"setalias", OPT_SETALIAS, 's', "Set certificate alias"},
+    {"days", OPT_DAYS, 'n',
+     "How long till expiry of a signed certificate - def 30 days"},
+    {"checkend", OPT_CHECKEND, 'M',
+     "Check whether the cert expires in the next arg seconds"},
+    {OPT_MORE_STR, 1, 1, "Exit 1 if so, 0 if not"},
+    {"signkey", OPT_SIGNKEY, '<', "Self sign cert with arg"},
+    {"x509toreq", OPT_X509TOREQ, '-',
+     "Output a certification request object"},
+    {"req", OPT_REQ, '-', "Input is a certificate request, sign and output"},
+    {"CA", OPT_CA, '<', "Set the CA certificate, must be PEM format"},
+    {"CAkey", OPT_CAKEY, 's',
+     "The CA key, must be PEM format; if not in CAfile"},
+    {"CAcreateserial", OPT_CACREATESERIAL, '-',
+     "Create serial number file if it does not exist"},
+    {"CAserial", OPT_CASERIAL, 's', "Serial file"},
+    {"set_serial", OPT_SET_SERIAL, 's', "Serial number to use"},
+    {"text", OPT_TEXT, '-', "Print the certificate in text form"},
+    {"ext", OPT_EXT, 's', "Print various X509V3 extensions"},
+    {"C", OPT_C, '-', "Print out C code forms"},
+    {"extfile", OPT_EXTFILE, '<', "File with X509V3 extensions to add"},
+    OPT_R_OPTIONS,
+    {"extensions", OPT_EXTENSIONS, 's', "Section from config file to use"},
+    {"nameopt", OPT_NAMEOPT, 's', "Various certificate name options"},
+    {"certopt", OPT_CERTOPT, 's', "Various certificate text options"},
+    {"checkhost", OPT_CHECKHOST, 's', "Check certificate matches host"},
+    {"checkemail", OPT_CHECKEMAIL, 's', "Check certificate matches email"},
+    {"checkip", OPT_CHECKIP, 's', "Check certificate matches ipaddr"},
+    {"CAform", OPT_CAFORM, 'F', "CA format - default PEM"},
+    {"CAkeyform", OPT_CAKEYFORM, 'f', "CA key format - default PEM"},
+    {"sigopt", OPT_SIGOPT, 's', "Signature parameter in n:v form"},
+    {"force_pubkey", OPT_FORCE_PUBKEY, '<', "Force the Key to put inside certificate"},
+    {"next_serial", OPT_NEXT_SERIAL, '-', "Increment current certificate serial number"},
+    {"clrreject", OPT_CLRREJECT, '-',
+     "Clears all the prohibited or rejected uses of the certificate"},
+    {"badsig", OPT_BADSIG, '-', "Corrupt last byte of certificate signature (for test)"},
+    {"", OPT_MD, '-', "Any supported digest"},
+#ifndef OPENSSL_NO_MD5
+    {"subject_hash_old", OPT_SUBJECT_HASH_OLD, '-',
+     "Print old-style (MD5) issuer hash value"},
+    {"issuer_hash_old", OPT_ISSUER_HASH_OLD, '-',
+     "Print old-style (MD5) subject hash value"},
+#endif
+#ifndef OPENSSL_NO_ENGINE
+    {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
+#endif
+    {"preserve_dates", OPT_PRESERVE_DATES, '-', "preserve existing dates when signing"},
+    {NULL}
+};
+
+int x509_main(int argc, char **argv)
+{
+    ASN1_INTEGER *sno = NULL;
+    ASN1_OBJECT *objtmp = NULL;
+    BIO *out = NULL;
+    CONF *extconf = NULL;
+    EVP_PKEY *Upkey = NULL, *CApkey = NULL, *fkey = NULL;
+    STACK_OF(ASN1_OBJECT) *trust = NULL, *reject = NULL;
+    STACK_OF(OPENSSL_STRING) *sigopts = NULL;
+    X509 *x = NULL, *xca = NULL;
+    X509_REQ *req = NULL, *rq = NULL;
+    X509_STORE *ctx = NULL;
+    const EVP_MD *digest = NULL;
+    char *CAkeyfile = NULL, *CAserial = NULL, *fkeyfile = NULL, *alias = NULL;
+    char *checkhost = NULL, *checkemail = NULL, *checkip = NULL, *exts = NULL;
+    char *extsect = NULL, *extfile = NULL, *passin = NULL, *passinarg = NULL;
+    char *infile = NULL, *outfile = NULL, *keyfile = NULL, *CAfile = NULL;
+    char *prog;
+    int x509req = 0, days = DEF_DAYS, modulus = 0, pubkey = 0, pprint = 0;
+    int C = 0, CAformat = FORMAT_PEM, CAkeyformat = FORMAT_PEM;
+    int fingerprint = 0, reqfile = 0, checkend = 0;
+    int informat = FORMAT_PEM, outformat = FORMAT_PEM, keyformat = FORMAT_PEM;
+    int next_serial = 0, subject_hash = 0, issuer_hash = 0, ocspid = 0;
+    int noout = 0, sign_flag = 0, CA_flag = 0, CA_createserial = 0, email = 0;
+    int ocsp_uri = 0, trustout = 0, clrtrust = 0, clrreject = 0, aliasout = 0;
+    int ret = 1, i, num = 0, badsig = 0, clrext = 0, nocert = 0;
+    int text = 0, serial = 0, subject = 0, issuer = 0, startdate = 0, ext = 0;
+    int enddate = 0;
+    time_t checkoffset = 0;
+    unsigned long certflag = 0;
+    int preserve_dates = 0;
+    OPTION_CHOICE o;
+    ENGINE *e = NULL;
+#ifndef OPENSSL_NO_MD5
+    int subject_hash_old = 0, issuer_hash_old = 0;
+#endif
+
+    ctx = X509_STORE_new();
+    if (ctx == NULL)
+        goto end;
+    X509_STORE_set_verify_cb(ctx, callb);
+
+    prog = opt_init(argc, argv, x509_options);
+    while ((o = opt_next()) != OPT_EOF) {
+        switch (o) {
+        case OPT_EOF:
+        case OPT_ERR:
+ opthelp:
+            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
+            goto end;
+        case OPT_HELP:
+            opt_help(x509_options);
+            ret = 0;
+            goto end;
+        case OPT_INFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_ANY, &informat))
+                goto opthelp;
+            break;
+        case OPT_IN:
+            infile = opt_arg();
+            break;
+        case OPT_OUTFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_ANY, &outformat))
+                goto opthelp;
+            break;
+        case OPT_KEYFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &keyformat))
+                goto opthelp;
+            break;
+        case OPT_CAFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &CAformat))
+                goto opthelp;
+            break;
+        case OPT_CAKEYFORM:
+            if (!opt_format(opt_arg(), OPT_FMT_ANY, &CAkeyformat))
+                goto opthelp;
+            break;
+        case OPT_OUT:
+            outfile = opt_arg();
+            break;
+        case OPT_REQ:
+            reqfile = 1;
+            break;
+
+        case OPT_SIGOPT:
+            if (!sigopts)
+                sigopts = sk_OPENSSL_STRING_new_null();
+            if (!sigopts || !sk_OPENSSL_STRING_push(sigopts, opt_arg()))
+                goto opthelp;
+            break;
+        case OPT_DAYS:
+            if (preserve_dates)
+                goto opthelp;
+            days = atoi(opt_arg());
+            break;
+        case OPT_PASSIN:
+            passinarg = opt_arg();
+            break;
+        case OPT_EXTFILE:
+            extfile = opt_arg();
+            break;
+        case OPT_R_CASES:
+            if (!opt_rand(o))
+                goto end;
+            break;
+        case OPT_EXTENSIONS:
+            extsect = opt_arg();
+            break;
+        case OPT_SIGNKEY:
+            keyfile = opt_arg();
+            sign_flag = ++num;
+            break;
+        case OPT_CA:
+            CAfile = opt_arg();
+            CA_flag = ++num;
+            break;
+        case OPT_CAKEY:
+            CAkeyfile = opt_arg();
+            break;
+        case OPT_CASERIAL:
+            CAserial = opt_arg();
+            break;
+        case OPT_SET_SERIAL:
+            if (sno != NULL) {
+                BIO_printf(bio_err, "Serial number supplied twice\n");
+                goto opthelp;
+            }
+            if ((sno = s2i_ASN1_INTEGER(NULL, opt_arg())) == NULL)
+                goto opthelp;
+            break;
+        case OPT_FORCE_PUBKEY:
+            fkeyfile = opt_arg();
+            break;
+        case OPT_ADDTRUST:
+            if ((objtmp = OBJ_txt2obj(opt_arg(), 0)) == NULL) {
+                BIO_printf(bio_err,
+                           "%s: Invalid trust object value %s\n",
+                           prog, opt_arg());
+                goto opthelp;
+            }
+            if (trust == NULL && (trust = sk_ASN1_OBJECT_new_null()) == NULL)
+                goto end;
+            sk_ASN1_OBJECT_push(trust, objtmp);
+            objtmp = NULL;
+            trustout = 1;
+            break;
+        case OPT_ADDREJECT:
+            if ((objtmp = OBJ_txt2obj(opt_arg(), 0)) == NULL) {
+                BIO_printf(bio_err,
+                           "%s: Invalid reject object value %s\n",
+                           prog, opt_arg());
+                goto opthelp;
+            }
+            if (reject == NULL
+                && (reject = sk_ASN1_OBJECT_new_null()) == NULL)
+                goto end;
+            sk_ASN1_OBJECT_push(reject, objtmp);
+            objtmp = NULL;
+            trustout = 1;
+            break;
+        case OPT_SETALIAS:
+            alias = opt_arg();
+            trustout = 1;
+            break;
+        case OPT_CERTOPT:
+            if (!set_cert_ex(&certflag, opt_arg()))
+                goto opthelp;
+            break;
+        case OPT_NAMEOPT:
+            if (!set_nameopt(opt_arg()))
+                goto opthelp;
+            break;
+        case OPT_ENGINE:
+            e = setup_engine(opt_arg(), 0);
+            break;
+        case OPT_C:
+            C = ++num;
+            break;
+        case OPT_EMAIL:
+            email = ++num;
+            break;
+        case OPT_OCSP_URI:
+            ocsp_uri = ++num;
+            break;
+        case OPT_SERIAL:
+            serial = ++num;
+            break;
+        case OPT_NEXT_SERIAL:
+            next_serial = ++num;
+            break;
+        case OPT_MODULUS:
+            modulus = ++num;
+            break;
+        case OPT_PUBKEY:
+            pubkey = ++num;
+            break;
+        case OPT_X509TOREQ:
+            x509req = ++num;
+            break;
+        case OPT_TEXT:
+            text = ++num;
+            break;
+        case OPT_SUBJECT:
+            subject = ++num;
+            break;
+        case OPT_ISSUER:
+            issuer = ++num;
+            break;
+        case OPT_FINGERPRINT:
+            fingerprint = ++num;
+            break;
+        case OPT_HASH:
+            subject_hash = ++num;
+            break;
+        case OPT_ISSUER_HASH:
+            issuer_hash = ++num;
+            break;
+        case OPT_PURPOSE:
+            pprint = ++num;
+            break;
+        case OPT_STARTDATE:
+            startdate = ++num;
+            break;
+        case OPT_ENDDATE:
+            enddate = ++num;
+            break;
+        case OPT_NOOUT:
+            noout = ++num;
+            break;
+        case OPT_EXT:
+            ext = ++num;
+            exts = opt_arg();
+            break;
+        case OPT_NOCERT:
+            nocert = 1;
+            break;
+        case OPT_TRUSTOUT:
+            trustout = 1;
+            break;
+        case OPT_CLRTRUST:
+            clrtrust = ++num;
+            break;
+        case OPT_CLRREJECT:
+            clrreject = ++num;
+            break;
+        case OPT_ALIAS:
+            aliasout = ++num;
+            break;
+        case OPT_CACREATESERIAL:
+            CA_createserial = ++num;
+            break;
+        case OPT_CLREXT:
+            clrext = 1;
+            break;
+        case OPT_OCSPID:
+            ocspid = ++num;
+            break;
+        case OPT_BADSIG:
+            badsig = 1;
+            break;
+#ifndef OPENSSL_NO_MD5
+        case OPT_SUBJECT_HASH_OLD:
+            subject_hash_old = ++num;
+            break;
+        case OPT_ISSUER_HASH_OLD:
+            issuer_hash_old = ++num;
+            break;
+#else
+        case OPT_SUBJECT_HASH_OLD:
+        case OPT_ISSUER_HASH_OLD:
+            break;
+#endif
+        case OPT_DATES:
+            startdate = ++num;
+            enddate = ++num;
+            break;
+        case OPT_CHECKEND:
+            checkend = 1;
+            {
+                intmax_t temp = 0;
+                if (!opt_imax(opt_arg(), &temp))
+                    goto opthelp;
+                checkoffset = (time_t)temp;
+                if ((intmax_t)checkoffset != temp) {
+                    BIO_printf(bio_err, "%s: checkend time out of range %s\n",
+                               prog, opt_arg());
+                    goto opthelp;
+                }
+            }
+            break;
+        case OPT_CHECKHOST:
+            checkhost = opt_arg();
+            break;
+        case OPT_CHECKEMAIL:
+            checkemail = opt_arg();
+            break;
+        case OPT_CHECKIP:
+            checkip = opt_arg();
+            break;
+        case OPT_PRESERVE_DATES:
+            if (days != DEF_DAYS)
+                goto opthelp;
+            preserve_dates = 1;
+            break;
+        case OPT_MD:
+            if (!opt_md(opt_unknown(), &digest))
+                goto opthelp;
+        }
+    }
+    argc = opt_num_rest();
+    argv = opt_rest();
+    if (argc != 0) {
+        BIO_printf(bio_err, "%s: Unknown parameter %s\n", prog, argv[0]);
+        goto opthelp;
+    }
+
+    if (!app_passwd(passinarg, NULL, &passin, NULL)) {
+        BIO_printf(bio_err, "Error getting password\n");
+        goto end;
+    }
+
+    if (!X509_STORE_set_default_paths(ctx)) {
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+
+    if (fkeyfile != NULL) {
+        fkey = load_pubkey(fkeyfile, keyformat, 0, NULL, e, "Forced key");
+        if (fkey == NULL)
+            goto end;
+    }
+
+    if ((CAkeyfile == NULL) && (CA_flag) && (CAformat == FORMAT_PEM)) {
+        CAkeyfile = CAfile;
+    } else if ((CA_flag) && (CAkeyfile == NULL)) {
+        BIO_printf(bio_err,
+                   "need to specify a CAkey if using the CA command\n");
+        goto end;
+    }
+
+    if (extfile != NULL) {
+        X509V3_CTX ctx2;
+        if ((extconf = app_load_config(extfile)) == NULL)
+            goto end;
+        if (extsect == NULL) {
+            extsect = NCONF_get_string(extconf, "default", "extensions");
+            if (extsect == NULL) {
+                ERR_clear_error();
+                extsect = "default";
+            }
+        }
+        X509V3_set_ctx_test(&ctx2);
+        X509V3_set_nconf(&ctx2, extconf);
+        if (!X509V3_EXT_add_nconf(extconf, &ctx2, extsect, NULL)) {
+            BIO_printf(bio_err,
+                       "Error Loading extension section %s\n", extsect);
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+    }
+
+    if (reqfile) {
+        EVP_PKEY *pkey;
+        BIO *in;
+
+        if (!sign_flag && !CA_flag) {
+            BIO_printf(bio_err, "We need a private key to sign with\n");
+            goto end;
+        }
+        in = bio_open_default(infile, 'r', informat);
+        if (in == NULL)
+            goto end;
+        req = PEM_read_bio_X509_REQ(in, NULL, NULL, NULL);
+        BIO_free(in);
+
+        if (req == NULL) {
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+
+        if ((pkey = X509_REQ_get0_pubkey(req)) == NULL) {
+            BIO_printf(bio_err, "error unpacking public key\n");
+            goto end;
+        }
+        i = X509_REQ_verify(req, pkey);
+        if (i < 0) {
+            BIO_printf(bio_err, "Signature verification error\n");
+            ERR_print_errors(bio_err);
+            goto end;
+        }
+        if (i == 0) {
+            BIO_printf(bio_err,
+                       "Signature did not match the certificate request\n");
+            goto end;
+        } else {
+            BIO_printf(bio_err, "Signature ok\n");
+        }
+
+        print_name(bio_err, "subject=", X509_REQ_get_subject_name(req),
+                   get_nameopt());
+
+        if ((x = X509_new()) == NULL)
+            goto end;
+
+        if (sno == NULL) {
+            sno = ASN1_INTEGER_new();
+            if (sno == NULL || !rand_serial(NULL, sno))
+                goto end;
+            if (!X509_set_serialNumber(x, sno))
+                goto end;
+            ASN1_INTEGER_free(sno);
+            sno = NULL;
+        } else if (!X509_set_serialNumber(x, sno)) {
+            goto end;
+        }
+
+        if (!X509_set_issuer_name(x, X509_REQ_get_subject_name(req)))
+            goto end;
+        if (!X509_set_subject_name(x, X509_REQ_get_subject_name(req)))
+            goto end;
+        if (!set_cert_times(x, NULL, NULL, days))
+            goto end;
+
+        if (fkey != NULL) {
+            X509_set_pubkey(x, fkey);
+        } else {
+            pkey = X509_REQ_get0_pubkey(req);
+            X509_set_pubkey(x, pkey);
+        }
+    } else {
+        x = load_cert(infile, informat, "Certificate");
+    }
+
+    if (x == NULL)
+        goto end;
+    if (CA_flag) {
+        xca = load_cert(CAfile, CAformat, "CA Certificate");
+        if (xca == NULL)
+            goto end;
+    }
+
+    out = bio_open_default(outfile, 'w', outformat);
+    if (out == NULL)
+        goto end;
+
+    if (!noout || text || next_serial)
+        OBJ_create("2.99999.3", "SET.ex3", "SET x509v3 extension 3");
+
+    if (alias)
+        X509_alias_set1(x, (unsigned char *)alias, -1);
+
+    if (clrtrust)
+        X509_trust_clear(x);
+    if (clrreject)
+        X509_reject_clear(x);
+
+    if (trust != NULL) {
+        for (i = 0; i < sk_ASN1_OBJECT_num(trust); i++) {
+            objtmp = sk_ASN1_OBJECT_value(trust, i);
+            X509_add1_trust_object(x, objtmp);
+        }
+        objtmp = NULL;
+    }
+
+    if (reject != NULL) {
+        for (i = 0; i < sk_ASN1_OBJECT_num(reject); i++) {
+            objtmp = sk_ASN1_OBJECT_value(reject, i);
+            X509_add1_reject_object(x, objtmp);
+        }
+        objtmp = NULL;
+    }
+
+    if (badsig) {
+        const ASN1_BIT_STRING *signature;
+
+        X509_get0_signature(&signature, NULL, x);
+        corrupt_signature(signature);
+    }
+
+    if (num) {
+        for (i = 1; i <= num; i++) {
+            if (issuer == i) {
+                print_name(out, "issuer=", X509_get_issuer_name(x), get_nameopt());
+            } else if (subject == i) {
+                print_name(out, "subject=",
+                           X509_get_subject_name(x), get_nameopt());
+            } else if (serial == i) {
+                BIO_printf(out, "serial=");
+                i2a_ASN1_INTEGER(out, X509_get_serialNumber(x));
+                BIO_printf(out, "\n");
+            } else if (next_serial == i) {
+                ASN1_INTEGER *ser = X509_get_serialNumber(x);
+                BIGNUM *bnser = ASN1_INTEGER_to_BN(ser, NULL);
+
+                if (!bnser)
+                    goto end;
+                if (!BN_add_word(bnser, 1))
+                    goto end;
+                ser = BN_to_ASN1_INTEGER(bnser, NULL);
+                if (!ser)
+                    goto end;
+                BN_free(bnser);
+                i2a_ASN1_INTEGER(out, ser);
+                ASN1_INTEGER_free(ser);
+                BIO_puts(out, "\n");
+            } else if ((email == i) || (ocsp_uri == i)) {
+                int j;
+                STACK_OF(OPENSSL_STRING) *emlst;
+                if (email == i)
+                    emlst = X509_get1_email(x);
+                else
+                    emlst = X509_get1_ocsp(x);
+                for (j = 0; j < sk_OPENSSL_STRING_num(emlst); j++)
+                    BIO_printf(out, "%s\n",
+                               sk_OPENSSL_STRING_value(emlst, j));
+                X509_email_free(emlst);
+            } else if (aliasout == i) {
+                unsigned char *alstr;
+                alstr = X509_alias_get0(x, NULL);
+                if (alstr)
+                    BIO_printf(out, "%s\n", alstr);
+                else
+                    BIO_puts(out, "<No Alias>\n");
+            } else if (subject_hash == i) {
+                BIO_printf(out, "%08lx\n", X509_subject_name_hash(x));
+            }
+#ifndef OPENSSL_NO_MD5
+            else if (subject_hash_old == i) {
+                BIO_printf(out, "%08lx\n", X509_subject_name_hash_old(x));
+            }
+#endif
+            else if (issuer_hash == i) {
+                BIO_printf(out, "%08lx\n", X509_issuer_name_hash(x));
+            }
+#ifndef OPENSSL_NO_MD5
+            else if (issuer_hash_old == i) {
+                BIO_printf(out, "%08lx\n", X509_issuer_name_hash_old(x));
+            }
+#endif
+            else if (pprint == i) {
+                X509_PURPOSE *ptmp;
+                int j;
+                BIO_printf(out, "Certificate purposes:\n");
+                for (j = 0; j < X509_PURPOSE_get_count(); j++) {
+                    ptmp = X509_PURPOSE_get0(j);
+                    purpose_print(out, x, ptmp);
+                }
+            } else if (modulus == i) {
+                EVP_PKEY *pkey;
+
+                pkey = X509_get0_pubkey(x);
+                if (pkey == NULL) {
+                    BIO_printf(bio_err, "Modulus=unavailable\n");
+                    ERR_print_errors(bio_err);
+                    goto end;
+                }
+                BIO_printf(out, "Modulus=");
+#ifndef OPENSSL_NO_RSA
+                if (EVP_PKEY_id(pkey) == EVP_PKEY_RSA) {
+                    const BIGNUM *n;
+                    RSA_get0_key(EVP_PKEY_get0_RSA(pkey), &n, NULL, NULL);
+                    BN_print(out, n);
+                } else
+#endif
+#ifndef OPENSSL_NO_DSA
+                if (EVP_PKEY_id(pkey) == EVP_PKEY_DSA) {
+                    const BIGNUM *dsapub = NULL;
+                    DSA_get0_key(EVP_PKEY_get0_DSA(pkey), &dsapub, NULL);
+                    BN_print(out, dsapub);
+                } else
+#endif
+                {
+                    BIO_printf(out, "Wrong Algorithm type");
+                }
+                BIO_printf(out, "\n");
+            } else if (pubkey == i) {
+                EVP_PKEY *pkey;
+
+                pkey = X509_get0_pubkey(x);
+                if (pkey == NULL) {
+                    BIO_printf(bio_err, "Error getting public key\n");
+                    ERR_print_errors(bio_err);
+                    goto end;
+                }
+                PEM_write_bio_PUBKEY(out, pkey);
+            } else if (C == i) {
+                unsigned char *d;
+                char *m;
+                int len;
+
+                print_name(out, "/*\n"
+                                " * Subject: ", X509_get_subject_name(x), get_nameopt());
+                print_name(out, " * Issuer:  ", X509_get_issuer_name(x), get_nameopt());
+                BIO_puts(out, " */\n");
+
+                len = i2d_X509(x, NULL);
+                m = app_malloc(len, "x509 name buffer");
+                d = (unsigned char *)m;
+                len = i2d_X509_NAME(X509_get_subject_name(x), &d);
+                print_array(out, "the_subject_name", len, (unsigned char *)m);
+                d = (unsigned char *)m;
+                len = i2d_X509_PUBKEY(X509_get_X509_PUBKEY(x), &d);
+                print_array(out, "the_public_key", len, (unsigned char *)m);
+                d = (unsigned char *)m;
+                len = i2d_X509(x, &d);
+                print_array(out, "the_certificate", len, (unsigned char *)m);
+                OPENSSL_free(m);
+            } else if (text == i) {
+                X509_print_ex(out, x, get_nameopt(), certflag);
+            } else if (startdate == i) {
+                BIO_puts(out, "notBefore=");
+                ASN1_TIME_print(out, X509_get0_notBefore(x));
+                BIO_puts(out, "\n");
+            } else if (enddate == i) {
+                BIO_puts(out, "notAfter=");
+                ASN1_TIME_print(out, X509_get0_notAfter(x));
+                BIO_puts(out, "\n");
+            } else if (fingerprint == i) {
+                int j;
+                unsigned int n;
+                unsigned char md[EVP_MAX_MD_SIZE];
+                const EVP_MD *fdig = digest;
+
+                if (fdig == NULL)
+                    fdig = EVP_sha1();
+
+                if (!X509_digest(x, fdig, md, &n)) {
+                    BIO_printf(bio_err, "out of memory\n");
+                    goto end;
+                }
+                BIO_printf(out, "%s Fingerprint=",
+                           OBJ_nid2sn(EVP_MD_type(fdig)));
+                for (j = 0; j < (int)n; j++) {
+                    BIO_printf(out, "%02X%c", md[j], (j + 1 == (int)n)
+                               ? '\n' : ':');
+                }
+            }
+
+            /* should be in the library */
+            else if ((sign_flag == i) && (x509req == 0)) {
+                BIO_printf(bio_err, "Getting Private key\n");
+                if (Upkey == NULL) {
+                    Upkey = load_key(keyfile, keyformat, 0,
+                                     passin, e, "Private key");
+                    if (Upkey == NULL)
+                        goto end;
+                }
+
+                if (!sign(x, Upkey, days, clrext, digest, extconf, extsect, preserve_dates))
+                    goto end;
+            } else if (CA_flag == i) {
+                BIO_printf(bio_err, "Getting CA Private Key\n");
+                if (CAkeyfile != NULL) {
+                    CApkey = load_key(CAkeyfile, CAkeyformat,
+                                      0, passin, e, "CA Private Key");
+                    if (CApkey == NULL)
+                        goto end;
+                }
+
+                if (!x509_certify(ctx, CAfile, digest, x, xca,
+                                  CApkey, sigopts,
+                                  CAserial, CA_createserial, days, clrext,
+                                  extconf, extsect, sno, reqfile, preserve_dates))
+                    goto end;
+            } else if (x509req == i) {
+                EVP_PKEY *pk;
+
+                BIO_printf(bio_err, "Getting request Private Key\n");
+                if (keyfile == NULL) {
+                    BIO_printf(bio_err, "no request key file specified\n");
+                    goto end;
+                } else {
+                    pk = load_key(keyfile, keyformat, 0,
+                                  passin, e, "request key");
+                    if (pk == NULL)
+                        goto end;
+                }
+
+                BIO_printf(bio_err, "Generating certificate request\n");
+
+                rq = X509_to_X509_REQ(x, pk, digest);
+                EVP_PKEY_free(pk);
+                if (rq == NULL) {
+                    ERR_print_errors(bio_err);
+                    goto end;
+                }
+                if (!noout) {
+                    X509_REQ_print_ex(out, rq, get_nameopt(), X509_FLAG_COMPAT);
+                    PEM_write_bio_X509_REQ(out, rq);
+                }
+                noout = 1;
+            } else if (ocspid == i) {
+                X509_ocspid_print(out, x);
+            } else if (ext == i) {
+                print_x509v3_exts(out, x, exts);
+            }
+        }
+    }
+
+    if (checkend) {
+        time_t tcheck = time(NULL) + checkoffset;
+
+        if (X509_cmp_time(X509_get0_notAfter(x), &tcheck) < 0) {
+            BIO_printf(out, "Certificate will expire\n");
+            ret = 1;
+        } else {
+            BIO_printf(out, "Certificate will not expire\n");
+            ret = 0;
+        }
+        goto end;
+    }
+
+    print_cert_checks(out, x, checkhost, checkemail, checkip);
+
+    if (noout || nocert) {
+        ret = 0;
+        goto end;
+    }
+
+    if (outformat == FORMAT_ASN1) {
+        i = i2d_X509_bio(out, x);
+    } else if (outformat == FORMAT_PEM) {
+        if (trustout)
+            i = PEM_write_bio_X509_AUX(out, x);
+        else
+            i = PEM_write_bio_X509(out, x);
+    } else {
+        BIO_printf(bio_err, "bad output format specified for outfile\n");
+        goto end;
+    }
+    if (!i) {
+        BIO_printf(bio_err, "unable to write certificate\n");
+        ERR_print_errors(bio_err);
+        goto end;
+    }
+    ret = 0;
+ end:
+    NCONF_free(extconf);
+    BIO_free_all(out);
+    X509_STORE_free(ctx);
+    X509_REQ_free(req);
+    X509_free(x);
+    X509_free(xca);
+    EVP_PKEY_free(Upkey);
+    EVP_PKEY_free(CApkey);
+    EVP_PKEY_free(fkey);
+    sk_OPENSSL_STRING_free(sigopts);
+    X509_REQ_free(rq);
+    ASN1_INTEGER_free(sno);
+    sk_ASN1_OBJECT_pop_free(trust, ASN1_OBJECT_free);
+    sk_ASN1_OBJECT_pop_free(reject, ASN1_OBJECT_free);
+    ASN1_OBJECT_free(objtmp);
+    release_engine(e);
+    OPENSSL_free(passin);
+    return ret;
+}
+
+static ASN1_INTEGER *x509_load_serial(const char *CAfile,
+                                      const char *serialfile, int create)
+{
+    char *buf = NULL;
+    ASN1_INTEGER *bs = NULL;
+    BIGNUM *serial = NULL;
+
+    if (serialfile == NULL) {
+        const char *p = strrchr(CAfile, '.');
+        size_t len = p != NULL ? (size_t)(p - CAfile) : strlen(CAfile);
+
+        buf = app_malloc(len + sizeof(POSTFIX), "serial# buffer");
+        memcpy(buf, CAfile, len);
+        memcpy(buf + len, POSTFIX, sizeof(POSTFIX));
+        serialfile = buf;
+    }
+
+    serial = load_serial(serialfile, create, NULL);
+    if (serial == NULL)
+        goto end;
+
+    if (!BN_add_word(serial, 1)) {
+        BIO_printf(bio_err, "add_word failure\n");
+        goto end;
+    }
+
+    if (!save_serial(serialfile, NULL, serial, &bs))
+        goto end;
+
+ end:
+    OPENSSL_free(buf);
+    BN_free(serial);
+    return bs;
+}
+
+static int x509_certify(X509_STORE *ctx, const char *CAfile, const EVP_MD *digest,
+                        X509 *x, X509 *xca, EVP_PKEY *pkey,
+                        STACK_OF(OPENSSL_STRING) *sigopts,
+                        const char *serialfile, int create,
+                        int days, int clrext, CONF *conf, const char *section,
+                        ASN1_INTEGER *sno, int reqfile, int preserve_dates)
+{
+    int ret = 0;
+    ASN1_INTEGER *bs = NULL;
+    X509_STORE_CTX *xsc = NULL;
+    EVP_PKEY *upkey;
+
+    upkey = X509_get0_pubkey(xca);
+    if (upkey == NULL) {
+        BIO_printf(bio_err, "Error obtaining CA X509 public key\n");
+        goto end;
+    }
+    EVP_PKEY_copy_parameters(upkey, pkey);
+
+    xsc = X509_STORE_CTX_new();
+    if (xsc == NULL || !X509_STORE_CTX_init(xsc, ctx, x, NULL)) {
+        BIO_printf(bio_err, "Error initialising X509 store\n");
+        goto end;
+    }
+    if (sno)
+        bs = sno;
+    else if ((bs = x509_load_serial(CAfile, serialfile, create)) == NULL)
+        goto end;
+
+    /*
+     * NOTE: this certificate can/should be self signed, unless it was a
+     * certificate request in which case it is not.
+     */
+    X509_STORE_CTX_set_cert(xsc, x);
+    X509_STORE_CTX_set_flags(xsc, X509_V_FLAG_CHECK_SS_SIGNATURE);
+    if (!reqfile && X509_verify_cert(xsc) <= 0)
+        goto end;
+
+    if (!X509_check_private_key(xca, pkey)) {
+        BIO_printf(bio_err,
+                   "CA certificate and CA private key do not match\n");
+        goto end;
+    }
+
+    if (!X509_set_issuer_name(x, X509_get_subject_name(xca)))
+        goto end;
+    if (!X509_set_serialNumber(x, bs))
+        goto end;
+
+    if (!preserve_dates && !set_cert_times(x, NULL, NULL, days))
+        goto end;
+
+    if (clrext) {
+        while (X509_get_ext_count(x) > 0)
+            X509_delete_ext(x, 0);
+    }
+
+    if (conf != NULL) {
+        X509V3_CTX ctx2;
+        X509_set_version(x, 2); /* version 3 certificate */
+        X509V3_set_ctx(&ctx2, xca, x, NULL, NULL, 0);
+        X509V3_set_nconf(&ctx2, conf);
+        if (!X509V3_EXT_add_nconf(conf, &ctx2, section, x))
+            goto end;
+    }
+
+    if (!do_X509_sign(x, pkey, digest, sigopts))
+        goto end;
+    ret = 1;
+ end:
+    X509_STORE_CTX_free(xsc);
+    if (!ret)
+        ERR_print_errors(bio_err);
+    if (!sno)
+        ASN1_INTEGER_free(bs);
+    return ret;
+}
+
+static int callb(int ok, X509_STORE_CTX *ctx)
+{
+    int err;
+    X509 *err_cert;
+
+    /*
+     * it is ok to use a self signed certificate This case will catch both
+     * the initial ok == 0 and the final ok == 1 calls to this function
+     */
+    err = X509_STORE_CTX_get_error(ctx);
+    if (err == X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT)
+        return 1;
+
+    /*
+     * BAD we should have gotten an error.  Normally if everything worked
+     * X509_STORE_CTX_get_error(ctx) will still be set to
+     * DEPTH_ZERO_SELF_....
+     */
+    if (ok) {
+        BIO_printf(bio_err,
+                   "error with certificate to be certified - should be self signed\n");
+        return 0;
+    } else {
+        err_cert = X509_STORE_CTX_get_current_cert(ctx);
+        print_name(bio_err, NULL, X509_get_subject_name(err_cert), 0);
+        BIO_printf(bio_err,
+                   "error with certificate - error %d at depth %d\n%s\n", err,
+                   X509_STORE_CTX_get_error_depth(ctx),
+                   X509_verify_cert_error_string(err));
+        return 1;
+    }
+}
+
+/* self sign */
+static int sign(X509 *x, EVP_PKEY *pkey, int days, int clrext,
+                const EVP_MD *digest, CONF *conf, const char *section,
+                int preserve_dates)
+{
+
+    if (!X509_set_issuer_name(x, X509_get_subject_name(x)))
+        goto err;
+    if (!preserve_dates && !set_cert_times(x, NULL, NULL, days))
+        goto err;
+    if (!X509_set_pubkey(x, pkey))
+        goto err;
+    if (clrext) {
+        while (X509_get_ext_count(x) > 0)
+            X509_delete_ext(x, 0);
+    }
+    if (conf != NULL) {
+        X509V3_CTX ctx;
+        X509_set_version(x, 2); /* version 3 certificate */
+        X509V3_set_ctx(&ctx, x, x, NULL, NULL, 0);
+        X509V3_set_nconf(&ctx, conf);
+        if (!X509V3_EXT_add_nconf(conf, &ctx, section, x))
+            goto err;
+    }
+    if (!X509_sign(x, pkey, digest))
+        goto err;
+    return 1;
+ err:
+    ERR_print_errors(bio_err);
+    return 0;
+}
+
+static int purpose_print(BIO *bio, X509 *cert, X509_PURPOSE *pt)
+{
+    int id, i, idret;
+    const char *pname;
+    id = X509_PURPOSE_get_id(pt);
+    pname = X509_PURPOSE_get0_name(pt);
+    for (i = 0; i < 2; i++) {
+        idret = X509_check_purpose(cert, id, i);
+        BIO_printf(bio, "%s%s : ", pname, i ? " CA" : "");
+        if (idret == 1)
+            BIO_printf(bio, "Yes\n");
+        else if (idret == 0)
+            BIO_printf(bio, "No\n");
+        else
+            BIO_printf(bio, "Yes (WARNING code=%d)\n", idret);
+    }
+    return 1;
+}
+
+static int parse_ext_names(char *names, const char **result)
+{
+    char *p, *q;
+    int cnt = 0, len = 0;
+
+    p = q = names;
+    len = strlen(names);
+
+    while (q - names <= len) {
+        if (*q != ',' && *q != '\0') {
+            q++;
+            continue;
+        }
+        if (p != q) {
+            /* found */
+            if (result != NULL) {
+                result[cnt] = p;
+                *q = '\0';
+            }
+            cnt++;
+        }
+        p = ++q;
+    }
+
+    return cnt;
+}
+
+static int print_x509v3_exts(BIO *bio, X509 *x, const char *ext_names)
+{
+    const STACK_OF(X509_EXTENSION) *exts = NULL;
+    STACK_OF(X509_EXTENSION) *exts2 = NULL;
+    X509_EXTENSION *ext = NULL;
+    ASN1_OBJECT *obj;
+    int i, j, ret = 0, num, nn = 0;
+    const char *sn, **names = NULL;
+    char *tmp_ext_names = NULL;
+
+    exts = X509_get0_extensions(x);
+    if ((num = sk_X509_EXTENSION_num(exts)) <= 0) {
+        BIO_printf(bio, "No extensions in certificate\n");
+        ret = 1;
+        goto end;
+    }
+
+    /* parse comma separated ext name string */
+    if ((tmp_ext_names = OPENSSL_strdup(ext_names)) == NULL)
+        goto end;
+    if ((nn = parse_ext_names(tmp_ext_names, NULL)) == 0) {
+        BIO_printf(bio, "Invalid extension names: %s\n", ext_names);
+        goto end;
+    }
+    if ((names = OPENSSL_malloc(sizeof(char *) * nn)) == NULL)
+        goto end;
+    parse_ext_names(tmp_ext_names, names);
+
+    for (i = 0; i < num; i++) {
+        ext = sk_X509_EXTENSION_value(exts, i);
+
+        /* check if this ext is what we want */
+        obj = X509_EXTENSION_get_object(ext);
+        sn = OBJ_nid2sn(OBJ_obj2nid(obj));
+        if (sn == NULL || strcmp(sn, "UNDEF") == 0)
+            continue;
+
+        for (j = 0; j < nn; j++) {
+            if (strcmp(sn, names[j]) == 0) {
+                /* push the extension into a new stack */
+                if (exts2 == NULL
+                    && (exts2 = sk_X509_EXTENSION_new_null()) == NULL)
+                    goto end;
+                if (!sk_X509_EXTENSION_push(exts2, ext))
+                    goto end;
+            }
+        }
+    }
+
+    if (!sk_X509_EXTENSION_num(exts2)) {
+        BIO_printf(bio, "No extensions matched with %s\n", ext_names);
+        ret = 1;
+        goto end;
+    }
+
+    ret = X509V3_extensions_print(bio, NULL, exts2, 0, 0);
+ end:
+    sk_X509_EXTENSION_free(exts2);
+    OPENSSL_free(names);
+    OPENSSL_free(tmp_ext_names);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/appveyor.yml b/trunk/3rdparty/openssl-1.1-fit/appveyor.yml
new file mode 100644
index 000000000..24966c0fa
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/appveyor.yml
@@ -0,0 +1,66 @@
+platform:
+    - x64
+    - x86
+
+environment:
+    fast_finish: true
+    matrix:
+        - VSVER: 14
+
+configuration:
+    - shared
+    - plain
+
+before_build:
+    - ps: >-
+        If ($env:Platform -Match "x86") {
+            $env:VCVARS_PLATFORM="x86"
+            $env:TARGET="VC-WIN32 no-asm"
+        } Else {
+            $env:VCVARS_PLATFORM="amd64"
+            $env:TARGET="VC-WIN64A-masm"
+        }
+    - ps: >-
+        If ($env:Configuration -Match "shared") {
+            $env:SHARED="no-makedepend"
+        } Else {
+            $env:SHARED="no-shared no-makedepend"
+        }
+    - ps: $env:VSCOMNTOOLS=(Get-Content ("env:VS" + "$env:VSVER" + "0COMNTOOLS"))
+    - call "%VSCOMNTOOLS%\..\..\VC\vcvarsall.bat" %VCVARS_PLATFORM%
+    - mkdir _build
+    - cd _build
+    - perl ..\Configure %TARGET% %SHARED%
+    - perl configdata.pm --dump
+    - cd ..
+    - ps: >-
+        if (-not $env:APPVEYOR_PULL_REQUEST_NUMBER`
+            -or (&git log -2 | Select-String "\[extended tests\]") ) {
+            $env:EXTENDED_TESTS="yes"
+        }
+
+build_script:
+    - cd _build
+    - ps: >-
+        If ($env:Configuration -Match "shared" -or $env:EXTENDED_TESTS) {
+            cmd /c "nmake build_all_generated 2>&1"
+            cmd /c "nmake PERL=no-perl 2>&1"
+        }
+    - cd ..
+
+test_script:
+    - cd _build
+    - ps: >-
+        If ($env:Configuration -Match "shared" -or $env:EXTENDED_TESTS) {
+            if ($env:EXTENDED_TESTS) {
+                cmd /c "nmake test V=1 2>&1"
+            } Else {
+                cmd /c "nmake test V=1 TESTS=-test_fuzz 2>&1"
+            }
+        }
+    - ps: >-
+        if ($env:EXTENDED_TESTS) {
+            mkdir ..\_install
+            cmd /c "nmake install DESTDIR=..\_install 2>&1"
+        }
+    - cd ..
diff --git a/trunk/3rdparty/openssl-1.1-fit/build.info b/trunk/3rdparty/openssl-1.1-fit/build.info
new file mode 100644
index 000000000..3dda4e89b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/build.info
@@ -0,0 +1,103 @@
+{-
+     our $sover = $config{shlib_version_number};
+     our $sover_filename = $sover;
+     $sover_filename =~ s|\.|_|g
+         if $config{target} =~ /^mingw/ || $config{target} =~ /^VC-/;
+     $sover_filename =
+         sprintf "%02d%02d", split m|\.|, $config{shlib_version_number}
+         if $config{target} =~ /^vms/;
+     "";
+-}
+LIBS=libcrypto libssl
+INCLUDE[libcrypto]=. crypto/include include
+INCLUDE[libssl]=. include
+DEPEND[libssl]=libcrypto
+
+# Empty DEPEND "indices" means the dependencies are expected to be built
+# unconditionally before anything else.
+DEPEND[]=include/openssl/opensslconf.h crypto/include/internal/bn_conf.h \
+         crypto/include/internal/dso_conf.h
+DEPEND[include/openssl/opensslconf.h]=configdata.pm
+GENERATE[include/openssl/opensslconf.h]=include/openssl/opensslconf.h.in
+DEPEND[crypto/include/internal/bn_conf.h]=configdata.pm
+GENERATE[crypto/include/internal/bn_conf.h]=crypto/include/internal/bn_conf.h.in
+DEPEND[crypto/include/internal/dso_conf.h]=configdata.pm
+GENERATE[crypto/include/internal/dso_conf.h]=crypto/include/internal/dso_conf.h.in
+
+IF[{- defined $target{shared_defflag} -}]
+  IF[{- $config{target} =~ /^mingw/ -}]
+    GENERATE[libcrypto.def]=util/mkdef.pl crypto 32
+    DEPEND[libcrypto.def]=util/libcrypto.num
+    GENERATE[libssl.def]=util/mkdef.pl ssl 32
+    DEPEND[libssl.def]=util/libssl.num
+
+    SHARED_SOURCE[libcrypto]=libcrypto.def
+    SHARED_SOURCE[libssl]=libssl.def
+  ELSIF[{- $config{target} =~ /^aix/ -}]
+    GENERATE[libcrypto.map]=util/mkdef.pl crypto aix
+    DEPEND[libcrypto.map]=util/libcrypto.num
+    GENERATE[libssl.map]=util/mkdef.pl ssl aix
+    DEPEND[libssl.map]=util/libssl.num
+
+    SHARED_SOURCE[libcrypto]=libcrypto.map
+    SHARED_SOURCE[libssl]=libssl.map
+  ELSE
+    GENERATE[libcrypto.map]=util/mkdef.pl crypto linux
+    DEPEND[libcrypto.map]=util/libcrypto.num
+    GENERATE[libssl.map]=util/mkdef.pl ssl linux
+    DEPEND[libssl.map]=util/libssl.num
+
+    SHARED_SOURCE[libcrypto]=libcrypto.map
+    SHARED_SOURCE[libssl]=libssl.map
+  ENDIF
+ENDIF
+# VMS and VC don't have parametrised .def / .symvec generation, so they get
+# special treatment, since we know they do use these files
+IF[{- $config{target} =~ /^VC-/ -}]
+  GENERATE[libcrypto.def]=util/mkdef.pl crypto 32
+  DEPEND[libcrypto.def]=util/libcrypto.num
+  GENERATE[libssl.def]=util/mkdef.pl ssl 32
+  DEPEND[libssl.def]=util/libssl.num
+
+  SHARED_SOURCE[libcrypto]=libcrypto.def
+  SHARED_SOURCE[libssl]=libssl.def
+ELSIF[{- $config{target} =~ /^vms/ -}]
+  GENERATE[libcrypto.opt]=util/mkdef.pl crypto "VMS"
+  DEPEND[libcrypto.opt]=util/libcrypto.num
+  GENERATE[libssl.opt]=util/mkdef.pl ssl "VMS"
+  DEPEND[libssl.opt]=util/libssl.num
+
+  SHARED_SOURCE[libcrypto]=libcrypto.opt
+  SHARED_SOURCE[libssl]=libssl.opt
+ENDIF
+
+IF[{- $config{target} =~ /^(?:Cygwin|mingw|VC-)/ -}]
+  GENERATE[libcrypto.rc]=util/mkrc.pl libcrypto
+  GENERATE[libssl.rc]=util/mkrc.pl libssl
+
+  SHARED_SOURCE[libcrypto]=libcrypto.rc
+  SHARED_SOURCE[libssl]=libssl.rc
+ENDIF
+
+IF[{- $config{target} =~ /^Cygwin/ -}]
+ SHARED_NAME[libcrypto]=cygcrypto-{- $sover_filename -}
+ SHARED_NAME[libssl]=cygssl-{- $sover_filename -}
+ELSIF[{- $config{target} =~ /^mingw/ -}]
+ SHARED_NAME[libcrypto]=libcrypto-{- $sover_filename -}{- $config{target} eq "mingw64" ? "-x64" : "" -}
+ SHARED_NAME[libssl]=libssl-{- $sover_filename -}{- $config{target} eq "mingw64" ? "-x64" : "" -}
+ELSIF[{- $config{target} =~ /^VC-/ -}]
+ SHARED_NAME[libcrypto]=libcrypto-{- $sover_filename -}{- $target{multilib} -}
+ SHARED_NAME[libssl]=libssl-{- $sover_filename -}{- $target{multilib} -}
+ENDIF
+
+# VMS has a cultural standard where all libraries are prefixed.
+# For OpenSSL, the choice is 'ossl$' (this prefix was claimed in a
+# conversation with VSI, Tuesday January 26 2016)
+# Also, it seems it's usual to have the pointer size the libraries
+# were built for as part of the name.
+IF[{- $config{target} =~ /^vms/ -}]
+ RENAME[libcrypto]=ossl$libcrypto{- $target{pointer_size} -}
+ RENAME[libssl]=ossl$libssl{- $target{pointer_size} -}
+ SHARED_NAME[libcrypto]=ossl$libcrypto{- $sover_filename -}_shr{- $target{pointer_size} -}
+ SHARED_NAME[libssl]=ossl$libssl{- $sover_filename -}_shr{- $target{pointer_size} -}
+ENDIF
diff --git a/trunk/3rdparty/openssl-1.1-fit/config b/trunk/3rdparty/openssl-1.1-fit/config
new file mode 100755
index 000000000..d0e31b651
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/config
@@ -0,0 +1,946 @@
+#!/bin/sh
+# Copyright 1998-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# OpenSSL config: determine the operating system and run ./Configure
+# Derived from minarch and GuessOS from Apache.
+#
+# Do "config -h" for usage information.
+SUFFIX=""
+DRYRUN="false"
+VERBOSE="false"
+EXE=""
+THERE=`dirname $0`
+
+# pick up any command line args to config
+for i
+do
+case "$i" in
+-d*) options=$options" --debug";;
+-t*) DRYRUN="true" VERBOSE="true";;
+-v*) VERBOSE="true";;
+-h*) DRYRUN="true"; cat <<EOF
+Usage: config [options]
+ -d	Build with debugging when possible.
+ -t	Test mode, do not run the Configure perl script.
+ -v	Verbose mode, show the exact Configure call that is being made.
+ -h	This help.
+
+Any other text will be passed to the Configure perl script.
+See INSTALL for instructions.
+
+EOF
+;;
+*)  i=`echo "$i" | sed -e "s|'|'\\\\\\''|g"`
+    options="$options '$i'" ;;
+esac
+done
+
+# Environment that's being passed to Configure
+__CNF_CPPDEFINES=
+__CNF_CPPINCLUDES=
+__CNF_CPPFLAGS=
+__CNF_CFLAGS=
+__CNF_CXXFLAGS=
+__CNF_LDFLAGS=
+__CNF_LDLIBS=
+
+# First get uname entries that we use below
+
+[ "$MACHINE" ] || MACHINE=`(uname -m) 2>/dev/null` || MACHINE="unknown"
+[ "$RELEASE" ] || RELEASE=`(uname -r) 2>/dev/null` || RELEASE="unknown"
+[ "$SYSTEM" ] || SYSTEM=`(uname -s) 2>/dev/null`  || SYSTEM="unknown"
+[ "$BUILD" ] || VERSION=`(uname -v) 2>/dev/null` || VERSION="unknown"
+
+
+# Now test for ISC and SCO, since it is has a braindamaged uname.
+#
+# We need to work around FreeBSD 1.1.5.1
+(
+XREL=`uname -X 2>/dev/null | grep "^Release" | awk '{print $3}'`
+if [ "x$XREL" != "x" ]; then
+    if [ -f /etc/kconfig ]; then
+	case "$XREL" in
+	    4.0|4.1)
+		    echo "${MACHINE}-whatever-isc4"; exit 0
+		;;
+	esac
+    else
+	case "$XREL" in
+	    3.2v4.2)
+		echo "whatever-whatever-sco3"; exit 0
+		;;
+	    3.2v5.0*)
+		echo "whatever-whatever-sco5"; exit 0
+		;;
+	    4.2MP)
+		case "x${VERSION}" in
+		    x2.0*) echo "whatever-whatever-unixware20"; exit 0 ;;
+		    x2.1*) echo "whatever-whatever-unixware21"; exit 0 ;;
+		    x2*)   echo "whatever-whatever-unixware2";  exit 0 ;;
+		esac
+		;;
+	    4.2)
+		echo "whatever-whatever-unixware1"; exit 0
+		;;
+	    5*)
+		case "x${VERSION}" in
+		    # We hardcode i586 in place of ${MACHINE} for the
+		    # following reason. The catch is that even though Pentium
+		    # is minimum requirement for platforms in question,
+		    # ${MACHINE} gets always assigned to i386. Now, problem
+		    # with i386 is that it makes ./config pass 386 to
+		    # ./Configure, which in turn makes make generate
+		    # inefficient SHA-1 (for this moment) code.
+		    x[678]*)  echo "i586-sco-unixware7"; exit 0 ;;
+		esac
+		;;
+	esac
+    fi
+fi
+# Now we simply scan though... In most cases, the SYSTEM info is enough
+#
+case "${SYSTEM}:${RELEASE}:${VERSION}:${MACHINE}" in
+    A/UX:*)
+	echo "m68k-apple-aux3"; exit 0
+	;;
+
+    AIX:[3-9]:4:*)
+	echo "${MACHINE}-ibm-aix"; exit 0
+	;;
+
+    AIX:*:[5-9]:*)
+	echo "${MACHINE}-ibm-aix"; exit 0
+	;;
+
+    AIX:*)
+	echo "${MACHINE}-ibm-aix3"; exit 0
+	;;
+
+    HI-UX:*)
+	echo "${MACHINE}-hi-hiux"; exit 0
+	;;
+
+    HP-UX:*)
+	HPUXVER=`echo ${RELEASE}|sed -e 's/[^.]*.[0B]*//'`
+	case "$HPUXVER" in
+	    1[0-9].*)	# HPUX 10 and 11 targets are unified
+		echo "${MACHINE}-hp-hpux1x"; exit 0
+		;;
+	    *)
+		echo "${MACHINE}-hp-hpux"; exit 0
+		;;
+	esac
+	;;
+
+    IRIX:6.*)
+	echo "mips3-sgi-irix"; exit 0
+	;;
+
+    IRIX64:*)
+	echo "mips4-sgi-irix64"; exit 0
+	;;
+
+    Linux:[2-9].*)
+	echo "${MACHINE}-whatever-linux2"; exit 0
+	;;
+
+    Linux:1.*)
+	echo "${MACHINE}-whatever-linux1"; exit 0
+	;;
+
+    GNU*)
+	echo "hurd-x86"; exit 0;
+	;;
+
+    LynxOS:*)
+	echo "${MACHINE}-lynx-lynxos"; exit 0
+	;;
+
+    BSD/OS:4.*)  # BSD/OS always says 386
+	echo "i486-whatever-bsdi4"; exit 0
+	;;
+
+    BSD/386:*:*:*486*|BSD/OS:*:*:*:*486*)
+        case `/sbin/sysctl -n hw.model` in
+	    Pentium*)
+                echo "i586-whatever-bsdi"; exit 0
+                ;;
+            *)
+                echo "i386-whatever-bsdi"; exit 0
+                ;;
+            esac;
+	;;
+
+    BSD/386:*|BSD/OS:*)
+	echo "${MACHINE}-whatever-bsdi"; exit 0
+	;;
+
+    FreeBSD:*:*:*386*)
+        VERS=`echo ${RELEASE} | sed -e 's/[-(].*//'`
+        MACH=`sysctl -n hw.model`
+        ARCH='whatever'
+        case ${MACH} in
+           *386*       ) MACH="i386"     ;;
+           *486*       ) MACH="i486"     ;;
+           Pentium\ II*) MACH="i686"     ;;
+           Pentium*    ) MACH="i586"     ;;
+           *           ) MACH="$MACHINE" ;;
+        esac
+        case ${MACH} in
+           i[0-9]86 ) ARCH="pc" ;;
+        esac
+        echo "${MACH}-${ARCH}-freebsd${VERS}"; exit 0
+        ;;
+
+    DragonFly:*)
+	echo "${MACHINE}-whatever-dragonfly"; exit 0
+	;;
+
+    FreeBSD:*)
+	echo "${MACHINE}-whatever-freebsd"; exit 0
+	;;
+
+    Haiku:*)
+	echo "${MACHINE}-whatever-haiku"; exit 0
+	;;
+
+    NetBSD:*:*:*386*)
+        echo "`(/usr/sbin/sysctl -n hw.model || /sbin/sysctl -n hw.model) | sed 's,.*\(.\)86-class.*,i\186,'`-whatever-netbsd"; exit 0
+	;;
+
+    NetBSD:*)
+	echo "${MACHINE}-whatever-netbsd"; exit 0
+	;;
+
+    OpenBSD:*)
+	echo "${MACHINE}-whatever-openbsd"; exit 0
+	;;
+
+    OpenUNIX:*)
+	echo "${MACHINE}-unknown-OpenUNIX${VERSION}"; exit 0
+	;;
+
+    OSF1:*:*:*alpha*)
+	OSFMAJOR=`echo ${RELEASE}| sed -e 's/^V\([0-9]*\)\..*$/\1/'`
+	case "$OSFMAJOR" in
+	    4|5)
+		echo "${MACHINE}-dec-tru64"; exit 0
+		;;
+	    1|2|3)
+		echo "${MACHINE}-dec-osf"; exit 0
+		;;
+	    *)
+		echo "${MACHINE}-dec-osf"; exit 0
+		;;
+	esac
+	;;
+
+    Paragon*:*:*:*)
+	echo "i860-intel-osf1"; exit 0
+	;;
+
+    Rhapsody:*)
+	echo "ppc-apple-rhapsody"; exit 0
+	;;
+
+    Darwin:*)
+	case "$MACHINE" in
+	    Power*)
+		echo "ppc-apple-darwin${VERSION}"
+		;;
+	    x86_64)
+		echo "x86_64-apple-darwin${VERSION}"
+		;;
+	    *)
+		echo "i686-apple-darwin${VERSION}"
+		;;
+	esac
+	exit 0
+	;;
+
+    SunOS:5.*)
+	echo "${MACHINE}-whatever-solaris2"; exit 0
+	;;
+
+    SunOS:*)
+	echo "${MACHINE}-sun-sunos4"; exit 0
+	;;
+
+    UNIX_System_V:4.*:*)
+	echo "${MACHINE}-whatever-sysv4"; exit 0
+	;;
+
+    VOS:*:*:i786)
+     echo "i386-stratus-vos"; exit 0
+     ;;
+
+    VOS:*:*:*)
+     echo "hppa1.1-stratus-vos"; exit 0
+     ;;
+
+    *:4*:R4*:m88k)
+	echo "${MACHINE}-whatever-sysv4"; exit 0
+	;;
+
+    DYNIX/ptx:4*:*)
+	echo "${MACHINE}-whatever-sysv4"; exit 0
+	;;
+
+    *:4.0:3.0:3[34]?? | *:4.0:3.0:3[34]??,*)
+	echo "i486-ncr-sysv4"; exit 0
+	;;
+
+    ULTRIX:*)
+	echo "${MACHINE}-unknown-ultrix"; exit 0
+	;;
+
+    POSIX-BC*)
+	echo "${MACHINE}-siemens-sysv4"; exit 0   # Here, $MACHINE == "BS2000"
+	;;
+
+    machten:*)
+       echo "${MACHINE}-tenon-${SYSTEM}"; exit 0;
+       ;;
+
+    library:*)
+	echo "${MACHINE}-ncr-sysv4"; exit 0
+	;;
+
+    ConvexOS:*:11.0:*)
+	echo "${MACHINE}-v11-${SYSTEM}"; exit 0;
+	;;
+
+    # The following combinations are supported
+    # MINGW64* on x86_64 => mingw64
+    # MINGW32* on x86_64 => mingw
+    # MINGW32* on i?86 => mingw
+    #
+    # MINGW64* on i?86 isn't expected to work...
+    MINGW64*:*:*:x86_64)
+	echo "${MACHINE}-whatever-mingw64"; exit 0;
+	;;
+    MINGW*)
+	echo "${MACHINE}-whatever-mingw"; exit 0;
+	;;
+    CYGWIN*)
+	echo "${MACHINE}-pc-cygwin"; exit 0
+	;;
+
+    vxworks*)
+       echo "${MACHINE}-whatever-vxworks"; exit 0;
+       ;;
+esac
+
+#
+# Ugg. These are all we can determine by what we know about
+# the output of uname. Be more creative:
+#
+
+# Do the Apollo stuff first. Here, we just simply assume
+# that the existence of the /usr/apollo directory is proof
+# enough
+if [ -d /usr/apollo ]; then
+    echo "whatever-apollo-whatever"
+    exit 0
+fi
+
+# Now NeXT
+ISNEXT=`hostinfo 2>/dev/null`
+case "$ISNEXT" in
+    *'NeXT Mach 3.3'*)
+	echo "whatever-next-nextstep3.3"; exit 0
+	;;
+    *NeXT*)
+	echo "whatever-next-nextstep"; exit 0
+	;;
+esac
+
+# At this point we gone through all the one's
+# we know of: Punt
+
+echo "${MACHINE}-whatever-${SYSTEM}"
+exit 0
+) 2>/dev/null | (
+
+# ---------------------------------------------------------------------------
+# this is where the translation occurs into SSLeay terms
+# ---------------------------------------------------------------------------
+
+# Only set CC if not supplied already
+if [ -z "$CROSS_COMPILE$CC" ]; then
+  GCCVER=`sh -c "gcc -dumpversion" 2>/dev/null`
+  if [ "$GCCVER" != "" ]; then
+    # then strip off whatever prefix egcs prepends the number with...
+    # Hopefully, this will work for any future prefixes as well.
+    GCCVER=`echo $GCCVER | LC_ALL=C sed 's/^[a-zA-Z]*\-//'`
+    # Since gcc 3.1 gcc --version behaviour has changed.  gcc -dumpversion
+    # does give us what we want though, so we use that.  We just just the
+    # major and minor version numbers.
+    # peak single digit before and after first dot, e.g. 2.95.1 gives 29
+    GCCVER=`echo $GCCVER | sed 's/\([0-9]\)\.\([0-9]\).*/\1\2/'`
+    CC=gcc
+  else
+    CC=cc
+  fi
+fi
+GCCVER=${GCCVER:-0}
+if [ "$SYSTEM" = "HP-UX" ];then
+  # By default gcc is a ILP32 compiler (with long long == 64).
+  GCC_BITS="32"
+  if [ $GCCVER -ge 30 ]; then
+    # PA64 support only came in with gcc 3.0.x.
+    # We check if the preprocessor symbol __LP64__ is defined...
+    if echo "__LP64__" | gcc -v -E -x c - 2>/dev/null | grep "^__LP64__" 2>&1 > /dev/null; then
+      : # __LP64__ has slipped through, it therefore is not defined
+    else
+      GCC_BITS="64"
+    fi
+  fi
+fi
+if [ "$SYSTEM" = "SunOS" ]; then
+  if [ $GCCVER -ge 30 ]; then
+    # 64-bit ABI isn't officially supported in gcc 3.0, but it appears
+    # to be working, at the very least 'make test' passes...
+    if gcc -v -E -x c /dev/null 2>&1 | grep __arch64__ > /dev/null; then
+      GCC_ARCH="-m64"
+    else
+      GCC_ARCH="-m32"
+    fi
+  fi
+  # check for WorkShop C, expected output is "cc: blah-blah C x.x"
+  CCVER=`(cc -V 2>&1) 2>/dev/null | \
+  	egrep -e '^cc: .* C [0-9]\.[0-9]' | \
+	sed 's/.* C \([0-9]\)\.\([0-9]\).*/\1\2/'`
+  CCVER=${CCVER:-0}
+  if [ $MACHINE != i86pc -a $CCVER -gt 40 ]; then
+    CC=cc	# overrides gcc!!!
+    if [ $CCVER -eq 50 ]; then
+      echo "WARNING! Detected WorkShop C 5.0. Do make sure you have"
+      echo "         patch #107357-01 or later applied."
+      sleep 5
+    fi
+  fi
+fi
+
+if [ "${SYSTEM}" = "AIX" ]; then	# favor vendor cc over gcc
+    (cc) 2>&1 | grep -iv "not found" > /dev/null && CC=cc
+fi
+
+CCVER=${CCVER:-0}
+
+# read the output of the embedded GuessOS
+read GUESSOS
+
+echo Operating system: $GUESSOS
+
+# now map the output into SSLeay terms ... really should hack into the
+# script above so we end up with values in vars but that would take
+# more time that I want to waste at the moment
+case "$GUESSOS" in
+  uClinux*64*)
+    OUT=uClinux-dist64
+	;;
+  uClinux*)
+    OUT=uClinux-dist
+	;;
+  mips3-sgi-irix)
+	OUT="irix-mips3-$CC"
+	;;
+  mips4-sgi-irix64)
+	echo "WARNING! If you wish to build 64-bit library, then you have to"
+	echo "         invoke '$THERE/Configure irix64-mips4-$CC' *manually*."
+	if [ "$DRYRUN" = "false" -a -t 1 ]; then
+	  echo "         You have about 5 seconds to press Ctrl-C to abort."
+	  (trap "stty `stty -g`; exit 0" 2 0; stty -icanon min 0 time 50; read waste) <&1
+	fi
+	OUT="irix-mips3-$CC"
+	;;
+  ppc-apple-rhapsody) OUT="rhapsody-ppc-cc" ;;
+  ppc-apple-darwin*)
+	ISA64=`(sysctl -n hw.optional.64bitops) 2>/dev/null`
+	if [ "$ISA64" = "1" -a -z "$KERNEL_BITS" ]; then
+	    echo "WARNING! If you wish to build 64-bit library, then you have to"
+	    echo "         invoke '$THERE/Configure darwin64-ppc-cc' *manually*."
+	    if [ "$DRYRUN" = "false" -a -t 1 ]; then
+	      echo "         You have about 5 seconds to press Ctrl-C to abort."
+	      (trap "stty `stty -g`; exit 0" 2 0; stty -icanon min 0 time 50; read waste) <&1
+	    fi
+	fi
+	if [ "$ISA64" = "1" -a "$KERNEL_BITS" = "64" ]; then
+	    OUT="darwin64-ppc-cc"
+	else
+	    OUT="darwin-ppc-cc"
+	fi ;;
+  i?86-apple-darwin*)
+	ISA64=`(sysctl -n hw.optional.x86_64) 2>/dev/null`
+	if [ "$ISA64" = "1" -a -z "$KERNEL_BITS" ]; then
+	    echo "WARNING! If you wish to build 64-bit library, then you have to"
+	    echo "         invoke 'KERNEL_BITS=64 $THERE/config $options'."
+	    if [ "$DRYRUN" = "false" -a -t 1 ]; then
+	      echo "         You have about 5 seconds to press Ctrl-C to abort."
+	      (trap "stty `stty -g`; exit 1" 2; stty -icanon min 0 time 50; read waste; exit 0) <&1 || exit
+	    fi
+	fi
+	if [ "$ISA64" = "1" -a "$KERNEL_BITS" = "64" ]; then
+	    OUT="darwin64-x86_64-cc"
+	else
+	    OUT="darwin-i386-cc"
+	fi ;;
+  x86_64-apple-darwin*)
+	if [ "$KERNEL_BITS" = "32" ]; then
+	    OUT="darwin-i386-cc"
+	else
+	    OUT="darwin64-x86_64-cc"
+	fi ;;
+  armv6+7-*-iphoneos)
+	__CNF_CFLAGS="$__CNF_CFLAGS -arch%20armv6 -arch%20armv7"
+	__CNF_CXXFLAGS="$__CNF_CXXFLAGS -arch%20armv6 -arch%20armv7"
+	OUT="iphoneos-cross" ;;
+  *-*-iphoneos)
+	__CNF_CFLAGS="$__CNF_CFLAGS -arch%20${MACHINE}"
+	__CNF_CXXFLAGS="$__CNF_CXXFLAGS -arch%20${MACHINE}"
+	OUT="iphoneos-cross" ;;
+  arm64-*-iphoneos|*-*-ios64)
+	OUT="ios64-cross" ;;
+  alpha-*-linux2)
+        ISA=`awk '/cpu model/{print$4;exit(0);}' /proc/cpuinfo`
+	case ${ISA:-generic} in
+	*[678])	OUT="linux-alpha+bwx-$CC" ;;
+	*)	OUT="linux-alpha-$CC" ;;
+	esac
+	if [ "$CC" = "gcc" ]; then
+	    case ${ISA:-generic} in
+	    EV5|EV45)		__CNF_CFLAGS="$__CNF_CFLAGS -mcpu=ev5"
+				__CNF_CXXFLAGS="$__CNF_CFLAGS -mcpu=ev5";;
+	    EV56|PCA56)		__CNF_CFLAGS="$__CNF_CFLAGS -mcpu=ev56"
+				__CNF_CXXFLAGS="$__CNF_CXXFLAGS -mcpu=ev56";;
+	    *)			__CNF_CFLAGS="$__CNF_CFLAGS -mcpu=ev6"
+				__CNF_CXXFLAGS="$__CNF_CXXFLAGS -mcpu=ev6";;
+	    esac
+	fi
+	;;
+  ppc64-*-linux2)
+	if [ -z "$KERNEL_BITS" ]; then
+	    echo "WARNING! If you wish to build 64-bit library, then you have to"
+	    echo "         invoke '$THERE/Configure linux-ppc64' *manually*."
+	    if [ "$DRYRUN" = "false" -a -t 1 ]; then
+		echo "         You have about 5 seconds to press Ctrl-C to abort."
+		(trap "stty `stty -g`; exit 0" 2 0; stty -icanon min 0 time 50; read waste) <&1
+	    fi
+	fi
+	if [ "$KERNEL_BITS" = "64" ]; then
+	    OUT="linux-ppc64"
+	else
+	    OUT="linux-ppc"
+	    if (echo "__LP64__" | gcc -E -x c - 2>/dev/null | grep "^__LP64__" 2>&1 > /dev/null); then
+		:;
+	    else
+		__CNF_CFLAGS="$__CNF_CFLAGS -m32"
+		__CNF_CXXFLAGS="$__CNF_CXXFLAGS -m32"
+	    fi
+	fi
+	;;
+  ppc64le-*-linux2) OUT="linux-ppc64le" ;;
+  ppc-*-linux2) OUT="linux-ppc" ;;
+  mips64*-*-linux2)
+	echo "WARNING! If you wish to build 64-bit library, then you have to"
+	echo "         invoke '$THERE/Configure linux64-mips64' *manually*."
+	if [ "$DRYRUN" = "false" -a -t 1 ]; then
+	    echo "         You have about 5 seconds to press Ctrl-C to abort."
+	    (trap "stty `stty -g`; exit 0" 2 0; stty -icanon min 0 time 50; read waste) <&1
+	fi
+	OUT="linux-mips64"
+	;;
+  mips*-*-linux2) OUT="linux-mips32" ;;
+  ppc60x-*-vxworks*) OUT="vxworks-ppc60x" ;;
+  ppcgen-*-vxworks*) OUT="vxworks-ppcgen" ;;
+  pentium-*-vxworks*) OUT="vxworks-pentium" ;;
+  simlinux-*-vxworks*) OUT="vxworks-simlinux" ;;
+  mips-*-vxworks*) OUT="vxworks-mips";;
+  ia64-*-linux?) OUT="linux-ia64" ;;
+  sparc64-*-linux2)
+	echo "WARNING! If you *know* that your GNU C supports 64-bit/V9 ABI"
+	echo "         and wish to build 64-bit library, then you have to"
+	echo "         invoke '$THERE/Configure linux64-sparcv9' *manually*."
+	if [ "$DRYRUN" = "false" -a -t 1 ]; then
+	  echo "          You have about 5 seconds to press Ctrl-C to abort."
+	  (trap "stty `stty -g`; exit 0" 2 0; stty -icanon min 0 time 50; read waste) <&1
+	fi
+	OUT="linux-sparcv9" ;;
+  sparc-*-linux2)
+	KARCH=`awk '/^type/{print$3;exit(0);}' /proc/cpuinfo`
+	case ${KARCH:-sun4} in
+	sun4u*)	OUT="linux-sparcv9" ;;
+	sun4m)	OUT="linux-sparcv8" ;;
+	sun4d)	OUT="linux-sparcv8" ;;
+	*)	OUT="linux-generic32";
+		__CNF_CPPFLAGS="$__CNF_CPPFLAGS -DB_ENDIAN" ;;
+	esac ;;
+  parisc*-*-linux2)
+	# 64-bit builds under parisc64 linux are not supported and
+	# compiler is expected to generate 32-bit objects...
+	CPUARCH=`awk '/cpu family/{print substr($5,1,3); exit(0);}' /proc/cpuinfo`
+	CPUSCHEDULE=`awk '/^cpu.[ 	]*: PA/{print substr($3,3); exit(0);}' /proc/cpuinfo`
+
+	# ??TODO ??  Model transformations
+	# 0. CPU Architecture for the 1.1 processor has letter suffixes. We strip that off
+	#    assuming no further arch. identification will ever be used by GCC.
+	# 1. I'm most concerned about whether is a 7300LC is closer to a 7100 versus a 7100LC.
+	# 2. The variant 64-bit processors cause concern should GCC support explicit schedulers
+	#    for these chips in the future.
+	#         PA7300LC -> 7100LC (1.1)
+	#         PA8200   -> 8000   (2.0)
+	#         PA8500   -> 8000   (2.0)
+	#         PA8600   -> 8000   (2.0)
+
+	CPUSCHEDULE=`echo $CPUSCHEDULE|sed -e 's/7300LC/7100LC/' -e 's/8.00/8000/'`
+	# Finish Model transformations
+
+	__CNF_CPPFLAGS="$__CNF_CPPFLAGS -DB_ENDIAN"
+	__CNF_CFLAGS="$__CNF_CFLAGS -mschedule=$CPUSCHEDULE -march=$CPUARCH"
+	__CNF_CXXFLAGS="$__CNF_CXXFLAGS -mschedule=$CPUSCHEDULE -march=$CPUARCH"
+	OUT="linux-generic32" ;;
+  armv[1-3]*-*-linux2) OUT="linux-generic32" ;;
+  armv[7-9]*-*-linux2) OUT="linux-armv4"
+		       __CNF_CFLAGS="$__CNF_CFLAGS -march=armv7-a"
+		       __CNF_CXXFLAGS="$__CNF_CXXFLAGS -march=armv7-a"
+		       ;;
+  arm*-*-linux2) OUT="linux-armv4" ;;
+  aarch64-*-linux2) OUT="linux-aarch64" ;;
+  sh*b-*-linux2) OUT="linux-generic32";
+		 __CNF_CPPFLAGS="$__CNF_CPPFLAGS -DB_ENDIAN" ;;
+  sh*-*-linux2)	 OUT="linux-generic32";
+		 __CNF_CPPFLAGS="$__CNF_CPPFLAGS -DL_ENDIAN" ;;
+  m68k*-*-linux2) OUT="linux-generic32";
+		  __CNF_CPPFLAGS="$__CNF_CPPFLAGS -DB_ENDIAN" ;;
+  s390-*-linux2) OUT="linux-generic32";
+		 __CNF_CPPFLAGS="$__CNF_CPPFLAGS -DB_ENDIAN" ;;
+  s390x-*-linux2)
+	# To be uncommented when glibc bug is fixed, see Configure...
+	#if egrep -e '^features.* highgprs' /proc/cpuinfo >/dev/null ; then
+	#  echo "WARNING! If you wish to build \"highgprs\" 32-bit library, then you"
+	#  echo "         have to invoke './Configure linux32-s390x' *manually*."
+	#  if [ "$DRYRUN" = "false" -a -t -1 ]; then
+	#    echo "         You have about 5 seconds to press Ctrl-C to abort."
+	#    (trap "stty `stty -g`; exit 0" 2 0; stty -icanon min 0 time 50; read waste) <&1
+	#  fi
+	#fi
+	OUT="linux64-s390x"
+	;;
+  x86_64-*-linux?)
+	if $CC -dM -E -x c /dev/null 2>&1 | grep -q ILP32 > /dev/null; then
+	    OUT="linux-x32"
+	else
+	    OUT="linux-x86_64"
+	fi ;;
+  *86-*-linux2)
+        # On machines where the compiler understands -m32, prefer a
+        # config target that uses it
+        if $CC -m32 -E -x c /dev/null > /dev/null 2>&1; then
+            OUT="linux-x86"
+        else
+            OUT="linux-elf"
+        fi ;;
+  *86-*-linux1) OUT="linux-aout" ;;
+  *-*-linux?) OUT="linux-generic32" ;;
+  sun4[uv]*-*-solaris2)
+	OUT="solaris-sparcv9-$CC"
+	ISA64=`(isainfo) 2>/dev/null | grep sparcv9`
+	if [ "$ISA64" != "" -a "$KERNEL_BITS" = "" ]; then
+	    if [ "$CC" = "cc" -a $CCVER -ge 50 ]; then
+		echo "WARNING! If you wish to build 64-bit library, then you have to"
+		echo "         invoke '$THERE/Configure solaris64-sparcv9-cc' *manually*."
+		if [ "$DRYRUN" = "false" -a -t 1 ]; then
+		  echo "         You have about 5 seconds to press Ctrl-C to abort."
+		  (trap "stty `stty -g`; exit 0" 2 0; stty -icanon min 0 time 50; read waste) <&1
+		fi
+	    elif [ "$CC" = "gcc" -a "$GCC_ARCH" = "-m64" ]; then
+		# $GCC_ARCH denotes default ABI chosen by compiler driver
+		# (first one found on the $PATH). I assume that user
+		# expects certain consistency with the rest of his builds
+		# and therefore switch over to 64-bit. <appro>
+		OUT="solaris64-sparcv9-gcc"
+		echo "WARNING! If you wish to build 32-bit library, then you have to"
+		echo "         invoke '$THERE/Configure solaris-sparcv9-gcc' *manually*."
+		if [ "$DRYRUN" = "false" -a -t 1 ]; then
+		  echo "         You have about 5 seconds to press Ctrl-C to abort."
+		  (trap "stty `stty -g`; exit 0" 2 0; stty -icanon min 0 time 50; read waste) <&1
+		fi
+	    elif [ "$GCC_ARCH" = "-m32" ]; then
+		echo "NOTICE! If you *know* that your GNU C supports 64-bit/V9 ABI"
+		echo "        and wish to build 64-bit library, then you have to"
+		echo "        invoke '$THERE/Configure solaris64-sparcv9-gcc' *manually*."
+		if [ "$DRYRUN" = "false" -a -t 1 ]; then
+		  echo "         You have about 5 seconds to press Ctrl-C to abort."
+		  (trap "stty `stty -g`; exit 0" 2 0; stty -icanon min 0 time 50; read waste) <&1
+		fi
+	    fi
+	fi
+	if [ "$ISA64" != "" -a "$KERNEL_BITS" = "64" ]; then
+	    OUT="solaris64-sparcv9-$CC"
+	fi
+	;;
+  sun4m-*-solaris2)	OUT="solaris-sparcv8-$CC" ;;
+  sun4d-*-solaris2)	OUT="solaris-sparcv8-$CC" ;;
+  sun4*-*-solaris2)	OUT="solaris-sparcv7-$CC" ;;
+  *86*-*-solaris2)
+	ISA64=`(isainfo) 2>/dev/null | grep amd64`
+	if [ "$ISA64" != "" -a ${KERNEL_BITS:-64} -eq 64 ]; then
+	    OUT="solaris64-x86_64-$CC"
+	else
+	    OUT="solaris-x86-$CC"
+	    if [ `uname -r | sed -e 's/5\.//'` -lt 10 ]; then
+		options="$options no-sse2"
+	    fi
+	fi
+	;;
+  *-*-sunos4)		OUT="sunos-$CC" ;;
+
+  *86*-*-bsdi4)		OUT="BSD-x86-elf"; options="$options no-sse2";
+			__CNF_LDFLAGS="$__CNF_LDFLAGS -ldl" ;;
+  alpha*-*-*bsd*)	OUT="BSD-generic64";
+			__CNF_CPPFLAGS="$__CNF_CPPFLAGS -DL_ENDIAN" ;;
+  powerpc64-*-*bsd*)	OUT="BSD-generic64";
+			__CNF_CPPFLAGS="$__CNF_CPPFLAGS -DB_ENDIAN" ;;
+  sparc64-*-*bsd*)	OUT="BSD-sparc64" ;;
+  ia64-*-*bsd*)		OUT="BSD-ia64" ;;
+  x86_64-*-dragonfly*)  OUT="BSD-x86_64" ;;
+  amd64-*-*bsd*)	OUT="BSD-x86_64" ;;
+  *86*-*-*bsd*)		# mimic ld behaviour when it's looking for libc...
+			if [ -L /usr/lib/libc.so ]; then	# [Free|Net]BSD
+			    libc=/usr/lib/libc.so
+			else					# OpenBSD
+			    # ld searches for highest libc.so.* and so do we
+			    libc=`(ls /usr/lib/libc.so.* /lib/libc.so.* | tail -1) 2>/dev/null`
+			fi
+			case "`(file -L $libc) 2>/dev/null`" in
+			*ELF*)	OUT="BSD-x86-elf" ;;
+			*)	OUT="BSD-x86"; options="$options no-sse2" ;;
+			esac ;;
+  *-*-*bsd*)		OUT="BSD-generic32" ;;
+
+  x86_64-*-haiku)	OUT="haiku-x86_64" ;;
+  *-*-haiku)		OUT="haiku-x86" ;;
+
+  *-*-osf)		OUT="osf1-alpha-cc" ;;
+  *-*-tru64)		OUT="tru64-alpha-cc" ;;
+  *-*-[Uu]nix[Ww]are7)
+	if [ "$CC" = "gcc" ]; then
+	  OUT="unixware-7-gcc" ; options="$options no-sse2"
+	else
+	  OUT="unixware-7" ; options="$options no-sse2"
+	  __CNF_CPPFLAGS="$__CNF_CPPFLAGS -D__i386__"
+	fi
+	;;
+  *-*-[Uu]nix[Ww]are20*) OUT="unixware-2.0"; options="$options no-sse2 no-sha512" ;;
+  *-*-[Uu]nix[Ww]are21*) OUT="unixware-2.1"; options="$options no-sse2 no-sha512" ;;
+  *-*-vos)
+	options="$options no-threads no-shared no-asm no-dso"
+	EXE=".pm"
+	OUT="vos-$CC" ;;
+  BS2000-siemens-sysv4) OUT="BS2000-OSD" ;;
+  *-hpux1*)
+	if [ $CC = "gcc" -a $GCC_BITS = "64" ]; then
+	    OUT="hpux64-parisc2-gcc"
+	fi
+	[ "$KERNEL_BITS" ] || KERNEL_BITS=`(getconf KERNEL_BITS) 2>/dev/null`
+	KERNEL_BITS=${KERNEL_BITS:-32}
+	CPU_VERSION=`(getconf CPU_VERSION) 2>/dev/null`
+	CPU_VERSION=${CPU_VERSION:-0}
+	# See <sys/unistd.h> for further info on CPU_VERSION.
+	if   [ $CPU_VERSION -ge 768 ]; then	# IA-64 CPU
+	     if [ $KERNEL_BITS -eq 64 -a "$CC" = "cc" ]; then
+	        OUT="hpux64-ia64-cc"
+             else
+	        OUT="hpux-ia64-cc"
+             fi
+	elif [ $CPU_VERSION -ge 532 ]; then	# PA-RISC 2.x CPU
+	     # PA-RISC 2.0 is no longer supported as separate 32-bit
+	     # target. This is compensated for by run-time detection
+	     # in most critical assembly modules and taking advantage
+	     # of 2.0 architecture in PA-RISC 1.1 build.
+	     OUT=${OUT:-"hpux-parisc1_1-${CC}"}
+	     if [ $KERNEL_BITS -eq 64 -a "$CC" = "cc" ]; then
+		echo "WARNING! If you wish to build 64-bit library then you have to"
+		echo "         invoke '$THERE/Configure hpux64-parisc2-cc' *manually*."
+		if [ "$DRYRUN" = "false" -a -t 1 ]; then
+		  echo "         You have about 5 seconds to press Ctrl-C to abort."
+		  (trap "stty `stty -g`; exit 0" 2 0; stty -icanon min 0 time 50; read waste) <&1
+		fi
+	     fi
+	elif [ $CPU_VERSION -ge 528 ]; then	# PA-RISC 1.1+ CPU
+	     OUT="hpux-parisc1_1-${CC}"
+	elif [ $CPU_VERSION -ge 523 ]; then	# PA-RISC 1.0 CPU
+	     OUT="hpux-parisc-${CC}"
+	else					# Motorola(?) CPU
+	     OUT="hpux-$CC"
+	fi
+	__CNF_CPPFLAGS="$__CNF_CPPFLAGS -D_REENTRANT" ;;
+  *-hpux)	OUT="hpux-parisc-$CC" ;;
+  *-aix)
+	[ "$KERNEL_BITS" ] || KERNEL_BITS=`(getconf KERNEL_BITMODE) 2>/dev/null`
+	KERNEL_BITS=${KERNEL_BITS:-32}
+	OBJECT_MODE=${OBJECT_MODE:-32}
+	if [ "$CC" = "gcc" ]; then
+	    OUT="aix-gcc"
+          if [ $OBJECT_MODE -eq 64 ]; then
+            echo 'Your $OBJECT_MODE was found to be set to 64'
+            OUT="aix64-gcc"
+          fi
+	elif [ $OBJECT_MODE -eq 64 ]; then
+	    echo 'Your $OBJECT_MODE was found to be set to 64'
+	    OUT="aix64-cc"
+	else
+	    OUT="aix-cc"
+	    if [ $KERNEL_BITS -eq 64 ]; then
+		echo "WARNING! If you wish to build 64-bit kit, then you have to"
+		echo "         invoke '$THERE/Configure aix64-cc' *manually*."
+		if [ "$DRYRUN" = "false" -a -t 1 ]; then
+		    echo "         You have ~5 seconds to press Ctrl-C to abort."
+		    (trap "stty `stty -g`; exit 0" 2 0; stty -icanon min 0 time 50; read waste) <&1
+		fi
+	    fi
+	fi
+	if (lsattr -E -O -l `lsdev -c processor|awk '{print$1;exit}'` | grep -i powerpc) >/dev/null 2>&1; then
+	    :	# this applies even to Power3 and later, as they return PowerPC_POWER[345]
+	else
+	    options="$options no-asm"
+	fi
+	;;
+  # these are all covered by the catchall below
+  i[3456]86-*-cygwin) OUT="Cygwin-x86" ;;
+  *-*-cygwin) OUT="Cygwin-${MACHINE}" ;;
+  x86-*-android|i?86-*-android) OUT="android-x86" ;;
+  armv[7-9]*-*-android)
+      OUT="android-armeabi"
+      __CNF_CFLAGS="$__CNF_CFLAGS -march=armv7-a"
+      __CNF_CXXFLAGS="$__CNF_CXXFLAGS -march=armv7-a";;
+  arm*-*-android) OUT="android-armeabi" ;;
+  *) OUT=`echo $GUESSOS | awk -F- '{print $3}'`;;
+esac
+
+# NB: This atalla support has been superseded by the ENGINE support
+# That contains its own header and definitions anyway. Support can
+# be enabled or disabled on any supported platform without external
+# headers, eg. by adding the "hw-atalla" switch to ./config or
+# perl Configure
+#
+# See whether we can compile Atalla support
+#if [ -f /usr/include/atasi.h ]
+#then
+#  __CNF_CPPFLAGS="$__CNF_CPPFLAGS -DATALLA"
+#fi
+
+if [ -n "$CONFIG_OPTIONS" ]; then
+  options="$options $CONFIG_OPTIONS"
+fi
+
+# gcc < 2.8 does not support -march=ultrasparc
+if [ "$OUT" = solaris-sparcv9-gcc -a $GCCVER -lt 28 ]
+then
+  echo "WARNING! Falling down to 'solaris-sparcv8-gcc'."
+  echo "         Upgrade to gcc-2.8 or later."
+  sleep 5
+  OUT=solaris-sparcv8-gcc
+fi
+if [ "$OUT" = "linux-sparcv9" -a $GCCVER -lt 28 ]
+then
+  echo "WARNING! Falling down to 'linux-sparcv8'."
+  echo "         Upgrade to gcc-2.8 or later."
+  sleep 5
+  OUT=linux-sparcv8
+fi
+
+case "$GUESSOS" in
+  i386-*) options="$options 386" ;;
+esac
+
+for i in aes aria bf camellia cast des dh dsa ec hmac idea md2 md5 mdc2 rc2 rc4 rc5 ripemd rsa seed sha sm2 sm3 sm4
+do
+  if [ ! -d $THERE/crypto/$i ]
+  then
+    options="$options no-$i"
+  fi
+done
+
+if [ -z "$OUT" ]; then
+  OUT="$CC"
+fi
+
+if [ ".$PERL" = . ] ; then
+	for i in . `echo $PATH | sed 's/:/ /g'`; do
+		if [ -f "$i/perl5$EXE" ] ; then
+			PERL="$i/perl5$EXE"
+			break;
+		fi;
+	done
+fi
+
+if [ ".$PERL" = . ] ; then
+	for i in . `echo $PATH | sed 's/:/ /g'`; do
+		if [ -f "$i/perl$EXE" ] ; then
+			if "$i/perl$EXE" -e 'exit($]<5.0)'; then
+				PERL="$i/perl$EXE"
+				break;
+			fi;
+		fi;
+	done
+fi
+
+if [ ".$PERL" = . ] ; then
+	echo "You need Perl 5."
+	exit 1
+fi
+
+# run Configure to check to see if we need to specify the
+# compiler for the platform ... in which case we add it on
+# the end ... otherwise we leave it off
+
+$PERL $THERE/Configure LIST | grep "$OUT-$CC" > /dev/null
+if [ $? = "0" ]; then
+  OUT="$OUT-$CC"
+fi
+
+OUT="$OUT"
+
+$PERL $THERE/Configure LIST | grep "$OUT" > /dev/null
+if [ $? = "0" ]; then
+  if [ "$VERBOSE" = "true" ]; then
+    echo /usr/bin/env \
+	 __CNF_CPPDEFINES="'$__CNF_CPPDEFINES'" \
+	 __CNF_CPPINCLUDES="'$__CNF_CPPINCLUDES'" \
+	 __CNF_CPPFLAGS="'$__CNF_CPPFLAGS'" \
+	 __CNF_CFLAGS="'$__CNF_CFLAGS'" \
+	 __CNF_CXXFLAGS="'$__CNF_CXXFLAGS'" \
+	 __CNF_LDFLAGS="'$__CNF_LDFLAGS'" \
+	 __CNF_LDLIBS="'$__CNF_LDLIBS'" \
+	 $PERL $THERE/Configure $OUT $options
+  fi
+  if [ "$DRYRUN" = "false" ]; then
+    # eval to make sure quoted options, possibly with spaces inside,
+    # are treated right
+    eval /usr/bin/env \
+	 __CNF_CPPDEFINES="'$__CNF_CPPDEFINES'" \
+	 __CNF_CPPINCLUDES="'$__CNF_CPPINCLUDES'" \
+	 __CNF_CPPFLAGS="'$__CNF_CPPFLAGS'" \
+	 __CNF_CFLAGS="'$__CNF_CFLAGS'" \
+	 __CNF_CXXFLAGS="'$__CNF_CXXFLAGS'" \
+	 __CNF_LDFLAGS="'$__CNF_LDFLAGS'" \
+	 __CNF_LDLIBS="'$__CNF_LDLIBS'" \
+	 $PERL $THERE/Configure $OUT $options
+  fi
+else
+  echo "This system ($OUT) is not supported. See file INSTALL for details."
+  exit 1
+fi
+
+if [ "$OUT" = "darwin64-x86_64-cc" ]; then
+    echo "WARNING! If you wish to build 32-bit libraries, then you have to"
+    echo "         invoke 'KERNEL_BITS=32 $THERE/config $options'."
+fi
+)
diff --git a/trunk/3rdparty/openssl-1.1-fit/config.com b/trunk/3rdparty/openssl-1.1-fit/config.com
new file mode 100644
index 000000000..46ccaa20d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/config.com
@@ -0,0 +1,93 @@
+$	! OpenSSL config: determine the architecture and run Configure
+$	! Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+$	!
+$	! Licensed under the OpenSSL license (the "License").  You may not use
+$	! this file except in compliance with the License.  You can obtain a
+$	! copy in the file LICENSE in the source distribution or at
+$	! https://www.openssl.org/source/license.html
+$	!
+$	! Very simple for the moment, it will take the following arguments:
+$	!
+$	! -32 or 32	sets /POINTER_SIZE=32
+$	! -64 or 64	sets /POINTER_SIZE=64
+$	! -d		sets debugging
+$	! -h		prints a usage and exits
+$	! -t		test mode, doesn't run Configure
+$
+$	arch = f$edit( f$getsyi( "arch_name"), "lowercase")
+$	pointer_size = ""
+$	dryrun = 0
+$	verbose = 0
+$	here = F$PARSE("A.;",F$ENVIRONMENT("PROCEDURE"),,,"SYNTAX_ONLY") - "A.;"
+$
+$	collected_args = ""
+$	P_index = 0
+$	LOOP1:
+$	    P_index = P_index + 1
+$	    IF P_index .GT. 8 THEN GOTO ENDLOOP1
+$	    P = F$EDIT(P1,"TRIM,LOWERCASE")
+$	    IF P .EQS. "-h"
+$           THEN
+$               dryrun = 1
+$               P = ""
+$               TYPE SYS$INPUT
+$               DECK
+Usage: @config [options]
+
+  -32 or 32	Build with 32-bit pointer size.
+  -64 or 64	Build with 64-bit pointer size.
+  -d		Build with debugging.
+  -t            Test mode, do not run the Configure perl script.
+  -v            Verbose mode, show the exact Configure call that is being made.
+  -h		This help.
+
+Any other text will be passed to the Configure perl script.
+See INSTALL for instructions.
+
+$               EOD
+$           ENDIF
+$	    IF P .EQS. "-t"
+$	    THEN
+$		dryrun = 1
+$		verbose = 1
+$		P = ""
+$	    ENDIF
+$	    IF P .EQS. "-v"
+$	    THEN
+$		verbose = 1
+$		P = ""
+$	    ENDIF
+$	    IF P .EQS. "-32" .OR. P .EQS. "32"
+$	    THEN
+$		pointer_size = "-P32"
+$		P = ""
+$	    ENDIF
+$	    IF P .EQS. "-64" .OR. P .EQS. "64"
+$	    THEN
+$		pointer_size = "-P64"
+$		P = ""
+$	    ENDIF
+$	    IF P .EQS. "-d"
+$	    THEN
+$               collected_args = collected_args + " --debug"
+$		P = ""
+$	    ENDIF
+$	    IF P .NES. "" THEN -
+	       collected_args = collected_args + " """ + P1 + """"
+$	    P1 = P2
+$	    P2 = P3
+$	    P3 = P4
+$	    P4 = P5
+$	    P5 = P6
+$	    P6 = P7
+$	    P7 = P8
+$	    P8 = ""
+$	    GOTO LOOP1
+$	ENDLOOP1:
+$
+$	target = "vms-''arch'''pointer_size'"
+$       IF verbose THEN -
+           WRITE SYS$OUTPUT "PERL ''here'Configure ""''target'""",collected_args
+$       IF .not. dryrun THEN -
+           PERL 'here'Configure "''target'"'collected_args'
+$       EXIT $STATUS
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_nyi.c b/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_nyi.c
new file mode 100644
index 000000000..b02449f7c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_nyi.c
@@ -0,0 +1,56 @@
+/*
+ * Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file is dual-licensed and is also available under the following
+ * terms:
+ *
+ * Copyright (c) 2004, Richard Levitte <richard@levitte.org>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ */
+
+#ifndef LPDIR_H
+# include "LPdir.h"
+#endif
+
+struct LP_dir_context_st {
+    void *dummy;
+};
+const char *LP_find_file(LP_DIR_CTX **ctx, const char *directory)
+{
+    errno = EINVAL;
+    return 0;
+}
+
+int LP_find_file_end(LP_DIR_CTX **ctx)
+{
+    errno = EINVAL;
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_unix.c b/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_unix.c
new file mode 100644
index 000000000..b1022895c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_unix.c
@@ -0,0 +1,169 @@
+/*
+ * Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file is dual-licensed and is also available under the following
+ * terms:
+ *
+ * Copyright (c) 2004, 2018, Richard Levitte <richard@levitte.org>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+ * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+ * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+ * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#include <stddef.h>
+#include <stdlib.h>
+#include <limits.h>
+#include <string.h>
+#include <sys/types.h>
+#include <dirent.h>
+#include <errno.h>
+#ifndef LPDIR_H
+# include "LPdir.h"
+#endif
+#ifdef __VMS
+# include <ctype.h>
+#endif
+
+/*
+ * The POSIX macro for the maximum number of characters in a file path is
+ * NAME_MAX.  However, some operating systems use PATH_MAX instead.
+ * Therefore, it seems natural to first check for PATH_MAX and use that, and
+ * if it doesn't exist, use NAME_MAX.
+ */
+#if defined(PATH_MAX)
+# define LP_ENTRY_SIZE PATH_MAX
+#elif defined(NAME_MAX)
+# define LP_ENTRY_SIZE NAME_MAX
+#endif
+
+/*
+ * Of course, there's the possibility that neither PATH_MAX nor NAME_MAX
+ * exist.  It's also possible that NAME_MAX exists but is define to a very
+ * small value (HP-UX offers 14), so we need to check if we got a result, and
+ * if it meets a minimum standard, and create or change it if not.
+ */
+#if !defined(LP_ENTRY_SIZE) || LP_ENTRY_SIZE<255
+# undef LP_ENTRY_SIZE
+# define LP_ENTRY_SIZE 255
+#endif
+
+struct LP_dir_context_st {
+    DIR *dir;
+    char entry_name[LP_ENTRY_SIZE + 1];
+#ifdef __VMS
+    int expect_file_generations;
+    char previous_entry_name[LP_ENTRY_SIZE + 1];
+#endif
+};
+
+const char *LP_find_file(LP_DIR_CTX **ctx, const char *directory)
+{
+    struct dirent *direntry = NULL;
+
+    if (ctx == NULL || directory == NULL) {
+        errno = EINVAL;
+        return 0;
+    }
+
+    errno = 0;
+    if (*ctx == NULL) {
+        *ctx = malloc(sizeof(**ctx));
+        if (*ctx == NULL) {
+            errno = ENOMEM;
+            return 0;
+        }
+        memset(*ctx, 0, sizeof(**ctx));
+
+#ifdef __VMS
+        {
+            char c = directory[strlen(directory) - 1];
+
+            if (c == ']' || c == '>' || c == ':')
+                (*ctx)->expect_file_generations = 1;
+        }
+#endif
+
+        (*ctx)->dir = opendir(directory);
+        if ((*ctx)->dir == NULL) {
+            int save_errno = errno; /* Probably not needed, but I'm paranoid */
+            free(*ctx);
+            *ctx = NULL;
+            errno = save_errno;
+            return 0;
+        }
+    }
+
+#ifdef __VMS
+    strncpy((*ctx)->previous_entry_name, (*ctx)->entry_name,
+            sizeof((*ctx)->previous_entry_name));
+
+ again:
+#endif
+
+    direntry = readdir((*ctx)->dir);
+    if (direntry == NULL) {
+        return 0;
+    }
+
+    strncpy((*ctx)->entry_name, direntry->d_name,
+            sizeof((*ctx)->entry_name) - 1);
+    (*ctx)->entry_name[sizeof((*ctx)->entry_name) - 1] = '\0';
+#ifdef __VMS
+    if ((*ctx)->expect_file_generations) {
+        char *p = (*ctx)->entry_name + strlen((*ctx)->entry_name);
+
+        while(p > (*ctx)->entry_name && isdigit(p[-1]))
+            p--;
+        if (p > (*ctx)->entry_name && p[-1] == ';')
+            p[-1] = '\0';
+        if (strcasecmp((*ctx)->entry_name, (*ctx)->previous_entry_name) == 0)
+            goto again;
+    }
+#endif
+    return (*ctx)->entry_name;
+}
+
+int LP_find_file_end(LP_DIR_CTX **ctx)
+{
+    if (ctx != NULL && *ctx != NULL) {
+        int ret = closedir((*ctx)->dir);
+
+        free(*ctx);
+        switch (ret) {
+        case 0:
+            return 1;
+        case -1:
+            return 0;
+        default:
+            break;
+        }
+    }
+    errno = EINVAL;
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_vms.c b/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_vms.c
new file mode 100644
index 000000000..e35363fd6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_vms.c
@@ -0,0 +1,207 @@
+/*
+ * Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file is dual-licensed and is also available under the following
+ * terms:
+ *
+ * Copyright (c) 2004, Richard Levitte <richard@levitte.org>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+ * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+ * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+ * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#include <stddef.h>
+#include <stdlib.h>
+#include <string.h>
+#include <errno.h>
+#include <descrip.h>
+#include <namdef.h>
+#include <rmsdef.h>
+#include <libfildef.h>
+#include <lib$routines.h>
+#include <strdef.h>
+#include <str$routines.h>
+#include <stsdef.h>
+#ifndef LPDIR_H
+# include "LPdir.h"
+#endif
+#include "vms_rms.h"
+
+/* Some compiler options hide EVMSERR. */
+#ifndef EVMSERR
+# define EVMSERR        65535   /* error for non-translatable VMS errors */
+#endif
+
+struct LP_dir_context_st {
+    unsigned long VMS_context;
+    char filespec[NAMX_MAXRSS + 1];
+    char result[NAMX_MAXRSS + 1];
+    struct dsc$descriptor_d filespec_dsc;
+    struct dsc$descriptor_d result_dsc;
+};
+
+const char *LP_find_file(LP_DIR_CTX **ctx, const char *directory)
+{
+    int status;
+    char *p, *r;
+    size_t l;
+    unsigned long flags = 0;
+
+/* Arrange 32-bit pointer to (copied) string storage, if needed. */
+#if __INITIAL_POINTER_SIZE == 64
+# pragma pointer_size save
+# pragma pointer_size 32
+    char *ctx_filespec_32p;
+# pragma pointer_size restore
+    char ctx_filespec_32[NAMX_MAXRSS + 1];
+#endif                          /* __INITIAL_POINTER_SIZE == 64 */
+
+#ifdef NAML$C_MAXRSS
+    flags |= LIB$M_FIL_LONG_NAMES;
+#endif
+
+    if (ctx == NULL || directory == NULL) {
+        errno = EINVAL;
+        return 0;
+    }
+
+    errno = 0;
+    if (*ctx == NULL) {
+        size_t filespeclen = strlen(directory);
+        char *filespec = NULL;
+
+        if (filespeclen == 0) {
+            errno = ENOENT;
+            return 0;
+        }
+
+        /* MUST be a VMS directory specification!  Let's estimate if it is. */
+        if (directory[filespeclen - 1] != ']'
+            && directory[filespeclen - 1] != '>'
+            && directory[filespeclen - 1] != ':') {
+            errno = EINVAL;
+            return 0;
+        }
+
+        filespeclen += 4;       /* "*.*;" */
+
+        if (filespeclen > NAMX_MAXRSS) {
+            errno = ENAMETOOLONG;
+            return 0;
+        }
+
+        *ctx = malloc(sizeof(**ctx));
+        if (*ctx == NULL) {
+            errno = ENOMEM;
+            return 0;
+        }
+        memset(*ctx, 0, sizeof(**ctx));
+
+        strcpy((*ctx)->filespec, directory);
+        strcat((*ctx)->filespec, "*.*;");
+
+/* Arrange 32-bit pointer to (copied) string storage, if needed. */
+#if __INITIAL_POINTER_SIZE == 64
+# define CTX_FILESPEC ctx_filespec_32p
+        /* Copy the file name to storage with a 32-bit pointer. */
+        ctx_filespec_32p = ctx_filespec_32;
+        strcpy(ctx_filespec_32p, (*ctx)->filespec);
+#else                           /* __INITIAL_POINTER_SIZE == 64 */
+# define CTX_FILESPEC (*ctx)->filespec
+#endif                          /* __INITIAL_POINTER_SIZE == 64 [else] */
+
+        (*ctx)->filespec_dsc.dsc$w_length = filespeclen;
+        (*ctx)->filespec_dsc.dsc$b_dtype = DSC$K_DTYPE_T;
+        (*ctx)->filespec_dsc.dsc$b_class = DSC$K_CLASS_S;
+        (*ctx)->filespec_dsc.dsc$a_pointer = CTX_FILESPEC;
+    }
+
+    (*ctx)->result_dsc.dsc$w_length = 0;
+    (*ctx)->result_dsc.dsc$b_dtype = DSC$K_DTYPE_T;
+    (*ctx)->result_dsc.dsc$b_class = DSC$K_CLASS_D;
+    (*ctx)->result_dsc.dsc$a_pointer = 0;
+
+    status = lib$find_file(&(*ctx)->filespec_dsc, &(*ctx)->result_dsc,
+                           &(*ctx)->VMS_context, 0, 0, 0, &flags);
+
+    if (status == RMS$_NMF) {
+        errno = 0;
+        vaxc$errno = status;
+        return NULL;
+    }
+
+    if (!$VMS_STATUS_SUCCESS(status)) {
+        errno = EVMSERR;
+        vaxc$errno = status;
+        return NULL;
+    }
+
+    /*
+     * Quick, cheap and dirty way to discard any device and directory, since
+     * we only want file names
+     */
+    l = (*ctx)->result_dsc.dsc$w_length;
+    p = (*ctx)->result_dsc.dsc$a_pointer;
+    r = p;
+    for (; *p; p++) {
+        if (*p == '^' && p[1] != '\0') { /* Take care of ODS-5 escapes */
+            p++;
+        } else if (*p == ':' || *p == '>' || *p == ']') {
+            l -= p + 1 - r;
+            r = p + 1;
+        } else if (*p == ';') {
+            l = p - r;
+            break;
+        }
+    }
+
+    strncpy((*ctx)->result, r, l);
+    (*ctx)->result[l] = '\0';
+    str$free1_dx(&(*ctx)->result_dsc);
+
+    return (*ctx)->result;
+}
+
+int LP_find_file_end(LP_DIR_CTX **ctx)
+{
+    if (ctx != NULL && *ctx != NULL) {
+        int status = lib$find_file_end(&(*ctx)->VMS_context);
+
+        free(*ctx);
+
+        if (!$VMS_STATUS_SUCCESS(status)) {
+            errno = EVMSERR;
+            vaxc$errno = status;
+            return 0;
+        }
+        return 1;
+    }
+    errno = EINVAL;
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_win.c b/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_win.c
new file mode 100644
index 000000000..1dc1ef122
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_win.c
@@ -0,0 +1,214 @@
+/*
+ * Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file is dual-licensed and is also available under the following
+ * terms:
+ *
+ * Copyright (c) 2004, Richard Levitte <richard@levitte.org>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+ * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+ * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+ * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#include <windows.h>
+#include <tchar.h>
+#include "internal/numbers.h"
+#ifndef LPDIR_H
+# include "LPdir.h"
+#endif
+
+/*
+ * We're most likely overcautious here, but let's reserve for broken WinCE
+ * headers and explicitly opt for UNICODE call. Keep in mind that our WinCE
+ * builds are compiled with -DUNICODE [as well as -D_UNICODE].
+ */
+#if defined(LP_SYS_WINCE) && !defined(FindFirstFile)
+# define FindFirstFile FindFirstFileW
+#endif
+#if defined(LP_SYS_WINCE) && !defined(FindNextFile)
+# define FindNextFile FindNextFileW
+#endif
+
+#ifndef NAME_MAX
+# define NAME_MAX 255
+#endif
+
+#ifdef CP_UTF8
+# define CP_DEFAULT CP_UTF8
+#else
+# define CP_DEFAULT CP_ACP
+#endif
+
+struct LP_dir_context_st {
+    WIN32_FIND_DATA ctx;
+    HANDLE handle;
+    char entry_name[NAME_MAX + 1];
+};
+
+const char *LP_find_file(LP_DIR_CTX **ctx, const char *directory)
+{
+    if (ctx == NULL || directory == NULL) {
+        errno = EINVAL;
+        return 0;
+    }
+
+    errno = 0;
+    if (*ctx == NULL) {
+        size_t dirlen = strlen(directory);
+
+        if (dirlen == 0 || dirlen > INT_MAX - 3) {
+            errno = ENOENT;
+            return 0;
+        }
+
+        *ctx = malloc(sizeof(**ctx));
+        if (*ctx == NULL) {
+            errno = ENOMEM;
+            return 0;
+        }
+        memset(*ctx, 0, sizeof(**ctx));
+
+        if (sizeof(TCHAR) != sizeof(char)) {
+            TCHAR *wdir = NULL;
+            /* len_0 denotes string length *with* trailing 0 */
+            size_t index = 0, len_0 = dirlen + 1;
+#ifdef LP_MULTIBYTE_AVAILABLE
+            int sz = 0;
+            UINT cp;
+
+            do {
+# ifdef CP_UTF8
+                if ((sz = MultiByteToWideChar((cp = CP_UTF8), 0,
+                                              directory, len_0,
+                                              NULL, 0)) > 0 ||
+                    GetLastError() != ERROR_NO_UNICODE_TRANSLATION)
+                    break;
+# endif
+                sz = MultiByteToWideChar((cp = CP_ACP), 0,
+                                         directory, len_0,
+                                         NULL, 0);
+            } while (0);
+
+            if (sz > 0) {
+                /*
+                 * allocate two additional characters in case we need to
+                 * concatenate asterisk, |sz| covers trailing '\0'!
+                 */
+                wdir = _alloca((sz + 2) * sizeof(TCHAR));
+                if (!MultiByteToWideChar(cp, 0, directory, len_0,
+                                         (WCHAR *)wdir, sz)) {
+                    free(*ctx);
+                    *ctx = NULL;
+                    errno = EINVAL;
+                    return 0;
+                }
+            } else
+#endif
+            {
+                sz = len_0;
+                /*
+                 * allocate two additional characters in case we need to
+                 * concatenate asterisk, |sz| covers trailing '\0'!
+                 */
+                wdir = _alloca((sz + 2) * sizeof(TCHAR));
+                for (index = 0; index < len_0; index++)
+                    wdir[index] = (TCHAR)directory[index];
+            }
+
+            sz--; /* wdir[sz] is trailing '\0' now */
+            if (wdir[sz - 1] != TEXT('*')) {
+                if (wdir[sz - 1] != TEXT('/') && wdir[sz - 1] != TEXT('\\'))
+                    _tcscpy(wdir + sz, TEXT("/*"));
+                else
+                    _tcscpy(wdir + sz, TEXT("*"));
+            }
+
+            (*ctx)->handle = FindFirstFile(wdir, &(*ctx)->ctx);
+        } else {
+            if (directory[dirlen - 1] != '*') {
+                char *buf = _alloca(dirlen + 3);
+
+                strcpy(buf, directory);
+                if (buf[dirlen - 1] != '/' && buf[dirlen - 1] != '\\')
+                    strcpy(buf + dirlen, "/*");
+                else
+                    strcpy(buf + dirlen, "*");
+
+                directory = buf;
+            }
+
+            (*ctx)->handle = FindFirstFile((TCHAR *)directory, &(*ctx)->ctx);
+        }
+
+        if ((*ctx)->handle == INVALID_HANDLE_VALUE) {
+            free(*ctx);
+            *ctx = NULL;
+            errno = EINVAL;
+            return 0;
+        }
+    } else {
+        if (FindNextFile((*ctx)->handle, &(*ctx)->ctx) == FALSE) {
+            return 0;
+        }
+    }
+    if (sizeof(TCHAR) != sizeof(char)) {
+        TCHAR *wdir = (*ctx)->ctx.cFileName;
+        size_t index, len_0 = 0;
+
+        while (wdir[len_0] && len_0 < (sizeof((*ctx)->entry_name) - 1))
+            len_0++;
+        len_0++;
+
+#ifdef LP_MULTIBYTE_AVAILABLE
+        if (!WideCharToMultiByte(CP_DEFAULT, 0, (WCHAR *)wdir, len_0,
+                                 (*ctx)->entry_name,
+                                 sizeof((*ctx)->entry_name), NULL, 0))
+#endif
+            for (index = 0; index < len_0; index++)
+                (*ctx)->entry_name[index] = (char)wdir[index];
+    } else
+        strncpy((*ctx)->entry_name, (const char *)(*ctx)->ctx.cFileName,
+                sizeof((*ctx)->entry_name) - 1);
+
+    (*ctx)->entry_name[sizeof((*ctx)->entry_name) - 1] = '\0';
+
+    return (*ctx)->entry_name;
+}
+
+int LP_find_file_end(LP_DIR_CTX **ctx)
+{
+    if (ctx != NULL && *ctx != NULL) {
+        FindClose((*ctx)->handle);
+        free(*ctx);
+        *ctx = NULL;
+        return 1;
+    }
+    errno = EINVAL;
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_win32.c b/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_win32.c
new file mode 100644
index 000000000..edceb98d6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_win32.c
@@ -0,0 +1,41 @@
+/*
+ * Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file is dual-licensed and is also available under the following
+ * terms:
+ *
+ * Copyright (c) 2004, Richard Levitte <richard@levitte.org>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+ * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+ * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+ * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#define LP_SYS_WIN32
+#define LP_MULTIBYTE_AVAILABLE
+#include "LPdir_win.c"
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_wince.c b/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_wince.c
new file mode 100644
index 000000000..a24e73829
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/LPdir_wince.c
@@ -0,0 +1,44 @@
+/*
+ * Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file is dual-licensed and is also available under the following
+ * terms:
+ *
+ * Copyright (c) 2004, Richard Levitte <richard@levitte.org>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+ * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+ * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+ * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#define LP_SYS_WINCE
+/*
+ * We might want to define LP_MULTIBYTE_AVAILABLE here.  It's currently under
+ * investigation what the exact conditions would be
+ */
+#include "LPdir_win.c"
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_cbc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_cbc.c
new file mode 100644
index 000000000..342841fc4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_cbc.c
@@ -0,0 +1,24 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/aes.h>
+#include <openssl/modes.h>
+
+void AES_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                     size_t len, const AES_KEY *key,
+                     unsigned char *ivec, const int enc)
+{
+
+    if (enc)
+        CRYPTO_cbc128_encrypt(in, out, len, key, ivec,
+                              (block128_f) AES_encrypt);
+    else
+        CRYPTO_cbc128_decrypt(in, out, len, key, ivec,
+                              (block128_f) AES_decrypt);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_cfb.c b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_cfb.c
new file mode 100644
index 000000000..f010e3c4e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_cfb.c
@@ -0,0 +1,43 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/aes.h>
+#include <openssl/modes.h>
+
+/*
+ * The input and output encrypted as though 128bit cfb mode is being used.
+ * The extra state information to record how much of the 128bit block we have
+ * used is contained in *num;
+ */
+
+void AES_cfb128_encrypt(const unsigned char *in, unsigned char *out,
+                        size_t length, const AES_KEY *key,
+                        unsigned char *ivec, int *num, const int enc)
+{
+
+    CRYPTO_cfb128_encrypt(in, out, length, key, ivec, num, enc,
+                          (block128_f) AES_encrypt);
+}
+
+/* N.B. This expects the input to be packed, MS bit first */
+void AES_cfb1_encrypt(const unsigned char *in, unsigned char *out,
+                      size_t length, const AES_KEY *key,
+                      unsigned char *ivec, int *num, const int enc)
+{
+    CRYPTO_cfb128_1_encrypt(in, out, length, key, ivec, num, enc,
+                            (block128_f) AES_encrypt);
+}
+
+void AES_cfb8_encrypt(const unsigned char *in, unsigned char *out,
+                      size_t length, const AES_KEY *key,
+                      unsigned char *ivec, int *num, const int enc)
+{
+    CRYPTO_cfb128_8_encrypt(in, out, length, key, ivec, num, enc,
+                            (block128_f) AES_encrypt);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_core.c b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_core.c
new file mode 100644
index 000000000..f1f11fd8d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_core.c
@@ -0,0 +1,1367 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/**
+ * rijndael-alg-fst.c
+ *
+ * @version 3.0 (December 2000)
+ *
+ * Optimised ANSI C code for the Rijndael cipher (now AES)
+ *
+ * @author Vincent Rijmen
+ * @author Antoon Bosselaers
+ * @author Paulo Barreto
+ *
+ * This code is hereby placed in the public domain.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHORS ''AS IS'' AND ANY EXPRESS
+ * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE
+ * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+ * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+ * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+ * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+ * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+ * OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
+ * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+/* Note: rewritten a little bit to provide error control and an OpenSSL-
+   compatible API */
+
+#include <assert.h>
+
+#include <stdlib.h>
+#include <openssl/crypto.h>
+#include <openssl/aes.h>
+#include "aes_locl.h"
+
+#ifndef AES_ASM
+/*-
+Te0[x] = S [x].[02, 01, 01, 03];
+Te1[x] = S [x].[03, 02, 01, 01];
+Te2[x] = S [x].[01, 03, 02, 01];
+Te3[x] = S [x].[01, 01, 03, 02];
+
+Td0[x] = Si[x].[0e, 09, 0d, 0b];
+Td1[x] = Si[x].[0b, 0e, 09, 0d];
+Td2[x] = Si[x].[0d, 0b, 0e, 09];
+Td3[x] = Si[x].[09, 0d, 0b, 0e];
+Td4[x] = Si[x].[01];
+*/
+
+static const u32 Te0[256] = {
+    0xc66363a5U, 0xf87c7c84U, 0xee777799U, 0xf67b7b8dU,
+    0xfff2f20dU, 0xd66b6bbdU, 0xde6f6fb1U, 0x91c5c554U,
+    0x60303050U, 0x02010103U, 0xce6767a9U, 0x562b2b7dU,
+    0xe7fefe19U, 0xb5d7d762U, 0x4dababe6U, 0xec76769aU,
+    0x8fcaca45U, 0x1f82829dU, 0x89c9c940U, 0xfa7d7d87U,
+    0xeffafa15U, 0xb25959ebU, 0x8e4747c9U, 0xfbf0f00bU,
+    0x41adadecU, 0xb3d4d467U, 0x5fa2a2fdU, 0x45afafeaU,
+    0x239c9cbfU, 0x53a4a4f7U, 0xe4727296U, 0x9bc0c05bU,
+    0x75b7b7c2U, 0xe1fdfd1cU, 0x3d9393aeU, 0x4c26266aU,
+    0x6c36365aU, 0x7e3f3f41U, 0xf5f7f702U, 0x83cccc4fU,
+    0x6834345cU, 0x51a5a5f4U, 0xd1e5e534U, 0xf9f1f108U,
+    0xe2717193U, 0xabd8d873U, 0x62313153U, 0x2a15153fU,
+    0x0804040cU, 0x95c7c752U, 0x46232365U, 0x9dc3c35eU,
+    0x30181828U, 0x379696a1U, 0x0a05050fU, 0x2f9a9ab5U,
+    0x0e070709U, 0x24121236U, 0x1b80809bU, 0xdfe2e23dU,
+    0xcdebeb26U, 0x4e272769U, 0x7fb2b2cdU, 0xea75759fU,
+    0x1209091bU, 0x1d83839eU, 0x582c2c74U, 0x341a1a2eU,
+    0x361b1b2dU, 0xdc6e6eb2U, 0xb45a5aeeU, 0x5ba0a0fbU,
+    0xa45252f6U, 0x763b3b4dU, 0xb7d6d661U, 0x7db3b3ceU,
+    0x5229297bU, 0xdde3e33eU, 0x5e2f2f71U, 0x13848497U,
+    0xa65353f5U, 0xb9d1d168U, 0x00000000U, 0xc1eded2cU,
+    0x40202060U, 0xe3fcfc1fU, 0x79b1b1c8U, 0xb65b5bedU,
+    0xd46a6abeU, 0x8dcbcb46U, 0x67bebed9U, 0x7239394bU,
+    0x944a4adeU, 0x984c4cd4U, 0xb05858e8U, 0x85cfcf4aU,
+    0xbbd0d06bU, 0xc5efef2aU, 0x4faaaae5U, 0xedfbfb16U,
+    0x864343c5U, 0x9a4d4dd7U, 0x66333355U, 0x11858594U,
+    0x8a4545cfU, 0xe9f9f910U, 0x04020206U, 0xfe7f7f81U,
+    0xa05050f0U, 0x783c3c44U, 0x259f9fbaU, 0x4ba8a8e3U,
+    0xa25151f3U, 0x5da3a3feU, 0x804040c0U, 0x058f8f8aU,
+    0x3f9292adU, 0x219d9dbcU, 0x70383848U, 0xf1f5f504U,
+    0x63bcbcdfU, 0x77b6b6c1U, 0xafdada75U, 0x42212163U,
+    0x20101030U, 0xe5ffff1aU, 0xfdf3f30eU, 0xbfd2d26dU,
+    0x81cdcd4cU, 0x180c0c14U, 0x26131335U, 0xc3ecec2fU,
+    0xbe5f5fe1U, 0x359797a2U, 0x884444ccU, 0x2e171739U,
+    0x93c4c457U, 0x55a7a7f2U, 0xfc7e7e82U, 0x7a3d3d47U,
+    0xc86464acU, 0xba5d5de7U, 0x3219192bU, 0xe6737395U,
+    0xc06060a0U, 0x19818198U, 0x9e4f4fd1U, 0xa3dcdc7fU,
+    0x44222266U, 0x542a2a7eU, 0x3b9090abU, 0x0b888883U,
+    0x8c4646caU, 0xc7eeee29U, 0x6bb8b8d3U, 0x2814143cU,
+    0xa7dede79U, 0xbc5e5ee2U, 0x160b0b1dU, 0xaddbdb76U,
+    0xdbe0e03bU, 0x64323256U, 0x743a3a4eU, 0x140a0a1eU,
+    0x924949dbU, 0x0c06060aU, 0x4824246cU, 0xb85c5ce4U,
+    0x9fc2c25dU, 0xbdd3d36eU, 0x43acacefU, 0xc46262a6U,
+    0x399191a8U, 0x319595a4U, 0xd3e4e437U, 0xf279798bU,
+    0xd5e7e732U, 0x8bc8c843U, 0x6e373759U, 0xda6d6db7U,
+    0x018d8d8cU, 0xb1d5d564U, 0x9c4e4ed2U, 0x49a9a9e0U,
+    0xd86c6cb4U, 0xac5656faU, 0xf3f4f407U, 0xcfeaea25U,
+    0xca6565afU, 0xf47a7a8eU, 0x47aeaee9U, 0x10080818U,
+    0x6fbabad5U, 0xf0787888U, 0x4a25256fU, 0x5c2e2e72U,
+    0x381c1c24U, 0x57a6a6f1U, 0x73b4b4c7U, 0x97c6c651U,
+    0xcbe8e823U, 0xa1dddd7cU, 0xe874749cU, 0x3e1f1f21U,
+    0x964b4bddU, 0x61bdbddcU, 0x0d8b8b86U, 0x0f8a8a85U,
+    0xe0707090U, 0x7c3e3e42U, 0x71b5b5c4U, 0xcc6666aaU,
+    0x904848d8U, 0x06030305U, 0xf7f6f601U, 0x1c0e0e12U,
+    0xc26161a3U, 0x6a35355fU, 0xae5757f9U, 0x69b9b9d0U,
+    0x17868691U, 0x99c1c158U, 0x3a1d1d27U, 0x279e9eb9U,
+    0xd9e1e138U, 0xebf8f813U, 0x2b9898b3U, 0x22111133U,
+    0xd26969bbU, 0xa9d9d970U, 0x078e8e89U, 0x339494a7U,
+    0x2d9b9bb6U, 0x3c1e1e22U, 0x15878792U, 0xc9e9e920U,
+    0x87cece49U, 0xaa5555ffU, 0x50282878U, 0xa5dfdf7aU,
+    0x038c8c8fU, 0x59a1a1f8U, 0x09898980U, 0x1a0d0d17U,
+    0x65bfbfdaU, 0xd7e6e631U, 0x844242c6U, 0xd06868b8U,
+    0x824141c3U, 0x299999b0U, 0x5a2d2d77U, 0x1e0f0f11U,
+    0x7bb0b0cbU, 0xa85454fcU, 0x6dbbbbd6U, 0x2c16163aU,
+};
+static const u32 Te1[256] = {
+    0xa5c66363U, 0x84f87c7cU, 0x99ee7777U, 0x8df67b7bU,
+    0x0dfff2f2U, 0xbdd66b6bU, 0xb1de6f6fU, 0x5491c5c5U,
+    0x50603030U, 0x03020101U, 0xa9ce6767U, 0x7d562b2bU,
+    0x19e7fefeU, 0x62b5d7d7U, 0xe64dababU, 0x9aec7676U,
+    0x458fcacaU, 0x9d1f8282U, 0x4089c9c9U, 0x87fa7d7dU,
+    0x15effafaU, 0xebb25959U, 0xc98e4747U, 0x0bfbf0f0U,
+    0xec41adadU, 0x67b3d4d4U, 0xfd5fa2a2U, 0xea45afafU,
+    0xbf239c9cU, 0xf753a4a4U, 0x96e47272U, 0x5b9bc0c0U,
+    0xc275b7b7U, 0x1ce1fdfdU, 0xae3d9393U, 0x6a4c2626U,
+    0x5a6c3636U, 0x417e3f3fU, 0x02f5f7f7U, 0x4f83ccccU,
+    0x5c683434U, 0xf451a5a5U, 0x34d1e5e5U, 0x08f9f1f1U,
+    0x93e27171U, 0x73abd8d8U, 0x53623131U, 0x3f2a1515U,
+    0x0c080404U, 0x5295c7c7U, 0x65462323U, 0x5e9dc3c3U,
+    0x28301818U, 0xa1379696U, 0x0f0a0505U, 0xb52f9a9aU,
+    0x090e0707U, 0x36241212U, 0x9b1b8080U, 0x3ddfe2e2U,
+    0x26cdebebU, 0x694e2727U, 0xcd7fb2b2U, 0x9fea7575U,
+    0x1b120909U, 0x9e1d8383U, 0x74582c2cU, 0x2e341a1aU,
+    0x2d361b1bU, 0xb2dc6e6eU, 0xeeb45a5aU, 0xfb5ba0a0U,
+    0xf6a45252U, 0x4d763b3bU, 0x61b7d6d6U, 0xce7db3b3U,
+    0x7b522929U, 0x3edde3e3U, 0x715e2f2fU, 0x97138484U,
+    0xf5a65353U, 0x68b9d1d1U, 0x00000000U, 0x2cc1ededU,
+    0x60402020U, 0x1fe3fcfcU, 0xc879b1b1U, 0xedb65b5bU,
+    0xbed46a6aU, 0x468dcbcbU, 0xd967bebeU, 0x4b723939U,
+    0xde944a4aU, 0xd4984c4cU, 0xe8b05858U, 0x4a85cfcfU,
+    0x6bbbd0d0U, 0x2ac5efefU, 0xe54faaaaU, 0x16edfbfbU,
+    0xc5864343U, 0xd79a4d4dU, 0x55663333U, 0x94118585U,
+    0xcf8a4545U, 0x10e9f9f9U, 0x06040202U, 0x81fe7f7fU,
+    0xf0a05050U, 0x44783c3cU, 0xba259f9fU, 0xe34ba8a8U,
+    0xf3a25151U, 0xfe5da3a3U, 0xc0804040U, 0x8a058f8fU,
+    0xad3f9292U, 0xbc219d9dU, 0x48703838U, 0x04f1f5f5U,
+    0xdf63bcbcU, 0xc177b6b6U, 0x75afdadaU, 0x63422121U,
+    0x30201010U, 0x1ae5ffffU, 0x0efdf3f3U, 0x6dbfd2d2U,
+    0x4c81cdcdU, 0x14180c0cU, 0x35261313U, 0x2fc3ececU,
+    0xe1be5f5fU, 0xa2359797U, 0xcc884444U, 0x392e1717U,
+    0x5793c4c4U, 0xf255a7a7U, 0x82fc7e7eU, 0x477a3d3dU,
+    0xacc86464U, 0xe7ba5d5dU, 0x2b321919U, 0x95e67373U,
+    0xa0c06060U, 0x98198181U, 0xd19e4f4fU, 0x7fa3dcdcU,
+    0x66442222U, 0x7e542a2aU, 0xab3b9090U, 0x830b8888U,
+    0xca8c4646U, 0x29c7eeeeU, 0xd36bb8b8U, 0x3c281414U,
+    0x79a7dedeU, 0xe2bc5e5eU, 0x1d160b0bU, 0x76addbdbU,
+    0x3bdbe0e0U, 0x56643232U, 0x4e743a3aU, 0x1e140a0aU,
+    0xdb924949U, 0x0a0c0606U, 0x6c482424U, 0xe4b85c5cU,
+    0x5d9fc2c2U, 0x6ebdd3d3U, 0xef43acacU, 0xa6c46262U,
+    0xa8399191U, 0xa4319595U, 0x37d3e4e4U, 0x8bf27979U,
+    0x32d5e7e7U, 0x438bc8c8U, 0x596e3737U, 0xb7da6d6dU,
+    0x8c018d8dU, 0x64b1d5d5U, 0xd29c4e4eU, 0xe049a9a9U,
+    0xb4d86c6cU, 0xfaac5656U, 0x07f3f4f4U, 0x25cfeaeaU,
+    0xafca6565U, 0x8ef47a7aU, 0xe947aeaeU, 0x18100808U,
+    0xd56fbabaU, 0x88f07878U, 0x6f4a2525U, 0x725c2e2eU,
+    0x24381c1cU, 0xf157a6a6U, 0xc773b4b4U, 0x5197c6c6U,
+    0x23cbe8e8U, 0x7ca1ddddU, 0x9ce87474U, 0x213e1f1fU,
+    0xdd964b4bU, 0xdc61bdbdU, 0x860d8b8bU, 0x850f8a8aU,
+    0x90e07070U, 0x427c3e3eU, 0xc471b5b5U, 0xaacc6666U,
+    0xd8904848U, 0x05060303U, 0x01f7f6f6U, 0x121c0e0eU,
+    0xa3c26161U, 0x5f6a3535U, 0xf9ae5757U, 0xd069b9b9U,
+    0x91178686U, 0x5899c1c1U, 0x273a1d1dU, 0xb9279e9eU,
+    0x38d9e1e1U, 0x13ebf8f8U, 0xb32b9898U, 0x33221111U,
+    0xbbd26969U, 0x70a9d9d9U, 0x89078e8eU, 0xa7339494U,
+    0xb62d9b9bU, 0x223c1e1eU, 0x92158787U, 0x20c9e9e9U,
+    0x4987ceceU, 0xffaa5555U, 0x78502828U, 0x7aa5dfdfU,
+    0x8f038c8cU, 0xf859a1a1U, 0x80098989U, 0x171a0d0dU,
+    0xda65bfbfU, 0x31d7e6e6U, 0xc6844242U, 0xb8d06868U,
+    0xc3824141U, 0xb0299999U, 0x775a2d2dU, 0x111e0f0fU,
+    0xcb7bb0b0U, 0xfca85454U, 0xd66dbbbbU, 0x3a2c1616U,
+};
+static const u32 Te2[256] = {
+    0x63a5c663U, 0x7c84f87cU, 0x7799ee77U, 0x7b8df67bU,
+    0xf20dfff2U, 0x6bbdd66bU, 0x6fb1de6fU, 0xc55491c5U,
+    0x30506030U, 0x01030201U, 0x67a9ce67U, 0x2b7d562bU,
+    0xfe19e7feU, 0xd762b5d7U, 0xabe64dabU, 0x769aec76U,
+    0xca458fcaU, 0x829d1f82U, 0xc94089c9U, 0x7d87fa7dU,
+    0xfa15effaU, 0x59ebb259U, 0x47c98e47U, 0xf00bfbf0U,
+    0xadec41adU, 0xd467b3d4U, 0xa2fd5fa2U, 0xafea45afU,
+    0x9cbf239cU, 0xa4f753a4U, 0x7296e472U, 0xc05b9bc0U,
+    0xb7c275b7U, 0xfd1ce1fdU, 0x93ae3d93U, 0x266a4c26U,
+    0x365a6c36U, 0x3f417e3fU, 0xf702f5f7U, 0xcc4f83ccU,
+    0x345c6834U, 0xa5f451a5U, 0xe534d1e5U, 0xf108f9f1U,
+    0x7193e271U, 0xd873abd8U, 0x31536231U, 0x153f2a15U,
+    0x040c0804U, 0xc75295c7U, 0x23654623U, 0xc35e9dc3U,
+    0x18283018U, 0x96a13796U, 0x050f0a05U, 0x9ab52f9aU,
+    0x07090e07U, 0x12362412U, 0x809b1b80U, 0xe23ddfe2U,
+    0xeb26cdebU, 0x27694e27U, 0xb2cd7fb2U, 0x759fea75U,
+    0x091b1209U, 0x839e1d83U, 0x2c74582cU, 0x1a2e341aU,
+    0x1b2d361bU, 0x6eb2dc6eU, 0x5aeeb45aU, 0xa0fb5ba0U,
+    0x52f6a452U, 0x3b4d763bU, 0xd661b7d6U, 0xb3ce7db3U,
+    0x297b5229U, 0xe33edde3U, 0x2f715e2fU, 0x84971384U,
+    0x53f5a653U, 0xd168b9d1U, 0x00000000U, 0xed2cc1edU,
+    0x20604020U, 0xfc1fe3fcU, 0xb1c879b1U, 0x5bedb65bU,
+    0x6abed46aU, 0xcb468dcbU, 0xbed967beU, 0x394b7239U,
+    0x4ade944aU, 0x4cd4984cU, 0x58e8b058U, 0xcf4a85cfU,
+    0xd06bbbd0U, 0xef2ac5efU, 0xaae54faaU, 0xfb16edfbU,
+    0x43c58643U, 0x4dd79a4dU, 0x33556633U, 0x85941185U,
+    0x45cf8a45U, 0xf910e9f9U, 0x02060402U, 0x7f81fe7fU,
+    0x50f0a050U, 0x3c44783cU, 0x9fba259fU, 0xa8e34ba8U,
+    0x51f3a251U, 0xa3fe5da3U, 0x40c08040U, 0x8f8a058fU,
+    0x92ad3f92U, 0x9dbc219dU, 0x38487038U, 0xf504f1f5U,
+    0xbcdf63bcU, 0xb6c177b6U, 0xda75afdaU, 0x21634221U,
+    0x10302010U, 0xff1ae5ffU, 0xf30efdf3U, 0xd26dbfd2U,
+    0xcd4c81cdU, 0x0c14180cU, 0x13352613U, 0xec2fc3ecU,
+    0x5fe1be5fU, 0x97a23597U, 0x44cc8844U, 0x17392e17U,
+    0xc45793c4U, 0xa7f255a7U, 0x7e82fc7eU, 0x3d477a3dU,
+    0x64acc864U, 0x5de7ba5dU, 0x192b3219U, 0x7395e673U,
+    0x60a0c060U, 0x81981981U, 0x4fd19e4fU, 0xdc7fa3dcU,
+    0x22664422U, 0x2a7e542aU, 0x90ab3b90U, 0x88830b88U,
+    0x46ca8c46U, 0xee29c7eeU, 0xb8d36bb8U, 0x143c2814U,
+    0xde79a7deU, 0x5ee2bc5eU, 0x0b1d160bU, 0xdb76addbU,
+    0xe03bdbe0U, 0x32566432U, 0x3a4e743aU, 0x0a1e140aU,
+    0x49db9249U, 0x060a0c06U, 0x246c4824U, 0x5ce4b85cU,
+    0xc25d9fc2U, 0xd36ebdd3U, 0xacef43acU, 0x62a6c462U,
+    0x91a83991U, 0x95a43195U, 0xe437d3e4U, 0x798bf279U,
+    0xe732d5e7U, 0xc8438bc8U, 0x37596e37U, 0x6db7da6dU,
+    0x8d8c018dU, 0xd564b1d5U, 0x4ed29c4eU, 0xa9e049a9U,
+    0x6cb4d86cU, 0x56faac56U, 0xf407f3f4U, 0xea25cfeaU,
+    0x65afca65U, 0x7a8ef47aU, 0xaee947aeU, 0x08181008U,
+    0xbad56fbaU, 0x7888f078U, 0x256f4a25U, 0x2e725c2eU,
+    0x1c24381cU, 0xa6f157a6U, 0xb4c773b4U, 0xc65197c6U,
+    0xe823cbe8U, 0xdd7ca1ddU, 0x749ce874U, 0x1f213e1fU,
+    0x4bdd964bU, 0xbddc61bdU, 0x8b860d8bU, 0x8a850f8aU,
+    0x7090e070U, 0x3e427c3eU, 0xb5c471b5U, 0x66aacc66U,
+    0x48d89048U, 0x03050603U, 0xf601f7f6U, 0x0e121c0eU,
+    0x61a3c261U, 0x355f6a35U, 0x57f9ae57U, 0xb9d069b9U,
+    0x86911786U, 0xc15899c1U, 0x1d273a1dU, 0x9eb9279eU,
+    0xe138d9e1U, 0xf813ebf8U, 0x98b32b98U, 0x11332211U,
+    0x69bbd269U, 0xd970a9d9U, 0x8e89078eU, 0x94a73394U,
+    0x9bb62d9bU, 0x1e223c1eU, 0x87921587U, 0xe920c9e9U,
+    0xce4987ceU, 0x55ffaa55U, 0x28785028U, 0xdf7aa5dfU,
+    0x8c8f038cU, 0xa1f859a1U, 0x89800989U, 0x0d171a0dU,
+    0xbfda65bfU, 0xe631d7e6U, 0x42c68442U, 0x68b8d068U,
+    0x41c38241U, 0x99b02999U, 0x2d775a2dU, 0x0f111e0fU,
+    0xb0cb7bb0U, 0x54fca854U, 0xbbd66dbbU, 0x163a2c16U,
+};
+static const u32 Te3[256] = {
+    0x6363a5c6U, 0x7c7c84f8U, 0x777799eeU, 0x7b7b8df6U,
+    0xf2f20dffU, 0x6b6bbdd6U, 0x6f6fb1deU, 0xc5c55491U,
+    0x30305060U, 0x01010302U, 0x6767a9ceU, 0x2b2b7d56U,
+    0xfefe19e7U, 0xd7d762b5U, 0xababe64dU, 0x76769aecU,
+    0xcaca458fU, 0x82829d1fU, 0xc9c94089U, 0x7d7d87faU,
+    0xfafa15efU, 0x5959ebb2U, 0x4747c98eU, 0xf0f00bfbU,
+    0xadadec41U, 0xd4d467b3U, 0xa2a2fd5fU, 0xafafea45U,
+    0x9c9cbf23U, 0xa4a4f753U, 0x727296e4U, 0xc0c05b9bU,
+    0xb7b7c275U, 0xfdfd1ce1U, 0x9393ae3dU, 0x26266a4cU,
+    0x36365a6cU, 0x3f3f417eU, 0xf7f702f5U, 0xcccc4f83U,
+    0x34345c68U, 0xa5a5f451U, 0xe5e534d1U, 0xf1f108f9U,
+    0x717193e2U, 0xd8d873abU, 0x31315362U, 0x15153f2aU,
+    0x04040c08U, 0xc7c75295U, 0x23236546U, 0xc3c35e9dU,
+    0x18182830U, 0x9696a137U, 0x05050f0aU, 0x9a9ab52fU,
+    0x0707090eU, 0x12123624U, 0x80809b1bU, 0xe2e23ddfU,
+    0xebeb26cdU, 0x2727694eU, 0xb2b2cd7fU, 0x75759feaU,
+    0x09091b12U, 0x83839e1dU, 0x2c2c7458U, 0x1a1a2e34U,
+    0x1b1b2d36U, 0x6e6eb2dcU, 0x5a5aeeb4U, 0xa0a0fb5bU,
+    0x5252f6a4U, 0x3b3b4d76U, 0xd6d661b7U, 0xb3b3ce7dU,
+    0x29297b52U, 0xe3e33eddU, 0x2f2f715eU, 0x84849713U,
+    0x5353f5a6U, 0xd1d168b9U, 0x00000000U, 0xeded2cc1U,
+    0x20206040U, 0xfcfc1fe3U, 0xb1b1c879U, 0x5b5bedb6U,
+    0x6a6abed4U, 0xcbcb468dU, 0xbebed967U, 0x39394b72U,
+    0x4a4ade94U, 0x4c4cd498U, 0x5858e8b0U, 0xcfcf4a85U,
+    0xd0d06bbbU, 0xefef2ac5U, 0xaaaae54fU, 0xfbfb16edU,
+    0x4343c586U, 0x4d4dd79aU, 0x33335566U, 0x85859411U,
+    0x4545cf8aU, 0xf9f910e9U, 0x02020604U, 0x7f7f81feU,
+    0x5050f0a0U, 0x3c3c4478U, 0x9f9fba25U, 0xa8a8e34bU,
+    0x5151f3a2U, 0xa3a3fe5dU, 0x4040c080U, 0x8f8f8a05U,
+    0x9292ad3fU, 0x9d9dbc21U, 0x38384870U, 0xf5f504f1U,
+    0xbcbcdf63U, 0xb6b6c177U, 0xdada75afU, 0x21216342U,
+    0x10103020U, 0xffff1ae5U, 0xf3f30efdU, 0xd2d26dbfU,
+    0xcdcd4c81U, 0x0c0c1418U, 0x13133526U, 0xecec2fc3U,
+    0x5f5fe1beU, 0x9797a235U, 0x4444cc88U, 0x1717392eU,
+    0xc4c45793U, 0xa7a7f255U, 0x7e7e82fcU, 0x3d3d477aU,
+    0x6464acc8U, 0x5d5de7baU, 0x19192b32U, 0x737395e6U,
+    0x6060a0c0U, 0x81819819U, 0x4f4fd19eU, 0xdcdc7fa3U,
+    0x22226644U, 0x2a2a7e54U, 0x9090ab3bU, 0x8888830bU,
+    0x4646ca8cU, 0xeeee29c7U, 0xb8b8d36bU, 0x14143c28U,
+    0xdede79a7U, 0x5e5ee2bcU, 0x0b0b1d16U, 0xdbdb76adU,
+    0xe0e03bdbU, 0x32325664U, 0x3a3a4e74U, 0x0a0a1e14U,
+    0x4949db92U, 0x06060a0cU, 0x24246c48U, 0x5c5ce4b8U,
+    0xc2c25d9fU, 0xd3d36ebdU, 0xacacef43U, 0x6262a6c4U,
+    0x9191a839U, 0x9595a431U, 0xe4e437d3U, 0x79798bf2U,
+    0xe7e732d5U, 0xc8c8438bU, 0x3737596eU, 0x6d6db7daU,
+    0x8d8d8c01U, 0xd5d564b1U, 0x4e4ed29cU, 0xa9a9e049U,
+    0x6c6cb4d8U, 0x5656faacU, 0xf4f407f3U, 0xeaea25cfU,
+    0x6565afcaU, 0x7a7a8ef4U, 0xaeaee947U, 0x08081810U,
+    0xbabad56fU, 0x787888f0U, 0x25256f4aU, 0x2e2e725cU,
+    0x1c1c2438U, 0xa6a6f157U, 0xb4b4c773U, 0xc6c65197U,
+    0xe8e823cbU, 0xdddd7ca1U, 0x74749ce8U, 0x1f1f213eU,
+    0x4b4bdd96U, 0xbdbddc61U, 0x8b8b860dU, 0x8a8a850fU,
+    0x707090e0U, 0x3e3e427cU, 0xb5b5c471U, 0x6666aaccU,
+    0x4848d890U, 0x03030506U, 0xf6f601f7U, 0x0e0e121cU,
+    0x6161a3c2U, 0x35355f6aU, 0x5757f9aeU, 0xb9b9d069U,
+    0x86869117U, 0xc1c15899U, 0x1d1d273aU, 0x9e9eb927U,
+    0xe1e138d9U, 0xf8f813ebU, 0x9898b32bU, 0x11113322U,
+    0x6969bbd2U, 0xd9d970a9U, 0x8e8e8907U, 0x9494a733U,
+    0x9b9bb62dU, 0x1e1e223cU, 0x87879215U, 0xe9e920c9U,
+    0xcece4987U, 0x5555ffaaU, 0x28287850U, 0xdfdf7aa5U,
+    0x8c8c8f03U, 0xa1a1f859U, 0x89898009U, 0x0d0d171aU,
+    0xbfbfda65U, 0xe6e631d7U, 0x4242c684U, 0x6868b8d0U,
+    0x4141c382U, 0x9999b029U, 0x2d2d775aU, 0x0f0f111eU,
+    0xb0b0cb7bU, 0x5454fca8U, 0xbbbbd66dU, 0x16163a2cU,
+};
+
+static const u32 Td0[256] = {
+    0x51f4a750U, 0x7e416553U, 0x1a17a4c3U, 0x3a275e96U,
+    0x3bab6bcbU, 0x1f9d45f1U, 0xacfa58abU, 0x4be30393U,
+    0x2030fa55U, 0xad766df6U, 0x88cc7691U, 0xf5024c25U,
+    0x4fe5d7fcU, 0xc52acbd7U, 0x26354480U, 0xb562a38fU,
+    0xdeb15a49U, 0x25ba1b67U, 0x45ea0e98U, 0x5dfec0e1U,
+    0xc32f7502U, 0x814cf012U, 0x8d4697a3U, 0x6bd3f9c6U,
+    0x038f5fe7U, 0x15929c95U, 0xbf6d7aebU, 0x955259daU,
+    0xd4be832dU, 0x587421d3U, 0x49e06929U, 0x8ec9c844U,
+    0x75c2896aU, 0xf48e7978U, 0x99583e6bU, 0x27b971ddU,
+    0xbee14fb6U, 0xf088ad17U, 0xc920ac66U, 0x7dce3ab4U,
+    0x63df4a18U, 0xe51a3182U, 0x97513360U, 0x62537f45U,
+    0xb16477e0U, 0xbb6bae84U, 0xfe81a01cU, 0xf9082b94U,
+    0x70486858U, 0x8f45fd19U, 0x94de6c87U, 0x527bf8b7U,
+    0xab73d323U, 0x724b02e2U, 0xe31f8f57U, 0x6655ab2aU,
+    0xb2eb2807U, 0x2fb5c203U, 0x86c57b9aU, 0xd33708a5U,
+    0x302887f2U, 0x23bfa5b2U, 0x02036abaU, 0xed16825cU,
+    0x8acf1c2bU, 0xa779b492U, 0xf307f2f0U, 0x4e69e2a1U,
+    0x65daf4cdU, 0x0605bed5U, 0xd134621fU, 0xc4a6fe8aU,
+    0x342e539dU, 0xa2f355a0U, 0x058ae132U, 0xa4f6eb75U,
+    0x0b83ec39U, 0x4060efaaU, 0x5e719f06U, 0xbd6e1051U,
+    0x3e218af9U, 0x96dd063dU, 0xdd3e05aeU, 0x4de6bd46U,
+    0x91548db5U, 0x71c45d05U, 0x0406d46fU, 0x605015ffU,
+    0x1998fb24U, 0xd6bde997U, 0x894043ccU, 0x67d99e77U,
+    0xb0e842bdU, 0x07898b88U, 0xe7195b38U, 0x79c8eedbU,
+    0xa17c0a47U, 0x7c420fe9U, 0xf8841ec9U, 0x00000000U,
+    0x09808683U, 0x322bed48U, 0x1e1170acU, 0x6c5a724eU,
+    0xfd0efffbU, 0x0f853856U, 0x3daed51eU, 0x362d3927U,
+    0x0a0fd964U, 0x685ca621U, 0x9b5b54d1U, 0x24362e3aU,
+    0x0c0a67b1U, 0x9357e70fU, 0xb4ee96d2U, 0x1b9b919eU,
+    0x80c0c54fU, 0x61dc20a2U, 0x5a774b69U, 0x1c121a16U,
+    0xe293ba0aU, 0xc0a02ae5U, 0x3c22e043U, 0x121b171dU,
+    0x0e090d0bU, 0xf28bc7adU, 0x2db6a8b9U, 0x141ea9c8U,
+    0x57f11985U, 0xaf75074cU, 0xee99ddbbU, 0xa37f60fdU,
+    0xf701269fU, 0x5c72f5bcU, 0x44663bc5U, 0x5bfb7e34U,
+    0x8b432976U, 0xcb23c6dcU, 0xb6edfc68U, 0xb8e4f163U,
+    0xd731dccaU, 0x42638510U, 0x13972240U, 0x84c61120U,
+    0x854a247dU, 0xd2bb3df8U, 0xaef93211U, 0xc729a16dU,
+    0x1d9e2f4bU, 0xdcb230f3U, 0x0d8652ecU, 0x77c1e3d0U,
+    0x2bb3166cU, 0xa970b999U, 0x119448faU, 0x47e96422U,
+    0xa8fc8cc4U, 0xa0f03f1aU, 0x567d2cd8U, 0x223390efU,
+    0x87494ec7U, 0xd938d1c1U, 0x8ccaa2feU, 0x98d40b36U,
+    0xa6f581cfU, 0xa57ade28U, 0xdab78e26U, 0x3fadbfa4U,
+    0x2c3a9de4U, 0x5078920dU, 0x6a5fcc9bU, 0x547e4662U,
+    0xf68d13c2U, 0x90d8b8e8U, 0x2e39f75eU, 0x82c3aff5U,
+    0x9f5d80beU, 0x69d0937cU, 0x6fd52da9U, 0xcf2512b3U,
+    0xc8ac993bU, 0x10187da7U, 0xe89c636eU, 0xdb3bbb7bU,
+    0xcd267809U, 0x6e5918f4U, 0xec9ab701U, 0x834f9aa8U,
+    0xe6956e65U, 0xaaffe67eU, 0x21bccf08U, 0xef15e8e6U,
+    0xbae79bd9U, 0x4a6f36ceU, 0xea9f09d4U, 0x29b07cd6U,
+    0x31a4b2afU, 0x2a3f2331U, 0xc6a59430U, 0x35a266c0U,
+    0x744ebc37U, 0xfc82caa6U, 0xe090d0b0U, 0x33a7d815U,
+    0xf104984aU, 0x41ecdaf7U, 0x7fcd500eU, 0x1791f62fU,
+    0x764dd68dU, 0x43efb04dU, 0xccaa4d54U, 0xe49604dfU,
+    0x9ed1b5e3U, 0x4c6a881bU, 0xc12c1fb8U, 0x4665517fU,
+    0x9d5eea04U, 0x018c355dU, 0xfa877473U, 0xfb0b412eU,
+    0xb3671d5aU, 0x92dbd252U, 0xe9105633U, 0x6dd64713U,
+    0x9ad7618cU, 0x37a10c7aU, 0x59f8148eU, 0xeb133c89U,
+    0xcea927eeU, 0xb761c935U, 0xe11ce5edU, 0x7a47b13cU,
+    0x9cd2df59U, 0x55f2733fU, 0x1814ce79U, 0x73c737bfU,
+    0x53f7cdeaU, 0x5ffdaa5bU, 0xdf3d6f14U, 0x7844db86U,
+    0xcaaff381U, 0xb968c43eU, 0x3824342cU, 0xc2a3405fU,
+    0x161dc372U, 0xbce2250cU, 0x283c498bU, 0xff0d9541U,
+    0x39a80171U, 0x080cb3deU, 0xd8b4e49cU, 0x6456c190U,
+    0x7bcb8461U, 0xd532b670U, 0x486c5c74U, 0xd0b85742U,
+};
+static const u32 Td1[256] = {
+    0x5051f4a7U, 0x537e4165U, 0xc31a17a4U, 0x963a275eU,
+    0xcb3bab6bU, 0xf11f9d45U, 0xabacfa58U, 0x934be303U,
+    0x552030faU, 0xf6ad766dU, 0x9188cc76U, 0x25f5024cU,
+    0xfc4fe5d7U, 0xd7c52acbU, 0x80263544U, 0x8fb562a3U,
+    0x49deb15aU, 0x6725ba1bU, 0x9845ea0eU, 0xe15dfec0U,
+    0x02c32f75U, 0x12814cf0U, 0xa38d4697U, 0xc66bd3f9U,
+    0xe7038f5fU, 0x9515929cU, 0xebbf6d7aU, 0xda955259U,
+    0x2dd4be83U, 0xd3587421U, 0x2949e069U, 0x448ec9c8U,
+    0x6a75c289U, 0x78f48e79U, 0x6b99583eU, 0xdd27b971U,
+    0xb6bee14fU, 0x17f088adU, 0x66c920acU, 0xb47dce3aU,
+    0x1863df4aU, 0x82e51a31U, 0x60975133U, 0x4562537fU,
+    0xe0b16477U, 0x84bb6baeU, 0x1cfe81a0U, 0x94f9082bU,
+    0x58704868U, 0x198f45fdU, 0x8794de6cU, 0xb7527bf8U,
+    0x23ab73d3U, 0xe2724b02U, 0x57e31f8fU, 0x2a6655abU,
+    0x07b2eb28U, 0x032fb5c2U, 0x9a86c57bU, 0xa5d33708U,
+    0xf2302887U, 0xb223bfa5U, 0xba02036aU, 0x5ced1682U,
+    0x2b8acf1cU, 0x92a779b4U, 0xf0f307f2U, 0xa14e69e2U,
+    0xcd65daf4U, 0xd50605beU, 0x1fd13462U, 0x8ac4a6feU,
+    0x9d342e53U, 0xa0a2f355U, 0x32058ae1U, 0x75a4f6ebU,
+    0x390b83ecU, 0xaa4060efU, 0x065e719fU, 0x51bd6e10U,
+    0xf93e218aU, 0x3d96dd06U, 0xaedd3e05U, 0x464de6bdU,
+    0xb591548dU, 0x0571c45dU, 0x6f0406d4U, 0xff605015U,
+    0x241998fbU, 0x97d6bde9U, 0xcc894043U, 0x7767d99eU,
+    0xbdb0e842U, 0x8807898bU, 0x38e7195bU, 0xdb79c8eeU,
+    0x47a17c0aU, 0xe97c420fU, 0xc9f8841eU, 0x00000000U,
+    0x83098086U, 0x48322bedU, 0xac1e1170U, 0x4e6c5a72U,
+    0xfbfd0effU, 0x560f8538U, 0x1e3daed5U, 0x27362d39U,
+    0x640a0fd9U, 0x21685ca6U, 0xd19b5b54U, 0x3a24362eU,
+    0xb10c0a67U, 0x0f9357e7U, 0xd2b4ee96U, 0x9e1b9b91U,
+    0x4f80c0c5U, 0xa261dc20U, 0x695a774bU, 0x161c121aU,
+    0x0ae293baU, 0xe5c0a02aU, 0x433c22e0U, 0x1d121b17U,
+    0x0b0e090dU, 0xadf28bc7U, 0xb92db6a8U, 0xc8141ea9U,
+    0x8557f119U, 0x4caf7507U, 0xbbee99ddU, 0xfda37f60U,
+    0x9ff70126U, 0xbc5c72f5U, 0xc544663bU, 0x345bfb7eU,
+    0x768b4329U, 0xdccb23c6U, 0x68b6edfcU, 0x63b8e4f1U,
+    0xcad731dcU, 0x10426385U, 0x40139722U, 0x2084c611U,
+    0x7d854a24U, 0xf8d2bb3dU, 0x11aef932U, 0x6dc729a1U,
+    0x4b1d9e2fU, 0xf3dcb230U, 0xec0d8652U, 0xd077c1e3U,
+    0x6c2bb316U, 0x99a970b9U, 0xfa119448U, 0x2247e964U,
+    0xc4a8fc8cU, 0x1aa0f03fU, 0xd8567d2cU, 0xef223390U,
+    0xc787494eU, 0xc1d938d1U, 0xfe8ccaa2U, 0x3698d40bU,
+    0xcfa6f581U, 0x28a57adeU, 0x26dab78eU, 0xa43fadbfU,
+    0xe42c3a9dU, 0x0d507892U, 0x9b6a5fccU, 0x62547e46U,
+    0xc2f68d13U, 0xe890d8b8U, 0x5e2e39f7U, 0xf582c3afU,
+    0xbe9f5d80U, 0x7c69d093U, 0xa96fd52dU, 0xb3cf2512U,
+    0x3bc8ac99U, 0xa710187dU, 0x6ee89c63U, 0x7bdb3bbbU,
+    0x09cd2678U, 0xf46e5918U, 0x01ec9ab7U, 0xa8834f9aU,
+    0x65e6956eU, 0x7eaaffe6U, 0x0821bccfU, 0xe6ef15e8U,
+    0xd9bae79bU, 0xce4a6f36U, 0xd4ea9f09U, 0xd629b07cU,
+    0xaf31a4b2U, 0x312a3f23U, 0x30c6a594U, 0xc035a266U,
+    0x37744ebcU, 0xa6fc82caU, 0xb0e090d0U, 0x1533a7d8U,
+    0x4af10498U, 0xf741ecdaU, 0x0e7fcd50U, 0x2f1791f6U,
+    0x8d764dd6U, 0x4d43efb0U, 0x54ccaa4dU, 0xdfe49604U,
+    0xe39ed1b5U, 0x1b4c6a88U, 0xb8c12c1fU, 0x7f466551U,
+    0x049d5eeaU, 0x5d018c35U, 0x73fa8774U, 0x2efb0b41U,
+    0x5ab3671dU, 0x5292dbd2U, 0x33e91056U, 0x136dd647U,
+    0x8c9ad761U, 0x7a37a10cU, 0x8e59f814U, 0x89eb133cU,
+    0xeecea927U, 0x35b761c9U, 0xede11ce5U, 0x3c7a47b1U,
+    0x599cd2dfU, 0x3f55f273U, 0x791814ceU, 0xbf73c737U,
+    0xea53f7cdU, 0x5b5ffdaaU, 0x14df3d6fU, 0x867844dbU,
+    0x81caaff3U, 0x3eb968c4U, 0x2c382434U, 0x5fc2a340U,
+    0x72161dc3U, 0x0cbce225U, 0x8b283c49U, 0x41ff0d95U,
+    0x7139a801U, 0xde080cb3U, 0x9cd8b4e4U, 0x906456c1U,
+    0x617bcb84U, 0x70d532b6U, 0x74486c5cU, 0x42d0b857U,
+};
+static const u32 Td2[256] = {
+    0xa75051f4U, 0x65537e41U, 0xa4c31a17U, 0x5e963a27U,
+    0x6bcb3babU, 0x45f11f9dU, 0x58abacfaU, 0x03934be3U,
+    0xfa552030U, 0x6df6ad76U, 0x769188ccU, 0x4c25f502U,
+    0xd7fc4fe5U, 0xcbd7c52aU, 0x44802635U, 0xa38fb562U,
+    0x5a49deb1U, 0x1b6725baU, 0x0e9845eaU, 0xc0e15dfeU,
+    0x7502c32fU, 0xf012814cU, 0x97a38d46U, 0xf9c66bd3U,
+    0x5fe7038fU, 0x9c951592U, 0x7aebbf6dU, 0x59da9552U,
+    0x832dd4beU, 0x21d35874U, 0x692949e0U, 0xc8448ec9U,
+    0x896a75c2U, 0x7978f48eU, 0x3e6b9958U, 0x71dd27b9U,
+    0x4fb6bee1U, 0xad17f088U, 0xac66c920U, 0x3ab47dceU,
+    0x4a1863dfU, 0x3182e51aU, 0x33609751U, 0x7f456253U,
+    0x77e0b164U, 0xae84bb6bU, 0xa01cfe81U, 0x2b94f908U,
+    0x68587048U, 0xfd198f45U, 0x6c8794deU, 0xf8b7527bU,
+    0xd323ab73U, 0x02e2724bU, 0x8f57e31fU, 0xab2a6655U,
+    0x2807b2ebU, 0xc2032fb5U, 0x7b9a86c5U, 0x08a5d337U,
+    0x87f23028U, 0xa5b223bfU, 0x6aba0203U, 0x825ced16U,
+    0x1c2b8acfU, 0xb492a779U, 0xf2f0f307U, 0xe2a14e69U,
+    0xf4cd65daU, 0xbed50605U, 0x621fd134U, 0xfe8ac4a6U,
+    0x539d342eU, 0x55a0a2f3U, 0xe132058aU, 0xeb75a4f6U,
+    0xec390b83U, 0xefaa4060U, 0x9f065e71U, 0x1051bd6eU,
+    0x8af93e21U, 0x063d96ddU, 0x05aedd3eU, 0xbd464de6U,
+    0x8db59154U, 0x5d0571c4U, 0xd46f0406U, 0x15ff6050U,
+    0xfb241998U, 0xe997d6bdU, 0x43cc8940U, 0x9e7767d9U,
+    0x42bdb0e8U, 0x8b880789U, 0x5b38e719U, 0xeedb79c8U,
+    0x0a47a17cU, 0x0fe97c42U, 0x1ec9f884U, 0x00000000U,
+    0x86830980U, 0xed48322bU, 0x70ac1e11U, 0x724e6c5aU,
+    0xfffbfd0eU, 0x38560f85U, 0xd51e3daeU, 0x3927362dU,
+    0xd9640a0fU, 0xa621685cU, 0x54d19b5bU, 0x2e3a2436U,
+    0x67b10c0aU, 0xe70f9357U, 0x96d2b4eeU, 0x919e1b9bU,
+    0xc54f80c0U, 0x20a261dcU, 0x4b695a77U, 0x1a161c12U,
+    0xba0ae293U, 0x2ae5c0a0U, 0xe0433c22U, 0x171d121bU,
+    0x0d0b0e09U, 0xc7adf28bU, 0xa8b92db6U, 0xa9c8141eU,
+    0x198557f1U, 0x074caf75U, 0xddbbee99U, 0x60fda37fU,
+    0x269ff701U, 0xf5bc5c72U, 0x3bc54466U, 0x7e345bfbU,
+    0x29768b43U, 0xc6dccb23U, 0xfc68b6edU, 0xf163b8e4U,
+    0xdccad731U, 0x85104263U, 0x22401397U, 0x112084c6U,
+    0x247d854aU, 0x3df8d2bbU, 0x3211aef9U, 0xa16dc729U,
+    0x2f4b1d9eU, 0x30f3dcb2U, 0x52ec0d86U, 0xe3d077c1U,
+    0x166c2bb3U, 0xb999a970U, 0x48fa1194U, 0x642247e9U,
+    0x8cc4a8fcU, 0x3f1aa0f0U, 0x2cd8567dU, 0x90ef2233U,
+    0x4ec78749U, 0xd1c1d938U, 0xa2fe8ccaU, 0x0b3698d4U,
+    0x81cfa6f5U, 0xde28a57aU, 0x8e26dab7U, 0xbfa43fadU,
+    0x9de42c3aU, 0x920d5078U, 0xcc9b6a5fU, 0x4662547eU,
+    0x13c2f68dU, 0xb8e890d8U, 0xf75e2e39U, 0xaff582c3U,
+    0x80be9f5dU, 0x937c69d0U, 0x2da96fd5U, 0x12b3cf25U,
+    0x993bc8acU, 0x7da71018U, 0x636ee89cU, 0xbb7bdb3bU,
+    0x7809cd26U, 0x18f46e59U, 0xb701ec9aU, 0x9aa8834fU,
+    0x6e65e695U, 0xe67eaaffU, 0xcf0821bcU, 0xe8e6ef15U,
+    0x9bd9bae7U, 0x36ce4a6fU, 0x09d4ea9fU, 0x7cd629b0U,
+    0xb2af31a4U, 0x23312a3fU, 0x9430c6a5U, 0x66c035a2U,
+    0xbc37744eU, 0xcaa6fc82U, 0xd0b0e090U, 0xd81533a7U,
+    0x984af104U, 0xdaf741ecU, 0x500e7fcdU, 0xf62f1791U,
+    0xd68d764dU, 0xb04d43efU, 0x4d54ccaaU, 0x04dfe496U,
+    0xb5e39ed1U, 0x881b4c6aU, 0x1fb8c12cU, 0x517f4665U,
+    0xea049d5eU, 0x355d018cU, 0x7473fa87U, 0x412efb0bU,
+    0x1d5ab367U, 0xd25292dbU, 0x5633e910U, 0x47136dd6U,
+    0x618c9ad7U, 0x0c7a37a1U, 0x148e59f8U, 0x3c89eb13U,
+    0x27eecea9U, 0xc935b761U, 0xe5ede11cU, 0xb13c7a47U,
+    0xdf599cd2U, 0x733f55f2U, 0xce791814U, 0x37bf73c7U,
+    0xcdea53f7U, 0xaa5b5ffdU, 0x6f14df3dU, 0xdb867844U,
+    0xf381caafU, 0xc43eb968U, 0x342c3824U, 0x405fc2a3U,
+    0xc372161dU, 0x250cbce2U, 0x498b283cU, 0x9541ff0dU,
+    0x017139a8U, 0xb3de080cU, 0xe49cd8b4U, 0xc1906456U,
+    0x84617bcbU, 0xb670d532U, 0x5c74486cU, 0x5742d0b8U,
+};
+static const u32 Td3[256] = {
+    0xf4a75051U, 0x4165537eU, 0x17a4c31aU, 0x275e963aU,
+    0xab6bcb3bU, 0x9d45f11fU, 0xfa58abacU, 0xe303934bU,
+    0x30fa5520U, 0x766df6adU, 0xcc769188U, 0x024c25f5U,
+    0xe5d7fc4fU, 0x2acbd7c5U, 0x35448026U, 0x62a38fb5U,
+    0xb15a49deU, 0xba1b6725U, 0xea0e9845U, 0xfec0e15dU,
+    0x2f7502c3U, 0x4cf01281U, 0x4697a38dU, 0xd3f9c66bU,
+    0x8f5fe703U, 0x929c9515U, 0x6d7aebbfU, 0x5259da95U,
+    0xbe832dd4U, 0x7421d358U, 0xe0692949U, 0xc9c8448eU,
+    0xc2896a75U, 0x8e7978f4U, 0x583e6b99U, 0xb971dd27U,
+    0xe14fb6beU, 0x88ad17f0U, 0x20ac66c9U, 0xce3ab47dU,
+    0xdf4a1863U, 0x1a3182e5U, 0x51336097U, 0x537f4562U,
+    0x6477e0b1U, 0x6bae84bbU, 0x81a01cfeU, 0x082b94f9U,
+    0x48685870U, 0x45fd198fU, 0xde6c8794U, 0x7bf8b752U,
+    0x73d323abU, 0x4b02e272U, 0x1f8f57e3U, 0x55ab2a66U,
+    0xeb2807b2U, 0xb5c2032fU, 0xc57b9a86U, 0x3708a5d3U,
+    0x2887f230U, 0xbfa5b223U, 0x036aba02U, 0x16825cedU,
+    0xcf1c2b8aU, 0x79b492a7U, 0x07f2f0f3U, 0x69e2a14eU,
+    0xdaf4cd65U, 0x05bed506U, 0x34621fd1U, 0xa6fe8ac4U,
+    0x2e539d34U, 0xf355a0a2U, 0x8ae13205U, 0xf6eb75a4U,
+    0x83ec390bU, 0x60efaa40U, 0x719f065eU, 0x6e1051bdU,
+    0x218af93eU, 0xdd063d96U, 0x3e05aeddU, 0xe6bd464dU,
+    0x548db591U, 0xc45d0571U, 0x06d46f04U, 0x5015ff60U,
+    0x98fb2419U, 0xbde997d6U, 0x4043cc89U, 0xd99e7767U,
+    0xe842bdb0U, 0x898b8807U, 0x195b38e7U, 0xc8eedb79U,
+    0x7c0a47a1U, 0x420fe97cU, 0x841ec9f8U, 0x00000000U,
+    0x80868309U, 0x2bed4832U, 0x1170ac1eU, 0x5a724e6cU,
+    0x0efffbfdU, 0x8538560fU, 0xaed51e3dU, 0x2d392736U,
+    0x0fd9640aU, 0x5ca62168U, 0x5b54d19bU, 0x362e3a24U,
+    0x0a67b10cU, 0x57e70f93U, 0xee96d2b4U, 0x9b919e1bU,
+    0xc0c54f80U, 0xdc20a261U, 0x774b695aU, 0x121a161cU,
+    0x93ba0ae2U, 0xa02ae5c0U, 0x22e0433cU, 0x1b171d12U,
+    0x090d0b0eU, 0x8bc7adf2U, 0xb6a8b92dU, 0x1ea9c814U,
+    0xf1198557U, 0x75074cafU, 0x99ddbbeeU, 0x7f60fda3U,
+    0x01269ff7U, 0x72f5bc5cU, 0x663bc544U, 0xfb7e345bU,
+    0x4329768bU, 0x23c6dccbU, 0xedfc68b6U, 0xe4f163b8U,
+    0x31dccad7U, 0x63851042U, 0x97224013U, 0xc6112084U,
+    0x4a247d85U, 0xbb3df8d2U, 0xf93211aeU, 0x29a16dc7U,
+    0x9e2f4b1dU, 0xb230f3dcU, 0x8652ec0dU, 0xc1e3d077U,
+    0xb3166c2bU, 0x70b999a9U, 0x9448fa11U, 0xe9642247U,
+    0xfc8cc4a8U, 0xf03f1aa0U, 0x7d2cd856U, 0x3390ef22U,
+    0x494ec787U, 0x38d1c1d9U, 0xcaa2fe8cU, 0xd40b3698U,
+    0xf581cfa6U, 0x7ade28a5U, 0xb78e26daU, 0xadbfa43fU,
+    0x3a9de42cU, 0x78920d50U, 0x5fcc9b6aU, 0x7e466254U,
+    0x8d13c2f6U, 0xd8b8e890U, 0x39f75e2eU, 0xc3aff582U,
+    0x5d80be9fU, 0xd0937c69U, 0xd52da96fU, 0x2512b3cfU,
+    0xac993bc8U, 0x187da710U, 0x9c636ee8U, 0x3bbb7bdbU,
+    0x267809cdU, 0x5918f46eU, 0x9ab701ecU, 0x4f9aa883U,
+    0x956e65e6U, 0xffe67eaaU, 0xbccf0821U, 0x15e8e6efU,
+    0xe79bd9baU, 0x6f36ce4aU, 0x9f09d4eaU, 0xb07cd629U,
+    0xa4b2af31U, 0x3f23312aU, 0xa59430c6U, 0xa266c035U,
+    0x4ebc3774U, 0x82caa6fcU, 0x90d0b0e0U, 0xa7d81533U,
+    0x04984af1U, 0xecdaf741U, 0xcd500e7fU, 0x91f62f17U,
+    0x4dd68d76U, 0xefb04d43U, 0xaa4d54ccU, 0x9604dfe4U,
+    0xd1b5e39eU, 0x6a881b4cU, 0x2c1fb8c1U, 0x65517f46U,
+    0x5eea049dU, 0x8c355d01U, 0x877473faU, 0x0b412efbU,
+    0x671d5ab3U, 0xdbd25292U, 0x105633e9U, 0xd647136dU,
+    0xd7618c9aU, 0xa10c7a37U, 0xf8148e59U, 0x133c89ebU,
+    0xa927eeceU, 0x61c935b7U, 0x1ce5ede1U, 0x47b13c7aU,
+    0xd2df599cU, 0xf2733f55U, 0x14ce7918U, 0xc737bf73U,
+    0xf7cdea53U, 0xfdaa5b5fU, 0x3d6f14dfU, 0x44db8678U,
+    0xaff381caU, 0x68c43eb9U, 0x24342c38U, 0xa3405fc2U,
+    0x1dc37216U, 0xe2250cbcU, 0x3c498b28U, 0x0d9541ffU,
+    0xa8017139U, 0x0cb3de08U, 0xb4e49cd8U, 0x56c19064U,
+    0xcb84617bU, 0x32b670d5U, 0x6c5c7448U, 0xb85742d0U,
+};
+static const u8 Td4[256] = {
+    0x52U, 0x09U, 0x6aU, 0xd5U, 0x30U, 0x36U, 0xa5U, 0x38U,
+    0xbfU, 0x40U, 0xa3U, 0x9eU, 0x81U, 0xf3U, 0xd7U, 0xfbU,
+    0x7cU, 0xe3U, 0x39U, 0x82U, 0x9bU, 0x2fU, 0xffU, 0x87U,
+    0x34U, 0x8eU, 0x43U, 0x44U, 0xc4U, 0xdeU, 0xe9U, 0xcbU,
+    0x54U, 0x7bU, 0x94U, 0x32U, 0xa6U, 0xc2U, 0x23U, 0x3dU,
+    0xeeU, 0x4cU, 0x95U, 0x0bU, 0x42U, 0xfaU, 0xc3U, 0x4eU,
+    0x08U, 0x2eU, 0xa1U, 0x66U, 0x28U, 0xd9U, 0x24U, 0xb2U,
+    0x76U, 0x5bU, 0xa2U, 0x49U, 0x6dU, 0x8bU, 0xd1U, 0x25U,
+    0x72U, 0xf8U, 0xf6U, 0x64U, 0x86U, 0x68U, 0x98U, 0x16U,
+    0xd4U, 0xa4U, 0x5cU, 0xccU, 0x5dU, 0x65U, 0xb6U, 0x92U,
+    0x6cU, 0x70U, 0x48U, 0x50U, 0xfdU, 0xedU, 0xb9U, 0xdaU,
+    0x5eU, 0x15U, 0x46U, 0x57U, 0xa7U, 0x8dU, 0x9dU, 0x84U,
+    0x90U, 0xd8U, 0xabU, 0x00U, 0x8cU, 0xbcU, 0xd3U, 0x0aU,
+    0xf7U, 0xe4U, 0x58U, 0x05U, 0xb8U, 0xb3U, 0x45U, 0x06U,
+    0xd0U, 0x2cU, 0x1eU, 0x8fU, 0xcaU, 0x3fU, 0x0fU, 0x02U,
+    0xc1U, 0xafU, 0xbdU, 0x03U, 0x01U, 0x13U, 0x8aU, 0x6bU,
+    0x3aU, 0x91U, 0x11U, 0x41U, 0x4fU, 0x67U, 0xdcU, 0xeaU,
+    0x97U, 0xf2U, 0xcfU, 0xceU, 0xf0U, 0xb4U, 0xe6U, 0x73U,
+    0x96U, 0xacU, 0x74U, 0x22U, 0xe7U, 0xadU, 0x35U, 0x85U,
+    0xe2U, 0xf9U, 0x37U, 0xe8U, 0x1cU, 0x75U, 0xdfU, 0x6eU,
+    0x47U, 0xf1U, 0x1aU, 0x71U, 0x1dU, 0x29U, 0xc5U, 0x89U,
+    0x6fU, 0xb7U, 0x62U, 0x0eU, 0xaaU, 0x18U, 0xbeU, 0x1bU,
+    0xfcU, 0x56U, 0x3eU, 0x4bU, 0xc6U, 0xd2U, 0x79U, 0x20U,
+    0x9aU, 0xdbU, 0xc0U, 0xfeU, 0x78U, 0xcdU, 0x5aU, 0xf4U,
+    0x1fU, 0xddU, 0xa8U, 0x33U, 0x88U, 0x07U, 0xc7U, 0x31U,
+    0xb1U, 0x12U, 0x10U, 0x59U, 0x27U, 0x80U, 0xecU, 0x5fU,
+    0x60U, 0x51U, 0x7fU, 0xa9U, 0x19U, 0xb5U, 0x4aU, 0x0dU,
+    0x2dU, 0xe5U, 0x7aU, 0x9fU, 0x93U, 0xc9U, 0x9cU, 0xefU,
+    0xa0U, 0xe0U, 0x3bU, 0x4dU, 0xaeU, 0x2aU, 0xf5U, 0xb0U,
+    0xc8U, 0xebU, 0xbbU, 0x3cU, 0x83U, 0x53U, 0x99U, 0x61U,
+    0x17U, 0x2bU, 0x04U, 0x7eU, 0xbaU, 0x77U, 0xd6U, 0x26U,
+    0xe1U, 0x69U, 0x14U, 0x63U, 0x55U, 0x21U, 0x0cU, 0x7dU,
+};
+static const u32 rcon[] = {
+    0x01000000, 0x02000000, 0x04000000, 0x08000000,
+    0x10000000, 0x20000000, 0x40000000, 0x80000000,
+    0x1B000000, 0x36000000, /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
+};
+
+/**
+ * Expand the cipher key into the encryption key schedule.
+ */
+int AES_set_encrypt_key(const unsigned char *userKey, const int bits,
+                        AES_KEY *key)
+{
+
+    u32 *rk;
+    int i = 0;
+    u32 temp;
+
+    if (!userKey || !key)
+        return -1;
+    if (bits != 128 && bits != 192 && bits != 256)
+        return -2;
+
+    rk = key->rd_key;
+
+    if (bits == 128)
+        key->rounds = 10;
+    else if (bits == 192)
+        key->rounds = 12;
+    else
+        key->rounds = 14;
+
+    rk[0] = GETU32(userKey     );
+    rk[1] = GETU32(userKey +  4);
+    rk[2] = GETU32(userKey +  8);
+    rk[3] = GETU32(userKey + 12);
+    if (bits == 128) {
+        while (1) {
+            temp  = rk[3];
+            rk[4] = rk[0] ^
+                (Te2[(temp >> 16) & 0xff] & 0xff000000) ^
+                (Te3[(temp >>  8) & 0xff] & 0x00ff0000) ^
+                (Te0[(temp      ) & 0xff] & 0x0000ff00) ^
+                (Te1[(temp >> 24)       ] & 0x000000ff) ^
+                rcon[i];
+            rk[5] = rk[1] ^ rk[4];
+            rk[6] = rk[2] ^ rk[5];
+            rk[7] = rk[3] ^ rk[6];
+            if (++i == 10) {
+                return 0;
+            }
+            rk += 4;
+        }
+    }
+    rk[4] = GETU32(userKey + 16);
+    rk[5] = GETU32(userKey + 20);
+    if (bits == 192) {
+        while (1) {
+            temp = rk[ 5];
+            rk[ 6] = rk[ 0] ^
+                (Te2[(temp >> 16) & 0xff] & 0xff000000) ^
+                (Te3[(temp >>  8) & 0xff] & 0x00ff0000) ^
+                (Te0[(temp      ) & 0xff] & 0x0000ff00) ^
+                (Te1[(temp >> 24)       ] & 0x000000ff) ^
+                rcon[i];
+            rk[ 7] = rk[ 1] ^ rk[ 6];
+            rk[ 8] = rk[ 2] ^ rk[ 7];
+            rk[ 9] = rk[ 3] ^ rk[ 8];
+            if (++i == 8) {
+                return 0;
+            }
+            rk[10] = rk[ 4] ^ rk[ 9];
+            rk[11] = rk[ 5] ^ rk[10];
+            rk += 6;
+        }
+    }
+    rk[6] = GETU32(userKey + 24);
+    rk[7] = GETU32(userKey + 28);
+    if (bits == 256) {
+        while (1) {
+            temp = rk[ 7];
+            rk[ 8] = rk[ 0] ^
+                (Te2[(temp >> 16) & 0xff] & 0xff000000) ^
+                (Te3[(temp >>  8) & 0xff] & 0x00ff0000) ^
+                (Te0[(temp      ) & 0xff] & 0x0000ff00) ^
+                (Te1[(temp >> 24)       ] & 0x000000ff) ^
+                rcon[i];
+            rk[ 9] = rk[ 1] ^ rk[ 8];
+            rk[10] = rk[ 2] ^ rk[ 9];
+            rk[11] = rk[ 3] ^ rk[10];
+            if (++i == 7) {
+                return 0;
+            }
+            temp = rk[11];
+            rk[12] = rk[ 4] ^
+                (Te2[(temp >> 24)       ] & 0xff000000) ^
+                (Te3[(temp >> 16) & 0xff] & 0x00ff0000) ^
+                (Te0[(temp >>  8) & 0xff] & 0x0000ff00) ^
+                (Te1[(temp      ) & 0xff] & 0x000000ff);
+            rk[13] = rk[ 5] ^ rk[12];
+            rk[14] = rk[ 6] ^ rk[13];
+            rk[15] = rk[ 7] ^ rk[14];
+
+            rk += 8;
+            }
+    }
+    return 0;
+}
+
+/**
+ * Expand the cipher key into the decryption key schedule.
+ */
+int AES_set_decrypt_key(const unsigned char *userKey, const int bits,
+                        AES_KEY *key)
+{
+
+    u32 *rk;
+    int i, j, status;
+    u32 temp;
+
+    /* first, start with an encryption schedule */
+    status = AES_set_encrypt_key(userKey, bits, key);
+    if (status < 0)
+        return status;
+
+    rk = key->rd_key;
+
+    /* invert the order of the round keys: */
+    for (i = 0, j = 4*(key->rounds); i < j; i += 4, j -= 4) {
+        temp = rk[i    ]; rk[i    ] = rk[j    ]; rk[j    ] = temp;
+        temp = rk[i + 1]; rk[i + 1] = rk[j + 1]; rk[j + 1] = temp;
+        temp = rk[i + 2]; rk[i + 2] = rk[j + 2]; rk[j + 2] = temp;
+        temp = rk[i + 3]; rk[i + 3] = rk[j + 3]; rk[j + 3] = temp;
+    }
+    /* apply the inverse MixColumn transform to all round keys but the first and the last: */
+    for (i = 1; i < (key->rounds); i++) {
+        rk += 4;
+        rk[0] =
+            Td0[Te1[(rk[0] >> 24)       ] & 0xff] ^
+            Td1[Te1[(rk[0] >> 16) & 0xff] & 0xff] ^
+            Td2[Te1[(rk[0] >>  8) & 0xff] & 0xff] ^
+            Td3[Te1[(rk[0]      ) & 0xff] & 0xff];
+        rk[1] =
+            Td0[Te1[(rk[1] >> 24)       ] & 0xff] ^
+            Td1[Te1[(rk[1] >> 16) & 0xff] & 0xff] ^
+            Td2[Te1[(rk[1] >>  8) & 0xff] & 0xff] ^
+            Td3[Te1[(rk[1]      ) & 0xff] & 0xff];
+        rk[2] =
+            Td0[Te1[(rk[2] >> 24)       ] & 0xff] ^
+            Td1[Te1[(rk[2] >> 16) & 0xff] & 0xff] ^
+            Td2[Te1[(rk[2] >>  8) & 0xff] & 0xff] ^
+            Td3[Te1[(rk[2]      ) & 0xff] & 0xff];
+        rk[3] =
+            Td0[Te1[(rk[3] >> 24)       ] & 0xff] ^
+            Td1[Te1[(rk[3] >> 16) & 0xff] & 0xff] ^
+            Td2[Te1[(rk[3] >>  8) & 0xff] & 0xff] ^
+            Td3[Te1[(rk[3]      ) & 0xff] & 0xff];
+    }
+    return 0;
+}
+
+/*
+ * Encrypt a single block
+ * in and out can overlap
+ */
+void AES_encrypt(const unsigned char *in, unsigned char *out,
+                 const AES_KEY *key) {
+
+    const u32 *rk;
+    u32 s0, s1, s2, s3, t0, t1, t2, t3;
+#ifndef FULL_UNROLL
+    int r;
+#endif /* ?FULL_UNROLL */
+
+    assert(in && out && key);
+    rk = key->rd_key;
+
+    /*
+     * map byte array block to cipher state
+     * and add initial round key:
+     */
+    s0 = GETU32(in     ) ^ rk[0];
+    s1 = GETU32(in +  4) ^ rk[1];
+    s2 = GETU32(in +  8) ^ rk[2];
+    s3 = GETU32(in + 12) ^ rk[3];
+#ifdef FULL_UNROLL
+    /* round 1: */
+    t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[ 4];
+    t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[ 5];
+    t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[ 6];
+    t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[ 7];
+    /* round 2: */
+    s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[ 8];
+    s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[ 9];
+    s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[10];
+    s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[11];
+    /* round 3: */
+    t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[12];
+    t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[13];
+    t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[14];
+    t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[15];
+    /* round 4: */
+    s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[16];
+    s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[17];
+    s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[18];
+    s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[19];
+    /* round 5: */
+    t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[20];
+    t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[21];
+    t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[22];
+    t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[23];
+    /* round 6: */
+    s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[24];
+    s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[25];
+    s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[26];
+    s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[27];
+    /* round 7: */
+    t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[28];
+    t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[29];
+    t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[30];
+    t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[31];
+    /* round 8: */
+    s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[32];
+    s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[33];
+    s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[34];
+    s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[35];
+    /* round 9: */
+    t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[36];
+    t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[37];
+    t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[38];
+    t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[39];
+    if (key->rounds > 10) {
+        /* round 10: */
+        s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[40];
+        s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[41];
+        s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[42];
+        s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[43];
+        /* round 11: */
+        t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[44];
+        t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[45];
+        t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[46];
+        t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[47];
+        if (key->rounds > 12) {
+            /* round 12: */
+            s0 = Te0[t0 >> 24] ^ Te1[(t1 >> 16) & 0xff] ^ Te2[(t2 >>  8) & 0xff] ^ Te3[t3 & 0xff] ^ rk[48];
+            s1 = Te0[t1 >> 24] ^ Te1[(t2 >> 16) & 0xff] ^ Te2[(t3 >>  8) & 0xff] ^ Te3[t0 & 0xff] ^ rk[49];
+            s2 = Te0[t2 >> 24] ^ Te1[(t3 >> 16) & 0xff] ^ Te2[(t0 >>  8) & 0xff] ^ Te3[t1 & 0xff] ^ rk[50];
+            s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >>  8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[51];
+            /* round 13: */
+            t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >>  8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[52];
+            t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >>  8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[53];
+            t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >>  8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[54];
+            t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >>  8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[55];
+        }
+    }
+    rk += key->rounds << 2;
+#else  /* !FULL_UNROLL */
+    /*
+     * Nr - 1 full rounds:
+     */
+    r = key->rounds >> 1;
+    for (;;) {
+        t0 =
+            Te0[(s0 >> 24)       ] ^
+            Te1[(s1 >> 16) & 0xff] ^
+            Te2[(s2 >>  8) & 0xff] ^
+            Te3[(s3      ) & 0xff] ^
+            rk[4];
+        t1 =
+            Te0[(s1 >> 24)       ] ^
+            Te1[(s2 >> 16) & 0xff] ^
+            Te2[(s3 >>  8) & 0xff] ^
+            Te3[(s0      ) & 0xff] ^
+            rk[5];
+        t2 =
+            Te0[(s2 >> 24)       ] ^
+            Te1[(s3 >> 16) & 0xff] ^
+            Te2[(s0 >>  8) & 0xff] ^
+            Te3[(s1      ) & 0xff] ^
+            rk[6];
+        t3 =
+            Te0[(s3 >> 24)       ] ^
+            Te1[(s0 >> 16) & 0xff] ^
+            Te2[(s1 >>  8) & 0xff] ^
+            Te3[(s2      ) & 0xff] ^
+            rk[7];
+
+        rk += 8;
+        if (--r == 0) {
+            break;
+        }
+
+        s0 =
+            Te0[(t0 >> 24)       ] ^
+            Te1[(t1 >> 16) & 0xff] ^
+            Te2[(t2 >>  8) & 0xff] ^
+            Te3[(t3      ) & 0xff] ^
+            rk[0];
+        s1 =
+            Te0[(t1 >> 24)       ] ^
+            Te1[(t2 >> 16) & 0xff] ^
+            Te2[(t3 >>  8) & 0xff] ^
+            Te3[(t0      ) & 0xff] ^
+            rk[1];
+        s2 =
+            Te0[(t2 >> 24)       ] ^
+            Te1[(t3 >> 16) & 0xff] ^
+            Te2[(t0 >>  8) & 0xff] ^
+            Te3[(t1      ) & 0xff] ^
+            rk[2];
+        s3 =
+            Te0[(t3 >> 24)       ] ^
+            Te1[(t0 >> 16) & 0xff] ^
+            Te2[(t1 >>  8) & 0xff] ^
+            Te3[(t2      ) & 0xff] ^
+            rk[3];
+    }
+#endif /* ?FULL_UNROLL */
+    /*
+     * apply last round and
+     * map cipher state to byte array block:
+     */
+    s0 =
+        (Te2[(t0 >> 24)       ] & 0xff000000) ^
+        (Te3[(t1 >> 16) & 0xff] & 0x00ff0000) ^
+        (Te0[(t2 >>  8) & 0xff] & 0x0000ff00) ^
+        (Te1[(t3      ) & 0xff] & 0x000000ff) ^
+        rk[0];
+    PUTU32(out     , s0);
+    s1 =
+        (Te2[(t1 >> 24)       ] & 0xff000000) ^
+        (Te3[(t2 >> 16) & 0xff] & 0x00ff0000) ^
+        (Te0[(t3 >>  8) & 0xff] & 0x0000ff00) ^
+        (Te1[(t0      ) & 0xff] & 0x000000ff) ^
+        rk[1];
+    PUTU32(out +  4, s1);
+    s2 =
+        (Te2[(t2 >> 24)       ] & 0xff000000) ^
+        (Te3[(t3 >> 16) & 0xff] & 0x00ff0000) ^
+        (Te0[(t0 >>  8) & 0xff] & 0x0000ff00) ^
+        (Te1[(t1      ) & 0xff] & 0x000000ff) ^
+        rk[2];
+    PUTU32(out +  8, s2);
+    s3 =
+        (Te2[(t3 >> 24)       ] & 0xff000000) ^
+        (Te3[(t0 >> 16) & 0xff] & 0x00ff0000) ^
+        (Te0[(t1 >>  8) & 0xff] & 0x0000ff00) ^
+        (Te1[(t2      ) & 0xff] & 0x000000ff) ^
+        rk[3];
+    PUTU32(out + 12, s3);
+}
+
+/*
+ * Decrypt a single block
+ * in and out can overlap
+ */
+void AES_decrypt(const unsigned char *in, unsigned char *out,
+                 const AES_KEY *key)
+{
+
+    const u32 *rk;
+    u32 s0, s1, s2, s3, t0, t1, t2, t3;
+#ifndef FULL_UNROLL
+    int r;
+#endif /* ?FULL_UNROLL */
+
+    assert(in && out && key);
+    rk = key->rd_key;
+
+    /*
+     * map byte array block to cipher state
+     * and add initial round key:
+     */
+    s0 = GETU32(in     ) ^ rk[0];
+    s1 = GETU32(in +  4) ^ rk[1];
+    s2 = GETU32(in +  8) ^ rk[2];
+    s3 = GETU32(in + 12) ^ rk[3];
+#ifdef FULL_UNROLL
+    /* round 1: */
+    t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[ 4];
+    t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[ 5];
+    t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[ 6];
+    t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[ 7];
+    /* round 2: */
+    s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[ 8];
+    s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[ 9];
+    s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[10];
+    s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[11];
+    /* round 3: */
+    t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[12];
+    t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[13];
+    t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[14];
+    t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[15];
+    /* round 4: */
+    s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[16];
+    s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[17];
+    s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[18];
+    s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[19];
+    /* round 5: */
+    t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[20];
+    t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[21];
+    t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[22];
+    t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[23];
+    /* round 6: */
+    s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[24];
+    s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[25];
+    s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[26];
+    s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[27];
+    /* round 7: */
+    t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[28];
+    t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[29];
+    t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[30];
+    t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[31];
+    /* round 8: */
+    s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[32];
+    s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[33];
+    s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[34];
+    s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[35];
+    /* round 9: */
+    t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[36];
+    t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[37];
+    t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[38];
+    t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[39];
+    if (key->rounds > 10) {
+        /* round 10: */
+        s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[40];
+        s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[41];
+        s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[42];
+        s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[43];
+        /* round 11: */
+        t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[44];
+        t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[45];
+        t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[46];
+        t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[47];
+        if (key->rounds > 12) {
+            /* round 12: */
+            s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[48];
+            s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[49];
+            s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[50];
+            s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[51];
+            /* round 13: */
+            t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[52];
+            t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[53];
+            t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[54];
+            t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[55];
+        }
+    }
+    rk += key->rounds << 2;
+#else  /* !FULL_UNROLL */
+    /*
+     * Nr - 1 full rounds:
+     */
+    r = key->rounds >> 1;
+    for (;;) {
+        t0 =
+            Td0[(s0 >> 24)       ] ^
+            Td1[(s3 >> 16) & 0xff] ^
+            Td2[(s2 >>  8) & 0xff] ^
+            Td3[(s1      ) & 0xff] ^
+            rk[4];
+        t1 =
+            Td0[(s1 >> 24)       ] ^
+            Td1[(s0 >> 16) & 0xff] ^
+            Td2[(s3 >>  8) & 0xff] ^
+            Td3[(s2      ) & 0xff] ^
+            rk[5];
+        t2 =
+            Td0[(s2 >> 24)       ] ^
+            Td1[(s1 >> 16) & 0xff] ^
+            Td2[(s0 >>  8) & 0xff] ^
+            Td3[(s3      ) & 0xff] ^
+            rk[6];
+        t3 =
+            Td0[(s3 >> 24)       ] ^
+            Td1[(s2 >> 16) & 0xff] ^
+            Td2[(s1 >>  8) & 0xff] ^
+            Td3[(s0      ) & 0xff] ^
+            rk[7];
+
+        rk += 8;
+        if (--r == 0) {
+            break;
+        }
+
+        s0 =
+            Td0[(t0 >> 24)       ] ^
+            Td1[(t3 >> 16) & 0xff] ^
+            Td2[(t2 >>  8) & 0xff] ^
+            Td3[(t1      ) & 0xff] ^
+            rk[0];
+        s1 =
+            Td0[(t1 >> 24)       ] ^
+            Td1[(t0 >> 16) & 0xff] ^
+            Td2[(t3 >>  8) & 0xff] ^
+            Td3[(t2      ) & 0xff] ^
+            rk[1];
+        s2 =
+            Td0[(t2 >> 24)       ] ^
+            Td1[(t1 >> 16) & 0xff] ^
+            Td2[(t0 >>  8) & 0xff] ^
+            Td3[(t3      ) & 0xff] ^
+            rk[2];
+        s3 =
+            Td0[(t3 >> 24)       ] ^
+            Td1[(t2 >> 16) & 0xff] ^
+            Td2[(t1 >>  8) & 0xff] ^
+            Td3[(t0      ) & 0xff] ^
+            rk[3];
+    }
+#endif /* ?FULL_UNROLL */
+    /*
+     * apply last round and
+     * map cipher state to byte array block:
+     */
+    s0 =
+        ((u32)Td4[(t0 >> 24)       ] << 24) ^
+        ((u32)Td4[(t3 >> 16) & 0xff] << 16) ^
+        ((u32)Td4[(t2 >>  8) & 0xff] <<  8) ^
+        ((u32)Td4[(t1      ) & 0xff])       ^
+        rk[0];
+    PUTU32(out     , s0);
+    s1 =
+        ((u32)Td4[(t1 >> 24)       ] << 24) ^
+        ((u32)Td4[(t0 >> 16) & 0xff] << 16) ^
+        ((u32)Td4[(t3 >>  8) & 0xff] <<  8) ^
+        ((u32)Td4[(t2      ) & 0xff])       ^
+        rk[1];
+    PUTU32(out +  4, s1);
+    s2 =
+        ((u32)Td4[(t2 >> 24)       ] << 24) ^
+        ((u32)Td4[(t1 >> 16) & 0xff] << 16) ^
+        ((u32)Td4[(t0 >>  8) & 0xff] <<  8) ^
+        ((u32)Td4[(t3      ) & 0xff])       ^
+        rk[2];
+    PUTU32(out +  8, s2);
+    s3 =
+        ((u32)Td4[(t3 >> 24)       ] << 24) ^
+        ((u32)Td4[(t2 >> 16) & 0xff] << 16) ^
+        ((u32)Td4[(t1 >>  8) & 0xff] <<  8) ^
+        ((u32)Td4[(t0      ) & 0xff])       ^
+        rk[3];
+    PUTU32(out + 12, s3);
+}
+
+#else /* AES_ASM */
+
+static const u8 Te4[256] = {
+    0x63U, 0x7cU, 0x77U, 0x7bU, 0xf2U, 0x6bU, 0x6fU, 0xc5U,
+    0x30U, 0x01U, 0x67U, 0x2bU, 0xfeU, 0xd7U, 0xabU, 0x76U,
+    0xcaU, 0x82U, 0xc9U, 0x7dU, 0xfaU, 0x59U, 0x47U, 0xf0U,
+    0xadU, 0xd4U, 0xa2U, 0xafU, 0x9cU, 0xa4U, 0x72U, 0xc0U,
+    0xb7U, 0xfdU, 0x93U, 0x26U, 0x36U, 0x3fU, 0xf7U, 0xccU,
+    0x34U, 0xa5U, 0xe5U, 0xf1U, 0x71U, 0xd8U, 0x31U, 0x15U,
+    0x04U, 0xc7U, 0x23U, 0xc3U, 0x18U, 0x96U, 0x05U, 0x9aU,
+    0x07U, 0x12U, 0x80U, 0xe2U, 0xebU, 0x27U, 0xb2U, 0x75U,
+    0x09U, 0x83U, 0x2cU, 0x1aU, 0x1bU, 0x6eU, 0x5aU, 0xa0U,
+    0x52U, 0x3bU, 0xd6U, 0xb3U, 0x29U, 0xe3U, 0x2fU, 0x84U,
+    0x53U, 0xd1U, 0x00U, 0xedU, 0x20U, 0xfcU, 0xb1U, 0x5bU,
+    0x6aU, 0xcbU, 0xbeU, 0x39U, 0x4aU, 0x4cU, 0x58U, 0xcfU,
+    0xd0U, 0xefU, 0xaaU, 0xfbU, 0x43U, 0x4dU, 0x33U, 0x85U,
+    0x45U, 0xf9U, 0x02U, 0x7fU, 0x50U, 0x3cU, 0x9fU, 0xa8U,
+    0x51U, 0xa3U, 0x40U, 0x8fU, 0x92U, 0x9dU, 0x38U, 0xf5U,
+    0xbcU, 0xb6U, 0xdaU, 0x21U, 0x10U, 0xffU, 0xf3U, 0xd2U,
+    0xcdU, 0x0cU, 0x13U, 0xecU, 0x5fU, 0x97U, 0x44U, 0x17U,
+    0xc4U, 0xa7U, 0x7eU, 0x3dU, 0x64U, 0x5dU, 0x19U, 0x73U,
+    0x60U, 0x81U, 0x4fU, 0xdcU, 0x22U, 0x2aU, 0x90U, 0x88U,
+    0x46U, 0xeeU, 0xb8U, 0x14U, 0xdeU, 0x5eU, 0x0bU, 0xdbU,
+    0xe0U, 0x32U, 0x3aU, 0x0aU, 0x49U, 0x06U, 0x24U, 0x5cU,
+    0xc2U, 0xd3U, 0xacU, 0x62U, 0x91U, 0x95U, 0xe4U, 0x79U,
+    0xe7U, 0xc8U, 0x37U, 0x6dU, 0x8dU, 0xd5U, 0x4eU, 0xa9U,
+    0x6cU, 0x56U, 0xf4U, 0xeaU, 0x65U, 0x7aU, 0xaeU, 0x08U,
+    0xbaU, 0x78U, 0x25U, 0x2eU, 0x1cU, 0xa6U, 0xb4U, 0xc6U,
+    0xe8U, 0xddU, 0x74U, 0x1fU, 0x4bU, 0xbdU, 0x8bU, 0x8aU,
+    0x70U, 0x3eU, 0xb5U, 0x66U, 0x48U, 0x03U, 0xf6U, 0x0eU,
+    0x61U, 0x35U, 0x57U, 0xb9U, 0x86U, 0xc1U, 0x1dU, 0x9eU,
+    0xe1U, 0xf8U, 0x98U, 0x11U, 0x69U, 0xd9U, 0x8eU, 0x94U,
+    0x9bU, 0x1eU, 0x87U, 0xe9U, 0xceU, 0x55U, 0x28U, 0xdfU,
+    0x8cU, 0xa1U, 0x89U, 0x0dU, 0xbfU, 0xe6U, 0x42U, 0x68U,
+    0x41U, 0x99U, 0x2dU, 0x0fU, 0xb0U, 0x54U, 0xbbU, 0x16U
+};
+static const u32 rcon[] = {
+    0x01000000, 0x02000000, 0x04000000, 0x08000000,
+    0x10000000, 0x20000000, 0x40000000, 0x80000000,
+    0x1B000000, 0x36000000, /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
+};
+
+/**
+ * Expand the cipher key into the encryption key schedule.
+ */
+int AES_set_encrypt_key(const unsigned char *userKey, const int bits,
+                        AES_KEY *key)
+{
+    u32 *rk;
+    int i = 0;
+    u32 temp;
+
+    if (!userKey || !key)
+        return -1;
+    if (bits != 128 && bits != 192 && bits != 256)
+        return -2;
+
+    rk = key->rd_key;
+
+    if (bits == 128)
+        key->rounds = 10;
+    else if (bits == 192)
+        key->rounds = 12;
+    else
+        key->rounds = 14;
+
+    rk[0] = GETU32(userKey     );
+    rk[1] = GETU32(userKey +  4);
+    rk[2] = GETU32(userKey +  8);
+    rk[3] = GETU32(userKey + 12);
+    if (bits == 128) {
+        while (1) {
+            temp  = rk[3];
+            rk[4] = rk[0] ^
+                ((u32)Te4[(temp >> 16) & 0xff] << 24) ^
+                ((u32)Te4[(temp >>  8) & 0xff] << 16) ^
+                ((u32)Te4[(temp      ) & 0xff] << 8) ^
+                ((u32)Te4[(temp >> 24)       ]) ^
+                rcon[i];
+            rk[5] = rk[1] ^ rk[4];
+            rk[6] = rk[2] ^ rk[5];
+            rk[7] = rk[3] ^ rk[6];
+            if (++i == 10) {
+                return 0;
+            }
+            rk += 4;
+        }
+    }
+    rk[4] = GETU32(userKey + 16);
+    rk[5] = GETU32(userKey + 20);
+    if (bits == 192) {
+        while (1) {
+            temp = rk[ 5];
+            rk[ 6] = rk[ 0] ^
+                ((u32)Te4[(temp >> 16) & 0xff] << 24) ^
+                ((u32)Te4[(temp >>  8) & 0xff] << 16) ^
+                ((u32)Te4[(temp      ) & 0xff] << 8) ^
+                ((u32)Te4[(temp >> 24)       ]) ^
+                rcon[i];
+            rk[ 7] = rk[ 1] ^ rk[ 6];
+            rk[ 8] = rk[ 2] ^ rk[ 7];
+            rk[ 9] = rk[ 3] ^ rk[ 8];
+            if (++i == 8) {
+                return 0;
+            }
+            rk[10] = rk[ 4] ^ rk[ 9];
+            rk[11] = rk[ 5] ^ rk[10];
+            rk += 6;
+        }
+    }
+    rk[6] = GETU32(userKey + 24);
+    rk[7] = GETU32(userKey + 28);
+    if (bits == 256) {
+        while (1) {
+            temp = rk[ 7];
+            rk[ 8] = rk[ 0] ^
+                ((u32)Te4[(temp >> 16) & 0xff] << 24) ^
+                ((u32)Te4[(temp >>  8) & 0xff] << 16) ^
+                ((u32)Te4[(temp      ) & 0xff] << 8) ^
+                ((u32)Te4[(temp >> 24)       ]) ^
+                rcon[i];
+            rk[ 9] = rk[ 1] ^ rk[ 8];
+            rk[10] = rk[ 2] ^ rk[ 9];
+            rk[11] = rk[ 3] ^ rk[10];
+            if (++i == 7) {
+                return 0;
+            }
+            temp = rk[11];
+            rk[12] = rk[ 4] ^
+                ((u32)Te4[(temp >> 24)       ] << 24) ^
+                ((u32)Te4[(temp >> 16) & 0xff] << 16) ^
+                ((u32)Te4[(temp >>  8) & 0xff] << 8) ^
+                ((u32)Te4[(temp      ) & 0xff]);
+            rk[13] = rk[ 5] ^ rk[12];
+            rk[14] = rk[ 6] ^ rk[13];
+            rk[15] = rk[ 7] ^ rk[14];
+
+            rk += 8;
+        }
+    }
+    return 0;
+}
+
+/**
+ * Expand the cipher key into the decryption key schedule.
+ */
+int AES_set_decrypt_key(const unsigned char *userKey, const int bits,
+                        AES_KEY *key)
+{
+
+    u32 *rk;
+    int i, j, status;
+    u32 temp;
+
+    /* first, start with an encryption schedule */
+    status = AES_set_encrypt_key(userKey, bits, key);
+    if (status < 0)
+        return status;
+
+    rk = key->rd_key;
+
+    /* invert the order of the round keys: */
+    for (i = 0, j = 4*(key->rounds); i < j; i += 4, j -= 4) {
+        temp = rk[i    ]; rk[i    ] = rk[j    ]; rk[j    ] = temp;
+        temp = rk[i + 1]; rk[i + 1] = rk[j + 1]; rk[j + 1] = temp;
+        temp = rk[i + 2]; rk[i + 2] = rk[j + 2]; rk[j + 2] = temp;
+        temp = rk[i + 3]; rk[i + 3] = rk[j + 3]; rk[j + 3] = temp;
+    }
+    /* apply the inverse MixColumn transform to all round keys but the first and the last: */
+    for (i = 1; i < (key->rounds); i++) {
+        rk += 4;
+        for (j = 0; j < 4; j++) {
+            u32 tp1, tp2, tp4, tp8, tp9, tpb, tpd, tpe, m;
+
+            tp1 = rk[j];
+            m = tp1 & 0x80808080;
+            tp2 = ((tp1 & 0x7f7f7f7f) << 1) ^
+                ((m - (m >> 7)) & 0x1b1b1b1b);
+            m = tp2 & 0x80808080;
+            tp4 = ((tp2 & 0x7f7f7f7f) << 1) ^
+                ((m - (m >> 7)) & 0x1b1b1b1b);
+            m = tp4 & 0x80808080;
+            tp8 = ((tp4 & 0x7f7f7f7f) << 1) ^
+                ((m - (m >> 7)) & 0x1b1b1b1b);
+            tp9 = tp8 ^ tp1;
+            tpb = tp9 ^ tp2;
+            tpd = tp9 ^ tp4;
+            tpe = tp8 ^ tp4 ^ tp2;
+#if defined(ROTATE)
+            rk[j] = tpe ^ ROTATE(tpd,16) ^
+                ROTATE(tp9,24) ^ ROTATE(tpb,8);
+#else
+            rk[j] = tpe ^ (tpd >> 16) ^ (tpd << 16) ^
+                (tp9 >> 8) ^ (tp9 << 24) ^
+                (tpb >> 24) ^ (tpb << 8);
+#endif
+        }
+    }
+    return 0;
+}
+
+#endif /* AES_ASM */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_ecb.c b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_ecb.c
new file mode 100644
index 000000000..29bfc1ad6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_ecb.c
@@ -0,0 +1,26 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <assert.h>
+
+#include <openssl/aes.h>
+#include "aes_locl.h"
+
+void AES_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                     const AES_KEY *key, const int enc)
+{
+
+    assert(in && out && key);
+    assert((AES_ENCRYPT == enc) || (AES_DECRYPT == enc));
+
+    if (AES_ENCRYPT == enc)
+        AES_encrypt(in, out, key);
+    else
+        AES_decrypt(in, out, key);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_ige.c b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_ige.c
new file mode 100644
index 000000000..75f796cf3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_ige.c
@@ -0,0 +1,284 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+
+#include <openssl/aes.h>
+#include "aes_locl.h"
+
+#define N_WORDS (AES_BLOCK_SIZE / sizeof(unsigned long))
+typedef struct {
+    unsigned long data[N_WORDS];
+} aes_block_t;
+
+/* XXX: probably some better way to do this */
+#if defined(__i386__) || defined(__x86_64__)
+# define UNALIGNED_MEMOPS_ARE_FAST 1
+#else
+# define UNALIGNED_MEMOPS_ARE_FAST 0
+#endif
+
+#if UNALIGNED_MEMOPS_ARE_FAST
+# define load_block(d, s)        (d) = *(const aes_block_t *)(s)
+# define store_block(d, s)       *(aes_block_t *)(d) = (s)
+#else
+# define load_block(d, s)        memcpy((d).data, (s), AES_BLOCK_SIZE)
+# define store_block(d, s)       memcpy((d), (s).data, AES_BLOCK_SIZE)
+#endif
+
+/* N.B. The IV for this mode is _twice_ the block size */
+
+void AES_ige_encrypt(const unsigned char *in, unsigned char *out,
+                     size_t length, const AES_KEY *key,
+                     unsigned char *ivec, const int enc)
+{
+    size_t n;
+    size_t len = length;
+
+    if (length == 0)
+        return;
+
+    OPENSSL_assert(in && out && key && ivec);
+    OPENSSL_assert((AES_ENCRYPT == enc) || (AES_DECRYPT == enc));
+    OPENSSL_assert((length % AES_BLOCK_SIZE) == 0);
+
+    len = length / AES_BLOCK_SIZE;
+
+    if (AES_ENCRYPT == enc) {
+        if (in != out &&
+            (UNALIGNED_MEMOPS_ARE_FAST
+             || ((size_t)in | (size_t)out | (size_t)ivec) % sizeof(long) ==
+             0)) {
+            aes_block_t *ivp = (aes_block_t *) ivec;
+            aes_block_t *iv2p = (aes_block_t *) (ivec + AES_BLOCK_SIZE);
+
+            while (len) {
+                aes_block_t *inp = (aes_block_t *) in;
+                aes_block_t *outp = (aes_block_t *) out;
+
+                for (n = 0; n < N_WORDS; ++n)
+                    outp->data[n] = inp->data[n] ^ ivp->data[n];
+                AES_encrypt((unsigned char *)outp->data,
+                            (unsigned char *)outp->data, key);
+                for (n = 0; n < N_WORDS; ++n)
+                    outp->data[n] ^= iv2p->data[n];
+                ivp = outp;
+                iv2p = inp;
+                --len;
+                in += AES_BLOCK_SIZE;
+                out += AES_BLOCK_SIZE;
+            }
+            memcpy(ivec, ivp->data, AES_BLOCK_SIZE);
+            memcpy(ivec + AES_BLOCK_SIZE, iv2p->data, AES_BLOCK_SIZE);
+        } else {
+            aes_block_t tmp, tmp2;
+            aes_block_t iv;
+            aes_block_t iv2;
+
+            load_block(iv, ivec);
+            load_block(iv2, ivec + AES_BLOCK_SIZE);
+
+            while (len) {
+                load_block(tmp, in);
+                for (n = 0; n < N_WORDS; ++n)
+                    tmp2.data[n] = tmp.data[n] ^ iv.data[n];
+                AES_encrypt((unsigned char *)tmp2.data,
+                            (unsigned char *)tmp2.data, key);
+                for (n = 0; n < N_WORDS; ++n)
+                    tmp2.data[n] ^= iv2.data[n];
+                store_block(out, tmp2);
+                iv = tmp2;
+                iv2 = tmp;
+                --len;
+                in += AES_BLOCK_SIZE;
+                out += AES_BLOCK_SIZE;
+            }
+            memcpy(ivec, iv.data, AES_BLOCK_SIZE);
+            memcpy(ivec + AES_BLOCK_SIZE, iv2.data, AES_BLOCK_SIZE);
+        }
+    } else {
+        if (in != out &&
+            (UNALIGNED_MEMOPS_ARE_FAST
+             || ((size_t)in | (size_t)out | (size_t)ivec) % sizeof(long) ==
+             0)) {
+            aes_block_t *ivp = (aes_block_t *) ivec;
+            aes_block_t *iv2p = (aes_block_t *) (ivec + AES_BLOCK_SIZE);
+
+            while (len) {
+                aes_block_t tmp;
+                aes_block_t *inp = (aes_block_t *) in;
+                aes_block_t *outp = (aes_block_t *) out;
+
+                for (n = 0; n < N_WORDS; ++n)
+                    tmp.data[n] = inp->data[n] ^ iv2p->data[n];
+                AES_decrypt((unsigned char *)tmp.data,
+                            (unsigned char *)outp->data, key);
+                for (n = 0; n < N_WORDS; ++n)
+                    outp->data[n] ^= ivp->data[n];
+                ivp = inp;
+                iv2p = outp;
+                --len;
+                in += AES_BLOCK_SIZE;
+                out += AES_BLOCK_SIZE;
+            }
+            memcpy(ivec, ivp->data, AES_BLOCK_SIZE);
+            memcpy(ivec + AES_BLOCK_SIZE, iv2p->data, AES_BLOCK_SIZE);
+        } else {
+            aes_block_t tmp, tmp2;
+            aes_block_t iv;
+            aes_block_t iv2;
+
+            load_block(iv, ivec);
+            load_block(iv2, ivec + AES_BLOCK_SIZE);
+
+            while (len) {
+                load_block(tmp, in);
+                tmp2 = tmp;
+                for (n = 0; n < N_WORDS; ++n)
+                    tmp.data[n] ^= iv2.data[n];
+                AES_decrypt((unsigned char *)tmp.data,
+                            (unsigned char *)tmp.data, key);
+                for (n = 0; n < N_WORDS; ++n)
+                    tmp.data[n] ^= iv.data[n];
+                store_block(out, tmp);
+                iv = tmp2;
+                iv2 = tmp;
+                --len;
+                in += AES_BLOCK_SIZE;
+                out += AES_BLOCK_SIZE;
+            }
+            memcpy(ivec, iv.data, AES_BLOCK_SIZE);
+            memcpy(ivec + AES_BLOCK_SIZE, iv2.data, AES_BLOCK_SIZE);
+        }
+    }
+}
+
+/*
+ * Note that its effectively impossible to do biIGE in anything other
+ * than a single pass, so no provision is made for chaining.
+ */
+
+/* N.B. The IV for this mode is _four times_ the block size */
+
+void AES_bi_ige_encrypt(const unsigned char *in, unsigned char *out,
+                        size_t length, const AES_KEY *key,
+                        const AES_KEY *key2, const unsigned char *ivec,
+                        const int enc)
+{
+    size_t n;
+    size_t len = length;
+    unsigned char tmp[AES_BLOCK_SIZE];
+    unsigned char tmp2[AES_BLOCK_SIZE];
+    unsigned char tmp3[AES_BLOCK_SIZE];
+    unsigned char prev[AES_BLOCK_SIZE];
+    const unsigned char *iv;
+    const unsigned char *iv2;
+
+    OPENSSL_assert(in && out && key && ivec);
+    OPENSSL_assert((AES_ENCRYPT == enc) || (AES_DECRYPT == enc));
+    OPENSSL_assert((length % AES_BLOCK_SIZE) == 0);
+
+    if (AES_ENCRYPT == enc) {
+        /*
+         * XXX: Do a separate case for when in != out (strictly should check
+         * for overlap, too)
+         */
+
+        /* First the forward pass */
+        iv = ivec;
+        iv2 = ivec + AES_BLOCK_SIZE;
+        while (len >= AES_BLOCK_SIZE) {
+            for (n = 0; n < AES_BLOCK_SIZE; ++n)
+                out[n] = in[n] ^ iv[n];
+            AES_encrypt(out, out, key);
+            for (n = 0; n < AES_BLOCK_SIZE; ++n)
+                out[n] ^= iv2[n];
+            iv = out;
+            memcpy(prev, in, AES_BLOCK_SIZE);
+            iv2 = prev;
+            len -= AES_BLOCK_SIZE;
+            in += AES_BLOCK_SIZE;
+            out += AES_BLOCK_SIZE;
+        }
+
+        /* And now backwards */
+        iv = ivec + AES_BLOCK_SIZE * 2;
+        iv2 = ivec + AES_BLOCK_SIZE * 3;
+        len = length;
+        while (len >= AES_BLOCK_SIZE) {
+            out -= AES_BLOCK_SIZE;
+            /*
+             * XXX: reduce copies by alternating between buffers
+             */
+            memcpy(tmp, out, AES_BLOCK_SIZE);
+            for (n = 0; n < AES_BLOCK_SIZE; ++n)
+                out[n] ^= iv[n];
+            /*
+             * hexdump(stdout, "out ^ iv", out, AES_BLOCK_SIZE);
+             */
+            AES_encrypt(out, out, key);
+            /*
+             * hexdump(stdout,"enc", out, AES_BLOCK_SIZE);
+             */
+            /*
+             * hexdump(stdout,"iv2", iv2, AES_BLOCK_SIZE);
+             */
+            for (n = 0; n < AES_BLOCK_SIZE; ++n)
+                out[n] ^= iv2[n];
+            /*
+             * hexdump(stdout,"out", out, AES_BLOCK_SIZE);
+             */
+            iv = out;
+            memcpy(prev, tmp, AES_BLOCK_SIZE);
+            iv2 = prev;
+            len -= AES_BLOCK_SIZE;
+        }
+    } else {
+        /* First backwards */
+        iv = ivec + AES_BLOCK_SIZE * 2;
+        iv2 = ivec + AES_BLOCK_SIZE * 3;
+        in += length;
+        out += length;
+        while (len >= AES_BLOCK_SIZE) {
+            in -= AES_BLOCK_SIZE;
+            out -= AES_BLOCK_SIZE;
+            memcpy(tmp, in, AES_BLOCK_SIZE);
+            memcpy(tmp2, in, AES_BLOCK_SIZE);
+            for (n = 0; n < AES_BLOCK_SIZE; ++n)
+                tmp[n] ^= iv2[n];
+            AES_decrypt(tmp, out, key);
+            for (n = 0; n < AES_BLOCK_SIZE; ++n)
+                out[n] ^= iv[n];
+            memcpy(tmp3, tmp2, AES_BLOCK_SIZE);
+            iv = tmp3;
+            iv2 = out;
+            len -= AES_BLOCK_SIZE;
+        }
+
+        /* And now forwards */
+        iv = ivec;
+        iv2 = ivec + AES_BLOCK_SIZE;
+        len = length;
+        while (len >= AES_BLOCK_SIZE) {
+            memcpy(tmp, out, AES_BLOCK_SIZE);
+            memcpy(tmp2, out, AES_BLOCK_SIZE);
+            for (n = 0; n < AES_BLOCK_SIZE; ++n)
+                tmp[n] ^= iv2[n];
+            AES_decrypt(tmp, out, key);
+            for (n = 0; n < AES_BLOCK_SIZE; ++n)
+                out[n] ^= iv[n];
+            memcpy(tmp3, tmp2, AES_BLOCK_SIZE);
+            iv = tmp3;
+            iv2 = out;
+            len -= AES_BLOCK_SIZE;
+            in += AES_BLOCK_SIZE;
+            out += AES_BLOCK_SIZE;
+        }
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_locl.h
new file mode 100644
index 000000000..adee29df8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_locl.h
@@ -0,0 +1,42 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_AES_LOCL_H
+# define HEADER_AES_LOCL_H
+
+# include <openssl/e_os2.h>
+# include <stdio.h>
+# include <stdlib.h>
+# include <string.h>
+
+# if defined(_MSC_VER) && (defined(_M_IX86) || defined(_M_AMD64) || defined(_M_X64))
+#  define SWAP(x) (_lrotl(x, 8) & 0x00ff00ff | _lrotr(x, 8) & 0xff00ff00)
+#  define GETU32(p) SWAP(*((u32 *)(p)))
+#  define PUTU32(ct, st) { *((u32 *)(ct)) = SWAP((st)); }
+# else
+#  define GETU32(pt) (((u32)(pt)[0] << 24) ^ ((u32)(pt)[1] << 16) ^ ((u32)(pt)[2] <<  8) ^ ((u32)(pt)[3]))
+#  define PUTU32(ct, st) { (ct)[0] = (u8)((st) >> 24); (ct)[1] = (u8)((st) >> 16); (ct)[2] = (u8)((st) >>  8); (ct)[3] = (u8)(st); }
+# endif
+
+# ifdef AES_LONG
+typedef unsigned long u32;
+# else
+typedef unsigned int u32;
+# endif
+typedef unsigned short u16;
+typedef unsigned char u8;
+
+# define MAXKC   (256/32)
+# define MAXKB   (256/8)
+# define MAXNR   14
+
+/* This controls loop-unrolling in aes_core.c */
+# undef FULL_UNROLL
+
+#endif                          /* !HEADER_AES_LOCL_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_misc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_misc.c
new file mode 100644
index 000000000..7403c84f8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_misc.c
@@ -0,0 +1,21 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslv.h>
+#include <openssl/aes.h>
+#include "aes_locl.h"
+
+const char *AES_options(void)
+{
+#ifdef FULL_UNROLL
+    return "aes(full)";
+#else
+    return "aes(partial)";
+#endif
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_ofb.c b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_ofb.c
new file mode 100644
index 000000000..215b53858
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_ofb.c
@@ -0,0 +1,19 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/aes.h>
+#include <openssl/modes.h>
+
+void AES_ofb128_encrypt(const unsigned char *in, unsigned char *out,
+                        size_t length, const AES_KEY *key,
+                        unsigned char *ivec, int *num)
+{
+    CRYPTO_ofb128_encrypt(in, out, length, key, ivec, num,
+                          (block128_f) AES_encrypt);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_wrap.c b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_wrap.c
new file mode 100644
index 000000000..cae0b2122
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_wrap.c
@@ -0,0 +1,27 @@
+/*
+ * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/aes.h>
+#include <openssl/modes.h>
+
+int AES_wrap_key(AES_KEY *key, const unsigned char *iv,
+                 unsigned char *out,
+                 const unsigned char *in, unsigned int inlen)
+{
+    return CRYPTO_128_wrap(key, iv, out, in, inlen, (block128_f) AES_encrypt);
+}
+
+int AES_unwrap_key(AES_KEY *key, const unsigned char *iv,
+                   unsigned char *out,
+                   const unsigned char *in, unsigned int inlen)
+{
+    return CRYPTO_128_unwrap(key, iv, out, in, inlen,
+                             (block128_f) AES_decrypt);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_x86core.c b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_x86core.c
new file mode 100644
index 000000000..1b660d716
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/aes_x86core.c
@@ -0,0 +1,1074 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This is experimental x86[_64] derivative. It assumes little-endian
+ * byte order and expects CPU to sustain unaligned memory references.
+ * It is used as playground for cache-time attack mitigations and
+ * serves as reference C implementation for x86[_64] as well as some
+ * other assembly modules.
+ */
+
+/**
+ * rijndael-alg-fst.c
+ *
+ * @version 3.0 (December 2000)
+ *
+ * Optimised ANSI C code for the Rijndael cipher (now AES)
+ *
+ * @author Vincent Rijmen
+ * @author Antoon Bosselaers
+ * @author Paulo Barreto
+ *
+ * This code is hereby placed in the public domain.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHORS ''AS IS'' AND ANY EXPRESS
+ * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE
+ * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+ * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+ * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+ * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+ * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+ * OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
+ * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+
+#include <assert.h>
+
+#include <stdlib.h>
+#include <openssl/aes.h>
+#include "aes_locl.h"
+
+/*
+ * These two parameters control which table, 256-byte or 2KB, is
+ * referenced in outer and respectively inner rounds.
+ */
+#define AES_COMPACT_IN_OUTER_ROUNDS
+#ifdef  AES_COMPACT_IN_OUTER_ROUNDS
+/* AES_COMPACT_IN_OUTER_ROUNDS costs ~30% in performance, while
+ * adding AES_COMPACT_IN_INNER_ROUNDS reduces benchmark *further*
+ * by factor of ~2. */
+# undef  AES_COMPACT_IN_INNER_ROUNDS
+#endif
+
+#if 1
+static void prefetch256(const void *table)
+{
+    volatile unsigned long *t=(void *)table,ret;
+    unsigned long sum;
+    int i;
+
+    /* 32 is common least cache-line size */
+    for (sum=0,i=0;i<256/sizeof(t[0]);i+=32/sizeof(t[0]))   sum ^= t[i];
+
+    ret = sum;
+}
+#else
+# define prefetch256(t)
+#endif
+
+#undef GETU32
+#define GETU32(p) (*((u32*)(p)))
+
+#if (defined(_WIN32) || defined(_WIN64)) && !defined(__MINGW32__)
+typedef unsigned __int64 u64;
+#define U64(C)  C##UI64
+#elif defined(__arch64__)
+typedef unsigned long u64;
+#define U64(C)  C##UL
+#else
+typedef unsigned long long u64;
+#define U64(C)  C##ULL
+#endif
+
+#undef ROTATE
+#if defined(_MSC_VER)
+# define ROTATE(a,n)    _lrotl(a,n)
+#elif defined(__ICC)
+# define ROTATE(a,n)    _rotl(a,n)
+#elif defined(__GNUC__) && __GNUC__>=2
+# if defined(__i386) || defined(__i386__) || defined(__x86_64) || defined(__x86_64__)
+#   define ROTATE(a,n)  ({ register unsigned int ret;   \
+                asm (           \
+                "roll %1,%0"        \
+                : "=r"(ret)     \
+                : "I"(n), "0"(a)    \
+                : "cc");        \
+               ret;             \
+            })
+# endif
+#endif
+/*-
+Te [x] = S [x].[02, 01, 01, 03, 02, 01, 01, 03];
+Te0[x] = S [x].[02, 01, 01, 03];
+Te1[x] = S [x].[03, 02, 01, 01];
+Te2[x] = S [x].[01, 03, 02, 01];
+Te3[x] = S [x].[01, 01, 03, 02];
+*/
+#define Te0 (u32)((u64*)((u8*)Te+0))
+#define Te1 (u32)((u64*)((u8*)Te+3))
+#define Te2 (u32)((u64*)((u8*)Te+2))
+#define Te3 (u32)((u64*)((u8*)Te+1))
+/*-
+Td [x] = Si[x].[0e, 09, 0d, 0b, 0e, 09, 0d, 0b];
+Td0[x] = Si[x].[0e, 09, 0d, 0b];
+Td1[x] = Si[x].[0b, 0e, 09, 0d];
+Td2[x] = Si[x].[0d, 0b, 0e, 09];
+Td3[x] = Si[x].[09, 0d, 0b, 0e];
+Td4[x] = Si[x].[01];
+*/
+#define Td0 (u32)((u64*)((u8*)Td+0))
+#define Td1 (u32)((u64*)((u8*)Td+3))
+#define Td2 (u32)((u64*)((u8*)Td+2))
+#define Td3 (u32)((u64*)((u8*)Td+1))
+
+static const u64 Te[256] = {
+    U64(0xa56363c6a56363c6), U64(0x847c7cf8847c7cf8),
+    U64(0x997777ee997777ee), U64(0x8d7b7bf68d7b7bf6),
+    U64(0x0df2f2ff0df2f2ff), U64(0xbd6b6bd6bd6b6bd6),
+    U64(0xb16f6fdeb16f6fde), U64(0x54c5c59154c5c591),
+    U64(0x5030306050303060), U64(0x0301010203010102),
+    U64(0xa96767cea96767ce), U64(0x7d2b2b567d2b2b56),
+    U64(0x19fefee719fefee7), U64(0x62d7d7b562d7d7b5),
+    U64(0xe6abab4de6abab4d), U64(0x9a7676ec9a7676ec),
+    U64(0x45caca8f45caca8f), U64(0x9d82821f9d82821f),
+    U64(0x40c9c98940c9c989), U64(0x877d7dfa877d7dfa),
+    U64(0x15fafaef15fafaef), U64(0xeb5959b2eb5959b2),
+    U64(0xc947478ec947478e), U64(0x0bf0f0fb0bf0f0fb),
+    U64(0xecadad41ecadad41), U64(0x67d4d4b367d4d4b3),
+    U64(0xfda2a25ffda2a25f), U64(0xeaafaf45eaafaf45),
+    U64(0xbf9c9c23bf9c9c23), U64(0xf7a4a453f7a4a453),
+    U64(0x967272e4967272e4), U64(0x5bc0c09b5bc0c09b),
+    U64(0xc2b7b775c2b7b775), U64(0x1cfdfde11cfdfde1),
+    U64(0xae93933dae93933d), U64(0x6a26264c6a26264c),
+    U64(0x5a36366c5a36366c), U64(0x413f3f7e413f3f7e),
+    U64(0x02f7f7f502f7f7f5), U64(0x4fcccc834fcccc83),
+    U64(0x5c3434685c343468), U64(0xf4a5a551f4a5a551),
+    U64(0x34e5e5d134e5e5d1), U64(0x08f1f1f908f1f1f9),
+    U64(0x937171e2937171e2), U64(0x73d8d8ab73d8d8ab),
+    U64(0x5331316253313162), U64(0x3f15152a3f15152a),
+    U64(0x0c0404080c040408), U64(0x52c7c79552c7c795),
+    U64(0x6523234665232346), U64(0x5ec3c39d5ec3c39d),
+    U64(0x2818183028181830), U64(0xa1969637a1969637),
+    U64(0x0f05050a0f05050a), U64(0xb59a9a2fb59a9a2f),
+    U64(0x0907070e0907070e), U64(0x3612122436121224),
+    U64(0x9b80801b9b80801b), U64(0x3de2e2df3de2e2df),
+    U64(0x26ebebcd26ebebcd), U64(0x6927274e6927274e),
+    U64(0xcdb2b27fcdb2b27f), U64(0x9f7575ea9f7575ea),
+    U64(0x1b0909121b090912), U64(0x9e83831d9e83831d),
+    U64(0x742c2c58742c2c58), U64(0x2e1a1a342e1a1a34),
+    U64(0x2d1b1b362d1b1b36), U64(0xb26e6edcb26e6edc),
+    U64(0xee5a5ab4ee5a5ab4), U64(0xfba0a05bfba0a05b),
+    U64(0xf65252a4f65252a4), U64(0x4d3b3b764d3b3b76),
+    U64(0x61d6d6b761d6d6b7), U64(0xceb3b37dceb3b37d),
+    U64(0x7b2929527b292952), U64(0x3ee3e3dd3ee3e3dd),
+    U64(0x712f2f5e712f2f5e), U64(0x9784841397848413),
+    U64(0xf55353a6f55353a6), U64(0x68d1d1b968d1d1b9),
+    U64(0x0000000000000000), U64(0x2cededc12cededc1),
+    U64(0x6020204060202040), U64(0x1ffcfce31ffcfce3),
+    U64(0xc8b1b179c8b1b179), U64(0xed5b5bb6ed5b5bb6),
+    U64(0xbe6a6ad4be6a6ad4), U64(0x46cbcb8d46cbcb8d),
+    U64(0xd9bebe67d9bebe67), U64(0x4b3939724b393972),
+    U64(0xde4a4a94de4a4a94), U64(0xd44c4c98d44c4c98),
+    U64(0xe85858b0e85858b0), U64(0x4acfcf854acfcf85),
+    U64(0x6bd0d0bb6bd0d0bb), U64(0x2aefefc52aefefc5),
+    U64(0xe5aaaa4fe5aaaa4f), U64(0x16fbfbed16fbfbed),
+    U64(0xc5434386c5434386), U64(0xd74d4d9ad74d4d9a),
+    U64(0x5533336655333366), U64(0x9485851194858511),
+    U64(0xcf45458acf45458a), U64(0x10f9f9e910f9f9e9),
+    U64(0x0602020406020204), U64(0x817f7ffe817f7ffe),
+    U64(0xf05050a0f05050a0), U64(0x443c3c78443c3c78),
+    U64(0xba9f9f25ba9f9f25), U64(0xe3a8a84be3a8a84b),
+    U64(0xf35151a2f35151a2), U64(0xfea3a35dfea3a35d),
+    U64(0xc0404080c0404080), U64(0x8a8f8f058a8f8f05),
+    U64(0xad92923fad92923f), U64(0xbc9d9d21bc9d9d21),
+    U64(0x4838387048383870), U64(0x04f5f5f104f5f5f1),
+    U64(0xdfbcbc63dfbcbc63), U64(0xc1b6b677c1b6b677),
+    U64(0x75dadaaf75dadaaf), U64(0x6321214263212142),
+    U64(0x3010102030101020), U64(0x1affffe51affffe5),
+    U64(0x0ef3f3fd0ef3f3fd), U64(0x6dd2d2bf6dd2d2bf),
+    U64(0x4ccdcd814ccdcd81), U64(0x140c0c18140c0c18),
+    U64(0x3513132635131326), U64(0x2fececc32fececc3),
+    U64(0xe15f5fbee15f5fbe), U64(0xa2979735a2979735),
+    U64(0xcc444488cc444488), U64(0x3917172e3917172e),
+    U64(0x57c4c49357c4c493), U64(0xf2a7a755f2a7a755),
+    U64(0x827e7efc827e7efc), U64(0x473d3d7a473d3d7a),
+    U64(0xac6464c8ac6464c8), U64(0xe75d5dbae75d5dba),
+    U64(0x2b1919322b191932), U64(0x957373e6957373e6),
+    U64(0xa06060c0a06060c0), U64(0x9881811998818119),
+    U64(0xd14f4f9ed14f4f9e), U64(0x7fdcdca37fdcdca3),
+    U64(0x6622224466222244), U64(0x7e2a2a547e2a2a54),
+    U64(0xab90903bab90903b), U64(0x8388880b8388880b),
+    U64(0xca46468cca46468c), U64(0x29eeeec729eeeec7),
+    U64(0xd3b8b86bd3b8b86b), U64(0x3c1414283c141428),
+    U64(0x79dedea779dedea7), U64(0xe25e5ebce25e5ebc),
+    U64(0x1d0b0b161d0b0b16), U64(0x76dbdbad76dbdbad),
+    U64(0x3be0e0db3be0e0db), U64(0x5632326456323264),
+    U64(0x4e3a3a744e3a3a74), U64(0x1e0a0a141e0a0a14),
+    U64(0xdb494992db494992), U64(0x0a06060c0a06060c),
+    U64(0x6c2424486c242448), U64(0xe45c5cb8e45c5cb8),
+    U64(0x5dc2c29f5dc2c29f), U64(0x6ed3d3bd6ed3d3bd),
+    U64(0xefacac43efacac43), U64(0xa66262c4a66262c4),
+    U64(0xa8919139a8919139), U64(0xa4959531a4959531),
+    U64(0x37e4e4d337e4e4d3), U64(0x8b7979f28b7979f2),
+    U64(0x32e7e7d532e7e7d5), U64(0x43c8c88b43c8c88b),
+    U64(0x5937376e5937376e), U64(0xb76d6ddab76d6dda),
+    U64(0x8c8d8d018c8d8d01), U64(0x64d5d5b164d5d5b1),
+    U64(0xd24e4e9cd24e4e9c), U64(0xe0a9a949e0a9a949),
+    U64(0xb46c6cd8b46c6cd8), U64(0xfa5656acfa5656ac),
+    U64(0x07f4f4f307f4f4f3), U64(0x25eaeacf25eaeacf),
+    U64(0xaf6565caaf6565ca), U64(0x8e7a7af48e7a7af4),
+    U64(0xe9aeae47e9aeae47), U64(0x1808081018080810),
+    U64(0xd5baba6fd5baba6f), U64(0x887878f0887878f0),
+    U64(0x6f25254a6f25254a), U64(0x722e2e5c722e2e5c),
+    U64(0x241c1c38241c1c38), U64(0xf1a6a657f1a6a657),
+    U64(0xc7b4b473c7b4b473), U64(0x51c6c69751c6c697),
+    U64(0x23e8e8cb23e8e8cb), U64(0x7cdddda17cdddda1),
+    U64(0x9c7474e89c7474e8), U64(0x211f1f3e211f1f3e),
+    U64(0xdd4b4b96dd4b4b96), U64(0xdcbdbd61dcbdbd61),
+    U64(0x868b8b0d868b8b0d), U64(0x858a8a0f858a8a0f),
+    U64(0x907070e0907070e0), U64(0x423e3e7c423e3e7c),
+    U64(0xc4b5b571c4b5b571), U64(0xaa6666ccaa6666cc),
+    U64(0xd8484890d8484890), U64(0x0503030605030306),
+    U64(0x01f6f6f701f6f6f7), U64(0x120e0e1c120e0e1c),
+    U64(0xa36161c2a36161c2), U64(0x5f35356a5f35356a),
+    U64(0xf95757aef95757ae), U64(0xd0b9b969d0b9b969),
+    U64(0x9186861791868617), U64(0x58c1c19958c1c199),
+    U64(0x271d1d3a271d1d3a), U64(0xb99e9e27b99e9e27),
+    U64(0x38e1e1d938e1e1d9), U64(0x13f8f8eb13f8f8eb),
+    U64(0xb398982bb398982b), U64(0x3311112233111122),
+    U64(0xbb6969d2bb6969d2), U64(0x70d9d9a970d9d9a9),
+    U64(0x898e8e07898e8e07), U64(0xa7949433a7949433),
+    U64(0xb69b9b2db69b9b2d), U64(0x221e1e3c221e1e3c),
+    U64(0x9287871592878715), U64(0x20e9e9c920e9e9c9),
+    U64(0x49cece8749cece87), U64(0xff5555aaff5555aa),
+    U64(0x7828285078282850), U64(0x7adfdfa57adfdfa5),
+    U64(0x8f8c8c038f8c8c03), U64(0xf8a1a159f8a1a159),
+    U64(0x8089890980898909), U64(0x170d0d1a170d0d1a),
+    U64(0xdabfbf65dabfbf65), U64(0x31e6e6d731e6e6d7),
+    U64(0xc6424284c6424284), U64(0xb86868d0b86868d0),
+    U64(0xc3414182c3414182), U64(0xb0999929b0999929),
+    U64(0x772d2d5a772d2d5a), U64(0x110f0f1e110f0f1e),
+    U64(0xcbb0b07bcbb0b07b), U64(0xfc5454a8fc5454a8),
+    U64(0xd6bbbb6dd6bbbb6d), U64(0x3a16162c3a16162c)
+};
+
+static const u8 Te4[256] = {
+    0x63U, 0x7cU, 0x77U, 0x7bU, 0xf2U, 0x6bU, 0x6fU, 0xc5U,
+    0x30U, 0x01U, 0x67U, 0x2bU, 0xfeU, 0xd7U, 0xabU, 0x76U,
+    0xcaU, 0x82U, 0xc9U, 0x7dU, 0xfaU, 0x59U, 0x47U, 0xf0U,
+    0xadU, 0xd4U, 0xa2U, 0xafU, 0x9cU, 0xa4U, 0x72U, 0xc0U,
+    0xb7U, 0xfdU, 0x93U, 0x26U, 0x36U, 0x3fU, 0xf7U, 0xccU,
+    0x34U, 0xa5U, 0xe5U, 0xf1U, 0x71U, 0xd8U, 0x31U, 0x15U,
+    0x04U, 0xc7U, 0x23U, 0xc3U, 0x18U, 0x96U, 0x05U, 0x9aU,
+    0x07U, 0x12U, 0x80U, 0xe2U, 0xebU, 0x27U, 0xb2U, 0x75U,
+    0x09U, 0x83U, 0x2cU, 0x1aU, 0x1bU, 0x6eU, 0x5aU, 0xa0U,
+    0x52U, 0x3bU, 0xd6U, 0xb3U, 0x29U, 0xe3U, 0x2fU, 0x84U,
+    0x53U, 0xd1U, 0x00U, 0xedU, 0x20U, 0xfcU, 0xb1U, 0x5bU,
+    0x6aU, 0xcbU, 0xbeU, 0x39U, 0x4aU, 0x4cU, 0x58U, 0xcfU,
+    0xd0U, 0xefU, 0xaaU, 0xfbU, 0x43U, 0x4dU, 0x33U, 0x85U,
+    0x45U, 0xf9U, 0x02U, 0x7fU, 0x50U, 0x3cU, 0x9fU, 0xa8U,
+    0x51U, 0xa3U, 0x40U, 0x8fU, 0x92U, 0x9dU, 0x38U, 0xf5U,
+    0xbcU, 0xb6U, 0xdaU, 0x21U, 0x10U, 0xffU, 0xf3U, 0xd2U,
+    0xcdU, 0x0cU, 0x13U, 0xecU, 0x5fU, 0x97U, 0x44U, 0x17U,
+    0xc4U, 0xa7U, 0x7eU, 0x3dU, 0x64U, 0x5dU, 0x19U, 0x73U,
+    0x60U, 0x81U, 0x4fU, 0xdcU, 0x22U, 0x2aU, 0x90U, 0x88U,
+    0x46U, 0xeeU, 0xb8U, 0x14U, 0xdeU, 0x5eU, 0x0bU, 0xdbU,
+    0xe0U, 0x32U, 0x3aU, 0x0aU, 0x49U, 0x06U, 0x24U, 0x5cU,
+    0xc2U, 0xd3U, 0xacU, 0x62U, 0x91U, 0x95U, 0xe4U, 0x79U,
+    0xe7U, 0xc8U, 0x37U, 0x6dU, 0x8dU, 0xd5U, 0x4eU, 0xa9U,
+    0x6cU, 0x56U, 0xf4U, 0xeaU, 0x65U, 0x7aU, 0xaeU, 0x08U,
+    0xbaU, 0x78U, 0x25U, 0x2eU, 0x1cU, 0xa6U, 0xb4U, 0xc6U,
+    0xe8U, 0xddU, 0x74U, 0x1fU, 0x4bU, 0xbdU, 0x8bU, 0x8aU,
+    0x70U, 0x3eU, 0xb5U, 0x66U, 0x48U, 0x03U, 0xf6U, 0x0eU,
+    0x61U, 0x35U, 0x57U, 0xb9U, 0x86U, 0xc1U, 0x1dU, 0x9eU,
+    0xe1U, 0xf8U, 0x98U, 0x11U, 0x69U, 0xd9U, 0x8eU, 0x94U,
+    0x9bU, 0x1eU, 0x87U, 0xe9U, 0xceU, 0x55U, 0x28U, 0xdfU,
+    0x8cU, 0xa1U, 0x89U, 0x0dU, 0xbfU, 0xe6U, 0x42U, 0x68U,
+    0x41U, 0x99U, 0x2dU, 0x0fU, 0xb0U, 0x54U, 0xbbU, 0x16U
+};
+
+static const u64 Td[256] = {
+    U64(0x50a7f45150a7f451), U64(0x5365417e5365417e),
+    U64(0xc3a4171ac3a4171a), U64(0x965e273a965e273a),
+    U64(0xcb6bab3bcb6bab3b), U64(0xf1459d1ff1459d1f),
+    U64(0xab58faacab58faac), U64(0x9303e34b9303e34b),
+    U64(0x55fa302055fa3020), U64(0xf66d76adf66d76ad),
+    U64(0x9176cc889176cc88), U64(0x254c02f5254c02f5),
+    U64(0xfcd7e54ffcd7e54f), U64(0xd7cb2ac5d7cb2ac5),
+    U64(0x8044352680443526), U64(0x8fa362b58fa362b5),
+    U64(0x495ab1de495ab1de), U64(0x671bba25671bba25),
+    U64(0x980eea45980eea45), U64(0xe1c0fe5de1c0fe5d),
+    U64(0x02752fc302752fc3), U64(0x12f04c8112f04c81),
+    U64(0xa397468da397468d), U64(0xc6f9d36bc6f9d36b),
+    U64(0xe75f8f03e75f8f03), U64(0x959c9215959c9215),
+    U64(0xeb7a6dbfeb7a6dbf), U64(0xda595295da595295),
+    U64(0x2d83bed42d83bed4), U64(0xd3217458d3217458),
+    U64(0x2969e0492969e049), U64(0x44c8c98e44c8c98e),
+    U64(0x6a89c2756a89c275), U64(0x78798ef478798ef4),
+    U64(0x6b3e58996b3e5899), U64(0xdd71b927dd71b927),
+    U64(0xb64fe1beb64fe1be), U64(0x17ad88f017ad88f0),
+    U64(0x66ac20c966ac20c9), U64(0xb43ace7db43ace7d),
+    U64(0x184adf63184adf63), U64(0x82311ae582311ae5),
+    U64(0x6033519760335197), U64(0x457f5362457f5362),
+    U64(0xe07764b1e07764b1), U64(0x84ae6bbb84ae6bbb),
+    U64(0x1ca081fe1ca081fe), U64(0x942b08f9942b08f9),
+    U64(0x5868487058684870), U64(0x19fd458f19fd458f),
+    U64(0x876cde94876cde94), U64(0xb7f87b52b7f87b52),
+    U64(0x23d373ab23d373ab), U64(0xe2024b72e2024b72),
+    U64(0x578f1fe3578f1fe3), U64(0x2aab55662aab5566),
+    U64(0x0728ebb20728ebb2), U64(0x03c2b52f03c2b52f),
+    U64(0x9a7bc5869a7bc586), U64(0xa50837d3a50837d3),
+    U64(0xf2872830f2872830), U64(0xb2a5bf23b2a5bf23),
+    U64(0xba6a0302ba6a0302), U64(0x5c8216ed5c8216ed),
+    U64(0x2b1ccf8a2b1ccf8a), U64(0x92b479a792b479a7),
+    U64(0xf0f207f3f0f207f3), U64(0xa1e2694ea1e2694e),
+    U64(0xcdf4da65cdf4da65), U64(0xd5be0506d5be0506),
+    U64(0x1f6234d11f6234d1), U64(0x8afea6c48afea6c4),
+    U64(0x9d532e349d532e34), U64(0xa055f3a2a055f3a2),
+    U64(0x32e18a0532e18a05), U64(0x75ebf6a475ebf6a4),
+    U64(0x39ec830b39ec830b), U64(0xaaef6040aaef6040),
+    U64(0x069f715e069f715e), U64(0x51106ebd51106ebd),
+    U64(0xf98a213ef98a213e), U64(0x3d06dd963d06dd96),
+    U64(0xae053eddae053edd), U64(0x46bde64d46bde64d),
+    U64(0xb58d5491b58d5491), U64(0x055dc471055dc471),
+    U64(0x6fd406046fd40604), U64(0xff155060ff155060),
+    U64(0x24fb981924fb9819), U64(0x97e9bdd697e9bdd6),
+    U64(0xcc434089cc434089), U64(0x779ed967779ed967),
+    U64(0xbd42e8b0bd42e8b0), U64(0x888b8907888b8907),
+    U64(0x385b19e7385b19e7), U64(0xdbeec879dbeec879),
+    U64(0x470a7ca1470a7ca1), U64(0xe90f427ce90f427c),
+    U64(0xc91e84f8c91e84f8), U64(0x0000000000000000),
+    U64(0x8386800983868009), U64(0x48ed2b3248ed2b32),
+    U64(0xac70111eac70111e), U64(0x4e725a6c4e725a6c),
+    U64(0xfbff0efdfbff0efd), U64(0x5638850f5638850f),
+    U64(0x1ed5ae3d1ed5ae3d), U64(0x27392d3627392d36),
+    U64(0x64d90f0a64d90f0a), U64(0x21a65c6821a65c68),
+    U64(0xd1545b9bd1545b9b), U64(0x3a2e36243a2e3624),
+    U64(0xb1670a0cb1670a0c), U64(0x0fe757930fe75793),
+    U64(0xd296eeb4d296eeb4), U64(0x9e919b1b9e919b1b),
+    U64(0x4fc5c0804fc5c080), U64(0xa220dc61a220dc61),
+    U64(0x694b775a694b775a), U64(0x161a121c161a121c),
+    U64(0x0aba93e20aba93e2), U64(0xe52aa0c0e52aa0c0),
+    U64(0x43e0223c43e0223c), U64(0x1d171b121d171b12),
+    U64(0x0b0d090e0b0d090e), U64(0xadc78bf2adc78bf2),
+    U64(0xb9a8b62db9a8b62d), U64(0xc8a91e14c8a91e14),
+    U64(0x8519f1578519f157), U64(0x4c0775af4c0775af),
+    U64(0xbbdd99eebbdd99ee), U64(0xfd607fa3fd607fa3),
+    U64(0x9f2601f79f2601f7), U64(0xbcf5725cbcf5725c),
+    U64(0xc53b6644c53b6644), U64(0x347efb5b347efb5b),
+    U64(0x7629438b7629438b), U64(0xdcc623cbdcc623cb),
+    U64(0x68fcedb668fcedb6), U64(0x63f1e4b863f1e4b8),
+    U64(0xcadc31d7cadc31d7), U64(0x1085634210856342),
+    U64(0x4022971340229713), U64(0x2011c6842011c684),
+    U64(0x7d244a857d244a85), U64(0xf83dbbd2f83dbbd2),
+    U64(0x1132f9ae1132f9ae), U64(0x6da129c76da129c7),
+    U64(0x4b2f9e1d4b2f9e1d), U64(0xf330b2dcf330b2dc),
+    U64(0xec52860dec52860d), U64(0xd0e3c177d0e3c177),
+    U64(0x6c16b32b6c16b32b), U64(0x99b970a999b970a9),
+    U64(0xfa489411fa489411), U64(0x2264e9472264e947),
+    U64(0xc48cfca8c48cfca8), U64(0x1a3ff0a01a3ff0a0),
+    U64(0xd82c7d56d82c7d56), U64(0xef903322ef903322),
+    U64(0xc74e4987c74e4987), U64(0xc1d138d9c1d138d9),
+    U64(0xfea2ca8cfea2ca8c), U64(0x360bd498360bd498),
+    U64(0xcf81f5a6cf81f5a6), U64(0x28de7aa528de7aa5),
+    U64(0x268eb7da268eb7da), U64(0xa4bfad3fa4bfad3f),
+    U64(0xe49d3a2ce49d3a2c), U64(0x0d9278500d927850),
+    U64(0x9bcc5f6a9bcc5f6a), U64(0x62467e5462467e54),
+    U64(0xc2138df6c2138df6), U64(0xe8b8d890e8b8d890),
+    U64(0x5ef7392e5ef7392e), U64(0xf5afc382f5afc382),
+    U64(0xbe805d9fbe805d9f), U64(0x7c93d0697c93d069),
+    U64(0xa92dd56fa92dd56f), U64(0xb31225cfb31225cf),
+    U64(0x3b99acc83b99acc8), U64(0xa77d1810a77d1810),
+    U64(0x6e639ce86e639ce8), U64(0x7bbb3bdb7bbb3bdb),
+    U64(0x097826cd097826cd), U64(0xf418596ef418596e),
+    U64(0x01b79aec01b79aec), U64(0xa89a4f83a89a4f83),
+    U64(0x656e95e6656e95e6), U64(0x7ee6ffaa7ee6ffaa),
+    U64(0x08cfbc2108cfbc21), U64(0xe6e815efe6e815ef),
+    U64(0xd99be7bad99be7ba), U64(0xce366f4ace366f4a),
+    U64(0xd4099fead4099fea), U64(0xd67cb029d67cb029),
+    U64(0xafb2a431afb2a431), U64(0x31233f2a31233f2a),
+    U64(0x3094a5c63094a5c6), U64(0xc066a235c066a235),
+    U64(0x37bc4e7437bc4e74), U64(0xa6ca82fca6ca82fc),
+    U64(0xb0d090e0b0d090e0), U64(0x15d8a73315d8a733),
+    U64(0x4a9804f14a9804f1), U64(0xf7daec41f7daec41),
+    U64(0x0e50cd7f0e50cd7f), U64(0x2ff691172ff69117),
+    U64(0x8dd64d768dd64d76), U64(0x4db0ef434db0ef43),
+    U64(0x544daacc544daacc), U64(0xdf0496e4df0496e4),
+    U64(0xe3b5d19ee3b5d19e), U64(0x1b886a4c1b886a4c),
+    U64(0xb81f2cc1b81f2cc1), U64(0x7f5165467f516546),
+    U64(0x04ea5e9d04ea5e9d), U64(0x5d358c015d358c01),
+    U64(0x737487fa737487fa), U64(0x2e410bfb2e410bfb),
+    U64(0x5a1d67b35a1d67b3), U64(0x52d2db9252d2db92),
+    U64(0x335610e9335610e9), U64(0x1347d66d1347d66d),
+    U64(0x8c61d79a8c61d79a), U64(0x7a0ca1377a0ca137),
+    U64(0x8e14f8598e14f859), U64(0x893c13eb893c13eb),
+    U64(0xee27a9ceee27a9ce), U64(0x35c961b735c961b7),
+    U64(0xede51ce1ede51ce1), U64(0x3cb1477a3cb1477a),
+    U64(0x59dfd29c59dfd29c), U64(0x3f73f2553f73f255),
+    U64(0x79ce141879ce1418), U64(0xbf37c773bf37c773),
+    U64(0xeacdf753eacdf753), U64(0x5baafd5f5baafd5f),
+    U64(0x146f3ddf146f3ddf), U64(0x86db447886db4478),
+    U64(0x81f3afca81f3afca), U64(0x3ec468b93ec468b9),
+    U64(0x2c3424382c342438), U64(0x5f40a3c25f40a3c2),
+    U64(0x72c31d1672c31d16), U64(0x0c25e2bc0c25e2bc),
+    U64(0x8b493c288b493c28), U64(0x41950dff41950dff),
+    U64(0x7101a8397101a839), U64(0xdeb30c08deb30c08),
+    U64(0x9ce4b4d89ce4b4d8), U64(0x90c1566490c15664),
+    U64(0x6184cb7b6184cb7b), U64(0x70b632d570b632d5),
+    U64(0x745c6c48745c6c48), U64(0x4257b8d04257b8d0)
+};
+static const u8 Td4[256] = {
+    0x52U, 0x09U, 0x6aU, 0xd5U, 0x30U, 0x36U, 0xa5U, 0x38U,
+    0xbfU, 0x40U, 0xa3U, 0x9eU, 0x81U, 0xf3U, 0xd7U, 0xfbU,
+    0x7cU, 0xe3U, 0x39U, 0x82U, 0x9bU, 0x2fU, 0xffU, 0x87U,
+    0x34U, 0x8eU, 0x43U, 0x44U, 0xc4U, 0xdeU, 0xe9U, 0xcbU,
+    0x54U, 0x7bU, 0x94U, 0x32U, 0xa6U, 0xc2U, 0x23U, 0x3dU,
+    0xeeU, 0x4cU, 0x95U, 0x0bU, 0x42U, 0xfaU, 0xc3U, 0x4eU,
+    0x08U, 0x2eU, 0xa1U, 0x66U, 0x28U, 0xd9U, 0x24U, 0xb2U,
+    0x76U, 0x5bU, 0xa2U, 0x49U, 0x6dU, 0x8bU, 0xd1U, 0x25U,
+    0x72U, 0xf8U, 0xf6U, 0x64U, 0x86U, 0x68U, 0x98U, 0x16U,
+    0xd4U, 0xa4U, 0x5cU, 0xccU, 0x5dU, 0x65U, 0xb6U, 0x92U,
+    0x6cU, 0x70U, 0x48U, 0x50U, 0xfdU, 0xedU, 0xb9U, 0xdaU,
+    0x5eU, 0x15U, 0x46U, 0x57U, 0xa7U, 0x8dU, 0x9dU, 0x84U,
+    0x90U, 0xd8U, 0xabU, 0x00U, 0x8cU, 0xbcU, 0xd3U, 0x0aU,
+    0xf7U, 0xe4U, 0x58U, 0x05U, 0xb8U, 0xb3U, 0x45U, 0x06U,
+    0xd0U, 0x2cU, 0x1eU, 0x8fU, 0xcaU, 0x3fU, 0x0fU, 0x02U,
+    0xc1U, 0xafU, 0xbdU, 0x03U, 0x01U, 0x13U, 0x8aU, 0x6bU,
+    0x3aU, 0x91U, 0x11U, 0x41U, 0x4fU, 0x67U, 0xdcU, 0xeaU,
+    0x97U, 0xf2U, 0xcfU, 0xceU, 0xf0U, 0xb4U, 0xe6U, 0x73U,
+    0x96U, 0xacU, 0x74U, 0x22U, 0xe7U, 0xadU, 0x35U, 0x85U,
+    0xe2U, 0xf9U, 0x37U, 0xe8U, 0x1cU, 0x75U, 0xdfU, 0x6eU,
+    0x47U, 0xf1U, 0x1aU, 0x71U, 0x1dU, 0x29U, 0xc5U, 0x89U,
+    0x6fU, 0xb7U, 0x62U, 0x0eU, 0xaaU, 0x18U, 0xbeU, 0x1bU,
+    0xfcU, 0x56U, 0x3eU, 0x4bU, 0xc6U, 0xd2U, 0x79U, 0x20U,
+    0x9aU, 0xdbU, 0xc0U, 0xfeU, 0x78U, 0xcdU, 0x5aU, 0xf4U,
+    0x1fU, 0xddU, 0xa8U, 0x33U, 0x88U, 0x07U, 0xc7U, 0x31U,
+    0xb1U, 0x12U, 0x10U, 0x59U, 0x27U, 0x80U, 0xecU, 0x5fU,
+    0x60U, 0x51U, 0x7fU, 0xa9U, 0x19U, 0xb5U, 0x4aU, 0x0dU,
+    0x2dU, 0xe5U, 0x7aU, 0x9fU, 0x93U, 0xc9U, 0x9cU, 0xefU,
+    0xa0U, 0xe0U, 0x3bU, 0x4dU, 0xaeU, 0x2aU, 0xf5U, 0xb0U,
+    0xc8U, 0xebU, 0xbbU, 0x3cU, 0x83U, 0x53U, 0x99U, 0x61U,
+    0x17U, 0x2bU, 0x04U, 0x7eU, 0xbaU, 0x77U, 0xd6U, 0x26U,
+    0xe1U, 0x69U, 0x14U, 0x63U, 0x55U, 0x21U, 0x0cU, 0x7dU
+};
+
+static const u32 rcon[] = {
+    0x00000001U, 0x00000002U, 0x00000004U, 0x00000008U,
+    0x00000010U, 0x00000020U, 0x00000040U, 0x00000080U,
+    0x0000001bU, 0x00000036U, /* for 128-bit blocks, Rijndael never uses more than 10 rcon values */
+};
+
+/**
+ * Expand the cipher key into the encryption key schedule.
+ */
+int AES_set_encrypt_key(const unsigned char *userKey, const int bits,
+                        AES_KEY *key)
+{
+
+    u32 *rk;
+    int i = 0;
+    u32 temp;
+
+    if (!userKey || !key)
+        return -1;
+    if (bits != 128 && bits != 192 && bits != 256)
+        return -2;
+
+    rk = key->rd_key;
+
+    if (bits==128)
+        key->rounds = 10;
+    else if (bits==192)
+        key->rounds = 12;
+    else
+        key->rounds = 14;
+
+    rk[0] = GETU32(userKey     );
+    rk[1] = GETU32(userKey +  4);
+    rk[2] = GETU32(userKey +  8);
+    rk[3] = GETU32(userKey + 12);
+    if (bits == 128) {
+        while (1) {
+            temp  = rk[3];
+            rk[4] = rk[0] ^
+                ((u32)Te4[(temp >>  8) & 0xff]      ) ^
+                ((u32)Te4[(temp >> 16) & 0xff] <<  8) ^
+                ((u32)Te4[(temp >> 24)       ] << 16) ^
+                ((u32)Te4[(temp      ) & 0xff] << 24) ^
+                rcon[i];
+            rk[5] = rk[1] ^ rk[4];
+            rk[6] = rk[2] ^ rk[5];
+            rk[7] = rk[3] ^ rk[6];
+            if (++i == 10) {
+                return 0;
+            }
+            rk += 4;
+        }
+    }
+    rk[4] = GETU32(userKey + 16);
+    rk[5] = GETU32(userKey + 20);
+    if (bits == 192) {
+        while (1) {
+            temp = rk[ 5];
+            rk[ 6] = rk[ 0] ^
+                ((u32)Te4[(temp >>  8) & 0xff]      ) ^
+                ((u32)Te4[(temp >> 16) & 0xff] <<  8) ^
+                ((u32)Te4[(temp >> 24)       ] << 16) ^
+                ((u32)Te4[(temp      ) & 0xff] << 24) ^
+                rcon[i];
+            rk[ 7] = rk[ 1] ^ rk[ 6];
+            rk[ 8] = rk[ 2] ^ rk[ 7];
+            rk[ 9] = rk[ 3] ^ rk[ 8];
+            if (++i == 8) {
+                return 0;
+            }
+            rk[10] = rk[ 4] ^ rk[ 9];
+            rk[11] = rk[ 5] ^ rk[10];
+            rk += 6;
+        }
+    }
+    rk[6] = GETU32(userKey + 24);
+    rk[7] = GETU32(userKey + 28);
+    if (bits == 256) {
+        while (1) {
+            temp = rk[ 7];
+            rk[ 8] = rk[ 0] ^
+                ((u32)Te4[(temp >>  8) & 0xff]      ) ^
+                ((u32)Te4[(temp >> 16) & 0xff] <<  8) ^
+                ((u32)Te4[(temp >> 24)       ] << 16) ^
+                ((u32)Te4[(temp      ) & 0xff] << 24) ^
+                rcon[i];
+            rk[ 9] = rk[ 1] ^ rk[ 8];
+            rk[10] = rk[ 2] ^ rk[ 9];
+            rk[11] = rk[ 3] ^ rk[10];
+            if (++i == 7) {
+                return 0;
+            }
+            temp = rk[11];
+            rk[12] = rk[ 4] ^
+                ((u32)Te4[(temp      ) & 0xff]      ) ^
+                ((u32)Te4[(temp >>  8) & 0xff] <<  8) ^
+                ((u32)Te4[(temp >> 16) & 0xff] << 16) ^
+                ((u32)Te4[(temp >> 24)       ] << 24);
+            rk[13] = rk[ 5] ^ rk[12];
+            rk[14] = rk[ 6] ^ rk[13];
+            rk[15] = rk[ 7] ^ rk[14];
+
+            rk += 8;
+            }
+    }
+    return 0;
+}
+
+/**
+ * Expand the cipher key into the decryption key schedule.
+ */
+int AES_set_decrypt_key(const unsigned char *userKey, const int bits,
+                        AES_KEY *key)
+{
+
+    u32 *rk;
+    int i, j, status;
+    u32 temp;
+
+    /* first, start with an encryption schedule */
+    status = AES_set_encrypt_key(userKey, bits, key);
+    if (status < 0)
+        return status;
+
+    rk = key->rd_key;
+
+    /* invert the order of the round keys: */
+    for (i = 0, j = 4*(key->rounds); i < j; i += 4, j -= 4) {
+        temp = rk[i    ]; rk[i    ] = rk[j    ]; rk[j    ] = temp;
+        temp = rk[i + 1]; rk[i + 1] = rk[j + 1]; rk[j + 1] = temp;
+        temp = rk[i + 2]; rk[i + 2] = rk[j + 2]; rk[j + 2] = temp;
+        temp = rk[i + 3]; rk[i + 3] = rk[j + 3]; rk[j + 3] = temp;
+    }
+    /* apply the inverse MixColumn transform to all round keys but the first and the last: */
+    for (i = 1; i < (key->rounds); i++) {
+        rk += 4;
+#if 1
+        for (j = 0; j < 4; j++) {
+            u32 tp1, tp2, tp4, tp8, tp9, tpb, tpd, tpe, m;
+
+            tp1 = rk[j];
+            m = tp1 & 0x80808080;
+            tp2 = ((tp1 & 0x7f7f7f7f) << 1) ^
+                ((m - (m >> 7)) & 0x1b1b1b1b);
+            m = tp2 & 0x80808080;
+            tp4 = ((tp2 & 0x7f7f7f7f) << 1) ^
+                ((m - (m >> 7)) & 0x1b1b1b1b);
+            m = tp4 & 0x80808080;
+            tp8 = ((tp4 & 0x7f7f7f7f) << 1) ^
+                ((m - (m >> 7)) & 0x1b1b1b1b);
+            tp9 = tp8 ^ tp1;
+            tpb = tp9 ^ tp2;
+            tpd = tp9 ^ tp4;
+            tpe = tp8 ^ tp4 ^ tp2;
+#if defined(ROTATE)
+            rk[j] = tpe ^ ROTATE(tpd,16) ^
+                ROTATE(tp9,8) ^ ROTATE(tpb,24);
+#else
+            rk[j] = tpe ^ (tpd >> 16) ^ (tpd << 16) ^
+                (tp9 >> 24) ^ (tp9 << 8) ^
+                (tpb >> 8) ^ (tpb << 24);
+#endif
+        }
+#else
+        rk[0] =
+            Td0[Te2[(rk[0]      ) & 0xff] & 0xff] ^
+            Td1[Te2[(rk[0] >>  8) & 0xff] & 0xff] ^
+            Td2[Te2[(rk[0] >> 16) & 0xff] & 0xff] ^
+            Td3[Te2[(rk[0] >> 24)       ] & 0xff];
+        rk[1] =
+            Td0[Te2[(rk[1]      ) & 0xff] & 0xff] ^
+            Td1[Te2[(rk[1] >>  8) & 0xff] & 0xff] ^
+            Td2[Te2[(rk[1] >> 16) & 0xff] & 0xff] ^
+            Td3[Te2[(rk[1] >> 24)       ] & 0xff];
+        rk[2] =
+            Td0[Te2[(rk[2]      ) & 0xff] & 0xff] ^
+            Td1[Te2[(rk[2] >>  8) & 0xff] & 0xff] ^
+            Td2[Te2[(rk[2] >> 16) & 0xff] & 0xff] ^
+            Td3[Te2[(rk[2] >> 24)       ] & 0xff];
+        rk[3] =
+            Td0[Te2[(rk[3]      ) & 0xff] & 0xff] ^
+            Td1[Te2[(rk[3] >>  8) & 0xff] & 0xff] ^
+            Td2[Te2[(rk[3] >> 16) & 0xff] & 0xff] ^
+            Td3[Te2[(rk[3] >> 24)       ] & 0xff];
+#endif
+    }
+    return 0;
+}
+
+/*
+ * Encrypt a single block
+ * in and out can overlap
+ */
+void AES_encrypt(const unsigned char *in, unsigned char *out,
+                 const AES_KEY *key)
+{
+
+    const u32 *rk;
+    u32 s0, s1, s2, s3, t[4];
+    int r;
+
+    assert(in && out && key);
+    rk = key->rd_key;
+
+    /*
+     * map byte array block to cipher state
+     * and add initial round key:
+     */
+    s0 = GETU32(in     ) ^ rk[0];
+    s1 = GETU32(in +  4) ^ rk[1];
+    s2 = GETU32(in +  8) ^ rk[2];
+    s3 = GETU32(in + 12) ^ rk[3];
+
+#if defined(AES_COMPACT_IN_OUTER_ROUNDS)
+    prefetch256(Te4);
+
+    t[0] = (u32)Te4[(s0      ) & 0xff]       ^
+           (u32)Te4[(s1 >>  8) & 0xff] <<  8 ^
+           (u32)Te4[(s2 >> 16) & 0xff] << 16 ^
+           (u32)Te4[(s3 >> 24)       ] << 24;
+    t[1] = (u32)Te4[(s1      ) & 0xff]       ^
+           (u32)Te4[(s2 >>  8) & 0xff] <<  8 ^
+           (u32)Te4[(s3 >> 16) & 0xff] << 16 ^
+           (u32)Te4[(s0 >> 24)       ] << 24;
+    t[2] = (u32)Te4[(s2      ) & 0xff]       ^
+           (u32)Te4[(s3 >>  8) & 0xff] <<  8 ^
+           (u32)Te4[(s0 >> 16) & 0xff] << 16 ^
+           (u32)Te4[(s1 >> 24)       ] << 24;
+    t[3] = (u32)Te4[(s3      ) & 0xff]       ^
+           (u32)Te4[(s0 >>  8) & 0xff] <<  8 ^
+           (u32)Te4[(s1 >> 16) & 0xff] << 16 ^
+           (u32)Te4[(s2 >> 24)       ] << 24;
+
+    /* now do the linear transform using words */
+    {   int i;
+        u32 r0, r1, r2;
+
+        for (i = 0; i < 4; i++) {
+            r0 = t[i];
+            r1 = r0 & 0x80808080;
+            r2 = ((r0 & 0x7f7f7f7f) << 1) ^
+                ((r1 - (r1 >> 7)) & 0x1b1b1b1b);
+#if defined(ROTATE)
+            t[i] = r2 ^ ROTATE(r2,24) ^ ROTATE(r0,24) ^
+                ROTATE(r0,16) ^ ROTATE(r0,8);
+#else
+            t[i] = r2 ^ ((r2 ^ r0) << 24) ^ ((r2 ^ r0) >> 8) ^
+                (r0 << 16) ^ (r0 >> 16) ^
+                (r0 << 8) ^ (r0 >> 24);
+#endif
+            t[i] ^= rk[4+i];
+        }
+    }
+#else
+    t[0] =  Te0[(s0      ) & 0xff] ^
+        Te1[(s1 >>  8) & 0xff] ^
+        Te2[(s2 >> 16) & 0xff] ^
+        Te3[(s3 >> 24)       ] ^
+        rk[4];
+    t[1] =  Te0[(s1      ) & 0xff] ^
+        Te1[(s2 >>  8) & 0xff] ^
+        Te2[(s3 >> 16) & 0xff] ^
+        Te3[(s0 >> 24)       ] ^
+        rk[5];
+    t[2] =  Te0[(s2      ) & 0xff] ^
+        Te1[(s3 >>  8) & 0xff] ^
+        Te2[(s0 >> 16) & 0xff] ^
+        Te3[(s1 >> 24)       ] ^
+        rk[6];
+    t[3] =  Te0[(s3      ) & 0xff] ^
+        Te1[(s0 >>  8) & 0xff] ^
+        Te2[(s1 >> 16) & 0xff] ^
+        Te3[(s2 >> 24)       ] ^
+        rk[7];
+#endif
+    s0 = t[0]; s1 = t[1]; s2 = t[2]; s3 = t[3];
+
+    /*
+     * Nr - 2 full rounds:
+     */
+    for (rk+=8,r=key->rounds-2; r>0; rk+=4,r--) {
+#if defined(AES_COMPACT_IN_INNER_ROUNDS)
+        t[0] = (u32)Te4[(s0      ) & 0xff]       ^
+               (u32)Te4[(s1 >>  8) & 0xff] <<  8 ^
+               (u32)Te4[(s2 >> 16) & 0xff] << 16 ^
+               (u32)Te4[(s3 >> 24)       ] << 24;
+        t[1] = (u32)Te4[(s1      ) & 0xff]       ^
+               (u32)Te4[(s2 >>  8) & 0xff] <<  8 ^
+               (u32)Te4[(s3 >> 16) & 0xff] << 16 ^
+               (u32)Te4[(s0 >> 24)       ] << 24;
+        t[2] = (u32)Te4[(s2      ) & 0xff]       ^
+               (u32)Te4[(s3 >>  8) & 0xff] <<  8 ^
+               (u32)Te4[(s0 >> 16) & 0xff] << 16 ^
+               (u32)Te4[(s1 >> 24)       ] << 24;
+        t[3] = (u32)Te4[(s3      ) & 0xff]       ^
+               (u32)Te4[(s0 >>  8) & 0xff] <<  8 ^
+               (u32)Te4[(s1 >> 16) & 0xff] << 16 ^
+               (u32)Te4[(s2 >> 24)       ] << 24;
+
+        /* now do the linear transform using words */
+        {
+            int i;
+            u32 r0, r1, r2;
+
+            for (i = 0; i < 4; i++) {
+                r0 = t[i];
+                r1 = r0 & 0x80808080;
+                r2 = ((r0 & 0x7f7f7f7f) << 1) ^
+                    ((r1 - (r1 >> 7)) & 0x1b1b1b1b);
+#if defined(ROTATE)
+                t[i] = r2 ^ ROTATE(r2,24) ^ ROTATE(r0,24) ^
+                    ROTATE(r0,16) ^ ROTATE(r0,8);
+#else
+                t[i] = r2 ^ ((r2 ^ r0) << 24) ^ ((r2 ^ r0) >> 8) ^
+                    (r0 << 16) ^ (r0 >> 16) ^
+                    (r0 << 8) ^ (r0 >> 24);
+#endif
+                t[i] ^= rk[i];
+            }
+        }
+#else
+        t[0] =  Te0[(s0      ) & 0xff] ^
+            Te1[(s1 >>  8) & 0xff] ^
+            Te2[(s2 >> 16) & 0xff] ^
+            Te3[(s3 >> 24)       ] ^
+            rk[0];
+        t[1] =  Te0[(s1      ) & 0xff] ^
+            Te1[(s2 >>  8) & 0xff] ^
+            Te2[(s3 >> 16) & 0xff] ^
+            Te3[(s0 >> 24)       ] ^
+            rk[1];
+        t[2] =  Te0[(s2      ) & 0xff] ^
+            Te1[(s3 >>  8) & 0xff] ^
+            Te2[(s0 >> 16) & 0xff] ^
+            Te3[(s1 >> 24)       ] ^
+            rk[2];
+        t[3] =  Te0[(s3      ) & 0xff] ^
+            Te1[(s0 >>  8) & 0xff] ^
+            Te2[(s1 >> 16) & 0xff] ^
+            Te3[(s2 >> 24)       ] ^
+            rk[3];
+#endif
+        s0 = t[0]; s1 = t[1]; s2 = t[2]; s3 = t[3];
+    }
+    /*
+     * apply last round and
+     * map cipher state to byte array block:
+     */
+#if defined(AES_COMPACT_IN_OUTER_ROUNDS)
+    prefetch256(Te4);
+
+    *(u32*)(out+0) =
+           (u32)Te4[(s0      ) & 0xff]       ^
+           (u32)Te4[(s1 >>  8) & 0xff] <<  8 ^
+           (u32)Te4[(s2 >> 16) & 0xff] << 16 ^
+           (u32)Te4[(s3 >> 24)       ] << 24 ^
+        rk[0];
+    *(u32*)(out+4) =
+           (u32)Te4[(s1      ) & 0xff]       ^
+           (u32)Te4[(s2 >>  8) & 0xff] <<  8 ^
+           (u32)Te4[(s3 >> 16) & 0xff] << 16 ^
+           (u32)Te4[(s0 >> 24)       ] << 24 ^
+        rk[1];
+    *(u32*)(out+8) =
+           (u32)Te4[(s2      ) & 0xff]       ^
+           (u32)Te4[(s3 >>  8) & 0xff] <<  8 ^
+           (u32)Te4[(s0 >> 16) & 0xff] << 16 ^
+           (u32)Te4[(s1 >> 24)       ] << 24 ^
+        rk[2];
+    *(u32*)(out+12) =
+           (u32)Te4[(s3      ) & 0xff]       ^
+           (u32)Te4[(s0 >>  8) & 0xff] <<  8 ^
+           (u32)Te4[(s1 >> 16) & 0xff] << 16 ^
+           (u32)Te4[(s2 >> 24)       ] << 24 ^
+        rk[3];
+#else
+    *(u32*)(out+0) =
+        (Te2[(s0      ) & 0xff] & 0x000000ffU) ^
+        (Te3[(s1 >>  8) & 0xff] & 0x0000ff00U) ^
+        (Te0[(s2 >> 16) & 0xff] & 0x00ff0000U) ^
+        (Te1[(s3 >> 24)       ] & 0xff000000U) ^
+        rk[0];
+    *(u32*)(out+4) =
+        (Te2[(s1      ) & 0xff] & 0x000000ffU) ^
+        (Te3[(s2 >>  8) & 0xff] & 0x0000ff00U) ^
+        (Te0[(s3 >> 16) & 0xff] & 0x00ff0000U) ^
+        (Te1[(s0 >> 24)       ] & 0xff000000U) ^
+        rk[1];
+    *(u32*)(out+8) =
+        (Te2[(s2      ) & 0xff] & 0x000000ffU) ^
+        (Te3[(s3 >>  8) & 0xff] & 0x0000ff00U) ^
+        (Te0[(s0 >> 16) & 0xff] & 0x00ff0000U) ^
+        (Te1[(s1 >> 24)       ] & 0xff000000U) ^
+        rk[2];
+    *(u32*)(out+12) =
+        (Te2[(s3      ) & 0xff] & 0x000000ffU) ^
+        (Te3[(s0 >>  8) & 0xff] & 0x0000ff00U) ^
+        (Te0[(s1 >> 16) & 0xff] & 0x00ff0000U) ^
+        (Te1[(s2 >> 24)       ] & 0xff000000U) ^
+        rk[3];
+#endif
+}
+
+/*
+ * Decrypt a single block
+ * in and out can overlap
+ */
+void AES_decrypt(const unsigned char *in, unsigned char *out,
+                 const AES_KEY *key)
+{
+
+    const u32 *rk;
+    u32 s0, s1, s2, s3, t[4];
+    int r;
+
+    assert(in && out && key);
+    rk = key->rd_key;
+
+    /*
+     * map byte array block to cipher state
+     * and add initial round key:
+     */
+    s0 = GETU32(in     ) ^ rk[0];
+    s1 = GETU32(in +  4) ^ rk[1];
+    s2 = GETU32(in +  8) ^ rk[2];
+    s3 = GETU32(in + 12) ^ rk[3];
+
+#if defined(AES_COMPACT_IN_OUTER_ROUNDS)
+    prefetch256(Td4);
+
+    t[0] = (u32)Td4[(s0      ) & 0xff]       ^
+           (u32)Td4[(s3 >>  8) & 0xff] <<  8 ^
+           (u32)Td4[(s2 >> 16) & 0xff] << 16 ^
+           (u32)Td4[(s1 >> 24)       ] << 24;
+    t[1] = (u32)Td4[(s1      ) & 0xff]       ^
+           (u32)Td4[(s0 >>  8) & 0xff] <<  8 ^
+           (u32)Td4[(s3 >> 16) & 0xff] << 16 ^
+           (u32)Td4[(s2 >> 24)       ] << 24;
+    t[2] = (u32)Td4[(s2      ) & 0xff]       ^
+           (u32)Td4[(s1 >>  8) & 0xff] <<  8 ^
+           (u32)Td4[(s0 >> 16) & 0xff] << 16 ^
+           (u32)Td4[(s3 >> 24)       ] << 24;
+    t[3] = (u32)Td4[(s3      ) & 0xff]       ^
+           (u32)Td4[(s2 >>  8) & 0xff] <<  8 ^
+           (u32)Td4[(s1 >> 16) & 0xff] << 16 ^
+           (u32)Td4[(s0 >> 24)       ] << 24;
+
+    /* now do the linear transform using words */
+    {
+        int i;
+        u32 tp1, tp2, tp4, tp8, tp9, tpb, tpd, tpe, m;
+
+        for (i = 0; i < 4; i++) {
+            tp1 = t[i];
+            m = tp1 & 0x80808080;
+            tp2 = ((tp1 & 0x7f7f7f7f) << 1) ^
+                ((m - (m >> 7)) & 0x1b1b1b1b);
+            m = tp2 & 0x80808080;
+            tp4 = ((tp2 & 0x7f7f7f7f) << 1) ^
+                ((m - (m >> 7)) & 0x1b1b1b1b);
+            m = tp4 & 0x80808080;
+            tp8 = ((tp4 & 0x7f7f7f7f) << 1) ^
+                ((m - (m >> 7)) & 0x1b1b1b1b);
+            tp9 = tp8 ^ tp1;
+            tpb = tp9 ^ tp2;
+            tpd = tp9 ^ tp4;
+            tpe = tp8 ^ tp4 ^ tp2;
+#if defined(ROTATE)
+            t[i] = tpe ^ ROTATE(tpd,16) ^
+                ROTATE(tp9,8) ^ ROTATE(tpb,24);
+#else
+            t[i] = tpe ^ (tpd >> 16) ^ (tpd << 16) ^
+                (tp9 >> 24) ^ (tp9 << 8) ^
+                (tpb >> 8) ^ (tpb << 24);
+#endif
+            t[i] ^= rk[4+i];
+        }
+    }
+#else
+    t[0] =  Td0[(s0      ) & 0xff] ^
+        Td1[(s3 >>  8) & 0xff] ^
+        Td2[(s2 >> 16) & 0xff] ^
+        Td3[(s1 >> 24)       ] ^
+        rk[4];
+    t[1] =  Td0[(s1      ) & 0xff] ^
+        Td1[(s0 >>  8) & 0xff] ^
+        Td2[(s3 >> 16) & 0xff] ^
+        Td3[(s2 >> 24)       ] ^
+        rk[5];
+    t[2] =  Td0[(s2      ) & 0xff] ^
+        Td1[(s1 >>  8) & 0xff] ^
+        Td2[(s0 >> 16) & 0xff] ^
+        Td3[(s3 >> 24)       ] ^
+        rk[6];
+    t[3] =  Td0[(s3      ) & 0xff] ^
+        Td1[(s2 >>  8) & 0xff] ^
+        Td2[(s1 >> 16) & 0xff] ^
+        Td3[(s0 >> 24)       ] ^
+        rk[7];
+#endif
+    s0 = t[0]; s1 = t[1]; s2 = t[2]; s3 = t[3];
+
+    /*
+     * Nr - 2 full rounds:
+     */
+    for (rk+=8,r=key->rounds-2; r>0; rk+=4,r--) {
+#if defined(AES_COMPACT_IN_INNER_ROUNDS)
+        t[0] = (u32)Td4[(s0      ) & 0xff]       ^
+               (u32)Td4[(s3 >>  8) & 0xff] <<  8 ^
+               (u32)Td4[(s2 >> 16) & 0xff] << 16 ^
+               (u32)Td4[(s1 >> 24)       ] << 24;
+        t[1] = (u32)Td4[(s1      ) & 0xff]       ^
+               (u32)Td4[(s0 >>  8) & 0xff] <<  8 ^
+               (u32)Td4[(s3 >> 16) & 0xff] << 16 ^
+               (u32)Td4[(s2 >> 24)       ] << 24;
+        t[2] = (u32)Td4[(s2      ) & 0xff]       ^
+               (u32)Td4[(s1 >>  8) & 0xff] <<  8 ^
+               (u32)Td4[(s0 >> 16) & 0xff] << 16 ^
+               (u32)Td4[(s3 >> 24)       ] << 24;
+        t[3] = (u32)Td4[(s3      ) & 0xff]       ^
+               (u32)Td4[(s2 >>  8) & 0xff] <<  8 ^
+               (u32)Td4[(s1 >> 16) & 0xff] << 16 ^
+               (u32)Td4[(s0 >> 24)       ] << 24;
+
+    /* now do the linear transform using words */
+    {
+        int i;
+        u32 tp1, tp2, tp4, tp8, tp9, tpb, tpd, tpe, m;
+
+        for (i = 0; i < 4; i++) {
+            tp1 = t[i];
+            m = tp1 & 0x80808080;
+            tp2 = ((tp1 & 0x7f7f7f7f) << 1) ^
+                ((m - (m >> 7)) & 0x1b1b1b1b);
+            m = tp2 & 0x80808080;
+            tp4 = ((tp2 & 0x7f7f7f7f) << 1) ^
+                ((m - (m >> 7)) & 0x1b1b1b1b);
+            m = tp4 & 0x80808080;
+            tp8 = ((tp4 & 0x7f7f7f7f) << 1) ^
+                ((m - (m >> 7)) & 0x1b1b1b1b);
+            tp9 = tp8 ^ tp1;
+            tpb = tp9 ^ tp2;
+            tpd = tp9 ^ tp4;
+            tpe = tp8 ^ tp4 ^ tp2;
+#if defined(ROTATE)
+            t[i] = tpe ^ ROTATE(tpd,16) ^
+                ROTATE(tp9,8) ^ ROTATE(tpb,24);
+#else
+            t[i] = tpe ^ (tpd >> 16) ^ (tpd << 16) ^
+                (tp9 >> 24) ^ (tp9 << 8) ^
+                (tpb >> 8) ^ (tpb << 24);
+#endif
+            t[i] ^= rk[i];
+        }
+    }
+#else
+    t[0] =  Td0[(s0      ) & 0xff] ^
+        Td1[(s3 >>  8) & 0xff] ^
+        Td2[(s2 >> 16) & 0xff] ^
+        Td3[(s1 >> 24)       ] ^
+        rk[0];
+    t[1] =  Td0[(s1      ) & 0xff] ^
+        Td1[(s0 >>  8) & 0xff] ^
+        Td2[(s3 >> 16) & 0xff] ^
+        Td3[(s2 >> 24)       ] ^
+        rk[1];
+    t[2] =  Td0[(s2      ) & 0xff] ^
+        Td1[(s1 >>  8) & 0xff] ^
+        Td2[(s0 >> 16) & 0xff] ^
+        Td3[(s3 >> 24)       ] ^
+        rk[2];
+    t[3] =  Td0[(s3      ) & 0xff] ^
+        Td1[(s2 >>  8) & 0xff] ^
+        Td2[(s1 >> 16) & 0xff] ^
+        Td3[(s0 >> 24)       ] ^
+        rk[3];
+#endif
+    s0 = t[0]; s1 = t[1]; s2 = t[2]; s3 = t[3];
+    }
+    /*
+     * apply last round and
+     * map cipher state to byte array block:
+     */
+    prefetch256(Td4);
+
+    *(u32*)(out+0) =
+        ((u32)Td4[(s0      ) & 0xff])    ^
+        ((u32)Td4[(s3 >>  8) & 0xff] <<  8) ^
+        ((u32)Td4[(s2 >> 16) & 0xff] << 16) ^
+        ((u32)Td4[(s1 >> 24)       ] << 24) ^
+        rk[0];
+    *(u32*)(out+4) =
+        ((u32)Td4[(s1      ) & 0xff])     ^
+        ((u32)Td4[(s0 >>  8) & 0xff] <<  8) ^
+        ((u32)Td4[(s3 >> 16) & 0xff] << 16) ^
+        ((u32)Td4[(s2 >> 24)       ] << 24) ^
+        rk[1];
+    *(u32*)(out+8) =
+        ((u32)Td4[(s2      ) & 0xff])     ^
+        ((u32)Td4[(s1 >>  8) & 0xff] <<  8) ^
+        ((u32)Td4[(s0 >> 16) & 0xff] << 16) ^
+        ((u32)Td4[(s3 >> 24)       ] << 24) ^
+        rk[2];
+    *(u32*)(out+12) =
+        ((u32)Td4[(s3      ) & 0xff])     ^
+        ((u32)Td4[(s2 >>  8) & 0xff] <<  8) ^
+        ((u32)Td4[(s1 >> 16) & 0xff] << 16) ^
+        ((u32)Td4[(s0 >> 24)       ] << 24) ^
+        rk[3];
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-586.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-586.pl
new file mode 100755
index 000000000..29059edf8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-586.pl
@@ -0,0 +1,3000 @@
+#! /usr/bin/env perl
+# Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# Version 4.3.
+#
+# You might fail to appreciate this module performance from the first
+# try. If compared to "vanilla" linux-ia32-icc target, i.e. considered
+# to be *the* best Intel C compiler without -KPIC, performance appears
+# to be virtually identical... But try to re-configure with shared
+# library support... Aha! Intel compiler "suddenly" lags behind by 30%
+# [on P4, more on others]:-) And if compared to position-independent
+# code generated by GNU C, this code performs *more* than *twice* as
+# fast! Yes, all this buzz about PIC means that unlike other hand-
+# coded implementations, this one was explicitly designed to be safe
+# to use even in shared library context... This also means that this
+# code isn't necessarily absolutely fastest "ever," because in order
+# to achieve position independence an extra register has to be
+# off-loaded to stack, which affects the benchmark result.
+#
+# Special note about instruction choice. Do you recall RC4_INT code
+# performing poorly on P4? It might be the time to figure out why.
+# RC4_INT code implies effective address calculations in base+offset*4
+# form. Trouble is that it seems that offset scaling turned to be
+# critical path... At least eliminating scaling resulted in 2.8x RC4
+# performance improvement [as you might recall]. As AES code is hungry
+# for scaling too, I [try to] avoid the latter by favoring off-by-2
+# shifts and masking the result with 0xFF<<2 instead of "boring" 0xFF.
+#
+# As was shown by Dean Gaudet, the above note turned out to be
+# void. Performance improvement with off-by-2 shifts was observed on
+# intermediate implementation, which was spilling yet another register
+# to stack... Final offset*4 code below runs just a tad faster on P4,
+# but exhibits up to 10% improvement on other cores.
+#
+# Second version is "monolithic" replacement for aes_core.c, which in
+# addition to AES_[de|en]crypt implements AES_set_[de|en]cryption_key.
+# This made it possible to implement little-endian variant of the
+# algorithm without modifying the base C code. Motivating factor for
+# the undertaken effort was that it appeared that in tight IA-32
+# register window little-endian flavor could achieve slightly higher
+# Instruction Level Parallelism, and it indeed resulted in up to 15%
+# better performance on most recent µ-archs...
+#
+# Third version adds AES_cbc_encrypt implementation, which resulted in
+# up to 40% performance improvement of CBC benchmark results. 40% was
+# observed on P4 core, where "overall" improvement coefficient, i.e. if
+# compared to PIC generated by GCC and in CBC mode, was observed to be
+# as large as 4x:-) CBC performance is virtually identical to ECB now
+# and on some platforms even better, e.g. 17.6 "small" cycles/byte on
+# Opteron, because certain function prologues and epilogues are
+# effectively taken out of the loop...
+#
+# Version 3.2 implements compressed tables and prefetch of these tables
+# in CBC[!] mode. Former means that 3/4 of table references are now
+# misaligned, which unfortunately has negative impact on elder IA-32
+# implementations, Pentium suffered 30% penalty, PIII - 10%.
+#
+# Version 3.3 avoids L1 cache aliasing between stack frame and
+# S-boxes, and 3.4 - L1 cache aliasing even between key schedule. The
+# latter is achieved by copying the key schedule to controlled place in
+# stack. This unfortunately has rather strong impact on small block CBC
+# performance, ~2x deterioration on 16-byte block if compared to 3.3.
+#
+# Version 3.5 checks if there is L1 cache aliasing between user-supplied
+# key schedule and S-boxes and abstains from copying the former if
+# there is no. This allows end-user to consciously retain small block
+# performance by aligning key schedule in specific manner.
+#
+# Version 3.6 compresses Td4 to 256 bytes and prefetches it in ECB.
+#
+# Current ECB performance numbers for 128-bit key in CPU cycles per
+# processed byte [measure commonly used by AES benchmarkers] are:
+#
+#		small footprint		fully unrolled
+# P4		24			22
+# AMD K8	20			19
+# PIII		25			23
+# Pentium	81			78
+#
+# Version 3.7 reimplements outer rounds as "compact." Meaning that
+# first and last rounds reference compact 256 bytes S-box. This means
+# that first round consumes a lot more CPU cycles and that encrypt
+# and decrypt performance becomes asymmetric. Encrypt performance
+# drops by 10-12%, while decrypt - by 20-25%:-( 256 bytes S-box is
+# aggressively pre-fetched.
+#
+# Version 4.0 effectively rolls back to 3.6 and instead implements
+# additional set of functions, _[x86|sse]_AES_[en|de]crypt_compact,
+# which use exclusively 256 byte S-box. These functions are to be
+# called in modes not concealing plain text, such as ECB, or when
+# we're asked to process smaller amount of data [or unconditionally
+# on hyper-threading CPU]. Currently it's called unconditionally from
+# AES_[en|de]crypt, which affects all modes, but CBC. CBC routine
+# still needs to be modified to switch between slower and faster
+# mode when appropriate... But in either case benchmark landscape
+# changes dramatically and below numbers are CPU cycles per processed
+# byte for 128-bit key.
+#
+#		ECB encrypt	ECB decrypt	CBC large chunk
+# P4		52[54]		83[95]		23
+# AMD K8	46[41]		66[70]		18
+# PIII		41[50]		60[77]		24
+# Core 2	31[36]		45[64]		18.5
+# Atom		76[100]		96[138]		60
+# Pentium	115		150		77
+#
+# Version 4.1 switches to compact S-box even in key schedule setup.
+#
+# Version 4.2 prefetches compact S-box in every SSE round or in other
+# words every cache-line is *guaranteed* to be accessed within ~50
+# cycles window. Why just SSE? Because it's needed on hyper-threading
+# CPU! Which is also why it's prefetched with 64 byte stride. Best
+# part is that it has no negative effect on performance:-)
+#
+# Version 4.3 implements switch between compact and non-compact block
+# functions in AES_cbc_encrypt depending on how much data was asked
+# to be processed in one stroke.
+#
+######################################################################
+# Timing attacks are classified in two classes: synchronous when
+# attacker consciously initiates cryptographic operation and collects
+# timing data of various character afterwards, and asynchronous when
+# malicious code is executed on same CPU simultaneously with AES,
+# instruments itself and performs statistical analysis of this data.
+#
+# As far as synchronous attacks go the root to the AES timing
+# vulnerability is twofold. Firstly, of 256 S-box elements at most 160
+# are referred to in single 128-bit block operation. Well, in C
+# implementation with 4 distinct tables it's actually as little as 40
+# references per 256 elements table, but anyway... Secondly, even
+# though S-box elements are clustered into smaller amount of cache-
+# lines, smaller than 160 and even 40, it turned out that for certain
+# plain-text pattern[s] or simply put chosen plain-text and given key
+# few cache-lines remain unaccessed during block operation. Now, if
+# attacker can figure out this access pattern, he can deduct the key
+# [or at least part of it]. The natural way to mitigate this kind of
+# attacks is to minimize the amount of cache-lines in S-box and/or
+# prefetch them to ensure that every one is accessed for more uniform
+# timing. But note that *if* plain-text was concealed in such way that
+# input to block function is distributed *uniformly*, then attack
+# wouldn't apply. Now note that some encryption modes, most notably
+# CBC, do mask the plain-text in this exact way [secure cipher output
+# is distributed uniformly]. Yes, one still might find input that
+# would reveal the information about given key, but if amount of
+# candidate inputs to be tried is larger than amount of possible key
+# combinations then attack becomes infeasible. This is why revised
+# AES_cbc_encrypt "dares" to switch to larger S-box when larger chunk
+# of data is to be processed in one stroke. The current size limit of
+# 512 bytes is chosen to provide same [diminishingly low] probability
+# for cache-line to remain untouched in large chunk operation with
+# large S-box as for single block operation with compact S-box and
+# surely needs more careful consideration...
+#
+# As for asynchronous attacks. There are two flavours: attacker code
+# being interleaved with AES on hyper-threading CPU at *instruction*
+# level, and two processes time sharing single core. As for latter.
+# Two vectors. 1. Given that attacker process has higher priority,
+# yield execution to process performing AES just before timer fires
+# off the scheduler, immediately regain control of CPU and analyze the
+# cache state. For this attack to be efficient attacker would have to
+# effectively slow down the operation by several *orders* of magnitude,
+# by ratio of time slice to duration of handful of AES rounds, which
+# unlikely to remain unnoticed. Not to mention that this also means
+# that he would spend correspondingly more time to collect enough
+# statistical data to mount the attack. It's probably appropriate to
+# say that if adversary reckons that this attack is beneficial and
+# risks to be noticed, you probably have larger problems having him
+# mere opportunity. In other words suggested code design expects you
+# to preclude/mitigate this attack by overall system security design.
+# 2. Attacker manages to make his code interrupt driven. In order for
+# this kind of attack to be feasible, interrupt rate has to be high
+# enough, again comparable to duration of handful of AES rounds. But
+# is there interrupt source of such rate? Hardly, not even 1Gbps NIC
+# generates interrupts at such raging rate...
+#
+# And now back to the former, hyper-threading CPU or more specifically
+# Intel P4. Recall that asynchronous attack implies that malicious
+# code instruments itself. And naturally instrumentation granularity
+# has be noticeably lower than duration of codepath accessing S-box.
+# Given that all cache-lines are accessed during that time that is.
+# Current implementation accesses *all* cache-lines within ~50 cycles
+# window, which is actually *less* than RDTSC latency on Intel P4!
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output = pop;
+open OUT,">$output";
+*STDOUT=*OUT;
+
+&asm_init($ARGV[0],$x86only = $ARGV[$#ARGV] eq "386");
+&static_label("AES_Te");
+&static_label("AES_Td");
+
+$s0="eax";
+$s1="ebx";
+$s2="ecx";
+$s3="edx";
+$key="edi";
+$acc="esi";
+$tbl="ebp";
+
+# stack frame layout in _[x86|sse]_AES_* routines, frame is allocated
+# by caller
+$__ra=&DWP(0,"esp");	# return address
+$__s0=&DWP(4,"esp");	# s0 backing store
+$__s1=&DWP(8,"esp");	# s1 backing store
+$__s2=&DWP(12,"esp");	# s2 backing store
+$__s3=&DWP(16,"esp");	# s3 backing store
+$__key=&DWP(20,"esp");	# pointer to key schedule
+$__end=&DWP(24,"esp");	# pointer to end of key schedule
+$__tbl=&DWP(28,"esp");	# %ebp backing store
+
+# stack frame layout in AES_[en|crypt] routines, which differs from
+# above by 4 and overlaps by %ebp backing store
+$_tbl=&DWP(24,"esp");
+$_esp=&DWP(28,"esp");
+
+sub _data_word() { my $i; while(defined($i=shift)) { &data_word($i,$i); } }
+
+$speed_limit=512;	# chunks smaller than $speed_limit are
+			# processed with compact routine in CBC mode
+$small_footprint=1;	# $small_footprint=1 code is ~5% slower [on
+			# recent µ-archs], but ~5 times smaller!
+			# I favor compact code to minimize cache
+			# contention and in hope to "collect" 5% back
+			# in real-life applications...
+
+$vertical_spin=0;	# shift "vertically" defaults to 0, because of
+			# its proof-of-concept status...
+# Note that there is no decvert(), as well as last encryption round is
+# performed with "horizontal" shifts. This is because this "vertical"
+# implementation [one which groups shifts on a given $s[i] to form a
+# "column," unlike "horizontal" one, which groups shifts on different
+# $s[i] to form a "row"] is work in progress. It was observed to run
+# few percents faster on Intel cores, but not AMD. On AMD K8 core it's
+# whole 12% slower:-( So we face a trade-off... Shall it be resolved
+# some day? Till then the code is considered experimental and by
+# default remains dormant...
+
+sub encvert()
+{ my ($te,@s) = @_;
+  my ($v0,$v1) = ($acc,$key);
+
+	&mov	($v0,$s[3]);				# copy s3
+	&mov	(&DWP(4,"esp"),$s[2]);			# save s2
+	&mov	($v1,$s[0]);				# copy s0
+	&mov	(&DWP(8,"esp"),$s[1]);			# save s1
+
+	&movz	($s[2],&HB($s[0]));
+	&and	($s[0],0xFF);
+	&mov	($s[0],&DWP(0,$te,$s[0],8));		# s0>>0
+	&shr	($v1,16);
+	&mov	($s[3],&DWP(3,$te,$s[2],8));		# s0>>8
+	&movz	($s[1],&HB($v1));
+	&and	($v1,0xFF);
+	&mov	($s[2],&DWP(2,$te,$v1,8));		# s0>>16
+	 &mov	($v1,$v0);
+	&mov	($s[1],&DWP(1,$te,$s[1],8));		# s0>>24
+
+	&and	($v0,0xFF);
+	&xor	($s[3],&DWP(0,$te,$v0,8));		# s3>>0
+	&movz	($v0,&HB($v1));
+	&shr	($v1,16);
+	&xor	($s[2],&DWP(3,$te,$v0,8));		# s3>>8
+	&movz	($v0,&HB($v1));
+	&and	($v1,0xFF);
+	&xor	($s[1],&DWP(2,$te,$v1,8));		# s3>>16
+	 &mov	($v1,&DWP(4,"esp"));			# restore s2
+	&xor	($s[0],&DWP(1,$te,$v0,8));		# s3>>24
+
+	&mov	($v0,$v1);
+	&and	($v1,0xFF);
+	&xor	($s[2],&DWP(0,$te,$v1,8));		# s2>>0
+	&movz	($v1,&HB($v0));
+	&shr	($v0,16);
+	&xor	($s[1],&DWP(3,$te,$v1,8));		# s2>>8
+	&movz	($v1,&HB($v0));
+	&and	($v0,0xFF);
+	&xor	($s[0],&DWP(2,$te,$v0,8));		# s2>>16
+	 &mov	($v0,&DWP(8,"esp"));			# restore s1
+	&xor	($s[3],&DWP(1,$te,$v1,8));		# s2>>24
+
+	&mov	($v1,$v0);
+	&and	($v0,0xFF);
+	&xor	($s[1],&DWP(0,$te,$v0,8));		# s1>>0
+	&movz	($v0,&HB($v1));
+	&shr	($v1,16);
+	&xor	($s[0],&DWP(3,$te,$v0,8));		# s1>>8
+	&movz	($v0,&HB($v1));
+	&and	($v1,0xFF);
+	&xor	($s[3],&DWP(2,$te,$v1,8));		# s1>>16
+	 &mov	($key,$__key);				# reincarnate v1 as key
+	&xor	($s[2],&DWP(1,$te,$v0,8));		# s1>>24
+}
+
+# Another experimental routine, which features "horizontal spin," but
+# eliminates one reference to stack. Strangely enough runs slower...
+sub enchoriz()
+{ my ($v0,$v1) = ($key,$acc);
+
+	&movz	($v0,&LB($s0));			#  3, 2, 1, 0*
+	&rotr	($s2,8);			#  8,11,10, 9
+	&mov	($v1,&DWP(0,$te,$v0,8));	#  0
+	&movz	($v0,&HB($s1));			#  7, 6, 5*, 4
+	&rotr	($s3,16);			# 13,12,15,14
+	&xor	($v1,&DWP(3,$te,$v0,8));	#  5
+	&movz	($v0,&HB($s2));			#  8,11,10*, 9
+	&rotr	($s0,16);			#  1, 0, 3, 2
+	&xor	($v1,&DWP(2,$te,$v0,8));	# 10
+	&movz	($v0,&HB($s3));			# 13,12,15*,14
+	&xor	($v1,&DWP(1,$te,$v0,8));	# 15, t[0] collected
+	&mov	($__s0,$v1);			# t[0] saved
+
+	&movz	($v0,&LB($s1));			#  7, 6, 5, 4*
+	&shr	($s1,16);			#  -, -, 7, 6
+	&mov	($v1,&DWP(0,$te,$v0,8));	#  4
+	&movz	($v0,&LB($s3));			# 13,12,15,14*
+	&xor	($v1,&DWP(2,$te,$v0,8));	# 14
+	&movz	($v0,&HB($s0));			#  1, 0, 3*, 2
+	&and	($s3,0xffff0000);		# 13,12, -, -
+	&xor	($v1,&DWP(1,$te,$v0,8));	#  3
+	&movz	($v0,&LB($s2));			#  8,11,10, 9*
+	&or	($s3,$s1);			# 13,12, 7, 6
+	&xor	($v1,&DWP(3,$te,$v0,8));	#  9, t[1] collected
+	&mov	($s1,$v1);			#  s[1]=t[1]
+
+	&movz	($v0,&LB($s0));			#  1, 0, 3, 2*
+	&shr	($s2,16);			#  -, -, 8,11
+	&mov	($v1,&DWP(2,$te,$v0,8));	#  2
+	&movz	($v0,&HB($s3));			# 13,12, 7*, 6
+	&xor	($v1,&DWP(1,$te,$v0,8));	#  7
+	&movz	($v0,&HB($s2));			#  -, -, 8*,11
+	&xor	($v1,&DWP(0,$te,$v0,8));	#  8
+	&mov	($v0,$s3);
+	&shr	($v0,24);			# 13
+	&xor	($v1,&DWP(3,$te,$v0,8));	# 13, t[2] collected
+
+	&movz	($v0,&LB($s2));			#  -, -, 8,11*
+	&shr	($s0,24);			#  1*
+	&mov	($s2,&DWP(1,$te,$v0,8));	# 11
+	&xor	($s2,&DWP(3,$te,$s0,8));	#  1
+	&mov	($s0,$__s0);			# s[0]=t[0]
+	&movz	($v0,&LB($s3));			# 13,12, 7, 6*
+	&shr	($s3,16);			#   ,  ,13,12
+	&xor	($s2,&DWP(2,$te,$v0,8));	#  6
+	&mov	($key,$__key);			# reincarnate v0 as key
+	&and	($s3,0xff);			#   ,  ,13,12*
+	&mov	($s3,&DWP(0,$te,$s3,8));	# 12
+	&xor	($s3,$s2);			# s[2]=t[3] collected
+	&mov	($s2,$v1);			# s[2]=t[2]
+}
+
+# More experimental code... SSE one... Even though this one eliminates
+# *all* references to stack, it's not faster...
+sub sse_encbody()
+{
+	&movz	($acc,&LB("eax"));		#  0
+	&mov	("ecx",&DWP(0,$tbl,$acc,8));	#  0
+	&pshufw	("mm2","mm0",0x0d);		#  7, 6, 3, 2
+	&movz	("edx",&HB("eax"));		#  1
+	&mov	("edx",&DWP(3,$tbl,"edx",8));	#  1
+	&shr	("eax",16);			#  5, 4
+
+	&movz	($acc,&LB("ebx"));		# 10
+	&xor	("ecx",&DWP(2,$tbl,$acc,8));	# 10
+	&pshufw	("mm6","mm4",0x08);		# 13,12, 9, 8
+	&movz	($acc,&HB("ebx"));		# 11
+	&xor	("edx",&DWP(1,$tbl,$acc,8));	# 11
+	&shr	("ebx",16);			# 15,14
+
+	&movz	($acc,&HB("eax"));		#  5
+	&xor	("ecx",&DWP(3,$tbl,$acc,8));	#  5
+	&movq	("mm3",QWP(16,$key));
+	&movz	($acc,&HB("ebx"));		# 15
+	&xor	("ecx",&DWP(1,$tbl,$acc,8));	# 15
+	&movd	("mm0","ecx");			# t[0] collected
+
+	&movz	($acc,&LB("eax"));		#  4
+	&mov	("ecx",&DWP(0,$tbl,$acc,8));	#  4
+	&movd	("eax","mm2");			#  7, 6, 3, 2
+	&movz	($acc,&LB("ebx"));		# 14
+	&xor	("ecx",&DWP(2,$tbl,$acc,8));	# 14
+	&movd	("ebx","mm6");			# 13,12, 9, 8
+
+	&movz	($acc,&HB("eax"));		#  3
+	&xor	("ecx",&DWP(1,$tbl,$acc,8));	#  3
+	&movz	($acc,&HB("ebx"));		#  9
+	&xor	("ecx",&DWP(3,$tbl,$acc,8));	#  9
+	&movd	("mm1","ecx");			# t[1] collected
+
+	&movz	($acc,&LB("eax"));		#  2
+	&mov	("ecx",&DWP(2,$tbl,$acc,8));	#  2
+	&shr	("eax",16);			#  7, 6
+	&punpckldq	("mm0","mm1");		# t[0,1] collected
+	&movz	($acc,&LB("ebx"));		#  8
+	&xor	("ecx",&DWP(0,$tbl,$acc,8));	#  8
+	&shr	("ebx",16);			# 13,12
+
+	&movz	($acc,&HB("eax"));		#  7
+	&xor	("ecx",&DWP(1,$tbl,$acc,8));	#  7
+	&pxor	("mm0","mm3");
+	&movz	("eax",&LB("eax"));		#  6
+	&xor	("edx",&DWP(2,$tbl,"eax",8));	#  6
+	&pshufw	("mm1","mm0",0x08);		#  5, 4, 1, 0
+	&movz	($acc,&HB("ebx"));		# 13
+	&xor	("ecx",&DWP(3,$tbl,$acc,8));	# 13
+	&xor	("ecx",&DWP(24,$key));		# t[2]
+	&movd	("mm4","ecx");			# t[2] collected
+	&movz	("ebx",&LB("ebx"));		# 12
+	&xor	("edx",&DWP(0,$tbl,"ebx",8));	# 12
+	&shr	("ecx",16);
+	&movd	("eax","mm1");			#  5, 4, 1, 0
+	&mov	("ebx",&DWP(28,$key));		# t[3]
+	&xor	("ebx","edx");
+	&movd	("mm5","ebx");			# t[3] collected
+	&and	("ebx",0xffff0000);
+	&or	("ebx","ecx");
+
+	&punpckldq	("mm4","mm5");		# t[2,3] collected
+}
+
+######################################################################
+# "Compact" block function
+######################################################################
+
+sub enccompact()
+{ my $Fn = \&mov;
+  while ($#_>5) { pop(@_); $Fn=sub{}; }
+  my ($i,$te,@s)=@_;
+  my $tmp = $key;
+  my $out = $i==3?$s[0]:$acc;
+
+	# $Fn is used in first compact round and its purpose is to
+	# void restoration of some values from stack, so that after
+	# 4xenccompact with extra argument $key value is left there...
+	if ($i==3)  {	&$Fn	($key,$__key);			}##%edx
+	else        {	&mov	($out,$s[0]);			}
+			&and	($out,0xFF);
+	if ($i==1)  {	&shr	($s[0],16);			}#%ebx[1]
+	if ($i==2)  {	&shr	($s[0],24);			}#%ecx[2]
+			&movz	($out,&BP(-128,$te,$out,1));
+
+	if ($i==3)  {	$tmp=$s[1];				}##%eax
+			&movz	($tmp,&HB($s[1]));
+			&movz	($tmp,&BP(-128,$te,$tmp,1));
+			&shl	($tmp,8);
+			&xor	($out,$tmp);
+
+	if ($i==3)  {	$tmp=$s[2]; &mov ($s[1],$__s0);		}##%ebx
+	else        {	&mov	($tmp,$s[2]);
+			&shr	($tmp,16);			}
+	if ($i==2)  {	&and	($s[1],0xFF);			}#%edx[2]
+			&and	($tmp,0xFF);
+			&movz	($tmp,&BP(-128,$te,$tmp,1));
+			&shl	($tmp,16);
+			&xor	($out,$tmp);
+
+	if ($i==3)  {	$tmp=$s[3]; &mov ($s[2],$__s1);		}##%ecx
+	elsif($i==2){	&movz	($tmp,&HB($s[3]));		}#%ebx[2]
+	else        {	&mov	($tmp,$s[3]);
+			&shr	($tmp,24);			}
+			&movz	($tmp,&BP(-128,$te,$tmp,1));
+			&shl	($tmp,24);
+			&xor	($out,$tmp);
+	if ($i<2)   {	&mov	(&DWP(4+4*$i,"esp"),$out);	}
+	if ($i==3)  {	&mov	($s[3],$acc);			}
+	&comment();
+}
+
+sub enctransform()
+{ my @s = ($s0,$s1,$s2,$s3);
+  my $i = shift;
+  my $tmp = $tbl;
+  my $r2  = $key ;
+
+	&and	($tmp,$s[$i]);
+	&lea	($r2,&DWP(0,$s[$i],$s[$i]));
+	&mov	($acc,$tmp);
+	&shr	($tmp,7);
+	&and	($r2,0xfefefefe);
+	&sub	($acc,$tmp);
+	&mov	($tmp,$s[$i]);
+	&and	($acc,0x1b1b1b1b);
+	&rotr	($tmp,16);
+	&xor	($acc,$r2);	# r2
+	&mov	($r2,$s[$i]);
+
+	&xor	($s[$i],$acc);	# r0 ^ r2
+	&rotr	($r2,16+8);
+	&xor	($acc,$tmp);
+	&rotl	($s[$i],24);
+	&xor	($acc,$r2);
+	&mov	($tmp,0x80808080)	if ($i!=1);
+	&xor	($s[$i],$acc);	# ROTATE(r2^r0,24) ^ r2
+}
+
+&function_begin_B("_x86_AES_encrypt_compact");
+	# note that caller is expected to allocate stack frame for me!
+	&mov	($__key,$key);			# save key
+
+	&xor	($s0,&DWP(0,$key));		# xor with key
+	&xor	($s1,&DWP(4,$key));
+	&xor	($s2,&DWP(8,$key));
+	&xor	($s3,&DWP(12,$key));
+
+	&mov	($acc,&DWP(240,$key));		# load key->rounds
+	&lea	($acc,&DWP(-2,$acc,$acc));
+	&lea	($acc,&DWP(0,$key,$acc,8));
+	&mov	($__end,$acc);			# end of key schedule
+
+	# prefetch Te4
+	&mov	($key,&DWP(0-128,$tbl));
+	&mov	($acc,&DWP(32-128,$tbl));
+	&mov	($key,&DWP(64-128,$tbl));
+	&mov	($acc,&DWP(96-128,$tbl));
+	&mov	($key,&DWP(128-128,$tbl));
+	&mov	($acc,&DWP(160-128,$tbl));
+	&mov	($key,&DWP(192-128,$tbl));
+	&mov	($acc,&DWP(224-128,$tbl));
+
+	&set_label("loop",16);
+
+		&enccompact(0,$tbl,$s0,$s1,$s2,$s3,1);
+		&enccompact(1,$tbl,$s1,$s2,$s3,$s0,1);
+		&enccompact(2,$tbl,$s2,$s3,$s0,$s1,1);
+		&enccompact(3,$tbl,$s3,$s0,$s1,$s2,1);
+		&mov	($tbl,0x80808080);
+		&enctransform(2);
+		&enctransform(3);
+		&enctransform(0);
+		&enctransform(1);
+		&mov 	($key,$__key);
+		&mov	($tbl,$__tbl);
+		&add	($key,16);		# advance rd_key
+		&xor	($s0,&DWP(0,$key));
+		&xor	($s1,&DWP(4,$key));
+		&xor	($s2,&DWP(8,$key));
+		&xor	($s3,&DWP(12,$key));
+
+	&cmp	($key,$__end);
+	&mov	($__key,$key);
+	&jb	(&label("loop"));
+
+	&enccompact(0,$tbl,$s0,$s1,$s2,$s3);
+	&enccompact(1,$tbl,$s1,$s2,$s3,$s0);
+	&enccompact(2,$tbl,$s2,$s3,$s0,$s1);
+	&enccompact(3,$tbl,$s3,$s0,$s1,$s2);
+
+	&xor	($s0,&DWP(16,$key));
+	&xor	($s1,&DWP(20,$key));
+	&xor	($s2,&DWP(24,$key));
+	&xor	($s3,&DWP(28,$key));
+
+	&ret	();
+&function_end_B("_x86_AES_encrypt_compact");
+
+######################################################################
+# "Compact" SSE block function.
+######################################################################
+#
+# Performance is not actually extraordinary in comparison to pure
+# x86 code. In particular encrypt performance is virtually the same.
+# Decrypt performance on the other hand is 15-20% better on newer
+# µ-archs [but we're thankful for *any* improvement here], and ~50%
+# better on PIII:-) And additionally on the pros side this code
+# eliminates redundant references to stack and thus relieves/
+# minimizes the pressure on the memory bus.
+#
+# MMX register layout                           lsb
+# +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+# |          mm4          |          mm0          |
+# +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+# |     s3    |     s2    |     s1    |     s0    |
+# +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+# |15|14|13|12|11|10| 9| 8| 7| 6| 5| 4| 3| 2| 1| 0|
+# +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
+#
+# Indexes translate as s[N/4]>>(8*(N%4)), e.g. 5 means s1>>8.
+# In this terms encryption and decryption "compact" permutation
+# matrices can be depicted as following:
+#
+# encryption              lsb	# decryption              lsb
+# +----++----+----+----+----+	# +----++----+----+----+----+
+# | t0 || 15 | 10 |  5 |  0 |	# | t0 ||  7 | 10 | 13 |  0 |
+# +----++----+----+----+----+	# +----++----+----+----+----+
+# | t1 ||  3 | 14 |  9 |  4 |	# | t1 || 11 | 14 |  1 |  4 |
+# +----++----+----+----+----+	# +----++----+----+----+----+
+# | t2 ||  7 |  2 | 13 |  8 |	# | t2 || 15 |  2 |  5 |  8 |
+# +----++----+----+----+----+	# +----++----+----+----+----+
+# | t3 || 11 |  6 |  1 | 12 |	# | t3 ||  3 |  6 |  9 | 12 |
+# +----++----+----+----+----+	# +----++----+----+----+----+
+#
+######################################################################
+# Why not xmm registers? Short answer. It was actually tested and
+# was not any faster, but *contrary*, most notably on Intel CPUs.
+# Longer answer. Main advantage of using mm registers is that movd
+# latency is lower, especially on Intel P4. While arithmetic
+# instructions are twice as many, they can be scheduled every cycle
+# and not every second one when they are operating on xmm register,
+# so that "arithmetic throughput" remains virtually the same. And
+# finally the code can be executed even on elder SSE-only CPUs:-)
+
+sub sse_enccompact()
+{
+	&pshufw	("mm1","mm0",0x08);		#  5, 4, 1, 0
+	&pshufw	("mm5","mm4",0x0d);		# 15,14,11,10
+	&movd	("eax","mm1");			#  5, 4, 1, 0
+	&movd	("ebx","mm5");			# 15,14,11,10
+	&mov	($__key,$key);
+
+	&movz	($acc,&LB("eax"));		#  0
+	&movz	("edx",&HB("eax"));		#  1
+	&pshufw	("mm2","mm0",0x0d);		#  7, 6, 3, 2
+	&movz	("ecx",&BP(-128,$tbl,$acc,1));	#  0
+	&movz	($key,&LB("ebx"));		# 10
+	&movz	("edx",&BP(-128,$tbl,"edx",1));	#  1
+	&shr	("eax",16);			#  5, 4
+	&shl	("edx",8);			#  1
+
+	&movz	($acc,&BP(-128,$tbl,$key,1));	# 10
+	&movz	($key,&HB("ebx"));		# 11
+	&shl	($acc,16);			# 10
+	&pshufw	("mm6","mm4",0x08);		# 13,12, 9, 8
+	&or	("ecx",$acc);			# 10
+	&movz	($acc,&BP(-128,$tbl,$key,1));	# 11
+	&movz	($key,&HB("eax"));		#  5
+	&shl	($acc,24);			# 11
+	&shr	("ebx",16);			# 15,14
+	&or	("edx",$acc);			# 11
+
+	&movz	($acc,&BP(-128,$tbl,$key,1));	#  5
+	&movz	($key,&HB("ebx"));		# 15
+	&shl	($acc,8);			#  5
+	&or	("ecx",$acc);			#  5
+	&movz	($acc,&BP(-128,$tbl,$key,1));	# 15
+	&movz	($key,&LB("eax"));		#  4
+	&shl	($acc,24);			# 15
+	&or	("ecx",$acc);			# 15
+
+	&movz	($acc,&BP(-128,$tbl,$key,1));	#  4
+	&movz	($key,&LB("ebx"));		# 14
+	&movd	("eax","mm2");			#  7, 6, 3, 2
+	&movd	("mm0","ecx");			# t[0] collected
+	&movz	("ecx",&BP(-128,$tbl,$key,1));	# 14
+	&movz	($key,&HB("eax"));		#  3
+	&shl	("ecx",16);			# 14
+	&movd	("ebx","mm6");			# 13,12, 9, 8
+	&or	("ecx",$acc);			# 14
+
+	&movz	($acc,&BP(-128,$tbl,$key,1));	#  3
+	&movz	($key,&HB("ebx"));		#  9
+	&shl	($acc,24);			#  3
+	&or	("ecx",$acc);			#  3
+	&movz	($acc,&BP(-128,$tbl,$key,1));	#  9
+	&movz	($key,&LB("ebx"));		#  8
+	&shl	($acc,8);			#  9
+	&shr	("ebx",16);			# 13,12
+	&or	("ecx",$acc);			#  9
+
+	&movz	($acc,&BP(-128,$tbl,$key,1));	#  8
+	&movz	($key,&LB("eax"));		#  2
+	&shr	("eax",16);			#  7, 6
+	&movd	("mm1","ecx");			# t[1] collected
+	&movz	("ecx",&BP(-128,$tbl,$key,1));	#  2
+	&movz	($key,&HB("eax"));		#  7
+	&shl	("ecx",16);			#  2
+	&and	("eax",0xff);			#  6
+	&or	("ecx",$acc);			#  2
+
+	&punpckldq	("mm0","mm1");		# t[0,1] collected
+
+	&movz	($acc,&BP(-128,$tbl,$key,1));	#  7
+	&movz	($key,&HB("ebx"));		# 13
+	&shl	($acc,24);			#  7
+	&and	("ebx",0xff);			# 12
+	&movz	("eax",&BP(-128,$tbl,"eax",1));	#  6
+	&or	("ecx",$acc);			#  7
+	&shl	("eax",16);			#  6
+	&movz	($acc,&BP(-128,$tbl,$key,1));	# 13
+	&or	("edx","eax");			#  6
+	&shl	($acc,8);			# 13
+	&movz	("ebx",&BP(-128,$tbl,"ebx",1));	# 12
+	&or	("ecx",$acc);			# 13
+	&or	("edx","ebx");			# 12
+	&mov	($key,$__key);
+	&movd	("mm4","ecx");			# t[2] collected
+	&movd	("mm5","edx");			# t[3] collected
+
+	&punpckldq	("mm4","mm5");		# t[2,3] collected
+}
+
+					if (!$x86only) {
+&function_begin_B("_sse_AES_encrypt_compact");
+	&pxor	("mm0",&QWP(0,$key));	#  7, 6, 5, 4, 3, 2, 1, 0
+	&pxor	("mm4",&QWP(8,$key));	# 15,14,13,12,11,10, 9, 8
+
+	# note that caller is expected to allocate stack frame for me!
+	&mov	($acc,&DWP(240,$key));		# load key->rounds
+	&lea	($acc,&DWP(-2,$acc,$acc));
+	&lea	($acc,&DWP(0,$key,$acc,8));
+	&mov	($__end,$acc);			# end of key schedule
+
+	&mov	($s0,0x1b1b1b1b);		# magic constant
+	&mov	(&DWP(8,"esp"),$s0);
+	&mov	(&DWP(12,"esp"),$s0);
+
+	# prefetch Te4
+	&mov	($s0,&DWP(0-128,$tbl));
+	&mov	($s1,&DWP(32-128,$tbl));
+	&mov	($s2,&DWP(64-128,$tbl));
+	&mov	($s3,&DWP(96-128,$tbl));
+	&mov	($s0,&DWP(128-128,$tbl));
+	&mov	($s1,&DWP(160-128,$tbl));
+	&mov	($s2,&DWP(192-128,$tbl));
+	&mov	($s3,&DWP(224-128,$tbl));
+
+	&set_label("loop",16);
+		&sse_enccompact();
+		&add	($key,16);
+		&cmp	($key,$__end);
+		&ja	(&label("out"));
+
+		&movq	("mm2",&QWP(8,"esp"));
+		&pxor	("mm3","mm3");		&pxor	("mm7","mm7");
+		&movq	("mm1","mm0");		&movq	("mm5","mm4");	# r0
+		&pcmpgtb("mm3","mm0");		&pcmpgtb("mm7","mm4");
+		&pand	("mm3","mm2");		&pand	("mm7","mm2");
+		&pshufw	("mm2","mm0",0xb1);	&pshufw	("mm6","mm4",0xb1);# ROTATE(r0,16)
+		&paddb	("mm0","mm0");		&paddb	("mm4","mm4");
+		&pxor	("mm0","mm3");		&pxor	("mm4","mm7");	# = r2
+		&pshufw	("mm3","mm2",0xb1);	&pshufw	("mm7","mm6",0xb1);# r0
+		&pxor	("mm1","mm0");		&pxor	("mm5","mm4");	# r0^r2
+		&pxor	("mm0","mm2");		&pxor	("mm4","mm6");	# ^= ROTATE(r0,16)
+
+		&movq	("mm2","mm3");		&movq	("mm6","mm7");
+		&pslld	("mm3",8);		&pslld	("mm7",8);
+		&psrld	("mm2",24);		&psrld	("mm6",24);
+		&pxor	("mm0","mm3");		&pxor	("mm4","mm7");	# ^= r0<<8
+		&pxor	("mm0","mm2");		&pxor	("mm4","mm6");	# ^= r0>>24
+
+		&movq	("mm3","mm1");		&movq	("mm7","mm5");
+		&movq	("mm2",&QWP(0,$key));	&movq	("mm6",&QWP(8,$key));
+		&psrld	("mm1",8);		&psrld	("mm5",8);
+		&mov	($s0,&DWP(0-128,$tbl));
+		&pslld	("mm3",24);		&pslld	("mm7",24);
+		&mov	($s1,&DWP(64-128,$tbl));
+		&pxor	("mm0","mm1");		&pxor	("mm4","mm5");	# ^= (r2^r0)<<8
+		&mov	($s2,&DWP(128-128,$tbl));
+		&pxor	("mm0","mm3");		&pxor	("mm4","mm7");	# ^= (r2^r0)>>24
+		&mov	($s3,&DWP(192-128,$tbl));
+
+		&pxor	("mm0","mm2");		&pxor	("mm4","mm6");
+	&jmp	(&label("loop"));
+
+	&set_label("out",16);
+	&pxor	("mm0",&QWP(0,$key));
+	&pxor	("mm4",&QWP(8,$key));
+
+	&ret	();
+&function_end_B("_sse_AES_encrypt_compact");
+					}
+
+######################################################################
+# Vanilla block function.
+######################################################################
+
+sub encstep()
+{ my ($i,$te,@s) = @_;
+  my $tmp = $key;
+  my $out = $i==3?$s[0]:$acc;
+
+	# lines marked with #%e?x[i] denote "reordered" instructions...
+	if ($i==3)  {	&mov	($key,$__key);			}##%edx
+	else        {	&mov	($out,$s[0]);
+			&and	($out,0xFF);			}
+	if ($i==1)  {	&shr	($s[0],16);			}#%ebx[1]
+	if ($i==2)  {	&shr	($s[0],24);			}#%ecx[2]
+			&mov	($out,&DWP(0,$te,$out,8));
+
+	if ($i==3)  {	$tmp=$s[1];				}##%eax
+			&movz	($tmp,&HB($s[1]));
+			&xor	($out,&DWP(3,$te,$tmp,8));
+
+	if ($i==3)  {	$tmp=$s[2]; &mov ($s[1],$__s0);		}##%ebx
+	else        {	&mov	($tmp,$s[2]);
+			&shr	($tmp,16);			}
+	if ($i==2)  {	&and	($s[1],0xFF);			}#%edx[2]
+			&and	($tmp,0xFF);
+			&xor	($out,&DWP(2,$te,$tmp,8));
+
+	if ($i==3)  {	$tmp=$s[3]; &mov ($s[2],$__s1);		}##%ecx
+	elsif($i==2){	&movz	($tmp,&HB($s[3]));		}#%ebx[2]
+	else        {	&mov	($tmp,$s[3]);
+			&shr	($tmp,24)			}
+			&xor	($out,&DWP(1,$te,$tmp,8));
+	if ($i<2)   {	&mov	(&DWP(4+4*$i,"esp"),$out);	}
+	if ($i==3)  {	&mov	($s[3],$acc);			}
+			&comment();
+}
+
+sub enclast()
+{ my ($i,$te,@s)=@_;
+  my $tmp = $key;
+  my $out = $i==3?$s[0]:$acc;
+
+	if ($i==3)  {	&mov	($key,$__key);			}##%edx
+	else        {	&mov	($out,$s[0]);			}
+			&and	($out,0xFF);
+	if ($i==1)  {	&shr	($s[0],16);			}#%ebx[1]
+	if ($i==2)  {	&shr	($s[0],24);			}#%ecx[2]
+			&mov	($out,&DWP(2,$te,$out,8));
+			&and	($out,0x000000ff);
+
+	if ($i==3)  {	$tmp=$s[1];				}##%eax
+			&movz	($tmp,&HB($s[1]));
+			&mov	($tmp,&DWP(0,$te,$tmp,8));
+			&and	($tmp,0x0000ff00);
+			&xor	($out,$tmp);
+
+	if ($i==3)  {	$tmp=$s[2]; &mov ($s[1],$__s0);		}##%ebx
+	else        {	&mov	($tmp,$s[2]);
+			&shr	($tmp,16);			}
+	if ($i==2)  {	&and	($s[1],0xFF);			}#%edx[2]
+			&and	($tmp,0xFF);
+			&mov	($tmp,&DWP(0,$te,$tmp,8));
+			&and	($tmp,0x00ff0000);
+			&xor	($out,$tmp);
+
+	if ($i==3)  {	$tmp=$s[3]; &mov ($s[2],$__s1);		}##%ecx
+	elsif($i==2){	&movz	($tmp,&HB($s[3]));		}#%ebx[2]
+	else        {	&mov	($tmp,$s[3]);
+			&shr	($tmp,24);			}
+			&mov	($tmp,&DWP(2,$te,$tmp,8));
+			&and	($tmp,0xff000000);
+			&xor	($out,$tmp);
+	if ($i<2)   {	&mov	(&DWP(4+4*$i,"esp"),$out);	}
+	if ($i==3)  {	&mov	($s[3],$acc);			}
+}
+
+&function_begin_B("_x86_AES_encrypt");
+	if ($vertical_spin) {
+		# I need high parts of volatile registers to be accessible...
+		&exch	($s1="edi",$key="ebx");
+		&mov	($s2="esi",$acc="ecx");
+	}
+
+	# note that caller is expected to allocate stack frame for me!
+	&mov	($__key,$key);			# save key
+
+	&xor	($s0,&DWP(0,$key));		# xor with key
+	&xor	($s1,&DWP(4,$key));
+	&xor	($s2,&DWP(8,$key));
+	&xor	($s3,&DWP(12,$key));
+
+	&mov	($acc,&DWP(240,$key));		# load key->rounds
+
+	if ($small_footprint) {
+	    &lea	($acc,&DWP(-2,$acc,$acc));
+	    &lea	($acc,&DWP(0,$key,$acc,8));
+	    &mov	($__end,$acc);		# end of key schedule
+
+	    &set_label("loop",16);
+		if ($vertical_spin) {
+		    &encvert($tbl,$s0,$s1,$s2,$s3);
+		} else {
+		    &encstep(0,$tbl,$s0,$s1,$s2,$s3);
+		    &encstep(1,$tbl,$s1,$s2,$s3,$s0);
+		    &encstep(2,$tbl,$s2,$s3,$s0,$s1);
+		    &encstep(3,$tbl,$s3,$s0,$s1,$s2);
+		}
+		&add	($key,16);		# advance rd_key
+		&xor	($s0,&DWP(0,$key));
+		&xor	($s1,&DWP(4,$key));
+		&xor	($s2,&DWP(8,$key));
+		&xor	($s3,&DWP(12,$key));
+	    &cmp	($key,$__end);
+	    &mov	($__key,$key);
+	    &jb		(&label("loop"));
+	}
+	else {
+	    &cmp	($acc,10);
+	    &jle	(&label("10rounds"));
+	    &cmp	($acc,12);
+	    &jle	(&label("12rounds"));
+
+	&set_label("14rounds",4);
+	    for ($i=1;$i<3;$i++) {
+		if ($vertical_spin) {
+		    &encvert($tbl,$s0,$s1,$s2,$s3);
+		} else {
+		    &encstep(0,$tbl,$s0,$s1,$s2,$s3);
+		    &encstep(1,$tbl,$s1,$s2,$s3,$s0);
+		    &encstep(2,$tbl,$s2,$s3,$s0,$s1);
+		    &encstep(3,$tbl,$s3,$s0,$s1,$s2);
+		}
+		&xor	($s0,&DWP(16*$i+0,$key));
+		&xor	($s1,&DWP(16*$i+4,$key));
+		&xor	($s2,&DWP(16*$i+8,$key));
+		&xor	($s3,&DWP(16*$i+12,$key));
+	    }
+	    &add	($key,32);
+	    &mov	($__key,$key);		# advance rd_key
+	&set_label("12rounds",4);
+	    for ($i=1;$i<3;$i++) {
+		if ($vertical_spin) {
+		    &encvert($tbl,$s0,$s1,$s2,$s3);
+		} else {
+		    &encstep(0,$tbl,$s0,$s1,$s2,$s3);
+		    &encstep(1,$tbl,$s1,$s2,$s3,$s0);
+		    &encstep(2,$tbl,$s2,$s3,$s0,$s1);
+		    &encstep(3,$tbl,$s3,$s0,$s1,$s2);
+		}
+		&xor	($s0,&DWP(16*$i+0,$key));
+		&xor	($s1,&DWP(16*$i+4,$key));
+		&xor	($s2,&DWP(16*$i+8,$key));
+		&xor	($s3,&DWP(16*$i+12,$key));
+	    }
+	    &add	($key,32);
+	    &mov	($__key,$key);		# advance rd_key
+	&set_label("10rounds",4);
+	    for ($i=1;$i<10;$i++) {
+		if ($vertical_spin) {
+		    &encvert($tbl,$s0,$s1,$s2,$s3);
+		} else {
+		    &encstep(0,$tbl,$s0,$s1,$s2,$s3);
+		    &encstep(1,$tbl,$s1,$s2,$s3,$s0);
+		    &encstep(2,$tbl,$s2,$s3,$s0,$s1);
+		    &encstep(3,$tbl,$s3,$s0,$s1,$s2);
+		}
+		&xor	($s0,&DWP(16*$i+0,$key));
+		&xor	($s1,&DWP(16*$i+4,$key));
+		&xor	($s2,&DWP(16*$i+8,$key));
+		&xor	($s3,&DWP(16*$i+12,$key));
+	    }
+	}
+
+	if ($vertical_spin) {
+	    # "reincarnate" some registers for "horizontal" spin...
+	    &mov	($s1="ebx",$key="edi");
+	    &mov	($s2="ecx",$acc="esi");
+	}
+	&enclast(0,$tbl,$s0,$s1,$s2,$s3);
+	&enclast(1,$tbl,$s1,$s2,$s3,$s0);
+	&enclast(2,$tbl,$s2,$s3,$s0,$s1);
+	&enclast(3,$tbl,$s3,$s0,$s1,$s2);
+
+	&add	($key,$small_footprint?16:160);
+	&xor	($s0,&DWP(0,$key));
+	&xor	($s1,&DWP(4,$key));
+	&xor	($s2,&DWP(8,$key));
+	&xor	($s3,&DWP(12,$key));
+
+	&ret	();
+
+&set_label("AES_Te",64);	# Yes! I keep it in the code segment!
+	&_data_word(0xa56363c6, 0x847c7cf8, 0x997777ee, 0x8d7b7bf6);
+	&_data_word(0x0df2f2ff, 0xbd6b6bd6, 0xb16f6fde, 0x54c5c591);
+	&_data_word(0x50303060, 0x03010102, 0xa96767ce, 0x7d2b2b56);
+	&_data_word(0x19fefee7, 0x62d7d7b5, 0xe6abab4d, 0x9a7676ec);
+	&_data_word(0x45caca8f, 0x9d82821f, 0x40c9c989, 0x877d7dfa);
+	&_data_word(0x15fafaef, 0xeb5959b2, 0xc947478e, 0x0bf0f0fb);
+	&_data_word(0xecadad41, 0x67d4d4b3, 0xfda2a25f, 0xeaafaf45);
+	&_data_word(0xbf9c9c23, 0xf7a4a453, 0x967272e4, 0x5bc0c09b);
+	&_data_word(0xc2b7b775, 0x1cfdfde1, 0xae93933d, 0x6a26264c);
+	&_data_word(0x5a36366c, 0x413f3f7e, 0x02f7f7f5, 0x4fcccc83);
+	&_data_word(0x5c343468, 0xf4a5a551, 0x34e5e5d1, 0x08f1f1f9);
+	&_data_word(0x937171e2, 0x73d8d8ab, 0x53313162, 0x3f15152a);
+	&_data_word(0x0c040408, 0x52c7c795, 0x65232346, 0x5ec3c39d);
+	&_data_word(0x28181830, 0xa1969637, 0x0f05050a, 0xb59a9a2f);
+	&_data_word(0x0907070e, 0x36121224, 0x9b80801b, 0x3de2e2df);
+	&_data_word(0x26ebebcd, 0x6927274e, 0xcdb2b27f, 0x9f7575ea);
+	&_data_word(0x1b090912, 0x9e83831d, 0x742c2c58, 0x2e1a1a34);
+	&_data_word(0x2d1b1b36, 0xb26e6edc, 0xee5a5ab4, 0xfba0a05b);
+	&_data_word(0xf65252a4, 0x4d3b3b76, 0x61d6d6b7, 0xceb3b37d);
+	&_data_word(0x7b292952, 0x3ee3e3dd, 0x712f2f5e, 0x97848413);
+	&_data_word(0xf55353a6, 0x68d1d1b9, 0x00000000, 0x2cededc1);
+	&_data_word(0x60202040, 0x1ffcfce3, 0xc8b1b179, 0xed5b5bb6);
+	&_data_word(0xbe6a6ad4, 0x46cbcb8d, 0xd9bebe67, 0x4b393972);
+	&_data_word(0xde4a4a94, 0xd44c4c98, 0xe85858b0, 0x4acfcf85);
+	&_data_word(0x6bd0d0bb, 0x2aefefc5, 0xe5aaaa4f, 0x16fbfbed);
+	&_data_word(0xc5434386, 0xd74d4d9a, 0x55333366, 0x94858511);
+	&_data_word(0xcf45458a, 0x10f9f9e9, 0x06020204, 0x817f7ffe);
+	&_data_word(0xf05050a0, 0x443c3c78, 0xba9f9f25, 0xe3a8a84b);
+	&_data_word(0xf35151a2, 0xfea3a35d, 0xc0404080, 0x8a8f8f05);
+	&_data_word(0xad92923f, 0xbc9d9d21, 0x48383870, 0x04f5f5f1);
+	&_data_word(0xdfbcbc63, 0xc1b6b677, 0x75dadaaf, 0x63212142);
+	&_data_word(0x30101020, 0x1affffe5, 0x0ef3f3fd, 0x6dd2d2bf);
+	&_data_word(0x4ccdcd81, 0x140c0c18, 0x35131326, 0x2fececc3);
+	&_data_word(0xe15f5fbe, 0xa2979735, 0xcc444488, 0x3917172e);
+	&_data_word(0x57c4c493, 0xf2a7a755, 0x827e7efc, 0x473d3d7a);
+	&_data_word(0xac6464c8, 0xe75d5dba, 0x2b191932, 0x957373e6);
+	&_data_word(0xa06060c0, 0x98818119, 0xd14f4f9e, 0x7fdcdca3);
+	&_data_word(0x66222244, 0x7e2a2a54, 0xab90903b, 0x8388880b);
+	&_data_word(0xca46468c, 0x29eeeec7, 0xd3b8b86b, 0x3c141428);
+	&_data_word(0x79dedea7, 0xe25e5ebc, 0x1d0b0b16, 0x76dbdbad);
+	&_data_word(0x3be0e0db, 0x56323264, 0x4e3a3a74, 0x1e0a0a14);
+	&_data_word(0xdb494992, 0x0a06060c, 0x6c242448, 0xe45c5cb8);
+	&_data_word(0x5dc2c29f, 0x6ed3d3bd, 0xefacac43, 0xa66262c4);
+	&_data_word(0xa8919139, 0xa4959531, 0x37e4e4d3, 0x8b7979f2);
+	&_data_word(0x32e7e7d5, 0x43c8c88b, 0x5937376e, 0xb76d6dda);
+	&_data_word(0x8c8d8d01, 0x64d5d5b1, 0xd24e4e9c, 0xe0a9a949);
+	&_data_word(0xb46c6cd8, 0xfa5656ac, 0x07f4f4f3, 0x25eaeacf);
+	&_data_word(0xaf6565ca, 0x8e7a7af4, 0xe9aeae47, 0x18080810);
+	&_data_word(0xd5baba6f, 0x887878f0, 0x6f25254a, 0x722e2e5c);
+	&_data_word(0x241c1c38, 0xf1a6a657, 0xc7b4b473, 0x51c6c697);
+	&_data_word(0x23e8e8cb, 0x7cdddda1, 0x9c7474e8, 0x211f1f3e);
+	&_data_word(0xdd4b4b96, 0xdcbdbd61, 0x868b8b0d, 0x858a8a0f);
+	&_data_word(0x907070e0, 0x423e3e7c, 0xc4b5b571, 0xaa6666cc);
+	&_data_word(0xd8484890, 0x05030306, 0x01f6f6f7, 0x120e0e1c);
+	&_data_word(0xa36161c2, 0x5f35356a, 0xf95757ae, 0xd0b9b969);
+	&_data_word(0x91868617, 0x58c1c199, 0x271d1d3a, 0xb99e9e27);
+	&_data_word(0x38e1e1d9, 0x13f8f8eb, 0xb398982b, 0x33111122);
+	&_data_word(0xbb6969d2, 0x70d9d9a9, 0x898e8e07, 0xa7949433);
+	&_data_word(0xb69b9b2d, 0x221e1e3c, 0x92878715, 0x20e9e9c9);
+	&_data_word(0x49cece87, 0xff5555aa, 0x78282850, 0x7adfdfa5);
+	&_data_word(0x8f8c8c03, 0xf8a1a159, 0x80898909, 0x170d0d1a);
+	&_data_word(0xdabfbf65, 0x31e6e6d7, 0xc6424284, 0xb86868d0);
+	&_data_word(0xc3414182, 0xb0999929, 0x772d2d5a, 0x110f0f1e);
+	&_data_word(0xcbb0b07b, 0xfc5454a8, 0xd6bbbb6d, 0x3a16162c);
+
+#Te4	# four copies of Te4 to choose from to avoid L1 aliasing
+	&data_byte(0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5);
+	&data_byte(0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76);
+	&data_byte(0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0);
+	&data_byte(0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0);
+	&data_byte(0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc);
+	&data_byte(0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15);
+	&data_byte(0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a);
+	&data_byte(0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75);
+	&data_byte(0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0);
+	&data_byte(0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84);
+	&data_byte(0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b);
+	&data_byte(0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf);
+	&data_byte(0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85);
+	&data_byte(0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8);
+	&data_byte(0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5);
+	&data_byte(0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2);
+	&data_byte(0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17);
+	&data_byte(0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73);
+	&data_byte(0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88);
+	&data_byte(0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb);
+	&data_byte(0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c);
+	&data_byte(0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79);
+	&data_byte(0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9);
+	&data_byte(0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08);
+	&data_byte(0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6);
+	&data_byte(0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a);
+	&data_byte(0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e);
+	&data_byte(0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e);
+	&data_byte(0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94);
+	&data_byte(0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf);
+	&data_byte(0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68);
+	&data_byte(0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16);
+
+	&data_byte(0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5);
+	&data_byte(0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76);
+	&data_byte(0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0);
+	&data_byte(0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0);
+	&data_byte(0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc);
+	&data_byte(0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15);
+	&data_byte(0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a);
+	&data_byte(0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75);
+	&data_byte(0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0);
+	&data_byte(0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84);
+	&data_byte(0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b);
+	&data_byte(0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf);
+	&data_byte(0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85);
+	&data_byte(0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8);
+	&data_byte(0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5);
+	&data_byte(0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2);
+	&data_byte(0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17);
+	&data_byte(0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73);
+	&data_byte(0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88);
+	&data_byte(0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb);
+	&data_byte(0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c);
+	&data_byte(0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79);
+	&data_byte(0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9);
+	&data_byte(0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08);
+	&data_byte(0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6);
+	&data_byte(0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a);
+	&data_byte(0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e);
+	&data_byte(0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e);
+	&data_byte(0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94);
+	&data_byte(0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf);
+	&data_byte(0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68);
+	&data_byte(0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16);
+
+	&data_byte(0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5);
+	&data_byte(0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76);
+	&data_byte(0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0);
+	&data_byte(0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0);
+	&data_byte(0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc);
+	&data_byte(0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15);
+	&data_byte(0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a);
+	&data_byte(0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75);
+	&data_byte(0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0);
+	&data_byte(0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84);
+	&data_byte(0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b);
+	&data_byte(0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf);
+	&data_byte(0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85);
+	&data_byte(0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8);
+	&data_byte(0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5);
+	&data_byte(0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2);
+	&data_byte(0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17);
+	&data_byte(0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73);
+	&data_byte(0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88);
+	&data_byte(0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb);
+	&data_byte(0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c);
+	&data_byte(0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79);
+	&data_byte(0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9);
+	&data_byte(0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08);
+	&data_byte(0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6);
+	&data_byte(0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a);
+	&data_byte(0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e);
+	&data_byte(0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e);
+	&data_byte(0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94);
+	&data_byte(0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf);
+	&data_byte(0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68);
+	&data_byte(0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16);
+
+	&data_byte(0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5);
+	&data_byte(0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76);
+	&data_byte(0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0);
+	&data_byte(0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0);
+	&data_byte(0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc);
+	&data_byte(0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15);
+	&data_byte(0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a);
+	&data_byte(0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75);
+	&data_byte(0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0);
+	&data_byte(0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84);
+	&data_byte(0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b);
+	&data_byte(0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf);
+	&data_byte(0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85);
+	&data_byte(0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8);
+	&data_byte(0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5);
+	&data_byte(0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2);
+	&data_byte(0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17);
+	&data_byte(0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73);
+	&data_byte(0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88);
+	&data_byte(0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb);
+	&data_byte(0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c);
+	&data_byte(0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79);
+	&data_byte(0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9);
+	&data_byte(0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08);
+	&data_byte(0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6);
+	&data_byte(0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a);
+	&data_byte(0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e);
+	&data_byte(0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e);
+	&data_byte(0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94);
+	&data_byte(0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf);
+	&data_byte(0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68);
+	&data_byte(0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16);
+#rcon:
+	&data_word(0x00000001, 0x00000002, 0x00000004, 0x00000008);
+	&data_word(0x00000010, 0x00000020, 0x00000040, 0x00000080);
+	&data_word(0x0000001b, 0x00000036, 0x00000000, 0x00000000);
+	&data_word(0x00000000, 0x00000000, 0x00000000, 0x00000000);
+&function_end_B("_x86_AES_encrypt");
+
+# void AES_encrypt (const void *inp,void *out,const AES_KEY *key);
+&function_begin("AES_encrypt");
+	&mov	($acc,&wparam(0));		# load inp
+	&mov	($key,&wparam(2));		# load key
+
+	&mov	($s0,"esp");
+	&sub	("esp",36);
+	&and	("esp",-64);			# align to cache-line
+
+	# place stack frame just "above" the key schedule
+	&lea	($s1,&DWP(-64-63,$key));
+	&sub	($s1,"esp");
+	&neg	($s1);
+	&and	($s1,0x3C0);	# modulo 1024, but aligned to cache-line
+	&sub	("esp",$s1);
+	&add	("esp",4);	# 4 is reserved for caller's return address
+	&mov	($_esp,$s0);			# save stack pointer
+
+	&call   (&label("pic_point"));          # make it PIC!
+	&set_label("pic_point");
+	&blindpop($tbl);
+	&picmeup($s0,"OPENSSL_ia32cap_P",$tbl,&label("pic_point")) if (!$x86only);
+	&lea    ($tbl,&DWP(&label("AES_Te")."-".&label("pic_point"),$tbl));
+
+	# pick Te4 copy which can't "overlap" with stack frame or key schedule
+	&lea	($s1,&DWP(768-4,"esp"));
+	&sub	($s1,$tbl);
+	&and	($s1,0x300);
+	&lea	($tbl,&DWP(2048+128,$tbl,$s1));
+
+					if (!$x86only) {
+	&bt	(&DWP(0,$s0),25);	# check for SSE bit
+	&jnc	(&label("x86"));
+
+	&movq	("mm0",&QWP(0,$acc));
+	&movq	("mm4",&QWP(8,$acc));
+	&call	("_sse_AES_encrypt_compact");
+	&mov	("esp",$_esp);			# restore stack pointer
+	&mov	($acc,&wparam(1));		# load out
+	&movq	(&QWP(0,$acc),"mm0");		# write output data
+	&movq	(&QWP(8,$acc),"mm4");
+	&emms	();
+	&function_end_A();
+					}
+	&set_label("x86",16);
+	&mov	($_tbl,$tbl);
+	&mov	($s0,&DWP(0,$acc));		# load input data
+	&mov	($s1,&DWP(4,$acc));
+	&mov	($s2,&DWP(8,$acc));
+	&mov	($s3,&DWP(12,$acc));
+	&call	("_x86_AES_encrypt_compact");
+	&mov	("esp",$_esp);			# restore stack pointer
+	&mov	($acc,&wparam(1));		# load out
+	&mov	(&DWP(0,$acc),$s0);		# write output data
+	&mov	(&DWP(4,$acc),$s1);
+	&mov	(&DWP(8,$acc),$s2);
+	&mov	(&DWP(12,$acc),$s3);
+&function_end("AES_encrypt");
+
+#--------------------------------------------------------------------#
+
+######################################################################
+# "Compact" block function
+######################################################################
+
+sub deccompact()
+{ my $Fn = \&mov;
+  while ($#_>5) { pop(@_); $Fn=sub{}; }
+  my ($i,$td,@s)=@_;
+  my $tmp = $key;
+  my $out = $i==3?$s[0]:$acc;
+
+	# $Fn is used in first compact round and its purpose is to
+	# void restoration of some values from stack, so that after
+	# 4xdeccompact with extra argument $key, $s0 and $s1 values
+	# are left there...
+	if($i==3)   {	&$Fn	($key,$__key);			}
+	else        {	&mov	($out,$s[0]);			}
+			&and	($out,0xFF);
+			&movz	($out,&BP(-128,$td,$out,1));
+
+	if ($i==3)  {	$tmp=$s[1];				}
+			&movz	($tmp,&HB($s[1]));
+			&movz	($tmp,&BP(-128,$td,$tmp,1));
+			&shl	($tmp,8);
+			&xor	($out,$tmp);
+
+	if ($i==3)  {	$tmp=$s[2]; &mov ($s[1],$acc);		}
+	else        {	mov	($tmp,$s[2]);			}
+			&shr	($tmp,16);
+			&and	($tmp,0xFF);
+			&movz	($tmp,&BP(-128,$td,$tmp,1));
+			&shl	($tmp,16);
+			&xor	($out,$tmp);
+
+	if ($i==3)  {	$tmp=$s[3]; &$Fn ($s[2],$__s1);		}
+	else        {	&mov	($tmp,$s[3]);			}
+			&shr	($tmp,24);
+			&movz	($tmp,&BP(-128,$td,$tmp,1));
+			&shl	($tmp,24);
+			&xor	($out,$tmp);
+	if ($i<2)   {	&mov	(&DWP(4+4*$i,"esp"),$out);	}
+	if ($i==3)  {	&$Fn	($s[3],$__s0);			}
+}
+
+# must be called with 2,3,0,1 as argument sequence!!!
+sub dectransform()
+{ my @s = ($s0,$s1,$s2,$s3);
+  my $i = shift;
+  my $tmp = $key;
+  my $tp2 = @s[($i+2)%4]; $tp2 = @s[2] if ($i==1);
+  my $tp4 = @s[($i+3)%4]; $tp4 = @s[3] if ($i==1);
+  my $tp8 = $tbl;
+
+	&mov	($tmp,0x80808080);
+	&and	($tmp,$s[$i]);
+	&mov	($acc,$tmp);
+	&shr	($tmp,7);
+	&lea	($tp2,&DWP(0,$s[$i],$s[$i]));
+	&sub	($acc,$tmp);
+	&and	($tp2,0xfefefefe);
+	&and	($acc,0x1b1b1b1b);
+	&xor	($tp2,$acc);
+	&mov	($tmp,0x80808080);
+
+	&and	($tmp,$tp2);
+	&mov	($acc,$tmp);
+	&shr	($tmp,7);
+	&lea	($tp4,&DWP(0,$tp2,$tp2));
+	&sub	($acc,$tmp);
+	&and	($tp4,0xfefefefe);
+	&and	($acc,0x1b1b1b1b);
+	 &xor	($tp2,$s[$i]);	# tp2^tp1
+	&xor	($tp4,$acc);
+	&mov	($tmp,0x80808080);
+
+	&and	($tmp,$tp4);
+	&mov	($acc,$tmp);
+	&shr	($tmp,7);
+	&lea	($tp8,&DWP(0,$tp4,$tp4));
+	&sub	($acc,$tmp);
+	&and	($tp8,0xfefefefe);
+	&and	($acc,0x1b1b1b1b);
+	 &xor	($tp4,$s[$i]);	# tp4^tp1
+	 &rotl	($s[$i],8);	# = ROTATE(tp1,8)
+	&xor	($tp8,$acc);
+
+	&xor	($s[$i],$tp2);
+	&xor	($tp2,$tp8);
+	&xor	($s[$i],$tp4);
+	&xor	($tp4,$tp8);
+	&rotl	($tp2,24);
+	&xor	($s[$i],$tp8);	# ^= tp8^(tp4^tp1)^(tp2^tp1)
+	&rotl	($tp4,16);
+	&xor	($s[$i],$tp2);	# ^= ROTATE(tp8^tp2^tp1,24)
+	&rotl	($tp8,8);
+	&xor	($s[$i],$tp4);	# ^= ROTATE(tp8^tp4^tp1,16)
+	 &mov	($s[0],$__s0)			if($i==2); #prefetch $s0
+	 &mov	($s[1],$__s1)			if($i==3); #prefetch $s1
+	 &mov	($s[2],$__s2)			if($i==1);
+	&xor	($s[$i],$tp8);	# ^= ROTATE(tp8,8)
+
+	&mov	($s[3],$__s3)			if($i==1);
+	&mov	(&DWP(4+4*$i,"esp"),$s[$i])	if($i>=2);
+}
+
+&function_begin_B("_x86_AES_decrypt_compact");
+	# note that caller is expected to allocate stack frame for me!
+	&mov	($__key,$key);			# save key
+
+	&xor	($s0,&DWP(0,$key));		# xor with key
+	&xor	($s1,&DWP(4,$key));
+	&xor	($s2,&DWP(8,$key));
+	&xor	($s3,&DWP(12,$key));
+
+	&mov	($acc,&DWP(240,$key));		# load key->rounds
+
+	&lea	($acc,&DWP(-2,$acc,$acc));
+	&lea	($acc,&DWP(0,$key,$acc,8));
+	&mov	($__end,$acc);			# end of key schedule
+
+	# prefetch Td4
+	&mov	($key,&DWP(0-128,$tbl));
+	&mov	($acc,&DWP(32-128,$tbl));
+	&mov	($key,&DWP(64-128,$tbl));
+	&mov	($acc,&DWP(96-128,$tbl));
+	&mov	($key,&DWP(128-128,$tbl));
+	&mov	($acc,&DWP(160-128,$tbl));
+	&mov	($key,&DWP(192-128,$tbl));
+	&mov	($acc,&DWP(224-128,$tbl));
+
+	&set_label("loop",16);
+
+		&deccompact(0,$tbl,$s0,$s3,$s2,$s1,1);
+		&deccompact(1,$tbl,$s1,$s0,$s3,$s2,1);
+		&deccompact(2,$tbl,$s2,$s1,$s0,$s3,1);
+		&deccompact(3,$tbl,$s3,$s2,$s1,$s0,1);
+		&dectransform(2);
+		&dectransform(3);
+		&dectransform(0);
+		&dectransform(1);
+		&mov 	($key,$__key);
+		&mov	($tbl,$__tbl);
+		&add	($key,16);		# advance rd_key
+		&xor	($s0,&DWP(0,$key));
+		&xor	($s1,&DWP(4,$key));
+		&xor	($s2,&DWP(8,$key));
+		&xor	($s3,&DWP(12,$key));
+
+	&cmp	($key,$__end);
+	&mov	($__key,$key);
+	&jb	(&label("loop"));
+
+	&deccompact(0,$tbl,$s0,$s3,$s2,$s1);
+	&deccompact(1,$tbl,$s1,$s0,$s3,$s2);
+	&deccompact(2,$tbl,$s2,$s1,$s0,$s3);
+	&deccompact(3,$tbl,$s3,$s2,$s1,$s0);
+
+	&xor	($s0,&DWP(16,$key));
+	&xor	($s1,&DWP(20,$key));
+	&xor	($s2,&DWP(24,$key));
+	&xor	($s3,&DWP(28,$key));
+
+	&ret	();
+&function_end_B("_x86_AES_decrypt_compact");
+
+######################################################################
+# "Compact" SSE block function.
+######################################################################
+
+sub sse_deccompact()
+{
+	&pshufw	("mm1","mm0",0x0c);		#  7, 6, 1, 0
+	&pshufw	("mm5","mm4",0x09);		# 13,12,11,10
+	&movd	("eax","mm1");			#  7, 6, 1, 0
+	&movd	("ebx","mm5");			# 13,12,11,10
+	&mov	($__key,$key);
+
+	&movz	($acc,&LB("eax"));		#  0
+	&movz	("edx",&HB("eax"));		#  1
+	&pshufw	("mm2","mm0",0x06);		#  3, 2, 5, 4
+	&movz	("ecx",&BP(-128,$tbl,$acc,1));	#  0
+	&movz	($key,&LB("ebx"));		# 10
+	&movz	("edx",&BP(-128,$tbl,"edx",1));	#  1
+	&shr	("eax",16);			#  7, 6
+	&shl	("edx",8);			#  1
+
+	&movz	($acc,&BP(-128,$tbl,$key,1));	# 10
+	&movz	($key,&HB("ebx"));		# 11
+	&shl	($acc,16);			# 10
+	&pshufw	("mm6","mm4",0x03);		# 9, 8,15,14
+	&or	("ecx",$acc);			# 10
+	&movz	($acc,&BP(-128,$tbl,$key,1));	# 11
+	&movz	($key,&HB("eax"));		#  7
+	&shl	($acc,24);			# 11
+	&shr	("ebx",16);			# 13,12
+	&or	("edx",$acc);			# 11
+
+	&movz	($acc,&BP(-128,$tbl,$key,1));	#  7
+	&movz	($key,&HB("ebx"));		# 13
+	&shl	($acc,24);			#  7
+	&or	("ecx",$acc);			#  7
+	&movz	($acc,&BP(-128,$tbl,$key,1));	# 13
+	&movz	($key,&LB("eax"));		#  6
+	&shl	($acc,8);			# 13
+	&movd	("eax","mm2");			#  3, 2, 5, 4
+	&or	("ecx",$acc);			# 13
+
+	&movz	($acc,&BP(-128,$tbl,$key,1));	#  6
+	&movz	($key,&LB("ebx"));		# 12
+	&shl	($acc,16);			#  6
+	&movd	("ebx","mm6");			#  9, 8,15,14
+	&movd	("mm0","ecx");			# t[0] collected
+	&movz	("ecx",&BP(-128,$tbl,$key,1));	# 12
+	&movz	($key,&LB("eax"));		#  4
+	&or	("ecx",$acc);			# 12
+
+	&movz	($acc,&BP(-128,$tbl,$key,1));	#  4
+	&movz	($key,&LB("ebx"));		# 14
+	&or	("edx",$acc);			#  4
+	&movz	($acc,&BP(-128,$tbl,$key,1));	# 14
+	&movz	($key,&HB("eax"));		#  5
+	&shl	($acc,16);			# 14
+	&shr	("eax",16);			#  3, 2
+	&or	("edx",$acc);			# 14
+
+	&movz	($acc,&BP(-128,$tbl,$key,1));	#  5
+	&movz	($key,&HB("ebx"));		# 15
+	&shr	("ebx",16);			#  9, 8
+	&shl	($acc,8);			#  5
+	&movd	("mm1","edx");			# t[1] collected
+	&movz	("edx",&BP(-128,$tbl,$key,1));	# 15
+	&movz	($key,&HB("ebx"));		#  9
+	&shl	("edx",24);			# 15
+	&and	("ebx",0xff);			#  8
+	&or	("edx",$acc);			# 15
+
+	&punpckldq	("mm0","mm1");		# t[0,1] collected
+
+	&movz	($acc,&BP(-128,$tbl,$key,1));	#  9
+	&movz	($key,&LB("eax"));		#  2
+	&shl	($acc,8);			#  9
+	&movz	("eax",&HB("eax"));		#  3
+	&movz	("ebx",&BP(-128,$tbl,"ebx",1));	#  8
+	&or	("ecx",$acc);			#  9
+	&movz	($acc,&BP(-128,$tbl,$key,1));	#  2
+	&or	("edx","ebx");			#  8
+	&shl	($acc,16);			#  2
+	&movz	("eax",&BP(-128,$tbl,"eax",1));	#  3
+	&or	("edx",$acc);			#  2
+	&shl	("eax",24);			#  3
+	&or	("ecx","eax");			#  3
+	&mov	($key,$__key);
+	&movd	("mm4","edx");			# t[2] collected
+	&movd	("mm5","ecx");			# t[3] collected
+
+	&punpckldq	("mm4","mm5");		# t[2,3] collected
+}
+
+					if (!$x86only) {
+&function_begin_B("_sse_AES_decrypt_compact");
+	&pxor	("mm0",&QWP(0,$key));	#  7, 6, 5, 4, 3, 2, 1, 0
+	&pxor	("mm4",&QWP(8,$key));	# 15,14,13,12,11,10, 9, 8
+
+	# note that caller is expected to allocate stack frame for me!
+	&mov	($acc,&DWP(240,$key));		# load key->rounds
+	&lea	($acc,&DWP(-2,$acc,$acc));
+	&lea	($acc,&DWP(0,$key,$acc,8));
+	&mov	($__end,$acc);			# end of key schedule
+
+	&mov	($s0,0x1b1b1b1b);		# magic constant
+	&mov	(&DWP(8,"esp"),$s0);
+	&mov	(&DWP(12,"esp"),$s0);
+
+	# prefetch Td4
+	&mov	($s0,&DWP(0-128,$tbl));
+	&mov	($s1,&DWP(32-128,$tbl));
+	&mov	($s2,&DWP(64-128,$tbl));
+	&mov	($s3,&DWP(96-128,$tbl));
+	&mov	($s0,&DWP(128-128,$tbl));
+	&mov	($s1,&DWP(160-128,$tbl));
+	&mov	($s2,&DWP(192-128,$tbl));
+	&mov	($s3,&DWP(224-128,$tbl));
+
+	&set_label("loop",16);
+		&sse_deccompact();
+		&add	($key,16);
+		&cmp	($key,$__end);
+		&ja	(&label("out"));
+
+		# ROTATE(x^y,N) == ROTATE(x,N)^ROTATE(y,N)
+		&movq	("mm3","mm0");		&movq	("mm7","mm4");
+		&movq	("mm2","mm0",1);	&movq	("mm6","mm4",1);
+		&movq	("mm1","mm0");		&movq	("mm5","mm4");
+		&pshufw	("mm0","mm0",0xb1);	&pshufw	("mm4","mm4",0xb1);# = ROTATE(tp0,16)
+		&pslld	("mm2",8);		&pslld	("mm6",8);
+		&psrld	("mm3",8);		&psrld	("mm7",8);
+		&pxor	("mm0","mm2");		&pxor	("mm4","mm6");	# ^= tp0<<8
+		&pxor	("mm0","mm3");		&pxor	("mm4","mm7");	# ^= tp0>>8
+		&pslld	("mm2",16);		&pslld	("mm6",16);
+		&psrld	("mm3",16);		&psrld	("mm7",16);
+		&pxor	("mm0","mm2");		&pxor	("mm4","mm6");	# ^= tp0<<24
+		&pxor	("mm0","mm3");		&pxor	("mm4","mm7");	# ^= tp0>>24
+
+		&movq	("mm3",&QWP(8,"esp"));
+		&pxor	("mm2","mm2");		&pxor	("mm6","mm6");
+		&pcmpgtb("mm2","mm1");		&pcmpgtb("mm6","mm5");
+		&pand	("mm2","mm3");		&pand	("mm6","mm3");
+		&paddb	("mm1","mm1");		&paddb	("mm5","mm5");
+		&pxor	("mm1","mm2");		&pxor	("mm5","mm6");	# tp2
+		&movq	("mm3","mm1");		&movq	("mm7","mm5");
+		&movq	("mm2","mm1");		&movq	("mm6","mm5");
+		&pxor	("mm0","mm1");		&pxor	("mm4","mm5");	# ^= tp2
+		&pslld	("mm3",24);		&pslld	("mm7",24);
+		&psrld	("mm2",8);		&psrld	("mm6",8);
+		&pxor	("mm0","mm3");		&pxor	("mm4","mm7");	# ^= tp2<<24
+		&pxor	("mm0","mm2");		&pxor	("mm4","mm6");	# ^= tp2>>8
+
+		&movq	("mm2",&QWP(8,"esp"));
+		&pxor	("mm3","mm3");		&pxor	("mm7","mm7");
+		&pcmpgtb("mm3","mm1");		&pcmpgtb("mm7","mm5");
+		&pand	("mm3","mm2");		&pand	("mm7","mm2");
+		&paddb	("mm1","mm1");		&paddb	("mm5","mm5");
+		&pxor	("mm1","mm3");		&pxor	("mm5","mm7");	# tp4
+		&pshufw	("mm3","mm1",0xb1);	&pshufw	("mm7","mm5",0xb1);
+		&pxor	("mm0","mm1");		&pxor	("mm4","mm5");	# ^= tp4
+		&pxor	("mm0","mm3");		&pxor	("mm4","mm7");	# ^= ROTATE(tp4,16)
+
+		&pxor	("mm3","mm3");		&pxor	("mm7","mm7");
+		&pcmpgtb("mm3","mm1");		&pcmpgtb("mm7","mm5");
+		&pand	("mm3","mm2");		&pand	("mm7","mm2");
+		&paddb	("mm1","mm1");		&paddb	("mm5","mm5");
+		&pxor	("mm1","mm3");		&pxor	("mm5","mm7");	# tp8
+		&pxor	("mm0","mm1");		&pxor	("mm4","mm5");	# ^= tp8
+		&movq	("mm3","mm1");		&movq	("mm7","mm5");
+		&pshufw	("mm2","mm1",0xb1);	&pshufw	("mm6","mm5",0xb1);
+		&pxor	("mm0","mm2");		&pxor	("mm4","mm6");	# ^= ROTATE(tp8,16)
+		&pslld	("mm1",8);		&pslld	("mm5",8);
+		&psrld	("mm3",8);		&psrld	("mm7",8);
+		&movq	("mm2",&QWP(0,$key));	&movq	("mm6",&QWP(8,$key));
+		&pxor	("mm0","mm1");		&pxor	("mm4","mm5");	# ^= tp8<<8
+		&pxor	("mm0","mm3");		&pxor	("mm4","mm7");	# ^= tp8>>8
+		&mov	($s0,&DWP(0-128,$tbl));
+		&pslld	("mm1",16);		&pslld	("mm5",16);
+		&mov	($s1,&DWP(64-128,$tbl));
+		&psrld	("mm3",16);		&psrld	("mm7",16);
+		&mov	($s2,&DWP(128-128,$tbl));
+		&pxor	("mm0","mm1");		&pxor	("mm4","mm5");	# ^= tp8<<24
+		&mov	($s3,&DWP(192-128,$tbl));
+		&pxor	("mm0","mm3");		&pxor	("mm4","mm7");	# ^= tp8>>24
+
+		&pxor	("mm0","mm2");		&pxor	("mm4","mm6");
+	&jmp	(&label("loop"));
+
+	&set_label("out",16);
+	&pxor	("mm0",&QWP(0,$key));
+	&pxor	("mm4",&QWP(8,$key));
+
+	&ret	();
+&function_end_B("_sse_AES_decrypt_compact");
+					}
+
+######################################################################
+# Vanilla block function.
+######################################################################
+
+sub decstep()
+{ my ($i,$td,@s) = @_;
+  my $tmp = $key;
+  my $out = $i==3?$s[0]:$acc;
+
+	# no instructions are reordered, as performance appears
+	# optimal... or rather that all attempts to reorder didn't
+	# result in better performance [which by the way is not a
+	# bit lower than encryption].
+	if($i==3)   {	&mov	($key,$__key);			}
+	else        {	&mov	($out,$s[0]);			}
+			&and	($out,0xFF);
+			&mov	($out,&DWP(0,$td,$out,8));
+
+	if ($i==3)  {	$tmp=$s[1];				}
+			&movz	($tmp,&HB($s[1]));
+			&xor	($out,&DWP(3,$td,$tmp,8));
+
+	if ($i==3)  {	$tmp=$s[2]; &mov ($s[1],$acc);		}
+	else        {	&mov	($tmp,$s[2]);			}
+			&shr	($tmp,16);
+			&and	($tmp,0xFF);
+			&xor	($out,&DWP(2,$td,$tmp,8));
+
+	if ($i==3)  {	$tmp=$s[3]; &mov ($s[2],$__s1);		}
+	else        {	&mov	($tmp,$s[3]);			}
+			&shr	($tmp,24);
+			&xor	($out,&DWP(1,$td,$tmp,8));
+	if ($i<2)   {	&mov	(&DWP(4+4*$i,"esp"),$out);	}
+	if ($i==3)  {	&mov	($s[3],$__s0);			}
+			&comment();
+}
+
+sub declast()
+{ my ($i,$td,@s)=@_;
+  my $tmp = $key;
+  my $out = $i==3?$s[0]:$acc;
+
+	if($i==0)   {	&lea	($td,&DWP(2048+128,$td));
+			&mov	($tmp,&DWP(0-128,$td));
+			&mov	($acc,&DWP(32-128,$td));
+			&mov	($tmp,&DWP(64-128,$td));
+			&mov	($acc,&DWP(96-128,$td));
+			&mov	($tmp,&DWP(128-128,$td));
+			&mov	($acc,&DWP(160-128,$td));
+			&mov	($tmp,&DWP(192-128,$td));
+			&mov	($acc,&DWP(224-128,$td));
+			&lea	($td,&DWP(-128,$td));		}
+	if($i==3)   {	&mov	($key,$__key);			}
+	else        {	&mov	($out,$s[0]);			}
+			&and	($out,0xFF);
+			&movz	($out,&BP(0,$td,$out,1));
+
+	if ($i==3)  {	$tmp=$s[1];				}
+			&movz	($tmp,&HB($s[1]));
+			&movz	($tmp,&BP(0,$td,$tmp,1));
+			&shl	($tmp,8);
+			&xor	($out,$tmp);
+
+	if ($i==3)  {	$tmp=$s[2]; &mov ($s[1],$acc);		}
+	else        {	mov	($tmp,$s[2]);			}
+			&shr	($tmp,16);
+			&and	($tmp,0xFF);
+			&movz	($tmp,&BP(0,$td,$tmp,1));
+			&shl	($tmp,16);
+			&xor	($out,$tmp);
+
+	if ($i==3)  {	$tmp=$s[3]; &mov ($s[2],$__s1);		}
+	else        {	&mov	($tmp,$s[3]);			}
+			&shr	($tmp,24);
+			&movz	($tmp,&BP(0,$td,$tmp,1));
+			&shl	($tmp,24);
+			&xor	($out,$tmp);
+	if ($i<2)   {	&mov	(&DWP(4+4*$i,"esp"),$out);	}
+	if ($i==3)  {	&mov	($s[3],$__s0);
+			&lea	($td,&DWP(-2048,$td));		}
+}
+
+&function_begin_B("_x86_AES_decrypt");
+	# note that caller is expected to allocate stack frame for me!
+	&mov	($__key,$key);			# save key
+
+	&xor	($s0,&DWP(0,$key));		# xor with key
+	&xor	($s1,&DWP(4,$key));
+	&xor	($s2,&DWP(8,$key));
+	&xor	($s3,&DWP(12,$key));
+
+	&mov	($acc,&DWP(240,$key));		# load key->rounds
+
+	if ($small_footprint) {
+	    &lea	($acc,&DWP(-2,$acc,$acc));
+	    &lea	($acc,&DWP(0,$key,$acc,8));
+	    &mov	($__end,$acc);		# end of key schedule
+	    &set_label("loop",16);
+		&decstep(0,$tbl,$s0,$s3,$s2,$s1);
+		&decstep(1,$tbl,$s1,$s0,$s3,$s2);
+		&decstep(2,$tbl,$s2,$s1,$s0,$s3);
+		&decstep(3,$tbl,$s3,$s2,$s1,$s0);
+		&add	($key,16);		# advance rd_key
+		&xor	($s0,&DWP(0,$key));
+		&xor	($s1,&DWP(4,$key));
+		&xor	($s2,&DWP(8,$key));
+		&xor	($s3,&DWP(12,$key));
+	    &cmp	($key,$__end);
+	    &mov	($__key,$key);
+	    &jb		(&label("loop"));
+	}
+	else {
+	    &cmp	($acc,10);
+	    &jle	(&label("10rounds"));
+	    &cmp	($acc,12);
+	    &jle	(&label("12rounds"));
+
+	&set_label("14rounds",4);
+	    for ($i=1;$i<3;$i++) {
+		&decstep(0,$tbl,$s0,$s3,$s2,$s1);
+		&decstep(1,$tbl,$s1,$s0,$s3,$s2);
+		&decstep(2,$tbl,$s2,$s1,$s0,$s3);
+		&decstep(3,$tbl,$s3,$s2,$s1,$s0);
+		&xor	($s0,&DWP(16*$i+0,$key));
+		&xor	($s1,&DWP(16*$i+4,$key));
+		&xor	($s2,&DWP(16*$i+8,$key));
+		&xor	($s3,&DWP(16*$i+12,$key));
+	    }
+	    &add	($key,32);
+	    &mov	($__key,$key);		# advance rd_key
+	&set_label("12rounds",4);
+	    for ($i=1;$i<3;$i++) {
+		&decstep(0,$tbl,$s0,$s3,$s2,$s1);
+		&decstep(1,$tbl,$s1,$s0,$s3,$s2);
+		&decstep(2,$tbl,$s2,$s1,$s0,$s3);
+		&decstep(3,$tbl,$s3,$s2,$s1,$s0);
+		&xor	($s0,&DWP(16*$i+0,$key));
+		&xor	($s1,&DWP(16*$i+4,$key));
+		&xor	($s2,&DWP(16*$i+8,$key));
+		&xor	($s3,&DWP(16*$i+12,$key));
+	    }
+	    &add	($key,32);
+	    &mov	($__key,$key);		# advance rd_key
+	&set_label("10rounds",4);
+	    for ($i=1;$i<10;$i++) {
+		&decstep(0,$tbl,$s0,$s3,$s2,$s1);
+		&decstep(1,$tbl,$s1,$s0,$s3,$s2);
+		&decstep(2,$tbl,$s2,$s1,$s0,$s3);
+		&decstep(3,$tbl,$s3,$s2,$s1,$s0);
+		&xor	($s0,&DWP(16*$i+0,$key));
+		&xor	($s1,&DWP(16*$i+4,$key));
+		&xor	($s2,&DWP(16*$i+8,$key));
+		&xor	($s3,&DWP(16*$i+12,$key));
+	    }
+	}
+
+	&declast(0,$tbl,$s0,$s3,$s2,$s1);
+	&declast(1,$tbl,$s1,$s0,$s3,$s2);
+	&declast(2,$tbl,$s2,$s1,$s0,$s3);
+	&declast(3,$tbl,$s3,$s2,$s1,$s0);
+
+	&add	($key,$small_footprint?16:160);
+	&xor	($s0,&DWP(0,$key));
+	&xor	($s1,&DWP(4,$key));
+	&xor	($s2,&DWP(8,$key));
+	&xor	($s3,&DWP(12,$key));
+
+	&ret	();
+
+&set_label("AES_Td",64);	# Yes! I keep it in the code segment!
+	&_data_word(0x50a7f451, 0x5365417e, 0xc3a4171a, 0x965e273a);
+	&_data_word(0xcb6bab3b, 0xf1459d1f, 0xab58faac, 0x9303e34b);
+	&_data_word(0x55fa3020, 0xf66d76ad, 0x9176cc88, 0x254c02f5);
+	&_data_word(0xfcd7e54f, 0xd7cb2ac5, 0x80443526, 0x8fa362b5);
+	&_data_word(0x495ab1de, 0x671bba25, 0x980eea45, 0xe1c0fe5d);
+	&_data_word(0x02752fc3, 0x12f04c81, 0xa397468d, 0xc6f9d36b);
+	&_data_word(0xe75f8f03, 0x959c9215, 0xeb7a6dbf, 0xda595295);
+	&_data_word(0x2d83bed4, 0xd3217458, 0x2969e049, 0x44c8c98e);
+	&_data_word(0x6a89c275, 0x78798ef4, 0x6b3e5899, 0xdd71b927);
+	&_data_word(0xb64fe1be, 0x17ad88f0, 0x66ac20c9, 0xb43ace7d);
+	&_data_word(0x184adf63, 0x82311ae5, 0x60335197, 0x457f5362);
+	&_data_word(0xe07764b1, 0x84ae6bbb, 0x1ca081fe, 0x942b08f9);
+	&_data_word(0x58684870, 0x19fd458f, 0x876cde94, 0xb7f87b52);
+	&_data_word(0x23d373ab, 0xe2024b72, 0x578f1fe3, 0x2aab5566);
+	&_data_word(0x0728ebb2, 0x03c2b52f, 0x9a7bc586, 0xa50837d3);
+	&_data_word(0xf2872830, 0xb2a5bf23, 0xba6a0302, 0x5c8216ed);
+	&_data_word(0x2b1ccf8a, 0x92b479a7, 0xf0f207f3, 0xa1e2694e);
+	&_data_word(0xcdf4da65, 0xd5be0506, 0x1f6234d1, 0x8afea6c4);
+	&_data_word(0x9d532e34, 0xa055f3a2, 0x32e18a05, 0x75ebf6a4);
+	&_data_word(0x39ec830b, 0xaaef6040, 0x069f715e, 0x51106ebd);
+	&_data_word(0xf98a213e, 0x3d06dd96, 0xae053edd, 0x46bde64d);
+	&_data_word(0xb58d5491, 0x055dc471, 0x6fd40604, 0xff155060);
+	&_data_word(0x24fb9819, 0x97e9bdd6, 0xcc434089, 0x779ed967);
+	&_data_word(0xbd42e8b0, 0x888b8907, 0x385b19e7, 0xdbeec879);
+	&_data_word(0x470a7ca1, 0xe90f427c, 0xc91e84f8, 0x00000000);
+	&_data_word(0x83868009, 0x48ed2b32, 0xac70111e, 0x4e725a6c);
+	&_data_word(0xfbff0efd, 0x5638850f, 0x1ed5ae3d, 0x27392d36);
+	&_data_word(0x64d90f0a, 0x21a65c68, 0xd1545b9b, 0x3a2e3624);
+	&_data_word(0xb1670a0c, 0x0fe75793, 0xd296eeb4, 0x9e919b1b);
+	&_data_word(0x4fc5c080, 0xa220dc61, 0x694b775a, 0x161a121c);
+	&_data_word(0x0aba93e2, 0xe52aa0c0, 0x43e0223c, 0x1d171b12);
+	&_data_word(0x0b0d090e, 0xadc78bf2, 0xb9a8b62d, 0xc8a91e14);
+	&_data_word(0x8519f157, 0x4c0775af, 0xbbdd99ee, 0xfd607fa3);
+	&_data_word(0x9f2601f7, 0xbcf5725c, 0xc53b6644, 0x347efb5b);
+	&_data_word(0x7629438b, 0xdcc623cb, 0x68fcedb6, 0x63f1e4b8);
+	&_data_word(0xcadc31d7, 0x10856342, 0x40229713, 0x2011c684);
+	&_data_word(0x7d244a85, 0xf83dbbd2, 0x1132f9ae, 0x6da129c7);
+	&_data_word(0x4b2f9e1d, 0xf330b2dc, 0xec52860d, 0xd0e3c177);
+	&_data_word(0x6c16b32b, 0x99b970a9, 0xfa489411, 0x2264e947);
+	&_data_word(0xc48cfca8, 0x1a3ff0a0, 0xd82c7d56, 0xef903322);
+	&_data_word(0xc74e4987, 0xc1d138d9, 0xfea2ca8c, 0x360bd498);
+	&_data_word(0xcf81f5a6, 0x28de7aa5, 0x268eb7da, 0xa4bfad3f);
+	&_data_word(0xe49d3a2c, 0x0d927850, 0x9bcc5f6a, 0x62467e54);
+	&_data_word(0xc2138df6, 0xe8b8d890, 0x5ef7392e, 0xf5afc382);
+	&_data_word(0xbe805d9f, 0x7c93d069, 0xa92dd56f, 0xb31225cf);
+	&_data_word(0x3b99acc8, 0xa77d1810, 0x6e639ce8, 0x7bbb3bdb);
+	&_data_word(0x097826cd, 0xf418596e, 0x01b79aec, 0xa89a4f83);
+	&_data_word(0x656e95e6, 0x7ee6ffaa, 0x08cfbc21, 0xe6e815ef);
+	&_data_word(0xd99be7ba, 0xce366f4a, 0xd4099fea, 0xd67cb029);
+	&_data_word(0xafb2a431, 0x31233f2a, 0x3094a5c6, 0xc066a235);
+	&_data_word(0x37bc4e74, 0xa6ca82fc, 0xb0d090e0, 0x15d8a733);
+	&_data_word(0x4a9804f1, 0xf7daec41, 0x0e50cd7f, 0x2ff69117);
+	&_data_word(0x8dd64d76, 0x4db0ef43, 0x544daacc, 0xdf0496e4);
+	&_data_word(0xe3b5d19e, 0x1b886a4c, 0xb81f2cc1, 0x7f516546);
+	&_data_word(0x04ea5e9d, 0x5d358c01, 0x737487fa, 0x2e410bfb);
+	&_data_word(0x5a1d67b3, 0x52d2db92, 0x335610e9, 0x1347d66d);
+	&_data_word(0x8c61d79a, 0x7a0ca137, 0x8e14f859, 0x893c13eb);
+	&_data_word(0xee27a9ce, 0x35c961b7, 0xede51ce1, 0x3cb1477a);
+	&_data_word(0x59dfd29c, 0x3f73f255, 0x79ce1418, 0xbf37c773);
+	&_data_word(0xeacdf753, 0x5baafd5f, 0x146f3ddf, 0x86db4478);
+	&_data_word(0x81f3afca, 0x3ec468b9, 0x2c342438, 0x5f40a3c2);
+	&_data_word(0x72c31d16, 0x0c25e2bc, 0x8b493c28, 0x41950dff);
+	&_data_word(0x7101a839, 0xdeb30c08, 0x9ce4b4d8, 0x90c15664);
+	&_data_word(0x6184cb7b, 0x70b632d5, 0x745c6c48, 0x4257b8d0);
+
+#Td4:	# four copies of Td4 to choose from to avoid L1 aliasing
+	&data_byte(0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38);
+	&data_byte(0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb);
+	&data_byte(0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87);
+	&data_byte(0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb);
+	&data_byte(0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d);
+	&data_byte(0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e);
+	&data_byte(0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2);
+	&data_byte(0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25);
+	&data_byte(0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16);
+	&data_byte(0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92);
+	&data_byte(0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda);
+	&data_byte(0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84);
+	&data_byte(0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a);
+	&data_byte(0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06);
+	&data_byte(0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02);
+	&data_byte(0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b);
+	&data_byte(0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea);
+	&data_byte(0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73);
+	&data_byte(0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85);
+	&data_byte(0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e);
+	&data_byte(0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89);
+	&data_byte(0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b);
+	&data_byte(0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20);
+	&data_byte(0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4);
+	&data_byte(0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31);
+	&data_byte(0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f);
+	&data_byte(0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d);
+	&data_byte(0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef);
+	&data_byte(0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0);
+	&data_byte(0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61);
+	&data_byte(0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26);
+	&data_byte(0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d);
+
+	&data_byte(0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38);
+	&data_byte(0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb);
+	&data_byte(0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87);
+	&data_byte(0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb);
+	&data_byte(0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d);
+	&data_byte(0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e);
+	&data_byte(0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2);
+	&data_byte(0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25);
+	&data_byte(0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16);
+	&data_byte(0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92);
+	&data_byte(0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda);
+	&data_byte(0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84);
+	&data_byte(0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a);
+	&data_byte(0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06);
+	&data_byte(0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02);
+	&data_byte(0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b);
+	&data_byte(0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea);
+	&data_byte(0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73);
+	&data_byte(0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85);
+	&data_byte(0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e);
+	&data_byte(0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89);
+	&data_byte(0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b);
+	&data_byte(0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20);
+	&data_byte(0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4);
+	&data_byte(0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31);
+	&data_byte(0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f);
+	&data_byte(0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d);
+	&data_byte(0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef);
+	&data_byte(0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0);
+	&data_byte(0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61);
+	&data_byte(0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26);
+	&data_byte(0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d);
+
+	&data_byte(0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38);
+	&data_byte(0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb);
+	&data_byte(0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87);
+	&data_byte(0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb);
+	&data_byte(0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d);
+	&data_byte(0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e);
+	&data_byte(0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2);
+	&data_byte(0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25);
+	&data_byte(0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16);
+	&data_byte(0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92);
+	&data_byte(0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda);
+	&data_byte(0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84);
+	&data_byte(0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a);
+	&data_byte(0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06);
+	&data_byte(0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02);
+	&data_byte(0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b);
+	&data_byte(0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea);
+	&data_byte(0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73);
+	&data_byte(0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85);
+	&data_byte(0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e);
+	&data_byte(0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89);
+	&data_byte(0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b);
+	&data_byte(0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20);
+	&data_byte(0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4);
+	&data_byte(0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31);
+	&data_byte(0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f);
+	&data_byte(0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d);
+	&data_byte(0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef);
+	&data_byte(0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0);
+	&data_byte(0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61);
+	&data_byte(0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26);
+	&data_byte(0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d);
+
+	&data_byte(0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38);
+	&data_byte(0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb);
+	&data_byte(0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87);
+	&data_byte(0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb);
+	&data_byte(0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d);
+	&data_byte(0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e);
+	&data_byte(0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2);
+	&data_byte(0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25);
+	&data_byte(0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16);
+	&data_byte(0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92);
+	&data_byte(0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda);
+	&data_byte(0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84);
+	&data_byte(0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a);
+	&data_byte(0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06);
+	&data_byte(0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02);
+	&data_byte(0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b);
+	&data_byte(0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea);
+	&data_byte(0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73);
+	&data_byte(0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85);
+	&data_byte(0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e);
+	&data_byte(0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89);
+	&data_byte(0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b);
+	&data_byte(0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20);
+	&data_byte(0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4);
+	&data_byte(0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31);
+	&data_byte(0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f);
+	&data_byte(0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d);
+	&data_byte(0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef);
+	&data_byte(0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0);
+	&data_byte(0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61);
+	&data_byte(0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26);
+	&data_byte(0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d);
+&function_end_B("_x86_AES_decrypt");
+
+# void AES_decrypt (const void *inp,void *out,const AES_KEY *key);
+&function_begin("AES_decrypt");
+	&mov	($acc,&wparam(0));		# load inp
+	&mov	($key,&wparam(2));		# load key
+
+	&mov	($s0,"esp");
+	&sub	("esp",36);
+	&and	("esp",-64);			# align to cache-line
+
+	# place stack frame just "above" the key schedule
+	&lea	($s1,&DWP(-64-63,$key));
+	&sub	($s1,"esp");
+	&neg	($s1);
+	&and	($s1,0x3C0);	# modulo 1024, but aligned to cache-line
+	&sub	("esp",$s1);
+	&add	("esp",4);	# 4 is reserved for caller's return address
+	&mov	($_esp,$s0);	# save stack pointer
+
+	&call   (&label("pic_point"));          # make it PIC!
+	&set_label("pic_point");
+	&blindpop($tbl);
+	&picmeup($s0,"OPENSSL_ia32cap_P",$tbl,&label("pic_point")) if(!$x86only);
+	&lea    ($tbl,&DWP(&label("AES_Td")."-".&label("pic_point"),$tbl));
+
+	# pick Td4 copy which can't "overlap" with stack frame or key schedule
+	&lea	($s1,&DWP(768-4,"esp"));
+	&sub	($s1,$tbl);
+	&and	($s1,0x300);
+	&lea	($tbl,&DWP(2048+128,$tbl,$s1));
+
+					if (!$x86only) {
+	&bt	(&DWP(0,$s0),25);	# check for SSE bit
+	&jnc	(&label("x86"));
+
+	&movq	("mm0",&QWP(0,$acc));
+	&movq	("mm4",&QWP(8,$acc));
+	&call	("_sse_AES_decrypt_compact");
+	&mov	("esp",$_esp);			# restore stack pointer
+	&mov	($acc,&wparam(1));		# load out
+	&movq	(&QWP(0,$acc),"mm0");		# write output data
+	&movq	(&QWP(8,$acc),"mm4");
+	&emms	();
+	&function_end_A();
+					}
+	&set_label("x86",16);
+	&mov	($_tbl,$tbl);
+	&mov	($s0,&DWP(0,$acc));		# load input data
+	&mov	($s1,&DWP(4,$acc));
+	&mov	($s2,&DWP(8,$acc));
+	&mov	($s3,&DWP(12,$acc));
+	&call	("_x86_AES_decrypt_compact");
+	&mov	("esp",$_esp);			# restore stack pointer
+	&mov	($acc,&wparam(1));		# load out
+	&mov	(&DWP(0,$acc),$s0);		# write output data
+	&mov	(&DWP(4,$acc),$s1);
+	&mov	(&DWP(8,$acc),$s2);
+	&mov	(&DWP(12,$acc),$s3);
+&function_end("AES_decrypt");
+
+# void AES_cbc_encrypt (const void char *inp, unsigned char *out,
+#			size_t length, const AES_KEY *key,
+#			unsigned char *ivp,const int enc);
+{
+# stack frame layout
+#             -4(%esp)		# return address	 0(%esp)
+#              0(%esp)		# s0 backing store	 4(%esp)
+#              4(%esp)		# s1 backing store	 8(%esp)
+#              8(%esp)		# s2 backing store	12(%esp)
+#             12(%esp)		# s3 backing store	16(%esp)
+#             16(%esp)		# key backup		20(%esp)
+#             20(%esp)		# end of key schedule	24(%esp)
+#             24(%esp)		# %ebp backup		28(%esp)
+#             28(%esp)		# %esp backup
+my $_inp=&DWP(32,"esp");	# copy of wparam(0)
+my $_out=&DWP(36,"esp");	# copy of wparam(1)
+my $_len=&DWP(40,"esp");	# copy of wparam(2)
+my $_key=&DWP(44,"esp");	# copy of wparam(3)
+my $_ivp=&DWP(48,"esp");	# copy of wparam(4)
+my $_tmp=&DWP(52,"esp");	# volatile variable
+#
+my $ivec=&DWP(60,"esp");	# ivec[16]
+my $aes_key=&DWP(76,"esp");	# copy of aes_key
+my $mark=&DWP(76+240,"esp");	# copy of aes_key->rounds
+
+&function_begin("AES_cbc_encrypt");
+	&mov	($s2 eq "ecx"? $s2 : "",&wparam(2));	# load len
+	&cmp	($s2,0);
+	&je	(&label("drop_out"));
+
+	&call   (&label("pic_point"));		# make it PIC!
+	&set_label("pic_point");
+	&blindpop($tbl);
+	&picmeup($s0,"OPENSSL_ia32cap_P",$tbl,&label("pic_point")) if(!$x86only);
+
+	&cmp	(&wparam(5),0);
+	&lea    ($tbl,&DWP(&label("AES_Te")."-".&label("pic_point"),$tbl));
+	&jne	(&label("picked_te"));
+	&lea	($tbl,&DWP(&label("AES_Td")."-".&label("AES_Te"),$tbl));
+	&set_label("picked_te");
+
+	# one can argue if this is required
+	&pushf	();
+	&cld	();
+
+	&cmp	($s2,$speed_limit);
+	&jb	(&label("slow_way"));
+	&test	($s2,15);
+	&jnz	(&label("slow_way"));
+					if (!$x86only) {
+	&bt	(&DWP(0,$s0),28);	# check for hyper-threading bit
+	&jc	(&label("slow_way"));
+					}
+	# pre-allocate aligned stack frame...
+	&lea	($acc,&DWP(-80-244,"esp"));
+	&and	($acc,-64);
+
+	# ... and make sure it doesn't alias with $tbl modulo 4096
+	&mov	($s0,$tbl);
+	&lea	($s1,&DWP(2048+256,$tbl));
+	&mov	($s3,$acc);
+	&and	($s0,0xfff);		# s = %ebp&0xfff
+	&and	($s1,0xfff);		# e = (%ebp+2048+256)&0xfff
+	&and	($s3,0xfff);		# p = %esp&0xfff
+
+	&cmp	($s3,$s1);		# if (p>=e) %esp =- (p-e);
+	&jb	(&label("tbl_break_out"));
+	&sub	($s3,$s1);
+	&sub	($acc,$s3);
+	&jmp	(&label("tbl_ok"));
+	&set_label("tbl_break_out",4);	# else %esp -= (p-s)&0xfff + framesz;
+	&sub	($s3,$s0);
+	&and	($s3,0xfff);
+	&add	($s3,384);
+	&sub	($acc,$s3);
+	&set_label("tbl_ok",4);
+
+	&lea	($s3,&wparam(0));	# obtain pointer to parameter block
+	&exch	("esp",$acc);		# allocate stack frame
+	&add	("esp",4);		# reserve for return address!
+	&mov	($_tbl,$tbl);		# save %ebp
+	&mov	($_esp,$acc);		# save %esp
+
+	&mov	($s0,&DWP(0,$s3));	# load inp
+	&mov	($s1,&DWP(4,$s3));	# load out
+	#&mov	($s2,&DWP(8,$s3));	# load len
+	&mov	($key,&DWP(12,$s3));	# load key
+	&mov	($acc,&DWP(16,$s3));	# load ivp
+	&mov	($s3,&DWP(20,$s3));	# load enc flag
+
+	&mov	($_inp,$s0);		# save copy of inp
+	&mov	($_out,$s1);		# save copy of out
+	&mov	($_len,$s2);		# save copy of len
+	&mov	($_key,$key);		# save copy of key
+	&mov	($_ivp,$acc);		# save copy of ivp
+
+	&mov	($mark,0);		# copy of aes_key->rounds = 0;
+	# do we copy key schedule to stack?
+	&mov	($s1 eq "ebx" ? $s1 : "",$key);
+	&mov	($s2 eq "ecx" ? $s2 : "",244/4);
+	&sub	($s1,$tbl);
+	&mov	("esi",$key);
+	&and	($s1,0xfff);
+	&lea	("edi",$aes_key);
+	&cmp	($s1,2048+256);
+	&jb	(&label("do_copy"));
+	&cmp	($s1,4096-244);
+	&jb	(&label("skip_copy"));
+	&set_label("do_copy",4);
+		&mov	($_key,"edi");
+		&data_word(0xA5F3F689);	# rep movsd
+	&set_label("skip_copy");
+
+	&mov	($key,16);
+	&set_label("prefetch_tbl",4);
+		&mov	($s0,&DWP(0,$tbl));
+		&mov	($s1,&DWP(32,$tbl));
+		&mov	($s2,&DWP(64,$tbl));
+		&mov	($acc,&DWP(96,$tbl));
+		&lea	($tbl,&DWP(128,$tbl));
+		&sub	($key,1);
+	&jnz	(&label("prefetch_tbl"));
+	&sub	($tbl,2048);
+
+	&mov	($acc,$_inp);
+	&mov	($key,$_ivp);
+
+	&cmp	($s3,0);
+	&je	(&label("fast_decrypt"));
+
+#----------------------------- ENCRYPT -----------------------------#
+	&mov	($s0,&DWP(0,$key));		# load iv
+	&mov	($s1,&DWP(4,$key));
+
+	&set_label("fast_enc_loop",16);
+		&mov	($s2,&DWP(8,$key));
+		&mov	($s3,&DWP(12,$key));
+
+		&xor	($s0,&DWP(0,$acc));	# xor input data
+		&xor	($s1,&DWP(4,$acc));
+		&xor	($s2,&DWP(8,$acc));
+		&xor	($s3,&DWP(12,$acc));
+
+		&mov	($key,$_key);		# load key
+		&call	("_x86_AES_encrypt");
+
+		&mov	($acc,$_inp);		# load inp
+		&mov	($key,$_out);		# load out
+
+		&mov	(&DWP(0,$key),$s0);	# save output data
+		&mov	(&DWP(4,$key),$s1);
+		&mov	(&DWP(8,$key),$s2);
+		&mov	(&DWP(12,$key),$s3);
+
+		&lea	($acc,&DWP(16,$acc));	# advance inp
+		&mov	($s2,$_len);		# load len
+		&mov	($_inp,$acc);		# save inp
+		&lea	($s3,&DWP(16,$key));	# advance out
+		&mov	($_out,$s3);		# save out
+		&sub	($s2,16);		# decrease len
+		&mov	($_len,$s2);		# save len
+	&jnz	(&label("fast_enc_loop"));
+	&mov	($acc,$_ivp);		# load ivp
+	&mov	($s2,&DWP(8,$key));	# restore last 2 dwords
+	&mov	($s3,&DWP(12,$key));
+	&mov	(&DWP(0,$acc),$s0);	# save ivec
+	&mov	(&DWP(4,$acc),$s1);
+	&mov	(&DWP(8,$acc),$s2);
+	&mov	(&DWP(12,$acc),$s3);
+
+	&cmp	($mark,0);		# was the key schedule copied?
+	&mov	("edi",$_key);
+	&je	(&label("skip_ezero"));
+	# zero copy of key schedule
+	&mov	("ecx",240/4);
+	&xor	("eax","eax");
+	&align	(4);
+	&data_word(0xABF3F689);		# rep stosd
+	&set_label("skip_ezero");
+	&mov	("esp",$_esp);
+	&popf	();
+    &set_label("drop_out");
+	&function_end_A();
+	&pushf	();			# kludge, never executed
+
+#----------------------------- DECRYPT -----------------------------#
+&set_label("fast_decrypt",16);
+
+	&cmp	($acc,$_out);
+	&je	(&label("fast_dec_in_place"));	# in-place processing...
+
+	&mov	($_tmp,$key);
+
+	&align	(4);
+	&set_label("fast_dec_loop",16);
+		&mov	($s0,&DWP(0,$acc));	# read input
+		&mov	($s1,&DWP(4,$acc));
+		&mov	($s2,&DWP(8,$acc));
+		&mov	($s3,&DWP(12,$acc));
+
+		&mov	($key,$_key);		# load key
+		&call	("_x86_AES_decrypt");
+
+		&mov	($key,$_tmp);		# load ivp
+		&mov	($acc,$_len);		# load len
+		&xor	($s0,&DWP(0,$key));	# xor iv
+		&xor	($s1,&DWP(4,$key));
+		&xor	($s2,&DWP(8,$key));
+		&xor	($s3,&DWP(12,$key));
+
+		&mov	($key,$_out);		# load out
+		&mov	($acc,$_inp);		# load inp
+
+		&mov	(&DWP(0,$key),$s0);	# write output
+		&mov	(&DWP(4,$key),$s1);
+		&mov	(&DWP(8,$key),$s2);
+		&mov	(&DWP(12,$key),$s3);
+
+		&mov	($s2,$_len);		# load len
+		&mov	($_tmp,$acc);		# save ivp
+		&lea	($acc,&DWP(16,$acc));	# advance inp
+		&mov	($_inp,$acc);		# save inp
+		&lea	($key,&DWP(16,$key));	# advance out
+		&mov	($_out,$key);		# save out
+		&sub	($s2,16);		# decrease len
+		&mov	($_len,$s2);		# save len
+	&jnz	(&label("fast_dec_loop"));
+	&mov	($key,$_tmp);		# load temp ivp
+	&mov	($acc,$_ivp);		# load user ivp
+	&mov	($s0,&DWP(0,$key));	# load iv
+	&mov	($s1,&DWP(4,$key));
+	&mov	($s2,&DWP(8,$key));
+	&mov	($s3,&DWP(12,$key));
+	&mov	(&DWP(0,$acc),$s0);	# copy back to user
+	&mov	(&DWP(4,$acc),$s1);
+	&mov	(&DWP(8,$acc),$s2);
+	&mov	(&DWP(12,$acc),$s3);
+	&jmp	(&label("fast_dec_out"));
+
+    &set_label("fast_dec_in_place",16);
+	&set_label("fast_dec_in_place_loop");
+		&mov	($s0,&DWP(0,$acc));	# read input
+		&mov	($s1,&DWP(4,$acc));
+		&mov	($s2,&DWP(8,$acc));
+		&mov	($s3,&DWP(12,$acc));
+
+		&lea	($key,$ivec);
+		&mov	(&DWP(0,$key),$s0);	# copy to temp
+		&mov	(&DWP(4,$key),$s1);
+		&mov	(&DWP(8,$key),$s2);
+		&mov	(&DWP(12,$key),$s3);
+
+		&mov	($key,$_key);		# load key
+		&call	("_x86_AES_decrypt");
+
+		&mov	($key,$_ivp);		# load ivp
+		&mov	($acc,$_out);		# load out
+		&xor	($s0,&DWP(0,$key));	# xor iv
+		&xor	($s1,&DWP(4,$key));
+		&xor	($s2,&DWP(8,$key));
+		&xor	($s3,&DWP(12,$key));
+
+		&mov	(&DWP(0,$acc),$s0);	# write output
+		&mov	(&DWP(4,$acc),$s1);
+		&mov	(&DWP(8,$acc),$s2);
+		&mov	(&DWP(12,$acc),$s3);
+
+		&lea	($acc,&DWP(16,$acc));	# advance out
+		&mov	($_out,$acc);		# save out
+
+		&lea	($acc,$ivec);
+		&mov	($s0,&DWP(0,$acc));	# read temp
+		&mov	($s1,&DWP(4,$acc));
+		&mov	($s2,&DWP(8,$acc));
+		&mov	($s3,&DWP(12,$acc));
+
+		&mov	(&DWP(0,$key),$s0);	# copy iv
+		&mov	(&DWP(4,$key),$s1);
+		&mov	(&DWP(8,$key),$s2);
+		&mov	(&DWP(12,$key),$s3);
+
+		&mov	($acc,$_inp);		# load inp
+		&mov	($s2,$_len);		# load len
+		&lea	($acc,&DWP(16,$acc));	# advance inp
+		&mov	($_inp,$acc);		# save inp
+		&sub	($s2,16);		# decrease len
+		&mov	($_len,$s2);		# save len
+	&jnz	(&label("fast_dec_in_place_loop"));
+
+    &set_label("fast_dec_out",4);
+	&cmp	($mark,0);		# was the key schedule copied?
+	&mov	("edi",$_key);
+	&je	(&label("skip_dzero"));
+	# zero copy of key schedule
+	&mov	("ecx",240/4);
+	&xor	("eax","eax");
+	&align	(4);
+	&data_word(0xABF3F689);		# rep stosd
+	&set_label("skip_dzero");
+	&mov	("esp",$_esp);
+	&popf	();
+	&function_end_A();
+	&pushf	();			# kludge, never executed
+
+#--------------------------- SLOW ROUTINE ---------------------------#
+&set_label("slow_way",16);
+
+	&mov	($s0,&DWP(0,$s0)) if (!$x86only);# load OPENSSL_ia32cap
+	&mov	($key,&wparam(3));	# load key
+
+	# pre-allocate aligned stack frame...
+	&lea	($acc,&DWP(-80,"esp"));
+	&and	($acc,-64);
+
+	# ... and make sure it doesn't alias with $key modulo 1024
+	&lea	($s1,&DWP(-80-63,$key));
+	&sub	($s1,$acc);
+	&neg	($s1);
+	&and	($s1,0x3C0);	# modulo 1024, but aligned to cache-line
+	&sub	($acc,$s1);
+
+	# pick S-box copy which can't overlap with stack frame or $key
+	&lea	($s1,&DWP(768,$acc));
+	&sub	($s1,$tbl);
+	&and	($s1,0x300);
+	&lea	($tbl,&DWP(2048+128,$tbl,$s1));
+
+	&lea	($s3,&wparam(0));	# pointer to parameter block
+
+	&exch	("esp",$acc);
+	&add	("esp",4);		# reserve for return address!
+	&mov	($_tbl,$tbl);		# save %ebp
+	&mov	($_esp,$acc);		# save %esp
+	&mov	($_tmp,$s0);		# save OPENSSL_ia32cap
+
+	&mov	($s0,&DWP(0,$s3));	# load inp
+	&mov	($s1,&DWP(4,$s3));	# load out
+	#&mov	($s2,&DWP(8,$s3));	# load len
+	#&mov	($key,&DWP(12,$s3));	# load key
+	&mov	($acc,&DWP(16,$s3));	# load ivp
+	&mov	($s3,&DWP(20,$s3));	# load enc flag
+
+	&mov	($_inp,$s0);		# save copy of inp
+	&mov	($_out,$s1);		# save copy of out
+	&mov	($_len,$s2);		# save copy of len
+	&mov	($_key,$key);		# save copy of key
+	&mov	($_ivp,$acc);		# save copy of ivp
+
+	&mov	($key,$acc);
+	&mov	($acc,$s0);
+
+	&cmp	($s3,0);
+	&je	(&label("slow_decrypt"));
+
+#--------------------------- SLOW ENCRYPT ---------------------------#
+	&cmp	($s2,16);
+	&mov	($s3,$s1);
+	&jb	(&label("slow_enc_tail"));
+
+					if (!$x86only) {
+	&bt	($_tmp,25);		# check for SSE bit
+	&jnc	(&label("slow_enc_x86"));
+
+	&movq	("mm0",&QWP(0,$key));	# load iv
+	&movq	("mm4",&QWP(8,$key));
+
+	&set_label("slow_enc_loop_sse",16);
+		&pxor	("mm0",&QWP(0,$acc));	# xor input data
+		&pxor	("mm4",&QWP(8,$acc));
+
+		&mov	($key,$_key);
+		&call	("_sse_AES_encrypt_compact");
+
+		&mov	($acc,$_inp);		# load inp
+		&mov	($key,$_out);		# load out
+		&mov	($s2,$_len);		# load len
+
+		&movq	(&QWP(0,$key),"mm0");	# save output data
+		&movq	(&QWP(8,$key),"mm4");
+
+		&lea	($acc,&DWP(16,$acc));	# advance inp
+		&mov	($_inp,$acc);		# save inp
+		&lea	($s3,&DWP(16,$key));	# advance out
+		&mov	($_out,$s3);		# save out
+		&sub	($s2,16);		# decrease len
+		&cmp	($s2,16);
+		&mov	($_len,$s2);		# save len
+	&jae	(&label("slow_enc_loop_sse"));
+	&test	($s2,15);
+	&jnz	(&label("slow_enc_tail"));
+	&mov	($acc,$_ivp);		# load ivp
+	&movq	(&QWP(0,$acc),"mm0");	# save ivec
+	&movq	(&QWP(8,$acc),"mm4");
+	&emms	();
+	&mov	("esp",$_esp);
+	&popf	();
+	&function_end_A();
+	&pushf	();			# kludge, never executed
+					}
+    &set_label("slow_enc_x86",16);
+	&mov	($s0,&DWP(0,$key));	# load iv
+	&mov	($s1,&DWP(4,$key));
+
+	&set_label("slow_enc_loop_x86",4);
+		&mov	($s2,&DWP(8,$key));
+		&mov	($s3,&DWP(12,$key));
+
+		&xor	($s0,&DWP(0,$acc));	# xor input data
+		&xor	($s1,&DWP(4,$acc));
+		&xor	($s2,&DWP(8,$acc));
+		&xor	($s3,&DWP(12,$acc));
+
+		&mov	($key,$_key);		# load key
+		&call	("_x86_AES_encrypt_compact");
+
+		&mov	($acc,$_inp);		# load inp
+		&mov	($key,$_out);		# load out
+
+		&mov	(&DWP(0,$key),$s0);	# save output data
+		&mov	(&DWP(4,$key),$s1);
+		&mov	(&DWP(8,$key),$s2);
+		&mov	(&DWP(12,$key),$s3);
+
+		&mov	($s2,$_len);		# load len
+		&lea	($acc,&DWP(16,$acc));	# advance inp
+		&mov	($_inp,$acc);		# save inp
+		&lea	($s3,&DWP(16,$key));	# advance out
+		&mov	($_out,$s3);		# save out
+		&sub	($s2,16);		# decrease len
+		&cmp	($s2,16);
+		&mov	($_len,$s2);		# save len
+	&jae	(&label("slow_enc_loop_x86"));
+	&test	($s2,15);
+	&jnz	(&label("slow_enc_tail"));
+	&mov	($acc,$_ivp);		# load ivp
+	&mov	($s2,&DWP(8,$key));	# restore last dwords
+	&mov	($s3,&DWP(12,$key));
+	&mov	(&DWP(0,$acc),$s0);	# save ivec
+	&mov	(&DWP(4,$acc),$s1);
+	&mov	(&DWP(8,$acc),$s2);
+	&mov	(&DWP(12,$acc),$s3);
+
+	&mov	("esp",$_esp);
+	&popf	();
+	&function_end_A();
+	&pushf	();			# kludge, never executed
+
+    &set_label("slow_enc_tail",16);
+	&emms	()	if (!$x86only);
+	&mov	($key eq "edi"? $key:"",$s3);	# load out to edi
+	&mov	($s1,16);
+	&sub	($s1,$s2);
+	&cmp	($key,$acc eq "esi"? $acc:"");	# compare with inp
+	&je	(&label("enc_in_place"));
+	&align	(4);
+	&data_word(0xA4F3F689);	# rep movsb	# copy input
+	&jmp	(&label("enc_skip_in_place"));
+    &set_label("enc_in_place");
+	&lea	($key,&DWP(0,$key,$s2));
+    &set_label("enc_skip_in_place");
+	&mov	($s2,$s1);
+	&xor	($s0,$s0);
+	&align	(4);
+	&data_word(0xAAF3F689);	# rep stosb	# zero tail
+
+	&mov	($key,$_ivp);			# restore ivp
+	&mov	($acc,$s3);			# output as input
+	&mov	($s0,&DWP(0,$key));
+	&mov	($s1,&DWP(4,$key));
+	&mov	($_len,16);			# len=16
+	&jmp	(&label("slow_enc_loop_x86"));	# one more spin...
+
+#--------------------------- SLOW DECRYPT ---------------------------#
+&set_label("slow_decrypt",16);
+					if (!$x86only) {
+	&bt	($_tmp,25);		# check for SSE bit
+	&jnc	(&label("slow_dec_loop_x86"));
+
+	&set_label("slow_dec_loop_sse",4);
+		&movq	("mm0",&QWP(0,$acc));	# read input
+		&movq	("mm4",&QWP(8,$acc));
+
+		&mov	($key,$_key);
+		&call	("_sse_AES_decrypt_compact");
+
+		&mov	($acc,$_inp);		# load inp
+		&lea	($s0,$ivec);
+		&mov	($s1,$_out);		# load out
+		&mov	($s2,$_len);		# load len
+		&mov	($key,$_ivp);		# load ivp
+
+		&movq	("mm1",&QWP(0,$acc));	# re-read input
+		&movq	("mm5",&QWP(8,$acc));
+
+		&pxor	("mm0",&QWP(0,$key));	# xor iv
+		&pxor	("mm4",&QWP(8,$key));
+
+		&movq	(&QWP(0,$key),"mm1");	# copy input to iv
+		&movq	(&QWP(8,$key),"mm5");
+
+		&sub	($s2,16);		# decrease len
+		&jc	(&label("slow_dec_partial_sse"));
+
+		&movq	(&QWP(0,$s1),"mm0");	# write output
+		&movq	(&QWP(8,$s1),"mm4");
+
+		&lea	($s1,&DWP(16,$s1));	# advance out
+		&mov	($_out,$s1);		# save out
+		&lea	($acc,&DWP(16,$acc));	# advance inp
+		&mov	($_inp,$acc);		# save inp
+		&mov	($_len,$s2);		# save len
+	&jnz	(&label("slow_dec_loop_sse"));
+	&emms	();
+	&mov	("esp",$_esp);
+	&popf	();
+	&function_end_A();
+	&pushf	();			# kludge, never executed
+
+    &set_label("slow_dec_partial_sse",16);
+	&movq	(&QWP(0,$s0),"mm0");	# save output to temp
+	&movq	(&QWP(8,$s0),"mm4");
+	&emms	();
+
+	&add	($s2 eq "ecx" ? "ecx":"",16);
+	&mov	("edi",$s1);		# out
+	&mov	("esi",$s0);		# temp
+	&align	(4);
+	&data_word(0xA4F3F689);		# rep movsb # copy partial output
+
+	&mov	("esp",$_esp);
+	&popf	();
+	&function_end_A();
+	&pushf	();			# kludge, never executed
+					}
+	&set_label("slow_dec_loop_x86",16);
+		&mov	($s0,&DWP(0,$acc));	# read input
+		&mov	($s1,&DWP(4,$acc));
+		&mov	($s2,&DWP(8,$acc));
+		&mov	($s3,&DWP(12,$acc));
+
+		&lea	($key,$ivec);
+		&mov	(&DWP(0,$key),$s0);	# copy to temp
+		&mov	(&DWP(4,$key),$s1);
+		&mov	(&DWP(8,$key),$s2);
+		&mov	(&DWP(12,$key),$s3);
+
+		&mov	($key,$_key);		# load key
+		&call	("_x86_AES_decrypt_compact");
+
+		&mov	($key,$_ivp);		# load ivp
+		&mov	($acc,$_len);		# load len
+		&xor	($s0,&DWP(0,$key));	# xor iv
+		&xor	($s1,&DWP(4,$key));
+		&xor	($s2,&DWP(8,$key));
+		&xor	($s3,&DWP(12,$key));
+
+		&sub	($acc,16);
+		&jc	(&label("slow_dec_partial_x86"));
+
+		&mov	($_len,$acc);		# save len
+		&mov	($acc,$_out);		# load out
+
+		&mov	(&DWP(0,$acc),$s0);	# write output
+		&mov	(&DWP(4,$acc),$s1);
+		&mov	(&DWP(8,$acc),$s2);
+		&mov	(&DWP(12,$acc),$s3);
+
+		&lea	($acc,&DWP(16,$acc));	# advance out
+		&mov	($_out,$acc);		# save out
+
+		&lea	($acc,$ivec);
+		&mov	($s0,&DWP(0,$acc));	# read temp
+		&mov	($s1,&DWP(4,$acc));
+		&mov	($s2,&DWP(8,$acc));
+		&mov	($s3,&DWP(12,$acc));
+
+		&mov	(&DWP(0,$key),$s0);	# copy it to iv
+		&mov	(&DWP(4,$key),$s1);
+		&mov	(&DWP(8,$key),$s2);
+		&mov	(&DWP(12,$key),$s3);
+
+		&mov	($acc,$_inp);		# load inp
+		&lea	($acc,&DWP(16,$acc));	# advance inp
+		&mov	($_inp,$acc);		# save inp
+	&jnz	(&label("slow_dec_loop_x86"));
+	&mov	("esp",$_esp);
+	&popf	();
+	&function_end_A();
+	&pushf	();			# kludge, never executed
+
+    &set_label("slow_dec_partial_x86",16);
+	&lea	($acc,$ivec);
+	&mov	(&DWP(0,$acc),$s0);	# save output to temp
+	&mov	(&DWP(4,$acc),$s1);
+	&mov	(&DWP(8,$acc),$s2);
+	&mov	(&DWP(12,$acc),$s3);
+
+	&mov	($acc,$_inp);
+	&mov	($s0,&DWP(0,$acc));	# re-read input
+	&mov	($s1,&DWP(4,$acc));
+	&mov	($s2,&DWP(8,$acc));
+	&mov	($s3,&DWP(12,$acc));
+
+	&mov	(&DWP(0,$key),$s0);	# copy it to iv
+	&mov	(&DWP(4,$key),$s1);
+	&mov	(&DWP(8,$key),$s2);
+	&mov	(&DWP(12,$key),$s3);
+
+	&mov	("ecx",$_len);
+	&mov	("edi",$_out);
+	&lea	("esi",$ivec);
+	&align	(4);
+	&data_word(0xA4F3F689);		# rep movsb # copy partial output
+
+	&mov	("esp",$_esp);
+	&popf	();
+&function_end("AES_cbc_encrypt");
+}
+
+#------------------------------------------------------------------#
+
+sub enckey()
+{
+	&movz	("esi",&LB("edx"));		# rk[i]>>0
+	&movz	("ebx",&BP(-128,$tbl,"esi",1));
+	&movz	("esi",&HB("edx"));		# rk[i]>>8
+	&shl	("ebx",24);
+	&xor	("eax","ebx");
+
+	&movz	("ebx",&BP(-128,$tbl,"esi",1));
+	&shr	("edx",16);
+	&movz	("esi",&LB("edx"));		# rk[i]>>16
+	&xor	("eax","ebx");
+
+	&movz	("ebx",&BP(-128,$tbl,"esi",1));
+	&movz	("esi",&HB("edx"));		# rk[i]>>24
+	&shl	("ebx",8);
+	&xor	("eax","ebx");
+
+	&movz	("ebx",&BP(-128,$tbl,"esi",1));
+	&shl	("ebx",16);
+	&xor	("eax","ebx");
+
+	&xor	("eax",&DWP(1024-128,$tbl,"ecx",4));	# rcon
+}
+
+&function_begin("_x86_AES_set_encrypt_key");
+	&mov	("esi",&wparam(1));		# user supplied key
+	&mov	("edi",&wparam(3));		# private key schedule
+
+	&test	("esi",-1);
+	&jz	(&label("badpointer"));
+	&test	("edi",-1);
+	&jz	(&label("badpointer"));
+
+	&call	(&label("pic_point"));
+	&set_label("pic_point");
+	&blindpop($tbl);
+	&lea	($tbl,&DWP(&label("AES_Te")."-".&label("pic_point"),$tbl));
+	&lea	($tbl,&DWP(2048+128,$tbl));
+
+	# prefetch Te4
+	&mov	("eax",&DWP(0-128,$tbl));
+	&mov	("ebx",&DWP(32-128,$tbl));
+	&mov	("ecx",&DWP(64-128,$tbl));
+	&mov	("edx",&DWP(96-128,$tbl));
+	&mov	("eax",&DWP(128-128,$tbl));
+	&mov	("ebx",&DWP(160-128,$tbl));
+	&mov	("ecx",&DWP(192-128,$tbl));
+	&mov	("edx",&DWP(224-128,$tbl));
+
+	&mov	("ecx",&wparam(2));		# number of bits in key
+	&cmp	("ecx",128);
+	&je	(&label("10rounds"));
+	&cmp	("ecx",192);
+	&je	(&label("12rounds"));
+	&cmp	("ecx",256);
+	&je	(&label("14rounds"));
+	&mov	("eax",-2);			# invalid number of bits
+	&jmp	(&label("exit"));
+
+    &set_label("10rounds");
+	&mov	("eax",&DWP(0,"esi"));		# copy first 4 dwords
+	&mov	("ebx",&DWP(4,"esi"));
+	&mov	("ecx",&DWP(8,"esi"));
+	&mov	("edx",&DWP(12,"esi"));
+	&mov	(&DWP(0,"edi"),"eax");
+	&mov	(&DWP(4,"edi"),"ebx");
+	&mov	(&DWP(8,"edi"),"ecx");
+	&mov	(&DWP(12,"edi"),"edx");
+
+	&xor	("ecx","ecx");
+	&jmp	(&label("10shortcut"));
+
+	&align	(4);
+	&set_label("10loop");
+		&mov	("eax",&DWP(0,"edi"));		# rk[0]
+		&mov	("edx",&DWP(12,"edi"));		# rk[3]
+	&set_label("10shortcut");
+		&enckey	();
+
+		&mov	(&DWP(16,"edi"),"eax");		# rk[4]
+		&xor	("eax",&DWP(4,"edi"));
+		&mov	(&DWP(20,"edi"),"eax");		# rk[5]
+		&xor	("eax",&DWP(8,"edi"));
+		&mov	(&DWP(24,"edi"),"eax");		# rk[6]
+		&xor	("eax",&DWP(12,"edi"));
+		&mov	(&DWP(28,"edi"),"eax");		# rk[7]
+		&inc	("ecx");
+		&add	("edi",16);
+		&cmp	("ecx",10);
+	&jl	(&label("10loop"));
+
+	&mov	(&DWP(80,"edi"),10);		# setup number of rounds
+	&xor	("eax","eax");
+	&jmp	(&label("exit"));
+
+    &set_label("12rounds");
+	&mov	("eax",&DWP(0,"esi"));		# copy first 6 dwords
+	&mov	("ebx",&DWP(4,"esi"));
+	&mov	("ecx",&DWP(8,"esi"));
+	&mov	("edx",&DWP(12,"esi"));
+	&mov	(&DWP(0,"edi"),"eax");
+	&mov	(&DWP(4,"edi"),"ebx");
+	&mov	(&DWP(8,"edi"),"ecx");
+	&mov	(&DWP(12,"edi"),"edx");
+	&mov	("ecx",&DWP(16,"esi"));
+	&mov	("edx",&DWP(20,"esi"));
+	&mov	(&DWP(16,"edi"),"ecx");
+	&mov	(&DWP(20,"edi"),"edx");
+
+	&xor	("ecx","ecx");
+	&jmp	(&label("12shortcut"));
+
+	&align	(4);
+	&set_label("12loop");
+		&mov	("eax",&DWP(0,"edi"));		# rk[0]
+		&mov	("edx",&DWP(20,"edi"));		# rk[5]
+	&set_label("12shortcut");
+		&enckey	();
+
+		&mov	(&DWP(24,"edi"),"eax");		# rk[6]
+		&xor	("eax",&DWP(4,"edi"));
+		&mov	(&DWP(28,"edi"),"eax");		# rk[7]
+		&xor	("eax",&DWP(8,"edi"));
+		&mov	(&DWP(32,"edi"),"eax");		# rk[8]
+		&xor	("eax",&DWP(12,"edi"));
+		&mov	(&DWP(36,"edi"),"eax");		# rk[9]
+
+		&cmp	("ecx",7);
+		&je	(&label("12break"));
+		&inc	("ecx");
+
+		&xor	("eax",&DWP(16,"edi"));
+		&mov	(&DWP(40,"edi"),"eax");		# rk[10]
+		&xor	("eax",&DWP(20,"edi"));
+		&mov	(&DWP(44,"edi"),"eax");		# rk[11]
+
+		&add	("edi",24);
+	&jmp	(&label("12loop"));
+
+	&set_label("12break");
+	&mov	(&DWP(72,"edi"),12);		# setup number of rounds
+	&xor	("eax","eax");
+	&jmp	(&label("exit"));
+
+    &set_label("14rounds");
+	&mov	("eax",&DWP(0,"esi"));		# copy first 8 dwords
+	&mov	("ebx",&DWP(4,"esi"));
+	&mov	("ecx",&DWP(8,"esi"));
+	&mov	("edx",&DWP(12,"esi"));
+	&mov	(&DWP(0,"edi"),"eax");
+	&mov	(&DWP(4,"edi"),"ebx");
+	&mov	(&DWP(8,"edi"),"ecx");
+	&mov	(&DWP(12,"edi"),"edx");
+	&mov	("eax",&DWP(16,"esi"));
+	&mov	("ebx",&DWP(20,"esi"));
+	&mov	("ecx",&DWP(24,"esi"));
+	&mov	("edx",&DWP(28,"esi"));
+	&mov	(&DWP(16,"edi"),"eax");
+	&mov	(&DWP(20,"edi"),"ebx");
+	&mov	(&DWP(24,"edi"),"ecx");
+	&mov	(&DWP(28,"edi"),"edx");
+
+	&xor	("ecx","ecx");
+	&jmp	(&label("14shortcut"));
+
+	&align	(4);
+	&set_label("14loop");
+		&mov	("edx",&DWP(28,"edi"));		# rk[7]
+	&set_label("14shortcut");
+		&mov	("eax",&DWP(0,"edi"));		# rk[0]
+
+		&enckey	();
+
+		&mov	(&DWP(32,"edi"),"eax");		# rk[8]
+		&xor	("eax",&DWP(4,"edi"));
+		&mov	(&DWP(36,"edi"),"eax");		# rk[9]
+		&xor	("eax",&DWP(8,"edi"));
+		&mov	(&DWP(40,"edi"),"eax");		# rk[10]
+		&xor	("eax",&DWP(12,"edi"));
+		&mov	(&DWP(44,"edi"),"eax");		# rk[11]
+
+		&cmp	("ecx",6);
+		&je	(&label("14break"));
+		&inc	("ecx");
+
+		&mov	("edx","eax");
+		&mov	("eax",&DWP(16,"edi"));		# rk[4]
+		&movz	("esi",&LB("edx"));		# rk[11]>>0
+		&movz	("ebx",&BP(-128,$tbl,"esi",1));
+		&movz	("esi",&HB("edx"));		# rk[11]>>8
+		&xor	("eax","ebx");
+
+		&movz	("ebx",&BP(-128,$tbl,"esi",1));
+		&shr	("edx",16);
+		&shl	("ebx",8);
+		&movz	("esi",&LB("edx"));		# rk[11]>>16
+		&xor	("eax","ebx");
+
+		&movz	("ebx",&BP(-128,$tbl,"esi",1));
+		&movz	("esi",&HB("edx"));		# rk[11]>>24
+		&shl	("ebx",16);
+		&xor	("eax","ebx");
+
+		&movz	("ebx",&BP(-128,$tbl,"esi",1));
+		&shl	("ebx",24);
+		&xor	("eax","ebx");
+
+		&mov	(&DWP(48,"edi"),"eax");		# rk[12]
+		&xor	("eax",&DWP(20,"edi"));
+		&mov	(&DWP(52,"edi"),"eax");		# rk[13]
+		&xor	("eax",&DWP(24,"edi"));
+		&mov	(&DWP(56,"edi"),"eax");		# rk[14]
+		&xor	("eax",&DWP(28,"edi"));
+		&mov	(&DWP(60,"edi"),"eax");		# rk[15]
+
+		&add	("edi",32);
+	&jmp	(&label("14loop"));
+
+	&set_label("14break");
+	&mov	(&DWP(48,"edi"),14);		# setup number of rounds
+	&xor	("eax","eax");
+	&jmp	(&label("exit"));
+
+    &set_label("badpointer");
+	&mov	("eax",-1);
+    &set_label("exit");
+&function_end("_x86_AES_set_encrypt_key");
+
+# int AES_set_encrypt_key(const unsigned char *userKey, const int bits,
+#                        AES_KEY *key)
+&function_begin_B("AES_set_encrypt_key");
+	&call	("_x86_AES_set_encrypt_key");
+	&ret	();
+&function_end_B("AES_set_encrypt_key");
+
+sub deckey()
+{ my ($i,$key,$tp1,$tp2,$tp4,$tp8) = @_;
+  my $tmp = $tbl;
+
+	&mov	($tmp,0x80808080);
+	&and	($tmp,$tp1);
+	&lea	($tp2,&DWP(0,$tp1,$tp1));
+	&mov	($acc,$tmp);
+	&shr	($tmp,7);
+	&sub	($acc,$tmp);
+	&and	($tp2,0xfefefefe);
+	&and	($acc,0x1b1b1b1b);
+	&xor	($tp2,$acc);
+	&mov	($tmp,0x80808080);
+
+	&and	($tmp,$tp2);
+	&lea	($tp4,&DWP(0,$tp2,$tp2));
+	&mov	($acc,$tmp);
+	&shr	($tmp,7);
+	&sub	($acc,$tmp);
+	&and	($tp4,0xfefefefe);
+	&and	($acc,0x1b1b1b1b);
+	 &xor	($tp2,$tp1);	# tp2^tp1
+	&xor	($tp4,$acc);
+	&mov	($tmp,0x80808080);
+
+	&and	($tmp,$tp4);
+	&lea	($tp8,&DWP(0,$tp4,$tp4));
+	&mov	($acc,$tmp);
+	&shr	($tmp,7);
+	 &xor	($tp4,$tp1);	# tp4^tp1
+	&sub	($acc,$tmp);
+	&and	($tp8,0xfefefefe);
+	&and	($acc,0x1b1b1b1b);
+	 &rotl	($tp1,8);	# = ROTATE(tp1,8)
+	&xor	($tp8,$acc);
+
+	&mov	($tmp,&DWP(4*($i+1),$key));	# modulo-scheduled load
+
+	&xor	($tp1,$tp2);
+	&xor	($tp2,$tp8);
+	&xor	($tp1,$tp4);
+	&rotl	($tp2,24);
+	&xor	($tp4,$tp8);
+	&xor	($tp1,$tp8);	# ^= tp8^(tp4^tp1)^(tp2^tp1)
+	&rotl	($tp4,16);
+	&xor	($tp1,$tp2);	# ^= ROTATE(tp8^tp2^tp1,24)
+	&rotl	($tp8,8);
+	&xor	($tp1,$tp4);	# ^= ROTATE(tp8^tp4^tp1,16)
+	&mov	($tp2,$tmp);
+	&xor	($tp1,$tp8);	# ^= ROTATE(tp8,8)
+
+	&mov	(&DWP(4*$i,$key),$tp1);
+}
+
+# int AES_set_decrypt_key(const unsigned char *userKey, const int bits,
+#                        AES_KEY *key)
+&function_begin_B("AES_set_decrypt_key");
+	&call	("_x86_AES_set_encrypt_key");
+	&cmp	("eax",0);
+	&je	(&label("proceed"));
+	&ret	();
+
+    &set_label("proceed");
+	&push	("ebp");
+	&push	("ebx");
+	&push	("esi");
+	&push	("edi");
+
+	&mov	("esi",&wparam(2));
+	&mov	("ecx",&DWP(240,"esi"));	# pull number of rounds
+	&lea	("ecx",&DWP(0,"","ecx",4));
+	&lea	("edi",&DWP(0,"esi","ecx",4));	# pointer to last chunk
+
+	&set_label("invert",4);			# invert order of chunks
+		&mov	("eax",&DWP(0,"esi"));
+		&mov	("ebx",&DWP(4,"esi"));
+		&mov	("ecx",&DWP(0,"edi"));
+		&mov	("edx",&DWP(4,"edi"));
+		&mov	(&DWP(0,"edi"),"eax");
+		&mov	(&DWP(4,"edi"),"ebx");
+		&mov	(&DWP(0,"esi"),"ecx");
+		&mov	(&DWP(4,"esi"),"edx");
+		&mov	("eax",&DWP(8,"esi"));
+		&mov	("ebx",&DWP(12,"esi"));
+		&mov	("ecx",&DWP(8,"edi"));
+		&mov	("edx",&DWP(12,"edi"));
+		&mov	(&DWP(8,"edi"),"eax");
+		&mov	(&DWP(12,"edi"),"ebx");
+		&mov	(&DWP(8,"esi"),"ecx");
+		&mov	(&DWP(12,"esi"),"edx");
+		&add	("esi",16);
+		&sub	("edi",16);
+		&cmp	("esi","edi");
+	&jne	(&label("invert"));
+
+	&mov	($key,&wparam(2));
+	&mov	($acc,&DWP(240,$key));		# pull number of rounds
+	&lea	($acc,&DWP(-2,$acc,$acc));
+	&lea	($acc,&DWP(0,$key,$acc,8));
+	&mov	(&wparam(2),$acc);
+
+	&mov	($s0,&DWP(16,$key));		# modulo-scheduled load
+	&set_label("permute",4);		# permute the key schedule
+		&add	($key,16);
+		&deckey	(0,$key,$s0,$s1,$s2,$s3);
+		&deckey	(1,$key,$s1,$s2,$s3,$s0);
+		&deckey	(2,$key,$s2,$s3,$s0,$s1);
+		&deckey	(3,$key,$s3,$s0,$s1,$s2);
+		&cmp	($key,&wparam(2));
+	&jb	(&label("permute"));
+
+	&xor	("eax","eax");			# return success
+&function_end("AES_set_decrypt_key");
+&asciz("AES for x86, CRYPTOGAMS by <appro\@openssl.org>");
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-armv4.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-armv4.pl
new file mode 100644
index 000000000..998158998
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-armv4.pl
@@ -0,0 +1,1245 @@
+#! /usr/bin/env perl
+# Copyright 2007-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# AES for ARMv4
+
+# January 2007.
+#
+# Code uses single 1K S-box and is >2 times faster than code generated
+# by gcc-3.4.1. This is thanks to unique feature of ARMv4 ISA, which
+# allows to merge logical or arithmetic operation with shift or rotate
+# in one instruction and emit combined result every cycle. The module
+# is endian-neutral. The performance is ~42 cycles/byte for 128-bit
+# key [on single-issue Xscale PXA250 core].
+
+# May 2007.
+#
+# AES_set_[en|de]crypt_key is added.
+
+# July 2010.
+#
+# Rescheduling for dual-issue pipeline resulted in 12% improvement on
+# Cortex A8 core and ~25 cycles per byte processed with 128-bit key.
+
+# February 2011.
+#
+# Profiler-assisted and platform-specific optimization resulted in 16%
+# improvement on Cortex A8 core and ~21.5 cycles per byte.
+
+$flavour = shift;
+if ($flavour=~/\w[\w\-]*\.\w+$/) { $output=$flavour; undef $flavour; }
+else { while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {} }
+
+if ($flavour && $flavour ne "void") {
+    $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+    ( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+    ( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+    die "can't locate arm-xlate.pl";
+
+    open STDOUT,"| \"$^X\" $xlate $flavour $output";
+} else {
+    open STDOUT,">$output";
+}
+
+$s0="r0";
+$s1="r1";
+$s2="r2";
+$s3="r3";
+$t1="r4";
+$t2="r5";
+$t3="r6";
+$i1="r7";
+$i2="r8";
+$i3="r9";
+
+$tbl="r10";
+$key="r11";
+$rounds="r12";
+
+$code=<<___;
+#ifndef __KERNEL__
+# include "arm_arch.h"
+#else
+# define __ARM_ARCH__ __LINUX_ARM_ARCH__
+#endif
+
+.text
+#if defined(__thumb2__) && !defined(__APPLE__)
+.syntax	unified
+.thumb
+#else
+.code	32
+#undef __thumb2__
+#endif
+
+.type	AES_Te,%object
+.align	5
+AES_Te:
+.word	0xc66363a5, 0xf87c7c84, 0xee777799, 0xf67b7b8d
+.word	0xfff2f20d, 0xd66b6bbd, 0xde6f6fb1, 0x91c5c554
+.word	0x60303050, 0x02010103, 0xce6767a9, 0x562b2b7d
+.word	0xe7fefe19, 0xb5d7d762, 0x4dababe6, 0xec76769a
+.word	0x8fcaca45, 0x1f82829d, 0x89c9c940, 0xfa7d7d87
+.word	0xeffafa15, 0xb25959eb, 0x8e4747c9, 0xfbf0f00b
+.word	0x41adadec, 0xb3d4d467, 0x5fa2a2fd, 0x45afafea
+.word	0x239c9cbf, 0x53a4a4f7, 0xe4727296, 0x9bc0c05b
+.word	0x75b7b7c2, 0xe1fdfd1c, 0x3d9393ae, 0x4c26266a
+.word	0x6c36365a, 0x7e3f3f41, 0xf5f7f702, 0x83cccc4f
+.word	0x6834345c, 0x51a5a5f4, 0xd1e5e534, 0xf9f1f108
+.word	0xe2717193, 0xabd8d873, 0x62313153, 0x2a15153f
+.word	0x0804040c, 0x95c7c752, 0x46232365, 0x9dc3c35e
+.word	0x30181828, 0x379696a1, 0x0a05050f, 0x2f9a9ab5
+.word	0x0e070709, 0x24121236, 0x1b80809b, 0xdfe2e23d
+.word	0xcdebeb26, 0x4e272769, 0x7fb2b2cd, 0xea75759f
+.word	0x1209091b, 0x1d83839e, 0x582c2c74, 0x341a1a2e
+.word	0x361b1b2d, 0xdc6e6eb2, 0xb45a5aee, 0x5ba0a0fb
+.word	0xa45252f6, 0x763b3b4d, 0xb7d6d661, 0x7db3b3ce
+.word	0x5229297b, 0xdde3e33e, 0x5e2f2f71, 0x13848497
+.word	0xa65353f5, 0xb9d1d168, 0x00000000, 0xc1eded2c
+.word	0x40202060, 0xe3fcfc1f, 0x79b1b1c8, 0xb65b5bed
+.word	0xd46a6abe, 0x8dcbcb46, 0x67bebed9, 0x7239394b
+.word	0x944a4ade, 0x984c4cd4, 0xb05858e8, 0x85cfcf4a
+.word	0xbbd0d06b, 0xc5efef2a, 0x4faaaae5, 0xedfbfb16
+.word	0x864343c5, 0x9a4d4dd7, 0x66333355, 0x11858594
+.word	0x8a4545cf, 0xe9f9f910, 0x04020206, 0xfe7f7f81
+.word	0xa05050f0, 0x783c3c44, 0x259f9fba, 0x4ba8a8e3
+.word	0xa25151f3, 0x5da3a3fe, 0x804040c0, 0x058f8f8a
+.word	0x3f9292ad, 0x219d9dbc, 0x70383848, 0xf1f5f504
+.word	0x63bcbcdf, 0x77b6b6c1, 0xafdada75, 0x42212163
+.word	0x20101030, 0xe5ffff1a, 0xfdf3f30e, 0xbfd2d26d
+.word	0x81cdcd4c, 0x180c0c14, 0x26131335, 0xc3ecec2f
+.word	0xbe5f5fe1, 0x359797a2, 0x884444cc, 0x2e171739
+.word	0x93c4c457, 0x55a7a7f2, 0xfc7e7e82, 0x7a3d3d47
+.word	0xc86464ac, 0xba5d5de7, 0x3219192b, 0xe6737395
+.word	0xc06060a0, 0x19818198, 0x9e4f4fd1, 0xa3dcdc7f
+.word	0x44222266, 0x542a2a7e, 0x3b9090ab, 0x0b888883
+.word	0x8c4646ca, 0xc7eeee29, 0x6bb8b8d3, 0x2814143c
+.word	0xa7dede79, 0xbc5e5ee2, 0x160b0b1d, 0xaddbdb76
+.word	0xdbe0e03b, 0x64323256, 0x743a3a4e, 0x140a0a1e
+.word	0x924949db, 0x0c06060a, 0x4824246c, 0xb85c5ce4
+.word	0x9fc2c25d, 0xbdd3d36e, 0x43acacef, 0xc46262a6
+.word	0x399191a8, 0x319595a4, 0xd3e4e437, 0xf279798b
+.word	0xd5e7e732, 0x8bc8c843, 0x6e373759, 0xda6d6db7
+.word	0x018d8d8c, 0xb1d5d564, 0x9c4e4ed2, 0x49a9a9e0
+.word	0xd86c6cb4, 0xac5656fa, 0xf3f4f407, 0xcfeaea25
+.word	0xca6565af, 0xf47a7a8e, 0x47aeaee9, 0x10080818
+.word	0x6fbabad5, 0xf0787888, 0x4a25256f, 0x5c2e2e72
+.word	0x381c1c24, 0x57a6a6f1, 0x73b4b4c7, 0x97c6c651
+.word	0xcbe8e823, 0xa1dddd7c, 0xe874749c, 0x3e1f1f21
+.word	0x964b4bdd, 0x61bdbddc, 0x0d8b8b86, 0x0f8a8a85
+.word	0xe0707090, 0x7c3e3e42, 0x71b5b5c4, 0xcc6666aa
+.word	0x904848d8, 0x06030305, 0xf7f6f601, 0x1c0e0e12
+.word	0xc26161a3, 0x6a35355f, 0xae5757f9, 0x69b9b9d0
+.word	0x17868691, 0x99c1c158, 0x3a1d1d27, 0x279e9eb9
+.word	0xd9e1e138, 0xebf8f813, 0x2b9898b3, 0x22111133
+.word	0xd26969bb, 0xa9d9d970, 0x078e8e89, 0x339494a7
+.word	0x2d9b9bb6, 0x3c1e1e22, 0x15878792, 0xc9e9e920
+.word	0x87cece49, 0xaa5555ff, 0x50282878, 0xa5dfdf7a
+.word	0x038c8c8f, 0x59a1a1f8, 0x09898980, 0x1a0d0d17
+.word	0x65bfbfda, 0xd7e6e631, 0x844242c6, 0xd06868b8
+.word	0x824141c3, 0x299999b0, 0x5a2d2d77, 0x1e0f0f11
+.word	0x7bb0b0cb, 0xa85454fc, 0x6dbbbbd6, 0x2c16163a
+@ Te4[256]
+.byte	0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5
+.byte	0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76
+.byte	0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0
+.byte	0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0
+.byte	0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc
+.byte	0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15
+.byte	0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a
+.byte	0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75
+.byte	0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0
+.byte	0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84
+.byte	0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b
+.byte	0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf
+.byte	0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85
+.byte	0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8
+.byte	0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5
+.byte	0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2
+.byte	0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17
+.byte	0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73
+.byte	0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88
+.byte	0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb
+.byte	0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c
+.byte	0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79
+.byte	0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9
+.byte	0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08
+.byte	0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6
+.byte	0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a
+.byte	0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e
+.byte	0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e
+.byte	0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94
+.byte	0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf
+.byte	0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68
+.byte	0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16
+@ rcon[]
+.word	0x01000000, 0x02000000, 0x04000000, 0x08000000
+.word	0x10000000, 0x20000000, 0x40000000, 0x80000000
+.word	0x1B000000, 0x36000000, 0, 0, 0, 0, 0, 0
+.size	AES_Te,.-AES_Te
+
+@ void AES_encrypt(const unsigned char *in, unsigned char *out,
+@ 		 const AES_KEY *key) {
+.global AES_encrypt
+.type   AES_encrypt,%function
+.align	5
+AES_encrypt:
+#ifndef	__thumb2__
+	sub	r3,pc,#8		@ AES_encrypt
+#else
+	adr	r3,.
+#endif
+	stmdb   sp!,{r1,r4-r12,lr}
+#if defined(__thumb2__) || defined(__APPLE__)
+	adr	$tbl,AES_Te
+#else
+	sub	$tbl,r3,#AES_encrypt-AES_Te	@ Te
+#endif
+	mov	$rounds,r0		@ inp
+	mov	$key,r2
+#if __ARM_ARCH__<7
+	ldrb	$s0,[$rounds,#3]	@ load input data in endian-neutral
+	ldrb	$t1,[$rounds,#2]	@ manner...
+	ldrb	$t2,[$rounds,#1]
+	ldrb	$t3,[$rounds,#0]
+	orr	$s0,$s0,$t1,lsl#8
+	ldrb	$s1,[$rounds,#7]
+	orr	$s0,$s0,$t2,lsl#16
+	ldrb	$t1,[$rounds,#6]
+	orr	$s0,$s0,$t3,lsl#24
+	ldrb	$t2,[$rounds,#5]
+	ldrb	$t3,[$rounds,#4]
+	orr	$s1,$s1,$t1,lsl#8
+	ldrb	$s2,[$rounds,#11]
+	orr	$s1,$s1,$t2,lsl#16
+	ldrb	$t1,[$rounds,#10]
+	orr	$s1,$s1,$t3,lsl#24
+	ldrb	$t2,[$rounds,#9]
+	ldrb	$t3,[$rounds,#8]
+	orr	$s2,$s2,$t1,lsl#8
+	ldrb	$s3,[$rounds,#15]
+	orr	$s2,$s2,$t2,lsl#16
+	ldrb	$t1,[$rounds,#14]
+	orr	$s2,$s2,$t3,lsl#24
+	ldrb	$t2,[$rounds,#13]
+	ldrb	$t3,[$rounds,#12]
+	orr	$s3,$s3,$t1,lsl#8
+	orr	$s3,$s3,$t2,lsl#16
+	orr	$s3,$s3,$t3,lsl#24
+#else
+	ldr	$s0,[$rounds,#0]
+	ldr	$s1,[$rounds,#4]
+	ldr	$s2,[$rounds,#8]
+	ldr	$s3,[$rounds,#12]
+#ifdef __ARMEL__
+	rev	$s0,$s0
+	rev	$s1,$s1
+	rev	$s2,$s2
+	rev	$s3,$s3
+#endif
+#endif
+	bl	_armv4_AES_encrypt
+
+	ldr	$rounds,[sp],#4		@ pop out
+#if __ARM_ARCH__>=7
+#ifdef __ARMEL__
+	rev	$s0,$s0
+	rev	$s1,$s1
+	rev	$s2,$s2
+	rev	$s3,$s3
+#endif
+	str	$s0,[$rounds,#0]
+	str	$s1,[$rounds,#4]
+	str	$s2,[$rounds,#8]
+	str	$s3,[$rounds,#12]
+#else
+	mov	$t1,$s0,lsr#24		@ write output in endian-neutral
+	mov	$t2,$s0,lsr#16		@ manner...
+	mov	$t3,$s0,lsr#8
+	strb	$t1,[$rounds,#0]
+	strb	$t2,[$rounds,#1]
+	mov	$t1,$s1,lsr#24
+	strb	$t3,[$rounds,#2]
+	mov	$t2,$s1,lsr#16
+	strb	$s0,[$rounds,#3]
+	mov	$t3,$s1,lsr#8
+	strb	$t1,[$rounds,#4]
+	strb	$t2,[$rounds,#5]
+	mov	$t1,$s2,lsr#24
+	strb	$t3,[$rounds,#6]
+	mov	$t2,$s2,lsr#16
+	strb	$s1,[$rounds,#7]
+	mov	$t3,$s2,lsr#8
+	strb	$t1,[$rounds,#8]
+	strb	$t2,[$rounds,#9]
+	mov	$t1,$s3,lsr#24
+	strb	$t3,[$rounds,#10]
+	mov	$t2,$s3,lsr#16
+	strb	$s2,[$rounds,#11]
+	mov	$t3,$s3,lsr#8
+	strb	$t1,[$rounds,#12]
+	strb	$t2,[$rounds,#13]
+	strb	$t3,[$rounds,#14]
+	strb	$s3,[$rounds,#15]
+#endif
+#if __ARM_ARCH__>=5
+	ldmia	sp!,{r4-r12,pc}
+#else
+	ldmia   sp!,{r4-r12,lr}
+	tst	lr,#1
+	moveq	pc,lr			@ be binary compatible with V4, yet
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	AES_encrypt,.-AES_encrypt
+
+.type   _armv4_AES_encrypt,%function
+.align	2
+_armv4_AES_encrypt:
+	str	lr,[sp,#-4]!		@ push lr
+	ldmia	$key!,{$t1-$i1}
+	eor	$s0,$s0,$t1
+	ldr	$rounds,[$key,#240-16]
+	eor	$s1,$s1,$t2
+	eor	$s2,$s2,$t3
+	eor	$s3,$s3,$i1
+	sub	$rounds,$rounds,#1
+	mov	lr,#255
+
+	and	$i1,lr,$s0
+	and	$i2,lr,$s0,lsr#8
+	and	$i3,lr,$s0,lsr#16
+	mov	$s0,$s0,lsr#24
+.Lenc_loop:
+	ldr	$t1,[$tbl,$i1,lsl#2]	@ Te3[s0>>0]
+	and	$i1,lr,$s1,lsr#16	@ i0
+	ldr	$t2,[$tbl,$i2,lsl#2]	@ Te2[s0>>8]
+	and	$i2,lr,$s1
+	ldr	$t3,[$tbl,$i3,lsl#2]	@ Te1[s0>>16]
+	and	$i3,lr,$s1,lsr#8
+	ldr	$s0,[$tbl,$s0,lsl#2]	@ Te0[s0>>24]
+	mov	$s1,$s1,lsr#24
+
+	ldr	$i1,[$tbl,$i1,lsl#2]	@ Te1[s1>>16]
+	ldr	$i2,[$tbl,$i2,lsl#2]	@ Te3[s1>>0]
+	ldr	$i3,[$tbl,$i3,lsl#2]	@ Te2[s1>>8]
+	eor	$s0,$s0,$i1,ror#8
+	ldr	$s1,[$tbl,$s1,lsl#2]	@ Te0[s1>>24]
+	and	$i1,lr,$s2,lsr#8	@ i0
+	eor	$t2,$t2,$i2,ror#8
+	and	$i2,lr,$s2,lsr#16	@ i1
+	eor	$t3,$t3,$i3,ror#8
+	and	$i3,lr,$s2
+	ldr	$i1,[$tbl,$i1,lsl#2]	@ Te2[s2>>8]
+	eor	$s1,$s1,$t1,ror#24
+	ldr	$i2,[$tbl,$i2,lsl#2]	@ Te1[s2>>16]
+	mov	$s2,$s2,lsr#24
+
+	ldr	$i3,[$tbl,$i3,lsl#2]	@ Te3[s2>>0]
+	eor	$s0,$s0,$i1,ror#16
+	ldr	$s2,[$tbl,$s2,lsl#2]	@ Te0[s2>>24]
+	and	$i1,lr,$s3		@ i0
+	eor	$s1,$s1,$i2,ror#8
+	and	$i2,lr,$s3,lsr#8	@ i1
+	eor	$t3,$t3,$i3,ror#16
+	and	$i3,lr,$s3,lsr#16	@ i2
+	ldr	$i1,[$tbl,$i1,lsl#2]	@ Te3[s3>>0]
+	eor	$s2,$s2,$t2,ror#16
+	ldr	$i2,[$tbl,$i2,lsl#2]	@ Te2[s3>>8]
+	mov	$s3,$s3,lsr#24
+
+	ldr	$i3,[$tbl,$i3,lsl#2]	@ Te1[s3>>16]
+	eor	$s0,$s0,$i1,ror#24
+	ldr	$i1,[$key],#16
+	eor	$s1,$s1,$i2,ror#16
+	ldr	$s3,[$tbl,$s3,lsl#2]	@ Te0[s3>>24]
+	eor	$s2,$s2,$i3,ror#8
+	ldr	$t1,[$key,#-12]
+	eor	$s3,$s3,$t3,ror#8
+
+	ldr	$t2,[$key,#-8]
+	eor	$s0,$s0,$i1
+	ldr	$t3,[$key,#-4]
+	and	$i1,lr,$s0
+	eor	$s1,$s1,$t1
+	and	$i2,lr,$s0,lsr#8
+	eor	$s2,$s2,$t2
+	and	$i3,lr,$s0,lsr#16
+	eor	$s3,$s3,$t3
+	mov	$s0,$s0,lsr#24
+
+	subs	$rounds,$rounds,#1
+	bne	.Lenc_loop
+
+	add	$tbl,$tbl,#2
+
+	ldrb	$t1,[$tbl,$i1,lsl#2]	@ Te4[s0>>0]
+	and	$i1,lr,$s1,lsr#16	@ i0
+	ldrb	$t2,[$tbl,$i2,lsl#2]	@ Te4[s0>>8]
+	and	$i2,lr,$s1
+	ldrb	$t3,[$tbl,$i3,lsl#2]	@ Te4[s0>>16]
+	and	$i3,lr,$s1,lsr#8
+	ldrb	$s0,[$tbl,$s0,lsl#2]	@ Te4[s0>>24]
+	mov	$s1,$s1,lsr#24
+
+	ldrb	$i1,[$tbl,$i1,lsl#2]	@ Te4[s1>>16]
+	ldrb	$i2,[$tbl,$i2,lsl#2]	@ Te4[s1>>0]
+	ldrb	$i3,[$tbl,$i3,lsl#2]	@ Te4[s1>>8]
+	eor	$s0,$i1,$s0,lsl#8
+	ldrb	$s1,[$tbl,$s1,lsl#2]	@ Te4[s1>>24]
+	and	$i1,lr,$s2,lsr#8	@ i0
+	eor	$t2,$i2,$t2,lsl#8
+	and	$i2,lr,$s2,lsr#16	@ i1
+	eor	$t3,$i3,$t3,lsl#8
+	and	$i3,lr,$s2
+	ldrb	$i1,[$tbl,$i1,lsl#2]	@ Te4[s2>>8]
+	eor	$s1,$t1,$s1,lsl#24
+	ldrb	$i2,[$tbl,$i2,lsl#2]	@ Te4[s2>>16]
+	mov	$s2,$s2,lsr#24
+
+	ldrb	$i3,[$tbl,$i3,lsl#2]	@ Te4[s2>>0]
+	eor	$s0,$i1,$s0,lsl#8
+	ldrb	$s2,[$tbl,$s2,lsl#2]	@ Te4[s2>>24]
+	and	$i1,lr,$s3		@ i0
+	eor	$s1,$s1,$i2,lsl#16
+	and	$i2,lr,$s3,lsr#8	@ i1
+	eor	$t3,$i3,$t3,lsl#8
+	and	$i3,lr,$s3,lsr#16	@ i2
+	ldrb	$i1,[$tbl,$i1,lsl#2]	@ Te4[s3>>0]
+	eor	$s2,$t2,$s2,lsl#24
+	ldrb	$i2,[$tbl,$i2,lsl#2]	@ Te4[s3>>8]
+	mov	$s3,$s3,lsr#24
+
+	ldrb	$i3,[$tbl,$i3,lsl#2]	@ Te4[s3>>16]
+	eor	$s0,$i1,$s0,lsl#8
+	ldr	$i1,[$key,#0]
+	ldrb	$s3,[$tbl,$s3,lsl#2]	@ Te4[s3>>24]
+	eor	$s1,$s1,$i2,lsl#8
+	ldr	$t1,[$key,#4]
+	eor	$s2,$s2,$i3,lsl#16
+	ldr	$t2,[$key,#8]
+	eor	$s3,$t3,$s3,lsl#24
+	ldr	$t3,[$key,#12]
+
+	eor	$s0,$s0,$i1
+	eor	$s1,$s1,$t1
+	eor	$s2,$s2,$t2
+	eor	$s3,$s3,$t3
+
+	sub	$tbl,$tbl,#2
+	ldr	pc,[sp],#4		@ pop and return
+.size	_armv4_AES_encrypt,.-_armv4_AES_encrypt
+
+.global AES_set_encrypt_key
+.type   AES_set_encrypt_key,%function
+.align	5
+AES_set_encrypt_key:
+_armv4_AES_set_encrypt_key:
+#ifndef	__thumb2__
+	sub	r3,pc,#8		@ AES_set_encrypt_key
+#else
+	adr	r3,.
+#endif
+	teq	r0,#0
+#ifdef	__thumb2__
+	itt	eq			@ Thumb2 thing, sanity check in ARM
+#endif
+	moveq	r0,#-1
+	beq	.Labrt
+	teq	r2,#0
+#ifdef	__thumb2__
+	itt	eq			@ Thumb2 thing, sanity check in ARM
+#endif
+	moveq	r0,#-1
+	beq	.Labrt
+
+	teq	r1,#128
+	beq	.Lok
+	teq	r1,#192
+	beq	.Lok
+	teq	r1,#256
+#ifdef	__thumb2__
+	itt	ne			@ Thumb2 thing, sanity check in ARM
+#endif
+	movne	r0,#-1
+	bne	.Labrt
+
+.Lok:	stmdb   sp!,{r4-r12,lr}
+	mov	$rounds,r0		@ inp
+	mov	lr,r1			@ bits
+	mov	$key,r2			@ key
+
+#if defined(__thumb2__) || defined(__APPLE__)
+	adr	$tbl,AES_Te+1024				@ Te4
+#else
+	sub	$tbl,r3,#_armv4_AES_set_encrypt_key-AES_Te-1024	@ Te4
+#endif
+
+#if __ARM_ARCH__<7
+	ldrb	$s0,[$rounds,#3]	@ load input data in endian-neutral
+	ldrb	$t1,[$rounds,#2]	@ manner...
+	ldrb	$t2,[$rounds,#1]
+	ldrb	$t3,[$rounds,#0]
+	orr	$s0,$s0,$t1,lsl#8
+	ldrb	$s1,[$rounds,#7]
+	orr	$s0,$s0,$t2,lsl#16
+	ldrb	$t1,[$rounds,#6]
+	orr	$s0,$s0,$t3,lsl#24
+	ldrb	$t2,[$rounds,#5]
+	ldrb	$t3,[$rounds,#4]
+	orr	$s1,$s1,$t1,lsl#8
+	ldrb	$s2,[$rounds,#11]
+	orr	$s1,$s1,$t2,lsl#16
+	ldrb	$t1,[$rounds,#10]
+	orr	$s1,$s1,$t3,lsl#24
+	ldrb	$t2,[$rounds,#9]
+	ldrb	$t3,[$rounds,#8]
+	orr	$s2,$s2,$t1,lsl#8
+	ldrb	$s3,[$rounds,#15]
+	orr	$s2,$s2,$t2,lsl#16
+	ldrb	$t1,[$rounds,#14]
+	orr	$s2,$s2,$t3,lsl#24
+	ldrb	$t2,[$rounds,#13]
+	ldrb	$t3,[$rounds,#12]
+	orr	$s3,$s3,$t1,lsl#8
+	str	$s0,[$key],#16
+	orr	$s3,$s3,$t2,lsl#16
+	str	$s1,[$key,#-12]
+	orr	$s3,$s3,$t3,lsl#24
+	str	$s2,[$key,#-8]
+	str	$s3,[$key,#-4]
+#else
+	ldr	$s0,[$rounds,#0]
+	ldr	$s1,[$rounds,#4]
+	ldr	$s2,[$rounds,#8]
+	ldr	$s3,[$rounds,#12]
+#ifdef __ARMEL__
+	rev	$s0,$s0
+	rev	$s1,$s1
+	rev	$s2,$s2
+	rev	$s3,$s3
+#endif
+	str	$s0,[$key],#16
+	str	$s1,[$key,#-12]
+	str	$s2,[$key,#-8]
+	str	$s3,[$key,#-4]
+#endif
+
+	teq	lr,#128
+	bne	.Lnot128
+	mov	$rounds,#10
+	str	$rounds,[$key,#240-16]
+	add	$t3,$tbl,#256			@ rcon
+	mov	lr,#255
+
+.L128_loop:
+	and	$t2,lr,$s3,lsr#24
+	and	$i1,lr,$s3,lsr#16
+	ldrb	$t2,[$tbl,$t2]
+	and	$i2,lr,$s3,lsr#8
+	ldrb	$i1,[$tbl,$i1]
+	and	$i3,lr,$s3
+	ldrb	$i2,[$tbl,$i2]
+	orr	$t2,$t2,$i1,lsl#24
+	ldrb	$i3,[$tbl,$i3]
+	orr	$t2,$t2,$i2,lsl#16
+	ldr	$t1,[$t3],#4			@ rcon[i++]
+	orr	$t2,$t2,$i3,lsl#8
+	eor	$t2,$t2,$t1
+	eor	$s0,$s0,$t2			@ rk[4]=rk[0]^...
+	eor	$s1,$s1,$s0			@ rk[5]=rk[1]^rk[4]
+	str	$s0,[$key],#16
+	eor	$s2,$s2,$s1			@ rk[6]=rk[2]^rk[5]
+	str	$s1,[$key,#-12]
+	eor	$s3,$s3,$s2			@ rk[7]=rk[3]^rk[6]
+	str	$s2,[$key,#-8]
+	subs	$rounds,$rounds,#1
+	str	$s3,[$key,#-4]
+	bne	.L128_loop
+	sub	r2,$key,#176
+	b	.Ldone
+
+.Lnot128:
+#if __ARM_ARCH__<7
+	ldrb	$i2,[$rounds,#19]
+	ldrb	$t1,[$rounds,#18]
+	ldrb	$t2,[$rounds,#17]
+	ldrb	$t3,[$rounds,#16]
+	orr	$i2,$i2,$t1,lsl#8
+	ldrb	$i3,[$rounds,#23]
+	orr	$i2,$i2,$t2,lsl#16
+	ldrb	$t1,[$rounds,#22]
+	orr	$i2,$i2,$t3,lsl#24
+	ldrb	$t2,[$rounds,#21]
+	ldrb	$t3,[$rounds,#20]
+	orr	$i3,$i3,$t1,lsl#8
+	orr	$i3,$i3,$t2,lsl#16
+	str	$i2,[$key],#8
+	orr	$i3,$i3,$t3,lsl#24
+	str	$i3,[$key,#-4]
+#else
+	ldr	$i2,[$rounds,#16]
+	ldr	$i3,[$rounds,#20]
+#ifdef __ARMEL__
+	rev	$i2,$i2
+	rev	$i3,$i3
+#endif
+	str	$i2,[$key],#8
+	str	$i3,[$key,#-4]
+#endif
+
+	teq	lr,#192
+	bne	.Lnot192
+	mov	$rounds,#12
+	str	$rounds,[$key,#240-24]
+	add	$t3,$tbl,#256			@ rcon
+	mov	lr,#255
+	mov	$rounds,#8
+
+.L192_loop:
+	and	$t2,lr,$i3,lsr#24
+	and	$i1,lr,$i3,lsr#16
+	ldrb	$t2,[$tbl,$t2]
+	and	$i2,lr,$i3,lsr#8
+	ldrb	$i1,[$tbl,$i1]
+	and	$i3,lr,$i3
+	ldrb	$i2,[$tbl,$i2]
+	orr	$t2,$t2,$i1,lsl#24
+	ldrb	$i3,[$tbl,$i3]
+	orr	$t2,$t2,$i2,lsl#16
+	ldr	$t1,[$t3],#4			@ rcon[i++]
+	orr	$t2,$t2,$i3,lsl#8
+	eor	$i3,$t2,$t1
+	eor	$s0,$s0,$i3			@ rk[6]=rk[0]^...
+	eor	$s1,$s1,$s0			@ rk[7]=rk[1]^rk[6]
+	str	$s0,[$key],#24
+	eor	$s2,$s2,$s1			@ rk[8]=rk[2]^rk[7]
+	str	$s1,[$key,#-20]
+	eor	$s3,$s3,$s2			@ rk[9]=rk[3]^rk[8]
+	str	$s2,[$key,#-16]
+	subs	$rounds,$rounds,#1
+	str	$s3,[$key,#-12]
+#ifdef	__thumb2__
+	itt	eq				@ Thumb2 thing, sanity check in ARM
+#endif
+	subeq	r2,$key,#216
+	beq	.Ldone
+
+	ldr	$i1,[$key,#-32]
+	ldr	$i2,[$key,#-28]
+	eor	$i1,$i1,$s3			@ rk[10]=rk[4]^rk[9]
+	eor	$i3,$i2,$i1			@ rk[11]=rk[5]^rk[10]
+	str	$i1,[$key,#-8]
+	str	$i3,[$key,#-4]
+	b	.L192_loop
+
+.Lnot192:
+#if __ARM_ARCH__<7
+	ldrb	$i2,[$rounds,#27]
+	ldrb	$t1,[$rounds,#26]
+	ldrb	$t2,[$rounds,#25]
+	ldrb	$t3,[$rounds,#24]
+	orr	$i2,$i2,$t1,lsl#8
+	ldrb	$i3,[$rounds,#31]
+	orr	$i2,$i2,$t2,lsl#16
+	ldrb	$t1,[$rounds,#30]
+	orr	$i2,$i2,$t3,lsl#24
+	ldrb	$t2,[$rounds,#29]
+	ldrb	$t3,[$rounds,#28]
+	orr	$i3,$i3,$t1,lsl#8
+	orr	$i3,$i3,$t2,lsl#16
+	str	$i2,[$key],#8
+	orr	$i3,$i3,$t3,lsl#24
+	str	$i3,[$key,#-4]
+#else
+	ldr	$i2,[$rounds,#24]
+	ldr	$i3,[$rounds,#28]
+#ifdef __ARMEL__
+	rev	$i2,$i2
+	rev	$i3,$i3
+#endif
+	str	$i2,[$key],#8
+	str	$i3,[$key,#-4]
+#endif
+
+	mov	$rounds,#14
+	str	$rounds,[$key,#240-32]
+	add	$t3,$tbl,#256			@ rcon
+	mov	lr,#255
+	mov	$rounds,#7
+
+.L256_loop:
+	and	$t2,lr,$i3,lsr#24
+	and	$i1,lr,$i3,lsr#16
+	ldrb	$t2,[$tbl,$t2]
+	and	$i2,lr,$i3,lsr#8
+	ldrb	$i1,[$tbl,$i1]
+	and	$i3,lr,$i3
+	ldrb	$i2,[$tbl,$i2]
+	orr	$t2,$t2,$i1,lsl#24
+	ldrb	$i3,[$tbl,$i3]
+	orr	$t2,$t2,$i2,lsl#16
+	ldr	$t1,[$t3],#4			@ rcon[i++]
+	orr	$t2,$t2,$i3,lsl#8
+	eor	$i3,$t2,$t1
+	eor	$s0,$s0,$i3			@ rk[8]=rk[0]^...
+	eor	$s1,$s1,$s0			@ rk[9]=rk[1]^rk[8]
+	str	$s0,[$key],#32
+	eor	$s2,$s2,$s1			@ rk[10]=rk[2]^rk[9]
+	str	$s1,[$key,#-28]
+	eor	$s3,$s3,$s2			@ rk[11]=rk[3]^rk[10]
+	str	$s2,[$key,#-24]
+	subs	$rounds,$rounds,#1
+	str	$s3,[$key,#-20]
+#ifdef	__thumb2__
+	itt	eq				@ Thumb2 thing, sanity check in ARM
+#endif
+	subeq	r2,$key,#256
+	beq	.Ldone
+
+	and	$t2,lr,$s3
+	and	$i1,lr,$s3,lsr#8
+	ldrb	$t2,[$tbl,$t2]
+	and	$i2,lr,$s3,lsr#16
+	ldrb	$i1,[$tbl,$i1]
+	and	$i3,lr,$s3,lsr#24
+	ldrb	$i2,[$tbl,$i2]
+	orr	$t2,$t2,$i1,lsl#8
+	ldrb	$i3,[$tbl,$i3]
+	orr	$t2,$t2,$i2,lsl#16
+	ldr	$t1,[$key,#-48]
+	orr	$t2,$t2,$i3,lsl#24
+
+	ldr	$i1,[$key,#-44]
+	ldr	$i2,[$key,#-40]
+	eor	$t1,$t1,$t2			@ rk[12]=rk[4]^...
+	ldr	$i3,[$key,#-36]
+	eor	$i1,$i1,$t1			@ rk[13]=rk[5]^rk[12]
+	str	$t1,[$key,#-16]
+	eor	$i2,$i2,$i1			@ rk[14]=rk[6]^rk[13]
+	str	$i1,[$key,#-12]
+	eor	$i3,$i3,$i2			@ rk[15]=rk[7]^rk[14]
+	str	$i2,[$key,#-8]
+	str	$i3,[$key,#-4]
+	b	.L256_loop
+
+.align	2
+.Ldone:	mov	r0,#0
+	ldmia   sp!,{r4-r12,lr}
+.Labrt:
+#if __ARM_ARCH__>=5
+	ret				@ bx lr
+#else
+	tst	lr,#1
+	moveq	pc,lr			@ be binary compatible with V4, yet
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	AES_set_encrypt_key,.-AES_set_encrypt_key
+
+.global AES_set_decrypt_key
+.type   AES_set_decrypt_key,%function
+.align	5
+AES_set_decrypt_key:
+	str	lr,[sp,#-4]!            @ push lr
+	bl	_armv4_AES_set_encrypt_key
+	teq	r0,#0
+	ldr	lr,[sp],#4              @ pop lr
+	bne	.Labrt
+
+	mov	r0,r2			@ AES_set_encrypt_key preserves r2,
+	mov	r1,r2			@ which is AES_KEY *key
+	b	_armv4_AES_set_enc2dec_key
+.size	AES_set_decrypt_key,.-AES_set_decrypt_key
+
+@ void AES_set_enc2dec_key(const AES_KEY *inp,AES_KEY *out)
+.global	AES_set_enc2dec_key
+.type	AES_set_enc2dec_key,%function
+.align	5
+AES_set_enc2dec_key:
+_armv4_AES_set_enc2dec_key:
+	stmdb   sp!,{r4-r12,lr}
+
+	ldr	$rounds,[r0,#240]
+	mov	$i1,r0			@ input
+	add	$i2,r0,$rounds,lsl#4
+	mov	$key,r1			@ output
+	add	$tbl,r1,$rounds,lsl#4
+	str	$rounds,[r1,#240]
+
+.Linv:	ldr	$s0,[$i1],#16
+	ldr	$s1,[$i1,#-12]
+	ldr	$s2,[$i1,#-8]
+	ldr	$s3,[$i1,#-4]
+	ldr	$t1,[$i2],#-16
+	ldr	$t2,[$i2,#16+4]
+	ldr	$t3,[$i2,#16+8]
+	ldr	$i3,[$i2,#16+12]
+	str	$s0,[$tbl],#-16
+	str	$s1,[$tbl,#16+4]
+	str	$s2,[$tbl,#16+8]
+	str	$s3,[$tbl,#16+12]
+	str	$t1,[$key],#16
+	str	$t2,[$key,#-12]
+	str	$t3,[$key,#-8]
+	str	$i3,[$key,#-4]
+	teq	$i1,$i2
+	bne	.Linv
+
+	ldr	$s0,[$i1]
+	ldr	$s1,[$i1,#4]
+	ldr	$s2,[$i1,#8]
+	ldr	$s3,[$i1,#12]
+	str	$s0,[$key]
+	str	$s1,[$key,#4]
+	str	$s2,[$key,#8]
+	str	$s3,[$key,#12]
+	sub	$key,$key,$rounds,lsl#3
+___
+$mask80=$i1;
+$mask1b=$i2;
+$mask7f=$i3;
+$code.=<<___;
+	ldr	$s0,[$key,#16]!		@ prefetch tp1
+	mov	$mask80,#0x80
+	mov	$mask1b,#0x1b
+	orr	$mask80,$mask80,#0x8000
+	orr	$mask1b,$mask1b,#0x1b00
+	orr	$mask80,$mask80,$mask80,lsl#16
+	orr	$mask1b,$mask1b,$mask1b,lsl#16
+	sub	$rounds,$rounds,#1
+	mvn	$mask7f,$mask80
+	mov	$rounds,$rounds,lsl#2	@ (rounds-1)*4
+
+.Lmix:	and	$t1,$s0,$mask80
+	and	$s1,$s0,$mask7f
+	sub	$t1,$t1,$t1,lsr#7
+	and	$t1,$t1,$mask1b
+	eor	$s1,$t1,$s1,lsl#1	@ tp2
+
+	and	$t1,$s1,$mask80
+	and	$s2,$s1,$mask7f
+	sub	$t1,$t1,$t1,lsr#7
+	and	$t1,$t1,$mask1b
+	eor	$s2,$t1,$s2,lsl#1	@ tp4
+
+	and	$t1,$s2,$mask80
+	and	$s3,$s2,$mask7f
+	sub	$t1,$t1,$t1,lsr#7
+	and	$t1,$t1,$mask1b
+	eor	$s3,$t1,$s3,lsl#1	@ tp8
+
+	eor	$t1,$s1,$s2
+	eor	$t2,$s0,$s3		@ tp9
+	eor	$t1,$t1,$s3		@ tpe
+	eor	$t1,$t1,$s1,ror#24
+	eor	$t1,$t1,$t2,ror#24	@ ^= ROTATE(tpb=tp9^tp2,8)
+	eor	$t1,$t1,$s2,ror#16
+	eor	$t1,$t1,$t2,ror#16	@ ^= ROTATE(tpd=tp9^tp4,16)
+	eor	$t1,$t1,$t2,ror#8	@ ^= ROTATE(tp9,24)
+
+	ldr	$s0,[$key,#4]		@ prefetch tp1
+	str	$t1,[$key],#4
+	subs	$rounds,$rounds,#1
+	bne	.Lmix
+
+	mov	r0,#0
+#if __ARM_ARCH__>=5
+	ldmia	sp!,{r4-r12,pc}
+#else
+	ldmia   sp!,{r4-r12,lr}
+	tst	lr,#1
+	moveq	pc,lr			@ be binary compatible with V4, yet
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	AES_set_enc2dec_key,.-AES_set_enc2dec_key
+
+.type	AES_Td,%object
+.align	5
+AES_Td:
+.word	0x51f4a750, 0x7e416553, 0x1a17a4c3, 0x3a275e96
+.word	0x3bab6bcb, 0x1f9d45f1, 0xacfa58ab, 0x4be30393
+.word	0x2030fa55, 0xad766df6, 0x88cc7691, 0xf5024c25
+.word	0x4fe5d7fc, 0xc52acbd7, 0x26354480, 0xb562a38f
+.word	0xdeb15a49, 0x25ba1b67, 0x45ea0e98, 0x5dfec0e1
+.word	0xc32f7502, 0x814cf012, 0x8d4697a3, 0x6bd3f9c6
+.word	0x038f5fe7, 0x15929c95, 0xbf6d7aeb, 0x955259da
+.word	0xd4be832d, 0x587421d3, 0x49e06929, 0x8ec9c844
+.word	0x75c2896a, 0xf48e7978, 0x99583e6b, 0x27b971dd
+.word	0xbee14fb6, 0xf088ad17, 0xc920ac66, 0x7dce3ab4
+.word	0x63df4a18, 0xe51a3182, 0x97513360, 0x62537f45
+.word	0xb16477e0, 0xbb6bae84, 0xfe81a01c, 0xf9082b94
+.word	0x70486858, 0x8f45fd19, 0x94de6c87, 0x527bf8b7
+.word	0xab73d323, 0x724b02e2, 0xe31f8f57, 0x6655ab2a
+.word	0xb2eb2807, 0x2fb5c203, 0x86c57b9a, 0xd33708a5
+.word	0x302887f2, 0x23bfa5b2, 0x02036aba, 0xed16825c
+.word	0x8acf1c2b, 0xa779b492, 0xf307f2f0, 0x4e69e2a1
+.word	0x65daf4cd, 0x0605bed5, 0xd134621f, 0xc4a6fe8a
+.word	0x342e539d, 0xa2f355a0, 0x058ae132, 0xa4f6eb75
+.word	0x0b83ec39, 0x4060efaa, 0x5e719f06, 0xbd6e1051
+.word	0x3e218af9, 0x96dd063d, 0xdd3e05ae, 0x4de6bd46
+.word	0x91548db5, 0x71c45d05, 0x0406d46f, 0x605015ff
+.word	0x1998fb24, 0xd6bde997, 0x894043cc, 0x67d99e77
+.word	0xb0e842bd, 0x07898b88, 0xe7195b38, 0x79c8eedb
+.word	0xa17c0a47, 0x7c420fe9, 0xf8841ec9, 0x00000000
+.word	0x09808683, 0x322bed48, 0x1e1170ac, 0x6c5a724e
+.word	0xfd0efffb, 0x0f853856, 0x3daed51e, 0x362d3927
+.word	0x0a0fd964, 0x685ca621, 0x9b5b54d1, 0x24362e3a
+.word	0x0c0a67b1, 0x9357e70f, 0xb4ee96d2, 0x1b9b919e
+.word	0x80c0c54f, 0x61dc20a2, 0x5a774b69, 0x1c121a16
+.word	0xe293ba0a, 0xc0a02ae5, 0x3c22e043, 0x121b171d
+.word	0x0e090d0b, 0xf28bc7ad, 0x2db6a8b9, 0x141ea9c8
+.word	0x57f11985, 0xaf75074c, 0xee99ddbb, 0xa37f60fd
+.word	0xf701269f, 0x5c72f5bc, 0x44663bc5, 0x5bfb7e34
+.word	0x8b432976, 0xcb23c6dc, 0xb6edfc68, 0xb8e4f163
+.word	0xd731dcca, 0x42638510, 0x13972240, 0x84c61120
+.word	0x854a247d, 0xd2bb3df8, 0xaef93211, 0xc729a16d
+.word	0x1d9e2f4b, 0xdcb230f3, 0x0d8652ec, 0x77c1e3d0
+.word	0x2bb3166c, 0xa970b999, 0x119448fa, 0x47e96422
+.word	0xa8fc8cc4, 0xa0f03f1a, 0x567d2cd8, 0x223390ef
+.word	0x87494ec7, 0xd938d1c1, 0x8ccaa2fe, 0x98d40b36
+.word	0xa6f581cf, 0xa57ade28, 0xdab78e26, 0x3fadbfa4
+.word	0x2c3a9de4, 0x5078920d, 0x6a5fcc9b, 0x547e4662
+.word	0xf68d13c2, 0x90d8b8e8, 0x2e39f75e, 0x82c3aff5
+.word	0x9f5d80be, 0x69d0937c, 0x6fd52da9, 0xcf2512b3
+.word	0xc8ac993b, 0x10187da7, 0xe89c636e, 0xdb3bbb7b
+.word	0xcd267809, 0x6e5918f4, 0xec9ab701, 0x834f9aa8
+.word	0xe6956e65, 0xaaffe67e, 0x21bccf08, 0xef15e8e6
+.word	0xbae79bd9, 0x4a6f36ce, 0xea9f09d4, 0x29b07cd6
+.word	0x31a4b2af, 0x2a3f2331, 0xc6a59430, 0x35a266c0
+.word	0x744ebc37, 0xfc82caa6, 0xe090d0b0, 0x33a7d815
+.word	0xf104984a, 0x41ecdaf7, 0x7fcd500e, 0x1791f62f
+.word	0x764dd68d, 0x43efb04d, 0xccaa4d54, 0xe49604df
+.word	0x9ed1b5e3, 0x4c6a881b, 0xc12c1fb8, 0x4665517f
+.word	0x9d5eea04, 0x018c355d, 0xfa877473, 0xfb0b412e
+.word	0xb3671d5a, 0x92dbd252, 0xe9105633, 0x6dd64713
+.word	0x9ad7618c, 0x37a10c7a, 0x59f8148e, 0xeb133c89
+.word	0xcea927ee, 0xb761c935, 0xe11ce5ed, 0x7a47b13c
+.word	0x9cd2df59, 0x55f2733f, 0x1814ce79, 0x73c737bf
+.word	0x53f7cdea, 0x5ffdaa5b, 0xdf3d6f14, 0x7844db86
+.word	0xcaaff381, 0xb968c43e, 0x3824342c, 0xc2a3405f
+.word	0x161dc372, 0xbce2250c, 0x283c498b, 0xff0d9541
+.word	0x39a80171, 0x080cb3de, 0xd8b4e49c, 0x6456c190
+.word	0x7bcb8461, 0xd532b670, 0x486c5c74, 0xd0b85742
+@ Td4[256]
+.byte	0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38
+.byte	0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb
+.byte	0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87
+.byte	0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb
+.byte	0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d
+.byte	0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e
+.byte	0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2
+.byte	0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25
+.byte	0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16
+.byte	0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92
+.byte	0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda
+.byte	0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84
+.byte	0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a
+.byte	0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06
+.byte	0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02
+.byte	0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b
+.byte	0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea
+.byte	0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73
+.byte	0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85
+.byte	0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e
+.byte	0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89
+.byte	0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b
+.byte	0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20
+.byte	0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4
+.byte	0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31
+.byte	0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f
+.byte	0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d
+.byte	0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef
+.byte	0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0
+.byte	0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61
+.byte	0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26
+.byte	0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d
+.size	AES_Td,.-AES_Td
+
+@ void AES_decrypt(const unsigned char *in, unsigned char *out,
+@ 		 const AES_KEY *key) {
+.global AES_decrypt
+.type   AES_decrypt,%function
+.align	5
+AES_decrypt:
+#ifndef	__thumb2__
+	sub	r3,pc,#8		@ AES_decrypt
+#else
+	adr	r3,.
+#endif
+	stmdb   sp!,{r1,r4-r12,lr}
+#if defined(__thumb2__) || defined(__APPLE__)
+	adr	$tbl,AES_Td
+#else
+	sub	$tbl,r3,#AES_decrypt-AES_Td	@ Td
+#endif
+	mov	$rounds,r0		@ inp
+	mov	$key,r2
+#if __ARM_ARCH__<7
+	ldrb	$s0,[$rounds,#3]	@ load input data in endian-neutral
+	ldrb	$t1,[$rounds,#2]	@ manner...
+	ldrb	$t2,[$rounds,#1]
+	ldrb	$t3,[$rounds,#0]
+	orr	$s0,$s0,$t1,lsl#8
+	ldrb	$s1,[$rounds,#7]
+	orr	$s0,$s0,$t2,lsl#16
+	ldrb	$t1,[$rounds,#6]
+	orr	$s0,$s0,$t3,lsl#24
+	ldrb	$t2,[$rounds,#5]
+	ldrb	$t3,[$rounds,#4]
+	orr	$s1,$s1,$t1,lsl#8
+	ldrb	$s2,[$rounds,#11]
+	orr	$s1,$s1,$t2,lsl#16
+	ldrb	$t1,[$rounds,#10]
+	orr	$s1,$s1,$t3,lsl#24
+	ldrb	$t2,[$rounds,#9]
+	ldrb	$t3,[$rounds,#8]
+	orr	$s2,$s2,$t1,lsl#8
+	ldrb	$s3,[$rounds,#15]
+	orr	$s2,$s2,$t2,lsl#16
+	ldrb	$t1,[$rounds,#14]
+	orr	$s2,$s2,$t3,lsl#24
+	ldrb	$t2,[$rounds,#13]
+	ldrb	$t3,[$rounds,#12]
+	orr	$s3,$s3,$t1,lsl#8
+	orr	$s3,$s3,$t2,lsl#16
+	orr	$s3,$s3,$t3,lsl#24
+#else
+	ldr	$s0,[$rounds,#0]
+	ldr	$s1,[$rounds,#4]
+	ldr	$s2,[$rounds,#8]
+	ldr	$s3,[$rounds,#12]
+#ifdef __ARMEL__
+	rev	$s0,$s0
+	rev	$s1,$s1
+	rev	$s2,$s2
+	rev	$s3,$s3
+#endif
+#endif
+	bl	_armv4_AES_decrypt
+
+	ldr	$rounds,[sp],#4		@ pop out
+#if __ARM_ARCH__>=7
+#ifdef __ARMEL__
+	rev	$s0,$s0
+	rev	$s1,$s1
+	rev	$s2,$s2
+	rev	$s3,$s3
+#endif
+	str	$s0,[$rounds,#0]
+	str	$s1,[$rounds,#4]
+	str	$s2,[$rounds,#8]
+	str	$s3,[$rounds,#12]
+#else
+	mov	$t1,$s0,lsr#24		@ write output in endian-neutral
+	mov	$t2,$s0,lsr#16		@ manner...
+	mov	$t3,$s0,lsr#8
+	strb	$t1,[$rounds,#0]
+	strb	$t2,[$rounds,#1]
+	mov	$t1,$s1,lsr#24
+	strb	$t3,[$rounds,#2]
+	mov	$t2,$s1,lsr#16
+	strb	$s0,[$rounds,#3]
+	mov	$t3,$s1,lsr#8
+	strb	$t1,[$rounds,#4]
+	strb	$t2,[$rounds,#5]
+	mov	$t1,$s2,lsr#24
+	strb	$t3,[$rounds,#6]
+	mov	$t2,$s2,lsr#16
+	strb	$s1,[$rounds,#7]
+	mov	$t3,$s2,lsr#8
+	strb	$t1,[$rounds,#8]
+	strb	$t2,[$rounds,#9]
+	mov	$t1,$s3,lsr#24
+	strb	$t3,[$rounds,#10]
+	mov	$t2,$s3,lsr#16
+	strb	$s2,[$rounds,#11]
+	mov	$t3,$s3,lsr#8
+	strb	$t1,[$rounds,#12]
+	strb	$t2,[$rounds,#13]
+	strb	$t3,[$rounds,#14]
+	strb	$s3,[$rounds,#15]
+#endif
+#if __ARM_ARCH__>=5
+	ldmia	sp!,{r4-r12,pc}
+#else
+	ldmia   sp!,{r4-r12,lr}
+	tst	lr,#1
+	moveq	pc,lr			@ be binary compatible with V4, yet
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	AES_decrypt,.-AES_decrypt
+
+.type   _armv4_AES_decrypt,%function
+.align	2
+_armv4_AES_decrypt:
+	str	lr,[sp,#-4]!		@ push lr
+	ldmia	$key!,{$t1-$i1}
+	eor	$s0,$s0,$t1
+	ldr	$rounds,[$key,#240-16]
+	eor	$s1,$s1,$t2
+	eor	$s2,$s2,$t3
+	eor	$s3,$s3,$i1
+	sub	$rounds,$rounds,#1
+	mov	lr,#255
+
+	and	$i1,lr,$s0,lsr#16
+	and	$i2,lr,$s0,lsr#8
+	and	$i3,lr,$s0
+	mov	$s0,$s0,lsr#24
+.Ldec_loop:
+	ldr	$t1,[$tbl,$i1,lsl#2]	@ Td1[s0>>16]
+	and	$i1,lr,$s1		@ i0
+	ldr	$t2,[$tbl,$i2,lsl#2]	@ Td2[s0>>8]
+	and	$i2,lr,$s1,lsr#16
+	ldr	$t3,[$tbl,$i3,lsl#2]	@ Td3[s0>>0]
+	and	$i3,lr,$s1,lsr#8
+	ldr	$s0,[$tbl,$s0,lsl#2]	@ Td0[s0>>24]
+	mov	$s1,$s1,lsr#24
+
+	ldr	$i1,[$tbl,$i1,lsl#2]	@ Td3[s1>>0]
+	ldr	$i2,[$tbl,$i2,lsl#2]	@ Td1[s1>>16]
+	ldr	$i3,[$tbl,$i3,lsl#2]	@ Td2[s1>>8]
+	eor	$s0,$s0,$i1,ror#24
+	ldr	$s1,[$tbl,$s1,lsl#2]	@ Td0[s1>>24]
+	and	$i1,lr,$s2,lsr#8	@ i0
+	eor	$t2,$i2,$t2,ror#8
+	and	$i2,lr,$s2		@ i1
+	eor	$t3,$i3,$t3,ror#8
+	and	$i3,lr,$s2,lsr#16
+	ldr	$i1,[$tbl,$i1,lsl#2]	@ Td2[s2>>8]
+	eor	$s1,$s1,$t1,ror#8
+	ldr	$i2,[$tbl,$i2,lsl#2]	@ Td3[s2>>0]
+	mov	$s2,$s2,lsr#24
+
+	ldr	$i3,[$tbl,$i3,lsl#2]	@ Td1[s2>>16]
+	eor	$s0,$s0,$i1,ror#16
+	ldr	$s2,[$tbl,$s2,lsl#2]	@ Td0[s2>>24]
+	and	$i1,lr,$s3,lsr#16	@ i0
+	eor	$s1,$s1,$i2,ror#24
+	and	$i2,lr,$s3,lsr#8	@ i1
+	eor	$t3,$i3,$t3,ror#8
+	and	$i3,lr,$s3		@ i2
+	ldr	$i1,[$tbl,$i1,lsl#2]	@ Td1[s3>>16]
+	eor	$s2,$s2,$t2,ror#8
+	ldr	$i2,[$tbl,$i2,lsl#2]	@ Td2[s3>>8]
+	mov	$s3,$s3,lsr#24
+
+	ldr	$i3,[$tbl,$i3,lsl#2]	@ Td3[s3>>0]
+	eor	$s0,$s0,$i1,ror#8
+	ldr	$i1,[$key],#16
+	eor	$s1,$s1,$i2,ror#16
+	ldr	$s3,[$tbl,$s3,lsl#2]	@ Td0[s3>>24]
+	eor	$s2,$s2,$i3,ror#24
+
+	ldr	$t1,[$key,#-12]
+	eor	$s0,$s0,$i1
+	ldr	$t2,[$key,#-8]
+	eor	$s3,$s3,$t3,ror#8
+	ldr	$t3,[$key,#-4]
+	and	$i1,lr,$s0,lsr#16
+	eor	$s1,$s1,$t1
+	and	$i2,lr,$s0,lsr#8
+	eor	$s2,$s2,$t2
+	and	$i3,lr,$s0
+	eor	$s3,$s3,$t3
+	mov	$s0,$s0,lsr#24
+
+	subs	$rounds,$rounds,#1
+	bne	.Ldec_loop
+
+	add	$tbl,$tbl,#1024
+
+	ldr	$t2,[$tbl,#0]		@ prefetch Td4
+	ldr	$t3,[$tbl,#32]
+	ldr	$t1,[$tbl,#64]
+	ldr	$t2,[$tbl,#96]
+	ldr	$t3,[$tbl,#128]
+	ldr	$t1,[$tbl,#160]
+	ldr	$t2,[$tbl,#192]
+	ldr	$t3,[$tbl,#224]
+
+	ldrb	$s0,[$tbl,$s0]		@ Td4[s0>>24]
+	ldrb	$t1,[$tbl,$i1]		@ Td4[s0>>16]
+	and	$i1,lr,$s1		@ i0
+	ldrb	$t2,[$tbl,$i2]		@ Td4[s0>>8]
+	and	$i2,lr,$s1,lsr#16
+	ldrb	$t3,[$tbl,$i3]		@ Td4[s0>>0]
+	and	$i3,lr,$s1,lsr#8
+
+	add	$s1,$tbl,$s1,lsr#24
+	ldrb	$i1,[$tbl,$i1]		@ Td4[s1>>0]
+	ldrb	$s1,[$s1]		@ Td4[s1>>24]
+	ldrb	$i2,[$tbl,$i2]		@ Td4[s1>>16]
+	eor	$s0,$i1,$s0,lsl#24
+	ldrb	$i3,[$tbl,$i3]		@ Td4[s1>>8]
+	eor	$s1,$t1,$s1,lsl#8
+	and	$i1,lr,$s2,lsr#8	@ i0
+	eor	$t2,$t2,$i2,lsl#8
+	and	$i2,lr,$s2		@ i1
+	ldrb	$i1,[$tbl,$i1]		@ Td4[s2>>8]
+	eor	$t3,$t3,$i3,lsl#8
+	ldrb	$i2,[$tbl,$i2]		@ Td4[s2>>0]
+	and	$i3,lr,$s2,lsr#16
+
+	add	$s2,$tbl,$s2,lsr#24
+	ldrb	$s2,[$s2]		@ Td4[s2>>24]
+	eor	$s0,$s0,$i1,lsl#8
+	ldrb	$i3,[$tbl,$i3]		@ Td4[s2>>16]
+	eor	$s1,$i2,$s1,lsl#16
+	and	$i1,lr,$s3,lsr#16	@ i0
+	eor	$s2,$t2,$s2,lsl#16
+	and	$i2,lr,$s3,lsr#8	@ i1
+	ldrb	$i1,[$tbl,$i1]		@ Td4[s3>>16]
+	eor	$t3,$t3,$i3,lsl#16
+	ldrb	$i2,[$tbl,$i2]		@ Td4[s3>>8]
+	and	$i3,lr,$s3		@ i2
+
+	add	$s3,$tbl,$s3,lsr#24
+	ldrb	$i3,[$tbl,$i3]		@ Td4[s3>>0]
+	ldrb	$s3,[$s3]		@ Td4[s3>>24]
+	eor	$s0,$s0,$i1,lsl#16
+	ldr	$i1,[$key,#0]
+	eor	$s1,$s1,$i2,lsl#8
+	ldr	$t1,[$key,#4]
+	eor	$s2,$i3,$s2,lsl#8
+	ldr	$t2,[$key,#8]
+	eor	$s3,$t3,$s3,lsl#24
+	ldr	$t3,[$key,#12]
+
+	eor	$s0,$s0,$i1
+	eor	$s1,$s1,$t1
+	eor	$s2,$s2,$t2
+	eor	$s3,$s3,$t3
+
+	sub	$tbl,$tbl,#1024
+	ldr	pc,[sp],#4		@ pop and return
+.size	_armv4_AES_decrypt,.-_armv4_AES_decrypt
+.asciz	"AES for ARMv4, CRYPTOGAMS by <appro\@openssl.org>"
+.align	2
+___
+
+$code =~ s/\bbx\s+lr\b/.word\t0xe12fff1e/gm;	# make it possible to compile with -march=armv4
+$code =~ s/\bret\b/bx\tlr/gm;
+
+open SELF,$0;
+while(<SELF>) {
+	next if (/^#!/);
+	last if (!s/^#/@/ and !/^$/);
+	print;
+}
+close SELF;
+
+print $code;
+close STDOUT;	# enforce flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-c64xplus.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-c64xplus.pl
new file mode 100644
index 000000000..19d2cc176
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-c64xplus.pl
@@ -0,0 +1,1382 @@
+#! /usr/bin/env perl
+# Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# [Endian-neutral] AES for C64x+.
+#
+# Even though SPLOOPs are scheduled for 13 cycles, and thus expected
+# performance is ~8.5 cycles per byte processed with 128-bit key,
+# measured performance turned to be ~10 cycles per byte. Discrepancy
+# must be caused by limitations of L1D memory banking(*), see SPRU871
+# TI publication for further details. If any consolation it's still
+# ~20% faster than TI's linear assembly module anyway... Compared to
+# aes_core.c compiled with cl6x 6.0 with -mv6400+ -o2 options this
+# code is 3.75x faster and almost 3x smaller (tables included).
+#
+# (*)	This means that there might be subtle correlation between data
+#	and timing and one can wonder if it can be ... attacked:-(
+#	On the other hand this also means that *if* one chooses to
+#	implement *4* T-tables variant [instead of 1 T-table as in
+#	this implementation, or in addition to], then one ought to
+#	*interleave* them. Even though it complicates addressing,
+#	references to interleaved tables would be guaranteed not to
+#	clash. I reckon that it should be possible to break 8 cycles
+#	per byte "barrier," i.e. improve by ~20%, naturally at the
+#	cost of 8x increased pressure on L1D. 8x because you'd have
+#	to interleave both Te and Td tables...
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+($TEA,$TEB)=("A5","B5");
+($KPA,$KPB)=("A3","B1");
+@K=("A6","B6","A7","B7");
+@s=("A8","B8","A9","B9");
+@Te0=@Td0=("A16","B16","A17","B17");
+@Te1=@Td1=("A18","B18","A19","B19");
+@Te2=@Td2=("A20","B20","A21","B21");
+@Te3=@Td3=("A22","B22","A23","B23");
+
+$code=<<___;
+	.text
+
+	.if	.ASSEMBLER_VERSION<7000000
+	.asg	0,__TI_EABI__
+	.endif
+	.if	__TI_EABI__
+	.nocmp
+	.asg	AES_encrypt,_AES_encrypt
+	.asg	AES_decrypt,_AES_decrypt
+	.asg	AES_set_encrypt_key,_AES_set_encrypt_key
+	.asg	AES_set_decrypt_key,_AES_set_decrypt_key
+	.asg	AES_ctr32_encrypt,_AES_ctr32_encrypt
+	.endif
+
+	.asg	B3,RA
+	.asg	A4,INP
+	.asg	B4,OUT
+	.asg	A6,KEY
+	.asg	A4,RET
+	.asg	B15,SP
+
+	.eval	24,EXT0
+	.eval	16,EXT1
+	.eval	8,EXT2
+	.eval	0,EXT3
+	.eval	8,TBL1
+	.eval	16,TBL2
+	.eval	24,TBL3
+
+	.if	.BIG_ENDIAN
+	.eval	24-EXT0,EXT0
+	.eval	24-EXT1,EXT1
+	.eval	24-EXT2,EXT2
+	.eval	24-EXT3,EXT3
+	.eval	32-TBL1,TBL1
+	.eval	32-TBL2,TBL2
+	.eval	32-TBL3,TBL3
+	.endif
+
+	.global	_AES_encrypt
+_AES_encrypt:
+	.asmfunc
+	MVK	1,B2
+__encrypt:
+	.if	__TI_EABI__
+   [B2]	LDNDW	*INP++,A9:A8			; load input
+||	MVKL	\$PCR_OFFSET(AES_Te,__encrypt),$TEA
+||	ADDKPC	__encrypt,B0
+   [B2]	LDNDW	*INP++,B9:B8
+||	MVKH	\$PCR_OFFSET(AES_Te,__encrypt),$TEA
+||	ADD	0,KEY,$KPA
+||	ADD	4,KEY,$KPB
+	.else
+   [B2]	LDNDW	*INP++,A9:A8			; load input
+||	MVKL	(AES_Te-__encrypt),$TEA
+||	ADDKPC	__encrypt,B0
+   [B2]	LDNDW	*INP++,B9:B8
+||	MVKH	(AES_Te-__encrypt),$TEA
+||	ADD	0,KEY,$KPA
+||	ADD	4,KEY,$KPB
+	.endif
+	LDW	*$KPA++[2],$Te0[0]		; zero round key
+||	LDW	*$KPB++[2],$Te0[1]
+||	MVK	60,A0
+||	ADD	B0,$TEA,$TEA			; AES_Te
+	LDW	*KEY[A0],B0			; rounds
+||	MVK	1024,A0				; sizeof(AES_Te)
+	LDW	*$KPA++[2],$Te0[2]
+||	LDW	*$KPB++[2],$Te0[3]
+||	MV	$TEA,$TEB
+	NOP
+	.if	.BIG_ENDIAN
+	MV	A9,$s[0]
+||	MV	A8,$s[1]
+||	MV	B9,$s[2]
+||	MV	B8,$s[3]
+	.else
+	MV	A8,$s[0]
+||	MV	A9,$s[1]
+||	MV	B8,$s[2]
+||	MV	B9,$s[3]
+	.endif
+	XOR	$Te0[0],$s[0],$s[0]
+||	XOR	$Te0[1],$s[1],$s[1]
+||	LDW	*$KPA++[2],$K[0]		; 1st round key
+||	LDW	*$KPB++[2],$K[1]
+	SUB	B0,2,B0
+
+	SPLOOPD	13
+||	MVC	B0,ILC
+||	LDW	*$KPA++[2],$K[2]
+||	LDW	*$KPB++[2],$K[3]
+;;====================================================================
+	EXTU	$s[1],EXT1,24,$Te1[1]
+||	EXTU	$s[0],EXT3,24,$Te3[0]
+	LDW	*${TEB}[$Te1[1]],$Te1[1]	; Te1[s1>>8],	t0
+||	LDW	*${TEA}[$Te3[0]],$Te3[0]	; Te3[s0>>24],	t1
+||	XOR	$s[2],$Te0[2],$s[2]		; modulo-scheduled
+||	XOR	$s[3],$Te0[3],$s[3]		; modulo-scheduled
+||	EXTU	$s[1],EXT3,24,$Te3[1]
+||	EXTU	$s[0],EXT1,24,$Te1[0]
+	LDW	*${TEB}[$Te3[1]],$Te3[1]	; Te3[s1>>24],	t2
+||	LDW	*${TEA}[$Te1[0]],$Te1[0]	; Te1[s0>>8],	t3
+||	EXTU	$s[2],EXT2,24,$Te2[2]
+||	EXTU	$s[3],EXT2,24,$Te2[3]
+	LDW	*${TEA}[$Te2[2]],$Te2[2]	; Te2[s2>>16],	t0
+||	LDW	*${TEB}[$Te2[3]],$Te2[3]	; Te2[s3>>16],	t1
+||	EXTU	$s[3],EXT3,24,$Te3[3]
+||	EXTU	$s[2],EXT1,24,$Te1[2]
+	LDW	*${TEB}[$Te3[3]],$Te3[3]	; Te3[s3>>24],	t0
+||	LDW	*${TEA}[$Te1[2]],$Te1[2]	; Te1[s2>>8],	t1
+||	EXTU	$s[0],EXT2,24,$Te2[0]
+||	EXTU	$s[1],EXT2,24,$Te2[1]
+	LDW	*${TEA}[$Te2[0]],$Te2[0]	; Te2[s0>>16],	t2
+||	LDW	*${TEB}[$Te2[1]],$Te2[1]	; Te2[s1>>16],	t3
+||	EXTU	$s[3],EXT1,24,$Te1[3]
+||	EXTU	$s[2],EXT3,24,$Te3[2]
+	LDW	*${TEB}[$Te1[3]],$Te1[3]	; Te1[s3>>8],	t2
+||	LDW	*${TEA}[$Te3[2]],$Te3[2]	; Te3[s2>>24],	t3
+||	ROTL	$Te1[1],TBL1,$Te3[0]		; t0
+||	ROTL	$Te3[0],TBL3,$Te1[1]		; t1
+||	EXTU	$s[0],EXT0,24,$Te0[0]
+||	EXTU	$s[1],EXT0,24,$Te0[1]
+	LDW	*${TEA}[$Te0[0]],$Te0[0]	; Te0[s0],	t0
+||	LDW	*${TEB}[$Te0[1]],$Te0[1]	; Te0[s1],	t1
+||	ROTL	$Te3[1],TBL3,$Te1[0]		; t2
+||	ROTL	$Te1[0],TBL1,$Te3[1]		; t3
+||	EXTU	$s[2],EXT0,24,$Te0[2]
+||	EXTU	$s[3],EXT0,24,$Te0[3]
+	LDW	*${TEA}[$Te0[2]],$Te0[2]	; Te0[s2],	t2
+||	LDW	*${TEB}[$Te0[3]],$Te0[3]	; Te0[s3],	t3
+||	ROTL	$Te2[2],TBL2,$Te2[2]		; t0
+||	ROTL	$Te2[3],TBL2,$Te2[3]		; t1
+||	XOR	$K[0],$Te3[0],$s[0]
+||	XOR	$K[1],$Te1[1],$s[1]
+	ROTL	$Te3[3],TBL3,$Te1[2]		; t0
+||	ROTL	$Te1[2],TBL1,$Te3[3]		; t1
+||	XOR	$K[2],$Te1[0],$s[2]
+||	XOR	$K[3],$Te3[1],$s[3]
+||	LDW	*$KPA++[2],$K[0]		; next round key
+||	LDW	*$KPB++[2],$K[1]
+	ROTL	$Te2[0],TBL2,$Te2[0]		; t2
+||	ROTL	$Te2[1],TBL2,$Te2[1]		; t3
+||	XOR	$s[0],$Te2[2],$s[0]
+||	XOR	$s[1],$Te2[3],$s[1]
+||	LDW	*$KPA++[2],$K[2]
+||	LDW	*$KPB++[2],$K[3]
+	ROTL	$Te1[3],TBL1,$Te3[2]		; t2
+||	ROTL	$Te3[2],TBL3,$Te1[3]		; t3
+||	XOR	$s[0],$Te1[2],$s[0]
+||	XOR	$s[1],$Te3[3],$s[1]
+	XOR	$s[2],$Te2[0],$s[2]
+||	XOR	$s[3],$Te2[1],$s[3]
+||	XOR	$s[0],$Te0[0],$s[0]
+||	XOR	$s[1],$Te0[1],$s[1]
+	SPKERNEL
+||	XOR.L	$s[2],$Te3[2],$s[2]
+||	XOR.L	$s[3],$Te1[3],$s[3]
+;;====================================================================
+	ADD.D	${TEA},A0,${TEA}		; point to Te4
+||	ADD.D	${TEB},A0,${TEB}
+||	EXTU	$s[1],EXT1,24,$Te1[1]
+||	EXTU	$s[0],EXT3,24,$Te3[0]
+	LDBU	*${TEB}[$Te1[1]],$Te1[1]	; Te1[s1>>8],	t0
+||	LDBU	*${TEA}[$Te3[0]],$Te3[0]	; Te3[s0>>24],	t1
+||	XOR	$s[2],$Te0[2],$s[2]		; modulo-scheduled
+||	XOR	$s[3],$Te0[3],$s[3]		; modulo-scheduled
+||	EXTU	$s[0],EXT0,24,$Te0[0]
+||	EXTU	$s[1],EXT0,24,$Te0[1]
+	LDBU	*${TEA}[$Te0[0]],$Te0[0]	; Te0[s0],	t0
+||	LDBU	*${TEB}[$Te0[1]],$Te0[1]	; Te0[s1],	t1
+||	EXTU	$s[3],EXT3,24,$Te3[3]
+||	EXTU	$s[2],EXT1,24,$Te1[2]
+	LDBU	*${TEB}[$Te3[3]],$Te3[3]	; Te3[s3>>24],	t0
+||	LDBU	*${TEA}[$Te1[2]],$Te1[2]	; Te1[s2>>8],	t1
+||	EXTU	$s[2],EXT2,24,$Te2[2]
+||	EXTU	$s[3],EXT2,24,$Te2[3]
+	LDBU	*${TEA}[$Te2[2]],$Te2[2]	; Te2[s2>>16],	t0
+||	LDBU	*${TEB}[$Te2[3]],$Te2[3]	; Te2[s3>>16],	t1
+||	EXTU	$s[1],EXT3,24,$Te3[1]
+||	EXTU	$s[0],EXT1,24,$Te1[0]
+	LDBU	*${TEB}[$Te3[1]],$Te3[1]	; Te3[s1>>24],	t2
+||	LDBU	*${TEA}[$Te1[0]],$Te1[0]	; Te1[s0>>8],	t3
+||	EXTU	$s[3],EXT1,24,$Te1[3]
+||	EXTU	$s[2],EXT3,24,$Te3[2]
+	LDBU	*${TEB}[$Te1[3]],$Te1[3]	; Te1[s3>>8],	t2
+||	LDBU	*${TEA}[$Te3[2]],$Te3[2]	; Te3[s2>>24],	t3
+||	EXTU	$s[2],EXT0,24,$Te0[2]
+||	EXTU	$s[3],EXT0,24,$Te0[3]
+	LDBU	*${TEA}[$Te0[2]],$Te0[2]	; Te0[s2],	t2
+||	LDBU	*${TEB}[$Te0[3]],$Te0[3]	; Te0[s3],	t3
+||	EXTU	$s[0],EXT2,24,$Te2[0]
+||	EXTU	$s[1],EXT2,24,$Te2[1]
+	LDBU	*${TEA}[$Te2[0]],$Te2[0]	; Te2[s0>>16],	t2
+||	LDBU	*${TEB}[$Te2[1]],$Te2[1]	; Te2[s1>>16],	t3
+
+	.if	.BIG_ENDIAN
+	PACK2	$Te0[0],$Te1[1],$Te0[0]
+||	PACK2	$Te0[1],$Te1[2],$Te0[1]
+	PACK2	$Te2[2],$Te3[3],$Te2[2]
+||	PACK2	$Te2[3],$Te3[0],$Te2[3]
+	PACKL4	$Te0[0],$Te2[2],$Te0[0]
+||	PACKL4	$Te0[1],$Te2[3],$Te0[1]
+	XOR	$K[0],$Te0[0],$Te0[0]		; s[0]
+||	XOR	$K[1],$Te0[1],$Te0[1]		; s[1]
+
+	PACK2	$Te0[2],$Te1[3],$Te0[2]
+||	PACK2	$Te0[3],$Te1[0],$Te0[3]
+	PACK2	$Te2[0],$Te3[1],$Te2[0]
+||	PACK2	$Te2[1],$Te3[2],$Te2[1]
+||	BNOP	RA
+	PACKL4	$Te0[2],$Te2[0],$Te0[2]
+||	PACKL4	$Te0[3],$Te2[1],$Te0[3]
+	XOR	$K[2],$Te0[2],$Te0[2]		; s[2]
+||	XOR	$K[3],$Te0[3],$Te0[3]		; s[3]
+
+	MV	$Te0[0],A9
+||	MV	$Te0[1],A8
+	MV	$Te0[2],B9
+||	MV	$Te0[3],B8
+|| [B2]	STNDW	A9:A8,*OUT++
+   [B2]	STNDW	B9:B8,*OUT++
+	.else
+	PACK2	$Te1[1],$Te0[0],$Te1[1]
+||	PACK2	$Te1[2],$Te0[1],$Te1[2]
+	PACK2	$Te3[3],$Te2[2],$Te3[3]
+||	PACK2	$Te3[0],$Te2[3],$Te3[0]
+	PACKL4	$Te3[3],$Te1[1],$Te1[1]
+||	PACKL4	$Te3[0],$Te1[2],$Te1[2]
+	XOR	$K[0],$Te1[1],$Te1[1]		; s[0]
+||	XOR	$K[1],$Te1[2],$Te1[2]		; s[1]
+
+	PACK2	$Te1[3],$Te0[2],$Te1[3]
+||	PACK2	$Te1[0],$Te0[3],$Te1[0]
+	PACK2	$Te3[1],$Te2[0],$Te3[1]
+||	PACK2	$Te3[2],$Te2[1],$Te3[2]
+||	BNOP	RA
+	PACKL4	$Te3[1],$Te1[3],$Te1[3]
+||	PACKL4	$Te3[2],$Te1[0],$Te1[0]
+	XOR	$K[2],$Te1[3],$Te1[3]		; s[2]
+||	XOR	$K[3],$Te1[0],$Te1[0]		; s[3]
+
+	MV	$Te1[1],A8
+||	MV	$Te1[2],A9
+	MV	$Te1[3],B8
+||	MV	$Te1[0],B9
+|| [B2]	STNDW	A9:A8,*OUT++
+   [B2]	STNDW	B9:B8,*OUT++
+	.endif
+	.endasmfunc
+
+	.global	_AES_decrypt
+_AES_decrypt:
+	.asmfunc
+	MVK	1,B2
+__decrypt:
+	.if	__TI_EABI__
+   [B2]	LDNDW	*INP++,A9:A8			; load input
+||	MVKL	\$PCR_OFFSET(AES_Td,__decrypt),$TEA
+||	ADDKPC	__decrypt,B0
+   [B2]	LDNDW	*INP++,B9:B8
+||	MVKH	\$PCR_OFFSET(AES_Td,__decrypt),$TEA
+||	ADD	0,KEY,$KPA
+||	ADD	4,KEY,$KPB
+	.else
+   [B2]	LDNDW	*INP++,A9:A8			; load input
+||	MVKL	(AES_Td-__decrypt),$TEA
+||	ADDKPC	__decrypt,B0
+   [B2]	LDNDW	*INP++,B9:B8
+||	MVKH	(AES_Td-__decrypt),$TEA
+||	ADD	0,KEY,$KPA
+||	ADD	4,KEY,$KPB
+	.endif
+	LDW	*$KPA++[2],$Td0[0]		; zero round key
+||	LDW	*$KPB++[2],$Td0[1]
+||	MVK	60,A0
+||	ADD	B0,$TEA,$TEA			; AES_Td
+	LDW	*KEY[A0],B0			; rounds
+||	MVK	1024,A0				; sizeof(AES_Td)
+	LDW	*$KPA++[2],$Td0[2]
+||	LDW	*$KPB++[2],$Td0[3]
+||	MV	$TEA,$TEB
+	NOP
+	.if	.BIG_ENDIAN
+	MV	A9,$s[0]
+||	MV	A8,$s[1]
+||	MV	B9,$s[2]
+||	MV	B8,$s[3]
+	.else
+	MV	A8,$s[0]
+||	MV	A9,$s[1]
+||	MV	B8,$s[2]
+||	MV	B9,$s[3]
+	.endif
+	XOR	$Td0[0],$s[0],$s[0]
+||	XOR	$Td0[1],$s[1],$s[1]
+||	LDW	*$KPA++[2],$K[0]		; 1st round key
+||	LDW	*$KPB++[2],$K[1]
+	SUB	B0,2,B0
+
+	SPLOOPD	13
+||	MVC	B0,ILC
+||	LDW	*$KPA++[2],$K[2]
+||	LDW	*$KPB++[2],$K[3]
+;;====================================================================
+	EXTU	$s[1],EXT3,24,$Td3[1]
+||	EXTU	$s[0],EXT1,24,$Td1[0]
+	LDW	*${TEB}[$Td3[1]],$Td3[1]	; Td3[s1>>24],	t0
+||	LDW	*${TEA}[$Td1[0]],$Td1[0]	; Td1[s0>>8],	t1
+||	XOR	$s[2],$Td0[2],$s[2]		; modulo-scheduled
+||	XOR	$s[3],$Td0[3],$s[3]		; modulo-scheduled
+||	EXTU	$s[1],EXT1,24,$Td1[1]
+||	EXTU	$s[0],EXT3,24,$Td3[0]
+	LDW	*${TEB}[$Td1[1]],$Td1[1]	; Td1[s1>>8],	t2
+||	LDW	*${TEA}[$Td3[0]],$Td3[0]	; Td3[s0>>24],	t3
+||	EXTU	$s[2],EXT2,24,$Td2[2]
+||	EXTU	$s[3],EXT2,24,$Td2[3]
+	LDW	*${TEA}[$Td2[2]],$Td2[2]	; Td2[s2>>16],	t0
+||	LDW	*${TEB}[$Td2[3]],$Td2[3]	; Td2[s3>>16],	t1
+||	EXTU	$s[3],EXT1,24,$Td1[3]
+||	EXTU	$s[2],EXT3,24,$Td3[2]
+	LDW	*${TEB}[$Td1[3]],$Td1[3]	; Td1[s3>>8],	t0
+||	LDW	*${TEA}[$Td3[2]],$Td3[2]	; Td3[s2>>24],	t1
+||	EXTU	$s[0],EXT2,24,$Td2[0]
+||	EXTU	$s[1],EXT2,24,$Td2[1]
+	LDW	*${TEA}[$Td2[0]],$Td2[0]	; Td2[s0>>16],	t2
+||	LDW	*${TEB}[$Td2[1]],$Td2[1]	; Td2[s1>>16],	t3
+||	EXTU	$s[3],EXT3,24,$Td3[3]
+||	EXTU	$s[2],EXT1,24,$Td1[2]
+	LDW	*${TEB}[$Td3[3]],$Td3[3]	; Td3[s3>>24],	t2
+||	LDW	*${TEA}[$Td1[2]],$Td1[2]	; Td1[s2>>8],	t3
+||	ROTL	$Td3[1],TBL3,$Td1[0]		; t0
+||	ROTL	$Td1[0],TBL1,$Td3[1]		; t1
+||	EXTU	$s[0],EXT0,24,$Td0[0]
+||	EXTU	$s[1],EXT0,24,$Td0[1]
+	LDW	*${TEA}[$Td0[0]],$Td0[0]	; Td0[s0],	t0
+||	LDW	*${TEB}[$Td0[1]],$Td0[1]	; Td0[s1],	t1
+||	ROTL	$Td1[1],TBL1,$Td3[0]		; t2
+||	ROTL	$Td3[0],TBL3,$Td1[1]		; t3
+||	EXTU	$s[2],EXT0,24,$Td0[2]
+||	EXTU	$s[3],EXT0,24,$Td0[3]
+	LDW	*${TEA}[$Td0[2]],$Td0[2]	; Td0[s2],	t2
+||	LDW	*${TEB}[$Td0[3]],$Td0[3]	; Td0[s3],	t3
+||	ROTL	$Td2[2],TBL2,$Td2[2]		; t0
+||	ROTL	$Td2[3],TBL2,$Td2[3]		; t1
+||	XOR	$K[0],$Td1[0],$s[0]
+||	XOR	$K[1],$Td3[1],$s[1]
+	ROTL	$Td1[3],TBL1,$Td3[2]		; t0
+||	ROTL	$Td3[2],TBL3,$Td1[3]		; t1
+||	XOR	$K[2],$Td3[0],$s[2]
+||	XOR	$K[3],$Td1[1],$s[3]
+||	LDW	*$KPA++[2],$K[0]		; next round key
+||	LDW	*$KPB++[2],$K[1]
+	ROTL	$Td2[0],TBL2,$Td2[0]		; t2
+||	ROTL	$Td2[1],TBL2,$Td2[1]		; t3
+||	XOR	$s[0],$Td2[2],$s[0]
+||	XOR	$s[1],$Td2[3],$s[1]
+||	LDW	*$KPA++[2],$K[2]
+||	LDW	*$KPB++[2],$K[3]
+	ROTL	$Td3[3],TBL3,$Td1[2]		; t2
+||	ROTL	$Td1[2],TBL1,$Td3[3]		; t3
+||	XOR	$s[0],$Td3[2],$s[0]
+||	XOR	$s[1],$Td1[3],$s[1]
+	XOR	$s[2],$Td2[0],$s[2]
+||	XOR	$s[3],$Td2[1],$s[3]
+||	XOR	$s[0],$Td0[0],$s[0]
+||	XOR	$s[1],$Td0[1],$s[1]
+	SPKERNEL
+||	XOR.L	$s[2],$Td1[2],$s[2]
+||	XOR.L	$s[3],$Td3[3],$s[3]
+;;====================================================================
+	ADD.D	${TEA},A0,${TEA}		; point to Td4
+||	ADD.D	${TEB},A0,${TEB}
+||	EXTU	$s[1],EXT3,24,$Td3[1]
+||	EXTU	$s[0],EXT1,24,$Td1[0]
+	LDBU	*${TEB}[$Td3[1]],$Td3[1]	; Td3[s1>>24],	t0
+||	LDBU	*${TEA}[$Td1[0]],$Td1[0]	; Td1[s0>>8],	t1
+||	XOR	$s[2],$Td0[2],$s[2]		; modulo-scheduled
+||	XOR	$s[3],$Td0[3],$s[3]		; modulo-scheduled
+||	EXTU	$s[0],EXT0,24,$Td0[0]
+||	EXTU	$s[1],EXT0,24,$Td0[1]
+	LDBU	*${TEA}[$Td0[0]],$Td0[0]	; Td0[s0],	t0
+||	LDBU	*${TEB}[$Td0[1]],$Td0[1]	; Td0[s1],	t1
+||	EXTU	$s[2],EXT2,24,$Td2[2]
+||	EXTU	$s[3],EXT2,24,$Td2[3]
+	LDBU	*${TEA}[$Td2[2]],$Td2[2]	; Td2[s2>>16],	t0
+||	LDBU	*${TEB}[$Td2[3]],$Td2[3]	; Td2[s3>>16],	t1
+||	EXTU	$s[3],EXT1,24,$Td1[3]
+||	EXTU	$s[2],EXT3,24,$Td3[2]
+	LDBU	*${TEB}[$Td1[3]],$Td1[3]	; Td1[s3>>8],	t0
+||	LDBU	*${TEA}[$Td3[2]],$Td3[2]	; Td3[s2>>24],	t1
+||	EXTU	$s[1],EXT1,24,$Td1[1]
+||	EXTU	$s[0],EXT3,24,$Td3[0]
+	LDBU	*${TEB}[$Td1[1]],$Td1[1]	; Td1[s1>>8],	t2
+||	LDBU	*${TEA}[$Td3[0]],$Td3[0]	; Td3[s0>>24],	t3
+||	EXTU	$s[0],EXT2,24,$Td2[0]
+||	EXTU	$s[1],EXT2,24,$Td2[1]
+	LDBU	*${TEA}[$Td2[0]],$Td2[0]	; Td2[s0>>16],	t2
+||	LDBU	*${TEB}[$Td2[1]],$Td2[1]	; Td2[s1>>16],	t3
+||	EXTU	$s[3],EXT3,24,$Td3[3]
+||	EXTU	$s[2],EXT1,24,$Td1[2]
+	LDBU	*${TEB}[$Td3[3]],$Td3[3]	; Td3[s3>>24],	t2
+||	LDBU	*${TEA}[$Td1[2]],$Td1[2]	; Td1[s2>>8],	t3
+||	EXTU	$s[2],EXT0,24,$Td0[2]
+||	EXTU	$s[3],EXT0,24,$Td0[3]
+	LDBU	*${TEA}[$Td0[2]],$Td0[2]	; Td0[s2],	t2
+||	LDBU	*${TEB}[$Td0[3]],$Td0[3]	; Td0[s3],	t3
+
+	.if	.BIG_ENDIAN
+	PACK2	$Td0[0],$Td1[3],$Td0[0]
+||	PACK2	$Td0[1],$Td1[0],$Td0[1]
+	PACK2	$Td2[2],$Td3[1],$Td2[2]
+||	PACK2	$Td2[3],$Td3[2],$Td2[3]
+	PACKL4	$Td0[0],$Td2[2],$Td0[0]
+||	PACKL4	$Td0[1],$Td2[3],$Td0[1]
+	XOR	$K[0],$Td0[0],$Td0[0]		; s[0]
+||	XOR	$K[1],$Td0[1],$Td0[1]		; s[1]
+
+	PACK2	$Td0[2],$Td1[1],$Td0[2]
+||	PACK2	$Td0[3],$Td1[2],$Td0[3]
+	PACK2	$Td2[0],$Td3[3],$Td2[0]
+||	PACK2	$Td2[1],$Td3[0],$Td2[1]
+||	BNOP	RA
+	PACKL4	$Td0[2],$Td2[0],$Td0[2]
+||	PACKL4	$Td0[3],$Td2[1],$Td0[3]
+	XOR	$K[2],$Td0[2],$Td0[2]		; s[2]
+||	XOR	$K[3],$Td0[3],$Td0[3]		; s[3]
+
+	MV	$Td0[0],A9
+||	MV	$Td0[1],A8
+	MV	$Td0[2],B9
+||	MV	$Td0[3],B8
+|| [B2]	STNDW	A9:A8,*OUT++
+   [B2]	STNDW	B9:B8,*OUT++
+	.else
+	PACK2	$Td1[3],$Td0[0],$Td1[3]
+||	PACK2	$Td1[0],$Td0[1],$Td1[0]
+	PACK2	$Td3[1],$Td2[2],$Td3[1]
+||	PACK2	$Td3[2],$Td2[3],$Td3[2]
+	PACKL4	$Td3[1],$Td1[3],$Td1[3]
+||	PACKL4	$Td3[2],$Td1[0],$Td1[0]
+	XOR	$K[0],$Td1[3],$Td1[3]		; s[0]
+||	XOR	$K[1],$Td1[0],$Td1[0]		; s[1]
+
+	PACK2	$Td1[1],$Td0[2],$Td1[1]
+||	PACK2	$Td1[2],$Td0[3],$Td1[2]
+	PACK2	$Td3[3],$Td2[0],$Td3[3]
+||	PACK2	$Td3[0],$Td2[1],$Td3[0]
+||	BNOP	RA
+	PACKL4	$Td3[3],$Td1[1],$Td1[1]
+||	PACKL4	$Td3[0],$Td1[2],$Td1[2]
+	XOR	$K[2],$Td1[1],$Td1[1]		; s[2]
+||	XOR	$K[3],$Td1[2],$Td1[2]		; s[3]
+
+	MV	$Td1[3],A8
+||	MV	$Td1[0],A9
+	MV	$Td1[1],B8
+||	MV	$Td1[2],B9
+|| [B2]	STNDW	A9:A8,*OUT++
+   [B2]	STNDW	B9:B8,*OUT++
+	.endif
+	.endasmfunc
+___
+{
+my @K=(@K,@s);			# extended key
+my @Te4=map("B$_",(16..19));
+
+my @Kx9=@Te0;			# used in AES_set_decrypt_key
+my @KxB=@Te1;
+my @KxD=@Te2;
+my @KxE=@Te3;
+
+$code.=<<___;
+	.asg	OUT,BITS
+
+	.global	_AES_set_encrypt_key
+_AES_set_encrypt_key:
+__set_encrypt_key:
+	.asmfunc
+	MV	INP,A0
+||	SHRU	BITS,5,BITS			; 128-192-256 -> 4-6-8
+||	MV	KEY,A1
+  [!A0]	B	RA
+||[!A0]	MVK	-1,RET
+||[!A0]	MVK	1,A1				; only one B RA
+  [!A1]	B	RA
+||[!A1]	MVK	-1,RET
+||[!A1]	MVK	0,A0
+||	MVK	0,B0
+||	MVK	0,A1
+   [A0]	LDNDW	*INP++,A9:A8
+|| [A0]	CMPEQ	4,BITS,B0
+|| [A0]	CMPLT	3,BITS,A1
+   [B0]	B	key128?
+|| [A1]	LDNDW	*INP++,B9:B8
+|| [A0]	CMPEQ	6,BITS,B0
+|| [A0]	CMPLT	5,BITS,A1
+   [B0]	B	key192?
+|| [A1]	LDNDW	*INP++,B17:B16
+|| [A0]	CMPEQ	8,BITS,B0
+|| [A0]	CMPLT	7,BITS,A1
+   [B0]	B	key256?
+|| [A1]	LDNDW	*INP++,B19:B18
+
+	.if	__TI_EABI__
+   [A0]	ADD	0,KEY,$KPA
+|| [A0]	ADD	4,KEY,$KPB
+|| [A0]	MVKL	\$PCR_OFFSET(AES_Te4,__set_encrypt_key),$TEA
+|| [A0]	ADDKPC	__set_encrypt_key,B6
+   [A0]	MVKH	\$PCR_OFFSET(AES_Te4,__set_encrypt_key),$TEA
+   [A0]	ADD	B6,$TEA,$TEA			; AES_Te4
+	.else
+   [A0]	ADD	0,KEY,$KPA
+|| [A0]	ADD	4,KEY,$KPB
+|| [A0]	MVKL	(AES_Te4-__set_encrypt_key),$TEA
+|| [A0]	ADDKPC	__set_encrypt_key,B6
+   [A0]	MVKH	(AES_Te4-__set_encrypt_key),$TEA
+   [A0]	ADD	B6,$TEA,$TEA			; AES_Te4
+	.endif
+	NOP
+	NOP
+
+	BNOP	RA,5
+||	MVK	-2,RET				; unknown bit length
+||	MVK	0,B0				; redundant
+;;====================================================================
+;;====================================================================
+key128?:
+	.if	.BIG_ENDIAN
+	MV	A9,$K[0]
+||	MV	A8,$K[1]
+||	MV	B9,$Te4[2]
+||	MV	B8,$K[3]
+	.else
+	MV	A8,$K[0]
+||	MV	A9,$K[1]
+||	MV	B8,$Te4[2]
+||	MV	B9,$K[3]
+	.endif
+
+	MVK	256,A0
+||	MVK	9,B0
+
+	SPLOOPD	14
+||	MVC	B0,ILC
+||	MV	$TEA,$TEB
+||	ADD	$TEA,A0,A30			; rcon
+;;====================================================================
+	LDW	*A30++[1],A31			; rcon[i]
+||	MV	$Te4[2],$K[2]
+||	EXTU	$K[3],EXT1,24,$Te4[0]
+	LDBU	*${TEB}[$Te4[0]],$Te4[0]
+||	MV	$K[3],A0
+||	EXTU	$K[3],EXT2,24,$Te4[1]
+	LDBU	*${TEB}[$Te4[1]],$Te4[1]
+||	EXTU	A0,EXT3,24,A0
+||	EXTU	$K[3],EXT0,24,$Te4[3]
+	.if	.BIG_ENDIAN
+	LDBU	*${TEA}[A0],$Te4[3]
+||	LDBU	*${TEB}[$Te4[3]],A0
+	.else
+	LDBU	*${TEA}[A0],A0
+||	LDBU	*${TEB}[$Te4[3]],$Te4[3]
+	.endif
+
+	STW	$K[0],*$KPA++[2]
+||	STW	$K[1],*$KPB++[2]
+	STW	$K[2],*$KPA++[2]
+||	STW	$K[3],*$KPB++[2]
+
+	XOR	A31,$K[0],$K[0]			; ^=rcon[i]
+	.if	.BIG_ENDIAN
+	PACK2	$Te4[0],$Te4[1],$Te4[1]
+	PACK2	$Te4[3],A0,$Te4[3]
+	PACKL4	$Te4[1],$Te4[3],$Te4[3]
+	.else
+	PACK2	$Te4[1],$Te4[0],$Te4[1]
+	PACK2	$Te4[3],A0,$Te4[3]
+	PACKL4	$Te4[3],$Te4[1],$Te4[3]
+	.endif
+	XOR	$Te4[3],$K[0],$Te4[0]		; K[0]
+	XOR	$Te4[0],$K[1],$K[1]		; K[1]
+	MV	$Te4[0],$K[0]
+||	XOR	$K[1],$K[2],$Te4[2]		; K[2]
+	XOR	$Te4[2],$K[3],$K[3]		; K[3]
+	SPKERNEL
+;;====================================================================
+	BNOP	RA
+	MV	$Te4[2],$K[2]
+||	STW	$K[0],*$KPA++[2]
+||	STW	$K[1],*$KPB++[2]
+	STW	$K[2],*$KPA++[2]
+||	STW	$K[3],*$KPB++[2]
+	MVK	10,B0				; rounds
+	STW	B0,*++${KPB}[15]
+	MVK	0,RET
+;;====================================================================
+;;====================================================================
+key192?:
+	.if	.BIG_ENDIAN
+	MV	A9,$K[0]
+||	MV	A8,$K[1]
+||	MV	B9,$K[2]
+||	MV	B8,$K[3]
+	MV	B17,$Te4[2]
+||	MV	B16,$K[5]
+	.else
+	MV	A8,$K[0]
+||	MV	A9,$K[1]
+||	MV	B8,$K[2]
+||	MV	B9,$K[3]
+	MV	B16,$Te4[2]
+||	MV	B17,$K[5]
+	.endif
+
+	MVK	256,A0
+||	MVK	6,B0
+	MV	$TEA,$TEB
+||	ADD	$TEA,A0,A30			; rcon
+;;====================================================================
+loop192?:
+	LDW	*A30++[1],A31			; rcon[i]
+||	MV	$Te4[2],$K[4]
+||	EXTU	$K[5],EXT1,24,$Te4[0]
+	LDBU	*${TEB}[$Te4[0]],$Te4[0]
+||	MV	$K[5],A0
+||	EXTU	$K[5],EXT2,24,$Te4[1]
+	LDBU	*${TEB}[$Te4[1]],$Te4[1]
+||	EXTU	A0,EXT3,24,A0
+||	EXTU	$K[5],EXT0,24,$Te4[3]
+	.if	.BIG_ENDIAN
+	LDBU	*${TEA}[A0],$Te4[3]
+||	LDBU	*${TEB}[$Te4[3]],A0
+	.else
+	LDBU	*${TEA}[A0],A0
+||	LDBU	*${TEB}[$Te4[3]],$Te4[3]
+	.endif
+
+	STW	$K[0],*$KPA++[2]
+||	STW	$K[1],*$KPB++[2]
+	STW	$K[2],*$KPA++[2]
+||	STW	$K[3],*$KPB++[2]
+	STW	$K[4],*$KPA++[2]
+||	STW	$K[5],*$KPB++[2]
+
+	XOR	A31,$K[0],$K[0]			; ^=rcon[i]
+	.if	.BIG_ENDIAN
+	PACK2	$Te4[0],$Te4[1],$Te4[1]
+||	PACK2	$Te4[3],A0,$Te4[3]
+	PACKL4	$Te4[1],$Te4[3],$Te4[3]
+	.else
+	PACK2	$Te4[1],$Te4[0],$Te4[1]
+||	PACK2	$Te4[3],A0,$Te4[3]
+	PACKL4	$Te4[3],$Te4[1],$Te4[3]
+	.endif
+	BDEC	loop192?,B0
+||	XOR	$Te4[3],$K[0],$Te4[0]		; K[0]
+	XOR	$Te4[0],$K[1],$K[1]		; K[1]
+	MV	$Te4[0],$K[0]
+||	XOR	$K[1],$K[2],$Te4[2]		; K[2]
+	XOR	$Te4[2],$K[3],$K[3]		; K[3]
+	MV	$Te4[2],$K[2]
+||	XOR	$K[3],$K[4],$Te4[2]		; K[4]
+	XOR	$Te4[2],$K[5],$K[5]		; K[5]
+;;====================================================================
+	BNOP	RA
+	STW	$K[0],*$KPA++[2]
+||	STW	$K[1],*$KPB++[2]
+	STW	$K[2],*$KPA++[2]
+||	STW	$K[3],*$KPB++[2]
+	MVK	12,B0				; rounds
+	STW	B0,*++${KPB}[7]
+	MVK	0,RET
+;;====================================================================
+;;====================================================================
+key256?:
+	.if	.BIG_ENDIAN
+	MV	A9,$K[0]
+||	MV	A8,$K[1]
+||	MV	B9,$K[2]
+||	MV	B8,$K[3]
+	MV	B17,$K[4]
+||	MV	B16,$K[5]
+||	MV	B19,$Te4[2]
+||	MV	B18,$K[7]
+	.else
+	MV	A8,$K[0]
+||	MV	A9,$K[1]
+||	MV	B8,$K[2]
+||	MV	B9,$K[3]
+	MV	B16,$K[4]
+||	MV	B17,$K[5]
+||	MV	B18,$Te4[2]
+||	MV	B19,$K[7]
+	.endif
+
+	MVK	256,A0
+||	MVK	6,B0
+	MV	$TEA,$TEB
+||	ADD	$TEA,A0,A30			; rcon
+;;====================================================================
+loop256?:
+	LDW	*A30++[1],A31			; rcon[i]
+||	MV	$Te4[2],$K[6]
+||	EXTU	$K[7],EXT1,24,$Te4[0]
+	LDBU	*${TEB}[$Te4[0]],$Te4[0]
+||	MV	$K[7],A0
+||	EXTU	$K[7],EXT2,24,$Te4[1]
+	LDBU	*${TEB}[$Te4[1]],$Te4[1]
+||	EXTU	A0,EXT3,24,A0
+||	EXTU	$K[7],EXT0,24,$Te4[3]
+	.if	.BIG_ENDIAN
+	LDBU	*${TEA}[A0],$Te4[3]
+||	LDBU	*${TEB}[$Te4[3]],A0
+	.else
+	LDBU	*${TEA}[A0],A0
+||	LDBU	*${TEB}[$Te4[3]],$Te4[3]
+	.endif
+
+	STW	$K[0],*$KPA++[2]
+||	STW	$K[1],*$KPB++[2]
+	STW	$K[2],*$KPA++[2]
+||	STW	$K[3],*$KPB++[2]
+	STW	$K[4],*$KPA++[2]
+||	STW	$K[5],*$KPB++[2]
+	STW	$K[6],*$KPA++[2]
+||	STW	$K[7],*$KPB++[2]
+||	XOR	A31,$K[0],$K[0]			; ^=rcon[i]
+	.if	.BIG_ENDIAN
+	PACK2	$Te4[0],$Te4[1],$Te4[1]
+||	PACK2	$Te4[3],A0,$Te4[3]
+	PACKL4	$Te4[1],$Te4[3],$Te4[3]
+||[!B0]	B	done256?
+	.else
+	PACK2	$Te4[1],$Te4[0],$Te4[1]
+||	PACK2	$Te4[3],A0,$Te4[3]
+	PACKL4	$Te4[3],$Te4[1],$Te4[3]
+||[!B0]	B	done256?
+	.endif
+	XOR	$Te4[3],$K[0],$Te4[0]		; K[0]
+	XOR	$Te4[0],$K[1],$K[1]		; K[1]
+	MV	$Te4[0],$K[0]
+||	XOR	$K[1],$K[2],$Te4[2]		; K[2]
+	XOR	$Te4[2],$K[3],$K[3]		; K[3]
+
+	MV	$Te4[2],$K[2]
+|| [B0]	EXTU	$K[3],EXT0,24,$Te4[0]
+|| [B0]	SUB	B0,1,B0
+	LDBU	*${TEB}[$Te4[0]],$Te4[0]
+||	MV	$K[3],A0
+||	EXTU	$K[3],EXT1,24,$Te4[1]
+	LDBU	*${TEB}[$Te4[1]],$Te4[1]
+||	EXTU	A0,EXT2,24,A0
+||	EXTU	$K[3],EXT3,24,$Te4[3]
+
+	.if	.BIG_ENDIAN
+	LDBU	*${TEA}[A0],$Te4[3]
+||	LDBU	*${TEB}[$Te4[3]],A0
+	NOP	3
+	PACK2	$Te4[0],$Te4[1],$Te4[1]
+	PACK2	$Te4[3],A0,$Te4[3]
+||	B	loop256?
+	PACKL4	$Te4[1],$Te4[3],$Te4[3]
+	.else
+	LDBU	*${TEA}[A0],A0
+||	LDBU	*${TEB}[$Te4[3]],$Te4[3]
+	NOP	3
+	PACK2	$Te4[1],$Te4[0],$Te4[1]
+	PACK2	$Te4[3],A0,$Te4[3]
+||	B	loop256?
+	PACKL4	$Te4[3],$Te4[1],$Te4[3]
+	.endif
+
+	XOR	$Te4[3],$K[4],$Te4[0]		; K[4]
+	XOR	$Te4[0],$K[5],$K[5]		; K[5]
+	MV	$Te4[0],$K[4]
+||	XOR	$K[5],$K[6],$Te4[2]		; K[6]
+	XOR	$Te4[2],$K[7],$K[7]		; K[7]
+;;====================================================================
+done256?:
+	BNOP	RA
+	STW	$K[0],*$KPA++[2]
+||	STW	$K[1],*$KPB++[2]
+	STW	$K[2],*$KPA++[2]
+||	STW	$K[3],*$KPB++[2]
+	MVK	14,B0				; rounds
+	STW	B0,*--${KPB}[1]
+	MVK	0,RET
+	.endasmfunc
+
+	.global	_AES_set_decrypt_key
+_AES_set_decrypt_key:
+	.asmfunc
+	B	__set_encrypt_key		; guarantee local call
+	MV	KEY,B30				; B30 is not modified
+	MV	RA, B31				; B31 is not modified
+	ADDKPC	ret?,RA,2
+ret?:						; B0 holds rounds or zero
+  [!B0]	BNOP	B31				; return if zero
+   [B0]	SHL	B0,4,A0				; offset to last round key
+   [B0]	SHRU	B0,1,B1
+   [B0]	SUB	B1,1,B1
+   [B0]	MVK	0x0000001B,B3			; AES polynomial
+   [B0]	MVKH	0x07000000,B3
+
+	SPLOOPD	9				; flip round keys
+||	MVC	B1,ILC
+||	MV	B30,$KPA
+||	ADD	B30,A0,$KPB
+||	MVK	16,A0				; sizeof(round key)
+;;====================================================================
+	LDW	*${KPA}[0],A16
+||	LDW	*${KPB}[0],B16
+	LDW	*${KPA}[1],A17
+||	LDW	*${KPB}[1],B17
+	LDW	*${KPA}[2],A18
+||	LDW	*${KPB}[2],B18
+	LDW	*${KPA}[3],A19
+||	ADD	$KPA,A0,$KPA
+||	LDW	*${KPB}[3],B19
+||	SUB	$KPB,A0,$KPB
+	NOP
+	STW	B16,*${KPA}[-4]
+||	STW	A16,*${KPB}[4]
+	STW	B17,*${KPA}[-3]
+||	STW	A17,*${KPB}[5]
+	STW	B18,*${KPA}[-2]
+||	STW	A18,*${KPB}[6]
+	STW	B19,*${KPA}[-1]
+||	STW	A19,*${KPB}[7]
+	SPKERNEL
+;;====================================================================
+	SUB	B0,1,B0				; skip last round
+||	ADD	B30,A0,$KPA			; skip first round
+||	ADD	B30,A0,$KPB
+||	MVC	GFPGFR,B30			; save GFPGFR
+	LDW	*${KPA}[0],$K[0]
+||	LDW	*${KPB}[1],$K[1]
+||	MVC	B3,GFPGFR
+	LDW	*${KPA}[2],$K[2]
+||	LDW	*${KPB}[3],$K[3]
+	MVK	0x00000909,A24
+||	MVK	0x00000B0B,B24
+	MVKH	0x09090000,A24
+||	MVKH	0x0B0B0000,B24
+	MVC	B0,ILC
+||	SUB	B0,1,B0
+
+	GMPY4	$K[0],A24,$Kx9[0]		; ·0x09
+||	GMPY4	$K[1],A24,$Kx9[1]
+||	MVK	0x00000D0D,A25
+||	MVK	0x00000E0E,B25
+	GMPY4	$K[2],A24,$Kx9[2]
+||	GMPY4	$K[3],A24,$Kx9[3]
+||	MVKH	0x0D0D0000,A25
+||	MVKH	0x0E0E0000,B25
+
+	GMPY4	$K[0],B24,$KxB[0]		; ·0x0B
+||	GMPY4	$K[1],B24,$KxB[1]
+	GMPY4	$K[2],B24,$KxB[2]
+||	GMPY4	$K[3],B24,$KxB[3]
+
+	SPLOOP	11				; InvMixColumns
+;;====================================================================
+	GMPY4	$K[0],A25,$KxD[0]		; ·0x0D
+||	GMPY4	$K[1],A25,$KxD[1]
+||	SWAP2	$Kx9[0],$Kx9[0]			; rotate by 16
+||	SWAP2	$Kx9[1],$Kx9[1]
+||	MV	$K[0],$s[0]			; this or DINT
+||	MV	$K[1],$s[1]
+|| [B0]	LDW	*${KPA}[4],$K[0]
+|| [B0]	LDW	*${KPB}[5],$K[1]
+	GMPY4	$K[2],A25,$KxD[2]
+||	GMPY4	$K[3],A25,$KxD[3]
+||	SWAP2	$Kx9[2],$Kx9[2]
+||	SWAP2	$Kx9[3],$Kx9[3]
+||	MV	$K[2],$s[2]
+||	MV	$K[3],$s[3]
+|| [B0]	LDW	*${KPA}[6],$K[2]
+|| [B0]	LDW	*${KPB}[7],$K[3]
+
+	GMPY4	$s[0],B25,$KxE[0]		; ·0x0E
+||	GMPY4	$s[1],B25,$KxE[1]
+||	XOR	$Kx9[0],$KxB[0],$KxB[0]
+||	XOR	$Kx9[1],$KxB[1],$KxB[1]
+	GMPY4	$s[2],B25,$KxE[2]
+||	GMPY4	$s[3],B25,$KxE[3]
+||	XOR	$Kx9[2],$KxB[2],$KxB[2]
+||	XOR	$Kx9[3],$KxB[3],$KxB[3]
+
+	ROTL	$KxB[0],TBL3,$KxB[0]
+||	ROTL	$KxB[1],TBL3,$KxB[1]
+||	SWAP2	$KxD[0],$KxD[0]			; rotate by 16
+||	SWAP2	$KxD[1],$KxD[1]
+	ROTL	$KxB[2],TBL3,$KxB[2]
+||	ROTL	$KxB[3],TBL3,$KxB[3]
+||	SWAP2	$KxD[2],$KxD[2]
+||	SWAP2	$KxD[3],$KxD[3]
+
+	XOR	$KxE[0],$KxD[0],$KxE[0]
+||	XOR	$KxE[1],$KxD[1],$KxE[1]
+|| [B0]	GMPY4	$K[0],A24,$Kx9[0]		; ·0x09
+|| [B0]	GMPY4	$K[1],A24,$Kx9[1]
+||	ADDAW	$KPA,4,$KPA
+	XOR	$KxE[2],$KxD[2],$KxE[2]
+||	XOR	$KxE[3],$KxD[3],$KxE[3]
+|| [B0]	GMPY4	$K[2],A24,$Kx9[2]
+|| [B0]	GMPY4	$K[3],A24,$Kx9[3]
+||	ADDAW	$KPB,4,$KPB
+
+	XOR	$KxB[0],$KxE[0],$KxE[0]
+||	XOR	$KxB[1],$KxE[1],$KxE[1]
+|| [B0]	GMPY4	$K[0],B24,$KxB[0]		; ·0x0B
+|| [B0]	GMPY4	$K[1],B24,$KxB[1]
+	XOR	$KxB[2],$KxE[2],$KxE[2]
+||	XOR	$KxB[3],$KxE[3],$KxE[3]
+|| [B0]	GMPY4	$K[2],B24,$KxB[2]
+|| [B0]	GMPY4	$K[3],B24,$KxB[3]
+||	STW	$KxE[0],*${KPA}[-4]
+||	STW	$KxE[1],*${KPB}[-3]
+	STW	$KxE[2],*${KPA}[-2]
+||	STW	$KxE[3],*${KPB}[-1]
+|| [B0]	SUB	B0,1,B0
+	SPKERNEL
+;;====================================================================
+	BNOP	B31,3
+	MVC	B30,GFPGFR			; restore GFPGFR(*)
+	MVK	0,RET
+	.endasmfunc
+___
+# (*)	Even though ABI doesn't specify GFPGFR as non-volatile, there
+#	are code samples out there that *assume* its default value.
+}
+{
+my ($inp,$out,$blocks,$key,$ivp)=("A4","B4","A6","B6","A8");
+$code.=<<___;
+	.global	_AES_ctr32_encrypt
+_AES_ctr32_encrypt:
+	.asmfunc
+	LDNDW	*${ivp}[0],A31:A30	; load counter value
+||	MV	$blocks,A2		; reassign $blocks
+||	DMV	RA,$key,B27:B26		; reassign RA and $key
+	LDNDW	*${ivp}[1],B31:B30
+||	MVK	0,B2			; don't let __encrypt load input
+||	MVK	0,A1			; and postpone writing output
+	.if	.BIG_ENDIAN
+	NOP
+	.else
+	NOP	4
+	SWAP2	B31,B31			; keep least significant 32 bits
+	SWAP4	B31,B31			; in host byte order
+	.endif
+ctr32_loop?:
+   [A2]	BNOP	__encrypt
+|| [A1]	XOR	A29,A9,A9		; input^Ek(counter)
+|| [A1]	XOR	A28,A8,A8
+|| [A2]	LDNDW	*INP++,A29:A28		; load input
+  [!A2]	BNOP	B27			; return
+|| [A1]	XOR	B29,B9,B9
+|| [A1]	XOR	B28,B8,B8
+|| [A2]	LDNDW	*INP++,B29:B28
+	.if	.BIG_ENDIAN
+   [A1]	STNDW	A9:A8,*OUT++		; save output
+|| [A2]	DMV	A31,A30,A9:A8		; pass counter value to __encrypt
+   [A1]	STNDW	B9:B8,*OUT++
+|| [A2]	DMV	B31,B30,B9:B8
+|| [A2]	ADD	B30,1,B30		; counter++
+	.else
+   [A1]	STNDW	A9:A8,*OUT++		; save output
+|| [A2]	DMV	A31,A30,A9:A8
+|| [A2]	SWAP2	B31,B0
+|| [A2]	ADD	B31,1,B31		; counter++
+   [A1]	STNDW	B9:B8,*OUT++
+|| [A2]	MV	B30,B8
+|| [A2]	SWAP4	B0,B9
+	.endif
+   [A2]	ADDKPC	ctr32_loop?,RA		; return to ctr32_loop?
+|| [A2]	MV	B26,KEY			; pass $key
+|| [A2]	SUB	A2,1,A2			; $blocks--
+||[!A1]	MVK	1,A1
+	NOP
+	NOP
+	.endasmfunc
+___
+}
+# Tables are kept in endian-neutral manner
+$code.=<<___;
+	.if	__TI_EABI__
+	.sect	".text:aes_asm.const"
+	.else
+	.sect	".const:aes_asm"
+	.endif
+	.align	128
+AES_Te:
+	.byte	0xc6,0x63,0x63,0xa5,	0xf8,0x7c,0x7c,0x84
+	.byte	0xee,0x77,0x77,0x99,	0xf6,0x7b,0x7b,0x8d
+	.byte	0xff,0xf2,0xf2,0x0d,	0xd6,0x6b,0x6b,0xbd
+	.byte	0xde,0x6f,0x6f,0xb1,	0x91,0xc5,0xc5,0x54
+	.byte	0x60,0x30,0x30,0x50,	0x02,0x01,0x01,0x03
+	.byte	0xce,0x67,0x67,0xa9,	0x56,0x2b,0x2b,0x7d
+	.byte	0xe7,0xfe,0xfe,0x19,	0xb5,0xd7,0xd7,0x62
+	.byte	0x4d,0xab,0xab,0xe6,	0xec,0x76,0x76,0x9a
+	.byte	0x8f,0xca,0xca,0x45,	0x1f,0x82,0x82,0x9d
+	.byte	0x89,0xc9,0xc9,0x40,	0xfa,0x7d,0x7d,0x87
+	.byte	0xef,0xfa,0xfa,0x15,	0xb2,0x59,0x59,0xeb
+	.byte	0x8e,0x47,0x47,0xc9,	0xfb,0xf0,0xf0,0x0b
+	.byte	0x41,0xad,0xad,0xec,	0xb3,0xd4,0xd4,0x67
+	.byte	0x5f,0xa2,0xa2,0xfd,	0x45,0xaf,0xaf,0xea
+	.byte	0x23,0x9c,0x9c,0xbf,	0x53,0xa4,0xa4,0xf7
+	.byte	0xe4,0x72,0x72,0x96,	0x9b,0xc0,0xc0,0x5b
+	.byte	0x75,0xb7,0xb7,0xc2,	0xe1,0xfd,0xfd,0x1c
+	.byte	0x3d,0x93,0x93,0xae,	0x4c,0x26,0x26,0x6a
+	.byte	0x6c,0x36,0x36,0x5a,	0x7e,0x3f,0x3f,0x41
+	.byte	0xf5,0xf7,0xf7,0x02,	0x83,0xcc,0xcc,0x4f
+	.byte	0x68,0x34,0x34,0x5c,	0x51,0xa5,0xa5,0xf4
+	.byte	0xd1,0xe5,0xe5,0x34,	0xf9,0xf1,0xf1,0x08
+	.byte	0xe2,0x71,0x71,0x93,	0xab,0xd8,0xd8,0x73
+	.byte	0x62,0x31,0x31,0x53,	0x2a,0x15,0x15,0x3f
+	.byte	0x08,0x04,0x04,0x0c,	0x95,0xc7,0xc7,0x52
+	.byte	0x46,0x23,0x23,0x65,	0x9d,0xc3,0xc3,0x5e
+	.byte	0x30,0x18,0x18,0x28,	0x37,0x96,0x96,0xa1
+	.byte	0x0a,0x05,0x05,0x0f,	0x2f,0x9a,0x9a,0xb5
+	.byte	0x0e,0x07,0x07,0x09,	0x24,0x12,0x12,0x36
+	.byte	0x1b,0x80,0x80,0x9b,	0xdf,0xe2,0xe2,0x3d
+	.byte	0xcd,0xeb,0xeb,0x26,	0x4e,0x27,0x27,0x69
+	.byte	0x7f,0xb2,0xb2,0xcd,	0xea,0x75,0x75,0x9f
+	.byte	0x12,0x09,0x09,0x1b,	0x1d,0x83,0x83,0x9e
+	.byte	0x58,0x2c,0x2c,0x74,	0x34,0x1a,0x1a,0x2e
+	.byte	0x36,0x1b,0x1b,0x2d,	0xdc,0x6e,0x6e,0xb2
+	.byte	0xb4,0x5a,0x5a,0xee,	0x5b,0xa0,0xa0,0xfb
+	.byte	0xa4,0x52,0x52,0xf6,	0x76,0x3b,0x3b,0x4d
+	.byte	0xb7,0xd6,0xd6,0x61,	0x7d,0xb3,0xb3,0xce
+	.byte	0x52,0x29,0x29,0x7b,	0xdd,0xe3,0xe3,0x3e
+	.byte	0x5e,0x2f,0x2f,0x71,	0x13,0x84,0x84,0x97
+	.byte	0xa6,0x53,0x53,0xf5,	0xb9,0xd1,0xd1,0x68
+	.byte	0x00,0x00,0x00,0x00,	0xc1,0xed,0xed,0x2c
+	.byte	0x40,0x20,0x20,0x60,	0xe3,0xfc,0xfc,0x1f
+	.byte	0x79,0xb1,0xb1,0xc8,	0xb6,0x5b,0x5b,0xed
+	.byte	0xd4,0x6a,0x6a,0xbe,	0x8d,0xcb,0xcb,0x46
+	.byte	0x67,0xbe,0xbe,0xd9,	0x72,0x39,0x39,0x4b
+	.byte	0x94,0x4a,0x4a,0xde,	0x98,0x4c,0x4c,0xd4
+	.byte	0xb0,0x58,0x58,0xe8,	0x85,0xcf,0xcf,0x4a
+	.byte	0xbb,0xd0,0xd0,0x6b,	0xc5,0xef,0xef,0x2a
+	.byte	0x4f,0xaa,0xaa,0xe5,	0xed,0xfb,0xfb,0x16
+	.byte	0x86,0x43,0x43,0xc5,	0x9a,0x4d,0x4d,0xd7
+	.byte	0x66,0x33,0x33,0x55,	0x11,0x85,0x85,0x94
+	.byte	0x8a,0x45,0x45,0xcf,	0xe9,0xf9,0xf9,0x10
+	.byte	0x04,0x02,0x02,0x06,	0xfe,0x7f,0x7f,0x81
+	.byte	0xa0,0x50,0x50,0xf0,	0x78,0x3c,0x3c,0x44
+	.byte	0x25,0x9f,0x9f,0xba,	0x4b,0xa8,0xa8,0xe3
+	.byte	0xa2,0x51,0x51,0xf3,	0x5d,0xa3,0xa3,0xfe
+	.byte	0x80,0x40,0x40,0xc0,	0x05,0x8f,0x8f,0x8a
+	.byte	0x3f,0x92,0x92,0xad,	0x21,0x9d,0x9d,0xbc
+	.byte	0x70,0x38,0x38,0x48,	0xf1,0xf5,0xf5,0x04
+	.byte	0x63,0xbc,0xbc,0xdf,	0x77,0xb6,0xb6,0xc1
+	.byte	0xaf,0xda,0xda,0x75,	0x42,0x21,0x21,0x63
+	.byte	0x20,0x10,0x10,0x30,	0xe5,0xff,0xff,0x1a
+	.byte	0xfd,0xf3,0xf3,0x0e,	0xbf,0xd2,0xd2,0x6d
+	.byte	0x81,0xcd,0xcd,0x4c,	0x18,0x0c,0x0c,0x14
+	.byte	0x26,0x13,0x13,0x35,	0xc3,0xec,0xec,0x2f
+	.byte	0xbe,0x5f,0x5f,0xe1,	0x35,0x97,0x97,0xa2
+	.byte	0x88,0x44,0x44,0xcc,	0x2e,0x17,0x17,0x39
+	.byte	0x93,0xc4,0xc4,0x57,	0x55,0xa7,0xa7,0xf2
+	.byte	0xfc,0x7e,0x7e,0x82,	0x7a,0x3d,0x3d,0x47
+	.byte	0xc8,0x64,0x64,0xac,	0xba,0x5d,0x5d,0xe7
+	.byte	0x32,0x19,0x19,0x2b,	0xe6,0x73,0x73,0x95
+	.byte	0xc0,0x60,0x60,0xa0,	0x19,0x81,0x81,0x98
+	.byte	0x9e,0x4f,0x4f,0xd1,	0xa3,0xdc,0xdc,0x7f
+	.byte	0x44,0x22,0x22,0x66,	0x54,0x2a,0x2a,0x7e
+	.byte	0x3b,0x90,0x90,0xab,	0x0b,0x88,0x88,0x83
+	.byte	0x8c,0x46,0x46,0xca,	0xc7,0xee,0xee,0x29
+	.byte	0x6b,0xb8,0xb8,0xd3,	0x28,0x14,0x14,0x3c
+	.byte	0xa7,0xde,0xde,0x79,	0xbc,0x5e,0x5e,0xe2
+	.byte	0x16,0x0b,0x0b,0x1d,	0xad,0xdb,0xdb,0x76
+	.byte	0xdb,0xe0,0xe0,0x3b,	0x64,0x32,0x32,0x56
+	.byte	0x74,0x3a,0x3a,0x4e,	0x14,0x0a,0x0a,0x1e
+	.byte	0x92,0x49,0x49,0xdb,	0x0c,0x06,0x06,0x0a
+	.byte	0x48,0x24,0x24,0x6c,	0xb8,0x5c,0x5c,0xe4
+	.byte	0x9f,0xc2,0xc2,0x5d,	0xbd,0xd3,0xd3,0x6e
+	.byte	0x43,0xac,0xac,0xef,	0xc4,0x62,0x62,0xa6
+	.byte	0x39,0x91,0x91,0xa8,	0x31,0x95,0x95,0xa4
+	.byte	0xd3,0xe4,0xe4,0x37,	0xf2,0x79,0x79,0x8b
+	.byte	0xd5,0xe7,0xe7,0x32,	0x8b,0xc8,0xc8,0x43
+	.byte	0x6e,0x37,0x37,0x59,	0xda,0x6d,0x6d,0xb7
+	.byte	0x01,0x8d,0x8d,0x8c,	0xb1,0xd5,0xd5,0x64
+	.byte	0x9c,0x4e,0x4e,0xd2,	0x49,0xa9,0xa9,0xe0
+	.byte	0xd8,0x6c,0x6c,0xb4,	0xac,0x56,0x56,0xfa
+	.byte	0xf3,0xf4,0xf4,0x07,	0xcf,0xea,0xea,0x25
+	.byte	0xca,0x65,0x65,0xaf,	0xf4,0x7a,0x7a,0x8e
+	.byte	0x47,0xae,0xae,0xe9,	0x10,0x08,0x08,0x18
+	.byte	0x6f,0xba,0xba,0xd5,	0xf0,0x78,0x78,0x88
+	.byte	0x4a,0x25,0x25,0x6f,	0x5c,0x2e,0x2e,0x72
+	.byte	0x38,0x1c,0x1c,0x24,	0x57,0xa6,0xa6,0xf1
+	.byte	0x73,0xb4,0xb4,0xc7,	0x97,0xc6,0xc6,0x51
+	.byte	0xcb,0xe8,0xe8,0x23,	0xa1,0xdd,0xdd,0x7c
+	.byte	0xe8,0x74,0x74,0x9c,	0x3e,0x1f,0x1f,0x21
+	.byte	0x96,0x4b,0x4b,0xdd,	0x61,0xbd,0xbd,0xdc
+	.byte	0x0d,0x8b,0x8b,0x86,	0x0f,0x8a,0x8a,0x85
+	.byte	0xe0,0x70,0x70,0x90,	0x7c,0x3e,0x3e,0x42
+	.byte	0x71,0xb5,0xb5,0xc4,	0xcc,0x66,0x66,0xaa
+	.byte	0x90,0x48,0x48,0xd8,	0x06,0x03,0x03,0x05
+	.byte	0xf7,0xf6,0xf6,0x01,	0x1c,0x0e,0x0e,0x12
+	.byte	0xc2,0x61,0x61,0xa3,	0x6a,0x35,0x35,0x5f
+	.byte	0xae,0x57,0x57,0xf9,	0x69,0xb9,0xb9,0xd0
+	.byte	0x17,0x86,0x86,0x91,	0x99,0xc1,0xc1,0x58
+	.byte	0x3a,0x1d,0x1d,0x27,	0x27,0x9e,0x9e,0xb9
+	.byte	0xd9,0xe1,0xe1,0x38,	0xeb,0xf8,0xf8,0x13
+	.byte	0x2b,0x98,0x98,0xb3,	0x22,0x11,0x11,0x33
+	.byte	0xd2,0x69,0x69,0xbb,	0xa9,0xd9,0xd9,0x70
+	.byte	0x07,0x8e,0x8e,0x89,	0x33,0x94,0x94,0xa7
+	.byte	0x2d,0x9b,0x9b,0xb6,	0x3c,0x1e,0x1e,0x22
+	.byte	0x15,0x87,0x87,0x92,	0xc9,0xe9,0xe9,0x20
+	.byte	0x87,0xce,0xce,0x49,	0xaa,0x55,0x55,0xff
+	.byte	0x50,0x28,0x28,0x78,	0xa5,0xdf,0xdf,0x7a
+	.byte	0x03,0x8c,0x8c,0x8f,	0x59,0xa1,0xa1,0xf8
+	.byte	0x09,0x89,0x89,0x80,	0x1a,0x0d,0x0d,0x17
+	.byte	0x65,0xbf,0xbf,0xda,	0xd7,0xe6,0xe6,0x31
+	.byte	0x84,0x42,0x42,0xc6,	0xd0,0x68,0x68,0xb8
+	.byte	0x82,0x41,0x41,0xc3,	0x29,0x99,0x99,0xb0
+	.byte	0x5a,0x2d,0x2d,0x77,	0x1e,0x0f,0x0f,0x11
+	.byte	0x7b,0xb0,0xb0,0xcb,	0xa8,0x54,0x54,0xfc
+	.byte	0x6d,0xbb,0xbb,0xd6,	0x2c,0x16,0x16,0x3a
+AES_Te4:
+	.byte	0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5
+	.byte	0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76
+	.byte	0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0
+	.byte	0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0
+	.byte	0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc
+	.byte	0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15
+	.byte	0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a
+	.byte	0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75
+	.byte	0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0
+	.byte	0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84
+	.byte	0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b
+	.byte	0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf
+	.byte	0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85
+	.byte	0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8
+	.byte	0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5
+	.byte	0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2
+	.byte	0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17
+	.byte	0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73
+	.byte	0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88
+	.byte	0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb
+	.byte	0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c
+	.byte	0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79
+	.byte	0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9
+	.byte	0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08
+	.byte	0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6
+	.byte	0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a
+	.byte	0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e
+	.byte	0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e
+	.byte	0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94
+	.byte	0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf
+	.byte	0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68
+	.byte	0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16
+rcon:
+	.byte	0x01,0x00,0x00,0x00,	0x02,0x00,0x00,0x00
+	.byte	0x04,0x00,0x00,0x00,	0x08,0x00,0x00,0x00
+	.byte	0x10,0x00,0x00,0x00,	0x20,0x00,0x00,0x00
+	.byte	0x40,0x00,0x00,0x00,	0x80,0x00,0x00,0x00
+	.byte	0x1B,0x00,0x00,0x00,	0x36,0x00,0x00,0x00
+	.align	128
+AES_Td:
+	.byte	0x51,0xf4,0xa7,0x50,	0x7e,0x41,0x65,0x53
+	.byte	0x1a,0x17,0xa4,0xc3,	0x3a,0x27,0x5e,0x96
+	.byte	0x3b,0xab,0x6b,0xcb,	0x1f,0x9d,0x45,0xf1
+	.byte	0xac,0xfa,0x58,0xab,	0x4b,0xe3,0x03,0x93
+	.byte	0x20,0x30,0xfa,0x55,	0xad,0x76,0x6d,0xf6
+	.byte	0x88,0xcc,0x76,0x91,	0xf5,0x02,0x4c,0x25
+	.byte	0x4f,0xe5,0xd7,0xfc,	0xc5,0x2a,0xcb,0xd7
+	.byte	0x26,0x35,0x44,0x80,	0xb5,0x62,0xa3,0x8f
+	.byte	0xde,0xb1,0x5a,0x49,	0x25,0xba,0x1b,0x67
+	.byte	0x45,0xea,0x0e,0x98,	0x5d,0xfe,0xc0,0xe1
+	.byte	0xc3,0x2f,0x75,0x02,	0x81,0x4c,0xf0,0x12
+	.byte	0x8d,0x46,0x97,0xa3,	0x6b,0xd3,0xf9,0xc6
+	.byte	0x03,0x8f,0x5f,0xe7,	0x15,0x92,0x9c,0x95
+	.byte	0xbf,0x6d,0x7a,0xeb,	0x95,0x52,0x59,0xda
+	.byte	0xd4,0xbe,0x83,0x2d,	0x58,0x74,0x21,0xd3
+	.byte	0x49,0xe0,0x69,0x29,	0x8e,0xc9,0xc8,0x44
+	.byte	0x75,0xc2,0x89,0x6a,	0xf4,0x8e,0x79,0x78
+	.byte	0x99,0x58,0x3e,0x6b,	0x27,0xb9,0x71,0xdd
+	.byte	0xbe,0xe1,0x4f,0xb6,	0xf0,0x88,0xad,0x17
+	.byte	0xc9,0x20,0xac,0x66,	0x7d,0xce,0x3a,0xb4
+	.byte	0x63,0xdf,0x4a,0x18,	0xe5,0x1a,0x31,0x82
+	.byte	0x97,0x51,0x33,0x60,	0x62,0x53,0x7f,0x45
+	.byte	0xb1,0x64,0x77,0xe0,	0xbb,0x6b,0xae,0x84
+	.byte	0xfe,0x81,0xa0,0x1c,	0xf9,0x08,0x2b,0x94
+	.byte	0x70,0x48,0x68,0x58,	0x8f,0x45,0xfd,0x19
+	.byte	0x94,0xde,0x6c,0x87,	0x52,0x7b,0xf8,0xb7
+	.byte	0xab,0x73,0xd3,0x23,	0x72,0x4b,0x02,0xe2
+	.byte	0xe3,0x1f,0x8f,0x57,	0x66,0x55,0xab,0x2a
+	.byte	0xb2,0xeb,0x28,0x07,	0x2f,0xb5,0xc2,0x03
+	.byte	0x86,0xc5,0x7b,0x9a,	0xd3,0x37,0x08,0xa5
+	.byte	0x30,0x28,0x87,0xf2,	0x23,0xbf,0xa5,0xb2
+	.byte	0x02,0x03,0x6a,0xba,	0xed,0x16,0x82,0x5c
+	.byte	0x8a,0xcf,0x1c,0x2b,	0xa7,0x79,0xb4,0x92
+	.byte	0xf3,0x07,0xf2,0xf0,	0x4e,0x69,0xe2,0xa1
+	.byte	0x65,0xda,0xf4,0xcd,	0x06,0x05,0xbe,0xd5
+	.byte	0xd1,0x34,0x62,0x1f,	0xc4,0xa6,0xfe,0x8a
+	.byte	0x34,0x2e,0x53,0x9d,	0xa2,0xf3,0x55,0xa0
+	.byte	0x05,0x8a,0xe1,0x32,	0xa4,0xf6,0xeb,0x75
+	.byte	0x0b,0x83,0xec,0x39,	0x40,0x60,0xef,0xaa
+	.byte	0x5e,0x71,0x9f,0x06,	0xbd,0x6e,0x10,0x51
+	.byte	0x3e,0x21,0x8a,0xf9,	0x96,0xdd,0x06,0x3d
+	.byte	0xdd,0x3e,0x05,0xae,	0x4d,0xe6,0xbd,0x46
+	.byte	0x91,0x54,0x8d,0xb5,	0x71,0xc4,0x5d,0x05
+	.byte	0x04,0x06,0xd4,0x6f,	0x60,0x50,0x15,0xff
+	.byte	0x19,0x98,0xfb,0x24,	0xd6,0xbd,0xe9,0x97
+	.byte	0x89,0x40,0x43,0xcc,	0x67,0xd9,0x9e,0x77
+	.byte	0xb0,0xe8,0x42,0xbd,	0x07,0x89,0x8b,0x88
+	.byte	0xe7,0x19,0x5b,0x38,	0x79,0xc8,0xee,0xdb
+	.byte	0xa1,0x7c,0x0a,0x47,	0x7c,0x42,0x0f,0xe9
+	.byte	0xf8,0x84,0x1e,0xc9,	0x00,0x00,0x00,0x00
+	.byte	0x09,0x80,0x86,0x83,	0x32,0x2b,0xed,0x48
+	.byte	0x1e,0x11,0x70,0xac,	0x6c,0x5a,0x72,0x4e
+	.byte	0xfd,0x0e,0xff,0xfb,	0x0f,0x85,0x38,0x56
+	.byte	0x3d,0xae,0xd5,0x1e,	0x36,0x2d,0x39,0x27
+	.byte	0x0a,0x0f,0xd9,0x64,	0x68,0x5c,0xa6,0x21
+	.byte	0x9b,0x5b,0x54,0xd1,	0x24,0x36,0x2e,0x3a
+	.byte	0x0c,0x0a,0x67,0xb1,	0x93,0x57,0xe7,0x0f
+	.byte	0xb4,0xee,0x96,0xd2,	0x1b,0x9b,0x91,0x9e
+	.byte	0x80,0xc0,0xc5,0x4f,	0x61,0xdc,0x20,0xa2
+	.byte	0x5a,0x77,0x4b,0x69,	0x1c,0x12,0x1a,0x16
+	.byte	0xe2,0x93,0xba,0x0a,	0xc0,0xa0,0x2a,0xe5
+	.byte	0x3c,0x22,0xe0,0x43,	0x12,0x1b,0x17,0x1d
+	.byte	0x0e,0x09,0x0d,0x0b,	0xf2,0x8b,0xc7,0xad
+	.byte	0x2d,0xb6,0xa8,0xb9,	0x14,0x1e,0xa9,0xc8
+	.byte	0x57,0xf1,0x19,0x85,	0xaf,0x75,0x07,0x4c
+	.byte	0xee,0x99,0xdd,0xbb,	0xa3,0x7f,0x60,0xfd
+	.byte	0xf7,0x01,0x26,0x9f,	0x5c,0x72,0xf5,0xbc
+	.byte	0x44,0x66,0x3b,0xc5,	0x5b,0xfb,0x7e,0x34
+	.byte	0x8b,0x43,0x29,0x76,	0xcb,0x23,0xc6,0xdc
+	.byte	0xb6,0xed,0xfc,0x68,	0xb8,0xe4,0xf1,0x63
+	.byte	0xd7,0x31,0xdc,0xca,	0x42,0x63,0x85,0x10
+	.byte	0x13,0x97,0x22,0x40,	0x84,0xc6,0x11,0x20
+	.byte	0x85,0x4a,0x24,0x7d,	0xd2,0xbb,0x3d,0xf8
+	.byte	0xae,0xf9,0x32,0x11,	0xc7,0x29,0xa1,0x6d
+	.byte	0x1d,0x9e,0x2f,0x4b,	0xdc,0xb2,0x30,0xf3
+	.byte	0x0d,0x86,0x52,0xec,	0x77,0xc1,0xe3,0xd0
+	.byte	0x2b,0xb3,0x16,0x6c,	0xa9,0x70,0xb9,0x99
+	.byte	0x11,0x94,0x48,0xfa,	0x47,0xe9,0x64,0x22
+	.byte	0xa8,0xfc,0x8c,0xc4,	0xa0,0xf0,0x3f,0x1a
+	.byte	0x56,0x7d,0x2c,0xd8,	0x22,0x33,0x90,0xef
+	.byte	0x87,0x49,0x4e,0xc7,	0xd9,0x38,0xd1,0xc1
+	.byte	0x8c,0xca,0xa2,0xfe,	0x98,0xd4,0x0b,0x36
+	.byte	0xa6,0xf5,0x81,0xcf,	0xa5,0x7a,0xde,0x28
+	.byte	0xda,0xb7,0x8e,0x26,	0x3f,0xad,0xbf,0xa4
+	.byte	0x2c,0x3a,0x9d,0xe4,	0x50,0x78,0x92,0x0d
+	.byte	0x6a,0x5f,0xcc,0x9b,	0x54,0x7e,0x46,0x62
+	.byte	0xf6,0x8d,0x13,0xc2,	0x90,0xd8,0xb8,0xe8
+	.byte	0x2e,0x39,0xf7,0x5e,	0x82,0xc3,0xaf,0xf5
+	.byte	0x9f,0x5d,0x80,0xbe,	0x69,0xd0,0x93,0x7c
+	.byte	0x6f,0xd5,0x2d,0xa9,	0xcf,0x25,0x12,0xb3
+	.byte	0xc8,0xac,0x99,0x3b,	0x10,0x18,0x7d,0xa7
+	.byte	0xe8,0x9c,0x63,0x6e,	0xdb,0x3b,0xbb,0x7b
+	.byte	0xcd,0x26,0x78,0x09,	0x6e,0x59,0x18,0xf4
+	.byte	0xec,0x9a,0xb7,0x01,	0x83,0x4f,0x9a,0xa8
+	.byte	0xe6,0x95,0x6e,0x65,	0xaa,0xff,0xe6,0x7e
+	.byte	0x21,0xbc,0xcf,0x08,	0xef,0x15,0xe8,0xe6
+	.byte	0xba,0xe7,0x9b,0xd9,	0x4a,0x6f,0x36,0xce
+	.byte	0xea,0x9f,0x09,0xd4,	0x29,0xb0,0x7c,0xd6
+	.byte	0x31,0xa4,0xb2,0xaf,	0x2a,0x3f,0x23,0x31
+	.byte	0xc6,0xa5,0x94,0x30,	0x35,0xa2,0x66,0xc0
+	.byte	0x74,0x4e,0xbc,0x37,	0xfc,0x82,0xca,0xa6
+	.byte	0xe0,0x90,0xd0,0xb0,	0x33,0xa7,0xd8,0x15
+	.byte	0xf1,0x04,0x98,0x4a,	0x41,0xec,0xda,0xf7
+	.byte	0x7f,0xcd,0x50,0x0e,	0x17,0x91,0xf6,0x2f
+	.byte	0x76,0x4d,0xd6,0x8d,	0x43,0xef,0xb0,0x4d
+	.byte	0xcc,0xaa,0x4d,0x54,	0xe4,0x96,0x04,0xdf
+	.byte	0x9e,0xd1,0xb5,0xe3,	0x4c,0x6a,0x88,0x1b
+	.byte	0xc1,0x2c,0x1f,0xb8,	0x46,0x65,0x51,0x7f
+	.byte	0x9d,0x5e,0xea,0x04,	0x01,0x8c,0x35,0x5d
+	.byte	0xfa,0x87,0x74,0x73,	0xfb,0x0b,0x41,0x2e
+	.byte	0xb3,0x67,0x1d,0x5a,	0x92,0xdb,0xd2,0x52
+	.byte	0xe9,0x10,0x56,0x33,	0x6d,0xd6,0x47,0x13
+	.byte	0x9a,0xd7,0x61,0x8c,	0x37,0xa1,0x0c,0x7a
+	.byte	0x59,0xf8,0x14,0x8e,	0xeb,0x13,0x3c,0x89
+	.byte	0xce,0xa9,0x27,0xee,	0xb7,0x61,0xc9,0x35
+	.byte	0xe1,0x1c,0xe5,0xed,	0x7a,0x47,0xb1,0x3c
+	.byte	0x9c,0xd2,0xdf,0x59,	0x55,0xf2,0x73,0x3f
+	.byte	0x18,0x14,0xce,0x79,	0x73,0xc7,0x37,0xbf
+	.byte	0x53,0xf7,0xcd,0xea,	0x5f,0xfd,0xaa,0x5b
+	.byte	0xdf,0x3d,0x6f,0x14,	0x78,0x44,0xdb,0x86
+	.byte	0xca,0xaf,0xf3,0x81,	0xb9,0x68,0xc4,0x3e
+	.byte	0x38,0x24,0x34,0x2c,	0xc2,0xa3,0x40,0x5f
+	.byte	0x16,0x1d,0xc3,0x72,	0xbc,0xe2,0x25,0x0c
+	.byte	0x28,0x3c,0x49,0x8b,	0xff,0x0d,0x95,0x41
+	.byte	0x39,0xa8,0x01,0x71,	0x08,0x0c,0xb3,0xde
+	.byte	0xd8,0xb4,0xe4,0x9c,	0x64,0x56,0xc1,0x90
+	.byte	0x7b,0xcb,0x84,0x61,	0xd5,0x32,0xb6,0x70
+	.byte	0x48,0x6c,0x5c,0x74,	0xd0,0xb8,0x57,0x42
+AES_Td4:
+	.byte	0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38
+	.byte	0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb
+	.byte	0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87
+	.byte	0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb
+	.byte	0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d
+	.byte	0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e
+	.byte	0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2
+	.byte	0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25
+	.byte	0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16
+	.byte	0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92
+	.byte	0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda
+	.byte	0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84
+	.byte	0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a
+	.byte	0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06
+	.byte	0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02
+	.byte	0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b
+	.byte	0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea
+	.byte	0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73
+	.byte	0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85
+	.byte	0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e
+	.byte	0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89
+	.byte	0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b
+	.byte	0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20
+	.byte	0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4
+	.byte	0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31
+	.byte	0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f
+	.byte	0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d
+	.byte	0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef
+	.byte	0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0
+	.byte	0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61
+	.byte	0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26
+	.byte	0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d
+	.cstring "AES for C64x+, CRYPTOGAMS by <appro\@openssl.org>"
+	.align	4
+___
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-ia64.S b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-ia64.S
new file mode 100644
index 000000000..03f79b7ae
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-ia64.S
@@ -0,0 +1,1130 @@
+// Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+//
+// Licensed under the OpenSSL license (the "License").  You may not use
+// this file except in compliance with the License.  You can obtain a copy
+// in the file LICENSE in the source distribution or at
+// https://www.openssl.org/source/license.html
+//
+// ====================================================================
+// Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+// project. Rights for redistribution and usage in source and binary
+// forms are granted according to the OpenSSL license.
+// ====================================================================
+//
+// What's wrong with compiler generated code? Compiler never uses
+// variable 'shr' which is pairable with 'extr'/'dep' instructions.
+// Then it uses 'zxt' which is an I-type, but can be replaced with
+// 'and' which in turn can be assigned to M-port [there're double as
+// much M-ports as there're I-ports on Itanium 2]. By sacrificing few
+// registers for small constants (255, 24 and 16) to be used with
+// 'shr' and 'and' instructions I can achieve better ILP, Instruction
+// Level Parallelism, and performance. This code outperforms GCC 3.3
+// generated code by over factor of 2 (two), GCC 3.4 - by 70% and
+// HP C - by 40%. Measured best-case scenario, i.e. aligned
+// big-endian input, ECB timing on Itanium 2 is (18 + 13*rounds)
+// ticks per block, or 9.25 CPU cycles per byte for 128 bit key.
+
+// Version 1.2 mitigates the hazard of cache-timing attacks by
+// a) compressing S-boxes from 8KB to 2KB+256B, b) scheduling
+// references to S-boxes for L2 cache latency, c) prefetching T[ed]4
+// prior last round. As result performance dropped to (26 + 15*rounds)
+// ticks per block or 11 cycles per byte processed with 128-bit key.
+// This is ~16% deterioration. For reference Itanium 2 L1 cache has
+// 64 bytes line size and L2 - 128 bytes...
+
+.ident	"aes-ia64.S, version 1.2"
+.ident	"IA-64 ISA artwork by Andy Polyakov <appro@openssl.org>"
+.explicit
+.text
+
+rk0=r8;     rk1=r9;
+
+pfssave=r2;
+lcsave=r10;
+prsave=r3;
+maskff=r11;
+twenty4=r14;
+sixteen=r15;
+
+te00=r16;   te11=r17;   te22=r18;   te33=r19;
+te01=r20;   te12=r21;   te23=r22;   te30=r23;
+te02=r24;   te13=r25;   te20=r26;   te31=r27;
+te03=r28;   te10=r29;   te21=r30;   te32=r31;
+
+// these are rotating...
+t0=r32;     s0=r33;
+t1=r34;     s1=r35;
+t2=r36;     s2=r37;
+t3=r38;     s3=r39;
+
+te0=r40;    te1=r41;    te2=r42;    te3=r43;
+
+#if defined(_HPUX_SOURCE) && !defined(_LP64)
+# define ADDP	addp4
+#else
+# define ADDP	add
+#endif
+
+// Offsets from Te0
+#define TE0	0
+#define TE2	2
+#if defined(_HPUX_SOURCE) || defined(B_ENDIAN)
+#define TE1	3
+#define TE3	1
+#else
+#define TE1	1
+#define TE3	3
+#endif
+
+// This implies that AES_KEY comprises 32-bit key schedule elements
+// even on LP64 platforms.
+#ifndef	KSZ
+# define KSZ	4
+# define LDKEY	ld4
+#endif
+
+.proc	_ia64_AES_encrypt#
+// Input:	rk0-rk1
+//		te0
+//		te3	as AES_KEY->rounds!!!
+//		s0-s3
+//		maskff,twenty4,sixteen
+// Output:	r16,r20,r24,r28 as s0-s3
+// Clobber:	r16-r31,rk0-rk1,r32-r43
+.align	32
+_ia64_AES_encrypt:
+	.prologue
+	.altrp	b6
+	.body
+{ .mmi;	alloc	r16=ar.pfs,12,0,0,8
+	LDKEY	t0=[rk0],2*KSZ
+	mov	pr.rot=1<<16	}
+{ .mmi;	LDKEY	t1=[rk1],2*KSZ
+	add	te1=TE1,te0
+	add	te3=-3,te3	};;
+{ .mib;	LDKEY	t2=[rk0],2*KSZ
+	mov	ar.ec=2		}
+{ .mib;	LDKEY	t3=[rk1],2*KSZ
+	add	te2=TE2,te0
+	brp.loop.imp	.Le_top,.Le_end-16	};;
+
+{ .mmi;	xor	s0=s0,t0
+	xor	s1=s1,t1
+	mov	ar.lc=te3	}
+{ .mmi;	xor	s2=s2,t2
+	xor	s3=s3,t3
+	add	te3=TE3,te0	};;
+
+.align	32
+.Le_top:
+{ .mmi;	(p0)	LDKEY	t0=[rk0],2*KSZ		// 0/0:rk[0]
+	(p0)	and	te33=s3,maskff		// 0/0:s3&0xff
+	(p0)	extr.u	te22=s2,8,8	}	// 0/0:s2>>8&0xff
+{ .mmi; (p0)	LDKEY	t1=[rk1],2*KSZ		// 0/1:rk[1]
+	(p0)	and	te30=s0,maskff		// 0/1:s0&0xff
+	(p0)	shr.u	te00=s0,twenty4	};;	// 0/0:s0>>24
+{ .mmi;	(p0)	LDKEY	t2=[rk0],2*KSZ		// 1/2:rk[2]
+	(p0)	shladd	te33=te33,3,te3		// 1/0:te0+s0>>24
+	(p0)	extr.u	te23=s3,8,8	}	// 1/1:s3>>8&0xff
+{ .mmi;	(p0)	LDKEY	t3=[rk1],2*KSZ		// 1/3:rk[3]
+	(p0)	shladd	te30=te30,3,te3		// 1/1:te3+s0
+	(p0)	shr.u	te01=s1,twenty4	};;	// 1/1:s1>>24
+{ .mmi;	(p0)	ld4	te33=[te33]		// 2/0:te3[s3&0xff]
+	(p0)	shladd	te22=te22,3,te2		// 2/0:te2+s2>>8&0xff
+	(p0)	extr.u	te20=s0,8,8	}	// 2/2:s0>>8&0xff
+{ .mmi;	(p0)	ld4	te30=[te30]		// 2/1:te3[s0]
+	(p0)	shladd	te23=te23,3,te2		// 2/1:te2+s3>>8
+	(p0)	shr.u	te02=s2,twenty4	};;	// 2/2:s2>>24
+{ .mmi;	(p0)	ld4	te22=[te22]		// 3/0:te2[s2>>8]
+	(p0)	shladd	te20=te20,3,te2		// 3/2:te2+s0>>8
+	(p0)	extr.u	te21=s1,8,8	}	// 3/3:s1>>8&0xff
+{ .mmi;	(p0)	ld4	te23=[te23]		// 3/1:te2[s3>>8]
+	(p0)	shladd	te00=te00,3,te0		// 3/0:te0+s0>>24
+	(p0)	shr.u	te03=s3,twenty4	};;	// 3/3:s3>>24
+{ .mmi;	(p0)	ld4	te20=[te20]		// 4/2:te2[s0>>8]
+	(p0)	shladd	te21=te21,3,te2		// 4/3:te3+s2
+	(p0)	extr.u	te11=s1,16,8	}	// 4/0:s1>>16&0xff
+{ .mmi;	(p0)	ld4	te00=[te00]		// 4/0:te0[s0>>24]
+	(p0)	shladd	te01=te01,3,te0		// 4/1:te0+s1>>24
+	(p0)	shr.u	te13=s3,sixteen	};;	// 4/2:s3>>16
+{ .mmi;	(p0)	ld4	te21=[te21]		// 5/3:te2[s1>>8]
+	(p0)	shladd	te11=te11,3,te1		// 5/0:te1+s1>>16
+	(p0)	extr.u	te12=s2,16,8	}	// 5/1:s2>>16&0xff
+{ .mmi;	(p0)	ld4	te01=[te01]		// 5/1:te0[s1>>24]
+	(p0)	shladd	te02=te02,3,te0		// 5/2:te0+s2>>24
+	(p0)	and	te31=s1,maskff	};;	// 5/2:s1&0xff
+{ .mmi;	(p0)	ld4	te11=[te11]		// 6/0:te1[s1>>16]
+	(p0)	shladd	te12=te12,3,te1		// 6/1:te1+s2>>16
+	(p0)	extr.u	te10=s0,16,8	}	// 6/3:s0>>16&0xff
+{ .mmi;	(p0)	ld4	te02=[te02]		// 6/2:te0[s2>>24]
+	(p0)	shladd	te03=te03,3,te0		// 6/3:te1+s0>>16
+	(p0)	and	te32=s2,maskff	};;	// 6/3:s2&0xff
+
+{ .mmi;	(p0)	ld4	te12=[te12]		// 7/1:te1[s2>>16]
+	(p0)	shladd	te31=te31,3,te3		// 7/2:te3+s1&0xff
+	(p0)	and	te13=te13,maskff}	// 7/2:s3>>16&0xff
+{ .mmi;	(p0)	ld4	te03=[te03]		// 7/3:te0[s3>>24]
+	(p0)	shladd	te32=te32,3,te3		// 7/3:te3+s2
+	(p0)	xor	t0=t0,te33	};;	// 7/0:
+{ .mmi;	(p0)	ld4	te31=[te31]		// 8/2:te3[s1]
+	(p0)	shladd	te13=te13,3,te1		// 8/2:te1+s3>>16
+	(p0)	xor	t0=t0,te22	}	// 8/0:
+{ .mmi;	(p0)	ld4	te32=[te32]		// 8/3:te3[s2]
+	(p0)	shladd	te10=te10,3,te1		// 8/3:te1+s0>>16
+	(p0)	xor	t1=t1,te30	};;	// 8/1:
+{ .mmi;	(p0)	ld4	te13=[te13]		// 9/2:te1[s3>>16]
+	(p0)	ld4	te10=[te10]		// 9/3:te1[s0>>16]
+	(p0)	xor	t0=t0,te00	};;	// 9/0:		!L2 scheduling
+{ .mmi;	(p0)	xor	t1=t1,te23		// 10[9]/1:	
+	(p0)	xor	t2=t2,te20		// 10[9]/2:
+	(p0)	xor	t3=t3,te21	};;	// 10[9]/3:
+{ .mmi;	(p0)	xor	t0=t0,te11		// 11[10]/0:done!
+	(p0)	xor	t1=t1,te01		// 11[10]/1:
+	(p0)	xor	t2=t2,te02	};;	// 11[10]/2:	!L2 scheduling
+{ .mmi;	(p0)	xor	t3=t3,te03		// 12[10]/3:
+	(p16)	cmp.eq	p0,p17=r0,r0 	};;	// 12[10]/clear (p17)
+{ .mmi;	(p0)	xor	t1=t1,te12		// 13[11]/1:done!
+	(p0)	xor	t2=t2,te31		// 13[11]/2:
+	(p0)	xor	t3=t3,te32	}	// 13[11]/3:
+{ .mmi;	(p17)	add	te0=2048,te0		// 13[11]/
+	(p17)	add	te1=2048+64-TE1,te1};;	// 13[11]/
+{ .mib;	(p0)	xor	t2=t2,te13		// 14[12]/2:done!
+	(p17)	add	te2=2048+128-TE2,te2}	// 14[12]/
+{ .mib;	(p0)	xor	t3=t3,te10		// 14[12]/3:done!
+	(p17)	add	te3=2048+192-TE3,te3	// 14[12]/
+	br.ctop.sptk	.Le_top		};;
+.Le_end:
+
+
+{ .mmi;	ld8	te12=[te0]		// prefetch Te4
+	ld8	te31=[te1]	}
+{ .mmi;	ld8	te10=[te2]
+	ld8	te32=[te3]	}
+
+{ .mmi;	LDKEY	t0=[rk0],2*KSZ		// 0/0:rk[0]
+	and	te33=s3,maskff		// 0/0:s3&0xff
+	extr.u	te22=s2,8,8	}	// 0/0:s2>>8&0xff
+{ .mmi; LDKEY	t1=[rk1],2*KSZ		// 0/1:rk[1]
+	and	te30=s0,maskff		// 0/1:s0&0xff
+	shr.u	te00=s0,twenty4	};;	// 0/0:s0>>24
+{ .mmi;	LDKEY	t2=[rk0],2*KSZ		// 1/2:rk[2]
+	add	te33=te33,te0		// 1/0:te0+s0>>24
+	extr.u	te23=s3,8,8	}	// 1/1:s3>>8&0xff
+{ .mmi;	LDKEY	t3=[rk1],2*KSZ		// 1/3:rk[3]
+	add	te30=te30,te0		// 1/1:te0+s0
+	shr.u	te01=s1,twenty4	};;	// 1/1:s1>>24
+{ .mmi;	ld1	te33=[te33]		// 2/0:te0[s3&0xff]
+	add	te22=te22,te0		// 2/0:te0+s2>>8&0xff
+	extr.u	te20=s0,8,8	}	// 2/2:s0>>8&0xff
+{ .mmi;	ld1	te30=[te30]		// 2/1:te0[s0]
+	add	te23=te23,te0		// 2/1:te0+s3>>8
+	shr.u	te02=s2,twenty4	};;	// 2/2:s2>>24
+{ .mmi;	ld1	te22=[te22]		// 3/0:te0[s2>>8]
+	add	te20=te20,te0		// 3/2:te0+s0>>8
+	extr.u	te21=s1,8,8	}	// 3/3:s1>>8&0xff
+{ .mmi;	ld1	te23=[te23]		// 3/1:te0[s3>>8]
+	add	te00=te00,te0		// 3/0:te0+s0>>24
+	shr.u	te03=s3,twenty4	};;	// 3/3:s3>>24
+{ .mmi;	ld1	te20=[te20]		// 4/2:te0[s0>>8]
+	add	te21=te21,te0		// 4/3:te0+s2
+	extr.u	te11=s1,16,8	}	// 4/0:s1>>16&0xff
+{ .mmi;	ld1	te00=[te00]		// 4/0:te0[s0>>24]
+	add	te01=te01,te0		// 4/1:te0+s1>>24
+	shr.u	te13=s3,sixteen	};;	// 4/2:s3>>16
+{ .mmi;	ld1	te21=[te21]		// 5/3:te0[s1>>8]
+	add	te11=te11,te0		// 5/0:te0+s1>>16
+	extr.u	te12=s2,16,8	}	// 5/1:s2>>16&0xff
+{ .mmi;	ld1	te01=[te01]		// 5/1:te0[s1>>24]
+	add	te02=te02,te0		// 5/2:te0+s2>>24
+	and	te31=s1,maskff	};;	// 5/2:s1&0xff
+{ .mmi;	ld1	te11=[te11]		// 6/0:te0[s1>>16]
+	add	te12=te12,te0		// 6/1:te0+s2>>16
+	extr.u	te10=s0,16,8	}	// 6/3:s0>>16&0xff
+{ .mmi;	ld1	te02=[te02]		// 6/2:te0[s2>>24]
+	add	te03=te03,te0		// 6/3:te0+s0>>16
+	and	te32=s2,maskff	};;	// 6/3:s2&0xff
+
+{ .mmi;	ld1	te12=[te12]		// 7/1:te0[s2>>16]
+	add	te31=te31,te0		// 7/2:te0+s1&0xff
+	dep	te33=te22,te33,8,8}	// 7/0:
+{ .mmi;	ld1	te03=[te03]		// 7/3:te0[s3>>24]
+	add	te32=te32,te0		// 7/3:te0+s2
+	and	te13=te13,maskff};;	// 7/2:s3>>16&0xff
+{ .mmi;	ld1	te31=[te31]		// 8/2:te0[s1]
+	add	te13=te13,te0		// 8/2:te0+s3>>16
+	dep	te30=te23,te30,8,8}	// 8/1:
+{ .mmi;	ld1	te32=[te32]		// 8/3:te0[s2]
+	add	te10=te10,te0		// 8/3:te0+s0>>16
+	shl	te00=te00,twenty4};;	// 8/0:
+{ .mii;	ld1	te13=[te13]		// 9/2:te0[s3>>16]
+	dep	te33=te11,te33,16,8	// 9/0:
+	shl	te01=te01,twenty4};;	// 9/1:
+{ .mii;	ld1	te10=[te10]		// 10/3:te0[s0>>16]
+	dep	te31=te20,te31,8,8	// 10/2:
+	shl	te02=te02,twenty4};;	// 10/2:
+{ .mii;	xor	t0=t0,te33		// 11/0:
+	dep	te32=te21,te32,8,8	// 11/3:
+	shl	te12=te12,sixteen};;	// 11/1:
+{ .mii;	xor	r16=t0,te00		// 12/0:done!
+	dep	te31=te13,te31,16,8	// 12/2:
+	shl	te03=te03,twenty4};;	// 12/3:
+{ .mmi;	xor	t1=t1,te01		// 13/1:
+	xor	t2=t2,te02		// 13/2:
+	dep	te32=te10,te32,16,8};;	// 13/3:
+{ .mmi;	xor	t1=t1,te30		// 14/1:
+	xor	r24=t2,te31		// 14/2:done!
+	xor	t3=t3,te32	};;	// 14/3:
+{ .mib;	xor	r20=t1,te12		// 15/1:done!
+	xor	r28=t3,te03		// 15/3:done!
+	br.ret.sptk	b6	};;
+.endp	_ia64_AES_encrypt#
+
+// void AES_encrypt (const void *in,void *out,const AES_KEY *key);
+.global	AES_encrypt#
+.proc	AES_encrypt#
+.align	32
+AES_encrypt:
+	.prologue
+	.save	ar.pfs,pfssave
+{ .mmi;	alloc	pfssave=ar.pfs,3,1,12,0
+	and	out0=3,in0
+	mov	r3=ip			}
+{ .mmi;	ADDP	in0=0,in0
+	mov	loc0=psr.um
+	ADDP	out11=KSZ*60,in2	};;	// &AES_KEY->rounds
+
+{ .mmi;	ld4	out11=[out11]			// AES_KEY->rounds
+	add	out8=(AES_Te#-AES_encrypt#),r3	// Te0
+	.save	pr,prsave
+	mov	prsave=pr		}
+{ .mmi;	rum	1<<3				// clear um.ac
+	.save	ar.lc,lcsave
+	mov	lcsave=ar.lc		};;
+
+	.body
+#if defined(_HPUX_SOURCE)	// HPUX is big-endian, cut 15+15 cycles...
+{ .mib; cmp.ne	p6,p0=out0,r0
+	add	out0=4,in0
+(p6)	br.dpnt.many	.Le_i_unaligned	};;
+
+{ .mmi;	ld4	out1=[in0],8		// s0
+	and	out9=3,in1
+	mov	twenty4=24		}
+{ .mmi;	ld4	out3=[out0],8		// s1
+	ADDP	rk0=0,in2
+	mov	sixteen=16		};;
+{ .mmi;	ld4	out5=[in0]		// s2
+	cmp.ne	p6,p0=out9,r0
+	mov	maskff=0xff		}
+{ .mmb;	ld4	out7=[out0]		// s3
+	ADDP	rk1=KSZ,in2
+	br.call.sptk.many	b6=_ia64_AES_encrypt	};;
+
+{ .mib;	ADDP	in0=4,in1
+	ADDP	in1=0,in1
+(p6)	br.spnt	.Le_o_unaligned		};;
+
+{ .mii;	mov	psr.um=loc0
+	mov	ar.pfs=pfssave
+	mov	ar.lc=lcsave		};;
+{ .mmi;	st4	[in1]=r16,8		// s0
+	st4	[in0]=r20,8		// s1
+	mov	pr=prsave,0x1ffff	};;
+{ .mmb;	st4	[in1]=r24		// s2
+	st4	[in0]=r28		// s3
+	br.ret.sptk.many	b0	};;
+#endif
+
+.align	32
+.Le_i_unaligned:
+{ .mmi;	add	out0=1,in0
+	add	out2=2,in0
+	add	out4=3,in0	};;
+{ .mmi;	ld1	r16=[in0],4
+	ld1	r17=[out0],4	}//;;
+{ .mmi;	ld1	r18=[out2],4
+	ld1	out1=[out4],4	};;	// s0
+{ .mmi;	ld1	r20=[in0],4
+	ld1	r21=[out0],4	}//;;
+{ .mmi;	ld1	r22=[out2],4
+	ld1	out3=[out4],4	};;	// s1
+{ .mmi;	ld1	r24=[in0],4
+	ld1	r25=[out0],4	}//;;
+{ .mmi;	ld1	r26=[out2],4
+	ld1	out5=[out4],4	};;	// s2
+{ .mmi;	ld1	r28=[in0]
+	ld1	r29=[out0]	}//;;
+{ .mmi;	ld1	r30=[out2]
+	ld1	out7=[out4]	};;	// s3
+
+{ .mii;
+	dep	out1=r16,out1,24,8	//;;
+	dep	out3=r20,out3,24,8	}//;;
+{ .mii;	ADDP	rk0=0,in2
+	dep	out5=r24,out5,24,8	//;;
+	dep	out7=r28,out7,24,8	};;
+{ .mii;	ADDP	rk1=KSZ,in2
+	dep	out1=r17,out1,16,8	//;;
+	dep	out3=r21,out3,16,8	}//;;
+{ .mii;	mov	twenty4=24
+	dep	out5=r25,out5,16,8	//;;
+	dep	out7=r29,out7,16,8	};;
+{ .mii;	mov	sixteen=16
+	dep	out1=r18,out1,8,8	//;;
+	dep	out3=r22,out3,8,8	}//;;
+{ .mii;	mov	maskff=0xff
+	dep	out5=r26,out5,8,8	//;;
+	dep	out7=r30,out7,8,8	};;
+
+{ .mib;	br.call.sptk.many	b6=_ia64_AES_encrypt	};;
+
+.Le_o_unaligned:
+{ .mii;	ADDP	out0=0,in1
+	extr.u	r17=r16,8,8			// s0
+	shr.u	r19=r16,twenty4		}//;;
+{ .mii;	ADDP	out1=1,in1
+	extr.u	r18=r16,16,8
+	shr.u	r23=r20,twenty4		}//;;	// s1
+{ .mii;	ADDP	out2=2,in1
+	extr.u	r21=r20,8,8
+	shr.u	r22=r20,sixteen		}//;;
+{ .mii;	ADDP	out3=3,in1
+	extr.u	r25=r24,8,8			// s2
+	shr.u	r27=r24,twenty4		};;
+{ .mii;	st1	[out3]=r16,4
+	extr.u	r26=r24,16,8
+	shr.u	r31=r28,twenty4		}//;;	// s3
+{ .mii;	st1	[out2]=r17,4
+	extr.u	r29=r28,8,8
+	shr.u	r30=r28,sixteen		}//;;
+
+{ .mmi;	st1	[out1]=r18,4
+	st1	[out0]=r19,4		};;
+{ .mmi;	st1	[out3]=r20,4
+	st1	[out2]=r21,4		}//;;
+{ .mmi;	st1	[out1]=r22,4
+	st1	[out0]=r23,4		};;
+{ .mmi;	st1	[out3]=r24,4
+	st1	[out2]=r25,4
+	mov	pr=prsave,0x1ffff	}//;;
+{ .mmi;	st1	[out1]=r26,4
+	st1	[out0]=r27,4
+	mov	ar.pfs=pfssave		};;
+{ .mmi;	st1	[out3]=r28
+	st1	[out2]=r29
+	mov	ar.lc=lcsave		}//;;
+{ .mmi;	st1	[out1]=r30
+	st1	[out0]=r31		}
+{ .mfb;	mov	psr.um=loc0			// restore user mask
+	br.ret.sptk.many	b0	};;
+.endp	AES_encrypt#
+
+// *AES_decrypt are autogenerated by the following script:
+#if 0
+#!/usr/bin/env perl
+print "// *AES_decrypt are autogenerated by the following script:\n#if 0\n";
+open(PROG,'<'.$0); while(<PROG>) { print; } close(PROG);
+print "#endif\n";
+while(<>) {
+	$process=1	if (/\.proc\s+_ia64_AES_encrypt/);
+	next		if (!$process);
+
+	#s/te00=s0/td00=s0/;	s/te00/td00/g;
+	s/te11=s1/td13=s3/;	s/te11/td13/g;
+	#s/te22=s2/td22=s2/;	s/te22/td22/g;
+	s/te33=s3/td31=s1/;	s/te33/td31/g;
+
+	#s/te01=s1/td01=s1/;	s/te01/td01/g;
+	s/te12=s2/td10=s0/;	s/te12/td10/g;
+	#s/te23=s3/td23=s3/;	s/te23/td23/g;
+	s/te30=s0/td32=s2/;	s/te30/td32/g;
+
+	#s/te02=s2/td02=s2/;	s/te02/td02/g;
+	s/te13=s3/td11=s1/;	s/te13/td11/g;
+	#s/te20=s0/td20=s0/;	s/te20/td20/g;
+	s/te31=s1/td33=s3/;	s/te31/td33/g;
+
+	#s/te03=s3/td03=s3/;	s/te03/td03/g;
+	s/te10=s0/td12=s2/;	s/te10/td12/g;
+	#s/te21=s1/td21=s1/;	s/te21/td21/g;
+	s/te32=s2/td30=s0/;	s/te32/td30/g;
+
+	s/td/te/g;
+
+	s/AES_encrypt/AES_decrypt/g;
+	s/\.Le_/.Ld_/g;
+	s/AES_Te#/AES_Td#/g;
+
+	print;
+
+	exit		if (/\.endp\s+AES_decrypt/);
+}
+#endif
+.proc	_ia64_AES_decrypt#
+// Input:	rk0-rk1
+//		te0
+//		te3	as AES_KEY->rounds!!!
+//		s0-s3
+//		maskff,twenty4,sixteen
+// Output:	r16,r20,r24,r28 as s0-s3
+// Clobber:	r16-r31,rk0-rk1,r32-r43
+.align	32
+_ia64_AES_decrypt:
+	.prologue
+	.altrp	b6
+	.body
+{ .mmi;	alloc	r16=ar.pfs,12,0,0,8
+	LDKEY	t0=[rk0],2*KSZ
+	mov	pr.rot=1<<16	}
+{ .mmi;	LDKEY	t1=[rk1],2*KSZ
+	add	te1=TE1,te0
+	add	te3=-3,te3	};;
+{ .mib;	LDKEY	t2=[rk0],2*KSZ
+	mov	ar.ec=2		}
+{ .mib;	LDKEY	t3=[rk1],2*KSZ
+	add	te2=TE2,te0
+	brp.loop.imp	.Ld_top,.Ld_end-16	};;
+
+{ .mmi;	xor	s0=s0,t0
+	xor	s1=s1,t1
+	mov	ar.lc=te3	}
+{ .mmi;	xor	s2=s2,t2
+	xor	s3=s3,t3
+	add	te3=TE3,te0	};;
+
+.align	32
+.Ld_top:
+{ .mmi;	(p0)	LDKEY	t0=[rk0],2*KSZ		// 0/0:rk[0]
+	(p0)	and	te31=s1,maskff		// 0/0:s3&0xff
+	(p0)	extr.u	te22=s2,8,8	}	// 0/0:s2>>8&0xff
+{ .mmi; (p0)	LDKEY	t1=[rk1],2*KSZ		// 0/1:rk[1]
+	(p0)	and	te32=s2,maskff		// 0/1:s0&0xff
+	(p0)	shr.u	te00=s0,twenty4	};;	// 0/0:s0>>24
+{ .mmi;	(p0)	LDKEY	t2=[rk0],2*KSZ		// 1/2:rk[2]
+	(p0)	shladd	te31=te31,3,te3		// 1/0:te0+s0>>24
+	(p0)	extr.u	te23=s3,8,8	}	// 1/1:s3>>8&0xff
+{ .mmi;	(p0)	LDKEY	t3=[rk1],2*KSZ		// 1/3:rk[3]
+	(p0)	shladd	te32=te32,3,te3		// 1/1:te3+s0
+	(p0)	shr.u	te01=s1,twenty4	};;	// 1/1:s1>>24
+{ .mmi;	(p0)	ld4	te31=[te31]		// 2/0:te3[s3&0xff]
+	(p0)	shladd	te22=te22,3,te2		// 2/0:te2+s2>>8&0xff
+	(p0)	extr.u	te20=s0,8,8	}	// 2/2:s0>>8&0xff
+{ .mmi;	(p0)	ld4	te32=[te32]		// 2/1:te3[s0]
+	(p0)	shladd	te23=te23,3,te2		// 2/1:te2+s3>>8
+	(p0)	shr.u	te02=s2,twenty4	};;	// 2/2:s2>>24
+{ .mmi;	(p0)	ld4	te22=[te22]		// 3/0:te2[s2>>8]
+	(p0)	shladd	te20=te20,3,te2		// 3/2:te2+s0>>8
+	(p0)	extr.u	te21=s1,8,8	}	// 3/3:s1>>8&0xff
+{ .mmi;	(p0)	ld4	te23=[te23]		// 3/1:te2[s3>>8]
+	(p0)	shladd	te00=te00,3,te0		// 3/0:te0+s0>>24
+	(p0)	shr.u	te03=s3,twenty4	};;	// 3/3:s3>>24
+{ .mmi;	(p0)	ld4	te20=[te20]		// 4/2:te2[s0>>8]
+	(p0)	shladd	te21=te21,3,te2		// 4/3:te3+s2
+	(p0)	extr.u	te13=s3,16,8	}	// 4/0:s1>>16&0xff
+{ .mmi;	(p0)	ld4	te00=[te00]		// 4/0:te0[s0>>24]
+	(p0)	shladd	te01=te01,3,te0		// 4/1:te0+s1>>24
+	(p0)	shr.u	te11=s1,sixteen	};;	// 4/2:s3>>16
+{ .mmi;	(p0)	ld4	te21=[te21]		// 5/3:te2[s1>>8]
+	(p0)	shladd	te13=te13,3,te1		// 5/0:te1+s1>>16
+	(p0)	extr.u	te10=s0,16,8	}	// 5/1:s2>>16&0xff
+{ .mmi;	(p0)	ld4	te01=[te01]		// 5/1:te0[s1>>24]
+	(p0)	shladd	te02=te02,3,te0		// 5/2:te0+s2>>24
+	(p0)	and	te33=s3,maskff	};;	// 5/2:s1&0xff
+{ .mmi;	(p0)	ld4	te13=[te13]		// 6/0:te1[s1>>16]
+	(p0)	shladd	te10=te10,3,te1		// 6/1:te1+s2>>16
+	(p0)	extr.u	te12=s2,16,8	}	// 6/3:s0>>16&0xff
+{ .mmi;	(p0)	ld4	te02=[te02]		// 6/2:te0[s2>>24]
+	(p0)	shladd	te03=te03,3,te0		// 6/3:te1+s0>>16
+	(p0)	and	te30=s0,maskff	};;	// 6/3:s2&0xff
+
+{ .mmi;	(p0)	ld4	te10=[te10]		// 7/1:te1[s2>>16]
+	(p0)	shladd	te33=te33,3,te3		// 7/2:te3+s1&0xff
+	(p0)	and	te11=te11,maskff}	// 7/2:s3>>16&0xff
+{ .mmi;	(p0)	ld4	te03=[te03]		// 7/3:te0[s3>>24]
+	(p0)	shladd	te30=te30,3,te3		// 7/3:te3+s2
+	(p0)	xor	t0=t0,te31	};;	// 7/0:
+{ .mmi;	(p0)	ld4	te33=[te33]		// 8/2:te3[s1]
+	(p0)	shladd	te11=te11,3,te1		// 8/2:te1+s3>>16
+	(p0)	xor	t0=t0,te22	}	// 8/0:
+{ .mmi;	(p0)	ld4	te30=[te30]		// 8/3:te3[s2]
+	(p0)	shladd	te12=te12,3,te1		// 8/3:te1+s0>>16
+	(p0)	xor	t1=t1,te32	};;	// 8/1:
+{ .mmi;	(p0)	ld4	te11=[te11]		// 9/2:te1[s3>>16]
+	(p0)	ld4	te12=[te12]		// 9/3:te1[s0>>16]
+	(p0)	xor	t0=t0,te00	};;	// 9/0:		!L2 scheduling
+{ .mmi;	(p0)	xor	t1=t1,te23		// 10[9]/1:	
+	(p0)	xor	t2=t2,te20		// 10[9]/2:
+	(p0)	xor	t3=t3,te21	};;	// 10[9]/3:
+{ .mmi;	(p0)	xor	t0=t0,te13		// 11[10]/0:done!
+	(p0)	xor	t1=t1,te01		// 11[10]/1:
+	(p0)	xor	t2=t2,te02	};;	// 11[10]/2:	!L2 scheduling
+{ .mmi;	(p0)	xor	t3=t3,te03		// 12[10]/3:
+	(p16)	cmp.eq	p0,p17=r0,r0 	};;	// 12[10]/clear (p17)
+{ .mmi;	(p0)	xor	t1=t1,te10		// 13[11]/1:done!
+	(p0)	xor	t2=t2,te33		// 13[11]/2:
+	(p0)	xor	t3=t3,te30	}	// 13[11]/3:
+{ .mmi;	(p17)	add	te0=2048,te0		// 13[11]/
+	(p17)	add	te1=2048+64-TE1,te1};;	// 13[11]/
+{ .mib;	(p0)	xor	t2=t2,te11		// 14[12]/2:done!
+	(p17)	add	te2=2048+128-TE2,te2}	// 14[12]/
+{ .mib;	(p0)	xor	t3=t3,te12		// 14[12]/3:done!
+	(p17)	add	te3=2048+192-TE3,te3	// 14[12]/
+	br.ctop.sptk	.Ld_top		};;
+.Ld_end:
+
+
+{ .mmi;	ld8	te10=[te0]		// prefetch Td4
+	ld8	te33=[te1]	}
+{ .mmi;	ld8	te12=[te2]
+	ld8	te30=[te3]	}
+
+{ .mmi;	LDKEY	t0=[rk0],2*KSZ		// 0/0:rk[0]
+	and	te31=s1,maskff		// 0/0:s3&0xff
+	extr.u	te22=s2,8,8	}	// 0/0:s2>>8&0xff
+{ .mmi; LDKEY	t1=[rk1],2*KSZ		// 0/1:rk[1]
+	and	te32=s2,maskff		// 0/1:s0&0xff
+	shr.u	te00=s0,twenty4	};;	// 0/0:s0>>24
+{ .mmi;	LDKEY	t2=[rk0],2*KSZ		// 1/2:rk[2]
+	add	te31=te31,te0		// 1/0:te0+s0>>24
+	extr.u	te23=s3,8,8	}	// 1/1:s3>>8&0xff
+{ .mmi;	LDKEY	t3=[rk1],2*KSZ		// 1/3:rk[3]
+	add	te32=te32,te0		// 1/1:te0+s0
+	shr.u	te01=s1,twenty4	};;	// 1/1:s1>>24
+{ .mmi;	ld1	te31=[te31]		// 2/0:te0[s3&0xff]
+	add	te22=te22,te0		// 2/0:te0+s2>>8&0xff
+	extr.u	te20=s0,8,8	}	// 2/2:s0>>8&0xff
+{ .mmi;	ld1	te32=[te32]		// 2/1:te0[s0]
+	add	te23=te23,te0		// 2/1:te0+s3>>8
+	shr.u	te02=s2,twenty4	};;	// 2/2:s2>>24
+{ .mmi;	ld1	te22=[te22]		// 3/0:te0[s2>>8]
+	add	te20=te20,te0		// 3/2:te0+s0>>8
+	extr.u	te21=s1,8,8	}	// 3/3:s1>>8&0xff
+{ .mmi;	ld1	te23=[te23]		// 3/1:te0[s3>>8]
+	add	te00=te00,te0		// 3/0:te0+s0>>24
+	shr.u	te03=s3,twenty4	};;	// 3/3:s3>>24
+{ .mmi;	ld1	te20=[te20]		// 4/2:te0[s0>>8]
+	add	te21=te21,te0		// 4/3:te0+s2
+	extr.u	te13=s3,16,8	}	// 4/0:s1>>16&0xff
+{ .mmi;	ld1	te00=[te00]		// 4/0:te0[s0>>24]
+	add	te01=te01,te0		// 4/1:te0+s1>>24
+	shr.u	te11=s1,sixteen	};;	// 4/2:s3>>16
+{ .mmi;	ld1	te21=[te21]		// 5/3:te0[s1>>8]
+	add	te13=te13,te0		// 5/0:te0+s1>>16
+	extr.u	te10=s0,16,8	}	// 5/1:s2>>16&0xff
+{ .mmi;	ld1	te01=[te01]		// 5/1:te0[s1>>24]
+	add	te02=te02,te0		// 5/2:te0+s2>>24
+	and	te33=s3,maskff	};;	// 5/2:s1&0xff
+{ .mmi;	ld1	te13=[te13]		// 6/0:te0[s1>>16]
+	add	te10=te10,te0		// 6/1:te0+s2>>16
+	extr.u	te12=s2,16,8	}	// 6/3:s0>>16&0xff
+{ .mmi;	ld1	te02=[te02]		// 6/2:te0[s2>>24]
+	add	te03=te03,te0		// 6/3:te0+s0>>16
+	and	te30=s0,maskff	};;	// 6/3:s2&0xff
+
+{ .mmi;	ld1	te10=[te10]		// 7/1:te0[s2>>16]
+	add	te33=te33,te0		// 7/2:te0+s1&0xff
+	dep	te31=te22,te31,8,8}	// 7/0:
+{ .mmi;	ld1	te03=[te03]		// 7/3:te0[s3>>24]
+	add	te30=te30,te0		// 7/3:te0+s2
+	and	te11=te11,maskff};;	// 7/2:s3>>16&0xff
+{ .mmi;	ld1	te33=[te33]		// 8/2:te0[s1]
+	add	te11=te11,te0		// 8/2:te0+s3>>16
+	dep	te32=te23,te32,8,8}	// 8/1:
+{ .mmi;	ld1	te30=[te30]		// 8/3:te0[s2]
+	add	te12=te12,te0		// 8/3:te0+s0>>16
+	shl	te00=te00,twenty4};;	// 8/0:
+{ .mii;	ld1	te11=[te11]		// 9/2:te0[s3>>16]
+	dep	te31=te13,te31,16,8	// 9/0:
+	shl	te01=te01,twenty4};;	// 9/1:
+{ .mii;	ld1	te12=[te12]		// 10/3:te0[s0>>16]
+	dep	te33=te20,te33,8,8	// 10/2:
+	shl	te02=te02,twenty4};;	// 10/2:
+{ .mii;	xor	t0=t0,te31		// 11/0:
+	dep	te30=te21,te30,8,8	// 11/3:
+	shl	te10=te10,sixteen};;	// 11/1:
+{ .mii;	xor	r16=t0,te00		// 12/0:done!
+	dep	te33=te11,te33,16,8	// 12/2:
+	shl	te03=te03,twenty4};;	// 12/3:
+{ .mmi;	xor	t1=t1,te01		// 13/1:
+	xor	t2=t2,te02		// 13/2:
+	dep	te30=te12,te30,16,8};;	// 13/3:
+{ .mmi;	xor	t1=t1,te32		// 14/1:
+	xor	r24=t2,te33		// 14/2:done!
+	xor	t3=t3,te30	};;	// 14/3:
+{ .mib;	xor	r20=t1,te10		// 15/1:done!
+	xor	r28=t3,te03		// 15/3:done!
+	br.ret.sptk	b6	};;
+.endp	_ia64_AES_decrypt#
+
+// void AES_decrypt (const void *in,void *out,const AES_KEY *key);
+.global	AES_decrypt#
+.proc	AES_decrypt#
+.align	32
+AES_decrypt:
+	.prologue
+	.save	ar.pfs,pfssave
+{ .mmi;	alloc	pfssave=ar.pfs,3,1,12,0
+	and	out0=3,in0
+	mov	r3=ip			}
+{ .mmi;	ADDP	in0=0,in0
+	mov	loc0=psr.um
+	ADDP	out11=KSZ*60,in2	};;	// &AES_KEY->rounds
+
+{ .mmi;	ld4	out11=[out11]			// AES_KEY->rounds
+	add	out8=(AES_Td#-AES_decrypt#),r3	// Te0
+	.save	pr,prsave
+	mov	prsave=pr		}
+{ .mmi;	rum	1<<3				// clear um.ac
+	.save	ar.lc,lcsave
+	mov	lcsave=ar.lc		};;
+
+	.body
+#if defined(_HPUX_SOURCE)	// HPUX is big-endian, cut 15+15 cycles...
+{ .mib; cmp.ne	p6,p0=out0,r0
+	add	out0=4,in0
+(p6)	br.dpnt.many	.Ld_i_unaligned	};;
+
+{ .mmi;	ld4	out1=[in0],8		// s0
+	and	out9=3,in1
+	mov	twenty4=24		}
+{ .mmi;	ld4	out3=[out0],8		// s1
+	ADDP	rk0=0,in2
+	mov	sixteen=16		};;
+{ .mmi;	ld4	out5=[in0]		// s2
+	cmp.ne	p6,p0=out9,r0
+	mov	maskff=0xff		}
+{ .mmb;	ld4	out7=[out0]		// s3
+	ADDP	rk1=KSZ,in2
+	br.call.sptk.many	b6=_ia64_AES_decrypt	};;
+
+{ .mib;	ADDP	in0=4,in1
+	ADDP	in1=0,in1
+(p6)	br.spnt	.Ld_o_unaligned		};;
+
+{ .mii;	mov	psr.um=loc0
+	mov	ar.pfs=pfssave
+	mov	ar.lc=lcsave		};;
+{ .mmi;	st4	[in1]=r16,8		// s0
+	st4	[in0]=r20,8		// s1
+	mov	pr=prsave,0x1ffff	};;
+{ .mmb;	st4	[in1]=r24		// s2
+	st4	[in0]=r28		// s3
+	br.ret.sptk.many	b0	};;
+#endif
+
+.align	32
+.Ld_i_unaligned:
+{ .mmi;	add	out0=1,in0
+	add	out2=2,in0
+	add	out4=3,in0	};;
+{ .mmi;	ld1	r16=[in0],4
+	ld1	r17=[out0],4	}//;;
+{ .mmi;	ld1	r18=[out2],4
+	ld1	out1=[out4],4	};;	// s0
+{ .mmi;	ld1	r20=[in0],4
+	ld1	r21=[out0],4	}//;;
+{ .mmi;	ld1	r22=[out2],4
+	ld1	out3=[out4],4	};;	// s1
+{ .mmi;	ld1	r24=[in0],4
+	ld1	r25=[out0],4	}//;;
+{ .mmi;	ld1	r26=[out2],4
+	ld1	out5=[out4],4	};;	// s2
+{ .mmi;	ld1	r28=[in0]
+	ld1	r29=[out0]	}//;;
+{ .mmi;	ld1	r30=[out2]
+	ld1	out7=[out4]	};;	// s3
+
+{ .mii;
+	dep	out1=r16,out1,24,8	//;;
+	dep	out3=r20,out3,24,8	}//;;
+{ .mii;	ADDP	rk0=0,in2
+	dep	out5=r24,out5,24,8	//;;
+	dep	out7=r28,out7,24,8	};;
+{ .mii;	ADDP	rk1=KSZ,in2
+	dep	out1=r17,out1,16,8	//;;
+	dep	out3=r21,out3,16,8	}//;;
+{ .mii;	mov	twenty4=24
+	dep	out5=r25,out5,16,8	//;;
+	dep	out7=r29,out7,16,8	};;
+{ .mii;	mov	sixteen=16
+	dep	out1=r18,out1,8,8	//;;
+	dep	out3=r22,out3,8,8	}//;;
+{ .mii;	mov	maskff=0xff
+	dep	out5=r26,out5,8,8	//;;
+	dep	out7=r30,out7,8,8	};;
+
+{ .mib;	br.call.sptk.many	b6=_ia64_AES_decrypt	};;
+
+.Ld_o_unaligned:
+{ .mii;	ADDP	out0=0,in1
+	extr.u	r17=r16,8,8			// s0
+	shr.u	r19=r16,twenty4		}//;;
+{ .mii;	ADDP	out1=1,in1
+	extr.u	r18=r16,16,8
+	shr.u	r23=r20,twenty4		}//;;	// s1
+{ .mii;	ADDP	out2=2,in1
+	extr.u	r21=r20,8,8
+	shr.u	r22=r20,sixteen		}//;;
+{ .mii;	ADDP	out3=3,in1
+	extr.u	r25=r24,8,8			// s2
+	shr.u	r27=r24,twenty4		};;
+{ .mii;	st1	[out3]=r16,4
+	extr.u	r26=r24,16,8
+	shr.u	r31=r28,twenty4		}//;;	// s3
+{ .mii;	st1	[out2]=r17,4
+	extr.u	r29=r28,8,8
+	shr.u	r30=r28,sixteen		}//;;
+
+{ .mmi;	st1	[out1]=r18,4
+	st1	[out0]=r19,4		};;
+{ .mmi;	st1	[out3]=r20,4
+	st1	[out2]=r21,4		}//;;
+{ .mmi;	st1	[out1]=r22,4
+	st1	[out0]=r23,4		};;
+{ .mmi;	st1	[out3]=r24,4
+	st1	[out2]=r25,4
+	mov	pr=prsave,0x1ffff	}//;;
+{ .mmi;	st1	[out1]=r26,4
+	st1	[out0]=r27,4
+	mov	ar.pfs=pfssave		};;
+{ .mmi;	st1	[out3]=r28
+	st1	[out2]=r29
+	mov	ar.lc=lcsave		}//;;
+{ .mmi;	st1	[out1]=r30
+	st1	[out0]=r31		}
+{ .mfb;	mov	psr.um=loc0			// restore user mask
+	br.ret.sptk.many	b0	};;
+.endp	AES_decrypt#
+
+// leave it in .text segment...
+.align	64
+.global	AES_Te#
+.type	AES_Te#,@object
+AES_Te:	data4	0xc66363a5,0xc66363a5, 0xf87c7c84,0xf87c7c84
+	data4	0xee777799,0xee777799, 0xf67b7b8d,0xf67b7b8d
+	data4	0xfff2f20d,0xfff2f20d, 0xd66b6bbd,0xd66b6bbd
+	data4	0xde6f6fb1,0xde6f6fb1, 0x91c5c554,0x91c5c554
+	data4	0x60303050,0x60303050, 0x02010103,0x02010103
+	data4	0xce6767a9,0xce6767a9, 0x562b2b7d,0x562b2b7d
+	data4	0xe7fefe19,0xe7fefe19, 0xb5d7d762,0xb5d7d762
+	data4	0x4dababe6,0x4dababe6, 0xec76769a,0xec76769a
+	data4	0x8fcaca45,0x8fcaca45, 0x1f82829d,0x1f82829d
+	data4	0x89c9c940,0x89c9c940, 0xfa7d7d87,0xfa7d7d87
+	data4	0xeffafa15,0xeffafa15, 0xb25959eb,0xb25959eb
+	data4	0x8e4747c9,0x8e4747c9, 0xfbf0f00b,0xfbf0f00b
+	data4	0x41adadec,0x41adadec, 0xb3d4d467,0xb3d4d467
+	data4	0x5fa2a2fd,0x5fa2a2fd, 0x45afafea,0x45afafea
+	data4	0x239c9cbf,0x239c9cbf, 0x53a4a4f7,0x53a4a4f7
+	data4	0xe4727296,0xe4727296, 0x9bc0c05b,0x9bc0c05b
+	data4	0x75b7b7c2,0x75b7b7c2, 0xe1fdfd1c,0xe1fdfd1c
+	data4	0x3d9393ae,0x3d9393ae, 0x4c26266a,0x4c26266a
+	data4	0x6c36365a,0x6c36365a, 0x7e3f3f41,0x7e3f3f41
+	data4	0xf5f7f702,0xf5f7f702, 0x83cccc4f,0x83cccc4f
+	data4	0x6834345c,0x6834345c, 0x51a5a5f4,0x51a5a5f4
+	data4	0xd1e5e534,0xd1e5e534, 0xf9f1f108,0xf9f1f108
+	data4	0xe2717193,0xe2717193, 0xabd8d873,0xabd8d873
+	data4	0x62313153,0x62313153, 0x2a15153f,0x2a15153f
+	data4	0x0804040c,0x0804040c, 0x95c7c752,0x95c7c752
+	data4	0x46232365,0x46232365, 0x9dc3c35e,0x9dc3c35e
+	data4	0x30181828,0x30181828, 0x379696a1,0x379696a1
+	data4	0x0a05050f,0x0a05050f, 0x2f9a9ab5,0x2f9a9ab5
+	data4	0x0e070709,0x0e070709, 0x24121236,0x24121236
+	data4	0x1b80809b,0x1b80809b, 0xdfe2e23d,0xdfe2e23d
+	data4	0xcdebeb26,0xcdebeb26, 0x4e272769,0x4e272769
+	data4	0x7fb2b2cd,0x7fb2b2cd, 0xea75759f,0xea75759f
+	data4	0x1209091b,0x1209091b, 0x1d83839e,0x1d83839e
+	data4	0x582c2c74,0x582c2c74, 0x341a1a2e,0x341a1a2e
+	data4	0x361b1b2d,0x361b1b2d, 0xdc6e6eb2,0xdc6e6eb2
+	data4	0xb45a5aee,0xb45a5aee, 0x5ba0a0fb,0x5ba0a0fb
+	data4	0xa45252f6,0xa45252f6, 0x763b3b4d,0x763b3b4d
+	data4	0xb7d6d661,0xb7d6d661, 0x7db3b3ce,0x7db3b3ce
+	data4	0x5229297b,0x5229297b, 0xdde3e33e,0xdde3e33e
+	data4	0x5e2f2f71,0x5e2f2f71, 0x13848497,0x13848497
+	data4	0xa65353f5,0xa65353f5, 0xb9d1d168,0xb9d1d168
+	data4	0x00000000,0x00000000, 0xc1eded2c,0xc1eded2c
+	data4	0x40202060,0x40202060, 0xe3fcfc1f,0xe3fcfc1f
+	data4	0x79b1b1c8,0x79b1b1c8, 0xb65b5bed,0xb65b5bed
+	data4	0xd46a6abe,0xd46a6abe, 0x8dcbcb46,0x8dcbcb46
+	data4	0x67bebed9,0x67bebed9, 0x7239394b,0x7239394b
+	data4	0x944a4ade,0x944a4ade, 0x984c4cd4,0x984c4cd4
+	data4	0xb05858e8,0xb05858e8, 0x85cfcf4a,0x85cfcf4a
+	data4	0xbbd0d06b,0xbbd0d06b, 0xc5efef2a,0xc5efef2a
+	data4	0x4faaaae5,0x4faaaae5, 0xedfbfb16,0xedfbfb16
+	data4	0x864343c5,0x864343c5, 0x9a4d4dd7,0x9a4d4dd7
+	data4	0x66333355,0x66333355, 0x11858594,0x11858594
+	data4	0x8a4545cf,0x8a4545cf, 0xe9f9f910,0xe9f9f910
+	data4	0x04020206,0x04020206, 0xfe7f7f81,0xfe7f7f81
+	data4	0xa05050f0,0xa05050f0, 0x783c3c44,0x783c3c44
+	data4	0x259f9fba,0x259f9fba, 0x4ba8a8e3,0x4ba8a8e3
+	data4	0xa25151f3,0xa25151f3, 0x5da3a3fe,0x5da3a3fe
+	data4	0x804040c0,0x804040c0, 0x058f8f8a,0x058f8f8a
+	data4	0x3f9292ad,0x3f9292ad, 0x219d9dbc,0x219d9dbc
+	data4	0x70383848,0x70383848, 0xf1f5f504,0xf1f5f504
+	data4	0x63bcbcdf,0x63bcbcdf, 0x77b6b6c1,0x77b6b6c1
+	data4	0xafdada75,0xafdada75, 0x42212163,0x42212163
+	data4	0x20101030,0x20101030, 0xe5ffff1a,0xe5ffff1a
+	data4	0xfdf3f30e,0xfdf3f30e, 0xbfd2d26d,0xbfd2d26d
+	data4	0x81cdcd4c,0x81cdcd4c, 0x180c0c14,0x180c0c14
+	data4	0x26131335,0x26131335, 0xc3ecec2f,0xc3ecec2f
+	data4	0xbe5f5fe1,0xbe5f5fe1, 0x359797a2,0x359797a2
+	data4	0x884444cc,0x884444cc, 0x2e171739,0x2e171739
+	data4	0x93c4c457,0x93c4c457, 0x55a7a7f2,0x55a7a7f2
+	data4	0xfc7e7e82,0xfc7e7e82, 0x7a3d3d47,0x7a3d3d47
+	data4	0xc86464ac,0xc86464ac, 0xba5d5de7,0xba5d5de7
+	data4	0x3219192b,0x3219192b, 0xe6737395,0xe6737395
+	data4	0xc06060a0,0xc06060a0, 0x19818198,0x19818198
+	data4	0x9e4f4fd1,0x9e4f4fd1, 0xa3dcdc7f,0xa3dcdc7f
+	data4	0x44222266,0x44222266, 0x542a2a7e,0x542a2a7e
+	data4	0x3b9090ab,0x3b9090ab, 0x0b888883,0x0b888883
+	data4	0x8c4646ca,0x8c4646ca, 0xc7eeee29,0xc7eeee29
+	data4	0x6bb8b8d3,0x6bb8b8d3, 0x2814143c,0x2814143c
+	data4	0xa7dede79,0xa7dede79, 0xbc5e5ee2,0xbc5e5ee2
+	data4	0x160b0b1d,0x160b0b1d, 0xaddbdb76,0xaddbdb76
+	data4	0xdbe0e03b,0xdbe0e03b, 0x64323256,0x64323256
+	data4	0x743a3a4e,0x743a3a4e, 0x140a0a1e,0x140a0a1e
+	data4	0x924949db,0x924949db, 0x0c06060a,0x0c06060a
+	data4	0x4824246c,0x4824246c, 0xb85c5ce4,0xb85c5ce4
+	data4	0x9fc2c25d,0x9fc2c25d, 0xbdd3d36e,0xbdd3d36e
+	data4	0x43acacef,0x43acacef, 0xc46262a6,0xc46262a6
+	data4	0x399191a8,0x399191a8, 0x319595a4,0x319595a4
+	data4	0xd3e4e437,0xd3e4e437, 0xf279798b,0xf279798b
+	data4	0xd5e7e732,0xd5e7e732, 0x8bc8c843,0x8bc8c843
+	data4	0x6e373759,0x6e373759, 0xda6d6db7,0xda6d6db7
+	data4	0x018d8d8c,0x018d8d8c, 0xb1d5d564,0xb1d5d564
+	data4	0x9c4e4ed2,0x9c4e4ed2, 0x49a9a9e0,0x49a9a9e0
+	data4	0xd86c6cb4,0xd86c6cb4, 0xac5656fa,0xac5656fa
+	data4	0xf3f4f407,0xf3f4f407, 0xcfeaea25,0xcfeaea25
+	data4	0xca6565af,0xca6565af, 0xf47a7a8e,0xf47a7a8e
+	data4	0x47aeaee9,0x47aeaee9, 0x10080818,0x10080818
+	data4	0x6fbabad5,0x6fbabad5, 0xf0787888,0xf0787888
+	data4	0x4a25256f,0x4a25256f, 0x5c2e2e72,0x5c2e2e72
+	data4	0x381c1c24,0x381c1c24, 0x57a6a6f1,0x57a6a6f1
+	data4	0x73b4b4c7,0x73b4b4c7, 0x97c6c651,0x97c6c651
+	data4	0xcbe8e823,0xcbe8e823, 0xa1dddd7c,0xa1dddd7c
+	data4	0xe874749c,0xe874749c, 0x3e1f1f21,0x3e1f1f21
+	data4	0x964b4bdd,0x964b4bdd, 0x61bdbddc,0x61bdbddc
+	data4	0x0d8b8b86,0x0d8b8b86, 0x0f8a8a85,0x0f8a8a85
+	data4	0xe0707090,0xe0707090, 0x7c3e3e42,0x7c3e3e42
+	data4	0x71b5b5c4,0x71b5b5c4, 0xcc6666aa,0xcc6666aa
+	data4	0x904848d8,0x904848d8, 0x06030305,0x06030305
+	data4	0xf7f6f601,0xf7f6f601, 0x1c0e0e12,0x1c0e0e12
+	data4	0xc26161a3,0xc26161a3, 0x6a35355f,0x6a35355f
+	data4	0xae5757f9,0xae5757f9, 0x69b9b9d0,0x69b9b9d0
+	data4	0x17868691,0x17868691, 0x99c1c158,0x99c1c158
+	data4	0x3a1d1d27,0x3a1d1d27, 0x279e9eb9,0x279e9eb9
+	data4	0xd9e1e138,0xd9e1e138, 0xebf8f813,0xebf8f813
+	data4	0x2b9898b3,0x2b9898b3, 0x22111133,0x22111133
+	data4	0xd26969bb,0xd26969bb, 0xa9d9d970,0xa9d9d970
+	data4	0x078e8e89,0x078e8e89, 0x339494a7,0x339494a7
+	data4	0x2d9b9bb6,0x2d9b9bb6, 0x3c1e1e22,0x3c1e1e22
+	data4	0x15878792,0x15878792, 0xc9e9e920,0xc9e9e920
+	data4	0x87cece49,0x87cece49, 0xaa5555ff,0xaa5555ff
+	data4	0x50282878,0x50282878, 0xa5dfdf7a,0xa5dfdf7a
+	data4	0x038c8c8f,0x038c8c8f, 0x59a1a1f8,0x59a1a1f8
+	data4	0x09898980,0x09898980, 0x1a0d0d17,0x1a0d0d17
+	data4	0x65bfbfda,0x65bfbfda, 0xd7e6e631,0xd7e6e631
+	data4	0x844242c6,0x844242c6, 0xd06868b8,0xd06868b8
+	data4	0x824141c3,0x824141c3, 0x299999b0,0x299999b0
+	data4	0x5a2d2d77,0x5a2d2d77, 0x1e0f0f11,0x1e0f0f11
+	data4	0x7bb0b0cb,0x7bb0b0cb, 0xa85454fc,0xa85454fc
+	data4	0x6dbbbbd6,0x6dbbbbd6, 0x2c16163a,0x2c16163a
+// Te4:
+	data1	0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5
+	data1	0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76
+	data1	0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0
+	data1	0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0
+	data1	0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc
+	data1	0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15
+	data1	0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a
+	data1	0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75
+	data1	0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0
+	data1	0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84
+	data1	0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b
+	data1	0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf
+	data1	0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85
+	data1	0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8
+	data1	0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5
+	data1	0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2
+	data1	0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17
+	data1	0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73
+	data1	0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88
+	data1	0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb
+	data1	0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c
+	data1	0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79
+	data1	0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9
+	data1	0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08
+	data1	0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6
+	data1	0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a
+	data1	0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e
+	data1	0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e
+	data1	0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94
+	data1	0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf
+	data1	0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68
+	data1	0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16
+.size	AES_Te#,2048+256	// HP-UX assembler fails to ".-AES_Te#"
+
+.align	64
+.global	AES_Td#
+.type	AES_Td#,@object
+AES_Td:	data4	0x51f4a750,0x51f4a750, 0x7e416553,0x7e416553
+	data4	0x1a17a4c3,0x1a17a4c3, 0x3a275e96,0x3a275e96
+	data4	0x3bab6bcb,0x3bab6bcb, 0x1f9d45f1,0x1f9d45f1
+	data4	0xacfa58ab,0xacfa58ab, 0x4be30393,0x4be30393
+	data4	0x2030fa55,0x2030fa55, 0xad766df6,0xad766df6
+	data4	0x88cc7691,0x88cc7691, 0xf5024c25,0xf5024c25
+	data4	0x4fe5d7fc,0x4fe5d7fc, 0xc52acbd7,0xc52acbd7
+	data4	0x26354480,0x26354480, 0xb562a38f,0xb562a38f
+	data4	0xdeb15a49,0xdeb15a49, 0x25ba1b67,0x25ba1b67
+	data4	0x45ea0e98,0x45ea0e98, 0x5dfec0e1,0x5dfec0e1
+	data4	0xc32f7502,0xc32f7502, 0x814cf012,0x814cf012
+	data4	0x8d4697a3,0x8d4697a3, 0x6bd3f9c6,0x6bd3f9c6
+	data4	0x038f5fe7,0x038f5fe7, 0x15929c95,0x15929c95
+	data4	0xbf6d7aeb,0xbf6d7aeb, 0x955259da,0x955259da
+	data4	0xd4be832d,0xd4be832d, 0x587421d3,0x587421d3
+	data4	0x49e06929,0x49e06929, 0x8ec9c844,0x8ec9c844
+	data4	0x75c2896a,0x75c2896a, 0xf48e7978,0xf48e7978
+	data4	0x99583e6b,0x99583e6b, 0x27b971dd,0x27b971dd
+	data4	0xbee14fb6,0xbee14fb6, 0xf088ad17,0xf088ad17
+	data4	0xc920ac66,0xc920ac66, 0x7dce3ab4,0x7dce3ab4
+	data4	0x63df4a18,0x63df4a18, 0xe51a3182,0xe51a3182
+	data4	0x97513360,0x97513360, 0x62537f45,0x62537f45
+	data4	0xb16477e0,0xb16477e0, 0xbb6bae84,0xbb6bae84
+	data4	0xfe81a01c,0xfe81a01c, 0xf9082b94,0xf9082b94
+	data4	0x70486858,0x70486858, 0x8f45fd19,0x8f45fd19
+	data4	0x94de6c87,0x94de6c87, 0x527bf8b7,0x527bf8b7
+	data4	0xab73d323,0xab73d323, 0x724b02e2,0x724b02e2
+	data4	0xe31f8f57,0xe31f8f57, 0x6655ab2a,0x6655ab2a
+	data4	0xb2eb2807,0xb2eb2807, 0x2fb5c203,0x2fb5c203
+	data4	0x86c57b9a,0x86c57b9a, 0xd33708a5,0xd33708a5
+	data4	0x302887f2,0x302887f2, 0x23bfa5b2,0x23bfa5b2
+	data4	0x02036aba,0x02036aba, 0xed16825c,0xed16825c
+	data4	0x8acf1c2b,0x8acf1c2b, 0xa779b492,0xa779b492
+	data4	0xf307f2f0,0xf307f2f0, 0x4e69e2a1,0x4e69e2a1
+	data4	0x65daf4cd,0x65daf4cd, 0x0605bed5,0x0605bed5
+	data4	0xd134621f,0xd134621f, 0xc4a6fe8a,0xc4a6fe8a
+	data4	0x342e539d,0x342e539d, 0xa2f355a0,0xa2f355a0
+	data4	0x058ae132,0x058ae132, 0xa4f6eb75,0xa4f6eb75
+	data4	0x0b83ec39,0x0b83ec39, 0x4060efaa,0x4060efaa
+	data4	0x5e719f06,0x5e719f06, 0xbd6e1051,0xbd6e1051
+	data4	0x3e218af9,0x3e218af9, 0x96dd063d,0x96dd063d
+	data4	0xdd3e05ae,0xdd3e05ae, 0x4de6bd46,0x4de6bd46
+	data4	0x91548db5,0x91548db5, 0x71c45d05,0x71c45d05
+	data4	0x0406d46f,0x0406d46f, 0x605015ff,0x605015ff
+	data4	0x1998fb24,0x1998fb24, 0xd6bde997,0xd6bde997
+	data4	0x894043cc,0x894043cc, 0x67d99e77,0x67d99e77
+	data4	0xb0e842bd,0xb0e842bd, 0x07898b88,0x07898b88
+	data4	0xe7195b38,0xe7195b38, 0x79c8eedb,0x79c8eedb
+	data4	0xa17c0a47,0xa17c0a47, 0x7c420fe9,0x7c420fe9
+	data4	0xf8841ec9,0xf8841ec9, 0x00000000,0x00000000
+	data4	0x09808683,0x09808683, 0x322bed48,0x322bed48
+	data4	0x1e1170ac,0x1e1170ac, 0x6c5a724e,0x6c5a724e
+	data4	0xfd0efffb,0xfd0efffb, 0x0f853856,0x0f853856
+	data4	0x3daed51e,0x3daed51e, 0x362d3927,0x362d3927
+	data4	0x0a0fd964,0x0a0fd964, 0x685ca621,0x685ca621
+	data4	0x9b5b54d1,0x9b5b54d1, 0x24362e3a,0x24362e3a
+	data4	0x0c0a67b1,0x0c0a67b1, 0x9357e70f,0x9357e70f
+	data4	0xb4ee96d2,0xb4ee96d2, 0x1b9b919e,0x1b9b919e
+	data4	0x80c0c54f,0x80c0c54f, 0x61dc20a2,0x61dc20a2
+	data4	0x5a774b69,0x5a774b69, 0x1c121a16,0x1c121a16
+	data4	0xe293ba0a,0xe293ba0a, 0xc0a02ae5,0xc0a02ae5
+	data4	0x3c22e043,0x3c22e043, 0x121b171d,0x121b171d
+	data4	0x0e090d0b,0x0e090d0b, 0xf28bc7ad,0xf28bc7ad
+	data4	0x2db6a8b9,0x2db6a8b9, 0x141ea9c8,0x141ea9c8
+	data4	0x57f11985,0x57f11985, 0xaf75074c,0xaf75074c
+	data4	0xee99ddbb,0xee99ddbb, 0xa37f60fd,0xa37f60fd
+	data4	0xf701269f,0xf701269f, 0x5c72f5bc,0x5c72f5bc
+	data4	0x44663bc5,0x44663bc5, 0x5bfb7e34,0x5bfb7e34
+	data4	0x8b432976,0x8b432976, 0xcb23c6dc,0xcb23c6dc
+	data4	0xb6edfc68,0xb6edfc68, 0xb8e4f163,0xb8e4f163
+	data4	0xd731dcca,0xd731dcca, 0x42638510,0x42638510
+	data4	0x13972240,0x13972240, 0x84c61120,0x84c61120
+	data4	0x854a247d,0x854a247d, 0xd2bb3df8,0xd2bb3df8
+	data4	0xaef93211,0xaef93211, 0xc729a16d,0xc729a16d
+	data4	0x1d9e2f4b,0x1d9e2f4b, 0xdcb230f3,0xdcb230f3
+	data4	0x0d8652ec,0x0d8652ec, 0x77c1e3d0,0x77c1e3d0
+	data4	0x2bb3166c,0x2bb3166c, 0xa970b999,0xa970b999
+	data4	0x119448fa,0x119448fa, 0x47e96422,0x47e96422
+	data4	0xa8fc8cc4,0xa8fc8cc4, 0xa0f03f1a,0xa0f03f1a
+	data4	0x567d2cd8,0x567d2cd8, 0x223390ef,0x223390ef
+	data4	0x87494ec7,0x87494ec7, 0xd938d1c1,0xd938d1c1
+	data4	0x8ccaa2fe,0x8ccaa2fe, 0x98d40b36,0x98d40b36
+	data4	0xa6f581cf,0xa6f581cf, 0xa57ade28,0xa57ade28
+	data4	0xdab78e26,0xdab78e26, 0x3fadbfa4,0x3fadbfa4
+	data4	0x2c3a9de4,0x2c3a9de4, 0x5078920d,0x5078920d
+	data4	0x6a5fcc9b,0x6a5fcc9b, 0x547e4662,0x547e4662
+	data4	0xf68d13c2,0xf68d13c2, 0x90d8b8e8,0x90d8b8e8
+	data4	0x2e39f75e,0x2e39f75e, 0x82c3aff5,0x82c3aff5
+	data4	0x9f5d80be,0x9f5d80be, 0x69d0937c,0x69d0937c
+	data4	0x6fd52da9,0x6fd52da9, 0xcf2512b3,0xcf2512b3
+	data4	0xc8ac993b,0xc8ac993b, 0x10187da7,0x10187da7
+	data4	0xe89c636e,0xe89c636e, 0xdb3bbb7b,0xdb3bbb7b
+	data4	0xcd267809,0xcd267809, 0x6e5918f4,0x6e5918f4
+	data4	0xec9ab701,0xec9ab701, 0x834f9aa8,0x834f9aa8
+	data4	0xe6956e65,0xe6956e65, 0xaaffe67e,0xaaffe67e
+	data4	0x21bccf08,0x21bccf08, 0xef15e8e6,0xef15e8e6
+	data4	0xbae79bd9,0xbae79bd9, 0x4a6f36ce,0x4a6f36ce
+	data4	0xea9f09d4,0xea9f09d4, 0x29b07cd6,0x29b07cd6
+	data4	0x31a4b2af,0x31a4b2af, 0x2a3f2331,0x2a3f2331
+	data4	0xc6a59430,0xc6a59430, 0x35a266c0,0x35a266c0
+	data4	0x744ebc37,0x744ebc37, 0xfc82caa6,0xfc82caa6
+	data4	0xe090d0b0,0xe090d0b0, 0x33a7d815,0x33a7d815
+	data4	0xf104984a,0xf104984a, 0x41ecdaf7,0x41ecdaf7
+	data4	0x7fcd500e,0x7fcd500e, 0x1791f62f,0x1791f62f
+	data4	0x764dd68d,0x764dd68d, 0x43efb04d,0x43efb04d
+	data4	0xccaa4d54,0xccaa4d54, 0xe49604df,0xe49604df
+	data4	0x9ed1b5e3,0x9ed1b5e3, 0x4c6a881b,0x4c6a881b
+	data4	0xc12c1fb8,0xc12c1fb8, 0x4665517f,0x4665517f
+	data4	0x9d5eea04,0x9d5eea04, 0x018c355d,0x018c355d
+	data4	0xfa877473,0xfa877473, 0xfb0b412e,0xfb0b412e
+	data4	0xb3671d5a,0xb3671d5a, 0x92dbd252,0x92dbd252
+	data4	0xe9105633,0xe9105633, 0x6dd64713,0x6dd64713
+	data4	0x9ad7618c,0x9ad7618c, 0x37a10c7a,0x37a10c7a
+	data4	0x59f8148e,0x59f8148e, 0xeb133c89,0xeb133c89
+	data4	0xcea927ee,0xcea927ee, 0xb761c935,0xb761c935
+	data4	0xe11ce5ed,0xe11ce5ed, 0x7a47b13c,0x7a47b13c
+	data4	0x9cd2df59,0x9cd2df59, 0x55f2733f,0x55f2733f
+	data4	0x1814ce79,0x1814ce79, 0x73c737bf,0x73c737bf
+	data4	0x53f7cdea,0x53f7cdea, 0x5ffdaa5b,0x5ffdaa5b
+	data4	0xdf3d6f14,0xdf3d6f14, 0x7844db86,0x7844db86
+	data4	0xcaaff381,0xcaaff381, 0xb968c43e,0xb968c43e
+	data4	0x3824342c,0x3824342c, 0xc2a3405f,0xc2a3405f
+	data4	0x161dc372,0x161dc372, 0xbce2250c,0xbce2250c
+	data4	0x283c498b,0x283c498b, 0xff0d9541,0xff0d9541
+	data4	0x39a80171,0x39a80171, 0x080cb3de,0x080cb3de
+	data4	0xd8b4e49c,0xd8b4e49c, 0x6456c190,0x6456c190
+	data4	0x7bcb8461,0x7bcb8461, 0xd532b670,0xd532b670
+	data4	0x486c5c74,0x486c5c74, 0xd0b85742,0xd0b85742
+// Td4:
+	data1	0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38
+	data1	0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb
+	data1	0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87
+	data1	0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb
+	data1	0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d
+	data1	0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e
+	data1	0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2
+	data1	0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25
+	data1	0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16
+	data1	0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92
+	data1	0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda
+	data1	0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84
+	data1	0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a
+	data1	0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06
+	data1	0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02
+	data1	0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b
+	data1	0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea
+	data1	0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73
+	data1	0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85
+	data1	0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e
+	data1	0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89
+	data1	0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b
+	data1	0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20
+	data1	0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4
+	data1	0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31
+	data1	0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f
+	data1	0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d
+	data1	0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef
+	data1	0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0
+	data1	0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61
+	data1	0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26
+	data1	0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d
+.size	AES_Td#,2048+256	// HP-UX assembler fails to ".-AES_Td#"
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-mips.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-mips.pl
new file mode 100644
index 000000000..716c3356e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-mips.pl
@@ -0,0 +1,2170 @@
+#! /usr/bin/env perl
+# Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# AES for MIPS
+
+# October 2010
+#
+# Code uses 1K[+256B] S-box and on single-issue core [such as R5000]
+# spends ~68 cycles per byte processed with 128-bit key. This is ~16%
+# faster than gcc-generated code, which is not very impressive. But
+# recall that compressed S-box requires extra processing, namely
+# additional rotations. Rotations are implemented with lwl/lwr pairs,
+# which is normally used for loading unaligned data. Another cool
+# thing about this module is its endian neutrality, which means that
+# it processes data without ever changing byte order...
+
+# September 2012
+#
+# Add MIPS32R2 (~10% less instructions) and SmartMIPS ASE (further
+# ~25% less instructions) code. Note that there is no run-time switch,
+# instead, code path is chosen upon pre-process time, pass -mips32r2
+# or/and -msmartmips.
+
+######################################################################
+# There is a number of MIPS ABI in use, O32 and N32/64 are most
+# widely used. Then there is a new contender: NUBI. It appears that if
+# one picks the latter, it's possible to arrange code in ABI neutral
+# manner. Therefore let's stick to NUBI register layout:
+#
+($zero,$at,$t0,$t1,$t2)=map("\$$_",(0..2,24,25));
+($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("\$$_",(4..11));
+($s0,$s1,$s2,$s3,$s4,$s5,$s6,$s7,$s8,$s9,$s10,$s11)=map("\$$_",(12..23));
+($gp,$tp,$sp,$fp,$ra)=map("\$$_",(3,28..31));
+#
+# The return value is placed in $a0. Following coding rules facilitate
+# interoperability:
+#
+# - never ever touch $tp, "thread pointer", former $gp;
+# - copy return value to $t0, former $v0 [or to $a0 if you're adapting
+#   old code];
+# - on O32 populate $a4-$a7 with 'lw $aN,4*N($sp)' if necessary;
+#
+# For reference here is register layout for N32/64 MIPS ABIs:
+#
+# ($zero,$at,$v0,$v1)=map("\$$_",(0..3));
+# ($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("\$$_",(4..11));
+# ($t0,$t1,$t2,$t3,$t8,$t9)=map("\$$_",(12..15,24,25));
+# ($s0,$s1,$s2,$s3,$s4,$s5,$s6,$s7)=map("\$$_",(16..23));
+# ($gp,$sp,$fp,$ra)=map("\$$_",(28..31));
+#
+$flavour = shift || "o32"; # supported flavours are o32,n32,64,nubi32,nubi64
+
+if ($flavour =~ /64|n32/i) {
+	$PTR_LA="dla";
+	$PTR_ADD="daddu";	# incidentally works even on n32
+	$PTR_SUB="dsubu";	# incidentally works even on n32
+	$PTR_INS="dins";
+	$REG_S="sd";
+	$REG_L="ld";
+	$PTR_SLL="dsll";	# incidentally works even on n32
+	$SZREG=8;
+} else {
+	$PTR_LA="la";
+	$PTR_ADD="addu";
+	$PTR_SUB="subu";
+	$PTR_INS="ins";
+	$REG_S="sw";
+	$REG_L="lw";
+	$PTR_SLL="sll";
+	$SZREG=4;
+}
+$pf = ($flavour =~ /nubi/i) ? $t0 : $t2;
+#
+# <appro@openssl.org>
+#
+######################################################################
+
+$big_endian=(`echo MIPSEB | $ENV{CC} -E -`=~/MIPSEB/)?0:1 if ($ENV{CC});
+
+for (@ARGV) {	$output=$_ if (/\w[\w\-]*\.\w+$/);	}
+open STDOUT,">$output";
+
+if (!defined($big_endian))
+{    $big_endian=(unpack('L',pack('N',1))==1);   }
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+my ($MSB,$LSB)=(0,3);	# automatically converted to little-endian
+
+$code.=<<___;
+#include "mips_arch.h"
+
+.text
+#if !defined(__mips_eabi) && (!defined(__vxworks) || defined(__pic__))
+.option	pic2
+#endif
+.set	noat
+___
+
+{{{
+my $FRAMESIZE=16*$SZREG;
+my $SAVED_REGS_MASK = ($flavour =~ /nubi/i) ? "0xc0fff008" : "0xc0ff0000";
+
+my ($inp,$out,$key,$Tbl,$s0,$s1,$s2,$s3)=($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7);
+my ($i0,$i1,$i2,$i3)=($at,$t0,$t1,$t2);
+my ($t0,$t1,$t2,$t3,$t4,$t5,$t6,$t7,$t8,$t9,$t10,$t11) = map("\$$_",(12..23));
+my ($key0,$cnt)=($gp,$fp);
+
+# instruction ordering is "stolen" from output from MIPSpro assembler
+# invoked with -mips3 -O3 arguments...
+$code.=<<___;
+.align	5
+.ent	_mips_AES_encrypt
+_mips_AES_encrypt:
+	.frame	$sp,0,$ra
+	.set	reorder
+	lw	$t0,0($key)
+	lw	$t1,4($key)
+	lw	$t2,8($key)
+	lw	$t3,12($key)
+	lw	$cnt,240($key)
+	$PTR_ADD $key0,$key,16
+
+	xor	$s0,$t0
+	xor	$s1,$t1
+	xor	$s2,$t2
+	xor	$s3,$t3
+
+	subu	$cnt,1
+#if defined(__mips_smartmips)
+	ext	$i0,$s1,16,8
+.Loop_enc:
+	ext	$i1,$s2,16,8
+	ext	$i2,$s3,16,8
+	ext	$i3,$s0,16,8
+	lwxs	$t0,$i0($Tbl)		# Te1[s1>>16]
+	ext	$i0,$s2,8,8
+	lwxs	$t1,$i1($Tbl)		# Te1[s2>>16]
+	ext	$i1,$s3,8,8
+	lwxs	$t2,$i2($Tbl)		# Te1[s3>>16]
+	ext	$i2,$s0,8,8
+	lwxs	$t3,$i3($Tbl)		# Te1[s0>>16]
+	ext	$i3,$s1,8,8
+
+	lwxs	$t4,$i0($Tbl)		# Te2[s2>>8]
+	ext	$i0,$s3,0,8
+	lwxs	$t5,$i1($Tbl)		# Te2[s3>>8]
+	ext	$i1,$s0,0,8
+	lwxs	$t6,$i2($Tbl)		# Te2[s0>>8]
+	ext	$i2,$s1,0,8
+	lwxs	$t7,$i3($Tbl)		# Te2[s1>>8]
+	ext	$i3,$s2,0,8
+
+	lwxs	$t8,$i0($Tbl)		# Te3[s3]
+	ext	$i0,$s0,24,8
+	lwxs	$t9,$i1($Tbl)		# Te3[s0]
+	ext	$i1,$s1,24,8
+	lwxs	$t10,$i2($Tbl)		# Te3[s1]
+	ext	$i2,$s2,24,8
+	lwxs	$t11,$i3($Tbl)		# Te3[s2]
+	ext	$i3,$s3,24,8
+
+	rotr	$t0,$t0,8
+	rotr	$t1,$t1,8
+	rotr	$t2,$t2,8
+	rotr	$t3,$t3,8
+
+	rotr	$t4,$t4,16
+	rotr	$t5,$t5,16
+	rotr	$t6,$t6,16
+	rotr	$t7,$t7,16
+
+	xor	$t0,$t4
+	lwxs	$t4,$i0($Tbl)		# Te0[s0>>24]
+	xor	$t1,$t5
+	lwxs	$t5,$i1($Tbl)		# Te0[s1>>24]
+	xor	$t2,$t6
+	lwxs	$t6,$i2($Tbl)		# Te0[s2>>24]
+	xor	$t3,$t7
+	lwxs	$t7,$i3($Tbl)		# Te0[s3>>24]
+
+	rotr	$t8,$t8,24
+	lw	$s0,0($key0)
+	rotr	$t9,$t9,24
+	lw	$s1,4($key0)
+	rotr	$t10,$t10,24
+	lw	$s2,8($key0)
+	rotr	$t11,$t11,24
+	lw	$s3,12($key0)
+
+	xor	$t0,$t8
+	xor	$t1,$t9
+	xor	$t2,$t10
+	xor	$t3,$t11
+
+	xor	$t0,$t4
+	xor	$t1,$t5
+	xor	$t2,$t6
+	xor	$t3,$t7
+
+	subu	$cnt,1
+	$PTR_ADD $key0,16
+	xor	$s0,$t0
+	xor	$s1,$t1
+	xor	$s2,$t2
+	xor	$s3,$t3
+	.set	noreorder
+	bnez	$cnt,.Loop_enc
+	ext	$i0,$s1,16,8
+
+	_xtr	$i0,$s1,16-2
+#else
+	_xtr	$i0,$s1,16-2
+.Loop_enc:
+	_xtr	$i1,$s2,16-2
+	_xtr	$i2,$s3,16-2
+	_xtr	$i3,$s0,16-2
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+	lw	$t0,0($i0)		# Te1[s1>>16]
+	_xtr	$i0,$s2,8-2
+	lw	$t1,0($i1)		# Te1[s2>>16]
+	_xtr	$i1,$s3,8-2
+	lw	$t2,0($i2)		# Te1[s3>>16]
+	_xtr	$i2,$s0,8-2
+	lw	$t3,0($i3)		# Te1[s0>>16]
+	_xtr	$i3,$s1,8-2
+#else
+	lwl	$t0,3($i0)		# Te1[s1>>16]
+	lwl	$t1,3($i1)		# Te1[s2>>16]
+	lwl	$t2,3($i2)		# Te1[s3>>16]
+	lwl	$t3,3($i3)		# Te1[s0>>16]
+	lwr	$t0,2($i0)		# Te1[s1>>16]
+	_xtr	$i0,$s2,8-2
+	lwr	$t1,2($i1)		# Te1[s2>>16]
+	_xtr	$i1,$s3,8-2
+	lwr	$t2,2($i2)		# Te1[s3>>16]
+	_xtr	$i2,$s0,8-2
+	lwr	$t3,2($i3)		# Te1[s0>>16]
+	_xtr	$i3,$s1,8-2
+#endif
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+	rotr	$t0,$t0,8
+	rotr	$t1,$t1,8
+	rotr	$t2,$t2,8
+	rotr	$t3,$t3,8
+# if defined(_MIPSEL)
+	lw	$t4,0($i0)		# Te2[s2>>8]
+	_xtr	$i0,$s3,0-2
+	lw	$t5,0($i1)		# Te2[s3>>8]
+	_xtr	$i1,$s0,0-2
+	lw	$t6,0($i2)		# Te2[s0>>8]
+	_xtr	$i2,$s1,0-2
+	lw	$t7,0($i3)		# Te2[s1>>8]
+	_xtr	$i3,$s2,0-2
+
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+	lw	$t8,0($i0)		# Te3[s3]
+	$PTR_INS $i0,$s0,2,8
+	lw	$t9,0($i1)		# Te3[s0]
+	$PTR_INS $i1,$s1,2,8
+	lw	$t10,0($i2)		# Te3[s1]
+	$PTR_INS $i2,$s2,2,8
+	lw	$t11,0($i3)		# Te3[s2]
+	$PTR_INS $i3,$s3,2,8
+# else
+	lw	$t4,0($i0)		# Te2[s2>>8]
+	$PTR_INS $i0,$s3,2,8
+	lw	$t5,0($i1)		# Te2[s3>>8]
+	$PTR_INS $i1,$s0,2,8
+	lw	$t6,0($i2)		# Te2[s0>>8]
+	$PTR_INS $i2,$s1,2,8
+	lw	$t7,0($i3)		# Te2[s1>>8]
+	$PTR_INS $i3,$s2,2,8
+
+	lw	$t8,0($i0)		# Te3[s3]
+	_xtr	$i0,$s0,24-2
+	lw	$t9,0($i1)		# Te3[s0]
+	_xtr	$i1,$s1,24-2
+	lw	$t10,0($i2)		# Te3[s1]
+	_xtr	$i2,$s2,24-2
+	lw	$t11,0($i3)		# Te3[s2]
+	_xtr	$i3,$s3,24-2
+
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+# endif
+	rotr	$t4,$t4,16
+	rotr	$t5,$t5,16
+	rotr	$t6,$t6,16
+	rotr	$t7,$t7,16
+
+	rotr	$t8,$t8,24
+	rotr	$t9,$t9,24
+	rotr	$t10,$t10,24
+	rotr	$t11,$t11,24
+#else
+	lwl	$t4,2($i0)		# Te2[s2>>8]
+	lwl	$t5,2($i1)		# Te2[s3>>8]
+	lwl	$t6,2($i2)		# Te2[s0>>8]
+	lwl	$t7,2($i3)		# Te2[s1>>8]
+	lwr	$t4,1($i0)		# Te2[s2>>8]
+	_xtr	$i0,$s3,0-2
+	lwr	$t5,1($i1)		# Te2[s3>>8]
+	_xtr	$i1,$s0,0-2
+	lwr	$t6,1($i2)		# Te2[s0>>8]
+	_xtr	$i2,$s1,0-2
+	lwr	$t7,1($i3)		# Te2[s1>>8]
+	_xtr	$i3,$s2,0-2
+
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+	lwl	$t8,1($i0)		# Te3[s3]
+	lwl	$t9,1($i1)		# Te3[s0]
+	lwl	$t10,1($i2)		# Te3[s1]
+	lwl	$t11,1($i3)		# Te3[s2]
+	lwr	$t8,0($i0)		# Te3[s3]
+	_xtr	$i0,$s0,24-2
+	lwr	$t9,0($i1)		# Te3[s0]
+	_xtr	$i1,$s1,24-2
+	lwr	$t10,0($i2)		# Te3[s1]
+	_xtr	$i2,$s2,24-2
+	lwr	$t11,0($i3)		# Te3[s2]
+	_xtr	$i3,$s3,24-2
+
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+#endif
+	xor	$t0,$t4
+	lw	$t4,0($i0)		# Te0[s0>>24]
+	xor	$t1,$t5
+	lw	$t5,0($i1)		# Te0[s1>>24]
+	xor	$t2,$t6
+	lw	$t6,0($i2)		# Te0[s2>>24]
+	xor	$t3,$t7
+	lw	$t7,0($i3)		# Te0[s3>>24]
+
+	xor	$t0,$t8
+	lw	$s0,0($key0)
+	xor	$t1,$t9
+	lw	$s1,4($key0)
+	xor	$t2,$t10
+	lw	$s2,8($key0)
+	xor	$t3,$t11
+	lw	$s3,12($key0)
+
+	xor	$t0,$t4
+	xor	$t1,$t5
+	xor	$t2,$t6
+	xor	$t3,$t7
+
+	subu	$cnt,1
+	$PTR_ADD $key0,16
+	xor	$s0,$t0
+	xor	$s1,$t1
+	xor	$s2,$t2
+	xor	$s3,$t3
+	.set	noreorder
+	bnez	$cnt,.Loop_enc
+	_xtr	$i0,$s1,16-2
+#endif
+
+	.set	reorder
+	_xtr	$i1,$s2,16-2
+	_xtr	$i2,$s3,16-2
+	_xtr	$i3,$s0,16-2
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+	lbu	$t0,2($i0)		# Te4[s1>>16]
+	_xtr	$i0,$s2,8-2
+	lbu	$t1,2($i1)		# Te4[s2>>16]
+	_xtr	$i1,$s3,8-2
+	lbu	$t2,2($i2)		# Te4[s3>>16]
+	_xtr	$i2,$s0,8-2
+	lbu	$t3,2($i3)		# Te4[s0>>16]
+	_xtr	$i3,$s1,8-2
+
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+# if defined(_MIPSEL)
+	lbu	$t4,2($i0)		# Te4[s2>>8]
+	$PTR_INS $i0,$s0,2,8
+	lbu	$t5,2($i1)		# Te4[s3>>8]
+	$PTR_INS $i1,$s1,2,8
+	lbu	$t6,2($i2)		# Te4[s0>>8]
+	$PTR_INS $i2,$s2,2,8
+	lbu	$t7,2($i3)		# Te4[s1>>8]
+	$PTR_INS $i3,$s3,2,8
+
+	lbu	$t8,2($i0)		# Te4[s0>>24]
+	_xtr	$i0,$s3,0-2
+	lbu	$t9,2($i1)		# Te4[s1>>24]
+	_xtr	$i1,$s0,0-2
+	lbu	$t10,2($i2)		# Te4[s2>>24]
+	_xtr	$i2,$s1,0-2
+	lbu	$t11,2($i3)		# Te4[s3>>24]
+	_xtr	$i3,$s2,0-2
+
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+# else
+	lbu	$t4,2($i0)		# Te4[s2>>8]
+	_xtr	$i0,$s0,24-2
+	lbu	$t5,2($i1)		# Te4[s3>>8]
+	_xtr	$i1,$s1,24-2
+	lbu	$t6,2($i2)		# Te4[s0>>8]
+	_xtr	$i2,$s2,24-2
+	lbu	$t7,2($i3)		# Te4[s1>>8]
+	_xtr	$i3,$s3,24-2
+
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+	lbu	$t8,2($i0)		# Te4[s0>>24]
+	$PTR_INS $i0,$s3,2,8
+	lbu	$t9,2($i1)		# Te4[s1>>24]
+	$PTR_INS $i1,$s0,2,8
+	lbu	$t10,2($i2)		# Te4[s2>>24]
+	$PTR_INS $i2,$s1,2,8
+	lbu	$t11,2($i3)		# Te4[s3>>24]
+	$PTR_INS $i3,$s2,2,8
+# endif
+	_ins	$t0,16
+	_ins	$t1,16
+	_ins	$t2,16
+	_ins	$t3,16
+
+	_ins2	$t0,$t4,8
+	lbu	$t4,2($i0)		# Te4[s3]
+	_ins2	$t1,$t5,8
+	lbu	$t5,2($i1)		# Te4[s0]
+	_ins2	$t2,$t6,8
+	lbu	$t6,2($i2)		# Te4[s1]
+	_ins2	$t3,$t7,8
+	lbu	$t7,2($i3)		# Te4[s2]
+
+	_ins2	$t0,$t8,24
+	lw	$s0,0($key0)
+	_ins2	$t1,$t9,24
+	lw	$s1,4($key0)
+	_ins2	$t2,$t10,24
+	lw	$s2,8($key0)
+	_ins2	$t3,$t11,24
+	lw	$s3,12($key0)
+
+	_ins2	$t0,$t4,0
+	_ins2	$t1,$t5,0
+	_ins2	$t2,$t6,0
+	_ins2	$t3,$t7,0
+#else
+	lbu	$t4,2($i0)		# Te4[s2>>8]
+	_xtr	$i0,$s0,24-2
+	lbu	$t5,2($i1)		# Te4[s3>>8]
+	_xtr	$i1,$s1,24-2
+	lbu	$t6,2($i2)		# Te4[s0>>8]
+	_xtr	$i2,$s2,24-2
+	lbu	$t7,2($i3)		# Te4[s1>>8]
+	_xtr	$i3,$s3,24-2
+
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+	lbu	$t8,2($i0)		# Te4[s0>>24]
+	_xtr	$i0,$s3,0-2
+	lbu	$t9,2($i1)		# Te4[s1>>24]
+	_xtr	$i1,$s0,0-2
+	lbu	$t10,2($i2)		# Te4[s2>>24]
+	_xtr	$i2,$s1,0-2
+	lbu	$t11,2($i3)		# Te4[s3>>24]
+	_xtr	$i3,$s2,0-2
+
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+
+	_ins	$t0,16
+	_ins	$t1,16
+	_ins	$t2,16
+	_ins	$t3,16
+
+	_ins	$t4,8
+	_ins	$t5,8
+	_ins	$t6,8
+	_ins	$t7,8
+
+	xor	$t0,$t4
+	lbu	$t4,2($i0)		# Te4[s3]
+	xor	$t1,$t5
+	lbu	$t5,2($i1)		# Te4[s0]
+	xor	$t2,$t6
+	lbu	$t6,2($i2)		# Te4[s1]
+	xor	$t3,$t7
+	lbu	$t7,2($i3)		# Te4[s2]
+
+	_ins	$t8,24
+	lw	$s0,0($key0)
+	_ins	$t9,24
+	lw	$s1,4($key0)
+	_ins	$t10,24
+	lw	$s2,8($key0)
+	_ins	$t11,24
+	lw	$s3,12($key0)
+
+	xor	$t0,$t8
+	xor	$t1,$t9
+	xor	$t2,$t10
+	xor	$t3,$t11
+
+	_ins	$t4,0
+	_ins	$t5,0
+	_ins	$t6,0
+	_ins	$t7,0
+
+	xor	$t0,$t4
+	xor	$t1,$t5
+	xor	$t2,$t6
+	xor	$t3,$t7
+#endif
+	xor	$s0,$t0
+	xor	$s1,$t1
+	xor	$s2,$t2
+	xor	$s3,$t3
+
+	jr	$ra
+.end	_mips_AES_encrypt
+
+.align	5
+.globl	AES_encrypt
+.ent	AES_encrypt
+AES_encrypt:
+	.frame	$sp,$FRAMESIZE,$ra
+	.mask	$SAVED_REGS_MASK,-$SZREG
+	.set	noreorder
+___
+$code.=<<___ if ($flavour =~ /o32/i);	# o32 PIC-ification
+	.cpload	$pf
+___
+$code.=<<___;
+	$PTR_SUB $sp,$FRAMESIZE
+	$REG_S	$ra,$FRAMESIZE-1*$SZREG($sp)
+	$REG_S	$fp,$FRAMESIZE-2*$SZREG($sp)
+	$REG_S	$s11,$FRAMESIZE-3*$SZREG($sp)
+	$REG_S	$s10,$FRAMESIZE-4*$SZREG($sp)
+	$REG_S	$s9,$FRAMESIZE-5*$SZREG($sp)
+	$REG_S	$s8,$FRAMESIZE-6*$SZREG($sp)
+	$REG_S	$s7,$FRAMESIZE-7*$SZREG($sp)
+	$REG_S	$s6,$FRAMESIZE-8*$SZREG($sp)
+	$REG_S	$s5,$FRAMESIZE-9*$SZREG($sp)
+	$REG_S	$s4,$FRAMESIZE-10*$SZREG($sp)
+___
+$code.=<<___ if ($flavour =~ /nubi/i);	# optimize non-nubi prologue
+	$REG_S	\$15,$FRAMESIZE-11*$SZREG($sp)
+	$REG_S	\$14,$FRAMESIZE-12*$SZREG($sp)
+	$REG_S	\$13,$FRAMESIZE-13*$SZREG($sp)
+	$REG_S	\$12,$FRAMESIZE-14*$SZREG($sp)
+	$REG_S	$gp,$FRAMESIZE-15*$SZREG($sp)
+___
+$code.=<<___ if ($flavour !~ /o32/i);	# non-o32 PIC-ification
+	.cplocal	$Tbl
+	.cpsetup	$pf,$zero,AES_encrypt
+___
+$code.=<<___;
+	.set	reorder
+	$PTR_LA	$Tbl,AES_Te		# PIC-ified 'load address'
+
+#if defined(_MIPS_ARCH_MIPS32R6) || defined(_MIPS_ARCH_MIPS64R6)
+	lw	$s0,0($inp)
+	lw	$s1,4($inp)
+	lw	$s2,8($inp)
+	lw	$s3,12($inp)
+#else
+	lwl	$s0,0+$MSB($inp)
+	lwl	$s1,4+$MSB($inp)
+	lwl	$s2,8+$MSB($inp)
+	lwl	$s3,12+$MSB($inp)
+	lwr	$s0,0+$LSB($inp)
+	lwr	$s1,4+$LSB($inp)
+	lwr	$s2,8+$LSB($inp)
+	lwr	$s3,12+$LSB($inp)
+#endif
+
+	bal	_mips_AES_encrypt
+
+#if defined(_MIPS_ARCH_MIPS32R6) || defined(_MIPS_ARCH_MIPS64R6)
+	sw	$s0,0($out)
+	sw	$s1,4($out)
+	sw	$s2,8($out)
+	sw	$s3,12($out)
+#else
+	swr	$s0,0+$LSB($out)
+	swr	$s1,4+$LSB($out)
+	swr	$s2,8+$LSB($out)
+	swr	$s3,12+$LSB($out)
+	swl	$s0,0+$MSB($out)
+	swl	$s1,4+$MSB($out)
+	swl	$s2,8+$MSB($out)
+	swl	$s3,12+$MSB($out)
+#endif
+
+	.set	noreorder
+	$REG_L	$ra,$FRAMESIZE-1*$SZREG($sp)
+	$REG_L	$fp,$FRAMESIZE-2*$SZREG($sp)
+	$REG_L	$s11,$FRAMESIZE-3*$SZREG($sp)
+	$REG_L	$s10,$FRAMESIZE-4*$SZREG($sp)
+	$REG_L	$s9,$FRAMESIZE-5*$SZREG($sp)
+	$REG_L	$s8,$FRAMESIZE-6*$SZREG($sp)
+	$REG_L	$s7,$FRAMESIZE-7*$SZREG($sp)
+	$REG_L	$s6,$FRAMESIZE-8*$SZREG($sp)
+	$REG_L	$s5,$FRAMESIZE-9*$SZREG($sp)
+	$REG_L	$s4,$FRAMESIZE-10*$SZREG($sp)
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	\$15,$FRAMESIZE-11*$SZREG($sp)
+	$REG_L	\$14,$FRAMESIZE-12*$SZREG($sp)
+	$REG_L	\$13,$FRAMESIZE-13*$SZREG($sp)
+	$REG_L	\$12,$FRAMESIZE-14*$SZREG($sp)
+	$REG_L	$gp,$FRAMESIZE-15*$SZREG($sp)
+___
+$code.=<<___;
+	jr	$ra
+	$PTR_ADD $sp,$FRAMESIZE
+.end	AES_encrypt
+___
+
+$code.=<<___;
+.align	5
+.ent	_mips_AES_decrypt
+_mips_AES_decrypt:
+	.frame	$sp,0,$ra
+	.set	reorder
+	lw	$t0,0($key)
+	lw	$t1,4($key)
+	lw	$t2,8($key)
+	lw	$t3,12($key)
+	lw	$cnt,240($key)
+	$PTR_ADD $key0,$key,16
+
+	xor	$s0,$t0
+	xor	$s1,$t1
+	xor	$s2,$t2
+	xor	$s3,$t3
+
+	subu	$cnt,1
+#if defined(__mips_smartmips)
+	ext	$i0,$s3,16,8
+.Loop_dec:
+	ext	$i1,$s0,16,8
+	ext	$i2,$s1,16,8
+	ext	$i3,$s2,16,8
+	lwxs	$t0,$i0($Tbl)		# Td1[s3>>16]
+	ext	$i0,$s2,8,8
+	lwxs	$t1,$i1($Tbl)		# Td1[s0>>16]
+	ext	$i1,$s3,8,8
+	lwxs	$t2,$i2($Tbl)		# Td1[s1>>16]
+	ext	$i2,$s0,8,8
+	lwxs	$t3,$i3($Tbl)		# Td1[s2>>16]
+	ext	$i3,$s1,8,8
+
+	lwxs	$t4,$i0($Tbl)		# Td2[s2>>8]
+	ext	$i0,$s1,0,8
+	lwxs	$t5,$i1($Tbl)		# Td2[s3>>8]
+	ext	$i1,$s2,0,8
+	lwxs	$t6,$i2($Tbl)		# Td2[s0>>8]
+	ext	$i2,$s3,0,8
+	lwxs	$t7,$i3($Tbl)		# Td2[s1>>8]
+	ext	$i3,$s0,0,8
+
+	lwxs	$t8,$i0($Tbl)		# Td3[s1]
+	ext	$i0,$s0,24,8
+	lwxs	$t9,$i1($Tbl)		# Td3[s2]
+	ext	$i1,$s1,24,8
+	lwxs	$t10,$i2($Tbl)		# Td3[s3]
+	ext	$i2,$s2,24,8
+	lwxs	$t11,$i3($Tbl)		# Td3[s0]
+	ext	$i3,$s3,24,8
+
+	rotr	$t0,$t0,8
+	rotr	$t1,$t1,8
+	rotr	$t2,$t2,8
+	rotr	$t3,$t3,8
+
+	rotr	$t4,$t4,16
+	rotr	$t5,$t5,16
+	rotr	$t6,$t6,16
+	rotr	$t7,$t7,16
+
+	xor	$t0,$t4
+	lwxs	$t4,$i0($Tbl)		# Td0[s0>>24]
+	xor	$t1,$t5
+	lwxs	$t5,$i1($Tbl)		# Td0[s1>>24]
+	xor	$t2,$t6
+	lwxs	$t6,$i2($Tbl)		# Td0[s2>>24]
+	xor	$t3,$t7
+	lwxs	$t7,$i3($Tbl)		# Td0[s3>>24]
+
+	rotr	$t8,$t8,24
+	lw	$s0,0($key0)
+	rotr	$t9,$t9,24
+	lw	$s1,4($key0)
+	rotr	$t10,$t10,24
+	lw	$s2,8($key0)
+	rotr	$t11,$t11,24
+	lw	$s3,12($key0)
+
+	xor	$t0,$t8
+	xor	$t1,$t9
+	xor	$t2,$t10
+	xor	$t3,$t11
+
+	xor	$t0,$t4
+	xor	$t1,$t5
+	xor	$t2,$t6
+	xor	$t3,$t7
+
+	subu	$cnt,1
+	$PTR_ADD $key0,16
+	xor	$s0,$t0
+	xor	$s1,$t1
+	xor	$s2,$t2
+	xor	$s3,$t3
+	.set	noreorder
+	bnez	$cnt,.Loop_dec
+	ext	$i0,$s3,16,8
+
+	_xtr	$i0,$s3,16-2
+#else
+	_xtr	$i0,$s3,16-2
+.Loop_dec:
+	_xtr	$i1,$s0,16-2
+	_xtr	$i2,$s1,16-2
+	_xtr	$i3,$s2,16-2
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+	lw	$t0,0($i0)		# Td1[s3>>16]
+	_xtr	$i0,$s2,8-2
+	lw	$t1,0($i1)		# Td1[s0>>16]
+	_xtr	$i1,$s3,8-2
+	lw	$t2,0($i2)		# Td1[s1>>16]
+	_xtr	$i2,$s0,8-2
+	lw	$t3,0($i3)		# Td1[s2>>16]
+	_xtr	$i3,$s1,8-2
+#else
+	lwl	$t0,3($i0)		# Td1[s3>>16]
+	lwl	$t1,3($i1)		# Td1[s0>>16]
+	lwl	$t2,3($i2)		# Td1[s1>>16]
+	lwl	$t3,3($i3)		# Td1[s2>>16]
+	lwr	$t0,2($i0)		# Td1[s3>>16]
+	_xtr	$i0,$s2,8-2
+	lwr	$t1,2($i1)		# Td1[s0>>16]
+	_xtr	$i1,$s3,8-2
+	lwr	$t2,2($i2)		# Td1[s1>>16]
+	_xtr	$i2,$s0,8-2
+	lwr	$t3,2($i3)		# Td1[s2>>16]
+	_xtr	$i3,$s1,8-2
+#endif
+
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+	rotr	$t0,$t0,8
+	rotr	$t1,$t1,8
+	rotr	$t2,$t2,8
+	rotr	$t3,$t3,8
+# if defined(_MIPSEL)
+	lw	$t4,0($i0)		# Td2[s2>>8]
+	_xtr	$i0,$s1,0-2
+	lw	$t5,0($i1)		# Td2[s3>>8]
+	_xtr	$i1,$s2,0-2
+	lw	$t6,0($i2)		# Td2[s0>>8]
+	_xtr	$i2,$s3,0-2
+	lw	$t7,0($i3)		# Td2[s1>>8]
+	_xtr	$i3,$s0,0-2
+
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+	lw	$t8,0($i0)		# Td3[s1]
+	$PTR_INS $i0,$s0,2,8
+	lw	$t9,0($i1)		# Td3[s2]
+	$PTR_INS $i1,$s1,2,8
+	lw	$t10,0($i2)		# Td3[s3]
+	$PTR_INS $i2,$s2,2,8
+	lw	$t11,0($i3)		# Td3[s0]
+	$PTR_INS $i3,$s3,2,8
+#else
+	lw	$t4,0($i0)		# Td2[s2>>8]
+	$PTR_INS $i0,$s1,2,8
+	lw	$t5,0($i1)		# Td2[s3>>8]
+	$PTR_INS $i1,$s2,2,8
+	lw	$t6,0($i2)		# Td2[s0>>8]
+	$PTR_INS $i2,$s3,2,8
+	lw	$t7,0($i3)		# Td2[s1>>8]
+	$PTR_INS $i3,$s0,2,8
+
+	lw	$t8,0($i0)		# Td3[s1]
+	_xtr	$i0,$s0,24-2
+	lw	$t9,0($i1)		# Td3[s2]
+	_xtr	$i1,$s1,24-2
+	lw	$t10,0($i2)		# Td3[s3]
+	_xtr	$i2,$s2,24-2
+	lw	$t11,0($i3)		# Td3[s0]
+	_xtr	$i3,$s3,24-2
+
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+#endif
+	rotr	$t4,$t4,16
+	rotr	$t5,$t5,16
+	rotr	$t6,$t6,16
+	rotr	$t7,$t7,16
+
+	rotr	$t8,$t8,24
+	rotr	$t9,$t9,24
+	rotr	$t10,$t10,24
+	rotr	$t11,$t11,24
+#else
+	lwl	$t4,2($i0)		# Td2[s2>>8]
+	lwl	$t5,2($i1)		# Td2[s3>>8]
+	lwl	$t6,2($i2)		# Td2[s0>>8]
+	lwl	$t7,2($i3)		# Td2[s1>>8]
+	lwr	$t4,1($i0)		# Td2[s2>>8]
+	_xtr	$i0,$s1,0-2
+	lwr	$t5,1($i1)		# Td2[s3>>8]
+	_xtr	$i1,$s2,0-2
+	lwr	$t6,1($i2)		# Td2[s0>>8]
+	_xtr	$i2,$s3,0-2
+	lwr	$t7,1($i3)		# Td2[s1>>8]
+	_xtr	$i3,$s0,0-2
+
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+	lwl	$t8,1($i0)		# Td3[s1]
+	lwl	$t9,1($i1)		# Td3[s2]
+	lwl	$t10,1($i2)		# Td3[s3]
+	lwl	$t11,1($i3)		# Td3[s0]
+	lwr	$t8,0($i0)		# Td3[s1]
+	_xtr	$i0,$s0,24-2
+	lwr	$t9,0($i1)		# Td3[s2]
+	_xtr	$i1,$s1,24-2
+	lwr	$t10,0($i2)		# Td3[s3]
+	_xtr	$i2,$s2,24-2
+	lwr	$t11,0($i3)		# Td3[s0]
+	_xtr	$i3,$s3,24-2
+
+	and	$i0,0x3fc
+	and	$i1,0x3fc
+	and	$i2,0x3fc
+	and	$i3,0x3fc
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+#endif
+
+	xor	$t0,$t4
+	lw	$t4,0($i0)		# Td0[s0>>24]
+	xor	$t1,$t5
+	lw	$t5,0($i1)		# Td0[s1>>24]
+	xor	$t2,$t6
+	lw	$t6,0($i2)		# Td0[s2>>24]
+	xor	$t3,$t7
+	lw	$t7,0($i3)		# Td0[s3>>24]
+
+	xor	$t0,$t8
+	lw	$s0,0($key0)
+	xor	$t1,$t9
+	lw	$s1,4($key0)
+	xor	$t2,$t10
+	lw	$s2,8($key0)
+	xor	$t3,$t11
+	lw	$s3,12($key0)
+
+	xor	$t0,$t4
+	xor	$t1,$t5
+	xor	$t2,$t6
+	xor	$t3,$t7
+
+	subu	$cnt,1
+	$PTR_ADD $key0,16
+	xor	$s0,$t0
+	xor	$s1,$t1
+	xor	$s2,$t2
+	xor	$s3,$t3
+	.set	noreorder
+	bnez	$cnt,.Loop_dec
+	_xtr	$i0,$s3,16-2
+#endif
+
+	.set	reorder
+	lw	$t4,1024($Tbl)		# prefetch Td4
+	_xtr	$i0,$s3,16
+	lw	$t5,1024+32($Tbl)
+	_xtr	$i1,$s0,16
+	lw	$t6,1024+64($Tbl)
+	_xtr	$i2,$s1,16
+	lw	$t7,1024+96($Tbl)
+	_xtr	$i3,$s2,16
+	lw	$t8,1024+128($Tbl)
+	and	$i0,0xff
+	lw	$t9,1024+160($Tbl)
+	and	$i1,0xff
+	lw	$t10,1024+192($Tbl)
+	and	$i2,0xff
+	lw	$t11,1024+224($Tbl)
+	and	$i3,0xff
+
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+	lbu	$t0,1024($i0)		# Td4[s3>>16]
+	_xtr	$i0,$s2,8
+	lbu	$t1,1024($i1)		# Td4[s0>>16]
+	_xtr	$i1,$s3,8
+	lbu	$t2,1024($i2)		# Td4[s1>>16]
+	_xtr	$i2,$s0,8
+	lbu	$t3,1024($i3)		# Td4[s2>>16]
+	_xtr	$i3,$s1,8
+
+	and	$i0,0xff
+	and	$i1,0xff
+	and	$i2,0xff
+	and	$i3,0xff
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+# if defined(_MIPSEL)
+	lbu	$t4,1024($i0)		# Td4[s2>>8]
+	$PTR_INS $i0,$s0,0,8
+	lbu	$t5,1024($i1)		# Td4[s3>>8]
+	$PTR_INS $i1,$s1,0,8
+	lbu	$t6,1024($i2)		# Td4[s0>>8]
+	$PTR_INS $i2,$s2,0,8
+	lbu	$t7,1024($i3)		# Td4[s1>>8]
+	$PTR_INS $i3,$s3,0,8
+
+	lbu	$t8,1024($i0)		# Td4[s0>>24]
+	_xtr	$i0,$s1,0
+	lbu	$t9,1024($i1)		# Td4[s1>>24]
+	_xtr	$i1,$s2,0
+	lbu	$t10,1024($i2)		# Td4[s2>>24]
+	_xtr	$i2,$s3,0
+	lbu	$t11,1024($i3)		# Td4[s3>>24]
+	_xtr	$i3,$s0,0
+
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+# else
+	lbu	$t4,1024($i0)		# Td4[s2>>8]
+	_xtr	$i0,$s0,24
+	lbu	$t5,1024($i1)		# Td4[s3>>8]
+	_xtr	$i1,$s1,24
+	lbu	$t6,1024($i2)		# Td4[s0>>8]
+	_xtr	$i2,$s2,24
+	lbu	$t7,1024($i3)		# Td4[s1>>8]
+	_xtr	$i3,$s3,24
+
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+	lbu	$t8,1024($i0)		# Td4[s0>>24]
+	$PTR_INS $i0,$s1,0,8
+	lbu	$t9,1024($i1)		# Td4[s1>>24]
+	$PTR_INS $i1,$s2,0,8
+	lbu	$t10,1024($i2)		# Td4[s2>>24]
+	$PTR_INS $i2,$s3,0,8
+	lbu	$t11,1024($i3)		# Td4[s3>>24]
+	$PTR_INS $i3,$s0,0,8
+# endif
+	_ins	$t0,16
+	_ins	$t1,16
+	_ins	$t2,16
+	_ins	$t3,16
+
+	_ins2	$t0,$t4,8
+	lbu	$t4,1024($i0)		# Td4[s1]
+	_ins2	$t1,$t5,8
+	lbu	$t5,1024($i1)		# Td4[s2]
+	_ins2	$t2,$t6,8
+	lbu	$t6,1024($i2)		# Td4[s3]
+	_ins2	$t3,$t7,8
+	lbu	$t7,1024($i3)		# Td4[s0]
+
+	_ins2	$t0,$t8,24
+	lw	$s0,0($key0)
+	_ins2	$t1,$t9,24
+	lw	$s1,4($key0)
+	_ins2	$t2,$t10,24
+	lw	$s2,8($key0)
+	_ins2	$t3,$t11,24
+	lw	$s3,12($key0)
+
+	_ins2	$t0,$t4,0
+	_ins2	$t1,$t5,0
+	_ins2	$t2,$t6,0
+	_ins2	$t3,$t7,0
+#else
+	lbu	$t4,1024($i0)		# Td4[s2>>8]
+	_xtr	$i0,$s0,24
+	lbu	$t5,1024($i1)		# Td4[s3>>8]
+	_xtr	$i1,$s1,24
+	lbu	$t6,1024($i2)		# Td4[s0>>8]
+	_xtr	$i2,$s2,24
+	lbu	$t7,1024($i3)		# Td4[s1>>8]
+	_xtr	$i3,$s3,24
+
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+	lbu	$t8,1024($i0)		# Td4[s0>>24]
+	_xtr	$i0,$s1,0
+	lbu	$t9,1024($i1)		# Td4[s1>>24]
+	_xtr	$i1,$s2,0
+	lbu	$t10,1024($i2)		# Td4[s2>>24]
+	_xtr	$i2,$s3,0
+	lbu	$t11,1024($i3)		# Td4[s3>>24]
+	_xtr	$i3,$s0,0
+
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+
+	_ins	$t0,16
+	_ins	$t1,16
+	_ins	$t2,16
+	_ins	$t3,16
+
+	_ins	$t4,8
+	_ins	$t5,8
+	_ins	$t6,8
+	_ins	$t7,8
+
+	xor	$t0,$t4
+	lbu	$t4,1024($i0)		# Td4[s1]
+	xor	$t1,$t5
+	lbu	$t5,1024($i1)		# Td4[s2]
+	xor	$t2,$t6
+	lbu	$t6,1024($i2)		# Td4[s3]
+	xor	$t3,$t7
+	lbu	$t7,1024($i3)		# Td4[s0]
+
+	_ins	$t8,24
+	lw	$s0,0($key0)
+	_ins	$t9,24
+	lw	$s1,4($key0)
+	_ins	$t10,24
+	lw	$s2,8($key0)
+	_ins	$t11,24
+	lw	$s3,12($key0)
+
+	xor	$t0,$t8
+	xor	$t1,$t9
+	xor	$t2,$t10
+	xor	$t3,$t11
+
+	_ins	$t4,0
+	_ins	$t5,0
+	_ins	$t6,0
+	_ins	$t7,0
+
+	xor	$t0,$t4
+	xor	$t1,$t5
+	xor	$t2,$t6
+	xor	$t3,$t7
+#endif
+
+	xor	$s0,$t0
+	xor	$s1,$t1
+	xor	$s2,$t2
+	xor	$s3,$t3
+
+	jr	$ra
+.end	_mips_AES_decrypt
+
+.align	5
+.globl	AES_decrypt
+.ent	AES_decrypt
+AES_decrypt:
+	.frame	$sp,$FRAMESIZE,$ra
+	.mask	$SAVED_REGS_MASK,-$SZREG
+	.set	noreorder
+___
+$code.=<<___ if ($flavour =~ /o32/i);	# o32 PIC-ification
+	.cpload	$pf
+___
+$code.=<<___;
+	$PTR_SUB $sp,$FRAMESIZE
+	$REG_S	$ra,$FRAMESIZE-1*$SZREG($sp)
+	$REG_S	$fp,$FRAMESIZE-2*$SZREG($sp)
+	$REG_S	$s11,$FRAMESIZE-3*$SZREG($sp)
+	$REG_S	$s10,$FRAMESIZE-4*$SZREG($sp)
+	$REG_S	$s9,$FRAMESIZE-5*$SZREG($sp)
+	$REG_S	$s8,$FRAMESIZE-6*$SZREG($sp)
+	$REG_S	$s7,$FRAMESIZE-7*$SZREG($sp)
+	$REG_S	$s6,$FRAMESIZE-8*$SZREG($sp)
+	$REG_S	$s5,$FRAMESIZE-9*$SZREG($sp)
+	$REG_S	$s4,$FRAMESIZE-10*$SZREG($sp)
+___
+$code.=<<___ if ($flavour =~ /nubi/i);	# optimize non-nubi prologue
+	$REG_S	\$15,$FRAMESIZE-11*$SZREG($sp)
+	$REG_S	\$14,$FRAMESIZE-12*$SZREG($sp)
+	$REG_S	\$13,$FRAMESIZE-13*$SZREG($sp)
+	$REG_S	\$12,$FRAMESIZE-14*$SZREG($sp)
+	$REG_S	$gp,$FRAMESIZE-15*$SZREG($sp)
+___
+$code.=<<___ if ($flavour !~ /o32/i);	# non-o32 PIC-ification
+	.cplocal	$Tbl
+	.cpsetup	$pf,$zero,AES_decrypt
+___
+$code.=<<___;
+	.set	reorder
+	$PTR_LA	$Tbl,AES_Td		# PIC-ified 'load address'
+
+#if defined(_MIPS_ARCH_MIPS32R6) || defined(_MIPS_ARCH_MIPS64R6)
+	lw	$s0,0($inp)
+	lw	$s1,4($inp)
+	lw	$s2,8($inp)
+	lw	$s3,12($inp)
+#else
+	lwl	$s0,0+$MSB($inp)
+	lwl	$s1,4+$MSB($inp)
+	lwl	$s2,8+$MSB($inp)
+	lwl	$s3,12+$MSB($inp)
+	lwr	$s0,0+$LSB($inp)
+	lwr	$s1,4+$LSB($inp)
+	lwr	$s2,8+$LSB($inp)
+	lwr	$s3,12+$LSB($inp)
+#endif
+
+	bal	_mips_AES_decrypt
+
+#if defined(_MIPS_ARCH_MIPS32R6) || defined(_MIPS_ARCH_MIPS64R6)
+	sw	$s0,0($out)
+	sw	$s1,4($out)
+	sw	$s2,8($out)
+	sw	$s3,12($out)
+#else
+	swr	$s0,0+$LSB($out)
+	swr	$s1,4+$LSB($out)
+	swr	$s2,8+$LSB($out)
+	swr	$s3,12+$LSB($out)
+	swl	$s0,0+$MSB($out)
+	swl	$s1,4+$MSB($out)
+	swl	$s2,8+$MSB($out)
+	swl	$s3,12+$MSB($out)
+#endif
+
+	.set	noreorder
+	$REG_L	$ra,$FRAMESIZE-1*$SZREG($sp)
+	$REG_L	$fp,$FRAMESIZE-2*$SZREG($sp)
+	$REG_L	$s11,$FRAMESIZE-3*$SZREG($sp)
+	$REG_L	$s10,$FRAMESIZE-4*$SZREG($sp)
+	$REG_L	$s9,$FRAMESIZE-5*$SZREG($sp)
+	$REG_L	$s8,$FRAMESIZE-6*$SZREG($sp)
+	$REG_L	$s7,$FRAMESIZE-7*$SZREG($sp)
+	$REG_L	$s6,$FRAMESIZE-8*$SZREG($sp)
+	$REG_L	$s5,$FRAMESIZE-9*$SZREG($sp)
+	$REG_L	$s4,$FRAMESIZE-10*$SZREG($sp)
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	\$15,$FRAMESIZE-11*$SZREG($sp)
+	$REG_L	\$14,$FRAMESIZE-12*$SZREG($sp)
+	$REG_L	\$13,$FRAMESIZE-13*$SZREG($sp)
+	$REG_L	\$12,$FRAMESIZE-14*$SZREG($sp)
+	$REG_L	$gp,$FRAMESIZE-15*$SZREG($sp)
+___
+$code.=<<___;
+	jr	$ra
+	$PTR_ADD $sp,$FRAMESIZE
+.end	AES_decrypt
+___
+}}}
+
+{{{
+my $FRAMESIZE=8*$SZREG;
+my $SAVED_REGS_MASK = ($flavour =~ /nubi/i) ? "0xc000f008" : "0xc0000000";
+
+my ($inp,$bits,$key,$Tbl)=($a0,$a1,$a2,$a3);
+my ($rk0,$rk1,$rk2,$rk3,$rk4,$rk5,$rk6,$rk7)=($a4,$a5,$a6,$a7,$s0,$s1,$s2,$s3);
+my ($i0,$i1,$i2,$i3)=($at,$t0,$t1,$t2);
+my ($rcon,$cnt)=($gp,$fp);
+
+$code.=<<___;
+.align	5
+.ent	_mips_AES_set_encrypt_key
+_mips_AES_set_encrypt_key:
+	.frame	$sp,0,$ra
+	.set	noreorder
+	beqz	$inp,.Lekey_done
+	li	$t0,-1
+	beqz	$key,.Lekey_done
+	$PTR_ADD $rcon,$Tbl,256
+
+	.set	reorder
+#if defined(_MIPS_ARCH_MIPS32R6) || defined(_MIPS_ARCH_MIPS64R6)
+	lw	$rk0,0($inp)		# load 128 bits
+	lw	$rk1,4($inp)
+	lw	$rk2,8($inp)
+	lw	$rk3,12($inp)
+#else
+	lwl	$rk0,0+$MSB($inp)	# load 128 bits
+	lwl	$rk1,4+$MSB($inp)
+	lwl	$rk2,8+$MSB($inp)
+	lwl	$rk3,12+$MSB($inp)
+	lwr	$rk0,0+$LSB($inp)
+	lwr	$rk1,4+$LSB($inp)
+	lwr	$rk2,8+$LSB($inp)
+	lwr	$rk3,12+$LSB($inp)
+#endif
+	li	$at,128
+	.set	noreorder
+	beq	$bits,$at,.L128bits
+	li	$cnt,10
+
+	.set	reorder
+#if defined(_MIPS_ARCH_MIPS32R6) || defined(_MIPS_ARCH_MIPS64R6)
+	lw	$rk4,16($inp)		# load 192 bits
+	lw	$rk5,20($inp)
+#else
+	lwl	$rk4,16+$MSB($inp)	# load 192 bits
+	lwl	$rk5,20+$MSB($inp)
+	lwr	$rk4,16+$LSB($inp)
+	lwr	$rk5,20+$LSB($inp)
+#endif
+	li	$at,192
+	.set	noreorder
+	beq	$bits,$at,.L192bits
+	li	$cnt,8
+
+	.set	reorder
+#if defined(_MIPS_ARCH_MIPS32R6) || defined(_MIPS_ARCH_MIPS64R6)
+	lw	$rk6,24($inp)		# load 256 bits
+	lw	$rk7,28($inp)
+#else
+	lwl	$rk6,24+$MSB($inp)	# load 256 bits
+	lwl	$rk7,28+$MSB($inp)
+	lwr	$rk6,24+$LSB($inp)
+	lwr	$rk7,28+$LSB($inp)
+#endif
+	li	$at,256
+	.set	noreorder
+	beq	$bits,$at,.L256bits
+	li	$cnt,7
+
+	b	.Lekey_done
+	li	$t0,-2
+
+.align	4
+.L128bits:
+	.set	reorder
+	srl	$i0,$rk3,16
+	srl	$i1,$rk3,8
+	and	$i0,0xff
+	and	$i1,0xff
+	and	$i2,$rk3,0xff
+	srl	$i3,$rk3,24
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+	lbu	$i0,0($i0)
+	lbu	$i1,0($i1)
+	lbu	$i2,0($i2)
+	lbu	$i3,0($i3)
+
+	sw	$rk0,0($key)
+	sw	$rk1,4($key)
+	sw	$rk2,8($key)
+	sw	$rk3,12($key)
+	subu	$cnt,1
+	$PTR_ADD $key,16
+
+	_bias	$i0,24
+	_bias	$i1,16
+	_bias	$i2,8
+	_bias	$i3,0
+
+	xor	$rk0,$i0
+	lw	$i0,0($rcon)
+	xor	$rk0,$i1
+	xor	$rk0,$i2
+	xor	$rk0,$i3
+	xor	$rk0,$i0
+
+	xor	$rk1,$rk0
+	xor	$rk2,$rk1
+	xor	$rk3,$rk2
+
+	.set	noreorder
+	bnez	$cnt,.L128bits
+	$PTR_ADD $rcon,4
+
+	sw	$rk0,0($key)
+	sw	$rk1,4($key)
+	sw	$rk2,8($key)
+	li	$cnt,10
+	sw	$rk3,12($key)
+	li	$t0,0
+	sw	$cnt,80($key)
+	b	.Lekey_done
+	$PTR_SUB $key,10*16
+
+.align	4
+.L192bits:
+	.set	reorder
+	srl	$i0,$rk5,16
+	srl	$i1,$rk5,8
+	and	$i0,0xff
+	and	$i1,0xff
+	and	$i2,$rk5,0xff
+	srl	$i3,$rk5,24
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+	lbu	$i0,0($i0)
+	lbu	$i1,0($i1)
+	lbu	$i2,0($i2)
+	lbu	$i3,0($i3)
+
+	sw	$rk0,0($key)
+	sw	$rk1,4($key)
+	sw	$rk2,8($key)
+	sw	$rk3,12($key)
+	sw	$rk4,16($key)
+	sw	$rk5,20($key)
+	subu	$cnt,1
+	$PTR_ADD $key,24
+
+	_bias	$i0,24
+	_bias	$i1,16
+	_bias	$i2,8
+	_bias	$i3,0
+
+	xor	$rk0,$i0
+	lw	$i0,0($rcon)
+	xor	$rk0,$i1
+	xor	$rk0,$i2
+	xor	$rk0,$i3
+	xor	$rk0,$i0
+
+	xor	$rk1,$rk0
+	xor	$rk2,$rk1
+	xor	$rk3,$rk2
+	xor	$rk4,$rk3
+	xor	$rk5,$rk4
+
+	.set	noreorder
+	bnez	$cnt,.L192bits
+	$PTR_ADD $rcon,4
+
+	sw	$rk0,0($key)
+	sw	$rk1,4($key)
+	sw	$rk2,8($key)
+	li	$cnt,12
+	sw	$rk3,12($key)
+	li	$t0,0
+	sw	$cnt,48($key)
+	b	.Lekey_done
+	$PTR_SUB $key,12*16
+
+.align	4
+.L256bits:
+	.set	reorder
+	srl	$i0,$rk7,16
+	srl	$i1,$rk7,8
+	and	$i0,0xff
+	and	$i1,0xff
+	and	$i2,$rk7,0xff
+	srl	$i3,$rk7,24
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+	lbu	$i0,0($i0)
+	lbu	$i1,0($i1)
+	lbu	$i2,0($i2)
+	lbu	$i3,0($i3)
+
+	sw	$rk0,0($key)
+	sw	$rk1,4($key)
+	sw	$rk2,8($key)
+	sw	$rk3,12($key)
+	sw	$rk4,16($key)
+	sw	$rk5,20($key)
+	sw	$rk6,24($key)
+	sw	$rk7,28($key)
+	subu	$cnt,1
+
+	_bias	$i0,24
+	_bias	$i1,16
+	_bias	$i2,8
+	_bias	$i3,0
+
+	xor	$rk0,$i0
+	lw	$i0,0($rcon)
+	xor	$rk0,$i1
+	xor	$rk0,$i2
+	xor	$rk0,$i3
+	xor	$rk0,$i0
+
+	xor	$rk1,$rk0
+	xor	$rk2,$rk1
+	xor	$rk3,$rk2
+	beqz	$cnt,.L256bits_done
+
+	srl	$i0,$rk3,24
+	srl	$i1,$rk3,16
+	srl	$i2,$rk3,8
+	and	$i3,$rk3,0xff
+	and	$i1,0xff
+	and	$i2,0xff
+	$PTR_ADD $i0,$Tbl
+	$PTR_ADD $i1,$Tbl
+	$PTR_ADD $i2,$Tbl
+	$PTR_ADD $i3,$Tbl
+	lbu	$i0,0($i0)
+	lbu	$i1,0($i1)
+	lbu	$i2,0($i2)
+	lbu	$i3,0($i3)
+	sll	$i0,24
+	sll	$i1,16
+	sll	$i2,8
+
+	xor	$rk4,$i0
+	xor	$rk4,$i1
+	xor	$rk4,$i2
+	xor	$rk4,$i3
+
+	xor	$rk5,$rk4
+	xor	$rk6,$rk5
+	xor	$rk7,$rk6
+
+	$PTR_ADD $key,32
+	.set	noreorder
+	b	.L256bits
+	$PTR_ADD $rcon,4
+
+.L256bits_done:
+	sw	$rk0,32($key)
+	sw	$rk1,36($key)
+	sw	$rk2,40($key)
+	li	$cnt,14
+	sw	$rk3,44($key)
+	li	$t0,0
+	sw	$cnt,48($key)
+	$PTR_SUB $key,12*16
+
+.Lekey_done:
+	jr	$ra
+	nop
+.end	_mips_AES_set_encrypt_key
+
+.globl	AES_set_encrypt_key
+.ent	AES_set_encrypt_key
+AES_set_encrypt_key:
+	.frame	$sp,$FRAMESIZE,$ra
+	.mask	$SAVED_REGS_MASK,-$SZREG
+	.set	noreorder
+___
+$code.=<<___ if ($flavour =~ /o32/i);	# o32 PIC-ification
+	.cpload	$pf
+___
+$code.=<<___;
+	$PTR_SUB $sp,$FRAMESIZE
+	$REG_S	$ra,$FRAMESIZE-1*$SZREG($sp)
+	$REG_S	$fp,$FRAMESIZE-2*$SZREG($sp)
+___
+$code.=<<___ if ($flavour =~ /nubi/i);	# optimize non-nubi prologue
+	$REG_S	$s3,$FRAMESIZE-3*$SZREG($sp)
+	$REG_S	$s2,$FRAMESIZE-4*$SZREG($sp)
+	$REG_S	$s1,$FRAMESIZE-5*$SZREG($sp)
+	$REG_S	$s0,$FRAMESIZE-6*$SZREG($sp)
+	$REG_S	$gp,$FRAMESIZE-7*$SZREG($sp)
+___
+$code.=<<___ if ($flavour !~ /o32/i);	# non-o32 PIC-ification
+	.cplocal	$Tbl
+	.cpsetup	$pf,$zero,AES_set_encrypt_key
+___
+$code.=<<___;
+	.set	reorder
+	$PTR_LA	$Tbl,AES_Te4		# PIC-ified 'load address'
+
+	bal	_mips_AES_set_encrypt_key
+
+	.set	noreorder
+	move	$a0,$t0
+	$REG_L	$ra,$FRAMESIZE-1*$SZREG($sp)
+	$REG_L	$fp,$FRAMESIZE-2*$SZREG($sp)
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	$s3,$FRAMESIZE-11*$SZREG($sp)
+	$REG_L	$s2,$FRAMESIZE-12*$SZREG($sp)
+	$REG_L	$s1,$FRAMESIZE-13*$SZREG($sp)
+	$REG_L	$s0,$FRAMESIZE-14*$SZREG($sp)
+	$REG_L	$gp,$FRAMESIZE-15*$SZREG($sp)
+___
+$code.=<<___;
+	jr	$ra
+	$PTR_ADD $sp,$FRAMESIZE
+.end	AES_set_encrypt_key
+___
+
+my ($head,$tail)=($inp,$bits);
+my ($tp1,$tp2,$tp4,$tp8,$tp9,$tpb,$tpd,$tpe)=($a4,$a5,$a6,$a7,$s0,$s1,$s2,$s3);
+my ($m,$x80808080,$x7f7f7f7f,$x1b1b1b1b)=($at,$t0,$t1,$t2);
+$code.=<<___;
+.align	5
+.globl	AES_set_decrypt_key
+.ent	AES_set_decrypt_key
+AES_set_decrypt_key:
+	.frame	$sp,$FRAMESIZE,$ra
+	.mask	$SAVED_REGS_MASK,-$SZREG
+	.set	noreorder
+___
+$code.=<<___ if ($flavour =~ /o32/i);	# o32 PIC-ification
+	.cpload	$pf
+___
+$code.=<<___;
+	$PTR_SUB $sp,$FRAMESIZE
+	$REG_S	$ra,$FRAMESIZE-1*$SZREG($sp)
+	$REG_S	$fp,$FRAMESIZE-2*$SZREG($sp)
+___
+$code.=<<___ if ($flavour =~ /nubi/i);	# optimize non-nubi prologue
+	$REG_S	$s3,$FRAMESIZE-3*$SZREG($sp)
+	$REG_S	$s2,$FRAMESIZE-4*$SZREG($sp)
+	$REG_S	$s1,$FRAMESIZE-5*$SZREG($sp)
+	$REG_S	$s0,$FRAMESIZE-6*$SZREG($sp)
+	$REG_S	$gp,$FRAMESIZE-7*$SZREG($sp)
+___
+$code.=<<___ if ($flavour !~ /o32/i);	# non-o32 PIC-ification
+	.cplocal	$Tbl
+	.cpsetup	$pf,$zero,AES_set_decrypt_key
+___
+$code.=<<___;
+	.set	reorder
+	$PTR_LA	$Tbl,AES_Te4		# PIC-ified 'load address'
+
+	bal	_mips_AES_set_encrypt_key
+
+	bltz	$t0,.Ldkey_done
+
+	sll	$at,$cnt,4
+	$PTR_ADD $head,$key,0
+	$PTR_ADD $tail,$key,$at
+.align	4
+.Lswap:
+	lw	$rk0,0($head)
+	lw	$rk1,4($head)
+	lw	$rk2,8($head)
+	lw	$rk3,12($head)
+	lw	$rk4,0($tail)
+	lw	$rk5,4($tail)
+	lw	$rk6,8($tail)
+	lw	$rk7,12($tail)
+	sw	$rk0,0($tail)
+	sw	$rk1,4($tail)
+	sw	$rk2,8($tail)
+	sw	$rk3,12($tail)
+	$PTR_ADD $head,16
+	$PTR_SUB $tail,16
+	sw	$rk4,-16($head)
+	sw	$rk5,-12($head)
+	sw	$rk6,-8($head)
+	sw	$rk7,-4($head)
+	bne	$head,$tail,.Lswap
+
+	lw	$tp1,16($key)		# modulo-scheduled
+	lui	$x80808080,0x8080
+	subu	$cnt,1
+	or	$x80808080,0x8080
+	sll	$cnt,2
+	$PTR_ADD $key,16
+	lui	$x1b1b1b1b,0x1b1b
+	nor	$x7f7f7f7f,$zero,$x80808080
+	or	$x1b1b1b1b,0x1b1b
+.align	4
+.Lmix:
+	and	$m,$tp1,$x80808080
+	and	$tp2,$tp1,$x7f7f7f7f
+	srl	$tp4,$m,7
+	addu	$tp2,$tp2		# tp2<<1
+	subu	$m,$tp4
+	and	$m,$x1b1b1b1b
+	xor	$tp2,$m
+
+	and	$m,$tp2,$x80808080
+	and	$tp4,$tp2,$x7f7f7f7f
+	srl	$tp8,$m,7
+	addu	$tp4,$tp4		# tp4<<1
+	subu	$m,$tp8
+	and	$m,$x1b1b1b1b
+	xor	$tp4,$m
+
+	and	$m,$tp4,$x80808080
+	and	$tp8,$tp4,$x7f7f7f7f
+	srl	$tp9,$m,7
+	addu	$tp8,$tp8		# tp8<<1
+	subu	$m,$tp9
+	and	$m,$x1b1b1b1b
+	xor	$tp8,$m
+
+	xor	$tp9,$tp8,$tp1
+	xor	$tpe,$tp8,$tp4
+	xor	$tpb,$tp9,$tp2
+	xor	$tpd,$tp9,$tp4
+
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+	rotr	$tp1,$tpd,16
+	 xor	$tpe,$tp2
+	rotr	$tp2,$tp9,8
+	xor	$tpe,$tp1
+	rotr	$tp4,$tpb,24
+	xor	$tpe,$tp2
+	lw	$tp1,4($key)		# modulo-scheduled
+	xor	$tpe,$tp4
+#else
+	_ror	$tp1,$tpd,16
+	 xor	$tpe,$tp2
+	_ror	$tp2,$tpd,-16
+	xor	$tpe,$tp1
+	_ror	$tp1,$tp9,8
+	xor	$tpe,$tp2
+	_ror	$tp2,$tp9,-24
+	xor	$tpe,$tp1
+	_ror	$tp1,$tpb,24
+	xor	$tpe,$tp2
+	_ror	$tp2,$tpb,-8
+	xor	$tpe,$tp1
+	lw	$tp1,4($key)		# modulo-scheduled
+	xor	$tpe,$tp2
+#endif
+	subu	$cnt,1
+	sw	$tpe,0($key)
+	$PTR_ADD $key,4
+	bnez	$cnt,.Lmix
+
+	li	$t0,0
+.Ldkey_done:
+	.set	noreorder
+	move	$a0,$t0
+	$REG_L	$ra,$FRAMESIZE-1*$SZREG($sp)
+	$REG_L	$fp,$FRAMESIZE-2*$SZREG($sp)
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	$s3,$FRAMESIZE-11*$SZREG($sp)
+	$REG_L	$s2,$FRAMESIZE-12*$SZREG($sp)
+	$REG_L	$s1,$FRAMESIZE-13*$SZREG($sp)
+	$REG_L	$s0,$FRAMESIZE-14*$SZREG($sp)
+	$REG_L	$gp,$FRAMESIZE-15*$SZREG($sp)
+___
+$code.=<<___;
+	jr	$ra
+	$PTR_ADD $sp,$FRAMESIZE
+.end	AES_set_decrypt_key
+___
+}}}
+
+######################################################################
+# Tables are kept in endian-neutral manner
+$code.=<<___;
+.rdata
+.align	10
+AES_Te:
+.byte	0xc6,0x63,0x63,0xa5,	0xf8,0x7c,0x7c,0x84	# Te0
+.byte	0xee,0x77,0x77,0x99,	0xf6,0x7b,0x7b,0x8d
+.byte	0xff,0xf2,0xf2,0x0d,	0xd6,0x6b,0x6b,0xbd
+.byte	0xde,0x6f,0x6f,0xb1,	0x91,0xc5,0xc5,0x54
+.byte	0x60,0x30,0x30,0x50,	0x02,0x01,0x01,0x03
+.byte	0xce,0x67,0x67,0xa9,	0x56,0x2b,0x2b,0x7d
+.byte	0xe7,0xfe,0xfe,0x19,	0xb5,0xd7,0xd7,0x62
+.byte	0x4d,0xab,0xab,0xe6,	0xec,0x76,0x76,0x9a
+.byte	0x8f,0xca,0xca,0x45,	0x1f,0x82,0x82,0x9d
+.byte	0x89,0xc9,0xc9,0x40,	0xfa,0x7d,0x7d,0x87
+.byte	0xef,0xfa,0xfa,0x15,	0xb2,0x59,0x59,0xeb
+.byte	0x8e,0x47,0x47,0xc9,	0xfb,0xf0,0xf0,0x0b
+.byte	0x41,0xad,0xad,0xec,	0xb3,0xd4,0xd4,0x67
+.byte	0x5f,0xa2,0xa2,0xfd,	0x45,0xaf,0xaf,0xea
+.byte	0x23,0x9c,0x9c,0xbf,	0x53,0xa4,0xa4,0xf7
+.byte	0xe4,0x72,0x72,0x96,	0x9b,0xc0,0xc0,0x5b
+.byte	0x75,0xb7,0xb7,0xc2,	0xe1,0xfd,0xfd,0x1c
+.byte	0x3d,0x93,0x93,0xae,	0x4c,0x26,0x26,0x6a
+.byte	0x6c,0x36,0x36,0x5a,	0x7e,0x3f,0x3f,0x41
+.byte	0xf5,0xf7,0xf7,0x02,	0x83,0xcc,0xcc,0x4f
+.byte	0x68,0x34,0x34,0x5c,	0x51,0xa5,0xa5,0xf4
+.byte	0xd1,0xe5,0xe5,0x34,	0xf9,0xf1,0xf1,0x08
+.byte	0xe2,0x71,0x71,0x93,	0xab,0xd8,0xd8,0x73
+.byte	0x62,0x31,0x31,0x53,	0x2a,0x15,0x15,0x3f
+.byte	0x08,0x04,0x04,0x0c,	0x95,0xc7,0xc7,0x52
+.byte	0x46,0x23,0x23,0x65,	0x9d,0xc3,0xc3,0x5e
+.byte	0x30,0x18,0x18,0x28,	0x37,0x96,0x96,0xa1
+.byte	0x0a,0x05,0x05,0x0f,	0x2f,0x9a,0x9a,0xb5
+.byte	0x0e,0x07,0x07,0x09,	0x24,0x12,0x12,0x36
+.byte	0x1b,0x80,0x80,0x9b,	0xdf,0xe2,0xe2,0x3d
+.byte	0xcd,0xeb,0xeb,0x26,	0x4e,0x27,0x27,0x69
+.byte	0x7f,0xb2,0xb2,0xcd,	0xea,0x75,0x75,0x9f
+.byte	0x12,0x09,0x09,0x1b,	0x1d,0x83,0x83,0x9e
+.byte	0x58,0x2c,0x2c,0x74,	0x34,0x1a,0x1a,0x2e
+.byte	0x36,0x1b,0x1b,0x2d,	0xdc,0x6e,0x6e,0xb2
+.byte	0xb4,0x5a,0x5a,0xee,	0x5b,0xa0,0xa0,0xfb
+.byte	0xa4,0x52,0x52,0xf6,	0x76,0x3b,0x3b,0x4d
+.byte	0xb7,0xd6,0xd6,0x61,	0x7d,0xb3,0xb3,0xce
+.byte	0x52,0x29,0x29,0x7b,	0xdd,0xe3,0xe3,0x3e
+.byte	0x5e,0x2f,0x2f,0x71,	0x13,0x84,0x84,0x97
+.byte	0xa6,0x53,0x53,0xf5,	0xb9,0xd1,0xd1,0x68
+.byte	0x00,0x00,0x00,0x00,	0xc1,0xed,0xed,0x2c
+.byte	0x40,0x20,0x20,0x60,	0xe3,0xfc,0xfc,0x1f
+.byte	0x79,0xb1,0xb1,0xc8,	0xb6,0x5b,0x5b,0xed
+.byte	0xd4,0x6a,0x6a,0xbe,	0x8d,0xcb,0xcb,0x46
+.byte	0x67,0xbe,0xbe,0xd9,	0x72,0x39,0x39,0x4b
+.byte	0x94,0x4a,0x4a,0xde,	0x98,0x4c,0x4c,0xd4
+.byte	0xb0,0x58,0x58,0xe8,	0x85,0xcf,0xcf,0x4a
+.byte	0xbb,0xd0,0xd0,0x6b,	0xc5,0xef,0xef,0x2a
+.byte	0x4f,0xaa,0xaa,0xe5,	0xed,0xfb,0xfb,0x16
+.byte	0x86,0x43,0x43,0xc5,	0x9a,0x4d,0x4d,0xd7
+.byte	0x66,0x33,0x33,0x55,	0x11,0x85,0x85,0x94
+.byte	0x8a,0x45,0x45,0xcf,	0xe9,0xf9,0xf9,0x10
+.byte	0x04,0x02,0x02,0x06,	0xfe,0x7f,0x7f,0x81
+.byte	0xa0,0x50,0x50,0xf0,	0x78,0x3c,0x3c,0x44
+.byte	0x25,0x9f,0x9f,0xba,	0x4b,0xa8,0xa8,0xe3
+.byte	0xa2,0x51,0x51,0xf3,	0x5d,0xa3,0xa3,0xfe
+.byte	0x80,0x40,0x40,0xc0,	0x05,0x8f,0x8f,0x8a
+.byte	0x3f,0x92,0x92,0xad,	0x21,0x9d,0x9d,0xbc
+.byte	0x70,0x38,0x38,0x48,	0xf1,0xf5,0xf5,0x04
+.byte	0x63,0xbc,0xbc,0xdf,	0x77,0xb6,0xb6,0xc1
+.byte	0xaf,0xda,0xda,0x75,	0x42,0x21,0x21,0x63
+.byte	0x20,0x10,0x10,0x30,	0xe5,0xff,0xff,0x1a
+.byte	0xfd,0xf3,0xf3,0x0e,	0xbf,0xd2,0xd2,0x6d
+.byte	0x81,0xcd,0xcd,0x4c,	0x18,0x0c,0x0c,0x14
+.byte	0x26,0x13,0x13,0x35,	0xc3,0xec,0xec,0x2f
+.byte	0xbe,0x5f,0x5f,0xe1,	0x35,0x97,0x97,0xa2
+.byte	0x88,0x44,0x44,0xcc,	0x2e,0x17,0x17,0x39
+.byte	0x93,0xc4,0xc4,0x57,	0x55,0xa7,0xa7,0xf2
+.byte	0xfc,0x7e,0x7e,0x82,	0x7a,0x3d,0x3d,0x47
+.byte	0xc8,0x64,0x64,0xac,	0xba,0x5d,0x5d,0xe7
+.byte	0x32,0x19,0x19,0x2b,	0xe6,0x73,0x73,0x95
+.byte	0xc0,0x60,0x60,0xa0,	0x19,0x81,0x81,0x98
+.byte	0x9e,0x4f,0x4f,0xd1,	0xa3,0xdc,0xdc,0x7f
+.byte	0x44,0x22,0x22,0x66,	0x54,0x2a,0x2a,0x7e
+.byte	0x3b,0x90,0x90,0xab,	0x0b,0x88,0x88,0x83
+.byte	0x8c,0x46,0x46,0xca,	0xc7,0xee,0xee,0x29
+.byte	0x6b,0xb8,0xb8,0xd3,	0x28,0x14,0x14,0x3c
+.byte	0xa7,0xde,0xde,0x79,	0xbc,0x5e,0x5e,0xe2
+.byte	0x16,0x0b,0x0b,0x1d,	0xad,0xdb,0xdb,0x76
+.byte	0xdb,0xe0,0xe0,0x3b,	0x64,0x32,0x32,0x56
+.byte	0x74,0x3a,0x3a,0x4e,	0x14,0x0a,0x0a,0x1e
+.byte	0x92,0x49,0x49,0xdb,	0x0c,0x06,0x06,0x0a
+.byte	0x48,0x24,0x24,0x6c,	0xb8,0x5c,0x5c,0xe4
+.byte	0x9f,0xc2,0xc2,0x5d,	0xbd,0xd3,0xd3,0x6e
+.byte	0x43,0xac,0xac,0xef,	0xc4,0x62,0x62,0xa6
+.byte	0x39,0x91,0x91,0xa8,	0x31,0x95,0x95,0xa4
+.byte	0xd3,0xe4,0xe4,0x37,	0xf2,0x79,0x79,0x8b
+.byte	0xd5,0xe7,0xe7,0x32,	0x8b,0xc8,0xc8,0x43
+.byte	0x6e,0x37,0x37,0x59,	0xda,0x6d,0x6d,0xb7
+.byte	0x01,0x8d,0x8d,0x8c,	0xb1,0xd5,0xd5,0x64
+.byte	0x9c,0x4e,0x4e,0xd2,	0x49,0xa9,0xa9,0xe0
+.byte	0xd8,0x6c,0x6c,0xb4,	0xac,0x56,0x56,0xfa
+.byte	0xf3,0xf4,0xf4,0x07,	0xcf,0xea,0xea,0x25
+.byte	0xca,0x65,0x65,0xaf,	0xf4,0x7a,0x7a,0x8e
+.byte	0x47,0xae,0xae,0xe9,	0x10,0x08,0x08,0x18
+.byte	0x6f,0xba,0xba,0xd5,	0xf0,0x78,0x78,0x88
+.byte	0x4a,0x25,0x25,0x6f,	0x5c,0x2e,0x2e,0x72
+.byte	0x38,0x1c,0x1c,0x24,	0x57,0xa6,0xa6,0xf1
+.byte	0x73,0xb4,0xb4,0xc7,	0x97,0xc6,0xc6,0x51
+.byte	0xcb,0xe8,0xe8,0x23,	0xa1,0xdd,0xdd,0x7c
+.byte	0xe8,0x74,0x74,0x9c,	0x3e,0x1f,0x1f,0x21
+.byte	0x96,0x4b,0x4b,0xdd,	0x61,0xbd,0xbd,0xdc
+.byte	0x0d,0x8b,0x8b,0x86,	0x0f,0x8a,0x8a,0x85
+.byte	0xe0,0x70,0x70,0x90,	0x7c,0x3e,0x3e,0x42
+.byte	0x71,0xb5,0xb5,0xc4,	0xcc,0x66,0x66,0xaa
+.byte	0x90,0x48,0x48,0xd8,	0x06,0x03,0x03,0x05
+.byte	0xf7,0xf6,0xf6,0x01,	0x1c,0x0e,0x0e,0x12
+.byte	0xc2,0x61,0x61,0xa3,	0x6a,0x35,0x35,0x5f
+.byte	0xae,0x57,0x57,0xf9,	0x69,0xb9,0xb9,0xd0
+.byte	0x17,0x86,0x86,0x91,	0x99,0xc1,0xc1,0x58
+.byte	0x3a,0x1d,0x1d,0x27,	0x27,0x9e,0x9e,0xb9
+.byte	0xd9,0xe1,0xe1,0x38,	0xeb,0xf8,0xf8,0x13
+.byte	0x2b,0x98,0x98,0xb3,	0x22,0x11,0x11,0x33
+.byte	0xd2,0x69,0x69,0xbb,	0xa9,0xd9,0xd9,0x70
+.byte	0x07,0x8e,0x8e,0x89,	0x33,0x94,0x94,0xa7
+.byte	0x2d,0x9b,0x9b,0xb6,	0x3c,0x1e,0x1e,0x22
+.byte	0x15,0x87,0x87,0x92,	0xc9,0xe9,0xe9,0x20
+.byte	0x87,0xce,0xce,0x49,	0xaa,0x55,0x55,0xff
+.byte	0x50,0x28,0x28,0x78,	0xa5,0xdf,0xdf,0x7a
+.byte	0x03,0x8c,0x8c,0x8f,	0x59,0xa1,0xa1,0xf8
+.byte	0x09,0x89,0x89,0x80,	0x1a,0x0d,0x0d,0x17
+.byte	0x65,0xbf,0xbf,0xda,	0xd7,0xe6,0xe6,0x31
+.byte	0x84,0x42,0x42,0xc6,	0xd0,0x68,0x68,0xb8
+.byte	0x82,0x41,0x41,0xc3,	0x29,0x99,0x99,0xb0
+.byte	0x5a,0x2d,0x2d,0x77,	0x1e,0x0f,0x0f,0x11
+.byte	0x7b,0xb0,0xb0,0xcb,	0xa8,0x54,0x54,0xfc
+.byte	0x6d,0xbb,0xbb,0xd6,	0x2c,0x16,0x16,0x3a
+
+AES_Td:
+.byte	0x51,0xf4,0xa7,0x50,	0x7e,0x41,0x65,0x53	# Td0
+.byte	0x1a,0x17,0xa4,0xc3,	0x3a,0x27,0x5e,0x96
+.byte	0x3b,0xab,0x6b,0xcb,	0x1f,0x9d,0x45,0xf1
+.byte	0xac,0xfa,0x58,0xab,	0x4b,0xe3,0x03,0x93
+.byte	0x20,0x30,0xfa,0x55,	0xad,0x76,0x6d,0xf6
+.byte	0x88,0xcc,0x76,0x91,	0xf5,0x02,0x4c,0x25
+.byte	0x4f,0xe5,0xd7,0xfc,	0xc5,0x2a,0xcb,0xd7
+.byte	0x26,0x35,0x44,0x80,	0xb5,0x62,0xa3,0x8f
+.byte	0xde,0xb1,0x5a,0x49,	0x25,0xba,0x1b,0x67
+.byte	0x45,0xea,0x0e,0x98,	0x5d,0xfe,0xc0,0xe1
+.byte	0xc3,0x2f,0x75,0x02,	0x81,0x4c,0xf0,0x12
+.byte	0x8d,0x46,0x97,0xa3,	0x6b,0xd3,0xf9,0xc6
+.byte	0x03,0x8f,0x5f,0xe7,	0x15,0x92,0x9c,0x95
+.byte	0xbf,0x6d,0x7a,0xeb,	0x95,0x52,0x59,0xda
+.byte	0xd4,0xbe,0x83,0x2d,	0x58,0x74,0x21,0xd3
+.byte	0x49,0xe0,0x69,0x29,	0x8e,0xc9,0xc8,0x44
+.byte	0x75,0xc2,0x89,0x6a,	0xf4,0x8e,0x79,0x78
+.byte	0x99,0x58,0x3e,0x6b,	0x27,0xb9,0x71,0xdd
+.byte	0xbe,0xe1,0x4f,0xb6,	0xf0,0x88,0xad,0x17
+.byte	0xc9,0x20,0xac,0x66,	0x7d,0xce,0x3a,0xb4
+.byte	0x63,0xdf,0x4a,0x18,	0xe5,0x1a,0x31,0x82
+.byte	0x97,0x51,0x33,0x60,	0x62,0x53,0x7f,0x45
+.byte	0xb1,0x64,0x77,0xe0,	0xbb,0x6b,0xae,0x84
+.byte	0xfe,0x81,0xa0,0x1c,	0xf9,0x08,0x2b,0x94
+.byte	0x70,0x48,0x68,0x58,	0x8f,0x45,0xfd,0x19
+.byte	0x94,0xde,0x6c,0x87,	0x52,0x7b,0xf8,0xb7
+.byte	0xab,0x73,0xd3,0x23,	0x72,0x4b,0x02,0xe2
+.byte	0xe3,0x1f,0x8f,0x57,	0x66,0x55,0xab,0x2a
+.byte	0xb2,0xeb,0x28,0x07,	0x2f,0xb5,0xc2,0x03
+.byte	0x86,0xc5,0x7b,0x9a,	0xd3,0x37,0x08,0xa5
+.byte	0x30,0x28,0x87,0xf2,	0x23,0xbf,0xa5,0xb2
+.byte	0x02,0x03,0x6a,0xba,	0xed,0x16,0x82,0x5c
+.byte	0x8a,0xcf,0x1c,0x2b,	0xa7,0x79,0xb4,0x92
+.byte	0xf3,0x07,0xf2,0xf0,	0x4e,0x69,0xe2,0xa1
+.byte	0x65,0xda,0xf4,0xcd,	0x06,0x05,0xbe,0xd5
+.byte	0xd1,0x34,0x62,0x1f,	0xc4,0xa6,0xfe,0x8a
+.byte	0x34,0x2e,0x53,0x9d,	0xa2,0xf3,0x55,0xa0
+.byte	0x05,0x8a,0xe1,0x32,	0xa4,0xf6,0xeb,0x75
+.byte	0x0b,0x83,0xec,0x39,	0x40,0x60,0xef,0xaa
+.byte	0x5e,0x71,0x9f,0x06,	0xbd,0x6e,0x10,0x51
+.byte	0x3e,0x21,0x8a,0xf9,	0x96,0xdd,0x06,0x3d
+.byte	0xdd,0x3e,0x05,0xae,	0x4d,0xe6,0xbd,0x46
+.byte	0x91,0x54,0x8d,0xb5,	0x71,0xc4,0x5d,0x05
+.byte	0x04,0x06,0xd4,0x6f,	0x60,0x50,0x15,0xff
+.byte	0x19,0x98,0xfb,0x24,	0xd6,0xbd,0xe9,0x97
+.byte	0x89,0x40,0x43,0xcc,	0x67,0xd9,0x9e,0x77
+.byte	0xb0,0xe8,0x42,0xbd,	0x07,0x89,0x8b,0x88
+.byte	0xe7,0x19,0x5b,0x38,	0x79,0xc8,0xee,0xdb
+.byte	0xa1,0x7c,0x0a,0x47,	0x7c,0x42,0x0f,0xe9
+.byte	0xf8,0x84,0x1e,0xc9,	0x00,0x00,0x00,0x00
+.byte	0x09,0x80,0x86,0x83,	0x32,0x2b,0xed,0x48
+.byte	0x1e,0x11,0x70,0xac,	0x6c,0x5a,0x72,0x4e
+.byte	0xfd,0x0e,0xff,0xfb,	0x0f,0x85,0x38,0x56
+.byte	0x3d,0xae,0xd5,0x1e,	0x36,0x2d,0x39,0x27
+.byte	0x0a,0x0f,0xd9,0x64,	0x68,0x5c,0xa6,0x21
+.byte	0x9b,0x5b,0x54,0xd1,	0x24,0x36,0x2e,0x3a
+.byte	0x0c,0x0a,0x67,0xb1,	0x93,0x57,0xe7,0x0f
+.byte	0xb4,0xee,0x96,0xd2,	0x1b,0x9b,0x91,0x9e
+.byte	0x80,0xc0,0xc5,0x4f,	0x61,0xdc,0x20,0xa2
+.byte	0x5a,0x77,0x4b,0x69,	0x1c,0x12,0x1a,0x16
+.byte	0xe2,0x93,0xba,0x0a,	0xc0,0xa0,0x2a,0xe5
+.byte	0x3c,0x22,0xe0,0x43,	0x12,0x1b,0x17,0x1d
+.byte	0x0e,0x09,0x0d,0x0b,	0xf2,0x8b,0xc7,0xad
+.byte	0x2d,0xb6,0xa8,0xb9,	0x14,0x1e,0xa9,0xc8
+.byte	0x57,0xf1,0x19,0x85,	0xaf,0x75,0x07,0x4c
+.byte	0xee,0x99,0xdd,0xbb,	0xa3,0x7f,0x60,0xfd
+.byte	0xf7,0x01,0x26,0x9f,	0x5c,0x72,0xf5,0xbc
+.byte	0x44,0x66,0x3b,0xc5,	0x5b,0xfb,0x7e,0x34
+.byte	0x8b,0x43,0x29,0x76,	0xcb,0x23,0xc6,0xdc
+.byte	0xb6,0xed,0xfc,0x68,	0xb8,0xe4,0xf1,0x63
+.byte	0xd7,0x31,0xdc,0xca,	0x42,0x63,0x85,0x10
+.byte	0x13,0x97,0x22,0x40,	0x84,0xc6,0x11,0x20
+.byte	0x85,0x4a,0x24,0x7d,	0xd2,0xbb,0x3d,0xf8
+.byte	0xae,0xf9,0x32,0x11,	0xc7,0x29,0xa1,0x6d
+.byte	0x1d,0x9e,0x2f,0x4b,	0xdc,0xb2,0x30,0xf3
+.byte	0x0d,0x86,0x52,0xec,	0x77,0xc1,0xe3,0xd0
+.byte	0x2b,0xb3,0x16,0x6c,	0xa9,0x70,0xb9,0x99
+.byte	0x11,0x94,0x48,0xfa,	0x47,0xe9,0x64,0x22
+.byte	0xa8,0xfc,0x8c,0xc4,	0xa0,0xf0,0x3f,0x1a
+.byte	0x56,0x7d,0x2c,0xd8,	0x22,0x33,0x90,0xef
+.byte	0x87,0x49,0x4e,0xc7,	0xd9,0x38,0xd1,0xc1
+.byte	0x8c,0xca,0xa2,0xfe,	0x98,0xd4,0x0b,0x36
+.byte	0xa6,0xf5,0x81,0xcf,	0xa5,0x7a,0xde,0x28
+.byte	0xda,0xb7,0x8e,0x26,	0x3f,0xad,0xbf,0xa4
+.byte	0x2c,0x3a,0x9d,0xe4,	0x50,0x78,0x92,0x0d
+.byte	0x6a,0x5f,0xcc,0x9b,	0x54,0x7e,0x46,0x62
+.byte	0xf6,0x8d,0x13,0xc2,	0x90,0xd8,0xb8,0xe8
+.byte	0x2e,0x39,0xf7,0x5e,	0x82,0xc3,0xaf,0xf5
+.byte	0x9f,0x5d,0x80,0xbe,	0x69,0xd0,0x93,0x7c
+.byte	0x6f,0xd5,0x2d,0xa9,	0xcf,0x25,0x12,0xb3
+.byte	0xc8,0xac,0x99,0x3b,	0x10,0x18,0x7d,0xa7
+.byte	0xe8,0x9c,0x63,0x6e,	0xdb,0x3b,0xbb,0x7b
+.byte	0xcd,0x26,0x78,0x09,	0x6e,0x59,0x18,0xf4
+.byte	0xec,0x9a,0xb7,0x01,	0x83,0x4f,0x9a,0xa8
+.byte	0xe6,0x95,0x6e,0x65,	0xaa,0xff,0xe6,0x7e
+.byte	0x21,0xbc,0xcf,0x08,	0xef,0x15,0xe8,0xe6
+.byte	0xba,0xe7,0x9b,0xd9,	0x4a,0x6f,0x36,0xce
+.byte	0xea,0x9f,0x09,0xd4,	0x29,0xb0,0x7c,0xd6
+.byte	0x31,0xa4,0xb2,0xaf,	0x2a,0x3f,0x23,0x31
+.byte	0xc6,0xa5,0x94,0x30,	0x35,0xa2,0x66,0xc0
+.byte	0x74,0x4e,0xbc,0x37,	0xfc,0x82,0xca,0xa6
+.byte	0xe0,0x90,0xd0,0xb0,	0x33,0xa7,0xd8,0x15
+.byte	0xf1,0x04,0x98,0x4a,	0x41,0xec,0xda,0xf7
+.byte	0x7f,0xcd,0x50,0x0e,	0x17,0x91,0xf6,0x2f
+.byte	0x76,0x4d,0xd6,0x8d,	0x43,0xef,0xb0,0x4d
+.byte	0xcc,0xaa,0x4d,0x54,	0xe4,0x96,0x04,0xdf
+.byte	0x9e,0xd1,0xb5,0xe3,	0x4c,0x6a,0x88,0x1b
+.byte	0xc1,0x2c,0x1f,0xb8,	0x46,0x65,0x51,0x7f
+.byte	0x9d,0x5e,0xea,0x04,	0x01,0x8c,0x35,0x5d
+.byte	0xfa,0x87,0x74,0x73,	0xfb,0x0b,0x41,0x2e
+.byte	0xb3,0x67,0x1d,0x5a,	0x92,0xdb,0xd2,0x52
+.byte	0xe9,0x10,0x56,0x33,	0x6d,0xd6,0x47,0x13
+.byte	0x9a,0xd7,0x61,0x8c,	0x37,0xa1,0x0c,0x7a
+.byte	0x59,0xf8,0x14,0x8e,	0xeb,0x13,0x3c,0x89
+.byte	0xce,0xa9,0x27,0xee,	0xb7,0x61,0xc9,0x35
+.byte	0xe1,0x1c,0xe5,0xed,	0x7a,0x47,0xb1,0x3c
+.byte	0x9c,0xd2,0xdf,0x59,	0x55,0xf2,0x73,0x3f
+.byte	0x18,0x14,0xce,0x79,	0x73,0xc7,0x37,0xbf
+.byte	0x53,0xf7,0xcd,0xea,	0x5f,0xfd,0xaa,0x5b
+.byte	0xdf,0x3d,0x6f,0x14,	0x78,0x44,0xdb,0x86
+.byte	0xca,0xaf,0xf3,0x81,	0xb9,0x68,0xc4,0x3e
+.byte	0x38,0x24,0x34,0x2c,	0xc2,0xa3,0x40,0x5f
+.byte	0x16,0x1d,0xc3,0x72,	0xbc,0xe2,0x25,0x0c
+.byte	0x28,0x3c,0x49,0x8b,	0xff,0x0d,0x95,0x41
+.byte	0x39,0xa8,0x01,0x71,	0x08,0x0c,0xb3,0xde
+.byte	0xd8,0xb4,0xe4,0x9c,	0x64,0x56,0xc1,0x90
+.byte	0x7b,0xcb,0x84,0x61,	0xd5,0x32,0xb6,0x70
+.byte	0x48,0x6c,0x5c,0x74,	0xd0,0xb8,0x57,0x42
+
+.byte	0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38	# Td4
+.byte	0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb
+.byte	0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87
+.byte	0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb
+.byte	0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d
+.byte	0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e
+.byte	0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2
+.byte	0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25
+.byte	0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16
+.byte	0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92
+.byte	0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda
+.byte	0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84
+.byte	0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a
+.byte	0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06
+.byte	0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02
+.byte	0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b
+.byte	0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea
+.byte	0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73
+.byte	0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85
+.byte	0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e
+.byte	0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89
+.byte	0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b
+.byte	0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20
+.byte	0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4
+.byte	0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31
+.byte	0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f
+.byte	0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d
+.byte	0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef
+.byte	0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0
+.byte	0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61
+.byte	0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26
+.byte	0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d
+
+AES_Te4:
+.byte	0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5	# Te4
+.byte	0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76
+.byte	0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0
+.byte	0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0
+.byte	0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc
+.byte	0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15
+.byte	0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a
+.byte	0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75
+.byte	0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0
+.byte	0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84
+.byte	0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b
+.byte	0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf
+.byte	0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85
+.byte	0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8
+.byte	0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5
+.byte	0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2
+.byte	0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17
+.byte	0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73
+.byte	0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88
+.byte	0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb
+.byte	0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c
+.byte	0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79
+.byte	0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9
+.byte	0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08
+.byte	0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6
+.byte	0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a
+.byte	0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e
+.byte	0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e
+.byte	0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94
+.byte	0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf
+.byte	0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68
+.byte	0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16
+
+.byte	0x01,0x00,0x00,0x00,	0x02,0x00,0x00,0x00	# rcon
+.byte	0x04,0x00,0x00,0x00,	0x08,0x00,0x00,0x00
+.byte	0x10,0x00,0x00,0x00,	0x20,0x00,0x00,0x00
+.byte	0x40,0x00,0x00,0x00,	0x80,0x00,0x00,0x00
+.byte	0x1B,0x00,0x00,0x00,	0x36,0x00,0x00,0x00
+___
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	# made-up _instructions, _xtr, _ins, _ror and _bias, cope
+	# with byte order dependencies...
+	if (/^\s+_/) {
+	    s/(_[a-z]+\s+)(\$[0-9]+),([^,]+)(#.*)*$/$1$2,$2,$3/;
+
+	    s/_xtr\s+(\$[0-9]+),(\$[0-9]+),([0-9]+(\-2)*)/
+		sprintf("srl\t$1,$2,%d",$big_endian ?	eval($3)
+					:		eval("24-$3"))/e or
+	    s/_ins\s+(\$[0-9]+),(\$[0-9]+),([0-9]+)/
+		sprintf("sll\t$1,$2,%d",$big_endian ?	eval($3)
+					:		eval("24-$3"))/e or
+	    s/_ins2\s+(\$[0-9]+),(\$[0-9]+),([0-9]+)/
+		sprintf("ins\t$1,$2,%d,8",$big_endian ?	eval($3)
+					:		eval("24-$3"))/e or
+	    s/_ror\s+(\$[0-9]+),(\$[0-9]+),(\-?[0-9]+)/
+		sprintf("srl\t$1,$2,%d",$big_endian ?	eval($3)
+					:		eval("$3*-1"))/e or
+	    s/_bias\s+(\$[0-9]+),(\$[0-9]+),([0-9]+)/
+		sprintf("sll\t$1,$2,%d",$big_endian ?	eval($3)
+					:		eval("($3-16)&31"))/e;
+
+	    s/srl\s+(\$[0-9]+),(\$[0-9]+),\-([0-9]+)/
+		sprintf("sll\t$1,$2,$3")/e				or
+	    s/srl\s+(\$[0-9]+),(\$[0-9]+),0/
+		sprintf("and\t$1,$2,0xff")/e				or
+	    s/(sll\s+\$[0-9]+,\$[0-9]+,0)/#$1/;
+	}
+
+	# convert lwl/lwr and swr/swl to little-endian order
+	if (!$big_endian && /^\s+[sl]w[lr]\s+/) {
+	    s/([sl]wl.*)([0-9]+)\((\$[0-9]+)\)/
+		sprintf("$1%d($3)",eval("$2-$2%4+($2%4-1)&3"))/e	or
+	    s/([sl]wr.*)([0-9]+)\((\$[0-9]+)\)/
+		sprintf("$1%d($3)",eval("$2-$2%4+($2%4+1)&3"))/e;
+	}
+
+	if (!$big_endian) {
+	    s/(rotr\s+\$[0-9]+,\$[0-9]+),([0-9]+)/sprintf("$1,%d",32-$2)/e;
+	    s/(ext\s+\$[0-9]+,\$[0-9]+),([0-9]+),8/sprintf("$1,%d,8",24-$2)/e;
+	}
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-parisc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-parisc.pl
new file mode 100644
index 000000000..e817c757f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-parisc.pl
@@ -0,0 +1,1038 @@
+#! /usr/bin/env perl
+# Copyright 2009-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# AES for PA-RISC.
+#
+# June 2009.
+#
+# The module is mechanical transliteration of aes-sparcv9.pl, but with
+# a twist: S-boxes are compressed even further down to 1K+256B. On
+# PA-7100LC performance is ~40% better than gcc 3.2 generated code and
+# is about 33 cycles per byte processed with 128-bit key. Newer CPUs
+# perform at 16 cycles per byte. It's not faster than code generated
+# by vendor compiler, but recall that it has compressed S-boxes, which
+# requires extra processing.
+#
+# Special thanks to polarhome.com for providing HP-UX account.
+
+$flavour = shift;
+$output = shift;
+open STDOUT,">$output";
+
+if ($flavour =~ /64/) {
+	$LEVEL		="2.0W";
+	$SIZE_T		=8;
+	$FRAME_MARKER	=80;
+	$SAVED_RP	=16;
+	$PUSH		="std";
+	$PUSHMA		="std,ma";
+	$POP		="ldd";
+	$POPMB		="ldd,mb";
+} else {
+	$LEVEL		="1.0";
+	$SIZE_T		=4;
+	$FRAME_MARKER	=48;
+	$SAVED_RP	=20;
+	$PUSH		="stw";
+	$PUSHMA		="stwm";
+	$POP		="ldw";
+	$POPMB		="ldwm";
+}
+
+$FRAME=16*$SIZE_T+$FRAME_MARKER;# 16 saved regs + frame marker
+				#                 [+ argument transfer]
+$inp="%r26";	# arg0
+$out="%r25";	# arg1
+$key="%r24";	# arg2
+
+($s0,$s1,$s2,$s3) = ("%r1","%r2","%r3","%r4");
+($t0,$t1,$t2,$t3) = ("%r5","%r6","%r7","%r8");
+
+($acc0, $acc1, $acc2, $acc3, $acc4, $acc5, $acc6, $acc7,
+ $acc8, $acc9,$acc10,$acc11,$acc12,$acc13,$acc14,$acc15) =
+("%r9","%r10","%r11","%r12","%r13","%r14","%r15","%r16",
+"%r17","%r18","%r19","%r20","%r21","%r22","%r23","%r26");
+
+$tbl="%r28";
+$rounds="%r29";
+
+$code=<<___;
+	.LEVEL	$LEVEL
+	.SPACE	\$TEXT\$
+	.SUBSPA	\$CODE\$,QUAD=0,ALIGN=8,ACCESS=0x2C,CODE_ONLY
+
+	.EXPORT	AES_encrypt,ENTRY,ARGW0=GR,ARGW1=GR,ARGW2=GR
+	.ALIGN	64
+AES_encrypt
+	.PROC
+	.CALLINFO	FRAME=`$FRAME-16*$SIZE_T`,NO_CALLS,SAVE_RP,ENTRY_GR=18
+	.ENTRY
+	$PUSH	%r2,-$SAVED_RP(%sp)	; standard prologue
+	$PUSHMA	%r3,$FRAME(%sp)
+	$PUSH	%r4,`-$FRAME+1*$SIZE_T`(%sp)
+	$PUSH	%r5,`-$FRAME+2*$SIZE_T`(%sp)
+	$PUSH	%r6,`-$FRAME+3*$SIZE_T`(%sp)
+	$PUSH	%r7,`-$FRAME+4*$SIZE_T`(%sp)
+	$PUSH	%r8,`-$FRAME+5*$SIZE_T`(%sp)
+	$PUSH	%r9,`-$FRAME+6*$SIZE_T`(%sp)
+	$PUSH	%r10,`-$FRAME+7*$SIZE_T`(%sp)
+	$PUSH	%r11,`-$FRAME+8*$SIZE_T`(%sp)
+	$PUSH	%r12,`-$FRAME+9*$SIZE_T`(%sp)
+	$PUSH	%r13,`-$FRAME+10*$SIZE_T`(%sp)
+	$PUSH	%r14,`-$FRAME+11*$SIZE_T`(%sp)
+	$PUSH	%r15,`-$FRAME+12*$SIZE_T`(%sp)
+	$PUSH	%r16,`-$FRAME+13*$SIZE_T`(%sp)
+	$PUSH	%r17,`-$FRAME+14*$SIZE_T`(%sp)
+	$PUSH	%r18,`-$FRAME+15*$SIZE_T`(%sp)
+
+	blr	%r0,$tbl
+	ldi	3,$t0
+L\$enc_pic
+	andcm	$tbl,$t0,$tbl
+	ldo	L\$AES_Te-L\$enc_pic($tbl),$tbl
+
+	and	$inp,$t0,$t0
+	sub	$inp,$t0,$inp
+	ldw	0($inp),$s0
+	ldw	4($inp),$s1
+	ldw	8($inp),$s2
+	comib,=	0,$t0,L\$enc_inp_aligned
+	ldw	12($inp),$s3
+
+	sh3addl	$t0,%r0,$t0
+	subi	32,$t0,$t0
+	mtctl	$t0,%cr11
+	ldw	16($inp),$t1
+	vshd	$s0,$s1,$s0
+	vshd	$s1,$s2,$s1
+	vshd	$s2,$s3,$s2
+	vshd	$s3,$t1,$s3
+
+L\$enc_inp_aligned
+	bl	_parisc_AES_encrypt,%r31
+	nop
+
+	extru,<> $out,31,2,%r0
+	b	L\$enc_out_aligned
+	nop
+
+	_srm	$s0,24,$acc0
+	_srm	$s0,16,$acc1
+	stb	$acc0,0($out)
+	_srm	$s0,8,$acc2
+	stb	$acc1,1($out)
+	_srm	$s1,24,$acc4
+	stb	$acc2,2($out)
+	_srm	$s1,16,$acc5
+	stb	$s0,3($out)
+	_srm	$s1,8,$acc6
+	stb	$acc4,4($out)
+	_srm	$s2,24,$acc0
+	stb	$acc5,5($out)
+	_srm	$s2,16,$acc1
+	stb	$acc6,6($out)
+	_srm	$s2,8,$acc2
+	stb	$s1,7($out)
+	_srm	$s3,24,$acc4
+	stb	$acc0,8($out)
+	_srm	$s3,16,$acc5
+	stb	$acc1,9($out)
+	_srm	$s3,8,$acc6
+	stb	$acc2,10($out)
+	stb	$s2,11($out)
+	stb	$acc4,12($out)
+	stb	$acc5,13($out)
+	stb	$acc6,14($out)
+	b	L\$enc_done
+	stb	$s3,15($out)
+
+L\$enc_out_aligned
+	stw	$s0,0($out)
+	stw	$s1,4($out)
+	stw	$s2,8($out)
+	stw	$s3,12($out)
+
+L\$enc_done
+	$POP	`-$FRAME-$SAVED_RP`(%sp),%r2	; standard epilogue
+	$POP	`-$FRAME+1*$SIZE_T`(%sp),%r4
+	$POP	`-$FRAME+2*$SIZE_T`(%sp),%r5
+	$POP	`-$FRAME+3*$SIZE_T`(%sp),%r6
+	$POP	`-$FRAME+4*$SIZE_T`(%sp),%r7
+	$POP	`-$FRAME+5*$SIZE_T`(%sp),%r8
+	$POP	`-$FRAME+6*$SIZE_T`(%sp),%r9
+	$POP	`-$FRAME+7*$SIZE_T`(%sp),%r10
+	$POP	`-$FRAME+8*$SIZE_T`(%sp),%r11
+	$POP	`-$FRAME+9*$SIZE_T`(%sp),%r12
+	$POP	`-$FRAME+10*$SIZE_T`(%sp),%r13
+	$POP	`-$FRAME+11*$SIZE_T`(%sp),%r14
+	$POP	`-$FRAME+12*$SIZE_T`(%sp),%r15
+	$POP	`-$FRAME+13*$SIZE_T`(%sp),%r16
+	$POP	`-$FRAME+14*$SIZE_T`(%sp),%r17
+	$POP	`-$FRAME+15*$SIZE_T`(%sp),%r18
+	bv	(%r2)
+	.EXIT
+	$POPMB	-$FRAME(%sp),%r3
+	.PROCEND
+
+	.ALIGN	16
+_parisc_AES_encrypt
+	.PROC
+	.CALLINFO	MILLICODE
+	.ENTRY
+	ldw	240($key),$rounds
+	ldw	0($key),$t0
+	ldw	4($key),$t1
+	ldw	8($key),$t2
+	_srm	$rounds,1,$rounds
+	xor	$t0,$s0,$s0
+	ldw	12($key),$t3
+	_srm	$s0,24,$acc0
+	xor	$t1,$s1,$s1
+	ldw	16($key),$t0
+	_srm	$s1,16,$acc1
+	xor	$t2,$s2,$s2
+	ldw	20($key),$t1
+	xor	$t3,$s3,$s3
+	ldw	24($key),$t2
+	ldw	28($key),$t3
+L\$enc_loop
+	_srm	$s2,8,$acc2
+	ldwx,s	$acc0($tbl),$acc0
+	_srm	$s3,0,$acc3
+	ldwx,s	$acc1($tbl),$acc1
+	_srm	$s1,24,$acc4
+	ldwx,s	$acc2($tbl),$acc2
+	_srm	$s2,16,$acc5
+	ldwx,s	$acc3($tbl),$acc3
+	_srm	$s3,8,$acc6
+	ldwx,s	$acc4($tbl),$acc4
+	_srm	$s0,0,$acc7
+	ldwx,s	$acc5($tbl),$acc5
+	_srm	$s2,24,$acc8
+	ldwx,s	$acc6($tbl),$acc6
+	_srm	$s3,16,$acc9
+	ldwx,s	$acc7($tbl),$acc7
+	_srm	$s0,8,$acc10
+	ldwx,s	$acc8($tbl),$acc8
+	_srm	$s1,0,$acc11
+	ldwx,s	$acc9($tbl),$acc9
+	_srm	$s3,24,$acc12
+	ldwx,s	$acc10($tbl),$acc10
+	_srm	$s0,16,$acc13
+	ldwx,s	$acc11($tbl),$acc11
+	_srm	$s1,8,$acc14
+	ldwx,s	$acc12($tbl),$acc12
+	_srm	$s2,0,$acc15
+	ldwx,s	$acc13($tbl),$acc13
+	ldwx,s	$acc14($tbl),$acc14
+	ldwx,s	$acc15($tbl),$acc15
+	addib,= -1,$rounds,L\$enc_last
+	ldo	32($key),$key
+
+		_ror	$acc1,8,$acc1
+		xor	$acc0,$t0,$t0
+	ldw	0($key),$s0
+		_ror	$acc2,16,$acc2
+		xor	$acc1,$t0,$t0
+	ldw	4($key),$s1
+		_ror	$acc3,24,$acc3
+		xor	$acc2,$t0,$t0
+	ldw	8($key),$s2
+		_ror	$acc5,8,$acc5
+		xor	$acc3,$t0,$t0
+	ldw	12($key),$s3
+		_ror	$acc6,16,$acc6
+		xor	$acc4,$t1,$t1
+		_ror	$acc7,24,$acc7
+		xor	$acc5,$t1,$t1
+		_ror	$acc9,8,$acc9
+		xor	$acc6,$t1,$t1
+		_ror	$acc10,16,$acc10
+		xor	$acc7,$t1,$t1
+		_ror	$acc11,24,$acc11
+		xor	$acc8,$t2,$t2
+		_ror	$acc13,8,$acc13
+		xor	$acc9,$t2,$t2
+		_ror	$acc14,16,$acc14
+		xor	$acc10,$t2,$t2
+		_ror	$acc15,24,$acc15
+		xor	$acc11,$t2,$t2
+		xor	$acc12,$acc14,$acc14
+		xor	$acc13,$t3,$t3
+	_srm	$t0,24,$acc0
+		xor	$acc14,$t3,$t3
+	_srm	$t1,16,$acc1
+		xor	$acc15,$t3,$t3
+
+	_srm	$t2,8,$acc2
+	ldwx,s	$acc0($tbl),$acc0
+	_srm	$t3,0,$acc3
+	ldwx,s	$acc1($tbl),$acc1
+	_srm	$t1,24,$acc4
+	ldwx,s	$acc2($tbl),$acc2
+	_srm	$t2,16,$acc5
+	ldwx,s	$acc3($tbl),$acc3
+	_srm	$t3,8,$acc6
+	ldwx,s	$acc4($tbl),$acc4
+	_srm	$t0,0,$acc7
+	ldwx,s	$acc5($tbl),$acc5
+	_srm	$t2,24,$acc8
+	ldwx,s	$acc6($tbl),$acc6
+	_srm	$t3,16,$acc9
+	ldwx,s	$acc7($tbl),$acc7
+	_srm	$t0,8,$acc10
+	ldwx,s	$acc8($tbl),$acc8
+	_srm	$t1,0,$acc11
+	ldwx,s	$acc9($tbl),$acc9
+	_srm	$t3,24,$acc12
+	ldwx,s	$acc10($tbl),$acc10
+	_srm	$t0,16,$acc13
+	ldwx,s	$acc11($tbl),$acc11
+	_srm	$t1,8,$acc14
+	ldwx,s	$acc12($tbl),$acc12
+	_srm	$t2,0,$acc15
+	ldwx,s	$acc13($tbl),$acc13
+		_ror	$acc1,8,$acc1
+	ldwx,s	$acc14($tbl),$acc14
+
+		_ror	$acc2,16,$acc2
+		xor	$acc0,$s0,$s0
+	ldwx,s	$acc15($tbl),$acc15
+		_ror	$acc3,24,$acc3
+		xor	$acc1,$s0,$s0
+	ldw	16($key),$t0
+		_ror	$acc5,8,$acc5
+		xor	$acc2,$s0,$s0
+	ldw	20($key),$t1
+		_ror	$acc6,16,$acc6
+		xor	$acc3,$s0,$s0
+	ldw	24($key),$t2
+		_ror	$acc7,24,$acc7
+		xor	$acc4,$s1,$s1
+	ldw	28($key),$t3
+		_ror	$acc9,8,$acc9
+		xor	$acc5,$s1,$s1
+	ldw	1024+0($tbl),%r0		; prefetch te4
+		_ror	$acc10,16,$acc10
+		xor	$acc6,$s1,$s1
+	ldw	1024+32($tbl),%r0		; prefetch te4
+		_ror	$acc11,24,$acc11
+		xor	$acc7,$s1,$s1
+	ldw	1024+64($tbl),%r0		; prefetch te4
+		_ror	$acc13,8,$acc13
+		xor	$acc8,$s2,$s2
+	ldw	1024+96($tbl),%r0		; prefetch te4
+		_ror	$acc14,16,$acc14
+		xor	$acc9,$s2,$s2
+	ldw	1024+128($tbl),%r0		; prefetch te4
+		_ror	$acc15,24,$acc15
+		xor	$acc10,$s2,$s2
+	ldw	1024+160($tbl),%r0		; prefetch te4
+	_srm	$s0,24,$acc0
+		xor	$acc11,$s2,$s2
+	ldw	1024+192($tbl),%r0		; prefetch te4
+		xor	$acc12,$acc14,$acc14
+		xor	$acc13,$s3,$s3
+	ldw	1024+224($tbl),%r0		; prefetch te4
+	_srm	$s1,16,$acc1
+		xor	$acc14,$s3,$s3
+	b	L\$enc_loop
+		xor	$acc15,$s3,$s3
+
+	.ALIGN	16
+L\$enc_last
+	ldo	1024($tbl),$rounds
+		_ror	$acc1,8,$acc1
+		xor	$acc0,$t0,$t0
+	ldw	0($key),$s0
+		_ror	$acc2,16,$acc2
+		xor	$acc1,$t0,$t0
+	ldw	4($key),$s1
+		_ror	$acc3,24,$acc3
+		xor	$acc2,$t0,$t0
+	ldw	8($key),$s2
+		_ror	$acc5,8,$acc5
+		xor	$acc3,$t0,$t0
+	ldw	12($key),$s3
+		_ror	$acc6,16,$acc6
+		xor	$acc4,$t1,$t1
+		_ror	$acc7,24,$acc7
+		xor	$acc5,$t1,$t1
+		_ror	$acc9,8,$acc9
+		xor	$acc6,$t1,$t1
+		_ror	$acc10,16,$acc10
+		xor	$acc7,$t1,$t1
+		_ror	$acc11,24,$acc11
+		xor	$acc8,$t2,$t2
+		_ror	$acc13,8,$acc13
+		xor	$acc9,$t2,$t2
+		_ror	$acc14,16,$acc14
+		xor	$acc10,$t2,$t2
+		_ror	$acc15,24,$acc15
+		xor	$acc11,$t2,$t2
+		xor	$acc12,$acc14,$acc14
+		xor	$acc13,$t3,$t3
+	_srm	$t0,24,$acc0
+		xor	$acc14,$t3,$t3
+	_srm	$t1,16,$acc1
+		xor	$acc15,$t3,$t3
+
+	_srm	$t2,8,$acc2
+	ldbx	$acc0($rounds),$acc0
+	_srm	$t1,24,$acc4
+	ldbx	$acc1($rounds),$acc1
+	_srm	$t2,16,$acc5
+	_srm	$t3,0,$acc3
+	ldbx	$acc2($rounds),$acc2
+	ldbx	$acc3($rounds),$acc3
+	_srm	$t3,8,$acc6
+	ldbx	$acc4($rounds),$acc4
+	_srm	$t2,24,$acc8
+	ldbx	$acc5($rounds),$acc5
+	_srm	$t3,16,$acc9
+	_srm	$t0,0,$acc7
+	ldbx	$acc6($rounds),$acc6
+	ldbx	$acc7($rounds),$acc7
+	_srm	$t0,8,$acc10
+	ldbx	$acc8($rounds),$acc8
+	_srm	$t3,24,$acc12
+	ldbx	$acc9($rounds),$acc9
+	_srm	$t0,16,$acc13
+	_srm	$t1,0,$acc11
+	ldbx	$acc10($rounds),$acc10
+	_srm	$t1,8,$acc14
+	ldbx	$acc11($rounds),$acc11
+	ldbx	$acc12($rounds),$acc12
+	ldbx	$acc13($rounds),$acc13
+	_srm	$t2,0,$acc15
+	ldbx	$acc14($rounds),$acc14
+
+		dep	$acc0,7,8,$acc3
+	ldbx	$acc15($rounds),$acc15
+		dep	$acc4,7,8,$acc7
+		dep	$acc1,15,8,$acc3
+		dep	$acc5,15,8,$acc7
+		dep	$acc2,23,8,$acc3
+		dep	$acc6,23,8,$acc7
+		xor	$acc3,$s0,$s0
+		xor	$acc7,$s1,$s1
+		dep	$acc8,7,8,$acc11
+		dep	$acc12,7,8,$acc15
+		dep	$acc9,15,8,$acc11
+		dep	$acc13,15,8,$acc15
+		dep	$acc10,23,8,$acc11
+		dep	$acc14,23,8,$acc15
+		xor	$acc11,$s2,$s2
+
+	bv	(%r31)
+	.EXIT
+		xor	$acc15,$s3,$s3
+	.PROCEND
+
+	.ALIGN	64
+L\$AES_Te
+	.WORD	0xc66363a5, 0xf87c7c84, 0xee777799, 0xf67b7b8d
+	.WORD	0xfff2f20d, 0xd66b6bbd, 0xde6f6fb1, 0x91c5c554
+	.WORD	0x60303050, 0x02010103, 0xce6767a9, 0x562b2b7d
+	.WORD	0xe7fefe19, 0xb5d7d762, 0x4dababe6, 0xec76769a
+	.WORD	0x8fcaca45, 0x1f82829d, 0x89c9c940, 0xfa7d7d87
+	.WORD	0xeffafa15, 0xb25959eb, 0x8e4747c9, 0xfbf0f00b
+	.WORD	0x41adadec, 0xb3d4d467, 0x5fa2a2fd, 0x45afafea
+	.WORD	0x239c9cbf, 0x53a4a4f7, 0xe4727296, 0x9bc0c05b
+	.WORD	0x75b7b7c2, 0xe1fdfd1c, 0x3d9393ae, 0x4c26266a
+	.WORD	0x6c36365a, 0x7e3f3f41, 0xf5f7f702, 0x83cccc4f
+	.WORD	0x6834345c, 0x51a5a5f4, 0xd1e5e534, 0xf9f1f108
+	.WORD	0xe2717193, 0xabd8d873, 0x62313153, 0x2a15153f
+	.WORD	0x0804040c, 0x95c7c752, 0x46232365, 0x9dc3c35e
+	.WORD	0x30181828, 0x379696a1, 0x0a05050f, 0x2f9a9ab5
+	.WORD	0x0e070709, 0x24121236, 0x1b80809b, 0xdfe2e23d
+	.WORD	0xcdebeb26, 0x4e272769, 0x7fb2b2cd, 0xea75759f
+	.WORD	0x1209091b, 0x1d83839e, 0x582c2c74, 0x341a1a2e
+	.WORD	0x361b1b2d, 0xdc6e6eb2, 0xb45a5aee, 0x5ba0a0fb
+	.WORD	0xa45252f6, 0x763b3b4d, 0xb7d6d661, 0x7db3b3ce
+	.WORD	0x5229297b, 0xdde3e33e, 0x5e2f2f71, 0x13848497
+	.WORD	0xa65353f5, 0xb9d1d168, 0x00000000, 0xc1eded2c
+	.WORD	0x40202060, 0xe3fcfc1f, 0x79b1b1c8, 0xb65b5bed
+	.WORD	0xd46a6abe, 0x8dcbcb46, 0x67bebed9, 0x7239394b
+	.WORD	0x944a4ade, 0x984c4cd4, 0xb05858e8, 0x85cfcf4a
+	.WORD	0xbbd0d06b, 0xc5efef2a, 0x4faaaae5, 0xedfbfb16
+	.WORD	0x864343c5, 0x9a4d4dd7, 0x66333355, 0x11858594
+	.WORD	0x8a4545cf, 0xe9f9f910, 0x04020206, 0xfe7f7f81
+	.WORD	0xa05050f0, 0x783c3c44, 0x259f9fba, 0x4ba8a8e3
+	.WORD	0xa25151f3, 0x5da3a3fe, 0x804040c0, 0x058f8f8a
+	.WORD	0x3f9292ad, 0x219d9dbc, 0x70383848, 0xf1f5f504
+	.WORD	0x63bcbcdf, 0x77b6b6c1, 0xafdada75, 0x42212163
+	.WORD	0x20101030, 0xe5ffff1a, 0xfdf3f30e, 0xbfd2d26d
+	.WORD	0x81cdcd4c, 0x180c0c14, 0x26131335, 0xc3ecec2f
+	.WORD	0xbe5f5fe1, 0x359797a2, 0x884444cc, 0x2e171739
+	.WORD	0x93c4c457, 0x55a7a7f2, 0xfc7e7e82, 0x7a3d3d47
+	.WORD	0xc86464ac, 0xba5d5de7, 0x3219192b, 0xe6737395
+	.WORD	0xc06060a0, 0x19818198, 0x9e4f4fd1, 0xa3dcdc7f
+	.WORD	0x44222266, 0x542a2a7e, 0x3b9090ab, 0x0b888883
+	.WORD	0x8c4646ca, 0xc7eeee29, 0x6bb8b8d3, 0x2814143c
+	.WORD	0xa7dede79, 0xbc5e5ee2, 0x160b0b1d, 0xaddbdb76
+	.WORD	0xdbe0e03b, 0x64323256, 0x743a3a4e, 0x140a0a1e
+	.WORD	0x924949db, 0x0c06060a, 0x4824246c, 0xb85c5ce4
+	.WORD	0x9fc2c25d, 0xbdd3d36e, 0x43acacef, 0xc46262a6
+	.WORD	0x399191a8, 0x319595a4, 0xd3e4e437, 0xf279798b
+	.WORD	0xd5e7e732, 0x8bc8c843, 0x6e373759, 0xda6d6db7
+	.WORD	0x018d8d8c, 0xb1d5d564, 0x9c4e4ed2, 0x49a9a9e0
+	.WORD	0xd86c6cb4, 0xac5656fa, 0xf3f4f407, 0xcfeaea25
+	.WORD	0xca6565af, 0xf47a7a8e, 0x47aeaee9, 0x10080818
+	.WORD	0x6fbabad5, 0xf0787888, 0x4a25256f, 0x5c2e2e72
+	.WORD	0x381c1c24, 0x57a6a6f1, 0x73b4b4c7, 0x97c6c651
+	.WORD	0xcbe8e823, 0xa1dddd7c, 0xe874749c, 0x3e1f1f21
+	.WORD	0x964b4bdd, 0x61bdbddc, 0x0d8b8b86, 0x0f8a8a85
+	.WORD	0xe0707090, 0x7c3e3e42, 0x71b5b5c4, 0xcc6666aa
+	.WORD	0x904848d8, 0x06030305, 0xf7f6f601, 0x1c0e0e12
+	.WORD	0xc26161a3, 0x6a35355f, 0xae5757f9, 0x69b9b9d0
+	.WORD	0x17868691, 0x99c1c158, 0x3a1d1d27, 0x279e9eb9
+	.WORD	0xd9e1e138, 0xebf8f813, 0x2b9898b3, 0x22111133
+	.WORD	0xd26969bb, 0xa9d9d970, 0x078e8e89, 0x339494a7
+	.WORD	0x2d9b9bb6, 0x3c1e1e22, 0x15878792, 0xc9e9e920
+	.WORD	0x87cece49, 0xaa5555ff, 0x50282878, 0xa5dfdf7a
+	.WORD	0x038c8c8f, 0x59a1a1f8, 0x09898980, 0x1a0d0d17
+	.WORD	0x65bfbfda, 0xd7e6e631, 0x844242c6, 0xd06868b8
+	.WORD	0x824141c3, 0x299999b0, 0x5a2d2d77, 0x1e0f0f11
+	.WORD	0x7bb0b0cb, 0xa85454fc, 0x6dbbbbd6, 0x2c16163a
+	.BYTE	0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5
+	.BYTE	0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76
+	.BYTE	0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0
+	.BYTE	0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0
+	.BYTE	0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc
+	.BYTE	0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15
+	.BYTE	0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a
+	.BYTE	0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75
+	.BYTE	0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0
+	.BYTE	0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84
+	.BYTE	0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b
+	.BYTE	0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf
+	.BYTE	0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85
+	.BYTE	0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8
+	.BYTE	0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5
+	.BYTE	0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2
+	.BYTE	0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17
+	.BYTE	0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73
+	.BYTE	0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88
+	.BYTE	0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb
+	.BYTE	0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c
+	.BYTE	0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79
+	.BYTE	0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9
+	.BYTE	0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08
+	.BYTE	0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6
+	.BYTE	0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a
+	.BYTE	0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e
+	.BYTE	0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e
+	.BYTE	0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94
+	.BYTE	0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf
+	.BYTE	0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68
+	.BYTE	0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16
+___
+
+$code.=<<___;
+	.EXPORT	AES_decrypt,ENTRY,ARGW0=GR,ARGW1=GR,ARGW2=GR
+	.ALIGN	16
+AES_decrypt
+	.PROC
+	.CALLINFO	FRAME=`$FRAME-16*$SIZE_T`,NO_CALLS,SAVE_RP,ENTRY_GR=18
+	.ENTRY
+	$PUSH	%r2,-$SAVED_RP(%sp)	; standard prologue
+	$PUSHMA	%r3,$FRAME(%sp)
+	$PUSH	%r4,`-$FRAME+1*$SIZE_T`(%sp)
+	$PUSH	%r5,`-$FRAME+2*$SIZE_T`(%sp)
+	$PUSH	%r6,`-$FRAME+3*$SIZE_T`(%sp)
+	$PUSH	%r7,`-$FRAME+4*$SIZE_T`(%sp)
+	$PUSH	%r8,`-$FRAME+5*$SIZE_T`(%sp)
+	$PUSH	%r9,`-$FRAME+6*$SIZE_T`(%sp)
+	$PUSH	%r10,`-$FRAME+7*$SIZE_T`(%sp)
+	$PUSH	%r11,`-$FRAME+8*$SIZE_T`(%sp)
+	$PUSH	%r12,`-$FRAME+9*$SIZE_T`(%sp)
+	$PUSH	%r13,`-$FRAME+10*$SIZE_T`(%sp)
+	$PUSH	%r14,`-$FRAME+11*$SIZE_T`(%sp)
+	$PUSH	%r15,`-$FRAME+12*$SIZE_T`(%sp)
+	$PUSH	%r16,`-$FRAME+13*$SIZE_T`(%sp)
+	$PUSH	%r17,`-$FRAME+14*$SIZE_T`(%sp)
+	$PUSH	%r18,`-$FRAME+15*$SIZE_T`(%sp)
+
+	blr	%r0,$tbl
+	ldi	3,$t0
+L\$dec_pic
+	andcm	$tbl,$t0,$tbl
+	ldo	L\$AES_Td-L\$dec_pic($tbl),$tbl
+
+	and	$inp,$t0,$t0
+	sub	$inp,$t0,$inp
+	ldw	0($inp),$s0
+	ldw	4($inp),$s1
+	ldw	8($inp),$s2
+	comib,=	0,$t0,L\$dec_inp_aligned
+	ldw	12($inp),$s3
+
+	sh3addl	$t0,%r0,$t0
+	subi	32,$t0,$t0
+	mtctl	$t0,%cr11
+	ldw	16($inp),$t1
+	vshd	$s0,$s1,$s0
+	vshd	$s1,$s2,$s1
+	vshd	$s2,$s3,$s2
+	vshd	$s3,$t1,$s3
+
+L\$dec_inp_aligned
+	bl	_parisc_AES_decrypt,%r31
+	nop
+
+	extru,<> $out,31,2,%r0
+	b	L\$dec_out_aligned
+	nop
+
+	_srm	$s0,24,$acc0
+	_srm	$s0,16,$acc1
+	stb	$acc0,0($out)
+	_srm	$s0,8,$acc2
+	stb	$acc1,1($out)
+	_srm	$s1,24,$acc4
+	stb	$acc2,2($out)
+	_srm	$s1,16,$acc5
+	stb	$s0,3($out)
+	_srm	$s1,8,$acc6
+	stb	$acc4,4($out)
+	_srm	$s2,24,$acc0
+	stb	$acc5,5($out)
+	_srm	$s2,16,$acc1
+	stb	$acc6,6($out)
+	_srm	$s2,8,$acc2
+	stb	$s1,7($out)
+	_srm	$s3,24,$acc4
+	stb	$acc0,8($out)
+	_srm	$s3,16,$acc5
+	stb	$acc1,9($out)
+	_srm	$s3,8,$acc6
+	stb	$acc2,10($out)
+	stb	$s2,11($out)
+	stb	$acc4,12($out)
+	stb	$acc5,13($out)
+	stb	$acc6,14($out)
+	b	L\$dec_done
+	stb	$s3,15($out)
+
+L\$dec_out_aligned
+	stw	$s0,0($out)
+	stw	$s1,4($out)
+	stw	$s2,8($out)
+	stw	$s3,12($out)
+
+L\$dec_done
+	$POP	`-$FRAME-$SAVED_RP`(%sp),%r2	; standard epilogue
+	$POP	`-$FRAME+1*$SIZE_T`(%sp),%r4
+	$POP	`-$FRAME+2*$SIZE_T`(%sp),%r5
+	$POP	`-$FRAME+3*$SIZE_T`(%sp),%r6
+	$POP	`-$FRAME+4*$SIZE_T`(%sp),%r7
+	$POP	`-$FRAME+5*$SIZE_T`(%sp),%r8
+	$POP	`-$FRAME+6*$SIZE_T`(%sp),%r9
+	$POP	`-$FRAME+7*$SIZE_T`(%sp),%r10
+	$POP	`-$FRAME+8*$SIZE_T`(%sp),%r11
+	$POP	`-$FRAME+9*$SIZE_T`(%sp),%r12
+	$POP	`-$FRAME+10*$SIZE_T`(%sp),%r13
+	$POP	`-$FRAME+11*$SIZE_T`(%sp),%r14
+	$POP	`-$FRAME+12*$SIZE_T`(%sp),%r15
+	$POP	`-$FRAME+13*$SIZE_T`(%sp),%r16
+	$POP	`-$FRAME+14*$SIZE_T`(%sp),%r17
+	$POP	`-$FRAME+15*$SIZE_T`(%sp),%r18
+	bv	(%r2)
+	.EXIT
+	$POPMB	-$FRAME(%sp),%r3
+	.PROCEND
+
+	.ALIGN	16
+_parisc_AES_decrypt
+	.PROC
+	.CALLINFO	MILLICODE
+	.ENTRY
+	ldw	240($key),$rounds
+	ldw	0($key),$t0
+	ldw	4($key),$t1
+	ldw	8($key),$t2
+	ldw	12($key),$t3
+	_srm	$rounds,1,$rounds
+	xor	$t0,$s0,$s0
+	ldw	16($key),$t0
+	xor	$t1,$s1,$s1
+	ldw	20($key),$t1
+	_srm	$s0,24,$acc0
+	xor	$t2,$s2,$s2
+	ldw	24($key),$t2
+	xor	$t3,$s3,$s3
+	ldw	28($key),$t3
+	_srm	$s3,16,$acc1
+L\$dec_loop
+	_srm	$s2,8,$acc2
+	ldwx,s	$acc0($tbl),$acc0
+	_srm	$s1,0,$acc3
+	ldwx,s	$acc1($tbl),$acc1
+	_srm	$s1,24,$acc4
+	ldwx,s	$acc2($tbl),$acc2
+	_srm	$s0,16,$acc5
+	ldwx,s	$acc3($tbl),$acc3
+	_srm	$s3,8,$acc6
+	ldwx,s	$acc4($tbl),$acc4
+	_srm	$s2,0,$acc7
+	ldwx,s	$acc5($tbl),$acc5
+	_srm	$s2,24,$acc8
+	ldwx,s	$acc6($tbl),$acc6
+	_srm	$s1,16,$acc9
+	ldwx,s	$acc7($tbl),$acc7
+	_srm	$s0,8,$acc10
+	ldwx,s	$acc8($tbl),$acc8
+	_srm	$s3,0,$acc11
+	ldwx,s	$acc9($tbl),$acc9
+	_srm	$s3,24,$acc12
+	ldwx,s	$acc10($tbl),$acc10
+	_srm	$s2,16,$acc13
+	ldwx,s	$acc11($tbl),$acc11
+	_srm	$s1,8,$acc14
+	ldwx,s	$acc12($tbl),$acc12
+	_srm	$s0,0,$acc15
+	ldwx,s	$acc13($tbl),$acc13
+	ldwx,s	$acc14($tbl),$acc14
+	ldwx,s	$acc15($tbl),$acc15
+	addib,= -1,$rounds,L\$dec_last
+	ldo	32($key),$key
+
+		_ror	$acc1,8,$acc1
+		xor	$acc0,$t0,$t0
+	ldw	0($key),$s0
+		_ror	$acc2,16,$acc2
+		xor	$acc1,$t0,$t0
+	ldw	4($key),$s1
+		_ror	$acc3,24,$acc3
+		xor	$acc2,$t0,$t0
+	ldw	8($key),$s2
+		_ror	$acc5,8,$acc5
+		xor	$acc3,$t0,$t0
+	ldw	12($key),$s3
+		_ror	$acc6,16,$acc6
+		xor	$acc4,$t1,$t1
+		_ror	$acc7,24,$acc7
+		xor	$acc5,$t1,$t1
+		_ror	$acc9,8,$acc9
+		xor	$acc6,$t1,$t1
+		_ror	$acc10,16,$acc10
+		xor	$acc7,$t1,$t1
+		_ror	$acc11,24,$acc11
+		xor	$acc8,$t2,$t2
+		_ror	$acc13,8,$acc13
+		xor	$acc9,$t2,$t2
+		_ror	$acc14,16,$acc14
+		xor	$acc10,$t2,$t2
+		_ror	$acc15,24,$acc15
+		xor	$acc11,$t2,$t2
+		xor	$acc12,$acc14,$acc14
+		xor	$acc13,$t3,$t3
+	_srm	$t0,24,$acc0
+		xor	$acc14,$t3,$t3
+		xor	$acc15,$t3,$t3
+	_srm	$t3,16,$acc1
+
+	_srm	$t2,8,$acc2
+	ldwx,s	$acc0($tbl),$acc0
+	_srm	$t1,0,$acc3
+	ldwx,s	$acc1($tbl),$acc1
+	_srm	$t1,24,$acc4
+	ldwx,s	$acc2($tbl),$acc2
+	_srm	$t0,16,$acc5
+	ldwx,s	$acc3($tbl),$acc3
+	_srm	$t3,8,$acc6
+	ldwx,s	$acc4($tbl),$acc4
+	_srm	$t2,0,$acc7
+	ldwx,s	$acc5($tbl),$acc5
+	_srm	$t2,24,$acc8
+	ldwx,s	$acc6($tbl),$acc6
+	_srm	$t1,16,$acc9
+	ldwx,s	$acc7($tbl),$acc7
+	_srm	$t0,8,$acc10
+	ldwx,s	$acc8($tbl),$acc8
+	_srm	$t3,0,$acc11
+	ldwx,s	$acc9($tbl),$acc9
+	_srm	$t3,24,$acc12
+	ldwx,s	$acc10($tbl),$acc10
+	_srm	$t2,16,$acc13
+	ldwx,s	$acc11($tbl),$acc11
+	_srm	$t1,8,$acc14
+	ldwx,s	$acc12($tbl),$acc12
+	_srm	$t0,0,$acc15
+	ldwx,s	$acc13($tbl),$acc13
+		_ror	$acc1,8,$acc1
+	ldwx,s	$acc14($tbl),$acc14
+
+		_ror	$acc2,16,$acc2
+		xor	$acc0,$s0,$s0
+	ldwx,s	$acc15($tbl),$acc15
+		_ror	$acc3,24,$acc3
+		xor	$acc1,$s0,$s0
+	ldw	16($key),$t0
+		_ror	$acc5,8,$acc5
+		xor	$acc2,$s0,$s0
+	ldw	20($key),$t1
+		_ror	$acc6,16,$acc6
+		xor	$acc3,$s0,$s0
+	ldw	24($key),$t2
+		_ror	$acc7,24,$acc7
+		xor	$acc4,$s1,$s1
+	ldw	28($key),$t3
+		_ror	$acc9,8,$acc9
+		xor	$acc5,$s1,$s1
+	ldw	1024+0($tbl),%r0		; prefetch td4
+		_ror	$acc10,16,$acc10
+		xor	$acc6,$s1,$s1
+	ldw	1024+32($tbl),%r0		; prefetch td4
+		_ror	$acc11,24,$acc11
+		xor	$acc7,$s1,$s1
+	ldw	1024+64($tbl),%r0		; prefetch td4
+		_ror	$acc13,8,$acc13
+		xor	$acc8,$s2,$s2
+	ldw	1024+96($tbl),%r0		; prefetch td4
+		_ror	$acc14,16,$acc14
+		xor	$acc9,$s2,$s2
+	ldw	1024+128($tbl),%r0		; prefetch td4
+		_ror	$acc15,24,$acc15
+		xor	$acc10,$s2,$s2
+	ldw	1024+160($tbl),%r0		; prefetch td4
+	_srm	$s0,24,$acc0
+		xor	$acc11,$s2,$s2
+	ldw	1024+192($tbl),%r0		; prefetch td4
+		xor	$acc12,$acc14,$acc14
+		xor	$acc13,$s3,$s3
+	ldw	1024+224($tbl),%r0		; prefetch td4
+		xor	$acc14,$s3,$s3
+		xor	$acc15,$s3,$s3
+	b	L\$dec_loop
+	_srm	$s3,16,$acc1
+
+	.ALIGN	16
+L\$dec_last
+	ldo	1024($tbl),$rounds
+		_ror	$acc1,8,$acc1
+		xor	$acc0,$t0,$t0
+	ldw	0($key),$s0
+		_ror	$acc2,16,$acc2
+		xor	$acc1,$t0,$t0
+	ldw	4($key),$s1
+		_ror	$acc3,24,$acc3
+		xor	$acc2,$t0,$t0
+	ldw	8($key),$s2
+		_ror	$acc5,8,$acc5
+		xor	$acc3,$t0,$t0
+	ldw	12($key),$s3
+		_ror	$acc6,16,$acc6
+		xor	$acc4,$t1,$t1
+		_ror	$acc7,24,$acc7
+		xor	$acc5,$t1,$t1
+		_ror	$acc9,8,$acc9
+		xor	$acc6,$t1,$t1
+		_ror	$acc10,16,$acc10
+		xor	$acc7,$t1,$t1
+		_ror	$acc11,24,$acc11
+		xor	$acc8,$t2,$t2
+		_ror	$acc13,8,$acc13
+		xor	$acc9,$t2,$t2
+		_ror	$acc14,16,$acc14
+		xor	$acc10,$t2,$t2
+		_ror	$acc15,24,$acc15
+		xor	$acc11,$t2,$t2
+		xor	$acc12,$acc14,$acc14
+		xor	$acc13,$t3,$t3
+	_srm	$t0,24,$acc0
+		xor	$acc14,$t3,$t3
+		xor	$acc15,$t3,$t3
+	_srm	$t3,16,$acc1
+
+	_srm	$t2,8,$acc2
+	ldbx	$acc0($rounds),$acc0
+	_srm	$t1,24,$acc4
+	ldbx	$acc1($rounds),$acc1
+	_srm	$t0,16,$acc5
+	_srm	$t1,0,$acc3
+	ldbx	$acc2($rounds),$acc2
+	ldbx	$acc3($rounds),$acc3
+	_srm	$t3,8,$acc6
+	ldbx	$acc4($rounds),$acc4
+	_srm	$t2,24,$acc8
+	ldbx	$acc5($rounds),$acc5
+	_srm	$t1,16,$acc9
+	_srm	$t2,0,$acc7
+	ldbx	$acc6($rounds),$acc6
+	ldbx	$acc7($rounds),$acc7
+	_srm	$t0,8,$acc10
+	ldbx	$acc8($rounds),$acc8
+	_srm	$t3,24,$acc12
+	ldbx	$acc9($rounds),$acc9
+	_srm	$t2,16,$acc13
+	_srm	$t3,0,$acc11
+	ldbx	$acc10($rounds),$acc10
+	_srm	$t1,8,$acc14
+	ldbx	$acc11($rounds),$acc11
+	ldbx	$acc12($rounds),$acc12
+	ldbx	$acc13($rounds),$acc13
+	_srm	$t0,0,$acc15
+	ldbx	$acc14($rounds),$acc14
+
+		dep	$acc0,7,8,$acc3
+	ldbx	$acc15($rounds),$acc15
+		dep	$acc4,7,8,$acc7
+		dep	$acc1,15,8,$acc3
+		dep	$acc5,15,8,$acc7
+		dep	$acc2,23,8,$acc3
+		dep	$acc6,23,8,$acc7
+		xor	$acc3,$s0,$s0
+		xor	$acc7,$s1,$s1
+		dep	$acc8,7,8,$acc11
+		dep	$acc12,7,8,$acc15
+		dep	$acc9,15,8,$acc11
+		dep	$acc13,15,8,$acc15
+		dep	$acc10,23,8,$acc11
+		dep	$acc14,23,8,$acc15
+		xor	$acc11,$s2,$s2
+
+	bv	(%r31)
+	.EXIT
+		xor	$acc15,$s3,$s3
+	.PROCEND
+
+	.ALIGN	64
+L\$AES_Td
+	.WORD	0x51f4a750, 0x7e416553, 0x1a17a4c3, 0x3a275e96
+	.WORD	0x3bab6bcb, 0x1f9d45f1, 0xacfa58ab, 0x4be30393
+	.WORD	0x2030fa55, 0xad766df6, 0x88cc7691, 0xf5024c25
+	.WORD	0x4fe5d7fc, 0xc52acbd7, 0x26354480, 0xb562a38f
+	.WORD	0xdeb15a49, 0x25ba1b67, 0x45ea0e98, 0x5dfec0e1
+	.WORD	0xc32f7502, 0x814cf012, 0x8d4697a3, 0x6bd3f9c6
+	.WORD	0x038f5fe7, 0x15929c95, 0xbf6d7aeb, 0x955259da
+	.WORD	0xd4be832d, 0x587421d3, 0x49e06929, 0x8ec9c844
+	.WORD	0x75c2896a, 0xf48e7978, 0x99583e6b, 0x27b971dd
+	.WORD	0xbee14fb6, 0xf088ad17, 0xc920ac66, 0x7dce3ab4
+	.WORD	0x63df4a18, 0xe51a3182, 0x97513360, 0x62537f45
+	.WORD	0xb16477e0, 0xbb6bae84, 0xfe81a01c, 0xf9082b94
+	.WORD	0x70486858, 0x8f45fd19, 0x94de6c87, 0x527bf8b7
+	.WORD	0xab73d323, 0x724b02e2, 0xe31f8f57, 0x6655ab2a
+	.WORD	0xb2eb2807, 0x2fb5c203, 0x86c57b9a, 0xd33708a5
+	.WORD	0x302887f2, 0x23bfa5b2, 0x02036aba, 0xed16825c
+	.WORD	0x8acf1c2b, 0xa779b492, 0xf307f2f0, 0x4e69e2a1
+	.WORD	0x65daf4cd, 0x0605bed5, 0xd134621f, 0xc4a6fe8a
+	.WORD	0x342e539d, 0xa2f355a0, 0x058ae132, 0xa4f6eb75
+	.WORD	0x0b83ec39, 0x4060efaa, 0x5e719f06, 0xbd6e1051
+	.WORD	0x3e218af9, 0x96dd063d, 0xdd3e05ae, 0x4de6bd46
+	.WORD	0x91548db5, 0x71c45d05, 0x0406d46f, 0x605015ff
+	.WORD	0x1998fb24, 0xd6bde997, 0x894043cc, 0x67d99e77
+	.WORD	0xb0e842bd, 0x07898b88, 0xe7195b38, 0x79c8eedb
+	.WORD	0xa17c0a47, 0x7c420fe9, 0xf8841ec9, 0x00000000
+	.WORD	0x09808683, 0x322bed48, 0x1e1170ac, 0x6c5a724e
+	.WORD	0xfd0efffb, 0x0f853856, 0x3daed51e, 0x362d3927
+	.WORD	0x0a0fd964, 0x685ca621, 0x9b5b54d1, 0x24362e3a
+	.WORD	0x0c0a67b1, 0x9357e70f, 0xb4ee96d2, 0x1b9b919e
+	.WORD	0x80c0c54f, 0x61dc20a2, 0x5a774b69, 0x1c121a16
+	.WORD	0xe293ba0a, 0xc0a02ae5, 0x3c22e043, 0x121b171d
+	.WORD	0x0e090d0b, 0xf28bc7ad, 0x2db6a8b9, 0x141ea9c8
+	.WORD	0x57f11985, 0xaf75074c, 0xee99ddbb, 0xa37f60fd
+	.WORD	0xf701269f, 0x5c72f5bc, 0x44663bc5, 0x5bfb7e34
+	.WORD	0x8b432976, 0xcb23c6dc, 0xb6edfc68, 0xb8e4f163
+	.WORD	0xd731dcca, 0x42638510, 0x13972240, 0x84c61120
+	.WORD	0x854a247d, 0xd2bb3df8, 0xaef93211, 0xc729a16d
+	.WORD	0x1d9e2f4b, 0xdcb230f3, 0x0d8652ec, 0x77c1e3d0
+	.WORD	0x2bb3166c, 0xa970b999, 0x119448fa, 0x47e96422
+	.WORD	0xa8fc8cc4, 0xa0f03f1a, 0x567d2cd8, 0x223390ef
+	.WORD	0x87494ec7, 0xd938d1c1, 0x8ccaa2fe, 0x98d40b36
+	.WORD	0xa6f581cf, 0xa57ade28, 0xdab78e26, 0x3fadbfa4
+	.WORD	0x2c3a9de4, 0x5078920d, 0x6a5fcc9b, 0x547e4662
+	.WORD	0xf68d13c2, 0x90d8b8e8, 0x2e39f75e, 0x82c3aff5
+	.WORD	0x9f5d80be, 0x69d0937c, 0x6fd52da9, 0xcf2512b3
+	.WORD	0xc8ac993b, 0x10187da7, 0xe89c636e, 0xdb3bbb7b
+	.WORD	0xcd267809, 0x6e5918f4, 0xec9ab701, 0x834f9aa8
+	.WORD	0xe6956e65, 0xaaffe67e, 0x21bccf08, 0xef15e8e6
+	.WORD	0xbae79bd9, 0x4a6f36ce, 0xea9f09d4, 0x29b07cd6
+	.WORD	0x31a4b2af, 0x2a3f2331, 0xc6a59430, 0x35a266c0
+	.WORD	0x744ebc37, 0xfc82caa6, 0xe090d0b0, 0x33a7d815
+	.WORD	0xf104984a, 0x41ecdaf7, 0x7fcd500e, 0x1791f62f
+	.WORD	0x764dd68d, 0x43efb04d, 0xccaa4d54, 0xe49604df
+	.WORD	0x9ed1b5e3, 0x4c6a881b, 0xc12c1fb8, 0x4665517f
+	.WORD	0x9d5eea04, 0x018c355d, 0xfa877473, 0xfb0b412e
+	.WORD	0xb3671d5a, 0x92dbd252, 0xe9105633, 0x6dd64713
+	.WORD	0x9ad7618c, 0x37a10c7a, 0x59f8148e, 0xeb133c89
+	.WORD	0xcea927ee, 0xb761c935, 0xe11ce5ed, 0x7a47b13c
+	.WORD	0x9cd2df59, 0x55f2733f, 0x1814ce79, 0x73c737bf
+	.WORD	0x53f7cdea, 0x5ffdaa5b, 0xdf3d6f14, 0x7844db86
+	.WORD	0xcaaff381, 0xb968c43e, 0x3824342c, 0xc2a3405f
+	.WORD	0x161dc372, 0xbce2250c, 0x283c498b, 0xff0d9541
+	.WORD	0x39a80171, 0x080cb3de, 0xd8b4e49c, 0x6456c190
+	.WORD	0x7bcb8461, 0xd532b670, 0x486c5c74, 0xd0b85742
+	.BYTE	0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38
+	.BYTE	0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb
+	.BYTE	0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87
+	.BYTE	0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb
+	.BYTE	0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d
+	.BYTE	0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e
+	.BYTE	0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2
+	.BYTE	0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25
+	.BYTE	0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16
+	.BYTE	0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92
+	.BYTE	0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda
+	.BYTE	0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84
+	.BYTE	0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a
+	.BYTE	0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06
+	.BYTE	0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02
+	.BYTE	0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b
+	.BYTE	0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea
+	.BYTE	0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73
+	.BYTE	0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85
+	.BYTE	0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e
+	.BYTE	0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89
+	.BYTE	0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b
+	.BYTE	0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20
+	.BYTE	0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4
+	.BYTE	0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31
+	.BYTE	0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f
+	.BYTE	0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d
+	.BYTE	0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef
+	.BYTE	0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0
+	.BYTE	0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61
+	.BYTE	0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26
+	.BYTE	0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d
+	.STRINGZ "AES for PA-RISC, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+	=~ /GNU assembler/) {
+    $gnuas = 1;
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	# translate made up instructions: _ror, _srm
+	s/_ror(\s+)(%r[0-9]+),/shd$1$2,$2,/				or
+
+	s/_srm(\s+%r[0-9]+),([0-9]+),/
+		$SIZE_T==4 ? sprintf("extru%s,%d,8,",$1,31-$2)
+		:            sprintf("extrd,u%s,%d,8,",$1,63-$2)/e;
+
+	s/(\.LEVEL\s+2\.0)W/$1w/	if ($gnuas && $SIZE_T==8);
+	s/\.SPACE\s+\$TEXT\$/.text/	if ($gnuas && $SIZE_T==8);
+	s/\.SUBSPA.*//			if ($gnuas && $SIZE_T==8);
+	s/,\*/,/			if ($SIZE_T==4);
+	s/\bbv\b(.*\(%r2\))/bve$1/	if ($SIZE_T==8);
+
+	print $_,"\n";
+}
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-ppc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-ppc.pl
new file mode 100644
index 000000000..ca69df4c3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-ppc.pl
@@ -0,0 +1,1459 @@
+#! /usr/bin/env perl
+# Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# Needs more work: key setup, CBC routine...
+#
+# ppc_AES_[en|de]crypt perform at 18 cycles per byte processed with
+# 128-bit key, which is ~40% better than 64-bit code generated by gcc
+# 4.0. But these are not the ones currently used! Their "compact"
+# counterparts are, for security reason. ppc_AES_encrypt_compact runs
+# at 1/2 of ppc_AES_encrypt speed, while ppc_AES_decrypt_compact -
+# at 1/3 of ppc_AES_decrypt.
+
+# February 2010
+#
+# Rescheduling instructions to favour Power6 pipeline gave 10%
+# performance improvement on the platform in question (and marginal
+# improvement even on others). It should be noted that Power6 fails
+# to process byte in 18 cycles, only in 23, because it fails to issue
+# 4 load instructions in two cycles, only in 3. As result non-compact
+# block subroutines are 25% slower than one would expect. Compact
+# functions scale better, because they have pure computational part,
+# which scales perfectly with clock frequency. To be specific
+# ppc_AES_encrypt_compact operates at 42 cycles per byte, while
+# ppc_AES_decrypt_compact - at 55 (in 64-bit build).
+
+$flavour = shift;
+
+if ($flavour =~ /64/) {
+	$SIZE_T	=8;
+	$LRSAVE	=2*$SIZE_T;
+	$STU	="stdu";
+	$POP	="ld";
+	$PUSH	="std";
+} elsif ($flavour =~ /32/) {
+	$SIZE_T	=4;
+	$LRSAVE	=$SIZE_T;
+	$STU	="stwu";
+	$POP	="lwz";
+	$PUSH	="stw";
+} else { die "nonsense $flavour"; }
+
+$LITTLE_ENDIAN = ($flavour=~/le$/) ? $SIZE_T : 0;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open STDOUT,"| $^X $xlate $flavour ".shift || die "can't call $xlate: $!";
+
+$FRAME=32*$SIZE_T;
+
+sub _data_word()
+{ my $i;
+    while(defined($i=shift)) { $code.=sprintf"\t.long\t0x%08x,0x%08x\n",$i,$i; }
+}
+
+$sp="r1";
+$toc="r2";
+$inp="r3";
+$out="r4";
+$key="r5";
+
+$Tbl0="r3";
+$Tbl1="r6";
+$Tbl2="r7";
+$Tbl3=$out;	# stay away from "r2"; $out is offloaded to stack
+
+$s0="r8";
+$s1="r9";
+$s2="r10";
+$s3="r11";
+
+$t0="r12";
+$t1="r0";	# stay away from "r13";
+$t2="r14";
+$t3="r15";
+
+$acc00="r16";
+$acc01="r17";
+$acc02="r18";
+$acc03="r19";
+
+$acc04="r20";
+$acc05="r21";
+$acc06="r22";
+$acc07="r23";
+
+$acc08="r24";
+$acc09="r25";
+$acc10="r26";
+$acc11="r27";
+
+$acc12="r28";
+$acc13="r29";
+$acc14="r30";
+$acc15="r31";
+
+$mask80=$Tbl2;
+$mask1b=$Tbl3;
+
+$code.=<<___;
+.machine	"any"
+.text
+
+.align	7
+LAES_Te:
+	mflr	r0
+	bcl	20,31,\$+4
+	mflr	$Tbl0	;    vvvvv "distance" between . and 1st data entry
+	addi	$Tbl0,$Tbl0,`128-8`
+	mtlr	r0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+	.space	`64-9*4`
+LAES_Td:
+	mflr	r0
+	bcl	20,31,\$+4
+	mflr	$Tbl0	;    vvvvvvvv "distance" between . and 1st data entry
+	addi	$Tbl0,$Tbl0,`128-64-8+2048+256`
+	mtlr	r0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+	.space	`128-64-9*4`
+___
+&_data_word(
+	0xc66363a5, 0xf87c7c84, 0xee777799, 0xf67b7b8d,
+	0xfff2f20d, 0xd66b6bbd, 0xde6f6fb1, 0x91c5c554,
+	0x60303050, 0x02010103, 0xce6767a9, 0x562b2b7d,
+	0xe7fefe19, 0xb5d7d762, 0x4dababe6, 0xec76769a,
+	0x8fcaca45, 0x1f82829d, 0x89c9c940, 0xfa7d7d87,
+	0xeffafa15, 0xb25959eb, 0x8e4747c9, 0xfbf0f00b,
+	0x41adadec, 0xb3d4d467, 0x5fa2a2fd, 0x45afafea,
+	0x239c9cbf, 0x53a4a4f7, 0xe4727296, 0x9bc0c05b,
+	0x75b7b7c2, 0xe1fdfd1c, 0x3d9393ae, 0x4c26266a,
+	0x6c36365a, 0x7e3f3f41, 0xf5f7f702, 0x83cccc4f,
+	0x6834345c, 0x51a5a5f4, 0xd1e5e534, 0xf9f1f108,
+	0xe2717193, 0xabd8d873, 0x62313153, 0x2a15153f,
+	0x0804040c, 0x95c7c752, 0x46232365, 0x9dc3c35e,
+	0x30181828, 0x379696a1, 0x0a05050f, 0x2f9a9ab5,
+	0x0e070709, 0x24121236, 0x1b80809b, 0xdfe2e23d,
+	0xcdebeb26, 0x4e272769, 0x7fb2b2cd, 0xea75759f,
+	0x1209091b, 0x1d83839e, 0x582c2c74, 0x341a1a2e,
+	0x361b1b2d, 0xdc6e6eb2, 0xb45a5aee, 0x5ba0a0fb,
+	0xa45252f6, 0x763b3b4d, 0xb7d6d661, 0x7db3b3ce,
+	0x5229297b, 0xdde3e33e, 0x5e2f2f71, 0x13848497,
+	0xa65353f5, 0xb9d1d168, 0x00000000, 0xc1eded2c,
+	0x40202060, 0xe3fcfc1f, 0x79b1b1c8, 0xb65b5bed,
+	0xd46a6abe, 0x8dcbcb46, 0x67bebed9, 0x7239394b,
+	0x944a4ade, 0x984c4cd4, 0xb05858e8, 0x85cfcf4a,
+	0xbbd0d06b, 0xc5efef2a, 0x4faaaae5, 0xedfbfb16,
+	0x864343c5, 0x9a4d4dd7, 0x66333355, 0x11858594,
+	0x8a4545cf, 0xe9f9f910, 0x04020206, 0xfe7f7f81,
+	0xa05050f0, 0x783c3c44, 0x259f9fba, 0x4ba8a8e3,
+	0xa25151f3, 0x5da3a3fe, 0x804040c0, 0x058f8f8a,
+	0x3f9292ad, 0x219d9dbc, 0x70383848, 0xf1f5f504,
+	0x63bcbcdf, 0x77b6b6c1, 0xafdada75, 0x42212163,
+	0x20101030, 0xe5ffff1a, 0xfdf3f30e, 0xbfd2d26d,
+	0x81cdcd4c, 0x180c0c14, 0x26131335, 0xc3ecec2f,
+	0xbe5f5fe1, 0x359797a2, 0x884444cc, 0x2e171739,
+	0x93c4c457, 0x55a7a7f2, 0xfc7e7e82, 0x7a3d3d47,
+	0xc86464ac, 0xba5d5de7, 0x3219192b, 0xe6737395,
+	0xc06060a0, 0x19818198, 0x9e4f4fd1, 0xa3dcdc7f,
+	0x44222266, 0x542a2a7e, 0x3b9090ab, 0x0b888883,
+	0x8c4646ca, 0xc7eeee29, 0x6bb8b8d3, 0x2814143c,
+	0xa7dede79, 0xbc5e5ee2, 0x160b0b1d, 0xaddbdb76,
+	0xdbe0e03b, 0x64323256, 0x743a3a4e, 0x140a0a1e,
+	0x924949db, 0x0c06060a, 0x4824246c, 0xb85c5ce4,
+	0x9fc2c25d, 0xbdd3d36e, 0x43acacef, 0xc46262a6,
+	0x399191a8, 0x319595a4, 0xd3e4e437, 0xf279798b,
+	0xd5e7e732, 0x8bc8c843, 0x6e373759, 0xda6d6db7,
+	0x018d8d8c, 0xb1d5d564, 0x9c4e4ed2, 0x49a9a9e0,
+	0xd86c6cb4, 0xac5656fa, 0xf3f4f407, 0xcfeaea25,
+	0xca6565af, 0xf47a7a8e, 0x47aeaee9, 0x10080818,
+	0x6fbabad5, 0xf0787888, 0x4a25256f, 0x5c2e2e72,
+	0x381c1c24, 0x57a6a6f1, 0x73b4b4c7, 0x97c6c651,
+	0xcbe8e823, 0xa1dddd7c, 0xe874749c, 0x3e1f1f21,
+	0x964b4bdd, 0x61bdbddc, 0x0d8b8b86, 0x0f8a8a85,
+	0xe0707090, 0x7c3e3e42, 0x71b5b5c4, 0xcc6666aa,
+	0x904848d8, 0x06030305, 0xf7f6f601, 0x1c0e0e12,
+	0xc26161a3, 0x6a35355f, 0xae5757f9, 0x69b9b9d0,
+	0x17868691, 0x99c1c158, 0x3a1d1d27, 0x279e9eb9,
+	0xd9e1e138, 0xebf8f813, 0x2b9898b3, 0x22111133,
+	0xd26969bb, 0xa9d9d970, 0x078e8e89, 0x339494a7,
+	0x2d9b9bb6, 0x3c1e1e22, 0x15878792, 0xc9e9e920,
+	0x87cece49, 0xaa5555ff, 0x50282878, 0xa5dfdf7a,
+	0x038c8c8f, 0x59a1a1f8, 0x09898980, 0x1a0d0d17,
+	0x65bfbfda, 0xd7e6e631, 0x844242c6, 0xd06868b8,
+	0x824141c3, 0x299999b0, 0x5a2d2d77, 0x1e0f0f11,
+	0x7bb0b0cb, 0xa85454fc, 0x6dbbbbd6, 0x2c16163a);
+$code.=<<___;
+.byte	0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5
+.byte	0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76
+.byte	0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0
+.byte	0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0
+.byte	0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc
+.byte	0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15
+.byte	0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a
+.byte	0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75
+.byte	0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0
+.byte	0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84
+.byte	0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b
+.byte	0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf
+.byte	0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85
+.byte	0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8
+.byte	0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5
+.byte	0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2
+.byte	0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17
+.byte	0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73
+.byte	0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88
+.byte	0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb
+.byte	0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c
+.byte	0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79
+.byte	0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9
+.byte	0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08
+.byte	0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6
+.byte	0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a
+.byte	0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e
+.byte	0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e
+.byte	0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94
+.byte	0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf
+.byte	0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68
+.byte	0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16
+___
+&_data_word(
+	0x51f4a750, 0x7e416553, 0x1a17a4c3, 0x3a275e96,
+	0x3bab6bcb, 0x1f9d45f1, 0xacfa58ab, 0x4be30393,
+	0x2030fa55, 0xad766df6, 0x88cc7691, 0xf5024c25,
+	0x4fe5d7fc, 0xc52acbd7, 0x26354480, 0xb562a38f,
+	0xdeb15a49, 0x25ba1b67, 0x45ea0e98, 0x5dfec0e1,
+	0xc32f7502, 0x814cf012, 0x8d4697a3, 0x6bd3f9c6,
+	0x038f5fe7, 0x15929c95, 0xbf6d7aeb, 0x955259da,
+	0xd4be832d, 0x587421d3, 0x49e06929, 0x8ec9c844,
+	0x75c2896a, 0xf48e7978, 0x99583e6b, 0x27b971dd,
+	0xbee14fb6, 0xf088ad17, 0xc920ac66, 0x7dce3ab4,
+	0x63df4a18, 0xe51a3182, 0x97513360, 0x62537f45,
+	0xb16477e0, 0xbb6bae84, 0xfe81a01c, 0xf9082b94,
+	0x70486858, 0x8f45fd19, 0x94de6c87, 0x527bf8b7,
+	0xab73d323, 0x724b02e2, 0xe31f8f57, 0x6655ab2a,
+	0xb2eb2807, 0x2fb5c203, 0x86c57b9a, 0xd33708a5,
+	0x302887f2, 0x23bfa5b2, 0x02036aba, 0xed16825c,
+	0x8acf1c2b, 0xa779b492, 0xf307f2f0, 0x4e69e2a1,
+	0x65daf4cd, 0x0605bed5, 0xd134621f, 0xc4a6fe8a,
+	0x342e539d, 0xa2f355a0, 0x058ae132, 0xa4f6eb75,
+	0x0b83ec39, 0x4060efaa, 0x5e719f06, 0xbd6e1051,
+	0x3e218af9, 0x96dd063d, 0xdd3e05ae, 0x4de6bd46,
+	0x91548db5, 0x71c45d05, 0x0406d46f, 0x605015ff,
+	0x1998fb24, 0xd6bde997, 0x894043cc, 0x67d99e77,
+	0xb0e842bd, 0x07898b88, 0xe7195b38, 0x79c8eedb,
+	0xa17c0a47, 0x7c420fe9, 0xf8841ec9, 0x00000000,
+	0x09808683, 0x322bed48, 0x1e1170ac, 0x6c5a724e,
+	0xfd0efffb, 0x0f853856, 0x3daed51e, 0x362d3927,
+	0x0a0fd964, 0x685ca621, 0x9b5b54d1, 0x24362e3a,
+	0x0c0a67b1, 0x9357e70f, 0xb4ee96d2, 0x1b9b919e,
+	0x80c0c54f, 0x61dc20a2, 0x5a774b69, 0x1c121a16,
+	0xe293ba0a, 0xc0a02ae5, 0x3c22e043, 0x121b171d,
+	0x0e090d0b, 0xf28bc7ad, 0x2db6a8b9, 0x141ea9c8,
+	0x57f11985, 0xaf75074c, 0xee99ddbb, 0xa37f60fd,
+	0xf701269f, 0x5c72f5bc, 0x44663bc5, 0x5bfb7e34,
+	0x8b432976, 0xcb23c6dc, 0xb6edfc68, 0xb8e4f163,
+	0xd731dcca, 0x42638510, 0x13972240, 0x84c61120,
+	0x854a247d, 0xd2bb3df8, 0xaef93211, 0xc729a16d,
+	0x1d9e2f4b, 0xdcb230f3, 0x0d8652ec, 0x77c1e3d0,
+	0x2bb3166c, 0xa970b999, 0x119448fa, 0x47e96422,
+	0xa8fc8cc4, 0xa0f03f1a, 0x567d2cd8, 0x223390ef,
+	0x87494ec7, 0xd938d1c1, 0x8ccaa2fe, 0x98d40b36,
+	0xa6f581cf, 0xa57ade28, 0xdab78e26, 0x3fadbfa4,
+	0x2c3a9de4, 0x5078920d, 0x6a5fcc9b, 0x547e4662,
+	0xf68d13c2, 0x90d8b8e8, 0x2e39f75e, 0x82c3aff5,
+	0x9f5d80be, 0x69d0937c, 0x6fd52da9, 0xcf2512b3,
+	0xc8ac993b, 0x10187da7, 0xe89c636e, 0xdb3bbb7b,
+	0xcd267809, 0x6e5918f4, 0xec9ab701, 0x834f9aa8,
+	0xe6956e65, 0xaaffe67e, 0x21bccf08, 0xef15e8e6,
+	0xbae79bd9, 0x4a6f36ce, 0xea9f09d4, 0x29b07cd6,
+	0x31a4b2af, 0x2a3f2331, 0xc6a59430, 0x35a266c0,
+	0x744ebc37, 0xfc82caa6, 0xe090d0b0, 0x33a7d815,
+	0xf104984a, 0x41ecdaf7, 0x7fcd500e, 0x1791f62f,
+	0x764dd68d, 0x43efb04d, 0xccaa4d54, 0xe49604df,
+	0x9ed1b5e3, 0x4c6a881b, 0xc12c1fb8, 0x4665517f,
+	0x9d5eea04, 0x018c355d, 0xfa877473, 0xfb0b412e,
+	0xb3671d5a, 0x92dbd252, 0xe9105633, 0x6dd64713,
+	0x9ad7618c, 0x37a10c7a, 0x59f8148e, 0xeb133c89,
+	0xcea927ee, 0xb761c935, 0xe11ce5ed, 0x7a47b13c,
+	0x9cd2df59, 0x55f2733f, 0x1814ce79, 0x73c737bf,
+	0x53f7cdea, 0x5ffdaa5b, 0xdf3d6f14, 0x7844db86,
+	0xcaaff381, 0xb968c43e, 0x3824342c, 0xc2a3405f,
+	0x161dc372, 0xbce2250c, 0x283c498b, 0xff0d9541,
+	0x39a80171, 0x080cb3de, 0xd8b4e49c, 0x6456c190,
+	0x7bcb8461, 0xd532b670, 0x486c5c74, 0xd0b85742);
+$code.=<<___;
+.byte	0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38
+.byte	0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb
+.byte	0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87
+.byte	0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb
+.byte	0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d
+.byte	0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e
+.byte	0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2
+.byte	0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25
+.byte	0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16
+.byte	0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92
+.byte	0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda
+.byte	0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84
+.byte	0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a
+.byte	0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06
+.byte	0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02
+.byte	0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b
+.byte	0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea
+.byte	0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73
+.byte	0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85
+.byte	0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e
+.byte	0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89
+.byte	0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b
+.byte	0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20
+.byte	0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4
+.byte	0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31
+.byte	0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f
+.byte	0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d
+.byte	0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef
+.byte	0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0
+.byte	0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61
+.byte	0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26
+.byte	0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d
+
+
+.globl	.AES_encrypt
+.align	7
+.AES_encrypt:
+	$STU	$sp,-$FRAME($sp)
+	mflr	r0
+
+	$PUSH	$out,`$FRAME-$SIZE_T*19`($sp)
+	$PUSH	r14,`$FRAME-$SIZE_T*18`($sp)
+	$PUSH	r15,`$FRAME-$SIZE_T*17`($sp)
+	$PUSH	r16,`$FRAME-$SIZE_T*16`($sp)
+	$PUSH	r17,`$FRAME-$SIZE_T*15`($sp)
+	$PUSH	r18,`$FRAME-$SIZE_T*14`($sp)
+	$PUSH	r19,`$FRAME-$SIZE_T*13`($sp)
+	$PUSH	r20,`$FRAME-$SIZE_T*12`($sp)
+	$PUSH	r21,`$FRAME-$SIZE_T*11`($sp)
+	$PUSH	r22,`$FRAME-$SIZE_T*10`($sp)
+	$PUSH	r23,`$FRAME-$SIZE_T*9`($sp)
+	$PUSH	r24,`$FRAME-$SIZE_T*8`($sp)
+	$PUSH	r25,`$FRAME-$SIZE_T*7`($sp)
+	$PUSH	r26,`$FRAME-$SIZE_T*6`($sp)
+	$PUSH	r27,`$FRAME-$SIZE_T*5`($sp)
+	$PUSH	r28,`$FRAME-$SIZE_T*4`($sp)
+	$PUSH	r29,`$FRAME-$SIZE_T*3`($sp)
+	$PUSH	r30,`$FRAME-$SIZE_T*2`($sp)
+	$PUSH	r31,`$FRAME-$SIZE_T*1`($sp)
+	$PUSH	r0,`$FRAME+$LRSAVE`($sp)
+
+	andi.	$t0,$inp,3
+	andi.	$t1,$out,3
+	or.	$t0,$t0,$t1
+	bne	Lenc_unaligned
+
+Lenc_unaligned_ok:
+___
+$code.=<<___ if (!$LITTLE_ENDIAN);
+	lwz	$s0,0($inp)
+	lwz	$s1,4($inp)
+	lwz	$s2,8($inp)
+	lwz	$s3,12($inp)
+___
+$code.=<<___ if ($LITTLE_ENDIAN);
+	lwz	$t0,0($inp)
+	lwz	$t1,4($inp)
+	lwz	$t2,8($inp)
+	lwz	$t3,12($inp)
+	rotlwi	$s0,$t0,8
+	rotlwi	$s1,$t1,8
+	rotlwi	$s2,$t2,8
+	rotlwi	$s3,$t3,8
+	rlwimi	$s0,$t0,24,0,7
+	rlwimi	$s1,$t1,24,0,7
+	rlwimi	$s2,$t2,24,0,7
+	rlwimi	$s3,$t3,24,0,7
+	rlwimi	$s0,$t0,24,16,23
+	rlwimi	$s1,$t1,24,16,23
+	rlwimi	$s2,$t2,24,16,23
+	rlwimi	$s3,$t3,24,16,23
+___
+$code.=<<___;
+	bl	LAES_Te
+	bl	Lppc_AES_encrypt_compact
+	$POP	$out,`$FRAME-$SIZE_T*19`($sp)
+___
+$code.=<<___ if ($LITTLE_ENDIAN);
+	rotlwi	$t0,$s0,8
+	rotlwi	$t1,$s1,8
+	rotlwi	$t2,$s2,8
+	rotlwi	$t3,$s3,8
+	rlwimi	$t0,$s0,24,0,7
+	rlwimi	$t1,$s1,24,0,7
+	rlwimi	$t2,$s2,24,0,7
+	rlwimi	$t3,$s3,24,0,7
+	rlwimi	$t0,$s0,24,16,23
+	rlwimi	$t1,$s1,24,16,23
+	rlwimi	$t2,$s2,24,16,23
+	rlwimi	$t3,$s3,24,16,23
+	stw	$t0,0($out)
+	stw	$t1,4($out)
+	stw	$t2,8($out)
+	stw	$t3,12($out)
+___
+$code.=<<___ if (!$LITTLE_ENDIAN);
+	stw	$s0,0($out)
+	stw	$s1,4($out)
+	stw	$s2,8($out)
+	stw	$s3,12($out)
+___
+$code.=<<___;
+	b	Lenc_done
+
+Lenc_unaligned:
+	subfic	$t0,$inp,4096
+	subfic	$t1,$out,4096
+	andi.	$t0,$t0,4096-16
+	beq	Lenc_xpage
+	andi.	$t1,$t1,4096-16
+	bne	Lenc_unaligned_ok
+
+Lenc_xpage:
+	lbz	$acc00,0($inp)
+	lbz	$acc01,1($inp)
+	lbz	$acc02,2($inp)
+	lbz	$s0,3($inp)
+	lbz	$acc04,4($inp)
+	lbz	$acc05,5($inp)
+	lbz	$acc06,6($inp)
+	lbz	$s1,7($inp)
+	lbz	$acc08,8($inp)
+	lbz	$acc09,9($inp)
+	lbz	$acc10,10($inp)
+	insrwi	$s0,$acc00,8,0
+	lbz	$s2,11($inp)
+	insrwi	$s1,$acc04,8,0
+	lbz	$acc12,12($inp)
+	insrwi	$s0,$acc01,8,8
+	lbz	$acc13,13($inp)
+	insrwi	$s1,$acc05,8,8
+	lbz	$acc14,14($inp)
+	insrwi	$s0,$acc02,8,16
+	lbz	$s3,15($inp)
+	insrwi	$s1,$acc06,8,16
+	insrwi	$s2,$acc08,8,0
+	insrwi	$s3,$acc12,8,0
+	insrwi	$s2,$acc09,8,8
+	insrwi	$s3,$acc13,8,8
+	insrwi	$s2,$acc10,8,16
+	insrwi	$s3,$acc14,8,16
+
+	bl	LAES_Te
+	bl	Lppc_AES_encrypt_compact
+	$POP	$out,`$FRAME-$SIZE_T*19`($sp)
+
+	extrwi	$acc00,$s0,8,0
+	extrwi	$acc01,$s0,8,8
+	stb	$acc00,0($out)
+	extrwi	$acc02,$s0,8,16
+	stb	$acc01,1($out)
+	stb	$acc02,2($out)
+	extrwi	$acc04,$s1,8,0
+	stb	$s0,3($out)
+	extrwi	$acc05,$s1,8,8
+	stb	$acc04,4($out)
+	extrwi	$acc06,$s1,8,16
+	stb	$acc05,5($out)
+	stb	$acc06,6($out)
+	extrwi	$acc08,$s2,8,0
+	stb	$s1,7($out)
+	extrwi	$acc09,$s2,8,8
+	stb	$acc08,8($out)
+	extrwi	$acc10,$s2,8,16
+	stb	$acc09,9($out)
+	stb	$acc10,10($out)
+	extrwi	$acc12,$s3,8,0
+	stb	$s2,11($out)
+	extrwi	$acc13,$s3,8,8
+	stb	$acc12,12($out)
+	extrwi	$acc14,$s3,8,16
+	stb	$acc13,13($out)
+	stb	$acc14,14($out)
+	stb	$s3,15($out)
+
+Lenc_done:
+	$POP	r0,`$FRAME+$LRSAVE`($sp)
+	$POP	r14,`$FRAME-$SIZE_T*18`($sp)
+	$POP	r15,`$FRAME-$SIZE_T*17`($sp)
+	$POP	r16,`$FRAME-$SIZE_T*16`($sp)
+	$POP	r17,`$FRAME-$SIZE_T*15`($sp)
+	$POP	r18,`$FRAME-$SIZE_T*14`($sp)
+	$POP	r19,`$FRAME-$SIZE_T*13`($sp)
+	$POP	r20,`$FRAME-$SIZE_T*12`($sp)
+	$POP	r21,`$FRAME-$SIZE_T*11`($sp)
+	$POP	r22,`$FRAME-$SIZE_T*10`($sp)
+	$POP	r23,`$FRAME-$SIZE_T*9`($sp)
+	$POP	r24,`$FRAME-$SIZE_T*8`($sp)
+	$POP	r25,`$FRAME-$SIZE_T*7`($sp)
+	$POP	r26,`$FRAME-$SIZE_T*6`($sp)
+	$POP	r27,`$FRAME-$SIZE_T*5`($sp)
+	$POP	r28,`$FRAME-$SIZE_T*4`($sp)
+	$POP	r29,`$FRAME-$SIZE_T*3`($sp)
+	$POP	r30,`$FRAME-$SIZE_T*2`($sp)
+	$POP	r31,`$FRAME-$SIZE_T*1`($sp)
+	mtlr	r0
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,4,1,0x80,18,3,0
+	.long	0
+
+.align	5
+Lppc_AES_encrypt:
+	lwz	$acc00,240($key)
+	addi	$Tbl1,$Tbl0,3
+	lwz	$t0,0($key)
+	addi	$Tbl2,$Tbl0,2
+	lwz	$t1,4($key)
+	addi	$Tbl3,$Tbl0,1
+	lwz	$t2,8($key)
+	addi	$acc00,$acc00,-1
+	lwz	$t3,12($key)
+	addi	$key,$key,16
+	xor	$s0,$s0,$t0
+	xor	$s1,$s1,$t1
+	xor	$s2,$s2,$t2
+	xor	$s3,$s3,$t3
+	mtctr	$acc00
+.align	4
+Lenc_loop:
+	rlwinm	$acc00,$s0,`32-24+3`,21,28
+	rlwinm	$acc01,$s1,`32-24+3`,21,28
+	rlwinm	$acc02,$s2,`32-24+3`,21,28
+	rlwinm	$acc03,$s3,`32-24+3`,21,28
+	lwz	$t0,0($key)
+	rlwinm	$acc04,$s1,`32-16+3`,21,28
+	lwz	$t1,4($key)
+	rlwinm	$acc05,$s2,`32-16+3`,21,28
+	lwz	$t2,8($key)
+	rlwinm	$acc06,$s3,`32-16+3`,21,28
+	lwz	$t3,12($key)
+	rlwinm	$acc07,$s0,`32-16+3`,21,28
+	lwzx	$acc00,$Tbl0,$acc00
+	rlwinm	$acc08,$s2,`32-8+3`,21,28
+	lwzx	$acc01,$Tbl0,$acc01
+	rlwinm	$acc09,$s3,`32-8+3`,21,28
+	lwzx	$acc02,$Tbl0,$acc02
+	rlwinm	$acc10,$s0,`32-8+3`,21,28
+	lwzx	$acc03,$Tbl0,$acc03
+	rlwinm	$acc11,$s1,`32-8+3`,21,28
+	lwzx	$acc04,$Tbl1,$acc04
+	rlwinm	$acc12,$s3,`0+3`,21,28
+	lwzx	$acc05,$Tbl1,$acc05
+	rlwinm	$acc13,$s0,`0+3`,21,28
+	lwzx	$acc06,$Tbl1,$acc06
+	rlwinm	$acc14,$s1,`0+3`,21,28
+	lwzx	$acc07,$Tbl1,$acc07
+	rlwinm	$acc15,$s2,`0+3`,21,28
+	lwzx	$acc08,$Tbl2,$acc08
+	xor	$t0,$t0,$acc00
+	lwzx	$acc09,$Tbl2,$acc09
+	xor	$t1,$t1,$acc01
+	lwzx	$acc10,$Tbl2,$acc10
+	xor	$t2,$t2,$acc02
+	lwzx	$acc11,$Tbl2,$acc11
+	xor	$t3,$t3,$acc03
+	lwzx	$acc12,$Tbl3,$acc12
+	xor	$t0,$t0,$acc04
+	lwzx	$acc13,$Tbl3,$acc13
+	xor	$t1,$t1,$acc05
+	lwzx	$acc14,$Tbl3,$acc14
+	xor	$t2,$t2,$acc06
+	lwzx	$acc15,$Tbl3,$acc15
+	xor	$t3,$t3,$acc07
+	xor	$t0,$t0,$acc08
+	xor	$t1,$t1,$acc09
+	xor	$t2,$t2,$acc10
+	xor	$t3,$t3,$acc11
+	xor	$s0,$t0,$acc12
+	xor	$s1,$t1,$acc13
+	xor	$s2,$t2,$acc14
+	xor	$s3,$t3,$acc15
+	addi	$key,$key,16
+	bdnz	Lenc_loop
+
+	addi	$Tbl2,$Tbl0,2048
+	nop
+	lwz	$t0,0($key)
+	rlwinm	$acc00,$s0,`32-24`,24,31
+	lwz	$t1,4($key)
+	rlwinm	$acc01,$s1,`32-24`,24,31
+	lwz	$t2,8($key)
+	rlwinm	$acc02,$s2,`32-24`,24,31
+	lwz	$t3,12($key)
+	rlwinm	$acc03,$s3,`32-24`,24,31
+	lwz	$acc08,`2048+0`($Tbl0)	! prefetch Te4
+	rlwinm	$acc04,$s1,`32-16`,24,31
+	lwz	$acc09,`2048+32`($Tbl0)
+	rlwinm	$acc05,$s2,`32-16`,24,31
+	lwz	$acc10,`2048+64`($Tbl0)
+	rlwinm	$acc06,$s3,`32-16`,24,31
+	lwz	$acc11,`2048+96`($Tbl0)
+	rlwinm	$acc07,$s0,`32-16`,24,31
+	lwz	$acc12,`2048+128`($Tbl0)
+	rlwinm	$acc08,$s2,`32-8`,24,31
+	lwz	$acc13,`2048+160`($Tbl0)
+	rlwinm	$acc09,$s3,`32-8`,24,31
+	lwz	$acc14,`2048+192`($Tbl0)
+	rlwinm	$acc10,$s0,`32-8`,24,31
+	lwz	$acc15,`2048+224`($Tbl0)
+	rlwinm	$acc11,$s1,`32-8`,24,31
+	lbzx	$acc00,$Tbl2,$acc00
+	rlwinm	$acc12,$s3,`0`,24,31
+	lbzx	$acc01,$Tbl2,$acc01
+	rlwinm	$acc13,$s0,`0`,24,31
+	lbzx	$acc02,$Tbl2,$acc02
+	rlwinm	$acc14,$s1,`0`,24,31
+	lbzx	$acc03,$Tbl2,$acc03
+	rlwinm	$acc15,$s2,`0`,24,31
+	lbzx	$acc04,$Tbl2,$acc04
+	rlwinm	$s0,$acc00,24,0,7
+	lbzx	$acc05,$Tbl2,$acc05
+	rlwinm	$s1,$acc01,24,0,7
+	lbzx	$acc06,$Tbl2,$acc06
+	rlwinm	$s2,$acc02,24,0,7
+	lbzx	$acc07,$Tbl2,$acc07
+	rlwinm	$s3,$acc03,24,0,7
+	lbzx	$acc08,$Tbl2,$acc08
+	rlwimi	$s0,$acc04,16,8,15
+	lbzx	$acc09,$Tbl2,$acc09
+	rlwimi	$s1,$acc05,16,8,15
+	lbzx	$acc10,$Tbl2,$acc10
+	rlwimi	$s2,$acc06,16,8,15
+	lbzx	$acc11,$Tbl2,$acc11
+	rlwimi	$s3,$acc07,16,8,15
+	lbzx	$acc12,$Tbl2,$acc12
+	rlwimi	$s0,$acc08,8,16,23
+	lbzx	$acc13,$Tbl2,$acc13
+	rlwimi	$s1,$acc09,8,16,23
+	lbzx	$acc14,$Tbl2,$acc14
+	rlwimi	$s2,$acc10,8,16,23
+	lbzx	$acc15,$Tbl2,$acc15
+	rlwimi	$s3,$acc11,8,16,23
+	or	$s0,$s0,$acc12
+	or	$s1,$s1,$acc13
+	or	$s2,$s2,$acc14
+	or	$s3,$s3,$acc15
+	xor	$s0,$s0,$t0
+	xor	$s1,$s1,$t1
+	xor	$s2,$s2,$t2
+	xor	$s3,$s3,$t3
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+
+.align	4
+Lppc_AES_encrypt_compact:
+	lwz	$acc00,240($key)
+	addi	$Tbl1,$Tbl0,2048
+	lwz	$t0,0($key)
+	lis	$mask80,0x8080
+	lwz	$t1,4($key)
+	lis	$mask1b,0x1b1b
+	lwz	$t2,8($key)
+	ori	$mask80,$mask80,0x8080
+	lwz	$t3,12($key)
+	ori	$mask1b,$mask1b,0x1b1b
+	addi	$key,$key,16
+	mtctr	$acc00
+.align	4
+Lenc_compact_loop:
+	xor	$s0,$s0,$t0
+	xor	$s1,$s1,$t1
+	rlwinm	$acc00,$s0,`32-24`,24,31
+	xor	$s2,$s2,$t2
+	rlwinm	$acc01,$s1,`32-24`,24,31
+	xor	$s3,$s3,$t3
+	rlwinm	$acc02,$s2,`32-24`,24,31
+	rlwinm	$acc03,$s3,`32-24`,24,31
+	rlwinm	$acc04,$s1,`32-16`,24,31
+	rlwinm	$acc05,$s2,`32-16`,24,31
+	rlwinm	$acc06,$s3,`32-16`,24,31
+	rlwinm	$acc07,$s0,`32-16`,24,31
+	lbzx	$acc00,$Tbl1,$acc00
+	rlwinm	$acc08,$s2,`32-8`,24,31
+	lbzx	$acc01,$Tbl1,$acc01
+	rlwinm	$acc09,$s3,`32-8`,24,31
+	lbzx	$acc02,$Tbl1,$acc02
+	rlwinm	$acc10,$s0,`32-8`,24,31
+	lbzx	$acc03,$Tbl1,$acc03
+	rlwinm	$acc11,$s1,`32-8`,24,31
+	lbzx	$acc04,$Tbl1,$acc04
+	rlwinm	$acc12,$s3,`0`,24,31
+	lbzx	$acc05,$Tbl1,$acc05
+	rlwinm	$acc13,$s0,`0`,24,31
+	lbzx	$acc06,$Tbl1,$acc06
+	rlwinm	$acc14,$s1,`0`,24,31
+	lbzx	$acc07,$Tbl1,$acc07
+	rlwinm	$acc15,$s2,`0`,24,31
+	lbzx	$acc08,$Tbl1,$acc08
+	rlwinm	$s0,$acc00,24,0,7
+	lbzx	$acc09,$Tbl1,$acc09
+	rlwinm	$s1,$acc01,24,0,7
+	lbzx	$acc10,$Tbl1,$acc10
+	rlwinm	$s2,$acc02,24,0,7
+	lbzx	$acc11,$Tbl1,$acc11
+	rlwinm	$s3,$acc03,24,0,7
+	lbzx	$acc12,$Tbl1,$acc12
+	rlwimi	$s0,$acc04,16,8,15
+	lbzx	$acc13,$Tbl1,$acc13
+	rlwimi	$s1,$acc05,16,8,15
+	lbzx	$acc14,$Tbl1,$acc14
+	rlwimi	$s2,$acc06,16,8,15
+	lbzx	$acc15,$Tbl1,$acc15
+	rlwimi	$s3,$acc07,16,8,15
+	rlwimi	$s0,$acc08,8,16,23
+	rlwimi	$s1,$acc09,8,16,23
+	rlwimi	$s2,$acc10,8,16,23
+	rlwimi	$s3,$acc11,8,16,23
+	lwz	$t0,0($key)
+	or	$s0,$s0,$acc12
+	lwz	$t1,4($key)
+	or	$s1,$s1,$acc13
+	lwz	$t2,8($key)
+	or	$s2,$s2,$acc14
+	lwz	$t3,12($key)
+	or	$s3,$s3,$acc15
+
+	addi	$key,$key,16
+	bdz	Lenc_compact_done
+
+	and	$acc00,$s0,$mask80	# r1=r0&0x80808080
+	and	$acc01,$s1,$mask80
+	and	$acc02,$s2,$mask80
+	and	$acc03,$s3,$mask80
+	srwi	$acc04,$acc00,7		# r1>>7
+	andc	$acc08,$s0,$mask80	# r0&0x7f7f7f7f
+	srwi	$acc05,$acc01,7
+	andc	$acc09,$s1,$mask80
+	srwi	$acc06,$acc02,7
+	andc	$acc10,$s2,$mask80
+	srwi	$acc07,$acc03,7
+	andc	$acc11,$s3,$mask80
+	sub	$acc00,$acc00,$acc04	# r1-(r1>>7)
+	sub	$acc01,$acc01,$acc05
+	sub	$acc02,$acc02,$acc06
+	sub	$acc03,$acc03,$acc07
+	add	$acc08,$acc08,$acc08	# (r0&0x7f7f7f7f)<<1
+	add	$acc09,$acc09,$acc09
+	add	$acc10,$acc10,$acc10
+	add	$acc11,$acc11,$acc11
+	and	$acc00,$acc00,$mask1b	# (r1-(r1>>7))&0x1b1b1b1b
+	and	$acc01,$acc01,$mask1b
+	and	$acc02,$acc02,$mask1b
+	and	$acc03,$acc03,$mask1b
+	xor	$acc00,$acc00,$acc08	# r2
+	xor	$acc01,$acc01,$acc09
+	 rotlwi	$acc12,$s0,16		# ROTATE(r0,16)
+	xor	$acc02,$acc02,$acc10
+	 rotlwi	$acc13,$s1,16
+	xor	$acc03,$acc03,$acc11
+	 rotlwi	$acc14,$s2,16
+
+	xor	$s0,$s0,$acc00		# r0^r2
+	rotlwi	$acc15,$s3,16
+	xor	$s1,$s1,$acc01
+	rotrwi	$s0,$s0,24		# ROTATE(r2^r0,24)
+	xor	$s2,$s2,$acc02
+	rotrwi	$s1,$s1,24
+	xor	$s3,$s3,$acc03
+	rotrwi	$s2,$s2,24
+	xor	$s0,$s0,$acc00		# ROTATE(r2^r0,24)^r2
+	rotrwi	$s3,$s3,24
+	xor	$s1,$s1,$acc01
+	xor	$s2,$s2,$acc02
+	xor	$s3,$s3,$acc03
+	rotlwi	$acc08,$acc12,8		# ROTATE(r0,24)
+	xor	$s0,$s0,$acc12		#
+	rotlwi	$acc09,$acc13,8
+	xor	$s1,$s1,$acc13
+	rotlwi	$acc10,$acc14,8
+	xor	$s2,$s2,$acc14
+	rotlwi	$acc11,$acc15,8
+	xor	$s3,$s3,$acc15
+	xor	$s0,$s0,$acc08		#
+	xor	$s1,$s1,$acc09
+	xor	$s2,$s2,$acc10
+	xor	$s3,$s3,$acc11
+
+	b	Lenc_compact_loop
+.align	4
+Lenc_compact_done:
+	xor	$s0,$s0,$t0
+	xor	$s1,$s1,$t1
+	xor	$s2,$s2,$t2
+	xor	$s3,$s3,$t3
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+.size	.AES_encrypt,.-.AES_encrypt
+
+.globl	.AES_decrypt
+.align	7
+.AES_decrypt:
+	$STU	$sp,-$FRAME($sp)
+	mflr	r0
+
+	$PUSH	$out,`$FRAME-$SIZE_T*19`($sp)
+	$PUSH	r14,`$FRAME-$SIZE_T*18`($sp)
+	$PUSH	r15,`$FRAME-$SIZE_T*17`($sp)
+	$PUSH	r16,`$FRAME-$SIZE_T*16`($sp)
+	$PUSH	r17,`$FRAME-$SIZE_T*15`($sp)
+	$PUSH	r18,`$FRAME-$SIZE_T*14`($sp)
+	$PUSH	r19,`$FRAME-$SIZE_T*13`($sp)
+	$PUSH	r20,`$FRAME-$SIZE_T*12`($sp)
+	$PUSH	r21,`$FRAME-$SIZE_T*11`($sp)
+	$PUSH	r22,`$FRAME-$SIZE_T*10`($sp)
+	$PUSH	r23,`$FRAME-$SIZE_T*9`($sp)
+	$PUSH	r24,`$FRAME-$SIZE_T*8`($sp)
+	$PUSH	r25,`$FRAME-$SIZE_T*7`($sp)
+	$PUSH	r26,`$FRAME-$SIZE_T*6`($sp)
+	$PUSH	r27,`$FRAME-$SIZE_T*5`($sp)
+	$PUSH	r28,`$FRAME-$SIZE_T*4`($sp)
+	$PUSH	r29,`$FRAME-$SIZE_T*3`($sp)
+	$PUSH	r30,`$FRAME-$SIZE_T*2`($sp)
+	$PUSH	r31,`$FRAME-$SIZE_T*1`($sp)
+	$PUSH	r0,`$FRAME+$LRSAVE`($sp)
+
+	andi.	$t0,$inp,3
+	andi.	$t1,$out,3
+	or.	$t0,$t0,$t1
+	bne	Ldec_unaligned
+
+Ldec_unaligned_ok:
+___
+$code.=<<___ if (!$LITTLE_ENDIAN);
+	lwz	$s0,0($inp)
+	lwz	$s1,4($inp)
+	lwz	$s2,8($inp)
+	lwz	$s3,12($inp)
+___
+$code.=<<___ if ($LITTLE_ENDIAN);
+	lwz	$t0,0($inp)
+	lwz	$t1,4($inp)
+	lwz	$t2,8($inp)
+	lwz	$t3,12($inp)
+	rotlwi	$s0,$t0,8
+	rotlwi	$s1,$t1,8
+	rotlwi	$s2,$t2,8
+	rotlwi	$s3,$t3,8
+	rlwimi	$s0,$t0,24,0,7
+	rlwimi	$s1,$t1,24,0,7
+	rlwimi	$s2,$t2,24,0,7
+	rlwimi	$s3,$t3,24,0,7
+	rlwimi	$s0,$t0,24,16,23
+	rlwimi	$s1,$t1,24,16,23
+	rlwimi	$s2,$t2,24,16,23
+	rlwimi	$s3,$t3,24,16,23
+___
+$code.=<<___;
+	bl	LAES_Td
+	bl	Lppc_AES_decrypt_compact
+	$POP	$out,`$FRAME-$SIZE_T*19`($sp)
+___
+$code.=<<___ if ($LITTLE_ENDIAN);
+	rotlwi	$t0,$s0,8
+	rotlwi	$t1,$s1,8
+	rotlwi	$t2,$s2,8
+	rotlwi	$t3,$s3,8
+	rlwimi	$t0,$s0,24,0,7
+	rlwimi	$t1,$s1,24,0,7
+	rlwimi	$t2,$s2,24,0,7
+	rlwimi	$t3,$s3,24,0,7
+	rlwimi	$t0,$s0,24,16,23
+	rlwimi	$t1,$s1,24,16,23
+	rlwimi	$t2,$s2,24,16,23
+	rlwimi	$t3,$s3,24,16,23
+	stw	$t0,0($out)
+	stw	$t1,4($out)
+	stw	$t2,8($out)
+	stw	$t3,12($out)
+___
+$code.=<<___ if (!$LITTLE_ENDIAN);
+	stw	$s0,0($out)
+	stw	$s1,4($out)
+	stw	$s2,8($out)
+	stw	$s3,12($out)
+___
+$code.=<<___;
+	b	Ldec_done
+
+Ldec_unaligned:
+	subfic	$t0,$inp,4096
+	subfic	$t1,$out,4096
+	andi.	$t0,$t0,4096-16
+	beq	Ldec_xpage
+	andi.	$t1,$t1,4096-16
+	bne	Ldec_unaligned_ok
+
+Ldec_xpage:
+	lbz	$acc00,0($inp)
+	lbz	$acc01,1($inp)
+	lbz	$acc02,2($inp)
+	lbz	$s0,3($inp)
+	lbz	$acc04,4($inp)
+	lbz	$acc05,5($inp)
+	lbz	$acc06,6($inp)
+	lbz	$s1,7($inp)
+	lbz	$acc08,8($inp)
+	lbz	$acc09,9($inp)
+	lbz	$acc10,10($inp)
+	insrwi	$s0,$acc00,8,0
+	lbz	$s2,11($inp)
+	insrwi	$s1,$acc04,8,0
+	lbz	$acc12,12($inp)
+	insrwi	$s0,$acc01,8,8
+	lbz	$acc13,13($inp)
+	insrwi	$s1,$acc05,8,8
+	lbz	$acc14,14($inp)
+	insrwi	$s0,$acc02,8,16
+	lbz	$s3,15($inp)
+	insrwi	$s1,$acc06,8,16
+	insrwi	$s2,$acc08,8,0
+	insrwi	$s3,$acc12,8,0
+	insrwi	$s2,$acc09,8,8
+	insrwi	$s3,$acc13,8,8
+	insrwi	$s2,$acc10,8,16
+	insrwi	$s3,$acc14,8,16
+
+	bl	LAES_Td
+	bl	Lppc_AES_decrypt_compact
+	$POP	$out,`$FRAME-$SIZE_T*19`($sp)
+
+	extrwi	$acc00,$s0,8,0
+	extrwi	$acc01,$s0,8,8
+	stb	$acc00,0($out)
+	extrwi	$acc02,$s0,8,16
+	stb	$acc01,1($out)
+	stb	$acc02,2($out)
+	extrwi	$acc04,$s1,8,0
+	stb	$s0,3($out)
+	extrwi	$acc05,$s1,8,8
+	stb	$acc04,4($out)
+	extrwi	$acc06,$s1,8,16
+	stb	$acc05,5($out)
+	stb	$acc06,6($out)
+	extrwi	$acc08,$s2,8,0
+	stb	$s1,7($out)
+	extrwi	$acc09,$s2,8,8
+	stb	$acc08,8($out)
+	extrwi	$acc10,$s2,8,16
+	stb	$acc09,9($out)
+	stb	$acc10,10($out)
+	extrwi	$acc12,$s3,8,0
+	stb	$s2,11($out)
+	extrwi	$acc13,$s3,8,8
+	stb	$acc12,12($out)
+	extrwi	$acc14,$s3,8,16
+	stb	$acc13,13($out)
+	stb	$acc14,14($out)
+	stb	$s3,15($out)
+
+Ldec_done:
+	$POP	r0,`$FRAME+$LRSAVE`($sp)
+	$POP	r14,`$FRAME-$SIZE_T*18`($sp)
+	$POP	r15,`$FRAME-$SIZE_T*17`($sp)
+	$POP	r16,`$FRAME-$SIZE_T*16`($sp)
+	$POP	r17,`$FRAME-$SIZE_T*15`($sp)
+	$POP	r18,`$FRAME-$SIZE_T*14`($sp)
+	$POP	r19,`$FRAME-$SIZE_T*13`($sp)
+	$POP	r20,`$FRAME-$SIZE_T*12`($sp)
+	$POP	r21,`$FRAME-$SIZE_T*11`($sp)
+	$POP	r22,`$FRAME-$SIZE_T*10`($sp)
+	$POP	r23,`$FRAME-$SIZE_T*9`($sp)
+	$POP	r24,`$FRAME-$SIZE_T*8`($sp)
+	$POP	r25,`$FRAME-$SIZE_T*7`($sp)
+	$POP	r26,`$FRAME-$SIZE_T*6`($sp)
+	$POP	r27,`$FRAME-$SIZE_T*5`($sp)
+	$POP	r28,`$FRAME-$SIZE_T*4`($sp)
+	$POP	r29,`$FRAME-$SIZE_T*3`($sp)
+	$POP	r30,`$FRAME-$SIZE_T*2`($sp)
+	$POP	r31,`$FRAME-$SIZE_T*1`($sp)
+	mtlr	r0
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,4,1,0x80,18,3,0
+	.long	0
+
+.align	5
+Lppc_AES_decrypt:
+	lwz	$acc00,240($key)
+	addi	$Tbl1,$Tbl0,3
+	lwz	$t0,0($key)
+	addi	$Tbl2,$Tbl0,2
+	lwz	$t1,4($key)
+	addi	$Tbl3,$Tbl0,1
+	lwz	$t2,8($key)
+	addi	$acc00,$acc00,-1
+	lwz	$t3,12($key)
+	addi	$key,$key,16
+	xor	$s0,$s0,$t0
+	xor	$s1,$s1,$t1
+	xor	$s2,$s2,$t2
+	xor	$s3,$s3,$t3
+	mtctr	$acc00
+.align	4
+Ldec_loop:
+	rlwinm	$acc00,$s0,`32-24+3`,21,28
+	rlwinm	$acc01,$s1,`32-24+3`,21,28
+	rlwinm	$acc02,$s2,`32-24+3`,21,28
+	rlwinm	$acc03,$s3,`32-24+3`,21,28
+	lwz	$t0,0($key)
+	rlwinm	$acc04,$s3,`32-16+3`,21,28
+	lwz	$t1,4($key)
+	rlwinm	$acc05,$s0,`32-16+3`,21,28
+	lwz	$t2,8($key)
+	rlwinm	$acc06,$s1,`32-16+3`,21,28
+	lwz	$t3,12($key)
+	rlwinm	$acc07,$s2,`32-16+3`,21,28
+	lwzx	$acc00,$Tbl0,$acc00
+	rlwinm	$acc08,$s2,`32-8+3`,21,28
+	lwzx	$acc01,$Tbl0,$acc01
+	rlwinm	$acc09,$s3,`32-8+3`,21,28
+	lwzx	$acc02,$Tbl0,$acc02
+	rlwinm	$acc10,$s0,`32-8+3`,21,28
+	lwzx	$acc03,$Tbl0,$acc03
+	rlwinm	$acc11,$s1,`32-8+3`,21,28
+	lwzx	$acc04,$Tbl1,$acc04
+	rlwinm	$acc12,$s1,`0+3`,21,28
+	lwzx	$acc05,$Tbl1,$acc05
+	rlwinm	$acc13,$s2,`0+3`,21,28
+	lwzx	$acc06,$Tbl1,$acc06
+	rlwinm	$acc14,$s3,`0+3`,21,28
+	lwzx	$acc07,$Tbl1,$acc07
+	rlwinm	$acc15,$s0,`0+3`,21,28
+	lwzx	$acc08,$Tbl2,$acc08
+	xor	$t0,$t0,$acc00
+	lwzx	$acc09,$Tbl2,$acc09
+	xor	$t1,$t1,$acc01
+	lwzx	$acc10,$Tbl2,$acc10
+	xor	$t2,$t2,$acc02
+	lwzx	$acc11,$Tbl2,$acc11
+	xor	$t3,$t3,$acc03
+	lwzx	$acc12,$Tbl3,$acc12
+	xor	$t0,$t0,$acc04
+	lwzx	$acc13,$Tbl3,$acc13
+	xor	$t1,$t1,$acc05
+	lwzx	$acc14,$Tbl3,$acc14
+	xor	$t2,$t2,$acc06
+	lwzx	$acc15,$Tbl3,$acc15
+	xor	$t3,$t3,$acc07
+	xor	$t0,$t0,$acc08
+	xor	$t1,$t1,$acc09
+	xor	$t2,$t2,$acc10
+	xor	$t3,$t3,$acc11
+	xor	$s0,$t0,$acc12
+	xor	$s1,$t1,$acc13
+	xor	$s2,$t2,$acc14
+	xor	$s3,$t3,$acc15
+	addi	$key,$key,16
+	bdnz	Ldec_loop
+
+	addi	$Tbl2,$Tbl0,2048
+	nop
+	lwz	$t0,0($key)
+	rlwinm	$acc00,$s0,`32-24`,24,31
+	lwz	$t1,4($key)
+	rlwinm	$acc01,$s1,`32-24`,24,31
+	lwz	$t2,8($key)
+	rlwinm	$acc02,$s2,`32-24`,24,31
+	lwz	$t3,12($key)
+	rlwinm	$acc03,$s3,`32-24`,24,31
+	lwz	$acc08,`2048+0`($Tbl0)	! prefetch Td4
+	rlwinm	$acc04,$s3,`32-16`,24,31
+	lwz	$acc09,`2048+32`($Tbl0)
+	rlwinm	$acc05,$s0,`32-16`,24,31
+	lwz	$acc10,`2048+64`($Tbl0)
+	lbzx	$acc00,$Tbl2,$acc00
+	lwz	$acc11,`2048+96`($Tbl0)
+	lbzx	$acc01,$Tbl2,$acc01
+	lwz	$acc12,`2048+128`($Tbl0)
+	rlwinm	$acc06,$s1,`32-16`,24,31
+	lwz	$acc13,`2048+160`($Tbl0)
+	rlwinm	$acc07,$s2,`32-16`,24,31
+	lwz	$acc14,`2048+192`($Tbl0)
+	rlwinm	$acc08,$s2,`32-8`,24,31
+	lwz	$acc15,`2048+224`($Tbl0)
+	rlwinm	$acc09,$s3,`32-8`,24,31
+	lbzx	$acc02,$Tbl2,$acc02
+	rlwinm	$acc10,$s0,`32-8`,24,31
+	lbzx	$acc03,$Tbl2,$acc03
+	rlwinm	$acc11,$s1,`32-8`,24,31
+	lbzx	$acc04,$Tbl2,$acc04
+	rlwinm	$acc12,$s1,`0`,24,31
+	lbzx	$acc05,$Tbl2,$acc05
+	rlwinm	$acc13,$s2,`0`,24,31
+	lbzx	$acc06,$Tbl2,$acc06
+	rlwinm	$acc14,$s3,`0`,24,31
+	lbzx	$acc07,$Tbl2,$acc07
+	rlwinm	$acc15,$s0,`0`,24,31
+	lbzx	$acc08,$Tbl2,$acc08
+	rlwinm	$s0,$acc00,24,0,7
+	lbzx	$acc09,$Tbl2,$acc09
+	rlwinm	$s1,$acc01,24,0,7
+	lbzx	$acc10,$Tbl2,$acc10
+	rlwinm	$s2,$acc02,24,0,7
+	lbzx	$acc11,$Tbl2,$acc11
+	rlwinm	$s3,$acc03,24,0,7
+	lbzx	$acc12,$Tbl2,$acc12
+	rlwimi	$s0,$acc04,16,8,15
+	lbzx	$acc13,$Tbl2,$acc13
+	rlwimi	$s1,$acc05,16,8,15
+	lbzx	$acc14,$Tbl2,$acc14
+	rlwimi	$s2,$acc06,16,8,15
+	lbzx	$acc15,$Tbl2,$acc15
+	rlwimi	$s3,$acc07,16,8,15
+	rlwimi	$s0,$acc08,8,16,23
+	rlwimi	$s1,$acc09,8,16,23
+	rlwimi	$s2,$acc10,8,16,23
+	rlwimi	$s3,$acc11,8,16,23
+	or	$s0,$s0,$acc12
+	or	$s1,$s1,$acc13
+	or	$s2,$s2,$acc14
+	or	$s3,$s3,$acc15
+	xor	$s0,$s0,$t0
+	xor	$s1,$s1,$t1
+	xor	$s2,$s2,$t2
+	xor	$s3,$s3,$t3
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+
+.align	4
+Lppc_AES_decrypt_compact:
+	lwz	$acc00,240($key)
+	addi	$Tbl1,$Tbl0,2048
+	lwz	$t0,0($key)
+	lis	$mask80,0x8080
+	lwz	$t1,4($key)
+	lis	$mask1b,0x1b1b
+	lwz	$t2,8($key)
+	ori	$mask80,$mask80,0x8080
+	lwz	$t3,12($key)
+	ori	$mask1b,$mask1b,0x1b1b
+	addi	$key,$key,16
+___
+$code.=<<___ if ($SIZE_T==8);
+	insrdi	$mask80,$mask80,32,0
+	insrdi	$mask1b,$mask1b,32,0
+___
+$code.=<<___;
+	mtctr	$acc00
+.align	4
+Ldec_compact_loop:
+	xor	$s0,$s0,$t0
+	xor	$s1,$s1,$t1
+	rlwinm	$acc00,$s0,`32-24`,24,31
+	xor	$s2,$s2,$t2
+	rlwinm	$acc01,$s1,`32-24`,24,31
+	xor	$s3,$s3,$t3
+	rlwinm	$acc02,$s2,`32-24`,24,31
+	rlwinm	$acc03,$s3,`32-24`,24,31
+	rlwinm	$acc04,$s3,`32-16`,24,31
+	rlwinm	$acc05,$s0,`32-16`,24,31
+	rlwinm	$acc06,$s1,`32-16`,24,31
+	rlwinm	$acc07,$s2,`32-16`,24,31
+	lbzx	$acc00,$Tbl1,$acc00
+	rlwinm	$acc08,$s2,`32-8`,24,31
+	lbzx	$acc01,$Tbl1,$acc01
+	rlwinm	$acc09,$s3,`32-8`,24,31
+	lbzx	$acc02,$Tbl1,$acc02
+	rlwinm	$acc10,$s0,`32-8`,24,31
+	lbzx	$acc03,$Tbl1,$acc03
+	rlwinm	$acc11,$s1,`32-8`,24,31
+	lbzx	$acc04,$Tbl1,$acc04
+	rlwinm	$acc12,$s1,`0`,24,31
+	lbzx	$acc05,$Tbl1,$acc05
+	rlwinm	$acc13,$s2,`0`,24,31
+	lbzx	$acc06,$Tbl1,$acc06
+	rlwinm	$acc14,$s3,`0`,24,31
+	lbzx	$acc07,$Tbl1,$acc07
+	rlwinm	$acc15,$s0,`0`,24,31
+	lbzx	$acc08,$Tbl1,$acc08
+	rlwinm	$s0,$acc00,24,0,7
+	lbzx	$acc09,$Tbl1,$acc09
+	rlwinm	$s1,$acc01,24,0,7
+	lbzx	$acc10,$Tbl1,$acc10
+	rlwinm	$s2,$acc02,24,0,7
+	lbzx	$acc11,$Tbl1,$acc11
+	rlwinm	$s3,$acc03,24,0,7
+	lbzx	$acc12,$Tbl1,$acc12
+	rlwimi	$s0,$acc04,16,8,15
+	lbzx	$acc13,$Tbl1,$acc13
+	rlwimi	$s1,$acc05,16,8,15
+	lbzx	$acc14,$Tbl1,$acc14
+	rlwimi	$s2,$acc06,16,8,15
+	lbzx	$acc15,$Tbl1,$acc15
+	rlwimi	$s3,$acc07,16,8,15
+	rlwimi	$s0,$acc08,8,16,23
+	rlwimi	$s1,$acc09,8,16,23
+	rlwimi	$s2,$acc10,8,16,23
+	rlwimi	$s3,$acc11,8,16,23
+	lwz	$t0,0($key)
+	or	$s0,$s0,$acc12
+	lwz	$t1,4($key)
+	or	$s1,$s1,$acc13
+	lwz	$t2,8($key)
+	or	$s2,$s2,$acc14
+	lwz	$t3,12($key)
+	or	$s3,$s3,$acc15
+
+	addi	$key,$key,16
+	bdz	Ldec_compact_done
+___
+$code.=<<___ if ($SIZE_T==8);
+	# vectorized permutation improves decrypt performance by 10%
+	insrdi	$s0,$s1,32,0
+	insrdi	$s2,$s3,32,0
+
+	and	$acc00,$s0,$mask80	# r1=r0&0x80808080
+	and	$acc02,$s2,$mask80
+	srdi	$acc04,$acc00,7		# r1>>7
+	srdi	$acc06,$acc02,7
+	andc	$acc08,$s0,$mask80	# r0&0x7f7f7f7f
+	andc	$acc10,$s2,$mask80
+	sub	$acc00,$acc00,$acc04	# r1-(r1>>7)
+	sub	$acc02,$acc02,$acc06
+	add	$acc08,$acc08,$acc08	# (r0&0x7f7f7f7f)<<1
+	add	$acc10,$acc10,$acc10
+	and	$acc00,$acc00,$mask1b	# (r1-(r1>>7))&0x1b1b1b1b
+	and	$acc02,$acc02,$mask1b
+	xor	$acc00,$acc00,$acc08	# r2
+	xor	$acc02,$acc02,$acc10
+
+	and	$acc04,$acc00,$mask80	# r1=r2&0x80808080
+	and	$acc06,$acc02,$mask80
+	srdi	$acc08,$acc04,7		# r1>>7
+	srdi	$acc10,$acc06,7
+	andc	$acc12,$acc00,$mask80	# r2&0x7f7f7f7f
+	andc	$acc14,$acc02,$mask80
+	sub	$acc04,$acc04,$acc08	# r1-(r1>>7)
+	sub	$acc06,$acc06,$acc10
+	add	$acc12,$acc12,$acc12	# (r2&0x7f7f7f7f)<<1
+	add	$acc14,$acc14,$acc14
+	and	$acc04,$acc04,$mask1b	# (r1-(r1>>7))&0x1b1b1b1b
+	and	$acc06,$acc06,$mask1b
+	xor	$acc04,$acc04,$acc12	# r4
+	xor	$acc06,$acc06,$acc14
+
+	and	$acc08,$acc04,$mask80	# r1=r4&0x80808080
+	and	$acc10,$acc06,$mask80
+	srdi	$acc12,$acc08,7		# r1>>7
+	srdi	$acc14,$acc10,7
+	sub	$acc08,$acc08,$acc12	# r1-(r1>>7)
+	sub	$acc10,$acc10,$acc14
+	andc	$acc12,$acc04,$mask80	# r4&0x7f7f7f7f
+	andc	$acc14,$acc06,$mask80
+	add	$acc12,$acc12,$acc12	# (r4&0x7f7f7f7f)<<1
+	add	$acc14,$acc14,$acc14
+	and	$acc08,$acc08,$mask1b	# (r1-(r1>>7))&0x1b1b1b1b
+	and	$acc10,$acc10,$mask1b
+	xor	$acc08,$acc08,$acc12	# r8
+	xor	$acc10,$acc10,$acc14
+
+	xor	$acc00,$acc00,$s0	# r2^r0
+	xor	$acc02,$acc02,$s2
+	xor	$acc04,$acc04,$s0	# r4^r0
+	xor	$acc06,$acc06,$s2
+
+	extrdi	$acc01,$acc00,32,0
+	extrdi	$acc03,$acc02,32,0
+	extrdi	$acc05,$acc04,32,0
+	extrdi	$acc07,$acc06,32,0
+	extrdi	$acc09,$acc08,32,0
+	extrdi	$acc11,$acc10,32,0
+___
+$code.=<<___ if ($SIZE_T==4);
+	and	$acc00,$s0,$mask80	# r1=r0&0x80808080
+	and	$acc01,$s1,$mask80
+	and	$acc02,$s2,$mask80
+	and	$acc03,$s3,$mask80
+	srwi	$acc04,$acc00,7		# r1>>7
+	andc	$acc08,$s0,$mask80	# r0&0x7f7f7f7f
+	srwi	$acc05,$acc01,7
+	andc	$acc09,$s1,$mask80
+	srwi	$acc06,$acc02,7
+	andc	$acc10,$s2,$mask80
+	srwi	$acc07,$acc03,7
+	andc	$acc11,$s3,$mask80
+	sub	$acc00,$acc00,$acc04	# r1-(r1>>7)
+	sub	$acc01,$acc01,$acc05
+	sub	$acc02,$acc02,$acc06
+	sub	$acc03,$acc03,$acc07
+	add	$acc08,$acc08,$acc08	# (r0&0x7f7f7f7f)<<1
+	add	$acc09,$acc09,$acc09
+	add	$acc10,$acc10,$acc10
+	add	$acc11,$acc11,$acc11
+	and	$acc00,$acc00,$mask1b	# (r1-(r1>>7))&0x1b1b1b1b
+	and	$acc01,$acc01,$mask1b
+	and	$acc02,$acc02,$mask1b
+	and	$acc03,$acc03,$mask1b
+	xor	$acc00,$acc00,$acc08	# r2
+	xor	$acc01,$acc01,$acc09
+	xor	$acc02,$acc02,$acc10
+	xor	$acc03,$acc03,$acc11
+
+	and	$acc04,$acc00,$mask80	# r1=r2&0x80808080
+	and	$acc05,$acc01,$mask80
+	and	$acc06,$acc02,$mask80
+	and	$acc07,$acc03,$mask80
+	srwi	$acc08,$acc04,7		# r1>>7
+	andc	$acc12,$acc00,$mask80	# r2&0x7f7f7f7f
+	srwi	$acc09,$acc05,7
+	andc	$acc13,$acc01,$mask80
+	srwi	$acc10,$acc06,7
+	andc	$acc14,$acc02,$mask80
+	srwi	$acc11,$acc07,7
+	andc	$acc15,$acc03,$mask80
+	sub	$acc04,$acc04,$acc08	# r1-(r1>>7)
+	sub	$acc05,$acc05,$acc09
+	sub	$acc06,$acc06,$acc10
+	sub	$acc07,$acc07,$acc11
+	add	$acc12,$acc12,$acc12	# (r2&0x7f7f7f7f)<<1
+	add	$acc13,$acc13,$acc13
+	add	$acc14,$acc14,$acc14
+	add	$acc15,$acc15,$acc15
+	and	$acc04,$acc04,$mask1b	# (r1-(r1>>7))&0x1b1b1b1b
+	and	$acc05,$acc05,$mask1b
+	and	$acc06,$acc06,$mask1b
+	and	$acc07,$acc07,$mask1b
+	xor	$acc04,$acc04,$acc12	# r4
+	xor	$acc05,$acc05,$acc13
+	xor	$acc06,$acc06,$acc14
+	xor	$acc07,$acc07,$acc15
+
+	and	$acc08,$acc04,$mask80	# r1=r4&0x80808080
+	and	$acc09,$acc05,$mask80
+	srwi	$acc12,$acc08,7		# r1>>7
+	and	$acc10,$acc06,$mask80
+	srwi	$acc13,$acc09,7
+	and	$acc11,$acc07,$mask80
+	srwi	$acc14,$acc10,7
+	sub	$acc08,$acc08,$acc12	# r1-(r1>>7)
+	srwi	$acc15,$acc11,7
+	sub	$acc09,$acc09,$acc13
+	sub	$acc10,$acc10,$acc14
+	sub	$acc11,$acc11,$acc15
+	andc	$acc12,$acc04,$mask80	# r4&0x7f7f7f7f
+	andc	$acc13,$acc05,$mask80
+	andc	$acc14,$acc06,$mask80
+	andc	$acc15,$acc07,$mask80
+	add	$acc12,$acc12,$acc12	# (r4&0x7f7f7f7f)<<1
+	add	$acc13,$acc13,$acc13
+	add	$acc14,$acc14,$acc14
+	add	$acc15,$acc15,$acc15
+	and	$acc08,$acc08,$mask1b	# (r1-(r1>>7))&0x1b1b1b1b
+	and	$acc09,$acc09,$mask1b
+	and	$acc10,$acc10,$mask1b
+	and	$acc11,$acc11,$mask1b
+	xor	$acc08,$acc08,$acc12	# r8
+	xor	$acc09,$acc09,$acc13
+	xor	$acc10,$acc10,$acc14
+	xor	$acc11,$acc11,$acc15
+
+	xor	$acc00,$acc00,$s0	# r2^r0
+	xor	$acc01,$acc01,$s1
+	xor	$acc02,$acc02,$s2
+	xor	$acc03,$acc03,$s3
+	xor	$acc04,$acc04,$s0	# r4^r0
+	xor	$acc05,$acc05,$s1
+	xor	$acc06,$acc06,$s2
+	xor	$acc07,$acc07,$s3
+___
+$code.=<<___;
+	rotrwi	$s0,$s0,8		# = ROTATE(r0,8)
+	rotrwi	$s1,$s1,8
+	xor	$s0,$s0,$acc00		# ^= r2^r0
+	rotrwi	$s2,$s2,8
+	xor	$s1,$s1,$acc01
+	rotrwi	$s3,$s3,8
+	xor	$s2,$s2,$acc02
+	xor	$s3,$s3,$acc03
+	xor	$acc00,$acc00,$acc08
+	xor	$acc01,$acc01,$acc09
+	xor	$acc02,$acc02,$acc10
+	xor	$acc03,$acc03,$acc11
+	xor	$s0,$s0,$acc04		# ^= r4^r0
+	rotrwi	$acc00,$acc00,24
+	xor	$s1,$s1,$acc05
+	rotrwi	$acc01,$acc01,24
+	xor	$s2,$s2,$acc06
+	rotrwi	$acc02,$acc02,24
+	xor	$s3,$s3,$acc07
+	rotrwi	$acc03,$acc03,24
+	xor	$acc04,$acc04,$acc08
+	xor	$acc05,$acc05,$acc09
+	xor	$acc06,$acc06,$acc10
+	xor	$acc07,$acc07,$acc11
+	xor	$s0,$s0,$acc08		# ^= r8 [^((r4^r0)^(r2^r0)=r4^r2)]
+	rotrwi	$acc04,$acc04,16
+	xor	$s1,$s1,$acc09
+	rotrwi	$acc05,$acc05,16
+	xor	$s2,$s2,$acc10
+	rotrwi	$acc06,$acc06,16
+	xor	$s3,$s3,$acc11
+	rotrwi	$acc07,$acc07,16
+	xor	$s0,$s0,$acc00		# ^= ROTATE(r8^r2^r0,24)
+	rotrwi	$acc08,$acc08,8
+	xor	$s1,$s1,$acc01
+	rotrwi	$acc09,$acc09,8
+	xor	$s2,$s2,$acc02
+	rotrwi	$acc10,$acc10,8
+	xor	$s3,$s3,$acc03
+	rotrwi	$acc11,$acc11,8
+	xor	$s0,$s0,$acc04		# ^= ROTATE(r8^r4^r0,16)
+	xor	$s1,$s1,$acc05
+	xor	$s2,$s2,$acc06
+	xor	$s3,$s3,$acc07
+	xor	$s0,$s0,$acc08		# ^= ROTATE(r8,8)
+	xor	$s1,$s1,$acc09
+	xor	$s2,$s2,$acc10
+	xor	$s3,$s3,$acc11
+
+	b	Ldec_compact_loop
+.align	4
+Ldec_compact_done:
+	xor	$s0,$s0,$t0
+	xor	$s1,$s1,$t1
+	xor	$s2,$s2,$t2
+	xor	$s3,$s3,$t3
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+.size	.AES_decrypt,.-.AES_decrypt
+
+.asciz	"AES for PPC, CRYPTOGAMS by <appro\@openssl.org>"
+.align	7
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-s390x.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-s390x.pl
new file mode 100644
index 000000000..0c4005906
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-s390x.pl
@@ -0,0 +1,2282 @@
+#! /usr/bin/env perl
+# Copyright 2007-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# AES for s390x.
+
+# April 2007.
+#
+# Software performance improvement over gcc-generated code is ~70% and
+# in absolute terms is ~73 cycles per byte processed with 128-bit key.
+# You're likely to exclaim "why so slow?" Keep in mind that z-CPUs are
+# *strictly* in-order execution and issued instruction [in this case
+# load value from memory is critical] has to complete before execution
+# flow proceeds. S-boxes are compressed to 2KB[+256B].
+#
+# As for hardware acceleration support. It's basically a "teaser," as
+# it can and should be improved in several ways. Most notably support
+# for CBC is not utilized, nor multiple blocks are ever processed.
+# Then software key schedule can be postponed till hardware support
+# detection... Performance improvement over assembler is reportedly
+# ~2.5x, but can reach >8x [naturally on larger chunks] if proper
+# support is implemented.
+
+# May 2007.
+#
+# Implement AES_set_[en|de]crypt_key. Key schedule setup is avoided
+# for 128-bit keys, if hardware support is detected.
+
+# Januray 2009.
+#
+# Add support for hardware AES192/256 and reschedule instructions to
+# minimize/avoid Address Generation Interlock hazard and to favour
+# dual-issue z10 pipeline. This gave ~25% improvement on z10 and
+# almost 50% on z9. The gain is smaller on z10, because being dual-
+# issue z10 makes it impossible to eliminate the interlock condition:
+# critial path is not long enough. Yet it spends ~24 cycles per byte
+# processed with 128-bit key.
+#
+# Unlike previous version hardware support detection takes place only
+# at the moment of key schedule setup, which is denoted in key->rounds.
+# This is done, because deferred key setup can't be made MT-safe, not
+# for keys longer than 128 bits.
+#
+# Add AES_cbc_encrypt, which gives incredible performance improvement,
+# it was measured to be ~6.6x. It's less than previously mentioned 8x,
+# because software implementation was optimized.
+
+# May 2010.
+#
+# Add AES_ctr32_encrypt. If hardware-assisted, it provides up to 4.3x
+# performance improvement over "generic" counter mode routine relying
+# on single-block, also hardware-assisted, AES_encrypt. "Up to" refers
+# to the fact that exact throughput value depends on current stack
+# frame alignment within 4KB page. In worst case you get ~75% of the
+# maximum, but *on average* it would be as much as ~98%. Meaning that
+# worst case is unlike, it's like hitting ravine on plateau.
+
+# November 2010.
+#
+# Adapt for -m31 build. If kernel supports what's called "highgprs"
+# feature on Linux [see /proc/cpuinfo], it's possible to use 64-bit
+# instructions and achieve "64-bit" performance even in 31-bit legacy
+# application context. The feature is not specific to any particular
+# processor, as long as it's "z-CPU". Latter implies that the code
+# remains z/Architecture specific. On z990 it was measured to perform
+# 2x better than code generated by gcc 4.3.
+
+# December 2010.
+#
+# Add support for z196 "cipher message with counter" instruction.
+# Note however that it's disengaged, because it was measured to
+# perform ~12% worse than vanilla km-based code...
+
+# February 2011.
+#
+# Add AES_xts_[en|de]crypt. This includes support for z196 km-xts-aes
+# instructions, which deliver ~70% improvement at 8KB block size over
+# vanilla km-based code, 37% - at most like 512-bytes block size.
+
+$flavour = shift;
+
+if ($flavour =~ /3[12]/) {
+	$SIZE_T=4;
+	$g="";
+} else {
+	$SIZE_T=8;
+	$g="g";
+}
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+$softonly=0;	# allow hardware support
+
+$t0="%r0";	$mask="%r0";
+$t1="%r1";
+$t2="%r2";	$inp="%r2";
+$t3="%r3";	$out="%r3";	$bits="%r3";
+$key="%r4";
+$i1="%r5";
+$i2="%r6";
+$i3="%r7";
+$s0="%r8";
+$s1="%r9";
+$s2="%r10";
+$s3="%r11";
+$tbl="%r12";
+$rounds="%r13";
+$ra="%r14";
+$sp="%r15";
+
+$stdframe=16*$SIZE_T+4*8;
+
+sub _data_word()
+{ my $i;
+    while(defined($i=shift)) { $code.=sprintf".long\t0x%08x,0x%08x\n",$i,$i; }
+}
+
+$code=<<___;
+#include "s390x_arch.h"
+
+.text
+
+.type	AES_Te,\@object
+.align	256
+AES_Te:
+___
+&_data_word(
+	0xc66363a5, 0xf87c7c84, 0xee777799, 0xf67b7b8d,
+	0xfff2f20d, 0xd66b6bbd, 0xde6f6fb1, 0x91c5c554,
+	0x60303050, 0x02010103, 0xce6767a9, 0x562b2b7d,
+	0xe7fefe19, 0xb5d7d762, 0x4dababe6, 0xec76769a,
+	0x8fcaca45, 0x1f82829d, 0x89c9c940, 0xfa7d7d87,
+	0xeffafa15, 0xb25959eb, 0x8e4747c9, 0xfbf0f00b,
+	0x41adadec, 0xb3d4d467, 0x5fa2a2fd, 0x45afafea,
+	0x239c9cbf, 0x53a4a4f7, 0xe4727296, 0x9bc0c05b,
+	0x75b7b7c2, 0xe1fdfd1c, 0x3d9393ae, 0x4c26266a,
+	0x6c36365a, 0x7e3f3f41, 0xf5f7f702, 0x83cccc4f,
+	0x6834345c, 0x51a5a5f4, 0xd1e5e534, 0xf9f1f108,
+	0xe2717193, 0xabd8d873, 0x62313153, 0x2a15153f,
+	0x0804040c, 0x95c7c752, 0x46232365, 0x9dc3c35e,
+	0x30181828, 0x379696a1, 0x0a05050f, 0x2f9a9ab5,
+	0x0e070709, 0x24121236, 0x1b80809b, 0xdfe2e23d,
+	0xcdebeb26, 0x4e272769, 0x7fb2b2cd, 0xea75759f,
+	0x1209091b, 0x1d83839e, 0x582c2c74, 0x341a1a2e,
+	0x361b1b2d, 0xdc6e6eb2, 0xb45a5aee, 0x5ba0a0fb,
+	0xa45252f6, 0x763b3b4d, 0xb7d6d661, 0x7db3b3ce,
+	0x5229297b, 0xdde3e33e, 0x5e2f2f71, 0x13848497,
+	0xa65353f5, 0xb9d1d168, 0x00000000, 0xc1eded2c,
+	0x40202060, 0xe3fcfc1f, 0x79b1b1c8, 0xb65b5bed,
+	0xd46a6abe, 0x8dcbcb46, 0x67bebed9, 0x7239394b,
+	0x944a4ade, 0x984c4cd4, 0xb05858e8, 0x85cfcf4a,
+	0xbbd0d06b, 0xc5efef2a, 0x4faaaae5, 0xedfbfb16,
+	0x864343c5, 0x9a4d4dd7, 0x66333355, 0x11858594,
+	0x8a4545cf, 0xe9f9f910, 0x04020206, 0xfe7f7f81,
+	0xa05050f0, 0x783c3c44, 0x259f9fba, 0x4ba8a8e3,
+	0xa25151f3, 0x5da3a3fe, 0x804040c0, 0x058f8f8a,
+	0x3f9292ad, 0x219d9dbc, 0x70383848, 0xf1f5f504,
+	0x63bcbcdf, 0x77b6b6c1, 0xafdada75, 0x42212163,
+	0x20101030, 0xe5ffff1a, 0xfdf3f30e, 0xbfd2d26d,
+	0x81cdcd4c, 0x180c0c14, 0x26131335, 0xc3ecec2f,
+	0xbe5f5fe1, 0x359797a2, 0x884444cc, 0x2e171739,
+	0x93c4c457, 0x55a7a7f2, 0xfc7e7e82, 0x7a3d3d47,
+	0xc86464ac, 0xba5d5de7, 0x3219192b, 0xe6737395,
+	0xc06060a0, 0x19818198, 0x9e4f4fd1, 0xa3dcdc7f,
+	0x44222266, 0x542a2a7e, 0x3b9090ab, 0x0b888883,
+	0x8c4646ca, 0xc7eeee29, 0x6bb8b8d3, 0x2814143c,
+	0xa7dede79, 0xbc5e5ee2, 0x160b0b1d, 0xaddbdb76,
+	0xdbe0e03b, 0x64323256, 0x743a3a4e, 0x140a0a1e,
+	0x924949db, 0x0c06060a, 0x4824246c, 0xb85c5ce4,
+	0x9fc2c25d, 0xbdd3d36e, 0x43acacef, 0xc46262a6,
+	0x399191a8, 0x319595a4, 0xd3e4e437, 0xf279798b,
+	0xd5e7e732, 0x8bc8c843, 0x6e373759, 0xda6d6db7,
+	0x018d8d8c, 0xb1d5d564, 0x9c4e4ed2, 0x49a9a9e0,
+	0xd86c6cb4, 0xac5656fa, 0xf3f4f407, 0xcfeaea25,
+	0xca6565af, 0xf47a7a8e, 0x47aeaee9, 0x10080818,
+	0x6fbabad5, 0xf0787888, 0x4a25256f, 0x5c2e2e72,
+	0x381c1c24, 0x57a6a6f1, 0x73b4b4c7, 0x97c6c651,
+	0xcbe8e823, 0xa1dddd7c, 0xe874749c, 0x3e1f1f21,
+	0x964b4bdd, 0x61bdbddc, 0x0d8b8b86, 0x0f8a8a85,
+	0xe0707090, 0x7c3e3e42, 0x71b5b5c4, 0xcc6666aa,
+	0x904848d8, 0x06030305, 0xf7f6f601, 0x1c0e0e12,
+	0xc26161a3, 0x6a35355f, 0xae5757f9, 0x69b9b9d0,
+	0x17868691, 0x99c1c158, 0x3a1d1d27, 0x279e9eb9,
+	0xd9e1e138, 0xebf8f813, 0x2b9898b3, 0x22111133,
+	0xd26969bb, 0xa9d9d970, 0x078e8e89, 0x339494a7,
+	0x2d9b9bb6, 0x3c1e1e22, 0x15878792, 0xc9e9e920,
+	0x87cece49, 0xaa5555ff, 0x50282878, 0xa5dfdf7a,
+	0x038c8c8f, 0x59a1a1f8, 0x09898980, 0x1a0d0d17,
+	0x65bfbfda, 0xd7e6e631, 0x844242c6, 0xd06868b8,
+	0x824141c3, 0x299999b0, 0x5a2d2d77, 0x1e0f0f11,
+	0x7bb0b0cb, 0xa85454fc, 0x6dbbbbd6, 0x2c16163a);
+$code.=<<___;
+# Te4[256]
+.byte	0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5
+.byte	0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76
+.byte	0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0
+.byte	0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0
+.byte	0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc
+.byte	0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15
+.byte	0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a
+.byte	0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75
+.byte	0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0
+.byte	0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84
+.byte	0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b
+.byte	0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf
+.byte	0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85
+.byte	0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8
+.byte	0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5
+.byte	0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2
+.byte	0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17
+.byte	0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73
+.byte	0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88
+.byte	0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb
+.byte	0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c
+.byte	0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79
+.byte	0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9
+.byte	0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08
+.byte	0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6
+.byte	0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a
+.byte	0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e
+.byte	0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e
+.byte	0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94
+.byte	0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf
+.byte	0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68
+.byte	0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16
+# rcon[]
+.long	0x01000000, 0x02000000, 0x04000000, 0x08000000
+.long	0x10000000, 0x20000000, 0x40000000, 0x80000000
+.long	0x1B000000, 0x36000000, 0, 0, 0, 0, 0, 0
+.align	256
+.size	AES_Te,.-AES_Te
+
+# void AES_encrypt(const unsigned char *inp, unsigned char *out,
+# 		 const AES_KEY *key) {
+.globl	AES_encrypt
+.type	AES_encrypt,\@function
+AES_encrypt:
+___
+$code.=<<___ if (!$softonly);
+	l	%r0,240($key)
+	lhi	%r1,16
+	clr	%r0,%r1
+	jl	.Lesoft
+
+	la	%r1,0($key)
+	#la	%r2,0($inp)
+	la	%r4,0($out)
+	lghi	%r3,16		# single block length
+	.long	0xb92e0042	# km %r4,%r2
+	brc	1,.-4		# can this happen?
+	br	%r14
+.align	64
+.Lesoft:
+___
+$code.=<<___;
+	stm${g}	%r3,$ra,3*$SIZE_T($sp)
+
+	llgf	$s0,0($inp)
+	llgf	$s1,4($inp)
+	llgf	$s2,8($inp)
+	llgf	$s3,12($inp)
+
+	larl	$tbl,AES_Te
+	bras	$ra,_s390x_AES_encrypt
+
+	l${g}	$out,3*$SIZE_T($sp)
+	st	$s0,0($out)
+	st	$s1,4($out)
+	st	$s2,8($out)
+	st	$s3,12($out)
+
+	lm${g}	%r6,$ra,6*$SIZE_T($sp)
+	br	$ra
+.size	AES_encrypt,.-AES_encrypt
+
+.type   _s390x_AES_encrypt,\@function
+.align	16
+_s390x_AES_encrypt:
+	st${g}	$ra,15*$SIZE_T($sp)
+	x	$s0,0($key)
+	x	$s1,4($key)
+	x	$s2,8($key)
+	x	$s3,12($key)
+	l	$rounds,240($key)
+	llill	$mask,`0xff<<3`
+	aghi	$rounds,-1
+	j	.Lenc_loop
+.align	16
+.Lenc_loop:
+	sllg	$t1,$s0,`0+3`
+	srlg	$t2,$s0,`8-3`
+	srlg	$t3,$s0,`16-3`
+	srl	$s0,`24-3`
+	nr	$s0,$mask
+	ngr	$t1,$mask
+	nr	$t2,$mask
+	nr	$t3,$mask
+
+	srlg	$i1,$s1,`16-3`	# i0
+	sllg	$i2,$s1,`0+3`
+	srlg	$i3,$s1,`8-3`
+	srl	$s1,`24-3`
+	nr	$i1,$mask
+	nr	$s1,$mask
+	ngr	$i2,$mask
+	nr	$i3,$mask
+
+	l	$s0,0($s0,$tbl)	# Te0[s0>>24]
+	l	$t1,1($t1,$tbl)	# Te3[s0>>0]
+	l	$t2,2($t2,$tbl) # Te2[s0>>8]
+	l	$t3,3($t3,$tbl)	# Te1[s0>>16]
+
+	x	$s0,3($i1,$tbl)	# Te1[s1>>16]
+	l	$s1,0($s1,$tbl)	# Te0[s1>>24]
+	x	$t2,1($i2,$tbl)	# Te3[s1>>0]
+	x	$t3,2($i3,$tbl)	# Te2[s1>>8]
+
+	srlg	$i1,$s2,`8-3`	# i0
+	srlg	$i2,$s2,`16-3`	# i1
+	nr	$i1,$mask
+	nr	$i2,$mask
+	sllg	$i3,$s2,`0+3`
+	srl	$s2,`24-3`
+	nr	$s2,$mask
+	ngr	$i3,$mask
+
+	xr	$s1,$t1
+	srlg	$ra,$s3,`8-3`	# i1
+	sllg	$t1,$s3,`0+3`	# i0
+	nr	$ra,$mask
+	la	$key,16($key)
+	ngr	$t1,$mask
+
+	x	$s0,2($i1,$tbl)	# Te2[s2>>8]
+	x	$s1,3($i2,$tbl)	# Te1[s2>>16]
+	l	$s2,0($s2,$tbl)	# Te0[s2>>24]
+	x	$t3,1($i3,$tbl)	# Te3[s2>>0]
+
+	srlg	$i3,$s3,`16-3`	# i2
+	xr	$s2,$t2
+	srl	$s3,`24-3`
+	nr	$i3,$mask
+	nr	$s3,$mask
+
+	x	$s0,0($key)
+	x	$s1,4($key)
+	x	$s2,8($key)
+	x	$t3,12($key)
+
+	x	$s0,1($t1,$tbl)	# Te3[s3>>0]
+	x	$s1,2($ra,$tbl)	# Te2[s3>>8]
+	x	$s2,3($i3,$tbl)	# Te1[s3>>16]
+	l	$s3,0($s3,$tbl)	# Te0[s3>>24]
+	xr	$s3,$t3
+
+	brct	$rounds,.Lenc_loop
+	.align	16
+
+	sllg	$t1,$s0,`0+3`
+	srlg	$t2,$s0,`8-3`
+	ngr	$t1,$mask
+	srlg	$t3,$s0,`16-3`
+	srl	$s0,`24-3`
+	nr	$s0,$mask
+	nr	$t2,$mask
+	nr	$t3,$mask
+
+	srlg	$i1,$s1,`16-3`	# i0
+	sllg	$i2,$s1,`0+3`
+	ngr	$i2,$mask
+	srlg	$i3,$s1,`8-3`
+	srl	$s1,`24-3`
+	nr	$i1,$mask
+	nr	$s1,$mask
+	nr	$i3,$mask
+
+	llgc	$s0,2($s0,$tbl)	# Te4[s0>>24]
+	llgc	$t1,2($t1,$tbl)	# Te4[s0>>0]
+	sll	$s0,24
+	llgc	$t2,2($t2,$tbl)	# Te4[s0>>8]
+	llgc	$t3,2($t3,$tbl)	# Te4[s0>>16]
+	sll	$t2,8
+	sll	$t3,16
+
+	llgc	$i1,2($i1,$tbl)	# Te4[s1>>16]
+	llgc	$s1,2($s1,$tbl)	# Te4[s1>>24]
+	llgc	$i2,2($i2,$tbl)	# Te4[s1>>0]
+	llgc	$i3,2($i3,$tbl)	# Te4[s1>>8]
+	sll	$i1,16
+	sll	$s1,24
+	sll	$i3,8
+	or	$s0,$i1
+	or	$s1,$t1
+	or	$t2,$i2
+	or	$t3,$i3
+
+	srlg	$i1,$s2,`8-3`	# i0
+	srlg	$i2,$s2,`16-3`	# i1
+	nr	$i1,$mask
+	nr	$i2,$mask
+	sllg	$i3,$s2,`0+3`
+	srl	$s2,`24-3`
+	ngr	$i3,$mask
+	nr	$s2,$mask
+
+	sllg	$t1,$s3,`0+3`	# i0
+	srlg	$ra,$s3,`8-3`	# i1
+	ngr	$t1,$mask
+
+	llgc	$i1,2($i1,$tbl)	# Te4[s2>>8]
+	llgc	$i2,2($i2,$tbl)	# Te4[s2>>16]
+	sll	$i1,8
+	llgc	$s2,2($s2,$tbl)	# Te4[s2>>24]
+	llgc	$i3,2($i3,$tbl)	# Te4[s2>>0]
+	sll	$i2,16
+	nr	$ra,$mask
+	sll	$s2,24
+	or	$s0,$i1
+	or	$s1,$i2
+	or	$s2,$t2
+	or	$t3,$i3
+
+	srlg	$i3,$s3,`16-3`	# i2
+	srl	$s3,`24-3`
+	nr	$i3,$mask
+	nr	$s3,$mask
+
+	l	$t0,16($key)
+	l	$t2,20($key)
+
+	llgc	$i1,2($t1,$tbl)	# Te4[s3>>0]
+	llgc	$i2,2($ra,$tbl)	# Te4[s3>>8]
+	llgc	$i3,2($i3,$tbl)	# Te4[s3>>16]
+	llgc	$s3,2($s3,$tbl)	# Te4[s3>>24]
+	sll	$i2,8
+	sll	$i3,16
+	sll	$s3,24
+	or	$s0,$i1
+	or	$s1,$i2
+	or	$s2,$i3
+	or	$s3,$t3
+
+	l${g}	$ra,15*$SIZE_T($sp)
+	xr	$s0,$t0
+	xr	$s1,$t2
+	x	$s2,24($key)
+	x	$s3,28($key)
+
+	br	$ra
+.size	_s390x_AES_encrypt,.-_s390x_AES_encrypt
+___
+
+$code.=<<___;
+.type	AES_Td,\@object
+.align	256
+AES_Td:
+___
+&_data_word(
+	0x51f4a750, 0x7e416553, 0x1a17a4c3, 0x3a275e96,
+	0x3bab6bcb, 0x1f9d45f1, 0xacfa58ab, 0x4be30393,
+	0x2030fa55, 0xad766df6, 0x88cc7691, 0xf5024c25,
+	0x4fe5d7fc, 0xc52acbd7, 0x26354480, 0xb562a38f,
+	0xdeb15a49, 0x25ba1b67, 0x45ea0e98, 0x5dfec0e1,
+	0xc32f7502, 0x814cf012, 0x8d4697a3, 0x6bd3f9c6,
+	0x038f5fe7, 0x15929c95, 0xbf6d7aeb, 0x955259da,
+	0xd4be832d, 0x587421d3, 0x49e06929, 0x8ec9c844,
+	0x75c2896a, 0xf48e7978, 0x99583e6b, 0x27b971dd,
+	0xbee14fb6, 0xf088ad17, 0xc920ac66, 0x7dce3ab4,
+	0x63df4a18, 0xe51a3182, 0x97513360, 0x62537f45,
+	0xb16477e0, 0xbb6bae84, 0xfe81a01c, 0xf9082b94,
+	0x70486858, 0x8f45fd19, 0x94de6c87, 0x527bf8b7,
+	0xab73d323, 0x724b02e2, 0xe31f8f57, 0x6655ab2a,
+	0xb2eb2807, 0x2fb5c203, 0x86c57b9a, 0xd33708a5,
+	0x302887f2, 0x23bfa5b2, 0x02036aba, 0xed16825c,
+	0x8acf1c2b, 0xa779b492, 0xf307f2f0, 0x4e69e2a1,
+	0x65daf4cd, 0x0605bed5, 0xd134621f, 0xc4a6fe8a,
+	0x342e539d, 0xa2f355a0, 0x058ae132, 0xa4f6eb75,
+	0x0b83ec39, 0x4060efaa, 0x5e719f06, 0xbd6e1051,
+	0x3e218af9, 0x96dd063d, 0xdd3e05ae, 0x4de6bd46,
+	0x91548db5, 0x71c45d05, 0x0406d46f, 0x605015ff,
+	0x1998fb24, 0xd6bde997, 0x894043cc, 0x67d99e77,
+	0xb0e842bd, 0x07898b88, 0xe7195b38, 0x79c8eedb,
+	0xa17c0a47, 0x7c420fe9, 0xf8841ec9, 0x00000000,
+	0x09808683, 0x322bed48, 0x1e1170ac, 0x6c5a724e,
+	0xfd0efffb, 0x0f853856, 0x3daed51e, 0x362d3927,
+	0x0a0fd964, 0x685ca621, 0x9b5b54d1, 0x24362e3a,
+	0x0c0a67b1, 0x9357e70f, 0xb4ee96d2, 0x1b9b919e,
+	0x80c0c54f, 0x61dc20a2, 0x5a774b69, 0x1c121a16,
+	0xe293ba0a, 0xc0a02ae5, 0x3c22e043, 0x121b171d,
+	0x0e090d0b, 0xf28bc7ad, 0x2db6a8b9, 0x141ea9c8,
+	0x57f11985, 0xaf75074c, 0xee99ddbb, 0xa37f60fd,
+	0xf701269f, 0x5c72f5bc, 0x44663bc5, 0x5bfb7e34,
+	0x8b432976, 0xcb23c6dc, 0xb6edfc68, 0xb8e4f163,
+	0xd731dcca, 0x42638510, 0x13972240, 0x84c61120,
+	0x854a247d, 0xd2bb3df8, 0xaef93211, 0xc729a16d,
+	0x1d9e2f4b, 0xdcb230f3, 0x0d8652ec, 0x77c1e3d0,
+	0x2bb3166c, 0xa970b999, 0x119448fa, 0x47e96422,
+	0xa8fc8cc4, 0xa0f03f1a, 0x567d2cd8, 0x223390ef,
+	0x87494ec7, 0xd938d1c1, 0x8ccaa2fe, 0x98d40b36,
+	0xa6f581cf, 0xa57ade28, 0xdab78e26, 0x3fadbfa4,
+	0x2c3a9de4, 0x5078920d, 0x6a5fcc9b, 0x547e4662,
+	0xf68d13c2, 0x90d8b8e8, 0x2e39f75e, 0x82c3aff5,
+	0x9f5d80be, 0x69d0937c, 0x6fd52da9, 0xcf2512b3,
+	0xc8ac993b, 0x10187da7, 0xe89c636e, 0xdb3bbb7b,
+	0xcd267809, 0x6e5918f4, 0xec9ab701, 0x834f9aa8,
+	0xe6956e65, 0xaaffe67e, 0x21bccf08, 0xef15e8e6,
+	0xbae79bd9, 0x4a6f36ce, 0xea9f09d4, 0x29b07cd6,
+	0x31a4b2af, 0x2a3f2331, 0xc6a59430, 0x35a266c0,
+	0x744ebc37, 0xfc82caa6, 0xe090d0b0, 0x33a7d815,
+	0xf104984a, 0x41ecdaf7, 0x7fcd500e, 0x1791f62f,
+	0x764dd68d, 0x43efb04d, 0xccaa4d54, 0xe49604df,
+	0x9ed1b5e3, 0x4c6a881b, 0xc12c1fb8, 0x4665517f,
+	0x9d5eea04, 0x018c355d, 0xfa877473, 0xfb0b412e,
+	0xb3671d5a, 0x92dbd252, 0xe9105633, 0x6dd64713,
+	0x9ad7618c, 0x37a10c7a, 0x59f8148e, 0xeb133c89,
+	0xcea927ee, 0xb761c935, 0xe11ce5ed, 0x7a47b13c,
+	0x9cd2df59, 0x55f2733f, 0x1814ce79, 0x73c737bf,
+	0x53f7cdea, 0x5ffdaa5b, 0xdf3d6f14, 0x7844db86,
+	0xcaaff381, 0xb968c43e, 0x3824342c, 0xc2a3405f,
+	0x161dc372, 0xbce2250c, 0x283c498b, 0xff0d9541,
+	0x39a80171, 0x080cb3de, 0xd8b4e49c, 0x6456c190,
+	0x7bcb8461, 0xd532b670, 0x486c5c74, 0xd0b85742);
+$code.=<<___;
+# Td4[256]
+.byte	0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38
+.byte	0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb
+.byte	0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87
+.byte	0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb
+.byte	0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d
+.byte	0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e
+.byte	0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2
+.byte	0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25
+.byte	0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16
+.byte	0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92
+.byte	0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda
+.byte	0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84
+.byte	0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a
+.byte	0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06
+.byte	0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02
+.byte	0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b
+.byte	0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea
+.byte	0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73
+.byte	0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85
+.byte	0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e
+.byte	0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89
+.byte	0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b
+.byte	0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20
+.byte	0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4
+.byte	0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31
+.byte	0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f
+.byte	0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d
+.byte	0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef
+.byte	0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0
+.byte	0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61
+.byte	0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26
+.byte	0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d
+.size	AES_Td,.-AES_Td
+
+# void AES_decrypt(const unsigned char *inp, unsigned char *out,
+# 		 const AES_KEY *key) {
+.globl	AES_decrypt
+.type	AES_decrypt,\@function
+AES_decrypt:
+___
+$code.=<<___ if (!$softonly);
+	l	%r0,240($key)
+	lhi	%r1,16
+	clr	%r0,%r1
+	jl	.Ldsoft
+
+	la	%r1,0($key)
+	#la	%r2,0($inp)
+	la	%r4,0($out)
+	lghi	%r3,16		# single block length
+	.long	0xb92e0042	# km %r4,%r2
+	brc	1,.-4		# can this happen?
+	br	%r14
+.align	64
+.Ldsoft:
+___
+$code.=<<___;
+	stm${g}	%r3,$ra,3*$SIZE_T($sp)
+
+	llgf	$s0,0($inp)
+	llgf	$s1,4($inp)
+	llgf	$s2,8($inp)
+	llgf	$s3,12($inp)
+
+	larl	$tbl,AES_Td
+	bras	$ra,_s390x_AES_decrypt
+
+	l${g}	$out,3*$SIZE_T($sp)
+	st	$s0,0($out)
+	st	$s1,4($out)
+	st	$s2,8($out)
+	st	$s3,12($out)
+
+	lm${g}	%r6,$ra,6*$SIZE_T($sp)
+	br	$ra
+.size	AES_decrypt,.-AES_decrypt
+
+.type   _s390x_AES_decrypt,\@function
+.align	16
+_s390x_AES_decrypt:
+	st${g}	$ra,15*$SIZE_T($sp)
+	x	$s0,0($key)
+	x	$s1,4($key)
+	x	$s2,8($key)
+	x	$s3,12($key)
+	l	$rounds,240($key)
+	llill	$mask,`0xff<<3`
+	aghi	$rounds,-1
+	j	.Ldec_loop
+.align	16
+.Ldec_loop:
+	srlg	$t1,$s0,`16-3`
+	srlg	$t2,$s0,`8-3`
+	sllg	$t3,$s0,`0+3`
+	srl	$s0,`24-3`
+	nr	$s0,$mask
+	nr	$t1,$mask
+	nr	$t2,$mask
+	ngr	$t3,$mask
+
+	sllg	$i1,$s1,`0+3`	# i0
+	srlg	$i2,$s1,`16-3`
+	srlg	$i3,$s1,`8-3`
+	srl	$s1,`24-3`
+	ngr	$i1,$mask
+	nr	$s1,$mask
+	nr	$i2,$mask
+	nr	$i3,$mask
+
+	l	$s0,0($s0,$tbl)	# Td0[s0>>24]
+	l	$t1,3($t1,$tbl)	# Td1[s0>>16]
+	l	$t2,2($t2,$tbl)	# Td2[s0>>8]
+	l	$t3,1($t3,$tbl)	# Td3[s0>>0]
+
+	x	$s0,1($i1,$tbl)	# Td3[s1>>0]
+	l	$s1,0($s1,$tbl)	# Td0[s1>>24]
+	x	$t2,3($i2,$tbl)	# Td1[s1>>16]
+	x	$t3,2($i3,$tbl)	# Td2[s1>>8]
+
+	srlg	$i1,$s2,`8-3`	# i0
+	sllg	$i2,$s2,`0+3`	# i1
+	srlg	$i3,$s2,`16-3`
+	srl	$s2,`24-3`
+	nr	$i1,$mask
+	ngr	$i2,$mask
+	nr	$s2,$mask
+	nr	$i3,$mask
+
+	xr	$s1,$t1
+	srlg	$ra,$s3,`8-3`	# i1
+	srlg	$t1,$s3,`16-3`	# i0
+	nr	$ra,$mask
+	la	$key,16($key)
+	nr	$t1,$mask
+
+	x	$s0,2($i1,$tbl)	# Td2[s2>>8]
+	x	$s1,1($i2,$tbl)	# Td3[s2>>0]
+	l	$s2,0($s2,$tbl)	# Td0[s2>>24]
+	x	$t3,3($i3,$tbl)	# Td1[s2>>16]
+
+	sllg	$i3,$s3,`0+3`	# i2
+	srl	$s3,`24-3`
+	ngr	$i3,$mask
+	nr	$s3,$mask
+
+	xr	$s2,$t2
+	x	$s0,0($key)
+	x	$s1,4($key)
+	x	$s2,8($key)
+	x	$t3,12($key)
+
+	x	$s0,3($t1,$tbl)	# Td1[s3>>16]
+	x	$s1,2($ra,$tbl)	# Td2[s3>>8]
+	x	$s2,1($i3,$tbl)	# Td3[s3>>0]
+	l	$s3,0($s3,$tbl)	# Td0[s3>>24]
+	xr	$s3,$t3
+
+	brct	$rounds,.Ldec_loop
+	.align	16
+
+	l	$t1,`2048+0`($tbl)	# prefetch Td4
+	l	$t2,`2048+64`($tbl)
+	l	$t3,`2048+128`($tbl)
+	l	$i1,`2048+192`($tbl)
+	llill	$mask,0xff
+
+	srlg	$i3,$s0,24	# i0
+	srlg	$t1,$s0,16
+	srlg	$t2,$s0,8
+	nr	$s0,$mask	# i3
+	nr	$t1,$mask
+
+	srlg	$i1,$s1,24
+	nr	$t2,$mask
+	srlg	$i2,$s1,16
+	srlg	$ra,$s1,8
+	nr	$s1,$mask	# i0
+	nr	$i2,$mask
+	nr	$ra,$mask
+
+	llgc	$i3,2048($i3,$tbl)	# Td4[s0>>24]
+	llgc	$t1,2048($t1,$tbl)	# Td4[s0>>16]
+	llgc	$t2,2048($t2,$tbl)	# Td4[s0>>8]
+	sll	$t1,16
+	llgc	$t3,2048($s0,$tbl)	# Td4[s0>>0]
+	sllg	$s0,$i3,24
+	sll	$t2,8
+
+	llgc	$s1,2048($s1,$tbl)	# Td4[s1>>0]
+	llgc	$i1,2048($i1,$tbl)	# Td4[s1>>24]
+	llgc	$i2,2048($i2,$tbl)	# Td4[s1>>16]
+	sll	$i1,24
+	llgc	$i3,2048($ra,$tbl)	# Td4[s1>>8]
+	sll	$i2,16
+	sll	$i3,8
+	or	$s0,$s1
+	or	$t1,$i1
+	or	$t2,$i2
+	or	$t3,$i3
+
+	srlg	$i1,$s2,8	# i0
+	srlg	$i2,$s2,24
+	srlg	$i3,$s2,16
+	nr	$s2,$mask	# i1
+	nr	$i1,$mask
+	nr	$i3,$mask
+	llgc	$i1,2048($i1,$tbl)	# Td4[s2>>8]
+	llgc	$s1,2048($s2,$tbl)	# Td4[s2>>0]
+	llgc	$i2,2048($i2,$tbl)	# Td4[s2>>24]
+	llgc	$i3,2048($i3,$tbl)	# Td4[s2>>16]
+	sll	$i1,8
+	sll	$i2,24
+	or	$s0,$i1
+	sll	$i3,16
+	or	$t2,$i2
+	or	$t3,$i3
+
+	srlg	$i1,$s3,16	# i0
+	srlg	$i2,$s3,8	# i1
+	srlg	$i3,$s3,24
+	nr	$s3,$mask	# i2
+	nr	$i1,$mask
+	nr	$i2,$mask
+
+	l${g}	$ra,15*$SIZE_T($sp)
+	or	$s1,$t1
+	l	$t0,16($key)
+	l	$t1,20($key)
+
+	llgc	$i1,2048($i1,$tbl)	# Td4[s3>>16]
+	llgc	$i2,2048($i2,$tbl)	# Td4[s3>>8]
+	sll	$i1,16
+	llgc	$s2,2048($s3,$tbl)	# Td4[s3>>0]
+	llgc	$s3,2048($i3,$tbl)	# Td4[s3>>24]
+	sll	$i2,8
+	sll	$s3,24
+	or	$s0,$i1
+	or	$s1,$i2
+	or	$s2,$t2
+	or	$s3,$t3
+
+	xr	$s0,$t0
+	xr	$s1,$t1
+	x	$s2,24($key)
+	x	$s3,28($key)
+
+	br	$ra
+.size	_s390x_AES_decrypt,.-_s390x_AES_decrypt
+___
+
+$code.=<<___;
+# void AES_set_encrypt_key(const unsigned char *in, int bits,
+# 		 AES_KEY *key) {
+.globl	AES_set_encrypt_key
+.type	AES_set_encrypt_key,\@function
+.align	16
+AES_set_encrypt_key:
+_s390x_AES_set_encrypt_key:
+	lghi	$t0,0
+	cl${g}r	$inp,$t0
+	je	.Lminus1
+	cl${g}r	$key,$t0
+	je	.Lminus1
+
+	lghi	$t0,128
+	clr	$bits,$t0
+	je	.Lproceed
+	lghi	$t0,192
+	clr	$bits,$t0
+	je	.Lproceed
+	lghi	$t0,256
+	clr	$bits,$t0
+	je	.Lproceed
+	lghi	%r2,-2
+	br	%r14
+
+.align	16
+.Lproceed:
+___
+$code.=<<___ if (!$softonly);
+	# convert bits to km(c) code, [128,192,256]->[18,19,20]
+	lhi	%r5,-128
+	lhi	%r0,18
+	ar	%r5,$bits
+	srl	%r5,6
+	ar	%r5,%r0
+
+	larl	%r1,OPENSSL_s390xcap_P
+	llihh	%r0,0x8000
+	srlg	%r0,%r0,0(%r5)
+	ng	%r0,S390X_KM(%r1)  # check availability of both km...
+	ng	%r0,S390X_KMC(%r1) # ...and kmc support for given key length
+	jz	.Lekey_internal
+
+	lmg	%r0,%r1,0($inp)	# just copy 128 bits...
+	stmg	%r0,%r1,0($key)
+	lhi	%r0,192
+	cr	$bits,%r0
+	jl	1f
+	lg	%r1,16($inp)
+	stg	%r1,16($key)
+	je	1f
+	lg	%r1,24($inp)
+	stg	%r1,24($key)
+1:	st	$bits,236($key)	# save bits [for debugging purposes]
+	lgr	$t0,%r5
+	st	%r5,240($key)	# save km(c) code
+	lghi	%r2,0
+	br	%r14
+___
+$code.=<<___;
+.align	16
+.Lekey_internal:
+	stm${g}	%r4,%r13,4*$SIZE_T($sp)	# all non-volatile regs and $key
+
+	larl	$tbl,AES_Te+2048
+
+	llgf	$s0,0($inp)
+	llgf	$s1,4($inp)
+	llgf	$s2,8($inp)
+	llgf	$s3,12($inp)
+	st	$s0,0($key)
+	st	$s1,4($key)
+	st	$s2,8($key)
+	st	$s3,12($key)
+	lghi	$t0,128
+	cr	$bits,$t0
+	jne	.Lnot128
+
+	llill	$mask,0xff
+	lghi	$t3,0			# i=0
+	lghi	$rounds,10
+	st	$rounds,240($key)
+
+	llgfr	$t2,$s3			# temp=rk[3]
+	srlg	$i1,$s3,8
+	srlg	$i2,$s3,16
+	srlg	$i3,$s3,24
+	nr	$t2,$mask
+	nr	$i1,$mask
+	nr	$i2,$mask
+
+.align	16
+.L128_loop:
+	la	$t2,0($t2,$tbl)
+	la	$i1,0($i1,$tbl)
+	la	$i2,0($i2,$tbl)
+	la	$i3,0($i3,$tbl)
+	icm	$t2,2,0($t2)		# Te4[rk[3]>>0]<<8
+	icm	$t2,4,0($i1)		# Te4[rk[3]>>8]<<16
+	icm	$t2,8,0($i2)		# Te4[rk[3]>>16]<<24
+	icm	$t2,1,0($i3)		# Te4[rk[3]>>24]
+	x	$t2,256($t3,$tbl)	# rcon[i]
+	xr	$s0,$t2			# rk[4]=rk[0]^...
+	xr	$s1,$s0			# rk[5]=rk[1]^rk[4]
+	xr	$s2,$s1			# rk[6]=rk[2]^rk[5]
+	xr	$s3,$s2			# rk[7]=rk[3]^rk[6]
+
+	llgfr	$t2,$s3			# temp=rk[3]
+	srlg	$i1,$s3,8
+	srlg	$i2,$s3,16
+	nr	$t2,$mask
+	nr	$i1,$mask
+	srlg	$i3,$s3,24
+	nr	$i2,$mask
+
+	st	$s0,16($key)
+	st	$s1,20($key)
+	st	$s2,24($key)
+	st	$s3,28($key)
+	la	$key,16($key)		# key+=4
+	la	$t3,4($t3)		# i++
+	brct	$rounds,.L128_loop
+	lghi	$t0,10
+	lghi	%r2,0
+	lm${g}	%r4,%r13,4*$SIZE_T($sp)
+	br	$ra
+
+.align	16
+.Lnot128:
+	llgf	$t0,16($inp)
+	llgf	$t1,20($inp)
+	st	$t0,16($key)
+	st	$t1,20($key)
+	lghi	$t0,192
+	cr	$bits,$t0
+	jne	.Lnot192
+
+	llill	$mask,0xff
+	lghi	$t3,0			# i=0
+	lghi	$rounds,12
+	st	$rounds,240($key)
+	lghi	$rounds,8
+
+	srlg	$i1,$t1,8
+	srlg	$i2,$t1,16
+	srlg	$i3,$t1,24
+	nr	$t1,$mask
+	nr	$i1,$mask
+	nr	$i2,$mask
+
+.align	16
+.L192_loop:
+	la	$t1,0($t1,$tbl)
+	la	$i1,0($i1,$tbl)
+	la	$i2,0($i2,$tbl)
+	la	$i3,0($i3,$tbl)
+	icm	$t1,2,0($t1)		# Te4[rk[5]>>0]<<8
+	icm	$t1,4,0($i1)		# Te4[rk[5]>>8]<<16
+	icm	$t1,8,0($i2)		# Te4[rk[5]>>16]<<24
+	icm	$t1,1,0($i3)		# Te4[rk[5]>>24]
+	x	$t1,256($t3,$tbl)	# rcon[i]
+	xr	$s0,$t1			# rk[6]=rk[0]^...
+	xr	$s1,$s0			# rk[7]=rk[1]^rk[6]
+	xr	$s2,$s1			# rk[8]=rk[2]^rk[7]
+	xr	$s3,$s2			# rk[9]=rk[3]^rk[8]
+
+	st	$s0,24($key)
+	st	$s1,28($key)
+	st	$s2,32($key)
+	st	$s3,36($key)
+	brct	$rounds,.L192_continue
+	lghi	$t0,12
+	lghi	%r2,0
+	lm${g}	%r4,%r13,4*$SIZE_T($sp)
+	br	$ra
+
+.align	16
+.L192_continue:
+	lgr	$t1,$s3
+	x	$t1,16($key)		# rk[10]=rk[4]^rk[9]
+	st	$t1,40($key)
+	x	$t1,20($key)		# rk[11]=rk[5]^rk[10]
+	st	$t1,44($key)
+
+	srlg	$i1,$t1,8
+	srlg	$i2,$t1,16
+	srlg	$i3,$t1,24
+	nr	$t1,$mask
+	nr	$i1,$mask
+	nr	$i2,$mask
+
+	la	$key,24($key)		# key+=6
+	la	$t3,4($t3)		# i++
+	j	.L192_loop
+
+.align	16
+.Lnot192:
+	llgf	$t0,24($inp)
+	llgf	$t1,28($inp)
+	st	$t0,24($key)
+	st	$t1,28($key)
+	llill	$mask,0xff
+	lghi	$t3,0			# i=0
+	lghi	$rounds,14
+	st	$rounds,240($key)
+	lghi	$rounds,7
+
+	srlg	$i1,$t1,8
+	srlg	$i2,$t1,16
+	srlg	$i3,$t1,24
+	nr	$t1,$mask
+	nr	$i1,$mask
+	nr	$i2,$mask
+
+.align	16
+.L256_loop:
+	la	$t1,0($t1,$tbl)
+	la	$i1,0($i1,$tbl)
+	la	$i2,0($i2,$tbl)
+	la	$i3,0($i3,$tbl)
+	icm	$t1,2,0($t1)		# Te4[rk[7]>>0]<<8
+	icm	$t1,4,0($i1)		# Te4[rk[7]>>8]<<16
+	icm	$t1,8,0($i2)		# Te4[rk[7]>>16]<<24
+	icm	$t1,1,0($i3)		# Te4[rk[7]>>24]
+	x	$t1,256($t3,$tbl)	# rcon[i]
+	xr	$s0,$t1			# rk[8]=rk[0]^...
+	xr	$s1,$s0			# rk[9]=rk[1]^rk[8]
+	xr	$s2,$s1			# rk[10]=rk[2]^rk[9]
+	xr	$s3,$s2			# rk[11]=rk[3]^rk[10]
+	st	$s0,32($key)
+	st	$s1,36($key)
+	st	$s2,40($key)
+	st	$s3,44($key)
+	brct	$rounds,.L256_continue
+	lghi	$t0,14
+	lghi	%r2,0
+	lm${g}	%r4,%r13,4*$SIZE_T($sp)
+	br	$ra
+
+.align	16
+.L256_continue:
+	lgr	$t1,$s3			# temp=rk[11]
+	srlg	$i1,$s3,8
+	srlg	$i2,$s3,16
+	srlg	$i3,$s3,24
+	nr	$t1,$mask
+	nr	$i1,$mask
+	nr	$i2,$mask
+	la	$t1,0($t1,$tbl)
+	la	$i1,0($i1,$tbl)
+	la	$i2,0($i2,$tbl)
+	la	$i3,0($i3,$tbl)
+	llgc	$t1,0($t1)		# Te4[rk[11]>>0]
+	icm	$t1,2,0($i1)		# Te4[rk[11]>>8]<<8
+	icm	$t1,4,0($i2)		# Te4[rk[11]>>16]<<16
+	icm	$t1,8,0($i3)		# Te4[rk[11]>>24]<<24
+	x	$t1,16($key)		# rk[12]=rk[4]^...
+	st	$t1,48($key)
+	x	$t1,20($key)		# rk[13]=rk[5]^rk[12]
+	st	$t1,52($key)
+	x	$t1,24($key)		# rk[14]=rk[6]^rk[13]
+	st	$t1,56($key)
+	x	$t1,28($key)		# rk[15]=rk[7]^rk[14]
+	st	$t1,60($key)
+
+	srlg	$i1,$t1,8
+	srlg	$i2,$t1,16
+	srlg	$i3,$t1,24
+	nr	$t1,$mask
+	nr	$i1,$mask
+	nr	$i2,$mask
+
+	la	$key,32($key)		# key+=8
+	la	$t3,4($t3)		# i++
+	j	.L256_loop
+
+.Lminus1:
+	lghi	%r2,-1
+	br	$ra
+.size	AES_set_encrypt_key,.-AES_set_encrypt_key
+
+# void AES_set_decrypt_key(const unsigned char *in, int bits,
+# 		 AES_KEY *key) {
+.globl	AES_set_decrypt_key
+.type	AES_set_decrypt_key,\@function
+.align	16
+AES_set_decrypt_key:
+	#st${g}	$key,4*$SIZE_T($sp)	# I rely on AES_set_encrypt_key to
+	st${g}	$ra,14*$SIZE_T($sp)	# save non-volatile registers and $key!
+	bras	$ra,_s390x_AES_set_encrypt_key
+	#l${g}	$key,4*$SIZE_T($sp)
+	l${g}	$ra,14*$SIZE_T($sp)
+	ltgr	%r2,%r2
+	bnzr	$ra
+___
+$code.=<<___ if (!$softonly);
+	#l	$t0,240($key)
+	lhi	$t1,16
+	cr	$t0,$t1
+	jl	.Lgo
+	oill	$t0,S390X_DECRYPT	# set "decrypt" bit
+	st	$t0,240($key)
+	br	$ra
+___
+$code.=<<___;
+.align	16
+.Lgo:	lgr	$rounds,$t0	#llgf	$rounds,240($key)
+	la	$i1,0($key)
+	sllg	$i2,$rounds,4
+	la	$i2,0($i2,$key)
+	srl	$rounds,1
+	lghi	$t1,-16
+
+.align	16
+.Linv:	lmg	$s0,$s1,0($i1)
+	lmg	$s2,$s3,0($i2)
+	stmg	$s0,$s1,0($i2)
+	stmg	$s2,$s3,0($i1)
+	la	$i1,16($i1)
+	la	$i2,0($t1,$i2)
+	brct	$rounds,.Linv
+___
+$mask80=$i1;
+$mask1b=$i2;
+$maskfe=$i3;
+$code.=<<___;
+	llgf	$rounds,240($key)
+	aghi	$rounds,-1
+	sll	$rounds,2	# (rounds-1)*4
+	llilh	$mask80,0x8080
+	llilh	$mask1b,0x1b1b
+	llilh	$maskfe,0xfefe
+	oill	$mask80,0x8080
+	oill	$mask1b,0x1b1b
+	oill	$maskfe,0xfefe
+
+.align	16
+.Lmix:	l	$s0,16($key)	# tp1
+	lr	$s1,$s0
+	ngr	$s1,$mask80
+	srlg	$t1,$s1,7
+	slr	$s1,$t1
+	nr	$s1,$mask1b
+	sllg	$t1,$s0,1
+	nr	$t1,$maskfe
+	xr	$s1,$t1		# tp2
+
+	lr	$s2,$s1
+	ngr	$s2,$mask80
+	srlg	$t1,$s2,7
+	slr	$s2,$t1
+	nr	$s2,$mask1b
+	sllg	$t1,$s1,1
+	nr	$t1,$maskfe
+	xr	$s2,$t1		# tp4
+
+	lr	$s3,$s2
+	ngr	$s3,$mask80
+	srlg	$t1,$s3,7
+	slr	$s3,$t1
+	nr	$s3,$mask1b
+	sllg	$t1,$s2,1
+	nr	$t1,$maskfe
+	xr	$s3,$t1		# tp8
+
+	xr	$s1,$s0		# tp2^tp1
+	xr	$s2,$s0		# tp4^tp1
+	rll	$s0,$s0,24	# = ROTATE(tp1,8)
+	xr	$s2,$s3		# ^=tp8
+	xr	$s0,$s1		# ^=tp2^tp1
+	xr	$s1,$s3		# tp2^tp1^tp8
+	xr	$s0,$s2		# ^=tp4^tp1^tp8
+	rll	$s1,$s1,8
+	rll	$s2,$s2,16
+	xr	$s0,$s1		# ^= ROTATE(tp8^tp2^tp1,24)
+	rll	$s3,$s3,24
+	xr	$s0,$s2    	# ^= ROTATE(tp8^tp4^tp1,16)
+	xr	$s0,$s3		# ^= ROTATE(tp8,8)
+
+	st	$s0,16($key)
+	la	$key,4($key)
+	brct	$rounds,.Lmix
+
+	lm${g}	%r6,%r13,6*$SIZE_T($sp)# as was saved by AES_set_encrypt_key!
+	lghi	%r2,0
+	br	$ra
+.size	AES_set_decrypt_key,.-AES_set_decrypt_key
+___
+
+########################################################################
+# void AES_cbc_encrypt(const unsigned char *in, unsigned char *out,
+#                     size_t length, const AES_KEY *key,
+#                     unsigned char *ivec, const int enc)
+{
+my $inp="%r2";
+my $out="%r4";	# length and out are swapped
+my $len="%r3";
+my $key="%r5";
+my $ivp="%r6";
+
+$code.=<<___;
+.globl	AES_cbc_encrypt
+.type	AES_cbc_encrypt,\@function
+.align	16
+AES_cbc_encrypt:
+	xgr	%r3,%r4		# flip %r3 and %r4, out and len
+	xgr	%r4,%r3
+	xgr	%r3,%r4
+___
+$code.=<<___ if (!$softonly);
+	lhi	%r0,16
+	cl	%r0,240($key)
+	jh	.Lcbc_software
+
+	lg	%r0,0($ivp)	# copy ivec
+	lg	%r1,8($ivp)
+	stmg	%r0,%r1,16($sp)
+	lmg	%r0,%r1,0($key)	# copy key, cover 256 bit
+	stmg	%r0,%r1,32($sp)
+	lmg	%r0,%r1,16($key)
+	stmg	%r0,%r1,48($sp)
+	l	%r0,240($key)	# load kmc code
+	lghi	$key,15		# res=len%16, len-=res;
+	ngr	$key,$len
+	sl${g}r	$len,$key
+	la	%r1,16($sp)	# parameter block - ivec || key
+	jz	.Lkmc_truncated
+	.long	0xb92f0042	# kmc %r4,%r2
+	brc	1,.-4		# pay attention to "partial completion"
+	ltr	$key,$key
+	jnz	.Lkmc_truncated
+.Lkmc_done:
+	lmg	%r0,%r1,16($sp)	# copy ivec to caller
+	stg	%r0,0($ivp)
+	stg	%r1,8($ivp)
+	br	$ra
+.align	16
+.Lkmc_truncated:
+	ahi	$key,-1		# it's the way it's encoded in mvc
+	tmll	%r0,S390X_DECRYPT
+	jnz	.Lkmc_truncated_dec
+	lghi	%r1,0
+	stg	%r1,16*$SIZE_T($sp)
+	stg	%r1,16*$SIZE_T+8($sp)
+	bras	%r1,1f
+	mvc	16*$SIZE_T(1,$sp),0($inp)
+1:	ex	$key,0(%r1)
+	la	%r1,16($sp)	# restore parameter block
+	la	$inp,16*$SIZE_T($sp)
+	lghi	$len,16
+	.long	0xb92f0042	# kmc %r4,%r2
+	j	.Lkmc_done
+.align	16
+.Lkmc_truncated_dec:
+	st${g}	$out,4*$SIZE_T($sp)
+	la	$out,16*$SIZE_T($sp)
+	lghi	$len,16
+	.long	0xb92f0042	# kmc %r4,%r2
+	l${g}	$out,4*$SIZE_T($sp)
+	bras	%r1,2f
+	mvc	0(1,$out),16*$SIZE_T($sp)
+2:	ex	$key,0(%r1)
+	j	.Lkmc_done
+.align	16
+.Lcbc_software:
+___
+$code.=<<___;
+	stm${g}	$key,$ra,5*$SIZE_T($sp)
+	lhi	%r0,0
+	cl	%r0,`$stdframe+$SIZE_T-4`($sp)
+	je	.Lcbc_decrypt
+
+	larl	$tbl,AES_Te
+
+	llgf	$s0,0($ivp)
+	llgf	$s1,4($ivp)
+	llgf	$s2,8($ivp)
+	llgf	$s3,12($ivp)
+
+	lghi	$t0,16
+	sl${g}r	$len,$t0
+	brc	4,.Lcbc_enc_tail	# if borrow
+.Lcbc_enc_loop:
+	stm${g}	$inp,$out,2*$SIZE_T($sp)
+	x	$s0,0($inp)
+	x	$s1,4($inp)
+	x	$s2,8($inp)
+	x	$s3,12($inp)
+	lgr	%r4,$key
+
+	bras	$ra,_s390x_AES_encrypt
+
+	lm${g}	$inp,$key,2*$SIZE_T($sp)
+	st	$s0,0($out)
+	st	$s1,4($out)
+	st	$s2,8($out)
+	st	$s3,12($out)
+
+	la	$inp,16($inp)
+	la	$out,16($out)
+	lghi	$t0,16
+	lt${g}r	$len,$len
+	jz	.Lcbc_enc_done
+	sl${g}r	$len,$t0
+	brc	4,.Lcbc_enc_tail	# if borrow
+	j	.Lcbc_enc_loop
+.align	16
+.Lcbc_enc_done:
+	l${g}	$ivp,6*$SIZE_T($sp)
+	st	$s0,0($ivp)
+	st	$s1,4($ivp)
+	st	$s2,8($ivp)
+	st	$s3,12($ivp)
+
+	lm${g}	%r7,$ra,7*$SIZE_T($sp)
+	br	$ra
+
+.align	16
+.Lcbc_enc_tail:
+	aghi	$len,15
+	lghi	$t0,0
+	stg	$t0,16*$SIZE_T($sp)
+	stg	$t0,16*$SIZE_T+8($sp)
+	bras	$t1,3f
+	mvc	16*$SIZE_T(1,$sp),0($inp)
+3:	ex	$len,0($t1)
+	lghi	$len,0
+	la	$inp,16*$SIZE_T($sp)
+	j	.Lcbc_enc_loop
+
+.align	16
+.Lcbc_decrypt:
+	larl	$tbl,AES_Td
+
+	lg	$t0,0($ivp)
+	lg	$t1,8($ivp)
+	stmg	$t0,$t1,16*$SIZE_T($sp)
+
+.Lcbc_dec_loop:
+	stm${g}	$inp,$out,2*$SIZE_T($sp)
+	llgf	$s0,0($inp)
+	llgf	$s1,4($inp)
+	llgf	$s2,8($inp)
+	llgf	$s3,12($inp)
+	lgr	%r4,$key
+
+	bras	$ra,_s390x_AES_decrypt
+
+	lm${g}	$inp,$key,2*$SIZE_T($sp)
+	sllg	$s0,$s0,32
+	sllg	$s2,$s2,32
+	lr	$s0,$s1
+	lr	$s2,$s3
+
+	lg	$t0,0($inp)
+	lg	$t1,8($inp)
+	xg	$s0,16*$SIZE_T($sp)
+	xg	$s2,16*$SIZE_T+8($sp)
+	lghi	$s1,16
+	sl${g}r	$len,$s1
+	brc	4,.Lcbc_dec_tail	# if borrow
+	brc	2,.Lcbc_dec_done	# if zero
+	stg	$s0,0($out)
+	stg	$s2,8($out)
+	stmg	$t0,$t1,16*$SIZE_T($sp)
+
+	la	$inp,16($inp)
+	la	$out,16($out)
+	j	.Lcbc_dec_loop
+
+.Lcbc_dec_done:
+	stg	$s0,0($out)
+	stg	$s2,8($out)
+.Lcbc_dec_exit:
+	lm${g}	%r6,$ra,6*$SIZE_T($sp)
+	stmg	$t0,$t1,0($ivp)
+
+	br	$ra
+
+.align	16
+.Lcbc_dec_tail:
+	aghi	$len,15
+	stg	$s0,16*$SIZE_T($sp)
+	stg	$s2,16*$SIZE_T+8($sp)
+	bras	$s1,4f
+	mvc	0(1,$out),16*$SIZE_T($sp)
+4:	ex	$len,0($s1)
+	j	.Lcbc_dec_exit
+.size	AES_cbc_encrypt,.-AES_cbc_encrypt
+___
+}
+########################################################################
+# void AES_ctr32_encrypt(const unsigned char *in, unsigned char *out,
+#                     size_t blocks, const AES_KEY *key,
+#                     const unsigned char *ivec)
+{
+my $inp="%r2";
+my $out="%r4";	# blocks and out are swapped
+my $len="%r3";
+my $key="%r5";	my $iv0="%r5";
+my $ivp="%r6";
+my $fp ="%r7";
+
+$code.=<<___;
+.globl	AES_ctr32_encrypt
+.type	AES_ctr32_encrypt,\@function
+.align	16
+AES_ctr32_encrypt:
+	xgr	%r3,%r4		# flip %r3 and %r4, $out and $len
+	xgr	%r4,%r3
+	xgr	%r3,%r4
+	llgfr	$len,$len	# safe in ctr32 subroutine even in 64-bit case
+___
+$code.=<<___ if (!$softonly);
+	l	%r0,240($key)
+	lhi	%r1,16
+	clr	%r0,%r1
+	jl	.Lctr32_software
+
+	st${g}	$s2,10*$SIZE_T($sp)
+	st${g}	$s3,11*$SIZE_T($sp)
+
+	clr	$len,%r1		# does work even in 64-bit mode
+	jle	.Lctr32_nokma		# kma is slower for <= 16 blocks
+
+	larl	%r1,OPENSSL_s390xcap_P
+	lr	$s2,%r0
+	llihh	$s3,0x8000
+	srlg	$s3,$s3,0($s2)
+	ng	$s3,S390X_KMA(%r1)		# check kma capability vector
+	jz	.Lctr32_nokma
+
+	l${g}hi	%r1,-$stdframe-112
+	l${g}r	$s3,$sp
+	la	$sp,0(%r1,$sp)			# prepare parameter block
+
+	lhi	%r1,0x0600
+	sllg	$len,$len,4
+	or	%r0,%r1				# set HS and LAAD flags
+
+	st${g}	$s3,0($sp)			# backchain
+	la	%r1,$stdframe($sp)
+
+	lmg	$s2,$s3,0($key)			# copy key
+	stg	$s2,$stdframe+80($sp)
+	stg	$s3,$stdframe+88($sp)
+	lmg	$s2,$s3,16($key)
+	stg	$s2,$stdframe+96($sp)
+	stg	$s3,$stdframe+104($sp)
+
+	lmg	$s2,$s3,0($ivp)			# copy iv
+	stg	$s2,$stdframe+64($sp)
+	ahi	$s3,-1				# kma requires counter-1
+	stg	$s3,$stdframe+72($sp)
+	st	$s3,$stdframe+12($sp)		# copy counter
+
+	lghi	$s2,0				# no AAD
+	lghi	$s3,0
+
+	.long	0xb929a042	# kma $out,$s2,$inp
+	brc	1,.-4		# pay attention to "partial completion"
+
+	stg	%r0,$stdframe+80($sp)		# wipe key
+	stg	%r0,$stdframe+88($sp)
+	stg	%r0,$stdframe+96($sp)
+	stg	%r0,$stdframe+104($sp)
+	la	$sp,$stdframe+112($sp)
+
+	lm${g}	$s2,$s3,10*$SIZE_T($sp)
+	br	$ra
+
+.align	16
+.Lctr32_nokma:
+	stm${g}	%r6,$s1,6*$SIZE_T($sp)
+
+	slgr	$out,$inp
+	la	%r1,0($key)	# %r1 is permanent copy of $key
+	lg	$iv0,0($ivp)	# load ivec
+	lg	$ivp,8($ivp)
+
+	# prepare and allocate stack frame at the top of 4K page
+	# with 1K reserved for eventual signal handling
+	lghi	$s0,-1024-256-16# guarantee at least 256-bytes buffer
+	lghi	$s1,-4096
+	algr	$s0,$sp
+	lgr	$fp,$sp
+	ngr	$s0,$s1		# align at page boundary
+	slgr	$fp,$s0		# total buffer size
+	lgr	$s2,$sp
+	lghi	$s1,1024+16	# sl[g]fi is extended-immediate facility
+	slgr	$fp,$s1		# deduct reservation to get usable buffer size
+	# buffer size is at lest 256 and at most 3072+256-16
+
+	la	$sp,1024($s0)	# alloca
+	srlg	$fp,$fp,4	# convert bytes to blocks, minimum 16
+	st${g}	$s2,0($sp)	# back-chain
+	st${g}	$fp,$SIZE_T($sp)
+
+	slgr	$len,$fp
+	brc	1,.Lctr32_hw_switch	# not zero, no borrow
+	algr	$fp,$len	# input is shorter than allocated buffer
+	lghi	$len,0
+	st${g}	$fp,$SIZE_T($sp)
+
+.Lctr32_hw_switch:
+___
+$code.=<<___ if (!$softonly && 0);# kmctr code was measured to be ~12% slower
+	llgfr	$s0,%r0
+	lgr	$s1,%r1
+	larl	%r1,OPENSSL_s390xcap_P
+	llihh	%r0,0x8000	# check if kmctr supports the function code
+	srlg	%r0,%r0,0($s0)
+	ng	%r0,S390X_KMCTR(%r1)	# check kmctr capability vector
+	lgr	%r0,$s0
+	lgr	%r1,$s1
+	jz	.Lctr32_km_loop
+
+####### kmctr code
+	algr	$out,$inp	# restore $out
+	lgr	$s1,$len	# $s1 undertakes $len
+	j	.Lctr32_kmctr_loop
+.align	16
+.Lctr32_kmctr_loop:
+	la	$s2,16($sp)
+	lgr	$s3,$fp
+.Lctr32_kmctr_prepare:
+	stg	$iv0,0($s2)
+	stg	$ivp,8($s2)
+	la	$s2,16($s2)
+	ahi	$ivp,1		# 32-bit increment, preserves upper half
+	brct	$s3,.Lctr32_kmctr_prepare
+
+	#la	$inp,0($inp)	# inp
+	sllg	$len,$fp,4	# len
+	#la	$out,0($out)	# out
+	la	$s2,16($sp)	# iv
+	.long	0xb92da042	# kmctr $out,$s2,$inp
+	brc	1,.-4		# pay attention to "partial completion"
+
+	slgr	$s1,$fp
+	brc	1,.Lctr32_kmctr_loop	# not zero, no borrow
+	algr	$fp,$s1
+	lghi	$s1,0
+	brc	4+1,.Lctr32_kmctr_loop	# not zero
+
+	l${g}	$sp,0($sp)
+	lm${g}	%r6,$s3,6*$SIZE_T($sp)
+	br	$ra
+.align	16
+___
+$code.=<<___ if (!$softonly);
+.Lctr32_km_loop:
+	la	$s2,16($sp)
+	lgr	$s3,$fp
+.Lctr32_km_prepare:
+	stg	$iv0,0($s2)
+	stg	$ivp,8($s2)
+	la	$s2,16($s2)
+	ahi	$ivp,1		# 32-bit increment, preserves upper half
+	brct	$s3,.Lctr32_km_prepare
+
+	la	$s0,16($sp)	# inp
+	sllg	$s1,$fp,4	# len
+	la	$s2,16($sp)	# out
+	.long	0xb92e00a8	# km %r10,%r8
+	brc	1,.-4		# pay attention to "partial completion"
+
+	la	$s2,16($sp)
+	lgr	$s3,$fp
+	slgr	$s2,$inp
+.Lctr32_km_xor:
+	lg	$s0,0($inp)
+	lg	$s1,8($inp)
+	xg	$s0,0($s2,$inp)
+	xg	$s1,8($s2,$inp)
+	stg	$s0,0($out,$inp)
+	stg	$s1,8($out,$inp)
+	la	$inp,16($inp)
+	brct	$s3,.Lctr32_km_xor
+
+	slgr	$len,$fp
+	brc	1,.Lctr32_km_loop	# not zero, no borrow
+	algr	$fp,$len
+	lghi	$len,0
+	brc	4+1,.Lctr32_km_loop	# not zero
+
+	l${g}	$s0,0($sp)
+	l${g}	$s1,$SIZE_T($sp)
+	la	$s2,16($sp)
+.Lctr32_km_zap:
+	stg	$s0,0($s2)
+	stg	$s0,8($s2)
+	la	$s2,16($s2)
+	brct	$s1,.Lctr32_km_zap
+
+	la	$sp,0($s0)
+	lm${g}	%r6,$s3,6*$SIZE_T($sp)
+	br	$ra
+.align	16
+.Lctr32_software:
+___
+$code.=<<___;
+	stm${g}	$key,$ra,5*$SIZE_T($sp)
+	sl${g}r	$inp,$out
+	larl	$tbl,AES_Te
+	llgf	$t1,12($ivp)
+
+.Lctr32_loop:
+	stm${g}	$inp,$out,2*$SIZE_T($sp)
+	llgf	$s0,0($ivp)
+	llgf	$s1,4($ivp)
+	llgf	$s2,8($ivp)
+	lgr	$s3,$t1
+	st	$t1,16*$SIZE_T($sp)
+	lgr	%r4,$key
+
+	bras	$ra,_s390x_AES_encrypt
+
+	lm${g}	$inp,$ivp,2*$SIZE_T($sp)
+	llgf	$t1,16*$SIZE_T($sp)
+	x	$s0,0($inp,$out)
+	x	$s1,4($inp,$out)
+	x	$s2,8($inp,$out)
+	x	$s3,12($inp,$out)
+	stm	$s0,$s3,0($out)
+
+	la	$out,16($out)
+	ahi	$t1,1		# 32-bit increment
+	brct	$len,.Lctr32_loop
+
+	lm${g}	%r6,$ra,6*$SIZE_T($sp)
+	br	$ra
+.size	AES_ctr32_encrypt,.-AES_ctr32_encrypt
+___
+}
+
+########################################################################
+# void AES_xts_encrypt(const unsigned char *inp, unsigned char *out,
+#	size_t len, const AES_KEY *key1, const AES_KEY *key2,
+#	const unsigned char iv[16]);
+#
+{
+my $inp="%r2";
+my $out="%r4";	# len and out are swapped
+my $len="%r3";
+my $key1="%r5";	# $i1
+my $key2="%r6";	# $i2
+my $fp="%r7";	# $i3
+my $tweak=16*$SIZE_T+16;	# or $stdframe-16, bottom of the frame...
+
+$code.=<<___;
+.type	_s390x_xts_km,\@function
+.align	16
+_s390x_xts_km:
+___
+$code.=<<___ if(1);
+	llgfr	$s0,%r0			# put aside the function code
+	lghi	$s1,0x7f
+	nr	$s1,%r0
+	larl	%r1,OPENSSL_s390xcap_P
+	llihh	%r0,0x8000
+	srlg	%r0,%r0,32($s1)		# check for 32+function code
+	ng	%r0,S390X_KM(%r1)	# check km capability vector
+	lgr	%r0,$s0			# restore the function code
+	la	%r1,0($key1)		# restore $key1
+	jz	.Lxts_km_vanilla
+
+	lmg	$i2,$i3,$tweak($sp)	# put aside the tweak value
+	algr	$out,$inp
+
+	oill	%r0,32			# switch to xts function code
+	aghi	$s1,-18			#
+	sllg	$s1,$s1,3		# (function code - 18)*8, 0 or 16
+	la	%r1,$tweak-16($sp)
+	slgr	%r1,$s1			# parameter block position
+	lmg	$s0,$s3,0($key1)	# load 256 bits of key material,
+	stmg	$s0,$s3,0(%r1)		# and copy it to parameter block.
+					# yes, it contains junk and overlaps
+					# with the tweak in 128-bit case.
+					# it's done to avoid conditional
+					# branch.
+	stmg	$i2,$i3,$tweak($sp)	# "re-seat" the tweak value
+
+	.long	0xb92e0042		# km %r4,%r2
+	brc	1,.-4			# pay attention to "partial completion"
+
+	lrvg	$s0,$tweak+0($sp)	# load the last tweak
+	lrvg	$s1,$tweak+8($sp)
+	stmg	%r0,%r3,$tweak-32($sp)	# wipe copy of the key
+
+	nill	%r0,0xffdf		# switch back to original function code
+	la	%r1,0($key1)		# restore pointer to $key1
+	slgr	$out,$inp
+
+	llgc	$len,2*$SIZE_T-1($sp)
+	nill	$len,0x0f		# $len%=16
+	br	$ra
+
+.align	16
+.Lxts_km_vanilla:
+___
+$code.=<<___;
+	# prepare and allocate stack frame at the top of 4K page
+	# with 1K reserved for eventual signal handling
+	lghi	$s0,-1024-256-16# guarantee at least 256-bytes buffer
+	lghi	$s1,-4096
+	algr	$s0,$sp
+	lgr	$fp,$sp
+	ngr	$s0,$s1		# align at page boundary
+	slgr	$fp,$s0		# total buffer size
+	lgr	$s2,$sp
+	lghi	$s1,1024+16	# sl[g]fi is extended-immediate facility
+	slgr	$fp,$s1		# deduct reservation to get usable buffer size
+	# buffer size is at lest 256 and at most 3072+256-16
+
+	la	$sp,1024($s0)	# alloca
+	nill	$fp,0xfff0	# round to 16*n
+	st${g}	$s2,0($sp)	# back-chain
+	nill	$len,0xfff0	# redundant
+	st${g}	$fp,$SIZE_T($sp)
+
+	slgr	$len,$fp
+	brc	1,.Lxts_km_go	# not zero, no borrow
+	algr	$fp,$len	# input is shorter than allocated buffer
+	lghi	$len,0
+	st${g}	$fp,$SIZE_T($sp)
+
+.Lxts_km_go:
+	lrvg	$s0,$tweak+0($s2)	# load the tweak value in little-endian
+	lrvg	$s1,$tweak+8($s2)
+
+	la	$s2,16($sp)		# vector of ascending tweak values
+	slgr	$s2,$inp
+	srlg	$s3,$fp,4
+	j	.Lxts_km_start
+
+.Lxts_km_loop:
+	la	$s2,16($sp)
+	slgr	$s2,$inp
+	srlg	$s3,$fp,4
+.Lxts_km_prepare:
+	lghi	$i1,0x87
+	srag	$i2,$s1,63		# broadcast upper bit
+	ngr	$i1,$i2			# rem
+	algr	$s0,$s0
+	alcgr	$s1,$s1
+	xgr	$s0,$i1
+.Lxts_km_start:
+	lrvgr	$i1,$s0			# flip byte order
+	lrvgr	$i2,$s1
+	stg	$i1,0($s2,$inp)
+	stg	$i2,8($s2,$inp)
+	xg	$i1,0($inp)
+	xg	$i2,8($inp)
+	stg	$i1,0($out,$inp)
+	stg	$i2,8($out,$inp)
+	la	$inp,16($inp)
+	brct	$s3,.Lxts_km_prepare
+
+	slgr	$inp,$fp		# rewind $inp
+	la	$s2,0($out,$inp)
+	lgr	$s3,$fp
+	.long	0xb92e00aa		# km $s2,$s2
+	brc	1,.-4			# pay attention to "partial completion"
+
+	la	$s2,16($sp)
+	slgr	$s2,$inp
+	srlg	$s3,$fp,4
+.Lxts_km_xor:
+	lg	$i1,0($out,$inp)
+	lg	$i2,8($out,$inp)
+	xg	$i1,0($s2,$inp)
+	xg	$i2,8($s2,$inp)
+	stg	$i1,0($out,$inp)
+	stg	$i2,8($out,$inp)
+	la	$inp,16($inp)
+	brct	$s3,.Lxts_km_xor
+
+	slgr	$len,$fp
+	brc	1,.Lxts_km_loop		# not zero, no borrow
+	algr	$fp,$len
+	lghi	$len,0
+	brc	4+1,.Lxts_km_loop	# not zero
+
+	l${g}	$i1,0($sp)		# back-chain
+	llgf	$fp,`2*$SIZE_T-4`($sp)	# bytes used
+	la	$i2,16($sp)
+	srlg	$fp,$fp,4
+.Lxts_km_zap:
+	stg	$i1,0($i2)
+	stg	$i1,8($i2)
+	la	$i2,16($i2)
+	brct	$fp,.Lxts_km_zap
+
+	la	$sp,0($i1)
+	llgc	$len,2*$SIZE_T-1($i1)
+	nill	$len,0x0f		# $len%=16
+	bzr	$ra
+
+	# generate one more tweak...
+	lghi	$i1,0x87
+	srag	$i2,$s1,63		# broadcast upper bit
+	ngr	$i1,$i2			# rem
+	algr	$s0,$s0
+	alcgr	$s1,$s1
+	xgr	$s0,$i1
+
+	ltr	$len,$len		# clear zero flag
+	br	$ra
+.size	_s390x_xts_km,.-_s390x_xts_km
+
+.globl	AES_xts_encrypt
+.type	AES_xts_encrypt,\@function
+.align	16
+AES_xts_encrypt:
+	xgr	%r3,%r4			# flip %r3 and %r4, $out and $len
+	xgr	%r4,%r3
+	xgr	%r3,%r4
+___
+$code.=<<___ if ($SIZE_T==4);
+	llgfr	$len,$len
+___
+$code.=<<___;
+	st${g}	$len,1*$SIZE_T($sp)	# save copy of $len
+	srag	$len,$len,4		# formally wrong, because it expands
+					# sign byte, but who can afford asking
+					# to process more than 2^63-1 bytes?
+					# I use it, because it sets condition
+					# code...
+	bcr	8,$ra			# abort if zero (i.e. less than 16)
+___
+$code.=<<___ if (!$softonly);
+	llgf	%r0,240($key2)
+	lhi	%r1,16
+	clr	%r0,%r1
+	jl	.Lxts_enc_software
+
+	st${g}	$ra,5*$SIZE_T($sp)
+	stm${g}	%r6,$s3,6*$SIZE_T($sp)
+
+	sllg	$len,$len,4		# $len&=~15
+	slgr	$out,$inp
+
+	# generate the tweak value
+	l${g}	$s3,$stdframe($sp)	# pointer to iv
+	la	$s2,$tweak($sp)
+	lmg	$s0,$s1,0($s3)
+	lghi	$s3,16
+	stmg	$s0,$s1,0($s2)
+	la	%r1,0($key2)		# $key2 is not needed anymore
+	.long	0xb92e00aa		# km $s2,$s2, generate the tweak
+	brc	1,.-4			# can this happen?
+
+	l	%r0,240($key1)
+	la	%r1,0($key1)		# $key1 is not needed anymore
+	bras	$ra,_s390x_xts_km
+	jz	.Lxts_enc_km_done
+
+	aghi	$inp,-16		# take one step back
+	la	$i3,0($out,$inp)	# put aside real $out
+.Lxts_enc_km_steal:
+	llgc	$i1,16($inp)
+	llgc	$i2,0($out,$inp)
+	stc	$i1,0($out,$inp)
+	stc	$i2,16($out,$inp)
+	la	$inp,1($inp)
+	brct	$len,.Lxts_enc_km_steal
+
+	la	$s2,0($i3)
+	lghi	$s3,16
+	lrvgr	$i1,$s0			# flip byte order
+	lrvgr	$i2,$s1
+	xg	$i1,0($s2)
+	xg	$i2,8($s2)
+	stg	$i1,0($s2)
+	stg	$i2,8($s2)
+	.long	0xb92e00aa		# km $s2,$s2
+	brc	1,.-4			# can this happen?
+	lrvgr	$i1,$s0			# flip byte order
+	lrvgr	$i2,$s1
+	xg	$i1,0($i3)
+	xg	$i2,8($i3)
+	stg	$i1,0($i3)
+	stg	$i2,8($i3)
+
+.Lxts_enc_km_done:
+	stg	$sp,$tweak+0($sp)	# wipe tweak
+	stg	$sp,$tweak+8($sp)
+	l${g}	$ra,5*$SIZE_T($sp)
+	lm${g}	%r6,$s3,6*$SIZE_T($sp)
+	br	$ra
+.align	16
+.Lxts_enc_software:
+___
+$code.=<<___;
+	stm${g}	%r6,$ra,6*$SIZE_T($sp)
+
+	slgr	$out,$inp
+
+	l${g}	$s3,$stdframe($sp)	# ivp
+	llgf	$s0,0($s3)		# load iv
+	llgf	$s1,4($s3)
+	llgf	$s2,8($s3)
+	llgf	$s3,12($s3)
+	stm${g}	%r2,%r5,2*$SIZE_T($sp)
+	la	$key,0($key2)
+	larl	$tbl,AES_Te
+	bras	$ra,_s390x_AES_encrypt	# generate the tweak
+	lm${g}	%r2,%r5,2*$SIZE_T($sp)
+	stm	$s0,$s3,$tweak($sp)	# save the tweak
+	j	.Lxts_enc_enter
+
+.align	16
+.Lxts_enc_loop:
+	lrvg	$s1,$tweak+0($sp)	# load the tweak in little-endian
+	lrvg	$s3,$tweak+8($sp)
+	lghi	%r1,0x87
+	srag	%r0,$s3,63		# broadcast upper bit
+	ngr	%r1,%r0			# rem
+	algr	$s1,$s1
+	alcgr	$s3,$s3
+	xgr	$s1,%r1
+	lrvgr	$s1,$s1			# flip byte order
+	lrvgr	$s3,$s3
+	srlg	$s0,$s1,32		# smash the tweak to 4x32-bits
+	stg	$s1,$tweak+0($sp)	# save the tweak
+	llgfr	$s1,$s1
+	srlg	$s2,$s3,32
+	stg	$s3,$tweak+8($sp)
+	llgfr	$s3,$s3
+	la	$inp,16($inp)		# $inp+=16
+.Lxts_enc_enter:
+	x	$s0,0($inp)		# ^=*($inp)
+	x	$s1,4($inp)
+	x	$s2,8($inp)
+	x	$s3,12($inp)
+	stm${g}	%r2,%r3,2*$SIZE_T($sp)	# only two registers are changing
+	la	$key,0($key1)
+	bras	$ra,_s390x_AES_encrypt
+	lm${g}	%r2,%r5,2*$SIZE_T($sp)
+	x	$s0,$tweak+0($sp)	# ^=tweak
+	x	$s1,$tweak+4($sp)
+	x	$s2,$tweak+8($sp)
+	x	$s3,$tweak+12($sp)
+	st	$s0,0($out,$inp)
+	st	$s1,4($out,$inp)
+	st	$s2,8($out,$inp)
+	st	$s3,12($out,$inp)
+	brct${g}	$len,.Lxts_enc_loop
+
+	llgc	$len,`2*$SIZE_T-1`($sp)
+	nill	$len,0x0f		# $len%16
+	jz	.Lxts_enc_done
+
+	la	$i3,0($inp,$out)	# put aside real $out
+.Lxts_enc_steal:
+	llgc	%r0,16($inp)
+	llgc	%r1,0($out,$inp)
+	stc	%r0,0($out,$inp)
+	stc	%r1,16($out,$inp)
+	la	$inp,1($inp)
+	brct	$len,.Lxts_enc_steal
+	la	$out,0($i3)		# restore real $out
+
+	# generate last tweak...
+	lrvg	$s1,$tweak+0($sp)	# load the tweak in little-endian
+	lrvg	$s3,$tweak+8($sp)
+	lghi	%r1,0x87
+	srag	%r0,$s3,63		# broadcast upper bit
+	ngr	%r1,%r0			# rem
+	algr	$s1,$s1
+	alcgr	$s3,$s3
+	xgr	$s1,%r1
+	lrvgr	$s1,$s1			# flip byte order
+	lrvgr	$s3,$s3
+	srlg	$s0,$s1,32		# smash the tweak to 4x32-bits
+	stg	$s1,$tweak+0($sp)	# save the tweak
+	llgfr	$s1,$s1
+	srlg	$s2,$s3,32
+	stg	$s3,$tweak+8($sp)
+	llgfr	$s3,$s3
+
+	x	$s0,0($out)		# ^=*(inp)|stolen cipther-text
+	x	$s1,4($out)
+	x	$s2,8($out)
+	x	$s3,12($out)
+	st${g}	$out,4*$SIZE_T($sp)
+	la	$key,0($key1)
+	bras	$ra,_s390x_AES_encrypt
+	l${g}	$out,4*$SIZE_T($sp)
+	x	$s0,`$tweak+0`($sp)	# ^=tweak
+	x	$s1,`$tweak+4`($sp)
+	x	$s2,`$tweak+8`($sp)
+	x	$s3,`$tweak+12`($sp)
+	st	$s0,0($out)
+	st	$s1,4($out)
+	st	$s2,8($out)
+	st	$s3,12($out)
+
+.Lxts_enc_done:
+	stg	$sp,$tweak+0($sp)	# wipe tweak
+	stg	$sp,$twesk+8($sp)
+	lm${g}	%r6,$ra,6*$SIZE_T($sp)
+	br	$ra
+.size	AES_xts_encrypt,.-AES_xts_encrypt
+___
+# void AES_xts_decrypt(const unsigned char *inp, unsigned char *out,
+#	size_t len, const AES_KEY *key1, const AES_KEY *key2,
+#	const unsigned char iv[16]);
+#
+$code.=<<___;
+.globl	AES_xts_decrypt
+.type	AES_xts_decrypt,\@function
+.align	16
+AES_xts_decrypt:
+	xgr	%r3,%r4			# flip %r3 and %r4, $out and $len
+	xgr	%r4,%r3
+	xgr	%r3,%r4
+___
+$code.=<<___ if ($SIZE_T==4);
+	llgfr	$len,$len
+___
+$code.=<<___;
+	st${g}	$len,1*$SIZE_T($sp)	# save copy of $len
+	aghi	$len,-16
+	bcr	4,$ra			# abort if less than zero. formally
+					# wrong, because $len is unsigned,
+					# but who can afford asking to
+					# process more than 2^63-1 bytes?
+	tmll	$len,0x0f
+	jnz	.Lxts_dec_proceed
+	aghi	$len,16
+.Lxts_dec_proceed:
+___
+$code.=<<___ if (!$softonly);
+	llgf	%r0,240($key2)
+	lhi	%r1,16
+	clr	%r0,%r1
+	jl	.Lxts_dec_software
+
+	st${g}	$ra,5*$SIZE_T($sp)
+	stm${g}	%r6,$s3,6*$SIZE_T($sp)
+
+	nill	$len,0xfff0		# $len&=~15
+	slgr	$out,$inp
+
+	# generate the tweak value
+	l${g}	$s3,$stdframe($sp)	# pointer to iv
+	la	$s2,$tweak($sp)
+	lmg	$s0,$s1,0($s3)
+	lghi	$s3,16
+	stmg	$s0,$s1,0($s2)
+	la	%r1,0($key2)		# $key2 is not needed past this point
+	.long	0xb92e00aa		# km $s2,$s2, generate the tweak
+	brc	1,.-4			# can this happen?
+
+	l	%r0,240($key1)
+	la	%r1,0($key1)		# $key1 is not needed anymore
+
+	ltgr	$len,$len
+	jz	.Lxts_dec_km_short
+	bras	$ra,_s390x_xts_km
+	jz	.Lxts_dec_km_done
+
+	lrvgr	$s2,$s0			# make copy in reverse byte order
+	lrvgr	$s3,$s1
+	j	.Lxts_dec_km_2ndtweak
+
+.Lxts_dec_km_short:
+	llgc	$len,`2*$SIZE_T-1`($sp)
+	nill	$len,0x0f		# $len%=16
+	lrvg	$s0,$tweak+0($sp)	# load the tweak
+	lrvg	$s1,$tweak+8($sp)
+	lrvgr	$s2,$s0			# make copy in reverse byte order
+	lrvgr	$s3,$s1
+
+.Lxts_dec_km_2ndtweak:
+	lghi	$i1,0x87
+	srag	$i2,$s1,63		# broadcast upper bit
+	ngr	$i1,$i2			# rem
+	algr	$s0,$s0
+	alcgr	$s1,$s1
+	xgr	$s0,$i1
+	lrvgr	$i1,$s0			# flip byte order
+	lrvgr	$i2,$s1
+
+	xg	$i1,0($inp)
+	xg	$i2,8($inp)
+	stg	$i1,0($out,$inp)
+	stg	$i2,8($out,$inp)
+	la	$i2,0($out,$inp)
+	lghi	$i3,16
+	.long	0xb92e0066		# km $i2,$i2
+	brc	1,.-4			# can this happen?
+	lrvgr	$i1,$s0
+	lrvgr	$i2,$s1
+	xg	$i1,0($out,$inp)
+	xg	$i2,8($out,$inp)
+	stg	$i1,0($out,$inp)
+	stg	$i2,8($out,$inp)
+
+	la	$i3,0($out,$inp)	# put aside real $out
+.Lxts_dec_km_steal:
+	llgc	$i1,16($inp)
+	llgc	$i2,0($out,$inp)
+	stc	$i1,0($out,$inp)
+	stc	$i2,16($out,$inp)
+	la	$inp,1($inp)
+	brct	$len,.Lxts_dec_km_steal
+
+	lgr	$s0,$s2
+	lgr	$s1,$s3
+	xg	$s0,0($i3)
+	xg	$s1,8($i3)
+	stg	$s0,0($i3)
+	stg	$s1,8($i3)
+	la	$s0,0($i3)
+	lghi	$s1,16
+	.long	0xb92e0088		# km $s0,$s0
+	brc	1,.-4			# can this happen?
+	xg	$s2,0($i3)
+	xg	$s3,8($i3)
+	stg	$s2,0($i3)
+	stg	$s3,8($i3)
+.Lxts_dec_km_done:
+	stg	$sp,$tweak+0($sp)	# wipe tweak
+	stg	$sp,$tweak+8($sp)
+	l${g}	$ra,5*$SIZE_T($sp)
+	lm${g}	%r6,$s3,6*$SIZE_T($sp)
+	br	$ra
+.align	16
+.Lxts_dec_software:
+___
+$code.=<<___;
+	stm${g}	%r6,$ra,6*$SIZE_T($sp)
+
+	srlg	$len,$len,4
+	slgr	$out,$inp
+
+	l${g}	$s3,$stdframe($sp)	# ivp
+	llgf	$s0,0($s3)		# load iv
+	llgf	$s1,4($s3)
+	llgf	$s2,8($s3)
+	llgf	$s3,12($s3)
+	stm${g}	%r2,%r5,2*$SIZE_T($sp)
+	la	$key,0($key2)
+	larl	$tbl,AES_Te
+	bras	$ra,_s390x_AES_encrypt	# generate the tweak
+	lm${g}	%r2,%r5,2*$SIZE_T($sp)
+	larl	$tbl,AES_Td
+	lt${g}r	$len,$len
+	stm	$s0,$s3,$tweak($sp)	# save the tweak
+	jz	.Lxts_dec_short
+	j	.Lxts_dec_enter
+
+.align	16
+.Lxts_dec_loop:
+	lrvg	$s1,$tweak+0($sp)	# load the tweak in little-endian
+	lrvg	$s3,$tweak+8($sp)
+	lghi	%r1,0x87
+	srag	%r0,$s3,63		# broadcast upper bit
+	ngr	%r1,%r0			# rem
+	algr	$s1,$s1
+	alcgr	$s3,$s3
+	xgr	$s1,%r1
+	lrvgr	$s1,$s1			# flip byte order
+	lrvgr	$s3,$s3
+	srlg	$s0,$s1,32		# smash the tweak to 4x32-bits
+	stg	$s1,$tweak+0($sp)	# save the tweak
+	llgfr	$s1,$s1
+	srlg	$s2,$s3,32
+	stg	$s3,$tweak+8($sp)
+	llgfr	$s3,$s3
+.Lxts_dec_enter:
+	x	$s0,0($inp)		# tweak^=*(inp)
+	x	$s1,4($inp)
+	x	$s2,8($inp)
+	x	$s3,12($inp)
+	stm${g}	%r2,%r3,2*$SIZE_T($sp)	# only two registers are changing
+	la	$key,0($key1)
+	bras	$ra,_s390x_AES_decrypt
+	lm${g}	%r2,%r5,2*$SIZE_T($sp)
+	x	$s0,$tweak+0($sp)	# ^=tweak
+	x	$s1,$tweak+4($sp)
+	x	$s2,$tweak+8($sp)
+	x	$s3,$tweak+12($sp)
+	st	$s0,0($out,$inp)
+	st	$s1,4($out,$inp)
+	st	$s2,8($out,$inp)
+	st	$s3,12($out,$inp)
+	la	$inp,16($inp)
+	brct${g}	$len,.Lxts_dec_loop
+
+	llgc	$len,`2*$SIZE_T-1`($sp)
+	nill	$len,0x0f		# $len%16
+	jz	.Lxts_dec_done
+
+	# generate pair of tweaks...
+	lrvg	$s1,$tweak+0($sp)	# load the tweak in little-endian
+	lrvg	$s3,$tweak+8($sp)
+	lghi	%r1,0x87
+	srag	%r0,$s3,63		# broadcast upper bit
+	ngr	%r1,%r0			# rem
+	algr	$s1,$s1
+	alcgr	$s3,$s3
+	xgr	$s1,%r1
+	lrvgr	$i2,$s1			# flip byte order
+	lrvgr	$i3,$s3
+	stmg	$i2,$i3,$tweak($sp)	# save the 1st tweak
+	j	.Lxts_dec_2ndtweak
+
+.align	16
+.Lxts_dec_short:
+	llgc	$len,`2*$SIZE_T-1`($sp)
+	nill	$len,0x0f		# $len%16
+	lrvg	$s1,$tweak+0($sp)	# load the tweak in little-endian
+	lrvg	$s3,$tweak+8($sp)
+.Lxts_dec_2ndtweak:
+	lghi	%r1,0x87
+	srag	%r0,$s3,63		# broadcast upper bit
+	ngr	%r1,%r0			# rem
+	algr	$s1,$s1
+	alcgr	$s3,$s3
+	xgr	$s1,%r1
+	lrvgr	$s1,$s1			# flip byte order
+	lrvgr	$s3,$s3
+	srlg	$s0,$s1,32		# smash the tweak to 4x32-bits
+	stg	$s1,$tweak-16+0($sp)	# save the 2nd tweak
+	llgfr	$s1,$s1
+	srlg	$s2,$s3,32
+	stg	$s3,$tweak-16+8($sp)
+	llgfr	$s3,$s3
+
+	x	$s0,0($inp)		# tweak_the_2nd^=*(inp)
+	x	$s1,4($inp)
+	x	$s2,8($inp)
+	x	$s3,12($inp)
+	stm${g}	%r2,%r3,2*$SIZE_T($sp)
+	la	$key,0($key1)
+	bras	$ra,_s390x_AES_decrypt
+	lm${g}	%r2,%r5,2*$SIZE_T($sp)
+	x	$s0,$tweak-16+0($sp)	# ^=tweak_the_2nd
+	x	$s1,$tweak-16+4($sp)
+	x	$s2,$tweak-16+8($sp)
+	x	$s3,$tweak-16+12($sp)
+	st	$s0,0($out,$inp)
+	st	$s1,4($out,$inp)
+	st	$s2,8($out,$inp)
+	st	$s3,12($out,$inp)
+
+	la	$i3,0($out,$inp)	# put aside real $out
+.Lxts_dec_steal:
+	llgc	%r0,16($inp)
+	llgc	%r1,0($out,$inp)
+	stc	%r0,0($out,$inp)
+	stc	%r1,16($out,$inp)
+	la	$inp,1($inp)
+	brct	$len,.Lxts_dec_steal
+	la	$out,0($i3)		# restore real $out
+
+	lm	$s0,$s3,$tweak($sp)	# load the 1st tweak
+	x	$s0,0($out)		# tweak^=*(inp)|stolen cipher-text
+	x	$s1,4($out)
+	x	$s2,8($out)
+	x	$s3,12($out)
+	st${g}	$out,4*$SIZE_T($sp)
+	la	$key,0($key1)
+	bras	$ra,_s390x_AES_decrypt
+	l${g}	$out,4*$SIZE_T($sp)
+	x	$s0,$tweak+0($sp)	# ^=tweak
+	x	$s1,$tweak+4($sp)
+	x	$s2,$tweak+8($sp)
+	x	$s3,$tweak+12($sp)
+	st	$s0,0($out)
+	st	$s1,4($out)
+	st	$s2,8($out)
+	st	$s3,12($out)
+	stg	$sp,$tweak-16+0($sp)	# wipe 2nd tweak
+	stg	$sp,$tweak-16+8($sp)
+.Lxts_dec_done:
+	stg	$sp,$tweak+0($sp)	# wipe tweak
+	stg	$sp,$twesk+8($sp)
+	lm${g}	%r6,$ra,6*$SIZE_T($sp)
+	br	$ra
+.size	AES_xts_decrypt,.-AES_xts_decrypt
+___
+}
+$code.=<<___;
+.string	"AES for s390x, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;	# force flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-sparcv9.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-sparcv9.pl
new file mode 100755
index 000000000..40d1f94cc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-sparcv9.pl
@@ -0,0 +1,1192 @@
+#! /usr/bin/env perl
+# Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. Rights for redistribution and usage in source and binary
+# forms are granted according to the OpenSSL license.
+# ====================================================================
+#
+# Version 1.1
+#
+# The major reason for undertaken effort was to mitigate the hazard of
+# cache-timing attack. This is [currently and initially!] addressed in
+# two ways. 1. S-boxes are compressed from 5KB to 2KB+256B size each.
+# 2. References to them are scheduled for L2 cache latency, meaning
+# that the tables don't have to reside in L1 cache. Once again, this
+# is an initial draft and one should expect more countermeasures to
+# be implemented...
+#
+# Version 1.1 prefetches T[ed]4 in order to mitigate attack on last
+# round.
+#
+# Even though performance was not the primary goal [on the contrary,
+# extra shifts "induced" by compressed S-box and longer loop epilogue
+# "induced" by scheduling for L2 have negative effect on performance],
+# the code turned out to run in ~23 cycles per processed byte en-/
+# decrypted with 128-bit key. This is pretty good result for code
+# with mentioned qualities and UltraSPARC core. Compared to Sun C
+# generated code my encrypt procedure runs just few percents faster,
+# while decrypt one - whole 50% faster [yes, Sun C failed to generate
+# optimal decrypt procedure]. Compared to GNU C generated code both
+# procedures are more than 60% faster:-)
+
+$output = pop;
+open STDOUT,">$output";
+
+$frame="STACK_FRAME";
+$bias="STACK_BIAS";
+$locals=16;
+
+$acc0="%l0";
+$acc1="%o0";
+$acc2="%o1";
+$acc3="%o2";
+
+$acc4="%l1";
+$acc5="%o3";
+$acc6="%o4";
+$acc7="%o5";
+
+$acc8="%l2";
+$acc9="%o7";
+$acc10="%g1";
+$acc11="%g2";
+
+$acc12="%l3";
+$acc13="%g3";
+$acc14="%g4";
+$acc15="%g5";
+
+$t0="%l4";
+$t1="%l5";
+$t2="%l6";
+$t3="%l7";
+
+$s0="%i0";
+$s1="%i1";
+$s2="%i2";
+$s3="%i3";
+$tbl="%i4";
+$key="%i5";
+$rounds="%i7";	# aliases with return address, which is off-loaded to stack
+
+sub _data_word()
+{ my $i;
+    while(defined($i=shift)) { $code.=sprintf"\t.long\t0x%08x,0x%08x\n",$i,$i; }
+}
+
+$code.=<<___;
+#include "sparc_arch.h"
+
+#ifdef  __arch64__
+.register	%g2,#scratch
+.register	%g3,#scratch
+#endif
+.section	".text",#alloc,#execinstr
+
+.align	256
+AES_Te:
+___
+&_data_word(
+	0xc66363a5, 0xf87c7c84, 0xee777799, 0xf67b7b8d,
+	0xfff2f20d, 0xd66b6bbd, 0xde6f6fb1, 0x91c5c554,
+	0x60303050, 0x02010103, 0xce6767a9, 0x562b2b7d,
+	0xe7fefe19, 0xb5d7d762, 0x4dababe6, 0xec76769a,
+	0x8fcaca45, 0x1f82829d, 0x89c9c940, 0xfa7d7d87,
+	0xeffafa15, 0xb25959eb, 0x8e4747c9, 0xfbf0f00b,
+	0x41adadec, 0xb3d4d467, 0x5fa2a2fd, 0x45afafea,
+	0x239c9cbf, 0x53a4a4f7, 0xe4727296, 0x9bc0c05b,
+	0x75b7b7c2, 0xe1fdfd1c, 0x3d9393ae, 0x4c26266a,
+	0x6c36365a, 0x7e3f3f41, 0xf5f7f702, 0x83cccc4f,
+	0x6834345c, 0x51a5a5f4, 0xd1e5e534, 0xf9f1f108,
+	0xe2717193, 0xabd8d873, 0x62313153, 0x2a15153f,
+	0x0804040c, 0x95c7c752, 0x46232365, 0x9dc3c35e,
+	0x30181828, 0x379696a1, 0x0a05050f, 0x2f9a9ab5,
+	0x0e070709, 0x24121236, 0x1b80809b, 0xdfe2e23d,
+	0xcdebeb26, 0x4e272769, 0x7fb2b2cd, 0xea75759f,
+	0x1209091b, 0x1d83839e, 0x582c2c74, 0x341a1a2e,
+	0x361b1b2d, 0xdc6e6eb2, 0xb45a5aee, 0x5ba0a0fb,
+	0xa45252f6, 0x763b3b4d, 0xb7d6d661, 0x7db3b3ce,
+	0x5229297b, 0xdde3e33e, 0x5e2f2f71, 0x13848497,
+	0xa65353f5, 0xb9d1d168, 0x00000000, 0xc1eded2c,
+	0x40202060, 0xe3fcfc1f, 0x79b1b1c8, 0xb65b5bed,
+	0xd46a6abe, 0x8dcbcb46, 0x67bebed9, 0x7239394b,
+	0x944a4ade, 0x984c4cd4, 0xb05858e8, 0x85cfcf4a,
+	0xbbd0d06b, 0xc5efef2a, 0x4faaaae5, 0xedfbfb16,
+	0x864343c5, 0x9a4d4dd7, 0x66333355, 0x11858594,
+	0x8a4545cf, 0xe9f9f910, 0x04020206, 0xfe7f7f81,
+	0xa05050f0, 0x783c3c44, 0x259f9fba, 0x4ba8a8e3,
+	0xa25151f3, 0x5da3a3fe, 0x804040c0, 0x058f8f8a,
+	0x3f9292ad, 0x219d9dbc, 0x70383848, 0xf1f5f504,
+	0x63bcbcdf, 0x77b6b6c1, 0xafdada75, 0x42212163,
+	0x20101030, 0xe5ffff1a, 0xfdf3f30e, 0xbfd2d26d,
+	0x81cdcd4c, 0x180c0c14, 0x26131335, 0xc3ecec2f,
+	0xbe5f5fe1, 0x359797a2, 0x884444cc, 0x2e171739,
+	0x93c4c457, 0x55a7a7f2, 0xfc7e7e82, 0x7a3d3d47,
+	0xc86464ac, 0xba5d5de7, 0x3219192b, 0xe6737395,
+	0xc06060a0, 0x19818198, 0x9e4f4fd1, 0xa3dcdc7f,
+	0x44222266, 0x542a2a7e, 0x3b9090ab, 0x0b888883,
+	0x8c4646ca, 0xc7eeee29, 0x6bb8b8d3, 0x2814143c,
+	0xa7dede79, 0xbc5e5ee2, 0x160b0b1d, 0xaddbdb76,
+	0xdbe0e03b, 0x64323256, 0x743a3a4e, 0x140a0a1e,
+	0x924949db, 0x0c06060a, 0x4824246c, 0xb85c5ce4,
+	0x9fc2c25d, 0xbdd3d36e, 0x43acacef, 0xc46262a6,
+	0x399191a8, 0x319595a4, 0xd3e4e437, 0xf279798b,
+	0xd5e7e732, 0x8bc8c843, 0x6e373759, 0xda6d6db7,
+	0x018d8d8c, 0xb1d5d564, 0x9c4e4ed2, 0x49a9a9e0,
+	0xd86c6cb4, 0xac5656fa, 0xf3f4f407, 0xcfeaea25,
+	0xca6565af, 0xf47a7a8e, 0x47aeaee9, 0x10080818,
+	0x6fbabad5, 0xf0787888, 0x4a25256f, 0x5c2e2e72,
+	0x381c1c24, 0x57a6a6f1, 0x73b4b4c7, 0x97c6c651,
+	0xcbe8e823, 0xa1dddd7c, 0xe874749c, 0x3e1f1f21,
+	0x964b4bdd, 0x61bdbddc, 0x0d8b8b86, 0x0f8a8a85,
+	0xe0707090, 0x7c3e3e42, 0x71b5b5c4, 0xcc6666aa,
+	0x904848d8, 0x06030305, 0xf7f6f601, 0x1c0e0e12,
+	0xc26161a3, 0x6a35355f, 0xae5757f9, 0x69b9b9d0,
+	0x17868691, 0x99c1c158, 0x3a1d1d27, 0x279e9eb9,
+	0xd9e1e138, 0xebf8f813, 0x2b9898b3, 0x22111133,
+	0xd26969bb, 0xa9d9d970, 0x078e8e89, 0x339494a7,
+	0x2d9b9bb6, 0x3c1e1e22, 0x15878792, 0xc9e9e920,
+	0x87cece49, 0xaa5555ff, 0x50282878, 0xa5dfdf7a,
+	0x038c8c8f, 0x59a1a1f8, 0x09898980, 0x1a0d0d17,
+	0x65bfbfda, 0xd7e6e631, 0x844242c6, 0xd06868b8,
+	0x824141c3, 0x299999b0, 0x5a2d2d77, 0x1e0f0f11,
+	0x7bb0b0cb, 0xa85454fc, 0x6dbbbbd6, 0x2c16163a);
+$code.=<<___;
+	.byte	0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5
+	.byte	0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76
+	.byte	0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0
+	.byte	0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0
+	.byte	0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc
+	.byte	0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15
+	.byte	0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a
+	.byte	0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75
+	.byte	0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0
+	.byte	0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84
+	.byte	0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b
+	.byte	0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf
+	.byte	0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85
+	.byte	0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8
+	.byte	0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5
+	.byte	0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2
+	.byte	0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17
+	.byte	0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73
+	.byte	0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88
+	.byte	0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb
+	.byte	0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c
+	.byte	0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79
+	.byte	0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9
+	.byte	0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08
+	.byte	0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6
+	.byte	0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a
+	.byte	0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e
+	.byte	0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e
+	.byte	0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94
+	.byte	0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf
+	.byte	0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68
+	.byte	0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16
+.type	AES_Te,#object
+.size	AES_Te,(.-AES_Te)
+
+.align	64
+.skip	16
+_sparcv9_AES_encrypt:
+	save	%sp,-$frame-$locals,%sp
+	stx	%i7,[%sp+$bias+$frame+0]	! off-load return address
+	ld	[$key+240],$rounds
+	ld	[$key+0],$t0
+	ld	[$key+4],$t1			!
+	ld	[$key+8],$t2
+	srl	$rounds,1,$rounds
+	xor	$t0,$s0,$s0
+	ld	[$key+12],$t3
+	srl	$s0,21,$acc0
+	xor	$t1,$s1,$s1
+	ld	[$key+16],$t0
+	srl	$s1,13,$acc1			!
+	xor	$t2,$s2,$s2
+	ld	[$key+20],$t1
+	xor	$t3,$s3,$s3
+	ld	[$key+24],$t2
+	and	$acc0,2040,$acc0
+	ld	[$key+28],$t3
+	nop
+.Lenc_loop:
+	srl	$s2,5,$acc2			!
+	and	$acc1,2040,$acc1
+	ldx	[$tbl+$acc0],$acc0
+	sll	$s3,3,$acc3
+	and	$acc2,2040,$acc2
+	ldx	[$tbl+$acc1],$acc1
+	srl	$s1,21,$acc4
+	and	$acc3,2040,$acc3
+	ldx	[$tbl+$acc2],$acc2		!
+	srl	$s2,13,$acc5
+	and	$acc4,2040,$acc4
+	ldx	[$tbl+$acc3],$acc3
+	srl	$s3,5,$acc6
+	and	$acc5,2040,$acc5
+	ldx	[$tbl+$acc4],$acc4
+	fmovs	%f0,%f0
+	sll	$s0,3,$acc7			!
+	and	$acc6,2040,$acc6
+	ldx	[$tbl+$acc5],$acc5
+	srl	$s2,21,$acc8
+	and	$acc7,2040,$acc7
+	ldx	[$tbl+$acc6],$acc6
+	srl	$s3,13,$acc9
+	and	$acc8,2040,$acc8
+	ldx	[$tbl+$acc7],$acc7		!
+	srl	$s0,5,$acc10
+	and	$acc9,2040,$acc9
+	ldx	[$tbl+$acc8],$acc8
+	sll	$s1,3,$acc11
+	and	$acc10,2040,$acc10
+	ldx	[$tbl+$acc9],$acc9
+	fmovs	%f0,%f0
+	srl	$s3,21,$acc12			!
+	and	$acc11,2040,$acc11
+	ldx	[$tbl+$acc10],$acc10
+	srl	$s0,13,$acc13
+	and	$acc12,2040,$acc12
+	ldx	[$tbl+$acc11],$acc11
+	srl	$s1,5,$acc14
+	and	$acc13,2040,$acc13
+	ldx	[$tbl+$acc12],$acc12		!
+	sll	$s2,3,$acc15
+	and	$acc14,2040,$acc14
+	ldx	[$tbl+$acc13],$acc13
+	and	$acc15,2040,$acc15
+	add	$key,32,$key
+	ldx	[$tbl+$acc14],$acc14
+	fmovs	%f0,%f0
+	subcc	$rounds,1,$rounds		!
+	ldx	[$tbl+$acc15],$acc15
+	bz,a,pn	%icc,.Lenc_last
+	add	$tbl,2048,$rounds
+
+		srlx	$acc1,8,$acc1
+		xor	$acc0,$t0,$t0
+	ld	[$key+0],$s0
+	fmovs	%f0,%f0
+		srlx	$acc2,16,$acc2		!
+		xor	$acc1,$t0,$t0
+	ld	[$key+4],$s1
+		srlx	$acc3,24,$acc3
+		xor	$acc2,$t0,$t0
+	ld	[$key+8],$s2
+		srlx	$acc5,8,$acc5
+		xor	$acc3,$t0,$t0
+	ld	[$key+12],$s3			!
+		srlx	$acc6,16,$acc6
+		xor	$acc4,$t1,$t1
+	fmovs	%f0,%f0
+		srlx	$acc7,24,$acc7
+		xor	$acc5,$t1,$t1
+		srlx	$acc9,8,$acc9
+		xor	$acc6,$t1,$t1
+		srlx	$acc10,16,$acc10	!
+		xor	$acc7,$t1,$t1
+		srlx	$acc11,24,$acc11
+		xor	$acc8,$t2,$t2
+		srlx	$acc13,8,$acc13
+		xor	$acc9,$t2,$t2
+		srlx	$acc14,16,$acc14
+		xor	$acc10,$t2,$t2
+		srlx	$acc15,24,$acc15	!
+		xor	$acc11,$t2,$t2
+		xor	$acc12,$acc14,$acc14
+		xor	$acc13,$t3,$t3
+	srl	$t0,21,$acc0
+		xor	$acc14,$t3,$t3
+	srl	$t1,13,$acc1
+		xor	$acc15,$t3,$t3
+
+	and	$acc0,2040,$acc0		!
+	srl	$t2,5,$acc2
+	and	$acc1,2040,$acc1
+	ldx	[$tbl+$acc0],$acc0
+	sll	$t3,3,$acc3
+	and	$acc2,2040,$acc2
+	ldx	[$tbl+$acc1],$acc1
+	fmovs	%f0,%f0
+	srl	$t1,21,$acc4			!
+	and	$acc3,2040,$acc3
+	ldx	[$tbl+$acc2],$acc2
+	srl	$t2,13,$acc5
+	and	$acc4,2040,$acc4
+	ldx	[$tbl+$acc3],$acc3
+	srl	$t3,5,$acc6
+	and	$acc5,2040,$acc5
+	ldx	[$tbl+$acc4],$acc4		!
+	sll	$t0,3,$acc7
+	and	$acc6,2040,$acc6
+	ldx	[$tbl+$acc5],$acc5
+	srl	$t2,21,$acc8
+	and	$acc7,2040,$acc7
+	ldx	[$tbl+$acc6],$acc6
+	fmovs	%f0,%f0
+	srl	$t3,13,$acc9			!
+	and	$acc8,2040,$acc8
+	ldx	[$tbl+$acc7],$acc7
+	srl	$t0,5,$acc10
+	and	$acc9,2040,$acc9
+	ldx	[$tbl+$acc8],$acc8
+	sll	$t1,3,$acc11
+	and	$acc10,2040,$acc10
+	ldx	[$tbl+$acc9],$acc9		!
+	srl	$t3,21,$acc12
+	and	$acc11,2040,$acc11
+	ldx	[$tbl+$acc10],$acc10
+	srl	$t0,13,$acc13
+	and	$acc12,2040,$acc12
+	ldx	[$tbl+$acc11],$acc11
+	fmovs	%f0,%f0
+	srl	$t1,5,$acc14			!
+	and	$acc13,2040,$acc13
+	ldx	[$tbl+$acc12],$acc12
+	sll	$t2,3,$acc15
+	and	$acc14,2040,$acc14
+	ldx	[$tbl+$acc13],$acc13
+		srlx	$acc1,8,$acc1
+	and	$acc15,2040,$acc15
+	ldx	[$tbl+$acc14],$acc14		!
+
+		srlx	$acc2,16,$acc2
+		xor	$acc0,$s0,$s0
+	ldx	[$tbl+$acc15],$acc15
+		srlx	$acc3,24,$acc3
+		xor	$acc1,$s0,$s0
+	ld	[$key+16],$t0
+	fmovs	%f0,%f0
+		srlx	$acc5,8,$acc5		!
+		xor	$acc2,$s0,$s0
+	ld	[$key+20],$t1
+		srlx	$acc6,16,$acc6
+		xor	$acc3,$s0,$s0
+	ld	[$key+24],$t2
+		srlx	$acc7,24,$acc7
+		xor	$acc4,$s1,$s1
+	ld	[$key+28],$t3			!
+		srlx	$acc9,8,$acc9
+		xor	$acc5,$s1,$s1
+	ldx	[$tbl+2048+0],%g0		! prefetch te4
+		srlx	$acc10,16,$acc10
+		xor	$acc6,$s1,$s1
+	ldx	[$tbl+2048+32],%g0		! prefetch te4
+		srlx	$acc11,24,$acc11
+		xor	$acc7,$s1,$s1
+	ldx	[$tbl+2048+64],%g0		! prefetch te4
+		srlx	$acc13,8,$acc13
+		xor	$acc8,$s2,$s2
+	ldx	[$tbl+2048+96],%g0		! prefetch te4
+		srlx	$acc14,16,$acc14	!
+		xor	$acc9,$s2,$s2
+	ldx	[$tbl+2048+128],%g0		! prefetch te4
+		srlx	$acc15,24,$acc15
+		xor	$acc10,$s2,$s2
+	ldx	[$tbl+2048+160],%g0		! prefetch te4
+	srl	$s0,21,$acc0
+		xor	$acc11,$s2,$s2
+	ldx	[$tbl+2048+192],%g0		! prefetch te4
+		xor	$acc12,$acc14,$acc14
+		xor	$acc13,$s3,$s3
+	ldx	[$tbl+2048+224],%g0		! prefetch te4
+	srl	$s1,13,$acc1			!
+		xor	$acc14,$s3,$s3
+		xor	$acc15,$s3,$s3
+	ba	.Lenc_loop
+	and	$acc0,2040,$acc0
+
+.align	32
+.Lenc_last:
+		srlx	$acc1,8,$acc1		!
+		xor	$acc0,$t0,$t0
+	ld	[$key+0],$s0
+		srlx	$acc2,16,$acc2
+		xor	$acc1,$t0,$t0
+	ld	[$key+4],$s1
+		srlx	$acc3,24,$acc3
+		xor	$acc2,$t0,$t0
+	ld	[$key+8],$s2			!
+		srlx	$acc5,8,$acc5
+		xor	$acc3,$t0,$t0
+	ld	[$key+12],$s3
+		srlx	$acc6,16,$acc6
+		xor	$acc4,$t1,$t1
+		srlx	$acc7,24,$acc7
+		xor	$acc5,$t1,$t1
+		srlx	$acc9,8,$acc9		!
+		xor	$acc6,$t1,$t1
+		srlx	$acc10,16,$acc10
+		xor	$acc7,$t1,$t1
+		srlx	$acc11,24,$acc11
+		xor	$acc8,$t2,$t2
+		srlx	$acc13,8,$acc13
+		xor	$acc9,$t2,$t2
+		srlx	$acc14,16,$acc14	!
+		xor	$acc10,$t2,$t2
+		srlx	$acc15,24,$acc15
+		xor	$acc11,$t2,$t2
+		xor	$acc12,$acc14,$acc14
+		xor	$acc13,$t3,$t3
+	srl	$t0,24,$acc0
+		xor	$acc14,$t3,$t3
+	srl	$t1,16,$acc1			!
+		xor	$acc15,$t3,$t3
+
+	srl	$t2,8,$acc2
+	and	$acc1,255,$acc1
+	ldub	[$rounds+$acc0],$acc0
+	srl	$t1,24,$acc4
+	and	$acc2,255,$acc2
+	ldub	[$rounds+$acc1],$acc1
+	srl	$t2,16,$acc5			!
+	and	$t3,255,$acc3
+	ldub	[$rounds+$acc2],$acc2
+	ldub	[$rounds+$acc3],$acc3
+	srl	$t3,8,$acc6
+	and	$acc5,255,$acc5
+	ldub	[$rounds+$acc4],$acc4
+	fmovs	%f0,%f0
+	srl	$t2,24,$acc8			!
+	and	$acc6,255,$acc6
+	ldub	[$rounds+$acc5],$acc5
+	srl	$t3,16,$acc9
+	and	$t0,255,$acc7
+	ldub	[$rounds+$acc6],$acc6
+	ldub	[$rounds+$acc7],$acc7
+	fmovs	%f0,%f0
+	srl	$t0,8,$acc10			!
+	and	$acc9,255,$acc9
+	ldub	[$rounds+$acc8],$acc8
+	srl	$t3,24,$acc12
+	and	$acc10,255,$acc10
+	ldub	[$rounds+$acc9],$acc9
+	srl	$t0,16,$acc13
+	and	$t1,255,$acc11
+	ldub	[$rounds+$acc10],$acc10		!
+	srl	$t1,8,$acc14
+	and	$acc13,255,$acc13
+	ldub	[$rounds+$acc11],$acc11
+	ldub	[$rounds+$acc12],$acc12
+	and	$acc14,255,$acc14
+	ldub	[$rounds+$acc13],$acc13
+	and	$t2,255,$acc15
+	ldub	[$rounds+$acc14],$acc14		!
+
+		sll	$acc0,24,$acc0
+		xor	$acc3,$s0,$s0
+	ldub	[$rounds+$acc15],$acc15
+		sll	$acc1,16,$acc1
+		xor	$acc0,$s0,$s0
+	ldx	[%sp+$bias+$frame+0],%i7	! restore return address
+	fmovs	%f0,%f0
+		sll	$acc2,8,$acc2		!
+		xor	$acc1,$s0,$s0
+		sll	$acc4,24,$acc4
+		xor	$acc2,$s0,$s0
+		sll	$acc5,16,$acc5
+		xor	$acc7,$s1,$s1
+		sll	$acc6,8,$acc6
+		xor	$acc4,$s1,$s1
+		sll	$acc8,24,$acc8		!
+		xor	$acc5,$s1,$s1
+		sll	$acc9,16,$acc9
+		xor	$acc11,$s2,$s2
+		sll	$acc10,8,$acc10
+		xor	$acc6,$s1,$s1
+		sll	$acc12,24,$acc12
+		xor	$acc8,$s2,$s2
+		sll	$acc13,16,$acc13	!
+		xor	$acc9,$s2,$s2
+		sll	$acc14,8,$acc14
+		xor	$acc10,$s2,$s2
+		xor	$acc12,$acc14,$acc14
+		xor	$acc13,$s3,$s3
+		xor	$acc14,$s3,$s3
+		xor	$acc15,$s3,$s3
+
+	ret
+	restore
+.type	_sparcv9_AES_encrypt,#function
+.size	_sparcv9_AES_encrypt,(.-_sparcv9_AES_encrypt)
+
+.align	32
+.globl	AES_encrypt
+AES_encrypt:
+	or	%o0,%o1,%g1
+	andcc	%g1,3,%g0
+	bnz,pn	%xcc,.Lunaligned_enc
+	save	%sp,-$frame,%sp
+
+	ld	[%i0+0],%o0
+	ld	[%i0+4],%o1
+	ld	[%i0+8],%o2
+	ld	[%i0+12],%o3
+
+1:	call	.+8
+	add	%o7,AES_Te-1b,%o4
+	call	_sparcv9_AES_encrypt
+	mov	%i2,%o5
+
+	st	%o0,[%i1+0]
+	st	%o1,[%i1+4]
+	st	%o2,[%i1+8]
+	st	%o3,[%i1+12]
+
+	ret
+	restore
+
+.align	32
+.Lunaligned_enc:
+	ldub	[%i0+0],%l0
+	ldub	[%i0+1],%l1
+	ldub	[%i0+2],%l2
+
+	sll	%l0,24,%l0
+	ldub	[%i0+3],%l3
+	sll	%l1,16,%l1
+	ldub	[%i0+4],%l4
+	sll	%l2,8,%l2
+	or	%l1,%l0,%l0
+	ldub	[%i0+5],%l5
+	sll	%l4,24,%l4
+	or	%l3,%l2,%l2
+	ldub	[%i0+6],%l6
+	sll	%l5,16,%l5
+	or	%l0,%l2,%o0
+	ldub	[%i0+7],%l7
+
+	sll	%l6,8,%l6
+	or	%l5,%l4,%l4
+	ldub	[%i0+8],%l0
+	or	%l7,%l6,%l6
+	ldub	[%i0+9],%l1
+	or	%l4,%l6,%o1
+	ldub	[%i0+10],%l2
+
+	sll	%l0,24,%l0
+	ldub	[%i0+11],%l3
+	sll	%l1,16,%l1
+	ldub	[%i0+12],%l4
+	sll	%l2,8,%l2
+	or	%l1,%l0,%l0
+	ldub	[%i0+13],%l5
+	sll	%l4,24,%l4
+	or	%l3,%l2,%l2
+	ldub	[%i0+14],%l6
+	sll	%l5,16,%l5
+	or	%l0,%l2,%o2
+	ldub	[%i0+15],%l7
+
+	sll	%l6,8,%l6
+	or	%l5,%l4,%l4
+	or	%l7,%l6,%l6
+	or	%l4,%l6,%o3
+
+1:	call	.+8
+	add	%o7,AES_Te-1b,%o4
+	call	_sparcv9_AES_encrypt
+	mov	%i2,%o5
+
+	srl	%o0,24,%l0
+	srl	%o0,16,%l1
+	stb	%l0,[%i1+0]
+	srl	%o0,8,%l2
+	stb	%l1,[%i1+1]
+	stb	%l2,[%i1+2]
+	srl	%o1,24,%l4
+	stb	%o0,[%i1+3]
+
+	srl	%o1,16,%l5
+	stb	%l4,[%i1+4]
+	srl	%o1,8,%l6
+	stb	%l5,[%i1+5]
+	stb	%l6,[%i1+6]
+	srl	%o2,24,%l0
+	stb	%o1,[%i1+7]
+
+	srl	%o2,16,%l1
+	stb	%l0,[%i1+8]
+	srl	%o2,8,%l2
+	stb	%l1,[%i1+9]
+	stb	%l2,[%i1+10]
+	srl	%o3,24,%l4
+	stb	%o2,[%i1+11]
+
+	srl	%o3,16,%l5
+	stb	%l4,[%i1+12]
+	srl	%o3,8,%l6
+	stb	%l5,[%i1+13]
+	stb	%l6,[%i1+14]
+	stb	%o3,[%i1+15]
+
+	ret
+	restore
+.type	AES_encrypt,#function
+.size	AES_encrypt,(.-AES_encrypt)
+
+___
+
+$code.=<<___;
+.align	256
+AES_Td:
+___
+&_data_word(
+	0x51f4a750, 0x7e416553, 0x1a17a4c3, 0x3a275e96,
+	0x3bab6bcb, 0x1f9d45f1, 0xacfa58ab, 0x4be30393,
+	0x2030fa55, 0xad766df6, 0x88cc7691, 0xf5024c25,
+	0x4fe5d7fc, 0xc52acbd7, 0x26354480, 0xb562a38f,
+	0xdeb15a49, 0x25ba1b67, 0x45ea0e98, 0x5dfec0e1,
+	0xc32f7502, 0x814cf012, 0x8d4697a3, 0x6bd3f9c6,
+	0x038f5fe7, 0x15929c95, 0xbf6d7aeb, 0x955259da,
+	0xd4be832d, 0x587421d3, 0x49e06929, 0x8ec9c844,
+	0x75c2896a, 0xf48e7978, 0x99583e6b, 0x27b971dd,
+	0xbee14fb6, 0xf088ad17, 0xc920ac66, 0x7dce3ab4,
+	0x63df4a18, 0xe51a3182, 0x97513360, 0x62537f45,
+	0xb16477e0, 0xbb6bae84, 0xfe81a01c, 0xf9082b94,
+	0x70486858, 0x8f45fd19, 0x94de6c87, 0x527bf8b7,
+	0xab73d323, 0x724b02e2, 0xe31f8f57, 0x6655ab2a,
+	0xb2eb2807, 0x2fb5c203, 0x86c57b9a, 0xd33708a5,
+	0x302887f2, 0x23bfa5b2, 0x02036aba, 0xed16825c,
+	0x8acf1c2b, 0xa779b492, 0xf307f2f0, 0x4e69e2a1,
+	0x65daf4cd, 0x0605bed5, 0xd134621f, 0xc4a6fe8a,
+	0x342e539d, 0xa2f355a0, 0x058ae132, 0xa4f6eb75,
+	0x0b83ec39, 0x4060efaa, 0x5e719f06, 0xbd6e1051,
+	0x3e218af9, 0x96dd063d, 0xdd3e05ae, 0x4de6bd46,
+	0x91548db5, 0x71c45d05, 0x0406d46f, 0x605015ff,
+	0x1998fb24, 0xd6bde997, 0x894043cc, 0x67d99e77,
+	0xb0e842bd, 0x07898b88, 0xe7195b38, 0x79c8eedb,
+	0xa17c0a47, 0x7c420fe9, 0xf8841ec9, 0x00000000,
+	0x09808683, 0x322bed48, 0x1e1170ac, 0x6c5a724e,
+	0xfd0efffb, 0x0f853856, 0x3daed51e, 0x362d3927,
+	0x0a0fd964, 0x685ca621, 0x9b5b54d1, 0x24362e3a,
+	0x0c0a67b1, 0x9357e70f, 0xb4ee96d2, 0x1b9b919e,
+	0x80c0c54f, 0x61dc20a2, 0x5a774b69, 0x1c121a16,
+	0xe293ba0a, 0xc0a02ae5, 0x3c22e043, 0x121b171d,
+	0x0e090d0b, 0xf28bc7ad, 0x2db6a8b9, 0x141ea9c8,
+	0x57f11985, 0xaf75074c, 0xee99ddbb, 0xa37f60fd,
+	0xf701269f, 0x5c72f5bc, 0x44663bc5, 0x5bfb7e34,
+	0x8b432976, 0xcb23c6dc, 0xb6edfc68, 0xb8e4f163,
+	0xd731dcca, 0x42638510, 0x13972240, 0x84c61120,
+	0x854a247d, 0xd2bb3df8, 0xaef93211, 0xc729a16d,
+	0x1d9e2f4b, 0xdcb230f3, 0x0d8652ec, 0x77c1e3d0,
+	0x2bb3166c, 0xa970b999, 0x119448fa, 0x47e96422,
+	0xa8fc8cc4, 0xa0f03f1a, 0x567d2cd8, 0x223390ef,
+	0x87494ec7, 0xd938d1c1, 0x8ccaa2fe, 0x98d40b36,
+	0xa6f581cf, 0xa57ade28, 0xdab78e26, 0x3fadbfa4,
+	0x2c3a9de4, 0x5078920d, 0x6a5fcc9b, 0x547e4662,
+	0xf68d13c2, 0x90d8b8e8, 0x2e39f75e, 0x82c3aff5,
+	0x9f5d80be, 0x69d0937c, 0x6fd52da9, 0xcf2512b3,
+	0xc8ac993b, 0x10187da7, 0xe89c636e, 0xdb3bbb7b,
+	0xcd267809, 0x6e5918f4, 0xec9ab701, 0x834f9aa8,
+	0xe6956e65, 0xaaffe67e, 0x21bccf08, 0xef15e8e6,
+	0xbae79bd9, 0x4a6f36ce, 0xea9f09d4, 0x29b07cd6,
+	0x31a4b2af, 0x2a3f2331, 0xc6a59430, 0x35a266c0,
+	0x744ebc37, 0xfc82caa6, 0xe090d0b0, 0x33a7d815,
+	0xf104984a, 0x41ecdaf7, 0x7fcd500e, 0x1791f62f,
+	0x764dd68d, 0x43efb04d, 0xccaa4d54, 0xe49604df,
+	0x9ed1b5e3, 0x4c6a881b, 0xc12c1fb8, 0x4665517f,
+	0x9d5eea04, 0x018c355d, 0xfa877473, 0xfb0b412e,
+	0xb3671d5a, 0x92dbd252, 0xe9105633, 0x6dd64713,
+	0x9ad7618c, 0x37a10c7a, 0x59f8148e, 0xeb133c89,
+	0xcea927ee, 0xb761c935, 0xe11ce5ed, 0x7a47b13c,
+	0x9cd2df59, 0x55f2733f, 0x1814ce79, 0x73c737bf,
+	0x53f7cdea, 0x5ffdaa5b, 0xdf3d6f14, 0x7844db86,
+	0xcaaff381, 0xb968c43e, 0x3824342c, 0xc2a3405f,
+	0x161dc372, 0xbce2250c, 0x283c498b, 0xff0d9541,
+	0x39a80171, 0x080cb3de, 0xd8b4e49c, 0x6456c190,
+	0x7bcb8461, 0xd532b670, 0x486c5c74, 0xd0b85742);
+$code.=<<___;
+	.byte	0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38
+	.byte	0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb
+	.byte	0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87
+	.byte	0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb
+	.byte	0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d
+	.byte	0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e
+	.byte	0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2
+	.byte	0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25
+	.byte	0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16
+	.byte	0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92
+	.byte	0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda
+	.byte	0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84
+	.byte	0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a
+	.byte	0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06
+	.byte	0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02
+	.byte	0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b
+	.byte	0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea
+	.byte	0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73
+	.byte	0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85
+	.byte	0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e
+	.byte	0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89
+	.byte	0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b
+	.byte	0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20
+	.byte	0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4
+	.byte	0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31
+	.byte	0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f
+	.byte	0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d
+	.byte	0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef
+	.byte	0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0
+	.byte	0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61
+	.byte	0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26
+	.byte	0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d
+.type	AES_Td,#object
+.size	AES_Td,(.-AES_Td)
+
+.align	64
+.skip	16
+_sparcv9_AES_decrypt:
+	save	%sp,-$frame-$locals,%sp
+	stx	%i7,[%sp+$bias+$frame+0]	! off-load return address
+	ld	[$key+240],$rounds
+	ld	[$key+0],$t0
+	ld	[$key+4],$t1			!
+	ld	[$key+8],$t2
+	ld	[$key+12],$t3
+	srl	$rounds,1,$rounds
+	xor	$t0,$s0,$s0
+	ld	[$key+16],$t0
+	xor	$t1,$s1,$s1
+	ld	[$key+20],$t1
+	srl	$s0,21,$acc0			!
+	xor	$t2,$s2,$s2
+	ld	[$key+24],$t2
+	xor	$t3,$s3,$s3
+	and	$acc0,2040,$acc0
+	ld	[$key+28],$t3
+	srl	$s3,13,$acc1
+	nop
+.Ldec_loop:
+	srl	$s2,5,$acc2			!
+	and	$acc1,2040,$acc1
+	ldx	[$tbl+$acc0],$acc0
+	sll	$s1,3,$acc3
+	and	$acc2,2040,$acc2
+	ldx	[$tbl+$acc1],$acc1
+	srl	$s1,21,$acc4
+	and	$acc3,2040,$acc3
+	ldx	[$tbl+$acc2],$acc2		!
+	srl	$s0,13,$acc5
+	and	$acc4,2040,$acc4
+	ldx	[$tbl+$acc3],$acc3
+	srl	$s3,5,$acc6
+	and	$acc5,2040,$acc5
+	ldx	[$tbl+$acc4],$acc4
+	fmovs	%f0,%f0
+	sll	$s2,3,$acc7			!
+	and	$acc6,2040,$acc6
+	ldx	[$tbl+$acc5],$acc5
+	srl	$s2,21,$acc8
+	and	$acc7,2040,$acc7
+	ldx	[$tbl+$acc6],$acc6
+	srl	$s1,13,$acc9
+	and	$acc8,2040,$acc8
+	ldx	[$tbl+$acc7],$acc7		!
+	srl	$s0,5,$acc10
+	and	$acc9,2040,$acc9
+	ldx	[$tbl+$acc8],$acc8
+	sll	$s3,3,$acc11
+	and	$acc10,2040,$acc10
+	ldx	[$tbl+$acc9],$acc9
+	fmovs	%f0,%f0
+	srl	$s3,21,$acc12			!
+	and	$acc11,2040,$acc11
+	ldx	[$tbl+$acc10],$acc10
+	srl	$s2,13,$acc13
+	and	$acc12,2040,$acc12
+	ldx	[$tbl+$acc11],$acc11
+	srl	$s1,5,$acc14
+	and	$acc13,2040,$acc13
+	ldx	[$tbl+$acc12],$acc12		!
+	sll	$s0,3,$acc15
+	and	$acc14,2040,$acc14
+	ldx	[$tbl+$acc13],$acc13
+	and	$acc15,2040,$acc15
+	add	$key,32,$key
+	ldx	[$tbl+$acc14],$acc14
+	fmovs	%f0,%f0
+	subcc	$rounds,1,$rounds		!
+	ldx	[$tbl+$acc15],$acc15
+	bz,a,pn	%icc,.Ldec_last
+	add	$tbl,2048,$rounds
+
+		srlx	$acc1,8,$acc1
+		xor	$acc0,$t0,$t0
+	ld	[$key+0],$s0
+	fmovs	%f0,%f0
+		srlx	$acc2,16,$acc2		!
+		xor	$acc1,$t0,$t0
+	ld	[$key+4],$s1
+		srlx	$acc3,24,$acc3
+		xor	$acc2,$t0,$t0
+	ld	[$key+8],$s2
+		srlx	$acc5,8,$acc5
+		xor	$acc3,$t0,$t0
+	ld	[$key+12],$s3			!
+		srlx	$acc6,16,$acc6
+		xor	$acc4,$t1,$t1
+	fmovs	%f0,%f0
+		srlx	$acc7,24,$acc7
+		xor	$acc5,$t1,$t1
+		srlx	$acc9,8,$acc9
+		xor	$acc6,$t1,$t1
+		srlx	$acc10,16,$acc10	!
+		xor	$acc7,$t1,$t1
+		srlx	$acc11,24,$acc11
+		xor	$acc8,$t2,$t2
+		srlx	$acc13,8,$acc13
+		xor	$acc9,$t2,$t2
+		srlx	$acc14,16,$acc14
+		xor	$acc10,$t2,$t2
+		srlx	$acc15,24,$acc15	!
+		xor	$acc11,$t2,$t2
+		xor	$acc12,$acc14,$acc14
+		xor	$acc13,$t3,$t3
+	srl	$t0,21,$acc0
+		xor	$acc14,$t3,$t3
+		xor	$acc15,$t3,$t3
+	srl	$t3,13,$acc1
+
+	and	$acc0,2040,$acc0		!
+	srl	$t2,5,$acc2
+	and	$acc1,2040,$acc1
+	ldx	[$tbl+$acc0],$acc0
+	sll	$t1,3,$acc3
+	and	$acc2,2040,$acc2
+	ldx	[$tbl+$acc1],$acc1
+	fmovs	%f0,%f0
+	srl	$t1,21,$acc4			!
+	and	$acc3,2040,$acc3
+	ldx	[$tbl+$acc2],$acc2
+	srl	$t0,13,$acc5
+	and	$acc4,2040,$acc4
+	ldx	[$tbl+$acc3],$acc3
+	srl	$t3,5,$acc6
+	and	$acc5,2040,$acc5
+	ldx	[$tbl+$acc4],$acc4		!
+	sll	$t2,3,$acc7
+	and	$acc6,2040,$acc6
+	ldx	[$tbl+$acc5],$acc5
+	srl	$t2,21,$acc8
+	and	$acc7,2040,$acc7
+	ldx	[$tbl+$acc6],$acc6
+	fmovs	%f0,%f0
+	srl	$t1,13,$acc9			!
+	and	$acc8,2040,$acc8
+	ldx	[$tbl+$acc7],$acc7
+	srl	$t0,5,$acc10
+	and	$acc9,2040,$acc9
+	ldx	[$tbl+$acc8],$acc8
+	sll	$t3,3,$acc11
+	and	$acc10,2040,$acc10
+	ldx	[$tbl+$acc9],$acc9		!
+	srl	$t3,21,$acc12
+	and	$acc11,2040,$acc11
+	ldx	[$tbl+$acc10],$acc10
+	srl	$t2,13,$acc13
+	and	$acc12,2040,$acc12
+	ldx	[$tbl+$acc11],$acc11
+	fmovs	%f0,%f0
+	srl	$t1,5,$acc14			!
+	and	$acc13,2040,$acc13
+	ldx	[$tbl+$acc12],$acc12
+	sll	$t0,3,$acc15
+	and	$acc14,2040,$acc14
+	ldx	[$tbl+$acc13],$acc13
+		srlx	$acc1,8,$acc1
+	and	$acc15,2040,$acc15
+	ldx	[$tbl+$acc14],$acc14		!
+
+		srlx	$acc2,16,$acc2
+		xor	$acc0,$s0,$s0
+	ldx	[$tbl+$acc15],$acc15
+		srlx	$acc3,24,$acc3
+		xor	$acc1,$s0,$s0
+	ld	[$key+16],$t0
+	fmovs	%f0,%f0
+		srlx	$acc5,8,$acc5		!
+		xor	$acc2,$s0,$s0
+	ld	[$key+20],$t1
+		srlx	$acc6,16,$acc6
+		xor	$acc3,$s0,$s0
+	ld	[$key+24],$t2
+		srlx	$acc7,24,$acc7
+		xor	$acc4,$s1,$s1
+	ld	[$key+28],$t3			!
+		srlx	$acc9,8,$acc9
+		xor	$acc5,$s1,$s1
+	ldx	[$tbl+2048+0],%g0		! prefetch td4
+		srlx	$acc10,16,$acc10
+		xor	$acc6,$s1,$s1
+	ldx	[$tbl+2048+32],%g0		! prefetch td4
+		srlx	$acc11,24,$acc11
+		xor	$acc7,$s1,$s1
+	ldx	[$tbl+2048+64],%g0		! prefetch td4
+		srlx	$acc13,8,$acc13
+		xor	$acc8,$s2,$s2
+	ldx	[$tbl+2048+96],%g0		! prefetch td4
+		srlx	$acc14,16,$acc14	!
+		xor	$acc9,$s2,$s2
+	ldx	[$tbl+2048+128],%g0		! prefetch td4
+		srlx	$acc15,24,$acc15
+		xor	$acc10,$s2,$s2
+	ldx	[$tbl+2048+160],%g0		! prefetch td4
+	srl	$s0,21,$acc0
+		xor	$acc11,$s2,$s2
+	ldx	[$tbl+2048+192],%g0		! prefetch td4
+		xor	$acc12,$acc14,$acc14
+		xor	$acc13,$s3,$s3
+	ldx	[$tbl+2048+224],%g0		! prefetch td4
+	and	$acc0,2040,$acc0		!
+		xor	$acc14,$s3,$s3
+		xor	$acc15,$s3,$s3
+	ba	.Ldec_loop
+	srl	$s3,13,$acc1
+
+.align	32
+.Ldec_last:
+		srlx	$acc1,8,$acc1		!
+		xor	$acc0,$t0,$t0
+	ld	[$key+0],$s0
+		srlx	$acc2,16,$acc2
+		xor	$acc1,$t0,$t0
+	ld	[$key+4],$s1
+		srlx	$acc3,24,$acc3
+		xor	$acc2,$t0,$t0
+	ld	[$key+8],$s2			!
+		srlx	$acc5,8,$acc5
+		xor	$acc3,$t0,$t0
+	ld	[$key+12],$s3
+		srlx	$acc6,16,$acc6
+		xor	$acc4,$t1,$t1
+		srlx	$acc7,24,$acc7
+		xor	$acc5,$t1,$t1
+		srlx	$acc9,8,$acc9		!
+		xor	$acc6,$t1,$t1
+		srlx	$acc10,16,$acc10
+		xor	$acc7,$t1,$t1
+		srlx	$acc11,24,$acc11
+		xor	$acc8,$t2,$t2
+		srlx	$acc13,8,$acc13
+		xor	$acc9,$t2,$t2
+		srlx	$acc14,16,$acc14	!
+		xor	$acc10,$t2,$t2
+		srlx	$acc15,24,$acc15
+		xor	$acc11,$t2,$t2
+		xor	$acc12,$acc14,$acc14
+		xor	$acc13,$t3,$t3
+	srl	$t0,24,$acc0
+		xor	$acc14,$t3,$t3
+		xor	$acc15,$t3,$t3		!
+	srl	$t3,16,$acc1
+
+	srl	$t2,8,$acc2
+	and	$acc1,255,$acc1
+	ldub	[$rounds+$acc0],$acc0
+	srl	$t1,24,$acc4
+	and	$acc2,255,$acc2
+	ldub	[$rounds+$acc1],$acc1
+	srl	$t0,16,$acc5			!
+	and	$t1,255,$acc3
+	ldub	[$rounds+$acc2],$acc2
+	ldub	[$rounds+$acc3],$acc3
+	srl	$t3,8,$acc6
+	and	$acc5,255,$acc5
+	ldub	[$rounds+$acc4],$acc4
+	fmovs	%f0,%f0
+	srl	$t2,24,$acc8			!
+	and	$acc6,255,$acc6
+	ldub	[$rounds+$acc5],$acc5
+	srl	$t1,16,$acc9
+	and	$t2,255,$acc7
+	ldub	[$rounds+$acc6],$acc6
+	ldub	[$rounds+$acc7],$acc7
+	fmovs	%f0,%f0
+	srl	$t0,8,$acc10			!
+	and	$acc9,255,$acc9
+	ldub	[$rounds+$acc8],$acc8
+	srl	$t3,24,$acc12
+	and	$acc10,255,$acc10
+	ldub	[$rounds+$acc9],$acc9
+	srl	$t2,16,$acc13
+	and	$t3,255,$acc11
+	ldub	[$rounds+$acc10],$acc10		!
+	srl	$t1,8,$acc14
+	and	$acc13,255,$acc13
+	ldub	[$rounds+$acc11],$acc11
+	ldub	[$rounds+$acc12],$acc12
+	and	$acc14,255,$acc14
+	ldub	[$rounds+$acc13],$acc13
+	and	$t0,255,$acc15
+	ldub	[$rounds+$acc14],$acc14		!
+
+		sll	$acc0,24,$acc0
+		xor	$acc3,$s0,$s0
+	ldub	[$rounds+$acc15],$acc15
+		sll	$acc1,16,$acc1
+		xor	$acc0,$s0,$s0
+	ldx	[%sp+$bias+$frame+0],%i7	! restore return address
+	fmovs	%f0,%f0
+		sll	$acc2,8,$acc2		!
+		xor	$acc1,$s0,$s0
+		sll	$acc4,24,$acc4
+		xor	$acc2,$s0,$s0
+		sll	$acc5,16,$acc5
+		xor	$acc7,$s1,$s1
+		sll	$acc6,8,$acc6
+		xor	$acc4,$s1,$s1
+		sll	$acc8,24,$acc8		!
+		xor	$acc5,$s1,$s1
+		sll	$acc9,16,$acc9
+		xor	$acc11,$s2,$s2
+		sll	$acc10,8,$acc10
+		xor	$acc6,$s1,$s1
+		sll	$acc12,24,$acc12
+		xor	$acc8,$s2,$s2
+		sll	$acc13,16,$acc13	!
+		xor	$acc9,$s2,$s2
+		sll	$acc14,8,$acc14
+		xor	$acc10,$s2,$s2
+		xor	$acc12,$acc14,$acc14
+		xor	$acc13,$s3,$s3
+		xor	$acc14,$s3,$s3
+		xor	$acc15,$s3,$s3
+
+	ret
+	restore
+.type	_sparcv9_AES_decrypt,#function
+.size	_sparcv9_AES_decrypt,(.-_sparcv9_AES_decrypt)
+
+.align	32
+.globl	AES_decrypt
+AES_decrypt:
+	or	%o0,%o1,%g1
+	andcc	%g1,3,%g0
+	bnz,pn	%xcc,.Lunaligned_dec
+	save	%sp,-$frame,%sp
+
+	ld	[%i0+0],%o0
+	ld	[%i0+4],%o1
+	ld	[%i0+8],%o2
+	ld	[%i0+12],%o3
+
+1:	call	.+8
+	add	%o7,AES_Td-1b,%o4
+	call	_sparcv9_AES_decrypt
+	mov	%i2,%o5
+
+	st	%o0,[%i1+0]
+	st	%o1,[%i1+4]
+	st	%o2,[%i1+8]
+	st	%o3,[%i1+12]
+
+	ret
+	restore
+
+.align	32
+.Lunaligned_dec:
+	ldub	[%i0+0],%l0
+	ldub	[%i0+1],%l1
+	ldub	[%i0+2],%l2
+
+	sll	%l0,24,%l0
+	ldub	[%i0+3],%l3
+	sll	%l1,16,%l1
+	ldub	[%i0+4],%l4
+	sll	%l2,8,%l2
+	or	%l1,%l0,%l0
+	ldub	[%i0+5],%l5
+	sll	%l4,24,%l4
+	or	%l3,%l2,%l2
+	ldub	[%i0+6],%l6
+	sll	%l5,16,%l5
+	or	%l0,%l2,%o0
+	ldub	[%i0+7],%l7
+
+	sll	%l6,8,%l6
+	or	%l5,%l4,%l4
+	ldub	[%i0+8],%l0
+	or	%l7,%l6,%l6
+	ldub	[%i0+9],%l1
+	or	%l4,%l6,%o1
+	ldub	[%i0+10],%l2
+
+	sll	%l0,24,%l0
+	ldub	[%i0+11],%l3
+	sll	%l1,16,%l1
+	ldub	[%i0+12],%l4
+	sll	%l2,8,%l2
+	or	%l1,%l0,%l0
+	ldub	[%i0+13],%l5
+	sll	%l4,24,%l4
+	or	%l3,%l2,%l2
+	ldub	[%i0+14],%l6
+	sll	%l5,16,%l5
+	or	%l0,%l2,%o2
+	ldub	[%i0+15],%l7
+
+	sll	%l6,8,%l6
+	or	%l5,%l4,%l4
+	or	%l7,%l6,%l6
+	or	%l4,%l6,%o3
+
+1:	call	.+8
+	add	%o7,AES_Td-1b,%o4
+	call	_sparcv9_AES_decrypt
+	mov	%i2,%o5
+
+	srl	%o0,24,%l0
+	srl	%o0,16,%l1
+	stb	%l0,[%i1+0]
+	srl	%o0,8,%l2
+	stb	%l1,[%i1+1]
+	stb	%l2,[%i1+2]
+	srl	%o1,24,%l4
+	stb	%o0,[%i1+3]
+
+	srl	%o1,16,%l5
+	stb	%l4,[%i1+4]
+	srl	%o1,8,%l6
+	stb	%l5,[%i1+5]
+	stb	%l6,[%i1+6]
+	srl	%o2,24,%l0
+	stb	%o1,[%i1+7]
+
+	srl	%o2,16,%l1
+	stb	%l0,[%i1+8]
+	srl	%o2,8,%l2
+	stb	%l1,[%i1+9]
+	stb	%l2,[%i1+10]
+	srl	%o3,24,%l4
+	stb	%o2,[%i1+11]
+
+	srl	%o3,16,%l5
+	stb	%l4,[%i1+12]
+	srl	%o3,8,%l6
+	stb	%l5,[%i1+13]
+	stb	%l6,[%i1+14]
+	stb	%o3,[%i1+15]
+
+	ret
+	restore
+.type	AES_decrypt,#function
+.size	AES_decrypt,(.-AES_decrypt)
+___
+
+# fmovs instructions substituting for FP nops were originally added
+# to meet specific instruction alignment requirements to maximize ILP.
+# As UltraSPARC T1, a.k.a. Niagara, has shared FPU, FP nops can have
+# undesired effect, so just omit them and sacrifice some portion of
+# percent in performance...
+$code =~ s/fmovs.*$//gm;
+
+print $code;
+close STDOUT;	# ensure flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-x86_64.pl
new file mode 100755
index 000000000..d87e20114
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aes-x86_64.pl
@@ -0,0 +1,2916 @@
+#! /usr/bin/env perl
+# Copyright 2005-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# Version 2.1.
+#
+# aes-*-cbc benchmarks are improved by >70% [compared to gcc 3.3.2 on
+# Opteron 240 CPU] plus all the bells-n-whistles from 32-bit version
+# [you'll notice a lot of resemblance], such as compressed S-boxes
+# in little-endian byte order, prefetch of these tables in CBC mode,
+# as well as avoiding L1 cache aliasing between stack frame and key
+# schedule and already mentioned tables, compressed Td4...
+#
+# Performance in number of cycles per processed byte for 128-bit key:
+#
+#		ECB encrypt	ECB decrypt	CBC large chunk
+# AMD64		33		43		13.0
+# EM64T		38		56		18.6(*)
+# Core 2	30		42		14.5(*)
+# Atom		65		86		32.1(*)
+#
+# (*) with hyper-threading off
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+$verticalspin=1;	# unlike 32-bit version $verticalspin performs
+			# ~15% better on both AMD and Intel cores
+$speed_limit=512;	# see aes-586.pl for details
+
+$code=".text\n";
+
+$s0="%eax";
+$s1="%ebx";
+$s2="%ecx";
+$s3="%edx";
+$acc0="%esi";	$mask80="%rsi";
+$acc1="%edi";	$maskfe="%rdi";
+$acc2="%ebp";	$mask1b="%rbp";
+$inp="%r8";
+$out="%r9";
+$t0="%r10d";
+$t1="%r11d";
+$t2="%r12d";
+$rnds="%r13d";
+$sbox="%r14";
+$key="%r15";
+
+sub hi() { my $r=shift;	$r =~ s/%[er]([a-d])x/%\1h/;	$r; }
+sub lo() { my $r=shift;	$r =~ s/%[er]([a-d])x/%\1l/;
+			$r =~ s/%[er]([sd]i)/%\1l/;
+			$r =~ s/%(r[0-9]+)[d]?/%\1b/;	$r; }
+sub LO() { my $r=shift; $r =~ s/%r([a-z]+)/%e\1/;
+			$r =~ s/%r([0-9]+)/%r\1d/;	$r; }
+sub _data_word()
+{ my $i;
+    while(defined($i=shift)) { $code.=sprintf".long\t0x%08x,0x%08x\n",$i,$i; }
+}
+sub data_word()
+{ my $i;
+  my $last=pop(@_);
+    $code.=".long\t";
+    while(defined($i=shift)) { $code.=sprintf"0x%08x,",$i; }
+    $code.=sprintf"0x%08x\n",$last;
+}
+
+sub data_byte()
+{ my $i;
+  my $last=pop(@_);
+    $code.=".byte\t";
+    while(defined($i=shift)) { $code.=sprintf"0x%02x,",$i&0xff; }
+    $code.=sprintf"0x%02x\n",$last&0xff;
+}
+
+sub encvert()
+{ my $t3="%r8d";	# zaps $inp!
+
+$code.=<<___;
+	# favor 3-way issue Opteron pipeline...
+	movzb	`&lo("$s0")`,$acc0
+	movzb	`&lo("$s1")`,$acc1
+	movzb	`&lo("$s2")`,$acc2
+	mov	0($sbox,$acc0,8),$t0
+	mov	0($sbox,$acc1,8),$t1
+	mov	0($sbox,$acc2,8),$t2
+
+	movzb	`&hi("$s1")`,$acc0
+	movzb	`&hi("$s2")`,$acc1
+	movzb	`&lo("$s3")`,$acc2
+	xor	3($sbox,$acc0,8),$t0
+	xor	3($sbox,$acc1,8),$t1
+	mov	0($sbox,$acc2,8),$t3
+
+	movzb	`&hi("$s3")`,$acc0
+	shr	\$16,$s2
+	movzb	`&hi("$s0")`,$acc2
+	xor	3($sbox,$acc0,8),$t2
+	shr	\$16,$s3
+	xor	3($sbox,$acc2,8),$t3
+
+	shr	\$16,$s1
+	lea	16($key),$key
+	shr	\$16,$s0
+
+	movzb	`&lo("$s2")`,$acc0
+	movzb	`&lo("$s3")`,$acc1
+	movzb	`&lo("$s0")`,$acc2
+	xor	2($sbox,$acc0,8),$t0
+	xor	2($sbox,$acc1,8),$t1
+	xor	2($sbox,$acc2,8),$t2
+
+	movzb	`&hi("$s3")`,$acc0
+	movzb	`&hi("$s0")`,$acc1
+	movzb	`&lo("$s1")`,$acc2
+	xor	1($sbox,$acc0,8),$t0
+	xor	1($sbox,$acc1,8),$t1
+	xor	2($sbox,$acc2,8),$t3
+
+	mov	12($key),$s3
+	movzb	`&hi("$s1")`,$acc1
+	movzb	`&hi("$s2")`,$acc2
+	mov	0($key),$s0
+	xor	1($sbox,$acc1,8),$t2
+	xor	1($sbox,$acc2,8),$t3
+
+	mov	4($key),$s1
+	mov	8($key),$s2
+	xor	$t0,$s0
+	xor	$t1,$s1
+	xor	$t2,$s2
+	xor	$t3,$s3
+___
+}
+
+sub enclastvert()
+{ my $t3="%r8d";	# zaps $inp!
+
+$code.=<<___;
+	movzb	`&lo("$s0")`,$acc0
+	movzb	`&lo("$s1")`,$acc1
+	movzb	`&lo("$s2")`,$acc2
+	movzb	2($sbox,$acc0,8),$t0
+	movzb	2($sbox,$acc1,8),$t1
+	movzb	2($sbox,$acc2,8),$t2
+
+	movzb	`&lo("$s3")`,$acc0
+	movzb	`&hi("$s1")`,$acc1
+	movzb	`&hi("$s2")`,$acc2
+	movzb	2($sbox,$acc0,8),$t3
+	mov	0($sbox,$acc1,8),$acc1	#$t0
+	mov	0($sbox,$acc2,8),$acc2	#$t1
+
+	and	\$0x0000ff00,$acc1
+	and	\$0x0000ff00,$acc2
+
+	xor	$acc1,$t0
+	xor	$acc2,$t1
+	shr	\$16,$s2
+
+	movzb	`&hi("$s3")`,$acc0
+	movzb	`&hi("$s0")`,$acc1
+	shr	\$16,$s3
+	mov	0($sbox,$acc0,8),$acc0	#$t2
+	mov	0($sbox,$acc1,8),$acc1	#$t3
+
+	and	\$0x0000ff00,$acc0
+	and	\$0x0000ff00,$acc1
+	shr	\$16,$s1
+	xor	$acc0,$t2
+	xor	$acc1,$t3
+	shr	\$16,$s0
+
+	movzb	`&lo("$s2")`,$acc0
+	movzb	`&lo("$s3")`,$acc1
+	movzb	`&lo("$s0")`,$acc2
+	mov	0($sbox,$acc0,8),$acc0	#$t0
+	mov	0($sbox,$acc1,8),$acc1	#$t1
+	mov	0($sbox,$acc2,8),$acc2	#$t2
+
+	and	\$0x00ff0000,$acc0
+	and	\$0x00ff0000,$acc1
+	and	\$0x00ff0000,$acc2
+
+	xor	$acc0,$t0
+	xor	$acc1,$t1
+	xor	$acc2,$t2
+
+	movzb	`&lo("$s1")`,$acc0
+	movzb	`&hi("$s3")`,$acc1
+	movzb	`&hi("$s0")`,$acc2
+	mov	0($sbox,$acc0,8),$acc0	#$t3
+	mov	2($sbox,$acc1,8),$acc1	#$t0
+	mov	2($sbox,$acc2,8),$acc2	#$t1
+
+	and	\$0x00ff0000,$acc0
+	and	\$0xff000000,$acc1
+	and	\$0xff000000,$acc2
+
+	xor	$acc0,$t3
+	xor	$acc1,$t0
+	xor	$acc2,$t1
+
+	movzb	`&hi("$s1")`,$acc0
+	movzb	`&hi("$s2")`,$acc1
+	mov	16+12($key),$s3
+	mov	2($sbox,$acc0,8),$acc0	#$t2
+	mov	2($sbox,$acc1,8),$acc1	#$t3
+	mov	16+0($key),$s0
+
+	and	\$0xff000000,$acc0
+	and	\$0xff000000,$acc1
+
+	xor	$acc0,$t2
+	xor	$acc1,$t3
+
+	mov	16+4($key),$s1
+	mov	16+8($key),$s2
+	xor	$t0,$s0
+	xor	$t1,$s1
+	xor	$t2,$s2
+	xor	$t3,$s3
+___
+}
+
+sub encstep()
+{ my ($i,@s) = @_;
+  my $tmp0=$acc0;
+  my $tmp1=$acc1;
+  my $tmp2=$acc2;
+  my $out=($t0,$t1,$t2,$s[0])[$i];
+
+	if ($i==3) {
+		$tmp0=$s[1];
+		$tmp1=$s[2];
+		$tmp2=$s[3];
+	}
+	$code.="	movzb	".&lo($s[0]).",$out\n";
+	$code.="	mov	$s[2],$tmp1\n"		if ($i!=3);
+	$code.="	lea	16($key),$key\n"	if ($i==0);
+
+	$code.="	movzb	".&hi($s[1]).",$tmp0\n";
+	$code.="	mov	0($sbox,$out,8),$out\n";
+
+	$code.="	shr	\$16,$tmp1\n";
+	$code.="	mov	$s[3],$tmp2\n"		if ($i!=3);
+	$code.="	xor	3($sbox,$tmp0,8),$out\n";
+
+	$code.="	movzb	".&lo($tmp1).",$tmp1\n";
+	$code.="	shr	\$24,$tmp2\n";
+	$code.="	xor	4*$i($key),$out\n";
+
+	$code.="	xor	2($sbox,$tmp1,8),$out\n";
+	$code.="	xor	1($sbox,$tmp2,8),$out\n";
+
+	$code.="	mov	$t0,$s[1]\n"		if ($i==3);
+	$code.="	mov	$t1,$s[2]\n"		if ($i==3);
+	$code.="	mov	$t2,$s[3]\n"		if ($i==3);
+	$code.="\n";
+}
+
+sub enclast()
+{ my ($i,@s)=@_;
+  my $tmp0=$acc0;
+  my $tmp1=$acc1;
+  my $tmp2=$acc2;
+  my $out=($t0,$t1,$t2,$s[0])[$i];
+
+	if ($i==3) {
+		$tmp0=$s[1];
+		$tmp1=$s[2];
+		$tmp2=$s[3];
+	}
+	$code.="	movzb	".&lo($s[0]).",$out\n";
+	$code.="	mov	$s[2],$tmp1\n"		if ($i!=3);
+
+	$code.="	mov	2($sbox,$out,8),$out\n";
+	$code.="	shr	\$16,$tmp1\n";
+	$code.="	mov	$s[3],$tmp2\n"		if ($i!=3);
+
+	$code.="	and	\$0x000000ff,$out\n";
+	$code.="	movzb	".&hi($s[1]).",$tmp0\n";
+	$code.="	movzb	".&lo($tmp1).",$tmp1\n";
+	$code.="	shr	\$24,$tmp2\n";
+
+	$code.="	mov	0($sbox,$tmp0,8),$tmp0\n";
+	$code.="	mov	0($sbox,$tmp1,8),$tmp1\n";
+	$code.="	mov	2($sbox,$tmp2,8),$tmp2\n";
+
+	$code.="	and	\$0x0000ff00,$tmp0\n";
+	$code.="	and	\$0x00ff0000,$tmp1\n";
+	$code.="	and	\$0xff000000,$tmp2\n";
+
+	$code.="	xor	$tmp0,$out\n";
+	$code.="	mov	$t0,$s[1]\n"		if ($i==3);
+	$code.="	xor	$tmp1,$out\n";
+	$code.="	mov	$t1,$s[2]\n"		if ($i==3);
+	$code.="	xor	$tmp2,$out\n";
+	$code.="	mov	$t2,$s[3]\n"		if ($i==3);
+	$code.="\n";
+}
+
+$code.=<<___;
+.type	_x86_64_AES_encrypt,\@abi-omnipotent
+.align	16
+_x86_64_AES_encrypt:
+	xor	0($key),$s0			# xor with key
+	xor	4($key),$s1
+	xor	8($key),$s2
+	xor	12($key),$s3
+
+	mov	240($key),$rnds			# load key->rounds
+	sub	\$1,$rnds
+	jmp	.Lenc_loop
+.align	16
+.Lenc_loop:
+___
+	if ($verticalspin) { &encvert(); }
+	else {	&encstep(0,$s0,$s1,$s2,$s3);
+		&encstep(1,$s1,$s2,$s3,$s0);
+		&encstep(2,$s2,$s3,$s0,$s1);
+		&encstep(3,$s3,$s0,$s1,$s2);
+	}
+$code.=<<___;
+	sub	\$1,$rnds
+	jnz	.Lenc_loop
+___
+	if ($verticalspin) { &enclastvert(); }
+	else {	&enclast(0,$s0,$s1,$s2,$s3);
+		&enclast(1,$s1,$s2,$s3,$s0);
+		&enclast(2,$s2,$s3,$s0,$s1);
+		&enclast(3,$s3,$s0,$s1,$s2);
+		$code.=<<___;
+		xor	16+0($key),$s0		# xor with key
+		xor	16+4($key),$s1
+		xor	16+8($key),$s2
+		xor	16+12($key),$s3
+___
+	}
+$code.=<<___;
+	.byte	0xf3,0xc3			# rep ret
+.size	_x86_64_AES_encrypt,.-_x86_64_AES_encrypt
+___
+
+# it's possible to implement this by shifting tN by 8, filling least
+# significant byte with byte load and finally bswap-ing at the end,
+# but such partial register load kills Core 2...
+sub enccompactvert()
+{ my ($t3,$t4,$t5)=("%r8d","%r9d","%r13d");
+
+$code.=<<___;
+	movzb	`&lo("$s0")`,$t0
+	movzb	`&lo("$s1")`,$t1
+	movzb	`&lo("$s2")`,$t2
+	movzb	`&lo("$s3")`,$t3
+	movzb	`&hi("$s1")`,$acc0
+	movzb	`&hi("$s2")`,$acc1
+	shr	\$16,$s2
+	movzb	`&hi("$s3")`,$acc2
+	movzb	($sbox,$t0,1),$t0
+	movzb	($sbox,$t1,1),$t1
+	movzb	($sbox,$t2,1),$t2
+	movzb	($sbox,$t3,1),$t3
+
+	movzb	($sbox,$acc0,1),$t4	#$t0
+	movzb	`&hi("$s0")`,$acc0
+	movzb	($sbox,$acc1,1),$t5	#$t1
+	movzb	`&lo("$s2")`,$acc1
+	movzb	($sbox,$acc2,1),$acc2	#$t2
+	movzb	($sbox,$acc0,1),$acc0	#$t3
+
+	shl	\$8,$t4
+	shr	\$16,$s3
+	shl	\$8,$t5
+	xor	$t4,$t0
+	shr	\$16,$s0
+	movzb	`&lo("$s3")`,$t4
+	shr	\$16,$s1
+	xor	$t5,$t1
+	shl	\$8,$acc2
+	movzb	`&lo("$s0")`,$t5
+	movzb	($sbox,$acc1,1),$acc1	#$t0
+	xor	$acc2,$t2
+
+	shl	\$8,$acc0
+	movzb	`&lo("$s1")`,$acc2
+	shl	\$16,$acc1
+	xor	$acc0,$t3
+	movzb	($sbox,$t4,1),$t4	#$t1
+	movzb	`&hi("$s3")`,$acc0
+	movzb	($sbox,$t5,1),$t5	#$t2
+	xor	$acc1,$t0
+
+	shr	\$8,$s2
+	movzb	`&hi("$s0")`,$acc1
+	shl	\$16,$t4
+	shr	\$8,$s1
+	shl	\$16,$t5
+	xor	$t4,$t1
+	movzb	($sbox,$acc2,1),$acc2	#$t3
+	movzb	($sbox,$acc0,1),$acc0	#$t0
+	movzb	($sbox,$acc1,1),$acc1	#$t1
+	movzb	($sbox,$s2,1),$s3	#$t3
+	movzb	($sbox,$s1,1),$s2	#$t2
+
+	shl	\$16,$acc2
+	xor	$t5,$t2
+	shl	\$24,$acc0
+	xor	$acc2,$t3
+	shl	\$24,$acc1
+	xor	$acc0,$t0
+	shl	\$24,$s3
+	xor	$acc1,$t1
+	shl	\$24,$s2
+	mov	$t0,$s0
+	mov	$t1,$s1
+	xor	$t2,$s2
+	xor	$t3,$s3
+___
+}
+
+sub enctransform_ref()
+{ my $sn = shift;
+  my ($acc,$r2,$tmp)=("%r8d","%r9d","%r13d");
+
+$code.=<<___;
+	mov	$sn,$acc
+	and	\$0x80808080,$acc
+	mov	$acc,$tmp
+	shr	\$7,$tmp
+	lea	($sn,$sn),$r2
+	sub	$tmp,$acc
+	and	\$0xfefefefe,$r2
+	and	\$0x1b1b1b1b,$acc
+	mov	$sn,$tmp
+	xor	$acc,$r2
+
+	xor	$r2,$sn
+	rol	\$24,$sn
+	xor	$r2,$sn
+	ror	\$16,$tmp
+	xor	$tmp,$sn
+	ror	\$8,$tmp
+	xor	$tmp,$sn
+___
+}
+
+# unlike decrypt case it does not pay off to parallelize enctransform
+sub enctransform()
+{ my ($t3,$r20,$r21)=($acc2,"%r8d","%r9d");
+
+$code.=<<___;
+	mov	\$0x80808080,$t0
+	mov	\$0x80808080,$t1
+	and	$s0,$t0
+	and	$s1,$t1
+	mov	$t0,$acc0
+	mov	$t1,$acc1
+	shr	\$7,$t0
+	lea	($s0,$s0),$r20
+	shr	\$7,$t1
+	lea	($s1,$s1),$r21
+	sub	$t0,$acc0
+	sub	$t1,$acc1
+	and	\$0xfefefefe,$r20
+	and	\$0xfefefefe,$r21
+	and	\$0x1b1b1b1b,$acc0
+	and	\$0x1b1b1b1b,$acc1
+	mov	$s0,$t0
+	mov	$s1,$t1
+	xor	$acc0,$r20
+	xor	$acc1,$r21
+
+	xor	$r20,$s0
+	xor	$r21,$s1
+	 mov	\$0x80808080,$t2
+	rol	\$24,$s0
+	 mov	\$0x80808080,$t3
+	rol	\$24,$s1
+	 and	$s2,$t2
+	 and	$s3,$t3
+	xor	$r20,$s0
+	xor	$r21,$s1
+	 mov	$t2,$acc0
+	ror	\$16,$t0
+	 mov	$t3,$acc1
+	ror	\$16,$t1
+	 lea	($s2,$s2),$r20
+	 shr	\$7,$t2
+	xor	$t0,$s0
+	 shr	\$7,$t3
+	xor	$t1,$s1
+	ror	\$8,$t0
+	 lea	($s3,$s3),$r21
+	ror	\$8,$t1
+	 sub	$t2,$acc0
+	 sub	$t3,$acc1
+	xor	$t0,$s0
+	xor	$t1,$s1
+
+	and	\$0xfefefefe,$r20
+	and	\$0xfefefefe,$r21
+	and	\$0x1b1b1b1b,$acc0
+	and	\$0x1b1b1b1b,$acc1
+	mov	$s2,$t2
+	mov	$s3,$t3
+	xor	$acc0,$r20
+	xor	$acc1,$r21
+
+	ror	\$16,$t2
+	xor	$r20,$s2
+	ror	\$16,$t3
+	xor	$r21,$s3
+	rol	\$24,$s2
+	mov	0($sbox),$acc0			# prefetch Te4
+	rol	\$24,$s3
+	xor	$r20,$s2
+	mov	64($sbox),$acc1
+	xor	$r21,$s3
+	mov	128($sbox),$r20
+	xor	$t2,$s2
+	ror	\$8,$t2
+	xor	$t3,$s3
+	ror	\$8,$t3
+	xor	$t2,$s2
+	mov	192($sbox),$r21
+	xor	$t3,$s3
+___
+}
+
+$code.=<<___;
+.type	_x86_64_AES_encrypt_compact,\@abi-omnipotent
+.align	16
+_x86_64_AES_encrypt_compact:
+.cfi_startproc
+	lea	128($sbox),$inp			# size optimization
+	mov	0-128($inp),$acc1		# prefetch Te4
+	mov	32-128($inp),$acc2
+	mov	64-128($inp),$t0
+	mov	96-128($inp),$t1
+	mov	128-128($inp),$acc1
+	mov	160-128($inp),$acc2
+	mov	192-128($inp),$t0
+	mov	224-128($inp),$t1
+	jmp	.Lenc_loop_compact
+.align	16
+.Lenc_loop_compact:
+		xor	0($key),$s0		# xor with key
+		xor	4($key),$s1
+		xor	8($key),$s2
+		xor	12($key),$s3
+		lea	16($key),$key
+___
+		&enccompactvert();
+$code.=<<___;
+		cmp	16(%rsp),$key
+		je	.Lenc_compact_done
+___
+		&enctransform();
+$code.=<<___;
+	jmp	.Lenc_loop_compact
+.align	16
+.Lenc_compact_done:
+	xor	0($key),$s0
+	xor	4($key),$s1
+	xor	8($key),$s2
+	xor	12($key),$s3
+	.byte	0xf3,0xc3			# rep ret
+.cfi_endproc
+.size	_x86_64_AES_encrypt_compact,.-_x86_64_AES_encrypt_compact
+___
+
+# void AES_encrypt (const void *inp,void *out,const AES_KEY *key);
+$code.=<<___;
+.globl	AES_encrypt
+.type	AES_encrypt,\@function,3
+.align	16
+.globl	asm_AES_encrypt
+.hidden	asm_AES_encrypt
+asm_AES_encrypt:
+AES_encrypt:
+.cfi_startproc
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+
+	# allocate frame "above" key schedule
+	lea	-63(%rdx),%rcx	# %rdx is key argument
+	and	\$-64,%rsp
+	sub	%rsp,%rcx
+	neg	%rcx
+	and	\$0x3c0,%rcx
+	sub	%rcx,%rsp
+	sub	\$32,%rsp
+
+	mov	%rsi,16(%rsp)	# save out
+	mov	%rax,24(%rsp)	# save original stack pointer
+.cfi_cfa_expression	%rsp+24,deref,+8
+.Lenc_prologue:
+
+	mov	%rdx,$key
+	mov	240($key),$rnds	# load rounds
+
+	mov	0(%rdi),$s0	# load input vector
+	mov	4(%rdi),$s1
+	mov	8(%rdi),$s2
+	mov	12(%rdi),$s3
+
+	shl	\$4,$rnds
+	lea	($key,$rnds),%rbp
+	mov	$key,(%rsp)	# key schedule
+	mov	%rbp,8(%rsp)	# end of key schedule
+
+	# pick Te4 copy which can't "overlap" with stack frame or key schedule
+	lea	.LAES_Te+2048(%rip),$sbox
+	lea	768(%rsp),%rbp
+	sub	$sbox,%rbp
+	and	\$0x300,%rbp
+	lea	($sbox,%rbp),$sbox
+
+	call	_x86_64_AES_encrypt_compact
+
+	mov	16(%rsp),$out	# restore out
+	mov	24(%rsp),%rsi	# restore saved stack pointer
+.cfi_def_cfa	%rsi,8
+	mov	$s0,0($out)	# write output vector
+	mov	$s1,4($out)
+	mov	$s2,8($out)
+	mov	$s3,12($out)
+
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lenc_epilogue:
+	ret
+.cfi_endproc
+.size	AES_encrypt,.-AES_encrypt
+___
+
+#------------------------------------------------------------------#
+
+sub decvert()
+{ my $t3="%r8d";	# zaps $inp!
+
+$code.=<<___;
+	# favor 3-way issue Opteron pipeline...
+	movzb	`&lo("$s0")`,$acc0
+	movzb	`&lo("$s1")`,$acc1
+	movzb	`&lo("$s2")`,$acc2
+	mov	0($sbox,$acc0,8),$t0
+	mov	0($sbox,$acc1,8),$t1
+	mov	0($sbox,$acc2,8),$t2
+
+	movzb	`&hi("$s3")`,$acc0
+	movzb	`&hi("$s0")`,$acc1
+	movzb	`&lo("$s3")`,$acc2
+	xor	3($sbox,$acc0,8),$t0
+	xor	3($sbox,$acc1,8),$t1
+	mov	0($sbox,$acc2,8),$t3
+
+	movzb	`&hi("$s1")`,$acc0
+	shr	\$16,$s0
+	movzb	`&hi("$s2")`,$acc2
+	xor	3($sbox,$acc0,8),$t2
+	shr	\$16,$s3
+	xor	3($sbox,$acc2,8),$t3
+
+	shr	\$16,$s1
+	lea	16($key),$key
+	shr	\$16,$s2
+
+	movzb	`&lo("$s2")`,$acc0
+	movzb	`&lo("$s3")`,$acc1
+	movzb	`&lo("$s0")`,$acc2
+	xor	2($sbox,$acc0,8),$t0
+	xor	2($sbox,$acc1,8),$t1
+	xor	2($sbox,$acc2,8),$t2
+
+	movzb	`&hi("$s1")`,$acc0
+	movzb	`&hi("$s2")`,$acc1
+	movzb	`&lo("$s1")`,$acc2
+	xor	1($sbox,$acc0,8),$t0
+	xor	1($sbox,$acc1,8),$t1
+	xor	2($sbox,$acc2,8),$t3
+
+	movzb	`&hi("$s3")`,$acc0
+	mov	12($key),$s3
+	movzb	`&hi("$s0")`,$acc2
+	xor	1($sbox,$acc0,8),$t2
+	mov	0($key),$s0
+	xor	1($sbox,$acc2,8),$t3
+
+	xor	$t0,$s0
+	mov	4($key),$s1
+	mov	8($key),$s2
+	xor	$t2,$s2
+	xor	$t1,$s1
+	xor	$t3,$s3
+___
+}
+
+sub declastvert()
+{ my $t3="%r8d";	# zaps $inp!
+
+$code.=<<___;
+	lea	2048($sbox),$sbox	# size optimization
+	movzb	`&lo("$s0")`,$acc0
+	movzb	`&lo("$s1")`,$acc1
+	movzb	`&lo("$s2")`,$acc2
+	movzb	($sbox,$acc0,1),$t0
+	movzb	($sbox,$acc1,1),$t1
+	movzb	($sbox,$acc2,1),$t2
+
+	movzb	`&lo("$s3")`,$acc0
+	movzb	`&hi("$s3")`,$acc1
+	movzb	`&hi("$s0")`,$acc2
+	movzb	($sbox,$acc0,1),$t3
+	movzb	($sbox,$acc1,1),$acc1	#$t0
+	movzb	($sbox,$acc2,1),$acc2	#$t1
+
+	shl	\$8,$acc1
+	shl	\$8,$acc2
+
+	xor	$acc1,$t0
+	xor	$acc2,$t1
+	shr	\$16,$s3
+
+	movzb	`&hi("$s1")`,$acc0
+	movzb	`&hi("$s2")`,$acc1
+	shr	\$16,$s0
+	movzb	($sbox,$acc0,1),$acc0	#$t2
+	movzb	($sbox,$acc1,1),$acc1	#$t3
+
+	shl	\$8,$acc0
+	shl	\$8,$acc1
+	shr	\$16,$s1
+	xor	$acc0,$t2
+	xor	$acc1,$t3
+	shr	\$16,$s2
+
+	movzb	`&lo("$s2")`,$acc0
+	movzb	`&lo("$s3")`,$acc1
+	movzb	`&lo("$s0")`,$acc2
+	movzb	($sbox,$acc0,1),$acc0	#$t0
+	movzb	($sbox,$acc1,1),$acc1	#$t1
+	movzb	($sbox,$acc2,1),$acc2	#$t2
+
+	shl	\$16,$acc0
+	shl	\$16,$acc1
+	shl	\$16,$acc2
+
+	xor	$acc0,$t0
+	xor	$acc1,$t1
+	xor	$acc2,$t2
+
+	movzb	`&lo("$s1")`,$acc0
+	movzb	`&hi("$s1")`,$acc1
+	movzb	`&hi("$s2")`,$acc2
+	movzb	($sbox,$acc0,1),$acc0	#$t3
+	movzb	($sbox,$acc1,1),$acc1	#$t0
+	movzb	($sbox,$acc2,1),$acc2	#$t1
+
+	shl	\$16,$acc0
+	shl	\$24,$acc1
+	shl	\$24,$acc2
+
+	xor	$acc0,$t3
+	xor	$acc1,$t0
+	xor	$acc2,$t1
+
+	movzb	`&hi("$s3")`,$acc0
+	movzb	`&hi("$s0")`,$acc1
+	mov	16+12($key),$s3
+	movzb	($sbox,$acc0,1),$acc0	#$t2
+	movzb	($sbox,$acc1,1),$acc1	#$t3
+	mov	16+0($key),$s0
+
+	shl	\$24,$acc0
+	shl	\$24,$acc1
+
+	xor	$acc0,$t2
+	xor	$acc1,$t3
+
+	mov	16+4($key),$s1
+	mov	16+8($key),$s2
+	lea	-2048($sbox),$sbox
+	xor	$t0,$s0
+	xor	$t1,$s1
+	xor	$t2,$s2
+	xor	$t3,$s3
+___
+}
+
+sub decstep()
+{ my ($i,@s) = @_;
+  my $tmp0=$acc0;
+  my $tmp1=$acc1;
+  my $tmp2=$acc2;
+  my $out=($t0,$t1,$t2,$s[0])[$i];
+
+	$code.="	mov	$s[0],$out\n"		if ($i!=3);
+			$tmp1=$s[2]			if ($i==3);
+	$code.="	mov	$s[2],$tmp1\n"		if ($i!=3);
+	$code.="	and	\$0xFF,$out\n";
+
+	$code.="	mov	0($sbox,$out,8),$out\n";
+	$code.="	shr	\$16,$tmp1\n";
+			$tmp2=$s[3]			if ($i==3);
+	$code.="	mov	$s[3],$tmp2\n"		if ($i!=3);
+
+			$tmp0=$s[1]			if ($i==3);
+	$code.="	movzb	".&hi($s[1]).",$tmp0\n";
+	$code.="	and	\$0xFF,$tmp1\n";
+	$code.="	shr	\$24,$tmp2\n";
+
+	$code.="	xor	3($sbox,$tmp0,8),$out\n";
+	$code.="	xor	2($sbox,$tmp1,8),$out\n";
+	$code.="	xor	1($sbox,$tmp2,8),$out\n";
+
+	$code.="	mov	$t2,$s[1]\n"		if ($i==3);
+	$code.="	mov	$t1,$s[2]\n"		if ($i==3);
+	$code.="	mov	$t0,$s[3]\n"		if ($i==3);
+	$code.="\n";
+}
+
+sub declast()
+{ my ($i,@s)=@_;
+  my $tmp0=$acc0;
+  my $tmp1=$acc1;
+  my $tmp2=$acc2;
+  my $out=($t0,$t1,$t2,$s[0])[$i];
+
+	$code.="	mov	$s[0],$out\n"		if ($i!=3);
+			$tmp1=$s[2]			if ($i==3);
+	$code.="	mov	$s[2],$tmp1\n"		if ($i!=3);
+	$code.="	and	\$0xFF,$out\n";
+
+	$code.="	movzb	2048($sbox,$out,1),$out\n";
+	$code.="	shr	\$16,$tmp1\n";
+			$tmp2=$s[3]			if ($i==3);
+	$code.="	mov	$s[3],$tmp2\n"		if ($i!=3);
+
+			$tmp0=$s[1]			if ($i==3);
+	$code.="	movzb	".&hi($s[1]).",$tmp0\n";
+	$code.="	and	\$0xFF,$tmp1\n";
+	$code.="	shr	\$24,$tmp2\n";
+
+	$code.="	movzb	2048($sbox,$tmp0,1),$tmp0\n";
+	$code.="	movzb	2048($sbox,$tmp1,1),$tmp1\n";
+	$code.="	movzb	2048($sbox,$tmp2,1),$tmp2\n";
+
+	$code.="	shl	\$8,$tmp0\n";
+	$code.="	shl	\$16,$tmp1\n";
+	$code.="	shl	\$24,$tmp2\n";
+
+	$code.="	xor	$tmp0,$out\n";
+	$code.="	mov	$t2,$s[1]\n"		if ($i==3);
+	$code.="	xor	$tmp1,$out\n";
+	$code.="	mov	$t1,$s[2]\n"		if ($i==3);
+	$code.="	xor	$tmp2,$out\n";
+	$code.="	mov	$t0,$s[3]\n"		if ($i==3);
+	$code.="\n";
+}
+
+$code.=<<___;
+.type	_x86_64_AES_decrypt,\@abi-omnipotent
+.align	16
+_x86_64_AES_decrypt:
+	xor	0($key),$s0			# xor with key
+	xor	4($key),$s1
+	xor	8($key),$s2
+	xor	12($key),$s3
+
+	mov	240($key),$rnds			# load key->rounds
+	sub	\$1,$rnds
+	jmp	.Ldec_loop
+.align	16
+.Ldec_loop:
+___
+	if ($verticalspin) { &decvert(); }
+	else {	&decstep(0,$s0,$s3,$s2,$s1);
+		&decstep(1,$s1,$s0,$s3,$s2);
+		&decstep(2,$s2,$s1,$s0,$s3);
+		&decstep(3,$s3,$s2,$s1,$s0);
+		$code.=<<___;
+		lea	16($key),$key
+		xor	0($key),$s0			# xor with key
+		xor	4($key),$s1
+		xor	8($key),$s2
+		xor	12($key),$s3
+___
+	}
+$code.=<<___;
+	sub	\$1,$rnds
+	jnz	.Ldec_loop
+___
+	if ($verticalspin) { &declastvert(); }
+	else {	&declast(0,$s0,$s3,$s2,$s1);
+		&declast(1,$s1,$s0,$s3,$s2);
+		&declast(2,$s2,$s1,$s0,$s3);
+		&declast(3,$s3,$s2,$s1,$s0);
+		$code.=<<___;
+		xor	16+0($key),$s0			# xor with key
+		xor	16+4($key),$s1
+		xor	16+8($key),$s2
+		xor	16+12($key),$s3
+___
+	}
+$code.=<<___;
+	.byte	0xf3,0xc3			# rep ret
+.size	_x86_64_AES_decrypt,.-_x86_64_AES_decrypt
+___
+
+sub deccompactvert()
+{ my ($t3,$t4,$t5)=("%r8d","%r9d","%r13d");
+
+$code.=<<___;
+	movzb	`&lo("$s0")`,$t0
+	movzb	`&lo("$s1")`,$t1
+	movzb	`&lo("$s2")`,$t2
+	movzb	`&lo("$s3")`,$t3
+	movzb	`&hi("$s3")`,$acc0
+	movzb	`&hi("$s0")`,$acc1
+	shr	\$16,$s3
+	movzb	`&hi("$s1")`,$acc2
+	movzb	($sbox,$t0,1),$t0
+	movzb	($sbox,$t1,1),$t1
+	movzb	($sbox,$t2,1),$t2
+	movzb	($sbox,$t3,1),$t3
+
+	movzb	($sbox,$acc0,1),$t4	#$t0
+	movzb	`&hi("$s2")`,$acc0
+	movzb	($sbox,$acc1,1),$t5	#$t1
+	movzb	($sbox,$acc2,1),$acc2	#$t2
+	movzb	($sbox,$acc0,1),$acc0	#$t3
+
+	shr	\$16,$s2
+	shl	\$8,$t5
+	shl	\$8,$t4
+	movzb	`&lo("$s2")`,$acc1
+	shr	\$16,$s0
+	xor	$t4,$t0
+	shr	\$16,$s1
+	movzb	`&lo("$s3")`,$t4
+
+	shl	\$8,$acc2
+	xor	$t5,$t1
+	shl	\$8,$acc0
+	movzb	`&lo("$s0")`,$t5
+	movzb	($sbox,$acc1,1),$acc1	#$t0
+	xor	$acc2,$t2
+	movzb	`&lo("$s1")`,$acc2
+
+	shl	\$16,$acc1
+	xor	$acc0,$t3
+	movzb	($sbox,$t4,1),$t4	#$t1
+	movzb	`&hi("$s1")`,$acc0
+	movzb	($sbox,$acc2,1),$acc2	#$t3
+	xor	$acc1,$t0
+	movzb	($sbox,$t5,1),$t5	#$t2
+	movzb	`&hi("$s2")`,$acc1
+
+	shl	\$16,$acc2
+	shl	\$16,$t4
+	shl	\$16,$t5
+	xor	$acc2,$t3
+	movzb	`&hi("$s3")`,$acc2
+	xor	$t4,$t1
+	shr	\$8,$s0
+	xor	$t5,$t2
+
+	movzb	($sbox,$acc0,1),$acc0	#$t0
+	movzb	($sbox,$acc1,1),$s1	#$t1
+	movzb	($sbox,$acc2,1),$s2	#$t2
+	movzb	($sbox,$s0,1),$s3	#$t3
+
+	mov	$t0,$s0
+	shl	\$24,$acc0
+	shl	\$24,$s1
+	shl	\$24,$s2
+	xor	$acc0,$s0
+	shl	\$24,$s3
+	xor	$t1,$s1
+	xor	$t2,$s2
+	xor	$t3,$s3
+___
+}
+
+# parallelized version! input is pair of 64-bit values: %rax=s1.s0
+# and %rcx=s3.s2, output is four 32-bit values in %eax=s0, %ebx=s1,
+# %ecx=s2 and %edx=s3.
+sub dectransform()
+{ my ($tp10,$tp20,$tp40,$tp80,$acc0)=("%rax","%r8", "%r9", "%r10","%rbx");
+  my ($tp18,$tp28,$tp48,$tp88,$acc8)=("%rcx","%r11","%r12","%r13","%rdx");
+  my $prefetch = shift;
+
+$code.=<<___;
+	mov	$mask80,$tp40
+	mov	$mask80,$tp48
+	and	$tp10,$tp40
+	and	$tp18,$tp48
+	mov	$tp40,$acc0
+	mov	$tp48,$acc8
+	shr	\$7,$tp40
+	lea	($tp10,$tp10),$tp20
+	shr	\$7,$tp48
+	lea	($tp18,$tp18),$tp28
+	sub	$tp40,$acc0
+	sub	$tp48,$acc8
+	and	$maskfe,$tp20
+	and	$maskfe,$tp28
+	and	$mask1b,$acc0
+	and	$mask1b,$acc8
+	xor	$acc0,$tp20
+	xor	$acc8,$tp28
+	mov	$mask80,$tp80
+	mov	$mask80,$tp88
+
+	and	$tp20,$tp80
+	and	$tp28,$tp88
+	mov	$tp80,$acc0
+	mov	$tp88,$acc8
+	shr	\$7,$tp80
+	lea	($tp20,$tp20),$tp40
+	shr	\$7,$tp88
+	lea	($tp28,$tp28),$tp48
+	sub	$tp80,$acc0
+	sub	$tp88,$acc8
+	and	$maskfe,$tp40
+	and	$maskfe,$tp48
+	and	$mask1b,$acc0
+	and	$mask1b,$acc8
+	xor	$acc0,$tp40
+	xor	$acc8,$tp48
+	mov	$mask80,$tp80
+	mov	$mask80,$tp88
+
+	and	$tp40,$tp80
+	and	$tp48,$tp88
+	mov	$tp80,$acc0
+	mov	$tp88,$acc8
+	shr	\$7,$tp80
+	 xor	$tp10,$tp20		# tp2^=tp1
+	shr	\$7,$tp88
+	 xor	$tp18,$tp28		# tp2^=tp1
+	sub	$tp80,$acc0
+	sub	$tp88,$acc8
+	lea	($tp40,$tp40),$tp80
+	lea	($tp48,$tp48),$tp88
+	 xor	$tp10,$tp40		# tp4^=tp1
+	 xor	$tp18,$tp48		# tp4^=tp1
+	and	$maskfe,$tp80
+	and	$maskfe,$tp88
+	and	$mask1b,$acc0
+	and	$mask1b,$acc8
+	xor	$acc0,$tp80
+	xor	$acc8,$tp88
+
+	xor	$tp80,$tp10		# tp1^=tp8
+	xor	$tp88,$tp18		# tp1^=tp8
+	xor	$tp80,$tp20		# tp2^tp1^=tp8
+	xor	$tp88,$tp28		# tp2^tp1^=tp8
+	mov	$tp10,$acc0
+	mov	$tp18,$acc8
+	xor	$tp80,$tp40		# tp4^tp1^=tp8
+	shr	\$32,$acc0
+	xor	$tp88,$tp48		# tp4^tp1^=tp8
+	shr	\$32,$acc8
+	xor	$tp20,$tp80		# tp8^=tp8^tp2^tp1=tp2^tp1
+	rol	\$8,`&LO("$tp10")`	# ROTATE(tp1^tp8,8)
+	xor	$tp28,$tp88		# tp8^=tp8^tp2^tp1=tp2^tp1
+	rol	\$8,`&LO("$tp18")`	# ROTATE(tp1^tp8,8)
+	xor	$tp40,$tp80		# tp2^tp1^=tp8^tp4^tp1=tp8^tp4^tp2
+	rol	\$8,`&LO("$acc0")`	# ROTATE(tp1^tp8,8)
+	xor	$tp48,$tp88		# tp2^tp1^=tp8^tp4^tp1=tp8^tp4^tp2
+
+	rol	\$8,`&LO("$acc8")`	# ROTATE(tp1^tp8,8)
+	xor	`&LO("$tp80")`,`&LO("$tp10")`
+	shr	\$32,$tp80
+	xor	`&LO("$tp88")`,`&LO("$tp18")`
+	shr	\$32,$tp88
+	xor	`&LO("$tp80")`,`&LO("$acc0")`
+	xor	`&LO("$tp88")`,`&LO("$acc8")`
+
+	mov	$tp20,$tp80
+	rol	\$24,`&LO("$tp20")`	# ROTATE(tp2^tp1^tp8,24)
+	mov	$tp28,$tp88
+	rol	\$24,`&LO("$tp28")`	# ROTATE(tp2^tp1^tp8,24)
+	shr	\$32,$tp80
+	xor	`&LO("$tp20")`,`&LO("$tp10")`
+	shr	\$32,$tp88
+	xor	`&LO("$tp28")`,`&LO("$tp18")`
+	rol	\$24,`&LO("$tp80")`	# ROTATE(tp2^tp1^tp8,24)
+	mov	$tp40,$tp20
+	rol	\$24,`&LO("$tp88")`	# ROTATE(tp2^tp1^tp8,24)
+	mov	$tp48,$tp28
+	shr	\$32,$tp20
+	xor	`&LO("$tp80")`,`&LO("$acc0")`
+	shr	\$32,$tp28
+	xor	`&LO("$tp88")`,`&LO("$acc8")`
+
+	`"mov	0($sbox),$mask80"	if ($prefetch)`
+	rol	\$16,`&LO("$tp40")`	# ROTATE(tp4^tp1^tp8,16)
+	`"mov	64($sbox),$maskfe"	if ($prefetch)`
+	rol	\$16,`&LO("$tp48")`	# ROTATE(tp4^tp1^tp8,16)
+	`"mov	128($sbox),$mask1b"	if ($prefetch)`
+	rol	\$16,`&LO("$tp20")`	# ROTATE(tp4^tp1^tp8,16)
+	`"mov	192($sbox),$tp80"	if ($prefetch)`
+	xor	`&LO("$tp40")`,`&LO("$tp10")`
+	rol	\$16,`&LO("$tp28")`	# ROTATE(tp4^tp1^tp8,16)
+	xor	`&LO("$tp48")`,`&LO("$tp18")`
+	`"mov	256($sbox),$tp88"	if ($prefetch)`
+	xor	`&LO("$tp20")`,`&LO("$acc0")`
+	xor	`&LO("$tp28")`,`&LO("$acc8")`
+___
+}
+
+$code.=<<___;
+.type	_x86_64_AES_decrypt_compact,\@abi-omnipotent
+.align	16
+_x86_64_AES_decrypt_compact:
+.cfi_startproc
+	lea	128($sbox),$inp			# size optimization
+	mov	0-128($inp),$acc1		# prefetch Td4
+	mov	32-128($inp),$acc2
+	mov	64-128($inp),$t0
+	mov	96-128($inp),$t1
+	mov	128-128($inp),$acc1
+	mov	160-128($inp),$acc2
+	mov	192-128($inp),$t0
+	mov	224-128($inp),$t1
+	jmp	.Ldec_loop_compact
+
+.align	16
+.Ldec_loop_compact:
+		xor	0($key),$s0		# xor with key
+		xor	4($key),$s1
+		xor	8($key),$s2
+		xor	12($key),$s3
+		lea	16($key),$key
+___
+		&deccompactvert();
+$code.=<<___;
+		cmp	16(%rsp),$key
+		je	.Ldec_compact_done
+
+		mov	256+0($sbox),$mask80
+		shl	\$32,%rbx
+		shl	\$32,%rdx
+		mov	256+8($sbox),$maskfe
+		or	%rbx,%rax
+		or	%rdx,%rcx
+		mov	256+16($sbox),$mask1b
+___
+		&dectransform(1);
+$code.=<<___;
+	jmp	.Ldec_loop_compact
+.align	16
+.Ldec_compact_done:
+	xor	0($key),$s0
+	xor	4($key),$s1
+	xor	8($key),$s2
+	xor	12($key),$s3
+	.byte	0xf3,0xc3			# rep ret
+.cfi_endproc
+.size	_x86_64_AES_decrypt_compact,.-_x86_64_AES_decrypt_compact
+___
+
+# void AES_decrypt (const void *inp,void *out,const AES_KEY *key);
+$code.=<<___;
+.globl	AES_decrypt
+.type	AES_decrypt,\@function,3
+.align	16
+.globl	asm_AES_decrypt
+.hidden	asm_AES_decrypt
+asm_AES_decrypt:
+AES_decrypt:
+.cfi_startproc
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+
+	# allocate frame "above" key schedule
+	lea	-63(%rdx),%rcx	# %rdx is key argument
+	and	\$-64,%rsp
+	sub	%rsp,%rcx
+	neg	%rcx
+	and	\$0x3c0,%rcx
+	sub	%rcx,%rsp
+	sub	\$32,%rsp
+
+	mov	%rsi,16(%rsp)	# save out
+	mov	%rax,24(%rsp)	# save original stack pointer
+.cfi_cfa_expression	%rsp+24,deref,+8
+.Ldec_prologue:
+
+	mov	%rdx,$key
+	mov	240($key),$rnds	# load rounds
+
+	mov	0(%rdi),$s0	# load input vector
+	mov	4(%rdi),$s1
+	mov	8(%rdi),$s2
+	mov	12(%rdi),$s3
+
+	shl	\$4,$rnds
+	lea	($key,$rnds),%rbp
+	mov	$key,(%rsp)	# key schedule
+	mov	%rbp,8(%rsp)	# end of key schedule
+
+	# pick Td4 copy which can't "overlap" with stack frame or key schedule
+	lea	.LAES_Td+2048(%rip),$sbox
+	lea	768(%rsp),%rbp
+	sub	$sbox,%rbp
+	and	\$0x300,%rbp
+	lea	($sbox,%rbp),$sbox
+	shr	\$3,%rbp	# recall "magic" constants!
+	add	%rbp,$sbox
+
+	call	_x86_64_AES_decrypt_compact
+
+	mov	16(%rsp),$out	# restore out
+	mov	24(%rsp),%rsi	# restore saved stack pointer
+.cfi_def_cfa	%rsi,8
+	mov	$s0,0($out)	# write output vector
+	mov	$s1,4($out)
+	mov	$s2,8($out)
+	mov	$s3,12($out)
+
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Ldec_epilogue:
+	ret
+.cfi_endproc
+.size	AES_decrypt,.-AES_decrypt
+___
+#------------------------------------------------------------------#
+
+sub enckey()
+{
+$code.=<<___;
+	movz	%dl,%esi		# rk[i]>>0
+	movzb	-128(%rbp,%rsi),%ebx
+	movz	%dh,%esi		# rk[i]>>8
+	shl	\$24,%ebx
+	xor	%ebx,%eax
+
+	movzb	-128(%rbp,%rsi),%ebx
+	shr	\$16,%edx
+	movz	%dl,%esi		# rk[i]>>16
+	xor	%ebx,%eax
+
+	movzb	-128(%rbp,%rsi),%ebx
+	movz	%dh,%esi		# rk[i]>>24
+	shl	\$8,%ebx
+	xor	%ebx,%eax
+
+	movzb	-128(%rbp,%rsi),%ebx
+	shl	\$16,%ebx
+	xor	%ebx,%eax
+
+	xor	1024-128(%rbp,%rcx,4),%eax		# rcon
+___
+}
+
+# int AES_set_encrypt_key(const unsigned char *userKey, const int bits,
+#                        AES_KEY *key)
+$code.=<<___;
+.globl	AES_set_encrypt_key
+.type	AES_set_encrypt_key,\@function,3
+.align	16
+AES_set_encrypt_key:
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12			# redundant, but allows to share
+.cfi_push	%r12
+	push	%r13			# exception handler...
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	sub	\$8,%rsp
+.cfi_adjust_cfa_offset	8
+.Lenc_key_prologue:
+
+	call	_x86_64_AES_set_encrypt_key
+
+	mov	40(%rsp),%rbp
+.cfi_restore	%rbp
+	mov	48(%rsp),%rbx
+.cfi_restore	%rbx
+	add	\$56,%rsp
+.cfi_adjust_cfa_offset	-56
+.Lenc_key_epilogue:
+	ret
+.cfi_endproc
+.size	AES_set_encrypt_key,.-AES_set_encrypt_key
+
+.type	_x86_64_AES_set_encrypt_key,\@abi-omnipotent
+.align	16
+_x86_64_AES_set_encrypt_key:
+.cfi_startproc
+	mov	%esi,%ecx			# %ecx=bits
+	mov	%rdi,%rsi			# %rsi=userKey
+	mov	%rdx,%rdi			# %rdi=key
+
+	test	\$-1,%rsi
+	jz	.Lbadpointer
+	test	\$-1,%rdi
+	jz	.Lbadpointer
+
+	lea	.LAES_Te(%rip),%rbp
+	lea	2048+128(%rbp),%rbp
+
+	# prefetch Te4
+	mov	0-128(%rbp),%eax
+	mov	32-128(%rbp),%ebx
+	mov	64-128(%rbp),%r8d
+	mov	96-128(%rbp),%edx
+	mov	128-128(%rbp),%eax
+	mov	160-128(%rbp),%ebx
+	mov	192-128(%rbp),%r8d
+	mov	224-128(%rbp),%edx
+
+	cmp	\$128,%ecx
+	je	.L10rounds
+	cmp	\$192,%ecx
+	je	.L12rounds
+	cmp	\$256,%ecx
+	je	.L14rounds
+	mov	\$-2,%rax			# invalid number of bits
+	jmp	.Lexit
+
+.L10rounds:
+	mov	0(%rsi),%rax			# copy first 4 dwords
+	mov	8(%rsi),%rdx
+	mov	%rax,0(%rdi)
+	mov	%rdx,8(%rdi)
+
+	shr	\$32,%rdx
+	xor	%ecx,%ecx
+	jmp	.L10shortcut
+.align	4
+.L10loop:
+		mov	0(%rdi),%eax			# rk[0]
+		mov	12(%rdi),%edx			# rk[3]
+.L10shortcut:
+___
+		&enckey	();
+$code.=<<___;
+		mov	%eax,16(%rdi)			# rk[4]
+		xor	4(%rdi),%eax
+		mov	%eax,20(%rdi)			# rk[5]
+		xor	8(%rdi),%eax
+		mov	%eax,24(%rdi)			# rk[6]
+		xor	12(%rdi),%eax
+		mov	%eax,28(%rdi)			# rk[7]
+		add	\$1,%ecx
+		lea	16(%rdi),%rdi
+		cmp	\$10,%ecx
+	jl	.L10loop
+
+	movl	\$10,80(%rdi)			# setup number of rounds
+	xor	%rax,%rax
+	jmp	.Lexit
+
+.L12rounds:
+	mov	0(%rsi),%rax			# copy first 6 dwords
+	mov	8(%rsi),%rbx
+	mov	16(%rsi),%rdx
+	mov	%rax,0(%rdi)
+	mov	%rbx,8(%rdi)
+	mov	%rdx,16(%rdi)
+
+	shr	\$32,%rdx
+	xor	%ecx,%ecx
+	jmp	.L12shortcut
+.align	4
+.L12loop:
+		mov	0(%rdi),%eax			# rk[0]
+		mov	20(%rdi),%edx			# rk[5]
+.L12shortcut:
+___
+		&enckey	();
+$code.=<<___;
+		mov	%eax,24(%rdi)			# rk[6]
+		xor	4(%rdi),%eax
+		mov	%eax,28(%rdi)			# rk[7]
+		xor	8(%rdi),%eax
+		mov	%eax,32(%rdi)			# rk[8]
+		xor	12(%rdi),%eax
+		mov	%eax,36(%rdi)			# rk[9]
+
+		cmp	\$7,%ecx
+		je	.L12break
+		add	\$1,%ecx
+
+		xor	16(%rdi),%eax
+		mov	%eax,40(%rdi)			# rk[10]
+		xor	20(%rdi),%eax
+		mov	%eax,44(%rdi)			# rk[11]
+
+		lea	24(%rdi),%rdi
+	jmp	.L12loop
+.L12break:
+	movl	\$12,72(%rdi)		# setup number of rounds
+	xor	%rax,%rax
+	jmp	.Lexit
+
+.L14rounds:
+	mov	0(%rsi),%rax			# copy first 8 dwords
+	mov	8(%rsi),%rbx
+	mov	16(%rsi),%rcx
+	mov	24(%rsi),%rdx
+	mov	%rax,0(%rdi)
+	mov	%rbx,8(%rdi)
+	mov	%rcx,16(%rdi)
+	mov	%rdx,24(%rdi)
+
+	shr	\$32,%rdx
+	xor	%ecx,%ecx
+	jmp	.L14shortcut
+.align	4
+.L14loop:
+		mov	0(%rdi),%eax			# rk[0]
+		mov	28(%rdi),%edx			# rk[4]
+.L14shortcut:
+___
+		&enckey	();
+$code.=<<___;
+		mov	%eax,32(%rdi)			# rk[8]
+		xor	4(%rdi),%eax
+		mov	%eax,36(%rdi)			# rk[9]
+		xor	8(%rdi),%eax
+		mov	%eax,40(%rdi)			# rk[10]
+		xor	12(%rdi),%eax
+		mov	%eax,44(%rdi)			# rk[11]
+
+		cmp	\$6,%ecx
+		je	.L14break
+		add	\$1,%ecx
+
+		mov	%eax,%edx
+		mov	16(%rdi),%eax			# rk[4]
+		movz	%dl,%esi			# rk[11]>>0
+		movzb	-128(%rbp,%rsi),%ebx
+		movz	%dh,%esi			# rk[11]>>8
+		xor	%ebx,%eax
+
+		movzb	-128(%rbp,%rsi),%ebx
+		shr	\$16,%edx
+		shl	\$8,%ebx
+		movz	%dl,%esi			# rk[11]>>16
+		xor	%ebx,%eax
+
+		movzb	-128(%rbp,%rsi),%ebx
+		movz	%dh,%esi			# rk[11]>>24
+		shl	\$16,%ebx
+		xor	%ebx,%eax
+
+		movzb	-128(%rbp,%rsi),%ebx
+		shl	\$24,%ebx
+		xor	%ebx,%eax
+
+		mov	%eax,48(%rdi)			# rk[12]
+		xor	20(%rdi),%eax
+		mov	%eax,52(%rdi)			# rk[13]
+		xor	24(%rdi),%eax
+		mov	%eax,56(%rdi)			# rk[14]
+		xor	28(%rdi),%eax
+		mov	%eax,60(%rdi)			# rk[15]
+
+		lea	32(%rdi),%rdi
+	jmp	.L14loop
+.L14break:
+	movl	\$14,48(%rdi)		# setup number of rounds
+	xor	%rax,%rax
+	jmp	.Lexit
+
+.Lbadpointer:
+	mov	\$-1,%rax
+.Lexit:
+	.byte	0xf3,0xc3			# rep ret
+.cfi_endproc
+.size	_x86_64_AES_set_encrypt_key,.-_x86_64_AES_set_encrypt_key
+___
+
+sub deckey_ref()
+{ my ($i,$ptr,$te,$td) = @_;
+  my ($tp1,$tp2,$tp4,$tp8,$acc)=("%eax","%ebx","%edi","%edx","%r8d");
+$code.=<<___;
+	mov	$i($ptr),$tp1
+	mov	$tp1,$acc
+	and	\$0x80808080,$acc
+	mov	$acc,$tp4
+	shr	\$7,$tp4
+	lea	0($tp1,$tp1),$tp2
+	sub	$tp4,$acc
+	and	\$0xfefefefe,$tp2
+	and	\$0x1b1b1b1b,$acc
+	xor	$tp2,$acc
+	mov	$acc,$tp2
+
+	and	\$0x80808080,$acc
+	mov	$acc,$tp8
+	shr	\$7,$tp8
+	lea	0($tp2,$tp2),$tp4
+	sub	$tp8,$acc
+	and	\$0xfefefefe,$tp4
+	and	\$0x1b1b1b1b,$acc
+	 xor	$tp1,$tp2		# tp2^tp1
+	xor	$tp4,$acc
+	mov	$acc,$tp4
+
+	and	\$0x80808080,$acc
+	mov	$acc,$tp8
+	shr	\$7,$tp8
+	sub	$tp8,$acc
+	lea	0($tp4,$tp4),$tp8
+	 xor	$tp1,$tp4		# tp4^tp1
+	and	\$0xfefefefe,$tp8
+	and	\$0x1b1b1b1b,$acc
+	xor	$acc,$tp8
+
+	xor	$tp8,$tp1		# tp1^tp8
+	rol	\$8,$tp1		# ROTATE(tp1^tp8,8)
+	xor	$tp8,$tp2		# tp2^tp1^tp8
+	xor	$tp8,$tp4		# tp4^tp1^tp8
+	xor	$tp2,$tp8
+	xor	$tp4,$tp8		# tp8^(tp8^tp4^tp1)^(tp8^tp2^tp1)=tp8^tp4^tp2
+
+	xor	$tp8,$tp1
+	rol	\$24,$tp2		# ROTATE(tp2^tp1^tp8,24)
+	xor	$tp2,$tp1
+	rol	\$16,$tp4		# ROTATE(tp4^tp1^tp8,16)
+	xor	$tp4,$tp1
+
+	mov	$tp1,$i($ptr)
+___
+}
+
+# int AES_set_decrypt_key(const unsigned char *userKey, const int bits,
+#                        AES_KEY *key)
+$code.=<<___;
+.globl	AES_set_decrypt_key
+.type	AES_set_decrypt_key,\@function,3
+.align	16
+AES_set_decrypt_key:
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	push	%rdx			# save key schedule
+.cfi_adjust_cfa_offset	8
+.Ldec_key_prologue:
+
+	call	_x86_64_AES_set_encrypt_key
+	mov	(%rsp),%r8		# restore key schedule
+	cmp	\$0,%eax
+	jne	.Labort
+
+	mov	240(%r8),%r14d		# pull number of rounds
+	xor	%rdi,%rdi
+	lea	(%rdi,%r14d,4),%rcx
+	mov	%r8,%rsi
+	lea	(%r8,%rcx,4),%rdi	# pointer to last chunk
+.align	4
+.Linvert:
+		mov	0(%rsi),%rax
+		mov	8(%rsi),%rbx
+		mov	0(%rdi),%rcx
+		mov	8(%rdi),%rdx
+		mov	%rax,0(%rdi)
+		mov	%rbx,8(%rdi)
+		mov	%rcx,0(%rsi)
+		mov	%rdx,8(%rsi)
+		lea	16(%rsi),%rsi
+		lea	-16(%rdi),%rdi
+		cmp	%rsi,%rdi
+	jne	.Linvert
+
+	lea	.LAES_Te+2048+1024(%rip),%rax	# rcon
+
+	mov	40(%rax),$mask80
+	mov	48(%rax),$maskfe
+	mov	56(%rax),$mask1b
+
+	mov	%r8,$key
+	sub	\$1,%r14d
+.align	4
+.Lpermute:
+		lea	16($key),$key
+		mov	0($key),%rax
+		mov	8($key),%rcx
+___
+		&dectransform ();
+$code.=<<___;
+		mov	%eax,0($key)
+		mov	%ebx,4($key)
+		mov	%ecx,8($key)
+		mov	%edx,12($key)
+		sub	\$1,%r14d
+	jnz	.Lpermute
+
+	xor	%rax,%rax
+.Labort:
+	mov	8(%rsp),%r15
+.cfi_restore	%r15
+	mov	16(%rsp),%r14
+.cfi_restore	%r14
+	mov	24(%rsp),%r13
+.cfi_restore	%r13
+	mov	32(%rsp),%r12
+.cfi_restore	%r12
+	mov	40(%rsp),%rbp
+.cfi_restore	%rbp
+	mov	48(%rsp),%rbx
+.cfi_restore	%rbx
+	add	\$56,%rsp
+.cfi_adjust_cfa_offset	-56
+.Ldec_key_epilogue:
+	ret
+.cfi_endproc
+.size	AES_set_decrypt_key,.-AES_set_decrypt_key
+___
+
+# void AES_cbc_encrypt (const void char *inp, unsigned char *out,
+#			size_t length, const AES_KEY *key,
+#			unsigned char *ivp,const int enc);
+{
+# stack frame layout
+# -8(%rsp)		return address
+my $keyp="0(%rsp)";		# one to pass as $key
+my $keyend="8(%rsp)";		# &(keyp->rd_key[4*keyp->rounds])
+my $_rsp="16(%rsp)";		# saved %rsp
+my $_inp="24(%rsp)";		# copy of 1st parameter, inp
+my $_out="32(%rsp)";		# copy of 2nd parameter, out
+my $_len="40(%rsp)";		# copy of 3rd parameter, length
+my $_key="48(%rsp)";		# copy of 4th parameter, key
+my $_ivp="56(%rsp)";		# copy of 5th parameter, ivp
+my $ivec="64(%rsp)";		# ivec[16]
+my $aes_key="80(%rsp)";		# copy of aes_key
+my $mark="80+240(%rsp)";	# copy of aes_key->rounds
+
+$code.=<<___;
+.globl	AES_cbc_encrypt
+.type	AES_cbc_encrypt,\@function,6
+.align	16
+.extern	OPENSSL_ia32cap_P
+.globl	asm_AES_cbc_encrypt
+.hidden	asm_AES_cbc_encrypt
+asm_AES_cbc_encrypt:
+AES_cbc_encrypt:
+.cfi_startproc
+	cmp	\$0,%rdx	# check length
+	je	.Lcbc_epilogue
+	pushfq
+# This could be .cfi_push 49, but libunwind fails on registers it does not
+# recognize. See https://bugzilla.redhat.com/show_bug.cgi?id=217087.
+.cfi_adjust_cfa_offset	8
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lcbc_prologue:
+
+	cld
+	mov	%r9d,%r9d	# clear upper half of enc
+
+	lea	.LAES_Te(%rip),$sbox
+	lea	.LAES_Td(%rip),%r10
+	cmp	\$0,%r9
+	cmoveq	%r10,$sbox
+
+.cfi_remember_state
+	mov	OPENSSL_ia32cap_P(%rip),%r10d
+	cmp	\$$speed_limit,%rdx
+	jb	.Lcbc_slow_prologue
+	test	\$15,%rdx
+	jnz	.Lcbc_slow_prologue
+	bt	\$28,%r10d
+	jc	.Lcbc_slow_prologue
+
+	# allocate aligned stack frame...
+	lea	-88-248(%rsp),$key
+	and	\$-64,$key
+
+	# ... and make sure it doesn't alias with AES_T[ed] modulo 4096
+	mov	$sbox,%r10
+	lea	2304($sbox),%r11
+	mov	$key,%r12
+	and	\$0xFFF,%r10	# s = $sbox&0xfff
+	and	\$0xFFF,%r11	# e = ($sbox+2048)&0xfff
+	and	\$0xFFF,%r12	# p = %rsp&0xfff
+
+	cmp	%r11,%r12	# if (p=>e) %rsp =- (p-e);
+	jb	.Lcbc_te_break_out
+	sub	%r11,%r12
+	sub	%r12,$key
+	jmp	.Lcbc_te_ok
+.Lcbc_te_break_out:		# else %rsp -= (p-s)&0xfff + framesz
+	sub	%r10,%r12
+	and	\$0xFFF,%r12
+	add	\$320,%r12
+	sub	%r12,$key
+.align	4
+.Lcbc_te_ok:
+
+	xchg	%rsp,$key
+.cfi_def_cfa_register	$key
+	#add	\$8,%rsp	# reserve for return address!
+	mov	$key,$_rsp	# save %rsp
+.cfi_cfa_expression	$_rsp,deref,+64
+.Lcbc_fast_body:
+	mov	%rdi,$_inp	# save copy of inp
+	mov	%rsi,$_out	# save copy of out
+	mov	%rdx,$_len	# save copy of len
+	mov	%rcx,$_key	# save copy of key
+	mov	%r8,$_ivp	# save copy of ivp
+	movl	\$0,$mark	# copy of aes_key->rounds = 0;
+	mov	%r8,%rbp	# rearrange input arguments
+	mov	%r9,%rbx
+	mov	%rsi,$out
+	mov	%rdi,$inp
+	mov	%rcx,$key
+
+	mov	240($key),%eax		# key->rounds
+	# do we copy key schedule to stack?
+	mov	$key,%r10
+	sub	$sbox,%r10
+	and	\$0xfff,%r10
+	cmp	\$2304,%r10
+	jb	.Lcbc_do_ecopy
+	cmp	\$4096-248,%r10
+	jb	.Lcbc_skip_ecopy
+.align	4
+.Lcbc_do_ecopy:
+		mov	$key,%rsi
+		lea	$aes_key,%rdi
+		lea	$aes_key,$key
+		mov	\$240/8,%ecx
+		.long	0x90A548F3	# rep movsq
+		mov	%eax,(%rdi)	# copy aes_key->rounds
+.Lcbc_skip_ecopy:
+	mov	$key,$keyp	# save key pointer
+
+	mov	\$18,%ecx
+.align	4
+.Lcbc_prefetch_te:
+		mov	0($sbox),%r10
+		mov	32($sbox),%r11
+		mov	64($sbox),%r12
+		mov	96($sbox),%r13
+		lea	128($sbox),$sbox
+		sub	\$1,%ecx
+	jnz	.Lcbc_prefetch_te
+	lea	-2304($sbox),$sbox
+
+	cmp	\$0,%rbx
+	je	.LFAST_DECRYPT
+
+#----------------------------- ENCRYPT -----------------------------#
+	mov	0(%rbp),$s0		# load iv
+	mov	4(%rbp),$s1
+	mov	8(%rbp),$s2
+	mov	12(%rbp),$s3
+
+.align	4
+.Lcbc_fast_enc_loop:
+		xor	0($inp),$s0
+		xor	4($inp),$s1
+		xor	8($inp),$s2
+		xor	12($inp),$s3
+		mov	$keyp,$key	# restore key
+		mov	$inp,$_inp	# if ($verticalspin) save inp
+
+		call	_x86_64_AES_encrypt
+
+		mov	$_inp,$inp	# if ($verticalspin) restore inp
+		mov	$_len,%r10
+		mov	$s0,0($out)
+		mov	$s1,4($out)
+		mov	$s2,8($out)
+		mov	$s3,12($out)
+
+		lea	16($inp),$inp
+		lea	16($out),$out
+		sub	\$16,%r10
+		test	\$-16,%r10
+		mov	%r10,$_len
+	jnz	.Lcbc_fast_enc_loop
+	mov	$_ivp,%rbp	# restore ivp
+	mov	$s0,0(%rbp)	# save ivec
+	mov	$s1,4(%rbp)
+	mov	$s2,8(%rbp)
+	mov	$s3,12(%rbp)
+
+	jmp	.Lcbc_fast_cleanup
+
+#----------------------------- DECRYPT -----------------------------#
+.align	16
+.LFAST_DECRYPT:
+	cmp	$inp,$out
+	je	.Lcbc_fast_dec_in_place
+
+	mov	%rbp,$ivec
+.align	4
+.Lcbc_fast_dec_loop:
+		mov	0($inp),$s0	# read input
+		mov	4($inp),$s1
+		mov	8($inp),$s2
+		mov	12($inp),$s3
+		mov	$keyp,$key	# restore key
+		mov	$inp,$_inp	# if ($verticalspin) save inp
+
+		call	_x86_64_AES_decrypt
+
+		mov	$ivec,%rbp	# load ivp
+		mov	$_inp,$inp	# if ($verticalspin) restore inp
+		mov	$_len,%r10	# load len
+		xor	0(%rbp),$s0	# xor iv
+		xor	4(%rbp),$s1
+		xor	8(%rbp),$s2
+		xor	12(%rbp),$s3
+		mov	$inp,%rbp	# current input, next iv
+
+		sub	\$16,%r10
+		mov	%r10,$_len	# update len
+		mov	%rbp,$ivec	# update ivp
+
+		mov	$s0,0($out)	# write output
+		mov	$s1,4($out)
+		mov	$s2,8($out)
+		mov	$s3,12($out)
+
+		lea	16($inp),$inp
+		lea	16($out),$out
+	jnz	.Lcbc_fast_dec_loop
+	mov	$_ivp,%r12		# load user ivp
+	mov	0(%rbp),%r10		# load iv
+	mov	8(%rbp),%r11
+	mov	%r10,0(%r12)		# copy back to user
+	mov	%r11,8(%r12)
+	jmp	.Lcbc_fast_cleanup
+
+.align	16
+.Lcbc_fast_dec_in_place:
+	mov	0(%rbp),%r10		# copy iv to stack
+	mov	8(%rbp),%r11
+	mov	%r10,0+$ivec
+	mov	%r11,8+$ivec
+.align	4
+.Lcbc_fast_dec_in_place_loop:
+		mov	0($inp),$s0	# load input
+		mov	4($inp),$s1
+		mov	8($inp),$s2
+		mov	12($inp),$s3
+		mov	$keyp,$key	# restore key
+		mov	$inp,$_inp	# if ($verticalspin) save inp
+
+		call	_x86_64_AES_decrypt
+
+		mov	$_inp,$inp	# if ($verticalspin) restore inp
+		mov	$_len,%r10
+		xor	0+$ivec,$s0
+		xor	4+$ivec,$s1
+		xor	8+$ivec,$s2
+		xor	12+$ivec,$s3
+
+		mov	0($inp),%r11	# load input
+		mov	8($inp),%r12
+		sub	\$16,%r10
+		jz	.Lcbc_fast_dec_in_place_done
+
+		mov	%r11,0+$ivec	# copy input to iv
+		mov	%r12,8+$ivec
+
+		mov	$s0,0($out)	# save output [zaps input]
+		mov	$s1,4($out)
+		mov	$s2,8($out)
+		mov	$s3,12($out)
+
+		lea	16($inp),$inp
+		lea	16($out),$out
+		mov	%r10,$_len
+	jmp	.Lcbc_fast_dec_in_place_loop
+.Lcbc_fast_dec_in_place_done:
+	mov	$_ivp,%rdi
+	mov	%r11,0(%rdi)	# copy iv back to user
+	mov	%r12,8(%rdi)
+
+	mov	$s0,0($out)	# save output [zaps input]
+	mov	$s1,4($out)
+	mov	$s2,8($out)
+	mov	$s3,12($out)
+
+.align	4
+.Lcbc_fast_cleanup:
+	cmpl	\$0,$mark	# was the key schedule copied?
+	lea	$aes_key,%rdi
+	je	.Lcbc_exit
+		mov	\$240/8,%ecx
+		xor	%rax,%rax
+		.long	0x90AB48F3	# rep stosq
+
+	jmp	.Lcbc_exit
+
+#--------------------------- SLOW ROUTINE ---------------------------#
+.align	16
+.Lcbc_slow_prologue:
+.cfi_restore_state
+	# allocate aligned stack frame...
+	lea	-88(%rsp),%rbp
+	and	\$-64,%rbp
+	# ... just "above" key schedule
+	lea	-88-63(%rcx),%r10
+	sub	%rbp,%r10
+	neg	%r10
+	and	\$0x3c0,%r10
+	sub	%r10,%rbp
+
+	xchg	%rsp,%rbp
+.cfi_def_cfa_register	%rbp
+	#add	\$8,%rsp	# reserve for return address!
+	mov	%rbp,$_rsp	# save %rsp
+.cfi_cfa_expression	$_rsp,deref,+64
+.Lcbc_slow_body:
+	#mov	%rdi,$_inp	# save copy of inp
+	#mov	%rsi,$_out	# save copy of out
+	#mov	%rdx,$_len	# save copy of len
+	#mov	%rcx,$_key	# save copy of key
+	mov	%r8,$_ivp	# save copy of ivp
+	mov	%r8,%rbp	# rearrange input arguments
+	mov	%r9,%rbx
+	mov	%rsi,$out
+	mov	%rdi,$inp
+	mov	%rcx,$key
+	mov	%rdx,%r10
+
+	mov	240($key),%eax
+	mov	$key,$keyp	# save key pointer
+	shl	\$4,%eax
+	lea	($key,%rax),%rax
+	mov	%rax,$keyend
+
+	# pick Te4 copy which can't "overlap" with stack frame or key schedule
+	lea	2048($sbox),$sbox
+	lea	768-8(%rsp),%rax
+	sub	$sbox,%rax
+	and	\$0x300,%rax
+	lea	($sbox,%rax),$sbox
+
+	cmp	\$0,%rbx
+	je	.LSLOW_DECRYPT
+
+#--------------------------- SLOW ENCRYPT ---------------------------#
+	test	\$-16,%r10		# check upon length
+	mov	0(%rbp),$s0		# load iv
+	mov	4(%rbp),$s1
+	mov	8(%rbp),$s2
+	mov	12(%rbp),$s3
+	jz	.Lcbc_slow_enc_tail	# short input...
+
+.align	4
+.Lcbc_slow_enc_loop:
+		xor	0($inp),$s0
+		xor	4($inp),$s1
+		xor	8($inp),$s2
+		xor	12($inp),$s3
+		mov	$keyp,$key	# restore key
+		mov	$inp,$_inp	# save inp
+		mov	$out,$_out	# save out
+		mov	%r10,$_len	# save len
+
+		call	_x86_64_AES_encrypt_compact
+
+		mov	$_inp,$inp	# restore inp
+		mov	$_out,$out	# restore out
+		mov	$_len,%r10	# restore len
+		mov	$s0,0($out)
+		mov	$s1,4($out)
+		mov	$s2,8($out)
+		mov	$s3,12($out)
+
+		lea	16($inp),$inp
+		lea	16($out),$out
+		sub	\$16,%r10
+		test	\$-16,%r10
+	jnz	.Lcbc_slow_enc_loop
+	test	\$15,%r10
+	jnz	.Lcbc_slow_enc_tail
+	mov	$_ivp,%rbp	# restore ivp
+	mov	$s0,0(%rbp)	# save ivec
+	mov	$s1,4(%rbp)
+	mov	$s2,8(%rbp)
+	mov	$s3,12(%rbp)
+
+	jmp	.Lcbc_exit
+
+.align	4
+.Lcbc_slow_enc_tail:
+	mov	%rax,%r11
+	mov	%rcx,%r12
+	mov	%r10,%rcx
+	mov	$inp,%rsi
+	mov	$out,%rdi
+	.long	0x9066A4F3		# rep movsb
+	mov	\$16,%rcx		# zero tail
+	sub	%r10,%rcx
+	xor	%rax,%rax
+	.long	0x9066AAF3		# rep stosb
+	mov	$out,$inp		# this is not a mistake!
+	mov	\$16,%r10		# len=16
+	mov	%r11,%rax
+	mov	%r12,%rcx
+	jmp	.Lcbc_slow_enc_loop	# one more spin...
+#--------------------------- SLOW DECRYPT ---------------------------#
+.align	16
+.LSLOW_DECRYPT:
+	shr	\$3,%rax
+	add	%rax,$sbox		# recall "magic" constants!
+
+	mov	0(%rbp),%r11		# copy iv to stack
+	mov	8(%rbp),%r12
+	mov	%r11,0+$ivec
+	mov	%r12,8+$ivec
+
+.align	4
+.Lcbc_slow_dec_loop:
+		mov	0($inp),$s0	# load input
+		mov	4($inp),$s1
+		mov	8($inp),$s2
+		mov	12($inp),$s3
+		mov	$keyp,$key	# restore key
+		mov	$inp,$_inp	# save inp
+		mov	$out,$_out	# save out
+		mov	%r10,$_len	# save len
+
+		call	_x86_64_AES_decrypt_compact
+
+		mov	$_inp,$inp	# restore inp
+		mov	$_out,$out	# restore out
+		mov	$_len,%r10
+		xor	0+$ivec,$s0
+		xor	4+$ivec,$s1
+		xor	8+$ivec,$s2
+		xor	12+$ivec,$s3
+
+		mov	0($inp),%r11	# load input
+		mov	8($inp),%r12
+		sub	\$16,%r10
+		jc	.Lcbc_slow_dec_partial
+		jz	.Lcbc_slow_dec_done
+
+		mov	%r11,0+$ivec	# copy input to iv
+		mov	%r12,8+$ivec
+
+		mov	$s0,0($out)	# save output [can zap input]
+		mov	$s1,4($out)
+		mov	$s2,8($out)
+		mov	$s3,12($out)
+
+		lea	16($inp),$inp
+		lea	16($out),$out
+	jmp	.Lcbc_slow_dec_loop
+.Lcbc_slow_dec_done:
+	mov	$_ivp,%rdi
+	mov	%r11,0(%rdi)		# copy iv back to user
+	mov	%r12,8(%rdi)
+
+	mov	$s0,0($out)		# save output [can zap input]
+	mov	$s1,4($out)
+	mov	$s2,8($out)
+	mov	$s3,12($out)
+
+	jmp	.Lcbc_exit
+
+.align	4
+.Lcbc_slow_dec_partial:
+	mov	$_ivp,%rdi
+	mov	%r11,0(%rdi)		# copy iv back to user
+	mov	%r12,8(%rdi)
+
+	mov	$s0,0+$ivec		# save output to stack
+	mov	$s1,4+$ivec
+	mov	$s2,8+$ivec
+	mov	$s3,12+$ivec
+
+	mov	$out,%rdi
+	lea	$ivec,%rsi
+	lea	16(%r10),%rcx
+	.long	0x9066A4F3	# rep movsb
+	jmp	.Lcbc_exit
+
+.align	16
+.Lcbc_exit:
+	mov	$_rsp,%rsi
+.cfi_def_cfa	%rsi,64
+	mov	(%rsi),%r15
+.cfi_restore	%r15
+	mov	8(%rsi),%r14
+.cfi_restore	%r14
+	mov	16(%rsi),%r13
+.cfi_restore	%r13
+	mov	24(%rsi),%r12
+.cfi_restore	%r12
+	mov	32(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	40(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	48(%rsi),%rsp
+.cfi_def_cfa	%rsp,16
+.Lcbc_popfq:
+	popfq
+# This could be .cfi_pop 49, but libunwind fails on registers it does not
+# recognize. See https://bugzilla.redhat.com/show_bug.cgi?id=217087.
+.cfi_adjust_cfa_offset	-8
+.Lcbc_epilogue:
+	ret
+.cfi_endproc
+.size	AES_cbc_encrypt,.-AES_cbc_encrypt
+___
+}
+
+$code.=<<___;
+.align	64
+.LAES_Te:
+___
+	&_data_word(0xa56363c6, 0x847c7cf8, 0x997777ee, 0x8d7b7bf6);
+	&_data_word(0x0df2f2ff, 0xbd6b6bd6, 0xb16f6fde, 0x54c5c591);
+	&_data_word(0x50303060, 0x03010102, 0xa96767ce, 0x7d2b2b56);
+	&_data_word(0x19fefee7, 0x62d7d7b5, 0xe6abab4d, 0x9a7676ec);
+	&_data_word(0x45caca8f, 0x9d82821f, 0x40c9c989, 0x877d7dfa);
+	&_data_word(0x15fafaef, 0xeb5959b2, 0xc947478e, 0x0bf0f0fb);
+	&_data_word(0xecadad41, 0x67d4d4b3, 0xfda2a25f, 0xeaafaf45);
+	&_data_word(0xbf9c9c23, 0xf7a4a453, 0x967272e4, 0x5bc0c09b);
+	&_data_word(0xc2b7b775, 0x1cfdfde1, 0xae93933d, 0x6a26264c);
+	&_data_word(0x5a36366c, 0x413f3f7e, 0x02f7f7f5, 0x4fcccc83);
+	&_data_word(0x5c343468, 0xf4a5a551, 0x34e5e5d1, 0x08f1f1f9);
+	&_data_word(0x937171e2, 0x73d8d8ab, 0x53313162, 0x3f15152a);
+	&_data_word(0x0c040408, 0x52c7c795, 0x65232346, 0x5ec3c39d);
+	&_data_word(0x28181830, 0xa1969637, 0x0f05050a, 0xb59a9a2f);
+	&_data_word(0x0907070e, 0x36121224, 0x9b80801b, 0x3de2e2df);
+	&_data_word(0x26ebebcd, 0x6927274e, 0xcdb2b27f, 0x9f7575ea);
+	&_data_word(0x1b090912, 0x9e83831d, 0x742c2c58, 0x2e1a1a34);
+	&_data_word(0x2d1b1b36, 0xb26e6edc, 0xee5a5ab4, 0xfba0a05b);
+	&_data_word(0xf65252a4, 0x4d3b3b76, 0x61d6d6b7, 0xceb3b37d);
+	&_data_word(0x7b292952, 0x3ee3e3dd, 0x712f2f5e, 0x97848413);
+	&_data_word(0xf55353a6, 0x68d1d1b9, 0x00000000, 0x2cededc1);
+	&_data_word(0x60202040, 0x1ffcfce3, 0xc8b1b179, 0xed5b5bb6);
+	&_data_word(0xbe6a6ad4, 0x46cbcb8d, 0xd9bebe67, 0x4b393972);
+	&_data_word(0xde4a4a94, 0xd44c4c98, 0xe85858b0, 0x4acfcf85);
+	&_data_word(0x6bd0d0bb, 0x2aefefc5, 0xe5aaaa4f, 0x16fbfbed);
+	&_data_word(0xc5434386, 0xd74d4d9a, 0x55333366, 0x94858511);
+	&_data_word(0xcf45458a, 0x10f9f9e9, 0x06020204, 0x817f7ffe);
+	&_data_word(0xf05050a0, 0x443c3c78, 0xba9f9f25, 0xe3a8a84b);
+	&_data_word(0xf35151a2, 0xfea3a35d, 0xc0404080, 0x8a8f8f05);
+	&_data_word(0xad92923f, 0xbc9d9d21, 0x48383870, 0x04f5f5f1);
+	&_data_word(0xdfbcbc63, 0xc1b6b677, 0x75dadaaf, 0x63212142);
+	&_data_word(0x30101020, 0x1affffe5, 0x0ef3f3fd, 0x6dd2d2bf);
+	&_data_word(0x4ccdcd81, 0x140c0c18, 0x35131326, 0x2fececc3);
+	&_data_word(0xe15f5fbe, 0xa2979735, 0xcc444488, 0x3917172e);
+	&_data_word(0x57c4c493, 0xf2a7a755, 0x827e7efc, 0x473d3d7a);
+	&_data_word(0xac6464c8, 0xe75d5dba, 0x2b191932, 0x957373e6);
+	&_data_word(0xa06060c0, 0x98818119, 0xd14f4f9e, 0x7fdcdca3);
+	&_data_word(0x66222244, 0x7e2a2a54, 0xab90903b, 0x8388880b);
+	&_data_word(0xca46468c, 0x29eeeec7, 0xd3b8b86b, 0x3c141428);
+	&_data_word(0x79dedea7, 0xe25e5ebc, 0x1d0b0b16, 0x76dbdbad);
+	&_data_word(0x3be0e0db, 0x56323264, 0x4e3a3a74, 0x1e0a0a14);
+	&_data_word(0xdb494992, 0x0a06060c, 0x6c242448, 0xe45c5cb8);
+	&_data_word(0x5dc2c29f, 0x6ed3d3bd, 0xefacac43, 0xa66262c4);
+	&_data_word(0xa8919139, 0xa4959531, 0x37e4e4d3, 0x8b7979f2);
+	&_data_word(0x32e7e7d5, 0x43c8c88b, 0x5937376e, 0xb76d6dda);
+	&_data_word(0x8c8d8d01, 0x64d5d5b1, 0xd24e4e9c, 0xe0a9a949);
+	&_data_word(0xb46c6cd8, 0xfa5656ac, 0x07f4f4f3, 0x25eaeacf);
+	&_data_word(0xaf6565ca, 0x8e7a7af4, 0xe9aeae47, 0x18080810);
+	&_data_word(0xd5baba6f, 0x887878f0, 0x6f25254a, 0x722e2e5c);
+	&_data_word(0x241c1c38, 0xf1a6a657, 0xc7b4b473, 0x51c6c697);
+	&_data_word(0x23e8e8cb, 0x7cdddda1, 0x9c7474e8, 0x211f1f3e);
+	&_data_word(0xdd4b4b96, 0xdcbdbd61, 0x868b8b0d, 0x858a8a0f);
+	&_data_word(0x907070e0, 0x423e3e7c, 0xc4b5b571, 0xaa6666cc);
+	&_data_word(0xd8484890, 0x05030306, 0x01f6f6f7, 0x120e0e1c);
+	&_data_word(0xa36161c2, 0x5f35356a, 0xf95757ae, 0xd0b9b969);
+	&_data_word(0x91868617, 0x58c1c199, 0x271d1d3a, 0xb99e9e27);
+	&_data_word(0x38e1e1d9, 0x13f8f8eb, 0xb398982b, 0x33111122);
+	&_data_word(0xbb6969d2, 0x70d9d9a9, 0x898e8e07, 0xa7949433);
+	&_data_word(0xb69b9b2d, 0x221e1e3c, 0x92878715, 0x20e9e9c9);
+	&_data_word(0x49cece87, 0xff5555aa, 0x78282850, 0x7adfdfa5);
+	&_data_word(0x8f8c8c03, 0xf8a1a159, 0x80898909, 0x170d0d1a);
+	&_data_word(0xdabfbf65, 0x31e6e6d7, 0xc6424284, 0xb86868d0);
+	&_data_word(0xc3414182, 0xb0999929, 0x772d2d5a, 0x110f0f1e);
+	&_data_word(0xcbb0b07b, 0xfc5454a8, 0xd6bbbb6d, 0x3a16162c);
+
+#Te4	# four copies of Te4 to choose from to avoid L1 aliasing
+	&data_byte(0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5);
+	&data_byte(0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76);
+	&data_byte(0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0);
+	&data_byte(0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0);
+	&data_byte(0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc);
+	&data_byte(0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15);
+	&data_byte(0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a);
+	&data_byte(0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75);
+	&data_byte(0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0);
+	&data_byte(0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84);
+	&data_byte(0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b);
+	&data_byte(0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf);
+	&data_byte(0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85);
+	&data_byte(0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8);
+	&data_byte(0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5);
+	&data_byte(0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2);
+	&data_byte(0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17);
+	&data_byte(0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73);
+	&data_byte(0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88);
+	&data_byte(0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb);
+	&data_byte(0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c);
+	&data_byte(0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79);
+	&data_byte(0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9);
+	&data_byte(0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08);
+	&data_byte(0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6);
+	&data_byte(0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a);
+	&data_byte(0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e);
+	&data_byte(0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e);
+	&data_byte(0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94);
+	&data_byte(0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf);
+	&data_byte(0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68);
+	&data_byte(0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16);
+
+	&data_byte(0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5);
+	&data_byte(0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76);
+	&data_byte(0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0);
+	&data_byte(0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0);
+	&data_byte(0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc);
+	&data_byte(0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15);
+	&data_byte(0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a);
+	&data_byte(0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75);
+	&data_byte(0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0);
+	&data_byte(0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84);
+	&data_byte(0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b);
+	&data_byte(0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf);
+	&data_byte(0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85);
+	&data_byte(0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8);
+	&data_byte(0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5);
+	&data_byte(0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2);
+	&data_byte(0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17);
+	&data_byte(0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73);
+	&data_byte(0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88);
+	&data_byte(0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb);
+	&data_byte(0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c);
+	&data_byte(0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79);
+	&data_byte(0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9);
+	&data_byte(0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08);
+	&data_byte(0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6);
+	&data_byte(0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a);
+	&data_byte(0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e);
+	&data_byte(0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e);
+	&data_byte(0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94);
+	&data_byte(0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf);
+	&data_byte(0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68);
+	&data_byte(0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16);
+
+	&data_byte(0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5);
+	&data_byte(0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76);
+	&data_byte(0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0);
+	&data_byte(0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0);
+	&data_byte(0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc);
+	&data_byte(0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15);
+	&data_byte(0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a);
+	&data_byte(0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75);
+	&data_byte(0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0);
+	&data_byte(0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84);
+	&data_byte(0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b);
+	&data_byte(0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf);
+	&data_byte(0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85);
+	&data_byte(0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8);
+	&data_byte(0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5);
+	&data_byte(0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2);
+	&data_byte(0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17);
+	&data_byte(0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73);
+	&data_byte(0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88);
+	&data_byte(0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb);
+	&data_byte(0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c);
+	&data_byte(0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79);
+	&data_byte(0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9);
+	&data_byte(0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08);
+	&data_byte(0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6);
+	&data_byte(0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a);
+	&data_byte(0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e);
+	&data_byte(0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e);
+	&data_byte(0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94);
+	&data_byte(0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf);
+	&data_byte(0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68);
+	&data_byte(0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16);
+
+	&data_byte(0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5);
+	&data_byte(0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76);
+	&data_byte(0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0);
+	&data_byte(0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0);
+	&data_byte(0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc);
+	&data_byte(0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15);
+	&data_byte(0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a);
+	&data_byte(0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75);
+	&data_byte(0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0);
+	&data_byte(0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84);
+	&data_byte(0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b);
+	&data_byte(0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf);
+	&data_byte(0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85);
+	&data_byte(0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8);
+	&data_byte(0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5);
+	&data_byte(0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2);
+	&data_byte(0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17);
+	&data_byte(0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73);
+	&data_byte(0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88);
+	&data_byte(0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb);
+	&data_byte(0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c);
+	&data_byte(0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79);
+	&data_byte(0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9);
+	&data_byte(0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08);
+	&data_byte(0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6);
+	&data_byte(0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a);
+	&data_byte(0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e);
+	&data_byte(0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e);
+	&data_byte(0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94);
+	&data_byte(0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf);
+	&data_byte(0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68);
+	&data_byte(0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16);
+#rcon:
+$code.=<<___;
+	.long	0x00000001, 0x00000002, 0x00000004, 0x00000008
+	.long	0x00000010, 0x00000020, 0x00000040, 0x00000080
+	.long	0x0000001b, 0x00000036, 0x80808080, 0x80808080
+	.long	0xfefefefe, 0xfefefefe, 0x1b1b1b1b, 0x1b1b1b1b
+___
+$code.=<<___;
+.align	64
+.LAES_Td:
+___
+	&_data_word(0x50a7f451, 0x5365417e, 0xc3a4171a, 0x965e273a);
+	&_data_word(0xcb6bab3b, 0xf1459d1f, 0xab58faac, 0x9303e34b);
+	&_data_word(0x55fa3020, 0xf66d76ad, 0x9176cc88, 0x254c02f5);
+	&_data_word(0xfcd7e54f, 0xd7cb2ac5, 0x80443526, 0x8fa362b5);
+	&_data_word(0x495ab1de, 0x671bba25, 0x980eea45, 0xe1c0fe5d);
+	&_data_word(0x02752fc3, 0x12f04c81, 0xa397468d, 0xc6f9d36b);
+	&_data_word(0xe75f8f03, 0x959c9215, 0xeb7a6dbf, 0xda595295);
+	&_data_word(0x2d83bed4, 0xd3217458, 0x2969e049, 0x44c8c98e);
+	&_data_word(0x6a89c275, 0x78798ef4, 0x6b3e5899, 0xdd71b927);
+	&_data_word(0xb64fe1be, 0x17ad88f0, 0x66ac20c9, 0xb43ace7d);
+	&_data_word(0x184adf63, 0x82311ae5, 0x60335197, 0x457f5362);
+	&_data_word(0xe07764b1, 0x84ae6bbb, 0x1ca081fe, 0x942b08f9);
+	&_data_word(0x58684870, 0x19fd458f, 0x876cde94, 0xb7f87b52);
+	&_data_word(0x23d373ab, 0xe2024b72, 0x578f1fe3, 0x2aab5566);
+	&_data_word(0x0728ebb2, 0x03c2b52f, 0x9a7bc586, 0xa50837d3);
+	&_data_word(0xf2872830, 0xb2a5bf23, 0xba6a0302, 0x5c8216ed);
+	&_data_word(0x2b1ccf8a, 0x92b479a7, 0xf0f207f3, 0xa1e2694e);
+	&_data_word(0xcdf4da65, 0xd5be0506, 0x1f6234d1, 0x8afea6c4);
+	&_data_word(0x9d532e34, 0xa055f3a2, 0x32e18a05, 0x75ebf6a4);
+	&_data_word(0x39ec830b, 0xaaef6040, 0x069f715e, 0x51106ebd);
+	&_data_word(0xf98a213e, 0x3d06dd96, 0xae053edd, 0x46bde64d);
+	&_data_word(0xb58d5491, 0x055dc471, 0x6fd40604, 0xff155060);
+	&_data_word(0x24fb9819, 0x97e9bdd6, 0xcc434089, 0x779ed967);
+	&_data_word(0xbd42e8b0, 0x888b8907, 0x385b19e7, 0xdbeec879);
+	&_data_word(0x470a7ca1, 0xe90f427c, 0xc91e84f8, 0x00000000);
+	&_data_word(0x83868009, 0x48ed2b32, 0xac70111e, 0x4e725a6c);
+	&_data_word(0xfbff0efd, 0x5638850f, 0x1ed5ae3d, 0x27392d36);
+	&_data_word(0x64d90f0a, 0x21a65c68, 0xd1545b9b, 0x3a2e3624);
+	&_data_word(0xb1670a0c, 0x0fe75793, 0xd296eeb4, 0x9e919b1b);
+	&_data_word(0x4fc5c080, 0xa220dc61, 0x694b775a, 0x161a121c);
+	&_data_word(0x0aba93e2, 0xe52aa0c0, 0x43e0223c, 0x1d171b12);
+	&_data_word(0x0b0d090e, 0xadc78bf2, 0xb9a8b62d, 0xc8a91e14);
+	&_data_word(0x8519f157, 0x4c0775af, 0xbbdd99ee, 0xfd607fa3);
+	&_data_word(0x9f2601f7, 0xbcf5725c, 0xc53b6644, 0x347efb5b);
+	&_data_word(0x7629438b, 0xdcc623cb, 0x68fcedb6, 0x63f1e4b8);
+	&_data_word(0xcadc31d7, 0x10856342, 0x40229713, 0x2011c684);
+	&_data_word(0x7d244a85, 0xf83dbbd2, 0x1132f9ae, 0x6da129c7);
+	&_data_word(0x4b2f9e1d, 0xf330b2dc, 0xec52860d, 0xd0e3c177);
+	&_data_word(0x6c16b32b, 0x99b970a9, 0xfa489411, 0x2264e947);
+	&_data_word(0xc48cfca8, 0x1a3ff0a0, 0xd82c7d56, 0xef903322);
+	&_data_word(0xc74e4987, 0xc1d138d9, 0xfea2ca8c, 0x360bd498);
+	&_data_word(0xcf81f5a6, 0x28de7aa5, 0x268eb7da, 0xa4bfad3f);
+	&_data_word(0xe49d3a2c, 0x0d927850, 0x9bcc5f6a, 0x62467e54);
+	&_data_word(0xc2138df6, 0xe8b8d890, 0x5ef7392e, 0xf5afc382);
+	&_data_word(0xbe805d9f, 0x7c93d069, 0xa92dd56f, 0xb31225cf);
+	&_data_word(0x3b99acc8, 0xa77d1810, 0x6e639ce8, 0x7bbb3bdb);
+	&_data_word(0x097826cd, 0xf418596e, 0x01b79aec, 0xa89a4f83);
+	&_data_word(0x656e95e6, 0x7ee6ffaa, 0x08cfbc21, 0xe6e815ef);
+	&_data_word(0xd99be7ba, 0xce366f4a, 0xd4099fea, 0xd67cb029);
+	&_data_word(0xafb2a431, 0x31233f2a, 0x3094a5c6, 0xc066a235);
+	&_data_word(0x37bc4e74, 0xa6ca82fc, 0xb0d090e0, 0x15d8a733);
+	&_data_word(0x4a9804f1, 0xf7daec41, 0x0e50cd7f, 0x2ff69117);
+	&_data_word(0x8dd64d76, 0x4db0ef43, 0x544daacc, 0xdf0496e4);
+	&_data_word(0xe3b5d19e, 0x1b886a4c, 0xb81f2cc1, 0x7f516546);
+	&_data_word(0x04ea5e9d, 0x5d358c01, 0x737487fa, 0x2e410bfb);
+	&_data_word(0x5a1d67b3, 0x52d2db92, 0x335610e9, 0x1347d66d);
+	&_data_word(0x8c61d79a, 0x7a0ca137, 0x8e14f859, 0x893c13eb);
+	&_data_word(0xee27a9ce, 0x35c961b7, 0xede51ce1, 0x3cb1477a);
+	&_data_word(0x59dfd29c, 0x3f73f255, 0x79ce1418, 0xbf37c773);
+	&_data_word(0xeacdf753, 0x5baafd5f, 0x146f3ddf, 0x86db4478);
+	&_data_word(0x81f3afca, 0x3ec468b9, 0x2c342438, 0x5f40a3c2);
+	&_data_word(0x72c31d16, 0x0c25e2bc, 0x8b493c28, 0x41950dff);
+	&_data_word(0x7101a839, 0xdeb30c08, 0x9ce4b4d8, 0x90c15664);
+	&_data_word(0x6184cb7b, 0x70b632d5, 0x745c6c48, 0x4257b8d0);
+
+#Td4:	# four copies of Td4 to choose from to avoid L1 aliasing
+	&data_byte(0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38);
+	&data_byte(0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb);
+	&data_byte(0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87);
+	&data_byte(0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb);
+	&data_byte(0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d);
+	&data_byte(0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e);
+	&data_byte(0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2);
+	&data_byte(0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25);
+	&data_byte(0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16);
+	&data_byte(0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92);
+	&data_byte(0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda);
+	&data_byte(0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84);
+	&data_byte(0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a);
+	&data_byte(0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06);
+	&data_byte(0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02);
+	&data_byte(0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b);
+	&data_byte(0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea);
+	&data_byte(0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73);
+	&data_byte(0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85);
+	&data_byte(0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e);
+	&data_byte(0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89);
+	&data_byte(0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b);
+	&data_byte(0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20);
+	&data_byte(0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4);
+	&data_byte(0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31);
+	&data_byte(0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f);
+	&data_byte(0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d);
+	&data_byte(0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef);
+	&data_byte(0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0);
+	&data_byte(0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61);
+	&data_byte(0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26);
+	&data_byte(0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d);
+$code.=<<___;
+	.long	0x80808080, 0x80808080, 0xfefefefe, 0xfefefefe
+	.long	0x1b1b1b1b, 0x1b1b1b1b, 0, 0
+___
+	&data_byte(0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38);
+	&data_byte(0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb);
+	&data_byte(0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87);
+	&data_byte(0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb);
+	&data_byte(0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d);
+	&data_byte(0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e);
+	&data_byte(0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2);
+	&data_byte(0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25);
+	&data_byte(0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16);
+	&data_byte(0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92);
+	&data_byte(0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda);
+	&data_byte(0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84);
+	&data_byte(0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a);
+	&data_byte(0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06);
+	&data_byte(0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02);
+	&data_byte(0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b);
+	&data_byte(0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea);
+	&data_byte(0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73);
+	&data_byte(0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85);
+	&data_byte(0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e);
+	&data_byte(0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89);
+	&data_byte(0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b);
+	&data_byte(0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20);
+	&data_byte(0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4);
+	&data_byte(0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31);
+	&data_byte(0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f);
+	&data_byte(0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d);
+	&data_byte(0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef);
+	&data_byte(0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0);
+	&data_byte(0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61);
+	&data_byte(0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26);
+	&data_byte(0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d);
+$code.=<<___;
+	.long	0x80808080, 0x80808080, 0xfefefefe, 0xfefefefe
+	.long	0x1b1b1b1b, 0x1b1b1b1b, 0, 0
+___
+	&data_byte(0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38);
+	&data_byte(0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb);
+	&data_byte(0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87);
+	&data_byte(0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb);
+	&data_byte(0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d);
+	&data_byte(0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e);
+	&data_byte(0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2);
+	&data_byte(0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25);
+	&data_byte(0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16);
+	&data_byte(0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92);
+	&data_byte(0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda);
+	&data_byte(0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84);
+	&data_byte(0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a);
+	&data_byte(0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06);
+	&data_byte(0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02);
+	&data_byte(0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b);
+	&data_byte(0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea);
+	&data_byte(0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73);
+	&data_byte(0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85);
+	&data_byte(0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e);
+	&data_byte(0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89);
+	&data_byte(0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b);
+	&data_byte(0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20);
+	&data_byte(0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4);
+	&data_byte(0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31);
+	&data_byte(0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f);
+	&data_byte(0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d);
+	&data_byte(0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef);
+	&data_byte(0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0);
+	&data_byte(0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61);
+	&data_byte(0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26);
+	&data_byte(0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d);
+$code.=<<___;
+	.long	0x80808080, 0x80808080, 0xfefefefe, 0xfefefefe
+	.long	0x1b1b1b1b, 0x1b1b1b1b, 0, 0
+___
+	&data_byte(0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38);
+	&data_byte(0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb);
+	&data_byte(0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87);
+	&data_byte(0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb);
+	&data_byte(0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d);
+	&data_byte(0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e);
+	&data_byte(0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2);
+	&data_byte(0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25);
+	&data_byte(0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16);
+	&data_byte(0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92);
+	&data_byte(0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda);
+	&data_byte(0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84);
+	&data_byte(0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a);
+	&data_byte(0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06);
+	&data_byte(0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02);
+	&data_byte(0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b);
+	&data_byte(0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea);
+	&data_byte(0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73);
+	&data_byte(0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85);
+	&data_byte(0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e);
+	&data_byte(0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89);
+	&data_byte(0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b);
+	&data_byte(0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20);
+	&data_byte(0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4);
+	&data_byte(0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31);
+	&data_byte(0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f);
+	&data_byte(0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d);
+	&data_byte(0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef);
+	&data_byte(0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0);
+	&data_byte(0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61);
+	&data_byte(0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26);
+	&data_byte(0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d);
+$code.=<<___;
+	.long	0x80808080, 0x80808080, 0xfefefefe, 0xfefefefe
+	.long	0x1b1b1b1b, 0x1b1b1b1b, 0, 0
+.asciz  "AES for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+.align	64
+___
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	block_se_handler,\@abi-omnipotent
+.align	16
+block_se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lin_block_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lin_block_prologue
+
+	mov	24(%rax),%rax		# pull saved real stack pointer
+
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+.Lin_block_prologue:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	jmp	.Lcommon_seh_exit
+.size	block_se_handler,.-block_se_handler
+
+.type	key_se_handler,\@abi-omnipotent
+.align	16
+key_se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lin_key_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lin_key_prologue
+
+	lea	56(%rax),%rax
+
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+.Lin_key_prologue:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	jmp	.Lcommon_seh_exit
+.size	key_se_handler,.-key_se_handler
+
+.type	cbc_se_handler,\@abi-omnipotent
+.align	16
+cbc_se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	lea	.Lcbc_prologue(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<.Lcbc_prologue
+	jb	.Lin_cbc_prologue
+
+	lea	.Lcbc_fast_body(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<.Lcbc_fast_body
+	jb	.Lin_cbc_frame_setup
+
+	lea	.Lcbc_slow_prologue(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<.Lcbc_slow_prologue
+	jb	.Lin_cbc_body
+
+	lea	.Lcbc_slow_body(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<.Lcbc_slow_body
+	jb	.Lin_cbc_frame_setup
+
+.Lin_cbc_body:
+	mov	152($context),%rax	# pull context->Rsp
+
+	lea	.Lcbc_epilogue(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip>=.Lcbc_epilogue
+	jae	.Lin_cbc_prologue
+
+	lea	8(%rax),%rax
+
+	lea	.Lcbc_popfq(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip>=.Lcbc_popfq
+	jae	.Lin_cbc_prologue
+
+	mov	`16-8`(%rax),%rax	# biased $_rsp
+	lea	56(%rax),%rax
+
+.Lin_cbc_frame_setup:
+	mov	-16(%rax),%rbx
+	mov	-24(%rax),%rbp
+	mov	-32(%rax),%r12
+	mov	-40(%rax),%r13
+	mov	-48(%rax),%r14
+	mov	-56(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+.Lin_cbc_prologue:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+.Lcommon_seh_exit:
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$`1232/8`,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	cbc_se_handler,.-cbc_se_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_AES_encrypt
+	.rva	.LSEH_end_AES_encrypt
+	.rva	.LSEH_info_AES_encrypt
+
+	.rva	.LSEH_begin_AES_decrypt
+	.rva	.LSEH_end_AES_decrypt
+	.rva	.LSEH_info_AES_decrypt
+
+	.rva	.LSEH_begin_AES_set_encrypt_key
+	.rva	.LSEH_end_AES_set_encrypt_key
+	.rva	.LSEH_info_AES_set_encrypt_key
+
+	.rva	.LSEH_begin_AES_set_decrypt_key
+	.rva	.LSEH_end_AES_set_decrypt_key
+	.rva	.LSEH_info_AES_set_decrypt_key
+
+	.rva	.LSEH_begin_AES_cbc_encrypt
+	.rva	.LSEH_end_AES_cbc_encrypt
+	.rva	.LSEH_info_AES_cbc_encrypt
+
+.section	.xdata
+.align	8
+.LSEH_info_AES_encrypt:
+	.byte	9,0,0,0
+	.rva	block_se_handler
+	.rva	.Lenc_prologue,.Lenc_epilogue	# HandlerData[]
+.LSEH_info_AES_decrypt:
+	.byte	9,0,0,0
+	.rva	block_se_handler
+	.rva	.Ldec_prologue,.Ldec_epilogue	# HandlerData[]
+.LSEH_info_AES_set_encrypt_key:
+	.byte	9,0,0,0
+	.rva	key_se_handler
+	.rva	.Lenc_key_prologue,.Lenc_key_epilogue	# HandlerData[]
+.LSEH_info_AES_set_decrypt_key:
+	.byte	9,0,0,0
+	.rva	key_se_handler
+	.rva	.Ldec_key_prologue,.Ldec_key_epilogue	# HandlerData[]
+.LSEH_info_AES_cbc_encrypt:
+	.byte	9,0,0,0
+	.rva	cbc_se_handler
+___
+}
+
+$code =~ s/\`([^\`]*)\`/eval($1)/gem;
+
+print $code;
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesfx-sparcv9.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesfx-sparcv9.pl
new file mode 100644
index 000000000..9ddf0b4b0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesfx-sparcv9.pl
@@ -0,0 +1,1270 @@
+#! /usr/bin/env perl
+# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# March 2016
+#
+# Initial support for Fujitsu SPARC64 X/X+ comprises minimally
+# required key setup and single-block procedures.
+#
+# April 2016
+#
+# Add "teaser" CBC and CTR mode-specific subroutines. "Teaser" means
+# that parallelizable nature of CBC decrypt and CTR is not utilized
+# yet. CBC encrypt on the other hand is as good as it can possibly
+# get processing one byte in 4.1 cycles with 128-bit key on SPARC64 X.
+# This is ~6x faster than pure software implementation...
+#
+# July 2016
+#
+# Switch from faligndata to fshiftorx, which allows to omit alignaddr
+# instructions and improve single-block and short-input performance
+# with misaligned data.
+
+$output = pop;
+open STDOUT,">$output";
+
+{
+my ($inp,$out,$key,$rounds,$tmp,$mask) = map("%o$_",(0..5));
+
+$code.=<<___;
+#include "sparc_arch.h"
+
+#define LOCALS (STACK_BIAS+STACK_FRAME)
+
+.text
+
+.globl	aes_fx_encrypt
+.align	32
+aes_fx_encrypt:
+	and		$inp, 7, $tmp		! is input aligned?
+	andn		$inp, 7, $inp
+	ldd		[$key +  0], %f6	! round[0]
+	ldd		[$key +  8], %f8
+	mov		%o7, %g1
+	ld		[$key + 240], $rounds
+
+1:	call		.+8
+	add		%o7, .Linp_align-1b, %o7
+
+	sll		$tmp, 3, $tmp
+	ldd		[$inp + 0], %f0		! load input
+	brz,pt		$tmp, .Lenc_inp_aligned
+	ldd		[$inp + 8], %f2
+
+	ldd		[%o7 + $tmp], %f14	! shift left params
+	ldd		[$inp + 16], %f4
+	fshiftorx	%f0, %f2, %f14, %f0
+	fshiftorx	%f2, %f4, %f14, %f2
+
+.Lenc_inp_aligned:
+	ldd		[$key + 16], %f10	! round[1]
+	ldd		[$key + 24], %f12
+
+	fxor		%f0, %f6, %f0		! ^=round[0]
+	fxor		%f2, %f8, %f2
+	ldd		[$key + 32], %f6	! round[2]
+	ldd		[$key + 40], %f8
+	add		$key, 32, $key
+	sub		$rounds, 4, $rounds
+
+.Loop_enc:
+	fmovd		%f0, %f4
+	faesencx	%f2, %f10, %f0
+	faesencx	%f4, %f12, %f2
+	ldd		[$key + 16], %f10
+	ldd		[$key + 24], %f12
+	add		$key, 32, $key
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f6, %f0
+	faesencx	%f4, %f8, %f2
+	ldd		[$key +  0], %f6
+	ldd		[$key +  8], %f8
+
+	brnz,a		$rounds, .Loop_enc
+	sub		$rounds, 2, $rounds
+
+	andcc		$out, 7, $tmp		! is output aligned?
+	andn		$out, 7, $out
+	mov		0xff, $mask
+	srl		$mask, $tmp, $mask
+	add		%o7, 64, %o7
+	sll		$tmp, 3, $tmp
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f10, %f0
+	faesencx	%f4, %f12, %f2
+	ldd		[%o7 + $tmp], %f14	! shift right params
+
+	fmovd		%f0, %f4
+	faesenclx	%f2, %f6, %f0
+	faesenclx	%f4, %f8, %f2
+
+	bnz,pn		%icc, .Lenc_out_unaligned
+	mov		%g1, %o7
+
+	std		%f0, [$out + 0]
+	retl
+	std		%f2, [$out + 8]
+
+.align	16
+.Lenc_out_unaligned:
+	add		$out, 16, $inp
+	orn		%g0, $mask, $tmp
+	fshiftorx	%f0, %f0, %f14, %f4
+	fshiftorx	%f0, %f2, %f14, %f6
+	fshiftorx	%f2, %f2, %f14, %f8
+
+	stda		%f4, [$out + $mask]0xc0	! partial store
+	std		%f6, [$out + 8]
+	stda		%f8, [$inp + $tmp]0xc0	! partial store
+	retl
+	nop
+.type	aes_fx_encrypt,#function
+.size	aes_fx_encrypt,.-aes_fx_encrypt
+
+.globl	aes_fx_decrypt
+.align	32
+aes_fx_decrypt:
+	and		$inp, 7, $tmp		! is input aligned?
+	andn		$inp, 7, $inp
+	ldd		[$key +  0], %f6	! round[0]
+	ldd		[$key +  8], %f8
+	mov		%o7, %g1
+	ld		[$key + 240], $rounds
+
+1:	call		.+8
+	add		%o7, .Linp_align-1b, %o7
+
+	sll		$tmp, 3, $tmp
+	ldd		[$inp + 0], %f0		! load input
+	brz,pt		$tmp, .Ldec_inp_aligned
+	ldd		[$inp + 8], %f2
+
+	ldd		[%o7 + $tmp], %f14	! shift left params
+	ldd		[$inp + 16], %f4
+	fshiftorx	%f0, %f2, %f14, %f0
+	fshiftorx	%f2, %f4, %f14, %f2
+
+.Ldec_inp_aligned:
+	ldd		[$key + 16], %f10	! round[1]
+	ldd		[$key + 24], %f12
+
+	fxor		%f0, %f6, %f0		! ^=round[0]
+	fxor		%f2, %f8, %f2
+	ldd		[$key + 32], %f6	! round[2]
+	ldd		[$key + 40], %f8
+	add		$key, 32, $key
+	sub		$rounds, 4, $rounds
+
+.Loop_dec:
+	fmovd		%f0, %f4
+	faesdecx	%f2, %f10, %f0
+	faesdecx	%f4, %f12, %f2
+	ldd		[$key + 16], %f10
+	ldd		[$key + 24], %f12
+	add		$key, 32, $key
+
+	fmovd		%f0, %f4
+	faesdecx	%f2, %f6, %f0
+	faesdecx	%f4, %f8, %f2
+	ldd		[$key +  0], %f6
+	ldd		[$key +  8], %f8
+
+	brnz,a		$rounds, .Loop_dec
+	sub		$rounds, 2, $rounds
+
+	andcc		$out, 7, $tmp		! is output aligned?
+	andn		$out, 7, $out
+	mov		0xff, $mask
+	srl		$mask, $tmp, $mask
+	add		%o7, 64, %o7
+	sll		$tmp, 3, $tmp
+
+	fmovd		%f0, %f4
+	faesdecx	%f2, %f10, %f0
+	faesdecx	%f4, %f12, %f2
+	ldd		[%o7 + $tmp], %f14	! shift right params
+
+	fmovd		%f0, %f4
+	faesdeclx	%f2, %f6, %f0
+	faesdeclx	%f4, %f8, %f2
+
+	bnz,pn		%icc, .Ldec_out_unaligned
+	mov		%g1, %o7
+
+	std		%f0, [$out + 0]
+	retl
+	std		%f2, [$out + 8]
+
+.align	16
+.Ldec_out_unaligned:
+	add		$out, 16, $inp
+	orn		%g0, $mask, $tmp
+	fshiftorx	%f0, %f0, %f14, %f4
+	fshiftorx	%f0, %f2, %f14, %f6
+	fshiftorx	%f2, %f2, %f14, %f8
+
+	stda		%f4, [$out + $mask]0xc0	! partial store
+	std		%f6, [$out + 8]
+	stda		%f8, [$inp + $tmp]0xc0	! partial store
+	retl
+	nop
+.type	aes_fx_decrypt,#function
+.size	aes_fx_decrypt,.-aes_fx_decrypt
+___
+}
+{
+my ($inp,$bits,$out,$tmp,$inc) = map("%o$_",(0..5));
+$code.=<<___;
+.globl	aes_fx_set_decrypt_key
+.align	32
+aes_fx_set_decrypt_key:
+	b		.Lset_encrypt_key
+	mov		-1, $inc
+	retl
+	nop
+.type	aes_fx_set_decrypt_key,#function
+.size	aes_fx_set_decrypt_key,.-aes_fx_set_decrypt_key
+
+.globl	aes_fx_set_encrypt_key
+.align	32
+aes_fx_set_encrypt_key:
+	mov		1, $inc
+	nop
+.Lset_encrypt_key:
+	and		$inp, 7, $tmp
+	andn		$inp, 7, $inp
+	sll		$tmp, 3, $tmp
+	mov		%o7, %g1
+
+1:	call		.+8
+	add		%o7, .Linp_align-1b, %o7
+
+	ldd		[%o7 + $tmp], %f10	! shift left params
+	mov		%g1, %o7
+
+	cmp		$bits, 192
+	ldd		[$inp + 0], %f0
+	bl,pt		%icc, .L128
+	ldd		[$inp + 8], %f2
+
+	be,pt		%icc, .L192
+	ldd		[$inp + 16], %f4
+	brz,pt		$tmp, .L256aligned
+	ldd		[$inp + 24], %f6
+
+	ldd		[$inp + 32], %f8
+	fshiftorx	%f0, %f2, %f10, %f0
+	fshiftorx	%f2, %f4, %f10, %f2
+	fshiftorx	%f4, %f6, %f10, %f4
+	fshiftorx	%f6, %f8, %f10, %f6
+
+.L256aligned:
+	mov		14, $bits
+	and		$inc, `14*16`, $tmp
+	st		$bits, [$out + 240]	! store rounds
+	add		$out, $tmp, $out	! start or end of key schedule
+	sllx		$inc, 4, $inc		! 16 or -16
+___
+for ($i=0; $i<6; $i++) {
+    $code.=<<___;
+	std		%f0, [$out + 0]
+	faeskeyx	%f6, `0x10+$i`, %f0
+	std		%f2, [$out + 8]
+	add		$out, $inc, $out
+	faeskeyx	%f0, 0x00, %f2
+	std		%f4, [$out + 0]
+	faeskeyx	%f2, 0x01, %f4
+	std		%f6, [$out + 8]
+	add		$out, $inc, $out
+	faeskeyx	%f4, 0x00, %f6
+___
+}
+$code.=<<___;
+	std		%f0, [$out + 0]
+	faeskeyx	%f6, `0x10+$i`, %f0
+	std		%f2, [$out + 8]
+	add		$out, $inc, $out
+	faeskeyx	%f0, 0x00, %f2
+	std		%f4,[$out + 0]
+	std		%f6,[$out + 8]
+	add		$out, $inc, $out
+	std		%f0,[$out + 0]
+	std		%f2,[$out + 8]
+	retl
+	xor		%o0, %o0, %o0		! return 0
+
+.align	16
+.L192:
+	brz,pt		$tmp, .L192aligned
+	nop
+
+	ldd		[$inp + 24], %f6
+	fshiftorx	%f0, %f2, %f10, %f0
+	fshiftorx	%f2, %f4, %f10, %f2
+	fshiftorx	%f4, %f6, %f10, %f4
+
+.L192aligned:
+	mov		12, $bits
+	and		$inc, `12*16`, $tmp
+	st		$bits, [$out + 240]	! store rounds
+	add		$out, $tmp, $out	! start or end of key schedule
+	sllx		$inc, 4, $inc		! 16 or -16
+___
+for ($i=0; $i<8; $i+=2) {
+    $code.=<<___;
+	std		%f0, [$out + 0]
+	faeskeyx	%f4, `0x10+$i`, %f0
+	std		%f2, [$out + 8]
+	add		$out, $inc, $out
+	faeskeyx	%f0, 0x00, %f2
+	std		%f4, [$out + 0]
+	faeskeyx	%f2, 0x00, %f4
+	std		%f0, [$out + 8]
+	add		$out, $inc, $out
+	faeskeyx	%f4, `0x10+$i+1`, %f0
+	std		%f2, [$out + 0]
+	faeskeyx	%f0, 0x00, %f2
+	std		%f4, [$out + 8]
+	add		$out, $inc, $out
+___
+$code.=<<___		if ($i<6);
+	faeskeyx	%f2, 0x00, %f4
+___
+}
+$code.=<<___;
+	std		%f0, [$out + 0]
+	std		%f2, [$out + 8]
+	retl
+	xor		%o0, %o0, %o0		! return 0
+
+.align	16
+.L128:
+	brz,pt		$tmp, .L128aligned
+	nop
+
+	ldd		[$inp + 16], %f4
+	fshiftorx	%f0, %f2, %f10, %f0
+	fshiftorx	%f2, %f4, %f10, %f2
+
+.L128aligned:
+	mov		10, $bits
+	and		$inc, `10*16`, $tmp
+	st		$bits, [$out + 240]	! store rounds
+	add		$out, $tmp, $out	! start or end of key schedule
+	sllx		$inc, 4, $inc		! 16 or -16
+___
+for ($i=0; $i<10; $i++) {
+    $code.=<<___;
+	std		%f0, [$out + 0]
+	faeskeyx	%f2, `0x10+$i`, %f0
+	std		%f2, [$out + 8]
+	add		$out, $inc, $out
+	faeskeyx	%f0, 0x00, %f2
+___
+}
+$code.=<<___;
+	std		%f0, [$out + 0]
+	std		%f2, [$out + 8]
+	retl
+	xor		%o0, %o0, %o0		! return 0
+.type	aes_fx_set_encrypt_key,#function
+.size	aes_fx_set_encrypt_key,.-aes_fx_set_encrypt_key
+___
+}
+{
+my ($inp,$out,$len,$key,$ivp,$dir) = map("%i$_",(0..5));
+my ($rounds,$inner,$end,$inc,$ialign,$oalign,$mask) = map("%l$_",(0..7));
+my ($iv0,$iv1,$r0hi,$r0lo,$rlhi,$rllo,$in0,$in1,$intail,$outhead,$fshift)
+   = map("%f$_",grep { !($_ & 1) } (16 .. 62));
+my ($ileft,$iright) = ($ialign,$oalign);
+
+$code.=<<___;
+.globl	aes_fx_cbc_encrypt
+.align	32
+aes_fx_cbc_encrypt:
+	save		%sp, -STACK_FRAME-16, %sp
+	srln		$len, 4, $len
+	and		$inp, 7, $ialign
+	andn		$inp, 7, $inp
+	brz,pn		$len, .Lcbc_no_data
+	sll		$ialign, 3, $ileft
+
+1:	call		.+8
+	add		%o7, .Linp_align-1b, %o7
+
+	ld		[$key + 240], $rounds
+	and		$out, 7, $oalign
+	ld		[$ivp + 0], %f0		! load ivec
+	andn		$out, 7, $out
+	ld		[$ivp + 4], %f1
+	sll		$oalign, 3, $mask
+	ld		[$ivp + 8], %f2
+	ld		[$ivp + 12], %f3
+
+	sll		$rounds, 4, $rounds
+	add		$rounds, $key, $end
+	ldd		[$key + 0], $r0hi	! round[0]
+	ldd		[$key + 8], $r0lo
+
+	add		$inp, 16, $inp
+	sub		$len,  1, $len
+	ldd		[$end + 0], $rlhi	! round[last]
+	ldd		[$end + 8], $rllo
+
+	mov		16, $inc
+	movrz		$len, 0, $inc
+	ldd		[$key + 16], %f10	! round[1]
+	ldd		[$key + 24], %f12
+
+	ldd		[%o7 + $ileft], $fshift	! shift left params
+	add		%o7, 64, %o7
+	ldd		[$inp - 16], $in0	! load input
+	ldd		[$inp -  8], $in1
+	ldda		[$inp]0x82, $intail	! non-faulting load
+	brz		$dir, .Lcbc_decrypt
+	add		$inp, $inc, $inp	! inp+=16
+
+	fxor		$r0hi, %f0, %f0		! ivec^=round[0]
+	fxor		$r0lo, %f2, %f2
+	fshiftorx	$in0, $in1, $fshift, $in0
+	fshiftorx	$in1, $intail, $fshift, $in1
+	nop
+
+.Loop_cbc_enc:
+	fxor		$in0, %f0, %f0		! inp^ivec^round[0]
+	fxor		$in1, %f2, %f2
+	ldd		[$key + 32], %f6	! round[2]
+	ldd		[$key + 40], %f8
+	add		$key, 32, $end
+	sub		$rounds, 16*6, $inner
+
+.Lcbc_enc:
+	fmovd		%f0, %f4
+	faesencx	%f2, %f10, %f0
+	faesencx	%f4, %f12, %f2
+	ldd		[$end + 16], %f10
+	ldd		[$end + 24], %f12
+	add		$end, 32, $end
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f6, %f0
+	faesencx	%f4, %f8, %f2
+	ldd		[$end + 0], %f6
+	ldd		[$end + 8], %f8
+
+	brnz,a		$inner, .Lcbc_enc
+	sub		$inner, 16*2, $inner
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f10, %f0
+	faesencx	%f4, %f12, %f2
+	ldd		[$end + 16], %f10	! round[last-1]
+	ldd		[$end + 24], %f12
+
+	movrz		$len, 0, $inc
+	fmovd		$intail, $in0
+	ldd		[$inp - 8], $in1	! load next input block
+	ldda		[$inp]0x82, $intail	! non-faulting load
+	add		$inp, $inc, $inp	! inp+=16
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f6, %f0
+	faesencx	%f4, %f8, %f2
+
+	fshiftorx	$in0, $in1, $fshift, $in0
+	fshiftorx	$in1, $intail, $fshift, $in1
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f10, %f0
+	faesencx	%f4, %f12, %f2
+	ldd		[$key + 16], %f10	! round[1]
+	ldd		[$key + 24], %f12
+
+	fxor		$r0hi, $in0, $in0	! inp^=round[0]
+	fxor		$r0lo, $in1, $in1
+
+	fmovd		%f0, %f4
+	faesenclx	%f2, $rlhi, %f0
+	faesenclx	%f4, $rllo, %f2
+
+	brnz,pn		$oalign, .Lcbc_enc_unaligned_out
+	nop
+
+	std		%f0, [$out + 0]
+	std		%f2, [$out + 8]
+	add		$out, 16, $out
+
+	brnz,a		$len, .Loop_cbc_enc
+	sub		$len, 1, $len
+
+	st		%f0, [$ivp + 0]		! output ivec
+	st		%f1, [$ivp + 4]
+	st		%f2, [$ivp + 8]
+	st		%f3, [$ivp + 12]
+
+.Lcbc_no_data:
+	ret
+	restore
+
+.align	32
+.Lcbc_enc_unaligned_out:
+	ldd		[%o7 + $mask], $fshift	! shift right params
+	mov		0xff, $mask
+	srl		$mask, $oalign, $mask
+	sub		%g0, $ileft, $iright
+
+	fshiftorx	%f0, %f0, $fshift, %f6
+	fshiftorx	%f0, %f2, $fshift, %f8
+
+	stda		%f6, [$out + $mask]0xc0	! partial store
+	orn		%g0, $mask, $mask
+	std		%f8, [$out + 8]
+	add		$out, 16, $out
+	brz		$len, .Lcbc_enc_unaligned_out_done
+	sub		$len, 1, $len
+	b		.Loop_cbc_enc_unaligned_out
+	nop
+
+.align	32
+.Loop_cbc_enc_unaligned_out:
+	fmovd		%f2, $outhead
+	fxor		$in0, %f0, %f0		! inp^ivec^round[0]
+	fxor		$in1, %f2, %f2
+	ldd		[$key + 32], %f6	! round[2]
+	ldd		[$key + 40], %f8
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f10, %f0
+	faesencx	%f4, %f12, %f2
+	ldd		[$key + 48], %f10	! round[3]
+	ldd		[$key + 56], %f12
+
+	ldx		[$inp - 16], %o0
+	ldx		[$inp -  8], %o1
+	brz		$ileft, .Lcbc_enc_aligned_inp
+	movrz		$len, 0, $inc
+
+	ldx		[$inp], %o2
+	sllx		%o0, $ileft, %o0
+	srlx		%o1, $iright, %g1
+	sllx		%o1, $ileft, %o1
+	or		%g1, %o0, %o0
+	srlx		%o2, $iright, %o2
+	or		%o2, %o1, %o1
+
+.Lcbc_enc_aligned_inp:
+	fmovd		%f0, %f4
+	faesencx	%f2, %f6, %f0
+	faesencx	%f4, %f8, %f2
+	ldd		[$key + 64], %f6	! round[4]
+	ldd		[$key + 72], %f8
+	add		$key, 64, $end
+	sub		$rounds, 16*8, $inner
+
+	stx		%o0, [%sp + LOCALS + 0]
+	stx		%o1, [%sp + LOCALS + 8]
+	add		$inp, $inc, $inp	! inp+=16
+	nop
+
+.Lcbc_enc_unaligned:
+	fmovd		%f0, %f4
+	faesencx	%f2, %f10, %f0
+	faesencx	%f4, %f12, %f2
+	ldd		[$end + 16], %f10
+	ldd		[$end + 24], %f12
+	add		$end, 32, $end
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f6, %f0
+	faesencx	%f4, %f8, %f2
+	ldd		[$end + 0], %f6
+	ldd		[$end + 8], %f8
+
+	brnz,a		$inner, .Lcbc_enc_unaligned
+	sub		$inner, 16*2, $inner
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f10, %f0
+	faesencx	%f4, %f12, %f2
+	ldd		[$end + 16], %f10	! round[last-1]
+	ldd		[$end + 24], %f12
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f6, %f0
+	faesencx	%f4, %f8, %f2
+
+	ldd		[%sp + LOCALS + 0], $in0
+	ldd		[%sp + LOCALS + 8], $in1
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f10, %f0
+	faesencx	%f4, %f12, %f2
+	ldd		[$key + 16], %f10	! round[1]
+	ldd		[$key + 24], %f12
+
+	fxor		$r0hi, $in0, $in0	! inp^=round[0]
+	fxor		$r0lo, $in1, $in1
+
+	fmovd		%f0, %f4
+	faesenclx	%f2, $rlhi, %f0
+	faesenclx	%f4, $rllo, %f2
+
+	fshiftorx	$outhead, %f0, $fshift, %f6
+	fshiftorx	%f0, %f2, $fshift, %f8
+	std		%f6, [$out + 0]
+	std		%f8, [$out + 8]
+	add		$out, 16, $out
+
+	brnz,a		$len, .Loop_cbc_enc_unaligned_out
+	sub		$len, 1, $len
+
+.Lcbc_enc_unaligned_out_done:
+	fshiftorx	%f2, %f2, $fshift, %f8
+	stda		%f8, [$out + $mask]0xc0	! partial store
+
+	st		%f0, [$ivp + 0]		! output ivec
+	st		%f1, [$ivp + 4]
+	st		%f2, [$ivp + 8]
+	st		%f3, [$ivp + 12]
+
+	ret
+	restore
+
+.align	32
+.Lcbc_decrypt:
+	fshiftorx	$in0, $in1, $fshift, $in0
+	fshiftorx	$in1, $intail, $fshift, $in1
+	fmovd		%f0, $iv0
+	fmovd		%f2, $iv1
+
+.Loop_cbc_dec:
+	fxor		$in0, $r0hi, %f0	! inp^round[0]
+	fxor		$in1, $r0lo, %f2
+	ldd		[$key + 32], %f6	! round[2]
+	ldd		[$key + 40], %f8
+	add		$key, 32, $end
+	sub		$rounds, 16*6, $inner
+
+.Lcbc_dec:
+	fmovd		%f0, %f4
+	faesdecx	%f2, %f10, %f0
+	faesdecx	%f4, %f12, %f2
+	ldd		[$end + 16], %f10
+	ldd		[$end + 24], %f12
+	add		$end, 32, $end
+
+	fmovd		%f0, %f4
+	faesdecx	%f2, %f6, %f0
+	faesdecx	%f4, %f8, %f2
+	ldd		[$end + 0], %f6
+	ldd		[$end + 8], %f8
+
+	brnz,a		$inner, .Lcbc_dec
+	sub		$inner, 16*2, $inner
+
+	fmovd		%f0, %f4
+	faesdecx	%f2, %f10, %f0
+	faesdecx	%f4, %f12, %f2
+	ldd		[$end + 16], %f10	! round[last-1]
+	ldd		[$end + 24], %f12
+
+	fmovd		%f0, %f4
+	faesdecx	%f2, %f6, %f0
+	faesdecx	%f4, %f8, %f2
+	fxor		$iv0, $rlhi, %f6	! ivec^round[last]
+	fxor		$iv1, $rllo, %f8
+	fmovd		$in0, $iv0
+	fmovd		$in1, $iv1
+
+	movrz		$len, 0, $inc
+	fmovd		$intail, $in0
+	ldd		[$inp - 8], $in1	! load next input block
+	ldda		[$inp]0x82, $intail	! non-faulting load
+	add		$inp, $inc, $inp	! inp+=16
+
+	fmovd		%f0, %f4
+	faesdecx	%f2, %f10, %f0
+	faesdecx	%f4, %f12, %f2
+	ldd		[$key + 16], %f10	! round[1]
+	ldd		[$key + 24], %f12
+
+	fshiftorx	$in0, $in1, $fshift, $in0
+	fshiftorx	$in1, $intail, $fshift, $in1
+
+	fmovd		%f0, %f4
+	faesdeclx	%f2, %f6, %f0
+	faesdeclx	%f4, %f8, %f2
+
+	brnz,pn		$oalign, .Lcbc_dec_unaligned_out
+	nop
+
+	std		%f0, [$out + 0]
+	std		%f2, [$out + 8]
+	add		$out, 16, $out
+
+	brnz,a		$len, .Loop_cbc_dec
+	sub		$len, 1, $len
+
+	st		$iv0,    [$ivp + 0]	! output ivec
+	st		$iv0#lo, [$ivp + 4]
+	st		$iv1,    [$ivp + 8]
+	st		$iv1#lo, [$ivp + 12]
+
+	ret
+	restore
+
+.align	32
+.Lcbc_dec_unaligned_out:
+	ldd		[%o7 + $mask], $fshift	! shift right params
+	mov		0xff, $mask
+	srl		$mask, $oalign, $mask
+	sub		%g0, $ileft, $iright
+
+	fshiftorx	%f0, %f0, $fshift, %f6
+	fshiftorx	%f0, %f2, $fshift, %f8
+
+	stda		%f6, [$out + $mask]0xc0	! partial store
+	orn		%g0, $mask, $mask
+	std		%f8, [$out + 8]
+	add		$out, 16, $out
+	brz		$len, .Lcbc_dec_unaligned_out_done
+	sub		$len, 1, $len
+	b		.Loop_cbc_dec_unaligned_out
+	nop
+
+.align	32
+.Loop_cbc_dec_unaligned_out:
+	fmovd		%f2, $outhead
+	fxor		$in0, $r0hi, %f0	! inp^round[0]
+	fxor		$in1, $r0lo, %f2
+	ldd		[$key + 32], %f6	! round[2]
+	ldd		[$key + 40], %f8
+
+	fmovd		%f0, %f4
+	faesdecx	%f2, %f10, %f0
+	faesdecx	%f4, %f12, %f2
+	ldd		[$key + 48], %f10	! round[3]
+	ldd		[$key + 56], %f12
+
+	ldx		[$inp - 16], %o0
+	ldx		[$inp - 8], %o1
+	brz		$ileft, .Lcbc_dec_aligned_inp
+	movrz		$len, 0, $inc
+
+	ldx		[$inp], %o2
+	sllx		%o0, $ileft, %o0
+	srlx		%o1, $iright, %g1
+	sllx		%o1, $ileft, %o1
+	or		%g1, %o0, %o0
+	srlx		%o2, $iright, %o2
+	or		%o2, %o1, %o1
+
+.Lcbc_dec_aligned_inp:
+	fmovd		%f0, %f4
+	faesdecx	%f2, %f6, %f0
+	faesdecx	%f4, %f8, %f2
+	ldd		[$key + 64], %f6	! round[4]
+	ldd		[$key + 72], %f8
+	add		$key, 64, $end
+	sub		$rounds, 16*8, $inner
+
+	stx		%o0, [%sp + LOCALS + 0]
+	stx		%o1, [%sp + LOCALS + 8]
+	add		$inp, $inc, $inp	! inp+=16
+	nop
+
+.Lcbc_dec_unaligned:
+	fmovd		%f0, %f4
+	faesdecx	%f2, %f10, %f0
+	faesdecx	%f4, %f12, %f2
+	ldd		[$end + 16], %f10
+	ldd		[$end + 24], %f12
+	add		$end, 32, $end
+
+	fmovd		%f0, %f4
+	faesdecx	%f2, %f6, %f0
+	faesdecx	%f4, %f8, %f2
+	ldd		[$end + 0], %f6
+	ldd		[$end + 8], %f8
+
+	brnz,a		$inner, .Lcbc_dec_unaligned
+	sub		$inner, 16*2, $inner
+
+	fmovd		%f0, %f4
+	faesdecx	%f2, %f10, %f0
+	faesdecx	%f4, %f12, %f2
+	ldd		[$end + 16], %f10	! round[last-1]
+	ldd		[$end + 24], %f12
+
+	fmovd		%f0, %f4
+	faesdecx	%f2, %f6, %f0
+	faesdecx	%f4, %f8, %f2
+
+	fxor		$iv0, $rlhi, %f6	! ivec^round[last]
+	fxor		$iv1, $rllo, %f8
+	fmovd		$in0, $iv0
+	fmovd		$in1, $iv1
+	ldd		[%sp + LOCALS + 0], $in0
+	ldd		[%sp + LOCALS + 8], $in1
+
+	fmovd		%f0, %f4
+	faesdecx	%f2, %f10, %f0
+	faesdecx	%f4, %f12, %f2
+	ldd		[$key + 16], %f10	! round[1]
+	ldd		[$key + 24], %f12
+
+	fmovd		%f0, %f4
+	faesdeclx	%f2, %f6, %f0
+	faesdeclx	%f4, %f8, %f2
+
+	fshiftorx	$outhead, %f0, $fshift, %f6
+	fshiftorx	%f0, %f2, $fshift, %f8
+	std		%f6, [$out + 0]
+	std		%f8, [$out + 8]
+	add		$out, 16, $out
+
+	brnz,a		$len, .Loop_cbc_dec_unaligned_out
+	sub		$len, 1, $len
+
+.Lcbc_dec_unaligned_out_done:
+	fshiftorx	%f2, %f2, $fshift, %f8
+	stda		%f8, [$out + $mask]0xc0	! partial store
+
+	st		$iv0,    [$ivp + 0]	! output ivec
+	st		$iv0#lo, [$ivp + 4]
+	st		$iv1,    [$ivp + 8]
+	st		$iv1#lo, [$ivp + 12]
+
+	ret
+	restore
+.type	aes_fx_cbc_encrypt,#function
+.size	aes_fx_cbc_encrypt,.-aes_fx_cbc_encrypt
+___
+}
+{
+my ($inp,$out,$len,$key,$ivp) = map("%i$_",(0..5));
+my ($rounds,$inner,$end,$inc,$ialign,$oalign,$mask) = map("%l$_",(0..7));
+my ($ctr0,$ctr1,$r0hi,$r0lo,$rlhi,$rllo,$in0,$in1,$intail,$outhead,$fshift)
+   = map("%f$_",grep { !($_ & 1) } (16 .. 62));
+my ($ileft,$iright) = ($ialign, $oalign);
+my $one = "%f14";
+
+$code.=<<___;
+.globl	aes_fx_ctr32_encrypt_blocks
+.align	32
+aes_fx_ctr32_encrypt_blocks:
+	save		%sp, -STACK_FRAME-16, %sp
+	srln		$len, 0, $len
+	and		$inp, 7, $ialign
+	andn		$inp, 7, $inp
+	brz,pn		$len, .Lctr32_no_data
+	sll		$ialign, 3, $ileft
+
+.Lpic:	call		.+8
+	add		%o7, .Linp_align - .Lpic, %o7
+
+	ld		[$key + 240], $rounds
+	and		$out, 7, $oalign
+	ld		[$ivp +  0], $ctr0	! load counter
+	andn		$out, 7, $out
+	ld		[$ivp +  4], $ctr0#lo
+	sll		$oalign, 3, $mask
+	ld		[$ivp +  8], $ctr1
+	ld		[$ivp + 12], $ctr1#lo
+	ldd		[%o7 + 128], $one
+
+	sll		$rounds, 4, $rounds
+	add		$rounds, $key, $end
+	ldd		[$key + 0], $r0hi	! round[0]
+	ldd		[$key + 8], $r0lo
+
+	add		$inp, 16, $inp
+	sub		$len, 1, $len
+	ldd		[$key + 16], %f10	! round[1]
+	ldd		[$key + 24], %f12
+
+	mov		16, $inc
+	movrz		$len, 0, $inc
+	ldd		[$end + 0], $rlhi	! round[last]
+	ldd		[$end + 8], $rllo
+
+	ldd		[%o7 + $ileft], $fshift	! shiftleft params
+	add		%o7, 64, %o7
+	ldd		[$inp - 16], $in0	! load input
+	ldd		[$inp -  8], $in1
+	ldda		[$inp]0x82, $intail	! non-faulting load
+	add		$inp, $inc, $inp	! inp+=16
+
+	fshiftorx	$in0, $in1, $fshift, $in0
+	fshiftorx	$in1, $intail, $fshift, $in1
+
+.Loop_ctr32:
+	fxor		$ctr0, $r0hi, %f0	! counter^round[0]
+	fxor		$ctr1, $r0lo, %f2
+	ldd		[$key + 32], %f6	! round[2]
+	ldd		[$key + 40], %f8
+	add		$key, 32, $end
+	sub		$rounds, 16*6, $inner
+
+.Lctr32_enc:
+	fmovd		%f0, %f4
+	faesencx	%f2, %f10, %f0
+	faesencx	%f4, %f12, %f2
+	ldd		[$end + 16], %f10
+	ldd		[$end + 24], %f12
+	add		$end, 32, $end
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f6, %f0
+	faesencx	%f4, %f8, %f2
+	ldd		[$end + 0], %f6
+	ldd		[$end + 8], %f8
+
+	brnz,a		$inner, .Lctr32_enc
+	sub		$inner, 16*2, $inner
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f10, %f0
+	faesencx	%f4, %f12, %f2
+	ldd		[$end + 16], %f10	! round[last-1]
+	ldd		[$end + 24], %f12
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f6, %f0
+	faesencx	%f4, %f8, %f2
+	fxor		$in0, $rlhi, %f6	! inp^round[last]
+	fxor		$in1, $rllo, %f8
+
+	movrz		$len, 0, $inc
+	fmovd		$intail, $in0
+	ldd		[$inp - 8], $in1	! load next input block
+	ldda		[$inp]0x82, $intail	! non-faulting load
+	add		$inp, $inc, $inp	! inp+=16
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f10, %f0
+	faesencx	%f4, %f12, %f2
+	ldd		[$key + 16], %f10	! round[1]
+	ldd		[$key + 24], %f12
+
+	fshiftorx	$in0, $in1, $fshift, $in0
+	fshiftorx	$in1, $intail, $fshift, $in1
+	fpadd32		$ctr1, $one, $ctr1	! increment counter
+
+	fmovd		%f0, %f4
+	faesenclx	%f2, %f6, %f0
+	faesenclx	%f4, %f8, %f2
+
+	brnz,pn		$oalign, .Lctr32_unaligned_out
+	nop
+
+	std		%f0, [$out + 0]
+	std		%f2, [$out + 8]
+	add		$out, 16, $out
+
+	brnz,a		$len, .Loop_ctr32
+	sub		$len, 1, $len
+
+.Lctr32_no_data:
+	ret
+	restore
+
+.align	32
+.Lctr32_unaligned_out:
+	ldd		[%o7 + $mask], $fshift	! shift right params
+	mov		0xff, $mask
+	srl		$mask, $oalign, $mask
+	sub		%g0, $ileft, $iright
+
+	fshiftorx	%f0, %f0, $fshift, %f6
+	fshiftorx	%f0, %f2, $fshift, %f8
+
+	stda		%f6, [$out + $mask]0xc0	! partial store
+	orn		%g0, $mask, $mask
+	std		%f8, [$out + 8]
+	add		$out, 16, $out
+	brz		$len, .Lctr32_unaligned_out_done
+	sub		$len, 1, $len
+	b		.Loop_ctr32_unaligned_out
+	nop
+
+.align	32
+.Loop_ctr32_unaligned_out:
+	fmovd		%f2, $outhead
+	fxor		$ctr0, $r0hi, %f0	! counter^round[0]
+	fxor		$ctr1, $r0lo, %f2
+	ldd		[$key + 32], %f6	! round[2]
+	ldd		[$key + 40], %f8
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f10, %f0
+	faesencx	%f4, %f12, %f2
+	ldd		[$key + 48], %f10	! round[3]
+	ldd		[$key + 56], %f12
+
+	ldx		[$inp - 16], %o0
+	ldx		[$inp -  8], %o1
+	brz		$ileft, .Lctr32_aligned_inp
+	movrz		$len, 0, $inc
+
+	ldx		[$inp], %o2
+	sllx		%o0, $ileft, %o0
+	srlx		%o1, $iright, %g1
+	sllx		%o1, $ileft, %o1
+	or		%g1, %o0, %o0
+	srlx		%o2, $iright, %o2
+	or		%o2, %o1, %o1
+
+.Lctr32_aligned_inp:
+	fmovd		%f0, %f4
+	faesencx	%f2, %f6, %f0
+	faesencx	%f4, %f8, %f2
+	ldd		[$key + 64], %f6	! round[4]
+	ldd		[$key + 72], %f8
+	add		$key, 64, $end
+	sub		$rounds, 16*8, $inner
+
+	stx		%o0, [%sp + LOCALS + 0]
+	stx		%o1, [%sp + LOCALS + 8]
+	add		$inp, $inc, $inp	! inp+=16
+	nop
+
+.Lctr32_enc_unaligned:
+	fmovd		%f0, %f4
+	faesencx	%f2, %f10, %f0
+	faesencx	%f4, %f12, %f2
+	ldd		[$end + 16], %f10
+	ldd		[$end + 24], %f12
+	add		$end, 32, $end
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f6, %f0
+	faesencx	%f4, %f8, %f2
+	ldd		[$end + 0], %f6
+	ldd		[$end + 8], %f8
+
+	brnz,a		$inner, .Lctr32_enc_unaligned
+	sub		$inner, 16*2, $inner
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f10, %f0
+	faesencx	%f4, %f12, %f2
+	ldd		[$end + 16], %f10	! round[last-1]
+	ldd		[$end + 24], %f12
+	fpadd32		$ctr1, $one, $ctr1	! increment counter
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f6, %f0
+	faesencx	%f4, %f8, %f2
+	fxor		$in0, $rlhi, %f6	! inp^round[last]
+	fxor		$in1, $rllo, %f8
+	ldd		[%sp + LOCALS + 0], $in0
+	ldd		[%sp + LOCALS + 8], $in1
+
+	fmovd		%f0, %f4
+	faesencx	%f2, %f10, %f0
+	faesencx	%f4, %f12, %f2
+	ldd		[$key + 16], %f10	! round[1]
+	ldd		[$key + 24], %f12
+
+	fmovd		%f0, %f4
+	faesenclx	%f2, %f6, %f0
+	faesenclx	%f4, %f8, %f2
+
+	fshiftorx	$outhead, %f0, $fshift, %f6
+	fshiftorx	%f0, %f2, $fshift, %f8
+	std		%f6, [$out + 0]
+	std		%f8, [$out + 8]
+	add		$out, 16, $out
+
+	brnz,a		$len, .Loop_ctr32_unaligned_out
+	sub		$len, 1, $len
+
+.Lctr32_unaligned_out_done:
+	fshiftorx	%f2, %f2, $fshift, %f8
+	stda		%f8, [$out + $mask]0xc0	! partial store
+
+	ret
+	restore
+.type	aes_fx_ctr32_encrypt_blocks,#function
+.size	aes_fx_ctr32_encrypt_blocks,.-aes_fx_ctr32_encrypt_blocks
+
+.align	32
+.Linp_align:		! fshiftorx parameters for left shift toward %rs1
+	.byte	0, 0, 64,  0,	0, 64,  0, -64
+	.byte	0, 0, 56,  8,	0, 56,  8, -56
+	.byte	0, 0, 48, 16,	0, 48, 16, -48
+	.byte	0, 0, 40, 24,	0, 40, 24, -40
+	.byte	0, 0, 32, 32,	0, 32, 32, -32
+	.byte	0, 0, 24, 40,	0, 24, 40, -24
+	.byte	0, 0, 16, 48,	0, 16, 48, -16
+	.byte	0, 0,  8, 56,	0,  8, 56, -8
+.Lout_align:		! fshiftorx parameters for right shift toward %rs2
+	.byte	0, 0,  0, 64,	0,  0, 64,   0
+	.byte	0, 0,  8, 56,	0,  8, 56,  -8
+	.byte	0, 0, 16, 48,	0, 16, 48, -16
+	.byte	0, 0, 24, 40,	0, 24, 40, -24
+	.byte	0, 0, 32, 32,	0, 32, 32, -32
+	.byte	0, 0, 40, 24,	0, 40, 24, -40
+	.byte	0, 0, 48, 16,	0, 48, 16, -48
+	.byte	0, 0, 56,  8,	0, 56,  8, -56
+.Lone:
+	.word	0, 1
+.asciz	"AES for Fujitsu SPARC64 X, CRYPTOGAMS by <appro\@openssl.org>"
+.align	4
+___
+}
+# Purpose of these subroutines is to explicitly encode VIS instructions,
+# so that one can compile the module without having to specify VIS
+# extensions on compiler command line, e.g. -xarch=v9 vs. -xarch=v9a.
+# Idea is to reserve for option to produce "universal" binary and let
+# programmer detect if current CPU is VIS capable at run-time.
+sub unvis {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my ($ref,$opf);
+my %visopf = (	"faligndata"	=> 0x048,
+		"bshuffle"	=> 0x04c,
+		"fpadd32"	=> 0x052,
+		"fxor"		=> 0x06c,
+		"fsrc2"		=> 0x078	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rd";
+
+    if ($opf=$visopf{$mnemonic}) {
+	foreach ($rs1,$rs2,$rd) {
+	    return $ref if (!/%f([0-9]{1,2})/);
+	    $_=$1;
+	    if ($1>=32) {
+		return $ref if ($1&1);
+		# re-encode for upper double register addressing
+		$_=($1|$1>>5)&31;
+	    }
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			0x81b00000|$rd<<25|$rs1<<14|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+
+sub unvis3 {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my %bias = ( "g" => 0, "o" => 8, "l" => 16, "i" => 24 );
+my ($ref,$opf);
+my %visopf = (	"alignaddr"	=> 0x018,
+		"bmask"		=> 0x019,
+		"alignaddrl"	=> 0x01a	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rd";
+
+    if ($opf=$visopf{$mnemonic}) {
+	foreach ($rs1,$rs2,$rd) {
+	    return $ref if (!/%([goli])([0-9])/);
+	    $_=$bias{$1}+$2;
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			0x81b00000|$rd<<25|$rs1<<14|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+
+sub unfx {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my ($ref,$opf);
+my %aesopf = (	"faesencx"	=> 0x90,
+		"faesdecx"	=> 0x91,
+		"faesenclx"	=> 0x92,
+		"faesdeclx"	=> 0x93,
+		"faeskeyx"	=> 0x94	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rd";
+
+    if (defined($opf=$aesopf{$mnemonic})) {
+	$rs2 = ($rs2 =~ /%f([0-6]*[02468])/) ? (($1|$1>>5)&31) : $rs2;
+	$rs2 = oct($rs2) if ($rs2 =~ /^0/);
+
+	foreach ($rs1,$rd) {
+	    return $ref if (!/%f([0-9]{1,2})/);
+	    $_=$1;
+	    if ($1>=32) {
+		return $ref if ($1&1);
+		# re-encode for upper double register addressing
+		$_=($1|$1>>5)&31;
+	    }
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			2<<30|$rd<<25|0x36<<19|$rs1<<14|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+
+sub unfx3src {
+my ($mnemonic,$rs1,$rs2,$rs3,$rd)=@_;
+my ($ref,$opf);
+my %aesopf = (	"fshiftorx"	=> 0x0b	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rs3,$rd";
+
+    if (defined($opf=$aesopf{$mnemonic})) {
+	foreach ($rs1,$rs2,$rs3,$rd) {
+	    return $ref if (!/%f([0-9]{1,2})/);
+	    $_=$1;
+	    if ($1>=32) {
+		return $ref if ($1&1);
+		# re-encode for upper double register addressing
+		$_=($1|$1>>5)&31;
+	    }
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			2<<30|$rd<<25|0x37<<19|$rs1<<14|$rs3<<9|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+
+foreach (split("\n",$code)) {
+    s/\`([^\`]*)\`/eval $1/ge;
+
+    s/%f([0-9]+)#lo/sprintf "%%f%d",$1+1/ge;
+
+    s/\b(faes[^x]{3,4}x)\s+(%f[0-9]{1,2}),\s*([%fx0-9]+),\s*(%f[0-9]{1,2})/
+		&unfx($1,$2,$3,$4)
+     /ge or
+    s/\b([f][^\s]*)\s+(%f[0-9]{1,2}),\s*(%f[0-9]{1,2}),\s*(%f[0-9]{1,2}),\s*(%f[0-9]{1,2})/
+		&unfx3src($1,$2,$3,$4,$5)
+     /ge or
+    s/\b([fb][^\s]*)\s+(%f[0-9]{1,2}),\s*(%f[0-9]{1,2}),\s*(%f[0-9]{1,2})/
+		&unvis($1,$2,$3,$4)
+     /ge or
+    s/\b(alignaddr[l]*)\s+(%[goli][0-7]),\s*(%[goli][0-7]),\s*(%[goli][0-7])/
+		&unvis3($1,$2,$3,$4)
+     /ge;
+    print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-mb-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-mb-x86_64.pl
new file mode 100644
index 000000000..1f356d2d3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-mb-x86_64.pl
@@ -0,0 +1,1474 @@
+#! /usr/bin/env perl
+# Copyright 2013-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# Multi-buffer AES-NI procedures process several independent buffers
+# in parallel by interleaving independent instructions.
+#
+# Cycles per byte for interleave factor 4:
+#
+#			asymptotic	measured
+#			---------------------------
+# Westmere		5.00/4=1.25	5.13/4=1.28
+# Atom			15.0/4=3.75	?15.7/4=3.93
+# Sandy Bridge		5.06/4=1.27	5.18/4=1.29
+# Ivy Bridge		5.06/4=1.27	5.14/4=1.29
+# Haswell		4.44/4=1.11	4.44/4=1.11
+# Bulldozer		5.75/4=1.44	5.76/4=1.44
+#
+# Cycles per byte for interleave factor 8 (not implemented for
+# pre-AVX processors, where higher interleave factor incidentally
+# doesn't result in improvement):
+#
+#			asymptotic	measured
+#			---------------------------
+# Sandy Bridge		5.06/8=0.64	7.10/8=0.89(*)
+# Ivy Bridge		5.06/8=0.64	7.14/8=0.89(*)
+# Haswell		5.00/8=0.63	5.00/8=0.63
+# Bulldozer		5.75/8=0.72	5.77/8=0.72
+#
+# (*)	Sandy/Ivy Bridge are known to handle high interleave factors
+#	suboptimally;
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+$avx=0;
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.19) + ($1>=2.22);
+}
+
+if (!$avx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	   `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.09) + ($1>=2.10);
+}
+
+if (!$avx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	   `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$avx = ($1>=10) + ($1>=11);
+}
+
+if (!$avx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([3-9]\.[0-9]+)/) {
+	$avx = ($2>=3.0) + ($2>3.0);
+}
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+# void aesni_multi_cbc_encrypt (
+#     struct {	void *inp,*out; int blocks; double iv[2]; } inp[8];
+#     const AES_KEY *key,
+#     int num);		/* 1 or 2 */
+#
+$inp="%rdi";	# 1st arg
+$key="%rsi";	# 2nd arg
+$num="%edx";
+
+@inptr=map("%r$_",(8..11));
+@outptr=map("%r$_",(12..15));
+
+($rndkey0,$rndkey1)=("%xmm0","%xmm1");
+@out=map("%xmm$_",(2..5));
+@inp=map("%xmm$_",(6..9));
+($counters,$mask,$zero)=map("%xmm$_",(10..12));
+
+($rounds,$one,$sink,$offset)=("%eax","%ecx","%rbp","%rbx");
+
+$code.=<<___;
+.text
+
+.extern	OPENSSL_ia32cap_P
+
+.globl	aesni_multi_cbc_encrypt
+.type	aesni_multi_cbc_encrypt,\@function,3
+.align	32
+aesni_multi_cbc_encrypt:
+.cfi_startproc
+___
+$code.=<<___ if ($avx);
+	cmp	\$2,$num
+	jb	.Lenc_non_avx
+	mov	OPENSSL_ia32cap_P+4(%rip),%ecx
+	test	\$`1<<28`,%ecx			# AVX bit
+	jnz	_avx_cbc_enc_shortcut
+	jmp	.Lenc_non_avx
+.align	16
+.Lenc_non_avx:
+___
+$code.=<<___;
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+___
+$code.=<<___ if ($win64);
+	lea	-0xa8(%rsp),%rsp
+	movaps	%xmm6,(%rsp)
+	movaps	%xmm7,0x10(%rsp)
+	movaps	%xmm8,0x20(%rsp)
+	movaps	%xmm9,0x30(%rsp)
+	movaps	%xmm10,0x40(%rsp)
+	movaps	%xmm11,0x50(%rsp)
+	movaps	%xmm12,0x60(%rsp)
+	movaps	%xmm13,-0x68(%rax)	# not used, saved to share se_handler
+	movaps	%xmm14,-0x58(%rax)
+	movaps	%xmm15,-0x48(%rax)
+___
+$code.=<<___;
+	# stack layout
+	#
+	# +0	output sink
+	# +16	input sink [original %rsp and $num]
+	# +32	counters
+
+	sub	\$48,%rsp
+	and	\$-64,%rsp
+	mov	%rax,16(%rsp)			# original %rsp
+.cfi_cfa_expression	%rsp+16,deref,+8
+
+.Lenc4x_body:
+	movdqu	($key),$zero			# 0-round key
+	lea	0x78($key),$key			# size optimization
+	lea	40*2($inp),$inp
+
+.Lenc4x_loop_grande:
+	mov	$num,24(%rsp)			# original $num
+	xor	$num,$num
+___
+for($i=0;$i<4;$i++) {
+    $code.=<<___;
+	mov	`40*$i+16-40*2`($inp),$one	# borrow $one for number of blocks
+	mov	`40*$i+0-40*2`($inp),@inptr[$i]
+	cmp	$num,$one
+	mov	`40*$i+8-40*2`($inp),@outptr[$i]
+	cmovg	$one,$num			# find maximum
+	test	$one,$one
+	movdqu	`40*$i+24-40*2`($inp),@out[$i]	# load IV
+	mov	$one,`32+4*$i`(%rsp)		# initialize counters
+	cmovle	%rsp,@inptr[$i]			# cancel input
+___
+}
+$code.=<<___;
+	test	$num,$num
+	jz	.Lenc4x_done
+
+	movups	0x10-0x78($key),$rndkey1
+	 pxor	$zero,@out[0]
+	movups	0x20-0x78($key),$rndkey0
+	 pxor	$zero,@out[1]
+	mov	0xf0-0x78($key),$rounds
+	 pxor	$zero,@out[2]
+	movdqu	(@inptr[0]),@inp[0]		# load inputs
+	 pxor	$zero,@out[3]
+	movdqu	(@inptr[1]),@inp[1]
+	 pxor	@inp[0],@out[0]
+	movdqu	(@inptr[2]),@inp[2]
+	 pxor	@inp[1],@out[1]
+	movdqu	(@inptr[3]),@inp[3]
+	 pxor	@inp[2],@out[2]
+	 pxor	@inp[3],@out[3]
+	movdqa	32(%rsp),$counters		# load counters
+	xor	$offset,$offset
+	jmp	.Loop_enc4x
+
+.align	32
+.Loop_enc4x:
+	add	\$16,$offset
+	lea	16(%rsp),$sink			# sink pointer
+	mov	\$1,$one			# constant of 1
+	sub	$offset,$sink
+
+	aesenc		$rndkey1,@out[0]
+	prefetcht0	31(@inptr[0],$offset)	# prefetch input
+	prefetcht0	31(@inptr[1],$offset)
+	aesenc		$rndkey1,@out[1]
+	prefetcht0	31(@inptr[2],$offset)
+	prefetcht0	31(@inptr[2],$offset)
+	aesenc		$rndkey1,@out[2]
+	aesenc		$rndkey1,@out[3]
+	movups		0x30-0x78($key),$rndkey1
+___
+for($i=0;$i<4;$i++) {
+my $rndkey = ($i&1) ? $rndkey1 : $rndkey0;
+$code.=<<___;
+	 cmp		`32+4*$i`(%rsp),$one
+	aesenc		$rndkey,@out[0]
+	aesenc		$rndkey,@out[1]
+	aesenc		$rndkey,@out[2]
+	 cmovge		$sink,@inptr[$i]	# cancel input
+	 cmovg		$sink,@outptr[$i]	# sink output
+	aesenc		$rndkey,@out[3]
+	movups		`0x40+16*$i-0x78`($key),$rndkey
+___
+}
+$code.=<<___;
+	 movdqa		$counters,$mask
+	aesenc		$rndkey0,@out[0]
+	prefetcht0	15(@outptr[0],$offset)	# prefetch output
+	prefetcht0	15(@outptr[1],$offset)
+	aesenc		$rndkey0,@out[1]
+	prefetcht0	15(@outptr[2],$offset)
+	prefetcht0	15(@outptr[3],$offset)
+	aesenc		$rndkey0,@out[2]
+	aesenc		$rndkey0,@out[3]
+	movups		0x80-0x78($key),$rndkey0
+	 pxor		$zero,$zero
+
+	aesenc		$rndkey1,@out[0]
+	 pcmpgtd	$zero,$mask
+	 movdqu		-0x78($key),$zero	# reload 0-round key
+	aesenc		$rndkey1,@out[1]
+	 paddd		$mask,$counters		# decrement counters
+	 movdqa		$counters,32(%rsp)	# update counters
+	aesenc		$rndkey1,@out[2]
+	aesenc		$rndkey1,@out[3]
+	movups		0x90-0x78($key),$rndkey1
+
+	cmp	\$11,$rounds
+
+	aesenc		$rndkey0,@out[0]
+	aesenc		$rndkey0,@out[1]
+	aesenc		$rndkey0,@out[2]
+	aesenc		$rndkey0,@out[3]
+	movups		0xa0-0x78($key),$rndkey0
+
+	jb	.Lenc4x_tail
+
+	aesenc		$rndkey1,@out[0]
+	aesenc		$rndkey1,@out[1]
+	aesenc		$rndkey1,@out[2]
+	aesenc		$rndkey1,@out[3]
+	movups		0xb0-0x78($key),$rndkey1
+
+	aesenc		$rndkey0,@out[0]
+	aesenc		$rndkey0,@out[1]
+	aesenc		$rndkey0,@out[2]
+	aesenc		$rndkey0,@out[3]
+	movups		0xc0-0x78($key),$rndkey0
+
+	je	.Lenc4x_tail
+
+	aesenc		$rndkey1,@out[0]
+	aesenc		$rndkey1,@out[1]
+	aesenc		$rndkey1,@out[2]
+	aesenc		$rndkey1,@out[3]
+	movups		0xd0-0x78($key),$rndkey1
+
+	aesenc		$rndkey0,@out[0]
+	aesenc		$rndkey0,@out[1]
+	aesenc		$rndkey0,@out[2]
+	aesenc		$rndkey0,@out[3]
+	movups		0xe0-0x78($key),$rndkey0
+	jmp	.Lenc4x_tail
+
+.align	32
+.Lenc4x_tail:
+	aesenc		$rndkey1,@out[0]
+	aesenc		$rndkey1,@out[1]
+	aesenc		$rndkey1,@out[2]
+	aesenc		$rndkey1,@out[3]
+	 movdqu		(@inptr[0],$offset),@inp[0]
+	movdqu		0x10-0x78($key),$rndkey1
+
+	aesenclast	$rndkey0,@out[0]
+	 movdqu		(@inptr[1],$offset),@inp[1]
+	 pxor		$zero,@inp[0]
+	aesenclast	$rndkey0,@out[1]
+	 movdqu		(@inptr[2],$offset),@inp[2]
+	 pxor		$zero,@inp[1]
+	aesenclast	$rndkey0,@out[2]
+	 movdqu		(@inptr[3],$offset),@inp[3]
+	 pxor		$zero,@inp[2]
+	aesenclast	$rndkey0,@out[3]
+	movdqu		0x20-0x78($key),$rndkey0
+	 pxor		$zero,@inp[3]
+
+	movups		@out[0],-16(@outptr[0],$offset)
+	 pxor		@inp[0],@out[0]
+	movups		@out[1],-16(@outptr[1],$offset)
+	 pxor		@inp[1],@out[1]
+	movups		@out[2],-16(@outptr[2],$offset)
+	 pxor		@inp[2],@out[2]
+	movups		@out[3],-16(@outptr[3],$offset)
+	 pxor		@inp[3],@out[3]
+
+	dec	$num
+	jnz	.Loop_enc4x
+
+	mov	16(%rsp),%rax			# original %rsp
+.cfi_def_cfa	%rax,8
+	mov	24(%rsp),$num
+
+	#pxor	@inp[0],@out[0]
+	#pxor	@inp[1],@out[1]
+	#movdqu	@out[0],`40*0+24-40*2`($inp)	# output iv FIX ME!
+	#pxor	@inp[2],@out[2]
+	#movdqu	@out[1],`40*1+24-40*2`($inp)
+	#pxor	@inp[3],@out[3]
+	#movdqu	@out[2],`40*2+24-40*2`($inp)	# won't fix, let caller
+	#movdqu	@out[3],`40*3+24-40*2`($inp)	# figure this out...
+
+	lea	`40*4`($inp),$inp
+	dec	$num
+	jnz	.Lenc4x_loop_grande
+
+.Lenc4x_done:
+___
+$code.=<<___ if ($win64);
+	movaps	-0xd8(%rax),%xmm6
+	movaps	-0xc8(%rax),%xmm7
+	movaps	-0xb8(%rax),%xmm8
+	movaps	-0xa8(%rax),%xmm9
+	movaps	-0x98(%rax),%xmm10
+	movaps	-0x88(%rax),%xmm11
+	movaps	-0x78(%rax),%xmm12
+	#movaps	-0x68(%rax),%xmm13
+	#movaps	-0x58(%rax),%xmm14
+	#movaps	-0x48(%rax),%xmm15
+___
+$code.=<<___;
+	mov	-48(%rax),%r15
+.cfi_restore	%r15
+	mov	-40(%rax),%r14
+.cfi_restore	%r14
+	mov	-32(%rax),%r13
+.cfi_restore	%r13
+	mov	-24(%rax),%r12
+.cfi_restore	%r12
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp
+.cfi_def_cfa_register	%rsp
+.Lenc4x_epilogue:
+	ret
+.cfi_endproc
+.size	aesni_multi_cbc_encrypt,.-aesni_multi_cbc_encrypt
+
+.globl	aesni_multi_cbc_decrypt
+.type	aesni_multi_cbc_decrypt,\@function,3
+.align	32
+aesni_multi_cbc_decrypt:
+.cfi_startproc
+___
+$code.=<<___ if ($avx);
+	cmp	\$2,$num
+	jb	.Ldec_non_avx
+	mov	OPENSSL_ia32cap_P+4(%rip),%ecx
+	test	\$`1<<28`,%ecx			# AVX bit
+	jnz	_avx_cbc_dec_shortcut
+	jmp	.Ldec_non_avx
+.align	16
+.Ldec_non_avx:
+___
+$code.=<<___;
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+___
+$code.=<<___ if ($win64);
+	lea	-0xa8(%rsp),%rsp
+	movaps	%xmm6,(%rsp)
+	movaps	%xmm7,0x10(%rsp)
+	movaps	%xmm8,0x20(%rsp)
+	movaps	%xmm9,0x30(%rsp)
+	movaps	%xmm10,0x40(%rsp)
+	movaps	%xmm11,0x50(%rsp)
+	movaps	%xmm12,0x60(%rsp)
+	movaps	%xmm13,-0x68(%rax)	# not used, saved to share se_handler
+	movaps	%xmm14,-0x58(%rax)
+	movaps	%xmm15,-0x48(%rax)
+___
+$code.=<<___;
+	# stack layout
+	#
+	# +0	output sink
+	# +16	input sink [original %rsp and $num]
+	# +32	counters
+
+	sub	\$48,%rsp
+	and	\$-64,%rsp
+	mov	%rax,16(%rsp)			# original %rsp
+.cfi_cfa_expression	%rsp+16,deref,+8
+
+.Ldec4x_body:
+	movdqu	($key),$zero			# 0-round key
+	lea	0x78($key),$key			# size optimization
+	lea	40*2($inp),$inp
+
+.Ldec4x_loop_grande:
+	mov	$num,24(%rsp)			# original $num
+	xor	$num,$num
+___
+for($i=0;$i<4;$i++) {
+    $code.=<<___;
+	mov	`40*$i+16-40*2`($inp),$one	# borrow $one for number of blocks
+	mov	`40*$i+0-40*2`($inp),@inptr[$i]
+	cmp	$num,$one
+	mov	`40*$i+8-40*2`($inp),@outptr[$i]
+	cmovg	$one,$num			# find maximum
+	test	$one,$one
+	movdqu	`40*$i+24-40*2`($inp),@inp[$i]	# load IV
+	mov	$one,`32+4*$i`(%rsp)		# initialize counters
+	cmovle	%rsp,@inptr[$i]			# cancel input
+___
+}
+$code.=<<___;
+	test	$num,$num
+	jz	.Ldec4x_done
+
+	movups	0x10-0x78($key),$rndkey1
+	movups	0x20-0x78($key),$rndkey0
+	mov	0xf0-0x78($key),$rounds
+	movdqu	(@inptr[0]),@out[0]		# load inputs
+	movdqu	(@inptr[1]),@out[1]
+	 pxor	$zero,@out[0]
+	movdqu	(@inptr[2]),@out[2]
+	 pxor	$zero,@out[1]
+	movdqu	(@inptr[3]),@out[3]
+	 pxor	$zero,@out[2]
+	 pxor	$zero,@out[3]
+	movdqa	32(%rsp),$counters		# load counters
+	xor	$offset,$offset
+	jmp	.Loop_dec4x
+
+.align	32
+.Loop_dec4x:
+	add	\$16,$offset
+	lea	16(%rsp),$sink			# sink pointer
+	mov	\$1,$one			# constant of 1
+	sub	$offset,$sink
+
+	aesdec		$rndkey1,@out[0]
+	prefetcht0	31(@inptr[0],$offset)	# prefetch input
+	prefetcht0	31(@inptr[1],$offset)
+	aesdec		$rndkey1,@out[1]
+	prefetcht0	31(@inptr[2],$offset)
+	prefetcht0	31(@inptr[3],$offset)
+	aesdec		$rndkey1,@out[2]
+	aesdec		$rndkey1,@out[3]
+	movups		0x30-0x78($key),$rndkey1
+___
+for($i=0;$i<4;$i++) {
+my $rndkey = ($i&1) ? $rndkey1 : $rndkey0;
+$code.=<<___;
+	 cmp		`32+4*$i`(%rsp),$one
+	aesdec		$rndkey,@out[0]
+	aesdec		$rndkey,@out[1]
+	aesdec		$rndkey,@out[2]
+	 cmovge		$sink,@inptr[$i]	# cancel input
+	 cmovg		$sink,@outptr[$i]	# sink output
+	aesdec		$rndkey,@out[3]
+	movups		`0x40+16*$i-0x78`($key),$rndkey
+___
+}
+$code.=<<___;
+	 movdqa		$counters,$mask
+	aesdec		$rndkey0,@out[0]
+	prefetcht0	15(@outptr[0],$offset)	# prefetch output
+	prefetcht0	15(@outptr[1],$offset)
+	aesdec		$rndkey0,@out[1]
+	prefetcht0	15(@outptr[2],$offset)
+	prefetcht0	15(@outptr[3],$offset)
+	aesdec		$rndkey0,@out[2]
+	aesdec		$rndkey0,@out[3]
+	movups		0x80-0x78($key),$rndkey0
+	 pxor		$zero,$zero
+
+	aesdec		$rndkey1,@out[0]
+	 pcmpgtd	$zero,$mask
+	 movdqu		-0x78($key),$zero	# reload 0-round key
+	aesdec		$rndkey1,@out[1]
+	 paddd		$mask,$counters		# decrement counters
+	 movdqa		$counters,32(%rsp)	# update counters
+	aesdec		$rndkey1,@out[2]
+	aesdec		$rndkey1,@out[3]
+	movups		0x90-0x78($key),$rndkey1
+
+	cmp	\$11,$rounds
+
+	aesdec		$rndkey0,@out[0]
+	aesdec		$rndkey0,@out[1]
+	aesdec		$rndkey0,@out[2]
+	aesdec		$rndkey0,@out[3]
+	movups		0xa0-0x78($key),$rndkey0
+
+	jb	.Ldec4x_tail
+
+	aesdec		$rndkey1,@out[0]
+	aesdec		$rndkey1,@out[1]
+	aesdec		$rndkey1,@out[2]
+	aesdec		$rndkey1,@out[3]
+	movups		0xb0-0x78($key),$rndkey1
+
+	aesdec		$rndkey0,@out[0]
+	aesdec		$rndkey0,@out[1]
+	aesdec		$rndkey0,@out[2]
+	aesdec		$rndkey0,@out[3]
+	movups		0xc0-0x78($key),$rndkey0
+
+	je	.Ldec4x_tail
+
+	aesdec		$rndkey1,@out[0]
+	aesdec		$rndkey1,@out[1]
+	aesdec		$rndkey1,@out[2]
+	aesdec		$rndkey1,@out[3]
+	movups		0xd0-0x78($key),$rndkey1
+
+	aesdec		$rndkey0,@out[0]
+	aesdec		$rndkey0,@out[1]
+	aesdec		$rndkey0,@out[2]
+	aesdec		$rndkey0,@out[3]
+	movups		0xe0-0x78($key),$rndkey0
+	jmp	.Ldec4x_tail
+
+.align	32
+.Ldec4x_tail:
+	aesdec		$rndkey1,@out[0]
+	aesdec		$rndkey1,@out[1]
+	aesdec		$rndkey1,@out[2]
+	 pxor		$rndkey0,@inp[0]
+	 pxor		$rndkey0,@inp[1]
+	aesdec		$rndkey1,@out[3]
+	movdqu		0x10-0x78($key),$rndkey1
+	 pxor		$rndkey0,@inp[2]
+	 pxor		$rndkey0,@inp[3]
+	movdqu		0x20-0x78($key),$rndkey0
+
+	aesdeclast	@inp[0],@out[0]
+	aesdeclast	@inp[1],@out[1]
+	 movdqu		-16(@inptr[0],$offset),@inp[0]	# load next IV
+	 movdqu		-16(@inptr[1],$offset),@inp[1]
+	aesdeclast	@inp[2],@out[2]
+	aesdeclast	@inp[3],@out[3]
+	 movdqu		-16(@inptr[2],$offset),@inp[2]
+	 movdqu		-16(@inptr[3],$offset),@inp[3]
+
+	movups		@out[0],-16(@outptr[0],$offset)
+	 movdqu		(@inptr[0],$offset),@out[0]
+	movups		@out[1],-16(@outptr[1],$offset)
+	 movdqu		(@inptr[1],$offset),@out[1]
+	 pxor		$zero,@out[0]
+	movups		@out[2],-16(@outptr[2],$offset)
+	 movdqu		(@inptr[2],$offset),@out[2]
+	 pxor		$zero,@out[1]
+	movups		@out[3],-16(@outptr[3],$offset)
+	 movdqu		(@inptr[3],$offset),@out[3]
+	 pxor		$zero,@out[2]
+	 pxor		$zero,@out[3]
+
+	dec	$num
+	jnz	.Loop_dec4x
+
+	mov	16(%rsp),%rax			# original %rsp
+.cfi_def_cfa	%rax,8
+	mov	24(%rsp),$num
+
+	lea	`40*4`($inp),$inp
+	dec	$num
+	jnz	.Ldec4x_loop_grande
+
+.Ldec4x_done:
+___
+$code.=<<___ if ($win64);
+	movaps	-0xd8(%rax),%xmm6
+	movaps	-0xc8(%rax),%xmm7
+	movaps	-0xb8(%rax),%xmm8
+	movaps	-0xa8(%rax),%xmm9
+	movaps	-0x98(%rax),%xmm10
+	movaps	-0x88(%rax),%xmm11
+	movaps	-0x78(%rax),%xmm12
+	#movaps	-0x68(%rax),%xmm13
+	#movaps	-0x58(%rax),%xmm14
+	#movaps	-0x48(%rax),%xmm15
+___
+$code.=<<___;
+	mov	-48(%rax),%r15
+.cfi_restore	%r15
+	mov	-40(%rax),%r14
+.cfi_restore	%r14
+	mov	-32(%rax),%r13
+.cfi_restore	%r13
+	mov	-24(%rax),%r12
+.cfi_restore	%r12
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp
+.cfi_def_cfa_register	%rsp
+.Ldec4x_epilogue:
+	ret
+.cfi_endproc
+.size	aesni_multi_cbc_decrypt,.-aesni_multi_cbc_decrypt
+___
+
+						if ($avx) {{{
+my @ptr=map("%r$_",(8..15));
+my $offload=$sink;
+
+my @out=map("%xmm$_",(2..9));
+my @inp=map("%xmm$_",(10..13));
+my ($counters,$zero)=("%xmm14","%xmm15");
+
+$code.=<<___;
+.type	aesni_multi_cbc_encrypt_avx,\@function,3
+.align	32
+aesni_multi_cbc_encrypt_avx:
+.cfi_startproc
+_avx_cbc_enc_shortcut:
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+___
+$code.=<<___ if ($win64);
+	lea	-0xa8(%rsp),%rsp
+	movaps	%xmm6,(%rsp)
+	movaps	%xmm7,0x10(%rsp)
+	movaps	%xmm8,0x20(%rsp)
+	movaps	%xmm9,0x30(%rsp)
+	movaps	%xmm10,0x40(%rsp)
+	movaps	%xmm11,0x50(%rsp)
+	movaps	%xmm12,-0x78(%rax)
+	movaps	%xmm13,-0x68(%rax)
+	movaps	%xmm14,-0x58(%rax)
+	movaps	%xmm15,-0x48(%rax)
+___
+$code.=<<___;
+	# stack layout
+	#
+	# +0	output sink
+	# +16	input sink [original %rsp and $num]
+	# +32	counters
+	# +64	distances between inputs and outputs
+	# +128	off-load area for @inp[0..3]
+
+	sub	\$192,%rsp
+	and	\$-128,%rsp
+	mov	%rax,16(%rsp)			# original %rsp
+.cfi_cfa_expression	%rsp+16,deref,+8
+
+.Lenc8x_body:
+	vzeroupper
+	vmovdqu	($key),$zero			# 0-round key
+	lea	0x78($key),$key			# size optimization
+	lea	40*4($inp),$inp
+	shr	\$1,$num
+
+.Lenc8x_loop_grande:
+	#mov	$num,24(%rsp)			# original $num
+	xor	$num,$num
+___
+for($i=0;$i<8;$i++) {
+  my $temp = $i ? $offload : $offset;
+    $code.=<<___;
+	mov	`40*$i+16-40*4`($inp),$one	# borrow $one for number of blocks
+	mov	`40*$i+0-40*4`($inp),@ptr[$i]	# input pointer
+	cmp	$num,$one
+	mov	`40*$i+8-40*4`($inp),$temp	# output pointer
+	cmovg	$one,$num			# find maximum
+	test	$one,$one
+	vmovdqu	`40*$i+24-40*4`($inp),@out[$i]	# load IV
+	mov	$one,`32+4*$i`(%rsp)		# initialize counters
+	cmovle	%rsp,@ptr[$i]			# cancel input
+	sub	@ptr[$i],$temp			# distance between input and output
+	mov	$temp,`64+8*$i`(%rsp)		# initialize distances
+___
+}
+$code.=<<___;
+	test	$num,$num
+	jz	.Lenc8x_done
+
+	vmovups	0x10-0x78($key),$rndkey1
+	vmovups	0x20-0x78($key),$rndkey0
+	mov	0xf0-0x78($key),$rounds
+
+	vpxor	(@ptr[0]),$zero,@inp[0]		# load inputs and xor with 0-round
+	 lea	128(%rsp),$offload		# offload area
+	vpxor	(@ptr[1]),$zero,@inp[1]
+	vpxor	(@ptr[2]),$zero,@inp[2]
+	vpxor	(@ptr[3]),$zero,@inp[3]
+	 vpxor	@inp[0],@out[0],@out[0]
+	vpxor	(@ptr[4]),$zero,@inp[0]
+	 vpxor	@inp[1],@out[1],@out[1]
+	vpxor	(@ptr[5]),$zero,@inp[1]
+	 vpxor	@inp[2],@out[2],@out[2]
+	vpxor	(@ptr[6]),$zero,@inp[2]
+	 vpxor	@inp[3],@out[3],@out[3]
+	vpxor	(@ptr[7]),$zero,@inp[3]
+	 vpxor	@inp[0],@out[4],@out[4]
+	mov	\$1,$one			# constant of 1
+	 vpxor	@inp[1],@out[5],@out[5]
+	 vpxor	@inp[2],@out[6],@out[6]
+	 vpxor	@inp[3],@out[7],@out[7]
+	jmp	.Loop_enc8x
+
+.align	32
+.Loop_enc8x:
+___
+for($i=0;$i<8;$i++) {
+my $rndkey=($i&1)?$rndkey0:$rndkey1;
+$code.=<<___;
+	vaesenc		$rndkey,@out[0],@out[0]
+	 cmp		32+4*$i(%rsp),$one
+___
+$code.=<<___ if ($i);
+	 mov		64+8*$i(%rsp),$offset
+___
+$code.=<<___;
+	vaesenc		$rndkey,@out[1],@out[1]
+	prefetcht0	31(@ptr[$i])			# prefetch input
+	vaesenc		$rndkey,@out[2],@out[2]
+___
+$code.=<<___ if ($i>1);
+	prefetcht0	15(@ptr[$i-2])			# prefetch output
+___
+$code.=<<___;
+	vaesenc		$rndkey,@out[3],@out[3]
+	 lea		(@ptr[$i],$offset),$offset
+	 cmovge		%rsp,@ptr[$i]			# cancel input
+	vaesenc		$rndkey,@out[4],@out[4]
+	 cmovg		%rsp,$offset			# sink output
+	vaesenc		$rndkey,@out[5],@out[5]
+	 sub		@ptr[$i],$offset
+	vaesenc		$rndkey,@out[6],@out[6]
+	 vpxor		16(@ptr[$i]),$zero,@inp[$i%4]	# load input and xor with 0-round
+	 mov		$offset,64+8*$i(%rsp)
+	vaesenc		$rndkey,@out[7],@out[7]
+	vmovups		`16*(3+$i)-0x78`($key),$rndkey
+	 lea		16(@ptr[$i],$offset),@ptr[$i]	# switch to output
+___
+$code.=<<___ if ($i<4)
+	 vmovdqu	@inp[$i%4],`16*$i`($offload)	# off-load
+___
+}
+$code.=<<___;
+	 vmovdqu	32(%rsp),$counters
+	prefetcht0	15(@ptr[$i-2])			# prefetch output
+	prefetcht0	15(@ptr[$i-1])
+	cmp	\$11,$rounds
+	jb	.Lenc8x_tail
+
+	vaesenc		$rndkey1,@out[0],@out[0]
+	vaesenc		$rndkey1,@out[1],@out[1]
+	vaesenc		$rndkey1,@out[2],@out[2]
+	vaesenc		$rndkey1,@out[3],@out[3]
+	vaesenc		$rndkey1,@out[4],@out[4]
+	vaesenc		$rndkey1,@out[5],@out[5]
+	vaesenc		$rndkey1,@out[6],@out[6]
+	vaesenc		$rndkey1,@out[7],@out[7]
+	vmovups		0xb0-0x78($key),$rndkey1
+
+	vaesenc		$rndkey0,@out[0],@out[0]
+	vaesenc		$rndkey0,@out[1],@out[1]
+	vaesenc		$rndkey0,@out[2],@out[2]
+	vaesenc		$rndkey0,@out[3],@out[3]
+	vaesenc		$rndkey0,@out[4],@out[4]
+	vaesenc		$rndkey0,@out[5],@out[5]
+	vaesenc		$rndkey0,@out[6],@out[6]
+	vaesenc		$rndkey0,@out[7],@out[7]
+	vmovups		0xc0-0x78($key),$rndkey0
+	je	.Lenc8x_tail
+
+	vaesenc		$rndkey1,@out[0],@out[0]
+	vaesenc		$rndkey1,@out[1],@out[1]
+	vaesenc		$rndkey1,@out[2],@out[2]
+	vaesenc		$rndkey1,@out[3],@out[3]
+	vaesenc		$rndkey1,@out[4],@out[4]
+	vaesenc		$rndkey1,@out[5],@out[5]
+	vaesenc		$rndkey1,@out[6],@out[6]
+	vaesenc		$rndkey1,@out[7],@out[7]
+	vmovups		0xd0-0x78($key),$rndkey1
+
+	vaesenc		$rndkey0,@out[0],@out[0]
+	vaesenc		$rndkey0,@out[1],@out[1]
+	vaesenc		$rndkey0,@out[2],@out[2]
+	vaesenc		$rndkey0,@out[3],@out[3]
+	vaesenc		$rndkey0,@out[4],@out[4]
+	vaesenc		$rndkey0,@out[5],@out[5]
+	vaesenc		$rndkey0,@out[6],@out[6]
+	vaesenc		$rndkey0,@out[7],@out[7]
+	vmovups		0xe0-0x78($key),$rndkey0
+
+.Lenc8x_tail:
+	vaesenc		$rndkey1,@out[0],@out[0]
+	 vpxor		$zero,$zero,$zero
+	vaesenc		$rndkey1,@out[1],@out[1]
+	vaesenc		$rndkey1,@out[2],@out[2]
+	 vpcmpgtd	$zero,$counters,$zero
+	vaesenc		$rndkey1,@out[3],@out[3]
+	vaesenc		$rndkey1,@out[4],@out[4]
+	 vpaddd		$counters,$zero,$zero		# decrement counters
+	 vmovdqu	48(%rsp),$counters
+	vaesenc		$rndkey1,@out[5],@out[5]
+	 mov		64(%rsp),$offset		# pre-load 1st offset
+	vaesenc		$rndkey1,@out[6],@out[6]
+	vaesenc		$rndkey1,@out[7],@out[7]
+	vmovups		0x10-0x78($key),$rndkey1
+
+	vaesenclast	$rndkey0,@out[0],@out[0]
+	 vmovdqa	$zero,32(%rsp)			# update counters
+	 vpxor		$zero,$zero,$zero
+	vaesenclast	$rndkey0,@out[1],@out[1]
+	vaesenclast	$rndkey0,@out[2],@out[2]
+	 vpcmpgtd	$zero,$counters,$zero
+	vaesenclast	$rndkey0,@out[3],@out[3]
+	vaesenclast	$rndkey0,@out[4],@out[4]
+	 vpaddd		$zero,$counters,$counters	# decrement counters
+	 vmovdqu	-0x78($key),$zero		# 0-round
+	vaesenclast	$rndkey0,@out[5],@out[5]
+	vaesenclast	$rndkey0,@out[6],@out[6]
+	 vmovdqa	$counters,48(%rsp)		# update counters
+	vaesenclast	$rndkey0,@out[7],@out[7]
+	vmovups		0x20-0x78($key),$rndkey0
+
+	vmovups		@out[0],-16(@ptr[0])		# write output
+	 sub		$offset,@ptr[0]			# switch to input
+	 vpxor		0x00($offload),@out[0],@out[0]
+	vmovups		@out[1],-16(@ptr[1])
+	 sub		`64+1*8`(%rsp),@ptr[1]
+	 vpxor		0x10($offload),@out[1],@out[1]
+	vmovups		@out[2],-16(@ptr[2])
+	 sub		`64+2*8`(%rsp),@ptr[2]
+	 vpxor		0x20($offload),@out[2],@out[2]
+	vmovups		@out[3],-16(@ptr[3])
+	 sub		`64+3*8`(%rsp),@ptr[3]
+	 vpxor		0x30($offload),@out[3],@out[3]
+	vmovups		@out[4],-16(@ptr[4])
+	 sub		`64+4*8`(%rsp),@ptr[4]
+	 vpxor		@inp[0],@out[4],@out[4]
+	vmovups		@out[5],-16(@ptr[5])
+	 sub		`64+5*8`(%rsp),@ptr[5]
+	 vpxor		@inp[1],@out[5],@out[5]
+	vmovups		@out[6],-16(@ptr[6])
+	 sub		`64+6*8`(%rsp),@ptr[6]
+	 vpxor		@inp[2],@out[6],@out[6]
+	vmovups		@out[7],-16(@ptr[7])
+	 sub		`64+7*8`(%rsp),@ptr[7]
+	 vpxor		@inp[3],@out[7],@out[7]
+
+	dec	$num
+	jnz	.Loop_enc8x
+
+	mov	16(%rsp),%rax			# original %rsp
+.cfi_def_cfa	%rax,8
+	#mov	24(%rsp),$num
+	#lea	`40*8`($inp),$inp
+	#dec	$num
+	#jnz	.Lenc8x_loop_grande
+
+.Lenc8x_done:
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	movaps	-0xd8(%rax),%xmm6
+	movaps	-0xc8(%rax),%xmm7
+	movaps	-0xb8(%rax),%xmm8
+	movaps	-0xa8(%rax),%xmm9
+	movaps	-0x98(%rax),%xmm10
+	movaps	-0x88(%rax),%xmm11
+	movaps	-0x78(%rax),%xmm12
+	movaps	-0x68(%rax),%xmm13
+	movaps	-0x58(%rax),%xmm14
+	movaps	-0x48(%rax),%xmm15
+___
+$code.=<<___;
+	mov	-48(%rax),%r15
+.cfi_restore	%r15
+	mov	-40(%rax),%r14
+.cfi_restore	%r14
+	mov	-32(%rax),%r13
+.cfi_restore	%r13
+	mov	-24(%rax),%r12
+.cfi_restore	%r12
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp
+.cfi_def_cfa_register	%rsp
+.Lenc8x_epilogue:
+	ret
+.cfi_endproc
+.size	aesni_multi_cbc_encrypt_avx,.-aesni_multi_cbc_encrypt_avx
+
+.type	aesni_multi_cbc_decrypt_avx,\@function,3
+.align	32
+aesni_multi_cbc_decrypt_avx:
+.cfi_startproc
+_avx_cbc_dec_shortcut:
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+___
+$code.=<<___ if ($win64);
+	lea	-0xa8(%rsp),%rsp
+	movaps	%xmm6,(%rsp)
+	movaps	%xmm7,0x10(%rsp)
+	movaps	%xmm8,0x20(%rsp)
+	movaps	%xmm9,0x30(%rsp)
+	movaps	%xmm10,0x40(%rsp)
+	movaps	%xmm11,0x50(%rsp)
+	movaps	%xmm12,-0x78(%rax)
+	movaps	%xmm13,-0x68(%rax)
+	movaps	%xmm14,-0x58(%rax)
+	movaps	%xmm15,-0x48(%rax)
+___
+$code.=<<___;
+	# stack layout
+	#
+	# +0	output sink
+	# +16	input sink [original %rsp and $num]
+	# +32	counters
+	# +64	distances between inputs and outputs
+	# +128	off-load area for @inp[0..3]
+	# +192	IV/input offload
+
+	sub	\$256,%rsp
+	and	\$-256,%rsp
+	sub	\$192,%rsp
+	mov	%rax,16(%rsp)			# original %rsp
+.cfi_cfa_expression	%rsp+16,deref,+8
+
+.Ldec8x_body:
+	vzeroupper
+	vmovdqu	($key),$zero			# 0-round key
+	lea	0x78($key),$key			# size optimization
+	lea	40*4($inp),$inp
+	shr	\$1,$num
+
+.Ldec8x_loop_grande:
+	#mov	$num,24(%rsp)			# original $num
+	xor	$num,$num
+___
+for($i=0;$i<8;$i++) {
+  my $temp = $i ? $offload : $offset;
+    $code.=<<___;
+	mov	`40*$i+16-40*4`($inp),$one	# borrow $one for number of blocks
+	mov	`40*$i+0-40*4`($inp),@ptr[$i]	# input pointer
+	cmp	$num,$one
+	mov	`40*$i+8-40*4`($inp),$temp	# output pointer
+	cmovg	$one,$num			# find maximum
+	test	$one,$one
+	vmovdqu	`40*$i+24-40*4`($inp),@out[$i]	# load IV
+	mov	$one,`32+4*$i`(%rsp)		# initialize counters
+	cmovle	%rsp,@ptr[$i]			# cancel input
+	sub	@ptr[$i],$temp			# distance between input and output
+	mov	$temp,`64+8*$i`(%rsp)		# initialize distances
+	vmovdqu	@out[$i],`192+16*$i`(%rsp)	# offload IV
+___
+}
+$code.=<<___;
+	test	$num,$num
+	jz	.Ldec8x_done
+
+	vmovups	0x10-0x78($key),$rndkey1
+	vmovups	0x20-0x78($key),$rndkey0
+	mov	0xf0-0x78($key),$rounds
+	 lea	192+128(%rsp),$offload		# offload area
+
+	vmovdqu	(@ptr[0]),@out[0]		# load inputs
+	vmovdqu	(@ptr[1]),@out[1]
+	vmovdqu	(@ptr[2]),@out[2]
+	vmovdqu	(@ptr[3]),@out[3]
+	vmovdqu	(@ptr[4]),@out[4]
+	vmovdqu	(@ptr[5]),@out[5]
+	vmovdqu	(@ptr[6]),@out[6]
+	vmovdqu	(@ptr[7]),@out[7]
+	vmovdqu	@out[0],0x00($offload)		# offload inputs
+	vpxor	$zero,@out[0],@out[0]		# xor inputs with 0-round
+	vmovdqu	@out[1],0x10($offload)
+	vpxor	$zero,@out[1],@out[1]
+	vmovdqu	@out[2],0x20($offload)
+	vpxor	$zero,@out[2],@out[2]
+	vmovdqu	@out[3],0x30($offload)
+	vpxor	$zero,@out[3],@out[3]
+	vmovdqu	@out[4],0x40($offload)
+	vpxor	$zero,@out[4],@out[4]
+	vmovdqu	@out[5],0x50($offload)
+	vpxor	$zero,@out[5],@out[5]
+	vmovdqu	@out[6],0x60($offload)
+	vpxor	$zero,@out[6],@out[6]
+	vmovdqu	@out[7],0x70($offload)
+	vpxor	$zero,@out[7],@out[7]
+	xor	\$0x80,$offload
+	mov	\$1,$one			# constant of 1
+	jmp	.Loop_dec8x
+
+.align	32
+.Loop_dec8x:
+___
+for($i=0;$i<8;$i++) {
+my $rndkey=($i&1)?$rndkey0:$rndkey1;
+$code.=<<___;
+	vaesdec		$rndkey,@out[0],@out[0]
+	 cmp		32+4*$i(%rsp),$one
+___
+$code.=<<___ if ($i);
+	 mov		64+8*$i(%rsp),$offset
+___
+$code.=<<___;
+	vaesdec		$rndkey,@out[1],@out[1]
+	prefetcht0	31(@ptr[$i])			# prefetch input
+	vaesdec		$rndkey,@out[2],@out[2]
+___
+$code.=<<___ if ($i>1);
+	prefetcht0	15(@ptr[$i-2])			# prefetch output
+___
+$code.=<<___;
+	vaesdec		$rndkey,@out[3],@out[3]
+	 lea		(@ptr[$i],$offset),$offset
+	 cmovge		%rsp,@ptr[$i]			# cancel input
+	vaesdec		$rndkey,@out[4],@out[4]
+	 cmovg		%rsp,$offset			# sink output
+	vaesdec		$rndkey,@out[5],@out[5]
+	 sub		@ptr[$i],$offset
+	vaesdec		$rndkey,@out[6],@out[6]
+	 vmovdqu	16(@ptr[$i]),@inp[$i%4]		# load input
+	 mov		$offset,64+8*$i(%rsp)
+	vaesdec		$rndkey,@out[7],@out[7]
+	vmovups		`16*(3+$i)-0x78`($key),$rndkey
+	 lea		16(@ptr[$i],$offset),@ptr[$i]	# switch to output
+___
+$code.=<<___ if ($i<4);
+	 vmovdqu	@inp[$i%4],`128+16*$i`(%rsp)	# off-load
+___
+}
+$code.=<<___;
+	 vmovdqu	32(%rsp),$counters
+	prefetcht0	15(@ptr[$i-2])			# prefetch output
+	prefetcht0	15(@ptr[$i-1])
+	cmp	\$11,$rounds
+	jb	.Ldec8x_tail
+
+	vaesdec		$rndkey1,@out[0],@out[0]
+	vaesdec		$rndkey1,@out[1],@out[1]
+	vaesdec		$rndkey1,@out[2],@out[2]
+	vaesdec		$rndkey1,@out[3],@out[3]
+	vaesdec		$rndkey1,@out[4],@out[4]
+	vaesdec		$rndkey1,@out[5],@out[5]
+	vaesdec		$rndkey1,@out[6],@out[6]
+	vaesdec		$rndkey1,@out[7],@out[7]
+	vmovups		0xb0-0x78($key),$rndkey1
+
+	vaesdec		$rndkey0,@out[0],@out[0]
+	vaesdec		$rndkey0,@out[1],@out[1]
+	vaesdec		$rndkey0,@out[2],@out[2]
+	vaesdec		$rndkey0,@out[3],@out[3]
+	vaesdec		$rndkey0,@out[4],@out[4]
+	vaesdec		$rndkey0,@out[5],@out[5]
+	vaesdec		$rndkey0,@out[6],@out[6]
+	vaesdec		$rndkey0,@out[7],@out[7]
+	vmovups		0xc0-0x78($key),$rndkey0
+	je	.Ldec8x_tail
+
+	vaesdec		$rndkey1,@out[0],@out[0]
+	vaesdec		$rndkey1,@out[1],@out[1]
+	vaesdec		$rndkey1,@out[2],@out[2]
+	vaesdec		$rndkey1,@out[3],@out[3]
+	vaesdec		$rndkey1,@out[4],@out[4]
+	vaesdec		$rndkey1,@out[5],@out[5]
+	vaesdec		$rndkey1,@out[6],@out[6]
+	vaesdec		$rndkey1,@out[7],@out[7]
+	vmovups		0xd0-0x78($key),$rndkey1
+
+	vaesdec		$rndkey0,@out[0],@out[0]
+	vaesdec		$rndkey0,@out[1],@out[1]
+	vaesdec		$rndkey0,@out[2],@out[2]
+	vaesdec		$rndkey0,@out[3],@out[3]
+	vaesdec		$rndkey0,@out[4],@out[4]
+	vaesdec		$rndkey0,@out[5],@out[5]
+	vaesdec		$rndkey0,@out[6],@out[6]
+	vaesdec		$rndkey0,@out[7],@out[7]
+	vmovups		0xe0-0x78($key),$rndkey0
+
+.Ldec8x_tail:
+	vaesdec		$rndkey1,@out[0],@out[0]
+	 vpxor		$zero,$zero,$zero
+	vaesdec		$rndkey1,@out[1],@out[1]
+	vaesdec		$rndkey1,@out[2],@out[2]
+	 vpcmpgtd	$zero,$counters,$zero
+	vaesdec		$rndkey1,@out[3],@out[3]
+	vaesdec		$rndkey1,@out[4],@out[4]
+	 vpaddd		$counters,$zero,$zero		# decrement counters
+	 vmovdqu	48(%rsp),$counters
+	vaesdec		$rndkey1,@out[5],@out[5]
+	 mov		64(%rsp),$offset		# pre-load 1st offset
+	vaesdec		$rndkey1,@out[6],@out[6]
+	vaesdec		$rndkey1,@out[7],@out[7]
+	vmovups		0x10-0x78($key),$rndkey1
+
+	vaesdeclast	$rndkey0,@out[0],@out[0]
+	 vmovdqa	$zero,32(%rsp)			# update counters
+	 vpxor		$zero,$zero,$zero
+	vaesdeclast	$rndkey0,@out[1],@out[1]
+	vpxor		0x00($offload),@out[0],@out[0]	# xor with IV
+	vaesdeclast	$rndkey0,@out[2],@out[2]
+	vpxor		0x10($offload),@out[1],@out[1]
+	 vpcmpgtd	$zero,$counters,$zero
+	vaesdeclast	$rndkey0,@out[3],@out[3]
+	vpxor		0x20($offload),@out[2],@out[2]
+	vaesdeclast	$rndkey0,@out[4],@out[4]
+	vpxor		0x30($offload),@out[3],@out[3]
+	 vpaddd		$zero,$counters,$counters	# decrement counters
+	 vmovdqu	-0x78($key),$zero		# 0-round
+	vaesdeclast	$rndkey0,@out[5],@out[5]
+	vpxor		0x40($offload),@out[4],@out[4]
+	vaesdeclast	$rndkey0,@out[6],@out[6]
+	vpxor		0x50($offload),@out[5],@out[5]
+	 vmovdqa	$counters,48(%rsp)		# update counters
+	vaesdeclast	$rndkey0,@out[7],@out[7]
+	vpxor		0x60($offload),@out[6],@out[6]
+	vmovups		0x20-0x78($key),$rndkey0
+
+	vmovups		@out[0],-16(@ptr[0])		# write output
+	 sub		$offset,@ptr[0]			# switch to input
+	 vmovdqu	128+0(%rsp),@out[0]
+	vpxor		0x70($offload),@out[7],@out[7]
+	vmovups		@out[1],-16(@ptr[1])
+	 sub		`64+1*8`(%rsp),@ptr[1]
+	 vmovdqu	@out[0],0x00($offload)
+	 vpxor		$zero,@out[0],@out[0]
+	 vmovdqu	128+16(%rsp),@out[1]
+	vmovups		@out[2],-16(@ptr[2])
+	 sub		`64+2*8`(%rsp),@ptr[2]
+	 vmovdqu	@out[1],0x10($offload)
+	 vpxor		$zero,@out[1],@out[1]
+	 vmovdqu	128+32(%rsp),@out[2]
+	vmovups		@out[3],-16(@ptr[3])
+	 sub		`64+3*8`(%rsp),@ptr[3]
+	 vmovdqu	@out[2],0x20($offload)
+	 vpxor		$zero,@out[2],@out[2]
+	 vmovdqu	128+48(%rsp),@out[3]
+	vmovups		@out[4],-16(@ptr[4])
+	 sub		`64+4*8`(%rsp),@ptr[4]
+	 vmovdqu	@out[3],0x30($offload)
+	 vpxor		$zero,@out[3],@out[3]
+	 vmovdqu	@inp[0],0x40($offload)
+	 vpxor		@inp[0],$zero,@out[4]
+	vmovups		@out[5],-16(@ptr[5])
+	 sub		`64+5*8`(%rsp),@ptr[5]
+	 vmovdqu	@inp[1],0x50($offload)
+	 vpxor		@inp[1],$zero,@out[5]
+	vmovups		@out[6],-16(@ptr[6])
+	 sub		`64+6*8`(%rsp),@ptr[6]
+	 vmovdqu	@inp[2],0x60($offload)
+	 vpxor		@inp[2],$zero,@out[6]
+	vmovups		@out[7],-16(@ptr[7])
+	 sub		`64+7*8`(%rsp),@ptr[7]
+	 vmovdqu	@inp[3],0x70($offload)
+	 vpxor		@inp[3],$zero,@out[7]
+
+	xor	\$128,$offload
+	dec	$num
+	jnz	.Loop_dec8x
+
+	mov	16(%rsp),%rax			# original %rsp
+.cfi_def_cfa	%rax,8
+	#mov	24(%rsp),$num
+	#lea	`40*8`($inp),$inp
+	#dec	$num
+	#jnz	.Ldec8x_loop_grande
+
+.Ldec8x_done:
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	movaps	-0xd8(%rax),%xmm6
+	movaps	-0xc8(%rax),%xmm7
+	movaps	-0xb8(%rax),%xmm8
+	movaps	-0xa8(%rax),%xmm9
+	movaps	-0x98(%rax),%xmm10
+	movaps	-0x88(%rax),%xmm11
+	movaps	-0x78(%rax),%xmm12
+	movaps	-0x68(%rax),%xmm13
+	movaps	-0x58(%rax),%xmm14
+	movaps	-0x48(%rax),%xmm15
+___
+$code.=<<___;
+	mov	-48(%rax),%r15
+.cfi_restore	%r15
+	mov	-40(%rax),%r14
+.cfi_restore	%r14
+	mov	-32(%rax),%r13
+.cfi_restore	%r13
+	mov	-24(%rax),%r12
+.cfi_restore	%r12
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp
+.cfi_def_cfa_register	%rsp
+.Ldec8x_epilogue:
+	ret
+.cfi_endproc
+.size	aesni_multi_cbc_decrypt_avx,.-aesni_multi_cbc_decrypt_avx
+___
+						}}}
+
+if ($win64) {
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	se_handler,\@abi-omnipotent
+.align	16
+se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<.Lprologue
+	jb	.Lin_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=.Lepilogue
+	jae	.Lin_prologue
+
+	mov	16(%rax),%rax		# pull saved stack pointer
+
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+	lea	-56-10*16(%rax),%rsi
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$20,%ecx
+	.long	0xa548f3fc		# cld; rep movsq
+
+.Lin_prologue:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	se_handler,.-se_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_aesni_multi_cbc_encrypt
+	.rva	.LSEH_end_aesni_multi_cbc_encrypt
+	.rva	.LSEH_info_aesni_multi_cbc_encrypt
+	.rva	.LSEH_begin_aesni_multi_cbc_decrypt
+	.rva	.LSEH_end_aesni_multi_cbc_decrypt
+	.rva	.LSEH_info_aesni_multi_cbc_decrypt
+___
+$code.=<<___ if ($avx);
+	.rva	.LSEH_begin_aesni_multi_cbc_encrypt_avx
+	.rva	.LSEH_end_aesni_multi_cbc_encrypt_avx
+	.rva	.LSEH_info_aesni_multi_cbc_encrypt_avx
+	.rva	.LSEH_begin_aesni_multi_cbc_decrypt_avx
+	.rva	.LSEH_end_aesni_multi_cbc_decrypt_avx
+	.rva	.LSEH_info_aesni_multi_cbc_decrypt_avx
+___
+$code.=<<___;
+.section	.xdata
+.align	8
+.LSEH_info_aesni_multi_cbc_encrypt:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lenc4x_body,.Lenc4x_epilogue		# HandlerData[]
+.LSEH_info_aesni_multi_cbc_decrypt:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Ldec4x_body,.Ldec4x_epilogue		# HandlerData[]
+___
+$code.=<<___ if ($avx);
+.LSEH_info_aesni_multi_cbc_encrypt_avx:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lenc8x_body,.Lenc8x_epilogue		# HandlerData[]
+.LSEH_info_aesni_multi_cbc_decrypt_avx:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Ldec8x_body,.Ldec8x_epilogue		# HandlerData[]
+___
+}
+####################################################################
+
+sub rex {
+  local *opcode=shift;
+  my ($dst,$src)=@_;
+  my $rex=0;
+
+    $rex|=0x04			if($dst>=8);
+    $rex|=0x01			if($src>=8);
+    push @opcode,$rex|0x40	if($rex);
+}
+
+sub aesni {
+  my $line=shift;
+  my @opcode=(0x66);
+
+    if ($line=~/(aeskeygenassist)\s+\$([x0-9a-f]+),\s*%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+	rex(\@opcode,$4,$3);
+	push @opcode,0x0f,0x3a,0xdf;
+	push @opcode,0xc0|($3&7)|(($4&7)<<3);	# ModR/M
+	my $c=$2;
+	push @opcode,$c=~/^0/?oct($c):$c;
+	return ".byte\t".join(',',@opcode);
+    }
+    elsif ($line=~/(aes[a-z]+)\s+%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+	my %opcodelet = (
+		"aesimc" => 0xdb,
+		"aesenc" => 0xdc,	"aesenclast" => 0xdd,
+		"aesdec" => 0xde,	"aesdeclast" => 0xdf
+	);
+	return undef if (!defined($opcodelet{$1}));
+	rex(\@opcode,$3,$2);
+	push @opcode,0x0f,0x38,$opcodelet{$1};
+	push @opcode,0xc0|($2&7)|(($3&7)<<3);	# ModR/M
+	return ".byte\t".join(',',@opcode);
+    }
+    elsif ($line=~/(aes[a-z]+)\s+([0x1-9a-fA-F]*)\(%rsp\),\s*%xmm([0-9]+)/) {
+	my %opcodelet = (
+		"aesenc" => 0xdc,	"aesenclast" => 0xdd,
+		"aesdec" => 0xde,	"aesdeclast" => 0xdf
+	);
+	return undef if (!defined($opcodelet{$1}));
+	my $off = $2;
+	push @opcode,0x44 if ($3>=8);
+	push @opcode,0x0f,0x38,$opcodelet{$1};
+	push @opcode,0x44|(($3&7)<<3),0x24;	# ModR/M
+	push @opcode,($off=~/^0/?oct($off):$off)&0xff;
+	return ".byte\t".join(',',@opcode);
+    }
+    return $line;
+}
+
+$code =~ s/\`([^\`]*)\`/eval($1)/gem;
+$code =~ s/\b(aes.*%xmm[0-9]+).*$/aesni($1)/gem;
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-sha1-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-sha1-x86_64.pl
new file mode 100644
index 000000000..b01a4c55c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-sha1-x86_64.pl
@@ -0,0 +1,2140 @@
+#! /usr/bin/env perl
+# Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# June 2011
+#
+# This is AESNI-CBC+SHA1 "stitch" implementation. The idea, as spelled
+# in http://download.intel.com/design/intarch/papers/323686.pdf, is
+# that since AESNI-CBC encrypt exhibit *very* low instruction-level
+# parallelism, interleaving it with another algorithm would allow to
+# utilize processor resources better and achieve better performance.
+# SHA1 instruction sequences(*) are taken from sha1-x86_64.pl and
+# AESNI code is weaved into it. Below are performance numbers in
+# cycles per processed byte, less is better, for standalone AESNI-CBC
+# encrypt, sum of the latter and standalone SHA1, and "stitched"
+# subroutine:
+#
+#		AES-128-CBC	+SHA1		stitch      gain
+# Westmere	3.77[+5.3]	9.07		6.55	    +38%
+# Sandy Bridge	5.05[+5.0(6.1)]	10.06(11.15)	5.98(7.05)  +68%(+58%)
+# Ivy Bridge	5.05[+4.6]	9.65		5.54        +74%
+# Haswell	4.43[+3.6(4.2)]	8.00(8.58)	4.55(5.21)  +75%(+65%)
+# Skylake	2.63[+3.5(4.1)]	6.17(6.69)	4.23(4.44)  +46%(+51%)
+# Bulldozer	5.77[+6.0]	11.72		6.37        +84%
+# Ryzen(**)	2.71[+1.93]	4.64		2.74        +69%
+# Goldmont(**)	3.82[+1.70]	5.52		4.20        +31%
+#
+#		AES-192-CBC
+# Westmere	4.51		9.81		6.80	    +44%
+# Sandy Bridge	6.05		11.06(12.15)	6.11(7.19)  +81%(+69%)
+# Ivy Bridge	6.05		10.65		6.07        +75%
+# Haswell	5.29		8.86(9.44)	5.32(5.32)  +67%(+77%)
+# Bulldozer	6.89		12.84		6.96        +84%
+#
+#		AES-256-CBC
+# Westmere	5.25		10.55		7.21	    +46%
+# Sandy Bridge	7.05		12.06(13.15)	7.12(7.72)  +69%(+70%)
+# Ivy Bridge	7.05		11.65		7.12        +64%
+# Haswell	6.19		9.76(10.34)	6.21(6.25)  +57%(+65%)
+# Skylake	3.62		7.16(7.68)	4.56(4.76)  +57%(+61%)
+# Bulldozer	8.00		13.95		8.25        +69%
+# Ryzen(**)	3.71		5.64		3.72        +52%
+# Goldmont(**)	5.35		7.05		5.76        +22%
+#
+# (*)	There are two code paths: SSSE3 and AVX. See sha1-568.pl for
+#	background information. Above numbers in parentheses are SSSE3
+#	results collected on AVX-capable CPU, i.e. apply on OSes that
+#	don't support AVX.
+# (**)	SHAEXT results.
+#
+# Needless to mention that it makes no sense to implement "stitched"
+# *decrypt* subroutine. Because *both* AESNI-CBC decrypt and SHA1
+# fully utilize parallelism, so stitching would not give any gain
+# anyway. Well, there might be some, e.g. because of better cache
+# locality... For reference, here are performance results for
+# standalone AESNI-CBC decrypt:
+#
+#		AES-128-CBC	AES-192-CBC	AES-256-CBC
+# Westmere	1.25		1.50		1.75
+# Sandy Bridge	0.74		0.91		1.09
+# Ivy Bridge	0.74		0.90		1.11
+# Haswell	0.63		0.76		0.88
+# Bulldozer	0.70		0.85		0.99
+
+# And indeed:
+#
+#		AES-256-CBC	+SHA1		stitch      gain
+# Westmere	1.75		7.20		6.68        +7.8%
+# Sandy Bridge	1.09		6.09(7.22)	5.82(6.95)  +4.6%(+3.9%)
+# Ivy Bridge	1.11		5.70		5.45        +4.6%
+# Haswell	0.88		4.45(5.00)	4.39(4.69)  +1.4%(*)(+6.6%)
+# Bulldozer	0.99		6.95		5.95        +17%(**)
+#
+# (*)	Tiny improvement coefficient on Haswell is because we compare
+#	AVX1 stitch to sum with AVX2 SHA1.
+# (**)	Execution is fully dominated by integer code sequence and
+#	SIMD still hardly shows [in single-process benchmark;-]
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+$avx=1 if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/ &&
+	   $1>=2.19);
+$avx=1 if (!$avx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	   `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/ &&
+	   $1>=2.09);
+$avx=1 if (!$avx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	   `ml64 2>&1` =~ /Version ([0-9]+)\./ &&
+	   $1>=10);
+$avx=1 if (!$avx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([3-9]\.[0-9]+)/ && $2>=3.0);
+
+$shaext=1;	### set to zero if compiling for 1.0.1
+
+$stitched_decrypt=0;
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+# void aesni_cbc_sha1_enc(const void *inp,
+#			void *out,
+#			size_t length,
+#			const AES_KEY *key,
+#			unsigned char *iv,
+#			SHA_CTX *ctx,
+#			const void *in0);
+
+$code.=<<___;
+.text
+.extern	OPENSSL_ia32cap_P
+
+.globl	aesni_cbc_sha1_enc
+.type	aesni_cbc_sha1_enc,\@abi-omnipotent
+.align	32
+aesni_cbc_sha1_enc:
+	# caller should check for SSSE3 and AES-NI bits
+	mov	OPENSSL_ia32cap_P+0(%rip),%r10d
+	mov	OPENSSL_ia32cap_P+4(%rip),%r11
+___
+$code.=<<___ if ($shaext);
+	bt	\$61,%r11		# check SHA bit
+	jc	aesni_cbc_sha1_enc_shaext
+___
+$code.=<<___ if ($avx);
+	and	\$`1<<28`,%r11d		# mask AVX bit
+	and	\$`1<<30`,%r10d		# mask "Intel CPU" bit
+	or	%r11d,%r10d
+	cmp	\$`1<<28|1<<30`,%r10d
+	je	aesni_cbc_sha1_enc_avx
+___
+$code.=<<___;
+	jmp	aesni_cbc_sha1_enc_ssse3
+	ret
+.size	aesni_cbc_sha1_enc,.-aesni_cbc_sha1_enc
+___
+
+my ($in0,$out,$len,$key,$ivp,$ctx,$inp)=("%rdi","%rsi","%rdx","%rcx","%r8","%r9","%r10");
+
+my $Xi=4;
+my @X=map("%xmm$_",(4..7,0..3));
+my @Tx=map("%xmm$_",(8..10));
+my @V=($A,$B,$C,$D,$E)=("%eax","%ebx","%ecx","%edx","%ebp");	# size optimization
+my @T=("%esi","%edi");
+my $j=0; my $jj=0; my $r=0; my $sn=0; my $rx=0;
+my $K_XX_XX="%r11";
+my ($rndkey0,$iv,$in)=map("%xmm$_",(11..13));			# for enc
+my @rndkey=("%xmm14","%xmm15");					# for enc
+my ($inout0,$inout1,$inout2,$inout3)=map("%xmm$_",(12..15));	# for dec
+
+if (1) {	# reassign for Atom Silvermont
+    # The goal is to minimize amount of instructions with more than
+    # 3 prefix bytes. Or in more practical terms to keep AES-NI *and*
+    # SSSE3 instructions to upper half of the register bank.
+    @X=map("%xmm$_",(8..11,4..7));
+    @Tx=map("%xmm$_",(12,13,3));
+    ($iv,$in,$rndkey0)=map("%xmm$_",(2,14,15));
+    @rndkey=("%xmm0","%xmm1");
+}
+
+sub AUTOLOAD()		# thunk [simplified] 32-bit style perlasm
+{ my $opcode = $AUTOLOAD; $opcode =~ s/.*:://;
+  my $arg = pop;
+    $arg = "\$$arg" if ($arg*1 eq $arg);
+    $code .= "\t$opcode\t".join(',',$arg,reverse @_)."\n";
+}
+
+my $_rol=sub { &rol(@_) };
+my $_ror=sub { &ror(@_) };
+
+$code.=<<___;
+.type	aesni_cbc_sha1_enc_ssse3,\@function,6
+.align	32
+aesni_cbc_sha1_enc_ssse3:
+.cfi_startproc
+	mov	`($win64?56:8)`(%rsp),$inp	# load 7th argument
+	#shr	\$6,$len			# debugging artefact
+	#jz	.Lepilogue_ssse3		# debugging artefact
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	lea	`-104-($win64?10*16:0)`(%rsp),%rsp
+.cfi_adjust_cfa_offset	`104+($win64?10*16:0)`
+	#mov	$in0,$inp			# debugging artefact
+	#lea	64(%rsp),$ctx			# debugging artefact
+___
+$code.=<<___ if ($win64);
+	movaps	%xmm6,96+0(%rsp)
+	movaps	%xmm7,96+16(%rsp)
+	movaps	%xmm8,96+32(%rsp)
+	movaps	%xmm9,96+48(%rsp)
+	movaps	%xmm10,96+64(%rsp)
+	movaps	%xmm11,96+80(%rsp)
+	movaps	%xmm12,96+96(%rsp)
+	movaps	%xmm13,96+112(%rsp)
+	movaps	%xmm14,96+128(%rsp)
+	movaps	%xmm15,96+144(%rsp)
+.Lprologue_ssse3:
+___
+$code.=<<___;
+	mov	$in0,%r12			# reassign arguments
+	mov	$out,%r13
+	mov	$len,%r14
+	lea	112($key),%r15			# size optimization
+	movdqu	($ivp),$iv			# load IV
+	mov	$ivp,88(%rsp)			# save $ivp
+___
+($in0,$out,$len,$key)=map("%r$_",(12..15));	# reassign arguments
+my $rounds="${ivp}d";
+$code.=<<___;
+	shl	\$6,$len
+	sub	$in0,$out
+	mov	240-112($key),$rounds
+	add	$inp,$len		# end of input
+
+	lea	K_XX_XX(%rip),$K_XX_XX
+	mov	0($ctx),$A		# load context
+	mov	4($ctx),$B
+	mov	8($ctx),$C
+	mov	12($ctx),$D
+	mov	$B,@T[0]		# magic seed
+	mov	16($ctx),$E
+	mov	$C,@T[1]
+	xor	$D,@T[1]
+	and	@T[1],@T[0]
+
+	movdqa	64($K_XX_XX),@Tx[2]	# pbswap mask
+	movdqa	0($K_XX_XX),@Tx[1]	# K_00_19
+	movdqu	0($inp),@X[-4&7]	# load input to %xmm[0-3]
+	movdqu	16($inp),@X[-3&7]
+	movdqu	32($inp),@X[-2&7]
+	movdqu	48($inp),@X[-1&7]
+	pshufb	@Tx[2],@X[-4&7]		# byte swap
+	pshufb	@Tx[2],@X[-3&7]
+	pshufb	@Tx[2],@X[-2&7]
+	add	\$64,$inp
+	paddd	@Tx[1],@X[-4&7]		# add K_00_19
+	pshufb	@Tx[2],@X[-1&7]
+	paddd	@Tx[1],@X[-3&7]
+	paddd	@Tx[1],@X[-2&7]
+	movdqa	@X[-4&7],0(%rsp)	# X[]+K xfer to IALU
+	psubd	@Tx[1],@X[-4&7]		# restore X[]
+	movdqa	@X[-3&7],16(%rsp)
+	psubd	@Tx[1],@X[-3&7]
+	movdqa	@X[-2&7],32(%rsp)
+	psubd	@Tx[1],@X[-2&7]
+	movups	-112($key),$rndkey0	# $key[0]
+	movups	16-112($key),$rndkey[0]	# forward reference
+	jmp	.Loop_ssse3
+___
+
+my $aesenc=sub {
+  use integer;
+  my ($n,$k)=($r/10,$r%10);
+    if ($k==0) {
+      $code.=<<___;
+	movups		`16*$n`($in0),$in		# load input
+	xorps		$rndkey0,$in
+___
+      $code.=<<___ if ($n);
+	movups		$iv,`16*($n-1)`($out,$in0)	# write output
+___
+      $code.=<<___;
+	xorps		$in,$iv
+	movups		`32+16*$k-112`($key),$rndkey[1]
+	aesenc		$rndkey[0],$iv
+___
+    } elsif ($k==9) {
+      $sn++;
+      $code.=<<___;
+	cmp		\$11,$rounds
+	jb		.Laesenclast$sn
+	movups		`32+16*($k+0)-112`($key),$rndkey[1]
+	aesenc		$rndkey[0],$iv
+	movups		`32+16*($k+1)-112`($key),$rndkey[0]
+	aesenc		$rndkey[1],$iv
+	je		.Laesenclast$sn
+	movups		`32+16*($k+2)-112`($key),$rndkey[1]
+	aesenc		$rndkey[0],$iv
+	movups		`32+16*($k+3)-112`($key),$rndkey[0]
+	aesenc		$rndkey[1],$iv
+.Laesenclast$sn:
+	aesenclast	$rndkey[0],$iv
+	movups		16-112($key),$rndkey[1]		# forward reference
+___
+    } else {
+      $code.=<<___;
+	movups		`32+16*$k-112`($key),$rndkey[1]
+	aesenc		$rndkey[0],$iv
+___
+    }
+    $r++;	unshift(@rndkey,pop(@rndkey));
+};
+
+sub Xupdate_ssse3_16_31()		# recall that $Xi starts with 4
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 40 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));		# ror
+	&pshufd	(@X[0],@X[-4&7],0xee);	# was &movdqa	(@X[0],@X[-3&7]);
+	 eval(shift(@insns));
+	&movdqa	(@Tx[0],@X[-1&7]);
+	  &paddd	(@Tx[1],@X[-1&7]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&punpcklqdq(@X[0],@X[-3&7]);	# compose "X[-14]" in "X[0]", was &palignr(@X[0],@X[-4&7],8);
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	&psrldq	(@Tx[0],4);		# "X[-3]", 3 dwords
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&pxor	(@X[0],@X[-4&7]);	# "X[0]"^="X[-16]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	&pxor	(@Tx[0],@X[-2&7]);	# "X[-3]"^"X[-8]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&pxor	(@X[0],@Tx[0]);		# "X[0]"^="X[-3]"^"X[-8]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	  &movdqa	(eval(16*(($Xi-1)&3))."(%rsp)",@Tx[1]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&movdqa	(@Tx[2],@X[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	&movdqa	(@Tx[0],@X[0]);
+	 eval(shift(@insns));
+
+	&pslldq	(@Tx[2],12);		# "X[0]"<<96, extract one dword
+	&paddd	(@X[0],@X[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&psrld	(@Tx[0],31);
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	&movdqa	(@Tx[1],@Tx[2]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&psrld	(@Tx[2],30);
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	&por	(@X[0],@Tx[0]);		# "X[0]"<<<=1
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&pslld	(@Tx[1],2);
+	&pxor	(@X[0],@Tx[2]);
+	 eval(shift(@insns));
+	  &movdqa	(@Tx[2],eval(16*(($Xi)/5))."($K_XX_XX)");	# K_XX_XX
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&pxor	(@X[0],@Tx[1]);		# "X[0]"^=("X[0]">>96)<<<2
+	&pshufd (@Tx[1],@X[-1&7],0xee)	if ($Xi==7);	# was &movdqa	(@Tx[0],@X[-1&7]) in Xupdate_ssse3_32_79
+
+	 foreach (@insns) { eval; }	# remaining instructions [if any]
+
+  $Xi++;	push(@X,shift(@X));	# "rotate" X[]
+		push(@Tx,shift(@Tx));
+}
+
+sub Xupdate_ssse3_32_79()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 to 44 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns))		if ($Xi==8);
+	&pxor	(@X[0],@X[-4&7]);	# "X[0]"="X[-32]"^"X[-16]"
+	 eval(shift(@insns))		if ($Xi==8);
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	 eval(shift(@insns))		if (@insns[1] =~ /_ror/);
+	 eval(shift(@insns))		if (@insns[0] =~ /_ror/);
+	&punpcklqdq(@Tx[0],@X[-1&7]);	# compose "X[-6]", was &palignr(@Tx[0],@X[-2&7],8);
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+
+	&pxor	(@X[0],@X[-7&7]);	# "X[0]"^="X[-28]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	if ($Xi%5) {
+	  &movdqa	(@Tx[2],@Tx[1]);# "perpetuate" K_XX_XX...
+	} else {			# ... or load next one
+	  &movdqa	(@Tx[2],eval(16*($Xi/5))."($K_XX_XX)");
+	}
+	 eval(shift(@insns));		# ror
+	  &paddd	(@Tx[1],@X[-1&7]);
+	 eval(shift(@insns));
+
+	&pxor	(@X[0],@Tx[0]);		# "X[0]"^="X[-6]"
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns))		if (@insns[0] =~ /_ror/);
+
+	&movdqa	(@Tx[0],@X[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &movdqa	(eval(16*(($Xi-1)&3))."(%rsp)",@Tx[1]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));		# ror
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# body_20_39
+
+	&pslld	(@X[0],2);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&psrld	(@Tx[0],30);
+	 eval(shift(@insns))		if (@insns[0] =~ /_rol/);# rol
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+
+	&por	(@X[0],@Tx[0]);		# "X[0]"<<<=2
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns))		if (@insns[1] =~ /_rol/);
+	 eval(shift(@insns))		if (@insns[0] =~ /_rol/);
+	  &pshufd(@Tx[1],@X[-1&7],0xee)	if ($Xi<19);	# was &movdqa	(@Tx[1],@X[0])
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+
+	 foreach (@insns) { eval; }	# remaining instructions
+
+  $Xi++;	push(@X,shift(@X));	# "rotate" X[]
+		push(@Tx,shift(@Tx));
+}
+
+sub Xuplast_ssse3_80()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &paddd	(@Tx[1],@X[-1&7]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	  &movdqa	(eval(16*(($Xi-1)&3))."(%rsp)",@Tx[1]);	# X[]+K xfer IALU
+
+	 foreach (@insns) { eval; }		# remaining instructions
+
+	&cmp	($inp,$len);
+	&je	(shift);
+
+	unshift(@Tx,pop(@Tx));
+
+	&movdqa	(@Tx[2],"64($K_XX_XX)");	# pbswap mask
+	&movdqa	(@Tx[1],"0($K_XX_XX)");		# K_00_19
+	&movdqu	(@X[-4&7],"0($inp)");		# load input
+	&movdqu	(@X[-3&7],"16($inp)");
+	&movdqu	(@X[-2&7],"32($inp)");
+	&movdqu	(@X[-1&7],"48($inp)");
+	&pshufb	(@X[-4&7],@Tx[2]);		# byte swap
+	&add	($inp,64);
+
+  $Xi=0;
+}
+
+sub Xloop_ssse3()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&pshufb	(@X[($Xi-3)&7],@Tx[2]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&paddd	(@X[($Xi-4)&7],@Tx[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&movdqa	(eval(16*$Xi)."(%rsp)",@X[($Xi-4)&7]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&psubd	(@X[($Xi-4)&7],@Tx[1]);
+
+	foreach (@insns) { eval; }
+  $Xi++;
+}
+
+sub Xtail_ssse3()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	foreach (@insns) { eval; }
+}
+
+my @body_00_19 = (
+	'($a,$b,$c,$d,$e)=@V;'.
+	'&$_ror	($b,$j?7:2);',	# $b>>>2
+	'&xor	(@T[0],$d);',
+	'&mov	(@T[1],$a);',	# $b for next round
+
+	'&add	($e,eval(4*($j&15))."(%rsp)");',# X[]+K xfer
+	'&xor	($b,$c);',	# $c^$d for next round
+
+	'&$_rol	($a,5);',
+	'&add	($e,@T[0]);',
+	'&and	(@T[1],$b);',	# ($b&($c^$d)) for next round
+
+	'&xor	($b,$c);',	# restore $b
+	'&add	($e,$a);'	.'$j++; unshift(@V,pop(@V)); unshift(@T,pop(@T));'
+	);
+
+sub body_00_19 () {	# ((c^d)&b)^d
+    # on start @T[0]=(c^d)&b
+    return &body_20_39() if ($rx==19); $rx++;
+
+    use integer;
+    my ($k,$n);
+    my @r=@body_00_19;
+
+	$n = scalar(@r);
+	$k = (($jj+1)*12/20)*20*$n/12;	# 12 aesencs per these 20 rounds
+	@r[$k%$n].='&$aesenc();'	if ($jj==$k/$n);
+	$jj++;
+
+    return @r;
+}
+
+my @body_20_39 = (
+	'($a,$b,$c,$d,$e)=@V;'.
+	'&add	($e,eval(4*($j&15))."(%rsp)");',# X[]+K xfer
+	'&xor	(@T[0],$d)	if($j==19);'.
+	'&xor	(@T[0],$c)	if($j> 19);',	# ($b^$d^$c)
+	'&mov	(@T[1],$a);',	# $b for next round
+
+	'&$_rol	($a,5);',
+	'&add	($e,@T[0]);',
+	'&xor	(@T[1],$c)	if ($j< 79);',	# $b^$d for next round
+
+	'&$_ror	($b,7);',	# $b>>>2
+	'&add	($e,$a);'	.'$j++; unshift(@V,pop(@V)); unshift(@T,pop(@T));'
+	);
+
+sub body_20_39 () {	# b^d^c
+    # on entry @T[0]=b^d
+    return &body_40_59() if ($rx==39); $rx++;
+
+    use integer;
+    my ($k,$n);
+    my @r=@body_20_39;
+
+	$n = scalar(@r);
+	$k = (($jj+1)*8/20)*20*$n/8;	# 8 aesencs per these 20 rounds
+	@r[$k%$n].='&$aesenc();'	if ($jj==$k/$n && $rx!=20);
+	$jj++;
+
+    return @r;
+}
+
+my @body_40_59 = (
+	'($a,$b,$c,$d,$e)=@V;'.
+	'&add	($e,eval(4*($j&15))."(%rsp)");',# X[]+K xfer
+	'&and	(@T[0],$c)	if ($j>=40);',	# (b^c)&(c^d)
+	'&xor	($c,$d)		if ($j>=40);',	# restore $c
+
+	'&$_ror	($b,7);',	# $b>>>2
+	'&mov	(@T[1],$a);',	# $b for next round
+	'&xor	(@T[0],$c);',
+
+	'&$_rol	($a,5);',
+	'&add	($e,@T[0]);',
+	'&xor	(@T[1],$c)	if ($j==59);'.
+	'&xor	(@T[1],$b)	if ($j< 59);',	# b^c for next round
+
+	'&xor	($b,$c)		if ($j< 59);',	# c^d for next round
+	'&add	($e,$a);'	.'$j++; unshift(@V,pop(@V)); unshift(@T,pop(@T));'
+	);
+
+sub body_40_59 () {	# ((b^c)&(c^d))^c
+    # on entry @T[0]=(b^c), (c^=d)
+    $rx++;
+
+    use integer;
+    my ($k,$n);
+    my @r=@body_40_59;
+
+	$n = scalar(@r);
+	$k=(($jj+1)*12/20)*20*$n/12;	# 12 aesencs per these 20 rounds
+	@r[$k%$n].='&$aesenc();'	if ($jj==$k/$n && $rx!=40);
+	$jj++;
+
+    return @r;
+}
+$code.=<<___;
+.align	32
+.Loop_ssse3:
+___
+	&Xupdate_ssse3_16_31(\&body_00_19);
+	&Xupdate_ssse3_16_31(\&body_00_19);
+	&Xupdate_ssse3_16_31(\&body_00_19);
+	&Xupdate_ssse3_16_31(\&body_00_19);
+	&Xupdate_ssse3_32_79(\&body_00_19);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xupdate_ssse3_32_79(\&body_40_59);
+	&Xupdate_ssse3_32_79(\&body_40_59);
+	&Xupdate_ssse3_32_79(\&body_40_59);
+	&Xupdate_ssse3_32_79(\&body_40_59);
+	&Xupdate_ssse3_32_79(\&body_40_59);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xuplast_ssse3_80(\&body_20_39,".Ldone_ssse3");	# can jump to "done"
+
+				$saved_j=$j; @saved_V=@V;
+				$saved_r=$r; @saved_rndkey=@rndkey;
+
+	&Xloop_ssse3(\&body_20_39);
+	&Xloop_ssse3(\&body_20_39);
+	&Xloop_ssse3(\&body_20_39);
+
+$code.=<<___;
+	movups	$iv,48($out,$in0)		# write output
+	lea	64($in0),$in0
+
+	add	0($ctx),$A			# update context
+	add	4($ctx),@T[0]
+	add	8($ctx),$C
+	add	12($ctx),$D
+	mov	$A,0($ctx)
+	add	16($ctx),$E
+	mov	@T[0],4($ctx)
+	mov	@T[0],$B			# magic seed
+	mov	$C,8($ctx)
+	mov	$C,@T[1]
+	mov	$D,12($ctx)
+	xor	$D,@T[1]
+	mov	$E,16($ctx)
+	and	@T[1],@T[0]
+	jmp	.Loop_ssse3
+
+.Ldone_ssse3:
+___
+				$jj=$j=$saved_j; @V=@saved_V;
+				$r=$saved_r;     @rndkey=@saved_rndkey;
+
+	&Xtail_ssse3(\&body_20_39);
+	&Xtail_ssse3(\&body_20_39);
+	&Xtail_ssse3(\&body_20_39);
+
+$code.=<<___;
+	movups	$iv,48($out,$in0)		# write output
+	mov	88(%rsp),$ivp			# restore $ivp
+
+	add	0($ctx),$A			# update context
+	add	4($ctx),@T[0]
+	add	8($ctx),$C
+	mov	$A,0($ctx)
+	add	12($ctx),$D
+	mov	@T[0],4($ctx)
+	add	16($ctx),$E
+	mov	$C,8($ctx)
+	mov	$D,12($ctx)
+	mov	$E,16($ctx)
+	movups	$iv,($ivp)			# write IV
+___
+$code.=<<___ if ($win64);
+	movaps	96+0(%rsp),%xmm6
+	movaps	96+16(%rsp),%xmm7
+	movaps	96+32(%rsp),%xmm8
+	movaps	96+48(%rsp),%xmm9
+	movaps	96+64(%rsp),%xmm10
+	movaps	96+80(%rsp),%xmm11
+	movaps	96+96(%rsp),%xmm12
+	movaps	96+112(%rsp),%xmm13
+	movaps	96+128(%rsp),%xmm14
+	movaps	96+144(%rsp),%xmm15
+___
+$code.=<<___;
+	lea	`104+($win64?10*16:0)`(%rsp),%rsi
+.cfi_def_cfa	%rsi,56
+	mov	0(%rsi),%r15
+.cfi_restore	%r15
+	mov	8(%rsi),%r14
+.cfi_restore	%r14
+	mov	16(%rsi),%r13
+.cfi_restore	%r13
+	mov	24(%rsi),%r12
+.cfi_restore	%r12
+	mov	32(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	40(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	48(%rsi),%rsp
+.cfi_def_cfa	%rsp,8
+.Lepilogue_ssse3:
+	ret
+.cfi_endproc
+.size	aesni_cbc_sha1_enc_ssse3,.-aesni_cbc_sha1_enc_ssse3
+___
+
+						if ($stitched_decrypt) {{{
+# reset
+($in0,$out,$len,$key,$ivp,$ctx,$inp)=("%rdi","%rsi","%rdx","%rcx","%r8","%r9","%r10");
+$j=$jj=$r=$rx=0;
+$Xi=4;
+
+# reassign for Atom Silvermont (see above)
+($inout0,$inout1,$inout2,$inout3,$rndkey0)=map("%xmm$_",(0..4));
+@X=map("%xmm$_",(8..13,6,7));
+@Tx=map("%xmm$_",(14,15,5));
+
+my @aes256_dec = (
+	'&movdqu($inout0,"0x00($in0)");',
+	'&movdqu($inout1,"0x10($in0)");	&pxor	($inout0,$rndkey0);',
+	'&movdqu($inout2,"0x20($in0)");	&pxor	($inout1,$rndkey0);',
+	'&movdqu($inout3,"0x30($in0)");	&pxor	($inout2,$rndkey0);',
+
+	'&pxor	($inout3,$rndkey0);	&movups	($rndkey0,"16-112($key)");',
+	'&movaps("64(%rsp)",@X[2]);',	# save IV, originally @X[3]
+	undef,undef
+	);
+for ($i=0;$i<13;$i++) {
+    push (@aes256_dec,(
+	'&aesdec	($inout0,$rndkey0);',
+	'&aesdec	($inout1,$rndkey0);',
+	'&aesdec	($inout2,$rndkey0);',
+	'&aesdec	($inout3,$rndkey0);	&movups($rndkey0,"'.(16*($i+2)-112).'($key)");'
+	));
+    push (@aes256_dec,(undef,undef))	if (($i>=3 && $i<=5) || $i>=11);
+    push (@aes256_dec,(undef,undef))	if ($i==5);
+}
+push(@aes256_dec,(
+	'&aesdeclast	($inout0,$rndkey0);	&movups	(@X[0],"0x00($in0)");',
+	'&aesdeclast	($inout1,$rndkey0);	&movups	(@X[1],"0x10($in0)");',
+	'&aesdeclast	($inout2,$rndkey0);	&movups	(@X[2],"0x20($in0)");',
+	'&aesdeclast	($inout3,$rndkey0);	&movups	(@X[3],"0x30($in0)");',
+
+	'&xorps		($inout0,"64(%rsp)");	&movdqu	($rndkey0,"-112($key)");',
+	'&xorps		($inout1,@X[0]);	&movups	("0x00($out,$in0)",$inout0);',
+	'&xorps		($inout2,@X[1]);	&movups	("0x10($out,$in0)",$inout1);',
+	'&xorps		($inout3,@X[2]);	&movups	("0x20($out,$in0)",$inout2);',
+
+	'&movups	("0x30($out,$in0)",$inout3);'
+	));
+
+sub body_00_19_dec () {	# ((c^d)&b)^d
+    # on start @T[0]=(c^d)&b
+    return &body_20_39_dec() if ($rx==19);
+
+    my @r=@body_00_19;
+
+	unshift (@r,@aes256_dec[$rx])	if (@aes256_dec[$rx]);
+	$rx++;
+
+    return @r;
+}
+
+sub body_20_39_dec () {	# b^d^c
+    # on entry @T[0]=b^d
+    return &body_40_59_dec() if ($rx==39);
+
+    my @r=@body_20_39;
+
+	unshift (@r,@aes256_dec[$rx])	if (@aes256_dec[$rx]);
+	$rx++;
+
+    return @r;
+}
+
+sub body_40_59_dec () {	# ((b^c)&(c^d))^c
+    # on entry @T[0]=(b^c), (c^=d)
+
+    my @r=@body_40_59;
+
+	unshift (@r,@aes256_dec[$rx])	if (@aes256_dec[$rx]);
+	$rx++;
+
+    return @r;
+}
+
+$code.=<<___;
+.globl	aesni256_cbc_sha1_dec
+.type	aesni256_cbc_sha1_dec,\@abi-omnipotent
+.align	32
+aesni256_cbc_sha1_dec:
+	# caller should check for SSSE3 and AES-NI bits
+	mov	OPENSSL_ia32cap_P+0(%rip),%r10d
+	mov	OPENSSL_ia32cap_P+4(%rip),%r11d
+___
+$code.=<<___ if ($avx);
+	and	\$`1<<28`,%r11d		# mask AVX bit
+	and	\$`1<<30`,%r10d		# mask "Intel CPU" bit
+	or	%r11d,%r10d
+	cmp	\$`1<<28|1<<30`,%r10d
+	je	aesni256_cbc_sha1_dec_avx
+___
+$code.=<<___;
+	jmp	aesni256_cbc_sha1_dec_ssse3
+	ret
+.size	aesni256_cbc_sha1_dec,.-aesni256_cbc_sha1_dec
+
+.type	aesni256_cbc_sha1_dec_ssse3,\@function,6
+.align	32
+aesni256_cbc_sha1_dec_ssse3:
+.cfi_startproc
+	mov	`($win64?56:8)`(%rsp),$inp	# load 7th argument
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	lea	`-104-($win64?10*16:0)`(%rsp),%rsp
+.cfi_adjust_cfa_offset	`104+($win64?10*16:0)`
+___
+$code.=<<___ if ($win64);
+	movaps	%xmm6,96+0(%rsp)
+	movaps	%xmm7,96+16(%rsp)
+	movaps	%xmm8,96+32(%rsp)
+	movaps	%xmm9,96+48(%rsp)
+	movaps	%xmm10,96+64(%rsp)
+	movaps	%xmm11,96+80(%rsp)
+	movaps	%xmm12,96+96(%rsp)
+	movaps	%xmm13,96+112(%rsp)
+	movaps	%xmm14,96+128(%rsp)
+	movaps	%xmm15,96+144(%rsp)
+.Lprologue_dec_ssse3:
+___
+$code.=<<___;
+	mov	$in0,%r12			# reassign arguments
+	mov	$out,%r13
+	mov	$len,%r14
+	lea	112($key),%r15			# size optimization
+	movdqu	($ivp),@X[3]			# load IV
+	#mov	$ivp,88(%rsp)			# save $ivp
+___
+($in0,$out,$len,$key)=map("%r$_",(12..15));	# reassign arguments
+$code.=<<___;
+	shl	\$6,$len
+	sub	$in0,$out
+	add	$inp,$len		# end of input
+
+	lea	K_XX_XX(%rip),$K_XX_XX
+	mov	0($ctx),$A		# load context
+	mov	4($ctx),$B
+	mov	8($ctx),$C
+	mov	12($ctx),$D
+	mov	$B,@T[0]		# magic seed
+	mov	16($ctx),$E
+	mov	$C,@T[1]
+	xor	$D,@T[1]
+	and	@T[1],@T[0]
+
+	movdqa	64($K_XX_XX),@Tx[2]	# pbswap mask
+	movdqa	0($K_XX_XX),@Tx[1]	# K_00_19
+	movdqu	0($inp),@X[-4&7]	# load input to %xmm[0-3]
+	movdqu	16($inp),@X[-3&7]
+	movdqu	32($inp),@X[-2&7]
+	movdqu	48($inp),@X[-1&7]
+	pshufb	@Tx[2],@X[-4&7]		# byte swap
+	add	\$64,$inp
+	pshufb	@Tx[2],@X[-3&7]
+	pshufb	@Tx[2],@X[-2&7]
+	pshufb	@Tx[2],@X[-1&7]
+	paddd	@Tx[1],@X[-4&7]		# add K_00_19
+	paddd	@Tx[1],@X[-3&7]
+	paddd	@Tx[1],@X[-2&7]
+	movdqa	@X[-4&7],0(%rsp)	# X[]+K xfer to IALU
+	psubd	@Tx[1],@X[-4&7]		# restore X[]
+	movdqa	@X[-3&7],16(%rsp)
+	psubd	@Tx[1],@X[-3&7]
+	movdqa	@X[-2&7],32(%rsp)
+	psubd	@Tx[1],@X[-2&7]
+	movdqu	-112($key),$rndkey0	# $key[0]
+	jmp	.Loop_dec_ssse3
+
+.align	32
+.Loop_dec_ssse3:
+___
+	&Xupdate_ssse3_16_31(\&body_00_19_dec);
+	&Xupdate_ssse3_16_31(\&body_00_19_dec);
+	&Xupdate_ssse3_16_31(\&body_00_19_dec);
+	&Xupdate_ssse3_16_31(\&body_00_19_dec);
+	&Xupdate_ssse3_32_79(\&body_00_19_dec);
+	&Xupdate_ssse3_32_79(\&body_20_39_dec);
+	&Xupdate_ssse3_32_79(\&body_20_39_dec);
+	&Xupdate_ssse3_32_79(\&body_20_39_dec);
+	&Xupdate_ssse3_32_79(\&body_20_39_dec);
+	&Xupdate_ssse3_32_79(\&body_20_39_dec);
+	&Xupdate_ssse3_32_79(\&body_40_59_dec);
+	&Xupdate_ssse3_32_79(\&body_40_59_dec);
+	&Xupdate_ssse3_32_79(\&body_40_59_dec);
+	&Xupdate_ssse3_32_79(\&body_40_59_dec);
+	&Xupdate_ssse3_32_79(\&body_40_59_dec);
+	&Xupdate_ssse3_32_79(\&body_20_39_dec);
+	&Xuplast_ssse3_80(\&body_20_39_dec,".Ldone_dec_ssse3");	# can jump to "done"
+
+				$saved_j=$j;   @saved_V=@V;
+				$saved_rx=$rx;
+
+	&Xloop_ssse3(\&body_20_39_dec);
+	&Xloop_ssse3(\&body_20_39_dec);
+	&Xloop_ssse3(\&body_20_39_dec);
+
+	eval(@aes256_dec[-1]);			# last store
+$code.=<<___;
+	lea	64($in0),$in0
+
+	add	0($ctx),$A			# update context
+	add	4($ctx),@T[0]
+	add	8($ctx),$C
+	add	12($ctx),$D
+	mov	$A,0($ctx)
+	add	16($ctx),$E
+	mov	@T[0],4($ctx)
+	mov	@T[0],$B			# magic seed
+	mov	$C,8($ctx)
+	mov	$C,@T[1]
+	mov	$D,12($ctx)
+	xor	$D,@T[1]
+	mov	$E,16($ctx)
+	and	@T[1],@T[0]
+	jmp	.Loop_dec_ssse3
+
+.Ldone_dec_ssse3:
+___
+				$jj=$j=$saved_j; @V=@saved_V;
+				$rx=$saved_rx;
+
+	&Xtail_ssse3(\&body_20_39_dec);
+	&Xtail_ssse3(\&body_20_39_dec);
+	&Xtail_ssse3(\&body_20_39_dec);
+
+	eval(@aes256_dec[-1]);			# last store
+$code.=<<___;
+	add	0($ctx),$A			# update context
+	add	4($ctx),@T[0]
+	add	8($ctx),$C
+	mov	$A,0($ctx)
+	add	12($ctx),$D
+	mov	@T[0],4($ctx)
+	add	16($ctx),$E
+	mov	$C,8($ctx)
+	mov	$D,12($ctx)
+	mov	$E,16($ctx)
+	movups	@X[3],($ivp)			# write IV
+___
+$code.=<<___ if ($win64);
+	movaps	96+0(%rsp),%xmm6
+	movaps	96+16(%rsp),%xmm7
+	movaps	96+32(%rsp),%xmm8
+	movaps	96+48(%rsp),%xmm9
+	movaps	96+64(%rsp),%xmm10
+	movaps	96+80(%rsp),%xmm11
+	movaps	96+96(%rsp),%xmm12
+	movaps	96+112(%rsp),%xmm13
+	movaps	96+128(%rsp),%xmm14
+	movaps	96+144(%rsp),%xmm15
+___
+$code.=<<___;
+	lea	`104+($win64?10*16:0)`(%rsp),%rsi
+.cfi_cfa_def	%rsi,56
+	mov	0(%rsi),%r15
+.cfi_restore	%r15
+	mov	8(%rsi),%r14
+.cfi_restore	%r14
+	mov	16(%rsi),%r13
+.cfi_restore	%r13
+	mov	24(%rsi),%r12
+.cfi_restore	%r12
+	mov	32(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	40(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	48(%rsi),%rsp
+.cfi_cfa_def	%rsp,8
+.Lepilogue_dec_ssse3:
+	ret
+.cfi_endproc
+.size	aesni256_cbc_sha1_dec_ssse3,.-aesni256_cbc_sha1_dec_ssse3
+___
+						}}}
+$j=$jj=$r=$rx=0;
+
+if ($avx) {
+my ($in0,$out,$len,$key,$ivp,$ctx,$inp)=("%rdi","%rsi","%rdx","%rcx","%r8","%r9","%r10");
+
+my $Xi=4;
+my @X=map("%xmm$_",(4..7,0..3));
+my @Tx=map("%xmm$_",(8..10));
+my @V=($A,$B,$C,$D,$E)=("%eax","%ebx","%ecx","%edx","%ebp");	# size optimization
+my @T=("%esi","%edi");
+my ($rndkey0,$iv,$in)=map("%xmm$_",(11..13));
+my @rndkey=("%xmm14","%xmm15");
+my ($inout0,$inout1,$inout2,$inout3)=map("%xmm$_",(12..15));	# for dec
+my $Kx=@Tx[2];
+
+my $_rol=sub { &shld(@_[0],@_) };
+my $_ror=sub { &shrd(@_[0],@_) };
+
+$code.=<<___;
+.type	aesni_cbc_sha1_enc_avx,\@function,6
+.align	32
+aesni_cbc_sha1_enc_avx:
+.cfi_startproc
+	mov	`($win64?56:8)`(%rsp),$inp	# load 7th argument
+	#shr	\$6,$len			# debugging artefact
+	#jz	.Lepilogue_avx			# debugging artefact
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	lea	`-104-($win64?10*16:0)`(%rsp),%rsp
+.cfi_adjust_cfa_offset	`104+($win64?10*16:0)`
+	#mov	$in0,$inp			# debugging artefact
+	#lea	64(%rsp),$ctx			# debugging artefact
+___
+$code.=<<___ if ($win64);
+	movaps	%xmm6,96+0(%rsp)
+	movaps	%xmm7,96+16(%rsp)
+	movaps	%xmm8,96+32(%rsp)
+	movaps	%xmm9,96+48(%rsp)
+	movaps	%xmm10,96+64(%rsp)
+	movaps	%xmm11,96+80(%rsp)
+	movaps	%xmm12,96+96(%rsp)
+	movaps	%xmm13,96+112(%rsp)
+	movaps	%xmm14,96+128(%rsp)
+	movaps	%xmm15,96+144(%rsp)
+.Lprologue_avx:
+___
+$code.=<<___;
+	vzeroall
+	mov	$in0,%r12			# reassign arguments
+	mov	$out,%r13
+	mov	$len,%r14
+	lea	112($key),%r15			# size optimization
+	vmovdqu	($ivp),$iv			# load IV
+	mov	$ivp,88(%rsp)			# save $ivp
+___
+($in0,$out,$len,$key)=map("%r$_",(12..15));	# reassign arguments
+my $rounds="${ivp}d";
+$code.=<<___;
+	shl	\$6,$len
+	sub	$in0,$out
+	mov	240-112($key),$rounds
+	add	$inp,$len		# end of input
+
+	lea	K_XX_XX(%rip),$K_XX_XX
+	mov	0($ctx),$A		# load context
+	mov	4($ctx),$B
+	mov	8($ctx),$C
+	mov	12($ctx),$D
+	mov	$B,@T[0]		# magic seed
+	mov	16($ctx),$E
+	mov	$C,@T[1]
+	xor	$D,@T[1]
+	and	@T[1],@T[0]
+
+	vmovdqa	64($K_XX_XX),@X[2]	# pbswap mask
+	vmovdqa	0($K_XX_XX),$Kx		# K_00_19
+	vmovdqu	0($inp),@X[-4&7]	# load input to %xmm[0-3]
+	vmovdqu	16($inp),@X[-3&7]
+	vmovdqu	32($inp),@X[-2&7]
+	vmovdqu	48($inp),@X[-1&7]
+	vpshufb	@X[2],@X[-4&7],@X[-4&7]	# byte swap
+	add	\$64,$inp
+	vpshufb	@X[2],@X[-3&7],@X[-3&7]
+	vpshufb	@X[2],@X[-2&7],@X[-2&7]
+	vpshufb	@X[2],@X[-1&7],@X[-1&7]
+	vpaddd	$Kx,@X[-4&7],@X[0]	# add K_00_19
+	vpaddd	$Kx,@X[-3&7],@X[1]
+	vpaddd	$Kx,@X[-2&7],@X[2]
+	vmovdqa	@X[0],0(%rsp)		# X[]+K xfer to IALU
+	vmovdqa	@X[1],16(%rsp)
+	vmovdqa	@X[2],32(%rsp)
+	vmovups	-112($key),$rndkey[1]	# $key[0]
+	vmovups	16-112($key),$rndkey[0]	# forward reference
+	jmp	.Loop_avx
+___
+
+my $aesenc=sub {
+  use integer;
+  my ($n,$k)=($r/10,$r%10);
+    if ($k==0) {
+      $code.=<<___;
+	vmovdqu		`16*$n`($in0),$in		# load input
+	vpxor		$rndkey[1],$in,$in
+___
+      $code.=<<___ if ($n);
+	vmovups		$iv,`16*($n-1)`($out,$in0)	# write output
+___
+      $code.=<<___;
+	vpxor		$in,$iv,$iv
+	vaesenc		$rndkey[0],$iv,$iv
+	vmovups		`32+16*$k-112`($key),$rndkey[1]
+___
+    } elsif ($k==9) {
+      $sn++;
+      $code.=<<___;
+	cmp		\$11,$rounds
+	jb		.Lvaesenclast$sn
+	vaesenc		$rndkey[0],$iv,$iv
+	vmovups		`32+16*($k+0)-112`($key),$rndkey[1]
+	vaesenc		$rndkey[1],$iv,$iv
+	vmovups		`32+16*($k+1)-112`($key),$rndkey[0]
+	je		.Lvaesenclast$sn
+	vaesenc		$rndkey[0],$iv,$iv
+	vmovups		`32+16*($k+2)-112`($key),$rndkey[1]
+	vaesenc		$rndkey[1],$iv,$iv
+	vmovups		`32+16*($k+3)-112`($key),$rndkey[0]
+.Lvaesenclast$sn:
+	vaesenclast	$rndkey[0],$iv,$iv
+	vmovups		-112($key),$rndkey[0]
+	vmovups		16-112($key),$rndkey[1]		# forward reference
+___
+    } else {
+      $code.=<<___;
+	vaesenc		$rndkey[0],$iv,$iv
+	vmovups		`32+16*$k-112`($key),$rndkey[1]
+___
+    }
+    $r++;	unshift(@rndkey,pop(@rndkey));
+};
+
+sub Xupdate_avx_16_31()		# recall that $Xi starts with 4
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 40 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vpalignr(@X[0],@X[-3&7],@X[-4&7],8);	# compose "X[-14]" in "X[0]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	  &vpaddd	(@Tx[1],$Kx,@X[-1&7]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vpsrldq(@Tx[0],@X[-1&7],4);		# "X[-3]", 3 dwords
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vpxor	(@X[0],@X[0],@X[-4&7]);		# "X[0]"^="X[-16]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpxor	(@Tx[0],@Tx[0],@X[-2&7]);	# "X[-3]"^"X[-8]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpxor	(@X[0],@X[0],@Tx[0]);		# "X[0]"^="X[-3]"^"X[-8]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vmovdqa	(eval(16*(($Xi-1)&3))."(%rsp)",@Tx[1]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpsrld	(@Tx[0],@X[0],31);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpslldq(@Tx[1],@X[0],12);		# "X[0]"<<96, extract one dword
+	&vpaddd	(@X[0],@X[0],@X[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpor	(@X[0],@X[0],@Tx[0]);		# "X[0]"<<<=1
+	&vpsrld	(@Tx[0],@Tx[1],30);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpslld	(@Tx[1],@Tx[1],2);
+	&vpxor	(@X[0],@X[0],@Tx[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpxor	(@X[0],@X[0],@Tx[1]);		# "X[0]"^=("X[0]">>96)<<<2
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vmovdqa	($Kx,eval(16*(($Xi)/5))."($K_XX_XX)")	if ($Xi%5==0);	# K_XX_XX
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+
+	 foreach (@insns) { eval; }	# remaining instructions [if any]
+
+  $Xi++;	push(@X,shift(@X));	# "rotate" X[]
+}
+
+sub Xupdate_avx_32_79()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 to 48 instructions
+  my ($a,$b,$c,$d,$e);
+
+	&vpalignr(@Tx[0],@X[-1&7],@X[-2&7],8);	# compose "X[-6]"
+	&vpxor	(@X[0],@X[0],@X[-4&7]);		# "X[0]"="X[-32]"^"X[-16]"
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+
+	&vpxor	(@X[0],@X[0],@X[-7&7]);		# "X[0]"^="X[-28]"
+	 eval(shift(@insns));
+	 eval(shift(@insns))	if (@insns[0] !~ /&ro[rl]/);
+	  &vpaddd	(@Tx[1],$Kx,@X[-1&7]);
+	  &vmovdqa	($Kx,eval(16*($Xi/5))."($K_XX_XX)")	if ($Xi%5==0);
+	 eval(shift(@insns));		# ror
+	 eval(shift(@insns));
+
+	&vpxor	(@X[0],@X[0],@Tx[0]);		# "X[0]"^="X[-6]"
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+
+	&vpsrld	(@Tx[0],@X[0],30);
+	  &vmovdqa	(eval(16*(($Xi-1)&3))."(%rsp)",@Tx[1]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	 eval(shift(@insns));
+
+	&vpslld	(@X[0],@X[0],2);
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	 eval(shift(@insns));
+
+	&vpor	(@X[0],@X[0],@Tx[0]);		# "X[0]"<<<=2
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+
+	 foreach (@insns) { eval; }	# remaining instructions
+
+  $Xi++;	push(@X,shift(@X));	# "rotate" X[]
+}
+
+sub Xuplast_avx_80()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));
+	  &vpaddd	(@Tx[1],$Kx,@X[-1&7]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	  &vmovdqa	(eval(16*(($Xi-1)&3))."(%rsp)",@Tx[1]);	# X[]+K xfer IALU
+
+	 foreach (@insns) { eval; }		# remaining instructions
+
+	&cmp	($inp,$len);
+	&je	(shift);
+
+	&vmovdqa(@Tx[1],"64($K_XX_XX)");	# pbswap mask
+	&vmovdqa($Kx,"0($K_XX_XX)");		# K_00_19
+	&vmovdqu(@X[-4&7],"0($inp)");		# load input
+	&vmovdqu(@X[-3&7],"16($inp)");
+	&vmovdqu(@X[-2&7],"32($inp)");
+	&vmovdqu(@X[-1&7],"48($inp)");
+	&vpshufb(@X[-4&7],@X[-4&7],@Tx[1]);	# byte swap
+	&add	($inp,64);
+
+  $Xi=0;
+}
+
+sub Xloop_avx()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vpshufb(@X[($Xi-3)&7],@X[($Xi-3)&7],@Tx[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vpaddd	(@Tx[0],@X[($Xi-4)&7],$Kx);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vmovdqa(eval(16*$Xi)."(%rsp)",@Tx[0]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	foreach (@insns) { eval; }
+  $Xi++;
+}
+
+sub Xtail_avx()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	foreach (@insns) { eval; }
+}
+
+$code.=<<___;
+.align	32
+.Loop_avx:
+___
+	&Xupdate_avx_16_31(\&body_00_19);
+	&Xupdate_avx_16_31(\&body_00_19);
+	&Xupdate_avx_16_31(\&body_00_19);
+	&Xupdate_avx_16_31(\&body_00_19);
+	&Xupdate_avx_32_79(\&body_00_19);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xupdate_avx_32_79(\&body_40_59);
+	&Xupdate_avx_32_79(\&body_40_59);
+	&Xupdate_avx_32_79(\&body_40_59);
+	&Xupdate_avx_32_79(\&body_40_59);
+	&Xupdate_avx_32_79(\&body_40_59);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xuplast_avx_80(\&body_20_39,".Ldone_avx");	# can jump to "done"
+
+				$saved_j=$j; @saved_V=@V;
+				$saved_r=$r; @saved_rndkey=@rndkey;
+
+	&Xloop_avx(\&body_20_39);
+	&Xloop_avx(\&body_20_39);
+	&Xloop_avx(\&body_20_39);
+
+$code.=<<___;
+	vmovups	$iv,48($out,$in0)		# write output
+	lea	64($in0),$in0
+
+	add	0($ctx),$A			# update context
+	add	4($ctx),@T[0]
+	add	8($ctx),$C
+	add	12($ctx),$D
+	mov	$A,0($ctx)
+	add	16($ctx),$E
+	mov	@T[0],4($ctx)
+	mov	@T[0],$B			# magic seed
+	mov	$C,8($ctx)
+	mov	$C,@T[1]
+	mov	$D,12($ctx)
+	xor	$D,@T[1]
+	mov	$E,16($ctx)
+	and	@T[1],@T[0]
+	jmp	.Loop_avx
+
+.Ldone_avx:
+___
+				$jj=$j=$saved_j; @V=@saved_V;
+				$r=$saved_r;     @rndkey=@saved_rndkey;
+
+	&Xtail_avx(\&body_20_39);
+	&Xtail_avx(\&body_20_39);
+	&Xtail_avx(\&body_20_39);
+
+$code.=<<___;
+	vmovups	$iv,48($out,$in0)		# write output
+	mov	88(%rsp),$ivp			# restore $ivp
+
+	add	0($ctx),$A			# update context
+	add	4($ctx),@T[0]
+	add	8($ctx),$C
+	mov	$A,0($ctx)
+	add	12($ctx),$D
+	mov	@T[0],4($ctx)
+	add	16($ctx),$E
+	mov	$C,8($ctx)
+	mov	$D,12($ctx)
+	mov	$E,16($ctx)
+	vmovups	$iv,($ivp)			# write IV
+	vzeroall
+___
+$code.=<<___ if ($win64);
+	movaps	96+0(%rsp),%xmm6
+	movaps	96+16(%rsp),%xmm7
+	movaps	96+32(%rsp),%xmm8
+	movaps	96+48(%rsp),%xmm9
+	movaps	96+64(%rsp),%xmm10
+	movaps	96+80(%rsp),%xmm11
+	movaps	96+96(%rsp),%xmm12
+	movaps	96+112(%rsp),%xmm13
+	movaps	96+128(%rsp),%xmm14
+	movaps	96+144(%rsp),%xmm15
+___
+$code.=<<___;
+	lea	`104+($win64?10*16:0)`(%rsp),%rsi
+.cfi_def_cfa	%rsi,56
+	mov	0(%rsi),%r15
+.cfi_restore	%r15
+	mov	8(%rsi),%r14
+.cfi_restore	%r14
+	mov	16(%rsi),%r13
+.cfi_restore	%r13
+	mov	24(%rsi),%r12
+.cfi_restore	%r12
+	mov	32(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	40(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	48(%rsi),%rsp
+.cfi_def_cfa	%rsp,8
+.Lepilogue_avx:
+	ret
+.cfi_endproc
+.size	aesni_cbc_sha1_enc_avx,.-aesni_cbc_sha1_enc_avx
+___
+
+						if ($stitched_decrypt) {{{
+# reset
+($in0,$out,$len,$key,$ivp,$ctx,$inp)=("%rdi","%rsi","%rdx","%rcx","%r8","%r9","%r10");
+
+$j=$jj=$r=$rx=0;
+$Xi=4;
+
+@aes256_dec = (
+	'&vpxor	($inout0,$rndkey0,"0x00($in0)");',
+	'&vpxor	($inout1,$rndkey0,"0x10($in0)");',
+	'&vpxor	($inout2,$rndkey0,"0x20($in0)");',
+	'&vpxor	($inout3,$rndkey0,"0x30($in0)");',
+
+	'&vmovups($rndkey0,"16-112($key)");',
+	'&vmovups("64(%rsp)",@X[2]);',		# save IV, originally @X[3]
+	undef,undef
+	);
+for ($i=0;$i<13;$i++) {
+    push (@aes256_dec,(
+	'&vaesdec	($inout0,$inout0,$rndkey0);',
+	'&vaesdec	($inout1,$inout1,$rndkey0);',
+	'&vaesdec	($inout2,$inout2,$rndkey0);',
+	'&vaesdec	($inout3,$inout3,$rndkey0);	&vmovups($rndkey0,"'.(16*($i+2)-112).'($key)");'
+	));
+    push (@aes256_dec,(undef,undef))	if (($i>=3 && $i<=5) || $i>=11);
+    push (@aes256_dec,(undef,undef))	if ($i==5);
+}
+push(@aes256_dec,(
+	'&vaesdeclast	($inout0,$inout0,$rndkey0);	&vmovups(@X[0],"0x00($in0)");',
+	'&vaesdeclast	($inout1,$inout1,$rndkey0);	&vmovups(@X[1],"0x10($in0)");',
+	'&vaesdeclast	($inout2,$inout2,$rndkey0);	&vmovups(@X[2],"0x20($in0)");',
+	'&vaesdeclast	($inout3,$inout3,$rndkey0);	&vmovups(@X[3],"0x30($in0)");',
+
+	'&vxorps	($inout0,$inout0,"64(%rsp)");	&vmovdqu($rndkey0,"-112($key)");',
+	'&vxorps	($inout1,$inout1,@X[0]);	&vmovups("0x00($out,$in0)",$inout0);',
+	'&vxorps	($inout2,$inout2,@X[1]);	&vmovups("0x10($out,$in0)",$inout1);',
+	'&vxorps	($inout3,$inout3,@X[2]);	&vmovups("0x20($out,$in0)",$inout2);',
+
+	'&vmovups	("0x30($out,$in0)",$inout3);'
+	));
+
+$code.=<<___;
+.type	aesni256_cbc_sha1_dec_avx,\@function,6
+.align	32
+aesni256_cbc_sha1_dec_avx:
+.cfi_startproc
+	mov	`($win64?56:8)`(%rsp),$inp	# load 7th argument
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	lea	`-104-($win64?10*16:0)`(%rsp),%rsp
+.cfi_adjust_cfa_offset	`104+($win64?10*16:0)`
+___
+$code.=<<___ if ($win64);
+	movaps	%xmm6,96+0(%rsp)
+	movaps	%xmm7,96+16(%rsp)
+	movaps	%xmm8,96+32(%rsp)
+	movaps	%xmm9,96+48(%rsp)
+	movaps	%xmm10,96+64(%rsp)
+	movaps	%xmm11,96+80(%rsp)
+	movaps	%xmm12,96+96(%rsp)
+	movaps	%xmm13,96+112(%rsp)
+	movaps	%xmm14,96+128(%rsp)
+	movaps	%xmm15,96+144(%rsp)
+.Lprologue_dec_avx:
+___
+$code.=<<___;
+	vzeroall
+	mov	$in0,%r12			# reassign arguments
+	mov	$out,%r13
+	mov	$len,%r14
+	lea	112($key),%r15			# size optimization
+	vmovdqu	($ivp),@X[3]			# load IV
+___
+($in0,$out,$len,$key)=map("%r$_",(12..15));	# reassign arguments
+$code.=<<___;
+	shl	\$6,$len
+	sub	$in0,$out
+	add	$inp,$len		# end of input
+
+	lea	K_XX_XX(%rip),$K_XX_XX
+	mov	0($ctx),$A		# load context
+	mov	4($ctx),$B
+	mov	8($ctx),$C
+	mov	12($ctx),$D
+	mov	$B,@T[0]		# magic seed
+	mov	16($ctx),$E
+	mov	$C,@T[1]
+	xor	$D,@T[1]
+	and	@T[1],@T[0]
+
+	vmovdqa	64($K_XX_XX),@X[2]	# pbswap mask
+	vmovdqa	0($K_XX_XX),$Kx		# K_00_19
+	vmovdqu	0($inp),@X[-4&7]	# load input to %xmm[0-3]
+	vmovdqu	16($inp),@X[-3&7]
+	vmovdqu	32($inp),@X[-2&7]
+	vmovdqu	48($inp),@X[-1&7]
+	vpshufb	@X[2],@X[-4&7],@X[-4&7]	# byte swap
+	add	\$64,$inp
+	vpshufb	@X[2],@X[-3&7],@X[-3&7]
+	vpshufb	@X[2],@X[-2&7],@X[-2&7]
+	vpshufb	@X[2],@X[-1&7],@X[-1&7]
+	vpaddd	$Kx,@X[-4&7],@X[0]	# add K_00_19
+	vpaddd	$Kx,@X[-3&7],@X[1]
+	vpaddd	$Kx,@X[-2&7],@X[2]
+	vmovdqa	@X[0],0(%rsp)		# X[]+K xfer to IALU
+	vmovdqa	@X[1],16(%rsp)
+	vmovdqa	@X[2],32(%rsp)
+	vmovups	-112($key),$rndkey0	# $key[0]
+	jmp	.Loop_dec_avx
+
+.align	32
+.Loop_dec_avx:
+___
+	&Xupdate_avx_16_31(\&body_00_19_dec);
+	&Xupdate_avx_16_31(\&body_00_19_dec);
+	&Xupdate_avx_16_31(\&body_00_19_dec);
+	&Xupdate_avx_16_31(\&body_00_19_dec);
+	&Xupdate_avx_32_79(\&body_00_19_dec);
+	&Xupdate_avx_32_79(\&body_20_39_dec);
+	&Xupdate_avx_32_79(\&body_20_39_dec);
+	&Xupdate_avx_32_79(\&body_20_39_dec);
+	&Xupdate_avx_32_79(\&body_20_39_dec);
+	&Xupdate_avx_32_79(\&body_20_39_dec);
+	&Xupdate_avx_32_79(\&body_40_59_dec);
+	&Xupdate_avx_32_79(\&body_40_59_dec);
+	&Xupdate_avx_32_79(\&body_40_59_dec);
+	&Xupdate_avx_32_79(\&body_40_59_dec);
+	&Xupdate_avx_32_79(\&body_40_59_dec);
+	&Xupdate_avx_32_79(\&body_20_39_dec);
+	&Xuplast_avx_80(\&body_20_39_dec,".Ldone_dec_avx");	# can jump to "done"
+
+				$saved_j=$j; @saved_V=@V;
+				$saved_rx=$rx;
+
+	&Xloop_avx(\&body_20_39_dec);
+	&Xloop_avx(\&body_20_39_dec);
+	&Xloop_avx(\&body_20_39_dec);
+
+	eval(@aes256_dec[-1]);			# last store
+$code.=<<___;
+	lea	64($in0),$in0
+
+	add	0($ctx),$A			# update context
+	add	4($ctx),@T[0]
+	add	8($ctx),$C
+	add	12($ctx),$D
+	mov	$A,0($ctx)
+	add	16($ctx),$E
+	mov	@T[0],4($ctx)
+	mov	@T[0],$B			# magic seed
+	mov	$C,8($ctx)
+	mov	$C,@T[1]
+	mov	$D,12($ctx)
+	xor	$D,@T[1]
+	mov	$E,16($ctx)
+	and	@T[1],@T[0]
+	jmp	.Loop_dec_avx
+
+.Ldone_dec_avx:
+___
+				$jj=$j=$saved_j; @V=@saved_V;
+				$rx=$saved_rx;
+
+	&Xtail_avx(\&body_20_39_dec);
+	&Xtail_avx(\&body_20_39_dec);
+	&Xtail_avx(\&body_20_39_dec);
+
+	eval(@aes256_dec[-1]);			# last store
+$code.=<<___;
+
+	add	0($ctx),$A			# update context
+	add	4($ctx),@T[0]
+	add	8($ctx),$C
+	mov	$A,0($ctx)
+	add	12($ctx),$D
+	mov	@T[0],4($ctx)
+	add	16($ctx),$E
+	mov	$C,8($ctx)
+	mov	$D,12($ctx)
+	mov	$E,16($ctx)
+	vmovups	@X[3],($ivp)			# write IV
+	vzeroall
+___
+$code.=<<___ if ($win64);
+	movaps	96+0(%rsp),%xmm6
+	movaps	96+16(%rsp),%xmm7
+	movaps	96+32(%rsp),%xmm8
+	movaps	96+48(%rsp),%xmm9
+	movaps	96+64(%rsp),%xmm10
+	movaps	96+80(%rsp),%xmm11
+	movaps	96+96(%rsp),%xmm12
+	movaps	96+112(%rsp),%xmm13
+	movaps	96+128(%rsp),%xmm14
+	movaps	96+144(%rsp),%xmm15
+___
+$code.=<<___;
+	lea	`104+($win64?10*16:0)`(%rsp),%rsi
+.cfi_def_cfa	%rsi,56
+	mov	0(%rsi),%r15
+.cfi_restore	%r15
+	mov	8(%rsi),%r14
+.cfi_restore	%r14
+	mov	16(%rsi),%r13
+.cfi_restore	%r13
+	mov	24(%rsi),%r12
+.cfi_restore	%r12
+	mov	32(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	40(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	48(%rsi),%rsp
+.cfi_def_cfa	%rsp,8
+.Lepilogue_dec_avx:
+	ret
+.cfi_endproc
+.size	aesni256_cbc_sha1_dec_avx,.-aesni256_cbc_sha1_dec_avx
+___
+						}}}
+}
+$code.=<<___;
+.align	64
+K_XX_XX:
+.long	0x5a827999,0x5a827999,0x5a827999,0x5a827999	# K_00_19
+.long	0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1	# K_20_39
+.long	0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc	# K_40_59
+.long	0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6	# K_60_79
+.long	0x00010203,0x04050607,0x08090a0b,0x0c0d0e0f	# pbswap mask
+.byte	0xf,0xe,0xd,0xc,0xb,0xa,0x9,0x8,0x7,0x6,0x5,0x4,0x3,0x2,0x1,0x0
+
+.asciz	"AESNI-CBC+SHA1 stitch for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+.align	64
+___
+						if ($shaext) {{{
+($in0,$out,$len,$key,$ivp,$ctx,$inp)=("%rdi","%rsi","%rdx","%rcx","%r8","%r9","%r10");
+
+$rounds="%r11d";
+
+($iv,$in,$rndkey0)=map("%xmm$_",(2,14,15));
+@rndkey=("%xmm0","%xmm1");
+$r=0;
+
+my ($BSWAP,$ABCD,$E,$E_,$ABCD_SAVE,$E_SAVE)=map("%xmm$_",(7..12));
+my @MSG=map("%xmm$_",(3..6));
+
+$code.=<<___;
+.type	aesni_cbc_sha1_enc_shaext,\@function,6
+.align	32
+aesni_cbc_sha1_enc_shaext:
+	mov	`($win64?56:8)`(%rsp),$inp	# load 7th argument
+___
+$code.=<<___ if ($win64);
+	lea	`-8-10*16`(%rsp),%rsp
+	movaps	%xmm6,-8-10*16(%rax)
+	movaps	%xmm7,-8-9*16(%rax)
+	movaps	%xmm8,-8-8*16(%rax)
+	movaps	%xmm9,-8-7*16(%rax)
+	movaps	%xmm10,-8-6*16(%rax)
+	movaps	%xmm11,-8-5*16(%rax)
+	movaps	%xmm12,-8-4*16(%rax)
+	movaps	%xmm13,-8-3*16(%rax)
+	movaps	%xmm14,-8-2*16(%rax)
+	movaps	%xmm15,-8-1*16(%rax)
+.Lprologue_shaext:
+___
+$code.=<<___;
+	movdqu	($ctx),$ABCD
+	movd	16($ctx),$E
+	movdqa	K_XX_XX+0x50(%rip),$BSWAP	# byte-n-word swap
+
+	mov	240($key),$rounds
+	sub	$in0,$out
+	movups	($key),$rndkey0			# $key[0]
+	movups	($ivp),$iv			# load IV
+	movups	16($key),$rndkey[0]		# forward reference
+	lea	112($key),$key			# size optimization
+
+	pshufd	\$0b00011011,$ABCD,$ABCD	# flip word order
+	pshufd	\$0b00011011,$E,$E		# flip word order
+	jmp	.Loop_shaext
+
+.align	16
+.Loop_shaext:
+___
+	&$aesenc();
+$code.=<<___;
+	movdqu		($inp),@MSG[0]
+	movdqa		$E,$E_SAVE		# offload $E
+	pshufb		$BSWAP,@MSG[0]
+	movdqu		0x10($inp),@MSG[1]
+	movdqa		$ABCD,$ABCD_SAVE	# offload $ABCD
+___
+	&$aesenc();
+$code.=<<___;
+	pshufb		$BSWAP,@MSG[1]
+
+	paddd		@MSG[0],$E
+	movdqu		0x20($inp),@MSG[2]
+	lea		0x40($inp),$inp
+	pxor		$E_SAVE,@MSG[0]		# black magic
+___
+	&$aesenc();
+$code.=<<___;
+	pxor		$E_SAVE,@MSG[0]		# black magic
+	movdqa		$ABCD,$E_
+	pshufb		$BSWAP,@MSG[2]
+	sha1rnds4	\$0,$E,$ABCD		# 0-3
+	sha1nexte	@MSG[1],$E_
+___
+	&$aesenc();
+$code.=<<___;
+	sha1msg1	@MSG[1],@MSG[0]
+	movdqu		-0x10($inp),@MSG[3]
+	movdqa		$ABCD,$E
+	pshufb		$BSWAP,@MSG[3]
+___
+	&$aesenc();
+$code.=<<___;
+	sha1rnds4	\$0,$E_,$ABCD		# 4-7
+	sha1nexte	@MSG[2],$E
+	pxor		@MSG[2],@MSG[0]
+	sha1msg1	@MSG[2],@MSG[1]
+___
+	&$aesenc();
+
+for($i=2;$i<20-4;$i++) {
+$code.=<<___;
+	movdqa		$ABCD,$E_
+	sha1rnds4	\$`int($i/5)`,$E,$ABCD	# 8-11
+	sha1nexte	@MSG[3],$E_
+___
+	&$aesenc();
+$code.=<<___;
+	sha1msg2	@MSG[3],@MSG[0]
+	pxor		@MSG[3],@MSG[1]
+	sha1msg1	@MSG[3],@MSG[2]
+___
+	($E,$E_)=($E_,$E);
+	push(@MSG,shift(@MSG));
+
+	&$aesenc();
+}
+$code.=<<___;
+	movdqa		$ABCD,$E_
+	sha1rnds4	\$3,$E,$ABCD		# 64-67
+	sha1nexte	@MSG[3],$E_
+	sha1msg2	@MSG[3],@MSG[0]
+	pxor		@MSG[3],@MSG[1]
+___
+	&$aesenc();
+$code.=<<___;
+	movdqa		$ABCD,$E
+	sha1rnds4	\$3,$E_,$ABCD		# 68-71
+	sha1nexte	@MSG[0],$E
+	sha1msg2	@MSG[0],@MSG[1]
+___
+	&$aesenc();
+$code.=<<___;
+	movdqa		$E_SAVE,@MSG[0]
+	movdqa		$ABCD,$E_
+	sha1rnds4	\$3,$E,$ABCD		# 72-75
+	sha1nexte	@MSG[1],$E_
+___
+	&$aesenc();
+$code.=<<___;
+	movdqa		$ABCD,$E
+	sha1rnds4	\$3,$E_,$ABCD		# 76-79
+	sha1nexte	$MSG[0],$E
+___
+	while($r<40)	{ &$aesenc(); }		# remaining aesenc's
+$code.=<<___;
+	dec		$len
+
+	paddd		$ABCD_SAVE,$ABCD
+	movups		$iv,48($out,$in0)	# write output
+	lea		64($in0),$in0
+	jnz		.Loop_shaext
+
+	pshufd	\$0b00011011,$ABCD,$ABCD
+	pshufd	\$0b00011011,$E,$E
+	movups	$iv,($ivp)			# write IV
+	movdqu	$ABCD,($ctx)
+	movd	$E,16($ctx)
+___
+$code.=<<___ if ($win64);
+	movaps	-8-10*16(%rax),%xmm6
+	movaps	-8-9*16(%rax),%xmm7
+	movaps	-8-8*16(%rax),%xmm8
+	movaps	-8-7*16(%rax),%xmm9
+	movaps	-8-6*16(%rax),%xmm10
+	movaps	-8-5*16(%rax),%xmm11
+	movaps	-8-4*16(%rax),%xmm12
+	movaps	-8-3*16(%rax),%xmm13
+	movaps	-8-2*16(%rax),%xmm14
+	movaps	-8-1*16(%rax),%xmm15
+	mov	%rax,%rsp
+.Lepilogue_shaext:
+___
+$code.=<<___;
+	ret
+.size	aesni_cbc_sha1_enc_shaext,.-aesni_cbc_sha1_enc_shaext
+___
+						}}}
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	ssse3_handler,\@abi-omnipotent
+.align	16
+ssse3_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lcommon_seh_tail
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lcommon_seh_tail
+___
+$code.=<<___ if ($shaext);
+	lea	aesni_cbc_sha1_enc_shaext(%rip),%r10
+	cmp	%r10,%rbx
+	jb	.Lseh_no_shaext
+
+	lea	(%rax),%rsi
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$20,%ecx
+	.long	0xa548f3fc		# cld; rep movsq
+	lea	168(%rax),%rax		# adjust stack pointer
+	jmp	.Lcommon_seh_tail
+.Lseh_no_shaext:
+___
+$code.=<<___;
+	lea	96(%rax),%rsi
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$20,%ecx
+	.long	0xa548f3fc		# cld; rep movsq
+	lea	`104+10*16`(%rax),%rax	# adjust stack pointer
+
+	mov	0(%rax),%r15
+	mov	8(%rax),%r14
+	mov	16(%rax),%r13
+	mov	24(%rax),%r12
+	mov	32(%rax),%rbp
+	mov	40(%rax),%rbx
+	lea	48(%rax),%rax
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+.Lcommon_seh_tail:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	ssse3_handler,.-ssse3_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_aesni_cbc_sha1_enc_ssse3
+	.rva	.LSEH_end_aesni_cbc_sha1_enc_ssse3
+	.rva	.LSEH_info_aesni_cbc_sha1_enc_ssse3
+___
+$code.=<<___ if ($avx);
+	.rva	.LSEH_begin_aesni_cbc_sha1_enc_avx
+	.rva	.LSEH_end_aesni_cbc_sha1_enc_avx
+	.rva	.LSEH_info_aesni_cbc_sha1_enc_avx
+___
+$code.=<<___ if ($shaext);
+	.rva	.LSEH_begin_aesni_cbc_sha1_enc_shaext
+	.rva	.LSEH_end_aesni_cbc_sha1_enc_shaext
+	.rva	.LSEH_info_aesni_cbc_sha1_enc_shaext
+___
+$code.=<<___;
+.section	.xdata
+.align	8
+.LSEH_info_aesni_cbc_sha1_enc_ssse3:
+	.byte	9,0,0,0
+	.rva	ssse3_handler
+	.rva	.Lprologue_ssse3,.Lepilogue_ssse3	# HandlerData[]
+___
+$code.=<<___ if ($avx);
+.LSEH_info_aesni_cbc_sha1_enc_avx:
+	.byte	9,0,0,0
+	.rva	ssse3_handler
+	.rva	.Lprologue_avx,.Lepilogue_avx		# HandlerData[]
+___
+$code.=<<___ if ($shaext);
+.LSEH_info_aesni_cbc_sha1_enc_shaext:
+	.byte	9,0,0,0
+	.rva	ssse3_handler
+	.rva	.Lprologue_shaext,.Lepilogue_shaext	# HandlerData[]
+___
+}
+
+####################################################################
+sub rex {
+  local *opcode=shift;
+  my ($dst,$src)=@_;
+  my $rex=0;
+
+    $rex|=0x04			if($dst>=8);
+    $rex|=0x01			if($src>=8);
+    unshift @opcode,$rex|0x40	if($rex);
+}
+
+sub sha1rnds4 {
+    if (@_[0] =~ /\$([x0-9a-f]+),\s*%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+      my @opcode=(0x0f,0x3a,0xcc);
+	rex(\@opcode,$3,$2);
+	push @opcode,0xc0|($2&7)|(($3&7)<<3);		# ModR/M
+	my $c=$1;
+	push @opcode,$c=~/^0/?oct($c):$c;
+	return ".byte\t".join(',',@opcode);
+    } else {
+	return "sha1rnds4\t".@_[0];
+    }
+}
+
+sub sha1op38 {
+    my $instr = shift;
+    my %opcodelet = (
+		"sha1nexte" => 0xc8,
+  		"sha1msg1"  => 0xc9,
+		"sha1msg2"  => 0xca	);
+
+    if (defined($opcodelet{$instr}) && @_[0] =~ /%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+      my @opcode=(0x0f,0x38);
+	rex(\@opcode,$2,$1);
+	push @opcode,$opcodelet{$instr};
+	push @opcode,0xc0|($1&7)|(($2&7)<<3);		# ModR/M
+	return ".byte\t".join(',',@opcode);
+    } else {
+	return $instr."\t".@_[0];
+    }
+}
+
+sub aesni {
+  my $line=shift;
+  my @opcode=(0x0f,0x38);
+
+    if ($line=~/(aes[a-z]+)\s+%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+	my %opcodelet = (
+		"aesenc" => 0xdc,	"aesenclast" => 0xdd,
+		"aesdec" => 0xde,	"aesdeclast" => 0xdf
+	);
+	return undef if (!defined($opcodelet{$1}));
+	rex(\@opcode,$3,$2);
+	push @opcode,$opcodelet{$1},0xc0|($2&7)|(($3&7)<<3);	# ModR/M
+	unshift @opcode,0x66;
+	return ".byte\t".join(',',@opcode);
+    }
+    return $line;
+}
+
+foreach (split("\n",$code)) {
+        s/\`([^\`]*)\`/eval $1/geo;
+
+	s/\b(sha1rnds4)\s+(.*)/sha1rnds4($2)/geo		or
+	s/\b(sha1[^\s]*)\s+(.*)/sha1op38($1,$2)/geo		or
+	s/\b(aes.*%xmm[0-9]+).*$/aesni($1)/geo;
+
+	print $_,"\n";
+}
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-sha256-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-sha256-x86_64.pl
new file mode 100644
index 000000000..ef4602371
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-sha256-x86_64.pl
@@ -0,0 +1,1770 @@
+#! /usr/bin/env perl
+# Copyright 2013-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# January 2013
+#
+# This is AESNI-CBC+SHA256 stitch implementation. The idea, as spelled
+# in http://download.intel.com/design/intarch/papers/323686.pdf, is
+# that since AESNI-CBC encrypt exhibit *very* low instruction-level
+# parallelism, interleaving it with another algorithm would allow to
+# utilize processor resources better and achieve better performance.
+# SHA256 instruction sequences(*) are taken from sha512-x86_64.pl and
+# AESNI code is weaved into it. As SHA256 dominates execution time,
+# stitch performance does not depend on AES key length. Below are
+# performance numbers in cycles per processed byte, less is better,
+# for standalone AESNI-CBC encrypt, standalone SHA256, and stitched
+# subroutine:
+#
+#		 AES-128/-192/-256+SHA256   this(**)	gain
+# Sandy Bridge	    5.05/6.05/7.05+11.6	    13.0	+28%/36%/43%
+# Ivy Bridge	    5.05/6.05/7.05+10.3	    11.6	+32%/41%/50%
+# Haswell	    4.43/5.29/6.19+7.80	    8.79	+39%/49%/59%
+# Skylake	    2.62/3.14/3.62+7.70	    8.10	+27%/34%/40%
+# Bulldozer	    5.77/6.89/8.00+13.7	    13.7	+42%/50%/58%
+# Ryzen(***)	    2.71/-/3.71+2.05	    2.74/-/3.73	+74%/-/54%
+# Goldmont(***)	    3.82/-/5.35+4.16	    4.73/-/5.94	+69%/-/60%
+#
+# (*)	there are XOP, AVX1 and AVX2 code paths, meaning that
+#	Westmere is omitted from loop, this is because gain was not
+#	estimated high enough to justify the effort;
+# (**)	these are EVP-free results, results obtained with 'speed
+#	-evp aes-256-cbc-hmac-sha256' will vary by percent or two;
+# (***)	these are SHAEXT results;
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.19) + ($1>=2.22);
+}
+
+if (!$avx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	   `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.09) + ($1>=2.10);
+}
+
+if (!$avx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	   `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$avx = ($1>=10) + ($1>=12);
+}
+
+if (!$avx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([3-9]\.[0-9]+)/) {
+	$avx = ($2>=3.0) + ($2>3.0);
+}
+
+$shaext=$avx;	### set to zero if compiling for 1.0.1
+$avx=1		if (!$shaext && $avx);
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+$func="aesni_cbc_sha256_enc";
+$TABLE="K256";
+$SZ=4;
+@ROT=($A,$B,$C,$D,$E,$F,$G,$H)=("%eax","%ebx","%ecx","%edx",
+				"%r8d","%r9d","%r10d","%r11d");
+($T1,$a0,$a1,$a2,$a3)=("%r12d","%r13d","%r14d","%r15d","%esi");
+@Sigma0=( 2,13,22);
+@Sigma1=( 6,11,25);
+@sigma0=( 7,18, 3);
+@sigma1=(17,19,10);
+$rounds=64;
+
+########################################################################
+# void aesni_cbc_sha256_enc(const void *inp,
+#			void *out,
+#			size_t length,
+#			const AES_KEY *key,
+#			unsigned char *iv,
+#			SHA256_CTX *ctx,
+#			const void *in0);
+($inp,  $out,  $len,  $key,  $ivp, $ctx, $in0) =
+("%rdi","%rsi","%rdx","%rcx","%r8","%r9","%r10");
+
+$Tbl="%rbp";
+
+$_inp="16*$SZ+0*8(%rsp)";
+$_out="16*$SZ+1*8(%rsp)";
+$_end="16*$SZ+2*8(%rsp)";
+$_key="16*$SZ+3*8(%rsp)";
+$_ivp="16*$SZ+4*8(%rsp)";
+$_ctx="16*$SZ+5*8(%rsp)";
+$_in0="16*$SZ+6*8(%rsp)";
+$_rsp="`16*$SZ+7*8`(%rsp)";
+$framesz=16*$SZ+8*8;
+
+$code=<<___;
+.text
+
+.extern	OPENSSL_ia32cap_P
+.globl	$func
+.type	$func,\@abi-omnipotent
+.align	16
+$func:
+___
+						if ($avx) {
+$code.=<<___;
+	lea	OPENSSL_ia32cap_P(%rip),%r11
+	mov	\$1,%eax
+	cmp	\$0,`$win64?"%rcx":"%rdi"`
+	je	.Lprobe
+	mov	0(%r11),%eax
+	mov	4(%r11),%r10
+___
+$code.=<<___ if ($shaext);
+	bt	\$61,%r10			# check for SHA
+	jc	${func}_shaext
+___
+$code.=<<___;
+	mov	%r10,%r11
+	shr	\$32,%r11
+
+	test	\$`1<<11`,%r10d			# check for XOP
+	jnz	${func}_xop
+___
+$code.=<<___ if ($avx>1);
+	and	\$`1<<8|1<<5|1<<3`,%r11d	# check for BMI2+AVX2+BMI1
+	cmp	\$`1<<8|1<<5|1<<3`,%r11d
+	je	${func}_avx2
+___
+$code.=<<___;
+	and	\$`1<<28`,%r10d			# check for AVX
+	jnz	${func}_avx
+	ud2
+___
+						}
+$code.=<<___;
+	xor	%eax,%eax
+	cmp	\$0,`$win64?"%rcx":"%rdi"`
+	je	.Lprobe
+	ud2
+.Lprobe:
+	ret
+.size	$func,.-$func
+
+.align	64
+.type	$TABLE,\@object
+$TABLE:
+	.long	0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5
+	.long	0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5
+	.long	0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5
+	.long	0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5
+	.long	0xd807aa98,0x12835b01,0x243185be,0x550c7dc3
+	.long	0xd807aa98,0x12835b01,0x243185be,0x550c7dc3
+	.long	0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174
+	.long	0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174
+	.long	0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc
+	.long	0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc
+	.long	0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da
+	.long	0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da
+	.long	0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7
+	.long	0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7
+	.long	0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967
+	.long	0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967
+	.long	0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13
+	.long	0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13
+	.long	0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85
+	.long	0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85
+	.long	0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3
+	.long	0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3
+	.long	0xd192e819,0xd6990624,0xf40e3585,0x106aa070
+	.long	0xd192e819,0xd6990624,0xf40e3585,0x106aa070
+	.long	0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5
+	.long	0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5
+	.long	0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3
+	.long	0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3
+	.long	0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208
+	.long	0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208
+	.long	0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2
+	.long	0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2
+
+	.long	0x00010203,0x04050607,0x08090a0b,0x0c0d0e0f
+	.long	0x00010203,0x04050607,0x08090a0b,0x0c0d0e0f
+	.long	0,0,0,0,   0,0,0,0,   -1,-1,-1,-1
+	.long	0,0,0,0,   0,0,0,0
+	.asciz	"AESNI-CBC+SHA256 stitch for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+.align	64
+___
+
+######################################################################
+# SIMD code paths
+#
+{{{
+($iv,$inout,$roundkey,$temp,
+ $mask10,$mask12,$mask14,$offload)=map("%xmm$_",(8..15));
+
+$aesni_cbc_idx=0;
+@aesni_cbc_block = (
+##	&vmovdqu	($roundkey,"0x00-0x80($inp)");'
+##	&vmovdqu	($inout,($inp));
+##	&mov		($_inp,$inp);
+
+	'&vpxor		($inout,$inout,$roundkey);'.
+	' &vmovdqu	($roundkey,"0x10-0x80($inp)");',
+
+	'&vpxor		($inout,$inout,$iv);',
+
+	'&vaesenc	($inout,$inout,$roundkey);'.
+	' &vmovdqu	($roundkey,"0x20-0x80($inp)");',
+
+	'&vaesenc	($inout,$inout,$roundkey);'.
+	' &vmovdqu	($roundkey,"0x30-0x80($inp)");',
+
+	'&vaesenc	($inout,$inout,$roundkey);'.
+	' &vmovdqu	($roundkey,"0x40-0x80($inp)");',
+
+	'&vaesenc	($inout,$inout,$roundkey);'.
+	' &vmovdqu	($roundkey,"0x50-0x80($inp)");',
+
+	'&vaesenc	($inout,$inout,$roundkey);'.
+	' &vmovdqu	($roundkey,"0x60-0x80($inp)");',
+
+	'&vaesenc	($inout,$inout,$roundkey);'.
+	' &vmovdqu	($roundkey,"0x70-0x80($inp)");',
+
+	'&vaesenc	($inout,$inout,$roundkey);'.
+	' &vmovdqu	($roundkey,"0x80-0x80($inp)");',
+
+	'&vaesenc	($inout,$inout,$roundkey);'.
+	' &vmovdqu	($roundkey,"0x90-0x80($inp)");',
+
+	'&vaesenc	($inout,$inout,$roundkey);'.
+	' &vmovdqu	($roundkey,"0xa0-0x80($inp)");',
+
+	'&vaesenclast	($temp,$inout,$roundkey);'.
+	' &vaesenc	($inout,$inout,$roundkey);'.
+	' &vmovdqu	($roundkey,"0xb0-0x80($inp)");',
+
+	'&vpand		($iv,$temp,$mask10);'.
+	' &vaesenc	($inout,$inout,$roundkey);'.
+	' &vmovdqu	($roundkey,"0xc0-0x80($inp)");',
+
+	'&vaesenclast	($temp,$inout,$roundkey);'.
+	' &vaesenc	($inout,$inout,$roundkey);'.
+	' &vmovdqu	($roundkey,"0xd0-0x80($inp)");',
+
+	'&vpand		($temp,$temp,$mask12);'.
+	' &vaesenc	($inout,$inout,$roundkey);'.
+	 '&vmovdqu	($roundkey,"0xe0-0x80($inp)");',
+
+	'&vpor		($iv,$iv,$temp);'.
+	' &vaesenclast	($temp,$inout,$roundkey);'.
+	' &vmovdqu	($roundkey,"0x00-0x80($inp)");'
+
+##	&mov		($inp,$_inp);
+##	&mov		($out,$_out);
+##	&vpand		($temp,$temp,$mask14);
+##	&vpor		($iv,$iv,$temp);
+##	&vmovdqu	($iv,($out,$inp);
+##	&lea		(inp,16($inp));
+);
+
+my $a4=$T1;
+my ($a,$b,$c,$d,$e,$f,$g,$h);
+
+sub AUTOLOAD()		# thunk [simplified] 32-bit style perlasm
+{ my $opcode = $AUTOLOAD; $opcode =~ s/.*:://;
+  my $arg = pop;
+    $arg = "\$$arg" if ($arg*1 eq $arg);
+    $code .= "\t$opcode\t".join(',',$arg,reverse @_)."\n";
+}
+
+sub body_00_15 () {
+	(
+	'($a,$b,$c,$d,$e,$f,$g,$h)=@ROT;'.
+
+	'&ror	($a0,$Sigma1[2]-$Sigma1[1])',
+	'&mov	($a,$a1)',
+	'&mov	($a4,$f)',
+
+	'&xor	($a0,$e)',
+	'&ror	($a1,$Sigma0[2]-$Sigma0[1])',
+	'&xor	($a4,$g)',			# f^g
+
+	'&ror	($a0,$Sigma1[1]-$Sigma1[0])',
+	'&xor	($a1,$a)',
+	'&and	($a4,$e)',			# (f^g)&e
+
+	@aesni_cbc_block[$aesni_cbc_idx++].
+	'&xor	($a0,$e)',
+	'&add	($h,$SZ*($i&15)."(%rsp)")',	# h+=X[i]+K[i]
+	'&mov	($a2,$a)',
+
+	'&ror	($a1,$Sigma0[1]-$Sigma0[0])',
+	'&xor	($a4,$g)',			# Ch(e,f,g)=((f^g)&e)^g
+	'&xor	($a2,$b)',			# a^b, b^c in next round
+
+	'&ror	($a0,$Sigma1[0])',		# Sigma1(e)
+	'&add	($h,$a4)',			# h+=Ch(e,f,g)
+	'&and	($a3,$a2)',			# (b^c)&(a^b)
+
+	'&xor	($a1,$a)',
+	'&add	($h,$a0)',			# h+=Sigma1(e)
+	'&xor	($a3,$b)',			# Maj(a,b,c)=Ch(a^b,c,b)
+
+	'&add	($d,$h)',			# d+=h
+	'&ror	($a1,$Sigma0[0])',		# Sigma0(a)
+	'&add	($h,$a3)',			# h+=Maj(a,b,c)
+
+	'&mov	($a0,$d)',
+	'&add	($a1,$h);'.			# h+=Sigma0(a)
+	'($a2,$a3) = ($a3,$a2); unshift(@ROT,pop(@ROT)); $i++;'
+	);
+}
+
+if ($avx) {{
+######################################################################
+# XOP code path
+#
+$code.=<<___;
+.type	${func}_xop,\@function,6
+.align	64
+${func}_xop:
+.cfi_startproc
+.Lxop_shortcut:
+	mov	`($win64?56:8)`(%rsp),$in0	# load 7th parameter
+	mov	%rsp,%rax		# copy %rsp
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	sub	\$`$framesz+$win64*16*10`,%rsp
+	and	\$-64,%rsp		# align stack frame
+
+	shl	\$6,$len
+	sub	$inp,$out		# re-bias
+	sub	$inp,$in0
+	add	$inp,$len		# end of input
+
+	#mov	$inp,$_inp		# saved later
+	mov	$out,$_out
+	mov	$len,$_end
+	#mov	$key,$_key		# remains resident in $inp register
+	mov	$ivp,$_ivp
+	mov	$ctx,$_ctx
+	mov	$in0,$_in0
+	mov	%rax,$_rsp
+.cfi_cfa_expression	$_rsp,deref,+8
+___
+$code.=<<___ if ($win64);
+	movaps	%xmm6,`$framesz+16*0`(%rsp)
+	movaps	%xmm7,`$framesz+16*1`(%rsp)
+	movaps	%xmm8,`$framesz+16*2`(%rsp)
+	movaps	%xmm9,`$framesz+16*3`(%rsp)
+	movaps	%xmm10,`$framesz+16*4`(%rsp)
+	movaps	%xmm11,`$framesz+16*5`(%rsp)
+	movaps	%xmm12,`$framesz+16*6`(%rsp)
+	movaps	%xmm13,`$framesz+16*7`(%rsp)
+	movaps	%xmm14,`$framesz+16*8`(%rsp)
+	movaps	%xmm15,`$framesz+16*9`(%rsp)
+___
+$code.=<<___;
+.Lprologue_xop:
+	vzeroall
+
+	mov	$inp,%r12		# borrow $a4
+	lea	0x80($key),$inp		# size optimization, reassign
+	lea	$TABLE+`$SZ*2*$rounds+32`(%rip),%r13	# borrow $a0
+	mov	0xf0-0x80($inp),%r14d	# rounds, borrow $a1
+	mov	$ctx,%r15		# borrow $a2
+	mov	$in0,%rsi		# borrow $a3
+	vmovdqu	($ivp),$iv		# load IV
+	sub	\$9,%r14
+
+	mov	$SZ*0(%r15),$A
+	mov	$SZ*1(%r15),$B
+	mov	$SZ*2(%r15),$C
+	mov	$SZ*3(%r15),$D
+	mov	$SZ*4(%r15),$E
+	mov	$SZ*5(%r15),$F
+	mov	$SZ*6(%r15),$G
+	mov	$SZ*7(%r15),$H
+
+	vmovdqa	0x00(%r13,%r14,8),$mask14
+	vmovdqa	0x10(%r13,%r14,8),$mask12
+	vmovdqa	0x20(%r13,%r14,8),$mask10
+	vmovdqu	0x00-0x80($inp),$roundkey
+	jmp	.Lloop_xop
+___
+					if ($SZ==4) {	# SHA256
+    my @X = map("%xmm$_",(0..3));
+    my ($t0,$t1,$t2,$t3) = map("%xmm$_",(4..7));
+
+$code.=<<___;
+.align	16
+.Lloop_xop:
+	vmovdqa	$TABLE+`$SZ*2*$rounds`(%rip),$t3
+	vmovdqu	0x00(%rsi,%r12),@X[0]
+	vmovdqu	0x10(%rsi,%r12),@X[1]
+	vmovdqu	0x20(%rsi,%r12),@X[2]
+	vmovdqu	0x30(%rsi,%r12),@X[3]
+	vpshufb	$t3,@X[0],@X[0]
+	lea	$TABLE(%rip),$Tbl
+	vpshufb	$t3,@X[1],@X[1]
+	vpshufb	$t3,@X[2],@X[2]
+	vpaddd	0x00($Tbl),@X[0],$t0
+	vpshufb	$t3,@X[3],@X[3]
+	vpaddd	0x20($Tbl),@X[1],$t1
+	vpaddd	0x40($Tbl),@X[2],$t2
+	vpaddd	0x60($Tbl),@X[3],$t3
+	vmovdqa	$t0,0x00(%rsp)
+	mov	$A,$a1
+	vmovdqa	$t1,0x10(%rsp)
+	mov	$B,$a3
+	vmovdqa	$t2,0x20(%rsp)
+	xor	$C,$a3			# magic
+	vmovdqa	$t3,0x30(%rsp)
+	mov	$E,$a0
+	jmp	.Lxop_00_47
+
+.align	16
+.Lxop_00_47:
+	sub	\$-16*2*$SZ,$Tbl	# size optimization
+	vmovdqu	(%r12),$inout		# $a4
+	mov	%r12,$_inp		# $a4
+___
+sub XOP_256_00_47 () {
+my $j = shift;
+my $body = shift;
+my @X = @_;
+my @insns = (&$body,&$body,&$body,&$body);	# 104 instructions
+
+	&vpalignr	($t0,@X[1],@X[0],$SZ);	# X[1..4]
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpalignr	($t3,@X[3],@X[2],$SZ);	# X[9..12]
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vprotd		($t1,$t0,8*$SZ-$sigma0[1]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpsrld		($t0,$t0,$sigma0[2]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpaddd	(@X[0],@X[0],$t3);	# X[0..3] += X[9..12]
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vprotd		($t2,$t1,$sigma0[1]-$sigma0[0]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpxor		($t0,$t0,$t1);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vprotd	($t3,@X[3],8*$SZ-$sigma1[1]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpxor		($t0,$t0,$t2);		# sigma0(X[1..4])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpsrld	($t2,@X[3],$sigma1[2]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpaddd		(@X[0],@X[0],$t0);	# X[0..3] += sigma0(X[1..4])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vprotd	($t1,$t3,$sigma1[1]-$sigma1[0]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpxor		($t3,$t3,$t2);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpxor		($t3,$t3,$t1);		# sigma1(X[14..15])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpsrldq	($t3,$t3,8);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpaddd		(@X[0],@X[0],$t3);	# X[0..1] += sigma1(X[14..15])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vprotd	($t3,@X[0],8*$SZ-$sigma1[1]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpsrld	($t2,@X[0],$sigma1[2]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vprotd	($t1,$t3,$sigma1[1]-$sigma1[0]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpxor		($t3,$t3,$t2);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpxor		($t3,$t3,$t1);		# sigma1(X[16..17])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpslldq	($t3,$t3,8);		# 22 instructions
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpaddd		(@X[0],@X[0],$t3);	# X[2..3] += sigma1(X[16..17])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpaddd		($t2,@X[0],16*2*$j."($Tbl)");
+	  foreach (@insns) { eval; }		# remaining instructions
+	&vmovdqa	(16*$j."(%rsp)",$t2);
+}
+
+    $aesni_cbc_idx=0;
+    for ($i=0,$j=0; $j<4; $j++) {
+	&XOP_256_00_47($j,\&body_00_15,@X);
+	push(@X,shift(@X));			# rotate(@X)
+    }
+    	&mov		("%r12",$_inp);		# borrow $a4
+	&vpand		($temp,$temp,$mask14);
+	&mov		("%r15",$_out);		# borrow $a2
+	&vpor		($iv,$iv,$temp);
+	&vmovdqu	("(%r15,%r12)",$iv);	# write output
+	&lea		("%r12","16(%r12)");	# inp++
+
+	&cmpb	($SZ-1+16*2*$SZ."($Tbl)",0);
+	&jne	(".Lxop_00_47");
+
+	&vmovdqu	($inout,"(%r12)");
+	&mov		($_inp,"%r12");
+
+    $aesni_cbc_idx=0;
+    for ($i=0; $i<16; ) {
+	foreach(body_00_15()) { eval; }
+    }
+					}
+$code.=<<___;
+	mov	$_inp,%r12		# borrow $a4
+	mov	$_out,%r13		# borrow $a0
+	mov	$_ctx,%r15		# borrow $a2
+	mov	$_in0,%rsi		# borrow $a3
+
+	vpand	$mask14,$temp,$temp
+	mov	$a1,$A
+	vpor	$temp,$iv,$iv
+	vmovdqu	$iv,(%r13,%r12)		# write output
+	lea	16(%r12),%r12		# inp++
+
+	add	$SZ*0(%r15),$A
+	add	$SZ*1(%r15),$B
+	add	$SZ*2(%r15),$C
+	add	$SZ*3(%r15),$D
+	add	$SZ*4(%r15),$E
+	add	$SZ*5(%r15),$F
+	add	$SZ*6(%r15),$G
+	add	$SZ*7(%r15),$H
+
+	cmp	$_end,%r12
+
+	mov	$A,$SZ*0(%r15)
+	mov	$B,$SZ*1(%r15)
+	mov	$C,$SZ*2(%r15)
+	mov	$D,$SZ*3(%r15)
+	mov	$E,$SZ*4(%r15)
+	mov	$F,$SZ*5(%r15)
+	mov	$G,$SZ*6(%r15)
+	mov	$H,$SZ*7(%r15)
+
+	jb	.Lloop_xop
+
+	mov	$_ivp,$ivp
+	mov	$_rsp,%rsi
+.cfi_def_cfa	%rsi,8
+	vmovdqu	$iv,($ivp)		# output IV
+	vzeroall
+___
+$code.=<<___ if ($win64);
+	movaps	`$framesz+16*0`(%rsp),%xmm6
+	movaps	`$framesz+16*1`(%rsp),%xmm7
+	movaps	`$framesz+16*2`(%rsp),%xmm8
+	movaps	`$framesz+16*3`(%rsp),%xmm9
+	movaps	`$framesz+16*4`(%rsp),%xmm10
+	movaps	`$framesz+16*5`(%rsp),%xmm11
+	movaps	`$framesz+16*6`(%rsp),%xmm12
+	movaps	`$framesz+16*7`(%rsp),%xmm13
+	movaps	`$framesz+16*8`(%rsp),%xmm14
+	movaps	`$framesz+16*9`(%rsp),%xmm15
+___
+$code.=<<___;
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue_xop:
+	ret
+.cfi_endproc
+.size	${func}_xop,.-${func}_xop
+___
+######################################################################
+# AVX+shrd code path
+#
+local *ror = sub { &shrd(@_[0],@_) };
+
+$code.=<<___;
+.type	${func}_avx,\@function,6
+.align	64
+${func}_avx:
+.cfi_startproc
+.Lavx_shortcut:
+	mov	`($win64?56:8)`(%rsp),$in0	# load 7th parameter
+	mov	%rsp,%rax		# copy %rsp
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	sub	\$`$framesz+$win64*16*10`,%rsp
+	and	\$-64,%rsp		# align stack frame
+
+	shl	\$6,$len
+	sub	$inp,$out		# re-bias
+	sub	$inp,$in0
+	add	$inp,$len		# end of input
+
+	#mov	$inp,$_inp		# saved later
+	mov	$out,$_out
+	mov	$len,$_end
+	#mov	$key,$_key		# remains resident in $inp register
+	mov	$ivp,$_ivp
+	mov	$ctx,$_ctx
+	mov	$in0,$_in0
+	mov	%rax,$_rsp
+.cfi_cfa_expression	$_rsp,deref,+8
+___
+$code.=<<___ if ($win64);
+	movaps	%xmm6,`$framesz+16*0`(%rsp)
+	movaps	%xmm7,`$framesz+16*1`(%rsp)
+	movaps	%xmm8,`$framesz+16*2`(%rsp)
+	movaps	%xmm9,`$framesz+16*3`(%rsp)
+	movaps	%xmm10,`$framesz+16*4`(%rsp)
+	movaps	%xmm11,`$framesz+16*5`(%rsp)
+	movaps	%xmm12,`$framesz+16*6`(%rsp)
+	movaps	%xmm13,`$framesz+16*7`(%rsp)
+	movaps	%xmm14,`$framesz+16*8`(%rsp)
+	movaps	%xmm15,`$framesz+16*9`(%rsp)
+___
+$code.=<<___;
+.Lprologue_avx:
+	vzeroall
+
+	mov	$inp,%r12		# borrow $a4
+	lea	0x80($key),$inp		# size optimization, reassign
+	lea	$TABLE+`$SZ*2*$rounds+32`(%rip),%r13	# borrow $a0
+	mov	0xf0-0x80($inp),%r14d	# rounds, borrow $a1
+	mov	$ctx,%r15		# borrow $a2
+	mov	$in0,%rsi		# borrow $a3
+	vmovdqu	($ivp),$iv		# load IV
+	sub	\$9,%r14
+
+	mov	$SZ*0(%r15),$A
+	mov	$SZ*1(%r15),$B
+	mov	$SZ*2(%r15),$C
+	mov	$SZ*3(%r15),$D
+	mov	$SZ*4(%r15),$E
+	mov	$SZ*5(%r15),$F
+	mov	$SZ*6(%r15),$G
+	mov	$SZ*7(%r15),$H
+
+	vmovdqa	0x00(%r13,%r14,8),$mask14
+	vmovdqa	0x10(%r13,%r14,8),$mask12
+	vmovdqa	0x20(%r13,%r14,8),$mask10
+	vmovdqu	0x00-0x80($inp),$roundkey
+___
+					if ($SZ==4) {	# SHA256
+    my @X = map("%xmm$_",(0..3));
+    my ($t0,$t1,$t2,$t3) = map("%xmm$_",(4..7));
+
+$code.=<<___;
+	jmp	.Lloop_avx
+.align	16
+.Lloop_avx:
+	vmovdqa	$TABLE+`$SZ*2*$rounds`(%rip),$t3
+	vmovdqu	0x00(%rsi,%r12),@X[0]
+	vmovdqu	0x10(%rsi,%r12),@X[1]
+	vmovdqu	0x20(%rsi,%r12),@X[2]
+	vmovdqu	0x30(%rsi,%r12),@X[3]
+	vpshufb	$t3,@X[0],@X[0]
+	lea	$TABLE(%rip),$Tbl
+	vpshufb	$t3,@X[1],@X[1]
+	vpshufb	$t3,@X[2],@X[2]
+	vpaddd	0x00($Tbl),@X[0],$t0
+	vpshufb	$t3,@X[3],@X[3]
+	vpaddd	0x20($Tbl),@X[1],$t1
+	vpaddd	0x40($Tbl),@X[2],$t2
+	vpaddd	0x60($Tbl),@X[3],$t3
+	vmovdqa	$t0,0x00(%rsp)
+	mov	$A,$a1
+	vmovdqa	$t1,0x10(%rsp)
+	mov	$B,$a3
+	vmovdqa	$t2,0x20(%rsp)
+	xor	$C,$a3			# magic
+	vmovdqa	$t3,0x30(%rsp)
+	mov	$E,$a0
+	jmp	.Lavx_00_47
+
+.align	16
+.Lavx_00_47:
+	sub	\$-16*2*$SZ,$Tbl	# size optimization
+	vmovdqu	(%r12),$inout		# $a4
+	mov	%r12,$_inp		# $a4
+___
+sub Xupdate_256_AVX () {
+	(
+	'&vpalignr	($t0,@X[1],@X[0],$SZ)',	# X[1..4]
+	 '&vpalignr	($t3,@X[3],@X[2],$SZ)',	# X[9..12]
+	'&vpsrld	($t2,$t0,$sigma0[0]);',
+	 '&vpaddd	(@X[0],@X[0],$t3)',	# X[0..3] += X[9..12]
+	'&vpsrld	($t3,$t0,$sigma0[2])',
+	'&vpslld	($t1,$t0,8*$SZ-$sigma0[1]);',
+	'&vpxor		($t0,$t3,$t2)',
+	 '&vpshufd	($t3,@X[3],0b11111010)',# X[14..15]
+	'&vpsrld	($t2,$t2,$sigma0[1]-$sigma0[0]);',
+	'&vpxor		($t0,$t0,$t1)',
+	'&vpslld	($t1,$t1,$sigma0[1]-$sigma0[0]);',
+	'&vpxor		($t0,$t0,$t2)',
+	 '&vpsrld	($t2,$t3,$sigma1[2]);',
+	'&vpxor		($t0,$t0,$t1)',		# sigma0(X[1..4])
+	 '&vpsrlq	($t3,$t3,$sigma1[0]);',
+	'&vpaddd	(@X[0],@X[0],$t0)',	# X[0..3] += sigma0(X[1..4])
+	 '&vpxor	($t2,$t2,$t3);',
+	 '&vpsrlq	($t3,$t3,$sigma1[1]-$sigma1[0])',
+	 '&vpxor	($t2,$t2,$t3)',		# sigma1(X[14..15])
+	 '&vpshufd	($t2,$t2,0b10000100)',
+	 '&vpsrldq	($t2,$t2,8)',
+	'&vpaddd	(@X[0],@X[0],$t2)',	# X[0..1] += sigma1(X[14..15])
+	 '&vpshufd	($t3,@X[0],0b01010000)',# X[16..17]
+	 '&vpsrld	($t2,$t3,$sigma1[2])',
+	 '&vpsrlq	($t3,$t3,$sigma1[0])',
+	 '&vpxor	($t2,$t2,$t3);',
+	 '&vpsrlq	($t3,$t3,$sigma1[1]-$sigma1[0])',
+	 '&vpxor	($t2,$t2,$t3)',
+	 '&vpshufd	($t2,$t2,0b11101000)',
+	 '&vpslldq	($t2,$t2,8)',
+	'&vpaddd	(@X[0],@X[0],$t2)'	# X[2..3] += sigma1(X[16..17])
+	);
+}
+
+sub AVX_256_00_47 () {
+my $j = shift;
+my $body = shift;
+my @X = @_;
+my @insns = (&$body,&$body,&$body,&$body);	# 104 instructions
+
+	foreach (Xupdate_256_AVX()) {		# 29 instructions
+	    eval;
+	    eval(shift(@insns));
+	    eval(shift(@insns));
+	    eval(shift(@insns));
+	}
+	&vpaddd		($t2,@X[0],16*2*$j."($Tbl)");
+	  foreach (@insns) { eval; }		# remaining instructions
+	&vmovdqa	(16*$j."(%rsp)",$t2);
+}
+
+    $aesni_cbc_idx=0;
+    for ($i=0,$j=0; $j<4; $j++) {
+	&AVX_256_00_47($j,\&body_00_15,@X);
+	push(@X,shift(@X));			# rotate(@X)
+    }
+    	&mov		("%r12",$_inp);		# borrow $a4
+	&vpand		($temp,$temp,$mask14);
+	&mov		("%r15",$_out);		# borrow $a2
+	&vpor		($iv,$iv,$temp);
+	&vmovdqu	("(%r15,%r12)",$iv);	# write output
+	&lea		("%r12","16(%r12)");	# inp++
+
+	&cmpb	($SZ-1+16*2*$SZ."($Tbl)",0);
+	&jne	(".Lavx_00_47");
+
+	&vmovdqu	($inout,"(%r12)");
+	&mov		($_inp,"%r12");
+
+    $aesni_cbc_idx=0;
+    for ($i=0; $i<16; ) {
+	foreach(body_00_15()) { eval; }
+    }
+
+					}
+$code.=<<___;
+	mov	$_inp,%r12		# borrow $a4
+	mov	$_out,%r13		# borrow $a0
+	mov	$_ctx,%r15		# borrow $a2
+	mov	$_in0,%rsi		# borrow $a3
+
+	vpand	$mask14,$temp,$temp
+	mov	$a1,$A
+	vpor	$temp,$iv,$iv
+	vmovdqu	$iv,(%r13,%r12)		# write output
+	lea	16(%r12),%r12		# inp++
+
+	add	$SZ*0(%r15),$A
+	add	$SZ*1(%r15),$B
+	add	$SZ*2(%r15),$C
+	add	$SZ*3(%r15),$D
+	add	$SZ*4(%r15),$E
+	add	$SZ*5(%r15),$F
+	add	$SZ*6(%r15),$G
+	add	$SZ*7(%r15),$H
+
+	cmp	$_end,%r12
+
+	mov	$A,$SZ*0(%r15)
+	mov	$B,$SZ*1(%r15)
+	mov	$C,$SZ*2(%r15)
+	mov	$D,$SZ*3(%r15)
+	mov	$E,$SZ*4(%r15)
+	mov	$F,$SZ*5(%r15)
+	mov	$G,$SZ*6(%r15)
+	mov	$H,$SZ*7(%r15)
+	jb	.Lloop_avx
+
+	mov	$_ivp,$ivp
+	mov	$_rsp,%rsi
+.cfi_def_cfa	%rsi,8
+	vmovdqu	$iv,($ivp)		# output IV
+	vzeroall
+___
+$code.=<<___ if ($win64);
+	movaps	`$framesz+16*0`(%rsp),%xmm6
+	movaps	`$framesz+16*1`(%rsp),%xmm7
+	movaps	`$framesz+16*2`(%rsp),%xmm8
+	movaps	`$framesz+16*3`(%rsp),%xmm9
+	movaps	`$framesz+16*4`(%rsp),%xmm10
+	movaps	`$framesz+16*5`(%rsp),%xmm11
+	movaps	`$framesz+16*6`(%rsp),%xmm12
+	movaps	`$framesz+16*7`(%rsp),%xmm13
+	movaps	`$framesz+16*8`(%rsp),%xmm14
+	movaps	`$framesz+16*9`(%rsp),%xmm15
+___
+$code.=<<___;
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue_avx:
+	ret
+.cfi_endproc
+.size	${func}_avx,.-${func}_avx
+___
+
+if ($avx>1) {{
+######################################################################
+# AVX2+BMI code path
+#
+my $a5=$SZ==4?"%esi":"%rsi";	# zap $inp
+my $PUSH8=8*2*$SZ;
+use integer;
+
+sub bodyx_00_15 () {
+	# at start $a1 should be zero, $a3 - $b^$c and $a4 copy of $f
+	(
+	'($a,$b,$c,$d,$e,$f,$g,$h)=@ROT;'.
+
+	'&add	($h,(32*($i/(16/$SZ))+$SZ*($i%(16/$SZ)))%$PUSH8.$base)',    # h+=X[i]+K[i]
+	'&and	($a4,$e)',		# f&e
+	'&rorx	($a0,$e,$Sigma1[2])',
+	'&rorx	($a2,$e,$Sigma1[1])',
+
+	'&lea	($a,"($a,$a1)")',	# h+=Sigma0(a) from the past
+	'&lea	($h,"($h,$a4)")',
+	'&andn	($a4,$e,$g)',		# ~e&g
+	'&xor	($a0,$a2)',
+
+	'&rorx	($a1,$e,$Sigma1[0])',
+	'&lea	($h,"($h,$a4)")',	# h+=Ch(e,f,g)=(e&f)+(~e&g)
+	'&xor	($a0,$a1)',		# Sigma1(e)
+	'&mov	($a2,$a)',
+
+	'&rorx	($a4,$a,$Sigma0[2])',
+	'&lea	($h,"($h,$a0)")',	# h+=Sigma1(e)
+	'&xor	($a2,$b)',		# a^b, b^c in next round
+	'&rorx	($a1,$a,$Sigma0[1])',
+
+	'&rorx	($a0,$a,$Sigma0[0])',
+	'&lea	($d,"($d,$h)")',	# d+=h
+	'&and	($a3,$a2)',		# (b^c)&(a^b)
+	@aesni_cbc_block[$aesni_cbc_idx++].
+	'&xor	($a1,$a4)',
+
+	'&xor	($a3,$b)',		# Maj(a,b,c)=Ch(a^b,c,b)
+	'&xor	($a1,$a0)',		# Sigma0(a)
+	'&lea	($h,"($h,$a3)");'.	# h+=Maj(a,b,c)
+	'&mov	($a4,$e)',		# copy of f in future
+
+	'($a2,$a3) = ($a3,$a2); unshift(@ROT,pop(@ROT)); $i++;'
+	);
+	# and at the finish one has to $a+=$a1
+}
+
+$code.=<<___;
+.type	${func}_avx2,\@function,6
+.align	64
+${func}_avx2:
+.cfi_startproc
+.Lavx2_shortcut:
+	mov	`($win64?56:8)`(%rsp),$in0	# load 7th parameter
+	mov	%rsp,%rax		# copy %rsp
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	sub	\$`2*$SZ*$rounds+8*8+$win64*16*10`,%rsp
+	and	\$-256*$SZ,%rsp		# align stack frame
+	add	\$`2*$SZ*($rounds-8)`,%rsp
+
+	shl	\$6,$len
+	sub	$inp,$out		# re-bias
+	sub	$inp,$in0
+	add	$inp,$len		# end of input
+
+	#mov	$inp,$_inp		# saved later
+	#mov	$out,$_out		# kept in $offload
+	mov	$len,$_end
+	#mov	$key,$_key		# remains resident in $inp register
+	mov	$ivp,$_ivp
+	mov	$ctx,$_ctx
+	mov	$in0,$_in0
+	mov	%rax,$_rsp
+.cfi_cfa_expression	$_rsp,deref,+8
+___
+$code.=<<___ if ($win64);
+	movaps	%xmm6,`$framesz+16*0`(%rsp)
+	movaps	%xmm7,`$framesz+16*1`(%rsp)
+	movaps	%xmm8,`$framesz+16*2`(%rsp)
+	movaps	%xmm9,`$framesz+16*3`(%rsp)
+	movaps	%xmm10,`$framesz+16*4`(%rsp)
+	movaps	%xmm11,`$framesz+16*5`(%rsp)
+	movaps	%xmm12,`$framesz+16*6`(%rsp)
+	movaps	%xmm13,`$framesz+16*7`(%rsp)
+	movaps	%xmm14,`$framesz+16*8`(%rsp)
+	movaps	%xmm15,`$framesz+16*9`(%rsp)
+___
+$code.=<<___;
+.Lprologue_avx2:
+	vzeroall
+
+	mov	$inp,%r13		# borrow $a0
+	vpinsrq	\$1,$out,$offload,$offload
+	lea	0x80($key),$inp		# size optimization, reassign
+	lea	$TABLE+`$SZ*2*$rounds+32`(%rip),%r12	# borrow $a4
+	mov	0xf0-0x80($inp),%r14d	# rounds, borrow $a1
+	mov	$ctx,%r15		# borrow $a2
+	mov	$in0,%rsi		# borrow $a3
+	vmovdqu	($ivp),$iv		# load IV
+	lea	-9(%r14),%r14
+
+	vmovdqa	0x00(%r12,%r14,8),$mask14
+	vmovdqa	0x10(%r12,%r14,8),$mask12
+	vmovdqa	0x20(%r12,%r14,8),$mask10
+
+	sub	\$-16*$SZ,%r13		# inp++, size optimization
+	mov	$SZ*0(%r15),$A
+	lea	(%rsi,%r13),%r12	# borrow $a0
+	mov	$SZ*1(%r15),$B
+	cmp	$len,%r13		# $_end
+	mov	$SZ*2(%r15),$C
+	cmove	%rsp,%r12		# next block or random data
+	mov	$SZ*3(%r15),$D
+	mov	$SZ*4(%r15),$E
+	mov	$SZ*5(%r15),$F
+	mov	$SZ*6(%r15),$G
+	mov	$SZ*7(%r15),$H
+	vmovdqu	0x00-0x80($inp),$roundkey
+___
+					if ($SZ==4) {	# SHA256
+    my @X = map("%ymm$_",(0..3));
+    my ($t0,$t1,$t2,$t3) = map("%ymm$_",(4..7));
+
+$code.=<<___;
+	jmp	.Loop_avx2
+.align	16
+.Loop_avx2:
+	vmovdqa	$TABLE+`$SZ*2*$rounds`(%rip),$t3
+	vmovdqu	-16*$SZ+0(%rsi,%r13),%xmm0
+	vmovdqu	-16*$SZ+16(%rsi,%r13),%xmm1
+	vmovdqu	-16*$SZ+32(%rsi,%r13),%xmm2
+	vmovdqu	-16*$SZ+48(%rsi,%r13),%xmm3
+
+	vinserti128	\$1,(%r12),@X[0],@X[0]
+	vinserti128	\$1,16(%r12),@X[1],@X[1]
+	 vpshufb	$t3,@X[0],@X[0]
+	vinserti128	\$1,32(%r12),@X[2],@X[2]
+	 vpshufb	$t3,@X[1],@X[1]
+	vinserti128	\$1,48(%r12),@X[3],@X[3]
+
+	lea	$TABLE(%rip),$Tbl
+	vpshufb	$t3,@X[2],@X[2]
+	lea	-16*$SZ(%r13),%r13
+	vpaddd	0x00($Tbl),@X[0],$t0
+	vpshufb	$t3,@X[3],@X[3]
+	vpaddd	0x20($Tbl),@X[1],$t1
+	vpaddd	0x40($Tbl),@X[2],$t2
+	vpaddd	0x60($Tbl),@X[3],$t3
+	vmovdqa	$t0,0x00(%rsp)
+	xor	$a1,$a1
+	vmovdqa	$t1,0x20(%rsp)
+	lea	-$PUSH8(%rsp),%rsp
+	mov	$B,$a3
+	vmovdqa	$t2,0x00(%rsp)
+	xor	$C,$a3			# magic
+	vmovdqa	$t3,0x20(%rsp)
+	mov	$F,$a4
+	sub	\$-16*2*$SZ,$Tbl	# size optimization
+	jmp	.Lavx2_00_47
+
+.align	16
+.Lavx2_00_47:
+	vmovdqu	(%r13),$inout
+	vpinsrq	\$0,%r13,$offload,$offload
+___
+
+sub AVX2_256_00_47 () {
+my $j = shift;
+my $body = shift;
+my @X = @_;
+my @insns = (&$body,&$body,&$body,&$body);	# 96 instructions
+my $base = "+2*$PUSH8(%rsp)";
+
+	&lea	("%rsp","-$PUSH8(%rsp)")	if (($j%2)==0);
+	foreach (Xupdate_256_AVX()) {		# 29 instructions
+	    eval;
+	    eval(shift(@insns));
+	    eval(shift(@insns));
+	    eval(shift(@insns));
+	}
+	&vpaddd		($t2,@X[0],16*2*$j."($Tbl)");
+	  foreach (@insns) { eval; }		# remaining instructions
+	&vmovdqa	((32*$j)%$PUSH8."(%rsp)",$t2);
+}
+    $aesni_cbc_idx=0;
+    for ($i=0,$j=0; $j<4; $j++) {
+	&AVX2_256_00_47($j,\&bodyx_00_15,@X);
+	push(@X,shift(@X));			# rotate(@X)
+    }
+	&vmovq		("%r13",$offload);	# borrow $a0
+	&vpextrq	("%r15",$offload,1);	# borrow $a2
+	&vpand		($temp,$temp,$mask14);
+	&vpor		($iv,$iv,$temp);
+	&vmovdqu	("(%r15,%r13)",$iv);	# write output
+	&lea		("%r13","16(%r13)");	# inp++
+
+	&lea	($Tbl,16*2*$SZ."($Tbl)");
+	&cmpb	(($SZ-1)."($Tbl)",0);
+	&jne	(".Lavx2_00_47");
+
+	&vmovdqu	($inout,"(%r13)");
+	&vpinsrq	($offload,$offload,"%r13",0);
+
+    $aesni_cbc_idx=0;
+    for ($i=0; $i<16; ) {
+	my $base=$i<8?"+$PUSH8(%rsp)":"(%rsp)";
+	foreach(bodyx_00_15()) { eval; }
+    }
+					}
+$code.=<<___;
+	vpextrq	\$1,$offload,%r12		# $_out, borrow $a4
+	vmovq	$offload,%r13			# $_inp, borrow $a0
+	mov	`2*$SZ*$rounds+5*8`(%rsp),%r15	# $_ctx, borrow $a2
+	add	$a1,$A
+	lea	`2*$SZ*($rounds-8)`(%rsp),$Tbl
+
+	vpand	$mask14,$temp,$temp
+	vpor	$temp,$iv,$iv
+	vmovdqu	$iv,(%r12,%r13)			# write output
+	lea	16(%r13),%r13
+
+	add	$SZ*0(%r15),$A
+	add	$SZ*1(%r15),$B
+	add	$SZ*2(%r15),$C
+	add	$SZ*3(%r15),$D
+	add	$SZ*4(%r15),$E
+	add	$SZ*5(%r15),$F
+	add	$SZ*6(%r15),$G
+	add	$SZ*7(%r15),$H
+
+	mov	$A,$SZ*0(%r15)
+	mov	$B,$SZ*1(%r15)
+	mov	$C,$SZ*2(%r15)
+	mov	$D,$SZ*3(%r15)
+	mov	$E,$SZ*4(%r15)
+	mov	$F,$SZ*5(%r15)
+	mov	$G,$SZ*6(%r15)
+	mov	$H,$SZ*7(%r15)
+
+	cmp	`$PUSH8+2*8`($Tbl),%r13		# $_end
+	je	.Ldone_avx2
+
+	xor	$a1,$a1
+	mov	$B,$a3
+	mov	$F,$a4
+	xor	$C,$a3			# magic
+	jmp	.Lower_avx2
+.align	16
+.Lower_avx2:
+	vmovdqu	(%r13),$inout
+	vpinsrq	\$0,%r13,$offload,$offload
+___
+    $aesni_cbc_idx=0;
+    for ($i=0; $i<16; ) {
+	my $base="+16($Tbl)";
+	foreach(bodyx_00_15()) { eval; }
+	&lea	($Tbl,"-$PUSH8($Tbl)")	if ($i==8);
+    }
+$code.=<<___;
+	vmovq	$offload,%r13			# borrow $a0
+	vpextrq	\$1,$offload,%r15		# borrow $a2
+	vpand	$mask14,$temp,$temp
+	vpor	$temp,$iv,$iv
+	lea	-$PUSH8($Tbl),$Tbl
+	vmovdqu	$iv,(%r15,%r13)			# write output
+	lea	16(%r13),%r13			# inp++
+	cmp	%rsp,$Tbl
+	jae	.Lower_avx2
+
+	mov	`2*$SZ*$rounds+5*8`(%rsp),%r15	# $_ctx, borrow $a2
+	lea	16*$SZ(%r13),%r13
+	mov	`2*$SZ*$rounds+6*8`(%rsp),%rsi	# $_in0, borrow $a3
+	add	$a1,$A
+	lea	`2*$SZ*($rounds-8)`(%rsp),%rsp
+
+	add	$SZ*0(%r15),$A
+	add	$SZ*1(%r15),$B
+	add	$SZ*2(%r15),$C
+	add	$SZ*3(%r15),$D
+	add	$SZ*4(%r15),$E
+	add	$SZ*5(%r15),$F
+	add	$SZ*6(%r15),$G
+	lea	(%rsi,%r13),%r12
+	add	$SZ*7(%r15),$H
+
+	cmp	$_end,%r13
+
+	mov	$A,$SZ*0(%r15)
+	cmove	%rsp,%r12		# next block or stale data
+	mov	$B,$SZ*1(%r15)
+	mov	$C,$SZ*2(%r15)
+	mov	$D,$SZ*3(%r15)
+	mov	$E,$SZ*4(%r15)
+	mov	$F,$SZ*5(%r15)
+	mov	$G,$SZ*6(%r15)
+	mov	$H,$SZ*7(%r15)
+
+	jbe	.Loop_avx2
+	lea	(%rsp),$Tbl
+
+.Ldone_avx2:
+	lea	($Tbl),%rsp
+	mov	$_ivp,$ivp
+	mov	$_rsp,%rsi
+.cfi_def_cfa	%rsi,8
+	vmovdqu	$iv,($ivp)		# output IV
+	vzeroall
+___
+$code.=<<___ if ($win64);
+	movaps	`$framesz+16*0`(%rsp),%xmm6
+	movaps	`$framesz+16*1`(%rsp),%xmm7
+	movaps	`$framesz+16*2`(%rsp),%xmm8
+	movaps	`$framesz+16*3`(%rsp),%xmm9
+	movaps	`$framesz+16*4`(%rsp),%xmm10
+	movaps	`$framesz+16*5`(%rsp),%xmm11
+	movaps	`$framesz+16*6`(%rsp),%xmm12
+	movaps	`$framesz+16*7`(%rsp),%xmm13
+	movaps	`$framesz+16*8`(%rsp),%xmm14
+	movaps	`$framesz+16*9`(%rsp),%xmm15
+___
+$code.=<<___;
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue_avx2:
+	ret
+.cfi_endproc
+.size	${func}_avx2,.-${func}_avx2
+___
+}}
+}}
+{{
+my ($in0,$out,$len,$key,$ivp,$ctx,$inp)=("%rdi","%rsi","%rdx","%rcx","%r8","%r9","%r10");
+
+my ($rounds,$Tbl)=("%r11d","%rbx");
+
+my ($iv,$in,$rndkey0)=map("%xmm$_",(6,14,15));
+my @rndkey=("%xmm4","%xmm5");
+my $r=0;
+my $sn=0;
+
+my ($Wi,$ABEF,$CDGH,$TMP,$BSWAP,$ABEF_SAVE,$CDGH_SAVE)=map("%xmm$_",(0..3,7..9));
+my @MSG=map("%xmm$_",(10..13));
+
+my $aesenc=sub {
+  use integer;
+  my ($n,$k)=($r/10,$r%10);
+    if ($k==0) {
+      $code.=<<___;
+	movups		`16*$n`($in0),$in		# load input
+	xorps		$rndkey0,$in
+___
+      $code.=<<___ if ($n);
+	movups		$iv,`16*($n-1)`($out,$in0)	# write output
+___
+      $code.=<<___;
+	xorps		$in,$iv
+	movups		`32+16*$k-112`($key),$rndkey[1]
+	aesenc		$rndkey[0],$iv
+___
+    } elsif ($k==9) {
+      $sn++;
+      $code.=<<___;
+	cmp		\$11,$rounds
+	jb		.Laesenclast$sn
+	movups		`32+16*($k+0)-112`($key),$rndkey[1]
+	aesenc		$rndkey[0],$iv
+	movups		`32+16*($k+1)-112`($key),$rndkey[0]
+	aesenc		$rndkey[1],$iv
+	je		.Laesenclast$sn
+	movups		`32+16*($k+2)-112`($key),$rndkey[1]
+	aesenc		$rndkey[0],$iv
+	movups		`32+16*($k+3)-112`($key),$rndkey[0]
+	aesenc		$rndkey[1],$iv
+.Laesenclast$sn:
+	aesenclast	$rndkey[0],$iv
+	movups		16-112($key),$rndkey[1]		# forward reference
+	nop
+___
+    } else {
+      $code.=<<___;
+	movups		`32+16*$k-112`($key),$rndkey[1]
+	aesenc		$rndkey[0],$iv
+___
+    }
+    $r++;	unshift(@rndkey,pop(@rndkey));
+};
+
+if ($shaext) {
+my $Tbl="%rax";
+
+$code.=<<___;
+.type	${func}_shaext,\@function,6
+.align	32
+${func}_shaext:
+	mov	`($win64?56:8)`(%rsp),$inp	# load 7th argument
+___
+$code.=<<___ if ($win64);
+	lea	`-8-10*16`(%rsp),%rsp
+	movaps	%xmm6,-8-10*16(%rax)
+	movaps	%xmm7,-8-9*16(%rax)
+	movaps	%xmm8,-8-8*16(%rax)
+	movaps	%xmm9,-8-7*16(%rax)
+	movaps	%xmm10,-8-6*16(%rax)
+	movaps	%xmm11,-8-5*16(%rax)
+	movaps	%xmm12,-8-4*16(%rax)
+	movaps	%xmm13,-8-3*16(%rax)
+	movaps	%xmm14,-8-2*16(%rax)
+	movaps	%xmm15,-8-1*16(%rax)
+.Lprologue_shaext:
+___
+$code.=<<___;
+	lea		K256+0x80(%rip),$Tbl
+	movdqu		($ctx),$ABEF		# DCBA
+	movdqu		16($ctx),$CDGH		# HGFE
+	movdqa		0x200-0x80($Tbl),$TMP	# byte swap mask
+
+	mov		240($key),$rounds
+	sub		$in0,$out
+	movups		($key),$rndkey0		# $key[0]
+	movups		($ivp),$iv		# load IV
+	movups		16($key),$rndkey[0]	# forward reference
+	lea		112($key),$key		# size optimization
+
+	pshufd		\$0x1b,$ABEF,$Wi	# ABCD
+	pshufd		\$0xb1,$ABEF,$ABEF	# CDAB
+	pshufd		\$0x1b,$CDGH,$CDGH	# EFGH
+	movdqa		$TMP,$BSWAP		# offload
+	palignr		\$8,$CDGH,$ABEF		# ABEF
+	punpcklqdq	$Wi,$CDGH		# CDGH
+
+	jmp	.Loop_shaext
+
+.align	16
+.Loop_shaext:
+	movdqu		($inp),@MSG[0]
+	movdqu		0x10($inp),@MSG[1]
+	movdqu		0x20($inp),@MSG[2]
+	pshufb		$TMP,@MSG[0]
+	movdqu		0x30($inp),@MSG[3]
+
+	movdqa		0*32-0x80($Tbl),$Wi
+	paddd		@MSG[0],$Wi
+	pshufb		$TMP,@MSG[1]
+	movdqa		$CDGH,$CDGH_SAVE	# offload
+	movdqa		$ABEF,$ABEF_SAVE	# offload
+___
+	&$aesenc();
+$code.=<<___;
+	sha256rnds2	$ABEF,$CDGH		# 0-3
+	pshufd		\$0x0e,$Wi,$Wi
+___
+	&$aesenc();
+$code.=<<___;
+	sha256rnds2	$CDGH,$ABEF
+
+	movdqa		1*32-0x80($Tbl),$Wi
+	paddd		@MSG[1],$Wi
+	pshufb		$TMP,@MSG[2]
+	lea		0x40($inp),$inp
+___
+	&$aesenc();
+$code.=<<___;
+	sha256rnds2	$ABEF,$CDGH		# 4-7
+	pshufd		\$0x0e,$Wi,$Wi
+___
+	&$aesenc();
+$code.=<<___;
+	sha256rnds2	$CDGH,$ABEF
+
+	movdqa		2*32-0x80($Tbl),$Wi
+	paddd		@MSG[2],$Wi
+	pshufb		$TMP,@MSG[3]
+	sha256msg1	@MSG[1],@MSG[0]
+___
+	&$aesenc();
+$code.=<<___;
+	sha256rnds2	$ABEF,$CDGH		# 8-11
+	pshufd		\$0x0e,$Wi,$Wi
+	movdqa		@MSG[3],$TMP
+	palignr		\$4,@MSG[2],$TMP
+	paddd		$TMP,@MSG[0]
+___
+	&$aesenc();
+$code.=<<___;
+	sha256rnds2	$CDGH,$ABEF
+
+	movdqa		3*32-0x80($Tbl),$Wi
+	paddd		@MSG[3],$Wi
+	sha256msg2	@MSG[3],@MSG[0]
+	sha256msg1	@MSG[2],@MSG[1]
+___
+	&$aesenc();
+$code.=<<___;
+	sha256rnds2	$ABEF,$CDGH		# 12-15
+	pshufd		\$0x0e,$Wi,$Wi
+___
+	&$aesenc();
+$code.=<<___;
+	movdqa		@MSG[0],$TMP
+	palignr		\$4,@MSG[3],$TMP
+	paddd		$TMP,@MSG[1]
+	sha256rnds2	$CDGH,$ABEF
+___
+for($i=4;$i<16-3;$i++) {
+	&$aesenc()	if (($r%10)==0);
+$code.=<<___;
+	movdqa		$i*32-0x80($Tbl),$Wi
+	paddd		@MSG[0],$Wi
+	sha256msg2	@MSG[0],@MSG[1]
+	sha256msg1	@MSG[3],@MSG[2]
+___
+	&$aesenc();
+$code.=<<___;
+	sha256rnds2	$ABEF,$CDGH		# 16-19...
+	pshufd		\$0x0e,$Wi,$Wi
+	movdqa		@MSG[1],$TMP
+	palignr		\$4,@MSG[0],$TMP
+	paddd		$TMP,@MSG[2]
+___
+	&$aesenc();
+	&$aesenc()	if ($r==19);
+$code.=<<___;
+	sha256rnds2	$CDGH,$ABEF
+___
+	push(@MSG,shift(@MSG));
+}
+$code.=<<___;
+	movdqa		13*32-0x80($Tbl),$Wi
+	paddd		@MSG[0],$Wi
+	sha256msg2	@MSG[0],@MSG[1]
+	sha256msg1	@MSG[3],@MSG[2]
+___
+	&$aesenc();
+$code.=<<___;
+	sha256rnds2	$ABEF,$CDGH		# 52-55
+	pshufd		\$0x0e,$Wi,$Wi
+	movdqa		@MSG[1],$TMP
+	palignr		\$4,@MSG[0],$TMP
+	paddd		$TMP,@MSG[2]
+___
+	&$aesenc();
+	&$aesenc();
+$code.=<<___;
+	sha256rnds2	$CDGH,$ABEF
+
+	movdqa		14*32-0x80($Tbl),$Wi
+	paddd		@MSG[1],$Wi
+	sha256msg2	@MSG[1],@MSG[2]
+	movdqa		$BSWAP,$TMP
+___
+	&$aesenc();
+$code.=<<___;
+	sha256rnds2	$ABEF,$CDGH		# 56-59
+	pshufd		\$0x0e,$Wi,$Wi
+___
+	&$aesenc();
+$code.=<<___;
+	sha256rnds2	$CDGH,$ABEF
+
+	movdqa		15*32-0x80($Tbl),$Wi
+	paddd		@MSG[2],$Wi
+___
+	&$aesenc();
+	&$aesenc();
+$code.=<<___;
+	sha256rnds2	$ABEF,$CDGH		# 60-63
+	pshufd		\$0x0e,$Wi,$Wi
+___
+	&$aesenc();
+$code.=<<___;
+	sha256rnds2	$CDGH,$ABEF
+	#pxor		$CDGH,$rndkey0		# black magic
+___
+	while ($r<40)	{ &$aesenc(); }		# remaining aesenc's
+$code.=<<___;
+	#xorps		$CDGH,$rndkey0		# black magic
+	paddd		$CDGH_SAVE,$CDGH
+	paddd		$ABEF_SAVE,$ABEF
+
+	dec		$len
+	movups		$iv,48($out,$in0)	# write output
+	lea		64($in0),$in0
+	jnz		.Loop_shaext
+
+	pshufd		\$0xb1,$CDGH,$CDGH	# DCHG
+	pshufd		\$0x1b,$ABEF,$TMP	# FEBA
+	pshufd		\$0xb1,$ABEF,$ABEF	# BAFE
+	punpckhqdq	$CDGH,$ABEF		# DCBA
+	palignr		\$8,$TMP,$CDGH		# HGFE
+
+	movups		$iv,($ivp)		# write IV
+	movdqu		$ABEF,($ctx)
+	movdqu		$CDGH,16($ctx)
+___
+$code.=<<___ if ($win64);
+	movaps	0*16(%rsp),%xmm6
+	movaps	1*16(%rsp),%xmm7
+	movaps	2*16(%rsp),%xmm8
+	movaps	3*16(%rsp),%xmm9
+	movaps	4*16(%rsp),%xmm10
+	movaps	5*16(%rsp),%xmm11
+	movaps	6*16(%rsp),%xmm12
+	movaps	7*16(%rsp),%xmm13
+	movaps	8*16(%rsp),%xmm14
+	movaps	9*16(%rsp),%xmm15
+	lea	8+10*16(%rsp),%rsp
+.Lepilogue_shaext:
+___
+$code.=<<___;
+	ret
+.size	${func}_shaext,.-${func}_shaext
+___
+}
+}}}}}
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64 && $avx) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	se_handler,\@abi-omnipotent
+.align	16
+se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HanderlData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lin_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lin_prologue
+___
+$code.=<<___ if ($shaext);
+	lea	aesni_cbc_sha256_enc_shaext(%rip),%r10
+	cmp	%r10,%rbx
+	jb	.Lnot_in_shaext
+
+	lea	(%rax),%rsi
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$20,%ecx
+	.long	0xa548f3fc		# cld; rep movsq
+	lea	168(%rax),%rax		# adjust stack pointer
+	jmp	.Lin_prologue
+.Lnot_in_shaext:
+___
+$code.=<<___ if ($avx>1);
+	lea	.Lavx2_shortcut(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<avx2_shortcut
+	jb	.Lnot_in_avx2
+
+	and	\$-256*$SZ,%rax
+	add	\$`2*$SZ*($rounds-8)`,%rax
+.Lnot_in_avx2:
+___
+$code.=<<___;
+	mov	%rax,%rsi		# put aside Rsp
+	mov	16*$SZ+7*8(%rax),%rax	# pull $_rsp
+
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+	lea	16*$SZ+8*8(%rsi),%rsi	# Xmm6- save area
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$20,%ecx
+	.long	0xa548f3fc		# cld; rep movsq
+
+.Lin_prologue:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	se_handler,.-se_handler
+
+.section	.pdata
+	.rva	.LSEH_begin_${func}_xop
+	.rva	.LSEH_end_${func}_xop
+	.rva	.LSEH_info_${func}_xop
+
+	.rva	.LSEH_begin_${func}_avx
+	.rva	.LSEH_end_${func}_avx
+	.rva	.LSEH_info_${func}_avx
+___
+$code.=<<___ if ($avx>1);
+	.rva	.LSEH_begin_${func}_avx2
+	.rva	.LSEH_end_${func}_avx2
+	.rva	.LSEH_info_${func}_avx2
+___
+$code.=<<___ if ($shaext);
+	.rva	.LSEH_begin_${func}_shaext
+	.rva	.LSEH_end_${func}_shaext
+	.rva	.LSEH_info_${func}_shaext
+___
+$code.=<<___;
+.section	.xdata
+.align	8
+.LSEH_info_${func}_xop:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lprologue_xop,.Lepilogue_xop		# HandlerData[]
+
+.LSEH_info_${func}_avx:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lprologue_avx,.Lepilogue_avx		# HandlerData[]
+___
+$code.=<<___ if ($avx>1);
+.LSEH_info_${func}_avx2:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lprologue_avx2,.Lepilogue_avx2		# HandlerData[]
+___
+$code.=<<___ if ($shaext);
+.LSEH_info_${func}_shaext:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lprologue_shaext,.Lepilogue_shaext	# HandlerData[]
+___
+}
+
+####################################################################
+sub rex {
+  local *opcode=shift;
+  my ($dst,$src)=@_;
+  my $rex=0;
+
+    $rex|=0x04			if($dst>=8);
+    $rex|=0x01			if($src>=8);
+    unshift @opcode,$rex|0x40	if($rex);
+}
+
+{
+  my %opcodelet = (
+		"sha256rnds2" => 0xcb,
+  		"sha256msg1"  => 0xcc,
+		"sha256msg2"  => 0xcd	);
+
+  sub sha256op38 {
+    my $instr = shift;
+
+    if (defined($opcodelet{$instr}) && @_[0] =~ /%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+      my @opcode=(0x0f,0x38);
+	rex(\@opcode,$2,$1);
+	push @opcode,$opcodelet{$instr};
+	push @opcode,0xc0|($1&7)|(($2&7)<<3);		# ModR/M
+	return ".byte\t".join(',',@opcode);
+    } else {
+	return $instr."\t".@_[0];
+    }
+  }
+}
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+$code =~ s/\b(sha256[^\s]*)\s+(.*)/sha256op38($1,$2)/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-x86.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-x86.pl
new file mode 100644
index 000000000..b351fca28
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-x86.pl
@@ -0,0 +1,3415 @@
+#! /usr/bin/env perl
+# Copyright 2009-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# This module implements support for Intel AES-NI extension. In
+# OpenSSL context it's used with Intel engine, but can also be used as
+# drop-in replacement for crypto/aes/asm/aes-586.pl [see below for
+# details].
+#
+# Performance.
+#
+# To start with see corresponding paragraph in aesni-x86_64.pl...
+# Instead of filling table similar to one found there I've chosen to
+# summarize *comparison* results for raw ECB, CTR and CBC benchmarks.
+# The simplified table below represents 32-bit performance relative
+# to 64-bit one in every given point. Ratios vary for different
+# encryption modes, therefore interval values.
+#
+#	16-byte     64-byte     256-byte    1-KB        8-KB
+#	53-67%      67-84%      91-94%      95-98%      97-99.5%
+#
+# Lower ratios for smaller block sizes are perfectly understandable,
+# because function call overhead is higher in 32-bit mode. Largest
+# 8-KB block performance is virtually same: 32-bit code is less than
+# 1% slower for ECB, CBC and CCM, and ~3% slower otherwise.
+
+# January 2011
+#
+# See aesni-x86_64.pl for details. Unlike x86_64 version this module
+# interleaves at most 6 aes[enc|dec] instructions, because there are
+# not enough registers for 8x interleave [which should be optimal for
+# Sandy Bridge]. Actually, performance results for 6x interleave
+# factor presented in aesni-x86_64.pl (except for CTR) are for this
+# module.
+
+# April 2011
+#
+# Add aesni_xts_[en|de]crypt. Westmere spends 1.50 cycles processing
+# one byte out of 8KB with 128-bit key, Sandy Bridge - 1.09.
+
+# November 2015
+#
+# Add aesni_ocb_[en|de]crypt.
+
+######################################################################
+# Current large-block performance in cycles per byte processed with
+# 128-bit key (less is better).
+#
+#		CBC en-/decrypt	CTR	XTS	ECB	OCB
+# Westmere	3.77/1.37	1.37	1.52	1.27
+# * Bridge	5.07/0.98	0.99	1.09	0.91	1.10
+# Haswell	4.44/0.80	0.97	1.03	0.72	0.76
+# Skylake	2.68/0.65	0.65	0.66	0.64	0.66
+# Silvermont	5.77/3.56	3.67	4.03	3.46	4.03
+# Goldmont	3.84/1.39	1.39	1.63	1.31	1.70
+# Bulldozer	5.80/0.98	1.05	1.24	0.93	1.23
+
+$PREFIX="aesni";	# if $PREFIX is set to "AES", the script
+			# generates drop-in replacement for
+			# crypto/aes/asm/aes-586.pl:-)
+$inline=1;		# inline _aesni_[en|de]crypt
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output = pop;
+open OUT,">$output";
+*STDOUT=*OUT;
+
+&asm_init($ARGV[0]);
+
+&external_label("OPENSSL_ia32cap_P");
+&static_label("key_const");
+
+if ($PREFIX eq "aesni")	{ $movekey=\&movups; }
+else			{ $movekey=\&movups; }
+
+$len="eax";
+$rounds="ecx";
+$key="edx";
+$inp="esi";
+$out="edi";
+$rounds_="ebx";	# backup copy for $rounds
+$key_="ebp";	# backup copy for $key
+
+$rndkey0="xmm0";
+$rndkey1="xmm1";
+$inout0="xmm2";
+$inout1="xmm3";
+$inout2="xmm4";
+$inout3="xmm5";	$in1="xmm5";
+$inout4="xmm6";	$in0="xmm6";
+$inout5="xmm7";	$ivec="xmm7";
+
+# AESNI extension
+sub aeskeygenassist
+{ my($dst,$src,$imm)=@_;
+    if ("$dst:$src" =~ /xmm([0-7]):xmm([0-7])/)
+    {	&data_byte(0x66,0x0f,0x3a,0xdf,0xc0|($1<<3)|$2,$imm);	}
+}
+sub aescommon
+{ my($opcodelet,$dst,$src)=@_;
+    if ("$dst:$src" =~ /xmm([0-7]):xmm([0-7])/)
+    {	&data_byte(0x66,0x0f,0x38,$opcodelet,0xc0|($1<<3)|$2);}
+}
+sub aesimc	{ aescommon(0xdb,@_); }
+sub aesenc	{ aescommon(0xdc,@_); }
+sub aesenclast	{ aescommon(0xdd,@_); }
+sub aesdec	{ aescommon(0xde,@_); }
+sub aesdeclast	{ aescommon(0xdf,@_); }
+
+# Inline version of internal aesni_[en|de]crypt1
+{ my $sn;
+sub aesni_inline_generate1
+{ my ($p,$inout,$ivec)=@_; $inout=$inout0 if (!defined($inout));
+  $sn++;
+
+    &$movekey		($rndkey0,&QWP(0,$key));
+    &$movekey		($rndkey1,&QWP(16,$key));
+    &xorps		($ivec,$rndkey0)	if (defined($ivec));
+    &lea		($key,&DWP(32,$key));
+    &xorps		($inout,$ivec)		if (defined($ivec));
+    &xorps		($inout,$rndkey0)	if (!defined($ivec));
+    &set_label("${p}1_loop_$sn");
+	eval"&aes${p}	($inout,$rndkey1)";
+	&dec		($rounds);
+	&$movekey	($rndkey1,&QWP(0,$key));
+	&lea		($key,&DWP(16,$key));
+    &jnz		(&label("${p}1_loop_$sn"));
+    eval"&aes${p}last	($inout,$rndkey1)";
+}}
+
+sub aesni_generate1	# fully unrolled loop
+{ my ($p,$inout)=@_; $inout=$inout0 if (!defined($inout));
+
+    &function_begin_B("_aesni_${p}rypt1");
+	&movups		($rndkey0,&QWP(0,$key));
+	&$movekey	($rndkey1,&QWP(0x10,$key));
+	&xorps		($inout,$rndkey0);
+	&$movekey	($rndkey0,&QWP(0x20,$key));
+	&lea		($key,&DWP(0x30,$key));
+	&cmp		($rounds,11);
+	&jb		(&label("${p}128"));
+	&lea		($key,&DWP(0x20,$key));
+	&je		(&label("${p}192"));
+	&lea		($key,&DWP(0x20,$key));
+	eval"&aes${p}	($inout,$rndkey1)";
+	&$movekey	($rndkey1,&QWP(-0x40,$key));
+	eval"&aes${p}	($inout,$rndkey0)";
+	&$movekey	($rndkey0,&QWP(-0x30,$key));
+    &set_label("${p}192");
+	eval"&aes${p}	($inout,$rndkey1)";
+	&$movekey	($rndkey1,&QWP(-0x20,$key));
+	eval"&aes${p}	($inout,$rndkey0)";
+	&$movekey	($rndkey0,&QWP(-0x10,$key));
+    &set_label("${p}128");
+	eval"&aes${p}	($inout,$rndkey1)";
+	&$movekey	($rndkey1,&QWP(0,$key));
+	eval"&aes${p}	($inout,$rndkey0)";
+	&$movekey	($rndkey0,&QWP(0x10,$key));
+	eval"&aes${p}	($inout,$rndkey1)";
+	&$movekey	($rndkey1,&QWP(0x20,$key));
+	eval"&aes${p}	($inout,$rndkey0)";
+	&$movekey	($rndkey0,&QWP(0x30,$key));
+	eval"&aes${p}	($inout,$rndkey1)";
+	&$movekey	($rndkey1,&QWP(0x40,$key));
+	eval"&aes${p}	($inout,$rndkey0)";
+	&$movekey	($rndkey0,&QWP(0x50,$key));
+	eval"&aes${p}	($inout,$rndkey1)";
+	&$movekey	($rndkey1,&QWP(0x60,$key));
+	eval"&aes${p}	($inout,$rndkey0)";
+	&$movekey	($rndkey0,&QWP(0x70,$key));
+	eval"&aes${p}	($inout,$rndkey1)";
+    eval"&aes${p}last	($inout,$rndkey0)";
+    &ret();
+    &function_end_B("_aesni_${p}rypt1");
+}
+
+# void $PREFIX_encrypt (const void *inp,void *out,const AES_KEY *key);
+&aesni_generate1("enc") if (!$inline);
+&function_begin_B("${PREFIX}_encrypt");
+	&mov	("eax",&wparam(0));
+	&mov	($key,&wparam(2));
+	&movups	($inout0,&QWP(0,"eax"));
+	&mov	($rounds,&DWP(240,$key));
+	&mov	("eax",&wparam(1));
+	if ($inline)
+	{   &aesni_inline_generate1("enc");	}
+	else
+	{   &call	("_aesni_encrypt1");	}
+	&pxor	($rndkey0,$rndkey0);		# clear register bank
+	&pxor	($rndkey1,$rndkey1);
+	&movups	(&QWP(0,"eax"),$inout0);
+	&pxor	($inout0,$inout0);
+	&ret	();
+&function_end_B("${PREFIX}_encrypt");
+
+# void $PREFIX_decrypt (const void *inp,void *out,const AES_KEY *key);
+&aesni_generate1("dec") if(!$inline);
+&function_begin_B("${PREFIX}_decrypt");
+	&mov	("eax",&wparam(0));
+	&mov	($key,&wparam(2));
+	&movups	($inout0,&QWP(0,"eax"));
+	&mov	($rounds,&DWP(240,$key));
+	&mov	("eax",&wparam(1));
+	if ($inline)
+	{   &aesni_inline_generate1("dec");	}
+	else
+	{   &call	("_aesni_decrypt1");	}
+	&pxor	($rndkey0,$rndkey0);		# clear register bank
+	&pxor	($rndkey1,$rndkey1);
+	&movups	(&QWP(0,"eax"),$inout0);
+	&pxor	($inout0,$inout0);
+	&ret	();
+&function_end_B("${PREFIX}_decrypt");
+
+# _aesni_[en|de]cryptN are private interfaces, N denotes interleave
+# factor. Why 3x subroutine were originally used in loops? Even though
+# aes[enc|dec] latency was originally 6, it could be scheduled only
+# every *2nd* cycle. Thus 3x interleave was the one providing optimal
+# utilization, i.e. when subroutine's throughput is virtually same as
+# of non-interleaved subroutine [for number of input blocks up to 3].
+# This is why it originally made no sense to implement 2x subroutine.
+# But times change and it became appropriate to spend extra 192 bytes
+# on 2x subroutine on Atom Silvermont account. For processors that
+# can schedule aes[enc|dec] every cycle optimal interleave factor
+# equals to corresponding instructions latency. 8x is optimal for
+# * Bridge, but it's unfeasible to accommodate such implementation
+# in XMM registers addressable in 32-bit mode and therefore maximum
+# of 6x is used instead...
+
+sub aesni_generate2
+{ my $p=shift;
+
+    &function_begin_B("_aesni_${p}rypt2");
+	&$movekey	($rndkey0,&QWP(0,$key));
+	&shl		($rounds,4);
+	&$movekey	($rndkey1,&QWP(16,$key));
+	&xorps		($inout0,$rndkey0);
+	&pxor		($inout1,$rndkey0);
+	&$movekey	($rndkey0,&QWP(32,$key));
+	&lea		($key,&DWP(32,$key,$rounds));
+	&neg		($rounds);
+	&add		($rounds,16);
+
+    &set_label("${p}2_loop");
+	eval"&aes${p}	($inout0,$rndkey1)";
+	eval"&aes${p}	($inout1,$rndkey1)";
+	&$movekey	($rndkey1,&QWP(0,$key,$rounds));
+	&add		($rounds,32);
+	eval"&aes${p}	($inout0,$rndkey0)";
+	eval"&aes${p}	($inout1,$rndkey0)";
+	&$movekey	($rndkey0,&QWP(-16,$key,$rounds));
+	&jnz		(&label("${p}2_loop"));
+    eval"&aes${p}	($inout0,$rndkey1)";
+    eval"&aes${p}	($inout1,$rndkey1)";
+    eval"&aes${p}last	($inout0,$rndkey0)";
+    eval"&aes${p}last	($inout1,$rndkey0)";
+    &ret();
+    &function_end_B("_aesni_${p}rypt2");
+}
+
+sub aesni_generate3
+{ my $p=shift;
+
+    &function_begin_B("_aesni_${p}rypt3");
+	&$movekey	($rndkey0,&QWP(0,$key));
+	&shl		($rounds,4);
+	&$movekey	($rndkey1,&QWP(16,$key));
+	&xorps		($inout0,$rndkey0);
+	&pxor		($inout1,$rndkey0);
+	&pxor		($inout2,$rndkey0);
+	&$movekey	($rndkey0,&QWP(32,$key));
+	&lea		($key,&DWP(32,$key,$rounds));
+	&neg		($rounds);
+	&add		($rounds,16);
+
+    &set_label("${p}3_loop");
+	eval"&aes${p}	($inout0,$rndkey1)";
+	eval"&aes${p}	($inout1,$rndkey1)";
+	eval"&aes${p}	($inout2,$rndkey1)";
+	&$movekey	($rndkey1,&QWP(0,$key,$rounds));
+	&add		($rounds,32);
+	eval"&aes${p}	($inout0,$rndkey0)";
+	eval"&aes${p}	($inout1,$rndkey0)";
+	eval"&aes${p}	($inout2,$rndkey0)";
+	&$movekey	($rndkey0,&QWP(-16,$key,$rounds));
+	&jnz		(&label("${p}3_loop"));
+    eval"&aes${p}	($inout0,$rndkey1)";
+    eval"&aes${p}	($inout1,$rndkey1)";
+    eval"&aes${p}	($inout2,$rndkey1)";
+    eval"&aes${p}last	($inout0,$rndkey0)";
+    eval"&aes${p}last	($inout1,$rndkey0)";
+    eval"&aes${p}last	($inout2,$rndkey0)";
+    &ret();
+    &function_end_B("_aesni_${p}rypt3");
+}
+
+# 4x interleave is implemented to improve small block performance,
+# most notably [and naturally] 4 block by ~30%. One can argue that one
+# should have implemented 5x as well, but improvement  would be <20%,
+# so it's not worth it...
+sub aesni_generate4
+{ my $p=shift;
+
+    &function_begin_B("_aesni_${p}rypt4");
+	&$movekey	($rndkey0,&QWP(0,$key));
+	&$movekey	($rndkey1,&QWP(16,$key));
+	&shl		($rounds,4);
+	&xorps		($inout0,$rndkey0);
+	&pxor		($inout1,$rndkey0);
+	&pxor		($inout2,$rndkey0);
+	&pxor		($inout3,$rndkey0);
+	&$movekey	($rndkey0,&QWP(32,$key));
+	&lea		($key,&DWP(32,$key,$rounds));
+	&neg		($rounds);
+	&data_byte	(0x0f,0x1f,0x40,0x00);
+	&add		($rounds,16);
+
+    &set_label("${p}4_loop");
+	eval"&aes${p}	($inout0,$rndkey1)";
+	eval"&aes${p}	($inout1,$rndkey1)";
+	eval"&aes${p}	($inout2,$rndkey1)";
+	eval"&aes${p}	($inout3,$rndkey1)";
+	&$movekey	($rndkey1,&QWP(0,$key,$rounds));
+	&add		($rounds,32);
+	eval"&aes${p}	($inout0,$rndkey0)";
+	eval"&aes${p}	($inout1,$rndkey0)";
+	eval"&aes${p}	($inout2,$rndkey0)";
+	eval"&aes${p}	($inout3,$rndkey0)";
+	&$movekey	($rndkey0,&QWP(-16,$key,$rounds));
+    &jnz		(&label("${p}4_loop"));
+
+    eval"&aes${p}	($inout0,$rndkey1)";
+    eval"&aes${p}	($inout1,$rndkey1)";
+    eval"&aes${p}	($inout2,$rndkey1)";
+    eval"&aes${p}	($inout3,$rndkey1)";
+    eval"&aes${p}last	($inout0,$rndkey0)";
+    eval"&aes${p}last	($inout1,$rndkey0)";
+    eval"&aes${p}last	($inout2,$rndkey0)";
+    eval"&aes${p}last	($inout3,$rndkey0)";
+    &ret();
+    &function_end_B("_aesni_${p}rypt4");
+}
+
+sub aesni_generate6
+{ my $p=shift;
+
+    &function_begin_B("_aesni_${p}rypt6");
+    &static_label("_aesni_${p}rypt6_enter");
+	&$movekey	($rndkey0,&QWP(0,$key));
+	&shl		($rounds,4);
+	&$movekey	($rndkey1,&QWP(16,$key));
+	&xorps		($inout0,$rndkey0);
+	&pxor		($inout1,$rndkey0);	# pxor does better here
+	&pxor		($inout2,$rndkey0);
+	eval"&aes${p}	($inout0,$rndkey1)";
+	&pxor		($inout3,$rndkey0);
+	&pxor		($inout4,$rndkey0);
+	eval"&aes${p}	($inout1,$rndkey1)";
+	&lea		($key,&DWP(32,$key,$rounds));
+	&neg		($rounds);
+	eval"&aes${p}	($inout2,$rndkey1)";
+	&pxor		($inout5,$rndkey0);
+	&$movekey	($rndkey0,&QWP(0,$key,$rounds));
+	&add		($rounds,16);
+	&jmp		(&label("_aesni_${p}rypt6_inner"));
+
+    &set_label("${p}6_loop",16);
+	eval"&aes${p}	($inout0,$rndkey1)";
+	eval"&aes${p}	($inout1,$rndkey1)";
+	eval"&aes${p}	($inout2,$rndkey1)";
+    &set_label("_aesni_${p}rypt6_inner");
+	eval"&aes${p}	($inout3,$rndkey1)";
+	eval"&aes${p}	($inout4,$rndkey1)";
+	eval"&aes${p}	($inout5,$rndkey1)";
+    &set_label("_aesni_${p}rypt6_enter");
+	&$movekey	($rndkey1,&QWP(0,$key,$rounds));
+	&add		($rounds,32);
+	eval"&aes${p}	($inout0,$rndkey0)";
+	eval"&aes${p}	($inout1,$rndkey0)";
+	eval"&aes${p}	($inout2,$rndkey0)";
+	eval"&aes${p}	($inout3,$rndkey0)";
+	eval"&aes${p}	($inout4,$rndkey0)";
+	eval"&aes${p}	($inout5,$rndkey0)";
+	&$movekey	($rndkey0,&QWP(-16,$key,$rounds));
+    &jnz		(&label("${p}6_loop"));
+
+    eval"&aes${p}	($inout0,$rndkey1)";
+    eval"&aes${p}	($inout1,$rndkey1)";
+    eval"&aes${p}	($inout2,$rndkey1)";
+    eval"&aes${p}	($inout3,$rndkey1)";
+    eval"&aes${p}	($inout4,$rndkey1)";
+    eval"&aes${p}	($inout5,$rndkey1)";
+    eval"&aes${p}last	($inout0,$rndkey0)";
+    eval"&aes${p}last	($inout1,$rndkey0)";
+    eval"&aes${p}last	($inout2,$rndkey0)";
+    eval"&aes${p}last	($inout3,$rndkey0)";
+    eval"&aes${p}last	($inout4,$rndkey0)";
+    eval"&aes${p}last	($inout5,$rndkey0)";
+    &ret();
+    &function_end_B("_aesni_${p}rypt6");
+}
+&aesni_generate2("enc") if ($PREFIX eq "aesni");
+&aesni_generate2("dec");
+&aesni_generate3("enc") if ($PREFIX eq "aesni");
+&aesni_generate3("dec");
+&aesni_generate4("enc") if ($PREFIX eq "aesni");
+&aesni_generate4("dec");
+&aesni_generate6("enc") if ($PREFIX eq "aesni");
+&aesni_generate6("dec");
+
+if ($PREFIX eq "aesni") {
+######################################################################
+# void aesni_ecb_encrypt (const void *in, void *out,
+#                         size_t length, const AES_KEY *key,
+#                         int enc);
+&function_begin("aesni_ecb_encrypt");
+	&mov	($inp,&wparam(0));
+	&mov	($out,&wparam(1));
+	&mov	($len,&wparam(2));
+	&mov	($key,&wparam(3));
+	&mov	($rounds_,&wparam(4));
+	&and	($len,-16);
+	&jz	(&label("ecb_ret"));
+	&mov	($rounds,&DWP(240,$key));
+	&test	($rounds_,$rounds_);
+	&jz	(&label("ecb_decrypt"));
+
+	&mov	($key_,$key);		# backup $key
+	&mov	($rounds_,$rounds);	# backup $rounds
+	&cmp	($len,0x60);
+	&jb	(&label("ecb_enc_tail"));
+
+	&movdqu	($inout0,&QWP(0,$inp));
+	&movdqu	($inout1,&QWP(0x10,$inp));
+	&movdqu	($inout2,&QWP(0x20,$inp));
+	&movdqu	($inout3,&QWP(0x30,$inp));
+	&movdqu	($inout4,&QWP(0x40,$inp));
+	&movdqu	($inout5,&QWP(0x50,$inp));
+	&lea	($inp,&DWP(0x60,$inp));
+	&sub	($len,0x60);
+	&jmp	(&label("ecb_enc_loop6_enter"));
+
+&set_label("ecb_enc_loop6",16);
+	&movups	(&QWP(0,$out),$inout0);
+	&movdqu	($inout0,&QWP(0,$inp));
+	&movups	(&QWP(0x10,$out),$inout1);
+	&movdqu	($inout1,&QWP(0x10,$inp));
+	&movups	(&QWP(0x20,$out),$inout2);
+	&movdqu	($inout2,&QWP(0x20,$inp));
+	&movups	(&QWP(0x30,$out),$inout3);
+	&movdqu	($inout3,&QWP(0x30,$inp));
+	&movups	(&QWP(0x40,$out),$inout4);
+	&movdqu	($inout4,&QWP(0x40,$inp));
+	&movups	(&QWP(0x50,$out),$inout5);
+	&lea	($out,&DWP(0x60,$out));
+	&movdqu	($inout5,&QWP(0x50,$inp));
+	&lea	($inp,&DWP(0x60,$inp));
+&set_label("ecb_enc_loop6_enter");
+
+	&call	("_aesni_encrypt6");
+
+	&mov	($key,$key_);		# restore $key
+	&mov	($rounds,$rounds_);	# restore $rounds
+	&sub	($len,0x60);
+	&jnc	(&label("ecb_enc_loop6"));
+
+	&movups	(&QWP(0,$out),$inout0);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&movups	(&QWP(0x20,$out),$inout2);
+	&movups	(&QWP(0x30,$out),$inout3);
+	&movups	(&QWP(0x40,$out),$inout4);
+	&movups	(&QWP(0x50,$out),$inout5);
+	&lea	($out,&DWP(0x60,$out));
+	&add	($len,0x60);
+	&jz	(&label("ecb_ret"));
+
+&set_label("ecb_enc_tail");
+	&movups	($inout0,&QWP(0,$inp));
+	&cmp	($len,0x20);
+	&jb	(&label("ecb_enc_one"));
+	&movups	($inout1,&QWP(0x10,$inp));
+	&je	(&label("ecb_enc_two"));
+	&movups	($inout2,&QWP(0x20,$inp));
+	&cmp	($len,0x40);
+	&jb	(&label("ecb_enc_three"));
+	&movups	($inout3,&QWP(0x30,$inp));
+	&je	(&label("ecb_enc_four"));
+	&movups	($inout4,&QWP(0x40,$inp));
+	&xorps	($inout5,$inout5);
+	&call	("_aesni_encrypt6");
+	&movups	(&QWP(0,$out),$inout0);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&movups	(&QWP(0x20,$out),$inout2);
+	&movups	(&QWP(0x30,$out),$inout3);
+	&movups	(&QWP(0x40,$out),$inout4);
+	jmp	(&label("ecb_ret"));
+
+&set_label("ecb_enc_one",16);
+	if ($inline)
+	{   &aesni_inline_generate1("enc");	}
+	else
+	{   &call	("_aesni_encrypt1");	}
+	&movups	(&QWP(0,$out),$inout0);
+	&jmp	(&label("ecb_ret"));
+
+&set_label("ecb_enc_two",16);
+	&call	("_aesni_encrypt2");
+	&movups	(&QWP(0,$out),$inout0);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&jmp	(&label("ecb_ret"));
+
+&set_label("ecb_enc_three",16);
+	&call	("_aesni_encrypt3");
+	&movups	(&QWP(0,$out),$inout0);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&movups	(&QWP(0x20,$out),$inout2);
+	&jmp	(&label("ecb_ret"));
+
+&set_label("ecb_enc_four",16);
+	&call	("_aesni_encrypt4");
+	&movups	(&QWP(0,$out),$inout0);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&movups	(&QWP(0x20,$out),$inout2);
+	&movups	(&QWP(0x30,$out),$inout3);
+	&jmp	(&label("ecb_ret"));
+######################################################################
+&set_label("ecb_decrypt",16);
+	&mov	($key_,$key);		# backup $key
+	&mov	($rounds_,$rounds);	# backup $rounds
+	&cmp	($len,0x60);
+	&jb	(&label("ecb_dec_tail"));
+
+	&movdqu	($inout0,&QWP(0,$inp));
+	&movdqu	($inout1,&QWP(0x10,$inp));
+	&movdqu	($inout2,&QWP(0x20,$inp));
+	&movdqu	($inout3,&QWP(0x30,$inp));
+	&movdqu	($inout4,&QWP(0x40,$inp));
+	&movdqu	($inout5,&QWP(0x50,$inp));
+	&lea	($inp,&DWP(0x60,$inp));
+	&sub	($len,0x60);
+	&jmp	(&label("ecb_dec_loop6_enter"));
+
+&set_label("ecb_dec_loop6",16);
+	&movups	(&QWP(0,$out),$inout0);
+	&movdqu	($inout0,&QWP(0,$inp));
+	&movups	(&QWP(0x10,$out),$inout1);
+	&movdqu	($inout1,&QWP(0x10,$inp));
+	&movups	(&QWP(0x20,$out),$inout2);
+	&movdqu	($inout2,&QWP(0x20,$inp));
+	&movups	(&QWP(0x30,$out),$inout3);
+	&movdqu	($inout3,&QWP(0x30,$inp));
+	&movups	(&QWP(0x40,$out),$inout4);
+	&movdqu	($inout4,&QWP(0x40,$inp));
+	&movups	(&QWP(0x50,$out),$inout5);
+	&lea	($out,&DWP(0x60,$out));
+	&movdqu	($inout5,&QWP(0x50,$inp));
+	&lea	($inp,&DWP(0x60,$inp));
+&set_label("ecb_dec_loop6_enter");
+
+	&call	("_aesni_decrypt6");
+
+	&mov	($key,$key_);		# restore $key
+	&mov	($rounds,$rounds_);	# restore $rounds
+	&sub	($len,0x60);
+	&jnc	(&label("ecb_dec_loop6"));
+
+	&movups	(&QWP(0,$out),$inout0);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&movups	(&QWP(0x20,$out),$inout2);
+	&movups	(&QWP(0x30,$out),$inout3);
+	&movups	(&QWP(0x40,$out),$inout4);
+	&movups	(&QWP(0x50,$out),$inout5);
+	&lea	($out,&DWP(0x60,$out));
+	&add	($len,0x60);
+	&jz	(&label("ecb_ret"));
+
+&set_label("ecb_dec_tail");
+	&movups	($inout0,&QWP(0,$inp));
+	&cmp	($len,0x20);
+	&jb	(&label("ecb_dec_one"));
+	&movups	($inout1,&QWP(0x10,$inp));
+	&je	(&label("ecb_dec_two"));
+	&movups	($inout2,&QWP(0x20,$inp));
+	&cmp	($len,0x40);
+	&jb	(&label("ecb_dec_three"));
+	&movups	($inout3,&QWP(0x30,$inp));
+	&je	(&label("ecb_dec_four"));
+	&movups	($inout4,&QWP(0x40,$inp));
+	&xorps	($inout5,$inout5);
+	&call	("_aesni_decrypt6");
+	&movups	(&QWP(0,$out),$inout0);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&movups	(&QWP(0x20,$out),$inout2);
+	&movups	(&QWP(0x30,$out),$inout3);
+	&movups	(&QWP(0x40,$out),$inout4);
+	&jmp	(&label("ecb_ret"));
+
+&set_label("ecb_dec_one",16);
+	if ($inline)
+	{   &aesni_inline_generate1("dec");	}
+	else
+	{   &call	("_aesni_decrypt1");	}
+	&movups	(&QWP(0,$out),$inout0);
+	&jmp	(&label("ecb_ret"));
+
+&set_label("ecb_dec_two",16);
+	&call	("_aesni_decrypt2");
+	&movups	(&QWP(0,$out),$inout0);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&jmp	(&label("ecb_ret"));
+
+&set_label("ecb_dec_three",16);
+	&call	("_aesni_decrypt3");
+	&movups	(&QWP(0,$out),$inout0);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&movups	(&QWP(0x20,$out),$inout2);
+	&jmp	(&label("ecb_ret"));
+
+&set_label("ecb_dec_four",16);
+	&call	("_aesni_decrypt4");
+	&movups	(&QWP(0,$out),$inout0);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&movups	(&QWP(0x20,$out),$inout2);
+	&movups	(&QWP(0x30,$out),$inout3);
+
+&set_label("ecb_ret");
+	&pxor	("xmm0","xmm0");		# clear register bank
+	&pxor	("xmm1","xmm1");
+	&pxor	("xmm2","xmm2");
+	&pxor	("xmm3","xmm3");
+	&pxor	("xmm4","xmm4");
+	&pxor	("xmm5","xmm5");
+	&pxor	("xmm6","xmm6");
+	&pxor	("xmm7","xmm7");
+&function_end("aesni_ecb_encrypt");
+
+######################################################################
+# void aesni_ccm64_[en|de]crypt_blocks (const void *in, void *out,
+#                         size_t blocks, const AES_KEY *key,
+#                         const char *ivec,char *cmac);
+#
+# Handles only complete blocks, operates on 64-bit counter and
+# does not update *ivec! Nor does it finalize CMAC value
+# (see engine/eng_aesni.c for details)
+#
+{ my $cmac=$inout1;
+&function_begin("aesni_ccm64_encrypt_blocks");
+	&mov	($inp,&wparam(0));
+	&mov	($out,&wparam(1));
+	&mov	($len,&wparam(2));
+	&mov	($key,&wparam(3));
+	&mov	($rounds_,&wparam(4));
+	&mov	($rounds,&wparam(5));
+	&mov	($key_,"esp");
+	&sub	("esp",60);
+	&and	("esp",-16);			# align stack
+	&mov	(&DWP(48,"esp"),$key_);
+
+	&movdqu	($ivec,&QWP(0,$rounds_));	# load ivec
+	&movdqu	($cmac,&QWP(0,$rounds));	# load cmac
+	&mov	($rounds,&DWP(240,$key));
+
+	# compose byte-swap control mask for pshufb on stack
+	&mov	(&DWP(0,"esp"),0x0c0d0e0f);
+	&mov	(&DWP(4,"esp"),0x08090a0b);
+	&mov	(&DWP(8,"esp"),0x04050607);
+	&mov	(&DWP(12,"esp"),0x00010203);
+
+	# compose counter increment vector on stack
+	&mov	($rounds_,1);
+	&xor	($key_,$key_);
+	&mov	(&DWP(16,"esp"),$rounds_);
+	&mov	(&DWP(20,"esp"),$key_);
+	&mov	(&DWP(24,"esp"),$key_);
+	&mov	(&DWP(28,"esp"),$key_);
+
+	&shl	($rounds,4);
+	&mov	($rounds_,16);
+	&lea	($key_,&DWP(0,$key));
+	&movdqa	($inout3,&QWP(0,"esp"));
+	&movdqa	($inout0,$ivec);
+	&lea	($key,&DWP(32,$key,$rounds));
+	&sub	($rounds_,$rounds);
+	&pshufb	($ivec,$inout3);
+
+&set_label("ccm64_enc_outer");
+	&$movekey	($rndkey0,&QWP(0,$key_));
+	&mov		($rounds,$rounds_);
+	&movups		($in0,&QWP(0,$inp));
+
+	&xorps		($inout0,$rndkey0);
+	&$movekey	($rndkey1,&QWP(16,$key_));
+	&xorps		($rndkey0,$in0);
+	&xorps		($cmac,$rndkey0);		# cmac^=inp
+	&$movekey	($rndkey0,&QWP(32,$key_));
+
+&set_label("ccm64_enc2_loop");
+	&aesenc		($inout0,$rndkey1);
+	&aesenc		($cmac,$rndkey1);
+	&$movekey	($rndkey1,&QWP(0,$key,$rounds));
+	&add		($rounds,32);
+	&aesenc		($inout0,$rndkey0);
+	&aesenc		($cmac,$rndkey0);
+	&$movekey	($rndkey0,&QWP(-16,$key,$rounds));
+	&jnz		(&label("ccm64_enc2_loop"));
+	&aesenc		($inout0,$rndkey1);
+	&aesenc		($cmac,$rndkey1);
+	&paddq		($ivec,&QWP(16,"esp"));
+	&dec		($len);
+	&aesenclast	($inout0,$rndkey0);
+	&aesenclast	($cmac,$rndkey0);
+
+	&lea	($inp,&DWP(16,$inp));
+	&xorps	($in0,$inout0);			# inp^=E(ivec)
+	&movdqa	($inout0,$ivec);
+	&movups	(&QWP(0,$out),$in0);		# save output
+	&pshufb	($inout0,$inout3);
+	&lea	($out,&DWP(16,$out));
+	&jnz	(&label("ccm64_enc_outer"));
+
+	&mov	("esp",&DWP(48,"esp"));
+	&mov	($out,&wparam(5));
+	&movups	(&QWP(0,$out),$cmac);
+
+	&pxor	("xmm0","xmm0");		# clear register bank
+	&pxor	("xmm1","xmm1");
+	&pxor	("xmm2","xmm2");
+	&pxor	("xmm3","xmm3");
+	&pxor	("xmm4","xmm4");
+	&pxor	("xmm5","xmm5");
+	&pxor	("xmm6","xmm6");
+	&pxor	("xmm7","xmm7");
+&function_end("aesni_ccm64_encrypt_blocks");
+
+&function_begin("aesni_ccm64_decrypt_blocks");
+	&mov	($inp,&wparam(0));
+	&mov	($out,&wparam(1));
+	&mov	($len,&wparam(2));
+	&mov	($key,&wparam(3));
+	&mov	($rounds_,&wparam(4));
+	&mov	($rounds,&wparam(5));
+	&mov	($key_,"esp");
+	&sub	("esp",60);
+	&and	("esp",-16);			# align stack
+	&mov	(&DWP(48,"esp"),$key_);
+
+	&movdqu	($ivec,&QWP(0,$rounds_));	# load ivec
+	&movdqu	($cmac,&QWP(0,$rounds));	# load cmac
+	&mov	($rounds,&DWP(240,$key));
+
+	# compose byte-swap control mask for pshufb on stack
+	&mov	(&DWP(0,"esp"),0x0c0d0e0f);
+	&mov	(&DWP(4,"esp"),0x08090a0b);
+	&mov	(&DWP(8,"esp"),0x04050607);
+	&mov	(&DWP(12,"esp"),0x00010203);
+
+	# compose counter increment vector on stack
+	&mov	($rounds_,1);
+	&xor	($key_,$key_);
+	&mov	(&DWP(16,"esp"),$rounds_);
+	&mov	(&DWP(20,"esp"),$key_);
+	&mov	(&DWP(24,"esp"),$key_);
+	&mov	(&DWP(28,"esp"),$key_);
+
+	&movdqa	($inout3,&QWP(0,"esp"));	# bswap mask
+	&movdqa	($inout0,$ivec);
+
+	&mov	($key_,$key);
+	&mov	($rounds_,$rounds);
+
+	&pshufb	($ivec,$inout3);
+	if ($inline)
+	{   &aesni_inline_generate1("enc");	}
+	else
+	{   &call	("_aesni_encrypt1");	}
+	&shl	($rounds_,4);
+	&mov	($rounds,16);
+	&movups	($in0,&QWP(0,$inp));		# load inp
+	&paddq	($ivec,&QWP(16,"esp"));
+	&lea	($inp,&QWP(16,$inp));
+	&sub	($rounds,$rounds_);
+	&lea	($key,&DWP(32,$key_,$rounds_));
+	&mov	($rounds_,$rounds);
+	&jmp	(&label("ccm64_dec_outer"));
+
+&set_label("ccm64_dec_outer",16);
+	&xorps	($in0,$inout0);			# inp ^= E(ivec)
+	&movdqa	($inout0,$ivec);
+	&movups	(&QWP(0,$out),$in0);		# save output
+	&lea	($out,&DWP(16,$out));
+	&pshufb	($inout0,$inout3);
+
+	&sub	($len,1);
+	&jz	(&label("ccm64_dec_break"));
+
+	&$movekey	($rndkey0,&QWP(0,$key_));
+	&mov		($rounds,$rounds_);
+	&$movekey	($rndkey1,&QWP(16,$key_));
+	&xorps		($in0,$rndkey0);
+	&xorps		($inout0,$rndkey0);
+	&xorps		($cmac,$in0);		# cmac^=out
+	&$movekey	($rndkey0,&QWP(32,$key_));
+
+&set_label("ccm64_dec2_loop");
+	&aesenc		($inout0,$rndkey1);
+	&aesenc		($cmac,$rndkey1);
+	&$movekey	($rndkey1,&QWP(0,$key,$rounds));
+	&add		($rounds,32);
+	&aesenc		($inout0,$rndkey0);
+	&aesenc		($cmac,$rndkey0);
+	&$movekey	($rndkey0,&QWP(-16,$key,$rounds));
+	&jnz		(&label("ccm64_dec2_loop"));
+	&movups		($in0,&QWP(0,$inp));	# load inp
+	&paddq		($ivec,&QWP(16,"esp"));
+	&aesenc		($inout0,$rndkey1);
+	&aesenc		($cmac,$rndkey1);
+	&aesenclast	($inout0,$rndkey0);
+	&aesenclast	($cmac,$rndkey0);
+	&lea		($inp,&QWP(16,$inp));
+	&jmp	(&label("ccm64_dec_outer"));
+
+&set_label("ccm64_dec_break",16);
+	&mov	($rounds,&DWP(240,$key_));
+	&mov	($key,$key_);
+	if ($inline)
+	{   &aesni_inline_generate1("enc",$cmac,$in0);	}
+	else
+	{   &call	("_aesni_encrypt1",$cmac);	}
+
+	&mov	("esp",&DWP(48,"esp"));
+	&mov	($out,&wparam(5));
+	&movups	(&QWP(0,$out),$cmac);
+
+	&pxor	("xmm0","xmm0");		# clear register bank
+	&pxor	("xmm1","xmm1");
+	&pxor	("xmm2","xmm2");
+	&pxor	("xmm3","xmm3");
+	&pxor	("xmm4","xmm4");
+	&pxor	("xmm5","xmm5");
+	&pxor	("xmm6","xmm6");
+	&pxor	("xmm7","xmm7");
+&function_end("aesni_ccm64_decrypt_blocks");
+}
+
+######################################################################
+# void aesni_ctr32_encrypt_blocks (const void *in, void *out,
+#                         size_t blocks, const AES_KEY *key,
+#                         const char *ivec);
+#
+# Handles only complete blocks, operates on 32-bit counter and
+# does not update *ivec! (see crypto/modes/ctr128.c for details)
+#
+# stack layout:
+#	0	pshufb mask
+#	16	vector addend: 0,6,6,6
+# 	32	counter-less ivec
+#	48	1st triplet of counter vector
+#	64	2nd triplet of counter vector
+#	80	saved %esp
+
+&function_begin("aesni_ctr32_encrypt_blocks");
+	&mov	($inp,&wparam(0));
+	&mov	($out,&wparam(1));
+	&mov	($len,&wparam(2));
+	&mov	($key,&wparam(3));
+	&mov	($rounds_,&wparam(4));
+	&mov	($key_,"esp");
+	&sub	("esp",88);
+	&and	("esp",-16);			# align stack
+	&mov	(&DWP(80,"esp"),$key_);
+
+	&cmp	($len,1);
+	&je	(&label("ctr32_one_shortcut"));
+
+	&movdqu	($inout5,&QWP(0,$rounds_));	# load ivec
+
+	# compose byte-swap control mask for pshufb on stack
+	&mov	(&DWP(0,"esp"),0x0c0d0e0f);
+	&mov	(&DWP(4,"esp"),0x08090a0b);
+	&mov	(&DWP(8,"esp"),0x04050607);
+	&mov	(&DWP(12,"esp"),0x00010203);
+
+	# compose counter increment vector on stack
+	&mov	($rounds,6);
+	&xor	($key_,$key_);
+	&mov	(&DWP(16,"esp"),$rounds);
+	&mov	(&DWP(20,"esp"),$rounds);
+	&mov	(&DWP(24,"esp"),$rounds);
+	&mov	(&DWP(28,"esp"),$key_);
+
+	&pextrd	($rounds_,$inout5,3);		# pull 32-bit counter
+	&pinsrd	($inout5,$key_,3);		# wipe 32-bit counter
+
+	&mov	($rounds,&DWP(240,$key));	# key->rounds
+
+	# compose 2 vectors of 3x32-bit counters
+	&bswap	($rounds_);
+	&pxor	($rndkey0,$rndkey0);
+	&pxor	($rndkey1,$rndkey1);
+	&movdqa	($inout0,&QWP(0,"esp"));	# load byte-swap mask
+	&pinsrd	($rndkey0,$rounds_,0);
+	&lea	($key_,&DWP(3,$rounds_));
+	&pinsrd	($rndkey1,$key_,0);
+	&inc	($rounds_);
+	&pinsrd	($rndkey0,$rounds_,1);
+	&inc	($key_);
+	&pinsrd	($rndkey1,$key_,1);
+	&inc	($rounds_);
+	&pinsrd	($rndkey0,$rounds_,2);
+	&inc	($key_);
+	&pinsrd	($rndkey1,$key_,2);
+	&movdqa	(&QWP(48,"esp"),$rndkey0);	# save 1st triplet
+	&pshufb	($rndkey0,$inout0);		# byte swap
+	&movdqu	($inout4,&QWP(0,$key));		# key[0]
+	&movdqa	(&QWP(64,"esp"),$rndkey1);	# save 2nd triplet
+	&pshufb	($rndkey1,$inout0);		# byte swap
+
+	&pshufd	($inout0,$rndkey0,3<<6);	# place counter to upper dword
+	&pshufd	($inout1,$rndkey0,2<<6);
+	&cmp	($len,6);
+	&jb	(&label("ctr32_tail"));
+	&pxor	($inout5,$inout4);		# counter-less ivec^key[0]
+	&shl	($rounds,4);
+	&mov	($rounds_,16);
+	&movdqa	(&QWP(32,"esp"),$inout5);	# save counter-less ivec^key[0]
+	&mov	($key_,$key);			# backup $key
+	&sub	($rounds_,$rounds);		# backup twisted $rounds
+	&lea	($key,&DWP(32,$key,$rounds));
+	&sub	($len,6);
+	&jmp	(&label("ctr32_loop6"));
+
+&set_label("ctr32_loop6",16);
+	# inlining _aesni_encrypt6's prologue gives ~6% improvement...
+	&pshufd	($inout2,$rndkey0,1<<6);
+	&movdqa	($rndkey0,&QWP(32,"esp"));	# pull counter-less ivec
+	&pshufd	($inout3,$rndkey1,3<<6);
+	&pxor		($inout0,$rndkey0);	# merge counter-less ivec
+	&pshufd	($inout4,$rndkey1,2<<6);
+	&pxor		($inout1,$rndkey0);
+	&pshufd	($inout5,$rndkey1,1<<6);
+	&$movekey	($rndkey1,&QWP(16,$key_));
+	&pxor		($inout2,$rndkey0);
+	&pxor		($inout3,$rndkey0);
+	&aesenc		($inout0,$rndkey1);
+	&pxor		($inout4,$rndkey0);
+	&pxor		($inout5,$rndkey0);
+	&aesenc		($inout1,$rndkey1);
+	&$movekey	($rndkey0,&QWP(32,$key_));
+	&mov		($rounds,$rounds_);
+	&aesenc		($inout2,$rndkey1);
+	&aesenc		($inout3,$rndkey1);
+	&aesenc		($inout4,$rndkey1);
+	&aesenc		($inout5,$rndkey1);
+
+	&call		(&label("_aesni_encrypt6_enter"));
+
+	&movups	($rndkey1,&QWP(0,$inp));
+	&movups	($rndkey0,&QWP(0x10,$inp));
+	&xorps	($inout0,$rndkey1);
+	&movups	($rndkey1,&QWP(0x20,$inp));
+	&xorps	($inout1,$rndkey0);
+	&movups	(&QWP(0,$out),$inout0);
+	&movdqa	($rndkey0,&QWP(16,"esp"));	# load increment
+	&xorps	($inout2,$rndkey1);
+	&movdqa	($rndkey1,&QWP(64,"esp"));	# load 2nd triplet
+	&movups	(&QWP(0x10,$out),$inout1);
+	&movups	(&QWP(0x20,$out),$inout2);
+
+	&paddd	($rndkey1,$rndkey0);		# 2nd triplet increment
+	&paddd	($rndkey0,&QWP(48,"esp"));	# 1st triplet increment
+	&movdqa	($inout0,&QWP(0,"esp"));	# load byte swap mask
+
+	&movups	($inout1,&QWP(0x30,$inp));
+	&movups	($inout2,&QWP(0x40,$inp));
+	&xorps	($inout3,$inout1);
+	&movups	($inout1,&QWP(0x50,$inp));
+	&lea	($inp,&DWP(0x60,$inp));
+	&movdqa	(&QWP(48,"esp"),$rndkey0);	# save 1st triplet
+	&pshufb	($rndkey0,$inout0);		# byte swap
+	&xorps	($inout4,$inout2);
+	&movups	(&QWP(0x30,$out),$inout3);
+	&xorps	($inout5,$inout1);
+	&movdqa	(&QWP(64,"esp"),$rndkey1);	# save 2nd triplet
+	&pshufb	($rndkey1,$inout0);		# byte swap
+	&movups	(&QWP(0x40,$out),$inout4);
+	&pshufd	($inout0,$rndkey0,3<<6);
+	&movups	(&QWP(0x50,$out),$inout5);
+	&lea	($out,&DWP(0x60,$out));
+
+	&pshufd	($inout1,$rndkey0,2<<6);
+	&sub	($len,6);
+	&jnc	(&label("ctr32_loop6"));
+
+	&add	($len,6);
+	&jz	(&label("ctr32_ret"));
+	&movdqu	($inout5,&QWP(0,$key_));
+	&mov	($key,$key_);
+	&pxor	($inout5,&QWP(32,"esp"));	# restore count-less ivec
+	&mov	($rounds,&DWP(240,$key_));	# restore $rounds
+
+&set_label("ctr32_tail");
+	&por	($inout0,$inout5);
+	&cmp	($len,2);
+	&jb	(&label("ctr32_one"));
+
+	&pshufd	($inout2,$rndkey0,1<<6);
+	&por	($inout1,$inout5);
+	&je	(&label("ctr32_two"));
+
+	&pshufd	($inout3,$rndkey1,3<<6);
+	&por	($inout2,$inout5);
+	&cmp	($len,4);
+	&jb	(&label("ctr32_three"));
+
+	&pshufd	($inout4,$rndkey1,2<<6);
+	&por	($inout3,$inout5);
+	&je	(&label("ctr32_four"));
+
+	&por	($inout4,$inout5);
+	&call	("_aesni_encrypt6");
+	&movups	($rndkey1,&QWP(0,$inp));
+	&movups	($rndkey0,&QWP(0x10,$inp));
+	&xorps	($inout0,$rndkey1);
+	&movups	($rndkey1,&QWP(0x20,$inp));
+	&xorps	($inout1,$rndkey0);
+	&movups	($rndkey0,&QWP(0x30,$inp));
+	&xorps	($inout2,$rndkey1);
+	&movups	($rndkey1,&QWP(0x40,$inp));
+	&xorps	($inout3,$rndkey0);
+	&movups	(&QWP(0,$out),$inout0);
+	&xorps	($inout4,$rndkey1);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&movups	(&QWP(0x20,$out),$inout2);
+	&movups	(&QWP(0x30,$out),$inout3);
+	&movups	(&QWP(0x40,$out),$inout4);
+	&jmp	(&label("ctr32_ret"));
+
+&set_label("ctr32_one_shortcut",16);
+	&movups	($inout0,&QWP(0,$rounds_));	# load ivec
+	&mov	($rounds,&DWP(240,$key));
+
+&set_label("ctr32_one");
+	if ($inline)
+	{   &aesni_inline_generate1("enc");	}
+	else
+	{   &call	("_aesni_encrypt1");	}
+	&movups	($in0,&QWP(0,$inp));
+	&xorps	($in0,$inout0);
+	&movups	(&QWP(0,$out),$in0);
+	&jmp	(&label("ctr32_ret"));
+
+&set_label("ctr32_two",16);
+	&call	("_aesni_encrypt2");
+	&movups	($inout3,&QWP(0,$inp));
+	&movups	($inout4,&QWP(0x10,$inp));
+	&xorps	($inout0,$inout3);
+	&xorps	($inout1,$inout4);
+	&movups	(&QWP(0,$out),$inout0);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&jmp	(&label("ctr32_ret"));
+
+&set_label("ctr32_three",16);
+	&call	("_aesni_encrypt3");
+	&movups	($inout3,&QWP(0,$inp));
+	&movups	($inout4,&QWP(0x10,$inp));
+	&xorps	($inout0,$inout3);
+	&movups	($inout5,&QWP(0x20,$inp));
+	&xorps	($inout1,$inout4);
+	&movups	(&QWP(0,$out),$inout0);
+	&xorps	($inout2,$inout5);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&movups	(&QWP(0x20,$out),$inout2);
+	&jmp	(&label("ctr32_ret"));
+
+&set_label("ctr32_four",16);
+	&call	("_aesni_encrypt4");
+	&movups	($inout4,&QWP(0,$inp));
+	&movups	($inout5,&QWP(0x10,$inp));
+	&movups	($rndkey1,&QWP(0x20,$inp));
+	&xorps	($inout0,$inout4);
+	&movups	($rndkey0,&QWP(0x30,$inp));
+	&xorps	($inout1,$inout5);
+	&movups	(&QWP(0,$out),$inout0);
+	&xorps	($inout2,$rndkey1);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&xorps	($inout3,$rndkey0);
+	&movups	(&QWP(0x20,$out),$inout2);
+	&movups	(&QWP(0x30,$out),$inout3);
+
+&set_label("ctr32_ret");
+	&pxor	("xmm0","xmm0");		# clear register bank
+	&pxor	("xmm1","xmm1");
+	&pxor	("xmm2","xmm2");
+	&pxor	("xmm3","xmm3");
+	&pxor	("xmm4","xmm4");
+	&movdqa	(&QWP(32,"esp"),"xmm0");	# clear stack
+	&pxor	("xmm5","xmm5");
+	&movdqa	(&QWP(48,"esp"),"xmm0");
+	&pxor	("xmm6","xmm6");
+	&movdqa	(&QWP(64,"esp"),"xmm0");
+	&pxor	("xmm7","xmm7");
+	&mov	("esp",&DWP(80,"esp"));
+&function_end("aesni_ctr32_encrypt_blocks");
+
+######################################################################
+# void aesni_xts_[en|de]crypt(const char *inp,char *out,size_t len,
+#	const AES_KEY *key1, const AES_KEY *key2
+#	const unsigned char iv[16]);
+#
+{ my ($tweak,$twtmp,$twres,$twmask)=($rndkey1,$rndkey0,$inout0,$inout1);
+
+&function_begin("aesni_xts_encrypt");
+	&mov	($key,&wparam(4));		# key2
+	&mov	($inp,&wparam(5));		# clear-text tweak
+
+	&mov	($rounds,&DWP(240,$key));	# key2->rounds
+	&movups	($inout0,&QWP(0,$inp));
+	if ($inline)
+	{   &aesni_inline_generate1("enc");	}
+	else
+	{   &call	("_aesni_encrypt1");	}
+
+	&mov	($inp,&wparam(0));
+	&mov	($out,&wparam(1));
+	&mov	($len,&wparam(2));
+	&mov	($key,&wparam(3));		# key1
+
+	&mov	($key_,"esp");
+	&sub	("esp",16*7+8);
+	&mov	($rounds,&DWP(240,$key));	# key1->rounds
+	&and	("esp",-16);			# align stack
+
+	&mov	(&DWP(16*6+0,"esp"),0x87);	# compose the magic constant
+	&mov	(&DWP(16*6+4,"esp"),0);
+	&mov	(&DWP(16*6+8,"esp"),1);
+	&mov	(&DWP(16*6+12,"esp"),0);
+	&mov	(&DWP(16*7+0,"esp"),$len);	# save original $len
+	&mov	(&DWP(16*7+4,"esp"),$key_);	# save original %esp
+
+	&movdqa	($tweak,$inout0);
+	&pxor	($twtmp,$twtmp);
+	&movdqa	($twmask,&QWP(6*16,"esp"));	# 0x0...010...87
+	&pcmpgtd($twtmp,$tweak);		# broadcast upper bits
+
+	&and	($len,-16);
+	&mov	($key_,$key);			# backup $key
+	&mov	($rounds_,$rounds);		# backup $rounds
+	&sub	($len,16*6);
+	&jc	(&label("xts_enc_short"));
+
+	&shl	($rounds,4);
+	&mov	($rounds_,16);
+	&sub	($rounds_,$rounds);
+	&lea	($key,&DWP(32,$key,$rounds));
+	&jmp	(&label("xts_enc_loop6"));
+
+&set_label("xts_enc_loop6",16);
+	for ($i=0;$i<4;$i++) {
+	    &pshufd	($twres,$twtmp,0x13);
+	    &pxor	($twtmp,$twtmp);
+	    &movdqa	(&QWP(16*$i,"esp"),$tweak);
+	    &paddq	($tweak,$tweak);	# &psllq($tweak,1);
+	    &pand	($twres,$twmask);	# isolate carry and residue
+	    &pcmpgtd	($twtmp,$tweak);	# broadcast upper bits
+	    &pxor	($tweak,$twres);
+	}
+	&pshufd	($inout5,$twtmp,0x13);
+	&movdqa	(&QWP(16*$i++,"esp"),$tweak);
+	&paddq	($tweak,$tweak);		# &psllq($tweak,1);
+	 &$movekey	($rndkey0,&QWP(0,$key_));
+	&pand	($inout5,$twmask);		# isolate carry and residue
+	 &movups	($inout0,&QWP(0,$inp));	# load input
+	&pxor	($inout5,$tweak);
+
+	# inline _aesni_encrypt6 prologue and flip xor with tweak and key[0]
+	&mov	($rounds,$rounds_);		# restore $rounds
+	&movdqu	($inout1,&QWP(16*1,$inp));
+	 &xorps		($inout0,$rndkey0);	# input^=rndkey[0]
+	&movdqu	($inout2,&QWP(16*2,$inp));
+	 &pxor		($inout1,$rndkey0);
+	&movdqu	($inout3,&QWP(16*3,$inp));
+	 &pxor		($inout2,$rndkey0);
+	&movdqu	($inout4,&QWP(16*4,$inp));
+	 &pxor		($inout3,$rndkey0);
+	&movdqu	($rndkey1,&QWP(16*5,$inp));
+	 &pxor		($inout4,$rndkey0);
+	&lea	($inp,&DWP(16*6,$inp));
+	&pxor	($inout0,&QWP(16*0,"esp"));	# input^=tweak
+	&movdqa	(&QWP(16*$i,"esp"),$inout5);	# save last tweak
+	&pxor	($inout5,$rndkey1);
+
+	 &$movekey	($rndkey1,&QWP(16,$key_));
+	&pxor	($inout1,&QWP(16*1,"esp"));
+	&pxor	($inout2,&QWP(16*2,"esp"));
+	 &aesenc	($inout0,$rndkey1);
+	&pxor	($inout3,&QWP(16*3,"esp"));
+	&pxor	($inout4,&QWP(16*4,"esp"));
+	 &aesenc	($inout1,$rndkey1);
+	&pxor		($inout5,$rndkey0);
+	 &$movekey	($rndkey0,&QWP(32,$key_));
+	 &aesenc	($inout2,$rndkey1);
+	 &aesenc	($inout3,$rndkey1);
+	 &aesenc	($inout4,$rndkey1);
+	 &aesenc	($inout5,$rndkey1);
+	&call		(&label("_aesni_encrypt6_enter"));
+
+	&movdqa	($tweak,&QWP(16*5,"esp"));	# last tweak
+       &pxor	($twtmp,$twtmp);
+	&xorps	($inout0,&QWP(16*0,"esp"));	# output^=tweak
+       &pcmpgtd	($twtmp,$tweak);		# broadcast upper bits
+	&xorps	($inout1,&QWP(16*1,"esp"));
+	&movups	(&QWP(16*0,$out),$inout0);	# write output
+	&xorps	($inout2,&QWP(16*2,"esp"));
+	&movups	(&QWP(16*1,$out),$inout1);
+	&xorps	($inout3,&QWP(16*3,"esp"));
+	&movups	(&QWP(16*2,$out),$inout2);
+	&xorps	($inout4,&QWP(16*4,"esp"));
+	&movups	(&QWP(16*3,$out),$inout3);
+	&xorps	($inout5,$tweak);
+	&movups	(&QWP(16*4,$out),$inout4);
+       &pshufd	($twres,$twtmp,0x13);
+	&movups	(&QWP(16*5,$out),$inout5);
+	&lea	($out,&DWP(16*6,$out));
+       &movdqa	($twmask,&QWP(16*6,"esp"));	# 0x0...010...87
+
+	&pxor	($twtmp,$twtmp);
+	&paddq	($tweak,$tweak);		# &psllq($tweak,1);
+	&pand	($twres,$twmask);		# isolate carry and residue
+	&pcmpgtd($twtmp,$tweak);		# broadcast upper bits
+	&pxor	($tweak,$twres);
+
+	&sub	($len,16*6);
+	&jnc	(&label("xts_enc_loop6"));
+
+	&mov	($rounds,&DWP(240,$key_));	# restore $rounds
+	&mov	($key,$key_);			# restore $key
+	&mov	($rounds_,$rounds);
+
+&set_label("xts_enc_short");
+	&add	($len,16*6);
+	&jz	(&label("xts_enc_done6x"));
+
+	&movdqa	($inout3,$tweak);		# put aside previous tweak
+	&cmp	($len,0x20);
+	&jb	(&label("xts_enc_one"));
+
+	&pshufd	($twres,$twtmp,0x13);
+	&pxor	($twtmp,$twtmp);
+	&paddq	($tweak,$tweak);		# &psllq($tweak,1);
+	&pand	($twres,$twmask);		# isolate carry and residue
+	&pcmpgtd($twtmp,$tweak);		# broadcast upper bits
+	&pxor	($tweak,$twres);
+	&je	(&label("xts_enc_two"));
+
+	&pshufd	($twres,$twtmp,0x13);
+	&pxor	($twtmp,$twtmp);
+	&movdqa	($inout4,$tweak);		# put aside previous tweak
+	&paddq	($tweak,$tweak);		# &psllq($tweak,1);
+	&pand	($twres,$twmask);		# isolate carry and residue
+	&pcmpgtd($twtmp,$tweak);		# broadcast upper bits
+	&pxor	($tweak,$twres);
+	&cmp	($len,0x40);
+	&jb	(&label("xts_enc_three"));
+
+	&pshufd	($twres,$twtmp,0x13);
+	&pxor	($twtmp,$twtmp);
+	&movdqa	($inout5,$tweak);		# put aside previous tweak
+	&paddq	($tweak,$tweak);		# &psllq($tweak,1);
+	&pand	($twres,$twmask);		# isolate carry and residue
+	&pcmpgtd($twtmp,$tweak);		# broadcast upper bits
+	&pxor	($tweak,$twres);
+	&movdqa	(&QWP(16*0,"esp"),$inout3);
+	&movdqa	(&QWP(16*1,"esp"),$inout4);
+	&je	(&label("xts_enc_four"));
+
+	&movdqa	(&QWP(16*2,"esp"),$inout5);
+	&pshufd	($inout5,$twtmp,0x13);
+	&movdqa	(&QWP(16*3,"esp"),$tweak);
+	&paddq	($tweak,$tweak);		# &psllq($inout0,1);
+	&pand	($inout5,$twmask);		# isolate carry and residue
+	&pxor	($inout5,$tweak);
+
+	&movdqu	($inout0,&QWP(16*0,$inp));	# load input
+	&movdqu	($inout1,&QWP(16*1,$inp));
+	&movdqu	($inout2,&QWP(16*2,$inp));
+	&pxor	($inout0,&QWP(16*0,"esp"));	# input^=tweak
+	&movdqu	($inout3,&QWP(16*3,$inp));
+	&pxor	($inout1,&QWP(16*1,"esp"));
+	&movdqu	($inout4,&QWP(16*4,$inp));
+	&pxor	($inout2,&QWP(16*2,"esp"));
+	&lea	($inp,&DWP(16*5,$inp));
+	&pxor	($inout3,&QWP(16*3,"esp"));
+	&movdqa	(&QWP(16*4,"esp"),$inout5);	# save last tweak
+	&pxor	($inout4,$inout5);
+
+	&call	("_aesni_encrypt6");
+
+	&movaps	($tweak,&QWP(16*4,"esp"));	# last tweak
+	&xorps	($inout0,&QWP(16*0,"esp"));	# output^=tweak
+	&xorps	($inout1,&QWP(16*1,"esp"));
+	&xorps	($inout2,&QWP(16*2,"esp"));
+	&movups	(&QWP(16*0,$out),$inout0);	# write output
+	&xorps	($inout3,&QWP(16*3,"esp"));
+	&movups	(&QWP(16*1,$out),$inout1);
+	&xorps	($inout4,$tweak);
+	&movups	(&QWP(16*2,$out),$inout2);
+	&movups	(&QWP(16*3,$out),$inout3);
+	&movups	(&QWP(16*4,$out),$inout4);
+	&lea	($out,&DWP(16*5,$out));
+	&jmp	(&label("xts_enc_done"));
+
+&set_label("xts_enc_one",16);
+	&movups	($inout0,&QWP(16*0,$inp));	# load input
+	&lea	($inp,&DWP(16*1,$inp));
+	&xorps	($inout0,$inout3);		# input^=tweak
+	if ($inline)
+	{   &aesni_inline_generate1("enc");	}
+	else
+	{   &call	("_aesni_encrypt1");	}
+	&xorps	($inout0,$inout3);		# output^=tweak
+	&movups	(&QWP(16*0,$out),$inout0);	# write output
+	&lea	($out,&DWP(16*1,$out));
+
+	&movdqa	($tweak,$inout3);		# last tweak
+	&jmp	(&label("xts_enc_done"));
+
+&set_label("xts_enc_two",16);
+	&movaps	($inout4,$tweak);		# put aside last tweak
+
+	&movups	($inout0,&QWP(16*0,$inp));	# load input
+	&movups	($inout1,&QWP(16*1,$inp));
+	&lea	($inp,&DWP(16*2,$inp));
+	&xorps	($inout0,$inout3);		# input^=tweak
+	&xorps	($inout1,$inout4);
+
+	&call	("_aesni_encrypt2");
+
+	&xorps	($inout0,$inout3);		# output^=tweak
+	&xorps	($inout1,$inout4);
+	&movups	(&QWP(16*0,$out),$inout0);	# write output
+	&movups	(&QWP(16*1,$out),$inout1);
+	&lea	($out,&DWP(16*2,$out));
+
+	&movdqa	($tweak,$inout4);		# last tweak
+	&jmp	(&label("xts_enc_done"));
+
+&set_label("xts_enc_three",16);
+	&movaps	($inout5,$tweak);		# put aside last tweak
+	&movups	($inout0,&QWP(16*0,$inp));	# load input
+	&movups	($inout1,&QWP(16*1,$inp));
+	&movups	($inout2,&QWP(16*2,$inp));
+	&lea	($inp,&DWP(16*3,$inp));
+	&xorps	($inout0,$inout3);		# input^=tweak
+	&xorps	($inout1,$inout4);
+	&xorps	($inout2,$inout5);
+
+	&call	("_aesni_encrypt3");
+
+	&xorps	($inout0,$inout3);		# output^=tweak
+	&xorps	($inout1,$inout4);
+	&xorps	($inout2,$inout5);
+	&movups	(&QWP(16*0,$out),$inout0);	# write output
+	&movups	(&QWP(16*1,$out),$inout1);
+	&movups	(&QWP(16*2,$out),$inout2);
+	&lea	($out,&DWP(16*3,$out));
+
+	&movdqa	($tweak,$inout5);		# last tweak
+	&jmp	(&label("xts_enc_done"));
+
+&set_label("xts_enc_four",16);
+	&movaps	($inout4,$tweak);		# put aside last tweak
+
+	&movups	($inout0,&QWP(16*0,$inp));	# load input
+	&movups	($inout1,&QWP(16*1,$inp));
+	&movups	($inout2,&QWP(16*2,$inp));
+	&xorps	($inout0,&QWP(16*0,"esp"));	# input^=tweak
+	&movups	($inout3,&QWP(16*3,$inp));
+	&lea	($inp,&DWP(16*4,$inp));
+	&xorps	($inout1,&QWP(16*1,"esp"));
+	&xorps	($inout2,$inout5);
+	&xorps	($inout3,$inout4);
+
+	&call	("_aesni_encrypt4");
+
+	&xorps	($inout0,&QWP(16*0,"esp"));	# output^=tweak
+	&xorps	($inout1,&QWP(16*1,"esp"));
+	&xorps	($inout2,$inout5);
+	&movups	(&QWP(16*0,$out),$inout0);	# write output
+	&xorps	($inout3,$inout4);
+	&movups	(&QWP(16*1,$out),$inout1);
+	&movups	(&QWP(16*2,$out),$inout2);
+	&movups	(&QWP(16*3,$out),$inout3);
+	&lea	($out,&DWP(16*4,$out));
+
+	&movdqa	($tweak,$inout4);		# last tweak
+	&jmp	(&label("xts_enc_done"));
+
+&set_label("xts_enc_done6x",16);		# $tweak is pre-calculated
+	&mov	($len,&DWP(16*7+0,"esp"));	# restore original $len
+	&and	($len,15);
+	&jz	(&label("xts_enc_ret"));
+	&movdqa	($inout3,$tweak);
+	&mov	(&DWP(16*7+0,"esp"),$len);	# save $len%16
+	&jmp	(&label("xts_enc_steal"));
+
+&set_label("xts_enc_done",16);
+	&mov	($len,&DWP(16*7+0,"esp"));	# restore original $len
+	&pxor	($twtmp,$twtmp);
+	&and	($len,15);
+	&jz	(&label("xts_enc_ret"));
+
+	&pcmpgtd($twtmp,$tweak);		# broadcast upper bits
+	&mov	(&DWP(16*7+0,"esp"),$len);	# save $len%16
+	&pshufd	($inout3,$twtmp,0x13);
+	&paddq	($tweak,$tweak);		# &psllq($tweak,1);
+	&pand	($inout3,&QWP(16*6,"esp"));	# isolate carry and residue
+	&pxor	($inout3,$tweak);
+
+&set_label("xts_enc_steal");
+	&movz	($rounds,&BP(0,$inp));
+	&movz	($key,&BP(-16,$out));
+	&lea	($inp,&DWP(1,$inp));
+	&mov	(&BP(-16,$out),&LB($rounds));
+	&mov	(&BP(0,$out),&LB($key));
+	&lea	($out,&DWP(1,$out));
+	&sub	($len,1);
+	&jnz	(&label("xts_enc_steal"));
+
+	&sub	($out,&DWP(16*7+0,"esp"));	# rewind $out
+	&mov	($key,$key_);			# restore $key
+	&mov	($rounds,$rounds_);		# restore $rounds
+
+	&movups	($inout0,&QWP(-16,$out));	# load input
+	&xorps	($inout0,$inout3);		# input^=tweak
+	if ($inline)
+	{   &aesni_inline_generate1("enc");	}
+	else
+	{   &call	("_aesni_encrypt1");	}
+	&xorps	($inout0,$inout3);		# output^=tweak
+	&movups	(&QWP(-16,$out),$inout0);	# write output
+
+&set_label("xts_enc_ret");
+	&pxor	("xmm0","xmm0");		# clear register bank
+	&pxor	("xmm1","xmm1");
+	&pxor	("xmm2","xmm2");
+	&movdqa	(&QWP(16*0,"esp"),"xmm0");	# clear stack
+	&pxor	("xmm3","xmm3");
+	&movdqa	(&QWP(16*1,"esp"),"xmm0");
+	&pxor	("xmm4","xmm4");
+	&movdqa	(&QWP(16*2,"esp"),"xmm0");
+	&pxor	("xmm5","xmm5");
+	&movdqa	(&QWP(16*3,"esp"),"xmm0");
+	&pxor	("xmm6","xmm6");
+	&movdqa	(&QWP(16*4,"esp"),"xmm0");
+	&pxor	("xmm7","xmm7");
+	&movdqa	(&QWP(16*5,"esp"),"xmm0");
+	&mov	("esp",&DWP(16*7+4,"esp"));	# restore %esp
+&function_end("aesni_xts_encrypt");
+
+&function_begin("aesni_xts_decrypt");
+	&mov	($key,&wparam(4));		# key2
+	&mov	($inp,&wparam(5));		# clear-text tweak
+
+	&mov	($rounds,&DWP(240,$key));	# key2->rounds
+	&movups	($inout0,&QWP(0,$inp));
+	if ($inline)
+	{   &aesni_inline_generate1("enc");	}
+	else
+	{   &call	("_aesni_encrypt1");	}
+
+	&mov	($inp,&wparam(0));
+	&mov	($out,&wparam(1));
+	&mov	($len,&wparam(2));
+	&mov	($key,&wparam(3));		# key1
+
+	&mov	($key_,"esp");
+	&sub	("esp",16*7+8);
+	&and	("esp",-16);			# align stack
+
+	&xor	($rounds_,$rounds_);		# if(len%16) len-=16;
+	&test	($len,15);
+	&setnz	(&LB($rounds_));
+	&shl	($rounds_,4);
+	&sub	($len,$rounds_);
+
+	&mov	(&DWP(16*6+0,"esp"),0x87);	# compose the magic constant
+	&mov	(&DWP(16*6+4,"esp"),0);
+	&mov	(&DWP(16*6+8,"esp"),1);
+	&mov	(&DWP(16*6+12,"esp"),0);
+	&mov	(&DWP(16*7+0,"esp"),$len);	# save original $len
+	&mov	(&DWP(16*7+4,"esp"),$key_);	# save original %esp
+
+	&mov	($rounds,&DWP(240,$key));	# key1->rounds
+	&mov	($key_,$key);			# backup $key
+	&mov	($rounds_,$rounds);		# backup $rounds
+
+	&movdqa	($tweak,$inout0);
+	&pxor	($twtmp,$twtmp);
+	&movdqa	($twmask,&QWP(6*16,"esp"));	# 0x0...010...87
+	&pcmpgtd($twtmp,$tweak);		# broadcast upper bits
+
+	&and	($len,-16);
+	&sub	($len,16*6);
+	&jc	(&label("xts_dec_short"));
+
+	&shl	($rounds,4);
+	&mov	($rounds_,16);
+	&sub	($rounds_,$rounds);
+	&lea	($key,&DWP(32,$key,$rounds));
+	&jmp	(&label("xts_dec_loop6"));
+
+&set_label("xts_dec_loop6",16);
+	for ($i=0;$i<4;$i++) {
+	    &pshufd	($twres,$twtmp,0x13);
+	    &pxor	($twtmp,$twtmp);
+	    &movdqa	(&QWP(16*$i,"esp"),$tweak);
+	    &paddq	($tweak,$tweak);	# &psllq($tweak,1);
+	    &pand	($twres,$twmask);	# isolate carry and residue
+	    &pcmpgtd	($twtmp,$tweak);	# broadcast upper bits
+	    &pxor	($tweak,$twres);
+	}
+	&pshufd	($inout5,$twtmp,0x13);
+	&movdqa	(&QWP(16*$i++,"esp"),$tweak);
+	&paddq	($tweak,$tweak);		# &psllq($tweak,1);
+	 &$movekey	($rndkey0,&QWP(0,$key_));
+	&pand	($inout5,$twmask);		# isolate carry and residue
+	 &movups	($inout0,&QWP(0,$inp));	# load input
+	&pxor	($inout5,$tweak);
+
+	# inline _aesni_encrypt6 prologue and flip xor with tweak and key[0]
+	&mov	($rounds,$rounds_);
+	&movdqu	($inout1,&QWP(16*1,$inp));
+	 &xorps		($inout0,$rndkey0);	# input^=rndkey[0]
+	&movdqu	($inout2,&QWP(16*2,$inp));
+	 &pxor		($inout1,$rndkey0);
+	&movdqu	($inout3,&QWP(16*3,$inp));
+	 &pxor		($inout2,$rndkey0);
+	&movdqu	($inout4,&QWP(16*4,$inp));
+	 &pxor		($inout3,$rndkey0);
+	&movdqu	($rndkey1,&QWP(16*5,$inp));
+	 &pxor		($inout4,$rndkey0);
+	&lea	($inp,&DWP(16*6,$inp));
+	&pxor	($inout0,&QWP(16*0,"esp"));	# input^=tweak
+	&movdqa	(&QWP(16*$i,"esp"),$inout5);	# save last tweak
+	&pxor	($inout5,$rndkey1);
+
+	 &$movekey	($rndkey1,&QWP(16,$key_));
+	&pxor	($inout1,&QWP(16*1,"esp"));
+	&pxor	($inout2,&QWP(16*2,"esp"));
+	 &aesdec	($inout0,$rndkey1);
+	&pxor	($inout3,&QWP(16*3,"esp"));
+	&pxor	($inout4,&QWP(16*4,"esp"));
+	 &aesdec	($inout1,$rndkey1);
+	&pxor		($inout5,$rndkey0);
+	 &$movekey	($rndkey0,&QWP(32,$key_));
+	 &aesdec	($inout2,$rndkey1);
+	 &aesdec	($inout3,$rndkey1);
+	 &aesdec	($inout4,$rndkey1);
+	 &aesdec	($inout5,$rndkey1);
+	&call		(&label("_aesni_decrypt6_enter"));
+
+	&movdqa	($tweak,&QWP(16*5,"esp"));	# last tweak
+       &pxor	($twtmp,$twtmp);
+	&xorps	($inout0,&QWP(16*0,"esp"));	# output^=tweak
+       &pcmpgtd	($twtmp,$tweak);		# broadcast upper bits
+	&xorps	($inout1,&QWP(16*1,"esp"));
+	&movups	(&QWP(16*0,$out),$inout0);	# write output
+	&xorps	($inout2,&QWP(16*2,"esp"));
+	&movups	(&QWP(16*1,$out),$inout1);
+	&xorps	($inout3,&QWP(16*3,"esp"));
+	&movups	(&QWP(16*2,$out),$inout2);
+	&xorps	($inout4,&QWP(16*4,"esp"));
+	&movups	(&QWP(16*3,$out),$inout3);
+	&xorps	($inout5,$tweak);
+	&movups	(&QWP(16*4,$out),$inout4);
+       &pshufd	($twres,$twtmp,0x13);
+	&movups	(&QWP(16*5,$out),$inout5);
+	&lea	($out,&DWP(16*6,$out));
+       &movdqa	($twmask,&QWP(16*6,"esp"));	# 0x0...010...87
+
+	&pxor	($twtmp,$twtmp);
+	&paddq	($tweak,$tweak);		# &psllq($tweak,1);
+	&pand	($twres,$twmask);		# isolate carry and residue
+	&pcmpgtd($twtmp,$tweak);		# broadcast upper bits
+	&pxor	($tweak,$twres);
+
+	&sub	($len,16*6);
+	&jnc	(&label("xts_dec_loop6"));
+
+	&mov	($rounds,&DWP(240,$key_));	# restore $rounds
+	&mov	($key,$key_);			# restore $key
+	&mov	($rounds_,$rounds);
+
+&set_label("xts_dec_short");
+	&add	($len,16*6);
+	&jz	(&label("xts_dec_done6x"));
+
+	&movdqa	($inout3,$tweak);		# put aside previous tweak
+	&cmp	($len,0x20);
+	&jb	(&label("xts_dec_one"));
+
+	&pshufd	($twres,$twtmp,0x13);
+	&pxor	($twtmp,$twtmp);
+	&paddq	($tweak,$tweak);		# &psllq($tweak,1);
+	&pand	($twres,$twmask);		# isolate carry and residue
+	&pcmpgtd($twtmp,$tweak);		# broadcast upper bits
+	&pxor	($tweak,$twres);
+	&je	(&label("xts_dec_two"));
+
+	&pshufd	($twres,$twtmp,0x13);
+	&pxor	($twtmp,$twtmp);
+	&movdqa	($inout4,$tweak);		# put aside previous tweak
+	&paddq	($tweak,$tweak);		# &psllq($tweak,1);
+	&pand	($twres,$twmask);		# isolate carry and residue
+	&pcmpgtd($twtmp,$tweak);		# broadcast upper bits
+	&pxor	($tweak,$twres);
+	&cmp	($len,0x40);
+	&jb	(&label("xts_dec_three"));
+
+	&pshufd	($twres,$twtmp,0x13);
+	&pxor	($twtmp,$twtmp);
+	&movdqa	($inout5,$tweak);		# put aside previous tweak
+	&paddq	($tweak,$tweak);		# &psllq($tweak,1);
+	&pand	($twres,$twmask);		# isolate carry and residue
+	&pcmpgtd($twtmp,$tweak);		# broadcast upper bits
+	&pxor	($tweak,$twres);
+	&movdqa	(&QWP(16*0,"esp"),$inout3);
+	&movdqa	(&QWP(16*1,"esp"),$inout4);
+	&je	(&label("xts_dec_four"));
+
+	&movdqa	(&QWP(16*2,"esp"),$inout5);
+	&pshufd	($inout5,$twtmp,0x13);
+	&movdqa	(&QWP(16*3,"esp"),$tweak);
+	&paddq	($tweak,$tweak);		# &psllq($inout0,1);
+	&pand	($inout5,$twmask);		# isolate carry and residue
+	&pxor	($inout5,$tweak);
+
+	&movdqu	($inout0,&QWP(16*0,$inp));	# load input
+	&movdqu	($inout1,&QWP(16*1,$inp));
+	&movdqu	($inout2,&QWP(16*2,$inp));
+	&pxor	($inout0,&QWP(16*0,"esp"));	# input^=tweak
+	&movdqu	($inout3,&QWP(16*3,$inp));
+	&pxor	($inout1,&QWP(16*1,"esp"));
+	&movdqu	($inout4,&QWP(16*4,$inp));
+	&pxor	($inout2,&QWP(16*2,"esp"));
+	&lea	($inp,&DWP(16*5,$inp));
+	&pxor	($inout3,&QWP(16*3,"esp"));
+	&movdqa	(&QWP(16*4,"esp"),$inout5);	# save last tweak
+	&pxor	($inout4,$inout5);
+
+	&call	("_aesni_decrypt6");
+
+	&movaps	($tweak,&QWP(16*4,"esp"));	# last tweak
+	&xorps	($inout0,&QWP(16*0,"esp"));	# output^=tweak
+	&xorps	($inout1,&QWP(16*1,"esp"));
+	&xorps	($inout2,&QWP(16*2,"esp"));
+	&movups	(&QWP(16*0,$out),$inout0);	# write output
+	&xorps	($inout3,&QWP(16*3,"esp"));
+	&movups	(&QWP(16*1,$out),$inout1);
+	&xorps	($inout4,$tweak);
+	&movups	(&QWP(16*2,$out),$inout2);
+	&movups	(&QWP(16*3,$out),$inout3);
+	&movups	(&QWP(16*4,$out),$inout4);
+	&lea	($out,&DWP(16*5,$out));
+	&jmp	(&label("xts_dec_done"));
+
+&set_label("xts_dec_one",16);
+	&movups	($inout0,&QWP(16*0,$inp));	# load input
+	&lea	($inp,&DWP(16*1,$inp));
+	&xorps	($inout0,$inout3);		# input^=tweak
+	if ($inline)
+	{   &aesni_inline_generate1("dec");	}
+	else
+	{   &call	("_aesni_decrypt1");	}
+	&xorps	($inout0,$inout3);		# output^=tweak
+	&movups	(&QWP(16*0,$out),$inout0);	# write output
+	&lea	($out,&DWP(16*1,$out));
+
+	&movdqa	($tweak,$inout3);		# last tweak
+	&jmp	(&label("xts_dec_done"));
+
+&set_label("xts_dec_two",16);
+	&movaps	($inout4,$tweak);		# put aside last tweak
+
+	&movups	($inout0,&QWP(16*0,$inp));	# load input
+	&movups	($inout1,&QWP(16*1,$inp));
+	&lea	($inp,&DWP(16*2,$inp));
+	&xorps	($inout0,$inout3);		# input^=tweak
+	&xorps	($inout1,$inout4);
+
+	&call	("_aesni_decrypt2");
+
+	&xorps	($inout0,$inout3);		# output^=tweak
+	&xorps	($inout1,$inout4);
+	&movups	(&QWP(16*0,$out),$inout0);	# write output
+	&movups	(&QWP(16*1,$out),$inout1);
+	&lea	($out,&DWP(16*2,$out));
+
+	&movdqa	($tweak,$inout4);		# last tweak
+	&jmp	(&label("xts_dec_done"));
+
+&set_label("xts_dec_three",16);
+	&movaps	($inout5,$tweak);		# put aside last tweak
+	&movups	($inout0,&QWP(16*0,$inp));	# load input
+	&movups	($inout1,&QWP(16*1,$inp));
+	&movups	($inout2,&QWP(16*2,$inp));
+	&lea	($inp,&DWP(16*3,$inp));
+	&xorps	($inout0,$inout3);		# input^=tweak
+	&xorps	($inout1,$inout4);
+	&xorps	($inout2,$inout5);
+
+	&call	("_aesni_decrypt3");
+
+	&xorps	($inout0,$inout3);		# output^=tweak
+	&xorps	($inout1,$inout4);
+	&xorps	($inout2,$inout5);
+	&movups	(&QWP(16*0,$out),$inout0);	# write output
+	&movups	(&QWP(16*1,$out),$inout1);
+	&movups	(&QWP(16*2,$out),$inout2);
+	&lea	($out,&DWP(16*3,$out));
+
+	&movdqa	($tweak,$inout5);		# last tweak
+	&jmp	(&label("xts_dec_done"));
+
+&set_label("xts_dec_four",16);
+	&movaps	($inout4,$tweak);		# put aside last tweak
+
+	&movups	($inout0,&QWP(16*0,$inp));	# load input
+	&movups	($inout1,&QWP(16*1,$inp));
+	&movups	($inout2,&QWP(16*2,$inp));
+	&xorps	($inout0,&QWP(16*0,"esp"));	# input^=tweak
+	&movups	($inout3,&QWP(16*3,$inp));
+	&lea	($inp,&DWP(16*4,$inp));
+	&xorps	($inout1,&QWP(16*1,"esp"));
+	&xorps	($inout2,$inout5);
+	&xorps	($inout3,$inout4);
+
+	&call	("_aesni_decrypt4");
+
+	&xorps	($inout0,&QWP(16*0,"esp"));	# output^=tweak
+	&xorps	($inout1,&QWP(16*1,"esp"));
+	&xorps	($inout2,$inout5);
+	&movups	(&QWP(16*0,$out),$inout0);	# write output
+	&xorps	($inout3,$inout4);
+	&movups	(&QWP(16*1,$out),$inout1);
+	&movups	(&QWP(16*2,$out),$inout2);
+	&movups	(&QWP(16*3,$out),$inout3);
+	&lea	($out,&DWP(16*4,$out));
+
+	&movdqa	($tweak,$inout4);		# last tweak
+	&jmp	(&label("xts_dec_done"));
+
+&set_label("xts_dec_done6x",16);		# $tweak is pre-calculated
+	&mov	($len,&DWP(16*7+0,"esp"));	# restore original $len
+	&and	($len,15);
+	&jz	(&label("xts_dec_ret"));
+	&mov	(&DWP(16*7+0,"esp"),$len);	# save $len%16
+	&jmp	(&label("xts_dec_only_one_more"));
+
+&set_label("xts_dec_done",16);
+	&mov	($len,&DWP(16*7+0,"esp"));	# restore original $len
+	&pxor	($twtmp,$twtmp);
+	&and	($len,15);
+	&jz	(&label("xts_dec_ret"));
+
+	&pcmpgtd($twtmp,$tweak);		# broadcast upper bits
+	&mov	(&DWP(16*7+0,"esp"),$len);	# save $len%16
+	&pshufd	($twres,$twtmp,0x13);
+	&pxor	($twtmp,$twtmp);
+	&movdqa	($twmask,&QWP(16*6,"esp"));
+	&paddq	($tweak,$tweak);		# &psllq($tweak,1);
+	&pand	($twres,$twmask);		# isolate carry and residue
+	&pcmpgtd($twtmp,$tweak);		# broadcast upper bits
+	&pxor	($tweak,$twres);
+
+&set_label("xts_dec_only_one_more");
+	&pshufd	($inout3,$twtmp,0x13);
+	&movdqa	($inout4,$tweak);		# put aside previous tweak
+	&paddq	($tweak,$tweak);		# &psllq($tweak,1);
+	&pand	($inout3,$twmask);		# isolate carry and residue
+	&pxor	($inout3,$tweak);
+
+	&mov	($key,$key_);			# restore $key
+	&mov	($rounds,$rounds_);		# restore $rounds
+
+	&movups	($inout0,&QWP(0,$inp));		# load input
+	&xorps	($inout0,$inout3);		# input^=tweak
+	if ($inline)
+	{   &aesni_inline_generate1("dec");	}
+	else
+	{   &call	("_aesni_decrypt1");	}
+	&xorps	($inout0,$inout3);		# output^=tweak
+	&movups	(&QWP(0,$out),$inout0);		# write output
+
+&set_label("xts_dec_steal");
+	&movz	($rounds,&BP(16,$inp));
+	&movz	($key,&BP(0,$out));
+	&lea	($inp,&DWP(1,$inp));
+	&mov	(&BP(0,$out),&LB($rounds));
+	&mov	(&BP(16,$out),&LB($key));
+	&lea	($out,&DWP(1,$out));
+	&sub	($len,1);
+	&jnz	(&label("xts_dec_steal"));
+
+	&sub	($out,&DWP(16*7+0,"esp"));	# rewind $out
+	&mov	($key,$key_);			# restore $key
+	&mov	($rounds,$rounds_);		# restore $rounds
+
+	&movups	($inout0,&QWP(0,$out));		# load input
+	&xorps	($inout0,$inout4);		# input^=tweak
+	if ($inline)
+	{   &aesni_inline_generate1("dec");	}
+	else
+	{   &call	("_aesni_decrypt1");	}
+	&xorps	($inout0,$inout4);		# output^=tweak
+	&movups	(&QWP(0,$out),$inout0);		# write output
+
+&set_label("xts_dec_ret");
+	&pxor	("xmm0","xmm0");		# clear register bank
+	&pxor	("xmm1","xmm1");
+	&pxor	("xmm2","xmm2");
+	&movdqa	(&QWP(16*0,"esp"),"xmm0");	# clear stack
+	&pxor	("xmm3","xmm3");
+	&movdqa	(&QWP(16*1,"esp"),"xmm0");
+	&pxor	("xmm4","xmm4");
+	&movdqa	(&QWP(16*2,"esp"),"xmm0");
+	&pxor	("xmm5","xmm5");
+	&movdqa	(&QWP(16*3,"esp"),"xmm0");
+	&pxor	("xmm6","xmm6");
+	&movdqa	(&QWP(16*4,"esp"),"xmm0");
+	&pxor	("xmm7","xmm7");
+	&movdqa	(&QWP(16*5,"esp"),"xmm0");
+	&mov	("esp",&DWP(16*7+4,"esp"));	# restore %esp
+&function_end("aesni_xts_decrypt");
+}
+
+######################################################################
+# void aesni_ocb_[en|de]crypt(const char *inp, char *out, size_t blocks,
+#	const AES_KEY *key, unsigned int start_block_num,
+#	unsigned char offset_i[16], const unsigned char L_[][16],
+#	unsigned char checksum[16]);
+#
+{
+# offsets within stack frame
+my $checksum = 16*6;
+my ($key_off,$rounds_off,$out_off,$end_off,$esp_off)=map(16*7+4*$_,(0..4));
+
+# reassigned registers
+my ($l_,$block,$i1,$i3,$i5) = ($rounds_,$key_,$rounds,$len,$out);
+# $l_, $blocks, $inp, $key are permanently allocated in registers;
+# remaining non-volatile ones are offloaded to stack, which even
+# stay invariant after written to stack.
+
+&function_begin("aesni_ocb_encrypt");
+	&mov	($rounds,&wparam(5));		# &offset_i
+	&mov	($rounds_,&wparam(7));		# &checksum
+
+	&mov	($inp,&wparam(0));
+	&mov	($out,&wparam(1));
+	&mov	($len,&wparam(2));
+	&mov	($key,&wparam(3));
+	&movdqu	($rndkey0,&QWP(0,$rounds));	# load offset_i
+	&mov	($block,&wparam(4));		# start_block_num
+	&movdqu	($rndkey1,&QWP(0,$rounds_));	# load checksum
+	&mov	($l_,&wparam(6));		# L_
+
+	&mov	($rounds,"esp");
+	&sub	("esp",$esp_off+4);		# alloca
+	&and	("esp",-16);			# align stack
+
+	&sub	($out,$inp);
+	&shl	($len,4);
+	&lea	($len,&DWP(-16*6,$inp,$len));	# end of input - 16*6
+	&mov	(&DWP($out_off,"esp"),$out);
+	&mov	(&DWP($end_off,"esp"),$len);
+	&mov	(&DWP($esp_off,"esp"),$rounds);
+
+	&mov	($rounds,&DWP(240,$key));
+
+	&test	($block,1);
+	&jnz	(&label("odd"));
+
+	&bsf		($i3,$block);
+	&add		($block,1);
+	&shl		($i3,4);
+	&movdqu		($inout5,&QWP(0,$l_,$i3));
+	&mov		($i3,$key);			# put aside key
+
+	&movdqu		($inout0,&QWP(16*0,$inp));	# load input
+	&lea		($inp,&DWP(16,$inp));
+
+	&pxor		($inout5,$rndkey0);		# ^ last offset_i
+	&pxor		($rndkey1,$inout0);		# checksum
+	&pxor		($inout0,$inout5);		# ^ offset_i
+
+	&movdqa		($inout4,$rndkey1);
+	if ($inline)
+	{   &aesni_inline_generate1("enc");	}
+	else
+	{   &call	("_aesni_encrypt1");	}
+
+	&xorps		($inout0,$inout5);		# ^ offset_i
+	&movdqa		($rndkey0,$inout5);		# pass last offset_i
+	&movdqa		($rndkey1,$inout4);		# pass the checksum
+
+	&movups		(&QWP(-16,$out,$inp),$inout0);	# store output
+
+	&mov		($rounds,&DWP(240,$i3));
+	&mov		($key,$i3);			# restore key
+	&mov		($len,&DWP($end_off,"esp"));
+
+&set_label("odd");
+	&shl		($rounds,4);
+	&mov		($out,16);
+	&sub		($out,$rounds);			# twisted rounds
+	&mov		(&DWP($key_off,"esp"),$key);
+	&lea		($key,&DWP(32,$key,$rounds));	# end of key schedule
+	&mov		(&DWP($rounds_off,"esp"),$out);
+
+	&cmp		($inp,$len);
+	&ja		(&label("short"));
+	&jmp		(&label("grandloop"));
+
+&set_label("grandloop",32);
+	&lea		($i1,&DWP(1,$block));
+	&lea		($i3,&DWP(3,$block));
+	&lea		($i5,&DWP(5,$block));
+	&add		($block,6);
+	&bsf		($i1,$i1);
+	&bsf		($i3,$i3);
+	&bsf		($i5,$i5);
+	&shl		($i1,4);
+	&shl		($i3,4);
+	&shl		($i5,4);
+	&movdqu		($inout0,&QWP(0,$l_));
+	&movdqu		($inout1,&QWP(0,$l_,$i1));
+	&mov		($rounds,&DWP($rounds_off,"esp"));
+	&movdqa		($inout2,$inout0);
+	&movdqu		($inout3,&QWP(0,$l_,$i3));
+	&movdqa		($inout4,$inout0);
+	&movdqu		($inout5,&QWP(0,$l_,$i5));
+
+	&pxor		($inout0,$rndkey0);		# ^ last offset_i
+	&pxor		($inout1,$inout0);
+	&movdqa		(&QWP(16*0,"esp"),$inout0);
+	&pxor		($inout2,$inout1);
+	&movdqa		(&QWP(16*1,"esp"),$inout1);
+	&pxor		($inout3,$inout2);
+	&movdqa		(&QWP(16*2,"esp"),$inout2);
+	&pxor		($inout4,$inout3);
+	&movdqa		(&QWP(16*3,"esp"),$inout3);
+	&pxor		($inout5,$inout4);
+	&movdqa		(&QWP(16*4,"esp"),$inout4);
+	&movdqa		(&QWP(16*5,"esp"),$inout5);
+
+	&$movekey	($rndkey0,&QWP(-48,$key,$rounds));
+	&movdqu		($inout0,&QWP(16*0,$inp));	# load input
+	&movdqu		($inout1,&QWP(16*1,$inp));
+	&movdqu		($inout2,&QWP(16*2,$inp));
+	&movdqu		($inout3,&QWP(16*3,$inp));
+	&movdqu		($inout4,&QWP(16*4,$inp));
+	&movdqu		($inout5,&QWP(16*5,$inp));
+	&lea		($inp,&DWP(16*6,$inp));
+
+	&pxor		($rndkey1,$inout0);		# checksum
+	&pxor		($inout0,$rndkey0);		# ^ roundkey[0]
+	&pxor		($rndkey1,$inout1);
+	&pxor		($inout1,$rndkey0);
+	&pxor		($rndkey1,$inout2);
+	&pxor		($inout2,$rndkey0);
+	&pxor		($rndkey1,$inout3);
+	&pxor		($inout3,$rndkey0);
+	&pxor		($rndkey1,$inout4);
+	&pxor		($inout4,$rndkey0);
+	&pxor		($rndkey1,$inout5);
+	&pxor		($inout5,$rndkey0);
+	&movdqa		(&QWP($checksum,"esp"),$rndkey1);
+
+	&$movekey	($rndkey1,&QWP(-32,$key,$rounds));
+	&pxor		($inout0,&QWP(16*0,"esp"));	# ^ offset_i
+	&pxor		($inout1,&QWP(16*1,"esp"));
+	&pxor		($inout2,&QWP(16*2,"esp"));
+	&pxor		($inout3,&QWP(16*3,"esp"));
+	&pxor		($inout4,&QWP(16*4,"esp"));
+	&pxor		($inout5,&QWP(16*5,"esp"));
+
+	&$movekey	($rndkey0,&QWP(-16,$key,$rounds));
+	&aesenc		($inout0,$rndkey1);
+	&aesenc		($inout1,$rndkey1);
+	&aesenc		($inout2,$rndkey1);
+	&aesenc		($inout3,$rndkey1);
+	&aesenc		($inout4,$rndkey1);
+	&aesenc		($inout5,$rndkey1);
+
+	&mov		($out,&DWP($out_off,"esp"));
+	&mov		($len,&DWP($end_off,"esp"));
+	&call		("_aesni_encrypt6_enter");
+
+	&movdqa		($rndkey0,&QWP(16*5,"esp"));	# pass last offset_i
+	&pxor		($inout0,&QWP(16*0,"esp"));	# ^ offset_i
+	&pxor		($inout1,&QWP(16*1,"esp"));
+	&pxor		($inout2,&QWP(16*2,"esp"));
+	&pxor		($inout3,&QWP(16*3,"esp"));
+	&pxor		($inout4,&QWP(16*4,"esp"));
+	&pxor		($inout5,$rndkey0);
+	&movdqa		($rndkey1,&QWP($checksum,"esp"));# pass the checksum
+
+	&movdqu		(&QWP(-16*6,$out,$inp),$inout0);# store output
+	&movdqu		(&QWP(-16*5,$out,$inp),$inout1);
+	&movdqu		(&QWP(-16*4,$out,$inp),$inout2);
+	&movdqu		(&QWP(-16*3,$out,$inp),$inout3);
+	&movdqu		(&QWP(-16*2,$out,$inp),$inout4);
+	&movdqu		(&QWP(-16*1,$out,$inp),$inout5);
+	&cmp		($inp,$len);			# done yet?
+	&jb		(&label("grandloop"));
+
+&set_label("short");
+	&add		($len,16*6);
+	&sub		($len,$inp);
+	&jz		(&label("done"));
+
+	&cmp		($len,16*2);
+	&jb		(&label("one"));
+	&je		(&label("two"));
+
+	&cmp		($len,16*4);
+	&jb		(&label("three"));
+	&je		(&label("four"));
+
+	&lea		($i1,&DWP(1,$block));
+	&lea		($i3,&DWP(3,$block));
+	&bsf		($i1,$i1);
+	&bsf		($i3,$i3);
+	&shl		($i1,4);
+	&shl		($i3,4);
+	&movdqu		($inout0,&QWP(0,$l_));
+	&movdqu		($inout1,&QWP(0,$l_,$i1));
+	&mov		($rounds,&DWP($rounds_off,"esp"));
+	&movdqa		($inout2,$inout0);
+	&movdqu		($inout3,&QWP(0,$l_,$i3));
+	&movdqa		($inout4,$inout0);
+
+	&pxor		($inout0,$rndkey0);		# ^ last offset_i
+	&pxor		($inout1,$inout0);
+	&movdqa		(&QWP(16*0,"esp"),$inout0);
+	&pxor		($inout2,$inout1);
+	&movdqa		(&QWP(16*1,"esp"),$inout1);
+	&pxor		($inout3,$inout2);
+	&movdqa		(&QWP(16*2,"esp"),$inout2);
+	&pxor		($inout4,$inout3);
+	&movdqa		(&QWP(16*3,"esp"),$inout3);
+	&pxor		($inout5,$inout4);
+	&movdqa		(&QWP(16*4,"esp"),$inout4);
+
+	&$movekey	($rndkey0,&QWP(-48,$key,$rounds));
+	&movdqu		($inout0,&QWP(16*0,$inp));	# load input
+	&movdqu		($inout1,&QWP(16*1,$inp));
+	&movdqu		($inout2,&QWP(16*2,$inp));
+	&movdqu		($inout3,&QWP(16*3,$inp));
+	&movdqu		($inout4,&QWP(16*4,$inp));
+	&pxor		($inout5,$inout5);
+
+	&pxor		($rndkey1,$inout0);		# checksum
+	&pxor		($inout0,$rndkey0);		# ^ roundkey[0]
+	&pxor		($rndkey1,$inout1);
+	&pxor		($inout1,$rndkey0);
+	&pxor		($rndkey1,$inout2);
+	&pxor		($inout2,$rndkey0);
+	&pxor		($rndkey1,$inout3);
+	&pxor		($inout3,$rndkey0);
+	&pxor		($rndkey1,$inout4);
+	&pxor		($inout4,$rndkey0);
+	&movdqa		(&QWP($checksum,"esp"),$rndkey1);
+
+	&$movekey	($rndkey1,&QWP(-32,$key,$rounds));
+	&pxor		($inout0,&QWP(16*0,"esp"));	# ^ offset_i
+	&pxor		($inout1,&QWP(16*1,"esp"));
+	&pxor		($inout2,&QWP(16*2,"esp"));
+	&pxor		($inout3,&QWP(16*3,"esp"));
+	&pxor		($inout4,&QWP(16*4,"esp"));
+
+	&$movekey	($rndkey0,&QWP(-16,$key,$rounds));
+	&aesenc		($inout0,$rndkey1);
+	&aesenc		($inout1,$rndkey1);
+	&aesenc		($inout2,$rndkey1);
+	&aesenc		($inout3,$rndkey1);
+	&aesenc		($inout4,$rndkey1);
+	&aesenc		($inout5,$rndkey1);
+
+	&mov		($out,&DWP($out_off,"esp"));
+	&call		("_aesni_encrypt6_enter");
+
+	&movdqa		($rndkey0,&QWP(16*4,"esp"));	# pass last offset_i
+	&pxor		($inout0,&QWP(16*0,"esp"));	# ^ offset_i
+	&pxor		($inout1,&QWP(16*1,"esp"));
+	&pxor		($inout2,&QWP(16*2,"esp"));
+	&pxor		($inout3,&QWP(16*3,"esp"));
+	&pxor		($inout4,$rndkey0);
+	&movdqa		($rndkey1,&QWP($checksum,"esp"));# pass the checksum
+
+	&movdqu		(&QWP(16*0,$out,$inp),$inout0);	# store output
+	&movdqu		(&QWP(16*1,$out,$inp),$inout1);
+	&movdqu		(&QWP(16*2,$out,$inp),$inout2);
+	&movdqu		(&QWP(16*3,$out,$inp),$inout3);
+	&movdqu		(&QWP(16*4,$out,$inp),$inout4);
+
+	&jmp		(&label("done"));
+
+&set_label("one",16);
+	&movdqu		($inout5,&QWP(0,$l_));
+	&mov		($key,&DWP($key_off,"esp"));	# restore key
+
+	&movdqu		($inout0,&QWP(16*0,$inp));	# load input
+	&mov		($rounds,&DWP(240,$key));
+
+	&pxor		($inout5,$rndkey0);		# ^ last offset_i
+	&pxor		($rndkey1,$inout0);		# checksum
+	&pxor		($inout0,$inout5);		# ^ offset_i
+
+	&movdqa		($inout4,$rndkey1);
+	&mov		($out,&DWP($out_off,"esp"));
+	if ($inline)
+	{   &aesni_inline_generate1("enc");	}
+	else
+	{   &call	("_aesni_encrypt1");	}
+
+	&xorps		($inout0,$inout5);		# ^ offset_i
+	&movdqa		($rndkey0,$inout5);		# pass last offset_i
+	&movdqa		($rndkey1,$inout4);		# pass the checksum
+	&movups		(&QWP(0,$out,$inp),$inout0);
+
+	&jmp		(&label("done"));
+
+&set_label("two",16);
+	&lea		($i1,&DWP(1,$block));
+	&mov		($key,&DWP($key_off,"esp"));	# restore key
+	&bsf		($i1,$i1);
+	&shl		($i1,4);
+	&movdqu		($inout4,&QWP(0,$l_));
+	&movdqu		($inout5,&QWP(0,$l_,$i1));
+
+	&movdqu		($inout0,&QWP(16*0,$inp));	# load input
+	&movdqu		($inout1,&QWP(16*1,$inp));
+	&mov		($rounds,&DWP(240,$key));
+
+	&pxor		($inout4,$rndkey0);		# ^ last offset_i
+	&pxor		($inout5,$inout4);
+
+	&pxor		($rndkey1,$inout0);		# checksum
+	&pxor		($inout0,$inout4);		# ^ offset_i
+	&pxor		($rndkey1,$inout1);
+	&pxor		($inout1,$inout5);
+
+	&movdqa		($inout3,$rndkey1)
+	&mov		($out,&DWP($out_off,"esp"));
+	&call		("_aesni_encrypt2");
+
+	&xorps		($inout0,$inout4);		# ^ offset_i
+	&xorps		($inout1,$inout5);
+	&movdqa		($rndkey0,$inout5);		# pass last offset_i
+	&movdqa		($rndkey1,$inout3);		# pass the checksum
+	&movups		(&QWP(16*0,$out,$inp),$inout0);	# store output
+	&movups		(&QWP(16*1,$out,$inp),$inout1);
+
+	&jmp		(&label("done"));
+
+&set_label("three",16);
+	&lea		($i1,&DWP(1,$block));
+	&mov		($key,&DWP($key_off,"esp"));	# restore key
+	&bsf		($i1,$i1);
+	&shl		($i1,4);
+	&movdqu		($inout3,&QWP(0,$l_));
+	&movdqu		($inout4,&QWP(0,$l_,$i1));
+	&movdqa		($inout5,$inout3);
+
+	&movdqu		($inout0,&QWP(16*0,$inp));	# load input
+	&movdqu		($inout1,&QWP(16*1,$inp));
+	&movdqu		($inout2,&QWP(16*2,$inp));
+	&mov		($rounds,&DWP(240,$key));
+
+	&pxor		($inout3,$rndkey0);		# ^ last offset_i
+	&pxor		($inout4,$inout3);
+	&pxor		($inout5,$inout4);
+
+	&pxor		($rndkey1,$inout0);		# checksum
+	&pxor		($inout0,$inout3);		# ^ offset_i
+	&pxor		($rndkey1,$inout1);
+	&pxor		($inout1,$inout4);
+	&pxor		($rndkey1,$inout2);
+	&pxor		($inout2,$inout5);
+
+	&movdqa		(&QWP($checksum,"esp"),$rndkey1);
+	&mov		($out,&DWP($out_off,"esp"));
+	&call		("_aesni_encrypt3");
+
+	&xorps		($inout0,$inout3);		# ^ offset_i
+	&xorps		($inout1,$inout4);
+	&xorps		($inout2,$inout5);
+	&movdqa		($rndkey0,$inout5);		# pass last offset_i
+	&movdqa		($rndkey1,&QWP($checksum,"esp"));# pass the checksum
+	&movups		(&QWP(16*0,$out,$inp),$inout0);	# store output
+	&movups		(&QWP(16*1,$out,$inp),$inout1);
+	&movups		(&QWP(16*2,$out,$inp),$inout2);
+
+	&jmp		(&label("done"));
+
+&set_label("four",16);
+	&lea		($i1,&DWP(1,$block));
+	&lea		($i3,&DWP(3,$block));
+	&bsf		($i1,$i1);
+	&bsf		($i3,$i3);
+	&mov		($key,&DWP($key_off,"esp"));	# restore key
+	&shl		($i1,4);
+	&shl		($i3,4);
+	&movdqu		($inout2,&QWP(0,$l_));
+	&movdqu		($inout3,&QWP(0,$l_,$i1));
+	&movdqa		($inout4,$inout2);
+	&movdqu		($inout5,&QWP(0,$l_,$i3));
+
+	&pxor		($inout2,$rndkey0);		# ^ last offset_i
+	&movdqu		($inout0,&QWP(16*0,$inp));	# load input
+	&pxor		($inout3,$inout2);
+	&movdqu		($inout1,&QWP(16*1,$inp));
+	&pxor		($inout4,$inout3);
+	&movdqa		(&QWP(16*0,"esp"),$inout2);
+	&pxor		($inout5,$inout4);
+	&movdqa		(&QWP(16*1,"esp"),$inout3);
+	&movdqu		($inout2,&QWP(16*2,$inp));
+	&movdqu		($inout3,&QWP(16*3,$inp));
+	&mov		($rounds,&DWP(240,$key));
+
+	&pxor		($rndkey1,$inout0);		# checksum
+	&pxor		($inout0,&QWP(16*0,"esp"));	# ^ offset_i
+	&pxor		($rndkey1,$inout1);
+	&pxor		($inout1,&QWP(16*1,"esp"));
+	&pxor		($rndkey1,$inout2);
+	&pxor		($inout2,$inout4);
+	&pxor		($rndkey1,$inout3);
+	&pxor		($inout3,$inout5);
+
+	&movdqa		(&QWP($checksum,"esp"),$rndkey1)
+	&mov		($out,&DWP($out_off,"esp"));
+	&call		("_aesni_encrypt4");
+
+	&xorps		($inout0,&QWP(16*0,"esp"));	# ^ offset_i
+	&xorps		($inout1,&QWP(16*1,"esp"));
+	&xorps		($inout2,$inout4);
+	&movups		(&QWP(16*0,$out,$inp),$inout0);	# store output
+	&xorps		($inout3,$inout5);
+	&movups		(&QWP(16*1,$out,$inp),$inout1);
+	&movdqa		($rndkey0,$inout5);		# pass last offset_i
+	&movups		(&QWP(16*2,$out,$inp),$inout2);
+	&movdqa		($rndkey1,&QWP($checksum,"esp"));# pass the checksum
+	&movups		(&QWP(16*3,$out,$inp),$inout3);
+
+&set_label("done");
+	&mov	($key,&DWP($esp_off,"esp"));
+	&pxor	($inout0,$inout0);		# clear register bank
+	&pxor	($inout1,$inout1);
+	&movdqa	(&QWP(16*0,"esp"),$inout0);	# clear stack
+	&pxor	($inout2,$inout2);
+	&movdqa	(&QWP(16*1,"esp"),$inout0);
+	&pxor	($inout3,$inout3);
+	&movdqa	(&QWP(16*2,"esp"),$inout0);
+	&pxor	($inout4,$inout4);
+	&movdqa	(&QWP(16*3,"esp"),$inout0);
+	&pxor	($inout5,$inout5);
+	&movdqa	(&QWP(16*4,"esp"),$inout0);
+	&movdqa	(&QWP(16*5,"esp"),$inout0);
+	&movdqa	(&QWP(16*6,"esp"),$inout0);
+
+	&lea	("esp",&DWP(0,$key));
+	&mov	($rounds,&wparam(5));		# &offset_i
+	&mov	($rounds_,&wparam(7));		# &checksum
+	&movdqu	(&QWP(0,$rounds),$rndkey0);
+	&pxor	($rndkey0,$rndkey0);
+	&movdqu	(&QWP(0,$rounds_),$rndkey1);
+	&pxor	($rndkey1,$rndkey1);
+&function_end("aesni_ocb_encrypt");
+
+&function_begin("aesni_ocb_decrypt");
+	&mov	($rounds,&wparam(5));		# &offset_i
+	&mov	($rounds_,&wparam(7));		# &checksum
+
+	&mov	($inp,&wparam(0));
+	&mov	($out,&wparam(1));
+	&mov	($len,&wparam(2));
+	&mov	($key,&wparam(3));
+	&movdqu	($rndkey0,&QWP(0,$rounds));	# load offset_i
+	&mov	($block,&wparam(4));		# start_block_num
+	&movdqu	($rndkey1,&QWP(0,$rounds_));	# load checksum
+	&mov	($l_,&wparam(6));		# L_
+
+	&mov	($rounds,"esp");
+	&sub	("esp",$esp_off+4);		# alloca
+	&and	("esp",-16);			# align stack
+
+	&sub	($out,$inp);
+	&shl	($len,4);
+	&lea	($len,&DWP(-16*6,$inp,$len));	# end of input - 16*6
+	&mov	(&DWP($out_off,"esp"),$out);
+	&mov	(&DWP($end_off,"esp"),$len);
+	&mov	(&DWP($esp_off,"esp"),$rounds);
+
+	&mov	($rounds,&DWP(240,$key));
+
+	&test	($block,1);
+	&jnz	(&label("odd"));
+
+	&bsf		($i3,$block);
+	&add		($block,1);
+	&shl		($i3,4);
+	&movdqu		($inout5,&QWP(0,$l_,$i3));
+	&mov		($i3,$key);			# put aside key
+
+	&movdqu		($inout0,&QWP(16*0,$inp));	# load input
+	&lea		($inp,&DWP(16,$inp));
+
+	&pxor		($inout5,$rndkey0);		# ^ last offset_i
+	&pxor		($inout0,$inout5);		# ^ offset_i
+
+	&movdqa		($inout4,$rndkey1);
+	if ($inline)
+	{   &aesni_inline_generate1("dec");	}
+	else
+	{   &call	("_aesni_decrypt1");	}
+
+	&xorps		($inout0,$inout5);		# ^ offset_i
+	&movaps		($rndkey1,$inout4);		# pass the checksum
+	&movdqa		($rndkey0,$inout5);		# pass last offset_i
+	&xorps		($rndkey1,$inout0);		# checksum
+	&movups		(&QWP(-16,$out,$inp),$inout0);	# store output
+
+	&mov		($rounds,&DWP(240,$i3));
+	&mov		($key,$i3);			# restore key
+	&mov		($len,&DWP($end_off,"esp"));
+
+&set_label("odd");
+	&shl		($rounds,4);
+	&mov		($out,16);
+	&sub		($out,$rounds);			# twisted rounds
+	&mov		(&DWP($key_off,"esp"),$key);
+	&lea		($key,&DWP(32,$key,$rounds));	# end of key schedule
+	&mov		(&DWP($rounds_off,"esp"),$out);
+
+	&cmp		($inp,$len);
+	&ja		(&label("short"));
+	&jmp		(&label("grandloop"));
+
+&set_label("grandloop",32);
+	&lea		($i1,&DWP(1,$block));
+	&lea		($i3,&DWP(3,$block));
+	&lea		($i5,&DWP(5,$block));
+	&add		($block,6);
+	&bsf		($i1,$i1);
+	&bsf		($i3,$i3);
+	&bsf		($i5,$i5);
+	&shl		($i1,4);
+	&shl		($i3,4);
+	&shl		($i5,4);
+	&movdqu		($inout0,&QWP(0,$l_));
+	&movdqu		($inout1,&QWP(0,$l_,$i1));
+	&mov		($rounds,&DWP($rounds_off,"esp"));
+	&movdqa		($inout2,$inout0);
+	&movdqu		($inout3,&QWP(0,$l_,$i3));
+	&movdqa		($inout4,$inout0);
+	&movdqu		($inout5,&QWP(0,$l_,$i5));
+
+	&pxor		($inout0,$rndkey0);		# ^ last offset_i
+	&pxor		($inout1,$inout0);
+	&movdqa		(&QWP(16*0,"esp"),$inout0);
+	&pxor		($inout2,$inout1);
+	&movdqa		(&QWP(16*1,"esp"),$inout1);
+	&pxor		($inout3,$inout2);
+	&movdqa		(&QWP(16*2,"esp"),$inout2);
+	&pxor		($inout4,$inout3);
+	&movdqa		(&QWP(16*3,"esp"),$inout3);
+	&pxor		($inout5,$inout4);
+	&movdqa		(&QWP(16*4,"esp"),$inout4);
+	&movdqa		(&QWP(16*5,"esp"),$inout5);
+
+	&$movekey	($rndkey0,&QWP(-48,$key,$rounds));
+	&movdqu		($inout0,&QWP(16*0,$inp));	# load input
+	&movdqu		($inout1,&QWP(16*1,$inp));
+	&movdqu		($inout2,&QWP(16*2,$inp));
+	&movdqu		($inout3,&QWP(16*3,$inp));
+	&movdqu		($inout4,&QWP(16*4,$inp));
+	&movdqu		($inout5,&QWP(16*5,$inp));
+	&lea		($inp,&DWP(16*6,$inp));
+
+	&movdqa		(&QWP($checksum,"esp"),$rndkey1);
+	&pxor		($inout0,$rndkey0);		# ^ roundkey[0]
+	&pxor		($inout1,$rndkey0);
+	&pxor		($inout2,$rndkey0);
+	&pxor		($inout3,$rndkey0);
+	&pxor		($inout4,$rndkey0);
+	&pxor		($inout5,$rndkey0);
+
+	&$movekey	($rndkey1,&QWP(-32,$key,$rounds));
+	&pxor		($inout0,&QWP(16*0,"esp"));	# ^ offset_i
+	&pxor		($inout1,&QWP(16*1,"esp"));
+	&pxor		($inout2,&QWP(16*2,"esp"));
+	&pxor		($inout3,&QWP(16*3,"esp"));
+	&pxor		($inout4,&QWP(16*4,"esp"));
+	&pxor		($inout5,&QWP(16*5,"esp"));
+
+	&$movekey	($rndkey0,&QWP(-16,$key,$rounds));
+	&aesdec		($inout0,$rndkey1);
+	&aesdec		($inout1,$rndkey1);
+	&aesdec		($inout2,$rndkey1);
+	&aesdec		($inout3,$rndkey1);
+	&aesdec		($inout4,$rndkey1);
+	&aesdec		($inout5,$rndkey1);
+
+	&mov		($out,&DWP($out_off,"esp"));
+	&mov		($len,&DWP($end_off,"esp"));
+	&call		("_aesni_decrypt6_enter");
+
+	&movdqa		($rndkey0,&QWP(16*5,"esp"));	# pass last offset_i
+	&pxor		($inout0,&QWP(16*0,"esp"));	# ^ offset_i
+	&movdqa		($rndkey1,&QWP($checksum,"esp"));
+	&pxor		($inout1,&QWP(16*1,"esp"));
+	&pxor		($inout2,&QWP(16*2,"esp"));
+	&pxor		($inout3,&QWP(16*3,"esp"));
+	&pxor		($inout4,&QWP(16*4,"esp"));
+	&pxor		($inout5,$rndkey0);
+
+	&pxor		($rndkey1,$inout0);		# checksum
+	&movdqu		(&QWP(-16*6,$out,$inp),$inout0);# store output
+	&pxor		($rndkey1,$inout1);
+	&movdqu		(&QWP(-16*5,$out,$inp),$inout1);
+	&pxor		($rndkey1,$inout2);
+	&movdqu		(&QWP(-16*4,$out,$inp),$inout2);
+	&pxor		($rndkey1,$inout3);
+	&movdqu		(&QWP(-16*3,$out,$inp),$inout3);
+	&pxor		($rndkey1,$inout4);
+	&movdqu		(&QWP(-16*2,$out,$inp),$inout4);
+	&pxor		($rndkey1,$inout5);
+	&movdqu		(&QWP(-16*1,$out,$inp),$inout5);
+	&cmp		($inp,$len);			# done yet?
+	&jb		(&label("grandloop"));
+
+&set_label("short");
+	&add		($len,16*6);
+	&sub		($len,$inp);
+	&jz		(&label("done"));
+
+	&cmp		($len,16*2);
+	&jb		(&label("one"));
+	&je		(&label("two"));
+
+	&cmp		($len,16*4);
+	&jb		(&label("three"));
+	&je		(&label("four"));
+
+	&lea		($i1,&DWP(1,$block));
+	&lea		($i3,&DWP(3,$block));
+	&bsf		($i1,$i1);
+	&bsf		($i3,$i3);
+	&shl		($i1,4);
+	&shl		($i3,4);
+	&movdqu		($inout0,&QWP(0,$l_));
+	&movdqu		($inout1,&QWP(0,$l_,$i1));
+	&mov		($rounds,&DWP($rounds_off,"esp"));
+	&movdqa		($inout2,$inout0);
+	&movdqu		($inout3,&QWP(0,$l_,$i3));
+	&movdqa		($inout4,$inout0);
+
+	&pxor		($inout0,$rndkey0);		# ^ last offset_i
+	&pxor		($inout1,$inout0);
+	&movdqa		(&QWP(16*0,"esp"),$inout0);
+	&pxor		($inout2,$inout1);
+	&movdqa		(&QWP(16*1,"esp"),$inout1);
+	&pxor		($inout3,$inout2);
+	&movdqa		(&QWP(16*2,"esp"),$inout2);
+	&pxor		($inout4,$inout3);
+	&movdqa		(&QWP(16*3,"esp"),$inout3);
+	&pxor		($inout5,$inout4);
+	&movdqa		(&QWP(16*4,"esp"),$inout4);
+
+	&$movekey	($rndkey0,&QWP(-48,$key,$rounds));
+	&movdqu		($inout0,&QWP(16*0,$inp));	# load input
+	&movdqu		($inout1,&QWP(16*1,$inp));
+	&movdqu		($inout2,&QWP(16*2,$inp));
+	&movdqu		($inout3,&QWP(16*3,$inp));
+	&movdqu		($inout4,&QWP(16*4,$inp));
+	&pxor		($inout5,$inout5);
+
+	&movdqa		(&QWP($checksum,"esp"),$rndkey1);
+	&pxor		($inout0,$rndkey0);		# ^ roundkey[0]
+	&pxor		($inout1,$rndkey0);
+	&pxor		($inout2,$rndkey0);
+	&pxor		($inout3,$rndkey0);
+	&pxor		($inout4,$rndkey0);
+
+	&$movekey	($rndkey1,&QWP(-32,$key,$rounds));
+	&pxor		($inout0,&QWP(16*0,"esp"));	# ^ offset_i
+	&pxor		($inout1,&QWP(16*1,"esp"));
+	&pxor		($inout2,&QWP(16*2,"esp"));
+	&pxor		($inout3,&QWP(16*3,"esp"));
+	&pxor		($inout4,&QWP(16*4,"esp"));
+
+	&$movekey	($rndkey0,&QWP(-16,$key,$rounds));
+	&aesdec		($inout0,$rndkey1);
+	&aesdec		($inout1,$rndkey1);
+	&aesdec		($inout2,$rndkey1);
+	&aesdec		($inout3,$rndkey1);
+	&aesdec		($inout4,$rndkey1);
+	&aesdec		($inout5,$rndkey1);
+
+	&mov		($out,&DWP($out_off,"esp"));
+	&call		("_aesni_decrypt6_enter");
+
+	&movdqa		($rndkey0,&QWP(16*4,"esp"));	# pass last offset_i
+	&pxor		($inout0,&QWP(16*0,"esp"));	# ^ offset_i
+	&movdqa		($rndkey1,&QWP($checksum,"esp"));
+	&pxor		($inout1,&QWP(16*1,"esp"));
+	&pxor		($inout2,&QWP(16*2,"esp"));
+	&pxor		($inout3,&QWP(16*3,"esp"));
+	&pxor		($inout4,$rndkey0);
+
+	&pxor		($rndkey1,$inout0);		# checksum
+	&movdqu		(&QWP(16*0,$out,$inp),$inout0);	# store output
+	&pxor		($rndkey1,$inout1);
+	&movdqu		(&QWP(16*1,$out,$inp),$inout1);
+	&pxor		($rndkey1,$inout2);
+	&movdqu		(&QWP(16*2,$out,$inp),$inout2);
+	&pxor		($rndkey1,$inout3);
+	&movdqu		(&QWP(16*3,$out,$inp),$inout3);
+	&pxor		($rndkey1,$inout4);
+	&movdqu		(&QWP(16*4,$out,$inp),$inout4);
+
+	&jmp		(&label("done"));
+
+&set_label("one",16);
+	&movdqu		($inout5,&QWP(0,$l_));
+	&mov		($key,&DWP($key_off,"esp"));	# restore key
+
+	&movdqu		($inout0,&QWP(16*0,$inp));	# load input
+	&mov		($rounds,&DWP(240,$key));
+
+	&pxor		($inout5,$rndkey0);		# ^ last offset_i
+	&pxor		($inout0,$inout5);		# ^ offset_i
+
+	&movdqa		($inout4,$rndkey1);
+	&mov		($out,&DWP($out_off,"esp"));
+	if ($inline)
+	{   &aesni_inline_generate1("dec");	}
+	else
+	{   &call	("_aesni_decrypt1");	}
+
+	&xorps		($inout0,$inout5);		# ^ offset_i
+	&movaps		($rndkey1,$inout4);		# pass the checksum
+	&movdqa		($rndkey0,$inout5);		# pass last offset_i
+	&xorps		($rndkey1,$inout0);		# checksum
+	&movups		(&QWP(0,$out,$inp),$inout0);
+
+	&jmp		(&label("done"));
+
+&set_label("two",16);
+	&lea		($i1,&DWP(1,$block));
+	&mov		($key,&DWP($key_off,"esp"));	# restore key
+	&bsf		($i1,$i1);
+	&shl		($i1,4);
+	&movdqu		($inout4,&QWP(0,$l_));
+	&movdqu		($inout5,&QWP(0,$l_,$i1));
+
+	&movdqu		($inout0,&QWP(16*0,$inp));	# load input
+	&movdqu		($inout1,&QWP(16*1,$inp));
+	&mov		($rounds,&DWP(240,$key));
+
+	&movdqa		($inout3,$rndkey1);
+	&pxor		($inout4,$rndkey0);		# ^ last offset_i
+	&pxor		($inout5,$inout4);
+
+	&pxor		($inout0,$inout4);		# ^ offset_i
+	&pxor		($inout1,$inout5);
+
+	&mov		($out,&DWP($out_off,"esp"));
+	&call		("_aesni_decrypt2");
+
+	&xorps		($inout0,$inout4);		# ^ offset_i
+	&xorps		($inout1,$inout5);
+	&movdqa		($rndkey0,$inout5);		# pass last offset_i
+	&xorps		($inout3,$inout0);		# checksum
+	&movups		(&QWP(16*0,$out,$inp),$inout0);	# store output
+	&xorps		($inout3,$inout1);
+	&movups		(&QWP(16*1,$out,$inp),$inout1);
+	&movaps		($rndkey1,$inout3);		# pass the checksum
+
+	&jmp		(&label("done"));
+
+&set_label("three",16);
+	&lea		($i1,&DWP(1,$block));
+	&mov		($key,&DWP($key_off,"esp"));	# restore key
+	&bsf		($i1,$i1);
+	&shl		($i1,4);
+	&movdqu		($inout3,&QWP(0,$l_));
+	&movdqu		($inout4,&QWP(0,$l_,$i1));
+	&movdqa		($inout5,$inout3);
+
+	&movdqu		($inout0,&QWP(16*0,$inp));	# load input
+	&movdqu		($inout1,&QWP(16*1,$inp));
+	&movdqu		($inout2,&QWP(16*2,$inp));
+	&mov		($rounds,&DWP(240,$key));
+
+	&movdqa		(&QWP($checksum,"esp"),$rndkey1);
+	&pxor		($inout3,$rndkey0);		# ^ last offset_i
+	&pxor		($inout4,$inout3);
+	&pxor		($inout5,$inout4);
+
+	&pxor		($inout0,$inout3);		# ^ offset_i
+	&pxor		($inout1,$inout4);
+	&pxor		($inout2,$inout5);
+
+	&mov		($out,&DWP($out_off,"esp"));
+	&call		("_aesni_decrypt3");
+
+	&movdqa		($rndkey1,&QWP($checksum,"esp"));# pass the checksum
+	&xorps		($inout0,$inout3);		# ^ offset_i
+	&xorps		($inout1,$inout4);
+	&xorps		($inout2,$inout5);
+	&movups		(&QWP(16*0,$out,$inp),$inout0);	# store output
+	&pxor		($rndkey1,$inout0);		# checksum
+	&movdqa		($rndkey0,$inout5);		# pass last offset_i
+	&movups		(&QWP(16*1,$out,$inp),$inout1);
+	&pxor		($rndkey1,$inout1);
+	&movups		(&QWP(16*2,$out,$inp),$inout2);
+	&pxor		($rndkey1,$inout2);
+
+	&jmp		(&label("done"));
+
+&set_label("four",16);
+	&lea		($i1,&DWP(1,$block));
+	&lea		($i3,&DWP(3,$block));
+	&bsf		($i1,$i1);
+	&bsf		($i3,$i3);
+	&mov		($key,&DWP($key_off,"esp"));	# restore key
+	&shl		($i1,4);
+	&shl		($i3,4);
+	&movdqu		($inout2,&QWP(0,$l_));
+	&movdqu		($inout3,&QWP(0,$l_,$i1));
+	&movdqa		($inout4,$inout2);
+	&movdqu		($inout5,&QWP(0,$l_,$i3));
+
+	&pxor		($inout2,$rndkey0);		# ^ last offset_i
+	&movdqu		($inout0,&QWP(16*0,$inp));	# load input
+	&pxor		($inout3,$inout2);
+	&movdqu		($inout1,&QWP(16*1,$inp));
+	&pxor		($inout4,$inout3);
+	&movdqa		(&QWP(16*0,"esp"),$inout2);
+	&pxor		($inout5,$inout4);
+	&movdqa		(&QWP(16*1,"esp"),$inout3);
+	&movdqu		($inout2,&QWP(16*2,$inp));
+	&movdqu		($inout3,&QWP(16*3,$inp));
+	&mov		($rounds,&DWP(240,$key));
+
+	&movdqa		(&QWP($checksum,"esp"),$rndkey1);
+	&pxor		($inout0,&QWP(16*0,"esp"));	# ^ offset_i
+	&pxor		($inout1,&QWP(16*1,"esp"));
+	&pxor		($inout2,$inout4);
+	&pxor		($inout3,$inout5);
+
+	&mov		($out,&DWP($out_off,"esp"));
+	&call		("_aesni_decrypt4");
+
+	&movdqa		($rndkey1,&QWP($checksum,"esp"));# pass the checksum
+	&xorps		($inout0,&QWP(16*0,"esp"));	# ^ offset_i
+	&xorps		($inout1,&QWP(16*1,"esp"));
+	&xorps		($inout2,$inout4);
+	&movups		(&QWP(16*0,$out,$inp),$inout0);	# store output
+	&pxor		($rndkey1,$inout0);		# checksum
+	&xorps		($inout3,$inout5);
+	&movups		(&QWP(16*1,$out,$inp),$inout1);
+	&pxor		($rndkey1,$inout1);
+	&movdqa		($rndkey0,$inout5);		# pass last offset_i
+	&movups		(&QWP(16*2,$out,$inp),$inout2);
+	&pxor		($rndkey1,$inout2);
+	&movups		(&QWP(16*3,$out,$inp),$inout3);
+	&pxor		($rndkey1,$inout3);
+
+&set_label("done");
+	&mov	($key,&DWP($esp_off,"esp"));
+	&pxor	($inout0,$inout0);		# clear register bank
+	&pxor	($inout1,$inout1);
+	&movdqa	(&QWP(16*0,"esp"),$inout0);	# clear stack
+	&pxor	($inout2,$inout2);
+	&movdqa	(&QWP(16*1,"esp"),$inout0);
+	&pxor	($inout3,$inout3);
+	&movdqa	(&QWP(16*2,"esp"),$inout0);
+	&pxor	($inout4,$inout4);
+	&movdqa	(&QWP(16*3,"esp"),$inout0);
+	&pxor	($inout5,$inout5);
+	&movdqa	(&QWP(16*4,"esp"),$inout0);
+	&movdqa	(&QWP(16*5,"esp"),$inout0);
+	&movdqa	(&QWP(16*6,"esp"),$inout0);
+
+	&lea	("esp",&DWP(0,$key));
+	&mov	($rounds,&wparam(5));		# &offset_i
+	&mov	($rounds_,&wparam(7));		# &checksum
+	&movdqu	(&QWP(0,$rounds),$rndkey0);
+	&pxor	($rndkey0,$rndkey0);
+	&movdqu	(&QWP(0,$rounds_),$rndkey1);
+	&pxor	($rndkey1,$rndkey1);
+&function_end("aesni_ocb_decrypt");
+}
+}
+
+######################################################################
+# void $PREFIX_cbc_encrypt (const void *inp, void *out,
+#                           size_t length, const AES_KEY *key,
+#                           unsigned char *ivp,const int enc);
+&function_begin("${PREFIX}_cbc_encrypt");
+	&mov	($inp,&wparam(0));
+	&mov	($rounds_,"esp");
+	&mov	($out,&wparam(1));
+	&sub	($rounds_,24);
+	&mov	($len,&wparam(2));
+	&and	($rounds_,-16);
+	&mov	($key,&wparam(3));
+	&mov	($key_,&wparam(4));
+	&test	($len,$len);
+	&jz	(&label("cbc_abort"));
+
+	&cmp	(&wparam(5),0);
+	&xchg	($rounds_,"esp");		# alloca
+	&movups	($ivec,&QWP(0,$key_));		# load IV
+	&mov	($rounds,&DWP(240,$key));
+	&mov	($key_,$key);			# backup $key
+	&mov	(&DWP(16,"esp"),$rounds_);	# save original %esp
+	&mov	($rounds_,$rounds);		# backup $rounds
+	&je	(&label("cbc_decrypt"));
+
+	&movaps	($inout0,$ivec);
+	&cmp	($len,16);
+	&jb	(&label("cbc_enc_tail"));
+	&sub	($len,16);
+	&jmp	(&label("cbc_enc_loop"));
+
+&set_label("cbc_enc_loop",16);
+	&movups	($ivec,&QWP(0,$inp));		# input actually
+	&lea	($inp,&DWP(16,$inp));
+	if ($inline)
+	{   &aesni_inline_generate1("enc",$inout0,$ivec);	}
+	else
+	{   &xorps($inout0,$ivec); &call("_aesni_encrypt1");	}
+	&mov	($rounds,$rounds_);	# restore $rounds
+	&mov	($key,$key_);		# restore $key
+	&movups	(&QWP(0,$out),$inout0);	# store output
+	&lea	($out,&DWP(16,$out));
+	&sub	($len,16);
+	&jnc	(&label("cbc_enc_loop"));
+	&add	($len,16);
+	&jnz	(&label("cbc_enc_tail"));
+	&movaps	($ivec,$inout0);
+	&pxor	($inout0,$inout0);
+	&jmp	(&label("cbc_ret"));
+
+&set_label("cbc_enc_tail");
+	&mov	("ecx",$len);		# zaps $rounds
+	&data_word(0xA4F3F689);		# rep movsb
+	&mov	("ecx",16);		# zero tail
+	&sub	("ecx",$len);
+	&xor	("eax","eax");		# zaps $len
+	&data_word(0xAAF3F689);		# rep stosb
+	&lea	($out,&DWP(-16,$out));	# rewind $out by 1 block
+	&mov	($rounds,$rounds_);	# restore $rounds
+	&mov	($inp,$out);		# $inp and $out are the same
+	&mov	($key,$key_);		# restore $key
+	&jmp	(&label("cbc_enc_loop"));
+######################################################################
+&set_label("cbc_decrypt",16);
+	&cmp	($len,0x50);
+	&jbe	(&label("cbc_dec_tail"));
+	&movaps	(&QWP(0,"esp"),$ivec);		# save IV
+	&sub	($len,0x50);
+	&jmp	(&label("cbc_dec_loop6_enter"));
+
+&set_label("cbc_dec_loop6",16);
+	&movaps	(&QWP(0,"esp"),$rndkey0);	# save IV
+	&movups	(&QWP(0,$out),$inout5);
+	&lea	($out,&DWP(0x10,$out));
+&set_label("cbc_dec_loop6_enter");
+	&movdqu	($inout0,&QWP(0,$inp));
+	&movdqu	($inout1,&QWP(0x10,$inp));
+	&movdqu	($inout2,&QWP(0x20,$inp));
+	&movdqu	($inout3,&QWP(0x30,$inp));
+	&movdqu	($inout4,&QWP(0x40,$inp));
+	&movdqu	($inout5,&QWP(0x50,$inp));
+
+	&call	("_aesni_decrypt6");
+
+	&movups	($rndkey1,&QWP(0,$inp));
+	&movups	($rndkey0,&QWP(0x10,$inp));
+	&xorps	($inout0,&QWP(0,"esp"));	# ^=IV
+	&xorps	($inout1,$rndkey1);
+	&movups	($rndkey1,&QWP(0x20,$inp));
+	&xorps	($inout2,$rndkey0);
+	&movups	($rndkey0,&QWP(0x30,$inp));
+	&xorps	($inout3,$rndkey1);
+	&movups	($rndkey1,&QWP(0x40,$inp));
+	&xorps	($inout4,$rndkey0);
+	&movups	($rndkey0,&QWP(0x50,$inp));	# IV
+	&xorps	($inout5,$rndkey1);
+	&movups	(&QWP(0,$out),$inout0);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&lea	($inp,&DWP(0x60,$inp));
+	&movups	(&QWP(0x20,$out),$inout2);
+	&mov	($rounds,$rounds_);		# restore $rounds
+	&movups	(&QWP(0x30,$out),$inout3);
+	&mov	($key,$key_);			# restore $key
+	&movups	(&QWP(0x40,$out),$inout4);
+	&lea	($out,&DWP(0x50,$out));
+	&sub	($len,0x60);
+	&ja	(&label("cbc_dec_loop6"));
+
+	&movaps	($inout0,$inout5);
+	&movaps	($ivec,$rndkey0);
+	&add	($len,0x50);
+	&jle	(&label("cbc_dec_clear_tail_collected"));
+	&movups	(&QWP(0,$out),$inout0);
+	&lea	($out,&DWP(0x10,$out));
+&set_label("cbc_dec_tail");
+	&movups	($inout0,&QWP(0,$inp));
+	&movaps	($in0,$inout0);
+	&cmp	($len,0x10);
+	&jbe	(&label("cbc_dec_one"));
+
+	&movups	($inout1,&QWP(0x10,$inp));
+	&movaps	($in1,$inout1);
+	&cmp	($len,0x20);
+	&jbe	(&label("cbc_dec_two"));
+
+	&movups	($inout2,&QWP(0x20,$inp));
+	&cmp	($len,0x30);
+	&jbe	(&label("cbc_dec_three"));
+
+	&movups	($inout3,&QWP(0x30,$inp));
+	&cmp	($len,0x40);
+	&jbe	(&label("cbc_dec_four"));
+
+	&movups	($inout4,&QWP(0x40,$inp));
+	&movaps	(&QWP(0,"esp"),$ivec);		# save IV
+	&movups	($inout0,&QWP(0,$inp));
+	&xorps	($inout5,$inout5);
+	&call	("_aesni_decrypt6");
+	&movups	($rndkey1,&QWP(0,$inp));
+	&movups	($rndkey0,&QWP(0x10,$inp));
+	&xorps	($inout0,&QWP(0,"esp"));	# ^= IV
+	&xorps	($inout1,$rndkey1);
+	&movups	($rndkey1,&QWP(0x20,$inp));
+	&xorps	($inout2,$rndkey0);
+	&movups	($rndkey0,&QWP(0x30,$inp));
+	&xorps	($inout3,$rndkey1);
+	&movups	($ivec,&QWP(0x40,$inp));	# IV
+	&xorps	($inout4,$rndkey0);
+	&movups	(&QWP(0,$out),$inout0);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&pxor	($inout1,$inout1);
+	&movups	(&QWP(0x20,$out),$inout2);
+	&pxor	($inout2,$inout2);
+	&movups	(&QWP(0x30,$out),$inout3);
+	&pxor	($inout3,$inout3);
+	&lea	($out,&DWP(0x40,$out));
+	&movaps	($inout0,$inout4);
+	&pxor	($inout4,$inout4);
+	&sub	($len,0x50);
+	&jmp	(&label("cbc_dec_tail_collected"));
+
+&set_label("cbc_dec_one",16);
+	if ($inline)
+	{   &aesni_inline_generate1("dec");	}
+	else
+	{   &call	("_aesni_decrypt1");	}
+	&xorps	($inout0,$ivec);
+	&movaps	($ivec,$in0);
+	&sub	($len,0x10);
+	&jmp	(&label("cbc_dec_tail_collected"));
+
+&set_label("cbc_dec_two",16);
+	&call	("_aesni_decrypt2");
+	&xorps	($inout0,$ivec);
+	&xorps	($inout1,$in0);
+	&movups	(&QWP(0,$out),$inout0);
+	&movaps	($inout0,$inout1);
+	&pxor	($inout1,$inout1);
+	&lea	($out,&DWP(0x10,$out));
+	&movaps	($ivec,$in1);
+	&sub	($len,0x20);
+	&jmp	(&label("cbc_dec_tail_collected"));
+
+&set_label("cbc_dec_three",16);
+	&call	("_aesni_decrypt3");
+	&xorps	($inout0,$ivec);
+	&xorps	($inout1,$in0);
+	&xorps	($inout2,$in1);
+	&movups	(&QWP(0,$out),$inout0);
+	&movaps	($inout0,$inout2);
+	&pxor	($inout2,$inout2);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&pxor	($inout1,$inout1);
+	&lea	($out,&DWP(0x20,$out));
+	&movups	($ivec,&QWP(0x20,$inp));
+	&sub	($len,0x30);
+	&jmp	(&label("cbc_dec_tail_collected"));
+
+&set_label("cbc_dec_four",16);
+	&call	("_aesni_decrypt4");
+	&movups	($rndkey1,&QWP(0x10,$inp));
+	&movups	($rndkey0,&QWP(0x20,$inp));
+	&xorps	($inout0,$ivec);
+	&movups	($ivec,&QWP(0x30,$inp));
+	&xorps	($inout1,$in0);
+	&movups	(&QWP(0,$out),$inout0);
+	&xorps	($inout2,$rndkey1);
+	&movups	(&QWP(0x10,$out),$inout1);
+	&pxor	($inout1,$inout1);
+	&xorps	($inout3,$rndkey0);
+	&movups	(&QWP(0x20,$out),$inout2);
+	&pxor	($inout2,$inout2);
+	&lea	($out,&DWP(0x30,$out));
+	&movaps	($inout0,$inout3);
+	&pxor	($inout3,$inout3);
+	&sub	($len,0x40);
+	&jmp	(&label("cbc_dec_tail_collected"));
+
+&set_label("cbc_dec_clear_tail_collected",16);
+	&pxor	($inout1,$inout1);
+	&pxor	($inout2,$inout2);
+	&pxor	($inout3,$inout3);
+	&pxor	($inout4,$inout4);
+&set_label("cbc_dec_tail_collected");
+	&and	($len,15);
+	&jnz	(&label("cbc_dec_tail_partial"));
+	&movups	(&QWP(0,$out),$inout0);
+	&pxor	($rndkey0,$rndkey0);
+	&jmp	(&label("cbc_ret"));
+
+&set_label("cbc_dec_tail_partial",16);
+	&movaps	(&QWP(0,"esp"),$inout0);
+	&pxor	($rndkey0,$rndkey0);
+	&mov	("ecx",16);
+	&mov	($inp,"esp");
+	&sub	("ecx",$len);
+	&data_word(0xA4F3F689);		# rep movsb
+	&movdqa	(&QWP(0,"esp"),$inout0);
+
+&set_label("cbc_ret");
+	&mov	("esp",&DWP(16,"esp"));	# pull original %esp
+	&mov	($key_,&wparam(4));
+	&pxor	($inout0,$inout0);
+	&pxor	($rndkey1,$rndkey1);
+	&movups	(&QWP(0,$key_),$ivec);	# output IV
+	&pxor	($ivec,$ivec);
+&set_label("cbc_abort");
+&function_end("${PREFIX}_cbc_encrypt");
+
+######################################################################
+# Mechanical port from aesni-x86_64.pl.
+#
+# _aesni_set_encrypt_key is private interface,
+# input:
+#	"eax"	const unsigned char *userKey
+#	$rounds	int bits
+#	$key	AES_KEY *key
+# output:
+#	"eax"	return code
+#	$round	rounds
+
+&function_begin_B("_aesni_set_encrypt_key");
+	&push	("ebp");
+	&push	("ebx");
+	&test	("eax","eax");
+	&jz	(&label("bad_pointer"));
+	&test	($key,$key);
+	&jz	(&label("bad_pointer"));
+
+	&call	(&label("pic"));
+&set_label("pic");
+	&blindpop("ebx");
+	&lea	("ebx",&DWP(&label("key_const")."-".&label("pic"),"ebx"));
+
+	&picmeup("ebp","OPENSSL_ia32cap_P","ebx",&label("key_const"));
+	&movups	("xmm0",&QWP(0,"eax"));	# pull first 128 bits of *userKey
+	&xorps	("xmm4","xmm4");	# low dword of xmm4 is assumed 0
+	&mov	("ebp",&DWP(4,"ebp"));
+	&lea	($key,&DWP(16,$key));
+	&and	("ebp",1<<28|1<<11);	# AVX and XOP bits
+	&cmp	($rounds,256);
+	&je	(&label("14rounds"));
+	&cmp	($rounds,192);
+	&je	(&label("12rounds"));
+	&cmp	($rounds,128);
+	&jne	(&label("bad_keybits"));
+
+&set_label("10rounds",16);
+	&cmp		("ebp",1<<28);
+	&je		(&label("10rounds_alt"));
+
+	&mov		($rounds,9);
+	&$movekey	(&QWP(-16,$key),"xmm0");	# round 0
+	&aeskeygenassist("xmm1","xmm0",0x01);		# round 1
+	&call		(&label("key_128_cold"));
+	&aeskeygenassist("xmm1","xmm0",0x2);		# round 2
+	&call		(&label("key_128"));
+	&aeskeygenassist("xmm1","xmm0",0x04);		# round 3
+	&call		(&label("key_128"));
+	&aeskeygenassist("xmm1","xmm0",0x08);		# round 4
+	&call		(&label("key_128"));
+	&aeskeygenassist("xmm1","xmm0",0x10);		# round 5
+	&call		(&label("key_128"));
+	&aeskeygenassist("xmm1","xmm0",0x20);		# round 6
+	&call		(&label("key_128"));
+	&aeskeygenassist("xmm1","xmm0",0x40);		# round 7
+	&call		(&label("key_128"));
+	&aeskeygenassist("xmm1","xmm0",0x80);		# round 8
+	&call		(&label("key_128"));
+	&aeskeygenassist("xmm1","xmm0",0x1b);		# round 9
+	&call		(&label("key_128"));
+	&aeskeygenassist("xmm1","xmm0",0x36);		# round 10
+	&call		(&label("key_128"));
+	&$movekey	(&QWP(0,$key),"xmm0");
+	&mov		(&DWP(80,$key),$rounds);
+
+	&jmp	(&label("good_key"));
+
+&set_label("key_128",16);
+	&$movekey	(&QWP(0,$key),"xmm0");
+	&lea		($key,&DWP(16,$key));
+&set_label("key_128_cold");
+	&shufps		("xmm4","xmm0",0b00010000);
+	&xorps		("xmm0","xmm4");
+	&shufps		("xmm4","xmm0",0b10001100);
+	&xorps		("xmm0","xmm4");
+	&shufps		("xmm1","xmm1",0b11111111);	# critical path
+	&xorps		("xmm0","xmm1");
+	&ret();
+
+&set_label("10rounds_alt",16);
+	&movdqa		("xmm5",&QWP(0x00,"ebx"));
+	&mov		($rounds,8);
+	&movdqa		("xmm4",&QWP(0x20,"ebx"));
+	&movdqa		("xmm2","xmm0");
+	&movdqu		(&QWP(-16,$key),"xmm0");
+
+&set_label("loop_key128");
+	&pshufb		("xmm0","xmm5");
+	&aesenclast	("xmm0","xmm4");
+	&pslld		("xmm4",1);
+	&lea		($key,&DWP(16,$key));
+
+	&movdqa		("xmm3","xmm2");
+	&pslldq		("xmm2",4);
+	&pxor		("xmm3","xmm2");
+	&pslldq		("xmm2",4);
+	&pxor		("xmm3","xmm2");
+	&pslldq		("xmm2",4);
+	&pxor		("xmm2","xmm3");
+
+	&pxor		("xmm0","xmm2");
+	&movdqu		(&QWP(-16,$key),"xmm0");
+	&movdqa		("xmm2","xmm0");
+
+	&dec		($rounds);
+	&jnz		(&label("loop_key128"));
+
+	&movdqa		("xmm4",&QWP(0x30,"ebx"));
+
+	&pshufb		("xmm0","xmm5");
+	&aesenclast	("xmm0","xmm4");
+	&pslld		("xmm4",1);
+
+	&movdqa		("xmm3","xmm2");
+	&pslldq		("xmm2",4);
+	&pxor		("xmm3","xmm2");
+	&pslldq		("xmm2",4);
+	&pxor		("xmm3","xmm2");
+	&pslldq		("xmm2",4);
+	&pxor		("xmm2","xmm3");
+
+	&pxor		("xmm0","xmm2");
+	&movdqu		(&QWP(0,$key),"xmm0");
+
+	&movdqa		("xmm2","xmm0");
+	&pshufb		("xmm0","xmm5");
+	&aesenclast	("xmm0","xmm4");
+
+	&movdqa		("xmm3","xmm2");
+	&pslldq		("xmm2",4);
+	&pxor		("xmm3","xmm2");
+	&pslldq		("xmm2",4);
+	&pxor		("xmm3","xmm2");
+	&pslldq		("xmm2",4);
+	&pxor		("xmm2","xmm3");
+
+	&pxor		("xmm0","xmm2");
+	&movdqu		(&QWP(16,$key),"xmm0");
+
+	&mov		($rounds,9);
+	&mov		(&DWP(96,$key),$rounds);
+
+	&jmp	(&label("good_key"));
+
+&set_label("12rounds",16);
+	&movq		("xmm2",&QWP(16,"eax"));	# remaining 1/3 of *userKey
+	&cmp		("ebp",1<<28);
+	&je		(&label("12rounds_alt"));
+
+	&mov		($rounds,11);
+	&$movekey	(&QWP(-16,$key),"xmm0");	# round 0
+	&aeskeygenassist("xmm1","xmm2",0x01);		# round 1,2
+	&call		(&label("key_192a_cold"));
+	&aeskeygenassist("xmm1","xmm2",0x02);		# round 2,3
+	&call		(&label("key_192b"));
+	&aeskeygenassist("xmm1","xmm2",0x04);		# round 4,5
+	&call		(&label("key_192a"));
+	&aeskeygenassist("xmm1","xmm2",0x08);		# round 5,6
+	&call		(&label("key_192b"));
+	&aeskeygenassist("xmm1","xmm2",0x10);		# round 7,8
+	&call		(&label("key_192a"));
+	&aeskeygenassist("xmm1","xmm2",0x20);		# round 8,9
+	&call		(&label("key_192b"));
+	&aeskeygenassist("xmm1","xmm2",0x40);		# round 10,11
+	&call		(&label("key_192a"));
+	&aeskeygenassist("xmm1","xmm2",0x80);		# round 11,12
+	&call		(&label("key_192b"));
+	&$movekey	(&QWP(0,$key),"xmm0");
+	&mov		(&DWP(48,$key),$rounds);
+
+	&jmp	(&label("good_key"));
+
+&set_label("key_192a",16);
+	&$movekey	(&QWP(0,$key),"xmm0");
+	&lea		($key,&DWP(16,$key));
+&set_label("key_192a_cold",16);
+	&movaps		("xmm5","xmm2");
+&set_label("key_192b_warm");
+	&shufps		("xmm4","xmm0",0b00010000);
+	&movdqa		("xmm3","xmm2");
+	&xorps		("xmm0","xmm4");
+	&shufps		("xmm4","xmm0",0b10001100);
+	&pslldq		("xmm3",4);
+	&xorps		("xmm0","xmm4");
+	&pshufd		("xmm1","xmm1",0b01010101);	# critical path
+	&pxor		("xmm2","xmm3");
+	&pxor		("xmm0","xmm1");
+	&pshufd		("xmm3","xmm0",0b11111111);
+	&pxor		("xmm2","xmm3");
+	&ret();
+
+&set_label("key_192b",16);
+	&movaps		("xmm3","xmm0");
+	&shufps		("xmm5","xmm0",0b01000100);
+	&$movekey	(&QWP(0,$key),"xmm5");
+	&shufps		("xmm3","xmm2",0b01001110);
+	&$movekey	(&QWP(16,$key),"xmm3");
+	&lea		($key,&DWP(32,$key));
+	&jmp		(&label("key_192b_warm"));
+
+&set_label("12rounds_alt",16);
+	&movdqa		("xmm5",&QWP(0x10,"ebx"));
+	&movdqa		("xmm4",&QWP(0x20,"ebx"));
+	&mov		($rounds,8);
+	&movdqu		(&QWP(-16,$key),"xmm0");
+
+&set_label("loop_key192");
+	&movq		(&QWP(0,$key),"xmm2");
+	&movdqa		("xmm1","xmm2");
+	&pshufb		("xmm2","xmm5");
+	&aesenclast	("xmm2","xmm4");
+	&pslld		("xmm4",1);
+	&lea		($key,&DWP(24,$key));
+
+	&movdqa		("xmm3","xmm0");
+	&pslldq		("xmm0",4);
+	&pxor		("xmm3","xmm0");
+	&pslldq		("xmm0",4);
+	&pxor		("xmm3","xmm0");
+	&pslldq		("xmm0",4);
+	&pxor		("xmm0","xmm3");
+
+	&pshufd		("xmm3","xmm0",0xff);
+	&pxor		("xmm3","xmm1");
+	&pslldq		("xmm1",4);
+	&pxor		("xmm3","xmm1");
+
+	&pxor		("xmm0","xmm2");
+	&pxor		("xmm2","xmm3");
+	&movdqu		(&QWP(-16,$key),"xmm0");
+
+	&dec		($rounds);
+	&jnz		(&label("loop_key192"));
+
+	&mov	($rounds,11);
+	&mov	(&DWP(32,$key),$rounds);
+
+	&jmp	(&label("good_key"));
+
+&set_label("14rounds",16);
+	&movups		("xmm2",&QWP(16,"eax"));	# remaining half of *userKey
+	&lea		($key,&DWP(16,$key));
+	&cmp		("ebp",1<<28);
+	&je		(&label("14rounds_alt"));
+
+	&mov		($rounds,13);
+	&$movekey	(&QWP(-32,$key),"xmm0");	# round 0
+	&$movekey	(&QWP(-16,$key),"xmm2");	# round 1
+	&aeskeygenassist("xmm1","xmm2",0x01);		# round 2
+	&call		(&label("key_256a_cold"));
+	&aeskeygenassist("xmm1","xmm0",0x01);		# round 3
+	&call		(&label("key_256b"));
+	&aeskeygenassist("xmm1","xmm2",0x02);		# round 4
+	&call		(&label("key_256a"));
+	&aeskeygenassist("xmm1","xmm0",0x02);		# round 5
+	&call		(&label("key_256b"));
+	&aeskeygenassist("xmm1","xmm2",0x04);		# round 6
+	&call		(&label("key_256a"));
+	&aeskeygenassist("xmm1","xmm0",0x04);		# round 7
+	&call		(&label("key_256b"));
+	&aeskeygenassist("xmm1","xmm2",0x08);		# round 8
+	&call		(&label("key_256a"));
+	&aeskeygenassist("xmm1","xmm0",0x08);		# round 9
+	&call		(&label("key_256b"));
+	&aeskeygenassist("xmm1","xmm2",0x10);		# round 10
+	&call		(&label("key_256a"));
+	&aeskeygenassist("xmm1","xmm0",0x10);		# round 11
+	&call		(&label("key_256b"));
+	&aeskeygenassist("xmm1","xmm2",0x20);		# round 12
+	&call		(&label("key_256a"));
+	&aeskeygenassist("xmm1","xmm0",0x20);		# round 13
+	&call		(&label("key_256b"));
+	&aeskeygenassist("xmm1","xmm2",0x40);		# round 14
+	&call		(&label("key_256a"));
+	&$movekey	(&QWP(0,$key),"xmm0");
+	&mov		(&DWP(16,$key),$rounds);
+	&xor		("eax","eax");
+
+	&jmp	(&label("good_key"));
+
+&set_label("key_256a",16);
+	&$movekey	(&QWP(0,$key),"xmm2");
+	&lea		($key,&DWP(16,$key));
+&set_label("key_256a_cold");
+	&shufps		("xmm4","xmm0",0b00010000);
+	&xorps		("xmm0","xmm4");
+	&shufps		("xmm4","xmm0",0b10001100);
+	&xorps		("xmm0","xmm4");
+	&shufps		("xmm1","xmm1",0b11111111);	# critical path
+	&xorps		("xmm0","xmm1");
+	&ret();
+
+&set_label("key_256b",16);
+	&$movekey	(&QWP(0,$key),"xmm0");
+	&lea		($key,&DWP(16,$key));
+
+	&shufps		("xmm4","xmm2",0b00010000);
+	&xorps		("xmm2","xmm4");
+	&shufps		("xmm4","xmm2",0b10001100);
+	&xorps		("xmm2","xmm4");
+	&shufps		("xmm1","xmm1",0b10101010);	# critical path
+	&xorps		("xmm2","xmm1");
+	&ret();
+
+&set_label("14rounds_alt",16);
+	&movdqa		("xmm5",&QWP(0x00,"ebx"));
+	&movdqa		("xmm4",&QWP(0x20,"ebx"));
+	&mov		($rounds,7);
+	&movdqu		(&QWP(-32,$key),"xmm0");
+	&movdqa		("xmm1","xmm2");
+	&movdqu		(&QWP(-16,$key),"xmm2");
+
+&set_label("loop_key256");
+	&pshufb		("xmm2","xmm5");
+	&aesenclast	("xmm2","xmm4");
+
+	&movdqa		("xmm3","xmm0");
+	&pslldq		("xmm0",4);
+	&pxor		("xmm3","xmm0");
+	&pslldq		("xmm0",4);
+	&pxor		("xmm3","xmm0");
+	&pslldq		("xmm0",4);
+	&pxor		("xmm0","xmm3");
+	&pslld		("xmm4",1);
+
+	&pxor		("xmm0","xmm2");
+	&movdqu		(&QWP(0,$key),"xmm0");
+
+	&dec		($rounds);
+	&jz		(&label("done_key256"));
+
+	&pshufd		("xmm2","xmm0",0xff);
+	&pxor		("xmm3","xmm3");
+	&aesenclast	("xmm2","xmm3");
+
+	&movdqa		("xmm3","xmm1");
+	&pslldq		("xmm1",4);
+	&pxor		("xmm3","xmm1");
+	&pslldq		("xmm1",4);
+	&pxor		("xmm3","xmm1");
+	&pslldq		("xmm1",4);
+	&pxor		("xmm1","xmm3");
+
+	&pxor		("xmm2","xmm1");
+	&movdqu		(&QWP(16,$key),"xmm2");
+	&lea		($key,&DWP(32,$key));
+	&movdqa		("xmm1","xmm2");
+	&jmp		(&label("loop_key256"));
+
+&set_label("done_key256");
+	&mov		($rounds,13);
+	&mov		(&DWP(16,$key),$rounds);
+
+&set_label("good_key");
+	&pxor	("xmm0","xmm0");
+	&pxor	("xmm1","xmm1");
+	&pxor	("xmm2","xmm2");
+	&pxor	("xmm3","xmm3");
+	&pxor	("xmm4","xmm4");
+	&pxor	("xmm5","xmm5");
+	&xor	("eax","eax");
+	&pop	("ebx");
+	&pop	("ebp");
+	&ret	();
+
+&set_label("bad_pointer",4);
+	&mov	("eax",-1);
+	&pop	("ebx");
+	&pop	("ebp");
+	&ret	();
+&set_label("bad_keybits",4);
+	&pxor	("xmm0","xmm0");
+	&mov	("eax",-2);
+	&pop	("ebx");
+	&pop	("ebp");
+	&ret	();
+&function_end_B("_aesni_set_encrypt_key");
+
+# int $PREFIX_set_encrypt_key (const unsigned char *userKey, int bits,
+#                              AES_KEY *key)
+&function_begin_B("${PREFIX}_set_encrypt_key");
+	&mov	("eax",&wparam(0));
+	&mov	($rounds,&wparam(1));
+	&mov	($key,&wparam(2));
+	&call	("_aesni_set_encrypt_key");
+	&ret	();
+&function_end_B("${PREFIX}_set_encrypt_key");
+
+# int $PREFIX_set_decrypt_key (const unsigned char *userKey, int bits,
+#                              AES_KEY *key)
+&function_begin_B("${PREFIX}_set_decrypt_key");
+	&mov	("eax",&wparam(0));
+	&mov	($rounds,&wparam(1));
+	&mov	($key,&wparam(2));
+	&call	("_aesni_set_encrypt_key");
+	&mov	($key,&wparam(2));
+	&shl	($rounds,4);	# rounds-1 after _aesni_set_encrypt_key
+	&test	("eax","eax");
+	&jnz	(&label("dec_key_ret"));
+	&lea	("eax",&DWP(16,$key,$rounds));	# end of key schedule
+
+	&$movekey	("xmm0",&QWP(0,$key));	# just swap
+	&$movekey	("xmm1",&QWP(0,"eax"));
+	&$movekey	(&QWP(0,"eax"),"xmm0");
+	&$movekey	(&QWP(0,$key),"xmm1");
+	&lea		($key,&DWP(16,$key));
+	&lea		("eax",&DWP(-16,"eax"));
+
+&set_label("dec_key_inverse");
+	&$movekey	("xmm0",&QWP(0,$key));	# swap and inverse
+	&$movekey	("xmm1",&QWP(0,"eax"));
+	&aesimc		("xmm0","xmm0");
+	&aesimc		("xmm1","xmm1");
+	&lea		($key,&DWP(16,$key));
+	&lea		("eax",&DWP(-16,"eax"));
+	&$movekey	(&QWP(16,"eax"),"xmm0");
+	&$movekey	(&QWP(-16,$key),"xmm1");
+	&cmp		("eax",$key);
+	&ja		(&label("dec_key_inverse"));
+
+	&$movekey	("xmm0",&QWP(0,$key));	# inverse middle
+	&aesimc		("xmm0","xmm0");
+	&$movekey	(&QWP(0,$key),"xmm0");
+
+	&pxor		("xmm0","xmm0");
+	&pxor		("xmm1","xmm1");
+	&xor		("eax","eax");		# return success
+&set_label("dec_key_ret");
+	&ret	();
+&function_end_B("${PREFIX}_set_decrypt_key");
+
+&set_label("key_const",64);
+&data_word(0x0c0f0e0d,0x0c0f0e0d,0x0c0f0e0d,0x0c0f0e0d);
+&data_word(0x04070605,0x04070605,0x04070605,0x04070605);
+&data_word(1,1,1,1);
+&data_word(0x1b,0x1b,0x1b,0x1b);
+&asciz("AES for Intel AES-NI, CRYPTOGAMS by <appro\@openssl.org>");
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-x86_64.pl
new file mode 100644
index 000000000..b68c14da6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesni-x86_64.pl
@@ -0,0 +1,5141 @@
+#! /usr/bin/env perl
+# Copyright 2009-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# This module implements support for Intel AES-NI extension. In
+# OpenSSL context it's used with Intel engine, but can also be used as
+# drop-in replacement for crypto/aes/asm/aes-x86_64.pl [see below for
+# details].
+#
+# Performance.
+#
+# Given aes(enc|dec) instructions' latency asymptotic performance for
+# non-parallelizable modes such as CBC encrypt is 3.75 cycles per byte
+# processed with 128-bit key. And given their throughput asymptotic
+# performance for parallelizable modes is 1.25 cycles per byte. Being
+# asymptotic limit it's not something you commonly achieve in reality,
+# but how close does one get? Below are results collected for
+# different modes and block sized. Pairs of numbers are for en-/
+# decryption.
+#
+#	16-byte     64-byte     256-byte    1-KB        8-KB
+# ECB	4.25/4.25   1.38/1.38   1.28/1.28   1.26/1.26	1.26/1.26
+# CTR	5.42/5.42   1.92/1.92   1.44/1.44   1.28/1.28   1.26/1.26
+# CBC	4.38/4.43   4.15/1.43   4.07/1.32   4.07/1.29   4.06/1.28
+# CCM	5.66/9.42   4.42/5.41   4.16/4.40   4.09/4.15   4.06/4.07
+# OFB	5.42/5.42   4.64/4.64   4.44/4.44   4.39/4.39   4.38/4.38
+# CFB	5.73/5.85   5.56/5.62   5.48/5.56   5.47/5.55   5.47/5.55
+#
+# ECB, CTR, CBC and CCM results are free from EVP overhead. This means
+# that otherwise used 'openssl speed -evp aes-128-??? -engine aesni
+# [-decrypt]' will exhibit 10-15% worse results for smaller blocks.
+# The results were collected with specially crafted speed.c benchmark
+# in order to compare them with results reported in "Intel Advanced
+# Encryption Standard (AES) New Instruction Set" White Paper Revision
+# 3.0 dated May 2010. All above results are consistently better. This
+# module also provides better performance for block sizes smaller than
+# 128 bytes in points *not* represented in the above table.
+#
+# Looking at the results for 8-KB buffer.
+#
+# CFB and OFB results are far from the limit, because implementation
+# uses "generic" CRYPTO_[c|o]fb128_encrypt interfaces relying on
+# single-block aesni_encrypt, which is not the most optimal way to go.
+# CBC encrypt result is unexpectedly high and there is no documented
+# explanation for it. Seemingly there is a small penalty for feeding
+# the result back to AES unit the way it's done in CBC mode. There is
+# nothing one can do and the result appears optimal. CCM result is
+# identical to CBC, because CBC-MAC is essentially CBC encrypt without
+# saving output. CCM CTR "stays invisible," because it's neatly
+# interleaved wih CBC-MAC. This provides ~30% improvement over
+# "straightforward" CCM implementation with CTR and CBC-MAC performed
+# disjointly. Parallelizable modes practically achieve the theoretical
+# limit.
+#
+# Looking at how results vary with buffer size.
+#
+# Curves are practically saturated at 1-KB buffer size. In most cases
+# "256-byte" performance is >95%, and "64-byte" is ~90% of "8-KB" one.
+# CTR curve doesn't follow this pattern and is "slowest" changing one
+# with "256-byte" result being 87% of "8-KB." This is because overhead
+# in CTR mode is most computationally intensive. Small-block CCM
+# decrypt is slower than encrypt, because first CTR and last CBC-MAC
+# iterations can't be interleaved.
+#
+# Results for 192- and 256-bit keys.
+#
+# EVP-free results were observed to scale perfectly with number of
+# rounds for larger block sizes, i.e. 192-bit result being 10/12 times
+# lower and 256-bit one - 10/14. Well, in CBC encrypt case differences
+# are a tad smaller, because the above mentioned penalty biases all
+# results by same constant value. In similar way function call
+# overhead affects small-block performance, as well as OFB and CFB
+# results. Differences are not large, most common coefficients are
+# 10/11.7 and 10/13.4 (as opposite to 10/12.0 and 10/14.0), but one
+# observe even 10/11.2 and 10/12.4 (CTR, OFB, CFB)...
+
+# January 2011
+#
+# While Westmere processor features 6 cycles latency for aes[enc|dec]
+# instructions, which can be scheduled every second cycle, Sandy
+# Bridge spends 8 cycles per instruction, but it can schedule them
+# every cycle. This means that code targeting Westmere would perform
+# suboptimally on Sandy Bridge. Therefore this update.
+#
+# In addition, non-parallelizable CBC encrypt (as well as CCM) is
+# optimized. Relative improvement might appear modest, 8% on Westmere,
+# but in absolute terms it's 3.77 cycles per byte encrypted with
+# 128-bit key on Westmere, and 5.07 - on Sandy Bridge. These numbers
+# should be compared to asymptotic limits of 3.75 for Westmere and
+# 5.00 for Sandy Bridge. Actually, the fact that they get this close
+# to asymptotic limits is quite amazing. Indeed, the limit is
+# calculated as latency times number of rounds, 10 for 128-bit key,
+# and divided by 16, the number of bytes in block, or in other words
+# it accounts *solely* for aesenc instructions. But there are extra
+# instructions, and numbers so close to the asymptotic limits mean
+# that it's as if it takes as little as *one* additional cycle to
+# execute all of them. How is it possible? It is possible thanks to
+# out-of-order execution logic, which manages to overlap post-
+# processing of previous block, things like saving the output, with
+# actual encryption of current block, as well as pre-processing of
+# current block, things like fetching input and xor-ing it with
+# 0-round element of the key schedule, with actual encryption of
+# previous block. Keep this in mind...
+#
+# For parallelizable modes, such as ECB, CBC decrypt, CTR, higher
+# performance is achieved by interleaving instructions working on
+# independent blocks. In which case asymptotic limit for such modes
+# can be obtained by dividing above mentioned numbers by AES
+# instructions' interleave factor. Westmere can execute at most 3
+# instructions at a time, meaning that optimal interleave factor is 3,
+# and that's where the "magic" number of 1.25 come from. "Optimal
+# interleave factor" means that increase of interleave factor does
+# not improve performance. The formula has proven to reflect reality
+# pretty well on Westmere... Sandy Bridge on the other hand can
+# execute up to 8 AES instructions at a time, so how does varying
+# interleave factor affect the performance? Here is table for ECB
+# (numbers are cycles per byte processed with 128-bit key):
+#
+# instruction interleave factor		3x	6x	8x
+# theoretical asymptotic limit		1.67	0.83	0.625
+# measured performance for 8KB block	1.05	0.86	0.84
+#
+# "as if" interleave factor		4.7x	5.8x	6.0x
+#
+# Further data for other parallelizable modes:
+#
+# CBC decrypt				1.16	0.93	0.74
+# CTR					1.14	0.91	0.74
+#
+# Well, given 3x column it's probably inappropriate to call the limit
+# asymptotic, if it can be surpassed, isn't it? What happens there?
+# Rewind to CBC paragraph for the answer. Yes, out-of-order execution
+# magic is responsible for this. Processor overlaps not only the
+# additional instructions with AES ones, but even AES instructions
+# processing adjacent triplets of independent blocks. In the 6x case
+# additional instructions  still claim disproportionally small amount
+# of additional cycles, but in 8x case number of instructions must be
+# a tad too high for out-of-order logic to cope with, and AES unit
+# remains underutilized... As you can see 8x interleave is hardly
+# justifiable, so there no need to feel bad that 32-bit aesni-x86.pl
+# utilizes 6x interleave because of limited register bank capacity.
+#
+# Higher interleave factors do have negative impact on Westmere
+# performance. While for ECB mode it's negligible ~1.5%, other
+# parallelizables perform ~5% worse, which is outweighed by ~25%
+# improvement on Sandy Bridge. To balance regression on Westmere
+# CTR mode was implemented with 6x aesenc interleave factor.
+
+# April 2011
+#
+# Add aesni_xts_[en|de]crypt. Westmere spends 1.25 cycles processing
+# one byte out of 8KB with 128-bit key, Sandy Bridge - 0.90. Just like
+# in CTR mode AES instruction interleave factor was chosen to be 6x.
+
+# November 2015
+#
+# Add aesni_ocb_[en|de]crypt. AES instruction interleave factor was
+# chosen to be 6x.
+
+######################################################################
+# Current large-block performance in cycles per byte processed with
+# 128-bit key (less is better).
+#
+#		CBC en-/decrypt	CTR	XTS	ECB	OCB
+# Westmere	3.77/1.25	1.25	1.25	1.26
+# * Bridge	5.07/0.74	0.75	0.90	0.85	0.98
+# Haswell	4.44/0.63	0.63	0.73	0.63	0.70
+# Skylake	2.62/0.63	0.63	0.63	0.63
+# Silvermont	5.75/3.54	3.56	4.12	3.87(*)	4.11
+# Knights L	2.54/0.77	0.78	0.85	-	1.50
+# Goldmont	3.82/1.26	1.26	1.29	1.29	1.50
+# Bulldozer	5.77/0.70	0.72	0.90	0.70	0.95
+# Ryzen		2.71/0.35	0.35	0.44	0.38	0.49
+#
+# (*)	Atom Silvermont ECB result is suboptimal because of penalties
+#	incurred by operations on %xmm8-15. As ECB is not considered
+#	critical, nothing was done to mitigate the problem.
+
+$PREFIX="aesni";	# if $PREFIX is set to "AES", the script
+			# generates drop-in replacement for
+			# crypto/aes/asm/aes-x86_64.pl:-)
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+$movkey = $PREFIX eq "aesni" ? "movups" : "movups";
+@_4args=$win64?	("%rcx","%rdx","%r8", "%r9") :	# Win64 order
+		("%rdi","%rsi","%rdx","%rcx");	# Unix order
+
+$code=".text\n";
+$code.=".extern	OPENSSL_ia32cap_P\n";
+
+$rounds="%eax";	# input to and changed by aesni_[en|de]cryptN !!!
+# this is natural Unix argument order for public $PREFIX_[ecb|cbc]_encrypt ...
+$inp="%rdi";
+$out="%rsi";
+$len="%rdx";
+$key="%rcx";	# input to and changed by aesni_[en|de]cryptN !!!
+$ivp="%r8";	# cbc, ctr, ...
+
+$rnds_="%r10d";	# backup copy for $rounds
+$key_="%r11";	# backup copy for $key
+
+# %xmm register layout
+$rndkey0="%xmm0";	$rndkey1="%xmm1";
+$inout0="%xmm2";	$inout1="%xmm3";
+$inout2="%xmm4";	$inout3="%xmm5";
+$inout4="%xmm6";	$inout5="%xmm7";
+$inout6="%xmm8";	$inout7="%xmm9";
+
+$in2="%xmm6";		$in1="%xmm7";	# used in CBC decrypt, CTR, ...
+$in0="%xmm8";		$iv="%xmm9";
+
+# Inline version of internal aesni_[en|de]crypt1.
+#
+# Why folded loop? Because aes[enc|dec] is slow enough to accommodate
+# cycles which take care of loop variables...
+{ my $sn;
+sub aesni_generate1 {
+my ($p,$key,$rounds,$inout,$ivec)=@_;	$inout=$inout0 if (!defined($inout));
+++$sn;
+$code.=<<___;
+	$movkey	($key),$rndkey0
+	$movkey	16($key),$rndkey1
+___
+$code.=<<___ if (defined($ivec));
+	xorps	$rndkey0,$ivec
+	lea	32($key),$key
+	xorps	$ivec,$inout
+___
+$code.=<<___ if (!defined($ivec));
+	lea	32($key),$key
+	xorps	$rndkey0,$inout
+___
+$code.=<<___;
+.Loop_${p}1_$sn:
+	aes${p}	$rndkey1,$inout
+	dec	$rounds
+	$movkey	($key),$rndkey1
+	lea	16($key),$key
+	jnz	.Loop_${p}1_$sn	# loop body is 16 bytes
+	aes${p}last	$rndkey1,$inout
+___
+}}
+# void $PREFIX_[en|de]crypt (const void *inp,void *out,const AES_KEY *key);
+#
+{ my ($inp,$out,$key) = @_4args;
+
+$code.=<<___;
+.globl	${PREFIX}_encrypt
+.type	${PREFIX}_encrypt,\@abi-omnipotent
+.align	16
+${PREFIX}_encrypt:
+.cfi_startproc
+	movups	($inp),$inout0		# load input
+	mov	240($key),$rounds	# key->rounds
+___
+	&aesni_generate1("enc",$key,$rounds);
+$code.=<<___;
+	 pxor	$rndkey0,$rndkey0	# clear register bank
+	 pxor	$rndkey1,$rndkey1
+	movups	$inout0,($out)		# output
+	 pxor	$inout0,$inout0
+	ret
+.cfi_endproc
+.size	${PREFIX}_encrypt,.-${PREFIX}_encrypt
+
+.globl	${PREFIX}_decrypt
+.type	${PREFIX}_decrypt,\@abi-omnipotent
+.align	16
+${PREFIX}_decrypt:
+.cfi_startproc
+	movups	($inp),$inout0		# load input
+	mov	240($key),$rounds	# key->rounds
+___
+	&aesni_generate1("dec",$key,$rounds);
+$code.=<<___;
+	 pxor	$rndkey0,$rndkey0	# clear register bank
+	 pxor	$rndkey1,$rndkey1
+	movups	$inout0,($out)		# output
+	 pxor	$inout0,$inout0
+	ret
+.cfi_endproc
+.size	${PREFIX}_decrypt, .-${PREFIX}_decrypt
+___
+}
+
+# _aesni_[en|de]cryptN are private interfaces, N denotes interleave
+# factor. Why 3x subroutine were originally used in loops? Even though
+# aes[enc|dec] latency was originally 6, it could be scheduled only
+# every *2nd* cycle. Thus 3x interleave was the one providing optimal
+# utilization, i.e. when subroutine's throughput is virtually same as
+# of non-interleaved subroutine [for number of input blocks up to 3].
+# This is why it originally made no sense to implement 2x subroutine.
+# But times change and it became appropriate to spend extra 192 bytes
+# on 2x subroutine on Atom Silvermont account. For processors that
+# can schedule aes[enc|dec] every cycle optimal interleave factor
+# equals to corresponding instructions latency. 8x is optimal for
+# * Bridge and "super-optimal" for other Intel CPUs...
+
+sub aesni_generate2 {
+my $dir=shift;
+# As already mentioned it takes in $key and $rounds, which are *not*
+# preserved. $inout[0-1] is cipher/clear text...
+$code.=<<___;
+.type	_aesni_${dir}rypt2,\@abi-omnipotent
+.align	16
+_aesni_${dir}rypt2:
+.cfi_startproc
+	$movkey	($key),$rndkey0
+	shl	\$4,$rounds
+	$movkey	16($key),$rndkey1
+	xorps	$rndkey0,$inout0
+	xorps	$rndkey0,$inout1
+	$movkey	32($key),$rndkey0
+	lea	32($key,$rounds),$key
+	neg	%rax				# $rounds
+	add	\$16,%rax
+
+.L${dir}_loop2:
+	aes${dir}	$rndkey1,$inout0
+	aes${dir}	$rndkey1,$inout1
+	$movkey		($key,%rax),$rndkey1
+	add		\$32,%rax
+	aes${dir}	$rndkey0,$inout0
+	aes${dir}	$rndkey0,$inout1
+	$movkey		-16($key,%rax),$rndkey0
+	jnz		.L${dir}_loop2
+
+	aes${dir}	$rndkey1,$inout0
+	aes${dir}	$rndkey1,$inout1
+	aes${dir}last	$rndkey0,$inout0
+	aes${dir}last	$rndkey0,$inout1
+	ret
+.cfi_endproc
+.size	_aesni_${dir}rypt2,.-_aesni_${dir}rypt2
+___
+}
+sub aesni_generate3 {
+my $dir=shift;
+# As already mentioned it takes in $key and $rounds, which are *not*
+# preserved. $inout[0-2] is cipher/clear text...
+$code.=<<___;
+.type	_aesni_${dir}rypt3,\@abi-omnipotent
+.align	16
+_aesni_${dir}rypt3:
+.cfi_startproc
+	$movkey	($key),$rndkey0
+	shl	\$4,$rounds
+	$movkey	16($key),$rndkey1
+	xorps	$rndkey0,$inout0
+	xorps	$rndkey0,$inout1
+	xorps	$rndkey0,$inout2
+	$movkey	32($key),$rndkey0
+	lea	32($key,$rounds),$key
+	neg	%rax				# $rounds
+	add	\$16,%rax
+
+.L${dir}_loop3:
+	aes${dir}	$rndkey1,$inout0
+	aes${dir}	$rndkey1,$inout1
+	aes${dir}	$rndkey1,$inout2
+	$movkey		($key,%rax),$rndkey1
+	add		\$32,%rax
+	aes${dir}	$rndkey0,$inout0
+	aes${dir}	$rndkey0,$inout1
+	aes${dir}	$rndkey0,$inout2
+	$movkey		-16($key,%rax),$rndkey0
+	jnz		.L${dir}_loop3
+
+	aes${dir}	$rndkey1,$inout0
+	aes${dir}	$rndkey1,$inout1
+	aes${dir}	$rndkey1,$inout2
+	aes${dir}last	$rndkey0,$inout0
+	aes${dir}last	$rndkey0,$inout1
+	aes${dir}last	$rndkey0,$inout2
+	ret
+.cfi_endproc
+.size	_aesni_${dir}rypt3,.-_aesni_${dir}rypt3
+___
+}
+# 4x interleave is implemented to improve small block performance,
+# most notably [and naturally] 4 block by ~30%. One can argue that one
+# should have implemented 5x as well, but improvement would be <20%,
+# so it's not worth it...
+sub aesni_generate4 {
+my $dir=shift;
+# As already mentioned it takes in $key and $rounds, which are *not*
+# preserved. $inout[0-3] is cipher/clear text...
+$code.=<<___;
+.type	_aesni_${dir}rypt4,\@abi-omnipotent
+.align	16
+_aesni_${dir}rypt4:
+.cfi_startproc
+	$movkey	($key),$rndkey0
+	shl	\$4,$rounds
+	$movkey	16($key),$rndkey1
+	xorps	$rndkey0,$inout0
+	xorps	$rndkey0,$inout1
+	xorps	$rndkey0,$inout2
+	xorps	$rndkey0,$inout3
+	$movkey	32($key),$rndkey0
+	lea	32($key,$rounds),$key
+	neg	%rax				# $rounds
+	.byte	0x0f,0x1f,0x00
+	add	\$16,%rax
+
+.L${dir}_loop4:
+	aes${dir}	$rndkey1,$inout0
+	aes${dir}	$rndkey1,$inout1
+	aes${dir}	$rndkey1,$inout2
+	aes${dir}	$rndkey1,$inout3
+	$movkey		($key,%rax),$rndkey1
+	add		\$32,%rax
+	aes${dir}	$rndkey0,$inout0
+	aes${dir}	$rndkey0,$inout1
+	aes${dir}	$rndkey0,$inout2
+	aes${dir}	$rndkey0,$inout3
+	$movkey		-16($key,%rax),$rndkey0
+	jnz		.L${dir}_loop4
+
+	aes${dir}	$rndkey1,$inout0
+	aes${dir}	$rndkey1,$inout1
+	aes${dir}	$rndkey1,$inout2
+	aes${dir}	$rndkey1,$inout3
+	aes${dir}last	$rndkey0,$inout0
+	aes${dir}last	$rndkey0,$inout1
+	aes${dir}last	$rndkey0,$inout2
+	aes${dir}last	$rndkey0,$inout3
+	ret
+.cfi_endproc
+.size	_aesni_${dir}rypt4,.-_aesni_${dir}rypt4
+___
+}
+sub aesni_generate6 {
+my $dir=shift;
+# As already mentioned it takes in $key and $rounds, which are *not*
+# preserved. $inout[0-5] is cipher/clear text...
+$code.=<<___;
+.type	_aesni_${dir}rypt6,\@abi-omnipotent
+.align	16
+_aesni_${dir}rypt6:
+.cfi_startproc
+	$movkey		($key),$rndkey0
+	shl		\$4,$rounds
+	$movkey		16($key),$rndkey1
+	xorps		$rndkey0,$inout0
+	pxor		$rndkey0,$inout1
+	pxor		$rndkey0,$inout2
+	aes${dir}	$rndkey1,$inout0
+	lea		32($key,$rounds),$key
+	neg		%rax			# $rounds
+	aes${dir}	$rndkey1,$inout1
+	pxor		$rndkey0,$inout3
+	pxor		$rndkey0,$inout4
+	aes${dir}	$rndkey1,$inout2
+	pxor		$rndkey0,$inout5
+	$movkey		($key,%rax),$rndkey0
+	add		\$16,%rax
+	jmp		.L${dir}_loop6_enter
+.align	16
+.L${dir}_loop6:
+	aes${dir}	$rndkey1,$inout0
+	aes${dir}	$rndkey1,$inout1
+	aes${dir}	$rndkey1,$inout2
+.L${dir}_loop6_enter:
+	aes${dir}	$rndkey1,$inout3
+	aes${dir}	$rndkey1,$inout4
+	aes${dir}	$rndkey1,$inout5
+	$movkey		($key,%rax),$rndkey1
+	add		\$32,%rax
+	aes${dir}	$rndkey0,$inout0
+	aes${dir}	$rndkey0,$inout1
+	aes${dir}	$rndkey0,$inout2
+	aes${dir}	$rndkey0,$inout3
+	aes${dir}	$rndkey0,$inout4
+	aes${dir}	$rndkey0,$inout5
+	$movkey		-16($key,%rax),$rndkey0
+	jnz		.L${dir}_loop6
+
+	aes${dir}	$rndkey1,$inout0
+	aes${dir}	$rndkey1,$inout1
+	aes${dir}	$rndkey1,$inout2
+	aes${dir}	$rndkey1,$inout3
+	aes${dir}	$rndkey1,$inout4
+	aes${dir}	$rndkey1,$inout5
+	aes${dir}last	$rndkey0,$inout0
+	aes${dir}last	$rndkey0,$inout1
+	aes${dir}last	$rndkey0,$inout2
+	aes${dir}last	$rndkey0,$inout3
+	aes${dir}last	$rndkey0,$inout4
+	aes${dir}last	$rndkey0,$inout5
+	ret
+.cfi_endproc
+.size	_aesni_${dir}rypt6,.-_aesni_${dir}rypt6
+___
+}
+sub aesni_generate8 {
+my $dir=shift;
+# As already mentioned it takes in $key and $rounds, which are *not*
+# preserved. $inout[0-7] is cipher/clear text...
+$code.=<<___;
+.type	_aesni_${dir}rypt8,\@abi-omnipotent
+.align	16
+_aesni_${dir}rypt8:
+.cfi_startproc
+	$movkey		($key),$rndkey0
+	shl		\$4,$rounds
+	$movkey		16($key),$rndkey1
+	xorps		$rndkey0,$inout0
+	xorps		$rndkey0,$inout1
+	pxor		$rndkey0,$inout2
+	pxor		$rndkey0,$inout3
+	pxor		$rndkey0,$inout4
+	lea		32($key,$rounds),$key
+	neg		%rax			# $rounds
+	aes${dir}	$rndkey1,$inout0
+	pxor		$rndkey0,$inout5
+	pxor		$rndkey0,$inout6
+	aes${dir}	$rndkey1,$inout1
+	pxor		$rndkey0,$inout7
+	$movkey		($key,%rax),$rndkey0
+	add		\$16,%rax
+	jmp		.L${dir}_loop8_inner
+.align	16
+.L${dir}_loop8:
+	aes${dir}	$rndkey1,$inout0
+	aes${dir}	$rndkey1,$inout1
+.L${dir}_loop8_inner:
+	aes${dir}	$rndkey1,$inout2
+	aes${dir}	$rndkey1,$inout3
+	aes${dir}	$rndkey1,$inout4
+	aes${dir}	$rndkey1,$inout5
+	aes${dir}	$rndkey1,$inout6
+	aes${dir}	$rndkey1,$inout7
+.L${dir}_loop8_enter:
+	$movkey		($key,%rax),$rndkey1
+	add		\$32,%rax
+	aes${dir}	$rndkey0,$inout0
+	aes${dir}	$rndkey0,$inout1
+	aes${dir}	$rndkey0,$inout2
+	aes${dir}	$rndkey0,$inout3
+	aes${dir}	$rndkey0,$inout4
+	aes${dir}	$rndkey0,$inout5
+	aes${dir}	$rndkey0,$inout6
+	aes${dir}	$rndkey0,$inout7
+	$movkey		-16($key,%rax),$rndkey0
+	jnz		.L${dir}_loop8
+
+	aes${dir}	$rndkey1,$inout0
+	aes${dir}	$rndkey1,$inout1
+	aes${dir}	$rndkey1,$inout2
+	aes${dir}	$rndkey1,$inout3
+	aes${dir}	$rndkey1,$inout4
+	aes${dir}	$rndkey1,$inout5
+	aes${dir}	$rndkey1,$inout6
+	aes${dir}	$rndkey1,$inout7
+	aes${dir}last	$rndkey0,$inout0
+	aes${dir}last	$rndkey0,$inout1
+	aes${dir}last	$rndkey0,$inout2
+	aes${dir}last	$rndkey0,$inout3
+	aes${dir}last	$rndkey0,$inout4
+	aes${dir}last	$rndkey0,$inout5
+	aes${dir}last	$rndkey0,$inout6
+	aes${dir}last	$rndkey0,$inout7
+	ret
+.cfi_endproc
+.size	_aesni_${dir}rypt8,.-_aesni_${dir}rypt8
+___
+}
+&aesni_generate2("enc") if ($PREFIX eq "aesni");
+&aesni_generate2("dec");
+&aesni_generate3("enc") if ($PREFIX eq "aesni");
+&aesni_generate3("dec");
+&aesni_generate4("enc") if ($PREFIX eq "aesni");
+&aesni_generate4("dec");
+&aesni_generate6("enc") if ($PREFIX eq "aesni");
+&aesni_generate6("dec");
+&aesni_generate8("enc") if ($PREFIX eq "aesni");
+&aesni_generate8("dec");
+
+if ($PREFIX eq "aesni") {
+########################################################################
+# void aesni_ecb_encrypt (const void *in, void *out,
+#			  size_t length, const AES_KEY *key,
+#			  int enc);
+$code.=<<___;
+.globl	aesni_ecb_encrypt
+.type	aesni_ecb_encrypt,\@function,5
+.align	16
+aesni_ecb_encrypt:
+.cfi_startproc
+___
+$code.=<<___ if ($win64);
+	lea	-0x58(%rsp),%rsp
+	movaps	%xmm6,(%rsp)		# offload $inout4..7
+	movaps	%xmm7,0x10(%rsp)
+	movaps	%xmm8,0x20(%rsp)
+	movaps	%xmm9,0x30(%rsp)
+.Lecb_enc_body:
+___
+$code.=<<___;
+	and	\$-16,$len		# if ($len<16)
+	jz	.Lecb_ret		# return
+
+	mov	240($key),$rounds	# key->rounds
+	$movkey	($key),$rndkey0
+	mov	$key,$key_		# backup $key
+	mov	$rounds,$rnds_		# backup $rounds
+	test	%r8d,%r8d		# 5th argument
+	jz	.Lecb_decrypt
+#--------------------------- ECB ENCRYPT ------------------------------#
+	cmp	\$0x80,$len		# if ($len<8*16)
+	jb	.Lecb_enc_tail		# short input
+
+	movdqu	($inp),$inout0		# load 8 input blocks
+	movdqu	0x10($inp),$inout1
+	movdqu	0x20($inp),$inout2
+	movdqu	0x30($inp),$inout3
+	movdqu	0x40($inp),$inout4
+	movdqu	0x50($inp),$inout5
+	movdqu	0x60($inp),$inout6
+	movdqu	0x70($inp),$inout7
+	lea	0x80($inp),$inp		# $inp+=8*16
+	sub	\$0x80,$len		# $len-=8*16 (can be zero)
+	jmp	.Lecb_enc_loop8_enter
+.align 16
+.Lecb_enc_loop8:
+	movups	$inout0,($out)		# store 8 output blocks
+	mov	$key_,$key		# restore $key
+	movdqu	($inp),$inout0		# load 8 input blocks
+	mov	$rnds_,$rounds		# restore $rounds
+	movups	$inout1,0x10($out)
+	movdqu	0x10($inp),$inout1
+	movups	$inout2,0x20($out)
+	movdqu	0x20($inp),$inout2
+	movups	$inout3,0x30($out)
+	movdqu	0x30($inp),$inout3
+	movups	$inout4,0x40($out)
+	movdqu	0x40($inp),$inout4
+	movups	$inout5,0x50($out)
+	movdqu	0x50($inp),$inout5
+	movups	$inout6,0x60($out)
+	movdqu	0x60($inp),$inout6
+	movups	$inout7,0x70($out)
+	lea	0x80($out),$out		# $out+=8*16
+	movdqu	0x70($inp),$inout7
+	lea	0x80($inp),$inp		# $inp+=8*16
+.Lecb_enc_loop8_enter:
+
+	call	_aesni_encrypt8
+
+	sub	\$0x80,$len
+	jnc	.Lecb_enc_loop8		# loop if $len-=8*16 didn't borrow
+
+	movups	$inout0,($out)		# store 8 output blocks
+	mov	$key_,$key		# restore $key
+	movups	$inout1,0x10($out)
+	mov	$rnds_,$rounds		# restore $rounds
+	movups	$inout2,0x20($out)
+	movups	$inout3,0x30($out)
+	movups	$inout4,0x40($out)
+	movups	$inout5,0x50($out)
+	movups	$inout6,0x60($out)
+	movups	$inout7,0x70($out)
+	lea	0x80($out),$out		# $out+=8*16
+	add	\$0x80,$len		# restore real remaining $len
+	jz	.Lecb_ret		# done if ($len==0)
+
+.Lecb_enc_tail:				# $len is less than 8*16
+	movups	($inp),$inout0
+	cmp	\$0x20,$len
+	jb	.Lecb_enc_one
+	movups	0x10($inp),$inout1
+	je	.Lecb_enc_two
+	movups	0x20($inp),$inout2
+	cmp	\$0x40,$len
+	jb	.Lecb_enc_three
+	movups	0x30($inp),$inout3
+	je	.Lecb_enc_four
+	movups	0x40($inp),$inout4
+	cmp	\$0x60,$len
+	jb	.Lecb_enc_five
+	movups	0x50($inp),$inout5
+	je	.Lecb_enc_six
+	movdqu	0x60($inp),$inout6
+	xorps	$inout7,$inout7
+	call	_aesni_encrypt8
+	movups	$inout0,($out)		# store 7 output blocks
+	movups	$inout1,0x10($out)
+	movups	$inout2,0x20($out)
+	movups	$inout3,0x30($out)
+	movups	$inout4,0x40($out)
+	movups	$inout5,0x50($out)
+	movups	$inout6,0x60($out)
+	jmp	.Lecb_ret
+.align	16
+.Lecb_enc_one:
+___
+	&aesni_generate1("enc",$key,$rounds);
+$code.=<<___;
+	movups	$inout0,($out)		# store one output block
+	jmp	.Lecb_ret
+.align	16
+.Lecb_enc_two:
+	call	_aesni_encrypt2
+	movups	$inout0,($out)		# store 2 output blocks
+	movups	$inout1,0x10($out)
+	jmp	.Lecb_ret
+.align	16
+.Lecb_enc_three:
+	call	_aesni_encrypt3
+	movups	$inout0,($out)		# store 3 output blocks
+	movups	$inout1,0x10($out)
+	movups	$inout2,0x20($out)
+	jmp	.Lecb_ret
+.align	16
+.Lecb_enc_four:
+	call	_aesni_encrypt4
+	movups	$inout0,($out)		# store 4 output blocks
+	movups	$inout1,0x10($out)
+	movups	$inout2,0x20($out)
+	movups	$inout3,0x30($out)
+	jmp	.Lecb_ret
+.align	16
+.Lecb_enc_five:
+	xorps	$inout5,$inout5
+	call	_aesni_encrypt6
+	movups	$inout0,($out)		# store 5 output blocks
+	movups	$inout1,0x10($out)
+	movups	$inout2,0x20($out)
+	movups	$inout3,0x30($out)
+	movups	$inout4,0x40($out)
+	jmp	.Lecb_ret
+.align	16
+.Lecb_enc_six:
+	call	_aesni_encrypt6
+	movups	$inout0,($out)		# store 6 output blocks
+	movups	$inout1,0x10($out)
+	movups	$inout2,0x20($out)
+	movups	$inout3,0x30($out)
+	movups	$inout4,0x40($out)
+	movups	$inout5,0x50($out)
+	jmp	.Lecb_ret
+#--------------------------- ECB DECRYPT ------------------------------#
+.align	16
+.Lecb_decrypt:
+	cmp	\$0x80,$len		# if ($len<8*16)
+	jb	.Lecb_dec_tail		# short input
+
+	movdqu	($inp),$inout0		# load 8 input blocks
+	movdqu	0x10($inp),$inout1
+	movdqu	0x20($inp),$inout2
+	movdqu	0x30($inp),$inout3
+	movdqu	0x40($inp),$inout4
+	movdqu	0x50($inp),$inout5
+	movdqu	0x60($inp),$inout6
+	movdqu	0x70($inp),$inout7
+	lea	0x80($inp),$inp		# $inp+=8*16
+	sub	\$0x80,$len		# $len-=8*16 (can be zero)
+	jmp	.Lecb_dec_loop8_enter
+.align 16
+.Lecb_dec_loop8:
+	movups	$inout0,($out)		# store 8 output blocks
+	mov	$key_,$key		# restore $key
+	movdqu	($inp),$inout0		# load 8 input blocks
+	mov	$rnds_,$rounds		# restore $rounds
+	movups	$inout1,0x10($out)
+	movdqu	0x10($inp),$inout1
+	movups	$inout2,0x20($out)
+	movdqu	0x20($inp),$inout2
+	movups	$inout3,0x30($out)
+	movdqu	0x30($inp),$inout3
+	movups	$inout4,0x40($out)
+	movdqu	0x40($inp),$inout4
+	movups	$inout5,0x50($out)
+	movdqu	0x50($inp),$inout5
+	movups	$inout6,0x60($out)
+	movdqu	0x60($inp),$inout6
+	movups	$inout7,0x70($out)
+	lea	0x80($out),$out		# $out+=8*16
+	movdqu	0x70($inp),$inout7
+	lea	0x80($inp),$inp		# $inp+=8*16
+.Lecb_dec_loop8_enter:
+
+	call	_aesni_decrypt8
+
+	$movkey	($key_),$rndkey0
+	sub	\$0x80,$len
+	jnc	.Lecb_dec_loop8		# loop if $len-=8*16 didn't borrow
+
+	movups	$inout0,($out)		# store 8 output blocks
+	 pxor	$inout0,$inout0		# clear register bank
+	mov	$key_,$key		# restore $key
+	movups	$inout1,0x10($out)
+	 pxor	$inout1,$inout1
+	mov	$rnds_,$rounds		# restore $rounds
+	movups	$inout2,0x20($out)
+	 pxor	$inout2,$inout2
+	movups	$inout3,0x30($out)
+	 pxor	$inout3,$inout3
+	movups	$inout4,0x40($out)
+	 pxor	$inout4,$inout4
+	movups	$inout5,0x50($out)
+	 pxor	$inout5,$inout5
+	movups	$inout6,0x60($out)
+	 pxor	$inout6,$inout6
+	movups	$inout7,0x70($out)
+	 pxor	$inout7,$inout7
+	lea	0x80($out),$out		# $out+=8*16
+	add	\$0x80,$len		# restore real remaining $len
+	jz	.Lecb_ret		# done if ($len==0)
+
+.Lecb_dec_tail:
+	movups	($inp),$inout0
+	cmp	\$0x20,$len
+	jb	.Lecb_dec_one
+	movups	0x10($inp),$inout1
+	je	.Lecb_dec_two
+	movups	0x20($inp),$inout2
+	cmp	\$0x40,$len
+	jb	.Lecb_dec_three
+	movups	0x30($inp),$inout3
+	je	.Lecb_dec_four
+	movups	0x40($inp),$inout4
+	cmp	\$0x60,$len
+	jb	.Lecb_dec_five
+	movups	0x50($inp),$inout5
+	je	.Lecb_dec_six
+	movups	0x60($inp),$inout6
+	$movkey	($key),$rndkey0
+	xorps	$inout7,$inout7
+	call	_aesni_decrypt8
+	movups	$inout0,($out)		# store 7 output blocks
+	 pxor	$inout0,$inout0		# clear register bank
+	movups	$inout1,0x10($out)
+	 pxor	$inout1,$inout1
+	movups	$inout2,0x20($out)
+	 pxor	$inout2,$inout2
+	movups	$inout3,0x30($out)
+	 pxor	$inout3,$inout3
+	movups	$inout4,0x40($out)
+	 pxor	$inout4,$inout4
+	movups	$inout5,0x50($out)
+	 pxor	$inout5,$inout5
+	movups	$inout6,0x60($out)
+	 pxor	$inout6,$inout6
+	 pxor	$inout7,$inout7
+	jmp	.Lecb_ret
+.align	16
+.Lecb_dec_one:
+___
+	&aesni_generate1("dec",$key,$rounds);
+$code.=<<___;
+	movups	$inout0,($out)		# store one output block
+	 pxor	$inout0,$inout0		# clear register bank
+	jmp	.Lecb_ret
+.align	16
+.Lecb_dec_two:
+	call	_aesni_decrypt2
+	movups	$inout0,($out)		# store 2 output blocks
+	 pxor	$inout0,$inout0		# clear register bank
+	movups	$inout1,0x10($out)
+	 pxor	$inout1,$inout1
+	jmp	.Lecb_ret
+.align	16
+.Lecb_dec_three:
+	call	_aesni_decrypt3
+	movups	$inout0,($out)		# store 3 output blocks
+	 pxor	$inout0,$inout0		# clear register bank
+	movups	$inout1,0x10($out)
+	 pxor	$inout1,$inout1
+	movups	$inout2,0x20($out)
+	 pxor	$inout2,$inout2
+	jmp	.Lecb_ret
+.align	16
+.Lecb_dec_four:
+	call	_aesni_decrypt4
+	movups	$inout0,($out)		# store 4 output blocks
+	 pxor	$inout0,$inout0		# clear register bank
+	movups	$inout1,0x10($out)
+	 pxor	$inout1,$inout1
+	movups	$inout2,0x20($out)
+	 pxor	$inout2,$inout2
+	movups	$inout3,0x30($out)
+	 pxor	$inout3,$inout3
+	jmp	.Lecb_ret
+.align	16
+.Lecb_dec_five:
+	xorps	$inout5,$inout5
+	call	_aesni_decrypt6
+	movups	$inout0,($out)		# store 5 output blocks
+	 pxor	$inout0,$inout0		# clear register bank
+	movups	$inout1,0x10($out)
+	 pxor	$inout1,$inout1
+	movups	$inout2,0x20($out)
+	 pxor	$inout2,$inout2
+	movups	$inout3,0x30($out)
+	 pxor	$inout3,$inout3
+	movups	$inout4,0x40($out)
+	 pxor	$inout4,$inout4
+	 pxor	$inout5,$inout5
+	jmp	.Lecb_ret
+.align	16
+.Lecb_dec_six:
+	call	_aesni_decrypt6
+	movups	$inout0,($out)		# store 6 output blocks
+	 pxor	$inout0,$inout0		# clear register bank
+	movups	$inout1,0x10($out)
+	 pxor	$inout1,$inout1
+	movups	$inout2,0x20($out)
+	 pxor	$inout2,$inout2
+	movups	$inout3,0x30($out)
+	 pxor	$inout3,$inout3
+	movups	$inout4,0x40($out)
+	 pxor	$inout4,$inout4
+	movups	$inout5,0x50($out)
+	 pxor	$inout5,$inout5
+
+.Lecb_ret:
+	xorps	$rndkey0,$rndkey0	# %xmm0
+	pxor	$rndkey1,$rndkey1
+___
+$code.=<<___ if ($win64);
+	movaps	(%rsp),%xmm6
+	movaps	%xmm0,(%rsp)		# clear stack
+	movaps	0x10(%rsp),%xmm7
+	movaps	%xmm0,0x10(%rsp)
+	movaps	0x20(%rsp),%xmm8
+	movaps	%xmm0,0x20(%rsp)
+	movaps	0x30(%rsp),%xmm9
+	movaps	%xmm0,0x30(%rsp)
+	lea	0x58(%rsp),%rsp
+.Lecb_enc_ret:
+___
+$code.=<<___;
+	ret
+.cfi_endproc
+.size	aesni_ecb_encrypt,.-aesni_ecb_encrypt
+___
+
+{
+######################################################################
+# void aesni_ccm64_[en|de]crypt_blocks (const void *in, void *out,
+#                         size_t blocks, const AES_KEY *key,
+#                         const char *ivec,char *cmac);
+#
+# Handles only complete blocks, operates on 64-bit counter and
+# does not update *ivec! Nor does it finalize CMAC value
+# (see engine/eng_aesni.c for details)
+#
+{
+my $cmac="%r9";	# 6th argument
+
+my $increment="%xmm9";
+my $iv="%xmm6";
+my $bswap_mask="%xmm7";
+
+$code.=<<___;
+.globl	aesni_ccm64_encrypt_blocks
+.type	aesni_ccm64_encrypt_blocks,\@function,6
+.align	16
+aesni_ccm64_encrypt_blocks:
+___
+$code.=<<___ if ($win64);
+	lea	-0x58(%rsp),%rsp
+	movaps	%xmm6,(%rsp)		# $iv
+	movaps	%xmm7,0x10(%rsp)	# $bswap_mask
+	movaps	%xmm8,0x20(%rsp)	# $in0
+	movaps	%xmm9,0x30(%rsp)	# $increment
+.Lccm64_enc_body:
+___
+$code.=<<___;
+	mov	240($key),$rounds		# key->rounds
+	movdqu	($ivp),$iv
+	movdqa	.Lincrement64(%rip),$increment
+	movdqa	.Lbswap_mask(%rip),$bswap_mask
+
+	shl	\$4,$rounds
+	mov	\$16,$rnds_
+	lea	0($key),$key_
+	movdqu	($cmac),$inout1
+	movdqa	$iv,$inout0
+	lea	32($key,$rounds),$key		# end of key schedule
+	pshufb	$bswap_mask,$iv
+	sub	%rax,%r10			# twisted $rounds
+	jmp	.Lccm64_enc_outer
+.align	16
+.Lccm64_enc_outer:
+	$movkey	($key_),$rndkey0
+	mov	%r10,%rax
+	movups	($inp),$in0			# load inp
+
+	xorps	$rndkey0,$inout0		# counter
+	$movkey	16($key_),$rndkey1
+	xorps	$in0,$rndkey0
+	xorps	$rndkey0,$inout1		# cmac^=inp
+	$movkey	32($key_),$rndkey0
+
+.Lccm64_enc2_loop:
+	aesenc	$rndkey1,$inout0
+	aesenc	$rndkey1,$inout1
+	$movkey	($key,%rax),$rndkey1
+	add	\$32,%rax
+	aesenc	$rndkey0,$inout0
+	aesenc	$rndkey0,$inout1
+	$movkey	-16($key,%rax),$rndkey0
+	jnz	.Lccm64_enc2_loop
+	aesenc	$rndkey1,$inout0
+	aesenc	$rndkey1,$inout1
+	paddq	$increment,$iv
+	dec	$len				# $len-- ($len is in blocks)
+	aesenclast	$rndkey0,$inout0
+	aesenclast	$rndkey0,$inout1
+
+	lea	16($inp),$inp
+	xorps	$inout0,$in0			# inp ^= E(iv)
+	movdqa	$iv,$inout0
+	movups	$in0,($out)			# save output
+	pshufb	$bswap_mask,$inout0
+	lea	16($out),$out			# $out+=16
+	jnz	.Lccm64_enc_outer		# loop if ($len!=0)
+
+	 pxor	$rndkey0,$rndkey0		# clear register bank
+	 pxor	$rndkey1,$rndkey1
+	 pxor	$inout0,$inout0
+	movups	$inout1,($cmac)			# store resulting mac
+	 pxor	$inout1,$inout1
+	 pxor	$in0,$in0
+	 pxor	$iv,$iv
+___
+$code.=<<___ if ($win64);
+	movaps	(%rsp),%xmm6
+	movaps	%xmm0,(%rsp)			# clear stack
+	movaps	0x10(%rsp),%xmm7
+	movaps	%xmm0,0x10(%rsp)
+	movaps	0x20(%rsp),%xmm8
+	movaps	%xmm0,0x20(%rsp)
+	movaps	0x30(%rsp),%xmm9
+	movaps	%xmm0,0x30(%rsp)
+	lea	0x58(%rsp),%rsp
+.Lccm64_enc_ret:
+___
+$code.=<<___;
+	ret
+.size	aesni_ccm64_encrypt_blocks,.-aesni_ccm64_encrypt_blocks
+___
+######################################################################
+$code.=<<___;
+.globl	aesni_ccm64_decrypt_blocks
+.type	aesni_ccm64_decrypt_blocks,\@function,6
+.align	16
+aesni_ccm64_decrypt_blocks:
+___
+$code.=<<___ if ($win64);
+	lea	-0x58(%rsp),%rsp
+	movaps	%xmm6,(%rsp)		# $iv
+	movaps	%xmm7,0x10(%rsp)	# $bswap_mask
+	movaps	%xmm8,0x20(%rsp)	# $in8
+	movaps	%xmm9,0x30(%rsp)	# $increment
+.Lccm64_dec_body:
+___
+$code.=<<___;
+	mov	240($key),$rounds		# key->rounds
+	movups	($ivp),$iv
+	movdqu	($cmac),$inout1
+	movdqa	.Lincrement64(%rip),$increment
+	movdqa	.Lbswap_mask(%rip),$bswap_mask
+
+	movaps	$iv,$inout0
+	mov	$rounds,$rnds_
+	mov	$key,$key_
+	pshufb	$bswap_mask,$iv
+___
+	&aesni_generate1("enc",$key,$rounds);
+$code.=<<___;
+	shl	\$4,$rnds_
+	mov	\$16,$rounds
+	movups	($inp),$in0			# load inp
+	paddq	$increment,$iv
+	lea	16($inp),$inp			# $inp+=16
+	sub	%r10,%rax			# twisted $rounds
+	lea	32($key_,$rnds_),$key		# end of key schedule
+	mov	%rax,%r10
+	jmp	.Lccm64_dec_outer
+.align	16
+.Lccm64_dec_outer:
+	xorps	$inout0,$in0			# inp ^= E(iv)
+	movdqa	$iv,$inout0
+	movups	$in0,($out)			# save output
+	lea	16($out),$out			# $out+=16
+	pshufb	$bswap_mask,$inout0
+
+	sub	\$1,$len			# $len-- ($len is in blocks)
+	jz	.Lccm64_dec_break		# if ($len==0) break
+
+	$movkey	($key_),$rndkey0
+	mov	%r10,%rax
+	$movkey	16($key_),$rndkey1
+	xorps	$rndkey0,$in0
+	xorps	$rndkey0,$inout0
+	xorps	$in0,$inout1			# cmac^=out
+	$movkey	32($key_),$rndkey0
+	jmp	.Lccm64_dec2_loop
+.align	16
+.Lccm64_dec2_loop:
+	aesenc	$rndkey1,$inout0
+	aesenc	$rndkey1,$inout1
+	$movkey	($key,%rax),$rndkey1
+	add	\$32,%rax
+	aesenc	$rndkey0,$inout0
+	aesenc	$rndkey0,$inout1
+	$movkey	-16($key,%rax),$rndkey0
+	jnz	.Lccm64_dec2_loop
+	movups	($inp),$in0			# load input
+	paddq	$increment,$iv
+	aesenc	$rndkey1,$inout0
+	aesenc	$rndkey1,$inout1
+	aesenclast	$rndkey0,$inout0
+	aesenclast	$rndkey0,$inout1
+	lea	16($inp),$inp			# $inp+=16
+	jmp	.Lccm64_dec_outer
+
+.align	16
+.Lccm64_dec_break:
+	#xorps	$in0,$inout1			# cmac^=out
+	mov	240($key_),$rounds
+___
+	&aesni_generate1("enc",$key_,$rounds,$inout1,$in0);
+$code.=<<___;
+	 pxor	$rndkey0,$rndkey0		# clear register bank
+	 pxor	$rndkey1,$rndkey1
+	 pxor	$inout0,$inout0
+	movups	$inout1,($cmac)			# store resulting mac
+	 pxor	$inout1,$inout1
+	 pxor	$in0,$in0
+	 pxor	$iv,$iv
+___
+$code.=<<___ if ($win64);
+	movaps	(%rsp),%xmm6
+	movaps	%xmm0,(%rsp)			# clear stack
+	movaps	0x10(%rsp),%xmm7
+	movaps	%xmm0,0x10(%rsp)
+	movaps	0x20(%rsp),%xmm8
+	movaps	%xmm0,0x20(%rsp)
+	movaps	0x30(%rsp),%xmm9
+	movaps	%xmm0,0x30(%rsp)
+	lea	0x58(%rsp),%rsp
+.Lccm64_dec_ret:
+___
+$code.=<<___;
+	ret
+.size	aesni_ccm64_decrypt_blocks,.-aesni_ccm64_decrypt_blocks
+___
+}
+######################################################################
+# void aesni_ctr32_encrypt_blocks (const void *in, void *out,
+#                         size_t blocks, const AES_KEY *key,
+#                         const char *ivec);
+#
+# Handles only complete blocks, operates on 32-bit counter and
+# does not update *ivec! (see crypto/modes/ctr128.c for details)
+#
+# Overhaul based on suggestions from Shay Gueron and Vlad Krasnov,
+# http://rt.openssl.org/Ticket/Display.html?id=3021&user=guest&pass=guest.
+# Keywords are full unroll and modulo-schedule counter calculations
+# with zero-round key xor.
+{
+my ($in0,$in1,$in2,$in3,$in4,$in5)=map("%xmm$_",(10..15));
+my ($key0,$ctr)=("%ebp","${ivp}d");
+my $frame_size = 0x80 + ($win64?160:0);
+
+$code.=<<___;
+.globl	aesni_ctr32_encrypt_blocks
+.type	aesni_ctr32_encrypt_blocks,\@function,5
+.align	16
+aesni_ctr32_encrypt_blocks:
+.cfi_startproc
+	cmp	\$1,$len
+	jne	.Lctr32_bulk
+
+	# handle single block without allocating stack frame,
+	# useful when handling edges
+	movups	($ivp),$inout0
+	movups	($inp),$inout1
+	mov	240($key),%edx			# key->rounds
+___
+	&aesni_generate1("enc",$key,"%edx");
+$code.=<<___;
+	 pxor	$rndkey0,$rndkey0		# clear register bank
+	 pxor	$rndkey1,$rndkey1
+	xorps	$inout1,$inout0
+	 pxor	$inout1,$inout1
+	movups	$inout0,($out)
+	 xorps	$inout0,$inout0
+	jmp	.Lctr32_epilogue
+
+.align	16
+.Lctr32_bulk:
+	lea	(%rsp),$key_			# use $key_ as frame pointer
+.cfi_def_cfa_register	$key_
+	push	%rbp
+.cfi_push	%rbp
+	sub	\$$frame_size,%rsp
+	and	\$-16,%rsp	# Linux kernel stack can be incorrectly seeded
+___
+$code.=<<___ if ($win64);
+	movaps	%xmm6,-0xa8($key_)		# offload everything
+	movaps	%xmm7,-0x98($key_)
+	movaps	%xmm8,-0x88($key_)
+	movaps	%xmm9,-0x78($key_)
+	movaps	%xmm10,-0x68($key_)
+	movaps	%xmm11,-0x58($key_)
+	movaps	%xmm12,-0x48($key_)
+	movaps	%xmm13,-0x38($key_)
+	movaps	%xmm14,-0x28($key_)
+	movaps	%xmm15,-0x18($key_)
+.Lctr32_body:
+___
+$code.=<<___;
+
+	# 8 16-byte words on top of stack are counter values
+	# xor-ed with zero-round key
+
+	movdqu	($ivp),$inout0
+	movdqu	($key),$rndkey0
+	mov	12($ivp),$ctr			# counter LSB
+	pxor	$rndkey0,$inout0
+	mov	12($key),$key0			# 0-round key LSB
+	movdqa	$inout0,0x00(%rsp)		# populate counter block
+	bswap	$ctr
+	movdqa	$inout0,$inout1
+	movdqa	$inout0,$inout2
+	movdqa	$inout0,$inout3
+	movdqa	$inout0,0x40(%rsp)
+	movdqa	$inout0,0x50(%rsp)
+	movdqa	$inout0,0x60(%rsp)
+	mov	%rdx,%r10			# about to borrow %rdx
+	movdqa	$inout0,0x70(%rsp)
+
+	lea	1($ctr),%rax
+	 lea	2($ctr),%rdx
+	bswap	%eax
+	 bswap	%edx
+	xor	$key0,%eax
+	 xor	$key0,%edx
+	pinsrd	\$3,%eax,$inout1
+	lea	3($ctr),%rax
+	movdqa	$inout1,0x10(%rsp)
+	 pinsrd	\$3,%edx,$inout2
+	bswap	%eax
+	 mov	%r10,%rdx			# restore %rdx
+	 lea	4($ctr),%r10
+	 movdqa	$inout2,0x20(%rsp)
+	xor	$key0,%eax
+	 bswap	%r10d
+	pinsrd	\$3,%eax,$inout3
+	 xor	$key0,%r10d
+	movdqa	$inout3,0x30(%rsp)
+	lea	5($ctr),%r9
+	 mov	%r10d,0x40+12(%rsp)
+	bswap	%r9d
+	 lea	6($ctr),%r10
+	mov	240($key),$rounds		# key->rounds
+	xor	$key0,%r9d
+	 bswap	%r10d
+	mov	%r9d,0x50+12(%rsp)
+	 xor	$key0,%r10d
+	lea	7($ctr),%r9
+	 mov	%r10d,0x60+12(%rsp)
+	bswap	%r9d
+	 mov	OPENSSL_ia32cap_P+4(%rip),%r10d
+	xor	$key0,%r9d
+	 and	\$`1<<26|1<<22`,%r10d		# isolate XSAVE+MOVBE
+	mov	%r9d,0x70+12(%rsp)
+
+	$movkey	0x10($key),$rndkey1
+
+	movdqa	0x40(%rsp),$inout4
+	movdqa	0x50(%rsp),$inout5
+
+	cmp	\$8,$len		# $len is in blocks
+	jb	.Lctr32_tail		# short input if ($len<8)
+
+	sub	\$6,$len		# $len is biased by -6
+	cmp	\$`1<<22`,%r10d		# check for MOVBE without XSAVE
+	je	.Lctr32_6x		# [which denotes Atom Silvermont]
+
+	lea	0x80($key),$key		# size optimization
+	sub	\$2,$len		# $len is biased by -8
+	jmp	.Lctr32_loop8
+
+.align	16
+.Lctr32_6x:
+	shl	\$4,$rounds
+	mov	\$48,$rnds_
+	bswap	$key0
+	lea	32($key,$rounds),$key	# end of key schedule
+	sub	%rax,%r10		# twisted $rounds
+	jmp	.Lctr32_loop6
+
+.align	16
+.Lctr32_loop6:
+	 add	\$6,$ctr		# next counter value
+	$movkey	-48($key,$rnds_),$rndkey0
+	aesenc	$rndkey1,$inout0
+	 mov	$ctr,%eax
+	 xor	$key0,%eax
+	aesenc	$rndkey1,$inout1
+	 movbe	%eax,`0x00+12`(%rsp)	# store next counter value
+	 lea	1($ctr),%eax
+	aesenc	$rndkey1,$inout2
+	 xor	$key0,%eax
+	 movbe	%eax,`0x10+12`(%rsp)
+	aesenc	$rndkey1,$inout3
+	 lea	2($ctr),%eax
+	 xor	$key0,%eax
+	aesenc	$rndkey1,$inout4
+	 movbe	%eax,`0x20+12`(%rsp)
+	 lea	3($ctr),%eax
+	aesenc	$rndkey1,$inout5
+	$movkey	-32($key,$rnds_),$rndkey1
+	 xor	$key0,%eax
+
+	aesenc	$rndkey0,$inout0
+	 movbe	%eax,`0x30+12`(%rsp)
+	 lea	4($ctr),%eax
+	aesenc	$rndkey0,$inout1
+	 xor	$key0,%eax
+	 movbe	%eax,`0x40+12`(%rsp)
+	aesenc	$rndkey0,$inout2
+	 lea	5($ctr),%eax
+	 xor	$key0,%eax
+	aesenc	$rndkey0,$inout3
+	 movbe	%eax,`0x50+12`(%rsp)
+	 mov	%r10,%rax		# mov	$rnds_,$rounds
+	aesenc	$rndkey0,$inout4
+	aesenc	$rndkey0,$inout5
+	$movkey	-16($key,$rnds_),$rndkey0
+
+	call	.Lenc_loop6
+
+	movdqu	($inp),$inout6		# load 6 input blocks
+	movdqu	0x10($inp),$inout7
+	movdqu	0x20($inp),$in0
+	movdqu	0x30($inp),$in1
+	movdqu	0x40($inp),$in2
+	movdqu	0x50($inp),$in3
+	lea	0x60($inp),$inp		# $inp+=6*16
+	$movkey	-64($key,$rnds_),$rndkey1
+	pxor	$inout0,$inout6		# inp^=E(ctr)
+	movaps	0x00(%rsp),$inout0	# load next counter [xor-ed with 0 round]
+	pxor	$inout1,$inout7
+	movaps	0x10(%rsp),$inout1
+	pxor	$inout2,$in0
+	movaps	0x20(%rsp),$inout2
+	pxor	$inout3,$in1
+	movaps	0x30(%rsp),$inout3
+	pxor	$inout4,$in2
+	movaps	0x40(%rsp),$inout4
+	pxor	$inout5,$in3
+	movaps	0x50(%rsp),$inout5
+	movdqu	$inout6,($out)		# store 6 output blocks
+	movdqu	$inout7,0x10($out)
+	movdqu	$in0,0x20($out)
+	movdqu	$in1,0x30($out)
+	movdqu	$in2,0x40($out)
+	movdqu	$in3,0x50($out)
+	lea	0x60($out),$out		# $out+=6*16
+
+	sub	\$6,$len
+	jnc	.Lctr32_loop6		# loop if $len-=6 didn't borrow
+
+	add	\$6,$len		# restore real remaining $len
+	jz	.Lctr32_done		# done if ($len==0)
+
+	lea	-48($rnds_),$rounds
+	lea	-80($key,$rnds_),$key	# restore $key
+	neg	$rounds
+	shr	\$4,$rounds		# restore $rounds
+	jmp	.Lctr32_tail
+
+.align	32
+.Lctr32_loop8:
+	 add		\$8,$ctr		# next counter value
+	movdqa		0x60(%rsp),$inout6
+	aesenc		$rndkey1,$inout0
+	 mov		$ctr,%r9d
+	movdqa		0x70(%rsp),$inout7
+	aesenc		$rndkey1,$inout1
+	 bswap		%r9d
+	$movkey		0x20-0x80($key),$rndkey0
+	aesenc		$rndkey1,$inout2
+	 xor		$key0,%r9d
+	 nop
+	aesenc		$rndkey1,$inout3
+	 mov		%r9d,0x00+12(%rsp)	# store next counter value
+	 lea		1($ctr),%r9
+	aesenc		$rndkey1,$inout4
+	aesenc		$rndkey1,$inout5
+	aesenc		$rndkey1,$inout6
+	aesenc		$rndkey1,$inout7
+	$movkey		0x30-0x80($key),$rndkey1
+___
+for($i=2;$i<8;$i++) {
+my $rndkeyx = ($i&1)?$rndkey1:$rndkey0;
+$code.=<<___;
+	 bswap		%r9d
+	aesenc		$rndkeyx,$inout0
+	aesenc		$rndkeyx,$inout1
+	 xor		$key0,%r9d
+	 .byte		0x66,0x90
+	aesenc		$rndkeyx,$inout2
+	aesenc		$rndkeyx,$inout3
+	 mov		%r9d,`0x10*($i-1)`+12(%rsp)
+	 lea		$i($ctr),%r9
+	aesenc		$rndkeyx,$inout4
+	aesenc		$rndkeyx,$inout5
+	aesenc		$rndkeyx,$inout6
+	aesenc		$rndkeyx,$inout7
+	$movkey		`0x20+0x10*$i`-0x80($key),$rndkeyx
+___
+}
+$code.=<<___;
+	 bswap		%r9d
+	aesenc		$rndkey0,$inout0
+	aesenc		$rndkey0,$inout1
+	aesenc		$rndkey0,$inout2
+	 xor		$key0,%r9d
+	 movdqu		0x00($inp),$in0		# start loading input
+	aesenc		$rndkey0,$inout3
+	 mov		%r9d,0x70+12(%rsp)
+	 cmp		\$11,$rounds
+	aesenc		$rndkey0,$inout4
+	aesenc		$rndkey0,$inout5
+	aesenc		$rndkey0,$inout6
+	aesenc		$rndkey0,$inout7
+	$movkey		0xa0-0x80($key),$rndkey0
+
+	jb		.Lctr32_enc_done
+
+	aesenc		$rndkey1,$inout0
+	aesenc		$rndkey1,$inout1
+	aesenc		$rndkey1,$inout2
+	aesenc		$rndkey1,$inout3
+	aesenc		$rndkey1,$inout4
+	aesenc		$rndkey1,$inout5
+	aesenc		$rndkey1,$inout6
+	aesenc		$rndkey1,$inout7
+	$movkey		0xb0-0x80($key),$rndkey1
+
+	aesenc		$rndkey0,$inout0
+	aesenc		$rndkey0,$inout1
+	aesenc		$rndkey0,$inout2
+	aesenc		$rndkey0,$inout3
+	aesenc		$rndkey0,$inout4
+	aesenc		$rndkey0,$inout5
+	aesenc		$rndkey0,$inout6
+	aesenc		$rndkey0,$inout7
+	$movkey		0xc0-0x80($key),$rndkey0
+	je		.Lctr32_enc_done
+
+	aesenc		$rndkey1,$inout0
+	aesenc		$rndkey1,$inout1
+	aesenc		$rndkey1,$inout2
+	aesenc		$rndkey1,$inout3
+	aesenc		$rndkey1,$inout4
+	aesenc		$rndkey1,$inout5
+	aesenc		$rndkey1,$inout6
+	aesenc		$rndkey1,$inout7
+	$movkey		0xd0-0x80($key),$rndkey1
+
+	aesenc		$rndkey0,$inout0
+	aesenc		$rndkey0,$inout1
+	aesenc		$rndkey0,$inout2
+	aesenc		$rndkey0,$inout3
+	aesenc		$rndkey0,$inout4
+	aesenc		$rndkey0,$inout5
+	aesenc		$rndkey0,$inout6
+	aesenc		$rndkey0,$inout7
+	$movkey		0xe0-0x80($key),$rndkey0
+	jmp		.Lctr32_enc_done
+
+.align	16
+.Lctr32_enc_done:
+	movdqu		0x10($inp),$in1
+	pxor		$rndkey0,$in0		# input^=round[last]
+	movdqu		0x20($inp),$in2
+	pxor		$rndkey0,$in1
+	movdqu		0x30($inp),$in3
+	pxor		$rndkey0,$in2
+	movdqu		0x40($inp),$in4
+	pxor		$rndkey0,$in3
+	movdqu		0x50($inp),$in5
+	pxor		$rndkey0,$in4
+	pxor		$rndkey0,$in5
+	aesenc		$rndkey1,$inout0
+	aesenc		$rndkey1,$inout1
+	aesenc		$rndkey1,$inout2
+	aesenc		$rndkey1,$inout3
+	aesenc		$rndkey1,$inout4
+	aesenc		$rndkey1,$inout5
+	aesenc		$rndkey1,$inout6
+	aesenc		$rndkey1,$inout7
+	movdqu		0x60($inp),$rndkey1	# borrow $rndkey1 for inp[6]
+	lea		0x80($inp),$inp		# $inp+=8*16
+
+	aesenclast	$in0,$inout0		# $inN is inp[N]^round[last]
+	pxor		$rndkey0,$rndkey1	# borrowed $rndkey
+	movdqu		0x70-0x80($inp),$in0
+	aesenclast	$in1,$inout1
+	pxor		$rndkey0,$in0
+	movdqa		0x00(%rsp),$in1		# load next counter block
+	aesenclast	$in2,$inout2
+	aesenclast	$in3,$inout3
+	movdqa		0x10(%rsp),$in2
+	movdqa		0x20(%rsp),$in3
+	aesenclast	$in4,$inout4
+	aesenclast	$in5,$inout5
+	movdqa		0x30(%rsp),$in4
+	movdqa		0x40(%rsp),$in5
+	aesenclast	$rndkey1,$inout6
+	movdqa		0x50(%rsp),$rndkey0
+	$movkey		0x10-0x80($key),$rndkey1#real 1st-round key
+	aesenclast	$in0,$inout7
+
+	movups		$inout0,($out)		# store 8 output blocks
+	movdqa		$in1,$inout0
+	movups		$inout1,0x10($out)
+	movdqa		$in2,$inout1
+	movups		$inout2,0x20($out)
+	movdqa		$in3,$inout2
+	movups		$inout3,0x30($out)
+	movdqa		$in4,$inout3
+	movups		$inout4,0x40($out)
+	movdqa		$in5,$inout4
+	movups		$inout5,0x50($out)
+	movdqa		$rndkey0,$inout5
+	movups		$inout6,0x60($out)
+	movups		$inout7,0x70($out)
+	lea		0x80($out),$out		# $out+=8*16
+
+	sub	\$8,$len
+	jnc	.Lctr32_loop8			# loop if $len-=8 didn't borrow
+
+	add	\$8,$len			# restore real remaining $len
+	jz	.Lctr32_done			# done if ($len==0)
+	lea	-0x80($key),$key
+
+.Lctr32_tail:
+	# note that at this point $inout0..5 are populated with
+	# counter values xor-ed with 0-round key
+	lea	16($key),$key
+	cmp	\$4,$len
+	jb	.Lctr32_loop3
+	je	.Lctr32_loop4
+
+	# if ($len>4) compute 7 E(counter)
+	shl		\$4,$rounds
+	movdqa		0x60(%rsp),$inout6
+	pxor		$inout7,$inout7
+
+	$movkey		16($key),$rndkey0
+	aesenc		$rndkey1,$inout0
+	aesenc		$rndkey1,$inout1
+	lea		32-16($key,$rounds),$key# prepare for .Lenc_loop8_enter
+	neg		%rax
+	aesenc		$rndkey1,$inout2
+	add		\$16,%rax		# prepare for .Lenc_loop8_enter
+	 movups		($inp),$in0
+	aesenc		$rndkey1,$inout3
+	aesenc		$rndkey1,$inout4
+	 movups		0x10($inp),$in1		# pre-load input
+	 movups		0x20($inp),$in2
+	aesenc		$rndkey1,$inout5
+	aesenc		$rndkey1,$inout6
+
+	call            .Lenc_loop8_enter
+
+	movdqu	0x30($inp),$in3
+	pxor	$in0,$inout0
+	movdqu	0x40($inp),$in0
+	pxor	$in1,$inout1
+	movdqu	$inout0,($out)			# store output
+	pxor	$in2,$inout2
+	movdqu	$inout1,0x10($out)
+	pxor	$in3,$inout3
+	movdqu	$inout2,0x20($out)
+	pxor	$in0,$inout4
+	movdqu	$inout3,0x30($out)
+	movdqu	$inout4,0x40($out)
+	cmp	\$6,$len
+	jb	.Lctr32_done			# $len was 5, stop store
+
+	movups	0x50($inp),$in1
+	xorps	$in1,$inout5
+	movups	$inout5,0x50($out)
+	je	.Lctr32_done			# $len was 6, stop store
+
+	movups	0x60($inp),$in2
+	xorps	$in2,$inout6
+	movups	$inout6,0x60($out)
+	jmp	.Lctr32_done			# $len was 7, stop store
+
+.align	32
+.Lctr32_loop4:
+	aesenc		$rndkey1,$inout0
+	lea		16($key),$key
+	dec		$rounds
+	aesenc		$rndkey1,$inout1
+	aesenc		$rndkey1,$inout2
+	aesenc		$rndkey1,$inout3
+	$movkey		($key),$rndkey1
+	jnz		.Lctr32_loop4
+	aesenclast	$rndkey1,$inout0
+	aesenclast	$rndkey1,$inout1
+	 movups		($inp),$in0		# load input
+	 movups		0x10($inp),$in1
+	aesenclast	$rndkey1,$inout2
+	aesenclast	$rndkey1,$inout3
+	 movups		0x20($inp),$in2
+	 movups		0x30($inp),$in3
+
+	xorps	$in0,$inout0
+	movups	$inout0,($out)			# store output
+	xorps	$in1,$inout1
+	movups	$inout1,0x10($out)
+	pxor	$in2,$inout2
+	movdqu	$inout2,0x20($out)
+	pxor	$in3,$inout3
+	movdqu	$inout3,0x30($out)
+	jmp	.Lctr32_done			# $len was 4, stop store
+
+.align	32
+.Lctr32_loop3:
+	aesenc		$rndkey1,$inout0
+	lea		16($key),$key
+	dec		$rounds
+	aesenc		$rndkey1,$inout1
+	aesenc		$rndkey1,$inout2
+	$movkey		($key),$rndkey1
+	jnz		.Lctr32_loop3
+	aesenclast	$rndkey1,$inout0
+	aesenclast	$rndkey1,$inout1
+	aesenclast	$rndkey1,$inout2
+
+	movups	($inp),$in0			# load input
+	xorps	$in0,$inout0
+	movups	$inout0,($out)			# store output
+	cmp	\$2,$len
+	jb	.Lctr32_done			# $len was 1, stop store
+
+	movups	0x10($inp),$in1
+	xorps	$in1,$inout1
+	movups	$inout1,0x10($out)
+	je	.Lctr32_done			# $len was 2, stop store
+
+	movups	0x20($inp),$in2
+	xorps	$in2,$inout2
+	movups	$inout2,0x20($out)		# $len was 3, stop store
+
+.Lctr32_done:
+	xorps	%xmm0,%xmm0			# clear register bank
+	xor	$key0,$key0
+	pxor	%xmm1,%xmm1
+	pxor	%xmm2,%xmm2
+	pxor	%xmm3,%xmm3
+	pxor	%xmm4,%xmm4
+	pxor	%xmm5,%xmm5
+___
+$code.=<<___ if (!$win64);
+	pxor	%xmm6,%xmm6
+	pxor	%xmm7,%xmm7
+	movaps	%xmm0,0x00(%rsp)		# clear stack
+	pxor	%xmm8,%xmm8
+	movaps	%xmm0,0x10(%rsp)
+	pxor	%xmm9,%xmm9
+	movaps	%xmm0,0x20(%rsp)
+	pxor	%xmm10,%xmm10
+	movaps	%xmm0,0x30(%rsp)
+	pxor	%xmm11,%xmm11
+	movaps	%xmm0,0x40(%rsp)
+	pxor	%xmm12,%xmm12
+	movaps	%xmm0,0x50(%rsp)
+	pxor	%xmm13,%xmm13
+	movaps	%xmm0,0x60(%rsp)
+	pxor	%xmm14,%xmm14
+	movaps	%xmm0,0x70(%rsp)
+	pxor	%xmm15,%xmm15
+___
+$code.=<<___ if ($win64);
+	movaps	-0xa8($key_),%xmm6
+	movaps	%xmm0,-0xa8($key_)		# clear stack
+	movaps	-0x98($key_),%xmm7
+	movaps	%xmm0,-0x98($key_)
+	movaps	-0x88($key_),%xmm8
+	movaps	%xmm0,-0x88($key_)
+	movaps	-0x78($key_),%xmm9
+	movaps	%xmm0,-0x78($key_)
+	movaps	-0x68($key_),%xmm10
+	movaps	%xmm0,-0x68($key_)
+	movaps	-0x58($key_),%xmm11
+	movaps	%xmm0,-0x58($key_)
+	movaps	-0x48($key_),%xmm12
+	movaps	%xmm0,-0x48($key_)
+	movaps	-0x38($key_),%xmm13
+	movaps	%xmm0,-0x38($key_)
+	movaps	-0x28($key_),%xmm14
+	movaps	%xmm0,-0x28($key_)
+	movaps	-0x18($key_),%xmm15
+	movaps	%xmm0,-0x18($key_)
+	movaps	%xmm0,0x00(%rsp)
+	movaps	%xmm0,0x10(%rsp)
+	movaps	%xmm0,0x20(%rsp)
+	movaps	%xmm0,0x30(%rsp)
+	movaps	%xmm0,0x40(%rsp)
+	movaps	%xmm0,0x50(%rsp)
+	movaps	%xmm0,0x60(%rsp)
+	movaps	%xmm0,0x70(%rsp)
+___
+$code.=<<___;
+	mov	-8($key_),%rbp
+.cfi_restore	%rbp
+	lea	($key_),%rsp
+.cfi_def_cfa_register	%rsp
+.Lctr32_epilogue:
+	ret
+.cfi_endproc
+.size	aesni_ctr32_encrypt_blocks,.-aesni_ctr32_encrypt_blocks
+___
+}
+
+######################################################################
+# void aesni_xts_[en|de]crypt(const char *inp,char *out,size_t len,
+#	const AES_KEY *key1, const AES_KEY *key2
+#	const unsigned char iv[16]);
+#
+{
+my @tweak=map("%xmm$_",(10..15));
+my ($twmask,$twres,$twtmp)=("%xmm8","%xmm9",@tweak[4]);
+my ($key2,$ivp,$len_)=("%r8","%r9","%r9");
+my $frame_size = 0x70 + ($win64?160:0);
+my $key_ = "%rbp";	# override so that we can use %r11 as FP
+
+$code.=<<___;
+.globl	aesni_xts_encrypt
+.type	aesni_xts_encrypt,\@function,6
+.align	16
+aesni_xts_encrypt:
+.cfi_startproc
+	lea	(%rsp),%r11			# frame pointer
+.cfi_def_cfa_register	%r11
+	push	%rbp
+.cfi_push	%rbp
+	sub	\$$frame_size,%rsp
+	and	\$-16,%rsp	# Linux kernel stack can be incorrectly seeded
+___
+$code.=<<___ if ($win64);
+	movaps	%xmm6,-0xa8(%r11)		# offload everything
+	movaps	%xmm7,-0x98(%r11)
+	movaps	%xmm8,-0x88(%r11)
+	movaps	%xmm9,-0x78(%r11)
+	movaps	%xmm10,-0x68(%r11)
+	movaps	%xmm11,-0x58(%r11)
+	movaps	%xmm12,-0x48(%r11)
+	movaps	%xmm13,-0x38(%r11)
+	movaps	%xmm14,-0x28(%r11)
+	movaps	%xmm15,-0x18(%r11)
+.Lxts_enc_body:
+___
+$code.=<<___;
+	movups	($ivp),$inout0			# load clear-text tweak
+	mov	240(%r8),$rounds		# key2->rounds
+	mov	240($key),$rnds_		# key1->rounds
+___
+	# generate the tweak
+	&aesni_generate1("enc",$key2,$rounds,$inout0);
+$code.=<<___;
+	$movkey	($key),$rndkey0			# zero round key
+	mov	$key,$key_			# backup $key
+	mov	$rnds_,$rounds			# backup $rounds
+	shl	\$4,$rnds_
+	mov	$len,$len_			# backup $len
+	and	\$-16,$len
+
+	$movkey	16($key,$rnds_),$rndkey1	# last round key
+
+	movdqa	.Lxts_magic(%rip),$twmask
+	movdqa	$inout0,@tweak[5]
+	pshufd	\$0x5f,$inout0,$twres
+	pxor	$rndkey0,$rndkey1
+___
+    # alternative tweak calculation algorithm is based on suggestions
+    # by Shay Gueron. psrad doesn't conflict with AES-NI instructions
+    # and should help in the future...
+    for ($i=0;$i<4;$i++) {
+    $code.=<<___;
+	movdqa	$twres,$twtmp
+	paddd	$twres,$twres
+	movdqa	@tweak[5],@tweak[$i]
+	psrad	\$31,$twtmp			# broadcast upper bits
+	paddq	@tweak[5],@tweak[5]
+	pand	$twmask,$twtmp
+	pxor	$rndkey0,@tweak[$i]
+	pxor	$twtmp,@tweak[5]
+___
+    }
+$code.=<<___;
+	movdqa	@tweak[5],@tweak[4]
+	psrad	\$31,$twres
+	paddq	@tweak[5],@tweak[5]
+	pand	$twmask,$twres
+	pxor	$rndkey0,@tweak[4]
+	pxor	$twres,@tweak[5]
+	movaps	$rndkey1,0x60(%rsp)		# save round[0]^round[last]
+
+	sub	\$16*6,$len
+	jc	.Lxts_enc_short			# if $len-=6*16 borrowed
+
+	mov	\$16+96,$rounds
+	lea	32($key_,$rnds_),$key		# end of key schedule
+	sub	%r10,%rax			# twisted $rounds
+	$movkey	16($key_),$rndkey1
+	mov	%rax,%r10			# backup twisted $rounds
+	lea	.Lxts_magic(%rip),%r8
+	jmp	.Lxts_enc_grandloop
+
+.align	32
+.Lxts_enc_grandloop:
+	movdqu	`16*0`($inp),$inout0		# load input
+	movdqa	$rndkey0,$twmask
+	movdqu	`16*1`($inp),$inout1
+	pxor	@tweak[0],$inout0		# input^=tweak^round[0]
+	movdqu	`16*2`($inp),$inout2
+	pxor	@tweak[1],$inout1
+	 aesenc		$rndkey1,$inout0
+	movdqu	`16*3`($inp),$inout3
+	pxor	@tweak[2],$inout2
+	 aesenc		$rndkey1,$inout1
+	movdqu	`16*4`($inp),$inout4
+	pxor	@tweak[3],$inout3
+	 aesenc		$rndkey1,$inout2
+	movdqu	`16*5`($inp),$inout5
+	pxor	@tweak[5],$twmask		# round[0]^=tweak[5]
+	 movdqa	0x60(%rsp),$twres		# load round[0]^round[last]
+	pxor	@tweak[4],$inout4
+	 aesenc		$rndkey1,$inout3
+	$movkey	32($key_),$rndkey0
+	lea	`16*6`($inp),$inp
+	pxor	$twmask,$inout5
+
+	 pxor	$twres,@tweak[0]		# calculate tweaks^round[last]
+	aesenc		$rndkey1,$inout4
+	 pxor	$twres,@tweak[1]
+	 movdqa	@tweak[0],`16*0`(%rsp)		# put aside tweaks^round[last]
+	aesenc		$rndkey1,$inout5
+	$movkey		48($key_),$rndkey1
+	 pxor	$twres,@tweak[2]
+
+	aesenc		$rndkey0,$inout0
+	 pxor	$twres,@tweak[3]
+	 movdqa	@tweak[1],`16*1`(%rsp)
+	aesenc		$rndkey0,$inout1
+	 pxor	$twres,@tweak[4]
+	 movdqa	@tweak[2],`16*2`(%rsp)
+	aesenc		$rndkey0,$inout2
+	aesenc		$rndkey0,$inout3
+	 pxor	$twres,$twmask
+	 movdqa	@tweak[4],`16*4`(%rsp)
+	aesenc		$rndkey0,$inout4
+	aesenc		$rndkey0,$inout5
+	$movkey		64($key_),$rndkey0
+	 movdqa	$twmask,`16*5`(%rsp)
+	pshufd	\$0x5f,@tweak[5],$twres
+	jmp	.Lxts_enc_loop6
+.align	32
+.Lxts_enc_loop6:
+	aesenc		$rndkey1,$inout0
+	aesenc		$rndkey1,$inout1
+	aesenc		$rndkey1,$inout2
+	aesenc		$rndkey1,$inout3
+	aesenc		$rndkey1,$inout4
+	aesenc		$rndkey1,$inout5
+	$movkey		-64($key,%rax),$rndkey1
+	add		\$32,%rax
+
+	aesenc		$rndkey0,$inout0
+	aesenc		$rndkey0,$inout1
+	aesenc		$rndkey0,$inout2
+	aesenc		$rndkey0,$inout3
+	aesenc		$rndkey0,$inout4
+	aesenc		$rndkey0,$inout5
+	$movkey		-80($key,%rax),$rndkey0
+	jnz		.Lxts_enc_loop6
+
+	movdqa	(%r8),$twmask			# start calculating next tweak
+	movdqa	$twres,$twtmp
+	paddd	$twres,$twres
+	 aesenc		$rndkey1,$inout0
+	paddq	@tweak[5],@tweak[5]
+	psrad	\$31,$twtmp
+	 aesenc		$rndkey1,$inout1
+	pand	$twmask,$twtmp
+	$movkey	($key_),@tweak[0]		# load round[0]
+	 aesenc		$rndkey1,$inout2
+	 aesenc		$rndkey1,$inout3
+	 aesenc		$rndkey1,$inout4
+	pxor	$twtmp,@tweak[5]
+	movaps	@tweak[0],@tweak[1]		# copy round[0]
+	 aesenc		$rndkey1,$inout5
+	 $movkey	-64($key),$rndkey1
+
+	movdqa	$twres,$twtmp
+	 aesenc		$rndkey0,$inout0
+	paddd	$twres,$twres
+	pxor	@tweak[5],@tweak[0]
+	 aesenc		$rndkey0,$inout1
+	psrad	\$31,$twtmp
+	paddq	@tweak[5],@tweak[5]
+	 aesenc		$rndkey0,$inout2
+	 aesenc		$rndkey0,$inout3
+	pand	$twmask,$twtmp
+	movaps	@tweak[1],@tweak[2]
+	 aesenc		$rndkey0,$inout4
+	pxor	$twtmp,@tweak[5]
+	movdqa	$twres,$twtmp
+	 aesenc		$rndkey0,$inout5
+	 $movkey	-48($key),$rndkey0
+
+	paddd	$twres,$twres
+	 aesenc		$rndkey1,$inout0
+	pxor	@tweak[5],@tweak[1]
+	psrad	\$31,$twtmp
+	 aesenc		$rndkey1,$inout1
+	paddq	@tweak[5],@tweak[5]
+	pand	$twmask,$twtmp
+	 aesenc		$rndkey1,$inout2
+	 aesenc		$rndkey1,$inout3
+	 movdqa	@tweak[3],`16*3`(%rsp)
+	pxor	$twtmp,@tweak[5]
+	 aesenc		$rndkey1,$inout4
+	movaps	@tweak[2],@tweak[3]
+	movdqa	$twres,$twtmp
+	 aesenc		$rndkey1,$inout5
+	 $movkey	-32($key),$rndkey1
+
+	paddd	$twres,$twres
+	 aesenc		$rndkey0,$inout0
+	pxor	@tweak[5],@tweak[2]
+	psrad	\$31,$twtmp
+	 aesenc		$rndkey0,$inout1
+	paddq	@tweak[5],@tweak[5]
+	pand	$twmask,$twtmp
+	 aesenc		$rndkey0,$inout2
+	 aesenc		$rndkey0,$inout3
+	 aesenc		$rndkey0,$inout4
+	pxor	$twtmp,@tweak[5]
+	movaps	@tweak[3],@tweak[4]
+	 aesenc		$rndkey0,$inout5
+
+	movdqa	$twres,$rndkey0
+	paddd	$twres,$twres
+	 aesenc		$rndkey1,$inout0
+	pxor	@tweak[5],@tweak[3]
+	psrad	\$31,$rndkey0
+	 aesenc		$rndkey1,$inout1
+	paddq	@tweak[5],@tweak[5]
+	pand	$twmask,$rndkey0
+	 aesenc		$rndkey1,$inout2
+	 aesenc		$rndkey1,$inout3
+	pxor	$rndkey0,@tweak[5]
+	$movkey		($key_),$rndkey0
+	 aesenc		$rndkey1,$inout4
+	 aesenc		$rndkey1,$inout5
+	$movkey		16($key_),$rndkey1
+
+	pxor	@tweak[5],@tweak[4]
+	 aesenclast	`16*0`(%rsp),$inout0
+	psrad	\$31,$twres
+	paddq	@tweak[5],@tweak[5]
+	 aesenclast	`16*1`(%rsp),$inout1
+	 aesenclast	`16*2`(%rsp),$inout2
+	pand	$twmask,$twres
+	mov	%r10,%rax			# restore $rounds
+	 aesenclast	`16*3`(%rsp),$inout3
+	 aesenclast	`16*4`(%rsp),$inout4
+	 aesenclast	`16*5`(%rsp),$inout5
+	pxor	$twres,@tweak[5]
+
+	lea	`16*6`($out),$out		# $out+=6*16
+	movups	$inout0,`-16*6`($out)		# store 6 output blocks
+	movups	$inout1,`-16*5`($out)
+	movups	$inout2,`-16*4`($out)
+	movups	$inout3,`-16*3`($out)
+	movups	$inout4,`-16*2`($out)
+	movups	$inout5,`-16*1`($out)
+	sub	\$16*6,$len
+	jnc	.Lxts_enc_grandloop		# loop if $len-=6*16 didn't borrow
+
+	mov	\$16+96,$rounds
+	sub	$rnds_,$rounds
+	mov	$key_,$key			# restore $key
+	shr	\$4,$rounds			# restore original value
+
+.Lxts_enc_short:
+	# at the point @tweak[0..5] are populated with tweak values
+	mov	$rounds,$rnds_			# backup $rounds
+	pxor	$rndkey0,@tweak[0]
+	add	\$16*6,$len			# restore real remaining $len
+	jz	.Lxts_enc_done			# done if ($len==0)
+
+	pxor	$rndkey0,@tweak[1]
+	cmp	\$0x20,$len
+	jb	.Lxts_enc_one			# $len is 1*16
+	pxor	$rndkey0,@tweak[2]
+	je	.Lxts_enc_two			# $len is 2*16
+
+	pxor	$rndkey0,@tweak[3]
+	cmp	\$0x40,$len
+	jb	.Lxts_enc_three			# $len is 3*16
+	pxor	$rndkey0,@tweak[4]
+	je	.Lxts_enc_four			# $len is 4*16
+
+	movdqu	($inp),$inout0			# $len is 5*16
+	movdqu	16*1($inp),$inout1
+	movdqu	16*2($inp),$inout2
+	pxor	@tweak[0],$inout0
+	movdqu	16*3($inp),$inout3
+	pxor	@tweak[1],$inout1
+	movdqu	16*4($inp),$inout4
+	lea	16*5($inp),$inp			# $inp+=5*16
+	pxor	@tweak[2],$inout2
+	pxor	@tweak[3],$inout3
+	pxor	@tweak[4],$inout4
+	pxor	$inout5,$inout5
+
+	call	_aesni_encrypt6
+
+	xorps	@tweak[0],$inout0
+	movdqa	@tweak[5],@tweak[0]
+	xorps	@tweak[1],$inout1
+	xorps	@tweak[2],$inout2
+	movdqu	$inout0,($out)			# store 5 output blocks
+	xorps	@tweak[3],$inout3
+	movdqu	$inout1,16*1($out)
+	xorps	@tweak[4],$inout4
+	movdqu	$inout2,16*2($out)
+	movdqu	$inout3,16*3($out)
+	movdqu	$inout4,16*4($out)
+	lea	16*5($out),$out			# $out+=5*16
+	jmp	.Lxts_enc_done
+
+.align	16
+.Lxts_enc_one:
+	movups	($inp),$inout0
+	lea	16*1($inp),$inp			# inp+=1*16
+	xorps	@tweak[0],$inout0
+___
+	&aesni_generate1("enc",$key,$rounds);
+$code.=<<___;
+	xorps	@tweak[0],$inout0
+	movdqa	@tweak[1],@tweak[0]
+	movups	$inout0,($out)			# store one output block
+	lea	16*1($out),$out			# $out+=1*16
+	jmp	.Lxts_enc_done
+
+.align	16
+.Lxts_enc_two:
+	movups	($inp),$inout0
+	movups	16($inp),$inout1
+	lea	32($inp),$inp			# $inp+=2*16
+	xorps	@tweak[0],$inout0
+	xorps	@tweak[1],$inout1
+
+	call	_aesni_encrypt2
+
+	xorps	@tweak[0],$inout0
+	movdqa	@tweak[2],@tweak[0]
+	xorps	@tweak[1],$inout1
+	movups	$inout0,($out)			# store 2 output blocks
+	movups	$inout1,16*1($out)
+	lea	16*2($out),$out			# $out+=2*16
+	jmp	.Lxts_enc_done
+
+.align	16
+.Lxts_enc_three:
+	movups	($inp),$inout0
+	movups	16*1($inp),$inout1
+	movups	16*2($inp),$inout2
+	lea	16*3($inp),$inp			# $inp+=3*16
+	xorps	@tweak[0],$inout0
+	xorps	@tweak[1],$inout1
+	xorps	@tweak[2],$inout2
+
+	call	_aesni_encrypt3
+
+	xorps	@tweak[0],$inout0
+	movdqa	@tweak[3],@tweak[0]
+	xorps	@tweak[1],$inout1
+	xorps	@tweak[2],$inout2
+	movups	$inout0,($out)			# store 3 output blocks
+	movups	$inout1,16*1($out)
+	movups	$inout2,16*2($out)
+	lea	16*3($out),$out			# $out+=3*16
+	jmp	.Lxts_enc_done
+
+.align	16
+.Lxts_enc_four:
+	movups	($inp),$inout0
+	movups	16*1($inp),$inout1
+	movups	16*2($inp),$inout2
+	xorps	@tweak[0],$inout0
+	movups	16*3($inp),$inout3
+	lea	16*4($inp),$inp			# $inp+=4*16
+	xorps	@tweak[1],$inout1
+	xorps	@tweak[2],$inout2
+	xorps	@tweak[3],$inout3
+
+	call	_aesni_encrypt4
+
+	pxor	@tweak[0],$inout0
+	movdqa	@tweak[4],@tweak[0]
+	pxor	@tweak[1],$inout1
+	pxor	@tweak[2],$inout2
+	movdqu	$inout0,($out)			# store 4 output blocks
+	pxor	@tweak[3],$inout3
+	movdqu	$inout1,16*1($out)
+	movdqu	$inout2,16*2($out)
+	movdqu	$inout3,16*3($out)
+	lea	16*4($out),$out			# $out+=4*16
+	jmp	.Lxts_enc_done
+
+.align	16
+.Lxts_enc_done:
+	and	\$15,$len_			# see if $len%16 is 0
+	jz	.Lxts_enc_ret
+	mov	$len_,$len
+
+.Lxts_enc_steal:
+	movzb	($inp),%eax			# borrow $rounds ...
+	movzb	-16($out),%ecx			# ... and $key
+	lea	1($inp),$inp
+	mov	%al,-16($out)
+	mov	%cl,0($out)
+	lea	1($out),$out
+	sub	\$1,$len
+	jnz	.Lxts_enc_steal
+
+	sub	$len_,$out			# rewind $out
+	mov	$key_,$key			# restore $key
+	mov	$rnds_,$rounds			# restore $rounds
+
+	movups	-16($out),$inout0
+	xorps	@tweak[0],$inout0
+___
+	&aesni_generate1("enc",$key,$rounds);
+$code.=<<___;
+	xorps	@tweak[0],$inout0
+	movups	$inout0,-16($out)
+
+.Lxts_enc_ret:
+	xorps	%xmm0,%xmm0			# clear register bank
+	pxor	%xmm1,%xmm1
+	pxor	%xmm2,%xmm2
+	pxor	%xmm3,%xmm3
+	pxor	%xmm4,%xmm4
+	pxor	%xmm5,%xmm5
+___
+$code.=<<___ if (!$win64);
+	pxor	%xmm6,%xmm6
+	pxor	%xmm7,%xmm7
+	movaps	%xmm0,0x00(%rsp)		# clear stack
+	pxor	%xmm8,%xmm8
+	movaps	%xmm0,0x10(%rsp)
+	pxor	%xmm9,%xmm9
+	movaps	%xmm0,0x20(%rsp)
+	pxor	%xmm10,%xmm10
+	movaps	%xmm0,0x30(%rsp)
+	pxor	%xmm11,%xmm11
+	movaps	%xmm0,0x40(%rsp)
+	pxor	%xmm12,%xmm12
+	movaps	%xmm0,0x50(%rsp)
+	pxor	%xmm13,%xmm13
+	movaps	%xmm0,0x60(%rsp)
+	pxor	%xmm14,%xmm14
+	pxor	%xmm15,%xmm15
+___
+$code.=<<___ if ($win64);
+	movaps	-0xa8(%r11),%xmm6
+	movaps	%xmm0,-0xa8(%r11)		# clear stack
+	movaps	-0x98(%r11),%xmm7
+	movaps	%xmm0,-0x98(%r11)
+	movaps	-0x88(%r11),%xmm8
+	movaps	%xmm0,-0x88(%r11)
+	movaps	-0x78(%r11),%xmm9
+	movaps	%xmm0,-0x78(%r11)
+	movaps	-0x68(%r11),%xmm10
+	movaps	%xmm0,-0x68(%r11)
+	movaps	-0x58(%r11),%xmm11
+	movaps	%xmm0,-0x58(%r11)
+	movaps	-0x48(%r11),%xmm12
+	movaps	%xmm0,-0x48(%r11)
+	movaps	-0x38(%r11),%xmm13
+	movaps	%xmm0,-0x38(%r11)
+	movaps	-0x28(%r11),%xmm14
+	movaps	%xmm0,-0x28(%r11)
+	movaps	-0x18(%r11),%xmm15
+	movaps	%xmm0,-0x18(%r11)
+	movaps	%xmm0,0x00(%rsp)
+	movaps	%xmm0,0x10(%rsp)
+	movaps	%xmm0,0x20(%rsp)
+	movaps	%xmm0,0x30(%rsp)
+	movaps	%xmm0,0x40(%rsp)
+	movaps	%xmm0,0x50(%rsp)
+	movaps	%xmm0,0x60(%rsp)
+___
+$code.=<<___;
+	mov	-8(%r11),%rbp
+.cfi_restore	%rbp
+	lea	(%r11),%rsp
+.cfi_def_cfa_register	%rsp
+.Lxts_enc_epilogue:
+	ret
+.cfi_endproc
+.size	aesni_xts_encrypt,.-aesni_xts_encrypt
+___
+
+$code.=<<___;
+.globl	aesni_xts_decrypt
+.type	aesni_xts_decrypt,\@function,6
+.align	16
+aesni_xts_decrypt:
+.cfi_startproc
+	lea	(%rsp),%r11			# frame pointer
+.cfi_def_cfa_register	%r11
+	push	%rbp
+.cfi_push	%rbp
+	sub	\$$frame_size,%rsp
+	and	\$-16,%rsp	# Linux kernel stack can be incorrectly seeded
+___
+$code.=<<___ if ($win64);
+	movaps	%xmm6,-0xa8(%r11)		# offload everything
+	movaps	%xmm7,-0x98(%r11)
+	movaps	%xmm8,-0x88(%r11)
+	movaps	%xmm9,-0x78(%r11)
+	movaps	%xmm10,-0x68(%r11)
+	movaps	%xmm11,-0x58(%r11)
+	movaps	%xmm12,-0x48(%r11)
+	movaps	%xmm13,-0x38(%r11)
+	movaps	%xmm14,-0x28(%r11)
+	movaps	%xmm15,-0x18(%r11)
+.Lxts_dec_body:
+___
+$code.=<<___;
+	movups	($ivp),$inout0			# load clear-text tweak
+	mov	240($key2),$rounds		# key2->rounds
+	mov	240($key),$rnds_		# key1->rounds
+___
+	# generate the tweak
+	&aesni_generate1("enc",$key2,$rounds,$inout0);
+$code.=<<___;
+	xor	%eax,%eax			# if ($len%16) len-=16;
+	test	\$15,$len
+	setnz	%al
+	shl	\$4,%rax
+	sub	%rax,$len
+
+	$movkey	($key),$rndkey0			# zero round key
+	mov	$key,$key_			# backup $key
+	mov	$rnds_,$rounds			# backup $rounds
+	shl	\$4,$rnds_
+	mov	$len,$len_			# backup $len
+	and	\$-16,$len
+
+	$movkey	16($key,$rnds_),$rndkey1	# last round key
+
+	movdqa	.Lxts_magic(%rip),$twmask
+	movdqa	$inout0,@tweak[5]
+	pshufd	\$0x5f,$inout0,$twres
+	pxor	$rndkey0,$rndkey1
+___
+    for ($i=0;$i<4;$i++) {
+    $code.=<<___;
+	movdqa	$twres,$twtmp
+	paddd	$twres,$twres
+	movdqa	@tweak[5],@tweak[$i]
+	psrad	\$31,$twtmp			# broadcast upper bits
+	paddq	@tweak[5],@tweak[5]
+	pand	$twmask,$twtmp
+	pxor	$rndkey0,@tweak[$i]
+	pxor	$twtmp,@tweak[5]
+___
+    }
+$code.=<<___;
+	movdqa	@tweak[5],@tweak[4]
+	psrad	\$31,$twres
+	paddq	@tweak[5],@tweak[5]
+	pand	$twmask,$twres
+	pxor	$rndkey0,@tweak[4]
+	pxor	$twres,@tweak[5]
+	movaps	$rndkey1,0x60(%rsp)		# save round[0]^round[last]
+
+	sub	\$16*6,$len
+	jc	.Lxts_dec_short			# if $len-=6*16 borrowed
+
+	mov	\$16+96,$rounds
+	lea	32($key_,$rnds_),$key		# end of key schedule
+	sub	%r10,%rax			# twisted $rounds
+	$movkey	16($key_),$rndkey1
+	mov	%rax,%r10			# backup twisted $rounds
+	lea	.Lxts_magic(%rip),%r8
+	jmp	.Lxts_dec_grandloop
+
+.align	32
+.Lxts_dec_grandloop:
+	movdqu	`16*0`($inp),$inout0		# load input
+	movdqa	$rndkey0,$twmask
+	movdqu	`16*1`($inp),$inout1
+	pxor	@tweak[0],$inout0		# intput^=tweak^round[0]
+	movdqu	`16*2`($inp),$inout2
+	pxor	@tweak[1],$inout1
+	 aesdec		$rndkey1,$inout0
+	movdqu	`16*3`($inp),$inout3
+	pxor	@tweak[2],$inout2
+	 aesdec		$rndkey1,$inout1
+	movdqu	`16*4`($inp),$inout4
+	pxor	@tweak[3],$inout3
+	 aesdec		$rndkey1,$inout2
+	movdqu	`16*5`($inp),$inout5
+	pxor	@tweak[5],$twmask		# round[0]^=tweak[5]
+	 movdqa	0x60(%rsp),$twres		# load round[0]^round[last]
+	pxor	@tweak[4],$inout4
+	 aesdec		$rndkey1,$inout3
+	$movkey	32($key_),$rndkey0
+	lea	`16*6`($inp),$inp
+	pxor	$twmask,$inout5
+
+	 pxor	$twres,@tweak[0]		# calculate tweaks^round[last]
+	aesdec		$rndkey1,$inout4
+	 pxor	$twres,@tweak[1]
+	 movdqa	@tweak[0],`16*0`(%rsp)		# put aside tweaks^last round key
+	aesdec		$rndkey1,$inout5
+	$movkey		48($key_),$rndkey1
+	 pxor	$twres,@tweak[2]
+
+	aesdec		$rndkey0,$inout0
+	 pxor	$twres,@tweak[3]
+	 movdqa	@tweak[1],`16*1`(%rsp)
+	aesdec		$rndkey0,$inout1
+	 pxor	$twres,@tweak[4]
+	 movdqa	@tweak[2],`16*2`(%rsp)
+	aesdec		$rndkey0,$inout2
+	aesdec		$rndkey0,$inout3
+	 pxor	$twres,$twmask
+	 movdqa	@tweak[4],`16*4`(%rsp)
+	aesdec		$rndkey0,$inout4
+	aesdec		$rndkey0,$inout5
+	$movkey		64($key_),$rndkey0
+	 movdqa	$twmask,`16*5`(%rsp)
+	pshufd	\$0x5f,@tweak[5],$twres
+	jmp	.Lxts_dec_loop6
+.align	32
+.Lxts_dec_loop6:
+	aesdec		$rndkey1,$inout0
+	aesdec		$rndkey1,$inout1
+	aesdec		$rndkey1,$inout2
+	aesdec		$rndkey1,$inout3
+	aesdec		$rndkey1,$inout4
+	aesdec		$rndkey1,$inout5
+	$movkey		-64($key,%rax),$rndkey1
+	add		\$32,%rax
+
+	aesdec		$rndkey0,$inout0
+	aesdec		$rndkey0,$inout1
+	aesdec		$rndkey0,$inout2
+	aesdec		$rndkey0,$inout3
+	aesdec		$rndkey0,$inout4
+	aesdec		$rndkey0,$inout5
+	$movkey		-80($key,%rax),$rndkey0
+	jnz		.Lxts_dec_loop6
+
+	movdqa	(%r8),$twmask			# start calculating next tweak
+	movdqa	$twres,$twtmp
+	paddd	$twres,$twres
+	 aesdec		$rndkey1,$inout0
+	paddq	@tweak[5],@tweak[5]
+	psrad	\$31,$twtmp
+	 aesdec		$rndkey1,$inout1
+	pand	$twmask,$twtmp
+	$movkey	($key_),@tweak[0]		# load round[0]
+	 aesdec		$rndkey1,$inout2
+	 aesdec		$rndkey1,$inout3
+	 aesdec		$rndkey1,$inout4
+	pxor	$twtmp,@tweak[5]
+	movaps	@tweak[0],@tweak[1]		# copy round[0]
+	 aesdec		$rndkey1,$inout5
+	 $movkey	-64($key),$rndkey1
+
+	movdqa	$twres,$twtmp
+	 aesdec		$rndkey0,$inout0
+	paddd	$twres,$twres
+	pxor	@tweak[5],@tweak[0]
+	 aesdec		$rndkey0,$inout1
+	psrad	\$31,$twtmp
+	paddq	@tweak[5],@tweak[5]
+	 aesdec		$rndkey0,$inout2
+	 aesdec		$rndkey0,$inout3
+	pand	$twmask,$twtmp
+	movaps	@tweak[1],@tweak[2]
+	 aesdec		$rndkey0,$inout4
+	pxor	$twtmp,@tweak[5]
+	movdqa	$twres,$twtmp
+	 aesdec		$rndkey0,$inout5
+	 $movkey	-48($key),$rndkey0
+
+	paddd	$twres,$twres
+	 aesdec		$rndkey1,$inout0
+	pxor	@tweak[5],@tweak[1]
+	psrad	\$31,$twtmp
+	 aesdec		$rndkey1,$inout1
+	paddq	@tweak[5],@tweak[5]
+	pand	$twmask,$twtmp
+	 aesdec		$rndkey1,$inout2
+	 aesdec		$rndkey1,$inout3
+	 movdqa	@tweak[3],`16*3`(%rsp)
+	pxor	$twtmp,@tweak[5]
+	 aesdec		$rndkey1,$inout4
+	movaps	@tweak[2],@tweak[3]
+	movdqa	$twres,$twtmp
+	 aesdec		$rndkey1,$inout5
+	 $movkey	-32($key),$rndkey1
+
+	paddd	$twres,$twres
+	 aesdec		$rndkey0,$inout0
+	pxor	@tweak[5],@tweak[2]
+	psrad	\$31,$twtmp
+	 aesdec		$rndkey0,$inout1
+	paddq	@tweak[5],@tweak[5]
+	pand	$twmask,$twtmp
+	 aesdec		$rndkey0,$inout2
+	 aesdec		$rndkey0,$inout3
+	 aesdec		$rndkey0,$inout4
+	pxor	$twtmp,@tweak[5]
+	movaps	@tweak[3],@tweak[4]
+	 aesdec		$rndkey0,$inout5
+
+	movdqa	$twres,$rndkey0
+	paddd	$twres,$twres
+	 aesdec		$rndkey1,$inout0
+	pxor	@tweak[5],@tweak[3]
+	psrad	\$31,$rndkey0
+	 aesdec		$rndkey1,$inout1
+	paddq	@tweak[5],@tweak[5]
+	pand	$twmask,$rndkey0
+	 aesdec		$rndkey1,$inout2
+	 aesdec		$rndkey1,$inout3
+	pxor	$rndkey0,@tweak[5]
+	$movkey		($key_),$rndkey0
+	 aesdec		$rndkey1,$inout4
+	 aesdec		$rndkey1,$inout5
+	$movkey		16($key_),$rndkey1
+
+	pxor	@tweak[5],@tweak[4]
+	 aesdeclast	`16*0`(%rsp),$inout0
+	psrad	\$31,$twres
+	paddq	@tweak[5],@tweak[5]
+	 aesdeclast	`16*1`(%rsp),$inout1
+	 aesdeclast	`16*2`(%rsp),$inout2
+	pand	$twmask,$twres
+	mov	%r10,%rax			# restore $rounds
+	 aesdeclast	`16*3`(%rsp),$inout3
+	 aesdeclast	`16*4`(%rsp),$inout4
+	 aesdeclast	`16*5`(%rsp),$inout5
+	pxor	$twres,@tweak[5]
+
+	lea	`16*6`($out),$out		# $out+=6*16
+	movups	$inout0,`-16*6`($out)		# store 6 output blocks
+	movups	$inout1,`-16*5`($out)
+	movups	$inout2,`-16*4`($out)
+	movups	$inout3,`-16*3`($out)
+	movups	$inout4,`-16*2`($out)
+	movups	$inout5,`-16*1`($out)
+	sub	\$16*6,$len
+	jnc	.Lxts_dec_grandloop		# loop if $len-=6*16 didn't borrow
+
+	mov	\$16+96,$rounds
+	sub	$rnds_,$rounds
+	mov	$key_,$key			# restore $key
+	shr	\$4,$rounds			# restore original value
+
+.Lxts_dec_short:
+	# at the point @tweak[0..5] are populated with tweak values
+	mov	$rounds,$rnds_			# backup $rounds
+	pxor	$rndkey0,@tweak[0]
+	pxor	$rndkey0,@tweak[1]
+	add	\$16*6,$len			# restore real remaining $len
+	jz	.Lxts_dec_done			# done if ($len==0)
+
+	pxor	$rndkey0,@tweak[2]
+	cmp	\$0x20,$len
+	jb	.Lxts_dec_one			# $len is 1*16
+	pxor	$rndkey0,@tweak[3]
+	je	.Lxts_dec_two			# $len is 2*16
+
+	pxor	$rndkey0,@tweak[4]
+	cmp	\$0x40,$len
+	jb	.Lxts_dec_three			# $len is 3*16
+	je	.Lxts_dec_four			# $len is 4*16
+
+	movdqu	($inp),$inout0			# $len is 5*16
+	movdqu	16*1($inp),$inout1
+	movdqu	16*2($inp),$inout2
+	pxor	@tweak[0],$inout0
+	movdqu	16*3($inp),$inout3
+	pxor	@tweak[1],$inout1
+	movdqu	16*4($inp),$inout4
+	lea	16*5($inp),$inp			# $inp+=5*16
+	pxor	@tweak[2],$inout2
+	pxor	@tweak[3],$inout3
+	pxor	@tweak[4],$inout4
+
+	call	_aesni_decrypt6
+
+	xorps	@tweak[0],$inout0
+	xorps	@tweak[1],$inout1
+	xorps	@tweak[2],$inout2
+	movdqu	$inout0,($out)			# store 5 output blocks
+	xorps	@tweak[3],$inout3
+	movdqu	$inout1,16*1($out)
+	xorps	@tweak[4],$inout4
+	movdqu	$inout2,16*2($out)
+	 pxor		$twtmp,$twtmp
+	movdqu	$inout3,16*3($out)
+	 pcmpgtd	@tweak[5],$twtmp
+	movdqu	$inout4,16*4($out)
+	lea	16*5($out),$out			# $out+=5*16
+	 pshufd		\$0x13,$twtmp,@tweak[1]	# $twres
+	and	\$15,$len_
+	jz	.Lxts_dec_ret
+
+	movdqa	@tweak[5],@tweak[0]
+	paddq	@tweak[5],@tweak[5]		# psllq 1,$tweak
+	pand	$twmask,@tweak[1]		# isolate carry and residue
+	pxor	@tweak[5],@tweak[1]
+	jmp	.Lxts_dec_done2
+
+.align	16
+.Lxts_dec_one:
+	movups	($inp),$inout0
+	lea	16*1($inp),$inp			# $inp+=1*16
+	xorps	@tweak[0],$inout0
+___
+	&aesni_generate1("dec",$key,$rounds);
+$code.=<<___;
+	xorps	@tweak[0],$inout0
+	movdqa	@tweak[1],@tweak[0]
+	movups	$inout0,($out)			# store one output block
+	movdqa	@tweak[2],@tweak[1]
+	lea	16*1($out),$out			# $out+=1*16
+	jmp	.Lxts_dec_done
+
+.align	16
+.Lxts_dec_two:
+	movups	($inp),$inout0
+	movups	16($inp),$inout1
+	lea	32($inp),$inp			# $inp+=2*16
+	xorps	@tweak[0],$inout0
+	xorps	@tweak[1],$inout1
+
+	call	_aesni_decrypt2
+
+	xorps	@tweak[0],$inout0
+	movdqa	@tweak[2],@tweak[0]
+	xorps	@tweak[1],$inout1
+	movdqa	@tweak[3],@tweak[1]
+	movups	$inout0,($out)			# store 2 output blocks
+	movups	$inout1,16*1($out)
+	lea	16*2($out),$out			# $out+=2*16
+	jmp	.Lxts_dec_done
+
+.align	16
+.Lxts_dec_three:
+	movups	($inp),$inout0
+	movups	16*1($inp),$inout1
+	movups	16*2($inp),$inout2
+	lea	16*3($inp),$inp			# $inp+=3*16
+	xorps	@tweak[0],$inout0
+	xorps	@tweak[1],$inout1
+	xorps	@tweak[2],$inout2
+
+	call	_aesni_decrypt3
+
+	xorps	@tweak[0],$inout0
+	movdqa	@tweak[3],@tweak[0]
+	xorps	@tweak[1],$inout1
+	movdqa	@tweak[4],@tweak[1]
+	xorps	@tweak[2],$inout2
+	movups	$inout0,($out)			# store 3 output blocks
+	movups	$inout1,16*1($out)
+	movups	$inout2,16*2($out)
+	lea	16*3($out),$out			# $out+=3*16
+	jmp	.Lxts_dec_done
+
+.align	16
+.Lxts_dec_four:
+	movups	($inp),$inout0
+	movups	16*1($inp),$inout1
+	movups	16*2($inp),$inout2
+	xorps	@tweak[0],$inout0
+	movups	16*3($inp),$inout3
+	lea	16*4($inp),$inp			# $inp+=4*16
+	xorps	@tweak[1],$inout1
+	xorps	@tweak[2],$inout2
+	xorps	@tweak[3],$inout3
+
+	call	_aesni_decrypt4
+
+	pxor	@tweak[0],$inout0
+	movdqa	@tweak[4],@tweak[0]
+	pxor	@tweak[1],$inout1
+	movdqa	@tweak[5],@tweak[1]
+	pxor	@tweak[2],$inout2
+	movdqu	$inout0,($out)			# store 4 output blocks
+	pxor	@tweak[3],$inout3
+	movdqu	$inout1,16*1($out)
+	movdqu	$inout2,16*2($out)
+	movdqu	$inout3,16*3($out)
+	lea	16*4($out),$out			# $out+=4*16
+	jmp	.Lxts_dec_done
+
+.align	16
+.Lxts_dec_done:
+	and	\$15,$len_			# see if $len%16 is 0
+	jz	.Lxts_dec_ret
+.Lxts_dec_done2:
+	mov	$len_,$len
+	mov	$key_,$key			# restore $key
+	mov	$rnds_,$rounds			# restore $rounds
+
+	movups	($inp),$inout0
+	xorps	@tweak[1],$inout0
+___
+	&aesni_generate1("dec",$key,$rounds);
+$code.=<<___;
+	xorps	@tweak[1],$inout0
+	movups	$inout0,($out)
+
+.Lxts_dec_steal:
+	movzb	16($inp),%eax			# borrow $rounds ...
+	movzb	($out),%ecx			# ... and $key
+	lea	1($inp),$inp
+	mov	%al,($out)
+	mov	%cl,16($out)
+	lea	1($out),$out
+	sub	\$1,$len
+	jnz	.Lxts_dec_steal
+
+	sub	$len_,$out			# rewind $out
+	mov	$key_,$key			# restore $key
+	mov	$rnds_,$rounds			# restore $rounds
+
+	movups	($out),$inout0
+	xorps	@tweak[0],$inout0
+___
+	&aesni_generate1("dec",$key,$rounds);
+$code.=<<___;
+	xorps	@tweak[0],$inout0
+	movups	$inout0,($out)
+
+.Lxts_dec_ret:
+	xorps	%xmm0,%xmm0			# clear register bank
+	pxor	%xmm1,%xmm1
+	pxor	%xmm2,%xmm2
+	pxor	%xmm3,%xmm3
+	pxor	%xmm4,%xmm4
+	pxor	%xmm5,%xmm5
+___
+$code.=<<___ if (!$win64);
+	pxor	%xmm6,%xmm6
+	pxor	%xmm7,%xmm7
+	movaps	%xmm0,0x00(%rsp)		# clear stack
+	pxor	%xmm8,%xmm8
+	movaps	%xmm0,0x10(%rsp)
+	pxor	%xmm9,%xmm9
+	movaps	%xmm0,0x20(%rsp)
+	pxor	%xmm10,%xmm10
+	movaps	%xmm0,0x30(%rsp)
+	pxor	%xmm11,%xmm11
+	movaps	%xmm0,0x40(%rsp)
+	pxor	%xmm12,%xmm12
+	movaps	%xmm0,0x50(%rsp)
+	pxor	%xmm13,%xmm13
+	movaps	%xmm0,0x60(%rsp)
+	pxor	%xmm14,%xmm14
+	pxor	%xmm15,%xmm15
+___
+$code.=<<___ if ($win64);
+	movaps	-0xa8(%r11),%xmm6
+	movaps	%xmm0,-0xa8(%r11)		# clear stack
+	movaps	-0x98(%r11),%xmm7
+	movaps	%xmm0,-0x98(%r11)
+	movaps	-0x88(%r11),%xmm8
+	movaps	%xmm0,-0x88(%r11)
+	movaps	-0x78(%r11),%xmm9
+	movaps	%xmm0,-0x78(%r11)
+	movaps	-0x68(%r11),%xmm10
+	movaps	%xmm0,-0x68(%r11)
+	movaps	-0x58(%r11),%xmm11
+	movaps	%xmm0,-0x58(%r11)
+	movaps	-0x48(%r11),%xmm12
+	movaps	%xmm0,-0x48(%r11)
+	movaps	-0x38(%r11),%xmm13
+	movaps	%xmm0,-0x38(%r11)
+	movaps	-0x28(%r11),%xmm14
+	movaps	%xmm0,-0x28(%r11)
+	movaps	-0x18(%r11),%xmm15
+	movaps	%xmm0,-0x18(%r11)
+	movaps	%xmm0,0x00(%rsp)
+	movaps	%xmm0,0x10(%rsp)
+	movaps	%xmm0,0x20(%rsp)
+	movaps	%xmm0,0x30(%rsp)
+	movaps	%xmm0,0x40(%rsp)
+	movaps	%xmm0,0x50(%rsp)
+	movaps	%xmm0,0x60(%rsp)
+___
+$code.=<<___;
+	mov	-8(%r11),%rbp
+.cfi_restore	%rbp
+	lea	(%r11),%rsp
+.cfi_def_cfa_register	%rsp
+.Lxts_dec_epilogue:
+	ret
+.cfi_endproc
+.size	aesni_xts_decrypt,.-aesni_xts_decrypt
+___
+}
+
+######################################################################
+# void aesni_ocb_[en|de]crypt(const char *inp, char *out, size_t blocks,
+#	const AES_KEY *key, unsigned int start_block_num,
+#	unsigned char offset_i[16], const unsigned char L_[][16],
+#	unsigned char checksum[16]);
+#
+{
+my @offset=map("%xmm$_",(10..15));
+my ($checksum,$rndkey0l)=("%xmm8","%xmm9");
+my ($block_num,$offset_p)=("%r8","%r9");		# 5th and 6th arguments
+my ($L_p,$checksum_p) = ("%rbx","%rbp");
+my ($i1,$i3,$i5) = ("%r12","%r13","%r14");
+my $seventh_arg = $win64 ? 56 : 8;
+my $blocks = $len;
+
+$code.=<<___;
+.globl	aesni_ocb_encrypt
+.type	aesni_ocb_encrypt,\@function,6
+.align	32
+aesni_ocb_encrypt:
+.cfi_startproc
+	lea	(%rsp),%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+___
+$code.=<<___ if ($win64);
+	lea	-0xa0(%rsp),%rsp
+	movaps	%xmm6,0x00(%rsp)		# offload everything
+	movaps	%xmm7,0x10(%rsp)
+	movaps	%xmm8,0x20(%rsp)
+	movaps	%xmm9,0x30(%rsp)
+	movaps	%xmm10,0x40(%rsp)
+	movaps	%xmm11,0x50(%rsp)
+	movaps	%xmm12,0x60(%rsp)
+	movaps	%xmm13,0x70(%rsp)
+	movaps	%xmm14,0x80(%rsp)
+	movaps	%xmm15,0x90(%rsp)
+.Locb_enc_body:
+___
+$code.=<<___;
+	mov	$seventh_arg(%rax),$L_p		# 7th argument
+	mov	$seventh_arg+8(%rax),$checksum_p# 8th argument
+
+	mov	240($key),$rnds_
+	mov	$key,$key_
+	shl	\$4,$rnds_
+	$movkey	($key),$rndkey0l		# round[0]
+	$movkey	16($key,$rnds_),$rndkey1	# round[last]
+
+	movdqu	($offset_p),@offset[5]		# load last offset_i
+	pxor	$rndkey1,$rndkey0l		# round[0] ^ round[last]
+	pxor	$rndkey1,@offset[5]		# offset_i ^ round[last]
+
+	mov	\$16+32,$rounds
+	lea	32($key_,$rnds_),$key
+	$movkey	16($key_),$rndkey1		# round[1]
+	sub	%r10,%rax			# twisted $rounds
+	mov	%rax,%r10			# backup twisted $rounds
+
+	movdqu	($L_p),@offset[0]		# L_0 for all odd-numbered blocks
+	movdqu	($checksum_p),$checksum		# load checksum
+
+	test	\$1,$block_num			# is first block number odd?
+	jnz	.Locb_enc_odd
+
+	bsf	$block_num,$i1
+	add	\$1,$block_num
+	shl	\$4,$i1
+	movdqu	($L_p,$i1),$inout5		# borrow
+	movdqu	($inp),$inout0
+	lea	16($inp),$inp
+
+	call	__ocb_encrypt1
+
+	movdqa	$inout5,@offset[5]
+	movups	$inout0,($out)
+	lea	16($out),$out
+	sub	\$1,$blocks
+	jz	.Locb_enc_done
+
+.Locb_enc_odd:
+	lea	1($block_num),$i1		# even-numbered blocks
+	lea	3($block_num),$i3
+	lea	5($block_num),$i5
+	lea	6($block_num),$block_num
+	bsf	$i1,$i1				# ntz(block)
+	bsf	$i3,$i3
+	bsf	$i5,$i5
+	shl	\$4,$i1				# ntz(block) -> table offset
+	shl	\$4,$i3
+	shl	\$4,$i5
+
+	sub	\$6,$blocks
+	jc	.Locb_enc_short
+	jmp	.Locb_enc_grandloop
+
+.align	32
+.Locb_enc_grandloop:
+	movdqu	`16*0`($inp),$inout0		# load input
+	movdqu	`16*1`($inp),$inout1
+	movdqu	`16*2`($inp),$inout2
+	movdqu	`16*3`($inp),$inout3
+	movdqu	`16*4`($inp),$inout4
+	movdqu	`16*5`($inp),$inout5
+	lea	`16*6`($inp),$inp
+
+	call	__ocb_encrypt6
+
+	movups	$inout0,`16*0`($out)		# store output
+	movups	$inout1,`16*1`($out)
+	movups	$inout2,`16*2`($out)
+	movups	$inout3,`16*3`($out)
+	movups	$inout4,`16*4`($out)
+	movups	$inout5,`16*5`($out)
+	lea	`16*6`($out),$out
+	sub	\$6,$blocks
+	jnc	.Locb_enc_grandloop
+
+.Locb_enc_short:
+	add	\$6,$blocks
+	jz	.Locb_enc_done
+
+	movdqu	`16*0`($inp),$inout0
+	cmp	\$2,$blocks
+	jb	.Locb_enc_one
+	movdqu	`16*1`($inp),$inout1
+	je	.Locb_enc_two
+
+	movdqu	`16*2`($inp),$inout2
+	cmp	\$4,$blocks
+	jb	.Locb_enc_three
+	movdqu	`16*3`($inp),$inout3
+	je	.Locb_enc_four
+
+	movdqu	`16*4`($inp),$inout4
+	pxor	$inout5,$inout5
+
+	call	__ocb_encrypt6
+
+	movdqa	@offset[4],@offset[5]
+	movups	$inout0,`16*0`($out)
+	movups	$inout1,`16*1`($out)
+	movups	$inout2,`16*2`($out)
+	movups	$inout3,`16*3`($out)
+	movups	$inout4,`16*4`($out)
+
+	jmp	.Locb_enc_done
+
+.align	16
+.Locb_enc_one:
+	movdqa	@offset[0],$inout5		# borrow
+
+	call	__ocb_encrypt1
+
+	movdqa	$inout5,@offset[5]
+	movups	$inout0,`16*0`($out)
+	jmp	.Locb_enc_done
+
+.align	16
+.Locb_enc_two:
+	pxor	$inout2,$inout2
+	pxor	$inout3,$inout3
+
+	call	__ocb_encrypt4
+
+	movdqa	@offset[1],@offset[5]
+	movups	$inout0,`16*0`($out)
+	movups	$inout1,`16*1`($out)
+
+	jmp	.Locb_enc_done
+
+.align	16
+.Locb_enc_three:
+	pxor	$inout3,$inout3
+
+	call	__ocb_encrypt4
+
+	movdqa	@offset[2],@offset[5]
+	movups	$inout0,`16*0`($out)
+	movups	$inout1,`16*1`($out)
+	movups	$inout2,`16*2`($out)
+
+	jmp	.Locb_enc_done
+
+.align	16
+.Locb_enc_four:
+	call	__ocb_encrypt4
+
+	movdqa	@offset[3],@offset[5]
+	movups	$inout0,`16*0`($out)
+	movups	$inout1,`16*1`($out)
+	movups	$inout2,`16*2`($out)
+	movups	$inout3,`16*3`($out)
+
+.Locb_enc_done:
+	pxor	$rndkey0,@offset[5]		# "remove" round[last]
+	movdqu	$checksum,($checksum_p)		# store checksum
+	movdqu	@offset[5],($offset_p)		# store last offset_i
+
+	xorps	%xmm0,%xmm0			# clear register bank
+	pxor	%xmm1,%xmm1
+	pxor	%xmm2,%xmm2
+	pxor	%xmm3,%xmm3
+	pxor	%xmm4,%xmm4
+	pxor	%xmm5,%xmm5
+___
+$code.=<<___ if (!$win64);
+	pxor	%xmm6,%xmm6
+	pxor	%xmm7,%xmm7
+	pxor	%xmm8,%xmm8
+	pxor	%xmm9,%xmm9
+	pxor	%xmm10,%xmm10
+	pxor	%xmm11,%xmm11
+	pxor	%xmm12,%xmm12
+	pxor	%xmm13,%xmm13
+	pxor	%xmm14,%xmm14
+	pxor	%xmm15,%xmm15
+	lea	0x28(%rsp),%rax
+.cfi_def_cfa	%rax,8
+___
+$code.=<<___ if ($win64);
+	movaps	0x00(%rsp),%xmm6
+	movaps	%xmm0,0x00(%rsp)		# clear stack
+	movaps	0x10(%rsp),%xmm7
+	movaps	%xmm0,0x10(%rsp)
+	movaps	0x20(%rsp),%xmm8
+	movaps	%xmm0,0x20(%rsp)
+	movaps	0x30(%rsp),%xmm9
+	movaps	%xmm0,0x30(%rsp)
+	movaps	0x40(%rsp),%xmm10
+	movaps	%xmm0,0x40(%rsp)
+	movaps	0x50(%rsp),%xmm11
+	movaps	%xmm0,0x50(%rsp)
+	movaps	0x60(%rsp),%xmm12
+	movaps	%xmm0,0x60(%rsp)
+	movaps	0x70(%rsp),%xmm13
+	movaps	%xmm0,0x70(%rsp)
+	movaps	0x80(%rsp),%xmm14
+	movaps	%xmm0,0x80(%rsp)
+	movaps	0x90(%rsp),%xmm15
+	movaps	%xmm0,0x90(%rsp)
+	lea	0xa0+0x28(%rsp),%rax
+.Locb_enc_pop:
+___
+$code.=<<___;
+	mov	-40(%rax),%r14
+.cfi_restore	%r14
+	mov	-32(%rax),%r13
+.cfi_restore	%r13
+	mov	-24(%rax),%r12
+.cfi_restore	%r12
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp
+.cfi_def_cfa_register	%rsp
+.Locb_enc_epilogue:
+	ret
+.cfi_endproc
+.size	aesni_ocb_encrypt,.-aesni_ocb_encrypt
+
+.type	__ocb_encrypt6,\@abi-omnipotent
+.align	32
+__ocb_encrypt6:
+	 pxor		$rndkey0l,@offset[5]	# offset_i ^ round[0]
+	 movdqu		($L_p,$i1),@offset[1]
+	 movdqa		@offset[0],@offset[2]
+	 movdqu		($L_p,$i3),@offset[3]
+	 movdqa		@offset[0],@offset[4]
+	 pxor		@offset[5],@offset[0]
+	 movdqu		($L_p,$i5),@offset[5]
+	 pxor		@offset[0],@offset[1]
+	pxor		$inout0,$checksum	# accumulate checksum
+	pxor		@offset[0],$inout0	# input ^ round[0] ^ offset_i
+	 pxor		@offset[1],@offset[2]
+	pxor		$inout1,$checksum
+	pxor		@offset[1],$inout1
+	 pxor		@offset[2],@offset[3]
+	pxor		$inout2,$checksum
+	pxor		@offset[2],$inout2
+	 pxor		@offset[3],@offset[4]
+	pxor		$inout3,$checksum
+	pxor		@offset[3],$inout3
+	 pxor		@offset[4],@offset[5]
+	pxor		$inout4,$checksum
+	pxor		@offset[4],$inout4
+	pxor		$inout5,$checksum
+	pxor		@offset[5],$inout5
+	$movkey		32($key_),$rndkey0
+
+	lea		1($block_num),$i1	# even-numbered blocks
+	lea		3($block_num),$i3
+	lea		5($block_num),$i5
+	add		\$6,$block_num
+	 pxor		$rndkey0l,@offset[0]	# offset_i ^ round[last]
+	bsf		$i1,$i1			# ntz(block)
+	bsf		$i3,$i3
+	bsf		$i5,$i5
+
+	aesenc		$rndkey1,$inout0
+	aesenc		$rndkey1,$inout1
+	aesenc		$rndkey1,$inout2
+	aesenc		$rndkey1,$inout3
+	 pxor		$rndkey0l,@offset[1]
+	 pxor		$rndkey0l,@offset[2]
+	aesenc		$rndkey1,$inout4
+	 pxor		$rndkey0l,@offset[3]
+	 pxor		$rndkey0l,@offset[4]
+	aesenc		$rndkey1,$inout5
+	$movkey		48($key_),$rndkey1
+	 pxor		$rndkey0l,@offset[5]
+
+	aesenc		$rndkey0,$inout0
+	aesenc		$rndkey0,$inout1
+	aesenc		$rndkey0,$inout2
+	aesenc		$rndkey0,$inout3
+	aesenc		$rndkey0,$inout4
+	aesenc		$rndkey0,$inout5
+	$movkey		64($key_),$rndkey0
+	shl		\$4,$i1			# ntz(block) -> table offset
+	shl		\$4,$i3
+	jmp		.Locb_enc_loop6
+
+.align	32
+.Locb_enc_loop6:
+	aesenc		$rndkey1,$inout0
+	aesenc		$rndkey1,$inout1
+	aesenc		$rndkey1,$inout2
+	aesenc		$rndkey1,$inout3
+	aesenc		$rndkey1,$inout4
+	aesenc		$rndkey1,$inout5
+	$movkey		($key,%rax),$rndkey1
+	add		\$32,%rax
+
+	aesenc		$rndkey0,$inout0
+	aesenc		$rndkey0,$inout1
+	aesenc		$rndkey0,$inout2
+	aesenc		$rndkey0,$inout3
+	aesenc		$rndkey0,$inout4
+	aesenc		$rndkey0,$inout5
+	$movkey		-16($key,%rax),$rndkey0
+	jnz		.Locb_enc_loop6
+
+	aesenc		$rndkey1,$inout0
+	aesenc		$rndkey1,$inout1
+	aesenc		$rndkey1,$inout2
+	aesenc		$rndkey1,$inout3
+	aesenc		$rndkey1,$inout4
+	aesenc		$rndkey1,$inout5
+	$movkey		16($key_),$rndkey1
+	shl		\$4,$i5
+
+	aesenclast	@offset[0],$inout0
+	movdqu		($L_p),@offset[0]	# L_0 for all odd-numbered blocks
+	mov		%r10,%rax		# restore twisted rounds
+	aesenclast	@offset[1],$inout1
+	aesenclast	@offset[2],$inout2
+	aesenclast	@offset[3],$inout3
+	aesenclast	@offset[4],$inout4
+	aesenclast	@offset[5],$inout5
+	ret
+.size	__ocb_encrypt6,.-__ocb_encrypt6
+
+.type	__ocb_encrypt4,\@abi-omnipotent
+.align	32
+__ocb_encrypt4:
+	 pxor		$rndkey0l,@offset[5]	# offset_i ^ round[0]
+	 movdqu		($L_p,$i1),@offset[1]
+	 movdqa		@offset[0],@offset[2]
+	 movdqu		($L_p,$i3),@offset[3]
+	 pxor		@offset[5],@offset[0]
+	 pxor		@offset[0],@offset[1]
+	pxor		$inout0,$checksum	# accumulate checksum
+	pxor		@offset[0],$inout0	# input ^ round[0] ^ offset_i
+	 pxor		@offset[1],@offset[2]
+	pxor		$inout1,$checksum
+	pxor		@offset[1],$inout1
+	 pxor		@offset[2],@offset[3]
+	pxor		$inout2,$checksum
+	pxor		@offset[2],$inout2
+	pxor		$inout3,$checksum
+	pxor		@offset[3],$inout3
+	$movkey		32($key_),$rndkey0
+
+	 pxor		$rndkey0l,@offset[0]	# offset_i ^ round[last]
+	 pxor		$rndkey0l,@offset[1]
+	 pxor		$rndkey0l,@offset[2]
+	 pxor		$rndkey0l,@offset[3]
+
+	aesenc		$rndkey1,$inout0
+	aesenc		$rndkey1,$inout1
+	aesenc		$rndkey1,$inout2
+	aesenc		$rndkey1,$inout3
+	$movkey		48($key_),$rndkey1
+
+	aesenc		$rndkey0,$inout0
+	aesenc		$rndkey0,$inout1
+	aesenc		$rndkey0,$inout2
+	aesenc		$rndkey0,$inout3
+	$movkey		64($key_),$rndkey0
+	jmp		.Locb_enc_loop4
+
+.align	32
+.Locb_enc_loop4:
+	aesenc		$rndkey1,$inout0
+	aesenc		$rndkey1,$inout1
+	aesenc		$rndkey1,$inout2
+	aesenc		$rndkey1,$inout3
+	$movkey		($key,%rax),$rndkey1
+	add		\$32,%rax
+
+	aesenc		$rndkey0,$inout0
+	aesenc		$rndkey0,$inout1
+	aesenc		$rndkey0,$inout2
+	aesenc		$rndkey0,$inout3
+	$movkey		-16($key,%rax),$rndkey0
+	jnz		.Locb_enc_loop4
+
+	aesenc		$rndkey1,$inout0
+	aesenc		$rndkey1,$inout1
+	aesenc		$rndkey1,$inout2
+	aesenc		$rndkey1,$inout3
+	$movkey		16($key_),$rndkey1
+	mov		%r10,%rax		# restore twisted rounds
+
+	aesenclast	@offset[0],$inout0
+	aesenclast	@offset[1],$inout1
+	aesenclast	@offset[2],$inout2
+	aesenclast	@offset[3],$inout3
+	ret
+.size	__ocb_encrypt4,.-__ocb_encrypt4
+
+.type	__ocb_encrypt1,\@abi-omnipotent
+.align	32
+__ocb_encrypt1:
+	 pxor		@offset[5],$inout5	# offset_i
+	 pxor		$rndkey0l,$inout5	# offset_i ^ round[0]
+	pxor		$inout0,$checksum	# accumulate checksum
+	pxor		$inout5,$inout0		# input ^ round[0] ^ offset_i
+	$movkey		32($key_),$rndkey0
+
+	aesenc		$rndkey1,$inout0
+	$movkey		48($key_),$rndkey1
+	pxor		$rndkey0l,$inout5	# offset_i ^ round[last]
+
+	aesenc		$rndkey0,$inout0
+	$movkey		64($key_),$rndkey0
+	jmp		.Locb_enc_loop1
+
+.align	32
+.Locb_enc_loop1:
+	aesenc		$rndkey1,$inout0
+	$movkey		($key,%rax),$rndkey1
+	add		\$32,%rax
+
+	aesenc		$rndkey0,$inout0
+	$movkey		-16($key,%rax),$rndkey0
+	jnz		.Locb_enc_loop1
+
+	aesenc		$rndkey1,$inout0
+	$movkey		16($key_),$rndkey1	# redundant in tail
+	mov		%r10,%rax		# restore twisted rounds
+
+	aesenclast	$inout5,$inout0
+	ret
+.size	__ocb_encrypt1,.-__ocb_encrypt1
+
+.globl	aesni_ocb_decrypt
+.type	aesni_ocb_decrypt,\@function,6
+.align	32
+aesni_ocb_decrypt:
+.cfi_startproc
+	lea	(%rsp),%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+___
+$code.=<<___ if ($win64);
+	lea	-0xa0(%rsp),%rsp
+	movaps	%xmm6,0x00(%rsp)		# offload everything
+	movaps	%xmm7,0x10(%rsp)
+	movaps	%xmm8,0x20(%rsp)
+	movaps	%xmm9,0x30(%rsp)
+	movaps	%xmm10,0x40(%rsp)
+	movaps	%xmm11,0x50(%rsp)
+	movaps	%xmm12,0x60(%rsp)
+	movaps	%xmm13,0x70(%rsp)
+	movaps	%xmm14,0x80(%rsp)
+	movaps	%xmm15,0x90(%rsp)
+.Locb_dec_body:
+___
+$code.=<<___;
+	mov	$seventh_arg(%rax),$L_p		# 7th argument
+	mov	$seventh_arg+8(%rax),$checksum_p# 8th argument
+
+	mov	240($key),$rnds_
+	mov	$key,$key_
+	shl	\$4,$rnds_
+	$movkey	($key),$rndkey0l		# round[0]
+	$movkey	16($key,$rnds_),$rndkey1	# round[last]
+
+	movdqu	($offset_p),@offset[5]		# load last offset_i
+	pxor	$rndkey1,$rndkey0l		# round[0] ^ round[last]
+	pxor	$rndkey1,@offset[5]		# offset_i ^ round[last]
+
+	mov	\$16+32,$rounds
+	lea	32($key_,$rnds_),$key
+	$movkey	16($key_),$rndkey1		# round[1]
+	sub	%r10,%rax			# twisted $rounds
+	mov	%rax,%r10			# backup twisted $rounds
+
+	movdqu	($L_p),@offset[0]		# L_0 for all odd-numbered blocks
+	movdqu	($checksum_p),$checksum		# load checksum
+
+	test	\$1,$block_num			# is first block number odd?
+	jnz	.Locb_dec_odd
+
+	bsf	$block_num,$i1
+	add	\$1,$block_num
+	shl	\$4,$i1
+	movdqu	($L_p,$i1),$inout5		# borrow
+	movdqu	($inp),$inout0
+	lea	16($inp),$inp
+
+	call	__ocb_decrypt1
+
+	movdqa	$inout5,@offset[5]
+	movups	$inout0,($out)
+	xorps	$inout0,$checksum		# accumulate checksum
+	lea	16($out),$out
+	sub	\$1,$blocks
+	jz	.Locb_dec_done
+
+.Locb_dec_odd:
+	lea	1($block_num),$i1		# even-numbered blocks
+	lea	3($block_num),$i3
+	lea	5($block_num),$i5
+	lea	6($block_num),$block_num
+	bsf	$i1,$i1				# ntz(block)
+	bsf	$i3,$i3
+	bsf	$i5,$i5
+	shl	\$4,$i1				# ntz(block) -> table offset
+	shl	\$4,$i3
+	shl	\$4,$i5
+
+	sub	\$6,$blocks
+	jc	.Locb_dec_short
+	jmp	.Locb_dec_grandloop
+
+.align	32
+.Locb_dec_grandloop:
+	movdqu	`16*0`($inp),$inout0		# load input
+	movdqu	`16*1`($inp),$inout1
+	movdqu	`16*2`($inp),$inout2
+	movdqu	`16*3`($inp),$inout3
+	movdqu	`16*4`($inp),$inout4
+	movdqu	`16*5`($inp),$inout5
+	lea	`16*6`($inp),$inp
+
+	call	__ocb_decrypt6
+
+	movups	$inout0,`16*0`($out)		# store output
+	pxor	$inout0,$checksum		# accumulate checksum
+	movups	$inout1,`16*1`($out)
+	pxor	$inout1,$checksum
+	movups	$inout2,`16*2`($out)
+	pxor	$inout2,$checksum
+	movups	$inout3,`16*3`($out)
+	pxor	$inout3,$checksum
+	movups	$inout4,`16*4`($out)
+	pxor	$inout4,$checksum
+	movups	$inout5,`16*5`($out)
+	pxor	$inout5,$checksum
+	lea	`16*6`($out),$out
+	sub	\$6,$blocks
+	jnc	.Locb_dec_grandloop
+
+.Locb_dec_short:
+	add	\$6,$blocks
+	jz	.Locb_dec_done
+
+	movdqu	`16*0`($inp),$inout0
+	cmp	\$2,$blocks
+	jb	.Locb_dec_one
+	movdqu	`16*1`($inp),$inout1
+	je	.Locb_dec_two
+
+	movdqu	`16*2`($inp),$inout2
+	cmp	\$4,$blocks
+	jb	.Locb_dec_three
+	movdqu	`16*3`($inp),$inout3
+	je	.Locb_dec_four
+
+	movdqu	`16*4`($inp),$inout4
+	pxor	$inout5,$inout5
+
+	call	__ocb_decrypt6
+
+	movdqa	@offset[4],@offset[5]
+	movups	$inout0,`16*0`($out)		# store output
+	pxor	$inout0,$checksum		# accumulate checksum
+	movups	$inout1,`16*1`($out)
+	pxor	$inout1,$checksum
+	movups	$inout2,`16*2`($out)
+	pxor	$inout2,$checksum
+	movups	$inout3,`16*3`($out)
+	pxor	$inout3,$checksum
+	movups	$inout4,`16*4`($out)
+	pxor	$inout4,$checksum
+
+	jmp	.Locb_dec_done
+
+.align	16
+.Locb_dec_one:
+	movdqa	@offset[0],$inout5		# borrow
+
+	call	__ocb_decrypt1
+
+	movdqa	$inout5,@offset[5]
+	movups	$inout0,`16*0`($out)		# store output
+	xorps	$inout0,$checksum		# accumulate checksum
+	jmp	.Locb_dec_done
+
+.align	16
+.Locb_dec_two:
+	pxor	$inout2,$inout2
+	pxor	$inout3,$inout3
+
+	call	__ocb_decrypt4
+
+	movdqa	@offset[1],@offset[5]
+	movups	$inout0,`16*0`($out)		# store output
+	xorps	$inout0,$checksum		# accumulate checksum
+	movups	$inout1,`16*1`($out)
+	xorps	$inout1,$checksum
+
+	jmp	.Locb_dec_done
+
+.align	16
+.Locb_dec_three:
+	pxor	$inout3,$inout3
+
+	call	__ocb_decrypt4
+
+	movdqa	@offset[2],@offset[5]
+	movups	$inout0,`16*0`($out)		# store output
+	xorps	$inout0,$checksum		# accumulate checksum
+	movups	$inout1,`16*1`($out)
+	xorps	$inout1,$checksum
+	movups	$inout2,`16*2`($out)
+	xorps	$inout2,$checksum
+
+	jmp	.Locb_dec_done
+
+.align	16
+.Locb_dec_four:
+	call	__ocb_decrypt4
+
+	movdqa	@offset[3],@offset[5]
+	movups	$inout0,`16*0`($out)		# store output
+	pxor	$inout0,$checksum		# accumulate checksum
+	movups	$inout1,`16*1`($out)
+	pxor	$inout1,$checksum
+	movups	$inout2,`16*2`($out)
+	pxor	$inout2,$checksum
+	movups	$inout3,`16*3`($out)
+	pxor	$inout3,$checksum
+
+.Locb_dec_done:
+	pxor	$rndkey0,@offset[5]		# "remove" round[last]
+	movdqu	$checksum,($checksum_p)		# store checksum
+	movdqu	@offset[5],($offset_p)		# store last offset_i
+
+	xorps	%xmm0,%xmm0			# clear register bank
+	pxor	%xmm1,%xmm1
+	pxor	%xmm2,%xmm2
+	pxor	%xmm3,%xmm3
+	pxor	%xmm4,%xmm4
+	pxor	%xmm5,%xmm5
+___
+$code.=<<___ if (!$win64);
+	pxor	%xmm6,%xmm6
+	pxor	%xmm7,%xmm7
+	pxor	%xmm8,%xmm8
+	pxor	%xmm9,%xmm9
+	pxor	%xmm10,%xmm10
+	pxor	%xmm11,%xmm11
+	pxor	%xmm12,%xmm12
+	pxor	%xmm13,%xmm13
+	pxor	%xmm14,%xmm14
+	pxor	%xmm15,%xmm15
+	lea	0x28(%rsp),%rax
+.cfi_def_cfa	%rax,8
+___
+$code.=<<___ if ($win64);
+	movaps	0x00(%rsp),%xmm6
+	movaps	%xmm0,0x00(%rsp)		# clear stack
+	movaps	0x10(%rsp),%xmm7
+	movaps	%xmm0,0x10(%rsp)
+	movaps	0x20(%rsp),%xmm8
+	movaps	%xmm0,0x20(%rsp)
+	movaps	0x30(%rsp),%xmm9
+	movaps	%xmm0,0x30(%rsp)
+	movaps	0x40(%rsp),%xmm10
+	movaps	%xmm0,0x40(%rsp)
+	movaps	0x50(%rsp),%xmm11
+	movaps	%xmm0,0x50(%rsp)
+	movaps	0x60(%rsp),%xmm12
+	movaps	%xmm0,0x60(%rsp)
+	movaps	0x70(%rsp),%xmm13
+	movaps	%xmm0,0x70(%rsp)
+	movaps	0x80(%rsp),%xmm14
+	movaps	%xmm0,0x80(%rsp)
+	movaps	0x90(%rsp),%xmm15
+	movaps	%xmm0,0x90(%rsp)
+	lea	0xa0+0x28(%rsp),%rax
+.Locb_dec_pop:
+___
+$code.=<<___;
+	mov	-40(%rax),%r14
+.cfi_restore	%r14
+	mov	-32(%rax),%r13
+.cfi_restore	%r13
+	mov	-24(%rax),%r12
+.cfi_restore	%r12
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp
+.cfi_def_cfa_register	%rsp
+.Locb_dec_epilogue:
+	ret
+.cfi_endproc
+.size	aesni_ocb_decrypt,.-aesni_ocb_decrypt
+
+.type	__ocb_decrypt6,\@abi-omnipotent
+.align	32
+__ocb_decrypt6:
+	 pxor		$rndkey0l,@offset[5]	# offset_i ^ round[0]
+	 movdqu		($L_p,$i1),@offset[1]
+	 movdqa		@offset[0],@offset[2]
+	 movdqu		($L_p,$i3),@offset[3]
+	 movdqa		@offset[0],@offset[4]
+	 pxor		@offset[5],@offset[0]
+	 movdqu		($L_p,$i5),@offset[5]
+	 pxor		@offset[0],@offset[1]
+	pxor		@offset[0],$inout0	# input ^ round[0] ^ offset_i
+	 pxor		@offset[1],@offset[2]
+	pxor		@offset[1],$inout1
+	 pxor		@offset[2],@offset[3]
+	pxor		@offset[2],$inout2
+	 pxor		@offset[3],@offset[4]
+	pxor		@offset[3],$inout3
+	 pxor		@offset[4],@offset[5]
+	pxor		@offset[4],$inout4
+	pxor		@offset[5],$inout5
+	$movkey		32($key_),$rndkey0
+
+	lea		1($block_num),$i1	# even-numbered blocks
+	lea		3($block_num),$i3
+	lea		5($block_num),$i5
+	add		\$6,$block_num
+	 pxor		$rndkey0l,@offset[0]	# offset_i ^ round[last]
+	bsf		$i1,$i1			# ntz(block)
+	bsf		$i3,$i3
+	bsf		$i5,$i5
+
+	aesdec		$rndkey1,$inout0
+	aesdec		$rndkey1,$inout1
+	aesdec		$rndkey1,$inout2
+	aesdec		$rndkey1,$inout3
+	 pxor		$rndkey0l,@offset[1]
+	 pxor		$rndkey0l,@offset[2]
+	aesdec		$rndkey1,$inout4
+	 pxor		$rndkey0l,@offset[3]
+	 pxor		$rndkey0l,@offset[4]
+	aesdec		$rndkey1,$inout5
+	$movkey		48($key_),$rndkey1
+	 pxor		$rndkey0l,@offset[5]
+
+	aesdec		$rndkey0,$inout0
+	aesdec		$rndkey0,$inout1
+	aesdec		$rndkey0,$inout2
+	aesdec		$rndkey0,$inout3
+	aesdec		$rndkey0,$inout4
+	aesdec		$rndkey0,$inout5
+	$movkey		64($key_),$rndkey0
+	shl		\$4,$i1			# ntz(block) -> table offset
+	shl		\$4,$i3
+	jmp		.Locb_dec_loop6
+
+.align	32
+.Locb_dec_loop6:
+	aesdec		$rndkey1,$inout0
+	aesdec		$rndkey1,$inout1
+	aesdec		$rndkey1,$inout2
+	aesdec		$rndkey1,$inout3
+	aesdec		$rndkey1,$inout4
+	aesdec		$rndkey1,$inout5
+	$movkey		($key,%rax),$rndkey1
+	add		\$32,%rax
+
+	aesdec		$rndkey0,$inout0
+	aesdec		$rndkey0,$inout1
+	aesdec		$rndkey0,$inout2
+	aesdec		$rndkey0,$inout3
+	aesdec		$rndkey0,$inout4
+	aesdec		$rndkey0,$inout5
+	$movkey		-16($key,%rax),$rndkey0
+	jnz		.Locb_dec_loop6
+
+	aesdec		$rndkey1,$inout0
+	aesdec		$rndkey1,$inout1
+	aesdec		$rndkey1,$inout2
+	aesdec		$rndkey1,$inout3
+	aesdec		$rndkey1,$inout4
+	aesdec		$rndkey1,$inout5
+	$movkey		16($key_),$rndkey1
+	shl		\$4,$i5
+
+	aesdeclast	@offset[0],$inout0
+	movdqu		($L_p),@offset[0]	# L_0 for all odd-numbered blocks
+	mov		%r10,%rax		# restore twisted rounds
+	aesdeclast	@offset[1],$inout1
+	aesdeclast	@offset[2],$inout2
+	aesdeclast	@offset[3],$inout3
+	aesdeclast	@offset[4],$inout4
+	aesdeclast	@offset[5],$inout5
+	ret
+.size	__ocb_decrypt6,.-__ocb_decrypt6
+
+.type	__ocb_decrypt4,\@abi-omnipotent
+.align	32
+__ocb_decrypt4:
+	 pxor		$rndkey0l,@offset[5]	# offset_i ^ round[0]
+	 movdqu		($L_p,$i1),@offset[1]
+	 movdqa		@offset[0],@offset[2]
+	 movdqu		($L_p,$i3),@offset[3]
+	 pxor		@offset[5],@offset[0]
+	 pxor		@offset[0],@offset[1]
+	pxor		@offset[0],$inout0	# input ^ round[0] ^ offset_i
+	 pxor		@offset[1],@offset[2]
+	pxor		@offset[1],$inout1
+	 pxor		@offset[2],@offset[3]
+	pxor		@offset[2],$inout2
+	pxor		@offset[3],$inout3
+	$movkey		32($key_),$rndkey0
+
+	 pxor		$rndkey0l,@offset[0]	# offset_i ^ round[last]
+	 pxor		$rndkey0l,@offset[1]
+	 pxor		$rndkey0l,@offset[2]
+	 pxor		$rndkey0l,@offset[3]
+
+	aesdec		$rndkey1,$inout0
+	aesdec		$rndkey1,$inout1
+	aesdec		$rndkey1,$inout2
+	aesdec		$rndkey1,$inout3
+	$movkey		48($key_),$rndkey1
+
+	aesdec		$rndkey0,$inout0
+	aesdec		$rndkey0,$inout1
+	aesdec		$rndkey0,$inout2
+	aesdec		$rndkey0,$inout3
+	$movkey		64($key_),$rndkey0
+	jmp		.Locb_dec_loop4
+
+.align	32
+.Locb_dec_loop4:
+	aesdec		$rndkey1,$inout0
+	aesdec		$rndkey1,$inout1
+	aesdec		$rndkey1,$inout2
+	aesdec		$rndkey1,$inout3
+	$movkey		($key,%rax),$rndkey1
+	add		\$32,%rax
+
+	aesdec		$rndkey0,$inout0
+	aesdec		$rndkey0,$inout1
+	aesdec		$rndkey0,$inout2
+	aesdec		$rndkey0,$inout3
+	$movkey		-16($key,%rax),$rndkey0
+	jnz		.Locb_dec_loop4
+
+	aesdec		$rndkey1,$inout0
+	aesdec		$rndkey1,$inout1
+	aesdec		$rndkey1,$inout2
+	aesdec		$rndkey1,$inout3
+	$movkey		16($key_),$rndkey1
+	mov		%r10,%rax		# restore twisted rounds
+
+	aesdeclast	@offset[0],$inout0
+	aesdeclast	@offset[1],$inout1
+	aesdeclast	@offset[2],$inout2
+	aesdeclast	@offset[3],$inout3
+	ret
+.size	__ocb_decrypt4,.-__ocb_decrypt4
+
+.type	__ocb_decrypt1,\@abi-omnipotent
+.align	32
+__ocb_decrypt1:
+	 pxor		@offset[5],$inout5	# offset_i
+	 pxor		$rndkey0l,$inout5	# offset_i ^ round[0]
+	pxor		$inout5,$inout0		# input ^ round[0] ^ offset_i
+	$movkey		32($key_),$rndkey0
+
+	aesdec		$rndkey1,$inout0
+	$movkey		48($key_),$rndkey1
+	pxor		$rndkey0l,$inout5	# offset_i ^ round[last]
+
+	aesdec		$rndkey0,$inout0
+	$movkey		64($key_),$rndkey0
+	jmp		.Locb_dec_loop1
+
+.align	32
+.Locb_dec_loop1:
+	aesdec		$rndkey1,$inout0
+	$movkey		($key,%rax),$rndkey1
+	add		\$32,%rax
+
+	aesdec		$rndkey0,$inout0
+	$movkey		-16($key,%rax),$rndkey0
+	jnz		.Locb_dec_loop1
+
+	aesdec		$rndkey1,$inout0
+	$movkey		16($key_),$rndkey1	# redundant in tail
+	mov		%r10,%rax		# restore twisted rounds
+
+	aesdeclast	$inout5,$inout0
+	ret
+.size	__ocb_decrypt1,.-__ocb_decrypt1
+___
+} }}
+
+########################################################################
+# void $PREFIX_cbc_encrypt (const void *inp, void *out,
+#			    size_t length, const AES_KEY *key,
+#			    unsigned char *ivp,const int enc);
+{
+my $frame_size = 0x10 + ($win64?0xa0:0);	# used in decrypt
+my ($iv,$in0,$in1,$in2,$in3,$in4)=map("%xmm$_",(10..15));
+
+$code.=<<___;
+.globl	${PREFIX}_cbc_encrypt
+.type	${PREFIX}_cbc_encrypt,\@function,6
+.align	16
+${PREFIX}_cbc_encrypt:
+.cfi_startproc
+	test	$len,$len		# check length
+	jz	.Lcbc_ret
+
+	mov	240($key),$rnds_	# key->rounds
+	mov	$key,$key_		# backup $key
+	test	%r9d,%r9d		# 6th argument
+	jz	.Lcbc_decrypt
+#--------------------------- CBC ENCRYPT ------------------------------#
+	movups	($ivp),$inout0		# load iv as initial state
+	mov	$rnds_,$rounds
+	cmp	\$16,$len
+	jb	.Lcbc_enc_tail
+	sub	\$16,$len
+	jmp	.Lcbc_enc_loop
+.align	16
+.Lcbc_enc_loop:
+	movups	($inp),$inout1		# load input
+	lea	16($inp),$inp
+	#xorps	$inout1,$inout0
+___
+	&aesni_generate1("enc",$key,$rounds,$inout0,$inout1);
+$code.=<<___;
+	mov	$rnds_,$rounds		# restore $rounds
+	mov	$key_,$key		# restore $key
+	movups	$inout0,0($out)		# store output
+	lea	16($out),$out
+	sub	\$16,$len
+	jnc	.Lcbc_enc_loop
+	add	\$16,$len
+	jnz	.Lcbc_enc_tail
+	 pxor	$rndkey0,$rndkey0	# clear register bank
+	 pxor	$rndkey1,$rndkey1
+	movups	$inout0,($ivp)
+	 pxor	$inout0,$inout0
+	 pxor	$inout1,$inout1
+	jmp	.Lcbc_ret
+
+.Lcbc_enc_tail:
+	mov	$len,%rcx	# zaps $key
+	xchg	$inp,$out	# $inp is %rsi and $out is %rdi now
+	.long	0x9066A4F3	# rep movsb
+	mov	\$16,%ecx	# zero tail
+	sub	$len,%rcx
+	xor	%eax,%eax
+	.long	0x9066AAF3	# rep stosb
+	lea	-16(%rdi),%rdi	# rewind $out by 1 block
+	mov	$rnds_,$rounds	# restore $rounds
+	mov	%rdi,%rsi	# $inp and $out are the same
+	mov	$key_,$key	# restore $key
+	xor	$len,$len	# len=16
+	jmp	.Lcbc_enc_loop	# one more spin
+#--------------------------- CBC DECRYPT ------------------------------#
+.align	16
+.Lcbc_decrypt:
+	cmp	\$16,$len
+	jne	.Lcbc_decrypt_bulk
+
+	# handle single block without allocating stack frame,
+	# useful in ciphertext stealing mode
+	movdqu	($inp),$inout0		# load input
+	movdqu	($ivp),$inout1		# load iv
+	movdqa	$inout0,$inout2		# future iv
+___
+	&aesni_generate1("dec",$key,$rnds_);
+$code.=<<___;
+	 pxor	$rndkey0,$rndkey0	# clear register bank
+	 pxor	$rndkey1,$rndkey1
+	movdqu	$inout2,($ivp)		# store iv
+	xorps	$inout1,$inout0		# ^=iv
+	 pxor	$inout1,$inout1
+	movups	$inout0,($out)		# store output
+	 pxor	$inout0,$inout0
+	jmp	.Lcbc_ret
+.align	16
+.Lcbc_decrypt_bulk:
+	lea	(%rsp),%r11		# frame pointer
+.cfi_def_cfa_register	%r11
+	push	%rbp
+.cfi_push	%rbp
+	sub	\$$frame_size,%rsp
+	and	\$-16,%rsp	# Linux kernel stack can be incorrectly seeded
+___
+$code.=<<___ if ($win64);
+	movaps	%xmm6,0x10(%rsp)
+	movaps	%xmm7,0x20(%rsp)
+	movaps	%xmm8,0x30(%rsp)
+	movaps	%xmm9,0x40(%rsp)
+	movaps	%xmm10,0x50(%rsp)
+	movaps	%xmm11,0x60(%rsp)
+	movaps	%xmm12,0x70(%rsp)
+	movaps	%xmm13,0x80(%rsp)
+	movaps	%xmm14,0x90(%rsp)
+	movaps	%xmm15,0xa0(%rsp)
+.Lcbc_decrypt_body:
+___
+
+my $inp_=$key_="%rbp";			# reassign $key_
+
+$code.=<<___;
+	mov	$key,$key_		# [re-]backup $key [after reassignment]
+	movups	($ivp),$iv
+	mov	$rnds_,$rounds
+	cmp	\$0x50,$len
+	jbe	.Lcbc_dec_tail
+
+	$movkey	($key),$rndkey0
+	movdqu	0x00($inp),$inout0	# load input
+	movdqu	0x10($inp),$inout1
+	movdqa	$inout0,$in0
+	movdqu	0x20($inp),$inout2
+	movdqa	$inout1,$in1
+	movdqu	0x30($inp),$inout3
+	movdqa	$inout2,$in2
+	movdqu	0x40($inp),$inout4
+	movdqa	$inout3,$in3
+	movdqu	0x50($inp),$inout5
+	movdqa	$inout4,$in4
+	mov	OPENSSL_ia32cap_P+4(%rip),%r9d
+	cmp	\$0x70,$len
+	jbe	.Lcbc_dec_six_or_seven
+
+	and	\$`1<<26|1<<22`,%r9d	# isolate XSAVE+MOVBE
+	sub	\$0x50,$len		# $len is biased by -5*16
+	cmp	\$`1<<22`,%r9d		# check for MOVBE without XSAVE
+	je	.Lcbc_dec_loop6_enter	# [which denotes Atom Silvermont]
+	sub	\$0x20,$len		# $len is biased by -7*16
+	lea	0x70($key),$key		# size optimization
+	jmp	.Lcbc_dec_loop8_enter
+.align	16
+.Lcbc_dec_loop8:
+	movups	$inout7,($out)
+	lea	0x10($out),$out
+.Lcbc_dec_loop8_enter:
+	movdqu		0x60($inp),$inout6
+	pxor		$rndkey0,$inout0
+	movdqu		0x70($inp),$inout7
+	pxor		$rndkey0,$inout1
+	$movkey		0x10-0x70($key),$rndkey1
+	pxor		$rndkey0,$inout2
+	mov		\$-1,$inp_
+	cmp		\$0x70,$len	# is there at least 0x60 bytes ahead?
+	pxor		$rndkey0,$inout3
+	pxor		$rndkey0,$inout4
+	pxor		$rndkey0,$inout5
+	pxor		$rndkey0,$inout6
+
+	aesdec		$rndkey1,$inout0
+	pxor		$rndkey0,$inout7
+	$movkey		0x20-0x70($key),$rndkey0
+	aesdec		$rndkey1,$inout1
+	aesdec		$rndkey1,$inout2
+	aesdec		$rndkey1,$inout3
+	aesdec		$rndkey1,$inout4
+	aesdec		$rndkey1,$inout5
+	aesdec		$rndkey1,$inout6
+	adc		\$0,$inp_
+	and		\$128,$inp_
+	aesdec		$rndkey1,$inout7
+	add		$inp,$inp_
+	$movkey		0x30-0x70($key),$rndkey1
+___
+for($i=1;$i<12;$i++) {
+my $rndkeyx = ($i&1)?$rndkey0:$rndkey1;
+$code.=<<___	if ($i==7);
+	cmp		\$11,$rounds
+___
+$code.=<<___;
+	aesdec		$rndkeyx,$inout0
+	aesdec		$rndkeyx,$inout1
+	aesdec		$rndkeyx,$inout2
+	aesdec		$rndkeyx,$inout3
+	aesdec		$rndkeyx,$inout4
+	aesdec		$rndkeyx,$inout5
+	aesdec		$rndkeyx,$inout6
+	aesdec		$rndkeyx,$inout7
+	$movkey		`0x30+0x10*$i`-0x70($key),$rndkeyx
+___
+$code.=<<___	if ($i<6 || (!($i&1) && $i>7));
+	nop
+___
+$code.=<<___	if ($i==7);
+	jb		.Lcbc_dec_done
+___
+$code.=<<___	if ($i==9);
+	je		.Lcbc_dec_done
+___
+$code.=<<___	if ($i==11);
+	jmp		.Lcbc_dec_done
+___
+}
+$code.=<<___;
+.align	16
+.Lcbc_dec_done:
+	aesdec		$rndkey1,$inout0
+	aesdec		$rndkey1,$inout1
+	pxor		$rndkey0,$iv
+	pxor		$rndkey0,$in0
+	aesdec		$rndkey1,$inout2
+	aesdec		$rndkey1,$inout3
+	pxor		$rndkey0,$in1
+	pxor		$rndkey0,$in2
+	aesdec		$rndkey1,$inout4
+	aesdec		$rndkey1,$inout5
+	pxor		$rndkey0,$in3
+	pxor		$rndkey0,$in4
+	aesdec		$rndkey1,$inout6
+	aesdec		$rndkey1,$inout7
+	movdqu		0x50($inp),$rndkey1
+
+	aesdeclast	$iv,$inout0
+	movdqu		0x60($inp),$iv		# borrow $iv
+	pxor		$rndkey0,$rndkey1
+	aesdeclast	$in0,$inout1
+	pxor		$rndkey0,$iv
+	movdqu		0x70($inp),$rndkey0	# next IV
+	aesdeclast	$in1,$inout2
+	lea		0x80($inp),$inp
+	movdqu		0x00($inp_),$in0
+	aesdeclast	$in2,$inout3
+	aesdeclast	$in3,$inout4
+	movdqu		0x10($inp_),$in1
+	movdqu		0x20($inp_),$in2
+	aesdeclast	$in4,$inout5
+	aesdeclast	$rndkey1,$inout6
+	movdqu		0x30($inp_),$in3
+	movdqu		0x40($inp_),$in4
+	aesdeclast	$iv,$inout7
+	movdqa		$rndkey0,$iv		# return $iv
+	movdqu		0x50($inp_),$rndkey1
+	$movkey		-0x70($key),$rndkey0
+
+	movups		$inout0,($out)		# store output
+	movdqa		$in0,$inout0
+	movups		$inout1,0x10($out)
+	movdqa		$in1,$inout1
+	movups		$inout2,0x20($out)
+	movdqa		$in2,$inout2
+	movups		$inout3,0x30($out)
+	movdqa		$in3,$inout3
+	movups		$inout4,0x40($out)
+	movdqa		$in4,$inout4
+	movups		$inout5,0x50($out)
+	movdqa		$rndkey1,$inout5
+	movups		$inout6,0x60($out)
+	lea		0x70($out),$out
+
+	sub	\$0x80,$len
+	ja	.Lcbc_dec_loop8
+
+	movaps	$inout7,$inout0
+	lea	-0x70($key),$key
+	add	\$0x70,$len
+	jle	.Lcbc_dec_clear_tail_collected
+	movups	$inout7,($out)
+	lea	0x10($out),$out
+	cmp	\$0x50,$len
+	jbe	.Lcbc_dec_tail
+
+	movaps	$in0,$inout0
+.Lcbc_dec_six_or_seven:
+	cmp	\$0x60,$len
+	ja	.Lcbc_dec_seven
+
+	movaps	$inout5,$inout6
+	call	_aesni_decrypt6
+	pxor	$iv,$inout0		# ^= IV
+	movaps	$inout6,$iv
+	pxor	$in0,$inout1
+	movdqu	$inout0,($out)
+	pxor	$in1,$inout2
+	movdqu	$inout1,0x10($out)
+	 pxor	$inout1,$inout1		# clear register bank
+	pxor	$in2,$inout3
+	movdqu	$inout2,0x20($out)
+	 pxor	$inout2,$inout2
+	pxor	$in3,$inout4
+	movdqu	$inout3,0x30($out)
+	 pxor	$inout3,$inout3
+	pxor	$in4,$inout5
+	movdqu	$inout4,0x40($out)
+	 pxor	$inout4,$inout4
+	lea	0x50($out),$out
+	movdqa	$inout5,$inout0
+	 pxor	$inout5,$inout5
+	jmp	.Lcbc_dec_tail_collected
+
+.align	16
+.Lcbc_dec_seven:
+	movups	0x60($inp),$inout6
+	xorps	$inout7,$inout7
+	call	_aesni_decrypt8
+	movups	0x50($inp),$inout7
+	pxor	$iv,$inout0		# ^= IV
+	movups	0x60($inp),$iv
+	pxor	$in0,$inout1
+	movdqu	$inout0,($out)
+	pxor	$in1,$inout2
+	movdqu	$inout1,0x10($out)
+	 pxor	$inout1,$inout1		# clear register bank
+	pxor	$in2,$inout3
+	movdqu	$inout2,0x20($out)
+	 pxor	$inout2,$inout2
+	pxor	$in3,$inout4
+	movdqu	$inout3,0x30($out)
+	 pxor	$inout3,$inout3
+	pxor	$in4,$inout5
+	movdqu	$inout4,0x40($out)
+	 pxor	$inout4,$inout4
+	pxor	$inout7,$inout6
+	movdqu	$inout5,0x50($out)
+	 pxor	$inout5,$inout5
+	lea	0x60($out),$out
+	movdqa	$inout6,$inout0
+	 pxor	$inout6,$inout6
+	 pxor	$inout7,$inout7
+	jmp	.Lcbc_dec_tail_collected
+
+.align	16
+.Lcbc_dec_loop6:
+	movups	$inout5,($out)
+	lea	0x10($out),$out
+	movdqu	0x00($inp),$inout0	# load input
+	movdqu	0x10($inp),$inout1
+	movdqa	$inout0,$in0
+	movdqu	0x20($inp),$inout2
+	movdqa	$inout1,$in1
+	movdqu	0x30($inp),$inout3
+	movdqa	$inout2,$in2
+	movdqu	0x40($inp),$inout4
+	movdqa	$inout3,$in3
+	movdqu	0x50($inp),$inout5
+	movdqa	$inout4,$in4
+.Lcbc_dec_loop6_enter:
+	lea	0x60($inp),$inp
+	movdqa	$inout5,$inout6
+
+	call	_aesni_decrypt6
+
+	pxor	$iv,$inout0		# ^= IV
+	movdqa	$inout6,$iv
+	pxor	$in0,$inout1
+	movdqu	$inout0,($out)
+	pxor	$in1,$inout2
+	movdqu	$inout1,0x10($out)
+	pxor	$in2,$inout3
+	movdqu	$inout2,0x20($out)
+	pxor	$in3,$inout4
+	mov	$key_,$key
+	movdqu	$inout3,0x30($out)
+	pxor	$in4,$inout5
+	mov	$rnds_,$rounds
+	movdqu	$inout4,0x40($out)
+	lea	0x50($out),$out
+	sub	\$0x60,$len
+	ja	.Lcbc_dec_loop6
+
+	movdqa	$inout5,$inout0
+	add	\$0x50,$len
+	jle	.Lcbc_dec_clear_tail_collected
+	movups	$inout5,($out)
+	lea	0x10($out),$out
+
+.Lcbc_dec_tail:
+	movups	($inp),$inout0
+	sub	\$0x10,$len
+	jbe	.Lcbc_dec_one		# $len is 1*16 or less
+
+	movups	0x10($inp),$inout1
+	movaps	$inout0,$in0
+	sub	\$0x10,$len
+	jbe	.Lcbc_dec_two		# $len is 2*16 or less
+
+	movups	0x20($inp),$inout2
+	movaps	$inout1,$in1
+	sub	\$0x10,$len
+	jbe	.Lcbc_dec_three		# $len is 3*16 or less
+
+	movups	0x30($inp),$inout3
+	movaps	$inout2,$in2
+	sub	\$0x10,$len
+	jbe	.Lcbc_dec_four		# $len is 4*16 or less
+
+	movups	0x40($inp),$inout4	# $len is 5*16 or less
+	movaps	$inout3,$in3
+	movaps	$inout4,$in4
+	xorps	$inout5,$inout5
+	call	_aesni_decrypt6
+	pxor	$iv,$inout0
+	movaps	$in4,$iv
+	pxor	$in0,$inout1
+	movdqu	$inout0,($out)
+	pxor	$in1,$inout2
+	movdqu	$inout1,0x10($out)
+	 pxor	$inout1,$inout1		# clear register bank
+	pxor	$in2,$inout3
+	movdqu	$inout2,0x20($out)
+	 pxor	$inout2,$inout2
+	pxor	$in3,$inout4
+	movdqu	$inout3,0x30($out)
+	 pxor	$inout3,$inout3
+	lea	0x40($out),$out
+	movdqa	$inout4,$inout0
+	 pxor	$inout4,$inout4
+	 pxor	$inout5,$inout5
+	sub	\$0x10,$len
+	jmp	.Lcbc_dec_tail_collected
+
+.align	16
+.Lcbc_dec_one:
+	movaps	$inout0,$in0
+___
+	&aesni_generate1("dec",$key,$rounds);
+$code.=<<___;
+	xorps	$iv,$inout0
+	movaps	$in0,$iv
+	jmp	.Lcbc_dec_tail_collected
+.align	16
+.Lcbc_dec_two:
+	movaps	$inout1,$in1
+	call	_aesni_decrypt2
+	pxor	$iv,$inout0
+	movaps	$in1,$iv
+	pxor	$in0,$inout1
+	movdqu	$inout0,($out)
+	movdqa	$inout1,$inout0
+	 pxor	$inout1,$inout1		# clear register bank
+	lea	0x10($out),$out
+	jmp	.Lcbc_dec_tail_collected
+.align	16
+.Lcbc_dec_three:
+	movaps	$inout2,$in2
+	call	_aesni_decrypt3
+	pxor	$iv,$inout0
+	movaps	$in2,$iv
+	pxor	$in0,$inout1
+	movdqu	$inout0,($out)
+	pxor	$in1,$inout2
+	movdqu	$inout1,0x10($out)
+	 pxor	$inout1,$inout1		# clear register bank
+	movdqa	$inout2,$inout0
+	 pxor	$inout2,$inout2
+	lea	0x20($out),$out
+	jmp	.Lcbc_dec_tail_collected
+.align	16
+.Lcbc_dec_four:
+	movaps	$inout3,$in3
+	call	_aesni_decrypt4
+	pxor	$iv,$inout0
+	movaps	$in3,$iv
+	pxor	$in0,$inout1
+	movdqu	$inout0,($out)
+	pxor	$in1,$inout2
+	movdqu	$inout1,0x10($out)
+	 pxor	$inout1,$inout1		# clear register bank
+	pxor	$in2,$inout3
+	movdqu	$inout2,0x20($out)
+	 pxor	$inout2,$inout2
+	movdqa	$inout3,$inout0
+	 pxor	$inout3,$inout3
+	lea	0x30($out),$out
+	jmp	.Lcbc_dec_tail_collected
+
+.align	16
+.Lcbc_dec_clear_tail_collected:
+	pxor	$inout1,$inout1		# clear register bank
+	pxor	$inout2,$inout2
+	pxor	$inout3,$inout3
+___
+$code.=<<___ if (!$win64);
+	pxor	$inout4,$inout4		# %xmm6..9
+	pxor	$inout5,$inout5
+	pxor	$inout6,$inout6
+	pxor	$inout7,$inout7
+___
+$code.=<<___;
+.Lcbc_dec_tail_collected:
+	movups	$iv,($ivp)
+	and	\$15,$len
+	jnz	.Lcbc_dec_tail_partial
+	movups	$inout0,($out)
+	pxor	$inout0,$inout0
+	jmp	.Lcbc_dec_ret
+.align	16
+.Lcbc_dec_tail_partial:
+	movaps	$inout0,(%rsp)
+	pxor	$inout0,$inout0
+	mov	\$16,%rcx
+	mov	$out,%rdi
+	sub	$len,%rcx
+	lea	(%rsp),%rsi
+	.long	0x9066A4F3		# rep movsb
+	movdqa	$inout0,(%rsp)
+
+.Lcbc_dec_ret:
+	xorps	$rndkey0,$rndkey0	# %xmm0
+	pxor	$rndkey1,$rndkey1
+___
+$code.=<<___ if ($win64);
+	movaps	0x10(%rsp),%xmm6
+	movaps	%xmm0,0x10(%rsp)	# clear stack
+	movaps	0x20(%rsp),%xmm7
+	movaps	%xmm0,0x20(%rsp)
+	movaps	0x30(%rsp),%xmm8
+	movaps	%xmm0,0x30(%rsp)
+	movaps	0x40(%rsp),%xmm9
+	movaps	%xmm0,0x40(%rsp)
+	movaps	0x50(%rsp),%xmm10
+	movaps	%xmm0,0x50(%rsp)
+	movaps	0x60(%rsp),%xmm11
+	movaps	%xmm0,0x60(%rsp)
+	movaps	0x70(%rsp),%xmm12
+	movaps	%xmm0,0x70(%rsp)
+	movaps	0x80(%rsp),%xmm13
+	movaps	%xmm0,0x80(%rsp)
+	movaps	0x90(%rsp),%xmm14
+	movaps	%xmm0,0x90(%rsp)
+	movaps	0xa0(%rsp),%xmm15
+	movaps	%xmm0,0xa0(%rsp)
+___
+$code.=<<___;
+	mov	-8(%r11),%rbp
+.cfi_restore	%rbp
+	lea	(%r11),%rsp
+.cfi_def_cfa_register	%rsp
+.Lcbc_ret:
+	ret
+.cfi_endproc
+.size	${PREFIX}_cbc_encrypt,.-${PREFIX}_cbc_encrypt
+___
+} 
+# int ${PREFIX}_set_decrypt_key(const unsigned char *inp,
+#				int bits, AES_KEY *key)
+#
+# input:	$inp	user-supplied key
+#		$bits	$inp length in bits
+#		$key	pointer to key schedule
+# output:	%eax	0 denoting success, -1 or -2 - failure (see C)
+#		*$key	key schedule
+#
+{ my ($inp,$bits,$key) = @_4args;
+  $bits =~ s/%r/%e/;
+
+$code.=<<___;
+.globl	${PREFIX}_set_decrypt_key
+.type	${PREFIX}_set_decrypt_key,\@abi-omnipotent
+.align	16
+${PREFIX}_set_decrypt_key:
+.cfi_startproc
+	.byte	0x48,0x83,0xEC,0x08	# sub rsp,8
+.cfi_adjust_cfa_offset	8
+	call	__aesni_set_encrypt_key
+	shl	\$4,$bits		# rounds-1 after _aesni_set_encrypt_key
+	test	%eax,%eax
+	jnz	.Ldec_key_ret
+	lea	16($key,$bits),$inp	# points at the end of key schedule
+
+	$movkey	($key),%xmm0		# just swap
+	$movkey	($inp),%xmm1
+	$movkey	%xmm0,($inp)
+	$movkey	%xmm1,($key)
+	lea	16($key),$key
+	lea	-16($inp),$inp
+
+.Ldec_key_inverse:
+	$movkey	($key),%xmm0		# swap and inverse
+	$movkey	($inp),%xmm1
+	aesimc	%xmm0,%xmm0
+	aesimc	%xmm1,%xmm1
+	lea	16($key),$key
+	lea	-16($inp),$inp
+	$movkey	%xmm0,16($inp)
+	$movkey	%xmm1,-16($key)
+	cmp	$key,$inp
+	ja	.Ldec_key_inverse
+
+	$movkey	($key),%xmm0		# inverse middle
+	aesimc	%xmm0,%xmm0
+	pxor	%xmm1,%xmm1
+	$movkey	%xmm0,($inp)
+	pxor	%xmm0,%xmm0
+.Ldec_key_ret:
+	add	\$8,%rsp
+.cfi_adjust_cfa_offset	-8
+	ret
+.cfi_endproc
+.LSEH_end_set_decrypt_key:
+.size	${PREFIX}_set_decrypt_key,.-${PREFIX}_set_decrypt_key
+___
+
+# This is based on submission from Intel by
+#	Huang Ying
+#	Vinodh Gopal
+#	Kahraman Akdemir
+#
+# Aggressively optimized in respect to aeskeygenassist's critical path
+# and is contained in %xmm0-5 to meet Win64 ABI requirement.
+#
+# int ${PREFIX}_set_encrypt_key(const unsigned char *inp,
+#				int bits, AES_KEY * const key);
+#
+# input:	$inp	user-supplied key
+#		$bits	$inp length in bits
+#		$key	pointer to key schedule
+# output:	%eax	0 denoting success, -1 or -2 - failure (see C)
+#		$bits	rounds-1 (used in aesni_set_decrypt_key)
+#		*$key	key schedule
+#		$key	pointer to key schedule (used in
+#			aesni_set_decrypt_key)
+#
+# Subroutine is frame-less, which means that only volatile registers
+# are used. Note that it's declared "abi-omnipotent", which means that
+# amount of volatile registers is smaller on Windows.
+#
+$code.=<<___;
+.globl	${PREFIX}_set_encrypt_key
+.type	${PREFIX}_set_encrypt_key,\@abi-omnipotent
+.align	16
+${PREFIX}_set_encrypt_key:
+__aesni_set_encrypt_key:
+.cfi_startproc
+	.byte	0x48,0x83,0xEC,0x08	# sub rsp,8
+.cfi_adjust_cfa_offset	8
+	mov	\$-1,%rax
+	test	$inp,$inp
+	jz	.Lenc_key_ret
+	test	$key,$key
+	jz	.Lenc_key_ret
+
+	mov	\$`1<<28|1<<11`,%r10d	# AVX and XOP bits
+	movups	($inp),%xmm0		# pull first 128 bits of *userKey
+	xorps	%xmm4,%xmm4		# low dword of xmm4 is assumed 0
+	and	OPENSSL_ia32cap_P+4(%rip),%r10d
+	lea	16($key),%rax		# %rax is used as modifiable copy of $key
+	cmp	\$256,$bits
+	je	.L14rounds
+	cmp	\$192,$bits
+	je	.L12rounds
+	cmp	\$128,$bits
+	jne	.Lbad_keybits
+
+.L10rounds:
+	mov	\$9,$bits			# 10 rounds for 128-bit key
+	cmp	\$`1<<28`,%r10d			# AVX, bit no XOP
+	je	.L10rounds_alt
+
+	$movkey	%xmm0,($key)			# round 0
+	aeskeygenassist	\$0x1,%xmm0,%xmm1	# round 1
+	call		.Lkey_expansion_128_cold
+	aeskeygenassist	\$0x2,%xmm0,%xmm1	# round 2
+	call		.Lkey_expansion_128
+	aeskeygenassist	\$0x4,%xmm0,%xmm1	# round 3
+	call		.Lkey_expansion_128
+	aeskeygenassist	\$0x8,%xmm0,%xmm1	# round 4
+	call		.Lkey_expansion_128
+	aeskeygenassist	\$0x10,%xmm0,%xmm1	# round 5
+	call		.Lkey_expansion_128
+	aeskeygenassist	\$0x20,%xmm0,%xmm1	# round 6
+	call		.Lkey_expansion_128
+	aeskeygenassist	\$0x40,%xmm0,%xmm1	# round 7
+	call		.Lkey_expansion_128
+	aeskeygenassist	\$0x80,%xmm0,%xmm1	# round 8
+	call		.Lkey_expansion_128
+	aeskeygenassist	\$0x1b,%xmm0,%xmm1	# round 9
+	call		.Lkey_expansion_128
+	aeskeygenassist	\$0x36,%xmm0,%xmm1	# round 10
+	call		.Lkey_expansion_128
+	$movkey	%xmm0,(%rax)
+	mov	$bits,80(%rax)	# 240(%rdx)
+	xor	%eax,%eax
+	jmp	.Lenc_key_ret
+
+.align	16
+.L10rounds_alt:
+	movdqa	.Lkey_rotate(%rip),%xmm5
+	mov	\$8,%r10d
+	movdqa	.Lkey_rcon1(%rip),%xmm4
+	movdqa	%xmm0,%xmm2
+	movdqu	%xmm0,($key)
+	jmp	.Loop_key128
+
+.align	16
+.Loop_key128:
+	pshufb		%xmm5,%xmm0
+	aesenclast	%xmm4,%xmm0
+	pslld		\$1,%xmm4
+	lea		16(%rax),%rax
+
+	movdqa		%xmm2,%xmm3
+	pslldq		\$4,%xmm2
+	pxor		%xmm2,%xmm3
+	pslldq		\$4,%xmm2
+	pxor		%xmm2,%xmm3
+	pslldq		\$4,%xmm2
+	pxor		%xmm3,%xmm2
+
+	pxor		%xmm2,%xmm0
+	movdqu		%xmm0,-16(%rax)
+	movdqa		%xmm0,%xmm2
+
+	dec	%r10d
+	jnz	.Loop_key128
+
+	movdqa		.Lkey_rcon1b(%rip),%xmm4
+
+	pshufb		%xmm5,%xmm0
+	aesenclast	%xmm4,%xmm0
+	pslld		\$1,%xmm4
+
+	movdqa		%xmm2,%xmm3
+	pslldq		\$4,%xmm2
+	pxor		%xmm2,%xmm3
+	pslldq		\$4,%xmm2
+	pxor		%xmm2,%xmm3
+	pslldq		\$4,%xmm2
+	pxor		%xmm3,%xmm2
+
+	pxor		%xmm2,%xmm0
+	movdqu		%xmm0,(%rax)
+
+	movdqa		%xmm0,%xmm2
+	pshufb		%xmm5,%xmm0
+	aesenclast	%xmm4,%xmm0
+
+	movdqa		%xmm2,%xmm3
+	pslldq		\$4,%xmm2
+	pxor		%xmm2,%xmm3
+	pslldq		\$4,%xmm2
+	pxor		%xmm2,%xmm3
+	pslldq		\$4,%xmm2
+	pxor		%xmm3,%xmm2
+
+	pxor		%xmm2,%xmm0
+	movdqu		%xmm0,16(%rax)
+
+	mov	$bits,96(%rax)	# 240($key)
+	xor	%eax,%eax
+	jmp	.Lenc_key_ret
+
+.align	16
+.L12rounds:
+	movq	16($inp),%xmm2			# remaining 1/3 of *userKey
+	mov	\$11,$bits			# 12 rounds for 192
+	cmp	\$`1<<28`,%r10d			# AVX, but no XOP
+	je	.L12rounds_alt
+
+	$movkey	%xmm0,($key)			# round 0
+	aeskeygenassist	\$0x1,%xmm2,%xmm1	# round 1,2
+	call		.Lkey_expansion_192a_cold
+	aeskeygenassist	\$0x2,%xmm2,%xmm1	# round 2,3
+	call		.Lkey_expansion_192b
+	aeskeygenassist	\$0x4,%xmm2,%xmm1	# round 4,5
+	call		.Lkey_expansion_192a
+	aeskeygenassist	\$0x8,%xmm2,%xmm1	# round 5,6
+	call		.Lkey_expansion_192b
+	aeskeygenassist	\$0x10,%xmm2,%xmm1	# round 7,8
+	call		.Lkey_expansion_192a
+	aeskeygenassist	\$0x20,%xmm2,%xmm1	# round 8,9
+	call		.Lkey_expansion_192b
+	aeskeygenassist	\$0x40,%xmm2,%xmm1	# round 10,11
+	call		.Lkey_expansion_192a
+	aeskeygenassist	\$0x80,%xmm2,%xmm1	# round 11,12
+	call		.Lkey_expansion_192b
+	$movkey	%xmm0,(%rax)
+	mov	$bits,48(%rax)	# 240(%rdx)
+	xor	%rax, %rax
+	jmp	.Lenc_key_ret
+
+.align	16
+.L12rounds_alt:
+	movdqa	.Lkey_rotate192(%rip),%xmm5
+	movdqa	.Lkey_rcon1(%rip),%xmm4
+	mov	\$8,%r10d
+	movdqu	%xmm0,($key)
+	jmp	.Loop_key192
+
+.align	16
+.Loop_key192:
+	movq		%xmm2,0(%rax)
+	movdqa		%xmm2,%xmm1
+	pshufb		%xmm5,%xmm2
+	aesenclast	%xmm4,%xmm2
+	pslld		\$1, %xmm4
+	lea		24(%rax),%rax
+
+	movdqa		%xmm0,%xmm3
+	pslldq		\$4,%xmm0
+	pxor		%xmm0,%xmm3
+	pslldq		\$4,%xmm0
+	pxor		%xmm0,%xmm3
+	pslldq		\$4,%xmm0
+	pxor		%xmm3,%xmm0
+
+	pshufd		\$0xff,%xmm0,%xmm3
+	pxor		%xmm1,%xmm3
+	pslldq		\$4,%xmm1
+	pxor		%xmm1,%xmm3
+
+	pxor		%xmm2,%xmm0
+	pxor		%xmm3,%xmm2
+	movdqu		%xmm0,-16(%rax)
+
+	dec	%r10d
+	jnz	.Loop_key192
+
+	mov	$bits,32(%rax)	# 240($key)
+	xor	%eax,%eax
+	jmp	.Lenc_key_ret
+
+.align	16
+.L14rounds:
+	movups	16($inp),%xmm2			# remaining half of *userKey
+	mov	\$13,$bits			# 14 rounds for 256
+	lea	16(%rax),%rax
+	cmp	\$`1<<28`,%r10d			# AVX, but no XOP
+	je	.L14rounds_alt
+
+	$movkey	%xmm0,($key)			# round 0
+	$movkey	%xmm2,16($key)			# round 1
+	aeskeygenassist	\$0x1,%xmm2,%xmm1	# round 2
+	call		.Lkey_expansion_256a_cold
+	aeskeygenassist	\$0x1,%xmm0,%xmm1	# round 3
+	call		.Lkey_expansion_256b
+	aeskeygenassist	\$0x2,%xmm2,%xmm1	# round 4
+	call		.Lkey_expansion_256a
+	aeskeygenassist	\$0x2,%xmm0,%xmm1	# round 5
+	call		.Lkey_expansion_256b
+	aeskeygenassist	\$0x4,%xmm2,%xmm1	# round 6
+	call		.Lkey_expansion_256a
+	aeskeygenassist	\$0x4,%xmm0,%xmm1	# round 7
+	call		.Lkey_expansion_256b
+	aeskeygenassist	\$0x8,%xmm2,%xmm1	# round 8
+	call		.Lkey_expansion_256a
+	aeskeygenassist	\$0x8,%xmm0,%xmm1	# round 9
+	call		.Lkey_expansion_256b
+	aeskeygenassist	\$0x10,%xmm2,%xmm1	# round 10
+	call		.Lkey_expansion_256a
+	aeskeygenassist	\$0x10,%xmm0,%xmm1	# round 11
+	call		.Lkey_expansion_256b
+	aeskeygenassist	\$0x20,%xmm2,%xmm1	# round 12
+	call		.Lkey_expansion_256a
+	aeskeygenassist	\$0x20,%xmm0,%xmm1	# round 13
+	call		.Lkey_expansion_256b
+	aeskeygenassist	\$0x40,%xmm2,%xmm1	# round 14
+	call		.Lkey_expansion_256a
+	$movkey	%xmm0,(%rax)
+	mov	$bits,16(%rax)	# 240(%rdx)
+	xor	%rax,%rax
+	jmp	.Lenc_key_ret
+
+.align	16
+.L14rounds_alt:
+	movdqa	.Lkey_rotate(%rip),%xmm5
+	movdqa	.Lkey_rcon1(%rip),%xmm4
+	mov	\$7,%r10d
+	movdqu	%xmm0,0($key)
+	movdqa	%xmm2,%xmm1
+	movdqu	%xmm2,16($key)
+	jmp	.Loop_key256
+
+.align	16
+.Loop_key256:
+	pshufb		%xmm5,%xmm2
+	aesenclast	%xmm4,%xmm2
+
+	movdqa		%xmm0,%xmm3
+	pslldq		\$4,%xmm0
+	pxor		%xmm0,%xmm3
+	pslldq		\$4,%xmm0
+	pxor		%xmm0,%xmm3
+	pslldq		\$4,%xmm0
+	pxor		%xmm3,%xmm0
+	pslld		\$1,%xmm4
+
+	pxor		%xmm2,%xmm0
+	movdqu		%xmm0,(%rax)
+
+	dec	%r10d
+	jz	.Ldone_key256
+
+	pshufd		\$0xff,%xmm0,%xmm2
+	pxor		%xmm3,%xmm3
+	aesenclast	%xmm3,%xmm2
+
+	movdqa		%xmm1,%xmm3
+	pslldq		\$4,%xmm1
+	pxor		%xmm1,%xmm3
+	pslldq		\$4,%xmm1
+	pxor		%xmm1,%xmm3
+	pslldq		\$4,%xmm1
+	pxor		%xmm3,%xmm1
+
+	pxor		%xmm1,%xmm2
+	movdqu		%xmm2,16(%rax)
+	lea		32(%rax),%rax
+	movdqa		%xmm2,%xmm1
+
+	jmp	.Loop_key256
+
+.Ldone_key256:
+	mov	$bits,16(%rax)	# 240($key)
+	xor	%eax,%eax
+	jmp	.Lenc_key_ret
+
+.align	16
+.Lbad_keybits:
+	mov	\$-2,%rax
+.Lenc_key_ret:
+	pxor	%xmm0,%xmm0
+	pxor	%xmm1,%xmm1
+	pxor	%xmm2,%xmm2
+	pxor	%xmm3,%xmm3
+	pxor	%xmm4,%xmm4
+	pxor	%xmm5,%xmm5
+	add	\$8,%rsp
+.cfi_adjust_cfa_offset	-8
+	ret
+.cfi_endproc
+.LSEH_end_set_encrypt_key:
+
+.align	16
+.Lkey_expansion_128:
+	$movkey	%xmm0,(%rax)
+	lea	16(%rax),%rax
+.Lkey_expansion_128_cold:
+	shufps	\$0b00010000,%xmm0,%xmm4
+	xorps	%xmm4, %xmm0
+	shufps	\$0b10001100,%xmm0,%xmm4
+	xorps	%xmm4, %xmm0
+	shufps	\$0b11111111,%xmm1,%xmm1	# critical path
+	xorps	%xmm1,%xmm0
+	ret
+
+.align 16
+.Lkey_expansion_192a:
+	$movkey	%xmm0,(%rax)
+	lea	16(%rax),%rax
+.Lkey_expansion_192a_cold:
+	movaps	%xmm2, %xmm5
+.Lkey_expansion_192b_warm:
+	shufps	\$0b00010000,%xmm0,%xmm4
+	movdqa	%xmm2,%xmm3
+	xorps	%xmm4,%xmm0
+	shufps	\$0b10001100,%xmm0,%xmm4
+	pslldq	\$4,%xmm3
+	xorps	%xmm4,%xmm0
+	pshufd	\$0b01010101,%xmm1,%xmm1	# critical path
+	pxor	%xmm3,%xmm2
+	pxor	%xmm1,%xmm0
+	pshufd	\$0b11111111,%xmm0,%xmm3
+	pxor	%xmm3,%xmm2
+	ret
+
+.align 16
+.Lkey_expansion_192b:
+	movaps	%xmm0,%xmm3
+	shufps	\$0b01000100,%xmm0,%xmm5
+	$movkey	%xmm5,(%rax)
+	shufps	\$0b01001110,%xmm2,%xmm3
+	$movkey	%xmm3,16(%rax)
+	lea	32(%rax),%rax
+	jmp	.Lkey_expansion_192b_warm
+
+.align	16
+.Lkey_expansion_256a:
+	$movkey	%xmm2,(%rax)
+	lea	16(%rax),%rax
+.Lkey_expansion_256a_cold:
+	shufps	\$0b00010000,%xmm0,%xmm4
+	xorps	%xmm4,%xmm0
+	shufps	\$0b10001100,%xmm0,%xmm4
+	xorps	%xmm4,%xmm0
+	shufps	\$0b11111111,%xmm1,%xmm1	# critical path
+	xorps	%xmm1,%xmm0
+	ret
+
+.align 16
+.Lkey_expansion_256b:
+	$movkey	%xmm0,(%rax)
+	lea	16(%rax),%rax
+
+	shufps	\$0b00010000,%xmm2,%xmm4
+	xorps	%xmm4,%xmm2
+	shufps	\$0b10001100,%xmm2,%xmm4
+	xorps	%xmm4,%xmm2
+	shufps	\$0b10101010,%xmm1,%xmm1	# critical path
+	xorps	%xmm1,%xmm2
+	ret
+.size	${PREFIX}_set_encrypt_key,.-${PREFIX}_set_encrypt_key
+.size	__aesni_set_encrypt_key,.-__aesni_set_encrypt_key
+___
+}
+
+$code.=<<___;
+.align	64
+.Lbswap_mask:
+	.byte	15,14,13,12,11,10,9,8,7,6,5,4,3,2,1,0
+.Lincrement32:
+	.long	6,6,6,0
+.Lincrement64:
+	.long	1,0,0,0
+.Lxts_magic:
+	.long	0x87,0,1,0
+.Lincrement1:
+	.byte	0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1
+.Lkey_rotate:
+	.long	0x0c0f0e0d,0x0c0f0e0d,0x0c0f0e0d,0x0c0f0e0d
+.Lkey_rotate192:
+	.long	0x04070605,0x04070605,0x04070605,0x04070605
+.Lkey_rcon1:
+	.long	1,1,1,1
+.Lkey_rcon1b:
+	.long	0x1b,0x1b,0x1b,0x1b
+
+.asciz  "AES for Intel AES-NI, CRYPTOGAMS by <appro\@openssl.org>"
+.align	64
+___
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+___
+$code.=<<___ if ($PREFIX eq "aesni");
+.type	ecb_ccm64_se_handler,\@abi-omnipotent
+.align	16
+ecb_ccm64_se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lcommon_seh_tail
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lcommon_seh_tail
+
+	lea	0(%rax),%rsi		# %xmm save area
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$8,%ecx		# 4*sizeof(%xmm0)/sizeof(%rax)
+	.long	0xa548f3fc		# cld; rep movsq
+	lea	0x58(%rax),%rax		# adjust stack pointer
+
+	jmp	.Lcommon_seh_tail
+.size	ecb_ccm64_se_handler,.-ecb_ccm64_se_handler
+
+.type	ctr_xts_se_handler,\@abi-omnipotent
+.align	16
+ctr_xts_se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue lable
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lcommon_seh_tail
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lcommon_seh_tail
+
+	mov	208($context),%rax	# pull context->R11
+
+	lea	-0xa8(%rax),%rsi	# %xmm save area
+	lea	512($context),%rdi	# & context.Xmm6
+	mov	\$20,%ecx		# 10*sizeof(%xmm0)/sizeof(%rax)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	-8(%rax),%rbp		# restore saved %rbp
+	mov	%rbp,160($context)	# restore context->Rbp
+	jmp	.Lcommon_seh_tail
+.size	ctr_xts_se_handler,.-ctr_xts_se_handler
+
+.type	ocb_se_handler,\@abi-omnipotent
+.align	16
+ocb_se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue lable
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lcommon_seh_tail
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lcommon_seh_tail
+
+	mov	8(%r11),%r10d		# HandlerData[2]
+	lea	(%rsi,%r10),%r10
+	cmp	%r10,%rbx		# context->Rip>=pop label
+	jae	.Locb_no_xmm
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	lea	(%rax),%rsi		# %xmm save area
+	lea	512($context),%rdi	# & context.Xmm6
+	mov	\$20,%ecx		# 10*sizeof(%xmm0)/sizeof(%rax)
+	.long	0xa548f3fc		# cld; rep movsq
+	lea	0xa0+0x28(%rax),%rax
+
+.Locb_no_xmm:
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+
+	jmp	.Lcommon_seh_tail
+.size	ocb_se_handler,.-ocb_se_handler
+___
+$code.=<<___;
+.type	cbc_se_handler,\@abi-omnipotent
+.align	16
+cbc_se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	152($context),%rax	# pull context->Rsp
+	mov	248($context),%rbx	# pull context->Rip
+
+	lea	.Lcbc_decrypt_bulk(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<"prologue" label
+	jb	.Lcommon_seh_tail
+
+	mov	120($context),%rax	# pull context->Rax
+
+	lea	.Lcbc_decrypt_body(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<cbc_decrypt_body
+	jb	.Lcommon_seh_tail
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	lea	.Lcbc_ret(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip>="epilogue" label
+	jae	.Lcommon_seh_tail
+
+	lea	16(%rax),%rsi		# %xmm save area
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$20,%ecx		# 10*sizeof(%xmm0)/sizeof(%rax)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	208($context),%rax	# pull context->R11
+
+	mov	-8(%rax),%rbp		# restore saved %rbp
+	mov	%rbp,160($context)	# restore context->Rbp
+
+.Lcommon_seh_tail:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	cbc_se_handler,.-cbc_se_handler
+
+.section	.pdata
+.align	4
+___
+$code.=<<___ if ($PREFIX eq "aesni");
+	.rva	.LSEH_begin_aesni_ecb_encrypt
+	.rva	.LSEH_end_aesni_ecb_encrypt
+	.rva	.LSEH_info_ecb
+
+	.rva	.LSEH_begin_aesni_ccm64_encrypt_blocks
+	.rva	.LSEH_end_aesni_ccm64_encrypt_blocks
+	.rva	.LSEH_info_ccm64_enc
+
+	.rva	.LSEH_begin_aesni_ccm64_decrypt_blocks
+	.rva	.LSEH_end_aesni_ccm64_decrypt_blocks
+	.rva	.LSEH_info_ccm64_dec
+
+	.rva	.LSEH_begin_aesni_ctr32_encrypt_blocks
+	.rva	.LSEH_end_aesni_ctr32_encrypt_blocks
+	.rva	.LSEH_info_ctr32
+
+	.rva	.LSEH_begin_aesni_xts_encrypt
+	.rva	.LSEH_end_aesni_xts_encrypt
+	.rva	.LSEH_info_xts_enc
+
+	.rva	.LSEH_begin_aesni_xts_decrypt
+	.rva	.LSEH_end_aesni_xts_decrypt
+	.rva	.LSEH_info_xts_dec
+
+	.rva	.LSEH_begin_aesni_ocb_encrypt
+	.rva	.LSEH_end_aesni_ocb_encrypt
+	.rva	.LSEH_info_ocb_enc
+
+	.rva	.LSEH_begin_aesni_ocb_decrypt
+	.rva	.LSEH_end_aesni_ocb_decrypt
+	.rva	.LSEH_info_ocb_dec
+___
+$code.=<<___;
+	.rva	.LSEH_begin_${PREFIX}_cbc_encrypt
+	.rva	.LSEH_end_${PREFIX}_cbc_encrypt
+	.rva	.LSEH_info_cbc
+
+	.rva	${PREFIX}_set_decrypt_key
+	.rva	.LSEH_end_set_decrypt_key
+	.rva	.LSEH_info_key
+
+	.rva	${PREFIX}_set_encrypt_key
+	.rva	.LSEH_end_set_encrypt_key
+	.rva	.LSEH_info_key
+.section	.xdata
+.align	8
+___
+$code.=<<___ if ($PREFIX eq "aesni");
+.LSEH_info_ecb:
+	.byte	9,0,0,0
+	.rva	ecb_ccm64_se_handler
+	.rva	.Lecb_enc_body,.Lecb_enc_ret		# HandlerData[]
+.LSEH_info_ccm64_enc:
+	.byte	9,0,0,0
+	.rva	ecb_ccm64_se_handler
+	.rva	.Lccm64_enc_body,.Lccm64_enc_ret	# HandlerData[]
+.LSEH_info_ccm64_dec:
+	.byte	9,0,0,0
+	.rva	ecb_ccm64_se_handler
+	.rva	.Lccm64_dec_body,.Lccm64_dec_ret	# HandlerData[]
+.LSEH_info_ctr32:
+	.byte	9,0,0,0
+	.rva	ctr_xts_se_handler
+	.rva	.Lctr32_body,.Lctr32_epilogue		# HandlerData[]
+.LSEH_info_xts_enc:
+	.byte	9,0,0,0
+	.rva	ctr_xts_se_handler
+	.rva	.Lxts_enc_body,.Lxts_enc_epilogue	# HandlerData[]
+.LSEH_info_xts_dec:
+	.byte	9,0,0,0
+	.rva	ctr_xts_se_handler
+	.rva	.Lxts_dec_body,.Lxts_dec_epilogue	# HandlerData[]
+.LSEH_info_ocb_enc:
+	.byte	9,0,0,0
+	.rva	ocb_se_handler
+	.rva	.Locb_enc_body,.Locb_enc_epilogue	# HandlerData[]
+	.rva	.Locb_enc_pop
+	.long	0
+.LSEH_info_ocb_dec:
+	.byte	9,0,0,0
+	.rva	ocb_se_handler
+	.rva	.Locb_dec_body,.Locb_dec_epilogue	# HandlerData[]
+	.rva	.Locb_dec_pop
+	.long	0
+___
+$code.=<<___;
+.LSEH_info_cbc:
+	.byte	9,0,0,0
+	.rva	cbc_se_handler
+.LSEH_info_key:
+	.byte	0x01,0x04,0x01,0x00
+	.byte	0x04,0x02,0x00,0x00	# sub rsp,8
+___
+}
+
+sub rex {
+  local *opcode=shift;
+  my ($dst,$src)=@_;
+  my $rex=0;
+
+    $rex|=0x04			if($dst>=8);
+    $rex|=0x01			if($src>=8);
+    push @opcode,$rex|0x40	if($rex);
+}
+
+sub aesni {
+  my $line=shift;
+  my @opcode=(0x66);
+
+    if ($line=~/(aeskeygenassist)\s+\$([x0-9a-f]+),\s*%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+	rex(\@opcode,$4,$3);
+	push @opcode,0x0f,0x3a,0xdf;
+	push @opcode,0xc0|($3&7)|(($4&7)<<3);	# ModR/M
+	my $c=$2;
+	push @opcode,$c=~/^0/?oct($c):$c;
+	return ".byte\t".join(',',@opcode);
+    }
+    elsif ($line=~/(aes[a-z]+)\s+%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+	my %opcodelet = (
+		"aesimc" => 0xdb,
+		"aesenc" => 0xdc,	"aesenclast" => 0xdd,
+		"aesdec" => 0xde,	"aesdeclast" => 0xdf
+	);
+	return undef if (!defined($opcodelet{$1}));
+	rex(\@opcode,$3,$2);
+	push @opcode,0x0f,0x38,$opcodelet{$1};
+	push @opcode,0xc0|($2&7)|(($3&7)<<3);	# ModR/M
+	return ".byte\t".join(',',@opcode);
+    }
+    elsif ($line=~/(aes[a-z]+)\s+([0x1-9a-fA-F]*)\(%rsp\),\s*%xmm([0-9]+)/) {
+	my %opcodelet = (
+		"aesenc" => 0xdc,	"aesenclast" => 0xdd,
+		"aesdec" => 0xde,	"aesdeclast" => 0xdf
+	);
+	return undef if (!defined($opcodelet{$1}));
+	my $off = $2;
+	push @opcode,0x44 if ($3>=8);
+	push @opcode,0x0f,0x38,$opcodelet{$1};
+	push @opcode,0x44|(($3&7)<<3),0x24;	# ModR/M
+	push @opcode,($off=~/^0/?oct($off):$off)&0xff;
+	return ".byte\t".join(',',@opcode);
+    }
+    return $line;
+}
+
+sub movbe {
+	".byte	0x0f,0x38,0xf1,0x44,0x24,".shift;
+}
+
+$code =~ s/\`([^\`]*)\`/eval($1)/gem;
+$code =~ s/\b(aes.*%xmm[0-9]+).*$/aesni($1)/gem;
+#$code =~ s/\bmovbe\s+%eax/bswap %eax; mov %eax/gm;	# debugging artefact
+$code =~ s/\bmovbe\s+%eax,\s*([0-9]+)\(%rsp\)/movbe($1)/gem;
+
+print $code;
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesp8-ppc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesp8-ppc.pl
new file mode 100755
index 000000000..488b13325
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesp8-ppc.pl
@@ -0,0 +1,3807 @@
+#! /usr/bin/env perl
+# Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# This module implements support for AES instructions as per PowerISA
+# specification version 2.07, first implemented by POWER8 processor.
+# The module is endian-agnostic in sense that it supports both big-
+# and little-endian cases. Data alignment in parallelizable modes is
+# handled with VSX loads and stores, which implies MSR.VSX flag being
+# set. It should also be noted that ISA specification doesn't prohibit
+# alignment exceptions for these instructions on page boundaries.
+# Initially alignment was handled in pure AltiVec/VMX way [when data
+# is aligned programmatically, which in turn guarantees exception-
+# free execution], but it turned to hamper performance when vcipher
+# instructions are interleaved. It's reckoned that eventual
+# misalignment penalties at page boundaries are in average lower
+# than additional overhead in pure AltiVec approach.
+#
+# May 2016
+#
+# Add XTS subroutine, 9x on little- and 12x improvement on big-endian
+# systems were measured.
+#
+######################################################################
+# Current large-block performance in cycles per byte processed with
+# 128-bit key (less is better).
+#
+#		CBC en-/decrypt	CTR	XTS
+# POWER8[le]	3.96/0.72	0.74	1.1
+# POWER8[be]	3.75/0.65	0.66	1.0
+# POWER9[le]	4.02/0.86	0.84	1.05
+# POWER9[be]	3.99/0.78	0.79	0.97
+
+$flavour = shift;
+
+if ($flavour =~ /64/) {
+	$SIZE_T	=8;
+	$LRSAVE	=2*$SIZE_T;
+	$STU	="stdu";
+	$POP	="ld";
+	$PUSH	="std";
+	$UCMP	="cmpld";
+	$SHL	="sldi";
+} elsif ($flavour =~ /32/) {
+	$SIZE_T	=4;
+	$LRSAVE	=$SIZE_T;
+	$STU	="stwu";
+	$POP	="lwz";
+	$PUSH	="stw";
+	$UCMP	="cmplw";
+	$SHL	="slwi";
+} else { die "nonsense $flavour"; }
+
+$LITTLE_ENDIAN = ($flavour=~/le$/) ? $SIZE_T : 0;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open STDOUT,"| $^X $xlate $flavour ".shift || die "can't call $xlate: $!";
+
+$FRAME=8*$SIZE_T;
+$prefix="aes_p8";
+
+$sp="r1";
+$vrsave="r12";
+
+#########################################################################
+{{{	# Key setup procedures						#
+my ($inp,$bits,$out,$ptr,$cnt,$rounds)=map("r$_",(3..8));
+my ($zero,$in0,$in1,$key,$rcon,$mask,$tmp)=map("v$_",(0..6));
+my ($stage,$outperm,$outmask,$outhead,$outtail)=map("v$_",(7..11));
+
+$code.=<<___;
+.machine	"any"
+
+.text
+
+.align	7
+rcon:
+.long	0x01000000, 0x01000000, 0x01000000, 0x01000000	?rev
+.long	0x1b000000, 0x1b000000, 0x1b000000, 0x1b000000	?rev
+.long	0x0d0e0f0c, 0x0d0e0f0c, 0x0d0e0f0c, 0x0d0e0f0c	?rev
+.long	0,0,0,0						?asis
+Lconsts:
+	mflr	r0
+	bcl	20,31,\$+4
+	mflr	$ptr	 #vvvvv "distance between . and rcon
+	addi	$ptr,$ptr,-0x48
+	mtlr	r0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+.asciz	"AES for PowerISA 2.07, CRYPTOGAMS by <appro\@openssl.org>"
+
+.globl	.${prefix}_set_encrypt_key
+.align	5
+.${prefix}_set_encrypt_key:
+Lset_encrypt_key:
+	mflr		r11
+	$PUSH		r11,$LRSAVE($sp)
+
+	li		$ptr,-1
+	${UCMP}i	$inp,0
+	beq-		Lenc_key_abort		# if ($inp==0) return -1;
+	${UCMP}i	$out,0
+	beq-		Lenc_key_abort		# if ($out==0) return -1;
+	li		$ptr,-2
+	cmpwi		$bits,128
+	blt-		Lenc_key_abort
+	cmpwi		$bits,256
+	bgt-		Lenc_key_abort
+	andi.		r0,$bits,0x3f
+	bne-		Lenc_key_abort
+
+	lis		r0,0xfff0
+	mfspr		$vrsave,256
+	mtspr		256,r0
+
+	bl		Lconsts
+	mtlr		r11
+
+	neg		r9,$inp
+	lvx		$in0,0,$inp
+	addi		$inp,$inp,15		# 15 is not typo
+	lvsr		$key,0,r9		# borrow $key
+	li		r8,0x20
+	cmpwi		$bits,192
+	lvx		$in1,0,$inp
+	le?vspltisb	$mask,0x0f		# borrow $mask
+	lvx		$rcon,0,$ptr
+	le?vxor		$key,$key,$mask		# adjust for byte swap
+	lvx		$mask,r8,$ptr
+	addi		$ptr,$ptr,0x10
+	vperm		$in0,$in0,$in1,$key	# align [and byte swap in LE]
+	li		$cnt,8
+	vxor		$zero,$zero,$zero
+	mtctr		$cnt
+
+	?lvsr		$outperm,0,$out
+	vspltisb	$outmask,-1
+	lvx		$outhead,0,$out
+	?vperm		$outmask,$zero,$outmask,$outperm
+
+	blt		Loop128
+	addi		$inp,$inp,8
+	beq		L192
+	addi		$inp,$inp,8
+	b		L256
+
+.align	4
+Loop128:
+	vperm		$key,$in0,$in0,$mask	# rotate-n-splat
+	vsldoi		$tmp,$zero,$in0,12	# >>32
+	 vperm		$outtail,$in0,$in0,$outperm	# rotate
+	 vsel		$stage,$outhead,$outtail,$outmask
+	 vmr		$outhead,$outtail
+	vcipherlast	$key,$key,$rcon
+	 stvx		$stage,0,$out
+	 addi		$out,$out,16
+
+	vxor		$in0,$in0,$tmp
+	vsldoi		$tmp,$zero,$tmp,12	# >>32
+	vxor		$in0,$in0,$tmp
+	vsldoi		$tmp,$zero,$tmp,12	# >>32
+	vxor		$in0,$in0,$tmp
+	 vadduwm	$rcon,$rcon,$rcon
+	vxor		$in0,$in0,$key
+	bdnz		Loop128
+
+	lvx		$rcon,0,$ptr		# last two round keys
+
+	vperm		$key,$in0,$in0,$mask	# rotate-n-splat
+	vsldoi		$tmp,$zero,$in0,12	# >>32
+	 vperm		$outtail,$in0,$in0,$outperm	# rotate
+	 vsel		$stage,$outhead,$outtail,$outmask
+	 vmr		$outhead,$outtail
+	vcipherlast	$key,$key,$rcon
+	 stvx		$stage,0,$out
+	 addi		$out,$out,16
+
+	vxor		$in0,$in0,$tmp
+	vsldoi		$tmp,$zero,$tmp,12	# >>32
+	vxor		$in0,$in0,$tmp
+	vsldoi		$tmp,$zero,$tmp,12	# >>32
+	vxor		$in0,$in0,$tmp
+	 vadduwm	$rcon,$rcon,$rcon
+	vxor		$in0,$in0,$key
+
+	vperm		$key,$in0,$in0,$mask	# rotate-n-splat
+	vsldoi		$tmp,$zero,$in0,12	# >>32
+	 vperm		$outtail,$in0,$in0,$outperm	# rotate
+	 vsel		$stage,$outhead,$outtail,$outmask
+	 vmr		$outhead,$outtail
+	vcipherlast	$key,$key,$rcon
+	 stvx		$stage,0,$out
+	 addi		$out,$out,16
+
+	vxor		$in0,$in0,$tmp
+	vsldoi		$tmp,$zero,$tmp,12	# >>32
+	vxor		$in0,$in0,$tmp
+	vsldoi		$tmp,$zero,$tmp,12	# >>32
+	vxor		$in0,$in0,$tmp
+	vxor		$in0,$in0,$key
+	 vperm		$outtail,$in0,$in0,$outperm	# rotate
+	 vsel		$stage,$outhead,$outtail,$outmask
+	 vmr		$outhead,$outtail
+	 stvx		$stage,0,$out
+
+	addi		$inp,$out,15		# 15 is not typo
+	addi		$out,$out,0x50
+
+	li		$rounds,10
+	b		Ldone
+
+.align	4
+L192:
+	lvx		$tmp,0,$inp
+	li		$cnt,4
+	 vperm		$outtail,$in0,$in0,$outperm	# rotate
+	 vsel		$stage,$outhead,$outtail,$outmask
+	 vmr		$outhead,$outtail
+	 stvx		$stage,0,$out
+	 addi		$out,$out,16
+	vperm		$in1,$in1,$tmp,$key	# align [and byte swap in LE]
+	vspltisb	$key,8			# borrow $key
+	mtctr		$cnt
+	vsububm		$mask,$mask,$key	# adjust the mask
+
+Loop192:
+	vperm		$key,$in1,$in1,$mask	# roate-n-splat
+	vsldoi		$tmp,$zero,$in0,12	# >>32
+	vcipherlast	$key,$key,$rcon
+
+	vxor		$in0,$in0,$tmp
+	vsldoi		$tmp,$zero,$tmp,12	# >>32
+	vxor		$in0,$in0,$tmp
+	vsldoi		$tmp,$zero,$tmp,12	# >>32
+	vxor		$in0,$in0,$tmp
+
+	 vsldoi		$stage,$zero,$in1,8
+	vspltw		$tmp,$in0,3
+	vxor		$tmp,$tmp,$in1
+	vsldoi		$in1,$zero,$in1,12	# >>32
+	 vadduwm	$rcon,$rcon,$rcon
+	vxor		$in1,$in1,$tmp
+	vxor		$in0,$in0,$key
+	vxor		$in1,$in1,$key
+	 vsldoi		$stage,$stage,$in0,8
+
+	vperm		$key,$in1,$in1,$mask	# rotate-n-splat
+	vsldoi		$tmp,$zero,$in0,12	# >>32
+	 vperm		$outtail,$stage,$stage,$outperm	# rotate
+	 vsel		$stage,$outhead,$outtail,$outmask
+	 vmr		$outhead,$outtail
+	vcipherlast	$key,$key,$rcon
+	 stvx		$stage,0,$out
+	 addi		$out,$out,16
+
+	 vsldoi		$stage,$in0,$in1,8
+	vxor		$in0,$in0,$tmp
+	vsldoi		$tmp,$zero,$tmp,12	# >>32
+	 vperm		$outtail,$stage,$stage,$outperm	# rotate
+	 vsel		$stage,$outhead,$outtail,$outmask
+	 vmr		$outhead,$outtail
+	vxor		$in0,$in0,$tmp
+	vsldoi		$tmp,$zero,$tmp,12	# >>32
+	vxor		$in0,$in0,$tmp
+	 stvx		$stage,0,$out
+	 addi		$out,$out,16
+
+	vspltw		$tmp,$in0,3
+	vxor		$tmp,$tmp,$in1
+	vsldoi		$in1,$zero,$in1,12	# >>32
+	 vadduwm	$rcon,$rcon,$rcon
+	vxor		$in1,$in1,$tmp
+	vxor		$in0,$in0,$key
+	vxor		$in1,$in1,$key
+	 vperm		$outtail,$in0,$in0,$outperm	# rotate
+	 vsel		$stage,$outhead,$outtail,$outmask
+	 vmr		$outhead,$outtail
+	 stvx		$stage,0,$out
+	 addi		$inp,$out,15		# 15 is not typo
+	 addi		$out,$out,16
+	bdnz		Loop192
+
+	li		$rounds,12
+	addi		$out,$out,0x20
+	b		Ldone
+
+.align	4
+L256:
+	lvx		$tmp,0,$inp
+	li		$cnt,7
+	li		$rounds,14
+	 vperm		$outtail,$in0,$in0,$outperm	# rotate
+	 vsel		$stage,$outhead,$outtail,$outmask
+	 vmr		$outhead,$outtail
+	 stvx		$stage,0,$out
+	 addi		$out,$out,16
+	vperm		$in1,$in1,$tmp,$key	# align [and byte swap in LE]
+	mtctr		$cnt
+
+Loop256:
+	vperm		$key,$in1,$in1,$mask	# rotate-n-splat
+	vsldoi		$tmp,$zero,$in0,12	# >>32
+	 vperm		$outtail,$in1,$in1,$outperm	# rotate
+	 vsel		$stage,$outhead,$outtail,$outmask
+	 vmr		$outhead,$outtail
+	vcipherlast	$key,$key,$rcon
+	 stvx		$stage,0,$out
+	 addi		$out,$out,16
+
+	vxor		$in0,$in0,$tmp
+	vsldoi		$tmp,$zero,$tmp,12	# >>32
+	vxor		$in0,$in0,$tmp
+	vsldoi		$tmp,$zero,$tmp,12	# >>32
+	vxor		$in0,$in0,$tmp
+	 vadduwm	$rcon,$rcon,$rcon
+	vxor		$in0,$in0,$key
+	 vperm		$outtail,$in0,$in0,$outperm	# rotate
+	 vsel		$stage,$outhead,$outtail,$outmask
+	 vmr		$outhead,$outtail
+	 stvx		$stage,0,$out
+	 addi		$inp,$out,15		# 15 is not typo
+	 addi		$out,$out,16
+	bdz		Ldone
+
+	vspltw		$key,$in0,3		# just splat
+	vsldoi		$tmp,$zero,$in1,12	# >>32
+	vsbox		$key,$key
+
+	vxor		$in1,$in1,$tmp
+	vsldoi		$tmp,$zero,$tmp,12	# >>32
+	vxor		$in1,$in1,$tmp
+	vsldoi		$tmp,$zero,$tmp,12	# >>32
+	vxor		$in1,$in1,$tmp
+
+	vxor		$in1,$in1,$key
+	b		Loop256
+
+.align	4
+Ldone:
+	lvx		$in1,0,$inp		# redundant in aligned case
+	vsel		$in1,$outhead,$in1,$outmask
+	stvx		$in1,0,$inp
+	li		$ptr,0
+	mtspr		256,$vrsave
+	stw		$rounds,0($out)
+
+Lenc_key_abort:
+	mr		r3,$ptr
+	blr
+	.long		0
+	.byte		0,12,0x14,1,0,0,3,0
+	.long		0
+.size	.${prefix}_set_encrypt_key,.-.${prefix}_set_encrypt_key
+
+.globl	.${prefix}_set_decrypt_key
+.align	5
+.${prefix}_set_decrypt_key:
+	$STU		$sp,-$FRAME($sp)
+	mflr		r10
+	$PUSH		r10,$FRAME+$LRSAVE($sp)
+	bl		Lset_encrypt_key
+	mtlr		r10
+
+	cmpwi		r3,0
+	bne-		Ldec_key_abort
+
+	slwi		$cnt,$rounds,4
+	subi		$inp,$out,240		# first round key
+	srwi		$rounds,$rounds,1
+	add		$out,$inp,$cnt		# last round key
+	mtctr		$rounds
+
+Ldeckey:
+	lwz		r0, 0($inp)
+	lwz		r6, 4($inp)
+	lwz		r7, 8($inp)
+	lwz		r8, 12($inp)
+	addi		$inp,$inp,16
+	lwz		r9, 0($out)
+	lwz		r10,4($out)
+	lwz		r11,8($out)
+	lwz		r12,12($out)
+	stw		r0, 0($out)
+	stw		r6, 4($out)
+	stw		r7, 8($out)
+	stw		r8, 12($out)
+	subi		$out,$out,16
+	stw		r9, -16($inp)
+	stw		r10,-12($inp)
+	stw		r11,-8($inp)
+	stw		r12,-4($inp)
+	bdnz		Ldeckey
+
+	xor		r3,r3,r3		# return value
+Ldec_key_abort:
+	addi		$sp,$sp,$FRAME
+	blr
+	.long		0
+	.byte		0,12,4,1,0x80,0,3,0
+	.long		0
+.size	.${prefix}_set_decrypt_key,.-.${prefix}_set_decrypt_key
+___
+}}}
+#########################################################################
+{{{	# Single block en- and decrypt procedures			#
+sub gen_block () {
+my $dir = shift;
+my $n   = $dir eq "de" ? "n" : "";
+my ($inp,$out,$key,$rounds,$idx)=map("r$_",(3..7));
+
+$code.=<<___;
+.globl	.${prefix}_${dir}crypt
+.align	5
+.${prefix}_${dir}crypt:
+	lwz		$rounds,240($key)
+	lis		r0,0xfc00
+	mfspr		$vrsave,256
+	li		$idx,15			# 15 is not typo
+	mtspr		256,r0
+
+	lvx		v0,0,$inp
+	neg		r11,$out
+	lvx		v1,$idx,$inp
+	lvsl		v2,0,$inp		# inpperm
+	le?vspltisb	v4,0x0f
+	?lvsl		v3,0,r11		# outperm
+	le?vxor		v2,v2,v4
+	li		$idx,16
+	vperm		v0,v0,v1,v2		# align [and byte swap in LE]
+	lvx		v1,0,$key
+	?lvsl		v5,0,$key		# keyperm
+	srwi		$rounds,$rounds,1
+	lvx		v2,$idx,$key
+	addi		$idx,$idx,16
+	subi		$rounds,$rounds,1
+	?vperm		v1,v1,v2,v5		# align round key
+
+	vxor		v0,v0,v1
+	lvx		v1,$idx,$key
+	addi		$idx,$idx,16
+	mtctr		$rounds
+
+Loop_${dir}c:
+	?vperm		v2,v2,v1,v5
+	v${n}cipher	v0,v0,v2
+	lvx		v2,$idx,$key
+	addi		$idx,$idx,16
+	?vperm		v1,v1,v2,v5
+	v${n}cipher	v0,v0,v1
+	lvx		v1,$idx,$key
+	addi		$idx,$idx,16
+	bdnz		Loop_${dir}c
+
+	?vperm		v2,v2,v1,v5
+	v${n}cipher	v0,v0,v2
+	lvx		v2,$idx,$key
+	?vperm		v1,v1,v2,v5
+	v${n}cipherlast	v0,v0,v1
+
+	vspltisb	v2,-1
+	vxor		v1,v1,v1
+	li		$idx,15			# 15 is not typo
+	?vperm		v2,v1,v2,v3		# outmask
+	le?vxor		v3,v3,v4
+	lvx		v1,0,$out		# outhead
+	vperm		v0,v0,v0,v3		# rotate [and byte swap in LE]
+	vsel		v1,v1,v0,v2
+	lvx		v4,$idx,$out
+	stvx		v1,0,$out
+	vsel		v0,v0,v4,v2
+	stvx		v0,$idx,$out
+
+	mtspr		256,$vrsave
+	blr
+	.long		0
+	.byte		0,12,0x14,0,0,0,3,0
+	.long		0
+.size	.${prefix}_${dir}crypt,.-.${prefix}_${dir}crypt
+___
+}
+&gen_block("en");
+&gen_block("de");
+}}}
+#########################################################################
+{{{	# CBC en- and decrypt procedures				#
+my ($inp,$out,$len,$key,$ivp,$enc,$rounds,$idx)=map("r$_",(3..10));
+my ($rndkey0,$rndkey1,$inout,$tmp)=		map("v$_",(0..3));
+my ($ivec,$inptail,$inpperm,$outhead,$outperm,$outmask,$keyperm)=
+						map("v$_",(4..10));
+$code.=<<___;
+.globl	.${prefix}_cbc_encrypt
+.align	5
+.${prefix}_cbc_encrypt:
+	${UCMP}i	$len,16
+	bltlr-
+
+	cmpwi		$enc,0			# test direction
+	lis		r0,0xffe0
+	mfspr		$vrsave,256
+	mtspr		256,r0
+
+	li		$idx,15
+	vxor		$rndkey0,$rndkey0,$rndkey0
+	le?vspltisb	$tmp,0x0f
+
+	lvx		$ivec,0,$ivp		# load [unaligned] iv
+	lvsl		$inpperm,0,$ivp
+	lvx		$inptail,$idx,$ivp
+	le?vxor		$inpperm,$inpperm,$tmp
+	vperm		$ivec,$ivec,$inptail,$inpperm
+
+	neg		r11,$inp
+	?lvsl		$keyperm,0,$key		# prepare for unaligned key
+	lwz		$rounds,240($key)
+
+	lvsr		$inpperm,0,r11		# prepare for unaligned load
+	lvx		$inptail,0,$inp
+	addi		$inp,$inp,15		# 15 is not typo
+	le?vxor		$inpperm,$inpperm,$tmp
+
+	?lvsr		$outperm,0,$out		# prepare for unaligned store
+	vspltisb	$outmask,-1
+	lvx		$outhead,0,$out
+	?vperm		$outmask,$rndkey0,$outmask,$outperm
+	le?vxor		$outperm,$outperm,$tmp
+
+	srwi		$rounds,$rounds,1
+	li		$idx,16
+	subi		$rounds,$rounds,1
+	beq		Lcbc_dec
+
+Lcbc_enc:
+	vmr		$inout,$inptail
+	lvx		$inptail,0,$inp
+	addi		$inp,$inp,16
+	mtctr		$rounds
+	subi		$len,$len,16		# len-=16
+
+	lvx		$rndkey0,0,$key
+	 vperm		$inout,$inout,$inptail,$inpperm
+	lvx		$rndkey1,$idx,$key
+	addi		$idx,$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vxor		$inout,$inout,$rndkey0
+	lvx		$rndkey0,$idx,$key
+	addi		$idx,$idx,16
+	vxor		$inout,$inout,$ivec
+
+Loop_cbc_enc:
+	?vperm		$rndkey1,$rndkey1,$rndkey0,$keyperm
+	vcipher		$inout,$inout,$rndkey1
+	lvx		$rndkey1,$idx,$key
+	addi		$idx,$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vcipher		$inout,$inout,$rndkey0
+	lvx		$rndkey0,$idx,$key
+	addi		$idx,$idx,16
+	bdnz		Loop_cbc_enc
+
+	?vperm		$rndkey1,$rndkey1,$rndkey0,$keyperm
+	vcipher		$inout,$inout,$rndkey1
+	lvx		$rndkey1,$idx,$key
+	li		$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vcipherlast	$ivec,$inout,$rndkey0
+	${UCMP}i	$len,16
+
+	vperm		$tmp,$ivec,$ivec,$outperm
+	vsel		$inout,$outhead,$tmp,$outmask
+	vmr		$outhead,$tmp
+	stvx		$inout,0,$out
+	addi		$out,$out,16
+	bge		Lcbc_enc
+
+	b		Lcbc_done
+
+.align	4
+Lcbc_dec:
+	${UCMP}i	$len,128
+	bge		_aesp8_cbc_decrypt8x
+	vmr		$tmp,$inptail
+	lvx		$inptail,0,$inp
+	addi		$inp,$inp,16
+	mtctr		$rounds
+	subi		$len,$len,16		# len-=16
+
+	lvx		$rndkey0,0,$key
+	 vperm		$tmp,$tmp,$inptail,$inpperm
+	lvx		$rndkey1,$idx,$key
+	addi		$idx,$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vxor		$inout,$tmp,$rndkey0
+	lvx		$rndkey0,$idx,$key
+	addi		$idx,$idx,16
+
+Loop_cbc_dec:
+	?vperm		$rndkey1,$rndkey1,$rndkey0,$keyperm
+	vncipher	$inout,$inout,$rndkey1
+	lvx		$rndkey1,$idx,$key
+	addi		$idx,$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vncipher	$inout,$inout,$rndkey0
+	lvx		$rndkey0,$idx,$key
+	addi		$idx,$idx,16
+	bdnz		Loop_cbc_dec
+
+	?vperm		$rndkey1,$rndkey1,$rndkey0,$keyperm
+	vncipher	$inout,$inout,$rndkey1
+	lvx		$rndkey1,$idx,$key
+	li		$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vncipherlast	$inout,$inout,$rndkey0
+	${UCMP}i	$len,16
+
+	vxor		$inout,$inout,$ivec
+	vmr		$ivec,$tmp
+	vperm		$tmp,$inout,$inout,$outperm
+	vsel		$inout,$outhead,$tmp,$outmask
+	vmr		$outhead,$tmp
+	stvx		$inout,0,$out
+	addi		$out,$out,16
+	bge		Lcbc_dec
+
+Lcbc_done:
+	addi		$out,$out,-1
+	lvx		$inout,0,$out		# redundant in aligned case
+	vsel		$inout,$outhead,$inout,$outmask
+	stvx		$inout,0,$out
+
+	neg		$enc,$ivp		# write [unaligned] iv
+	li		$idx,15			# 15 is not typo
+	vxor		$rndkey0,$rndkey0,$rndkey0
+	vspltisb	$outmask,-1
+	le?vspltisb	$tmp,0x0f
+	?lvsl		$outperm,0,$enc
+	?vperm		$outmask,$rndkey0,$outmask,$outperm
+	le?vxor		$outperm,$outperm,$tmp
+	lvx		$outhead,0,$ivp
+	vperm		$ivec,$ivec,$ivec,$outperm
+	vsel		$inout,$outhead,$ivec,$outmask
+	lvx		$inptail,$idx,$ivp
+	stvx		$inout,0,$ivp
+	vsel		$inout,$ivec,$inptail,$outmask
+	stvx		$inout,$idx,$ivp
+
+	mtspr		256,$vrsave
+	blr
+	.long		0
+	.byte		0,12,0x14,0,0,0,6,0
+	.long		0
+___
+#########################################################################
+{{	# Optimized CBC decrypt procedure				#
+my $key_="r11";
+my ($x00,$x10,$x20,$x30,$x40,$x50,$x60,$x70)=map("r$_",(0,8,26..31));
+    $x00=0 if ($flavour =~ /osx/);
+my ($in0, $in1, $in2, $in3, $in4, $in5, $in6, $in7 )=map("v$_",(0..3,10..13));
+my ($out0,$out1,$out2,$out3,$out4,$out5,$out6,$out7)=map("v$_",(14..21));
+my $rndkey0="v23";	# v24-v25 rotating buffer for first found keys
+			# v26-v31 last 6 round keys
+my ($tmp,$keyperm)=($in3,$in4);	# aliases with "caller", redundant assignment
+
+$code.=<<___;
+.align	5
+_aesp8_cbc_decrypt8x:
+	$STU		$sp,-`($FRAME+21*16+6*$SIZE_T)`($sp)
+	li		r10,`$FRAME+8*16+15`
+	li		r11,`$FRAME+8*16+31`
+	stvx		v20,r10,$sp		# ABI says so
+	addi		r10,r10,32
+	stvx		v21,r11,$sp
+	addi		r11,r11,32
+	stvx		v22,r10,$sp
+	addi		r10,r10,32
+	stvx		v23,r11,$sp
+	addi		r11,r11,32
+	stvx		v24,r10,$sp
+	addi		r10,r10,32
+	stvx		v25,r11,$sp
+	addi		r11,r11,32
+	stvx		v26,r10,$sp
+	addi		r10,r10,32
+	stvx		v27,r11,$sp
+	addi		r11,r11,32
+	stvx		v28,r10,$sp
+	addi		r10,r10,32
+	stvx		v29,r11,$sp
+	addi		r11,r11,32
+	stvx		v30,r10,$sp
+	stvx		v31,r11,$sp
+	li		r0,-1
+	stw		$vrsave,`$FRAME+21*16-4`($sp)	# save vrsave
+	li		$x10,0x10
+	$PUSH		r26,`$FRAME+21*16+0*$SIZE_T`($sp)
+	li		$x20,0x20
+	$PUSH		r27,`$FRAME+21*16+1*$SIZE_T`($sp)
+	li		$x30,0x30
+	$PUSH		r28,`$FRAME+21*16+2*$SIZE_T`($sp)
+	li		$x40,0x40
+	$PUSH		r29,`$FRAME+21*16+3*$SIZE_T`($sp)
+	li		$x50,0x50
+	$PUSH		r30,`$FRAME+21*16+4*$SIZE_T`($sp)
+	li		$x60,0x60
+	$PUSH		r31,`$FRAME+21*16+5*$SIZE_T`($sp)
+	li		$x70,0x70
+	mtspr		256,r0
+
+	subi		$rounds,$rounds,3	# -4 in total
+	subi		$len,$len,128		# bias
+
+	lvx		$rndkey0,$x00,$key	# load key schedule
+	lvx		v30,$x10,$key
+	addi		$key,$key,0x20
+	lvx		v31,$x00,$key
+	?vperm		$rndkey0,$rndkey0,v30,$keyperm
+	addi		$key_,$sp,$FRAME+15
+	mtctr		$rounds
+
+Load_cbc_dec_key:
+	?vperm		v24,v30,v31,$keyperm
+	lvx		v30,$x10,$key
+	addi		$key,$key,0x20
+	stvx		v24,$x00,$key_		# off-load round[1]
+	?vperm		v25,v31,v30,$keyperm
+	lvx		v31,$x00,$key
+	stvx		v25,$x10,$key_		# off-load round[2]
+	addi		$key_,$key_,0x20
+	bdnz		Load_cbc_dec_key
+
+	lvx		v26,$x10,$key
+	?vperm		v24,v30,v31,$keyperm
+	lvx		v27,$x20,$key
+	stvx		v24,$x00,$key_		# off-load round[3]
+	?vperm		v25,v31,v26,$keyperm
+	lvx		v28,$x30,$key
+	stvx		v25,$x10,$key_		# off-load round[4]
+	addi		$key_,$sp,$FRAME+15	# rewind $key_
+	?vperm		v26,v26,v27,$keyperm
+	lvx		v29,$x40,$key
+	?vperm		v27,v27,v28,$keyperm
+	lvx		v30,$x50,$key
+	?vperm		v28,v28,v29,$keyperm
+	lvx		v31,$x60,$key
+	?vperm		v29,v29,v30,$keyperm
+	lvx		$out0,$x70,$key		# borrow $out0
+	?vperm		v30,v30,v31,$keyperm
+	lvx		v24,$x00,$key_		# pre-load round[1]
+	?vperm		v31,v31,$out0,$keyperm
+	lvx		v25,$x10,$key_		# pre-load round[2]
+
+	#lvx		$inptail,0,$inp		# "caller" already did this
+	#addi		$inp,$inp,15		# 15 is not typo
+	subi		$inp,$inp,15		# undo "caller"
+
+	 le?li		$idx,8
+	lvx_u		$in0,$x00,$inp		# load first 8 "words"
+	 le?lvsl	$inpperm,0,$idx
+	 le?vspltisb	$tmp,0x0f
+	lvx_u		$in1,$x10,$inp
+	 le?vxor	$inpperm,$inpperm,$tmp	# transform for lvx_u/stvx_u
+	lvx_u		$in2,$x20,$inp
+	 le?vperm	$in0,$in0,$in0,$inpperm
+	lvx_u		$in3,$x30,$inp
+	 le?vperm	$in1,$in1,$in1,$inpperm
+	lvx_u		$in4,$x40,$inp
+	 le?vperm	$in2,$in2,$in2,$inpperm
+	vxor		$out0,$in0,$rndkey0
+	lvx_u		$in5,$x50,$inp
+	 le?vperm	$in3,$in3,$in3,$inpperm
+	vxor		$out1,$in1,$rndkey0
+	lvx_u		$in6,$x60,$inp
+	 le?vperm	$in4,$in4,$in4,$inpperm
+	vxor		$out2,$in2,$rndkey0
+	lvx_u		$in7,$x70,$inp
+	addi		$inp,$inp,0x80
+	 le?vperm	$in5,$in5,$in5,$inpperm
+	vxor		$out3,$in3,$rndkey0
+	 le?vperm	$in6,$in6,$in6,$inpperm
+	vxor		$out4,$in4,$rndkey0
+	 le?vperm	$in7,$in7,$in7,$inpperm
+	vxor		$out5,$in5,$rndkey0
+	vxor		$out6,$in6,$rndkey0
+	vxor		$out7,$in7,$rndkey0
+
+	mtctr		$rounds
+	b		Loop_cbc_dec8x
+.align	5
+Loop_cbc_dec8x:
+	vncipher	$out0,$out0,v24
+	vncipher	$out1,$out1,v24
+	vncipher	$out2,$out2,v24
+	vncipher	$out3,$out3,v24
+	vncipher	$out4,$out4,v24
+	vncipher	$out5,$out5,v24
+	vncipher	$out6,$out6,v24
+	vncipher	$out7,$out7,v24
+	lvx		v24,$x20,$key_		# round[3]
+	addi		$key_,$key_,0x20
+
+	vncipher	$out0,$out0,v25
+	vncipher	$out1,$out1,v25
+	vncipher	$out2,$out2,v25
+	vncipher	$out3,$out3,v25
+	vncipher	$out4,$out4,v25
+	vncipher	$out5,$out5,v25
+	vncipher	$out6,$out6,v25
+	vncipher	$out7,$out7,v25
+	lvx		v25,$x10,$key_		# round[4]
+	bdnz		Loop_cbc_dec8x
+
+	subic		$len,$len,128		# $len-=128
+	vncipher	$out0,$out0,v24
+	vncipher	$out1,$out1,v24
+	vncipher	$out2,$out2,v24
+	vncipher	$out3,$out3,v24
+	vncipher	$out4,$out4,v24
+	vncipher	$out5,$out5,v24
+	vncipher	$out6,$out6,v24
+	vncipher	$out7,$out7,v24
+
+	subfe.		r0,r0,r0		# borrow?-1:0
+	vncipher	$out0,$out0,v25
+	vncipher	$out1,$out1,v25
+	vncipher	$out2,$out2,v25
+	vncipher	$out3,$out3,v25
+	vncipher	$out4,$out4,v25
+	vncipher	$out5,$out5,v25
+	vncipher	$out6,$out6,v25
+	vncipher	$out7,$out7,v25
+
+	and		r0,r0,$len
+	vncipher	$out0,$out0,v26
+	vncipher	$out1,$out1,v26
+	vncipher	$out2,$out2,v26
+	vncipher	$out3,$out3,v26
+	vncipher	$out4,$out4,v26
+	vncipher	$out5,$out5,v26
+	vncipher	$out6,$out6,v26
+	vncipher	$out7,$out7,v26
+
+	add		$inp,$inp,r0		# $inp is adjusted in such
+						# way that at exit from the
+						# loop inX-in7 are loaded
+						# with last "words"
+	vncipher	$out0,$out0,v27
+	vncipher	$out1,$out1,v27
+	vncipher	$out2,$out2,v27
+	vncipher	$out3,$out3,v27
+	vncipher	$out4,$out4,v27
+	vncipher	$out5,$out5,v27
+	vncipher	$out6,$out6,v27
+	vncipher	$out7,$out7,v27
+
+	addi		$key_,$sp,$FRAME+15	# rewind $key_
+	vncipher	$out0,$out0,v28
+	vncipher	$out1,$out1,v28
+	vncipher	$out2,$out2,v28
+	vncipher	$out3,$out3,v28
+	vncipher	$out4,$out4,v28
+	vncipher	$out5,$out5,v28
+	vncipher	$out6,$out6,v28
+	vncipher	$out7,$out7,v28
+	lvx		v24,$x00,$key_		# re-pre-load round[1]
+
+	vncipher	$out0,$out0,v29
+	vncipher	$out1,$out1,v29
+	vncipher	$out2,$out2,v29
+	vncipher	$out3,$out3,v29
+	vncipher	$out4,$out4,v29
+	vncipher	$out5,$out5,v29
+	vncipher	$out6,$out6,v29
+	vncipher	$out7,$out7,v29
+	lvx		v25,$x10,$key_		# re-pre-load round[2]
+
+	vncipher	$out0,$out0,v30
+	 vxor		$ivec,$ivec,v31		# xor with last round key
+	vncipher	$out1,$out1,v30
+	 vxor		$in0,$in0,v31
+	vncipher	$out2,$out2,v30
+	 vxor		$in1,$in1,v31
+	vncipher	$out3,$out3,v30
+	 vxor		$in2,$in2,v31
+	vncipher	$out4,$out4,v30
+	 vxor		$in3,$in3,v31
+	vncipher	$out5,$out5,v30
+	 vxor		$in4,$in4,v31
+	vncipher	$out6,$out6,v30
+	 vxor		$in5,$in5,v31
+	vncipher	$out7,$out7,v30
+	 vxor		$in6,$in6,v31
+
+	vncipherlast	$out0,$out0,$ivec
+	vncipherlast	$out1,$out1,$in0
+	 lvx_u		$in0,$x00,$inp		# load next input block
+	vncipherlast	$out2,$out2,$in1
+	 lvx_u		$in1,$x10,$inp
+	vncipherlast	$out3,$out3,$in2
+	 le?vperm	$in0,$in0,$in0,$inpperm
+	 lvx_u		$in2,$x20,$inp
+	vncipherlast	$out4,$out4,$in3
+	 le?vperm	$in1,$in1,$in1,$inpperm
+	 lvx_u		$in3,$x30,$inp
+	vncipherlast	$out5,$out5,$in4
+	 le?vperm	$in2,$in2,$in2,$inpperm
+	 lvx_u		$in4,$x40,$inp
+	vncipherlast	$out6,$out6,$in5
+	 le?vperm	$in3,$in3,$in3,$inpperm
+	 lvx_u		$in5,$x50,$inp
+	vncipherlast	$out7,$out7,$in6
+	 le?vperm	$in4,$in4,$in4,$inpperm
+	 lvx_u		$in6,$x60,$inp
+	vmr		$ivec,$in7
+	 le?vperm	$in5,$in5,$in5,$inpperm
+	 lvx_u		$in7,$x70,$inp
+	 addi		$inp,$inp,0x80
+
+	le?vperm	$out0,$out0,$out0,$inpperm
+	le?vperm	$out1,$out1,$out1,$inpperm
+	stvx_u		$out0,$x00,$out
+	 le?vperm	$in6,$in6,$in6,$inpperm
+	 vxor		$out0,$in0,$rndkey0
+	le?vperm	$out2,$out2,$out2,$inpperm
+	stvx_u		$out1,$x10,$out
+	 le?vperm	$in7,$in7,$in7,$inpperm
+	 vxor		$out1,$in1,$rndkey0
+	le?vperm	$out3,$out3,$out3,$inpperm
+	stvx_u		$out2,$x20,$out
+	 vxor		$out2,$in2,$rndkey0
+	le?vperm	$out4,$out4,$out4,$inpperm
+	stvx_u		$out3,$x30,$out
+	 vxor		$out3,$in3,$rndkey0
+	le?vperm	$out5,$out5,$out5,$inpperm
+	stvx_u		$out4,$x40,$out
+	 vxor		$out4,$in4,$rndkey0
+	le?vperm	$out6,$out6,$out6,$inpperm
+	stvx_u		$out5,$x50,$out
+	 vxor		$out5,$in5,$rndkey0
+	le?vperm	$out7,$out7,$out7,$inpperm
+	stvx_u		$out6,$x60,$out
+	 vxor		$out6,$in6,$rndkey0
+	stvx_u		$out7,$x70,$out
+	addi		$out,$out,0x80
+	 vxor		$out7,$in7,$rndkey0
+
+	mtctr		$rounds
+	beq		Loop_cbc_dec8x		# did $len-=128 borrow?
+
+	addic.		$len,$len,128
+	beq		Lcbc_dec8x_done
+	nop
+	nop
+
+Loop_cbc_dec8x_tail:				# up to 7 "words" tail...
+	vncipher	$out1,$out1,v24
+	vncipher	$out2,$out2,v24
+	vncipher	$out3,$out3,v24
+	vncipher	$out4,$out4,v24
+	vncipher	$out5,$out5,v24
+	vncipher	$out6,$out6,v24
+	vncipher	$out7,$out7,v24
+	lvx		v24,$x20,$key_		# round[3]
+	addi		$key_,$key_,0x20
+
+	vncipher	$out1,$out1,v25
+	vncipher	$out2,$out2,v25
+	vncipher	$out3,$out3,v25
+	vncipher	$out4,$out4,v25
+	vncipher	$out5,$out5,v25
+	vncipher	$out6,$out6,v25
+	vncipher	$out7,$out7,v25
+	lvx		v25,$x10,$key_		# round[4]
+	bdnz		Loop_cbc_dec8x_tail
+
+	vncipher	$out1,$out1,v24
+	vncipher	$out2,$out2,v24
+	vncipher	$out3,$out3,v24
+	vncipher	$out4,$out4,v24
+	vncipher	$out5,$out5,v24
+	vncipher	$out6,$out6,v24
+	vncipher	$out7,$out7,v24
+
+	vncipher	$out1,$out1,v25
+	vncipher	$out2,$out2,v25
+	vncipher	$out3,$out3,v25
+	vncipher	$out4,$out4,v25
+	vncipher	$out5,$out5,v25
+	vncipher	$out6,$out6,v25
+	vncipher	$out7,$out7,v25
+
+	vncipher	$out1,$out1,v26
+	vncipher	$out2,$out2,v26
+	vncipher	$out3,$out3,v26
+	vncipher	$out4,$out4,v26
+	vncipher	$out5,$out5,v26
+	vncipher	$out6,$out6,v26
+	vncipher	$out7,$out7,v26
+
+	vncipher	$out1,$out1,v27
+	vncipher	$out2,$out2,v27
+	vncipher	$out3,$out3,v27
+	vncipher	$out4,$out4,v27
+	vncipher	$out5,$out5,v27
+	vncipher	$out6,$out6,v27
+	vncipher	$out7,$out7,v27
+
+	vncipher	$out1,$out1,v28
+	vncipher	$out2,$out2,v28
+	vncipher	$out3,$out3,v28
+	vncipher	$out4,$out4,v28
+	vncipher	$out5,$out5,v28
+	vncipher	$out6,$out6,v28
+	vncipher	$out7,$out7,v28
+
+	vncipher	$out1,$out1,v29
+	vncipher	$out2,$out2,v29
+	vncipher	$out3,$out3,v29
+	vncipher	$out4,$out4,v29
+	vncipher	$out5,$out5,v29
+	vncipher	$out6,$out6,v29
+	vncipher	$out7,$out7,v29
+
+	vncipher	$out1,$out1,v30
+	 vxor		$ivec,$ivec,v31		# last round key
+	vncipher	$out2,$out2,v30
+	 vxor		$in1,$in1,v31
+	vncipher	$out3,$out3,v30
+	 vxor		$in2,$in2,v31
+	vncipher	$out4,$out4,v30
+	 vxor		$in3,$in3,v31
+	vncipher	$out5,$out5,v30
+	 vxor		$in4,$in4,v31
+	vncipher	$out6,$out6,v30
+	 vxor		$in5,$in5,v31
+	vncipher	$out7,$out7,v30
+	 vxor		$in6,$in6,v31
+
+	cmplwi		$len,32			# switch($len)
+	blt		Lcbc_dec8x_one
+	nop
+	beq		Lcbc_dec8x_two
+	cmplwi		$len,64
+	blt		Lcbc_dec8x_three
+	nop
+	beq		Lcbc_dec8x_four
+	cmplwi		$len,96
+	blt		Lcbc_dec8x_five
+	nop
+	beq		Lcbc_dec8x_six
+
+Lcbc_dec8x_seven:
+	vncipherlast	$out1,$out1,$ivec
+	vncipherlast	$out2,$out2,$in1
+	vncipherlast	$out3,$out3,$in2
+	vncipherlast	$out4,$out4,$in3
+	vncipherlast	$out5,$out5,$in4
+	vncipherlast	$out6,$out6,$in5
+	vncipherlast	$out7,$out7,$in6
+	vmr		$ivec,$in7
+
+	le?vperm	$out1,$out1,$out1,$inpperm
+	le?vperm	$out2,$out2,$out2,$inpperm
+	stvx_u		$out1,$x00,$out
+	le?vperm	$out3,$out3,$out3,$inpperm
+	stvx_u		$out2,$x10,$out
+	le?vperm	$out4,$out4,$out4,$inpperm
+	stvx_u		$out3,$x20,$out
+	le?vperm	$out5,$out5,$out5,$inpperm
+	stvx_u		$out4,$x30,$out
+	le?vperm	$out6,$out6,$out6,$inpperm
+	stvx_u		$out5,$x40,$out
+	le?vperm	$out7,$out7,$out7,$inpperm
+	stvx_u		$out6,$x50,$out
+	stvx_u		$out7,$x60,$out
+	addi		$out,$out,0x70
+	b		Lcbc_dec8x_done
+
+.align	5
+Lcbc_dec8x_six:
+	vncipherlast	$out2,$out2,$ivec
+	vncipherlast	$out3,$out3,$in2
+	vncipherlast	$out4,$out4,$in3
+	vncipherlast	$out5,$out5,$in4
+	vncipherlast	$out6,$out6,$in5
+	vncipherlast	$out7,$out7,$in6
+	vmr		$ivec,$in7
+
+	le?vperm	$out2,$out2,$out2,$inpperm
+	le?vperm	$out3,$out3,$out3,$inpperm
+	stvx_u		$out2,$x00,$out
+	le?vperm	$out4,$out4,$out4,$inpperm
+	stvx_u		$out3,$x10,$out
+	le?vperm	$out5,$out5,$out5,$inpperm
+	stvx_u		$out4,$x20,$out
+	le?vperm	$out6,$out6,$out6,$inpperm
+	stvx_u		$out5,$x30,$out
+	le?vperm	$out7,$out7,$out7,$inpperm
+	stvx_u		$out6,$x40,$out
+	stvx_u		$out7,$x50,$out
+	addi		$out,$out,0x60
+	b		Lcbc_dec8x_done
+
+.align	5
+Lcbc_dec8x_five:
+	vncipherlast	$out3,$out3,$ivec
+	vncipherlast	$out4,$out4,$in3
+	vncipherlast	$out5,$out5,$in4
+	vncipherlast	$out6,$out6,$in5
+	vncipherlast	$out7,$out7,$in6
+	vmr		$ivec,$in7
+
+	le?vperm	$out3,$out3,$out3,$inpperm
+	le?vperm	$out4,$out4,$out4,$inpperm
+	stvx_u		$out3,$x00,$out
+	le?vperm	$out5,$out5,$out5,$inpperm
+	stvx_u		$out4,$x10,$out
+	le?vperm	$out6,$out6,$out6,$inpperm
+	stvx_u		$out5,$x20,$out
+	le?vperm	$out7,$out7,$out7,$inpperm
+	stvx_u		$out6,$x30,$out
+	stvx_u		$out7,$x40,$out
+	addi		$out,$out,0x50
+	b		Lcbc_dec8x_done
+
+.align	5
+Lcbc_dec8x_four:
+	vncipherlast	$out4,$out4,$ivec
+	vncipherlast	$out5,$out5,$in4
+	vncipherlast	$out6,$out6,$in5
+	vncipherlast	$out7,$out7,$in6
+	vmr		$ivec,$in7
+
+	le?vperm	$out4,$out4,$out4,$inpperm
+	le?vperm	$out5,$out5,$out5,$inpperm
+	stvx_u		$out4,$x00,$out
+	le?vperm	$out6,$out6,$out6,$inpperm
+	stvx_u		$out5,$x10,$out
+	le?vperm	$out7,$out7,$out7,$inpperm
+	stvx_u		$out6,$x20,$out
+	stvx_u		$out7,$x30,$out
+	addi		$out,$out,0x40
+	b		Lcbc_dec8x_done
+
+.align	5
+Lcbc_dec8x_three:
+	vncipherlast	$out5,$out5,$ivec
+	vncipherlast	$out6,$out6,$in5
+	vncipherlast	$out7,$out7,$in6
+	vmr		$ivec,$in7
+
+	le?vperm	$out5,$out5,$out5,$inpperm
+	le?vperm	$out6,$out6,$out6,$inpperm
+	stvx_u		$out5,$x00,$out
+	le?vperm	$out7,$out7,$out7,$inpperm
+	stvx_u		$out6,$x10,$out
+	stvx_u		$out7,$x20,$out
+	addi		$out,$out,0x30
+	b		Lcbc_dec8x_done
+
+.align	5
+Lcbc_dec8x_two:
+	vncipherlast	$out6,$out6,$ivec
+	vncipherlast	$out7,$out7,$in6
+	vmr		$ivec,$in7
+
+	le?vperm	$out6,$out6,$out6,$inpperm
+	le?vperm	$out7,$out7,$out7,$inpperm
+	stvx_u		$out6,$x00,$out
+	stvx_u		$out7,$x10,$out
+	addi		$out,$out,0x20
+	b		Lcbc_dec8x_done
+
+.align	5
+Lcbc_dec8x_one:
+	vncipherlast	$out7,$out7,$ivec
+	vmr		$ivec,$in7
+
+	le?vperm	$out7,$out7,$out7,$inpperm
+	stvx_u		$out7,0,$out
+	addi		$out,$out,0x10
+
+Lcbc_dec8x_done:
+	le?vperm	$ivec,$ivec,$ivec,$inpperm
+	stvx_u		$ivec,0,$ivp		# write [unaligned] iv
+
+	li		r10,`$FRAME+15`
+	li		r11,`$FRAME+31`
+	stvx		$inpperm,r10,$sp	# wipe copies of round keys
+	addi		r10,r10,32
+	stvx		$inpperm,r11,$sp
+	addi		r11,r11,32
+	stvx		$inpperm,r10,$sp
+	addi		r10,r10,32
+	stvx		$inpperm,r11,$sp
+	addi		r11,r11,32
+	stvx		$inpperm,r10,$sp
+	addi		r10,r10,32
+	stvx		$inpperm,r11,$sp
+	addi		r11,r11,32
+	stvx		$inpperm,r10,$sp
+	addi		r10,r10,32
+	stvx		$inpperm,r11,$sp
+	addi		r11,r11,32
+
+	mtspr		256,$vrsave
+	lvx		v20,r10,$sp		# ABI says so
+	addi		r10,r10,32
+	lvx		v21,r11,$sp
+	addi		r11,r11,32
+	lvx		v22,r10,$sp
+	addi		r10,r10,32
+	lvx		v23,r11,$sp
+	addi		r11,r11,32
+	lvx		v24,r10,$sp
+	addi		r10,r10,32
+	lvx		v25,r11,$sp
+	addi		r11,r11,32
+	lvx		v26,r10,$sp
+	addi		r10,r10,32
+	lvx		v27,r11,$sp
+	addi		r11,r11,32
+	lvx		v28,r10,$sp
+	addi		r10,r10,32
+	lvx		v29,r11,$sp
+	addi		r11,r11,32
+	lvx		v30,r10,$sp
+	lvx		v31,r11,$sp
+	$POP		r26,`$FRAME+21*16+0*$SIZE_T`($sp)
+	$POP		r27,`$FRAME+21*16+1*$SIZE_T`($sp)
+	$POP		r28,`$FRAME+21*16+2*$SIZE_T`($sp)
+	$POP		r29,`$FRAME+21*16+3*$SIZE_T`($sp)
+	$POP		r30,`$FRAME+21*16+4*$SIZE_T`($sp)
+	$POP		r31,`$FRAME+21*16+5*$SIZE_T`($sp)
+	addi		$sp,$sp,`$FRAME+21*16+6*$SIZE_T`
+	blr
+	.long		0
+	.byte		0,12,0x04,0,0x80,6,6,0
+	.long		0
+.size	.${prefix}_cbc_encrypt,.-.${prefix}_cbc_encrypt
+___
+}}	}}}
+
+#########################################################################
+{{{	# CTR procedure[s]						#
+my ($inp,$out,$len,$key,$ivp,$x10,$rounds,$idx)=map("r$_",(3..10));
+my ($rndkey0,$rndkey1,$inout,$tmp)=		map("v$_",(0..3));
+my ($ivec,$inptail,$inpperm,$outhead,$outperm,$outmask,$keyperm,$one)=
+						map("v$_",(4..11));
+my $dat=$tmp;
+
+$code.=<<___;
+.globl	.${prefix}_ctr32_encrypt_blocks
+.align	5
+.${prefix}_ctr32_encrypt_blocks:
+	${UCMP}i	$len,1
+	bltlr-
+
+	lis		r0,0xfff0
+	mfspr		$vrsave,256
+	mtspr		256,r0
+
+	li		$idx,15
+	vxor		$rndkey0,$rndkey0,$rndkey0
+	le?vspltisb	$tmp,0x0f
+
+	lvx		$ivec,0,$ivp		# load [unaligned] iv
+	lvsl		$inpperm,0,$ivp
+	lvx		$inptail,$idx,$ivp
+	 vspltisb	$one,1
+	le?vxor		$inpperm,$inpperm,$tmp
+	vperm		$ivec,$ivec,$inptail,$inpperm
+	 vsldoi		$one,$rndkey0,$one,1
+
+	neg		r11,$inp
+	?lvsl		$keyperm,0,$key		# prepare for unaligned key
+	lwz		$rounds,240($key)
+
+	lvsr		$inpperm,0,r11		# prepare for unaligned load
+	lvx		$inptail,0,$inp
+	addi		$inp,$inp,15		# 15 is not typo
+	le?vxor		$inpperm,$inpperm,$tmp
+
+	srwi		$rounds,$rounds,1
+	li		$idx,16
+	subi		$rounds,$rounds,1
+
+	${UCMP}i	$len,8
+	bge		_aesp8_ctr32_encrypt8x
+
+	?lvsr		$outperm,0,$out		# prepare for unaligned store
+	vspltisb	$outmask,-1
+	lvx		$outhead,0,$out
+	?vperm		$outmask,$rndkey0,$outmask,$outperm
+	le?vxor		$outperm,$outperm,$tmp
+
+	lvx		$rndkey0,0,$key
+	mtctr		$rounds
+	lvx		$rndkey1,$idx,$key
+	addi		$idx,$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vxor		$inout,$ivec,$rndkey0
+	lvx		$rndkey0,$idx,$key
+	addi		$idx,$idx,16
+	b		Loop_ctr32_enc
+
+.align	5
+Loop_ctr32_enc:
+	?vperm		$rndkey1,$rndkey1,$rndkey0,$keyperm
+	vcipher		$inout,$inout,$rndkey1
+	lvx		$rndkey1,$idx,$key
+	addi		$idx,$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vcipher		$inout,$inout,$rndkey0
+	lvx		$rndkey0,$idx,$key
+	addi		$idx,$idx,16
+	bdnz		Loop_ctr32_enc
+
+	vadduwm		$ivec,$ivec,$one
+	 vmr		$dat,$inptail
+	 lvx		$inptail,0,$inp
+	 addi		$inp,$inp,16
+	 subic.		$len,$len,1		# blocks--
+
+	?vperm		$rndkey1,$rndkey1,$rndkey0,$keyperm
+	vcipher		$inout,$inout,$rndkey1
+	lvx		$rndkey1,$idx,$key
+	 vperm		$dat,$dat,$inptail,$inpperm
+	 li		$idx,16
+	?vperm		$rndkey1,$rndkey0,$rndkey1,$keyperm
+	 lvx		$rndkey0,0,$key
+	vxor		$dat,$dat,$rndkey1	# last round key
+	vcipherlast	$inout,$inout,$dat
+
+	 lvx		$rndkey1,$idx,$key
+	 addi		$idx,$idx,16
+	vperm		$inout,$inout,$inout,$outperm
+	vsel		$dat,$outhead,$inout,$outmask
+	 mtctr		$rounds
+	 ?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vmr		$outhead,$inout
+	 vxor		$inout,$ivec,$rndkey0
+	 lvx		$rndkey0,$idx,$key
+	 addi		$idx,$idx,16
+	stvx		$dat,0,$out
+	addi		$out,$out,16
+	bne		Loop_ctr32_enc
+
+	addi		$out,$out,-1
+	lvx		$inout,0,$out		# redundant in aligned case
+	vsel		$inout,$outhead,$inout,$outmask
+	stvx		$inout,0,$out
+
+	mtspr		256,$vrsave
+	blr
+	.long		0
+	.byte		0,12,0x14,0,0,0,6,0
+	.long		0
+___
+#########################################################################
+{{	# Optimized CTR procedure					#
+my $key_="r11";
+my ($x00,$x10,$x20,$x30,$x40,$x50,$x60,$x70)=map("r$_",(0,8,26..31));
+    $x00=0 if ($flavour =~ /osx/);
+my ($in0, $in1, $in2, $in3, $in4, $in5, $in6, $in7 )=map("v$_",(0..3,10,12..14));
+my ($out0,$out1,$out2,$out3,$out4,$out5,$out6,$out7)=map("v$_",(15..22));
+my $rndkey0="v23";	# v24-v25 rotating buffer for first found keys
+			# v26-v31 last 6 round keys
+my ($tmp,$keyperm)=($in3,$in4);	# aliases with "caller", redundant assignment
+my ($two,$three,$four)=($outhead,$outperm,$outmask);
+
+$code.=<<___;
+.align	5
+_aesp8_ctr32_encrypt8x:
+	$STU		$sp,-`($FRAME+21*16+6*$SIZE_T)`($sp)
+	li		r10,`$FRAME+8*16+15`
+	li		r11,`$FRAME+8*16+31`
+	stvx		v20,r10,$sp		# ABI says so
+	addi		r10,r10,32
+	stvx		v21,r11,$sp
+	addi		r11,r11,32
+	stvx		v22,r10,$sp
+	addi		r10,r10,32
+	stvx		v23,r11,$sp
+	addi		r11,r11,32
+	stvx		v24,r10,$sp
+	addi		r10,r10,32
+	stvx		v25,r11,$sp
+	addi		r11,r11,32
+	stvx		v26,r10,$sp
+	addi		r10,r10,32
+	stvx		v27,r11,$sp
+	addi		r11,r11,32
+	stvx		v28,r10,$sp
+	addi		r10,r10,32
+	stvx		v29,r11,$sp
+	addi		r11,r11,32
+	stvx		v30,r10,$sp
+	stvx		v31,r11,$sp
+	li		r0,-1
+	stw		$vrsave,`$FRAME+21*16-4`($sp)	# save vrsave
+	li		$x10,0x10
+	$PUSH		r26,`$FRAME+21*16+0*$SIZE_T`($sp)
+	li		$x20,0x20
+	$PUSH		r27,`$FRAME+21*16+1*$SIZE_T`($sp)
+	li		$x30,0x30
+	$PUSH		r28,`$FRAME+21*16+2*$SIZE_T`($sp)
+	li		$x40,0x40
+	$PUSH		r29,`$FRAME+21*16+3*$SIZE_T`($sp)
+	li		$x50,0x50
+	$PUSH		r30,`$FRAME+21*16+4*$SIZE_T`($sp)
+	li		$x60,0x60
+	$PUSH		r31,`$FRAME+21*16+5*$SIZE_T`($sp)
+	li		$x70,0x70
+	mtspr		256,r0
+
+	subi		$rounds,$rounds,3	# -4 in total
+
+	lvx		$rndkey0,$x00,$key	# load key schedule
+	lvx		v30,$x10,$key
+	addi		$key,$key,0x20
+	lvx		v31,$x00,$key
+	?vperm		$rndkey0,$rndkey0,v30,$keyperm
+	addi		$key_,$sp,$FRAME+15
+	mtctr		$rounds
+
+Load_ctr32_enc_key:
+	?vperm		v24,v30,v31,$keyperm
+	lvx		v30,$x10,$key
+	addi		$key,$key,0x20
+	stvx		v24,$x00,$key_		# off-load round[1]
+	?vperm		v25,v31,v30,$keyperm
+	lvx		v31,$x00,$key
+	stvx		v25,$x10,$key_		# off-load round[2]
+	addi		$key_,$key_,0x20
+	bdnz		Load_ctr32_enc_key
+
+	lvx		v26,$x10,$key
+	?vperm		v24,v30,v31,$keyperm
+	lvx		v27,$x20,$key
+	stvx		v24,$x00,$key_		# off-load round[3]
+	?vperm		v25,v31,v26,$keyperm
+	lvx		v28,$x30,$key
+	stvx		v25,$x10,$key_		# off-load round[4]
+	addi		$key_,$sp,$FRAME+15	# rewind $key_
+	?vperm		v26,v26,v27,$keyperm
+	lvx		v29,$x40,$key
+	?vperm		v27,v27,v28,$keyperm
+	lvx		v30,$x50,$key
+	?vperm		v28,v28,v29,$keyperm
+	lvx		v31,$x60,$key
+	?vperm		v29,v29,v30,$keyperm
+	lvx		$out0,$x70,$key		# borrow $out0
+	?vperm		v30,v30,v31,$keyperm
+	lvx		v24,$x00,$key_		# pre-load round[1]
+	?vperm		v31,v31,$out0,$keyperm
+	lvx		v25,$x10,$key_		# pre-load round[2]
+
+	vadduwm		$two,$one,$one
+	subi		$inp,$inp,15		# undo "caller"
+	$SHL		$len,$len,4
+
+	vadduwm		$out1,$ivec,$one	# counter values ...
+	vadduwm		$out2,$ivec,$two
+	vxor		$out0,$ivec,$rndkey0	# ... xored with rndkey[0]
+	 le?li		$idx,8
+	vadduwm		$out3,$out1,$two
+	vxor		$out1,$out1,$rndkey0
+	 le?lvsl	$inpperm,0,$idx
+	vadduwm		$out4,$out2,$two
+	vxor		$out2,$out2,$rndkey0
+	 le?vspltisb	$tmp,0x0f
+	vadduwm		$out5,$out3,$two
+	vxor		$out3,$out3,$rndkey0
+	 le?vxor	$inpperm,$inpperm,$tmp	# transform for lvx_u/stvx_u
+	vadduwm		$out6,$out4,$two
+	vxor		$out4,$out4,$rndkey0
+	vadduwm		$out7,$out5,$two
+	vxor		$out5,$out5,$rndkey0
+	vadduwm		$ivec,$out6,$two	# next counter value
+	vxor		$out6,$out6,$rndkey0
+	vxor		$out7,$out7,$rndkey0
+
+	mtctr		$rounds
+	b		Loop_ctr32_enc8x
+.align	5
+Loop_ctr32_enc8x:
+	vcipher 	$out0,$out0,v24
+	vcipher 	$out1,$out1,v24
+	vcipher 	$out2,$out2,v24
+	vcipher 	$out3,$out3,v24
+	vcipher 	$out4,$out4,v24
+	vcipher 	$out5,$out5,v24
+	vcipher 	$out6,$out6,v24
+	vcipher 	$out7,$out7,v24
+Loop_ctr32_enc8x_middle:
+	lvx		v24,$x20,$key_		# round[3]
+	addi		$key_,$key_,0x20
+
+	vcipher 	$out0,$out0,v25
+	vcipher 	$out1,$out1,v25
+	vcipher 	$out2,$out2,v25
+	vcipher 	$out3,$out3,v25
+	vcipher 	$out4,$out4,v25
+	vcipher 	$out5,$out5,v25
+	vcipher 	$out6,$out6,v25
+	vcipher 	$out7,$out7,v25
+	lvx		v25,$x10,$key_		# round[4]
+	bdnz		Loop_ctr32_enc8x
+
+	subic		r11,$len,256		# $len-256, borrow $key_
+	vcipher 	$out0,$out0,v24
+	vcipher 	$out1,$out1,v24
+	vcipher 	$out2,$out2,v24
+	vcipher 	$out3,$out3,v24
+	vcipher 	$out4,$out4,v24
+	vcipher 	$out5,$out5,v24
+	vcipher 	$out6,$out6,v24
+	vcipher 	$out7,$out7,v24
+
+	subfe		r0,r0,r0		# borrow?-1:0
+	vcipher 	$out0,$out0,v25
+	vcipher 	$out1,$out1,v25
+	vcipher 	$out2,$out2,v25
+	vcipher 	$out3,$out3,v25
+	vcipher 	$out4,$out4,v25
+	vcipher		$out5,$out5,v25
+	vcipher		$out6,$out6,v25
+	vcipher		$out7,$out7,v25
+
+	and		r0,r0,r11
+	addi		$key_,$sp,$FRAME+15	# rewind $key_
+	vcipher		$out0,$out0,v26
+	vcipher		$out1,$out1,v26
+	vcipher		$out2,$out2,v26
+	vcipher		$out3,$out3,v26
+	vcipher		$out4,$out4,v26
+	vcipher		$out5,$out5,v26
+	vcipher		$out6,$out6,v26
+	vcipher		$out7,$out7,v26
+	lvx		v24,$x00,$key_		# re-pre-load round[1]
+
+	subic		$len,$len,129		# $len-=129
+	vcipher		$out0,$out0,v27
+	addi		$len,$len,1		# $len-=128 really
+	vcipher		$out1,$out1,v27
+	vcipher		$out2,$out2,v27
+	vcipher		$out3,$out3,v27
+	vcipher		$out4,$out4,v27
+	vcipher		$out5,$out5,v27
+	vcipher		$out6,$out6,v27
+	vcipher		$out7,$out7,v27
+	lvx		v25,$x10,$key_		# re-pre-load round[2]
+
+	vcipher		$out0,$out0,v28
+	 lvx_u		$in0,$x00,$inp		# load input
+	vcipher		$out1,$out1,v28
+	 lvx_u		$in1,$x10,$inp
+	vcipher		$out2,$out2,v28
+	 lvx_u		$in2,$x20,$inp
+	vcipher		$out3,$out3,v28
+	 lvx_u		$in3,$x30,$inp
+	vcipher		$out4,$out4,v28
+	 lvx_u		$in4,$x40,$inp
+	vcipher		$out5,$out5,v28
+	 lvx_u		$in5,$x50,$inp
+	vcipher		$out6,$out6,v28
+	 lvx_u		$in6,$x60,$inp
+	vcipher		$out7,$out7,v28
+	 lvx_u		$in7,$x70,$inp
+	 addi		$inp,$inp,0x80
+
+	vcipher		$out0,$out0,v29
+	 le?vperm	$in0,$in0,$in0,$inpperm
+	vcipher		$out1,$out1,v29
+	 le?vperm	$in1,$in1,$in1,$inpperm
+	vcipher		$out2,$out2,v29
+	 le?vperm	$in2,$in2,$in2,$inpperm
+	vcipher		$out3,$out3,v29
+	 le?vperm	$in3,$in3,$in3,$inpperm
+	vcipher		$out4,$out4,v29
+	 le?vperm	$in4,$in4,$in4,$inpperm
+	vcipher		$out5,$out5,v29
+	 le?vperm	$in5,$in5,$in5,$inpperm
+	vcipher		$out6,$out6,v29
+	 le?vperm	$in6,$in6,$in6,$inpperm
+	vcipher		$out7,$out7,v29
+	 le?vperm	$in7,$in7,$in7,$inpperm
+
+	add		$inp,$inp,r0		# $inp is adjusted in such
+						# way that at exit from the
+						# loop inX-in7 are loaded
+						# with last "words"
+	subfe.		r0,r0,r0		# borrow?-1:0
+	vcipher		$out0,$out0,v30
+	 vxor		$in0,$in0,v31		# xor with last round key
+	vcipher		$out1,$out1,v30
+	 vxor		$in1,$in1,v31
+	vcipher		$out2,$out2,v30
+	 vxor		$in2,$in2,v31
+	vcipher		$out3,$out3,v30
+	 vxor		$in3,$in3,v31
+	vcipher		$out4,$out4,v30
+	 vxor		$in4,$in4,v31
+	vcipher		$out5,$out5,v30
+	 vxor		$in5,$in5,v31
+	vcipher		$out6,$out6,v30
+	 vxor		$in6,$in6,v31
+	vcipher		$out7,$out7,v30
+	 vxor		$in7,$in7,v31
+
+	bne		Lctr32_enc8x_break	# did $len-129 borrow?
+
+	vcipherlast	$in0,$out0,$in0
+	vcipherlast	$in1,$out1,$in1
+	 vadduwm	$out1,$ivec,$one	# counter values ...
+	vcipherlast	$in2,$out2,$in2
+	 vadduwm	$out2,$ivec,$two
+	 vxor		$out0,$ivec,$rndkey0	# ... xored with rndkey[0]
+	vcipherlast	$in3,$out3,$in3
+	 vadduwm	$out3,$out1,$two
+	 vxor		$out1,$out1,$rndkey0
+	vcipherlast	$in4,$out4,$in4
+	 vadduwm	$out4,$out2,$two
+	 vxor		$out2,$out2,$rndkey0
+	vcipherlast	$in5,$out5,$in5
+	 vadduwm	$out5,$out3,$two
+	 vxor		$out3,$out3,$rndkey0
+	vcipherlast	$in6,$out6,$in6
+	 vadduwm	$out6,$out4,$two
+	 vxor		$out4,$out4,$rndkey0
+	vcipherlast	$in7,$out7,$in7
+	 vadduwm	$out7,$out5,$two
+	 vxor		$out5,$out5,$rndkey0
+	le?vperm	$in0,$in0,$in0,$inpperm
+	 vadduwm	$ivec,$out6,$two	# next counter value
+	 vxor		$out6,$out6,$rndkey0
+	le?vperm	$in1,$in1,$in1,$inpperm
+	 vxor		$out7,$out7,$rndkey0
+	mtctr		$rounds
+
+	 vcipher	$out0,$out0,v24
+	stvx_u		$in0,$x00,$out
+	le?vperm	$in2,$in2,$in2,$inpperm
+	 vcipher	$out1,$out1,v24
+	stvx_u		$in1,$x10,$out
+	le?vperm	$in3,$in3,$in3,$inpperm
+	 vcipher	$out2,$out2,v24
+	stvx_u		$in2,$x20,$out
+	le?vperm	$in4,$in4,$in4,$inpperm
+	 vcipher	$out3,$out3,v24
+	stvx_u		$in3,$x30,$out
+	le?vperm	$in5,$in5,$in5,$inpperm
+	 vcipher	$out4,$out4,v24
+	stvx_u		$in4,$x40,$out
+	le?vperm	$in6,$in6,$in6,$inpperm
+	 vcipher	$out5,$out5,v24
+	stvx_u		$in5,$x50,$out
+	le?vperm	$in7,$in7,$in7,$inpperm
+	 vcipher	$out6,$out6,v24
+	stvx_u		$in6,$x60,$out
+	 vcipher	$out7,$out7,v24
+	stvx_u		$in7,$x70,$out
+	addi		$out,$out,0x80
+
+	b		Loop_ctr32_enc8x_middle
+
+.align	5
+Lctr32_enc8x_break:
+	cmpwi		$len,-0x60
+	blt		Lctr32_enc8x_one
+	nop
+	beq		Lctr32_enc8x_two
+	cmpwi		$len,-0x40
+	blt		Lctr32_enc8x_three
+	nop
+	beq		Lctr32_enc8x_four
+	cmpwi		$len,-0x20
+	blt		Lctr32_enc8x_five
+	nop
+	beq		Lctr32_enc8x_six
+	cmpwi		$len,0x00
+	blt		Lctr32_enc8x_seven
+
+Lctr32_enc8x_eight:
+	vcipherlast	$out0,$out0,$in0
+	vcipherlast	$out1,$out1,$in1
+	vcipherlast	$out2,$out2,$in2
+	vcipherlast	$out3,$out3,$in3
+	vcipherlast	$out4,$out4,$in4
+	vcipherlast	$out5,$out5,$in5
+	vcipherlast	$out6,$out6,$in6
+	vcipherlast	$out7,$out7,$in7
+
+	le?vperm	$out0,$out0,$out0,$inpperm
+	le?vperm	$out1,$out1,$out1,$inpperm
+	stvx_u		$out0,$x00,$out
+	le?vperm	$out2,$out2,$out2,$inpperm
+	stvx_u		$out1,$x10,$out
+	le?vperm	$out3,$out3,$out3,$inpperm
+	stvx_u		$out2,$x20,$out
+	le?vperm	$out4,$out4,$out4,$inpperm
+	stvx_u		$out3,$x30,$out
+	le?vperm	$out5,$out5,$out5,$inpperm
+	stvx_u		$out4,$x40,$out
+	le?vperm	$out6,$out6,$out6,$inpperm
+	stvx_u		$out5,$x50,$out
+	le?vperm	$out7,$out7,$out7,$inpperm
+	stvx_u		$out6,$x60,$out
+	stvx_u		$out7,$x70,$out
+	addi		$out,$out,0x80
+	b		Lctr32_enc8x_done
+
+.align	5
+Lctr32_enc8x_seven:
+	vcipherlast	$out0,$out0,$in1
+	vcipherlast	$out1,$out1,$in2
+	vcipherlast	$out2,$out2,$in3
+	vcipherlast	$out3,$out3,$in4
+	vcipherlast	$out4,$out4,$in5
+	vcipherlast	$out5,$out5,$in6
+	vcipherlast	$out6,$out6,$in7
+
+	le?vperm	$out0,$out0,$out0,$inpperm
+	le?vperm	$out1,$out1,$out1,$inpperm
+	stvx_u		$out0,$x00,$out
+	le?vperm	$out2,$out2,$out2,$inpperm
+	stvx_u		$out1,$x10,$out
+	le?vperm	$out3,$out3,$out3,$inpperm
+	stvx_u		$out2,$x20,$out
+	le?vperm	$out4,$out4,$out4,$inpperm
+	stvx_u		$out3,$x30,$out
+	le?vperm	$out5,$out5,$out5,$inpperm
+	stvx_u		$out4,$x40,$out
+	le?vperm	$out6,$out6,$out6,$inpperm
+	stvx_u		$out5,$x50,$out
+	stvx_u		$out6,$x60,$out
+	addi		$out,$out,0x70
+	b		Lctr32_enc8x_done
+
+.align	5
+Lctr32_enc8x_six:
+	vcipherlast	$out0,$out0,$in2
+	vcipherlast	$out1,$out1,$in3
+	vcipherlast	$out2,$out2,$in4
+	vcipherlast	$out3,$out3,$in5
+	vcipherlast	$out4,$out4,$in6
+	vcipherlast	$out5,$out5,$in7
+
+	le?vperm	$out0,$out0,$out0,$inpperm
+	le?vperm	$out1,$out1,$out1,$inpperm
+	stvx_u		$out0,$x00,$out
+	le?vperm	$out2,$out2,$out2,$inpperm
+	stvx_u		$out1,$x10,$out
+	le?vperm	$out3,$out3,$out3,$inpperm
+	stvx_u		$out2,$x20,$out
+	le?vperm	$out4,$out4,$out4,$inpperm
+	stvx_u		$out3,$x30,$out
+	le?vperm	$out5,$out5,$out5,$inpperm
+	stvx_u		$out4,$x40,$out
+	stvx_u		$out5,$x50,$out
+	addi		$out,$out,0x60
+	b		Lctr32_enc8x_done
+
+.align	5
+Lctr32_enc8x_five:
+	vcipherlast	$out0,$out0,$in3
+	vcipherlast	$out1,$out1,$in4
+	vcipherlast	$out2,$out2,$in5
+	vcipherlast	$out3,$out3,$in6
+	vcipherlast	$out4,$out4,$in7
+
+	le?vperm	$out0,$out0,$out0,$inpperm
+	le?vperm	$out1,$out1,$out1,$inpperm
+	stvx_u		$out0,$x00,$out
+	le?vperm	$out2,$out2,$out2,$inpperm
+	stvx_u		$out1,$x10,$out
+	le?vperm	$out3,$out3,$out3,$inpperm
+	stvx_u		$out2,$x20,$out
+	le?vperm	$out4,$out4,$out4,$inpperm
+	stvx_u		$out3,$x30,$out
+	stvx_u		$out4,$x40,$out
+	addi		$out,$out,0x50
+	b		Lctr32_enc8x_done
+
+.align	5
+Lctr32_enc8x_four:
+	vcipherlast	$out0,$out0,$in4
+	vcipherlast	$out1,$out1,$in5
+	vcipherlast	$out2,$out2,$in6
+	vcipherlast	$out3,$out3,$in7
+
+	le?vperm	$out0,$out0,$out0,$inpperm
+	le?vperm	$out1,$out1,$out1,$inpperm
+	stvx_u		$out0,$x00,$out
+	le?vperm	$out2,$out2,$out2,$inpperm
+	stvx_u		$out1,$x10,$out
+	le?vperm	$out3,$out3,$out3,$inpperm
+	stvx_u		$out2,$x20,$out
+	stvx_u		$out3,$x30,$out
+	addi		$out,$out,0x40
+	b		Lctr32_enc8x_done
+
+.align	5
+Lctr32_enc8x_three:
+	vcipherlast	$out0,$out0,$in5
+	vcipherlast	$out1,$out1,$in6
+	vcipherlast	$out2,$out2,$in7
+
+	le?vperm	$out0,$out0,$out0,$inpperm
+	le?vperm	$out1,$out1,$out1,$inpperm
+	stvx_u		$out0,$x00,$out
+	le?vperm	$out2,$out2,$out2,$inpperm
+	stvx_u		$out1,$x10,$out
+	stvx_u		$out2,$x20,$out
+	addi		$out,$out,0x30
+	b		Lcbc_dec8x_done
+
+.align	5
+Lctr32_enc8x_two:
+	vcipherlast	$out0,$out0,$in6
+	vcipherlast	$out1,$out1,$in7
+
+	le?vperm	$out0,$out0,$out0,$inpperm
+	le?vperm	$out1,$out1,$out1,$inpperm
+	stvx_u		$out0,$x00,$out
+	stvx_u		$out1,$x10,$out
+	addi		$out,$out,0x20
+	b		Lcbc_dec8x_done
+
+.align	5
+Lctr32_enc8x_one:
+	vcipherlast	$out0,$out0,$in7
+
+	le?vperm	$out0,$out0,$out0,$inpperm
+	stvx_u		$out0,0,$out
+	addi		$out,$out,0x10
+
+Lctr32_enc8x_done:
+	li		r10,`$FRAME+15`
+	li		r11,`$FRAME+31`
+	stvx		$inpperm,r10,$sp	# wipe copies of round keys
+	addi		r10,r10,32
+	stvx		$inpperm,r11,$sp
+	addi		r11,r11,32
+	stvx		$inpperm,r10,$sp
+	addi		r10,r10,32
+	stvx		$inpperm,r11,$sp
+	addi		r11,r11,32
+	stvx		$inpperm,r10,$sp
+	addi		r10,r10,32
+	stvx		$inpperm,r11,$sp
+	addi		r11,r11,32
+	stvx		$inpperm,r10,$sp
+	addi		r10,r10,32
+	stvx		$inpperm,r11,$sp
+	addi		r11,r11,32
+
+	mtspr		256,$vrsave
+	lvx		v20,r10,$sp		# ABI says so
+	addi		r10,r10,32
+	lvx		v21,r11,$sp
+	addi		r11,r11,32
+	lvx		v22,r10,$sp
+	addi		r10,r10,32
+	lvx		v23,r11,$sp
+	addi		r11,r11,32
+	lvx		v24,r10,$sp
+	addi		r10,r10,32
+	lvx		v25,r11,$sp
+	addi		r11,r11,32
+	lvx		v26,r10,$sp
+	addi		r10,r10,32
+	lvx		v27,r11,$sp
+	addi		r11,r11,32
+	lvx		v28,r10,$sp
+	addi		r10,r10,32
+	lvx		v29,r11,$sp
+	addi		r11,r11,32
+	lvx		v30,r10,$sp
+	lvx		v31,r11,$sp
+	$POP		r26,`$FRAME+21*16+0*$SIZE_T`($sp)
+	$POP		r27,`$FRAME+21*16+1*$SIZE_T`($sp)
+	$POP		r28,`$FRAME+21*16+2*$SIZE_T`($sp)
+	$POP		r29,`$FRAME+21*16+3*$SIZE_T`($sp)
+	$POP		r30,`$FRAME+21*16+4*$SIZE_T`($sp)
+	$POP		r31,`$FRAME+21*16+5*$SIZE_T`($sp)
+	addi		$sp,$sp,`$FRAME+21*16+6*$SIZE_T`
+	blr
+	.long		0
+	.byte		0,12,0x04,0,0x80,6,6,0
+	.long		0
+.size	.${prefix}_ctr32_encrypt_blocks,.-.${prefix}_ctr32_encrypt_blocks
+___
+}}	}}}
+
+#########################################################################
+{{{	# XTS procedures						#
+# int aes_p8_xts_[en|de]crypt(const char *inp, char *out, size_t len,	#
+#                             const AES_KEY *key1, const AES_KEY *key2,	#
+#                             [const] unsigned char iv[16]);		#
+# If $key2 is NULL, then a "tweak chaining" mode is engaged, in which	#
+# input tweak value is assumed to be encrypted already, and last tweak	#
+# value, one suitable for consecutive call on same chunk of data, is	#
+# written back to original buffer. In addition, in "tweak chaining"	#
+# mode only complete input blocks are processed.			#
+
+my ($inp,$out,$len,$key1,$key2,$ivp,$rounds,$idx) =	map("r$_",(3..10));
+my ($rndkey0,$rndkey1,$inout) =				map("v$_",(0..2));
+my ($output,$inptail,$inpperm,$leperm,$keyperm) =	map("v$_",(3..7));
+my ($tweak,$seven,$eighty7,$tmp,$tweak1) =		map("v$_",(8..12));
+my $taillen = $key2;
+
+   ($inp,$idx) = ($idx,$inp);				# reassign
+
+$code.=<<___;
+.globl	.${prefix}_xts_encrypt
+.align	5
+.${prefix}_xts_encrypt:
+	mr		$inp,r3				# reassign
+	li		r3,-1
+	${UCMP}i	$len,16
+	bltlr-
+
+	lis		r0,0xfff0
+	mfspr		r12,256				# save vrsave
+	li		r11,0
+	mtspr		256,r0
+
+	vspltisb	$seven,0x07			# 0x070707..07
+	le?lvsl		$leperm,r11,r11
+	le?vspltisb	$tmp,0x0f
+	le?vxor		$leperm,$leperm,$seven
+
+	li		$idx,15
+	lvx		$tweak,0,$ivp			# load [unaligned] iv
+	lvsl		$inpperm,0,$ivp
+	lvx		$inptail,$idx,$ivp
+	le?vxor		$inpperm,$inpperm,$tmp
+	vperm		$tweak,$tweak,$inptail,$inpperm
+
+	neg		r11,$inp
+	lvsr		$inpperm,0,r11			# prepare for unaligned load
+	lvx		$inout,0,$inp
+	addi		$inp,$inp,15			# 15 is not typo
+	le?vxor		$inpperm,$inpperm,$tmp
+
+	${UCMP}i	$key2,0				# key2==NULL?
+	beq		Lxts_enc_no_key2
+
+	?lvsl		$keyperm,0,$key2		# prepare for unaligned key
+	lwz		$rounds,240($key2)
+	srwi		$rounds,$rounds,1
+	subi		$rounds,$rounds,1
+	li		$idx,16
+
+	lvx		$rndkey0,0,$key2
+	lvx		$rndkey1,$idx,$key2
+	addi		$idx,$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vxor		$tweak,$tweak,$rndkey0
+	lvx		$rndkey0,$idx,$key2
+	addi		$idx,$idx,16
+	mtctr		$rounds
+
+Ltweak_xts_enc:
+	?vperm		$rndkey1,$rndkey1,$rndkey0,$keyperm
+	vcipher		$tweak,$tweak,$rndkey1
+	lvx		$rndkey1,$idx,$key2
+	addi		$idx,$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vcipher		$tweak,$tweak,$rndkey0
+	lvx		$rndkey0,$idx,$key2
+	addi		$idx,$idx,16
+	bdnz		Ltweak_xts_enc
+
+	?vperm		$rndkey1,$rndkey1,$rndkey0,$keyperm
+	vcipher		$tweak,$tweak,$rndkey1
+	lvx		$rndkey1,$idx,$key2
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vcipherlast	$tweak,$tweak,$rndkey0
+
+	li		$ivp,0				# don't chain the tweak
+	b		Lxts_enc
+
+Lxts_enc_no_key2:
+	li		$idx,-16
+	and		$len,$len,$idx			# in "tweak chaining"
+							# mode only complete
+							# blocks are processed
+Lxts_enc:
+	lvx		$inptail,0,$inp
+	addi		$inp,$inp,16
+
+	?lvsl		$keyperm,0,$key1		# prepare for unaligned key
+	lwz		$rounds,240($key1)
+	srwi		$rounds,$rounds,1
+	subi		$rounds,$rounds,1
+	li		$idx,16
+
+	vslb		$eighty7,$seven,$seven		# 0x808080..80
+	vor		$eighty7,$eighty7,$seven	# 0x878787..87
+	vspltisb	$tmp,1				# 0x010101..01
+	vsldoi		$eighty7,$eighty7,$tmp,15	# 0x870101..01
+
+	${UCMP}i	$len,96
+	bge		_aesp8_xts_encrypt6x
+
+	andi.		$taillen,$len,15
+	subic		r0,$len,32
+	subi		$taillen,$taillen,16
+	subfe		r0,r0,r0
+	and		r0,r0,$taillen
+	add		$inp,$inp,r0
+
+	lvx		$rndkey0,0,$key1
+	lvx		$rndkey1,$idx,$key1
+	addi		$idx,$idx,16
+	vperm		$inout,$inout,$inptail,$inpperm
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vxor		$inout,$inout,$tweak
+	vxor		$inout,$inout,$rndkey0
+	lvx		$rndkey0,$idx,$key1
+	addi		$idx,$idx,16
+	mtctr		$rounds
+	b		Loop_xts_enc
+
+.align	5
+Loop_xts_enc:
+	?vperm		$rndkey1,$rndkey1,$rndkey0,$keyperm
+	vcipher		$inout,$inout,$rndkey1
+	lvx		$rndkey1,$idx,$key1
+	addi		$idx,$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vcipher		$inout,$inout,$rndkey0
+	lvx		$rndkey0,$idx,$key1
+	addi		$idx,$idx,16
+	bdnz		Loop_xts_enc
+
+	?vperm		$rndkey1,$rndkey1,$rndkey0,$keyperm
+	vcipher		$inout,$inout,$rndkey1
+	lvx		$rndkey1,$idx,$key1
+	li		$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vxor		$rndkey0,$rndkey0,$tweak
+	vcipherlast	$output,$inout,$rndkey0
+
+	le?vperm	$tmp,$output,$output,$leperm
+	be?nop
+	le?stvx_u	$tmp,0,$out
+	be?stvx_u	$output,0,$out
+	addi		$out,$out,16
+
+	subic.		$len,$len,16
+	beq		Lxts_enc_done
+
+	vmr		$inout,$inptail
+	lvx		$inptail,0,$inp
+	addi		$inp,$inp,16
+	lvx		$rndkey0,0,$key1
+	lvx		$rndkey1,$idx,$key1
+	addi		$idx,$idx,16
+
+	subic		r0,$len,32
+	subfe		r0,r0,r0
+	and		r0,r0,$taillen
+	add		$inp,$inp,r0
+
+	vsrab		$tmp,$tweak,$seven		# next tweak value
+	vaddubm		$tweak,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	vand		$tmp,$tmp,$eighty7
+	vxor		$tweak,$tweak,$tmp
+
+	vperm		$inout,$inout,$inptail,$inpperm
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vxor		$inout,$inout,$tweak
+	vxor		$output,$output,$rndkey0	# just in case $len<16
+	vxor		$inout,$inout,$rndkey0
+	lvx		$rndkey0,$idx,$key1
+	addi		$idx,$idx,16
+
+	mtctr		$rounds
+	${UCMP}i	$len,16
+	bge		Loop_xts_enc
+
+	vxor		$output,$output,$tweak
+	lvsr		$inpperm,0,$len			# $inpperm is no longer needed
+	vxor		$inptail,$inptail,$inptail	# $inptail is no longer needed
+	vspltisb	$tmp,-1
+	vperm		$inptail,$inptail,$tmp,$inpperm
+	vsel		$inout,$inout,$output,$inptail
+
+	subi		r11,$out,17
+	subi		$out,$out,16
+	mtctr		$len
+	li		$len,16
+Loop_xts_enc_steal:
+	lbzu		r0,1(r11)
+	stb		r0,16(r11)
+	bdnz		Loop_xts_enc_steal
+
+	mtctr		$rounds
+	b		Loop_xts_enc			# one more time...
+
+Lxts_enc_done:
+	${UCMP}i	$ivp,0
+	beq		Lxts_enc_ret
+
+	vsrab		$tmp,$tweak,$seven		# next tweak value
+	vaddubm		$tweak,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	vand		$tmp,$tmp,$eighty7
+	vxor		$tweak,$tweak,$tmp
+
+	le?vperm	$tweak,$tweak,$tweak,$leperm
+	stvx_u		$tweak,0,$ivp
+
+Lxts_enc_ret:
+	mtspr		256,r12				# restore vrsave
+	li		r3,0
+	blr
+	.long		0
+	.byte		0,12,0x04,0,0x80,6,6,0
+	.long		0
+.size	.${prefix}_xts_encrypt,.-.${prefix}_xts_encrypt
+
+.globl	.${prefix}_xts_decrypt
+.align	5
+.${prefix}_xts_decrypt:
+	mr		$inp,r3				# reassign
+	li		r3,-1
+	${UCMP}i	$len,16
+	bltlr-
+
+	lis		r0,0xfff8
+	mfspr		r12,256				# save vrsave
+	li		r11,0
+	mtspr		256,r0
+
+	andi.		r0,$len,15
+	neg		r0,r0
+	andi.		r0,r0,16
+	sub		$len,$len,r0
+
+	vspltisb	$seven,0x07			# 0x070707..07
+	le?lvsl		$leperm,r11,r11
+	le?vspltisb	$tmp,0x0f
+	le?vxor		$leperm,$leperm,$seven
+
+	li		$idx,15
+	lvx		$tweak,0,$ivp			# load [unaligned] iv
+	lvsl		$inpperm,0,$ivp
+	lvx		$inptail,$idx,$ivp
+	le?vxor		$inpperm,$inpperm,$tmp
+	vperm		$tweak,$tweak,$inptail,$inpperm
+
+	neg		r11,$inp
+	lvsr		$inpperm,0,r11			# prepare for unaligned load
+	lvx		$inout,0,$inp
+	addi		$inp,$inp,15			# 15 is not typo
+	le?vxor		$inpperm,$inpperm,$tmp
+
+	${UCMP}i	$key2,0				# key2==NULL?
+	beq		Lxts_dec_no_key2
+
+	?lvsl		$keyperm,0,$key2		# prepare for unaligned key
+	lwz		$rounds,240($key2)
+	srwi		$rounds,$rounds,1
+	subi		$rounds,$rounds,1
+	li		$idx,16
+
+	lvx		$rndkey0,0,$key2
+	lvx		$rndkey1,$idx,$key2
+	addi		$idx,$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vxor		$tweak,$tweak,$rndkey0
+	lvx		$rndkey0,$idx,$key2
+	addi		$idx,$idx,16
+	mtctr		$rounds
+
+Ltweak_xts_dec:
+	?vperm		$rndkey1,$rndkey1,$rndkey0,$keyperm
+	vcipher		$tweak,$tweak,$rndkey1
+	lvx		$rndkey1,$idx,$key2
+	addi		$idx,$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vcipher		$tweak,$tweak,$rndkey0
+	lvx		$rndkey0,$idx,$key2
+	addi		$idx,$idx,16
+	bdnz		Ltweak_xts_dec
+
+	?vperm		$rndkey1,$rndkey1,$rndkey0,$keyperm
+	vcipher		$tweak,$tweak,$rndkey1
+	lvx		$rndkey1,$idx,$key2
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vcipherlast	$tweak,$tweak,$rndkey0
+
+	li		$ivp,0				# don't chain the tweak
+	b		Lxts_dec
+
+Lxts_dec_no_key2:
+	neg		$idx,$len
+	andi.		$idx,$idx,15
+	add		$len,$len,$idx			# in "tweak chaining"
+							# mode only complete
+							# blocks are processed
+Lxts_dec:
+	lvx		$inptail,0,$inp
+	addi		$inp,$inp,16
+
+	?lvsl		$keyperm,0,$key1		# prepare for unaligned key
+	lwz		$rounds,240($key1)
+	srwi		$rounds,$rounds,1
+	subi		$rounds,$rounds,1
+	li		$idx,16
+
+	vslb		$eighty7,$seven,$seven		# 0x808080..80
+	vor		$eighty7,$eighty7,$seven	# 0x878787..87
+	vspltisb	$tmp,1				# 0x010101..01
+	vsldoi		$eighty7,$eighty7,$tmp,15	# 0x870101..01
+
+	${UCMP}i	$len,96
+	bge		_aesp8_xts_decrypt6x
+
+	lvx		$rndkey0,0,$key1
+	lvx		$rndkey1,$idx,$key1
+	addi		$idx,$idx,16
+	vperm		$inout,$inout,$inptail,$inpperm
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vxor		$inout,$inout,$tweak
+	vxor		$inout,$inout,$rndkey0
+	lvx		$rndkey0,$idx,$key1
+	addi		$idx,$idx,16
+	mtctr		$rounds
+
+	${UCMP}i	$len,16
+	blt		Ltail_xts_dec
+	be?b		Loop_xts_dec
+
+.align	5
+Loop_xts_dec:
+	?vperm		$rndkey1,$rndkey1,$rndkey0,$keyperm
+	vncipher	$inout,$inout,$rndkey1
+	lvx		$rndkey1,$idx,$key1
+	addi		$idx,$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vncipher	$inout,$inout,$rndkey0
+	lvx		$rndkey0,$idx,$key1
+	addi		$idx,$idx,16
+	bdnz		Loop_xts_dec
+
+	?vperm		$rndkey1,$rndkey1,$rndkey0,$keyperm
+	vncipher	$inout,$inout,$rndkey1
+	lvx		$rndkey1,$idx,$key1
+	li		$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vxor		$rndkey0,$rndkey0,$tweak
+	vncipherlast	$output,$inout,$rndkey0
+
+	le?vperm	$tmp,$output,$output,$leperm
+	be?nop
+	le?stvx_u	$tmp,0,$out
+	be?stvx_u	$output,0,$out
+	addi		$out,$out,16
+
+	subic.		$len,$len,16
+	beq		Lxts_dec_done
+
+	vmr		$inout,$inptail
+	lvx		$inptail,0,$inp
+	addi		$inp,$inp,16
+	lvx		$rndkey0,0,$key1
+	lvx		$rndkey1,$idx,$key1
+	addi		$idx,$idx,16
+
+	vsrab		$tmp,$tweak,$seven		# next tweak value
+	vaddubm		$tweak,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	vand		$tmp,$tmp,$eighty7
+	vxor		$tweak,$tweak,$tmp
+
+	vperm		$inout,$inout,$inptail,$inpperm
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vxor		$inout,$inout,$tweak
+	vxor		$inout,$inout,$rndkey0
+	lvx		$rndkey0,$idx,$key1
+	addi		$idx,$idx,16
+
+	mtctr		$rounds
+	${UCMP}i	$len,16
+	bge		Loop_xts_dec
+
+Ltail_xts_dec:
+	vsrab		$tmp,$tweak,$seven		# next tweak value
+	vaddubm		$tweak1,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	vand		$tmp,$tmp,$eighty7
+	vxor		$tweak1,$tweak1,$tmp
+
+	subi		$inp,$inp,16
+	add		$inp,$inp,$len
+
+	vxor		$inout,$inout,$tweak		# :-(
+	vxor		$inout,$inout,$tweak1		# :-)
+
+Loop_xts_dec_short:
+	?vperm		$rndkey1,$rndkey1,$rndkey0,$keyperm
+	vncipher	$inout,$inout,$rndkey1
+	lvx		$rndkey1,$idx,$key1
+	addi		$idx,$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vncipher	$inout,$inout,$rndkey0
+	lvx		$rndkey0,$idx,$key1
+	addi		$idx,$idx,16
+	bdnz		Loop_xts_dec_short
+
+	?vperm		$rndkey1,$rndkey1,$rndkey0,$keyperm
+	vncipher	$inout,$inout,$rndkey1
+	lvx		$rndkey1,$idx,$key1
+	li		$idx,16
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+	vxor		$rndkey0,$rndkey0,$tweak1
+	vncipherlast	$output,$inout,$rndkey0
+
+	le?vperm	$tmp,$output,$output,$leperm
+	be?nop
+	le?stvx_u	$tmp,0,$out
+	be?stvx_u	$output,0,$out
+
+	vmr		$inout,$inptail
+	lvx		$inptail,0,$inp
+	#addi		$inp,$inp,16
+	lvx		$rndkey0,0,$key1
+	lvx		$rndkey1,$idx,$key1
+	addi		$idx,$idx,16
+	vperm		$inout,$inout,$inptail,$inpperm
+	?vperm		$rndkey0,$rndkey0,$rndkey1,$keyperm
+
+	lvsr		$inpperm,0,$len			# $inpperm is no longer needed
+	vxor		$inptail,$inptail,$inptail	# $inptail is no longer needed
+	vspltisb	$tmp,-1
+	vperm		$inptail,$inptail,$tmp,$inpperm
+	vsel		$inout,$inout,$output,$inptail
+
+	vxor		$rndkey0,$rndkey0,$tweak
+	vxor		$inout,$inout,$rndkey0
+	lvx		$rndkey0,$idx,$key1
+	addi		$idx,$idx,16
+
+	subi		r11,$out,1
+	mtctr		$len
+	li		$len,16
+Loop_xts_dec_steal:
+	lbzu		r0,1(r11)
+	stb		r0,16(r11)
+	bdnz		Loop_xts_dec_steal
+
+	mtctr		$rounds
+	b		Loop_xts_dec			# one more time...
+
+Lxts_dec_done:
+	${UCMP}i	$ivp,0
+	beq		Lxts_dec_ret
+
+	vsrab		$tmp,$tweak,$seven		# next tweak value
+	vaddubm		$tweak,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	vand		$tmp,$tmp,$eighty7
+	vxor		$tweak,$tweak,$tmp
+
+	le?vperm	$tweak,$tweak,$tweak,$leperm
+	stvx_u		$tweak,0,$ivp
+
+Lxts_dec_ret:
+	mtspr		256,r12				# restore vrsave
+	li		r3,0
+	blr
+	.long		0
+	.byte		0,12,0x04,0,0x80,6,6,0
+	.long		0
+.size	.${prefix}_xts_decrypt,.-.${prefix}_xts_decrypt
+___
+#########################################################################
+{{	# Optimized XTS procedures					#
+my $key_=$key2;
+my ($x00,$x10,$x20,$x30,$x40,$x50,$x60,$x70)=map("r$_",(0,3,26..31));
+    $x00=0 if ($flavour =~ /osx/);
+my ($in0,  $in1,  $in2,  $in3,  $in4,  $in5 )=map("v$_",(0..5));
+my ($out0, $out1, $out2, $out3, $out4, $out5)=map("v$_",(7,12..16));
+my ($twk0, $twk1, $twk2, $twk3, $twk4, $twk5)=map("v$_",(17..22));
+my $rndkey0="v23";	# v24-v25 rotating buffer for first found keys
+			# v26-v31 last 6 round keys
+my ($keyperm)=($out0);	# aliases with "caller", redundant assignment
+my $taillen=$x70;
+
+$code.=<<___;
+.align	5
+_aesp8_xts_encrypt6x:
+	$STU		$sp,-`($FRAME+21*16+6*$SIZE_T)`($sp)
+	mflr		r11
+	li		r7,`$FRAME+8*16+15`
+	li		r3,`$FRAME+8*16+31`
+	$PUSH		r11,`$FRAME+21*16+6*$SIZE_T+$LRSAVE`($sp)
+	stvx		v20,r7,$sp		# ABI says so
+	addi		r7,r7,32
+	stvx		v21,r3,$sp
+	addi		r3,r3,32
+	stvx		v22,r7,$sp
+	addi		r7,r7,32
+	stvx		v23,r3,$sp
+	addi		r3,r3,32
+	stvx		v24,r7,$sp
+	addi		r7,r7,32
+	stvx		v25,r3,$sp
+	addi		r3,r3,32
+	stvx		v26,r7,$sp
+	addi		r7,r7,32
+	stvx		v27,r3,$sp
+	addi		r3,r3,32
+	stvx		v28,r7,$sp
+	addi		r7,r7,32
+	stvx		v29,r3,$sp
+	addi		r3,r3,32
+	stvx		v30,r7,$sp
+	stvx		v31,r3,$sp
+	li		r0,-1
+	stw		$vrsave,`$FRAME+21*16-4`($sp)	# save vrsave
+	li		$x10,0x10
+	$PUSH		r26,`$FRAME+21*16+0*$SIZE_T`($sp)
+	li		$x20,0x20
+	$PUSH		r27,`$FRAME+21*16+1*$SIZE_T`($sp)
+	li		$x30,0x30
+	$PUSH		r28,`$FRAME+21*16+2*$SIZE_T`($sp)
+	li		$x40,0x40
+	$PUSH		r29,`$FRAME+21*16+3*$SIZE_T`($sp)
+	li		$x50,0x50
+	$PUSH		r30,`$FRAME+21*16+4*$SIZE_T`($sp)
+	li		$x60,0x60
+	$PUSH		r31,`$FRAME+21*16+5*$SIZE_T`($sp)
+	li		$x70,0x70
+	mtspr		256,r0
+
+	subi		$rounds,$rounds,3	# -4 in total
+
+	lvx		$rndkey0,$x00,$key1	# load key schedule
+	lvx		v30,$x10,$key1
+	addi		$key1,$key1,0x20
+	lvx		v31,$x00,$key1
+	?vperm		$rndkey0,$rndkey0,v30,$keyperm
+	addi		$key_,$sp,$FRAME+15
+	mtctr		$rounds
+
+Load_xts_enc_key:
+	?vperm		v24,v30,v31,$keyperm
+	lvx		v30,$x10,$key1
+	addi		$key1,$key1,0x20
+	stvx		v24,$x00,$key_		# off-load round[1]
+	?vperm		v25,v31,v30,$keyperm
+	lvx		v31,$x00,$key1
+	stvx		v25,$x10,$key_		# off-load round[2]
+	addi		$key_,$key_,0x20
+	bdnz		Load_xts_enc_key
+
+	lvx		v26,$x10,$key1
+	?vperm		v24,v30,v31,$keyperm
+	lvx		v27,$x20,$key1
+	stvx		v24,$x00,$key_		# off-load round[3]
+	?vperm		v25,v31,v26,$keyperm
+	lvx		v28,$x30,$key1
+	stvx		v25,$x10,$key_		# off-load round[4]
+	addi		$key_,$sp,$FRAME+15	# rewind $key_
+	?vperm		v26,v26,v27,$keyperm
+	lvx		v29,$x40,$key1
+	?vperm		v27,v27,v28,$keyperm
+	lvx		v30,$x50,$key1
+	?vperm		v28,v28,v29,$keyperm
+	lvx		v31,$x60,$key1
+	?vperm		v29,v29,v30,$keyperm
+	lvx		$twk5,$x70,$key1	# borrow $twk5
+	?vperm		v30,v30,v31,$keyperm
+	lvx		v24,$x00,$key_		# pre-load round[1]
+	?vperm		v31,v31,$twk5,$keyperm
+	lvx		v25,$x10,$key_		# pre-load round[2]
+
+	 vperm		$in0,$inout,$inptail,$inpperm
+	 subi		$inp,$inp,31		# undo "caller"
+	vxor		$twk0,$tweak,$rndkey0
+	vsrab		$tmp,$tweak,$seven	# next tweak value
+	vaddubm		$tweak,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	vand		$tmp,$tmp,$eighty7
+	 vxor		$out0,$in0,$twk0
+	vxor		$tweak,$tweak,$tmp
+
+	 lvx_u		$in1,$x10,$inp
+	vxor		$twk1,$tweak,$rndkey0
+	vsrab		$tmp,$tweak,$seven	# next tweak value
+	vaddubm		$tweak,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	 le?vperm	$in1,$in1,$in1,$leperm
+	vand		$tmp,$tmp,$eighty7
+	 vxor		$out1,$in1,$twk1
+	vxor		$tweak,$tweak,$tmp
+
+	 lvx_u		$in2,$x20,$inp
+	 andi.		$taillen,$len,15
+	vxor		$twk2,$tweak,$rndkey0
+	vsrab		$tmp,$tweak,$seven	# next tweak value
+	vaddubm		$tweak,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	 le?vperm	$in2,$in2,$in2,$leperm
+	vand		$tmp,$tmp,$eighty7
+	 vxor		$out2,$in2,$twk2
+	vxor		$tweak,$tweak,$tmp
+
+	 lvx_u		$in3,$x30,$inp
+	 sub		$len,$len,$taillen
+	vxor		$twk3,$tweak,$rndkey0
+	vsrab		$tmp,$tweak,$seven	# next tweak value
+	vaddubm		$tweak,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	 le?vperm	$in3,$in3,$in3,$leperm
+	vand		$tmp,$tmp,$eighty7
+	 vxor		$out3,$in3,$twk3
+	vxor		$tweak,$tweak,$tmp
+
+	 lvx_u		$in4,$x40,$inp
+	 subi		$len,$len,0x60
+	vxor		$twk4,$tweak,$rndkey0
+	vsrab		$tmp,$tweak,$seven	# next tweak value
+	vaddubm		$tweak,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	 le?vperm	$in4,$in4,$in4,$leperm
+	vand		$tmp,$tmp,$eighty7
+	 vxor		$out4,$in4,$twk4
+	vxor		$tweak,$tweak,$tmp
+
+	 lvx_u		$in5,$x50,$inp
+	 addi		$inp,$inp,0x60
+	vxor		$twk5,$tweak,$rndkey0
+	vsrab		$tmp,$tweak,$seven	# next tweak value
+	vaddubm		$tweak,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	 le?vperm	$in5,$in5,$in5,$leperm
+	vand		$tmp,$tmp,$eighty7
+	 vxor		$out5,$in5,$twk5
+	vxor		$tweak,$tweak,$tmp
+
+	vxor		v31,v31,$rndkey0
+	mtctr		$rounds
+	b		Loop_xts_enc6x
+
+.align	5
+Loop_xts_enc6x:
+	vcipher		$out0,$out0,v24
+	vcipher		$out1,$out1,v24
+	vcipher		$out2,$out2,v24
+	vcipher		$out3,$out3,v24
+	vcipher		$out4,$out4,v24
+	vcipher		$out5,$out5,v24
+	lvx		v24,$x20,$key_		# round[3]
+	addi		$key_,$key_,0x20
+
+	vcipher		$out0,$out0,v25
+	vcipher		$out1,$out1,v25
+	vcipher		$out2,$out2,v25
+	vcipher		$out3,$out3,v25
+	vcipher		$out4,$out4,v25
+	vcipher		$out5,$out5,v25
+	lvx		v25,$x10,$key_		# round[4]
+	bdnz		Loop_xts_enc6x
+
+	subic		$len,$len,96		# $len-=96
+	 vxor		$in0,$twk0,v31		# xor with last round key
+	vcipher		$out0,$out0,v24
+	vcipher		$out1,$out1,v24
+	 vsrab		$tmp,$tweak,$seven	# next tweak value
+	 vxor		$twk0,$tweak,$rndkey0
+	 vaddubm	$tweak,$tweak,$tweak
+	vcipher		$out2,$out2,v24
+	vcipher		$out3,$out3,v24
+	 vsldoi		$tmp,$tmp,$tmp,15
+	vcipher		$out4,$out4,v24
+	vcipher		$out5,$out5,v24
+
+	subfe.		r0,r0,r0		# borrow?-1:0
+	 vand		$tmp,$tmp,$eighty7
+	vcipher		$out0,$out0,v25
+	vcipher		$out1,$out1,v25
+	 vxor		$tweak,$tweak,$tmp
+	vcipher		$out2,$out2,v25
+	vcipher		$out3,$out3,v25
+	 vxor		$in1,$twk1,v31
+	 vsrab		$tmp,$tweak,$seven	# next tweak value
+	 vxor		$twk1,$tweak,$rndkey0
+	vcipher		$out4,$out4,v25
+	vcipher		$out5,$out5,v25
+
+	and		r0,r0,$len
+	 vaddubm	$tweak,$tweak,$tweak
+	 vsldoi		$tmp,$tmp,$tmp,15
+	vcipher		$out0,$out0,v26
+	vcipher		$out1,$out1,v26
+	 vand		$tmp,$tmp,$eighty7
+	vcipher		$out2,$out2,v26
+	vcipher		$out3,$out3,v26
+	 vxor		$tweak,$tweak,$tmp
+	vcipher		$out4,$out4,v26
+	vcipher		$out5,$out5,v26
+
+	add		$inp,$inp,r0		# $inp is adjusted in such
+						# way that at exit from the
+						# loop inX-in5 are loaded
+						# with last "words"
+	 vxor		$in2,$twk2,v31
+	 vsrab		$tmp,$tweak,$seven	# next tweak value
+	 vxor		$twk2,$tweak,$rndkey0
+	 vaddubm	$tweak,$tweak,$tweak
+	vcipher		$out0,$out0,v27
+	vcipher		$out1,$out1,v27
+	 vsldoi		$tmp,$tmp,$tmp,15
+	vcipher		$out2,$out2,v27
+	vcipher		$out3,$out3,v27
+	 vand		$tmp,$tmp,$eighty7
+	vcipher		$out4,$out4,v27
+	vcipher		$out5,$out5,v27
+
+	addi		$key_,$sp,$FRAME+15	# rewind $key_
+	 vxor		$tweak,$tweak,$tmp
+	vcipher		$out0,$out0,v28
+	vcipher		$out1,$out1,v28
+	 vxor		$in3,$twk3,v31
+	 vsrab		$tmp,$tweak,$seven	# next tweak value
+	 vxor		$twk3,$tweak,$rndkey0
+	vcipher		$out2,$out2,v28
+	vcipher		$out3,$out3,v28
+	 vaddubm	$tweak,$tweak,$tweak
+	 vsldoi		$tmp,$tmp,$tmp,15
+	vcipher		$out4,$out4,v28
+	vcipher		$out5,$out5,v28
+	lvx		v24,$x00,$key_		# re-pre-load round[1]
+	 vand		$tmp,$tmp,$eighty7
+
+	vcipher		$out0,$out0,v29
+	vcipher		$out1,$out1,v29
+	 vxor		$tweak,$tweak,$tmp
+	vcipher		$out2,$out2,v29
+	vcipher		$out3,$out3,v29
+	 vxor		$in4,$twk4,v31
+	 vsrab		$tmp,$tweak,$seven	# next tweak value
+	 vxor		$twk4,$tweak,$rndkey0
+	vcipher		$out4,$out4,v29
+	vcipher		$out5,$out5,v29
+	lvx		v25,$x10,$key_		# re-pre-load round[2]
+	 vaddubm	$tweak,$tweak,$tweak
+	 vsldoi		$tmp,$tmp,$tmp,15
+
+	vcipher		$out0,$out0,v30
+	vcipher		$out1,$out1,v30
+	 vand		$tmp,$tmp,$eighty7
+	vcipher		$out2,$out2,v30
+	vcipher		$out3,$out3,v30
+	 vxor		$tweak,$tweak,$tmp
+	vcipher		$out4,$out4,v30
+	vcipher		$out5,$out5,v30
+	 vxor		$in5,$twk5,v31
+	 vsrab		$tmp,$tweak,$seven	# next tweak value
+	 vxor		$twk5,$tweak,$rndkey0
+
+	vcipherlast	$out0,$out0,$in0
+	 lvx_u		$in0,$x00,$inp		# load next input block
+	 vaddubm	$tweak,$tweak,$tweak
+	 vsldoi		$tmp,$tmp,$tmp,15
+	vcipherlast	$out1,$out1,$in1
+	 lvx_u		$in1,$x10,$inp
+	vcipherlast	$out2,$out2,$in2
+	 le?vperm	$in0,$in0,$in0,$leperm
+	 lvx_u		$in2,$x20,$inp
+	 vand		$tmp,$tmp,$eighty7
+	vcipherlast	$out3,$out3,$in3
+	 le?vperm	$in1,$in1,$in1,$leperm
+	 lvx_u		$in3,$x30,$inp
+	vcipherlast	$out4,$out4,$in4
+	 le?vperm	$in2,$in2,$in2,$leperm
+	 lvx_u		$in4,$x40,$inp
+	 vxor		$tweak,$tweak,$tmp
+	vcipherlast	$tmp,$out5,$in5		# last block might be needed
+						# in stealing mode
+	 le?vperm	$in3,$in3,$in3,$leperm
+	 lvx_u		$in5,$x50,$inp
+	 addi		$inp,$inp,0x60
+	 le?vperm	$in4,$in4,$in4,$leperm
+	 le?vperm	$in5,$in5,$in5,$leperm
+
+	le?vperm	$out0,$out0,$out0,$leperm
+	le?vperm	$out1,$out1,$out1,$leperm
+	stvx_u		$out0,$x00,$out		# store output
+	 vxor		$out0,$in0,$twk0
+	le?vperm	$out2,$out2,$out2,$leperm
+	stvx_u		$out1,$x10,$out
+	 vxor		$out1,$in1,$twk1
+	le?vperm	$out3,$out3,$out3,$leperm
+	stvx_u		$out2,$x20,$out
+	 vxor		$out2,$in2,$twk2
+	le?vperm	$out4,$out4,$out4,$leperm
+	stvx_u		$out3,$x30,$out
+	 vxor		$out3,$in3,$twk3
+	le?vperm	$out5,$tmp,$tmp,$leperm
+	stvx_u		$out4,$x40,$out
+	 vxor		$out4,$in4,$twk4
+	le?stvx_u	$out5,$x50,$out
+	be?stvx_u	$tmp, $x50,$out
+	 vxor		$out5,$in5,$twk5
+	addi		$out,$out,0x60
+
+	mtctr		$rounds
+	beq		Loop_xts_enc6x		# did $len-=96 borrow?
+
+	addic.		$len,$len,0x60
+	beq		Lxts_enc6x_zero
+	cmpwi		$len,0x20
+	blt		Lxts_enc6x_one
+	nop
+	beq		Lxts_enc6x_two
+	cmpwi		$len,0x40
+	blt		Lxts_enc6x_three
+	nop
+	beq		Lxts_enc6x_four
+
+Lxts_enc6x_five:
+	vxor		$out0,$in1,$twk0
+	vxor		$out1,$in2,$twk1
+	vxor		$out2,$in3,$twk2
+	vxor		$out3,$in4,$twk3
+	vxor		$out4,$in5,$twk4
+
+	bl		_aesp8_xts_enc5x
+
+	le?vperm	$out0,$out0,$out0,$leperm
+	vmr		$twk0,$twk5		# unused tweak
+	le?vperm	$out1,$out1,$out1,$leperm
+	stvx_u		$out0,$x00,$out		# store output
+	le?vperm	$out2,$out2,$out2,$leperm
+	stvx_u		$out1,$x10,$out
+	le?vperm	$out3,$out3,$out3,$leperm
+	stvx_u		$out2,$x20,$out
+	vxor		$tmp,$out4,$twk5	# last block prep for stealing
+	le?vperm	$out4,$out4,$out4,$leperm
+	stvx_u		$out3,$x30,$out
+	stvx_u		$out4,$x40,$out
+	addi		$out,$out,0x50
+	bne		Lxts_enc6x_steal
+	b		Lxts_enc6x_done
+
+.align	4
+Lxts_enc6x_four:
+	vxor		$out0,$in2,$twk0
+	vxor		$out1,$in3,$twk1
+	vxor		$out2,$in4,$twk2
+	vxor		$out3,$in5,$twk3
+	vxor		$out4,$out4,$out4
+
+	bl		_aesp8_xts_enc5x
+
+	le?vperm	$out0,$out0,$out0,$leperm
+	vmr		$twk0,$twk4		# unused tweak
+	le?vperm	$out1,$out1,$out1,$leperm
+	stvx_u		$out0,$x00,$out		# store output
+	le?vperm	$out2,$out2,$out2,$leperm
+	stvx_u		$out1,$x10,$out
+	vxor		$tmp,$out3,$twk4	# last block prep for stealing
+	le?vperm	$out3,$out3,$out3,$leperm
+	stvx_u		$out2,$x20,$out
+	stvx_u		$out3,$x30,$out
+	addi		$out,$out,0x40
+	bne		Lxts_enc6x_steal
+	b		Lxts_enc6x_done
+
+.align	4
+Lxts_enc6x_three:
+	vxor		$out0,$in3,$twk0
+	vxor		$out1,$in4,$twk1
+	vxor		$out2,$in5,$twk2
+	vxor		$out3,$out3,$out3
+	vxor		$out4,$out4,$out4
+
+	bl		_aesp8_xts_enc5x
+
+	le?vperm	$out0,$out0,$out0,$leperm
+	vmr		$twk0,$twk3		# unused tweak
+	le?vperm	$out1,$out1,$out1,$leperm
+	stvx_u		$out0,$x00,$out		# store output
+	vxor		$tmp,$out2,$twk3	# last block prep for stealing
+	le?vperm	$out2,$out2,$out2,$leperm
+	stvx_u		$out1,$x10,$out
+	stvx_u		$out2,$x20,$out
+	addi		$out,$out,0x30
+	bne		Lxts_enc6x_steal
+	b		Lxts_enc6x_done
+
+.align	4
+Lxts_enc6x_two:
+	vxor		$out0,$in4,$twk0
+	vxor		$out1,$in5,$twk1
+	vxor		$out2,$out2,$out2
+	vxor		$out3,$out3,$out3
+	vxor		$out4,$out4,$out4
+
+	bl		_aesp8_xts_enc5x
+
+	le?vperm	$out0,$out0,$out0,$leperm
+	vmr		$twk0,$twk2		# unused tweak
+	vxor		$tmp,$out1,$twk2	# last block prep for stealing
+	le?vperm	$out1,$out1,$out1,$leperm
+	stvx_u		$out0,$x00,$out		# store output
+	stvx_u		$out1,$x10,$out
+	addi		$out,$out,0x20
+	bne		Lxts_enc6x_steal
+	b		Lxts_enc6x_done
+
+.align	4
+Lxts_enc6x_one:
+	vxor		$out0,$in5,$twk0
+	nop
+Loop_xts_enc1x:
+	vcipher		$out0,$out0,v24
+	lvx		v24,$x20,$key_		# round[3]
+	addi		$key_,$key_,0x20
+
+	vcipher		$out0,$out0,v25
+	lvx		v25,$x10,$key_		# round[4]
+	bdnz		Loop_xts_enc1x
+
+	add		$inp,$inp,$taillen
+	cmpwi		$taillen,0
+	vcipher		$out0,$out0,v24
+
+	subi		$inp,$inp,16
+	vcipher		$out0,$out0,v25
+
+	lvsr		$inpperm,0,$taillen
+	vcipher		$out0,$out0,v26
+
+	lvx_u		$in0,0,$inp
+	vcipher		$out0,$out0,v27
+
+	addi		$key_,$sp,$FRAME+15	# rewind $key_
+	vcipher		$out0,$out0,v28
+	lvx		v24,$x00,$key_		# re-pre-load round[1]
+
+	vcipher		$out0,$out0,v29
+	lvx		v25,$x10,$key_		# re-pre-load round[2]
+	 vxor		$twk0,$twk0,v31
+
+	le?vperm	$in0,$in0,$in0,$leperm
+	vcipher		$out0,$out0,v30
+
+	vperm		$in0,$in0,$in0,$inpperm
+	vcipherlast	$out0,$out0,$twk0
+
+	vmr		$twk0,$twk1		# unused tweak
+	vxor		$tmp,$out0,$twk1	# last block prep for stealing
+	le?vperm	$out0,$out0,$out0,$leperm
+	stvx_u		$out0,$x00,$out		# store output
+	addi		$out,$out,0x10
+	bne		Lxts_enc6x_steal
+	b		Lxts_enc6x_done
+
+.align	4
+Lxts_enc6x_zero:
+	cmpwi		$taillen,0
+	beq		Lxts_enc6x_done
+
+	add		$inp,$inp,$taillen
+	subi		$inp,$inp,16
+	lvx_u		$in0,0,$inp
+	lvsr		$inpperm,0,$taillen	# $in5 is no more
+	le?vperm	$in0,$in0,$in0,$leperm
+	vperm		$in0,$in0,$in0,$inpperm
+	vxor		$tmp,$tmp,$twk0
+Lxts_enc6x_steal:
+	vxor		$in0,$in0,$twk0
+	vxor		$out0,$out0,$out0
+	vspltisb	$out1,-1
+	vperm		$out0,$out0,$out1,$inpperm
+	vsel		$out0,$in0,$tmp,$out0	# $tmp is last block, remember?
+
+	subi		r30,$out,17
+	subi		$out,$out,16
+	mtctr		$taillen
+Loop_xts_enc6x_steal:
+	lbzu		r0,1(r30)
+	stb		r0,16(r30)
+	bdnz		Loop_xts_enc6x_steal
+
+	li		$taillen,0
+	mtctr		$rounds
+	b		Loop_xts_enc1x		# one more time...
+
+.align	4
+Lxts_enc6x_done:
+	${UCMP}i	$ivp,0
+	beq		Lxts_enc6x_ret
+
+	vxor		$tweak,$twk0,$rndkey0
+	le?vperm	$tweak,$tweak,$tweak,$leperm
+	stvx_u		$tweak,0,$ivp
+
+Lxts_enc6x_ret:
+	mtlr		r11
+	li		r10,`$FRAME+15`
+	li		r11,`$FRAME+31`
+	stvx		$seven,r10,$sp		# wipe copies of round keys
+	addi		r10,r10,32
+	stvx		$seven,r11,$sp
+	addi		r11,r11,32
+	stvx		$seven,r10,$sp
+	addi		r10,r10,32
+	stvx		$seven,r11,$sp
+	addi		r11,r11,32
+	stvx		$seven,r10,$sp
+	addi		r10,r10,32
+	stvx		$seven,r11,$sp
+	addi		r11,r11,32
+	stvx		$seven,r10,$sp
+	addi		r10,r10,32
+	stvx		$seven,r11,$sp
+	addi		r11,r11,32
+
+	mtspr		256,$vrsave
+	lvx		v20,r10,$sp		# ABI says so
+	addi		r10,r10,32
+	lvx		v21,r11,$sp
+	addi		r11,r11,32
+	lvx		v22,r10,$sp
+	addi		r10,r10,32
+	lvx		v23,r11,$sp
+	addi		r11,r11,32
+	lvx		v24,r10,$sp
+	addi		r10,r10,32
+	lvx		v25,r11,$sp
+	addi		r11,r11,32
+	lvx		v26,r10,$sp
+	addi		r10,r10,32
+	lvx		v27,r11,$sp
+	addi		r11,r11,32
+	lvx		v28,r10,$sp
+	addi		r10,r10,32
+	lvx		v29,r11,$sp
+	addi		r11,r11,32
+	lvx		v30,r10,$sp
+	lvx		v31,r11,$sp
+	$POP		r26,`$FRAME+21*16+0*$SIZE_T`($sp)
+	$POP		r27,`$FRAME+21*16+1*$SIZE_T`($sp)
+	$POP		r28,`$FRAME+21*16+2*$SIZE_T`($sp)
+	$POP		r29,`$FRAME+21*16+3*$SIZE_T`($sp)
+	$POP		r30,`$FRAME+21*16+4*$SIZE_T`($sp)
+	$POP		r31,`$FRAME+21*16+5*$SIZE_T`($sp)
+	addi		$sp,$sp,`$FRAME+21*16+6*$SIZE_T`
+	blr
+	.long		0
+	.byte		0,12,0x04,1,0x80,6,6,0
+	.long		0
+
+.align	5
+_aesp8_xts_enc5x:
+	vcipher		$out0,$out0,v24
+	vcipher		$out1,$out1,v24
+	vcipher		$out2,$out2,v24
+	vcipher		$out3,$out3,v24
+	vcipher		$out4,$out4,v24
+	lvx		v24,$x20,$key_		# round[3]
+	addi		$key_,$key_,0x20
+
+	vcipher		$out0,$out0,v25
+	vcipher		$out1,$out1,v25
+	vcipher		$out2,$out2,v25
+	vcipher		$out3,$out3,v25
+	vcipher		$out4,$out4,v25
+	lvx		v25,$x10,$key_		# round[4]
+	bdnz		_aesp8_xts_enc5x
+
+	add		$inp,$inp,$taillen
+	cmpwi		$taillen,0
+	vcipher		$out0,$out0,v24
+	vcipher		$out1,$out1,v24
+	vcipher		$out2,$out2,v24
+	vcipher		$out3,$out3,v24
+	vcipher		$out4,$out4,v24
+
+	subi		$inp,$inp,16
+	vcipher		$out0,$out0,v25
+	vcipher		$out1,$out1,v25
+	vcipher		$out2,$out2,v25
+	vcipher		$out3,$out3,v25
+	vcipher		$out4,$out4,v25
+	 vxor		$twk0,$twk0,v31
+
+	vcipher		$out0,$out0,v26
+	lvsr		$inpperm,0,$taillen	# $in5 is no more
+	vcipher		$out1,$out1,v26
+	vcipher		$out2,$out2,v26
+	vcipher		$out3,$out3,v26
+	vcipher		$out4,$out4,v26
+	 vxor		$in1,$twk1,v31
+
+	vcipher		$out0,$out0,v27
+	lvx_u		$in0,0,$inp
+	vcipher		$out1,$out1,v27
+	vcipher		$out2,$out2,v27
+	vcipher		$out3,$out3,v27
+	vcipher		$out4,$out4,v27
+	 vxor		$in2,$twk2,v31
+
+	addi		$key_,$sp,$FRAME+15	# rewind $key_
+	vcipher		$out0,$out0,v28
+	vcipher		$out1,$out1,v28
+	vcipher		$out2,$out2,v28
+	vcipher		$out3,$out3,v28
+	vcipher		$out4,$out4,v28
+	lvx		v24,$x00,$key_		# re-pre-load round[1]
+	 vxor		$in3,$twk3,v31
+
+	vcipher		$out0,$out0,v29
+	le?vperm	$in0,$in0,$in0,$leperm
+	vcipher		$out1,$out1,v29
+	vcipher		$out2,$out2,v29
+	vcipher		$out3,$out3,v29
+	vcipher		$out4,$out4,v29
+	lvx		v25,$x10,$key_		# re-pre-load round[2]
+	 vxor		$in4,$twk4,v31
+
+	vcipher		$out0,$out0,v30
+	vperm		$in0,$in0,$in0,$inpperm
+	vcipher		$out1,$out1,v30
+	vcipher		$out2,$out2,v30
+	vcipher		$out3,$out3,v30
+	vcipher		$out4,$out4,v30
+
+	vcipherlast	$out0,$out0,$twk0
+	vcipherlast	$out1,$out1,$in1
+	vcipherlast	$out2,$out2,$in2
+	vcipherlast	$out3,$out3,$in3
+	vcipherlast	$out4,$out4,$in4
+	blr
+        .long   	0
+        .byte   	0,12,0x14,0,0,0,0,0
+
+.align	5
+_aesp8_xts_decrypt6x:
+	$STU		$sp,-`($FRAME+21*16+6*$SIZE_T)`($sp)
+	mflr		r11
+	li		r7,`$FRAME+8*16+15`
+	li		r3,`$FRAME+8*16+31`
+	$PUSH		r11,`$FRAME+21*16+6*$SIZE_T+$LRSAVE`($sp)
+	stvx		v20,r7,$sp		# ABI says so
+	addi		r7,r7,32
+	stvx		v21,r3,$sp
+	addi		r3,r3,32
+	stvx		v22,r7,$sp
+	addi		r7,r7,32
+	stvx		v23,r3,$sp
+	addi		r3,r3,32
+	stvx		v24,r7,$sp
+	addi		r7,r7,32
+	stvx		v25,r3,$sp
+	addi		r3,r3,32
+	stvx		v26,r7,$sp
+	addi		r7,r7,32
+	stvx		v27,r3,$sp
+	addi		r3,r3,32
+	stvx		v28,r7,$sp
+	addi		r7,r7,32
+	stvx		v29,r3,$sp
+	addi		r3,r3,32
+	stvx		v30,r7,$sp
+	stvx		v31,r3,$sp
+	li		r0,-1
+	stw		$vrsave,`$FRAME+21*16-4`($sp)	# save vrsave
+	li		$x10,0x10
+	$PUSH		r26,`$FRAME+21*16+0*$SIZE_T`($sp)
+	li		$x20,0x20
+	$PUSH		r27,`$FRAME+21*16+1*$SIZE_T`($sp)
+	li		$x30,0x30
+	$PUSH		r28,`$FRAME+21*16+2*$SIZE_T`($sp)
+	li		$x40,0x40
+	$PUSH		r29,`$FRAME+21*16+3*$SIZE_T`($sp)
+	li		$x50,0x50
+	$PUSH		r30,`$FRAME+21*16+4*$SIZE_T`($sp)
+	li		$x60,0x60
+	$PUSH		r31,`$FRAME+21*16+5*$SIZE_T`($sp)
+	li		$x70,0x70
+	mtspr		256,r0
+
+	subi		$rounds,$rounds,3	# -4 in total
+
+	lvx		$rndkey0,$x00,$key1	# load key schedule
+	lvx		v30,$x10,$key1
+	addi		$key1,$key1,0x20
+	lvx		v31,$x00,$key1
+	?vperm		$rndkey0,$rndkey0,v30,$keyperm
+	addi		$key_,$sp,$FRAME+15
+	mtctr		$rounds
+
+Load_xts_dec_key:
+	?vperm		v24,v30,v31,$keyperm
+	lvx		v30,$x10,$key1
+	addi		$key1,$key1,0x20
+	stvx		v24,$x00,$key_		# off-load round[1]
+	?vperm		v25,v31,v30,$keyperm
+	lvx		v31,$x00,$key1
+	stvx		v25,$x10,$key_		# off-load round[2]
+	addi		$key_,$key_,0x20
+	bdnz		Load_xts_dec_key
+
+	lvx		v26,$x10,$key1
+	?vperm		v24,v30,v31,$keyperm
+	lvx		v27,$x20,$key1
+	stvx		v24,$x00,$key_		# off-load round[3]
+	?vperm		v25,v31,v26,$keyperm
+	lvx		v28,$x30,$key1
+	stvx		v25,$x10,$key_		# off-load round[4]
+	addi		$key_,$sp,$FRAME+15	# rewind $key_
+	?vperm		v26,v26,v27,$keyperm
+	lvx		v29,$x40,$key1
+	?vperm		v27,v27,v28,$keyperm
+	lvx		v30,$x50,$key1
+	?vperm		v28,v28,v29,$keyperm
+	lvx		v31,$x60,$key1
+	?vperm		v29,v29,v30,$keyperm
+	lvx		$twk5,$x70,$key1	# borrow $twk5
+	?vperm		v30,v30,v31,$keyperm
+	lvx		v24,$x00,$key_		# pre-load round[1]
+	?vperm		v31,v31,$twk5,$keyperm
+	lvx		v25,$x10,$key_		# pre-load round[2]
+
+	 vperm		$in0,$inout,$inptail,$inpperm
+	 subi		$inp,$inp,31		# undo "caller"
+	vxor		$twk0,$tweak,$rndkey0
+	vsrab		$tmp,$tweak,$seven	# next tweak value
+	vaddubm		$tweak,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	vand		$tmp,$tmp,$eighty7
+	 vxor		$out0,$in0,$twk0
+	vxor		$tweak,$tweak,$tmp
+
+	 lvx_u		$in1,$x10,$inp
+	vxor		$twk1,$tweak,$rndkey0
+	vsrab		$tmp,$tweak,$seven	# next tweak value
+	vaddubm		$tweak,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	 le?vperm	$in1,$in1,$in1,$leperm
+	vand		$tmp,$tmp,$eighty7
+	 vxor		$out1,$in1,$twk1
+	vxor		$tweak,$tweak,$tmp
+
+	 lvx_u		$in2,$x20,$inp
+	 andi.		$taillen,$len,15
+	vxor		$twk2,$tweak,$rndkey0
+	vsrab		$tmp,$tweak,$seven	# next tweak value
+	vaddubm		$tweak,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	 le?vperm	$in2,$in2,$in2,$leperm
+	vand		$tmp,$tmp,$eighty7
+	 vxor		$out2,$in2,$twk2
+	vxor		$tweak,$tweak,$tmp
+
+	 lvx_u		$in3,$x30,$inp
+	 sub		$len,$len,$taillen
+	vxor		$twk3,$tweak,$rndkey0
+	vsrab		$tmp,$tweak,$seven	# next tweak value
+	vaddubm		$tweak,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	 le?vperm	$in3,$in3,$in3,$leperm
+	vand		$tmp,$tmp,$eighty7
+	 vxor		$out3,$in3,$twk3
+	vxor		$tweak,$tweak,$tmp
+
+	 lvx_u		$in4,$x40,$inp
+	 subi		$len,$len,0x60
+	vxor		$twk4,$tweak,$rndkey0
+	vsrab		$tmp,$tweak,$seven	# next tweak value
+	vaddubm		$tweak,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	 le?vperm	$in4,$in4,$in4,$leperm
+	vand		$tmp,$tmp,$eighty7
+	 vxor		$out4,$in4,$twk4
+	vxor		$tweak,$tweak,$tmp
+
+	 lvx_u		$in5,$x50,$inp
+	 addi		$inp,$inp,0x60
+	vxor		$twk5,$tweak,$rndkey0
+	vsrab		$tmp,$tweak,$seven	# next tweak value
+	vaddubm		$tweak,$tweak,$tweak
+	vsldoi		$tmp,$tmp,$tmp,15
+	 le?vperm	$in5,$in5,$in5,$leperm
+	vand		$tmp,$tmp,$eighty7
+	 vxor		$out5,$in5,$twk5
+	vxor		$tweak,$tweak,$tmp
+
+	vxor		v31,v31,$rndkey0
+	mtctr		$rounds
+	b		Loop_xts_dec6x
+
+.align	5
+Loop_xts_dec6x:
+	vncipher	$out0,$out0,v24
+	vncipher	$out1,$out1,v24
+	vncipher	$out2,$out2,v24
+	vncipher	$out3,$out3,v24
+	vncipher	$out4,$out4,v24
+	vncipher	$out5,$out5,v24
+	lvx		v24,$x20,$key_		# round[3]
+	addi		$key_,$key_,0x20
+
+	vncipher	$out0,$out0,v25
+	vncipher	$out1,$out1,v25
+	vncipher	$out2,$out2,v25
+	vncipher	$out3,$out3,v25
+	vncipher	$out4,$out4,v25
+	vncipher	$out5,$out5,v25
+	lvx		v25,$x10,$key_		# round[4]
+	bdnz		Loop_xts_dec6x
+
+	subic		$len,$len,96		# $len-=96
+	 vxor		$in0,$twk0,v31		# xor with last round key
+	vncipher	$out0,$out0,v24
+	vncipher	$out1,$out1,v24
+	 vsrab		$tmp,$tweak,$seven	# next tweak value
+	 vxor		$twk0,$tweak,$rndkey0
+	 vaddubm	$tweak,$tweak,$tweak
+	vncipher	$out2,$out2,v24
+	vncipher	$out3,$out3,v24
+	 vsldoi		$tmp,$tmp,$tmp,15
+	vncipher	$out4,$out4,v24
+	vncipher	$out5,$out5,v24
+
+	subfe.		r0,r0,r0		# borrow?-1:0
+	 vand		$tmp,$tmp,$eighty7
+	vncipher	$out0,$out0,v25
+	vncipher	$out1,$out1,v25
+	 vxor		$tweak,$tweak,$tmp
+	vncipher	$out2,$out2,v25
+	vncipher	$out3,$out3,v25
+	 vxor		$in1,$twk1,v31
+	 vsrab		$tmp,$tweak,$seven	# next tweak value
+	 vxor		$twk1,$tweak,$rndkey0
+	vncipher	$out4,$out4,v25
+	vncipher	$out5,$out5,v25
+
+	and		r0,r0,$len
+	 vaddubm	$tweak,$tweak,$tweak
+	 vsldoi		$tmp,$tmp,$tmp,15
+	vncipher	$out0,$out0,v26
+	vncipher	$out1,$out1,v26
+	 vand		$tmp,$tmp,$eighty7
+	vncipher	$out2,$out2,v26
+	vncipher	$out3,$out3,v26
+	 vxor		$tweak,$tweak,$tmp
+	vncipher	$out4,$out4,v26
+	vncipher	$out5,$out5,v26
+
+	add		$inp,$inp,r0		# $inp is adjusted in such
+						# way that at exit from the
+						# loop inX-in5 are loaded
+						# with last "words"
+	 vxor		$in2,$twk2,v31
+	 vsrab		$tmp,$tweak,$seven	# next tweak value
+	 vxor		$twk2,$tweak,$rndkey0
+	 vaddubm	$tweak,$tweak,$tweak
+	vncipher	$out0,$out0,v27
+	vncipher	$out1,$out1,v27
+	 vsldoi		$tmp,$tmp,$tmp,15
+	vncipher	$out2,$out2,v27
+	vncipher	$out3,$out3,v27
+	 vand		$tmp,$tmp,$eighty7
+	vncipher	$out4,$out4,v27
+	vncipher	$out5,$out5,v27
+
+	addi		$key_,$sp,$FRAME+15	# rewind $key_
+	 vxor		$tweak,$tweak,$tmp
+	vncipher	$out0,$out0,v28
+	vncipher	$out1,$out1,v28
+	 vxor		$in3,$twk3,v31
+	 vsrab		$tmp,$tweak,$seven	# next tweak value
+	 vxor		$twk3,$tweak,$rndkey0
+	vncipher	$out2,$out2,v28
+	vncipher	$out3,$out3,v28
+	 vaddubm	$tweak,$tweak,$tweak
+	 vsldoi		$tmp,$tmp,$tmp,15
+	vncipher	$out4,$out4,v28
+	vncipher	$out5,$out5,v28
+	lvx		v24,$x00,$key_		# re-pre-load round[1]
+	 vand		$tmp,$tmp,$eighty7
+
+	vncipher	$out0,$out0,v29
+	vncipher	$out1,$out1,v29
+	 vxor		$tweak,$tweak,$tmp
+	vncipher	$out2,$out2,v29
+	vncipher	$out3,$out3,v29
+	 vxor		$in4,$twk4,v31
+	 vsrab		$tmp,$tweak,$seven	# next tweak value
+	 vxor		$twk4,$tweak,$rndkey0
+	vncipher	$out4,$out4,v29
+	vncipher	$out5,$out5,v29
+	lvx		v25,$x10,$key_		# re-pre-load round[2]
+	 vaddubm	$tweak,$tweak,$tweak
+	 vsldoi		$tmp,$tmp,$tmp,15
+
+	vncipher	$out0,$out0,v30
+	vncipher	$out1,$out1,v30
+	 vand		$tmp,$tmp,$eighty7
+	vncipher	$out2,$out2,v30
+	vncipher	$out3,$out3,v30
+	 vxor		$tweak,$tweak,$tmp
+	vncipher	$out4,$out4,v30
+	vncipher	$out5,$out5,v30
+	 vxor		$in5,$twk5,v31
+	 vsrab		$tmp,$tweak,$seven	# next tweak value
+	 vxor		$twk5,$tweak,$rndkey0
+
+	vncipherlast	$out0,$out0,$in0
+	 lvx_u		$in0,$x00,$inp		# load next input block
+	 vaddubm	$tweak,$tweak,$tweak
+	 vsldoi		$tmp,$tmp,$tmp,15
+	vncipherlast	$out1,$out1,$in1
+	 lvx_u		$in1,$x10,$inp
+	vncipherlast	$out2,$out2,$in2
+	 le?vperm	$in0,$in0,$in0,$leperm
+	 lvx_u		$in2,$x20,$inp
+	 vand		$tmp,$tmp,$eighty7
+	vncipherlast	$out3,$out3,$in3
+	 le?vperm	$in1,$in1,$in1,$leperm
+	 lvx_u		$in3,$x30,$inp
+	vncipherlast	$out4,$out4,$in4
+	 le?vperm	$in2,$in2,$in2,$leperm
+	 lvx_u		$in4,$x40,$inp
+	 vxor		$tweak,$tweak,$tmp
+	vncipherlast	$out5,$out5,$in5
+	 le?vperm	$in3,$in3,$in3,$leperm
+	 lvx_u		$in5,$x50,$inp
+	 addi		$inp,$inp,0x60
+	 le?vperm	$in4,$in4,$in4,$leperm
+	 le?vperm	$in5,$in5,$in5,$leperm
+
+	le?vperm	$out0,$out0,$out0,$leperm
+	le?vperm	$out1,$out1,$out1,$leperm
+	stvx_u		$out0,$x00,$out		# store output
+	 vxor		$out0,$in0,$twk0
+	le?vperm	$out2,$out2,$out2,$leperm
+	stvx_u		$out1,$x10,$out
+	 vxor		$out1,$in1,$twk1
+	le?vperm	$out3,$out3,$out3,$leperm
+	stvx_u		$out2,$x20,$out
+	 vxor		$out2,$in2,$twk2
+	le?vperm	$out4,$out4,$out4,$leperm
+	stvx_u		$out3,$x30,$out
+	 vxor		$out3,$in3,$twk3
+	le?vperm	$out5,$out5,$out5,$leperm
+	stvx_u		$out4,$x40,$out
+	 vxor		$out4,$in4,$twk4
+	stvx_u		$out5,$x50,$out
+	 vxor		$out5,$in5,$twk5
+	addi		$out,$out,0x60
+
+	mtctr		$rounds
+	beq		Loop_xts_dec6x		# did $len-=96 borrow?
+
+	addic.		$len,$len,0x60
+	beq		Lxts_dec6x_zero
+	cmpwi		$len,0x20
+	blt		Lxts_dec6x_one
+	nop
+	beq		Lxts_dec6x_two
+	cmpwi		$len,0x40
+	blt		Lxts_dec6x_three
+	nop
+	beq		Lxts_dec6x_four
+
+Lxts_dec6x_five:
+	vxor		$out0,$in1,$twk0
+	vxor		$out1,$in2,$twk1
+	vxor		$out2,$in3,$twk2
+	vxor		$out3,$in4,$twk3
+	vxor		$out4,$in5,$twk4
+
+	bl		_aesp8_xts_dec5x
+
+	le?vperm	$out0,$out0,$out0,$leperm
+	vmr		$twk0,$twk5		# unused tweak
+	vxor		$twk1,$tweak,$rndkey0
+	le?vperm	$out1,$out1,$out1,$leperm
+	stvx_u		$out0,$x00,$out		# store output
+	vxor		$out0,$in0,$twk1
+	le?vperm	$out2,$out2,$out2,$leperm
+	stvx_u		$out1,$x10,$out
+	le?vperm	$out3,$out3,$out3,$leperm
+	stvx_u		$out2,$x20,$out
+	le?vperm	$out4,$out4,$out4,$leperm
+	stvx_u		$out3,$x30,$out
+	stvx_u		$out4,$x40,$out
+	addi		$out,$out,0x50
+	bne		Lxts_dec6x_steal
+	b		Lxts_dec6x_done
+
+.align	4
+Lxts_dec6x_four:
+	vxor		$out0,$in2,$twk0
+	vxor		$out1,$in3,$twk1
+	vxor		$out2,$in4,$twk2
+	vxor		$out3,$in5,$twk3
+	vxor		$out4,$out4,$out4
+
+	bl		_aesp8_xts_dec5x
+
+	le?vperm	$out0,$out0,$out0,$leperm
+	vmr		$twk0,$twk4		# unused tweak
+	vmr		$twk1,$twk5
+	le?vperm	$out1,$out1,$out1,$leperm
+	stvx_u		$out0,$x00,$out		# store output
+	vxor		$out0,$in0,$twk5
+	le?vperm	$out2,$out2,$out2,$leperm
+	stvx_u		$out1,$x10,$out
+	le?vperm	$out3,$out3,$out3,$leperm
+	stvx_u		$out2,$x20,$out
+	stvx_u		$out3,$x30,$out
+	addi		$out,$out,0x40
+	bne		Lxts_dec6x_steal
+	b		Lxts_dec6x_done
+
+.align	4
+Lxts_dec6x_three:
+	vxor		$out0,$in3,$twk0
+	vxor		$out1,$in4,$twk1
+	vxor		$out2,$in5,$twk2
+	vxor		$out3,$out3,$out3
+	vxor		$out4,$out4,$out4
+
+	bl		_aesp8_xts_dec5x
+
+	le?vperm	$out0,$out0,$out0,$leperm
+	vmr		$twk0,$twk3		# unused tweak
+	vmr		$twk1,$twk4
+	le?vperm	$out1,$out1,$out1,$leperm
+	stvx_u		$out0,$x00,$out		# store output
+	vxor		$out0,$in0,$twk4
+	le?vperm	$out2,$out2,$out2,$leperm
+	stvx_u		$out1,$x10,$out
+	stvx_u		$out2,$x20,$out
+	addi		$out,$out,0x30
+	bne		Lxts_dec6x_steal
+	b		Lxts_dec6x_done
+
+.align	4
+Lxts_dec6x_two:
+	vxor		$out0,$in4,$twk0
+	vxor		$out1,$in5,$twk1
+	vxor		$out2,$out2,$out2
+	vxor		$out3,$out3,$out3
+	vxor		$out4,$out4,$out4
+
+	bl		_aesp8_xts_dec5x
+
+	le?vperm	$out0,$out0,$out0,$leperm
+	vmr		$twk0,$twk2		# unused tweak
+	vmr		$twk1,$twk3
+	le?vperm	$out1,$out1,$out1,$leperm
+	stvx_u		$out0,$x00,$out		# store output
+	vxor		$out0,$in0,$twk3
+	stvx_u		$out1,$x10,$out
+	addi		$out,$out,0x20
+	bne		Lxts_dec6x_steal
+	b		Lxts_dec6x_done
+
+.align	4
+Lxts_dec6x_one:
+	vxor		$out0,$in5,$twk0
+	nop
+Loop_xts_dec1x:
+	vncipher	$out0,$out0,v24
+	lvx		v24,$x20,$key_		# round[3]
+	addi		$key_,$key_,0x20
+
+	vncipher	$out0,$out0,v25
+	lvx		v25,$x10,$key_		# round[4]
+	bdnz		Loop_xts_dec1x
+
+	subi		r0,$taillen,1
+	vncipher	$out0,$out0,v24
+
+	andi.		r0,r0,16
+	cmpwi		$taillen,0
+	vncipher	$out0,$out0,v25
+
+	sub		$inp,$inp,r0
+	vncipher	$out0,$out0,v26
+
+	lvx_u		$in0,0,$inp
+	vncipher	$out0,$out0,v27
+
+	addi		$key_,$sp,$FRAME+15	# rewind $key_
+	vncipher	$out0,$out0,v28
+	lvx		v24,$x00,$key_		# re-pre-load round[1]
+
+	vncipher	$out0,$out0,v29
+	lvx		v25,$x10,$key_		# re-pre-load round[2]
+	 vxor		$twk0,$twk0,v31
+
+	le?vperm	$in0,$in0,$in0,$leperm
+	vncipher	$out0,$out0,v30
+
+	mtctr		$rounds
+	vncipherlast	$out0,$out0,$twk0
+
+	vmr		$twk0,$twk1		# unused tweak
+	vmr		$twk1,$twk2
+	le?vperm	$out0,$out0,$out0,$leperm
+	stvx_u		$out0,$x00,$out		# store output
+	addi		$out,$out,0x10
+	vxor		$out0,$in0,$twk2
+	bne		Lxts_dec6x_steal
+	b		Lxts_dec6x_done
+
+.align	4
+Lxts_dec6x_zero:
+	cmpwi		$taillen,0
+	beq		Lxts_dec6x_done
+
+	lvx_u		$in0,0,$inp
+	le?vperm	$in0,$in0,$in0,$leperm
+	vxor		$out0,$in0,$twk1
+Lxts_dec6x_steal:
+	vncipher	$out0,$out0,v24
+	lvx		v24,$x20,$key_		# round[3]
+	addi		$key_,$key_,0x20
+
+	vncipher	$out0,$out0,v25
+	lvx		v25,$x10,$key_		# round[4]
+	bdnz		Lxts_dec6x_steal
+
+	add		$inp,$inp,$taillen
+	vncipher	$out0,$out0,v24
+
+	cmpwi		$taillen,0
+	vncipher	$out0,$out0,v25
+
+	lvx_u		$in0,0,$inp
+	vncipher	$out0,$out0,v26
+
+	lvsr		$inpperm,0,$taillen	# $in5 is no more
+	vncipher	$out0,$out0,v27
+
+	addi		$key_,$sp,$FRAME+15	# rewind $key_
+	vncipher	$out0,$out0,v28
+	lvx		v24,$x00,$key_		# re-pre-load round[1]
+
+	vncipher	$out0,$out0,v29
+	lvx		v25,$x10,$key_		# re-pre-load round[2]
+	 vxor		$twk1,$twk1,v31
+
+	le?vperm	$in0,$in0,$in0,$leperm
+	vncipher	$out0,$out0,v30
+
+	vperm		$in0,$in0,$in0,$inpperm
+	vncipherlast	$tmp,$out0,$twk1
+
+	le?vperm	$out0,$tmp,$tmp,$leperm
+	le?stvx_u	$out0,0,$out
+	be?stvx_u	$tmp,0,$out
+
+	vxor		$out0,$out0,$out0
+	vspltisb	$out1,-1
+	vperm		$out0,$out0,$out1,$inpperm
+	vsel		$out0,$in0,$tmp,$out0
+	vxor		$out0,$out0,$twk0
+
+	subi		r30,$out,1
+	mtctr		$taillen
+Loop_xts_dec6x_steal:
+	lbzu		r0,1(r30)
+	stb		r0,16(r30)
+	bdnz		Loop_xts_dec6x_steal
+
+	li		$taillen,0
+	mtctr		$rounds
+	b		Loop_xts_dec1x		# one more time...
+
+.align	4
+Lxts_dec6x_done:
+	${UCMP}i	$ivp,0
+	beq		Lxts_dec6x_ret
+
+	vxor		$tweak,$twk0,$rndkey0
+	le?vperm	$tweak,$tweak,$tweak,$leperm
+	stvx_u		$tweak,0,$ivp
+
+Lxts_dec6x_ret:
+	mtlr		r11
+	li		r10,`$FRAME+15`
+	li		r11,`$FRAME+31`
+	stvx		$seven,r10,$sp		# wipe copies of round keys
+	addi		r10,r10,32
+	stvx		$seven,r11,$sp
+	addi		r11,r11,32
+	stvx		$seven,r10,$sp
+	addi		r10,r10,32
+	stvx		$seven,r11,$sp
+	addi		r11,r11,32
+	stvx		$seven,r10,$sp
+	addi		r10,r10,32
+	stvx		$seven,r11,$sp
+	addi		r11,r11,32
+	stvx		$seven,r10,$sp
+	addi		r10,r10,32
+	stvx		$seven,r11,$sp
+	addi		r11,r11,32
+
+	mtspr		256,$vrsave
+	lvx		v20,r10,$sp		# ABI says so
+	addi		r10,r10,32
+	lvx		v21,r11,$sp
+	addi		r11,r11,32
+	lvx		v22,r10,$sp
+	addi		r10,r10,32
+	lvx		v23,r11,$sp
+	addi		r11,r11,32
+	lvx		v24,r10,$sp
+	addi		r10,r10,32
+	lvx		v25,r11,$sp
+	addi		r11,r11,32
+	lvx		v26,r10,$sp
+	addi		r10,r10,32
+	lvx		v27,r11,$sp
+	addi		r11,r11,32
+	lvx		v28,r10,$sp
+	addi		r10,r10,32
+	lvx		v29,r11,$sp
+	addi		r11,r11,32
+	lvx		v30,r10,$sp
+	lvx		v31,r11,$sp
+	$POP		r26,`$FRAME+21*16+0*$SIZE_T`($sp)
+	$POP		r27,`$FRAME+21*16+1*$SIZE_T`($sp)
+	$POP		r28,`$FRAME+21*16+2*$SIZE_T`($sp)
+	$POP		r29,`$FRAME+21*16+3*$SIZE_T`($sp)
+	$POP		r30,`$FRAME+21*16+4*$SIZE_T`($sp)
+	$POP		r31,`$FRAME+21*16+5*$SIZE_T`($sp)
+	addi		$sp,$sp,`$FRAME+21*16+6*$SIZE_T`
+	blr
+	.long		0
+	.byte		0,12,0x04,1,0x80,6,6,0
+	.long		0
+
+.align	5
+_aesp8_xts_dec5x:
+	vncipher	$out0,$out0,v24
+	vncipher	$out1,$out1,v24
+	vncipher	$out2,$out2,v24
+	vncipher	$out3,$out3,v24
+	vncipher	$out4,$out4,v24
+	lvx		v24,$x20,$key_		# round[3]
+	addi		$key_,$key_,0x20
+
+	vncipher	$out0,$out0,v25
+	vncipher	$out1,$out1,v25
+	vncipher	$out2,$out2,v25
+	vncipher	$out3,$out3,v25
+	vncipher	$out4,$out4,v25
+	lvx		v25,$x10,$key_		# round[4]
+	bdnz		_aesp8_xts_dec5x
+
+	subi		r0,$taillen,1
+	vncipher	$out0,$out0,v24
+	vncipher	$out1,$out1,v24
+	vncipher	$out2,$out2,v24
+	vncipher	$out3,$out3,v24
+	vncipher	$out4,$out4,v24
+
+	andi.		r0,r0,16
+	cmpwi		$taillen,0
+	vncipher	$out0,$out0,v25
+	vncipher	$out1,$out1,v25
+	vncipher	$out2,$out2,v25
+	vncipher	$out3,$out3,v25
+	vncipher	$out4,$out4,v25
+	 vxor		$twk0,$twk0,v31
+
+	sub		$inp,$inp,r0
+	vncipher	$out0,$out0,v26
+	vncipher	$out1,$out1,v26
+	vncipher	$out2,$out2,v26
+	vncipher	$out3,$out3,v26
+	vncipher	$out4,$out4,v26
+	 vxor		$in1,$twk1,v31
+
+	vncipher	$out0,$out0,v27
+	lvx_u		$in0,0,$inp
+	vncipher	$out1,$out1,v27
+	vncipher	$out2,$out2,v27
+	vncipher	$out3,$out3,v27
+	vncipher	$out4,$out4,v27
+	 vxor		$in2,$twk2,v31
+
+	addi		$key_,$sp,$FRAME+15	# rewind $key_
+	vncipher	$out0,$out0,v28
+	vncipher	$out1,$out1,v28
+	vncipher	$out2,$out2,v28
+	vncipher	$out3,$out3,v28
+	vncipher	$out4,$out4,v28
+	lvx		v24,$x00,$key_		# re-pre-load round[1]
+	 vxor		$in3,$twk3,v31
+
+	vncipher	$out0,$out0,v29
+	le?vperm	$in0,$in0,$in0,$leperm
+	vncipher	$out1,$out1,v29
+	vncipher	$out2,$out2,v29
+	vncipher	$out3,$out3,v29
+	vncipher	$out4,$out4,v29
+	lvx		v25,$x10,$key_		# re-pre-load round[2]
+	 vxor		$in4,$twk4,v31
+
+	vncipher	$out0,$out0,v30
+	vncipher	$out1,$out1,v30
+	vncipher	$out2,$out2,v30
+	vncipher	$out3,$out3,v30
+	vncipher	$out4,$out4,v30
+
+	vncipherlast	$out0,$out0,$twk0
+	vncipherlast	$out1,$out1,$in1
+	vncipherlast	$out2,$out2,$in2
+	vncipherlast	$out3,$out3,$in3
+	vncipherlast	$out4,$out4,$in4
+	mtctr		$rounds
+	blr
+        .long   	0
+        .byte   	0,12,0x14,0,0,0,0,0
+___
+}}	}}}
+
+my $consts=1;
+foreach(split("\n",$code)) {
+        s/\`([^\`]*)\`/eval($1)/geo;
+
+	# constants table endian-specific conversion
+	if ($consts && m/\.(long|byte)\s+(.+)\s+(\?[a-z]*)$/o) {
+	    my $conv=$3;
+	    my @bytes=();
+
+	    # convert to endian-agnostic format
+	    if ($1 eq "long") {
+	      foreach (split(/,\s*/,$2)) {
+		my $l = /^0/?oct:int;
+		push @bytes,($l>>24)&0xff,($l>>16)&0xff,($l>>8)&0xff,$l&0xff;
+	      }
+	    } else {
+		@bytes = map(/^0/?oct:int,split(/,\s*/,$2));
+	    }
+
+	    # little-endian conversion
+	    if ($flavour =~ /le$/o) {
+		SWITCH: for($conv)  {
+		    /\?inv/ && do   { @bytes=map($_^0xf,@bytes); last; };
+		    /\?rev/ && do   { @bytes=reverse(@bytes);    last; };
+		}
+	    }
+
+	    #emit
+	    print ".byte\t",join(',',map (sprintf("0x%02x",$_),@bytes)),"\n";
+	    next;
+	}
+	$consts=0 if (m/Lconsts:/o);	# end of table
+
+	# instructions prefixed with '?' are endian-specific and need
+	# to be adjusted accordingly...
+	if ($flavour =~ /le$/o) {	# little-endian
+	    s/le\?//o		or
+	    s/be\?/#be#/o	or
+	    s/\?lvsr/lvsl/o	or
+	    s/\?lvsl/lvsr/o	or
+	    s/\?(vperm\s+v[0-9]+,\s*)(v[0-9]+,\s*)(v[0-9]+,\s*)(v[0-9]+)/$1$3$2$4/o or
+	    s/\?(vsldoi\s+v[0-9]+,\s*)(v[0-9]+,)\s*(v[0-9]+,\s*)([0-9]+)/$1$3$2 16-$4/o or
+	    s/\?(vspltw\s+v[0-9]+,\s*)(v[0-9]+,)\s*([0-9])/$1$2 3-$3/o;
+	} else {			# big-endian
+	    s/le\?/#le#/o	or
+	    s/be\?//o		or
+	    s/\?([a-z]+)/$1/o;
+	}
+
+        print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aest4-sparcv9.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aest4-sparcv9.pl
new file mode 100644
index 000000000..54d0c5882
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aest4-sparcv9.pl
@@ -0,0 +1,929 @@
+#! /usr/bin/env perl
+# Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by David S. Miller and Andy Polyakov.
+# The module is licensed under 2-clause BSD license. October 2012.
+# All rights reserved.
+# ====================================================================
+
+######################################################################
+# AES for SPARC T4.
+#
+# AES round instructions complete in 3 cycles and can be issued every
+# cycle. It means that round calculations should take 4*rounds cycles,
+# because any given round instruction depends on result of *both*
+# previous instructions:
+#
+#	|0 |1 |2 |3 |4
+#	|01|01|01|
+#	   |23|23|23|
+#	            |01|01|...
+#	               |23|...
+#
+# Provided that fxor [with IV] takes 3 cycles to complete, critical
+# path length for CBC encrypt would be 3+4*rounds, or in other words
+# it should process one byte in at least (3+4*rounds)/16 cycles. This
+# estimate doesn't account for "collateral" instructions, such as
+# fetching input from memory, xor-ing it with zero-round key and
+# storing the result. Yet, *measured* performance [for data aligned
+# at 64-bit boundary!] deviates from this equation by less than 0.5%:
+#
+#		128-bit key	192-		256-
+# CBC encrypt	2.70/2.90(*)	3.20/3.40	3.70/3.90
+#			 (*) numbers after slash are for
+#			     misaligned data.
+#
+# Out-of-order execution logic managed to fully overlap "collateral"
+# instructions with those on critical path. Amazing!
+#
+# As with Intel AES-NI, question is if it's possible to improve
+# performance of parallelizable modes by interleaving round
+# instructions. Provided round instruction latency and throughput
+# optimal interleave factor is 2. But can we expect 2x performance
+# improvement? Well, as round instructions can be issued one per
+# cycle, they don't saturate the 2-way issue pipeline and therefore
+# there is room for "collateral" calculations... Yet, 2x speed-up
+# over CBC encrypt remains unattaintable:
+#
+#		128-bit key	192-		256-
+# CBC decrypt	1.64/2.11	1.89/2.37	2.23/2.61
+# CTR		1.64/2.08(*)	1.89/2.33	2.23/2.61
+#			 (*) numbers after slash are for
+#			     misaligned data.
+#
+# Estimates based on amount of instructions under assumption that
+# round instructions are not pairable with any other instruction
+# suggest that latter is the actual case and pipeline runs
+# underutilized. It should be noted that T4 out-of-order execution
+# logic is so capable that performance gain from 2x interleave is
+# not even impressive, ~7-13% over non-interleaved code, largest
+# for 256-bit keys.
+
+# To anchor to something else, software implementation processes
+# one byte in 29 cycles with 128-bit key on same processor. Intel
+# Sandy Bridge encrypts byte in 5.07 cycles in CBC mode and decrypts
+# in 0.93, naturally with AES-NI.
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "sparcv9_modes.pl";
+
+$output = pop;
+open STDOUT,">$output";
+
+$::evp=1;	# if $evp is set to 0, script generates module with
+# AES_[en|de]crypt, AES_set_[en|de]crypt_key and AES_cbc_encrypt entry
+# points. These however are not fully compatible with openssl/aes.h,
+# because they expect AES_KEY to be aligned at 64-bit boundary. When
+# used through EVP, alignment is arranged at EVP layer. Second thing
+# that is arranged by EVP is at least 32-bit alignment of IV.
+
+######################################################################
+# single-round subroutines
+#
+{
+my ($inp,$out,$key,$rounds,$tmp,$mask)=map("%o$_",(0..5));
+
+$code.=<<___;
+#include "sparc_arch.h"
+
+#ifdef	__arch64__
+.register	%g2,#scratch
+.register	%g3,#scratch
+#endif
+
+.text
+
+.globl	aes_t4_encrypt
+.align	32
+aes_t4_encrypt:
+	andcc		$inp, 7, %g1		! is input aligned?
+	andn		$inp, 7, $inp
+
+	ldx		[$key + 0], %g4
+	ldx		[$key + 8], %g5
+
+	ldx		[$inp + 0], %o4
+	bz,pt		%icc, 1f
+	ldx		[$inp + 8], %o5
+	ldx		[$inp + 16], $inp
+	sll		%g1, 3, %g1
+	sub		%g0, %g1, %o3
+	sllx		%o4, %g1, %o4
+	sllx		%o5, %g1, %g1
+	srlx		%o5, %o3, %o5
+	srlx		$inp, %o3, %o3
+	or		%o5, %o4, %o4
+	or		%o3, %g1, %o5
+1:
+	ld		[$key + 240], $rounds
+	ldd		[$key + 16], %f12
+	ldd		[$key + 24], %f14
+	xor		%g4, %o4, %o4
+	xor		%g5, %o5, %o5
+	movxtod		%o4, %f0
+	movxtod		%o5, %f2
+	srl		$rounds, 1, $rounds
+	ldd		[$key + 32], %f16
+	sub		$rounds, 1, $rounds
+	ldd		[$key + 40], %f18
+	add		$key, 48, $key
+
+.Lenc:
+	aes_eround01	%f12, %f0, %f2, %f4
+	aes_eround23	%f14, %f0, %f2, %f2
+	ldd		[$key + 0], %f12
+	ldd		[$key + 8], %f14
+	sub		$rounds,1,$rounds
+	aes_eround01	%f16, %f4, %f2, %f0
+	aes_eround23	%f18, %f4, %f2, %f2
+	ldd		[$key + 16], %f16
+	ldd		[$key + 24], %f18
+	brnz,pt		$rounds, .Lenc
+	add		$key, 32, $key
+
+	andcc		$out, 7, $tmp		! is output aligned?
+	aes_eround01	%f12, %f0, %f2, %f4
+	aes_eround23	%f14, %f0, %f2, %f2
+	aes_eround01_l	%f16, %f4, %f2, %f0
+	aes_eround23_l	%f18, %f4, %f2, %f2
+
+	bnz,pn		%icc, 2f
+	nop
+
+	std		%f0, [$out + 0]
+	retl
+	std		%f2, [$out + 8]
+
+2:	alignaddrl	$out, %g0, $out
+	mov		0xff, $mask
+	srl		$mask, $tmp, $mask
+
+	faligndata	%f0, %f0, %f4
+	faligndata	%f0, %f2, %f6
+	faligndata	%f2, %f2, %f8
+
+	stda		%f4, [$out + $mask]0xc0	! partial store
+	std		%f6, [$out + 8]
+	add		$out, 16, $out
+	orn		%g0, $mask, $mask
+	retl
+	stda		%f8, [$out + $mask]0xc0	! partial store
+.type	aes_t4_encrypt,#function
+.size	aes_t4_encrypt,.-aes_t4_encrypt
+
+.globl	aes_t4_decrypt
+.align	32
+aes_t4_decrypt:
+	andcc		$inp, 7, %g1		! is input aligned?
+	andn		$inp, 7, $inp
+
+	ldx		[$key + 0], %g4
+	ldx		[$key + 8], %g5
+
+	ldx		[$inp + 0], %o4
+	bz,pt		%icc, 1f
+	ldx		[$inp + 8], %o5
+	ldx		[$inp + 16], $inp
+	sll		%g1, 3, %g1
+	sub		%g0, %g1, %o3
+	sllx		%o4, %g1, %o4
+	sllx		%o5, %g1, %g1
+	srlx		%o5, %o3, %o5
+	srlx		$inp, %o3, %o3
+	or		%o5, %o4, %o4
+	or		%o3, %g1, %o5
+1:
+	ld		[$key + 240], $rounds
+	ldd		[$key + 16], %f12
+	ldd		[$key + 24], %f14
+	xor		%g4, %o4, %o4
+	xor		%g5, %o5, %o5
+	movxtod		%o4, %f0
+	movxtod		%o5, %f2
+	srl		$rounds, 1, $rounds
+	ldd		[$key + 32], %f16
+	sub		$rounds, 1, $rounds
+	ldd		[$key + 40], %f18
+	add		$key, 48, $key
+
+.Ldec:
+	aes_dround01	%f12, %f0, %f2, %f4
+	aes_dround23	%f14, %f0, %f2, %f2
+	ldd		[$key + 0], %f12
+	ldd		[$key + 8], %f14
+	sub		$rounds,1,$rounds
+	aes_dround01	%f16, %f4, %f2, %f0
+	aes_dround23	%f18, %f4, %f2, %f2
+	ldd		[$key + 16], %f16
+	ldd		[$key + 24], %f18
+	brnz,pt		$rounds, .Ldec
+	add		$key, 32, $key
+
+	andcc		$out, 7, $tmp		! is output aligned?
+	aes_dround01	%f12, %f0, %f2, %f4
+	aes_dround23	%f14, %f0, %f2, %f2
+	aes_dround01_l	%f16, %f4, %f2, %f0
+	aes_dround23_l	%f18, %f4, %f2, %f2
+
+	bnz,pn		%icc, 2f
+	nop
+
+	std		%f0, [$out + 0]
+	retl
+	std		%f2, [$out + 8]
+
+2:	alignaddrl	$out, %g0, $out
+	mov		0xff, $mask
+	srl		$mask, $tmp, $mask
+
+	faligndata	%f0, %f0, %f4
+	faligndata	%f0, %f2, %f6
+	faligndata	%f2, %f2, %f8
+
+	stda		%f4, [$out + $mask]0xc0	! partial store
+	std		%f6, [$out + 8]
+	add		$out, 16, $out
+	orn		%g0, $mask, $mask
+	retl
+	stda		%f8, [$out + $mask]0xc0	! partial store
+.type	aes_t4_decrypt,#function
+.size	aes_t4_decrypt,.-aes_t4_decrypt
+___
+}
+
+######################################################################
+# key setup subroutines
+#
+{
+my ($inp,$bits,$out,$tmp)=map("%o$_",(0..5));
+$code.=<<___;
+.globl	aes_t4_set_encrypt_key
+.align	32
+aes_t4_set_encrypt_key:
+.Lset_encrypt_key:
+	and		$inp, 7, $tmp
+	alignaddr	$inp, %g0, $inp
+	cmp		$bits, 192
+	ldd		[$inp + 0], %f0
+	bl,pt		%icc,.L128
+	ldd		[$inp + 8], %f2
+
+	be,pt		%icc,.L192
+	ldd		[$inp + 16], %f4
+	brz,pt		$tmp, .L256aligned
+	ldd		[$inp + 24], %f6
+
+	ldd		[$inp + 32], %f8
+	faligndata	%f0, %f2, %f0
+	faligndata	%f2, %f4, %f2
+	faligndata	%f4, %f6, %f4
+	faligndata	%f6, %f8, %f6
+.L256aligned:
+___
+for ($i=0; $i<6; $i++) {
+    $code.=<<___;
+	std		%f0, [$out + `32*$i+0`]
+	aes_kexpand1	%f0, %f6, $i, %f0
+	std		%f2, [$out + `32*$i+8`]
+	aes_kexpand2	%f2, %f0, %f2
+	std		%f4, [$out + `32*$i+16`]
+	aes_kexpand0	%f4, %f2, %f4
+	std		%f6, [$out + `32*$i+24`]
+	aes_kexpand2	%f6, %f4, %f6
+___
+}
+$code.=<<___;
+	std		%f0, [$out + `32*$i+0`]
+	aes_kexpand1	%f0, %f6, $i, %f0
+	std		%f2, [$out + `32*$i+8`]
+	aes_kexpand2	%f2, %f0, %f2
+	std		%f4, [$out + `32*$i+16`]
+	std		%f6, [$out + `32*$i+24`]
+	std		%f0, [$out + `32*$i+32`]
+	std		%f2, [$out + `32*$i+40`]
+
+	mov		14, $tmp
+	st		$tmp, [$out + 240]
+	retl
+	xor		%o0, %o0, %o0
+
+.align	16
+.L192:
+	brz,pt		$tmp, .L192aligned
+	nop
+
+	ldd		[$inp + 24], %f6
+	faligndata	%f0, %f2, %f0
+	faligndata	%f2, %f4, %f2
+	faligndata	%f4, %f6, %f4
+.L192aligned:
+___
+for ($i=0; $i<7; $i++) {
+    $code.=<<___;
+	std		%f0, [$out + `24*$i+0`]
+	aes_kexpand1	%f0, %f4, $i, %f0
+	std		%f2, [$out + `24*$i+8`]
+	aes_kexpand2	%f2, %f0, %f2
+	std		%f4, [$out + `24*$i+16`]
+	aes_kexpand2	%f4, %f2, %f4
+___
+}
+$code.=<<___;
+	std		%f0, [$out + `24*$i+0`]
+	aes_kexpand1	%f0, %f4, $i, %f0
+	std		%f2, [$out + `24*$i+8`]
+	aes_kexpand2	%f2, %f0, %f2
+	std		%f4, [$out + `24*$i+16`]
+	std		%f0, [$out + `24*$i+24`]
+	std		%f2, [$out + `24*$i+32`]
+
+	mov		12, $tmp
+	st		$tmp, [$out + 240]
+	retl
+	xor		%o0, %o0, %o0
+
+.align	16
+.L128:
+	brz,pt		$tmp, .L128aligned
+	nop
+
+	ldd		[$inp + 16], %f4
+	faligndata	%f0, %f2, %f0
+	faligndata	%f2, %f4, %f2
+.L128aligned:
+___
+for ($i=0; $i<10; $i++) {
+    $code.=<<___;
+	std		%f0, [$out + `16*$i+0`]
+	aes_kexpand1	%f0, %f2, $i, %f0
+	std		%f2, [$out + `16*$i+8`]
+	aes_kexpand2	%f2, %f0, %f2
+___
+}
+$code.=<<___;
+	std		%f0, [$out + `16*$i+0`]
+	std		%f2, [$out + `16*$i+8`]
+
+	mov		10, $tmp
+	st		$tmp, [$out + 240]
+	retl
+	xor		%o0, %o0, %o0
+.type	aes_t4_set_encrypt_key,#function
+.size	aes_t4_set_encrypt_key,.-aes_t4_set_encrypt_key
+
+.globl	aes_t4_set_decrypt_key
+.align	32
+aes_t4_set_decrypt_key:
+	mov		%o7, %o5
+	call		.Lset_encrypt_key
+	nop
+
+	mov		%o5, %o7
+	sll		$tmp, 4, $inp		! $tmp is number of rounds
+	add		$tmp, 2, $tmp
+	add		$out, $inp, $inp	! $inp=$out+16*rounds
+	srl		$tmp, 2, $tmp		! $tmp=(rounds+2)/4
+
+.Lkey_flip:
+	ldd		[$out + 0],  %f0
+	ldd		[$out + 8],  %f2
+	ldd		[$out + 16], %f4
+	ldd		[$out + 24], %f6
+	ldd		[$inp + 0],  %f8
+	ldd		[$inp + 8],  %f10
+	ldd		[$inp - 16], %f12
+	ldd		[$inp - 8],  %f14
+	sub		$tmp, 1, $tmp
+	std		%f0, [$inp + 0]
+	std		%f2, [$inp + 8]
+	std		%f4, [$inp - 16]
+	std		%f6, [$inp - 8]
+	std		%f8, [$out + 0]
+	std		%f10, [$out + 8]
+	std		%f12, [$out + 16]
+	std		%f14, [$out + 24]
+	add		$out, 32, $out
+	brnz		$tmp, .Lkey_flip
+	sub		$inp, 32, $inp
+
+	retl
+	xor		%o0, %o0, %o0
+.type	aes_t4_set_decrypt_key,#function
+.size	aes_t4_set_decrypt_key,.-aes_t4_set_decrypt_key
+___
+}
+
+{{{
+my ($inp,$out,$len,$key,$ivec,$enc)=map("%i$_",(0..5));
+my ($ileft,$iright,$ooff,$omask,$ivoff)=map("%l$_",(1..7));
+
+$code.=<<___;
+.align	32
+_aes128_encrypt_1x:
+___
+for ($i=0; $i<4; $i++) {
+    $code.=<<___;
+	aes_eround01	%f`16+8*$i+0`, %f0, %f2, %f4
+	aes_eround23	%f`16+8*$i+2`, %f0, %f2, %f2
+	aes_eround01	%f`16+8*$i+4`, %f4, %f2, %f0
+	aes_eround23	%f`16+8*$i+6`, %f4, %f2, %f2
+___
+}
+$code.=<<___;
+	aes_eround01	%f48, %f0, %f2, %f4
+	aes_eround23	%f50, %f0, %f2, %f2
+	aes_eround01_l	%f52, %f4, %f2, %f0
+	retl
+	aes_eround23_l	%f54, %f4, %f2, %f2
+.type	_aes128_encrypt_1x,#function
+.size	_aes128_encrypt_1x,.-_aes128_encrypt_1x
+
+.align	32
+_aes128_encrypt_2x:
+___
+for ($i=0; $i<4; $i++) {
+    $code.=<<___;
+	aes_eround01	%f`16+8*$i+0`, %f0, %f2, %f8
+	aes_eround23	%f`16+8*$i+2`, %f0, %f2, %f2
+	aes_eround01	%f`16+8*$i+0`, %f4, %f6, %f10
+	aes_eround23	%f`16+8*$i+2`, %f4, %f6, %f6
+	aes_eround01	%f`16+8*$i+4`, %f8, %f2, %f0
+	aes_eround23	%f`16+8*$i+6`, %f8, %f2, %f2
+	aes_eround01	%f`16+8*$i+4`, %f10, %f6, %f4
+	aes_eround23	%f`16+8*$i+6`, %f10, %f6, %f6
+___
+}
+$code.=<<___;
+	aes_eround01	%f48, %f0, %f2, %f8
+	aes_eround23	%f50, %f0, %f2, %f2
+	aes_eround01	%f48, %f4, %f6, %f10
+	aes_eround23	%f50, %f4, %f6, %f6
+	aes_eround01_l	%f52, %f8, %f2, %f0
+	aes_eround23_l	%f54, %f8, %f2, %f2
+	aes_eround01_l	%f52, %f10, %f6, %f4
+	retl
+	aes_eround23_l	%f54, %f10, %f6, %f6
+.type	_aes128_encrypt_2x,#function
+.size	_aes128_encrypt_2x,.-_aes128_encrypt_2x
+
+.align	32
+_aes128_loadkey:
+	ldx		[$key + 0], %g4
+	ldx		[$key + 8], %g5
+___
+for ($i=2; $i<22;$i++) {			# load key schedule
+    $code.=<<___;
+	ldd		[$key + `8*$i`], %f`12+2*$i`
+___
+}
+$code.=<<___;
+	retl
+	nop
+.type	_aes128_loadkey,#function
+.size	_aes128_loadkey,.-_aes128_loadkey
+_aes128_load_enckey=_aes128_loadkey
+_aes128_load_deckey=_aes128_loadkey
+
+___
+
+&alg_cbc_encrypt_implement("aes",128);
+if ($::evp) {
+    &alg_ctr32_implement("aes",128);
+    &alg_xts_implement("aes",128,"en");
+    &alg_xts_implement("aes",128,"de");
+}
+&alg_cbc_decrypt_implement("aes",128);
+
+$code.=<<___;
+.align	32
+_aes128_decrypt_1x:
+___
+for ($i=0; $i<4; $i++) {
+    $code.=<<___;
+	aes_dround01	%f`16+8*$i+0`, %f0, %f2, %f4
+	aes_dround23	%f`16+8*$i+2`, %f0, %f2, %f2
+	aes_dround01	%f`16+8*$i+4`, %f4, %f2, %f0
+	aes_dround23	%f`16+8*$i+6`, %f4, %f2, %f2
+___
+}
+$code.=<<___;
+	aes_dround01	%f48, %f0, %f2, %f4
+	aes_dround23	%f50, %f0, %f2, %f2
+	aes_dround01_l	%f52, %f4, %f2, %f0
+	retl
+	aes_dround23_l	%f54, %f4, %f2, %f2
+.type	_aes128_decrypt_1x,#function
+.size	_aes128_decrypt_1x,.-_aes128_decrypt_1x
+
+.align	32
+_aes128_decrypt_2x:
+___
+for ($i=0; $i<4; $i++) {
+    $code.=<<___;
+	aes_dround01	%f`16+8*$i+0`, %f0, %f2, %f8
+	aes_dround23	%f`16+8*$i+2`, %f0, %f2, %f2
+	aes_dround01	%f`16+8*$i+0`, %f4, %f6, %f10
+	aes_dround23	%f`16+8*$i+2`, %f4, %f6, %f6
+	aes_dround01	%f`16+8*$i+4`, %f8, %f2, %f0
+	aes_dround23	%f`16+8*$i+6`, %f8, %f2, %f2
+	aes_dround01	%f`16+8*$i+4`, %f10, %f6, %f4
+	aes_dround23	%f`16+8*$i+6`, %f10, %f6, %f6
+___
+}
+$code.=<<___;
+	aes_dround01	%f48, %f0, %f2, %f8
+	aes_dround23	%f50, %f0, %f2, %f2
+	aes_dround01	%f48, %f4, %f6, %f10
+	aes_dround23	%f50, %f4, %f6, %f6
+	aes_dround01_l	%f52, %f8, %f2, %f0
+	aes_dround23_l	%f54, %f8, %f2, %f2
+	aes_dround01_l	%f52, %f10, %f6, %f4
+	retl
+	aes_dround23_l	%f54, %f10, %f6, %f6
+.type	_aes128_decrypt_2x,#function
+.size	_aes128_decrypt_2x,.-_aes128_decrypt_2x
+___
+
+$code.=<<___;
+.align	32
+_aes192_encrypt_1x:
+___
+for ($i=0; $i<5; $i++) {
+    $code.=<<___;
+	aes_eround01	%f`16+8*$i+0`, %f0, %f2, %f4
+	aes_eround23	%f`16+8*$i+2`, %f0, %f2, %f2
+	aes_eround01	%f`16+8*$i+4`, %f4, %f2, %f0
+	aes_eround23	%f`16+8*$i+6`, %f4, %f2, %f2
+___
+}
+$code.=<<___;
+	aes_eround01	%f56, %f0, %f2, %f4
+	aes_eround23	%f58, %f0, %f2, %f2
+	aes_eround01_l	%f60, %f4, %f2, %f0
+	retl
+	aes_eround23_l	%f62, %f4, %f2, %f2
+.type	_aes192_encrypt_1x,#function
+.size	_aes192_encrypt_1x,.-_aes192_encrypt_1x
+
+.align	32
+_aes192_encrypt_2x:
+___
+for ($i=0; $i<5; $i++) {
+    $code.=<<___;
+	aes_eround01	%f`16+8*$i+0`, %f0, %f2, %f8
+	aes_eround23	%f`16+8*$i+2`, %f0, %f2, %f2
+	aes_eround01	%f`16+8*$i+0`, %f4, %f6, %f10
+	aes_eround23	%f`16+8*$i+2`, %f4, %f6, %f6
+	aes_eround01	%f`16+8*$i+4`, %f8, %f2, %f0
+	aes_eround23	%f`16+8*$i+6`, %f8, %f2, %f2
+	aes_eround01	%f`16+8*$i+4`, %f10, %f6, %f4
+	aes_eround23	%f`16+8*$i+6`, %f10, %f6, %f6
+___
+}
+$code.=<<___;
+	aes_eround01	%f56, %f0, %f2, %f8
+	aes_eround23	%f58, %f0, %f2, %f2
+	aes_eround01	%f56, %f4, %f6, %f10
+	aes_eround23	%f58, %f4, %f6, %f6
+	aes_eround01_l	%f60, %f8, %f2, %f0
+	aes_eround23_l	%f62, %f8, %f2, %f2
+	aes_eround01_l	%f60, %f10, %f6, %f4
+	retl
+	aes_eround23_l	%f62, %f10, %f6, %f6
+.type	_aes192_encrypt_2x,#function
+.size	_aes192_encrypt_2x,.-_aes192_encrypt_2x
+
+.align	32
+_aes256_encrypt_1x:
+	aes_eround01	%f16, %f0, %f2, %f4
+	aes_eround23	%f18, %f0, %f2, %f2
+	ldd		[$key + 208], %f16
+	ldd		[$key + 216], %f18
+	aes_eround01	%f20, %f4, %f2, %f0
+	aes_eround23	%f22, %f4, %f2, %f2
+	ldd		[$key + 224], %f20
+	ldd		[$key + 232], %f22
+___
+for ($i=1; $i<6; $i++) {
+    $code.=<<___;
+	aes_eround01	%f`16+8*$i+0`, %f0, %f2, %f4
+	aes_eround23	%f`16+8*$i+2`, %f0, %f2, %f2
+	aes_eround01	%f`16+8*$i+4`, %f4, %f2, %f0
+	aes_eround23	%f`16+8*$i+6`, %f4, %f2, %f2
+___
+}
+$code.=<<___;
+	aes_eround01	%f16, %f0, %f2, %f4
+	aes_eround23	%f18, %f0, %f2, %f2
+	ldd		[$key + 16], %f16
+	ldd		[$key + 24], %f18
+	aes_eround01_l	%f20, %f4, %f2, %f0
+	aes_eround23_l	%f22, %f4, %f2, %f2
+	ldd		[$key + 32], %f20
+	retl
+	ldd		[$key + 40], %f22
+.type	_aes256_encrypt_1x,#function
+.size	_aes256_encrypt_1x,.-_aes256_encrypt_1x
+
+.align	32
+_aes256_encrypt_2x:
+	aes_eround01	%f16, %f0, %f2, %f8
+	aes_eround23	%f18, %f0, %f2, %f2
+	aes_eround01	%f16, %f4, %f6, %f10
+	aes_eround23	%f18, %f4, %f6, %f6
+	ldd		[$key + 208], %f16
+	ldd		[$key + 216], %f18
+	aes_eround01	%f20, %f8, %f2, %f0
+	aes_eround23	%f22, %f8, %f2, %f2
+	aes_eround01	%f20, %f10, %f6, %f4
+	aes_eround23	%f22, %f10, %f6, %f6
+	ldd		[$key + 224], %f20
+	ldd		[$key + 232], %f22
+___
+for ($i=1; $i<6; $i++) {
+    $code.=<<___;
+	aes_eround01	%f`16+8*$i+0`, %f0, %f2, %f8
+	aes_eround23	%f`16+8*$i+2`, %f0, %f2, %f2
+	aes_eround01	%f`16+8*$i+0`, %f4, %f6, %f10
+	aes_eround23	%f`16+8*$i+2`, %f4, %f6, %f6
+	aes_eround01	%f`16+8*$i+4`, %f8, %f2, %f0
+	aes_eround23	%f`16+8*$i+6`, %f8, %f2, %f2
+	aes_eround01	%f`16+8*$i+4`, %f10, %f6, %f4
+	aes_eround23	%f`16+8*$i+6`, %f10, %f6, %f6
+___
+}
+$code.=<<___;
+	aes_eround01	%f16, %f0, %f2, %f8
+	aes_eround23	%f18, %f0, %f2, %f2
+	aes_eround01	%f16, %f4, %f6, %f10
+	aes_eround23	%f18, %f4, %f6, %f6
+	ldd		[$key + 16], %f16
+	ldd		[$key + 24], %f18
+	aes_eround01_l	%f20, %f8, %f2, %f0
+	aes_eround23_l	%f22, %f8, %f2, %f2
+	aes_eround01_l	%f20, %f10, %f6, %f4
+	aes_eround23_l	%f22, %f10, %f6, %f6
+	ldd		[$key + 32], %f20
+	retl
+	ldd		[$key + 40], %f22
+.type	_aes256_encrypt_2x,#function
+.size	_aes256_encrypt_2x,.-_aes256_encrypt_2x
+
+.align	32
+_aes192_loadkey:
+	ldx		[$key + 0], %g4
+	ldx		[$key + 8], %g5
+___
+for ($i=2; $i<26;$i++) {			# load key schedule
+    $code.=<<___;
+	ldd		[$key + `8*$i`], %f`12+2*$i`
+___
+}
+$code.=<<___;
+	retl
+	nop
+.type	_aes192_loadkey,#function
+.size	_aes192_loadkey,.-_aes192_loadkey
+_aes256_loadkey=_aes192_loadkey
+_aes192_load_enckey=_aes192_loadkey
+_aes192_load_deckey=_aes192_loadkey
+_aes256_load_enckey=_aes192_loadkey
+_aes256_load_deckey=_aes192_loadkey
+___
+
+&alg_cbc_encrypt_implement("aes",256);
+&alg_cbc_encrypt_implement("aes",192);
+if ($::evp) {
+    &alg_ctr32_implement("aes",256);
+    &alg_xts_implement("aes",256,"en");
+    &alg_xts_implement("aes",256,"de");
+    &alg_ctr32_implement("aes",192);
+}
+&alg_cbc_decrypt_implement("aes",192);
+&alg_cbc_decrypt_implement("aes",256);
+
+$code.=<<___;
+.align	32
+_aes256_decrypt_1x:
+	aes_dround01	%f16, %f0, %f2, %f4
+	aes_dround23	%f18, %f0, %f2, %f2
+	ldd		[$key + 208], %f16
+	ldd		[$key + 216], %f18
+	aes_dround01	%f20, %f4, %f2, %f0
+	aes_dround23	%f22, %f4, %f2, %f2
+	ldd		[$key + 224], %f20
+	ldd		[$key + 232], %f22
+___
+for ($i=1; $i<6; $i++) {
+    $code.=<<___;
+	aes_dround01	%f`16+8*$i+0`, %f0, %f2, %f4
+	aes_dround23	%f`16+8*$i+2`, %f0, %f2, %f2
+	aes_dround01	%f`16+8*$i+4`, %f4, %f2, %f0
+	aes_dround23	%f`16+8*$i+6`, %f4, %f2, %f2
+___
+}
+$code.=<<___;
+	aes_dround01	%f16, %f0, %f2, %f4
+	aes_dround23	%f18, %f0, %f2, %f2
+	ldd		[$key + 16], %f16
+	ldd		[$key + 24], %f18
+	aes_dround01_l	%f20, %f4, %f2, %f0
+	aes_dround23_l	%f22, %f4, %f2, %f2
+	ldd		[$key + 32], %f20
+	retl
+	ldd		[$key + 40], %f22
+.type	_aes256_decrypt_1x,#function
+.size	_aes256_decrypt_1x,.-_aes256_decrypt_1x
+
+.align	32
+_aes256_decrypt_2x:
+	aes_dround01	%f16, %f0, %f2, %f8
+	aes_dround23	%f18, %f0, %f2, %f2
+	aes_dround01	%f16, %f4, %f6, %f10
+	aes_dround23	%f18, %f4, %f6, %f6
+	ldd		[$key + 208], %f16
+	ldd		[$key + 216], %f18
+	aes_dround01	%f20, %f8, %f2, %f0
+	aes_dround23	%f22, %f8, %f2, %f2
+	aes_dround01	%f20, %f10, %f6, %f4
+	aes_dround23	%f22, %f10, %f6, %f6
+	ldd		[$key + 224], %f20
+	ldd		[$key + 232], %f22
+___
+for ($i=1; $i<6; $i++) {
+    $code.=<<___;
+	aes_dround01	%f`16+8*$i+0`, %f0, %f2, %f8
+	aes_dround23	%f`16+8*$i+2`, %f0, %f2, %f2
+	aes_dround01	%f`16+8*$i+0`, %f4, %f6, %f10
+	aes_dround23	%f`16+8*$i+2`, %f4, %f6, %f6
+	aes_dround01	%f`16+8*$i+4`, %f8, %f2, %f0
+	aes_dround23	%f`16+8*$i+6`, %f8, %f2, %f2
+	aes_dround01	%f`16+8*$i+4`, %f10, %f6, %f4
+	aes_dround23	%f`16+8*$i+6`, %f10, %f6, %f6
+___
+}
+$code.=<<___;
+	aes_dround01	%f16, %f0, %f2, %f8
+	aes_dround23	%f18, %f0, %f2, %f2
+	aes_dround01	%f16, %f4, %f6, %f10
+	aes_dround23	%f18, %f4, %f6, %f6
+	ldd		[$key + 16], %f16
+	ldd		[$key + 24], %f18
+	aes_dround01_l	%f20, %f8, %f2, %f0
+	aes_dround23_l	%f22, %f8, %f2, %f2
+	aes_dround01_l	%f20, %f10, %f6, %f4
+	aes_dround23_l	%f22, %f10, %f6, %f6
+	ldd		[$key + 32], %f20
+	retl
+	ldd		[$key + 40], %f22
+.type	_aes256_decrypt_2x,#function
+.size	_aes256_decrypt_2x,.-_aes256_decrypt_2x
+
+.align	32
+_aes192_decrypt_1x:
+___
+for ($i=0; $i<5; $i++) {
+    $code.=<<___;
+	aes_dround01	%f`16+8*$i+0`, %f0, %f2, %f4
+	aes_dround23	%f`16+8*$i+2`, %f0, %f2, %f2
+	aes_dround01	%f`16+8*$i+4`, %f4, %f2, %f0
+	aes_dround23	%f`16+8*$i+6`, %f4, %f2, %f2
+___
+}
+$code.=<<___;
+	aes_dround01	%f56, %f0, %f2, %f4
+	aes_dround23	%f58, %f0, %f2, %f2
+	aes_dround01_l	%f60, %f4, %f2, %f0
+	retl
+	aes_dround23_l	%f62, %f4, %f2, %f2
+.type	_aes192_decrypt_1x,#function
+.size	_aes192_decrypt_1x,.-_aes192_decrypt_1x
+
+.align	32
+_aes192_decrypt_2x:
+___
+for ($i=0; $i<5; $i++) {
+    $code.=<<___;
+	aes_dround01	%f`16+8*$i+0`, %f0, %f2, %f8
+	aes_dround23	%f`16+8*$i+2`, %f0, %f2, %f2
+	aes_dround01	%f`16+8*$i+0`, %f4, %f6, %f10
+	aes_dround23	%f`16+8*$i+2`, %f4, %f6, %f6
+	aes_dround01	%f`16+8*$i+4`, %f8, %f2, %f0
+	aes_dround23	%f`16+8*$i+6`, %f8, %f2, %f2
+	aes_dround01	%f`16+8*$i+4`, %f10, %f6, %f4
+	aes_dround23	%f`16+8*$i+6`, %f10, %f6, %f6
+___
+}
+$code.=<<___;
+	aes_dround01	%f56, %f0, %f2, %f8
+	aes_dround23	%f58, %f0, %f2, %f2
+	aes_dround01	%f56, %f4, %f6, %f10
+	aes_dround23	%f58, %f4, %f6, %f6
+	aes_dround01_l	%f60, %f8, %f2, %f0
+	aes_dround23_l	%f62, %f8, %f2, %f2
+	aes_dround01_l	%f60, %f10, %f6, %f4
+	retl
+	aes_dround23_l	%f62, %f10, %f6, %f6
+.type	_aes192_decrypt_2x,#function
+.size	_aes192_decrypt_2x,.-_aes192_decrypt_2x
+___
+}}}
+
+if (!$::evp) {
+$code.=<<___;
+.global	AES_encrypt
+AES_encrypt=aes_t4_encrypt
+.global	AES_decrypt
+AES_decrypt=aes_t4_decrypt
+.global	AES_set_encrypt_key
+.align	32
+AES_set_encrypt_key:
+	andcc		%o2, 7, %g0		! check alignment
+	bnz,a,pn	%icc, 1f
+	mov		-1, %o0
+	brz,a,pn	%o0, 1f
+	mov		-1, %o0
+	brz,a,pn	%o2, 1f
+	mov		-1, %o0
+	andncc		%o1, 0x1c0, %g0
+	bnz,a,pn	%icc, 1f
+	mov		-2, %o0
+	cmp		%o1, 128
+	bl,a,pn		%icc, 1f
+	mov		-2, %o0
+	b		aes_t4_set_encrypt_key
+	nop
+1:	retl
+	nop
+.type	AES_set_encrypt_key,#function
+.size	AES_set_encrypt_key,.-AES_set_encrypt_key
+
+.global	AES_set_decrypt_key
+.align	32
+AES_set_decrypt_key:
+	andcc		%o2, 7, %g0		! check alignment
+	bnz,a,pn	%icc, 1f
+	mov		-1, %o0
+	brz,a,pn	%o0, 1f
+	mov		-1, %o0
+	brz,a,pn	%o2, 1f
+	mov		-1, %o0
+	andncc		%o1, 0x1c0, %g0
+	bnz,a,pn	%icc, 1f
+	mov		-2, %o0
+	cmp		%o1, 128
+	bl,a,pn		%icc, 1f
+	mov		-2, %o0
+	b		aes_t4_set_decrypt_key
+	nop
+1:	retl
+	nop
+.type	AES_set_decrypt_key,#function
+.size	AES_set_decrypt_key,.-AES_set_decrypt_key
+___
+
+my ($inp,$out,$len,$key,$ivec,$enc)=map("%o$_",(0..5));
+
+$code.=<<___;
+.globl	AES_cbc_encrypt
+.align	32
+AES_cbc_encrypt:
+	ld		[$key + 240], %g1
+	nop
+	brz		$enc, .Lcbc_decrypt
+	cmp		%g1, 12
+
+	bl,pt		%icc, aes128_t4_cbc_encrypt
+	nop
+	be,pn		%icc, aes192_t4_cbc_encrypt
+	nop
+	ba		aes256_t4_cbc_encrypt
+	nop
+
+.Lcbc_decrypt:
+	bl,pt		%icc, aes128_t4_cbc_decrypt
+	nop
+	be,pn		%icc, aes192_t4_cbc_decrypt
+	nop
+	ba		aes256_t4_cbc_decrypt
+	nop
+.type	AES_cbc_encrypt,#function
+.size	AES_cbc_encrypt,.-AES_cbc_encrypt
+___
+}
+$code.=<<___;
+.asciz	"AES for SPARC T4, David S. Miller, Andy Polyakov"
+.align	4
+___
+
+&emit_assembler();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesv8-armx.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesv8-armx.pl
new file mode 100755
index 000000000..eec0ed230
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/aesv8-armx.pl
@@ -0,0 +1,1011 @@
+#! /usr/bin/env perl
+# Copyright 2014-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# This module implements support for ARMv8 AES instructions. The
+# module is endian-agnostic in sense that it supports both big- and
+# little-endian cases. As does it support both 32- and 64-bit modes
+# of operation. Latter is achieved by limiting amount of utilized
+# registers to 16, which implies additional NEON load and integer
+# instructions. This has no effect on mighty Apple A7, where results
+# are literally equal to the theoretical estimates based on AES
+# instruction latencies and issue rates. On Cortex-A53, an in-order
+# execution core, this costs up to 10-15%, which is partially
+# compensated by implementing dedicated code path for 128-bit
+# CBC encrypt case. On Cortex-A57 parallelizable mode performance
+# seems to be limited by sheer amount of NEON instructions...
+#
+# Performance in cycles per byte processed with 128-bit key:
+#
+#		CBC enc		CBC dec		CTR
+# Apple A7	2.39		1.20		1.20
+# Cortex-A53	1.32		1.29		1.46
+# Cortex-A57(*)	1.95		0.85		0.93
+# Denver	1.96		0.86		0.80
+# Mongoose	1.33		1.20		1.20
+# Kryo		1.26		0.94		1.00
+#
+# (*)	original 3.64/1.34/1.32 results were for r0p0 revision
+#	and are still same even for updated module;
+
+$flavour = shift;
+$output  = shift;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+die "can't locate arm-xlate.pl";
+
+open OUT,"| \"$^X\" $xlate $flavour $output";
+*STDOUT=*OUT;
+
+$prefix="aes_v8";
+
+$code=<<___;
+#include "arm_arch.h"
+
+#if __ARM_MAX_ARCH__>=7
+.text
+___
+$code.=".arch	armv8-a+crypto\n"			if ($flavour =~ /64/);
+$code.=<<___						if ($flavour !~ /64/);
+.arch	armv7-a	// don't confuse not-so-latest binutils with argv8 :-)
+.fpu	neon
+.code	32
+#undef	__thumb2__
+___
+
+# Assembler mnemonics are an eclectic mix of 32- and 64-bit syntax,
+# NEON is mostly 32-bit mnemonics, integer - mostly 64. Goal is to
+# maintain both 32- and 64-bit codes within single module and
+# transliterate common code to either flavour with regex vodoo.
+#
+{{{
+my ($inp,$bits,$out,$ptr,$rounds)=("x0","w1","x2","x3","w12");
+my ($zero,$rcon,$mask,$in0,$in1,$tmp,$key)=
+	$flavour=~/64/? map("q$_",(0..6)) : map("q$_",(0..3,8..10));
+
+
+$code.=<<___;
+.align	5
+.Lrcon:
+.long	0x01,0x01,0x01,0x01
+.long	0x0c0f0e0d,0x0c0f0e0d,0x0c0f0e0d,0x0c0f0e0d	// rotate-n-splat
+.long	0x1b,0x1b,0x1b,0x1b
+
+.globl	${prefix}_set_encrypt_key
+.type	${prefix}_set_encrypt_key,%function
+.align	5
+${prefix}_set_encrypt_key:
+.Lenc_key:
+___
+$code.=<<___	if ($flavour =~ /64/);
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+___
+$code.=<<___;
+	mov	$ptr,#-1
+	cmp	$inp,#0
+	b.eq	.Lenc_key_abort
+	cmp	$out,#0
+	b.eq	.Lenc_key_abort
+	mov	$ptr,#-2
+	cmp	$bits,#128
+	b.lt	.Lenc_key_abort
+	cmp	$bits,#256
+	b.gt	.Lenc_key_abort
+	tst	$bits,#0x3f
+	b.ne	.Lenc_key_abort
+
+	adr	$ptr,.Lrcon
+	cmp	$bits,#192
+
+	veor	$zero,$zero,$zero
+	vld1.8	{$in0},[$inp],#16
+	mov	$bits,#8		// reuse $bits
+	vld1.32	{$rcon,$mask},[$ptr],#32
+
+	b.lt	.Loop128
+	b.eq	.L192
+	b	.L256
+
+.align	4
+.Loop128:
+	vtbl.8	$key,{$in0},$mask
+	vext.8	$tmp,$zero,$in0,#12
+	vst1.32	{$in0},[$out],#16
+	aese	$key,$zero
+	subs	$bits,$bits,#1
+
+	veor	$in0,$in0,$tmp
+	vext.8	$tmp,$zero,$tmp,#12
+	veor	$in0,$in0,$tmp
+	vext.8	$tmp,$zero,$tmp,#12
+	 veor	$key,$key,$rcon
+	veor	$in0,$in0,$tmp
+	vshl.u8	$rcon,$rcon,#1
+	veor	$in0,$in0,$key
+	b.ne	.Loop128
+
+	vld1.32	{$rcon},[$ptr]
+
+	vtbl.8	$key,{$in0},$mask
+	vext.8	$tmp,$zero,$in0,#12
+	vst1.32	{$in0},[$out],#16
+	aese	$key,$zero
+
+	veor	$in0,$in0,$tmp
+	vext.8	$tmp,$zero,$tmp,#12
+	veor	$in0,$in0,$tmp
+	vext.8	$tmp,$zero,$tmp,#12
+	 veor	$key,$key,$rcon
+	veor	$in0,$in0,$tmp
+	vshl.u8	$rcon,$rcon,#1
+	veor	$in0,$in0,$key
+
+	vtbl.8	$key,{$in0},$mask
+	vext.8	$tmp,$zero,$in0,#12
+	vst1.32	{$in0},[$out],#16
+	aese	$key,$zero
+
+	veor	$in0,$in0,$tmp
+	vext.8	$tmp,$zero,$tmp,#12
+	veor	$in0,$in0,$tmp
+	vext.8	$tmp,$zero,$tmp,#12
+	 veor	$key,$key,$rcon
+	veor	$in0,$in0,$tmp
+	veor	$in0,$in0,$key
+	vst1.32	{$in0},[$out]
+	add	$out,$out,#0x50
+
+	mov	$rounds,#10
+	b	.Ldone
+
+.align	4
+.L192:
+	vld1.8	{$in1},[$inp],#8
+	vmov.i8	$key,#8			// borrow $key
+	vst1.32	{$in0},[$out],#16
+	vsub.i8	$mask,$mask,$key	// adjust the mask
+
+.Loop192:
+	vtbl.8	$key,{$in1},$mask
+	vext.8	$tmp,$zero,$in0,#12
+	vst1.32	{$in1},[$out],#8
+	aese	$key,$zero
+	subs	$bits,$bits,#1
+
+	veor	$in0,$in0,$tmp
+	vext.8	$tmp,$zero,$tmp,#12
+	veor	$in0,$in0,$tmp
+	vext.8	$tmp,$zero,$tmp,#12
+	veor	$in0,$in0,$tmp
+
+	vdup.32	$tmp,${in0}[3]
+	veor	$tmp,$tmp,$in1
+	 veor	$key,$key,$rcon
+	vext.8	$in1,$zero,$in1,#12
+	vshl.u8	$rcon,$rcon,#1
+	veor	$in1,$in1,$tmp
+	veor	$in0,$in0,$key
+	veor	$in1,$in1,$key
+	vst1.32	{$in0},[$out],#16
+	b.ne	.Loop192
+
+	mov	$rounds,#12
+	add	$out,$out,#0x20
+	b	.Ldone
+
+.align	4
+.L256:
+	vld1.8	{$in1},[$inp]
+	mov	$bits,#7
+	mov	$rounds,#14
+	vst1.32	{$in0},[$out],#16
+
+.Loop256:
+	vtbl.8	$key,{$in1},$mask
+	vext.8	$tmp,$zero,$in0,#12
+	vst1.32	{$in1},[$out],#16
+	aese	$key,$zero
+	subs	$bits,$bits,#1
+
+	veor	$in0,$in0,$tmp
+	vext.8	$tmp,$zero,$tmp,#12
+	veor	$in0,$in0,$tmp
+	vext.8	$tmp,$zero,$tmp,#12
+	 veor	$key,$key,$rcon
+	veor	$in0,$in0,$tmp
+	vshl.u8	$rcon,$rcon,#1
+	veor	$in0,$in0,$key
+	vst1.32	{$in0},[$out],#16
+	b.eq	.Ldone
+
+	vdup.32	$key,${in0}[3]		// just splat
+	vext.8	$tmp,$zero,$in1,#12
+	aese	$key,$zero
+
+	veor	$in1,$in1,$tmp
+	vext.8	$tmp,$zero,$tmp,#12
+	veor	$in1,$in1,$tmp
+	vext.8	$tmp,$zero,$tmp,#12
+	veor	$in1,$in1,$tmp
+
+	veor	$in1,$in1,$key
+	b	.Loop256
+
+.Ldone:
+	str	$rounds,[$out]
+	mov	$ptr,#0
+
+.Lenc_key_abort:
+	mov	x0,$ptr			// return value
+	`"ldr	x29,[sp],#16"		if ($flavour =~ /64/)`
+	ret
+.size	${prefix}_set_encrypt_key,.-${prefix}_set_encrypt_key
+
+.globl	${prefix}_set_decrypt_key
+.type	${prefix}_set_decrypt_key,%function
+.align	5
+${prefix}_set_decrypt_key:
+___
+$code.=<<___	if ($flavour =~ /64/);
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+___
+$code.=<<___	if ($flavour !~ /64/);
+	stmdb	sp!,{r4,lr}
+___
+$code.=<<___;
+	bl	.Lenc_key
+
+	cmp	x0,#0
+	b.ne	.Ldec_key_abort
+
+	sub	$out,$out,#240		// restore original $out
+	mov	x4,#-16
+	add	$inp,$out,x12,lsl#4	// end of key schedule
+
+	vld1.32	{v0.16b},[$out]
+	vld1.32	{v1.16b},[$inp]
+	vst1.32	{v0.16b},[$inp],x4
+	vst1.32	{v1.16b},[$out],#16
+
+.Loop_imc:
+	vld1.32	{v0.16b},[$out]
+	vld1.32	{v1.16b},[$inp]
+	aesimc	v0.16b,v0.16b
+	aesimc	v1.16b,v1.16b
+	vst1.32	{v0.16b},[$inp],x4
+	vst1.32	{v1.16b},[$out],#16
+	cmp	$inp,$out
+	b.hi	.Loop_imc
+
+	vld1.32	{v0.16b},[$out]
+	aesimc	v0.16b,v0.16b
+	vst1.32	{v0.16b},[$inp]
+
+	eor	x0,x0,x0		// return value
+.Ldec_key_abort:
+___
+$code.=<<___	if ($flavour !~ /64/);
+	ldmia	sp!,{r4,pc}
+___
+$code.=<<___	if ($flavour =~ /64/);
+	ldp	x29,x30,[sp],#16
+	.inst	0xd50323bf		// autiasp
+	ret
+___
+$code.=<<___;
+.size	${prefix}_set_decrypt_key,.-${prefix}_set_decrypt_key
+___
+}}}
+{{{
+sub gen_block () {
+my $dir = shift;
+my ($e,$mc) = $dir eq "en" ? ("e","mc") : ("d","imc");
+my ($inp,$out,$key)=map("x$_",(0..2));
+my $rounds="w3";
+my ($rndkey0,$rndkey1,$inout)=map("q$_",(0..3));
+
+$code.=<<___;
+.globl	${prefix}_${dir}crypt
+.type	${prefix}_${dir}crypt,%function
+.align	5
+${prefix}_${dir}crypt:
+	ldr	$rounds,[$key,#240]
+	vld1.32	{$rndkey0},[$key],#16
+	vld1.8	{$inout},[$inp]
+	sub	$rounds,$rounds,#2
+	vld1.32	{$rndkey1},[$key],#16
+
+.Loop_${dir}c:
+	aes$e	$inout,$rndkey0
+	aes$mc	$inout,$inout
+	vld1.32	{$rndkey0},[$key],#16
+	subs	$rounds,$rounds,#2
+	aes$e	$inout,$rndkey1
+	aes$mc	$inout,$inout
+	vld1.32	{$rndkey1},[$key],#16
+	b.gt	.Loop_${dir}c
+
+	aes$e	$inout,$rndkey0
+	aes$mc	$inout,$inout
+	vld1.32	{$rndkey0},[$key]
+	aes$e	$inout,$rndkey1
+	veor	$inout,$inout,$rndkey0
+
+	vst1.8	{$inout},[$out]
+	ret
+.size	${prefix}_${dir}crypt,.-${prefix}_${dir}crypt
+___
+}
+&gen_block("en");
+&gen_block("de");
+}}}
+{{{
+my ($inp,$out,$len,$key,$ivp)=map("x$_",(0..4)); my $enc="w5";
+my ($rounds,$cnt,$key_,$step,$step1)=($enc,"w6","x7","x8","x12");
+my ($dat0,$dat1,$in0,$in1,$tmp0,$tmp1,$ivec,$rndlast)=map("q$_",(0..7));
+
+my ($dat,$tmp,$rndzero_n_last)=($dat0,$tmp0,$tmp1);
+my ($key4,$key5,$key6,$key7)=("x6","x12","x14",$key);
+
+### q8-q15	preloaded key schedule
+
+$code.=<<___;
+.globl	${prefix}_cbc_encrypt
+.type	${prefix}_cbc_encrypt,%function
+.align	5
+${prefix}_cbc_encrypt:
+___
+$code.=<<___	if ($flavour =~ /64/);
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+___
+$code.=<<___	if ($flavour !~ /64/);
+	mov	ip,sp
+	stmdb	sp!,{r4-r8,lr}
+	vstmdb	sp!,{d8-d15}            @ ABI specification says so
+	ldmia	ip,{r4-r5}		@ load remaining args
+___
+$code.=<<___;
+	subs	$len,$len,#16
+	mov	$step,#16
+	b.lo	.Lcbc_abort
+	cclr	$step,eq
+
+	cmp	$enc,#0			// en- or decrypting?
+	ldr	$rounds,[$key,#240]
+	and	$len,$len,#-16
+	vld1.8	{$ivec},[$ivp]
+	vld1.8	{$dat},[$inp],$step
+
+	vld1.32	{q8-q9},[$key]		// load key schedule...
+	sub	$rounds,$rounds,#6
+	add	$key_,$key,x5,lsl#4	// pointer to last 7 round keys
+	sub	$rounds,$rounds,#2
+	vld1.32	{q10-q11},[$key_],#32
+	vld1.32	{q12-q13},[$key_],#32
+	vld1.32	{q14-q15},[$key_],#32
+	vld1.32	{$rndlast},[$key_]
+
+	add	$key_,$key,#32
+	mov	$cnt,$rounds
+	b.eq	.Lcbc_dec
+
+	cmp	$rounds,#2
+	veor	$dat,$dat,$ivec
+	veor	$rndzero_n_last,q8,$rndlast
+	b.eq	.Lcbc_enc128
+
+	vld1.32	{$in0-$in1},[$key_]
+	add	$key_,$key,#16
+	add	$key4,$key,#16*4
+	add	$key5,$key,#16*5
+	aese	$dat,q8
+	aesmc	$dat,$dat
+	add	$key6,$key,#16*6
+	add	$key7,$key,#16*7
+	b	.Lenter_cbc_enc
+
+.align	4
+.Loop_cbc_enc:
+	aese	$dat,q8
+	aesmc	$dat,$dat
+	 vst1.8	{$ivec},[$out],#16
+.Lenter_cbc_enc:
+	aese	$dat,q9
+	aesmc	$dat,$dat
+	aese	$dat,$in0
+	aesmc	$dat,$dat
+	vld1.32	{q8},[$key4]
+	cmp	$rounds,#4
+	aese	$dat,$in1
+	aesmc	$dat,$dat
+	vld1.32	{q9},[$key5]
+	b.eq	.Lcbc_enc192
+
+	aese	$dat,q8
+	aesmc	$dat,$dat
+	vld1.32	{q8},[$key6]
+	aese	$dat,q9
+	aesmc	$dat,$dat
+	vld1.32	{q9},[$key7]
+	nop
+
+.Lcbc_enc192:
+	aese	$dat,q8
+	aesmc	$dat,$dat
+	 subs	$len,$len,#16
+	aese	$dat,q9
+	aesmc	$dat,$dat
+	 cclr	$step,eq
+	aese	$dat,q10
+	aesmc	$dat,$dat
+	aese	$dat,q11
+	aesmc	$dat,$dat
+	 vld1.8	{q8},[$inp],$step
+	aese	$dat,q12
+	aesmc	$dat,$dat
+	 veor	q8,q8,$rndzero_n_last
+	aese	$dat,q13
+	aesmc	$dat,$dat
+	 vld1.32 {q9},[$key_]		// re-pre-load rndkey[1]
+	aese	$dat,q14
+	aesmc	$dat,$dat
+	aese	$dat,q15
+	veor	$ivec,$dat,$rndlast
+	b.hs	.Loop_cbc_enc
+
+	vst1.8	{$ivec},[$out],#16
+	b	.Lcbc_done
+
+.align	5
+.Lcbc_enc128:
+	vld1.32	{$in0-$in1},[$key_]
+	aese	$dat,q8
+	aesmc	$dat,$dat
+	b	.Lenter_cbc_enc128
+.Loop_cbc_enc128:
+	aese	$dat,q8
+	aesmc	$dat,$dat
+	 vst1.8	{$ivec},[$out],#16
+.Lenter_cbc_enc128:
+	aese	$dat,q9
+	aesmc	$dat,$dat
+	 subs	$len,$len,#16
+	aese	$dat,$in0
+	aesmc	$dat,$dat
+	 cclr	$step,eq
+	aese	$dat,$in1
+	aesmc	$dat,$dat
+	aese	$dat,q10
+	aesmc	$dat,$dat
+	aese	$dat,q11
+	aesmc	$dat,$dat
+	 vld1.8	{q8},[$inp],$step
+	aese	$dat,q12
+	aesmc	$dat,$dat
+	aese	$dat,q13
+	aesmc	$dat,$dat
+	aese	$dat,q14
+	aesmc	$dat,$dat
+	 veor	q8,q8,$rndzero_n_last
+	aese	$dat,q15
+	veor	$ivec,$dat,$rndlast
+	b.hs	.Loop_cbc_enc128
+
+	vst1.8	{$ivec},[$out],#16
+	b	.Lcbc_done
+___
+{
+my ($dat2,$in2,$tmp2)=map("q$_",(10,11,9));
+$code.=<<___;
+.align	5
+.Lcbc_dec:
+	vld1.8	{$dat2},[$inp],#16
+	subs	$len,$len,#32		// bias
+	add	$cnt,$rounds,#2
+	vorr	$in1,$dat,$dat
+	vorr	$dat1,$dat,$dat
+	vorr	$in2,$dat2,$dat2
+	b.lo	.Lcbc_dec_tail
+
+	vorr	$dat1,$dat2,$dat2
+	vld1.8	{$dat2},[$inp],#16
+	vorr	$in0,$dat,$dat
+	vorr	$in1,$dat1,$dat1
+	vorr	$in2,$dat2,$dat2
+
+.Loop3x_cbc_dec:
+	aesd	$dat0,q8
+	aesimc	$dat0,$dat0
+	aesd	$dat1,q8
+	aesimc	$dat1,$dat1
+	aesd	$dat2,q8
+	aesimc	$dat2,$dat2
+	vld1.32	{q8},[$key_],#16
+	subs	$cnt,$cnt,#2
+	aesd	$dat0,q9
+	aesimc	$dat0,$dat0
+	aesd	$dat1,q9
+	aesimc	$dat1,$dat1
+	aesd	$dat2,q9
+	aesimc	$dat2,$dat2
+	vld1.32	{q9},[$key_],#16
+	b.gt	.Loop3x_cbc_dec
+
+	aesd	$dat0,q8
+	aesimc	$dat0,$dat0
+	aesd	$dat1,q8
+	aesimc	$dat1,$dat1
+	aesd	$dat2,q8
+	aesimc	$dat2,$dat2
+	 veor	$tmp0,$ivec,$rndlast
+	 subs	$len,$len,#0x30
+	 veor	$tmp1,$in0,$rndlast
+	 mov.lo	x6,$len			// x6, $cnt, is zero at this point
+	aesd	$dat0,q9
+	aesimc	$dat0,$dat0
+	aesd	$dat1,q9
+	aesimc	$dat1,$dat1
+	aesd	$dat2,q9
+	aesimc	$dat2,$dat2
+	 veor	$tmp2,$in1,$rndlast
+	 add	$inp,$inp,x6		// $inp is adjusted in such way that
+					// at exit from the loop $dat1-$dat2
+					// are loaded with last "words"
+	 vorr	$ivec,$in2,$in2
+	 mov	$key_,$key
+	aesd	$dat0,q12
+	aesimc	$dat0,$dat0
+	aesd	$dat1,q12
+	aesimc	$dat1,$dat1
+	aesd	$dat2,q12
+	aesimc	$dat2,$dat2
+	 vld1.8	{$in0},[$inp],#16
+	aesd	$dat0,q13
+	aesimc	$dat0,$dat0
+	aesd	$dat1,q13
+	aesimc	$dat1,$dat1
+	aesd	$dat2,q13
+	aesimc	$dat2,$dat2
+	 vld1.8	{$in1},[$inp],#16
+	aesd	$dat0,q14
+	aesimc	$dat0,$dat0
+	aesd	$dat1,q14
+	aesimc	$dat1,$dat1
+	aesd	$dat2,q14
+	aesimc	$dat2,$dat2
+	 vld1.8	{$in2},[$inp],#16
+	aesd	$dat0,q15
+	aesd	$dat1,q15
+	aesd	$dat2,q15
+	 vld1.32 {q8},[$key_],#16	// re-pre-load rndkey[0]
+	 add	$cnt,$rounds,#2
+	veor	$tmp0,$tmp0,$dat0
+	veor	$tmp1,$tmp1,$dat1
+	veor	$dat2,$dat2,$tmp2
+	 vld1.32 {q9},[$key_],#16	// re-pre-load rndkey[1]
+	vst1.8	{$tmp0},[$out],#16
+	 vorr	$dat0,$in0,$in0
+	vst1.8	{$tmp1},[$out],#16
+	 vorr	$dat1,$in1,$in1
+	vst1.8	{$dat2},[$out],#16
+	 vorr	$dat2,$in2,$in2
+	b.hs	.Loop3x_cbc_dec
+
+	cmn	$len,#0x30
+	b.eq	.Lcbc_done
+	nop
+
+.Lcbc_dec_tail:
+	aesd	$dat1,q8
+	aesimc	$dat1,$dat1
+	aesd	$dat2,q8
+	aesimc	$dat2,$dat2
+	vld1.32	{q8},[$key_],#16
+	subs	$cnt,$cnt,#2
+	aesd	$dat1,q9
+	aesimc	$dat1,$dat1
+	aesd	$dat2,q9
+	aesimc	$dat2,$dat2
+	vld1.32	{q9},[$key_],#16
+	b.gt	.Lcbc_dec_tail
+
+	aesd	$dat1,q8
+	aesimc	$dat1,$dat1
+	aesd	$dat2,q8
+	aesimc	$dat2,$dat2
+	aesd	$dat1,q9
+	aesimc	$dat1,$dat1
+	aesd	$dat2,q9
+	aesimc	$dat2,$dat2
+	aesd	$dat1,q12
+	aesimc	$dat1,$dat1
+	aesd	$dat2,q12
+	aesimc	$dat2,$dat2
+	 cmn	$len,#0x20
+	aesd	$dat1,q13
+	aesimc	$dat1,$dat1
+	aesd	$dat2,q13
+	aesimc	$dat2,$dat2
+	 veor	$tmp1,$ivec,$rndlast
+	aesd	$dat1,q14
+	aesimc	$dat1,$dat1
+	aesd	$dat2,q14
+	aesimc	$dat2,$dat2
+	 veor	$tmp2,$in1,$rndlast
+	aesd	$dat1,q15
+	aesd	$dat2,q15
+	b.eq	.Lcbc_dec_one
+	veor	$tmp1,$tmp1,$dat1
+	veor	$tmp2,$tmp2,$dat2
+	 vorr	$ivec,$in2,$in2
+	vst1.8	{$tmp1},[$out],#16
+	vst1.8	{$tmp2},[$out],#16
+	b	.Lcbc_done
+
+.Lcbc_dec_one:
+	veor	$tmp1,$tmp1,$dat2
+	 vorr	$ivec,$in2,$in2
+	vst1.8	{$tmp1},[$out],#16
+
+.Lcbc_done:
+	vst1.8	{$ivec},[$ivp]
+.Lcbc_abort:
+___
+}
+$code.=<<___	if ($flavour !~ /64/);
+	vldmia	sp!,{d8-d15}
+	ldmia	sp!,{r4-r8,pc}
+___
+$code.=<<___	if ($flavour =~ /64/);
+	ldr	x29,[sp],#16
+	ret
+___
+$code.=<<___;
+.size	${prefix}_cbc_encrypt,.-${prefix}_cbc_encrypt
+___
+}}}
+{{{
+my ($inp,$out,$len,$key,$ivp)=map("x$_",(0..4));
+my ($rounds,$cnt,$key_)=("w5","w6","x7");
+my ($ctr,$tctr0,$tctr1,$tctr2)=map("w$_",(8..10,12));
+my $step="x12";		# aliases with $tctr2
+
+my ($dat0,$dat1,$in0,$in1,$tmp0,$tmp1,$ivec,$rndlast)=map("q$_",(0..7));
+my ($dat2,$in2,$tmp2)=map("q$_",(10,11,9));
+
+my ($dat,$tmp)=($dat0,$tmp0);
+
+### q8-q15	preloaded key schedule
+
+$code.=<<___;
+.globl	${prefix}_ctr32_encrypt_blocks
+.type	${prefix}_ctr32_encrypt_blocks,%function
+.align	5
+${prefix}_ctr32_encrypt_blocks:
+___
+$code.=<<___	if ($flavour =~ /64/);
+	stp		x29,x30,[sp,#-16]!
+	add		x29,sp,#0
+___
+$code.=<<___	if ($flavour !~ /64/);
+	mov		ip,sp
+	stmdb		sp!,{r4-r10,lr}
+	vstmdb		sp!,{d8-d15}            @ ABI specification says so
+	ldr		r4, [ip]		@ load remaining arg
+___
+$code.=<<___;
+	ldr		$rounds,[$key,#240]
+
+	ldr		$ctr, [$ivp, #12]
+	vld1.32		{$dat0},[$ivp]
+
+	vld1.32		{q8-q9},[$key]		// load key schedule...
+	sub		$rounds,$rounds,#4
+	mov		$step,#16
+	cmp		$len,#2
+	add		$key_,$key,x5,lsl#4	// pointer to last 5 round keys
+	sub		$rounds,$rounds,#2
+	vld1.32		{q12-q13},[$key_],#32
+	vld1.32		{q14-q15},[$key_],#32
+	vld1.32		{$rndlast},[$key_]
+	add		$key_,$key,#32
+	mov		$cnt,$rounds
+	cclr		$step,lo
+#ifndef __ARMEB__
+	rev		$ctr, $ctr
+#endif
+	vorr		$dat1,$dat0,$dat0
+	add		$tctr1, $ctr, #1
+	vorr		$dat2,$dat0,$dat0
+	add		$ctr, $ctr, #2
+	vorr		$ivec,$dat0,$dat0
+	rev		$tctr1, $tctr1
+	vmov.32		${dat1}[3],$tctr1
+	b.ls		.Lctr32_tail
+	rev		$tctr2, $ctr
+	sub		$len,$len,#3		// bias
+	vmov.32		${dat2}[3],$tctr2
+	b		.Loop3x_ctr32
+
+.align	4
+.Loop3x_ctr32:
+	aese		$dat0,q8
+	aesmc		$dat0,$dat0
+	aese		$dat1,q8
+	aesmc		$dat1,$dat1
+	aese		$dat2,q8
+	aesmc		$dat2,$dat2
+	vld1.32		{q8},[$key_],#16
+	subs		$cnt,$cnt,#2
+	aese		$dat0,q9
+	aesmc		$dat0,$dat0
+	aese		$dat1,q9
+	aesmc		$dat1,$dat1
+	aese		$dat2,q9
+	aesmc		$dat2,$dat2
+	vld1.32		{q9},[$key_],#16
+	b.gt		.Loop3x_ctr32
+
+	aese		$dat0,q8
+	aesmc		$tmp0,$dat0
+	aese		$dat1,q8
+	aesmc		$tmp1,$dat1
+	 vld1.8		{$in0},[$inp],#16
+	 vorr		$dat0,$ivec,$ivec
+	aese		$dat2,q8
+	aesmc		$dat2,$dat2
+	 vld1.8		{$in1},[$inp],#16
+	 vorr		$dat1,$ivec,$ivec
+	aese		$tmp0,q9
+	aesmc		$tmp0,$tmp0
+	aese		$tmp1,q9
+	aesmc		$tmp1,$tmp1
+	 vld1.8		{$in2},[$inp],#16
+	 mov		$key_,$key
+	aese		$dat2,q9
+	aesmc		$tmp2,$dat2
+	 vorr		$dat2,$ivec,$ivec
+	 add		$tctr0,$ctr,#1
+	aese		$tmp0,q12
+	aesmc		$tmp0,$tmp0
+	aese		$tmp1,q12
+	aesmc		$tmp1,$tmp1
+	 veor		$in0,$in0,$rndlast
+	 add		$tctr1,$ctr,#2
+	aese		$tmp2,q12
+	aesmc		$tmp2,$tmp2
+	 veor		$in1,$in1,$rndlast
+	 add		$ctr,$ctr,#3
+	aese		$tmp0,q13
+	aesmc		$tmp0,$tmp0
+	aese		$tmp1,q13
+	aesmc		$tmp1,$tmp1
+	 veor		$in2,$in2,$rndlast
+	 rev		$tctr0,$tctr0
+	aese		$tmp2,q13
+	aesmc		$tmp2,$tmp2
+	 vmov.32	${dat0}[3], $tctr0
+	 rev		$tctr1,$tctr1
+	aese		$tmp0,q14
+	aesmc		$tmp0,$tmp0
+	aese		$tmp1,q14
+	aesmc		$tmp1,$tmp1
+	 vmov.32	${dat1}[3], $tctr1
+	 rev		$tctr2,$ctr
+	aese		$tmp2,q14
+	aesmc		$tmp2,$tmp2
+	 vmov.32	${dat2}[3], $tctr2
+	 subs		$len,$len,#3
+	aese		$tmp0,q15
+	aese		$tmp1,q15
+	aese		$tmp2,q15
+
+	veor		$in0,$in0,$tmp0
+	 vld1.32	 {q8},[$key_],#16	// re-pre-load rndkey[0]
+	vst1.8		{$in0},[$out],#16
+	veor		$in1,$in1,$tmp1
+	 mov		$cnt,$rounds
+	vst1.8		{$in1},[$out],#16
+	veor		$in2,$in2,$tmp2
+	 vld1.32	 {q9},[$key_],#16	// re-pre-load rndkey[1]
+	vst1.8		{$in2},[$out],#16
+	b.hs		.Loop3x_ctr32
+
+	adds		$len,$len,#3
+	b.eq		.Lctr32_done
+	cmp		$len,#1
+	mov		$step,#16
+	cclr		$step,eq
+
+.Lctr32_tail:
+	aese		$dat0,q8
+	aesmc		$dat0,$dat0
+	aese		$dat1,q8
+	aesmc		$dat1,$dat1
+	vld1.32		{q8},[$key_],#16
+	subs		$cnt,$cnt,#2
+	aese		$dat0,q9
+	aesmc		$dat0,$dat0
+	aese		$dat1,q9
+	aesmc		$dat1,$dat1
+	vld1.32		{q9},[$key_],#16
+	b.gt		.Lctr32_tail
+
+	aese		$dat0,q8
+	aesmc		$dat0,$dat0
+	aese		$dat1,q8
+	aesmc		$dat1,$dat1
+	aese		$dat0,q9
+	aesmc		$dat0,$dat0
+	aese		$dat1,q9
+	aesmc		$dat1,$dat1
+	 vld1.8		{$in0},[$inp],$step
+	aese		$dat0,q12
+	aesmc		$dat0,$dat0
+	aese		$dat1,q12
+	aesmc		$dat1,$dat1
+	 vld1.8		{$in1},[$inp]
+	aese		$dat0,q13
+	aesmc		$dat0,$dat0
+	aese		$dat1,q13
+	aesmc		$dat1,$dat1
+	 veor		$in0,$in0,$rndlast
+	aese		$dat0,q14
+	aesmc		$dat0,$dat0
+	aese		$dat1,q14
+	aesmc		$dat1,$dat1
+	 veor		$in1,$in1,$rndlast
+	aese		$dat0,q15
+	aese		$dat1,q15
+
+	cmp		$len,#1
+	veor		$in0,$in0,$dat0
+	veor		$in1,$in1,$dat1
+	vst1.8		{$in0},[$out],#16
+	b.eq		.Lctr32_done
+	vst1.8		{$in1},[$out]
+
+.Lctr32_done:
+___
+$code.=<<___	if ($flavour !~ /64/);
+	vldmia		sp!,{d8-d15}
+	ldmia		sp!,{r4-r10,pc}
+___
+$code.=<<___	if ($flavour =~ /64/);
+	ldr		x29,[sp],#16
+	ret
+___
+$code.=<<___;
+.size	${prefix}_ctr32_encrypt_blocks,.-${prefix}_ctr32_encrypt_blocks
+___
+}}}
+$code.=<<___;
+#endif
+___
+########################################
+if ($flavour =~ /64/) {			######## 64-bit code
+    my %opcode = (
+	"aesd"	=>	0x4e285800,	"aese"	=>	0x4e284800,
+	"aesimc"=>	0x4e287800,	"aesmc"	=>	0x4e286800	);
+
+    local *unaes = sub {
+	my ($mnemonic,$arg)=@_;
+
+	$arg =~ m/[qv]([0-9]+)[^,]*,\s*[qv]([0-9]+)/o	&&
+	sprintf ".inst\t0x%08x\t//%s %s",
+			$opcode{$mnemonic}|$1|($2<<5),
+			$mnemonic,$arg;
+    };
+
+    foreach(split("\n",$code)) {
+	s/\`([^\`]*)\`/eval($1)/geo;
+
+	s/\bq([0-9]+)\b/"v".($1<8?$1:$1+8).".16b"/geo;	# old->new registers
+	s/@\s/\/\//o;			# old->new style commentary
+
+	#s/[v]?(aes\w+)\s+([qv].*)/unaes($1,$2)/geo	or
+	s/cclr\s+([wx])([^,]+),\s*([a-z]+)/csel	$1$2,$1zr,$1$2,$3/o	or
+	s/mov\.([a-z]+)\s+([wx][0-9]+),\s*([wx][0-9]+)/csel	$2,$3,$2,$1/o	or
+	s/vmov\.i8/movi/o	or	# fix up legacy mnemonics
+	s/vext\.8/ext/o		or
+	s/vrev32\.8/rev32/o	or
+	s/vtst\.8/cmtst/o	or
+	s/vshr/ushr/o		or
+	s/^(\s+)v/$1/o		or	# strip off v prefix
+	s/\bbx\s+lr\b/ret/o;
+
+	# fix up remaining legacy suffixes
+	s/\.[ui]?8//o;
+	m/\],#8/o and s/\.16b/\.8b/go;
+	s/\.[ui]?32//o and s/\.16b/\.4s/go;
+	s/\.[ui]?64//o and s/\.16b/\.2d/go;
+	s/\.[42]([sd])\[([0-3])\]/\.$1\[$2\]/o;
+
+	print $_,"\n";
+    }
+} else {				######## 32-bit code
+    my %opcode = (
+	"aesd"	=>	0xf3b00340,	"aese"	=>	0xf3b00300,
+	"aesimc"=>	0xf3b003c0,	"aesmc"	=>	0xf3b00380	);
+
+    local *unaes = sub {
+	my ($mnemonic,$arg)=@_;
+
+	if ($arg =~ m/[qv]([0-9]+)[^,]*,\s*[qv]([0-9]+)/o) {
+	    my $word = $opcode{$mnemonic}|(($1&7)<<13)|(($1&8)<<19)
+					 |(($2&7)<<1) |(($2&8)<<2);
+	    # since ARMv7 instructions are always encoded little-endian.
+	    # correct solution is to use .inst directive, but older
+	    # assemblers don't implement it:-(
+	    sprintf ".byte\t0x%02x,0x%02x,0x%02x,0x%02x\t@ %s %s",
+			$word&0xff,($word>>8)&0xff,
+			($word>>16)&0xff,($word>>24)&0xff,
+			$mnemonic,$arg;
+	}
+    };
+
+    sub unvtbl {
+	my $arg=shift;
+
+	$arg =~ m/q([0-9]+),\s*\{q([0-9]+)\},\s*q([0-9]+)/o &&
+	sprintf	"vtbl.8	d%d,{q%d},d%d\n\t".
+		"vtbl.8	d%d,{q%d},d%d", 2*$1,$2,2*$3, 2*$1+1,$2,2*$3+1;
+    }
+
+    sub unvdup32 {
+	my $arg=shift;
+
+	$arg =~ m/q([0-9]+),\s*q([0-9]+)\[([0-3])\]/o &&
+	sprintf	"vdup.32	q%d,d%d[%d]",$1,2*$2+($3>>1),$3&1;
+    }
+
+    sub unvmov32 {
+	my $arg=shift;
+
+	$arg =~ m/q([0-9]+)\[([0-3])\],(.*)/o &&
+	sprintf	"vmov.32	d%d[%d],%s",2*$1+($2>>1),$2&1,$3;
+    }
+
+    foreach(split("\n",$code)) {
+	s/\`([^\`]*)\`/eval($1)/geo;
+
+	s/\b[wx]([0-9]+)\b/r$1/go;		# new->old registers
+	s/\bv([0-9])\.[12468]+[bsd]\b/q$1/go;	# new->old registers
+	s/\/\/\s?/@ /o;				# new->old style commentary
+
+	# fix up remaining new-style suffixes
+	s/\{q([0-9]+)\},\s*\[(.+)\],#8/sprintf "{d%d},[$2]!",2*$1/eo	or
+	s/\],#[0-9]+/]!/o;
+
+	s/[v]?(aes\w+)\s+([qv].*)/unaes($1,$2)/geo	or
+	s/cclr\s+([^,]+),\s*([a-z]+)/mov$2	$1,#0/o	or
+	s/vtbl\.8\s+(.*)/unvtbl($1)/geo			or
+	s/vdup\.32\s+(.*)/unvdup32($1)/geo		or
+	s/vmov\.32\s+(.*)/unvmov32($1)/geo		or
+	s/^(\s+)b\./$1b/o				or
+	s/^(\s+)mov\./$1mov/o				or
+	s/^(\s+)ret/$1bx\tlr/o;
+
+	print $_,"\n";
+    }
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/bsaes-armv7.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/bsaes-armv7.pl
new file mode 100644
index 000000000..bfe825af0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/bsaes-armv7.pl
@@ -0,0 +1,2491 @@
+#! /usr/bin/env perl
+# Copyright 2012-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+#
+# Specific modes and adaptation for Linux kernel by Ard Biesheuvel
+# of Linaro. Permission to use under GPL terms is granted.
+# ====================================================================
+
+# Bit-sliced AES for ARM NEON
+#
+# February 2012.
+#
+# This implementation is direct adaptation of bsaes-x86_64 module for
+# ARM NEON. Except that this module is endian-neutral [in sense that
+# it can be compiled for either endianness] by courtesy of vld1.8's
+# neutrality. Initial version doesn't implement interface to OpenSSL,
+# only low-level primitives and unsupported entry points, just enough
+# to collect performance results, which for Cortex-A8 core are:
+#
+# encrypt	19.5 cycles per byte processed with 128-bit key
+# decrypt	22.1 cycles per byte processed with 128-bit key
+# key conv.	440  cycles per 128-bit key/0.18 of 8x block
+#
+# Snapdragon S4 encrypts byte in 17.6 cycles and decrypts in 19.7,
+# which is [much] worse than anticipated (for further details see
+# http://www.openssl.org/~appro/Snapdragon-S4.html).
+#
+# Cortex-A15 manages in 14.2/16.1 cycles [when integer-only code
+# manages in 20.0 cycles].
+#
+# When comparing to x86_64 results keep in mind that NEON unit is
+# [mostly] single-issue and thus can't [fully] benefit from
+# instruction-level parallelism. And when comparing to aes-armv4
+# results keep in mind key schedule conversion overhead (see
+# bsaes-x86_64.pl for further details)...
+#
+#						<appro@openssl.org>
+
+# April-August 2013
+# Add CBC, CTR and XTS subroutines and adapt for kernel use; courtesy of Ard.
+
+$flavour = shift;
+if ($flavour=~/\w[\w\-]*\.\w+$/) { $output=$flavour; undef $flavour; }
+else { while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {} }
+
+if ($flavour && $flavour ne "void") {
+    $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+    ( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+    ( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+    die "can't locate arm-xlate.pl";
+
+    open STDOUT,"| \"$^X\" $xlate $flavour $output";
+} else {
+    open STDOUT,">$output";
+}
+
+my ($inp,$out,$len,$key)=("r0","r1","r2","r3");
+my @XMM=map("q$_",(0..15));
+
+{
+my ($key,$rounds,$const)=("r4","r5","r6");
+
+sub Dlo()   { shift=~m|q([1]?[0-9])|?"d".($1*2):"";     }
+sub Dhi()   { shift=~m|q([1]?[0-9])|?"d".($1*2+1):"";   }
+
+sub Sbox {
+# input in  lsb > [b0, b1, b2, b3, b4, b5, b6, b7] < msb
+# output in lsb > [b0, b1, b4, b6, b3, b7, b2, b5] < msb
+my @b=@_[0..7];
+my @t=@_[8..11];
+my @s=@_[12..15];
+	&InBasisChange	(@b);
+	&Inv_GF256	(@b[6,5,0,3,7,1,4,2],@t,@s);
+	&OutBasisChange	(@b[7,1,4,2,6,5,0,3]);
+}
+
+sub InBasisChange {
+# input in  lsb > [b0, b1, b2, b3, b4, b5, b6, b7] < msb
+# output in lsb > [b6, b5, b0, b3, b7, b1, b4, b2] < msb
+my @b=@_[0..7];
+$code.=<<___;
+	veor	@b[2], @b[2], @b[1]
+	veor	@b[5], @b[5], @b[6]
+	veor	@b[3], @b[3], @b[0]
+	veor	@b[6], @b[6], @b[2]
+	veor	@b[5], @b[5], @b[0]
+
+	veor	@b[6], @b[6], @b[3]
+	veor	@b[3], @b[3], @b[7]
+	veor	@b[7], @b[7], @b[5]
+	veor	@b[3], @b[3], @b[4]
+	veor	@b[4], @b[4], @b[5]
+
+	veor	@b[2], @b[2], @b[7]
+	veor	@b[3], @b[3], @b[1]
+	veor	@b[1], @b[1], @b[5]
+___
+}
+
+sub OutBasisChange {
+# input in  lsb > [b0, b1, b2, b3, b4, b5, b6, b7] < msb
+# output in lsb > [b6, b1, b2, b4, b7, b0, b3, b5] < msb
+my @b=@_[0..7];
+$code.=<<___;
+	veor	@b[0], @b[0], @b[6]
+	veor	@b[1], @b[1], @b[4]
+	veor	@b[4], @b[4], @b[6]
+	veor	@b[2], @b[2], @b[0]
+	veor	@b[6], @b[6], @b[1]
+
+	veor	@b[1], @b[1], @b[5]
+	veor	@b[5], @b[5], @b[3]
+	veor	@b[3], @b[3], @b[7]
+	veor	@b[7], @b[7], @b[5]
+	veor	@b[2], @b[2], @b[5]
+
+	veor	@b[4], @b[4], @b[7]
+___
+}
+
+sub InvSbox {
+# input in lsb 	> [b0, b1, b2, b3, b4, b5, b6, b7] < msb
+# output in lsb	> [b0, b1, b6, b4, b2, b7, b3, b5] < msb
+my @b=@_[0..7];
+my @t=@_[8..11];
+my @s=@_[12..15];
+	&InvInBasisChange	(@b);
+	&Inv_GF256		(@b[5,1,2,6,3,7,0,4],@t,@s);
+	&InvOutBasisChange	(@b[3,7,0,4,5,1,2,6]);
+}
+
+sub InvInBasisChange {		# OutBasisChange in reverse (with twist)
+my @b=@_[5,1,2,6,3,7,0,4];
+$code.=<<___
+	 veor	@b[1], @b[1], @b[7]
+	veor	@b[4], @b[4], @b[7]
+
+	veor	@b[7], @b[7], @b[5]
+	 veor	@b[1], @b[1], @b[3]
+	veor	@b[2], @b[2], @b[5]
+	veor	@b[3], @b[3], @b[7]
+
+	veor	@b[6], @b[6], @b[1]
+	veor	@b[2], @b[2], @b[0]
+	 veor	@b[5], @b[5], @b[3]
+	veor	@b[4], @b[4], @b[6]
+	veor	@b[0], @b[0], @b[6]
+	veor	@b[1], @b[1], @b[4]
+___
+}
+
+sub InvOutBasisChange {		# InBasisChange in reverse
+my @b=@_[2,5,7,3,6,1,0,4];
+$code.=<<___;
+	veor	@b[1], @b[1], @b[5]
+	veor	@b[2], @b[2], @b[7]
+
+	veor	@b[3], @b[3], @b[1]
+	veor	@b[4], @b[4], @b[5]
+	veor	@b[7], @b[7], @b[5]
+	veor	@b[3], @b[3], @b[4]
+	 veor 	@b[5], @b[5], @b[0]
+	veor	@b[3], @b[3], @b[7]
+	 veor	@b[6], @b[6], @b[2]
+	 veor	@b[2], @b[2], @b[1]
+	veor	@b[6], @b[6], @b[3]
+
+	veor	@b[3], @b[3], @b[0]
+	veor	@b[5], @b[5], @b[6]
+___
+}
+
+sub Mul_GF4 {
+#;*************************************************************
+#;* Mul_GF4: Input x0-x1,y0-y1 Output x0-x1 Temp t0 (8) *
+#;*************************************************************
+my ($x0,$x1,$y0,$y1,$t0,$t1)=@_;
+$code.=<<___;
+	veor 	$t0, $y0, $y1
+	vand	$t0, $t0, $x0
+	veor	$x0, $x0, $x1
+	vand	$t1, $x1, $y0
+	vand	$x0, $x0, $y1
+	veor	$x1, $t1, $t0
+	veor	$x0, $x0, $t1
+___
+}
+
+sub Mul_GF4_N {				# not used, see next subroutine
+# multiply and scale by N
+my ($x0,$x1,$y0,$y1,$t0)=@_;
+$code.=<<___;
+	veor	$t0, $y0, $y1
+	vand	$t0, $t0, $x0
+	veor	$x0, $x0, $x1
+	vand	$x1, $x1, $y0
+	vand	$x0, $x0, $y1
+	veor	$x1, $x1, $x0
+	veor	$x0, $x0, $t0
+___
+}
+
+sub Mul_GF4_N_GF4 {
+# interleaved Mul_GF4_N and Mul_GF4
+my ($x0,$x1,$y0,$y1,$t0,
+    $x2,$x3,$y2,$y3,$t1)=@_;
+$code.=<<___;
+	veor	$t0, $y0, $y1
+	 veor 	$t1, $y2, $y3
+	vand	$t0, $t0, $x0
+	 vand	$t1, $t1, $x2
+	veor	$x0, $x0, $x1
+	 veor	$x2, $x2, $x3
+	vand	$x1, $x1, $y0
+	 vand	$x3, $x3, $y2
+	vand	$x0, $x0, $y1
+	 vand	$x2, $x2, $y3
+	veor	$x1, $x1, $x0
+	 veor	$x2, $x2, $x3
+	veor	$x0, $x0, $t0
+	 veor	$x3, $x3, $t1
+___
+}
+sub Mul_GF16_2 {
+my @x=@_[0..7];
+my @y=@_[8..11];
+my @t=@_[12..15];
+$code.=<<___;
+	veor	@t[0], @x[0], @x[2]
+	veor	@t[1], @x[1], @x[3]
+___
+	&Mul_GF4  	(@x[0], @x[1], @y[0], @y[1], @t[2..3]);
+$code.=<<___;
+	veor	@y[0], @y[0], @y[2]
+	veor	@y[1], @y[1], @y[3]
+___
+	Mul_GF4_N_GF4	(@t[0], @t[1], @y[0], @y[1], @t[3],
+			 @x[2], @x[3], @y[2], @y[3], @t[2]);
+$code.=<<___;
+	veor	@x[0], @x[0], @t[0]
+	veor	@x[2], @x[2], @t[0]
+	veor	@x[1], @x[1], @t[1]
+	veor	@x[3], @x[3], @t[1]
+
+	veor	@t[0], @x[4], @x[6]
+	veor	@t[1], @x[5], @x[7]
+___
+	&Mul_GF4_N_GF4	(@t[0], @t[1], @y[0], @y[1], @t[3],
+			 @x[6], @x[7], @y[2], @y[3], @t[2]);
+$code.=<<___;
+	veor	@y[0], @y[0], @y[2]
+	veor	@y[1], @y[1], @y[3]
+___
+	&Mul_GF4  	(@x[4], @x[5], @y[0], @y[1], @t[2..3]);
+$code.=<<___;
+	veor	@x[4], @x[4], @t[0]
+	veor	@x[6], @x[6], @t[0]
+	veor	@x[5], @x[5], @t[1]
+	veor	@x[7], @x[7], @t[1]
+___
+}
+sub Inv_GF256 {
+#;********************************************************************
+#;* Inv_GF256: Input x0-x7 Output x0-x7 Temp t0-t3,s0-s3 (144)       *
+#;********************************************************************
+my @x=@_[0..7];
+my @t=@_[8..11];
+my @s=@_[12..15];
+# direct optimizations from hardware
+$code.=<<___;
+	veor	@t[3], @x[4], @x[6]
+	veor	@t[2], @x[5], @x[7]
+	veor	@t[1], @x[1], @x[3]
+	veor	@s[1], @x[7], @x[6]
+	 vmov	@t[0], @t[2]
+	veor	@s[0], @x[0], @x[2]
+
+	vorr	@t[2], @t[2], @t[1]
+	veor	@s[3], @t[3], @t[0]
+	vand	@s[2], @t[3], @s[0]
+	vorr	@t[3], @t[3], @s[0]
+	veor	@s[0], @s[0], @t[1]
+	vand	@t[0], @t[0], @t[1]
+	veor	@t[1], @x[3], @x[2]
+	vand	@s[3], @s[3], @s[0]
+	vand	@s[1], @s[1], @t[1]
+	veor	@t[1], @x[4], @x[5]
+	veor	@s[0], @x[1], @x[0]
+	veor	@t[3], @t[3], @s[1]
+	veor	@t[2], @t[2], @s[1]
+	vand	@s[1], @t[1], @s[0]
+	vorr	@t[1], @t[1], @s[0]
+	veor	@t[3], @t[3], @s[3]
+	veor	@t[0], @t[0], @s[1]
+	veor	@t[2], @t[2], @s[2]
+	veor	@t[1], @t[1], @s[3]
+	veor	@t[0], @t[0], @s[2]
+	vand	@s[0], @x[7], @x[3]
+	veor	@t[1], @t[1], @s[2]
+	vand	@s[1], @x[6], @x[2]
+	vand	@s[2], @x[5], @x[1]
+	vorr	@s[3], @x[4], @x[0]
+	veor	@t[3], @t[3], @s[0]
+	veor	@t[1], @t[1], @s[2]
+	veor	@t[0], @t[0], @s[3]
+	veor	@t[2], @t[2], @s[1]
+
+	@ Inv_GF16 \t0, \t1, \t2, \t3, \s0, \s1, \s2, \s3
+
+	@ new smaller inversion
+
+	vand	@s[2], @t[3], @t[1]
+	vmov	@s[0], @t[0]
+
+	veor	@s[1], @t[2], @s[2]
+	veor	@s[3], @t[0], @s[2]
+	veor	@s[2], @t[0], @s[2]	@ @s[2]=@s[3]
+
+	vbsl	@s[1], @t[1], @t[0]
+	vbsl	@s[3], @t[3], @t[2]
+	veor	@t[3], @t[3], @t[2]
+
+	vbsl	@s[0], @s[1], @s[2]
+	vbsl	@t[0], @s[2], @s[1]
+
+	vand	@s[2], @s[0], @s[3]
+	veor	@t[1], @t[1], @t[0]
+
+	veor	@s[2], @s[2], @t[3]
+___
+# output in s3, s2, s1, t1
+
+# Mul_GF16_2 \x0, \x1, \x2, \x3, \x4, \x5, \x6, \x7, \t2, \t3, \t0, \t1, \s0, \s1, \s2, \s3
+
+# Mul_GF16_2 \x0, \x1, \x2, \x3, \x4, \x5, \x6, \x7, \s3, \s2, \s1, \t1, \s0, \t0, \t2, \t3
+	&Mul_GF16_2(@x,@s[3,2,1],@t[1],@s[0],@t[0,2,3]);
+
+### output msb > [x3,x2,x1,x0,x7,x6,x5,x4] < lsb
+}
+
+# AES linear components
+
+sub ShiftRows {
+my @x=@_[0..7];
+my @t=@_[8..11];
+my $mask=pop;
+$code.=<<___;
+	vldmia	$key!, {@t[0]-@t[3]}
+	veor	@t[0], @t[0], @x[0]
+	veor	@t[1], @t[1], @x[1]
+	vtbl.8	`&Dlo(@x[0])`, {@t[0]}, `&Dlo($mask)`
+	vtbl.8	`&Dhi(@x[0])`, {@t[0]}, `&Dhi($mask)`
+	vldmia	$key!, {@t[0]}
+	veor	@t[2], @t[2], @x[2]
+	vtbl.8	`&Dlo(@x[1])`, {@t[1]}, `&Dlo($mask)`
+	vtbl.8	`&Dhi(@x[1])`, {@t[1]}, `&Dhi($mask)`
+	vldmia	$key!, {@t[1]}
+	veor	@t[3], @t[3], @x[3]
+	vtbl.8	`&Dlo(@x[2])`, {@t[2]}, `&Dlo($mask)`
+	vtbl.8	`&Dhi(@x[2])`, {@t[2]}, `&Dhi($mask)`
+	vldmia	$key!, {@t[2]}
+	vtbl.8	`&Dlo(@x[3])`, {@t[3]}, `&Dlo($mask)`
+	vtbl.8	`&Dhi(@x[3])`, {@t[3]}, `&Dhi($mask)`
+	vldmia	$key!, {@t[3]}
+	veor	@t[0], @t[0], @x[4]
+	veor	@t[1], @t[1], @x[5]
+	vtbl.8	`&Dlo(@x[4])`, {@t[0]}, `&Dlo($mask)`
+	vtbl.8	`&Dhi(@x[4])`, {@t[0]}, `&Dhi($mask)`
+	veor	@t[2], @t[2], @x[6]
+	vtbl.8	`&Dlo(@x[5])`, {@t[1]}, `&Dlo($mask)`
+	vtbl.8	`&Dhi(@x[5])`, {@t[1]}, `&Dhi($mask)`
+	veor	@t[3], @t[3], @x[7]
+	vtbl.8	`&Dlo(@x[6])`, {@t[2]}, `&Dlo($mask)`
+	vtbl.8	`&Dhi(@x[6])`, {@t[2]}, `&Dhi($mask)`
+	vtbl.8	`&Dlo(@x[7])`, {@t[3]}, `&Dlo($mask)`
+	vtbl.8	`&Dhi(@x[7])`, {@t[3]}, `&Dhi($mask)`
+___
+}
+
+sub MixColumns {
+# modified to emit output in order suitable for feeding back to aesenc[last]
+my @x=@_[0..7];
+my @t=@_[8..15];
+my $inv=@_[16];	# optional
+$code.=<<___;
+	vext.8	@t[0], @x[0], @x[0], #12	@ x0 <<< 32
+	vext.8	@t[1], @x[1], @x[1], #12
+	 veor	@x[0], @x[0], @t[0]		@ x0 ^ (x0 <<< 32)
+	vext.8	@t[2], @x[2], @x[2], #12
+	 veor	@x[1], @x[1], @t[1]
+	vext.8	@t[3], @x[3], @x[3], #12
+	 veor	@x[2], @x[2], @t[2]
+	vext.8	@t[4], @x[4], @x[4], #12
+	 veor	@x[3], @x[3], @t[3]
+	vext.8	@t[5], @x[5], @x[5], #12
+	 veor	@x[4], @x[4], @t[4]
+	vext.8	@t[6], @x[6], @x[6], #12
+	 veor	@x[5], @x[5], @t[5]
+	vext.8	@t[7], @x[7], @x[7], #12
+	 veor	@x[6], @x[6], @t[6]
+
+	veor	@t[1], @t[1], @x[0]
+	 veor	@x[7], @x[7], @t[7]
+	 vext.8	@x[0], @x[0], @x[0], #8		@ (x0 ^ (x0 <<< 32)) <<< 64)
+	veor	@t[2], @t[2], @x[1]
+	veor	@t[0], @t[0], @x[7]
+	veor	@t[1], @t[1], @x[7]
+	 vext.8	@x[1], @x[1], @x[1], #8
+	veor	@t[5], @t[5], @x[4]
+	 veor	@x[0], @x[0], @t[0]
+	veor	@t[6], @t[6], @x[5]
+	 veor	@x[1], @x[1], @t[1]
+	 vext.8	@t[0], @x[4], @x[4], #8
+	veor	@t[4], @t[4], @x[3]
+	 vext.8	@t[1], @x[5], @x[5], #8
+	veor	@t[7], @t[7], @x[6]
+	 vext.8	@x[4], @x[3], @x[3], #8
+	veor	@t[3], @t[3], @x[2]
+	 vext.8	@x[5], @x[7], @x[7], #8
+	veor	@t[4], @t[4], @x[7]
+	 vext.8	@x[3], @x[6], @x[6], #8
+	veor	@t[3], @t[3], @x[7]
+	 vext.8	@x[6], @x[2], @x[2], #8
+	veor	@x[7], @t[1], @t[5]
+___
+$code.=<<___ if (!$inv);
+	veor	@x[2], @t[0], @t[4]
+	veor	@x[4], @x[4], @t[3]
+	veor	@x[5], @x[5], @t[7]
+	veor	@x[3], @x[3], @t[6]
+	 @ vmov	@x[2], @t[0]
+	veor	@x[6], @x[6], @t[2]
+	 @ vmov	@x[7], @t[1]
+___
+$code.=<<___ if ($inv);
+	veor	@t[3], @t[3], @x[4]
+	veor	@x[5], @x[5], @t[7]
+	veor	@x[2], @x[3], @t[6]
+	veor	@x[3], @t[0], @t[4]
+	veor	@x[4], @x[6], @t[2]
+	vmov	@x[6], @t[3]
+	 @ vmov	@x[7], @t[1]
+___
+}
+
+sub InvMixColumns_orig {
+my @x=@_[0..7];
+my @t=@_[8..15];
+
+$code.=<<___;
+	@ multiplication by 0x0e
+	vext.8	@t[7], @x[7], @x[7], #12
+	vmov	@t[2], @x[2]
+	veor	@x[2], @x[2], @x[5]		@ 2 5
+	veor	@x[7], @x[7], @x[5]		@ 7 5
+	vext.8	@t[0], @x[0], @x[0], #12
+	vmov	@t[5], @x[5]
+	veor	@x[5], @x[5], @x[0]		@ 5 0		[1]
+	veor	@x[0], @x[0], @x[1]		@ 0 1
+	vext.8	@t[1], @x[1], @x[1], #12
+	veor	@x[1], @x[1], @x[2]		@ 1 25
+	veor	@x[0], @x[0], @x[6]		@ 01 6		[2]
+	vext.8	@t[3], @x[3], @x[3], #12
+	veor	@x[1], @x[1], @x[3]		@ 125 3		[4]
+	veor	@x[2], @x[2], @x[0]		@ 25 016	[3]
+	veor	@x[3], @x[3], @x[7]		@ 3 75
+	veor	@x[7], @x[7], @x[6]		@ 75 6		[0]
+	vext.8	@t[6], @x[6], @x[6], #12
+	vmov	@t[4], @x[4]
+	veor	@x[6], @x[6], @x[4]		@ 6 4
+	veor	@x[4], @x[4], @x[3]		@ 4 375		[6]
+	veor	@x[3], @x[3], @x[7]		@ 375 756=36
+	veor	@x[6], @x[6], @t[5]		@ 64 5		[7]
+	veor	@x[3], @x[3], @t[2]		@ 36 2
+	vext.8	@t[5], @t[5], @t[5], #12
+	veor	@x[3], @x[3], @t[4]		@ 362 4		[5]
+___
+					my @y = @x[7,5,0,2,1,3,4,6];
+$code.=<<___;
+	@ multiplication by 0x0b
+	veor	@y[1], @y[1], @y[0]
+	veor	@y[0], @y[0], @t[0]
+	vext.8	@t[2], @t[2], @t[2], #12
+	veor	@y[1], @y[1], @t[1]
+	veor	@y[0], @y[0], @t[5]
+	vext.8	@t[4], @t[4], @t[4], #12
+	veor	@y[1], @y[1], @t[6]
+	veor	@y[0], @y[0], @t[7]
+	veor	@t[7], @t[7], @t[6]		@ clobber t[7]
+
+	veor	@y[3], @y[3], @t[0]
+	 veor	@y[1], @y[1], @y[0]
+	vext.8	@t[0], @t[0], @t[0], #12
+	veor	@y[2], @y[2], @t[1]
+	veor	@y[4], @y[4], @t[1]
+	vext.8	@t[1], @t[1], @t[1], #12
+	veor	@y[2], @y[2], @t[2]
+	veor	@y[3], @y[3], @t[2]
+	veor	@y[5], @y[5], @t[2]
+	veor	@y[2], @y[2], @t[7]
+	vext.8	@t[2], @t[2], @t[2], #12
+	veor	@y[3], @y[3], @t[3]
+	veor	@y[6], @y[6], @t[3]
+	veor	@y[4], @y[4], @t[3]
+	veor	@y[7], @y[7], @t[4]
+	vext.8	@t[3], @t[3], @t[3], #12
+	veor	@y[5], @y[5], @t[4]
+	veor	@y[7], @y[7], @t[7]
+	veor	@t[7], @t[7], @t[5]		@ clobber t[7] even more
+	veor	@y[3], @y[3], @t[5]
+	veor	@y[4], @y[4], @t[4]
+
+	veor	@y[5], @y[5], @t[7]
+	vext.8	@t[4], @t[4], @t[4], #12
+	veor	@y[6], @y[6], @t[7]
+	veor	@y[4], @y[4], @t[7]
+
+	veor	@t[7], @t[7], @t[5]
+	vext.8	@t[5], @t[5], @t[5], #12
+
+	@ multiplication by 0x0d
+	veor	@y[4], @y[4], @y[7]
+	 veor	@t[7], @t[7], @t[6]		@ restore t[7]
+	veor	@y[7], @y[7], @t[4]
+	vext.8	@t[6], @t[6], @t[6], #12
+	veor	@y[2], @y[2], @t[0]
+	veor	@y[7], @y[7], @t[5]
+	vext.8	@t[7], @t[7], @t[7], #12
+	veor	@y[2], @y[2], @t[2]
+
+	veor	@y[3], @y[3], @y[1]
+	veor	@y[1], @y[1], @t[1]
+	veor	@y[0], @y[0], @t[0]
+	veor	@y[3], @y[3], @t[0]
+	veor	@y[1], @y[1], @t[5]
+	veor	@y[0], @y[0], @t[5]
+	vext.8	@t[0], @t[0], @t[0], #12
+	veor	@y[1], @y[1], @t[7]
+	veor	@y[0], @y[0], @t[6]
+	veor	@y[3], @y[3], @y[1]
+	veor	@y[4], @y[4], @t[1]
+	vext.8	@t[1], @t[1], @t[1], #12
+
+	veor	@y[7], @y[7], @t[7]
+	veor	@y[4], @y[4], @t[2]
+	veor	@y[5], @y[5], @t[2]
+	veor	@y[2], @y[2], @t[6]
+	veor	@t[6], @t[6], @t[3]		@ clobber t[6]
+	vext.8	@t[2], @t[2], @t[2], #12
+	veor	@y[4], @y[4], @y[7]
+	veor	@y[3], @y[3], @t[6]
+
+	veor	@y[6], @y[6], @t[6]
+	veor	@y[5], @y[5], @t[5]
+	vext.8	@t[5], @t[5], @t[5], #12
+	veor	@y[6], @y[6], @t[4]
+	vext.8	@t[4], @t[4], @t[4], #12
+	veor	@y[5], @y[5], @t[6]
+	veor	@y[6], @y[6], @t[7]
+	vext.8	@t[7], @t[7], @t[7], #12
+	veor	@t[6], @t[6], @t[3]		@ restore t[6]
+	vext.8	@t[3], @t[3], @t[3], #12
+
+	@ multiplication by 0x09
+	veor	@y[4], @y[4], @y[1]
+	veor	@t[1], @t[1], @y[1]		@ t[1]=y[1]
+	veor	@t[0], @t[0], @t[5]		@ clobber t[0]
+	vext.8	@t[6], @t[6], @t[6], #12
+	veor	@t[1], @t[1], @t[5]
+	veor	@y[3], @y[3], @t[0]
+	veor	@t[0], @t[0], @y[0]		@ t[0]=y[0]
+	veor	@t[1], @t[1], @t[6]
+	veor	@t[6], @t[6], @t[7]		@ clobber t[6]
+	veor	@y[4], @y[4], @t[1]
+	veor	@y[7], @y[7], @t[4]
+	veor	@y[6], @y[6], @t[3]
+	veor	@y[5], @y[5], @t[2]
+	veor	@t[4], @t[4], @y[4]		@ t[4]=y[4]
+	veor	@t[3], @t[3], @y[3]		@ t[3]=y[3]
+	veor	@t[5], @t[5], @y[5]		@ t[5]=y[5]
+	veor	@t[2], @t[2], @y[2]		@ t[2]=y[2]
+	veor	@t[3], @t[3], @t[7]
+	veor	@XMM[5], @t[5], @t[6]
+	veor	@XMM[6], @t[6], @y[6]		@ t[6]=y[6]
+	veor	@XMM[2], @t[2], @t[6]
+	veor	@XMM[7], @t[7], @y[7]		@ t[7]=y[7]
+
+	vmov	@XMM[0], @t[0]
+	vmov	@XMM[1], @t[1]
+	@ vmov	@XMM[2], @t[2]
+	vmov	@XMM[3], @t[3]
+	vmov	@XMM[4], @t[4]
+	@ vmov	@XMM[5], @t[5]
+	@ vmov	@XMM[6], @t[6]
+	@ vmov	@XMM[7], @t[7]
+___
+}
+
+sub InvMixColumns {
+my @x=@_[0..7];
+my @t=@_[8..15];
+
+# Thanks to Jussi Kivilinna for providing pointer to
+#
+# | 0e 0b 0d 09 |   | 02 03 01 01 |   | 05 00 04 00 |
+# | 09 0e 0b 0d | = | 01 02 03 01 | x | 00 05 00 04 |
+# | 0d 09 0e 0b |   | 01 01 02 03 |   | 04 00 05 00 |
+# | 0b 0d 09 0e |   | 03 01 01 02 |   | 00 04 00 05 |
+
+$code.=<<___;
+	@ multiplication by 0x05-0x00-0x04-0x00
+	vext.8	@t[0], @x[0], @x[0], #8
+	vext.8	@t[6], @x[6], @x[6], #8
+	vext.8	@t[7], @x[7], @x[7], #8
+	veor	@t[0], @t[0], @x[0]
+	vext.8	@t[1], @x[1], @x[1], #8
+	veor	@t[6], @t[6], @x[6]
+	vext.8	@t[2], @x[2], @x[2], #8
+	veor	@t[7], @t[7], @x[7]
+	vext.8	@t[3], @x[3], @x[3], #8
+	veor	@t[1], @t[1], @x[1]
+	vext.8	@t[4], @x[4], @x[4], #8
+	veor	@t[2], @t[2], @x[2]
+	vext.8	@t[5], @x[5], @x[5], #8
+	veor	@t[3], @t[3], @x[3]
+	veor	@t[4], @t[4], @x[4]
+	veor	@t[5], @t[5], @x[5]
+
+	 veor	@x[0], @x[0], @t[6]
+	 veor	@x[1], @x[1], @t[6]
+	 veor	@x[2], @x[2], @t[0]
+	 veor	@x[4], @x[4], @t[2]
+	 veor	@x[3], @x[3], @t[1]
+	 veor	@x[1], @x[1], @t[7]
+	 veor	@x[2], @x[2], @t[7]
+	 veor	@x[4], @x[4], @t[6]
+	 veor	@x[5], @x[5], @t[3]
+	 veor	@x[3], @x[3], @t[6]
+	 veor	@x[6], @x[6], @t[4]
+	 veor	@x[4], @x[4], @t[7]
+	 veor	@x[5], @x[5], @t[7]
+	 veor	@x[7], @x[7], @t[5]
+___
+	&MixColumns	(@x,@t,1);	# flipped 2<->3 and 4<->6
+}
+
+sub swapmove {
+my ($a,$b,$n,$mask,$t)=@_;
+$code.=<<___;
+	vshr.u64	$t, $b, #$n
+	veor		$t, $t, $a
+	vand		$t, $t, $mask
+	veor		$a, $a, $t
+	vshl.u64	$t, $t, #$n
+	veor		$b, $b, $t
+___
+}
+sub swapmove2x {
+my ($a0,$b0,$a1,$b1,$n,$mask,$t0,$t1)=@_;
+$code.=<<___;
+	vshr.u64	$t0, $b0, #$n
+	 vshr.u64	$t1, $b1, #$n
+	veor		$t0, $t0, $a0
+	 veor		$t1, $t1, $a1
+	vand		$t0, $t0, $mask
+	 vand		$t1, $t1, $mask
+	veor		$a0, $a0, $t0
+	vshl.u64	$t0, $t0, #$n
+	 veor		$a1, $a1, $t1
+	 vshl.u64	$t1, $t1, #$n
+	veor		$b0, $b0, $t0
+	 veor		$b1, $b1, $t1
+___
+}
+
+sub bitslice {
+my @x=reverse(@_[0..7]);
+my ($t0,$t1,$t2,$t3)=@_[8..11];
+$code.=<<___;
+	vmov.i8	$t0,#0x55			@ compose .LBS0
+	vmov.i8	$t1,#0x33			@ compose .LBS1
+___
+	&swapmove2x(@x[0,1,2,3],1,$t0,$t2,$t3);
+	&swapmove2x(@x[4,5,6,7],1,$t0,$t2,$t3);
+$code.=<<___;
+	vmov.i8	$t0,#0x0f			@ compose .LBS2
+___
+	&swapmove2x(@x[0,2,1,3],2,$t1,$t2,$t3);
+	&swapmove2x(@x[4,6,5,7],2,$t1,$t2,$t3);
+
+	&swapmove2x(@x[0,4,1,5],4,$t0,$t2,$t3);
+	&swapmove2x(@x[2,6,3,7],4,$t0,$t2,$t3);
+}
+
+$code.=<<___;
+#ifndef __KERNEL__
+# include "arm_arch.h"
+
+# define VFP_ABI_PUSH	vstmdb	sp!,{d8-d15}
+# define VFP_ABI_POP	vldmia	sp!,{d8-d15}
+# define VFP_ABI_FRAME	0x40
+#else
+# define VFP_ABI_PUSH
+# define VFP_ABI_POP
+# define VFP_ABI_FRAME	0
+# define BSAES_ASM_EXTENDED_KEY
+# define XTS_CHAIN_TWEAK
+# define __ARM_ARCH__ __LINUX_ARM_ARCH__
+# define __ARM_MAX_ARCH__ 7
+#endif
+
+#ifdef __thumb__
+# define adrl adr
+#endif
+
+#if __ARM_MAX_ARCH__>=7
+.arch	armv7-a
+.fpu	neon
+
+.text
+.syntax	unified 	@ ARMv7-capable assembler is expected to handle this
+#if defined(__thumb2__) && !defined(__APPLE__)
+.thumb
+#else
+.code   32
+# undef __thumb2__
+#endif
+
+.type	_bsaes_decrypt8,%function
+.align	4
+_bsaes_decrypt8:
+	adr	$const,.
+	vldmia	$key!, {@XMM[9]}		@ round 0 key
+#if defined(__thumb2__) || defined(__APPLE__)
+	adr	$const,.LM0ISR
+#else
+	add	$const,$const,#.LM0ISR-_bsaes_decrypt8
+#endif
+
+	vldmia	$const!, {@XMM[8]}		@ .LM0ISR
+	veor	@XMM[10], @XMM[0], @XMM[9]	@ xor with round0 key
+	veor	@XMM[11], @XMM[1], @XMM[9]
+	 vtbl.8	`&Dlo(@XMM[0])`, {@XMM[10]}, `&Dlo(@XMM[8])`
+	 vtbl.8	`&Dhi(@XMM[0])`, {@XMM[10]}, `&Dhi(@XMM[8])`
+	veor	@XMM[12], @XMM[2], @XMM[9]
+	 vtbl.8	`&Dlo(@XMM[1])`, {@XMM[11]}, `&Dlo(@XMM[8])`
+	 vtbl.8	`&Dhi(@XMM[1])`, {@XMM[11]}, `&Dhi(@XMM[8])`
+	veor	@XMM[13], @XMM[3], @XMM[9]
+	 vtbl.8	`&Dlo(@XMM[2])`, {@XMM[12]}, `&Dlo(@XMM[8])`
+	 vtbl.8	`&Dhi(@XMM[2])`, {@XMM[12]}, `&Dhi(@XMM[8])`
+	veor	@XMM[14], @XMM[4], @XMM[9]
+	 vtbl.8	`&Dlo(@XMM[3])`, {@XMM[13]}, `&Dlo(@XMM[8])`
+	 vtbl.8	`&Dhi(@XMM[3])`, {@XMM[13]}, `&Dhi(@XMM[8])`
+	veor	@XMM[15], @XMM[5], @XMM[9]
+	 vtbl.8	`&Dlo(@XMM[4])`, {@XMM[14]}, `&Dlo(@XMM[8])`
+	 vtbl.8	`&Dhi(@XMM[4])`, {@XMM[14]}, `&Dhi(@XMM[8])`
+	veor	@XMM[10], @XMM[6], @XMM[9]
+	 vtbl.8	`&Dlo(@XMM[5])`, {@XMM[15]}, `&Dlo(@XMM[8])`
+	 vtbl.8	`&Dhi(@XMM[5])`, {@XMM[15]}, `&Dhi(@XMM[8])`
+	veor	@XMM[11], @XMM[7], @XMM[9]
+	 vtbl.8	`&Dlo(@XMM[6])`, {@XMM[10]}, `&Dlo(@XMM[8])`
+	 vtbl.8	`&Dhi(@XMM[6])`, {@XMM[10]}, `&Dhi(@XMM[8])`
+	 vtbl.8	`&Dlo(@XMM[7])`, {@XMM[11]}, `&Dlo(@XMM[8])`
+	 vtbl.8	`&Dhi(@XMM[7])`, {@XMM[11]}, `&Dhi(@XMM[8])`
+___
+	&bitslice	(@XMM[0..7, 8..11]);
+$code.=<<___;
+	sub	$rounds,$rounds,#1
+	b	.Ldec_sbox
+.align	4
+.Ldec_loop:
+___
+	&ShiftRows	(@XMM[0..7, 8..12]);
+$code.=".Ldec_sbox:\n";
+	&InvSbox	(@XMM[0..7, 8..15]);
+$code.=<<___;
+	subs	$rounds,$rounds,#1
+	bcc	.Ldec_done
+___
+	&InvMixColumns	(@XMM[0,1,6,4,2,7,3,5, 8..15]);
+$code.=<<___;
+	vldmia	$const, {@XMM[12]}		@ .LISR
+	ite	eq				@ Thumb2 thing, sanity check in ARM
+	addeq	$const,$const,#0x10
+	bne	.Ldec_loop
+	vldmia	$const, {@XMM[12]}		@ .LISRM0
+	b	.Ldec_loop
+.align	4
+.Ldec_done:
+___
+	&bitslice	(@XMM[0,1,6,4,2,7,3,5, 8..11]);
+$code.=<<___;
+	vldmia	$key, {@XMM[8]}			@ last round key
+	veor	@XMM[6], @XMM[6], @XMM[8]
+	veor	@XMM[4], @XMM[4], @XMM[8]
+	veor	@XMM[2], @XMM[2], @XMM[8]
+	veor	@XMM[7], @XMM[7], @XMM[8]
+	veor	@XMM[3], @XMM[3], @XMM[8]
+	veor	@XMM[5], @XMM[5], @XMM[8]
+	veor	@XMM[0], @XMM[0], @XMM[8]
+	veor	@XMM[1], @XMM[1], @XMM[8]
+	bx	lr
+.size	_bsaes_decrypt8,.-_bsaes_decrypt8
+
+.type	_bsaes_const,%object
+.align	6
+_bsaes_const:
+.LM0ISR:	@ InvShiftRows constants
+	.quad	0x0a0e0206070b0f03, 0x0004080c0d010509
+.LISR:
+	.quad	0x0504070602010003, 0x0f0e0d0c080b0a09
+.LISRM0:
+	.quad	0x01040b0e0205080f, 0x0306090c00070a0d
+.LM0SR:		@ ShiftRows constants
+	.quad	0x0a0e02060f03070b, 0x0004080c05090d01
+.LSR:
+	.quad	0x0504070600030201, 0x0f0e0d0c0a09080b
+.LSRM0:
+	.quad	0x0304090e00050a0f, 0x01060b0c0207080d
+.LM0:
+	.quad	0x02060a0e03070b0f, 0x0004080c0105090d
+.LREVM0SR:
+	.quad	0x090d01050c000408, 0x03070b0f060a0e02
+.asciz	"Bit-sliced AES for NEON, CRYPTOGAMS by <appro\@openssl.org>"
+.align	6
+.size	_bsaes_const,.-_bsaes_const
+
+.type	_bsaes_encrypt8,%function
+.align	4
+_bsaes_encrypt8:
+	adr	$const,.
+	vldmia	$key!, {@XMM[9]}		@ round 0 key
+#if defined(__thumb2__) || defined(__APPLE__)
+	adr	$const,.LM0SR
+#else
+	sub	$const,$const,#_bsaes_encrypt8-.LM0SR
+#endif
+
+	vldmia	$const!, {@XMM[8]}		@ .LM0SR
+_bsaes_encrypt8_alt:
+	veor	@XMM[10], @XMM[0], @XMM[9]	@ xor with round0 key
+	veor	@XMM[11], @XMM[1], @XMM[9]
+	 vtbl.8	`&Dlo(@XMM[0])`, {@XMM[10]}, `&Dlo(@XMM[8])`
+	 vtbl.8	`&Dhi(@XMM[0])`, {@XMM[10]}, `&Dhi(@XMM[8])`
+	veor	@XMM[12], @XMM[2], @XMM[9]
+	 vtbl.8	`&Dlo(@XMM[1])`, {@XMM[11]}, `&Dlo(@XMM[8])`
+	 vtbl.8	`&Dhi(@XMM[1])`, {@XMM[11]}, `&Dhi(@XMM[8])`
+	veor	@XMM[13], @XMM[3], @XMM[9]
+	 vtbl.8	`&Dlo(@XMM[2])`, {@XMM[12]}, `&Dlo(@XMM[8])`
+	 vtbl.8	`&Dhi(@XMM[2])`, {@XMM[12]}, `&Dhi(@XMM[8])`
+	veor	@XMM[14], @XMM[4], @XMM[9]
+	 vtbl.8	`&Dlo(@XMM[3])`, {@XMM[13]}, `&Dlo(@XMM[8])`
+	 vtbl.8	`&Dhi(@XMM[3])`, {@XMM[13]}, `&Dhi(@XMM[8])`
+	veor	@XMM[15], @XMM[5], @XMM[9]
+	 vtbl.8	`&Dlo(@XMM[4])`, {@XMM[14]}, `&Dlo(@XMM[8])`
+	 vtbl.8	`&Dhi(@XMM[4])`, {@XMM[14]}, `&Dhi(@XMM[8])`
+	veor	@XMM[10], @XMM[6], @XMM[9]
+	 vtbl.8	`&Dlo(@XMM[5])`, {@XMM[15]}, `&Dlo(@XMM[8])`
+	 vtbl.8	`&Dhi(@XMM[5])`, {@XMM[15]}, `&Dhi(@XMM[8])`
+	veor	@XMM[11], @XMM[7], @XMM[9]
+	 vtbl.8	`&Dlo(@XMM[6])`, {@XMM[10]}, `&Dlo(@XMM[8])`
+	 vtbl.8	`&Dhi(@XMM[6])`, {@XMM[10]}, `&Dhi(@XMM[8])`
+	 vtbl.8	`&Dlo(@XMM[7])`, {@XMM[11]}, `&Dlo(@XMM[8])`
+	 vtbl.8	`&Dhi(@XMM[7])`, {@XMM[11]}, `&Dhi(@XMM[8])`
+_bsaes_encrypt8_bitslice:
+___
+	&bitslice	(@XMM[0..7, 8..11]);
+$code.=<<___;
+	sub	$rounds,$rounds,#1
+	b	.Lenc_sbox
+.align	4
+.Lenc_loop:
+___
+	&ShiftRows	(@XMM[0..7, 8..12]);
+$code.=".Lenc_sbox:\n";
+	&Sbox		(@XMM[0..7, 8..15]);
+$code.=<<___;
+	subs	$rounds,$rounds,#1
+	bcc	.Lenc_done
+___
+	&MixColumns	(@XMM[0,1,4,6,3,7,2,5, 8..15]);
+$code.=<<___;
+	vldmia	$const, {@XMM[12]}		@ .LSR
+	ite	eq				@ Thumb2 thing, samity check in ARM
+	addeq	$const,$const,#0x10
+	bne	.Lenc_loop
+	vldmia	$const, {@XMM[12]}		@ .LSRM0
+	b	.Lenc_loop
+.align	4
+.Lenc_done:
+___
+	# output in lsb > [t0, t1, t4, t6, t3, t7, t2, t5] < msb
+	&bitslice	(@XMM[0,1,4,6,3,7,2,5, 8..11]);
+$code.=<<___;
+	vldmia	$key, {@XMM[8]}			@ last round key
+	veor	@XMM[4], @XMM[4], @XMM[8]
+	veor	@XMM[6], @XMM[6], @XMM[8]
+	veor	@XMM[3], @XMM[3], @XMM[8]
+	veor	@XMM[7], @XMM[7], @XMM[8]
+	veor	@XMM[2], @XMM[2], @XMM[8]
+	veor	@XMM[5], @XMM[5], @XMM[8]
+	veor	@XMM[0], @XMM[0], @XMM[8]
+	veor	@XMM[1], @XMM[1], @XMM[8]
+	bx	lr
+.size	_bsaes_encrypt8,.-_bsaes_encrypt8
+___
+}
+{
+my ($out,$inp,$rounds,$const)=("r12","r4","r5","r6");
+
+sub bitslice_key {
+my @x=reverse(@_[0..7]);
+my ($bs0,$bs1,$bs2,$t2,$t3)=@_[8..12];
+
+	&swapmove	(@x[0,1],1,$bs0,$t2,$t3);
+$code.=<<___;
+	@ &swapmove(@x[2,3],1,$t0,$t2,$t3);
+	vmov	@x[2], @x[0]
+	vmov	@x[3], @x[1]
+___
+	#&swapmove2x(@x[4,5,6,7],1,$t0,$t2,$t3);
+
+	&swapmove2x	(@x[0,2,1,3],2,$bs1,$t2,$t3);
+$code.=<<___;
+	@ &swapmove2x(@x[4,6,5,7],2,$t1,$t2,$t3);
+	vmov	@x[4], @x[0]
+	vmov	@x[6], @x[2]
+	vmov	@x[5], @x[1]
+	vmov	@x[7], @x[3]
+___
+	&swapmove2x	(@x[0,4,1,5],4,$bs2,$t2,$t3);
+	&swapmove2x	(@x[2,6,3,7],4,$bs2,$t2,$t3);
+}
+
+$code.=<<___;
+.type	_bsaes_key_convert,%function
+.align	4
+_bsaes_key_convert:
+	adr	$const,.
+	vld1.8	{@XMM[7]},  [$inp]!		@ load round 0 key
+#if defined(__thumb2__) || defined(__APPLE__)
+	adr	$const,.LM0
+#else
+	sub	$const,$const,#_bsaes_key_convert-.LM0
+#endif
+	vld1.8	{@XMM[15]}, [$inp]!		@ load round 1 key
+
+	vmov.i8	@XMM[8],  #0x01			@ bit masks
+	vmov.i8	@XMM[9],  #0x02
+	vmov.i8	@XMM[10], #0x04
+	vmov.i8	@XMM[11], #0x08
+	vmov.i8	@XMM[12], #0x10
+	vmov.i8	@XMM[13], #0x20
+	vldmia	$const, {@XMM[14]}		@ .LM0
+
+#ifdef __ARMEL__
+	vrev32.8	@XMM[7],  @XMM[7]
+	vrev32.8	@XMM[15], @XMM[15]
+#endif
+	sub	$rounds,$rounds,#1
+	vstmia	$out!, {@XMM[7]}		@ save round 0 key
+	b	.Lkey_loop
+
+.align	4
+.Lkey_loop:
+	vtbl.8	`&Dlo(@XMM[7])`,{@XMM[15]},`&Dlo(@XMM[14])`
+	vtbl.8	`&Dhi(@XMM[7])`,{@XMM[15]},`&Dhi(@XMM[14])`
+	vmov.i8	@XMM[6],  #0x40
+	vmov.i8	@XMM[15], #0x80
+
+	vtst.8	@XMM[0], @XMM[7], @XMM[8]
+	vtst.8	@XMM[1], @XMM[7], @XMM[9]
+	vtst.8	@XMM[2], @XMM[7], @XMM[10]
+	vtst.8	@XMM[3], @XMM[7], @XMM[11]
+	vtst.8	@XMM[4], @XMM[7], @XMM[12]
+	vtst.8	@XMM[5], @XMM[7], @XMM[13]
+	vtst.8	@XMM[6], @XMM[7], @XMM[6]
+	vtst.8	@XMM[7], @XMM[7], @XMM[15]
+	vld1.8	{@XMM[15]}, [$inp]!		@ load next round key
+	vmvn	@XMM[0], @XMM[0]		@ "pnot"
+	vmvn	@XMM[1], @XMM[1]
+	vmvn	@XMM[5], @XMM[5]
+	vmvn	@XMM[6], @XMM[6]
+#ifdef __ARMEL__
+	vrev32.8	@XMM[15], @XMM[15]
+#endif
+	subs	$rounds,$rounds,#1
+	vstmia	$out!,{@XMM[0]-@XMM[7]}		@ write bit-sliced round key
+	bne	.Lkey_loop
+
+	vmov.i8	@XMM[7],#0x63			@ compose .L63
+	@ don't save last round key
+	bx	lr
+.size	_bsaes_key_convert,.-_bsaes_key_convert
+___
+}
+
+if (0) {		# following four functions are unsupported interface
+			# used for benchmarking...
+$code.=<<___;
+.globl	bsaes_enc_key_convert
+.type	bsaes_enc_key_convert,%function
+.align	4
+bsaes_enc_key_convert:
+	stmdb	sp!,{r4-r6,lr}
+	vstmdb	sp!,{d8-d15}		@ ABI specification says so
+
+	ldr	r5,[$inp,#240]			@ pass rounds
+	mov	r4,$inp				@ pass key
+	mov	r12,$out			@ pass key schedule
+	bl	_bsaes_key_convert
+	veor	@XMM[7],@XMM[7],@XMM[15]	@ fix up last round key
+	vstmia	r12, {@XMM[7]}			@ save last round key
+
+	vldmia	sp!,{d8-d15}
+	ldmia	sp!,{r4-r6,pc}
+.size	bsaes_enc_key_convert,.-bsaes_enc_key_convert
+
+.globl	bsaes_encrypt_128
+.type	bsaes_encrypt_128,%function
+.align	4
+bsaes_encrypt_128:
+	stmdb	sp!,{r4-r6,lr}
+	vstmdb	sp!,{d8-d15}		@ ABI specification says so
+.Lenc128_loop:
+	vld1.8	{@XMM[0]-@XMM[1]}, [$inp]!	@ load input
+	vld1.8	{@XMM[2]-@XMM[3]}, [$inp]!
+	mov	r4,$key				@ pass the key
+	vld1.8	{@XMM[4]-@XMM[5]}, [$inp]!
+	mov	r5,#10				@ pass rounds
+	vld1.8	{@XMM[6]-@XMM[7]}, [$inp]!
+
+	bl	_bsaes_encrypt8
+
+	vst1.8	{@XMM[0]-@XMM[1]}, [$out]!	@ write output
+	vst1.8	{@XMM[4]}, [$out]!
+	vst1.8	{@XMM[6]}, [$out]!
+	vst1.8	{@XMM[3]}, [$out]!
+	vst1.8	{@XMM[7]}, [$out]!
+	vst1.8	{@XMM[2]}, [$out]!
+	subs	$len,$len,#0x80
+	vst1.8	{@XMM[5]}, [$out]!
+	bhi	.Lenc128_loop
+
+	vldmia	sp!,{d8-d15}
+	ldmia	sp!,{r4-r6,pc}
+.size	bsaes_encrypt_128,.-bsaes_encrypt_128
+
+.globl	bsaes_dec_key_convert
+.type	bsaes_dec_key_convert,%function
+.align	4
+bsaes_dec_key_convert:
+	stmdb	sp!,{r4-r6,lr}
+	vstmdb	sp!,{d8-d15}		@ ABI specification says so
+
+	ldr	r5,[$inp,#240]			@ pass rounds
+	mov	r4,$inp				@ pass key
+	mov	r12,$out			@ pass key schedule
+	bl	_bsaes_key_convert
+	vldmia	$out, {@XMM[6]}
+	vstmia	r12,  {@XMM[15]}		@ save last round key
+	veor	@XMM[7], @XMM[7], @XMM[6]	@ fix up round 0 key
+	vstmia	$out, {@XMM[7]}
+
+	vldmia	sp!,{d8-d15}
+	ldmia	sp!,{r4-r6,pc}
+.size	bsaes_dec_key_convert,.-bsaes_dec_key_convert
+
+.globl	bsaes_decrypt_128
+.type	bsaes_decrypt_128,%function
+.align	4
+bsaes_decrypt_128:
+	stmdb	sp!,{r4-r6,lr}
+	vstmdb	sp!,{d8-d15}		@ ABI specification says so
+.Ldec128_loop:
+	vld1.8	{@XMM[0]-@XMM[1]}, [$inp]!	@ load input
+	vld1.8	{@XMM[2]-@XMM[3]}, [$inp]!
+	mov	r4,$key				@ pass the key
+	vld1.8	{@XMM[4]-@XMM[5]}, [$inp]!
+	mov	r5,#10				@ pass rounds
+	vld1.8	{@XMM[6]-@XMM[7]}, [$inp]!
+
+	bl	_bsaes_decrypt8
+
+	vst1.8	{@XMM[0]-@XMM[1]}, [$out]!	@ write output
+	vst1.8	{@XMM[6]}, [$out]!
+	vst1.8	{@XMM[4]}, [$out]!
+	vst1.8	{@XMM[2]}, [$out]!
+	vst1.8	{@XMM[7]}, [$out]!
+	vst1.8	{@XMM[3]}, [$out]!
+	subs	$len,$len,#0x80
+	vst1.8	{@XMM[5]}, [$out]!
+	bhi	.Ldec128_loop
+
+	vldmia	sp!,{d8-d15}
+	ldmia	sp!,{r4-r6,pc}
+.size	bsaes_decrypt_128,.-bsaes_decrypt_128
+___
+}
+{
+my ($inp,$out,$len,$key, $ivp,$fp,$rounds)=map("r$_",(0..3,8..10));
+my ($keysched)=("sp");
+
+$code.=<<___;
+.extern AES_cbc_encrypt
+.extern AES_decrypt
+
+.global	bsaes_cbc_encrypt
+.type	bsaes_cbc_encrypt,%function
+.align	5
+bsaes_cbc_encrypt:
+#ifndef	__KERNEL__
+	cmp	$len, #128
+#ifndef	__thumb__
+	blo	AES_cbc_encrypt
+#else
+	bhs	1f
+	b	AES_cbc_encrypt
+1:
+#endif
+#endif
+
+	@ it is up to the caller to make sure we are called with enc == 0
+
+	mov	ip, sp
+	stmdb	sp!, {r4-r10, lr}
+	VFP_ABI_PUSH
+	ldr	$ivp, [ip]			@ IV is 1st arg on the stack
+	mov	$len, $len, lsr#4		@ len in 16 byte blocks
+	sub	sp, #0x10			@ scratch space to carry over the IV
+	mov	$fp, sp				@ save sp
+
+	ldr	$rounds, [$key, #240]		@ get # of rounds
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	@ allocate the key schedule on the stack
+	sub	r12, sp, $rounds, lsl#7		@ 128 bytes per inner round key
+	add	r12, #`128-32`			@ sifze of bit-slices key schedule
+
+	@ populate the key schedule
+	mov	r4, $key			@ pass key
+	mov	r5, $rounds			@ pass # of rounds
+	mov	sp, r12				@ sp is $keysched
+	bl	_bsaes_key_convert
+	vldmia	$keysched, {@XMM[6]}
+	vstmia	r12,  {@XMM[15]}		@ save last round key
+	veor	@XMM[7], @XMM[7], @XMM[6]	@ fix up round 0 key
+	vstmia	$keysched, {@XMM[7]}
+#else
+	ldr	r12, [$key, #244]
+	eors	r12, #1
+	beq	0f
+
+	@ populate the key schedule
+	str	r12, [$key, #244]
+	mov	r4, $key			@ pass key
+	mov	r5, $rounds			@ pass # of rounds
+	add	r12, $key, #248			@ pass key schedule
+	bl	_bsaes_key_convert
+	add	r4, $key, #248
+	vldmia	r4, {@XMM[6]}
+	vstmia	r12, {@XMM[15]}			@ save last round key
+	veor	@XMM[7], @XMM[7], @XMM[6]	@ fix up round 0 key
+	vstmia	r4, {@XMM[7]}
+
+.align	2
+0:
+#endif
+
+	vld1.8	{@XMM[15]}, [$ivp]		@ load IV
+	b	.Lcbc_dec_loop
+
+.align	4
+.Lcbc_dec_loop:
+	subs	$len, $len, #0x8
+	bmi	.Lcbc_dec_loop_finish
+
+	vld1.8	{@XMM[0]-@XMM[1]}, [$inp]!	@ load input
+	vld1.8	{@XMM[2]-@XMM[3]}, [$inp]!
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	mov	r4, $keysched			@ pass the key
+#else
+	add	r4, $key, #248
+#endif
+	vld1.8	{@XMM[4]-@XMM[5]}, [$inp]!
+	mov	r5, $rounds
+	vld1.8	{@XMM[6]-@XMM[7]}, [$inp]
+	sub	$inp, $inp, #0x60
+	vstmia	$fp, {@XMM[15]}			@ put aside IV
+
+	bl	_bsaes_decrypt8
+
+	vldmia	$fp, {@XMM[14]}			@ reload IV
+	vld1.8	{@XMM[8]-@XMM[9]}, [$inp]!	@ reload input
+	veor	@XMM[0], @XMM[0], @XMM[14]	@ ^= IV
+	vld1.8	{@XMM[10]-@XMM[11]}, [$inp]!
+	veor	@XMM[1], @XMM[1], @XMM[8]
+	veor	@XMM[6], @XMM[6], @XMM[9]
+	vld1.8	{@XMM[12]-@XMM[13]}, [$inp]!
+	veor	@XMM[4], @XMM[4], @XMM[10]
+	veor	@XMM[2], @XMM[2], @XMM[11]
+	vld1.8	{@XMM[14]-@XMM[15]}, [$inp]!
+	veor	@XMM[7], @XMM[7], @XMM[12]
+	vst1.8	{@XMM[0]-@XMM[1]}, [$out]!	@ write output
+	veor	@XMM[3], @XMM[3], @XMM[13]
+	vst1.8	{@XMM[6]}, [$out]!
+	veor	@XMM[5], @XMM[5], @XMM[14]
+	vst1.8	{@XMM[4]}, [$out]!
+	vst1.8	{@XMM[2]}, [$out]!
+	vst1.8	{@XMM[7]}, [$out]!
+	vst1.8	{@XMM[3]}, [$out]!
+	vst1.8	{@XMM[5]}, [$out]!
+
+	b	.Lcbc_dec_loop
+
+.Lcbc_dec_loop_finish:
+	adds	$len, $len, #8
+	beq	.Lcbc_dec_done
+
+	vld1.8	{@XMM[0]}, [$inp]!		@ load input
+	cmp	$len, #2
+	blo	.Lcbc_dec_one
+	vld1.8	{@XMM[1]}, [$inp]!
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	mov	r4, $keysched			@ pass the key
+#else
+	add	r4, $key, #248
+#endif
+	mov	r5, $rounds
+	vstmia	$fp, {@XMM[15]}			@ put aside IV
+	beq	.Lcbc_dec_two
+	vld1.8	{@XMM[2]}, [$inp]!
+	cmp	$len, #4
+	blo	.Lcbc_dec_three
+	vld1.8	{@XMM[3]}, [$inp]!
+	beq	.Lcbc_dec_four
+	vld1.8	{@XMM[4]}, [$inp]!
+	cmp	$len, #6
+	blo	.Lcbc_dec_five
+	vld1.8	{@XMM[5]}, [$inp]!
+	beq	.Lcbc_dec_six
+	vld1.8	{@XMM[6]}, [$inp]!
+	sub	$inp, $inp, #0x70
+
+	bl	_bsaes_decrypt8
+
+	vldmia	$fp, {@XMM[14]}			@ reload IV
+	vld1.8	{@XMM[8]-@XMM[9]}, [$inp]!	@ reload input
+	veor	@XMM[0], @XMM[0], @XMM[14]	@ ^= IV
+	vld1.8	{@XMM[10]-@XMM[11]}, [$inp]!
+	veor	@XMM[1], @XMM[1], @XMM[8]
+	veor	@XMM[6], @XMM[6], @XMM[9]
+	vld1.8	{@XMM[12]-@XMM[13]}, [$inp]!
+	veor	@XMM[4], @XMM[4], @XMM[10]
+	veor	@XMM[2], @XMM[2], @XMM[11]
+	vld1.8	{@XMM[15]}, [$inp]!
+	veor	@XMM[7], @XMM[7], @XMM[12]
+	vst1.8	{@XMM[0]-@XMM[1]}, [$out]!	@ write output
+	veor	@XMM[3], @XMM[3], @XMM[13]
+	vst1.8	{@XMM[6]}, [$out]!
+	vst1.8	{@XMM[4]}, [$out]!
+	vst1.8	{@XMM[2]}, [$out]!
+	vst1.8	{@XMM[7]}, [$out]!
+	vst1.8	{@XMM[3]}, [$out]!
+	b	.Lcbc_dec_done
+.align	4
+.Lcbc_dec_six:
+	sub	$inp, $inp, #0x60
+	bl	_bsaes_decrypt8
+	vldmia	$fp,{@XMM[14]}			@ reload IV
+	vld1.8	{@XMM[8]-@XMM[9]}, [$inp]!	@ reload input
+	veor	@XMM[0], @XMM[0], @XMM[14]	@ ^= IV
+	vld1.8	{@XMM[10]-@XMM[11]}, [$inp]!
+	veor	@XMM[1], @XMM[1], @XMM[8]
+	veor	@XMM[6], @XMM[6], @XMM[9]
+	vld1.8	{@XMM[12]}, [$inp]!
+	veor	@XMM[4], @XMM[4], @XMM[10]
+	veor	@XMM[2], @XMM[2], @XMM[11]
+	vld1.8	{@XMM[15]}, [$inp]!
+	veor	@XMM[7], @XMM[7], @XMM[12]
+	vst1.8	{@XMM[0]-@XMM[1]}, [$out]!	@ write output
+	vst1.8	{@XMM[6]}, [$out]!
+	vst1.8	{@XMM[4]}, [$out]!
+	vst1.8	{@XMM[2]}, [$out]!
+	vst1.8	{@XMM[7]}, [$out]!
+	b	.Lcbc_dec_done
+.align	4
+.Lcbc_dec_five:
+	sub	$inp, $inp, #0x50
+	bl	_bsaes_decrypt8
+	vldmia	$fp, {@XMM[14]}			@ reload IV
+	vld1.8	{@XMM[8]-@XMM[9]}, [$inp]!	@ reload input
+	veor	@XMM[0], @XMM[0], @XMM[14]	@ ^= IV
+	vld1.8	{@XMM[10]-@XMM[11]}, [$inp]!
+	veor	@XMM[1], @XMM[1], @XMM[8]
+	veor	@XMM[6], @XMM[6], @XMM[9]
+	vld1.8	{@XMM[15]}, [$inp]!
+	veor	@XMM[4], @XMM[4], @XMM[10]
+	vst1.8	{@XMM[0]-@XMM[1]}, [$out]!	@ write output
+	veor	@XMM[2], @XMM[2], @XMM[11]
+	vst1.8	{@XMM[6]}, [$out]!
+	vst1.8	{@XMM[4]}, [$out]!
+	vst1.8	{@XMM[2]}, [$out]!
+	b	.Lcbc_dec_done
+.align	4
+.Lcbc_dec_four:
+	sub	$inp, $inp, #0x40
+	bl	_bsaes_decrypt8
+	vldmia	$fp, {@XMM[14]}			@ reload IV
+	vld1.8	{@XMM[8]-@XMM[9]}, [$inp]!	@ reload input
+	veor	@XMM[0], @XMM[0], @XMM[14]	@ ^= IV
+	vld1.8	{@XMM[10]}, [$inp]!
+	veor	@XMM[1], @XMM[1], @XMM[8]
+	veor	@XMM[6], @XMM[6], @XMM[9]
+	vld1.8	{@XMM[15]}, [$inp]!
+	veor	@XMM[4], @XMM[4], @XMM[10]
+	vst1.8	{@XMM[0]-@XMM[1]}, [$out]!	@ write output
+	vst1.8	{@XMM[6]}, [$out]!
+	vst1.8	{@XMM[4]}, [$out]!
+	b	.Lcbc_dec_done
+.align	4
+.Lcbc_dec_three:
+	sub	$inp, $inp, #0x30
+	bl	_bsaes_decrypt8
+	vldmia	$fp, {@XMM[14]}			@ reload IV
+	vld1.8	{@XMM[8]-@XMM[9]}, [$inp]!	@ reload input
+	veor	@XMM[0], @XMM[0], @XMM[14]	@ ^= IV
+	vld1.8	{@XMM[15]}, [$inp]!
+	veor	@XMM[1], @XMM[1], @XMM[8]
+	veor	@XMM[6], @XMM[6], @XMM[9]
+	vst1.8	{@XMM[0]-@XMM[1]}, [$out]!	@ write output
+	vst1.8	{@XMM[6]}, [$out]!
+	b	.Lcbc_dec_done
+.align	4
+.Lcbc_dec_two:
+	sub	$inp, $inp, #0x20
+	bl	_bsaes_decrypt8
+	vldmia	$fp, {@XMM[14]}			@ reload IV
+	vld1.8	{@XMM[8]}, [$inp]!		@ reload input
+	veor	@XMM[0], @XMM[0], @XMM[14]	@ ^= IV
+	vld1.8	{@XMM[15]}, [$inp]!		@ reload input
+	veor	@XMM[1], @XMM[1], @XMM[8]
+	vst1.8	{@XMM[0]-@XMM[1]}, [$out]!	@ write output
+	b	.Lcbc_dec_done
+.align	4
+.Lcbc_dec_one:
+	sub	$inp, $inp, #0x10
+	mov	$rounds, $out			@ save original out pointer
+	mov	$out, $fp			@ use the iv scratch space as out buffer
+	mov	r2, $key
+	vmov	@XMM[4],@XMM[15]		@ just in case ensure that IV
+	vmov	@XMM[5],@XMM[0]			@ and input are preserved
+	bl	AES_decrypt
+	vld1.8	{@XMM[0]}, [$fp]		@ load result
+	veor	@XMM[0], @XMM[0], @XMM[4]	@ ^= IV
+	vmov	@XMM[15], @XMM[5]		@ @XMM[5] holds input
+	vst1.8	{@XMM[0]}, [$rounds]		@ write output
+
+.Lcbc_dec_done:
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	vmov.i32	q0, #0
+	vmov.i32	q1, #0
+.Lcbc_dec_bzero:				@ wipe key schedule [if any]
+	vstmia		$keysched!, {q0-q1}
+	cmp		$keysched, $fp
+	bne		.Lcbc_dec_bzero
+#endif
+
+	mov	sp, $fp
+	add	sp, #0x10			@ add sp,$fp,#0x10 is no good for thumb
+	vst1.8	{@XMM[15]}, [$ivp]		@ return IV
+	VFP_ABI_POP
+	ldmia	sp!, {r4-r10, pc}
+.size	bsaes_cbc_encrypt,.-bsaes_cbc_encrypt
+___
+}
+{
+my ($inp,$out,$len,$key, $ctr,$fp,$rounds)=(map("r$_",(0..3,8..10)));
+my $const = "r6";	# shared with _bsaes_encrypt8_alt
+my $keysched = "sp";
+
+$code.=<<___;
+.extern	AES_encrypt
+.global	bsaes_ctr32_encrypt_blocks
+.type	bsaes_ctr32_encrypt_blocks,%function
+.align	5
+bsaes_ctr32_encrypt_blocks:
+	cmp	$len, #8			@ use plain AES for
+	blo	.Lctr_enc_short			@ small sizes
+
+	mov	ip, sp
+	stmdb	sp!, {r4-r10, lr}
+	VFP_ABI_PUSH
+	ldr	$ctr, [ip]			@ ctr is 1st arg on the stack
+	sub	sp, sp, #0x10			@ scratch space to carry over the ctr
+	mov	$fp, sp				@ save sp
+
+	ldr	$rounds, [$key, #240]		@ get # of rounds
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	@ allocate the key schedule on the stack
+	sub	r12, sp, $rounds, lsl#7		@ 128 bytes per inner round key
+	add	r12, #`128-32`			@ size of bit-sliced key schedule
+
+	@ populate the key schedule
+	mov	r4, $key			@ pass key
+	mov	r5, $rounds			@ pass # of rounds
+	mov	sp, r12				@ sp is $keysched
+	bl	_bsaes_key_convert
+	veor	@XMM[7],@XMM[7],@XMM[15]	@ fix up last round key
+	vstmia	r12, {@XMM[7]}			@ save last round key
+
+	vld1.8	{@XMM[0]}, [$ctr]		@ load counter
+#ifdef	__APPLE__
+	mov	$ctr, #:lower16:(.LREVM0SR-.LM0)
+	add	$ctr, $const, $ctr
+#else
+	add	$ctr, $const, #.LREVM0SR-.LM0	@ borrow $ctr
+#endif
+	vldmia	$keysched, {@XMM[4]}		@ load round0 key
+#else
+	ldr	r12, [$key, #244]
+	eors	r12, #1
+	beq	0f
+
+	@ populate the key schedule
+	str	r12, [$key, #244]
+	mov	r4, $key			@ pass key
+	mov	r5, $rounds			@ pass # of rounds
+	add	r12, $key, #248			@ pass key schedule
+	bl	_bsaes_key_convert
+	veor	@XMM[7],@XMM[7],@XMM[15]	@ fix up last round key
+	vstmia	r12, {@XMM[7]}			@ save last round key
+
+.align	2
+0:	add	r12, $key, #248
+	vld1.8	{@XMM[0]}, [$ctr]		@ load counter
+	adrl	$ctr, .LREVM0SR			@ borrow $ctr
+	vldmia	r12, {@XMM[4]}			@ load round0 key
+	sub	sp, #0x10			@ place for adjusted round0 key
+#endif
+
+	vmov.i32	@XMM[8],#1		@ compose 1<<96
+	veor		@XMM[9],@XMM[9],@XMM[9]
+	vrev32.8	@XMM[0],@XMM[0]
+	vext.8		@XMM[8],@XMM[9],@XMM[8],#4
+	vrev32.8	@XMM[4],@XMM[4]
+	vadd.u32	@XMM[9],@XMM[8],@XMM[8]	@ compose 2<<96
+	vstmia	$keysched, {@XMM[4]}		@ save adjusted round0 key
+	b	.Lctr_enc_loop
+
+.align	4
+.Lctr_enc_loop:
+	vadd.u32	@XMM[10], @XMM[8], @XMM[9]	@ compose 3<<96
+	vadd.u32	@XMM[1], @XMM[0], @XMM[8]	@ +1
+	vadd.u32	@XMM[2], @XMM[0], @XMM[9]	@ +2
+	vadd.u32	@XMM[3], @XMM[0], @XMM[10]	@ +3
+	vadd.u32	@XMM[4], @XMM[1], @XMM[10]
+	vadd.u32	@XMM[5], @XMM[2], @XMM[10]
+	vadd.u32	@XMM[6], @XMM[3], @XMM[10]
+	vadd.u32	@XMM[7], @XMM[4], @XMM[10]
+	vadd.u32	@XMM[10], @XMM[5], @XMM[10]	@ next counter
+
+	@ Borrow prologue from _bsaes_encrypt8 to use the opportunity
+	@ to flip byte order in 32-bit counter
+
+	vldmia		$keysched, {@XMM[9]}		@ load round0 key
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	add		r4, $keysched, #0x10		@ pass next round key
+#else
+	add		r4, $key, #`248+16`
+#endif
+	vldmia		$ctr, {@XMM[8]}			@ .LREVM0SR
+	mov		r5, $rounds			@ pass rounds
+	vstmia		$fp, {@XMM[10]}			@ save next counter
+#ifdef	__APPLE__
+	mov		$const, #:lower16:(.LREVM0SR-.LSR)
+	sub		$const, $ctr, $const
+#else
+	sub		$const, $ctr, #.LREVM0SR-.LSR	@ pass constants
+#endif
+
+	bl		_bsaes_encrypt8_alt
+
+	subs		$len, $len, #8
+	blo		.Lctr_enc_loop_done
+
+	vld1.8		{@XMM[8]-@XMM[9]}, [$inp]!	@ load input
+	vld1.8		{@XMM[10]-@XMM[11]}, [$inp]!
+	veor		@XMM[0], @XMM[8]
+	veor		@XMM[1], @XMM[9]
+	vld1.8		{@XMM[12]-@XMM[13]}, [$inp]!
+	veor		@XMM[4], @XMM[10]
+	veor		@XMM[6], @XMM[11]
+	vld1.8		{@XMM[14]-@XMM[15]}, [$inp]!
+	veor		@XMM[3], @XMM[12]
+	vst1.8		{@XMM[0]-@XMM[1]}, [$out]!	@ write output
+	veor		@XMM[7], @XMM[13]
+	veor		@XMM[2], @XMM[14]
+	vst1.8		{@XMM[4]}, [$out]!
+	veor		@XMM[5], @XMM[15]
+	vst1.8		{@XMM[6]}, [$out]!
+	vmov.i32	@XMM[8], #1			@ compose 1<<96
+	vst1.8		{@XMM[3]}, [$out]!
+	veor		@XMM[9], @XMM[9], @XMM[9]
+	vst1.8		{@XMM[7]}, [$out]!
+	vext.8		@XMM[8], @XMM[9], @XMM[8], #4
+	vst1.8		{@XMM[2]}, [$out]!
+	vadd.u32	@XMM[9],@XMM[8],@XMM[8]		@ compose 2<<96
+	vst1.8		{@XMM[5]}, [$out]!
+	vldmia		$fp, {@XMM[0]}			@ load counter
+
+	bne		.Lctr_enc_loop
+	b		.Lctr_enc_done
+
+.align	4
+.Lctr_enc_loop_done:
+	add		$len, $len, #8
+	vld1.8		{@XMM[8]}, [$inp]!	@ load input
+	veor		@XMM[0], @XMM[8]
+	vst1.8		{@XMM[0]}, [$out]!	@ write output
+	cmp		$len, #2
+	blo		.Lctr_enc_done
+	vld1.8		{@XMM[9]}, [$inp]!
+	veor		@XMM[1], @XMM[9]
+	vst1.8		{@XMM[1]}, [$out]!
+	beq		.Lctr_enc_done
+	vld1.8		{@XMM[10]}, [$inp]!
+	veor		@XMM[4], @XMM[10]
+	vst1.8		{@XMM[4]}, [$out]!
+	cmp		$len, #4
+	blo		.Lctr_enc_done
+	vld1.8		{@XMM[11]}, [$inp]!
+	veor		@XMM[6], @XMM[11]
+	vst1.8		{@XMM[6]}, [$out]!
+	beq		.Lctr_enc_done
+	vld1.8		{@XMM[12]}, [$inp]!
+	veor		@XMM[3], @XMM[12]
+	vst1.8		{@XMM[3]}, [$out]!
+	cmp		$len, #6
+	blo		.Lctr_enc_done
+	vld1.8		{@XMM[13]}, [$inp]!
+	veor		@XMM[7], @XMM[13]
+	vst1.8		{@XMM[7]}, [$out]!
+	beq		.Lctr_enc_done
+	vld1.8		{@XMM[14]}, [$inp]
+	veor		@XMM[2], @XMM[14]
+	vst1.8		{@XMM[2]}, [$out]!
+
+.Lctr_enc_done:
+	vmov.i32	q0, #0
+	vmov.i32	q1, #0
+#ifndef	BSAES_ASM_EXTENDED_KEY
+.Lctr_enc_bzero:			@ wipe key schedule [if any]
+	vstmia		$keysched!, {q0-q1}
+	cmp		$keysched, $fp
+	bne		.Lctr_enc_bzero
+#else
+	vstmia		$keysched, {q0-q1}
+#endif
+
+	mov	sp, $fp
+	add	sp, #0x10		@ add sp,$fp,#0x10 is no good for thumb
+	VFP_ABI_POP
+	ldmia	sp!, {r4-r10, pc}	@ return
+
+.align	4
+.Lctr_enc_short:
+	ldr	ip, [sp]		@ ctr pointer is passed on stack
+	stmdb	sp!, {r4-r8, lr}
+
+	mov	r4, $inp		@ copy arguments
+	mov	r5, $out
+	mov	r6, $len
+	mov	r7, $key
+	ldr	r8, [ip, #12]		@ load counter LSW
+	vld1.8	{@XMM[1]}, [ip]		@ load whole counter value
+#ifdef __ARMEL__
+	rev	r8, r8
+#endif
+	sub	sp, sp, #0x10
+	vst1.8	{@XMM[1]}, [sp]		@ copy counter value
+	sub	sp, sp, #0x10
+
+.Lctr_enc_short_loop:
+	add	r0, sp, #0x10		@ input counter value
+	mov	r1, sp			@ output on the stack
+	mov	r2, r7			@ key
+
+	bl	AES_encrypt
+
+	vld1.8	{@XMM[0]}, [r4]!	@ load input
+	vld1.8	{@XMM[1]}, [sp]		@ load encrypted counter
+	add	r8, r8, #1
+#ifdef __ARMEL__
+	rev	r0, r8
+	str	r0, [sp, #0x1c]		@ next counter value
+#else
+	str	r8, [sp, #0x1c]		@ next counter value
+#endif
+	veor	@XMM[0],@XMM[0],@XMM[1]
+	vst1.8	{@XMM[0]}, [r5]!	@ store output
+	subs	r6, r6, #1
+	bne	.Lctr_enc_short_loop
+
+	vmov.i32	q0, #0
+	vmov.i32	q1, #0
+	vstmia		sp!, {q0-q1}
+
+	ldmia	sp!, {r4-r8, pc}
+.size	bsaes_ctr32_encrypt_blocks,.-bsaes_ctr32_encrypt_blocks
+___
+}
+{
+######################################################################
+# void bsaes_xts_[en|de]crypt(const char *inp,char *out,size_t len,
+#	const AES_KEY *key1, const AES_KEY *key2,
+#	const unsigned char iv[16]);
+#
+my ($inp,$out,$len,$key,$rounds,$magic,$fp)=(map("r$_",(7..10,1..3)));
+my $const="r6";		# returned by _bsaes_key_convert
+my $twmask=@XMM[5];
+my @T=@XMM[6..7];
+
+$code.=<<___;
+.globl	bsaes_xts_encrypt
+.type	bsaes_xts_encrypt,%function
+.align	4
+bsaes_xts_encrypt:
+	mov	ip, sp
+	stmdb	sp!, {r4-r10, lr}		@ 0x20
+	VFP_ABI_PUSH
+	mov	r6, sp				@ future $fp
+
+	mov	$inp, r0
+	mov	$out, r1
+	mov	$len, r2
+	mov	$key, r3
+
+	sub	r0, sp, #0x10			@ 0x10
+	bic	r0, #0xf			@ align at 16 bytes
+	mov	sp, r0
+
+#ifdef	XTS_CHAIN_TWEAK
+	ldr	r0, [ip]			@ pointer to input tweak
+#else
+	@ generate initial tweak
+	ldr	r0, [ip, #4]			@ iv[]
+	mov	r1, sp
+	ldr	r2, [ip, #0]			@ key2
+	bl	AES_encrypt
+	mov	r0,sp				@ pointer to initial tweak
+#endif
+
+	ldr	$rounds, [$key, #240]		@ get # of rounds
+	mov	$fp, r6
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	@ allocate the key schedule on the stack
+	sub	r12, sp, $rounds, lsl#7		@ 128 bytes per inner round key
+	@ add	r12, #`128-32`			@ size of bit-sliced key schedule
+	sub	r12, #`32+16`			@ place for tweak[9]
+
+	@ populate the key schedule
+	mov	r4, $key			@ pass key
+	mov	r5, $rounds			@ pass # of rounds
+	mov	sp, r12
+	add	r12, #0x90			@ pass key schedule
+	bl	_bsaes_key_convert
+	veor	@XMM[7], @XMM[7], @XMM[15]	@ fix up last round key
+	vstmia	r12, {@XMM[7]}			@ save last round key
+#else
+	ldr	r12, [$key, #244]
+	eors	r12, #1
+	beq	0f
+
+	str	r12, [$key, #244]
+	mov	r4, $key			@ pass key
+	mov	r5, $rounds			@ pass # of rounds
+	add	r12, $key, #248			@ pass key schedule
+	bl	_bsaes_key_convert
+	veor	@XMM[7], @XMM[7], @XMM[15]	@ fix up last round key
+	vstmia	r12, {@XMM[7]}
+
+.align	2
+0:	sub	sp, #0x90			@ place for tweak[9]
+#endif
+
+	vld1.8	{@XMM[8]}, [r0]			@ initial tweak
+	adr	$magic, .Lxts_magic
+
+	subs	$len, #0x80
+	blo	.Lxts_enc_short
+	b	.Lxts_enc_loop
+
+.align	4
+.Lxts_enc_loop:
+	vldmia		$magic, {$twmask}	@ load XTS magic
+	vshr.s64	@T[0], @XMM[8], #63
+	mov		r0, sp
+	vand		@T[0], @T[0], $twmask
+___
+for($i=9;$i<16;$i++) {
+$code.=<<___;
+	vadd.u64	@XMM[$i], @XMM[$i-1], @XMM[$i-1]
+	vst1.64		{@XMM[$i-1]}, [r0,:128]!
+	vswp		`&Dhi("@T[0]")`,`&Dlo("@T[0]")`
+	vshr.s64	@T[1], @XMM[$i], #63
+	veor		@XMM[$i], @XMM[$i], @T[0]
+	vand		@T[1], @T[1], $twmask
+___
+	@T=reverse(@T);
+
+$code.=<<___ if ($i>=10);
+	vld1.8		{@XMM[$i-10]}, [$inp]!
+___
+$code.=<<___ if ($i>=11);
+	veor		@XMM[$i-11], @XMM[$i-11], @XMM[$i-3]
+___
+}
+$code.=<<___;
+	vadd.u64	@XMM[8], @XMM[15], @XMM[15]
+	vst1.64		{@XMM[15]}, [r0,:128]!
+	vswp		`&Dhi("@T[0]")`,`&Dlo("@T[0]")`
+	veor		@XMM[8], @XMM[8], @T[0]
+	vst1.64		{@XMM[8]}, [r0,:128]		@ next round tweak
+
+	vld1.8		{@XMM[6]-@XMM[7]}, [$inp]!
+	veor		@XMM[5], @XMM[5], @XMM[13]
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	add		r4, sp, #0x90			@ pass key schedule
+#else
+	add		r4, $key, #248			@ pass key schedule
+#endif
+	veor		@XMM[6], @XMM[6], @XMM[14]
+	mov		r5, $rounds			@ pass rounds
+	veor		@XMM[7], @XMM[7], @XMM[15]
+	mov		r0, sp
+
+	bl		_bsaes_encrypt8
+
+	vld1.64		{@XMM[ 8]-@XMM[ 9]}, [r0,:128]!
+	vld1.64		{@XMM[10]-@XMM[11]}, [r0,:128]!
+	veor		@XMM[0], @XMM[0], @XMM[ 8]
+	vld1.64		{@XMM[12]-@XMM[13]}, [r0,:128]!
+	veor		@XMM[1], @XMM[1], @XMM[ 9]
+	veor		@XMM[8], @XMM[4], @XMM[10]
+	vst1.8		{@XMM[0]-@XMM[1]}, [$out]!
+	veor		@XMM[9], @XMM[6], @XMM[11]
+	vld1.64		{@XMM[14]-@XMM[15]}, [r0,:128]!
+	veor		@XMM[10], @XMM[3], @XMM[12]
+	vst1.8		{@XMM[8]-@XMM[9]}, [$out]!
+	veor		@XMM[11], @XMM[7], @XMM[13]
+	veor		@XMM[12], @XMM[2], @XMM[14]
+	vst1.8		{@XMM[10]-@XMM[11]}, [$out]!
+	veor		@XMM[13], @XMM[5], @XMM[15]
+	vst1.8		{@XMM[12]-@XMM[13]}, [$out]!
+
+	vld1.64		{@XMM[8]}, [r0,:128]		@ next round tweak
+
+	subs		$len, #0x80
+	bpl		.Lxts_enc_loop
+
+.Lxts_enc_short:
+	adds		$len, #0x70
+	bmi		.Lxts_enc_done
+
+	vldmia		$magic, {$twmask}	@ load XTS magic
+	vshr.s64	@T[0], @XMM[8], #63
+	mov		r0, sp
+	vand		@T[0], @T[0], $twmask
+___
+for($i=9;$i<16;$i++) {
+$code.=<<___;
+	vadd.u64	@XMM[$i], @XMM[$i-1], @XMM[$i-1]
+	vst1.64		{@XMM[$i-1]}, [r0,:128]!
+	vswp		`&Dhi("@T[0]")`,`&Dlo("@T[0]")`
+	vshr.s64	@T[1], @XMM[$i], #63
+	veor		@XMM[$i], @XMM[$i], @T[0]
+	vand		@T[1], @T[1], $twmask
+___
+	@T=reverse(@T);
+
+$code.=<<___ if ($i>=10);
+	vld1.8		{@XMM[$i-10]}, [$inp]!
+	subs		$len, #0x10
+	bmi		.Lxts_enc_`$i-9`
+___
+$code.=<<___ if ($i>=11);
+	veor		@XMM[$i-11], @XMM[$i-11], @XMM[$i-3]
+___
+}
+$code.=<<___;
+	sub		$len, #0x10
+	vst1.64		{@XMM[15]}, [r0,:128]		@ next round tweak
+
+	vld1.8		{@XMM[6]}, [$inp]!
+	veor		@XMM[5], @XMM[5], @XMM[13]
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	add		r4, sp, #0x90			@ pass key schedule
+#else
+	add		r4, $key, #248			@ pass key schedule
+#endif
+	veor		@XMM[6], @XMM[6], @XMM[14]
+	mov		r5, $rounds			@ pass rounds
+	mov		r0, sp
+
+	bl		_bsaes_encrypt8
+
+	vld1.64		{@XMM[ 8]-@XMM[ 9]}, [r0,:128]!
+	vld1.64		{@XMM[10]-@XMM[11]}, [r0,:128]!
+	veor		@XMM[0], @XMM[0], @XMM[ 8]
+	vld1.64		{@XMM[12]-@XMM[13]}, [r0,:128]!
+	veor		@XMM[1], @XMM[1], @XMM[ 9]
+	veor		@XMM[8], @XMM[4], @XMM[10]
+	vst1.8		{@XMM[0]-@XMM[1]}, [$out]!
+	veor		@XMM[9], @XMM[6], @XMM[11]
+	vld1.64		{@XMM[14]}, [r0,:128]!
+	veor		@XMM[10], @XMM[3], @XMM[12]
+	vst1.8		{@XMM[8]-@XMM[9]}, [$out]!
+	veor		@XMM[11], @XMM[7], @XMM[13]
+	veor		@XMM[12], @XMM[2], @XMM[14]
+	vst1.8		{@XMM[10]-@XMM[11]}, [$out]!
+	vst1.8		{@XMM[12]}, [$out]!
+
+	vld1.64		{@XMM[8]}, [r0,:128]		@ next round tweak
+	b		.Lxts_enc_done
+.align	4
+.Lxts_enc_6:
+	veor		@XMM[4], @XMM[4], @XMM[12]
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	add		r4, sp, #0x90			@ pass key schedule
+#else
+	add		r4, $key, #248			@ pass key schedule
+#endif
+	veor		@XMM[5], @XMM[5], @XMM[13]
+	mov		r5, $rounds			@ pass rounds
+	mov		r0, sp
+
+	bl		_bsaes_encrypt8
+
+	vld1.64		{@XMM[ 8]-@XMM[ 9]}, [r0,:128]!
+	vld1.64		{@XMM[10]-@XMM[11]}, [r0,:128]!
+	veor		@XMM[0], @XMM[0], @XMM[ 8]
+	vld1.64		{@XMM[12]-@XMM[13]}, [r0,:128]!
+	veor		@XMM[1], @XMM[1], @XMM[ 9]
+	veor		@XMM[8], @XMM[4], @XMM[10]
+	vst1.8		{@XMM[0]-@XMM[1]}, [$out]!
+	veor		@XMM[9], @XMM[6], @XMM[11]
+	veor		@XMM[10], @XMM[3], @XMM[12]
+	vst1.8		{@XMM[8]-@XMM[9]}, [$out]!
+	veor		@XMM[11], @XMM[7], @XMM[13]
+	vst1.8		{@XMM[10]-@XMM[11]}, [$out]!
+
+	vld1.64		{@XMM[8]}, [r0,:128]		@ next round tweak
+	b		.Lxts_enc_done
+
+@ put this in range for both ARM and Thumb mode adr instructions
+.align	5
+.Lxts_magic:
+	.quad	1, 0x87
+
+.align	5
+.Lxts_enc_5:
+	veor		@XMM[3], @XMM[3], @XMM[11]
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	add		r4, sp, #0x90			@ pass key schedule
+#else
+	add		r4, $key, #248			@ pass key schedule
+#endif
+	veor		@XMM[4], @XMM[4], @XMM[12]
+	mov		r5, $rounds			@ pass rounds
+	mov		r0, sp
+
+	bl		_bsaes_encrypt8
+
+	vld1.64		{@XMM[ 8]-@XMM[ 9]}, [r0,:128]!
+	vld1.64		{@XMM[10]-@XMM[11]}, [r0,:128]!
+	veor		@XMM[0], @XMM[0], @XMM[ 8]
+	vld1.64		{@XMM[12]}, [r0,:128]!
+	veor		@XMM[1], @XMM[1], @XMM[ 9]
+	veor		@XMM[8], @XMM[4], @XMM[10]
+	vst1.8		{@XMM[0]-@XMM[1]}, [$out]!
+	veor		@XMM[9], @XMM[6], @XMM[11]
+	veor		@XMM[10], @XMM[3], @XMM[12]
+	vst1.8		{@XMM[8]-@XMM[9]}, [$out]!
+	vst1.8		{@XMM[10]}, [$out]!
+
+	vld1.64		{@XMM[8]}, [r0,:128]		@ next round tweak
+	b		.Lxts_enc_done
+.align	4
+.Lxts_enc_4:
+	veor		@XMM[2], @XMM[2], @XMM[10]
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	add		r4, sp, #0x90			@ pass key schedule
+#else
+	add		r4, $key, #248			@ pass key schedule
+#endif
+	veor		@XMM[3], @XMM[3], @XMM[11]
+	mov		r5, $rounds			@ pass rounds
+	mov		r0, sp
+
+	bl		_bsaes_encrypt8
+
+	vld1.64		{@XMM[ 8]-@XMM[ 9]}, [r0,:128]!
+	vld1.64		{@XMM[10]-@XMM[11]}, [r0,:128]!
+	veor		@XMM[0], @XMM[0], @XMM[ 8]
+	veor		@XMM[1], @XMM[1], @XMM[ 9]
+	veor		@XMM[8], @XMM[4], @XMM[10]
+	vst1.8		{@XMM[0]-@XMM[1]}, [$out]!
+	veor		@XMM[9], @XMM[6], @XMM[11]
+	vst1.8		{@XMM[8]-@XMM[9]}, [$out]!
+
+	vld1.64		{@XMM[8]}, [r0,:128]		@ next round tweak
+	b		.Lxts_enc_done
+.align	4
+.Lxts_enc_3:
+	veor		@XMM[1], @XMM[1], @XMM[9]
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	add		r4, sp, #0x90			@ pass key schedule
+#else
+	add		r4, $key, #248			@ pass key schedule
+#endif
+	veor		@XMM[2], @XMM[2], @XMM[10]
+	mov		r5, $rounds			@ pass rounds
+	mov		r0, sp
+
+	bl		_bsaes_encrypt8
+
+	vld1.64		{@XMM[8]-@XMM[9]}, [r0,:128]!
+	vld1.64		{@XMM[10]}, [r0,:128]!
+	veor		@XMM[0], @XMM[0], @XMM[ 8]
+	veor		@XMM[1], @XMM[1], @XMM[ 9]
+	veor		@XMM[8], @XMM[4], @XMM[10]
+	vst1.8		{@XMM[0]-@XMM[1]}, [$out]!
+	vst1.8		{@XMM[8]}, [$out]!
+
+	vld1.64		{@XMM[8]}, [r0,:128]		@ next round tweak
+	b		.Lxts_enc_done
+.align	4
+.Lxts_enc_2:
+	veor		@XMM[0], @XMM[0], @XMM[8]
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	add		r4, sp, #0x90			@ pass key schedule
+#else
+	add		r4, $key, #248			@ pass key schedule
+#endif
+	veor		@XMM[1], @XMM[1], @XMM[9]
+	mov		r5, $rounds			@ pass rounds
+	mov		r0, sp
+
+	bl		_bsaes_encrypt8
+
+	vld1.64		{@XMM[8]-@XMM[9]}, [r0,:128]!
+	veor		@XMM[0], @XMM[0], @XMM[ 8]
+	veor		@XMM[1], @XMM[1], @XMM[ 9]
+	vst1.8		{@XMM[0]-@XMM[1]}, [$out]!
+
+	vld1.64		{@XMM[8]}, [r0,:128]		@ next round tweak
+	b		.Lxts_enc_done
+.align	4
+.Lxts_enc_1:
+	mov		r0, sp
+	veor		@XMM[0], @XMM[0], @XMM[8]
+	mov		r1, sp
+	vst1.8		{@XMM[0]}, [sp,:128]
+	mov		r2, $key
+	mov		r4, $fp				@ preserve fp
+
+	bl		AES_encrypt
+
+	vld1.8		{@XMM[0]}, [sp,:128]
+	veor		@XMM[0], @XMM[0], @XMM[8]
+	vst1.8		{@XMM[0]}, [$out]!
+	mov		$fp, r4
+
+	vmov		@XMM[8], @XMM[9]		@ next round tweak
+
+.Lxts_enc_done:
+#ifndef	XTS_CHAIN_TWEAK
+	adds		$len, #0x10
+	beq		.Lxts_enc_ret
+	sub		r6, $out, #0x10
+
+.Lxts_enc_steal:
+	ldrb		r0, [$inp], #1
+	ldrb		r1, [$out, #-0x10]
+	strb		r0, [$out, #-0x10]
+	strb		r1, [$out], #1
+
+	subs		$len, #1
+	bhi		.Lxts_enc_steal
+
+	vld1.8		{@XMM[0]}, [r6]
+	mov		r0, sp
+	veor		@XMM[0], @XMM[0], @XMM[8]
+	mov		r1, sp
+	vst1.8		{@XMM[0]}, [sp,:128]
+	mov		r2, $key
+	mov		r4, $fp			@ preserve fp
+
+	bl		AES_encrypt
+
+	vld1.8		{@XMM[0]}, [sp,:128]
+	veor		@XMM[0], @XMM[0], @XMM[8]
+	vst1.8		{@XMM[0]}, [r6]
+	mov		$fp, r4
+#endif
+
+.Lxts_enc_ret:
+	bic		r0, $fp, #0xf
+	vmov.i32	q0, #0
+	vmov.i32	q1, #0
+#ifdef	XTS_CHAIN_TWEAK
+	ldr		r1, [$fp, #0x20+VFP_ABI_FRAME]	@ chain tweak
+#endif
+.Lxts_enc_bzero:				@ wipe key schedule [if any]
+	vstmia		sp!, {q0-q1}
+	cmp		sp, r0
+	bne		.Lxts_enc_bzero
+
+	mov		sp, $fp
+#ifdef	XTS_CHAIN_TWEAK
+	vst1.8		{@XMM[8]}, [r1]
+#endif
+	VFP_ABI_POP
+	ldmia		sp!, {r4-r10, pc}	@ return
+
+.size	bsaes_xts_encrypt,.-bsaes_xts_encrypt
+
+.globl	bsaes_xts_decrypt
+.type	bsaes_xts_decrypt,%function
+.align	4
+bsaes_xts_decrypt:
+	mov	ip, sp
+	stmdb	sp!, {r4-r10, lr}		@ 0x20
+	VFP_ABI_PUSH
+	mov	r6, sp				@ future $fp
+
+	mov	$inp, r0
+	mov	$out, r1
+	mov	$len, r2
+	mov	$key, r3
+
+	sub	r0, sp, #0x10			@ 0x10
+	bic	r0, #0xf			@ align at 16 bytes
+	mov	sp, r0
+
+#ifdef	XTS_CHAIN_TWEAK
+	ldr	r0, [ip]			@ pointer to input tweak
+#else
+	@ generate initial tweak
+	ldr	r0, [ip, #4]			@ iv[]
+	mov	r1, sp
+	ldr	r2, [ip, #0]			@ key2
+	bl	AES_encrypt
+	mov	r0, sp				@ pointer to initial tweak
+#endif
+
+	ldr	$rounds, [$key, #240]		@ get # of rounds
+	mov	$fp, r6
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	@ allocate the key schedule on the stack
+	sub	r12, sp, $rounds, lsl#7		@ 128 bytes per inner round key
+	@ add	r12, #`128-32`			@ size of bit-sliced key schedule
+	sub	r12, #`32+16`			@ place for tweak[9]
+
+	@ populate the key schedule
+	mov	r4, $key			@ pass key
+	mov	r5, $rounds			@ pass # of rounds
+	mov	sp, r12
+	add	r12, #0x90			@ pass key schedule
+	bl	_bsaes_key_convert
+	add	r4, sp, #0x90
+	vldmia	r4, {@XMM[6]}
+	vstmia	r12,  {@XMM[15]}		@ save last round key
+	veor	@XMM[7], @XMM[7], @XMM[6]	@ fix up round 0 key
+	vstmia	r4, {@XMM[7]}
+#else
+	ldr	r12, [$key, #244]
+	eors	r12, #1
+	beq	0f
+
+	str	r12, [$key, #244]
+	mov	r4, $key			@ pass key
+	mov	r5, $rounds			@ pass # of rounds
+	add	r12, $key, #248			@ pass key schedule
+	bl	_bsaes_key_convert
+	add	r4, $key, #248
+	vldmia	r4, {@XMM[6]}
+	vstmia	r12,  {@XMM[15]}		@ save last round key
+	veor	@XMM[7], @XMM[7], @XMM[6]	@ fix up round 0 key
+	vstmia	r4, {@XMM[7]}
+
+.align	2
+0:	sub	sp, #0x90			@ place for tweak[9]
+#endif
+	vld1.8	{@XMM[8]}, [r0]			@ initial tweak
+	adr	$magic, .Lxts_magic
+
+#ifndef	XTS_CHAIN_TWEAK
+	tst	$len, #0xf			@ if not multiple of 16
+	it	ne				@ Thumb2 thing, sanity check in ARM
+	subne	$len, #0x10			@ subtract another 16 bytes
+#endif
+	subs	$len, #0x80
+
+	blo	.Lxts_dec_short
+	b	.Lxts_dec_loop
+
+.align	4
+.Lxts_dec_loop:
+	vldmia		$magic, {$twmask}	@ load XTS magic
+	vshr.s64	@T[0], @XMM[8], #63
+	mov		r0, sp
+	vand		@T[0], @T[0], $twmask
+___
+for($i=9;$i<16;$i++) {
+$code.=<<___;
+	vadd.u64	@XMM[$i], @XMM[$i-1], @XMM[$i-1]
+	vst1.64		{@XMM[$i-1]}, [r0,:128]!
+	vswp		`&Dhi("@T[0]")`,`&Dlo("@T[0]")`
+	vshr.s64	@T[1], @XMM[$i], #63
+	veor		@XMM[$i], @XMM[$i], @T[0]
+	vand		@T[1], @T[1], $twmask
+___
+	@T=reverse(@T);
+
+$code.=<<___ if ($i>=10);
+	vld1.8		{@XMM[$i-10]}, [$inp]!
+___
+$code.=<<___ if ($i>=11);
+	veor		@XMM[$i-11], @XMM[$i-11], @XMM[$i-3]
+___
+}
+$code.=<<___;
+	vadd.u64	@XMM[8], @XMM[15], @XMM[15]
+	vst1.64		{@XMM[15]}, [r0,:128]!
+	vswp		`&Dhi("@T[0]")`,`&Dlo("@T[0]")`
+	veor		@XMM[8], @XMM[8], @T[0]
+	vst1.64		{@XMM[8]}, [r0,:128]		@ next round tweak
+
+	vld1.8		{@XMM[6]-@XMM[7]}, [$inp]!
+	veor		@XMM[5], @XMM[5], @XMM[13]
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	add		r4, sp, #0x90			@ pass key schedule
+#else
+	add		r4, $key, #248			@ pass key schedule
+#endif
+	veor		@XMM[6], @XMM[6], @XMM[14]
+	mov		r5, $rounds			@ pass rounds
+	veor		@XMM[7], @XMM[7], @XMM[15]
+	mov		r0, sp
+
+	bl		_bsaes_decrypt8
+
+	vld1.64		{@XMM[ 8]-@XMM[ 9]}, [r0,:128]!
+	vld1.64		{@XMM[10]-@XMM[11]}, [r0,:128]!
+	veor		@XMM[0], @XMM[0], @XMM[ 8]
+	vld1.64		{@XMM[12]-@XMM[13]}, [r0,:128]!
+	veor		@XMM[1], @XMM[1], @XMM[ 9]
+	veor		@XMM[8], @XMM[6], @XMM[10]
+	vst1.8		{@XMM[0]-@XMM[1]}, [$out]!
+	veor		@XMM[9], @XMM[4], @XMM[11]
+	vld1.64		{@XMM[14]-@XMM[15]}, [r0,:128]!
+	veor		@XMM[10], @XMM[2], @XMM[12]
+	vst1.8		{@XMM[8]-@XMM[9]}, [$out]!
+	veor		@XMM[11], @XMM[7], @XMM[13]
+	veor		@XMM[12], @XMM[3], @XMM[14]
+	vst1.8		{@XMM[10]-@XMM[11]}, [$out]!
+	veor		@XMM[13], @XMM[5], @XMM[15]
+	vst1.8		{@XMM[12]-@XMM[13]}, [$out]!
+
+	vld1.64		{@XMM[8]}, [r0,:128]		@ next round tweak
+
+	subs		$len, #0x80
+	bpl		.Lxts_dec_loop
+
+.Lxts_dec_short:
+	adds		$len, #0x70
+	bmi		.Lxts_dec_done
+
+	vldmia		$magic, {$twmask}	@ load XTS magic
+	vshr.s64	@T[0], @XMM[8], #63
+	mov		r0, sp
+	vand		@T[0], @T[0], $twmask
+___
+for($i=9;$i<16;$i++) {
+$code.=<<___;
+	vadd.u64	@XMM[$i], @XMM[$i-1], @XMM[$i-1]
+	vst1.64		{@XMM[$i-1]}, [r0,:128]!
+	vswp		`&Dhi("@T[0]")`,`&Dlo("@T[0]")`
+	vshr.s64	@T[1], @XMM[$i], #63
+	veor		@XMM[$i], @XMM[$i], @T[0]
+	vand		@T[1], @T[1], $twmask
+___
+	@T=reverse(@T);
+
+$code.=<<___ if ($i>=10);
+	vld1.8		{@XMM[$i-10]}, [$inp]!
+	subs		$len, #0x10
+	bmi		.Lxts_dec_`$i-9`
+___
+$code.=<<___ if ($i>=11);
+	veor		@XMM[$i-11], @XMM[$i-11], @XMM[$i-3]
+___
+}
+$code.=<<___;
+	sub		$len, #0x10
+	vst1.64		{@XMM[15]}, [r0,:128]		@ next round tweak
+
+	vld1.8		{@XMM[6]}, [$inp]!
+	veor		@XMM[5], @XMM[5], @XMM[13]
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	add		r4, sp, #0x90			@ pass key schedule
+#else
+	add		r4, $key, #248			@ pass key schedule
+#endif
+	veor		@XMM[6], @XMM[6], @XMM[14]
+	mov		r5, $rounds			@ pass rounds
+	mov		r0, sp
+
+	bl		_bsaes_decrypt8
+
+	vld1.64		{@XMM[ 8]-@XMM[ 9]}, [r0,:128]!
+	vld1.64		{@XMM[10]-@XMM[11]}, [r0,:128]!
+	veor		@XMM[0], @XMM[0], @XMM[ 8]
+	vld1.64		{@XMM[12]-@XMM[13]}, [r0,:128]!
+	veor		@XMM[1], @XMM[1], @XMM[ 9]
+	veor		@XMM[8], @XMM[6], @XMM[10]
+	vst1.8		{@XMM[0]-@XMM[1]}, [$out]!
+	veor		@XMM[9], @XMM[4], @XMM[11]
+	vld1.64		{@XMM[14]}, [r0,:128]!
+	veor		@XMM[10], @XMM[2], @XMM[12]
+	vst1.8		{@XMM[8]-@XMM[9]}, [$out]!
+	veor		@XMM[11], @XMM[7], @XMM[13]
+	veor		@XMM[12], @XMM[3], @XMM[14]
+	vst1.8		{@XMM[10]-@XMM[11]}, [$out]!
+	vst1.8		{@XMM[12]}, [$out]!
+
+	vld1.64		{@XMM[8]}, [r0,:128]		@ next round tweak
+	b		.Lxts_dec_done
+.align	4
+.Lxts_dec_6:
+	vst1.64		{@XMM[14]}, [r0,:128]		@ next round tweak
+
+	veor		@XMM[4], @XMM[4], @XMM[12]
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	add		r4, sp, #0x90			@ pass key schedule
+#else
+	add		r4, $key, #248			@ pass key schedule
+#endif
+	veor		@XMM[5], @XMM[5], @XMM[13]
+	mov		r5, $rounds			@ pass rounds
+	mov		r0, sp
+
+	bl		_bsaes_decrypt8
+
+	vld1.64		{@XMM[ 8]-@XMM[ 9]}, [r0,:128]!
+	vld1.64		{@XMM[10]-@XMM[11]}, [r0,:128]!
+	veor		@XMM[0], @XMM[0], @XMM[ 8]
+	vld1.64		{@XMM[12]-@XMM[13]}, [r0,:128]!
+	veor		@XMM[1], @XMM[1], @XMM[ 9]
+	veor		@XMM[8], @XMM[6], @XMM[10]
+	vst1.8		{@XMM[0]-@XMM[1]}, [$out]!
+	veor		@XMM[9], @XMM[4], @XMM[11]
+	veor		@XMM[10], @XMM[2], @XMM[12]
+	vst1.8		{@XMM[8]-@XMM[9]}, [$out]!
+	veor		@XMM[11], @XMM[7], @XMM[13]
+	vst1.8		{@XMM[10]-@XMM[11]}, [$out]!
+
+	vld1.64		{@XMM[8]}, [r0,:128]		@ next round tweak
+	b		.Lxts_dec_done
+.align	4
+.Lxts_dec_5:
+	veor		@XMM[3], @XMM[3], @XMM[11]
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	add		r4, sp, #0x90			@ pass key schedule
+#else
+	add		r4, $key, #248			@ pass key schedule
+#endif
+	veor		@XMM[4], @XMM[4], @XMM[12]
+	mov		r5, $rounds			@ pass rounds
+	mov		r0, sp
+
+	bl		_bsaes_decrypt8
+
+	vld1.64		{@XMM[ 8]-@XMM[ 9]}, [r0,:128]!
+	vld1.64		{@XMM[10]-@XMM[11]}, [r0,:128]!
+	veor		@XMM[0], @XMM[0], @XMM[ 8]
+	vld1.64		{@XMM[12]}, [r0,:128]!
+	veor		@XMM[1], @XMM[1], @XMM[ 9]
+	veor		@XMM[8], @XMM[6], @XMM[10]
+	vst1.8		{@XMM[0]-@XMM[1]}, [$out]!
+	veor		@XMM[9], @XMM[4], @XMM[11]
+	veor		@XMM[10], @XMM[2], @XMM[12]
+	vst1.8		{@XMM[8]-@XMM[9]}, [$out]!
+	vst1.8		{@XMM[10]}, [$out]!
+
+	vld1.64		{@XMM[8]}, [r0,:128]		@ next round tweak
+	b		.Lxts_dec_done
+.align	4
+.Lxts_dec_4:
+	veor		@XMM[2], @XMM[2], @XMM[10]
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	add		r4, sp, #0x90			@ pass key schedule
+#else
+	add		r4, $key, #248			@ pass key schedule
+#endif
+	veor		@XMM[3], @XMM[3], @XMM[11]
+	mov		r5, $rounds			@ pass rounds
+	mov		r0, sp
+
+	bl		_bsaes_decrypt8
+
+	vld1.64		{@XMM[ 8]-@XMM[ 9]}, [r0,:128]!
+	vld1.64		{@XMM[10]-@XMM[11]}, [r0,:128]!
+	veor		@XMM[0], @XMM[0], @XMM[ 8]
+	veor		@XMM[1], @XMM[1], @XMM[ 9]
+	veor		@XMM[8], @XMM[6], @XMM[10]
+	vst1.8		{@XMM[0]-@XMM[1]}, [$out]!
+	veor		@XMM[9], @XMM[4], @XMM[11]
+	vst1.8		{@XMM[8]-@XMM[9]}, [$out]!
+
+	vld1.64		{@XMM[8]}, [r0,:128]		@ next round tweak
+	b		.Lxts_dec_done
+.align	4
+.Lxts_dec_3:
+	veor		@XMM[1], @XMM[1], @XMM[9]
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	add		r4, sp, #0x90			@ pass key schedule
+#else
+	add		r4, $key, #248			@ pass key schedule
+#endif
+	veor		@XMM[2], @XMM[2], @XMM[10]
+	mov		r5, $rounds			@ pass rounds
+	mov		r0, sp
+
+	bl		_bsaes_decrypt8
+
+	vld1.64		{@XMM[8]-@XMM[9]}, [r0,:128]!
+	vld1.64		{@XMM[10]}, [r0,:128]!
+	veor		@XMM[0], @XMM[0], @XMM[ 8]
+	veor		@XMM[1], @XMM[1], @XMM[ 9]
+	veor		@XMM[8], @XMM[6], @XMM[10]
+	vst1.8		{@XMM[0]-@XMM[1]}, [$out]!
+	vst1.8		{@XMM[8]}, [$out]!
+
+	vld1.64		{@XMM[8]}, [r0,:128]		@ next round tweak
+	b		.Lxts_dec_done
+.align	4
+.Lxts_dec_2:
+	veor		@XMM[0], @XMM[0], @XMM[8]
+#ifndef	BSAES_ASM_EXTENDED_KEY
+	add		r4, sp, #0x90			@ pass key schedule
+#else
+	add		r4, $key, #248			@ pass key schedule
+#endif
+	veor		@XMM[1], @XMM[1], @XMM[9]
+	mov		r5, $rounds			@ pass rounds
+	mov		r0, sp
+
+	bl		_bsaes_decrypt8
+
+	vld1.64		{@XMM[8]-@XMM[9]}, [r0,:128]!
+	veor		@XMM[0], @XMM[0], @XMM[ 8]
+	veor		@XMM[1], @XMM[1], @XMM[ 9]
+	vst1.8		{@XMM[0]-@XMM[1]}, [$out]!
+
+	vld1.64		{@XMM[8]}, [r0,:128]		@ next round tweak
+	b		.Lxts_dec_done
+.align	4
+.Lxts_dec_1:
+	mov		r0, sp
+	veor		@XMM[0], @XMM[0], @XMM[8]
+	mov		r1, sp
+	vst1.8		{@XMM[0]}, [sp,:128]
+	mov		r5, $magic			@ preserve magic
+	mov		r2, $key
+	mov		r4, $fp				@ preserve fp
+
+	bl		AES_decrypt
+
+	vld1.8		{@XMM[0]}, [sp,:128]
+	veor		@XMM[0], @XMM[0], @XMM[8]
+	vst1.8		{@XMM[0]}, [$out]!
+	mov		$fp, r4
+	mov		$magic, r5
+
+	vmov		@XMM[8], @XMM[9]		@ next round tweak
+
+.Lxts_dec_done:
+#ifndef	XTS_CHAIN_TWEAK
+	adds		$len, #0x10
+	beq		.Lxts_dec_ret
+
+	@ calculate one round of extra tweak for the stolen ciphertext
+	vldmia		$magic, {$twmask}
+	vshr.s64	@XMM[6], @XMM[8], #63
+	vand		@XMM[6], @XMM[6], $twmask
+	vadd.u64	@XMM[9], @XMM[8], @XMM[8]
+	vswp		`&Dhi("@XMM[6]")`,`&Dlo("@XMM[6]")`
+	veor		@XMM[9], @XMM[9], @XMM[6]
+
+	@ perform the final decryption with the last tweak value
+	vld1.8		{@XMM[0]}, [$inp]!
+	mov		r0, sp
+	veor		@XMM[0], @XMM[0], @XMM[9]
+	mov		r1, sp
+	vst1.8		{@XMM[0]}, [sp,:128]
+	mov		r2, $key
+	mov		r4, $fp			@ preserve fp
+
+	bl		AES_decrypt
+
+	vld1.8		{@XMM[0]}, [sp,:128]
+	veor		@XMM[0], @XMM[0], @XMM[9]
+	vst1.8		{@XMM[0]}, [$out]
+
+	mov		r6, $out
+.Lxts_dec_steal:
+	ldrb		r1, [$out]
+	ldrb		r0, [$inp], #1
+	strb		r1, [$out, #0x10]
+	strb		r0, [$out], #1
+
+	subs		$len, #1
+	bhi		.Lxts_dec_steal
+
+	vld1.8		{@XMM[0]}, [r6]
+	mov		r0, sp
+	veor		@XMM[0], @XMM[8]
+	mov		r1, sp
+	vst1.8		{@XMM[0]}, [sp,:128]
+	mov		r2, $key
+
+	bl		AES_decrypt
+
+	vld1.8		{@XMM[0]}, [sp,:128]
+	veor		@XMM[0], @XMM[0], @XMM[8]
+	vst1.8		{@XMM[0]}, [r6]
+	mov		$fp, r4
+#endif
+
+.Lxts_dec_ret:
+	bic		r0, $fp, #0xf
+	vmov.i32	q0, #0
+	vmov.i32	q1, #0
+#ifdef	XTS_CHAIN_TWEAK
+	ldr		r1, [$fp, #0x20+VFP_ABI_FRAME]	@ chain tweak
+#endif
+.Lxts_dec_bzero:				@ wipe key schedule [if any]
+	vstmia		sp!, {q0-q1}
+	cmp		sp, r0
+	bne		.Lxts_dec_bzero
+
+	mov		sp, $fp
+#ifdef	XTS_CHAIN_TWEAK
+	vst1.8		{@XMM[8]}, [r1]
+#endif
+	VFP_ABI_POP
+	ldmia		sp!, {r4-r10, pc}	@ return
+
+.size	bsaes_xts_decrypt,.-bsaes_xts_decrypt
+___
+}
+$code.=<<___;
+#endif
+___
+
+$code =~ s/\`([^\`]*)\`/eval($1)/gem;
+
+open SELF,$0;
+while(<SELF>) {
+	next if (/^#!/);
+        last if (!s/^#/@/ and !/^$/);
+        print;
+}
+close SELF;
+
+print $code;
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/bsaes-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/bsaes-x86_64.pl
new file mode 100644
index 000000000..e62342729
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/bsaes-x86_64.pl
@@ -0,0 +1,3239 @@
+#! /usr/bin/env perl
+# Copyright 2011-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+###################################################################
+### AES-128 [originally in CTR mode]				###
+### bitsliced implementation for Intel Core 2 processors	###
+### requires support of SSE extensions up to SSSE3		###
+### Author: Emilia Käsper and Peter Schwabe			###
+### Date: 2009-03-19						###
+### Public domain						###
+###								###
+### See http://homes.esat.kuleuven.be/~ekasper/#software for	###
+### further information.					###
+###################################################################
+#
+# September 2011.
+#
+# Started as transliteration to "perlasm" the original code has
+# undergone following changes:
+#
+# - code was made position-independent;
+# - rounds were folded into a loop resulting in >5x size reduction
+#   from 12.5KB to 2.2KB;
+# - above was possibile thanks to mixcolumns() modification that
+#   allowed to feed its output back to aesenc[last], this was
+#   achieved at cost of two additional inter-registers moves;
+# - some instruction reordering and interleaving;
+# - this module doesn't implement key setup subroutine, instead it
+#   relies on conversion of "conventional" key schedule as returned
+#   by AES_set_encrypt_key (see discussion below);
+# - first and last round keys are treated differently, which allowed
+#   to skip one shiftrows(), reduce bit-sliced key schedule and
+#   speed-up conversion by 22%;
+# - support for 192- and 256-bit keys was added;
+#
+# Resulting performance in CPU cycles spent to encrypt one byte out
+# of 4096-byte buffer with 128-bit key is:
+#
+#		Emilia's	this(*)		difference
+#
+# Core 2    	9.30		8.69		+7%
+# Nehalem(**) 	7.63		6.88		+11%
+# Atom	    	17.1		16.4		+4%
+# Silvermont	-		12.9
+# Goldmont	-		8.85
+#
+# (*)	Comparison is not completely fair, because "this" is ECB,
+#	i.e. no extra processing such as counter values calculation
+#	and xor-ing input as in Emilia's CTR implementation is
+#	performed. However, the CTR calculations stand for not more
+#	than 1% of total time, so comparison is *rather* fair.
+#
+# (**)	Results were collected on Westmere, which is considered to
+#	be equivalent to Nehalem for this code.
+#
+# As for key schedule conversion subroutine. Interface to OpenSSL
+# relies on per-invocation on-the-fly conversion. This naturally
+# has impact on performance, especially for short inputs. Conversion
+# time in CPU cycles and its ratio to CPU cycles spent in 8x block
+# function is:
+#
+# 		conversion	conversion/8x block
+# Core 2	240		0.22
+# Nehalem	180		0.20
+# Atom		430		0.20
+#
+# The ratio values mean that 128-byte blocks will be processed
+# 16-18% slower, 256-byte blocks - 9-10%, 384-byte blocks - 6-7%,
+# etc. Then keep in mind that input sizes not divisible by 128 are
+# *effectively* slower, especially shortest ones, e.g. consecutive
+# 144-byte blocks are processed 44% slower than one would expect,
+# 272 - 29%, 400 - 22%, etc. Yet, despite all these "shortcomings"
+# it's still faster than ["hyper-threading-safe" code path in]
+# aes-x86_64.pl on all lengths above 64 bytes...
+#
+# October 2011.
+#
+# Add decryption procedure. Performance in CPU cycles spent to decrypt
+# one byte out of 4096-byte buffer with 128-bit key is:
+#
+# Core 2	9.98
+# Nehalem	7.80
+# Atom		17.9
+# Silvermont	14.0
+# Goldmont	10.2
+#
+# November 2011.
+#
+# Add bsaes_xts_[en|de]crypt. Less-than-80-bytes-block performance is
+# suboptimal, but XTS is meant to be used with larger blocks...
+#
+#						<appro@openssl.org>
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+my ($inp,$out,$len,$key,$ivp)=("%rdi","%rsi","%rdx","%rcx");
+my @XMM=map("%xmm$_",(15,0..14));	# best on Atom, +10% over (0..15)
+my $ecb=0;	# suppress unreferenced ECB subroutines, spare some space...
+
+{
+my ($key,$rounds,$const)=("%rax","%r10d","%r11");
+
+sub Sbox {
+# input in  lsb > [b0, b1, b2, b3, b4, b5, b6, b7] < msb
+# output in lsb > [b0, b1, b4, b6, b3, b7, b2, b5] < msb
+my @b=@_[0..7];
+my @t=@_[8..11];
+my @s=@_[12..15];
+	&InBasisChange	(@b);
+	&Inv_GF256	(@b[6,5,0,3,7,1,4,2],@t,@s);
+	&OutBasisChange	(@b[7,1,4,2,6,5,0,3]);
+}
+
+sub InBasisChange {
+# input in  lsb > [b0, b1, b2, b3, b4, b5, b6, b7] < msb
+# output in lsb > [b6, b5, b0, b3, b7, b1, b4, b2] < msb
+my @b=@_[0..7];
+$code.=<<___;
+	pxor	@b[6], @b[5]
+	pxor	@b[1], @b[2]
+	pxor	@b[0], @b[3]
+	pxor	@b[2], @b[6]
+	pxor 	@b[0], @b[5]
+
+	pxor	@b[3], @b[6]
+	pxor	@b[7], @b[3]
+	pxor	@b[5], @b[7]
+	pxor	@b[4], @b[3]
+	pxor	@b[5], @b[4]
+	pxor	@b[1], @b[3]
+
+	pxor	@b[7], @b[2]
+	pxor	@b[5], @b[1]
+___
+}
+
+sub OutBasisChange {
+# input in  lsb > [b0, b1, b2, b3, b4, b5, b6, b7] < msb
+# output in lsb > [b6, b1, b2, b4, b7, b0, b3, b5] < msb
+my @b=@_[0..7];
+$code.=<<___;
+	pxor	@b[6], @b[0]
+	pxor	@b[4], @b[1]
+	pxor	@b[0], @b[2]
+	pxor	@b[6], @b[4]
+	pxor	@b[1], @b[6]
+
+	pxor	@b[5], @b[1]
+	pxor	@b[3], @b[5]
+	pxor	@b[7], @b[3]
+	pxor	@b[5], @b[7]
+	pxor	@b[5], @b[2]
+
+	pxor	@b[7], @b[4]
+___
+}
+
+sub InvSbox {
+# input in lsb 	> [b0, b1, b2, b3, b4, b5, b6, b7] < msb
+# output in lsb	> [b0, b1, b6, b4, b2, b7, b3, b5] < msb
+my @b=@_[0..7];
+my @t=@_[8..11];
+my @s=@_[12..15];
+	&InvInBasisChange	(@b);
+	&Inv_GF256		(@b[5,1,2,6,3,7,0,4],@t,@s);
+	&InvOutBasisChange	(@b[3,7,0,4,5,1,2,6]);
+}
+
+sub InvInBasisChange {		# OutBasisChange in reverse
+my @b=@_[5,1,2,6,3,7,0,4];
+$code.=<<___
+	pxor	@b[7], @b[4]
+
+	pxor	@b[5], @b[7]
+	pxor	@b[5], @b[2]
+	pxor	@b[7], @b[3]
+	pxor	@b[3], @b[5]
+	pxor	@b[5], @b[1]
+
+	pxor	@b[1], @b[6]
+	pxor	@b[0], @b[2]
+	pxor	@b[6], @b[4]
+	pxor	@b[6], @b[0]
+	pxor	@b[4], @b[1]
+___
+}
+
+sub InvOutBasisChange {		# InBasisChange in reverse
+my @b=@_[2,5,7,3,6,1,0,4];
+$code.=<<___;
+	pxor	@b[5], @b[1]
+	pxor	@b[7], @b[2]
+
+	pxor	@b[1], @b[3]
+	pxor	@b[5], @b[4]
+	pxor	@b[5], @b[7]
+	pxor	@b[4], @b[3]
+	 pxor 	@b[0], @b[5]
+	pxor	@b[7], @b[3]
+	 pxor	@b[2], @b[6]
+	 pxor	@b[1], @b[2]
+	pxor	@b[3], @b[6]
+
+	pxor	@b[0], @b[3]
+	pxor	@b[6], @b[5]
+___
+}
+
+sub Mul_GF4 {
+#;*************************************************************
+#;* Mul_GF4: Input x0-x1,y0-y1 Output x0-x1 Temp t0 (8) *
+#;*************************************************************
+my ($x0,$x1,$y0,$y1,$t0)=@_;
+$code.=<<___;
+	movdqa	$y0, $t0
+	pxor 	$y1, $t0
+	pand	$x0, $t0
+	pxor	$x1, $x0
+	pand	$y0, $x1
+	pand	$y1, $x0
+	pxor	$x1, $x0
+	pxor	$t0, $x1
+___
+}
+
+sub Mul_GF4_N {				# not used, see next subroutine
+# multiply and scale by N
+my ($x0,$x1,$y0,$y1,$t0)=@_;
+$code.=<<___;
+	movdqa	$y0, $t0
+	pxor	$y1, $t0
+	pand	$x0, $t0
+	pxor	$x1, $x0
+	pand	$y0, $x1
+	pand	$y1, $x0
+	pxor	$x0, $x1
+	pxor	$t0, $x0
+___
+}
+
+sub Mul_GF4_N_GF4 {
+# interleaved Mul_GF4_N and Mul_GF4
+my ($x0,$x1,$y0,$y1,$t0,
+    $x2,$x3,$y2,$y3,$t1)=@_;
+$code.=<<___;
+	movdqa	$y0, $t0
+	 movdqa	$y2, $t1
+	pxor	$y1, $t0
+	 pxor 	$y3, $t1
+	pand	$x0, $t0
+	 pand	$x2, $t1
+	pxor	$x1, $x0
+	 pxor	$x3, $x2
+	pand	$y0, $x1
+	 pand	$y2, $x3
+	pand	$y1, $x0
+	 pand	$y3, $x2
+	pxor	$x0, $x1
+	 pxor	$x3, $x2
+	pxor	$t0, $x0
+	 pxor	$t1, $x3
+___
+}
+sub Mul_GF16_2 {
+my @x=@_[0..7];
+my @y=@_[8..11];
+my @t=@_[12..15];
+$code.=<<___;
+	movdqa	@x[0], @t[0]
+	movdqa	@x[1], @t[1]
+___
+	&Mul_GF4  	(@x[0], @x[1], @y[0], @y[1], @t[2]);
+$code.=<<___;
+	pxor	@x[2], @t[0]
+	pxor	@x[3], @t[1]
+	pxor	@y[2], @y[0]
+	pxor	@y[3], @y[1]
+___
+	Mul_GF4_N_GF4	(@t[0], @t[1], @y[0], @y[1], @t[3],
+			 @x[2], @x[3], @y[2], @y[3], @t[2]);
+$code.=<<___;
+	pxor	@t[0], @x[0]
+	pxor	@t[0], @x[2]
+	pxor	@t[1], @x[1]
+	pxor	@t[1], @x[3]
+
+	movdqa	@x[4], @t[0]
+	movdqa	@x[5], @t[1]
+	pxor	@x[6], @t[0]
+	pxor	@x[7], @t[1]
+___
+	&Mul_GF4_N_GF4	(@t[0], @t[1], @y[0], @y[1], @t[3],
+			 @x[6], @x[7], @y[2], @y[3], @t[2]);
+$code.=<<___;
+	pxor	@y[2], @y[0]
+	pxor	@y[3], @y[1]
+___
+	&Mul_GF4  	(@x[4], @x[5], @y[0], @y[1], @t[3]);
+$code.=<<___;
+	pxor	@t[0], @x[4]
+	pxor	@t[0], @x[6]
+	pxor	@t[1], @x[5]
+	pxor	@t[1], @x[7]
+___
+}
+sub Inv_GF256 {
+#;********************************************************************
+#;* Inv_GF256: Input x0-x7 Output x0-x7 Temp t0-t3,s0-s3 (144)       *
+#;********************************************************************
+my @x=@_[0..7];
+my @t=@_[8..11];
+my @s=@_[12..15];
+# direct optimizations from hardware
+$code.=<<___;
+	movdqa	@x[4], @t[3]
+	movdqa	@x[5], @t[2]
+	movdqa	@x[1], @t[1]
+	movdqa	@x[7], @s[1]
+	movdqa	@x[0], @s[0]
+
+	pxor	@x[6], @t[3]
+	pxor	@x[7], @t[2]
+	pxor	@x[3], @t[1]
+	 movdqa	@t[3], @s[2]
+	pxor	@x[6], @s[1]
+	 movdqa	@t[2], @t[0]
+	pxor	@x[2], @s[0]
+	 movdqa	@t[3], @s[3]
+
+	por	@t[1], @t[2]
+	por	@s[0], @t[3]
+	pxor	@t[0], @s[3]
+	pand	@s[0], @s[2]
+	pxor	@t[1], @s[0]
+	pand	@t[1], @t[0]
+	pand	@s[0], @s[3]
+	movdqa	@x[3], @s[0]
+	pxor	@x[2], @s[0]
+	pand	@s[0], @s[1]
+	pxor	@s[1], @t[3]
+	pxor	@s[1], @t[2]
+	movdqa	@x[4], @s[1]
+	movdqa	@x[1], @s[0]
+	pxor	@x[5], @s[1]
+	pxor	@x[0], @s[0]
+	movdqa	@s[1], @t[1]
+	pand	@s[0], @s[1]
+	por	@s[0], @t[1]
+	pxor	@s[1], @t[0]
+	pxor	@s[3], @t[3]
+	pxor	@s[2], @t[2]
+	pxor	@s[3], @t[1]
+	movdqa	@x[7], @s[0]
+	pxor	@s[2], @t[0]
+	movdqa	@x[6], @s[1]
+	pxor	@s[2], @t[1]
+	movdqa	@x[5], @s[2]
+	pand	@x[3], @s[0]
+	movdqa	@x[4], @s[3]
+	pand	@x[2], @s[1]
+	pand	@x[1], @s[2]
+	por	@x[0], @s[3]
+	pxor	@s[0], @t[3]
+	pxor	@s[1], @t[2]
+	pxor	@s[2], @t[1]
+	pxor	@s[3], @t[0]
+
+	#Inv_GF16 \t0, \t1, \t2, \t3, \s0, \s1, \s2, \s3
+
+	# new smaller inversion
+
+	movdqa	@t[3], @s[0]
+	pand	@t[1], @t[3]
+	pxor	@t[2], @s[0]
+
+	movdqa	@t[0], @s[2]
+	movdqa	@s[0], @s[3]
+	pxor	@t[3], @s[2]
+	pand	@s[2], @s[3]
+
+	movdqa	@t[1], @s[1]
+	pxor	@t[2], @s[3]
+	pxor	@t[0], @s[1]
+
+	pxor	@t[2], @t[3]
+
+	pand	@t[3], @s[1]
+
+	movdqa	@s[2], @t[2]
+	pxor	@t[0], @s[1]
+
+	pxor	@s[1], @t[2]
+	pxor	@s[1], @t[1]
+
+	pand	@t[0], @t[2]
+
+	pxor	@t[2], @s[2]
+	pxor	@t[2], @t[1]
+
+	pand	@s[3], @s[2]
+
+	pxor	@s[0], @s[2]
+___
+# output in s3, s2, s1, t1
+
+# Mul_GF16_2 \x0, \x1, \x2, \x3, \x4, \x5, \x6, \x7, \t2, \t3, \t0, \t1, \s0, \s1, \s2, \s3
+
+# Mul_GF16_2 \x0, \x1, \x2, \x3, \x4, \x5, \x6, \x7, \s3, \s2, \s1, \t1, \s0, \t0, \t2, \t3
+	&Mul_GF16_2(@x,@s[3,2,1],@t[1],@s[0],@t[0,2,3]);
+
+### output msb > [x3,x2,x1,x0,x7,x6,x5,x4] < lsb
+}
+
+# AES linear components
+
+sub ShiftRows {
+my @x=@_[0..7];
+my $mask=pop;
+$code.=<<___;
+	pxor	0x00($key),@x[0]
+	pxor	0x10($key),@x[1]
+	pxor	0x20($key),@x[2]
+	pxor	0x30($key),@x[3]
+	pshufb	$mask,@x[0]
+	pshufb	$mask,@x[1]
+	pxor	0x40($key),@x[4]
+	pxor	0x50($key),@x[5]
+	pshufb	$mask,@x[2]
+	pshufb	$mask,@x[3]
+	pxor	0x60($key),@x[6]
+	pxor	0x70($key),@x[7]
+	pshufb	$mask,@x[4]
+	pshufb	$mask,@x[5]
+	pshufb	$mask,@x[6]
+	pshufb	$mask,@x[7]
+	lea	0x80($key),$key
+___
+}
+
+sub MixColumns {
+# modified to emit output in order suitable for feeding back to aesenc[last]
+my @x=@_[0..7];
+my @t=@_[8..15];
+my $inv=@_[16];	# optional
+$code.=<<___;
+	pshufd	\$0x93, @x[0], @t[0]	# x0 <<< 32
+	pshufd	\$0x93, @x[1], @t[1]
+	 pxor	@t[0], @x[0]		# x0 ^ (x0 <<< 32)
+	pshufd	\$0x93, @x[2], @t[2]
+	 pxor	@t[1], @x[1]
+	pshufd	\$0x93, @x[3], @t[3]
+	 pxor	@t[2], @x[2]
+	pshufd	\$0x93, @x[4], @t[4]
+	 pxor	@t[3], @x[3]
+	pshufd	\$0x93, @x[5], @t[5]
+	 pxor	@t[4], @x[4]
+	pshufd	\$0x93, @x[6], @t[6]
+	 pxor	@t[5], @x[5]
+	pshufd	\$0x93, @x[7], @t[7]
+	 pxor	@t[6], @x[6]
+	 pxor	@t[7], @x[7]
+
+	pxor	@x[0], @t[1]
+	pxor	@x[7], @t[0]
+	pxor	@x[7], @t[1]
+	 pshufd	\$0x4E, @x[0], @x[0] 	# (x0 ^ (x0 <<< 32)) <<< 64)
+	pxor	@x[1], @t[2]
+	 pshufd	\$0x4E, @x[1], @x[1]
+	pxor	@x[4], @t[5]
+	 pxor	@t[0], @x[0]
+	pxor	@x[5], @t[6]
+	 pxor	@t[1], @x[1]
+	pxor	@x[3], @t[4]
+	 pshufd	\$0x4E, @x[4], @t[0]
+	pxor	@x[6], @t[7]
+	 pshufd	\$0x4E, @x[5], @t[1]
+	pxor	@x[2], @t[3]
+	 pshufd	\$0x4E, @x[3], @x[4]
+	pxor	@x[7], @t[3]
+	 pshufd	\$0x4E, @x[7], @x[5]
+	pxor	@x[7], @t[4]
+	 pshufd	\$0x4E, @x[6], @x[3]
+	pxor	@t[4], @t[0]
+	 pshufd	\$0x4E, @x[2], @x[6]
+	pxor	@t[5], @t[1]
+___
+$code.=<<___ if (!$inv);
+	pxor	@t[3], @x[4]
+	pxor	@t[7], @x[5]
+	pxor	@t[6], @x[3]
+	 movdqa	@t[0], @x[2]
+	pxor	@t[2], @x[6]
+	 movdqa	@t[1], @x[7]
+___
+$code.=<<___ if ($inv);
+	pxor	@x[4], @t[3]
+	pxor	@t[7], @x[5]
+	pxor	@x[3], @t[6]
+	 movdqa	@t[0], @x[3]
+	pxor	@t[2], @x[6]
+	 movdqa	@t[6], @x[2]
+	 movdqa	@t[1], @x[7]
+	 movdqa	@x[6], @x[4]
+	 movdqa	@t[3], @x[6]
+___
+}
+
+sub InvMixColumns_orig {
+my @x=@_[0..7];
+my @t=@_[8..15];
+
+$code.=<<___;
+	# multiplication by 0x0e
+	pshufd	\$0x93, @x[7], @t[7]
+	movdqa	@x[2], @t[2]
+	pxor	@x[5], @x[7]		# 7 5
+	pxor	@x[5], @x[2]		# 2 5
+	pshufd	\$0x93, @x[0], @t[0]
+	movdqa	@x[5], @t[5]
+	pxor	@x[0], @x[5]		# 5 0		[1]
+	pxor	@x[1], @x[0]		# 0 1
+	pshufd	\$0x93, @x[1], @t[1]
+	pxor	@x[2], @x[1]		# 1 25
+	pxor	@x[6], @x[0]		# 01 6		[2]
+	pxor	@x[3], @x[1]		# 125 3		[4]
+	pshufd	\$0x93, @x[3], @t[3]
+	pxor	@x[0], @x[2]		# 25 016	[3]
+	pxor	@x[7], @x[3]		# 3 75
+	pxor	@x[6], @x[7]		# 75 6		[0]
+	pshufd	\$0x93, @x[6], @t[6]
+	movdqa	@x[4], @t[4]
+	pxor	@x[4], @x[6]		# 6 4
+	pxor	@x[3], @x[4]		# 4 375		[6]
+	pxor	@x[7], @x[3]		# 375 756=36
+	pxor	@t[5], @x[6]		# 64 5		[7]
+	pxor	@t[2], @x[3]		# 36 2
+	pxor	@t[4], @x[3]		# 362 4		[5]
+	pshufd	\$0x93, @t[5], @t[5]
+___
+					my @y = @x[7,5,0,2,1,3,4,6];
+$code.=<<___;
+	# multiplication by 0x0b
+	pxor	@y[0], @y[1]
+	pxor	@t[0], @y[0]
+	pxor	@t[1], @y[1]
+	pshufd	\$0x93, @t[2], @t[2]
+	pxor	@t[5], @y[0]
+	pxor	@t[6], @y[1]
+	pxor	@t[7], @y[0]
+	pshufd	\$0x93, @t[4], @t[4]
+	pxor	@t[6], @t[7]		# clobber t[7]
+	pxor	@y[0], @y[1]
+
+	pxor	@t[0], @y[3]
+	pshufd	\$0x93, @t[0], @t[0]
+	pxor	@t[1], @y[2]
+	pxor	@t[1], @y[4]
+	pxor	@t[2], @y[2]
+	pshufd	\$0x93, @t[1], @t[1]
+	pxor	@t[2], @y[3]
+	pxor	@t[2], @y[5]
+	pxor	@t[7], @y[2]
+	pshufd	\$0x93, @t[2], @t[2]
+	pxor	@t[3], @y[3]
+	pxor	@t[3], @y[6]
+	pxor	@t[3], @y[4]
+	pshufd	\$0x93, @t[3], @t[3]
+	pxor	@t[4], @y[7]
+	pxor	@t[4], @y[5]
+	pxor	@t[7], @y[7]
+	pxor	@t[5], @y[3]
+	pxor	@t[4], @y[4]
+	pxor	@t[5], @t[7]		# clobber t[7] even more
+
+	pxor	@t[7], @y[5]
+	pshufd	\$0x93, @t[4], @t[4]
+	pxor	@t[7], @y[6]
+	pxor	@t[7], @y[4]
+
+	pxor	@t[5], @t[7]
+	pshufd	\$0x93, @t[5], @t[5]
+	pxor	@t[6], @t[7]		# restore t[7]
+
+	# multiplication by 0x0d
+	pxor	@y[7], @y[4]
+	pxor	@t[4], @y[7]
+	pshufd	\$0x93, @t[6], @t[6]
+	pxor	@t[0], @y[2]
+	pxor	@t[5], @y[7]
+	pxor	@t[2], @y[2]
+	pshufd	\$0x93, @t[7], @t[7]
+
+	pxor	@y[1], @y[3]
+	pxor	@t[1], @y[1]
+	pxor	@t[0], @y[0]
+	pxor	@t[0], @y[3]
+	pxor	@t[5], @y[1]
+	pxor	@t[5], @y[0]
+	pxor	@t[7], @y[1]
+	pshufd	\$0x93, @t[0], @t[0]
+	pxor	@t[6], @y[0]
+	pxor	@y[1], @y[3]
+	pxor	@t[1], @y[4]
+	pshufd	\$0x93, @t[1], @t[1]
+
+	pxor	@t[7], @y[7]
+	pxor	@t[2], @y[4]
+	pxor	@t[2], @y[5]
+	pshufd	\$0x93, @t[2], @t[2]
+	pxor	@t[6], @y[2]
+	pxor	@t[3], @t[6]		# clobber t[6]
+	pxor	@y[7], @y[4]
+	pxor	@t[6], @y[3]
+
+	pxor	@t[6], @y[6]
+	pxor	@t[5], @y[5]
+	pxor	@t[4], @y[6]
+	pshufd	\$0x93, @t[4], @t[4]
+	pxor	@t[6], @y[5]
+	pxor	@t[7], @y[6]
+	pxor	@t[3], @t[6]		# restore t[6]
+
+	pshufd	\$0x93, @t[5], @t[5]
+	pshufd	\$0x93, @t[6], @t[6]
+	pshufd	\$0x93, @t[7], @t[7]
+	pshufd	\$0x93, @t[3], @t[3]
+
+	# multiplication by 0x09
+	pxor	@y[1], @y[4]
+	pxor	@y[1], @t[1]		# t[1]=y[1]
+	pxor	@t[5], @t[0]		# clobber t[0]
+	pxor	@t[5], @t[1]
+	pxor	@t[0], @y[3]
+	pxor	@y[0], @t[0]		# t[0]=y[0]
+	pxor	@t[6], @t[1]
+	pxor	@t[7], @t[6]		# clobber t[6]
+	pxor	@t[1], @y[4]
+	pxor	@t[4], @y[7]
+	pxor	@y[4], @t[4]		# t[4]=y[4]
+	pxor	@t[3], @y[6]
+	pxor	@y[3], @t[3]		# t[3]=y[3]
+	pxor	@t[2], @y[5]
+	pxor	@y[2], @t[2]		# t[2]=y[2]
+	pxor	@t[7], @t[3]
+	pxor	@y[5], @t[5]		# t[5]=y[5]
+	pxor	@t[6], @t[2]
+	pxor	@t[6], @t[5]
+	pxor	@y[6], @t[6]		# t[6]=y[6]
+	pxor	@y[7], @t[7]		# t[7]=y[7]
+
+	movdqa	@t[0],@XMM[0]
+	movdqa	@t[1],@XMM[1]
+	movdqa	@t[2],@XMM[2]
+	movdqa	@t[3],@XMM[3]
+	movdqa	@t[4],@XMM[4]
+	movdqa	@t[5],@XMM[5]
+	movdqa	@t[6],@XMM[6]
+	movdqa	@t[7],@XMM[7]
+___
+}
+
+sub InvMixColumns {
+my @x=@_[0..7];
+my @t=@_[8..15];
+
+# Thanks to Jussi Kivilinna for providing pointer to
+#
+# | 0e 0b 0d 09 |   | 02 03 01 01 |   | 05 00 04 00 |
+# | 09 0e 0b 0d | = | 01 02 03 01 | x | 00 05 00 04 |
+# | 0d 09 0e 0b |   | 01 01 02 03 |   | 04 00 05 00 |
+# | 0b 0d 09 0e |   | 03 01 01 02 |   | 00 04 00 05 |
+
+$code.=<<___;
+	# multiplication by 0x05-0x00-0x04-0x00
+	pshufd	\$0x4E, @x[0], @t[0]
+	pshufd	\$0x4E, @x[6], @t[6]
+	pxor	@x[0], @t[0]
+	pshufd	\$0x4E, @x[7], @t[7]
+	pxor	@x[6], @t[6]
+	pshufd	\$0x4E, @x[1], @t[1]
+	pxor	@x[7], @t[7]
+	pshufd	\$0x4E, @x[2], @t[2]
+	pxor	@x[1], @t[1]
+	pshufd	\$0x4E, @x[3], @t[3]
+	pxor	@x[2], @t[2]
+	 pxor	@t[6], @x[0]
+	 pxor	@t[6], @x[1]
+	pshufd	\$0x4E, @x[4], @t[4]
+	pxor	@x[3], @t[3]
+	 pxor	@t[0], @x[2]
+	 pxor	@t[1], @x[3]
+	pshufd	\$0x4E, @x[5], @t[5]
+	pxor	@x[4], @t[4]
+	 pxor	@t[7], @x[1]
+	 pxor	@t[2], @x[4]
+	pxor	@x[5], @t[5]
+
+	 pxor	@t[7], @x[2]
+	 pxor	@t[6], @x[3]
+	 pxor	@t[6], @x[4]
+	 pxor	@t[3], @x[5]
+	 pxor	@t[4], @x[6]
+	 pxor	@t[7], @x[4]
+	 pxor	@t[7], @x[5]
+	 pxor	@t[5], @x[7]
+___
+	&MixColumns	(@x,@t,1);	# flipped 2<->3 and 4<->6
+}
+
+sub aesenc {				# not used
+my @b=@_[0..7];
+my @t=@_[8..15];
+$code.=<<___;
+	movdqa	0x30($const),@t[0]	# .LSR
+___
+	&ShiftRows	(@b,@t[0]);
+	&Sbox		(@b,@t);
+	&MixColumns	(@b[0,1,4,6,3,7,2,5],@t);
+}
+
+sub aesenclast {			# not used
+my @b=@_[0..7];
+my @t=@_[8..15];
+$code.=<<___;
+	movdqa	0x40($const),@t[0]	# .LSRM0
+___
+	&ShiftRows	(@b,@t[0]);
+	&Sbox		(@b,@t);
+$code.=<<___
+	pxor	0x00($key),@b[0]
+	pxor	0x10($key),@b[1]
+	pxor	0x20($key),@b[4]
+	pxor	0x30($key),@b[6]
+	pxor	0x40($key),@b[3]
+	pxor	0x50($key),@b[7]
+	pxor	0x60($key),@b[2]
+	pxor	0x70($key),@b[5]
+___
+}
+
+sub swapmove {
+my ($a,$b,$n,$mask,$t)=@_;
+$code.=<<___;
+	movdqa	$b,$t
+	psrlq	\$$n,$b
+	pxor  	$a,$b
+	pand	$mask,$b
+	pxor	$b,$a
+	psllq	\$$n,$b
+	pxor	$t,$b
+___
+}
+sub swapmove2x {
+my ($a0,$b0,$a1,$b1,$n,$mask,$t0,$t1)=@_;
+$code.=<<___;
+	movdqa	$b0,$t0
+	psrlq	\$$n,$b0
+	 movdqa	$b1,$t1
+	 psrlq	\$$n,$b1
+	pxor  	$a0,$b0
+	 pxor  	$a1,$b1
+	pand	$mask,$b0
+	 pand	$mask,$b1
+	pxor	$b0,$a0
+	psllq	\$$n,$b0
+	 pxor	$b1,$a1
+	 psllq	\$$n,$b1
+	pxor	$t0,$b0
+	 pxor	$t1,$b1
+___
+}
+
+sub bitslice {
+my @x=reverse(@_[0..7]);
+my ($t0,$t1,$t2,$t3)=@_[8..11];
+$code.=<<___;
+	movdqa	0x00($const),$t0	# .LBS0
+	movdqa	0x10($const),$t1	# .LBS1
+___
+	&swapmove2x(@x[0,1,2,3],1,$t0,$t2,$t3);
+	&swapmove2x(@x[4,5,6,7],1,$t0,$t2,$t3);
+$code.=<<___;
+	movdqa	0x20($const),$t0	# .LBS2
+___
+	&swapmove2x(@x[0,2,1,3],2,$t1,$t2,$t3);
+	&swapmove2x(@x[4,6,5,7],2,$t1,$t2,$t3);
+
+	&swapmove2x(@x[0,4,1,5],4,$t0,$t2,$t3);
+	&swapmove2x(@x[2,6,3,7],4,$t0,$t2,$t3);
+}
+
+$code.=<<___;
+.text
+
+.extern	asm_AES_encrypt
+.extern	asm_AES_decrypt
+
+.type	_bsaes_encrypt8,\@abi-omnipotent
+.align	64
+_bsaes_encrypt8:
+.cfi_startproc
+	lea	.LBS0(%rip), $const	# constants table
+
+	movdqa	($key), @XMM[9]		# round 0 key
+	lea	0x10($key), $key
+	movdqa	0x50($const), @XMM[8]	# .LM0SR
+	pxor	@XMM[9], @XMM[0]	# xor with round0 key
+	pxor	@XMM[9], @XMM[1]
+	pxor	@XMM[9], @XMM[2]
+	pxor	@XMM[9], @XMM[3]
+	 pshufb	@XMM[8], @XMM[0]
+	 pshufb	@XMM[8], @XMM[1]
+	pxor	@XMM[9], @XMM[4]
+	pxor	@XMM[9], @XMM[5]
+	 pshufb	@XMM[8], @XMM[2]
+	 pshufb	@XMM[8], @XMM[3]
+	pxor	@XMM[9], @XMM[6]
+	pxor	@XMM[9], @XMM[7]
+	 pshufb	@XMM[8], @XMM[4]
+	 pshufb	@XMM[8], @XMM[5]
+	 pshufb	@XMM[8], @XMM[6]
+	 pshufb	@XMM[8], @XMM[7]
+_bsaes_encrypt8_bitslice:
+___
+	&bitslice	(@XMM[0..7, 8..11]);
+$code.=<<___;
+	dec	$rounds
+	jmp	.Lenc_sbox
+.align	16
+.Lenc_loop:
+___
+	&ShiftRows	(@XMM[0..7, 8]);
+$code.=".Lenc_sbox:\n";
+	&Sbox		(@XMM[0..7, 8..15]);
+$code.=<<___;
+	dec	$rounds
+	jl	.Lenc_done
+___
+	&MixColumns	(@XMM[0,1,4,6,3,7,2,5, 8..15]);
+$code.=<<___;
+	movdqa	0x30($const), @XMM[8]	# .LSR
+	jnz	.Lenc_loop
+	movdqa	0x40($const), @XMM[8]	# .LSRM0
+	jmp	.Lenc_loop
+.align	16
+.Lenc_done:
+___
+	# output in lsb > [t0, t1, t4, t6, t3, t7, t2, t5] < msb
+	&bitslice	(@XMM[0,1,4,6,3,7,2,5, 8..11]);
+$code.=<<___;
+	movdqa	($key), @XMM[8]		# last round key
+	pxor	@XMM[8], @XMM[4]
+	pxor	@XMM[8], @XMM[6]
+	pxor	@XMM[8], @XMM[3]
+	pxor	@XMM[8], @XMM[7]
+	pxor	@XMM[8], @XMM[2]
+	pxor	@XMM[8], @XMM[5]
+	pxor	@XMM[8], @XMM[0]
+	pxor	@XMM[8], @XMM[1]
+	ret
+.cfi_endproc
+.size	_bsaes_encrypt8,.-_bsaes_encrypt8
+
+.type	_bsaes_decrypt8,\@abi-omnipotent
+.align	64
+_bsaes_decrypt8:
+.cfi_startproc
+	lea	.LBS0(%rip), $const	# constants table
+
+	movdqa	($key), @XMM[9]		# round 0 key
+	lea	0x10($key), $key
+	movdqa	-0x30($const), @XMM[8]	# .LM0ISR
+	pxor	@XMM[9], @XMM[0]	# xor with round0 key
+	pxor	@XMM[9], @XMM[1]
+	pxor	@XMM[9], @XMM[2]
+	pxor	@XMM[9], @XMM[3]
+	 pshufb	@XMM[8], @XMM[0]
+	 pshufb	@XMM[8], @XMM[1]
+	pxor	@XMM[9], @XMM[4]
+	pxor	@XMM[9], @XMM[5]
+	 pshufb	@XMM[8], @XMM[2]
+	 pshufb	@XMM[8], @XMM[3]
+	pxor	@XMM[9], @XMM[6]
+	pxor	@XMM[9], @XMM[7]
+	 pshufb	@XMM[8], @XMM[4]
+	 pshufb	@XMM[8], @XMM[5]
+	 pshufb	@XMM[8], @XMM[6]
+	 pshufb	@XMM[8], @XMM[7]
+___
+	&bitslice	(@XMM[0..7, 8..11]);
+$code.=<<___;
+	dec	$rounds
+	jmp	.Ldec_sbox
+.align	16
+.Ldec_loop:
+___
+	&ShiftRows	(@XMM[0..7, 8]);
+$code.=".Ldec_sbox:\n";
+	&InvSbox	(@XMM[0..7, 8..15]);
+$code.=<<___;
+	dec	$rounds
+	jl	.Ldec_done
+___
+	&InvMixColumns	(@XMM[0,1,6,4,2,7,3,5, 8..15]);
+$code.=<<___;
+	movdqa	-0x10($const), @XMM[8]	# .LISR
+	jnz	.Ldec_loop
+	movdqa	-0x20($const), @XMM[8]	# .LISRM0
+	jmp	.Ldec_loop
+.align	16
+.Ldec_done:
+___
+	&bitslice	(@XMM[0,1,6,4,2,7,3,5, 8..11]);
+$code.=<<___;
+	movdqa	($key), @XMM[8]		# last round key
+	pxor	@XMM[8], @XMM[6]
+	pxor	@XMM[8], @XMM[4]
+	pxor	@XMM[8], @XMM[2]
+	pxor	@XMM[8], @XMM[7]
+	pxor	@XMM[8], @XMM[3]
+	pxor	@XMM[8], @XMM[5]
+	pxor	@XMM[8], @XMM[0]
+	pxor	@XMM[8], @XMM[1]
+	ret
+.cfi_endproc
+.size	_bsaes_decrypt8,.-_bsaes_decrypt8
+___
+}
+{
+my ($out,$inp,$rounds,$const)=("%rax","%rcx","%r10d","%r11");
+
+sub bitslice_key {
+my @x=reverse(@_[0..7]);
+my ($bs0,$bs1,$bs2,$t2,$t3)=@_[8..12];
+
+	&swapmove	(@x[0,1],1,$bs0,$t2,$t3);
+$code.=<<___;
+	#&swapmove(@x[2,3],1,$t0,$t2,$t3);
+	movdqa	@x[0], @x[2]
+	movdqa	@x[1], @x[3]
+___
+	#&swapmove2x(@x[4,5,6,7],1,$t0,$t2,$t3);
+
+	&swapmove2x	(@x[0,2,1,3],2,$bs1,$t2,$t3);
+$code.=<<___;
+	#&swapmove2x(@x[4,6,5,7],2,$t1,$t2,$t3);
+	movdqa	@x[0], @x[4]
+	movdqa	@x[2], @x[6]
+	movdqa	@x[1], @x[5]
+	movdqa	@x[3], @x[7]
+___
+	&swapmove2x	(@x[0,4,1,5],4,$bs2,$t2,$t3);
+	&swapmove2x	(@x[2,6,3,7],4,$bs2,$t2,$t3);
+}
+
+$code.=<<___;
+.type	_bsaes_key_convert,\@abi-omnipotent
+.align	16
+_bsaes_key_convert:
+.cfi_startproc
+	lea	.Lmasks(%rip), $const
+	movdqu	($inp), %xmm7		# load round 0 key
+	lea	0x10($inp), $inp
+	movdqa	0x00($const), %xmm0	# 0x01...
+	movdqa	0x10($const), %xmm1	# 0x02...
+	movdqa	0x20($const), %xmm2	# 0x04...
+	movdqa	0x30($const), %xmm3	# 0x08...
+	movdqa	0x40($const), %xmm4	# .LM0
+	pcmpeqd	%xmm5, %xmm5		# .LNOT
+
+	movdqu	($inp), %xmm6		# load round 1 key
+	movdqa	%xmm7, ($out)		# save round 0 key
+	lea	0x10($out), $out
+	dec	$rounds
+	jmp	.Lkey_loop
+.align	16
+.Lkey_loop:
+	pshufb	%xmm4, %xmm6		# .LM0
+
+	movdqa	%xmm0,	%xmm8
+	movdqa	%xmm1,	%xmm9
+
+	pand	%xmm6,	%xmm8
+	pand	%xmm6,	%xmm9
+	movdqa	%xmm2,	%xmm10
+	pcmpeqb	%xmm0,	%xmm8
+	psllq	\$4,	%xmm0		# 0x10...
+	movdqa	%xmm3,	%xmm11
+	pcmpeqb	%xmm1,	%xmm9
+	psllq	\$4,	%xmm1		# 0x20...
+
+	pand	%xmm6,	%xmm10
+	pand	%xmm6,	%xmm11
+	movdqa	%xmm0,	%xmm12
+	pcmpeqb	%xmm2,	%xmm10
+	psllq	\$4,	%xmm2		# 0x40...
+	movdqa	%xmm1,	%xmm13
+	pcmpeqb	%xmm3,	%xmm11
+	psllq	\$4,	%xmm3		# 0x80...
+
+	movdqa	%xmm2,	%xmm14
+	movdqa	%xmm3,	%xmm15
+	 pxor	%xmm5,	%xmm8		# "pnot"
+	 pxor	%xmm5,	%xmm9
+
+	pand	%xmm6,	%xmm12
+	pand	%xmm6,	%xmm13
+	 movdqa	%xmm8, 0x00($out)	# write bit-sliced round key
+	pcmpeqb	%xmm0,	%xmm12
+	psrlq	\$4,	%xmm0		# 0x01...
+	 movdqa	%xmm9, 0x10($out)
+	pcmpeqb	%xmm1,	%xmm13
+	psrlq	\$4,	%xmm1		# 0x02...
+	 lea	0x10($inp), $inp
+
+	pand	%xmm6,	%xmm14
+	pand	%xmm6,	%xmm15
+	 movdqa	%xmm10, 0x20($out)
+	pcmpeqb	%xmm2,	%xmm14
+	psrlq	\$4,	%xmm2		# 0x04...
+	 movdqa	%xmm11, 0x30($out)
+	pcmpeqb	%xmm3,	%xmm15
+	psrlq	\$4,	%xmm3		# 0x08...
+	 movdqu	($inp), %xmm6		# load next round key
+
+	pxor	%xmm5, %xmm13		# "pnot"
+	pxor	%xmm5, %xmm14
+	movdqa	%xmm12, 0x40($out)
+	movdqa	%xmm13, 0x50($out)
+	movdqa	%xmm14, 0x60($out)
+	movdqa	%xmm15, 0x70($out)
+	lea	0x80($out),$out
+	dec	$rounds
+	jnz	.Lkey_loop
+
+	movdqa	0x50($const), %xmm7	# .L63
+	#movdqa	%xmm6, ($out)		# don't save last round key
+	ret
+.cfi_endproc
+.size	_bsaes_key_convert,.-_bsaes_key_convert
+___
+}
+
+if (0 && !$win64) {	# following four functions are unsupported interface
+			# used for benchmarking...
+$code.=<<___;
+.globl	bsaes_enc_key_convert
+.type	bsaes_enc_key_convert,\@function,2
+.align	16
+bsaes_enc_key_convert:
+	mov	240($inp),%r10d		# pass rounds
+	mov	$inp,%rcx		# pass key
+	mov	$out,%rax		# pass key schedule
+	call	_bsaes_key_convert
+	pxor	%xmm6,%xmm7		# fix up last round key
+	movdqa	%xmm7,(%rax)		# save last round key
+	ret
+.size	bsaes_enc_key_convert,.-bsaes_enc_key_convert
+
+.globl	bsaes_encrypt_128
+.type	bsaes_encrypt_128,\@function,4
+.align	16
+bsaes_encrypt_128:
+.Lenc128_loop:
+	movdqu	0x00($inp), @XMM[0]	# load input
+	movdqu	0x10($inp), @XMM[1]
+	movdqu	0x20($inp), @XMM[2]
+	movdqu	0x30($inp), @XMM[3]
+	movdqu	0x40($inp), @XMM[4]
+	movdqu	0x50($inp), @XMM[5]
+	movdqu	0x60($inp), @XMM[6]
+	movdqu	0x70($inp), @XMM[7]
+	mov	$key, %rax		# pass the $key
+	lea	0x80($inp), $inp
+	mov	\$10,%r10d
+
+	call	_bsaes_encrypt8
+
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[4], 0x20($out)
+	movdqu	@XMM[6], 0x30($out)
+	movdqu	@XMM[3], 0x40($out)
+	movdqu	@XMM[7], 0x50($out)
+	movdqu	@XMM[2], 0x60($out)
+	movdqu	@XMM[5], 0x70($out)
+	lea	0x80($out), $out
+	sub	\$0x80,$len
+	ja	.Lenc128_loop
+	ret
+.size	bsaes_encrypt_128,.-bsaes_encrypt_128
+
+.globl	bsaes_dec_key_convert
+.type	bsaes_dec_key_convert,\@function,2
+.align	16
+bsaes_dec_key_convert:
+	mov	240($inp),%r10d		# pass rounds
+	mov	$inp,%rcx		# pass key
+	mov	$out,%rax		# pass key schedule
+	call	_bsaes_key_convert
+	pxor	($out),%xmm7		# fix up round 0 key
+	movdqa	%xmm6,(%rax)		# save last round key
+	movdqa	%xmm7,($out)
+	ret
+.size	bsaes_dec_key_convert,.-bsaes_dec_key_convert
+
+.globl	bsaes_decrypt_128
+.type	bsaes_decrypt_128,\@function,4
+.align	16
+bsaes_decrypt_128:
+.Ldec128_loop:
+	movdqu	0x00($inp), @XMM[0]	# load input
+	movdqu	0x10($inp), @XMM[1]
+	movdqu	0x20($inp), @XMM[2]
+	movdqu	0x30($inp), @XMM[3]
+	movdqu	0x40($inp), @XMM[4]
+	movdqu	0x50($inp), @XMM[5]
+	movdqu	0x60($inp), @XMM[6]
+	movdqu	0x70($inp), @XMM[7]
+	mov	$key, %rax		# pass the $key
+	lea	0x80($inp), $inp
+	mov	\$10,%r10d
+
+	call	_bsaes_decrypt8
+
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[6], 0x20($out)
+	movdqu	@XMM[4], 0x30($out)
+	movdqu	@XMM[2], 0x40($out)
+	movdqu	@XMM[7], 0x50($out)
+	movdqu	@XMM[3], 0x60($out)
+	movdqu	@XMM[5], 0x70($out)
+	lea	0x80($out), $out
+	sub	\$0x80,$len
+	ja	.Ldec128_loop
+	ret
+.size	bsaes_decrypt_128,.-bsaes_decrypt_128
+___
+}
+{
+######################################################################
+#
+# OpenSSL interface
+#
+my ($arg1,$arg2,$arg3,$arg4,$arg5,$arg6)=$win64	? ("%rcx","%rdx","%r8","%r9","%r10","%r11d")
+						: ("%rdi","%rsi","%rdx","%rcx","%r8","%r9d");
+my ($inp,$out,$len,$key)=("%r12","%r13","%r14","%r15");
+
+if ($ecb) {
+$code.=<<___;
+.globl	bsaes_ecb_encrypt_blocks
+.type	bsaes_ecb_encrypt_blocks,\@abi-omnipotent
+.align	16
+bsaes_ecb_encrypt_blocks:
+.cfi_startproc
+	mov	%rsp, %rax
+.Lecb_enc_prologue:
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	lea	-0x48(%rsp),%rsp
+.cfi_adjust_cfa_offset	0x48
+___
+$code.=<<___ if ($win64);
+	lea	-0xa0(%rsp), %rsp
+	movaps	%xmm6, 0x40(%rsp)
+	movaps	%xmm7, 0x50(%rsp)
+	movaps	%xmm8, 0x60(%rsp)
+	movaps	%xmm9, 0x70(%rsp)
+	movaps	%xmm10, 0x80(%rsp)
+	movaps	%xmm11, 0x90(%rsp)
+	movaps	%xmm12, 0xa0(%rsp)
+	movaps	%xmm13, 0xb0(%rsp)
+	movaps	%xmm14, 0xc0(%rsp)
+	movaps	%xmm15, 0xd0(%rsp)
+.Lecb_enc_body:
+___
+$code.=<<___;
+	mov	%rsp,%rbp		# backup %rsp
+.cfi_def_cfa_register	%rbp
+	mov	240($arg4),%eax		# rounds
+	mov	$arg1,$inp		# backup arguments
+	mov	$arg2,$out
+	mov	$arg3,$len
+	mov	$arg4,$key
+	cmp	\$8,$arg3
+	jb	.Lecb_enc_short
+
+	mov	%eax,%ebx		# backup rounds
+	shl	\$7,%rax		# 128 bytes per inner round key
+	sub	\$`128-32`,%rax		# size of bit-sliced key schedule
+	sub	%rax,%rsp
+	mov	%rsp,%rax		# pass key schedule
+	mov	$key,%rcx		# pass key
+	mov	%ebx,%r10d		# pass rounds
+	call	_bsaes_key_convert
+	pxor	%xmm6,%xmm7		# fix up last round key
+	movdqa	%xmm7,(%rax)		# save last round key
+
+	sub	\$8,$len
+.Lecb_enc_loop:
+	movdqu	0x00($inp), @XMM[0]	# load input
+	movdqu	0x10($inp), @XMM[1]
+	movdqu	0x20($inp), @XMM[2]
+	movdqu	0x30($inp), @XMM[3]
+	movdqu	0x40($inp), @XMM[4]
+	movdqu	0x50($inp), @XMM[5]
+	mov	%rsp, %rax		# pass key schedule
+	movdqu	0x60($inp), @XMM[6]
+	mov	%ebx,%r10d		# pass rounds
+	movdqu	0x70($inp), @XMM[7]
+	lea	0x80($inp), $inp
+
+	call	_bsaes_encrypt8
+
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[4], 0x20($out)
+	movdqu	@XMM[6], 0x30($out)
+	movdqu	@XMM[3], 0x40($out)
+	movdqu	@XMM[7], 0x50($out)
+	movdqu	@XMM[2], 0x60($out)
+	movdqu	@XMM[5], 0x70($out)
+	lea	0x80($out), $out
+	sub	\$8,$len
+	jnc	.Lecb_enc_loop
+
+	add	\$8,$len
+	jz	.Lecb_enc_done
+
+	movdqu	0x00($inp), @XMM[0]	# load input
+	mov	%rsp, %rax		# pass key schedule
+	mov	%ebx,%r10d		# pass rounds
+	cmp	\$2,$len
+	jb	.Lecb_enc_one
+	movdqu	0x10($inp), @XMM[1]
+	je	.Lecb_enc_two
+	movdqu	0x20($inp), @XMM[2]
+	cmp	\$4,$len
+	jb	.Lecb_enc_three
+	movdqu	0x30($inp), @XMM[3]
+	je	.Lecb_enc_four
+	movdqu	0x40($inp), @XMM[4]
+	cmp	\$6,$len
+	jb	.Lecb_enc_five
+	movdqu	0x50($inp), @XMM[5]
+	je	.Lecb_enc_six
+	movdqu	0x60($inp), @XMM[6]
+	call	_bsaes_encrypt8
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[4], 0x20($out)
+	movdqu	@XMM[6], 0x30($out)
+	movdqu	@XMM[3], 0x40($out)
+	movdqu	@XMM[7], 0x50($out)
+	movdqu	@XMM[2], 0x60($out)
+	jmp	.Lecb_enc_done
+.align	16
+.Lecb_enc_six:
+	call	_bsaes_encrypt8
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[4], 0x20($out)
+	movdqu	@XMM[6], 0x30($out)
+	movdqu	@XMM[3], 0x40($out)
+	movdqu	@XMM[7], 0x50($out)
+	jmp	.Lecb_enc_done
+.align	16
+.Lecb_enc_five:
+	call	_bsaes_encrypt8
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[4], 0x20($out)
+	movdqu	@XMM[6], 0x30($out)
+	movdqu	@XMM[3], 0x40($out)
+	jmp	.Lecb_enc_done
+.align	16
+.Lecb_enc_four:
+	call	_bsaes_encrypt8
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[4], 0x20($out)
+	movdqu	@XMM[6], 0x30($out)
+	jmp	.Lecb_enc_done
+.align	16
+.Lecb_enc_three:
+	call	_bsaes_encrypt8
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[4], 0x20($out)
+	jmp	.Lecb_enc_done
+.align	16
+.Lecb_enc_two:
+	call	_bsaes_encrypt8
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	jmp	.Lecb_enc_done
+.align	16
+.Lecb_enc_one:
+	call	_bsaes_encrypt8
+	movdqu	@XMM[0], 0x00($out)	# write output
+	jmp	.Lecb_enc_done
+.align	16
+.Lecb_enc_short:
+	lea	($inp), $arg1
+	lea	($out), $arg2
+	lea	($key), $arg3
+	call	asm_AES_encrypt
+	lea	16($inp), $inp
+	lea	16($out), $out
+	dec	$len
+	jnz	.Lecb_enc_short
+
+.Lecb_enc_done:
+	lea	(%rsp),%rax
+	pxor	%xmm0, %xmm0
+.Lecb_enc_bzero:			# wipe key schedule [if any]
+	movdqa	%xmm0, 0x00(%rax)
+	movdqa	%xmm0, 0x10(%rax)
+	lea	0x20(%rax), %rax
+	cmp	%rax, %rbp
+	jb	.Lecb_enc_bzero
+
+	lea	0x78(%rbp),%rax
+.cfi_def_cfa	%rax,8
+___
+$code.=<<___ if ($win64);
+	movaps	0x40(%rbp), %xmm6
+	movaps	0x50(%rbp), %xmm7
+	movaps	0x60(%rbp), %xmm8
+	movaps	0x70(%rbp), %xmm9
+	movaps	0x80(%rbp), %xmm10
+	movaps	0x90(%rbp), %xmm11
+	movaps	0xa0(%rbp), %xmm12
+	movaps	0xb0(%rbp), %xmm13
+	movaps	0xc0(%rbp), %xmm14
+	movaps	0xd0(%rbp), %xmm15
+	lea	0xa0(%rax), %rax
+.Lecb_enc_tail:
+___
+$code.=<<___;
+	mov	-48(%rax), %r15
+.cfi_restore	%r15
+	mov	-40(%rax), %r14
+.cfi_restore	%r14
+	mov	-32(%rax), %r13
+.cfi_restore	%r13
+	mov	-24(%rax), %r12
+.cfi_restore	%r12
+	mov	-16(%rax), %rbx
+.cfi_restore	%rbx
+	mov	-8(%rax), %rbp
+.cfi_restore	%rbp
+	lea	(%rax), %rsp		# restore %rsp
+.cfi_def_cfa_register	%rsp
+.Lecb_enc_epilogue:
+	ret
+.cfi_endproc
+.size	bsaes_ecb_encrypt_blocks,.-bsaes_ecb_encrypt_blocks
+
+.globl	bsaes_ecb_decrypt_blocks
+.type	bsaes_ecb_decrypt_blocks,\@abi-omnipotent
+.align	16
+bsaes_ecb_decrypt_blocks:
+.cfi_startproc
+	mov	%rsp, %rax
+.Lecb_dec_prologue:
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	lea	-0x48(%rsp),%rsp
+.cfi_adjust_cfa_offset	0x48
+___
+$code.=<<___ if ($win64);
+	lea	-0xa0(%rsp), %rsp
+	movaps	%xmm6, 0x40(%rsp)
+	movaps	%xmm7, 0x50(%rsp)
+	movaps	%xmm8, 0x60(%rsp)
+	movaps	%xmm9, 0x70(%rsp)
+	movaps	%xmm10, 0x80(%rsp)
+	movaps	%xmm11, 0x90(%rsp)
+	movaps	%xmm12, 0xa0(%rsp)
+	movaps	%xmm13, 0xb0(%rsp)
+	movaps	%xmm14, 0xc0(%rsp)
+	movaps	%xmm15, 0xd0(%rsp)
+.Lecb_dec_body:
+___
+$code.=<<___;
+	mov	%rsp,%rbp		# backup %rsp
+.cfi_def_cfa_register	%rbp
+	mov	240($arg4),%eax		# rounds
+	mov	$arg1,$inp		# backup arguments
+	mov	$arg2,$out
+	mov	$arg3,$len
+	mov	$arg4,$key
+	cmp	\$8,$arg3
+	jb	.Lecb_dec_short
+
+	mov	%eax,%ebx		# backup rounds
+	shl	\$7,%rax		# 128 bytes per inner round key
+	sub	\$`128-32`,%rax		# size of bit-sliced key schedule
+	sub	%rax,%rsp
+	mov	%rsp,%rax		# pass key schedule
+	mov	$key,%rcx		# pass key
+	mov	%ebx,%r10d		# pass rounds
+	call	_bsaes_key_convert
+	pxor	(%rsp),%xmm7		# fix up 0 round key
+	movdqa	%xmm6,(%rax)		# save last round key
+	movdqa	%xmm7,(%rsp)
+
+	sub	\$8,$len
+.Lecb_dec_loop:
+	movdqu	0x00($inp), @XMM[0]	# load input
+	movdqu	0x10($inp), @XMM[1]
+	movdqu	0x20($inp), @XMM[2]
+	movdqu	0x30($inp), @XMM[3]
+	movdqu	0x40($inp), @XMM[4]
+	movdqu	0x50($inp), @XMM[5]
+	mov	%rsp, %rax		# pass key schedule
+	movdqu	0x60($inp), @XMM[6]
+	mov	%ebx,%r10d		# pass rounds
+	movdqu	0x70($inp), @XMM[7]
+	lea	0x80($inp), $inp
+
+	call	_bsaes_decrypt8
+
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[6], 0x20($out)
+	movdqu	@XMM[4], 0x30($out)
+	movdqu	@XMM[2], 0x40($out)
+	movdqu	@XMM[7], 0x50($out)
+	movdqu	@XMM[3], 0x60($out)
+	movdqu	@XMM[5], 0x70($out)
+	lea	0x80($out), $out
+	sub	\$8,$len
+	jnc	.Lecb_dec_loop
+
+	add	\$8,$len
+	jz	.Lecb_dec_done
+
+	movdqu	0x00($inp), @XMM[0]	# load input
+	mov	%rsp, %rax		# pass key schedule
+	mov	%ebx,%r10d		# pass rounds
+	cmp	\$2,$len
+	jb	.Lecb_dec_one
+	movdqu	0x10($inp), @XMM[1]
+	je	.Lecb_dec_two
+	movdqu	0x20($inp), @XMM[2]
+	cmp	\$4,$len
+	jb	.Lecb_dec_three
+	movdqu	0x30($inp), @XMM[3]
+	je	.Lecb_dec_four
+	movdqu	0x40($inp), @XMM[4]
+	cmp	\$6,$len
+	jb	.Lecb_dec_five
+	movdqu	0x50($inp), @XMM[5]
+	je	.Lecb_dec_six
+	movdqu	0x60($inp), @XMM[6]
+	call	_bsaes_decrypt8
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[6], 0x20($out)
+	movdqu	@XMM[4], 0x30($out)
+	movdqu	@XMM[2], 0x40($out)
+	movdqu	@XMM[7], 0x50($out)
+	movdqu	@XMM[3], 0x60($out)
+	jmp	.Lecb_dec_done
+.align	16
+.Lecb_dec_six:
+	call	_bsaes_decrypt8
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[6], 0x20($out)
+	movdqu	@XMM[4], 0x30($out)
+	movdqu	@XMM[2], 0x40($out)
+	movdqu	@XMM[7], 0x50($out)
+	jmp	.Lecb_dec_done
+.align	16
+.Lecb_dec_five:
+	call	_bsaes_decrypt8
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[6], 0x20($out)
+	movdqu	@XMM[4], 0x30($out)
+	movdqu	@XMM[2], 0x40($out)
+	jmp	.Lecb_dec_done
+.align	16
+.Lecb_dec_four:
+	call	_bsaes_decrypt8
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[6], 0x20($out)
+	movdqu	@XMM[4], 0x30($out)
+	jmp	.Lecb_dec_done
+.align	16
+.Lecb_dec_three:
+	call	_bsaes_decrypt8
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[6], 0x20($out)
+	jmp	.Lecb_dec_done
+.align	16
+.Lecb_dec_two:
+	call	_bsaes_decrypt8
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	jmp	.Lecb_dec_done
+.align	16
+.Lecb_dec_one:
+	call	_bsaes_decrypt8
+	movdqu	@XMM[0], 0x00($out)	# write output
+	jmp	.Lecb_dec_done
+.align	16
+.Lecb_dec_short:
+	lea	($inp), $arg1
+	lea	($out), $arg2
+	lea	($key), $arg3
+	call	asm_AES_decrypt
+	lea	16($inp), $inp
+	lea	16($out), $out
+	dec	$len
+	jnz	.Lecb_dec_short
+
+.Lecb_dec_done:
+	lea	(%rsp),%rax
+	pxor	%xmm0, %xmm0
+.Lecb_dec_bzero:			# wipe key schedule [if any]
+	movdqa	%xmm0, 0x00(%rax)
+	movdqa	%xmm0, 0x10(%rax)
+	lea	0x20(%rax), %rax
+	cmp	%rax, %rbp
+	jb	.Lecb_dec_bzero
+
+	lea	0x78(%rbp),%rax
+.cfi_def_cfa	%rax,8
+___
+$code.=<<___ if ($win64);
+	movaps	0x40(%rbp), %xmm6
+	movaps	0x50(%rbp), %xmm7
+	movaps	0x60(%rbp), %xmm8
+	movaps	0x70(%rbp), %xmm9
+	movaps	0x80(%rbp), %xmm10
+	movaps	0x90(%rbp), %xmm11
+	movaps	0xa0(%rbp), %xmm12
+	movaps	0xb0(%rbp), %xmm13
+	movaps	0xc0(%rbp), %xmm14
+	movaps	0xd0(%rbp), %xmm15
+	lea	0xa0(%rax), %rax
+.Lecb_dec_tail:
+___
+$code.=<<___;
+	mov	-48(%rax), %r15
+.cfi_restore	%r15
+	mov	-40(%rax), %r14
+.cfi_restore	%r14
+	mov	-32(%rax), %r13
+.cfi_restore	%r13
+	mov	-24(%rax), %r12
+.cfi_restore	%r12
+	mov	-16(%rax), %rbx
+.cfi_restore	%rbx
+	mov	-8(%rax), %rbp
+.cfi_restore	%rbp
+	lea	(%rax), %rsp		# restore %rsp
+.cfi_def_cfa_register	%rsp
+.Lecb_dec_epilogue:
+	ret
+.cfi_endproc
+.size	bsaes_ecb_decrypt_blocks,.-bsaes_ecb_decrypt_blocks
+___
+}
+$code.=<<___;
+.extern	asm_AES_cbc_encrypt
+.globl	bsaes_cbc_encrypt
+.type	bsaes_cbc_encrypt,\@abi-omnipotent
+.align	16
+bsaes_cbc_encrypt:
+.cfi_startproc
+___
+$code.=<<___ if ($win64);
+	mov	48(%rsp),$arg6		# pull direction flag
+___
+$code.=<<___;
+	cmp	\$0,$arg6
+	jne	asm_AES_cbc_encrypt
+	cmp	\$128,$arg3
+	jb	asm_AES_cbc_encrypt
+
+	mov	%rsp, %rax
+.Lcbc_dec_prologue:
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	lea	-0x48(%rsp), %rsp
+.cfi_adjust_cfa_offset	0x48
+___
+$code.=<<___ if ($win64);
+	mov	0xa0(%rsp),$arg5	# pull ivp
+	lea	-0xa0(%rsp), %rsp
+	movaps	%xmm6, 0x40(%rsp)
+	movaps	%xmm7, 0x50(%rsp)
+	movaps	%xmm8, 0x60(%rsp)
+	movaps	%xmm9, 0x70(%rsp)
+	movaps	%xmm10, 0x80(%rsp)
+	movaps	%xmm11, 0x90(%rsp)
+	movaps	%xmm12, 0xa0(%rsp)
+	movaps	%xmm13, 0xb0(%rsp)
+	movaps	%xmm14, 0xc0(%rsp)
+	movaps	%xmm15, 0xd0(%rsp)
+.Lcbc_dec_body:
+___
+$code.=<<___;
+	mov	%rsp, %rbp		# backup %rsp
+.cfi_def_cfa_register	%rbp
+	mov	240($arg4), %eax	# rounds
+	mov	$arg1, $inp		# backup arguments
+	mov	$arg2, $out
+	mov	$arg3, $len
+	mov	$arg4, $key
+	mov	$arg5, %rbx
+	shr	\$4, $len		# bytes to blocks
+
+	mov	%eax, %edx		# rounds
+	shl	\$7, %rax		# 128 bytes per inner round key
+	sub	\$`128-32`, %rax	# size of bit-sliced key schedule
+	sub	%rax, %rsp
+
+	mov	%rsp, %rax		# pass key schedule
+	mov	$key, %rcx		# pass key
+	mov	%edx, %r10d		# pass rounds
+	call	_bsaes_key_convert
+	pxor	(%rsp),%xmm7		# fix up 0 round key
+	movdqa	%xmm6,(%rax)		# save last round key
+	movdqa	%xmm7,(%rsp)
+
+	movdqu	(%rbx), @XMM[15]	# load IV
+	sub	\$8,$len
+.Lcbc_dec_loop:
+	movdqu	0x00($inp), @XMM[0]	# load input
+	movdqu	0x10($inp), @XMM[1]
+	movdqu	0x20($inp), @XMM[2]
+	movdqu	0x30($inp), @XMM[3]
+	movdqu	0x40($inp), @XMM[4]
+	movdqu	0x50($inp), @XMM[5]
+	mov	%rsp, %rax		# pass key schedule
+	movdqu	0x60($inp), @XMM[6]
+	mov	%edx,%r10d		# pass rounds
+	movdqu	0x70($inp), @XMM[7]
+	movdqa	@XMM[15], 0x20(%rbp)	# put aside IV
+
+	call	_bsaes_decrypt8
+
+	pxor	0x20(%rbp), @XMM[0]	# ^= IV
+	movdqu	0x00($inp), @XMM[8]	# re-load input
+	movdqu	0x10($inp), @XMM[9]
+	pxor	@XMM[8], @XMM[1]
+	movdqu	0x20($inp), @XMM[10]
+	pxor	@XMM[9], @XMM[6]
+	movdqu	0x30($inp), @XMM[11]
+	pxor	@XMM[10], @XMM[4]
+	movdqu	0x40($inp), @XMM[12]
+	pxor	@XMM[11], @XMM[2]
+	movdqu	0x50($inp), @XMM[13]
+	pxor	@XMM[12], @XMM[7]
+	movdqu	0x60($inp), @XMM[14]
+	pxor	@XMM[13], @XMM[3]
+	movdqu	0x70($inp), @XMM[15]	# IV
+	pxor	@XMM[14], @XMM[5]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	lea	0x80($inp), $inp
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[6], 0x20($out)
+	movdqu	@XMM[4], 0x30($out)
+	movdqu	@XMM[2], 0x40($out)
+	movdqu	@XMM[7], 0x50($out)
+	movdqu	@XMM[3], 0x60($out)
+	movdqu	@XMM[5], 0x70($out)
+	lea	0x80($out), $out
+	sub	\$8,$len
+	jnc	.Lcbc_dec_loop
+
+	add	\$8,$len
+	jz	.Lcbc_dec_done
+
+	movdqu	0x00($inp), @XMM[0]	# load input
+	mov	%rsp, %rax		# pass key schedule
+	mov	%edx, %r10d		# pass rounds
+	cmp	\$2,$len
+	jb	.Lcbc_dec_one
+	movdqu	0x10($inp), @XMM[1]
+	je	.Lcbc_dec_two
+	movdqu	0x20($inp), @XMM[2]
+	cmp	\$4,$len
+	jb	.Lcbc_dec_three
+	movdqu	0x30($inp), @XMM[3]
+	je	.Lcbc_dec_four
+	movdqu	0x40($inp), @XMM[4]
+	cmp	\$6,$len
+	jb	.Lcbc_dec_five
+	movdqu	0x50($inp), @XMM[5]
+	je	.Lcbc_dec_six
+	movdqu	0x60($inp), @XMM[6]
+	movdqa	@XMM[15], 0x20(%rbp)	# put aside IV
+	call	_bsaes_decrypt8
+	pxor	0x20(%rbp), @XMM[0]	# ^= IV
+	movdqu	0x00($inp), @XMM[8]	# re-load input
+	movdqu	0x10($inp), @XMM[9]
+	pxor	@XMM[8], @XMM[1]
+	movdqu	0x20($inp), @XMM[10]
+	pxor	@XMM[9], @XMM[6]
+	movdqu	0x30($inp), @XMM[11]
+	pxor	@XMM[10], @XMM[4]
+	movdqu	0x40($inp), @XMM[12]
+	pxor	@XMM[11], @XMM[2]
+	movdqu	0x50($inp), @XMM[13]
+	pxor	@XMM[12], @XMM[7]
+	movdqu	0x60($inp), @XMM[15]	# IV
+	pxor	@XMM[13], @XMM[3]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[6], 0x20($out)
+	movdqu	@XMM[4], 0x30($out)
+	movdqu	@XMM[2], 0x40($out)
+	movdqu	@XMM[7], 0x50($out)
+	movdqu	@XMM[3], 0x60($out)
+	jmp	.Lcbc_dec_done
+.align	16
+.Lcbc_dec_six:
+	movdqa	@XMM[15], 0x20(%rbp)	# put aside IV
+	call	_bsaes_decrypt8
+	pxor	0x20(%rbp), @XMM[0]	# ^= IV
+	movdqu	0x00($inp), @XMM[8]	# re-load input
+	movdqu	0x10($inp), @XMM[9]
+	pxor	@XMM[8], @XMM[1]
+	movdqu	0x20($inp), @XMM[10]
+	pxor	@XMM[9], @XMM[6]
+	movdqu	0x30($inp), @XMM[11]
+	pxor	@XMM[10], @XMM[4]
+	movdqu	0x40($inp), @XMM[12]
+	pxor	@XMM[11], @XMM[2]
+	movdqu	0x50($inp), @XMM[15]	# IV
+	pxor	@XMM[12], @XMM[7]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[6], 0x20($out)
+	movdqu	@XMM[4], 0x30($out)
+	movdqu	@XMM[2], 0x40($out)
+	movdqu	@XMM[7], 0x50($out)
+	jmp	.Lcbc_dec_done
+.align	16
+.Lcbc_dec_five:
+	movdqa	@XMM[15], 0x20(%rbp)	# put aside IV
+	call	_bsaes_decrypt8
+	pxor	0x20(%rbp), @XMM[0]	# ^= IV
+	movdqu	0x00($inp), @XMM[8]	# re-load input
+	movdqu	0x10($inp), @XMM[9]
+	pxor	@XMM[8], @XMM[1]
+	movdqu	0x20($inp), @XMM[10]
+	pxor	@XMM[9], @XMM[6]
+	movdqu	0x30($inp), @XMM[11]
+	pxor	@XMM[10], @XMM[4]
+	movdqu	0x40($inp), @XMM[15]	# IV
+	pxor	@XMM[11], @XMM[2]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[6], 0x20($out)
+	movdqu	@XMM[4], 0x30($out)
+	movdqu	@XMM[2], 0x40($out)
+	jmp	.Lcbc_dec_done
+.align	16
+.Lcbc_dec_four:
+	movdqa	@XMM[15], 0x20(%rbp)	# put aside IV
+	call	_bsaes_decrypt8
+	pxor	0x20(%rbp), @XMM[0]	# ^= IV
+	movdqu	0x00($inp), @XMM[8]	# re-load input
+	movdqu	0x10($inp), @XMM[9]
+	pxor	@XMM[8], @XMM[1]
+	movdqu	0x20($inp), @XMM[10]
+	pxor	@XMM[9], @XMM[6]
+	movdqu	0x30($inp), @XMM[15]	# IV
+	pxor	@XMM[10], @XMM[4]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[6], 0x20($out)
+	movdqu	@XMM[4], 0x30($out)
+	jmp	.Lcbc_dec_done
+.align	16
+.Lcbc_dec_three:
+	movdqa	@XMM[15], 0x20(%rbp)	# put aside IV
+	call	_bsaes_decrypt8
+	pxor	0x20(%rbp), @XMM[0]	# ^= IV
+	movdqu	0x00($inp), @XMM[8]	# re-load input
+	movdqu	0x10($inp), @XMM[9]
+	pxor	@XMM[8], @XMM[1]
+	movdqu	0x20($inp), @XMM[15]	# IV
+	pxor	@XMM[9], @XMM[6]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[6], 0x20($out)
+	jmp	.Lcbc_dec_done
+.align	16
+.Lcbc_dec_two:
+	movdqa	@XMM[15], 0x20(%rbp)	# put aside IV
+	call	_bsaes_decrypt8
+	pxor	0x20(%rbp), @XMM[0]	# ^= IV
+	movdqu	0x00($inp), @XMM[8]	# re-load input
+	movdqu	0x10($inp), @XMM[15]	# IV
+	pxor	@XMM[8], @XMM[1]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	jmp	.Lcbc_dec_done
+.align	16
+.Lcbc_dec_one:
+	lea	($inp), $arg1
+	lea	0x20(%rbp), $arg2	# buffer output
+	lea	($key), $arg3
+	call	asm_AES_decrypt		# doesn't touch %xmm
+	pxor	0x20(%rbp), @XMM[15]	# ^= IV
+	movdqu	@XMM[15], ($out)	# write output
+	movdqa	@XMM[0], @XMM[15]	# IV
+
+.Lcbc_dec_done:
+	movdqu	@XMM[15], (%rbx)	# return IV
+	lea	(%rsp), %rax
+	pxor	%xmm0, %xmm0
+.Lcbc_dec_bzero:			# wipe key schedule [if any]
+	movdqa	%xmm0, 0x00(%rax)
+	movdqa	%xmm0, 0x10(%rax)
+	lea	0x20(%rax), %rax
+	cmp	%rax, %rbp
+	ja	.Lcbc_dec_bzero
+
+	lea	0x78(%rbp),%rax
+.cfi_def_cfa	%rax,8
+___
+$code.=<<___ if ($win64);
+	movaps	0x40(%rbp), %xmm6
+	movaps	0x50(%rbp), %xmm7
+	movaps	0x60(%rbp), %xmm8
+	movaps	0x70(%rbp), %xmm9
+	movaps	0x80(%rbp), %xmm10
+	movaps	0x90(%rbp), %xmm11
+	movaps	0xa0(%rbp), %xmm12
+	movaps	0xb0(%rbp), %xmm13
+	movaps	0xc0(%rbp), %xmm14
+	movaps	0xd0(%rbp), %xmm15
+	lea	0xa0(%rax), %rax
+.Lcbc_dec_tail:
+___
+$code.=<<___;
+	mov	-48(%rax), %r15
+.cfi_restore	%r15
+	mov	-40(%rax), %r14
+.cfi_restore	%r14
+	mov	-32(%rax), %r13
+.cfi_restore	%r13
+	mov	-24(%rax), %r12
+.cfi_restore	%r12
+	mov	-16(%rax), %rbx
+.cfi_restore	%rbx
+	mov	-8(%rax), %rbp
+.cfi_restore	%rbp
+	lea	(%rax), %rsp		# restore %rsp
+.cfi_def_cfa_register	%rsp
+.Lcbc_dec_epilogue:
+	ret
+.cfi_endproc
+.size	bsaes_cbc_encrypt,.-bsaes_cbc_encrypt
+
+.globl	bsaes_ctr32_encrypt_blocks
+.type	bsaes_ctr32_encrypt_blocks,\@abi-omnipotent
+.align	16
+bsaes_ctr32_encrypt_blocks:
+.cfi_startproc
+	mov	%rsp, %rax
+.Lctr_enc_prologue:
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	lea	-0x48(%rsp), %rsp
+.cfi_adjust_cfa_offset	0x48
+___
+$code.=<<___ if ($win64);
+	mov	0xa0(%rsp),$arg5	# pull ivp
+	lea	-0xa0(%rsp), %rsp
+	movaps	%xmm6, 0x40(%rsp)
+	movaps	%xmm7, 0x50(%rsp)
+	movaps	%xmm8, 0x60(%rsp)
+	movaps	%xmm9, 0x70(%rsp)
+	movaps	%xmm10, 0x80(%rsp)
+	movaps	%xmm11, 0x90(%rsp)
+	movaps	%xmm12, 0xa0(%rsp)
+	movaps	%xmm13, 0xb0(%rsp)
+	movaps	%xmm14, 0xc0(%rsp)
+	movaps	%xmm15, 0xd0(%rsp)
+.Lctr_enc_body:
+___
+$code.=<<___;
+	mov	%rsp, %rbp		# backup %rsp
+.cfi_def_cfa_register	%rbp
+	movdqu	($arg5), %xmm0		# load counter
+	mov	240($arg4), %eax	# rounds
+	mov	$arg1, $inp		# backup arguments
+	mov	$arg2, $out
+	mov	$arg3, $len
+	mov	$arg4, $key
+	movdqa	%xmm0, 0x20(%rbp)	# copy counter
+	cmp	\$8, $arg3
+	jb	.Lctr_enc_short
+
+	mov	%eax, %ebx		# rounds
+	shl	\$7, %rax		# 128 bytes per inner round key
+	sub	\$`128-32`, %rax	# size of bit-sliced key schedule
+	sub	%rax, %rsp
+
+	mov	%rsp, %rax		# pass key schedule
+	mov	$key, %rcx		# pass key
+	mov	%ebx, %r10d		# pass rounds
+	call	_bsaes_key_convert
+	pxor	%xmm6,%xmm7		# fix up last round key
+	movdqa	%xmm7,(%rax)		# save last round key
+
+	movdqa	(%rsp), @XMM[9]		# load round0 key
+	lea	.LADD1(%rip), %r11
+	movdqa	0x20(%rbp), @XMM[0]	# counter copy
+	movdqa	-0x20(%r11), @XMM[8]	# .LSWPUP
+	pshufb	@XMM[8], @XMM[9]	# byte swap upper part
+	pshufb	@XMM[8], @XMM[0]
+	movdqa	@XMM[9], (%rsp)		# save adjusted round0 key
+	jmp	.Lctr_enc_loop
+.align	16
+.Lctr_enc_loop:
+	movdqa	@XMM[0], 0x20(%rbp)	# save counter
+	movdqa	@XMM[0], @XMM[1]	# prepare 8 counter values
+	movdqa	@XMM[0], @XMM[2]
+	paddd	0x00(%r11), @XMM[1]	# .LADD1
+	movdqa	@XMM[0], @XMM[3]
+	paddd	0x10(%r11), @XMM[2]	# .LADD2
+	movdqa	@XMM[0], @XMM[4]
+	paddd	0x20(%r11), @XMM[3]	# .LADD3
+	movdqa	@XMM[0], @XMM[5]
+	paddd	0x30(%r11), @XMM[4]	# .LADD4
+	movdqa	@XMM[0], @XMM[6]
+	paddd	0x40(%r11), @XMM[5]	# .LADD5
+	movdqa	@XMM[0], @XMM[7]
+	paddd	0x50(%r11), @XMM[6]	# .LADD6
+	paddd	0x60(%r11), @XMM[7]	# .LADD7
+
+	# Borrow prologue from _bsaes_encrypt8 to use the opportunity
+	# to flip byte order in 32-bit counter
+	movdqa	(%rsp), @XMM[9]		# round 0 key
+	lea	0x10(%rsp), %rax	# pass key schedule
+	movdqa	-0x10(%r11), @XMM[8]	# .LSWPUPM0SR
+	pxor	@XMM[9], @XMM[0]	# xor with round0 key
+	pxor	@XMM[9], @XMM[1]
+	pxor	@XMM[9], @XMM[2]
+	pxor	@XMM[9], @XMM[3]
+	 pshufb	@XMM[8], @XMM[0]
+	 pshufb	@XMM[8], @XMM[1]
+	pxor	@XMM[9], @XMM[4]
+	pxor	@XMM[9], @XMM[5]
+	 pshufb	@XMM[8], @XMM[2]
+	 pshufb	@XMM[8], @XMM[3]
+	pxor	@XMM[9], @XMM[6]
+	pxor	@XMM[9], @XMM[7]
+	 pshufb	@XMM[8], @XMM[4]
+	 pshufb	@XMM[8], @XMM[5]
+	 pshufb	@XMM[8], @XMM[6]
+	 pshufb	@XMM[8], @XMM[7]
+	lea	.LBS0(%rip), %r11	# constants table
+	mov	%ebx,%r10d		# pass rounds
+
+	call	_bsaes_encrypt8_bitslice
+
+	sub	\$8,$len
+	jc	.Lctr_enc_loop_done
+
+	movdqu	0x00($inp), @XMM[8]	# load input
+	movdqu	0x10($inp), @XMM[9]
+	movdqu	0x20($inp), @XMM[10]
+	movdqu	0x30($inp), @XMM[11]
+	movdqu	0x40($inp), @XMM[12]
+	movdqu	0x50($inp), @XMM[13]
+	movdqu	0x60($inp), @XMM[14]
+	movdqu	0x70($inp), @XMM[15]
+	lea	0x80($inp),$inp
+	pxor	@XMM[0], @XMM[8]
+	movdqa	0x20(%rbp), @XMM[0]	# load counter
+	pxor	@XMM[9], @XMM[1]
+	movdqu	@XMM[8], 0x00($out)	# write output
+	pxor	@XMM[10], @XMM[4]
+	movdqu	@XMM[1], 0x10($out)
+	pxor	@XMM[11], @XMM[6]
+	movdqu	@XMM[4], 0x20($out)
+	pxor	@XMM[12], @XMM[3]
+	movdqu	@XMM[6], 0x30($out)
+	pxor	@XMM[13], @XMM[7]
+	movdqu	@XMM[3], 0x40($out)
+	pxor	@XMM[14], @XMM[2]
+	movdqu	@XMM[7], 0x50($out)
+	pxor	@XMM[15], @XMM[5]
+	movdqu	@XMM[2], 0x60($out)
+	lea	.LADD1(%rip), %r11
+	movdqu	@XMM[5], 0x70($out)
+	lea	0x80($out), $out
+	paddd	0x70(%r11), @XMM[0]	# .LADD8
+	jnz	.Lctr_enc_loop
+
+	jmp	.Lctr_enc_done
+.align	16
+.Lctr_enc_loop_done:
+	add	\$8, $len
+	movdqu	0x00($inp), @XMM[8]	# load input
+	pxor	@XMM[8], @XMM[0]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	cmp	\$2,$len
+	jb	.Lctr_enc_done
+	movdqu	0x10($inp), @XMM[9]
+	pxor	@XMM[9], @XMM[1]
+	movdqu	@XMM[1], 0x10($out)
+	je	.Lctr_enc_done
+	movdqu	0x20($inp), @XMM[10]
+	pxor	@XMM[10], @XMM[4]
+	movdqu	@XMM[4], 0x20($out)
+	cmp	\$4,$len
+	jb	.Lctr_enc_done
+	movdqu	0x30($inp), @XMM[11]
+	pxor	@XMM[11], @XMM[6]
+	movdqu	@XMM[6], 0x30($out)
+	je	.Lctr_enc_done
+	movdqu	0x40($inp), @XMM[12]
+	pxor	@XMM[12], @XMM[3]
+	movdqu	@XMM[3], 0x40($out)
+	cmp	\$6,$len
+	jb	.Lctr_enc_done
+	movdqu	0x50($inp), @XMM[13]
+	pxor	@XMM[13], @XMM[7]
+	movdqu	@XMM[7], 0x50($out)
+	je	.Lctr_enc_done
+	movdqu	0x60($inp), @XMM[14]
+	pxor	@XMM[14], @XMM[2]
+	movdqu	@XMM[2], 0x60($out)
+	jmp	.Lctr_enc_done
+
+.align	16
+.Lctr_enc_short:
+	lea	0x20(%rbp), $arg1
+	lea	0x30(%rbp), $arg2
+	lea	($key), $arg3
+	call	asm_AES_encrypt
+	movdqu	($inp), @XMM[1]
+	lea	16($inp), $inp
+	mov	0x2c(%rbp), %eax	# load 32-bit counter
+	bswap	%eax
+	pxor	0x30(%rbp), @XMM[1]
+	inc	%eax			# increment
+	movdqu	@XMM[1], ($out)
+	bswap	%eax
+	lea	16($out), $out
+	mov	%eax, 0x2c(%rsp)	# save 32-bit counter
+	dec	$len
+	jnz	.Lctr_enc_short
+
+.Lctr_enc_done:
+	lea	(%rsp), %rax
+	pxor	%xmm0, %xmm0
+.Lctr_enc_bzero:			# wipe key schedule [if any]
+	movdqa	%xmm0, 0x00(%rax)
+	movdqa	%xmm0, 0x10(%rax)
+	lea	0x20(%rax), %rax
+	cmp	%rax, %rbp
+	ja	.Lctr_enc_bzero
+
+	lea	0x78(%rbp),%rax
+.cfi_def_cfa	%rax,8
+___
+$code.=<<___ if ($win64);
+	movaps	0x40(%rbp), %xmm6
+	movaps	0x50(%rbp), %xmm7
+	movaps	0x60(%rbp), %xmm8
+	movaps	0x70(%rbp), %xmm9
+	movaps	0x80(%rbp), %xmm10
+	movaps	0x90(%rbp), %xmm11
+	movaps	0xa0(%rbp), %xmm12
+	movaps	0xb0(%rbp), %xmm13
+	movaps	0xc0(%rbp), %xmm14
+	movaps	0xd0(%rbp), %xmm15
+	lea	0xa0(%rax), %rax
+.Lctr_enc_tail:
+___
+$code.=<<___;
+	mov	-48(%rax), %r15
+.cfi_restore	%r15
+	mov	-40(%rax), %r14
+.cfi_restore	%r14
+	mov	-32(%rax), %r13
+.cfi_restore	%r13
+	mov	-24(%rax), %r12
+.cfi_restore	%r12
+	mov	-16(%rax), %rbx
+.cfi_restore	%rbx
+	mov	-8(%rax), %rbp
+.cfi_restore	%rbp
+	lea	(%rax), %rsp		# restore %rsp
+.cfi_def_cfa_register	%rsp
+.Lctr_enc_epilogue:
+	ret
+.cfi_endproc
+.size	bsaes_ctr32_encrypt_blocks,.-bsaes_ctr32_encrypt_blocks
+___
+######################################################################
+# void bsaes_xts_[en|de]crypt(const char *inp,char *out,size_t len,
+#	const AES_KEY *key1, const AES_KEY *key2,
+#	const unsigned char iv[16]);
+#
+my ($twmask,$twres,$twtmp)=@XMM[13..15];
+$arg6=~s/d$//;
+
+$code.=<<___;
+.globl	bsaes_xts_encrypt
+.type	bsaes_xts_encrypt,\@abi-omnipotent
+.align	16
+bsaes_xts_encrypt:
+.cfi_startproc
+	mov	%rsp, %rax
+.Lxts_enc_prologue:
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	lea	-0x48(%rsp), %rsp
+.cfi_adjust_cfa_offset	0x48
+___
+$code.=<<___ if ($win64);
+	mov	0xa0(%rsp),$arg5	# pull key2
+	mov	0xa8(%rsp),$arg6	# pull ivp
+	lea	-0xa0(%rsp), %rsp
+	movaps	%xmm6, 0x40(%rsp)
+	movaps	%xmm7, 0x50(%rsp)
+	movaps	%xmm8, 0x60(%rsp)
+	movaps	%xmm9, 0x70(%rsp)
+	movaps	%xmm10, 0x80(%rsp)
+	movaps	%xmm11, 0x90(%rsp)
+	movaps	%xmm12, 0xa0(%rsp)
+	movaps	%xmm13, 0xb0(%rsp)
+	movaps	%xmm14, 0xc0(%rsp)
+	movaps	%xmm15, 0xd0(%rsp)
+.Lxts_enc_body:
+___
+$code.=<<___;
+	mov	%rsp, %rbp		# backup %rsp
+.cfi_def_cfa_register	%rbp
+	mov	$arg1, $inp		# backup arguments
+	mov	$arg2, $out
+	mov	$arg3, $len
+	mov	$arg4, $key
+
+	lea	($arg6), $arg1
+	lea	0x20(%rbp), $arg2
+	lea	($arg5), $arg3
+	call	asm_AES_encrypt		# generate initial tweak
+
+	mov	240($key), %eax		# rounds
+	mov	$len, %rbx		# backup $len
+
+	mov	%eax, %edx		# rounds
+	shl	\$7, %rax		# 128 bytes per inner round key
+	sub	\$`128-32`, %rax	# size of bit-sliced key schedule
+	sub	%rax, %rsp
+
+	mov	%rsp, %rax		# pass key schedule
+	mov	$key, %rcx		# pass key
+	mov	%edx, %r10d		# pass rounds
+	call	_bsaes_key_convert
+	pxor	%xmm6, %xmm7		# fix up last round key
+	movdqa	%xmm7, (%rax)		# save last round key
+
+	and	\$-16, $len
+	sub	\$0x80, %rsp		# place for tweak[8]
+	movdqa	0x20(%rbp), @XMM[7]	# initial tweak
+
+	pxor	$twtmp, $twtmp
+	movdqa	.Lxts_magic(%rip), $twmask
+	pcmpgtd	@XMM[7], $twtmp		# broadcast upper bits
+
+	sub	\$0x80, $len
+	jc	.Lxts_enc_short
+	jmp	.Lxts_enc_loop
+
+.align	16
+.Lxts_enc_loop:
+___
+    for ($i=0;$i<7;$i++) {
+    $code.=<<___;
+	pshufd	\$0x13, $twtmp, $twres
+	pxor	$twtmp, $twtmp
+	movdqa	@XMM[7], @XMM[$i]
+	movdqa	@XMM[7], `0x10*$i`(%rsp)# save tweak[$i]
+	paddq	@XMM[7], @XMM[7]	# psllq	1,$tweak
+	pand	$twmask, $twres		# isolate carry and residue
+	pcmpgtd	@XMM[7], $twtmp		# broadcast upper bits
+	pxor	$twres, @XMM[7]
+___
+    $code.=<<___ if ($i>=1);
+	movdqu	`0x10*($i-1)`($inp), @XMM[8+$i-1]
+___
+    $code.=<<___ if ($i>=2);
+	pxor	@XMM[8+$i-2], @XMM[$i-2]# input[] ^ tweak[]
+___
+    }
+$code.=<<___;
+	movdqu	0x60($inp), @XMM[8+6]
+	pxor	@XMM[8+5], @XMM[5]
+	movdqu	0x70($inp), @XMM[8+7]
+	lea	0x80($inp), $inp
+	movdqa	@XMM[7], 0x70(%rsp)
+	pxor	@XMM[8+6], @XMM[6]
+	lea	0x80(%rsp), %rax	# pass key schedule
+	pxor	@XMM[8+7], @XMM[7]
+	mov	%edx, %r10d		# pass rounds
+
+	call	_bsaes_encrypt8
+
+	pxor	0x00(%rsp), @XMM[0]	# ^= tweak[]
+	pxor	0x10(%rsp), @XMM[1]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	pxor	0x20(%rsp), @XMM[4]
+	movdqu	@XMM[1], 0x10($out)
+	pxor	0x30(%rsp), @XMM[6]
+	movdqu	@XMM[4], 0x20($out)
+	pxor	0x40(%rsp), @XMM[3]
+	movdqu	@XMM[6], 0x30($out)
+	pxor	0x50(%rsp), @XMM[7]
+	movdqu	@XMM[3], 0x40($out)
+	pxor	0x60(%rsp), @XMM[2]
+	movdqu	@XMM[7], 0x50($out)
+	pxor	0x70(%rsp), @XMM[5]
+	movdqu	@XMM[2], 0x60($out)
+	movdqu	@XMM[5], 0x70($out)
+	lea	0x80($out), $out
+
+	movdqa	0x70(%rsp), @XMM[7]	# prepare next iteration tweak
+	pxor	$twtmp, $twtmp
+	movdqa	.Lxts_magic(%rip), $twmask
+	pcmpgtd	@XMM[7], $twtmp
+	pshufd	\$0x13, $twtmp, $twres
+	pxor	$twtmp, $twtmp
+	paddq	@XMM[7], @XMM[7]	# psllq	1,$tweak
+	pand	$twmask, $twres		# isolate carry and residue
+	pcmpgtd	@XMM[7], $twtmp		# broadcast upper bits
+	pxor	$twres, @XMM[7]
+
+	sub	\$0x80,$len
+	jnc	.Lxts_enc_loop
+
+.Lxts_enc_short:
+	add	\$0x80, $len
+	jz	.Lxts_enc_done
+___
+    for ($i=0;$i<7;$i++) {
+    $code.=<<___;
+	pshufd	\$0x13, $twtmp, $twres
+	pxor	$twtmp, $twtmp
+	movdqa	@XMM[7], @XMM[$i]
+	movdqa	@XMM[7], `0x10*$i`(%rsp)# save tweak[$i]
+	paddq	@XMM[7], @XMM[7]	# psllq	1,$tweak
+	pand	$twmask, $twres		# isolate carry and residue
+	pcmpgtd	@XMM[7], $twtmp		# broadcast upper bits
+	pxor	$twres, @XMM[7]
+___
+    $code.=<<___ if ($i>=1);
+	movdqu	`0x10*($i-1)`($inp), @XMM[8+$i-1]
+	cmp	\$`0x10*$i`,$len
+	je	.Lxts_enc_$i
+___
+    $code.=<<___ if ($i>=2);
+	pxor	@XMM[8+$i-2], @XMM[$i-2]# input[] ^ tweak[]
+___
+    }
+$code.=<<___;
+	movdqu	0x60($inp), @XMM[8+6]
+	pxor	@XMM[8+5], @XMM[5]
+	movdqa	@XMM[7], 0x70(%rsp)
+	lea	0x70($inp), $inp
+	pxor	@XMM[8+6], @XMM[6]
+	lea	0x80(%rsp), %rax	# pass key schedule
+	mov	%edx, %r10d		# pass rounds
+
+	call	_bsaes_encrypt8
+
+	pxor	0x00(%rsp), @XMM[0]	# ^= tweak[]
+	pxor	0x10(%rsp), @XMM[1]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	pxor	0x20(%rsp), @XMM[4]
+	movdqu	@XMM[1], 0x10($out)
+	pxor	0x30(%rsp), @XMM[6]
+	movdqu	@XMM[4], 0x20($out)
+	pxor	0x40(%rsp), @XMM[3]
+	movdqu	@XMM[6], 0x30($out)
+	pxor	0x50(%rsp), @XMM[7]
+	movdqu	@XMM[3], 0x40($out)
+	pxor	0x60(%rsp), @XMM[2]
+	movdqu	@XMM[7], 0x50($out)
+	movdqu	@XMM[2], 0x60($out)
+	lea	0x70($out), $out
+
+	movdqa	0x70(%rsp), @XMM[7]	# next iteration tweak
+	jmp	.Lxts_enc_done
+.align	16
+.Lxts_enc_6:
+	pxor	@XMM[8+4], @XMM[4]
+	lea	0x60($inp), $inp
+	pxor	@XMM[8+5], @XMM[5]
+	lea	0x80(%rsp), %rax	# pass key schedule
+	mov	%edx, %r10d		# pass rounds
+
+	call	_bsaes_encrypt8
+
+	pxor	0x00(%rsp), @XMM[0]	# ^= tweak[]
+	pxor	0x10(%rsp), @XMM[1]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	pxor	0x20(%rsp), @XMM[4]
+	movdqu	@XMM[1], 0x10($out)
+	pxor	0x30(%rsp), @XMM[6]
+	movdqu	@XMM[4], 0x20($out)
+	pxor	0x40(%rsp), @XMM[3]
+	movdqu	@XMM[6], 0x30($out)
+	pxor	0x50(%rsp), @XMM[7]
+	movdqu	@XMM[3], 0x40($out)
+	movdqu	@XMM[7], 0x50($out)
+	lea	0x60($out), $out
+
+	movdqa	0x60(%rsp), @XMM[7]	# next iteration tweak
+	jmp	.Lxts_enc_done
+.align	16
+.Lxts_enc_5:
+	pxor	@XMM[8+3], @XMM[3]
+	lea	0x50($inp), $inp
+	pxor	@XMM[8+4], @XMM[4]
+	lea	0x80(%rsp), %rax	# pass key schedule
+	mov	%edx, %r10d		# pass rounds
+
+	call	_bsaes_encrypt8
+
+	pxor	0x00(%rsp), @XMM[0]	# ^= tweak[]
+	pxor	0x10(%rsp), @XMM[1]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	pxor	0x20(%rsp), @XMM[4]
+	movdqu	@XMM[1], 0x10($out)
+	pxor	0x30(%rsp), @XMM[6]
+	movdqu	@XMM[4], 0x20($out)
+	pxor	0x40(%rsp), @XMM[3]
+	movdqu	@XMM[6], 0x30($out)
+	movdqu	@XMM[3], 0x40($out)
+	lea	0x50($out), $out
+
+	movdqa	0x50(%rsp), @XMM[7]	# next iteration tweak
+	jmp	.Lxts_enc_done
+.align	16
+.Lxts_enc_4:
+	pxor	@XMM[8+2], @XMM[2]
+	lea	0x40($inp), $inp
+	pxor	@XMM[8+3], @XMM[3]
+	lea	0x80(%rsp), %rax	# pass key schedule
+	mov	%edx, %r10d		# pass rounds
+
+	call	_bsaes_encrypt8
+
+	pxor	0x00(%rsp), @XMM[0]	# ^= tweak[]
+	pxor	0x10(%rsp), @XMM[1]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	pxor	0x20(%rsp), @XMM[4]
+	movdqu	@XMM[1], 0x10($out)
+	pxor	0x30(%rsp), @XMM[6]
+	movdqu	@XMM[4], 0x20($out)
+	movdqu	@XMM[6], 0x30($out)
+	lea	0x40($out), $out
+
+	movdqa	0x40(%rsp), @XMM[7]	# next iteration tweak
+	jmp	.Lxts_enc_done
+.align	16
+.Lxts_enc_3:
+	pxor	@XMM[8+1], @XMM[1]
+	lea	0x30($inp), $inp
+	pxor	@XMM[8+2], @XMM[2]
+	lea	0x80(%rsp), %rax	# pass key schedule
+	mov	%edx, %r10d		# pass rounds
+
+	call	_bsaes_encrypt8
+
+	pxor	0x00(%rsp), @XMM[0]	# ^= tweak[]
+	pxor	0x10(%rsp), @XMM[1]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	pxor	0x20(%rsp), @XMM[4]
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[4], 0x20($out)
+	lea	0x30($out), $out
+
+	movdqa	0x30(%rsp), @XMM[7]	# next iteration tweak
+	jmp	.Lxts_enc_done
+.align	16
+.Lxts_enc_2:
+	pxor	@XMM[8+0], @XMM[0]
+	lea	0x20($inp), $inp
+	pxor	@XMM[8+1], @XMM[1]
+	lea	0x80(%rsp), %rax	# pass key schedule
+	mov	%edx, %r10d		# pass rounds
+
+	call	_bsaes_encrypt8
+
+	pxor	0x00(%rsp), @XMM[0]	# ^= tweak[]
+	pxor	0x10(%rsp), @XMM[1]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	lea	0x20($out), $out
+
+	movdqa	0x20(%rsp), @XMM[7]	# next iteration tweak
+	jmp	.Lxts_enc_done
+.align	16
+.Lxts_enc_1:
+	pxor	@XMM[0], @XMM[8]
+	lea	0x10($inp), $inp
+	movdqa	@XMM[8], 0x20(%rbp)
+	lea	0x20(%rbp), $arg1
+	lea	0x20(%rbp), $arg2
+	lea	($key), $arg3
+	call	asm_AES_encrypt		# doesn't touch %xmm
+	pxor	0x20(%rbp), @XMM[0]	# ^= tweak[]
+	#pxor	@XMM[8], @XMM[0]
+	#lea	0x80(%rsp), %rax	# pass key schedule
+	#mov	%edx, %r10d		# pass rounds
+	#call	_bsaes_encrypt8
+	#pxor	0x00(%rsp), @XMM[0]	# ^= tweak[]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	lea	0x10($out), $out
+
+	movdqa	0x10(%rsp), @XMM[7]	# next iteration tweak
+
+.Lxts_enc_done:
+	and	\$15, %ebx
+	jz	.Lxts_enc_ret
+	mov	$out, %rdx
+
+.Lxts_enc_steal:
+	movzb	($inp), %eax
+	movzb	-16(%rdx), %ecx
+	lea	1($inp), $inp
+	mov	%al, -16(%rdx)
+	mov	%cl, 0(%rdx)
+	lea	1(%rdx), %rdx
+	sub	\$1,%ebx
+	jnz	.Lxts_enc_steal
+
+	movdqu	-16($out), @XMM[0]
+	lea	0x20(%rbp), $arg1
+	pxor	@XMM[7], @XMM[0]
+	lea	0x20(%rbp), $arg2
+	movdqa	@XMM[0], 0x20(%rbp)
+	lea	($key), $arg3
+	call	asm_AES_encrypt		# doesn't touch %xmm
+	pxor	0x20(%rbp), @XMM[7]
+	movdqu	@XMM[7], -16($out)
+
+.Lxts_enc_ret:
+	lea	(%rsp), %rax
+	pxor	%xmm0, %xmm0
+.Lxts_enc_bzero:			# wipe key schedule [if any]
+	movdqa	%xmm0, 0x00(%rax)
+	movdqa	%xmm0, 0x10(%rax)
+	lea	0x20(%rax), %rax
+	cmp	%rax, %rbp
+	ja	.Lxts_enc_bzero
+
+	lea	0x78(%rbp),%rax
+.cfi_def_cfa	%rax,8
+___
+$code.=<<___ if ($win64);
+	movaps	0x40(%rbp), %xmm6
+	movaps	0x50(%rbp), %xmm7
+	movaps	0x60(%rbp), %xmm8
+	movaps	0x70(%rbp), %xmm9
+	movaps	0x80(%rbp), %xmm10
+	movaps	0x90(%rbp), %xmm11
+	movaps	0xa0(%rbp), %xmm12
+	movaps	0xb0(%rbp), %xmm13
+	movaps	0xc0(%rbp), %xmm14
+	movaps	0xd0(%rbp), %xmm15
+	lea	0xa0(%rax), %rax
+.Lxts_enc_tail:
+___
+$code.=<<___;
+	mov	-48(%rax), %r15
+.cfi_restore	%r15
+	mov	-40(%rax), %r14
+.cfi_restore	%r14
+	mov	-32(%rax), %r13
+.cfi_restore	%r13
+	mov	-24(%rax), %r12
+.cfi_restore	%r12
+	mov	-16(%rax), %rbx
+.cfi_restore	%rbx
+	mov	-8(%rax), %rbp
+.cfi_restore	%rbp
+	lea	(%rax), %rsp		# restore %rsp
+.cfi_def_cfa_register	%rsp
+.Lxts_enc_epilogue:
+	ret
+.cfi_endproc
+.size	bsaes_xts_encrypt,.-bsaes_xts_encrypt
+
+.globl	bsaes_xts_decrypt
+.type	bsaes_xts_decrypt,\@abi-omnipotent
+.align	16
+bsaes_xts_decrypt:
+.cfi_startproc
+	mov	%rsp, %rax
+.Lxts_dec_prologue:
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	lea	-0x48(%rsp), %rsp
+.cfi_adjust_cfa_offset	0x48
+___
+$code.=<<___ if ($win64);
+	mov	0xa0(%rsp),$arg5	# pull key2
+	mov	0xa8(%rsp),$arg6	# pull ivp
+	lea	-0xa0(%rsp), %rsp
+	movaps	%xmm6, 0x40(%rsp)
+	movaps	%xmm7, 0x50(%rsp)
+	movaps	%xmm8, 0x60(%rsp)
+	movaps	%xmm9, 0x70(%rsp)
+	movaps	%xmm10, 0x80(%rsp)
+	movaps	%xmm11, 0x90(%rsp)
+	movaps	%xmm12, 0xa0(%rsp)
+	movaps	%xmm13, 0xb0(%rsp)
+	movaps	%xmm14, 0xc0(%rsp)
+	movaps	%xmm15, 0xd0(%rsp)
+.Lxts_dec_body:
+___
+$code.=<<___;
+	mov	%rsp, %rbp		# backup %rsp
+	mov	$arg1, $inp		# backup arguments
+	mov	$arg2, $out
+	mov	$arg3, $len
+	mov	$arg4, $key
+
+	lea	($arg6), $arg1
+	lea	0x20(%rbp), $arg2
+	lea	($arg5), $arg3
+	call	asm_AES_encrypt		# generate initial tweak
+
+	mov	240($key), %eax		# rounds
+	mov	$len, %rbx		# backup $len
+
+	mov	%eax, %edx		# rounds
+	shl	\$7, %rax		# 128 bytes per inner round key
+	sub	\$`128-32`, %rax	# size of bit-sliced key schedule
+	sub	%rax, %rsp
+
+	mov	%rsp, %rax		# pass key schedule
+	mov	$key, %rcx		# pass key
+	mov	%edx, %r10d		# pass rounds
+	call	_bsaes_key_convert
+	pxor	(%rsp), %xmm7		# fix up round 0 key
+	movdqa	%xmm6, (%rax)		# save last round key
+	movdqa	%xmm7, (%rsp)
+
+	xor	%eax, %eax		# if ($len%16) len-=16;
+	and	\$-16, $len
+	test	\$15, %ebx
+	setnz	%al
+	shl	\$4, %rax
+	sub	%rax, $len
+
+	sub	\$0x80, %rsp		# place for tweak[8]
+	movdqa	0x20(%rbp), @XMM[7]	# initial tweak
+
+	pxor	$twtmp, $twtmp
+	movdqa	.Lxts_magic(%rip), $twmask
+	pcmpgtd	@XMM[7], $twtmp		# broadcast upper bits
+
+	sub	\$0x80, $len
+	jc	.Lxts_dec_short
+	jmp	.Lxts_dec_loop
+
+.align	16
+.Lxts_dec_loop:
+___
+    for ($i=0;$i<7;$i++) {
+    $code.=<<___;
+	pshufd	\$0x13, $twtmp, $twres
+	pxor	$twtmp, $twtmp
+	movdqa	@XMM[7], @XMM[$i]
+	movdqa	@XMM[7], `0x10*$i`(%rsp)# save tweak[$i]
+	paddq	@XMM[7], @XMM[7]	# psllq	1,$tweak
+	pand	$twmask, $twres		# isolate carry and residue
+	pcmpgtd	@XMM[7], $twtmp		# broadcast upper bits
+	pxor	$twres, @XMM[7]
+___
+    $code.=<<___ if ($i>=1);
+	movdqu	`0x10*($i-1)`($inp), @XMM[8+$i-1]
+___
+    $code.=<<___ if ($i>=2);
+	pxor	@XMM[8+$i-2], @XMM[$i-2]# input[] ^ tweak[]
+___
+    }
+$code.=<<___;
+	movdqu	0x60($inp), @XMM[8+6]
+	pxor	@XMM[8+5], @XMM[5]
+	movdqu	0x70($inp), @XMM[8+7]
+	lea	0x80($inp), $inp
+	movdqa	@XMM[7], 0x70(%rsp)
+	pxor	@XMM[8+6], @XMM[6]
+	lea	0x80(%rsp), %rax	# pass key schedule
+	pxor	@XMM[8+7], @XMM[7]
+	mov	%edx, %r10d		# pass rounds
+
+	call	_bsaes_decrypt8
+
+	pxor	0x00(%rsp), @XMM[0]	# ^= tweak[]
+	pxor	0x10(%rsp), @XMM[1]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	pxor	0x20(%rsp), @XMM[6]
+	movdqu	@XMM[1], 0x10($out)
+	pxor	0x30(%rsp), @XMM[4]
+	movdqu	@XMM[6], 0x20($out)
+	pxor	0x40(%rsp), @XMM[2]
+	movdqu	@XMM[4], 0x30($out)
+	pxor	0x50(%rsp), @XMM[7]
+	movdqu	@XMM[2], 0x40($out)
+	pxor	0x60(%rsp), @XMM[3]
+	movdqu	@XMM[7], 0x50($out)
+	pxor	0x70(%rsp), @XMM[5]
+	movdqu	@XMM[3], 0x60($out)
+	movdqu	@XMM[5], 0x70($out)
+	lea	0x80($out), $out
+
+	movdqa	0x70(%rsp), @XMM[7]	# prepare next iteration tweak
+	pxor	$twtmp, $twtmp
+	movdqa	.Lxts_magic(%rip), $twmask
+	pcmpgtd	@XMM[7], $twtmp
+	pshufd	\$0x13, $twtmp, $twres
+	pxor	$twtmp, $twtmp
+	paddq	@XMM[7], @XMM[7]	# psllq	1,$tweak
+	pand	$twmask, $twres		# isolate carry and residue
+	pcmpgtd	@XMM[7], $twtmp		# broadcast upper bits
+	pxor	$twres, @XMM[7]
+
+	sub	\$0x80,$len
+	jnc	.Lxts_dec_loop
+
+.Lxts_dec_short:
+	add	\$0x80, $len
+	jz	.Lxts_dec_done
+___
+    for ($i=0;$i<7;$i++) {
+    $code.=<<___;
+	pshufd	\$0x13, $twtmp, $twres
+	pxor	$twtmp, $twtmp
+	movdqa	@XMM[7], @XMM[$i]
+	movdqa	@XMM[7], `0x10*$i`(%rsp)# save tweak[$i]
+	paddq	@XMM[7], @XMM[7]	# psllq	1,$tweak
+	pand	$twmask, $twres		# isolate carry and residue
+	pcmpgtd	@XMM[7], $twtmp		# broadcast upper bits
+	pxor	$twres, @XMM[7]
+___
+    $code.=<<___ if ($i>=1);
+	movdqu	`0x10*($i-1)`($inp), @XMM[8+$i-1]
+	cmp	\$`0x10*$i`,$len
+	je	.Lxts_dec_$i
+___
+    $code.=<<___ if ($i>=2);
+	pxor	@XMM[8+$i-2], @XMM[$i-2]# input[] ^ tweak[]
+___
+    }
+$code.=<<___;
+	movdqu	0x60($inp), @XMM[8+6]
+	pxor	@XMM[8+5], @XMM[5]
+	movdqa	@XMM[7], 0x70(%rsp)
+	lea	0x70($inp), $inp
+	pxor	@XMM[8+6], @XMM[6]
+	lea	0x80(%rsp), %rax	# pass key schedule
+	mov	%edx, %r10d		# pass rounds
+
+	call	_bsaes_decrypt8
+
+	pxor	0x00(%rsp), @XMM[0]	# ^= tweak[]
+	pxor	0x10(%rsp), @XMM[1]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	pxor	0x20(%rsp), @XMM[6]
+	movdqu	@XMM[1], 0x10($out)
+	pxor	0x30(%rsp), @XMM[4]
+	movdqu	@XMM[6], 0x20($out)
+	pxor	0x40(%rsp), @XMM[2]
+	movdqu	@XMM[4], 0x30($out)
+	pxor	0x50(%rsp), @XMM[7]
+	movdqu	@XMM[2], 0x40($out)
+	pxor	0x60(%rsp), @XMM[3]
+	movdqu	@XMM[7], 0x50($out)
+	movdqu	@XMM[3], 0x60($out)
+	lea	0x70($out), $out
+
+	movdqa	0x70(%rsp), @XMM[7]	# next iteration tweak
+	jmp	.Lxts_dec_done
+.align	16
+.Lxts_dec_6:
+	pxor	@XMM[8+4], @XMM[4]
+	lea	0x60($inp), $inp
+	pxor	@XMM[8+5], @XMM[5]
+	lea	0x80(%rsp), %rax	# pass key schedule
+	mov	%edx, %r10d		# pass rounds
+
+	call	_bsaes_decrypt8
+
+	pxor	0x00(%rsp), @XMM[0]	# ^= tweak[]
+	pxor	0x10(%rsp), @XMM[1]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	pxor	0x20(%rsp), @XMM[6]
+	movdqu	@XMM[1], 0x10($out)
+	pxor	0x30(%rsp), @XMM[4]
+	movdqu	@XMM[6], 0x20($out)
+	pxor	0x40(%rsp), @XMM[2]
+	movdqu	@XMM[4], 0x30($out)
+	pxor	0x50(%rsp), @XMM[7]
+	movdqu	@XMM[2], 0x40($out)
+	movdqu	@XMM[7], 0x50($out)
+	lea	0x60($out), $out
+
+	movdqa	0x60(%rsp), @XMM[7]	# next iteration tweak
+	jmp	.Lxts_dec_done
+.align	16
+.Lxts_dec_5:
+	pxor	@XMM[8+3], @XMM[3]
+	lea	0x50($inp), $inp
+	pxor	@XMM[8+4], @XMM[4]
+	lea	0x80(%rsp), %rax	# pass key schedule
+	mov	%edx, %r10d		# pass rounds
+
+	call	_bsaes_decrypt8
+
+	pxor	0x00(%rsp), @XMM[0]	# ^= tweak[]
+	pxor	0x10(%rsp), @XMM[1]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	pxor	0x20(%rsp), @XMM[6]
+	movdqu	@XMM[1], 0x10($out)
+	pxor	0x30(%rsp), @XMM[4]
+	movdqu	@XMM[6], 0x20($out)
+	pxor	0x40(%rsp), @XMM[2]
+	movdqu	@XMM[4], 0x30($out)
+	movdqu	@XMM[2], 0x40($out)
+	lea	0x50($out), $out
+
+	movdqa	0x50(%rsp), @XMM[7]	# next iteration tweak
+	jmp	.Lxts_dec_done
+.align	16
+.Lxts_dec_4:
+	pxor	@XMM[8+2], @XMM[2]
+	lea	0x40($inp), $inp
+	pxor	@XMM[8+3], @XMM[3]
+	lea	0x80(%rsp), %rax	# pass key schedule
+	mov	%edx, %r10d		# pass rounds
+
+	call	_bsaes_decrypt8
+
+	pxor	0x00(%rsp), @XMM[0]	# ^= tweak[]
+	pxor	0x10(%rsp), @XMM[1]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	pxor	0x20(%rsp), @XMM[6]
+	movdqu	@XMM[1], 0x10($out)
+	pxor	0x30(%rsp), @XMM[4]
+	movdqu	@XMM[6], 0x20($out)
+	movdqu	@XMM[4], 0x30($out)
+	lea	0x40($out), $out
+
+	movdqa	0x40(%rsp), @XMM[7]	# next iteration tweak
+	jmp	.Lxts_dec_done
+.align	16
+.Lxts_dec_3:
+	pxor	@XMM[8+1], @XMM[1]
+	lea	0x30($inp), $inp
+	pxor	@XMM[8+2], @XMM[2]
+	lea	0x80(%rsp), %rax	# pass key schedule
+	mov	%edx, %r10d		# pass rounds
+
+	call	_bsaes_decrypt8
+
+	pxor	0x00(%rsp), @XMM[0]	# ^= tweak[]
+	pxor	0x10(%rsp), @XMM[1]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	pxor	0x20(%rsp), @XMM[6]
+	movdqu	@XMM[1], 0x10($out)
+	movdqu	@XMM[6], 0x20($out)
+	lea	0x30($out), $out
+
+	movdqa	0x30(%rsp), @XMM[7]	# next iteration tweak
+	jmp	.Lxts_dec_done
+.align	16
+.Lxts_dec_2:
+	pxor	@XMM[8+0], @XMM[0]
+	lea	0x20($inp), $inp
+	pxor	@XMM[8+1], @XMM[1]
+	lea	0x80(%rsp), %rax	# pass key schedule
+	mov	%edx, %r10d		# pass rounds
+
+	call	_bsaes_decrypt8
+
+	pxor	0x00(%rsp), @XMM[0]	# ^= tweak[]
+	pxor	0x10(%rsp), @XMM[1]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	movdqu	@XMM[1], 0x10($out)
+	lea	0x20($out), $out
+
+	movdqa	0x20(%rsp), @XMM[7]	# next iteration tweak
+	jmp	.Lxts_dec_done
+.align	16
+.Lxts_dec_1:
+	pxor	@XMM[0], @XMM[8]
+	lea	0x10($inp), $inp
+	movdqa	@XMM[8], 0x20(%rbp)
+	lea	0x20(%rbp), $arg1
+	lea	0x20(%rbp), $arg2
+	lea	($key), $arg3
+	call	asm_AES_decrypt		# doesn't touch %xmm
+	pxor	0x20(%rbp), @XMM[0]	# ^= tweak[]
+	#pxor	@XMM[8], @XMM[0]
+	#lea	0x80(%rsp), %rax	# pass key schedule
+	#mov	%edx, %r10d		# pass rounds
+	#call	_bsaes_decrypt8
+	#pxor	0x00(%rsp), @XMM[0]	# ^= tweak[]
+	movdqu	@XMM[0], 0x00($out)	# write output
+	lea	0x10($out), $out
+
+	movdqa	0x10(%rsp), @XMM[7]	# next iteration tweak
+
+.Lxts_dec_done:
+	and	\$15, %ebx
+	jz	.Lxts_dec_ret
+
+	pxor	$twtmp, $twtmp
+	movdqa	.Lxts_magic(%rip), $twmask
+	pcmpgtd	@XMM[7], $twtmp
+	pshufd	\$0x13, $twtmp, $twres
+	movdqa	@XMM[7], @XMM[6]
+	paddq	@XMM[7], @XMM[7]	# psllq 1,$tweak
+	pand	$twmask, $twres		# isolate carry and residue
+	movdqu	($inp), @XMM[0]
+	pxor	$twres, @XMM[7]
+
+	lea	0x20(%rbp), $arg1
+	pxor	@XMM[7], @XMM[0]
+	lea	0x20(%rbp), $arg2
+	movdqa	@XMM[0], 0x20(%rbp)
+	lea	($key), $arg3
+	call	asm_AES_decrypt		# doesn't touch %xmm
+	pxor	0x20(%rbp), @XMM[7]
+	mov	$out, %rdx
+	movdqu	@XMM[7], ($out)
+
+.Lxts_dec_steal:
+	movzb	16($inp), %eax
+	movzb	(%rdx), %ecx
+	lea	1($inp), $inp
+	mov	%al, (%rdx)
+	mov	%cl, 16(%rdx)
+	lea	1(%rdx), %rdx
+	sub	\$1,%ebx
+	jnz	.Lxts_dec_steal
+
+	movdqu	($out), @XMM[0]
+	lea	0x20(%rbp), $arg1
+	pxor	@XMM[6], @XMM[0]
+	lea	0x20(%rbp), $arg2
+	movdqa	@XMM[0], 0x20(%rbp)
+	lea	($key), $arg3
+	call	asm_AES_decrypt		# doesn't touch %xmm
+	pxor	0x20(%rbp), @XMM[6]
+	movdqu	@XMM[6], ($out)
+
+.Lxts_dec_ret:
+	lea	(%rsp), %rax
+	pxor	%xmm0, %xmm0
+.Lxts_dec_bzero:			# wipe key schedule [if any]
+	movdqa	%xmm0, 0x00(%rax)
+	movdqa	%xmm0, 0x10(%rax)
+	lea	0x20(%rax), %rax
+	cmp	%rax, %rbp
+	ja	.Lxts_dec_bzero
+
+	lea	0x78(%rbp),%rax
+.cfi_def_cfa	%rax,8
+___
+$code.=<<___ if ($win64);
+	movaps	0x40(%rbp), %xmm6
+	movaps	0x50(%rbp), %xmm7
+	movaps	0x60(%rbp), %xmm8
+	movaps	0x70(%rbp), %xmm9
+	movaps	0x80(%rbp), %xmm10
+	movaps	0x90(%rbp), %xmm11
+	movaps	0xa0(%rbp), %xmm12
+	movaps	0xb0(%rbp), %xmm13
+	movaps	0xc0(%rbp), %xmm14
+	movaps	0xd0(%rbp), %xmm15
+	lea	0xa0(%rax), %rax
+.Lxts_dec_tail:
+___
+$code.=<<___;
+	mov	-48(%rax), %r15
+.cfi_restore	%r15
+	mov	-40(%rax), %r14
+.cfi_restore	%r14
+	mov	-32(%rax), %r13
+.cfi_restore	%r13
+	mov	-24(%rax), %r12
+.cfi_restore	%r12
+	mov	-16(%rax), %rbx
+.cfi_restore	%rbx
+	mov	-8(%rax), %rbp
+.cfi_restore	%rbp
+	lea	(%rax), %rsp		# restore %rsp
+.cfi_def_cfa_register	%rsp
+.Lxts_dec_epilogue:
+	ret
+.cfi_endproc
+.size	bsaes_xts_decrypt,.-bsaes_xts_decrypt
+___
+}
+$code.=<<___;
+.type	_bsaes_const,\@object
+.align	64
+_bsaes_const:
+.LM0ISR:	# InvShiftRows constants
+	.quad	0x0a0e0206070b0f03, 0x0004080c0d010509
+.LISRM0:
+	.quad	0x01040b0e0205080f, 0x0306090c00070a0d
+.LISR:
+	.quad	0x0504070602010003, 0x0f0e0d0c080b0a09
+.LBS0:		# bit-slice constants
+	.quad	0x5555555555555555, 0x5555555555555555
+.LBS1:
+	.quad	0x3333333333333333, 0x3333333333333333
+.LBS2:
+	.quad	0x0f0f0f0f0f0f0f0f, 0x0f0f0f0f0f0f0f0f
+.LSR:		# shiftrows constants
+	.quad	0x0504070600030201, 0x0f0e0d0c0a09080b
+.LSRM0:
+	.quad	0x0304090e00050a0f, 0x01060b0c0207080d
+.LM0SR:
+	.quad	0x0a0e02060f03070b, 0x0004080c05090d01
+.LSWPUP:	# byte-swap upper dword
+	.quad	0x0706050403020100, 0x0c0d0e0f0b0a0908
+.LSWPUPM0SR:
+	.quad	0x0a0d02060c03070b, 0x0004080f05090e01
+.LADD1:		# counter increment constants
+	.quad	0x0000000000000000, 0x0000000100000000
+.LADD2:
+	.quad	0x0000000000000000, 0x0000000200000000
+.LADD3:
+	.quad	0x0000000000000000, 0x0000000300000000
+.LADD4:
+	.quad	0x0000000000000000, 0x0000000400000000
+.LADD5:
+	.quad	0x0000000000000000, 0x0000000500000000
+.LADD6:
+	.quad	0x0000000000000000, 0x0000000600000000
+.LADD7:
+	.quad	0x0000000000000000, 0x0000000700000000
+.LADD8:
+	.quad	0x0000000000000000, 0x0000000800000000
+.Lxts_magic:
+	.long	0x87,0,1,0
+.Lmasks:
+	.quad	0x0101010101010101, 0x0101010101010101
+	.quad	0x0202020202020202, 0x0202020202020202
+	.quad	0x0404040404040404, 0x0404040404040404
+	.quad	0x0808080808080808, 0x0808080808080808
+.LM0:
+	.quad	0x02060a0e03070b0f, 0x0004080c0105090d
+.L63:
+	.quad	0x6363636363636363, 0x6363636363636363
+.asciz	"Bit-sliced AES for x86_64/SSSE3, Emilia Käsper, Peter Schwabe, Andy Polyakov"
+.align	64
+.size	_bsaes_const,.-_bsaes_const
+___
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	se_handler,\@abi-omnipotent
+.align	16
+se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<=prologue label
+	jbe	.Lin_prologue
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lin_prologue
+
+	mov	8(%r11),%r10d		# HandlerData[2]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=tail label
+	jae	.Lin_tail
+
+	mov	160($context),%rax	# pull context->Rbp
+
+	lea	0x40(%rax),%rsi		# %xmm save area
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$20,%ecx		# 10*sizeof(%xmm0)/sizeof(%rax)
+	.long	0xa548f3fc		# cld; rep movsq
+	lea	0xa0+0x78(%rax),%rax	# adjust stack pointer
+
+.Lin_tail:
+	mov	-48(%rax),%rbp
+	mov	-40(%rax),%rbx
+	mov	-32(%rax),%r12
+	mov	-24(%rax),%r13
+	mov	-16(%rax),%r14
+	mov	-8(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+.Lin_prologue:
+	mov	%rax,152($context)	# restore context->Rsp
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$`1232/8`,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	se_handler,.-se_handler
+
+.section	.pdata
+.align	4
+___
+$code.=<<___ if ($ecb);
+	.rva	.Lecb_enc_prologue
+	.rva	.Lecb_enc_epilogue
+	.rva	.Lecb_enc_info
+
+	.rva	.Lecb_dec_prologue
+	.rva	.Lecb_dec_epilogue
+	.rva	.Lecb_dec_info
+___
+$code.=<<___;
+	.rva	.Lcbc_dec_prologue
+	.rva	.Lcbc_dec_epilogue
+	.rva	.Lcbc_dec_info
+
+	.rva	.Lctr_enc_prologue
+	.rva	.Lctr_enc_epilogue
+	.rva	.Lctr_enc_info
+
+	.rva	.Lxts_enc_prologue
+	.rva	.Lxts_enc_epilogue
+	.rva	.Lxts_enc_info
+
+	.rva	.Lxts_dec_prologue
+	.rva	.Lxts_dec_epilogue
+	.rva	.Lxts_dec_info
+
+.section	.xdata
+.align	8
+___
+$code.=<<___ if ($ecb);
+.Lecb_enc_info:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lecb_enc_body,.Lecb_enc_epilogue	# HandlerData[]
+	.rva	.Lecb_enc_tail
+	.long	0
+.Lecb_dec_info:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lecb_dec_body,.Lecb_dec_epilogue	# HandlerData[]
+	.rva	.Lecb_dec_tail
+	.long	0
+___
+$code.=<<___;
+.Lcbc_dec_info:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lcbc_dec_body,.Lcbc_dec_epilogue	# HandlerData[]
+	.rva	.Lcbc_dec_tail
+	.long	0
+.Lctr_enc_info:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lctr_enc_body,.Lctr_enc_epilogue	# HandlerData[]
+	.rva	.Lctr_enc_tail
+	.long	0
+.Lxts_enc_info:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lxts_enc_body,.Lxts_enc_epilogue	# HandlerData[]
+	.rva	.Lxts_enc_tail
+	.long	0
+.Lxts_dec_info:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lxts_dec_body,.Lxts_dec_epilogue	# HandlerData[]
+	.rva	.Lxts_dec_tail
+	.long	0
+___
+}
+
+$code =~ s/\`([^\`]*)\`/eval($1)/gem;
+
+print $code;
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/vpaes-armv8.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/vpaes-armv8.pl
new file mode 100755
index 000000000..e38288af5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/vpaes-armv8.pl
@@ -0,0 +1,1277 @@
+#! /usr/bin/env perl
+# Copyright 2015-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+######################################################################
+## Constant-time SSSE3 AES core implementation.
+## version 0.1
+##
+## By Mike Hamburg (Stanford University), 2009
+## Public domain.
+##
+## For details see http://shiftleft.org/papers/vector_aes/ and
+## http://crypto.stanford.edu/vpaes/.
+##
+######################################################################
+# ARMv8 NEON adaptation by <appro@openssl.org>
+#
+# Reason for undertaken effort is that there is at least one popular
+# SoC based on Cortex-A53 that doesn't have crypto extensions.
+#
+#                   CBC enc     ECB enc/dec(*)   [bit-sliced enc/dec]
+# Cortex-A53        21.5        18.1/20.6        [17.5/19.8         ]
+# Cortex-A57        36.0(**)    20.4/24.9(**)    [14.4/16.6         ]
+# X-Gene            45.9(**)    45.8/57.7(**)    [33.1/37.6(**)     ]
+# Denver(***)       16.6(**)    15.1/17.8(**)    [8.80/9.93         ]
+# Apple A7(***)     22.7(**)    10.9/14.3        [8.45/10.0         ]
+# Mongoose(***)     26.3(**)    21.0/25.0(**)    [13.3/16.8         ]
+#
+# (*)	ECB denotes approximate result for parallelizable modes
+#	such as CBC decrypt, CTR, etc.;
+# (**)	these results are worse than scalar compiler-generated
+#	code, but it's constant-time and therefore preferred;
+# (***)	presented for reference/comparison purposes;
+
+$flavour = shift;
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+die "can't locate arm-xlate.pl";
+
+open OUT,"| \"$^X\" $xlate $flavour $output";
+*STDOUT=*OUT;
+
+$code.=<<___;
+.text
+
+.type	_vpaes_consts,%object
+.align	7	// totally strategic alignment
+_vpaes_consts:
+.Lk_mc_forward:	// mc_forward
+	.quad	0x0407060500030201, 0x0C0F0E0D080B0A09
+	.quad	0x080B0A0904070605, 0x000302010C0F0E0D
+	.quad	0x0C0F0E0D080B0A09, 0x0407060500030201
+	.quad	0x000302010C0F0E0D, 0x080B0A0904070605
+.Lk_mc_backward:// mc_backward
+	.quad	0x0605040702010003, 0x0E0D0C0F0A09080B
+	.quad	0x020100030E0D0C0F, 0x0A09080B06050407
+	.quad	0x0E0D0C0F0A09080B, 0x0605040702010003
+	.quad	0x0A09080B06050407, 0x020100030E0D0C0F
+.Lk_sr:		// sr
+	.quad	0x0706050403020100, 0x0F0E0D0C0B0A0908
+	.quad	0x030E09040F0A0500, 0x0B06010C07020D08
+	.quad	0x0F060D040B020900, 0x070E050C030A0108
+	.quad	0x0B0E0104070A0D00, 0x0306090C0F020508
+
+//
+// "Hot" constants
+//
+.Lk_inv:	// inv, inva
+	.quad	0x0E05060F0D080180, 0x040703090A0B0C02
+	.quad	0x01040A060F0B0780, 0x030D0E0C02050809
+.Lk_ipt:	// input transform (lo, hi)
+	.quad	0xC2B2E8985A2A7000, 0xCABAE09052227808
+	.quad	0x4C01307D317C4D00, 0xCD80B1FCB0FDCC81
+.Lk_sbo:	// sbou, sbot
+	.quad	0xD0D26D176FBDC700, 0x15AABF7AC502A878
+	.quad	0xCFE474A55FBB6A00, 0x8E1E90D1412B35FA
+.Lk_sb1:	// sb1u, sb1t
+	.quad	0x3618D415FAE22300, 0x3BF7CCC10D2ED9EF
+	.quad	0xB19BE18FCB503E00, 0xA5DF7A6E142AF544
+.Lk_sb2:	// sb2u, sb2t
+	.quad	0x69EB88400AE12900, 0xC2A163C8AB82234A
+	.quad	0xE27A93C60B712400, 0x5EB7E955BC982FCD
+
+//
+//  Decryption stuff
+//
+.Lk_dipt:	// decryption input transform
+	.quad	0x0F505B040B545F00, 0x154A411E114E451A
+	.quad	0x86E383E660056500, 0x12771772F491F194
+.Lk_dsbo:	// decryption sbox final output
+	.quad	0x1387EA537EF94000, 0xC7AA6DB9D4943E2D
+	.quad	0x12D7560F93441D00, 0xCA4B8159D8C58E9C
+.Lk_dsb9:	// decryption sbox output *9*u, *9*t
+	.quad	0x851C03539A86D600, 0xCAD51F504F994CC9
+	.quad	0xC03B1789ECD74900, 0x725E2C9EB2FBA565
+.Lk_dsbd:	// decryption sbox output *D*u, *D*t
+	.quad	0x7D57CCDFE6B1A200, 0xF56E9B13882A4439
+	.quad	0x3CE2FAF724C6CB00, 0x2931180D15DEEFD3
+.Lk_dsbb:	// decryption sbox output *B*u, *B*t
+	.quad	0xD022649296B44200, 0x602646F6B0F2D404
+	.quad	0xC19498A6CD596700, 0xF3FF0C3E3255AA6B
+.Lk_dsbe:	// decryption sbox output *E*u, *E*t
+	.quad	0x46F2929626D4D000, 0x2242600464B4F6B0
+	.quad	0x0C55A6CDFFAAC100, 0x9467F36B98593E32
+
+//
+//  Key schedule constants
+//
+.Lk_dksd:	// decryption key schedule: invskew x*D
+	.quad	0xFEB91A5DA3E44700, 0x0740E3A45A1DBEF9
+	.quad	0x41C277F4B5368300, 0x5FDC69EAAB289D1E
+.Lk_dksb:	// decryption key schedule: invskew x*B
+	.quad	0x9A4FCA1F8550D500, 0x03D653861CC94C99
+	.quad	0x115BEDA7B6FC4A00, 0xD993256F7E3482C8
+.Lk_dkse:	// decryption key schedule: invskew x*E + 0x63
+	.quad	0xD5031CCA1FC9D600, 0x53859A4C994F5086
+	.quad	0xA23196054FDC7BE8, 0xCD5EF96A20B31487
+.Lk_dks9:	// decryption key schedule: invskew x*9
+	.quad	0xB6116FC87ED9A700, 0x4AED933482255BFC
+	.quad	0x4576516227143300, 0x8BB89FACE9DAFDCE
+
+.Lk_rcon:	// rcon
+	.quad	0x1F8391B9AF9DEEB6, 0x702A98084D7C7D81
+
+.Lk_opt:	// output transform
+	.quad	0xFF9F4929D6B66000, 0xF7974121DEBE6808
+	.quad	0x01EDBD5150BCEC00, 0xE10D5DB1B05C0CE0
+.Lk_deskew:	// deskew tables: inverts the sbox's "skew"
+	.quad	0x07E4A34047A4E300, 0x1DFEB95A5DBEF91A
+	.quad	0x5F36B5DC83EA6900, 0x2841C2ABF49D1E77
+
+.asciz  "Vector Permutation AES for ARMv8, Mike Hamburg (Stanford University)"
+.size	_vpaes_consts,.-_vpaes_consts
+.align	6
+___
+
+{
+my ($inp,$out,$key) = map("x$_",(0..2));
+
+my ($invlo,$invhi,$iptlo,$ipthi,$sbou,$sbot) = map("v$_.16b",(18..23));
+my ($sb1u,$sb1t,$sb2u,$sb2t) = map("v$_.16b",(24..27));
+my ($sb9u,$sb9t,$sbdu,$sbdt,$sbbu,$sbbt,$sbeu,$sbet)=map("v$_.16b",(24..31));
+
+$code.=<<___;
+##
+##  _aes_preheat
+##
+##  Fills register %r10 -> .aes_consts (so you can -fPIC)
+##  and %xmm9-%xmm15 as specified below.
+##
+.type	_vpaes_encrypt_preheat,%function
+.align	4
+_vpaes_encrypt_preheat:
+	adr	x10, .Lk_inv
+	movi	v17.16b, #0x0f
+	ld1	{v18.2d-v19.2d}, [x10],#32	// .Lk_inv
+	ld1	{v20.2d-v23.2d}, [x10],#64	// .Lk_ipt, .Lk_sbo
+	ld1	{v24.2d-v27.2d}, [x10]		// .Lk_sb1, .Lk_sb2
+	ret
+.size	_vpaes_encrypt_preheat,.-_vpaes_encrypt_preheat
+
+##
+##  _aes_encrypt_core
+##
+##  AES-encrypt %xmm0.
+##
+##  Inputs:
+##     %xmm0 = input
+##     %xmm9-%xmm15 as in _vpaes_preheat
+##    (%rdx) = scheduled keys
+##
+##  Output in %xmm0
+##  Clobbers  %xmm1-%xmm5, %r9, %r10, %r11, %rax
+##  Preserves %xmm6 - %xmm8 so you get some local vectors
+##
+##
+.type	_vpaes_encrypt_core,%function
+.align 4
+_vpaes_encrypt_core:
+	mov	x9, $key
+	ldr	w8, [$key,#240]			// pull rounds
+	adr	x11, .Lk_mc_forward+16
+						// vmovdqa	.Lk_ipt(%rip),	%xmm2	# iptlo
+	ld1	{v16.2d}, [x9], #16		// vmovdqu	(%r9),	%xmm5		# round0 key
+	and	v1.16b, v7.16b, v17.16b		// vpand	%xmm9,	%xmm0,	%xmm1
+	ushr	v0.16b, v7.16b, #4		// vpsrlb	\$4,	%xmm0,	%xmm0
+	tbl	v1.16b, {$iptlo}, v1.16b	// vpshufb	%xmm1,	%xmm2,	%xmm1
+						// vmovdqa	.Lk_ipt+16(%rip), %xmm3	# ipthi
+	tbl	v2.16b, {$ipthi}, v0.16b	// vpshufb	%xmm0,	%xmm3,	%xmm2
+	eor	v0.16b, v1.16b, v16.16b		// vpxor	%xmm5,	%xmm1,	%xmm0
+	eor	v0.16b, v0.16b, v2.16b		// vpxor	%xmm2,	%xmm0,	%xmm0
+	b	.Lenc_entry
+
+.align 4
+.Lenc_loop:
+	// middle of middle round
+	add	x10, x11, #0x40
+	tbl	v4.16b, {$sb1t}, v2.16b		// vpshufb	%xmm2,	%xmm13,	%xmm4	# 4 = sb1u
+	ld1	{v1.2d}, [x11], #16		// vmovdqa	-0x40(%r11,%r10), %xmm1	# .Lk_mc_forward[]
+	tbl	v0.16b, {$sb1u}, v3.16b		// vpshufb	%xmm3,	%xmm12,	%xmm0	# 0 = sb1t
+	eor	v4.16b, v4.16b, v16.16b		// vpxor	%xmm5,	%xmm4,	%xmm4	# 4 = sb1u + k
+	tbl	v5.16b,	{$sb2t}, v2.16b		// vpshufb	%xmm2,	%xmm15,	%xmm5	# 4 = sb2u
+	eor	v0.16b, v0.16b, v4.16b		// vpxor	%xmm4,	%xmm0,	%xmm0	# 0 = A
+	tbl	v2.16b, {$sb2u}, v3.16b		// vpshufb	%xmm3,	%xmm14,	%xmm2	# 2 = sb2t
+	ld1	{v4.2d}, [x10]			// vmovdqa	(%r11,%r10), %xmm4	# .Lk_mc_backward[]
+	tbl	v3.16b, {v0.16b}, v1.16b	// vpshufb	%xmm1,	%xmm0,	%xmm3	# 0 = B
+	eor	v2.16b, v2.16b, v5.16b		// vpxor	%xmm5,	%xmm2,	%xmm2	# 2 = 2A
+	tbl	v0.16b, {v0.16b}, v4.16b	// vpshufb	%xmm4,	%xmm0,	%xmm0	# 3 = D
+	eor	v3.16b, v3.16b, v2.16b		// vpxor	%xmm2,	%xmm3,	%xmm3	# 0 = 2A+B
+	tbl	v4.16b, {v3.16b}, v1.16b	// vpshufb	%xmm1,	%xmm3,	%xmm4	# 0 = 2B+C
+	eor	v0.16b, v0.16b, v3.16b		// vpxor	%xmm3,	%xmm0,	%xmm0	# 3 = 2A+B+D
+	and	x11, x11, #~(1<<6)		// and		\$0x30,	%r11		# ... mod 4
+	eor	v0.16b, v0.16b, v4.16b		// vpxor	%xmm4,	%xmm0, %xmm0	# 0 = 2A+3B+C+D
+	sub	w8, w8, #1			// nr--
+
+.Lenc_entry:
+	// top of round
+	and	v1.16b, v0.16b, v17.16b		// vpand	%xmm0,	%xmm9,	%xmm1   # 0 = k
+	ushr	v0.16b, v0.16b, #4		// vpsrlb	\$4,	%xmm0,	%xmm0	# 1 = i
+	tbl	v5.16b, {$invhi}, v1.16b	// vpshufb	%xmm1,	%xmm11,	%xmm5	# 2 = a/k
+	eor	v1.16b, v1.16b, v0.16b		// vpxor	%xmm0,	%xmm1,	%xmm1	# 0 = j
+	tbl	v3.16b, {$invlo}, v0.16b	// vpshufb	%xmm0, 	%xmm10,	%xmm3  	# 3 = 1/i
+	tbl	v4.16b, {$invlo}, v1.16b	// vpshufb	%xmm1, 	%xmm10,	%xmm4  	# 4 = 1/j
+	eor	v3.16b, v3.16b, v5.16b		// vpxor	%xmm5,	%xmm3,	%xmm3	# 3 = iak = 1/i + a/k
+	eor	v4.16b, v4.16b, v5.16b		// vpxor	%xmm5,	%xmm4,	%xmm4  	# 4 = jak = 1/j + a/k
+	tbl	v2.16b, {$invlo}, v3.16b	// vpshufb	%xmm3,	%xmm10,	%xmm2  	# 2 = 1/iak
+	tbl	v3.16b, {$invlo}, v4.16b	// vpshufb	%xmm4,	%xmm10,	%xmm3	# 3 = 1/jak
+	eor	v2.16b, v2.16b, v1.16b		// vpxor	%xmm1,	%xmm2,	%xmm2  	# 2 = io
+	eor	v3.16b, v3.16b, v0.16b		// vpxor	%xmm0,	%xmm3,	%xmm3	# 3 = jo
+	ld1	{v16.2d}, [x9],#16		// vmovdqu	(%r9),	%xmm5
+	cbnz	w8, .Lenc_loop
+
+	// middle of last round
+	add	x10, x11, #0x80
+						// vmovdqa	-0x60(%r10), %xmm4	# 3 : sbou	.Lk_sbo
+						// vmovdqa	-0x50(%r10), %xmm0	# 0 : sbot	.Lk_sbo+16
+	tbl	v4.16b, {$sbou}, v2.16b		// vpshufb	%xmm2,	%xmm4,	%xmm4	# 4 = sbou
+	ld1	{v1.2d}, [x10]			// vmovdqa	0x40(%r11,%r10), %xmm1	# .Lk_sr[]
+	tbl	v0.16b, {$sbot}, v3.16b		// vpshufb	%xmm3,	%xmm0,	%xmm0	# 0 = sb1t
+	eor	v4.16b, v4.16b, v16.16b		// vpxor	%xmm5,	%xmm4,	%xmm4	# 4 = sb1u + k
+	eor	v0.16b, v0.16b, v4.16b		// vpxor	%xmm4,	%xmm0,	%xmm0	# 0 = A
+	tbl	v0.16b, {v0.16b}, v1.16b	// vpshufb	%xmm1,	%xmm0,	%xmm0
+	ret
+.size	_vpaes_encrypt_core,.-_vpaes_encrypt_core
+
+.globl	vpaes_encrypt
+.type	vpaes_encrypt,%function
+.align	4
+vpaes_encrypt:
+	.inst	0xd503233f			// paciasp
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+
+	ld1	{v7.16b}, [$inp]
+	bl	_vpaes_encrypt_preheat
+	bl	_vpaes_encrypt_core
+	st1	{v0.16b}, [$out]
+
+	ldp	x29,x30,[sp],#16
+	.inst	0xd50323bf			// autiasp
+	ret
+.size	vpaes_encrypt,.-vpaes_encrypt
+
+.type	_vpaes_encrypt_2x,%function
+.align 4
+_vpaes_encrypt_2x:
+	mov	x9, $key
+	ldr	w8, [$key,#240]			// pull rounds
+	adr	x11, .Lk_mc_forward+16
+						// vmovdqa	.Lk_ipt(%rip),	%xmm2	# iptlo
+	ld1	{v16.2d}, [x9], #16		// vmovdqu	(%r9),	%xmm5		# round0 key
+	and	v1.16b,  v14.16b,  v17.16b	// vpand	%xmm9,	%xmm0,	%xmm1
+	ushr	v0.16b,  v14.16b,  #4		// vpsrlb	\$4,	%xmm0,	%xmm0
+	 and	v9.16b,  v15.16b,  v17.16b
+	 ushr	v8.16b,  v15.16b,  #4
+	tbl	v1.16b,  {$iptlo}, v1.16b	// vpshufb	%xmm1,	%xmm2,	%xmm1
+	 tbl	v9.16b,  {$iptlo}, v9.16b
+						// vmovdqa	.Lk_ipt+16(%rip), %xmm3	# ipthi
+	tbl	v2.16b,  {$ipthi}, v0.16b	// vpshufb	%xmm0,	%xmm3,	%xmm2
+	 tbl	v10.16b, {$ipthi}, v8.16b
+	eor	v0.16b,  v1.16b,   v16.16b	// vpxor	%xmm5,	%xmm1,	%xmm0
+	 eor	v8.16b,  v9.16b,   v16.16b
+	eor	v0.16b,  v0.16b,   v2.16b	// vpxor	%xmm2,	%xmm0,	%xmm0
+	 eor	v8.16b,  v8.16b,   v10.16b
+	b	.Lenc_2x_entry
+
+.align 4
+.Lenc_2x_loop:
+	// middle of middle round
+	add	x10, x11, #0x40
+	tbl	v4.16b,  {$sb1t}, v2.16b	// vpshufb	%xmm2,	%xmm13,	%xmm4	# 4 = sb1u
+	 tbl	v12.16b, {$sb1t}, v10.16b
+	ld1	{v1.2d}, [x11], #16		// vmovdqa	-0x40(%r11,%r10), %xmm1	# .Lk_mc_forward[]
+	tbl	v0.16b,  {$sb1u}, v3.16b	// vpshufb	%xmm3,	%xmm12,	%xmm0	# 0 = sb1t
+	 tbl	v8.16b,  {$sb1u}, v11.16b
+	eor	v4.16b,  v4.16b,  v16.16b	// vpxor	%xmm5,	%xmm4,	%xmm4	# 4 = sb1u + k
+	 eor	v12.16b, v12.16b, v16.16b
+	tbl	v5.16b,	 {$sb2t}, v2.16b	// vpshufb	%xmm2,	%xmm15,	%xmm5	# 4 = sb2u
+	 tbl	v13.16b, {$sb2t}, v10.16b
+	eor	v0.16b,  v0.16b,  v4.16b	// vpxor	%xmm4,	%xmm0,	%xmm0	# 0 = A
+	 eor	v8.16b,  v8.16b,  v12.16b
+	tbl	v2.16b,  {$sb2u}, v3.16b	// vpshufb	%xmm3,	%xmm14,	%xmm2	# 2 = sb2t
+	 tbl	v10.16b, {$sb2u}, v11.16b
+	ld1	{v4.2d}, [x10]			// vmovdqa	(%r11,%r10), %xmm4	# .Lk_mc_backward[]
+	tbl	v3.16b,  {v0.16b}, v1.16b	// vpshufb	%xmm1,	%xmm0,	%xmm3	# 0 = B
+	 tbl	v11.16b, {v8.16b}, v1.16b
+	eor	v2.16b,  v2.16b,  v5.16b	// vpxor	%xmm5,	%xmm2,	%xmm2	# 2 = 2A
+	 eor	v10.16b, v10.16b, v13.16b
+	tbl	v0.16b,  {v0.16b}, v4.16b	// vpshufb	%xmm4,	%xmm0,	%xmm0	# 3 = D
+	 tbl	v8.16b,  {v8.16b}, v4.16b
+	eor	v3.16b,  v3.16b,  v2.16b	// vpxor	%xmm2,	%xmm3,	%xmm3	# 0 = 2A+B
+	 eor	v11.16b, v11.16b, v10.16b
+	tbl	v4.16b,  {v3.16b}, v1.16b	// vpshufb	%xmm1,	%xmm3,	%xmm4	# 0 = 2B+C
+	 tbl	v12.16b, {v11.16b},v1.16b
+	eor	v0.16b,  v0.16b,  v3.16b	// vpxor	%xmm3,	%xmm0,	%xmm0	# 3 = 2A+B+D
+	 eor	v8.16b,  v8.16b,  v11.16b
+	and	x11, x11, #~(1<<6)		// and		\$0x30,	%r11		# ... mod 4
+	eor	v0.16b,  v0.16b,  v4.16b	// vpxor	%xmm4,	%xmm0, %xmm0	# 0 = 2A+3B+C+D
+	 eor	v8.16b,  v8.16b,  v12.16b
+	sub	w8, w8, #1			// nr--
+
+.Lenc_2x_entry:
+	// top of round
+	and	v1.16b,  v0.16b, v17.16b	// vpand	%xmm0,	%xmm9,	%xmm1   # 0 = k
+	ushr	v0.16b,  v0.16b, #4		// vpsrlb	\$4,	%xmm0,	%xmm0	# 1 = i
+	 and	v9.16b,  v8.16b, v17.16b
+	 ushr	v8.16b,  v8.16b, #4
+	tbl	v5.16b,  {$invhi},v1.16b	// vpshufb	%xmm1,	%xmm11,	%xmm5	# 2 = a/k
+	 tbl	v13.16b, {$invhi},v9.16b
+	eor	v1.16b,  v1.16b,  v0.16b	// vpxor	%xmm0,	%xmm1,	%xmm1	# 0 = j
+	 eor	v9.16b,  v9.16b,  v8.16b
+	tbl	v3.16b,  {$invlo},v0.16b	// vpshufb	%xmm0, 	%xmm10,	%xmm3  	# 3 = 1/i
+	 tbl	v11.16b, {$invlo},v8.16b
+	tbl	v4.16b,  {$invlo},v1.16b	// vpshufb	%xmm1, 	%xmm10,	%xmm4  	# 4 = 1/j
+	 tbl	v12.16b, {$invlo},v9.16b
+	eor	v3.16b,  v3.16b,  v5.16b	// vpxor	%xmm5,	%xmm3,	%xmm3	# 3 = iak = 1/i + a/k
+	 eor	v11.16b, v11.16b, v13.16b
+	eor	v4.16b,  v4.16b,  v5.16b	// vpxor	%xmm5,	%xmm4,	%xmm4  	# 4 = jak = 1/j + a/k
+	 eor	v12.16b, v12.16b, v13.16b
+	tbl	v2.16b,  {$invlo},v3.16b	// vpshufb	%xmm3,	%xmm10,	%xmm2  	# 2 = 1/iak
+	 tbl	v10.16b, {$invlo},v11.16b
+	tbl	v3.16b,  {$invlo},v4.16b	// vpshufb	%xmm4,	%xmm10,	%xmm3	# 3 = 1/jak
+	 tbl	v11.16b, {$invlo},v12.16b
+	eor	v2.16b,  v2.16b,  v1.16b	// vpxor	%xmm1,	%xmm2,	%xmm2  	# 2 = io
+	 eor	v10.16b, v10.16b, v9.16b
+	eor	v3.16b,  v3.16b,  v0.16b	// vpxor	%xmm0,	%xmm3,	%xmm3	# 3 = jo
+	 eor	v11.16b, v11.16b, v8.16b
+	ld1	{v16.2d}, [x9],#16		// vmovdqu	(%r9),	%xmm5
+	cbnz	w8, .Lenc_2x_loop
+
+	// middle of last round
+	add	x10, x11, #0x80
+						// vmovdqa	-0x60(%r10), %xmm4	# 3 : sbou	.Lk_sbo
+						// vmovdqa	-0x50(%r10), %xmm0	# 0 : sbot	.Lk_sbo+16
+	tbl	v4.16b,  {$sbou}, v2.16b	// vpshufb	%xmm2,	%xmm4,	%xmm4	# 4 = sbou
+	 tbl	v12.16b, {$sbou}, v10.16b
+	ld1	{v1.2d}, [x10]			// vmovdqa	0x40(%r11,%r10), %xmm1	# .Lk_sr[]
+	tbl	v0.16b,  {$sbot}, v3.16b	// vpshufb	%xmm3,	%xmm0,	%xmm0	# 0 = sb1t
+	 tbl	v8.16b,  {$sbot}, v11.16b
+	eor	v4.16b,  v4.16b,  v16.16b	// vpxor	%xmm5,	%xmm4,	%xmm4	# 4 = sb1u + k
+	 eor	v12.16b, v12.16b, v16.16b
+	eor	v0.16b,  v0.16b,  v4.16b	// vpxor	%xmm4,	%xmm0,	%xmm0	# 0 = A
+	 eor	v8.16b,  v8.16b,  v12.16b
+	tbl	v0.16b,  {v0.16b},v1.16b	// vpshufb	%xmm1,	%xmm0,	%xmm0
+	 tbl	v1.16b,  {v8.16b},v1.16b
+	ret
+.size	_vpaes_encrypt_2x,.-_vpaes_encrypt_2x
+
+.type	_vpaes_decrypt_preheat,%function
+.align	4
+_vpaes_decrypt_preheat:
+	adr	x10, .Lk_inv
+	movi	v17.16b, #0x0f
+	adr	x11, .Lk_dipt
+	ld1	{v18.2d-v19.2d}, [x10],#32	// .Lk_inv
+	ld1	{v20.2d-v23.2d}, [x11],#64	// .Lk_dipt, .Lk_dsbo
+	ld1	{v24.2d-v27.2d}, [x11],#64	// .Lk_dsb9, .Lk_dsbd
+	ld1	{v28.2d-v31.2d}, [x11]		// .Lk_dsbb, .Lk_dsbe
+	ret
+.size	_vpaes_decrypt_preheat,.-_vpaes_decrypt_preheat
+
+##
+##  Decryption core
+##
+##  Same API as encryption core.
+##
+.type	_vpaes_decrypt_core,%function
+.align	4
+_vpaes_decrypt_core:
+	mov	x9, $key
+	ldr	w8, [$key,#240]			// pull rounds
+
+						// vmovdqa	.Lk_dipt(%rip), %xmm2	# iptlo
+	lsl	x11, x8, #4			// mov	%rax,	%r11;	shl	\$4, %r11
+	eor	x11, x11, #0x30			// xor		\$0x30,	%r11
+	adr	x10, .Lk_sr
+	and	x11, x11, #0x30			// and		\$0x30,	%r11
+	add	x11, x11, x10
+	adr	x10, .Lk_mc_forward+48
+
+	ld1	{v16.2d}, [x9],#16		// vmovdqu	(%r9),	%xmm4		# round0 key
+	and	v1.16b, v7.16b, v17.16b		// vpand	%xmm9,	%xmm0,	%xmm1
+	ushr	v0.16b, v7.16b, #4		// vpsrlb	\$4,	%xmm0,	%xmm0
+	tbl	v2.16b, {$iptlo}, v1.16b	// vpshufb	%xmm1,	%xmm2,	%xmm2
+	ld1	{v5.2d}, [x10]			// vmovdqa	.Lk_mc_forward+48(%rip), %xmm5
+						// vmovdqa	.Lk_dipt+16(%rip), %xmm1 # ipthi
+	tbl	v0.16b, {$ipthi}, v0.16b	// vpshufb	%xmm0,	%xmm1,	%xmm0
+	eor	v2.16b, v2.16b, v16.16b		// vpxor	%xmm4,	%xmm2,	%xmm2
+	eor	v0.16b, v0.16b, v2.16b		// vpxor	%xmm2,	%xmm0,	%xmm0
+	b	.Ldec_entry
+
+.align 4
+.Ldec_loop:
+//
+//  Inverse mix columns
+//
+						// vmovdqa	-0x20(%r10),%xmm4		# 4 : sb9u
+						// vmovdqa	-0x10(%r10),%xmm1		# 0 : sb9t
+	tbl	v4.16b, {$sb9u}, v2.16b		// vpshufb	%xmm2,	%xmm4,	%xmm4		# 4 = sb9u
+	tbl	v1.16b, {$sb9t}, v3.16b		// vpshufb	%xmm3,	%xmm1,	%xmm1		# 0 = sb9t
+	eor	v0.16b, v4.16b, v16.16b		// vpxor	%xmm4,	%xmm0,	%xmm0
+						// vmovdqa	0x00(%r10),%xmm4		# 4 : sbdu
+	eor	v0.16b, v0.16b, v1.16b		// vpxor	%xmm1,	%xmm0,	%xmm0		# 0 = ch
+						// vmovdqa	0x10(%r10),%xmm1		# 0 : sbdt
+
+	tbl	v4.16b, {$sbdu}, v2.16b		// vpshufb	%xmm2,	%xmm4,	%xmm4		# 4 = sbdu
+	tbl 	v0.16b, {v0.16b}, v5.16b	// vpshufb	%xmm5,	%xmm0,	%xmm0		# MC ch
+	tbl	v1.16b, {$sbdt}, v3.16b		// vpshufb	%xmm3,	%xmm1,	%xmm1		# 0 = sbdt
+	eor	v0.16b, v0.16b, v4.16b		// vpxor	%xmm4,	%xmm0,	%xmm0		# 4 = ch
+						// vmovdqa	0x20(%r10),	%xmm4		# 4 : sbbu
+	eor	v0.16b, v0.16b, v1.16b		// vpxor	%xmm1,	%xmm0,	%xmm0		# 0 = ch
+						// vmovdqa	0x30(%r10),	%xmm1		# 0 : sbbt
+
+	tbl	v4.16b, {$sbbu}, v2.16b		// vpshufb	%xmm2,	%xmm4,	%xmm4		# 4 = sbbu
+	tbl	v0.16b, {v0.16b}, v5.16b	// vpshufb	%xmm5,	%xmm0,	%xmm0		# MC ch
+	tbl	v1.16b, {$sbbt}, v3.16b		// vpshufb	%xmm3,	%xmm1,	%xmm1		# 0 = sbbt
+	eor	v0.16b, v0.16b, v4.16b		// vpxor	%xmm4,	%xmm0,	%xmm0		# 4 = ch
+						// vmovdqa	0x40(%r10),	%xmm4		# 4 : sbeu
+	eor	v0.16b, v0.16b, v1.16b		// vpxor	%xmm1,	%xmm0,	%xmm0		# 0 = ch
+						// vmovdqa	0x50(%r10),	%xmm1		# 0 : sbet
+
+	tbl	v4.16b, {$sbeu}, v2.16b		// vpshufb	%xmm2,	%xmm4,	%xmm4		# 4 = sbeu
+	tbl	v0.16b, {v0.16b}, v5.16b	// vpshufb	%xmm5,	%xmm0,	%xmm0		# MC ch
+	tbl	v1.16b, {$sbet}, v3.16b		// vpshufb	%xmm3,	%xmm1,	%xmm1		# 0 = sbet
+	eor	v0.16b, v0.16b, v4.16b		// vpxor	%xmm4,	%xmm0,	%xmm0		# 4 = ch
+	ext	v5.16b, v5.16b, v5.16b, #12	// vpalignr \$12,	%xmm5,	%xmm5,	%xmm5
+	eor	v0.16b, v0.16b, v1.16b		// vpxor	%xmm1,	%xmm0,	%xmm0		# 0 = ch
+	sub	w8, w8, #1			// sub		\$1,%rax			# nr--
+
+.Ldec_entry:
+	// top of round
+	and	v1.16b, v0.16b, v17.16b		// vpand	%xmm9,	%xmm0,	%xmm1	# 0 = k
+	ushr	v0.16b, v0.16b, #4		// vpsrlb	\$4,	%xmm0,	%xmm0	# 1 = i
+	tbl	v2.16b, {$invhi}, v1.16b	// vpshufb	%xmm1,	%xmm11,	%xmm2	# 2 = a/k
+	eor	v1.16b,	v1.16b, v0.16b		// vpxor	%xmm0,	%xmm1,	%xmm1	# 0 = j
+	tbl	v3.16b, {$invlo}, v0.16b	// vpshufb	%xmm0, 	%xmm10,	%xmm3	# 3 = 1/i
+	tbl	v4.16b, {$invlo}, v1.16b	// vpshufb	%xmm1,	%xmm10,	%xmm4	# 4 = 1/j
+	eor	v3.16b, v3.16b, v2.16b		// vpxor	%xmm2,	%xmm3,	%xmm3	# 3 = iak = 1/i + a/k
+	eor	v4.16b, v4.16b, v2.16b		// vpxor	%xmm2, 	%xmm4,	%xmm4	# 4 = jak = 1/j + a/k
+	tbl	v2.16b, {$invlo}, v3.16b	// vpshufb	%xmm3,	%xmm10,	%xmm2	# 2 = 1/iak
+	tbl	v3.16b, {$invlo}, v4.16b	// vpshufb	%xmm4,  %xmm10,	%xmm3	# 3 = 1/jak
+	eor	v2.16b, v2.16b, v1.16b		// vpxor	%xmm1,	%xmm2,	%xmm2	# 2 = io
+	eor	v3.16b, v3.16b, v0.16b		// vpxor	%xmm0,  %xmm3,	%xmm3	# 3 = jo
+	ld1	{v16.2d}, [x9],#16		// vmovdqu	(%r9),	%xmm0
+	cbnz	w8, .Ldec_loop
+
+	// middle of last round
+						// vmovdqa	0x60(%r10),	%xmm4	# 3 : sbou
+	tbl	v4.16b, {$sbou}, v2.16b		// vpshufb	%xmm2,	%xmm4,	%xmm4	# 4 = sbou
+						// vmovdqa	0x70(%r10),	%xmm1	# 0 : sbot
+	ld1	{v2.2d}, [x11]			// vmovdqa	-0x160(%r11),	%xmm2	# .Lk_sr-.Lk_dsbd=-0x160
+	tbl	v1.16b, {$sbot}, v3.16b		// vpshufb	%xmm3,	%xmm1,	%xmm1	# 0 = sb1t
+	eor	v4.16b, v4.16b, v16.16b		// vpxor	%xmm0,	%xmm4,	%xmm4	# 4 = sb1u + k
+	eor	v0.16b, v1.16b, v4.16b		// vpxor	%xmm4,	%xmm1,	%xmm0	# 0 = A
+	tbl	v0.16b, {v0.16b}, v2.16b	// vpshufb	%xmm2,	%xmm0,	%xmm0
+	ret
+.size	_vpaes_decrypt_core,.-_vpaes_decrypt_core
+
+.globl	vpaes_decrypt
+.type	vpaes_decrypt,%function
+.align	4
+vpaes_decrypt:
+	.inst	0xd503233f			// paciasp
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+
+	ld1	{v7.16b}, [$inp]
+	bl	_vpaes_decrypt_preheat
+	bl	_vpaes_decrypt_core
+	st1	{v0.16b}, [$out]
+
+	ldp	x29,x30,[sp],#16
+	.inst	0xd50323bf			// autiasp
+	ret
+.size	vpaes_decrypt,.-vpaes_decrypt
+
+// v14-v15 input, v0-v1 output
+.type	_vpaes_decrypt_2x,%function
+.align	4
+_vpaes_decrypt_2x:
+	mov	x9, $key
+	ldr	w8, [$key,#240]			// pull rounds
+
+						// vmovdqa	.Lk_dipt(%rip), %xmm2	# iptlo
+	lsl	x11, x8, #4			// mov	%rax,	%r11;	shl	\$4, %r11
+	eor	x11, x11, #0x30			// xor		\$0x30,	%r11
+	adr	x10, .Lk_sr
+	and	x11, x11, #0x30			// and		\$0x30,	%r11
+	add	x11, x11, x10
+	adr	x10, .Lk_mc_forward+48
+
+	ld1	{v16.2d}, [x9],#16		// vmovdqu	(%r9),	%xmm4		# round0 key
+	and	v1.16b,  v14.16b, v17.16b	// vpand	%xmm9,	%xmm0,	%xmm1
+	ushr	v0.16b,  v14.16b, #4		// vpsrlb	\$4,	%xmm0,	%xmm0
+	 and	v9.16b,  v15.16b, v17.16b
+	 ushr	v8.16b,  v15.16b, #4
+	tbl	v2.16b,  {$iptlo},v1.16b	// vpshufb	%xmm1,	%xmm2,	%xmm2
+	 tbl	v10.16b, {$iptlo},v9.16b
+	ld1	{v5.2d}, [x10]			// vmovdqa	.Lk_mc_forward+48(%rip), %xmm5
+						// vmovdqa	.Lk_dipt+16(%rip), %xmm1 # ipthi
+	tbl	v0.16b,  {$ipthi},v0.16b	// vpshufb	%xmm0,	%xmm1,	%xmm0
+	 tbl	v8.16b,  {$ipthi},v8.16b
+	eor	v2.16b,  v2.16b,  v16.16b	// vpxor	%xmm4,	%xmm2,	%xmm2
+	 eor	v10.16b, v10.16b, v16.16b
+	eor	v0.16b,  v0.16b,  v2.16b	// vpxor	%xmm2,	%xmm0,	%xmm0
+	 eor	v8.16b,  v8.16b,  v10.16b
+	b	.Ldec_2x_entry
+
+.align 4
+.Ldec_2x_loop:
+//
+//  Inverse mix columns
+//
+						// vmovdqa	-0x20(%r10),%xmm4		# 4 : sb9u
+						// vmovdqa	-0x10(%r10),%xmm1		# 0 : sb9t
+	tbl	v4.16b,  {$sb9u}, v2.16b	// vpshufb	%xmm2,	%xmm4,	%xmm4		# 4 = sb9u
+	 tbl	v12.16b, {$sb9u}, v10.16b
+	tbl	v1.16b,  {$sb9t}, v3.16b	// vpshufb	%xmm3,	%xmm1,	%xmm1		# 0 = sb9t
+	 tbl	v9.16b,  {$sb9t}, v11.16b
+	eor	v0.16b,  v4.16b,  v16.16b	// vpxor	%xmm4,	%xmm0,	%xmm0
+	 eor	v8.16b,  v12.16b, v16.16b
+						// vmovdqa	0x00(%r10),%xmm4		# 4 : sbdu
+	eor	v0.16b,  v0.16b,  v1.16b	// vpxor	%xmm1,	%xmm0,	%xmm0		# 0 = ch
+	 eor	v8.16b,  v8.16b,  v9.16b	// vpxor	%xmm1,	%xmm0,	%xmm0		# 0 = ch
+						// vmovdqa	0x10(%r10),%xmm1		# 0 : sbdt
+
+	tbl	v4.16b,  {$sbdu}, v2.16b	// vpshufb	%xmm2,	%xmm4,	%xmm4		# 4 = sbdu
+	 tbl	v12.16b, {$sbdu}, v10.16b
+	tbl 	v0.16b,  {v0.16b},v5.16b	// vpshufb	%xmm5,	%xmm0,	%xmm0		# MC ch
+	 tbl 	v8.16b,  {v8.16b},v5.16b
+	tbl	v1.16b,  {$sbdt}, v3.16b	// vpshufb	%xmm3,	%xmm1,	%xmm1		# 0 = sbdt
+	 tbl	v9.16b,  {$sbdt}, v11.16b
+	eor	v0.16b,  v0.16b,  v4.16b	// vpxor	%xmm4,	%xmm0,	%xmm0		# 4 = ch
+	 eor	v8.16b,  v8.16b,  v12.16b
+						// vmovdqa	0x20(%r10),	%xmm4		# 4 : sbbu
+	eor	v0.16b,  v0.16b,  v1.16b	// vpxor	%xmm1,	%xmm0,	%xmm0		# 0 = ch
+	 eor	v8.16b,  v8.16b,  v9.16b
+						// vmovdqa	0x30(%r10),	%xmm1		# 0 : sbbt
+
+	tbl	v4.16b,  {$sbbu}, v2.16b	// vpshufb	%xmm2,	%xmm4,	%xmm4		# 4 = sbbu
+	 tbl	v12.16b, {$sbbu}, v10.16b
+	tbl	v0.16b,  {v0.16b},v5.16b	// vpshufb	%xmm5,	%xmm0,	%xmm0		# MC ch
+	 tbl	v8.16b,  {v8.16b},v5.16b
+	tbl	v1.16b,  {$sbbt}, v3.16b	// vpshufb	%xmm3,	%xmm1,	%xmm1		# 0 = sbbt
+	 tbl	v9.16b,  {$sbbt}, v11.16b
+	eor	v0.16b,  v0.16b,  v4.16b	// vpxor	%xmm4,	%xmm0,	%xmm0		# 4 = ch
+	 eor	v8.16b,  v8.16b,  v12.16b
+						// vmovdqa	0x40(%r10),	%xmm4		# 4 : sbeu
+	eor	v0.16b,  v0.16b,  v1.16b	// vpxor	%xmm1,	%xmm0,	%xmm0		# 0 = ch
+	 eor	v8.16b,  v8.16b,  v9.16b
+						// vmovdqa	0x50(%r10),	%xmm1		# 0 : sbet
+
+	tbl	v4.16b,  {$sbeu}, v2.16b	// vpshufb	%xmm2,	%xmm4,	%xmm4		# 4 = sbeu
+	 tbl	v12.16b, {$sbeu}, v10.16b
+	tbl	v0.16b,  {v0.16b},v5.16b	// vpshufb	%xmm5,	%xmm0,	%xmm0		# MC ch
+	 tbl	v8.16b,  {v8.16b},v5.16b
+	tbl	v1.16b,  {$sbet}, v3.16b	// vpshufb	%xmm3,	%xmm1,	%xmm1		# 0 = sbet
+	 tbl	v9.16b,  {$sbet}, v11.16b
+	eor	v0.16b,  v0.16b,  v4.16b	// vpxor	%xmm4,	%xmm0,	%xmm0		# 4 = ch
+	 eor	v8.16b,  v8.16b,  v12.16b
+	ext	v5.16b,  v5.16b,  v5.16b, #12	// vpalignr \$12,	%xmm5,	%xmm5,	%xmm5
+	eor	v0.16b,  v0.16b,  v1.16b	// vpxor	%xmm1,	%xmm0,	%xmm0		# 0 = ch
+	 eor	v8.16b,  v8.16b,  v9.16b
+	sub	w8, w8, #1			// sub		\$1,%rax			# nr--
+
+.Ldec_2x_entry:
+	// top of round
+	and	v1.16b,  v0.16b,  v17.16b	// vpand	%xmm9,	%xmm0,	%xmm1	# 0 = k
+	ushr	v0.16b,  v0.16b,  #4		// vpsrlb	\$4,	%xmm0,	%xmm0	# 1 = i
+	 and	v9.16b,  v8.16b,  v17.16b
+	 ushr	v8.16b,  v8.16b,  #4
+	tbl	v2.16b,  {$invhi},v1.16b	// vpshufb	%xmm1,	%xmm11,	%xmm2	# 2 = a/k
+	 tbl	v10.16b, {$invhi},v9.16b
+	eor	v1.16b,	 v1.16b,  v0.16b	// vpxor	%xmm0,	%xmm1,	%xmm1	# 0 = j
+	 eor	v9.16b,	 v9.16b,  v8.16b
+	tbl	v3.16b,  {$invlo},v0.16b	// vpshufb	%xmm0, 	%xmm10,	%xmm3	# 3 = 1/i
+	 tbl	v11.16b, {$invlo},v8.16b
+	tbl	v4.16b,  {$invlo},v1.16b	// vpshufb	%xmm1,	%xmm10,	%xmm4	# 4 = 1/j
+	 tbl	v12.16b, {$invlo},v9.16b
+	eor	v3.16b,  v3.16b,  v2.16b	// vpxor	%xmm2,	%xmm3,	%xmm3	# 3 = iak = 1/i + a/k
+	 eor	v11.16b, v11.16b, v10.16b
+	eor	v4.16b,  v4.16b,  v2.16b	// vpxor	%xmm2, 	%xmm4,	%xmm4	# 4 = jak = 1/j + a/k
+	 eor	v12.16b, v12.16b, v10.16b
+	tbl	v2.16b,  {$invlo},v3.16b	// vpshufb	%xmm3,	%xmm10,	%xmm2	# 2 = 1/iak
+	 tbl	v10.16b, {$invlo},v11.16b
+	tbl	v3.16b,  {$invlo},v4.16b	// vpshufb	%xmm4,  %xmm10,	%xmm3	# 3 = 1/jak
+	 tbl	v11.16b, {$invlo},v12.16b
+	eor	v2.16b,  v2.16b,  v1.16b	// vpxor	%xmm1,	%xmm2,	%xmm2	# 2 = io
+	 eor	v10.16b, v10.16b, v9.16b
+	eor	v3.16b,  v3.16b,  v0.16b	// vpxor	%xmm0,  %xmm3,	%xmm3	# 3 = jo
+	 eor	v11.16b, v11.16b, v8.16b
+	ld1	{v16.2d}, [x9],#16		// vmovdqu	(%r9),	%xmm0
+	cbnz	w8, .Ldec_2x_loop
+
+	// middle of last round
+						// vmovdqa	0x60(%r10),	%xmm4	# 3 : sbou
+	tbl	v4.16b,  {$sbou}, v2.16b	// vpshufb	%xmm2,	%xmm4,	%xmm4	# 4 = sbou
+	 tbl	v12.16b, {$sbou}, v10.16b
+						// vmovdqa	0x70(%r10),	%xmm1	# 0 : sbot
+	tbl	v1.16b,  {$sbot}, v3.16b	// vpshufb	%xmm3,	%xmm1,	%xmm1	# 0 = sb1t
+	 tbl	v9.16b,  {$sbot}, v11.16b
+	ld1	{v2.2d}, [x11]			// vmovdqa	-0x160(%r11),	%xmm2	# .Lk_sr-.Lk_dsbd=-0x160
+	eor	v4.16b,  v4.16b,  v16.16b	// vpxor	%xmm0,	%xmm4,	%xmm4	# 4 = sb1u + k
+	 eor	v12.16b, v12.16b, v16.16b
+	eor	v0.16b,  v1.16b,  v4.16b	// vpxor	%xmm4,	%xmm1,	%xmm0	# 0 = A
+	 eor	v8.16b,  v9.16b,  v12.16b
+	tbl	v0.16b,  {v0.16b},v2.16b	// vpshufb	%xmm2,	%xmm0,	%xmm0
+	 tbl	v1.16b,  {v8.16b},v2.16b
+	ret
+.size	_vpaes_decrypt_2x,.-_vpaes_decrypt_2x
+___
+}
+{
+my ($inp,$bits,$out,$dir)=("x0","w1","x2","w3");
+my ($invlo,$invhi,$iptlo,$ipthi,$rcon) = map("v$_.16b",(18..21,8));
+
+$code.=<<___;
+########################################################
+##                                                    ##
+##                  AES key schedule                  ##
+##                                                    ##
+########################################################
+.type	_vpaes_key_preheat,%function
+.align	4
+_vpaes_key_preheat:
+	adr	x10, .Lk_inv
+	movi	v16.16b, #0x5b			// .Lk_s63
+	adr	x11, .Lk_sb1
+	movi	v17.16b, #0x0f			// .Lk_s0F
+	ld1	{v18.2d-v21.2d}, [x10]		// .Lk_inv, .Lk_ipt
+	adr	x10, .Lk_dksd
+	ld1	{v22.2d-v23.2d}, [x11]		// .Lk_sb1
+	adr	x11, .Lk_mc_forward
+	ld1	{v24.2d-v27.2d}, [x10],#64	// .Lk_dksd, .Lk_dksb
+	ld1	{v28.2d-v31.2d}, [x10],#64	// .Lk_dkse, .Lk_dks9
+	ld1	{v8.2d}, [x10]			// .Lk_rcon
+	ld1	{v9.2d}, [x11]			// .Lk_mc_forward[0]
+	ret
+.size	_vpaes_key_preheat,.-_vpaes_key_preheat
+
+.type	_vpaes_schedule_core,%function
+.align	4
+_vpaes_schedule_core:
+	.inst	0xd503233f			// paciasp
+	stp	x29, x30, [sp,#-16]!
+	add	x29,sp,#0
+
+	bl	_vpaes_key_preheat		// load the tables
+
+	ld1	{v0.16b}, [$inp],#16		// vmovdqu	(%rdi),	%xmm0		# load key (unaligned)
+
+	// input transform
+	mov	v3.16b, v0.16b			// vmovdqa	%xmm0,	%xmm3
+	bl	_vpaes_schedule_transform
+	mov	v7.16b, v0.16b			// vmovdqa	%xmm0,	%xmm7
+
+	adr	x10, .Lk_sr			// lea	.Lk_sr(%rip),%r10
+	add	x8, x8, x10
+	cbnz	$dir, .Lschedule_am_decrypting
+
+	// encrypting, output zeroth round key after transform
+	st1	{v0.2d}, [$out]			// vmovdqu	%xmm0,	(%rdx)
+	b	.Lschedule_go
+
+.Lschedule_am_decrypting:
+	// decrypting, output zeroth round key after shiftrows
+	ld1	{v1.2d}, [x8]			// vmovdqa	(%r8,%r10),	%xmm1
+	tbl	v3.16b, {v3.16b}, v1.16b	// vpshufb  %xmm1,	%xmm3,	%xmm3
+	st1	{v3.2d}, [$out]			// vmovdqu	%xmm3,	(%rdx)
+	eor	x8, x8, #0x30			// xor	\$0x30, %r8
+
+.Lschedule_go:
+	cmp	$bits, #192			// cmp	\$192,	%esi
+	b.hi	.Lschedule_256
+	b.eq	.Lschedule_192
+	// 128: fall though
+
+##
+##  .schedule_128
+##
+##  128-bit specific part of key schedule.
+##
+##  This schedule is really simple, because all its parts
+##  are accomplished by the subroutines.
+##
+.Lschedule_128:
+	mov	$inp, #10			// mov	\$10, %esi
+
+.Loop_schedule_128:
+	sub	$inp, $inp, #1			// dec	%esi
+	bl 	_vpaes_schedule_round
+	cbz 	$inp, .Lschedule_mangle_last
+	bl	_vpaes_schedule_mangle		// write output
+	b 	.Loop_schedule_128
+
+##
+##  .aes_schedule_192
+##
+##  192-bit specific part of key schedule.
+##
+##  The main body of this schedule is the same as the 128-bit
+##  schedule, but with more smearing.  The long, high side is
+##  stored in %xmm7 as before, and the short, low side is in
+##  the high bits of %xmm6.
+##
+##  This schedule is somewhat nastier, however, because each
+##  round produces 192 bits of key material, or 1.5 round keys.
+##  Therefore, on each cycle we do 2 rounds and produce 3 round
+##  keys.
+##
+.align	4
+.Lschedule_192:
+	sub	$inp, $inp, #8
+	ld1	{v0.16b}, [$inp]		// vmovdqu	8(%rdi),%xmm0		# load key part 2 (very unaligned)
+	bl	_vpaes_schedule_transform	// input transform
+	mov	v6.16b, v0.16b			// vmovdqa	%xmm0,	%xmm6		# save short part
+	eor	v4.16b, v4.16b, v4.16b		// vpxor	%xmm4,	%xmm4, %xmm4	# clear 4
+	ins	v6.d[0], v4.d[0]		// vmovhlps	%xmm4,	%xmm6,	%xmm6		# clobber low side with zeros
+	mov	$inp, #4			// mov	\$4,	%esi
+
+.Loop_schedule_192:
+	sub	$inp, $inp, #1			// dec	%esi
+	bl	_vpaes_schedule_round
+	ext	v0.16b, v6.16b, v0.16b, #8	// vpalignr	\$8,%xmm6,%xmm0,%xmm0
+	bl	_vpaes_schedule_mangle		// save key n
+	bl	_vpaes_schedule_192_smear
+	bl	_vpaes_schedule_mangle		// save key n+1
+	bl	_vpaes_schedule_round
+	cbz 	$inp, .Lschedule_mangle_last
+	bl	_vpaes_schedule_mangle		// save key n+2
+	bl	_vpaes_schedule_192_smear
+	b	.Loop_schedule_192
+
+##
+##  .aes_schedule_256
+##
+##  256-bit specific part of key schedule.
+##
+##  The structure here is very similar to the 128-bit
+##  schedule, but with an additional "low side" in
+##  %xmm6.  The low side's rounds are the same as the
+##  high side's, except no rcon and no rotation.
+##
+.align	4
+.Lschedule_256:
+	ld1	{v0.16b}, [$inp]		// vmovdqu	16(%rdi),%xmm0		# load key part 2 (unaligned)
+	bl	_vpaes_schedule_transform	// input transform
+	mov	$inp, #7			// mov	\$7, %esi
+
+.Loop_schedule_256:
+	sub	$inp, $inp, #1			// dec	%esi
+	bl	_vpaes_schedule_mangle		// output low result
+	mov	v6.16b, v0.16b			// vmovdqa	%xmm0,	%xmm6		# save cur_lo in xmm6
+
+	// high round
+	bl	_vpaes_schedule_round
+	cbz 	$inp, .Lschedule_mangle_last
+	bl	_vpaes_schedule_mangle
+
+	// low round. swap xmm7 and xmm6
+	dup	v0.4s, v0.s[3]			// vpshufd	\$0xFF,	%xmm0,	%xmm0
+	movi	v4.16b, #0
+	mov	v5.16b, v7.16b			// vmovdqa	%xmm7,	%xmm5
+	mov	v7.16b, v6.16b			// vmovdqa	%xmm6,	%xmm7
+	bl	_vpaes_schedule_low_round
+	mov	v7.16b, v5.16b			// vmovdqa	%xmm5,	%xmm7
+
+	b	.Loop_schedule_256
+
+##
+##  .aes_schedule_mangle_last
+##
+##  Mangler for last round of key schedule
+##  Mangles %xmm0
+##    when encrypting, outputs out(%xmm0) ^ 63
+##    when decrypting, outputs unskew(%xmm0)
+##
+##  Always called right before return... jumps to cleanup and exits
+##
+.align	4
+.Lschedule_mangle_last:
+	// schedule last round key from xmm0
+	adr	x11, .Lk_deskew			// lea	.Lk_deskew(%rip),%r11	# prepare to deskew
+	cbnz	$dir, .Lschedule_mangle_last_dec
+
+	// encrypting
+	ld1	{v1.2d}, [x8]			// vmovdqa	(%r8,%r10),%xmm1
+	adr	x11, .Lk_opt			// lea	.Lk_opt(%rip),	%r11		# prepare to output transform
+	add	$out, $out, #32			// add	\$32,	%rdx
+	tbl	v0.16b, {v0.16b}, v1.16b	// vpshufb	%xmm1,	%xmm0,	%xmm0		# output permute
+
+.Lschedule_mangle_last_dec:
+	ld1	{v20.2d-v21.2d}, [x11]		// reload constants
+	sub	$out, $out, #16			// add	\$-16,	%rdx
+	eor	v0.16b, v0.16b, v16.16b		// vpxor	.Lk_s63(%rip),	%xmm0,	%xmm0
+	bl	_vpaes_schedule_transform	// output transform
+	st1	{v0.2d}, [$out]			// vmovdqu	%xmm0,	(%rdx)		# save last key
+
+	// cleanup
+	eor	v0.16b, v0.16b, v0.16b		// vpxor	%xmm0,	%xmm0,	%xmm0
+	eor	v1.16b, v1.16b, v1.16b		// vpxor	%xmm1,	%xmm1,	%xmm1
+	eor	v2.16b, v2.16b, v2.16b		// vpxor	%xmm2,	%xmm2,	%xmm2
+	eor	v3.16b, v3.16b, v3.16b		// vpxor	%xmm3,	%xmm3,	%xmm3
+	eor	v4.16b, v4.16b, v4.16b		// vpxor	%xmm4,	%xmm4,	%xmm4
+	eor	v5.16b, v5.16b, v5.16b		// vpxor	%xmm5,	%xmm5,	%xmm5
+	eor	v6.16b, v6.16b, v6.16b		// vpxor	%xmm6,	%xmm6,	%xmm6
+	eor	v7.16b, v7.16b, v7.16b		// vpxor	%xmm7,	%xmm7,	%xmm7
+	ldp	x29, x30, [sp],#16
+	.inst	0xd50323bf			// autiasp
+	ret
+.size	_vpaes_schedule_core,.-_vpaes_schedule_core
+
+##
+##  .aes_schedule_192_smear
+##
+##  Smear the short, low side in the 192-bit key schedule.
+##
+##  Inputs:
+##    %xmm7: high side, b  a  x  y
+##    %xmm6:  low side, d  c  0  0
+##    %xmm13: 0
+##
+##  Outputs:
+##    %xmm6: b+c+d  b+c  0  0
+##    %xmm0: b+c+d  b+c  b  a
+##
+.type	_vpaes_schedule_192_smear,%function
+.align	4
+_vpaes_schedule_192_smear:
+	movi	v1.16b, #0
+	dup	v0.4s, v7.s[3]
+	ins	v1.s[3], v6.s[2]	// vpshufd	\$0x80,	%xmm6,	%xmm1	# d c 0 0 -> c 0 0 0
+	ins	v0.s[0], v7.s[2]	// vpshufd	\$0xFE,	%xmm7,	%xmm0	# b a _ _ -> b b b a
+	eor	v6.16b, v6.16b, v1.16b	// vpxor	%xmm1,	%xmm6,	%xmm6	# -> c+d c 0 0
+	eor	v1.16b, v1.16b, v1.16b	// vpxor	%xmm1,	%xmm1,	%xmm1
+	eor	v6.16b, v6.16b, v0.16b	// vpxor	%xmm0,	%xmm6,	%xmm6	# -> b+c+d b+c b a
+	mov	v0.16b, v6.16b		// vmovdqa	%xmm6,	%xmm0
+	ins	v6.d[0], v1.d[0]	// vmovhlps	%xmm1,	%xmm6,	%xmm6	# clobber low side with zeros
+	ret
+.size	_vpaes_schedule_192_smear,.-_vpaes_schedule_192_smear
+
+##
+##  .aes_schedule_round
+##
+##  Runs one main round of the key schedule on %xmm0, %xmm7
+##
+##  Specifically, runs subbytes on the high dword of %xmm0
+##  then rotates it by one byte and xors into the low dword of
+##  %xmm7.
+##
+##  Adds rcon from low byte of %xmm8, then rotates %xmm8 for
+##  next rcon.
+##
+##  Smears the dwords of %xmm7 by xoring the low into the
+##  second low, result into third, result into highest.
+##
+##  Returns results in %xmm7 = %xmm0.
+##  Clobbers %xmm1-%xmm4, %r11.
+##
+.type	_vpaes_schedule_round,%function
+.align	4
+_vpaes_schedule_round:
+	// extract rcon from xmm8
+	movi	v4.16b, #0			// vpxor	%xmm4,	%xmm4,	%xmm4
+	ext	v1.16b, $rcon, v4.16b, #15	// vpalignr	\$15,	%xmm8,	%xmm4,	%xmm1
+	ext	$rcon, $rcon, $rcon, #15	// vpalignr	\$15,	%xmm8,	%xmm8,	%xmm8
+	eor	v7.16b, v7.16b, v1.16b		// vpxor	%xmm1,	%xmm7,	%xmm7
+
+	// rotate
+	dup	v0.4s, v0.s[3]			// vpshufd	\$0xFF,	%xmm0,	%xmm0
+	ext	v0.16b, v0.16b, v0.16b, #1	// vpalignr	\$1,	%xmm0,	%xmm0,	%xmm0
+
+	// fall through...
+
+	// low round: same as high round, but no rotation and no rcon.
+_vpaes_schedule_low_round:
+	// smear xmm7
+	ext	v1.16b, v4.16b, v7.16b, #12	// vpslldq	\$4,	%xmm7,	%xmm1
+	eor	v7.16b, v7.16b, v1.16b		// vpxor	%xmm1,	%xmm7,	%xmm7
+	ext	v4.16b, v4.16b, v7.16b, #8	// vpslldq	\$8,	%xmm7,	%xmm4
+
+	// subbytes
+	and	v1.16b, v0.16b, v17.16b		// vpand	%xmm9,	%xmm0,	%xmm1		# 0 = k
+	ushr	v0.16b, v0.16b, #4		// vpsrlb	\$4,	%xmm0,	%xmm0		# 1 = i
+	 eor	v7.16b, v7.16b, v4.16b		// vpxor	%xmm4,	%xmm7,	%xmm7
+	tbl	v2.16b, {$invhi}, v1.16b	// vpshufb	%xmm1,	%xmm11,	%xmm2		# 2 = a/k
+	eor	v1.16b, v1.16b, v0.16b		// vpxor	%xmm0,	%xmm1,	%xmm1		# 0 = j
+	tbl	v3.16b, {$invlo}, v0.16b	// vpshufb	%xmm0, 	%xmm10,	%xmm3		# 3 = 1/i
+	eor	v3.16b, v3.16b, v2.16b		// vpxor	%xmm2,	%xmm3,	%xmm3		# 3 = iak = 1/i + a/k
+	tbl	v4.16b, {$invlo}, v1.16b	// vpshufb	%xmm1,	%xmm10,	%xmm4		# 4 = 1/j
+	 eor	v7.16b, v7.16b, v16.16b		// vpxor	.Lk_s63(%rip),	%xmm7,	%xmm7
+	tbl	v3.16b, {$invlo}, v3.16b	// vpshufb	%xmm3,	%xmm10,	%xmm3		# 2 = 1/iak
+	eor	v4.16b, v4.16b, v2.16b		// vpxor	%xmm2,	%xmm4,	%xmm4		# 4 = jak = 1/j + a/k
+	tbl	v2.16b, {$invlo}, v4.16b	// vpshufb	%xmm4,	%xmm10,	%xmm2		# 3 = 1/jak
+	eor	v3.16b, v3.16b, v1.16b		// vpxor	%xmm1,	%xmm3,	%xmm3		# 2 = io
+	eor	v2.16b, v2.16b, v0.16b		// vpxor	%xmm0,	%xmm2,	%xmm2		# 3 = jo
+	tbl	v4.16b, {v23.16b}, v3.16b	// vpshufb	%xmm3,	%xmm13,	%xmm4		# 4 = sbou
+	tbl	v1.16b, {v22.16b}, v2.16b	// vpshufb	%xmm2,	%xmm12,	%xmm1		# 0 = sb1t
+	eor	v1.16b, v1.16b, v4.16b		// vpxor	%xmm4,	%xmm1,	%xmm1		# 0 = sbox output
+
+	// add in smeared stuff
+	eor	v0.16b, v1.16b, v7.16b		// vpxor	%xmm7,	%xmm1,	%xmm0
+	eor	v7.16b, v1.16b, v7.16b		// vmovdqa	%xmm0,	%xmm7
+	ret
+.size	_vpaes_schedule_round,.-_vpaes_schedule_round
+
+##
+##  .aes_schedule_transform
+##
+##  Linear-transform %xmm0 according to tables at (%r11)
+##
+##  Requires that %xmm9 = 0x0F0F... as in preheat
+##  Output in %xmm0
+##  Clobbers %xmm1, %xmm2
+##
+.type	_vpaes_schedule_transform,%function
+.align	4
+_vpaes_schedule_transform:
+	and	v1.16b, v0.16b, v17.16b		// vpand	%xmm9,	%xmm0,	%xmm1
+	ushr	v0.16b, v0.16b, #4		// vpsrlb	\$4,	%xmm0,	%xmm0
+						// vmovdqa	(%r11),	%xmm2 	# lo
+	tbl	v2.16b, {$iptlo}, v1.16b	// vpshufb	%xmm1,	%xmm2,	%xmm2
+						// vmovdqa	16(%r11),	%xmm1 # hi
+	tbl	v0.16b, {$ipthi}, v0.16b	// vpshufb	%xmm0,	%xmm1,	%xmm0
+	eor	v0.16b, v0.16b, v2.16b		// vpxor	%xmm2,	%xmm0,	%xmm0
+	ret
+.size	_vpaes_schedule_transform,.-_vpaes_schedule_transform
+
+##
+##  .aes_schedule_mangle
+##
+##  Mangle xmm0 from (basis-transformed) standard version
+##  to our version.
+##
+##  On encrypt,
+##    xor with 0x63
+##    multiply by circulant 0,1,1,1
+##    apply shiftrows transform
+##
+##  On decrypt,
+##    xor with 0x63
+##    multiply by "inverse mixcolumns" circulant E,B,D,9
+##    deskew
+##    apply shiftrows transform
+##
+##
+##  Writes out to (%rdx), and increments or decrements it
+##  Keeps track of round number mod 4 in %r8
+##  Preserves xmm0
+##  Clobbers xmm1-xmm5
+##
+.type	_vpaes_schedule_mangle,%function
+.align	4
+_vpaes_schedule_mangle:
+	mov	v4.16b, v0.16b			// vmovdqa	%xmm0,	%xmm4	# save xmm0 for later
+						// vmovdqa	.Lk_mc_forward(%rip),%xmm5
+	cbnz	$dir, .Lschedule_mangle_dec
+
+	// encrypting
+	eor	v4.16b, v0.16b, v16.16b		// vpxor	.Lk_s63(%rip),	%xmm0,	%xmm4
+	add	$out, $out, #16			// add	\$16,	%rdx
+	tbl	v4.16b, {v4.16b}, v9.16b	// vpshufb	%xmm5,	%xmm4,	%xmm4
+	tbl	v1.16b, {v4.16b}, v9.16b	// vpshufb	%xmm5,	%xmm4,	%xmm1
+	tbl	v3.16b, {v1.16b}, v9.16b	// vpshufb	%xmm5,	%xmm1,	%xmm3
+	eor	v4.16b, v4.16b, v1.16b		// vpxor	%xmm1,	%xmm4,	%xmm4
+	ld1	{v1.2d}, [x8]			// vmovdqa	(%r8,%r10),	%xmm1
+	eor	v3.16b, v3.16b, v4.16b		// vpxor	%xmm4,	%xmm3,	%xmm3
+
+	b	.Lschedule_mangle_both
+.align	4
+.Lschedule_mangle_dec:
+	// inverse mix columns
+						// lea	.Lk_dksd(%rip),%r11
+	ushr	v1.16b, v4.16b, #4		// vpsrlb	\$4,	%xmm4,	%xmm1	# 1 = hi
+	and	v4.16b, v4.16b, v17.16b		// vpand	%xmm9,	%xmm4,	%xmm4	# 4 = lo
+
+						// vmovdqa	0x00(%r11),	%xmm2
+	tbl	v2.16b, {v24.16b}, v4.16b	// vpshufb	%xmm4,	%xmm2,	%xmm2
+						// vmovdqa	0x10(%r11),	%xmm3
+	tbl	v3.16b,	{v25.16b}, v1.16b	// vpshufb	%xmm1,	%xmm3,	%xmm3
+	eor	v3.16b, v3.16b, v2.16b		// vpxor	%xmm2,	%xmm3,	%xmm3
+	tbl	v3.16b, {v3.16b}, v9.16b	// vpshufb	%xmm5,	%xmm3,	%xmm3
+
+						// vmovdqa	0x20(%r11),	%xmm2
+	tbl	v2.16b, {v26.16b}, v4.16b	// vpshufb	%xmm4,	%xmm2,	%xmm2
+	eor	v2.16b, v2.16b, v3.16b		// vpxor	%xmm3,	%xmm2,	%xmm2
+						// vmovdqa	0x30(%r11),	%xmm3
+	tbl	v3.16b, {v27.16b}, v1.16b	// vpshufb	%xmm1,	%xmm3,	%xmm3
+	eor	v3.16b, v3.16b, v2.16b		// vpxor	%xmm2,	%xmm3,	%xmm3
+	tbl	v3.16b, {v3.16b}, v9.16b	// vpshufb	%xmm5,	%xmm3,	%xmm3
+
+						// vmovdqa	0x40(%r11),	%xmm2
+	tbl	v2.16b, {v28.16b}, v4.16b	// vpshufb	%xmm4,	%xmm2,	%xmm2
+	eor	v2.16b, v2.16b, v3.16b		// vpxor	%xmm3,	%xmm2,	%xmm2
+						// vmovdqa	0x50(%r11),	%xmm3
+	tbl	v3.16b, {v29.16b}, v1.16b	// vpshufb	%xmm1,	%xmm3,	%xmm3
+	eor	v3.16b, v3.16b, v2.16b		// vpxor	%xmm2,	%xmm3,	%xmm3
+
+						// vmovdqa	0x60(%r11),	%xmm2
+	tbl	v2.16b, {v30.16b}, v4.16b	// vpshufb	%xmm4,	%xmm2,	%xmm2
+	tbl	v3.16b, {v3.16b}, v9.16b	// vpshufb	%xmm5,	%xmm3,	%xmm3
+						// vmovdqa	0x70(%r11),	%xmm4
+	tbl	v4.16b, {v31.16b}, v1.16b	// vpshufb	%xmm1,	%xmm4,	%xmm4
+	ld1	{v1.2d}, [x8]			// vmovdqa	(%r8,%r10),	%xmm1
+	eor	v2.16b, v2.16b, v3.16b		// vpxor	%xmm3,	%xmm2,	%xmm2
+	eor	v3.16b, v4.16b, v2.16b		// vpxor	%xmm2,	%xmm4,	%xmm3
+
+	sub	$out, $out, #16			// add	\$-16,	%rdx
+
+.Lschedule_mangle_both:
+	tbl	v3.16b, {v3.16b}, v1.16b	// vpshufb	%xmm1,	%xmm3,	%xmm3
+	add	x8, x8, #64-16			// add	\$-16,	%r8
+	and	x8, x8, #~(1<<6)		// and	\$0x30,	%r8
+	st1	{v3.2d}, [$out]			// vmovdqu	%xmm3,	(%rdx)
+	ret
+.size	_vpaes_schedule_mangle,.-_vpaes_schedule_mangle
+
+.globl	vpaes_set_encrypt_key
+.type	vpaes_set_encrypt_key,%function
+.align	4
+vpaes_set_encrypt_key:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+	stp	d8,d9,[sp,#-16]!	// ABI spec says so
+
+	lsr	w9, $bits, #5		// shr	\$5,%eax
+	add	w9, w9, #5		// \$5,%eax
+	str	w9, [$out,#240]		// mov	%eax,240(%rdx)	# AES_KEY->rounds = nbits/32+5;
+
+	mov	$dir, #0		// mov	\$0,%ecx
+	mov	x8, #0x30		// mov	\$0x30,%r8d
+	bl	_vpaes_schedule_core
+	eor	x0, x0, x0
+
+	ldp	d8,d9,[sp],#16
+	ldp	x29,x30,[sp],#16
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	vpaes_set_encrypt_key,.-vpaes_set_encrypt_key
+
+.globl	vpaes_set_decrypt_key
+.type	vpaes_set_decrypt_key,%function
+.align	4
+vpaes_set_decrypt_key:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+	stp	d8,d9,[sp,#-16]!	// ABI spec says so
+
+	lsr	w9, $bits, #5		// shr	\$5,%eax
+	add	w9, w9, #5		// \$5,%eax
+	str	w9, [$out,#240]		// mov	%eax,240(%rdx)	# AES_KEY->rounds = nbits/32+5;
+	lsl	w9, w9, #4		// shl	\$4,%eax
+	add	$out, $out, #16		// lea	16(%rdx,%rax),%rdx
+	add	$out, $out, x9
+
+	mov	$dir, #1		// mov	\$1,%ecx
+	lsr	w8, $bits, #1		// shr	\$1,%r8d
+	and	x8, x8, #32		// and	\$32,%r8d
+	eor	x8, x8, #32		// xor	\$32,%r8d	# nbits==192?0:32
+	bl	_vpaes_schedule_core
+
+	ldp	d8,d9,[sp],#16
+	ldp	x29,x30,[sp],#16
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	vpaes_set_decrypt_key,.-vpaes_set_decrypt_key
+___
+}
+{
+my ($inp,$out,$len,$key,$ivec,$dir) = map("x$_",(0..5));
+
+$code.=<<___;
+.globl	vpaes_cbc_encrypt
+.type	vpaes_cbc_encrypt,%function
+.align	4
+vpaes_cbc_encrypt:
+	cbz	$len, .Lcbc_abort
+	cmp	w5, #0			// check direction
+	b.eq	vpaes_cbc_decrypt
+
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+
+	mov	x17, $len		// reassign
+	mov	x2,  $key		// reassign
+
+	ld1	{v0.16b}, [$ivec]	// load ivec
+	bl	_vpaes_encrypt_preheat
+	b	.Lcbc_enc_loop
+
+.align	4
+.Lcbc_enc_loop:
+	ld1	{v7.16b}, [$inp],#16	// load input
+	eor	v7.16b, v7.16b, v0.16b	// xor with ivec
+	bl	_vpaes_encrypt_core
+	st1	{v0.16b}, [$out],#16	// save output
+	subs	x17, x17, #16
+	b.hi	.Lcbc_enc_loop
+
+	st1	{v0.16b}, [$ivec]	// write ivec
+
+	ldp	x29,x30,[sp],#16
+	.inst	0xd50323bf		// autiasp
+.Lcbc_abort:
+	ret
+.size	vpaes_cbc_encrypt,.-vpaes_cbc_encrypt
+
+.type	vpaes_cbc_decrypt,%function
+.align	4
+vpaes_cbc_decrypt:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+	stp	d8,d9,[sp,#-16]!	// ABI spec says so
+	stp	d10,d11,[sp,#-16]!
+	stp	d12,d13,[sp,#-16]!
+	stp	d14,d15,[sp,#-16]!
+
+	mov	x17, $len		// reassign
+	mov	x2,  $key		// reassign
+	ld1	{v6.16b}, [$ivec]	// load ivec
+	bl	_vpaes_decrypt_preheat
+	tst	x17, #16
+	b.eq	.Lcbc_dec_loop2x
+
+	ld1	{v7.16b}, [$inp], #16	// load input
+	bl	_vpaes_decrypt_core
+	eor	v0.16b, v0.16b, v6.16b	// xor with ivec
+	orr	v6.16b, v7.16b, v7.16b	// next ivec value
+	st1	{v0.16b}, [$out], #16
+	subs	x17, x17, #16
+	b.ls	.Lcbc_dec_done
+
+.align	4
+.Lcbc_dec_loop2x:
+	ld1	{v14.16b,v15.16b}, [$inp], #32
+	bl	_vpaes_decrypt_2x
+	eor	v0.16b, v0.16b, v6.16b	// xor with ivec
+	eor	v1.16b, v1.16b, v14.16b
+	orr	v6.16b, v15.16b, v15.16b
+	st1	{v0.16b,v1.16b}, [$out], #32
+	subs	x17, x17, #32
+	b.hi	.Lcbc_dec_loop2x
+
+.Lcbc_dec_done:
+	st1	{v6.16b}, [$ivec]
+
+	ldp	d14,d15,[sp],#16
+	ldp	d12,d13,[sp],#16
+	ldp	d10,d11,[sp],#16
+	ldp	d8,d9,[sp],#16
+	ldp	x29,x30,[sp],#16
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	vpaes_cbc_decrypt,.-vpaes_cbc_decrypt
+___
+if (1) {
+$code.=<<___;
+.globl	vpaes_ecb_encrypt
+.type	vpaes_ecb_encrypt,%function
+.align	4
+vpaes_ecb_encrypt:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+	stp	d8,d9,[sp,#-16]!	// ABI spec says so
+	stp	d10,d11,[sp,#-16]!
+	stp	d12,d13,[sp,#-16]!
+	stp	d14,d15,[sp,#-16]!
+
+	mov	x17, $len
+	mov	x2,  $key
+	bl	_vpaes_encrypt_preheat
+	tst	x17, #16
+	b.eq	.Lecb_enc_loop
+
+	ld1	{v7.16b}, [$inp],#16
+	bl	_vpaes_encrypt_core
+	st1	{v0.16b}, [$out],#16
+	subs	x17, x17, #16
+	b.ls	.Lecb_enc_done
+
+.align	4
+.Lecb_enc_loop:
+	ld1	{v14.16b,v15.16b}, [$inp], #32
+	bl	_vpaes_encrypt_2x
+	st1	{v0.16b,v1.16b}, [$out], #32
+	subs	x17, x17, #32
+	b.hi	.Lecb_enc_loop
+
+.Lecb_enc_done:
+	ldp	d14,d15,[sp],#16
+	ldp	d12,d13,[sp],#16
+	ldp	d10,d11,[sp],#16
+	ldp	d8,d9,[sp],#16
+	ldp	x29,x30,[sp],#16
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	vpaes_ecb_encrypt,.-vpaes_ecb_encrypt
+
+.globl	vpaes_ecb_decrypt
+.type	vpaes_ecb_decrypt,%function
+.align	4
+vpaes_ecb_decrypt:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+	stp	d8,d9,[sp,#-16]!	// ABI spec says so
+	stp	d10,d11,[sp,#-16]!
+	stp	d12,d13,[sp,#-16]!
+	stp	d14,d15,[sp,#-16]!
+
+	mov	x17, $len
+	mov	x2,  $key
+	bl	_vpaes_decrypt_preheat
+	tst	x17, #16
+	b.eq	.Lecb_dec_loop
+
+	ld1	{v7.16b}, [$inp],#16
+	bl	_vpaes_encrypt_core
+	st1	{v0.16b}, [$out],#16
+	subs	x17, x17, #16
+	b.ls	.Lecb_dec_done
+
+.align	4
+.Lecb_dec_loop:
+	ld1	{v14.16b,v15.16b}, [$inp], #32
+	bl	_vpaes_decrypt_2x
+	st1	{v0.16b,v1.16b}, [$out], #32
+	subs	x17, x17, #32
+	b.hi	.Lecb_dec_loop
+
+.Lecb_dec_done:
+	ldp	d14,d15,[sp],#16
+	ldp	d12,d13,[sp],#16
+	ldp	d10,d11,[sp],#16
+	ldp	d8,d9,[sp],#16
+	ldp	x29,x30,[sp],#16
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	vpaes_ecb_decrypt,.-vpaes_ecb_decrypt
+___
+}	}
+print $code;
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/vpaes-ppc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/vpaes-ppc.pl
new file mode 100644
index 000000000..3c771a7e9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/vpaes-ppc.pl
@@ -0,0 +1,1594 @@
+#! /usr/bin/env perl
+# Copyright 2013-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+######################################################################
+## Constant-time SSSE3 AES core implementation.
+## version 0.1
+##
+## By Mike Hamburg (Stanford University), 2009
+## Public domain.
+##
+## For details see http://shiftleft.org/papers/vector_aes/ and
+## http://crypto.stanford.edu/vpaes/.
+
+# CBC encrypt/decrypt performance in cycles per byte processed with
+# 128-bit key.
+#
+#		aes-ppc.pl		this
+# PPC74x0/G4e	35.5/52.1/(23.8)	11.9(*)/15.4
+# PPC970/G5	37.9/55.0/(28.5)	22.2/28.5
+# POWER6	42.7/54.3/(28.2)	63.0/92.8(**)
+# POWER7	32.3/42.9/(18.4)	18.5/23.3
+#
+# (*)	This is ~10% worse than reported in paper. The reason is
+#	twofold. This module doesn't make any assumption about
+#	key schedule (or data for that matter) alignment and handles
+#	it in-line. Secondly it, being transliterated from
+#	vpaes-x86_64.pl, relies on "nested inversion" better suited
+#	for Intel CPUs.
+# (**)	Inadequate POWER6 performance is due to astronomic AltiVec
+#	latency, 9 cycles per simple logical operation.
+
+$flavour = shift;
+
+if ($flavour =~ /64/) {
+	$SIZE_T	=8;
+	$LRSAVE	=2*$SIZE_T;
+	$STU	="stdu";
+	$POP	="ld";
+	$PUSH	="std";
+	$UCMP	="cmpld";
+} elsif ($flavour =~ /32/) {
+	$SIZE_T	=4;
+	$LRSAVE	=$SIZE_T;
+	$STU	="stwu";
+	$POP	="lwz";
+	$PUSH	="stw";
+	$UCMP	="cmplw";
+} else { die "nonsense $flavour"; }
+
+$sp="r1";
+$FRAME=6*$SIZE_T+13*16;	# 13*16 is for v20-v31 offload
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open STDOUT,"| $^X $xlate $flavour ".shift || die "can't call $xlate: $!";
+
+$code.=<<___;
+.machine	"any"
+
+.text
+
+.align	7	# totally strategic alignment
+_vpaes_consts:
+Lk_mc_forward:	# mc_forward
+	.long	0x01020300, 0x05060704, 0x090a0b08, 0x0d0e0f0c	?inv
+	.long	0x05060704, 0x090a0b08, 0x0d0e0f0c, 0x01020300	?inv
+	.long	0x090a0b08, 0x0d0e0f0c, 0x01020300, 0x05060704	?inv
+	.long	0x0d0e0f0c, 0x01020300, 0x05060704, 0x090a0b08	?inv
+Lk_mc_backward:	# mc_backward
+	.long	0x03000102, 0x07040506, 0x0b08090a, 0x0f0c0d0e	?inv
+	.long	0x0f0c0d0e, 0x03000102, 0x07040506, 0x0b08090a	?inv
+	.long	0x0b08090a, 0x0f0c0d0e, 0x03000102, 0x07040506	?inv
+	.long	0x07040506, 0x0b08090a, 0x0f0c0d0e, 0x03000102	?inv
+Lk_sr:		# sr
+	.long	0x00010203, 0x04050607, 0x08090a0b, 0x0c0d0e0f	?inv
+	.long	0x00050a0f, 0x04090e03, 0x080d0207, 0x0c01060b	?inv
+	.long	0x0009020b, 0x040d060f, 0x08010a03, 0x0c050e07	?inv
+	.long	0x000d0a07, 0x04010e0b, 0x0805020f, 0x0c090603	?inv
+
+##
+## "Hot" constants
+##
+Lk_inv:		# inv, inva
+	.long	0xf001080d, 0x0f06050e, 0x020c0b0a, 0x09030704	?rev
+	.long	0xf0070b0f, 0x060a0401, 0x09080502, 0x0c0e0d03	?rev
+Lk_ipt:		# input transform (lo, hi)
+	.long	0x00702a5a, 0x98e8b2c2, 0x08782252, 0x90e0baca	?rev
+	.long	0x004d7c31, 0x7d30014c, 0x81ccfdb0, 0xfcb180cd	?rev
+Lk_sbo:		# sbou, sbot
+	.long	0x00c7bd6f, 0x176dd2d0, 0x78a802c5, 0x7abfaa15	?rev
+	.long	0x006abb5f, 0xa574e4cf, 0xfa352b41, 0xd1901e8e	?rev
+Lk_sb1:		# sb1u, sb1t
+	.long	0x0023e2fa, 0x15d41836, 0xefd92e0d, 0xc1ccf73b	?rev
+	.long	0x003e50cb, 0x8fe19bb1, 0x44f52a14, 0x6e7adfa5	?rev
+Lk_sb2:		# sb2u, sb2t
+	.long	0x0029e10a, 0x4088eb69, 0x4a2382ab, 0xc863a1c2	?rev
+	.long	0x0024710b, 0xc6937ae2, 0xcd2f98bc, 0x55e9b75e	?rev
+
+##
+##  Decryption stuff
+##
+Lk_dipt:	# decryption input transform
+	.long	0x005f540b, 0x045b500f, 0x1a454e11, 0x1e414a15	?rev
+	.long	0x00650560, 0xe683e386, 0x94f191f4, 0x72177712	?rev
+Lk_dsbo:	# decryption sbox final output
+	.long	0x0040f97e, 0x53ea8713, 0x2d3e94d4, 0xb96daac7	?rev
+	.long	0x001d4493, 0x0f56d712, 0x9c8ec5d8, 0x59814bca	?rev
+Lk_dsb9:	# decryption sbox output *9*u, *9*t
+	.long	0x00d6869a, 0x53031c85, 0xc94c994f, 0x501fd5ca	?rev
+	.long	0x0049d7ec, 0x89173bc0, 0x65a5fbb2, 0x9e2c5e72	?rev
+Lk_dsbd:	# decryption sbox output *D*u, *D*t
+	.long	0x00a2b1e6, 0xdfcc577d, 0x39442a88, 0x139b6ef5	?rev
+	.long	0x00cbc624, 0xf7fae23c, 0xd3efde15, 0x0d183129	?rev
+Lk_dsbb:	# decryption sbox output *B*u, *B*t
+	.long	0x0042b496, 0x926422d0, 0x04d4f2b0, 0xf6462660	?rev
+	.long	0x006759cd, 0xa69894c1, 0x6baa5532, 0x3e0cfff3	?rev
+Lk_dsbe:	# decryption sbox output *E*u, *E*t
+	.long	0x00d0d426, 0x9692f246, 0xb0f6b464, 0x04604222	?rev
+	.long	0x00c1aaff, 0xcda6550c, 0x323e5998, 0x6bf36794	?rev
+
+##
+##  Key schedule constants
+##
+Lk_dksd:	# decryption key schedule: invskew x*D
+	.long	0x0047e4a3, 0x5d1ab9fe, 0xf9be1d5a, 0xa4e34007	?rev
+	.long	0x008336b5, 0xf477c241, 0x1e9d28ab, 0xea69dc5f	?rev
+Lk_dksb:	# decryption key schedule: invskew x*B
+	.long	0x00d55085, 0x1fca4f9a, 0x994cc91c, 0x8653d603	?rev
+	.long	0x004afcb6, 0xa7ed5b11, 0xc882347e, 0x6f2593d9	?rev
+Lk_dkse:	# decryption key schedule: invskew x*E + 0x63
+	.long	0x00d6c91f, 0xca1c03d5, 0x86504f99, 0x4c9a8553	?rev
+	.long	0xe87bdc4f, 0x059631a2, 0x8714b320, 0x6af95ecd	?rev
+Lk_dks9:	# decryption key schedule: invskew x*9
+	.long	0x00a7d97e, 0xc86f11b6, 0xfc5b2582, 0x3493ed4a	?rev
+	.long	0x00331427, 0x62517645, 0xcefddae9, 0xac9fb88b	?rev
+
+Lk_rcon:	# rcon
+	.long	0xb6ee9daf, 0xb991831f, 0x817d7c4d, 0x08982a70	?asis
+Lk_s63:
+	.long	0x5b5b5b5b, 0x5b5b5b5b, 0x5b5b5b5b, 0x5b5b5b5b	?asis
+
+Lk_opt:		# output transform
+	.long	0x0060b6d6, 0x29499fff, 0x0868bede, 0x214197f7	?rev
+	.long	0x00ecbc50, 0x51bded01, 0xe00c5cb0, 0xb15d0de1	?rev
+Lk_deskew:	# deskew tables: inverts the sbox's "skew"
+	.long	0x00e3a447, 0x40a3e407, 0x1af9be5d, 0x5ab9fe1d	?rev
+	.long	0x0069ea83, 0xdcb5365f, 0x771e9df4, 0xabc24128	?rev
+.align	5
+Lconsts:
+	mflr	r0
+	bcl	20,31,\$+4
+	mflr	r12	#vvvvv "distance between . and _vpaes_consts
+	addi	r12,r12,-0x308
+	mtlr	r0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+.asciz  "Vector Permutation AES for AltiVec, Mike Hamburg (Stanford University)"
+.align	6
+___
+
+my ($inptail,$inpperm,$outhead,$outperm,$outmask,$keyperm) = map("v$_",(26..31));
+{
+my ($inp,$out,$key) = map("r$_",(3..5));
+
+my ($invlo,$invhi,$iptlo,$ipthi,$sbou,$sbot) = map("v$_",(10..15));
+my ($sb1u,$sb1t,$sb2u,$sb2t) = map("v$_",(16..19));
+my ($sb9u,$sb9t,$sbdu,$sbdt,$sbbu,$sbbt,$sbeu,$sbet)=map("v$_",(16..23));
+
+$code.=<<___;
+##
+##  _aes_preheat
+##
+##  Fills register %r10 -> .aes_consts (so you can -fPIC)
+##  and %xmm9-%xmm15 as specified below.
+##
+.align	4
+_vpaes_encrypt_preheat:
+	mflr	r8
+	bl	Lconsts
+	mtlr	r8
+	li	r11, 0xc0		# Lk_inv
+	li	r10, 0xd0
+	li	r9,  0xe0		# Lk_ipt
+	li	r8,  0xf0
+	vxor	v7, v7, v7		# 0x00..00
+	vspltisb	v8,4		# 0x04..04
+	vspltisb	v9,0x0f		# 0x0f..0f
+	lvx	$invlo, r12, r11
+	li	r11, 0x100
+	lvx	$invhi, r12, r10
+	li	r10, 0x110
+	lvx	$iptlo, r12, r9
+	li	r9,  0x120
+	lvx	$ipthi, r12, r8
+	li	r8,  0x130
+	lvx	$sbou, r12, r11
+	li	r11, 0x140
+	lvx	$sbot, r12, r10
+	li	r10, 0x150
+	lvx	$sb1u, r12, r9
+	lvx	$sb1t, r12, r8
+	lvx	$sb2u, r12, r11
+	lvx	$sb2t, r12, r10
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+
+##
+##  _aes_encrypt_core
+##
+##  AES-encrypt %xmm0.
+##
+##  Inputs:
+##     %xmm0 = input
+##     %xmm9-%xmm15 as in _vpaes_preheat
+##    (%rdx) = scheduled keys
+##
+##  Output in %xmm0
+##  Clobbers  %xmm1-%xmm6, %r9, %r10, %r11, %rax
+##
+##
+.align 5
+_vpaes_encrypt_core:
+	lwz	r8, 240($key)		# pull rounds
+	li	r9, 16
+	lvx	v5, 0, $key		# vmovdqu	(%r9),	%xmm5		# round0 key
+	li	r11, 0x10
+	lvx	v6, r9, $key
+	addi	r9, r9, 16
+	?vperm	v5, v5, v6, $keyperm	# align round key
+	addi	r10, r11, 0x40
+	vsrb	v1, v0, v8		# vpsrlb	\$4,	%xmm0,	%xmm0
+	vperm	v0, $iptlo, $iptlo, v0	# vpshufb	%xmm1,	%xmm2,	%xmm1
+	vperm	v1, $ipthi, $ipthi, v1	# vpshufb	%xmm0,	%xmm3,	%xmm2
+	vxor	v0, v0, v5		# vpxor	%xmm5,	%xmm1,	%xmm0
+	vxor	v0, v0, v1		# vpxor	%xmm2,	%xmm0,	%xmm0
+	mtctr	r8
+	b	Lenc_entry
+
+.align 4
+Lenc_loop:
+	# middle of middle round
+	vperm	v4, $sb1t, v7, v2	# vpshufb	%xmm2,	%xmm13,	%xmm4	# 4 = sb1u
+	lvx	v1, r12, r11		# vmovdqa	-0x40(%r11,%r10), %xmm1	# .Lk_mc_forward[]
+	addi	r11, r11, 16
+	vperm	v0, $sb1u, v7, v3	# vpshufb	%xmm3,	%xmm12,	%xmm0	# 0 = sb1t
+	vxor	v4, v4, v5		# vpxor		%xmm5,	%xmm4,	%xmm4	# 4 = sb1u + k
+	andi.	r11, r11, 0x30		# and		\$0x30, %r11	# ... mod 4
+	vperm	v5, $sb2t, v7, v2	# vpshufb	%xmm2,	%xmm15,	%xmm5	# 4 = sb2u
+	vxor	v0, v0, v4		# vpxor		%xmm4,	%xmm0,	%xmm0	# 0 = A
+	vperm	v2, $sb2u, v7, v3	# vpshufb	%xmm3,	%xmm14,	%xmm2	# 2 = sb2t
+	lvx	v4, r12, r10		# vmovdqa	(%r11,%r10), %xmm4	# .Lk_mc_backward[]
+	addi	r10, r11, 0x40
+	vperm	v3, v0, v7, v1		# vpshufb	%xmm1,	%xmm0,	%xmm3	# 0 = B
+	vxor	v2, v2, v5		# vpxor		%xmm5,	%xmm2,	%xmm2	# 2 = 2A
+	vperm	v0, v0, v7, v4		# vpshufb	%xmm4,	%xmm0,	%xmm0	# 3 = D
+	vxor	v3, v3, v2		# vpxor		%xmm2,	%xmm3,	%xmm3	# 0 = 2A+B
+	vperm	v4, v3, v7, v1		# vpshufb	%xmm1,	%xmm3,	%xmm4	# 0 = 2B+C
+	vxor	v0, v0, v3		# vpxor		%xmm3,	%xmm0,	%xmm0	# 3 = 2A+B+D
+	vxor	v0, v0, v4		# vpxor		%xmm4,	%xmm0, %xmm0	# 0 = 2A+3B+C+D
+
+Lenc_entry:
+	# top of round
+	vsrb	v1, v0, v8		# vpsrlb	\$4,	%xmm0,	%xmm0	# 1 = i
+	vperm	v5, $invhi, $invhi, v0	# vpshufb	%xmm1,	%xmm11,	%xmm5	# 2 = a/k
+	vxor	v0, v0, v1		# vpxor		%xmm0,	%xmm1,	%xmm1	# 0 = j
+	vperm	v3, $invlo, $invlo, v1	# vpshufb	%xmm0, 	%xmm10,	%xmm3  	# 3 = 1/i
+	vperm	v4, $invlo, $invlo, v0	# vpshufb	%xmm1, 	%xmm10,	%xmm4  	# 4 = 1/j
+	vand	v0, v0, v9
+	vxor	v3, v3, v5		# vpxor		%xmm5,	%xmm3,	%xmm3	# 3 = iak = 1/i + a/k
+	vxor	v4, v4, v5		# vpxor		%xmm5,	%xmm4,	%xmm4  	# 4 = jak = 1/j + a/k
+	vperm	v2, $invlo, v7, v3	# vpshufb	%xmm3,	%xmm10,	%xmm2  	# 2 = 1/iak
+	vmr	v5, v6
+	lvx	v6, r9, $key		# vmovdqu	(%r9), %xmm5
+	vperm	v3, $invlo, v7, v4	# vpshufb	%xmm4,	%xmm10,	%xmm3	# 3 = 1/jak
+	addi	r9, r9, 16
+	vxor	v2, v2, v0		# vpxor		%xmm1,	%xmm2,	%xmm2  	# 2 = io
+	?vperm	v5, v5, v6, $keyperm	# align round key
+	vxor	v3, v3, v1		# vpxor		%xmm0,	%xmm3,	%xmm3	# 3 = jo
+	bdnz	Lenc_loop
+
+	# middle of last round
+	addi	r10, r11, 0x80
+					# vmovdqa	-0x60(%r10), %xmm4	# 3 : sbou	.Lk_sbo
+					# vmovdqa	-0x50(%r10), %xmm0	# 0 : sbot	.Lk_sbo+16
+	vperm	v4, $sbou, v7, v2	# vpshufb	%xmm2,	%xmm4,	%xmm4	# 4 = sbou
+	lvx	v1, r12, r10		# vmovdqa	0x40(%r11,%r10), %xmm1	# .Lk_sr[]
+	vperm	v0, $sbot, v7, v3	# vpshufb	%xmm3,	%xmm0,	%xmm0	# 0 = sb1t
+	vxor	v4, v4, v5		# vpxor		%xmm5,	%xmm4,	%xmm4	# 4 = sb1u + k
+	vxor	v0, v0, v4		# vpxor		%xmm4,	%xmm0,	%xmm0	# 0 = A
+	vperm	v0, v0, v7, v1		# vpshufb	%xmm1,	%xmm0,	%xmm0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+
+.globl	.vpaes_encrypt
+.align	5
+.vpaes_encrypt:
+	$STU	$sp,-$FRAME($sp)
+	li	r10,`15+6*$SIZE_T`
+	li	r11,`31+6*$SIZE_T`
+	mflr	r6
+	mfspr	r7, 256			# save vrsave
+	stvx	v20,r10,$sp
+	addi	r10,r10,32
+	stvx	v21,r11,$sp
+	addi	r11,r11,32
+	stvx	v22,r10,$sp
+	addi	r10,r10,32
+	stvx	v23,r11,$sp
+	addi	r11,r11,32
+	stvx	v24,r10,$sp
+	addi	r10,r10,32
+	stvx	v25,r11,$sp
+	addi	r11,r11,32
+	stvx	v26,r10,$sp
+	addi	r10,r10,32
+	stvx	v27,r11,$sp
+	addi	r11,r11,32
+	stvx	v28,r10,$sp
+	addi	r10,r10,32
+	stvx	v29,r11,$sp
+	addi	r11,r11,32
+	stvx	v30,r10,$sp
+	stvx	v31,r11,$sp
+	stw	r7,`$FRAME-4`($sp)	# save vrsave
+	li	r0, -1
+	$PUSH	r6,`$FRAME+$LRSAVE`($sp)
+	mtspr	256, r0			# preserve all AltiVec registers
+
+	bl	_vpaes_encrypt_preheat
+
+	?lvsl	$inpperm, 0, $inp	# prepare for unaligned access
+	lvx	v0, 0, $inp
+	addi	$inp, $inp, 15		# 15 is not a typo
+	 ?lvsr	$outperm, 0, $out
+	?lvsl	$keyperm, 0, $key	# prepare for unaligned access
+	lvx	$inptail, 0, $inp	# redundant in aligned case
+	?vperm	v0, v0, $inptail, $inpperm
+
+	bl	_vpaes_encrypt_core
+
+	andi.	r8, $out, 15
+	li	r9, 16
+	beq	Lenc_out_aligned
+
+	vperm	v0, v0, v0, $outperm	# rotate right/left
+	mtctr	r9
+Lenc_out_unaligned:
+	stvebx	v0, 0, $out
+	addi	$out, $out, 1
+	bdnz	Lenc_out_unaligned
+	b	Lenc_done
+
+.align	4
+Lenc_out_aligned:
+	stvx	v0, 0, $out
+Lenc_done:
+
+	li	r10,`15+6*$SIZE_T`
+	li	r11,`31+6*$SIZE_T`
+	mtlr	r6
+	mtspr	256, r7			# restore vrsave
+	lvx	v20,r10,$sp
+	addi	r10,r10,32
+	lvx	v21,r11,$sp
+	addi	r11,r11,32
+	lvx	v22,r10,$sp
+	addi	r10,r10,32
+	lvx	v23,r11,$sp
+	addi	r11,r11,32
+	lvx	v24,r10,$sp
+	addi	r10,r10,32
+	lvx	v25,r11,$sp
+	addi	r11,r11,32
+	lvx	v26,r10,$sp
+	addi	r10,r10,32
+	lvx	v27,r11,$sp
+	addi	r11,r11,32
+	lvx	v28,r10,$sp
+	addi	r10,r10,32
+	lvx	v29,r11,$sp
+	addi	r11,r11,32
+	lvx	v30,r10,$sp
+	lvx	v31,r11,$sp
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,0x04,1,0x80,0,3,0
+	.long	0
+.size	.vpaes_encrypt,.-.vpaes_encrypt
+
+.align	4
+_vpaes_decrypt_preheat:
+	mflr	r8
+	bl	Lconsts
+	mtlr	r8
+	li	r11, 0xc0		# Lk_inv
+	li	r10, 0xd0
+	li	r9,  0x160		# Ldipt
+	li	r8,  0x170
+	vxor	v7, v7, v7		# 0x00..00
+	vspltisb	v8,4		# 0x04..04
+	vspltisb	v9,0x0f		# 0x0f..0f
+	lvx	$invlo, r12, r11
+	li	r11, 0x180
+	lvx	$invhi, r12, r10
+	li	r10, 0x190
+	lvx	$iptlo, r12, r9
+	li	r9,  0x1a0
+	lvx	$ipthi, r12, r8
+	li	r8,  0x1b0
+	lvx	$sbou, r12, r11
+	li	r11, 0x1c0
+	lvx	$sbot, r12, r10
+	li	r10, 0x1d0
+	lvx	$sb9u, r12, r9
+	li	r9,  0x1e0
+	lvx	$sb9t, r12, r8
+	li	r8,  0x1f0
+	lvx	$sbdu, r12, r11
+	li	r11, 0x200
+	lvx	$sbdt, r12, r10
+	li	r10, 0x210
+	lvx	$sbbu, r12, r9
+	lvx	$sbbt, r12, r8
+	lvx	$sbeu, r12, r11
+	lvx	$sbet, r12, r10
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+
+##
+##  Decryption core
+##
+##  Same API as encryption core.
+##
+.align	4
+_vpaes_decrypt_core:
+	lwz	r8, 240($key)		# pull rounds
+	li	r9, 16
+	lvx	v5, 0, $key		# vmovdqu	(%r9),	%xmm4		# round0 key
+	li	r11, 0x30
+	lvx	v6, r9, $key
+	addi	r9, r9, 16
+	?vperm	v5, v5, v6, $keyperm	# align round key
+	vsrb	v1, v0, v8		# vpsrlb	\$4,	%xmm0,	%xmm0
+	vperm	v0, $iptlo, $iptlo, v0	# vpshufb	%xmm1,	%xmm2,	%xmm2
+	vperm	v1, $ipthi, $ipthi, v1	# vpshufb	%xmm0,	%xmm1,	%xmm0
+	vxor	v0, v0, v5		# vpxor	%xmm4,	%xmm2,	%xmm2
+	vxor	v0, v0, v1		# vpxor	%xmm2,	%xmm0,	%xmm0
+	mtctr	r8
+	b	Ldec_entry
+
+.align 4
+Ldec_loop:
+#
+#  Inverse mix columns
+#
+	lvx	v0, r12, r11		# v5 and v0 are flipped
+					# vmovdqa	-0x20(%r10),%xmm4		# 4 : sb9u
+					# vmovdqa	-0x10(%r10),%xmm1		# 0 : sb9t
+	vperm	v4, $sb9u, v7, v2	# vpshufb	%xmm2,	%xmm4,	%xmm4		# 4 = sb9u
+	subi	r11, r11, 16
+	vperm	v1, $sb9t, v7, v3	# vpshufb	%xmm3,	%xmm1,	%xmm1		# 0 = sb9t
+	andi.	r11, r11, 0x30
+	vxor	v5, v5, v4		# vpxor		%xmm4,	%xmm0,	%xmm0
+					# vmovdqa	0x00(%r10),%xmm4		# 4 : sbdu
+	vxor	v5, v5, v1		# vpxor		%xmm1,	%xmm0,	%xmm0		# 0 = ch
+					# vmovdqa	0x10(%r10),%xmm1		# 0 : sbdt
+
+	vperm	v4, $sbdu, v7, v2	# vpshufb	%xmm2,	%xmm4,	%xmm4		# 4 = sbdu
+	vperm 	v5, v5, v7, v0		# vpshufb	%xmm5,	%xmm0,	%xmm0		# MC ch
+	vperm	v1, $sbdt, v7, v3	# vpshufb	%xmm3,	%xmm1,	%xmm1		# 0 = sbdt
+	vxor	v5, v5, v4		# vpxor		%xmm4,	%xmm0,	%xmm0		# 4 = ch
+					# vmovdqa	0x20(%r10),	%xmm4		# 4 : sbbu
+	vxor	v5, v5, v1		# vpxor		%xmm1,	%xmm0,	%xmm0		# 0 = ch
+					# vmovdqa	0x30(%r10),	%xmm1		# 0 : sbbt
+
+	vperm	v4, $sbbu, v7, v2	# vpshufb	%xmm2,	%xmm4,	%xmm4		# 4 = sbbu
+	vperm	v5, v5, v7, v0		# vpshufb	%xmm5,	%xmm0,	%xmm0		# MC ch
+	vperm	v1, $sbbt, v7, v3	# vpshufb	%xmm3,	%xmm1,	%xmm1		# 0 = sbbt
+	vxor	v5, v5, v4		# vpxor		%xmm4,	%xmm0,	%xmm0		# 4 = ch
+					# vmovdqa	0x40(%r10),	%xmm4		# 4 : sbeu
+	vxor	v5, v5, v1		# vpxor		%xmm1,	%xmm0,	%xmm0		# 0 = ch
+					# vmovdqa	0x50(%r10),	%xmm1		# 0 : sbet
+
+	vperm	v4, $sbeu, v7, v2	# vpshufb	%xmm2,	%xmm4,	%xmm4		# 4 = sbeu
+	vperm	v5, v5, v7, v0		# vpshufb	%xmm5,	%xmm0,	%xmm0		# MC ch
+	vperm	v1, $sbet, v7, v3	# vpshufb	%xmm3,	%xmm1,	%xmm1		# 0 = sbet
+	vxor	v0, v5, v4		# vpxor		%xmm4,	%xmm0,	%xmm0		# 4 = ch
+	vxor	v0, v0, v1		# vpxor		%xmm1,	%xmm0,	%xmm0		# 0 = ch
+
+Ldec_entry:
+	# top of round
+	vsrb	v1, v0, v8		# vpsrlb	\$4,	%xmm0,	%xmm0	# 1 = i
+	vperm	v2, $invhi, $invhi, v0	# vpshufb	%xmm1,	%xmm11,	%xmm2	# 2 = a/k
+	vxor	v0, v0, v1		# vpxor		%xmm0,	%xmm1,	%xmm1	# 0 = j
+	vperm	v3, $invlo, $invlo, v1	# vpshufb	%xmm0, 	%xmm10,	%xmm3	# 3 = 1/i
+	vperm	v4, $invlo, $invlo, v0	# vpshufb	%xmm1,	%xmm10,	%xmm4	# 4 = 1/j
+	vand	v0, v0, v9
+	vxor	v3, v3, v2		# vpxor		%xmm2,	%xmm3,	%xmm3	# 3 = iak = 1/i + a/k
+	vxor	v4, v4, v2		# vpxor		%xmm2, 	%xmm4,	%xmm4	# 4 = jak = 1/j + a/k
+	vperm	v2, $invlo, v7, v3	# vpshufb	%xmm3,	%xmm10,	%xmm2	# 2 = 1/iak
+	vmr	v5, v6
+	lvx	v6, r9, $key		# vmovdqu	(%r9),	%xmm0
+	vperm	v3, $invlo, v7, v4	# vpshufb	%xmm4,  %xmm10,	%xmm3	# 3 = 1/jak
+	addi	r9, r9, 16
+	vxor	v2, v2, v0		# vpxor		%xmm1,	%xmm2,	%xmm2	# 2 = io
+	?vperm	v5, v5, v6, $keyperm	# align round key
+	vxor	v3, v3, v1		# vpxor		%xmm0,  %xmm3,	%xmm3	# 3 = jo
+	bdnz	Ldec_loop
+
+	# middle of last round
+	addi	r10, r11, 0x80
+					# vmovdqa	0x60(%r10),	%xmm4	# 3 : sbou
+	vperm	v4, $sbou, v7, v2	# vpshufb	%xmm2,	%xmm4,	%xmm4	# 4 = sbou
+					# vmovdqa	0x70(%r10),	%xmm1	# 0 : sbot
+	lvx	v2, r12, r10		# vmovdqa	-0x160(%r11),	%xmm2	# .Lk_sr-.Lk_dsbd=-0x160
+	vperm	v1, $sbot, v7, v3	# vpshufb	%xmm3,	%xmm1,	%xmm1	# 0 = sb1t
+	vxor	v4, v4, v5		# vpxor		%xmm0,	%xmm4,	%xmm4	# 4 = sb1u + k
+	vxor	v0, v1, v4		# vpxor		%xmm4,	%xmm1,	%xmm0	# 0 = A
+	vperm	v0, v0, v7, v2		# vpshufb	%xmm2,	%xmm0,	%xmm0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+
+.globl	.vpaes_decrypt
+.align	5
+.vpaes_decrypt:
+	$STU	$sp,-$FRAME($sp)
+	li	r10,`15+6*$SIZE_T`
+	li	r11,`31+6*$SIZE_T`
+	mflr	r6
+	mfspr	r7, 256			# save vrsave
+	stvx	v20,r10,$sp
+	addi	r10,r10,32
+	stvx	v21,r11,$sp
+	addi	r11,r11,32
+	stvx	v22,r10,$sp
+	addi	r10,r10,32
+	stvx	v23,r11,$sp
+	addi	r11,r11,32
+	stvx	v24,r10,$sp
+	addi	r10,r10,32
+	stvx	v25,r11,$sp
+	addi	r11,r11,32
+	stvx	v26,r10,$sp
+	addi	r10,r10,32
+	stvx	v27,r11,$sp
+	addi	r11,r11,32
+	stvx	v28,r10,$sp
+	addi	r10,r10,32
+	stvx	v29,r11,$sp
+	addi	r11,r11,32
+	stvx	v30,r10,$sp
+	stvx	v31,r11,$sp
+	stw	r7,`$FRAME-4`($sp)	# save vrsave
+	li	r0, -1
+	$PUSH	r6,`$FRAME+$LRSAVE`($sp)
+	mtspr	256, r0			# preserve all AltiVec registers
+
+	bl	_vpaes_decrypt_preheat
+
+	?lvsl	$inpperm, 0, $inp	# prepare for unaligned access
+	lvx	v0, 0, $inp
+	addi	$inp, $inp, 15		# 15 is not a typo
+	 ?lvsr	$outperm, 0, $out
+	?lvsl	$keyperm, 0, $key
+	lvx	$inptail, 0, $inp	# redundant in aligned case
+	?vperm	v0, v0, $inptail, $inpperm
+
+	bl	_vpaes_decrypt_core
+
+	andi.	r8, $out, 15
+	li	r9, 16
+	beq	Ldec_out_aligned
+
+	vperm	v0, v0, v0, $outperm	# rotate right/left
+	mtctr	r9
+Ldec_out_unaligned:
+	stvebx	v0, 0, $out
+	addi	$out, $out, 1
+	bdnz	Ldec_out_unaligned
+	b	Ldec_done
+
+.align	4
+Ldec_out_aligned:
+	stvx	v0, 0, $out
+Ldec_done:
+
+	li	r10,`15+6*$SIZE_T`
+	li	r11,`31+6*$SIZE_T`
+	mtlr	r6
+	mtspr	256, r7			# restore vrsave
+	lvx	v20,r10,$sp
+	addi	r10,r10,32
+	lvx	v21,r11,$sp
+	addi	r11,r11,32
+	lvx	v22,r10,$sp
+	addi	r10,r10,32
+	lvx	v23,r11,$sp
+	addi	r11,r11,32
+	lvx	v24,r10,$sp
+	addi	r10,r10,32
+	lvx	v25,r11,$sp
+	addi	r11,r11,32
+	lvx	v26,r10,$sp
+	addi	r10,r10,32
+	lvx	v27,r11,$sp
+	addi	r11,r11,32
+	lvx	v28,r10,$sp
+	addi	r10,r10,32
+	lvx	v29,r11,$sp
+	addi	r11,r11,32
+	lvx	v30,r10,$sp
+	lvx	v31,r11,$sp
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,0x04,1,0x80,0,3,0
+	.long	0
+.size	.vpaes_decrypt,.-.vpaes_decrypt
+
+.globl	.vpaes_cbc_encrypt
+.align	5
+.vpaes_cbc_encrypt:
+	${UCMP}i r5,16
+	bltlr-
+
+	$STU	$sp,-`($FRAME+2*$SIZE_T)`($sp)
+	mflr	r0
+	li	r10,`15+6*$SIZE_T`
+	li	r11,`31+6*$SIZE_T`
+	mfspr	r12, 256
+	stvx	v20,r10,$sp
+	addi	r10,r10,32
+	stvx	v21,r11,$sp
+	addi	r11,r11,32
+	stvx	v22,r10,$sp
+	addi	r10,r10,32
+	stvx	v23,r11,$sp
+	addi	r11,r11,32
+	stvx	v24,r10,$sp
+	addi	r10,r10,32
+	stvx	v25,r11,$sp
+	addi	r11,r11,32
+	stvx	v26,r10,$sp
+	addi	r10,r10,32
+	stvx	v27,r11,$sp
+	addi	r11,r11,32
+	stvx	v28,r10,$sp
+	addi	r10,r10,32
+	stvx	v29,r11,$sp
+	addi	r11,r11,32
+	stvx	v30,r10,$sp
+	stvx	v31,r11,$sp
+	stw	r12,`$FRAME-4`($sp)	# save vrsave
+	$PUSH	r30,`$FRAME+$SIZE_T*0`($sp)
+	$PUSH	r31,`$FRAME+$SIZE_T*1`($sp)
+	li	r9, -16
+	$PUSH	r0, `$FRAME+$SIZE_T*2+$LRSAVE`($sp)
+
+	and	r30, r5, r9		# copy length&-16
+	andi.	r9, $out, 15		# is $out aligned?
+	mr	r5, r6			# copy pointer to key
+	mr	r31, r7			# copy pointer to iv
+	li	r6, -1
+	mcrf	cr1, cr0		# put aside $out alignment flag
+	mr	r7, r12			# copy vrsave
+	mtspr	256, r6			# preserve all AltiVec registers
+
+	lvx	v24, 0, r31		# load [potentially unaligned] iv
+	li	r9, 15
+	?lvsl	$inpperm, 0, r31
+	lvx	v25, r9, r31
+	?vperm	v24, v24, v25, $inpperm
+
+	cmpwi	r8, 0			# test direction
+	neg	r8, $inp		# prepare for unaligned access
+	 vxor	v7, v7, v7
+	?lvsl	$keyperm, 0, $key
+	 ?lvsr	$outperm, 0, $out
+	?lvsr	$inpperm, 0, r8		# -$inp
+	 vnor	$outmask, v7, v7	# 0xff..ff
+	lvx	$inptail, 0, $inp
+	 ?vperm	$outmask, v7, $outmask, $outperm
+	addi	$inp, $inp, 15		# 15 is not a typo
+
+	beq	Lcbc_decrypt
+
+	bl	_vpaes_encrypt_preheat
+	li	r0, 16
+
+	beq	cr1, Lcbc_enc_loop	# $out is aligned
+
+	vmr	v0, $inptail
+	lvx	$inptail, 0, $inp
+	addi	$inp, $inp, 16
+	?vperm	v0, v0, $inptail, $inpperm
+	vxor	v0, v0, v24		# ^= iv
+
+	bl	_vpaes_encrypt_core
+
+	andi.	r8, $out, 15
+	vmr	v24, v0			# put aside iv
+	sub	r9, $out, r8
+	vperm	$outhead, v0, v0, $outperm	# rotate right/left
+
+Lcbc_enc_head:
+	stvebx	$outhead, r8, r9
+	cmpwi	r8, 15
+	addi	r8, r8, 1
+	bne	Lcbc_enc_head
+
+	sub.	r30, r30, r0		# len -= 16
+	addi	$out, $out, 16
+	beq	Lcbc_unaligned_done
+
+Lcbc_enc_loop:
+	vmr	v0, $inptail
+	lvx	$inptail, 0, $inp
+	addi	$inp, $inp, 16
+	?vperm	v0, v0, $inptail, $inpperm
+	vxor	v0, v0, v24		# ^= iv
+
+	bl	_vpaes_encrypt_core
+
+	vmr	v24, v0			# put aside iv
+	sub.	r30, r30, r0		# len -= 16
+	vperm	v0, v0, v0, $outperm	# rotate right/left
+	vsel	v1, $outhead, v0, $outmask
+	vmr	$outhead, v0
+	stvx	v1, 0, $out
+	addi	$out, $out, 16
+	bne	Lcbc_enc_loop
+
+	b	Lcbc_done
+
+.align	5
+Lcbc_decrypt:
+	bl	_vpaes_decrypt_preheat
+	li	r0, 16
+
+	beq	cr1, Lcbc_dec_loop	# $out is aligned
+
+	vmr	v0, $inptail
+	lvx	$inptail, 0, $inp
+	addi	$inp, $inp, 16
+	?vperm	v0, v0, $inptail, $inpperm
+	vmr	v25, v0			# put aside input
+
+	bl	_vpaes_decrypt_core
+
+	andi.	r8, $out, 15
+	vxor	v0, v0, v24		# ^= iv
+	vmr	v24, v25
+	sub	r9, $out, r8
+	vperm	$outhead, v0, v0, $outperm	# rotate right/left
+
+Lcbc_dec_head:
+	stvebx	$outhead, r8, r9
+	cmpwi	r8, 15
+	addi	r8, r8, 1
+	bne	Lcbc_dec_head
+
+	sub.	r30, r30, r0		# len -= 16
+	addi	$out, $out, 16
+	beq	Lcbc_unaligned_done
+
+Lcbc_dec_loop:
+	vmr	v0, $inptail
+	lvx	$inptail, 0, $inp
+	addi	$inp, $inp, 16
+	?vperm	v0, v0, $inptail, $inpperm
+	vmr	v25, v0			# put aside input
+
+	bl	_vpaes_decrypt_core
+
+	vxor	v0, v0, v24		# ^= iv
+	vmr	v24, v25
+	sub.	r30, r30, r0		# len -= 16
+	vperm	v0, v0, v0, $outperm	# rotate right/left
+	vsel	v1, $outhead, v0, $outmask
+	vmr	$outhead, v0
+	stvx	v1, 0, $out
+	addi	$out, $out, 16
+	bne	Lcbc_dec_loop
+
+Lcbc_done:
+	beq	cr1, Lcbc_write_iv	# $out is aligned
+
+Lcbc_unaligned_done:
+	andi.	r8, $out, 15
+	sub	$out, $out, r8
+	li	r9, 0
+Lcbc_tail:
+	stvebx	$outhead, r9, $out
+	addi	r9, r9, 1
+	cmpw	r9, r8
+	bne	Lcbc_tail
+
+Lcbc_write_iv:
+	neg	r8, r31			# write [potentially unaligned] iv
+	li	r10, 4
+	?lvsl	$outperm, 0, r8
+	li	r11, 8
+	li	r12, 12
+	vperm	v24, v24, v24, $outperm	# rotate right/left
+	stvewx	v24, 0, r31		# ivp is at least 32-bit aligned
+	stvewx	v24, r10, r31
+	stvewx	v24, r11, r31
+	stvewx	v24, r12, r31
+
+	mtspr	256, r7			# restore vrsave
+	li	r10,`15+6*$SIZE_T`
+	li	r11,`31+6*$SIZE_T`
+	lvx	v20,r10,$sp
+	addi	r10,r10,32
+	lvx	v21,r11,$sp
+	addi	r11,r11,32
+	lvx	v22,r10,$sp
+	addi	r10,r10,32
+	lvx	v23,r11,$sp
+	addi	r11,r11,32
+	lvx	v24,r10,$sp
+	addi	r10,r10,32
+	lvx	v25,r11,$sp
+	addi	r11,r11,32
+	lvx	v26,r10,$sp
+	addi	r10,r10,32
+	lvx	v27,r11,$sp
+	addi	r11,r11,32
+	lvx	v28,r10,$sp
+	addi	r10,r10,32
+	lvx	v29,r11,$sp
+	addi	r11,r11,32
+	lvx	v30,r10,$sp
+	lvx	v31,r11,$sp
+Lcbc_abort:
+	$POP	r0, `$FRAME+$SIZE_T*2+$LRSAVE`($sp)
+	$POP	r30,`$FRAME+$SIZE_T*0`($sp)
+	$POP	r31,`$FRAME+$SIZE_T*1`($sp)
+	mtlr	r0
+	addi	$sp,$sp,`$FRAME+$SIZE_T*2`
+	blr
+	.long	0
+	.byte	0,12,0x04,1,0x80,2,6,0
+	.long	0
+.size	.vpaes_cbc_encrypt,.-.vpaes_cbc_encrypt
+___
+}
+{
+my ($inp,$bits,$out)=map("r$_",(3..5));
+my $dir="cr1";
+my ($invlo,$invhi,$iptlo,$ipthi,$rcon) = map("v$_",(10..13,24));
+
+$code.=<<___;
+########################################################
+##                                                    ##
+##                  AES key schedule                  ##
+##                                                    ##
+########################################################
+.align	4
+_vpaes_key_preheat:
+	mflr	r8
+	bl	Lconsts
+	mtlr	r8
+	li	r11, 0xc0		# Lk_inv
+	li	r10, 0xd0
+	li	r9,  0xe0		# L_ipt
+	li	r8,  0xf0
+
+	vspltisb	v8,4		# 0x04..04
+	vxor	v9,v9,v9		# 0x00..00
+	lvx	$invlo, r12, r11	# Lk_inv
+	li	r11, 0x120
+	lvx	$invhi, r12, r10
+	li	r10, 0x130
+	lvx	$iptlo, r12, r9		# Lk_ipt
+	li	r9, 0x220
+	lvx	$ipthi, r12, r8
+	li	r8, 0x230
+
+	lvx	v14, r12, r11		# Lk_sb1
+	li	r11, 0x240
+	lvx	v15, r12, r10
+	li	r10, 0x250
+
+	lvx	v16, r12, r9		# Lk_dksd
+	li	r9, 0x260
+	lvx	v17, r12, r8
+	li	r8, 0x270
+	lvx	v18, r12, r11		# Lk_dksb
+	li	r11, 0x280
+	lvx	v19, r12, r10
+	li	r10, 0x290
+	lvx	v20, r12, r9		# Lk_dkse
+	li	r9, 0x2a0
+	lvx	v21, r12, r8
+	li	r8, 0x2b0
+	lvx	v22, r12, r11		# Lk_dks9
+	lvx	v23, r12, r10
+
+	lvx	v24, r12, r9		# Lk_rcon
+	lvx	v25, 0, r12		# Lk_mc_forward[0]
+	lvx	v26, r12, r8		# Lks63
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+
+.align	4
+_vpaes_schedule_core:
+	mflr	r7
+
+	bl	_vpaes_key_preheat	# load the tables
+
+	#lvx	v0, 0, $inp		# vmovdqu	(%rdi),	%xmm0		# load key (unaligned)
+	neg	r8, $inp		# prepare for unaligned access
+	lvx	v0, 0, $inp
+	addi	$inp, $inp, 15		# 15 is not typo
+	?lvsr	$inpperm, 0, r8		# -$inp
+	lvx	v6, 0, $inp		# v6 serves as inptail
+	addi	$inp, $inp, 8
+	?vperm	v0, v0, v6, $inpperm
+
+	# input transform
+	vmr	v3, v0			# vmovdqa	%xmm0,	%xmm3
+	bl	_vpaes_schedule_transform
+	vmr	v7, v0			# vmovdqa	%xmm0,	%xmm7
+
+	bne	$dir, Lschedule_am_decrypting
+
+	# encrypting, output zeroth round key after transform
+	li	r8, 0x30		# mov	\$0x30,%r8d
+	li	r9, 4
+	li	r10, 8
+	li	r11, 12
+
+	?lvsr	$outperm, 0, $out	# prepare for unaligned access
+	vnor	$outmask, v9, v9	# 0xff..ff
+	?vperm	$outmask, v9, $outmask, $outperm
+
+	#stvx	v0, 0, $out		# vmovdqu	%xmm0,	(%rdx)
+	vperm	$outhead, v0, v0, $outperm	# rotate right/left
+	stvewx	$outhead, 0, $out	# some are superfluous
+	stvewx	$outhead, r9, $out
+	stvewx	$outhead, r10, $out
+	addi	r10, r12, 0x80		# lea	.Lk_sr(%rip),%r10
+	stvewx	$outhead, r11, $out
+	b	Lschedule_go
+
+Lschedule_am_decrypting:
+	srwi	r8, $bits, 1		# shr	\$1,%r8d
+	andi.	r8, r8, 32		# and	\$32,%r8d
+	xori	r8, r8, 32		# xor	\$32,%r8d	# nbits==192?0:32
+	addi	r10, r12, 0x80		# lea	.Lk_sr(%rip),%r10
+	# decrypting, output zeroth round key after shiftrows
+	lvx	v1, r8, r10		# vmovdqa	(%r8,%r10),	%xmm1
+	li	r9, 4
+	li	r10, 8
+	li	r11, 12
+	vperm	v4, v3, v3, v1		# vpshufb	%xmm1,	%xmm3,	%xmm3
+
+	neg	r0, $out		# prepare for unaligned access
+	?lvsl	$outperm, 0, r0
+	vnor	$outmask, v9, v9	# 0xff..ff
+	?vperm	$outmask, $outmask, v9, $outperm
+
+	#stvx	v4, 0, $out		# vmovdqu	%xmm3,	(%rdx)
+	vperm	$outhead, v4, v4, $outperm	# rotate right/left
+	stvewx	$outhead, 0, $out	# some are superfluous
+	stvewx	$outhead, r9, $out
+	stvewx	$outhead, r10, $out
+	addi	r10, r12, 0x80		# lea	.Lk_sr(%rip),%r10
+	stvewx	$outhead, r11, $out
+	addi	$out, $out, 15		# 15 is not typo
+	xori	r8, r8, 0x30		# xor	\$0x30, %r8
+
+Lschedule_go:
+	cmplwi	$bits, 192		# cmp	\$192,	%esi
+	bgt	Lschedule_256
+	beq	Lschedule_192
+	# 128: fall though
+
+##
+##  .schedule_128
+##
+##  128-bit specific part of key schedule.
+##
+##  This schedule is really simple, because all its parts
+##  are accomplished by the subroutines.
+##
+Lschedule_128:
+	li	r0, 10			# mov	\$10, %esi
+	mtctr	r0
+
+Loop_schedule_128:
+	bl 	_vpaes_schedule_round
+	bdz 	Lschedule_mangle_last	# dec	%esi
+	bl	_vpaes_schedule_mangle	# write output
+	b 	Loop_schedule_128
+
+##
+##  .aes_schedule_192
+##
+##  192-bit specific part of key schedule.
+##
+##  The main body of this schedule is the same as the 128-bit
+##  schedule, but with more smearing.  The long, high side is
+##  stored in %xmm7 as before, and the short, low side is in
+##  the high bits of %xmm6.
+##
+##  This schedule is somewhat nastier, however, because each
+##  round produces 192 bits of key material, or 1.5 round keys.
+##  Therefore, on each cycle we do 2 rounds and produce 3 round
+##  keys.
+##
+.align	4
+Lschedule_192:
+	li	r0, 4			# mov	\$4,	%esi
+	lvx	v0, 0, $inp
+	?vperm	v0, v6, v0, $inpperm
+	?vsldoi	v0, v3, v0, 8		# vmovdqu	8(%rdi),%xmm0		# load key part 2 (very unaligned)
+	bl	_vpaes_schedule_transform	# input transform
+	?vsldoi	v6, v0, v9, 8
+	?vsldoi	v6, v9, v6, 8		# clobber "low" side with zeros
+	mtctr	r0
+
+Loop_schedule_192:
+	bl	_vpaes_schedule_round
+	?vsldoi	v0, v6, v0, 8		# vpalignr	\$8,%xmm6,%xmm0,%xmm0
+	bl	_vpaes_schedule_mangle	# save key n
+	bl	_vpaes_schedule_192_smear
+	bl	_vpaes_schedule_mangle	# save key n+1
+	bl	_vpaes_schedule_round
+	bdz 	Lschedule_mangle_last	# dec	%esi
+	bl	_vpaes_schedule_mangle	# save key n+2
+	bl	_vpaes_schedule_192_smear
+	b	Loop_schedule_192
+
+##
+##  .aes_schedule_256
+##
+##  256-bit specific part of key schedule.
+##
+##  The structure here is very similar to the 128-bit
+##  schedule, but with an additional "low side" in
+##  %xmm6.  The low side's rounds are the same as the
+##  high side's, except no rcon and no rotation.
+##
+.align	4
+Lschedule_256:
+	li	r0, 7			# mov	\$7, %esi
+	addi	$inp, $inp, 8
+	lvx	v0, 0, $inp		# vmovdqu	16(%rdi),%xmm0		# load key part 2 (unaligned)
+	?vperm	v0, v6, v0, $inpperm
+	bl	_vpaes_schedule_transform	# input transform
+	mtctr	r0
+
+Loop_schedule_256:
+	bl	_vpaes_schedule_mangle	# output low result
+	vmr	v6, v0			# vmovdqa	%xmm0,	%xmm6		# save cur_lo in xmm6
+
+	# high round
+	bl	_vpaes_schedule_round
+	bdz 	Lschedule_mangle_last	# dec	%esi
+	bl	_vpaes_schedule_mangle
+
+	# low round. swap xmm7 and xmm6
+	?vspltw	v0, v0, 3		# vpshufd	\$0xFF,	%xmm0,	%xmm0
+	vmr	v5, v7			# vmovdqa	%xmm7,	%xmm5
+	vmr	v7, v6			# vmovdqa	%xmm6,	%xmm7
+	bl	_vpaes_schedule_low_round
+	vmr	v7, v5			# vmovdqa	%xmm5,	%xmm7
+
+	b	Loop_schedule_256
+##
+##  .aes_schedule_mangle_last
+##
+##  Mangler for last round of key schedule
+##  Mangles %xmm0
+##    when encrypting, outputs out(%xmm0) ^ 63
+##    when decrypting, outputs unskew(%xmm0)
+##
+##  Always called right before return... jumps to cleanup and exits
+##
+.align	4
+Lschedule_mangle_last:
+	# schedule last round key from xmm0
+	li	r11, 0x2e0		# lea	.Lk_deskew(%rip),%r11
+	li	r9,  0x2f0
+	bne	$dir, Lschedule_mangle_last_dec
+
+	# encrypting
+	lvx	v1, r8, r10		# vmovdqa	(%r8,%r10),%xmm1
+	li	r11, 0x2c0		# lea		.Lk_opt(%rip),	%r11	# prepare to output transform
+	li	r9,  0x2d0		# prepare to output transform
+	vperm	v0, v0, v0, v1		# vpshufb	%xmm1,	%xmm0,	%xmm0	# output permute
+
+	lvx	$iptlo, r11, r12	# reload $ipt
+	lvx	$ipthi, r9, r12
+	addi	$out, $out, 16		# add	\$16,	%rdx
+	vxor	v0, v0, v26		# vpxor		.Lk_s63(%rip),	%xmm0,	%xmm0
+	bl	_vpaes_schedule_transform	# output transform
+
+	#stvx	v0, r0, $out		# vmovdqu	%xmm0,	(%rdx)		# save last key
+	vperm	v0, v0, v0, $outperm	# rotate right/left
+	li	r10, 4
+	vsel	v2, $outhead, v0, $outmask
+	li	r11, 8
+	stvx	v2, 0, $out
+	li	r12, 12
+	stvewx	v0, 0, $out		# some (or all) are redundant
+	stvewx	v0, r10, $out
+	stvewx	v0, r11, $out
+	stvewx	v0, r12, $out
+	b	Lschedule_mangle_done
+
+.align	4
+Lschedule_mangle_last_dec:
+	lvx	$iptlo, r11, r12	# reload $ipt
+	lvx	$ipthi, r9,  r12
+	addi	$out, $out, -16		# add	\$-16,	%rdx
+	vxor	v0, v0, v26		# vpxor	.Lk_s63(%rip),	%xmm0,	%xmm0
+	bl	_vpaes_schedule_transform	# output transform
+
+	#stvx	v0, r0, $out		# vmovdqu	%xmm0,	(%rdx)		# save last key
+	addi	r9, $out, -15		# -15 is not typo
+	vperm	v0, v0, v0, $outperm	# rotate right/left
+	li	r10, 4
+	vsel	v2, $outhead, v0, $outmask
+	li	r11, 8
+	stvx	v2, 0, $out
+	li	r12, 12
+	stvewx	v0, 0, r9		# some (or all) are redundant
+	stvewx	v0, r10, r9
+	stvewx	v0, r11, r9
+	stvewx	v0, r12, r9
+
+
+Lschedule_mangle_done:
+	mtlr	r7
+	# cleanup
+	vxor	v0, v0, v0		# vpxor		%xmm0,	%xmm0,	%xmm0
+	vxor	v1, v1, v1		# vpxor		%xmm1,	%xmm1,	%xmm1
+	vxor	v2, v2, v2		# vpxor		%xmm2,	%xmm2,	%xmm2
+	vxor	v3, v3, v3		# vpxor		%xmm3,	%xmm3,	%xmm3
+	vxor	v4, v4, v4		# vpxor		%xmm4,	%xmm4,	%xmm4
+	vxor	v5, v5, v5		# vpxor		%xmm5,	%xmm5,	%xmm5
+	vxor	v6, v6, v6		# vpxor		%xmm6,	%xmm6,	%xmm6
+	vxor	v7, v7, v7		# vpxor		%xmm7,	%xmm7,	%xmm7
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+
+##
+##  .aes_schedule_192_smear
+##
+##  Smear the short, low side in the 192-bit key schedule.
+##
+##  Inputs:
+##    %xmm7: high side, b  a  x  y
+##    %xmm6:  low side, d  c  0  0
+##    %xmm13: 0
+##
+##  Outputs:
+##    %xmm6: b+c+d  b+c  0  0
+##    %xmm0: b+c+d  b+c  b  a
+##
+.align	4
+_vpaes_schedule_192_smear:
+	?vspltw	v0, v7, 3
+	?vsldoi	v1, v9, v6, 12		# vpshufd	\$0x80,	%xmm6,	%xmm1	# d c 0 0 -> c 0 0 0
+	?vsldoi	v0, v7, v0, 8		# vpshufd	\$0xFE,	%xmm7,	%xmm0	# b a _ _ -> b b b a
+	vxor	v6, v6, v1		# vpxor		%xmm1,	%xmm6,	%xmm6	# -> c+d c 0 0
+	vxor	v6, v6, v0		# vpxor		%xmm0,	%xmm6,	%xmm6	# -> b+c+d b+c b a
+	vmr	v0, v6
+	?vsldoi	v6, v6, v9, 8
+	?vsldoi	v6, v9, v6, 8		# clobber low side with zeros
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+
+##
+##  .aes_schedule_round
+##
+##  Runs one main round of the key schedule on %xmm0, %xmm7
+##
+##  Specifically, runs subbytes on the high dword of %xmm0
+##  then rotates it by one byte and xors into the low dword of
+##  %xmm7.
+##
+##  Adds rcon from low byte of %xmm8, then rotates %xmm8 for
+##  next rcon.
+##
+##  Smears the dwords of %xmm7 by xoring the low into the
+##  second low, result into third, result into highest.
+##
+##  Returns results in %xmm7 = %xmm0.
+##  Clobbers %xmm1-%xmm4, %r11.
+##
+.align	4
+_vpaes_schedule_round:
+	# extract rcon from xmm8
+	#vxor	v4, v4, v4		# vpxor		%xmm4,	%xmm4,	%xmm4
+	?vsldoi	v1, $rcon, v9, 15	# vpalignr	\$15,	%xmm8,	%xmm4,	%xmm1
+	?vsldoi	$rcon, $rcon, $rcon, 15	# vpalignr	\$15,	%xmm8,	%xmm8,	%xmm8
+	vxor	v7, v7, v1		# vpxor		%xmm1,	%xmm7,	%xmm7
+
+	# rotate
+	?vspltw	v0, v0, 3		# vpshufd	\$0xFF,	%xmm0,	%xmm0
+	?vsldoi	v0, v0, v0, 1		# vpalignr	\$1,	%xmm0,	%xmm0,	%xmm0
+
+	# fall through...
+
+	# low round: same as high round, but no rotation and no rcon.
+_vpaes_schedule_low_round:
+	# smear xmm7
+	?vsldoi	v1, v9, v7, 12		# vpslldq	\$4,	%xmm7,	%xmm1
+	vxor	v7, v7, v1		# vpxor		%xmm1,	%xmm7,	%xmm7
+	vspltisb	v1, 0x0f	# 0x0f..0f
+	?vsldoi	v4, v9, v7, 8		# vpslldq	\$8,	%xmm7,	%xmm4
+
+	# subbytes
+	vand	v1, v1, v0		# vpand		%xmm9,	%xmm0,	%xmm1		# 0 = k
+	vsrb	v0, v0, v8		# vpsrlb	\$4,	%xmm0,	%xmm0		# 1 = i
+	 vxor	v7, v7, v4		# vpxor		%xmm4,	%xmm7,	%xmm7
+	vperm	v2, $invhi, v9, v1	# vpshufb	%xmm1,	%xmm11,	%xmm2		# 2 = a/k
+	vxor	v1, v1, v0		# vpxor		%xmm0,	%xmm1,	%xmm1		# 0 = j
+	vperm	v3, $invlo, v9, v0	# vpshufb	%xmm0, 	%xmm10,	%xmm3		# 3 = 1/i
+	vxor	v3, v3, v2		# vpxor		%xmm2,	%xmm3,	%xmm3		# 3 = iak = 1/i + a/k
+	vperm	v4, $invlo, v9, v1	# vpshufb	%xmm1,	%xmm10,	%xmm4		# 4 = 1/j
+	 vxor	v7, v7, v26		# vpxor		.Lk_s63(%rip),	%xmm7,	%xmm7
+	vperm	v3, $invlo, v9, v3	# vpshufb	%xmm3,	%xmm10,	%xmm3		# 2 = 1/iak
+	vxor	v4, v4, v2		# vpxor		%xmm2,	%xmm4,	%xmm4		# 4 = jak = 1/j + a/k
+	vperm	v2, $invlo, v9, v4	# vpshufb	%xmm4,	%xmm10,	%xmm2		# 3 = 1/jak
+	vxor	v3, v3, v1		# vpxor		%xmm1,	%xmm3,	%xmm3		# 2 = io
+	vxor	v2, v2, v0		# vpxor		%xmm0,	%xmm2,	%xmm2		# 3 = jo
+	vperm	v4, v15, v9, v3		# vpshufb	%xmm3,	%xmm13,	%xmm4		# 4 = sbou
+	vperm	v1, v14, v9, v2		# vpshufb	%xmm2,	%xmm12,	%xmm1		# 0 = sb1t
+	vxor	v1, v1, v4		# vpxor		%xmm4,	%xmm1,	%xmm1		# 0 = sbox output
+
+	# add in smeared stuff
+	vxor	v0, v1, v7		# vpxor		%xmm7,	%xmm1,	%xmm0
+	vxor	v7, v1, v7		# vmovdqa	%xmm0,	%xmm7
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+
+##
+##  .aes_schedule_transform
+##
+##  Linear-transform %xmm0 according to tables at (%r11)
+##
+##  Requires that %xmm9 = 0x0F0F... as in preheat
+##  Output in %xmm0
+##  Clobbers %xmm2
+##
+.align	4
+_vpaes_schedule_transform:
+	#vand	v1, v0, v9		# vpand		%xmm9,	%xmm0,	%xmm1
+	vsrb	v2, v0, v8		# vpsrlb	\$4,	%xmm0,	%xmm0
+					# vmovdqa	(%r11),	%xmm2 	# lo
+	vperm	v0, $iptlo, $iptlo, v0	# vpshufb	%xmm1,	%xmm2,	%xmm2
+					# vmovdqa	16(%r11),	%xmm1 # hi
+	vperm	v2, $ipthi, $ipthi, v2	# vpshufb	%xmm0,	%xmm1,	%xmm0
+	vxor	v0, v0, v2		# vpxor		%xmm2,	%xmm0,	%xmm0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+
+##
+##  .aes_schedule_mangle
+##
+##  Mangle xmm0 from (basis-transformed) standard version
+##  to our version.
+##
+##  On encrypt,
+##    xor with 0x63
+##    multiply by circulant 0,1,1,1
+##    apply shiftrows transform
+##
+##  On decrypt,
+##    xor with 0x63
+##    multiply by "inverse mixcolumns" circulant E,B,D,9
+##    deskew
+##    apply shiftrows transform
+##
+##
+##  Writes out to (%rdx), and increments or decrements it
+##  Keeps track of round number mod 4 in %r8
+##  Preserves xmm0
+##  Clobbers xmm1-xmm5
+##
+.align	4
+_vpaes_schedule_mangle:
+	#vmr	v4, v0			# vmovdqa	%xmm0,	%xmm4	# save xmm0 for later
+					# vmovdqa	.Lk_mc_forward(%rip),%xmm5
+	bne	$dir, Lschedule_mangle_dec
+
+	# encrypting
+	vxor	v4, v0, v26		# vpxor	.Lk_s63(%rip),	%xmm0,	%xmm4
+	addi	$out, $out, 16		# add	\$16,	%rdx
+	vperm	v4, v4, v4, v25		# vpshufb	%xmm5,	%xmm4,	%xmm4
+	vperm	v1, v4, v4, v25		# vpshufb	%xmm5,	%xmm4,	%xmm1
+	vperm	v3, v1, v1, v25		# vpshufb	%xmm5,	%xmm1,	%xmm3
+	vxor	v4, v4, v1		# vpxor		%xmm1,	%xmm4,	%xmm4
+	lvx	v1, r8, r10		# vmovdqa	(%r8,%r10),	%xmm1
+	vxor	v3, v3, v4		# vpxor		%xmm4,	%xmm3,	%xmm3
+
+	vperm	v3, v3, v3, v1		# vpshufb	%xmm1,	%xmm3,	%xmm3
+	addi	r8, r8, -16		# add	\$-16,	%r8
+	andi.	r8, r8, 0x30		# and	\$0x30,	%r8
+
+	#stvx	v3, 0, $out		# vmovdqu	%xmm3,	(%rdx)
+	vperm	v1, v3, v3, $outperm	# rotate right/left
+	vsel	v2, $outhead, v1, $outmask
+	vmr	$outhead, v1
+	stvx	v2, 0, $out
+	blr
+
+.align	4
+Lschedule_mangle_dec:
+	# inverse mix columns
+					# lea	.Lk_dksd(%rip),%r11
+	vsrb	v1, v0, v8		# vpsrlb	\$4,	%xmm4,	%xmm1	# 1 = hi
+	#and	v4, v0, v9		# vpand		%xmm9,	%xmm4,	%xmm4	# 4 = lo
+
+					# vmovdqa	0x00(%r11),	%xmm2
+	vperm	v2, v16, v16, v0	# vpshufb	%xmm4,	%xmm2,	%xmm2
+					# vmovdqa	0x10(%r11),	%xmm3
+	vperm	v3, v17, v17, v1	# vpshufb	%xmm1,	%xmm3,	%xmm3
+	vxor	v3, v3, v2		# vpxor		%xmm2,	%xmm3,	%xmm3
+	vperm	v3, v3, v9, v25		# vpshufb	%xmm5,	%xmm3,	%xmm3
+
+					# vmovdqa	0x20(%r11),	%xmm2
+	vperm	v2, v18, v18, v0	# vpshufb	%xmm4,	%xmm2,	%xmm2
+	vxor	v2, v2, v3		# vpxor		%xmm3,	%xmm2,	%xmm2
+					# vmovdqa	0x30(%r11),	%xmm3
+	vperm	v3, v19, v19, v1	# vpshufb	%xmm1,	%xmm3,	%xmm3
+	vxor	v3, v3, v2		# vpxor		%xmm2,	%xmm3,	%xmm3
+	vperm	v3, v3, v9, v25		# vpshufb	%xmm5,	%xmm3,	%xmm3
+
+					# vmovdqa	0x40(%r11),	%xmm2
+	vperm	v2, v20, v20, v0	# vpshufb	%xmm4,	%xmm2,	%xmm2
+	vxor	v2, v2, v3		# vpxor		%xmm3,	%xmm2,	%xmm2
+					# vmovdqa	0x50(%r11),	%xmm3
+	vperm	v3, v21, v21, v1	# vpshufb	%xmm1,	%xmm3,	%xmm3
+	vxor	v3, v3, v2		# vpxor		%xmm2,	%xmm3,	%xmm3
+
+					# vmovdqa	0x60(%r11),	%xmm2
+	vperm	v2, v22, v22, v0	# vpshufb	%xmm4,	%xmm2,	%xmm2
+	vperm	v3, v3, v9, v25		# vpshufb	%xmm5,	%xmm3,	%xmm3
+					# vmovdqa	0x70(%r11),	%xmm4
+	vperm	v4, v23, v23, v1	# vpshufb	%xmm1,	%xmm4,	%xmm4
+	lvx	v1, r8, r10		# vmovdqa	(%r8,%r10),	%xmm1
+	vxor	v2, v2, v3		# vpxor		%xmm3,	%xmm2,	%xmm2
+	vxor	v3, v4, v2		# vpxor		%xmm2,	%xmm4,	%xmm3
+
+	addi	$out, $out, -16		# add	\$-16,	%rdx
+
+	vperm	v3, v3, v3, v1		# vpshufb	%xmm1,	%xmm3,	%xmm3
+	addi	r8, r8, -16		# add	\$-16,	%r8
+	andi.	r8, r8, 0x30		# and	\$0x30,	%r8
+
+	#stvx	v3, 0, $out		# vmovdqu	%xmm3,	(%rdx)
+	vperm	v1, v3, v3, $outperm	# rotate right/left
+	vsel	v2, $outhead, v1, $outmask
+	vmr	$outhead, v1
+	stvx	v2, 0, $out
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+
+.globl	.vpaes_set_encrypt_key
+.align	5
+.vpaes_set_encrypt_key:
+	$STU	$sp,-$FRAME($sp)
+	li	r10,`15+6*$SIZE_T`
+	li	r11,`31+6*$SIZE_T`
+	mflr	r0
+	mfspr	r6, 256			# save vrsave
+	stvx	v20,r10,$sp
+	addi	r10,r10,32
+	stvx	v21,r11,$sp
+	addi	r11,r11,32
+	stvx	v22,r10,$sp
+	addi	r10,r10,32
+	stvx	v23,r11,$sp
+	addi	r11,r11,32
+	stvx	v24,r10,$sp
+	addi	r10,r10,32
+	stvx	v25,r11,$sp
+	addi	r11,r11,32
+	stvx	v26,r10,$sp
+	addi	r10,r10,32
+	stvx	v27,r11,$sp
+	addi	r11,r11,32
+	stvx	v28,r10,$sp
+	addi	r10,r10,32
+	stvx	v29,r11,$sp
+	addi	r11,r11,32
+	stvx	v30,r10,$sp
+	stvx	v31,r11,$sp
+	stw	r6,`$FRAME-4`($sp)	# save vrsave
+	li	r7, -1
+	$PUSH	r0, `$FRAME+$LRSAVE`($sp)
+	mtspr	256, r7			# preserve all AltiVec registers
+
+	srwi	r9, $bits, 5		# shr	\$5,%eax
+	addi	r9, r9, 6		# add	\$5,%eax
+	stw	r9, 240($out)		# mov	%eax,240(%rdx)	# AES_KEY->rounds = nbits/32+5;
+
+	cmplw	$dir, $bits, $bits	# set encrypt direction
+	li	r8, 0x30		# mov	\$0x30,%r8d
+	bl	_vpaes_schedule_core
+
+	$POP	r0, `$FRAME+$LRSAVE`($sp)
+	li	r10,`15+6*$SIZE_T`
+	li	r11,`31+6*$SIZE_T`
+	mtspr	256, r6			# restore vrsave
+	mtlr	r0
+	xor	r3, r3, r3
+	lvx	v20,r10,$sp
+	addi	r10,r10,32
+	lvx	v21,r11,$sp
+	addi	r11,r11,32
+	lvx	v22,r10,$sp
+	addi	r10,r10,32
+	lvx	v23,r11,$sp
+	addi	r11,r11,32
+	lvx	v24,r10,$sp
+	addi	r10,r10,32
+	lvx	v25,r11,$sp
+	addi	r11,r11,32
+	lvx	v26,r10,$sp
+	addi	r10,r10,32
+	lvx	v27,r11,$sp
+	addi	r11,r11,32
+	lvx	v28,r10,$sp
+	addi	r10,r10,32
+	lvx	v29,r11,$sp
+	addi	r11,r11,32
+	lvx	v30,r10,$sp
+	lvx	v31,r11,$sp
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,0x04,1,0x80,0,3,0
+	.long	0
+.size	.vpaes_set_encrypt_key,.-.vpaes_set_encrypt_key
+
+.globl	.vpaes_set_decrypt_key
+.align	4
+.vpaes_set_decrypt_key:
+	$STU	$sp,-$FRAME($sp)
+	li	r10,`15+6*$SIZE_T`
+	li	r11,`31+6*$SIZE_T`
+	mflr	r0
+	mfspr	r6, 256			# save vrsave
+	stvx	v20,r10,$sp
+	addi	r10,r10,32
+	stvx	v21,r11,$sp
+	addi	r11,r11,32
+	stvx	v22,r10,$sp
+	addi	r10,r10,32
+	stvx	v23,r11,$sp
+	addi	r11,r11,32
+	stvx	v24,r10,$sp
+	addi	r10,r10,32
+	stvx	v25,r11,$sp
+	addi	r11,r11,32
+	stvx	v26,r10,$sp
+	addi	r10,r10,32
+	stvx	v27,r11,$sp
+	addi	r11,r11,32
+	stvx	v28,r10,$sp
+	addi	r10,r10,32
+	stvx	v29,r11,$sp
+	addi	r11,r11,32
+	stvx	v30,r10,$sp
+	stvx	v31,r11,$sp
+	stw	r6,`$FRAME-4`($sp)	# save vrsave
+	li	r7, -1
+	$PUSH	r0, `$FRAME+$LRSAVE`($sp)
+	mtspr	256, r7			# preserve all AltiVec registers
+
+	srwi	r9, $bits, 5		# shr	\$5,%eax
+	addi	r9, r9, 6		# add	\$5,%eax
+	stw	r9, 240($out)		# mov	%eax,240(%rdx)	# AES_KEY->rounds = nbits/32+5;
+
+	slwi	r9, r9, 4		# shl	\$4,%eax
+	add	$out, $out, r9		# lea	(%rdx,%rax),%rdx
+
+	cmplwi	$dir, $bits, 0		# set decrypt direction
+	srwi	r8, $bits, 1		# shr	\$1,%r8d
+	andi.	r8, r8, 32		# and	\$32,%r8d
+	xori	r8, r8, 32		# xor	\$32,%r8d	# nbits==192?0:32
+	bl	_vpaes_schedule_core
+
+	$POP	r0,  `$FRAME+$LRSAVE`($sp)
+	li	r10,`15+6*$SIZE_T`
+	li	r11,`31+6*$SIZE_T`
+	mtspr	256, r6			# restore vrsave
+	mtlr	r0
+	xor	r3, r3, r3
+	lvx	v20,r10,$sp
+	addi	r10,r10,32
+	lvx	v21,r11,$sp
+	addi	r11,r11,32
+	lvx	v22,r10,$sp
+	addi	r10,r10,32
+	lvx	v23,r11,$sp
+	addi	r11,r11,32
+	lvx	v24,r10,$sp
+	addi	r10,r10,32
+	lvx	v25,r11,$sp
+	addi	r11,r11,32
+	lvx	v26,r10,$sp
+	addi	r10,r10,32
+	lvx	v27,r11,$sp
+	addi	r11,r11,32
+	lvx	v28,r10,$sp
+	addi	r10,r10,32
+	lvx	v29,r11,$sp
+	addi	r11,r11,32
+	lvx	v30,r10,$sp
+	lvx	v31,r11,$sp
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,0x04,1,0x80,0,3,0
+	.long	0
+.size	.vpaes_set_decrypt_key,.-.vpaes_set_decrypt_key
+___
+}
+
+my $consts=1;
+foreach  (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/geo;
+
+	# constants table endian-specific conversion
+	if ($consts && m/\.long\s+(.+)\s+(\?[a-z]*)$/o) {
+	    my $conv=$2;
+	    my @bytes=();
+
+	    # convert to endian-agnostic format
+	    foreach (split(/,\s+/,$1)) {
+		my $l = /^0/?oct:int;
+		push @bytes,($l>>24)&0xff,($l>>16)&0xff,($l>>8)&0xff,$l&0xff;
+	    }
+
+	    # little-endian conversion
+	    if ($flavour =~ /le$/o) {
+		SWITCH: for($conv)  {
+		    /\?inv/ && do   { @bytes=map($_^0xf,@bytes); last; };
+		    /\?rev/ && do   { @bytes=reverse(@bytes);    last; };
+		}
+	    }
+
+	    #emit
+	    print ".byte\t",join(',',map (sprintf("0x%02x",$_),@bytes)),"\n";
+	    next;
+	}
+	$consts=0 if (m/Lconsts:/o);	# end of table
+
+	# instructions prefixed with '?' are endian-specific and need
+	# to be adjusted accordingly...
+	if ($flavour =~ /le$/o) {	# little-endian
+	    s/\?lvsr/lvsl/o or
+	    s/\?lvsl/lvsr/o or
+	    s/\?(vperm\s+v[0-9]+,\s*)(v[0-9]+,\s*)(v[0-9]+,\s*)(v[0-9]+)/$1$3$2$4/o or
+	    s/\?(vsldoi\s+v[0-9]+,\s*)(v[0-9]+,)\s*(v[0-9]+,\s*)([0-9]+)/$1$3$2 16-$4/o or
+	    s/\?(vspltw\s+v[0-9]+,\s*)(v[0-9]+,)\s*([0-9])/$1$2 3-$3/o;
+	} else {			# big-endian
+	    s/\?([a-z]+)/$1/o;
+	}
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/vpaes-x86.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/vpaes-x86.pl
new file mode 100644
index 000000000..7d57edc0e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/vpaes-x86.pl
@@ -0,0 +1,916 @@
+#! /usr/bin/env perl
+# Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+######################################################################
+## Constant-time SSSE3 AES core implementation.
+## version 0.1
+##
+## By Mike Hamburg (Stanford University), 2009
+## Public domain.
+##
+## For details see http://shiftleft.org/papers/vector_aes/ and
+## http://crypto.stanford.edu/vpaes/.
+
+######################################################################
+# September 2011.
+#
+# Port vpaes-x86_64.pl as 32-bit "almost" drop-in replacement for
+# aes-586.pl. "Almost" refers to the fact that AES_cbc_encrypt
+# doesn't handle partial vectors (doesn't have to if called from
+# EVP only). "Drop-in" implies that this module doesn't share key
+# schedule structure with the original nor does it make assumption
+# about its alignment...
+#
+# Performance summary. aes-586.pl column lists large-block CBC
+# encrypt/decrypt/with-hyper-threading-off(*) results in cycles per
+# byte processed with 128-bit key, and vpaes-x86.pl column - [also
+# large-block CBC] encrypt/decrypt.
+#
+#		aes-586.pl		vpaes-x86.pl
+#
+# Core 2(**)	28.1/41.4/18.3		21.9/25.2(***)
+# Nehalem	27.9/40.4/18.1		10.2/11.9
+# Atom		70.7/92.1/60.1		61.1/75.4(***)
+# Silvermont	45.4/62.9/24.1		49.2/61.1(***)
+#
+# (*)	"Hyper-threading" in the context refers rather to cache shared
+#	among multiple cores, than to specifically Intel HTT. As vast
+#	majority of contemporary cores share cache, slower code path
+#	is common place. In other words "with-hyper-threading-off"
+#	results are presented mostly for reference purposes.
+#
+# (**)	"Core 2" refers to initial 65nm design, a.k.a. Conroe.
+#
+# (***)	Less impressive improvement on Core 2 and Atom is due to slow
+#	pshufb,	yet it's respectable +28%/64%  improvement on Core 2
+#	and +15% on Atom (as implied, over "hyper-threading-safe"
+#	code path).
+#
+#						<appro@openssl.org>
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output = pop;
+open OUT,">$output";
+*STDOUT=*OUT;
+
+&asm_init($ARGV[0],$x86only = $ARGV[$#ARGV] eq "386");
+
+$PREFIX="vpaes";
+
+my  ($round, $base, $magic, $key, $const, $inp, $out)=
+    ("eax",  "ebx", "ecx",  "edx","ebp",  "esi","edi");
+
+&static_label("_vpaes_consts");
+&static_label("_vpaes_schedule_low_round");
+
+&set_label("_vpaes_consts",64);
+$k_inv=-0x30;		# inv, inva
+	&data_word(0x0D080180,0x0E05060F,0x0A0B0C02,0x04070309);
+	&data_word(0x0F0B0780,0x01040A06,0x02050809,0x030D0E0C);
+
+$k_s0F=-0x10;		# s0F
+	&data_word(0x0F0F0F0F,0x0F0F0F0F,0x0F0F0F0F,0x0F0F0F0F);
+
+$k_ipt=0x00;		# input transform (lo, hi)
+	&data_word(0x5A2A7000,0xC2B2E898,0x52227808,0xCABAE090);
+	&data_word(0x317C4D00,0x4C01307D,0xB0FDCC81,0xCD80B1FC);
+
+$k_sb1=0x20;		# sb1u, sb1t
+	&data_word(0xCB503E00,0xB19BE18F,0x142AF544,0xA5DF7A6E);
+	&data_word(0xFAE22300,0x3618D415,0x0D2ED9EF,0x3BF7CCC1);
+$k_sb2=0x40;		# sb2u, sb2t
+	&data_word(0x0B712400,0xE27A93C6,0xBC982FCD,0x5EB7E955);
+	&data_word(0x0AE12900,0x69EB8840,0xAB82234A,0xC2A163C8);
+$k_sbo=0x60;		# sbou, sbot
+	&data_word(0x6FBDC700,0xD0D26D17,0xC502A878,0x15AABF7A);
+	&data_word(0x5FBB6A00,0xCFE474A5,0x412B35FA,0x8E1E90D1);
+
+$k_mc_forward=0x80;	# mc_forward
+	&data_word(0x00030201,0x04070605,0x080B0A09,0x0C0F0E0D);
+	&data_word(0x04070605,0x080B0A09,0x0C0F0E0D,0x00030201);
+	&data_word(0x080B0A09,0x0C0F0E0D,0x00030201,0x04070605);
+	&data_word(0x0C0F0E0D,0x00030201,0x04070605,0x080B0A09);
+
+$k_mc_backward=0xc0;	# mc_backward
+	&data_word(0x02010003,0x06050407,0x0A09080B,0x0E0D0C0F);
+	&data_word(0x0E0D0C0F,0x02010003,0x06050407,0x0A09080B);
+	&data_word(0x0A09080B,0x0E0D0C0F,0x02010003,0x06050407);
+	&data_word(0x06050407,0x0A09080B,0x0E0D0C0F,0x02010003);
+
+$k_sr=0x100;		# sr
+	&data_word(0x03020100,0x07060504,0x0B0A0908,0x0F0E0D0C);
+	&data_word(0x0F0A0500,0x030E0904,0x07020D08,0x0B06010C);
+	&data_word(0x0B020900,0x0F060D04,0x030A0108,0x070E050C);
+	&data_word(0x070A0D00,0x0B0E0104,0x0F020508,0x0306090C);
+
+$k_rcon=0x140;		# rcon
+	&data_word(0xAF9DEEB6,0x1F8391B9,0x4D7C7D81,0x702A9808);
+
+$k_s63=0x150;		# s63: all equal to 0x63 transformed
+	&data_word(0x5B5B5B5B,0x5B5B5B5B,0x5B5B5B5B,0x5B5B5B5B);
+
+$k_opt=0x160;		# output transform
+	&data_word(0xD6B66000,0xFF9F4929,0xDEBE6808,0xF7974121);
+	&data_word(0x50BCEC00,0x01EDBD51,0xB05C0CE0,0xE10D5DB1);
+
+$k_deskew=0x180;	# deskew tables: inverts the sbox's "skew"
+	&data_word(0x47A4E300,0x07E4A340,0x5DBEF91A,0x1DFEB95A);
+	&data_word(0x83EA6900,0x5F36B5DC,0xF49D1E77,0x2841C2AB);
+##
+##  Decryption stuff
+##  Key schedule constants
+##
+$k_dksd=0x1a0;		# decryption key schedule: invskew x*D
+	&data_word(0xA3E44700,0xFEB91A5D,0x5A1DBEF9,0x0740E3A4);
+	&data_word(0xB5368300,0x41C277F4,0xAB289D1E,0x5FDC69EA);
+$k_dksb=0x1c0;		# decryption key schedule: invskew x*B
+	&data_word(0x8550D500,0x9A4FCA1F,0x1CC94C99,0x03D65386);
+	&data_word(0xB6FC4A00,0x115BEDA7,0x7E3482C8,0xD993256F);
+$k_dkse=0x1e0;		# decryption key schedule: invskew x*E + 0x63
+	&data_word(0x1FC9D600,0xD5031CCA,0x994F5086,0x53859A4C);
+	&data_word(0x4FDC7BE8,0xA2319605,0x20B31487,0xCD5EF96A);
+$k_dks9=0x200;		# decryption key schedule: invskew x*9
+	&data_word(0x7ED9A700,0xB6116FC8,0x82255BFC,0x4AED9334);
+	&data_word(0x27143300,0x45765162,0xE9DAFDCE,0x8BB89FAC);
+
+##
+##  Decryption stuff
+##  Round function constants
+##
+$k_dipt=0x220;		# decryption input transform
+	&data_word(0x0B545F00,0x0F505B04,0x114E451A,0x154A411E);
+	&data_word(0x60056500,0x86E383E6,0xF491F194,0x12771772);
+
+$k_dsb9=0x240;		# decryption sbox output *9*u, *9*t
+	&data_word(0x9A86D600,0x851C0353,0x4F994CC9,0xCAD51F50);
+	&data_word(0xECD74900,0xC03B1789,0xB2FBA565,0x725E2C9E);
+$k_dsbd=0x260;		# decryption sbox output *D*u, *D*t
+	&data_word(0xE6B1A200,0x7D57CCDF,0x882A4439,0xF56E9B13);
+	&data_word(0x24C6CB00,0x3CE2FAF7,0x15DEEFD3,0x2931180D);
+$k_dsbb=0x280;		# decryption sbox output *B*u, *B*t
+	&data_word(0x96B44200,0xD0226492,0xB0F2D404,0x602646F6);
+	&data_word(0xCD596700,0xC19498A6,0x3255AA6B,0xF3FF0C3E);
+$k_dsbe=0x2a0;		# decryption sbox output *E*u, *E*t
+	&data_word(0x26D4D000,0x46F29296,0x64B4F6B0,0x22426004);
+	&data_word(0xFFAAC100,0x0C55A6CD,0x98593E32,0x9467F36B);
+$k_dsbo=0x2c0;		# decryption sbox final output
+	&data_word(0x7EF94000,0x1387EA53,0xD4943E2D,0xC7AA6DB9);
+	&data_word(0x93441D00,0x12D7560F,0xD8C58E9C,0xCA4B8159);
+&asciz	("Vector Permutation AES for x86/SSSE3, Mike Hamburg (Stanford University)");
+&align	(64);
+
+&function_begin_B("_vpaes_preheat");
+	&add	($const,&DWP(0,"esp"));
+	&movdqa	("xmm7",&QWP($k_inv,$const));
+	&movdqa	("xmm6",&QWP($k_s0F,$const));
+	&ret	();
+&function_end_B("_vpaes_preheat");
+
+##
+##  _aes_encrypt_core
+##
+##  AES-encrypt %xmm0.
+##
+##  Inputs:
+##     %xmm0 = input
+##     %xmm6-%xmm7 as in _vpaes_preheat
+##    (%edx) = scheduled keys
+##
+##  Output in %xmm0
+##  Clobbers  %xmm1-%xmm5, %eax, %ebx, %ecx, %edx
+##
+##
+&function_begin_B("_vpaes_encrypt_core");
+	&mov	($magic,16);
+	&mov	($round,&DWP(240,$key));
+	&movdqa	("xmm1","xmm6")
+	&movdqa	("xmm2",&QWP($k_ipt,$const));
+	&pandn	("xmm1","xmm0");
+	&pand	("xmm0","xmm6");
+	&movdqu	("xmm5",&QWP(0,$key));
+	&pshufb	("xmm2","xmm0");
+	&movdqa	("xmm0",&QWP($k_ipt+16,$const));
+	&pxor	("xmm2","xmm5");
+	&psrld	("xmm1",4);
+	&add	($key,16);
+	&pshufb	("xmm0","xmm1");
+	&lea	($base,&DWP($k_mc_backward,$const));
+	&pxor	("xmm0","xmm2");
+	&jmp	(&label("enc_entry"));
+
+
+&set_label("enc_loop",16);
+	# middle of middle round
+	&movdqa	("xmm4",&QWP($k_sb1,$const));	# 4 : sb1u
+	&movdqa	("xmm0",&QWP($k_sb1+16,$const));# 0 : sb1t
+	&pshufb	("xmm4","xmm2");		# 4 = sb1u
+	&pshufb	("xmm0","xmm3");		# 0 = sb1t
+	&pxor	("xmm4","xmm5");		# 4 = sb1u + k
+	&movdqa	("xmm5",&QWP($k_sb2,$const));	# 4 : sb2u
+	&pxor	("xmm0","xmm4");		# 0 = A
+	&movdqa	("xmm1",&QWP(-0x40,$base,$magic));# .Lk_mc_forward[]
+	&pshufb	("xmm5","xmm2");		# 4 = sb2u
+	&movdqa	("xmm2",&QWP($k_sb2+16,$const));# 2 : sb2t
+	&movdqa	("xmm4",&QWP(0,$base,$magic));	# .Lk_mc_backward[]
+	&pshufb	("xmm2","xmm3");		# 2 = sb2t
+	&movdqa	("xmm3","xmm0");		# 3 = A
+	&pxor	("xmm2","xmm5");		# 2 = 2A
+	&pshufb	("xmm0","xmm1");		# 0 = B
+	&add	($key,16);			# next key
+	&pxor	("xmm0","xmm2");		# 0 = 2A+B
+	&pshufb	("xmm3","xmm4");		# 3 = D
+	&add	($magic,16);			# next mc
+	&pxor	("xmm3","xmm0");		# 3 = 2A+B+D
+	&pshufb	("xmm0","xmm1");		# 0 = 2B+C
+	&and	($magic,0x30);			# ... mod 4
+	&sub	($round,1);			# nr--
+	&pxor	("xmm0","xmm3");		# 0 = 2A+3B+C+D
+
+&set_label("enc_entry");
+	# top of round
+	&movdqa	("xmm1","xmm6");		# 1 : i
+	&movdqa	("xmm5",&QWP($k_inv+16,$const));# 2 : a/k
+	&pandn	("xmm1","xmm0");		# 1 = i<<4
+	&psrld	("xmm1",4);			# 1 = i
+	&pand	("xmm0","xmm6");		# 0 = k
+	&pshufb	("xmm5","xmm0");		# 2 = a/k
+	&movdqa	("xmm3","xmm7");		# 3 : 1/i
+	&pxor	("xmm0","xmm1");		# 0 = j
+	&pshufb	("xmm3","xmm1");		# 3 = 1/i
+	&movdqa	("xmm4","xmm7");		# 4 : 1/j
+	&pxor	("xmm3","xmm5");		# 3 = iak = 1/i + a/k
+	&pshufb	("xmm4","xmm0");		# 4 = 1/j
+	&movdqa	("xmm2","xmm7");		# 2 : 1/iak
+	&pxor	("xmm4","xmm5");		# 4 = jak = 1/j + a/k
+	&pshufb	("xmm2","xmm3");		# 2 = 1/iak
+	&movdqa	("xmm3","xmm7");		# 3 : 1/jak
+	&pxor	("xmm2","xmm0");		# 2 = io
+	&pshufb	("xmm3","xmm4");		# 3 = 1/jak
+	&movdqu	("xmm5",&QWP(0,$key));
+	&pxor	("xmm3","xmm1");		# 3 = jo
+	&jnz	(&label("enc_loop"));
+
+	# middle of last round
+	&movdqa	("xmm4",&QWP($k_sbo,$const));	# 3 : sbou      .Lk_sbo
+	&movdqa	("xmm0",&QWP($k_sbo+16,$const));# 3 : sbot      .Lk_sbo+16
+	&pshufb	("xmm4","xmm2");		# 4 = sbou
+	&pxor	("xmm4","xmm5");		# 4 = sb1u + k
+	&pshufb	("xmm0","xmm3");		# 0 = sb1t
+	&movdqa	("xmm1",&QWP(0x40,$base,$magic));# .Lk_sr[]
+	&pxor	("xmm0","xmm4");		# 0 = A
+	&pshufb	("xmm0","xmm1");
+	&ret	();
+&function_end_B("_vpaes_encrypt_core");
+
+##
+##  Decryption core
+##
+##  Same API as encryption core.
+##
+&function_begin_B("_vpaes_decrypt_core");
+	&lea	($base,&DWP($k_dsbd,$const));
+	&mov	($round,&DWP(240,$key));
+	&movdqa	("xmm1","xmm6");
+	&movdqa	("xmm2",&QWP($k_dipt-$k_dsbd,$base));
+	&pandn	("xmm1","xmm0");
+	&mov	($magic,$round);
+	&psrld	("xmm1",4)
+	&movdqu	("xmm5",&QWP(0,$key));
+	&shl	($magic,4);
+	&pand	("xmm0","xmm6");
+	&pshufb	("xmm2","xmm0");
+	&movdqa	("xmm0",&QWP($k_dipt-$k_dsbd+16,$base));
+	&xor	($magic,0x30);
+	&pshufb	("xmm0","xmm1");
+	&and	($magic,0x30);
+	&pxor	("xmm2","xmm5");
+	&movdqa	("xmm5",&QWP($k_mc_forward+48,$const));
+	&pxor	("xmm0","xmm2");
+	&add	($key,16);
+	&lea	($magic,&DWP($k_sr-$k_dsbd,$base,$magic));
+	&jmp	(&label("dec_entry"));
+
+&set_label("dec_loop",16);
+##
+##  Inverse mix columns
+##
+	&movdqa	("xmm4",&QWP(-0x20,$base));	# 4 : sb9u
+	&movdqa	("xmm1",&QWP(-0x10,$base));	# 0 : sb9t
+	&pshufb	("xmm4","xmm2");		# 4 = sb9u
+	&pshufb	("xmm1","xmm3");		# 0 = sb9t
+	&pxor	("xmm0","xmm4");
+	&movdqa	("xmm4",&QWP(0,$base));		# 4 : sbdu
+	&pxor	("xmm0","xmm1");		# 0 = ch
+	&movdqa	("xmm1",&QWP(0x10,$base));	# 0 : sbdt
+
+	&pshufb	("xmm4","xmm2");		# 4 = sbdu
+	&pshufb	("xmm0","xmm5");		# MC ch
+	&pshufb	("xmm1","xmm3");		# 0 = sbdt
+	&pxor	("xmm0","xmm4");		# 4 = ch
+	&movdqa	("xmm4",&QWP(0x20,$base));	# 4 : sbbu
+	&pxor	("xmm0","xmm1");		# 0 = ch
+	&movdqa	("xmm1",&QWP(0x30,$base));	# 0 : sbbt
+
+	&pshufb	("xmm4","xmm2");		# 4 = sbbu
+	&pshufb	("xmm0","xmm5");		# MC ch
+	&pshufb	("xmm1","xmm3");		# 0 = sbbt
+	&pxor	("xmm0","xmm4");		# 4 = ch
+	&movdqa	("xmm4",&QWP(0x40,$base));	# 4 : sbeu
+	&pxor	("xmm0","xmm1");		# 0 = ch
+	&movdqa	("xmm1",&QWP(0x50,$base));	# 0 : sbet
+
+	&pshufb	("xmm4","xmm2");		# 4 = sbeu
+	&pshufb	("xmm0","xmm5");		# MC ch
+	&pshufb	("xmm1","xmm3");		# 0 = sbet
+	&pxor	("xmm0","xmm4");		# 4 = ch
+	&add	($key,16);			# next round key
+	&palignr("xmm5","xmm5",12);
+	&pxor	("xmm0","xmm1");		# 0 = ch
+	&sub	($round,1);			# nr--
+
+&set_label("dec_entry");
+	# top of round
+	&movdqa	("xmm1","xmm6");		# 1 : i
+	&movdqa	("xmm2",&QWP($k_inv+16,$const));# 2 : a/k
+	&pandn	("xmm1","xmm0");		# 1 = i<<4
+	&pand	("xmm0","xmm6");		# 0 = k
+	&psrld	("xmm1",4);			# 1 = i
+	&pshufb	("xmm2","xmm0");		# 2 = a/k
+	&movdqa	("xmm3","xmm7");		# 3 : 1/i
+	&pxor	("xmm0","xmm1");		# 0 = j
+	&pshufb	("xmm3","xmm1");		# 3 = 1/i
+	&movdqa	("xmm4","xmm7");		# 4 : 1/j
+	&pxor	("xmm3","xmm2");		# 3 = iak = 1/i + a/k
+	&pshufb	("xmm4","xmm0");		# 4 = 1/j
+	&pxor	("xmm4","xmm2");		# 4 = jak = 1/j + a/k
+	&movdqa	("xmm2","xmm7");		# 2 : 1/iak
+	&pshufb	("xmm2","xmm3");		# 2 = 1/iak
+	&movdqa	("xmm3","xmm7");		# 3 : 1/jak
+	&pxor	("xmm2","xmm0");		# 2 = io
+	&pshufb	("xmm3","xmm4");		# 3 = 1/jak
+	&movdqu	("xmm0",&QWP(0,$key));
+	&pxor	("xmm3","xmm1");		# 3 = jo
+	&jnz	(&label("dec_loop"));
+
+	# middle of last round
+	&movdqa	("xmm4",&QWP(0x60,$base));	# 3 : sbou
+	&pshufb	("xmm4","xmm2");		# 4 = sbou
+	&pxor	("xmm4","xmm0");		# 4 = sb1u + k
+	&movdqa	("xmm0",&QWP(0x70,$base));	# 0 : sbot
+	&movdqa	("xmm2",&QWP(0,$magic));
+	&pshufb	("xmm0","xmm3");		# 0 = sb1t
+	&pxor	("xmm0","xmm4");		# 0 = A
+	&pshufb	("xmm0","xmm2");
+	&ret	();
+&function_end_B("_vpaes_decrypt_core");
+
+########################################################
+##                                                    ##
+##                  AES key schedule                  ##
+##                                                    ##
+########################################################
+&function_begin_B("_vpaes_schedule_core");
+	&add	($const,&DWP(0,"esp"));
+	&movdqu	("xmm0",&QWP(0,$inp));		# load key (unaligned)
+	&movdqa	("xmm2",&QWP($k_rcon,$const));	# load rcon
+
+	# input transform
+	&movdqa	("xmm3","xmm0");
+	&lea	($base,&DWP($k_ipt,$const));
+	&movdqa	(&QWP(4,"esp"),"xmm2");		# xmm8
+	&call	("_vpaes_schedule_transform");
+	&movdqa	("xmm7","xmm0");
+
+	&test	($out,$out);
+	&jnz	(&label("schedule_am_decrypting"));
+
+	# encrypting, output zeroth round key after transform
+	&movdqu	(&QWP(0,$key),"xmm0");
+	&jmp	(&label("schedule_go"));
+
+&set_label("schedule_am_decrypting");
+	# decrypting, output zeroth round key after shiftrows
+	&movdqa	("xmm1",&QWP($k_sr,$const,$magic));
+	&pshufb	("xmm3","xmm1");
+	&movdqu	(&QWP(0,$key),"xmm3");
+	&xor	($magic,0x30);
+
+&set_label("schedule_go");
+	&cmp	($round,192);
+	&ja	(&label("schedule_256"));
+	&je	(&label("schedule_192"));
+	# 128: fall though
+
+##
+##  .schedule_128
+##
+##  128-bit specific part of key schedule.
+##
+##  This schedule is really simple, because all its parts
+##  are accomplished by the subroutines.
+##
+&set_label("schedule_128");
+	&mov	($round,10);
+
+&set_label("loop_schedule_128");
+	&call	("_vpaes_schedule_round");
+	&dec	($round);
+	&jz	(&label("schedule_mangle_last"));
+	&call	("_vpaes_schedule_mangle");	# write output
+	&jmp	(&label("loop_schedule_128"));
+
+##
+##  .aes_schedule_192
+##
+##  192-bit specific part of key schedule.
+##
+##  The main body of this schedule is the same as the 128-bit
+##  schedule, but with more smearing.  The long, high side is
+##  stored in %xmm7 as before, and the short, low side is in
+##  the high bits of %xmm6.
+##
+##  This schedule is somewhat nastier, however, because each
+##  round produces 192 bits of key material, or 1.5 round keys.
+##  Therefore, on each cycle we do 2 rounds and produce 3 round
+##  keys.
+##
+&set_label("schedule_192",16);
+	&movdqu	("xmm0",&QWP(8,$inp));		# load key part 2 (very unaligned)
+	&call	("_vpaes_schedule_transform");	# input transform
+	&movdqa	("xmm6","xmm0");		# save short part
+	&pxor	("xmm4","xmm4");		# clear 4
+	&movhlps("xmm6","xmm4");		# clobber low side with zeros
+	&mov	($round,4);
+
+&set_label("loop_schedule_192");
+	&call	("_vpaes_schedule_round");
+	&palignr("xmm0","xmm6",8);
+	&call	("_vpaes_schedule_mangle");	# save key n
+	&call	("_vpaes_schedule_192_smear");
+	&call	("_vpaes_schedule_mangle");	# save key n+1
+	&call	("_vpaes_schedule_round");
+	&dec	($round);
+	&jz	(&label("schedule_mangle_last"));
+	&call	("_vpaes_schedule_mangle");	# save key n+2
+	&call	("_vpaes_schedule_192_smear");
+	&jmp	(&label("loop_schedule_192"));
+
+##
+##  .aes_schedule_256
+##
+##  256-bit specific part of key schedule.
+##
+##  The structure here is very similar to the 128-bit
+##  schedule, but with an additional "low side" in
+##  %xmm6.  The low side's rounds are the same as the
+##  high side's, except no rcon and no rotation.
+##
+&set_label("schedule_256",16);
+	&movdqu	("xmm0",&QWP(16,$inp));		# load key part 2 (unaligned)
+	&call	("_vpaes_schedule_transform");	# input transform
+	&mov	($round,7);
+
+&set_label("loop_schedule_256");
+	&call	("_vpaes_schedule_mangle");	# output low result
+	&movdqa	("xmm6","xmm0");		# save cur_lo in xmm6
+
+	# high round
+	&call	("_vpaes_schedule_round");
+	&dec	($round);
+	&jz	(&label("schedule_mangle_last"));
+	&call	("_vpaes_schedule_mangle");
+
+	# low round. swap xmm7 and xmm6
+	&pshufd	("xmm0","xmm0",0xFF);
+	&movdqa	(&QWP(20,"esp"),"xmm7");
+	&movdqa	("xmm7","xmm6");
+	&call	("_vpaes_schedule_low_round");
+	&movdqa	("xmm7",&QWP(20,"esp"));
+
+	&jmp	(&label("loop_schedule_256"));
+
+##
+##  .aes_schedule_mangle_last
+##
+##  Mangler for last round of key schedule
+##  Mangles %xmm0
+##    when encrypting, outputs out(%xmm0) ^ 63
+##    when decrypting, outputs unskew(%xmm0)
+##
+##  Always called right before return... jumps to cleanup and exits
+##
+&set_label("schedule_mangle_last",16);
+	# schedule last round key from xmm0
+	&lea	($base,&DWP($k_deskew,$const));
+	&test	($out,$out);
+	&jnz	(&label("schedule_mangle_last_dec"));
+
+	# encrypting
+	&movdqa	("xmm1",&QWP($k_sr,$const,$magic));
+	&pshufb	("xmm0","xmm1");		# output permute
+	&lea	($base,&DWP($k_opt,$const));	# prepare to output transform
+	&add	($key,32);
+
+&set_label("schedule_mangle_last_dec");
+	&add	($key,-16);
+	&pxor	("xmm0",&QWP($k_s63,$const));
+	&call	("_vpaes_schedule_transform");	# output transform
+	&movdqu	(&QWP(0,$key),"xmm0");		# save last key
+
+	# cleanup
+	&pxor	("xmm0","xmm0");
+	&pxor	("xmm1","xmm1");
+	&pxor	("xmm2","xmm2");
+	&pxor	("xmm3","xmm3");
+	&pxor	("xmm4","xmm4");
+	&pxor	("xmm5","xmm5");
+	&pxor	("xmm6","xmm6");
+	&pxor	("xmm7","xmm7");
+	&ret	();
+&function_end_B("_vpaes_schedule_core");
+
+##
+##  .aes_schedule_192_smear
+##
+##  Smear the short, low side in the 192-bit key schedule.
+##
+##  Inputs:
+##    %xmm7: high side, b  a  x  y
+##    %xmm6:  low side, d  c  0  0
+##    %xmm13: 0
+##
+##  Outputs:
+##    %xmm6: b+c+d  b+c  0  0
+##    %xmm0: b+c+d  b+c  b  a
+##
+&function_begin_B("_vpaes_schedule_192_smear");
+	&pshufd	("xmm1","xmm6",0x80);		# d c 0 0 -> c 0 0 0
+	&pshufd	("xmm0","xmm7",0xFE);		# b a _ _ -> b b b a
+	&pxor	("xmm6","xmm1");		# -> c+d c 0 0
+	&pxor	("xmm1","xmm1");
+	&pxor	("xmm6","xmm0");		# -> b+c+d b+c b a
+	&movdqa	("xmm0","xmm6");
+	&movhlps("xmm6","xmm1");		# clobber low side with zeros
+	&ret	();
+&function_end_B("_vpaes_schedule_192_smear");
+
+##
+##  .aes_schedule_round
+##
+##  Runs one main round of the key schedule on %xmm0, %xmm7
+##
+##  Specifically, runs subbytes on the high dword of %xmm0
+##  then rotates it by one byte and xors into the low dword of
+##  %xmm7.
+##
+##  Adds rcon from low byte of %xmm8, then rotates %xmm8 for
+##  next rcon.
+##
+##  Smears the dwords of %xmm7 by xoring the low into the
+##  second low, result into third, result into highest.
+##
+##  Returns results in %xmm7 = %xmm0.
+##  Clobbers %xmm1-%xmm5.
+##
+&function_begin_B("_vpaes_schedule_round");
+	# extract rcon from xmm8
+	&movdqa	("xmm2",&QWP(8,"esp"));		# xmm8
+	&pxor	("xmm1","xmm1");
+	&palignr("xmm1","xmm2",15);
+	&palignr("xmm2","xmm2",15);
+	&pxor	("xmm7","xmm1");
+
+	# rotate
+	&pshufd	("xmm0","xmm0",0xFF);
+	&palignr("xmm0","xmm0",1);
+
+	# fall through...
+	&movdqa	(&QWP(8,"esp"),"xmm2");		# xmm8
+
+	# low round: same as high round, but no rotation and no rcon.
+&set_label("_vpaes_schedule_low_round");
+	# smear xmm7
+	&movdqa	("xmm1","xmm7");
+	&pslldq	("xmm7",4);
+	&pxor	("xmm7","xmm1");
+	&movdqa	("xmm1","xmm7");
+	&pslldq	("xmm7",8);
+	&pxor	("xmm7","xmm1");
+	&pxor	("xmm7",&QWP($k_s63,$const));
+
+	# subbyte
+	&movdqa	("xmm4",&QWP($k_s0F,$const));
+	&movdqa	("xmm5",&QWP($k_inv,$const));	# 4 : 1/j
+	&movdqa	("xmm1","xmm4");
+	&pandn	("xmm1","xmm0");
+	&psrld	("xmm1",4);			# 1 = i
+	&pand	("xmm0","xmm4");		# 0 = k
+	&movdqa	("xmm2",&QWP($k_inv+16,$const));# 2 : a/k
+	&pshufb	("xmm2","xmm0");		# 2 = a/k
+	&pxor	("xmm0","xmm1");		# 0 = j
+	&movdqa	("xmm3","xmm5");		# 3 : 1/i
+	&pshufb	("xmm3","xmm1");		# 3 = 1/i
+	&pxor	("xmm3","xmm2");		# 3 = iak = 1/i + a/k
+	&movdqa	("xmm4","xmm5");		# 4 : 1/j
+	&pshufb	("xmm4","xmm0");		# 4 = 1/j
+	&pxor	("xmm4","xmm2");		# 4 = jak = 1/j + a/k
+	&movdqa	("xmm2","xmm5");		# 2 : 1/iak
+	&pshufb	("xmm2","xmm3");		# 2 = 1/iak
+	&pxor	("xmm2","xmm0");		# 2 = io
+	&movdqa	("xmm3","xmm5");		# 3 : 1/jak
+	&pshufb	("xmm3","xmm4");		# 3 = 1/jak
+	&pxor	("xmm3","xmm1");		# 3 = jo
+	&movdqa	("xmm4",&QWP($k_sb1,$const));	# 4 : sbou
+	&pshufb	("xmm4","xmm2");		# 4 = sbou
+	&movdqa	("xmm0",&QWP($k_sb1+16,$const));# 0 : sbot
+	&pshufb	("xmm0","xmm3");		# 0 = sb1t
+	&pxor	("xmm0","xmm4");		# 0 = sbox output
+
+	# add in smeared stuff
+	&pxor	("xmm0","xmm7");
+	&movdqa	("xmm7","xmm0");
+	&ret	();
+&function_end_B("_vpaes_schedule_round");
+
+##
+##  .aes_schedule_transform
+##
+##  Linear-transform %xmm0 according to tables at (%ebx)
+##
+##  Output in %xmm0
+##  Clobbers %xmm1, %xmm2
+##
+&function_begin_B("_vpaes_schedule_transform");
+	&movdqa	("xmm2",&QWP($k_s0F,$const));
+	&movdqa	("xmm1","xmm2");
+	&pandn	("xmm1","xmm0");
+	&psrld	("xmm1",4);
+	&pand	("xmm0","xmm2");
+	&movdqa	("xmm2",&QWP(0,$base));
+	&pshufb	("xmm2","xmm0");
+	&movdqa	("xmm0",&QWP(16,$base));
+	&pshufb	("xmm0","xmm1");
+	&pxor	("xmm0","xmm2");
+	&ret	();
+&function_end_B("_vpaes_schedule_transform");
+
+##
+##  .aes_schedule_mangle
+##
+##  Mangle xmm0 from (basis-transformed) standard version
+##  to our version.
+##
+##  On encrypt,
+##    xor with 0x63
+##    multiply by circulant 0,1,1,1
+##    apply shiftrows transform
+##
+##  On decrypt,
+##    xor with 0x63
+##    multiply by "inverse mixcolumns" circulant E,B,D,9
+##    deskew
+##    apply shiftrows transform
+##
+##
+##  Writes out to (%edx), and increments or decrements it
+##  Keeps track of round number mod 4 in %ecx
+##  Preserves xmm0
+##  Clobbers xmm1-xmm5
+##
+&function_begin_B("_vpaes_schedule_mangle");
+	&movdqa	("xmm4","xmm0");	# save xmm0 for later
+	&movdqa	("xmm5",&QWP($k_mc_forward,$const));
+	&test	($out,$out);
+	&jnz	(&label("schedule_mangle_dec"));
+
+	# encrypting
+	&add	($key,16);
+	&pxor	("xmm4",&QWP($k_s63,$const));
+	&pshufb	("xmm4","xmm5");
+	&movdqa	("xmm3","xmm4");
+	&pshufb	("xmm4","xmm5");
+	&pxor	("xmm3","xmm4");
+	&pshufb	("xmm4","xmm5");
+	&pxor	("xmm3","xmm4");
+
+	&jmp	(&label("schedule_mangle_both"));
+
+&set_label("schedule_mangle_dec",16);
+	# inverse mix columns
+	&movdqa	("xmm2",&QWP($k_s0F,$const));
+	&lea	($inp,&DWP($k_dksd,$const));
+	&movdqa	("xmm1","xmm2");
+	&pandn	("xmm1","xmm4");
+	&psrld	("xmm1",4);			# 1 = hi
+	&pand	("xmm4","xmm2");		# 4 = lo
+
+	&movdqa	("xmm2",&QWP(0,$inp));
+	&pshufb	("xmm2","xmm4");
+	&movdqa	("xmm3",&QWP(0x10,$inp));
+	&pshufb	("xmm3","xmm1");
+	&pxor	("xmm3","xmm2");
+	&pshufb	("xmm3","xmm5");
+
+	&movdqa	("xmm2",&QWP(0x20,$inp));
+	&pshufb	("xmm2","xmm4");
+	&pxor	("xmm2","xmm3");
+	&movdqa	("xmm3",&QWP(0x30,$inp));
+	&pshufb	("xmm3","xmm1");
+	&pxor	("xmm3","xmm2");
+	&pshufb	("xmm3","xmm5");
+
+	&movdqa	("xmm2",&QWP(0x40,$inp));
+	&pshufb	("xmm2","xmm4");
+	&pxor	("xmm2","xmm3");
+	&movdqa	("xmm3",&QWP(0x50,$inp));
+	&pshufb	("xmm3","xmm1");
+	&pxor	("xmm3","xmm2");
+	&pshufb	("xmm3","xmm5");
+
+	&movdqa	("xmm2",&QWP(0x60,$inp));
+	&pshufb	("xmm2","xmm4");
+	&pxor	("xmm2","xmm3");
+	&movdqa	("xmm3",&QWP(0x70,$inp));
+	&pshufb	("xmm3","xmm1");
+	&pxor	("xmm3","xmm2");
+
+	&add	($key,-16);
+
+&set_label("schedule_mangle_both");
+	&movdqa	("xmm1",&QWP($k_sr,$const,$magic));
+	&pshufb	("xmm3","xmm1");
+	&add	($magic,-16);
+	&and	($magic,0x30);
+	&movdqu	(&QWP(0,$key),"xmm3");
+	&ret	();
+&function_end_B("_vpaes_schedule_mangle");
+
+#
+# Interface to OpenSSL
+#
+&function_begin("${PREFIX}_set_encrypt_key");
+	&mov	($inp,&wparam(0));		# inp
+	&lea	($base,&DWP(-56,"esp"));
+	&mov	($round,&wparam(1));		# bits
+	&and	($base,-16);
+	&mov	($key,&wparam(2));		# key
+	&xchg	($base,"esp");			# alloca
+	&mov	(&DWP(48,"esp"),$base);
+
+	&mov	($base,$round);
+	&shr	($base,5);
+	&add	($base,5);
+	&mov	(&DWP(240,$key),$base);		# AES_KEY->rounds = nbits/32+5;
+	&mov	($magic,0x30);
+	&mov	($out,0);
+
+	&lea	($const,&DWP(&label("_vpaes_consts")."+0x30-".&label("pic_point")));
+	&call	("_vpaes_schedule_core");
+&set_label("pic_point");
+
+	&mov	("esp",&DWP(48,"esp"));
+	&xor	("eax","eax");
+&function_end("${PREFIX}_set_encrypt_key");
+
+&function_begin("${PREFIX}_set_decrypt_key");
+	&mov	($inp,&wparam(0));		# inp
+	&lea	($base,&DWP(-56,"esp"));
+	&mov	($round,&wparam(1));		# bits
+	&and	($base,-16);
+	&mov	($key,&wparam(2));		# key
+	&xchg	($base,"esp");			# alloca
+	&mov	(&DWP(48,"esp"),$base);
+
+	&mov	($base,$round);
+	&shr	($base,5);
+	&add	($base,5);
+	&mov	(&DWP(240,$key),$base);	# AES_KEY->rounds = nbits/32+5;
+	&shl	($base,4);
+	&lea	($key,&DWP(16,$key,$base));
+
+	&mov	($out,1);
+	&mov	($magic,$round);
+	&shr	($magic,1);
+	&and	($magic,32);
+	&xor	($magic,32);			# nbist==192?0:32;
+
+	&lea	($const,&DWP(&label("_vpaes_consts")."+0x30-".&label("pic_point")));
+	&call	("_vpaes_schedule_core");
+&set_label("pic_point");
+
+	&mov	("esp",&DWP(48,"esp"));
+	&xor	("eax","eax");
+&function_end("${PREFIX}_set_decrypt_key");
+
+&function_begin("${PREFIX}_encrypt");
+	&lea	($const,&DWP(&label("_vpaes_consts")."+0x30-".&label("pic_point")));
+	&call	("_vpaes_preheat");
+&set_label("pic_point");
+	&mov	($inp,&wparam(0));		# inp
+	&lea	($base,&DWP(-56,"esp"));
+	&mov	($out,&wparam(1));		# out
+	&and	($base,-16);
+	&mov	($key,&wparam(2));		# key
+	&xchg	($base,"esp");			# alloca
+	&mov	(&DWP(48,"esp"),$base);
+
+	&movdqu	("xmm0",&QWP(0,$inp));
+	&call	("_vpaes_encrypt_core");
+	&movdqu	(&QWP(0,$out),"xmm0");
+
+	&mov	("esp",&DWP(48,"esp"));
+&function_end("${PREFIX}_encrypt");
+
+&function_begin("${PREFIX}_decrypt");
+	&lea	($const,&DWP(&label("_vpaes_consts")."+0x30-".&label("pic_point")));
+	&call	("_vpaes_preheat");
+&set_label("pic_point");
+	&mov	($inp,&wparam(0));		# inp
+	&lea	($base,&DWP(-56,"esp"));
+	&mov	($out,&wparam(1));		# out
+	&and	($base,-16);
+	&mov	($key,&wparam(2));		# key
+	&xchg	($base,"esp");			# alloca
+	&mov	(&DWP(48,"esp"),$base);
+
+	&movdqu	("xmm0",&QWP(0,$inp));
+	&call	("_vpaes_decrypt_core");
+	&movdqu	(&QWP(0,$out),"xmm0");
+
+	&mov	("esp",&DWP(48,"esp"));
+&function_end("${PREFIX}_decrypt");
+
+&function_begin("${PREFIX}_cbc_encrypt");
+	&mov	($inp,&wparam(0));		# inp
+	&mov	($out,&wparam(1));		# out
+	&mov	($round,&wparam(2));		# len
+	&mov	($key,&wparam(3));		# key
+	&sub	($round,16);
+	&jc	(&label("cbc_abort"));
+	&lea	($base,&DWP(-56,"esp"));
+	&mov	($const,&wparam(4));		# ivp
+	&and	($base,-16);
+	&mov	($magic,&wparam(5));		# enc
+	&xchg	($base,"esp");			# alloca
+	&movdqu	("xmm1",&QWP(0,$const));	# load IV
+	&sub	($out,$inp);
+	&mov	(&DWP(48,"esp"),$base);
+
+	&mov	(&DWP(0,"esp"),$out);		# save out
+	&mov	(&DWP(4,"esp"),$key)		# save key
+	&mov	(&DWP(8,"esp"),$const);		# save ivp
+	&mov	($out,$round);			# $out works as $len
+
+	&lea	($const,&DWP(&label("_vpaes_consts")."+0x30-".&label("pic_point")));
+	&call	("_vpaes_preheat");
+&set_label("pic_point");
+	&cmp	($magic,0);
+	&je	(&label("cbc_dec_loop"));
+	&jmp	(&label("cbc_enc_loop"));
+
+&set_label("cbc_enc_loop",16);
+	&movdqu	("xmm0",&QWP(0,$inp));		# load input
+	&pxor	("xmm0","xmm1");		# inp^=iv
+	&call	("_vpaes_encrypt_core");
+	&mov	($base,&DWP(0,"esp"));		# restore out
+	&mov	($key,&DWP(4,"esp"));		# restore key
+	&movdqa	("xmm1","xmm0");
+	&movdqu	(&QWP(0,$base,$inp),"xmm0");	# write output
+	&lea	($inp,&DWP(16,$inp));
+	&sub	($out,16);
+	&jnc	(&label("cbc_enc_loop"));
+	&jmp	(&label("cbc_done"));
+
+&set_label("cbc_dec_loop",16);
+	&movdqu	("xmm0",&QWP(0,$inp));		# load input
+	&movdqa	(&QWP(16,"esp"),"xmm1");	# save IV
+	&movdqa	(&QWP(32,"esp"),"xmm0");	# save future IV
+	&call	("_vpaes_decrypt_core");
+	&mov	($base,&DWP(0,"esp"));		# restore out
+	&mov	($key,&DWP(4,"esp"));		# restore key
+	&pxor	("xmm0",&QWP(16,"esp"));	# out^=iv
+	&movdqa	("xmm1",&QWP(32,"esp"));	# load next IV
+	&movdqu	(&QWP(0,$base,$inp),"xmm0");	# write output
+	&lea	($inp,&DWP(16,$inp));
+	&sub	($out,16);
+	&jnc	(&label("cbc_dec_loop"));
+
+&set_label("cbc_done");
+	&mov	($base,&DWP(8,"esp"));		# restore ivp
+	&mov	("esp",&DWP(48,"esp"));
+	&movdqu	(&QWP(0,$base),"xmm1");		# write IV
+&set_label("cbc_abort");
+&function_end("${PREFIX}_cbc_encrypt");
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/vpaes-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/vpaes-x86_64.pl
new file mode 100644
index 000000000..33d293e62
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/asm/vpaes-x86_64.pl
@@ -0,0 +1,1241 @@
+#! /usr/bin/env perl
+# Copyright 2011-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+######################################################################
+## Constant-time SSSE3 AES core implementation.
+## version 0.1
+##
+## By Mike Hamburg (Stanford University), 2009
+## Public domain.
+##
+## For details see http://shiftleft.org/papers/vector_aes/ and
+## http://crypto.stanford.edu/vpaes/.
+
+######################################################################
+# September 2011.
+#
+# Interface to OpenSSL as "almost" drop-in replacement for
+# aes-x86_64.pl. "Almost" refers to the fact that AES_cbc_encrypt
+# doesn't handle partial vectors (doesn't have to if called from
+# EVP only). "Drop-in" implies that this module doesn't share key
+# schedule structure with the original nor does it make assumption
+# about its alignment...
+#
+# Performance summary. aes-x86_64.pl column lists large-block CBC
+# encrypt/decrypt/with-hyper-threading-off(*) results in cycles per
+# byte processed with 128-bit key, and vpaes-x86_64.pl column -
+# [also large-block CBC] encrypt/decrypt.
+#
+#		aes-x86_64.pl		vpaes-x86_64.pl
+#
+# Core 2(**)	29.6/41.1/14.3		21.9/25.2(***)
+# Nehalem	29.6/40.3/14.6		10.0/11.8
+# Atom		57.3/74.2/32.1		60.9/77.2(***)
+# Silvermont	52.7/64.0/19.5		48.8/60.8(***)
+# Goldmont	38.9/49.0/17.8		10.6/12.6
+#
+# (*)	"Hyper-threading" in the context refers rather to cache shared
+#	among multiple cores, than to specifically Intel HTT. As vast
+#	majority of contemporary cores share cache, slower code path
+#	is common place. In other words "with-hyper-threading-off"
+#	results are presented mostly for reference purposes.
+#
+# (**)	"Core 2" refers to initial 65nm design, a.k.a. Conroe.
+#
+# (***)	Less impressive improvement on Core 2 and Atom is due to slow
+#	pshufb,	yet it's respectable +36%/62% improvement on Core 2
+#	(as implied, over "hyper-threading-safe" code path).
+#
+#						<appro@openssl.org>
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+$PREFIX="vpaes";
+
+$code.=<<___;
+.text
+
+##
+##  _aes_encrypt_core
+##
+##  AES-encrypt %xmm0.
+##
+##  Inputs:
+##     %xmm0 = input
+##     %xmm9-%xmm15 as in _vpaes_preheat
+##    (%rdx) = scheduled keys
+##
+##  Output in %xmm0
+##  Clobbers  %xmm1-%xmm5, %r9, %r10, %r11, %rax
+##  Preserves %xmm6 - %xmm8 so you get some local vectors
+##
+##
+.type	_vpaes_encrypt_core,\@abi-omnipotent
+.align 16
+_vpaes_encrypt_core:
+.cfi_startproc
+	mov	%rdx,	%r9
+	mov	\$16,	%r11
+	mov	240(%rdx),%eax
+	movdqa	%xmm9,	%xmm1
+	movdqa	.Lk_ipt(%rip), %xmm2	# iptlo
+	pandn	%xmm0,	%xmm1
+	movdqu	(%r9),	%xmm5		# round0 key
+	psrld	\$4,	%xmm1
+	pand	%xmm9,	%xmm0
+	pshufb	%xmm0,	%xmm2
+	movdqa	.Lk_ipt+16(%rip), %xmm0	# ipthi
+	pshufb	%xmm1,	%xmm0
+	pxor	%xmm5,	%xmm2
+	add	\$16,	%r9
+	pxor	%xmm2,	%xmm0
+	lea	.Lk_mc_backward(%rip),%r10
+	jmp	.Lenc_entry
+
+.align 16
+.Lenc_loop:
+	# middle of middle round
+	movdqa  %xmm13,	%xmm4	# 4 : sb1u
+	movdqa  %xmm12,	%xmm0	# 0 : sb1t
+	pshufb  %xmm2,	%xmm4	# 4 = sb1u
+	pshufb  %xmm3,	%xmm0	# 0 = sb1t
+	pxor	%xmm5,	%xmm4	# 4 = sb1u + k
+	movdqa  %xmm15,	%xmm5	# 4 : sb2u
+	pxor	%xmm4,	%xmm0	# 0 = A
+	movdqa	-0x40(%r11,%r10), %xmm1		# .Lk_mc_forward[]
+	pshufb	%xmm2,	%xmm5	# 4 = sb2u
+	movdqa	(%r11,%r10), %xmm4		# .Lk_mc_backward[]
+	movdqa	%xmm14, %xmm2	# 2 : sb2t
+	pshufb	%xmm3,  %xmm2	# 2 = sb2t
+	movdqa	%xmm0,  %xmm3	# 3 = A
+	pxor	%xmm5,	%xmm2	# 2 = 2A
+	pshufb  %xmm1,  %xmm0	# 0 = B
+	add	\$16,	%r9	# next key
+	pxor	%xmm2,  %xmm0	# 0 = 2A+B
+	pshufb	%xmm4,	%xmm3	# 3 = D
+	add	\$16,	%r11	# next mc
+	pxor	%xmm0,	%xmm3	# 3 = 2A+B+D
+	pshufb  %xmm1,	%xmm0	# 0 = 2B+C
+	and	\$0x30,	%r11	# ... mod 4
+	sub	\$1,%rax	# nr--
+	pxor	%xmm3,	%xmm0	# 0 = 2A+3B+C+D
+
+.Lenc_entry:
+	# top of round
+	movdqa  %xmm9, 	%xmm1	# 1 : i
+	movdqa	%xmm11, %xmm5	# 2 : a/k
+	pandn	%xmm0, 	%xmm1	# 1 = i<<4
+	psrld	\$4,   	%xmm1   # 1 = i
+	pand	%xmm9, 	%xmm0   # 0 = k
+	pshufb  %xmm0,  %xmm5	# 2 = a/k
+	movdqa	%xmm10,	%xmm3  	# 3 : 1/i
+	pxor	%xmm1,	%xmm0	# 0 = j
+	pshufb  %xmm1, 	%xmm3  	# 3 = 1/i
+	movdqa	%xmm10,	%xmm4  	# 4 : 1/j
+	pxor	%xmm5, 	%xmm3  	# 3 = iak = 1/i + a/k
+	pshufb	%xmm0, 	%xmm4  	# 4 = 1/j
+	movdqa	%xmm10,	%xmm2  	# 2 : 1/iak
+	pxor	%xmm5, 	%xmm4  	# 4 = jak = 1/j + a/k
+	pshufb  %xmm3,	%xmm2  	# 2 = 1/iak
+	movdqa	%xmm10, %xmm3   # 3 : 1/jak
+	pxor	%xmm0, 	%xmm2  	# 2 = io
+	pshufb  %xmm4,  %xmm3   # 3 = 1/jak
+	movdqu	(%r9),	%xmm5
+	pxor	%xmm1,  %xmm3   # 3 = jo
+	jnz	.Lenc_loop
+
+	# middle of last round
+	movdqa	-0x60(%r10), %xmm4	# 3 : sbou	.Lk_sbo
+	movdqa	-0x50(%r10), %xmm0	# 0 : sbot	.Lk_sbo+16
+	pshufb  %xmm2,  %xmm4	# 4 = sbou
+	pxor	%xmm5,  %xmm4	# 4 = sb1u + k
+	pshufb  %xmm3,	%xmm0	# 0 = sb1t
+	movdqa	0x40(%r11,%r10), %xmm1		# .Lk_sr[]
+	pxor	%xmm4,	%xmm0	# 0 = A
+	pshufb	%xmm1,	%xmm0
+	ret
+.cfi_endproc
+.size	_vpaes_encrypt_core,.-_vpaes_encrypt_core
+
+##
+##  Decryption core
+##
+##  Same API as encryption core.
+##
+.type	_vpaes_decrypt_core,\@abi-omnipotent
+.align	16
+_vpaes_decrypt_core:
+.cfi_startproc
+	mov	%rdx,	%r9		# load key
+	mov	240(%rdx),%eax
+	movdqa	%xmm9,	%xmm1
+	movdqa	.Lk_dipt(%rip), %xmm2	# iptlo
+	pandn	%xmm0,	%xmm1
+	mov	%rax,	%r11
+	psrld	\$4,	%xmm1
+	movdqu	(%r9),	%xmm5		# round0 key
+	shl	\$4,	%r11
+	pand	%xmm9,	%xmm0
+	pshufb	%xmm0,	%xmm2
+	movdqa	.Lk_dipt+16(%rip), %xmm0 # ipthi
+	xor	\$0x30,	%r11
+	lea	.Lk_dsbd(%rip),%r10
+	pshufb	%xmm1,	%xmm0
+	and	\$0x30,	%r11
+	pxor	%xmm5,	%xmm2
+	movdqa	.Lk_mc_forward+48(%rip), %xmm5
+	pxor	%xmm2,	%xmm0
+	add	\$16,	%r9
+	add	%r10,	%r11
+	jmp	.Ldec_entry
+
+.align 16
+.Ldec_loop:
+##
+##  Inverse mix columns
+##
+	movdqa  -0x20(%r10),%xmm4	# 4 : sb9u
+	movdqa  -0x10(%r10),%xmm1	# 0 : sb9t
+	pshufb	%xmm2,	%xmm4		# 4 = sb9u
+	pshufb	%xmm3,	%xmm1		# 0 = sb9t
+	pxor	%xmm4,	%xmm0
+	movdqa  0x00(%r10),%xmm4	# 4 : sbdu
+	pxor	%xmm1,	%xmm0		# 0 = ch
+	movdqa  0x10(%r10),%xmm1	# 0 : sbdt
+
+	pshufb	%xmm2,	%xmm4		# 4 = sbdu
+	pshufb	%xmm5,	%xmm0		# MC ch
+	pshufb	%xmm3,	%xmm1		# 0 = sbdt
+	pxor	%xmm4,	%xmm0		# 4 = ch
+	movdqa  0x20(%r10),%xmm4	# 4 : sbbu
+	pxor	%xmm1,	%xmm0		# 0 = ch
+	movdqa  0x30(%r10),%xmm1	# 0 : sbbt
+
+	pshufb	%xmm2,	%xmm4		# 4 = sbbu
+	pshufb	%xmm5,	%xmm0		# MC ch
+	pshufb	%xmm3,	%xmm1		# 0 = sbbt
+	pxor	%xmm4,	%xmm0		# 4 = ch
+	movdqa  0x40(%r10),%xmm4	# 4 : sbeu
+	pxor	%xmm1,	%xmm0		# 0 = ch
+	movdqa  0x50(%r10),%xmm1	# 0 : sbet
+
+	pshufb	%xmm2,	%xmm4		# 4 = sbeu
+	pshufb	%xmm5,	%xmm0		# MC ch
+	pshufb	%xmm3,	%xmm1		# 0 = sbet
+	pxor	%xmm4,	%xmm0		# 4 = ch
+	add	\$16, %r9		# next round key
+	palignr	\$12,	%xmm5,	%xmm5
+	pxor	%xmm1,	%xmm0		# 0 = ch
+	sub	\$1,%rax		# nr--
+
+.Ldec_entry:
+	# top of round
+	movdqa  %xmm9, 	%xmm1	# 1 : i
+	pandn	%xmm0, 	%xmm1	# 1 = i<<4
+	movdqa	%xmm11, %xmm2	# 2 : a/k
+	psrld	\$4,    %xmm1	# 1 = i
+	pand	%xmm9, 	%xmm0	# 0 = k
+	pshufb  %xmm0,  %xmm2	# 2 = a/k
+	movdqa	%xmm10,	%xmm3	# 3 : 1/i
+	pxor	%xmm1,	%xmm0	# 0 = j
+	pshufb  %xmm1, 	%xmm3	# 3 = 1/i
+	movdqa	%xmm10,	%xmm4	# 4 : 1/j
+	pxor	%xmm2, 	%xmm3	# 3 = iak = 1/i + a/k
+	pshufb	%xmm0, 	%xmm4	# 4 = 1/j
+	pxor	%xmm2, 	%xmm4	# 4 = jak = 1/j + a/k
+	movdqa	%xmm10,	%xmm2	# 2 : 1/iak
+	pshufb  %xmm3,	%xmm2	# 2 = 1/iak
+	movdqa	%xmm10, %xmm3	# 3 : 1/jak
+	pxor	%xmm0, 	%xmm2	# 2 = io
+	pshufb  %xmm4,  %xmm3	# 3 = 1/jak
+	movdqu	(%r9),	%xmm0
+	pxor	%xmm1,  %xmm3	# 3 = jo
+	jnz	.Ldec_loop
+
+	# middle of last round
+	movdqa	0x60(%r10), %xmm4	# 3 : sbou
+	pshufb  %xmm2,  %xmm4	# 4 = sbou
+	pxor	%xmm0,  %xmm4	# 4 = sb1u + k
+	movdqa	0x70(%r10), %xmm0	# 0 : sbot
+	movdqa	-0x160(%r11), %xmm2	# .Lk_sr-.Lk_dsbd=-0x160
+	pshufb  %xmm3,	%xmm0	# 0 = sb1t
+	pxor	%xmm4,	%xmm0	# 0 = A
+	pshufb	%xmm2,	%xmm0
+	ret
+.cfi_endproc
+.size	_vpaes_decrypt_core,.-_vpaes_decrypt_core
+
+########################################################
+##                                                    ##
+##                  AES key schedule                  ##
+##                                                    ##
+########################################################
+.type	_vpaes_schedule_core,\@abi-omnipotent
+.align	16
+_vpaes_schedule_core:
+.cfi_startproc
+	# rdi = key
+	# rsi = size in bits
+	# rdx = buffer
+	# rcx = direction.  0=encrypt, 1=decrypt
+
+	call	_vpaes_preheat		# load the tables
+	movdqa	.Lk_rcon(%rip), %xmm8	# load rcon
+	movdqu	(%rdi),	%xmm0		# load key (unaligned)
+
+	# input transform
+	movdqa	%xmm0,	%xmm3
+	lea	.Lk_ipt(%rip), %r11
+	call	_vpaes_schedule_transform
+	movdqa	%xmm0,	%xmm7
+
+	lea	.Lk_sr(%rip),%r10
+	test	%rcx,	%rcx
+	jnz	.Lschedule_am_decrypting
+
+	# encrypting, output zeroth round key after transform
+	movdqu	%xmm0,	(%rdx)
+	jmp	.Lschedule_go
+
+.Lschedule_am_decrypting:
+	# decrypting, output zeroth round key after shiftrows
+	movdqa	(%r8,%r10),%xmm1
+	pshufb  %xmm1,	%xmm3
+	movdqu	%xmm3,	(%rdx)
+	xor	\$0x30, %r8
+
+.Lschedule_go:
+	cmp	\$192,	%esi
+	ja	.Lschedule_256
+	je	.Lschedule_192
+	# 128: fall though
+
+##
+##  .schedule_128
+##
+##  128-bit specific part of key schedule.
+##
+##  This schedule is really simple, because all its parts
+##  are accomplished by the subroutines.
+##
+.Lschedule_128:
+	mov	\$10, %esi
+
+.Loop_schedule_128:
+	call 	_vpaes_schedule_round
+	dec	%rsi
+	jz 	.Lschedule_mangle_last
+	call	_vpaes_schedule_mangle	# write output
+	jmp 	.Loop_schedule_128
+
+##
+##  .aes_schedule_192
+##
+##  192-bit specific part of key schedule.
+##
+##  The main body of this schedule is the same as the 128-bit
+##  schedule, but with more smearing.  The long, high side is
+##  stored in %xmm7 as before, and the short, low side is in
+##  the high bits of %xmm6.
+##
+##  This schedule is somewhat nastier, however, because each
+##  round produces 192 bits of key material, or 1.5 round keys.
+##  Therefore, on each cycle we do 2 rounds and produce 3 round
+##  keys.
+##
+.align	16
+.Lschedule_192:
+	movdqu	8(%rdi),%xmm0		# load key part 2 (very unaligned)
+	call	_vpaes_schedule_transform	# input transform
+	movdqa	%xmm0,	%xmm6		# save short part
+	pxor	%xmm4,	%xmm4		# clear 4
+	movhlps	%xmm4,	%xmm6		# clobber low side with zeros
+	mov	\$4,	%esi
+
+.Loop_schedule_192:
+	call	_vpaes_schedule_round
+	palignr	\$8,%xmm6,%xmm0
+	call	_vpaes_schedule_mangle	# save key n
+	call	_vpaes_schedule_192_smear
+	call	_vpaes_schedule_mangle	# save key n+1
+	call	_vpaes_schedule_round
+	dec	%rsi
+	jz 	.Lschedule_mangle_last
+	call	_vpaes_schedule_mangle	# save key n+2
+	call	_vpaes_schedule_192_smear
+	jmp	.Loop_schedule_192
+
+##
+##  .aes_schedule_256
+##
+##  256-bit specific part of key schedule.
+##
+##  The structure here is very similar to the 128-bit
+##  schedule, but with an additional "low side" in
+##  %xmm6.  The low side's rounds are the same as the
+##  high side's, except no rcon and no rotation.
+##
+.align	16
+.Lschedule_256:
+	movdqu	16(%rdi),%xmm0		# load key part 2 (unaligned)
+	call	_vpaes_schedule_transform	# input transform
+	mov	\$7, %esi
+
+.Loop_schedule_256:
+	call	_vpaes_schedule_mangle	# output low result
+	movdqa	%xmm0,	%xmm6		# save cur_lo in xmm6
+
+	# high round
+	call	_vpaes_schedule_round
+	dec	%rsi
+	jz 	.Lschedule_mangle_last
+	call	_vpaes_schedule_mangle
+
+	# low round. swap xmm7 and xmm6
+	pshufd	\$0xFF,	%xmm0,	%xmm0
+	movdqa	%xmm7,	%xmm5
+	movdqa	%xmm6,	%xmm7
+	call	_vpaes_schedule_low_round
+	movdqa	%xmm5,	%xmm7
+
+	jmp	.Loop_schedule_256
+
+
+##
+##  .aes_schedule_mangle_last
+##
+##  Mangler for last round of key schedule
+##  Mangles %xmm0
+##    when encrypting, outputs out(%xmm0) ^ 63
+##    when decrypting, outputs unskew(%xmm0)
+##
+##  Always called right before return... jumps to cleanup and exits
+##
+.align	16
+.Lschedule_mangle_last:
+	# schedule last round key from xmm0
+	lea	.Lk_deskew(%rip),%r11	# prepare to deskew
+	test	%rcx, 	%rcx
+	jnz	.Lschedule_mangle_last_dec
+
+	# encrypting
+	movdqa	(%r8,%r10),%xmm1
+	pshufb	%xmm1,	%xmm0		# output permute
+	lea	.Lk_opt(%rip),	%r11	# prepare to output transform
+	add	\$32,	%rdx
+
+.Lschedule_mangle_last_dec:
+	add	\$-16,	%rdx
+	pxor	.Lk_s63(%rip),	%xmm0
+	call	_vpaes_schedule_transform # output transform
+	movdqu	%xmm0,	(%rdx)		# save last key
+
+	# cleanup
+	pxor	%xmm0,  %xmm0
+	pxor	%xmm1,  %xmm1
+	pxor	%xmm2,  %xmm2
+	pxor	%xmm3,  %xmm3
+	pxor	%xmm4,  %xmm4
+	pxor	%xmm5,  %xmm5
+	pxor	%xmm6,  %xmm6
+	pxor	%xmm7,  %xmm7
+	ret
+.cfi_endproc
+.size	_vpaes_schedule_core,.-_vpaes_schedule_core
+
+##
+##  .aes_schedule_192_smear
+##
+##  Smear the short, low side in the 192-bit key schedule.
+##
+##  Inputs:
+##    %xmm7: high side, b  a  x  y
+##    %xmm6:  low side, d  c  0  0
+##    %xmm13: 0
+##
+##  Outputs:
+##    %xmm6: b+c+d  b+c  0  0
+##    %xmm0: b+c+d  b+c  b  a
+##
+.type	_vpaes_schedule_192_smear,\@abi-omnipotent
+.align	16
+_vpaes_schedule_192_smear:
+.cfi_startproc
+	pshufd	\$0x80,	%xmm6,	%xmm1	# d c 0 0 -> c 0 0 0
+	pshufd	\$0xFE,	%xmm7,	%xmm0	# b a _ _ -> b b b a
+	pxor	%xmm1,	%xmm6		# -> c+d c 0 0
+	pxor	%xmm1,	%xmm1
+	pxor	%xmm0,	%xmm6		# -> b+c+d b+c b a
+	movdqa	%xmm6,	%xmm0
+	movhlps	%xmm1,	%xmm6		# clobber low side with zeros
+	ret
+.cfi_endproc
+.size	_vpaes_schedule_192_smear,.-_vpaes_schedule_192_smear
+
+##
+##  .aes_schedule_round
+##
+##  Runs one main round of the key schedule on %xmm0, %xmm7
+##
+##  Specifically, runs subbytes on the high dword of %xmm0
+##  then rotates it by one byte and xors into the low dword of
+##  %xmm7.
+##
+##  Adds rcon from low byte of %xmm8, then rotates %xmm8 for
+##  next rcon.
+##
+##  Smears the dwords of %xmm7 by xoring the low into the
+##  second low, result into third, result into highest.
+##
+##  Returns results in %xmm7 = %xmm0.
+##  Clobbers %xmm1-%xmm4, %r11.
+##
+.type	_vpaes_schedule_round,\@abi-omnipotent
+.align	16
+_vpaes_schedule_round:
+.cfi_startproc
+	# extract rcon from xmm8
+	pxor	%xmm1,	%xmm1
+	palignr	\$15,	%xmm8,	%xmm1
+	palignr	\$15,	%xmm8,	%xmm8
+	pxor	%xmm1,	%xmm7
+
+	# rotate
+	pshufd	\$0xFF,	%xmm0,	%xmm0
+	palignr	\$1,	%xmm0,	%xmm0
+
+	# fall through...
+
+	# low round: same as high round, but no rotation and no rcon.
+_vpaes_schedule_low_round:
+	# smear xmm7
+	movdqa	%xmm7,	%xmm1
+	pslldq	\$4,	%xmm7
+	pxor	%xmm1,	%xmm7
+	movdqa	%xmm7,	%xmm1
+	pslldq	\$8,	%xmm7
+	pxor	%xmm1,	%xmm7
+	pxor	.Lk_s63(%rip), %xmm7
+
+	# subbytes
+	movdqa  %xmm9, 	%xmm1
+	pandn	%xmm0, 	%xmm1
+	psrld	\$4,    %xmm1		# 1 = i
+	pand	%xmm9, 	%xmm0		# 0 = k
+	movdqa	%xmm11, %xmm2		# 2 : a/k
+	pshufb  %xmm0,  %xmm2		# 2 = a/k
+	pxor	%xmm1,	%xmm0		# 0 = j
+	movdqa	%xmm10,	%xmm3		# 3 : 1/i
+	pshufb  %xmm1, 	%xmm3		# 3 = 1/i
+	pxor	%xmm2, 	%xmm3		# 3 = iak = 1/i + a/k
+	movdqa	%xmm10,	%xmm4		# 4 : 1/j
+	pshufb	%xmm0, 	%xmm4		# 4 = 1/j
+	pxor	%xmm2, 	%xmm4		# 4 = jak = 1/j + a/k
+	movdqa	%xmm10,	%xmm2		# 2 : 1/iak
+	pshufb  %xmm3,	%xmm2		# 2 = 1/iak
+	pxor	%xmm0, 	%xmm2		# 2 = io
+	movdqa	%xmm10, %xmm3		# 3 : 1/jak
+	pshufb  %xmm4,  %xmm3		# 3 = 1/jak
+	pxor	%xmm1,  %xmm3		# 3 = jo
+	movdqa	%xmm13, %xmm4		# 4 : sbou
+	pshufb  %xmm2,  %xmm4		# 4 = sbou
+	movdqa	%xmm12, %xmm0		# 0 : sbot
+	pshufb  %xmm3,	%xmm0		# 0 = sb1t
+	pxor	%xmm4, 	%xmm0		# 0 = sbox output
+
+	# add in smeared stuff
+	pxor	%xmm7,	%xmm0
+	movdqa	%xmm0,	%xmm7
+	ret
+.cfi_endproc
+.size	_vpaes_schedule_round,.-_vpaes_schedule_round
+
+##
+##  .aes_schedule_transform
+##
+##  Linear-transform %xmm0 according to tables at (%r11)
+##
+##  Requires that %xmm9 = 0x0F0F... as in preheat
+##  Output in %xmm0
+##  Clobbers %xmm1, %xmm2
+##
+.type	_vpaes_schedule_transform,\@abi-omnipotent
+.align	16
+_vpaes_schedule_transform:
+.cfi_startproc
+	movdqa	%xmm9,	%xmm1
+	pandn	%xmm0,	%xmm1
+	psrld	\$4,	%xmm1
+	pand	%xmm9,	%xmm0
+	movdqa	(%r11), %xmm2 	# lo
+	pshufb	%xmm0,	%xmm2
+	movdqa	16(%r11), %xmm0 # hi
+	pshufb	%xmm1,	%xmm0
+	pxor	%xmm2,	%xmm0
+	ret
+.cfi_endproc
+.size	_vpaes_schedule_transform,.-_vpaes_schedule_transform
+
+##
+##  .aes_schedule_mangle
+##
+##  Mangle xmm0 from (basis-transformed) standard version
+##  to our version.
+##
+##  On encrypt,
+##    xor with 0x63
+##    multiply by circulant 0,1,1,1
+##    apply shiftrows transform
+##
+##  On decrypt,
+##    xor with 0x63
+##    multiply by "inverse mixcolumns" circulant E,B,D,9
+##    deskew
+##    apply shiftrows transform
+##
+##
+##  Writes out to (%rdx), and increments or decrements it
+##  Keeps track of round number mod 4 in %r8
+##  Preserves xmm0
+##  Clobbers xmm1-xmm5
+##
+.type	_vpaes_schedule_mangle,\@abi-omnipotent
+.align	16
+_vpaes_schedule_mangle:
+.cfi_startproc
+	movdqa	%xmm0,	%xmm4	# save xmm0 for later
+	movdqa	.Lk_mc_forward(%rip),%xmm5
+	test	%rcx, 	%rcx
+	jnz	.Lschedule_mangle_dec
+
+	# encrypting
+	add	\$16,	%rdx
+	pxor	.Lk_s63(%rip),%xmm4
+	pshufb	%xmm5,	%xmm4
+	movdqa	%xmm4,	%xmm3
+	pshufb	%xmm5,	%xmm4
+	pxor	%xmm4,	%xmm3
+	pshufb	%xmm5,	%xmm4
+	pxor	%xmm4,	%xmm3
+
+	jmp	.Lschedule_mangle_both
+.align	16
+.Lschedule_mangle_dec:
+	# inverse mix columns
+	lea	.Lk_dksd(%rip),%r11
+	movdqa	%xmm9,	%xmm1
+	pandn	%xmm4,	%xmm1
+	psrld	\$4,	%xmm1	# 1 = hi
+	pand	%xmm9,	%xmm4	# 4 = lo
+
+	movdqa	0x00(%r11), %xmm2
+	pshufb	%xmm4,	%xmm2
+	movdqa	0x10(%r11), %xmm3
+	pshufb	%xmm1,	%xmm3
+	pxor	%xmm2,	%xmm3
+	pshufb	%xmm5,	%xmm3
+
+	movdqa	0x20(%r11), %xmm2
+	pshufb	%xmm4,	%xmm2
+	pxor	%xmm3,	%xmm2
+	movdqa	0x30(%r11), %xmm3
+	pshufb	%xmm1,	%xmm3
+	pxor	%xmm2,	%xmm3
+	pshufb	%xmm5,	%xmm3
+
+	movdqa	0x40(%r11), %xmm2
+	pshufb	%xmm4,	%xmm2
+	pxor	%xmm3,	%xmm2
+	movdqa	0x50(%r11), %xmm3
+	pshufb	%xmm1,	%xmm3
+	pxor	%xmm2,	%xmm3
+	pshufb	%xmm5,	%xmm3
+
+	movdqa	0x60(%r11), %xmm2
+	pshufb	%xmm4,	%xmm2
+	pxor	%xmm3,	%xmm2
+	movdqa	0x70(%r11), %xmm3
+	pshufb	%xmm1,	%xmm3
+	pxor	%xmm2,	%xmm3
+
+	add	\$-16,	%rdx
+
+.Lschedule_mangle_both:
+	movdqa	(%r8,%r10),%xmm1
+	pshufb	%xmm1,%xmm3
+	add	\$-16,	%r8
+	and	\$0x30,	%r8
+	movdqu	%xmm3,	(%rdx)
+	ret
+.cfi_endproc
+.size	_vpaes_schedule_mangle,.-_vpaes_schedule_mangle
+
+#
+# Interface to OpenSSL
+#
+.globl	${PREFIX}_set_encrypt_key
+.type	${PREFIX}_set_encrypt_key,\@function,3
+.align	16
+${PREFIX}_set_encrypt_key:
+.cfi_startproc
+___
+$code.=<<___ if ($win64);
+	lea	-0xb8(%rsp),%rsp
+	movaps	%xmm6,0x10(%rsp)
+	movaps	%xmm7,0x20(%rsp)
+	movaps	%xmm8,0x30(%rsp)
+	movaps	%xmm9,0x40(%rsp)
+	movaps	%xmm10,0x50(%rsp)
+	movaps	%xmm11,0x60(%rsp)
+	movaps	%xmm12,0x70(%rsp)
+	movaps	%xmm13,0x80(%rsp)
+	movaps	%xmm14,0x90(%rsp)
+	movaps	%xmm15,0xa0(%rsp)
+.Lenc_key_body:
+___
+$code.=<<___;
+	mov	%esi,%eax
+	shr	\$5,%eax
+	add	\$5,%eax
+	mov	%eax,240(%rdx)	# AES_KEY->rounds = nbits/32+5;
+
+	mov	\$0,%ecx
+	mov	\$0x30,%r8d
+	call	_vpaes_schedule_core
+___
+$code.=<<___ if ($win64);
+	movaps	0x10(%rsp),%xmm6
+	movaps	0x20(%rsp),%xmm7
+	movaps	0x30(%rsp),%xmm8
+	movaps	0x40(%rsp),%xmm9
+	movaps	0x50(%rsp),%xmm10
+	movaps	0x60(%rsp),%xmm11
+	movaps	0x70(%rsp),%xmm12
+	movaps	0x80(%rsp),%xmm13
+	movaps	0x90(%rsp),%xmm14
+	movaps	0xa0(%rsp),%xmm15
+	lea	0xb8(%rsp),%rsp
+.Lenc_key_epilogue:
+___
+$code.=<<___;
+	xor	%eax,%eax
+	ret
+.cfi_endproc
+.size	${PREFIX}_set_encrypt_key,.-${PREFIX}_set_encrypt_key
+
+.globl	${PREFIX}_set_decrypt_key
+.type	${PREFIX}_set_decrypt_key,\@function,3
+.align	16
+${PREFIX}_set_decrypt_key:
+.cfi_startproc
+___
+$code.=<<___ if ($win64);
+	lea	-0xb8(%rsp),%rsp
+	movaps	%xmm6,0x10(%rsp)
+	movaps	%xmm7,0x20(%rsp)
+	movaps	%xmm8,0x30(%rsp)
+	movaps	%xmm9,0x40(%rsp)
+	movaps	%xmm10,0x50(%rsp)
+	movaps	%xmm11,0x60(%rsp)
+	movaps	%xmm12,0x70(%rsp)
+	movaps	%xmm13,0x80(%rsp)
+	movaps	%xmm14,0x90(%rsp)
+	movaps	%xmm15,0xa0(%rsp)
+.Ldec_key_body:
+___
+$code.=<<___;
+	mov	%esi,%eax
+	shr	\$5,%eax
+	add	\$5,%eax
+	mov	%eax,240(%rdx)	# AES_KEY->rounds = nbits/32+5;
+	shl	\$4,%eax
+	lea	16(%rdx,%rax),%rdx
+
+	mov	\$1,%ecx
+	mov	%esi,%r8d
+	shr	\$1,%r8d
+	and	\$32,%r8d
+	xor	\$32,%r8d	# nbits==192?0:32
+	call	_vpaes_schedule_core
+___
+$code.=<<___ if ($win64);
+	movaps	0x10(%rsp),%xmm6
+	movaps	0x20(%rsp),%xmm7
+	movaps	0x30(%rsp),%xmm8
+	movaps	0x40(%rsp),%xmm9
+	movaps	0x50(%rsp),%xmm10
+	movaps	0x60(%rsp),%xmm11
+	movaps	0x70(%rsp),%xmm12
+	movaps	0x80(%rsp),%xmm13
+	movaps	0x90(%rsp),%xmm14
+	movaps	0xa0(%rsp),%xmm15
+	lea	0xb8(%rsp),%rsp
+.Ldec_key_epilogue:
+___
+$code.=<<___;
+	xor	%eax,%eax
+	ret
+.cfi_endproc
+.size	${PREFIX}_set_decrypt_key,.-${PREFIX}_set_decrypt_key
+
+.globl	${PREFIX}_encrypt
+.type	${PREFIX}_encrypt,\@function,3
+.align	16
+${PREFIX}_encrypt:
+.cfi_startproc
+___
+$code.=<<___ if ($win64);
+	lea	-0xb8(%rsp),%rsp
+	movaps	%xmm6,0x10(%rsp)
+	movaps	%xmm7,0x20(%rsp)
+	movaps	%xmm8,0x30(%rsp)
+	movaps	%xmm9,0x40(%rsp)
+	movaps	%xmm10,0x50(%rsp)
+	movaps	%xmm11,0x60(%rsp)
+	movaps	%xmm12,0x70(%rsp)
+	movaps	%xmm13,0x80(%rsp)
+	movaps	%xmm14,0x90(%rsp)
+	movaps	%xmm15,0xa0(%rsp)
+.Lenc_body:
+___
+$code.=<<___;
+	movdqu	(%rdi),%xmm0
+	call	_vpaes_preheat
+	call	_vpaes_encrypt_core
+	movdqu	%xmm0,(%rsi)
+___
+$code.=<<___ if ($win64);
+	movaps	0x10(%rsp),%xmm6
+	movaps	0x20(%rsp),%xmm7
+	movaps	0x30(%rsp),%xmm8
+	movaps	0x40(%rsp),%xmm9
+	movaps	0x50(%rsp),%xmm10
+	movaps	0x60(%rsp),%xmm11
+	movaps	0x70(%rsp),%xmm12
+	movaps	0x80(%rsp),%xmm13
+	movaps	0x90(%rsp),%xmm14
+	movaps	0xa0(%rsp),%xmm15
+	lea	0xb8(%rsp),%rsp
+.Lenc_epilogue:
+___
+$code.=<<___;
+	ret
+.cfi_endproc
+.size	${PREFIX}_encrypt,.-${PREFIX}_encrypt
+
+.globl	${PREFIX}_decrypt
+.type	${PREFIX}_decrypt,\@function,3
+.align	16
+${PREFIX}_decrypt:
+.cfi_startproc
+___
+$code.=<<___ if ($win64);
+	lea	-0xb8(%rsp),%rsp
+	movaps	%xmm6,0x10(%rsp)
+	movaps	%xmm7,0x20(%rsp)
+	movaps	%xmm8,0x30(%rsp)
+	movaps	%xmm9,0x40(%rsp)
+	movaps	%xmm10,0x50(%rsp)
+	movaps	%xmm11,0x60(%rsp)
+	movaps	%xmm12,0x70(%rsp)
+	movaps	%xmm13,0x80(%rsp)
+	movaps	%xmm14,0x90(%rsp)
+	movaps	%xmm15,0xa0(%rsp)
+.Ldec_body:
+___
+$code.=<<___;
+	movdqu	(%rdi),%xmm0
+	call	_vpaes_preheat
+	call	_vpaes_decrypt_core
+	movdqu	%xmm0,(%rsi)
+___
+$code.=<<___ if ($win64);
+	movaps	0x10(%rsp),%xmm6
+	movaps	0x20(%rsp),%xmm7
+	movaps	0x30(%rsp),%xmm8
+	movaps	0x40(%rsp),%xmm9
+	movaps	0x50(%rsp),%xmm10
+	movaps	0x60(%rsp),%xmm11
+	movaps	0x70(%rsp),%xmm12
+	movaps	0x80(%rsp),%xmm13
+	movaps	0x90(%rsp),%xmm14
+	movaps	0xa0(%rsp),%xmm15
+	lea	0xb8(%rsp),%rsp
+.Ldec_epilogue:
+___
+$code.=<<___;
+	ret
+.cfi_endproc
+.size	${PREFIX}_decrypt,.-${PREFIX}_decrypt
+___
+{
+my ($inp,$out,$len,$key,$ivp,$enc)=("%rdi","%rsi","%rdx","%rcx","%r8","%r9");
+# void AES_cbc_encrypt (const void char *inp, unsigned char *out,
+#                       size_t length, const AES_KEY *key,
+#                       unsigned char *ivp,const int enc);
+$code.=<<___;
+.globl	${PREFIX}_cbc_encrypt
+.type	${PREFIX}_cbc_encrypt,\@function,6
+.align	16
+${PREFIX}_cbc_encrypt:
+.cfi_startproc
+	xchg	$key,$len
+___
+($len,$key)=($key,$len);
+$code.=<<___;
+	sub	\$16,$len
+	jc	.Lcbc_abort
+___
+$code.=<<___ if ($win64);
+	lea	-0xb8(%rsp),%rsp
+	movaps	%xmm6,0x10(%rsp)
+	movaps	%xmm7,0x20(%rsp)
+	movaps	%xmm8,0x30(%rsp)
+	movaps	%xmm9,0x40(%rsp)
+	movaps	%xmm10,0x50(%rsp)
+	movaps	%xmm11,0x60(%rsp)
+	movaps	%xmm12,0x70(%rsp)
+	movaps	%xmm13,0x80(%rsp)
+	movaps	%xmm14,0x90(%rsp)
+	movaps	%xmm15,0xa0(%rsp)
+.Lcbc_body:
+___
+$code.=<<___;
+	movdqu	($ivp),%xmm6		# load IV
+	sub	$inp,$out
+	call	_vpaes_preheat
+	cmp	\$0,${enc}d
+	je	.Lcbc_dec_loop
+	jmp	.Lcbc_enc_loop
+.align	16
+.Lcbc_enc_loop:
+	movdqu	($inp),%xmm0
+	pxor	%xmm6,%xmm0
+	call	_vpaes_encrypt_core
+	movdqa	%xmm0,%xmm6
+	movdqu	%xmm0,($out,$inp)
+	lea	16($inp),$inp
+	sub	\$16,$len
+	jnc	.Lcbc_enc_loop
+	jmp	.Lcbc_done
+.align	16
+.Lcbc_dec_loop:
+	movdqu	($inp),%xmm0
+	movdqa	%xmm0,%xmm7
+	call	_vpaes_decrypt_core
+	pxor	%xmm6,%xmm0
+	movdqa	%xmm7,%xmm6
+	movdqu	%xmm0,($out,$inp)
+	lea	16($inp),$inp
+	sub	\$16,$len
+	jnc	.Lcbc_dec_loop
+.Lcbc_done:
+	movdqu	%xmm6,($ivp)		# save IV
+___
+$code.=<<___ if ($win64);
+	movaps	0x10(%rsp),%xmm6
+	movaps	0x20(%rsp),%xmm7
+	movaps	0x30(%rsp),%xmm8
+	movaps	0x40(%rsp),%xmm9
+	movaps	0x50(%rsp),%xmm10
+	movaps	0x60(%rsp),%xmm11
+	movaps	0x70(%rsp),%xmm12
+	movaps	0x80(%rsp),%xmm13
+	movaps	0x90(%rsp),%xmm14
+	movaps	0xa0(%rsp),%xmm15
+	lea	0xb8(%rsp),%rsp
+.Lcbc_epilogue:
+___
+$code.=<<___;
+.Lcbc_abort:
+	ret
+.cfi_endproc
+.size	${PREFIX}_cbc_encrypt,.-${PREFIX}_cbc_encrypt
+___
+}
+$code.=<<___;
+##
+##  _aes_preheat
+##
+##  Fills register %r10 -> .aes_consts (so you can -fPIC)
+##  and %xmm9-%xmm15 as specified below.
+##
+.type	_vpaes_preheat,\@abi-omnipotent
+.align	16
+_vpaes_preheat:
+.cfi_startproc
+	lea	.Lk_s0F(%rip), %r10
+	movdqa	-0x20(%r10), %xmm10	# .Lk_inv
+	movdqa	-0x10(%r10), %xmm11	# .Lk_inv+16
+	movdqa	0x00(%r10), %xmm9	# .Lk_s0F
+	movdqa	0x30(%r10), %xmm13	# .Lk_sb1
+	movdqa	0x40(%r10), %xmm12	# .Lk_sb1+16
+	movdqa	0x50(%r10), %xmm15	# .Lk_sb2
+	movdqa	0x60(%r10), %xmm14	# .Lk_sb2+16
+	ret
+.cfi_endproc
+.size	_vpaes_preheat,.-_vpaes_preheat
+########################################################
+##                                                    ##
+##                     Constants                      ##
+##                                                    ##
+########################################################
+.type	_vpaes_consts,\@object
+.align	64
+_vpaes_consts:
+.Lk_inv:	# inv, inva
+	.quad	0x0E05060F0D080180, 0x040703090A0B0C02
+	.quad	0x01040A060F0B0780, 0x030D0E0C02050809
+
+.Lk_s0F:	# s0F
+	.quad	0x0F0F0F0F0F0F0F0F, 0x0F0F0F0F0F0F0F0F
+
+.Lk_ipt:	# input transform (lo, hi)
+	.quad	0xC2B2E8985A2A7000, 0xCABAE09052227808
+	.quad	0x4C01307D317C4D00, 0xCD80B1FCB0FDCC81
+
+.Lk_sb1:	# sb1u, sb1t
+	.quad	0xB19BE18FCB503E00, 0xA5DF7A6E142AF544
+	.quad	0x3618D415FAE22300, 0x3BF7CCC10D2ED9EF
+.Lk_sb2:	# sb2u, sb2t
+	.quad	0xE27A93C60B712400, 0x5EB7E955BC982FCD
+	.quad	0x69EB88400AE12900, 0xC2A163C8AB82234A
+.Lk_sbo:	# sbou, sbot
+	.quad	0xD0D26D176FBDC700, 0x15AABF7AC502A878
+	.quad	0xCFE474A55FBB6A00, 0x8E1E90D1412B35FA
+
+.Lk_mc_forward:	# mc_forward
+	.quad	0x0407060500030201, 0x0C0F0E0D080B0A09
+	.quad	0x080B0A0904070605, 0x000302010C0F0E0D
+	.quad	0x0C0F0E0D080B0A09, 0x0407060500030201
+	.quad	0x000302010C0F0E0D, 0x080B0A0904070605
+
+.Lk_mc_backward:# mc_backward
+	.quad	0x0605040702010003, 0x0E0D0C0F0A09080B
+	.quad	0x020100030E0D0C0F, 0x0A09080B06050407
+	.quad	0x0E0D0C0F0A09080B, 0x0605040702010003
+	.quad	0x0A09080B06050407, 0x020100030E0D0C0F
+
+.Lk_sr:		# sr
+	.quad	0x0706050403020100, 0x0F0E0D0C0B0A0908
+	.quad	0x030E09040F0A0500, 0x0B06010C07020D08
+	.quad	0x0F060D040B020900, 0x070E050C030A0108
+	.quad	0x0B0E0104070A0D00, 0x0306090C0F020508
+
+.Lk_rcon:	# rcon
+	.quad	0x1F8391B9AF9DEEB6, 0x702A98084D7C7D81
+
+.Lk_s63:	# s63: all equal to 0x63 transformed
+	.quad	0x5B5B5B5B5B5B5B5B, 0x5B5B5B5B5B5B5B5B
+
+.Lk_opt:	# output transform
+	.quad	0xFF9F4929D6B66000, 0xF7974121DEBE6808
+	.quad	0x01EDBD5150BCEC00, 0xE10D5DB1B05C0CE0
+
+.Lk_deskew:	# deskew tables: inverts the sbox's "skew"
+	.quad	0x07E4A34047A4E300, 0x1DFEB95A5DBEF91A
+	.quad	0x5F36B5DC83EA6900, 0x2841C2ABF49D1E77
+
+##
+##  Decryption stuff
+##  Key schedule constants
+##
+.Lk_dksd:	# decryption key schedule: invskew x*D
+	.quad	0xFEB91A5DA3E44700, 0x0740E3A45A1DBEF9
+	.quad	0x41C277F4B5368300, 0x5FDC69EAAB289D1E
+.Lk_dksb:	# decryption key schedule: invskew x*B
+	.quad	0x9A4FCA1F8550D500, 0x03D653861CC94C99
+	.quad	0x115BEDA7B6FC4A00, 0xD993256F7E3482C8
+.Lk_dkse:	# decryption key schedule: invskew x*E + 0x63
+	.quad	0xD5031CCA1FC9D600, 0x53859A4C994F5086
+	.quad	0xA23196054FDC7BE8, 0xCD5EF96A20B31487
+.Lk_dks9:	# decryption key schedule: invskew x*9
+	.quad	0xB6116FC87ED9A700, 0x4AED933482255BFC
+	.quad	0x4576516227143300, 0x8BB89FACE9DAFDCE
+
+##
+##  Decryption stuff
+##  Round function constants
+##
+.Lk_dipt:	# decryption input transform
+	.quad	0x0F505B040B545F00, 0x154A411E114E451A
+	.quad	0x86E383E660056500, 0x12771772F491F194
+
+.Lk_dsb9:	# decryption sbox output *9*u, *9*t
+	.quad	0x851C03539A86D600, 0xCAD51F504F994CC9
+	.quad	0xC03B1789ECD74900, 0x725E2C9EB2FBA565
+.Lk_dsbd:	# decryption sbox output *D*u, *D*t
+	.quad	0x7D57CCDFE6B1A200, 0xF56E9B13882A4439
+	.quad	0x3CE2FAF724C6CB00, 0x2931180D15DEEFD3
+.Lk_dsbb:	# decryption sbox output *B*u, *B*t
+	.quad	0xD022649296B44200, 0x602646F6B0F2D404
+	.quad	0xC19498A6CD596700, 0xF3FF0C3E3255AA6B
+.Lk_dsbe:	# decryption sbox output *E*u, *E*t
+	.quad	0x46F2929626D4D000, 0x2242600464B4F6B0
+	.quad	0x0C55A6CDFFAAC100, 0x9467F36B98593E32
+.Lk_dsbo:	# decryption sbox final output
+	.quad	0x1387EA537EF94000, 0xC7AA6DB9D4943E2D
+	.quad	0x12D7560F93441D00, 0xCA4B8159D8C58E9C
+.asciz	"Vector Permutation AES for x86_64/SSSE3, Mike Hamburg (Stanford University)"
+.align	64
+.size	_vpaes_consts,.-_vpaes_consts
+___
+
+if ($win64) {
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	se_handler,\@abi-omnipotent
+.align	16
+se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lin_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lin_prologue
+
+	lea	16(%rax),%rsi		# %xmm save area
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$20,%ecx		# 10*sizeof(%xmm0)/sizeof(%rax)
+	.long	0xa548f3fc		# cld; rep movsq
+	lea	0xb8(%rax),%rax		# adjust stack pointer
+
+.Lin_prologue:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$`1232/8`,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	se_handler,.-se_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_${PREFIX}_set_encrypt_key
+	.rva	.LSEH_end_${PREFIX}_set_encrypt_key
+	.rva	.LSEH_info_${PREFIX}_set_encrypt_key
+
+	.rva	.LSEH_begin_${PREFIX}_set_decrypt_key
+	.rva	.LSEH_end_${PREFIX}_set_decrypt_key
+	.rva	.LSEH_info_${PREFIX}_set_decrypt_key
+
+	.rva	.LSEH_begin_${PREFIX}_encrypt
+	.rva	.LSEH_end_${PREFIX}_encrypt
+	.rva	.LSEH_info_${PREFIX}_encrypt
+
+	.rva	.LSEH_begin_${PREFIX}_decrypt
+	.rva	.LSEH_end_${PREFIX}_decrypt
+	.rva	.LSEH_info_${PREFIX}_decrypt
+
+	.rva	.LSEH_begin_${PREFIX}_cbc_encrypt
+	.rva	.LSEH_end_${PREFIX}_cbc_encrypt
+	.rva	.LSEH_info_${PREFIX}_cbc_encrypt
+
+.section	.xdata
+.align	8
+.LSEH_info_${PREFIX}_set_encrypt_key:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lenc_key_body,.Lenc_key_epilogue	# HandlerData[]
+.LSEH_info_${PREFIX}_set_decrypt_key:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Ldec_key_body,.Ldec_key_epilogue	# HandlerData[]
+.LSEH_info_${PREFIX}_encrypt:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lenc_body,.Lenc_epilogue		# HandlerData[]
+.LSEH_info_${PREFIX}_decrypt:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Ldec_body,.Ldec_epilogue		# HandlerData[]
+.LSEH_info_${PREFIX}_cbc_encrypt:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lcbc_body,.Lcbc_epilogue		# HandlerData[]
+___
+}
+
+$code =~ s/\`([^\`]*)\`/eval($1)/gem;
+
+print $code;
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aes/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/build.info
new file mode 100644
index 000000000..0f0486364
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aes/build.info
@@ -0,0 +1,64 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        aes_misc.c aes_ecb.c aes_cfb.c aes_ofb.c \
+        aes_ige.c aes_wrap.c {- $target{aes_asm_src} -}
+
+GENERATE[aes-ia64.s]=asm/aes-ia64.S
+
+GENERATE[aes-586.s]=asm/aes-586.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+DEPEND[aes-586.s]=../perlasm/x86asm.pl
+GENERATE[vpaes-x86.s]=asm/vpaes-x86.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+DEPEND[vpaes-586.s]=../perlasm/x86asm.pl
+GENERATE[aesni-x86.s]=asm/aesni-x86.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+DEPEND[aesni-586.s]=../perlasm/x86asm.pl
+
+GENERATE[aes-x86_64.s]=asm/aes-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[vpaes-x86_64.s]=asm/vpaes-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[bsaes-x86_64.s]=asm/bsaes-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[aesni-x86_64.s]=asm/aesni-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[aesni-sha1-x86_64.s]=asm/aesni-sha1-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[aesni-sha256-x86_64.s]=asm/aesni-sha256-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[aesni-mb-x86_64.s]=asm/aesni-mb-x86_64.pl $(PERLASM_SCHEME)
+
+GENERATE[aes-sparcv9.S]=asm/aes-sparcv9.pl $(PERLASM_SCHEME)
+INCLUDE[aes-sparcv9.o]=..
+GENERATE[aest4-sparcv9.S]=asm/aest4-sparcv9.pl $(PERLASM_SCHEME)
+INCLUDE[aest4-sparcv9.o]=..
+DEPEND[aest4-sparcv9.S]=../perlasm/sparcv9_modes.pl
+GENERATE[aesfx-sparcv9.S]=asm/aesfx-sparcv9.pl $(PERLASM_SCHEME)
+INCLUDE[aesfx-sparcv9.o]=..
+
+GENERATE[aes-ppc.s]=asm/aes-ppc.pl $(PERLASM_SCHEME)
+GENERATE[vpaes-ppc.s]=asm/vpaes-ppc.pl $(PERLASM_SCHEME)
+GENERATE[aesp8-ppc.s]=asm/aesp8-ppc.pl $(PERLASM_SCHEME)
+
+GENERATE[aes-parisc.s]=asm/aes-parisc.pl $(PERLASM_SCHEME)
+
+GENERATE[aes-mips.S]=asm/aes-mips.pl $(PERLASM_SCHEME)
+INCLUDE[aes-mips.o]=..
+
+GENERATE[aesv8-armx.S]=asm/aesv8-armx.pl $(PERLASM_SCHEME)
+INCLUDE[aesv8-armx.o]=..
+GENERATE[vpaes-armv8.S]=asm/vpaes-armv8.pl $(PERLASM_SCHEME)
+
+GENERATE[aes-armv4.S]=asm/aes-armv4.pl $(PERLASM_SCHEME)
+INCLUDE[aes-armv4.o]=..
+GENERATE[bsaes-armv7.S]=asm/bsaes-armv7.pl $(PERLASM_SCHEME)
+INCLUDE[bsaes-armv7.o]=..
+
+GENERATE[aes-s390x.S]=asm/aes-s390x.pl $(PERLASM_SCHEME)
+INCLUDE[aes-s390x.o]=..
+
+BEGINRAW[Makefile]
+##### AES assembler implementations
+
+# GNU make "catch all"
+{- $builddir -}/aes-%.S:	{- $sourcedir -}/asm/aes-%.pl
+	CC="$(CC)" $(PERL) $< $(PERLASM_SCHEME) $@
+{- $builddir -}/bsaes-%.S:	{- $sourcedir -}/asm/bsaes-%.pl
+	CC="$(CC)" $(PERL) $< $(PERLASM_SCHEME) $@
+
+ENDRAW[Makefile]
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/alphacpuid.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/alphacpuid.pl
new file mode 100644
index 000000000..6c7fd4c9d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/alphacpuid.pl
@@ -0,0 +1,257 @@
+#! /usr/bin/env perl
+# Copyright 2010-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+$output = pop;
+open STDOUT,">$output";
+
+print <<'___';
+.text
+
+.set	noat
+
+.globl	OPENSSL_cpuid_setup
+.ent	OPENSSL_cpuid_setup
+OPENSSL_cpuid_setup:
+	.frame	$30,0,$26
+	.prologue 0
+	ret	($26)
+.end	OPENSSL_cpuid_setup
+
+.globl	OPENSSL_wipe_cpu
+.ent	OPENSSL_wipe_cpu
+OPENSSL_wipe_cpu:
+	.frame	$30,0,$26
+	.prologue 0
+	clr	$1
+	clr	$2
+	clr	$3
+	clr	$4
+	clr	$5
+	clr	$6
+	clr	$7
+	clr	$8
+	clr	$16
+	clr	$17
+	clr	$18
+	clr	$19
+	clr	$20
+	clr	$21
+	clr	$22
+	clr	$23
+	clr	$24
+	clr	$25
+	clr	$27
+	clr	$at
+	clr	$29
+	fclr	$f0
+	fclr	$f1
+	fclr	$f10
+	fclr	$f11
+	fclr	$f12
+	fclr	$f13
+	fclr	$f14
+	fclr	$f15
+	fclr	$f16
+	fclr	$f17
+	fclr	$f18
+	fclr	$f19
+	fclr	$f20
+	fclr	$f21
+	fclr	$f22
+	fclr	$f23
+	fclr	$f24
+	fclr	$f25
+	fclr	$f26
+	fclr	$f27
+	fclr	$f28
+	fclr	$f29
+	fclr	$f30
+	mov	$sp,$0
+	ret	($26)
+.end	OPENSSL_wipe_cpu
+
+.globl	OPENSSL_atomic_add
+.ent	OPENSSL_atomic_add
+OPENSSL_atomic_add:
+	.frame	$30,0,$26
+	.prologue 0
+1:	ldl_l	$0,0($16)
+	addl	$0,$17,$1
+	stl_c	$1,0($16)
+	beq	$1,1b
+	addl	$0,$17,$0
+	ret	($26)
+.end	OPENSSL_atomic_add
+
+.globl	OPENSSL_rdtsc
+.ent	OPENSSL_rdtsc
+OPENSSL_rdtsc:
+	.frame	$30,0,$26
+	.prologue 0
+	rpcc	$0
+	ret	($26)
+.end	OPENSSL_rdtsc
+
+.globl	OPENSSL_cleanse
+.ent	OPENSSL_cleanse
+OPENSSL_cleanse:
+	.frame	$30,0,$26
+	.prologue 0
+	beq	$17,.Ldone
+	and	$16,7,$0
+	bic	$17,7,$at
+	beq	$at,.Little
+	beq	$0,.Laligned
+
+.Little:
+	subq	$0,8,$0
+	ldq_u	$1,0($16)
+	mov	$16,$2
+.Lalign:
+	mskbl	$1,$16,$1
+	lda	$16,1($16)
+	subq	$17,1,$17
+	addq	$0,1,$0
+	beq	$17,.Lout
+	bne	$0,.Lalign
+.Lout:	stq_u	$1,0($2)
+	beq	$17,.Ldone
+	bic	$17,7,$at
+	beq	$at,.Little
+
+.Laligned:
+	stq	$31,0($16)
+	subq	$17,8,$17
+	lda	$16,8($16)
+	bic	$17,7,$at
+	bne	$at,.Laligned
+	bne	$17,.Little
+.Ldone: ret	($26)
+.end	OPENSSL_cleanse
+
+.globl	CRYPTO_memcmp
+.ent	CRYPTO_memcmp
+CRYPTO_memcmp:
+	.frame	$30,0,$26
+	.prologue 0
+	xor	$0,$0,$0
+	beq	$18,.Lno_data
+
+	xor	$1,$1,$1
+	nop
+.Loop_cmp:
+	ldq_u	$2,0($16)
+	subq	$18,1,$18
+	ldq_u	$3,0($17)
+	extbl	$2,$16,$2
+	lda	$16,1($16)
+	extbl	$3,$17,$3
+	lda	$17,1($17)
+	xor	$3,$2,$2
+	or	$2,$0,$0
+	bne	$18,.Loop_cmp
+
+	subq	$31,$0,$0
+	srl	$0,63,$0
+.Lno_data:
+	ret	($26)
+.end	CRYPTO_memcmp
+___
+{
+my ($out,$cnt,$max)=("\$16","\$17","\$18");
+my ($tick,$lasttick)=("\$19","\$20");
+my ($diff,$lastdiff)=("\$21","\$22");
+my ($v0,$ra,$sp,$zero)=("\$0","\$26","\$30","\$31");
+
+print <<___;
+.globl	OPENSSL_instrument_bus
+.ent	OPENSSL_instrument_bus
+OPENSSL_instrument_bus:
+	.frame	$sp,0,$ra
+	.prologue 0
+	mov	$cnt,$v0
+
+	rpcc	$lasttick
+	mov	0,$diff
+
+	ecb	($out)
+	ldl_l	$tick,0($out)
+	addl	$diff,$tick,$tick
+	mov	$tick,$diff
+	stl_c	$tick,0($out)
+	stl	$diff,0($out)
+
+.Loop:	rpcc	$tick
+	subq	$tick,$lasttick,$diff
+	mov	$tick,$lasttick
+
+	ecb	($out)
+	ldl_l	$tick,0($out)
+	addl	$diff,$tick,$tick
+	mov	$tick,$diff
+	stl_c	$tick,0($out)
+	stl	$diff,0($out)
+
+	subl	$cnt,1,$cnt
+	lda	$out,4($out)
+	bne	$cnt,.Loop
+
+	ret	($ra)
+.end	OPENSSL_instrument_bus
+
+.globl	OPENSSL_instrument_bus2
+.ent	OPENSSL_instrument_bus2
+OPENSSL_instrument_bus2:
+	.frame	$sp,0,$ra
+	.prologue 0
+	mov	$cnt,$v0
+
+	rpcc	$lasttick
+	mov	0,$diff
+
+	ecb	($out)
+	ldl_l	$tick,0($out)
+	addl	$diff,$tick,$tick
+	mov	$tick,$diff
+	stl_c	$tick,0($out)
+	stl	$diff,0($out)
+
+	rpcc	$tick
+	subq	$tick,$lasttick,$diff
+	mov	$tick,$lasttick
+	mov	$diff,$lastdiff
+.Loop2:
+	ecb	($out)
+	ldl_l	$tick,0($out)
+	addl	$diff,$tick,$tick
+	mov	$tick,$diff
+	stl_c	$tick,0($out)
+	stl	$diff,0($out)
+
+	subl	$max,1,$max
+	beq	$max,.Ldone2
+
+	rpcc	$tick
+	subq	$tick,$lasttick,$diff
+	mov	$tick,$lasttick
+	subq	$lastdiff,$diff,$tick
+	mov	$diff,$lastdiff
+	cmovne	$tick,1,$tick
+	subl	$cnt,$tick,$cnt
+	s4addq	$tick,$out,$out
+	bne	$cnt,.Loop2
+
+.Ldone2:
+	subl	$v0,$cnt,$v0
+	ret	($ra)
+.end	OPENSSL_instrument_bus2
+___
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aria/aria.c b/trunk/3rdparty/openssl-1.1-fit/crypto/aria/aria.c
new file mode 100644
index 000000000..293bcc72b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aria/aria.c
@@ -0,0 +1,1212 @@
+/*
+ * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2017, Oracle and/or its affiliates.  All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Copyright (C) 2017 National Security Research Institute. All Rights Reserved.
+ *
+ * Information for ARIA
+ *     http://210.104.33.10/ARIA/index-e.html (English)
+ *     http://seed.kisa.or.kr/ (Korean)
+ *
+ * Public domain version is distributed above.
+ */
+
+#include <openssl/e_os2.h>
+#include "internal/aria.h"
+
+#include <assert.h>
+#include <string.h>
+
+#ifndef OPENSSL_SMALL_FOOTPRINT
+
+/* Begin macro */
+
+/* rotation */
+#define rotl32(v, r) (((uint32_t)(v) << (r)) | ((uint32_t)(v) >> (32 - r)))
+#define rotr32(v, r) (((uint32_t)(v) >> (r)) | ((uint32_t)(v) << (32 - r)))
+
+#define bswap32(v)                                          \
+    (((v) << 24) ^ ((v) >> 24) ^                            \
+    (((v) & 0x0000ff00) << 8) ^ (((v) & 0x00ff0000) >> 8))
+
+#define GET_U8_BE(X, Y) ((uint8_t)((X) >> ((3 - Y) * 8)))
+#define GET_U32_BE(X, Y) (                                  \
+    ((uint32_t)((const uint8_t *)(X))[Y * 4    ] << 24) ^   \
+    ((uint32_t)((const uint8_t *)(X))[Y * 4 + 1] << 16) ^   \
+    ((uint32_t)((const uint8_t *)(X))[Y * 4 + 2] <<  8) ^   \
+    ((uint32_t)((const uint8_t *)(X))[Y * 4 + 3]      )     )
+
+#define PUT_U32_BE(DEST, IDX, VAL)                              \
+    do {                                                        \
+        ((uint8_t *)(DEST))[IDX * 4    ] = GET_U8_BE(VAL, 0);   \
+        ((uint8_t *)(DEST))[IDX * 4 + 1] = GET_U8_BE(VAL, 1);   \
+        ((uint8_t *)(DEST))[IDX * 4 + 2] = GET_U8_BE(VAL, 2);   \
+        ((uint8_t *)(DEST))[IDX * 4 + 3] = GET_U8_BE(VAL, 3);   \
+    } while(0)
+
+#define MAKE_U32(V0, V1, V2, V3) (      \
+    ((uint32_t)((uint8_t)(V0)) << 24) | \
+    ((uint32_t)((uint8_t)(V1)) << 16) | \
+    ((uint32_t)((uint8_t)(V2)) <<  8) | \
+    ((uint32_t)((uint8_t)(V3))      )   )
+
+/* End Macro*/
+
+/* Key Constant
+ * 128bit : 0, 1,    2
+ * 192bit : 1, 2,    3(0)
+ * 256bit : 2, 3(0), 4(1)
+ */
+static const uint32_t Key_RC[5][4] = {
+    { 0x517cc1b7, 0x27220a94, 0xfe13abe8, 0xfa9a6ee0 },
+    { 0x6db14acc, 0x9e21c820, 0xff28b1d5, 0xef5de2b0 },
+    { 0xdb92371d, 0x2126e970, 0x03249775, 0x04e8c90e },
+    { 0x517cc1b7, 0x27220a94, 0xfe13abe8, 0xfa9a6ee0 },
+    { 0x6db14acc, 0x9e21c820, 0xff28b1d5, 0xef5de2b0 }
+};
+
+/* 32bit expanded s-box */
+static const uint32_t S1[256] = {
+    0x00636363, 0x007c7c7c, 0x00777777, 0x007b7b7b,
+    0x00f2f2f2, 0x006b6b6b, 0x006f6f6f, 0x00c5c5c5,
+    0x00303030, 0x00010101, 0x00676767, 0x002b2b2b,
+    0x00fefefe, 0x00d7d7d7, 0x00ababab, 0x00767676,
+    0x00cacaca, 0x00828282, 0x00c9c9c9, 0x007d7d7d,
+    0x00fafafa, 0x00595959, 0x00474747, 0x00f0f0f0,
+    0x00adadad, 0x00d4d4d4, 0x00a2a2a2, 0x00afafaf,
+    0x009c9c9c, 0x00a4a4a4, 0x00727272, 0x00c0c0c0,
+    0x00b7b7b7, 0x00fdfdfd, 0x00939393, 0x00262626,
+    0x00363636, 0x003f3f3f, 0x00f7f7f7, 0x00cccccc,
+    0x00343434, 0x00a5a5a5, 0x00e5e5e5, 0x00f1f1f1,
+    0x00717171, 0x00d8d8d8, 0x00313131, 0x00151515,
+    0x00040404, 0x00c7c7c7, 0x00232323, 0x00c3c3c3,
+    0x00181818, 0x00969696, 0x00050505, 0x009a9a9a,
+    0x00070707, 0x00121212, 0x00808080, 0x00e2e2e2,
+    0x00ebebeb, 0x00272727, 0x00b2b2b2, 0x00757575,
+    0x00090909, 0x00838383, 0x002c2c2c, 0x001a1a1a,
+    0x001b1b1b, 0x006e6e6e, 0x005a5a5a, 0x00a0a0a0,
+    0x00525252, 0x003b3b3b, 0x00d6d6d6, 0x00b3b3b3,
+    0x00292929, 0x00e3e3e3, 0x002f2f2f, 0x00848484,
+    0x00535353, 0x00d1d1d1, 0x00000000, 0x00ededed,
+    0x00202020, 0x00fcfcfc, 0x00b1b1b1, 0x005b5b5b,
+    0x006a6a6a, 0x00cbcbcb, 0x00bebebe, 0x00393939,
+    0x004a4a4a, 0x004c4c4c, 0x00585858, 0x00cfcfcf,
+    0x00d0d0d0, 0x00efefef, 0x00aaaaaa, 0x00fbfbfb,
+    0x00434343, 0x004d4d4d, 0x00333333, 0x00858585,
+    0x00454545, 0x00f9f9f9, 0x00020202, 0x007f7f7f,
+    0x00505050, 0x003c3c3c, 0x009f9f9f, 0x00a8a8a8,
+    0x00515151, 0x00a3a3a3, 0x00404040, 0x008f8f8f,
+    0x00929292, 0x009d9d9d, 0x00383838, 0x00f5f5f5,
+    0x00bcbcbc, 0x00b6b6b6, 0x00dadada, 0x00212121,
+    0x00101010, 0x00ffffff, 0x00f3f3f3, 0x00d2d2d2,
+    0x00cdcdcd, 0x000c0c0c, 0x00131313, 0x00ececec,
+    0x005f5f5f, 0x00979797, 0x00444444, 0x00171717,
+    0x00c4c4c4, 0x00a7a7a7, 0x007e7e7e, 0x003d3d3d,
+    0x00646464, 0x005d5d5d, 0x00191919, 0x00737373,
+    0x00606060, 0x00818181, 0x004f4f4f, 0x00dcdcdc,
+    0x00222222, 0x002a2a2a, 0x00909090, 0x00888888,
+    0x00464646, 0x00eeeeee, 0x00b8b8b8, 0x00141414,
+    0x00dedede, 0x005e5e5e, 0x000b0b0b, 0x00dbdbdb,
+    0x00e0e0e0, 0x00323232, 0x003a3a3a, 0x000a0a0a,
+    0x00494949, 0x00060606, 0x00242424, 0x005c5c5c,
+    0x00c2c2c2, 0x00d3d3d3, 0x00acacac, 0x00626262,
+    0x00919191, 0x00959595, 0x00e4e4e4, 0x00797979,
+    0x00e7e7e7, 0x00c8c8c8, 0x00373737, 0x006d6d6d,
+    0x008d8d8d, 0x00d5d5d5, 0x004e4e4e, 0x00a9a9a9,
+    0x006c6c6c, 0x00565656, 0x00f4f4f4, 0x00eaeaea,
+    0x00656565, 0x007a7a7a, 0x00aeaeae, 0x00080808,
+    0x00bababa, 0x00787878, 0x00252525, 0x002e2e2e,
+    0x001c1c1c, 0x00a6a6a6, 0x00b4b4b4, 0x00c6c6c6,
+    0x00e8e8e8, 0x00dddddd, 0x00747474, 0x001f1f1f,
+    0x004b4b4b, 0x00bdbdbd, 0x008b8b8b, 0x008a8a8a,
+    0x00707070, 0x003e3e3e, 0x00b5b5b5, 0x00666666,
+    0x00484848, 0x00030303, 0x00f6f6f6, 0x000e0e0e,
+    0x00616161, 0x00353535, 0x00575757, 0x00b9b9b9,
+    0x00868686, 0x00c1c1c1, 0x001d1d1d, 0x009e9e9e,
+    0x00e1e1e1, 0x00f8f8f8, 0x00989898, 0x00111111,
+    0x00696969, 0x00d9d9d9, 0x008e8e8e, 0x00949494,
+    0x009b9b9b, 0x001e1e1e, 0x00878787, 0x00e9e9e9,
+    0x00cecece, 0x00555555, 0x00282828, 0x00dfdfdf,
+    0x008c8c8c, 0x00a1a1a1, 0x00898989, 0x000d0d0d,
+    0x00bfbfbf, 0x00e6e6e6, 0x00424242, 0x00686868,
+    0x00414141, 0x00999999, 0x002d2d2d, 0x000f0f0f,
+    0x00b0b0b0, 0x00545454, 0x00bbbbbb, 0x00161616
+};
+
+static const uint32_t S2[256] = {
+    0xe200e2e2, 0x4e004e4e, 0x54005454, 0xfc00fcfc,
+    0x94009494, 0xc200c2c2, 0x4a004a4a, 0xcc00cccc,
+    0x62006262, 0x0d000d0d, 0x6a006a6a, 0x46004646,
+    0x3c003c3c, 0x4d004d4d, 0x8b008b8b, 0xd100d1d1,
+    0x5e005e5e, 0xfa00fafa, 0x64006464, 0xcb00cbcb,
+    0xb400b4b4, 0x97009797, 0xbe00bebe, 0x2b002b2b,
+    0xbc00bcbc, 0x77007777, 0x2e002e2e, 0x03000303,
+    0xd300d3d3, 0x19001919, 0x59005959, 0xc100c1c1,
+    0x1d001d1d, 0x06000606, 0x41004141, 0x6b006b6b,
+    0x55005555, 0xf000f0f0, 0x99009999, 0x69006969,
+    0xea00eaea, 0x9c009c9c, 0x18001818, 0xae00aeae,
+    0x63006363, 0xdf00dfdf, 0xe700e7e7, 0xbb00bbbb,
+    0x00000000, 0x73007373, 0x66006666, 0xfb00fbfb,
+    0x96009696, 0x4c004c4c, 0x85008585, 0xe400e4e4,
+    0x3a003a3a, 0x09000909, 0x45004545, 0xaa00aaaa,
+    0x0f000f0f, 0xee00eeee, 0x10001010, 0xeb00ebeb,
+    0x2d002d2d, 0x7f007f7f, 0xf400f4f4, 0x29002929,
+    0xac00acac, 0xcf00cfcf, 0xad00adad, 0x91009191,
+    0x8d008d8d, 0x78007878, 0xc800c8c8, 0x95009595,
+    0xf900f9f9, 0x2f002f2f, 0xce00cece, 0xcd00cdcd,
+    0x08000808, 0x7a007a7a, 0x88008888, 0x38003838,
+    0x5c005c5c, 0x83008383, 0x2a002a2a, 0x28002828,
+    0x47004747, 0xdb00dbdb, 0xb800b8b8, 0xc700c7c7,
+    0x93009393, 0xa400a4a4, 0x12001212, 0x53005353,
+    0xff00ffff, 0x87008787, 0x0e000e0e, 0x31003131,
+    0x36003636, 0x21002121, 0x58005858, 0x48004848,
+    0x01000101, 0x8e008e8e, 0x37003737, 0x74007474,
+    0x32003232, 0xca00caca, 0xe900e9e9, 0xb100b1b1,
+    0xb700b7b7, 0xab00abab, 0x0c000c0c, 0xd700d7d7,
+    0xc400c4c4, 0x56005656, 0x42004242, 0x26002626,
+    0x07000707, 0x98009898, 0x60006060, 0xd900d9d9,
+    0xb600b6b6, 0xb900b9b9, 0x11001111, 0x40004040,
+    0xec00ecec, 0x20002020, 0x8c008c8c, 0xbd00bdbd,
+    0xa000a0a0, 0xc900c9c9, 0x84008484, 0x04000404,
+    0x49004949, 0x23002323, 0xf100f1f1, 0x4f004f4f,
+    0x50005050, 0x1f001f1f, 0x13001313, 0xdc00dcdc,
+    0xd800d8d8, 0xc000c0c0, 0x9e009e9e, 0x57005757,
+    0xe300e3e3, 0xc300c3c3, 0x7b007b7b, 0x65006565,
+    0x3b003b3b, 0x02000202, 0x8f008f8f, 0x3e003e3e,
+    0xe800e8e8, 0x25002525, 0x92009292, 0xe500e5e5,
+    0x15001515, 0xdd00dddd, 0xfd00fdfd, 0x17001717,
+    0xa900a9a9, 0xbf00bfbf, 0xd400d4d4, 0x9a009a9a,
+    0x7e007e7e, 0xc500c5c5, 0x39003939, 0x67006767,
+    0xfe00fefe, 0x76007676, 0x9d009d9d, 0x43004343,
+    0xa700a7a7, 0xe100e1e1, 0xd000d0d0, 0xf500f5f5,
+    0x68006868, 0xf200f2f2, 0x1b001b1b, 0x34003434,
+    0x70007070, 0x05000505, 0xa300a3a3, 0x8a008a8a,
+    0xd500d5d5, 0x79007979, 0x86008686, 0xa800a8a8,
+    0x30003030, 0xc600c6c6, 0x51005151, 0x4b004b4b,
+    0x1e001e1e, 0xa600a6a6, 0x27002727, 0xf600f6f6,
+    0x35003535, 0xd200d2d2, 0x6e006e6e, 0x24002424,
+    0x16001616, 0x82008282, 0x5f005f5f, 0xda00dada,
+    0xe600e6e6, 0x75007575, 0xa200a2a2, 0xef00efef,
+    0x2c002c2c, 0xb200b2b2, 0x1c001c1c, 0x9f009f9f,
+    0x5d005d5d, 0x6f006f6f, 0x80008080, 0x0a000a0a,
+    0x72007272, 0x44004444, 0x9b009b9b, 0x6c006c6c,
+    0x90009090, 0x0b000b0b, 0x5b005b5b, 0x33003333,
+    0x7d007d7d, 0x5a005a5a, 0x52005252, 0xf300f3f3,
+    0x61006161, 0xa100a1a1, 0xf700f7f7, 0xb000b0b0,
+    0xd600d6d6, 0x3f003f3f, 0x7c007c7c, 0x6d006d6d,
+    0xed00eded, 0x14001414, 0xe000e0e0, 0xa500a5a5,
+    0x3d003d3d, 0x22002222, 0xb300b3b3, 0xf800f8f8,
+    0x89008989, 0xde00dede, 0x71007171, 0x1a001a1a,
+    0xaf00afaf, 0xba00baba, 0xb500b5b5, 0x81008181
+};
+
+static const uint32_t X1[256] = {
+    0x52520052, 0x09090009, 0x6a6a006a, 0xd5d500d5,
+    0x30300030, 0x36360036, 0xa5a500a5, 0x38380038,
+    0xbfbf00bf, 0x40400040, 0xa3a300a3, 0x9e9e009e,
+    0x81810081, 0xf3f300f3, 0xd7d700d7, 0xfbfb00fb,
+    0x7c7c007c, 0xe3e300e3, 0x39390039, 0x82820082,
+    0x9b9b009b, 0x2f2f002f, 0xffff00ff, 0x87870087,
+    0x34340034, 0x8e8e008e, 0x43430043, 0x44440044,
+    0xc4c400c4, 0xdede00de, 0xe9e900e9, 0xcbcb00cb,
+    0x54540054, 0x7b7b007b, 0x94940094, 0x32320032,
+    0xa6a600a6, 0xc2c200c2, 0x23230023, 0x3d3d003d,
+    0xeeee00ee, 0x4c4c004c, 0x95950095, 0x0b0b000b,
+    0x42420042, 0xfafa00fa, 0xc3c300c3, 0x4e4e004e,
+    0x08080008, 0x2e2e002e, 0xa1a100a1, 0x66660066,
+    0x28280028, 0xd9d900d9, 0x24240024, 0xb2b200b2,
+    0x76760076, 0x5b5b005b, 0xa2a200a2, 0x49490049,
+    0x6d6d006d, 0x8b8b008b, 0xd1d100d1, 0x25250025,
+    0x72720072, 0xf8f800f8, 0xf6f600f6, 0x64640064,
+    0x86860086, 0x68680068, 0x98980098, 0x16160016,
+    0xd4d400d4, 0xa4a400a4, 0x5c5c005c, 0xcccc00cc,
+    0x5d5d005d, 0x65650065, 0xb6b600b6, 0x92920092,
+    0x6c6c006c, 0x70700070, 0x48480048, 0x50500050,
+    0xfdfd00fd, 0xeded00ed, 0xb9b900b9, 0xdada00da,
+    0x5e5e005e, 0x15150015, 0x46460046, 0x57570057,
+    0xa7a700a7, 0x8d8d008d, 0x9d9d009d, 0x84840084,
+    0x90900090, 0xd8d800d8, 0xabab00ab, 0x00000000,
+    0x8c8c008c, 0xbcbc00bc, 0xd3d300d3, 0x0a0a000a,
+    0xf7f700f7, 0xe4e400e4, 0x58580058, 0x05050005,
+    0xb8b800b8, 0xb3b300b3, 0x45450045, 0x06060006,
+    0xd0d000d0, 0x2c2c002c, 0x1e1e001e, 0x8f8f008f,
+    0xcaca00ca, 0x3f3f003f, 0x0f0f000f, 0x02020002,
+    0xc1c100c1, 0xafaf00af, 0xbdbd00bd, 0x03030003,
+    0x01010001, 0x13130013, 0x8a8a008a, 0x6b6b006b,
+    0x3a3a003a, 0x91910091, 0x11110011, 0x41410041,
+    0x4f4f004f, 0x67670067, 0xdcdc00dc, 0xeaea00ea,
+    0x97970097, 0xf2f200f2, 0xcfcf00cf, 0xcece00ce,
+    0xf0f000f0, 0xb4b400b4, 0xe6e600e6, 0x73730073,
+    0x96960096, 0xacac00ac, 0x74740074, 0x22220022,
+    0xe7e700e7, 0xadad00ad, 0x35350035, 0x85850085,
+    0xe2e200e2, 0xf9f900f9, 0x37370037, 0xe8e800e8,
+    0x1c1c001c, 0x75750075, 0xdfdf00df, 0x6e6e006e,
+    0x47470047, 0xf1f100f1, 0x1a1a001a, 0x71710071,
+    0x1d1d001d, 0x29290029, 0xc5c500c5, 0x89890089,
+    0x6f6f006f, 0xb7b700b7, 0x62620062, 0x0e0e000e,
+    0xaaaa00aa, 0x18180018, 0xbebe00be, 0x1b1b001b,
+    0xfcfc00fc, 0x56560056, 0x3e3e003e, 0x4b4b004b,
+    0xc6c600c6, 0xd2d200d2, 0x79790079, 0x20200020,
+    0x9a9a009a, 0xdbdb00db, 0xc0c000c0, 0xfefe00fe,
+    0x78780078, 0xcdcd00cd, 0x5a5a005a, 0xf4f400f4,
+    0x1f1f001f, 0xdddd00dd, 0xa8a800a8, 0x33330033,
+    0x88880088, 0x07070007, 0xc7c700c7, 0x31310031,
+    0xb1b100b1, 0x12120012, 0x10100010, 0x59590059,
+    0x27270027, 0x80800080, 0xecec00ec, 0x5f5f005f,
+    0x60600060, 0x51510051, 0x7f7f007f, 0xa9a900a9,
+    0x19190019, 0xb5b500b5, 0x4a4a004a, 0x0d0d000d,
+    0x2d2d002d, 0xe5e500e5, 0x7a7a007a, 0x9f9f009f,
+    0x93930093, 0xc9c900c9, 0x9c9c009c, 0xefef00ef,
+    0xa0a000a0, 0xe0e000e0, 0x3b3b003b, 0x4d4d004d,
+    0xaeae00ae, 0x2a2a002a, 0xf5f500f5, 0xb0b000b0,
+    0xc8c800c8, 0xebeb00eb, 0xbbbb00bb, 0x3c3c003c,
+    0x83830083, 0x53530053, 0x99990099, 0x61610061,
+    0x17170017, 0x2b2b002b, 0x04040004, 0x7e7e007e,
+    0xbaba00ba, 0x77770077, 0xd6d600d6, 0x26260026,
+    0xe1e100e1, 0x69690069, 0x14140014, 0x63630063,
+    0x55550055, 0x21210021, 0x0c0c000c, 0x7d7d007d
+};
+
+static const uint32_t X2[256] = {
+    0x30303000, 0x68686800, 0x99999900, 0x1b1b1b00,
+    0x87878700, 0xb9b9b900, 0x21212100, 0x78787800,
+    0x50505000, 0x39393900, 0xdbdbdb00, 0xe1e1e100,
+    0x72727200, 0x09090900, 0x62626200, 0x3c3c3c00,
+    0x3e3e3e00, 0x7e7e7e00, 0x5e5e5e00, 0x8e8e8e00,
+    0xf1f1f100, 0xa0a0a000, 0xcccccc00, 0xa3a3a300,
+    0x2a2a2a00, 0x1d1d1d00, 0xfbfbfb00, 0xb6b6b600,
+    0xd6d6d600, 0x20202000, 0xc4c4c400, 0x8d8d8d00,
+    0x81818100, 0x65656500, 0xf5f5f500, 0x89898900,
+    0xcbcbcb00, 0x9d9d9d00, 0x77777700, 0xc6c6c600,
+    0x57575700, 0x43434300, 0x56565600, 0x17171700,
+    0xd4d4d400, 0x40404000, 0x1a1a1a00, 0x4d4d4d00,
+    0xc0c0c000, 0x63636300, 0x6c6c6c00, 0xe3e3e300,
+    0xb7b7b700, 0xc8c8c800, 0x64646400, 0x6a6a6a00,
+    0x53535300, 0xaaaaaa00, 0x38383800, 0x98989800,
+    0x0c0c0c00, 0xf4f4f400, 0x9b9b9b00, 0xededed00,
+    0x7f7f7f00, 0x22222200, 0x76767600, 0xafafaf00,
+    0xdddddd00, 0x3a3a3a00, 0x0b0b0b00, 0x58585800,
+    0x67676700, 0x88888800, 0x06060600, 0xc3c3c300,
+    0x35353500, 0x0d0d0d00, 0x01010100, 0x8b8b8b00,
+    0x8c8c8c00, 0xc2c2c200, 0xe6e6e600, 0x5f5f5f00,
+    0x02020200, 0x24242400, 0x75757500, 0x93939300,
+    0x66666600, 0x1e1e1e00, 0xe5e5e500, 0xe2e2e200,
+    0x54545400, 0xd8d8d800, 0x10101000, 0xcecece00,
+    0x7a7a7a00, 0xe8e8e800, 0x08080800, 0x2c2c2c00,
+    0x12121200, 0x97979700, 0x32323200, 0xababab00,
+    0xb4b4b400, 0x27272700, 0x0a0a0a00, 0x23232300,
+    0xdfdfdf00, 0xefefef00, 0xcacaca00, 0xd9d9d900,
+    0xb8b8b800, 0xfafafa00, 0xdcdcdc00, 0x31313100,
+    0x6b6b6b00, 0xd1d1d100, 0xadadad00, 0x19191900,
+    0x49494900, 0xbdbdbd00, 0x51515100, 0x96969600,
+    0xeeeeee00, 0xe4e4e400, 0xa8a8a800, 0x41414100,
+    0xdadada00, 0xffffff00, 0xcdcdcd00, 0x55555500,
+    0x86868600, 0x36363600, 0xbebebe00, 0x61616100,
+    0x52525200, 0xf8f8f800, 0xbbbbbb00, 0x0e0e0e00,
+    0x82828200, 0x48484800, 0x69696900, 0x9a9a9a00,
+    0xe0e0e000, 0x47474700, 0x9e9e9e00, 0x5c5c5c00,
+    0x04040400, 0x4b4b4b00, 0x34343400, 0x15151500,
+    0x79797900, 0x26262600, 0xa7a7a700, 0xdedede00,
+    0x29292900, 0xaeaeae00, 0x92929200, 0xd7d7d700,
+    0x84848400, 0xe9e9e900, 0xd2d2d200, 0xbababa00,
+    0x5d5d5d00, 0xf3f3f300, 0xc5c5c500, 0xb0b0b000,
+    0xbfbfbf00, 0xa4a4a400, 0x3b3b3b00, 0x71717100,
+    0x44444400, 0x46464600, 0x2b2b2b00, 0xfcfcfc00,
+    0xebebeb00, 0x6f6f6f00, 0xd5d5d500, 0xf6f6f600,
+    0x14141400, 0xfefefe00, 0x7c7c7c00, 0x70707000,
+    0x5a5a5a00, 0x7d7d7d00, 0xfdfdfd00, 0x2f2f2f00,
+    0x18181800, 0x83838300, 0x16161600, 0xa5a5a500,
+    0x91919100, 0x1f1f1f00, 0x05050500, 0x95959500,
+    0x74747400, 0xa9a9a900, 0xc1c1c100, 0x5b5b5b00,
+    0x4a4a4a00, 0x85858500, 0x6d6d6d00, 0x13131300,
+    0x07070700, 0x4f4f4f00, 0x4e4e4e00, 0x45454500,
+    0xb2b2b200, 0x0f0f0f00, 0xc9c9c900, 0x1c1c1c00,
+    0xa6a6a600, 0xbcbcbc00, 0xececec00, 0x73737300,
+    0x90909000, 0x7b7b7b00, 0xcfcfcf00, 0x59595900,
+    0x8f8f8f00, 0xa1a1a100, 0xf9f9f900, 0x2d2d2d00,
+    0xf2f2f200, 0xb1b1b100, 0x00000000, 0x94949400,
+    0x37373700, 0x9f9f9f00, 0xd0d0d000, 0x2e2e2e00,
+    0x9c9c9c00, 0x6e6e6e00, 0x28282800, 0x3f3f3f00,
+    0x80808000, 0xf0f0f000, 0x3d3d3d00, 0xd3d3d300,
+    0x25252500, 0x8a8a8a00, 0xb5b5b500, 0xe7e7e700,
+    0x42424200, 0xb3b3b300, 0xc7c7c700, 0xeaeaea00,
+    0xf7f7f700, 0x4c4c4c00, 0x11111100, 0x33333300,
+    0x03030300, 0xa2a2a200, 0xacacac00, 0x60606000
+};
+
+/* Key XOR Layer */
+#define ARIA_ADD_ROUND_KEY(RK, T0, T1, T2, T3)  \
+    do {                                        \
+        (T0) ^= (RK)->u[0];                     \
+        (T1) ^= (RK)->u[1];                     \
+        (T2) ^= (RK)->u[2];                     \
+        (T3) ^= (RK)->u[3];                     \
+    } while(0)
+
+/* S-Box Layer 1 + M */
+#define ARIA_SBOX_LAYER1_WITH_PRE_DIFF(T0, T1, T2, T3)  \
+    do {                                                \
+        (T0) =                                          \
+            S1[GET_U8_BE(T0, 0)] ^                      \
+            S2[GET_U8_BE(T0, 1)] ^                      \
+            X1[GET_U8_BE(T0, 2)] ^                      \
+            X2[GET_U8_BE(T0, 3)];                       \
+        (T1) =                                          \
+            S1[GET_U8_BE(T1, 0)] ^                      \
+            S2[GET_U8_BE(T1, 1)] ^                      \
+            X1[GET_U8_BE(T1, 2)] ^                      \
+            X2[GET_U8_BE(T1, 3)];                       \
+        (T2) =                                          \
+            S1[GET_U8_BE(T2, 0)] ^                      \
+            S2[GET_U8_BE(T2, 1)] ^                      \
+            X1[GET_U8_BE(T2, 2)] ^                      \
+            X2[GET_U8_BE(T2, 3)];                       \
+        (T3) =                                          \
+            S1[GET_U8_BE(T3, 0)] ^                      \
+            S2[GET_U8_BE(T3, 1)] ^                      \
+            X1[GET_U8_BE(T3, 2)] ^                      \
+            X2[GET_U8_BE(T3, 3)];                       \
+    } while(0)
+
+/* S-Box Layer 2 + M */
+#define ARIA_SBOX_LAYER2_WITH_PRE_DIFF(T0, T1, T2, T3)  \
+    do {                                                \
+        (T0) =                                          \
+            X1[GET_U8_BE(T0, 0)] ^                      \
+            X2[GET_U8_BE(T0, 1)] ^                      \
+            S1[GET_U8_BE(T0, 2)] ^                      \
+            S2[GET_U8_BE(T0, 3)];                       \
+        (T1) =                                          \
+            X1[GET_U8_BE(T1, 0)] ^                      \
+            X2[GET_U8_BE(T1, 1)] ^                      \
+            S1[GET_U8_BE(T1, 2)] ^                      \
+            S2[GET_U8_BE(T1, 3)];                       \
+        (T2) =                                          \
+            X1[GET_U8_BE(T2, 0)] ^                      \
+            X2[GET_U8_BE(T2, 1)] ^                      \
+            S1[GET_U8_BE(T2, 2)] ^                      \
+            S2[GET_U8_BE(T2, 3)];                       \
+        (T3) =                                          \
+            X1[GET_U8_BE(T3, 0)] ^                      \
+            X2[GET_U8_BE(T3, 1)] ^                      \
+            S1[GET_U8_BE(T3, 2)] ^                      \
+            S2[GET_U8_BE(T3, 3)];                       \
+    } while(0)
+
+/* Word-level diffusion */
+#define ARIA_DIFF_WORD(T0,T1,T2,T3) \
+    do {                            \
+        (T1) ^= (T2);               \
+        (T2) ^= (T3);               \
+        (T0) ^= (T1);               \
+                                    \
+        (T3) ^= (T1);               \
+        (T2) ^= (T0);               \
+        (T1) ^= (T2);               \
+    } while(0)
+
+/* Byte-level diffusion */
+#define ARIA_DIFF_BYTE(T0, T1, T2, T3)                                  \
+    do {                                                                \
+        (T1) = (((T1) << 8) & 0xff00ff00) ^ (((T1) >> 8) & 0x00ff00ff); \
+        (T2) = rotr32(T2, 16);                                          \
+        (T3) = bswap32(T3);                                             \
+    } while(0)
+
+/* Odd round Substitution & Diffusion */
+#define ARIA_SUBST_DIFF_ODD(T0, T1, T2, T3)             \
+    do {                                                \
+        ARIA_SBOX_LAYER1_WITH_PRE_DIFF(T0, T1, T2, T3); \
+        ARIA_DIFF_WORD(T0, T1, T2, T3);                 \
+        ARIA_DIFF_BYTE(T0, T1, T2, T3);                 \
+        ARIA_DIFF_WORD(T0, T1, T2, T3);                 \
+    } while(0)
+
+/* Even round Substitution & Diffusion */
+#define ARIA_SUBST_DIFF_EVEN(T0, T1, T2, T3)            \
+    do {                                                \
+        ARIA_SBOX_LAYER2_WITH_PRE_DIFF(T0, T1, T2, T3); \
+        ARIA_DIFF_WORD(T0, T1, T2, T3);                 \
+        ARIA_DIFF_BYTE(T2, T3, T0, T1);                 \
+        ARIA_DIFF_WORD(T0, T1, T2, T3);                 \
+    } while(0)
+
+/* Q, R Macro expanded ARIA GSRK */
+#define _ARIA_GSRK(RK, X, Y, Q, R)                  \
+    do {                                            \
+        (RK)->u[0] =                                \
+            ((X)[0]) ^                              \
+            (((Y)[((Q)    ) % 4]) >> (R)) ^         \
+            (((Y)[((Q) + 3) % 4]) << (32 - (R)));   \
+        (RK)->u[1] =                                \
+            ((X)[1]) ^                              \
+            (((Y)[((Q) + 1) % 4]) >> (R)) ^         \
+            (((Y)[((Q)    ) % 4]) << (32 - (R)));   \
+        (RK)->u[2] =                                \
+            ((X)[2]) ^                              \
+            (((Y)[((Q) + 2) % 4]) >> (R)) ^         \
+            (((Y)[((Q) + 1) % 4]) << (32 - (R)));   \
+        (RK)->u[3] =                                \
+            ((X)[3]) ^                              \
+            (((Y)[((Q) + 3) % 4]) >> (R)) ^         \
+            (((Y)[((Q) + 2) % 4]) << (32 - (R)));   \
+    } while(0)
+
+#define ARIA_GSRK(RK, X, Y, N) _ARIA_GSRK(RK, X, Y, 4 - ((N) / 32), (N) % 32)
+
+#define ARIA_DEC_DIFF_BYTE(X, Y, TMP, TMP2)         \
+    do {                                            \
+        (TMP) = (X);                                \
+        (TMP2) = rotr32((TMP), 8);                  \
+        (Y) = (TMP2) ^ rotr32((TMP) ^ (TMP2), 16);  \
+    } while(0)
+
+void aria_encrypt(const unsigned char *in, unsigned char *out,
+                  const ARIA_KEY *key)
+{
+    register uint32_t reg0, reg1, reg2, reg3;
+    int Nr;
+    const ARIA_u128 *rk;
+
+    if (in == NULL || out == NULL || key == NULL) {
+        return;
+    }
+
+    rk = key->rd_key;
+    Nr = key->rounds;
+
+    if (Nr != 12 && Nr != 14 && Nr != 16) {
+        return;
+    }
+
+    reg0 = GET_U32_BE(in, 0);
+    reg1 = GET_U32_BE(in, 1);
+    reg2 = GET_U32_BE(in, 2);
+    reg3 = GET_U32_BE(in, 3);
+
+    ARIA_ADD_ROUND_KEY(rk, reg0, reg1, reg2, reg3);
+    rk++;
+
+    ARIA_SUBST_DIFF_ODD(reg0, reg1, reg2, reg3);
+    ARIA_ADD_ROUND_KEY(rk, reg0, reg1, reg2, reg3);
+    rk++;
+
+    while(Nr -= 2){
+        ARIA_SUBST_DIFF_EVEN(reg0, reg1, reg2, reg3);
+        ARIA_ADD_ROUND_KEY(rk, reg0, reg1, reg2, reg3);
+        rk++;
+
+        ARIA_SUBST_DIFF_ODD(reg0, reg1, reg2, reg3);
+        ARIA_ADD_ROUND_KEY(rk, reg0, reg1, reg2, reg3);
+        rk++;
+    }
+
+    reg0 = rk->u[0] ^ MAKE_U32(
+        (uint8_t)(X1[GET_U8_BE(reg0, 0)]     ),
+        (uint8_t)(X2[GET_U8_BE(reg0, 1)] >> 8),
+        (uint8_t)(S1[GET_U8_BE(reg0, 2)]     ),
+        (uint8_t)(S2[GET_U8_BE(reg0, 3)]     ));
+    reg1 = rk->u[1] ^ MAKE_U32(
+        (uint8_t)(X1[GET_U8_BE(reg1, 0)]     ),
+        (uint8_t)(X2[GET_U8_BE(reg1, 1)] >> 8),
+        (uint8_t)(S1[GET_U8_BE(reg1, 2)]     ),
+        (uint8_t)(S2[GET_U8_BE(reg1, 3)]     ));
+    reg2 = rk->u[2] ^ MAKE_U32(
+        (uint8_t)(X1[GET_U8_BE(reg2, 0)]     ),
+        (uint8_t)(X2[GET_U8_BE(reg2, 1)] >> 8),
+        (uint8_t)(S1[GET_U8_BE(reg2, 2)]     ),
+        (uint8_t)(S2[GET_U8_BE(reg2, 3)]     ));
+    reg3 = rk->u[3] ^ MAKE_U32(
+        (uint8_t)(X1[GET_U8_BE(reg3, 0)]     ),
+        (uint8_t)(X2[GET_U8_BE(reg3, 1)] >> 8),
+        (uint8_t)(S1[GET_U8_BE(reg3, 2)]     ),
+        (uint8_t)(S2[GET_U8_BE(reg3, 3)]     ));
+
+    PUT_U32_BE(out, 0, reg0);
+    PUT_U32_BE(out, 1, reg1);
+    PUT_U32_BE(out, 2, reg2);
+    PUT_U32_BE(out, 3, reg3);
+}
+
+int aria_set_encrypt_key(const unsigned char *userKey, const int bits,
+                         ARIA_KEY *key)
+{
+    register uint32_t reg0, reg1, reg2, reg3;
+    uint32_t w0[4], w1[4], w2[4], w3[4];
+    const uint32_t *ck;
+
+    ARIA_u128 *rk;
+    int Nr = (bits + 256) / 32;
+
+    if (userKey == NULL || key == NULL) {
+        return -1;
+    }
+    if (bits != 128 && bits != 192 && bits != 256) {
+        return -2;
+    }
+
+    rk = key->rd_key;
+    key->rounds = Nr;
+    ck = &Key_RC[(bits - 128) / 64][0];
+
+    w0[0] = GET_U32_BE(userKey, 0);
+    w0[1] = GET_U32_BE(userKey, 1);
+    w0[2] = GET_U32_BE(userKey, 2);
+    w0[3] = GET_U32_BE(userKey, 3);
+
+    reg0 = w0[0] ^ ck[0];
+    reg1 = w0[1] ^ ck[1];
+    reg2 = w0[2] ^ ck[2];
+    reg3 = w0[3] ^ ck[3];
+
+    ARIA_SUBST_DIFF_ODD(reg0, reg1, reg2, reg3);
+
+    if (bits > 128) {
+        w1[0] = GET_U32_BE(userKey, 4);
+        w1[1] = GET_U32_BE(userKey, 5);
+        if (bits > 192) {
+            w1[2] = GET_U32_BE(userKey, 6);
+            w1[3] = GET_U32_BE(userKey, 7);
+        }
+        else {
+            w1[2] = w1[3] = 0;
+        }
+    }
+    else {
+        w1[0] = w1[1] = w1[2] = w1[3] = 0;
+    }
+
+    w1[0] ^= reg0;
+    w1[1] ^= reg1;
+    w1[2] ^= reg2;
+    w1[3] ^= reg3;
+
+    reg0 = w1[0];
+    reg1 = w1[1];
+    reg2 = w1[2];
+    reg3 = w1[3];
+
+    reg0 ^= ck[4];
+    reg1 ^= ck[5];
+    reg2 ^= ck[6];
+    reg3 ^= ck[7];
+
+    ARIA_SUBST_DIFF_EVEN(reg0, reg1, reg2, reg3);
+
+    reg0 ^= w0[0];
+    reg1 ^= w0[1];
+    reg2 ^= w0[2];
+    reg3 ^= w0[3];
+
+    w2[0] = reg0;
+    w2[1] = reg1;
+    w2[2] = reg2;
+    w2[3] = reg3;
+
+    reg0 ^= ck[8];
+    reg1 ^= ck[9];
+    reg2 ^= ck[10];
+    reg3 ^= ck[11];
+
+    ARIA_SUBST_DIFF_ODD(reg0, reg1, reg2, reg3);
+
+    w3[0] = reg0 ^ w1[0];
+    w3[1] = reg1 ^ w1[1];
+    w3[2] = reg2 ^ w1[2];
+    w3[3] = reg3 ^ w1[3];
+
+    ARIA_GSRK(rk, w0, w1, 19);
+    rk++;
+    ARIA_GSRK(rk, w1, w2, 19);
+    rk++;
+    ARIA_GSRK(rk, w2, w3, 19);
+    rk++;
+    ARIA_GSRK(rk, w3, w0, 19);
+
+    rk++;
+    ARIA_GSRK(rk, w0, w1, 31);
+    rk++;
+    ARIA_GSRK(rk, w1, w2, 31);
+    rk++;
+    ARIA_GSRK(rk, w2, w3, 31);
+    rk++;
+    ARIA_GSRK(rk, w3, w0, 31);
+
+    rk++;
+    ARIA_GSRK(rk, w0, w1, 67);
+    rk++;
+    ARIA_GSRK(rk, w1, w2, 67);
+    rk++;
+    ARIA_GSRK(rk, w2, w3, 67);
+    rk++;
+    ARIA_GSRK(rk, w3, w0, 67);
+
+    rk++;
+    ARIA_GSRK(rk, w0, w1, 97);
+    if (bits > 128) {
+        rk++;
+        ARIA_GSRK(rk, w1, w2, 97);
+        rk++;
+        ARIA_GSRK(rk, w2, w3, 97);
+    }
+    if (bits > 192) {
+        rk++;
+        ARIA_GSRK(rk, w3, w0, 97);
+
+        rk++;
+        ARIA_GSRK(rk, w0, w1, 109);
+    }
+
+    return 0;
+}
+
+int aria_set_decrypt_key(const unsigned char *userKey, const int bits,
+                         ARIA_KEY *key)
+{
+    ARIA_u128 *rk_head;
+    ARIA_u128 *rk_tail;
+    register uint32_t w1, w2;
+    register uint32_t reg0, reg1, reg2, reg3;
+    uint32_t s0, s1, s2, s3;
+
+    const int r = aria_set_encrypt_key(userKey, bits, key);
+
+    if (r != 0) {
+        return r;
+    }
+
+    rk_head = key->rd_key;
+    rk_tail = rk_head + key->rounds;
+
+    reg0 = rk_head->u[0];
+    reg1 = rk_head->u[1];
+    reg2 = rk_head->u[2];
+    reg3 = rk_head->u[3];
+
+    memcpy(rk_head, rk_tail, ARIA_BLOCK_SIZE);
+
+    rk_tail->u[0] = reg0;
+    rk_tail->u[1] = reg1;
+    rk_tail->u[2] = reg2;
+    rk_tail->u[3] = reg3;
+
+    rk_head++;
+    rk_tail--;
+
+    for (; rk_head < rk_tail; rk_head++, rk_tail--) {
+        ARIA_DEC_DIFF_BYTE(rk_head->u[0], reg0, w1, w2);
+        ARIA_DEC_DIFF_BYTE(rk_head->u[1], reg1, w1, w2);
+        ARIA_DEC_DIFF_BYTE(rk_head->u[2], reg2, w1, w2);
+        ARIA_DEC_DIFF_BYTE(rk_head->u[3], reg3, w1, w2);
+
+        ARIA_DIFF_WORD(reg0, reg1, reg2, reg3);
+        ARIA_DIFF_BYTE(reg0, reg1, reg2, reg3);
+        ARIA_DIFF_WORD(reg0, reg1, reg2, reg3);
+
+        s0 = reg0;
+        s1 = reg1;
+        s2 = reg2;
+        s3 = reg3;
+
+        ARIA_DEC_DIFF_BYTE(rk_tail->u[0], reg0, w1, w2);
+        ARIA_DEC_DIFF_BYTE(rk_tail->u[1], reg1, w1, w2);
+        ARIA_DEC_DIFF_BYTE(rk_tail->u[2], reg2, w1, w2);
+        ARIA_DEC_DIFF_BYTE(rk_tail->u[3], reg3, w1, w2);
+
+        ARIA_DIFF_WORD(reg0, reg1, reg2, reg3);
+        ARIA_DIFF_BYTE(reg0, reg1, reg2, reg3);
+        ARIA_DIFF_WORD(reg0, reg1, reg2, reg3);
+
+        rk_head->u[0] = reg0;
+        rk_head->u[1] = reg1;
+        rk_head->u[2] = reg2;
+        rk_head->u[3] = reg3;
+
+        rk_tail->u[0] = s0;
+        rk_tail->u[1] = s1;
+        rk_tail->u[2] = s2;
+        rk_tail->u[3] = s3;
+    }
+    ARIA_DEC_DIFF_BYTE(rk_head->u[0], reg0, w1, w2);
+    ARIA_DEC_DIFF_BYTE(rk_head->u[1], reg1, w1, w2);
+    ARIA_DEC_DIFF_BYTE(rk_head->u[2], reg2, w1, w2);
+    ARIA_DEC_DIFF_BYTE(rk_head->u[3], reg3, w1, w2);
+
+    ARIA_DIFF_WORD(reg0, reg1, reg2, reg3);
+    ARIA_DIFF_BYTE(reg0, reg1, reg2, reg3);
+    ARIA_DIFF_WORD(reg0, reg1, reg2, reg3);
+
+    rk_tail->u[0] = reg0;
+    rk_tail->u[1] = reg1;
+    rk_tail->u[2] = reg2;
+    rk_tail->u[3] = reg3;
+
+    return 0;
+}
+
+#else
+
+static const unsigned char sb1[256] = {
+    0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5,
+    0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76,
+    0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0,
+    0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0,
+    0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc,
+    0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15,
+    0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a,
+    0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75,
+    0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0,
+    0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84,
+    0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b,
+    0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf,
+    0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85,
+    0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8,
+    0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5,
+    0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2,
+    0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17,
+    0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73,
+    0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88,
+    0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb,
+    0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c,
+    0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79,
+    0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9,
+    0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08,
+    0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6,
+    0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a,
+    0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e,
+    0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e,
+    0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94,
+    0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf,
+    0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68,
+    0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16
+};
+
+static const unsigned char sb2[256] = {
+    0xe2, 0x4e, 0x54, 0xfc, 0x94, 0xc2, 0x4a, 0xcc,
+    0x62, 0x0d, 0x6a, 0x46, 0x3c, 0x4d, 0x8b, 0xd1,
+    0x5e, 0xfa, 0x64, 0xcb, 0xb4, 0x97, 0xbe, 0x2b,
+    0xbc, 0x77, 0x2e, 0x03, 0xd3, 0x19, 0x59, 0xc1,
+    0x1d, 0x06, 0x41, 0x6b, 0x55, 0xf0, 0x99, 0x69,
+    0xea, 0x9c, 0x18, 0xae, 0x63, 0xdf, 0xe7, 0xbb,
+    0x00, 0x73, 0x66, 0xfb, 0x96, 0x4c, 0x85, 0xe4,
+    0x3a, 0x09, 0x45, 0xaa, 0x0f, 0xee, 0x10, 0xeb,
+    0x2d, 0x7f, 0xf4, 0x29, 0xac, 0xcf, 0xad, 0x91,
+    0x8d, 0x78, 0xc8, 0x95, 0xf9, 0x2f, 0xce, 0xcd,
+    0x08, 0x7a, 0x88, 0x38, 0x5c, 0x83, 0x2a, 0x28,
+    0x47, 0xdb, 0xb8, 0xc7, 0x93, 0xa4, 0x12, 0x53,
+    0xff, 0x87, 0x0e, 0x31, 0x36, 0x21, 0x58, 0x48,
+    0x01, 0x8e, 0x37, 0x74, 0x32, 0xca, 0xe9, 0xb1,
+    0xb7, 0xab, 0x0c, 0xd7, 0xc4, 0x56, 0x42, 0x26,
+    0x07, 0x98, 0x60, 0xd9, 0xb6, 0xb9, 0x11, 0x40,
+    0xec, 0x20, 0x8c, 0xbd, 0xa0, 0xc9, 0x84, 0x04,
+    0x49, 0x23, 0xf1, 0x4f, 0x50, 0x1f, 0x13, 0xdc,
+    0xd8, 0xc0, 0x9e, 0x57, 0xe3, 0xc3, 0x7b, 0x65,
+    0x3b, 0x02, 0x8f, 0x3e, 0xe8, 0x25, 0x92, 0xe5,
+    0x15, 0xdd, 0xfd, 0x17, 0xa9, 0xbf, 0xd4, 0x9a,
+    0x7e, 0xc5, 0x39, 0x67, 0xfe, 0x76, 0x9d, 0x43,
+    0xa7, 0xe1, 0xd0, 0xf5, 0x68, 0xf2, 0x1b, 0x34,
+    0x70, 0x05, 0xa3, 0x8a, 0xd5, 0x79, 0x86, 0xa8,
+    0x30, 0xc6, 0x51, 0x4b, 0x1e, 0xa6, 0x27, 0xf6,
+    0x35, 0xd2, 0x6e, 0x24, 0x16, 0x82, 0x5f, 0xda,
+    0xe6, 0x75, 0xa2, 0xef, 0x2c, 0xb2, 0x1c, 0x9f,
+    0x5d, 0x6f, 0x80, 0x0a, 0x72, 0x44, 0x9b, 0x6c,
+    0x90, 0x0b, 0x5b, 0x33, 0x7d, 0x5a, 0x52, 0xf3,
+    0x61, 0xa1, 0xf7, 0xb0, 0xd6, 0x3f, 0x7c, 0x6d,
+    0xed, 0x14, 0xe0, 0xa5, 0x3d, 0x22, 0xb3, 0xf8,
+    0x89, 0xde, 0x71, 0x1a, 0xaf, 0xba, 0xb5, 0x81
+};
+
+static const unsigned char sb3[256] = {
+    0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38,
+    0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb,
+    0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87,
+    0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb,
+    0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d,
+    0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e,
+    0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2,
+    0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25,
+    0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16,
+    0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92,
+    0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda,
+    0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84,
+    0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a,
+    0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06,
+    0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02,
+    0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b,
+    0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea,
+    0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73,
+    0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85,
+    0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e,
+    0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89,
+    0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b,
+    0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20,
+    0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4,
+    0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31,
+    0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f,
+    0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d,
+    0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef,
+    0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0,
+    0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61,
+    0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26,
+    0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d
+};
+
+static const unsigned char sb4[256] = {
+    0x30, 0x68, 0x99, 0x1b, 0x87, 0xb9, 0x21, 0x78,
+    0x50, 0x39, 0xdb, 0xe1, 0x72, 0x09, 0x62, 0x3c,
+    0x3e, 0x7e, 0x5e, 0x8e, 0xf1, 0xa0, 0xcc, 0xa3,
+    0x2a, 0x1d, 0xfb, 0xb6, 0xd6, 0x20, 0xc4, 0x8d,
+    0x81, 0x65, 0xf5, 0x89, 0xcb, 0x9d, 0x77, 0xc6,
+    0x57, 0x43, 0x56, 0x17, 0xd4, 0x40, 0x1a, 0x4d,
+    0xc0, 0x63, 0x6c, 0xe3, 0xb7, 0xc8, 0x64, 0x6a,
+    0x53, 0xaa, 0x38, 0x98, 0x0c, 0xf4, 0x9b, 0xed,
+    0x7f, 0x22, 0x76, 0xaf, 0xdd, 0x3a, 0x0b, 0x58,
+    0x67, 0x88, 0x06, 0xc3, 0x35, 0x0d, 0x01, 0x8b,
+    0x8c, 0xc2, 0xe6, 0x5f, 0x02, 0x24, 0x75, 0x93,
+    0x66, 0x1e, 0xe5, 0xe2, 0x54, 0xd8, 0x10, 0xce,
+    0x7a, 0xe8, 0x08, 0x2c, 0x12, 0x97, 0x32, 0xab,
+    0xb4, 0x27, 0x0a, 0x23, 0xdf, 0xef, 0xca, 0xd9,
+    0xb8, 0xfa, 0xdc, 0x31, 0x6b, 0xd1, 0xad, 0x19,
+    0x49, 0xbd, 0x51, 0x96, 0xee, 0xe4, 0xa8, 0x41,
+    0xda, 0xff, 0xcd, 0x55, 0x86, 0x36, 0xbe, 0x61,
+    0x52, 0xf8, 0xbb, 0x0e, 0x82, 0x48, 0x69, 0x9a,
+    0xe0, 0x47, 0x9e, 0x5c, 0x04, 0x4b, 0x34, 0x15,
+    0x79, 0x26, 0xa7, 0xde, 0x29, 0xae, 0x92, 0xd7,
+    0x84, 0xe9, 0xd2, 0xba, 0x5d, 0xf3, 0xc5, 0xb0,
+    0xbf, 0xa4, 0x3b, 0x71, 0x44, 0x46, 0x2b, 0xfc,
+    0xeb, 0x6f, 0xd5, 0xf6, 0x14, 0xfe, 0x7c, 0x70,
+    0x5a, 0x7d, 0xfd, 0x2f, 0x18, 0x83, 0x16, 0xa5,
+    0x91, 0x1f, 0x05, 0x95, 0x74, 0xa9, 0xc1, 0x5b,
+    0x4a, 0x85, 0x6d, 0x13, 0x07, 0x4f, 0x4e, 0x45,
+    0xb2, 0x0f, 0xc9, 0x1c, 0xa6, 0xbc, 0xec, 0x73,
+    0x90, 0x7b, 0xcf, 0x59, 0x8f, 0xa1, 0xf9, 0x2d,
+    0xf2, 0xb1, 0x00, 0x94, 0x37, 0x9f, 0xd0, 0x2e,
+    0x9c, 0x6e, 0x28, 0x3f, 0x80, 0xf0, 0x3d, 0xd3,
+    0x25, 0x8a, 0xb5, 0xe7, 0x42, 0xb3, 0xc7, 0xea,
+    0xf7, 0x4c, 0x11, 0x33, 0x03, 0xa2, 0xac, 0x60
+};
+
+static const ARIA_u128 c1 = {{
+    0x51, 0x7c, 0xc1, 0xb7, 0x27, 0x22, 0x0a, 0x94,
+    0xfe, 0x13, 0xab, 0xe8, 0xfa, 0x9a, 0x6e, 0xe0
+}};
+
+static const ARIA_u128 c2 = {{
+    0x6d, 0xb1, 0x4a, 0xcc, 0x9e, 0x21, 0xc8, 0x20,
+    0xff, 0x28, 0xb1, 0xd5, 0xef, 0x5d, 0xe2, 0xb0
+}};
+
+static const ARIA_u128 c3 = {{
+    0xdb, 0x92, 0x37, 0x1d, 0x21, 0x26, 0xe9, 0x70,
+    0x03, 0x24, 0x97, 0x75, 0x04, 0xe8, 0xc9, 0x0e
+}};
+
+/*
+ * Exclusive or two 128 bit values into the result.
+ * It is safe for the result to be the same as the either input.
+ */
+static void xor128(ARIA_c128 o, const ARIA_c128 x, const ARIA_u128 *y)
+{
+    int i;
+
+    for (i = 0; i < ARIA_BLOCK_SIZE; i++)
+        o[i] = x[i] ^ y->c[i];
+}
+
+/*
+ * Generalised circular rotate right and exclusive or function.
+ * It is safe for the output to overlap either input.
+ */
+static ossl_inline void rotnr(unsigned int n, ARIA_u128 *o,
+                              const ARIA_u128 *xor, const ARIA_u128 *z)
+{
+    const unsigned int bytes = n / 8, bits = n % 8;
+    unsigned int i;
+    ARIA_u128 t;
+
+    for (i = 0; i < ARIA_BLOCK_SIZE; i++)
+        t.c[(i + bytes) % ARIA_BLOCK_SIZE] = z->c[i];
+    for (i = 0; i < ARIA_BLOCK_SIZE; i++)
+        o->c[i] = ((t.c[i] >> bits) |
+                (t.c[i ? i - 1 : ARIA_BLOCK_SIZE - 1] << (8 - bits))) ^
+                xor->c[i];
+}
+
+/*
+ * Circular rotate 19 bits right and xor.
+ * It is safe for the output to overlap either input.
+ */
+static void rot19r(ARIA_u128 *o, const ARIA_u128 *xor, const ARIA_u128 *z)
+{
+    rotnr(19, o, xor, z);
+}
+
+/*
+ * Circular rotate 31 bits right and xor.
+ * It is safe for the output to overlap either input.
+ */
+static void rot31r(ARIA_u128 *o, const ARIA_u128 *xor, const ARIA_u128 *z)
+{
+    rotnr(31, o, xor, z);
+}
+
+/*
+ * Circular rotate 61 bits left and xor.
+ * It is safe for the output to overlap either input.
+ */
+static void rot61l(ARIA_u128 *o, const ARIA_u128 *xor, const ARIA_u128 *z)
+{
+    rotnr(8 * ARIA_BLOCK_SIZE - 61, o, xor, z);
+}
+
+/*
+ * Circular rotate 31 bits left and xor.
+ * It is safe for the output to overlap either input.
+ */
+static void rot31l(ARIA_u128 *o, const ARIA_u128 *xor, const ARIA_u128 *z)
+{
+    rotnr(8 * ARIA_BLOCK_SIZE - 31, o, xor, z);
+}
+
+/*
+ * Circular rotate 19 bits left and xor.
+ * It is safe for the output to overlap either input.
+ */
+static void rot19l(ARIA_u128 *o, const ARIA_u128 *xor, const ARIA_u128 *z)
+{
+    rotnr(8 * ARIA_BLOCK_SIZE - 19, o, xor, z);
+}
+
+/*
+ * First substitution and xor layer, used for odd steps.
+ * It is safe for the input and output to be the same.
+ */
+static void sl1(ARIA_u128 *o, const ARIA_u128 *x, const ARIA_u128 *y)
+{
+    unsigned int i;
+    for (i = 0; i < ARIA_BLOCK_SIZE; i += 4) {
+        o->c[i    ] = sb1[x->c[i    ] ^ y->c[i    ]];
+        o->c[i + 1] = sb2[x->c[i + 1] ^ y->c[i + 1]];
+        o->c[i + 2] = sb3[x->c[i + 2] ^ y->c[i + 2]];
+        o->c[i + 3] = sb4[x->c[i + 3] ^ y->c[i + 3]];
+    }
+}
+
+/*
+ * Second substitution and xor layer, used for even steps.
+ * It is safe for the input and output to be the same.
+ */
+static void sl2(ARIA_c128 o, const ARIA_u128 *x, const ARIA_u128 *y)
+{
+    unsigned int i;
+    for (i = 0; i < ARIA_BLOCK_SIZE; i += 4) {
+        o[i    ] = sb3[x->c[i	 ] ^ y->c[i    ]];
+        o[i + 1] = sb4[x->c[i + 1] ^ y->c[i + 1]];
+        o[i + 2] = sb1[x->c[i + 2] ^ y->c[i + 2]];
+        o[i + 3] = sb2[x->c[i + 3] ^ y->c[i + 3]];
+    }
+}
+
+/*
+ * Diffusion layer step
+ * It is NOT safe for the input and output to overlap.
+ */
+static void a(ARIA_u128 *y, const ARIA_u128 *x)
+{
+    y->c[ 0] = x->c[ 3] ^ x->c[ 4] ^ x->c[ 6] ^ x->c[ 8] ^
+               x->c[ 9] ^ x->c[13] ^ x->c[14];
+    y->c[ 1] = x->c[ 2] ^ x->c[ 5] ^ x->c[ 7] ^ x->c[ 8] ^
+               x->c[ 9] ^ x->c[12] ^ x->c[15];
+    y->c[ 2] = x->c[ 1] ^ x->c[ 4] ^ x->c[ 6] ^ x->c[10] ^
+               x->c[11] ^ x->c[12] ^ x->c[15];
+    y->c[ 3] = x->c[ 0] ^ x->c[ 5] ^ x->c[ 7] ^ x->c[10] ^
+               x->c[11] ^ x->c[13] ^ x->c[14];
+    y->c[ 4] = x->c[ 0] ^ x->c[ 2] ^ x->c[ 5] ^ x->c[ 8] ^
+               x->c[11] ^ x->c[14] ^ x->c[15];
+    y->c[ 5] = x->c[ 1] ^ x->c[ 3] ^ x->c[ 4] ^ x->c[ 9] ^
+               x->c[10] ^ x->c[14] ^ x->c[15];
+    y->c[ 6] = x->c[ 0] ^ x->c[ 2] ^ x->c[ 7] ^ x->c[ 9] ^
+               x->c[10] ^ x->c[12] ^ x->c[13];
+    y->c[ 7] = x->c[ 1] ^ x->c[ 3] ^ x->c[ 6] ^ x->c[ 8] ^
+               x->c[11] ^ x->c[12] ^ x->c[13];
+    y->c[ 8] = x->c[ 0] ^ x->c[ 1] ^ x->c[ 4] ^ x->c[ 7] ^
+               x->c[10] ^ x->c[13] ^ x->c[15];
+    y->c[ 9] = x->c[ 0] ^ x->c[ 1] ^ x->c[ 5] ^ x->c[ 6] ^
+               x->c[11] ^ x->c[12] ^ x->c[14];
+    y->c[10] = x->c[ 2] ^ x->c[ 3] ^ x->c[ 5] ^ x->c[ 6] ^
+               x->c[ 8] ^ x->c[13] ^ x->c[15];
+    y->c[11] = x->c[ 2] ^ x->c[ 3] ^ x->c[ 4] ^ x->c[ 7] ^
+               x->c[ 9] ^ x->c[12] ^ x->c[14];
+    y->c[12] = x->c[ 1] ^ x->c[ 2] ^ x->c[ 6] ^ x->c[ 7] ^
+               x->c[ 9] ^ x->c[11] ^ x->c[12];
+    y->c[13] = x->c[ 0] ^ x->c[ 3] ^ x->c[ 6] ^ x->c[ 7] ^
+               x->c[ 8] ^ x->c[10] ^ x->c[13];
+    y->c[14] = x->c[ 0] ^ x->c[ 3] ^ x->c[ 4] ^ x->c[ 5] ^
+               x->c[ 9] ^ x->c[11] ^ x->c[14];
+    y->c[15] = x->c[ 1] ^ x->c[ 2] ^ x->c[ 4] ^ x->c[ 5] ^
+               x->c[ 8] ^ x->c[10] ^ x->c[15];
+}
+
+/*
+ * Odd round function
+ * Apply the first substitution layer and then a diffusion step.
+ * It is safe for the input and output to overlap.
+ */
+static ossl_inline void FO(ARIA_u128 *o, const ARIA_u128 *d,
+                           const ARIA_u128 *rk)
+{
+    ARIA_u128 y;
+
+    sl1(&y, d, rk);
+    a(o, &y);
+}
+
+/*
+ * Even round function
+ * Apply the second substitution layer and then a diffusion step.
+ * It is safe for the input and output to overlap.
+ */
+static ossl_inline void FE(ARIA_u128 *o, const ARIA_u128 *d,
+                           const ARIA_u128 *rk)
+{
+    ARIA_u128 y;
+
+    sl2(y.c, d, rk);
+    a(o, &y);
+}
+
+/*
+ * Encrypt or decrypt a single block
+ * in and out can overlap
+ */
+static void do_encrypt(unsigned char *o, const unsigned char *pin,
+                       unsigned int rounds, const ARIA_u128 *keys)
+{
+    ARIA_u128 p;
+    unsigned int i;
+
+    memcpy(&p, pin, sizeof(p));
+    for (i = 0; i < rounds - 2; i += 2) {
+        FO(&p, &p, &keys[i]);
+        FE(&p, &p, &keys[i + 1]);
+    }
+    FO(&p, &p, &keys[rounds - 2]);
+    sl2(o, &p, &keys[rounds - 1]);
+    xor128(o, o, &keys[rounds]);
+}
+
+/*
+ * Encrypt a single block
+ * in and out can overlap
+ */
+void aria_encrypt(const unsigned char *in, unsigned char *out,
+                  const ARIA_KEY *key)
+{
+    assert(in != NULL && out != NULL && key != NULL);
+    do_encrypt(out, in, key->rounds, key->rd_key);
+}
+
+
+/*
+ * Expand the cipher key into the encryption key schedule.
+ * We short circuit execution of the last two
+ * or four rotations based on the key size.
+ */
+int aria_set_encrypt_key(const unsigned char *userKey, const int bits,
+                         ARIA_KEY *key)
+{
+    const ARIA_u128 *ck1, *ck2, *ck3;
+    ARIA_u128 kr, w0, w1, w2, w3;
+
+    if (!userKey || !key)
+        return -1;
+    memcpy(w0.c, userKey, sizeof(w0));
+    switch (bits) {
+    default:
+        return -2;
+    case 128:
+        key->rounds = 12;
+        ck1 = &c1;
+        ck2 = &c2;
+        ck3 = &c3;
+        memset(kr.c, 0, sizeof(kr));
+        break;
+
+    case 192:
+        key->rounds = 14;
+        ck1 = &c2;
+        ck2 = &c3;
+        ck3 = &c1;
+        memcpy(kr.c, userKey + ARIA_BLOCK_SIZE, sizeof(kr) / 2);
+        memset(kr.c + ARIA_BLOCK_SIZE / 2, 0, sizeof(kr) / 2);
+        break;
+
+    case 256:
+        key->rounds = 16;
+        ck1 = &c3;
+        ck2 = &c1;
+        ck3 = &c2;
+        memcpy(kr.c, userKey + ARIA_BLOCK_SIZE, sizeof(kr));
+        break;
+    }
+
+    FO(&w3, &w0, ck1);    xor128(w1.c, w3.c, &kr);
+    FE(&w3, &w1, ck2);    xor128(w2.c, w3.c, &w0);
+    FO(&kr, &w2, ck3);    xor128(w3.c, kr.c, &w1);
+
+    rot19r(&key->rd_key[ 0], &w0, &w1);
+    rot19r(&key->rd_key[ 1], &w1, &w2);
+    rot19r(&key->rd_key[ 2], &w2, &w3);
+    rot19r(&key->rd_key[ 3], &w3, &w0);
+
+    rot31r(&key->rd_key[ 4], &w0, &w1);
+    rot31r(&key->rd_key[ 5], &w1, &w2);
+    rot31r(&key->rd_key[ 6], &w2, &w3);
+    rot31r(&key->rd_key[ 7], &w3, &w0);
+
+    rot61l(&key->rd_key[ 8], &w0, &w1);
+    rot61l(&key->rd_key[ 9], &w1, &w2);
+    rot61l(&key->rd_key[10], &w2, &w3);
+    rot61l(&key->rd_key[11], &w3, &w0);
+
+    rot31l(&key->rd_key[12], &w0, &w1);
+    if (key->rounds > 12) {
+        rot31l(&key->rd_key[13], &w1, &w2);
+        rot31l(&key->rd_key[14], &w2, &w3);
+
+        if (key->rounds > 14) {
+            rot31l(&key->rd_key[15], &w3, &w0);
+            rot19l(&key->rd_key[16], &w0, &w1);
+        }
+    }
+    return 0;
+}
+
+/*
+ * Expand the cipher key into the decryption key schedule.
+ */
+int aria_set_decrypt_key(const unsigned char *userKey, const int bits,
+                         ARIA_KEY *key)
+{
+    ARIA_KEY ek;
+    const int r = aria_set_encrypt_key(userKey, bits, &ek);
+    unsigned int i, rounds = ek.rounds;
+
+    if (r == 0) {
+        key->rounds = rounds;
+        memcpy(&key->rd_key[0], &ek.rd_key[rounds], sizeof(key->rd_key[0]));
+        for (i = 1; i < rounds; i++)
+            a(&key->rd_key[i], &ek.rd_key[rounds - i]);
+        memcpy(&key->rd_key[rounds], &ek.rd_key[0], sizeof(key->rd_key[rounds]));
+    }
+    return r;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/aria/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/aria/build.info
new file mode 100644
index 000000000..218d0612f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/aria/build.info
@@ -0,0 +1,4 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        aria.c
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/arm64cpuid.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/arm64cpuid.pl
new file mode 100755
index 000000000..06c8add7a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/arm64cpuid.pl
@@ -0,0 +1,147 @@
+#! /usr/bin/env perl
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+$flavour = shift;
+$output  = shift;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}perlasm/arm-xlate.pl" and -f $xlate) or
+die "can't locate arm-xlate.pl";
+
+open OUT,"| \"$^X\" $xlate $flavour $output";
+*STDOUT=*OUT;
+
+$code.=<<___;
+#include "arm_arch.h"
+
+.text
+.arch	armv8-a+crypto
+
+.align	5
+.globl	_armv7_neon_probe
+.type	_armv7_neon_probe,%function
+_armv7_neon_probe:
+	orr	v15.16b, v15.16b, v15.16b
+	ret
+.size	_armv7_neon_probe,.-_armv7_neon_probe
+
+.globl	_armv7_tick
+.type	_armv7_tick,%function
+_armv7_tick:
+#ifdef	__APPLE__
+	mrs	x0, CNTPCT_EL0
+#else
+	mrs	x0, CNTVCT_EL0
+#endif
+	ret
+.size	_armv7_tick,.-_armv7_tick
+
+.globl	_armv8_aes_probe
+.type	_armv8_aes_probe,%function
+_armv8_aes_probe:
+	aese	v0.16b, v0.16b
+	ret
+.size	_armv8_aes_probe,.-_armv8_aes_probe
+
+.globl	_armv8_sha1_probe
+.type	_armv8_sha1_probe,%function
+_armv8_sha1_probe:
+	sha1h	s0, s0
+	ret
+.size	_armv8_sha1_probe,.-_armv8_sha1_probe
+
+.globl	_armv8_sha256_probe
+.type	_armv8_sha256_probe,%function
+_armv8_sha256_probe:
+	sha256su0	v0.4s, v0.4s
+	ret
+.size	_armv8_sha256_probe,.-_armv8_sha256_probe
+
+.globl	_armv8_pmull_probe
+.type	_armv8_pmull_probe,%function
+_armv8_pmull_probe:
+	pmull	v0.1q, v0.1d, v0.1d
+	ret
+.size	_armv8_pmull_probe,.-_armv8_pmull_probe
+
+.globl	_armv8_sha512_probe
+.type	_armv8_sha512_probe,%function
+_armv8_sha512_probe:
+	.long	0xcec08000	// sha512su0	v0.2d,v0.2d
+	ret
+.size	_armv8_sha512_probe,.-_armv8_sha512_probe
+
+.globl	OPENSSL_cleanse
+.type	OPENSSL_cleanse,%function
+.align	5
+OPENSSL_cleanse:
+	cbz	x1,.Lret	// len==0?
+	cmp	x1,#15
+	b.hi	.Lot		// len>15
+	nop
+.Little:
+	strb	wzr,[x0],#1	// store byte-by-byte
+	subs	x1,x1,#1
+	b.ne	.Little
+.Lret:	ret
+
+.align	4
+.Lot:	tst	x0,#7
+	b.eq	.Laligned	// inp is aligned
+	strb	wzr,[x0],#1	// store byte-by-byte
+	sub	x1,x1,#1
+	b	.Lot
+
+.align	4
+.Laligned:
+	str	xzr,[x0],#8	// store word-by-word
+	sub	x1,x1,#8
+	tst	x1,#-8
+	b.ne	.Laligned	// len>=8
+	cbnz	x1,.Little	// len!=0?
+	ret
+.size	OPENSSL_cleanse,.-OPENSSL_cleanse
+
+.globl	CRYPTO_memcmp
+.type	CRYPTO_memcmp,%function
+.align	4
+CRYPTO_memcmp:
+	eor	w3,w3,w3
+	cbz	x2,.Lno_data	// len==0?
+	cmp	x2,#16
+	b.ne	.Loop_cmp
+	ldp	x8,x9,[x0]
+	ldp	x10,x11,[x1]
+	eor	x8,x8,x10
+	eor	x9,x9,x11
+	orr	x8,x8,x9
+	mov	x0,#1
+	cmp	x8,#0
+	csel	x0,xzr,x0,eq
+	ret
+
+.align	4
+.Loop_cmp:
+	ldrb	w4,[x0],#1
+	ldrb	w5,[x1],#1
+	eor	w4,w4,w5
+	orr	w3,w3,w4
+	subs	x2,x2,#1
+	b.ne	.Loop_cmp
+
+.Lno_data:
+	neg	w0,w3
+	lsr	w0,w0,#31
+	ret
+.size	CRYPTO_memcmp,.-CRYPTO_memcmp
+___
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/arm_arch.h b/trunk/3rdparty/openssl-1.1-fit/crypto/arm_arch.h
new file mode 100644
index 000000000..f11b543df
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/arm_arch.h
@@ -0,0 +1,84 @@
+/*
+ * Copyright 2011-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef __ARM_ARCH_H__
+# define __ARM_ARCH_H__
+
+# if !defined(__ARM_ARCH__)
+#  if defined(__CC_ARM)
+#   define __ARM_ARCH__ __TARGET_ARCH_ARM
+#   if defined(__BIG_ENDIAN)
+#    define __ARMEB__
+#   else
+#    define __ARMEL__
+#   endif
+#  elif defined(__GNUC__)
+#   if   defined(__aarch64__)
+#    define __ARM_ARCH__ 8
+#    if __BYTE_ORDER__==__ORDER_BIG_ENDIAN__
+#     define __ARMEB__
+#    else
+#     define __ARMEL__
+#    endif
+  /*
+   * Why doesn't gcc define __ARM_ARCH__? Instead it defines
+   * bunch of below macros. See all_architectures[] table in
+   * gcc/config/arm/arm.c. On a side note it defines
+   * __ARMEL__/__ARMEB__ for little-/big-endian.
+   */
+#   elif defined(__ARM_ARCH)
+#    define __ARM_ARCH__ __ARM_ARCH
+#   elif defined(__ARM_ARCH_8A__)
+#    define __ARM_ARCH__ 8
+#   elif defined(__ARM_ARCH_7__) || defined(__ARM_ARCH_7A__)     || \
+        defined(__ARM_ARCH_7R__)|| defined(__ARM_ARCH_7M__)     || \
+        defined(__ARM_ARCH_7EM__)
+#    define __ARM_ARCH__ 7
+#   elif defined(__ARM_ARCH_6__) || defined(__ARM_ARCH_6J__)     || \
+        defined(__ARM_ARCH_6K__)|| defined(__ARM_ARCH_6M__)     || \
+        defined(__ARM_ARCH_6Z__)|| defined(__ARM_ARCH_6ZK__)    || \
+        defined(__ARM_ARCH_6T2__)
+#    define __ARM_ARCH__ 6
+#   elif defined(__ARM_ARCH_5__) || defined(__ARM_ARCH_5T__)     || \
+        defined(__ARM_ARCH_5E__)|| defined(__ARM_ARCH_5TE__)    || \
+        defined(__ARM_ARCH_5TEJ__)
+#    define __ARM_ARCH__ 5
+#   elif defined(__ARM_ARCH_4__) || defined(__ARM_ARCH_4T__)
+#    define __ARM_ARCH__ 4
+#   else
+#    error "unsupported ARM architecture"
+#   endif
+#  endif
+# endif
+
+# if !defined(__ARM_MAX_ARCH__)
+#  define __ARM_MAX_ARCH__ __ARM_ARCH__
+# endif
+
+# if __ARM_MAX_ARCH__<__ARM_ARCH__
+#  error "__ARM_MAX_ARCH__ can't be less than __ARM_ARCH__"
+# elif __ARM_MAX_ARCH__!=__ARM_ARCH__
+#  if __ARM_ARCH__<7 && __ARM_MAX_ARCH__>=7 && defined(__ARMEB__)
+#   error "can't build universal big-endian binary"
+#  endif
+# endif
+
+# ifndef __ASSEMBLER__
+extern unsigned int OPENSSL_armcap_P;
+# endif
+
+# define ARMV7_NEON      (1<<0)
+# define ARMV7_TICK      (1<<1)
+# define ARMV8_AES       (1<<2)
+# define ARMV8_SHA1      (1<<3)
+# define ARMV8_SHA256    (1<<4)
+# define ARMV8_PMULL     (1<<5)
+# define ARMV8_SHA512    (1<<6)
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/armcap.c b/trunk/3rdparty/openssl-1.1-fit/crypto/armcap.c
new file mode 100644
index 000000000..58e54f0da
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/armcap.c
@@ -0,0 +1,214 @@
+/*
+ * Copyright 2011-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <setjmp.h>
+#include <signal.h>
+#include <openssl/crypto.h>
+#include "internal/cryptlib.h"
+
+#include "arm_arch.h"
+
+unsigned int OPENSSL_armcap_P = 0;
+
+#if __ARM_MAX_ARCH__<7
+void OPENSSL_cpuid_setup(void)
+{
+}
+
+uint32_t OPENSSL_rdtsc(void)
+{
+    return 0;
+}
+#else
+static sigset_t all_masked;
+
+static sigjmp_buf ill_jmp;
+static void ill_handler(int sig)
+{
+    siglongjmp(ill_jmp, sig);
+}
+
+/*
+ * Following subroutines could have been inlined, but it's not all
+ * ARM compilers support inline assembler...
+ */
+void _armv7_neon_probe(void);
+void _armv8_aes_probe(void);
+void _armv8_sha1_probe(void);
+void _armv8_sha256_probe(void);
+void _armv8_pmull_probe(void);
+# ifdef __aarch64__
+void _armv8_sha512_probe(void);
+# endif
+uint32_t _armv7_tick(void);
+
+uint32_t OPENSSL_rdtsc(void)
+{
+    if (OPENSSL_armcap_P & ARMV7_TICK)
+        return _armv7_tick();
+    else
+        return 0;
+}
+
+# if defined(__GNUC__) && __GNUC__>=2
+void OPENSSL_cpuid_setup(void) __attribute__ ((constructor));
+# endif
+
+# if defined(__GLIBC__) && defined(__GLIBC_PREREQ)
+#  if __GLIBC_PREREQ(2, 16)
+#   include <sys/auxv.h>
+#   define OSSL_IMPLEMENT_GETAUXVAL
+#  endif
+# endif
+
+/*
+ * ARM puts the feature bits for Crypto Extensions in AT_HWCAP2, whereas
+ * AArch64 used AT_HWCAP.
+ */
+# if defined(__arm__) || defined (__arm)
+#  define HWCAP                  16
+                                  /* AT_HWCAP */
+#  define HWCAP_NEON             (1 << 12)
+
+#  define HWCAP_CE               26
+                                  /* AT_HWCAP2 */
+#  define HWCAP_CE_AES           (1 << 0)
+#  define HWCAP_CE_PMULL         (1 << 1)
+#  define HWCAP_CE_SHA1          (1 << 2)
+#  define HWCAP_CE_SHA256        (1 << 3)
+# elif defined(__aarch64__)
+#  define HWCAP                  16
+                                  /* AT_HWCAP */
+#  define HWCAP_NEON             (1 << 1)
+
+#  define HWCAP_CE               HWCAP
+#  define HWCAP_CE_AES           (1 << 3)
+#  define HWCAP_CE_PMULL         (1 << 4)
+#  define HWCAP_CE_SHA1          (1 << 5)
+#  define HWCAP_CE_SHA256        (1 << 6)
+#  define HWCAP_CE_SHA512        (1 << 21)
+# endif
+
+void OPENSSL_cpuid_setup(void)
+{
+    const char *e;
+    struct sigaction ill_oact, ill_act;
+    sigset_t oset;
+    static int trigger = 0;
+
+    if (trigger)
+        return;
+    trigger = 1;
+
+    if ((e = getenv("OPENSSL_armcap"))) {
+        OPENSSL_armcap_P = (unsigned int)strtoul(e, NULL, 0);
+        return;
+    }
+
+# if defined(__APPLE__) && !defined(__aarch64__)
+    /*
+     * Capability probing by catching SIGILL appears to be problematic
+     * on iOS. But since Apple universe is "monocultural", it's actually
+     * possible to simply set pre-defined processor capability mask.
+     */
+    if (1) {
+        OPENSSL_armcap_P = ARMV7_NEON;
+        return;
+    }
+    /*
+     * One could do same even for __aarch64__ iOS builds. It's not done
+     * exclusively for reasons of keeping code unified across platforms.
+     * Unified code works because it never triggers SIGILL on Apple
+     * devices...
+     */
+# endif
+
+    OPENSSL_armcap_P = 0;
+
+# ifdef OSSL_IMPLEMENT_GETAUXVAL
+    if (getauxval(HWCAP) & HWCAP_NEON) {
+        unsigned long hwcap = getauxval(HWCAP_CE);
+
+        OPENSSL_armcap_P |= ARMV7_NEON;
+
+        if (hwcap & HWCAP_CE_AES)
+            OPENSSL_armcap_P |= ARMV8_AES;
+
+        if (hwcap & HWCAP_CE_PMULL)
+            OPENSSL_armcap_P |= ARMV8_PMULL;
+
+        if (hwcap & HWCAP_CE_SHA1)
+            OPENSSL_armcap_P |= ARMV8_SHA1;
+
+        if (hwcap & HWCAP_CE_SHA256)
+            OPENSSL_armcap_P |= ARMV8_SHA256;
+
+#  ifdef __aarch64__
+        if (hwcap & HWCAP_CE_SHA512)
+            OPENSSL_armcap_P |= ARMV8_SHA512;
+#  endif
+    }
+# endif
+
+    sigfillset(&all_masked);
+    sigdelset(&all_masked, SIGILL);
+    sigdelset(&all_masked, SIGTRAP);
+    sigdelset(&all_masked, SIGFPE);
+    sigdelset(&all_masked, SIGBUS);
+    sigdelset(&all_masked, SIGSEGV);
+
+    memset(&ill_act, 0, sizeof(ill_act));
+    ill_act.sa_handler = ill_handler;
+    ill_act.sa_mask = all_masked;
+
+    sigprocmask(SIG_SETMASK, &ill_act.sa_mask, &oset);
+    sigaction(SIGILL, &ill_act, &ill_oact);
+
+    /* If we used getauxval, we already have all the values */
+# ifndef OSSL_IMPLEMENT_GETAUXVAL
+    if (sigsetjmp(ill_jmp, 1) == 0) {
+        _armv7_neon_probe();
+        OPENSSL_armcap_P |= ARMV7_NEON;
+        if (sigsetjmp(ill_jmp, 1) == 0) {
+            _armv8_pmull_probe();
+            OPENSSL_armcap_P |= ARMV8_PMULL | ARMV8_AES;
+        } else if (sigsetjmp(ill_jmp, 1) == 0) {
+            _armv8_aes_probe();
+            OPENSSL_armcap_P |= ARMV8_AES;
+        }
+        if (sigsetjmp(ill_jmp, 1) == 0) {
+            _armv8_sha1_probe();
+            OPENSSL_armcap_P |= ARMV8_SHA1;
+        }
+        if (sigsetjmp(ill_jmp, 1) == 0) {
+            _armv8_sha256_probe();
+            OPENSSL_armcap_P |= ARMV8_SHA256;
+        }
+#  if defined(__aarch64__) && !defined(__APPLE__)
+        if (sigsetjmp(ill_jmp, 1) == 0) {
+            _armv8_sha512_probe();
+            OPENSSL_armcap_P |= ARMV8_SHA512;
+        }
+#  endif
+    }
+# endif
+
+    /* Things that getauxval didn't tell us */
+    if (sigsetjmp(ill_jmp, 1) == 0) {
+        _armv7_tick();
+        OPENSSL_armcap_P |= ARMV7_TICK;
+    }
+
+    sigaction(SIGILL, &ill_oact, NULL);
+    sigprocmask(SIG_SETMASK, &oset, NULL);
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/armv4cpuid.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/armv4cpuid.pl
new file mode 100644
index 000000000..ab007c19c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/armv4cpuid.pl
@@ -0,0 +1,296 @@
+#! /usr/bin/env perl
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+$flavour = shift;
+$output  = shift;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}perlasm/arm-xlate.pl" and -f $xlate) or
+die "can't locate arm-xlate.pl";
+
+open OUT,"| \"$^X\" $xlate $flavour $output";
+*STDOUT=*OUT;
+
+$code.=<<___;
+#include "arm_arch.h"
+
+.text
+#if defined(__thumb2__) && !defined(__APPLE__)
+.syntax	unified
+.thumb
+#else
+.code	32
+#undef	__thumb2__
+#endif
+
+.align	5
+.global	OPENSSL_atomic_add
+.type	OPENSSL_atomic_add,%function
+OPENSSL_atomic_add:
+#if __ARM_ARCH__>=6
+.Ladd:	ldrex	r2,[r0]
+	add	r3,r2,r1
+	strex	r2,r3,[r0]
+	cmp	r2,#0
+	bne	.Ladd
+	mov	r0,r3
+	bx	lr
+#else
+	stmdb	sp!,{r4-r6,lr}
+	ldr	r2,.Lspinlock
+	adr	r3,.Lspinlock
+	mov	r4,r0
+	mov	r5,r1
+	add	r6,r3,r2	@ &spinlock
+	b	.+8
+.Lspin:	bl	sched_yield
+	mov	r0,#-1
+	swp	r0,r0,[r6]
+	cmp	r0,#0
+	bne	.Lspin
+
+	ldr	r2,[r4]
+	add	r2,r2,r5
+	str	r2,[r4]
+	str	r0,[r6]		@ release spinlock
+	ldmia	sp!,{r4-r6,lr}
+	tst	lr,#1
+	moveq	pc,lr
+	.word	0xe12fff1e	@ bx	lr
+#endif
+.size	OPENSSL_atomic_add,.-OPENSSL_atomic_add
+
+.global	OPENSSL_cleanse
+.type	OPENSSL_cleanse,%function
+OPENSSL_cleanse:
+	eor	ip,ip,ip
+	cmp	r1,#7
+#ifdef	__thumb2__
+	itt	hs
+#endif
+	subhs	r1,r1,#4
+	bhs	.Lot
+	cmp	r1,#0
+	beq	.Lcleanse_done
+.Little:
+	strb	ip,[r0],#1
+	subs	r1,r1,#1
+	bhi	.Little
+	b	.Lcleanse_done
+
+.Lot:	tst	r0,#3
+	beq	.Laligned
+	strb	ip,[r0],#1
+	sub	r1,r1,#1
+	b	.Lot
+.Laligned:
+	str	ip,[r0],#4
+	subs	r1,r1,#4
+	bhs	.Laligned
+	adds	r1,r1,#4
+	bne	.Little
+.Lcleanse_done:
+#if __ARM_ARCH__>=5
+	bx	lr
+#else
+	tst	lr,#1
+	moveq	pc,lr
+	.word	0xe12fff1e	@ bx	lr
+#endif
+.size	OPENSSL_cleanse,.-OPENSSL_cleanse
+
+.global	CRYPTO_memcmp
+.type	CRYPTO_memcmp,%function
+.align	4
+CRYPTO_memcmp:
+	eor	ip,ip,ip
+	cmp	r2,#0
+	beq	.Lno_data
+	stmdb	sp!,{r4,r5}
+
+.Loop_cmp:
+	ldrb	r4,[r0],#1
+	ldrb	r5,[r1],#1
+	eor	r4,r4,r5
+	orr	ip,ip,r4
+	subs	r2,r2,#1
+	bne	.Loop_cmp
+
+	ldmia	sp!,{r4,r5}
+.Lno_data:
+	rsb	r0,ip,#0
+	mov	r0,r0,lsr#31
+#if __ARM_ARCH__>=5
+	bx	lr
+#else
+	tst	lr,#1
+	moveq	pc,lr
+	.word	0xe12fff1e	@ bx	lr
+#endif
+.size	CRYPTO_memcmp,.-CRYPTO_memcmp
+
+#if __ARM_MAX_ARCH__>=7
+.arch	armv7-a
+.fpu	neon
+
+.align	5
+.global	_armv7_neon_probe
+.type	_armv7_neon_probe,%function
+_armv7_neon_probe:
+	vorr	q0,q0,q0
+	bx	lr
+.size	_armv7_neon_probe,.-_armv7_neon_probe
+
+.global	_armv7_tick
+.type	_armv7_tick,%function
+_armv7_tick:
+#ifdef	__APPLE__
+	mrrc	p15,0,r0,r1,c14		@ CNTPCT
+#else
+	mrrc	p15,1,r0,r1,c14		@ CNTVCT
+#endif
+	bx	lr
+.size	_armv7_tick,.-_armv7_tick
+
+.global	_armv8_aes_probe
+.type	_armv8_aes_probe,%function
+_armv8_aes_probe:
+#if defined(__thumb2__) && !defined(__APPLE__)
+	.byte	0xb0,0xff,0x00,0x03	@ aese.8	q0,q0
+#else
+	.byte	0x00,0x03,0xb0,0xf3	@ aese.8	q0,q0
+#endif
+	bx	lr
+.size	_armv8_aes_probe,.-_armv8_aes_probe
+
+.global	_armv8_sha1_probe
+.type	_armv8_sha1_probe,%function
+_armv8_sha1_probe:
+#if defined(__thumb2__) && !defined(__APPLE__)
+	.byte	0x00,0xef,0x40,0x0c	@ sha1c.32	q0,q0,q0
+#else
+	.byte	0x40,0x0c,0x00,0xf2	@ sha1c.32	q0,q0,q0
+#endif
+	bx	lr
+.size	_armv8_sha1_probe,.-_armv8_sha1_probe
+
+.global	_armv8_sha256_probe
+.type	_armv8_sha256_probe,%function
+_armv8_sha256_probe:
+#if defined(__thumb2__) && !defined(__APPLE__)
+	.byte	0x00,0xff,0x40,0x0c	@ sha256h.32	q0,q0,q0
+#else
+	.byte	0x40,0x0c,0x00,0xf3	@ sha256h.32	q0,q0,q0
+#endif
+	bx	lr
+.size	_armv8_sha256_probe,.-_armv8_sha256_probe
+.global	_armv8_pmull_probe
+.type	_armv8_pmull_probe,%function
+_armv8_pmull_probe:
+#if defined(__thumb2__) && !defined(__APPLE__)
+	.byte	0xa0,0xef,0x00,0x0e	@ vmull.p64	q0,d0,d0
+#else
+	.byte	0x00,0x0e,0xa0,0xf2	@ vmull.p64	q0,d0,d0
+#endif
+	bx	lr
+.size	_armv8_pmull_probe,.-_armv8_pmull_probe
+#endif
+
+.global	OPENSSL_wipe_cpu
+.type	OPENSSL_wipe_cpu,%function
+OPENSSL_wipe_cpu:
+#if __ARM_MAX_ARCH__>=7
+	ldr	r0,.LOPENSSL_armcap
+	adr	r1,.LOPENSSL_armcap
+	ldr	r0,[r1,r0]
+#ifdef	__APPLE__
+	ldr	r0,[r0]
+#endif
+#endif
+	eor	r2,r2,r2
+	eor	r3,r3,r3
+	eor	ip,ip,ip
+#if __ARM_MAX_ARCH__>=7
+	tst	r0,#1
+	beq	.Lwipe_done
+	veor	q0, q0, q0
+	veor	q1, q1, q1
+	veor	q2, q2, q2
+	veor	q3, q3, q3
+	veor	q8, q8, q8
+	veor	q9, q9, q9
+	veor	q10, q10, q10
+	veor	q11, q11, q11
+	veor	q12, q12, q12
+	veor	q13, q13, q13
+	veor	q14, q14, q14
+	veor	q15, q15, q15
+.Lwipe_done:
+#endif
+	mov	r0,sp
+#if __ARM_ARCH__>=5
+	bx	lr
+#else
+	tst	lr,#1
+	moveq	pc,lr
+	.word	0xe12fff1e	@ bx	lr
+#endif
+.size	OPENSSL_wipe_cpu,.-OPENSSL_wipe_cpu
+
+.global	OPENSSL_instrument_bus
+.type	OPENSSL_instrument_bus,%function
+OPENSSL_instrument_bus:
+	eor	r0,r0,r0
+#if __ARM_ARCH__>=5
+	bx	lr
+#else
+	tst	lr,#1
+	moveq	pc,lr
+	.word	0xe12fff1e	@ bx	lr
+#endif
+.size	OPENSSL_instrument_bus,.-OPENSSL_instrument_bus
+
+.global	OPENSSL_instrument_bus2
+.type	OPENSSL_instrument_bus2,%function
+OPENSSL_instrument_bus2:
+	eor	r0,r0,r0
+#if __ARM_ARCH__>=5
+	bx	lr
+#else
+	tst	lr,#1
+	moveq	pc,lr
+	.word	0xe12fff1e	@ bx	lr
+#endif
+.size	OPENSSL_instrument_bus2,.-OPENSSL_instrument_bus2
+
+.align	5
+#if __ARM_MAX_ARCH__>=7
+.LOPENSSL_armcap:
+.word	OPENSSL_armcap_P-.
+#endif
+#if __ARM_ARCH__>=6
+.align	5
+#else
+.Lspinlock:
+.word	atomic_add_spinlock-.Lspinlock
+.align	5
+
+.data
+.align	2
+atomic_add_spinlock:
+.word	0
+#endif
+
+.comm	OPENSSL_armcap_P,4,4
+.hidden	OPENSSL_armcap_P
+___
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_bitstr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_bitstr.c
new file mode 100644
index 000000000..bffbd160a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_bitstr.c
@@ -0,0 +1,216 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <limits.h>
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include "asn1_locl.h"
+
+int ASN1_BIT_STRING_set(ASN1_BIT_STRING *x, unsigned char *d, int len)
+{
+    return ASN1_STRING_set(x, d, len);
+}
+
+int i2c_ASN1_BIT_STRING(ASN1_BIT_STRING *a, unsigned char **pp)
+{
+    int ret, j, bits, len;
+    unsigned char *p, *d;
+
+    if (a == NULL)
+        return 0;
+
+    len = a->length;
+
+    if (len > 0) {
+        if (a->flags & ASN1_STRING_FLAG_BITS_LEFT) {
+            bits = (int)a->flags & 0x07;
+        } else {
+            for (; len > 0; len--) {
+                if (a->data[len - 1])
+                    break;
+            }
+            j = a->data[len - 1];
+            if (j & 0x01)
+                bits = 0;
+            else if (j & 0x02)
+                bits = 1;
+            else if (j & 0x04)
+                bits = 2;
+            else if (j & 0x08)
+                bits = 3;
+            else if (j & 0x10)
+                bits = 4;
+            else if (j & 0x20)
+                bits = 5;
+            else if (j & 0x40)
+                bits = 6;
+            else if (j & 0x80)
+                bits = 7;
+            else
+                bits = 0;       /* should not happen */
+        }
+    } else
+        bits = 0;
+
+    ret = 1 + len;
+    if (pp == NULL)
+        return ret;
+
+    p = *pp;
+
+    *(p++) = (unsigned char)bits;
+    d = a->data;
+    if (len > 0) {
+        memcpy(p, d, len);
+        p += len;
+        p[-1] &= (0xff << bits);
+    }
+    *pp = p;
+    return ret;
+}
+
+ASN1_BIT_STRING *c2i_ASN1_BIT_STRING(ASN1_BIT_STRING **a,
+                                     const unsigned char **pp, long len)
+{
+    ASN1_BIT_STRING *ret = NULL;
+    const unsigned char *p;
+    unsigned char *s;
+    int i;
+
+    if (len < 1) {
+        i = ASN1_R_STRING_TOO_SHORT;
+        goto err;
+    }
+
+    if (len > INT_MAX) {
+        i = ASN1_R_STRING_TOO_LONG;
+        goto err;
+    }
+
+    if ((a == NULL) || ((*a) == NULL)) {
+        if ((ret = ASN1_BIT_STRING_new()) == NULL)
+            return NULL;
+    } else
+        ret = (*a);
+
+    p = *pp;
+    i = *(p++);
+    if (i > 7) {
+        i = ASN1_R_INVALID_BIT_STRING_BITS_LEFT;
+        goto err;
+    }
+    /*
+     * We do this to preserve the settings.  If we modify the settings, via
+     * the _set_bit function, we will recalculate on output
+     */
+    ret->flags &= ~(ASN1_STRING_FLAG_BITS_LEFT | 0x07); /* clear */
+    ret->flags |= (ASN1_STRING_FLAG_BITS_LEFT | i); /* set */
+
+    if (len-- > 1) {            /* using one because of the bits left byte */
+        s = OPENSSL_malloc((int)len);
+        if (s == NULL) {
+            i = ERR_R_MALLOC_FAILURE;
+            goto err;
+        }
+        memcpy(s, p, (int)len);
+        s[len - 1] &= (0xff << i);
+        p += len;
+    } else
+        s = NULL;
+
+    ret->length = (int)len;
+    OPENSSL_free(ret->data);
+    ret->data = s;
+    ret->type = V_ASN1_BIT_STRING;
+    if (a != NULL)
+        (*a) = ret;
+    *pp = p;
+    return ret;
+ err:
+    ASN1err(ASN1_F_C2I_ASN1_BIT_STRING, i);
+    if ((a == NULL) || (*a != ret))
+        ASN1_BIT_STRING_free(ret);
+    return NULL;
+}
+
+/*
+ * These next 2 functions from Goetz Babin-Ebell.
+ */
+int ASN1_BIT_STRING_set_bit(ASN1_BIT_STRING *a, int n, int value)
+{
+    int w, v, iv;
+    unsigned char *c;
+
+    w = n / 8;
+    v = 1 << (7 - (n & 0x07));
+    iv = ~v;
+    if (!value)
+        v = 0;
+
+    if (a == NULL)
+        return 0;
+
+    a->flags &= ~(ASN1_STRING_FLAG_BITS_LEFT | 0x07); /* clear, set on write */
+
+    if ((a->length < (w + 1)) || (a->data == NULL)) {
+        if (!value)
+            return 1;         /* Don't need to set */
+        c = OPENSSL_clear_realloc(a->data, a->length, w + 1);
+        if (c == NULL) {
+            ASN1err(ASN1_F_ASN1_BIT_STRING_SET_BIT, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        if (w + 1 - a->length > 0)
+            memset(c + a->length, 0, w + 1 - a->length);
+        a->data = c;
+        a->length = w + 1;
+    }
+    a->data[w] = ((a->data[w]) & iv) | v;
+    while ((a->length > 0) && (a->data[a->length - 1] == 0))
+        a->length--;
+    return 1;
+}
+
+int ASN1_BIT_STRING_get_bit(const ASN1_BIT_STRING *a, int n)
+{
+    int w, v;
+
+    w = n / 8;
+    v = 1 << (7 - (n & 0x07));
+    if ((a == NULL) || (a->length < (w + 1)) || (a->data == NULL))
+        return 0;
+    return ((a->data[w] & v) != 0);
+}
+
+/*
+ * Checks if the given bit string contains only bits specified by
+ * the flags vector. Returns 0 if there is at least one bit set in 'a'
+ * which is not specified in 'flags', 1 otherwise.
+ * 'len' is the length of 'flags'.
+ */
+int ASN1_BIT_STRING_check(const ASN1_BIT_STRING *a,
+                          const unsigned char *flags, int flags_len)
+{
+    int i, ok;
+    /* Check if there is one bit set at all. */
+    if (!a || !a->data)
+        return 1;
+
+    /*
+     * Check each byte of the internal representation of the bit string.
+     */
+    ok = 1;
+    for (i = 0; i < a->length && ok; ++i) {
+        unsigned char mask = i < flags_len ? ~flags[i] : 0xff;
+        /* We are done if there is an unneeded bit set. */
+        ok = (a->data[i] & mask) == 0;
+    }
+    return ok;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_d2i_fp.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_d2i_fp.c
new file mode 100644
index 000000000..a1a17901b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_d2i_fp.c
@@ -0,0 +1,234 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <limits.h>
+#include "internal/cryptlib.h"
+#include "internal/numbers.h"
+#include <openssl/buffer.h>
+#include <openssl/asn1.h>
+#include "internal/asn1_int.h"
+
+#ifndef NO_OLD_ASN1
+# ifndef OPENSSL_NO_STDIO
+
+void *ASN1_d2i_fp(void *(*xnew) (void), d2i_of_void *d2i, FILE *in, void **x)
+{
+    BIO *b;
+    void *ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        ASN1err(ASN1_F_ASN1_D2I_FP, ERR_R_BUF_LIB);
+        return NULL;
+    }
+    BIO_set_fp(b, in, BIO_NOCLOSE);
+    ret = ASN1_d2i_bio(xnew, d2i, b, x);
+    BIO_free(b);
+    return ret;
+}
+# endif
+
+void *ASN1_d2i_bio(void *(*xnew) (void), d2i_of_void *d2i, BIO *in, void **x)
+{
+    BUF_MEM *b = NULL;
+    const unsigned char *p;
+    void *ret = NULL;
+    int len;
+
+    len = asn1_d2i_read_bio(in, &b);
+    if (len < 0)
+        goto err;
+
+    p = (unsigned char *)b->data;
+    ret = d2i(x, &p, len);
+ err:
+    BUF_MEM_free(b);
+    return ret;
+}
+
+#endif
+
+void *ASN1_item_d2i_bio(const ASN1_ITEM *it, BIO *in, void *x)
+{
+    BUF_MEM *b = NULL;
+    const unsigned char *p;
+    void *ret = NULL;
+    int len;
+
+    len = asn1_d2i_read_bio(in, &b);
+    if (len < 0)
+        goto err;
+
+    p = (const unsigned char *)b->data;
+    ret = ASN1_item_d2i(x, &p, len, it);
+ err:
+    BUF_MEM_free(b);
+    return ret;
+}
+
+#ifndef OPENSSL_NO_STDIO
+void *ASN1_item_d2i_fp(const ASN1_ITEM *it, FILE *in, void *x)
+{
+    BIO *b;
+    char *ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        ASN1err(ASN1_F_ASN1_ITEM_D2I_FP, ERR_R_BUF_LIB);
+        return NULL;
+    }
+    BIO_set_fp(b, in, BIO_NOCLOSE);
+    ret = ASN1_item_d2i_bio(it, b, x);
+    BIO_free(b);
+    return ret;
+}
+#endif
+
+#define HEADER_SIZE   8
+#define ASN1_CHUNK_INITIAL_SIZE (16 * 1024)
+int asn1_d2i_read_bio(BIO *in, BUF_MEM **pb)
+{
+    BUF_MEM *b;
+    unsigned char *p;
+    int i;
+    size_t want = HEADER_SIZE;
+    uint32_t eos = 0;
+    size_t off = 0;
+    size_t len = 0;
+
+    const unsigned char *q;
+    long slen;
+    int inf, tag, xclass;
+
+    b = BUF_MEM_new();
+    if (b == NULL) {
+        ASN1err(ASN1_F_ASN1_D2I_READ_BIO, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+
+    ERR_clear_error();
+    for (;;) {
+        if (want >= (len - off)) {
+            want -= (len - off);
+
+            if (len + want < len || !BUF_MEM_grow_clean(b, len + want)) {
+                ASN1err(ASN1_F_ASN1_D2I_READ_BIO, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            i = BIO_read(in, &(b->data[len]), want);
+            if ((i < 0) && ((len - off) == 0)) {
+                ASN1err(ASN1_F_ASN1_D2I_READ_BIO, ASN1_R_NOT_ENOUGH_DATA);
+                goto err;
+            }
+            if (i > 0) {
+                if (len + i < len) {
+                    ASN1err(ASN1_F_ASN1_D2I_READ_BIO, ASN1_R_TOO_LONG);
+                    goto err;
+                }
+                len += i;
+            }
+        }
+        /* else data already loaded */
+
+        p = (unsigned char *)&(b->data[off]);
+        q = p;
+        inf = ASN1_get_object(&q, &slen, &tag, &xclass, len - off);
+        if (inf & 0x80) {
+            unsigned long e;
+
+            e = ERR_GET_REASON(ERR_peek_error());
+            if (e != ASN1_R_TOO_LONG)
+                goto err;
+            else
+                ERR_clear_error(); /* clear error */
+        }
+        i = q - p;            /* header length */
+        off += i;               /* end of data */
+
+        if (inf & 1) {
+            /* no data body so go round again */
+            if (eos == UINT32_MAX) {
+                ASN1err(ASN1_F_ASN1_D2I_READ_BIO, ASN1_R_HEADER_TOO_LONG);
+                goto err;
+            }
+            eos++;
+            want = HEADER_SIZE;
+        } else if (eos && (slen == 0) && (tag == V_ASN1_EOC)) {
+            /* eos value, so go back and read another header */
+            eos--;
+            if (eos == 0)
+                break;
+            else
+                want = HEADER_SIZE;
+        } else {
+            /* suck in slen bytes of data */
+            want = slen;
+            if (want > (len - off)) {
+                size_t chunk_max = ASN1_CHUNK_INITIAL_SIZE;
+
+                want -= (len - off);
+                if (want > INT_MAX /* BIO_read takes an int length */  ||
+                    len + want < len) {
+                    ASN1err(ASN1_F_ASN1_D2I_READ_BIO, ASN1_R_TOO_LONG);
+                    goto err;
+                }
+                while (want > 0) {
+                    /*
+                     * Read content in chunks of increasing size
+                     * so we can return an error for EOF without
+                     * having to allocate the entire content length
+                     * in one go.
+                     */
+                    size_t chunk = want > chunk_max ? chunk_max : want;
+
+                    if (!BUF_MEM_grow_clean(b, len + chunk)) {
+                        ASN1err(ASN1_F_ASN1_D2I_READ_BIO, ERR_R_MALLOC_FAILURE);
+                        goto err;
+                    }
+                    want -= chunk;
+                    while (chunk > 0) {
+                        i = BIO_read(in, &(b->data[len]), chunk);
+                        if (i <= 0) {
+                            ASN1err(ASN1_F_ASN1_D2I_READ_BIO,
+                                    ASN1_R_NOT_ENOUGH_DATA);
+                            goto err;
+                        }
+                    /*
+                     * This can't overflow because |len+want| didn't
+                     * overflow.
+                     */
+                        len += i;
+                        chunk -= i;
+                    }
+                    if (chunk_max < INT_MAX/2)
+                        chunk_max *= 2;
+                }
+            }
+            if (off + slen < off) {
+                ASN1err(ASN1_F_ASN1_D2I_READ_BIO, ASN1_R_TOO_LONG);
+                goto err;
+            }
+            off += slen;
+            if (eos == 0) {
+                break;
+            } else
+                want = HEADER_SIZE;
+        }
+    }
+
+    if (off > INT_MAX) {
+        ASN1err(ASN1_F_ASN1_D2I_READ_BIO, ASN1_R_TOO_LONG);
+        goto err;
+    }
+
+    *pb = b;
+    return off;
+ err:
+    BUF_MEM_free(b);
+    return -1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_digest.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_digest.c
new file mode 100644
index 000000000..cc3532ea7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_digest.c
@@ -0,0 +1,67 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include <sys/types.h>
+
+#include "internal/cryptlib.h"
+
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/buffer.h>
+#include <openssl/x509.h>
+
+#ifndef NO_ASN1_OLD
+
+int ASN1_digest(i2d_of_void *i2d, const EVP_MD *type, char *data,
+                unsigned char *md, unsigned int *len)
+{
+    int inl;
+    unsigned char *str, *p;
+
+    inl = i2d(data, NULL);
+    if (inl <= 0) {
+        ASN1err(ASN1_F_ASN1_DIGEST, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    if ((str = OPENSSL_malloc(inl)) == NULL) {
+        ASN1err(ASN1_F_ASN1_DIGEST, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    p = str;
+    i2d(data, &p);
+
+    if (!EVP_Digest(str, inl, md, len, type, NULL)) {
+        OPENSSL_free(str);
+        return 0;
+    }
+    OPENSSL_free(str);
+    return 1;
+}
+
+#endif
+
+int ASN1_item_digest(const ASN1_ITEM *it, const EVP_MD *type, void *asn,
+                     unsigned char *md, unsigned int *len)
+{
+    int i;
+    unsigned char *str = NULL;
+
+    i = ASN1_item_i2d(asn, &str, it);
+    if (!str)
+        return 0;
+
+    if (!EVP_Digest(str, i, md, len, type, NULL)) {
+        OPENSSL_free(str);
+        return 0;
+    }
+    OPENSSL_free(str);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_dup.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_dup.c
new file mode 100644
index 000000000..50af6b000
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_dup.c
@@ -0,0 +1,68 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+
+#ifndef NO_OLD_ASN1
+
+void *ASN1_dup(i2d_of_void *i2d, d2i_of_void *d2i, void *x)
+{
+    unsigned char *b, *p;
+    const unsigned char *p2;
+    int i;
+    char *ret;
+
+    if (x == NULL)
+        return NULL;
+
+    i = i2d(x, NULL);
+    b = OPENSSL_malloc(i + 10);
+    if (b == NULL) {
+        ASN1err(ASN1_F_ASN1_DUP, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    p = b;
+    i = i2d(x, &p);
+    p2 = b;
+    ret = d2i(NULL, &p2, i);
+    OPENSSL_free(b);
+    return ret;
+}
+
+#endif
+
+/*
+ * ASN1_ITEM version of dup: this follows the model above except we don't
+ * need to allocate the buffer. At some point this could be rewritten to
+ * directly dup the underlying structure instead of doing and encode and
+ * decode.
+ */
+
+void *ASN1_item_dup(const ASN1_ITEM *it, void *x)
+{
+    unsigned char *b = NULL;
+    const unsigned char *p;
+    long i;
+    void *ret;
+
+    if (x == NULL)
+        return NULL;
+
+    i = ASN1_item_i2d(x, &b, it);
+    if (b == NULL) {
+        ASN1err(ASN1_F_ASN1_ITEM_DUP, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    p = b;
+    ret = ASN1_item_d2i(NULL, &p, i, it);
+    OPENSSL_free(b);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_gentm.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_gentm.c
new file mode 100644
index 000000000..d3878d6e5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_gentm.c
@@ -0,0 +1,82 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * GENERALIZEDTIME implementation. Based on UTCTIME
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include "asn1_locl.h"
+
+/* This is the primary function used to parse ASN1_GENERALIZEDTIME */
+int asn1_generalizedtime_to_tm(struct tm *tm, const ASN1_GENERALIZEDTIME *d)
+{
+    /* wrapper around asn1_time_to_tm */
+    if (d->type != V_ASN1_GENERALIZEDTIME)
+        return 0;
+    return asn1_time_to_tm(tm, d);
+}
+
+int ASN1_GENERALIZEDTIME_check(const ASN1_GENERALIZEDTIME *d)
+{
+    return asn1_generalizedtime_to_tm(NULL, d);
+}
+
+int ASN1_GENERALIZEDTIME_set_string(ASN1_GENERALIZEDTIME *s, const char *str)
+{
+    ASN1_GENERALIZEDTIME t;
+
+    t.type = V_ASN1_GENERALIZEDTIME;
+    t.length = strlen(str);
+    t.data = (unsigned char *)str;
+    t.flags = 0;
+
+    if (!ASN1_GENERALIZEDTIME_check(&t))
+        return 0;
+
+    if (s != NULL && !ASN1_STRING_copy(s, &t))
+        return 0;
+
+    return 1;
+}
+
+ASN1_GENERALIZEDTIME *ASN1_GENERALIZEDTIME_set(ASN1_GENERALIZEDTIME *s,
+                                               time_t t)
+{
+    return ASN1_GENERALIZEDTIME_adj(s, t, 0, 0);
+}
+
+ASN1_GENERALIZEDTIME *ASN1_GENERALIZEDTIME_adj(ASN1_GENERALIZEDTIME *s,
+                                               time_t t, int offset_day,
+                                               long offset_sec)
+{
+    struct tm *ts;
+    struct tm data;
+
+    ts = OPENSSL_gmtime(&t, &data);
+    if (ts == NULL)
+        return NULL;
+
+    if (offset_day || offset_sec) {
+        if (!OPENSSL_gmtime_adj(ts, offset_day, offset_sec))
+            return NULL;
+    }
+
+    return asn1_time_from_tm(s, ts, V_ASN1_GENERALIZEDTIME);
+}
+
+int ASN1_GENERALIZEDTIME_print(BIO *bp, const ASN1_GENERALIZEDTIME *tm)
+{
+    if (tm->type != V_ASN1_GENERALIZEDTIME)
+        return 0;
+    return ASN1_TIME_print(bp, tm);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_i2d_fp.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_i2d_fp.c
new file mode 100644
index 000000000..980c65a25
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_i2d_fp.c
@@ -0,0 +1,111 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/asn1.h>
+
+#ifndef NO_OLD_ASN1
+
+# ifndef OPENSSL_NO_STDIO
+int ASN1_i2d_fp(i2d_of_void *i2d, FILE *out, void *x)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        ASN1err(ASN1_F_ASN1_I2D_FP, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, out, BIO_NOCLOSE);
+    ret = ASN1_i2d_bio(i2d, b, x);
+    BIO_free(b);
+    return ret;
+}
+# endif
+
+int ASN1_i2d_bio(i2d_of_void *i2d, BIO *out, unsigned char *x)
+{
+    char *b;
+    unsigned char *p;
+    int i, j = 0, n, ret = 1;
+
+    n = i2d(x, NULL);
+    if (n <= 0)
+        return 0;
+
+    b = OPENSSL_malloc(n);
+    if (b == NULL) {
+        ASN1err(ASN1_F_ASN1_I2D_BIO, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    p = (unsigned char *)b;
+    i2d(x, &p);
+
+    for (;;) {
+        i = BIO_write(out, &(b[j]), n);
+        if (i == n)
+            break;
+        if (i <= 0) {
+            ret = 0;
+            break;
+        }
+        j += i;
+        n -= i;
+    }
+    OPENSSL_free(b);
+    return ret;
+}
+
+#endif
+
+#ifndef OPENSSL_NO_STDIO
+int ASN1_item_i2d_fp(const ASN1_ITEM *it, FILE *out, void *x)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        ASN1err(ASN1_F_ASN1_ITEM_I2D_FP, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, out, BIO_NOCLOSE);
+    ret = ASN1_item_i2d_bio(it, b, x);
+    BIO_free(b);
+    return ret;
+}
+#endif
+
+int ASN1_item_i2d_bio(const ASN1_ITEM *it, BIO *out, void *x)
+{
+    unsigned char *b = NULL;
+    int i, j = 0, n, ret = 1;
+
+    n = ASN1_item_i2d(x, &b, it);
+    if (b == NULL) {
+        ASN1err(ASN1_F_ASN1_ITEM_I2D_BIO, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    for (;;) {
+        i = BIO_write(out, &(b[j]), n);
+        if (i == n)
+            break;
+        if (i <= 0) {
+            ret = 0;
+            break;
+        }
+        j += i;
+        n -= i;
+    }
+    OPENSSL_free(b);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_int.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_int.c
new file mode 100644
index 000000000..70a45cb3c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_int.c
@@ -0,0 +1,630 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "internal/numbers.h"
+#include <limits.h>
+#include <openssl/asn1.h>
+#include <openssl/bn.h>
+#include "asn1_locl.h"
+
+ASN1_INTEGER *ASN1_INTEGER_dup(const ASN1_INTEGER *x)
+{
+    return ASN1_STRING_dup(x);
+}
+
+int ASN1_INTEGER_cmp(const ASN1_INTEGER *x, const ASN1_INTEGER *y)
+{
+    int neg, ret;
+    /* Compare signs */
+    neg = x->type & V_ASN1_NEG;
+    if (neg != (y->type & V_ASN1_NEG)) {
+        if (neg)
+            return -1;
+        else
+            return 1;
+    }
+
+    ret = ASN1_STRING_cmp(x, y);
+
+    if (neg)
+        return -ret;
+    else
+        return ret;
+}
+
+/*-
+ * This converts a big endian buffer and sign into its content encoding.
+ * This is used for INTEGER and ENUMERATED types.
+ * The internal representation is an ASN1_STRING whose data is a big endian
+ * representation of the value, ignoring the sign. The sign is determined by
+ * the type: if type & V_ASN1_NEG is true it is negative, otherwise positive.
+ *
+ * Positive integers are no problem: they are almost the same as the DER
+ * encoding, except if the first byte is >= 0x80 we need to add a zero pad.
+ *
+ * Negative integers are a bit trickier...
+ * The DER representation of negative integers is in 2s complement form.
+ * The internal form is converted by complementing each octet and finally
+ * adding one to the result. This can be done less messily with a little trick.
+ * If the internal form has trailing zeroes then they will become FF by the
+ * complement and 0 by the add one (due to carry) so just copy as many trailing
+ * zeros to the destination as there are in the source. The carry will add one
+ * to the last none zero octet: so complement this octet and add one and finally
+ * complement any left over until you get to the start of the string.
+ *
+ * Padding is a little trickier too. If the first bytes is > 0x80 then we pad
+ * with 0xff. However if the first byte is 0x80 and one of the following bytes
+ * is non-zero we pad with 0xff. The reason for this distinction is that 0x80
+ * followed by optional zeros isn't padded.
+ */
+
+/*
+ * If |pad| is zero, the operation is effectively reduced to memcpy,
+ * and if |pad| is 0xff, then it performs two's complement, ~dst + 1.
+ * Note that in latter case sequence of zeros yields itself, and so
+ * does 0x80 followed by any number of zeros. These properties are
+ * used elsewhere below...
+ */
+static void twos_complement(unsigned char *dst, const unsigned char *src,
+                            size_t len, unsigned char pad)
+{
+    unsigned int carry = pad & 1;
+
+    /* Begin at the end of the encoding */
+    dst += len;
+    src += len;
+    /* two's complement value: ~value + 1 */
+    while (len-- != 0) {
+        *(--dst) = (unsigned char)(carry += *(--src) ^ pad);
+        carry >>= 8;
+    }
+}
+
+static size_t i2c_ibuf(const unsigned char *b, size_t blen, int neg,
+                       unsigned char **pp)
+{
+    unsigned int pad = 0;
+    size_t ret, i;
+    unsigned char *p, pb = 0;
+
+    if (b != NULL && blen) {
+        ret = blen;
+        i = b[0];
+        if (!neg && (i > 127)) {
+            pad = 1;
+            pb = 0;
+        } else if (neg) {
+            pb = 0xFF;
+            if (i > 128) {
+                pad = 1;
+            } else if (i == 128) {
+                /*
+                 * Special case [of minimal negative for given length]:
+                 * if any other bytes non zero we pad, otherwise we don't.
+                 */
+                for (pad = 0, i = 1; i < blen; i++)
+                    pad |= b[i];
+                pb = pad != 0 ? 0xffU : 0;
+                pad = pb & 1;
+            }
+        }
+        ret += pad;
+    } else {
+        ret = 1;
+        blen = 0;   /* reduce '(b == NULL || blen == 0)' to '(blen == 0)' */
+    }
+
+    if (pp == NULL || (p = *pp) == NULL)
+        return ret;
+
+    /*
+     * This magically handles all corner cases, such as '(b == NULL ||
+     * blen == 0)', non-negative value, "negative" zero, 0x80 followed
+     * by any number of zeros...
+     */
+    *p = pb;
+    p += pad;       /* yes, p[0] can be written twice, but it's little
+                     * price to pay for eliminated branches */
+    twos_complement(p, b, blen, pb);
+
+    *pp += ret;
+    return ret;
+}
+
+/*
+ * convert content octets into a big endian buffer. Returns the length
+ * of buffer or 0 on error: for malformed INTEGER. If output buffer is
+ * NULL just return length.
+ */
+
+static size_t c2i_ibuf(unsigned char *b, int *pneg,
+                       const unsigned char *p, size_t plen)
+{
+    int neg, pad;
+    /* Zero content length is illegal */
+    if (plen == 0) {
+        ASN1err(ASN1_F_C2I_IBUF, ASN1_R_ILLEGAL_ZERO_CONTENT);
+        return 0;
+    }
+    neg = p[0] & 0x80;
+    if (pneg)
+        *pneg = neg;
+    /* Handle common case where length is 1 octet separately */
+    if (plen == 1) {
+        if (b != NULL) {
+            if (neg)
+                b[0] = (p[0] ^ 0xFF) + 1;
+            else
+                b[0] = p[0];
+        }
+        return 1;
+    }
+
+    pad = 0;
+    if (p[0] == 0) {
+        pad = 1;
+    } else if (p[0] == 0xFF) {
+        size_t i;
+
+        /*
+         * Special case [of "one less minimal negative" for given length]:
+         * if any other bytes non zero it was padded, otherwise not.
+         */
+        for (pad = 0, i = 1; i < plen; i++)
+            pad |= p[i];
+        pad = pad != 0 ? 1 : 0;
+    }
+    /* reject illegal padding: first two octets MSB can't match */
+    if (pad && (neg == (p[1] & 0x80))) {
+        ASN1err(ASN1_F_C2I_IBUF, ASN1_R_ILLEGAL_PADDING);
+        return 0;
+    }
+
+    /* skip over pad */
+    p += pad;
+    plen -= pad;
+
+    if (b != NULL)
+        twos_complement(b, p, plen, neg ? 0xffU : 0);
+
+    return plen;
+}
+
+int i2c_ASN1_INTEGER(ASN1_INTEGER *a, unsigned char **pp)
+{
+    return i2c_ibuf(a->data, a->length, a->type & V_ASN1_NEG, pp);
+}
+
+/* Convert big endian buffer into uint64_t, return 0 on error */
+static int asn1_get_uint64(uint64_t *pr, const unsigned char *b, size_t blen)
+{
+    size_t i;
+    uint64_t r;
+
+    if (blen > sizeof(*pr)) {
+        ASN1err(ASN1_F_ASN1_GET_UINT64, ASN1_R_TOO_LARGE);
+        return 0;
+    }
+    if (b == NULL)
+        return 0;
+    for (r = 0, i = 0; i < blen; i++) {
+        r <<= 8;
+        r |= b[i];
+    }
+    *pr = r;
+    return 1;
+}
+
+/*
+ * Write uint64_t to big endian buffer and return offset to first
+ * written octet. In other words it returns offset in range from 0
+ * to 7, with 0 denoting 8 written octets and 7 - one.
+ */
+static size_t asn1_put_uint64(unsigned char b[sizeof(uint64_t)], uint64_t r)
+{
+    size_t off = sizeof(uint64_t);
+
+    do {
+        b[--off] = (unsigned char)r;
+    } while (r >>= 8);
+
+    return off;
+}
+
+/*
+ * Absolute value of INT64_MIN: we can't just use -INT64_MIN as gcc produces
+ * overflow warnings.
+ */
+#define ABS_INT64_MIN ((uint64_t)INT64_MAX + (-(INT64_MIN + INT64_MAX)))
+
+/* signed version of asn1_get_uint64 */
+static int asn1_get_int64(int64_t *pr, const unsigned char *b, size_t blen,
+                          int neg)
+{
+    uint64_t r;
+    if (asn1_get_uint64(&r, b, blen) == 0)
+        return 0;
+    if (neg) {
+        if (r <= INT64_MAX) {
+            /* Most significant bit is guaranteed to be clear, negation
+             * is guaranteed to be meaningful in platform-neutral sense. */
+            *pr = -(int64_t)r;
+        } else if (r == ABS_INT64_MIN) {
+            /* This never happens if INT64_MAX == ABS_INT64_MIN, e.g.
+             * on ones'-complement system. */
+            *pr = (int64_t)(0 - r);
+        } else {
+            ASN1err(ASN1_F_ASN1_GET_INT64, ASN1_R_TOO_SMALL);
+            return 0;
+        }
+    } else {
+        if (r <= INT64_MAX) {
+            *pr = (int64_t)r;
+        } else {
+            ASN1err(ASN1_F_ASN1_GET_INT64, ASN1_R_TOO_LARGE);
+            return 0;
+        }
+    }
+    return 1;
+}
+
+/* Convert ASN1 INTEGER content octets to ASN1_INTEGER structure */
+ASN1_INTEGER *c2i_ASN1_INTEGER(ASN1_INTEGER **a, const unsigned char **pp,
+                               long len)
+{
+    ASN1_INTEGER *ret = NULL;
+    size_t r;
+    int neg;
+
+    r = c2i_ibuf(NULL, NULL, *pp, len);
+
+    if (r == 0)
+        return NULL;
+
+    if ((a == NULL) || ((*a) == NULL)) {
+        ret = ASN1_INTEGER_new();
+        if (ret == NULL)
+            return NULL;
+        ret->type = V_ASN1_INTEGER;
+    } else
+        ret = *a;
+
+    if (ASN1_STRING_set(ret, NULL, r) == 0)
+        goto err;
+
+    c2i_ibuf(ret->data, &neg, *pp, len);
+
+    if (neg)
+        ret->type |= V_ASN1_NEG;
+
+    *pp += len;
+    if (a != NULL)
+        (*a) = ret;
+    return ret;
+ err:
+    ASN1err(ASN1_F_C2I_ASN1_INTEGER, ERR_R_MALLOC_FAILURE);
+    if ((a == NULL) || (*a != ret))
+        ASN1_INTEGER_free(ret);
+    return NULL;
+}
+
+static int asn1_string_get_int64(int64_t *pr, const ASN1_STRING *a, int itype)
+{
+    if (a == NULL) {
+        ASN1err(ASN1_F_ASN1_STRING_GET_INT64, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    if ((a->type & ~V_ASN1_NEG) != itype) {
+        ASN1err(ASN1_F_ASN1_STRING_GET_INT64, ASN1_R_WRONG_INTEGER_TYPE);
+        return 0;
+    }
+    return asn1_get_int64(pr, a->data, a->length, a->type & V_ASN1_NEG);
+}
+
+static int asn1_string_set_int64(ASN1_STRING *a, int64_t r, int itype)
+{
+    unsigned char tbuf[sizeof(r)];
+    size_t off;
+
+    a->type = itype;
+    if (r < 0) {
+        /* Most obvious '-r' triggers undefined behaviour for most
+         * common INT64_MIN. Even though below '0 - (uint64_t)r' can
+         * appear two's-complement centric, it does produce correct/
+         * expected result even on one's-complement. This is because
+         * cast to unsigned has to change bit pattern... */
+        off = asn1_put_uint64(tbuf, 0 - (uint64_t)r);
+        a->type |= V_ASN1_NEG;
+    } else {
+        off = asn1_put_uint64(tbuf, r);
+        a->type &= ~V_ASN1_NEG;
+    }
+    return ASN1_STRING_set(a, tbuf + off, sizeof(tbuf) - off);
+}
+
+static int asn1_string_get_uint64(uint64_t *pr, const ASN1_STRING *a,
+                                  int itype)
+{
+    if (a == NULL) {
+        ASN1err(ASN1_F_ASN1_STRING_GET_UINT64, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    if ((a->type & ~V_ASN1_NEG) != itype) {
+        ASN1err(ASN1_F_ASN1_STRING_GET_UINT64, ASN1_R_WRONG_INTEGER_TYPE);
+        return 0;
+    }
+    if (a->type & V_ASN1_NEG) {
+        ASN1err(ASN1_F_ASN1_STRING_GET_UINT64, ASN1_R_ILLEGAL_NEGATIVE_VALUE);
+        return 0;
+    }
+    return asn1_get_uint64(pr, a->data, a->length);
+}
+
+static int asn1_string_set_uint64(ASN1_STRING *a, uint64_t r, int itype)
+{
+    unsigned char tbuf[sizeof(r)];
+    size_t off;
+
+    a->type = itype;
+    off = asn1_put_uint64(tbuf, r);
+    return ASN1_STRING_set(a, tbuf + off, sizeof(tbuf) - off);
+}
+
+/*
+ * This is a version of d2i_ASN1_INTEGER that ignores the sign bit of ASN1
+ * integers: some broken software can encode a positive INTEGER with its MSB
+ * set as negative (it doesn't add a padding zero).
+ */
+
+ASN1_INTEGER *d2i_ASN1_UINTEGER(ASN1_INTEGER **a, const unsigned char **pp,
+                                long length)
+{
+    ASN1_INTEGER *ret = NULL;
+    const unsigned char *p;
+    unsigned char *s;
+    long len;
+    int inf, tag, xclass;
+    int i;
+
+    if ((a == NULL) || ((*a) == NULL)) {
+        if ((ret = ASN1_INTEGER_new()) == NULL)
+            return NULL;
+        ret->type = V_ASN1_INTEGER;
+    } else
+        ret = (*a);
+
+    p = *pp;
+    inf = ASN1_get_object(&p, &len, &tag, &xclass, length);
+    if (inf & 0x80) {
+        i = ASN1_R_BAD_OBJECT_HEADER;
+        goto err;
+    }
+
+    if (tag != V_ASN1_INTEGER) {
+        i = ASN1_R_EXPECTING_AN_INTEGER;
+        goto err;
+    }
+
+    /*
+     * We must OPENSSL_malloc stuff, even for 0 bytes otherwise it signifies
+     * a missing NULL parameter.
+     */
+    s = OPENSSL_malloc((int)len + 1);
+    if (s == NULL) {
+        i = ERR_R_MALLOC_FAILURE;
+        goto err;
+    }
+    ret->type = V_ASN1_INTEGER;
+    if (len) {
+        if ((*p == 0) && (len != 1)) {
+            p++;
+            len--;
+        }
+        memcpy(s, p, (int)len);
+        p += len;
+    }
+
+    OPENSSL_free(ret->data);
+    ret->data = s;
+    ret->length = (int)len;
+    if (a != NULL)
+        (*a) = ret;
+    *pp = p;
+    return ret;
+ err:
+    ASN1err(ASN1_F_D2I_ASN1_UINTEGER, i);
+    if ((a == NULL) || (*a != ret))
+        ASN1_INTEGER_free(ret);
+    return NULL;
+}
+
+static ASN1_STRING *bn_to_asn1_string(const BIGNUM *bn, ASN1_STRING *ai,
+                                      int atype)
+{
+    ASN1_INTEGER *ret;
+    int len;
+
+    if (ai == NULL) {
+        ret = ASN1_STRING_type_new(atype);
+    } else {
+        ret = ai;
+        ret->type = atype;
+    }
+
+    if (ret == NULL) {
+        ASN1err(ASN1_F_BN_TO_ASN1_STRING, ERR_R_NESTED_ASN1_ERROR);
+        goto err;
+    }
+
+    if (BN_is_negative(bn) && !BN_is_zero(bn))
+        ret->type |= V_ASN1_NEG_INTEGER;
+
+    len = BN_num_bytes(bn);
+
+    if (len == 0)
+        len = 1;
+
+    if (ASN1_STRING_set(ret, NULL, len) == 0) {
+        ASN1err(ASN1_F_BN_TO_ASN1_STRING, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    /* Correct zero case */
+    if (BN_is_zero(bn))
+        ret->data[0] = 0;
+    else
+        len = BN_bn2bin(bn, ret->data);
+    ret->length = len;
+    return ret;
+ err:
+    if (ret != ai)
+        ASN1_INTEGER_free(ret);
+    return NULL;
+}
+
+static BIGNUM *asn1_string_to_bn(const ASN1_INTEGER *ai, BIGNUM *bn,
+                                 int itype)
+{
+    BIGNUM *ret;
+
+    if ((ai->type & ~V_ASN1_NEG) != itype) {
+        ASN1err(ASN1_F_ASN1_STRING_TO_BN, ASN1_R_WRONG_INTEGER_TYPE);
+        return NULL;
+    }
+
+    ret = BN_bin2bn(ai->data, ai->length, bn);
+    if (ret == NULL) {
+        ASN1err(ASN1_F_ASN1_STRING_TO_BN, ASN1_R_BN_LIB);
+        return NULL;
+    }
+    if (ai->type & V_ASN1_NEG)
+        BN_set_negative(ret, 1);
+    return ret;
+}
+
+int ASN1_INTEGER_get_int64(int64_t *pr, const ASN1_INTEGER *a)
+{
+    return asn1_string_get_int64(pr, a, V_ASN1_INTEGER);
+}
+
+int ASN1_INTEGER_set_int64(ASN1_INTEGER *a, int64_t r)
+{
+    return asn1_string_set_int64(a, r, V_ASN1_INTEGER);
+}
+
+int ASN1_INTEGER_get_uint64(uint64_t *pr, const ASN1_INTEGER *a)
+{
+    return asn1_string_get_uint64(pr, a, V_ASN1_INTEGER);
+}
+
+int ASN1_INTEGER_set_uint64(ASN1_INTEGER *a, uint64_t r)
+{
+    return asn1_string_set_uint64(a, r, V_ASN1_INTEGER);
+}
+
+int ASN1_INTEGER_set(ASN1_INTEGER *a, long v)
+{
+    return ASN1_INTEGER_set_int64(a, v);
+}
+
+long ASN1_INTEGER_get(const ASN1_INTEGER *a)
+{
+    int i;
+    int64_t r;
+    if (a == NULL)
+        return 0;
+    i = ASN1_INTEGER_get_int64(&r, a);
+    if (i == 0)
+        return -1;
+    if (r > LONG_MAX || r < LONG_MIN)
+        return -1;
+    return (long)r;
+}
+
+ASN1_INTEGER *BN_to_ASN1_INTEGER(const BIGNUM *bn, ASN1_INTEGER *ai)
+{
+    return bn_to_asn1_string(bn, ai, V_ASN1_INTEGER);
+}
+
+BIGNUM *ASN1_INTEGER_to_BN(const ASN1_INTEGER *ai, BIGNUM *bn)
+{
+    return asn1_string_to_bn(ai, bn, V_ASN1_INTEGER);
+}
+
+int ASN1_ENUMERATED_get_int64(int64_t *pr, const ASN1_ENUMERATED *a)
+{
+    return asn1_string_get_int64(pr, a, V_ASN1_ENUMERATED);
+}
+
+int ASN1_ENUMERATED_set_int64(ASN1_ENUMERATED *a, int64_t r)
+{
+    return asn1_string_set_int64(a, r, V_ASN1_ENUMERATED);
+}
+
+int ASN1_ENUMERATED_set(ASN1_ENUMERATED *a, long v)
+{
+    return ASN1_ENUMERATED_set_int64(a, v);
+}
+
+long ASN1_ENUMERATED_get(const ASN1_ENUMERATED *a)
+{
+    int i;
+    int64_t r;
+    if (a == NULL)
+        return 0;
+    if ((a->type & ~V_ASN1_NEG) != V_ASN1_ENUMERATED)
+        return -1;
+    if (a->length > (int)sizeof(long))
+        return 0xffffffffL;
+    i = ASN1_ENUMERATED_get_int64(&r, a);
+    if (i == 0)
+        return -1;
+    if (r > LONG_MAX || r < LONG_MIN)
+        return -1;
+    return (long)r;
+}
+
+ASN1_ENUMERATED *BN_to_ASN1_ENUMERATED(const BIGNUM *bn, ASN1_ENUMERATED *ai)
+{
+    return bn_to_asn1_string(bn, ai, V_ASN1_ENUMERATED);
+}
+
+BIGNUM *ASN1_ENUMERATED_to_BN(const ASN1_ENUMERATED *ai, BIGNUM *bn)
+{
+    return asn1_string_to_bn(ai, bn, V_ASN1_ENUMERATED);
+}
+
+/* Internal functions used by x_int64.c */
+int c2i_uint64_int(uint64_t *ret, int *neg, const unsigned char **pp, long len)
+{
+    unsigned char buf[sizeof(uint64_t)];
+    size_t buflen;
+
+    buflen = c2i_ibuf(NULL, NULL, *pp, len);
+    if (buflen == 0)
+        return 0;
+    if (buflen > sizeof(uint64_t)) {
+        ASN1err(ASN1_F_C2I_UINT64_INT, ASN1_R_TOO_LARGE);
+        return 0;
+    }
+    (void)c2i_ibuf(buf, neg, *pp, len);
+    return asn1_get_uint64(ret, buf, buflen);
+}
+
+int i2c_uint64_int(unsigned char *p, uint64_t r, int neg)
+{
+    unsigned char buf[sizeof(uint64_t)];
+    size_t off;
+
+    off = asn1_put_uint64(buf, r);
+    return i2c_ibuf(buf + off, sizeof(buf) - off, neg, &p);
+}
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_mbstr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_mbstr.c
new file mode 100644
index 000000000..949fe6c16
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_mbstr.c
@@ -0,0 +1,343 @@
+/*
+ * Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/ctype.h"
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+
+static int traverse_string(const unsigned char *p, int len, int inform,
+                           int (*rfunc) (unsigned long value, void *in),
+                           void *arg);
+static int in_utf8(unsigned long value, void *arg);
+static int out_utf8(unsigned long value, void *arg);
+static int type_str(unsigned long value, void *arg);
+static int cpy_asc(unsigned long value, void *arg);
+static int cpy_bmp(unsigned long value, void *arg);
+static int cpy_univ(unsigned long value, void *arg);
+static int cpy_utf8(unsigned long value, void *arg);
+
+/*
+ * These functions take a string in UTF8, ASCII or multibyte form and a mask
+ * of permissible ASN1 string types. It then works out the minimal type
+ * (using the order Numeric < Printable < IA5 < T61 < BMP < Universal < UTF8)
+ * and creates a string of the correct type with the supplied data. Yes this is
+ * horrible: it has to be :-( The 'ncopy' form checks minimum and maximum
+ * size limits too.
+ */
+
+int ASN1_mbstring_copy(ASN1_STRING **out, const unsigned char *in, int len,
+                       int inform, unsigned long mask)
+{
+    return ASN1_mbstring_ncopy(out, in, len, inform, mask, 0, 0);
+}
+
+int ASN1_mbstring_ncopy(ASN1_STRING **out, const unsigned char *in, int len,
+                        int inform, unsigned long mask,
+                        long minsize, long maxsize)
+{
+    int str_type;
+    int ret;
+    char free_out;
+    int outform, outlen = 0;
+    ASN1_STRING *dest;
+    unsigned char *p;
+    int nchar;
+    char strbuf[32];
+    int (*cpyfunc) (unsigned long, void *) = NULL;
+    if (len == -1)
+        len = strlen((const char *)in);
+    if (!mask)
+        mask = DIRSTRING_TYPE;
+
+    /* First do a string check and work out the number of characters */
+    switch (inform) {
+
+    case MBSTRING_BMP:
+        if (len & 1) {
+            ASN1err(ASN1_F_ASN1_MBSTRING_NCOPY,
+                    ASN1_R_INVALID_BMPSTRING_LENGTH);
+            return -1;
+        }
+        nchar = len >> 1;
+        break;
+
+    case MBSTRING_UNIV:
+        if (len & 3) {
+            ASN1err(ASN1_F_ASN1_MBSTRING_NCOPY,
+                    ASN1_R_INVALID_UNIVERSALSTRING_LENGTH);
+            return -1;
+        }
+        nchar = len >> 2;
+        break;
+
+    case MBSTRING_UTF8:
+        nchar = 0;
+        /* This counts the characters and does utf8 syntax checking */
+        ret = traverse_string(in, len, MBSTRING_UTF8, in_utf8, &nchar);
+        if (ret < 0) {
+            ASN1err(ASN1_F_ASN1_MBSTRING_NCOPY, ASN1_R_INVALID_UTF8STRING);
+            return -1;
+        }
+        break;
+
+    case MBSTRING_ASC:
+        nchar = len;
+        break;
+
+    default:
+        ASN1err(ASN1_F_ASN1_MBSTRING_NCOPY, ASN1_R_UNKNOWN_FORMAT);
+        return -1;
+    }
+
+    if ((minsize > 0) && (nchar < minsize)) {
+        ASN1err(ASN1_F_ASN1_MBSTRING_NCOPY, ASN1_R_STRING_TOO_SHORT);
+        BIO_snprintf(strbuf, sizeof(strbuf), "%ld", minsize);
+        ERR_add_error_data(2, "minsize=", strbuf);
+        return -1;
+    }
+
+    if ((maxsize > 0) && (nchar > maxsize)) {
+        ASN1err(ASN1_F_ASN1_MBSTRING_NCOPY, ASN1_R_STRING_TOO_LONG);
+        BIO_snprintf(strbuf, sizeof(strbuf), "%ld", maxsize);
+        ERR_add_error_data(2, "maxsize=", strbuf);
+        return -1;
+    }
+
+    /* Now work out minimal type (if any) */
+    if (traverse_string(in, len, inform, type_str, &mask) < 0) {
+        ASN1err(ASN1_F_ASN1_MBSTRING_NCOPY, ASN1_R_ILLEGAL_CHARACTERS);
+        return -1;
+    }
+
+    /* Now work out output format and string type */
+    outform = MBSTRING_ASC;
+    if (mask & B_ASN1_NUMERICSTRING)
+        str_type = V_ASN1_NUMERICSTRING;
+    else if (mask & B_ASN1_PRINTABLESTRING)
+        str_type = V_ASN1_PRINTABLESTRING;
+    else if (mask & B_ASN1_IA5STRING)
+        str_type = V_ASN1_IA5STRING;
+    else if (mask & B_ASN1_T61STRING)
+        str_type = V_ASN1_T61STRING;
+    else if (mask & B_ASN1_BMPSTRING) {
+        str_type = V_ASN1_BMPSTRING;
+        outform = MBSTRING_BMP;
+    } else if (mask & B_ASN1_UNIVERSALSTRING) {
+        str_type = V_ASN1_UNIVERSALSTRING;
+        outform = MBSTRING_UNIV;
+    } else {
+        str_type = V_ASN1_UTF8STRING;
+        outform = MBSTRING_UTF8;
+    }
+    if (!out)
+        return str_type;
+    if (*out) {
+        free_out = 0;
+        dest = *out;
+        OPENSSL_free(dest->data);
+        dest->data = NULL;
+        dest->length = 0;
+        dest->type = str_type;
+    } else {
+        free_out = 1;
+        dest = ASN1_STRING_type_new(str_type);
+        if (dest == NULL) {
+            ASN1err(ASN1_F_ASN1_MBSTRING_NCOPY, ERR_R_MALLOC_FAILURE);
+            return -1;
+        }
+        *out = dest;
+    }
+    /* If both the same type just copy across */
+    if (inform == outform) {
+        if (!ASN1_STRING_set(dest, in, len)) {
+            ASN1err(ASN1_F_ASN1_MBSTRING_NCOPY, ERR_R_MALLOC_FAILURE);
+            return -1;
+        }
+        return str_type;
+    }
+
+    /* Work out how much space the destination will need */
+    switch (outform) {
+    case MBSTRING_ASC:
+        outlen = nchar;
+        cpyfunc = cpy_asc;
+        break;
+
+    case MBSTRING_BMP:
+        outlen = nchar << 1;
+        cpyfunc = cpy_bmp;
+        break;
+
+    case MBSTRING_UNIV:
+        outlen = nchar << 2;
+        cpyfunc = cpy_univ;
+        break;
+
+    case MBSTRING_UTF8:
+        outlen = 0;
+        traverse_string(in, len, inform, out_utf8, &outlen);
+        cpyfunc = cpy_utf8;
+        break;
+    }
+    if ((p = OPENSSL_malloc(outlen + 1)) == NULL) {
+        if (free_out)
+            ASN1_STRING_free(dest);
+        ASN1err(ASN1_F_ASN1_MBSTRING_NCOPY, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+    dest->length = outlen;
+    dest->data = p;
+    p[outlen] = 0;
+    traverse_string(in, len, inform, cpyfunc, &p);
+    return str_type;
+}
+
+/*
+ * This function traverses a string and passes the value of each character to
+ * an optional function along with a void * argument.
+ */
+
+static int traverse_string(const unsigned char *p, int len, int inform,
+                           int (*rfunc) (unsigned long value, void *in),
+                           void *arg)
+{
+    unsigned long value;
+    int ret;
+    while (len) {
+        if (inform == MBSTRING_ASC) {
+            value = *p++;
+            len--;
+        } else if (inform == MBSTRING_BMP) {
+            value = *p++ << 8;
+            value |= *p++;
+            len -= 2;
+        } else if (inform == MBSTRING_UNIV) {
+            value = ((unsigned long)*p++) << 24;
+            value |= ((unsigned long)*p++) << 16;
+            value |= *p++ << 8;
+            value |= *p++;
+            len -= 4;
+        } else {
+            ret = UTF8_getc(p, len, &value);
+            if (ret < 0)
+                return -1;
+            len -= ret;
+            p += ret;
+        }
+        if (rfunc) {
+            ret = rfunc(value, arg);
+            if (ret <= 0)
+                return ret;
+        }
+    }
+    return 1;
+}
+
+/* Various utility functions for traverse_string */
+
+/* Just count number of characters */
+
+static int in_utf8(unsigned long value, void *arg)
+{
+    int *nchar;
+    nchar = arg;
+    (*nchar)++;
+    return 1;
+}
+
+/* Determine size of output as a UTF8 String */
+
+static int out_utf8(unsigned long value, void *arg)
+{
+    int *outlen;
+    outlen = arg;
+    *outlen += UTF8_putc(NULL, -1, value);
+    return 1;
+}
+
+/*
+ * Determine the "type" of a string: check each character against a supplied
+ * "mask".
+ */
+
+static int type_str(unsigned long value, void *arg)
+{
+    unsigned long types = *((unsigned long *)arg);
+    const int native = value > INT_MAX ? INT_MAX : ossl_fromascii(value);
+
+    if ((types & B_ASN1_NUMERICSTRING) && !(ossl_isdigit(native)
+                                            || native == ' '))
+        types &= ~B_ASN1_NUMERICSTRING;
+    if ((types & B_ASN1_PRINTABLESTRING) && !ossl_isasn1print(native))
+        types &= ~B_ASN1_PRINTABLESTRING;
+    if ((types & B_ASN1_IA5STRING) && !ossl_isascii(native))
+        types &= ~B_ASN1_IA5STRING;
+    if ((types & B_ASN1_T61STRING) && (value > 0xff))
+        types &= ~B_ASN1_T61STRING;
+    if ((types & B_ASN1_BMPSTRING) && (value > 0xffff))
+        types &= ~B_ASN1_BMPSTRING;
+    if (!types)
+        return -1;
+    *((unsigned long *)arg) = types;
+    return 1;
+}
+
+/* Copy one byte per character ASCII like strings */
+
+static int cpy_asc(unsigned long value, void *arg)
+{
+    unsigned char **p, *q;
+    p = arg;
+    q = *p;
+    *q = (unsigned char)value;
+    (*p)++;
+    return 1;
+}
+
+/* Copy two byte per character BMPStrings */
+
+static int cpy_bmp(unsigned long value, void *arg)
+{
+    unsigned char **p, *q;
+    p = arg;
+    q = *p;
+    *q++ = (unsigned char)((value >> 8) & 0xff);
+    *q = (unsigned char)(value & 0xff);
+    *p += 2;
+    return 1;
+}
+
+/* Copy four byte per character UniversalStrings */
+
+static int cpy_univ(unsigned long value, void *arg)
+{
+    unsigned char **p, *q;
+    p = arg;
+    q = *p;
+    *q++ = (unsigned char)((value >> 24) & 0xff);
+    *q++ = (unsigned char)((value >> 16) & 0xff);
+    *q++ = (unsigned char)((value >> 8) & 0xff);
+    *q = (unsigned char)(value & 0xff);
+    *p += 4;
+    return 1;
+}
+
+/* Copy to a UTF8String */
+
+static int cpy_utf8(unsigned long value, void *arg)
+{
+    unsigned char **p;
+    int ret;
+    p = arg;
+    /* We already know there is enough room so pass 0xff as the length */
+    ret = UTF8_putc(*p, 0xff, value);
+    *p += ret;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_object.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_object.c
new file mode 100644
index 000000000..5e1424a80
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_object.c
@@ -0,0 +1,383 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <limits.h>
+#include "internal/ctype.h"
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/asn1.h>
+#include <openssl/objects.h>
+#include <openssl/bn.h>
+#include "internal/asn1_int.h"
+#include "asn1_locl.h"
+
+int i2d_ASN1_OBJECT(const ASN1_OBJECT *a, unsigned char **pp)
+{
+    unsigned char *p, *allocated = NULL;
+    int objsize;
+
+    if ((a == NULL) || (a->data == NULL))
+        return 0;
+
+    objsize = ASN1_object_size(0, a->length, V_ASN1_OBJECT);
+    if (pp == NULL || objsize == -1)
+        return objsize;
+
+    if (*pp == NULL) {
+        if ((p = allocated = OPENSSL_malloc(objsize)) == NULL) {
+            ASN1err(ASN1_F_I2D_ASN1_OBJECT, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+    } else {
+        p = *pp;
+    }
+
+    ASN1_put_object(&p, 0, a->length, V_ASN1_OBJECT, V_ASN1_UNIVERSAL);
+    memcpy(p, a->data, a->length);
+
+    /*
+     * If a new buffer was allocated, just return it back.
+     * If not, return the incremented buffer pointer.
+     */
+    *pp = allocated != NULL ? allocated : p + a->length;
+    return objsize;
+}
+
+int a2d_ASN1_OBJECT(unsigned char *out, int olen, const char *buf, int num)
+{
+    int i, first, len = 0, c, use_bn;
+    char ftmp[24], *tmp = ftmp;
+    int tmpsize = sizeof(ftmp);
+    const char *p;
+    unsigned long l;
+    BIGNUM *bl = NULL;
+
+    if (num == 0)
+        return 0;
+    else if (num == -1)
+        num = strlen(buf);
+
+    p = buf;
+    c = *(p++);
+    num--;
+    if ((c >= '0') && (c <= '2')) {
+        first = c - '0';
+    } else {
+        ASN1err(ASN1_F_A2D_ASN1_OBJECT, ASN1_R_FIRST_NUM_TOO_LARGE);
+        goto err;
+    }
+
+    if (num <= 0) {
+        ASN1err(ASN1_F_A2D_ASN1_OBJECT, ASN1_R_MISSING_SECOND_NUMBER);
+        goto err;
+    }
+    c = *(p++);
+    num--;
+    for (;;) {
+        if (num <= 0)
+            break;
+        if ((c != '.') && (c != ' ')) {
+            ASN1err(ASN1_F_A2D_ASN1_OBJECT, ASN1_R_INVALID_SEPARATOR);
+            goto err;
+        }
+        l = 0;
+        use_bn = 0;
+        for (;;) {
+            if (num <= 0)
+                break;
+            num--;
+            c = *(p++);
+            if ((c == ' ') || (c == '.'))
+                break;
+            if (!ossl_isdigit(c)) {
+                ASN1err(ASN1_F_A2D_ASN1_OBJECT, ASN1_R_INVALID_DIGIT);
+                goto err;
+            }
+            if (!use_bn && l >= ((ULONG_MAX - 80) / 10L)) {
+                use_bn = 1;
+                if (bl == NULL)
+                    bl = BN_new();
+                if (bl == NULL || !BN_set_word(bl, l))
+                    goto err;
+            }
+            if (use_bn) {
+                if (!BN_mul_word(bl, 10L)
+                    || !BN_add_word(bl, c - '0'))
+                    goto err;
+            } else
+                l = l * 10L + (long)(c - '0');
+        }
+        if (len == 0) {
+            if ((first < 2) && (l >= 40)) {
+                ASN1err(ASN1_F_A2D_ASN1_OBJECT,
+                        ASN1_R_SECOND_NUMBER_TOO_LARGE);
+                goto err;
+            }
+            if (use_bn) {
+                if (!BN_add_word(bl, first * 40))
+                    goto err;
+            } else
+                l += (long)first *40;
+        }
+        i = 0;
+        if (use_bn) {
+            int blsize;
+            blsize = BN_num_bits(bl);
+            blsize = (blsize + 6) / 7;
+            if (blsize > tmpsize) {
+                if (tmp != ftmp)
+                    OPENSSL_free(tmp);
+                tmpsize = blsize + 32;
+                tmp = OPENSSL_malloc(tmpsize);
+                if (tmp == NULL)
+                    goto err;
+            }
+            while (blsize--) {
+                BN_ULONG t = BN_div_word(bl, 0x80L);
+                if (t == (BN_ULONG)-1)
+                    goto err;
+                tmp[i++] = (unsigned char)t;
+            }
+        } else {
+
+            for (;;) {
+                tmp[i++] = (unsigned char)l & 0x7f;
+                l >>= 7L;
+                if (l == 0L)
+                    break;
+            }
+
+        }
+        if (out != NULL) {
+            if (len + i > olen) {
+                ASN1err(ASN1_F_A2D_ASN1_OBJECT, ASN1_R_BUFFER_TOO_SMALL);
+                goto err;
+            }
+            while (--i > 0)
+                out[len++] = tmp[i] | 0x80;
+            out[len++] = tmp[0];
+        } else
+            len += i;
+    }
+    if (tmp != ftmp)
+        OPENSSL_free(tmp);
+    BN_free(bl);
+    return len;
+ err:
+    if (tmp != ftmp)
+        OPENSSL_free(tmp);
+    BN_free(bl);
+    return 0;
+}
+
+int i2t_ASN1_OBJECT(char *buf, int buf_len, const ASN1_OBJECT *a)
+{
+    return OBJ_obj2txt(buf, buf_len, a, 0);
+}
+
+int i2a_ASN1_OBJECT(BIO *bp, const ASN1_OBJECT *a)
+{
+    char buf[80], *p = buf;
+    int i;
+
+    if ((a == NULL) || (a->data == NULL))
+        return BIO_write(bp, "NULL", 4);
+    i = i2t_ASN1_OBJECT(buf, sizeof(buf), a);
+    if (i > (int)(sizeof(buf) - 1)) {
+        if ((p = OPENSSL_malloc(i + 1)) == NULL) {
+            ASN1err(ASN1_F_I2A_ASN1_OBJECT, ERR_R_MALLOC_FAILURE);
+            return -1;
+        }
+        i2t_ASN1_OBJECT(p, i + 1, a);
+    }
+    if (i <= 0) {
+        i = BIO_write(bp, "<INVALID>", 9);
+        i += BIO_dump(bp, (const char *)a->data, a->length);
+        return i;
+    }
+    BIO_write(bp, p, i);
+    if (p != buf)
+        OPENSSL_free(p);
+    return i;
+}
+
+ASN1_OBJECT *d2i_ASN1_OBJECT(ASN1_OBJECT **a, const unsigned char **pp,
+                             long length)
+{
+    const unsigned char *p;
+    long len;
+    int tag, xclass;
+    int inf, i;
+    ASN1_OBJECT *ret = NULL;
+    p = *pp;
+    inf = ASN1_get_object(&p, &len, &tag, &xclass, length);
+    if (inf & 0x80) {
+        i = ASN1_R_BAD_OBJECT_HEADER;
+        goto err;
+    }
+
+    if (tag != V_ASN1_OBJECT) {
+        i = ASN1_R_EXPECTING_AN_OBJECT;
+        goto err;
+    }
+    ret = c2i_ASN1_OBJECT(a, &p, len);
+    if (ret)
+        *pp = p;
+    return ret;
+ err:
+    ASN1err(ASN1_F_D2I_ASN1_OBJECT, i);
+    return NULL;
+}
+
+ASN1_OBJECT *c2i_ASN1_OBJECT(ASN1_OBJECT **a, const unsigned char **pp,
+                             long len)
+{
+    ASN1_OBJECT *ret = NULL, tobj;
+    const unsigned char *p;
+    unsigned char *data;
+    int i, length;
+
+    /*
+     * Sanity check OID encoding. Need at least one content octet. MSB must
+     * be clear in the last octet. can't have leading 0x80 in subidentifiers,
+     * see: X.690 8.19.2
+     */
+    if (len <= 0 || len > INT_MAX || pp == NULL || (p = *pp) == NULL ||
+        p[len - 1] & 0x80) {
+        ASN1err(ASN1_F_C2I_ASN1_OBJECT, ASN1_R_INVALID_OBJECT_ENCODING);
+        return NULL;
+    }
+    /* Now 0 < len <= INT_MAX, so the cast is safe. */
+    length = (int)len;
+    /*
+     * Try to lookup OID in table: these are all valid encodings so if we get
+     * a match we know the OID is valid.
+     */
+    tobj.nid = NID_undef;
+    tobj.data = p;
+    tobj.length = length;
+    tobj.flags = 0;
+    i = OBJ_obj2nid(&tobj);
+    if (i != NID_undef) {
+        /*
+         * Return shared registered OID object: this improves efficiency
+         * because we don't have to return a dynamically allocated OID
+         * and NID lookups can use the cached value.
+         */
+        ret = OBJ_nid2obj(i);
+        if (a) {
+            ASN1_OBJECT_free(*a);
+            *a = ret;
+        }
+        *pp += len;
+        return ret;
+    }
+    for (i = 0; i < length; i++, p++) {
+        if (*p == 0x80 && (!i || !(p[-1] & 0x80))) {
+            ASN1err(ASN1_F_C2I_ASN1_OBJECT, ASN1_R_INVALID_OBJECT_ENCODING);
+            return NULL;
+        }
+    }
+
+    /*
+     * only the ASN1_OBJECTs from the 'table' will have values for ->sn or
+     * ->ln
+     */
+    if ((a == NULL) || ((*a) == NULL) ||
+        !((*a)->flags & ASN1_OBJECT_FLAG_DYNAMIC)) {
+        if ((ret = ASN1_OBJECT_new()) == NULL)
+            return NULL;
+    } else
+        ret = (*a);
+
+    p = *pp;
+    /* detach data from object */
+    data = (unsigned char *)ret->data;
+    ret->data = NULL;
+    /* once detached we can change it */
+    if ((data == NULL) || (ret->length < length)) {
+        ret->length = 0;
+        OPENSSL_free(data);
+        data = OPENSSL_malloc(length);
+        if (data == NULL) {
+            i = ERR_R_MALLOC_FAILURE;
+            goto err;
+        }
+        ret->flags |= ASN1_OBJECT_FLAG_DYNAMIC_DATA;
+    }
+    memcpy(data, p, length);
+    /* reattach data to object, after which it remains const */
+    ret->data = data;
+    ret->length = length;
+    ret->sn = NULL;
+    ret->ln = NULL;
+    /* ret->flags=ASN1_OBJECT_FLAG_DYNAMIC; we know it is dynamic */
+    p += length;
+
+    if (a != NULL)
+        (*a) = ret;
+    *pp = p;
+    return ret;
+ err:
+    ASN1err(ASN1_F_C2I_ASN1_OBJECT, i);
+    if ((a == NULL) || (*a != ret))
+        ASN1_OBJECT_free(ret);
+    return NULL;
+}
+
+ASN1_OBJECT *ASN1_OBJECT_new(void)
+{
+    ASN1_OBJECT *ret;
+
+    ret = OPENSSL_zalloc(sizeof(*ret));
+    if (ret == NULL) {
+        ASN1err(ASN1_F_ASN1_OBJECT_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    ret->flags = ASN1_OBJECT_FLAG_DYNAMIC;
+    return ret;
+}
+
+void ASN1_OBJECT_free(ASN1_OBJECT *a)
+{
+    if (a == NULL)
+        return;
+    if (a->flags & ASN1_OBJECT_FLAG_DYNAMIC_STRINGS) {
+#ifndef CONST_STRICT            /* disable purely for compile-time strict
+                                 * const checking. Doing this on a "real"
+                                 * compile will cause memory leaks */
+        OPENSSL_free((void*)a->sn);
+        OPENSSL_free((void*)a->ln);
+#endif
+        a->sn = a->ln = NULL;
+    }
+    if (a->flags & ASN1_OBJECT_FLAG_DYNAMIC_DATA) {
+        OPENSSL_free((void*)a->data);
+        a->data = NULL;
+        a->length = 0;
+    }
+    if (a->flags & ASN1_OBJECT_FLAG_DYNAMIC)
+        OPENSSL_free(a);
+}
+
+ASN1_OBJECT *ASN1_OBJECT_create(int nid, unsigned char *data, int len,
+                                const char *sn, const char *ln)
+{
+    ASN1_OBJECT o;
+
+    o.sn = sn;
+    o.ln = ln;
+    o.data = data;
+    o.nid = nid;
+    o.length = len;
+    o.flags = ASN1_OBJECT_FLAG_DYNAMIC | ASN1_OBJECT_FLAG_DYNAMIC_STRINGS |
+        ASN1_OBJECT_FLAG_DYNAMIC_DATA;
+    return OBJ_dup(&o);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_octet.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_octet.c
new file mode 100644
index 000000000..2e1205cae
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_octet.c
@@ -0,0 +1,29 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+
+ASN1_OCTET_STRING *ASN1_OCTET_STRING_dup(const ASN1_OCTET_STRING *x)
+{
+    return ASN1_STRING_dup(x);
+}
+
+int ASN1_OCTET_STRING_cmp(const ASN1_OCTET_STRING *a,
+                          const ASN1_OCTET_STRING *b)
+{
+    return ASN1_STRING_cmp(a, b);
+}
+
+int ASN1_OCTET_STRING_set(ASN1_OCTET_STRING *x, const unsigned char *d,
+                          int len)
+{
+    return ASN1_STRING_set(x, d, len);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_print.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_print.c
new file mode 100644
index 000000000..8a373d9da
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_print.c
@@ -0,0 +1,95 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/ctype.h"
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+
+int ASN1_PRINTABLE_type(const unsigned char *s, int len)
+{
+    int c;
+    int ia5 = 0;
+    int t61 = 0;
+
+    if (len <= 0)
+        len = -1;
+    if (s == NULL)
+        return V_ASN1_PRINTABLESTRING;
+
+    while ((*s) && (len-- != 0)) {
+        c = *(s++);
+        if (!ossl_isasn1print(c))
+            ia5 = 1;
+        if (!ossl_isascii(c))
+            t61 = 1;
+    }
+    if (t61)
+        return V_ASN1_T61STRING;
+    if (ia5)
+        return V_ASN1_IA5STRING;
+    return V_ASN1_PRINTABLESTRING;
+}
+
+int ASN1_UNIVERSALSTRING_to_string(ASN1_UNIVERSALSTRING *s)
+{
+    int i;
+    unsigned char *p;
+
+    if (s->type != V_ASN1_UNIVERSALSTRING)
+        return 0;
+    if ((s->length % 4) != 0)
+        return 0;
+    p = s->data;
+    for (i = 0; i < s->length; i += 4) {
+        if ((p[0] != '\0') || (p[1] != '\0') || (p[2] != '\0'))
+            break;
+        else
+            p += 4;
+    }
+    if (i < s->length)
+        return 0;
+    p = s->data;
+    for (i = 3; i < s->length; i += 4) {
+        *(p++) = s->data[i];
+    }
+    *(p) = '\0';
+    s->length /= 4;
+    s->type = ASN1_PRINTABLE_type(s->data, s->length);
+    return 1;
+}
+
+int ASN1_STRING_print(BIO *bp, const ASN1_STRING *v)
+{
+    int i, n;
+    char buf[80];
+    const char *p;
+
+    if (v == NULL)
+        return 0;
+    n = 0;
+    p = (const char *)v->data;
+    for (i = 0; i < v->length; i++) {
+        if ((p[i] > '~') || ((p[i] < ' ') &&
+                             (p[i] != '\n') && (p[i] != '\r')))
+            buf[n] = '.';
+        else
+            buf[n] = p[i];
+        n++;
+        if (n >= 80) {
+            if (BIO_write(bp, buf, n) <= 0)
+                return 0;
+            n = 0;
+        }
+    }
+    if (n > 0)
+        if (BIO_write(bp, buf, n) <= 0)
+            return 0;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_sign.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_sign.c
new file mode 100644
index 000000000..146fdb962
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_sign.c
@@ -0,0 +1,241 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include <sys/types.h>
+
+#include "internal/cryptlib.h"
+
+#include <openssl/bn.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/objects.h>
+#include <openssl/buffer.h>
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+
+#ifndef NO_ASN1_OLD
+
+int ASN1_sign(i2d_of_void *i2d, X509_ALGOR *algor1, X509_ALGOR *algor2,
+              ASN1_BIT_STRING *signature, char *data, EVP_PKEY *pkey,
+              const EVP_MD *type)
+{
+    EVP_MD_CTX *ctx = EVP_MD_CTX_new();
+    unsigned char *p, *buf_in = NULL, *buf_out = NULL;
+    int i, inl = 0, outl = 0;
+    size_t inll = 0, outll = 0;
+    X509_ALGOR *a;
+
+    if (ctx == NULL) {
+        ASN1err(ASN1_F_ASN1_SIGN, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    for (i = 0; i < 2; i++) {
+        if (i == 0)
+            a = algor1;
+        else
+            a = algor2;
+        if (a == NULL)
+            continue;
+        if (type->pkey_type == NID_dsaWithSHA1) {
+            /*
+             * special case: RFC 2459 tells us to omit 'parameters' with
+             * id-dsa-with-sha1
+             */
+            ASN1_TYPE_free(a->parameter);
+            a->parameter = NULL;
+        } else if ((a->parameter == NULL) ||
+                   (a->parameter->type != V_ASN1_NULL)) {
+            ASN1_TYPE_free(a->parameter);
+            if ((a->parameter = ASN1_TYPE_new()) == NULL)
+                goto err;
+            a->parameter->type = V_ASN1_NULL;
+        }
+        ASN1_OBJECT_free(a->algorithm);
+        a->algorithm = OBJ_nid2obj(type->pkey_type);
+        if (a->algorithm == NULL) {
+            ASN1err(ASN1_F_ASN1_SIGN, ASN1_R_UNKNOWN_OBJECT_TYPE);
+            goto err;
+        }
+        if (a->algorithm->length == 0) {
+            ASN1err(ASN1_F_ASN1_SIGN,
+                    ASN1_R_THE_ASN1_OBJECT_IDENTIFIER_IS_NOT_KNOWN_FOR_THIS_MD);
+            goto err;
+        }
+    }
+    inl = i2d(data, NULL);
+    if (inl <= 0) {
+        ASN1err(ASN1_F_ASN1_SIGN, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    inll = (size_t)inl;
+    buf_in = OPENSSL_malloc(inll);
+    outll = outl = EVP_PKEY_size(pkey);
+    buf_out = OPENSSL_malloc(outll);
+    if (buf_in == NULL || buf_out == NULL) {
+        outl = 0;
+        ASN1err(ASN1_F_ASN1_SIGN, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    p = buf_in;
+
+    i2d(data, &p);
+    if (!EVP_SignInit_ex(ctx, type, NULL)
+        || !EVP_SignUpdate(ctx, (unsigned char *)buf_in, inl)
+        || !EVP_SignFinal(ctx, (unsigned char *)buf_out,
+                          (unsigned int *)&outl, pkey)) {
+        outl = 0;
+        ASN1err(ASN1_F_ASN1_SIGN, ERR_R_EVP_LIB);
+        goto err;
+    }
+    OPENSSL_free(signature->data);
+    signature->data = buf_out;
+    buf_out = NULL;
+    signature->length = outl;
+    /*
+     * In the interests of compatibility, I'll make sure that the bit string
+     * has a 'not-used bits' value of 0
+     */
+    signature->flags &= ~(ASN1_STRING_FLAG_BITS_LEFT | 0x07);
+    signature->flags |= ASN1_STRING_FLAG_BITS_LEFT;
+ err:
+    EVP_MD_CTX_free(ctx);
+    OPENSSL_clear_free((char *)buf_in, inll);
+    OPENSSL_clear_free((char *)buf_out, outll);
+    return outl;
+}
+
+#endif
+
+int ASN1_item_sign(const ASN1_ITEM *it, X509_ALGOR *algor1,
+                   X509_ALGOR *algor2, ASN1_BIT_STRING *signature, void *asn,
+                   EVP_PKEY *pkey, const EVP_MD *type)
+{
+    int rv;
+    EVP_MD_CTX *ctx = EVP_MD_CTX_new();
+
+    if (ctx == NULL) {
+        ASN1err(ASN1_F_ASN1_ITEM_SIGN, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    if (!EVP_DigestSignInit(ctx, NULL, type, NULL, pkey)) {
+        EVP_MD_CTX_free(ctx);
+        return 0;
+    }
+
+    rv = ASN1_item_sign_ctx(it, algor1, algor2, signature, asn, ctx);
+
+    EVP_MD_CTX_free(ctx);
+    return rv;
+}
+
+int ASN1_item_sign_ctx(const ASN1_ITEM *it,
+                       X509_ALGOR *algor1, X509_ALGOR *algor2,
+                       ASN1_BIT_STRING *signature, void *asn, EVP_MD_CTX *ctx)
+{
+    const EVP_MD *type;
+    EVP_PKEY *pkey;
+    unsigned char *buf_in = NULL, *buf_out = NULL;
+    size_t inl = 0, outl = 0, outll = 0;
+    int signid, paramtype, buf_len = 0;
+    int rv;
+
+    type = EVP_MD_CTX_md(ctx);
+    pkey = EVP_PKEY_CTX_get0_pkey(EVP_MD_CTX_pkey_ctx(ctx));
+
+    if (pkey == NULL) {
+        ASN1err(ASN1_F_ASN1_ITEM_SIGN_CTX, ASN1_R_CONTEXT_NOT_INITIALISED);
+        goto err;
+    }
+
+    if (pkey->ameth == NULL) {
+        ASN1err(ASN1_F_ASN1_ITEM_SIGN_CTX, ASN1_R_DIGEST_AND_KEY_TYPE_NOT_SUPPORTED);
+        goto err;
+    }
+
+    if (pkey->ameth->item_sign) {
+        rv = pkey->ameth->item_sign(ctx, it, asn, algor1, algor2, signature);
+        if (rv == 1)
+            outl = signature->length;
+        /*-
+         * Return value meanings:
+         * <=0: error.
+         *   1: method does everything.
+         *   2: carry on as normal.
+         *   3: ASN1 method sets algorithm identifiers: just sign.
+         */
+        if (rv <= 0)
+            ASN1err(ASN1_F_ASN1_ITEM_SIGN_CTX, ERR_R_EVP_LIB);
+        if (rv <= 1)
+            goto err;
+    } else {
+        rv = 2;
+    }
+
+    if (rv == 2) {
+        if (type == NULL) {
+            ASN1err(ASN1_F_ASN1_ITEM_SIGN_CTX, ASN1_R_CONTEXT_NOT_INITIALISED);
+            goto err;
+        }
+        if (!OBJ_find_sigid_by_algs(&signid,
+                                    EVP_MD_nid(type),
+                                    pkey->ameth->pkey_id)) {
+            ASN1err(ASN1_F_ASN1_ITEM_SIGN_CTX,
+                    ASN1_R_DIGEST_AND_KEY_TYPE_NOT_SUPPORTED);
+            goto err;
+        }
+
+        if (pkey->ameth->pkey_flags & ASN1_PKEY_SIGPARAM_NULL)
+            paramtype = V_ASN1_NULL;
+        else
+            paramtype = V_ASN1_UNDEF;
+
+        if (algor1)
+            X509_ALGOR_set0(algor1, OBJ_nid2obj(signid), paramtype, NULL);
+        if (algor2)
+            X509_ALGOR_set0(algor2, OBJ_nid2obj(signid), paramtype, NULL);
+
+    }
+
+    buf_len = ASN1_item_i2d(asn, &buf_in, it);
+    if (buf_len <= 0) {
+        outl = 0;
+        ASN1err(ASN1_F_ASN1_ITEM_SIGN_CTX, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    inl = buf_len;
+    outll = outl = EVP_PKEY_size(pkey);
+    buf_out = OPENSSL_malloc(outll);
+    if (buf_in == NULL || buf_out == NULL) {
+        outl = 0;
+        ASN1err(ASN1_F_ASN1_ITEM_SIGN_CTX, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (!EVP_DigestSign(ctx, buf_out, &outl, buf_in, inl)) {
+        outl = 0;
+        ASN1err(ASN1_F_ASN1_ITEM_SIGN_CTX, ERR_R_EVP_LIB);
+        goto err;
+    }
+    OPENSSL_free(signature->data);
+    signature->data = buf_out;
+    buf_out = NULL;
+    signature->length = outl;
+    /*
+     * In the interests of compatibility, I'll make sure that the bit string
+     * has a 'not-used bits' value of 0
+     */
+    signature->flags &= ~(ASN1_STRING_FLAG_BITS_LEFT | 0x07);
+    signature->flags |= ASN1_STRING_FLAG_BITS_LEFT;
+ err:
+    OPENSSL_clear_free((char *)buf_in, inl);
+    OPENSSL_clear_free((char *)buf_out, outll);
+    return outl;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_strex.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_strex.c
new file mode 100644
index 000000000..ea4dd1c5b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_strex.c
@@ -0,0 +1,626 @@
+/*
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include "internal/cryptlib.h"
+#include "internal/asn1_int.h"
+#include <openssl/crypto.h>
+#include <openssl/x509.h>
+#include <openssl/asn1.h>
+
+#include "charmap.h"
+
+/*
+ * ASN1_STRING_print_ex() and X509_NAME_print_ex(). Enhanced string and name
+ * printing routines handling multibyte characters, RFC2253 and a host of
+ * other options.
+ */
+
+#define CHARTYPE_BS_ESC         (ASN1_STRFLGS_ESC_2253 | CHARTYPE_FIRST_ESC_2253 | CHARTYPE_LAST_ESC_2253)
+
+#define ESC_FLAGS (ASN1_STRFLGS_ESC_2253 | \
+                  ASN1_STRFLGS_ESC_2254 | \
+                  ASN1_STRFLGS_ESC_QUOTE | \
+                  ASN1_STRFLGS_ESC_CTRL | \
+                  ASN1_STRFLGS_ESC_MSB)
+
+/*
+ * Three IO functions for sending data to memory, a BIO and and a FILE
+ * pointer.
+ */
+static int send_bio_chars(void *arg, const void *buf, int len)
+{
+    if (!arg)
+        return 1;
+    if (BIO_write(arg, buf, len) != len)
+        return 0;
+    return 1;
+}
+
+#ifndef OPENSSL_NO_STDIO
+static int send_fp_chars(void *arg, const void *buf, int len)
+{
+    if (!arg)
+        return 1;
+    if (fwrite(buf, 1, len, arg) != (unsigned int)len)
+        return 0;
+    return 1;
+}
+#endif
+
+typedef int char_io (void *arg, const void *buf, int len);
+
+/*
+ * This function handles display of strings, one character at a time. It is
+ * passed an unsigned long for each character because it could come from 2 or
+ * even 4 byte forms.
+ */
+
+static int do_esc_char(unsigned long c, unsigned short flags, char *do_quotes,
+                       char_io *io_ch, void *arg)
+{
+    unsigned short chflgs;
+    unsigned char chtmp;
+    char tmphex[HEX_SIZE(long) + 3];
+
+    if (c > 0xffffffffL)
+        return -1;
+    if (c > 0xffff) {
+        BIO_snprintf(tmphex, sizeof(tmphex), "\\W%08lX", c);
+        if (!io_ch(arg, tmphex, 10))
+            return -1;
+        return 10;
+    }
+    if (c > 0xff) {
+        BIO_snprintf(tmphex, sizeof(tmphex), "\\U%04lX", c);
+        if (!io_ch(arg, tmphex, 6))
+            return -1;
+        return 6;
+    }
+    chtmp = (unsigned char)c;
+    if (chtmp > 0x7f)
+        chflgs = flags & ASN1_STRFLGS_ESC_MSB;
+    else
+        chflgs = char_type[chtmp] & flags;
+    if (chflgs & CHARTYPE_BS_ESC) {
+        /* If we don't escape with quotes, signal we need quotes */
+        if (chflgs & ASN1_STRFLGS_ESC_QUOTE) {
+            if (do_quotes)
+                *do_quotes = 1;
+            if (!io_ch(arg, &chtmp, 1))
+                return -1;
+            return 1;
+        }
+        if (!io_ch(arg, "\\", 1))
+            return -1;
+        if (!io_ch(arg, &chtmp, 1))
+            return -1;
+        return 2;
+    }
+    if (chflgs & (ASN1_STRFLGS_ESC_CTRL
+                  | ASN1_STRFLGS_ESC_MSB
+                  | ASN1_STRFLGS_ESC_2254)) {
+        BIO_snprintf(tmphex, 11, "\\%02X", chtmp);
+        if (!io_ch(arg, tmphex, 3))
+            return -1;
+        return 3;
+    }
+    /*
+     * If we get this far and do any escaping at all must escape the escape
+     * character itself: backslash.
+     */
+    if (chtmp == '\\' && (flags & ESC_FLAGS)) {
+        if (!io_ch(arg, "\\\\", 2))
+            return -1;
+        return 2;
+    }
+    if (!io_ch(arg, &chtmp, 1))
+        return -1;
+    return 1;
+}
+
+#define BUF_TYPE_WIDTH_MASK     0x7
+#define BUF_TYPE_CONVUTF8       0x8
+
+/*
+ * This function sends each character in a buffer to do_esc_char(). It
+ * interprets the content formats and converts to or from UTF8 as
+ * appropriate.
+ */
+
+static int do_buf(unsigned char *buf, int buflen,
+                  int type, unsigned short flags, char *quotes, char_io *io_ch,
+                  void *arg)
+{
+    int i, outlen, len, charwidth;
+    unsigned short orflags;
+    unsigned char *p, *q;
+    unsigned long c;
+
+    p = buf;
+    q = buf + buflen;
+    outlen = 0;
+    charwidth = type & BUF_TYPE_WIDTH_MASK;
+
+    switch (charwidth) {
+    case 4:
+        if (buflen & 3) {
+            ASN1err(ASN1_F_DO_BUF, ASN1_R_INVALID_UNIVERSALSTRING_LENGTH);
+            return -1;
+        }
+        break;
+    case 2:
+        if (buflen & 1) {
+            ASN1err(ASN1_F_DO_BUF, ASN1_R_INVALID_BMPSTRING_LENGTH);
+            return -1;
+        }
+        break;
+    default:
+        break;
+    }
+
+    while (p != q) {
+        if (p == buf && flags & ASN1_STRFLGS_ESC_2253)
+            orflags = CHARTYPE_FIRST_ESC_2253;
+        else
+            orflags = 0;
+
+        switch (charwidth) {
+        case 4:
+            c = ((unsigned long)*p++) << 24;
+            c |= ((unsigned long)*p++) << 16;
+            c |= ((unsigned long)*p++) << 8;
+            c |= *p++;
+            break;
+
+        case 2:
+            c = ((unsigned long)*p++) << 8;
+            c |= *p++;
+            break;
+
+        case 1:
+            c = *p++;
+            break;
+
+        case 0:
+            i = UTF8_getc(p, buflen, &c);
+            if (i < 0)
+                return -1;      /* Invalid UTF8String */
+            buflen -= i;
+            p += i;
+            break;
+        default:
+            return -1;          /* invalid width */
+        }
+        if (p == q && flags & ASN1_STRFLGS_ESC_2253)
+            orflags = CHARTYPE_LAST_ESC_2253;
+        if (type & BUF_TYPE_CONVUTF8) {
+            unsigned char utfbuf[6];
+            int utflen;
+            utflen = UTF8_putc(utfbuf, sizeof(utfbuf), c);
+            for (i = 0; i < utflen; i++) {
+                /*
+                 * We don't need to worry about setting orflags correctly
+                 * because if utflen==1 its value will be correct anyway
+                 * otherwise each character will be > 0x7f and so the
+                 * character will never be escaped on first and last.
+                 */
+                len = do_esc_char(utfbuf[i], flags | orflags, quotes,
+                                  io_ch, arg);
+                if (len < 0)
+                    return -1;
+                outlen += len;
+            }
+        } else {
+            len = do_esc_char(c, flags | orflags, quotes,
+                              io_ch, arg);
+            if (len < 0)
+                return -1;
+            outlen += len;
+        }
+    }
+    return outlen;
+}
+
+/* This function hex dumps a buffer of characters */
+
+static int do_hex_dump(char_io *io_ch, void *arg, unsigned char *buf,
+                       int buflen)
+{
+    static const char hexdig[] = "0123456789ABCDEF";
+    unsigned char *p, *q;
+    char hextmp[2];
+    if (arg) {
+        p = buf;
+        q = buf + buflen;
+        while (p != q) {
+            hextmp[0] = hexdig[*p >> 4];
+            hextmp[1] = hexdig[*p & 0xf];
+            if (!io_ch(arg, hextmp, 2))
+                return -1;
+            p++;
+        }
+    }
+    return buflen << 1;
+}
+
+/*
+ * "dump" a string. This is done when the type is unknown, or the flags
+ * request it. We can either dump the content octets or the entire DER
+ * encoding. This uses the RFC2253 #01234 format.
+ */
+
+static int do_dump(unsigned long lflags, char_io *io_ch, void *arg,
+                   const ASN1_STRING *str)
+{
+    /*
+     * Placing the ASN1_STRING in a temp ASN1_TYPE allows the DER encoding to
+     * readily obtained
+     */
+    ASN1_TYPE t;
+    unsigned char *der_buf, *p;
+    int outlen, der_len;
+
+    if (!io_ch(arg, "#", 1))
+        return -1;
+    /* If we don't dump DER encoding just dump content octets */
+    if (!(lflags & ASN1_STRFLGS_DUMP_DER)) {
+        outlen = do_hex_dump(io_ch, arg, str->data, str->length);
+        if (outlen < 0)
+            return -1;
+        return outlen + 1;
+    }
+    t.type = str->type;
+    t.value.ptr = (char *)str;
+    der_len = i2d_ASN1_TYPE(&t, NULL);
+    if ((der_buf = OPENSSL_malloc(der_len)) == NULL) {
+        ASN1err(ASN1_F_DO_DUMP, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+    p = der_buf;
+    i2d_ASN1_TYPE(&t, &p);
+    outlen = do_hex_dump(io_ch, arg, der_buf, der_len);
+    OPENSSL_free(der_buf);
+    if (outlen < 0)
+        return -1;
+    return outlen + 1;
+}
+
+/*
+ * Lookup table to convert tags to character widths, 0 = UTF8 encoded, -1 is
+ * used for non string types otherwise it is the number of bytes per
+ * character
+ */
+
+static const signed char tag2nbyte[] = {
+    -1, -1, -1, -1, -1,         /* 0-4 */
+    -1, -1, -1, -1, -1,         /* 5-9 */
+    -1, -1,                     /* 10-11 */
+     0,                         /* 12 V_ASN1_UTF8STRING */
+    -1, -1, -1, -1, -1,         /* 13-17 */
+     1,                         /* 18 V_ASN1_NUMERICSTRING */
+     1,                         /* 19 V_ASN1_PRINTABLESTRING */
+     1,                         /* 20 V_ASN1_T61STRING */
+    -1,                         /* 21 */
+     1,                         /* 22 V_ASN1_IA5STRING */
+     1,                         /* 23 V_ASN1_UTCTIME */
+     1,                         /* 24 V_ASN1_GENERALIZEDTIME */
+    -1,                         /* 25 */
+     1,                         /* 26 V_ASN1_ISO64STRING */
+    -1,                         /* 27 */
+     4,                         /* 28 V_ASN1_UNIVERSALSTRING */
+    -1,                         /* 29 */
+     2                          /* 30 V_ASN1_BMPSTRING */
+};
+
+/*
+ * This is the main function, print out an ASN1_STRING taking note of various
+ * escape and display options. Returns number of characters written or -1 if
+ * an error occurred.
+ */
+
+static int do_print_ex(char_io *io_ch, void *arg, unsigned long lflags,
+                       const ASN1_STRING *str)
+{
+    int outlen, len;
+    int type;
+    char quotes;
+    unsigned short flags;
+    quotes = 0;
+    /* Keep a copy of escape flags */
+    flags = (unsigned short)(lflags & ESC_FLAGS);
+
+    type = str->type;
+
+    outlen = 0;
+
+    if (lflags & ASN1_STRFLGS_SHOW_TYPE) {
+        const char *tagname;
+        tagname = ASN1_tag2str(type);
+        outlen += strlen(tagname);
+        if (!io_ch(arg, tagname, outlen) || !io_ch(arg, ":", 1))
+            return -1;
+        outlen++;
+    }
+
+    /* Decide what to do with type, either dump content or display it */
+
+    /* Dump everything */
+    if (lflags & ASN1_STRFLGS_DUMP_ALL)
+        type = -1;
+    /* Ignore the string type */
+    else if (lflags & ASN1_STRFLGS_IGNORE_TYPE)
+        type = 1;
+    else {
+        /* Else determine width based on type */
+        if ((type > 0) && (type < 31))
+            type = tag2nbyte[type];
+        else
+            type = -1;
+        if ((type == -1) && !(lflags & ASN1_STRFLGS_DUMP_UNKNOWN))
+            type = 1;
+    }
+
+    if (type == -1) {
+        len = do_dump(lflags, io_ch, arg, str);
+        if (len < 0)
+            return -1;
+        outlen += len;
+        return outlen;
+    }
+
+    if (lflags & ASN1_STRFLGS_UTF8_CONVERT) {
+        /*
+         * Note: if string is UTF8 and we want to convert to UTF8 then we
+         * just interpret it as 1 byte per character to avoid converting
+         * twice.
+         */
+        if (!type)
+            type = 1;
+        else
+            type |= BUF_TYPE_CONVUTF8;
+    }
+
+    len = do_buf(str->data, str->length, type, flags, &quotes, io_ch, NULL);
+    if (len < 0)
+        return -1;
+    outlen += len;
+    if (quotes)
+        outlen += 2;
+    if (!arg)
+        return outlen;
+    if (quotes && !io_ch(arg, "\"", 1))
+        return -1;
+    if (do_buf(str->data, str->length, type, flags, NULL, io_ch, arg) < 0)
+        return -1;
+    if (quotes && !io_ch(arg, "\"", 1))
+        return -1;
+    return outlen;
+}
+
+/* Used for line indenting: print 'indent' spaces */
+
+static int do_indent(char_io *io_ch, void *arg, int indent)
+{
+    int i;
+    for (i = 0; i < indent; i++)
+        if (!io_ch(arg, " ", 1))
+            return 0;
+    return 1;
+}
+
+#define FN_WIDTH_LN     25
+#define FN_WIDTH_SN     10
+
+static int do_name_ex(char_io *io_ch, void *arg, const X509_NAME *n,
+                      int indent, unsigned long flags)
+{
+    int i, prev = -1, orflags, cnt;
+    int fn_opt, fn_nid;
+    ASN1_OBJECT *fn;
+    const ASN1_STRING *val;
+    const X509_NAME_ENTRY *ent;
+    char objtmp[80];
+    const char *objbuf;
+    int outlen, len;
+    char *sep_dn, *sep_mv, *sep_eq;
+    int sep_dn_len, sep_mv_len, sep_eq_len;
+    if (indent < 0)
+        indent = 0;
+    outlen = indent;
+    if (!do_indent(io_ch, arg, indent))
+        return -1;
+    switch (flags & XN_FLAG_SEP_MASK) {
+    case XN_FLAG_SEP_MULTILINE:
+        sep_dn = "\n";
+        sep_dn_len = 1;
+        sep_mv = " + ";
+        sep_mv_len = 3;
+        break;
+
+    case XN_FLAG_SEP_COMMA_PLUS:
+        sep_dn = ",";
+        sep_dn_len = 1;
+        sep_mv = "+";
+        sep_mv_len = 1;
+        indent = 0;
+        break;
+
+    case XN_FLAG_SEP_CPLUS_SPC:
+        sep_dn = ", ";
+        sep_dn_len = 2;
+        sep_mv = " + ";
+        sep_mv_len = 3;
+        indent = 0;
+        break;
+
+    case XN_FLAG_SEP_SPLUS_SPC:
+        sep_dn = "; ";
+        sep_dn_len = 2;
+        sep_mv = " + ";
+        sep_mv_len = 3;
+        indent = 0;
+        break;
+
+    default:
+        return -1;
+    }
+
+    if (flags & XN_FLAG_SPC_EQ) {
+        sep_eq = " = ";
+        sep_eq_len = 3;
+    } else {
+        sep_eq = "=";
+        sep_eq_len = 1;
+    }
+
+    fn_opt = flags & XN_FLAG_FN_MASK;
+
+    cnt = X509_NAME_entry_count(n);
+    for (i = 0; i < cnt; i++) {
+        if (flags & XN_FLAG_DN_REV)
+            ent = X509_NAME_get_entry(n, cnt - i - 1);
+        else
+            ent = X509_NAME_get_entry(n, i);
+        if (prev != -1) {
+            if (prev == X509_NAME_ENTRY_set(ent)) {
+                if (!io_ch(arg, sep_mv, sep_mv_len))
+                    return -1;
+                outlen += sep_mv_len;
+            } else {
+                if (!io_ch(arg, sep_dn, sep_dn_len))
+                    return -1;
+                outlen += sep_dn_len;
+                if (!do_indent(io_ch, arg, indent))
+                    return -1;
+                outlen += indent;
+            }
+        }
+        prev = X509_NAME_ENTRY_set(ent);
+        fn = X509_NAME_ENTRY_get_object(ent);
+        val = X509_NAME_ENTRY_get_data(ent);
+        fn_nid = OBJ_obj2nid(fn);
+        if (fn_opt != XN_FLAG_FN_NONE) {
+            int objlen, fld_len;
+            if ((fn_opt == XN_FLAG_FN_OID) || (fn_nid == NID_undef)) {
+                OBJ_obj2txt(objtmp, sizeof(objtmp), fn, 1);
+                fld_len = 0;    /* XXX: what should this be? */
+                objbuf = objtmp;
+            } else {
+                if (fn_opt == XN_FLAG_FN_SN) {
+                    fld_len = FN_WIDTH_SN;
+                    objbuf = OBJ_nid2sn(fn_nid);
+                } else if (fn_opt == XN_FLAG_FN_LN) {
+                    fld_len = FN_WIDTH_LN;
+                    objbuf = OBJ_nid2ln(fn_nid);
+                } else {
+                    fld_len = 0; /* XXX: what should this be? */
+                    objbuf = "";
+                }
+            }
+            objlen = strlen(objbuf);
+            if (!io_ch(arg, objbuf, objlen))
+                return -1;
+            if ((objlen < fld_len) && (flags & XN_FLAG_FN_ALIGN)) {
+                if (!do_indent(io_ch, arg, fld_len - objlen))
+                    return -1;
+                outlen += fld_len - objlen;
+            }
+            if (!io_ch(arg, sep_eq, sep_eq_len))
+                return -1;
+            outlen += objlen + sep_eq_len;
+        }
+        /*
+         * If the field name is unknown then fix up the DER dump flag. We
+         * might want to limit this further so it will DER dump on anything
+         * other than a few 'standard' fields.
+         */
+        if ((fn_nid == NID_undef) && (flags & XN_FLAG_DUMP_UNKNOWN_FIELDS))
+            orflags = ASN1_STRFLGS_DUMP_ALL;
+        else
+            orflags = 0;
+
+        len = do_print_ex(io_ch, arg, flags | orflags, val);
+        if (len < 0)
+            return -1;
+        outlen += len;
+    }
+    return outlen;
+}
+
+/* Wrappers round the main functions */
+
+int X509_NAME_print_ex(BIO *out, const X509_NAME *nm, int indent,
+                       unsigned long flags)
+{
+    if (flags == XN_FLAG_COMPAT)
+        return X509_NAME_print(out, nm, indent);
+    return do_name_ex(send_bio_chars, out, nm, indent, flags);
+}
+
+#ifndef OPENSSL_NO_STDIO
+int X509_NAME_print_ex_fp(FILE *fp, const X509_NAME *nm, int indent,
+                          unsigned long flags)
+{
+    if (flags == XN_FLAG_COMPAT) {
+        BIO *btmp;
+        int ret;
+        btmp = BIO_new_fp(fp, BIO_NOCLOSE);
+        if (!btmp)
+            return -1;
+        ret = X509_NAME_print(btmp, nm, indent);
+        BIO_free(btmp);
+        return ret;
+    }
+    return do_name_ex(send_fp_chars, fp, nm, indent, flags);
+}
+#endif
+
+int ASN1_STRING_print_ex(BIO *out, const ASN1_STRING *str, unsigned long flags)
+{
+    return do_print_ex(send_bio_chars, out, flags, str);
+}
+
+#ifndef OPENSSL_NO_STDIO
+int ASN1_STRING_print_ex_fp(FILE *fp, const ASN1_STRING *str, unsigned long flags)
+{
+    return do_print_ex(send_fp_chars, fp, flags, str);
+}
+#endif
+
+/*
+ * Utility function: convert any string type to UTF8, returns number of bytes
+ * in output string or a negative error code
+ */
+
+int ASN1_STRING_to_UTF8(unsigned char **out, const ASN1_STRING *in)
+{
+    ASN1_STRING stmp, *str = &stmp;
+    int mbflag, type, ret;
+    if (!in)
+        return -1;
+    type = in->type;
+    if ((type < 0) || (type > 30))
+        return -1;
+    mbflag = tag2nbyte[type];
+    if (mbflag == -1)
+        return -1;
+    mbflag |= MBSTRING_FLAG;
+    stmp.data = NULL;
+    stmp.length = 0;
+    stmp.flags = 0;
+    ret =
+        ASN1_mbstring_copy(&str, in->data, in->length, mbflag,
+                           B_ASN1_UTF8STRING);
+    if (ret < 0)
+        return ret;
+    *out = stmp.data;
+    return stmp.length;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_strnid.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_strnid.c
new file mode 100644
index 000000000..f19a9de64
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_strnid.c
@@ -0,0 +1,219 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include <openssl/objects.h>
+
+static STACK_OF(ASN1_STRING_TABLE) *stable = NULL;
+static void st_free(ASN1_STRING_TABLE *tbl);
+static int sk_table_cmp(const ASN1_STRING_TABLE *const *a,
+                        const ASN1_STRING_TABLE *const *b);
+
+/*
+ * This is the global mask for the mbstring functions: this is use to mask
+ * out certain types (such as BMPString and UTF8String) because certain
+ * software (e.g. Netscape) has problems with them.
+ */
+
+static unsigned long global_mask = B_ASN1_UTF8STRING;
+
+void ASN1_STRING_set_default_mask(unsigned long mask)
+{
+    global_mask = mask;
+}
+
+unsigned long ASN1_STRING_get_default_mask(void)
+{
+    return global_mask;
+}
+
+/*-
+ * This function sets the default to various "flavours" of configuration.
+ * based on an ASCII string. Currently this is:
+ * MASK:XXXX : a numerical mask value.
+ * nobmp : Don't use BMPStrings (just Printable, T61).
+ * pkix : PKIX recommendation in RFC2459.
+ * utf8only : only use UTF8Strings (RFC2459 recommendation for 2004).
+ * default:   the default value, Printable, T61, BMP.
+ */
+
+int ASN1_STRING_set_default_mask_asc(const char *p)
+{
+    unsigned long mask;
+    char *end;
+
+    if (strncmp(p, "MASK:", 5) == 0) {
+        if (!p[5])
+            return 0;
+        mask = strtoul(p + 5, &end, 0);
+        if (*end)
+            return 0;
+    } else if (strcmp(p, "nombstr") == 0)
+        mask = ~((unsigned long)(B_ASN1_BMPSTRING | B_ASN1_UTF8STRING));
+    else if (strcmp(p, "pkix") == 0)
+        mask = ~((unsigned long)B_ASN1_T61STRING);
+    else if (strcmp(p, "utf8only") == 0)
+        mask = B_ASN1_UTF8STRING;
+    else if (strcmp(p, "default") == 0)
+        mask = 0xFFFFFFFFL;
+    else
+        return 0;
+    ASN1_STRING_set_default_mask(mask);
+    return 1;
+}
+
+/*
+ * The following function generates an ASN1_STRING based on limits in a
+ * table. Frequently the types and length of an ASN1_STRING are restricted by
+ * a corresponding OID. For example certificates and certificate requests.
+ */
+
+ASN1_STRING *ASN1_STRING_set_by_NID(ASN1_STRING **out,
+                                    const unsigned char *in, int inlen,
+                                    int inform, int nid)
+{
+    ASN1_STRING_TABLE *tbl;
+    ASN1_STRING *str = NULL;
+    unsigned long mask;
+    int ret;
+
+    if (out == NULL)
+        out = &str;
+    tbl = ASN1_STRING_TABLE_get(nid);
+    if (tbl != NULL) {
+        mask = tbl->mask;
+        if (!(tbl->flags & STABLE_NO_MASK))
+            mask &= global_mask;
+        ret = ASN1_mbstring_ncopy(out, in, inlen, inform, mask,
+                                  tbl->minsize, tbl->maxsize);
+    } else {
+        ret = ASN1_mbstring_copy(out, in, inlen, inform,
+                                 DIRSTRING_TYPE & global_mask);
+    }
+    if (ret <= 0)
+        return NULL;
+    return *out;
+}
+
+/*
+ * Now the tables and helper functions for the string table:
+ */
+
+#include "tbl_standard.h"
+
+static int sk_table_cmp(const ASN1_STRING_TABLE *const *a,
+                        const ASN1_STRING_TABLE *const *b)
+{
+    return (*a)->nid - (*b)->nid;
+}
+
+DECLARE_OBJ_BSEARCH_CMP_FN(ASN1_STRING_TABLE, ASN1_STRING_TABLE, table);
+
+static int table_cmp(const ASN1_STRING_TABLE *a, const ASN1_STRING_TABLE *b)
+{
+    return a->nid - b->nid;
+}
+
+IMPLEMENT_OBJ_BSEARCH_CMP_FN(ASN1_STRING_TABLE, ASN1_STRING_TABLE, table);
+
+ASN1_STRING_TABLE *ASN1_STRING_TABLE_get(int nid)
+{
+    int idx;
+    ASN1_STRING_TABLE fnd;
+
+    fnd.nid = nid;
+    if (stable) {
+        idx = sk_ASN1_STRING_TABLE_find(stable, &fnd);
+        if (idx >= 0)
+            return sk_ASN1_STRING_TABLE_value(stable, idx);
+    }
+    return OBJ_bsearch_table(&fnd, tbl_standard, OSSL_NELEM(tbl_standard));
+}
+
+/*
+ * Return a string table pointer which can be modified: either directly from
+ * table or a copy of an internal value added to the table.
+ */
+
+static ASN1_STRING_TABLE *stable_get(int nid)
+{
+    ASN1_STRING_TABLE *tmp, *rv;
+
+    /* Always need a string table so allocate one if NULL */
+    if (stable == NULL) {
+        stable = sk_ASN1_STRING_TABLE_new(sk_table_cmp);
+        if (stable == NULL)
+            return NULL;
+    }
+    tmp = ASN1_STRING_TABLE_get(nid);
+    if (tmp != NULL && tmp->flags & STABLE_FLAGS_MALLOC)
+        return tmp;
+    if ((rv = OPENSSL_zalloc(sizeof(*rv))) == NULL) {
+        ASN1err(ASN1_F_STABLE_GET, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    if (!sk_ASN1_STRING_TABLE_push(stable, rv)) {
+        OPENSSL_free(rv);
+        return NULL;
+    }
+    if (tmp != NULL) {
+        rv->nid = tmp->nid;
+        rv->minsize = tmp->minsize;
+        rv->maxsize = tmp->maxsize;
+        rv->mask = tmp->mask;
+        rv->flags = tmp->flags | STABLE_FLAGS_MALLOC;
+    } else {
+        rv->nid = nid;
+        rv->minsize = -1;
+        rv->maxsize = -1;
+        rv->flags = STABLE_FLAGS_MALLOC;
+    }
+    return rv;
+}
+
+int ASN1_STRING_TABLE_add(int nid,
+                          long minsize, long maxsize, unsigned long mask,
+                          unsigned long flags)
+{
+    ASN1_STRING_TABLE *tmp;
+
+    tmp = stable_get(nid);
+    if (tmp == NULL) {
+        ASN1err(ASN1_F_ASN1_STRING_TABLE_ADD, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    if (minsize >= 0)
+        tmp->minsize = minsize;
+    if (maxsize >= 0)
+        tmp->maxsize = maxsize;
+    if (mask)
+        tmp->mask = mask;
+    if (flags)
+        tmp->flags = STABLE_FLAGS_MALLOC | flags;
+    return 1;
+}
+
+void ASN1_STRING_TABLE_cleanup(void)
+{
+    STACK_OF(ASN1_STRING_TABLE) *tmp;
+
+    tmp = stable;
+    if (tmp == NULL)
+        return;
+    stable = NULL;
+    sk_ASN1_STRING_TABLE_pop_free(tmp, st_free);
+}
+
+static void st_free(ASN1_STRING_TABLE *tbl)
+{
+    if (tbl->flags & STABLE_FLAGS_MALLOC)
+        OPENSSL_free(tbl);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_time.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_time.c
new file mode 100644
index 000000000..1babb9636
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_time.c
@@ -0,0 +1,553 @@
+/*
+ * Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*-
+ * This is an implementation of the ASN1 Time structure which is:
+ *    Time ::= CHOICE {
+ *      utcTime        UTCTime,
+ *      generalTime    GeneralizedTime }
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include "internal/ctype.h"
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include "asn1_locl.h"
+
+IMPLEMENT_ASN1_MSTRING(ASN1_TIME, B_ASN1_TIME)
+
+IMPLEMENT_ASN1_FUNCTIONS(ASN1_TIME)
+
+static int is_utc(const int year)
+{
+    if (50 <= year && year <= 149)
+        return 1;
+    return 0;
+}
+
+static int leap_year(const int year)
+{
+    if (year % 400 == 0 || (year % 100 != 0 && year % 4 == 0))
+        return 1;
+    return 0;
+}
+
+/*
+ * Compute the day of the week and the day of the year from the year, month
+ * and day.  The day of the year is straightforward, the day of the week uses
+ * a form of Zeller's congruence.  For this months start with March and are
+ * numbered 4 through 15.
+ */
+static void determine_days(struct tm *tm)
+{
+    static const int ydays[12] = {
+        0, 31, 59, 90, 120, 151, 181, 212, 243, 273, 304, 334
+    };
+    int y = tm->tm_year + 1900;
+    int m = tm->tm_mon;
+    int d = tm->tm_mday;
+    int c;
+
+    tm->tm_yday = ydays[m] + d - 1;
+    if (m >= 2) {
+        /* March and onwards can be one day further into the year */
+        tm->tm_yday += leap_year(y);
+        m += 2;
+    } else {
+        /* Treat January and February as part of the previous year */
+        m += 14;
+        y--;
+    }
+    c = y / 100;
+    y %= 100;
+    /* Zeller's congruance */
+    tm->tm_wday = (d + (13 * m) / 5 + y + y / 4 + c / 4 + 5 * c + 6) % 7;
+}
+
+int asn1_time_to_tm(struct tm *tm, const ASN1_TIME *d)
+{
+    static const int min[9] = { 0, 0, 1, 1, 0, 0, 0, 0, 0 };
+    static const int max[9] = { 99, 99, 12, 31, 23, 59, 59, 12, 59 };
+    static const int mdays[12] = { 31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31 };
+    char *a;
+    int n, i, i2, l, o, min_l = 11, strict = 0, end = 6, btz = 5, md;
+    struct tm tmp;
+
+    /*
+     * ASN1_STRING_FLAG_X509_TIME is used to enforce RFC 5280
+     * time string format, in which:
+     *
+     * 1. "seconds" is a 'MUST'
+     * 2. "Zulu" timezone is a 'MUST'
+     * 3. "+|-" is not allowed to indicate a time zone
+     */
+    if (d->type == V_ASN1_UTCTIME) {
+        if (d->flags & ASN1_STRING_FLAG_X509_TIME) {
+            min_l = 13;
+            strict = 1;
+        }
+    } else if (d->type == V_ASN1_GENERALIZEDTIME) {
+        end = 7;
+        btz = 6;
+        if (d->flags & ASN1_STRING_FLAG_X509_TIME) {
+            min_l = 15;
+            strict = 1;
+        } else {
+            min_l = 13;
+        }
+    } else {
+        return 0;
+    }
+
+    l = d->length;
+    a = (char *)d->data;
+    o = 0;
+    memset(&tmp, 0, sizeof(tmp));
+
+    /*
+     * GENERALIZEDTIME is similar to UTCTIME except the year is represented
+     * as YYYY. This stuff treats everything as a two digit field so make
+     * first two fields 00 to 99
+     */
+
+    if (l < min_l)
+        goto err;
+    for (i = 0; i < end; i++) {
+        if (!strict && (i == btz) && ((a[o] == 'Z') || (a[o] == '+') || (a[o] == '-'))) {
+            i++;
+            break;
+        }
+        if (!ossl_isdigit(a[o]))
+            goto err;
+        n = a[o] - '0';
+        /* incomplete 2-digital number */
+        if (++o == l)
+            goto err;
+
+        if (!ossl_isdigit(a[o]))
+            goto err;
+        n = (n * 10) + a[o] - '0';
+        /* no more bytes to read, but we haven't seen time-zone yet */
+        if (++o == l)
+            goto err;
+
+        i2 = (d->type == V_ASN1_UTCTIME) ? i + 1 : i;
+
+        if ((n < min[i2]) || (n > max[i2]))
+            goto err;
+        switch (i2) {
+        case 0:
+            /* UTC will never be here */
+            tmp.tm_year = n * 100 - 1900;
+            break;
+        case 1:
+            if (d->type == V_ASN1_UTCTIME)
+                tmp.tm_year = n < 50 ? n + 100 : n;
+            else
+                tmp.tm_year += n;
+            break;
+        case 2:
+            tmp.tm_mon = n - 1;
+            break;
+        case 3:
+            /* check if tm_mday is valid in tm_mon */
+            if (tmp.tm_mon == 1) {
+                /* it's February */
+                md = mdays[1] + leap_year(tmp.tm_year + 1900);
+            } else {
+                md = mdays[tmp.tm_mon];
+            }
+            if (n > md)
+                goto err;
+            tmp.tm_mday = n;
+            determine_days(&tmp);
+            break;
+        case 4:
+            tmp.tm_hour = n;
+            break;
+        case 5:
+            tmp.tm_min = n;
+            break;
+        case 6:
+            tmp.tm_sec = n;
+            break;
+        }
+    }
+
+    /*
+     * Optional fractional seconds: decimal point followed by one or more
+     * digits.
+     */
+    if (d->type == V_ASN1_GENERALIZEDTIME && a[o] == '.') {
+        if (strict)
+            /* RFC 5280 forbids fractional seconds */
+            goto err;
+        if (++o == l)
+            goto err;
+        i = o;
+        while ((o < l) && ossl_isdigit(a[o]))
+            o++;
+        /* Must have at least one digit after decimal point */
+        if (i == o)
+            goto err;
+        /* no more bytes to read, but we haven't seen time-zone yet */
+        if (o == l)
+            goto err;
+    }
+
+    /*
+     * 'o' will never point to '\0' at this point, the only chance
+     * 'o' can point to '\0' is either the subsequent if or the first
+     * else if is true.
+     */
+    if (a[o] == 'Z') {
+        o++;
+    } else if (!strict && ((a[o] == '+') || (a[o] == '-'))) {
+        int offsign = a[o] == '-' ? 1 : -1;
+        int offset = 0;
+
+        o++;
+        /*
+         * if not equal, no need to do subsequent checks
+         * since the following for-loop will add 'o' by 4
+         * and the final return statement will check if 'l'
+         * and 'o' are equal.
+         */
+        if (o + 4 != l)
+            goto err;
+        for (i = end; i < end + 2; i++) {
+            if (!ossl_isdigit(a[o]))
+                goto err;
+            n = a[o] - '0';
+            o++;
+            if (!ossl_isdigit(a[o]))
+                goto err;
+            n = (n * 10) + a[o] - '0';
+            i2 = (d->type == V_ASN1_UTCTIME) ? i + 1 : i;
+            if ((n < min[i2]) || (n > max[i2]))
+                goto err;
+            /* if tm is NULL, no need to adjust */
+            if (tm != NULL) {
+                if (i == end)
+                    offset = n * 3600;
+                else if (i == end + 1)
+                    offset += n * 60;
+            }
+            o++;
+        }
+        if (offset && !OPENSSL_gmtime_adj(&tmp, 0, offset * offsign))
+            goto err;
+    } else {
+        /* not Z, or not +/- in non-strict mode */
+        goto err;
+    }
+    if (o == l) {
+        /* success, check if tm should be filled */
+        if (tm != NULL)
+            *tm = tmp;
+        return 1;
+    }
+ err:
+    return 0;
+}
+
+ASN1_TIME *asn1_time_from_tm(ASN1_TIME *s, struct tm *ts, int type)
+{
+    char* p;
+    ASN1_TIME *tmps = NULL;
+    const size_t len = 20;
+
+    if (type == V_ASN1_UNDEF) {
+        if (is_utc(ts->tm_year))
+            type = V_ASN1_UTCTIME;
+        else
+            type = V_ASN1_GENERALIZEDTIME;
+    } else if (type == V_ASN1_UTCTIME) {
+        if (!is_utc(ts->tm_year))
+            goto err;
+    } else if (type != V_ASN1_GENERALIZEDTIME) {
+        goto err;
+    }
+
+    if (s == NULL)
+        tmps = ASN1_STRING_new();
+    else
+        tmps = s;
+    if (tmps == NULL)
+        return NULL;
+
+    if (!ASN1_STRING_set(tmps, NULL, len))
+        goto err;
+
+    tmps->type = type;
+    p = (char*)tmps->data;
+
+    if (type == V_ASN1_GENERALIZEDTIME)
+        tmps->length = BIO_snprintf(p, len, "%04d%02d%02d%02d%02d%02dZ",
+                                    ts->tm_year + 1900, ts->tm_mon + 1,
+                                    ts->tm_mday, ts->tm_hour, ts->tm_min,
+                                    ts->tm_sec);
+    else
+        tmps->length = BIO_snprintf(p, len, "%02d%02d%02d%02d%02d%02dZ",
+                                    ts->tm_year % 100, ts->tm_mon + 1,
+                                    ts->tm_mday, ts->tm_hour, ts->tm_min,
+                                    ts->tm_sec);
+
+#ifdef CHARSET_EBCDIC_not
+    ebcdic2ascii(tmps->data, tmps->data, tmps->length);
+#endif
+    return tmps;
+ err:
+    if (tmps != s)
+        ASN1_STRING_free(tmps);
+    return NULL;
+}
+
+ASN1_TIME *ASN1_TIME_set(ASN1_TIME *s, time_t t)
+{
+    return ASN1_TIME_adj(s, t, 0, 0);
+}
+
+ASN1_TIME *ASN1_TIME_adj(ASN1_TIME *s, time_t t,
+                         int offset_day, long offset_sec)
+{
+    struct tm *ts;
+    struct tm data;
+
+    ts = OPENSSL_gmtime(&t, &data);
+    if (ts == NULL) {
+        ASN1err(ASN1_F_ASN1_TIME_ADJ, ASN1_R_ERROR_GETTING_TIME);
+        return NULL;
+    }
+    if (offset_day || offset_sec) {
+        if (!OPENSSL_gmtime_adj(ts, offset_day, offset_sec))
+            return NULL;
+    }
+    return asn1_time_from_tm(s, ts, V_ASN1_UNDEF);
+}
+
+int ASN1_TIME_check(const ASN1_TIME *t)
+{
+    if (t->type == V_ASN1_GENERALIZEDTIME)
+        return ASN1_GENERALIZEDTIME_check(t);
+    else if (t->type == V_ASN1_UTCTIME)
+        return ASN1_UTCTIME_check(t);
+    return 0;
+}
+
+/* Convert an ASN1_TIME structure to GeneralizedTime */
+ASN1_GENERALIZEDTIME *ASN1_TIME_to_generalizedtime(const ASN1_TIME *t,
+                                                   ASN1_GENERALIZEDTIME **out)
+{
+    ASN1_GENERALIZEDTIME *ret = NULL;
+    struct tm tm;
+
+    if (!ASN1_TIME_to_tm(t, &tm))
+        return NULL;
+
+    if (out != NULL)
+        ret = *out;
+
+    ret = asn1_time_from_tm(ret, &tm, V_ASN1_GENERALIZEDTIME);
+
+    if (out != NULL && ret != NULL)
+        *out = ret;
+
+    return ret;
+}
+
+int ASN1_TIME_set_string(ASN1_TIME *s, const char *str)
+{
+    /* Try UTC, if that fails, try GENERALIZED */
+    if (ASN1_UTCTIME_set_string(s, str))
+        return 1;
+    return ASN1_GENERALIZEDTIME_set_string(s, str);
+}
+
+int ASN1_TIME_set_string_X509(ASN1_TIME *s, const char *str)
+{
+    ASN1_TIME t;
+    struct tm tm;
+    int rv = 0;
+
+    t.length = strlen(str);
+    t.data = (unsigned char *)str;
+    t.flags = ASN1_STRING_FLAG_X509_TIME;
+
+    t.type = V_ASN1_UTCTIME;
+
+    if (!ASN1_TIME_check(&t)) {
+        t.type = V_ASN1_GENERALIZEDTIME;
+        if (!ASN1_TIME_check(&t))
+            goto out;
+    }
+
+    /*
+     * Per RFC 5280 (section 4.1.2.5.), the valid input time
+     * strings should be encoded with the following rules:
+     *
+     * 1. UTC: YYMMDDHHMMSSZ, if YY < 50 (20YY) --> UTC: YYMMDDHHMMSSZ
+     * 2. UTC: YYMMDDHHMMSSZ, if YY >= 50 (19YY) --> UTC: YYMMDDHHMMSSZ
+     * 3. G'd: YYYYMMDDHHMMSSZ, if YYYY >= 2050 --> G'd: YYYYMMDDHHMMSSZ
+     * 4. G'd: YYYYMMDDHHMMSSZ, if YYYY < 2050 --> UTC: YYMMDDHHMMSSZ
+     *
+     * Only strings of the 4th rule should be reformatted, but since a
+     * UTC can only present [1950, 2050), so if the given time string
+     * is less than 1950 (e.g. 19230419000000Z), we do nothing...
+     */
+
+    if (s != NULL && t.type == V_ASN1_GENERALIZEDTIME) {
+        if (!asn1_time_to_tm(&tm, &t))
+            goto out;
+        if (is_utc(tm.tm_year)) {
+            t.length -= 2;
+            /*
+             * it's OK to let original t.data go since that's assigned
+             * to a piece of memory allocated outside of this function.
+             * new t.data would be freed after ASN1_STRING_copy is done.
+             */
+            t.data = OPENSSL_zalloc(t.length + 1);
+            if (t.data == NULL)
+                goto out;
+            memcpy(t.data, str + 2, t.length);
+            t.type = V_ASN1_UTCTIME;
+        }
+    }
+
+    if (s == NULL || ASN1_STRING_copy((ASN1_STRING *)s, (ASN1_STRING *)&t))
+        rv = 1;
+
+    if (t.data != (unsigned char *)str)
+        OPENSSL_free(t.data);
+out:
+    return rv;
+}
+
+int ASN1_TIME_to_tm(const ASN1_TIME *s, struct tm *tm)
+{
+    if (s == NULL) {
+        time_t now_t;
+
+        time(&now_t);
+        memset(tm, 0, sizeof(*tm));
+        if (OPENSSL_gmtime(&now_t, tm) != NULL)
+            return 1;
+        return 0;
+    }
+
+    return asn1_time_to_tm(tm, s);
+}
+
+int ASN1_TIME_diff(int *pday, int *psec,
+                   const ASN1_TIME *from, const ASN1_TIME *to)
+{
+    struct tm tm_from, tm_to;
+
+    if (!ASN1_TIME_to_tm(from, &tm_from))
+        return 0;
+    if (!ASN1_TIME_to_tm(to, &tm_to))
+        return 0;
+    return OPENSSL_gmtime_diff(pday, psec, &tm_from, &tm_to);
+}
+
+static const char _asn1_mon[12][4] = {
+    "Jan", "Feb", "Mar", "Apr", "May", "Jun",
+    "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"
+};
+
+int ASN1_TIME_print(BIO *bp, const ASN1_TIME *tm)
+{
+    char *v;
+    int gmt = 0, l;
+    struct tm stm;
+
+    if (!asn1_time_to_tm(&stm, tm)) {
+        /* asn1_time_to_tm will check the time type */
+        goto err;
+    }
+
+    l = tm->length;
+    v = (char *)tm->data;
+    if (v[l - 1] == 'Z')
+        gmt = 1;
+
+    if (tm->type == V_ASN1_GENERALIZEDTIME) {
+        char *f = NULL;
+        int f_len = 0;
+
+        /*
+         * Try to parse fractional seconds. '14' is the place of
+         * 'fraction point' in a GeneralizedTime string.
+         */
+        if (tm->length > 15 && v[14] == '.') {
+            f = &v[14];
+            f_len = 1;
+            while (14 + f_len < l && ossl_isdigit(f[f_len]))
+                ++f_len;
+        }
+
+        return BIO_printf(bp, "%s %2d %02d:%02d:%02d%.*s %d%s",
+                          _asn1_mon[stm.tm_mon], stm.tm_mday, stm.tm_hour,
+                          stm.tm_min, stm.tm_sec, f_len, f, stm.tm_year + 1900,
+                          (gmt ? " GMT" : "")) > 0;
+    } else {
+        return BIO_printf(bp, "%s %2d %02d:%02d:%02d %d%s",
+                          _asn1_mon[stm.tm_mon], stm.tm_mday, stm.tm_hour,
+                          stm.tm_min, stm.tm_sec, stm.tm_year + 1900,
+                          (gmt ? " GMT" : "")) > 0;
+    }
+ err:
+    BIO_write(bp, "Bad time value", 14);
+    return 0;
+}
+
+int ASN1_TIME_cmp_time_t(const ASN1_TIME *s, time_t t)
+{
+    struct tm stm, ttm;
+    int day, sec;
+
+    if (!ASN1_TIME_to_tm(s, &stm))
+        return -2;
+
+    if (!OPENSSL_gmtime(&t, &ttm))
+        return -2;
+
+    if (!OPENSSL_gmtime_diff(&day, &sec, &ttm, &stm))
+        return -2;
+
+    if (day > 0 || sec > 0)
+        return 1;
+    if (day < 0 || sec < 0)
+        return -1;
+    return 0;
+}
+
+int ASN1_TIME_normalize(ASN1_TIME *t)
+{
+    struct tm tm;
+
+    if (!ASN1_TIME_to_tm(t, &tm))
+        return 0;
+
+    return asn1_time_from_tm(t, &tm, V_ASN1_UNDEF) != NULL;
+}
+
+int ASN1_TIME_compare(const ASN1_TIME *a, const ASN1_TIME *b)
+{
+    int day, sec;
+
+    if (!ASN1_TIME_diff(&day, &sec, b, a))
+        return -2;
+    if (day > 0 || sec > 0)
+        return 1;
+    if (day < 0 || sec < 0)
+        return -1;
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_type.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_type.c
new file mode 100644
index 000000000..0c7aebe30
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_type.c
@@ -0,0 +1,134 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/objects.h>
+#include "asn1_locl.h"
+
+int ASN1_TYPE_get(const ASN1_TYPE *a)
+{
+    if ((a->value.ptr != NULL) || (a->type == V_ASN1_NULL))
+        return a->type;
+    else
+        return 0;
+}
+
+void ASN1_TYPE_set(ASN1_TYPE *a, int type, void *value)
+{
+    if (a->value.ptr != NULL) {
+        ASN1_TYPE **tmp_a = &a;
+        asn1_primitive_free((ASN1_VALUE **)tmp_a, NULL, 0);
+    }
+    a->type = type;
+    if (type == V_ASN1_BOOLEAN)
+        a->value.boolean = value ? 0xff : 0;
+    else
+        a->value.ptr = value;
+}
+
+int ASN1_TYPE_set1(ASN1_TYPE *a, int type, const void *value)
+{
+    if (!value || (type == V_ASN1_BOOLEAN)) {
+        void *p = (void *)value;
+        ASN1_TYPE_set(a, type, p);
+    } else if (type == V_ASN1_OBJECT) {
+        ASN1_OBJECT *odup;
+        odup = OBJ_dup(value);
+        if (!odup)
+            return 0;
+        ASN1_TYPE_set(a, type, odup);
+    } else {
+        ASN1_STRING *sdup;
+        sdup = ASN1_STRING_dup(value);
+        if (!sdup)
+            return 0;
+        ASN1_TYPE_set(a, type, sdup);
+    }
+    return 1;
+}
+
+/* Returns 0 if they are equal, != 0 otherwise. */
+int ASN1_TYPE_cmp(const ASN1_TYPE *a, const ASN1_TYPE *b)
+{
+    int result = -1;
+
+    if (!a || !b || a->type != b->type)
+        return -1;
+
+    switch (a->type) {
+    case V_ASN1_OBJECT:
+        result = OBJ_cmp(a->value.object, b->value.object);
+        break;
+    case V_ASN1_BOOLEAN:
+        result = a->value.boolean - b->value.boolean;
+        break;
+    case V_ASN1_NULL:
+        result = 0;             /* They do not have content. */
+        break;
+    case V_ASN1_INTEGER:
+    case V_ASN1_ENUMERATED:
+    case V_ASN1_BIT_STRING:
+    case V_ASN1_OCTET_STRING:
+    case V_ASN1_SEQUENCE:
+    case V_ASN1_SET:
+    case V_ASN1_NUMERICSTRING:
+    case V_ASN1_PRINTABLESTRING:
+    case V_ASN1_T61STRING:
+    case V_ASN1_VIDEOTEXSTRING:
+    case V_ASN1_IA5STRING:
+    case V_ASN1_UTCTIME:
+    case V_ASN1_GENERALIZEDTIME:
+    case V_ASN1_GRAPHICSTRING:
+    case V_ASN1_VISIBLESTRING:
+    case V_ASN1_GENERALSTRING:
+    case V_ASN1_UNIVERSALSTRING:
+    case V_ASN1_BMPSTRING:
+    case V_ASN1_UTF8STRING:
+    case V_ASN1_OTHER:
+    default:
+        result = ASN1_STRING_cmp((ASN1_STRING *)a->value.ptr,
+                                 (ASN1_STRING *)b->value.ptr);
+        break;
+    }
+
+    return result;
+}
+
+ASN1_TYPE *ASN1_TYPE_pack_sequence(const ASN1_ITEM *it, void *s, ASN1_TYPE **t)
+{
+    ASN1_OCTET_STRING *oct;
+    ASN1_TYPE *rt;
+
+    oct = ASN1_item_pack(s, it, NULL);
+    if (oct == NULL)
+        return NULL;
+
+    if (t && *t) {
+        rt = *t;
+    } else {
+        rt = ASN1_TYPE_new();
+        if (rt == NULL) {
+            ASN1_OCTET_STRING_free(oct);
+            return NULL;
+        }
+        if (t)
+            *t = rt;
+    }
+    ASN1_TYPE_set(rt, V_ASN1_SEQUENCE, oct);
+    return rt;
+}
+
+void *ASN1_TYPE_unpack_sequence(const ASN1_ITEM *it, const ASN1_TYPE *t)
+{
+    if (t == NULL || t->type != V_ASN1_SEQUENCE || t->value.sequence == NULL)
+        return NULL;
+    return ASN1_item_unpack(t->value.sequence, it);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_utctm.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_utctm.c
new file mode 100644
index 000000000..b224991aa
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_utctm.c
@@ -0,0 +1,98 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include "asn1_locl.h"
+
+/* This is the primary function used to parse ASN1_UTCTIME */
+int asn1_utctime_to_tm(struct tm *tm, const ASN1_UTCTIME *d)
+{
+    /* wrapper around ans1_time_to_tm */
+    if (d->type != V_ASN1_UTCTIME)
+        return 0;
+    return asn1_time_to_tm(tm, d);
+}
+
+int ASN1_UTCTIME_check(const ASN1_UTCTIME *d)
+{
+    return asn1_utctime_to_tm(NULL, d);
+}
+
+/* Sets the string via simple copy without cleaning it up */
+int ASN1_UTCTIME_set_string(ASN1_UTCTIME *s, const char *str)
+{
+    ASN1_UTCTIME t;
+
+    t.type = V_ASN1_UTCTIME;
+    t.length = strlen(str);
+    t.data = (unsigned char *)str;
+    t.flags = 0;
+
+    if (!ASN1_UTCTIME_check(&t))
+        return 0;
+
+    if (s != NULL && !ASN1_STRING_copy(s, &t))
+        return 0;
+
+    return 1;
+}
+
+ASN1_UTCTIME *ASN1_UTCTIME_set(ASN1_UTCTIME *s, time_t t)
+{
+    return ASN1_UTCTIME_adj(s, t, 0, 0);
+}
+
+ASN1_UTCTIME *ASN1_UTCTIME_adj(ASN1_UTCTIME *s, time_t t,
+                               int offset_day, long offset_sec)
+{
+    struct tm *ts;
+    struct tm data;
+
+    ts = OPENSSL_gmtime(&t, &data);
+    if (ts == NULL)
+        return NULL;
+
+    if (offset_day || offset_sec) {
+        if (!OPENSSL_gmtime_adj(ts, offset_day, offset_sec))
+            return NULL;
+    }
+
+    return asn1_time_from_tm(s, ts, V_ASN1_UTCTIME);
+}
+
+int ASN1_UTCTIME_cmp_time_t(const ASN1_UTCTIME *s, time_t t)
+{
+    struct tm stm, ttm;
+    int day, sec;
+
+    if (!asn1_utctime_to_tm(&stm, s))
+        return -2;
+
+    if (OPENSSL_gmtime(&t, &ttm) == NULL)
+        return -2;
+
+    if (!OPENSSL_gmtime_diff(&day, &sec, &ttm, &stm))
+        return -2;
+
+    if (day > 0 || sec > 0)
+        return 1;
+    if (day < 0 || sec < 0)
+        return -1;
+    return 0;
+}
+
+int ASN1_UTCTIME_print(BIO *bp, const ASN1_UTCTIME *tm)
+{
+    if (tm->type != V_ASN1_UTCTIME)
+        return 0;
+    return ASN1_TIME_print(bp, tm);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_utf8.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_utf8.c
new file mode 100644
index 000000000..e2dc09f6a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_utf8.c
@@ -0,0 +1,188 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+
+/* UTF8 utilities */
+
+/*-
+ * This parses a UTF8 string one character at a time. It is passed a pointer
+ * to the string and the length of the string. It sets 'value' to the value of
+ * the current character. It returns the number of characters read or a
+ * negative error code:
+ * -1 = string too short
+ * -2 = illegal character
+ * -3 = subsequent characters not of the form 10xxxxxx
+ * -4 = character encoded incorrectly (not minimal length).
+ */
+
+int UTF8_getc(const unsigned char *str, int len, unsigned long *val)
+{
+    const unsigned char *p;
+    unsigned long value;
+    int ret;
+    if (len <= 0)
+        return 0;
+    p = str;
+
+    /* Check syntax and work out the encoded value (if correct) */
+    if ((*p & 0x80) == 0) {
+        value = *p++ & 0x7f;
+        ret = 1;
+    } else if ((*p & 0xe0) == 0xc0) {
+        if (len < 2)
+            return -1;
+        if ((p[1] & 0xc0) != 0x80)
+            return -3;
+        value = (*p++ & 0x1f) << 6;
+        value |= *p++ & 0x3f;
+        if (value < 0x80)
+            return -4;
+        ret = 2;
+    } else if ((*p & 0xf0) == 0xe0) {
+        if (len < 3)
+            return -1;
+        if (((p[1] & 0xc0) != 0x80)
+            || ((p[2] & 0xc0) != 0x80))
+            return -3;
+        value = (*p++ & 0xf) << 12;
+        value |= (*p++ & 0x3f) << 6;
+        value |= *p++ & 0x3f;
+        if (value < 0x800)
+            return -4;
+        ret = 3;
+    } else if ((*p & 0xf8) == 0xf0) {
+        if (len < 4)
+            return -1;
+        if (((p[1] & 0xc0) != 0x80)
+            || ((p[2] & 0xc0) != 0x80)
+            || ((p[3] & 0xc0) != 0x80))
+            return -3;
+        value = ((unsigned long)(*p++ & 0x7)) << 18;
+        value |= (*p++ & 0x3f) << 12;
+        value |= (*p++ & 0x3f) << 6;
+        value |= *p++ & 0x3f;
+        if (value < 0x10000)
+            return -4;
+        ret = 4;
+    } else if ((*p & 0xfc) == 0xf8) {
+        if (len < 5)
+            return -1;
+        if (((p[1] & 0xc0) != 0x80)
+            || ((p[2] & 0xc0) != 0x80)
+            || ((p[3] & 0xc0) != 0x80)
+            || ((p[4] & 0xc0) != 0x80))
+            return -3;
+        value = ((unsigned long)(*p++ & 0x3)) << 24;
+        value |= ((unsigned long)(*p++ & 0x3f)) << 18;
+        value |= ((unsigned long)(*p++ & 0x3f)) << 12;
+        value |= (*p++ & 0x3f) << 6;
+        value |= *p++ & 0x3f;
+        if (value < 0x200000)
+            return -4;
+        ret = 5;
+    } else if ((*p & 0xfe) == 0xfc) {
+        if (len < 6)
+            return -1;
+        if (((p[1] & 0xc0) != 0x80)
+            || ((p[2] & 0xc0) != 0x80)
+            || ((p[3] & 0xc0) != 0x80)
+            || ((p[4] & 0xc0) != 0x80)
+            || ((p[5] & 0xc0) != 0x80))
+            return -3;
+        value = ((unsigned long)(*p++ & 0x1)) << 30;
+        value |= ((unsigned long)(*p++ & 0x3f)) << 24;
+        value |= ((unsigned long)(*p++ & 0x3f)) << 18;
+        value |= ((unsigned long)(*p++ & 0x3f)) << 12;
+        value |= (*p++ & 0x3f) << 6;
+        value |= *p++ & 0x3f;
+        if (value < 0x4000000)
+            return -4;
+        ret = 6;
+    } else
+        return -2;
+    *val = value;
+    return ret;
+}
+
+/*
+ * This takes a character 'value' and writes the UTF8 encoded value in 'str'
+ * where 'str' is a buffer containing 'len' characters. Returns the number of
+ * characters written or -1 if 'len' is too small. 'str' can be set to NULL
+ * in which case it just returns the number of characters. It will need at
+ * most 6 characters.
+ */
+
+int UTF8_putc(unsigned char *str, int len, unsigned long value)
+{
+    if (!str)
+        len = 6;                /* Maximum we will need */
+    else if (len <= 0)
+        return -1;
+    if (value < 0x80) {
+        if (str)
+            *str = (unsigned char)value;
+        return 1;
+    }
+    if (value < 0x800) {
+        if (len < 2)
+            return -1;
+        if (str) {
+            *str++ = (unsigned char)(((value >> 6) & 0x1f) | 0xc0);
+            *str = (unsigned char)((value & 0x3f) | 0x80);
+        }
+        return 2;
+    }
+    if (value < 0x10000) {
+        if (len < 3)
+            return -1;
+        if (str) {
+            *str++ = (unsigned char)(((value >> 12) & 0xf) | 0xe0);
+            *str++ = (unsigned char)(((value >> 6) & 0x3f) | 0x80);
+            *str = (unsigned char)((value & 0x3f) | 0x80);
+        }
+        return 3;
+    }
+    if (value < 0x200000) {
+        if (len < 4)
+            return -1;
+        if (str) {
+            *str++ = (unsigned char)(((value >> 18) & 0x7) | 0xf0);
+            *str++ = (unsigned char)(((value >> 12) & 0x3f) | 0x80);
+            *str++ = (unsigned char)(((value >> 6) & 0x3f) | 0x80);
+            *str = (unsigned char)((value & 0x3f) | 0x80);
+        }
+        return 4;
+    }
+    if (value < 0x4000000) {
+        if (len < 5)
+            return -1;
+        if (str) {
+            *str++ = (unsigned char)(((value >> 24) & 0x3) | 0xf8);
+            *str++ = (unsigned char)(((value >> 18) & 0x3f) | 0x80);
+            *str++ = (unsigned char)(((value >> 12) & 0x3f) | 0x80);
+            *str++ = (unsigned char)(((value >> 6) & 0x3f) | 0x80);
+            *str = (unsigned char)((value & 0x3f) | 0x80);
+        }
+        return 5;
+    }
+    if (len < 6)
+        return -1;
+    if (str) {
+        *str++ = (unsigned char)(((value >> 30) & 0x1) | 0xfc);
+        *str++ = (unsigned char)(((value >> 24) & 0x3f) | 0x80);
+        *str++ = (unsigned char)(((value >> 18) & 0x3f) | 0x80);
+        *str++ = (unsigned char)(((value >> 12) & 0x3f) | 0x80);
+        *str++ = (unsigned char)(((value >> 6) & 0x3f) | 0x80);
+        *str = (unsigned char)((value & 0x3f) | 0x80);
+    }
+    return 6;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_verify.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_verify.c
new file mode 100644
index 000000000..cdaf17c3c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/a_verify.c
@@ -0,0 +1,178 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include <sys/types.h>
+
+#include "internal/cryptlib.h"
+
+#include <openssl/bn.h>
+#include <openssl/x509.h>
+#include <openssl/objects.h>
+#include <openssl/buffer.h>
+#include <openssl/evp.h>
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+
+#ifndef NO_ASN1_OLD
+
+int ASN1_verify(i2d_of_void *i2d, X509_ALGOR *a, ASN1_BIT_STRING *signature,
+                char *data, EVP_PKEY *pkey)
+{
+    EVP_MD_CTX *ctx = EVP_MD_CTX_new();
+    const EVP_MD *type;
+    unsigned char *p, *buf_in = NULL;
+    int ret = -1, i, inl;
+
+    if (ctx == NULL) {
+        ASN1err(ASN1_F_ASN1_VERIFY, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    i = OBJ_obj2nid(a->algorithm);
+    type = EVP_get_digestbyname(OBJ_nid2sn(i));
+    if (type == NULL) {
+        ASN1err(ASN1_F_ASN1_VERIFY, ASN1_R_UNKNOWN_MESSAGE_DIGEST_ALGORITHM);
+        goto err;
+    }
+
+    if (signature->type == V_ASN1_BIT_STRING && signature->flags & 0x7) {
+        ASN1err(ASN1_F_ASN1_VERIFY, ASN1_R_INVALID_BIT_STRING_BITS_LEFT);
+        goto err;
+    }
+
+    inl = i2d(data, NULL);
+    if (inl <= 0) {
+        ASN1err(ASN1_F_ASN1_VERIFY, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    buf_in = OPENSSL_malloc((unsigned int)inl);
+    if (buf_in == NULL) {
+        ASN1err(ASN1_F_ASN1_VERIFY, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    p = buf_in;
+
+    i2d(data, &p);
+    ret = EVP_VerifyInit_ex(ctx, type, NULL)
+        && EVP_VerifyUpdate(ctx, (unsigned char *)buf_in, inl);
+
+    OPENSSL_clear_free(buf_in, (unsigned int)inl);
+
+    if (!ret) {
+        ASN1err(ASN1_F_ASN1_VERIFY, ERR_R_EVP_LIB);
+        goto err;
+    }
+    ret = -1;
+
+    if (EVP_VerifyFinal(ctx, (unsigned char *)signature->data,
+                        (unsigned int)signature->length, pkey) <= 0) {
+        ASN1err(ASN1_F_ASN1_VERIFY, ERR_R_EVP_LIB);
+        ret = 0;
+        goto err;
+    }
+    ret = 1;
+ err:
+    EVP_MD_CTX_free(ctx);
+    return ret;
+}
+
+#endif
+
+int ASN1_item_verify(const ASN1_ITEM *it, X509_ALGOR *a,
+                     ASN1_BIT_STRING *signature, void *asn, EVP_PKEY *pkey)
+{
+    EVP_MD_CTX *ctx = NULL;
+    unsigned char *buf_in = NULL;
+    int ret = -1, inl = 0;
+    int mdnid, pknid;
+    size_t inll = 0;
+
+    if (!pkey) {
+        ASN1err(ASN1_F_ASN1_ITEM_VERIFY, ERR_R_PASSED_NULL_PARAMETER);
+        return -1;
+    }
+
+    if (signature->type == V_ASN1_BIT_STRING && signature->flags & 0x7) {
+        ASN1err(ASN1_F_ASN1_ITEM_VERIFY, ASN1_R_INVALID_BIT_STRING_BITS_LEFT);
+        return -1;
+    }
+
+    ctx = EVP_MD_CTX_new();
+    if (ctx == NULL) {
+        ASN1err(ASN1_F_ASN1_ITEM_VERIFY, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    /* Convert signature OID into digest and public key OIDs */
+    if (!OBJ_find_sigid_algs(OBJ_obj2nid(a->algorithm), &mdnid, &pknid)) {
+        ASN1err(ASN1_F_ASN1_ITEM_VERIFY, ASN1_R_UNKNOWN_SIGNATURE_ALGORITHM);
+        goto err;
+    }
+    if (mdnid == NID_undef) {
+        if (!pkey->ameth || !pkey->ameth->item_verify) {
+            ASN1err(ASN1_F_ASN1_ITEM_VERIFY,
+                    ASN1_R_UNKNOWN_SIGNATURE_ALGORITHM);
+            goto err;
+        }
+        ret = pkey->ameth->item_verify(ctx, it, asn, a, signature, pkey);
+        /*
+         * Return value of 2 means carry on, anything else means we exit
+         * straight away: either a fatal error of the underlying verification
+         * routine handles all verification.
+         */
+        if (ret != 2)
+            goto err;
+        ret = -1;
+    } else {
+        const EVP_MD *type = EVP_get_digestbynid(mdnid);
+
+        if (type == NULL) {
+            ASN1err(ASN1_F_ASN1_ITEM_VERIFY,
+                    ASN1_R_UNKNOWN_MESSAGE_DIGEST_ALGORITHM);
+            goto err;
+        }
+
+        /* Check public key OID matches public key type */
+        if (EVP_PKEY_type(pknid) != pkey->ameth->pkey_id) {
+            ASN1err(ASN1_F_ASN1_ITEM_VERIFY, ASN1_R_WRONG_PUBLIC_KEY_TYPE);
+            goto err;
+        }
+
+        if (!EVP_DigestVerifyInit(ctx, NULL, type, NULL, pkey)) {
+            ASN1err(ASN1_F_ASN1_ITEM_VERIFY, ERR_R_EVP_LIB);
+            ret = 0;
+            goto err;
+        }
+
+    }
+
+    inl = ASN1_item_i2d(asn, &buf_in, it);
+    if (inl <= 0) {
+        ASN1err(ASN1_F_ASN1_ITEM_VERIFY, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    if (buf_in == NULL) {
+        ASN1err(ASN1_F_ASN1_ITEM_VERIFY, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    inll = inl;
+
+    ret = EVP_DigestVerify(ctx, signature->data, (size_t)signature->length,
+                           buf_in, inl);
+    if (ret <= 0) {
+        ASN1err(ASN1_F_ASN1_ITEM_VERIFY, ERR_R_EVP_LIB);
+        goto err;
+    }
+    ret = 1;
+ err:
+    OPENSSL_clear_free(buf_in, inll);
+    EVP_MD_CTX_free(ctx);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/ameth_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/ameth_lib.c
new file mode 100644
index 000000000..d7d270dbb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/ameth_lib.c
@@ -0,0 +1,451 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"               /* for strncasecmp */
+#include "internal/cryptlib.h"
+#include <stdio.h>
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include <openssl/engine.h>
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+
+#include "standard_methods.h"
+
+typedef int sk_cmp_fn_type(const char *const *a, const char *const *b);
+static STACK_OF(EVP_PKEY_ASN1_METHOD) *app_methods = NULL;
+
+DECLARE_OBJ_BSEARCH_CMP_FN(const EVP_PKEY_ASN1_METHOD *,
+                           const EVP_PKEY_ASN1_METHOD *, ameth);
+
+static int ameth_cmp(const EVP_PKEY_ASN1_METHOD *const *a,
+                     const EVP_PKEY_ASN1_METHOD *const *b)
+{
+    return ((*a)->pkey_id - (*b)->pkey_id);
+}
+
+IMPLEMENT_OBJ_BSEARCH_CMP_FN(const EVP_PKEY_ASN1_METHOD *,
+                             const EVP_PKEY_ASN1_METHOD *, ameth);
+
+int EVP_PKEY_asn1_get_count(void)
+{
+    int num = OSSL_NELEM(standard_methods);
+    if (app_methods)
+        num += sk_EVP_PKEY_ASN1_METHOD_num(app_methods);
+    return num;
+}
+
+const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_get0(int idx)
+{
+    int num = OSSL_NELEM(standard_methods);
+    if (idx < 0)
+        return NULL;
+    if (idx < num)
+        return standard_methods[idx];
+    idx -= num;
+    return sk_EVP_PKEY_ASN1_METHOD_value(app_methods, idx);
+}
+
+static const EVP_PKEY_ASN1_METHOD *pkey_asn1_find(int type)
+{
+    EVP_PKEY_ASN1_METHOD tmp;
+    const EVP_PKEY_ASN1_METHOD *t = &tmp, **ret;
+    tmp.pkey_id = type;
+    if (app_methods) {
+        int idx;
+        idx = sk_EVP_PKEY_ASN1_METHOD_find(app_methods, &tmp);
+        if (idx >= 0)
+            return sk_EVP_PKEY_ASN1_METHOD_value(app_methods, idx);
+    }
+    ret = OBJ_bsearch_ameth(&t, standard_methods, OSSL_NELEM(standard_methods));
+    if (!ret || !*ret)
+        return NULL;
+    return *ret;
+}
+
+/*
+ * Find an implementation of an ASN1 algorithm. If 'pe' is not NULL also
+ * search through engines and set *pe to a functional reference to the engine
+ * implementing 'type' or NULL if no engine implements it.
+ */
+
+const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_find(ENGINE **pe, int type)
+{
+    const EVP_PKEY_ASN1_METHOD *t;
+
+    for (;;) {
+        t = pkey_asn1_find(type);
+        if (!t || !(t->pkey_flags & ASN1_PKEY_ALIAS))
+            break;
+        type = t->pkey_base_id;
+    }
+    if (pe) {
+#ifndef OPENSSL_NO_ENGINE
+        ENGINE *e;
+        /* type will contain the final unaliased type */
+        e = ENGINE_get_pkey_asn1_meth_engine(type);
+        if (e) {
+            *pe = e;
+            return ENGINE_get_pkey_asn1_meth(e, type);
+        }
+#endif
+        *pe = NULL;
+    }
+    return t;
+}
+
+const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_find_str(ENGINE **pe,
+                                                   const char *str, int len)
+{
+    int i;
+    const EVP_PKEY_ASN1_METHOD *ameth = NULL;
+
+    if (len == -1)
+        len = strlen(str);
+    if (pe) {
+#ifndef OPENSSL_NO_ENGINE
+        ENGINE *e;
+        ameth = ENGINE_pkey_asn1_find_str(&e, str, len);
+        if (ameth) {
+            /*
+             * Convert structural into functional reference
+             */
+            if (!ENGINE_init(e))
+                ameth = NULL;
+            ENGINE_free(e);
+            *pe = e;
+            return ameth;
+        }
+#endif
+        *pe = NULL;
+    }
+    for (i = EVP_PKEY_asn1_get_count(); i-- > 0; ) {
+        ameth = EVP_PKEY_asn1_get0(i);
+        if (ameth->pkey_flags & ASN1_PKEY_ALIAS)
+            continue;
+        if ((int)strlen(ameth->pem_str) == len
+            && strncasecmp(ameth->pem_str, str, len) == 0)
+            return ameth;
+    }
+    return NULL;
+}
+
+int EVP_PKEY_asn1_add0(const EVP_PKEY_ASN1_METHOD *ameth)
+{
+    EVP_PKEY_ASN1_METHOD tmp = { 0, };
+
+    /*
+     * One of the following must be true:
+     *
+     * pem_str == NULL AND ASN1_PKEY_ALIAS is set
+     * pem_str != NULL AND ASN1_PKEY_ALIAS is clear
+     *
+     * Anything else is an error and may lead to a corrupt ASN1 method table
+     */
+    if (!((ameth->pem_str == NULL
+           && (ameth->pkey_flags & ASN1_PKEY_ALIAS) != 0)
+          || (ameth->pem_str != NULL
+              && (ameth->pkey_flags & ASN1_PKEY_ALIAS) == 0))) {
+        EVPerr(EVP_F_EVP_PKEY_ASN1_ADD0, ERR_R_PASSED_INVALID_ARGUMENT);
+        return 0;
+    }
+
+    if (app_methods == NULL) {
+        app_methods = sk_EVP_PKEY_ASN1_METHOD_new(ameth_cmp);
+        if (app_methods == NULL)
+            return 0;
+    }
+
+    tmp.pkey_id = ameth->pkey_id;
+    if (sk_EVP_PKEY_ASN1_METHOD_find(app_methods, &tmp) >= 0) {
+        EVPerr(EVP_F_EVP_PKEY_ASN1_ADD0,
+               EVP_R_PKEY_APPLICATION_ASN1_METHOD_ALREADY_REGISTERED);
+        return 0;
+    }
+
+    if (!sk_EVP_PKEY_ASN1_METHOD_push(app_methods, ameth))
+        return 0;
+    sk_EVP_PKEY_ASN1_METHOD_sort(app_methods);
+    return 1;
+}
+
+int EVP_PKEY_asn1_add_alias(int to, int from)
+{
+    EVP_PKEY_ASN1_METHOD *ameth;
+    ameth = EVP_PKEY_asn1_new(from, ASN1_PKEY_ALIAS, NULL, NULL);
+    if (ameth == NULL)
+        return 0;
+    ameth->pkey_base_id = to;
+    if (!EVP_PKEY_asn1_add0(ameth)) {
+        EVP_PKEY_asn1_free(ameth);
+        return 0;
+    }
+    return 1;
+}
+
+int EVP_PKEY_asn1_get0_info(int *ppkey_id, int *ppkey_base_id,
+                            int *ppkey_flags, const char **pinfo,
+                            const char **ppem_str,
+                            const EVP_PKEY_ASN1_METHOD *ameth)
+{
+    if (!ameth)
+        return 0;
+    if (ppkey_id)
+        *ppkey_id = ameth->pkey_id;
+    if (ppkey_base_id)
+        *ppkey_base_id = ameth->pkey_base_id;
+    if (ppkey_flags)
+        *ppkey_flags = ameth->pkey_flags;
+    if (pinfo)
+        *pinfo = ameth->info;
+    if (ppem_str)
+        *ppem_str = ameth->pem_str;
+    return 1;
+}
+
+const EVP_PKEY_ASN1_METHOD *EVP_PKEY_get0_asn1(const EVP_PKEY *pkey)
+{
+    return pkey->ameth;
+}
+
+EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_new(int id, int flags,
+                                        const char *pem_str, const char *info)
+{
+    EVP_PKEY_ASN1_METHOD *ameth = OPENSSL_zalloc(sizeof(*ameth));
+
+    if (ameth == NULL)
+        return NULL;
+
+    ameth->pkey_id = id;
+    ameth->pkey_base_id = id;
+    ameth->pkey_flags = flags | ASN1_PKEY_DYNAMIC;
+
+    if (info) {
+        ameth->info = OPENSSL_strdup(info);
+        if (!ameth->info)
+            goto err;
+    }
+
+    if (pem_str) {
+        ameth->pem_str = OPENSSL_strdup(pem_str);
+        if (!ameth->pem_str)
+            goto err;
+    }
+
+    return ameth;
+
+ err:
+    EVP_PKEY_asn1_free(ameth);
+    return NULL;
+
+}
+
+void EVP_PKEY_asn1_copy(EVP_PKEY_ASN1_METHOD *dst,
+                        const EVP_PKEY_ASN1_METHOD *src)
+{
+
+    dst->pub_decode = src->pub_decode;
+    dst->pub_encode = src->pub_encode;
+    dst->pub_cmp = src->pub_cmp;
+    dst->pub_print = src->pub_print;
+
+    dst->priv_decode = src->priv_decode;
+    dst->priv_encode = src->priv_encode;
+    dst->priv_print = src->priv_print;
+
+    dst->old_priv_encode = src->old_priv_encode;
+    dst->old_priv_decode = src->old_priv_decode;
+
+    dst->pkey_size = src->pkey_size;
+    dst->pkey_bits = src->pkey_bits;
+
+    dst->param_decode = src->param_decode;
+    dst->param_encode = src->param_encode;
+    dst->param_missing = src->param_missing;
+    dst->param_copy = src->param_copy;
+    dst->param_cmp = src->param_cmp;
+    dst->param_print = src->param_print;
+
+    dst->pkey_free = src->pkey_free;
+    dst->pkey_ctrl = src->pkey_ctrl;
+
+    dst->item_sign = src->item_sign;
+    dst->item_verify = src->item_verify;
+
+    dst->siginf_set = src->siginf_set;
+
+    dst->pkey_check = src->pkey_check;
+
+}
+
+void EVP_PKEY_asn1_free(EVP_PKEY_ASN1_METHOD *ameth)
+{
+    if (ameth && (ameth->pkey_flags & ASN1_PKEY_DYNAMIC)) {
+        OPENSSL_free(ameth->pem_str);
+        OPENSSL_free(ameth->info);
+        OPENSSL_free(ameth);
+    }
+}
+
+void EVP_PKEY_asn1_set_public(EVP_PKEY_ASN1_METHOD *ameth,
+                              int (*pub_decode) (EVP_PKEY *pk,
+                                                 X509_PUBKEY *pub),
+                              int (*pub_encode) (X509_PUBKEY *pub,
+                                                 const EVP_PKEY *pk),
+                              int (*pub_cmp) (const EVP_PKEY *a,
+                                              const EVP_PKEY *b),
+                              int (*pub_print) (BIO *out,
+                                                const EVP_PKEY *pkey,
+                                                int indent, ASN1_PCTX *pctx),
+                              int (*pkey_size) (const EVP_PKEY *pk),
+                              int (*pkey_bits) (const EVP_PKEY *pk))
+{
+    ameth->pub_decode = pub_decode;
+    ameth->pub_encode = pub_encode;
+    ameth->pub_cmp = pub_cmp;
+    ameth->pub_print = pub_print;
+    ameth->pkey_size = pkey_size;
+    ameth->pkey_bits = pkey_bits;
+}
+
+void EVP_PKEY_asn1_set_private(EVP_PKEY_ASN1_METHOD *ameth,
+                               int (*priv_decode) (EVP_PKEY *pk,
+                                                   const PKCS8_PRIV_KEY_INFO
+                                                   *p8inf),
+                               int (*priv_encode) (PKCS8_PRIV_KEY_INFO *p8,
+                                                   const EVP_PKEY *pk),
+                               int (*priv_print) (BIO *out,
+                                                  const EVP_PKEY *pkey,
+                                                  int indent,
+                                                  ASN1_PCTX *pctx))
+{
+    ameth->priv_decode = priv_decode;
+    ameth->priv_encode = priv_encode;
+    ameth->priv_print = priv_print;
+}
+
+void EVP_PKEY_asn1_set_param(EVP_PKEY_ASN1_METHOD *ameth,
+                             int (*param_decode) (EVP_PKEY *pkey,
+                                                  const unsigned char **pder,
+                                                  int derlen),
+                             int (*param_encode) (const EVP_PKEY *pkey,
+                                                  unsigned char **pder),
+                             int (*param_missing) (const EVP_PKEY *pk),
+                             int (*param_copy) (EVP_PKEY *to,
+                                                const EVP_PKEY *from),
+                             int (*param_cmp) (const EVP_PKEY *a,
+                                               const EVP_PKEY *b),
+                             int (*param_print) (BIO *out,
+                                                 const EVP_PKEY *pkey,
+                                                 int indent, ASN1_PCTX *pctx))
+{
+    ameth->param_decode = param_decode;
+    ameth->param_encode = param_encode;
+    ameth->param_missing = param_missing;
+    ameth->param_copy = param_copy;
+    ameth->param_cmp = param_cmp;
+    ameth->param_print = param_print;
+}
+
+void EVP_PKEY_asn1_set_free(EVP_PKEY_ASN1_METHOD *ameth,
+                            void (*pkey_free) (EVP_PKEY *pkey))
+{
+    ameth->pkey_free = pkey_free;
+}
+
+void EVP_PKEY_asn1_set_ctrl(EVP_PKEY_ASN1_METHOD *ameth,
+                            int (*pkey_ctrl) (EVP_PKEY *pkey, int op,
+                                              long arg1, void *arg2))
+{
+    ameth->pkey_ctrl = pkey_ctrl;
+}
+
+void EVP_PKEY_asn1_set_security_bits(EVP_PKEY_ASN1_METHOD *ameth,
+                                     int (*pkey_security_bits) (const EVP_PKEY
+                                                                *pk))
+{
+    ameth->pkey_security_bits = pkey_security_bits;
+}
+
+void EVP_PKEY_asn1_set_item(EVP_PKEY_ASN1_METHOD *ameth,
+                            int (*item_verify) (EVP_MD_CTX *ctx,
+                                                const ASN1_ITEM *it,
+                                                void *asn,
+                                                X509_ALGOR *a,
+                                                ASN1_BIT_STRING *sig,
+                                                EVP_PKEY *pkey),
+                            int (*item_sign) (EVP_MD_CTX *ctx,
+                                              const ASN1_ITEM *it,
+                                              void *asn,
+                                              X509_ALGOR *alg1,
+                                              X509_ALGOR *alg2,
+                                              ASN1_BIT_STRING *sig))
+{
+    ameth->item_sign = item_sign;
+    ameth->item_verify = item_verify;
+}
+
+void EVP_PKEY_asn1_set_siginf(EVP_PKEY_ASN1_METHOD *ameth,
+                              int (*siginf_set) (X509_SIG_INFO *siginf,
+                                                 const X509_ALGOR *alg,
+                                                 const ASN1_STRING *sig))
+{
+    ameth->siginf_set = siginf_set;
+}
+
+void EVP_PKEY_asn1_set_check(EVP_PKEY_ASN1_METHOD *ameth,
+                             int (*pkey_check) (const EVP_PKEY *pk))
+{
+    ameth->pkey_check = pkey_check;
+}
+
+void EVP_PKEY_asn1_set_public_check(EVP_PKEY_ASN1_METHOD *ameth,
+                                    int (*pkey_pub_check) (const EVP_PKEY *pk))
+{
+    ameth->pkey_public_check = pkey_pub_check;
+}
+
+void EVP_PKEY_asn1_set_param_check(EVP_PKEY_ASN1_METHOD *ameth,
+                                   int (*pkey_param_check) (const EVP_PKEY *pk))
+{
+    ameth->pkey_param_check = pkey_param_check;
+}
+
+void EVP_PKEY_asn1_set_set_priv_key(EVP_PKEY_ASN1_METHOD *ameth,
+                                    int (*set_priv_key) (EVP_PKEY *pk,
+                                                         const unsigned char
+                                                            *priv,
+                                                         size_t len))
+{
+    ameth->set_priv_key = set_priv_key;
+}
+
+void EVP_PKEY_asn1_set_set_pub_key(EVP_PKEY_ASN1_METHOD *ameth,
+                                   int (*set_pub_key) (EVP_PKEY *pk,
+                                                       const unsigned char *pub,
+                                                       size_t len))
+{
+    ameth->set_pub_key = set_pub_key;
+}
+
+void EVP_PKEY_asn1_set_get_priv_key(EVP_PKEY_ASN1_METHOD *ameth,
+                                    int (*get_priv_key) (const EVP_PKEY *pk,
+                                                         unsigned char *priv,
+                                                         size_t *len))
+{
+    ameth->get_priv_key = get_priv_key;
+}
+
+void EVP_PKEY_asn1_set_get_pub_key(EVP_PKEY_ASN1_METHOD *ameth,
+                                   int (*get_pub_key) (const EVP_PKEY *pk,
+                                                       unsigned char *pub,
+                                                       size_t *len))
+{
+    ameth->get_pub_key = get_pub_key;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_err.c
new file mode 100644
index 000000000..613f9ae71
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_err.c
@@ -0,0 +1,350 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/asn1err.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA ASN1_str_functs[] = {
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_A2D_ASN1_OBJECT, 0), "a2d_ASN1_OBJECT"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_A2I_ASN1_INTEGER, 0), "a2i_ASN1_INTEGER"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_A2I_ASN1_STRING, 0), "a2i_ASN1_STRING"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_APPEND_EXP, 0), "append_exp"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_BIO_INIT, 0), "asn1_bio_init"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_BIT_STRING_SET_BIT, 0),
+     "ASN1_BIT_STRING_set_bit"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_CB, 0), "asn1_cb"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_CHECK_TLEN, 0), "asn1_check_tlen"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_COLLECT, 0), "asn1_collect"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_D2I_EX_PRIMITIVE, 0),
+     "asn1_d2i_ex_primitive"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_D2I_FP, 0), "ASN1_d2i_fp"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_D2I_READ_BIO, 0), "asn1_d2i_read_bio"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_DIGEST, 0), "ASN1_digest"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_DO_ADB, 0), "asn1_do_adb"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_DO_LOCK, 0), "asn1_do_lock"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_DUP, 0), "ASN1_dup"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ENC_SAVE, 0), "asn1_enc_save"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_EX_C2I, 0), "asn1_ex_c2i"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_FIND_END, 0), "asn1_find_end"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_GENERALIZEDTIME_ADJ, 0),
+     "ASN1_GENERALIZEDTIME_adj"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_GENERATE_V3, 0), "ASN1_generate_v3"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_GET_INT64, 0), "asn1_get_int64"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_GET_OBJECT, 0), "ASN1_get_object"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_GET_UINT64, 0), "asn1_get_uint64"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_I2D_BIO, 0), "ASN1_i2d_bio"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_I2D_FP, 0), "ASN1_i2d_fp"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ITEM_D2I_FP, 0), "ASN1_item_d2i_fp"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ITEM_DUP, 0), "ASN1_item_dup"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ITEM_EMBED_D2I, 0),
+     "asn1_item_embed_d2i"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ITEM_EMBED_NEW, 0),
+     "asn1_item_embed_new"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ITEM_FLAGS_I2D, 0),
+     "asn1_item_flags_i2d"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ITEM_I2D_BIO, 0), "ASN1_item_i2d_bio"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ITEM_I2D_FP, 0), "ASN1_item_i2d_fp"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ITEM_PACK, 0), "ASN1_item_pack"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ITEM_SIGN, 0), "ASN1_item_sign"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ITEM_SIGN_CTX, 0),
+     "ASN1_item_sign_ctx"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ITEM_UNPACK, 0), "ASN1_item_unpack"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ITEM_VERIFY, 0), "ASN1_item_verify"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_MBSTRING_NCOPY, 0),
+     "ASN1_mbstring_ncopy"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_OBJECT_NEW, 0), "ASN1_OBJECT_new"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_OUTPUT_DATA, 0), "asn1_output_data"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_PCTX_NEW, 0), "ASN1_PCTX_new"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_PRIMITIVE_NEW, 0),
+     "asn1_primitive_new"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_SCTX_NEW, 0), "ASN1_SCTX_new"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_SIGN, 0), "ASN1_sign"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_STR2TYPE, 0), "asn1_str2type"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_STRING_GET_INT64, 0),
+     "asn1_string_get_int64"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_STRING_GET_UINT64, 0),
+     "asn1_string_get_uint64"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_STRING_SET, 0), "ASN1_STRING_set"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_STRING_TABLE_ADD, 0),
+     "ASN1_STRING_TABLE_add"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_STRING_TO_BN, 0), "asn1_string_to_bn"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_STRING_TYPE_NEW, 0),
+     "ASN1_STRING_type_new"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_TEMPLATE_EX_D2I, 0),
+     "asn1_template_ex_d2i"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_TEMPLATE_NEW, 0), "asn1_template_new"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_TEMPLATE_NOEXP_D2I, 0),
+     "asn1_template_noexp_d2i"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_TIME_ADJ, 0), "ASN1_TIME_adj"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_TYPE_GET_INT_OCTETSTRING, 0),
+     "ASN1_TYPE_get_int_octetstring"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_TYPE_GET_OCTETSTRING, 0),
+     "ASN1_TYPE_get_octetstring"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_UTCTIME_ADJ, 0), "ASN1_UTCTIME_adj"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_VERIFY, 0), "ASN1_verify"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_B64_READ_ASN1, 0), "b64_read_asn1"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_B64_WRITE_ASN1, 0), "B64_write_ASN1"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_BIO_NEW_NDEF, 0), "BIO_new_NDEF"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_BITSTR_CB, 0), "bitstr_cb"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_BN_TO_ASN1_STRING, 0), "bn_to_asn1_string"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_C2I_ASN1_BIT_STRING, 0),
+     "c2i_ASN1_BIT_STRING"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_C2I_ASN1_INTEGER, 0), "c2i_ASN1_INTEGER"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_C2I_ASN1_OBJECT, 0), "c2i_ASN1_OBJECT"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_C2I_IBUF, 0), "c2i_ibuf"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_C2I_UINT64_INT, 0), "c2i_uint64_int"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_COLLECT_DATA, 0), "collect_data"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_D2I_ASN1_OBJECT, 0), "d2i_ASN1_OBJECT"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_D2I_ASN1_UINTEGER, 0), "d2i_ASN1_UINTEGER"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_D2I_AUTOPRIVATEKEY, 0),
+     "d2i_AutoPrivateKey"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_D2I_PRIVATEKEY, 0), "d2i_PrivateKey"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_D2I_PUBLICKEY, 0), "d2i_PublicKey"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_DO_BUF, 0), "do_buf"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_DO_CREATE, 0), "do_create"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_DO_DUMP, 0), "do_dump"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_DO_TCREATE, 0), "do_tcreate"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_I2A_ASN1_OBJECT, 0), "i2a_ASN1_OBJECT"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_I2D_ASN1_BIO_STREAM, 0),
+     "i2d_ASN1_bio_stream"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_I2D_ASN1_OBJECT, 0), "i2d_ASN1_OBJECT"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_I2D_DSA_PUBKEY, 0), "i2d_DSA_PUBKEY"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_I2D_EC_PUBKEY, 0), "i2d_EC_PUBKEY"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_I2D_PRIVATEKEY, 0), "i2d_PrivateKey"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_I2D_PUBLICKEY, 0), "i2d_PublicKey"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_I2D_RSA_PUBKEY, 0), "i2d_RSA_PUBKEY"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_LONG_C2I, 0), "long_c2i"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_NDEF_PREFIX, 0), "ndef_prefix"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_NDEF_SUFFIX, 0), "ndef_suffix"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_OID_MODULE_INIT, 0), "oid_module_init"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_PARSE_TAGGING, 0), "parse_tagging"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_PKCS5_PBE2_SET_IV, 0), "PKCS5_pbe2_set_iv"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_PKCS5_PBE2_SET_SCRYPT, 0),
+     "PKCS5_pbe2_set_scrypt"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_PKCS5_PBE_SET, 0), "PKCS5_pbe_set"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_PKCS5_PBE_SET0_ALGOR, 0),
+     "PKCS5_pbe_set0_algor"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_PKCS5_PBKDF2_SET, 0), "PKCS5_pbkdf2_set"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_PKCS5_SCRYPT_SET, 0), "pkcs5_scrypt_set"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_SMIME_READ_ASN1, 0), "SMIME_read_ASN1"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_SMIME_TEXT, 0), "SMIME_text"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_STABLE_GET, 0), "stable_get"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_STBL_MODULE_INIT, 0), "stbl_module_init"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_UINT32_C2I, 0), "uint32_c2i"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_UINT32_NEW, 0), "uint32_new"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_UINT64_C2I, 0), "uint64_c2i"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_UINT64_NEW, 0), "uint64_new"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_X509_CRL_ADD0_REVOKED, 0),
+     "X509_CRL_add0_revoked"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_X509_INFO_NEW, 0), "X509_INFO_new"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_X509_NAME_ENCODE, 0), "x509_name_encode"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_X509_NAME_EX_D2I, 0), "x509_name_ex_d2i"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_X509_NAME_EX_NEW, 0), "x509_name_ex_new"},
+    {ERR_PACK(ERR_LIB_ASN1, ASN1_F_X509_PKEY_NEW, 0), "X509_PKEY_new"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA ASN1_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ADDING_OBJECT), "adding object"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ASN1_PARSE_ERROR), "asn1 parse error"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ASN1_SIG_PARSE_ERROR),
+    "asn1 sig parse error"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_AUX_ERROR), "aux error"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_BAD_OBJECT_HEADER), "bad object header"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_BMPSTRING_IS_WRONG_LENGTH),
+    "bmpstring is wrong length"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_BN_LIB), "bn lib"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_BOOLEAN_IS_WRONG_LENGTH),
+    "boolean is wrong length"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_BUFFER_TOO_SMALL), "buffer too small"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_CIPHER_HAS_NO_OBJECT_IDENTIFIER),
+    "cipher has no object identifier"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_CONTEXT_NOT_INITIALISED),
+    "context not initialised"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_DATA_IS_WRONG), "data is wrong"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_DECODE_ERROR), "decode error"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_DEPTH_EXCEEDED), "depth exceeded"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_DIGEST_AND_KEY_TYPE_NOT_SUPPORTED),
+    "digest and key type not supported"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ENCODE_ERROR), "encode error"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ERROR_GETTING_TIME),
+    "error getting time"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ERROR_LOADING_SECTION),
+    "error loading section"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ERROR_SETTING_CIPHER_PARAMS),
+    "error setting cipher params"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_EXPECTING_AN_INTEGER),
+    "expecting an integer"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_EXPECTING_AN_OBJECT),
+    "expecting an object"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_EXPLICIT_LENGTH_MISMATCH),
+    "explicit length mismatch"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED),
+    "explicit tag not constructed"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_FIELD_MISSING), "field missing"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_FIRST_NUM_TOO_LARGE),
+    "first num too large"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_HEADER_TOO_LONG), "header too long"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_BITSTRING_FORMAT),
+    "illegal bitstring format"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_BOOLEAN), "illegal boolean"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_CHARACTERS),
+    "illegal characters"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_FORMAT), "illegal format"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_HEX), "illegal hex"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_IMPLICIT_TAG),
+    "illegal implicit tag"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_INTEGER), "illegal integer"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_NEGATIVE_VALUE),
+    "illegal negative value"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_NESTED_TAGGING),
+    "illegal nested tagging"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_NULL), "illegal null"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_NULL_VALUE),
+    "illegal null value"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_OBJECT), "illegal object"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_OPTIONAL_ANY),
+    "illegal optional any"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_OPTIONS_ON_ITEM_TEMPLATE),
+    "illegal options on item template"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_PADDING), "illegal padding"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_TAGGED_ANY),
+    "illegal tagged any"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_TIME_VALUE),
+    "illegal time value"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ILLEGAL_ZERO_CONTENT),
+    "illegal zero content"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_INTEGER_NOT_ASCII_FORMAT),
+    "integer not ascii format"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_INTEGER_TOO_LARGE_FOR_LONG),
+    "integer too large for long"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_INVALID_BIT_STRING_BITS_LEFT),
+    "invalid bit string bits left"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_INVALID_BMPSTRING_LENGTH),
+    "invalid bmpstring length"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_INVALID_DIGIT), "invalid digit"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_INVALID_MIME_TYPE), "invalid mime type"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_INVALID_MODIFIER), "invalid modifier"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_INVALID_NUMBER), "invalid number"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_INVALID_OBJECT_ENCODING),
+    "invalid object encoding"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_INVALID_SCRYPT_PARAMETERS),
+    "invalid scrypt parameters"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_INVALID_SEPARATOR), "invalid separator"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_INVALID_STRING_TABLE_VALUE),
+    "invalid string table value"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_INVALID_UNIVERSALSTRING_LENGTH),
+    "invalid universalstring length"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_INVALID_UTF8STRING),
+    "invalid utf8string"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_INVALID_VALUE), "invalid value"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_LIST_ERROR), "list error"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_MIME_NO_CONTENT_TYPE),
+    "mime no content type"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_MIME_PARSE_ERROR), "mime parse error"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_MIME_SIG_PARSE_ERROR),
+    "mime sig parse error"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_MISSING_EOC), "missing eoc"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_MISSING_SECOND_NUMBER),
+    "missing second number"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_MISSING_VALUE), "missing value"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_MSTRING_NOT_UNIVERSAL),
+    "mstring not universal"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_MSTRING_WRONG_TAG), "mstring wrong tag"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_NESTED_ASN1_STRING),
+    "nested asn1 string"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_NESTED_TOO_DEEP), "nested too deep"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_NON_HEX_CHARACTERS),
+    "non hex characters"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_NOT_ASCII_FORMAT), "not ascii format"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_NOT_ENOUGH_DATA), "not enough data"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_NO_CONTENT_TYPE), "no content type"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_NO_MATCHING_CHOICE_TYPE),
+    "no matching choice type"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_NO_MULTIPART_BODY_FAILURE),
+    "no multipart body failure"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_NO_MULTIPART_BOUNDARY),
+    "no multipart boundary"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_NO_SIG_CONTENT_TYPE),
+    "no sig content type"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_NULL_IS_WRONG_LENGTH),
+    "null is wrong length"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_OBJECT_NOT_ASCII_FORMAT),
+    "object not ascii format"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_ODD_NUMBER_OF_CHARS),
+    "odd number of chars"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_SECOND_NUMBER_TOO_LARGE),
+    "second number too large"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_SEQUENCE_LENGTH_MISMATCH),
+    "sequence length mismatch"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_SEQUENCE_NOT_CONSTRUCTED),
+    "sequence not constructed"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_SEQUENCE_OR_SET_NEEDS_CONFIG),
+    "sequence or set needs config"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_SHORT_LINE), "short line"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_SIG_INVALID_MIME_TYPE),
+    "sig invalid mime type"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_STREAMING_NOT_SUPPORTED),
+    "streaming not supported"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_STRING_TOO_LONG), "string too long"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_STRING_TOO_SHORT), "string too short"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_THE_ASN1_OBJECT_IDENTIFIER_IS_NOT_KNOWN_FOR_THIS_MD),
+    "the asn1 object identifier is not known for this md"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_TIME_NOT_ASCII_FORMAT),
+    "time not ascii format"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_TOO_LARGE), "too large"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_TOO_LONG), "too long"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_TOO_SMALL), "too small"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_TYPE_NOT_CONSTRUCTED),
+    "type not constructed"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_TYPE_NOT_PRIMITIVE),
+    "type not primitive"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_UNEXPECTED_EOC), "unexpected eoc"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_UNIVERSALSTRING_IS_WRONG_LENGTH),
+    "universalstring is wrong length"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_UNKNOWN_FORMAT), "unknown format"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_UNKNOWN_MESSAGE_DIGEST_ALGORITHM),
+    "unknown message digest algorithm"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_UNKNOWN_OBJECT_TYPE),
+    "unknown object type"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_UNKNOWN_PUBLIC_KEY_TYPE),
+    "unknown public key type"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_UNKNOWN_SIGNATURE_ALGORITHM),
+    "unknown signature algorithm"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_UNKNOWN_TAG), "unknown tag"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_UNSUPPORTED_ANY_DEFINED_BY_TYPE),
+    "unsupported any defined by type"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_UNSUPPORTED_CIPHER),
+    "unsupported cipher"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE),
+    "unsupported public key type"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_UNSUPPORTED_TYPE), "unsupported type"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_WRONG_INTEGER_TYPE),
+    "wrong integer type"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_WRONG_PUBLIC_KEY_TYPE),
+    "wrong public key type"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_WRONG_TAG), "wrong tag"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_ASN1_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(ASN1_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(ASN1_str_functs);
+        ERR_load_strings_const(ASN1_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_gen.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_gen.c
new file mode 100644
index 000000000..493a693aa
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_gen.c
@@ -0,0 +1,789 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include <openssl/x509v3.h>
+
+#define ASN1_GEN_FLAG           0x10000
+#define ASN1_GEN_FLAG_IMP       (ASN1_GEN_FLAG|1)
+#define ASN1_GEN_FLAG_EXP       (ASN1_GEN_FLAG|2)
+#define ASN1_GEN_FLAG_TAG       (ASN1_GEN_FLAG|3)
+#define ASN1_GEN_FLAG_BITWRAP   (ASN1_GEN_FLAG|4)
+#define ASN1_GEN_FLAG_OCTWRAP   (ASN1_GEN_FLAG|5)
+#define ASN1_GEN_FLAG_SEQWRAP   (ASN1_GEN_FLAG|6)
+#define ASN1_GEN_FLAG_SETWRAP   (ASN1_GEN_FLAG|7)
+#define ASN1_GEN_FLAG_FORMAT    (ASN1_GEN_FLAG|8)
+
+#define ASN1_GEN_STR(str,val)   {str, sizeof(str) - 1, val}
+
+#define ASN1_FLAG_EXP_MAX       20
+/* Maximum number of nested sequences */
+#define ASN1_GEN_SEQ_MAX_DEPTH  50
+
+/* Input formats */
+
+/* ASCII: default */
+#define ASN1_GEN_FORMAT_ASCII   1
+/* UTF8 */
+#define ASN1_GEN_FORMAT_UTF8    2
+/* Hex */
+#define ASN1_GEN_FORMAT_HEX     3
+/* List of bits */
+#define ASN1_GEN_FORMAT_BITLIST 4
+
+struct tag_name_st {
+    const char *strnam;
+    int len;
+    int tag;
+};
+
+typedef struct {
+    int exp_tag;
+    int exp_class;
+    int exp_constructed;
+    int exp_pad;
+    long exp_len;
+} tag_exp_type;
+
+typedef struct {
+    int imp_tag;
+    int imp_class;
+    int utype;
+    int format;
+    const char *str;
+    tag_exp_type exp_list[ASN1_FLAG_EXP_MAX];
+    int exp_count;
+} tag_exp_arg;
+
+static ASN1_TYPE *generate_v3(const char *str, X509V3_CTX *cnf, int depth,
+                              int *perr);
+static int bitstr_cb(const char *elem, int len, void *bitstr);
+static int asn1_cb(const char *elem, int len, void *bitstr);
+static int append_exp(tag_exp_arg *arg, int exp_tag, int exp_class,
+                      int exp_constructed, int exp_pad, int imp_ok);
+static int parse_tagging(const char *vstart, int vlen, int *ptag,
+                         int *pclass);
+static ASN1_TYPE *asn1_multi(int utype, const char *section, X509V3_CTX *cnf,
+                             int depth, int *perr);
+static ASN1_TYPE *asn1_str2type(const char *str, int format, int utype);
+static int asn1_str2tag(const char *tagstr, int len);
+
+ASN1_TYPE *ASN1_generate_nconf(const char *str, CONF *nconf)
+{
+    X509V3_CTX cnf;
+
+    if (!nconf)
+        return ASN1_generate_v3(str, NULL);
+
+    X509V3_set_nconf(&cnf, nconf);
+    return ASN1_generate_v3(str, &cnf);
+}
+
+ASN1_TYPE *ASN1_generate_v3(const char *str, X509V3_CTX *cnf)
+{
+    int err = 0;
+    ASN1_TYPE *ret = generate_v3(str, cnf, 0, &err);
+    if (err)
+        ASN1err(ASN1_F_ASN1_GENERATE_V3, err);
+    return ret;
+}
+
+static ASN1_TYPE *generate_v3(const char *str, X509V3_CTX *cnf, int depth,
+                              int *perr)
+{
+    ASN1_TYPE *ret;
+    tag_exp_arg asn1_tags;
+    tag_exp_type *etmp;
+
+    int i, len;
+
+    unsigned char *orig_der = NULL, *new_der = NULL;
+    const unsigned char *cpy_start;
+    unsigned char *p;
+    const unsigned char *cp;
+    int cpy_len;
+    long hdr_len = 0;
+    int hdr_constructed = 0, hdr_tag, hdr_class;
+    int r;
+
+    asn1_tags.imp_tag = -1;
+    asn1_tags.imp_class = -1;
+    asn1_tags.format = ASN1_GEN_FORMAT_ASCII;
+    asn1_tags.exp_count = 0;
+    if (CONF_parse_list(str, ',', 1, asn1_cb, &asn1_tags) != 0) {
+        *perr = ASN1_R_UNKNOWN_TAG;
+        return NULL;
+    }
+
+    if ((asn1_tags.utype == V_ASN1_SEQUENCE)
+        || (asn1_tags.utype == V_ASN1_SET)) {
+        if (!cnf) {
+            *perr = ASN1_R_SEQUENCE_OR_SET_NEEDS_CONFIG;
+            return NULL;
+        }
+        if (depth >= ASN1_GEN_SEQ_MAX_DEPTH) {
+            *perr = ASN1_R_ILLEGAL_NESTED_TAGGING;
+            return NULL;
+        }
+        ret = asn1_multi(asn1_tags.utype, asn1_tags.str, cnf, depth, perr);
+    } else
+        ret = asn1_str2type(asn1_tags.str, asn1_tags.format, asn1_tags.utype);
+
+    if (!ret)
+        return NULL;
+
+    /* If no tagging return base type */
+    if ((asn1_tags.imp_tag == -1) && (asn1_tags.exp_count == 0))
+        return ret;
+
+    /* Generate the encoding */
+    cpy_len = i2d_ASN1_TYPE(ret, &orig_der);
+    ASN1_TYPE_free(ret);
+    ret = NULL;
+    /* Set point to start copying for modified encoding */
+    cpy_start = orig_der;
+
+    /* Do we need IMPLICIT tagging? */
+    if (asn1_tags.imp_tag != -1) {
+        /* If IMPLICIT we will replace the underlying tag */
+        /* Skip existing tag+len */
+        r = ASN1_get_object(&cpy_start, &hdr_len, &hdr_tag, &hdr_class,
+                            cpy_len);
+        if (r & 0x80)
+            goto err;
+        /* Update copy length */
+        cpy_len -= cpy_start - orig_der;
+        /*
+         * For IMPLICIT tagging the length should match the original length
+         * and constructed flag should be consistent.
+         */
+        if (r & 0x1) {
+            /* Indefinite length constructed */
+            hdr_constructed = 2;
+            hdr_len = 0;
+        } else
+            /* Just retain constructed flag */
+            hdr_constructed = r & V_ASN1_CONSTRUCTED;
+        /*
+         * Work out new length with IMPLICIT tag: ignore constructed because
+         * it will mess up if indefinite length
+         */
+        len = ASN1_object_size(0, hdr_len, asn1_tags.imp_tag);
+    } else
+        len = cpy_len;
+
+    /* Work out length in any EXPLICIT, starting from end */
+
+    for (i = 0, etmp = asn1_tags.exp_list + asn1_tags.exp_count - 1;
+         i < asn1_tags.exp_count; i++, etmp--) {
+        /* Content length: number of content octets + any padding */
+        len += etmp->exp_pad;
+        etmp->exp_len = len;
+        /* Total object length: length including new header */
+        len = ASN1_object_size(0, len, etmp->exp_tag);
+    }
+
+    /* Allocate buffer for new encoding */
+
+    new_der = OPENSSL_malloc(len);
+    if (new_der == NULL)
+        goto err;
+
+    /* Generate tagged encoding */
+
+    p = new_der;
+
+    /* Output explicit tags first */
+
+    for (i = 0, etmp = asn1_tags.exp_list; i < asn1_tags.exp_count;
+         i++, etmp++) {
+        ASN1_put_object(&p, etmp->exp_constructed, etmp->exp_len,
+                        etmp->exp_tag, etmp->exp_class);
+        if (etmp->exp_pad)
+            *p++ = 0;
+    }
+
+    /* If IMPLICIT, output tag */
+
+    if (asn1_tags.imp_tag != -1) {
+        if (asn1_tags.imp_class == V_ASN1_UNIVERSAL
+            && (asn1_tags.imp_tag == V_ASN1_SEQUENCE
+                || asn1_tags.imp_tag == V_ASN1_SET))
+            hdr_constructed = V_ASN1_CONSTRUCTED;
+        ASN1_put_object(&p, hdr_constructed, hdr_len,
+                        asn1_tags.imp_tag, asn1_tags.imp_class);
+    }
+
+    /* Copy across original encoding */
+    memcpy(p, cpy_start, cpy_len);
+
+    cp = new_der;
+
+    /* Obtain new ASN1_TYPE structure */
+    ret = d2i_ASN1_TYPE(NULL, &cp, len);
+
+ err:
+    OPENSSL_free(orig_der);
+    OPENSSL_free(new_der);
+
+    return ret;
+
+}
+
+static int asn1_cb(const char *elem, int len, void *bitstr)
+{
+    tag_exp_arg *arg = bitstr;
+    int i;
+    int utype;
+    int vlen = 0;
+    const char *p, *vstart = NULL;
+
+    int tmp_tag, tmp_class;
+
+    if (elem == NULL)
+        return -1;
+
+    for (i = 0, p = elem; i < len; p++, i++) {
+        /* Look for the ':' in name value pairs */
+        if (*p == ':') {
+            vstart = p + 1;
+            vlen = len - (vstart - elem);
+            len = p - elem;
+            break;
+        }
+    }
+
+    utype = asn1_str2tag(elem, len);
+
+    if (utype == -1) {
+        ASN1err(ASN1_F_ASN1_CB, ASN1_R_UNKNOWN_TAG);
+        ERR_add_error_data(2, "tag=", elem);
+        return -1;
+    }
+
+    /* If this is not a modifier mark end of string and exit */
+    if (!(utype & ASN1_GEN_FLAG)) {
+        arg->utype = utype;
+        arg->str = vstart;
+        /* If no value and not end of string, error */
+        if (!vstart && elem[len]) {
+            ASN1err(ASN1_F_ASN1_CB, ASN1_R_MISSING_VALUE);
+            return -1;
+        }
+        return 0;
+    }
+
+    switch (utype) {
+
+    case ASN1_GEN_FLAG_IMP:
+        /* Check for illegal multiple IMPLICIT tagging */
+        if (arg->imp_tag != -1) {
+            ASN1err(ASN1_F_ASN1_CB, ASN1_R_ILLEGAL_NESTED_TAGGING);
+            return -1;
+        }
+        if (!parse_tagging(vstart, vlen, &arg->imp_tag, &arg->imp_class))
+            return -1;
+        break;
+
+    case ASN1_GEN_FLAG_EXP:
+
+        if (!parse_tagging(vstart, vlen, &tmp_tag, &tmp_class))
+            return -1;
+        if (!append_exp(arg, tmp_tag, tmp_class, 1, 0, 0))
+            return -1;
+        break;
+
+    case ASN1_GEN_FLAG_SEQWRAP:
+        if (!append_exp(arg, V_ASN1_SEQUENCE, V_ASN1_UNIVERSAL, 1, 0, 1))
+            return -1;
+        break;
+
+    case ASN1_GEN_FLAG_SETWRAP:
+        if (!append_exp(arg, V_ASN1_SET, V_ASN1_UNIVERSAL, 1, 0, 1))
+            return -1;
+        break;
+
+    case ASN1_GEN_FLAG_BITWRAP:
+        if (!append_exp(arg, V_ASN1_BIT_STRING, V_ASN1_UNIVERSAL, 0, 1, 1))
+            return -1;
+        break;
+
+    case ASN1_GEN_FLAG_OCTWRAP:
+        if (!append_exp(arg, V_ASN1_OCTET_STRING, V_ASN1_UNIVERSAL, 0, 0, 1))
+            return -1;
+        break;
+
+    case ASN1_GEN_FLAG_FORMAT:
+        if (!vstart) {
+            ASN1err(ASN1_F_ASN1_CB, ASN1_R_UNKNOWN_FORMAT);
+            return -1;
+        }
+        if (strncmp(vstart, "ASCII", 5) == 0)
+            arg->format = ASN1_GEN_FORMAT_ASCII;
+        else if (strncmp(vstart, "UTF8", 4) == 0)
+            arg->format = ASN1_GEN_FORMAT_UTF8;
+        else if (strncmp(vstart, "HEX", 3) == 0)
+            arg->format = ASN1_GEN_FORMAT_HEX;
+        else if (strncmp(vstart, "BITLIST", 7) == 0)
+            arg->format = ASN1_GEN_FORMAT_BITLIST;
+        else {
+            ASN1err(ASN1_F_ASN1_CB, ASN1_R_UNKNOWN_FORMAT);
+            return -1;
+        }
+        break;
+
+    }
+
+    return 1;
+
+}
+
+static int parse_tagging(const char *vstart, int vlen, int *ptag, int *pclass)
+{
+    char erch[2];
+    long tag_num;
+    char *eptr;
+    if (!vstart)
+        return 0;
+    tag_num = strtoul(vstart, &eptr, 10);
+    /* Check we haven't gone past max length: should be impossible */
+    if (eptr && *eptr && (eptr > vstart + vlen))
+        return 0;
+    if (tag_num < 0) {
+        ASN1err(ASN1_F_PARSE_TAGGING, ASN1_R_INVALID_NUMBER);
+        return 0;
+    }
+    *ptag = tag_num;
+    /* If we have non numeric characters, parse them */
+    if (eptr)
+        vlen -= eptr - vstart;
+    else
+        vlen = 0;
+    if (vlen) {
+        switch (*eptr) {
+
+        case 'U':
+            *pclass = V_ASN1_UNIVERSAL;
+            break;
+
+        case 'A':
+            *pclass = V_ASN1_APPLICATION;
+            break;
+
+        case 'P':
+            *pclass = V_ASN1_PRIVATE;
+            break;
+
+        case 'C':
+            *pclass = V_ASN1_CONTEXT_SPECIFIC;
+            break;
+
+        default:
+            erch[0] = *eptr;
+            erch[1] = 0;
+            ASN1err(ASN1_F_PARSE_TAGGING, ASN1_R_INVALID_MODIFIER);
+            ERR_add_error_data(2, "Char=", erch);
+            return 0;
+
+        }
+    } else
+        *pclass = V_ASN1_CONTEXT_SPECIFIC;
+
+    return 1;
+
+}
+
+/* Handle multiple types: SET and SEQUENCE */
+
+static ASN1_TYPE *asn1_multi(int utype, const char *section, X509V3_CTX *cnf,
+                             int depth, int *perr)
+{
+    ASN1_TYPE *ret = NULL;
+    STACK_OF(ASN1_TYPE) *sk = NULL;
+    STACK_OF(CONF_VALUE) *sect = NULL;
+    unsigned char *der = NULL;
+    int derlen;
+    int i;
+    sk = sk_ASN1_TYPE_new_null();
+    if (!sk)
+        goto bad;
+    if (section) {
+        if (!cnf)
+            goto bad;
+        sect = X509V3_get_section(cnf, (char *)section);
+        if (!sect)
+            goto bad;
+        for (i = 0; i < sk_CONF_VALUE_num(sect); i++) {
+            ASN1_TYPE *typ =
+                generate_v3(sk_CONF_VALUE_value(sect, i)->value, cnf,
+                            depth + 1, perr);
+            if (!typ)
+                goto bad;
+            if (!sk_ASN1_TYPE_push(sk, typ))
+                goto bad;
+        }
+    }
+
+    /*
+     * Now we has a STACK of the components, convert to the correct form
+     */
+
+    if (utype == V_ASN1_SET)
+        derlen = i2d_ASN1_SET_ANY(sk, &der);
+    else
+        derlen = i2d_ASN1_SEQUENCE_ANY(sk, &der);
+
+    if (derlen < 0)
+        goto bad;
+    if ((ret = ASN1_TYPE_new()) == NULL)
+        goto bad;
+    if ((ret->value.asn1_string = ASN1_STRING_type_new(utype)) == NULL)
+        goto bad;
+
+    ret->type = utype;
+    ret->value.asn1_string->data = der;
+    ret->value.asn1_string->length = derlen;
+
+    der = NULL;
+
+ bad:
+
+    OPENSSL_free(der);
+
+    sk_ASN1_TYPE_pop_free(sk, ASN1_TYPE_free);
+    X509V3_section_free(cnf, sect);
+
+    return ret;
+}
+
+static int append_exp(tag_exp_arg *arg, int exp_tag, int exp_class,
+                      int exp_constructed, int exp_pad, int imp_ok)
+{
+    tag_exp_type *exp_tmp;
+    /* Can only have IMPLICIT if permitted */
+    if ((arg->imp_tag != -1) && !imp_ok) {
+        ASN1err(ASN1_F_APPEND_EXP, ASN1_R_ILLEGAL_IMPLICIT_TAG);
+        return 0;
+    }
+
+    if (arg->exp_count == ASN1_FLAG_EXP_MAX) {
+        ASN1err(ASN1_F_APPEND_EXP, ASN1_R_DEPTH_EXCEEDED);
+        return 0;
+    }
+
+    exp_tmp = &arg->exp_list[arg->exp_count++];
+
+    /*
+     * If IMPLICIT set tag to implicit value then reset implicit tag since it
+     * has been used.
+     */
+    if (arg->imp_tag != -1) {
+        exp_tmp->exp_tag = arg->imp_tag;
+        exp_tmp->exp_class = arg->imp_class;
+        arg->imp_tag = -1;
+        arg->imp_class = -1;
+    } else {
+        exp_tmp->exp_tag = exp_tag;
+        exp_tmp->exp_class = exp_class;
+    }
+    exp_tmp->exp_constructed = exp_constructed;
+    exp_tmp->exp_pad = exp_pad;
+
+    return 1;
+}
+
+static int asn1_str2tag(const char *tagstr, int len)
+{
+    unsigned int i;
+    static const struct tag_name_st *tntmp, tnst[] = {
+        ASN1_GEN_STR("BOOL", V_ASN1_BOOLEAN),
+        ASN1_GEN_STR("BOOLEAN", V_ASN1_BOOLEAN),
+        ASN1_GEN_STR("NULL", V_ASN1_NULL),
+        ASN1_GEN_STR("INT", V_ASN1_INTEGER),
+        ASN1_GEN_STR("INTEGER", V_ASN1_INTEGER),
+        ASN1_GEN_STR("ENUM", V_ASN1_ENUMERATED),
+        ASN1_GEN_STR("ENUMERATED", V_ASN1_ENUMERATED),
+        ASN1_GEN_STR("OID", V_ASN1_OBJECT),
+        ASN1_GEN_STR("OBJECT", V_ASN1_OBJECT),
+        ASN1_GEN_STR("UTCTIME", V_ASN1_UTCTIME),
+        ASN1_GEN_STR("UTC", V_ASN1_UTCTIME),
+        ASN1_GEN_STR("GENERALIZEDTIME", V_ASN1_GENERALIZEDTIME),
+        ASN1_GEN_STR("GENTIME", V_ASN1_GENERALIZEDTIME),
+        ASN1_GEN_STR("OCT", V_ASN1_OCTET_STRING),
+        ASN1_GEN_STR("OCTETSTRING", V_ASN1_OCTET_STRING),
+        ASN1_GEN_STR("BITSTR", V_ASN1_BIT_STRING),
+        ASN1_GEN_STR("BITSTRING", V_ASN1_BIT_STRING),
+        ASN1_GEN_STR("UNIVERSALSTRING", V_ASN1_UNIVERSALSTRING),
+        ASN1_GEN_STR("UNIV", V_ASN1_UNIVERSALSTRING),
+        ASN1_GEN_STR("IA5", V_ASN1_IA5STRING),
+        ASN1_GEN_STR("IA5STRING", V_ASN1_IA5STRING),
+        ASN1_GEN_STR("UTF8", V_ASN1_UTF8STRING),
+        ASN1_GEN_STR("UTF8String", V_ASN1_UTF8STRING),
+        ASN1_GEN_STR("BMP", V_ASN1_BMPSTRING),
+        ASN1_GEN_STR("BMPSTRING", V_ASN1_BMPSTRING),
+        ASN1_GEN_STR("VISIBLESTRING", V_ASN1_VISIBLESTRING),
+        ASN1_GEN_STR("VISIBLE", V_ASN1_VISIBLESTRING),
+        ASN1_GEN_STR("PRINTABLESTRING", V_ASN1_PRINTABLESTRING),
+        ASN1_GEN_STR("PRINTABLE", V_ASN1_PRINTABLESTRING),
+        ASN1_GEN_STR("T61", V_ASN1_T61STRING),
+        ASN1_GEN_STR("T61STRING", V_ASN1_T61STRING),
+        ASN1_GEN_STR("TELETEXSTRING", V_ASN1_T61STRING),
+        ASN1_GEN_STR("GeneralString", V_ASN1_GENERALSTRING),
+        ASN1_GEN_STR("GENSTR", V_ASN1_GENERALSTRING),
+        ASN1_GEN_STR("NUMERIC", V_ASN1_NUMERICSTRING),
+        ASN1_GEN_STR("NUMERICSTRING", V_ASN1_NUMERICSTRING),
+
+        /* Special cases */
+        ASN1_GEN_STR("SEQUENCE", V_ASN1_SEQUENCE),
+        ASN1_GEN_STR("SEQ", V_ASN1_SEQUENCE),
+        ASN1_GEN_STR("SET", V_ASN1_SET),
+        /* type modifiers */
+        /* Explicit tag */
+        ASN1_GEN_STR("EXP", ASN1_GEN_FLAG_EXP),
+        ASN1_GEN_STR("EXPLICIT", ASN1_GEN_FLAG_EXP),
+        /* Implicit tag */
+        ASN1_GEN_STR("IMP", ASN1_GEN_FLAG_IMP),
+        ASN1_GEN_STR("IMPLICIT", ASN1_GEN_FLAG_IMP),
+        /* OCTET STRING wrapper */
+        ASN1_GEN_STR("OCTWRAP", ASN1_GEN_FLAG_OCTWRAP),
+        /* SEQUENCE wrapper */
+        ASN1_GEN_STR("SEQWRAP", ASN1_GEN_FLAG_SEQWRAP),
+        /* SET wrapper */
+        ASN1_GEN_STR("SETWRAP", ASN1_GEN_FLAG_SETWRAP),
+        /* BIT STRING wrapper */
+        ASN1_GEN_STR("BITWRAP", ASN1_GEN_FLAG_BITWRAP),
+        ASN1_GEN_STR("FORM", ASN1_GEN_FLAG_FORMAT),
+        ASN1_GEN_STR("FORMAT", ASN1_GEN_FLAG_FORMAT),
+    };
+
+    if (len == -1)
+        len = strlen(tagstr);
+
+    tntmp = tnst;
+    for (i = 0; i < OSSL_NELEM(tnst); i++, tntmp++) {
+        if ((len == tntmp->len) && (strncmp(tntmp->strnam, tagstr, len) == 0))
+            return tntmp->tag;
+    }
+
+    return -1;
+}
+
+static ASN1_TYPE *asn1_str2type(const char *str, int format, int utype)
+{
+    ASN1_TYPE *atmp = NULL;
+    CONF_VALUE vtmp;
+    unsigned char *rdata;
+    long rdlen;
+    int no_unused = 1;
+
+    if ((atmp = ASN1_TYPE_new()) == NULL) {
+        ASN1err(ASN1_F_ASN1_STR2TYPE, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if (!str)
+        str = "";
+
+    switch (utype) {
+
+    case V_ASN1_NULL:
+        if (str && *str) {
+            ASN1err(ASN1_F_ASN1_STR2TYPE, ASN1_R_ILLEGAL_NULL_VALUE);
+            goto bad_form;
+        }
+        break;
+
+    case V_ASN1_BOOLEAN:
+        if (format != ASN1_GEN_FORMAT_ASCII) {
+            ASN1err(ASN1_F_ASN1_STR2TYPE, ASN1_R_NOT_ASCII_FORMAT);
+            goto bad_form;
+        }
+        vtmp.name = NULL;
+        vtmp.section = NULL;
+        vtmp.value = (char *)str;
+        if (!X509V3_get_value_bool(&vtmp, &atmp->value.boolean)) {
+            ASN1err(ASN1_F_ASN1_STR2TYPE, ASN1_R_ILLEGAL_BOOLEAN);
+            goto bad_str;
+        }
+        break;
+
+    case V_ASN1_INTEGER:
+    case V_ASN1_ENUMERATED:
+        if (format != ASN1_GEN_FORMAT_ASCII) {
+            ASN1err(ASN1_F_ASN1_STR2TYPE, ASN1_R_INTEGER_NOT_ASCII_FORMAT);
+            goto bad_form;
+        }
+        if ((atmp->value.integer
+                    = s2i_ASN1_INTEGER(NULL, str)) == NULL) {
+            ASN1err(ASN1_F_ASN1_STR2TYPE, ASN1_R_ILLEGAL_INTEGER);
+            goto bad_str;
+        }
+        break;
+
+    case V_ASN1_OBJECT:
+        if (format != ASN1_GEN_FORMAT_ASCII) {
+            ASN1err(ASN1_F_ASN1_STR2TYPE, ASN1_R_OBJECT_NOT_ASCII_FORMAT);
+            goto bad_form;
+        }
+        if ((atmp->value.object = OBJ_txt2obj(str, 0)) == NULL) {
+            ASN1err(ASN1_F_ASN1_STR2TYPE, ASN1_R_ILLEGAL_OBJECT);
+            goto bad_str;
+        }
+        break;
+
+    case V_ASN1_UTCTIME:
+    case V_ASN1_GENERALIZEDTIME:
+        if (format != ASN1_GEN_FORMAT_ASCII) {
+            ASN1err(ASN1_F_ASN1_STR2TYPE, ASN1_R_TIME_NOT_ASCII_FORMAT);
+            goto bad_form;
+        }
+        if ((atmp->value.asn1_string = ASN1_STRING_new()) == NULL) {
+            ASN1err(ASN1_F_ASN1_STR2TYPE, ERR_R_MALLOC_FAILURE);
+            goto bad_str;
+        }
+        if (!ASN1_STRING_set(atmp->value.asn1_string, str, -1)) {
+            ASN1err(ASN1_F_ASN1_STR2TYPE, ERR_R_MALLOC_FAILURE);
+            goto bad_str;
+        }
+        atmp->value.asn1_string->type = utype;
+        if (!ASN1_TIME_check(atmp->value.asn1_string)) {
+            ASN1err(ASN1_F_ASN1_STR2TYPE, ASN1_R_ILLEGAL_TIME_VALUE);
+            goto bad_str;
+        }
+
+        break;
+
+    case V_ASN1_BMPSTRING:
+    case V_ASN1_PRINTABLESTRING:
+    case V_ASN1_IA5STRING:
+    case V_ASN1_T61STRING:
+    case V_ASN1_UTF8STRING:
+    case V_ASN1_VISIBLESTRING:
+    case V_ASN1_UNIVERSALSTRING:
+    case V_ASN1_GENERALSTRING:
+    case V_ASN1_NUMERICSTRING:
+        if (format == ASN1_GEN_FORMAT_ASCII)
+            format = MBSTRING_ASC;
+        else if (format == ASN1_GEN_FORMAT_UTF8)
+            format = MBSTRING_UTF8;
+        else {
+            ASN1err(ASN1_F_ASN1_STR2TYPE, ASN1_R_ILLEGAL_FORMAT);
+            goto bad_form;
+        }
+
+        if (ASN1_mbstring_copy(&atmp->value.asn1_string, (unsigned char *)str,
+                               -1, format, ASN1_tag2bit(utype)) <= 0) {
+            ASN1err(ASN1_F_ASN1_STR2TYPE, ERR_R_MALLOC_FAILURE);
+            goto bad_str;
+        }
+
+        break;
+
+    case V_ASN1_BIT_STRING:
+    case V_ASN1_OCTET_STRING:
+        if ((atmp->value.asn1_string = ASN1_STRING_new()) == NULL) {
+            ASN1err(ASN1_F_ASN1_STR2TYPE, ERR_R_MALLOC_FAILURE);
+            goto bad_form;
+        }
+
+        if (format == ASN1_GEN_FORMAT_HEX) {
+            if ((rdata = OPENSSL_hexstr2buf(str, &rdlen)) == NULL) {
+                ASN1err(ASN1_F_ASN1_STR2TYPE, ASN1_R_ILLEGAL_HEX);
+                goto bad_str;
+            }
+            atmp->value.asn1_string->data = rdata;
+            atmp->value.asn1_string->length = rdlen;
+            atmp->value.asn1_string->type = utype;
+        } else if (format == ASN1_GEN_FORMAT_ASCII)
+            ASN1_STRING_set(atmp->value.asn1_string, str, -1);
+        else if ((format == ASN1_GEN_FORMAT_BITLIST)
+                 && (utype == V_ASN1_BIT_STRING)) {
+            if (!CONF_parse_list
+                (str, ',', 1, bitstr_cb, atmp->value.bit_string)) {
+                ASN1err(ASN1_F_ASN1_STR2TYPE, ASN1_R_LIST_ERROR);
+                goto bad_str;
+            }
+            no_unused = 0;
+
+        } else {
+            ASN1err(ASN1_F_ASN1_STR2TYPE, ASN1_R_ILLEGAL_BITSTRING_FORMAT);
+            goto bad_form;
+        }
+
+        if ((utype == V_ASN1_BIT_STRING) && no_unused) {
+            atmp->value.asn1_string->flags
+                &= ~(ASN1_STRING_FLAG_BITS_LEFT | 0x07);
+            atmp->value.asn1_string->flags |= ASN1_STRING_FLAG_BITS_LEFT;
+        }
+
+        break;
+
+    default:
+        ASN1err(ASN1_F_ASN1_STR2TYPE, ASN1_R_UNSUPPORTED_TYPE);
+        goto bad_str;
+    }
+
+    atmp->type = utype;
+    return atmp;
+
+ bad_str:
+    ERR_add_error_data(2, "string=", str);
+ bad_form:
+
+    ASN1_TYPE_free(atmp);
+    return NULL;
+
+}
+
+static int bitstr_cb(const char *elem, int len, void *bitstr)
+{
+    long bitnum;
+    char *eptr;
+    if (!elem)
+        return 0;
+    bitnum = strtoul(elem, &eptr, 10);
+    if (eptr && *eptr && (eptr != elem + len))
+        return 0;
+    if (bitnum < 0) {
+        ASN1err(ASN1_F_BITSTR_CB, ASN1_R_INVALID_NUMBER);
+        return 0;
+    }
+    if (!ASN1_BIT_STRING_set_bit(bitstr, bitnum, 1)) {
+        ASN1err(ASN1_F_BITSTR_CB, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    return 1;
+}
+
+static int mask_cb(const char *elem, int len, void *arg)
+{
+    unsigned long *pmask = arg, tmpmask;
+    int tag;
+    if (elem == NULL)
+        return 0;
+    if ((len == 3) && (strncmp(elem, "DIR", 3) == 0)) {
+        *pmask |= B_ASN1_DIRECTORYSTRING;
+        return 1;
+    }
+    tag = asn1_str2tag(elem, len);
+    if (!tag || (tag & ASN1_GEN_FLAG))
+        return 0;
+    tmpmask = ASN1_tag2bit(tag);
+    if (!tmpmask)
+        return 0;
+    *pmask |= tmpmask;
+    return 1;
+}
+
+int ASN1_str2mask(const char *str, unsigned long *pmask)
+{
+    *pmask = 0;
+    return CONF_parse_list(str, '|', 1, mask_cb, pmask);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_item_list.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_item_list.c
new file mode 100644
index 000000000..9798192f4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_item_list.c
@@ -0,0 +1,42 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/cms.h>
+#include <openssl/dh.h>
+#include <openssl/ocsp.h>
+#include <openssl/pkcs7.h>
+#include <openssl/pkcs12.h>
+#include <openssl/rsa.h>
+#include <openssl/x509v3.h>
+
+#include "asn1_item_list.h"
+
+const ASN1_ITEM *ASN1_ITEM_lookup(const char *name)
+{
+    size_t i;
+
+    for (i = 0; i < OSSL_NELEM(asn1_item_list); i++) {
+        const ASN1_ITEM *it = ASN1_ITEM_ptr(asn1_item_list[i]);
+
+        if (strcmp(it->sname, name) == 0)
+            return it;
+    }
+    return NULL;
+}
+
+const ASN1_ITEM *ASN1_ITEM_get(size_t i)
+{
+    if (i >= OSSL_NELEM(asn1_item_list))
+        return NULL;
+    return ASN1_ITEM_ptr(asn1_item_list[i]);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_item_list.h b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_item_list.h
new file mode 100644
index 000000000..db8107ed1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_item_list.h
@@ -0,0 +1,178 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+static ASN1_ITEM_EXP *asn1_item_list[] = {
+
+    ASN1_ITEM_ref(ACCESS_DESCRIPTION),
+#ifndef OPENSSL_NO_RFC3779
+    ASN1_ITEM_ref(ASIdOrRange),
+    ASN1_ITEM_ref(ASIdentifierChoice),
+    ASN1_ITEM_ref(ASIdentifiers),
+#endif
+    ASN1_ITEM_ref(ASN1_ANY),
+    ASN1_ITEM_ref(ASN1_BIT_STRING),
+    ASN1_ITEM_ref(ASN1_BMPSTRING),
+    ASN1_ITEM_ref(ASN1_BOOLEAN),
+    ASN1_ITEM_ref(ASN1_ENUMERATED),
+    ASN1_ITEM_ref(ASN1_FBOOLEAN),
+    ASN1_ITEM_ref(ASN1_GENERALIZEDTIME),
+    ASN1_ITEM_ref(ASN1_GENERALSTRING),
+    ASN1_ITEM_ref(ASN1_IA5STRING),
+    ASN1_ITEM_ref(ASN1_INTEGER),
+    ASN1_ITEM_ref(ASN1_NULL),
+    ASN1_ITEM_ref(ASN1_OBJECT),
+    ASN1_ITEM_ref(ASN1_OCTET_STRING_NDEF),
+    ASN1_ITEM_ref(ASN1_OCTET_STRING),
+    ASN1_ITEM_ref(ASN1_PRINTABLESTRING),
+    ASN1_ITEM_ref(ASN1_PRINTABLE),
+    ASN1_ITEM_ref(ASN1_SEQUENCE_ANY),
+    ASN1_ITEM_ref(ASN1_SEQUENCE),
+    ASN1_ITEM_ref(ASN1_SET_ANY),
+    ASN1_ITEM_ref(ASN1_T61STRING),
+    ASN1_ITEM_ref(ASN1_TBOOLEAN),
+    ASN1_ITEM_ref(ASN1_TIME),
+    ASN1_ITEM_ref(ASN1_UNIVERSALSTRING),
+    ASN1_ITEM_ref(ASN1_UTCTIME),
+    ASN1_ITEM_ref(ASN1_UTF8STRING),
+    ASN1_ITEM_ref(ASN1_VISIBLESTRING),
+#ifndef OPENSSL_NO_RFC3779
+    ASN1_ITEM_ref(ASRange),
+#endif
+    ASN1_ITEM_ref(AUTHORITY_INFO_ACCESS),
+    ASN1_ITEM_ref(AUTHORITY_KEYID),
+    ASN1_ITEM_ref(BASIC_CONSTRAINTS),
+    ASN1_ITEM_ref(BIGNUM),
+    ASN1_ITEM_ref(CBIGNUM),
+    ASN1_ITEM_ref(CERTIFICATEPOLICIES),
+#ifndef OPENSSL_NO_CMS
+    ASN1_ITEM_ref(CMS_ContentInfo),
+    ASN1_ITEM_ref(CMS_ReceiptRequest),
+#endif
+    ASN1_ITEM_ref(CRL_DIST_POINTS),
+#ifndef OPENSSL_NO_DH
+    ASN1_ITEM_ref(DHparams),
+#endif
+    ASN1_ITEM_ref(DIRECTORYSTRING),
+    ASN1_ITEM_ref(DISPLAYTEXT),
+    ASN1_ITEM_ref(DIST_POINT_NAME),
+    ASN1_ITEM_ref(DIST_POINT),
+#ifndef OPENSSL_NO_EC
+    ASN1_ITEM_ref(ECPARAMETERS),
+    ASN1_ITEM_ref(ECPKPARAMETERS),
+#endif
+    ASN1_ITEM_ref(EDIPARTYNAME),
+    ASN1_ITEM_ref(EXTENDED_KEY_USAGE),
+    ASN1_ITEM_ref(GENERAL_NAMES),
+    ASN1_ITEM_ref(GENERAL_NAME),
+    ASN1_ITEM_ref(GENERAL_SUBTREE),
+#ifndef OPENSSL_NO_RFC3779
+    ASN1_ITEM_ref(IPAddressChoice),
+    ASN1_ITEM_ref(IPAddressFamily),
+    ASN1_ITEM_ref(IPAddressOrRange),
+    ASN1_ITEM_ref(IPAddressRange),
+#endif
+    ASN1_ITEM_ref(ISSUING_DIST_POINT),
+#if OPENSSL_API_COMPAT < 0x10200000L
+    ASN1_ITEM_ref(LONG),
+#endif
+    ASN1_ITEM_ref(NAME_CONSTRAINTS),
+    ASN1_ITEM_ref(NETSCAPE_CERT_SEQUENCE),
+    ASN1_ITEM_ref(NETSCAPE_SPKAC),
+    ASN1_ITEM_ref(NETSCAPE_SPKI),
+    ASN1_ITEM_ref(NOTICEREF),
+#ifndef OPENSSL_NO_OCSP
+    ASN1_ITEM_ref(OCSP_BASICRESP),
+    ASN1_ITEM_ref(OCSP_CERTID),
+    ASN1_ITEM_ref(OCSP_CERTSTATUS),
+    ASN1_ITEM_ref(OCSP_CRLID),
+    ASN1_ITEM_ref(OCSP_ONEREQ),
+    ASN1_ITEM_ref(OCSP_REQINFO),
+    ASN1_ITEM_ref(OCSP_REQUEST),
+    ASN1_ITEM_ref(OCSP_RESPBYTES),
+    ASN1_ITEM_ref(OCSP_RESPDATA),
+    ASN1_ITEM_ref(OCSP_RESPID),
+    ASN1_ITEM_ref(OCSP_RESPONSE),
+    ASN1_ITEM_ref(OCSP_REVOKEDINFO),
+    ASN1_ITEM_ref(OCSP_SERVICELOC),
+    ASN1_ITEM_ref(OCSP_SIGNATURE),
+    ASN1_ITEM_ref(OCSP_SINGLERESP),
+#endif
+    ASN1_ITEM_ref(OTHERNAME),
+    ASN1_ITEM_ref(PBE2PARAM),
+    ASN1_ITEM_ref(PBEPARAM),
+    ASN1_ITEM_ref(PBKDF2PARAM),
+    ASN1_ITEM_ref(PKCS12_AUTHSAFES),
+    ASN1_ITEM_ref(PKCS12_BAGS),
+    ASN1_ITEM_ref(PKCS12_MAC_DATA),
+    ASN1_ITEM_ref(PKCS12_SAFEBAGS),
+    ASN1_ITEM_ref(PKCS12_SAFEBAG),
+    ASN1_ITEM_ref(PKCS12),
+    ASN1_ITEM_ref(PKCS7_ATTR_SIGN),
+    ASN1_ITEM_ref(PKCS7_ATTR_VERIFY),
+    ASN1_ITEM_ref(PKCS7_DIGEST),
+    ASN1_ITEM_ref(PKCS7_ENCRYPT),
+    ASN1_ITEM_ref(PKCS7_ENC_CONTENT),
+    ASN1_ITEM_ref(PKCS7_ENVELOPE),
+    ASN1_ITEM_ref(PKCS7_ISSUER_AND_SERIAL),
+    ASN1_ITEM_ref(PKCS7_RECIP_INFO),
+    ASN1_ITEM_ref(PKCS7_SIGNED),
+    ASN1_ITEM_ref(PKCS7_SIGNER_INFO),
+    ASN1_ITEM_ref(PKCS7_SIGN_ENVELOPE),
+    ASN1_ITEM_ref(PKCS7),
+    ASN1_ITEM_ref(PKCS8_PRIV_KEY_INFO),
+    ASN1_ITEM_ref(PKEY_USAGE_PERIOD),
+    ASN1_ITEM_ref(POLICYINFO),
+    ASN1_ITEM_ref(POLICYQUALINFO),
+    ASN1_ITEM_ref(POLICY_CONSTRAINTS),
+    ASN1_ITEM_ref(POLICY_MAPPINGS),
+    ASN1_ITEM_ref(POLICY_MAPPING),
+    ASN1_ITEM_ref(PROXY_CERT_INFO_EXTENSION),
+    ASN1_ITEM_ref(PROXY_POLICY),
+#ifndef OPENSSL_NO_RSA
+    ASN1_ITEM_ref(RSAPrivateKey),
+    ASN1_ITEM_ref(RSAPublicKey),
+    ASN1_ITEM_ref(RSA_OAEP_PARAMS),
+    ASN1_ITEM_ref(RSA_PSS_PARAMS),
+#endif
+#ifndef OPENSSL_NO_SCRYPT
+    ASN1_ITEM_ref(SCRYPT_PARAMS),
+#endif
+    ASN1_ITEM_ref(SXNETID),
+    ASN1_ITEM_ref(SXNET),
+    ASN1_ITEM_ref(USERNOTICE),
+    ASN1_ITEM_ref(X509_ALGORS),
+    ASN1_ITEM_ref(X509_ALGOR),
+    ASN1_ITEM_ref(X509_ATTRIBUTE),
+    ASN1_ITEM_ref(X509_CERT_AUX),
+    ASN1_ITEM_ref(X509_CINF),
+    ASN1_ITEM_ref(X509_CRL_INFO),
+    ASN1_ITEM_ref(X509_CRL),
+    ASN1_ITEM_ref(X509_EXTENSIONS),
+    ASN1_ITEM_ref(X509_EXTENSION),
+    ASN1_ITEM_ref(X509_NAME_ENTRY),
+    ASN1_ITEM_ref(X509_NAME),
+    ASN1_ITEM_ref(X509_PUBKEY),
+    ASN1_ITEM_ref(X509_REQ_INFO),
+    ASN1_ITEM_ref(X509_REQ),
+    ASN1_ITEM_ref(X509_REVOKED),
+    ASN1_ITEM_ref(X509_SIG),
+    ASN1_ITEM_ref(X509_VAL),
+    ASN1_ITEM_ref(X509),
+#if OPENSSL_API_COMPAT < 0x10200000L
+    ASN1_ITEM_ref(ZLONG),
+#endif
+    ASN1_ITEM_ref(INT32),
+    ASN1_ITEM_ref(UINT32),
+    ASN1_ITEM_ref(ZINT32),
+    ASN1_ITEM_ref(ZUINT32),
+    ASN1_ITEM_ref(INT64),
+    ASN1_ITEM_ref(UINT64),
+    ASN1_ITEM_ref(ZINT64),
+    ASN1_ITEM_ref(ZUINT64),
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_lib.c
new file mode 100644
index 000000000..88c4b5391
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_lib.c
@@ -0,0 +1,391 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <limits.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include "asn1_locl.h"
+
+static int asn1_get_length(const unsigned char **pp, int *inf, long *rl,
+                           long max);
+static void asn1_put_length(unsigned char **pp, int length);
+
+static int _asn1_check_infinite_end(const unsigned char **p, long len)
+{
+    /*
+     * If there is 0 or 1 byte left, the length check should pick things up
+     */
+    if (len <= 0)
+        return 1;
+    else if ((len >= 2) && ((*p)[0] == 0) && ((*p)[1] == 0)) {
+        (*p) += 2;
+        return 1;
+    }
+    return 0;
+}
+
+int ASN1_check_infinite_end(unsigned char **p, long len)
+{
+    return _asn1_check_infinite_end((const unsigned char **)p, len);
+}
+
+int ASN1_const_check_infinite_end(const unsigned char **p, long len)
+{
+    return _asn1_check_infinite_end(p, len);
+}
+
+int ASN1_get_object(const unsigned char **pp, long *plength, int *ptag,
+                    int *pclass, long omax)
+{
+    int i, ret;
+    long l;
+    const unsigned char *p = *pp;
+    int tag, xclass, inf;
+    long max = omax;
+
+    if (!max)
+        goto err;
+    ret = (*p & V_ASN1_CONSTRUCTED);
+    xclass = (*p & V_ASN1_PRIVATE);
+    i = *p & V_ASN1_PRIMITIVE_TAG;
+    if (i == V_ASN1_PRIMITIVE_TAG) { /* high-tag */
+        p++;
+        if (--max == 0)
+            goto err;
+        l = 0;
+        while (*p & 0x80) {
+            l <<= 7L;
+            l |= *(p++) & 0x7f;
+            if (--max == 0)
+                goto err;
+            if (l > (INT_MAX >> 7L))
+                goto err;
+        }
+        l <<= 7L;
+        l |= *(p++) & 0x7f;
+        tag = (int)l;
+        if (--max == 0)
+            goto err;
+    } else {
+        tag = i;
+        p++;
+        if (--max == 0)
+            goto err;
+    }
+    *ptag = tag;
+    *pclass = xclass;
+    if (!asn1_get_length(&p, &inf, plength, max))
+        goto err;
+
+    if (inf && !(ret & V_ASN1_CONSTRUCTED))
+        goto err;
+
+    if (*plength > (omax - (p - *pp))) {
+        ASN1err(ASN1_F_ASN1_GET_OBJECT, ASN1_R_TOO_LONG);
+        /*
+         * Set this so that even if things are not long enough the values are
+         * set correctly
+         */
+        ret |= 0x80;
+    }
+    *pp = p;
+    return ret | inf;
+ err:
+    ASN1err(ASN1_F_ASN1_GET_OBJECT, ASN1_R_HEADER_TOO_LONG);
+    return 0x80;
+}
+
+/*
+ * Decode a length field.
+ * The short form is a single byte defining a length 0 - 127.
+ * The long form is a byte 0 - 127 with the top bit set and this indicates
+ * the number of following octets that contain the length.  These octets
+ * are stored most significant digit first.
+ */
+static int asn1_get_length(const unsigned char **pp, int *inf, long *rl,
+                           long max)
+{
+    const unsigned char *p = *pp;
+    unsigned long ret = 0;
+    int i;
+
+    if (max-- < 1)
+        return 0;
+    if (*p == 0x80) {
+        *inf = 1;
+        p++;
+    } else {
+        *inf = 0;
+        i = *p & 0x7f;
+        if (*p++ & 0x80) {
+            if (max < i + 1)
+                return 0;
+            /* Skip leading zeroes */
+            while (i > 0 && *p == 0) {
+                p++;
+                i--;
+            }
+            if (i > (int)sizeof(long))
+                return 0;
+            while (i > 0) {
+                ret <<= 8;
+                ret |= *p++;
+                i--;
+            }
+            if (ret > LONG_MAX)
+                return 0;
+        } else
+            ret = i;
+    }
+    *pp = p;
+    *rl = (long)ret;
+    return 1;
+}
+
+/*
+ * class 0 is constructed constructed == 2 for indefinite length constructed
+ */
+void ASN1_put_object(unsigned char **pp, int constructed, int length, int tag,
+                     int xclass)
+{
+    unsigned char *p = *pp;
+    int i, ttag;
+
+    i = (constructed) ? V_ASN1_CONSTRUCTED : 0;
+    i |= (xclass & V_ASN1_PRIVATE);
+    if (tag < 31)
+        *(p++) = i | (tag & V_ASN1_PRIMITIVE_TAG);
+    else {
+        *(p++) = i | V_ASN1_PRIMITIVE_TAG;
+        for (i = 0, ttag = tag; ttag > 0; i++)
+            ttag >>= 7;
+        ttag = i;
+        while (i-- > 0) {
+            p[i] = tag & 0x7f;
+            if (i != (ttag - 1))
+                p[i] |= 0x80;
+            tag >>= 7;
+        }
+        p += ttag;
+    }
+    if (constructed == 2)
+        *(p++) = 0x80;
+    else
+        asn1_put_length(&p, length);
+    *pp = p;
+}
+
+int ASN1_put_eoc(unsigned char **pp)
+{
+    unsigned char *p = *pp;
+    *p++ = 0;
+    *p++ = 0;
+    *pp = p;
+    return 2;
+}
+
+static void asn1_put_length(unsigned char **pp, int length)
+{
+    unsigned char *p = *pp;
+    int i, l;
+    if (length <= 127)
+        *(p++) = (unsigned char)length;
+    else {
+        l = length;
+        for (i = 0; l > 0; i++)
+            l >>= 8;
+        *(p++) = i | 0x80;
+        l = i;
+        while (i-- > 0) {
+            p[i] = length & 0xff;
+            length >>= 8;
+        }
+        p += l;
+    }
+    *pp = p;
+}
+
+int ASN1_object_size(int constructed, int length, int tag)
+{
+    int ret = 1;
+    if (length < 0)
+        return -1;
+    if (tag >= 31) {
+        while (tag > 0) {
+            tag >>= 7;
+            ret++;
+        }
+    }
+    if (constructed == 2) {
+        ret += 3;
+    } else {
+        ret++;
+        if (length > 127) {
+            int tmplen = length;
+            while (tmplen > 0) {
+                tmplen >>= 8;
+                ret++;
+            }
+        }
+    }
+    if (ret >= INT_MAX - length)
+        return -1;
+    return ret + length;
+}
+
+int ASN1_STRING_copy(ASN1_STRING *dst, const ASN1_STRING *str)
+{
+    if (str == NULL)
+        return 0;
+    dst->type = str->type;
+    if (!ASN1_STRING_set(dst, str->data, str->length))
+        return 0;
+    /* Copy flags but preserve embed value */
+    dst->flags &= ASN1_STRING_FLAG_EMBED;
+    dst->flags |= str->flags & ~ASN1_STRING_FLAG_EMBED;
+    return 1;
+}
+
+ASN1_STRING *ASN1_STRING_dup(const ASN1_STRING *str)
+{
+    ASN1_STRING *ret;
+    if (!str)
+        return NULL;
+    ret = ASN1_STRING_new();
+    if (ret == NULL)
+        return NULL;
+    if (!ASN1_STRING_copy(ret, str)) {
+        ASN1_STRING_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+int ASN1_STRING_set(ASN1_STRING *str, const void *_data, int len)
+{
+    unsigned char *c;
+    const char *data = _data;
+
+    if (len < 0) {
+        if (data == NULL)
+            return 0;
+        else
+            len = strlen(data);
+    }
+    if ((str->length <= len) || (str->data == NULL)) {
+        c = str->data;
+        str->data = OPENSSL_realloc(c, len + 1);
+        if (str->data == NULL) {
+            ASN1err(ASN1_F_ASN1_STRING_SET, ERR_R_MALLOC_FAILURE);
+            str->data = c;
+            return 0;
+        }
+    }
+    str->length = len;
+    if (data != NULL) {
+        memcpy(str->data, data, len);
+        /* an allowance for strings :-) */
+        str->data[len] = '\0';
+    }
+    return 1;
+}
+
+void ASN1_STRING_set0(ASN1_STRING *str, void *data, int len)
+{
+    OPENSSL_free(str->data);
+    str->data = data;
+    str->length = len;
+}
+
+ASN1_STRING *ASN1_STRING_new(void)
+{
+    return ASN1_STRING_type_new(V_ASN1_OCTET_STRING);
+}
+
+ASN1_STRING *ASN1_STRING_type_new(int type)
+{
+    ASN1_STRING *ret;
+
+    ret = OPENSSL_zalloc(sizeof(*ret));
+    if (ret == NULL) {
+        ASN1err(ASN1_F_ASN1_STRING_TYPE_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    ret->type = type;
+    return ret;
+}
+
+void asn1_string_embed_free(ASN1_STRING *a, int embed)
+{
+    if (a == NULL)
+        return;
+    if (!(a->flags & ASN1_STRING_FLAG_NDEF))
+        OPENSSL_free(a->data);
+    if (embed == 0)
+        OPENSSL_free(a);
+}
+
+void ASN1_STRING_free(ASN1_STRING *a)
+{
+    if (a == NULL)
+        return;
+    asn1_string_embed_free(a, a->flags & ASN1_STRING_FLAG_EMBED);
+}
+
+void ASN1_STRING_clear_free(ASN1_STRING *a)
+{
+    if (a == NULL)
+        return;
+    if (a->data && !(a->flags & ASN1_STRING_FLAG_NDEF))
+        OPENSSL_cleanse(a->data, a->length);
+    ASN1_STRING_free(a);
+}
+
+int ASN1_STRING_cmp(const ASN1_STRING *a, const ASN1_STRING *b)
+{
+    int i;
+
+    i = (a->length - b->length);
+    if (i == 0) {
+        i = memcmp(a->data, b->data, a->length);
+        if (i == 0)
+            return a->type - b->type;
+        else
+            return i;
+    } else
+        return i;
+}
+
+int ASN1_STRING_length(const ASN1_STRING *x)
+{
+    return x->length;
+}
+
+void ASN1_STRING_length_set(ASN1_STRING *x, int len)
+{
+    x->length = len;
+}
+
+int ASN1_STRING_type(const ASN1_STRING *x)
+{
+    return x->type;
+}
+
+const unsigned char *ASN1_STRING_get0_data(const ASN1_STRING *x)
+{
+    return x->data;
+}
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+unsigned char *ASN1_STRING_data(ASN1_STRING *x)
+{
+    return x->data;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_locl.h
new file mode 100644
index 000000000..cec141721
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_locl.h
@@ -0,0 +1,83 @@
+/*
+ * Copyright 2005-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* Internal ASN1 structures and functions: not for application use */
+
+int asn1_time_to_tm(struct tm *tm, const ASN1_TIME *d);
+int asn1_utctime_to_tm(struct tm *tm, const ASN1_UTCTIME *d);
+int asn1_generalizedtime_to_tm(struct tm *tm, const ASN1_GENERALIZEDTIME *d);
+
+/* ASN1 scan context structure */
+
+struct asn1_sctx_st {
+    /* The ASN1_ITEM associated with this field */
+    const ASN1_ITEM *it;
+    /* If ASN1_TEMPLATE associated with this field */
+    const ASN1_TEMPLATE *tt;
+    /* Various flags associated with field and context */
+    unsigned long flags;
+    /* If SEQUENCE OF or SET OF, field index */
+    int skidx;
+    /* ASN1 depth of field */
+    int depth;
+    /* Structure and field name */
+    const char *sname, *fname;
+    /* If a primitive type the type of underlying field */
+    int prim_type;
+    /* The field value itself */
+    ASN1_VALUE **field;
+    /* Callback to pass information to */
+    int (*scan_cb) (ASN1_SCTX *ctx);
+    /* Context specific application data */
+    void *app_data;
+} /* ASN1_SCTX */ ;
+
+typedef struct mime_param_st MIME_PARAM;
+DEFINE_STACK_OF(MIME_PARAM)
+typedef struct mime_header_st MIME_HEADER;
+DEFINE_STACK_OF(MIME_HEADER)
+
+void asn1_string_embed_free(ASN1_STRING *a, int embed);
+
+int asn1_get_choice_selector(ASN1_VALUE **pval, const ASN1_ITEM *it);
+int asn1_set_choice_selector(ASN1_VALUE **pval, int value,
+                             const ASN1_ITEM *it);
+
+ASN1_VALUE **asn1_get_field_ptr(ASN1_VALUE **pval, const ASN1_TEMPLATE *tt);
+
+const ASN1_TEMPLATE *asn1_do_adb(ASN1_VALUE **pval, const ASN1_TEMPLATE *tt,
+                                 int nullerr);
+
+int asn1_do_lock(ASN1_VALUE **pval, int op, const ASN1_ITEM *it);
+
+void asn1_enc_init(ASN1_VALUE **pval, const ASN1_ITEM *it);
+void asn1_enc_free(ASN1_VALUE **pval, const ASN1_ITEM *it);
+int asn1_enc_restore(int *len, unsigned char **out, ASN1_VALUE **pval,
+                     const ASN1_ITEM *it);
+int asn1_enc_save(ASN1_VALUE **pval, const unsigned char *in, int inlen,
+                  const ASN1_ITEM *it);
+
+void asn1_item_embed_free(ASN1_VALUE **pval, const ASN1_ITEM *it, int embed);
+void asn1_primitive_free(ASN1_VALUE **pval, const ASN1_ITEM *it, int embed);
+void asn1_template_free(ASN1_VALUE **pval, const ASN1_TEMPLATE *tt);
+
+ASN1_OBJECT *c2i_ASN1_OBJECT(ASN1_OBJECT **a, const unsigned char **pp,
+                             long length);
+int i2c_ASN1_BIT_STRING(ASN1_BIT_STRING *a, unsigned char **pp);
+ASN1_BIT_STRING *c2i_ASN1_BIT_STRING(ASN1_BIT_STRING **a,
+                                     const unsigned char **pp, long length);
+int i2c_ASN1_INTEGER(ASN1_INTEGER *a, unsigned char **pp);
+ASN1_INTEGER *c2i_ASN1_INTEGER(ASN1_INTEGER **a, const unsigned char **pp,
+                               long length);
+
+/* Internal functions used by x_int64.c */
+int c2i_uint64_int(uint64_t *ret, int *neg, const unsigned char **pp, long len);
+int i2c_uint64_int(unsigned char *p, uint64_t r, int neg);
+
+ASN1_TIME *asn1_time_from_tm(ASN1_TIME *s, struct tm *ts, int type);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_par.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_par.c
new file mode 100644
index 000000000..4b60c615d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn1_par.c
@@ -0,0 +1,375 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/objects.h>
+#include <openssl/asn1.h>
+
+#ifndef ASN1_PARSE_MAXDEPTH
+#define ASN1_PARSE_MAXDEPTH 128
+#endif
+
+static int asn1_print_info(BIO *bp, int tag, int xclass, int constructed,
+                           int indent);
+static int asn1_parse2(BIO *bp, const unsigned char **pp, long length,
+                       int offset, int depth, int indent, int dump);
+static int asn1_print_info(BIO *bp, int tag, int xclass, int constructed,
+                           int indent)
+{
+    static const char fmt[] = "%-18s";
+    char str[128];
+    const char *p;
+
+    if (constructed & V_ASN1_CONSTRUCTED)
+        p = "cons: ";
+    else
+        p = "prim: ";
+    if (BIO_write(bp, p, 6) < 6)
+        goto err;
+    BIO_indent(bp, indent, 128);
+
+    p = str;
+    if ((xclass & V_ASN1_PRIVATE) == V_ASN1_PRIVATE)
+        BIO_snprintf(str, sizeof(str), "priv [ %d ] ", tag);
+    else if ((xclass & V_ASN1_CONTEXT_SPECIFIC) == V_ASN1_CONTEXT_SPECIFIC)
+        BIO_snprintf(str, sizeof(str), "cont [ %d ]", tag);
+    else if ((xclass & V_ASN1_APPLICATION) == V_ASN1_APPLICATION)
+        BIO_snprintf(str, sizeof(str), "appl [ %d ]", tag);
+    else if (tag > 30)
+        BIO_snprintf(str, sizeof(str), "<ASN1 %d>", tag);
+    else
+        p = ASN1_tag2str(tag);
+
+    if (BIO_printf(bp, fmt, p) <= 0)
+        goto err;
+    return 1;
+ err:
+    return 0;
+}
+
+int ASN1_parse(BIO *bp, const unsigned char *pp, long len, int indent)
+{
+    return asn1_parse2(bp, &pp, len, 0, 0, indent, 0);
+}
+
+int ASN1_parse_dump(BIO *bp, const unsigned char *pp, long len, int indent,
+                    int dump)
+{
+    return asn1_parse2(bp, &pp, len, 0, 0, indent, dump);
+}
+
+static int asn1_parse2(BIO *bp, const unsigned char **pp, long length,
+                       int offset, int depth, int indent, int dump)
+{
+    const unsigned char *p, *ep, *tot, *op, *opp;
+    long len;
+    int tag, xclass, ret = 0;
+    int nl, hl, j, r;
+    ASN1_OBJECT *o = NULL;
+    ASN1_OCTET_STRING *os = NULL;
+    /* ASN1_BMPSTRING *bmp=NULL; */
+    int dump_indent, dump_cont = 0;
+
+    if (depth > ASN1_PARSE_MAXDEPTH) {
+        BIO_puts(bp, "BAD RECURSION DEPTH\n");
+        return 0;
+    }
+
+    dump_indent = 6;            /* Because we know BIO_dump_indent() */
+    p = *pp;
+    tot = p + length;
+    while (length > 0) {
+        op = p;
+        j = ASN1_get_object(&p, &len, &tag, &xclass, length);
+        if (j & 0x80) {
+            if (BIO_write(bp, "Error in encoding\n", 18) <= 0)
+                goto end;
+            ret = 0;
+            goto end;
+        }
+        hl = (p - op);
+        length -= hl;
+        /*
+         * if j == 0x21 it is a constructed indefinite length object
+         */
+        if (BIO_printf(bp, "%5ld:", (long)offset + (long)(op - *pp))
+            <= 0)
+            goto end;
+
+        if (j != (V_ASN1_CONSTRUCTED | 1)) {
+            if (BIO_printf(bp, "d=%-2d hl=%ld l=%4ld ",
+                           depth, (long)hl, len) <= 0)
+                goto end;
+        } else {
+            if (BIO_printf(bp, "d=%-2d hl=%ld l=inf  ", depth, (long)hl) <= 0)
+                goto end;
+        }
+        if (!asn1_print_info(bp, tag, xclass, j, (indent) ? depth : 0))
+            goto end;
+        if (j & V_ASN1_CONSTRUCTED) {
+            const unsigned char *sp = p;
+
+            ep = p + len;
+            if (BIO_write(bp, "\n", 1) <= 0)
+                goto end;
+            if (len > length) {
+                BIO_printf(bp, "length is greater than %ld\n", length);
+                ret = 0;
+                goto end;
+            }
+            if ((j == 0x21) && (len == 0)) {
+                for (;;) {
+                    r = asn1_parse2(bp, &p, (long)(tot - p),
+                                    offset + (p - *pp), depth + 1,
+                                    indent, dump);
+                    if (r == 0) {
+                        ret = 0;
+                        goto end;
+                    }
+                    if ((r == 2) || (p >= tot)) {
+                        len = p - sp;
+                        break;
+                    }
+                }
+            } else {
+                long tmp = len;
+
+                while (p < ep) {
+                    sp = p;
+                    r = asn1_parse2(bp, &p, tmp,
+                                    offset + (p - *pp), depth + 1,
+                                    indent, dump);
+                    if (r == 0) {
+                        ret = 0;
+                        goto end;
+                    }
+                    tmp -= p - sp;
+                }
+            }
+        } else if (xclass != 0) {
+            p += len;
+            if (BIO_write(bp, "\n", 1) <= 0)
+                goto end;
+        } else {
+            nl = 0;
+            if ((tag == V_ASN1_PRINTABLESTRING) ||
+                (tag == V_ASN1_T61STRING) ||
+                (tag == V_ASN1_IA5STRING) ||
+                (tag == V_ASN1_VISIBLESTRING) ||
+                (tag == V_ASN1_NUMERICSTRING) ||
+                (tag == V_ASN1_UTF8STRING) ||
+                (tag == V_ASN1_UTCTIME) || (tag == V_ASN1_GENERALIZEDTIME)) {
+                if (BIO_write(bp, ":", 1) <= 0)
+                    goto end;
+                if ((len > 0) && BIO_write(bp, (const char *)p, (int)len)
+                    != (int)len)
+                    goto end;
+            } else if (tag == V_ASN1_OBJECT) {
+                opp = op;
+                if (d2i_ASN1_OBJECT(&o, &opp, len + hl) != NULL) {
+                    if (BIO_write(bp, ":", 1) <= 0)
+                        goto end;
+                    i2a_ASN1_OBJECT(bp, o);
+                } else {
+                    if (BIO_puts(bp, ":BAD OBJECT") <= 0)
+                        goto end;
+                    dump_cont = 1;
+                }
+            } else if (tag == V_ASN1_BOOLEAN) {
+                if (len != 1) {
+                    if (BIO_puts(bp, ":BAD BOOLEAN") <= 0)
+                        goto end;
+                    dump_cont = 1;
+                }
+                if (len > 0)
+                    BIO_printf(bp, ":%u", p[0]);
+            } else if (tag == V_ASN1_BMPSTRING) {
+                /* do the BMP thang */
+            } else if (tag == V_ASN1_OCTET_STRING) {
+                int i, printable = 1;
+
+                opp = op;
+                os = d2i_ASN1_OCTET_STRING(NULL, &opp, len + hl);
+                if (os != NULL && os->length > 0) {
+                    opp = os->data;
+                    /*
+                     * testing whether the octet string is printable
+                     */
+                    for (i = 0; i < os->length; i++) {
+                        if (((opp[i] < ' ') &&
+                             (opp[i] != '\n') &&
+                             (opp[i] != '\r') &&
+                             (opp[i] != '\t')) || (opp[i] > '~')) {
+                            printable = 0;
+                            break;
+                        }
+                    }
+                    if (printable)
+                        /* printable string */
+                    {
+                        if (BIO_write(bp, ":", 1) <= 0)
+                            goto end;
+                        if (BIO_write(bp, (const char *)opp, os->length) <= 0)
+                            goto end;
+                    } else if (!dump)
+                        /*
+                         * not printable => print octet string as hex dump
+                         */
+                    {
+                        if (BIO_write(bp, "[HEX DUMP]:", 11) <= 0)
+                            goto end;
+                        for (i = 0; i < os->length; i++) {
+                            if (BIO_printf(bp, "%02X", opp[i]) <= 0)
+                                goto end;
+                        }
+                    } else
+                        /* print the normal dump */
+                    {
+                        if (!nl) {
+                            if (BIO_write(bp, "\n", 1) <= 0)
+                                goto end;
+                        }
+                        if (BIO_dump_indent(bp,
+                                            (const char *)opp,
+                                            ((dump == -1 || dump >
+                                              os->
+                                              length) ? os->length : dump),
+                                            dump_indent) <= 0)
+                            goto end;
+                        nl = 1;
+                    }
+                }
+                ASN1_OCTET_STRING_free(os);
+                os = NULL;
+            } else if (tag == V_ASN1_INTEGER) {
+                ASN1_INTEGER *bs;
+                int i;
+
+                opp = op;
+                bs = d2i_ASN1_INTEGER(NULL, &opp, len + hl);
+                if (bs != NULL) {
+                    if (BIO_write(bp, ":", 1) <= 0)
+                        goto end;
+                    if (bs->type == V_ASN1_NEG_INTEGER)
+                        if (BIO_write(bp, "-", 1) <= 0)
+                            goto end;
+                    for (i = 0; i < bs->length; i++) {
+                        if (BIO_printf(bp, "%02X", bs->data[i]) <= 0)
+                            goto end;
+                    }
+                    if (bs->length == 0) {
+                        if (BIO_write(bp, "00", 2) <= 0)
+                            goto end;
+                    }
+                } else {
+                    if (BIO_puts(bp, ":BAD INTEGER") <= 0)
+                        goto end;
+                    dump_cont = 1;
+                }
+                ASN1_INTEGER_free(bs);
+            } else if (tag == V_ASN1_ENUMERATED) {
+                ASN1_ENUMERATED *bs;
+                int i;
+
+                opp = op;
+                bs = d2i_ASN1_ENUMERATED(NULL, &opp, len + hl);
+                if (bs != NULL) {
+                    if (BIO_write(bp, ":", 1) <= 0)
+                        goto end;
+                    if (bs->type == V_ASN1_NEG_ENUMERATED)
+                        if (BIO_write(bp, "-", 1) <= 0)
+                            goto end;
+                    for (i = 0; i < bs->length; i++) {
+                        if (BIO_printf(bp, "%02X", bs->data[i]) <= 0)
+                            goto end;
+                    }
+                    if (bs->length == 0) {
+                        if (BIO_write(bp, "00", 2) <= 0)
+                            goto end;
+                    }
+                } else {
+                    if (BIO_puts(bp, ":BAD ENUMERATED") <= 0)
+                        goto end;
+                    dump_cont = 1;
+                }
+                ASN1_ENUMERATED_free(bs);
+            } else if (len > 0 && dump) {
+                if (!nl) {
+                    if (BIO_write(bp, "\n", 1) <= 0)
+                        goto end;
+                }
+                if (BIO_dump_indent(bp, (const char *)p,
+                                    ((dump == -1 || dump > len) ? len : dump),
+                                    dump_indent) <= 0)
+                    goto end;
+                nl = 1;
+            }
+            if (dump_cont) {
+                int i;
+                const unsigned char *tmp = op + hl;
+                if (BIO_puts(bp, ":[") <= 0)
+                    goto end;
+                for (i = 0; i < len; i++) {
+                    if (BIO_printf(bp, "%02X", tmp[i]) <= 0)
+                        goto end;
+                }
+                if (BIO_puts(bp, "]") <= 0)
+                    goto end;
+            }
+
+            if (!nl) {
+                if (BIO_write(bp, "\n", 1) <= 0)
+                    goto end;
+            }
+            p += len;
+            if ((tag == V_ASN1_EOC) && (xclass == 0)) {
+                ret = 2;        /* End of sequence */
+                goto end;
+            }
+        }
+        length -= len;
+    }
+    ret = 1;
+ end:
+    ASN1_OBJECT_free(o);
+    ASN1_OCTET_STRING_free(os);
+    *pp = p;
+    return ret;
+}
+
+const char *ASN1_tag2str(int tag)
+{
+    static const char *const tag2str[] = {
+        /* 0-4 */
+        "EOC", "BOOLEAN", "INTEGER", "BIT STRING", "OCTET STRING",
+        /* 5-9 */
+        "NULL", "OBJECT", "OBJECT DESCRIPTOR", "EXTERNAL", "REAL",
+        /* 10-13 */
+        "ENUMERATED", "<ASN1 11>", "UTF8STRING", "<ASN1 13>",
+        /* 15-17 */
+        "<ASN1 14>", "<ASN1 15>", "SEQUENCE", "SET",
+        /* 18-20 */
+        "NUMERICSTRING", "PRINTABLESTRING", "T61STRING",
+        /* 21-24 */
+        "VIDEOTEXSTRING", "IA5STRING", "UTCTIME", "GENERALIZEDTIME",
+        /* 25-27 */
+        "GRAPHICSTRING", "VISIBLESTRING", "GENERALSTRING",
+        /* 28-30 */
+        "UNIVERSALSTRING", "<ASN1 29>", "BMPSTRING"
+    };
+
+    if ((tag == V_ASN1_NEG_INTEGER) || (tag == V_ASN1_NEG_ENUMERATED))
+        tag &= ~0x100;
+
+    if (tag < 0 || tag > 30)
+        return "(unknown)";
+    return tag2str[tag];
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn_mime.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn_mime.c
new file mode 100644
index 000000000..dfd5be634
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn_mime.c
@@ -0,0 +1,963 @@
+/*
+ * Copyright 2008-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/ctype.h"
+#include "internal/cryptlib.h"
+#include <openssl/rand.h>
+#include <openssl/x509.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include "internal/evp_int.h"
+#include "internal/bio.h"
+#include "asn1_locl.h"
+
+/*
+ * Generalised MIME like utilities for streaming ASN1. Although many have a
+ * PKCS7/CMS like flavour others are more general purpose.
+ */
+
+/*
+ * MIME format structures Note that all are translated to lower case apart
+ * from parameter values. Quotes are stripped off
+ */
+
+struct mime_param_st {
+    char *param_name;           /* Param name e.g. "micalg" */
+    char *param_value;          /* Param value e.g. "sha1" */
+};
+
+struct mime_header_st {
+    char *name;                 /* Name of line e.g. "content-type" */
+    char *value;                /* Value of line e.g. "text/plain" */
+    STACK_OF(MIME_PARAM) *params; /* Zero or more parameters */
+};
+
+static int asn1_output_data(BIO *out, BIO *data, ASN1_VALUE *val, int flags,
+                            const ASN1_ITEM *it);
+static char *strip_ends(char *name);
+static char *strip_start(char *name);
+static char *strip_end(char *name);
+static MIME_HEADER *mime_hdr_new(const char *name, const char *value);
+static int mime_hdr_addparam(MIME_HEADER *mhdr, const char *name, const char *value);
+static STACK_OF(MIME_HEADER) *mime_parse_hdr(BIO *bio);
+static int mime_hdr_cmp(const MIME_HEADER *const *a,
+                        const MIME_HEADER *const *b);
+static int mime_param_cmp(const MIME_PARAM *const *a,
+                          const MIME_PARAM *const *b);
+static void mime_param_free(MIME_PARAM *param);
+static int mime_bound_check(char *line, int linelen, const char *bound, int blen);
+static int multi_split(BIO *bio, const char *bound, STACK_OF(BIO) **ret);
+static int strip_eol(char *linebuf, int *plen, int flags);
+static MIME_HEADER *mime_hdr_find(STACK_OF(MIME_HEADER) *hdrs, const char *name);
+static MIME_PARAM *mime_param_find(MIME_HEADER *hdr, const char *name);
+static void mime_hdr_free(MIME_HEADER *hdr);
+
+#define MAX_SMLEN 1024
+#define mime_debug(x)           /* x */
+
+/* Output an ASN1 structure in BER format streaming if necessary */
+
+int i2d_ASN1_bio_stream(BIO *out, ASN1_VALUE *val, BIO *in, int flags,
+                        const ASN1_ITEM *it)
+{
+    /* If streaming create stream BIO and copy all content through it */
+    if (flags & SMIME_STREAM) {
+        BIO *bio, *tbio;
+        bio = BIO_new_NDEF(out, val, it);
+        if (!bio) {
+            ASN1err(ASN1_F_I2D_ASN1_BIO_STREAM, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        SMIME_crlf_copy(in, bio, flags);
+        (void)BIO_flush(bio);
+        /* Free up successive BIOs until we hit the old output BIO */
+        do {
+            tbio = BIO_pop(bio);
+            BIO_free(bio);
+            bio = tbio;
+        } while (bio != out);
+    }
+    /*
+     * else just write out ASN1 structure which will have all content stored
+     * internally
+     */
+    else
+        ASN1_item_i2d_bio(it, out, val);
+    return 1;
+}
+
+/* Base 64 read and write of ASN1 structure */
+
+static int B64_write_ASN1(BIO *out, ASN1_VALUE *val, BIO *in, int flags,
+                          const ASN1_ITEM *it)
+{
+    BIO *b64;
+    int r;
+    b64 = BIO_new(BIO_f_base64());
+    if (b64 == NULL) {
+        ASN1err(ASN1_F_B64_WRITE_ASN1, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    /*
+     * prepend the b64 BIO so all data is base64 encoded.
+     */
+    out = BIO_push(b64, out);
+    r = i2d_ASN1_bio_stream(out, val, in, flags, it);
+    (void)BIO_flush(out);
+    BIO_pop(out);
+    BIO_free(b64);
+    return r;
+}
+
+/* Streaming ASN1 PEM write */
+
+int PEM_write_bio_ASN1_stream(BIO *out, ASN1_VALUE *val, BIO *in, int flags,
+                              const char *hdr, const ASN1_ITEM *it)
+{
+    int r;
+    BIO_printf(out, "-----BEGIN %s-----\n", hdr);
+    r = B64_write_ASN1(out, val, in, flags, it);
+    BIO_printf(out, "-----END %s-----\n", hdr);
+    return r;
+}
+
+static ASN1_VALUE *b64_read_asn1(BIO *bio, const ASN1_ITEM *it)
+{
+    BIO *b64;
+    ASN1_VALUE *val;
+
+    if ((b64 = BIO_new(BIO_f_base64())) == NULL) {
+        ASN1err(ASN1_F_B64_READ_ASN1, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    bio = BIO_push(b64, bio);
+    val = ASN1_item_d2i_bio(it, bio, NULL);
+    if (!val)
+        ASN1err(ASN1_F_B64_READ_ASN1, ASN1_R_DECODE_ERROR);
+    (void)BIO_flush(bio);
+    BIO_pop(bio);
+    BIO_free(b64);
+    return val;
+}
+
+/* Generate the MIME "micalg" parameter from RFC3851, RFC4490 */
+
+static int asn1_write_micalg(BIO *out, STACK_OF(X509_ALGOR) *mdalgs)
+{
+    const EVP_MD *md;
+    int i, have_unknown = 0, write_comma, ret = 0, md_nid;
+    have_unknown = 0;
+    write_comma = 0;
+    for (i = 0; i < sk_X509_ALGOR_num(mdalgs); i++) {
+        if (write_comma)
+            BIO_write(out, ",", 1);
+        write_comma = 1;
+        md_nid = OBJ_obj2nid(sk_X509_ALGOR_value(mdalgs, i)->algorithm);
+        md = EVP_get_digestbynid(md_nid);
+        if (md && md->md_ctrl) {
+            int rv;
+            char *micstr;
+            rv = md->md_ctrl(NULL, EVP_MD_CTRL_MICALG, 0, &micstr);
+            if (rv > 0) {
+                BIO_puts(out, micstr);
+                OPENSSL_free(micstr);
+                continue;
+            }
+            if (rv != -2)
+                goto err;
+        }
+        switch (md_nid) {
+        case NID_sha1:
+            BIO_puts(out, "sha1");
+            break;
+
+        case NID_md5:
+            BIO_puts(out, "md5");
+            break;
+
+        case NID_sha256:
+            BIO_puts(out, "sha-256");
+            break;
+
+        case NID_sha384:
+            BIO_puts(out, "sha-384");
+            break;
+
+        case NID_sha512:
+            BIO_puts(out, "sha-512");
+            break;
+
+        case NID_id_GostR3411_94:
+            BIO_puts(out, "gostr3411-94");
+            goto err;
+
+        default:
+            if (have_unknown)
+                write_comma = 0;
+            else {
+                BIO_puts(out, "unknown");
+                have_unknown = 1;
+            }
+            break;
+
+        }
+    }
+
+    ret = 1;
+ err:
+
+    return ret;
+
+}
+
+/* SMIME sender */
+
+int SMIME_write_ASN1(BIO *bio, ASN1_VALUE *val, BIO *data, int flags,
+                     int ctype_nid, int econt_nid,
+                     STACK_OF(X509_ALGOR) *mdalgs, const ASN1_ITEM *it)
+{
+    char bound[33], c;
+    int i;
+    const char *mime_prefix, *mime_eol, *cname = "smime.p7m";
+    const char *msg_type = NULL;
+    if (flags & SMIME_OLDMIME)
+        mime_prefix = "application/x-pkcs7-";
+    else
+        mime_prefix = "application/pkcs7-";
+
+    if (flags & SMIME_CRLFEOL)
+        mime_eol = "\r\n";
+    else
+        mime_eol = "\n";
+    if ((flags & SMIME_DETACHED) && data) {
+        /* We want multipart/signed */
+        /* Generate a random boundary */
+        if (RAND_bytes((unsigned char *)bound, 32) <= 0)
+            return 0;
+        for (i = 0; i < 32; i++) {
+            c = bound[i] & 0xf;
+            if (c < 10)
+                c += '0';
+            else
+                c += 'A' - 10;
+            bound[i] = c;
+        }
+        bound[32] = 0;
+        BIO_printf(bio, "MIME-Version: 1.0%s", mime_eol);
+        BIO_printf(bio, "Content-Type: multipart/signed;");
+        BIO_printf(bio, " protocol=\"%ssignature\";", mime_prefix);
+        BIO_puts(bio, " micalg=\"");
+        asn1_write_micalg(bio, mdalgs);
+        BIO_printf(bio, "\"; boundary=\"----%s\"%s%s",
+                   bound, mime_eol, mime_eol);
+        BIO_printf(bio, "This is an S/MIME signed message%s%s",
+                   mime_eol, mime_eol);
+        /* Now write out the first part */
+        BIO_printf(bio, "------%s%s", bound, mime_eol);
+        if (!asn1_output_data(bio, data, val, flags, it))
+            return 0;
+        BIO_printf(bio, "%s------%s%s", mime_eol, bound, mime_eol);
+
+        /* Headers for signature */
+
+        BIO_printf(bio, "Content-Type: %ssignature;", mime_prefix);
+        BIO_printf(bio, " name=\"smime.p7s\"%s", mime_eol);
+        BIO_printf(bio, "Content-Transfer-Encoding: base64%s", mime_eol);
+        BIO_printf(bio, "Content-Disposition: attachment;");
+        BIO_printf(bio, " filename=\"smime.p7s\"%s%s", mime_eol, mime_eol);
+        B64_write_ASN1(bio, val, NULL, 0, it);
+        BIO_printf(bio, "%s------%s--%s%s", mime_eol, bound,
+                   mime_eol, mime_eol);
+        return 1;
+    }
+
+    /* Determine smime-type header */
+
+    if (ctype_nid == NID_pkcs7_enveloped)
+        msg_type = "enveloped-data";
+    else if (ctype_nid == NID_pkcs7_signed) {
+        if (econt_nid == NID_id_smime_ct_receipt)
+            msg_type = "signed-receipt";
+        else if (sk_X509_ALGOR_num(mdalgs) >= 0)
+            msg_type = "signed-data";
+        else
+            msg_type = "certs-only";
+    } else if (ctype_nid == NID_id_smime_ct_compressedData) {
+        msg_type = "compressed-data";
+        cname = "smime.p7z";
+    }
+    /* MIME headers */
+    BIO_printf(bio, "MIME-Version: 1.0%s", mime_eol);
+    BIO_printf(bio, "Content-Disposition: attachment;");
+    BIO_printf(bio, " filename=\"%s\"%s", cname, mime_eol);
+    BIO_printf(bio, "Content-Type: %smime;", mime_prefix);
+    if (msg_type)
+        BIO_printf(bio, " smime-type=%s;", msg_type);
+    BIO_printf(bio, " name=\"%s\"%s", cname, mime_eol);
+    BIO_printf(bio, "Content-Transfer-Encoding: base64%s%s",
+               mime_eol, mime_eol);
+    if (!B64_write_ASN1(bio, val, data, flags, it))
+        return 0;
+    BIO_printf(bio, "%s", mime_eol);
+    return 1;
+}
+
+/* Handle output of ASN1 data */
+
+static int asn1_output_data(BIO *out, BIO *data, ASN1_VALUE *val, int flags,
+                            const ASN1_ITEM *it)
+{
+    BIO *tmpbio;
+    const ASN1_AUX *aux = it->funcs;
+    ASN1_STREAM_ARG sarg;
+    int rv = 1;
+
+    /*
+     * If data is not detached or resigning then the output BIO is already
+     * set up to finalise when it is written through.
+     */
+    if (!(flags & SMIME_DETACHED) || (flags & PKCS7_REUSE_DIGEST)) {
+        SMIME_crlf_copy(data, out, flags);
+        return 1;
+    }
+
+    if (!aux || !aux->asn1_cb) {
+        ASN1err(ASN1_F_ASN1_OUTPUT_DATA, ASN1_R_STREAMING_NOT_SUPPORTED);
+        return 0;
+    }
+
+    sarg.out = out;
+    sarg.ndef_bio = NULL;
+    sarg.boundary = NULL;
+
+    /* Let ASN1 code prepend any needed BIOs */
+
+    if (aux->asn1_cb(ASN1_OP_DETACHED_PRE, &val, it, &sarg) <= 0)
+        return 0;
+
+    /* Copy data across, passing through filter BIOs for processing */
+    SMIME_crlf_copy(data, sarg.ndef_bio, flags);
+
+    /* Finalize structure */
+    if (aux->asn1_cb(ASN1_OP_DETACHED_POST, &val, it, &sarg) <= 0)
+        rv = 0;
+
+    /* Now remove any digests prepended to the BIO */
+
+    while (sarg.ndef_bio != out) {
+        tmpbio = BIO_pop(sarg.ndef_bio);
+        BIO_free(sarg.ndef_bio);
+        sarg.ndef_bio = tmpbio;
+    }
+
+    return rv;
+
+}
+
+/*
+ * SMIME reader: handle multipart/signed and opaque signing. in multipart
+ * case the content is placed in a memory BIO pointed to by "bcont". In
+ * opaque this is set to NULL
+ */
+
+ASN1_VALUE *SMIME_read_ASN1(BIO *bio, BIO **bcont, const ASN1_ITEM *it)
+{
+    BIO *asnin;
+    STACK_OF(MIME_HEADER) *headers = NULL;
+    STACK_OF(BIO) *parts = NULL;
+    MIME_HEADER *hdr;
+    MIME_PARAM *prm;
+    ASN1_VALUE *val;
+    int ret;
+
+    if (bcont)
+        *bcont = NULL;
+
+    if ((headers = mime_parse_hdr(bio)) == NULL) {
+        ASN1err(ASN1_F_SMIME_READ_ASN1, ASN1_R_MIME_PARSE_ERROR);
+        return NULL;
+    }
+
+    if ((hdr = mime_hdr_find(headers, "content-type")) == NULL
+        || hdr->value == NULL) {
+        sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
+        ASN1err(ASN1_F_SMIME_READ_ASN1, ASN1_R_NO_CONTENT_TYPE);
+        return NULL;
+    }
+
+    /* Handle multipart/signed */
+
+    if (strcmp(hdr->value, "multipart/signed") == 0) {
+        /* Split into two parts */
+        prm = mime_param_find(hdr, "boundary");
+        if (!prm || !prm->param_value) {
+            sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
+            ASN1err(ASN1_F_SMIME_READ_ASN1, ASN1_R_NO_MULTIPART_BOUNDARY);
+            return NULL;
+        }
+        ret = multi_split(bio, prm->param_value, &parts);
+        sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
+        if (!ret || (sk_BIO_num(parts) != 2)) {
+            ASN1err(ASN1_F_SMIME_READ_ASN1, ASN1_R_NO_MULTIPART_BODY_FAILURE);
+            sk_BIO_pop_free(parts, BIO_vfree);
+            return NULL;
+        }
+
+        /* Parse the signature piece */
+        asnin = sk_BIO_value(parts, 1);
+
+        if ((headers = mime_parse_hdr(asnin)) == NULL) {
+            ASN1err(ASN1_F_SMIME_READ_ASN1, ASN1_R_MIME_SIG_PARSE_ERROR);
+            sk_BIO_pop_free(parts, BIO_vfree);
+            return NULL;
+        }
+
+        /* Get content type */
+
+        if ((hdr = mime_hdr_find(headers, "content-type")) == NULL
+            || hdr->value == NULL) {
+            sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
+            ASN1err(ASN1_F_SMIME_READ_ASN1, ASN1_R_NO_SIG_CONTENT_TYPE);
+            sk_BIO_pop_free(parts, BIO_vfree);
+            return NULL;
+        }
+
+        if (strcmp(hdr->value, "application/x-pkcs7-signature") &&
+            strcmp(hdr->value, "application/pkcs7-signature")) {
+            ASN1err(ASN1_F_SMIME_READ_ASN1, ASN1_R_SIG_INVALID_MIME_TYPE);
+            ERR_add_error_data(2, "type: ", hdr->value);
+            sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
+            sk_BIO_pop_free(parts, BIO_vfree);
+            return NULL;
+        }
+        sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
+        /* Read in ASN1 */
+        if ((val = b64_read_asn1(asnin, it)) == NULL) {
+            ASN1err(ASN1_F_SMIME_READ_ASN1, ASN1_R_ASN1_SIG_PARSE_ERROR);
+            sk_BIO_pop_free(parts, BIO_vfree);
+            return NULL;
+        }
+
+        if (bcont) {
+            *bcont = sk_BIO_value(parts, 0);
+            BIO_free(asnin);
+            sk_BIO_free(parts);
+        } else
+            sk_BIO_pop_free(parts, BIO_vfree);
+        return val;
+    }
+
+    /* OK, if not multipart/signed try opaque signature */
+
+    if (strcmp(hdr->value, "application/x-pkcs7-mime") &&
+        strcmp(hdr->value, "application/pkcs7-mime")) {
+        ASN1err(ASN1_F_SMIME_READ_ASN1, ASN1_R_INVALID_MIME_TYPE);
+        ERR_add_error_data(2, "type: ", hdr->value);
+        sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
+        return NULL;
+    }
+
+    sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
+
+    if ((val = b64_read_asn1(bio, it)) == NULL) {
+        ASN1err(ASN1_F_SMIME_READ_ASN1, ASN1_R_ASN1_PARSE_ERROR);
+        return NULL;
+    }
+    return val;
+
+}
+
+/* Copy text from one BIO to another making the output CRLF at EOL */
+int SMIME_crlf_copy(BIO *in, BIO *out, int flags)
+{
+    BIO *bf;
+    char eol;
+    int len;
+    char linebuf[MAX_SMLEN];
+    /*
+     * Buffer output so we don't write one line at a time. This is useful
+     * when streaming as we don't end up with one OCTET STRING per line.
+     */
+    bf = BIO_new(BIO_f_buffer());
+    if (bf == NULL)
+        return 0;
+    out = BIO_push(bf, out);
+    if (flags & SMIME_BINARY) {
+        while ((len = BIO_read(in, linebuf, MAX_SMLEN)) > 0)
+            BIO_write(out, linebuf, len);
+    } else {
+        int eolcnt = 0;
+        if (flags & SMIME_TEXT)
+            BIO_printf(out, "Content-Type: text/plain\r\n\r\n");
+        while ((len = BIO_gets(in, linebuf, MAX_SMLEN)) > 0) {
+            eol = strip_eol(linebuf, &len, flags);
+            if (len) {
+                /* Not EOF: write out all CRLF */
+                if (flags & SMIME_ASCIICRLF) {
+                    int i;
+                    for (i = 0; i < eolcnt; i++)
+                        BIO_write(out, "\r\n", 2);
+                    eolcnt = 0;
+                }
+                BIO_write(out, linebuf, len);
+                if (eol)
+                    BIO_write(out, "\r\n", 2);
+            } else if (flags & SMIME_ASCIICRLF)
+                eolcnt++;
+            else if (eol)
+                BIO_write(out, "\r\n", 2);
+        }
+    }
+    (void)BIO_flush(out);
+    BIO_pop(out);
+    BIO_free(bf);
+    return 1;
+}
+
+/* Strip off headers if they are text/plain */
+int SMIME_text(BIO *in, BIO *out)
+{
+    char iobuf[4096];
+    int len;
+    STACK_OF(MIME_HEADER) *headers;
+    MIME_HEADER *hdr;
+
+    if ((headers = mime_parse_hdr(in)) == NULL) {
+        ASN1err(ASN1_F_SMIME_TEXT, ASN1_R_MIME_PARSE_ERROR);
+        return 0;
+    }
+    if ((hdr = mime_hdr_find(headers, "content-type")) == NULL
+        || hdr->value == NULL) {
+        ASN1err(ASN1_F_SMIME_TEXT, ASN1_R_MIME_NO_CONTENT_TYPE);
+        sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
+        return 0;
+    }
+    if (strcmp(hdr->value, "text/plain")) {
+        ASN1err(ASN1_F_SMIME_TEXT, ASN1_R_INVALID_MIME_TYPE);
+        ERR_add_error_data(2, "type: ", hdr->value);
+        sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
+        return 0;
+    }
+    sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
+    while ((len = BIO_read(in, iobuf, sizeof(iobuf))) > 0)
+        BIO_write(out, iobuf, len);
+    if (len < 0)
+        return 0;
+    return 1;
+}
+
+/*
+ * Split a multipart/XXX message body into component parts: result is
+ * canonical parts in a STACK of bios
+ */
+
+static int multi_split(BIO *bio, const char *bound, STACK_OF(BIO) **ret)
+{
+    char linebuf[MAX_SMLEN];
+    int len, blen;
+    int eol = 0, next_eol = 0;
+    BIO *bpart = NULL;
+    STACK_OF(BIO) *parts;
+    char state, part, first;
+
+    blen = strlen(bound);
+    part = 0;
+    state = 0;
+    first = 1;
+    parts = sk_BIO_new_null();
+    *ret = parts;
+    if (*ret == NULL)
+        return 0;
+    while ((len = BIO_gets(bio, linebuf, MAX_SMLEN)) > 0) {
+        state = mime_bound_check(linebuf, len, bound, blen);
+        if (state == 1) {
+            first = 1;
+            part++;
+        } else if (state == 2) {
+            if (!sk_BIO_push(parts, bpart)) {
+                BIO_free(bpart);
+                return 0;
+            }
+            return 1;
+        } else if (part) {
+            /* Strip CR+LF from linebuf */
+            next_eol = strip_eol(linebuf, &len, 0);
+            if (first) {
+                first = 0;
+                if (bpart)
+                    if (!sk_BIO_push(parts, bpart)) {
+                        BIO_free(bpart);
+                        return 0;
+                    }
+                bpart = BIO_new(BIO_s_mem());
+                if (bpart == NULL)
+                    return 0;
+                BIO_set_mem_eof_return(bpart, 0);
+            } else if (eol)
+                BIO_write(bpart, "\r\n", 2);
+            eol = next_eol;
+            if (len)
+                BIO_write(bpart, linebuf, len);
+        }
+    }
+    BIO_free(bpart);
+    return 0;
+}
+
+/* This is the big one: parse MIME header lines up to message body */
+
+#define MIME_INVALID    0
+#define MIME_START      1
+#define MIME_TYPE       2
+#define MIME_NAME       3
+#define MIME_VALUE      4
+#define MIME_QUOTE      5
+#define MIME_COMMENT    6
+
+static STACK_OF(MIME_HEADER) *mime_parse_hdr(BIO *bio)
+{
+    char *p, *q, c;
+    char *ntmp;
+    char linebuf[MAX_SMLEN];
+    MIME_HEADER *mhdr = NULL, *new_hdr = NULL;
+    STACK_OF(MIME_HEADER) *headers;
+    int len, state, save_state = 0;
+
+    headers = sk_MIME_HEADER_new(mime_hdr_cmp);
+    if (headers == NULL)
+        return NULL;
+    while ((len = BIO_gets(bio, linebuf, MAX_SMLEN)) > 0) {
+        /* If whitespace at line start then continuation line */
+        if (mhdr && ossl_isspace(linebuf[0]))
+            state = MIME_NAME;
+        else
+            state = MIME_START;
+        ntmp = NULL;
+        /* Go through all characters */
+        for (p = linebuf, q = linebuf; (c = *p) && (c != '\r') && (c != '\n');
+             p++) {
+
+            /*
+             * State machine to handle MIME headers if this looks horrible
+             * that's because it *is*
+             */
+
+            switch (state) {
+            case MIME_START:
+                if (c == ':') {
+                    state = MIME_TYPE;
+                    *p = 0;
+                    ntmp = strip_ends(q);
+                    q = p + 1;
+                }
+                break;
+
+            case MIME_TYPE:
+                if (c == ';') {
+                    mime_debug("Found End Value\n");
+                    *p = 0;
+                    new_hdr = mime_hdr_new(ntmp, strip_ends(q));
+                    if (new_hdr == NULL)
+                        goto err;
+                    if (!sk_MIME_HEADER_push(headers, new_hdr))
+                        goto err;
+                    mhdr = new_hdr;
+                    new_hdr = NULL;
+                    ntmp = NULL;
+                    q = p + 1;
+                    state = MIME_NAME;
+                } else if (c == '(') {
+                    save_state = state;
+                    state = MIME_COMMENT;
+                }
+                break;
+
+            case MIME_COMMENT:
+                if (c == ')') {
+                    state = save_state;
+                }
+                break;
+
+            case MIME_NAME:
+                if (c == '=') {
+                    state = MIME_VALUE;
+                    *p = 0;
+                    ntmp = strip_ends(q);
+                    q = p + 1;
+                }
+                break;
+
+            case MIME_VALUE:
+                if (c == ';') {
+                    state = MIME_NAME;
+                    *p = 0;
+                    mime_hdr_addparam(mhdr, ntmp, strip_ends(q));
+                    ntmp = NULL;
+                    q = p + 1;
+                } else if (c == '"') {
+                    mime_debug("Found Quote\n");
+                    state = MIME_QUOTE;
+                } else if (c == '(') {
+                    save_state = state;
+                    state = MIME_COMMENT;
+                }
+                break;
+
+            case MIME_QUOTE:
+                if (c == '"') {
+                    mime_debug("Found Match Quote\n");
+                    state = MIME_VALUE;
+                }
+                break;
+            }
+        }
+
+        if (state == MIME_TYPE) {
+            new_hdr = mime_hdr_new(ntmp, strip_ends(q));
+            if (new_hdr == NULL)
+                goto err;
+            if (!sk_MIME_HEADER_push(headers, new_hdr))
+                goto err;
+            mhdr = new_hdr;
+            new_hdr = NULL;
+        } else if (state == MIME_VALUE)
+            mime_hdr_addparam(mhdr, ntmp, strip_ends(q));
+        if (p == linebuf)
+            break;              /* Blank line means end of headers */
+    }
+
+    return headers;
+
+err:
+    mime_hdr_free(new_hdr);
+    sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
+    return NULL;
+}
+
+static char *strip_ends(char *name)
+{
+    return strip_end(strip_start(name));
+}
+
+/* Strip a parameter of whitespace from start of param */
+static char *strip_start(char *name)
+{
+    char *p, c;
+    /* Look for first non white space or quote */
+    for (p = name; (c = *p); p++) {
+        if (c == '"') {
+            /* Next char is start of string if non null */
+            if (p[1])
+                return p + 1;
+            /* Else null string */
+            return NULL;
+        }
+        if (!ossl_isspace(c))
+            return p;
+    }
+    return NULL;
+}
+
+/* As above but strip from end of string : maybe should handle brackets? */
+static char *strip_end(char *name)
+{
+    char *p, c;
+    if (!name)
+        return NULL;
+    /* Look for first non white space or quote */
+    for (p = name + strlen(name) - 1; p >= name; p--) {
+        c = *p;
+        if (c == '"') {
+            if (p - 1 == name)
+                return NULL;
+            *p = 0;
+            return name;
+        }
+        if (ossl_isspace(c))
+            *p = 0;
+        else
+            return name;
+    }
+    return NULL;
+}
+
+static MIME_HEADER *mime_hdr_new(const char *name, const char *value)
+{
+    MIME_HEADER *mhdr = NULL;
+    char *tmpname = NULL, *tmpval = NULL, *p;
+
+    if (name) {
+        if ((tmpname = OPENSSL_strdup(name)) == NULL)
+            return NULL;
+        for (p = tmpname; *p; p++)
+            *p = ossl_tolower(*p);
+    }
+    if (value) {
+        if ((tmpval = OPENSSL_strdup(value)) == NULL)
+            goto err;
+        for (p = tmpval; *p; p++)
+            *p = ossl_tolower(*p);
+    }
+    mhdr = OPENSSL_malloc(sizeof(*mhdr));
+    if (mhdr == NULL)
+        goto err;
+    mhdr->name = tmpname;
+    mhdr->value = tmpval;
+    if ((mhdr->params = sk_MIME_PARAM_new(mime_param_cmp)) == NULL)
+        goto err;
+    return mhdr;
+
+ err:
+    OPENSSL_free(tmpname);
+    OPENSSL_free(tmpval);
+    OPENSSL_free(mhdr);
+    return NULL;
+}
+
+static int mime_hdr_addparam(MIME_HEADER *mhdr, const char *name, const char *value)
+{
+    char *tmpname = NULL, *tmpval = NULL, *p;
+    MIME_PARAM *mparam = NULL;
+
+    if (name) {
+        tmpname = OPENSSL_strdup(name);
+        if (!tmpname)
+            goto err;
+        for (p = tmpname; *p; p++)
+            *p = ossl_tolower(*p);
+    }
+    if (value) {
+        tmpval = OPENSSL_strdup(value);
+        if (!tmpval)
+            goto err;
+    }
+    /* Parameter values are case sensitive so leave as is */
+    mparam = OPENSSL_malloc(sizeof(*mparam));
+    if (mparam == NULL)
+        goto err;
+    mparam->param_name = tmpname;
+    mparam->param_value = tmpval;
+    if (!sk_MIME_PARAM_push(mhdr->params, mparam))
+        goto err;
+    return 1;
+ err:
+    OPENSSL_free(tmpname);
+    OPENSSL_free(tmpval);
+    OPENSSL_free(mparam);
+    return 0;
+}
+
+static int mime_hdr_cmp(const MIME_HEADER *const *a,
+                        const MIME_HEADER *const *b)
+{
+    if (!(*a)->name || !(*b)->name)
+        return ! !(*a)->name - ! !(*b)->name;
+
+    return strcmp((*a)->name, (*b)->name);
+}
+
+static int mime_param_cmp(const MIME_PARAM *const *a,
+                          const MIME_PARAM *const *b)
+{
+    if (!(*a)->param_name || !(*b)->param_name)
+        return ! !(*a)->param_name - ! !(*b)->param_name;
+    return strcmp((*a)->param_name, (*b)->param_name);
+}
+
+/* Find a header with a given name (if possible) */
+
+static MIME_HEADER *mime_hdr_find(STACK_OF(MIME_HEADER) *hdrs, const char *name)
+{
+    MIME_HEADER htmp;
+    int idx;
+
+    htmp.name = (char *)name;
+    htmp.value = NULL;
+    htmp.params = NULL;
+
+    idx = sk_MIME_HEADER_find(hdrs, &htmp);
+    return sk_MIME_HEADER_value(hdrs, idx);
+}
+
+static MIME_PARAM *mime_param_find(MIME_HEADER *hdr, const char *name)
+{
+    MIME_PARAM param;
+    int idx;
+
+    param.param_name = (char *)name;
+    param.param_value = NULL;
+    idx = sk_MIME_PARAM_find(hdr->params, &param);
+    return sk_MIME_PARAM_value(hdr->params, idx);
+}
+
+static void mime_hdr_free(MIME_HEADER *hdr)
+{
+    if (hdr == NULL)
+        return;
+    OPENSSL_free(hdr->name);
+    OPENSSL_free(hdr->value);
+    if (hdr->params)
+        sk_MIME_PARAM_pop_free(hdr->params, mime_param_free);
+    OPENSSL_free(hdr);
+}
+
+static void mime_param_free(MIME_PARAM *param)
+{
+    OPENSSL_free(param->param_name);
+    OPENSSL_free(param->param_value);
+    OPENSSL_free(param);
+}
+
+/*-
+ * Check for a multipart boundary. Returns:
+ * 0 : no boundary
+ * 1 : part boundary
+ * 2 : final boundary
+ */
+static int mime_bound_check(char *line, int linelen, const char *bound, int blen)
+{
+    if (linelen == -1)
+        linelen = strlen(line);
+    if (blen == -1)
+        blen = strlen(bound);
+    /* Quickly eliminate if line length too short */
+    if (blen + 2 > linelen)
+        return 0;
+    /* Check for part boundary */
+    if ((strncmp(line, "--", 2) == 0)
+        && strncmp(line + 2, bound, blen) == 0) {
+        if (strncmp(line + blen + 2, "--", 2) == 0)
+            return 2;
+        else
+            return 1;
+    }
+    return 0;
+}
+
+static int strip_eol(char *linebuf, int *plen, int flags)
+{
+    int len = *plen;
+    char *p, c;
+    int is_eol = 0;
+
+    for (p = linebuf + len - 1; len > 0; len--, p--) {
+        c = *p;
+        if (c == '\n') {
+            is_eol = 1;
+        } else if (is_eol && flags & SMIME_ASCIICRLF && c == 32) {
+            /* Strip trailing space on a line; 32 == ASCII for ' ' */
+            continue;
+        } else if (c != '\r') {
+            break;
+        }
+    }
+    *plen = len;
+    return is_eol;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn_moid.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn_moid.c
new file mode 100644
index 000000000..68a01f311
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn_moid.c
@@ -0,0 +1,100 @@
+/*
+ * Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/ctype.h"
+#include <openssl/crypto.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/x509.h>
+#include "internal/asn1_int.h"
+#include "internal/objects.h"
+
+/* Simple ASN1 OID module: add all objects in a given section */
+
+static int do_create(const char *value, const char *name);
+
+static int oid_module_init(CONF_IMODULE *md, const CONF *cnf)
+{
+    int i;
+    const char *oid_section;
+    STACK_OF(CONF_VALUE) *sktmp;
+    CONF_VALUE *oval;
+
+    oid_section = CONF_imodule_get_value(md);
+    if ((sktmp = NCONF_get_section(cnf, oid_section)) == NULL) {
+        ASN1err(ASN1_F_OID_MODULE_INIT, ASN1_R_ERROR_LOADING_SECTION);
+        return 0;
+    }
+    for (i = 0; i < sk_CONF_VALUE_num(sktmp); i++) {
+        oval = sk_CONF_VALUE_value(sktmp, i);
+        if (!do_create(oval->value, oval->name)) {
+            ASN1err(ASN1_F_OID_MODULE_INIT, ASN1_R_ADDING_OBJECT);
+            return 0;
+        }
+    }
+    return 1;
+}
+
+static void oid_module_finish(CONF_IMODULE *md)
+{
+}
+
+void ASN1_add_oid_module(void)
+{
+    CONF_module_add("oid_section", oid_module_init, oid_module_finish);
+}
+
+/*-
+ * Create an OID based on a name value pair. Accept two formats.
+ * shortname = 1.2.3.4
+ * shortname = some long name, 1.2.3.4
+ */
+
+static int do_create(const char *value, const char *name)
+{
+    int nid;
+    const char *ln, *ostr, *p;
+    char *lntmp = NULL;
+
+    p = strrchr(value, ',');
+    if (p == NULL) {
+        ln = name;
+        ostr = value;
+    } else {
+        ln = value;
+        ostr = p + 1;
+        if (*ostr == '\0')
+            return 0;
+        while (ossl_isspace(*ostr))
+            ostr++;
+        while (ossl_isspace(*ln))
+            ln++;
+        p--;
+        while (ossl_isspace(*p)) {
+            if (p == ln)
+                return 0;
+            p--;
+        }
+        p++;
+        if ((lntmp = OPENSSL_malloc((p - ln) + 1)) == NULL) {
+            ASN1err(ASN1_F_DO_CREATE, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        memcpy(lntmp, ln, p - ln);
+        lntmp[p - ln] = '\0';
+        ln = lntmp;
+    }
+
+    nid = OBJ_create(ostr, name, ln);
+
+    OPENSSL_free(lntmp);
+
+    return nid != NID_undef;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn_mstbl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn_mstbl.c
new file mode 100644
index 000000000..ddcbcd07f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn_mstbl.c
@@ -0,0 +1,113 @@
+/*
+ * Copyright 2012-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <openssl/crypto.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/x509v3.h>
+
+/* Multi string module: add table entries from a given section */
+
+static int do_tcreate(const char *value, const char *name);
+
+static int stbl_module_init(CONF_IMODULE *md, const CONF *cnf)
+{
+    int i;
+    const char *stbl_section;
+    STACK_OF(CONF_VALUE) *sktmp;
+    CONF_VALUE *mval;
+
+    stbl_section = CONF_imodule_get_value(md);
+    if ((sktmp = NCONF_get_section(cnf, stbl_section)) == NULL) {
+        ASN1err(ASN1_F_STBL_MODULE_INIT, ASN1_R_ERROR_LOADING_SECTION);
+        return 0;
+    }
+    for (i = 0; i < sk_CONF_VALUE_num(sktmp); i++) {
+        mval = sk_CONF_VALUE_value(sktmp, i);
+        if (!do_tcreate(mval->value, mval->name)) {
+            ASN1err(ASN1_F_STBL_MODULE_INIT, ASN1_R_INVALID_VALUE);
+            return 0;
+        }
+    }
+    return 1;
+}
+
+static void stbl_module_finish(CONF_IMODULE *md)
+{
+    ASN1_STRING_TABLE_cleanup();
+}
+
+void ASN1_add_stable_module(void)
+{
+    CONF_module_add("stbl_section", stbl_module_init, stbl_module_finish);
+}
+
+/*
+ * Create an table entry based on a name value pair. format is oid_name =
+ * n1:v1, n2:v2,... where name is "min", "max", "mask" or "flags".
+ */
+
+static int do_tcreate(const char *value, const char *name)
+{
+    char *eptr;
+    int nid, i, rv = 0;
+    long tbl_min = -1, tbl_max = -1;
+    unsigned long tbl_mask = 0, tbl_flags = 0;
+    STACK_OF(CONF_VALUE) *lst = NULL;
+    CONF_VALUE *cnf = NULL;
+    nid = OBJ_sn2nid(name);
+    if (nid == NID_undef)
+        nid = OBJ_ln2nid(name);
+    if (nid == NID_undef)
+        goto err;
+    lst = X509V3_parse_list(value);
+    if (!lst)
+        goto err;
+    for (i = 0; i < sk_CONF_VALUE_num(lst); i++) {
+        cnf = sk_CONF_VALUE_value(lst, i);
+        if (strcmp(cnf->name, "min") == 0) {
+            tbl_min = strtoul(cnf->value, &eptr, 0);
+            if (*eptr)
+                goto err;
+        } else if (strcmp(cnf->name, "max") == 0) {
+            tbl_max = strtoul(cnf->value, &eptr, 0);
+            if (*eptr)
+                goto err;
+        } else if (strcmp(cnf->name, "mask") == 0) {
+            if (!ASN1_str2mask(cnf->value, &tbl_mask) || !tbl_mask)
+                goto err;
+        } else if (strcmp(cnf->name, "flags") == 0) {
+            if (strcmp(cnf->value, "nomask") == 0)
+                tbl_flags = STABLE_NO_MASK;
+            else if (strcmp(cnf->value, "none") == 0)
+                tbl_flags = STABLE_FLAGS_CLEAR;
+            else
+                goto err;
+        } else
+            goto err;
+    }
+    rv = 1;
+ err:
+    if (rv == 0) {
+        ASN1err(ASN1_F_DO_TCREATE, ASN1_R_INVALID_STRING_TABLE_VALUE);
+        if (cnf)
+            ERR_add_error_data(4, "field=", cnf->name,
+                               ", value=", cnf->value);
+        else
+            ERR_add_error_data(4, "name=", name, ", value=", value);
+    } else {
+        rv = ASN1_STRING_TABLE_add(nid, tbl_min, tbl_max,
+                                   tbl_mask, tbl_flags);
+        if (!rv)
+            ASN1err(ASN1_F_DO_TCREATE, ERR_R_MALLOC_FAILURE);
+    }
+    sk_CONF_VALUE_pop_free(lst, X509V3_conf_free);
+    return rv;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn_pack.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn_pack.c
new file mode 100644
index 000000000..63bc30675
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/asn_pack.c
@@ -0,0 +1,62 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+
+/* ASN1 packing and unpacking functions */
+
+ASN1_STRING *ASN1_item_pack(void *obj, const ASN1_ITEM *it, ASN1_STRING **oct)
+{
+    ASN1_STRING *octmp;
+
+     if (oct == NULL || *oct == NULL) {
+        if ((octmp = ASN1_STRING_new()) == NULL) {
+            ASN1err(ASN1_F_ASN1_ITEM_PACK, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+    } else {
+        octmp = *oct;
+    }
+
+    OPENSSL_free(octmp->data);
+    octmp->data = NULL;
+
+    if ((octmp->length = ASN1_item_i2d(obj, &octmp->data, it)) == 0) {
+        ASN1err(ASN1_F_ASN1_ITEM_PACK, ASN1_R_ENCODE_ERROR);
+        goto err;
+    }
+    if (octmp->data == NULL) {
+        ASN1err(ASN1_F_ASN1_ITEM_PACK, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (oct != NULL && *oct == NULL)
+        *oct = octmp;
+
+    return octmp;
+ err:
+    if (oct == NULL || *oct == NULL)
+        ASN1_STRING_free(octmp);
+    return NULL;
+}
+
+/* Extract an ASN1 object from an ASN1_STRING */
+
+void *ASN1_item_unpack(const ASN1_STRING *oct, const ASN1_ITEM *it)
+{
+    const unsigned char *p;
+    void *ret;
+
+    p = oct->data;
+    if ((ret = ASN1_item_d2i(NULL, &p, oct->length, it)) == NULL)
+        ASN1err(ASN1_F_ASN1_ITEM_UNPACK, ASN1_R_DECODE_ERROR);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/bio_asn1.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/bio_asn1.c
new file mode 100644
index 000000000..86ee56632
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/bio_asn1.c
@@ -0,0 +1,444 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Experimental ASN1 BIO. When written through the data is converted to an
+ * ASN1 string type: default is OCTET STRING. Additional functions can be
+ * provided to add prefix and suffix data.
+ */
+
+#include <string.h>
+#include "internal/bio.h"
+#include <openssl/asn1.h>
+#include "internal/cryptlib.h"
+
+/* Must be large enough for biggest tag+length */
+#define DEFAULT_ASN1_BUF_SIZE 20
+
+typedef enum {
+    ASN1_STATE_START,
+    ASN1_STATE_PRE_COPY,
+    ASN1_STATE_HEADER,
+    ASN1_STATE_HEADER_COPY,
+    ASN1_STATE_DATA_COPY,
+    ASN1_STATE_POST_COPY,
+    ASN1_STATE_DONE
+} asn1_bio_state_t;
+
+typedef struct BIO_ASN1_EX_FUNCS_st {
+    asn1_ps_func *ex_func;
+    asn1_ps_func *ex_free_func;
+} BIO_ASN1_EX_FUNCS;
+
+typedef struct BIO_ASN1_BUF_CTX_t {
+    /* Internal state */
+    asn1_bio_state_t state;
+    /* Internal buffer */
+    unsigned char *buf;
+    /* Size of buffer */
+    int bufsize;
+    /* Current position in buffer */
+    int bufpos;
+    /* Current buffer length */
+    int buflen;
+    /* Amount of data to copy */
+    int copylen;
+    /* Class and tag to use */
+    int asn1_class, asn1_tag;
+    asn1_ps_func *prefix, *prefix_free, *suffix, *suffix_free;
+    /* Extra buffer for prefix and suffix data */
+    unsigned char *ex_buf;
+    int ex_len;
+    int ex_pos;
+    void *ex_arg;
+} BIO_ASN1_BUF_CTX;
+
+static int asn1_bio_write(BIO *h, const char *buf, int num);
+static int asn1_bio_read(BIO *h, char *buf, int size);
+static int asn1_bio_puts(BIO *h, const char *str);
+static int asn1_bio_gets(BIO *h, char *str, int size);
+static long asn1_bio_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int asn1_bio_new(BIO *h);
+static int asn1_bio_free(BIO *data);
+static long asn1_bio_callback_ctrl(BIO *h, int cmd, BIO_info_cb *fp);
+
+static int asn1_bio_init(BIO_ASN1_BUF_CTX *ctx, int size);
+static int asn1_bio_flush_ex(BIO *b, BIO_ASN1_BUF_CTX *ctx,
+                             asn1_ps_func *cleanup, asn1_bio_state_t next);
+static int asn1_bio_setup_ex(BIO *b, BIO_ASN1_BUF_CTX *ctx,
+                             asn1_ps_func *setup,
+                             asn1_bio_state_t ex_state,
+                             asn1_bio_state_t other_state);
+
+static const BIO_METHOD methods_asn1 = {
+    BIO_TYPE_ASN1,
+    "asn1",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    asn1_bio_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    asn1_bio_read,
+    asn1_bio_puts,
+    asn1_bio_gets,
+    asn1_bio_ctrl,
+    asn1_bio_new,
+    asn1_bio_free,
+    asn1_bio_callback_ctrl,
+};
+
+const BIO_METHOD *BIO_f_asn1(void)
+{
+    return &methods_asn1;
+}
+
+static int asn1_bio_new(BIO *b)
+{
+    BIO_ASN1_BUF_CTX *ctx = OPENSSL_zalloc(sizeof(*ctx));
+
+    if (ctx == NULL)
+        return 0;
+    if (!asn1_bio_init(ctx, DEFAULT_ASN1_BUF_SIZE)) {
+        OPENSSL_free(ctx);
+        return 0;
+    }
+    BIO_set_data(b, ctx);
+    BIO_set_init(b, 1);
+
+    return 1;
+}
+
+static int asn1_bio_init(BIO_ASN1_BUF_CTX *ctx, int size)
+{
+    if ((ctx->buf = OPENSSL_malloc(size)) == NULL) {
+        ASN1err(ASN1_F_ASN1_BIO_INIT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ctx->bufsize = size;
+    ctx->asn1_class = V_ASN1_UNIVERSAL;
+    ctx->asn1_tag = V_ASN1_OCTET_STRING;
+    ctx->state = ASN1_STATE_START;
+    return 1;
+}
+
+static int asn1_bio_free(BIO *b)
+{
+    BIO_ASN1_BUF_CTX *ctx;
+
+    if (b == NULL)
+        return 0;
+
+    ctx = BIO_get_data(b);
+    if (ctx == NULL)
+        return 0;
+
+    OPENSSL_free(ctx->buf);
+    OPENSSL_free(ctx);
+    BIO_set_data(b, NULL);
+    BIO_set_init(b, 0);
+
+    return 1;
+}
+
+static int asn1_bio_write(BIO *b, const char *in, int inl)
+{
+    BIO_ASN1_BUF_CTX *ctx;
+    int wrmax, wrlen, ret;
+    unsigned char *p;
+    BIO *next;
+
+    ctx = BIO_get_data(b);
+    next = BIO_next(b);
+    if (in == NULL || inl < 0 || ctx == NULL || next == NULL)
+        return 0;
+
+    wrlen = 0;
+    ret = -1;
+
+    for (;;) {
+        switch (ctx->state) {
+            /* Setup prefix data, call it */
+        case ASN1_STATE_START:
+            if (!asn1_bio_setup_ex(b, ctx, ctx->prefix,
+                                   ASN1_STATE_PRE_COPY, ASN1_STATE_HEADER))
+                return 0;
+            break;
+
+            /* Copy any pre data first */
+        case ASN1_STATE_PRE_COPY:
+
+            ret = asn1_bio_flush_ex(b, ctx, ctx->prefix_free,
+                                    ASN1_STATE_HEADER);
+
+            if (ret <= 0)
+                goto done;
+
+            break;
+
+        case ASN1_STATE_HEADER:
+            ctx->buflen = ASN1_object_size(0, inl, ctx->asn1_tag) - inl;
+            if (!ossl_assert(ctx->buflen <= ctx->bufsize))
+                return 0;
+            p = ctx->buf;
+            ASN1_put_object(&p, 0, inl, ctx->asn1_tag, ctx->asn1_class);
+            ctx->copylen = inl;
+            ctx->state = ASN1_STATE_HEADER_COPY;
+
+            break;
+
+        case ASN1_STATE_HEADER_COPY:
+            ret = BIO_write(next, ctx->buf + ctx->bufpos, ctx->buflen);
+            if (ret <= 0)
+                goto done;
+
+            ctx->buflen -= ret;
+            if (ctx->buflen)
+                ctx->bufpos += ret;
+            else {
+                ctx->bufpos = 0;
+                ctx->state = ASN1_STATE_DATA_COPY;
+            }
+
+            break;
+
+        case ASN1_STATE_DATA_COPY:
+
+            if (inl > ctx->copylen)
+                wrmax = ctx->copylen;
+            else
+                wrmax = inl;
+            ret = BIO_write(next, in, wrmax);
+            if (ret <= 0)
+                goto done;
+            wrlen += ret;
+            ctx->copylen -= ret;
+            in += ret;
+            inl -= ret;
+
+            if (ctx->copylen == 0)
+                ctx->state = ASN1_STATE_HEADER;
+
+            if (inl == 0)
+                goto done;
+
+            break;
+
+        case ASN1_STATE_POST_COPY:
+        case ASN1_STATE_DONE:
+            BIO_clear_retry_flags(b);
+            return 0;
+
+        }
+
+    }
+
+ done:
+    BIO_clear_retry_flags(b);
+    BIO_copy_next_retry(b);
+
+    return (wrlen > 0) ? wrlen : ret;
+
+}
+
+static int asn1_bio_flush_ex(BIO *b, BIO_ASN1_BUF_CTX *ctx,
+                             asn1_ps_func *cleanup, asn1_bio_state_t next)
+{
+    int ret;
+
+    if (ctx->ex_len <= 0)
+        return 1;
+    for (;;) {
+        ret = BIO_write(BIO_next(b), ctx->ex_buf + ctx->ex_pos, ctx->ex_len);
+        if (ret <= 0)
+            break;
+        ctx->ex_len -= ret;
+        if (ctx->ex_len > 0)
+            ctx->ex_pos += ret;
+        else {
+            if (cleanup)
+                cleanup(b, &ctx->ex_buf, &ctx->ex_len, &ctx->ex_arg);
+            ctx->state = next;
+            ctx->ex_pos = 0;
+            break;
+        }
+    }
+    return ret;
+}
+
+static int asn1_bio_setup_ex(BIO *b, BIO_ASN1_BUF_CTX *ctx,
+                             asn1_ps_func *setup,
+                             asn1_bio_state_t ex_state,
+                             asn1_bio_state_t other_state)
+{
+    if (setup && !setup(b, &ctx->ex_buf, &ctx->ex_len, &ctx->ex_arg)) {
+        BIO_clear_retry_flags(b);
+        return 0;
+    }
+    if (ctx->ex_len > 0)
+        ctx->state = ex_state;
+    else
+        ctx->state = other_state;
+    return 1;
+}
+
+static int asn1_bio_read(BIO *b, char *in, int inl)
+{
+    BIO *next = BIO_next(b);
+    if (next == NULL)
+        return 0;
+    return BIO_read(next, in, inl);
+}
+
+static int asn1_bio_puts(BIO *b, const char *str)
+{
+    return asn1_bio_write(b, str, strlen(str));
+}
+
+static int asn1_bio_gets(BIO *b, char *str, int size)
+{
+    BIO *next = BIO_next(b);
+    if (next == NULL)
+        return 0;
+    return BIO_gets(next, str, size);
+}
+
+static long asn1_bio_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
+{
+    BIO *next = BIO_next(b);
+    if (next == NULL)
+        return 0;
+    return BIO_callback_ctrl(next, cmd, fp);
+}
+
+static long asn1_bio_ctrl(BIO *b, int cmd, long arg1, void *arg2)
+{
+    BIO_ASN1_BUF_CTX *ctx;
+    BIO_ASN1_EX_FUNCS *ex_func;
+    long ret = 1;
+    BIO *next;
+
+    ctx = BIO_get_data(b);
+    if (ctx == NULL)
+        return 0;
+    next = BIO_next(b);
+    switch (cmd) {
+
+    case BIO_C_SET_PREFIX:
+        ex_func = arg2;
+        ctx->prefix = ex_func->ex_func;
+        ctx->prefix_free = ex_func->ex_free_func;
+        break;
+
+    case BIO_C_GET_PREFIX:
+        ex_func = arg2;
+        ex_func->ex_func = ctx->prefix;
+        ex_func->ex_free_func = ctx->prefix_free;
+        break;
+
+    case BIO_C_SET_SUFFIX:
+        ex_func = arg2;
+        ctx->suffix = ex_func->ex_func;
+        ctx->suffix_free = ex_func->ex_free_func;
+        break;
+
+    case BIO_C_GET_SUFFIX:
+        ex_func = arg2;
+        ex_func->ex_func = ctx->suffix;
+        ex_func->ex_free_func = ctx->suffix_free;
+        break;
+
+    case BIO_C_SET_EX_ARG:
+        ctx->ex_arg = arg2;
+        break;
+
+    case BIO_C_GET_EX_ARG:
+        *(void **)arg2 = ctx->ex_arg;
+        break;
+
+    case BIO_CTRL_FLUSH:
+        if (next == NULL)
+            return 0;
+
+        /* Call post function if possible */
+        if (ctx->state == ASN1_STATE_HEADER) {
+            if (!asn1_bio_setup_ex(b, ctx, ctx->suffix,
+                                   ASN1_STATE_POST_COPY, ASN1_STATE_DONE))
+                return 0;
+        }
+
+        if (ctx->state == ASN1_STATE_POST_COPY) {
+            ret = asn1_bio_flush_ex(b, ctx, ctx->suffix_free,
+                                    ASN1_STATE_DONE);
+            if (ret <= 0)
+                return ret;
+        }
+
+        if (ctx->state == ASN1_STATE_DONE)
+            return BIO_ctrl(next, cmd, arg1, arg2);
+        else {
+            BIO_clear_retry_flags(b);
+            return 0;
+        }
+
+    default:
+        if (next == NULL)
+            return 0;
+        return BIO_ctrl(next, cmd, arg1, arg2);
+
+    }
+
+    return ret;
+}
+
+static int asn1_bio_set_ex(BIO *b, int cmd,
+                           asn1_ps_func *ex_func, asn1_ps_func *ex_free_func)
+{
+    BIO_ASN1_EX_FUNCS extmp;
+    extmp.ex_func = ex_func;
+    extmp.ex_free_func = ex_free_func;
+    return BIO_ctrl(b, cmd, 0, &extmp);
+}
+
+static int asn1_bio_get_ex(BIO *b, int cmd,
+                           asn1_ps_func **ex_func,
+                           asn1_ps_func **ex_free_func)
+{
+    BIO_ASN1_EX_FUNCS extmp;
+    int ret;
+    ret = BIO_ctrl(b, cmd, 0, &extmp);
+    if (ret > 0) {
+        *ex_func = extmp.ex_func;
+        *ex_free_func = extmp.ex_free_func;
+    }
+    return ret;
+}
+
+int BIO_asn1_set_prefix(BIO *b, asn1_ps_func *prefix,
+                        asn1_ps_func *prefix_free)
+{
+    return asn1_bio_set_ex(b, BIO_C_SET_PREFIX, prefix, prefix_free);
+}
+
+int BIO_asn1_get_prefix(BIO *b, asn1_ps_func **pprefix,
+                        asn1_ps_func **pprefix_free)
+{
+    return asn1_bio_get_ex(b, BIO_C_GET_PREFIX, pprefix, pprefix_free);
+}
+
+int BIO_asn1_set_suffix(BIO *b, asn1_ps_func *suffix,
+                        asn1_ps_func *suffix_free)
+{
+    return asn1_bio_set_ex(b, BIO_C_SET_SUFFIX, suffix, suffix_free);
+}
+
+int BIO_asn1_get_suffix(BIO *b, asn1_ps_func **psuffix,
+                        asn1_ps_func **psuffix_free)
+{
+    return asn1_bio_get_ex(b, BIO_C_GET_SUFFIX, psuffix, psuffix_free);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/bio_ndef.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/bio_ndef.c
new file mode 100644
index 000000000..6222c9907
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/bio_ndef.c
@@ -0,0 +1,201 @@
+/*
+ * Copyright 2008-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/bio.h>
+#include <openssl/err.h>
+
+#include <stdio.h>
+
+/* Experimental NDEF ASN1 BIO support routines */
+
+/*
+ * The usage is quite simple, initialize an ASN1 structure, get a BIO from it
+ * then any data written through the BIO will end up translated to
+ * appropriate format on the fly. The data is streamed out and does *not*
+ * need to be all held in memory at once. When the BIO is flushed the output
+ * is finalized and any signatures etc written out. The BIO is a 'proper'
+ * BIO and can handle non blocking I/O correctly. The usage is simple. The
+ * implementation is *not*...
+ */
+
+/* BIO support data stored in the ASN1 BIO ex_arg */
+
+typedef struct ndef_aux_st {
+    /* ASN1 structure this BIO refers to */
+    ASN1_VALUE *val;
+    const ASN1_ITEM *it;
+    /* Top of the BIO chain */
+    BIO *ndef_bio;
+    /* Output BIO */
+    BIO *out;
+    /* Boundary where content is inserted */
+    unsigned char **boundary;
+    /* DER buffer start */
+    unsigned char *derbuf;
+} NDEF_SUPPORT;
+
+static int ndef_prefix(BIO *b, unsigned char **pbuf, int *plen, void *parg);
+static int ndef_prefix_free(BIO *b, unsigned char **pbuf, int *plen,
+                            void *parg);
+static int ndef_suffix(BIO *b, unsigned char **pbuf, int *plen, void *parg);
+static int ndef_suffix_free(BIO *b, unsigned char **pbuf, int *plen,
+                            void *parg);
+
+BIO *BIO_new_NDEF(BIO *out, ASN1_VALUE *val, const ASN1_ITEM *it)
+{
+    NDEF_SUPPORT *ndef_aux = NULL;
+    BIO *asn_bio = NULL;
+    const ASN1_AUX *aux = it->funcs;
+    ASN1_STREAM_ARG sarg;
+
+    if (!aux || !aux->asn1_cb) {
+        ASN1err(ASN1_F_BIO_NEW_NDEF, ASN1_R_STREAMING_NOT_SUPPORTED);
+        return NULL;
+    }
+    ndef_aux = OPENSSL_zalloc(sizeof(*ndef_aux));
+    asn_bio = BIO_new(BIO_f_asn1());
+    if (ndef_aux == NULL || asn_bio == NULL)
+        goto err;
+
+    /* ASN1 bio needs to be next to output BIO */
+    out = BIO_push(asn_bio, out);
+    if (out == NULL)
+        goto err;
+
+    BIO_asn1_set_prefix(asn_bio, ndef_prefix, ndef_prefix_free);
+    BIO_asn1_set_suffix(asn_bio, ndef_suffix, ndef_suffix_free);
+
+    /*
+     * Now let callback prepends any digest, cipher etc BIOs ASN1 structure
+     * needs.
+     */
+
+    sarg.out = out;
+    sarg.ndef_bio = NULL;
+    sarg.boundary = NULL;
+
+    if (aux->asn1_cb(ASN1_OP_STREAM_PRE, &val, it, &sarg) <= 0)
+        goto err;
+
+    ndef_aux->val = val;
+    ndef_aux->it = it;
+    ndef_aux->ndef_bio = sarg.ndef_bio;
+    ndef_aux->boundary = sarg.boundary;
+    ndef_aux->out = out;
+
+    BIO_ctrl(asn_bio, BIO_C_SET_EX_ARG, 0, ndef_aux);
+
+    return sarg.ndef_bio;
+
+ err:
+    BIO_free(asn_bio);
+    OPENSSL_free(ndef_aux);
+    return NULL;
+}
+
+static int ndef_prefix(BIO *b, unsigned char **pbuf, int *plen, void *parg)
+{
+    NDEF_SUPPORT *ndef_aux;
+    unsigned char *p;
+    int derlen;
+
+    if (!parg)
+        return 0;
+
+    ndef_aux = *(NDEF_SUPPORT **)parg;
+
+    derlen = ASN1_item_ndef_i2d(ndef_aux->val, NULL, ndef_aux->it);
+    if ((p = OPENSSL_malloc(derlen)) == NULL) {
+        ASN1err(ASN1_F_NDEF_PREFIX, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    ndef_aux->derbuf = p;
+    *pbuf = p;
+    derlen = ASN1_item_ndef_i2d(ndef_aux->val, &p, ndef_aux->it);
+
+    if (!*ndef_aux->boundary)
+        return 0;
+
+    *plen = *ndef_aux->boundary - *pbuf;
+
+    return 1;
+}
+
+static int ndef_prefix_free(BIO *b, unsigned char **pbuf, int *plen,
+                            void *parg)
+{
+    NDEF_SUPPORT *ndef_aux;
+
+    if (!parg)
+        return 0;
+
+    ndef_aux = *(NDEF_SUPPORT **)parg;
+
+    OPENSSL_free(ndef_aux->derbuf);
+
+    ndef_aux->derbuf = NULL;
+    *pbuf = NULL;
+    *plen = 0;
+    return 1;
+}
+
+static int ndef_suffix_free(BIO *b, unsigned char **pbuf, int *plen,
+                            void *parg)
+{
+    NDEF_SUPPORT **pndef_aux = (NDEF_SUPPORT **)parg;
+    if (!ndef_prefix_free(b, pbuf, plen, parg))
+        return 0;
+    OPENSSL_free(*pndef_aux);
+    *pndef_aux = NULL;
+    return 1;
+}
+
+static int ndef_suffix(BIO *b, unsigned char **pbuf, int *plen, void *parg)
+{
+    NDEF_SUPPORT *ndef_aux;
+    unsigned char *p;
+    int derlen;
+    const ASN1_AUX *aux;
+    ASN1_STREAM_ARG sarg;
+
+    if (!parg)
+        return 0;
+
+    ndef_aux = *(NDEF_SUPPORT **)parg;
+
+    aux = ndef_aux->it->funcs;
+
+    /* Finalize structures */
+    sarg.ndef_bio = ndef_aux->ndef_bio;
+    sarg.out = ndef_aux->out;
+    sarg.boundary = ndef_aux->boundary;
+    if (aux->asn1_cb(ASN1_OP_STREAM_POST,
+                     &ndef_aux->val, ndef_aux->it, &sarg) <= 0)
+        return 0;
+
+    derlen = ASN1_item_ndef_i2d(ndef_aux->val, NULL, ndef_aux->it);
+    if ((p = OPENSSL_malloc(derlen)) == NULL) {
+        ASN1err(ASN1_F_NDEF_SUFFIX, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    ndef_aux->derbuf = p;
+    *pbuf = p;
+    derlen = ASN1_item_ndef_i2d(ndef_aux->val, &p, ndef_aux->it);
+
+    if (!*ndef_aux->boundary)
+        return 0;
+    *pbuf = *ndef_aux->boundary;
+    *plen = derlen - (*ndef_aux->boundary - ndef_aux->derbuf);
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/build.info
new file mode 100644
index 000000000..d3e92c81a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/build.info
@@ -0,0 +1,16 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        a_object.c a_bitstr.c a_utctm.c a_gentm.c a_time.c a_int.c a_octet.c \
+        a_print.c a_type.c a_dup.c a_d2i_fp.c a_i2d_fp.c \
+        a_utf8.c a_sign.c a_digest.c a_verify.c a_mbstr.c a_strex.c \
+        x_algor.c x_val.c x_sig.c x_bignum.c \
+        x_long.c x_int64.c x_info.c x_spki.c nsseq.c \
+        d2i_pu.c d2i_pr.c i2d_pu.c i2d_pr.c\
+        t_pkey.c t_spki.c t_bitst.c \
+        tasn_new.c tasn_fre.c tasn_enc.c tasn_dec.c tasn_utl.c tasn_typ.c \
+        tasn_prn.c tasn_scn.c ameth_lib.c \
+        f_int.c f_string.c n_pkey.c \
+        x_pkey.c bio_asn1.c bio_ndef.c asn_mime.c \
+        asn1_gen.c asn1_par.c asn1_lib.c asn1_err.c a_strnid.c \
+        evp_asn1.c asn_pack.c p5_pbe.c p5_pbev2.c p5_scrypt.c p8_pkey.c \
+        asn_moid.c asn_mstbl.c asn1_item_list.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/charmap.h b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/charmap.h
new file mode 100644
index 000000000..f15d72d73
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/charmap.h
@@ -0,0 +1,34 @@
+/*
+ * WARNING: do not edit!
+ * Generated by crypto/asn1/charmap.pl
+ *
+ * Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#define CHARTYPE_HOST_ANY 4096
+#define CHARTYPE_HOST_DOT 8192
+#define CHARTYPE_HOST_HYPHEN 16384
+#define CHARTYPE_HOST_WILD 32768
+
+/*
+ * Mask of various character properties
+ */
+
+static const unsigned short char_type[] = {
+    1026,    2,    2,    2,    2,    2,    2,    2,    2,    2,    2,    2,
+       2,    2,    2,    2,    2,    2,    2,    2,    2,    2,    2,    2,
+       2,    2,    2,    2,    2,    2,    2,    2,  120,    0,    1,   40,
+       0,    0,    0,   16, 1040, 1040, 33792,   25,   25, 16400, 8208,   16,
+    4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112,   16,    9,
+       9,   16,    9,   16,    0, 4112, 4112, 4112, 4112, 4112, 4112, 4112,
+    4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112,
+    4112, 4112, 4112, 4112, 4112, 4112, 4112,    0, 1025,    0,    0,    0,
+       0, 4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112,
+    4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112, 4112,
+    4112, 4112, 4112,    0,    0,    0,    0,    2
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/charmap.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/charmap.pl
new file mode 100644
index 000000000..dadd8df77
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/charmap.pl
@@ -0,0 +1,119 @@
+#! /usr/bin/env perl
+# Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+
+my ($i, @arr);
+
+# Set up an array with the type of ASCII characters
+# Each set bit represents a character property.
+
+# RFC2253 character properties
+my $RFC2253_ESC = 1;	# Character escaped with \
+my $ESC_CTRL	= 2;	# Escaped control character
+# These are used with RFC1779 quoting using "
+my $NOESC_QUOTE	= 8;	# Not escaped if quoted
+my $PSTRING_CHAR = 0x10;	# Valid PrintableString character
+my $RFC2253_FIRST_ESC = 0x20; # Escaped with \ if first character
+my $RFC2253_LAST_ESC = 0x40;  # Escaped with \ if last character
+my $RFC2254_ESC = 0x400;	# Character escaped \XX
+my $HOST_ANY = 0x1000;      # Valid hostname character anywhere in label
+my $HOST_DOT = 0x2000;  # Dot: hostname label separator
+my $HOST_HYPHEN = 0x4000; # Hyphen: not valid at start or end.
+my $HOST_WILD = 0x8000; # Wildcard character
+
+for($i = 0; $i < 128; $i++) {
+	# Set the RFC2253 escape characters (control)
+	$arr[$i] = 0;
+	if(($i < 32) || ($i > 126)) {
+		$arr[$i] |= $ESC_CTRL;
+	}
+
+	# Some PrintableString characters
+	if(		   ( ( $i >= ord("a")) && ( $i <= ord("z")) )
+			|| (  ( $i >= ord("A")) && ( $i <= ord("Z")) )
+			|| (  ( $i >= ord("0")) && ( $i <= ord("9")) )  ) {
+		$arr[$i] |= $PSTRING_CHAR | $HOST_ANY;
+	}
+}
+
+# Now setup the rest
+
+# Remaining RFC2253 escaped characters
+
+$arr[ord(" ")] |= $NOESC_QUOTE | $RFC2253_FIRST_ESC | $RFC2253_LAST_ESC;
+$arr[ord("#")] |= $NOESC_QUOTE | $RFC2253_FIRST_ESC;
+
+$arr[ord(",")] |= $NOESC_QUOTE | $RFC2253_ESC;
+$arr[ord("+")] |= $NOESC_QUOTE | $RFC2253_ESC;
+$arr[ord("\"")] |= $RFC2253_ESC;
+$arr[ord("\\")] |= $RFC2253_ESC;
+$arr[ord("<")] |= $NOESC_QUOTE | $RFC2253_ESC;
+$arr[ord(">")] |= $NOESC_QUOTE | $RFC2253_ESC;
+$arr[ord(";")] |= $NOESC_QUOTE | $RFC2253_ESC;
+
+# Remaining RFC2254 characters
+
+$arr[0] |= $RFC2254_ESC;
+$arr[ord("(")] |= $RFC2254_ESC;
+$arr[ord(")")] |= $RFC2254_ESC;
+$arr[ord("*")] |= $RFC2254_ESC | $HOST_WILD;
+$arr[ord("\\")] |= $RFC2254_ESC;
+
+# Remaining PrintableString characters
+
+$arr[ord(" ")] |= $PSTRING_CHAR;
+$arr[ord("'")] |= $PSTRING_CHAR;
+$arr[ord("(")] |= $PSTRING_CHAR;
+$arr[ord(")")] |= $PSTRING_CHAR;
+$arr[ord("+")] |= $PSTRING_CHAR;
+$arr[ord(",")] |= $PSTRING_CHAR;
+$arr[ord("-")] |= $PSTRING_CHAR | $HOST_HYPHEN;
+$arr[ord(".")] |= $PSTRING_CHAR | $HOST_DOT;
+$arr[ord("/")] |= $PSTRING_CHAR;
+$arr[ord(":")] |= $PSTRING_CHAR;
+$arr[ord("=")] |= $PSTRING_CHAR;
+$arr[ord("?")] |= $PSTRING_CHAR;
+
+# Now generate the C code
+
+# Output year depends on the year of the script.
+my $YEAR = [localtime([stat($0)]->[9])]->[5] + 1900;
+print <<EOF;
+/*
+ * WARNING: do not edit!
+ * Generated by crypto/asn1/charmap.pl
+ *
+ * Copyright 2000-$YEAR The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#define CHARTYPE_HOST_ANY $HOST_ANY
+#define CHARTYPE_HOST_DOT $HOST_DOT
+#define CHARTYPE_HOST_HYPHEN $HOST_HYPHEN
+#define CHARTYPE_HOST_WILD $HOST_WILD
+
+/*
+ * Mask of various character properties
+ */
+
+static const unsigned short char_type[] = {
+EOF
+
+print "   ";
+for($i = 0; $i < 128; $i++) {
+	print("\n   ") if($i && (($i % 12) == 0));
+	printf(" %4d", $arr[$i]);
+	print(",") if ($i != 127);
+}
+print("\n};\n");
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/d2i_pr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/d2i_pr.c
new file mode 100644
index 000000000..aa0d6ad6a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/d2i_pr.c
@@ -0,0 +1,125 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/engine.h>
+#include <openssl/x509.h>
+#include <openssl/asn1.h>
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+
+EVP_PKEY *d2i_PrivateKey(int type, EVP_PKEY **a, const unsigned char **pp,
+                         long length)
+{
+    EVP_PKEY *ret;
+    const unsigned char *p = *pp;
+
+    if ((a == NULL) || (*a == NULL)) {
+        if ((ret = EVP_PKEY_new()) == NULL) {
+            ASN1err(ASN1_F_D2I_PRIVATEKEY, ERR_R_EVP_LIB);
+            return NULL;
+        }
+    } else {
+        ret = *a;
+#ifndef OPENSSL_NO_ENGINE
+        ENGINE_finish(ret->engine);
+        ret->engine = NULL;
+#endif
+    }
+
+    if (!EVP_PKEY_set_type(ret, type)) {
+        ASN1err(ASN1_F_D2I_PRIVATEKEY, ASN1_R_UNKNOWN_PUBLIC_KEY_TYPE);
+        goto err;
+    }
+
+    if (!ret->ameth->old_priv_decode ||
+        !ret->ameth->old_priv_decode(ret, &p, length)) {
+        if (ret->ameth->priv_decode) {
+            EVP_PKEY *tmp;
+            PKCS8_PRIV_KEY_INFO *p8 = NULL;
+            p8 = d2i_PKCS8_PRIV_KEY_INFO(NULL, &p, length);
+            if (!p8)
+                goto err;
+            tmp = EVP_PKCS82PKEY(p8);
+            PKCS8_PRIV_KEY_INFO_free(p8);
+            if (tmp == NULL)
+                goto err;
+            EVP_PKEY_free(ret);
+            ret = tmp;
+        } else {
+            ASN1err(ASN1_F_D2I_PRIVATEKEY, ERR_R_ASN1_LIB);
+            goto err;
+        }
+    }
+    *pp = p;
+    if (a != NULL)
+        (*a) = ret;
+    return ret;
+ err:
+    if (a == NULL || *a != ret)
+        EVP_PKEY_free(ret);
+    return NULL;
+}
+
+/*
+ * This works like d2i_PrivateKey() except it automatically works out the
+ * type
+ */
+
+EVP_PKEY *d2i_AutoPrivateKey(EVP_PKEY **a, const unsigned char **pp,
+                             long length)
+{
+    STACK_OF(ASN1_TYPE) *inkey;
+    const unsigned char *p;
+    int keytype;
+    p = *pp;
+    /*
+     * Dirty trick: read in the ASN1 data into a STACK_OF(ASN1_TYPE): by
+     * analyzing it we can determine the passed structure: this assumes the
+     * input is surrounded by an ASN1 SEQUENCE.
+     */
+    inkey = d2i_ASN1_SEQUENCE_ANY(NULL, &p, length);
+    p = *pp;
+    /*
+     * Since we only need to discern "traditional format" RSA and DSA keys we
+     * can just count the elements.
+     */
+    if (sk_ASN1_TYPE_num(inkey) == 6)
+        keytype = EVP_PKEY_DSA;
+    else if (sk_ASN1_TYPE_num(inkey) == 4)
+        keytype = EVP_PKEY_EC;
+    else if (sk_ASN1_TYPE_num(inkey) == 3) { /* This seems to be PKCS8, not
+                                              * traditional format */
+        PKCS8_PRIV_KEY_INFO *p8 = d2i_PKCS8_PRIV_KEY_INFO(NULL, &p, length);
+        EVP_PKEY *ret;
+
+        sk_ASN1_TYPE_pop_free(inkey, ASN1_TYPE_free);
+        if (!p8) {
+            ASN1err(ASN1_F_D2I_AUTOPRIVATEKEY,
+                    ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE);
+            return NULL;
+        }
+        ret = EVP_PKCS82PKEY(p8);
+        PKCS8_PRIV_KEY_INFO_free(p8);
+        if (ret == NULL)
+            return NULL;
+        *pp = p;
+        if (a) {
+            *a = ret;
+        }
+        return ret;
+    } else
+        keytype = EVP_PKEY_RSA;
+    sk_ASN1_TYPE_pop_free(inkey, ASN1_TYPE_free);
+    return d2i_PrivateKey(keytype, a, pp, length);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/d2i_pu.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/d2i_pu.c
new file mode 100644
index 000000000..7bc16c7bc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/d2i_pu.c
@@ -0,0 +1,77 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/asn1.h>
+#include <openssl/rsa.h>
+#include <openssl/dsa.h>
+#include <openssl/ec.h>
+
+#include "internal/evp_int.h"
+
+EVP_PKEY *d2i_PublicKey(int type, EVP_PKEY **a, const unsigned char **pp,
+                        long length)
+{
+    EVP_PKEY *ret;
+
+    if ((a == NULL) || (*a == NULL)) {
+        if ((ret = EVP_PKEY_new()) == NULL) {
+            ASN1err(ASN1_F_D2I_PUBLICKEY, ERR_R_EVP_LIB);
+            return NULL;
+        }
+    } else
+        ret = *a;
+
+    if (type != EVP_PKEY_id(ret) && !EVP_PKEY_set_type(ret, type)) {
+        ASN1err(ASN1_F_D2I_PUBLICKEY, ERR_R_EVP_LIB);
+        goto err;
+    }
+
+    switch (EVP_PKEY_id(ret)) {
+#ifndef OPENSSL_NO_RSA
+    case EVP_PKEY_RSA:
+        if ((ret->pkey.rsa = d2i_RSAPublicKey(NULL, pp, length)) == NULL) {
+            ASN1err(ASN1_F_D2I_PUBLICKEY, ERR_R_ASN1_LIB);
+            goto err;
+        }
+        break;
+#endif
+#ifndef OPENSSL_NO_DSA
+    case EVP_PKEY_DSA:
+        /* TMP UGLY CAST */
+        if (!d2i_DSAPublicKey(&ret->pkey.dsa, pp, length)) {
+            ASN1err(ASN1_F_D2I_PUBLICKEY, ERR_R_ASN1_LIB);
+            goto err;
+        }
+        break;
+#endif
+#ifndef OPENSSL_NO_EC
+    case EVP_PKEY_EC:
+        if (!o2i_ECPublicKey(&ret->pkey.ec, pp, length)) {
+            ASN1err(ASN1_F_D2I_PUBLICKEY, ERR_R_ASN1_LIB);
+            goto err;
+        }
+        break;
+#endif
+    default:
+        ASN1err(ASN1_F_D2I_PUBLICKEY, ASN1_R_UNKNOWN_PUBLIC_KEY_TYPE);
+        goto err;
+    }
+    if (a != NULL)
+        (*a) = ret;
+    return ret;
+ err:
+    if (a == NULL || *a != ret)
+        EVP_PKEY_free(ret);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/evp_asn1.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/evp_asn1.c
new file mode 100644
index 000000000..895085a52
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/evp_asn1.c
@@ -0,0 +1,115 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+
+int ASN1_TYPE_set_octetstring(ASN1_TYPE *a, unsigned char *data, int len)
+{
+    ASN1_STRING *os;
+
+    if ((os = ASN1_OCTET_STRING_new()) == NULL)
+        return 0;
+    if (!ASN1_OCTET_STRING_set(os, data, len)) {
+        ASN1_OCTET_STRING_free(os);
+        return 0;
+    }
+    ASN1_TYPE_set(a, V_ASN1_OCTET_STRING, os);
+    return 1;
+}
+
+/* int max_len:  for returned value    */
+int ASN1_TYPE_get_octetstring(const ASN1_TYPE *a, unsigned char *data, int max_len)
+{
+    int ret, num;
+    const unsigned char *p;
+
+    if ((a->type != V_ASN1_OCTET_STRING) || (a->value.octet_string == NULL)) {
+        ASN1err(ASN1_F_ASN1_TYPE_GET_OCTETSTRING, ASN1_R_DATA_IS_WRONG);
+        return -1;
+    }
+    p = ASN1_STRING_get0_data(a->value.octet_string);
+    ret = ASN1_STRING_length(a->value.octet_string);
+    if (ret < max_len)
+        num = ret;
+    else
+        num = max_len;
+    memcpy(data, p, num);
+    return ret;
+}
+
+typedef struct {
+    int32_t num;
+    ASN1_OCTET_STRING *oct;
+} asn1_int_oct;
+
+ASN1_SEQUENCE(asn1_int_oct) = {
+        ASN1_EMBED(asn1_int_oct, num, INT32),
+        ASN1_SIMPLE(asn1_int_oct, oct, ASN1_OCTET_STRING)
+} static_ASN1_SEQUENCE_END(asn1_int_oct)
+
+DECLARE_ASN1_ITEM(asn1_int_oct)
+
+int ASN1_TYPE_set_int_octetstring(ASN1_TYPE *a, long num, unsigned char *data,
+                                  int len)
+{
+    asn1_int_oct atmp;
+    ASN1_OCTET_STRING oct;
+
+    atmp.num = num;
+    atmp.oct = &oct;
+    oct.data = data;
+    oct.type = V_ASN1_OCTET_STRING;
+    oct.length = len;
+    oct.flags = 0;
+
+    if (ASN1_TYPE_pack_sequence(ASN1_ITEM_rptr(asn1_int_oct), &atmp, &a))
+        return 1;
+    return 0;
+}
+
+/*
+ * we return the actual length...
+ */
+/* int max_len:  for returned value    */
+int ASN1_TYPE_get_int_octetstring(const ASN1_TYPE *a, long *num,
+                                  unsigned char *data, int max_len)
+{
+    asn1_int_oct *atmp = NULL;
+    int ret = -1, n;
+
+    if ((a->type != V_ASN1_SEQUENCE) || (a->value.sequence == NULL)) {
+        goto err;
+    }
+
+    atmp = ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(asn1_int_oct), a);
+
+    if (atmp == NULL)
+        goto err;
+
+    if (num != NULL)
+        *num = atmp->num;
+
+    ret = ASN1_STRING_length(atmp->oct);
+    if (max_len > ret)
+        n = ret;
+    else
+        n = max_len;
+
+    if (data != NULL)
+        memcpy(data, ASN1_STRING_get0_data(atmp->oct), n);
+    if (ret == -1) {
+ err:
+        ASN1err(ASN1_F_ASN1_TYPE_GET_INT_OCTETSTRING, ASN1_R_DATA_IS_WRONG);
+    }
+    M_ASN1_free_of(atmp, asn1_int_oct);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/f_int.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/f_int.c
new file mode 100644
index 000000000..6d6bddc65
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/f_int.c
@@ -0,0 +1,156 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/ctype.h"
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/asn1.h>
+
+int i2a_ASN1_INTEGER(BIO *bp, const ASN1_INTEGER *a)
+{
+    int i, n = 0;
+    static const char *h = "0123456789ABCDEF";
+    char buf[2];
+
+    if (a == NULL)
+        return 0;
+
+    if (a->type & V_ASN1_NEG) {
+        if (BIO_write(bp, "-", 1) != 1)
+            goto err;
+        n = 1;
+    }
+
+    if (a->length == 0) {
+        if (BIO_write(bp, "00", 2) != 2)
+            goto err;
+        n += 2;
+    } else {
+        for (i = 0; i < a->length; i++) {
+            if ((i != 0) && (i % 35 == 0)) {
+                if (BIO_write(bp, "\\\n", 2) != 2)
+                    goto err;
+                n += 2;
+            }
+            buf[0] = h[((unsigned char)a->data[i] >> 4) & 0x0f];
+            buf[1] = h[((unsigned char)a->data[i]) & 0x0f];
+            if (BIO_write(bp, buf, 2) != 2)
+                goto err;
+            n += 2;
+        }
+    }
+    return n;
+ err:
+    return -1;
+}
+
+int a2i_ASN1_INTEGER(BIO *bp, ASN1_INTEGER *bs, char *buf, int size)
+{
+    int i, j, k, m, n, again, bufsize;
+    unsigned char *s = NULL, *sp;
+    unsigned char *bufp;
+    int num = 0, slen = 0, first = 1;
+
+    bs->type = V_ASN1_INTEGER;
+
+    bufsize = BIO_gets(bp, buf, size);
+    for (;;) {
+        if (bufsize < 1)
+            goto err;
+        i = bufsize;
+        if (buf[i - 1] == '\n')
+            buf[--i] = '\0';
+        if (i == 0)
+            goto err;
+        if (buf[i - 1] == '\r')
+            buf[--i] = '\0';
+        if (i == 0)
+            goto err;
+        again = (buf[i - 1] == '\\');
+
+        for (j = 0; j < i; j++) {
+            if (!ossl_isxdigit(buf[j]))
+            {
+                i = j;
+                break;
+            }
+        }
+        buf[i] = '\0';
+        /*
+         * We have now cleared all the crap off the end of the line
+         */
+        if (i < 2)
+            goto err;
+
+        bufp = (unsigned char *)buf;
+        if (first) {
+            first = 0;
+            if ((bufp[0] == '0') && (bufp[1] == '0')) {
+                bufp += 2;
+                i -= 2;
+            }
+        }
+        k = 0;
+        i -= again;
+        if (i % 2 != 0) {
+            ASN1err(ASN1_F_A2I_ASN1_INTEGER, ASN1_R_ODD_NUMBER_OF_CHARS);
+            OPENSSL_free(s);
+            return 0;
+        }
+        i /= 2;
+        if (num + i > slen) {
+            sp = OPENSSL_clear_realloc(s, slen, num + i * 2);
+            if (sp == NULL) {
+                ASN1err(ASN1_F_A2I_ASN1_INTEGER, ERR_R_MALLOC_FAILURE);
+                OPENSSL_free(s);
+                return 0;
+            }
+            s = sp;
+            slen = num + i * 2;
+        }
+        for (j = 0; j < i; j++, k += 2) {
+            for (n = 0; n < 2; n++) {
+                m = OPENSSL_hexchar2int(bufp[k + n]);
+                if (m < 0) {
+                    ASN1err(ASN1_F_A2I_ASN1_INTEGER,
+                            ASN1_R_NON_HEX_CHARACTERS);
+                    goto err;
+                }
+                s[num + j] <<= 4;
+                s[num + j] |= m;
+            }
+        }
+        num += i;
+        if (again)
+            bufsize = BIO_gets(bp, buf, size);
+        else
+            break;
+    }
+    bs->length = num;
+    bs->data = s;
+    return 1;
+ err:
+    ASN1err(ASN1_F_A2I_ASN1_INTEGER, ASN1_R_SHORT_LINE);
+    OPENSSL_free(s);
+    return 0;
+}
+
+int i2a_ASN1_ENUMERATED(BIO *bp, const ASN1_ENUMERATED *a)
+{
+    return i2a_ASN1_INTEGER(bp, a);
+}
+
+int a2i_ASN1_ENUMERATED(BIO *bp, ASN1_ENUMERATED *bs, char *buf, int size)
+{
+    int rv = a2i_ASN1_INTEGER(bp, bs, buf, size);
+    if (rv == 1)
+        bs->type = V_ASN1_INTEGER | (bs->type & V_ASN1_NEG);
+    return rv;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/f_string.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/f_string.c
new file mode 100644
index 000000000..f893489a6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/f_string.c
@@ -0,0 +1,136 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/ctype.h"
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/asn1.h>
+
+int i2a_ASN1_STRING(BIO *bp, const ASN1_STRING *a, int type)
+{
+    int i, n = 0;
+    static const char *h = "0123456789ABCDEF";
+    char buf[2];
+
+    if (a == NULL)
+        return 0;
+
+    if (a->length == 0) {
+        if (BIO_write(bp, "0", 1) != 1)
+            goto err;
+        n = 1;
+    } else {
+        for (i = 0; i < a->length; i++) {
+            if ((i != 0) && (i % 35 == 0)) {
+                if (BIO_write(bp, "\\\n", 2) != 2)
+                    goto err;
+                n += 2;
+            }
+            buf[0] = h[((unsigned char)a->data[i] >> 4) & 0x0f];
+            buf[1] = h[((unsigned char)a->data[i]) & 0x0f];
+            if (BIO_write(bp, buf, 2) != 2)
+                goto err;
+            n += 2;
+        }
+    }
+    return n;
+ err:
+    return -1;
+}
+
+int a2i_ASN1_STRING(BIO *bp, ASN1_STRING *bs, char *buf, int size)
+{
+    int i, j, k, m, n, again, bufsize;
+    unsigned char *s = NULL, *sp;
+    unsigned char *bufp;
+    int num = 0, slen = 0, first = 1;
+
+    bufsize = BIO_gets(bp, buf, size);
+    for (;;) {
+        if (bufsize < 1) {
+            if (first)
+                break;
+            else
+                goto err;
+        }
+        first = 0;
+
+        i = bufsize;
+        if (buf[i - 1] == '\n')
+            buf[--i] = '\0';
+        if (i == 0)
+            goto err;
+        if (buf[i - 1] == '\r')
+            buf[--i] = '\0';
+        if (i == 0)
+            goto err;
+        again = (buf[i - 1] == '\\');
+
+        for (j = i - 1; j > 0; j--) {
+            if (!ossl_isxdigit(buf[j])) {
+                i = j;
+                break;
+            }
+        }
+        buf[i] = '\0';
+        /*
+         * We have now cleared all the crap off the end of the line
+         */
+        if (i < 2)
+            goto err;
+
+        bufp = (unsigned char *)buf;
+
+        k = 0;
+        i -= again;
+        if (i % 2 != 0) {
+            ASN1err(ASN1_F_A2I_ASN1_STRING, ASN1_R_ODD_NUMBER_OF_CHARS);
+            OPENSSL_free(s);
+            return 0;
+        }
+        i /= 2;
+        if (num + i > slen) {
+            sp = OPENSSL_realloc(s, (unsigned int)num + i * 2);
+            if (sp == NULL) {
+                ASN1err(ASN1_F_A2I_ASN1_STRING, ERR_R_MALLOC_FAILURE);
+                OPENSSL_free(s);
+                return 0;
+            }
+            s = sp;
+            slen = num + i * 2;
+        }
+        for (j = 0; j < i; j++, k += 2) {
+            for (n = 0; n < 2; n++) {
+                m = OPENSSL_hexchar2int(bufp[k + n]);
+                if (m < 0) {
+                    ASN1err(ASN1_F_A2I_ASN1_STRING,
+                            ASN1_R_NON_HEX_CHARACTERS);
+                    OPENSSL_free(s);
+                    return 0;
+                }
+                s[num + j] <<= 4;
+                s[num + j] |= m;
+            }
+        }
+        num += i;
+        if (again)
+            bufsize = BIO_gets(bp, buf, size);
+        else
+            break;
+    }
+    bs->length = num;
+    bs->data = s;
+    return 1;
+
+ err:
+    ASN1err(ASN1_F_A2I_ASN1_STRING, ASN1_R_SHORT_LINE);
+    OPENSSL_free(s);
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/i2d_pr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/i2d_pr.c
new file mode 100644
index 000000000..445b0c842
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/i2d_pr.c
@@ -0,0 +1,33 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+
+int i2d_PrivateKey(EVP_PKEY *a, unsigned char **pp)
+{
+    if (a->ameth && a->ameth->old_priv_encode) {
+        return a->ameth->old_priv_encode(a, pp);
+    }
+    if (a->ameth && a->ameth->priv_encode) {
+        PKCS8_PRIV_KEY_INFO *p8 = EVP_PKEY2PKCS8(a);
+        int ret = 0;
+        if (p8 != NULL) {
+            ret = i2d_PKCS8_PRIV_KEY_INFO(p8, pp);
+            PKCS8_PRIV_KEY_INFO_free(p8);
+        }
+        return ret;
+    }
+    ASN1err(ASN1_F_I2D_PRIVATEKEY, ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE);
+    return -1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/i2d_pu.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/i2d_pu.c
new file mode 100644
index 000000000..8986c43cb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/i2d_pu.c
@@ -0,0 +1,38 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/rsa.h>
+#include <openssl/dsa.h>
+#include <openssl/ec.h>
+
+int i2d_PublicKey(EVP_PKEY *a, unsigned char **pp)
+{
+    switch (EVP_PKEY_id(a)) {
+#ifndef OPENSSL_NO_RSA
+    case EVP_PKEY_RSA:
+        return i2d_RSAPublicKey(EVP_PKEY_get0_RSA(a), pp);
+#endif
+#ifndef OPENSSL_NO_DSA
+    case EVP_PKEY_DSA:
+        return i2d_DSAPublicKey(EVP_PKEY_get0_DSA(a), pp);
+#endif
+#ifndef OPENSSL_NO_EC
+    case EVP_PKEY_EC:
+        return i2o_ECPublicKey(EVP_PKEY_get0_EC_KEY(a), pp);
+#endif
+    default:
+        ASN1err(ASN1_F_I2D_PUBLICKEY, ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE);
+        return -1;
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/n_pkey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/n_pkey.c
new file mode 100644
index 000000000..d1fb8a146
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/n_pkey.c
@@ -0,0 +1,62 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "openssl/opensslconf.h"
+#ifdef OPENSSL_NO_RSA
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include "internal/cryptlib.h"
+# include <stdio.h>
+# include <openssl/rsa.h>
+# include <openssl/objects.h>
+# include <openssl/asn1t.h>
+# include <openssl/evp.h>
+# include <openssl/x509.h>
+
+# ifndef OPENSSL_NO_RC4
+
+typedef struct netscape_pkey_st {
+    int32_t version;
+    X509_ALGOR *algor;
+    ASN1_OCTET_STRING *private_key;
+} NETSCAPE_PKEY;
+
+typedef struct netscape_encrypted_pkey_st {
+    ASN1_OCTET_STRING *os;
+    /*
+     * This is the same structure as DigestInfo so use it: although this
+     * isn't really anything to do with digests.
+     */
+    X509_SIG *enckey;
+} NETSCAPE_ENCRYPTED_PKEY;
+
+
+ASN1_BROKEN_SEQUENCE(NETSCAPE_ENCRYPTED_PKEY) = {
+        ASN1_SIMPLE(NETSCAPE_ENCRYPTED_PKEY, os, ASN1_OCTET_STRING),
+        ASN1_SIMPLE(NETSCAPE_ENCRYPTED_PKEY, enckey, X509_SIG)
+} static_ASN1_BROKEN_SEQUENCE_END(NETSCAPE_ENCRYPTED_PKEY)
+
+DECLARE_ASN1_FUNCTIONS_const(NETSCAPE_ENCRYPTED_PKEY)
+DECLARE_ASN1_ENCODE_FUNCTIONS_const(NETSCAPE_ENCRYPTED_PKEY,NETSCAPE_ENCRYPTED_PKEY)
+IMPLEMENT_ASN1_FUNCTIONS_const(NETSCAPE_ENCRYPTED_PKEY)
+
+ASN1_SEQUENCE(NETSCAPE_PKEY) = {
+        ASN1_EMBED(NETSCAPE_PKEY, version, INT32),
+        ASN1_SIMPLE(NETSCAPE_PKEY, algor, X509_ALGOR),
+        ASN1_SIMPLE(NETSCAPE_PKEY, private_key, ASN1_OCTET_STRING)
+} static_ASN1_SEQUENCE_END(NETSCAPE_PKEY)
+
+DECLARE_ASN1_FUNCTIONS_const(NETSCAPE_PKEY)
+DECLARE_ASN1_ENCODE_FUNCTIONS_const(NETSCAPE_PKEY,NETSCAPE_PKEY)
+IMPLEMENT_ASN1_FUNCTIONS_const(NETSCAPE_PKEY)
+
+# endif                         /* OPENSSL_NO_RC4 */
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/nsseq.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/nsseq.c
new file mode 100644
index 000000000..c7baf40d3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/nsseq.c
@@ -0,0 +1,34 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include <openssl/objects.h>
+
+static int nsseq_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                    void *exarg)
+{
+    if (operation == ASN1_OP_NEW_POST) {
+        NETSCAPE_CERT_SEQUENCE *nsseq;
+        nsseq = (NETSCAPE_CERT_SEQUENCE *)*pval;
+        nsseq->type = OBJ_nid2obj(NID_netscape_cert_sequence);
+    }
+    return 1;
+}
+
+/* Netscape certificate sequence structure */
+
+ASN1_SEQUENCE_cb(NETSCAPE_CERT_SEQUENCE, nsseq_cb) = {
+        ASN1_SIMPLE(NETSCAPE_CERT_SEQUENCE, type, ASN1_OBJECT),
+        ASN1_EXP_SEQUENCE_OF_OPT(NETSCAPE_CERT_SEQUENCE, certs, X509, 0)
+} ASN1_SEQUENCE_END_cb(NETSCAPE_CERT_SEQUENCE, NETSCAPE_CERT_SEQUENCE)
+
+IMPLEMENT_ASN1_FUNCTIONS(NETSCAPE_CERT_SEQUENCE)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/p5_pbe.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/p5_pbe.c
new file mode 100644
index 000000000..ab7e16898
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/p5_pbe.c
@@ -0,0 +1,96 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include <openssl/rand.h>
+
+/* PKCS#5 password based encryption structure */
+
+ASN1_SEQUENCE(PBEPARAM) = {
+        ASN1_SIMPLE(PBEPARAM, salt, ASN1_OCTET_STRING),
+        ASN1_SIMPLE(PBEPARAM, iter, ASN1_INTEGER)
+} ASN1_SEQUENCE_END(PBEPARAM)
+
+IMPLEMENT_ASN1_FUNCTIONS(PBEPARAM)
+
+/* Set an algorithm identifier for a PKCS#5 PBE algorithm */
+
+int PKCS5_pbe_set0_algor(X509_ALGOR *algor, int alg, int iter,
+                         const unsigned char *salt, int saltlen)
+{
+    PBEPARAM *pbe = NULL;
+    ASN1_STRING *pbe_str = NULL;
+    unsigned char *sstr = NULL;
+
+    pbe = PBEPARAM_new();
+    if (pbe == NULL) {
+        ASN1err(ASN1_F_PKCS5_PBE_SET0_ALGOR, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if (iter <= 0)
+        iter = PKCS5_DEFAULT_ITER;
+    if (!ASN1_INTEGER_set(pbe->iter, iter)) {
+        ASN1err(ASN1_F_PKCS5_PBE_SET0_ALGOR, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if (!saltlen)
+        saltlen = PKCS5_SALT_LEN;
+
+    sstr = OPENSSL_malloc(saltlen);
+    if (sstr == NULL) {
+        ASN1err(ASN1_F_PKCS5_PBE_SET0_ALGOR, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if (salt)
+        memcpy(sstr, salt, saltlen);
+    else if (RAND_bytes(sstr, saltlen) <= 0)
+        goto err;
+
+    ASN1_STRING_set0(pbe->salt, sstr, saltlen);
+    sstr = NULL;
+
+    if (!ASN1_item_pack(pbe, ASN1_ITEM_rptr(PBEPARAM), &pbe_str)) {
+        ASN1err(ASN1_F_PKCS5_PBE_SET0_ALGOR, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    PBEPARAM_free(pbe);
+    pbe = NULL;
+
+    if (X509_ALGOR_set0(algor, OBJ_nid2obj(alg), V_ASN1_SEQUENCE, pbe_str))
+        return 1;
+
+ err:
+    OPENSSL_free(sstr);
+    PBEPARAM_free(pbe);
+    ASN1_STRING_free(pbe_str);
+    return 0;
+}
+
+/* Return an algorithm identifier for a PKCS#5 PBE algorithm */
+
+X509_ALGOR *PKCS5_pbe_set(int alg, int iter,
+                          const unsigned char *salt, int saltlen)
+{
+    X509_ALGOR *ret;
+    ret = X509_ALGOR_new();
+    if (ret == NULL) {
+        ASN1err(ASN1_F_PKCS5_PBE_SET, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if (PKCS5_pbe_set0_algor(ret, alg, iter, salt, saltlen))
+        return ret;
+
+    X509_ALGOR_free(ret);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/p5_pbev2.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/p5_pbev2.c
new file mode 100644
index 000000000..f91ba08f1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/p5_pbev2.c
@@ -0,0 +1,221 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include <openssl/rand.h>
+
+/* PKCS#5 v2.0 password based encryption structures */
+
+ASN1_SEQUENCE(PBE2PARAM) = {
+        ASN1_SIMPLE(PBE2PARAM, keyfunc, X509_ALGOR),
+        ASN1_SIMPLE(PBE2PARAM, encryption, X509_ALGOR)
+} ASN1_SEQUENCE_END(PBE2PARAM)
+
+IMPLEMENT_ASN1_FUNCTIONS(PBE2PARAM)
+
+ASN1_SEQUENCE(PBKDF2PARAM) = {
+        ASN1_SIMPLE(PBKDF2PARAM, salt, ASN1_ANY),
+        ASN1_SIMPLE(PBKDF2PARAM, iter, ASN1_INTEGER),
+        ASN1_OPT(PBKDF2PARAM, keylength, ASN1_INTEGER),
+        ASN1_OPT(PBKDF2PARAM, prf, X509_ALGOR)
+} ASN1_SEQUENCE_END(PBKDF2PARAM)
+
+IMPLEMENT_ASN1_FUNCTIONS(PBKDF2PARAM)
+
+/*
+ * Return an algorithm identifier for a PKCS#5 v2.0 PBE algorithm: yes I know
+ * this is horrible! Extended version to allow application supplied PRF NID
+ * and IV.
+ */
+
+X509_ALGOR *PKCS5_pbe2_set_iv(const EVP_CIPHER *cipher, int iter,
+                              unsigned char *salt, int saltlen,
+                              unsigned char *aiv, int prf_nid)
+{
+    X509_ALGOR *scheme = NULL, *ret = NULL;
+    int alg_nid, keylen;
+    EVP_CIPHER_CTX *ctx = NULL;
+    unsigned char iv[EVP_MAX_IV_LENGTH];
+    PBE2PARAM *pbe2 = NULL;
+
+    alg_nid = EVP_CIPHER_type(cipher);
+    if (alg_nid == NID_undef) {
+        ASN1err(ASN1_F_PKCS5_PBE2_SET_IV,
+                ASN1_R_CIPHER_HAS_NO_OBJECT_IDENTIFIER);
+        goto err;
+    }
+
+    if ((pbe2 = PBE2PARAM_new()) == NULL)
+        goto merr;
+
+    /* Setup the AlgorithmIdentifier for the encryption scheme */
+    scheme = pbe2->encryption;
+    scheme->algorithm = OBJ_nid2obj(alg_nid);
+    if ((scheme->parameter = ASN1_TYPE_new()) == NULL)
+        goto merr;
+
+    /* Create random IV */
+    if (EVP_CIPHER_iv_length(cipher)) {
+        if (aiv)
+            memcpy(iv, aiv, EVP_CIPHER_iv_length(cipher));
+        else if (RAND_bytes(iv, EVP_CIPHER_iv_length(cipher)) <= 0)
+            goto err;
+    }
+
+    ctx = EVP_CIPHER_CTX_new();
+    if (ctx == NULL)
+        goto merr;
+
+    /* Dummy cipherinit to just setup the IV, and PRF */
+    if (!EVP_CipherInit_ex(ctx, cipher, NULL, NULL, iv, 0))
+        goto err;
+    if (EVP_CIPHER_param_to_asn1(ctx, scheme->parameter) <= 0) {
+        ASN1err(ASN1_F_PKCS5_PBE2_SET_IV, ASN1_R_ERROR_SETTING_CIPHER_PARAMS);
+        goto err;
+    }
+    /*
+     * If prf NID unspecified see if cipher has a preference. An error is OK
+     * here: just means use default PRF.
+     */
+    if ((prf_nid == -1) &&
+        EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_PBE_PRF_NID, 0, &prf_nid) <= 0) {
+        ERR_clear_error();
+        prf_nid = NID_hmacWithSHA256;
+    }
+    EVP_CIPHER_CTX_free(ctx);
+    ctx = NULL;
+
+    /* If its RC2 then we'd better setup the key length */
+
+    if (alg_nid == NID_rc2_cbc)
+        keylen = EVP_CIPHER_key_length(cipher);
+    else
+        keylen = -1;
+
+    /* Setup keyfunc */
+
+    X509_ALGOR_free(pbe2->keyfunc);
+
+    pbe2->keyfunc = PKCS5_pbkdf2_set(iter, salt, saltlen, prf_nid, keylen);
+
+    if (!pbe2->keyfunc)
+        goto merr;
+
+    /* Now set up top level AlgorithmIdentifier */
+
+    if ((ret = X509_ALGOR_new()) == NULL)
+        goto merr;
+
+    ret->algorithm = OBJ_nid2obj(NID_pbes2);
+
+    /* Encode PBE2PARAM into parameter */
+
+    if (!ASN1_TYPE_pack_sequence(ASN1_ITEM_rptr(PBE2PARAM), pbe2,
+                                 &ret->parameter))
+         goto merr;
+
+    PBE2PARAM_free(pbe2);
+    pbe2 = NULL;
+
+    return ret;
+
+ merr:
+    ASN1err(ASN1_F_PKCS5_PBE2_SET_IV, ERR_R_MALLOC_FAILURE);
+
+ err:
+    EVP_CIPHER_CTX_free(ctx);
+    PBE2PARAM_free(pbe2);
+    /* Note 'scheme' is freed as part of pbe2 */
+    X509_ALGOR_free(ret);
+
+    return NULL;
+}
+
+X509_ALGOR *PKCS5_pbe2_set(const EVP_CIPHER *cipher, int iter,
+                           unsigned char *salt, int saltlen)
+{
+    return PKCS5_pbe2_set_iv(cipher, iter, salt, saltlen, NULL, -1);
+}
+
+X509_ALGOR *PKCS5_pbkdf2_set(int iter, unsigned char *salt, int saltlen,
+                             int prf_nid, int keylen)
+{
+    X509_ALGOR *keyfunc = NULL;
+    PBKDF2PARAM *kdf = NULL;
+    ASN1_OCTET_STRING *osalt = NULL;
+
+    if ((kdf = PBKDF2PARAM_new()) == NULL)
+        goto merr;
+    if ((osalt = ASN1_OCTET_STRING_new()) == NULL)
+        goto merr;
+
+    kdf->salt->value.octet_string = osalt;
+    kdf->salt->type = V_ASN1_OCTET_STRING;
+
+    if (saltlen == 0)
+        saltlen = PKCS5_SALT_LEN;
+    if ((osalt->data = OPENSSL_malloc(saltlen)) == NULL)
+        goto merr;
+
+    osalt->length = saltlen;
+
+    if (salt)
+        memcpy(osalt->data, salt, saltlen);
+    else if (RAND_bytes(osalt->data, saltlen) <= 0)
+        goto merr;
+
+    if (iter <= 0)
+        iter = PKCS5_DEFAULT_ITER;
+
+    if (!ASN1_INTEGER_set(kdf->iter, iter))
+        goto merr;
+
+    /* If have a key len set it up */
+
+    if (keylen > 0) {
+        if ((kdf->keylength = ASN1_INTEGER_new()) == NULL)
+            goto merr;
+        if (!ASN1_INTEGER_set(kdf->keylength, keylen))
+            goto merr;
+    }
+
+    /* prf can stay NULL if we are using hmacWithSHA1 */
+    if (prf_nid > 0 && prf_nid != NID_hmacWithSHA1) {
+        kdf->prf = X509_ALGOR_new();
+        if (kdf->prf == NULL)
+            goto merr;
+        X509_ALGOR_set0(kdf->prf, OBJ_nid2obj(prf_nid), V_ASN1_NULL, NULL);
+    }
+
+    /* Finally setup the keyfunc structure */
+
+    keyfunc = X509_ALGOR_new();
+    if (keyfunc == NULL)
+        goto merr;
+
+    keyfunc->algorithm = OBJ_nid2obj(NID_id_pbkdf2);
+
+    /* Encode PBKDF2PARAM into parameter of pbe2 */
+
+    if (!ASN1_TYPE_pack_sequence(ASN1_ITEM_rptr(PBKDF2PARAM), kdf,
+                                 &keyfunc->parameter))
+         goto merr;
+
+    PBKDF2PARAM_free(kdf);
+    return keyfunc;
+
+ merr:
+    ASN1err(ASN1_F_PKCS5_PBKDF2_SET, ERR_R_MALLOC_FAILURE);
+    PBKDF2PARAM_free(kdf);
+    X509_ALGOR_free(keyfunc);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/p5_scrypt.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/p5_scrypt.c
new file mode 100644
index 000000000..1491d96ec
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/p5_scrypt.c
@@ -0,0 +1,274 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/rand.h>
+
+#ifndef OPENSSL_NO_SCRYPT
+/* PKCS#5 scrypt password based encryption structures */
+
+ASN1_SEQUENCE(SCRYPT_PARAMS) = {
+        ASN1_SIMPLE(SCRYPT_PARAMS, salt, ASN1_OCTET_STRING),
+        ASN1_SIMPLE(SCRYPT_PARAMS, costParameter, ASN1_INTEGER),
+        ASN1_SIMPLE(SCRYPT_PARAMS, blockSize, ASN1_INTEGER),
+        ASN1_SIMPLE(SCRYPT_PARAMS, parallelizationParameter, ASN1_INTEGER),
+        ASN1_OPT(SCRYPT_PARAMS, keyLength, ASN1_INTEGER),
+} ASN1_SEQUENCE_END(SCRYPT_PARAMS)
+
+IMPLEMENT_ASN1_FUNCTIONS(SCRYPT_PARAMS)
+
+static X509_ALGOR *pkcs5_scrypt_set(const unsigned char *salt, size_t saltlen,
+                                    size_t keylen, uint64_t N, uint64_t r,
+                                    uint64_t p);
+
+/*
+ * Return an algorithm identifier for a PKCS#5 v2.0 PBE algorithm using scrypt
+ */
+
+X509_ALGOR *PKCS5_pbe2_set_scrypt(const EVP_CIPHER *cipher,
+                                  const unsigned char *salt, int saltlen,
+                                  unsigned char *aiv, uint64_t N, uint64_t r,
+                                  uint64_t p)
+{
+    X509_ALGOR *scheme = NULL, *ret = NULL;
+    int alg_nid;
+    size_t keylen = 0;
+    EVP_CIPHER_CTX *ctx = NULL;
+    unsigned char iv[EVP_MAX_IV_LENGTH];
+    PBE2PARAM *pbe2 = NULL;
+
+    if (!cipher) {
+        ASN1err(ASN1_F_PKCS5_PBE2_SET_SCRYPT, ERR_R_PASSED_NULL_PARAMETER);
+        goto err;
+    }
+
+    if (EVP_PBE_scrypt(NULL, 0, NULL, 0, N, r, p, 0, NULL, 0) == 0) {
+        ASN1err(ASN1_F_PKCS5_PBE2_SET_SCRYPT,
+                ASN1_R_INVALID_SCRYPT_PARAMETERS);
+        goto err;
+    }
+
+    alg_nid = EVP_CIPHER_type(cipher);
+    if (alg_nid == NID_undef) {
+        ASN1err(ASN1_F_PKCS5_PBE2_SET_SCRYPT,
+                ASN1_R_CIPHER_HAS_NO_OBJECT_IDENTIFIER);
+        goto err;
+    }
+
+    pbe2 = PBE2PARAM_new();
+    if (pbe2 == NULL)
+        goto merr;
+
+    /* Setup the AlgorithmIdentifier for the encryption scheme */
+    scheme = pbe2->encryption;
+
+    scheme->algorithm = OBJ_nid2obj(alg_nid);
+    scheme->parameter = ASN1_TYPE_new();
+    if (scheme->parameter == NULL)
+        goto merr;
+
+    /* Create random IV */
+    if (EVP_CIPHER_iv_length(cipher)) {
+        if (aiv)
+            memcpy(iv, aiv, EVP_CIPHER_iv_length(cipher));
+        else if (RAND_bytes(iv, EVP_CIPHER_iv_length(cipher)) <= 0)
+            goto err;
+    }
+
+    ctx = EVP_CIPHER_CTX_new();
+    if (ctx == NULL)
+        goto merr;
+
+    /* Dummy cipherinit to just setup the IV */
+    if (EVP_CipherInit_ex(ctx, cipher, NULL, NULL, iv, 0) == 0)
+        goto err;
+    if (EVP_CIPHER_param_to_asn1(ctx, scheme->parameter) <= 0) {
+        ASN1err(ASN1_F_PKCS5_PBE2_SET_SCRYPT,
+                ASN1_R_ERROR_SETTING_CIPHER_PARAMS);
+        goto err;
+    }
+    EVP_CIPHER_CTX_free(ctx);
+    ctx = NULL;
+
+    /* If its RC2 then we'd better setup the key length */
+
+    if (alg_nid == NID_rc2_cbc)
+        keylen = EVP_CIPHER_key_length(cipher);
+
+    /* Setup keyfunc */
+
+    X509_ALGOR_free(pbe2->keyfunc);
+
+    pbe2->keyfunc = pkcs5_scrypt_set(salt, saltlen, keylen, N, r, p);
+
+    if (pbe2->keyfunc == NULL)
+        goto merr;
+
+    /* Now set up top level AlgorithmIdentifier */
+
+    ret = X509_ALGOR_new();
+    if (ret == NULL)
+        goto merr;
+
+    ret->algorithm = OBJ_nid2obj(NID_pbes2);
+
+    /* Encode PBE2PARAM into parameter */
+
+    if (ASN1_TYPE_pack_sequence(ASN1_ITEM_rptr(PBE2PARAM), pbe2,
+                                &ret->parameter) == NULL)
+        goto merr;
+
+    PBE2PARAM_free(pbe2);
+    pbe2 = NULL;
+
+    return ret;
+
+ merr:
+    ASN1err(ASN1_F_PKCS5_PBE2_SET_SCRYPT, ERR_R_MALLOC_FAILURE);
+
+ err:
+    PBE2PARAM_free(pbe2);
+    X509_ALGOR_free(ret);
+    EVP_CIPHER_CTX_free(ctx);
+
+    return NULL;
+}
+
+static X509_ALGOR *pkcs5_scrypt_set(const unsigned char *salt, size_t saltlen,
+                                    size_t keylen, uint64_t N, uint64_t r,
+                                    uint64_t p)
+{
+    X509_ALGOR *keyfunc = NULL;
+    SCRYPT_PARAMS *sparam = SCRYPT_PARAMS_new();
+
+    if (sparam == NULL)
+        goto merr;
+
+    if (!saltlen)
+        saltlen = PKCS5_SALT_LEN;
+
+    /* This will either copy salt or grow the buffer */
+    if (ASN1_STRING_set(sparam->salt, salt, saltlen) == 0)
+        goto merr;
+
+    if (salt == NULL && RAND_bytes(sparam->salt->data, saltlen) <= 0)
+        goto err;
+
+    if (ASN1_INTEGER_set_uint64(sparam->costParameter, N) == 0)
+        goto merr;
+
+    if (ASN1_INTEGER_set_uint64(sparam->blockSize, r) == 0)
+        goto merr;
+
+    if (ASN1_INTEGER_set_uint64(sparam->parallelizationParameter, p) == 0)
+        goto merr;
+
+    /* If have a key len set it up */
+
+    if (keylen > 0) {
+        sparam->keyLength = ASN1_INTEGER_new();
+        if (sparam->keyLength == NULL)
+            goto merr;
+        if (ASN1_INTEGER_set_int64(sparam->keyLength, keylen) == 0)
+            goto merr;
+    }
+
+    /* Finally setup the keyfunc structure */
+
+    keyfunc = X509_ALGOR_new();
+    if (keyfunc == NULL)
+        goto merr;
+
+    keyfunc->algorithm = OBJ_nid2obj(NID_id_scrypt);
+
+    /* Encode SCRYPT_PARAMS into parameter of pbe2 */
+
+    if (ASN1_TYPE_pack_sequence(ASN1_ITEM_rptr(SCRYPT_PARAMS), sparam,
+                                &keyfunc->parameter) == NULL)
+        goto merr;
+
+    SCRYPT_PARAMS_free(sparam);
+    return keyfunc;
+
+ merr:
+    ASN1err(ASN1_F_PKCS5_SCRYPT_SET, ERR_R_MALLOC_FAILURE);
+ err:
+    SCRYPT_PARAMS_free(sparam);
+    X509_ALGOR_free(keyfunc);
+    return NULL;
+}
+
+int PKCS5_v2_scrypt_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass,
+                             int passlen, ASN1_TYPE *param,
+                             const EVP_CIPHER *c, const EVP_MD *md, int en_de)
+{
+    unsigned char *salt, key[EVP_MAX_KEY_LENGTH];
+    uint64_t p, r, N;
+    size_t saltlen;
+    size_t keylen = 0;
+    int rv = 0;
+    SCRYPT_PARAMS *sparam = NULL;
+
+    if (EVP_CIPHER_CTX_cipher(ctx) == NULL) {
+        EVPerr(EVP_F_PKCS5_V2_SCRYPT_KEYIVGEN, EVP_R_NO_CIPHER_SET);
+        goto err;
+    }
+
+    /* Decode parameter */
+
+    sparam = ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(SCRYPT_PARAMS), param);
+
+    if (sparam == NULL) {
+        EVPerr(EVP_F_PKCS5_V2_SCRYPT_KEYIVGEN, EVP_R_DECODE_ERROR);
+        goto err;
+    }
+
+    keylen = EVP_CIPHER_CTX_key_length(ctx);
+
+    /* Now check the parameters of sparam */
+
+    if (sparam->keyLength) {
+        uint64_t spkeylen;
+        if ((ASN1_INTEGER_get_uint64(&spkeylen, sparam->keyLength) == 0)
+            || (spkeylen != keylen)) {
+            EVPerr(EVP_F_PKCS5_V2_SCRYPT_KEYIVGEN,
+                   EVP_R_UNSUPPORTED_KEYLENGTH);
+            goto err;
+        }
+    }
+    /* Check all parameters fit in uint64_t and are acceptable to scrypt */
+    if (ASN1_INTEGER_get_uint64(&N, sparam->costParameter) == 0
+        || ASN1_INTEGER_get_uint64(&r, sparam->blockSize) == 0
+        || ASN1_INTEGER_get_uint64(&p, sparam->parallelizationParameter) == 0
+        || EVP_PBE_scrypt(NULL, 0, NULL, 0, N, r, p, 0, NULL, 0) == 0) {
+        EVPerr(EVP_F_PKCS5_V2_SCRYPT_KEYIVGEN,
+               EVP_R_ILLEGAL_SCRYPT_PARAMETERS);
+        goto err;
+    }
+
+    /* it seems that its all OK */
+
+    salt = sparam->salt->data;
+    saltlen = sparam->salt->length;
+    if (EVP_PBE_scrypt(pass, passlen, salt, saltlen, N, r, p, 0, key, keylen)
+        == 0)
+        goto err;
+    rv = EVP_CipherInit_ex(ctx, NULL, NULL, key, NULL, en_de);
+ err:
+    if (keylen)
+        OPENSSL_cleanse(key, keylen);
+    SCRYPT_PARAMS_free(sparam);
+    return rv;
+}
+#endif /* OPENSSL_NO_SCRYPT */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/p8_pkey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/p8_pkey.c
new file mode 100644
index 000000000..dbee827e0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/p8_pkey.c
@@ -0,0 +1,80 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+
+/* Minor tweak to operation: zero private key data */
+static int pkey_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                   void *exarg)
+{
+    /* Since the structure must still be valid use ASN1_OP_FREE_PRE */
+    if (operation == ASN1_OP_FREE_PRE) {
+        PKCS8_PRIV_KEY_INFO *key = (PKCS8_PRIV_KEY_INFO *)*pval;
+        if (key->pkey)
+            OPENSSL_cleanse(key->pkey->data, key->pkey->length);
+    }
+    return 1;
+}
+
+ASN1_SEQUENCE_cb(PKCS8_PRIV_KEY_INFO, pkey_cb) = {
+        ASN1_SIMPLE(PKCS8_PRIV_KEY_INFO, version, ASN1_INTEGER),
+        ASN1_SIMPLE(PKCS8_PRIV_KEY_INFO, pkeyalg, X509_ALGOR),
+        ASN1_SIMPLE(PKCS8_PRIV_KEY_INFO, pkey, ASN1_OCTET_STRING),
+        ASN1_IMP_SET_OF_OPT(PKCS8_PRIV_KEY_INFO, attributes, X509_ATTRIBUTE, 0)
+} ASN1_SEQUENCE_END_cb(PKCS8_PRIV_KEY_INFO, PKCS8_PRIV_KEY_INFO)
+
+IMPLEMENT_ASN1_FUNCTIONS(PKCS8_PRIV_KEY_INFO)
+
+int PKCS8_pkey_set0(PKCS8_PRIV_KEY_INFO *priv, ASN1_OBJECT *aobj,
+                    int version,
+                    int ptype, void *pval, unsigned char *penc, int penclen)
+{
+    if (version >= 0) {
+        if (!ASN1_INTEGER_set(priv->version, version))
+            return 0;
+    }
+    if (!X509_ALGOR_set0(priv->pkeyalg, aobj, ptype, pval))
+        return 0;
+    if (penc)
+        ASN1_STRING_set0(priv->pkey, penc, penclen);
+    return 1;
+}
+
+int PKCS8_pkey_get0(const ASN1_OBJECT **ppkalg,
+                    const unsigned char **pk, int *ppklen,
+                    const X509_ALGOR **pa, const PKCS8_PRIV_KEY_INFO *p8)
+{
+    if (ppkalg)
+        *ppkalg = p8->pkeyalg->algorithm;
+    if (pk) {
+        *pk = ASN1_STRING_get0_data(p8->pkey);
+        *ppklen = ASN1_STRING_length(p8->pkey);
+    }
+    if (pa)
+        *pa = p8->pkeyalg;
+    return 1;
+}
+
+const STACK_OF(X509_ATTRIBUTE) *
+PKCS8_pkey_get0_attrs(const PKCS8_PRIV_KEY_INFO *p8)
+{
+    return p8->attributes;
+}
+
+int PKCS8_pkey_add1_attr_by_NID(PKCS8_PRIV_KEY_INFO *p8, int nid, int type,
+                                const unsigned char *bytes, int len)
+{
+    if (X509at_add1_attr_by_NID(&p8->attributes, nid, type, bytes, len) != NULL)
+        return 1;
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/standard_methods.h b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/standard_methods.h
new file mode 100644
index 000000000..e74de55ff
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/standard_methods.h
@@ -0,0 +1,61 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This table MUST be kept in ascending order of the NID each method
+ * represents (corresponding to the pkey_id field) as OBJ_bsearch
+ * is used to search it.
+ */
+static const EVP_PKEY_ASN1_METHOD *standard_methods[] = {
+#ifndef OPENSSL_NO_RSA
+    &rsa_asn1_meths[0],
+    &rsa_asn1_meths[1],
+#endif
+#ifndef OPENSSL_NO_DH
+    &dh_asn1_meth,
+#endif
+#ifndef OPENSSL_NO_DSA
+    &dsa_asn1_meths[0],
+    &dsa_asn1_meths[1],
+    &dsa_asn1_meths[2],
+    &dsa_asn1_meths[3],
+    &dsa_asn1_meths[4],
+#endif
+#ifndef OPENSSL_NO_EC
+    &eckey_asn1_meth,
+#endif
+    &hmac_asn1_meth,
+#ifndef OPENSSL_NO_CMAC
+    &cmac_asn1_meth,
+#endif
+#ifndef OPENSSL_NO_RSA
+    &rsa_pss_asn1_meth,
+#endif
+#ifndef OPENSSL_NO_DH
+    &dhx_asn1_meth,
+#endif
+#ifndef OPENSSL_NO_EC
+    &ecx25519_asn1_meth,
+    &ecx448_asn1_meth,
+#endif
+#ifndef OPENSSL_NO_POLY1305
+    &poly1305_asn1_meth,
+#endif
+#ifndef OPENSSL_NO_SIPHASH
+    &siphash_asn1_meth,
+#endif
+#ifndef OPENSSL_NO_EC
+    &ed25519_asn1_meth,
+    &ed448_asn1_meth,
+#endif
+#ifndef OPENSSL_NO_SM2
+    &sm2_asn1_meth,
+#endif
+};
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/t_bitst.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/t_bitst.c
new file mode 100644
index 000000000..c0aeca4c7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/t_bitst.c
@@ -0,0 +1,56 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/x509v3.h>
+
+int ASN1_BIT_STRING_name_print(BIO *out, ASN1_BIT_STRING *bs,
+                               BIT_STRING_BITNAME *tbl, int indent)
+{
+    BIT_STRING_BITNAME *bnam;
+    char first = 1;
+    BIO_printf(out, "%*s", indent, "");
+    for (bnam = tbl; bnam->lname; bnam++) {
+        if (ASN1_BIT_STRING_get_bit(bs, bnam->bitnum)) {
+            if (!first)
+                BIO_puts(out, ", ");
+            BIO_puts(out, bnam->lname);
+            first = 0;
+        }
+    }
+    BIO_puts(out, "\n");
+    return 1;
+}
+
+int ASN1_BIT_STRING_set_asc(ASN1_BIT_STRING *bs, const char *name, int value,
+                            BIT_STRING_BITNAME *tbl)
+{
+    int bitnum;
+    bitnum = ASN1_BIT_STRING_num_asc(name, tbl);
+    if (bitnum < 0)
+        return 0;
+    if (bs) {
+        if (!ASN1_BIT_STRING_set_bit(bs, bitnum, value))
+            return 0;
+    }
+    return 1;
+}
+
+int ASN1_BIT_STRING_num_asc(const char *name, BIT_STRING_BITNAME *tbl)
+{
+    BIT_STRING_BITNAME *bnam;
+    for (bnam = tbl; bnam->lname; bnam++) {
+        if ((strcmp(bnam->sname, name) == 0)
+            || (strcmp(bnam->lname, name) == 0))
+            return bnam->bitnum;
+    }
+    return -1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/t_pkey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/t_pkey.c
new file mode 100644
index 000000000..3b2c9df89
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/t_pkey.c
@@ -0,0 +1,93 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/buffer.h>
+#include "internal/bn_int.h"
+
+/* Number of octets per line */
+#define ASN1_BUF_PRINT_WIDTH    15
+/* Maximum indent */
+#define ASN1_PRINT_MAX_INDENT 128
+
+int ASN1_buf_print(BIO *bp, const unsigned char *buf, size_t buflen, int indent)
+{
+    size_t i;
+
+    for (i = 0; i < buflen; i++) {
+        if ((i % ASN1_BUF_PRINT_WIDTH) == 0) {
+            if (i > 0 && BIO_puts(bp, "\n") <= 0)
+                return 0;
+            if (!BIO_indent(bp, indent, ASN1_PRINT_MAX_INDENT))
+                return 0;
+        }
+        /*
+         * Use colon separators for each octet for compatibility as
+         * this function is used to print out key components.
+         */
+        if (BIO_printf(bp, "%02x%s", buf[i],
+                       (i == buflen - 1) ? "" : ":") <= 0)
+                return 0;
+    }
+    if (BIO_write(bp, "\n", 1) <= 0)
+        return 0;
+    return 1;
+}
+
+int ASN1_bn_print(BIO *bp, const char *number, const BIGNUM *num,
+                  unsigned char *ign, int indent)
+{
+    int n, rv = 0;
+    const char *neg;
+    unsigned char *buf = NULL, *tmp = NULL;
+    int buflen;
+
+    if (num == NULL)
+        return 1;
+    neg = BN_is_negative(num) ? "-" : "";
+    if (!BIO_indent(bp, indent, ASN1_PRINT_MAX_INDENT))
+        return 0;
+    if (BN_is_zero(num)) {
+        if (BIO_printf(bp, "%s 0\n", number) <= 0)
+            return 0;
+        return 1;
+    }
+
+    if (BN_num_bytes(num) <= BN_BYTES) {
+        if (BIO_printf(bp, "%s %s%lu (%s0x%lx)\n", number, neg,
+                       (unsigned long)bn_get_words(num)[0], neg,
+                       (unsigned long)bn_get_words(num)[0]) <= 0)
+            return 0;
+        return 1;
+    }
+
+    buflen = BN_num_bytes(num) + 1;
+    buf = tmp = OPENSSL_malloc(buflen);
+    if (buf == NULL)
+        goto err;
+    buf[0] = 0;
+    if (BIO_printf(bp, "%s%s\n", number,
+                   (neg[0] == '-') ? " (Negative)" : "") <= 0)
+        goto err;
+    n = BN_bn2bin(num, buf + 1);
+
+    if (buf[1] & 0x80)
+        n++;
+    else
+        tmp++;
+
+    if (ASN1_buf_print(bp, tmp, n, indent + 4) == 0)
+        goto err;
+    rv = 1;
+    err:
+    OPENSSL_clear_free(buf, buflen);
+    return rv;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/t_spki.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/t_spki.c
new file mode 100644
index 000000000..51b56d0aa
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/t_spki.c
@@ -0,0 +1,56 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/asn1.h>
+#include <openssl/rsa.h>
+#include <openssl/dsa.h>
+#include <openssl/bn.h>
+
+/* Print out an SPKI */
+
+int NETSCAPE_SPKI_print(BIO *out, NETSCAPE_SPKI *spki)
+{
+    EVP_PKEY *pkey;
+    ASN1_IA5STRING *chal;
+    ASN1_OBJECT *spkioid;
+    int i, n;
+    char *s;
+    BIO_printf(out, "Netscape SPKI:\n");
+    X509_PUBKEY_get0_param(&spkioid, NULL, NULL, NULL, spki->spkac->pubkey);
+    i = OBJ_obj2nid(spkioid);
+    BIO_printf(out, "  Public Key Algorithm: %s\n",
+               (i == NID_undef) ? "UNKNOWN" : OBJ_nid2ln(i));
+    pkey = X509_PUBKEY_get(spki->spkac->pubkey);
+    if (!pkey)
+        BIO_printf(out, "  Unable to load public key\n");
+    else {
+        EVP_PKEY_print_public(out, pkey, 4, NULL);
+        EVP_PKEY_free(pkey);
+    }
+    chal = spki->spkac->challenge;
+    if (chal->length)
+        BIO_printf(out, "  Challenge String: %s\n", chal->data);
+    i = OBJ_obj2nid(spki->sig_algor.algorithm);
+    BIO_printf(out, "  Signature Algorithm: %s",
+               (i == NID_undef) ? "UNKNOWN" : OBJ_nid2ln(i));
+
+    n = spki->signature->length;
+    s = (char *)spki->signature->data;
+    for (i = 0; i < n; i++) {
+        if ((i % 18) == 0)
+            BIO_write(out, "\n      ", 7);
+        BIO_printf(out, "%02x%s", (unsigned char)s[i],
+                   ((i + 1) == n) ? "" : ":");
+    }
+    BIO_write(out, "\n", 1);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_dec.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_dec.c
new file mode 100644
index 000000000..c2a521ed5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_dec.c
@@ -0,0 +1,1160 @@
+/*
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stddef.h>
+#include <string.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/objects.h>
+#include <openssl/buffer.h>
+#include <openssl/err.h>
+#include "internal/numbers.h"
+#include "asn1_locl.h"
+
+
+/*
+ * Constructed types with a recursive definition (such as can be found in PKCS7)
+ * could eventually exceed the stack given malicious input with excessive
+ * recursion. Therefore we limit the stack depth. This is the maximum number of
+ * recursive invocations of asn1_item_embed_d2i().
+ */
+#define ASN1_MAX_CONSTRUCTED_NEST 30
+
+static int asn1_item_embed_d2i(ASN1_VALUE **pval, const unsigned char **in,
+                               long len, const ASN1_ITEM *it,
+                               int tag, int aclass, char opt, ASN1_TLC *ctx,
+                               int depth);
+
+static int asn1_check_eoc(const unsigned char **in, long len);
+static int asn1_find_end(const unsigned char **in, long len, char inf);
+
+static int asn1_collect(BUF_MEM *buf, const unsigned char **in, long len,
+                        char inf, int tag, int aclass, int depth);
+
+static int collect_data(BUF_MEM *buf, const unsigned char **p, long plen);
+
+static int asn1_check_tlen(long *olen, int *otag, unsigned char *oclass,
+                           char *inf, char *cst,
+                           const unsigned char **in, long len,
+                           int exptag, int expclass, char opt, ASN1_TLC *ctx);
+
+static int asn1_template_ex_d2i(ASN1_VALUE **pval,
+                                const unsigned char **in, long len,
+                                const ASN1_TEMPLATE *tt, char opt,
+                                ASN1_TLC *ctx, int depth);
+static int asn1_template_noexp_d2i(ASN1_VALUE **val,
+                                   const unsigned char **in, long len,
+                                   const ASN1_TEMPLATE *tt, char opt,
+                                   ASN1_TLC *ctx, int depth);
+static int asn1_d2i_ex_primitive(ASN1_VALUE **pval,
+                                 const unsigned char **in, long len,
+                                 const ASN1_ITEM *it,
+                                 int tag, int aclass, char opt,
+                                 ASN1_TLC *ctx);
+static int asn1_ex_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len,
+                       int utype, char *free_cont, const ASN1_ITEM *it);
+
+/* Table to convert tags to bit values, used for MSTRING type */
+static const unsigned long tag2bit[32] = {
+    /* tags  0 -  3 */
+    0, 0, 0, B_ASN1_BIT_STRING,
+    /* tags  4- 7 */
+    B_ASN1_OCTET_STRING, 0, 0, B_ASN1_UNKNOWN,
+    /* tags  8-11 */
+    B_ASN1_UNKNOWN, B_ASN1_UNKNOWN, B_ASN1_UNKNOWN, B_ASN1_UNKNOWN,
+    /* tags 12-15 */
+    B_ASN1_UTF8STRING, B_ASN1_UNKNOWN, B_ASN1_UNKNOWN, B_ASN1_UNKNOWN,
+    /* tags 16-19 */
+    B_ASN1_SEQUENCE, 0, B_ASN1_NUMERICSTRING, B_ASN1_PRINTABLESTRING,
+    /* tags 20-22 */
+    B_ASN1_T61STRING, B_ASN1_VIDEOTEXSTRING, B_ASN1_IA5STRING,
+    /* tags 23-24 */
+    B_ASN1_UTCTIME, B_ASN1_GENERALIZEDTIME,
+    /* tags 25-27 */
+    B_ASN1_GRAPHICSTRING, B_ASN1_ISO64STRING, B_ASN1_GENERALSTRING,
+    /* tags 28-31 */
+    B_ASN1_UNIVERSALSTRING, B_ASN1_UNKNOWN, B_ASN1_BMPSTRING, B_ASN1_UNKNOWN,
+};
+
+unsigned long ASN1_tag2bit(int tag)
+{
+    if ((tag < 0) || (tag > 30))
+        return 0;
+    return tag2bit[tag];
+}
+
+/* Macro to initialize and invalidate the cache */
+
+#define asn1_tlc_clear(c)       if (c) (c)->valid = 0
+/* Version to avoid compiler warning about 'c' always non-NULL */
+#define asn1_tlc_clear_nc(c)    (c)->valid = 0
+
+/*
+ * Decode an ASN1 item, this currently behaves just like a standard 'd2i'
+ * function. 'in' points to a buffer to read the data from, in future we
+ * will have more advanced versions that can input data a piece at a time and
+ * this will simply be a special case.
+ */
+
+ASN1_VALUE *ASN1_item_d2i(ASN1_VALUE **pval,
+                          const unsigned char **in, long len,
+                          const ASN1_ITEM *it)
+{
+    ASN1_TLC c;
+    ASN1_VALUE *ptmpval = NULL;
+    if (!pval)
+        pval = &ptmpval;
+    asn1_tlc_clear_nc(&c);
+    if (ASN1_item_ex_d2i(pval, in, len, it, -1, 0, 0, &c) > 0)
+        return *pval;
+    return NULL;
+}
+
+int ASN1_item_ex_d2i(ASN1_VALUE **pval, const unsigned char **in, long len,
+                     const ASN1_ITEM *it,
+                     int tag, int aclass, char opt, ASN1_TLC *ctx)
+{
+    int rv;
+    rv = asn1_item_embed_d2i(pval, in, len, it, tag, aclass, opt, ctx, 0);
+    if (rv <= 0)
+        ASN1_item_ex_free(pval, it);
+    return rv;
+}
+
+/*
+ * Decode an item, taking care of IMPLICIT tagging, if any. If 'opt' set and
+ * tag mismatch return -1 to handle OPTIONAL
+ */
+
+static int asn1_item_embed_d2i(ASN1_VALUE **pval, const unsigned char **in,
+                               long len, const ASN1_ITEM *it,
+                               int tag, int aclass, char opt, ASN1_TLC *ctx,
+                               int depth)
+{
+    const ASN1_TEMPLATE *tt, *errtt = NULL;
+    const ASN1_EXTERN_FUNCS *ef;
+    const ASN1_AUX *aux = it->funcs;
+    ASN1_aux_cb *asn1_cb;
+    const unsigned char *p = NULL, *q;
+    unsigned char oclass;
+    char seq_eoc, seq_nolen, cst, isopt;
+    long tmplen;
+    int i;
+    int otag;
+    int ret = 0;
+    ASN1_VALUE **pchptr;
+    if (!pval)
+        return 0;
+    if (aux && aux->asn1_cb)
+        asn1_cb = aux->asn1_cb;
+    else
+        asn1_cb = 0;
+
+    if (++depth > ASN1_MAX_CONSTRUCTED_NEST) {
+        ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ASN1_R_NESTED_TOO_DEEP);
+        goto err;
+    }
+
+    switch (it->itype) {
+    case ASN1_ITYPE_PRIMITIVE:
+        if (it->templates) {
+            /*
+             * tagging or OPTIONAL is currently illegal on an item template
+             * because the flags can't get passed down. In practice this
+             * isn't a problem: we include the relevant flags from the item
+             * template in the template itself.
+             */
+            if ((tag != -1) || opt) {
+                ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I,
+                        ASN1_R_ILLEGAL_OPTIONS_ON_ITEM_TEMPLATE);
+                goto err;
+            }
+            return asn1_template_ex_d2i(pval, in, len,
+                                        it->templates, opt, ctx, depth);
+        }
+        return asn1_d2i_ex_primitive(pval, in, len, it,
+                                     tag, aclass, opt, ctx);
+
+    case ASN1_ITYPE_MSTRING:
+        p = *in;
+        /* Just read in tag and class */
+        ret = asn1_check_tlen(NULL, &otag, &oclass, NULL, NULL,
+                              &p, len, -1, 0, 1, ctx);
+        if (!ret) {
+            ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ERR_R_NESTED_ASN1_ERROR);
+            goto err;
+        }
+
+        /* Must be UNIVERSAL class */
+        if (oclass != V_ASN1_UNIVERSAL) {
+            /* If OPTIONAL, assume this is OK */
+            if (opt)
+                return -1;
+            ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ASN1_R_MSTRING_NOT_UNIVERSAL);
+            goto err;
+        }
+        /* Check tag matches bit map */
+        if (!(ASN1_tag2bit(otag) & it->utype)) {
+            /* If OPTIONAL, assume this is OK */
+            if (opt)
+                return -1;
+            ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ASN1_R_MSTRING_WRONG_TAG);
+            goto err;
+        }
+        return asn1_d2i_ex_primitive(pval, in, len, it, otag, 0, 0, ctx);
+
+    case ASN1_ITYPE_EXTERN:
+        /* Use new style d2i */
+        ef = it->funcs;
+        return ef->asn1_ex_d2i(pval, in, len, it, tag, aclass, opt, ctx);
+
+    case ASN1_ITYPE_CHOICE:
+        if (asn1_cb && !asn1_cb(ASN1_OP_D2I_PRE, pval, it, NULL))
+            goto auxerr;
+        if (*pval) {
+            /* Free up and zero CHOICE value if initialised */
+            i = asn1_get_choice_selector(pval, it);
+            if ((i >= 0) && (i < it->tcount)) {
+                tt = it->templates + i;
+                pchptr = asn1_get_field_ptr(pval, tt);
+                asn1_template_free(pchptr, tt);
+                asn1_set_choice_selector(pval, -1, it);
+            }
+        } else if (!ASN1_item_ex_new(pval, it)) {
+            ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ERR_R_NESTED_ASN1_ERROR);
+            goto err;
+        }
+        /* CHOICE type, try each possibility in turn */
+        p = *in;
+        for (i = 0, tt = it->templates; i < it->tcount; i++, tt++) {
+            pchptr = asn1_get_field_ptr(pval, tt);
+            /*
+             * We mark field as OPTIONAL so its absence can be recognised.
+             */
+            ret = asn1_template_ex_d2i(pchptr, &p, len, tt, 1, ctx, depth);
+            /* If field not present, try the next one */
+            if (ret == -1)
+                continue;
+            /* If positive return, read OK, break loop */
+            if (ret > 0)
+                break;
+            /*
+             * Must be an ASN1 parsing error.
+             * Free up any partial choice value
+             */
+            asn1_template_free(pchptr, tt);
+            errtt = tt;
+            ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ERR_R_NESTED_ASN1_ERROR);
+            goto err;
+        }
+
+        /* Did we fall off the end without reading anything? */
+        if (i == it->tcount) {
+            /* If OPTIONAL, this is OK */
+            if (opt) {
+                /* Free and zero it */
+                ASN1_item_ex_free(pval, it);
+                return -1;
+            }
+            ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ASN1_R_NO_MATCHING_CHOICE_TYPE);
+            goto err;
+        }
+
+        asn1_set_choice_selector(pval, i, it);
+
+        if (asn1_cb && !asn1_cb(ASN1_OP_D2I_POST, pval, it, NULL))
+            goto auxerr;
+        *in = p;
+        return 1;
+
+    case ASN1_ITYPE_NDEF_SEQUENCE:
+    case ASN1_ITYPE_SEQUENCE:
+        p = *in;
+        tmplen = len;
+
+        /* If no IMPLICIT tagging set to SEQUENCE, UNIVERSAL */
+        if (tag == -1) {
+            tag = V_ASN1_SEQUENCE;
+            aclass = V_ASN1_UNIVERSAL;
+        }
+        /* Get SEQUENCE length and update len, p */
+        ret = asn1_check_tlen(&len, NULL, NULL, &seq_eoc, &cst,
+                              &p, len, tag, aclass, opt, ctx);
+        if (!ret) {
+            ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ERR_R_NESTED_ASN1_ERROR);
+            goto err;
+        } else if (ret == -1)
+            return -1;
+        if (aux && (aux->flags & ASN1_AFLG_BROKEN)) {
+            len = tmplen - (p - *in);
+            seq_nolen = 1;
+        }
+        /* If indefinite we don't do a length check */
+        else
+            seq_nolen = seq_eoc;
+        if (!cst) {
+            ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ASN1_R_SEQUENCE_NOT_CONSTRUCTED);
+            goto err;
+        }
+
+        if (!*pval && !ASN1_item_ex_new(pval, it)) {
+            ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ERR_R_NESTED_ASN1_ERROR);
+            goto err;
+        }
+
+        if (asn1_cb && !asn1_cb(ASN1_OP_D2I_PRE, pval, it, NULL))
+            goto auxerr;
+
+        /* Free up and zero any ADB found */
+        for (i = 0, tt = it->templates; i < it->tcount; i++, tt++) {
+            if (tt->flags & ASN1_TFLG_ADB_MASK) {
+                const ASN1_TEMPLATE *seqtt;
+                ASN1_VALUE **pseqval;
+                seqtt = asn1_do_adb(pval, tt, 0);
+                if (seqtt == NULL)
+                    continue;
+                pseqval = asn1_get_field_ptr(pval, seqtt);
+                asn1_template_free(pseqval, seqtt);
+            }
+        }
+
+        /* Get each field entry */
+        for (i = 0, tt = it->templates; i < it->tcount; i++, tt++) {
+            const ASN1_TEMPLATE *seqtt;
+            ASN1_VALUE **pseqval;
+            seqtt = asn1_do_adb(pval, tt, 1);
+            if (seqtt == NULL)
+                goto err;
+            pseqval = asn1_get_field_ptr(pval, seqtt);
+            /* Have we ran out of data? */
+            if (!len)
+                break;
+            q = p;
+            if (asn1_check_eoc(&p, len)) {
+                if (!seq_eoc) {
+                    ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ASN1_R_UNEXPECTED_EOC);
+                    goto err;
+                }
+                len -= p - q;
+                seq_eoc = 0;
+                q = p;
+                break;
+            }
+            /*
+             * This determines the OPTIONAL flag value. The field cannot be
+             * omitted if it is the last of a SEQUENCE and there is still
+             * data to be read. This isn't strictly necessary but it
+             * increases efficiency in some cases.
+             */
+            if (i == (it->tcount - 1))
+                isopt = 0;
+            else
+                isopt = (char)(seqtt->flags & ASN1_TFLG_OPTIONAL);
+            /*
+             * attempt to read in field, allowing each to be OPTIONAL
+             */
+
+            ret = asn1_template_ex_d2i(pseqval, &p, len, seqtt, isopt, ctx,
+                                       depth);
+            if (!ret) {
+                errtt = seqtt;
+                goto err;
+            } else if (ret == -1) {
+                /*
+                 * OPTIONAL component absent. Free and zero the field.
+                 */
+                asn1_template_free(pseqval, seqtt);
+                continue;
+            }
+            /* Update length */
+            len -= p - q;
+        }
+
+        /* Check for EOC if expecting one */
+        if (seq_eoc && !asn1_check_eoc(&p, len)) {
+            ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ASN1_R_MISSING_EOC);
+            goto err;
+        }
+        /* Check all data read */
+        if (!seq_nolen && len) {
+            ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ASN1_R_SEQUENCE_LENGTH_MISMATCH);
+            goto err;
+        }
+
+        /*
+         * If we get here we've got no more data in the SEQUENCE, however we
+         * may not have read all fields so check all remaining are OPTIONAL
+         * and clear any that are.
+         */
+        for (; i < it->tcount; tt++, i++) {
+            const ASN1_TEMPLATE *seqtt;
+            seqtt = asn1_do_adb(pval, tt, 1);
+            if (seqtt == NULL)
+                goto err;
+            if (seqtt->flags & ASN1_TFLG_OPTIONAL) {
+                ASN1_VALUE **pseqval;
+                pseqval = asn1_get_field_ptr(pval, seqtt);
+                asn1_template_free(pseqval, seqtt);
+            } else {
+                errtt = seqtt;
+                ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ASN1_R_FIELD_MISSING);
+                goto err;
+            }
+        }
+        /* Save encoding */
+        if (!asn1_enc_save(pval, *in, p - *in, it))
+            goto auxerr;
+        if (asn1_cb && !asn1_cb(ASN1_OP_D2I_POST, pval, it, NULL))
+            goto auxerr;
+        *in = p;
+        return 1;
+
+    default:
+        return 0;
+    }
+ auxerr:
+    ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ASN1_R_AUX_ERROR);
+ err:
+    if (errtt)
+        ERR_add_error_data(4, "Field=", errtt->field_name,
+                           ", Type=", it->sname);
+    else
+        ERR_add_error_data(2, "Type=", it->sname);
+    return 0;
+}
+
+/*
+ * Templates are handled with two separate functions. One handles any
+ * EXPLICIT tag and the other handles the rest.
+ */
+
+static int asn1_template_ex_d2i(ASN1_VALUE **val,
+                                const unsigned char **in, long inlen,
+                                const ASN1_TEMPLATE *tt, char opt,
+                                ASN1_TLC *ctx, int depth)
+{
+    int flags, aclass;
+    int ret;
+    long len;
+    const unsigned char *p, *q;
+    char exp_eoc;
+    if (!val)
+        return 0;
+    flags = tt->flags;
+    aclass = flags & ASN1_TFLG_TAG_CLASS;
+
+    p = *in;
+
+    /* Check if EXPLICIT tag expected */
+    if (flags & ASN1_TFLG_EXPTAG) {
+        char cst;
+        /*
+         * Need to work out amount of data available to the inner content and
+         * where it starts: so read in EXPLICIT header to get the info.
+         */
+        ret = asn1_check_tlen(&len, NULL, NULL, &exp_eoc, &cst,
+                              &p, inlen, tt->tag, aclass, opt, ctx);
+        q = p;
+        if (!ret) {
+            ASN1err(ASN1_F_ASN1_TEMPLATE_EX_D2I, ERR_R_NESTED_ASN1_ERROR);
+            return 0;
+        } else if (ret == -1)
+            return -1;
+        if (!cst) {
+            ASN1err(ASN1_F_ASN1_TEMPLATE_EX_D2I,
+                    ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED);
+            return 0;
+        }
+        /* We've found the field so it can't be OPTIONAL now */
+        ret = asn1_template_noexp_d2i(val, &p, len, tt, 0, ctx, depth);
+        if (!ret) {
+            ASN1err(ASN1_F_ASN1_TEMPLATE_EX_D2I, ERR_R_NESTED_ASN1_ERROR);
+            return 0;
+        }
+        /* We read the field in OK so update length */
+        len -= p - q;
+        if (exp_eoc) {
+            /* If NDEF we must have an EOC here */
+            if (!asn1_check_eoc(&p, len)) {
+                ASN1err(ASN1_F_ASN1_TEMPLATE_EX_D2I, ASN1_R_MISSING_EOC);
+                goto err;
+            }
+        } else {
+            /*
+             * Otherwise we must hit the EXPLICIT tag end or its an error
+             */
+            if (len) {
+                ASN1err(ASN1_F_ASN1_TEMPLATE_EX_D2I,
+                        ASN1_R_EXPLICIT_LENGTH_MISMATCH);
+                goto err;
+            }
+        }
+    } else
+        return asn1_template_noexp_d2i(val, in, inlen, tt, opt, ctx, depth);
+
+    *in = p;
+    return 1;
+
+ err:
+    return 0;
+}
+
+static int asn1_template_noexp_d2i(ASN1_VALUE **val,
+                                   const unsigned char **in, long len,
+                                   const ASN1_TEMPLATE *tt, char opt,
+                                   ASN1_TLC *ctx, int depth)
+{
+    int flags, aclass;
+    int ret;
+    ASN1_VALUE *tval;
+    const unsigned char *p, *q;
+    if (!val)
+        return 0;
+    flags = tt->flags;
+    aclass = flags & ASN1_TFLG_TAG_CLASS;
+
+    p = *in;
+    q = p;
+
+    /*
+     * If field is embedded then val needs fixing so it is a pointer to
+     * a pointer to a field.
+     */
+    if (tt->flags & ASN1_TFLG_EMBED) {
+        tval = (ASN1_VALUE *)val;
+        val = &tval;
+    }
+
+    if (flags & ASN1_TFLG_SK_MASK) {
+        /* SET OF, SEQUENCE OF */
+        int sktag, skaclass;
+        char sk_eoc;
+        /* First work out expected inner tag value */
+        if (flags & ASN1_TFLG_IMPTAG) {
+            sktag = tt->tag;
+            skaclass = aclass;
+        } else {
+            skaclass = V_ASN1_UNIVERSAL;
+            if (flags & ASN1_TFLG_SET_OF)
+                sktag = V_ASN1_SET;
+            else
+                sktag = V_ASN1_SEQUENCE;
+        }
+        /* Get the tag */
+        ret = asn1_check_tlen(&len, NULL, NULL, &sk_eoc, NULL,
+                              &p, len, sktag, skaclass, opt, ctx);
+        if (!ret) {
+            ASN1err(ASN1_F_ASN1_TEMPLATE_NOEXP_D2I, ERR_R_NESTED_ASN1_ERROR);
+            return 0;
+        } else if (ret == -1)
+            return -1;
+        if (!*val)
+            *val = (ASN1_VALUE *)sk_ASN1_VALUE_new_null();
+        else {
+            /*
+             * We've got a valid STACK: free up any items present
+             */
+            STACK_OF(ASN1_VALUE) *sktmp = (STACK_OF(ASN1_VALUE) *)*val;
+            ASN1_VALUE *vtmp;
+            while (sk_ASN1_VALUE_num(sktmp) > 0) {
+                vtmp = sk_ASN1_VALUE_pop(sktmp);
+                ASN1_item_ex_free(&vtmp, ASN1_ITEM_ptr(tt->item));
+            }
+        }
+
+        if (!*val) {
+            ASN1err(ASN1_F_ASN1_TEMPLATE_NOEXP_D2I, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+
+        /* Read as many items as we can */
+        while (len > 0) {
+            ASN1_VALUE *skfield;
+            q = p;
+            /* See if EOC found */
+            if (asn1_check_eoc(&p, len)) {
+                if (!sk_eoc) {
+                    ASN1err(ASN1_F_ASN1_TEMPLATE_NOEXP_D2I,
+                            ASN1_R_UNEXPECTED_EOC);
+                    goto err;
+                }
+                len -= p - q;
+                sk_eoc = 0;
+                break;
+            }
+            skfield = NULL;
+            if (!asn1_item_embed_d2i(&skfield, &p, len,
+                                     ASN1_ITEM_ptr(tt->item), -1, 0, 0, ctx,
+                                     depth)) {
+                ASN1err(ASN1_F_ASN1_TEMPLATE_NOEXP_D2I,
+                        ERR_R_NESTED_ASN1_ERROR);
+                /* |skfield| may be partially allocated despite failure. */
+                ASN1_item_free(skfield, ASN1_ITEM_ptr(tt->item));
+                goto err;
+            }
+            len -= p - q;
+            if (!sk_ASN1_VALUE_push((STACK_OF(ASN1_VALUE) *)*val, skfield)) {
+                ASN1err(ASN1_F_ASN1_TEMPLATE_NOEXP_D2I, ERR_R_MALLOC_FAILURE);
+                ASN1_item_free(skfield, ASN1_ITEM_ptr(tt->item));
+                goto err;
+            }
+        }
+        if (sk_eoc) {
+            ASN1err(ASN1_F_ASN1_TEMPLATE_NOEXP_D2I, ASN1_R_MISSING_EOC);
+            goto err;
+        }
+    } else if (flags & ASN1_TFLG_IMPTAG) {
+        /* IMPLICIT tagging */
+        ret = asn1_item_embed_d2i(val, &p, len,
+                                  ASN1_ITEM_ptr(tt->item), tt->tag, aclass, opt,
+                                  ctx, depth);
+        if (!ret) {
+            ASN1err(ASN1_F_ASN1_TEMPLATE_NOEXP_D2I, ERR_R_NESTED_ASN1_ERROR);
+            goto err;
+        } else if (ret == -1)
+            return -1;
+    } else {
+        /* Nothing special */
+        ret = asn1_item_embed_d2i(val, &p, len, ASN1_ITEM_ptr(tt->item),
+                                  -1, 0, opt, ctx, depth);
+        if (!ret) {
+            ASN1err(ASN1_F_ASN1_TEMPLATE_NOEXP_D2I, ERR_R_NESTED_ASN1_ERROR);
+            goto err;
+        } else if (ret == -1)
+            return -1;
+    }
+
+    *in = p;
+    return 1;
+
+ err:
+    return 0;
+}
+
+static int asn1_d2i_ex_primitive(ASN1_VALUE **pval,
+                                 const unsigned char **in, long inlen,
+                                 const ASN1_ITEM *it,
+                                 int tag, int aclass, char opt, ASN1_TLC *ctx)
+{
+    int ret = 0, utype;
+    long plen;
+    char cst, inf, free_cont = 0;
+    const unsigned char *p;
+    BUF_MEM buf = { 0, NULL, 0, 0 };
+    const unsigned char *cont = NULL;
+    long len;
+    if (!pval) {
+        ASN1err(ASN1_F_ASN1_D2I_EX_PRIMITIVE, ASN1_R_ILLEGAL_NULL);
+        return 0;               /* Should never happen */
+    }
+
+    if (it->itype == ASN1_ITYPE_MSTRING) {
+        utype = tag;
+        tag = -1;
+    } else
+        utype = it->utype;
+
+    if (utype == V_ASN1_ANY) {
+        /* If type is ANY need to figure out type from tag */
+        unsigned char oclass;
+        if (tag >= 0) {
+            ASN1err(ASN1_F_ASN1_D2I_EX_PRIMITIVE, ASN1_R_ILLEGAL_TAGGED_ANY);
+            return 0;
+        }
+        if (opt) {
+            ASN1err(ASN1_F_ASN1_D2I_EX_PRIMITIVE,
+                    ASN1_R_ILLEGAL_OPTIONAL_ANY);
+            return 0;
+        }
+        p = *in;
+        ret = asn1_check_tlen(NULL, &utype, &oclass, NULL, NULL,
+                              &p, inlen, -1, 0, 0, ctx);
+        if (!ret) {
+            ASN1err(ASN1_F_ASN1_D2I_EX_PRIMITIVE, ERR_R_NESTED_ASN1_ERROR);
+            return 0;
+        }
+        if (oclass != V_ASN1_UNIVERSAL)
+            utype = V_ASN1_OTHER;
+    }
+    if (tag == -1) {
+        tag = utype;
+        aclass = V_ASN1_UNIVERSAL;
+    }
+    p = *in;
+    /* Check header */
+    ret = asn1_check_tlen(&plen, NULL, NULL, &inf, &cst,
+                          &p, inlen, tag, aclass, opt, ctx);
+    if (!ret) {
+        ASN1err(ASN1_F_ASN1_D2I_EX_PRIMITIVE, ERR_R_NESTED_ASN1_ERROR);
+        return 0;
+    } else if (ret == -1)
+        return -1;
+    ret = 0;
+    /* SEQUENCE, SET and "OTHER" are left in encoded form */
+    if ((utype == V_ASN1_SEQUENCE)
+        || (utype == V_ASN1_SET) || (utype == V_ASN1_OTHER)) {
+        /*
+         * Clear context cache for type OTHER because the auto clear when we
+         * have a exact match won't work
+         */
+        if (utype == V_ASN1_OTHER) {
+            asn1_tlc_clear(ctx);
+        }
+        /* SEQUENCE and SET must be constructed */
+        else if (!cst) {
+            ASN1err(ASN1_F_ASN1_D2I_EX_PRIMITIVE,
+                    ASN1_R_TYPE_NOT_CONSTRUCTED);
+            return 0;
+        }
+
+        cont = *in;
+        /* If indefinite length constructed find the real end */
+        if (inf) {
+            if (!asn1_find_end(&p, plen, inf))
+                goto err;
+            len = p - cont;
+        } else {
+            len = p - cont + plen;
+            p += plen;
+        }
+    } else if (cst) {
+        if (utype == V_ASN1_NULL || utype == V_ASN1_BOOLEAN
+            || utype == V_ASN1_OBJECT || utype == V_ASN1_INTEGER
+            || utype == V_ASN1_ENUMERATED) {
+            ASN1err(ASN1_F_ASN1_D2I_EX_PRIMITIVE, ASN1_R_TYPE_NOT_PRIMITIVE);
+            return 0;
+        }
+
+        /* Free any returned 'buf' content */
+        free_cont = 1;
+        /*
+         * Should really check the internal tags are correct but some things
+         * may get this wrong. The relevant specs say that constructed string
+         * types should be OCTET STRINGs internally irrespective of the type.
+         * So instead just check for UNIVERSAL class and ignore the tag.
+         */
+        if (!asn1_collect(&buf, &p, plen, inf, -1, V_ASN1_UNIVERSAL, 0)) {
+            goto err;
+        }
+        len = buf.length;
+        /* Append a final null to string */
+        if (!BUF_MEM_grow_clean(&buf, len + 1)) {
+            ASN1err(ASN1_F_ASN1_D2I_EX_PRIMITIVE, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        buf.data[len] = 0;
+        cont = (const unsigned char *)buf.data;
+    } else {
+        cont = p;
+        len = plen;
+        p += plen;
+    }
+
+    /* We now have content length and type: translate into a structure */
+    /* asn1_ex_c2i may reuse allocated buffer, and so sets free_cont to 0 */
+    if (!asn1_ex_c2i(pval, cont, len, utype, &free_cont, it))
+        goto err;
+
+    *in = p;
+    ret = 1;
+ err:
+    if (free_cont)
+        OPENSSL_free(buf.data);
+    return ret;
+}
+
+/* Translate ASN1 content octets into a structure */
+
+static int asn1_ex_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len,
+                       int utype, char *free_cont, const ASN1_ITEM *it)
+{
+    ASN1_VALUE **opval = NULL;
+    ASN1_STRING *stmp;
+    ASN1_TYPE *typ = NULL;
+    int ret = 0;
+    const ASN1_PRIMITIVE_FUNCS *pf;
+    ASN1_INTEGER **tint;
+    pf = it->funcs;
+
+    if (pf && pf->prim_c2i)
+        return pf->prim_c2i(pval, cont, len, utype, free_cont, it);
+    /* If ANY type clear type and set pointer to internal value */
+    if (it->utype == V_ASN1_ANY) {
+        if (!*pval) {
+            typ = ASN1_TYPE_new();
+            if (typ == NULL)
+                goto err;
+            *pval = (ASN1_VALUE *)typ;
+        } else
+            typ = (ASN1_TYPE *)*pval;
+
+        if (utype != typ->type)
+            ASN1_TYPE_set(typ, utype, NULL);
+        opval = pval;
+        pval = &typ->value.asn1_value;
+    }
+    switch (utype) {
+    case V_ASN1_OBJECT:
+        if (!c2i_ASN1_OBJECT((ASN1_OBJECT **)pval, &cont, len))
+            goto err;
+        break;
+
+    case V_ASN1_NULL:
+        if (len) {
+            ASN1err(ASN1_F_ASN1_EX_C2I, ASN1_R_NULL_IS_WRONG_LENGTH);
+            goto err;
+        }
+        *pval = (ASN1_VALUE *)1;
+        break;
+
+    case V_ASN1_BOOLEAN:
+        if (len != 1) {
+            ASN1err(ASN1_F_ASN1_EX_C2I, ASN1_R_BOOLEAN_IS_WRONG_LENGTH);
+            goto err;
+        } else {
+            ASN1_BOOLEAN *tbool;
+            tbool = (ASN1_BOOLEAN *)pval;
+            *tbool = *cont;
+        }
+        break;
+
+    case V_ASN1_BIT_STRING:
+        if (!c2i_ASN1_BIT_STRING((ASN1_BIT_STRING **)pval, &cont, len))
+            goto err;
+        break;
+
+    case V_ASN1_INTEGER:
+    case V_ASN1_ENUMERATED:
+        tint = (ASN1_INTEGER **)pval;
+        if (!c2i_ASN1_INTEGER(tint, &cont, len))
+            goto err;
+        /* Fixup type to match the expected form */
+        (*tint)->type = utype | ((*tint)->type & V_ASN1_NEG);
+        break;
+
+    case V_ASN1_OCTET_STRING:
+    case V_ASN1_NUMERICSTRING:
+    case V_ASN1_PRINTABLESTRING:
+    case V_ASN1_T61STRING:
+    case V_ASN1_VIDEOTEXSTRING:
+    case V_ASN1_IA5STRING:
+    case V_ASN1_UTCTIME:
+    case V_ASN1_GENERALIZEDTIME:
+    case V_ASN1_GRAPHICSTRING:
+    case V_ASN1_VISIBLESTRING:
+    case V_ASN1_GENERALSTRING:
+    case V_ASN1_UNIVERSALSTRING:
+    case V_ASN1_BMPSTRING:
+    case V_ASN1_UTF8STRING:
+    case V_ASN1_OTHER:
+    case V_ASN1_SET:
+    case V_ASN1_SEQUENCE:
+    default:
+        if (utype == V_ASN1_BMPSTRING && (len & 1)) {
+            ASN1err(ASN1_F_ASN1_EX_C2I, ASN1_R_BMPSTRING_IS_WRONG_LENGTH);
+            goto err;
+        }
+        if (utype == V_ASN1_UNIVERSALSTRING && (len & 3)) {
+            ASN1err(ASN1_F_ASN1_EX_C2I,
+                    ASN1_R_UNIVERSALSTRING_IS_WRONG_LENGTH);
+            goto err;
+        }
+        /* All based on ASN1_STRING and handled the same */
+        if (!*pval) {
+            stmp = ASN1_STRING_type_new(utype);
+            if (stmp == NULL) {
+                ASN1err(ASN1_F_ASN1_EX_C2I, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            *pval = (ASN1_VALUE *)stmp;
+        } else {
+            stmp = (ASN1_STRING *)*pval;
+            stmp->type = utype;
+        }
+        /* If we've already allocated a buffer use it */
+        if (*free_cont) {
+            OPENSSL_free(stmp->data);
+            stmp->data = (unsigned char *)cont; /* UGLY CAST! RL */
+            stmp->length = len;
+            *free_cont = 0;
+        } else {
+            if (!ASN1_STRING_set(stmp, cont, len)) {
+                ASN1err(ASN1_F_ASN1_EX_C2I, ERR_R_MALLOC_FAILURE);
+                ASN1_STRING_free(stmp);
+                *pval = NULL;
+                goto err;
+            }
+        }
+        break;
+    }
+    /* If ASN1_ANY and NULL type fix up value */
+    if (typ && (utype == V_ASN1_NULL))
+        typ->value.ptr = NULL;
+
+    ret = 1;
+ err:
+    if (!ret) {
+        ASN1_TYPE_free(typ);
+        if (opval)
+            *opval = NULL;
+    }
+    return ret;
+}
+
+/*
+ * This function finds the end of an ASN1 structure when passed its maximum
+ * length, whether it is indefinite length and a pointer to the content. This
+ * is more efficient than calling asn1_collect because it does not recurse on
+ * each indefinite length header.
+ */
+
+static int asn1_find_end(const unsigned char **in, long len, char inf)
+{
+    uint32_t expected_eoc;
+    long plen;
+    const unsigned char *p = *in, *q;
+    /* If not indefinite length constructed just add length */
+    if (inf == 0) {
+        *in += len;
+        return 1;
+    }
+    expected_eoc = 1;
+    /*
+     * Indefinite length constructed form. Find the end when enough EOCs are
+     * found. If more indefinite length constructed headers are encountered
+     * increment the expected eoc count otherwise just skip to the end of the
+     * data.
+     */
+    while (len > 0) {
+        if (asn1_check_eoc(&p, len)) {
+            expected_eoc--;
+            if (expected_eoc == 0)
+                break;
+            len -= 2;
+            continue;
+        }
+        q = p;
+        /* Just read in a header: only care about the length */
+        if (!asn1_check_tlen(&plen, NULL, NULL, &inf, NULL, &p, len,
+                             -1, 0, 0, NULL)) {
+            ASN1err(ASN1_F_ASN1_FIND_END, ERR_R_NESTED_ASN1_ERROR);
+            return 0;
+        }
+        if (inf) {
+            if (expected_eoc == UINT32_MAX) {
+                ASN1err(ASN1_F_ASN1_FIND_END, ERR_R_NESTED_ASN1_ERROR);
+                return 0;
+            }
+            expected_eoc++;
+        } else {
+            p += plen;
+        }
+        len -= p - q;
+    }
+    if (expected_eoc) {
+        ASN1err(ASN1_F_ASN1_FIND_END, ASN1_R_MISSING_EOC);
+        return 0;
+    }
+    *in = p;
+    return 1;
+}
+
+/*
+ * This function collects the asn1 data from a constructed string type into
+ * a buffer. The values of 'in' and 'len' should refer to the contents of the
+ * constructed type and 'inf' should be set if it is indefinite length.
+ */
+
+#ifndef ASN1_MAX_STRING_NEST
+/*
+ * This determines how many levels of recursion are permitted in ASN1 string
+ * types. If it is not limited stack overflows can occur. If set to zero no
+ * recursion is allowed at all. Although zero should be adequate examples
+ * exist that require a value of 1. So 5 should be more than enough.
+ */
+# define ASN1_MAX_STRING_NEST 5
+#endif
+
+static int asn1_collect(BUF_MEM *buf, const unsigned char **in, long len,
+                        char inf, int tag, int aclass, int depth)
+{
+    const unsigned char *p, *q;
+    long plen;
+    char cst, ininf;
+    p = *in;
+    inf &= 1;
+    /*
+     * If no buffer and not indefinite length constructed just pass over the
+     * encoded data
+     */
+    if (!buf && !inf) {
+        *in += len;
+        return 1;
+    }
+    while (len > 0) {
+        q = p;
+        /* Check for EOC */
+        if (asn1_check_eoc(&p, len)) {
+            /*
+             * EOC is illegal outside indefinite length constructed form
+             */
+            if (!inf) {
+                ASN1err(ASN1_F_ASN1_COLLECT, ASN1_R_UNEXPECTED_EOC);
+                return 0;
+            }
+            inf = 0;
+            break;
+        }
+
+        if (!asn1_check_tlen(&plen, NULL, NULL, &ininf, &cst, &p,
+                             len, tag, aclass, 0, NULL)) {
+            ASN1err(ASN1_F_ASN1_COLLECT, ERR_R_NESTED_ASN1_ERROR);
+            return 0;
+        }
+
+        /* If indefinite length constructed update max length */
+        if (cst) {
+            if (depth >= ASN1_MAX_STRING_NEST) {
+                ASN1err(ASN1_F_ASN1_COLLECT, ASN1_R_NESTED_ASN1_STRING);
+                return 0;
+            }
+            if (!asn1_collect(buf, &p, plen, ininf, tag, aclass, depth + 1))
+                return 0;
+        } else if (plen && !collect_data(buf, &p, plen))
+            return 0;
+        len -= p - q;
+    }
+    if (inf) {
+        ASN1err(ASN1_F_ASN1_COLLECT, ASN1_R_MISSING_EOC);
+        return 0;
+    }
+    *in = p;
+    return 1;
+}
+
+static int collect_data(BUF_MEM *buf, const unsigned char **p, long plen)
+{
+    int len;
+    if (buf) {
+        len = buf->length;
+        if (!BUF_MEM_grow_clean(buf, len + plen)) {
+            ASN1err(ASN1_F_COLLECT_DATA, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        memcpy(buf->data + len, *p, plen);
+    }
+    *p += plen;
+    return 1;
+}
+
+/* Check for ASN1 EOC and swallow it if found */
+
+static int asn1_check_eoc(const unsigned char **in, long len)
+{
+    const unsigned char *p;
+    if (len < 2)
+        return 0;
+    p = *in;
+    if (!p[0] && !p[1]) {
+        *in += 2;
+        return 1;
+    }
+    return 0;
+}
+
+/*
+ * Check an ASN1 tag and length: a bit like ASN1_get_object but it sets the
+ * length for indefinite length constructed form, we don't know the exact
+ * length but we can set an upper bound to the amount of data available minus
+ * the header length just read.
+ */
+
+static int asn1_check_tlen(long *olen, int *otag, unsigned char *oclass,
+                           char *inf, char *cst,
+                           const unsigned char **in, long len,
+                           int exptag, int expclass, char opt, ASN1_TLC *ctx)
+{
+    int i;
+    int ptag, pclass;
+    long plen;
+    const unsigned char *p, *q;
+    p = *in;
+    q = p;
+
+    if (ctx && ctx->valid) {
+        i = ctx->ret;
+        plen = ctx->plen;
+        pclass = ctx->pclass;
+        ptag = ctx->ptag;
+        p += ctx->hdrlen;
+    } else {
+        i = ASN1_get_object(&p, &plen, &ptag, &pclass, len);
+        if (ctx) {
+            ctx->ret = i;
+            ctx->plen = plen;
+            ctx->pclass = pclass;
+            ctx->ptag = ptag;
+            ctx->hdrlen = p - q;
+            ctx->valid = 1;
+            /*
+             * If definite length, and no error, length + header can't exceed
+             * total amount of data available.
+             */
+            if (!(i & 0x81) && ((plen + ctx->hdrlen) > len)) {
+                ASN1err(ASN1_F_ASN1_CHECK_TLEN, ASN1_R_TOO_LONG);
+                asn1_tlc_clear(ctx);
+                return 0;
+            }
+        }
+    }
+
+    if (i & 0x80) {
+        ASN1err(ASN1_F_ASN1_CHECK_TLEN, ASN1_R_BAD_OBJECT_HEADER);
+        asn1_tlc_clear(ctx);
+        return 0;
+    }
+    if (exptag >= 0) {
+        if ((exptag != ptag) || (expclass != pclass)) {
+            /*
+             * If type is OPTIONAL, not an error: indicate missing type.
+             */
+            if (opt)
+                return -1;
+            asn1_tlc_clear(ctx);
+            ASN1err(ASN1_F_ASN1_CHECK_TLEN, ASN1_R_WRONG_TAG);
+            return 0;
+        }
+        /*
+         * We have a tag and class match: assume we are going to do something
+         * with it
+         */
+        asn1_tlc_clear(ctx);
+    }
+
+    if (i & 1)
+        plen = len - (p - q);
+
+    if (inf)
+        *inf = i & 1;
+
+    if (cst)
+        *cst = i & V_ASN1_CONSTRUCTED;
+
+    if (olen)
+        *olen = plen;
+
+    if (oclass)
+        *oclass = pclass;
+
+    if (otag)
+        *otag = ptag;
+
+    *in = p;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_enc.c
new file mode 100644
index 000000000..30be314ff
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_enc.c
@@ -0,0 +1,609 @@
+/*
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stddef.h>
+#include <string.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/objects.h>
+#include "internal/asn1_int.h"
+#include "asn1_locl.h"
+
+static int asn1_i2d_ex_primitive(ASN1_VALUE **pval, unsigned char **out,
+                                 const ASN1_ITEM *it, int tag, int aclass);
+static int asn1_set_seq_out(STACK_OF(ASN1_VALUE) *sk, unsigned char **out,
+                            int skcontlen, const ASN1_ITEM *item,
+                            int do_sort, int iclass);
+static int asn1_template_ex_i2d(ASN1_VALUE **pval, unsigned char **out,
+                                const ASN1_TEMPLATE *tt, int tag, int aclass);
+static int asn1_item_flags_i2d(ASN1_VALUE *val, unsigned char **out,
+                               const ASN1_ITEM *it, int flags);
+static int asn1_ex_i2c(ASN1_VALUE **pval, unsigned char *cout, int *putype,
+                       const ASN1_ITEM *it);
+
+/*
+ * Top level i2d equivalents: the 'ndef' variant instructs the encoder to use
+ * indefinite length constructed encoding, where appropriate
+ */
+
+int ASN1_item_ndef_i2d(ASN1_VALUE *val, unsigned char **out,
+                       const ASN1_ITEM *it)
+{
+    return asn1_item_flags_i2d(val, out, it, ASN1_TFLG_NDEF);
+}
+
+int ASN1_item_i2d(ASN1_VALUE *val, unsigned char **out, const ASN1_ITEM *it)
+{
+    return asn1_item_flags_i2d(val, out, it, 0);
+}
+
+/*
+ * Encode an ASN1 item, this is use by the standard 'i2d' function. 'out'
+ * points to a buffer to output the data to. The new i2d has one additional
+ * feature. If the output buffer is NULL (i.e. *out == NULL) then a buffer is
+ * allocated and populated with the encoding.
+ */
+
+static int asn1_item_flags_i2d(ASN1_VALUE *val, unsigned char **out,
+                               const ASN1_ITEM *it, int flags)
+{
+    if (out && !*out) {
+        unsigned char *p, *buf;
+        int len;
+
+        len = ASN1_item_ex_i2d(&val, NULL, it, -1, flags);
+        if (len <= 0)
+            return len;
+        if ((buf = OPENSSL_malloc(len)) == NULL) {
+            ASN1err(ASN1_F_ASN1_ITEM_FLAGS_I2D, ERR_R_MALLOC_FAILURE);
+            return -1;
+        }
+        p = buf;
+        ASN1_item_ex_i2d(&val, &p, it, -1, flags);
+        *out = buf;
+        return len;
+    }
+
+    return ASN1_item_ex_i2d(&val, out, it, -1, flags);
+}
+
+/*
+ * Encode an item, taking care of IMPLICIT tagging (if any). This function
+ * performs the normal item handling: it can be used in external types.
+ */
+
+int ASN1_item_ex_i2d(ASN1_VALUE **pval, unsigned char **out,
+                     const ASN1_ITEM *it, int tag, int aclass)
+{
+    const ASN1_TEMPLATE *tt = NULL;
+    int i, seqcontlen, seqlen, ndef = 1;
+    const ASN1_EXTERN_FUNCS *ef;
+    const ASN1_AUX *aux = it->funcs;
+    ASN1_aux_cb *asn1_cb = 0;
+
+    if ((it->itype != ASN1_ITYPE_PRIMITIVE) && !*pval)
+        return 0;
+
+    if (aux && aux->asn1_cb)
+        asn1_cb = aux->asn1_cb;
+
+    switch (it->itype) {
+
+    case ASN1_ITYPE_PRIMITIVE:
+        if (it->templates)
+            return asn1_template_ex_i2d(pval, out, it->templates,
+                                        tag, aclass);
+        return asn1_i2d_ex_primitive(pval, out, it, tag, aclass);
+
+    case ASN1_ITYPE_MSTRING:
+        return asn1_i2d_ex_primitive(pval, out, it, -1, aclass);
+
+    case ASN1_ITYPE_CHOICE:
+        if (asn1_cb && !asn1_cb(ASN1_OP_I2D_PRE, pval, it, NULL))
+            return 0;
+        i = asn1_get_choice_selector(pval, it);
+        if ((i >= 0) && (i < it->tcount)) {
+            ASN1_VALUE **pchval;
+            const ASN1_TEMPLATE *chtt;
+            chtt = it->templates + i;
+            pchval = asn1_get_field_ptr(pval, chtt);
+            return asn1_template_ex_i2d(pchval, out, chtt, -1, aclass);
+        }
+        /* Fixme: error condition if selector out of range */
+        if (asn1_cb && !asn1_cb(ASN1_OP_I2D_POST, pval, it, NULL))
+            return 0;
+        break;
+
+    case ASN1_ITYPE_EXTERN:
+        /* If new style i2d it does all the work */
+        ef = it->funcs;
+        return ef->asn1_ex_i2d(pval, out, it, tag, aclass);
+
+    case ASN1_ITYPE_NDEF_SEQUENCE:
+        /* Use indefinite length constructed if requested */
+        if (aclass & ASN1_TFLG_NDEF)
+            ndef = 2;
+        /* fall through */
+
+    case ASN1_ITYPE_SEQUENCE:
+        i = asn1_enc_restore(&seqcontlen, out, pval, it);
+        /* An error occurred */
+        if (i < 0)
+            return 0;
+        /* We have a valid cached encoding... */
+        if (i > 0)
+            return seqcontlen;
+        /* Otherwise carry on */
+        seqcontlen = 0;
+        /* If no IMPLICIT tagging set to SEQUENCE, UNIVERSAL */
+        if (tag == -1) {
+            tag = V_ASN1_SEQUENCE;
+            /* Retain any other flags in aclass */
+            aclass = (aclass & ~ASN1_TFLG_TAG_CLASS)
+                | V_ASN1_UNIVERSAL;
+        }
+        if (asn1_cb && !asn1_cb(ASN1_OP_I2D_PRE, pval, it, NULL))
+            return 0;
+        /* First work out sequence content length */
+        for (i = 0, tt = it->templates; i < it->tcount; tt++, i++) {
+            const ASN1_TEMPLATE *seqtt;
+            ASN1_VALUE **pseqval;
+            int tmplen;
+            seqtt = asn1_do_adb(pval, tt, 1);
+            if (!seqtt)
+                return 0;
+            pseqval = asn1_get_field_ptr(pval, seqtt);
+            tmplen = asn1_template_ex_i2d(pseqval, NULL, seqtt, -1, aclass);
+            if (tmplen == -1 || (tmplen > INT_MAX - seqcontlen))
+                return -1;
+            seqcontlen += tmplen;
+        }
+
+        seqlen = ASN1_object_size(ndef, seqcontlen, tag);
+        if (!out || seqlen == -1)
+            return seqlen;
+        /* Output SEQUENCE header */
+        ASN1_put_object(out, ndef, seqcontlen, tag, aclass);
+        for (i = 0, tt = it->templates; i < it->tcount; tt++, i++) {
+            const ASN1_TEMPLATE *seqtt;
+            ASN1_VALUE **pseqval;
+            seqtt = asn1_do_adb(pval, tt, 1);
+            if (!seqtt)
+                return 0;
+            pseqval = asn1_get_field_ptr(pval, seqtt);
+            /* FIXME: check for errors in enhanced version */
+            asn1_template_ex_i2d(pseqval, out, seqtt, -1, aclass);
+        }
+        if (ndef == 2)
+            ASN1_put_eoc(out);
+        if (asn1_cb && !asn1_cb(ASN1_OP_I2D_POST, pval, it, NULL))
+            return 0;
+        return seqlen;
+
+    default:
+        return 0;
+
+    }
+    return 0;
+}
+
+static int asn1_template_ex_i2d(ASN1_VALUE **pval, unsigned char **out,
+                                const ASN1_TEMPLATE *tt, int tag, int iclass)
+{
+    int i, ret, flags, ttag, tclass, ndef;
+    ASN1_VALUE *tval;
+    flags = tt->flags;
+
+    /*
+     * If field is embedded then val needs fixing so it is a pointer to
+     * a pointer to a field.
+     */
+    if (flags & ASN1_TFLG_EMBED) {
+        tval = (ASN1_VALUE *)pval;
+        pval = &tval;
+    }
+    /*
+     * Work out tag and class to use: tagging may come either from the
+     * template or the arguments, not both because this would create
+     * ambiguity. Additionally the iclass argument may contain some
+     * additional flags which should be noted and passed down to other
+     * levels.
+     */
+    if (flags & ASN1_TFLG_TAG_MASK) {
+        /* Error if argument and template tagging */
+        if (tag != -1)
+            /* FIXME: error code here */
+            return -1;
+        /* Get tagging from template */
+        ttag = tt->tag;
+        tclass = flags & ASN1_TFLG_TAG_CLASS;
+    } else if (tag != -1) {
+        /* No template tagging, get from arguments */
+        ttag = tag;
+        tclass = iclass & ASN1_TFLG_TAG_CLASS;
+    } else {
+        ttag = -1;
+        tclass = 0;
+    }
+    /*
+     * Remove any class mask from iflag.
+     */
+    iclass &= ~ASN1_TFLG_TAG_CLASS;
+
+    /*
+     * At this point 'ttag' contains the outer tag to use, 'tclass' is the
+     * class and iclass is any flags passed to this function.
+     */
+
+    /* if template and arguments require ndef, use it */
+    if ((flags & ASN1_TFLG_NDEF) && (iclass & ASN1_TFLG_NDEF))
+        ndef = 2;
+    else
+        ndef = 1;
+
+    if (flags & ASN1_TFLG_SK_MASK) {
+        /* SET OF, SEQUENCE OF */
+        STACK_OF(ASN1_VALUE) *sk = (STACK_OF(ASN1_VALUE) *)*pval;
+        int isset, sktag, skaclass;
+        int skcontlen, sklen;
+        ASN1_VALUE *skitem;
+
+        if (!*pval)
+            return 0;
+
+        if (flags & ASN1_TFLG_SET_OF) {
+            isset = 1;
+            /* 2 means we reorder */
+            if (flags & ASN1_TFLG_SEQUENCE_OF)
+                isset = 2;
+        } else
+            isset = 0;
+
+        /*
+         * Work out inner tag value: if EXPLICIT or no tagging use underlying
+         * type.
+         */
+        if ((ttag != -1) && !(flags & ASN1_TFLG_EXPTAG)) {
+            sktag = ttag;
+            skaclass = tclass;
+        } else {
+            skaclass = V_ASN1_UNIVERSAL;
+            if (isset)
+                sktag = V_ASN1_SET;
+            else
+                sktag = V_ASN1_SEQUENCE;
+        }
+
+        /* Determine total length of items */
+        skcontlen = 0;
+        for (i = 0; i < sk_ASN1_VALUE_num(sk); i++) {
+            int tmplen;
+            skitem = sk_ASN1_VALUE_value(sk, i);
+            tmplen = ASN1_item_ex_i2d(&skitem, NULL, ASN1_ITEM_ptr(tt->item),
+                                      -1, iclass);
+            if (tmplen == -1 || (skcontlen > INT_MAX - tmplen))
+                return -1;
+            skcontlen += tmplen;
+        }
+        sklen = ASN1_object_size(ndef, skcontlen, sktag);
+        if (sklen == -1)
+            return -1;
+        /* If EXPLICIT need length of surrounding tag */
+        if (flags & ASN1_TFLG_EXPTAG)
+            ret = ASN1_object_size(ndef, sklen, ttag);
+        else
+            ret = sklen;
+
+        if (!out || ret == -1)
+            return ret;
+
+        /* Now encode this lot... */
+        /* EXPLICIT tag */
+        if (flags & ASN1_TFLG_EXPTAG)
+            ASN1_put_object(out, ndef, sklen, ttag, tclass);
+        /* SET or SEQUENCE and IMPLICIT tag */
+        ASN1_put_object(out, ndef, skcontlen, sktag, skaclass);
+        /* And the stuff itself */
+        asn1_set_seq_out(sk, out, skcontlen, ASN1_ITEM_ptr(tt->item),
+                         isset, iclass);
+        if (ndef == 2) {
+            ASN1_put_eoc(out);
+            if (flags & ASN1_TFLG_EXPTAG)
+                ASN1_put_eoc(out);
+        }
+
+        return ret;
+    }
+
+    if (flags & ASN1_TFLG_EXPTAG) {
+        /* EXPLICIT tagging */
+        /* Find length of tagged item */
+        i = ASN1_item_ex_i2d(pval, NULL, ASN1_ITEM_ptr(tt->item), -1, iclass);
+        if (!i)
+            return 0;
+        /* Find length of EXPLICIT tag */
+        ret = ASN1_object_size(ndef, i, ttag);
+        if (out && ret != -1) {
+            /* Output tag and item */
+            ASN1_put_object(out, ndef, i, ttag, tclass);
+            ASN1_item_ex_i2d(pval, out, ASN1_ITEM_ptr(tt->item), -1, iclass);
+            if (ndef == 2)
+                ASN1_put_eoc(out);
+        }
+        return ret;
+    }
+
+    /* Either normal or IMPLICIT tagging: combine class and flags */
+    return ASN1_item_ex_i2d(pval, out, ASN1_ITEM_ptr(tt->item),
+                            ttag, tclass | iclass);
+
+}
+
+/* Temporary structure used to hold DER encoding of items for SET OF */
+
+typedef struct {
+    unsigned char *data;
+    int length;
+    ASN1_VALUE *field;
+} DER_ENC;
+
+static int der_cmp(const void *a, const void *b)
+{
+    const DER_ENC *d1 = a, *d2 = b;
+    int cmplen, i;
+    cmplen = (d1->length < d2->length) ? d1->length : d2->length;
+    i = memcmp(d1->data, d2->data, cmplen);
+    if (i)
+        return i;
+    return d1->length - d2->length;
+}
+
+/* Output the content octets of SET OF or SEQUENCE OF */
+
+static int asn1_set_seq_out(STACK_OF(ASN1_VALUE) *sk, unsigned char **out,
+                            int skcontlen, const ASN1_ITEM *item,
+                            int do_sort, int iclass)
+{
+    int i;
+    ASN1_VALUE *skitem;
+    unsigned char *tmpdat = NULL, *p = NULL;
+    DER_ENC *derlst = NULL, *tder;
+    if (do_sort) {
+        /* Don't need to sort less than 2 items */
+        if (sk_ASN1_VALUE_num(sk) < 2)
+            do_sort = 0;
+        else {
+            derlst = OPENSSL_malloc(sk_ASN1_VALUE_num(sk)
+                                    * sizeof(*derlst));
+            if (derlst == NULL)
+                return 0;
+            tmpdat = OPENSSL_malloc(skcontlen);
+            if (tmpdat == NULL) {
+                OPENSSL_free(derlst);
+                return 0;
+            }
+        }
+    }
+    /* If not sorting just output each item */
+    if (!do_sort) {
+        for (i = 0; i < sk_ASN1_VALUE_num(sk); i++) {
+            skitem = sk_ASN1_VALUE_value(sk, i);
+            ASN1_item_ex_i2d(&skitem, out, item, -1, iclass);
+        }
+        return 1;
+    }
+    p = tmpdat;
+
+    /* Doing sort: build up a list of each member's DER encoding */
+    for (i = 0, tder = derlst; i < sk_ASN1_VALUE_num(sk); i++, tder++) {
+        skitem = sk_ASN1_VALUE_value(sk, i);
+        tder->data = p;
+        tder->length = ASN1_item_ex_i2d(&skitem, &p, item, -1, iclass);
+        tder->field = skitem;
+    }
+
+    /* Now sort them */
+    qsort(derlst, sk_ASN1_VALUE_num(sk), sizeof(*derlst), der_cmp);
+    /* Output sorted DER encoding */
+    p = *out;
+    for (i = 0, tder = derlst; i < sk_ASN1_VALUE_num(sk); i++, tder++) {
+        memcpy(p, tder->data, tder->length);
+        p += tder->length;
+    }
+    *out = p;
+    /* If do_sort is 2 then reorder the STACK */
+    if (do_sort == 2) {
+        for (i = 0, tder = derlst; i < sk_ASN1_VALUE_num(sk); i++, tder++)
+            (void)sk_ASN1_VALUE_set(sk, i, tder->field);
+    }
+    OPENSSL_free(derlst);
+    OPENSSL_free(tmpdat);
+    return 1;
+}
+
+static int asn1_i2d_ex_primitive(ASN1_VALUE **pval, unsigned char **out,
+                                 const ASN1_ITEM *it, int tag, int aclass)
+{
+    int len;
+    int utype;
+    int usetag;
+    int ndef = 0;
+
+    utype = it->utype;
+
+    /*
+     * Get length of content octets and maybe find out the underlying type.
+     */
+
+    len = asn1_ex_i2c(pval, NULL, &utype, it);
+
+    /*
+     * If SEQUENCE, SET or OTHER then header is included in pseudo content
+     * octets so don't include tag+length. We need to check here because the
+     * call to asn1_ex_i2c() could change utype.
+     */
+    if ((utype == V_ASN1_SEQUENCE) || (utype == V_ASN1_SET) ||
+        (utype == V_ASN1_OTHER))
+        usetag = 0;
+    else
+        usetag = 1;
+
+    /* -1 means omit type */
+
+    if (len == -1)
+        return 0;
+
+    /* -2 return is special meaning use ndef */
+    if (len == -2) {
+        ndef = 2;
+        len = 0;
+    }
+
+    /* If not implicitly tagged get tag from underlying type */
+    if (tag == -1)
+        tag = utype;
+
+    /* Output tag+length followed by content octets */
+    if (out) {
+        if (usetag)
+            ASN1_put_object(out, ndef, len, tag, aclass);
+        asn1_ex_i2c(pval, *out, &utype, it);
+        if (ndef)
+            ASN1_put_eoc(out);
+        else
+            *out += len;
+    }
+
+    if (usetag)
+        return ASN1_object_size(ndef, len, tag);
+    return len;
+}
+
+/* Produce content octets from a structure */
+
+static int asn1_ex_i2c(ASN1_VALUE **pval, unsigned char *cout, int *putype,
+                       const ASN1_ITEM *it)
+{
+    ASN1_BOOLEAN *tbool = NULL;
+    ASN1_STRING *strtmp;
+    ASN1_OBJECT *otmp;
+    int utype;
+    const unsigned char *cont;
+    unsigned char c;
+    int len;
+    const ASN1_PRIMITIVE_FUNCS *pf;
+    pf = it->funcs;
+    if (pf && pf->prim_i2c)
+        return pf->prim_i2c(pval, cout, putype, it);
+
+    /* Should type be omitted? */
+    if ((it->itype != ASN1_ITYPE_PRIMITIVE)
+        || (it->utype != V_ASN1_BOOLEAN)) {
+        if (!*pval)
+            return -1;
+    }
+
+    if (it->itype == ASN1_ITYPE_MSTRING) {
+        /* If MSTRING type set the underlying type */
+        strtmp = (ASN1_STRING *)*pval;
+        utype = strtmp->type;
+        *putype = utype;
+    } else if (it->utype == V_ASN1_ANY) {
+        /* If ANY set type and pointer to value */
+        ASN1_TYPE *typ;
+        typ = (ASN1_TYPE *)*pval;
+        utype = typ->type;
+        *putype = utype;
+        pval = &typ->value.asn1_value;
+    } else
+        utype = *putype;
+
+    switch (utype) {
+    case V_ASN1_OBJECT:
+        otmp = (ASN1_OBJECT *)*pval;
+        cont = otmp->data;
+        len = otmp->length;
+        if (cont == NULL || len == 0)
+            return -1;
+        break;
+
+    case V_ASN1_NULL:
+        cont = NULL;
+        len = 0;
+        break;
+
+    case V_ASN1_BOOLEAN:
+        tbool = (ASN1_BOOLEAN *)pval;
+        if (*tbool == -1)
+            return -1;
+        if (it->utype != V_ASN1_ANY) {
+            /*
+             * Default handling if value == size field then omit
+             */
+            if (*tbool && (it->size > 0))
+                return -1;
+            if (!*tbool && !it->size)
+                return -1;
+        }
+        c = (unsigned char)*tbool;
+        cont = &c;
+        len = 1;
+        break;
+
+    case V_ASN1_BIT_STRING:
+        return i2c_ASN1_BIT_STRING((ASN1_BIT_STRING *)*pval,
+                                   cout ? &cout : NULL);
+
+    case V_ASN1_INTEGER:
+    case V_ASN1_ENUMERATED:
+        /*
+         * These are all have the same content format as ASN1_INTEGER
+         */
+        return i2c_ASN1_INTEGER((ASN1_INTEGER *)*pval, cout ? &cout : NULL);
+
+    case V_ASN1_OCTET_STRING:
+    case V_ASN1_NUMERICSTRING:
+    case V_ASN1_PRINTABLESTRING:
+    case V_ASN1_T61STRING:
+    case V_ASN1_VIDEOTEXSTRING:
+    case V_ASN1_IA5STRING:
+    case V_ASN1_UTCTIME:
+    case V_ASN1_GENERALIZEDTIME:
+    case V_ASN1_GRAPHICSTRING:
+    case V_ASN1_VISIBLESTRING:
+    case V_ASN1_GENERALSTRING:
+    case V_ASN1_UNIVERSALSTRING:
+    case V_ASN1_BMPSTRING:
+    case V_ASN1_UTF8STRING:
+    case V_ASN1_SEQUENCE:
+    case V_ASN1_SET:
+    default:
+        /* All based on ASN1_STRING and handled the same */
+        strtmp = (ASN1_STRING *)*pval;
+        /* Special handling for NDEF */
+        if ((it->size == ASN1_TFLG_NDEF)
+            && (strtmp->flags & ASN1_STRING_FLAG_NDEF)) {
+            if (cout) {
+                strtmp->data = cout;
+                strtmp->length = 0;
+            }
+            /* Special return code */
+            return -2;
+        }
+        cont = strtmp->data;
+        len = strtmp->length;
+
+        break;
+
+    }
+    if (cout && len)
+        memcpy(cout, cont, len);
+    return len;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_fre.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_fre.c
new file mode 100644
index 000000000..bbce489fe
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_fre.c
@@ -0,0 +1,208 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stddef.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/objects.h>
+#include "asn1_locl.h"
+
+/* Free up an ASN1 structure */
+
+void ASN1_item_free(ASN1_VALUE *val, const ASN1_ITEM *it)
+{
+    asn1_item_embed_free(&val, it, 0);
+}
+
+void ASN1_item_ex_free(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    asn1_item_embed_free(pval, it, 0);
+}
+
+void asn1_item_embed_free(ASN1_VALUE **pval, const ASN1_ITEM *it, int embed)
+{
+    const ASN1_TEMPLATE *tt = NULL, *seqtt;
+    const ASN1_EXTERN_FUNCS *ef;
+    const ASN1_AUX *aux = it->funcs;
+    ASN1_aux_cb *asn1_cb;
+    int i;
+
+    if (!pval)
+        return;
+    if ((it->itype != ASN1_ITYPE_PRIMITIVE) && !*pval)
+        return;
+    if (aux && aux->asn1_cb)
+        asn1_cb = aux->asn1_cb;
+    else
+        asn1_cb = 0;
+
+    switch (it->itype) {
+
+    case ASN1_ITYPE_PRIMITIVE:
+        if (it->templates)
+            asn1_template_free(pval, it->templates);
+        else
+            asn1_primitive_free(pval, it, embed);
+        break;
+
+    case ASN1_ITYPE_MSTRING:
+        asn1_primitive_free(pval, it, embed);
+        break;
+
+    case ASN1_ITYPE_CHOICE:
+        if (asn1_cb) {
+            i = asn1_cb(ASN1_OP_FREE_PRE, pval, it, NULL);
+            if (i == 2)
+                return;
+        }
+        i = asn1_get_choice_selector(pval, it);
+        if ((i >= 0) && (i < it->tcount)) {
+            ASN1_VALUE **pchval;
+
+            tt = it->templates + i;
+            pchval = asn1_get_field_ptr(pval, tt);
+            asn1_template_free(pchval, tt);
+        }
+        if (asn1_cb)
+            asn1_cb(ASN1_OP_FREE_POST, pval, it, NULL);
+        if (embed == 0) {
+            OPENSSL_free(*pval);
+            *pval = NULL;
+        }
+        break;
+
+    case ASN1_ITYPE_EXTERN:
+        ef = it->funcs;
+        if (ef && ef->asn1_ex_free)
+            ef->asn1_ex_free(pval, it);
+        break;
+
+    case ASN1_ITYPE_NDEF_SEQUENCE:
+    case ASN1_ITYPE_SEQUENCE:
+        if (asn1_do_lock(pval, -1, it) != 0) /* if error or ref-counter > 0 */
+            return;
+        if (asn1_cb) {
+            i = asn1_cb(ASN1_OP_FREE_PRE, pval, it, NULL);
+            if (i == 2)
+                return;
+        }
+        asn1_enc_free(pval, it);
+        /*
+         * If we free up as normal we will invalidate any ANY DEFINED BY
+         * field and we won't be able to determine the type of the field it
+         * defines. So free up in reverse order.
+         */
+        tt = it->templates + it->tcount;
+        for (i = 0; i < it->tcount; i++) {
+            ASN1_VALUE **pseqval;
+
+            tt--;
+            seqtt = asn1_do_adb(pval, tt, 0);
+            if (!seqtt)
+                continue;
+            pseqval = asn1_get_field_ptr(pval, seqtt);
+            asn1_template_free(pseqval, seqtt);
+        }
+        if (asn1_cb)
+            asn1_cb(ASN1_OP_FREE_POST, pval, it, NULL);
+        if (embed == 0) {
+            OPENSSL_free(*pval);
+            *pval = NULL;
+        }
+        break;
+    }
+}
+
+void asn1_template_free(ASN1_VALUE **pval, const ASN1_TEMPLATE *tt)
+{
+    int embed = tt->flags & ASN1_TFLG_EMBED;
+    ASN1_VALUE *tval;
+    if (embed) {
+        tval = (ASN1_VALUE *)pval;
+        pval = &tval;
+    }
+    if (tt->flags & ASN1_TFLG_SK_MASK) {
+        STACK_OF(ASN1_VALUE) *sk = (STACK_OF(ASN1_VALUE) *)*pval;
+        int i;
+
+        for (i = 0; i < sk_ASN1_VALUE_num(sk); i++) {
+            ASN1_VALUE *vtmp = sk_ASN1_VALUE_value(sk, i);
+
+            asn1_item_embed_free(&vtmp, ASN1_ITEM_ptr(tt->item), embed);
+        }
+        sk_ASN1_VALUE_free(sk);
+        *pval = NULL;
+    } else {
+        asn1_item_embed_free(pval, ASN1_ITEM_ptr(tt->item), embed);
+    }
+}
+
+void asn1_primitive_free(ASN1_VALUE **pval, const ASN1_ITEM *it, int embed)
+{
+    int utype;
+
+    /* Special case: if 'it' is a primitive with a free_func, use that. */
+    if (it) {
+        const ASN1_PRIMITIVE_FUNCS *pf = it->funcs;
+
+        if (embed) {
+            if (pf && pf->prim_clear) {
+                pf->prim_clear(pval, it);
+                return;
+            }
+        } else if (pf && pf->prim_free) {
+            pf->prim_free(pval, it);
+            return;
+        }
+    }
+
+    /* Special case: if 'it' is NULL, free contents of ASN1_TYPE */
+    if (!it) {
+        ASN1_TYPE *typ = (ASN1_TYPE *)*pval;
+
+        utype = typ->type;
+        pval = &typ->value.asn1_value;
+        if (!*pval)
+            return;
+    } else if (it->itype == ASN1_ITYPE_MSTRING) {
+        utype = -1;
+        if (!*pval)
+            return;
+    } else {
+        utype = it->utype;
+        if ((utype != V_ASN1_BOOLEAN) && !*pval)
+            return;
+    }
+
+    switch (utype) {
+    case V_ASN1_OBJECT:
+        ASN1_OBJECT_free((ASN1_OBJECT *)*pval);
+        break;
+
+    case V_ASN1_BOOLEAN:
+        if (it)
+            *(ASN1_BOOLEAN *)pval = it->size;
+        else
+            *(ASN1_BOOLEAN *)pval = -1;
+        return;
+
+    case V_ASN1_NULL:
+        break;
+
+    case V_ASN1_ANY:
+        asn1_primitive_free(pval, NULL, 0);
+        OPENSSL_free(*pval);
+        break;
+
+    default:
+        asn1_string_embed_free((ASN1_STRING *)*pval, embed);
+        break;
+    }
+    *pval = NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_new.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_new.c
new file mode 100644
index 000000000..6b8ea8ddd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_new.c
@@ -0,0 +1,349 @@
+/*
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stddef.h>
+#include <openssl/asn1.h>
+#include <openssl/objects.h>
+#include <openssl/err.h>
+#include <openssl/asn1t.h>
+#include <string.h>
+#include "asn1_locl.h"
+
+static int asn1_item_embed_new(ASN1_VALUE **pval, const ASN1_ITEM *it,
+                               int embed);
+static int asn1_primitive_new(ASN1_VALUE **pval, const ASN1_ITEM *it,
+                              int embed);
+static void asn1_item_clear(ASN1_VALUE **pval, const ASN1_ITEM *it);
+static int asn1_template_new(ASN1_VALUE **pval, const ASN1_TEMPLATE *tt);
+static void asn1_template_clear(ASN1_VALUE **pval, const ASN1_TEMPLATE *tt);
+static void asn1_primitive_clear(ASN1_VALUE **pval, const ASN1_ITEM *it);
+
+ASN1_VALUE *ASN1_item_new(const ASN1_ITEM *it)
+{
+    ASN1_VALUE *ret = NULL;
+    if (ASN1_item_ex_new(&ret, it) > 0)
+        return ret;
+    return NULL;
+}
+
+/* Allocate an ASN1 structure */
+
+int ASN1_item_ex_new(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    return asn1_item_embed_new(pval, it, 0);
+}
+
+int asn1_item_embed_new(ASN1_VALUE **pval, const ASN1_ITEM *it, int embed)
+{
+    const ASN1_TEMPLATE *tt = NULL;
+    const ASN1_EXTERN_FUNCS *ef;
+    const ASN1_AUX *aux = it->funcs;
+    ASN1_aux_cb *asn1_cb;
+    ASN1_VALUE **pseqval;
+    int i;
+    if (aux && aux->asn1_cb)
+        asn1_cb = aux->asn1_cb;
+    else
+        asn1_cb = 0;
+
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+    OPENSSL_mem_debug_push(it->sname ? it->sname : "asn1_item_embed_new");
+#endif
+
+    switch (it->itype) {
+
+    case ASN1_ITYPE_EXTERN:
+        ef = it->funcs;
+        if (ef && ef->asn1_ex_new) {
+            if (!ef->asn1_ex_new(pval, it))
+                goto memerr;
+        }
+        break;
+
+    case ASN1_ITYPE_PRIMITIVE:
+        if (it->templates) {
+            if (!asn1_template_new(pval, it->templates))
+                goto memerr;
+        } else if (!asn1_primitive_new(pval, it, embed))
+            goto memerr;
+        break;
+
+    case ASN1_ITYPE_MSTRING:
+        if (!asn1_primitive_new(pval, it, embed))
+            goto memerr;
+        break;
+
+    case ASN1_ITYPE_CHOICE:
+        if (asn1_cb) {
+            i = asn1_cb(ASN1_OP_NEW_PRE, pval, it, NULL);
+            if (!i)
+                goto auxerr;
+            if (i == 2) {
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+                OPENSSL_mem_debug_pop();
+#endif
+                return 1;
+            }
+        }
+        if (embed) {
+            memset(*pval, 0, it->size);
+        } else {
+            *pval = OPENSSL_zalloc(it->size);
+            if (*pval == NULL)
+                goto memerr;
+        }
+        asn1_set_choice_selector(pval, -1, it);
+        if (asn1_cb && !asn1_cb(ASN1_OP_NEW_POST, pval, it, NULL))
+            goto auxerr2;
+        break;
+
+    case ASN1_ITYPE_NDEF_SEQUENCE:
+    case ASN1_ITYPE_SEQUENCE:
+        if (asn1_cb) {
+            i = asn1_cb(ASN1_OP_NEW_PRE, pval, it, NULL);
+            if (!i)
+                goto auxerr;
+            if (i == 2) {
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+                OPENSSL_mem_debug_pop();
+#endif
+                return 1;
+            }
+        }
+        if (embed) {
+            memset(*pval, 0, it->size);
+        } else {
+            *pval = OPENSSL_zalloc(it->size);
+            if (*pval == NULL)
+                goto memerr;
+        }
+        /* 0 : init. lock */
+        if (asn1_do_lock(pval, 0, it) < 0) {
+            if (!embed) {
+                OPENSSL_free(*pval);
+                *pval = NULL;
+            }
+            goto memerr;
+        }
+        asn1_enc_init(pval, it);
+        for (i = 0, tt = it->templates; i < it->tcount; tt++, i++) {
+            pseqval = asn1_get_field_ptr(pval, tt);
+            if (!asn1_template_new(pseqval, tt))
+                goto memerr2;
+        }
+        if (asn1_cb && !asn1_cb(ASN1_OP_NEW_POST, pval, it, NULL))
+            goto auxerr2;
+        break;
+    }
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+    OPENSSL_mem_debug_pop();
+#endif
+    return 1;
+
+ memerr2:
+    asn1_item_embed_free(pval, it, embed);
+ memerr:
+    ASN1err(ASN1_F_ASN1_ITEM_EMBED_NEW, ERR_R_MALLOC_FAILURE);
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+    OPENSSL_mem_debug_pop();
+#endif
+    return 0;
+
+ auxerr2:
+    asn1_item_embed_free(pval, it, embed);
+ auxerr:
+    ASN1err(ASN1_F_ASN1_ITEM_EMBED_NEW, ASN1_R_AUX_ERROR);
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+    OPENSSL_mem_debug_pop();
+#endif
+    return 0;
+
+}
+
+static void asn1_item_clear(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    const ASN1_EXTERN_FUNCS *ef;
+
+    switch (it->itype) {
+
+    case ASN1_ITYPE_EXTERN:
+        ef = it->funcs;
+        if (ef && ef->asn1_ex_clear)
+            ef->asn1_ex_clear(pval, it);
+        else
+            *pval = NULL;
+        break;
+
+    case ASN1_ITYPE_PRIMITIVE:
+        if (it->templates)
+            asn1_template_clear(pval, it->templates);
+        else
+            asn1_primitive_clear(pval, it);
+        break;
+
+    case ASN1_ITYPE_MSTRING:
+        asn1_primitive_clear(pval, it);
+        break;
+
+    case ASN1_ITYPE_CHOICE:
+    case ASN1_ITYPE_SEQUENCE:
+    case ASN1_ITYPE_NDEF_SEQUENCE:
+        *pval = NULL;
+        break;
+    }
+}
+
+static int asn1_template_new(ASN1_VALUE **pval, const ASN1_TEMPLATE *tt)
+{
+    const ASN1_ITEM *it = ASN1_ITEM_ptr(tt->item);
+    int embed = tt->flags & ASN1_TFLG_EMBED;
+    ASN1_VALUE *tval;
+    int ret;
+    if (embed) {
+        tval = (ASN1_VALUE *)pval;
+        pval = &tval;
+    }
+    if (tt->flags & ASN1_TFLG_OPTIONAL) {
+        asn1_template_clear(pval, tt);
+        return 1;
+    }
+    /* If ANY DEFINED BY nothing to do */
+
+    if (tt->flags & ASN1_TFLG_ADB_MASK) {
+        *pval = NULL;
+        return 1;
+    }
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+    OPENSSL_mem_debug_push(tt->field_name
+            ? tt->field_name : "asn1_template_new");
+#endif
+    /* If SET OF or SEQUENCE OF, its a STACK */
+    if (tt->flags & ASN1_TFLG_SK_MASK) {
+        STACK_OF(ASN1_VALUE) *skval;
+        skval = sk_ASN1_VALUE_new_null();
+        if (!skval) {
+            ASN1err(ASN1_F_ASN1_TEMPLATE_NEW, ERR_R_MALLOC_FAILURE);
+            ret = 0;
+            goto done;
+        }
+        *pval = (ASN1_VALUE *)skval;
+        ret = 1;
+        goto done;
+    }
+    /* Otherwise pass it back to the item routine */
+    ret = asn1_item_embed_new(pval, it, embed);
+ done:
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+    OPENSSL_mem_debug_pop();
+#endif
+    return ret;
+}
+
+static void asn1_template_clear(ASN1_VALUE **pval, const ASN1_TEMPLATE *tt)
+{
+    /* If ADB or STACK just NULL the field */
+    if (tt->flags & (ASN1_TFLG_ADB_MASK | ASN1_TFLG_SK_MASK))
+        *pval = NULL;
+    else
+        asn1_item_clear(pval, ASN1_ITEM_ptr(tt->item));
+}
+
+/*
+ * NB: could probably combine most of the real XXX_new() behaviour and junk
+ * all the old functions.
+ */
+
+static int asn1_primitive_new(ASN1_VALUE **pval, const ASN1_ITEM *it,
+                              int embed)
+{
+    ASN1_TYPE *typ;
+    ASN1_STRING *str;
+    int utype;
+
+    if (!it)
+        return 0;
+
+    if (it->funcs) {
+        const ASN1_PRIMITIVE_FUNCS *pf = it->funcs;
+        if (embed) {
+            if (pf->prim_clear) {
+                pf->prim_clear(pval, it);
+                return 1;
+            }
+        } else if (pf->prim_new) {
+            return pf->prim_new(pval, it);
+        }
+    }
+
+    if (it->itype == ASN1_ITYPE_MSTRING)
+        utype = -1;
+    else
+        utype = it->utype;
+    switch (utype) {
+    case V_ASN1_OBJECT:
+        *pval = (ASN1_VALUE *)OBJ_nid2obj(NID_undef);
+        return 1;
+
+    case V_ASN1_BOOLEAN:
+        *(ASN1_BOOLEAN *)pval = it->size;
+        return 1;
+
+    case V_ASN1_NULL:
+        *pval = (ASN1_VALUE *)1;
+        return 1;
+
+    case V_ASN1_ANY:
+        if ((typ = OPENSSL_malloc(sizeof(*typ))) == NULL) {
+            ASN1err(ASN1_F_ASN1_PRIMITIVE_NEW, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        typ->value.ptr = NULL;
+        typ->type = -1;
+        *pval = (ASN1_VALUE *)typ;
+        break;
+
+    default:
+        if (embed) {
+            str = *(ASN1_STRING **)pval;
+            memset(str, 0, sizeof(*str));
+            str->type = utype;
+            str->flags = ASN1_STRING_FLAG_EMBED;
+        } else {
+            str = ASN1_STRING_type_new(utype);
+            *pval = (ASN1_VALUE *)str;
+        }
+        if (it->itype == ASN1_ITYPE_MSTRING && str)
+            str->flags |= ASN1_STRING_FLAG_MSTRING;
+        break;
+    }
+    if (*pval)
+        return 1;
+    return 0;
+}
+
+static void asn1_primitive_clear(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    int utype;
+    if (it && it->funcs) {
+        const ASN1_PRIMITIVE_FUNCS *pf = it->funcs;
+        if (pf->prim_clear)
+            pf->prim_clear(pval, it);
+        else
+            *pval = NULL;
+        return;
+    }
+    if (!it || (it->itype == ASN1_ITYPE_MSTRING))
+        utype = -1;
+    else
+        utype = it->utype;
+    if (utype == V_ASN1_BOOLEAN)
+        *(ASN1_BOOLEAN *)pval = it->size;
+    else
+        *pval = NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_prn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_prn.c
new file mode 100644
index 000000000..1fb66f106
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_prn.c
@@ -0,0 +1,539 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stddef.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/objects.h>
+#include <openssl/buffer.h>
+#include <openssl/err.h>
+#include <openssl/x509v3.h>
+#include "internal/asn1_int.h"
+#include "asn1_locl.h"
+
+/*
+ * Print routines.
+ */
+
+/* ASN1_PCTX routines */
+
+static ASN1_PCTX default_pctx = {
+    ASN1_PCTX_FLAGS_SHOW_ABSENT, /* flags */
+    0,                          /* nm_flags */
+    0,                          /* cert_flags */
+    0,                          /* oid_flags */
+    0                           /* str_flags */
+};
+
+ASN1_PCTX *ASN1_PCTX_new(void)
+{
+    ASN1_PCTX *ret;
+
+    ret = OPENSSL_zalloc(sizeof(*ret));
+    if (ret == NULL) {
+        ASN1err(ASN1_F_ASN1_PCTX_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    return ret;
+}
+
+void ASN1_PCTX_free(ASN1_PCTX *p)
+{
+    OPENSSL_free(p);
+}
+
+unsigned long ASN1_PCTX_get_flags(const ASN1_PCTX *p)
+{
+    return p->flags;
+}
+
+void ASN1_PCTX_set_flags(ASN1_PCTX *p, unsigned long flags)
+{
+    p->flags = flags;
+}
+
+unsigned long ASN1_PCTX_get_nm_flags(const ASN1_PCTX *p)
+{
+    return p->nm_flags;
+}
+
+void ASN1_PCTX_set_nm_flags(ASN1_PCTX *p, unsigned long flags)
+{
+    p->nm_flags = flags;
+}
+
+unsigned long ASN1_PCTX_get_cert_flags(const ASN1_PCTX *p)
+{
+    return p->cert_flags;
+}
+
+void ASN1_PCTX_set_cert_flags(ASN1_PCTX *p, unsigned long flags)
+{
+    p->cert_flags = flags;
+}
+
+unsigned long ASN1_PCTX_get_oid_flags(const ASN1_PCTX *p)
+{
+    return p->oid_flags;
+}
+
+void ASN1_PCTX_set_oid_flags(ASN1_PCTX *p, unsigned long flags)
+{
+    p->oid_flags = flags;
+}
+
+unsigned long ASN1_PCTX_get_str_flags(const ASN1_PCTX *p)
+{
+    return p->str_flags;
+}
+
+void ASN1_PCTX_set_str_flags(ASN1_PCTX *p, unsigned long flags)
+{
+    p->str_flags = flags;
+}
+
+/* Main print routines */
+
+static int asn1_item_print_ctx(BIO *out, ASN1_VALUE **fld, int indent,
+                               const ASN1_ITEM *it,
+                               const char *fname, const char *sname,
+                               int nohdr, const ASN1_PCTX *pctx);
+
+static int asn1_template_print_ctx(BIO *out, ASN1_VALUE **fld, int indent,
+                            const ASN1_TEMPLATE *tt, const ASN1_PCTX *pctx);
+
+static int asn1_primitive_print(BIO *out, ASN1_VALUE **fld,
+                                const ASN1_ITEM *it, int indent,
+                                const char *fname, const char *sname,
+                                const ASN1_PCTX *pctx);
+
+static int asn1_print_fsname(BIO *out, int indent,
+                             const char *fname, const char *sname,
+                             const ASN1_PCTX *pctx);
+
+int ASN1_item_print(BIO *out, ASN1_VALUE *ifld, int indent,
+                    const ASN1_ITEM *it, const ASN1_PCTX *pctx)
+{
+    const char *sname;
+    if (pctx == NULL)
+        pctx = &default_pctx;
+    if (pctx->flags & ASN1_PCTX_FLAGS_NO_STRUCT_NAME)
+        sname = NULL;
+    else
+        sname = it->sname;
+    return asn1_item_print_ctx(out, &ifld, indent, it, NULL, sname, 0, pctx);
+}
+
+static int asn1_item_print_ctx(BIO *out, ASN1_VALUE **fld, int indent,
+                               const ASN1_ITEM *it,
+                               const char *fname, const char *sname,
+                               int nohdr, const ASN1_PCTX *pctx)
+{
+    const ASN1_TEMPLATE *tt;
+    const ASN1_EXTERN_FUNCS *ef;
+    ASN1_VALUE **tmpfld;
+    const ASN1_AUX *aux = it->funcs;
+    ASN1_aux_cb *asn1_cb;
+    ASN1_PRINT_ARG parg;
+    int i;
+    if (aux && aux->asn1_cb) {
+        parg.out = out;
+        parg.indent = indent;
+        parg.pctx = pctx;
+        asn1_cb = aux->asn1_cb;
+    } else
+        asn1_cb = 0;
+
+   if (((it->itype != ASN1_ITYPE_PRIMITIVE)
+       || (it->utype != V_ASN1_BOOLEAN)) && *fld == NULL) {
+        if (pctx->flags & ASN1_PCTX_FLAGS_SHOW_ABSENT) {
+            if (!nohdr && !asn1_print_fsname(out, indent, fname, sname, pctx))
+                return 0;
+            if (BIO_puts(out, "<ABSENT>\n") <= 0)
+                return 0;
+        }
+        return 1;
+    }
+
+    switch (it->itype) {
+    case ASN1_ITYPE_PRIMITIVE:
+        if (it->templates) {
+            if (!asn1_template_print_ctx(out, fld, indent,
+                                         it->templates, pctx))
+                return 0;
+            break;
+        }
+        /* fall through */
+    case ASN1_ITYPE_MSTRING:
+        if (!asn1_primitive_print(out, fld, it, indent, fname, sname, pctx))
+            return 0;
+        break;
+
+    case ASN1_ITYPE_EXTERN:
+        if (!nohdr && !asn1_print_fsname(out, indent, fname, sname, pctx))
+            return 0;
+        /* Use new style print routine if possible */
+        ef = it->funcs;
+        if (ef && ef->asn1_ex_print) {
+            i = ef->asn1_ex_print(out, fld, indent, "", pctx);
+            if (!i)
+                return 0;
+            if ((i == 2) && (BIO_puts(out, "\n") <= 0))
+                return 0;
+            return 1;
+        } else if (sname &&
+                   BIO_printf(out, ":EXTERNAL TYPE %s\n", sname) <= 0)
+            return 0;
+        break;
+
+    case ASN1_ITYPE_CHOICE:
+        /* CHOICE type, get selector */
+        i = asn1_get_choice_selector(fld, it);
+        /* This should never happen... */
+        if ((i < 0) || (i >= it->tcount)) {
+            if (BIO_printf(out, "ERROR: selector [%d] invalid\n", i) <= 0)
+                return 0;
+            return 1;
+        }
+        tt = it->templates + i;
+        tmpfld = asn1_get_field_ptr(fld, tt);
+        if (!asn1_template_print_ctx(out, tmpfld, indent, tt, pctx))
+            return 0;
+        break;
+
+    case ASN1_ITYPE_SEQUENCE:
+    case ASN1_ITYPE_NDEF_SEQUENCE:
+        if (!nohdr && !asn1_print_fsname(out, indent, fname, sname, pctx))
+            return 0;
+        if (fname || sname) {
+            if (pctx->flags & ASN1_PCTX_FLAGS_SHOW_SEQUENCE) {
+                if (BIO_puts(out, " {\n") <= 0)
+                    return 0;
+            } else {
+                if (BIO_puts(out, "\n") <= 0)
+                    return 0;
+            }
+        }
+
+        if (asn1_cb) {
+            i = asn1_cb(ASN1_OP_PRINT_PRE, fld, it, &parg);
+            if (i == 0)
+                return 0;
+            if (i == 2)
+                return 1;
+        }
+
+        /* Print each field entry */
+        for (i = 0, tt = it->templates; i < it->tcount; i++, tt++) {
+            const ASN1_TEMPLATE *seqtt;
+            seqtt = asn1_do_adb(fld, tt, 1);
+            if (!seqtt)
+                return 0;
+            tmpfld = asn1_get_field_ptr(fld, seqtt);
+            if (!asn1_template_print_ctx(out, tmpfld,
+                                         indent + 2, seqtt, pctx))
+                return 0;
+        }
+        if (pctx->flags & ASN1_PCTX_FLAGS_SHOW_SEQUENCE) {
+            if (BIO_printf(out, "%*s}\n", indent, "") < 0)
+                return 0;
+        }
+
+        if (asn1_cb) {
+            i = asn1_cb(ASN1_OP_PRINT_POST, fld, it, &parg);
+            if (i == 0)
+                return 0;
+        }
+        break;
+
+    default:
+        BIO_printf(out, "Unprocessed type %d\n", it->itype);
+        return 0;
+    }
+
+    return 1;
+}
+
+static int asn1_template_print_ctx(BIO *out, ASN1_VALUE **fld, int indent,
+                            const ASN1_TEMPLATE *tt, const ASN1_PCTX *pctx)
+{
+    int i, flags;
+    const char *sname, *fname;
+    ASN1_VALUE *tfld;
+    flags = tt->flags;
+    if (pctx->flags & ASN1_PCTX_FLAGS_SHOW_FIELD_STRUCT_NAME)
+        sname = ASN1_ITEM_ptr(tt->item)->sname;
+    else
+        sname = NULL;
+    if (pctx->flags & ASN1_PCTX_FLAGS_NO_FIELD_NAME)
+        fname = NULL;
+    else
+        fname = tt->field_name;
+
+    /*
+     * If field is embedded then fld needs fixing so it is a pointer to
+     * a pointer to a field.
+     */
+    if (flags & ASN1_TFLG_EMBED) {
+        tfld = (ASN1_VALUE *)fld;
+        fld = &tfld;
+    }
+
+    if (flags & ASN1_TFLG_SK_MASK) {
+        char *tname;
+        ASN1_VALUE *skitem;
+        STACK_OF(ASN1_VALUE) *stack;
+
+        /* SET OF, SEQUENCE OF */
+        if (fname) {
+            if (pctx->flags & ASN1_PCTX_FLAGS_SHOW_SSOF) {
+                if (flags & ASN1_TFLG_SET_OF)
+                    tname = "SET";
+                else
+                    tname = "SEQUENCE";
+                if (BIO_printf(out, "%*s%s OF %s {\n",
+                               indent, "", tname, tt->field_name) <= 0)
+                    return 0;
+            } else if (BIO_printf(out, "%*s%s:\n", indent, "", fname) <= 0)
+                return 0;
+        }
+        stack = (STACK_OF(ASN1_VALUE) *)*fld;
+        for (i = 0; i < sk_ASN1_VALUE_num(stack); i++) {
+            if ((i > 0) && (BIO_puts(out, "\n") <= 0))
+                return 0;
+
+            skitem = sk_ASN1_VALUE_value(stack, i);
+            if (!asn1_item_print_ctx(out, &skitem, indent + 2,
+                                     ASN1_ITEM_ptr(tt->item), NULL, NULL, 1,
+                                     pctx))
+                return 0;
+        }
+        if (i == 0 && BIO_printf(out, "%*s<%s>\n", indent + 2, "",
+                                 stack == NULL ? "ABSENT" : "EMPTY") <= 0)
+            return 0;
+        if (pctx->flags & ASN1_PCTX_FLAGS_SHOW_SEQUENCE) {
+            if (BIO_printf(out, "%*s}\n", indent, "") <= 0)
+                return 0;
+        }
+        return 1;
+    }
+    return asn1_item_print_ctx(out, fld, indent, ASN1_ITEM_ptr(tt->item),
+                               fname, sname, 0, pctx);
+}
+
+static int asn1_print_fsname(BIO *out, int indent,
+                             const char *fname, const char *sname,
+                             const ASN1_PCTX *pctx)
+{
+    static const char spaces[] = "                    ";
+    static const int nspaces = sizeof(spaces) - 1;
+
+    while (indent > nspaces) {
+        if (BIO_write(out, spaces, nspaces) != nspaces)
+            return 0;
+        indent -= nspaces;
+    }
+    if (BIO_write(out, spaces, indent) != indent)
+        return 0;
+    if (pctx->flags & ASN1_PCTX_FLAGS_NO_STRUCT_NAME)
+        sname = NULL;
+    if (pctx->flags & ASN1_PCTX_FLAGS_NO_FIELD_NAME)
+        fname = NULL;
+    if (!sname && !fname)
+        return 1;
+    if (fname) {
+        if (BIO_puts(out, fname) <= 0)
+            return 0;
+    }
+    if (sname) {
+        if (fname) {
+            if (BIO_printf(out, " (%s)", sname) <= 0)
+                return 0;
+        } else {
+            if (BIO_puts(out, sname) <= 0)
+                return 0;
+        }
+    }
+    if (BIO_write(out, ": ", 2) != 2)
+        return 0;
+    return 1;
+}
+
+static int asn1_print_boolean(BIO *out, int boolval)
+{
+    const char *str;
+    switch (boolval) {
+    case -1:
+        str = "BOOL ABSENT";
+        break;
+
+    case 0:
+        str = "FALSE";
+        break;
+
+    default:
+        str = "TRUE";
+        break;
+
+    }
+
+    if (BIO_puts(out, str) <= 0)
+        return 0;
+    return 1;
+
+}
+
+static int asn1_print_integer(BIO *out, const ASN1_INTEGER *str)
+{
+    char *s;
+    int ret = 1;
+    s = i2s_ASN1_INTEGER(NULL, str);
+    if (s == NULL)
+        return 0;
+    if (BIO_puts(out, s) <= 0)
+        ret = 0;
+    OPENSSL_free(s);
+    return ret;
+}
+
+static int asn1_print_oid(BIO *out, const ASN1_OBJECT *oid)
+{
+    char objbuf[80];
+    const char *ln;
+    ln = OBJ_nid2ln(OBJ_obj2nid(oid));
+    if (!ln)
+        ln = "";
+    OBJ_obj2txt(objbuf, sizeof(objbuf), oid, 1);
+    if (BIO_printf(out, "%s (%s)", ln, objbuf) <= 0)
+        return 0;
+    return 1;
+}
+
+static int asn1_print_obstring(BIO *out, const ASN1_STRING *str, int indent)
+{
+    if (str->type == V_ASN1_BIT_STRING) {
+        if (BIO_printf(out, " (%ld unused bits)\n", str->flags & 0x7) <= 0)
+            return 0;
+    } else if (BIO_puts(out, "\n") <= 0)
+        return 0;
+    if ((str->length > 0)
+        && BIO_dump_indent(out, (const char *)str->data, str->length,
+                           indent + 2) <= 0)
+        return 0;
+    return 1;
+}
+
+static int asn1_primitive_print(BIO *out, ASN1_VALUE **fld,
+                                const ASN1_ITEM *it, int indent,
+                                const char *fname, const char *sname,
+                                const ASN1_PCTX *pctx)
+{
+    long utype;
+    ASN1_STRING *str;
+    int ret = 1, needlf = 1;
+    const char *pname;
+    const ASN1_PRIMITIVE_FUNCS *pf;
+    pf = it->funcs;
+    if (!asn1_print_fsname(out, indent, fname, sname, pctx))
+        return 0;
+    if (pf && pf->prim_print)
+        return pf->prim_print(out, fld, it, indent, pctx);
+    if (it->itype == ASN1_ITYPE_MSTRING) {
+        str = (ASN1_STRING *)*fld;
+        utype = str->type & ~V_ASN1_NEG;
+    } else {
+        utype = it->utype;
+        if (utype == V_ASN1_BOOLEAN)
+            str = NULL;
+        else
+            str = (ASN1_STRING *)*fld;
+    }
+    if (utype == V_ASN1_ANY) {
+        ASN1_TYPE *atype = (ASN1_TYPE *)*fld;
+        utype = atype->type;
+        fld = &atype->value.asn1_value;
+        str = (ASN1_STRING *)*fld;
+        if (pctx->flags & ASN1_PCTX_FLAGS_NO_ANY_TYPE)
+            pname = NULL;
+        else
+            pname = ASN1_tag2str(utype);
+    } else {
+        if (pctx->flags & ASN1_PCTX_FLAGS_SHOW_TYPE)
+            pname = ASN1_tag2str(utype);
+        else
+            pname = NULL;
+    }
+
+    if (utype == V_ASN1_NULL) {
+        if (BIO_puts(out, "NULL\n") <= 0)
+            return 0;
+        return 1;
+    }
+
+    if (pname) {
+        if (BIO_puts(out, pname) <= 0)
+            return 0;
+        if (BIO_puts(out, ":") <= 0)
+            return 0;
+    }
+
+    switch (utype) {
+    case V_ASN1_BOOLEAN:
+        {
+            int boolval = *(int *)fld;
+            if (boolval == -1)
+                boolval = it->size;
+            ret = asn1_print_boolean(out, boolval);
+        }
+        break;
+
+    case V_ASN1_INTEGER:
+    case V_ASN1_ENUMERATED:
+        ret = asn1_print_integer(out, str);
+        break;
+
+    case V_ASN1_UTCTIME:
+        ret = ASN1_UTCTIME_print(out, str);
+        break;
+
+    case V_ASN1_GENERALIZEDTIME:
+        ret = ASN1_GENERALIZEDTIME_print(out, str);
+        break;
+
+    case V_ASN1_OBJECT:
+        ret = asn1_print_oid(out, (const ASN1_OBJECT *)*fld);
+        break;
+
+    case V_ASN1_OCTET_STRING:
+    case V_ASN1_BIT_STRING:
+        ret = asn1_print_obstring(out, str, indent);
+        needlf = 0;
+        break;
+
+    case V_ASN1_SEQUENCE:
+    case V_ASN1_SET:
+    case V_ASN1_OTHER:
+        if (BIO_puts(out, "\n") <= 0)
+            return 0;
+        if (ASN1_parse_dump(out, str->data, str->length, indent, 0) <= 0)
+            ret = 0;
+        needlf = 0;
+        break;
+
+    default:
+        ret = ASN1_STRING_print_ex(out, str, pctx->str_flags);
+
+    }
+    if (!ret)
+        return 0;
+    if (needlf && BIO_puts(out, "\n") <= 0)
+        return 0;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_scn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_scn.c
new file mode 100644
index 000000000..e1df2cfca
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_scn.c
@@ -0,0 +1,65 @@
+/*
+ * Copyright 2010-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stddef.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/objects.h>
+#include <openssl/buffer.h>
+#include <openssl/err.h>
+#include <openssl/x509v3.h>
+#include "asn1_locl.h"
+
+/*
+ * General ASN1 structure recursive scanner: iterate through all fields
+ * passing details to a callback.
+ */
+
+ASN1_SCTX *ASN1_SCTX_new(int (*scan_cb) (ASN1_SCTX *ctx))
+{
+    ASN1_SCTX *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        ASN1err(ASN1_F_ASN1_SCTX_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    ret->scan_cb = scan_cb;
+    return ret;
+}
+
+void ASN1_SCTX_free(ASN1_SCTX *p)
+{
+    OPENSSL_free(p);
+}
+
+const ASN1_ITEM *ASN1_SCTX_get_item(ASN1_SCTX *p)
+{
+    return p->it;
+}
+
+const ASN1_TEMPLATE *ASN1_SCTX_get_template(ASN1_SCTX *p)
+{
+    return p->tt;
+}
+
+unsigned long ASN1_SCTX_get_flags(ASN1_SCTX *p)
+{
+    return p->flags;
+}
+
+void ASN1_SCTX_set_app_data(ASN1_SCTX *p, void *data)
+{
+    p->app_data = data;
+}
+
+void *ASN1_SCTX_get_app_data(ASN1_SCTX *p)
+{
+    return p->app_data;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_typ.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_typ.c
new file mode 100644
index 000000000..98d987901
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_typ.c
@@ -0,0 +1,84 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+
+/* Declarations for string types */
+
+#define IMPLEMENT_ASN1_STRING_FUNCTIONS(sname) \
+    IMPLEMENT_ASN1_TYPE(sname) \
+    IMPLEMENT_ASN1_ENCODE_FUNCTIONS_fname(sname, sname, sname) \
+sname *sname##_new(void) \
+{ \
+    return ASN1_STRING_type_new(V_##sname); \
+} \
+void sname##_free(sname *x) \
+{ \
+    ASN1_STRING_free(x); \
+}
+
+IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_OCTET_STRING)
+IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_INTEGER)
+IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_ENUMERATED)
+IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_BIT_STRING)
+IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_UTF8STRING)
+IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_PRINTABLESTRING)
+IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_T61STRING)
+IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_IA5STRING)
+IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_GENERALSTRING)
+IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_UTCTIME)
+IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_GENERALIZEDTIME)
+IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_VISIBLESTRING)
+IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_UNIVERSALSTRING)
+IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_BMPSTRING)
+
+IMPLEMENT_ASN1_TYPE(ASN1_NULL)
+IMPLEMENT_ASN1_FUNCTIONS(ASN1_NULL)
+
+IMPLEMENT_ASN1_TYPE(ASN1_OBJECT)
+
+IMPLEMENT_ASN1_TYPE(ASN1_ANY)
+
+/* Just swallow an ASN1_SEQUENCE in an ASN1_STRING */
+IMPLEMENT_ASN1_TYPE(ASN1_SEQUENCE)
+
+IMPLEMENT_ASN1_FUNCTIONS_fname(ASN1_TYPE, ASN1_ANY, ASN1_TYPE)
+
+/* Multistring types */
+
+IMPLEMENT_ASN1_MSTRING(ASN1_PRINTABLE, B_ASN1_PRINTABLE)
+IMPLEMENT_ASN1_FUNCTIONS_name(ASN1_STRING, ASN1_PRINTABLE)
+
+IMPLEMENT_ASN1_MSTRING(DISPLAYTEXT, B_ASN1_DISPLAYTEXT)
+IMPLEMENT_ASN1_FUNCTIONS_name(ASN1_STRING, DISPLAYTEXT)
+
+IMPLEMENT_ASN1_MSTRING(DIRECTORYSTRING, B_ASN1_DIRECTORYSTRING)
+IMPLEMENT_ASN1_FUNCTIONS_name(ASN1_STRING, DIRECTORYSTRING)
+
+/* Three separate BOOLEAN type: normal, DEFAULT TRUE and DEFAULT FALSE */
+IMPLEMENT_ASN1_TYPE_ex(ASN1_BOOLEAN, ASN1_BOOLEAN, -1)
+IMPLEMENT_ASN1_TYPE_ex(ASN1_TBOOLEAN, ASN1_BOOLEAN, 1)
+IMPLEMENT_ASN1_TYPE_ex(ASN1_FBOOLEAN, ASN1_BOOLEAN, 0)
+
+/* Special, OCTET STRING with indefinite length constructed support */
+
+IMPLEMENT_ASN1_TYPE_ex(ASN1_OCTET_STRING_NDEF, ASN1_OCTET_STRING, ASN1_TFLG_NDEF)
+
+ASN1_ITEM_TEMPLATE(ASN1_SEQUENCE_ANY) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, ASN1_SEQUENCE_ANY, ASN1_ANY)
+ASN1_ITEM_TEMPLATE_END(ASN1_SEQUENCE_ANY)
+
+ASN1_ITEM_TEMPLATE(ASN1_SET_ANY) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SET_OF, 0, ASN1_SET_ANY, ASN1_ANY)
+ASN1_ITEM_TEMPLATE_END(ASN1_SET_ANY)
+
+IMPLEMENT_ASN1_ENCODE_FUNCTIONS_const_fname(ASN1_SEQUENCE_ANY, ASN1_SEQUENCE_ANY, ASN1_SEQUENCE_ANY)
+IMPLEMENT_ASN1_ENCODE_FUNCTIONS_const_fname(ASN1_SEQUENCE_ANY, ASN1_SET_ANY, ASN1_SET_ANY)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_utl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_utl.c
new file mode 100644
index 000000000..7ceecffce
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tasn_utl.c
@@ -0,0 +1,253 @@
+/*
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stddef.h>
+#include <string.h>
+#include "internal/cryptlib.h"
+#include "internal/refcount.h"
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/objects.h>
+#include <openssl/err.h>
+#include "asn1_locl.h"
+
+/* Utility functions for manipulating fields and offsets */
+
+/* Add 'offset' to 'addr' */
+#define offset2ptr(addr, offset) (void *)(((char *) addr) + offset)
+
+/*
+ * Given an ASN1_ITEM CHOICE type return the selector value
+ */
+
+int asn1_get_choice_selector(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    int *sel = offset2ptr(*pval, it->utype);
+    return *sel;
+}
+
+/*
+ * Given an ASN1_ITEM CHOICE type set the selector value, return old value.
+ */
+
+int asn1_set_choice_selector(ASN1_VALUE **pval, int value,
+                             const ASN1_ITEM *it)
+{
+    int *sel, ret;
+    sel = offset2ptr(*pval, it->utype);
+    ret = *sel;
+    *sel = value;
+    return ret;
+}
+
+/*
+ * Do atomic reference counting. The value 'op' decides what to do.
+ * If it is +1 then the count is incremented.
+ * If |op| is 0, lock is initialised and count is set to 1.
+ * If |op| is -1, count is decremented and the return value is the current
+ * reference count or 0 if no reference count is active.
+ * It returns -1 on initialisation error.
+ * Used by ASN1_SEQUENCE construct of X509, X509_REQ, X509_CRL objects
+ */
+int asn1_do_lock(ASN1_VALUE **pval, int op, const ASN1_ITEM *it)
+{
+    const ASN1_AUX *aux;
+    CRYPTO_REF_COUNT *lck;
+    CRYPTO_RWLOCK **lock;
+    int ret = -1;
+
+    if ((it->itype != ASN1_ITYPE_SEQUENCE)
+        && (it->itype != ASN1_ITYPE_NDEF_SEQUENCE))
+        return 0;
+    aux = it->funcs;
+    if (!aux || !(aux->flags & ASN1_AFLG_REFCOUNT))
+        return 0;
+    lck = offset2ptr(*pval, aux->ref_offset);
+    lock = offset2ptr(*pval, aux->ref_lock);
+
+    switch (op) {
+    case 0:
+        *lck = ret = 1;
+        *lock = CRYPTO_THREAD_lock_new();
+        if (*lock == NULL) {
+            ASN1err(ASN1_F_ASN1_DO_LOCK, ERR_R_MALLOC_FAILURE);
+            return -1;
+        }
+        break;
+    case 1:
+        if (!CRYPTO_UP_REF(lck, &ret, *lock))
+            return -1;
+        break;
+    case -1:
+        if (!CRYPTO_DOWN_REF(lck, &ret, *lock))
+            return -1;  /* failed */
+#ifdef REF_PRINT
+        fprintf(stderr, "%p:%4d:%s\n", it, ret, it->sname);
+#endif
+        REF_ASSERT_ISNT(ret < 0);
+        if (ret == 0) {
+            CRYPTO_THREAD_lock_free(*lock);
+            *lock = NULL;
+        }
+        break;
+    }
+
+    return ret;
+}
+
+static ASN1_ENCODING *asn1_get_enc_ptr(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    const ASN1_AUX *aux;
+    if (!pval || !*pval)
+        return NULL;
+    aux = it->funcs;
+    if (!aux || !(aux->flags & ASN1_AFLG_ENCODING))
+        return NULL;
+    return offset2ptr(*pval, aux->enc_offset);
+}
+
+void asn1_enc_init(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    ASN1_ENCODING *enc;
+    enc = asn1_get_enc_ptr(pval, it);
+    if (enc) {
+        enc->enc = NULL;
+        enc->len = 0;
+        enc->modified = 1;
+    }
+}
+
+void asn1_enc_free(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    ASN1_ENCODING *enc;
+    enc = asn1_get_enc_ptr(pval, it);
+    if (enc) {
+        OPENSSL_free(enc->enc);
+        enc->enc = NULL;
+        enc->len = 0;
+        enc->modified = 1;
+    }
+}
+
+int asn1_enc_save(ASN1_VALUE **pval, const unsigned char *in, int inlen,
+                  const ASN1_ITEM *it)
+{
+    ASN1_ENCODING *enc;
+    enc = asn1_get_enc_ptr(pval, it);
+    if (!enc)
+        return 1;
+
+    OPENSSL_free(enc->enc);
+    if ((enc->enc = OPENSSL_malloc(inlen)) == NULL) {
+        ASN1err(ASN1_F_ASN1_ENC_SAVE, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    memcpy(enc->enc, in, inlen);
+    enc->len = inlen;
+    enc->modified = 0;
+
+    return 1;
+}
+
+int asn1_enc_restore(int *len, unsigned char **out, ASN1_VALUE **pval,
+                     const ASN1_ITEM *it)
+{
+    ASN1_ENCODING *enc;
+    enc = asn1_get_enc_ptr(pval, it);
+    if (!enc || enc->modified)
+        return 0;
+    if (out) {
+        memcpy(*out, enc->enc, enc->len);
+        *out += enc->len;
+    }
+    if (len)
+        *len = enc->len;
+    return 1;
+}
+
+/* Given an ASN1_TEMPLATE get a pointer to a field */
+ASN1_VALUE **asn1_get_field_ptr(ASN1_VALUE **pval, const ASN1_TEMPLATE *tt)
+{
+    ASN1_VALUE **pvaltmp;
+    pvaltmp = offset2ptr(*pval, tt->offset);
+    /*
+     * NOTE for BOOLEAN types the field is just a plain int so we can't
+     * return int **, so settle for (int *).
+     */
+    return pvaltmp;
+}
+
+/*
+ * Handle ANY DEFINED BY template, find the selector, look up the relevant
+ * ASN1_TEMPLATE in the table and return it.
+ */
+
+const ASN1_TEMPLATE *asn1_do_adb(ASN1_VALUE **pval, const ASN1_TEMPLATE *tt,
+                                 int nullerr)
+{
+    const ASN1_ADB *adb;
+    const ASN1_ADB_TABLE *atbl;
+    long selector;
+    ASN1_VALUE **sfld;
+    int i;
+    if (!(tt->flags & ASN1_TFLG_ADB_MASK))
+        return tt;
+
+    /* Else ANY DEFINED BY ... get the table */
+    adb = ASN1_ADB_ptr(tt->item);
+
+    /* Get the selector field */
+    sfld = offset2ptr(*pval, adb->offset);
+
+    /* Check if NULL */
+    if (*sfld == NULL) {
+        if (!adb->null_tt)
+            goto err;
+        return adb->null_tt;
+    }
+
+    /*
+     * Convert type to a long: NB: don't check for NID_undef here because it
+     * might be a legitimate value in the table
+     */
+    if (tt->flags & ASN1_TFLG_ADB_OID)
+        selector = OBJ_obj2nid((ASN1_OBJECT *)*sfld);
+    else
+        selector = ASN1_INTEGER_get((ASN1_INTEGER *)*sfld);
+
+    /* Let application callback translate value */
+    if (adb->adb_cb != NULL && adb->adb_cb(&selector) == 0) {
+        ASN1err(ASN1_F_ASN1_DO_ADB, ASN1_R_UNSUPPORTED_ANY_DEFINED_BY_TYPE);
+        return NULL;
+    }
+
+    /*
+     * Try to find matching entry in table Maybe should check application
+     * types first to allow application override? Might also be useful to
+     * have a flag which indicates table is sorted and we can do a binary
+     * search. For now stick to a linear search.
+     */
+
+    for (atbl = adb->tbl, i = 0; i < adb->tblcount; i++, atbl++)
+        if (atbl->value == selector)
+            return &atbl->tt;
+
+    /* FIXME: need to search application table too */
+
+    /* No match, return default type */
+    if (!adb->default_tt)
+        goto err;
+    return adb->default_tt;
+
+ err:
+    /* FIXME: should log the value or OID of unsupported type */
+    if (nullerr)
+        ASN1err(ASN1_F_ASN1_DO_ADB, ASN1_R_UNSUPPORTED_ANY_DEFINED_BY_TYPE);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tbl_standard.h b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tbl_standard.h
new file mode 100644
index 000000000..777a73448
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/tbl_standard.h
@@ -0,0 +1,61 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* size limits: this stuff is taken straight from RFC3280 */
+
+#define ub_name                         32768
+#define ub_common_name                  64
+#define ub_locality_name                128
+#define ub_state_name                   128
+#define ub_organization_name            64
+#define ub_organization_unit_name       64
+#define ub_title                        64
+#define ub_email_address                128
+#define ub_serial_number                64
+
+/* From RFC4524 */
+
+#define ub_rfc822_mailbox               256
+
+/* This table must be kept in NID order */
+
+static const ASN1_STRING_TABLE tbl_standard[] = {
+    {NID_commonName, 1, ub_common_name, DIRSTRING_TYPE, 0},
+    {NID_countryName, 2, 2, B_ASN1_PRINTABLESTRING, STABLE_NO_MASK},
+    {NID_localityName, 1, ub_locality_name, DIRSTRING_TYPE, 0},
+    {NID_stateOrProvinceName, 1, ub_state_name, DIRSTRING_TYPE, 0},
+    {NID_organizationName, 1, ub_organization_name, DIRSTRING_TYPE, 0},
+    {NID_organizationalUnitName, 1, ub_organization_unit_name, DIRSTRING_TYPE,
+     0},
+    {NID_pkcs9_emailAddress, 1, ub_email_address, B_ASN1_IA5STRING,
+     STABLE_NO_MASK},
+    {NID_pkcs9_unstructuredName, 1, -1, PKCS9STRING_TYPE, 0},
+    {NID_pkcs9_challengePassword, 1, -1, PKCS9STRING_TYPE, 0},
+    {NID_pkcs9_unstructuredAddress, 1, -1, DIRSTRING_TYPE, 0},
+    {NID_givenName, 1, ub_name, DIRSTRING_TYPE, 0},
+    {NID_surname, 1, ub_name, DIRSTRING_TYPE, 0},
+    {NID_initials, 1, ub_name, DIRSTRING_TYPE, 0},
+    {NID_serialNumber, 1, ub_serial_number, B_ASN1_PRINTABLESTRING,
+     STABLE_NO_MASK},
+    {NID_friendlyName, -1, -1, B_ASN1_BMPSTRING, STABLE_NO_MASK},
+    {NID_name, 1, ub_name, DIRSTRING_TYPE, 0},
+    {NID_dnQualifier, -1, -1, B_ASN1_PRINTABLESTRING, STABLE_NO_MASK},
+    {NID_domainComponent, 1, -1, B_ASN1_IA5STRING, STABLE_NO_MASK},
+    {NID_ms_csp_name, -1, -1, B_ASN1_BMPSTRING, STABLE_NO_MASK},
+    {NID_rfc822Mailbox, 1, ub_rfc822_mailbox, B_ASN1_IA5STRING,
+     STABLE_NO_MASK},
+    {NID_jurisdictionCountryName, 2, 2, B_ASN1_PRINTABLESTRING, STABLE_NO_MASK},
+    {NID_INN, 1, 12, B_ASN1_NUMERICSTRING, STABLE_NO_MASK},
+    {NID_OGRN, 1, 13, B_ASN1_NUMERICSTRING, STABLE_NO_MASK},
+    {NID_SNILS, 1, 11, B_ASN1_NUMERICSTRING, STABLE_NO_MASK},
+    {NID_countryCode3c, 3, 3, B_ASN1_PRINTABLESTRING, STABLE_NO_MASK},
+    {NID_countryCode3n, 3, 3, B_ASN1_NUMERICSTRING, STABLE_NO_MASK},
+    {NID_dnsName, 0, -1, B_ASN1_UTF8STRING, STABLE_NO_MASK}
+};
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_algor.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_algor.c
new file mode 100644
index 000000000..853d45b8b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_algor.c
@@ -0,0 +1,94 @@
+/*
+ * Copyright 1998-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stddef.h>
+#include <openssl/x509.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include "internal/evp_int.h"
+
+ASN1_SEQUENCE(X509_ALGOR) = {
+        ASN1_SIMPLE(X509_ALGOR, algorithm, ASN1_OBJECT),
+        ASN1_OPT(X509_ALGOR, parameter, ASN1_ANY)
+} ASN1_SEQUENCE_END(X509_ALGOR)
+
+ASN1_ITEM_TEMPLATE(X509_ALGORS) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, algorithms, X509_ALGOR)
+ASN1_ITEM_TEMPLATE_END(X509_ALGORS)
+
+IMPLEMENT_ASN1_FUNCTIONS(X509_ALGOR)
+IMPLEMENT_ASN1_ENCODE_FUNCTIONS_fname(X509_ALGORS, X509_ALGORS, X509_ALGORS)
+IMPLEMENT_ASN1_DUP_FUNCTION(X509_ALGOR)
+
+int X509_ALGOR_set0(X509_ALGOR *alg, ASN1_OBJECT *aobj, int ptype, void *pval)
+{
+    if (alg == NULL)
+        return 0;
+
+    if (ptype != V_ASN1_UNDEF) {
+        if (alg->parameter == NULL)
+            alg->parameter = ASN1_TYPE_new();
+        if (alg->parameter == NULL)
+            return 0;
+    }
+
+    ASN1_OBJECT_free(alg->algorithm);
+    alg->algorithm = aobj;
+
+    if (ptype == 0)
+        return 1;
+    if (ptype == V_ASN1_UNDEF) {
+        ASN1_TYPE_free(alg->parameter);
+        alg->parameter = NULL;
+    } else
+        ASN1_TYPE_set(alg->parameter, ptype, pval);
+    return 1;
+}
+
+void X509_ALGOR_get0(const ASN1_OBJECT **paobj, int *pptype,
+                     const void **ppval, const X509_ALGOR *algor)
+{
+    if (paobj)
+        *paobj = algor->algorithm;
+    if (pptype) {
+        if (algor->parameter == NULL) {
+            *pptype = V_ASN1_UNDEF;
+            return;
+        } else
+            *pptype = algor->parameter->type;
+        if (ppval)
+            *ppval = algor->parameter->value.ptr;
+    }
+}
+
+/* Set up an X509_ALGOR DigestAlgorithmIdentifier from an EVP_MD */
+
+void X509_ALGOR_set_md(X509_ALGOR *alg, const EVP_MD *md)
+{
+    int param_type;
+
+    if (md->flags & EVP_MD_FLAG_DIGALGID_ABSENT)
+        param_type = V_ASN1_UNDEF;
+    else
+        param_type = V_ASN1_NULL;
+
+    X509_ALGOR_set0(alg, OBJ_nid2obj(EVP_MD_type(md)), param_type, NULL);
+
+}
+
+int X509_ALGOR_cmp(const X509_ALGOR *a, const X509_ALGOR *b)
+{
+    int rv;
+    rv = OBJ_cmp(a->algorithm, b->algorithm);
+    if (rv)
+        return rv;
+    if (!a->parameter && !b->parameter)
+        return 0;
+    return ASN1_TYPE_cmp(a->parameter, b->parameter);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_bignum.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_bignum.c
new file mode 100644
index 000000000..da57e77a7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_bignum.c
@@ -0,0 +1,146 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/bn.h>
+
+/*
+ * Custom primitive type for BIGNUM handling. This reads in an ASN1_INTEGER
+ * as a BIGNUM directly. Currently it ignores the sign which isn't a problem
+ * since all BIGNUMs used are non negative and anything that looks negative
+ * is normally due to an encoding error.
+ */
+
+#define BN_SENSITIVE    1
+
+static int bn_new(ASN1_VALUE **pval, const ASN1_ITEM *it);
+static int bn_secure_new(ASN1_VALUE **pval, const ASN1_ITEM *it);
+static void bn_free(ASN1_VALUE **pval, const ASN1_ITEM *it);
+
+static int bn_i2c(ASN1_VALUE **pval, unsigned char *cont, int *putype,
+                  const ASN1_ITEM *it);
+static int bn_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len,
+                  int utype, char *free_cont, const ASN1_ITEM *it);
+static int bn_secure_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len,
+                         int utype, char *free_cont, const ASN1_ITEM *it);
+static int bn_print(BIO *out, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                    int indent, const ASN1_PCTX *pctx);
+
+static ASN1_PRIMITIVE_FUNCS bignum_pf = {
+    NULL, 0,
+    bn_new,
+    bn_free,
+    0,
+    bn_c2i,
+    bn_i2c,
+    bn_print
+};
+
+static ASN1_PRIMITIVE_FUNCS cbignum_pf = {
+    NULL, 0,
+    bn_secure_new,
+    bn_free,
+    0,
+    bn_secure_c2i,
+    bn_i2c,
+    bn_print
+};
+
+ASN1_ITEM_start(BIGNUM)
+        ASN1_ITYPE_PRIMITIVE, V_ASN1_INTEGER, NULL, 0, &bignum_pf, 0, "BIGNUM"
+ASN1_ITEM_end(BIGNUM)
+
+ASN1_ITEM_start(CBIGNUM)
+        ASN1_ITYPE_PRIMITIVE, V_ASN1_INTEGER, NULL, 0, &cbignum_pf, BN_SENSITIVE, "CBIGNUM"
+ASN1_ITEM_end(CBIGNUM)
+
+static int bn_new(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    *pval = (ASN1_VALUE *)BN_new();
+    if (*pval != NULL)
+        return 1;
+    else
+        return 0;
+}
+
+static int bn_secure_new(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    *pval = (ASN1_VALUE *)BN_secure_new();
+    if (*pval != NULL)
+        return 1;
+    else
+        return 0;
+}
+
+static void bn_free(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    if (!*pval)
+        return;
+    if (it->size & BN_SENSITIVE)
+        BN_clear_free((BIGNUM *)*pval);
+    else
+        BN_free((BIGNUM *)*pval);
+    *pval = NULL;
+}
+
+static int bn_i2c(ASN1_VALUE **pval, unsigned char *cont, int *putype,
+                  const ASN1_ITEM *it)
+{
+    BIGNUM *bn;
+    int pad;
+    if (!*pval)
+        return -1;
+    bn = (BIGNUM *)*pval;
+    /* If MSB set in an octet we need a padding byte */
+    if (BN_num_bits(bn) & 0x7)
+        pad = 0;
+    else
+        pad = 1;
+    if (cont) {
+        if (pad)
+            *cont++ = 0;
+        BN_bn2bin(bn, cont);
+    }
+    return pad + BN_num_bytes(bn);
+}
+
+static int bn_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len,
+                  int utype, char *free_cont, const ASN1_ITEM *it)
+{
+    BIGNUM *bn;
+
+    if (*pval == NULL && !bn_new(pval, it))
+        return 0;
+    bn = (BIGNUM *)*pval;
+    if (!BN_bin2bn(cont, len, bn)) {
+        bn_free(pval, it);
+        return 0;
+    }
+    return 1;
+}
+
+static int bn_secure_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len,
+                         int utype, char *free_cont, const ASN1_ITEM *it)
+{
+    if (!*pval)
+        bn_secure_new(pval, it);
+    return bn_c2i(pval, cont, len, utype, free_cont, it);
+}
+
+static int bn_print(BIO *out, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                    int indent, const ASN1_PCTX *pctx)
+{
+    if (!BN_print(out, *(BIGNUM **)pval))
+        return 0;
+    if (BIO_puts(out, "\n") <= 0)
+        return 0;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_info.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_info.c
new file mode 100644
index 000000000..8d99f07c6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_info.c
@@ -0,0 +1,39 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/asn1.h>
+#include <openssl/x509.h>
+
+X509_INFO *X509_INFO_new(void)
+{
+    X509_INFO *ret;
+
+    ret = OPENSSL_zalloc(sizeof(*ret));
+    if (ret == NULL) {
+        ASN1err(ASN1_F_X509_INFO_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    return ret;
+}
+
+void X509_INFO_free(X509_INFO *x)
+{
+    if (x == NULL)
+        return;
+
+    X509_free(x->x509);
+    X509_CRL_free(x->crl);
+    X509_PKEY_free(x->x_pkey);
+    OPENSSL_free(x->enc_data);
+    OPENSSL_free(x);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_int64.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_int64.c
new file mode 100644
index 000000000..0ee552cf0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_int64.c
@@ -0,0 +1,291 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "internal/numbers.h"
+#include <openssl/asn1t.h>
+#include <openssl/bn.h>
+#include "asn1_locl.h"
+
+/*
+ * Custom primitive types for handling int32_t, int64_t, uint32_t, uint64_t.
+ * This converts between an ASN1_INTEGER and those types directly.
+ * This is preferred to using the LONG / ZLONG primitives.
+ */
+
+/*
+ * We abuse the ASN1_ITEM fields |size| as a flags field
+ */
+#define INTxx_FLAG_ZERO_DEFAULT (1<<0)
+#define INTxx_FLAG_SIGNED       (1<<1)
+
+static int uint64_new(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    if ((*pval = (ASN1_VALUE *)OPENSSL_zalloc(sizeof(uint64_t))) == NULL) {
+        ASN1err(ASN1_F_UINT64_NEW, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    return 1;
+}
+
+static void uint64_free(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    OPENSSL_free(*pval);
+    *pval = NULL;
+}
+
+static void uint64_clear(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    **(uint64_t **)pval = 0;
+}
+
+static int uint64_i2c(ASN1_VALUE **pval, unsigned char *cont, int *putype,
+                    const ASN1_ITEM *it)
+{
+    uint64_t utmp;
+    int neg = 0;
+    /* this exists to bypass broken gcc optimization */
+    char *cp = (char *)*pval;
+
+    /* use memcpy, because we may not be uint64_t aligned */
+    memcpy(&utmp, cp, sizeof(utmp));
+
+    if ((it->size & INTxx_FLAG_ZERO_DEFAULT) == INTxx_FLAG_ZERO_DEFAULT
+        && utmp == 0)
+        return -1;
+    if ((it->size & INTxx_FLAG_SIGNED) == INTxx_FLAG_SIGNED
+        && (int64_t)utmp < 0) {
+        /* i2c_uint64_int() assumes positive values */
+        utmp = 0 - utmp;
+        neg = 1;
+    }
+
+    return i2c_uint64_int(cont, utmp, neg);
+}
+
+static int uint64_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len,
+                    int utype, char *free_cont, const ASN1_ITEM *it)
+{
+    uint64_t utmp = 0;
+    char *cp;
+    int neg = 0;
+
+    if (*pval == NULL && !uint64_new(pval, it))
+        return 0;
+
+    cp = (char *)*pval;
+
+    /*
+     * Strictly speaking, zero length is malformed.  However, long_c2i
+     * (x_long.c) encodes 0 as a zero length INTEGER (wrongly, of course),
+     * so for the sake of backward compatibility, we still decode zero
+     * length INTEGERs as the number zero.
+     */
+    if (len == 0)
+        goto long_compat;
+
+    if (!c2i_uint64_int(&utmp, &neg, &cont, len))
+        return 0;
+    if ((it->size & INTxx_FLAG_SIGNED) == 0 && neg) {
+        ASN1err(ASN1_F_UINT64_C2I, ASN1_R_ILLEGAL_NEGATIVE_VALUE);
+        return 0;
+    }
+    if ((it->size & INTxx_FLAG_SIGNED) == INTxx_FLAG_SIGNED
+            && !neg && utmp > INT64_MAX) {
+        ASN1err(ASN1_F_UINT64_C2I, ASN1_R_TOO_LARGE);
+        return 0;
+    }
+    if (neg)
+        /* c2i_uint64_int() returns positive values */
+        utmp = 0 - utmp;
+
+ long_compat:
+    memcpy(cp, &utmp, sizeof(utmp));
+    return 1;
+}
+
+static int uint64_print(BIO *out, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                        int indent, const ASN1_PCTX *pctx)
+{
+    if ((it->size & INTxx_FLAG_SIGNED) == INTxx_FLAG_SIGNED)
+        return BIO_printf(out, "%jd\n", **(int64_t **)pval);
+    return BIO_printf(out, "%ju\n", **(uint64_t **)pval);
+}
+
+/* 32-bit variants */
+
+static int uint32_new(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    if ((*pval = (ASN1_VALUE *)OPENSSL_zalloc(sizeof(uint32_t))) == NULL) {
+        ASN1err(ASN1_F_UINT32_NEW, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    return 1;
+}
+
+static void uint32_free(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    OPENSSL_free(*pval);
+    *pval = NULL;
+}
+
+static void uint32_clear(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    **(uint32_t **)pval = 0;
+}
+
+static int uint32_i2c(ASN1_VALUE **pval, unsigned char *cont, int *putype,
+                    const ASN1_ITEM *it)
+{
+    uint32_t utmp;
+    int neg = 0;
+    /* this exists to bypass broken gcc optimization */
+    char *cp = (char *)*pval;
+
+    /* use memcpy, because we may not be uint32_t aligned */
+    memcpy(&utmp, cp, sizeof(utmp));
+
+    if ((it->size & INTxx_FLAG_ZERO_DEFAULT) == INTxx_FLAG_ZERO_DEFAULT
+        && utmp == 0)
+        return -1;
+    if ((it->size & INTxx_FLAG_SIGNED) == INTxx_FLAG_SIGNED
+        && (int32_t)utmp < 0) {
+        /* i2c_uint64_int() assumes positive values */
+        utmp = 0 - utmp;
+        neg = 1;
+    }
+
+    return i2c_uint64_int(cont, (uint64_t)utmp, neg);
+}
+
+/*
+ * Absolute value of INT32_MIN: we can't just use -INT32_MIN as it produces
+ * overflow warnings.
+ */
+
+#define ABS_INT32_MIN ((uint32_t)INT32_MAX + 1)
+
+static int uint32_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len,
+                    int utype, char *free_cont, const ASN1_ITEM *it)
+{
+    uint64_t utmp = 0;
+    uint32_t utmp2 = 0;
+    char *cp;
+    int neg = 0;
+
+    if (*pval == NULL && !uint64_new(pval, it))
+        return 0;
+
+    cp = (char *)*pval;
+
+    /*
+     * Strictly speaking, zero length is malformed.  However, long_c2i
+     * (x_long.c) encodes 0 as a zero length INTEGER (wrongly, of course),
+     * so for the sake of backward compatibility, we still decode zero
+     * length INTEGERs as the number zero.
+     */
+    if (len == 0)
+        goto long_compat;
+
+    if (!c2i_uint64_int(&utmp, &neg, &cont, len))
+        return 0;
+    if ((it->size & INTxx_FLAG_SIGNED) == 0 && neg) {
+        ASN1err(ASN1_F_UINT32_C2I, ASN1_R_ILLEGAL_NEGATIVE_VALUE);
+        return 0;
+    }
+    if (neg) {
+        if (utmp > ABS_INT32_MIN) {
+            ASN1err(ASN1_F_UINT32_C2I, ASN1_R_TOO_SMALL);
+            return 0;
+        }
+        utmp = 0 - utmp;
+    } else {
+        if (((it->size & INTxx_FLAG_SIGNED) != 0 && utmp > INT32_MAX)
+            || ((it->size & INTxx_FLAG_SIGNED) == 0 && utmp > UINT32_MAX)) {
+            ASN1err(ASN1_F_UINT32_C2I, ASN1_R_TOO_LARGE);
+            return 0;
+        }
+    }
+
+ long_compat:
+    utmp2 = (uint32_t)utmp;
+    memcpy(cp, &utmp2, sizeof(utmp2));
+    return 1;
+}
+
+static int uint32_print(BIO *out, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                        int indent, const ASN1_PCTX *pctx)
+{
+    if ((it->size & INTxx_FLAG_SIGNED) == INTxx_FLAG_SIGNED)
+        return BIO_printf(out, "%d\n", **(int32_t **)pval);
+    return BIO_printf(out, "%u\n", **(uint32_t **)pval);
+}
+
+
+/* Define the primitives themselves */
+
+static ASN1_PRIMITIVE_FUNCS uint32_pf = {
+    NULL, 0,
+    uint32_new,
+    uint32_free,
+    uint32_clear,
+    uint32_c2i,
+    uint32_i2c,
+    uint32_print
+};
+
+static ASN1_PRIMITIVE_FUNCS uint64_pf = {
+    NULL, 0,
+    uint64_new,
+    uint64_free,
+    uint64_clear,
+    uint64_c2i,
+    uint64_i2c,
+    uint64_print
+};
+
+ASN1_ITEM_start(INT32)
+    ASN1_ITYPE_PRIMITIVE, V_ASN1_INTEGER, NULL, 0, &uint32_pf,
+    INTxx_FLAG_SIGNED, "INT32"
+ASN1_ITEM_end(INT32)
+
+ASN1_ITEM_start(UINT32)
+    ASN1_ITYPE_PRIMITIVE, V_ASN1_INTEGER, NULL, 0, &uint32_pf, 0, "UINT32"
+ASN1_ITEM_end(UINT32)
+
+ASN1_ITEM_start(INT64)
+    ASN1_ITYPE_PRIMITIVE, V_ASN1_INTEGER, NULL, 0, &uint64_pf,
+    INTxx_FLAG_SIGNED, "INT64"
+ASN1_ITEM_end(INT64)
+
+ASN1_ITEM_start(UINT64)
+    ASN1_ITYPE_PRIMITIVE, V_ASN1_INTEGER, NULL, 0, &uint64_pf, 0, "UINT64"
+ASN1_ITEM_end(UINT64)
+
+ASN1_ITEM_start(ZINT32)
+    ASN1_ITYPE_PRIMITIVE, V_ASN1_INTEGER, NULL, 0, &uint32_pf,
+    INTxx_FLAG_ZERO_DEFAULT|INTxx_FLAG_SIGNED, "ZINT32"
+ASN1_ITEM_end(ZINT32)
+
+ASN1_ITEM_start(ZUINT32)
+    ASN1_ITYPE_PRIMITIVE, V_ASN1_INTEGER, NULL, 0, &uint32_pf,
+    INTxx_FLAG_ZERO_DEFAULT, "ZUINT32"
+ASN1_ITEM_end(ZUINT32)
+
+ASN1_ITEM_start(ZINT64)
+    ASN1_ITYPE_PRIMITIVE, V_ASN1_INTEGER, NULL, 0, &uint64_pf,
+    INTxx_FLAG_ZERO_DEFAULT|INTxx_FLAG_SIGNED, "ZINT64"
+ASN1_ITEM_end(ZINT64)
+
+ASN1_ITEM_start(ZUINT64)
+    ASN1_ITYPE_PRIMITIVE, V_ASN1_INTEGER, NULL, 0, &uint64_pf,
+    INTxx_FLAG_ZERO_DEFAULT, "ZUINT64"
+ASN1_ITEM_end(ZUINT64)
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_long.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_long.c
new file mode 100644
index 000000000..bf9371ef5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_long.c
@@ -0,0 +1,201 @@
+/*
+ * Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+
+#if !(OPENSSL_API_COMPAT < 0x10200000L)
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+#define COPY_SIZE(a, b) (sizeof(a) < sizeof(b) ? sizeof(a) : sizeof(b))
+
+/*
+ * Custom primitive type for long handling. This converts between an
+ * ASN1_INTEGER and a long directly.
+ */
+
+static int long_new(ASN1_VALUE **pval, const ASN1_ITEM *it);
+static void long_free(ASN1_VALUE **pval, const ASN1_ITEM *it);
+
+static int long_i2c(ASN1_VALUE **pval, unsigned char *cont, int *putype,
+                    const ASN1_ITEM *it);
+static int long_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len,
+                    int utype, char *free_cont, const ASN1_ITEM *it);
+static int long_print(BIO *out, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                      int indent, const ASN1_PCTX *pctx);
+
+static ASN1_PRIMITIVE_FUNCS long_pf = {
+    NULL, 0,
+    long_new,
+    long_free,
+    long_free,                  /* Clear should set to initial value */
+    long_c2i,
+    long_i2c,
+    long_print
+};
+
+ASN1_ITEM_start(LONG)
+        ASN1_ITYPE_PRIMITIVE, V_ASN1_INTEGER, NULL, 0, &long_pf, ASN1_LONG_UNDEF, "LONG"
+ASN1_ITEM_end(LONG)
+
+ASN1_ITEM_start(ZLONG)
+        ASN1_ITYPE_PRIMITIVE, V_ASN1_INTEGER, NULL, 0, &long_pf, 0, "ZLONG"
+ASN1_ITEM_end(ZLONG)
+
+static int long_new(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    memcpy(pval, &it->size, COPY_SIZE(*pval, it->size));
+    return 1;
+}
+
+static void long_free(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    memcpy(pval, &it->size, COPY_SIZE(*pval, it->size));
+}
+
+/*
+ * Originally BN_num_bits_word was called to perform this operation, but
+ * trouble is that there is no guarantee that sizeof(long) equals to
+ * sizeof(BN_ULONG). BN_ULONG is a configurable type that can be as wide
+ * as long, but also double or half...
+ */
+static int num_bits_ulong(unsigned long value)
+{
+    size_t i;
+    unsigned long ret = 0;
+
+    /*
+     * It is argued that *on average* constant counter loop performs
+     * not worse [if not better] than one with conditional break or
+     * mask-n-table-lookup-style, because of branch misprediction
+     * penalties.
+     */
+    for (i = 0; i < sizeof(value) * 8; i++) {
+        ret += (value != 0);
+        value >>= 1;
+    }
+
+    return (int)ret;
+}
+
+static int long_i2c(ASN1_VALUE **pval, unsigned char *cont, int *putype,
+                    const ASN1_ITEM *it)
+{
+    long ltmp;
+    unsigned long utmp, sign;
+    int clen, pad, i;
+
+    memcpy(&ltmp, pval, COPY_SIZE(*pval, ltmp));
+    if (ltmp == it->size)
+        return -1;
+    /*
+     * Convert the long to positive: we subtract one if negative so we can
+     * cleanly handle the padding if only the MSB of the leading octet is
+     * set.
+     */
+    if (ltmp < 0) {
+        sign = 0xff;
+        utmp = 0 - (unsigned long)ltmp - 1;
+    } else {
+        sign = 0;
+        utmp = ltmp;
+    }
+    clen = num_bits_ulong(utmp);
+    /* If MSB of leading octet set we need to pad */
+    if (!(clen & 0x7))
+        pad = 1;
+    else
+        pad = 0;
+
+    /* Convert number of bits to number of octets */
+    clen = (clen + 7) >> 3;
+
+    if (cont != NULL) {
+        if (pad)
+            *cont++ = (unsigned char)sign;
+        for (i = clen - 1; i >= 0; i--) {
+            cont[i] = (unsigned char)(utmp ^ sign);
+            utmp >>= 8;
+        }
+    }
+    return clen + pad;
+}
+
+static int long_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len,
+                    int utype, char *free_cont, const ASN1_ITEM *it)
+{
+    int i;
+    long ltmp;
+    unsigned long utmp = 0, sign = 0x100;
+
+    if (len > 1) {
+        /*
+         * Check possible pad byte.  Worst case, we're skipping past actual
+         * content, but since that's only with 0x00 and 0xff and we set neg
+         * accordingly, the result will be correct in the end anyway.
+         */
+        switch (cont[0]) {
+        case 0xff:
+            cont++;
+            len--;
+            sign = 0xff;
+            break;
+        case 0:
+            cont++;
+            len--;
+            sign = 0;
+            break;
+        }
+    }
+    if (len > (int)sizeof(long)) {
+        ASN1err(ASN1_F_LONG_C2I, ASN1_R_INTEGER_TOO_LARGE_FOR_LONG);
+        return 0;
+    }
+
+    if (sign == 0x100) {
+        /* Is it negative? */
+        if (len && (cont[0] & 0x80))
+            sign = 0xff;
+        else
+            sign = 0;
+    } else if (((sign ^ cont[0]) & 0x80) == 0) { /* same sign bit? */
+        ASN1err(ASN1_F_LONG_C2I, ASN1_R_ILLEGAL_PADDING);
+        return 0;
+    }
+    utmp = 0;
+    for (i = 0; i < len; i++) {
+        utmp <<= 8;
+        utmp |= cont[i] ^ sign;
+    }
+    ltmp = (long)utmp;
+    if (ltmp < 0) {
+        ASN1err(ASN1_F_LONG_C2I, ASN1_R_INTEGER_TOO_LARGE_FOR_LONG);
+        return 0;
+    }
+    if (sign)
+        ltmp = -ltmp - 1;
+    if (ltmp == it->size) {
+        ASN1err(ASN1_F_LONG_C2I, ASN1_R_INTEGER_TOO_LARGE_FOR_LONG);
+        return 0;
+    }
+    memcpy(pval, &ltmp, COPY_SIZE(*pval, ltmp));
+    return 1;
+}
+
+static int long_print(BIO *out, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                      int indent, const ASN1_PCTX *pctx)
+{
+    long l;
+
+    memcpy(&l, pval, COPY_SIZE(*pval, l));
+    return BIO_printf(out, "%ld\n", l);
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_pkey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_pkey.c
new file mode 100644
index 000000000..593049f0f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_pkey.c
@@ -0,0 +1,47 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+
+X509_PKEY *X509_PKEY_new(void)
+{
+    X509_PKEY *ret = NULL;
+
+    ret = OPENSSL_zalloc(sizeof(*ret));
+    if (ret == NULL)
+        goto err;
+
+    ret->enc_algor = X509_ALGOR_new();
+    ret->enc_pkey = ASN1_OCTET_STRING_new();
+    if (ret->enc_algor == NULL || ret->enc_pkey == NULL)
+        goto err;
+
+    return ret;
+err:
+    X509_PKEY_free(ret);
+    ASN1err(ASN1_F_X509_PKEY_NEW, ERR_R_MALLOC_FAILURE);
+    return NULL;
+}
+
+void X509_PKEY_free(X509_PKEY *x)
+{
+    if (x == NULL)
+        return;
+
+    X509_ALGOR_free(x->enc_algor);
+    ASN1_OCTET_STRING_free(x->enc_pkey);
+    EVP_PKEY_free(x->dec_pkey);
+    if (x->key_free)
+        OPENSSL_free(x->key_data);
+    OPENSSL_free(x);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_sig.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_sig.c
new file mode 100644
index 000000000..e465cf2d4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_sig.c
@@ -0,0 +1,39 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+
+ASN1_SEQUENCE(X509_SIG) = {
+        ASN1_SIMPLE(X509_SIG, algor, X509_ALGOR),
+        ASN1_SIMPLE(X509_SIG, digest, ASN1_OCTET_STRING)
+} ASN1_SEQUENCE_END(X509_SIG)
+
+IMPLEMENT_ASN1_FUNCTIONS(X509_SIG)
+
+void X509_SIG_get0(const X509_SIG *sig, const X509_ALGOR **palg,
+                   const ASN1_OCTET_STRING **pdigest)
+{
+    if (palg)
+        *palg = sig->algor;
+    if (pdigest)
+        *pdigest = sig->digest;
+}
+
+void X509_SIG_getm(X509_SIG *sig, X509_ALGOR **palg,
+                   ASN1_OCTET_STRING **pdigest)
+{
+    if (palg)
+        *palg = sig->algor;
+    if (pdigest)
+        *pdigest = sig->digest;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_spki.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_spki.c
new file mode 100644
index 000000000..0d72a3f3a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_spki.c
@@ -0,0 +1,28 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/asn1t.h>
+
+ASN1_SEQUENCE(NETSCAPE_SPKAC) = {
+        ASN1_SIMPLE(NETSCAPE_SPKAC, pubkey, X509_PUBKEY),
+        ASN1_SIMPLE(NETSCAPE_SPKAC, challenge, ASN1_IA5STRING)
+} ASN1_SEQUENCE_END(NETSCAPE_SPKAC)
+
+IMPLEMENT_ASN1_FUNCTIONS(NETSCAPE_SPKAC)
+
+ASN1_SEQUENCE(NETSCAPE_SPKI) = {
+        ASN1_SIMPLE(NETSCAPE_SPKI, spkac, NETSCAPE_SPKAC),
+        ASN1_EMBED(NETSCAPE_SPKI, sig_algor, X509_ALGOR),
+        ASN1_SIMPLE(NETSCAPE_SPKI, signature, ASN1_BIT_STRING)
+} ASN1_SEQUENCE_END(NETSCAPE_SPKI)
+
+IMPLEMENT_ASN1_FUNCTIONS(NETSCAPE_SPKI)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_val.c b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_val.c
new file mode 100644
index 000000000..d1f1d3bff
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/asn1/x_val.c
@@ -0,0 +1,20 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+
+ASN1_SEQUENCE(X509_VAL) = {
+        ASN1_SIMPLE(X509_VAL, notBefore, ASN1_TIME),
+        ASN1_SIMPLE(X509_VAL, notAfter, ASN1_TIME)
+} ASN1_SEQUENCE_END(X509_VAL)
+
+IMPLEMENT_ASN1_FUNCTIONS(X509_VAL)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_null.c b/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_null.c
new file mode 100644
index 000000000..3eaf170f2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_null.c
@@ -0,0 +1,23 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* This must be the first #include file */
+#include "../async_locl.h"
+
+#ifdef ASYNC_NULL
+int ASYNC_is_capable(void)
+{
+    return 0;
+}
+
+void async_local_cleanup(void)
+{
+}
+#endif
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_null.h b/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_null.h
new file mode 100644
index 000000000..aef40b5d9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_null.h
@@ -0,0 +1,30 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/async.h>
+
+/*
+ * If we haven't managed to detect any other async architecture then we default
+ * to NULL.
+ */
+#ifndef ASYNC_ARCH
+# define ASYNC_NULL
+# define ASYNC_ARCH
+
+typedef struct async_fibre_st {
+    int dummy;
+} async_fibre;
+
+
+# define async_fibre_swapcontext(o,n,r)         0
+# define async_fibre_makecontext(c)             0
+# define async_fibre_free(f)
+# define async_fibre_init_dispatcher(f)
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_posix.c b/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_posix.c
new file mode 100644
index 000000000..02c342d3d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_posix.c
@@ -0,0 +1,58 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* This must be the first #include file */
+#include "../async_locl.h"
+
+#ifdef ASYNC_POSIX
+
+# include <stddef.h>
+# include <unistd.h>
+
+#define STACKSIZE       32768
+
+int ASYNC_is_capable(void)
+{
+    ucontext_t ctx;
+
+    /*
+     * Some platforms provide getcontext() but it does not work (notably
+     * MacOSX PPC64). Check for a working getcontext();
+     */
+    return getcontext(&ctx) == 0;
+}
+
+void async_local_cleanup(void)
+{
+}
+
+int async_fibre_makecontext(async_fibre *fibre)
+{
+    fibre->env_init = 0;
+    if (getcontext(&fibre->fibre) == 0) {
+        fibre->fibre.uc_stack.ss_sp = OPENSSL_malloc(STACKSIZE);
+        if (fibre->fibre.uc_stack.ss_sp != NULL) {
+            fibre->fibre.uc_stack.ss_size = STACKSIZE;
+            fibre->fibre.uc_link = NULL;
+            makecontext(&fibre->fibre, async_start_func, 0);
+            return 1;
+        }
+    } else {
+        fibre->fibre.uc_stack.ss_sp = NULL;
+    }
+    return 0;
+}
+
+void async_fibre_free(async_fibre *fibre)
+{
+    OPENSSL_free(fibre->fibre.uc_stack.ss_sp);
+    fibre->fibre.uc_stack.ss_sp = NULL;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_posix.h b/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_posix.h
new file mode 100644
index 000000000..62449fe60
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_posix.h
@@ -0,0 +1,58 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef OPENSSL_ASYNC_ARCH_ASYNC_POSIX_H
+#define OPENSSL_ASYNC_ARCH_ASYNC_POSIX_H
+#include <openssl/e_os2.h>
+
+#if defined(OPENSSL_SYS_UNIX) \
+    && defined(OPENSSL_THREADS) && !defined(OPENSSL_NO_ASYNC) \
+    && !defined(__ANDROID__) && !defined(__OpenBSD__)
+
+# include <unistd.h>
+
+# if _POSIX_VERSION >= 200112L \
+     && (_POSIX_VERSION < 200809L || defined(__GLIBC__))
+
+# include <pthread.h>
+
+#  define ASYNC_POSIX
+#  define ASYNC_ARCH
+
+#  include <ucontext.h>
+#  include <setjmp.h>
+
+typedef struct async_fibre_st {
+    ucontext_t fibre;
+    jmp_buf env;
+    int env_init;
+} async_fibre;
+
+static ossl_inline int async_fibre_swapcontext(async_fibre *o, async_fibre *n, int r)
+{
+    o->env_init = 1;
+
+    if (!r || !_setjmp(o->env)) {
+        if (n->env_init)
+            _longjmp(n->env, 1);
+        else
+            setcontext(&n->fibre);
+    }
+
+    return 1;
+}
+
+#  define async_fibre_init_dispatcher(d)
+
+int async_fibre_makecontext(async_fibre *fibre);
+void async_fibre_free(async_fibre *fibre);
+
+# endif
+#endif
+#endif /* OPENSSL_ASYNC_ARCH_ASYNC_POSIX_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_win.c b/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_win.c
new file mode 100644
index 000000000..077d56ced
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_win.c
@@ -0,0 +1,55 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* This must be the first #include file */
+#include "../async_locl.h"
+
+#ifdef ASYNC_WIN
+
+# include <windows.h>
+# include "internal/cryptlib.h"
+
+int ASYNC_is_capable(void)
+{
+    return 1;
+}
+
+void async_local_cleanup(void)
+{
+    async_ctx *ctx = async_get_ctx();
+    if (ctx != NULL) {
+        async_fibre *fibre = &ctx->dispatcher;
+        if (fibre != NULL && fibre->fibre != NULL && fibre->converted) {
+            ConvertFiberToThread();
+            fibre->fibre = NULL;
+        }
+    }
+}
+
+int async_fibre_init_dispatcher(async_fibre *fibre)
+{
+    fibre->fibre = ConvertThreadToFiber(NULL);
+    if (fibre->fibre == NULL) {
+        fibre->converted = 0;
+        fibre->fibre = GetCurrentFiber();
+        if (fibre->fibre == NULL)
+            return 0;
+    } else {
+        fibre->converted = 1;
+    }
+
+    return 1;
+}
+
+VOID CALLBACK async_start_func_win(PVOID unused)
+{
+    async_start_func();
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_win.h b/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_win.h
new file mode 100644
index 000000000..61cfdd72d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/async/arch/async_win.h
@@ -0,0 +1,36 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This is the same detection used in cryptlib to set up the thread local
+ * storage that we depend on, so just copy that
+ */
+#if defined(_WIN32) && !defined(OPENSSL_NO_ASYNC)
+#include <openssl/async.h>
+# define ASYNC_WIN
+# define ASYNC_ARCH
+
+# include <windows.h>
+# include "internal/cryptlib.h"
+
+typedef struct async_fibre_st {
+    LPVOID fibre;
+    int converted;
+} async_fibre;
+
+# define async_fibre_swapcontext(o,n,r) \
+        (SwitchToFiber((n)->fibre), 1)
+# define async_fibre_makecontext(c) \
+        ((c)->fibre = CreateFiber(0, async_start_func_win, 0))
+# define async_fibre_free(f)             (DeleteFiber((f)->fibre))
+
+int async_fibre_init_dispatcher(async_fibre *fibre);
+VOID CALLBACK async_start_func_win(PVOID unused);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/async/async.c b/trunk/3rdparty/openssl-1.1-fit/crypto/async/async.c
new file mode 100644
index 000000000..1d83e4576
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/async/async.c
@@ -0,0 +1,451 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Without this we start getting longjmp crashes because it thinks we're jumping
+ * up the stack when in fact we are jumping to an entirely different stack. The
+ * cost of this is not having certain buffer overrun/underrun checks etc for
+ * this source file :-(
+ */
+#undef _FORTIFY_SOURCE
+
+/* This must be the first #include file */
+#include "async_locl.h"
+
+#include <openssl/err.h>
+#include "internal/cryptlib_int.h"
+#include <string.h>
+
+#define ASYNC_JOB_RUNNING   0
+#define ASYNC_JOB_PAUSING   1
+#define ASYNC_JOB_PAUSED    2
+#define ASYNC_JOB_STOPPING  3
+
+static CRYPTO_THREAD_LOCAL ctxkey;
+static CRYPTO_THREAD_LOCAL poolkey;
+
+static async_ctx *async_ctx_new(void)
+{
+    async_ctx *nctx;
+
+    if (!ossl_init_thread_start(OPENSSL_INIT_THREAD_ASYNC))
+        return NULL;
+
+    nctx = OPENSSL_malloc(sizeof(*nctx));
+    if (nctx == NULL) {
+        ASYNCerr(ASYNC_F_ASYNC_CTX_NEW, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    async_fibre_init_dispatcher(&nctx->dispatcher);
+    nctx->currjob = NULL;
+    nctx->blocked = 0;
+    if (!CRYPTO_THREAD_set_local(&ctxkey, nctx))
+        goto err;
+
+    return nctx;
+err:
+    OPENSSL_free(nctx);
+
+    return NULL;
+}
+
+async_ctx *async_get_ctx(void)
+{
+    return (async_ctx *)CRYPTO_THREAD_get_local(&ctxkey);
+}
+
+static int async_ctx_free(void)
+{
+    async_ctx *ctx;
+
+    ctx = async_get_ctx();
+
+    if (!CRYPTO_THREAD_set_local(&ctxkey, NULL))
+        return 0;
+
+    OPENSSL_free(ctx);
+
+    return 1;
+}
+
+static ASYNC_JOB *async_job_new(void)
+{
+    ASYNC_JOB *job = NULL;
+
+    job = OPENSSL_zalloc(sizeof(*job));
+    if (job == NULL) {
+        ASYNCerr(ASYNC_F_ASYNC_JOB_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    job->status = ASYNC_JOB_RUNNING;
+
+    return job;
+}
+
+static void async_job_free(ASYNC_JOB *job)
+{
+    if (job != NULL) {
+        OPENSSL_free(job->funcargs);
+        async_fibre_free(&job->fibrectx);
+        OPENSSL_free(job);
+    }
+}
+
+static ASYNC_JOB *async_get_pool_job(void) {
+    ASYNC_JOB *job;
+    async_pool *pool;
+
+    pool = (async_pool *)CRYPTO_THREAD_get_local(&poolkey);
+    if (pool == NULL) {
+        /*
+         * Pool has not been initialised, so init with the defaults, i.e.
+         * no max size and no pre-created jobs
+         */
+        if (ASYNC_init_thread(0, 0) == 0)
+            return NULL;
+        pool = (async_pool *)CRYPTO_THREAD_get_local(&poolkey);
+    }
+
+    job = sk_ASYNC_JOB_pop(pool->jobs);
+    if (job == NULL) {
+        /* Pool is empty */
+        if ((pool->max_size != 0) && (pool->curr_size >= pool->max_size))
+            return NULL;
+
+        job = async_job_new();
+        if (job != NULL) {
+            if (! async_fibre_makecontext(&job->fibrectx)) {
+                async_job_free(job);
+                return NULL;
+            }
+            pool->curr_size++;
+        }
+    }
+    return job;
+}
+
+static void async_release_job(ASYNC_JOB *job) {
+    async_pool *pool;
+
+    pool = (async_pool *)CRYPTO_THREAD_get_local(&poolkey);
+    OPENSSL_free(job->funcargs);
+    job->funcargs = NULL;
+    sk_ASYNC_JOB_push(pool->jobs, job);
+}
+
+void async_start_func(void)
+{
+    ASYNC_JOB *job;
+    async_ctx *ctx = async_get_ctx();
+
+    while (1) {
+        /* Run the job */
+        job = ctx->currjob;
+        job->ret = job->func(job->funcargs);
+
+        /* Stop the job */
+        job->status = ASYNC_JOB_STOPPING;
+        if (!async_fibre_swapcontext(&job->fibrectx,
+                                     &ctx->dispatcher, 1)) {
+            /*
+             * Should not happen. Getting here will close the thread...can't do
+             * much about it
+             */
+            ASYNCerr(ASYNC_F_ASYNC_START_FUNC, ASYNC_R_FAILED_TO_SWAP_CONTEXT);
+        }
+    }
+}
+
+int ASYNC_start_job(ASYNC_JOB **job, ASYNC_WAIT_CTX *wctx, int *ret,
+                    int (*func)(void *), void *args, size_t size)
+{
+    async_ctx *ctx;
+
+    if (!OPENSSL_init_crypto(OPENSSL_INIT_ASYNC, NULL))
+        return ASYNC_ERR;
+
+    ctx = async_get_ctx();
+    if (ctx == NULL)
+        ctx = async_ctx_new();
+    if (ctx == NULL)
+        return ASYNC_ERR;
+
+    if (*job)
+        ctx->currjob = *job;
+
+    for (;;) {
+        if (ctx->currjob != NULL) {
+            if (ctx->currjob->status == ASYNC_JOB_STOPPING) {
+                *ret = ctx->currjob->ret;
+                ctx->currjob->waitctx = NULL;
+                async_release_job(ctx->currjob);
+                ctx->currjob = NULL;
+                *job = NULL;
+                return ASYNC_FINISH;
+            }
+
+            if (ctx->currjob->status == ASYNC_JOB_PAUSING) {
+                *job = ctx->currjob;
+                ctx->currjob->status = ASYNC_JOB_PAUSED;
+                ctx->currjob = NULL;
+                return ASYNC_PAUSE;
+            }
+
+            if (ctx->currjob->status == ASYNC_JOB_PAUSED) {
+                ctx->currjob = *job;
+                /* Resume previous job */
+                if (!async_fibre_swapcontext(&ctx->dispatcher,
+                        &ctx->currjob->fibrectx, 1)) {
+                    ASYNCerr(ASYNC_F_ASYNC_START_JOB,
+                             ASYNC_R_FAILED_TO_SWAP_CONTEXT);
+                    goto err;
+                }
+                continue;
+            }
+
+            /* Should not happen */
+            ASYNCerr(ASYNC_F_ASYNC_START_JOB, ERR_R_INTERNAL_ERROR);
+            async_release_job(ctx->currjob);
+            ctx->currjob = NULL;
+            *job = NULL;
+            return ASYNC_ERR;
+        }
+
+        /* Start a new job */
+        if ((ctx->currjob = async_get_pool_job()) == NULL)
+            return ASYNC_NO_JOBS;
+
+        if (args != NULL) {
+            ctx->currjob->funcargs = OPENSSL_malloc(size);
+            if (ctx->currjob->funcargs == NULL) {
+                ASYNCerr(ASYNC_F_ASYNC_START_JOB, ERR_R_MALLOC_FAILURE);
+                async_release_job(ctx->currjob);
+                ctx->currjob = NULL;
+                return ASYNC_ERR;
+            }
+            memcpy(ctx->currjob->funcargs, args, size);
+        } else {
+            ctx->currjob->funcargs = NULL;
+        }
+
+        ctx->currjob->func = func;
+        ctx->currjob->waitctx = wctx;
+        if (!async_fibre_swapcontext(&ctx->dispatcher,
+                &ctx->currjob->fibrectx, 1)) {
+            ASYNCerr(ASYNC_F_ASYNC_START_JOB, ASYNC_R_FAILED_TO_SWAP_CONTEXT);
+            goto err;
+        }
+    }
+
+err:
+    async_release_job(ctx->currjob);
+    ctx->currjob = NULL;
+    *job = NULL;
+    return ASYNC_ERR;
+}
+
+int ASYNC_pause_job(void)
+{
+    ASYNC_JOB *job;
+    async_ctx *ctx = async_get_ctx();
+
+    if (ctx == NULL
+            || ctx->currjob == NULL
+            || ctx->blocked) {
+        /*
+         * Could be we've deliberately not been started within a job so this is
+         * counted as success.
+         */
+        return 1;
+    }
+
+    job = ctx->currjob;
+    job->status = ASYNC_JOB_PAUSING;
+
+    if (!async_fibre_swapcontext(&job->fibrectx,
+                                 &ctx->dispatcher, 1)) {
+        ASYNCerr(ASYNC_F_ASYNC_PAUSE_JOB, ASYNC_R_FAILED_TO_SWAP_CONTEXT);
+        return 0;
+    }
+    /* Reset counts of added and deleted fds */
+    async_wait_ctx_reset_counts(job->waitctx);
+
+    return 1;
+}
+
+static void async_empty_pool(async_pool *pool)
+{
+    ASYNC_JOB *job;
+
+    if (!pool || !pool->jobs)
+        return;
+
+    do {
+        job = sk_ASYNC_JOB_pop(pool->jobs);
+        async_job_free(job);
+    } while (job);
+}
+
+int async_init(void)
+{
+    if (!CRYPTO_THREAD_init_local(&ctxkey, NULL))
+        return 0;
+
+    if (!CRYPTO_THREAD_init_local(&poolkey, NULL)) {
+        CRYPTO_THREAD_cleanup_local(&ctxkey);
+        return 0;
+    }
+
+    return 1;
+}
+
+void async_deinit(void)
+{
+    CRYPTO_THREAD_cleanup_local(&ctxkey);
+    CRYPTO_THREAD_cleanup_local(&poolkey);
+}
+
+int ASYNC_init_thread(size_t max_size, size_t init_size)
+{
+    async_pool *pool;
+    size_t curr_size = 0;
+
+    if (init_size > max_size) {
+        ASYNCerr(ASYNC_F_ASYNC_INIT_THREAD, ASYNC_R_INVALID_POOL_SIZE);
+        return 0;
+    }
+
+    if (!OPENSSL_init_crypto(OPENSSL_INIT_ASYNC, NULL))
+        return 0;
+
+    if (!ossl_init_thread_start(OPENSSL_INIT_THREAD_ASYNC))
+        return 0;
+
+    pool = OPENSSL_zalloc(sizeof(*pool));
+    if (pool == NULL) {
+        ASYNCerr(ASYNC_F_ASYNC_INIT_THREAD, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    pool->jobs = sk_ASYNC_JOB_new_reserve(NULL, init_size);
+    if (pool->jobs == NULL) {
+        ASYNCerr(ASYNC_F_ASYNC_INIT_THREAD, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(pool);
+        return 0;
+    }
+
+    pool->max_size = max_size;
+
+    /* Pre-create jobs as required */
+    while (init_size--) {
+        ASYNC_JOB *job;
+        job = async_job_new();
+        if (job == NULL || !async_fibre_makecontext(&job->fibrectx)) {
+            /*
+             * Not actually fatal because we already created the pool, just
+             * skip creation of any more jobs
+             */
+            async_job_free(job);
+            break;
+        }
+        job->funcargs = NULL;
+        sk_ASYNC_JOB_push(pool->jobs, job); /* Cannot fail due to reserve */
+        curr_size++;
+    }
+    pool->curr_size = curr_size;
+    if (!CRYPTO_THREAD_set_local(&poolkey, pool)) {
+        ASYNCerr(ASYNC_F_ASYNC_INIT_THREAD, ASYNC_R_FAILED_TO_SET_POOL);
+        goto err;
+    }
+
+    return 1;
+err:
+    async_empty_pool(pool);
+    sk_ASYNC_JOB_free(pool->jobs);
+    OPENSSL_free(pool);
+    return 0;
+}
+
+void async_delete_thread_state(void)
+{
+    async_pool *pool = (async_pool *)CRYPTO_THREAD_get_local(&poolkey);
+
+    if (pool != NULL) {
+        async_empty_pool(pool);
+        sk_ASYNC_JOB_free(pool->jobs);
+        OPENSSL_free(pool);
+        CRYPTO_THREAD_set_local(&poolkey, NULL);
+    }
+    async_local_cleanup();
+    async_ctx_free();
+}
+
+void ASYNC_cleanup_thread(void)
+{
+    if (!OPENSSL_init_crypto(OPENSSL_INIT_ASYNC, NULL))
+        return;
+
+    async_delete_thread_state();
+}
+
+ASYNC_JOB *ASYNC_get_current_job(void)
+{
+    async_ctx *ctx;
+
+    if (!OPENSSL_init_crypto(OPENSSL_INIT_ASYNC, NULL))
+        return NULL;
+
+    ctx = async_get_ctx();
+    if (ctx == NULL)
+        return NULL;
+
+    return ctx->currjob;
+}
+
+ASYNC_WAIT_CTX *ASYNC_get_wait_ctx(ASYNC_JOB *job)
+{
+    return job->waitctx;
+}
+
+void ASYNC_block_pause(void)
+{
+    async_ctx *ctx;
+
+    if (!OPENSSL_init_crypto(OPENSSL_INIT_ASYNC, NULL))
+        return;
+
+    ctx = async_get_ctx();
+    if (ctx == NULL || ctx->currjob == NULL) {
+        /*
+         * We're not in a job anyway so ignore this
+         */
+        return;
+    }
+    ctx->blocked++;
+}
+
+void ASYNC_unblock_pause(void)
+{
+    async_ctx *ctx;
+
+    if (!OPENSSL_init_crypto(OPENSSL_INIT_ASYNC, NULL))
+        return;
+
+    ctx = async_get_ctx();
+    if (ctx == NULL || ctx->currjob == NULL) {
+        /*
+         * We're not in a job anyway so ignore this
+         */
+        return;
+    }
+    if (ctx->blocked > 0)
+        ctx->blocked--;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/async/async_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/async/async_err.c
new file mode 100644
index 000000000..fd5527aae
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/async/async_err.c
@@ -0,0 +1,51 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/asyncerr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA ASYNC_str_functs[] = {
+    {ERR_PACK(ERR_LIB_ASYNC, ASYNC_F_ASYNC_CTX_NEW, 0), "async_ctx_new"},
+    {ERR_PACK(ERR_LIB_ASYNC, ASYNC_F_ASYNC_INIT_THREAD, 0),
+     "ASYNC_init_thread"},
+    {ERR_PACK(ERR_LIB_ASYNC, ASYNC_F_ASYNC_JOB_NEW, 0), "async_job_new"},
+    {ERR_PACK(ERR_LIB_ASYNC, ASYNC_F_ASYNC_PAUSE_JOB, 0), "ASYNC_pause_job"},
+    {ERR_PACK(ERR_LIB_ASYNC, ASYNC_F_ASYNC_START_FUNC, 0), "async_start_func"},
+    {ERR_PACK(ERR_LIB_ASYNC, ASYNC_F_ASYNC_START_JOB, 0), "ASYNC_start_job"},
+    {ERR_PACK(ERR_LIB_ASYNC, ASYNC_F_ASYNC_WAIT_CTX_SET_WAIT_FD, 0),
+     "ASYNC_WAIT_CTX_set_wait_fd"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA ASYNC_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_ASYNC, 0, ASYNC_R_FAILED_TO_SET_POOL),
+    "failed to set pool"},
+    {ERR_PACK(ERR_LIB_ASYNC, 0, ASYNC_R_FAILED_TO_SWAP_CONTEXT),
+    "failed to swap context"},
+    {ERR_PACK(ERR_LIB_ASYNC, 0, ASYNC_R_INIT_FAILED), "init failed"},
+    {ERR_PACK(ERR_LIB_ASYNC, 0, ASYNC_R_INVALID_POOL_SIZE),
+    "invalid pool size"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_ASYNC_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(ASYNC_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(ASYNC_str_functs);
+        ERR_load_strings_const(ASYNC_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/async/async_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/async/async_locl.h
new file mode 100644
index 000000000..d7790293f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/async/async_locl.h
@@ -0,0 +1,77 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Must do this before including any header files, because on MacOS/X <stlib.h>
+ * includes <signal.h> which includes <ucontext.h>
+ */
+#if defined(__APPLE__) && defined(__MACH__) && !defined(_XOPEN_SOURCE)
+# define _XOPEN_SOURCE          /* Otherwise incomplete ucontext_t structure */
+# pragma GCC diagnostic ignored "-Wdeprecated-declarations"
+#endif
+
+#if defined(_WIN32)
+# include <windows.h>
+#endif
+
+#include "internal/async.h"
+#include <openssl/crypto.h>
+
+typedef struct async_ctx_st async_ctx;
+typedef struct async_pool_st async_pool;
+
+#include "arch/async_win.h"
+#include "arch/async_posix.h"
+#include "arch/async_null.h"
+
+struct async_ctx_st {
+    async_fibre dispatcher;
+    ASYNC_JOB *currjob;
+    unsigned int blocked;
+};
+
+struct async_job_st {
+    async_fibre fibrectx;
+    int (*func) (void *);
+    void *funcargs;
+    int ret;
+    int status;
+    ASYNC_WAIT_CTX *waitctx;
+};
+
+struct fd_lookup_st {
+    const void *key;
+    OSSL_ASYNC_FD fd;
+    void *custom_data;
+    void (*cleanup)(ASYNC_WAIT_CTX *, const void *, OSSL_ASYNC_FD, void *);
+    int add;
+    int del;
+    struct fd_lookup_st *next;
+};
+
+struct async_wait_ctx_st {
+    struct fd_lookup_st *fds;
+    size_t numadd;
+    size_t numdel;
+};
+
+DEFINE_STACK_OF(ASYNC_JOB)
+
+struct async_pool_st {
+    STACK_OF(ASYNC_JOB) *jobs;
+    size_t curr_size;
+    size_t max_size;
+};
+
+void async_local_cleanup(void);
+void async_start_func(void);
+async_ctx *async_get_ctx(void);
+
+void async_wait_ctx_reset_counts(ASYNC_WAIT_CTX *ctx);
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/async/async_wait.c b/trunk/3rdparty/openssl-1.1-fit/crypto/async/async_wait.c
new file mode 100644
index 000000000..b23e43e8c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/async/async_wait.c
@@ -0,0 +1,213 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* This must be the first #include file */
+#include "async_locl.h"
+
+#include <openssl/err.h>
+
+ASYNC_WAIT_CTX *ASYNC_WAIT_CTX_new(void)
+{
+    return OPENSSL_zalloc(sizeof(ASYNC_WAIT_CTX));
+}
+
+void ASYNC_WAIT_CTX_free(ASYNC_WAIT_CTX *ctx)
+{
+    struct fd_lookup_st *curr;
+    struct fd_lookup_st *next;
+
+    if (ctx == NULL)
+        return;
+
+    curr = ctx->fds;
+    while (curr != NULL) {
+        if (!curr->del) {
+            /* Only try and cleanup if it hasn't been marked deleted */
+            if (curr->cleanup != NULL)
+                curr->cleanup(ctx, curr->key, curr->fd, curr->custom_data);
+        }
+        /* Always free the fd_lookup_st */
+        next = curr->next;
+        OPENSSL_free(curr);
+        curr = next;
+    }
+
+    OPENSSL_free(ctx);
+}
+int ASYNC_WAIT_CTX_set_wait_fd(ASYNC_WAIT_CTX *ctx, const void *key,
+                               OSSL_ASYNC_FD fd, void *custom_data,
+                               void (*cleanup)(ASYNC_WAIT_CTX *, const void *,
+                                               OSSL_ASYNC_FD, void *))
+{
+    struct fd_lookup_st *fdlookup;
+
+    if ((fdlookup = OPENSSL_zalloc(sizeof(*fdlookup))) == NULL) {
+        ASYNCerr(ASYNC_F_ASYNC_WAIT_CTX_SET_WAIT_FD, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    fdlookup->key = key;
+    fdlookup->fd = fd;
+    fdlookup->custom_data = custom_data;
+    fdlookup->cleanup = cleanup;
+    fdlookup->add = 1;
+    fdlookup->next = ctx->fds;
+    ctx->fds = fdlookup;
+    ctx->numadd++;
+    return 1;
+}
+
+int ASYNC_WAIT_CTX_get_fd(ASYNC_WAIT_CTX *ctx, const void *key,
+                          OSSL_ASYNC_FD *fd, void **custom_data)
+{
+    struct fd_lookup_st *curr;
+
+    curr = ctx->fds;
+    while (curr != NULL) {
+        if (curr->del) {
+            /* This one has been marked deleted so do nothing */
+            curr = curr->next;
+            continue;
+        }
+        if (curr->key == key) {
+            *fd = curr->fd;
+            *custom_data = curr->custom_data;
+            return 1;
+        }
+        curr = curr->next;
+    }
+    return 0;
+}
+
+int ASYNC_WAIT_CTX_get_all_fds(ASYNC_WAIT_CTX *ctx, OSSL_ASYNC_FD *fd,
+                               size_t *numfds)
+{
+    struct fd_lookup_st *curr;
+
+    curr = ctx->fds;
+    *numfds = 0;
+    while (curr != NULL) {
+        if (curr->del) {
+            /* This one has been marked deleted so do nothing */
+            curr = curr->next;
+            continue;
+        }
+        if (fd != NULL) {
+            *fd = curr->fd;
+            fd++;
+        }
+        (*numfds)++;
+        curr = curr->next;
+    }
+    return 1;
+}
+
+int ASYNC_WAIT_CTX_get_changed_fds(ASYNC_WAIT_CTX *ctx, OSSL_ASYNC_FD *addfd,
+                                   size_t *numaddfds, OSSL_ASYNC_FD *delfd,
+                                   size_t *numdelfds)
+{
+    struct fd_lookup_st *curr;
+
+    *numaddfds = ctx->numadd;
+    *numdelfds = ctx->numdel;
+    if (addfd == NULL && delfd == NULL)
+        return 1;
+
+    curr = ctx->fds;
+
+    while (curr != NULL) {
+        /* We ignore fds that have been marked as both added and deleted */
+        if (curr->del && !curr->add && (delfd != NULL)) {
+            *delfd = curr->fd;
+            delfd++;
+        }
+        if (curr->add && !curr->del && (addfd != NULL)) {
+            *addfd = curr->fd;
+            addfd++;
+        }
+        curr = curr->next;
+    }
+
+    return 1;
+}
+
+int ASYNC_WAIT_CTX_clear_fd(ASYNC_WAIT_CTX *ctx, const void *key)
+{
+    struct fd_lookup_st *curr, *prev;
+
+    curr = ctx->fds;
+    prev = NULL;
+    while (curr != NULL) {
+        if (curr->del == 1) {
+            /* This one has been marked deleted already so do nothing */
+            prev = curr;
+            curr = curr->next;
+            continue;
+        }
+        if (curr->key == key) {
+            /* If fd has just been added, remove it from the list */
+            if (curr->add == 1) {
+                if (ctx->fds == curr) {
+                    ctx->fds = curr->next;
+                } else {
+                    prev->next = curr->next;
+                }
+
+                /* It is responsibility of the caller to cleanup before calling
+                 * ASYNC_WAIT_CTX_clear_fd
+                 */
+                OPENSSL_free(curr);
+                ctx->numadd--;
+                return 1;
+            }
+
+            /*
+             * Mark it as deleted. We don't call cleanup if explicitly asked
+             * to clear an fd. We assume the caller is going to do that (if
+             * appropriate).
+             */
+            curr->del = 1;
+            ctx->numdel++;
+            return 1;
+        }
+        prev = curr;
+        curr = curr->next;
+    }
+    return 0;
+}
+
+void async_wait_ctx_reset_counts(ASYNC_WAIT_CTX *ctx)
+{
+    struct fd_lookup_st *curr, *prev = NULL;
+
+    ctx->numadd = 0;
+    ctx->numdel = 0;
+
+    curr = ctx->fds;
+
+    while (curr != NULL) {
+        if (curr->del) {
+            if (prev == NULL)
+                ctx->fds = curr->next;
+            else
+                prev->next = curr->next;
+            OPENSSL_free(curr);
+            if (prev == NULL)
+                curr = ctx->fds;
+            else
+                curr = prev->next;
+            continue;
+        }
+        if (curr->add) {
+            curr->add = 0;
+        }
+        prev = curr;
+        curr = curr->next;
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/async/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/async/build.info
new file mode 100644
index 000000000..278e3e9f8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/async/build.info
@@ -0,0 +1,4 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        async.c async_wait.c async_err.c arch/async_posix.c arch/async_win.c \
+        arch/async_null.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bf/asm/bf-586.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/asm/bf-586.pl
new file mode 100644
index 000000000..4e913aecf
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/asm/bf-586.pl
@@ -0,0 +1,149 @@
+#! /usr/bin/env perl
+# Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+require "cbc.pl";
+
+$output = pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0],$ARGV[$#ARGV] eq "386");
+
+$BF_ROUNDS=16;
+$BF_OFF=($BF_ROUNDS+2)*4;
+$L="edi";
+$R="esi";
+$P="ebp";
+$tmp1="eax";
+$tmp2="ebx";
+$tmp3="ecx";
+$tmp4="edx";
+
+&BF_encrypt("BF_encrypt",1);
+&BF_encrypt("BF_decrypt",0);
+&cbc("BF_cbc_encrypt","BF_encrypt","BF_decrypt",1,4,5,3,-1,-1);
+&asm_finish();
+
+close STDOUT;
+
+sub BF_encrypt
+	{
+	local($name,$enc)=@_;
+
+	&function_begin_B($name,"");
+
+	&comment("");
+
+	&push("ebp");
+	&push("ebx");
+	&mov($tmp2,&wparam(0));
+	&mov($P,&wparam(1));
+	&push("esi");
+	&push("edi");
+
+	&comment("Load the 2 words");
+	&mov($L,&DWP(0,$tmp2,"",0));
+	&mov($R,&DWP(4,$tmp2,"",0));
+
+	&xor(	$tmp1,	$tmp1);
+
+	# encrypting part
+
+	if ($enc)
+		{
+		 &mov($tmp2,&DWP(0,$P,"",0));
+		&xor(	$tmp3,	$tmp3);
+
+		&xor($L,$tmp2);
+		for ($i=0; $i<$BF_ROUNDS; $i+=2)
+			{
+			&comment("");
+			&comment("Round $i");
+			&BF_ENCRYPT($i+1,$R,$L,$P,$tmp1,$tmp2,$tmp3,$tmp4,1);
+
+			&comment("");
+			&comment("Round ".sprintf("%d",$i+1));
+			&BF_ENCRYPT($i+2,$L,$R,$P,$tmp1,$tmp2,$tmp3,$tmp4,1);
+			}
+		# &mov($tmp1,&wparam(0)); In last loop
+		&mov($tmp4,&DWP(($BF_ROUNDS+1)*4,$P,"",0));
+		}
+	else
+		{
+		 &mov($tmp2,&DWP(($BF_ROUNDS+1)*4,$P,"",0));
+		&xor(	$tmp3,	$tmp3);
+
+		&xor($L,$tmp2);
+		for ($i=$BF_ROUNDS; $i>0; $i-=2)
+			{
+			&comment("");
+			&comment("Round $i");
+			&BF_ENCRYPT($i,$R,$L,$P,$tmp1,$tmp2,$tmp3,$tmp4,0);
+			&comment("");
+			&comment("Round ".sprintf("%d",$i-1));
+			&BF_ENCRYPT($i-1,$L,$R,$P,$tmp1,$tmp2,$tmp3,$tmp4,0);
+			}
+		# &mov($tmp1,&wparam(0)); In last loop
+		&mov($tmp4,&DWP(0,$P,"",0));
+		}
+
+	&xor($R,$tmp4);
+	&mov(&DWP(4,$tmp1,"",0),$L);
+
+	&mov(&DWP(0,$tmp1,"",0),$R);
+	&function_end($name);
+	}
+
+sub BF_ENCRYPT
+	{
+	local($i,$L,$R,$P,$tmp1,$tmp2,$tmp3,$tmp4,$enc)=@_;
+
+	&mov(	$tmp4,		&DWP(&n2a($i*4),$P,"",0)); # for next round
+
+	&mov(	$tmp2,		$R);
+	&xor(	$L,		$tmp4);
+
+	&shr(	$tmp2,		16);
+	&mov(	$tmp4,		$R);
+
+	&movb(	&LB($tmp1),	&HB($tmp2));	# A
+	&and(	$tmp2,		0xff);		# B
+
+	&movb(	&LB($tmp3),	&HB($tmp4));	# C
+	&and(	$tmp4,		0xff);		# D
+
+	&mov(	$tmp1,		&DWP(&n2a($BF_OFF+0x0000),$P,$tmp1,4));
+	&mov(	$tmp2,		&DWP(&n2a($BF_OFF+0x0400),$P,$tmp2,4));
+
+	&add(	$tmp2,		$tmp1);
+	&mov(	$tmp1,		&DWP(&n2a($BF_OFF+0x0800),$P,$tmp3,4));
+
+	&xor(	$tmp2,		$tmp1);
+	&mov(	$tmp4,		&DWP(&n2a($BF_OFF+0x0C00),$P,$tmp4,4));
+
+	&add(	$tmp2,		$tmp4);
+	if (($enc && ($i != 16)) || ((!$enc) && ($i != 1)))
+		{ &xor(	$tmp1,		$tmp1); }
+	else
+		{
+		&comment("Load parameter 0 ($i) enc=$enc");
+		&mov($tmp1,&wparam(0));
+		} # In last loop
+
+	&xor(	$L,		$tmp2);
+	# delay
+	}
+
+sub n2a
+	{
+	sprintf("%d",$_[0]);
+	}
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_cfb64.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_cfb64.c
new file mode 100644
index 000000000..ce6e13b5a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_cfb64.c
@@ -0,0 +1,74 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/blowfish.h>
+#include "bf_locl.h"
+
+/*
+ * The input and output encrypted as though 64bit cfb mode is being used.
+ * The extra state information to record how much of the 64bit block we have
+ * used is contained in *num;
+ */
+
+void BF_cfb64_encrypt(const unsigned char *in, unsigned char *out,
+                      long length, const BF_KEY *schedule,
+                      unsigned char *ivec, int *num, int encrypt)
+{
+    register BF_LONG v0, v1, t;
+    register int n = *num;
+    register long l = length;
+    BF_LONG ti[2];
+    unsigned char *iv, c, cc;
+
+    iv = (unsigned char *)ivec;
+    if (encrypt) {
+        while (l--) {
+            if (n == 0) {
+                n2l(iv, v0);
+                ti[0] = v0;
+                n2l(iv, v1);
+                ti[1] = v1;
+                BF_encrypt((BF_LONG *)ti, schedule);
+                iv = (unsigned char *)ivec;
+                t = ti[0];
+                l2n(t, iv);
+                t = ti[1];
+                l2n(t, iv);
+                iv = (unsigned char *)ivec;
+            }
+            c = *(in++) ^ iv[n];
+            *(out++) = c;
+            iv[n] = c;
+            n = (n + 1) & 0x07;
+        }
+    } else {
+        while (l--) {
+            if (n == 0) {
+                n2l(iv, v0);
+                ti[0] = v0;
+                n2l(iv, v1);
+                ti[1] = v1;
+                BF_encrypt((BF_LONG *)ti, schedule);
+                iv = (unsigned char *)ivec;
+                t = ti[0];
+                l2n(t, iv);
+                t = ti[1];
+                l2n(t, iv);
+                iv = (unsigned char *)ivec;
+            }
+            cc = *(in++);
+            c = iv[n];
+            iv[n] = cc;
+            *(out++) = c ^ cc;
+            n = (n + 1) & 0x07;
+        }
+    }
+    v0 = v1 = ti[0] = ti[1] = t = c = cc = 0;
+    *num = n;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_ecb.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_ecb.c
new file mode 100644
index 000000000..dc1becdbe
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_ecb.c
@@ -0,0 +1,43 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/blowfish.h>
+#include "bf_locl.h"
+#include <openssl/opensslv.h>
+
+/*
+ * Blowfish as implemented from 'Blowfish: Springer-Verlag paper' (From
+ * LECTURE NOTES IN COMPUTER SCIENCE 809, FAST SOFTWARE ENCRYPTION, CAMBRIDGE
+ * SECURITY WORKSHOP, CAMBRIDGE, U.K., DECEMBER 9-11, 1993)
+ */
+
+const char *BF_options(void)
+{
+    return "blowfish(ptr)";
+}
+
+void BF_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                    const BF_KEY *key, int encrypt)
+{
+    BF_LONG l, d[2];
+
+    n2l(in, l);
+    d[0] = l;
+    n2l(in, l);
+    d[1] = l;
+    if (encrypt)
+        BF_encrypt(d, key);
+    else
+        BF_decrypt(d, key);
+    l = d[0];
+    l2n(l, out);
+    l = d[1];
+    l2n(l, out);
+    l = d[0] = d[1] = 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_enc.c
new file mode 100644
index 000000000..67c0d78ae
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_enc.c
@@ -0,0 +1,175 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/blowfish.h>
+#include "bf_locl.h"
+
+/*
+ * Blowfish as implemented from 'Blowfish: Springer-Verlag paper' (From
+ * LECTURE NOTES IN COMPUTER SCIENCE 809, FAST SOFTWARE ENCRYPTION, CAMBRIDGE
+ * SECURITY WORKSHOP, CAMBRIDGE, U.K., DECEMBER 9-11, 1993)
+ */
+
+#if (BF_ROUNDS != 16) && (BF_ROUNDS != 20)
+# error If you set BF_ROUNDS to some value other than 16 or 20, you will have \
+to modify the code.
+#endif
+
+void BF_encrypt(BF_LONG *data, const BF_KEY *key)
+{
+    register BF_LONG l, r;
+    register const BF_LONG *p, *s;
+
+    p = key->P;
+    s = &(key->S[0]);
+    l = data[0];
+    r = data[1];
+
+    l ^= p[0];
+    BF_ENC(r, l, s, p[1]);
+    BF_ENC(l, r, s, p[2]);
+    BF_ENC(r, l, s, p[3]);
+    BF_ENC(l, r, s, p[4]);
+    BF_ENC(r, l, s, p[5]);
+    BF_ENC(l, r, s, p[6]);
+    BF_ENC(r, l, s, p[7]);
+    BF_ENC(l, r, s, p[8]);
+    BF_ENC(r, l, s, p[9]);
+    BF_ENC(l, r, s, p[10]);
+    BF_ENC(r, l, s, p[11]);
+    BF_ENC(l, r, s, p[12]);
+    BF_ENC(r, l, s, p[13]);
+    BF_ENC(l, r, s, p[14]);
+    BF_ENC(r, l, s, p[15]);
+    BF_ENC(l, r, s, p[16]);
+# if BF_ROUNDS == 20
+    BF_ENC(r, l, s, p[17]);
+    BF_ENC(l, r, s, p[18]);
+    BF_ENC(r, l, s, p[19]);
+    BF_ENC(l, r, s, p[20]);
+# endif
+    r ^= p[BF_ROUNDS + 1];
+
+    data[1] = l & 0xffffffffU;
+    data[0] = r & 0xffffffffU;
+}
+
+void BF_decrypt(BF_LONG *data, const BF_KEY *key)
+{
+    register BF_LONG l, r;
+    register const BF_LONG *p, *s;
+
+    p = key->P;
+    s = &(key->S[0]);
+    l = data[0];
+    r = data[1];
+
+    l ^= p[BF_ROUNDS + 1];
+#  if BF_ROUNDS == 20
+    BF_ENC(r, l, s, p[20]);
+    BF_ENC(l, r, s, p[19]);
+    BF_ENC(r, l, s, p[18]);
+    BF_ENC(l, r, s, p[17]);
+#  endif
+    BF_ENC(r, l, s, p[16]);
+    BF_ENC(l, r, s, p[15]);
+    BF_ENC(r, l, s, p[14]);
+    BF_ENC(l, r, s, p[13]);
+    BF_ENC(r, l, s, p[12]);
+    BF_ENC(l, r, s, p[11]);
+    BF_ENC(r, l, s, p[10]);
+    BF_ENC(l, r, s, p[9]);
+    BF_ENC(r, l, s, p[8]);
+    BF_ENC(l, r, s, p[7]);
+    BF_ENC(r, l, s, p[6]);
+    BF_ENC(l, r, s, p[5]);
+    BF_ENC(r, l, s, p[4]);
+    BF_ENC(l, r, s, p[3]);
+    BF_ENC(r, l, s, p[2]);
+    BF_ENC(l, r, s, p[1]);
+    r ^= p[0];
+
+    data[1] = l & 0xffffffffU;
+    data[0] = r & 0xffffffffU;
+}
+
+void BF_cbc_encrypt(const unsigned char *in, unsigned char *out, long length,
+                    const BF_KEY *schedule, unsigned char *ivec, int encrypt)
+{
+    register BF_LONG tin0, tin1;
+    register BF_LONG tout0, tout1, xor0, xor1;
+    register long l = length;
+    BF_LONG tin[2];
+
+    if (encrypt) {
+        n2l(ivec, tout0);
+        n2l(ivec, tout1);
+        ivec -= 8;
+        for (l -= 8; l >= 0; l -= 8) {
+            n2l(in, tin0);
+            n2l(in, tin1);
+            tin0 ^= tout0;
+            tin1 ^= tout1;
+            tin[0] = tin0;
+            tin[1] = tin1;
+            BF_encrypt(tin, schedule);
+            tout0 = tin[0];
+            tout1 = tin[1];
+            l2n(tout0, out);
+            l2n(tout1, out);
+        }
+        if (l != -8) {
+            n2ln(in, tin0, tin1, l + 8);
+            tin0 ^= tout0;
+            tin1 ^= tout1;
+            tin[0] = tin0;
+            tin[1] = tin1;
+            BF_encrypt(tin, schedule);
+            tout0 = tin[0];
+            tout1 = tin[1];
+            l2n(tout0, out);
+            l2n(tout1, out);
+        }
+        l2n(tout0, ivec);
+        l2n(tout1, ivec);
+    } else {
+        n2l(ivec, xor0);
+        n2l(ivec, xor1);
+        ivec -= 8;
+        for (l -= 8; l >= 0; l -= 8) {
+            n2l(in, tin0);
+            n2l(in, tin1);
+            tin[0] = tin0;
+            tin[1] = tin1;
+            BF_decrypt(tin, schedule);
+            tout0 = tin[0] ^ xor0;
+            tout1 = tin[1] ^ xor1;
+            l2n(tout0, out);
+            l2n(tout1, out);
+            xor0 = tin0;
+            xor1 = tin1;
+        }
+        if (l != -8) {
+            n2l(in, tin0);
+            n2l(in, tin1);
+            tin[0] = tin0;
+            tin[1] = tin1;
+            BF_decrypt(tin, schedule);
+            tout0 = tin[0] ^ xor0;
+            tout1 = tin[1] ^ xor1;
+            l2nn(tout0, tout1, out, l + 8);
+            xor0 = tin0;
+            xor1 = tin1;
+        }
+        l2n(xor0, ivec);
+        l2n(xor1, ivec);
+    }
+    tin0 = tin1 = tout0 = tout1 = xor0 = xor1 = 0;
+    tin[0] = tin[1] = 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_locl.h
new file mode 100644
index 000000000..b1a415e51
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_locl.h
@@ -0,0 +1,84 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_BF_LOCL_H
+# define HEADER_BF_LOCL_H
+# include <openssl/opensslconf.h>
+
+/* NOTE - c is not incremented as per n2l */
+# define n2ln(c,l1,l2,n) { \
+                        c+=n; \
+                        l1=l2=0; \
+                        switch (n) { \
+                        case 8: l2 =((unsigned long)(*(--(c))))    ; \
+                        /* fall thru */                              \
+                        case 7: l2|=((unsigned long)(*(--(c))))<< 8; \
+                        /* fall thru */                              \
+                        case 6: l2|=((unsigned long)(*(--(c))))<<16; \
+                        /* fall thru */                              \
+                        case 5: l2|=((unsigned long)(*(--(c))))<<24; \
+                        /* fall thru */                              \
+                        case 4: l1 =((unsigned long)(*(--(c))))    ; \
+                        /* fall thru */                              \
+                        case 3: l1|=((unsigned long)(*(--(c))))<< 8; \
+                        /* fall thru */                              \
+                        case 2: l1|=((unsigned long)(*(--(c))))<<16; \
+                        /* fall thru */                              \
+                        case 1: l1|=((unsigned long)(*(--(c))))<<24; \
+                                } \
+                        }
+
+/* NOTE - c is not incremented as per l2n */
+# define l2nn(l1,l2,c,n) { \
+                        c+=n; \
+                        switch (n) { \
+                        case 8: *(--(c))=(unsigned char)(((l2)    )&0xff); \
+                        /* fall thru */                                    \
+                        case 7: *(--(c))=(unsigned char)(((l2)>> 8)&0xff); \
+                        /* fall thru */                                    \
+                        case 6: *(--(c))=(unsigned char)(((l2)>>16)&0xff); \
+                        /* fall thru */                                    \
+                        case 5: *(--(c))=(unsigned char)(((l2)>>24)&0xff); \
+                        /* fall thru */                                    \
+                        case 4: *(--(c))=(unsigned char)(((l1)    )&0xff); \
+                        /* fall thru */                                    \
+                        case 3: *(--(c))=(unsigned char)(((l1)>> 8)&0xff); \
+                        /* fall thru */                                    \
+                        case 2: *(--(c))=(unsigned char)(((l1)>>16)&0xff); \
+                        /* fall thru */                                    \
+                        case 1: *(--(c))=(unsigned char)(((l1)>>24)&0xff); \
+                                } \
+                        }
+
+# undef n2l
+# define n2l(c,l)        (l =((unsigned long)(*((c)++)))<<24L, \
+                         l|=((unsigned long)(*((c)++)))<<16L, \
+                         l|=((unsigned long)(*((c)++)))<< 8L, \
+                         l|=((unsigned long)(*((c)++))))
+
+# undef l2n
+# define l2n(l,c)        (*((c)++)=(unsigned char)(((l)>>24L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>16L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>> 8L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)     )&0xff))
+
+/*
+ * This is actually a big endian algorithm, the most significant byte is used
+ * to lookup array 0
+ */
+
+# define BF_ENC(LL,R,S,P) ( \
+        LL^=P, \
+        LL^=((( S[       ((R>>24)&0xff)] + \
+                S[0x0100+((R>>16)&0xff)])^ \
+                S[0x0200+((R>> 8)&0xff)])+ \
+                S[0x0300+((R    )&0xff)])&0xffffffffU \
+        )
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_ofb64.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_ofb64.c
new file mode 100644
index 000000000..6418217b3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_ofb64.c
@@ -0,0 +1,61 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/blowfish.h>
+#include "bf_locl.h"
+
+/*
+ * The input and output encrypted as though 64bit ofb mode is being used.
+ * The extra state information to record how much of the 64bit block we have
+ * used is contained in *num;
+ */
+void BF_ofb64_encrypt(const unsigned char *in, unsigned char *out,
+                      long length, const BF_KEY *schedule,
+                      unsigned char *ivec, int *num)
+{
+    register BF_LONG v0, v1, t;
+    register int n = *num;
+    register long l = length;
+    unsigned char d[8];
+    register char *dp;
+    BF_LONG ti[2];
+    unsigned char *iv;
+    int save = 0;
+
+    iv = (unsigned char *)ivec;
+    n2l(iv, v0);
+    n2l(iv, v1);
+    ti[0] = v0;
+    ti[1] = v1;
+    dp = (char *)d;
+    l2n(v0, dp);
+    l2n(v1, dp);
+    while (l--) {
+        if (n == 0) {
+            BF_encrypt((BF_LONG *)ti, schedule);
+            dp = (char *)d;
+            t = ti[0];
+            l2n(t, dp);
+            t = ti[1];
+            l2n(t, dp);
+            save++;
+        }
+        *(out++) = *(in++) ^ d[n];
+        n = (n + 1) & 0x07;
+    }
+    if (save) {
+        v0 = ti[0];
+        v1 = ti[1];
+        iv = (unsigned char *)ivec;
+        l2n(v0, iv);
+        l2n(v1, iv);
+    }
+    t = v0 = v1 = ti[0] = ti[1] = 0;
+    *num = n;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_pi.h b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_pi.h
new file mode 100644
index 000000000..a054b03f8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_pi.h
@@ -0,0 +1,530 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+static const BF_KEY bf_init = {
+    {
+     0x243f6a88L, 0x85a308d3L, 0x13198a2eL, 0x03707344L,
+     0xa4093822L, 0x299f31d0L, 0x082efa98L, 0xec4e6c89L,
+     0x452821e6L, 0x38d01377L, 0xbe5466cfL, 0x34e90c6cL,
+     0xc0ac29b7L, 0xc97c50ddL, 0x3f84d5b5L, 0xb5470917L,
+     0x9216d5d9L, 0x8979fb1b}, {
+                                0xd1310ba6L, 0x98dfb5acL, 0x2ffd72dbL,
+                                0xd01adfb7L,
+                                0xb8e1afedL, 0x6a267e96L, 0xba7c9045L,
+                                0xf12c7f99L,
+                                0x24a19947L, 0xb3916cf7L, 0x0801f2e2L,
+                                0x858efc16L,
+                                0x636920d8L, 0x71574e69L, 0xa458fea3L,
+                                0xf4933d7eL,
+                                0x0d95748fL, 0x728eb658L, 0x718bcd58L,
+                                0x82154aeeL,
+                                0x7b54a41dL, 0xc25a59b5L, 0x9c30d539L,
+                                0x2af26013L,
+                                0xc5d1b023L, 0x286085f0L, 0xca417918L,
+                                0xb8db38efL,
+                                0x8e79dcb0L, 0x603a180eL, 0x6c9e0e8bL,
+                                0xb01e8a3eL,
+                                0xd71577c1L, 0xbd314b27L, 0x78af2fdaL,
+                                0x55605c60L,
+                                0xe65525f3L, 0xaa55ab94L, 0x57489862L,
+                                0x63e81440L,
+                                0x55ca396aL, 0x2aab10b6L, 0xb4cc5c34L,
+                                0x1141e8ceL,
+                                0xa15486afL, 0x7c72e993L, 0xb3ee1411L,
+                                0x636fbc2aL,
+                                0x2ba9c55dL, 0x741831f6L, 0xce5c3e16L,
+                                0x9b87931eL,
+                                0xafd6ba33L, 0x6c24cf5cL, 0x7a325381L,
+                                0x28958677L,
+                                0x3b8f4898L, 0x6b4bb9afL, 0xc4bfe81bL,
+                                0x66282193L,
+                                0x61d809ccL, 0xfb21a991L, 0x487cac60L,
+                                0x5dec8032L,
+                                0xef845d5dL, 0xe98575b1L, 0xdc262302L,
+                                0xeb651b88L,
+                                0x23893e81L, 0xd396acc5L, 0x0f6d6ff3L,
+                                0x83f44239L,
+                                0x2e0b4482L, 0xa4842004L, 0x69c8f04aL,
+                                0x9e1f9b5eL,
+                                0x21c66842L, 0xf6e96c9aL, 0x670c9c61L,
+                                0xabd388f0L,
+                                0x6a51a0d2L, 0xd8542f68L, 0x960fa728L,
+                                0xab5133a3L,
+                                0x6eef0b6cL, 0x137a3be4L, 0xba3bf050L,
+                                0x7efb2a98L,
+                                0xa1f1651dL, 0x39af0176L, 0x66ca593eL,
+                                0x82430e88L,
+                                0x8cee8619L, 0x456f9fb4L, 0x7d84a5c3L,
+                                0x3b8b5ebeL,
+                                0xe06f75d8L, 0x85c12073L, 0x401a449fL,
+                                0x56c16aa6L,
+                                0x4ed3aa62L, 0x363f7706L, 0x1bfedf72L,
+                                0x429b023dL,
+                                0x37d0d724L, 0xd00a1248L, 0xdb0fead3L,
+                                0x49f1c09bL,
+                                0x075372c9L, 0x80991b7bL, 0x25d479d8L,
+                                0xf6e8def7L,
+                                0xe3fe501aL, 0xb6794c3bL, 0x976ce0bdL,
+                                0x04c006baL,
+                                0xc1a94fb6L, 0x409f60c4L, 0x5e5c9ec2L,
+                                0x196a2463L,
+                                0x68fb6fafL, 0x3e6c53b5L, 0x1339b2ebL,
+                                0x3b52ec6fL,
+                                0x6dfc511fL, 0x9b30952cL, 0xcc814544L,
+                                0xaf5ebd09L,
+                                0xbee3d004L, 0xde334afdL, 0x660f2807L,
+                                0x192e4bb3L,
+                                0xc0cba857L, 0x45c8740fL, 0xd20b5f39L,
+                                0xb9d3fbdbL,
+                                0x5579c0bdL, 0x1a60320aL, 0xd6a100c6L,
+                                0x402c7279L,
+                                0x679f25feL, 0xfb1fa3ccL, 0x8ea5e9f8L,
+                                0xdb3222f8L,
+                                0x3c7516dfL, 0xfd616b15L, 0x2f501ec8L,
+                                0xad0552abL,
+                                0x323db5faL, 0xfd238760L, 0x53317b48L,
+                                0x3e00df82L,
+                                0x9e5c57bbL, 0xca6f8ca0L, 0x1a87562eL,
+                                0xdf1769dbL,
+                                0xd542a8f6L, 0x287effc3L, 0xac6732c6L,
+                                0x8c4f5573L,
+                                0x695b27b0L, 0xbbca58c8L, 0xe1ffa35dL,
+                                0xb8f011a0L,
+                                0x10fa3d98L, 0xfd2183b8L, 0x4afcb56cL,
+                                0x2dd1d35bL,
+                                0x9a53e479L, 0xb6f84565L, 0xd28e49bcL,
+                                0x4bfb9790L,
+                                0xe1ddf2daL, 0xa4cb7e33L, 0x62fb1341L,
+                                0xcee4c6e8L,
+                                0xef20cadaL, 0x36774c01L, 0xd07e9efeL,
+                                0x2bf11fb4L,
+                                0x95dbda4dL, 0xae909198L, 0xeaad8e71L,
+                                0x6b93d5a0L,
+                                0xd08ed1d0L, 0xafc725e0L, 0x8e3c5b2fL,
+                                0x8e7594b7L,
+                                0x8ff6e2fbL, 0xf2122b64L, 0x8888b812L,
+                                0x900df01cL,
+                                0x4fad5ea0L, 0x688fc31cL, 0xd1cff191L,
+                                0xb3a8c1adL,
+                                0x2f2f2218L, 0xbe0e1777L, 0xea752dfeL,
+                                0x8b021fa1L,
+                                0xe5a0cc0fL, 0xb56f74e8L, 0x18acf3d6L,
+                                0xce89e299L,
+                                0xb4a84fe0L, 0xfd13e0b7L, 0x7cc43b81L,
+                                0xd2ada8d9L,
+                                0x165fa266L, 0x80957705L, 0x93cc7314L,
+                                0x211a1477L,
+                                0xe6ad2065L, 0x77b5fa86L, 0xc75442f5L,
+                                0xfb9d35cfL,
+                                0xebcdaf0cL, 0x7b3e89a0L, 0xd6411bd3L,
+                                0xae1e7e49L,
+                                0x00250e2dL, 0x2071b35eL, 0x226800bbL,
+                                0x57b8e0afL,
+                                0x2464369bL, 0xf009b91eL, 0x5563911dL,
+                                0x59dfa6aaL,
+                                0x78c14389L, 0xd95a537fL, 0x207d5ba2L,
+                                0x02e5b9c5L,
+                                0x83260376L, 0x6295cfa9L, 0x11c81968L,
+                                0x4e734a41L,
+                                0xb3472dcaL, 0x7b14a94aL, 0x1b510052L,
+                                0x9a532915L,
+                                0xd60f573fL, 0xbc9bc6e4L, 0x2b60a476L,
+                                0x81e67400L,
+                                0x08ba6fb5L, 0x571be91fL, 0xf296ec6bL,
+                                0x2a0dd915L,
+                                0xb6636521L, 0xe7b9f9b6L, 0xff34052eL,
+                                0xc5855664L,
+                                0x53b02d5dL, 0xa99f8fa1L, 0x08ba4799L,
+                                0x6e85076aL,
+                                0x4b7a70e9L, 0xb5b32944L, 0xdb75092eL,
+                                0xc4192623L,
+                                0xad6ea6b0L, 0x49a7df7dL, 0x9cee60b8L,
+                                0x8fedb266L,
+                                0xecaa8c71L, 0x699a17ffL, 0x5664526cL,
+                                0xc2b19ee1L,
+                                0x193602a5L, 0x75094c29L, 0xa0591340L,
+                                0xe4183a3eL,
+                                0x3f54989aL, 0x5b429d65L, 0x6b8fe4d6L,
+                                0x99f73fd6L,
+                                0xa1d29c07L, 0xefe830f5L, 0x4d2d38e6L,
+                                0xf0255dc1L,
+                                0x4cdd2086L, 0x8470eb26L, 0x6382e9c6L,
+                                0x021ecc5eL,
+                                0x09686b3fL, 0x3ebaefc9L, 0x3c971814L,
+                                0x6b6a70a1L,
+                                0x687f3584L, 0x52a0e286L, 0xb79c5305L,
+                                0xaa500737L,
+                                0x3e07841cL, 0x7fdeae5cL, 0x8e7d44ecL,
+                                0x5716f2b8L,
+                                0xb03ada37L, 0xf0500c0dL, 0xf01c1f04L,
+                                0x0200b3ffL,
+                                0xae0cf51aL, 0x3cb574b2L, 0x25837a58L,
+                                0xdc0921bdL,
+                                0xd19113f9L, 0x7ca92ff6L, 0x94324773L,
+                                0x22f54701L,
+                                0x3ae5e581L, 0x37c2dadcL, 0xc8b57634L,
+                                0x9af3dda7L,
+                                0xa9446146L, 0x0fd0030eL, 0xecc8c73eL,
+                                0xa4751e41L,
+                                0xe238cd99L, 0x3bea0e2fL, 0x3280bba1L,
+                                0x183eb331L,
+                                0x4e548b38L, 0x4f6db908L, 0x6f420d03L,
+                                0xf60a04bfL,
+                                0x2cb81290L, 0x24977c79L, 0x5679b072L,
+                                0xbcaf89afL,
+                                0xde9a771fL, 0xd9930810L, 0xb38bae12L,
+                                0xdccf3f2eL,
+                                0x5512721fL, 0x2e6b7124L, 0x501adde6L,
+                                0x9f84cd87L,
+                                0x7a584718L, 0x7408da17L, 0xbc9f9abcL,
+                                0xe94b7d8cL,
+                                0xec7aec3aL, 0xdb851dfaL, 0x63094366L,
+                                0xc464c3d2L,
+                                0xef1c1847L, 0x3215d908L, 0xdd433b37L,
+                                0x24c2ba16L,
+                                0x12a14d43L, 0x2a65c451L, 0x50940002L,
+                                0x133ae4ddL,
+                                0x71dff89eL, 0x10314e55L, 0x81ac77d6L,
+                                0x5f11199bL,
+                                0x043556f1L, 0xd7a3c76bL, 0x3c11183bL,
+                                0x5924a509L,
+                                0xf28fe6edL, 0x97f1fbfaL, 0x9ebabf2cL,
+                                0x1e153c6eL,
+                                0x86e34570L, 0xeae96fb1L, 0x860e5e0aL,
+                                0x5a3e2ab3L,
+                                0x771fe71cL, 0x4e3d06faL, 0x2965dcb9L,
+                                0x99e71d0fL,
+                                0x803e89d6L, 0x5266c825L, 0x2e4cc978L,
+                                0x9c10b36aL,
+                                0xc6150ebaL, 0x94e2ea78L, 0xa5fc3c53L,
+                                0x1e0a2df4L,
+                                0xf2f74ea7L, 0x361d2b3dL, 0x1939260fL,
+                                0x19c27960L,
+                                0x5223a708L, 0xf71312b6L, 0xebadfe6eL,
+                                0xeac31f66L,
+                                0xe3bc4595L, 0xa67bc883L, 0xb17f37d1L,
+                                0x018cff28L,
+                                0xc332ddefL, 0xbe6c5aa5L, 0x65582185L,
+                                0x68ab9802L,
+                                0xeecea50fL, 0xdb2f953bL, 0x2aef7dadL,
+                                0x5b6e2f84L,
+                                0x1521b628L, 0x29076170L, 0xecdd4775L,
+                                0x619f1510L,
+                                0x13cca830L, 0xeb61bd96L, 0x0334fe1eL,
+                                0xaa0363cfL,
+                                0xb5735c90L, 0x4c70a239L, 0xd59e9e0bL,
+                                0xcbaade14L,
+                                0xeecc86bcL, 0x60622ca7L, 0x9cab5cabL,
+                                0xb2f3846eL,
+                                0x648b1eafL, 0x19bdf0caL, 0xa02369b9L,
+                                0x655abb50L,
+                                0x40685a32L, 0x3c2ab4b3L, 0x319ee9d5L,
+                                0xc021b8f7L,
+                                0x9b540b19L, 0x875fa099L, 0x95f7997eL,
+                                0x623d7da8L,
+                                0xf837889aL, 0x97e32d77L, 0x11ed935fL,
+                                0x16681281L,
+                                0x0e358829L, 0xc7e61fd6L, 0x96dedfa1L,
+                                0x7858ba99L,
+                                0x57f584a5L, 0x1b227263L, 0x9b83c3ffL,
+                                0x1ac24696L,
+                                0xcdb30aebL, 0x532e3054L, 0x8fd948e4L,
+                                0x6dbc3128L,
+                                0x58ebf2efL, 0x34c6ffeaL, 0xfe28ed61L,
+                                0xee7c3c73L,
+                                0x5d4a14d9L, 0xe864b7e3L, 0x42105d14L,
+                                0x203e13e0L,
+                                0x45eee2b6L, 0xa3aaabeaL, 0xdb6c4f15L,
+                                0xfacb4fd0L,
+                                0xc742f442L, 0xef6abbb5L, 0x654f3b1dL,
+                                0x41cd2105L,
+                                0xd81e799eL, 0x86854dc7L, 0xe44b476aL,
+                                0x3d816250L,
+                                0xcf62a1f2L, 0x5b8d2646L, 0xfc8883a0L,
+                                0xc1c7b6a3L,
+                                0x7f1524c3L, 0x69cb7492L, 0x47848a0bL,
+                                0x5692b285L,
+                                0x095bbf00L, 0xad19489dL, 0x1462b174L,
+                                0x23820e00L,
+                                0x58428d2aL, 0x0c55f5eaL, 0x1dadf43eL,
+                                0x233f7061L,
+                                0x3372f092L, 0x8d937e41L, 0xd65fecf1L,
+                                0x6c223bdbL,
+                                0x7cde3759L, 0xcbee7460L, 0x4085f2a7L,
+                                0xce77326eL,
+                                0xa6078084L, 0x19f8509eL, 0xe8efd855L,
+                                0x61d99735L,
+                                0xa969a7aaL, 0xc50c06c2L, 0x5a04abfcL,
+                                0x800bcadcL,
+                                0x9e447a2eL, 0xc3453484L, 0xfdd56705L,
+                                0x0e1e9ec9L,
+                                0xdb73dbd3L, 0x105588cdL, 0x675fda79L,
+                                0xe3674340L,
+                                0xc5c43465L, 0x713e38d8L, 0x3d28f89eL,
+                                0xf16dff20L,
+                                0x153e21e7L, 0x8fb03d4aL, 0xe6e39f2bL,
+                                0xdb83adf7L,
+                                0xe93d5a68L, 0x948140f7L, 0xf64c261cL,
+                                0x94692934L,
+                                0x411520f7L, 0x7602d4f7L, 0xbcf46b2eL,
+                                0xd4a20068L,
+                                0xd4082471L, 0x3320f46aL, 0x43b7d4b7L,
+                                0x500061afL,
+                                0x1e39f62eL, 0x97244546L, 0x14214f74L,
+                                0xbf8b8840L,
+                                0x4d95fc1dL, 0x96b591afL, 0x70f4ddd3L,
+                                0x66a02f45L,
+                                0xbfbc09ecL, 0x03bd9785L, 0x7fac6dd0L,
+                                0x31cb8504L,
+                                0x96eb27b3L, 0x55fd3941L, 0xda2547e6L,
+                                0xabca0a9aL,
+                                0x28507825L, 0x530429f4L, 0x0a2c86daL,
+                                0xe9b66dfbL,
+                                0x68dc1462L, 0xd7486900L, 0x680ec0a4L,
+                                0x27a18deeL,
+                                0x4f3ffea2L, 0xe887ad8cL, 0xb58ce006L,
+                                0x7af4d6b6L,
+                                0xaace1e7cL, 0xd3375fecL, 0xce78a399L,
+                                0x406b2a42L,
+                                0x20fe9e35L, 0xd9f385b9L, 0xee39d7abL,
+                                0x3b124e8bL,
+                                0x1dc9faf7L, 0x4b6d1856L, 0x26a36631L,
+                                0xeae397b2L,
+                                0x3a6efa74L, 0xdd5b4332L, 0x6841e7f7L,
+                                0xca7820fbL,
+                                0xfb0af54eL, 0xd8feb397L, 0x454056acL,
+                                0xba489527L,
+                                0x55533a3aL, 0x20838d87L, 0xfe6ba9b7L,
+                                0xd096954bL,
+                                0x55a867bcL, 0xa1159a58L, 0xcca92963L,
+                                0x99e1db33L,
+                                0xa62a4a56L, 0x3f3125f9L, 0x5ef47e1cL,
+                                0x9029317cL,
+                                0xfdf8e802L, 0x04272f70L, 0x80bb155cL,
+                                0x05282ce3L,
+                                0x95c11548L, 0xe4c66d22L, 0x48c1133fL,
+                                0xc70f86dcL,
+                                0x07f9c9eeL, 0x41041f0fL, 0x404779a4L,
+                                0x5d886e17L,
+                                0x325f51ebL, 0xd59bc0d1L, 0xf2bcc18fL,
+                                0x41113564L,
+                                0x257b7834L, 0x602a9c60L, 0xdff8e8a3L,
+                                0x1f636c1bL,
+                                0x0e12b4c2L, 0x02e1329eL, 0xaf664fd1L,
+                                0xcad18115L,
+                                0x6b2395e0L, 0x333e92e1L, 0x3b240b62L,
+                                0xeebeb922L,
+                                0x85b2a20eL, 0xe6ba0d99L, 0xde720c8cL,
+                                0x2da2f728L,
+                                0xd0127845L, 0x95b794fdL, 0x647d0862L,
+                                0xe7ccf5f0L,
+                                0x5449a36fL, 0x877d48faL, 0xc39dfd27L,
+                                0xf33e8d1eL,
+                                0x0a476341L, 0x992eff74L, 0x3a6f6eabL,
+                                0xf4f8fd37L,
+                                0xa812dc60L, 0xa1ebddf8L, 0x991be14cL,
+                                0xdb6e6b0dL,
+                                0xc67b5510L, 0x6d672c37L, 0x2765d43bL,
+                                0xdcd0e804L,
+                                0xf1290dc7L, 0xcc00ffa3L, 0xb5390f92L,
+                                0x690fed0bL,
+                                0x667b9ffbL, 0xcedb7d9cL, 0xa091cf0bL,
+                                0xd9155ea3L,
+                                0xbb132f88L, 0x515bad24L, 0x7b9479bfL,
+                                0x763bd6ebL,
+                                0x37392eb3L, 0xcc115979L, 0x8026e297L,
+                                0xf42e312dL,
+                                0x6842ada7L, 0xc66a2b3bL, 0x12754cccL,
+                                0x782ef11cL,
+                                0x6a124237L, 0xb79251e7L, 0x06a1bbe6L,
+                                0x4bfb6350L,
+                                0x1a6b1018L, 0x11caedfaL, 0x3d25bdd8L,
+                                0xe2e1c3c9L,
+                                0x44421659L, 0x0a121386L, 0xd90cec6eL,
+                                0xd5abea2aL,
+                                0x64af674eL, 0xda86a85fL, 0xbebfe988L,
+                                0x64e4c3feL,
+                                0x9dbc8057L, 0xf0f7c086L, 0x60787bf8L,
+                                0x6003604dL,
+                                0xd1fd8346L, 0xf6381fb0L, 0x7745ae04L,
+                                0xd736fcccL,
+                                0x83426b33L, 0xf01eab71L, 0xb0804187L,
+                                0x3c005e5fL,
+                                0x77a057beL, 0xbde8ae24L, 0x55464299L,
+                                0xbf582e61L,
+                                0x4e58f48fL, 0xf2ddfda2L, 0xf474ef38L,
+                                0x8789bdc2L,
+                                0x5366f9c3L, 0xc8b38e74L, 0xb475f255L,
+                                0x46fcd9b9L,
+                                0x7aeb2661L, 0x8b1ddf84L, 0x846a0e79L,
+                                0x915f95e2L,
+                                0x466e598eL, 0x20b45770L, 0x8cd55591L,
+                                0xc902de4cL,
+                                0xb90bace1L, 0xbb8205d0L, 0x11a86248L,
+                                0x7574a99eL,
+                                0xb77f19b6L, 0xe0a9dc09L, 0x662d09a1L,
+                                0xc4324633L,
+                                0xe85a1f02L, 0x09f0be8cL, 0x4a99a025L,
+                                0x1d6efe10L,
+                                0x1ab93d1dL, 0x0ba5a4dfL, 0xa186f20fL,
+                                0x2868f169L,
+                                0xdcb7da83L, 0x573906feL, 0xa1e2ce9bL,
+                                0x4fcd7f52L,
+                                0x50115e01L, 0xa70683faL, 0xa002b5c4L,
+                                0x0de6d027L,
+                                0x9af88c27L, 0x773f8641L, 0xc3604c06L,
+                                0x61a806b5L,
+                                0xf0177a28L, 0xc0f586e0L, 0x006058aaL,
+                                0x30dc7d62L,
+                                0x11e69ed7L, 0x2338ea63L, 0x53c2dd94L,
+                                0xc2c21634L,
+                                0xbbcbee56L, 0x90bcb6deL, 0xebfc7da1L,
+                                0xce591d76L,
+                                0x6f05e409L, 0x4b7c0188L, 0x39720a3dL,
+                                0x7c927c24L,
+                                0x86e3725fL, 0x724d9db9L, 0x1ac15bb4L,
+                                0xd39eb8fcL,
+                                0xed545578L, 0x08fca5b5L, 0xd83d7cd3L,
+                                0x4dad0fc4L,
+                                0x1e50ef5eL, 0xb161e6f8L, 0xa28514d9L,
+                                0x6c51133cL,
+                                0x6fd5c7e7L, 0x56e14ec4L, 0x362abfceL,
+                                0xddc6c837L,
+                                0xd79a3234L, 0x92638212L, 0x670efa8eL,
+                                0x406000e0L,
+                                0x3a39ce37L, 0xd3faf5cfL, 0xabc27737L,
+                                0x5ac52d1bL,
+                                0x5cb0679eL, 0x4fa33742L, 0xd3822740L,
+                                0x99bc9bbeL,
+                                0xd5118e9dL, 0xbf0f7315L, 0xd62d1c7eL,
+                                0xc700c47bL,
+                                0xb78c1b6bL, 0x21a19045L, 0xb26eb1beL,
+                                0x6a366eb4L,
+                                0x5748ab2fL, 0xbc946e79L, 0xc6a376d2L,
+                                0x6549c2c8L,
+                                0x530ff8eeL, 0x468dde7dL, 0xd5730a1dL,
+                                0x4cd04dc6L,
+                                0x2939bbdbL, 0xa9ba4650L, 0xac9526e8L,
+                                0xbe5ee304L,
+                                0xa1fad5f0L, 0x6a2d519aL, 0x63ef8ce2L,
+                                0x9a86ee22L,
+                                0xc089c2b8L, 0x43242ef6L, 0xa51e03aaL,
+                                0x9cf2d0a4L,
+                                0x83c061baL, 0x9be96a4dL, 0x8fe51550L,
+                                0xba645bd6L,
+                                0x2826a2f9L, 0xa73a3ae1L, 0x4ba99586L,
+                                0xef5562e9L,
+                                0xc72fefd3L, 0xf752f7daL, 0x3f046f69L,
+                                0x77fa0a59L,
+                                0x80e4a915L, 0x87b08601L, 0x9b09e6adL,
+                                0x3b3ee593L,
+                                0xe990fd5aL, 0x9e34d797L, 0x2cf0b7d9L,
+                                0x022b8b51L,
+                                0x96d5ac3aL, 0x017da67dL, 0xd1cf3ed6L,
+                                0x7c7d2d28L,
+                                0x1f9f25cfL, 0xadf2b89bL, 0x5ad6b472L,
+                                0x5a88f54cL,
+                                0xe029ac71L, 0xe019a5e6L, 0x47b0acfdL,
+                                0xed93fa9bL,
+                                0xe8d3c48dL, 0x283b57ccL, 0xf8d56629L,
+                                0x79132e28L,
+                                0x785f0191L, 0xed756055L, 0xf7960e44L,
+                                0xe3d35e8cL,
+                                0x15056dd4L, 0x88f46dbaL, 0x03a16125L,
+                                0x0564f0bdL,
+                                0xc3eb9e15L, 0x3c9057a2L, 0x97271aecL,
+                                0xa93a072aL,
+                                0x1b3f6d9bL, 0x1e6321f5L, 0xf59c66fbL,
+                                0x26dcf319L,
+                                0x7533d928L, 0xb155fdf5L, 0x03563482L,
+                                0x8aba3cbbL,
+                                0x28517711L, 0xc20ad9f8L, 0xabcc5167L,
+                                0xccad925fL,
+                                0x4de81751L, 0x3830dc8eL, 0x379d5862L,
+                                0x9320f991L,
+                                0xea7a90c2L, 0xfb3e7bceL, 0x5121ce64L,
+                                0x774fbe32L,
+                                0xa8b6e37eL, 0xc3293d46L, 0x48de5369L,
+                                0x6413e680L,
+                                0xa2ae0810L, 0xdd6db224L, 0x69852dfdL,
+                                0x09072166L,
+                                0xb39a460aL, 0x6445c0ddL, 0x586cdecfL,
+                                0x1c20c8aeL,
+                                0x5bbef7ddL, 0x1b588d40L, 0xccd2017fL,
+                                0x6bb4e3bbL,
+                                0xdda26a7eL, 0x3a59ff45L, 0x3e350a44L,
+                                0xbcb4cdd5L,
+                                0x72eacea8L, 0xfa6484bbL, 0x8d6612aeL,
+                                0xbf3c6f47L,
+                                0xd29be463L, 0x542f5d9eL, 0xaec2771bL,
+                                0xf64e6370L,
+                                0x740e0d8dL, 0xe75b1357L, 0xf8721671L,
+                                0xaf537d5dL,
+                                0x4040cb08L, 0x4eb4e2ccL, 0x34d2466aL,
+                                0x0115af84L,
+                                0xe1b00428L, 0x95983a1dL, 0x06b89fb4L,
+                                0xce6ea048L,
+                                0x6f3f3b82L, 0x3520ab82L, 0x011a1d4bL,
+                                0x277227f8L,
+                                0x611560b1L, 0xe7933fdcL, 0xbb3a792bL,
+                                0x344525bdL,
+                                0xa08839e1L, 0x51ce794bL, 0x2f32c9b7L,
+                                0xa01fbac9L,
+                                0xe01cc87eL, 0xbcc7d1f6L, 0xcf0111c3L,
+                                0xa1e8aac7L,
+                                0x1a908749L, 0xd44fbd9aL, 0xd0dadecbL,
+                                0xd50ada38L,
+                                0x0339c32aL, 0xc6913667L, 0x8df9317cL,
+                                0xe0b12b4fL,
+                                0xf79e59b7L, 0x43f5bb3aL, 0xf2d519ffL,
+                                0x27d9459cL,
+                                0xbf97222cL, 0x15e6fc2aL, 0x0f91fc71L,
+                                0x9b941525L,
+                                0xfae59361L, 0xceb69cebL, 0xc2a86459L,
+                                0x12baa8d1L,
+                                0xb6c1075eL, 0xe3056a0cL, 0x10d25065L,
+                                0xcb03a442L,
+                                0xe0ec6e0eL, 0x1698db3bL, 0x4c98a0beL,
+                                0x3278e964L,
+                                0x9f1f9532L, 0xe0d392dfL, 0xd3a0342bL,
+                                0x8971f21eL,
+                                0x1b0a7441L, 0x4ba3348cL, 0xc5be7120L,
+                                0xc37632d8L,
+                                0xdf359f8dL, 0x9b992f2eL, 0xe60b6f47L,
+                                0x0fe3f11dL,
+                                0xe54cda54L, 0x1edad891L, 0xce6279cfL,
+                                0xcd3e7e6fL,
+                                0x1618b166L, 0xfd2c1d05L, 0x848fd2c5L,
+                                0xf6fb2299L,
+                                0xf523f357L, 0xa6327623L, 0x93a83531L,
+                                0x56cccd02L,
+                                0xacf08162L, 0x5a75ebb5L, 0x6e163697L,
+                                0x88d273ccL,
+                                0xde966292L, 0x81b949d0L, 0x4c50901bL,
+                                0x71c65614L,
+                                0xe6c6c7bdL, 0x327a140aL, 0x45e1d006L,
+                                0xc3f27b9aL,
+                                0xc9aa53fdL, 0x62a80f00L, 0xbb25bfe2L,
+                                0x35bdd2f6L,
+                                0x71126905L, 0xb2040222L, 0xb6cbcf7cL,
+                                0xcd769c2bL,
+                                0x53113ec0L, 0x1640e3d3L, 0x38abbd60L,
+                                0x2547adf0L,
+                                0xba38209cL, 0xf746ce76L, 0x77afa1c5L,
+                                0x20756060L,
+                                0x85cbfe4eL, 0x8ae88dd8L, 0x7aaaf9b0L,
+                                0x4cf9aa7eL,
+                                0x1948c25cL, 0x02fb8a8cL, 0x01c36ae4L,
+                                0xd6ebe1f9L,
+                                0x90d4f869L, 0xa65cdea0L, 0x3f09252dL,
+                                0xc208e69fL,
+                                0xb74e6132L, 0xce77e25bL, 0x578fdfe3L,
+                                0x3ac372e6L,
+                                }
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_skey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_skey.c
new file mode 100644
index 000000000..a4903a2a7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/bf_skey.c
@@ -0,0 +1,67 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include <openssl/blowfish.h>
+#include "bf_locl.h"
+#include "bf_pi.h"
+
+void BF_set_key(BF_KEY *key, int len, const unsigned char *data)
+{
+    int i;
+    BF_LONG *p, ri, in[2];
+    const unsigned char *d, *end;
+
+    memcpy(key, &bf_init, sizeof(BF_KEY));
+    p = key->P;
+
+    if (len > ((BF_ROUNDS + 2) * 4))
+        len = (BF_ROUNDS + 2) * 4;
+
+    d = data;
+    end = &(data[len]);
+    for (i = 0; i < (BF_ROUNDS + 2); i++) {
+        ri = *(d++);
+        if (d >= end)
+            d = data;
+
+        ri <<= 8;
+        ri |= *(d++);
+        if (d >= end)
+            d = data;
+
+        ri <<= 8;
+        ri |= *(d++);
+        if (d >= end)
+            d = data;
+
+        ri <<= 8;
+        ri |= *(d++);
+        if (d >= end)
+            d = data;
+
+        p[i] ^= ri;
+    }
+
+    in[0] = 0L;
+    in[1] = 0L;
+    for (i = 0; i < (BF_ROUNDS + 2); i += 2) {
+        BF_encrypt(in, key);
+        p[i] = in[0];
+        p[i + 1] = in[1];
+    }
+
+    p = key->S;
+    for (i = 0; i < 4 * 256; i += 2) {
+        BF_encrypt(in, key);
+        p[i] = in[0];
+        p[i + 1] = in[1];
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bf/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/build.info
new file mode 100644
index 000000000..29adc8ce5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bf/build.info
@@ -0,0 +1,7 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=bf_skey.c bf_ecb.c bf_cfb64.c bf_ofb64.c \
+        {- $target{bf_asm_src} -}
+
+GENERATE[bf-586.s]=asm/bf-586.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+DEPEND[bf-586.s]=../perlasm/x86asm.pl ../perlasm/cbc.pl
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_addr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_addr.c
new file mode 100644
index 000000000..4395ab7a0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_addr.c
@@ -0,0 +1,902 @@
+/*
+ * Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <assert.h>
+#include <string.h>
+
+#include "bio_lcl.h"
+#include <openssl/crypto.h>
+
+#ifndef OPENSSL_NO_SOCK
+#include <openssl/err.h>
+#include <openssl/buffer.h>
+#include "internal/thread_once.h"
+
+CRYPTO_RWLOCK *bio_lookup_lock;
+static CRYPTO_ONCE bio_lookup_init = CRYPTO_ONCE_STATIC_INIT;
+
+/*
+ * Throughout this file and bio_lcl.h, the existence of the macro
+ * AI_PASSIVE is used to detect the availability of struct addrinfo,
+ * getnameinfo() and getaddrinfo().  If that macro doesn't exist,
+ * we use our own implementation instead, using gethostbyname,
+ * getservbyname and a few other.
+ */
+
+/**********************************************************************
+ *
+ * Address structure
+ *
+ */
+
+BIO_ADDR *BIO_ADDR_new(void)
+{
+    BIO_ADDR *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        BIOerr(BIO_F_BIO_ADDR_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ret->sa.sa_family = AF_UNSPEC;
+    return ret;
+}
+
+void BIO_ADDR_free(BIO_ADDR *ap)
+{
+    OPENSSL_free(ap);
+}
+
+void BIO_ADDR_clear(BIO_ADDR *ap)
+{
+    memset(ap, 0, sizeof(*ap));
+    ap->sa.sa_family = AF_UNSPEC;
+}
+
+/*
+ * BIO_ADDR_make - non-public routine to fill a BIO_ADDR with the contents
+ * of a struct sockaddr.
+ */
+int BIO_ADDR_make(BIO_ADDR *ap, const struct sockaddr *sa)
+{
+    if (sa->sa_family == AF_INET) {
+        memcpy(&(ap->s_in), sa, sizeof(struct sockaddr_in));
+        return 1;
+    }
+#ifdef AF_INET6
+    if (sa->sa_family == AF_INET6) {
+        memcpy(&(ap->s_in6), sa, sizeof(struct sockaddr_in6));
+        return 1;
+    }
+#endif
+#ifdef AF_UNIX
+    if (sa->sa_family == AF_UNIX) {
+        memcpy(&(ap->s_un), sa, sizeof(struct sockaddr_un));
+        return 1;
+    }
+#endif
+
+    return 0;
+}
+
+int BIO_ADDR_rawmake(BIO_ADDR *ap, int family,
+                     const void *where, size_t wherelen,
+                     unsigned short port)
+{
+#ifdef AF_UNIX
+    if (family == AF_UNIX) {
+        if (wherelen + 1 > sizeof(ap->s_un.sun_path))
+            return 0;
+        memset(&ap->s_un, 0, sizeof(ap->s_un));
+        ap->s_un.sun_family = family;
+        strncpy(ap->s_un.sun_path, where, sizeof(ap->s_un.sun_path) - 1);
+        return 1;
+    }
+#endif
+    if (family == AF_INET) {
+        if (wherelen != sizeof(struct in_addr))
+            return 0;
+        memset(&ap->s_in, 0, sizeof(ap->s_in));
+        ap->s_in.sin_family = family;
+        ap->s_in.sin_port = port;
+        ap->s_in.sin_addr = *(struct in_addr *)where;
+        return 1;
+    }
+#ifdef AF_INET6
+    if (family == AF_INET6) {
+        if (wherelen != sizeof(struct in6_addr))
+            return 0;
+        memset(&ap->s_in6, 0, sizeof(ap->s_in6));
+        ap->s_in6.sin6_family = family;
+        ap->s_in6.sin6_port = port;
+        ap->s_in6.sin6_addr = *(struct in6_addr *)where;
+        return 1;
+    }
+#endif
+
+    return 0;
+}
+
+int BIO_ADDR_family(const BIO_ADDR *ap)
+{
+    return ap->sa.sa_family;
+}
+
+int BIO_ADDR_rawaddress(const BIO_ADDR *ap, void *p, size_t *l)
+{
+    size_t len = 0;
+    const void *addrptr = NULL;
+
+    if (ap->sa.sa_family == AF_INET) {
+        len = sizeof(ap->s_in.sin_addr);
+        addrptr = &ap->s_in.sin_addr;
+    }
+#ifdef AF_INET6
+    else if (ap->sa.sa_family == AF_INET6) {
+        len = sizeof(ap->s_in6.sin6_addr);
+        addrptr = &ap->s_in6.sin6_addr;
+    }
+#endif
+#ifdef AF_UNIX
+    else if (ap->sa.sa_family == AF_UNIX) {
+        len = strlen(ap->s_un.sun_path);
+        addrptr = &ap->s_un.sun_path;
+    }
+#endif
+
+    if (addrptr == NULL)
+        return 0;
+
+    if (p != NULL) {
+        memcpy(p, addrptr, len);
+    }
+    if (l != NULL)
+        *l = len;
+
+    return 1;
+}
+
+unsigned short BIO_ADDR_rawport(const BIO_ADDR *ap)
+{
+    if (ap->sa.sa_family == AF_INET)
+        return ap->s_in.sin_port;
+#ifdef AF_INET6
+    if (ap->sa.sa_family == AF_INET6)
+        return ap->s_in6.sin6_port;
+#endif
+    return 0;
+}
+
+/*-
+ * addr_strings - helper function to get host and service names
+ * @ap: the BIO_ADDR that has the input info
+ * @numeric: 0 if actual names should be returned, 1 if the numeric
+ * representation should be returned.
+ * @hostname: a pointer to a pointer to a memory area to store the
+ * host name or numeric representation.  Unused if NULL.
+ * @service: a pointer to a pointer to a memory area to store the
+ * service name or numeric representation.  Unused if NULL.
+ *
+ * The return value is 0 on failure, with the error code in the error
+ * stack, and 1 on success.
+ */
+static int addr_strings(const BIO_ADDR *ap, int numeric,
+                        char **hostname, char **service)
+{
+    if (BIO_sock_init() != 1)
+        return 0;
+
+    if (1) {
+#ifdef AI_PASSIVE
+        int ret = 0;
+        char host[NI_MAXHOST] = "", serv[NI_MAXSERV] = "";
+        int flags = 0;
+
+        if (numeric)
+            flags |= NI_NUMERICHOST | NI_NUMERICSERV;
+
+        if ((ret = getnameinfo(BIO_ADDR_sockaddr(ap),
+                               BIO_ADDR_sockaddr_size(ap),
+                               host, sizeof(host), serv, sizeof(serv),
+                               flags)) != 0) {
+# ifdef EAI_SYSTEM
+            if (ret == EAI_SYSTEM) {
+                SYSerr(SYS_F_GETNAMEINFO, get_last_socket_error());
+                BIOerr(BIO_F_ADDR_STRINGS, ERR_R_SYS_LIB);
+            } else
+# endif
+            {
+                BIOerr(BIO_F_ADDR_STRINGS, ERR_R_SYS_LIB);
+                ERR_add_error_data(1, gai_strerror(ret));
+            }
+            return 0;
+        }
+
+        /* VMS getnameinfo() has a bug, it doesn't fill in serv, which
+         * leaves it with whatever garbage that happens to be there.
+         * However, we initialise serv with the empty string (serv[0]
+         * is therefore NUL), so it gets real easy to detect when things
+         * didn't go the way one might expect.
+         */
+        if (serv[0] == '\0') {
+            BIO_snprintf(serv, sizeof(serv), "%d",
+                         ntohs(BIO_ADDR_rawport(ap)));
+        }
+
+        if (hostname != NULL)
+            *hostname = OPENSSL_strdup(host);
+        if (service != NULL)
+            *service = OPENSSL_strdup(serv);
+    } else {
+#endif
+        if (hostname != NULL)
+            *hostname = OPENSSL_strdup(inet_ntoa(ap->s_in.sin_addr));
+        if (service != NULL) {
+            char serv[6];        /* port is 16 bits => max 5 decimal digits */
+            BIO_snprintf(serv, sizeof(serv), "%d", ntohs(ap->s_in.sin_port));
+            *service = OPENSSL_strdup(serv);
+        }
+    }
+
+    if ((hostname != NULL && *hostname == NULL)
+            || (service != NULL && *service == NULL)) {
+        if (hostname != NULL) {
+            OPENSSL_free(*hostname);
+            *hostname = NULL;
+        }
+        if (service != NULL) {
+            OPENSSL_free(*service);
+            *service = NULL;
+        }
+        BIOerr(BIO_F_ADDR_STRINGS, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    return 1;
+}
+
+char *BIO_ADDR_hostname_string(const BIO_ADDR *ap, int numeric)
+{
+    char *hostname = NULL;
+
+    if (addr_strings(ap, numeric, &hostname, NULL))
+        return hostname;
+
+    return NULL;
+}
+
+char *BIO_ADDR_service_string(const BIO_ADDR *ap, int numeric)
+{
+    char *service = NULL;
+
+    if (addr_strings(ap, numeric, NULL, &service))
+        return service;
+
+    return NULL;
+}
+
+char *BIO_ADDR_path_string(const BIO_ADDR *ap)
+{
+#ifdef AF_UNIX
+    if (ap->sa.sa_family == AF_UNIX)
+        return OPENSSL_strdup(ap->s_un.sun_path);
+#endif
+    return NULL;
+}
+
+/*
+ * BIO_ADDR_sockaddr - non-public routine to return the struct sockaddr
+ * for a given BIO_ADDR.  In reality, this is simply a type safe cast.
+ * The returned struct sockaddr is const, so it can't be tampered with.
+ */
+const struct sockaddr *BIO_ADDR_sockaddr(const BIO_ADDR *ap)
+{
+    return &(ap->sa);
+}
+
+/*
+ * BIO_ADDR_sockaddr_noconst - non-public function that does the same
+ * as BIO_ADDR_sockaddr, but returns a non-const.  USE WITH CARE, as
+ * it allows you to tamper with the data (and thereby the contents
+ * of the input BIO_ADDR).
+ */
+struct sockaddr *BIO_ADDR_sockaddr_noconst(BIO_ADDR *ap)
+{
+    return &(ap->sa);
+}
+
+/*
+ * BIO_ADDR_sockaddr_size - non-public function that returns the size
+ * of the struct sockaddr the BIO_ADDR is using.  If the protocol family
+ * isn't set or is something other than AF_INET, AF_INET6 or AF_UNIX,
+ * the size of the BIO_ADDR type is returned.
+ */
+socklen_t BIO_ADDR_sockaddr_size(const BIO_ADDR *ap)
+{
+    if (ap->sa.sa_family == AF_INET)
+        return sizeof(ap->s_in);
+#ifdef AF_INET6
+    if (ap->sa.sa_family == AF_INET6)
+        return sizeof(ap->s_in6);
+#endif
+#ifdef AF_UNIX
+    if (ap->sa.sa_family == AF_UNIX)
+        return sizeof(ap->s_un);
+#endif
+    return sizeof(*ap);
+}
+
+/**********************************************************************
+ *
+ * Address info database
+ *
+ */
+
+const BIO_ADDRINFO *BIO_ADDRINFO_next(const BIO_ADDRINFO *bai)
+{
+    if (bai != NULL)
+        return bai->bai_next;
+    return NULL;
+}
+
+int BIO_ADDRINFO_family(const BIO_ADDRINFO *bai)
+{
+    if (bai != NULL)
+        return bai->bai_family;
+    return 0;
+}
+
+int BIO_ADDRINFO_socktype(const BIO_ADDRINFO *bai)
+{
+    if (bai != NULL)
+        return bai->bai_socktype;
+    return 0;
+}
+
+int BIO_ADDRINFO_protocol(const BIO_ADDRINFO *bai)
+{
+    if (bai != NULL) {
+        if (bai->bai_protocol != 0)
+            return bai->bai_protocol;
+
+#ifdef AF_UNIX
+        if (bai->bai_family == AF_UNIX)
+            return 0;
+#endif
+
+        switch (bai->bai_socktype) {
+        case SOCK_STREAM:
+            return IPPROTO_TCP;
+        case SOCK_DGRAM:
+            return IPPROTO_UDP;
+        default:
+            break;
+        }
+    }
+    return 0;
+}
+
+/*
+ * BIO_ADDRINFO_sockaddr_size - non-public function that returns the size
+ * of the struct sockaddr inside the BIO_ADDRINFO.
+ */
+socklen_t BIO_ADDRINFO_sockaddr_size(const BIO_ADDRINFO *bai)
+{
+    if (bai != NULL)
+        return bai->bai_addrlen;
+    return 0;
+}
+
+/*
+ * BIO_ADDRINFO_sockaddr - non-public function that returns bai_addr
+ * as the struct sockaddr it is.
+ */
+const struct sockaddr *BIO_ADDRINFO_sockaddr(const BIO_ADDRINFO *bai)
+{
+    if (bai != NULL)
+        return bai->bai_addr;
+    return NULL;
+}
+
+const BIO_ADDR *BIO_ADDRINFO_address(const BIO_ADDRINFO *bai)
+{
+    if (bai != NULL)
+        return (BIO_ADDR *)bai->bai_addr;
+    return NULL;
+}
+
+void BIO_ADDRINFO_free(BIO_ADDRINFO *bai)
+{
+    if (bai == NULL)
+        return;
+
+#ifdef AI_PASSIVE
+# ifdef AF_UNIX
+#  define _cond bai->bai_family != AF_UNIX
+# else
+#  define _cond 1
+# endif
+    if (_cond) {
+        freeaddrinfo(bai);
+        return;
+    }
+#endif
+
+    /* Free manually when we know that addrinfo_wrap() was used.
+     * See further comment above addrinfo_wrap()
+     */
+    while (bai != NULL) {
+        BIO_ADDRINFO *next = bai->bai_next;
+        OPENSSL_free(bai->bai_addr);
+        OPENSSL_free(bai);
+        bai = next;
+    }
+}
+
+/**********************************************************************
+ *
+ * Service functions
+ *
+ */
+
+/*-
+ * The specs in hostserv can take these forms:
+ *
+ * host:service         => *host = "host", *service = "service"
+ * host:*               => *host = "host", *service = NULL
+ * host:                => *host = "host", *service = NULL
+ * :service             => *host = NULL, *service = "service"
+ * *:service            => *host = NULL, *service = "service"
+ *
+ * in case no : is present in the string, the result depends on
+ * hostserv_prio, as follows:
+ *
+ * when hostserv_prio == BIO_PARSE_PRIO_HOST
+ * host                 => *host = "host", *service untouched
+ *
+ * when hostserv_prio == BIO_PARSE_PRIO_SERV
+ * service              => *host untouched, *service = "service"
+ *
+ */
+int BIO_parse_hostserv(const char *hostserv, char **host, char **service,
+                       enum BIO_hostserv_priorities hostserv_prio)
+{
+    const char *h = NULL; size_t hl = 0;
+    const char *p = NULL; size_t pl = 0;
+
+    if (*hostserv == '[') {
+        if ((p = strchr(hostserv, ']')) == NULL)
+            goto spec_err;
+        h = hostserv + 1;
+        hl = p - h;
+        p++;
+        if (*p == '\0')
+            p = NULL;
+        else if (*p != ':')
+            goto spec_err;
+        else {
+            p++;
+            pl = strlen(p);
+        }
+    } else {
+        const char *p2 = strrchr(hostserv, ':');
+        p = strchr(hostserv, ':');
+
+        /*-
+         * Check for more than one colon.  There are three possible
+         * interpretations:
+         * 1. IPv6 address with port number, last colon being separator.
+         * 2. IPv6 address only.
+         * 3. IPv6 address only if hostserv_prio == BIO_PARSE_PRIO_HOST,
+         *    IPv6 address and port number if hostserv_prio == BIO_PARSE_PRIO_SERV
+         * Because of this ambiguity, we currently choose to make it an
+         * error.
+         */
+        if (p != p2)
+            goto amb_err;
+
+        if (p != NULL) {
+            h = hostserv;
+            hl = p - h;
+            p++;
+            pl = strlen(p);
+        } else if (hostserv_prio == BIO_PARSE_PRIO_HOST) {
+            h = hostserv;
+            hl = strlen(h);
+        } else {
+            p = hostserv;
+            pl = strlen(p);
+        }
+    }
+
+    if (p != NULL && strchr(p, ':'))
+        goto spec_err;
+
+    if (h != NULL && host != NULL) {
+        if (hl == 0
+            || (hl == 1 && h[0] == '*')) {
+            *host = NULL;
+        } else {
+            *host = OPENSSL_strndup(h, hl);
+            if (*host == NULL)
+                goto memerr;
+        }
+    }
+    if (p != NULL && service != NULL) {
+        if (pl == 0
+            || (pl == 1 && p[0] == '*')) {
+            *service = NULL;
+        } else {
+            *service = OPENSSL_strndup(p, pl);
+            if (*service == NULL)
+                goto memerr;
+        }
+    }
+
+    return 1;
+ amb_err:
+    BIOerr(BIO_F_BIO_PARSE_HOSTSERV, BIO_R_AMBIGUOUS_HOST_OR_SERVICE);
+    return 0;
+ spec_err:
+    BIOerr(BIO_F_BIO_PARSE_HOSTSERV, BIO_R_MALFORMED_HOST_OR_SERVICE);
+    return 0;
+ memerr:
+    BIOerr(BIO_F_BIO_PARSE_HOSTSERV, ERR_R_MALLOC_FAILURE);
+    return 0;
+}
+
+/* addrinfo_wrap is used to build our own addrinfo "chain".
+ * (it has only one entry, so calling it a chain may be a stretch)
+ * It should ONLY be called when getaddrinfo() and friends
+ * aren't available, OR when dealing with a non IP protocol
+ * family, such as AF_UNIX
+ *
+ * the return value is 1 on success, or 0 on failure, which
+ * only happens if a memory allocation error occurred.
+ */
+static int addrinfo_wrap(int family, int socktype,
+                         const void *where, size_t wherelen,
+                         unsigned short port,
+                         BIO_ADDRINFO **bai)
+{
+    if ((*bai = OPENSSL_zalloc(sizeof(**bai))) == NULL) {
+        BIOerr(BIO_F_ADDRINFO_WRAP, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    (*bai)->bai_family = family;
+    (*bai)->bai_socktype = socktype;
+    if (socktype == SOCK_STREAM)
+        (*bai)->bai_protocol = IPPROTO_TCP;
+    if (socktype == SOCK_DGRAM)
+        (*bai)->bai_protocol = IPPROTO_UDP;
+#ifdef AF_UNIX
+    if (family == AF_UNIX)
+        (*bai)->bai_protocol = 0;
+#endif
+    {
+        /* Magic: We know that BIO_ADDR_sockaddr_noconst is really
+           just an advanced cast of BIO_ADDR* to struct sockaddr *
+           by the power of union, so while it may seem that we're
+           creating a memory leak here, we are not.  It will be
+           all right. */
+        BIO_ADDR *addr = BIO_ADDR_new();
+        if (addr != NULL) {
+            BIO_ADDR_rawmake(addr, family, where, wherelen, port);
+            (*bai)->bai_addr = BIO_ADDR_sockaddr_noconst(addr);
+        }
+    }
+    (*bai)->bai_next = NULL;
+    if ((*bai)->bai_addr == NULL) {
+        BIO_ADDRINFO_free(*bai);
+        *bai = NULL;
+        return 0;
+    }
+    return 1;
+}
+
+DEFINE_RUN_ONCE_STATIC(do_bio_lookup_init)
+{
+    if (!OPENSSL_init_crypto(0, NULL))
+        return 0;
+    bio_lookup_lock = CRYPTO_THREAD_lock_new();
+    return bio_lookup_lock != NULL;
+}
+
+int BIO_lookup(const char *host, const char *service,
+               enum BIO_lookup_type lookup_type,
+               int family, int socktype, BIO_ADDRINFO **res)
+{
+    return BIO_lookup_ex(host, service, lookup_type, family, socktype, 0, res);
+}
+
+/*-
+ * BIO_lookup_ex - look up the node and service you want to connect to.
+ * @node: the node you want to connect to.
+ * @service: the service you want to connect to.
+ * @lookup_type: declare intent with the result, client or server.
+ * @family: the address family you want to use.  Use AF_UNSPEC for any, or
+ *  AF_INET, AF_INET6 or AF_UNIX.
+ * @socktype: The socket type you want to use.  Can be SOCK_STREAM, SOCK_DGRAM
+ *  or 0 for all.
+ * @protocol: The protocol to use, e.g. IPPROTO_TCP or IPPROTO_UDP or 0 for all.
+ *            Note that some platforms may not return IPPROTO_SCTP without
+ *            explicitly requesting it (i.e. IPPROTO_SCTP may not be returned
+ *            with 0 for the protocol)
+ * @res: Storage place for the resulting list of returned addresses
+ *
+ * This will do a lookup of the node and service that you want to connect to.
+ * It returns a linked list of different addresses you can try to connect to.
+ *
+ * When no longer needed you should call BIO_ADDRINFO_free() to free the result.
+ *
+ * The return value is 1 on success or 0 in case of error.
+ */
+int BIO_lookup_ex(const char *host, const char *service, int lookup_type,
+                  int family, int socktype, int protocol, BIO_ADDRINFO **res)
+{
+    int ret = 0;                 /* Assume failure */
+
+    switch(family) {
+    case AF_INET:
+#ifdef AF_INET6
+    case AF_INET6:
+#endif
+#ifdef AF_UNIX
+    case AF_UNIX:
+#endif
+#ifdef AF_UNSPEC
+    case AF_UNSPEC:
+#endif
+        break;
+    default:
+        BIOerr(BIO_F_BIO_LOOKUP_EX, BIO_R_UNSUPPORTED_PROTOCOL_FAMILY);
+        return 0;
+    }
+
+#ifdef AF_UNIX
+    if (family == AF_UNIX) {
+        if (addrinfo_wrap(family, socktype, host, strlen(host), 0, res))
+            return 1;
+        else
+            BIOerr(BIO_F_BIO_LOOKUP_EX, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+#endif
+
+    if (BIO_sock_init() != 1)
+        return 0;
+
+    if (1) {
+#ifdef AI_PASSIVE
+        int gai_ret = 0;
+        struct addrinfo hints;
+
+        memset(&hints, 0, sizeof(hints));
+
+        hints.ai_family = family;
+        hints.ai_socktype = socktype;
+        hints.ai_protocol = protocol;
+
+        if (lookup_type == BIO_LOOKUP_SERVER)
+            hints.ai_flags |= AI_PASSIVE;
+
+        /* Note that |res| SHOULD be a 'struct addrinfo **' thanks to
+         * macro magic in bio_lcl.h
+         */
+        switch ((gai_ret = getaddrinfo(host, service, &hints, res))) {
+# ifdef EAI_SYSTEM
+        case EAI_SYSTEM:
+            SYSerr(SYS_F_GETADDRINFO, get_last_socket_error());
+            BIOerr(BIO_F_BIO_LOOKUP_EX, ERR_R_SYS_LIB);
+            break;
+# endif
+        case 0:
+            ret = 1;             /* Success */
+            break;
+        default:
+            BIOerr(BIO_F_BIO_LOOKUP_EX, ERR_R_SYS_LIB);
+            ERR_add_error_data(1, gai_strerror(gai_ret));
+            break;
+        }
+    } else {
+#endif
+        const struct hostent *he;
+/*
+ * Because struct hostent is defined for 32-bit pointers only with
+ * VMS C, we need to make sure that '&he_fallback_address' and
+ * '&he_fallback_addresses' are 32-bit pointers
+ */
+#if defined(OPENSSL_SYS_VMS) && defined(__DECC)
+# pragma pointer_size save
+# pragma pointer_size 32
+#endif
+        /* Windows doesn't seem to have in_addr_t */
+#ifdef OPENSSL_SYS_WINDOWS
+        static uint32_t he_fallback_address;
+        static const char *he_fallback_addresses[] =
+            { (char *)&he_fallback_address, NULL };
+#else
+        static in_addr_t he_fallback_address;
+        static const char *he_fallback_addresses[] =
+            { (char *)&he_fallback_address, NULL };
+#endif
+        static const struct hostent he_fallback =
+            { NULL, NULL, AF_INET, sizeof(he_fallback_address),
+              (char **)&he_fallback_addresses };
+#if defined(OPENSSL_SYS_VMS) && defined(__DECC)
+# pragma pointer_size restore
+#endif
+
+        struct servent *se;
+        /* Apparently, on WIN64, s_proto and s_port have traded places... */
+#ifdef _WIN64
+        struct servent se_fallback = { NULL, NULL, NULL, 0 };
+#else
+        struct servent se_fallback = { NULL, NULL, 0, NULL };
+#endif
+
+        if (!RUN_ONCE(&bio_lookup_init, do_bio_lookup_init)) {
+            BIOerr(BIO_F_BIO_LOOKUP_EX, ERR_R_MALLOC_FAILURE);
+            ret = 0;
+            goto err;
+        }
+
+        CRYPTO_THREAD_write_lock(bio_lookup_lock);
+        he_fallback_address = INADDR_ANY;
+        if (host == NULL) {
+            he = &he_fallback;
+            switch(lookup_type) {
+            case BIO_LOOKUP_CLIENT:
+                he_fallback_address = INADDR_LOOPBACK;
+                break;
+            case BIO_LOOKUP_SERVER:
+                he_fallback_address = INADDR_ANY;
+                break;
+            default:
+                /* We forgot to handle a lookup type! */
+                assert("We forgot to handle a lookup type!" == NULL);
+                BIOerr(BIO_F_BIO_LOOKUP_EX, ERR_R_INTERNAL_ERROR);
+                ret = 0;
+                goto err;
+            }
+        } else {
+            he = gethostbyname(host);
+
+            if (he == NULL) {
+#ifndef OPENSSL_SYS_WINDOWS
+                /*
+                 * This might be misleading, because h_errno is used as if
+                 * it was errno. To minimize mixup add 1000. Underlying
+                 * reason for this is that hstrerror is declared obsolete,
+                 * not to mention that a) h_errno is not always guaranteed
+                 * to be meaningless; b) hstrerror can reside in yet another
+                 * library, linking for sake of hstrerror is an overkill;
+                 * c) this path is not executed on contemporary systems
+                 * anyway [above getaddrinfo/gai_strerror is]. We just let
+                 * system administrator figure this out...
+                 */
+# if defined(OPENSSL_SYS_VXWORKS)
+                /* h_errno doesn't exist on VxWorks */
+                SYSerr(SYS_F_GETHOSTBYNAME, 1000 );
+# else
+                SYSerr(SYS_F_GETHOSTBYNAME, 1000 + h_errno);
+# endif
+#else
+                SYSerr(SYS_F_GETHOSTBYNAME, WSAGetLastError());
+#endif
+                ret = 0;
+                goto err;
+            }
+        }
+
+        if (service == NULL) {
+            se_fallback.s_port = 0;
+            se_fallback.s_proto = NULL;
+            se = &se_fallback;
+        } else {
+            char *endp = NULL;
+            long portnum = strtol(service, &endp, 10);
+
+/*
+ * Because struct servent is defined for 32-bit pointers only with
+ * VMS C, we need to make sure that 'proto' is a 32-bit pointer.
+ */
+#if defined(OPENSSL_SYS_VMS) && defined(__DECC)
+# pragma pointer_size save
+# pragma pointer_size 32
+#endif
+            char *proto = NULL;
+#if defined(OPENSSL_SYS_VMS) && defined(__DECC)
+# pragma pointer_size restore
+#endif
+
+            switch (socktype) {
+            case SOCK_STREAM:
+                proto = "tcp";
+                break;
+            case SOCK_DGRAM:
+                proto = "udp";
+                break;
+            }
+
+            if (endp != service && *endp == '\0'
+                    && portnum > 0 && portnum < 65536) {
+                se_fallback.s_port = htons((unsigned short)portnum);
+                se_fallback.s_proto = proto;
+                se = &se_fallback;
+            } else if (endp == service) {
+                se = getservbyname(service, proto);
+
+                if (se == NULL) {
+#ifndef OPENSSL_SYS_WINDOWS
+                    SYSerr(SYS_F_GETSERVBYNAME, errno);
+#else
+                    SYSerr(SYS_F_GETSERVBYNAME, WSAGetLastError());
+#endif
+                    goto err;
+                }
+            } else {
+                BIOerr(BIO_F_BIO_LOOKUP_EX, BIO_R_MALFORMED_HOST_OR_SERVICE);
+                goto err;
+            }
+        }
+
+        *res = NULL;
+
+        {
+/*
+ * Because hostent::h_addr_list is an array of 32-bit pointers with VMS C,
+ * we must make sure our iterator designates the same element type, hence
+ * the pointer size dance.
+ */
+#if defined(OPENSSL_SYS_VMS) && defined(__DECC)
+# pragma pointer_size save
+# pragma pointer_size 32
+#endif
+            char **addrlistp;
+#if defined(OPENSSL_SYS_VMS) && defined(__DECC)
+# pragma pointer_size restore
+#endif
+            size_t addresses;
+            BIO_ADDRINFO *tmp_bai = NULL;
+
+            /* The easiest way to create a linked list from an
+               array is to start from the back */
+            for(addrlistp = he->h_addr_list; *addrlistp != NULL;
+                addrlistp++)
+                ;
+
+            for(addresses = addrlistp - he->h_addr_list;
+                addrlistp--, addresses-- > 0; ) {
+                if (!addrinfo_wrap(he->h_addrtype, socktype,
+                                   *addrlistp, he->h_length,
+                                   se->s_port, &tmp_bai))
+                    goto addrinfo_malloc_err;
+                tmp_bai->bai_next = *res;
+                *res = tmp_bai;
+                continue;
+             addrinfo_malloc_err:
+                BIO_ADDRINFO_free(*res);
+                *res = NULL;
+                BIOerr(BIO_F_BIO_LOOKUP_EX, ERR_R_MALLOC_FAILURE);
+                ret = 0;
+                goto err;
+            }
+
+            ret = 1;
+        }
+     err:
+        CRYPTO_THREAD_unlock(bio_lookup_lock);
+    }
+
+    return ret;
+}
+
+#endif /* OPENSSL_NO_SOCK */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_dump.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_dump.c
new file mode 100644
index 000000000..0d06414e7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_dump.c
@@ -0,0 +1,148 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Stolen from tjh's ssl/ssl_trc.c stuff.
+ */
+
+#include <stdio.h>
+#include "bio_lcl.h"
+
+#define DUMP_WIDTH      16
+#define DUMP_WIDTH_LESS_INDENT(i) (DUMP_WIDTH - ((i - (i > 6 ? 6 : i) + 3) / 4))
+
+#define SPACE(buf, pos, n)   (sizeof(buf) - (pos) > (n))
+
+int BIO_dump_cb(int (*cb) (const void *data, size_t len, void *u),
+                void *u, const char *s, int len)
+{
+    return BIO_dump_indent_cb(cb, u, s, len, 0);
+}
+
+int BIO_dump_indent_cb(int (*cb) (const void *data, size_t len, void *u),
+                       void *u, const char *s, int len, int indent)
+{
+    int ret = 0;
+    char buf[288 + 1];
+    int i, j, rows, n;
+    unsigned char ch;
+    int dump_width;
+
+    if (indent < 0)
+        indent = 0;
+    else if (indent > 128)
+        indent = 128;
+
+    dump_width = DUMP_WIDTH_LESS_INDENT(indent);
+    rows = len / dump_width;
+    if ((rows * dump_width) < len)
+        rows++;
+    for (i = 0; i < rows; i++) {
+        n = BIO_snprintf(buf, sizeof(buf), "%*s%04x - ", indent, "",
+                         i * dump_width);
+        for (j = 0; j < dump_width; j++) {
+            if (SPACE(buf, n, 3)) {
+                if (((i * dump_width) + j) >= len) {
+                    strcpy(buf + n, "   ");
+                } else {
+                    ch = ((unsigned char)*(s + i * dump_width + j)) & 0xff;
+                    BIO_snprintf(buf + n, 4, "%02x%c", ch,
+                                 j == 7 ? '-' : ' ');
+                }
+                n += 3;
+            }
+        }
+        if (SPACE(buf, n, 2)) {
+            strcpy(buf + n, "  ");
+            n += 2;
+        }
+        for (j = 0; j < dump_width; j++) {
+            if (((i * dump_width) + j) >= len)
+                break;
+            if (SPACE(buf, n, 1)) {
+                ch = ((unsigned char)*(s + i * dump_width + j)) & 0xff;
+#ifndef CHARSET_EBCDIC
+                buf[n++] = ((ch >= ' ') && (ch <= '~')) ? ch : '.';
+#else
+                buf[n++] = ((ch >= os_toascii[' ']) && (ch <= os_toascii['~']))
+                           ? os_toebcdic[ch]
+                           : '.';
+#endif
+                buf[n] = '\0';
+            }
+        }
+        if (SPACE(buf, n, 1)) {
+            buf[n++] = '\n';
+            buf[n] = '\0';
+        }
+        /*
+         * if this is the last call then update the ddt_dump thing so that we
+         * will move the selection point in the debug window
+         */
+        ret += cb((void *)buf, n, u);
+    }
+    return ret;
+}
+
+#ifndef OPENSSL_NO_STDIO
+static int write_fp(const void *data, size_t len, void *fp)
+{
+    return UP_fwrite(data, len, 1, fp);
+}
+
+int BIO_dump_fp(FILE *fp, const char *s, int len)
+{
+    return BIO_dump_cb(write_fp, fp, s, len);
+}
+
+int BIO_dump_indent_fp(FILE *fp, const char *s, int len, int indent)
+{
+    return BIO_dump_indent_cb(write_fp, fp, s, len, indent);
+}
+#endif
+
+static int write_bio(const void *data, size_t len, void *bp)
+{
+    return BIO_write((BIO *)bp, (const char *)data, len);
+}
+
+int BIO_dump(BIO *bp, const char *s, int len)
+{
+    return BIO_dump_cb(write_bio, bp, s, len);
+}
+
+int BIO_dump_indent(BIO *bp, const char *s, int len, int indent)
+{
+    return BIO_dump_indent_cb(write_bio, bp, s, len, indent);
+}
+
+int BIO_hex_string(BIO *out, int indent, int width, unsigned char *data,
+                   int datalen)
+{
+    int i, j = 0;
+
+    if (datalen < 1)
+        return 1;
+
+    for (i = 0; i < datalen - 1; i++) {
+        if (i && !j)
+            BIO_printf(out, "%*s", indent, "");
+
+        BIO_printf(out, "%02X:", data[i]);
+
+        j = (j + 1) % width;
+        if (!j)
+            BIO_printf(out, "\n");
+    }
+
+    if (i && !j)
+        BIO_printf(out, "%*s", indent, "");
+    BIO_printf(out, "%02X", data[datalen - 1]);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_print.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_print.c
new file mode 100644
index 000000000..9e907fcaa
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_print.c
@@ -0,0 +1,930 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include "internal/cryptlib.h"
+#include "internal/ctype.h"
+#include "internal/numbers.h"
+#include <openssl/bio.h>
+
+/*
+ * Copyright Patrick Powell 1995
+ * This code is based on code written by Patrick Powell <papowell@astart.com>
+ * It may be used for any purpose as long as this notice remains intact
+ * on all source code distributions.
+ */
+
+#ifdef HAVE_LONG_DOUBLE
+# define LDOUBLE long double
+#else
+# define LDOUBLE double
+#endif
+
+static int fmtstr(char **, char **, size_t *, size_t *,
+                  const char *, int, int, int);
+static int fmtint(char **, char **, size_t *, size_t *,
+                  int64_t, int, int, int, int);
+static int fmtfp(char **, char **, size_t *, size_t *,
+                 LDOUBLE, int, int, int, int);
+static int doapr_outch(char **, char **, size_t *, size_t *, int);
+static int _dopr(char **sbuffer, char **buffer,
+                 size_t *maxlen, size_t *retlen, int *truncated,
+                 const char *format, va_list args);
+
+/* format read states */
+#define DP_S_DEFAULT    0
+#define DP_S_FLAGS      1
+#define DP_S_MIN        2
+#define DP_S_DOT        3
+#define DP_S_MAX        4
+#define DP_S_MOD        5
+#define DP_S_CONV       6
+#define DP_S_DONE       7
+
+/* format flags - Bits */
+/* left-aligned padding */
+#define DP_F_MINUS      (1 << 0)
+/* print an explicit '+' for a value with positive sign */
+#define DP_F_PLUS       (1 << 1)
+/* print an explicit ' ' for a value with positive sign */
+#define DP_F_SPACE      (1 << 2)
+/* print 0/0x prefix for octal/hex and decimal point for floating point */
+#define DP_F_NUM        (1 << 3)
+/* print leading zeroes */
+#define DP_F_ZERO       (1 << 4)
+/* print HEX in UPPPERcase */
+#define DP_F_UP         (1 << 5)
+/* treat value as unsigned */
+#define DP_F_UNSIGNED   (1 << 6)
+
+/* conversion flags */
+#define DP_C_SHORT      1
+#define DP_C_LONG       2
+#define DP_C_LDOUBLE    3
+#define DP_C_LLONG      4
+#define DP_C_SIZE       5
+
+/* Floating point formats */
+#define F_FORMAT        0
+#define E_FORMAT        1
+#define G_FORMAT        2
+
+/* some handy macros */
+#define char_to_int(p) (p - '0')
+#define OSSL_MAX(p,q) ((p >= q) ? p : q)
+
+static int
+_dopr(char **sbuffer,
+      char **buffer,
+      size_t *maxlen,
+      size_t *retlen, int *truncated, const char *format, va_list args)
+{
+    char ch;
+    int64_t value;
+    LDOUBLE fvalue;
+    char *strvalue;
+    int min;
+    int max;
+    int state;
+    int flags;
+    int cflags;
+    size_t currlen;
+
+    state = DP_S_DEFAULT;
+    flags = currlen = cflags = min = 0;
+    max = -1;
+    ch = *format++;
+
+    while (state != DP_S_DONE) {
+        if (ch == '\0' || (buffer == NULL && currlen >= *maxlen))
+            state = DP_S_DONE;
+
+        switch (state) {
+        case DP_S_DEFAULT:
+            if (ch == '%')
+                state = DP_S_FLAGS;
+            else
+                if (!doapr_outch(sbuffer, buffer, &currlen, maxlen, ch))
+                    return 0;
+            ch = *format++;
+            break;
+        case DP_S_FLAGS:
+            switch (ch) {
+            case '-':
+                flags |= DP_F_MINUS;
+                ch = *format++;
+                break;
+            case '+':
+                flags |= DP_F_PLUS;
+                ch = *format++;
+                break;
+            case ' ':
+                flags |= DP_F_SPACE;
+                ch = *format++;
+                break;
+            case '#':
+                flags |= DP_F_NUM;
+                ch = *format++;
+                break;
+            case '0':
+                flags |= DP_F_ZERO;
+                ch = *format++;
+                break;
+            default:
+                state = DP_S_MIN;
+                break;
+            }
+            break;
+        case DP_S_MIN:
+            if (ossl_isdigit(ch)) {
+                min = 10 * min + char_to_int(ch);
+                ch = *format++;
+            } else if (ch == '*') {
+                min = va_arg(args, int);
+                ch = *format++;
+                state = DP_S_DOT;
+            } else
+                state = DP_S_DOT;
+            break;
+        case DP_S_DOT:
+            if (ch == '.') {
+                state = DP_S_MAX;
+                ch = *format++;
+            } else
+                state = DP_S_MOD;
+            break;
+        case DP_S_MAX:
+            if (ossl_isdigit(ch)) {
+                if (max < 0)
+                    max = 0;
+                max = 10 * max + char_to_int(ch);
+                ch = *format++;
+            } else if (ch == '*') {
+                max = va_arg(args, int);
+                ch = *format++;
+                state = DP_S_MOD;
+            } else
+                state = DP_S_MOD;
+            break;
+        case DP_S_MOD:
+            switch (ch) {
+            case 'h':
+                cflags = DP_C_SHORT;
+                ch = *format++;
+                break;
+            case 'l':
+                if (*format == 'l') {
+                    cflags = DP_C_LLONG;
+                    format++;
+                } else
+                    cflags = DP_C_LONG;
+                ch = *format++;
+                break;
+            case 'q':
+            case 'j':
+                cflags = DP_C_LLONG;
+                ch = *format++;
+                break;
+            case 'L':
+                cflags = DP_C_LDOUBLE;
+                ch = *format++;
+                break;
+            case 'z':
+                cflags = DP_C_SIZE;
+                ch = *format++;
+                break;
+            default:
+                break;
+            }
+            state = DP_S_CONV;
+            break;
+        case DP_S_CONV:
+            switch (ch) {
+            case 'd':
+            case 'i':
+                switch (cflags) {
+                case DP_C_SHORT:
+                    value = (short int)va_arg(args, int);
+                    break;
+                case DP_C_LONG:
+                    value = va_arg(args, long int);
+                    break;
+                case DP_C_LLONG:
+                    value = va_arg(args, int64_t);
+                    break;
+                case DP_C_SIZE:
+                    value = va_arg(args, ossl_ssize_t);
+                    break;
+                default:
+                    value = va_arg(args, int);
+                    break;
+                }
+                if (!fmtint(sbuffer, buffer, &currlen, maxlen, value, 10, min,
+                            max, flags))
+                    return 0;
+                break;
+            case 'X':
+                flags |= DP_F_UP;
+                /* FALLTHROUGH */
+            case 'x':
+            case 'o':
+            case 'u':
+                flags |= DP_F_UNSIGNED;
+                switch (cflags) {
+                case DP_C_SHORT:
+                    value = (unsigned short int)va_arg(args, unsigned int);
+                    break;
+                case DP_C_LONG:
+                    value = va_arg(args, unsigned long int);
+                    break;
+                case DP_C_LLONG:
+                    value = va_arg(args, uint64_t);
+                    break;
+                case DP_C_SIZE:
+                    value = va_arg(args, size_t);
+                    break;
+                default:
+                    value = va_arg(args, unsigned int);
+                    break;
+                }
+                if (!fmtint(sbuffer, buffer, &currlen, maxlen, value,
+                            ch == 'o' ? 8 : (ch == 'u' ? 10 : 16),
+                            min, max, flags))
+                    return 0;
+                break;
+            case 'f':
+                if (cflags == DP_C_LDOUBLE)
+                    fvalue = va_arg(args, LDOUBLE);
+                else
+                    fvalue = va_arg(args, double);
+                if (!fmtfp(sbuffer, buffer, &currlen, maxlen, fvalue, min, max,
+                           flags, F_FORMAT))
+                    return 0;
+                break;
+            case 'E':
+                flags |= DP_F_UP;
+                /* fall thru */
+            case 'e':
+                if (cflags == DP_C_LDOUBLE)
+                    fvalue = va_arg(args, LDOUBLE);
+                else
+                    fvalue = va_arg(args, double);
+                if (!fmtfp(sbuffer, buffer, &currlen, maxlen, fvalue, min, max,
+                           flags, E_FORMAT))
+                    return 0;
+                break;
+            case 'G':
+                flags |= DP_F_UP;
+                /* fall thru */
+            case 'g':
+                if (cflags == DP_C_LDOUBLE)
+                    fvalue = va_arg(args, LDOUBLE);
+                else
+                    fvalue = va_arg(args, double);
+                if (!fmtfp(sbuffer, buffer, &currlen, maxlen, fvalue, min, max,
+                           flags, G_FORMAT))
+                    return 0;
+                break;
+            case 'c':
+                if (!doapr_outch(sbuffer, buffer, &currlen, maxlen,
+                                 va_arg(args, int)))
+                    return 0;
+                break;
+            case 's':
+                strvalue = va_arg(args, char *);
+                if (max < 0) {
+                    if (buffer)
+                        max = INT_MAX;
+                    else
+                        max = *maxlen;
+                }
+                if (!fmtstr(sbuffer, buffer, &currlen, maxlen, strvalue,
+                            flags, min, max))
+                    return 0;
+                break;
+            case 'p':
+                value = (size_t)va_arg(args, void *);
+                if (!fmtint(sbuffer, buffer, &currlen, maxlen,
+                            value, 16, min, max, flags | DP_F_NUM))
+                    return 0;
+                break;
+            case 'n':
+                {
+                    int *num;
+                    num = va_arg(args, int *);
+                    *num = currlen;
+                }
+                break;
+            case '%':
+                if (!doapr_outch(sbuffer, buffer, &currlen, maxlen, ch))
+                    return 0;
+                break;
+            case 'w':
+                /* not supported yet, treat as next char */
+                ch = *format++;
+                break;
+            default:
+                /* unknown, skip */
+                break;
+            }
+            ch = *format++;
+            state = DP_S_DEFAULT;
+            flags = cflags = min = 0;
+            max = -1;
+            break;
+        case DP_S_DONE:
+            break;
+        default:
+            break;
+        }
+    }
+    /*
+     * We have to truncate if there is no dynamic buffer and we have filled the
+     * static buffer.
+     */
+    if (buffer == NULL) {
+        *truncated = (currlen > *maxlen - 1);
+        if (*truncated)
+            currlen = *maxlen - 1;
+    }
+    if (!doapr_outch(sbuffer, buffer, &currlen, maxlen, '\0'))
+        return 0;
+    *retlen = currlen - 1;
+    return 1;
+}
+
+static int
+fmtstr(char **sbuffer,
+       char **buffer,
+       size_t *currlen,
+       size_t *maxlen, const char *value, int flags, int min, int max)
+{
+    int padlen;
+    size_t strln;
+    int cnt = 0;
+
+    if (value == 0)
+        value = "<NULL>";
+
+    strln = OPENSSL_strnlen(value, max < 0 ? SIZE_MAX : (size_t)max);
+
+    padlen = min - strln;
+    if (min < 0 || padlen < 0)
+        padlen = 0;
+    if (max >= 0) {
+        /*
+         * Calculate the maximum output including padding.
+         * Make sure max doesn't overflow into negativity
+         */
+        if (max < INT_MAX - padlen)
+            max += padlen;
+        else
+            max = INT_MAX;
+    }
+    if (flags & DP_F_MINUS)
+        padlen = -padlen;
+
+    while ((padlen > 0) && (max < 0 || cnt < max)) {
+        if (!doapr_outch(sbuffer, buffer, currlen, maxlen, ' '))
+            return 0;
+        --padlen;
+        ++cnt;
+    }
+    while (strln > 0 && (max < 0 || cnt < max)) {
+        if (!doapr_outch(sbuffer, buffer, currlen, maxlen, *value++))
+            return 0;
+        --strln;
+        ++cnt;
+    }
+    while ((padlen < 0) && (max < 0 || cnt < max)) {
+        if (!doapr_outch(sbuffer, buffer, currlen, maxlen, ' '))
+            return 0;
+        ++padlen;
+        ++cnt;
+    }
+    return 1;
+}
+
+static int
+fmtint(char **sbuffer,
+       char **buffer,
+       size_t *currlen,
+       size_t *maxlen, int64_t value, int base, int min, int max, int flags)
+{
+    int signvalue = 0;
+    const char *prefix = "";
+    uint64_t uvalue;
+    char convert[DECIMAL_SIZE(value) + 3];
+    int place = 0;
+    int spadlen = 0;
+    int zpadlen = 0;
+    int caps = 0;
+
+    if (max < 0)
+        max = 0;
+    uvalue = value;
+    if (!(flags & DP_F_UNSIGNED)) {
+        if (value < 0) {
+            signvalue = '-';
+            uvalue = 0 - (uint64_t)value;
+        } else if (flags & DP_F_PLUS)
+            signvalue = '+';
+        else if (flags & DP_F_SPACE)
+            signvalue = ' ';
+    }
+    if (flags & DP_F_NUM) {
+        if (base == 8)
+            prefix = "0";
+        if (base == 16)
+            prefix = "0x";
+    }
+    if (flags & DP_F_UP)
+        caps = 1;
+    do {
+        convert[place++] = (caps ? "0123456789ABCDEF" : "0123456789abcdef")
+            [uvalue % (unsigned)base];
+        uvalue = (uvalue / (unsigned)base);
+    } while (uvalue && (place < (int)sizeof(convert)));
+    if (place == sizeof(convert))
+        place--;
+    convert[place] = 0;
+
+    zpadlen = max - place;
+    spadlen =
+        min - OSSL_MAX(max, place) - (signvalue ? 1 : 0) - strlen(prefix);
+    if (zpadlen < 0)
+        zpadlen = 0;
+    if (spadlen < 0)
+        spadlen = 0;
+    if (flags & DP_F_ZERO) {
+        zpadlen = OSSL_MAX(zpadlen, spadlen);
+        spadlen = 0;
+    }
+    if (flags & DP_F_MINUS)
+        spadlen = -spadlen;
+
+    /* spaces */
+    while (spadlen > 0) {
+        if (!doapr_outch(sbuffer, buffer, currlen, maxlen, ' '))
+            return 0;
+        --spadlen;
+    }
+
+    /* sign */
+    if (signvalue)
+        if (!doapr_outch(sbuffer, buffer, currlen, maxlen, signvalue))
+            return 0;
+
+    /* prefix */
+    while (*prefix) {
+        if (!doapr_outch(sbuffer, buffer, currlen, maxlen, *prefix))
+            return 0;
+        prefix++;
+    }
+
+    /* zeros */
+    if (zpadlen > 0) {
+        while (zpadlen > 0) {
+            if (!doapr_outch(sbuffer, buffer, currlen, maxlen, '0'))
+                return 0;
+            --zpadlen;
+        }
+    }
+    /* digits */
+    while (place > 0) {
+        if (!doapr_outch(sbuffer, buffer, currlen, maxlen, convert[--place]))
+            return 0;
+    }
+
+    /* left justified spaces */
+    while (spadlen < 0) {
+        if (!doapr_outch(sbuffer, buffer, currlen, maxlen, ' '))
+            return 0;
+        ++spadlen;
+    }
+    return 1;
+}
+
+static LDOUBLE abs_val(LDOUBLE value)
+{
+    LDOUBLE result = value;
+    if (value < 0)
+        result = -value;
+    return result;
+}
+
+static LDOUBLE pow_10(int in_exp)
+{
+    LDOUBLE result = 1;
+    while (in_exp) {
+        result *= 10;
+        in_exp--;
+    }
+    return result;
+}
+
+static long roundv(LDOUBLE value)
+{
+    long intpart;
+    intpart = (long)value;
+    value = value - intpart;
+    if (value >= 0.5)
+        intpart++;
+    return intpart;
+}
+
+static int
+fmtfp(char **sbuffer,
+      char **buffer,
+      size_t *currlen,
+      size_t *maxlen, LDOUBLE fvalue, int min, int max, int flags, int style)
+{
+    int signvalue = 0;
+    LDOUBLE ufvalue;
+    LDOUBLE tmpvalue;
+    char iconvert[20];
+    char fconvert[20];
+    char econvert[20];
+    int iplace = 0;
+    int fplace = 0;
+    int eplace = 0;
+    int padlen = 0;
+    int zpadlen = 0;
+    long exp = 0;
+    unsigned long intpart;
+    unsigned long fracpart;
+    unsigned long max10;
+    int realstyle;
+
+    if (max < 0)
+        max = 6;
+
+    if (fvalue < 0)
+        signvalue = '-';
+    else if (flags & DP_F_PLUS)
+        signvalue = '+';
+    else if (flags & DP_F_SPACE)
+        signvalue = ' ';
+
+    /*
+     * G_FORMAT sometimes prints like E_FORMAT and sometimes like F_FORMAT
+     * depending on the number to be printed. Work out which one it is and use
+     * that from here on.
+     */
+    if (style == G_FORMAT) {
+        if (fvalue == 0.0) {
+            realstyle = F_FORMAT;
+        } else if (fvalue < 0.0001) {
+            realstyle = E_FORMAT;
+        } else if ((max == 0 && fvalue >= 10)
+                    || (max > 0 && fvalue >= pow_10(max))) {
+            realstyle = E_FORMAT;
+        } else {
+            realstyle = F_FORMAT;
+        }
+    } else {
+        realstyle = style;
+    }
+
+    if (style != F_FORMAT) {
+        tmpvalue = fvalue;
+        /* Calculate the exponent */
+        if (fvalue != 0.0) {
+            while (tmpvalue < 1) {
+                tmpvalue *= 10;
+                exp--;
+            }
+            while (tmpvalue > 10) {
+                tmpvalue /= 10;
+                exp++;
+            }
+        }
+        if (style == G_FORMAT) {
+            /*
+             * In G_FORMAT the "precision" represents significant digits. We
+             * always have at least 1 significant digit.
+             */
+            if (max == 0)
+                max = 1;
+            /* Now convert significant digits to decimal places */
+            if (realstyle == F_FORMAT) {
+                max -= (exp + 1);
+                if (max < 0) {
+                    /*
+                     * Should not happen. If we're in F_FORMAT then exp < max?
+                     */
+                    return 0;
+                }
+            } else {
+                /*
+                 * In E_FORMAT there is always one significant digit in front
+                 * of the decimal point, so:
+                 * significant digits == 1 + decimal places
+                 */
+                max--;
+            }
+        }
+        if (realstyle == E_FORMAT)
+            fvalue = tmpvalue;
+    }
+    ufvalue = abs_val(fvalue);
+    if (ufvalue > ULONG_MAX) {
+        /* Number too big */
+        return 0;
+    }
+    intpart = (unsigned long)ufvalue;
+
+    /*
+     * sorry, we only support 9 digits past the decimal because of our
+     * conversion method
+     */
+    if (max > 9)
+        max = 9;
+
+    /*
+     * we "cheat" by converting the fractional part to integer by multiplying
+     * by a factor of 10
+     */
+    max10 = roundv(pow_10(max));
+    fracpart = roundv(pow_10(max) * (ufvalue - intpart));
+
+    if (fracpart >= max10) {
+        intpart++;
+        fracpart -= max10;
+    }
+
+    /* convert integer part */
+    do {
+        iconvert[iplace++] = "0123456789"[intpart % 10];
+        intpart = (intpart / 10);
+    } while (intpart && (iplace < (int)sizeof(iconvert)));
+    if (iplace == sizeof(iconvert))
+        iplace--;
+    iconvert[iplace] = 0;
+
+    /* convert fractional part */
+    while (fplace < max) {
+        if (style == G_FORMAT && fplace == 0 && (fracpart % 10) == 0) {
+            /* We strip trailing zeros in G_FORMAT */
+            max--;
+            fracpart = fracpart / 10;
+            if (fplace < max)
+                continue;
+            break;
+        }
+        fconvert[fplace++] = "0123456789"[fracpart % 10];
+        fracpart = (fracpart / 10);
+    }
+
+    if (fplace == sizeof(fconvert))
+        fplace--;
+    fconvert[fplace] = 0;
+
+    /* convert exponent part */
+    if (realstyle == E_FORMAT) {
+        int tmpexp;
+        if (exp < 0)
+            tmpexp = -exp;
+        else
+            tmpexp = exp;
+
+        do {
+            econvert[eplace++] = "0123456789"[tmpexp % 10];
+            tmpexp = (tmpexp / 10);
+        } while (tmpexp > 0 && eplace < (int)sizeof(econvert));
+        /* Exponent is huge!! Too big to print */
+        if (tmpexp > 0)
+            return 0;
+        /* Add a leading 0 for single digit exponents */
+        if (eplace == 1)
+            econvert[eplace++] = '0';
+    }
+
+    /*
+     * -1 for decimal point (if we have one, i.e. max > 0),
+     * another -1 if we are printing a sign
+     */
+    padlen = min - iplace - max - (max > 0 ? 1 : 0) - ((signvalue) ? 1 : 0);
+    /* Take some off for exponent prefix "+e" and exponent */
+    if (realstyle == E_FORMAT)
+        padlen -= 2 + eplace;
+    zpadlen = max - fplace;
+    if (zpadlen < 0)
+        zpadlen = 0;
+    if (padlen < 0)
+        padlen = 0;
+    if (flags & DP_F_MINUS)
+        padlen = -padlen;
+
+    if ((flags & DP_F_ZERO) && (padlen > 0)) {
+        if (signvalue) {
+            if (!doapr_outch(sbuffer, buffer, currlen, maxlen, signvalue))
+                return 0;
+            --padlen;
+            signvalue = 0;
+        }
+        while (padlen > 0) {
+            if (!doapr_outch(sbuffer, buffer, currlen, maxlen, '0'))
+                return 0;
+            --padlen;
+        }
+    }
+    while (padlen > 0) {
+        if (!doapr_outch(sbuffer, buffer, currlen, maxlen, ' '))
+            return 0;
+        --padlen;
+    }
+    if (signvalue && !doapr_outch(sbuffer, buffer, currlen, maxlen, signvalue))
+        return 0;
+
+    while (iplace > 0) {
+        if (!doapr_outch(sbuffer, buffer, currlen, maxlen, iconvert[--iplace]))
+            return 0;
+    }
+
+    /*
+     * Decimal point. This should probably use locale to find the correct
+     * char to print out.
+     */
+    if (max > 0 || (flags & DP_F_NUM)) {
+        if (!doapr_outch(sbuffer, buffer, currlen, maxlen, '.'))
+            return 0;
+
+        while (fplace > 0) {
+            if (!doapr_outch(sbuffer, buffer, currlen, maxlen,
+                             fconvert[--fplace]))
+                return 0;
+        }
+    }
+    while (zpadlen > 0) {
+        if (!doapr_outch(sbuffer, buffer, currlen, maxlen, '0'))
+            return 0;
+        --zpadlen;
+    }
+    if (realstyle == E_FORMAT) {
+        char ech;
+
+        if ((flags & DP_F_UP) == 0)
+            ech = 'e';
+        else
+            ech = 'E';
+        if (!doapr_outch(sbuffer, buffer, currlen, maxlen, ech))
+                return 0;
+        if (exp < 0) {
+            if (!doapr_outch(sbuffer, buffer, currlen, maxlen, '-'))
+                    return 0;
+        } else {
+            if (!doapr_outch(sbuffer, buffer, currlen, maxlen, '+'))
+                    return 0;
+        }
+        while (eplace > 0) {
+            if (!doapr_outch(sbuffer, buffer, currlen, maxlen,
+                             econvert[--eplace]))
+                return 0;
+        }
+    }
+
+    while (padlen < 0) {
+        if (!doapr_outch(sbuffer, buffer, currlen, maxlen, ' '))
+            return 0;
+        ++padlen;
+    }
+    return 1;
+}
+
+#define BUFFER_INC  1024
+
+static int
+doapr_outch(char **sbuffer,
+            char **buffer, size_t *currlen, size_t *maxlen, int c)
+{
+    /* If we haven't at least one buffer, someone has done a big booboo */
+    if (!ossl_assert(*sbuffer != NULL || buffer != NULL))
+        return 0;
+
+    /* |currlen| must always be <= |*maxlen| */
+    if (!ossl_assert(*currlen <= *maxlen))
+        return 0;
+
+    if (buffer && *currlen == *maxlen) {
+        if (*maxlen > INT_MAX - BUFFER_INC)
+            return 0;
+
+        *maxlen += BUFFER_INC;
+        if (*buffer == NULL) {
+            if ((*buffer = OPENSSL_malloc(*maxlen)) == NULL) {
+                BIOerr(BIO_F_DOAPR_OUTCH, ERR_R_MALLOC_FAILURE);
+                return 0;
+            }
+            if (*currlen > 0) {
+                if (!ossl_assert(*sbuffer != NULL))
+                    return 0;
+                memcpy(*buffer, *sbuffer, *currlen);
+            }
+            *sbuffer = NULL;
+        } else {
+            char *tmpbuf;
+            tmpbuf = OPENSSL_realloc(*buffer, *maxlen);
+            if (tmpbuf == NULL)
+                return 0;
+            *buffer = tmpbuf;
+        }
+    }
+
+    if (*currlen < *maxlen) {
+        if (*sbuffer)
+            (*sbuffer)[(*currlen)++] = (char)c;
+        else
+            (*buffer)[(*currlen)++] = (char)c;
+    }
+
+    return 1;
+}
+
+/***************************************************************************/
+
+int BIO_printf(BIO *bio, const char *format, ...)
+{
+    va_list args;
+    int ret;
+
+    va_start(args, format);
+
+    ret = BIO_vprintf(bio, format, args);
+
+    va_end(args);
+    return ret;
+}
+
+int BIO_vprintf(BIO *bio, const char *format, va_list args)
+{
+    int ret;
+    size_t retlen;
+    char hugebuf[1024 * 2];     /* Was previously 10k, which is unreasonable
+                                 * in small-stack environments, like threads
+                                 * or DOS programs. */
+    char *hugebufp = hugebuf;
+    size_t hugebufsize = sizeof(hugebuf);
+    char *dynbuf = NULL;
+    int ignored;
+
+    dynbuf = NULL;
+    if (!_dopr(&hugebufp, &dynbuf, &hugebufsize, &retlen, &ignored, format,
+                args)) {
+        OPENSSL_free(dynbuf);
+        return -1;
+    }
+    if (dynbuf) {
+        ret = BIO_write(bio, dynbuf, (int)retlen);
+        OPENSSL_free(dynbuf);
+    } else {
+        ret = BIO_write(bio, hugebuf, (int)retlen);
+    }
+    return ret;
+}
+
+/*
+ * As snprintf is not available everywhere, we provide our own
+ * implementation. This function has nothing to do with BIOs, but it's
+ * closely related to BIO_printf, and we need *some* name prefix ... (XXX the
+ * function should be renamed, but to what?)
+ */
+int BIO_snprintf(char *buf, size_t n, const char *format, ...)
+{
+    va_list args;
+    int ret;
+
+    va_start(args, format);
+
+    ret = BIO_vsnprintf(buf, n, format, args);
+
+    va_end(args);
+    return ret;
+}
+
+int BIO_vsnprintf(char *buf, size_t n, const char *format, va_list args)
+{
+    size_t retlen;
+    int truncated;
+
+    if (!_dopr(&buf, NULL, &n, &retlen, &truncated, format, args))
+        return -1;
+
+    if (truncated)
+        /*
+         * In case of truncation, return -1 like traditional snprintf.
+         * (Current drafts for ISO/IEC 9899 say snprintf should return the
+         * number of characters that would have been written, had the buffer
+         * been large enough.)
+         */
+        return -1;
+    else
+        return (retlen <= INT_MAX) ? (int)retlen : -1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_sock.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_sock.c
new file mode 100644
index 000000000..e7a24d02c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_sock.c
@@ -0,0 +1,369 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <errno.h>
+#include "bio_lcl.h"
+#ifndef OPENSSL_NO_SOCK
+# define SOCKET_PROTOCOL IPPROTO_TCP
+# ifdef SO_MAXCONN
+#  define MAX_LISTEN  SO_MAXCONN
+# elif defined(SOMAXCONN)
+#  define MAX_LISTEN  SOMAXCONN
+# else
+#  define MAX_LISTEN  32
+# endif
+# if defined(OPENSSL_SYS_WINDOWS)
+static int wsa_init_done = 0;
+# endif
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+int BIO_get_host_ip(const char *str, unsigned char *ip)
+{
+    BIO_ADDRINFO *res = NULL;
+    int ret = 0;
+
+    if (BIO_sock_init() != 1)
+        return 0;               /* don't generate another error code here */
+
+    if (BIO_lookup(str, NULL, BIO_LOOKUP_CLIENT, AF_INET, SOCK_STREAM, &res)) {
+        size_t l;
+
+        if (BIO_ADDRINFO_family(res) != AF_INET) {
+            BIOerr(BIO_F_BIO_GET_HOST_IP,
+                   BIO_R_GETHOSTBYNAME_ADDR_IS_NOT_AF_INET);
+        } else if (BIO_ADDR_rawaddress(BIO_ADDRINFO_address(res), NULL, &l)) {
+            /*
+             * Because only AF_INET addresses will reach this far, we can assert
+             * that l should be 4
+             */
+            if (ossl_assert(l == 4))
+                ret = BIO_ADDR_rawaddress(BIO_ADDRINFO_address(res), ip, &l);
+        }
+        BIO_ADDRINFO_free(res);
+    } else {
+        ERR_add_error_data(2, "host=", str);
+    }
+
+    return ret;
+}
+
+int BIO_get_port(const char *str, unsigned short *port_ptr)
+{
+    BIO_ADDRINFO *res = NULL;
+    int ret = 0;
+
+    if (str == NULL) {
+        BIOerr(BIO_F_BIO_GET_PORT, BIO_R_NO_PORT_DEFINED);
+        return 0;
+    }
+
+    if (BIO_sock_init() != 1)
+        return 0;               /* don't generate another error code here */
+
+    if (BIO_lookup(NULL, str, BIO_LOOKUP_CLIENT, AF_INET, SOCK_STREAM, &res)) {
+        if (BIO_ADDRINFO_family(res) != AF_INET) {
+            BIOerr(BIO_F_BIO_GET_PORT,
+                   BIO_R_ADDRINFO_ADDR_IS_NOT_AF_INET);
+        } else {
+            *port_ptr = ntohs(BIO_ADDR_rawport(BIO_ADDRINFO_address(res)));
+            ret = 1;
+        }
+        BIO_ADDRINFO_free(res);
+    } else {
+        ERR_add_error_data(2, "host=", str);
+    }
+
+    return ret;
+}
+# endif
+
+int BIO_sock_error(int sock)
+{
+    int j = 0, i;
+    socklen_t size = sizeof(j);
+
+    /*
+     * Note: under Windows the third parameter is of type (char *) whereas
+     * under other systems it is (void *) if you don't have a cast it will
+     * choke the compiler: if you do have a cast then you can either go for
+     * (char *) or (void *).
+     */
+    i = getsockopt(sock, SOL_SOCKET, SO_ERROR, (void *)&j, &size);
+    if (i < 0)
+        return get_last_socket_error();
+    else
+        return j;
+}
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+struct hostent *BIO_gethostbyname(const char *name)
+{
+    /*
+     * Caching gethostbyname() results forever is wrong, so we have to let
+     * the true gethostbyname() worry about this
+     */
+    return gethostbyname(name);
+}
+# endif
+
+int BIO_sock_init(void)
+{
+# ifdef OPENSSL_SYS_WINDOWS
+    static struct WSAData wsa_state;
+
+    if (!wsa_init_done) {
+        int err;
+
+        wsa_init_done = 1;
+        memset(&wsa_state, 0, sizeof(wsa_state));
+        /*
+         * Not making wsa_state available to the rest of the code is formally
+         * wrong. But the structures we use are [believed to be] invariable
+         * among Winsock DLLs, while API availability is [expected to be]
+         * probed at run-time with DSO_global_lookup.
+         */
+        if (WSAStartup(0x0202, &wsa_state) != 0) {
+            err = WSAGetLastError();
+            SYSerr(SYS_F_WSASTARTUP, err);
+            BIOerr(BIO_F_BIO_SOCK_INIT, BIO_R_WSASTARTUP);
+            return -1;
+        }
+    }
+# endif                         /* OPENSSL_SYS_WINDOWS */
+# ifdef WATT32
+    extern int _watt_do_exit;
+    _watt_do_exit = 0;          /* don't make sock_init() call exit() */
+    if (sock_init())
+        return -1;
+# endif
+
+    return 1;
+}
+
+void bio_sock_cleanup_int(void)
+{
+# ifdef OPENSSL_SYS_WINDOWS
+    if (wsa_init_done) {
+        wsa_init_done = 0;
+        WSACleanup();
+    }
+# endif
+}
+
+int BIO_socket_ioctl(int fd, long type, void *arg)
+{
+    int i;
+
+#  ifdef __DJGPP__
+    i = ioctlsocket(fd, type, (char *)arg);
+#  else
+#   if defined(OPENSSL_SYS_VMS)
+    /*-
+     * 2011-02-18 SMS.
+     * VMS ioctl() can't tolerate a 64-bit "void *arg", but we
+     * observe that all the consumers pass in an "unsigned long *",
+     * so we arrange a local copy with a short pointer, and use
+     * that, instead.
+     */
+#    if __INITIAL_POINTER_SIZE == 64
+#     define ARG arg_32p
+#     pragma pointer_size save
+#     pragma pointer_size 32
+    unsigned long arg_32;
+    unsigned long *arg_32p;
+#     pragma pointer_size restore
+    arg_32p = &arg_32;
+    arg_32 = *((unsigned long *)arg);
+#    else                       /* __INITIAL_POINTER_SIZE == 64 */
+#     define ARG arg
+#    endif                      /* __INITIAL_POINTER_SIZE == 64 [else] */
+#   else                        /* defined(OPENSSL_SYS_VMS) */
+#    define ARG arg
+#   endif                       /* defined(OPENSSL_SYS_VMS) [else] */
+
+    i = ioctlsocket(fd, type, ARG);
+#  endif                        /* __DJGPP__ */
+    if (i < 0)
+        SYSerr(SYS_F_IOCTLSOCKET, get_last_socket_error());
+    return i;
+}
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+int BIO_get_accept_socket(char *host, int bind_mode)
+{
+    int s = INVALID_SOCKET;
+    char *h = NULL, *p = NULL;
+    BIO_ADDRINFO *res = NULL;
+
+    if (!BIO_parse_hostserv(host, &h, &p, BIO_PARSE_PRIO_SERV))
+        return INVALID_SOCKET;
+
+    if (BIO_sock_init() != 1)
+        return INVALID_SOCKET;
+
+    if (BIO_lookup(h, p, BIO_LOOKUP_SERVER, AF_UNSPEC, SOCK_STREAM, &res) != 0)
+        goto err;
+
+    if ((s = BIO_socket(BIO_ADDRINFO_family(res), BIO_ADDRINFO_socktype(res),
+                        BIO_ADDRINFO_protocol(res), 0)) == INVALID_SOCKET) {
+        s = INVALID_SOCKET;
+        goto err;
+    }
+
+    if (!BIO_listen(s, BIO_ADDRINFO_address(res),
+                    bind_mode ? BIO_SOCK_REUSEADDR : 0)) {
+        BIO_closesocket(s);
+        s = INVALID_SOCKET;
+    }
+
+ err:
+    BIO_ADDRINFO_free(res);
+    OPENSSL_free(h);
+    OPENSSL_free(p);
+
+    return s;
+}
+
+int BIO_accept(int sock, char **ip_port)
+{
+    BIO_ADDR res;
+    int ret = -1;
+
+    ret = BIO_accept_ex(sock, &res, 0);
+    if (ret == (int)INVALID_SOCKET) {
+        if (BIO_sock_should_retry(ret)) {
+            ret = -2;
+            goto end;
+        }
+        SYSerr(SYS_F_ACCEPT, get_last_socket_error());
+        BIOerr(BIO_F_BIO_ACCEPT, BIO_R_ACCEPT_ERROR);
+        goto end;
+    }
+
+    if (ip_port != NULL) {
+        char *host = BIO_ADDR_hostname_string(&res, 1);
+        char *port = BIO_ADDR_service_string(&res, 1);
+        if (host != NULL && port != NULL)
+            *ip_port = OPENSSL_zalloc(strlen(host) + strlen(port) + 2);
+        else
+            *ip_port = NULL;
+
+        if (*ip_port == NULL) {
+            BIOerr(BIO_F_BIO_ACCEPT, ERR_R_MALLOC_FAILURE);
+            BIO_closesocket(ret);
+            ret = (int)INVALID_SOCKET;
+        } else {
+            strcpy(*ip_port, host);
+            strcat(*ip_port, ":");
+            strcat(*ip_port, port);
+        }
+        OPENSSL_free(host);
+        OPENSSL_free(port);
+    }
+
+ end:
+    return ret;
+}
+# endif
+
+int BIO_set_tcp_ndelay(int s, int on)
+{
+    int ret = 0;
+# if defined(TCP_NODELAY) && (defined(IPPROTO_TCP) || defined(SOL_TCP))
+    int opt;
+
+#  ifdef SOL_TCP
+    opt = SOL_TCP;
+#  else
+#   ifdef IPPROTO_TCP
+    opt = IPPROTO_TCP;
+#   endif
+#  endif
+
+    ret = setsockopt(s, opt, TCP_NODELAY, (char *)&on, sizeof(on));
+# endif
+    return (ret == 0);
+}
+
+int BIO_socket_nbio(int s, int mode)
+{
+    int ret = -1;
+    int l;
+
+    l = mode;
+# ifdef FIONBIO
+    l = mode;
+
+    ret = BIO_socket_ioctl(s, FIONBIO, &l);
+# elif defined(F_GETFL) && defined(F_SETFL) && (defined(O_NONBLOCK) || defined(FNDELAY))
+    /* make sure this call always pushes an error level; BIO_socket_ioctl() does so, so we do too. */
+
+    l = fcntl(s, F_GETFL, 0);
+    if (l == -1) {
+        SYSerr(SYS_F_FCNTL, get_last_sys_error());
+        ret = -1;
+    } else {
+#  if defined(O_NONBLOCK)
+        l &= ~O_NONBLOCK;
+#  else
+        l &= ~FNDELAY; /* BSD4.x */
+#  endif
+        if (mode) {
+#  if defined(O_NONBLOCK)
+            l |= O_NONBLOCK;
+#  else
+            l |= FNDELAY; /* BSD4.x */
+#  endif
+        }
+        ret = fcntl(s, F_SETFL, l);
+
+        if (ret < 0) {
+            SYSerr(SYS_F_FCNTL, get_last_sys_error());
+        }
+    }
+# else
+    /* make sure this call always pushes an error level; BIO_socket_ioctl() does so, so we do too. */
+    BIOerr(BIO_F_BIO_SOCKET_NBIO, ERR_R_PASSED_INVALID_ARGUMENT);
+# endif
+
+    return (ret == 0);
+}
+
+int BIO_sock_info(int sock,
+                  enum BIO_sock_info_type type, union BIO_sock_info_u *info)
+{
+    switch (type) {
+    case BIO_SOCK_INFO_ADDRESS:
+        {
+            socklen_t addr_len;
+            int ret = 0;
+            addr_len = sizeof(*info->addr);
+            ret = getsockname(sock, BIO_ADDR_sockaddr_noconst(info->addr),
+                              &addr_len);
+            if (ret == -1) {
+                SYSerr(SYS_F_GETSOCKNAME, get_last_socket_error());
+                BIOerr(BIO_F_BIO_SOCK_INFO, BIO_R_GETSOCKNAME_ERROR);
+                return 0;
+            }
+            if ((size_t)addr_len > sizeof(*info->addr)) {
+                BIOerr(BIO_F_BIO_SOCK_INFO, BIO_R_GETSOCKNAME_TRUNCATED_ADDRESS);
+                return 0;
+            }
+        }
+        break;
+    default:
+        BIOerr(BIO_F_BIO_SOCK_INFO, BIO_R_UNKNOWN_INFO_TYPE);
+        return 0;
+    }
+    return 1;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_sock2.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_sock2.c
new file mode 100644
index 000000000..5d82ab22d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/b_sock2.c
@@ -0,0 +1,317 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <errno.h>
+
+#include "bio_lcl.h"
+
+#include <openssl/err.h>
+
+#ifndef OPENSSL_NO_SOCK
+# ifdef SO_MAXCONN
+#  define MAX_LISTEN  SO_MAXCONN
+# elif defined(SOMAXCONN)
+#  define MAX_LISTEN  SOMAXCONN
+# else
+#  define MAX_LISTEN  32
+# endif
+
+/*-
+ * BIO_socket - create a socket
+ * @domain: the socket domain (AF_INET, AF_INET6, AF_UNIX, ...)
+ * @socktype: the socket type (SOCK_STEAM, SOCK_DGRAM)
+ * @protocol: the protocol to use (IPPROTO_TCP, IPPROTO_UDP)
+ * @options: BIO socket options (currently unused)
+ *
+ * Creates a socket.  This should be called before calling any
+ * of BIO_connect and BIO_listen.
+ *
+ * Returns the file descriptor on success or INVALID_SOCKET on failure.  On
+ * failure errno is set, and a status is added to the OpenSSL error stack.
+ */
+int BIO_socket(int domain, int socktype, int protocol, int options)
+{
+    int sock = -1;
+
+    if (BIO_sock_init() != 1)
+        return INVALID_SOCKET;
+
+    sock = socket(domain, socktype, protocol);
+    if (sock == -1) {
+        SYSerr(SYS_F_SOCKET, get_last_socket_error());
+        BIOerr(BIO_F_BIO_SOCKET, BIO_R_UNABLE_TO_CREATE_SOCKET);
+        return INVALID_SOCKET;
+    }
+
+    return sock;
+}
+
+/*-
+ * BIO_connect - connect to an address
+ * @sock: the socket to connect with
+ * @addr: the address to connect to
+ * @options: BIO socket options
+ *
+ * Connects to the address using the given socket and options.
+ *
+ * Options can be a combination of the following:
+ * - BIO_SOCK_KEEPALIVE: enable regularly sending keep-alive messages.
+ * - BIO_SOCK_NONBLOCK: Make the socket non-blocking.
+ * - BIO_SOCK_NODELAY: don't delay small messages.
+ *
+ * options holds BIO socket options that can be used
+ * You should call this for every address returned by BIO_lookup
+ * until the connection is successful.
+ *
+ * Returns 1 on success or 0 on failure.  On failure errno is set
+ * and an error status is added to the OpenSSL error stack.
+ */
+int BIO_connect(int sock, const BIO_ADDR *addr, int options)
+{
+    const int on = 1;
+
+    if (sock == -1) {
+        BIOerr(BIO_F_BIO_CONNECT, BIO_R_INVALID_SOCKET);
+        return 0;
+    }
+
+    if (!BIO_socket_nbio(sock, (options & BIO_SOCK_NONBLOCK) != 0))
+        return 0;
+
+    if (options & BIO_SOCK_KEEPALIVE) {
+        if (setsockopt(sock, SOL_SOCKET, SO_KEEPALIVE,
+                       (const void *)&on, sizeof(on)) != 0) {
+            SYSerr(SYS_F_SETSOCKOPT, get_last_socket_error());
+            BIOerr(BIO_F_BIO_CONNECT, BIO_R_UNABLE_TO_KEEPALIVE);
+            return 0;
+        }
+    }
+
+    if (options & BIO_SOCK_NODELAY) {
+        if (setsockopt(sock, IPPROTO_TCP, TCP_NODELAY,
+                       (const void *)&on, sizeof(on)) != 0) {
+            SYSerr(SYS_F_SETSOCKOPT, get_last_socket_error());
+            BIOerr(BIO_F_BIO_CONNECT, BIO_R_UNABLE_TO_NODELAY);
+            return 0;
+        }
+    }
+
+    if (connect(sock, BIO_ADDR_sockaddr(addr),
+                BIO_ADDR_sockaddr_size(addr)) == -1) {
+        if (!BIO_sock_should_retry(-1)) {
+            SYSerr(SYS_F_CONNECT, get_last_socket_error());
+            BIOerr(BIO_F_BIO_CONNECT, BIO_R_CONNECT_ERROR);
+        }
+        return 0;
+    }
+    return 1;
+}
+
+/*-
+ * BIO_bind - bind socket to address
+ * @sock: the socket to set
+ * @addr: local address to bind to
+ * @options: BIO socket options
+ *
+ * Binds to the address using the given socket and options.
+ *
+ * Options can be a combination of the following:
+ * - BIO_SOCK_REUSEADDR: Try to reuse the address and port combination
+ *   for a recently closed port.
+ *
+ * When restarting the program it could be that the port is still in use.  If
+ * you set to BIO_SOCK_REUSEADDR option it will try to reuse the port anyway.
+ * It's recommended that you use this.
+ */
+int BIO_bind(int sock, const BIO_ADDR *addr, int options)
+{
+# ifndef OPENSSL_SYS_WINDOWS
+    int on = 1;
+# endif
+
+    if (sock == -1) {
+        BIOerr(BIO_F_BIO_BIND, BIO_R_INVALID_SOCKET);
+        return 0;
+    }
+
+# ifndef OPENSSL_SYS_WINDOWS
+    /*
+     * SO_REUSEADDR has different behavior on Windows than on
+     * other operating systems, don't set it there.
+     */
+    if (options & BIO_SOCK_REUSEADDR) {
+        if (setsockopt(sock, SOL_SOCKET, SO_REUSEADDR,
+                       (const void *)&on, sizeof(on)) != 0) {
+            SYSerr(SYS_F_SETSOCKOPT, get_last_socket_error());
+            BIOerr(BIO_F_BIO_BIND, BIO_R_UNABLE_TO_REUSEADDR);
+            return 0;
+        }
+    }
+# endif
+
+    if (bind(sock, BIO_ADDR_sockaddr(addr), BIO_ADDR_sockaddr_size(addr)) != 0) {
+        SYSerr(SYS_F_BIND, get_last_socket_error());
+        BIOerr(BIO_F_BIO_BIND, BIO_R_UNABLE_TO_BIND_SOCKET);
+        return 0;
+    }
+
+    return 1;
+}
+
+/*-
+ * BIO_listen - Creates a listen socket
+ * @sock: the socket to listen with
+ * @addr: local address to bind to
+ * @options: BIO socket options
+ *
+ * Binds to the address using the given socket and options, then
+ * starts listening for incoming connections.
+ *
+ * Options can be a combination of the following:
+ * - BIO_SOCK_KEEPALIVE: enable regularly sending keep-alive messages.
+ * - BIO_SOCK_NONBLOCK: Make the socket non-blocking.
+ * - BIO_SOCK_NODELAY: don't delay small messages.
+ * - BIO_SOCK_REUSEADDR: Try to reuse the address and port combination
+ *   for a recently closed port.
+ * - BIO_SOCK_V6_ONLY: When creating an IPv6 socket, make it listen only
+ *   for IPv6 addresses and not IPv4 addresses mapped to IPv6.
+ *
+ * It's recommended that you set up both an IPv6 and IPv4 listen socket, and
+ * then check both for new clients that connect to it.  You want to set up
+ * the socket as non-blocking in that case since else it could hang.
+ *
+ * Not all operating systems support IPv4 addresses on an IPv6 socket, and for
+ * others it's an option.  If you pass the BIO_LISTEN_V6_ONLY it will try to
+ * create the IPv6 sockets to only listen for IPv6 connection.
+ *
+ * It could be that the first BIO_listen() call will listen to all the IPv6
+ * and IPv4 addresses and that then trying to bind to the IPv4 address will
+ * fail.  We can't tell the difference between already listening ourself to
+ * it and someone else listening to it when failing and errno is EADDRINUSE, so
+ * it's recommended to not give an error in that case if the first call was
+ * successful.
+ *
+ * When restarting the program it could be that the port is still in use.  If
+ * you set to BIO_SOCK_REUSEADDR option it will try to reuse the port anyway.
+ * It's recommended that you use this.
+ */
+int BIO_listen(int sock, const BIO_ADDR *addr, int options)
+{
+    int on = 1;
+    int socktype;
+    socklen_t socktype_len = sizeof(socktype);
+
+    if (sock == -1) {
+        BIOerr(BIO_F_BIO_LISTEN, BIO_R_INVALID_SOCKET);
+        return 0;
+    }
+
+    if (getsockopt(sock, SOL_SOCKET, SO_TYPE,
+                   (void *)&socktype, &socktype_len) != 0
+        || socktype_len != sizeof(socktype)) {
+        SYSerr(SYS_F_GETSOCKOPT, get_last_socket_error());
+        BIOerr(BIO_F_BIO_LISTEN, BIO_R_GETTING_SOCKTYPE);
+        return 0;
+    }
+
+    if (!BIO_socket_nbio(sock, (options & BIO_SOCK_NONBLOCK) != 0))
+        return 0;
+
+    if (options & BIO_SOCK_KEEPALIVE) {
+        if (setsockopt(sock, SOL_SOCKET, SO_KEEPALIVE,
+                       (const void *)&on, sizeof(on)) != 0) {
+            SYSerr(SYS_F_SETSOCKOPT, get_last_socket_error());
+            BIOerr(BIO_F_BIO_LISTEN, BIO_R_UNABLE_TO_KEEPALIVE);
+            return 0;
+        }
+    }
+
+    if (options & BIO_SOCK_NODELAY) {
+        if (setsockopt(sock, IPPROTO_TCP, TCP_NODELAY,
+                       (const void *)&on, sizeof(on)) != 0) {
+            SYSerr(SYS_F_SETSOCKOPT, get_last_socket_error());
+            BIOerr(BIO_F_BIO_LISTEN, BIO_R_UNABLE_TO_NODELAY);
+            return 0;
+        }
+    }
+
+# ifdef IPV6_V6ONLY
+    if (BIO_ADDR_family(addr) == AF_INET6) {
+        /*
+         * Note: Windows default of IPV6_V6ONLY is ON, and Linux is OFF.
+         * Therefore we always have to use setsockopt here.
+         */
+        on = options & BIO_SOCK_V6_ONLY ? 1 : 0;
+        if (setsockopt(sock, IPPROTO_IPV6, IPV6_V6ONLY,
+                       (const void *)&on, sizeof(on)) != 0) {
+            SYSerr(SYS_F_SETSOCKOPT, get_last_socket_error());
+            BIOerr(BIO_F_BIO_LISTEN, BIO_R_LISTEN_V6_ONLY);
+            return 0;
+        }
+    }
+# endif
+
+    if (!BIO_bind(sock, addr, options))
+        return 0;
+
+    if (socktype != SOCK_DGRAM && listen(sock, MAX_LISTEN) == -1) {
+        SYSerr(SYS_F_LISTEN, get_last_socket_error());
+        BIOerr(BIO_F_BIO_LISTEN, BIO_R_UNABLE_TO_LISTEN_SOCKET);
+        return 0;
+    }
+
+    return 1;
+}
+
+/*-
+ * BIO_accept_ex - Accept new incoming connections
+ * @sock: the listening socket
+ * @addr: the BIO_ADDR to store the peer address in
+ * @options: BIO socket options, applied on the accepted socket.
+ *
+ */
+int BIO_accept_ex(int accept_sock, BIO_ADDR *addr_, int options)
+{
+    socklen_t len;
+    int accepted_sock;
+    BIO_ADDR locaddr;
+    BIO_ADDR *addr = addr_ == NULL ? &locaddr : addr_;
+
+    len = sizeof(*addr);
+    accepted_sock = accept(accept_sock,
+                           BIO_ADDR_sockaddr_noconst(addr), &len);
+    if (accepted_sock == -1) {
+        if (!BIO_sock_should_retry(accepted_sock)) {
+            SYSerr(SYS_F_ACCEPT, get_last_socket_error());
+            BIOerr(BIO_F_BIO_ACCEPT_EX, BIO_R_ACCEPT_ERROR);
+        }
+        return INVALID_SOCKET;
+    }
+
+    if (!BIO_socket_nbio(accepted_sock, (options & BIO_SOCK_NONBLOCK) != 0)) {
+        closesocket(accepted_sock);
+        return INVALID_SOCKET;
+    }
+
+    return accepted_sock;
+}
+
+/*-
+ * BIO_closesocket - Close a socket
+ * @sock: the socket to close
+ */
+int BIO_closesocket(int sock)
+{
+    if (closesocket(sock) < 0)
+        return 0;
+    return 1;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bf_buff.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bf_buff.c
new file mode 100644
index 000000000..8e87a629b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bf_buff.c
@@ -0,0 +1,475 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <errno.h>
+#include "bio_lcl.h"
+#include "internal/cryptlib.h"
+
+static int buffer_write(BIO *h, const char *buf, int num);
+static int buffer_read(BIO *h, char *buf, int size);
+static int buffer_puts(BIO *h, const char *str);
+static int buffer_gets(BIO *h, char *str, int size);
+static long buffer_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int buffer_new(BIO *h);
+static int buffer_free(BIO *data);
+static long buffer_callback_ctrl(BIO *h, int cmd, BIO_info_cb *fp);
+#define DEFAULT_BUFFER_SIZE     4096
+
+static const BIO_METHOD methods_buffer = {
+    BIO_TYPE_BUFFER,
+    "buffer",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    buffer_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    buffer_read,
+    buffer_puts,
+    buffer_gets,
+    buffer_ctrl,
+    buffer_new,
+    buffer_free,
+    buffer_callback_ctrl,
+};
+
+const BIO_METHOD *BIO_f_buffer(void)
+{
+    return &methods_buffer;
+}
+
+static int buffer_new(BIO *bi)
+{
+    BIO_F_BUFFER_CTX *ctx = OPENSSL_zalloc(sizeof(*ctx));
+
+    if (ctx == NULL)
+        return 0;
+    ctx->ibuf_size = DEFAULT_BUFFER_SIZE;
+    ctx->ibuf = OPENSSL_malloc(DEFAULT_BUFFER_SIZE);
+    if (ctx->ibuf == NULL) {
+        OPENSSL_free(ctx);
+        return 0;
+    }
+    ctx->obuf_size = DEFAULT_BUFFER_SIZE;
+    ctx->obuf = OPENSSL_malloc(DEFAULT_BUFFER_SIZE);
+    if (ctx->obuf == NULL) {
+        OPENSSL_free(ctx->ibuf);
+        OPENSSL_free(ctx);
+        return 0;
+    }
+
+    bi->init = 1;
+    bi->ptr = (char *)ctx;
+    bi->flags = 0;
+    return 1;
+}
+
+static int buffer_free(BIO *a)
+{
+    BIO_F_BUFFER_CTX *b;
+
+    if (a == NULL)
+        return 0;
+    b = (BIO_F_BUFFER_CTX *)a->ptr;
+    OPENSSL_free(b->ibuf);
+    OPENSSL_free(b->obuf);
+    OPENSSL_free(a->ptr);
+    a->ptr = NULL;
+    a->init = 0;
+    a->flags = 0;
+    return 1;
+}
+
+static int buffer_read(BIO *b, char *out, int outl)
+{
+    int i, num = 0;
+    BIO_F_BUFFER_CTX *ctx;
+
+    if (out == NULL)
+        return 0;
+    ctx = (BIO_F_BUFFER_CTX *)b->ptr;
+
+    if ((ctx == NULL) || (b->next_bio == NULL))
+        return 0;
+    num = 0;
+    BIO_clear_retry_flags(b);
+
+ start:
+    i = ctx->ibuf_len;
+    /* If there is stuff left over, grab it */
+    if (i != 0) {
+        if (i > outl)
+            i = outl;
+        memcpy(out, &(ctx->ibuf[ctx->ibuf_off]), i);
+        ctx->ibuf_off += i;
+        ctx->ibuf_len -= i;
+        num += i;
+        if (outl == i)
+            return num;
+        outl -= i;
+        out += i;
+    }
+
+    /*
+     * We may have done a partial read. try to do more. We have nothing in
+     * the buffer. If we get an error and have read some data, just return it
+     * and let them retry to get the error again. copy direct to parent
+     * address space
+     */
+    if (outl > ctx->ibuf_size) {
+        for (;;) {
+            i = BIO_read(b->next_bio, out, outl);
+            if (i <= 0) {
+                BIO_copy_next_retry(b);
+                if (i < 0)
+                    return ((num > 0) ? num : i);
+                if (i == 0)
+                    return num;
+            }
+            num += i;
+            if (outl == i)
+                return num;
+            out += i;
+            outl -= i;
+        }
+    }
+    /* else */
+
+    /* we are going to be doing some buffering */
+    i = BIO_read(b->next_bio, ctx->ibuf, ctx->ibuf_size);
+    if (i <= 0) {
+        BIO_copy_next_retry(b);
+        if (i < 0)
+            return ((num > 0) ? num : i);
+        if (i == 0)
+            return num;
+    }
+    ctx->ibuf_off = 0;
+    ctx->ibuf_len = i;
+
+    /* Lets re-read using ourselves :-) */
+    goto start;
+}
+
+static int buffer_write(BIO *b, const char *in, int inl)
+{
+    int i, num = 0;
+    BIO_F_BUFFER_CTX *ctx;
+
+    if ((in == NULL) || (inl <= 0))
+        return 0;
+    ctx = (BIO_F_BUFFER_CTX *)b->ptr;
+    if ((ctx == NULL) || (b->next_bio == NULL))
+        return 0;
+
+    BIO_clear_retry_flags(b);
+ start:
+    i = ctx->obuf_size - (ctx->obuf_len + ctx->obuf_off);
+    /* add to buffer and return */
+    if (i >= inl) {
+        memcpy(&(ctx->obuf[ctx->obuf_off + ctx->obuf_len]), in, inl);
+        ctx->obuf_len += inl;
+        return (num + inl);
+    }
+    /* else */
+    /* stuff already in buffer, so add to it first, then flush */
+    if (ctx->obuf_len != 0) {
+        if (i > 0) {            /* lets fill it up if we can */
+            memcpy(&(ctx->obuf[ctx->obuf_off + ctx->obuf_len]), in, i);
+            in += i;
+            inl -= i;
+            num += i;
+            ctx->obuf_len += i;
+        }
+        /* we now have a full buffer needing flushing */
+        for (;;) {
+            i = BIO_write(b->next_bio, &(ctx->obuf[ctx->obuf_off]),
+                          ctx->obuf_len);
+            if (i <= 0) {
+                BIO_copy_next_retry(b);
+
+                if (i < 0)
+                    return ((num > 0) ? num : i);
+                if (i == 0)
+                    return num;
+            }
+            ctx->obuf_off += i;
+            ctx->obuf_len -= i;
+            if (ctx->obuf_len == 0)
+                break;
+        }
+    }
+    /*
+     * we only get here if the buffer has been flushed and we still have
+     * stuff to write
+     */
+    ctx->obuf_off = 0;
+
+    /* we now have inl bytes to write */
+    while (inl >= ctx->obuf_size) {
+        i = BIO_write(b->next_bio, in, inl);
+        if (i <= 0) {
+            BIO_copy_next_retry(b);
+            if (i < 0)
+                return ((num > 0) ? num : i);
+            if (i == 0)
+                return num;
+        }
+        num += i;
+        in += i;
+        inl -= i;
+        if (inl == 0)
+            return num;
+    }
+
+    /*
+     * copy the rest into the buffer since we have only a small amount left
+     */
+    goto start;
+}
+
+static long buffer_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    BIO *dbio;
+    BIO_F_BUFFER_CTX *ctx;
+    long ret = 1;
+    char *p1, *p2;
+    int r, i, *ip;
+    int ibs, obs;
+
+    ctx = (BIO_F_BUFFER_CTX *)b->ptr;
+
+    switch (cmd) {
+    case BIO_CTRL_RESET:
+        ctx->ibuf_off = 0;
+        ctx->ibuf_len = 0;
+        ctx->obuf_off = 0;
+        ctx->obuf_len = 0;
+        if (b->next_bio == NULL)
+            return 0;
+        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+        break;
+    case BIO_CTRL_EOF:
+        if (ctx->ibuf_len > 0)
+            return 0;
+        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+        break;
+    case BIO_CTRL_INFO:
+        ret = (long)ctx->obuf_len;
+        break;
+    case BIO_C_GET_BUFF_NUM_LINES:
+        ret = 0;
+        p1 = ctx->ibuf;
+        for (i = 0; i < ctx->ibuf_len; i++) {
+            if (p1[ctx->ibuf_off + i] == '\n')
+                ret++;
+        }
+        break;
+    case BIO_CTRL_WPENDING:
+        ret = (long)ctx->obuf_len;
+        if (ret == 0) {
+            if (b->next_bio == NULL)
+                return 0;
+            ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+        }
+        break;
+    case BIO_CTRL_PENDING:
+        ret = (long)ctx->ibuf_len;
+        if (ret == 0) {
+            if (b->next_bio == NULL)
+                return 0;
+            ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+        }
+        break;
+    case BIO_C_SET_BUFF_READ_DATA:
+        if (num > ctx->ibuf_size) {
+            p1 = OPENSSL_malloc((int)num);
+            if (p1 == NULL)
+                goto malloc_error;
+            OPENSSL_free(ctx->ibuf);
+            ctx->ibuf = p1;
+        }
+        ctx->ibuf_off = 0;
+        ctx->ibuf_len = (int)num;
+        memcpy(ctx->ibuf, ptr, (int)num);
+        ret = 1;
+        break;
+    case BIO_C_SET_BUFF_SIZE:
+        if (ptr != NULL) {
+            ip = (int *)ptr;
+            if (*ip == 0) {
+                ibs = (int)num;
+                obs = ctx->obuf_size;
+            } else {            /* if (*ip == 1) */
+
+                ibs = ctx->ibuf_size;
+                obs = (int)num;
+            }
+        } else {
+            ibs = (int)num;
+            obs = (int)num;
+        }
+        p1 = ctx->ibuf;
+        p2 = ctx->obuf;
+        if ((ibs > DEFAULT_BUFFER_SIZE) && (ibs != ctx->ibuf_size)) {
+            p1 = OPENSSL_malloc((int)num);
+            if (p1 == NULL)
+                goto malloc_error;
+        }
+        if ((obs > DEFAULT_BUFFER_SIZE) && (obs != ctx->obuf_size)) {
+            p2 = OPENSSL_malloc((int)num);
+            if (p2 == NULL) {
+                if (p1 != ctx->ibuf)
+                    OPENSSL_free(p1);
+                goto malloc_error;
+            }
+        }
+        if (ctx->ibuf != p1) {
+            OPENSSL_free(ctx->ibuf);
+            ctx->ibuf = p1;
+            ctx->ibuf_off = 0;
+            ctx->ibuf_len = 0;
+            ctx->ibuf_size = ibs;
+        }
+        if (ctx->obuf != p2) {
+            OPENSSL_free(ctx->obuf);
+            ctx->obuf = p2;
+            ctx->obuf_off = 0;
+            ctx->obuf_len = 0;
+            ctx->obuf_size = obs;
+        }
+        break;
+    case BIO_C_DO_STATE_MACHINE:
+        if (b->next_bio == NULL)
+            return 0;
+        BIO_clear_retry_flags(b);
+        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+        BIO_copy_next_retry(b);
+        break;
+
+    case BIO_CTRL_FLUSH:
+        if (b->next_bio == NULL)
+            return 0;
+        if (ctx->obuf_len <= 0) {
+            ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+            break;
+        }
+
+        for (;;) {
+            BIO_clear_retry_flags(b);
+            if (ctx->obuf_len > 0) {
+                r = BIO_write(b->next_bio,
+                              &(ctx->obuf[ctx->obuf_off]), ctx->obuf_len);
+                BIO_copy_next_retry(b);
+                if (r <= 0)
+                    return (long)r;
+                ctx->obuf_off += r;
+                ctx->obuf_len -= r;
+            } else {
+                ctx->obuf_len = 0;
+                ctx->obuf_off = 0;
+                break;
+            }
+        }
+        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+        break;
+    case BIO_CTRL_DUP:
+        dbio = (BIO *)ptr;
+        if (!BIO_set_read_buffer_size(dbio, ctx->ibuf_size) ||
+            !BIO_set_write_buffer_size(dbio, ctx->obuf_size))
+            ret = 0;
+        break;
+    case BIO_CTRL_PEEK:
+        /* Ensure there's stuff in the input buffer */
+        {
+            char fake_buf[1];
+            (void)buffer_read(b, fake_buf, 0);
+        }
+        if (num > ctx->ibuf_len)
+            num = ctx->ibuf_len;
+        memcpy(ptr, &(ctx->ibuf[ctx->ibuf_off]), num);
+        ret = num;
+        break;
+    default:
+        if (b->next_bio == NULL)
+            return 0;
+        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+        break;
+    }
+    return ret;
+ malloc_error:
+    BIOerr(BIO_F_BUFFER_CTRL, ERR_R_MALLOC_FAILURE);
+    return 0;
+}
+
+static long buffer_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
+{
+    long ret = 1;
+
+    if (b->next_bio == NULL)
+        return 0;
+    switch (cmd) {
+    default:
+        ret = BIO_callback_ctrl(b->next_bio, cmd, fp);
+        break;
+    }
+    return ret;
+}
+
+static int buffer_gets(BIO *b, char *buf, int size)
+{
+    BIO_F_BUFFER_CTX *ctx;
+    int num = 0, i, flag;
+    char *p;
+
+    ctx = (BIO_F_BUFFER_CTX *)b->ptr;
+    size--;                     /* reserve space for a '\0' */
+    BIO_clear_retry_flags(b);
+
+    for (;;) {
+        if (ctx->ibuf_len > 0) {
+            p = &(ctx->ibuf[ctx->ibuf_off]);
+            flag = 0;
+            for (i = 0; (i < ctx->ibuf_len) && (i < size); i++) {
+                *(buf++) = p[i];
+                if (p[i] == '\n') {
+                    flag = 1;
+                    i++;
+                    break;
+                }
+            }
+            num += i;
+            size -= i;
+            ctx->ibuf_len -= i;
+            ctx->ibuf_off += i;
+            if (flag || size == 0) {
+                *buf = '\0';
+                return num;
+            }
+        } else {                /* read another chunk */
+
+            i = BIO_read(b->next_bio, ctx->ibuf, ctx->ibuf_size);
+            if (i <= 0) {
+                BIO_copy_next_retry(b);
+                *buf = '\0';
+                if (i < 0)
+                    return ((num > 0) ? num : i);
+                if (i == 0)
+                    return num;
+            }
+            ctx->ibuf_len = i;
+            ctx->ibuf_off = 0;
+        }
+    }
+}
+
+static int buffer_puts(BIO *b, const char *str)
+{
+    return buffer_write(b, str, strlen(str));
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bf_lbuf.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bf_lbuf.c
new file mode 100644
index 000000000..194c7b8af
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bf_lbuf.c
@@ -0,0 +1,326 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <errno.h>
+#include "bio_lcl.h"
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+
+static int linebuffer_write(BIO *h, const char *buf, int num);
+static int linebuffer_read(BIO *h, char *buf, int size);
+static int linebuffer_puts(BIO *h, const char *str);
+static int linebuffer_gets(BIO *h, char *str, int size);
+static long linebuffer_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int linebuffer_new(BIO *h);
+static int linebuffer_free(BIO *data);
+static long linebuffer_callback_ctrl(BIO *h, int cmd, BIO_info_cb *fp);
+
+/* A 10k maximum should be enough for most purposes */
+#define DEFAULT_LINEBUFFER_SIZE 1024*10
+
+/* #define DEBUG */
+
+static const BIO_METHOD methods_linebuffer = {
+    BIO_TYPE_LINEBUFFER,
+    "linebuffer",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    linebuffer_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    linebuffer_read,
+    linebuffer_puts,
+    linebuffer_gets,
+    linebuffer_ctrl,
+    linebuffer_new,
+    linebuffer_free,
+    linebuffer_callback_ctrl,
+};
+
+const BIO_METHOD *BIO_f_linebuffer(void)
+{
+    return &methods_linebuffer;
+}
+
+typedef struct bio_linebuffer_ctx_struct {
+    char *obuf;                 /* the output char array */
+    int obuf_size;              /* how big is the output buffer */
+    int obuf_len;               /* how many bytes are in it */
+} BIO_LINEBUFFER_CTX;
+
+static int linebuffer_new(BIO *bi)
+{
+    BIO_LINEBUFFER_CTX *ctx;
+
+    if ((ctx = OPENSSL_malloc(sizeof(*ctx))) == NULL) {
+        BIOerr(BIO_F_LINEBUFFER_NEW, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ctx->obuf = OPENSSL_malloc(DEFAULT_LINEBUFFER_SIZE);
+    if (ctx->obuf == NULL) {
+        BIOerr(BIO_F_LINEBUFFER_NEW, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ctx);
+        return 0;
+    }
+    ctx->obuf_size = DEFAULT_LINEBUFFER_SIZE;
+    ctx->obuf_len = 0;
+
+    bi->init = 1;
+    bi->ptr = (char *)ctx;
+    bi->flags = 0;
+    return 1;
+}
+
+static int linebuffer_free(BIO *a)
+{
+    BIO_LINEBUFFER_CTX *b;
+
+    if (a == NULL)
+        return 0;
+    b = (BIO_LINEBUFFER_CTX *)a->ptr;
+    OPENSSL_free(b->obuf);
+    OPENSSL_free(a->ptr);
+    a->ptr = NULL;
+    a->init = 0;
+    a->flags = 0;
+    return 1;
+}
+
+static int linebuffer_read(BIO *b, char *out, int outl)
+{
+    int ret = 0;
+
+    if (out == NULL)
+        return 0;
+    if (b->next_bio == NULL)
+        return 0;
+    ret = BIO_read(b->next_bio, out, outl);
+    BIO_clear_retry_flags(b);
+    BIO_copy_next_retry(b);
+    return ret;
+}
+
+static int linebuffer_write(BIO *b, const char *in, int inl)
+{
+    int i, num = 0, foundnl;
+    BIO_LINEBUFFER_CTX *ctx;
+
+    if ((in == NULL) || (inl <= 0))
+        return 0;
+    ctx = (BIO_LINEBUFFER_CTX *)b->ptr;
+    if ((ctx == NULL) || (b->next_bio == NULL))
+        return 0;
+
+    BIO_clear_retry_flags(b);
+
+    do {
+        const char *p;
+        char c;
+
+        for (p = in, c = '\0'; p < in + inl && (c = *p) != '\n'; p++) ;
+        if (c == '\n') {
+            p++;
+            foundnl = 1;
+        } else
+            foundnl = 0;
+
+        /*
+         * If a NL was found and we already have text in the save buffer,
+         * concatenate them and write
+         */
+        while ((foundnl || p - in > ctx->obuf_size - ctx->obuf_len)
+               && ctx->obuf_len > 0) {
+            int orig_olen = ctx->obuf_len;
+
+            i = ctx->obuf_size - ctx->obuf_len;
+            if (p - in > 0) {
+                if (i >= p - in) {
+                    memcpy(&(ctx->obuf[ctx->obuf_len]), in, p - in);
+                    ctx->obuf_len += p - in;
+                    inl -= p - in;
+                    num += p - in;
+                    in = p;
+                } else {
+                    memcpy(&(ctx->obuf[ctx->obuf_len]), in, i);
+                    ctx->obuf_len += i;
+                    inl -= i;
+                    in += i;
+                    num += i;
+                }
+            }
+            i = BIO_write(b->next_bio, ctx->obuf, ctx->obuf_len);
+            if (i <= 0) {
+                ctx->obuf_len = orig_olen;
+                BIO_copy_next_retry(b);
+
+                if (i < 0)
+                    return ((num > 0) ? num : i);
+                if (i == 0)
+                    return num;
+            }
+            if (i < ctx->obuf_len)
+                memmove(ctx->obuf, ctx->obuf + i, ctx->obuf_len - i);
+            ctx->obuf_len -= i;
+        }
+
+        /*
+         * Now that the save buffer is emptied, let's write the input buffer
+         * if a NL was found and there is anything to write.
+         */
+        if ((foundnl || p - in > ctx->obuf_size) && p - in > 0) {
+            i = BIO_write(b->next_bio, in, p - in);
+            if (i <= 0) {
+                BIO_copy_next_retry(b);
+                if (i < 0)
+                    return ((num > 0) ? num : i);
+                if (i == 0)
+                    return num;
+            }
+            num += i;
+            in += i;
+            inl -= i;
+        }
+    }
+    while (foundnl && inl > 0);
+    /*
+     * We've written as much as we can.  The rest of the input buffer, if
+     * any, is text that doesn't and with a NL and therefore needs to be
+     * saved for the next trip.
+     */
+    if (inl > 0) {
+        memcpy(&(ctx->obuf[ctx->obuf_len]), in, inl);
+        ctx->obuf_len += inl;
+        num += inl;
+    }
+    return num;
+}
+
+static long linebuffer_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    BIO *dbio;
+    BIO_LINEBUFFER_CTX *ctx;
+    long ret = 1;
+    char *p;
+    int r;
+    int obs;
+
+    ctx = (BIO_LINEBUFFER_CTX *)b->ptr;
+
+    switch (cmd) {
+    case BIO_CTRL_RESET:
+        ctx->obuf_len = 0;
+        if (b->next_bio == NULL)
+            return 0;
+        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+        break;
+    case BIO_CTRL_INFO:
+        ret = (long)ctx->obuf_len;
+        break;
+    case BIO_CTRL_WPENDING:
+        ret = (long)ctx->obuf_len;
+        if (ret == 0) {
+            if (b->next_bio == NULL)
+                return 0;
+            ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+        }
+        break;
+    case BIO_C_SET_BUFF_SIZE:
+        obs = (int)num;
+        p = ctx->obuf;
+        if ((obs > DEFAULT_LINEBUFFER_SIZE) && (obs != ctx->obuf_size)) {
+            p = OPENSSL_malloc((int)num);
+            if (p == NULL)
+                goto malloc_error;
+        }
+        if (ctx->obuf != p) {
+            if (ctx->obuf_len > obs) {
+                ctx->obuf_len = obs;
+            }
+            memcpy(p, ctx->obuf, ctx->obuf_len);
+            OPENSSL_free(ctx->obuf);
+            ctx->obuf = p;
+            ctx->obuf_size = obs;
+        }
+        break;
+    case BIO_C_DO_STATE_MACHINE:
+        if (b->next_bio == NULL)
+            return 0;
+        BIO_clear_retry_flags(b);
+        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+        BIO_copy_next_retry(b);
+        break;
+
+    case BIO_CTRL_FLUSH:
+        if (b->next_bio == NULL)
+            return 0;
+        if (ctx->obuf_len <= 0) {
+            ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+            break;
+        }
+
+        for (;;) {
+            BIO_clear_retry_flags(b);
+            if (ctx->obuf_len > 0) {
+                r = BIO_write(b->next_bio, ctx->obuf, ctx->obuf_len);
+                BIO_copy_next_retry(b);
+                if (r <= 0)
+                    return (long)r;
+                if (r < ctx->obuf_len)
+                    memmove(ctx->obuf, ctx->obuf + r, ctx->obuf_len - r);
+                ctx->obuf_len -= r;
+            } else {
+                ctx->obuf_len = 0;
+                break;
+            }
+        }
+        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+        break;
+    case BIO_CTRL_DUP:
+        dbio = (BIO *)ptr;
+        if (!BIO_set_write_buffer_size(dbio, ctx->obuf_size))
+            ret = 0;
+        break;
+    default:
+        if (b->next_bio == NULL)
+            return 0;
+        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+        break;
+    }
+    return ret;
+ malloc_error:
+    BIOerr(BIO_F_LINEBUFFER_CTRL, ERR_R_MALLOC_FAILURE);
+    return 0;
+}
+
+static long linebuffer_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
+{
+    long ret = 1;
+
+    if (b->next_bio == NULL)
+        return 0;
+    switch (cmd) {
+    default:
+        ret = BIO_callback_ctrl(b->next_bio, cmd, fp);
+        break;
+    }
+    return ret;
+}
+
+static int linebuffer_gets(BIO *b, char *buf, int size)
+{
+    if (b->next_bio == NULL)
+        return 0;
+    return BIO_gets(b->next_bio, buf, size);
+}
+
+static int linebuffer_puts(BIO *b, const char *str)
+{
+    return linebuffer_write(b, str, strlen(str));
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bf_nbio.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bf_nbio.c
new file mode 100644
index 000000000..4bc84eeba
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bf_nbio.c
@@ -0,0 +1,200 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <errno.h>
+#include "bio_lcl.h"
+#include "internal/cryptlib.h"
+#include <openssl/rand.h>
+
+/*
+ * BIO_put and BIO_get both add to the digest, BIO_gets returns the digest
+ */
+
+static int nbiof_write(BIO *h, const char *buf, int num);
+static int nbiof_read(BIO *h, char *buf, int size);
+static int nbiof_puts(BIO *h, const char *str);
+static int nbiof_gets(BIO *h, char *str, int size);
+static long nbiof_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int nbiof_new(BIO *h);
+static int nbiof_free(BIO *data);
+static long nbiof_callback_ctrl(BIO *h, int cmd, BIO_info_cb *fp);
+typedef struct nbio_test_st {
+    /* only set if we sent a 'should retry' error */
+    int lrn;
+    int lwn;
+} NBIO_TEST;
+
+static const BIO_METHOD methods_nbiof = {
+    BIO_TYPE_NBIO_TEST,
+    "non-blocking IO test filter",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    nbiof_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    nbiof_read,
+    nbiof_puts,
+    nbiof_gets,
+    nbiof_ctrl,
+    nbiof_new,
+    nbiof_free,
+    nbiof_callback_ctrl,
+};
+
+const BIO_METHOD *BIO_f_nbio_test(void)
+{
+    return &methods_nbiof;
+}
+
+static int nbiof_new(BIO *bi)
+{
+    NBIO_TEST *nt;
+
+    if ((nt = OPENSSL_zalloc(sizeof(*nt))) == NULL) {
+        BIOerr(BIO_F_NBIOF_NEW, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    nt->lrn = -1;
+    nt->lwn = -1;
+    bi->ptr = (char *)nt;
+    bi->init = 1;
+    return 1;
+}
+
+static int nbiof_free(BIO *a)
+{
+    if (a == NULL)
+        return 0;
+    OPENSSL_free(a->ptr);
+    a->ptr = NULL;
+    a->init = 0;
+    a->flags = 0;
+    return 1;
+}
+
+static int nbiof_read(BIO *b, char *out, int outl)
+{
+    int ret = 0;
+    int num;
+    unsigned char n;
+
+    if (out == NULL)
+        return 0;
+    if (b->next_bio == NULL)
+        return 0;
+
+    BIO_clear_retry_flags(b);
+    if (RAND_priv_bytes(&n, 1) <= 0)
+        return -1;
+    num = (n & 0x07);
+
+    if (outl > num)
+        outl = num;
+
+    if (num == 0) {
+        ret = -1;
+        BIO_set_retry_read(b);
+    } else {
+        ret = BIO_read(b->next_bio, out, outl);
+        if (ret < 0)
+            BIO_copy_next_retry(b);
+    }
+    return ret;
+}
+
+static int nbiof_write(BIO *b, const char *in, int inl)
+{
+    NBIO_TEST *nt;
+    int ret = 0;
+    int num;
+    unsigned char n;
+
+    if ((in == NULL) || (inl <= 0))
+        return 0;
+    if (b->next_bio == NULL)
+        return 0;
+    nt = (NBIO_TEST *)b->ptr;
+
+    BIO_clear_retry_flags(b);
+
+    if (nt->lwn > 0) {
+        num = nt->lwn;
+        nt->lwn = 0;
+    } else {
+        if (RAND_priv_bytes(&n, 1) <= 0)
+            return -1;
+        num = (n & 7);
+    }
+
+    if (inl > num)
+        inl = num;
+
+    if (num == 0) {
+        ret = -1;
+        BIO_set_retry_write(b);
+    } else {
+        ret = BIO_write(b->next_bio, in, inl);
+        if (ret < 0) {
+            BIO_copy_next_retry(b);
+            nt->lwn = inl;
+        }
+    }
+    return ret;
+}
+
+static long nbiof_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    long ret;
+
+    if (b->next_bio == NULL)
+        return 0;
+    switch (cmd) {
+    case BIO_C_DO_STATE_MACHINE:
+        BIO_clear_retry_flags(b);
+        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+        BIO_copy_next_retry(b);
+        break;
+    case BIO_CTRL_DUP:
+        ret = 0L;
+        break;
+    default:
+        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+        break;
+    }
+    return ret;
+}
+
+static long nbiof_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
+{
+    long ret = 1;
+
+    if (b->next_bio == NULL)
+        return 0;
+    switch (cmd) {
+    default:
+        ret = BIO_callback_ctrl(b->next_bio, cmd, fp);
+        break;
+    }
+    return ret;
+}
+
+static int nbiof_gets(BIO *bp, char *buf, int size)
+{
+    if (bp->next_bio == NULL)
+        return 0;
+    return BIO_gets(bp->next_bio, buf, size);
+}
+
+static int nbiof_puts(BIO *bp, const char *str)
+{
+    if (bp->next_bio == NULL)
+        return 0;
+    return BIO_puts(bp->next_bio, str);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bf_null.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bf_null.c
new file mode 100644
index 000000000..613fb2e05
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bf_null.c
@@ -0,0 +1,122 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <errno.h>
+#include "bio_lcl.h"
+#include "internal/cryptlib.h"
+
+/*
+ * BIO_put and BIO_get both add to the digest, BIO_gets returns the digest
+ */
+
+static int nullf_write(BIO *h, const char *buf, int num);
+static int nullf_read(BIO *h, char *buf, int size);
+static int nullf_puts(BIO *h, const char *str);
+static int nullf_gets(BIO *h, char *str, int size);
+static long nullf_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static long nullf_callback_ctrl(BIO *h, int cmd, BIO_info_cb *fp);
+static const BIO_METHOD methods_nullf = {
+    BIO_TYPE_NULL_FILTER,
+    "NULL filter",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    nullf_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    nullf_read,
+    nullf_puts,
+    nullf_gets,
+    nullf_ctrl,
+    NULL,
+    NULL,
+    nullf_callback_ctrl,
+};
+
+const BIO_METHOD *BIO_f_null(void)
+{
+    return &methods_nullf;
+}
+
+static int nullf_read(BIO *b, char *out, int outl)
+{
+    int ret = 0;
+
+    if (out == NULL)
+        return 0;
+    if (b->next_bio == NULL)
+        return 0;
+    ret = BIO_read(b->next_bio, out, outl);
+    BIO_clear_retry_flags(b);
+    BIO_copy_next_retry(b);
+    return ret;
+}
+
+static int nullf_write(BIO *b, const char *in, int inl)
+{
+    int ret = 0;
+
+    if ((in == NULL) || (inl <= 0))
+        return 0;
+    if (b->next_bio == NULL)
+        return 0;
+    ret = BIO_write(b->next_bio, in, inl);
+    BIO_clear_retry_flags(b);
+    BIO_copy_next_retry(b);
+    return ret;
+}
+
+static long nullf_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    long ret;
+
+    if (b->next_bio == NULL)
+        return 0;
+    switch (cmd) {
+    case BIO_C_DO_STATE_MACHINE:
+        BIO_clear_retry_flags(b);
+        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+        BIO_copy_next_retry(b);
+        break;
+    case BIO_CTRL_DUP:
+        ret = 0L;
+        break;
+    default:
+        ret = BIO_ctrl(b->next_bio, cmd, num, ptr);
+    }
+    return ret;
+}
+
+static long nullf_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
+{
+    long ret = 1;
+
+    if (b->next_bio == NULL)
+        return 0;
+    switch (cmd) {
+    default:
+        ret = BIO_callback_ctrl(b->next_bio, cmd, fp);
+        break;
+    }
+    return ret;
+}
+
+static int nullf_gets(BIO *bp, char *buf, int size)
+{
+    if (bp->next_bio == NULL)
+        return 0;
+    return BIO_gets(bp->next_bio, buf, size);
+}
+
+static int nullf_puts(BIO *bp, const char *str)
+{
+    if (bp->next_bio == NULL)
+        return 0;
+    return BIO_puts(bp->next_bio, str);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_cb.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_cb.c
new file mode 100644
index 000000000..1154c233a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_cb.c
@@ -0,0 +1,98 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include <stdlib.h>
+#include "bio_lcl.h"
+#include "internal/cryptlib.h"
+#include <openssl/err.h>
+
+long BIO_debug_callback(BIO *bio, int cmd, const char *argp,
+                        int argi, long argl, long ret)
+{
+    BIO *b;
+    char buf[256];
+    char *p;
+    long r = 1;
+    int len, left;
+
+    if (BIO_CB_RETURN & cmd)
+        r = ret;
+
+    len = BIO_snprintf(buf, sizeof(buf), "BIO[%p]: ", (void *)bio);
+
+    /* Ignore errors and continue printing the other information. */
+    if (len < 0)
+        len = 0;
+    p = buf + len;
+    left = sizeof(buf) - len;
+
+    switch (cmd) {
+    case BIO_CB_FREE:
+        BIO_snprintf(p, left, "Free - %s\n", bio->method->name);
+        break;
+    case BIO_CB_READ:
+        if (bio->method->type & BIO_TYPE_DESCRIPTOR)
+            BIO_snprintf(p, left, "read(%d,%lu) - %s fd=%d\n",
+                         bio->num, (unsigned long)argi,
+                         bio->method->name, bio->num);
+        else
+            BIO_snprintf(p, left, "read(%d,%lu) - %s\n",
+                    bio->num, (unsigned long)argi, bio->method->name);
+        break;
+    case BIO_CB_WRITE:
+        if (bio->method->type & BIO_TYPE_DESCRIPTOR)
+            BIO_snprintf(p, left, "write(%d,%lu) - %s fd=%d\n",
+                         bio->num, (unsigned long)argi,
+                         bio->method->name, bio->num);
+        else
+            BIO_snprintf(p, left, "write(%d,%lu) - %s\n",
+                         bio->num, (unsigned long)argi, bio->method->name);
+        break;
+    case BIO_CB_PUTS:
+        BIO_snprintf(p, left, "puts() - %s\n", bio->method->name);
+        break;
+    case BIO_CB_GETS:
+        BIO_snprintf(p, left, "gets(%lu) - %s\n", (unsigned long)argi,
+                     bio->method->name);
+        break;
+    case BIO_CB_CTRL:
+        BIO_snprintf(p, left, "ctrl(%lu) - %s\n", (unsigned long)argi,
+                     bio->method->name);
+        break;
+    case BIO_CB_RETURN | BIO_CB_READ:
+        BIO_snprintf(p, left, "read return %ld\n", ret);
+        break;
+    case BIO_CB_RETURN | BIO_CB_WRITE:
+        BIO_snprintf(p, left, "write return %ld\n", ret);
+        break;
+    case BIO_CB_RETURN | BIO_CB_GETS:
+        BIO_snprintf(p, left, "gets return %ld\n", ret);
+        break;
+    case BIO_CB_RETURN | BIO_CB_PUTS:
+        BIO_snprintf(p, left, "puts return %ld\n", ret);
+        break;
+    case BIO_CB_RETURN | BIO_CB_CTRL:
+        BIO_snprintf(p, left, "ctrl return %ld\n", ret);
+        break;
+    default:
+        BIO_snprintf(p, left, "bio callback - unknown type (%d)\n", cmd);
+        break;
+    }
+
+    b = (BIO *)bio->cb_arg;
+    if (b != NULL)
+        BIO_write(b, buf, strlen(buf));
+#if !defined(OPENSSL_NO_STDIO)
+    else
+        fputs(buf, stderr);
+#endif
+    return r;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_err.c
new file mode 100644
index 000000000..7aa9dabb2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_err.c
@@ -0,0 +1,145 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/bioerr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA BIO_str_functs[] = {
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_ACPT_STATE, 0), "acpt_state"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_ADDRINFO_WRAP, 0), "addrinfo_wrap"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_ADDR_STRINGS, 0), "addr_strings"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_ACCEPT, 0), "BIO_accept"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_ACCEPT_EX, 0), "BIO_accept_ex"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_ACCEPT_NEW, 0), "BIO_ACCEPT_new"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_ADDR_NEW, 0), "BIO_ADDR_new"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_BIND, 0), "BIO_bind"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_CALLBACK_CTRL, 0), "BIO_callback_ctrl"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_CONNECT, 0), "BIO_connect"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_CONNECT_NEW, 0), "BIO_CONNECT_new"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_CTRL, 0), "BIO_ctrl"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_GETS, 0), "BIO_gets"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_GET_HOST_IP, 0), "BIO_get_host_ip"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_GET_NEW_INDEX, 0), "BIO_get_new_index"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_GET_PORT, 0), "BIO_get_port"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_LISTEN, 0), "BIO_listen"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_LOOKUP, 0), "BIO_lookup"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_LOOKUP_EX, 0), "BIO_lookup_ex"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_MAKE_PAIR, 0), "bio_make_pair"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_METH_NEW, 0), "BIO_meth_new"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_NEW, 0), "BIO_new"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_NEW_DGRAM_SCTP, 0), "BIO_new_dgram_sctp"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_NEW_FILE, 0), "BIO_new_file"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_NEW_MEM_BUF, 0), "BIO_new_mem_buf"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_NREAD, 0), "BIO_nread"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_NREAD0, 0), "BIO_nread0"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_NWRITE, 0), "BIO_nwrite"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_NWRITE0, 0), "BIO_nwrite0"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_PARSE_HOSTSERV, 0), "BIO_parse_hostserv"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_PUTS, 0), "BIO_puts"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_READ, 0), "BIO_read"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_READ_EX, 0), "BIO_read_ex"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_READ_INTERN, 0), "bio_read_intern"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_SOCKET, 0), "BIO_socket"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_SOCKET_NBIO, 0), "BIO_socket_nbio"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_SOCK_INFO, 0), "BIO_sock_info"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_SOCK_INIT, 0), "BIO_sock_init"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_WRITE, 0), "BIO_write"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_WRITE_EX, 0), "BIO_write_ex"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_WRITE_INTERN, 0), "bio_write_intern"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BUFFER_CTRL, 0), "buffer_ctrl"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_CONN_CTRL, 0), "conn_ctrl"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_CONN_STATE, 0), "conn_state"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_DGRAM_SCTP_NEW, 0), "dgram_sctp_new"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_DGRAM_SCTP_READ, 0), "dgram_sctp_read"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_DGRAM_SCTP_WRITE, 0), "dgram_sctp_write"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_DOAPR_OUTCH, 0), "doapr_outch"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_FILE_CTRL, 0), "file_ctrl"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_FILE_READ, 0), "file_read"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_LINEBUFFER_CTRL, 0), "linebuffer_ctrl"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_LINEBUFFER_NEW, 0), "linebuffer_new"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_MEM_WRITE, 0), "mem_write"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_NBIOF_NEW, 0), "nbiof_new"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_SLG_WRITE, 0), "slg_write"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_SSL_NEW, 0), "SSL_new"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA BIO_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_ACCEPT_ERROR), "accept error"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_ADDRINFO_ADDR_IS_NOT_AF_INET),
+    "addrinfo addr is not af inet"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_AMBIGUOUS_HOST_OR_SERVICE),
+    "ambiguous host or service"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_BAD_FOPEN_MODE), "bad fopen mode"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_BROKEN_PIPE), "broken pipe"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_CONNECT_ERROR), "connect error"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_GETHOSTBYNAME_ADDR_IS_NOT_AF_INET),
+    "gethostbyname addr is not af inet"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_GETSOCKNAME_ERROR), "getsockname error"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_GETSOCKNAME_TRUNCATED_ADDRESS),
+    "getsockname truncated address"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_GETTING_SOCKTYPE), "getting socktype"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_INVALID_ARGUMENT), "invalid argument"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_INVALID_SOCKET), "invalid socket"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_IN_USE), "in use"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_LENGTH_TOO_LONG), "length too long"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_LISTEN_V6_ONLY), "listen v6 only"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_LOOKUP_RETURNED_NOTHING),
+    "lookup returned nothing"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_MALFORMED_HOST_OR_SERVICE),
+    "malformed host or service"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_NBIO_CONNECT_ERROR), "nbio connect error"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_NO_ACCEPT_ADDR_OR_SERVICE_SPECIFIED),
+    "no accept addr or service specified"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_NO_HOSTNAME_OR_SERVICE_SPECIFIED),
+    "no hostname or service specified"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_NO_PORT_DEFINED), "no port defined"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_NO_SUCH_FILE), "no such file"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_NULL_PARAMETER), "null parameter"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_UNABLE_TO_BIND_SOCKET),
+    "unable to bind socket"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_UNABLE_TO_CREATE_SOCKET),
+    "unable to create socket"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_UNABLE_TO_KEEPALIVE),
+    "unable to keepalive"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_UNABLE_TO_LISTEN_SOCKET),
+    "unable to listen socket"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_UNABLE_TO_NODELAY), "unable to nodelay"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_UNABLE_TO_REUSEADDR),
+    "unable to reuseaddr"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_UNAVAILABLE_IP_FAMILY),
+    "unavailable ip family"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_UNINITIALIZED), "uninitialized"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_UNKNOWN_INFO_TYPE), "unknown info type"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_UNSUPPORTED_IP_FAMILY),
+    "unsupported ip family"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_UNSUPPORTED_METHOD), "unsupported method"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_UNSUPPORTED_PROTOCOL_FAMILY),
+    "unsupported protocol family"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_WRITE_TO_READ_ONLY_BIO),
+    "write to read only BIO"},
+    {ERR_PACK(ERR_LIB_BIO, 0, BIO_R_WSASTARTUP), "WSAStartup"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_BIO_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(BIO_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(BIO_str_functs);
+        ERR_load_strings_const(BIO_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_lcl.h
new file mode 100644
index 000000000..e2c05a20d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_lcl.h
@@ -0,0 +1,190 @@
+/*
+ * Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include "internal/sockets.h"
+#include "internal/refcount.h"
+
+/* BEGIN BIO_ADDRINFO/BIO_ADDR stuff. */
+
+#ifndef OPENSSL_NO_SOCK
+/*
+ * Throughout this file and b_addr.c, the existence of the macro
+ * AI_PASSIVE is used to detect the availability of struct addrinfo,
+ * getnameinfo() and getaddrinfo().  If that macro doesn't exist,
+ * we use our own implementation instead.
+ */
+
+/*
+ * It's imperative that these macros get defined before openssl/bio.h gets
+ * included.  Otherwise, the AI_PASSIVE hack will not work properly.
+ * For clarity, we check for internal/cryptlib.h since it's a common header
+ * that also includes bio.h.
+ */
+# ifdef HEADER_CRYPTLIB_H
+#  error internal/cryptlib.h included before bio_lcl.h
+# endif
+# ifdef HEADER_BIO_H
+#  error openssl/bio.h included before bio_lcl.h
+# endif
+
+/*
+ * Undefine AF_UNIX on systems that define it but don't support it.
+ */
+# if defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_VMS)
+#  undef AF_UNIX
+# endif
+
+# ifdef AI_PASSIVE
+
+/*
+ * There's a bug in VMS C header file netdb.h, where struct addrinfo
+ * always is the P32 variant, but the functions that handle that structure,
+ * such as getaddrinfo() and freeaddrinfo() adapt to the initial pointer
+ * size.  The easiest workaround is to force struct addrinfo to be the
+ * 64-bit variant when compiling in P64 mode.
+ */
+#  if defined(OPENSSL_SYS_VMS) && __INITIAL_POINTER_SIZE == 64
+#   define addrinfo __addrinfo64
+#  endif
+
+#  define bio_addrinfo_st addrinfo
+#  define bai_family      ai_family
+#  define bai_socktype    ai_socktype
+#  define bai_protocol    ai_protocol
+#  define bai_addrlen     ai_addrlen
+#  define bai_addr        ai_addr
+#  define bai_next        ai_next
+# else
+struct bio_addrinfo_st {
+    int bai_family;
+    int bai_socktype;
+    int bai_protocol;
+    size_t bai_addrlen;
+    struct sockaddr *bai_addr;
+    struct bio_addrinfo_st *bai_next;
+};
+# endif
+
+union bio_addr_st {
+    struct sockaddr sa;
+# ifdef AF_INET6
+    struct sockaddr_in6 s_in6;
+# endif
+    struct sockaddr_in s_in;
+# ifdef AF_UNIX
+    struct sockaddr_un s_un;
+# endif
+};
+#endif
+
+/* END BIO_ADDRINFO/BIO_ADDR stuff. */
+
+#include "internal/cryptlib.h"
+#include "internal/bio.h"
+
+typedef struct bio_f_buffer_ctx_struct {
+    /*-
+     * Buffers are setup like this:
+     *
+     * <---------------------- size ----------------------->
+     * +---------------------------------------------------+
+     * | consumed | remaining          | free space        |
+     * +---------------------------------------------------+
+     * <-- off --><------- len ------->
+     */
+    /*- BIO *bio; *//*
+     * this is now in the BIO struct
+     */
+    int ibuf_size;              /* how big is the input buffer */
+    int obuf_size;              /* how big is the output buffer */
+    char *ibuf;                 /* the char array */
+    int ibuf_len;               /* how many bytes are in it */
+    int ibuf_off;               /* write/read offset */
+    char *obuf;                 /* the char array */
+    int obuf_len;               /* how many bytes are in it */
+    int obuf_off;               /* write/read offset */
+} BIO_F_BUFFER_CTX;
+
+struct bio_st {
+    const BIO_METHOD *method;
+    /* bio, mode, argp, argi, argl, ret */
+    BIO_callback_fn callback;
+    BIO_callback_fn_ex callback_ex;
+    char *cb_arg;               /* first argument for the callback */
+    int init;
+    int shutdown;
+    int flags;                  /* extra storage */
+    int retry_reason;
+    int num;
+    void *ptr;
+    struct bio_st *next_bio;    /* used by filter BIOs */
+    struct bio_st *prev_bio;    /* used by filter BIOs */
+    CRYPTO_REF_COUNT references;
+    uint64_t num_read;
+    uint64_t num_write;
+    CRYPTO_EX_DATA ex_data;
+    CRYPTO_RWLOCK *lock;
+};
+
+#ifndef OPENSSL_NO_SOCK
+# ifdef OPENSSL_SYS_VMS
+typedef unsigned int socklen_t;
+# endif
+
+extern CRYPTO_RWLOCK *bio_lookup_lock;
+
+int BIO_ADDR_make(BIO_ADDR *ap, const struct sockaddr *sa);
+const struct sockaddr *BIO_ADDR_sockaddr(const BIO_ADDR *ap);
+struct sockaddr *BIO_ADDR_sockaddr_noconst(BIO_ADDR *ap);
+socklen_t BIO_ADDR_sockaddr_size(const BIO_ADDR *ap);
+socklen_t BIO_ADDRINFO_sockaddr_size(const BIO_ADDRINFO *bai);
+const struct sockaddr *BIO_ADDRINFO_sockaddr(const BIO_ADDRINFO *bai);
+#endif
+
+extern CRYPTO_RWLOCK *bio_type_lock;
+
+void bio_sock_cleanup_int(void);
+
+#if BIO_FLAGS_UPLINK==0
+/* Shortcut UPLINK calls on most platforms... */
+# define UP_stdin        stdin
+# define UP_stdout       stdout
+# define UP_stderr       stderr
+# define UP_fprintf      fprintf
+# define UP_fgets        fgets
+# define UP_fread        fread
+# define UP_fwrite       fwrite
+# undef  UP_fsetmod
+# define UP_feof         feof
+# define UP_fclose       fclose
+
+# define UP_fopen        fopen
+# define UP_fseek        fseek
+# define UP_ftell        ftell
+# define UP_fflush       fflush
+# define UP_ferror       ferror
+# ifdef _WIN32
+#  define UP_fileno       _fileno
+#  define UP_open         _open
+#  define UP_read         _read
+#  define UP_write        _write
+#  define UP_lseek        _lseek
+#  define UP_close        _close
+# else
+#  define UP_fileno       fileno
+#  define UP_open         open
+#  define UP_read         read
+#  define UP_write        write
+#  define UP_lseek        lseek
+#  define UP_close        close
+# endif
+
+#endif
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_lib.c
new file mode 100644
index 000000000..ca375b911
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_lib.c
@@ -0,0 +1,786 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <errno.h>
+#include <openssl/crypto.h>
+#include "bio_lcl.h"
+#include "internal/cryptlib.h"
+
+
+/*
+ * Helper macro for the callback to determine whether an operator expects a
+ * len parameter or not
+ */
+#define HAS_LEN_OPER(o)        ((o) == BIO_CB_READ || (o) == BIO_CB_WRITE || \
+                                (o) == BIO_CB_GETS)
+
+/*
+ * Helper function to work out whether to call the new style callback or the old
+ * one, and translate between the two.
+ *
+ * This has a long return type for consistency with the old callback. Similarly
+ * for the "long" used for "inret"
+ */
+static long bio_call_callback(BIO *b, int oper, const char *argp, size_t len,
+                              int argi, long argl, long inret, size_t *processed)
+{
+    long ret;
+    int bareoper;
+
+    if (b->callback_ex != NULL)
+        return b->callback_ex(b, oper, argp, len, argi, argl, inret, processed);
+
+    /* Strip off any BIO_CB_RETURN flag */
+    bareoper = oper & ~BIO_CB_RETURN;
+
+    /*
+     * We have an old style callback, so we will have to do nasty casts and
+     * check for overflows.
+     */
+    if (HAS_LEN_OPER(bareoper)) {
+        /* In this case |len| is set, and should be used instead of |argi| */
+        if (len > INT_MAX)
+            return -1;
+
+        argi = (int)len;
+    }
+
+    if (inret > 0 && (oper & BIO_CB_RETURN) && bareoper != BIO_CB_CTRL) {
+        if (*processed > INT_MAX)
+            return -1;
+        inret = *processed;
+    }
+
+    ret = b->callback(b, oper, argp, argi, argl, inret);
+
+    if (ret > 0 && (oper & BIO_CB_RETURN) && bareoper != BIO_CB_CTRL) {
+        *processed = (size_t)ret;
+        ret = 1;
+    }
+
+    return ret;
+}
+
+BIO *BIO_new(const BIO_METHOD *method)
+{
+    BIO *bio = OPENSSL_zalloc(sizeof(*bio));
+
+    if (bio == NULL) {
+        BIOerr(BIO_F_BIO_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    bio->method = method;
+    bio->shutdown = 1;
+    bio->references = 1;
+
+    if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_BIO, bio, &bio->ex_data))
+        goto err;
+
+    bio->lock = CRYPTO_THREAD_lock_new();
+    if (bio->lock == NULL) {
+        BIOerr(BIO_F_BIO_NEW, ERR_R_MALLOC_FAILURE);
+        CRYPTO_free_ex_data(CRYPTO_EX_INDEX_BIO, bio, &bio->ex_data);
+        goto err;
+    }
+
+    if (method->create != NULL && !method->create(bio)) {
+        BIOerr(BIO_F_BIO_NEW, ERR_R_INIT_FAIL);
+        CRYPTO_free_ex_data(CRYPTO_EX_INDEX_BIO, bio, &bio->ex_data);
+        CRYPTO_THREAD_lock_free(bio->lock);
+        goto err;
+    }
+    if (method->create == NULL)
+        bio->init = 1;
+
+    return bio;
+
+err:
+    OPENSSL_free(bio);
+    return NULL;
+}
+
+int BIO_free(BIO *a)
+{
+    int ret;
+
+    if (a == NULL)
+        return 0;
+
+    if (CRYPTO_DOWN_REF(&a->references, &ret, a->lock) <= 0)
+        return 0;
+
+    REF_PRINT_COUNT("BIO", a);
+    if (ret > 0)
+        return 1;
+    REF_ASSERT_ISNT(ret < 0);
+
+    if (a->callback != NULL || a->callback_ex != NULL) {
+        ret = (int)bio_call_callback(a, BIO_CB_FREE, NULL, 0, 0, 0L, 1L, NULL);
+        if (ret <= 0)
+            return ret;
+    }
+
+    if ((a->method != NULL) && (a->method->destroy != NULL))
+        a->method->destroy(a);
+
+    CRYPTO_free_ex_data(CRYPTO_EX_INDEX_BIO, a, &a->ex_data);
+
+    CRYPTO_THREAD_lock_free(a->lock);
+
+    OPENSSL_free(a);
+
+    return 1;
+}
+
+void BIO_set_data(BIO *a, void *ptr)
+{
+    a->ptr = ptr;
+}
+
+void *BIO_get_data(BIO *a)
+{
+    return a->ptr;
+}
+
+void BIO_set_init(BIO *a, int init)
+{
+    a->init = init;
+}
+
+int BIO_get_init(BIO *a)
+{
+    return a->init;
+}
+
+void BIO_set_shutdown(BIO *a, int shut)
+{
+    a->shutdown = shut;
+}
+
+int BIO_get_shutdown(BIO *a)
+{
+    return a->shutdown;
+}
+
+void BIO_vfree(BIO *a)
+{
+    BIO_free(a);
+}
+
+int BIO_up_ref(BIO *a)
+{
+    int i;
+
+    if (CRYPTO_UP_REF(&a->references, &i, a->lock) <= 0)
+        return 0;
+
+    REF_PRINT_COUNT("BIO", a);
+    REF_ASSERT_ISNT(i < 2);
+    return ((i > 1) ? 1 : 0);
+}
+
+void BIO_clear_flags(BIO *b, int flags)
+{
+    b->flags &= ~flags;
+}
+
+int BIO_test_flags(const BIO *b, int flags)
+{
+    return (b->flags & flags);
+}
+
+void BIO_set_flags(BIO *b, int flags)
+{
+    b->flags |= flags;
+}
+
+BIO_callback_fn BIO_get_callback(const BIO *b)
+{
+    return b->callback;
+}
+
+void BIO_set_callback(BIO *b, BIO_callback_fn cb)
+{
+    b->callback = cb;
+}
+
+BIO_callback_fn_ex BIO_get_callback_ex(const BIO *b)
+{
+    return b->callback_ex;
+}
+
+void BIO_set_callback_ex(BIO *b, BIO_callback_fn_ex cb)
+{
+    b->callback_ex = cb;
+}
+
+void BIO_set_callback_arg(BIO *b, char *arg)
+{
+    b->cb_arg = arg;
+}
+
+char *BIO_get_callback_arg(const BIO *b)
+{
+    return b->cb_arg;
+}
+
+const char *BIO_method_name(const BIO *b)
+{
+    return b->method->name;
+}
+
+int BIO_method_type(const BIO *b)
+{
+    return b->method->type;
+}
+
+/*
+ * This is essentially the same as BIO_read_ex() except that it allows
+ * 0 or a negative value to indicate failure (retryable or not) in the return.
+ * This is for compatibility with the old style BIO_read(), where existing code
+ * may make assumptions about the return value that it might get.
+ */
+static int bio_read_intern(BIO *b, void *data, size_t dlen, size_t *readbytes)
+{
+    int ret;
+
+    if ((b == NULL) || (b->method == NULL) || (b->method->bread == NULL)) {
+        BIOerr(BIO_F_BIO_READ_INTERN, BIO_R_UNSUPPORTED_METHOD);
+        return -2;
+    }
+
+    if ((b->callback != NULL || b->callback_ex != NULL) &&
+        ((ret = (int)bio_call_callback(b, BIO_CB_READ, data, dlen, 0, 0L, 1L,
+                                       NULL)) <= 0))
+        return ret;
+
+    if (!b->init) {
+        BIOerr(BIO_F_BIO_READ_INTERN, BIO_R_UNINITIALIZED);
+        return -2;
+    }
+
+    ret = b->method->bread(b, data, dlen, readbytes);
+
+    if (ret > 0)
+        b->num_read += (uint64_t)*readbytes;
+
+    if (b->callback != NULL || b->callback_ex != NULL)
+        ret = (int)bio_call_callback(b, BIO_CB_READ | BIO_CB_RETURN, data,
+                                     dlen, 0, 0L, ret, readbytes);
+
+    /* Shouldn't happen */
+    if (ret > 0 && *readbytes > dlen) {
+        BIOerr(BIO_F_BIO_READ_INTERN, ERR_R_INTERNAL_ERROR);
+        return -1;
+    }
+
+    return ret;
+}
+
+int BIO_read(BIO *b, void *data, int dlen)
+{
+    size_t readbytes;
+    int ret;
+
+    if (dlen < 0)
+        return 0;
+
+    ret = bio_read_intern(b, data, (size_t)dlen, &readbytes);
+
+    if (ret > 0) {
+        /* *readbytes should always be <= dlen */
+        ret = (int)readbytes;
+    }
+
+    return ret;
+}
+
+int BIO_read_ex(BIO *b, void *data, size_t dlen, size_t *readbytes)
+{
+    int ret;
+
+    ret = bio_read_intern(b, data, dlen, readbytes);
+
+    if (ret > 0)
+        ret = 1;
+    else
+        ret = 0;
+
+    return ret;
+}
+
+static int bio_write_intern(BIO *b, const void *data, size_t dlen,
+                            size_t *written)
+{
+    int ret;
+
+    if (b == NULL)
+        return 0;
+
+    if ((b->method == NULL) || (b->method->bwrite == NULL)) {
+        BIOerr(BIO_F_BIO_WRITE_INTERN, BIO_R_UNSUPPORTED_METHOD);
+        return -2;
+    }
+
+    if ((b->callback != NULL || b->callback_ex != NULL) &&
+        ((ret = (int)bio_call_callback(b, BIO_CB_WRITE, data, dlen, 0, 0L, 1L,
+                                       NULL)) <= 0))
+        return ret;
+
+    if (!b->init) {
+        BIOerr(BIO_F_BIO_WRITE_INTERN, BIO_R_UNINITIALIZED);
+        return -2;
+    }
+
+    ret = b->method->bwrite(b, data, dlen, written);
+
+    if (ret > 0)
+        b->num_write += (uint64_t)*written;
+
+    if (b->callback != NULL || b->callback_ex != NULL)
+        ret = (int)bio_call_callback(b, BIO_CB_WRITE | BIO_CB_RETURN, data,
+                                     dlen, 0, 0L, ret, written);
+
+    return ret;
+}
+
+int BIO_write(BIO *b, const void *data, int dlen)
+{
+    size_t written;
+    int ret;
+
+    if (dlen < 0)
+        return 0;
+
+    ret = bio_write_intern(b, data, (size_t)dlen, &written);
+
+    if (ret > 0) {
+        /* *written should always be <= dlen */
+        ret = (int)written;
+    }
+
+    return ret;
+}
+
+int BIO_write_ex(BIO *b, const void *data, size_t dlen, size_t *written)
+{
+    int ret;
+
+    ret = bio_write_intern(b, data, dlen, written);
+
+    if (ret > 0)
+        ret = 1;
+    else
+        ret = 0;
+
+    return ret;
+}
+
+int BIO_puts(BIO *b, const char *buf)
+{
+    int ret;
+    size_t written = 0;
+
+    if ((b == NULL) || (b->method == NULL) || (b->method->bputs == NULL)) {
+        BIOerr(BIO_F_BIO_PUTS, BIO_R_UNSUPPORTED_METHOD);
+        return -2;
+    }
+
+    if (b->callback != NULL || b->callback_ex != NULL) {
+        ret = (int)bio_call_callback(b, BIO_CB_PUTS, buf, 0, 0, 0L, 1L, NULL);
+        if (ret <= 0)
+            return ret;
+    }
+
+    if (!b->init) {
+        BIOerr(BIO_F_BIO_PUTS, BIO_R_UNINITIALIZED);
+        return -2;
+    }
+
+    ret = b->method->bputs(b, buf);
+
+    if (ret > 0) {
+        b->num_write += (uint64_t)ret;
+        written = ret;
+        ret = 1;
+    }
+
+    if (b->callback != NULL || b->callback_ex != NULL)
+        ret = (int)bio_call_callback(b, BIO_CB_PUTS | BIO_CB_RETURN, buf, 0, 0,
+                                     0L, ret, &written);
+
+    if (ret > 0) {
+        if (written > INT_MAX) {
+            BIOerr(BIO_F_BIO_PUTS, BIO_R_LENGTH_TOO_LONG);
+            ret = -1;
+        } else {
+            ret = (int)written;
+        }
+    }
+
+    return ret;
+}
+
+int BIO_gets(BIO *b, char *buf, int size)
+{
+    int ret;
+    size_t readbytes = 0;
+
+    if ((b == NULL) || (b->method == NULL) || (b->method->bgets == NULL)) {
+        BIOerr(BIO_F_BIO_GETS, BIO_R_UNSUPPORTED_METHOD);
+        return -2;
+    }
+
+    if (size < 0) {
+        BIOerr(BIO_F_BIO_GETS, BIO_R_INVALID_ARGUMENT);
+        return 0;
+    }
+
+    if (b->callback != NULL || b->callback_ex != NULL) {
+        ret = (int)bio_call_callback(b, BIO_CB_GETS, buf, size, 0, 0L, 1, NULL);
+        if (ret <= 0)
+            return ret;
+    }
+
+    if (!b->init) {
+        BIOerr(BIO_F_BIO_GETS, BIO_R_UNINITIALIZED);
+        return -2;
+    }
+
+    ret = b->method->bgets(b, buf, size);
+
+    if (ret > 0) {
+        readbytes = ret;
+        ret = 1;
+    }
+
+    if (b->callback != NULL || b->callback_ex != NULL)
+        ret = (int)bio_call_callback(b, BIO_CB_GETS | BIO_CB_RETURN, buf, size,
+                                     0, 0L, ret, &readbytes);
+
+    if (ret > 0) {
+        /* Shouldn't happen */
+        if (readbytes > (size_t)size)
+            ret = -1;
+        else
+            ret = (int)readbytes;
+    }
+
+    return ret;
+}
+
+int BIO_indent(BIO *b, int indent, int max)
+{
+    if (indent < 0)
+        indent = 0;
+    if (indent > max)
+        indent = max;
+    while (indent--)
+        if (BIO_puts(b, " ") != 1)
+            return 0;
+    return 1;
+}
+
+long BIO_int_ctrl(BIO *b, int cmd, long larg, int iarg)
+{
+    int i;
+
+    i = iarg;
+    return BIO_ctrl(b, cmd, larg, (char *)&i);
+}
+
+void *BIO_ptr_ctrl(BIO *b, int cmd, long larg)
+{
+    void *p = NULL;
+
+    if (BIO_ctrl(b, cmd, larg, (char *)&p) <= 0)
+        return NULL;
+    else
+        return p;
+}
+
+long BIO_ctrl(BIO *b, int cmd, long larg, void *parg)
+{
+    long ret;
+
+    if (b == NULL)
+        return 0;
+
+    if ((b->method == NULL) || (b->method->ctrl == NULL)) {
+        BIOerr(BIO_F_BIO_CTRL, BIO_R_UNSUPPORTED_METHOD);
+        return -2;
+    }
+
+    if (b->callback != NULL || b->callback_ex != NULL) {
+        ret = bio_call_callback(b, BIO_CB_CTRL, parg, 0, cmd, larg, 1L, NULL);
+        if (ret <= 0)
+            return ret;
+    }
+
+    ret = b->method->ctrl(b, cmd, larg, parg);
+
+    if (b->callback != NULL || b->callback_ex != NULL)
+        ret = bio_call_callback(b, BIO_CB_CTRL | BIO_CB_RETURN, parg, 0, cmd,
+                                larg, ret, NULL);
+
+    return ret;
+}
+
+long BIO_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
+{
+    long ret;
+
+    if (b == NULL)
+        return 0;
+
+    if ((b->method == NULL) || (b->method->callback_ctrl == NULL)
+            || (cmd != BIO_CTRL_SET_CALLBACK)) {
+        BIOerr(BIO_F_BIO_CALLBACK_CTRL, BIO_R_UNSUPPORTED_METHOD);
+        return -2;
+    }
+
+    if (b->callback != NULL || b->callback_ex != NULL) {
+        ret = bio_call_callback(b, BIO_CB_CTRL, (void *)&fp, 0, cmd, 0, 1L,
+                                NULL);
+        if (ret <= 0)
+            return ret;
+    }
+
+    ret = b->method->callback_ctrl(b, cmd, fp);
+
+    if (b->callback != NULL || b->callback_ex != NULL)
+        ret = bio_call_callback(b, BIO_CB_CTRL | BIO_CB_RETURN, (void *)&fp, 0,
+                                cmd, 0, ret, NULL);
+
+    return ret;
+}
+
+/*
+ * It is unfortunate to duplicate in functions what the BIO_(w)pending macros
+ * do; but those macros have inappropriate return type, and for interfacing
+ * from other programming languages, C macros aren't much of a help anyway.
+ */
+size_t BIO_ctrl_pending(BIO *bio)
+{
+    return BIO_ctrl(bio, BIO_CTRL_PENDING, 0, NULL);
+}
+
+size_t BIO_ctrl_wpending(BIO *bio)
+{
+    return BIO_ctrl(bio, BIO_CTRL_WPENDING, 0, NULL);
+}
+
+/* put the 'bio' on the end of b's list of operators */
+BIO *BIO_push(BIO *b, BIO *bio)
+{
+    BIO *lb;
+
+    if (b == NULL)
+        return bio;
+    lb = b;
+    while (lb->next_bio != NULL)
+        lb = lb->next_bio;
+    lb->next_bio = bio;
+    if (bio != NULL)
+        bio->prev_bio = lb;
+    /* called to do internal processing */
+    BIO_ctrl(b, BIO_CTRL_PUSH, 0, lb);
+    return b;
+}
+
+/* Remove the first and return the rest */
+BIO *BIO_pop(BIO *b)
+{
+    BIO *ret;
+
+    if (b == NULL)
+        return NULL;
+    ret = b->next_bio;
+
+    BIO_ctrl(b, BIO_CTRL_POP, 0, b);
+
+    if (b->prev_bio != NULL)
+        b->prev_bio->next_bio = b->next_bio;
+    if (b->next_bio != NULL)
+        b->next_bio->prev_bio = b->prev_bio;
+
+    b->next_bio = NULL;
+    b->prev_bio = NULL;
+    return ret;
+}
+
+BIO *BIO_get_retry_BIO(BIO *bio, int *reason)
+{
+    BIO *b, *last;
+
+    b = last = bio;
+    for (;;) {
+        if (!BIO_should_retry(b))
+            break;
+        last = b;
+        b = b->next_bio;
+        if (b == NULL)
+            break;
+    }
+    if (reason != NULL)
+        *reason = last->retry_reason;
+    return last;
+}
+
+int BIO_get_retry_reason(BIO *bio)
+{
+    return bio->retry_reason;
+}
+
+void BIO_set_retry_reason(BIO *bio, int reason)
+{
+    bio->retry_reason = reason;
+}
+
+BIO *BIO_find_type(BIO *bio, int type)
+{
+    int mt, mask;
+
+    if (bio == NULL)
+        return NULL;
+    mask = type & 0xff;
+    do {
+        if (bio->method != NULL) {
+            mt = bio->method->type;
+
+            if (!mask) {
+                if (mt & type)
+                    return bio;
+            } else if (mt == type)
+                return bio;
+        }
+        bio = bio->next_bio;
+    } while (bio != NULL);
+    return NULL;
+}
+
+BIO *BIO_next(BIO *b)
+{
+    if (b == NULL)
+        return NULL;
+    return b->next_bio;
+}
+
+void BIO_set_next(BIO *b, BIO *next)
+{
+    b->next_bio = next;
+}
+
+void BIO_free_all(BIO *bio)
+{
+    BIO *b;
+    int ref;
+
+    while (bio != NULL) {
+        b = bio;
+        ref = b->references;
+        bio = bio->next_bio;
+        BIO_free(b);
+        /* Since ref count > 1, don't free anyone else. */
+        if (ref > 1)
+            break;
+    }
+}
+
+BIO *BIO_dup_chain(BIO *in)
+{
+    BIO *ret = NULL, *eoc = NULL, *bio, *new_bio;
+
+    for (bio = in; bio != NULL; bio = bio->next_bio) {
+        if ((new_bio = BIO_new(bio->method)) == NULL)
+            goto err;
+        new_bio->callback = bio->callback;
+        new_bio->callback_ex = bio->callback_ex;
+        new_bio->cb_arg = bio->cb_arg;
+        new_bio->init = bio->init;
+        new_bio->shutdown = bio->shutdown;
+        new_bio->flags = bio->flags;
+
+        /* This will let SSL_s_sock() work with stdin/stdout */
+        new_bio->num = bio->num;
+
+        if (!BIO_dup_state(bio, (char *)new_bio)) {
+            BIO_free(new_bio);
+            goto err;
+        }
+
+        /* copy app data */
+        if (!CRYPTO_dup_ex_data(CRYPTO_EX_INDEX_BIO, &new_bio->ex_data,
+                                &bio->ex_data)) {
+            BIO_free(new_bio);
+            goto err;
+        }
+
+        if (ret == NULL) {
+            eoc = new_bio;
+            ret = eoc;
+        } else {
+            BIO_push(eoc, new_bio);
+            eoc = new_bio;
+        }
+    }
+    return ret;
+ err:
+    BIO_free_all(ret);
+
+    return NULL;
+}
+
+void BIO_copy_next_retry(BIO *b)
+{
+    BIO_set_flags(b, BIO_get_retry_flags(b->next_bio));
+    b->retry_reason = b->next_bio->retry_reason;
+}
+
+int BIO_set_ex_data(BIO *bio, int idx, void *data)
+{
+    return CRYPTO_set_ex_data(&(bio->ex_data), idx, data);
+}
+
+void *BIO_get_ex_data(BIO *bio, int idx)
+{
+    return CRYPTO_get_ex_data(&(bio->ex_data), idx);
+}
+
+uint64_t BIO_number_read(BIO *bio)
+{
+    if (bio)
+        return bio->num_read;
+    return 0;
+}
+
+uint64_t BIO_number_written(BIO *bio)
+{
+    if (bio)
+        return bio->num_write;
+    return 0;
+}
+
+void bio_free_ex_data(BIO *bio)
+{
+    CRYPTO_free_ex_data(CRYPTO_EX_INDEX_BIO, bio, &bio->ex_data);
+}
+
+void bio_cleanup(void)
+{
+#ifndef OPENSSL_NO_SOCK
+    bio_sock_cleanup_int();
+    CRYPTO_THREAD_lock_free(bio_lookup_lock);
+    bio_lookup_lock = NULL;
+#endif
+    CRYPTO_THREAD_lock_free(bio_type_lock);
+    bio_type_lock = NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_meth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_meth.c
new file mode 100644
index 000000000..493ff63a9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bio_meth.c
@@ -0,0 +1,220 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "bio_lcl.h"
+#include "internal/thread_once.h"
+
+CRYPTO_RWLOCK *bio_type_lock = NULL;
+static CRYPTO_ONCE bio_type_init = CRYPTO_ONCE_STATIC_INIT;
+
+DEFINE_RUN_ONCE_STATIC(do_bio_type_init)
+{
+    bio_type_lock = CRYPTO_THREAD_lock_new();
+    return bio_type_lock != NULL;
+}
+
+int BIO_get_new_index(void)
+{
+    static CRYPTO_REF_COUNT bio_count = BIO_TYPE_START;
+    int newval;
+
+    if (!RUN_ONCE(&bio_type_init, do_bio_type_init)) {
+        BIOerr(BIO_F_BIO_GET_NEW_INDEX, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+    if (!CRYPTO_UP_REF(&bio_count, &newval, bio_type_lock))
+        return -1;
+    return newval;
+}
+
+BIO_METHOD *BIO_meth_new(int type, const char *name)
+{
+    BIO_METHOD *biom = OPENSSL_zalloc(sizeof(BIO_METHOD));
+
+    if (biom == NULL
+            || (biom->name = OPENSSL_strdup(name)) == NULL) {
+        OPENSSL_free(biom);
+        BIOerr(BIO_F_BIO_METH_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    biom->type = type;
+    return biom;
+}
+
+void BIO_meth_free(BIO_METHOD *biom)
+{
+    if (biom != NULL) {
+        OPENSSL_free(biom->name);
+        OPENSSL_free(biom);
+    }
+}
+
+int (*BIO_meth_get_write(const BIO_METHOD *biom)) (BIO *, const char *, int)
+{
+    return biom->bwrite_old;
+}
+
+int (*BIO_meth_get_write_ex(const BIO_METHOD *biom)) (BIO *, const char *, size_t,
+                                                size_t *)
+{
+    return biom->bwrite;
+}
+
+/* Conversion for old style bwrite to new style */
+int bwrite_conv(BIO *bio, const char *data, size_t datal, size_t *written)
+{
+    int ret;
+
+    if (datal > INT_MAX)
+        datal = INT_MAX;
+
+    ret = bio->method->bwrite_old(bio, data, (int)datal);
+
+    if (ret <= 0) {
+        *written = 0;
+        return ret;
+    }
+
+    *written = (size_t)ret;
+
+    return 1;
+}
+
+int BIO_meth_set_write(BIO_METHOD *biom,
+                       int (*bwrite) (BIO *, const char *, int))
+{
+    biom->bwrite_old = bwrite;
+    biom->bwrite = bwrite_conv;
+    return 1;
+}
+
+int BIO_meth_set_write_ex(BIO_METHOD *biom,
+                       int (*bwrite) (BIO *, const char *, size_t, size_t *))
+{
+    biom->bwrite_old = NULL;
+    biom->bwrite = bwrite;
+    return 1;
+}
+
+int (*BIO_meth_get_read(const BIO_METHOD *biom)) (BIO *, char *, int)
+{
+    return biom->bread_old;
+}
+
+int (*BIO_meth_get_read_ex(const BIO_METHOD *biom)) (BIO *, char *, size_t, size_t *)
+{
+    return biom->bread;
+}
+
+/* Conversion for old style bread to new style */
+int bread_conv(BIO *bio, char *data, size_t datal, size_t *readbytes)
+{
+    int ret;
+
+    if (datal > INT_MAX)
+        datal = INT_MAX;
+
+    ret = bio->method->bread_old(bio, data, (int)datal);
+
+    if (ret <= 0) {
+        *readbytes = 0;
+        return ret;
+    }
+
+    *readbytes = (size_t)ret;
+
+    return 1;
+}
+
+int BIO_meth_set_read(BIO_METHOD *biom,
+                      int (*bread) (BIO *, char *, int))
+{
+    biom->bread_old = bread;
+    biom->bread = bread_conv;
+    return 1;
+}
+
+int BIO_meth_set_read_ex(BIO_METHOD *biom,
+                         int (*bread) (BIO *, char *, size_t, size_t *))
+{
+    biom->bread_old = NULL;
+    biom->bread = bread;
+    return 1;
+}
+
+int (*BIO_meth_get_puts(const BIO_METHOD *biom)) (BIO *, const char *)
+{
+    return biom->bputs;
+}
+
+int BIO_meth_set_puts(BIO_METHOD *biom,
+                      int (*bputs) (BIO *, const char *))
+{
+    biom->bputs = bputs;
+    return 1;
+}
+
+int (*BIO_meth_get_gets(const BIO_METHOD *biom)) (BIO *, char *, int)
+{
+    return biom->bgets;
+}
+
+int BIO_meth_set_gets(BIO_METHOD *biom,
+                      int (*bgets) (BIO *, char *, int))
+{
+    biom->bgets = bgets;
+    return 1;
+}
+
+long (*BIO_meth_get_ctrl(const BIO_METHOD *biom)) (BIO *, int, long, void *)
+{
+    return biom->ctrl;
+}
+
+int BIO_meth_set_ctrl(BIO_METHOD *biom,
+                      long (*ctrl) (BIO *, int, long, void *))
+{
+    biom->ctrl = ctrl;
+    return 1;
+}
+
+int (*BIO_meth_get_create(const BIO_METHOD *biom)) (BIO *)
+{
+    return biom->create;
+}
+
+int BIO_meth_set_create(BIO_METHOD *biom, int (*create) (BIO *))
+{
+    biom->create = create;
+    return 1;
+}
+
+int (*BIO_meth_get_destroy(const BIO_METHOD *biom)) (BIO *)
+{
+    return biom->destroy;
+}
+
+int BIO_meth_set_destroy(BIO_METHOD *biom, int (*destroy) (BIO *))
+{
+    biom->destroy = destroy;
+    return 1;
+}
+
+long (*BIO_meth_get_callback_ctrl(const BIO_METHOD *biom)) (BIO *, int, BIO_info_cb *)
+{
+    return biom->callback_ctrl;
+}
+
+int BIO_meth_set_callback_ctrl(BIO_METHOD *biom,
+                               long (*callback_ctrl) (BIO *, int,
+                                                      BIO_info_cb *))
+{
+    biom->callback_ctrl = callback_ctrl;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_acpt.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_acpt.c
new file mode 100644
index 000000000..993e5903a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_acpt.c
@@ -0,0 +1,560 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <errno.h>
+#include "bio_lcl.h"
+
+#ifndef OPENSSL_NO_SOCK
+
+typedef struct bio_accept_st {
+    int state;
+    int accept_family;
+    int bind_mode;     /* Socket mode for BIO_listen */
+    int accepted_mode; /* Socket mode for BIO_accept (set on accepted sock) */
+    char *param_addr;
+    char *param_serv;
+
+    int accept_sock;
+
+    BIO_ADDRINFO *addr_first;
+    const BIO_ADDRINFO *addr_iter;
+    BIO_ADDR cache_accepting_addr;   /* Useful if we asked for port 0 */
+    char *cache_accepting_name, *cache_accepting_serv;
+    BIO_ADDR cache_peer_addr;
+    char *cache_peer_name, *cache_peer_serv;
+
+    BIO *bio_chain;
+} BIO_ACCEPT;
+
+static int acpt_write(BIO *h, const char *buf, int num);
+static int acpt_read(BIO *h, char *buf, int size);
+static int acpt_puts(BIO *h, const char *str);
+static long acpt_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int acpt_new(BIO *h);
+static int acpt_free(BIO *data);
+static int acpt_state(BIO *b, BIO_ACCEPT *c);
+static void acpt_close_socket(BIO *data);
+static BIO_ACCEPT *BIO_ACCEPT_new(void);
+static void BIO_ACCEPT_free(BIO_ACCEPT *a);
+
+# define ACPT_S_BEFORE                   1
+# define ACPT_S_GET_ADDR                 2
+# define ACPT_S_CREATE_SOCKET            3
+# define ACPT_S_LISTEN                   4
+# define ACPT_S_ACCEPT                   5
+# define ACPT_S_OK                       6
+
+static const BIO_METHOD methods_acceptp = {
+    BIO_TYPE_ACCEPT,
+    "socket accept",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    acpt_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    acpt_read,
+    acpt_puts,
+    NULL,                       /* connect_gets,         */
+    acpt_ctrl,
+    acpt_new,
+    acpt_free,
+    NULL,                       /* connect_callback_ctrl */
+};
+
+const BIO_METHOD *BIO_s_accept(void)
+{
+    return &methods_acceptp;
+}
+
+static int acpt_new(BIO *bi)
+{
+    BIO_ACCEPT *ba;
+
+    bi->init = 0;
+    bi->num = (int)INVALID_SOCKET;
+    bi->flags = 0;
+    if ((ba = BIO_ACCEPT_new()) == NULL)
+        return 0;
+    bi->ptr = (char *)ba;
+    ba->state = ACPT_S_BEFORE;
+    bi->shutdown = 1;
+    return 1;
+}
+
+static BIO_ACCEPT *BIO_ACCEPT_new(void)
+{
+    BIO_ACCEPT *ret;
+
+    if ((ret = OPENSSL_zalloc(sizeof(*ret))) == NULL) {
+        BIOerr(BIO_F_BIO_ACCEPT_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    ret->accept_family = BIO_FAMILY_IPANY;
+    ret->accept_sock = (int)INVALID_SOCKET;
+    return ret;
+}
+
+static void BIO_ACCEPT_free(BIO_ACCEPT *a)
+{
+    if (a == NULL)
+        return;
+    OPENSSL_free(a->param_addr);
+    OPENSSL_free(a->param_serv);
+    BIO_ADDRINFO_free(a->addr_first);
+    OPENSSL_free(a->cache_accepting_name);
+    OPENSSL_free(a->cache_accepting_serv);
+    OPENSSL_free(a->cache_peer_name);
+    OPENSSL_free(a->cache_peer_serv);
+    BIO_free(a->bio_chain);
+    OPENSSL_free(a);
+}
+
+static void acpt_close_socket(BIO *bio)
+{
+    BIO_ACCEPT *c;
+
+    c = (BIO_ACCEPT *)bio->ptr;
+    if (c->accept_sock != (int)INVALID_SOCKET) {
+        shutdown(c->accept_sock, 2);
+        closesocket(c->accept_sock);
+        c->accept_sock = (int)INVALID_SOCKET;
+        bio->num = (int)INVALID_SOCKET;
+    }
+}
+
+static int acpt_free(BIO *a)
+{
+    BIO_ACCEPT *data;
+
+    if (a == NULL)
+        return 0;
+    data = (BIO_ACCEPT *)a->ptr;
+
+    if (a->shutdown) {
+        acpt_close_socket(a);
+        BIO_ACCEPT_free(data);
+        a->ptr = NULL;
+        a->flags = 0;
+        a->init = 0;
+    }
+    return 1;
+}
+
+static int acpt_state(BIO *b, BIO_ACCEPT *c)
+{
+    BIO *bio = NULL, *dbio;
+    int s = -1, ret = -1;
+
+    for (;;) {
+        switch (c->state) {
+        case ACPT_S_BEFORE:
+            if (c->param_addr == NULL && c->param_serv == NULL) {
+                BIOerr(BIO_F_ACPT_STATE, BIO_R_NO_ACCEPT_ADDR_OR_SERVICE_SPECIFIED);
+                ERR_add_error_data(4,
+                                   "hostname=", c->param_addr,
+                                   " service=", c->param_serv);
+                goto exit_loop;
+            }
+
+            /* Because we're starting a new bind, any cached name and serv
+             * are now obsolete and need to be cleaned out.
+             * QUESTION: should this be done in acpt_close_socket() instead?
+             */
+            OPENSSL_free(c->cache_accepting_name);
+            c->cache_accepting_name = NULL;
+            OPENSSL_free(c->cache_accepting_serv);
+            c->cache_accepting_serv = NULL;
+            OPENSSL_free(c->cache_peer_name);
+            c->cache_peer_name = NULL;
+            OPENSSL_free(c->cache_peer_serv);
+            c->cache_peer_serv = NULL;
+
+            c->state = ACPT_S_GET_ADDR;
+            break;
+
+        case ACPT_S_GET_ADDR:
+            {
+                int family = AF_UNSPEC;
+                switch (c->accept_family) {
+                case BIO_FAMILY_IPV6:
+                    if (1) { /* This is a trick we use to avoid bit rot.
+                              * at least the "else" part will always be
+                              * compiled.
+                              */
+#ifdef AF_INET6
+                        family = AF_INET6;
+                    } else {
+#endif
+                        BIOerr(BIO_F_ACPT_STATE, BIO_R_UNAVAILABLE_IP_FAMILY);
+                        goto exit_loop;
+                    }
+                    break;
+                case BIO_FAMILY_IPV4:
+                    family = AF_INET;
+                    break;
+                case BIO_FAMILY_IPANY:
+                    family = AF_UNSPEC;
+                    break;
+                default:
+                    BIOerr(BIO_F_ACPT_STATE, BIO_R_UNSUPPORTED_IP_FAMILY);
+                    goto exit_loop;
+                }
+                if (BIO_lookup(c->param_addr, c->param_serv, BIO_LOOKUP_SERVER,
+                               family, SOCK_STREAM, &c->addr_first) == 0)
+                    goto exit_loop;
+            }
+            if (c->addr_first == NULL) {
+                BIOerr(BIO_F_ACPT_STATE, BIO_R_LOOKUP_RETURNED_NOTHING);
+                goto exit_loop;
+            }
+            /* We're currently not iterating, but set this as preparation
+             * for possible future development in that regard
+             */
+            c->addr_iter = c->addr_first;
+            c->state = ACPT_S_CREATE_SOCKET;
+            break;
+
+        case ACPT_S_CREATE_SOCKET:
+            ret = BIO_socket(BIO_ADDRINFO_family(c->addr_iter),
+                             BIO_ADDRINFO_socktype(c->addr_iter),
+                             BIO_ADDRINFO_protocol(c->addr_iter), 0);
+            if (ret == (int)INVALID_SOCKET) {
+                SYSerr(SYS_F_SOCKET, get_last_socket_error());
+                ERR_add_error_data(4,
+                                   "hostname=", c->param_addr,
+                                   " service=", c->param_serv);
+                BIOerr(BIO_F_ACPT_STATE, BIO_R_UNABLE_TO_CREATE_SOCKET);
+                goto exit_loop;
+            }
+            c->accept_sock = ret;
+            b->num = ret;
+            c->state = ACPT_S_LISTEN;
+            break;
+
+        case ACPT_S_LISTEN:
+            {
+                if (!BIO_listen(c->accept_sock,
+                                BIO_ADDRINFO_address(c->addr_iter),
+                                c->bind_mode)) {
+                    BIO_closesocket(c->accept_sock);
+                    goto exit_loop;
+                }
+            }
+
+            {
+                union BIO_sock_info_u info;
+
+                info.addr = &c->cache_accepting_addr;
+                if (!BIO_sock_info(c->accept_sock, BIO_SOCK_INFO_ADDRESS,
+                                   &info)) {
+                    BIO_closesocket(c->accept_sock);
+                    goto exit_loop;
+                }
+            }
+
+            c->cache_accepting_name =
+                BIO_ADDR_hostname_string(&c->cache_accepting_addr, 1);
+            c->cache_accepting_serv =
+                BIO_ADDR_service_string(&c->cache_accepting_addr, 1);
+            c->state = ACPT_S_ACCEPT;
+            s = -1;
+            ret = 1;
+            goto end;
+
+        case ACPT_S_ACCEPT:
+            if (b->next_bio != NULL) {
+                c->state = ACPT_S_OK;
+                break;
+            }
+            BIO_clear_retry_flags(b);
+            b->retry_reason = 0;
+
+            OPENSSL_free(c->cache_peer_name);
+            c->cache_peer_name = NULL;
+            OPENSSL_free(c->cache_peer_serv);
+            c->cache_peer_serv = NULL;
+
+            s = BIO_accept_ex(c->accept_sock, &c->cache_peer_addr,
+                              c->accepted_mode);
+
+            /* If the returned socket is invalid, this might still be
+             * retryable
+             */
+            if (s < 0) {
+                if (BIO_sock_should_retry(s)) {
+                    BIO_set_retry_special(b);
+                    b->retry_reason = BIO_RR_ACCEPT;
+                    goto end;
+                }
+            }
+
+            /* If it wasn't retryable, we fail */
+            if (s < 0) {
+                ret = s;
+                goto exit_loop;
+            }
+
+            bio = BIO_new_socket(s, BIO_CLOSE);
+            if (bio == NULL)
+                goto exit_loop;
+
+            BIO_set_callback(bio, BIO_get_callback(b));
+            BIO_set_callback_arg(bio, BIO_get_callback_arg(b));
+
+            /*
+             * If the accept BIO has an bio_chain, we dup it and put the new
+             * socket at the end.
+             */
+            if (c->bio_chain != NULL) {
+                if ((dbio = BIO_dup_chain(c->bio_chain)) == NULL)
+                    goto exit_loop;
+                if (!BIO_push(dbio, bio))
+                    goto exit_loop;
+                bio = dbio;
+            }
+            if (BIO_push(b, bio) == NULL)
+                goto exit_loop;
+
+            c->cache_peer_name =
+                BIO_ADDR_hostname_string(&c->cache_peer_addr, 1);
+            c->cache_peer_serv =
+                BIO_ADDR_service_string(&c->cache_peer_addr, 1);
+            c->state = ACPT_S_OK;
+            bio = NULL;
+            ret = 1;
+            goto end;
+
+        case ACPT_S_OK:
+            if (b->next_bio == NULL) {
+                c->state = ACPT_S_ACCEPT;
+                break;
+            }
+            ret = 1;
+            goto end;
+
+        default:
+            ret = 0;
+            goto end;
+        }
+    }
+
+  exit_loop:
+    if (bio != NULL)
+        BIO_free(bio);
+    else if (s >= 0)
+        BIO_closesocket(s);
+  end:
+    return ret;
+}
+
+static int acpt_read(BIO *b, char *out, int outl)
+{
+    int ret = 0;
+    BIO_ACCEPT *data;
+
+    BIO_clear_retry_flags(b);
+    data = (BIO_ACCEPT *)b->ptr;
+
+    while (b->next_bio == NULL) {
+        ret = acpt_state(b, data);
+        if (ret <= 0)
+            return ret;
+    }
+
+    ret = BIO_read(b->next_bio, out, outl);
+    BIO_copy_next_retry(b);
+    return ret;
+}
+
+static int acpt_write(BIO *b, const char *in, int inl)
+{
+    int ret;
+    BIO_ACCEPT *data;
+
+    BIO_clear_retry_flags(b);
+    data = (BIO_ACCEPT *)b->ptr;
+
+    while (b->next_bio == NULL) {
+        ret = acpt_state(b, data);
+        if (ret <= 0)
+            return ret;
+    }
+
+    ret = BIO_write(b->next_bio, in, inl);
+    BIO_copy_next_retry(b);
+    return ret;
+}
+
+static long acpt_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    int *ip;
+    long ret = 1;
+    BIO_ACCEPT *data;
+    char **pp;
+
+    data = (BIO_ACCEPT *)b->ptr;
+
+    switch (cmd) {
+    case BIO_CTRL_RESET:
+        ret = 0;
+        data->state = ACPT_S_BEFORE;
+        acpt_close_socket(b);
+        BIO_ADDRINFO_free(data->addr_first);
+        data->addr_first = NULL;
+        b->flags = 0;
+        break;
+    case BIO_C_DO_STATE_MACHINE:
+        /* use this one to start the connection */
+        ret = (long)acpt_state(b, data);
+        break;
+    case BIO_C_SET_ACCEPT:
+        if (ptr != NULL) {
+            if (num == 0) {
+                char *hold_serv = data->param_serv;
+                /* We affect the hostname regardless.  However, the input
+                 * string might contain a host:service spec, so we must
+                 * parse it, which might or might not affect the service
+                 */
+                OPENSSL_free(data->param_addr);
+                data->param_addr = NULL;
+                ret = BIO_parse_hostserv(ptr,
+                                         &data->param_addr,
+                                         &data->param_serv,
+                                         BIO_PARSE_PRIO_SERV);
+                if (hold_serv != data->param_serv)
+                    OPENSSL_free(hold_serv);
+                b->init = 1;
+            } else if (num == 1) {
+                OPENSSL_free(data->param_serv);
+                data->param_serv = BUF_strdup(ptr);
+                b->init = 1;
+            } else if (num == 2) {
+                data->bind_mode |= BIO_SOCK_NONBLOCK;
+            } else if (num == 3) {
+                BIO_free(data->bio_chain);
+                data->bio_chain = (BIO *)ptr;
+            } else if (num == 4) {
+                data->accept_family = *(int *)ptr;
+            }
+        } else {
+            if (num == 2) {
+                data->bind_mode &= ~BIO_SOCK_NONBLOCK;
+            }
+        }
+        break;
+    case BIO_C_SET_NBIO:
+        if (num != 0)
+            data->accepted_mode |= BIO_SOCK_NONBLOCK;
+        else
+            data->accepted_mode &= ~BIO_SOCK_NONBLOCK;
+        break;
+    case BIO_C_SET_FD:
+        b->num = *((int *)ptr);
+        data->accept_sock = b->num;
+        data->state = ACPT_S_ACCEPT;
+        b->shutdown = (int)num;
+        b->init = 1;
+        break;
+    case BIO_C_GET_FD:
+        if (b->init) {
+            ip = (int *)ptr;
+            if (ip != NULL)
+                *ip = data->accept_sock;
+            ret = data->accept_sock;
+        } else
+            ret = -1;
+        break;
+    case BIO_C_GET_ACCEPT:
+        if (b->init) {
+            if (num == 0 && ptr != NULL) {
+                pp = (char **)ptr;
+                *pp = data->cache_accepting_name;
+            } else if (num == 1 && ptr != NULL) {
+                pp = (char **)ptr;
+                *pp = data->cache_accepting_serv;
+            } else if (num == 2 && ptr != NULL) {
+                pp = (char **)ptr;
+                *pp = data->cache_peer_name;
+            } else if (num == 3 && ptr != NULL) {
+                pp = (char **)ptr;
+                *pp = data->cache_peer_serv;
+            } else if (num == 4) {
+                switch (BIO_ADDRINFO_family(data->addr_iter)) {
+#ifdef AF_INET6
+                case AF_INET6:
+                    ret = BIO_FAMILY_IPV6;
+                    break;
+#endif
+                case AF_INET:
+                    ret = BIO_FAMILY_IPV4;
+                    break;
+                case 0:
+                    ret = data->accept_family;
+                    break;
+                default:
+                    ret = -1;
+                    break;
+                }
+            } else
+                ret = -1;
+        } else
+            ret = -1;
+        break;
+    case BIO_CTRL_GET_CLOSE:
+        ret = b->shutdown;
+        break;
+    case BIO_CTRL_SET_CLOSE:
+        b->shutdown = (int)num;
+        break;
+    case BIO_CTRL_PENDING:
+    case BIO_CTRL_WPENDING:
+        ret = 0;
+        break;
+    case BIO_CTRL_FLUSH:
+        break;
+    case BIO_C_SET_BIND_MODE:
+        data->bind_mode = (int)num;
+        break;
+    case BIO_C_GET_BIND_MODE:
+        ret = (long)data->bind_mode;
+        break;
+    case BIO_CTRL_DUP:
+        break;
+
+    default:
+        ret = 0;
+        break;
+    }
+    return ret;
+}
+
+static int acpt_puts(BIO *bp, const char *str)
+{
+    int n, ret;
+
+    n = strlen(str);
+    ret = acpt_write(bp, str, n);
+    return ret;
+}
+
+BIO *BIO_new_accept(const char *str)
+{
+    BIO *ret;
+
+    ret = BIO_new(BIO_s_accept());
+    if (ret == NULL)
+        return NULL;
+    if (BIO_set_accept_name(ret, str))
+        return ret;
+    BIO_free(ret);
+    return NULL;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_bio.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_bio.c
new file mode 100644
index 000000000..e34382c55
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_bio.c
@@ -0,0 +1,808 @@
+/*
+ * Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Special method for a BIO where the other endpoint is also a BIO of this
+ * kind, handled by the same thread (i.e. the "peer" is actually ourselves,
+ * wearing a different hat). Such "BIO pairs" are mainly for using the SSL
+ * library with I/O interfaces for which no specific BIO method is available.
+ * See ssl/ssltest.c for some hints on how this can be used.
+ */
+
+#include "e_os.h"
+#include <assert.h>
+#include <limits.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include "bio_lcl.h"
+#include <openssl/err.h>
+#include <openssl/crypto.h>
+
+static int bio_new(BIO *bio);
+static int bio_free(BIO *bio);
+static int bio_read(BIO *bio, char *buf, int size);
+static int bio_write(BIO *bio, const char *buf, int num);
+static long bio_ctrl(BIO *bio, int cmd, long num, void *ptr);
+static int bio_puts(BIO *bio, const char *str);
+
+static int bio_make_pair(BIO *bio1, BIO *bio2);
+static void bio_destroy_pair(BIO *bio);
+
+static const BIO_METHOD methods_biop = {
+    BIO_TYPE_BIO,
+    "BIO pair",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    bio_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    bio_read,
+    bio_puts,
+    NULL /* no bio_gets */ ,
+    bio_ctrl,
+    bio_new,
+    bio_free,
+    NULL                        /* no bio_callback_ctrl */
+};
+
+const BIO_METHOD *BIO_s_bio(void)
+{
+    return &methods_biop;
+}
+
+struct bio_bio_st {
+    BIO *peer;                  /* NULL if buf == NULL. If peer != NULL, then
+                                 * peer->ptr is also a bio_bio_st, and its
+                                 * "peer" member points back to us. peer !=
+                                 * NULL iff init != 0 in the BIO. */
+    /* This is for what we write (i.e. reading uses peer's struct): */
+    int closed;                 /* valid iff peer != NULL */
+    size_t len;                 /* valid iff buf != NULL; 0 if peer == NULL */
+    size_t offset;              /* valid iff buf != NULL; 0 if len == 0 */
+    size_t size;
+    char *buf;                  /* "size" elements (if != NULL) */
+    size_t request;             /* valid iff peer != NULL; 0 if len != 0,
+                                 * otherwise set by peer to number of bytes
+                                 * it (unsuccessfully) tried to read, never
+                                 * more than buffer space (size-len)
+                                 * warrants. */
+};
+
+static int bio_new(BIO *bio)
+{
+    struct bio_bio_st *b = OPENSSL_zalloc(sizeof(*b));
+
+    if (b == NULL)
+        return 0;
+
+    /* enough for one TLS record (just a default) */
+    b->size = 17 * 1024;
+
+    bio->ptr = b;
+    return 1;
+}
+
+static int bio_free(BIO *bio)
+{
+    struct bio_bio_st *b;
+
+    if (bio == NULL)
+        return 0;
+    b = bio->ptr;
+
+    assert(b != NULL);
+
+    if (b->peer)
+        bio_destroy_pair(bio);
+
+    OPENSSL_free(b->buf);
+    OPENSSL_free(b);
+
+    return 1;
+}
+
+static int bio_read(BIO *bio, char *buf, int size_)
+{
+    size_t size = size_;
+    size_t rest;
+    struct bio_bio_st *b, *peer_b;
+
+    BIO_clear_retry_flags(bio);
+
+    if (!bio->init)
+        return 0;
+
+    b = bio->ptr;
+    assert(b != NULL);
+    assert(b->peer != NULL);
+    peer_b = b->peer->ptr;
+    assert(peer_b != NULL);
+    assert(peer_b->buf != NULL);
+
+    peer_b->request = 0;        /* will be set in "retry_read" situation */
+
+    if (buf == NULL || size == 0)
+        return 0;
+
+    if (peer_b->len == 0) {
+        if (peer_b->closed)
+            return 0;           /* writer has closed, and no data is left */
+        else {
+            BIO_set_retry_read(bio); /* buffer is empty */
+            if (size <= peer_b->size)
+                peer_b->request = size;
+            else
+                /*
+                 * don't ask for more than the peer can deliver in one write
+                 */
+                peer_b->request = peer_b->size;
+            return -1;
+        }
+    }
+
+    /* we can read */
+    if (peer_b->len < size)
+        size = peer_b->len;
+
+    /* now read "size" bytes */
+
+    rest = size;
+
+    assert(rest > 0);
+    do {                        /* one or two iterations */
+        size_t chunk;
+
+        assert(rest <= peer_b->len);
+        if (peer_b->offset + rest <= peer_b->size)
+            chunk = rest;
+        else
+            /* wrap around ring buffer */
+            chunk = peer_b->size - peer_b->offset;
+        assert(peer_b->offset + chunk <= peer_b->size);
+
+        memcpy(buf, peer_b->buf + peer_b->offset, chunk);
+
+        peer_b->len -= chunk;
+        if (peer_b->len) {
+            peer_b->offset += chunk;
+            assert(peer_b->offset <= peer_b->size);
+            if (peer_b->offset == peer_b->size)
+                peer_b->offset = 0;
+            buf += chunk;
+        } else {
+            /* buffer now empty, no need to advance "buf" */
+            assert(chunk == rest);
+            peer_b->offset = 0;
+        }
+        rest -= chunk;
+    }
+    while (rest);
+
+    return size;
+}
+
+/*-
+ * non-copying interface: provide pointer to available data in buffer
+ *    bio_nread0:  return number of available bytes
+ *    bio_nread:   also advance index
+ * (example usage:  bio_nread0(), read from buffer, bio_nread()
+ *  or just         bio_nread(), read from buffer)
+ */
+/*
+ * WARNING: The non-copying interface is largely untested as of yet and may
+ * contain bugs.
+ */
+static ossl_ssize_t bio_nread0(BIO *bio, char **buf)
+{
+    struct bio_bio_st *b, *peer_b;
+    ossl_ssize_t num;
+
+    BIO_clear_retry_flags(bio);
+
+    if (!bio->init)
+        return 0;
+
+    b = bio->ptr;
+    assert(b != NULL);
+    assert(b->peer != NULL);
+    peer_b = b->peer->ptr;
+    assert(peer_b != NULL);
+    assert(peer_b->buf != NULL);
+
+    peer_b->request = 0;
+
+    if (peer_b->len == 0) {
+        char dummy;
+
+        /* avoid code duplication -- nothing available for reading */
+        return bio_read(bio, &dummy, 1); /* returns 0 or -1 */
+    }
+
+    num = peer_b->len;
+    if (peer_b->size < peer_b->offset + num)
+        /* no ring buffer wrap-around for non-copying interface */
+        num = peer_b->size - peer_b->offset;
+    assert(num > 0);
+
+    if (buf != NULL)
+        *buf = peer_b->buf + peer_b->offset;
+    return num;
+}
+
+static ossl_ssize_t bio_nread(BIO *bio, char **buf, size_t num_)
+{
+    struct bio_bio_st *b, *peer_b;
+    ossl_ssize_t num, available;
+
+    if (num_ > OSSL_SSIZE_MAX)
+        num = OSSL_SSIZE_MAX;
+    else
+        num = (ossl_ssize_t) num_;
+
+    available = bio_nread0(bio, buf);
+    if (num > available)
+        num = available;
+    if (num <= 0)
+        return num;
+
+    b = bio->ptr;
+    peer_b = b->peer->ptr;
+
+    peer_b->len -= num;
+    if (peer_b->len) {
+        peer_b->offset += num;
+        assert(peer_b->offset <= peer_b->size);
+        if (peer_b->offset == peer_b->size)
+            peer_b->offset = 0;
+    } else
+        peer_b->offset = 0;
+
+    return num;
+}
+
+static int bio_write(BIO *bio, const char *buf, int num_)
+{
+    size_t num = num_;
+    size_t rest;
+    struct bio_bio_st *b;
+
+    BIO_clear_retry_flags(bio);
+
+    if (!bio->init || buf == NULL || num == 0)
+        return 0;
+
+    b = bio->ptr;
+    assert(b != NULL);
+    assert(b->peer != NULL);
+    assert(b->buf != NULL);
+
+    b->request = 0;
+    if (b->closed) {
+        /* we already closed */
+        BIOerr(BIO_F_BIO_WRITE, BIO_R_BROKEN_PIPE);
+        return -1;
+    }
+
+    assert(b->len <= b->size);
+
+    if (b->len == b->size) {
+        BIO_set_retry_write(bio); /* buffer is full */
+        return -1;
+    }
+
+    /* we can write */
+    if (num > b->size - b->len)
+        num = b->size - b->len;
+
+    /* now write "num" bytes */
+
+    rest = num;
+
+    assert(rest > 0);
+    do {                        /* one or two iterations */
+        size_t write_offset;
+        size_t chunk;
+
+        assert(b->len + rest <= b->size);
+
+        write_offset = b->offset + b->len;
+        if (write_offset >= b->size)
+            write_offset -= b->size;
+        /* b->buf[write_offset] is the first byte we can write to. */
+
+        if (write_offset + rest <= b->size)
+            chunk = rest;
+        else
+            /* wrap around ring buffer */
+            chunk = b->size - write_offset;
+
+        memcpy(b->buf + write_offset, buf, chunk);
+
+        b->len += chunk;
+
+        assert(b->len <= b->size);
+
+        rest -= chunk;
+        buf += chunk;
+    }
+    while (rest);
+
+    return num;
+}
+
+/*-
+ * non-copying interface: provide pointer to region to write to
+ *   bio_nwrite0:  check how much space is available
+ *   bio_nwrite:   also increase length
+ * (example usage:  bio_nwrite0(), write to buffer, bio_nwrite()
+ *  or just         bio_nwrite(), write to buffer)
+ */
+static ossl_ssize_t bio_nwrite0(BIO *bio, char **buf)
+{
+    struct bio_bio_st *b;
+    size_t num;
+    size_t write_offset;
+
+    BIO_clear_retry_flags(bio);
+
+    if (!bio->init)
+        return 0;
+
+    b = bio->ptr;
+    assert(b != NULL);
+    assert(b->peer != NULL);
+    assert(b->buf != NULL);
+
+    b->request = 0;
+    if (b->closed) {
+        BIOerr(BIO_F_BIO_NWRITE0, BIO_R_BROKEN_PIPE);
+        return -1;
+    }
+
+    assert(b->len <= b->size);
+
+    if (b->len == b->size) {
+        BIO_set_retry_write(bio);
+        return -1;
+    }
+
+    num = b->size - b->len;
+    write_offset = b->offset + b->len;
+    if (write_offset >= b->size)
+        write_offset -= b->size;
+    if (write_offset + num > b->size)
+        /*
+         * no ring buffer wrap-around for non-copying interface (to fulfil
+         * the promise by BIO_ctrl_get_write_guarantee, BIO_nwrite may have
+         * to be called twice)
+         */
+        num = b->size - write_offset;
+
+    if (buf != NULL)
+        *buf = b->buf + write_offset;
+    assert(write_offset + num <= b->size);
+
+    return num;
+}
+
+static ossl_ssize_t bio_nwrite(BIO *bio, char **buf, size_t num_)
+{
+    struct bio_bio_st *b;
+    ossl_ssize_t num, space;
+
+    if (num_ > OSSL_SSIZE_MAX)
+        num = OSSL_SSIZE_MAX;
+    else
+        num = (ossl_ssize_t) num_;
+
+    space = bio_nwrite0(bio, buf);
+    if (num > space)
+        num = space;
+    if (num <= 0)
+        return num;
+    b = bio->ptr;
+    assert(b != NULL);
+    b->len += num;
+    assert(b->len <= b->size);
+
+    return num;
+}
+
+static long bio_ctrl(BIO *bio, int cmd, long num, void *ptr)
+{
+    long ret;
+    struct bio_bio_st *b = bio->ptr;
+
+    assert(b != NULL);
+
+    switch (cmd) {
+        /* specific CTRL codes */
+
+    case BIO_C_SET_WRITE_BUF_SIZE:
+        if (b->peer) {
+            BIOerr(BIO_F_BIO_CTRL, BIO_R_IN_USE);
+            ret = 0;
+        } else if (num == 0) {
+            BIOerr(BIO_F_BIO_CTRL, BIO_R_INVALID_ARGUMENT);
+            ret = 0;
+        } else {
+            size_t new_size = num;
+
+            if (b->size != new_size) {
+                OPENSSL_free(b->buf);
+                b->buf = NULL;
+                b->size = new_size;
+            }
+            ret = 1;
+        }
+        break;
+
+    case BIO_C_GET_WRITE_BUF_SIZE:
+        ret = (long)b->size;
+        break;
+
+    case BIO_C_MAKE_BIO_PAIR:
+        {
+            BIO *other_bio = ptr;
+
+            if (bio_make_pair(bio, other_bio))
+                ret = 1;
+            else
+                ret = 0;
+        }
+        break;
+
+    case BIO_C_DESTROY_BIO_PAIR:
+        /*
+         * Affects both BIOs in the pair -- call just once! Or let
+         * BIO_free(bio1); BIO_free(bio2); do the job.
+         */
+        bio_destroy_pair(bio);
+        ret = 1;
+        break;
+
+    case BIO_C_GET_WRITE_GUARANTEE:
+        /*
+         * How many bytes can the caller feed to the next write without
+         * having to keep any?
+         */
+        if (b->peer == NULL || b->closed)
+            ret = 0;
+        else
+            ret = (long)b->size - b->len;
+        break;
+
+    case BIO_C_GET_READ_REQUEST:
+        /*
+         * If the peer unsuccessfully tried to read, how many bytes were
+         * requested? (As with BIO_CTRL_PENDING, that number can usually be
+         * treated as boolean.)
+         */
+        ret = (long)b->request;
+        break;
+
+    case BIO_C_RESET_READ_REQUEST:
+        /*
+         * Reset request.  (Can be useful after read attempts at the other
+         * side that are meant to be non-blocking, e.g. when probing SSL_read
+         * to see if any data is available.)
+         */
+        b->request = 0;
+        ret = 1;
+        break;
+
+    case BIO_C_SHUTDOWN_WR:
+        /* similar to shutdown(..., SHUT_WR) */
+        b->closed = 1;
+        ret = 1;
+        break;
+
+    case BIO_C_NREAD0:
+        /* prepare for non-copying read */
+        ret = (long)bio_nread0(bio, ptr);
+        break;
+
+    case BIO_C_NREAD:
+        /* non-copying read */
+        ret = (long)bio_nread(bio, ptr, (size_t)num);
+        break;
+
+    case BIO_C_NWRITE0:
+        /* prepare for non-copying write */
+        ret = (long)bio_nwrite0(bio, ptr);
+        break;
+
+    case BIO_C_NWRITE:
+        /* non-copying write */
+        ret = (long)bio_nwrite(bio, ptr, (size_t)num);
+        break;
+
+        /* standard CTRL codes follow */
+
+    case BIO_CTRL_RESET:
+        if (b->buf != NULL) {
+            b->len = 0;
+            b->offset = 0;
+        }
+        ret = 0;
+        break;
+
+    case BIO_CTRL_GET_CLOSE:
+        ret = bio->shutdown;
+        break;
+
+    case BIO_CTRL_SET_CLOSE:
+        bio->shutdown = (int)num;
+        ret = 1;
+        break;
+
+    case BIO_CTRL_PENDING:
+        if (b->peer != NULL) {
+            struct bio_bio_st *peer_b = b->peer->ptr;
+
+            ret = (long)peer_b->len;
+        } else
+            ret = 0;
+        break;
+
+    case BIO_CTRL_WPENDING:
+        if (b->buf != NULL)
+            ret = (long)b->len;
+        else
+            ret = 0;
+        break;
+
+    case BIO_CTRL_DUP:
+        /* See BIO_dup_chain for circumstances we have to expect. */
+        {
+            BIO *other_bio = ptr;
+            struct bio_bio_st *other_b;
+
+            assert(other_bio != NULL);
+            other_b = other_bio->ptr;
+            assert(other_b != NULL);
+
+            assert(other_b->buf == NULL); /* other_bio is always fresh */
+
+            other_b->size = b->size;
+        }
+
+        ret = 1;
+        break;
+
+    case BIO_CTRL_FLUSH:
+        ret = 1;
+        break;
+
+    case BIO_CTRL_EOF:
+        if (b->peer != NULL) {
+            struct bio_bio_st *peer_b = b->peer->ptr;
+
+            if (peer_b->len == 0 && peer_b->closed)
+                ret = 1;
+            else
+                ret = 0;
+        } else {
+            ret = 1;
+        }
+        break;
+
+    default:
+        ret = 0;
+    }
+    return ret;
+}
+
+static int bio_puts(BIO *bio, const char *str)
+{
+    return bio_write(bio, str, strlen(str));
+}
+
+static int bio_make_pair(BIO *bio1, BIO *bio2)
+{
+    struct bio_bio_st *b1, *b2;
+
+    assert(bio1 != NULL);
+    assert(bio2 != NULL);
+
+    b1 = bio1->ptr;
+    b2 = bio2->ptr;
+
+    if (b1->peer != NULL || b2->peer != NULL) {
+        BIOerr(BIO_F_BIO_MAKE_PAIR, BIO_R_IN_USE);
+        return 0;
+    }
+
+    if (b1->buf == NULL) {
+        b1->buf = OPENSSL_malloc(b1->size);
+        if (b1->buf == NULL) {
+            BIOerr(BIO_F_BIO_MAKE_PAIR, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        b1->len = 0;
+        b1->offset = 0;
+    }
+
+    if (b2->buf == NULL) {
+        b2->buf = OPENSSL_malloc(b2->size);
+        if (b2->buf == NULL) {
+            BIOerr(BIO_F_BIO_MAKE_PAIR, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        b2->len = 0;
+        b2->offset = 0;
+    }
+
+    b1->peer = bio2;
+    b1->closed = 0;
+    b1->request = 0;
+    b2->peer = bio1;
+    b2->closed = 0;
+    b2->request = 0;
+
+    bio1->init = 1;
+    bio2->init = 1;
+
+    return 1;
+}
+
+static void bio_destroy_pair(BIO *bio)
+{
+    struct bio_bio_st *b = bio->ptr;
+
+    if (b != NULL) {
+        BIO *peer_bio = b->peer;
+
+        if (peer_bio != NULL) {
+            struct bio_bio_st *peer_b = peer_bio->ptr;
+
+            assert(peer_b != NULL);
+            assert(peer_b->peer == bio);
+
+            peer_b->peer = NULL;
+            peer_bio->init = 0;
+            assert(peer_b->buf != NULL);
+            peer_b->len = 0;
+            peer_b->offset = 0;
+
+            b->peer = NULL;
+            bio->init = 0;
+            assert(b->buf != NULL);
+            b->len = 0;
+            b->offset = 0;
+        }
+    }
+}
+
+/* Exported convenience functions */
+int BIO_new_bio_pair(BIO **bio1_p, size_t writebuf1,
+                     BIO **bio2_p, size_t writebuf2)
+{
+    BIO *bio1 = NULL, *bio2 = NULL;
+    long r;
+    int ret = 0;
+
+    bio1 = BIO_new(BIO_s_bio());
+    if (bio1 == NULL)
+        goto err;
+    bio2 = BIO_new(BIO_s_bio());
+    if (bio2 == NULL)
+        goto err;
+
+    if (writebuf1) {
+        r = BIO_set_write_buf_size(bio1, writebuf1);
+        if (!r)
+            goto err;
+    }
+    if (writebuf2) {
+        r = BIO_set_write_buf_size(bio2, writebuf2);
+        if (!r)
+            goto err;
+    }
+
+    r = BIO_make_bio_pair(bio1, bio2);
+    if (!r)
+        goto err;
+    ret = 1;
+
+ err:
+    if (ret == 0) {
+        BIO_free(bio1);
+        bio1 = NULL;
+        BIO_free(bio2);
+        bio2 = NULL;
+    }
+
+    *bio1_p = bio1;
+    *bio2_p = bio2;
+    return ret;
+}
+
+size_t BIO_ctrl_get_write_guarantee(BIO *bio)
+{
+    return BIO_ctrl(bio, BIO_C_GET_WRITE_GUARANTEE, 0, NULL);
+}
+
+size_t BIO_ctrl_get_read_request(BIO *bio)
+{
+    return BIO_ctrl(bio, BIO_C_GET_READ_REQUEST, 0, NULL);
+}
+
+int BIO_ctrl_reset_read_request(BIO *bio)
+{
+    return (BIO_ctrl(bio, BIO_C_RESET_READ_REQUEST, 0, NULL) != 0);
+}
+
+/*
+ * BIO_nread0/nread/nwrite0/nwrite are available only for BIO pairs for now
+ * (conceivably some other BIOs could allow non-copying reads and writes
+ * too.)
+ */
+int BIO_nread0(BIO *bio, char **buf)
+{
+    long ret;
+
+    if (!bio->init) {
+        BIOerr(BIO_F_BIO_NREAD0, BIO_R_UNINITIALIZED);
+        return -2;
+    }
+
+    ret = BIO_ctrl(bio, BIO_C_NREAD0, 0, buf);
+    if (ret > INT_MAX)
+        return INT_MAX;
+    else
+        return (int)ret;
+}
+
+int BIO_nread(BIO *bio, char **buf, int num)
+{
+    int ret;
+
+    if (!bio->init) {
+        BIOerr(BIO_F_BIO_NREAD, BIO_R_UNINITIALIZED);
+        return -2;
+    }
+
+    ret = (int)BIO_ctrl(bio, BIO_C_NREAD, num, buf);
+    if (ret > 0)
+        bio->num_read += ret;
+    return ret;
+}
+
+int BIO_nwrite0(BIO *bio, char **buf)
+{
+    long ret;
+
+    if (!bio->init) {
+        BIOerr(BIO_F_BIO_NWRITE0, BIO_R_UNINITIALIZED);
+        return -2;
+    }
+
+    ret = BIO_ctrl(bio, BIO_C_NWRITE0, 0, buf);
+    if (ret > INT_MAX)
+        return INT_MAX;
+    else
+        return (int)ret;
+}
+
+int BIO_nwrite(BIO *bio, char **buf, int num)
+{
+    int ret;
+
+    if (!bio->init) {
+        BIOerr(BIO_F_BIO_NWRITE, BIO_R_UNINITIALIZED);
+        return -2;
+    }
+
+    ret = BIO_ctrl(bio, BIO_C_NWRITE, num, buf);
+    if (ret > 0)
+        bio->num_write += ret;
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_conn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_conn.c
new file mode 100644
index 000000000..e9673fe78
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_conn.c
@@ -0,0 +1,540 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <errno.h>
+
+#include "bio_lcl.h"
+
+#ifndef OPENSSL_NO_SOCK
+
+typedef struct bio_connect_st {
+    int state;
+    int connect_family;
+    char *param_hostname;
+    char *param_service;
+    int connect_mode;
+
+    BIO_ADDRINFO *addr_first;
+    const BIO_ADDRINFO *addr_iter;
+    /*
+     * int socket; this will be kept in bio->num so that it is compatible
+     * with the bss_sock bio
+     */
+    /*
+     * called when the connection is initially made callback(BIO,state,ret);
+     * The callback should return 'ret'.  state is for compatibility with the
+     * ssl info_callback
+     */
+    BIO_info_cb *info_callback;
+} BIO_CONNECT;
+
+static int conn_write(BIO *h, const char *buf, int num);
+static int conn_read(BIO *h, char *buf, int size);
+static int conn_puts(BIO *h, const char *str);
+static long conn_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int conn_new(BIO *h);
+static int conn_free(BIO *data);
+static long conn_callback_ctrl(BIO *h, int cmd, BIO_info_cb *);
+
+static int conn_state(BIO *b, BIO_CONNECT *c);
+static void conn_close_socket(BIO *data);
+BIO_CONNECT *BIO_CONNECT_new(void);
+void BIO_CONNECT_free(BIO_CONNECT *a);
+
+#define BIO_CONN_S_BEFORE                1
+#define BIO_CONN_S_GET_ADDR              2
+#define BIO_CONN_S_CREATE_SOCKET         3
+#define BIO_CONN_S_CONNECT               4
+#define BIO_CONN_S_OK                    5
+#define BIO_CONN_S_BLOCKED_CONNECT       6
+
+static const BIO_METHOD methods_connectp = {
+    BIO_TYPE_CONNECT,
+    "socket connect",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    conn_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    conn_read,
+    conn_puts,
+    NULL,                       /* conn_gets, */
+    conn_ctrl,
+    conn_new,
+    conn_free,
+    conn_callback_ctrl,
+};
+
+static int conn_state(BIO *b, BIO_CONNECT *c)
+{
+    int ret = -1, i;
+    BIO_info_cb *cb = NULL;
+
+    if (c->info_callback != NULL)
+        cb = c->info_callback;
+
+    for (;;) {
+        switch (c->state) {
+        case BIO_CONN_S_BEFORE:
+            if (c->param_hostname == NULL && c->param_service == NULL) {
+                BIOerr(BIO_F_CONN_STATE, BIO_R_NO_HOSTNAME_OR_SERVICE_SPECIFIED);
+                ERR_add_error_data(4,
+                                   "hostname=", c->param_hostname,
+                                   " service=", c->param_service);
+                goto exit_loop;
+            }
+            c->state = BIO_CONN_S_GET_ADDR;
+            break;
+
+        case BIO_CONN_S_GET_ADDR:
+            {
+                int family = AF_UNSPEC;
+                switch (c->connect_family) {
+                case BIO_FAMILY_IPV6:
+                    if (1) { /* This is a trick we use to avoid bit rot.
+                              * at least the "else" part will always be
+                              * compiled.
+                              */
+#ifdef AF_INET6
+                        family = AF_INET6;
+                    } else {
+#endif
+                        BIOerr(BIO_F_CONN_STATE, BIO_R_UNAVAILABLE_IP_FAMILY);
+                        goto exit_loop;
+                    }
+                    break;
+                case BIO_FAMILY_IPV4:
+                    family = AF_INET;
+                    break;
+                case BIO_FAMILY_IPANY:
+                    family = AF_UNSPEC;
+                    break;
+                default:
+                    BIOerr(BIO_F_CONN_STATE, BIO_R_UNSUPPORTED_IP_FAMILY);
+                    goto exit_loop;
+                }
+                if (BIO_lookup(c->param_hostname, c->param_service,
+                               BIO_LOOKUP_CLIENT,
+                               family, SOCK_STREAM, &c->addr_first) == 0)
+                    goto exit_loop;
+            }
+            if (c->addr_first == NULL) {
+                BIOerr(BIO_F_CONN_STATE, BIO_R_LOOKUP_RETURNED_NOTHING);
+                goto exit_loop;
+            }
+            c->addr_iter = c->addr_first;
+            c->state = BIO_CONN_S_CREATE_SOCKET;
+            break;
+
+        case BIO_CONN_S_CREATE_SOCKET:
+            ret = BIO_socket(BIO_ADDRINFO_family(c->addr_iter),
+                             BIO_ADDRINFO_socktype(c->addr_iter),
+                             BIO_ADDRINFO_protocol(c->addr_iter), 0);
+            if (ret == (int)INVALID_SOCKET) {
+                SYSerr(SYS_F_SOCKET, get_last_socket_error());
+                ERR_add_error_data(4,
+                                   "hostname=", c->param_hostname,
+                                   " service=", c->param_service);
+                BIOerr(BIO_F_CONN_STATE, BIO_R_UNABLE_TO_CREATE_SOCKET);
+                goto exit_loop;
+            }
+            b->num = ret;
+            c->state = BIO_CONN_S_CONNECT;
+            break;
+
+        case BIO_CONN_S_CONNECT:
+            BIO_clear_retry_flags(b);
+            ret = BIO_connect(b->num, BIO_ADDRINFO_address(c->addr_iter),
+                              BIO_SOCK_KEEPALIVE | c->connect_mode);
+            b->retry_reason = 0;
+            if (ret == 0) {
+                if (BIO_sock_should_retry(ret)) {
+                    BIO_set_retry_special(b);
+                    c->state = BIO_CONN_S_BLOCKED_CONNECT;
+                    b->retry_reason = BIO_RR_CONNECT;
+                    ERR_clear_error();
+                } else if ((c->addr_iter = BIO_ADDRINFO_next(c->addr_iter))
+                           != NULL) {
+                    /*
+                     * if there are more addresses to try, do that first
+                     */
+                    BIO_closesocket(b->num);
+                    c->state = BIO_CONN_S_CREATE_SOCKET;
+                    ERR_clear_error();
+                    break;
+                } else {
+                    SYSerr(SYS_F_CONNECT, get_last_socket_error());
+                    ERR_add_error_data(4,
+                                       "hostname=", c->param_hostname,
+                                       " service=", c->param_service);
+                    BIOerr(BIO_F_CONN_STATE, BIO_R_CONNECT_ERROR);
+                }
+                goto exit_loop;
+            } else {
+                c->state = BIO_CONN_S_OK;
+            }
+            break;
+
+        case BIO_CONN_S_BLOCKED_CONNECT:
+            i = BIO_sock_error(b->num);
+            if (i) {
+                BIO_clear_retry_flags(b);
+                SYSerr(SYS_F_CONNECT, i);
+                ERR_add_error_data(4,
+                                   "hostname=", c->param_hostname,
+                                   " service=", c->param_service);
+                BIOerr(BIO_F_CONN_STATE, BIO_R_NBIO_CONNECT_ERROR);
+                ret = 0;
+                goto exit_loop;
+            } else
+                c->state = BIO_CONN_S_OK;
+            break;
+
+        case BIO_CONN_S_OK:
+            ret = 1;
+            goto exit_loop;
+        default:
+            /* abort(); */
+            goto exit_loop;
+        }
+
+        if (cb != NULL) {
+            if ((ret = cb((BIO *)b, c->state, ret)) == 0)
+                goto end;
+        }
+    }
+
+    /* Loop does not exit */
+ exit_loop:
+    if (cb != NULL)
+        ret = cb((BIO *)b, c->state, ret);
+ end:
+    return ret;
+}
+
+BIO_CONNECT *BIO_CONNECT_new(void)
+{
+    BIO_CONNECT *ret;
+
+    if ((ret = OPENSSL_zalloc(sizeof(*ret))) == NULL) {
+        BIOerr(BIO_F_BIO_CONNECT_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    ret->state = BIO_CONN_S_BEFORE;
+    ret->connect_family = BIO_FAMILY_IPANY;
+    return ret;
+}
+
+void BIO_CONNECT_free(BIO_CONNECT *a)
+{
+    if (a == NULL)
+        return;
+    OPENSSL_free(a->param_hostname);
+    OPENSSL_free(a->param_service);
+    BIO_ADDRINFO_free(a->addr_first);
+    OPENSSL_free(a);
+}
+
+const BIO_METHOD *BIO_s_connect(void)
+{
+    return &methods_connectp;
+}
+
+static int conn_new(BIO *bi)
+{
+    bi->init = 0;
+    bi->num = (int)INVALID_SOCKET;
+    bi->flags = 0;
+    if ((bi->ptr = (char *)BIO_CONNECT_new()) == NULL)
+        return 0;
+    else
+        return 1;
+}
+
+static void conn_close_socket(BIO *bio)
+{
+    BIO_CONNECT *c;
+
+    c = (BIO_CONNECT *)bio->ptr;
+    if (bio->num != (int)INVALID_SOCKET) {
+        /* Only do a shutdown if things were established */
+        if (c->state == BIO_CONN_S_OK)
+            shutdown(bio->num, 2);
+        BIO_closesocket(bio->num);
+        bio->num = (int)INVALID_SOCKET;
+    }
+}
+
+static int conn_free(BIO *a)
+{
+    BIO_CONNECT *data;
+
+    if (a == NULL)
+        return 0;
+    data = (BIO_CONNECT *)a->ptr;
+
+    if (a->shutdown) {
+        conn_close_socket(a);
+        BIO_CONNECT_free(data);
+        a->ptr = NULL;
+        a->flags = 0;
+        a->init = 0;
+    }
+    return 1;
+}
+
+static int conn_read(BIO *b, char *out, int outl)
+{
+    int ret = 0;
+    BIO_CONNECT *data;
+
+    data = (BIO_CONNECT *)b->ptr;
+    if (data->state != BIO_CONN_S_OK) {
+        ret = conn_state(b, data);
+        if (ret <= 0)
+            return ret;
+    }
+
+    if (out != NULL) {
+        clear_socket_error();
+        ret = readsocket(b->num, out, outl);
+        BIO_clear_retry_flags(b);
+        if (ret <= 0) {
+            if (BIO_sock_should_retry(ret))
+                BIO_set_retry_read(b);
+        }
+    }
+    return ret;
+}
+
+static int conn_write(BIO *b, const char *in, int inl)
+{
+    int ret;
+    BIO_CONNECT *data;
+
+    data = (BIO_CONNECT *)b->ptr;
+    if (data->state != BIO_CONN_S_OK) {
+        ret = conn_state(b, data);
+        if (ret <= 0)
+            return ret;
+    }
+
+    clear_socket_error();
+    ret = writesocket(b->num, in, inl);
+    BIO_clear_retry_flags(b);
+    if (ret <= 0) {
+        if (BIO_sock_should_retry(ret))
+            BIO_set_retry_write(b);
+    }
+    return ret;
+}
+
+static long conn_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    BIO *dbio;
+    int *ip;
+    const char **pptr = NULL;
+    long ret = 1;
+    BIO_CONNECT *data;
+
+    data = (BIO_CONNECT *)b->ptr;
+
+    switch (cmd) {
+    case BIO_CTRL_RESET:
+        ret = 0;
+        data->state = BIO_CONN_S_BEFORE;
+        conn_close_socket(b);
+        BIO_ADDRINFO_free(data->addr_first);
+        data->addr_first = NULL;
+        b->flags = 0;
+        break;
+    case BIO_C_DO_STATE_MACHINE:
+        /* use this one to start the connection */
+        if (data->state != BIO_CONN_S_OK)
+            ret = (long)conn_state(b, data);
+        else
+            ret = 1;
+        break;
+    case BIO_C_GET_CONNECT:
+        if (ptr != NULL) {
+            pptr = (const char **)ptr;
+            if (num == 0) {
+                *pptr = data->param_hostname;
+            } else if (num == 1) {
+                *pptr = data->param_service;
+            } else if (num == 2) {
+                *pptr = (const char *)BIO_ADDRINFO_address(data->addr_iter);
+            } else if (num == 3) {
+                switch (BIO_ADDRINFO_family(data->addr_iter)) {
+# ifdef AF_INET6
+                case AF_INET6:
+                    ret = BIO_FAMILY_IPV6;
+                    break;
+# endif
+                case AF_INET:
+                    ret = BIO_FAMILY_IPV4;
+                    break;
+                case 0:
+                    ret = data->connect_family;
+                    break;
+                default:
+                    ret = -1;
+                    break;
+                }
+            } else {
+                ret = 0;
+            }
+        } else {
+            ret = 0;
+        }
+        break;
+    case BIO_C_SET_CONNECT:
+        if (ptr != NULL) {
+            b->init = 1;
+            if (num == 0) {
+                char *hold_service = data->param_service;
+                /* We affect the hostname regardless.  However, the input
+                 * string might contain a host:service spec, so we must
+                 * parse it, which might or might not affect the service
+                 */
+                OPENSSL_free(data->param_hostname);
+                data->param_hostname = NULL;
+                ret = BIO_parse_hostserv(ptr,
+                                         &data->param_hostname,
+                                         &data->param_service,
+                                         BIO_PARSE_PRIO_HOST);
+                if (hold_service != data->param_service)
+                    OPENSSL_free(hold_service);
+            } else if (num == 1) {
+                OPENSSL_free(data->param_service);
+                data->param_service = BUF_strdup(ptr);
+            } else if (num == 2) {
+                const BIO_ADDR *addr = (const BIO_ADDR *)ptr;
+                if (ret) {
+                    data->param_hostname = BIO_ADDR_hostname_string(addr, 1);
+                    data->param_service = BIO_ADDR_service_string(addr, 1);
+                    BIO_ADDRINFO_free(data->addr_first);
+                    data->addr_first = NULL;
+                    data->addr_iter = NULL;
+                }
+            } else if (num == 3) {
+                data->connect_family = *(int *)ptr;
+            } else {
+                ret = 0;
+            }
+        }
+        break;
+    case BIO_C_SET_NBIO:
+        if (num != 0)
+            data->connect_mode |= BIO_SOCK_NONBLOCK;
+        else
+            data->connect_mode &= ~BIO_SOCK_NONBLOCK;
+        break;
+    case BIO_C_SET_CONNECT_MODE:
+        data->connect_mode = (int)num;
+        break;
+    case BIO_C_GET_FD:
+        if (b->init) {
+            ip = (int *)ptr;
+            if (ip != NULL)
+                *ip = b->num;
+            ret = b->num;
+        } else
+            ret = -1;
+        break;
+    case BIO_CTRL_GET_CLOSE:
+        ret = b->shutdown;
+        break;
+    case BIO_CTRL_SET_CLOSE:
+        b->shutdown = (int)num;
+        break;
+    case BIO_CTRL_PENDING:
+    case BIO_CTRL_WPENDING:
+        ret = 0;
+        break;
+    case BIO_CTRL_FLUSH:
+        break;
+    case BIO_CTRL_DUP:
+        {
+            dbio = (BIO *)ptr;
+            if (data->param_hostname)
+                BIO_set_conn_hostname(dbio, data->param_hostname);
+            if (data->param_service)
+                BIO_set_conn_port(dbio, data->param_service);
+            BIO_set_conn_ip_family(dbio, data->connect_family);
+            BIO_set_conn_mode(dbio, data->connect_mode);
+            /*
+             * FIXME: the cast of the function seems unlikely to be a good
+             * idea
+             */
+            (void)BIO_set_info_callback(dbio, data->info_callback);
+        }
+        break;
+    case BIO_CTRL_SET_CALLBACK:
+        ret = 0; /* use callback ctrl */
+        break;
+    case BIO_CTRL_GET_CALLBACK:
+        {
+            BIO_info_cb **fptr;
+
+            fptr = (BIO_info_cb **)ptr;
+            *fptr = data->info_callback;
+        }
+        break;
+    default:
+        ret = 0;
+        break;
+    }
+    return ret;
+}
+
+static long conn_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
+{
+    long ret = 1;
+    BIO_CONNECT *data;
+
+    data = (BIO_CONNECT *)b->ptr;
+
+    switch (cmd) {
+    case BIO_CTRL_SET_CALLBACK:
+        {
+            data->info_callback = fp;
+        }
+        break;
+    default:
+        ret = 0;
+        break;
+    }
+    return ret;
+}
+
+static int conn_puts(BIO *bp, const char *str)
+{
+    int n, ret;
+
+    n = strlen(str);
+    ret = conn_write(bp, str, n);
+    return ret;
+}
+
+BIO *BIO_new_connect(const char *str)
+{
+    BIO *ret;
+
+    ret = BIO_new(BIO_s_connect());
+    if (ret == NULL)
+        return NULL;
+    if (BIO_set_conn_hostname(ret, str))
+        return ret;
+    BIO_free(ret);
+    return NULL;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_dgram.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_dgram.c
new file mode 100644
index 000000000..d5fe5bb5a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_dgram.c
@@ -0,0 +1,1925 @@
+/*
+ * Copyright 2005-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <errno.h>
+
+#include "bio_lcl.h"
+#ifndef OPENSSL_NO_DGRAM
+
+# ifndef OPENSSL_NO_SCTP
+#  include <netinet/sctp.h>
+#  include <fcntl.h>
+#  define OPENSSL_SCTP_DATA_CHUNK_TYPE            0x00
+#  define OPENSSL_SCTP_FORWARD_CUM_TSN_CHUNK_TYPE 0xc0
+# endif
+
+# if defined(OPENSSL_SYS_LINUX) && !defined(IP_MTU)
+#  define IP_MTU      14        /* linux is lame */
+# endif
+
+# if OPENSSL_USE_IPV6 && !defined(IPPROTO_IPV6)
+#  define IPPROTO_IPV6 41       /* windows is lame */
+# endif
+
+# if defined(__FreeBSD__) && defined(IN6_IS_ADDR_V4MAPPED)
+/* Standard definition causes type-punning problems. */
+#  undef IN6_IS_ADDR_V4MAPPED
+#  define s6_addr32 __u6_addr.__u6_addr32
+#  define IN6_IS_ADDR_V4MAPPED(a)               \
+        (((a)->s6_addr32[0] == 0) &&          \
+         ((a)->s6_addr32[1] == 0) &&          \
+         ((a)->s6_addr32[2] == htonl(0x0000ffff)))
+# endif
+
+static int dgram_write(BIO *h, const char *buf, int num);
+static int dgram_read(BIO *h, char *buf, int size);
+static int dgram_puts(BIO *h, const char *str);
+static long dgram_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int dgram_new(BIO *h);
+static int dgram_free(BIO *data);
+static int dgram_clear(BIO *bio);
+
+# ifndef OPENSSL_NO_SCTP
+static int dgram_sctp_write(BIO *h, const char *buf, int num);
+static int dgram_sctp_read(BIO *h, char *buf, int size);
+static int dgram_sctp_puts(BIO *h, const char *str);
+static long dgram_sctp_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int dgram_sctp_new(BIO *h);
+static int dgram_sctp_free(BIO *data);
+#  ifdef SCTP_AUTHENTICATION_EVENT
+static void dgram_sctp_handle_auth_free_key_event(BIO *b, union sctp_notification
+                                                  *snp);
+#  endif
+# endif
+
+static int BIO_dgram_should_retry(int s);
+
+static void get_current_time(struct timeval *t);
+
+static const BIO_METHOD methods_dgramp = {
+    BIO_TYPE_DGRAM,
+    "datagram socket",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    dgram_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    dgram_read,
+    dgram_puts,
+    NULL,                       /* dgram_gets,         */
+    dgram_ctrl,
+    dgram_new,
+    dgram_free,
+    NULL,                       /* dgram_callback_ctrl */
+};
+
+# ifndef OPENSSL_NO_SCTP
+static const BIO_METHOD methods_dgramp_sctp = {
+    BIO_TYPE_DGRAM_SCTP,
+    "datagram sctp socket",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    dgram_sctp_write,
+    /* TODO: Convert to new style write function */
+    bread_conv,
+    dgram_sctp_read,
+    dgram_sctp_puts,
+    NULL,                       /* dgram_gets,         */
+    dgram_sctp_ctrl,
+    dgram_sctp_new,
+    dgram_sctp_free,
+    NULL,                       /* dgram_callback_ctrl */
+};
+# endif
+
+typedef struct bio_dgram_data_st {
+    BIO_ADDR peer;
+    unsigned int connected;
+    unsigned int _errno;
+    unsigned int mtu;
+    struct timeval next_timeout;
+    struct timeval socket_timeout;
+    unsigned int peekmode;
+} bio_dgram_data;
+
+# ifndef OPENSSL_NO_SCTP
+typedef struct bio_dgram_sctp_save_message_st {
+    BIO *bio;
+    char *data;
+    int length;
+} bio_dgram_sctp_save_message;
+
+typedef struct bio_dgram_sctp_data_st {
+    BIO_ADDR peer;
+    unsigned int connected;
+    unsigned int _errno;
+    unsigned int mtu;
+    struct bio_dgram_sctp_sndinfo sndinfo;
+    struct bio_dgram_sctp_rcvinfo rcvinfo;
+    struct bio_dgram_sctp_prinfo prinfo;
+    void (*handle_notifications) (BIO *bio, void *context, void *buf);
+    void *notification_context;
+    int in_handshake;
+    int ccs_rcvd;
+    int ccs_sent;
+    int save_shutdown;
+    int peer_auth_tested;
+} bio_dgram_sctp_data;
+# endif
+
+const BIO_METHOD *BIO_s_datagram(void)
+{
+    return &methods_dgramp;
+}
+
+BIO *BIO_new_dgram(int fd, int close_flag)
+{
+    BIO *ret;
+
+    ret = BIO_new(BIO_s_datagram());
+    if (ret == NULL)
+        return NULL;
+    BIO_set_fd(ret, fd, close_flag);
+    return ret;
+}
+
+static int dgram_new(BIO *bi)
+{
+    bio_dgram_data *data = OPENSSL_zalloc(sizeof(*data));
+
+    if (data == NULL)
+        return 0;
+    bi->ptr = data;
+    return 1;
+}
+
+static int dgram_free(BIO *a)
+{
+    bio_dgram_data *data;
+
+    if (a == NULL)
+        return 0;
+    if (!dgram_clear(a))
+        return 0;
+
+    data = (bio_dgram_data *)a->ptr;
+    OPENSSL_free(data);
+
+    return 1;
+}
+
+static int dgram_clear(BIO *a)
+{
+    if (a == NULL)
+        return 0;
+    if (a->shutdown) {
+        if (a->init) {
+            BIO_closesocket(a->num);
+        }
+        a->init = 0;
+        a->flags = 0;
+    }
+    return 1;
+}
+
+static void dgram_adjust_rcv_timeout(BIO *b)
+{
+# if defined(SO_RCVTIMEO)
+    bio_dgram_data *data = (bio_dgram_data *)b->ptr;
+    union {
+        size_t s;
+        int i;
+    } sz = {
+        0
+    };
+
+    /* Is a timer active? */
+    if (data->next_timeout.tv_sec > 0 || data->next_timeout.tv_usec > 0) {
+        struct timeval timenow, timeleft;
+
+        /* Read current socket timeout */
+#  ifdef OPENSSL_SYS_WINDOWS
+        int timeout;
+
+        sz.i = sizeof(timeout);
+        if (getsockopt(b->num, SOL_SOCKET, SO_RCVTIMEO,
+                       (void *)&timeout, &sz.i) < 0) {
+            perror("getsockopt");
+        } else {
+            data->socket_timeout.tv_sec = timeout / 1000;
+            data->socket_timeout.tv_usec = (timeout % 1000) * 1000;
+        }
+#  else
+        sz.i = sizeof(data->socket_timeout);
+        if (getsockopt(b->num, SOL_SOCKET, SO_RCVTIMEO,
+                       &(data->socket_timeout), (void *)&sz) < 0) {
+            perror("getsockopt");
+        } else if (sizeof(sz.s) != sizeof(sz.i) && sz.i == 0)
+            OPENSSL_assert(sz.s <= sizeof(data->socket_timeout));
+#  endif
+
+        /* Get current time */
+        get_current_time(&timenow);
+
+        /* Calculate time left until timer expires */
+        memcpy(&timeleft, &(data->next_timeout), sizeof(struct timeval));
+        if (timeleft.tv_usec < timenow.tv_usec) {
+            timeleft.tv_usec = 1000000 - timenow.tv_usec + timeleft.tv_usec;
+            timeleft.tv_sec--;
+        } else {
+            timeleft.tv_usec -= timenow.tv_usec;
+        }
+        if (timeleft.tv_sec < timenow.tv_sec) {
+            timeleft.tv_sec = 0;
+            timeleft.tv_usec = 1;
+        } else {
+            timeleft.tv_sec -= timenow.tv_sec;
+        }
+
+        /*
+         * Adjust socket timeout if next handshake message timer will expire
+         * earlier.
+         */
+        if ((data->socket_timeout.tv_sec == 0
+             && data->socket_timeout.tv_usec == 0)
+            || (data->socket_timeout.tv_sec > timeleft.tv_sec)
+            || (data->socket_timeout.tv_sec == timeleft.tv_sec
+                && data->socket_timeout.tv_usec >= timeleft.tv_usec)) {
+#  ifdef OPENSSL_SYS_WINDOWS
+            timeout = timeleft.tv_sec * 1000 + timeleft.tv_usec / 1000;
+            if (setsockopt(b->num, SOL_SOCKET, SO_RCVTIMEO,
+                           (void *)&timeout, sizeof(timeout)) < 0) {
+                perror("setsockopt");
+            }
+#  else
+            if (setsockopt(b->num, SOL_SOCKET, SO_RCVTIMEO, &timeleft,
+                           sizeof(struct timeval)) < 0) {
+                perror("setsockopt");
+            }
+#  endif
+        }
+    }
+# endif
+}
+
+static void dgram_reset_rcv_timeout(BIO *b)
+{
+# if defined(SO_RCVTIMEO)
+    bio_dgram_data *data = (bio_dgram_data *)b->ptr;
+
+    /* Is a timer active? */
+    if (data->next_timeout.tv_sec > 0 || data->next_timeout.tv_usec > 0) {
+#  ifdef OPENSSL_SYS_WINDOWS
+        int timeout = data->socket_timeout.tv_sec * 1000 +
+            data->socket_timeout.tv_usec / 1000;
+        if (setsockopt(b->num, SOL_SOCKET, SO_RCVTIMEO,
+                       (void *)&timeout, sizeof(timeout)) < 0) {
+            perror("setsockopt");
+        }
+#  else
+        if (setsockopt
+            (b->num, SOL_SOCKET, SO_RCVTIMEO, &(data->socket_timeout),
+             sizeof(struct timeval)) < 0) {
+            perror("setsockopt");
+        }
+#  endif
+    }
+# endif
+}
+
+static int dgram_read(BIO *b, char *out, int outl)
+{
+    int ret = 0;
+    bio_dgram_data *data = (bio_dgram_data *)b->ptr;
+    int flags = 0;
+
+    BIO_ADDR peer;
+    socklen_t len = sizeof(peer);
+
+    if (out != NULL) {
+        clear_socket_error();
+        memset(&peer, 0, sizeof(peer));
+        dgram_adjust_rcv_timeout(b);
+        if (data->peekmode)
+            flags = MSG_PEEK;
+        ret = recvfrom(b->num, out, outl, flags,
+                       BIO_ADDR_sockaddr_noconst(&peer), &len);
+
+        if (!data->connected && ret >= 0)
+            BIO_ctrl(b, BIO_CTRL_DGRAM_SET_PEER, 0, &peer);
+
+        BIO_clear_retry_flags(b);
+        if (ret < 0) {
+            if (BIO_dgram_should_retry(ret)) {
+                BIO_set_retry_read(b);
+                data->_errno = get_last_socket_error();
+            }
+        }
+
+        dgram_reset_rcv_timeout(b);
+    }
+    return ret;
+}
+
+static int dgram_write(BIO *b, const char *in, int inl)
+{
+    int ret;
+    bio_dgram_data *data = (bio_dgram_data *)b->ptr;
+    clear_socket_error();
+
+    if (data->connected)
+        ret = writesocket(b->num, in, inl);
+    else {
+        int peerlen = BIO_ADDR_sockaddr_size(&data->peer);
+
+        ret = sendto(b->num, in, inl, 0,
+                     BIO_ADDR_sockaddr(&data->peer), peerlen);
+    }
+
+    BIO_clear_retry_flags(b);
+    if (ret <= 0) {
+        if (BIO_dgram_should_retry(ret)) {
+            BIO_set_retry_write(b);
+            data->_errno = get_last_socket_error();
+        }
+    }
+    return ret;
+}
+
+static long dgram_get_mtu_overhead(bio_dgram_data *data)
+{
+    long ret;
+
+    switch (BIO_ADDR_family(&data->peer)) {
+    case AF_INET:
+        /*
+         * Assume this is UDP - 20 bytes for IP, 8 bytes for UDP
+         */
+        ret = 28;
+        break;
+# if OPENSSL_USE_IPV6
+    case AF_INET6:
+        {
+#  ifdef IN6_IS_ADDR_V4MAPPED
+            struct in6_addr tmp_addr;
+            if (BIO_ADDR_rawaddress(&data->peer, &tmp_addr, NULL)
+                && IN6_IS_ADDR_V4MAPPED(&tmp_addr))
+                /*
+                 * Assume this is UDP - 20 bytes for IP, 8 bytes for UDP
+                 */
+                ret = 28;
+            else
+#  endif
+            /*
+             * Assume this is UDP - 40 bytes for IP, 8 bytes for UDP
+             */
+            ret = 48;
+        }
+        break;
+# endif
+    default:
+        /* We don't know. Go with the historical default */
+        ret = 28;
+        break;
+    }
+    return ret;
+}
+
+static long dgram_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    long ret = 1;
+    int *ip;
+    bio_dgram_data *data = NULL;
+    int sockopt_val = 0;
+    int d_errno;
+# if defined(OPENSSL_SYS_LINUX) && (defined(IP_MTU_DISCOVER) || defined(IP_MTU))
+    socklen_t sockopt_len;      /* assume that system supporting IP_MTU is
+                                 * modern enough to define socklen_t */
+    socklen_t addr_len;
+    BIO_ADDR addr;
+# endif
+
+    data = (bio_dgram_data *)b->ptr;
+
+    switch (cmd) {
+    case BIO_CTRL_RESET:
+        num = 0;
+        ret = 0;
+        break;
+    case BIO_CTRL_INFO:
+        ret = 0;
+        break;
+    case BIO_C_SET_FD:
+        dgram_clear(b);
+        b->num = *((int *)ptr);
+        b->shutdown = (int)num;
+        b->init = 1;
+        break;
+    case BIO_C_GET_FD:
+        if (b->init) {
+            ip = (int *)ptr;
+            if (ip != NULL)
+                *ip = b->num;
+            ret = b->num;
+        } else
+            ret = -1;
+        break;
+    case BIO_CTRL_GET_CLOSE:
+        ret = b->shutdown;
+        break;
+    case BIO_CTRL_SET_CLOSE:
+        b->shutdown = (int)num;
+        break;
+    case BIO_CTRL_PENDING:
+    case BIO_CTRL_WPENDING:
+        ret = 0;
+        break;
+    case BIO_CTRL_DUP:
+    case BIO_CTRL_FLUSH:
+        ret = 1;
+        break;
+    case BIO_CTRL_DGRAM_CONNECT:
+        BIO_ADDR_make(&data->peer, BIO_ADDR_sockaddr((BIO_ADDR *)ptr));
+        break;
+        /* (Linux)kernel sets DF bit on outgoing IP packets */
+    case BIO_CTRL_DGRAM_MTU_DISCOVER:
+# if defined(OPENSSL_SYS_LINUX) && defined(IP_MTU_DISCOVER) && defined(IP_PMTUDISC_DO)
+        addr_len = (socklen_t) sizeof(addr);
+        memset(&addr, 0, sizeof(addr));
+        if (getsockname(b->num, &addr.sa, &addr_len) < 0) {
+            ret = 0;
+            break;
+        }
+        switch (addr.sa.sa_family) {
+        case AF_INET:
+            sockopt_val = IP_PMTUDISC_DO;
+            if ((ret = setsockopt(b->num, IPPROTO_IP, IP_MTU_DISCOVER,
+                                  &sockopt_val, sizeof(sockopt_val))) < 0)
+                perror("setsockopt");
+            break;
+#  if OPENSSL_USE_IPV6 && defined(IPV6_MTU_DISCOVER) && defined(IPV6_PMTUDISC_DO)
+        case AF_INET6:
+            sockopt_val = IPV6_PMTUDISC_DO;
+            if ((ret = setsockopt(b->num, IPPROTO_IPV6, IPV6_MTU_DISCOVER,
+                                  &sockopt_val, sizeof(sockopt_val))) < 0)
+                perror("setsockopt");
+            break;
+#  endif
+        default:
+            ret = -1;
+            break;
+        }
+# else
+        ret = -1;
+# endif
+        break;
+    case BIO_CTRL_DGRAM_QUERY_MTU:
+# if defined(OPENSSL_SYS_LINUX) && defined(IP_MTU)
+        addr_len = (socklen_t) sizeof(addr);
+        memset(&addr, 0, sizeof(addr));
+        if (getsockname(b->num, &addr.sa, &addr_len) < 0) {
+            ret = 0;
+            break;
+        }
+        sockopt_len = sizeof(sockopt_val);
+        switch (addr.sa.sa_family) {
+        case AF_INET:
+            if ((ret =
+                 getsockopt(b->num, IPPROTO_IP, IP_MTU, (void *)&sockopt_val,
+                            &sockopt_len)) < 0 || sockopt_val < 0) {
+                ret = 0;
+            } else {
+                /*
+                 * we assume that the transport protocol is UDP and no IP
+                 * options are used.
+                 */
+                data->mtu = sockopt_val - 8 - 20;
+                ret = data->mtu;
+            }
+            break;
+#  if OPENSSL_USE_IPV6 && defined(IPV6_MTU)
+        case AF_INET6:
+            if ((ret =
+                 getsockopt(b->num, IPPROTO_IPV6, IPV6_MTU,
+                            (void *)&sockopt_val, &sockopt_len)) < 0
+                || sockopt_val < 0) {
+                ret = 0;
+            } else {
+                /*
+                 * we assume that the transport protocol is UDP and no IPV6
+                 * options are used.
+                 */
+                data->mtu = sockopt_val - 8 - 40;
+                ret = data->mtu;
+            }
+            break;
+#  endif
+        default:
+            ret = 0;
+            break;
+        }
+# else
+        ret = 0;
+# endif
+        break;
+    case BIO_CTRL_DGRAM_GET_FALLBACK_MTU:
+        ret = -dgram_get_mtu_overhead(data);
+        switch (BIO_ADDR_family(&data->peer)) {
+        case AF_INET:
+            ret += 576;
+            break;
+# if OPENSSL_USE_IPV6
+        case AF_INET6:
+            {
+#  ifdef IN6_IS_ADDR_V4MAPPED
+                struct in6_addr tmp_addr;
+                if (BIO_ADDR_rawaddress(&data->peer, &tmp_addr, NULL)
+                    && IN6_IS_ADDR_V4MAPPED(&tmp_addr))
+                    ret += 576;
+                else
+#  endif
+                    ret += 1280;
+            }
+            break;
+# endif
+        default:
+            ret += 576;
+            break;
+        }
+        break;
+    case BIO_CTRL_DGRAM_GET_MTU:
+        return data->mtu;
+    case BIO_CTRL_DGRAM_SET_MTU:
+        data->mtu = num;
+        ret = num;
+        break;
+    case BIO_CTRL_DGRAM_SET_CONNECTED:
+        if (ptr != NULL) {
+            data->connected = 1;
+            BIO_ADDR_make(&data->peer, BIO_ADDR_sockaddr((BIO_ADDR *)ptr));
+        } else {
+            data->connected = 0;
+            memset(&data->peer, 0, sizeof(data->peer));
+        }
+        break;
+    case BIO_CTRL_DGRAM_GET_PEER:
+        ret = BIO_ADDR_sockaddr_size(&data->peer);
+        /* FIXME: if num < ret, we will only return part of an address.
+           That should bee an error, no? */
+        if (num == 0 || num > ret)
+            num = ret;
+        memcpy(ptr, &data->peer, (ret = num));
+        break;
+    case BIO_CTRL_DGRAM_SET_PEER:
+        BIO_ADDR_make(&data->peer, BIO_ADDR_sockaddr((BIO_ADDR *)ptr));
+        break;
+    case BIO_CTRL_DGRAM_SET_NEXT_TIMEOUT:
+        memcpy(&(data->next_timeout), ptr, sizeof(struct timeval));
+        break;
+# if defined(SO_RCVTIMEO)
+    case BIO_CTRL_DGRAM_SET_RECV_TIMEOUT:
+#  ifdef OPENSSL_SYS_WINDOWS
+        {
+            struct timeval *tv = (struct timeval *)ptr;
+            int timeout = tv->tv_sec * 1000 + tv->tv_usec / 1000;
+            if (setsockopt(b->num, SOL_SOCKET, SO_RCVTIMEO,
+                           (void *)&timeout, sizeof(timeout)) < 0) {
+                perror("setsockopt");
+                ret = -1;
+            }
+        }
+#  else
+        if (setsockopt(b->num, SOL_SOCKET, SO_RCVTIMEO, ptr,
+                       sizeof(struct timeval)) < 0) {
+            perror("setsockopt");
+            ret = -1;
+        }
+#  endif
+        break;
+    case BIO_CTRL_DGRAM_GET_RECV_TIMEOUT:
+        {
+            union {
+                size_t s;
+                int i;
+            } sz = {
+                0
+            };
+#  ifdef OPENSSL_SYS_WINDOWS
+            int timeout;
+            struct timeval *tv = (struct timeval *)ptr;
+
+            sz.i = sizeof(timeout);
+            if (getsockopt(b->num, SOL_SOCKET, SO_RCVTIMEO,
+                           (void *)&timeout, &sz.i) < 0) {
+                perror("getsockopt");
+                ret = -1;
+            } else {
+                tv->tv_sec = timeout / 1000;
+                tv->tv_usec = (timeout % 1000) * 1000;
+                ret = sizeof(*tv);
+            }
+#  else
+            sz.i = sizeof(struct timeval);
+            if (getsockopt(b->num, SOL_SOCKET, SO_RCVTIMEO,
+                           ptr, (void *)&sz) < 0) {
+                perror("getsockopt");
+                ret = -1;
+            } else if (sizeof(sz.s) != sizeof(sz.i) && sz.i == 0) {
+                OPENSSL_assert(sz.s <= sizeof(struct timeval));
+                ret = (int)sz.s;
+            } else
+                ret = sz.i;
+#  endif
+        }
+        break;
+# endif
+# if defined(SO_SNDTIMEO)
+    case BIO_CTRL_DGRAM_SET_SEND_TIMEOUT:
+#  ifdef OPENSSL_SYS_WINDOWS
+        {
+            struct timeval *tv = (struct timeval *)ptr;
+            int timeout = tv->tv_sec * 1000 + tv->tv_usec / 1000;
+            if (setsockopt(b->num, SOL_SOCKET, SO_SNDTIMEO,
+                           (void *)&timeout, sizeof(timeout)) < 0) {
+                perror("setsockopt");
+                ret = -1;
+            }
+        }
+#  else
+        if (setsockopt(b->num, SOL_SOCKET, SO_SNDTIMEO, ptr,
+                       sizeof(struct timeval)) < 0) {
+            perror("setsockopt");
+            ret = -1;
+        }
+#  endif
+        break;
+    case BIO_CTRL_DGRAM_GET_SEND_TIMEOUT:
+        {
+            union {
+                size_t s;
+                int i;
+            } sz = {
+                0
+            };
+#  ifdef OPENSSL_SYS_WINDOWS
+            int timeout;
+            struct timeval *tv = (struct timeval *)ptr;
+
+            sz.i = sizeof(timeout);
+            if (getsockopt(b->num, SOL_SOCKET, SO_SNDTIMEO,
+                           (void *)&timeout, &sz.i) < 0) {
+                perror("getsockopt");
+                ret = -1;
+            } else {
+                tv->tv_sec = timeout / 1000;
+                tv->tv_usec = (timeout % 1000) * 1000;
+                ret = sizeof(*tv);
+            }
+#  else
+            sz.i = sizeof(struct timeval);
+            if (getsockopt(b->num, SOL_SOCKET, SO_SNDTIMEO,
+                           ptr, (void *)&sz) < 0) {
+                perror("getsockopt");
+                ret = -1;
+            } else if (sizeof(sz.s) != sizeof(sz.i) && sz.i == 0) {
+                OPENSSL_assert(sz.s <= sizeof(struct timeval));
+                ret = (int)sz.s;
+            } else
+                ret = sz.i;
+#  endif
+        }
+        break;
+# endif
+    case BIO_CTRL_DGRAM_GET_SEND_TIMER_EXP:
+        /* fall-through */
+    case BIO_CTRL_DGRAM_GET_RECV_TIMER_EXP:
+# ifdef OPENSSL_SYS_WINDOWS
+        d_errno = (data->_errno == WSAETIMEDOUT);
+# else
+        d_errno = (data->_errno == EAGAIN);
+# endif
+        if (d_errno) {
+            ret = 1;
+            data->_errno = 0;
+        } else
+            ret = 0;
+        break;
+# ifdef EMSGSIZE
+    case BIO_CTRL_DGRAM_MTU_EXCEEDED:
+        if (data->_errno == EMSGSIZE) {
+            ret = 1;
+            data->_errno = 0;
+        } else
+            ret = 0;
+        break;
+# endif
+    case BIO_CTRL_DGRAM_SET_DONT_FRAG:
+        sockopt_val = num ? 1 : 0;
+
+        switch (data->peer.sa.sa_family) {
+        case AF_INET:
+# if defined(IP_DONTFRAG)
+            if ((ret = setsockopt(b->num, IPPROTO_IP, IP_DONTFRAG,
+                                  &sockopt_val, sizeof(sockopt_val))) < 0) {
+                perror("setsockopt");
+                ret = -1;
+            }
+# elif defined(OPENSSL_SYS_LINUX) && defined(IP_MTU_DISCOVER) && defined (IP_PMTUDISC_PROBE)
+            if ((sockopt_val = num ? IP_PMTUDISC_PROBE : IP_PMTUDISC_DONT),
+                (ret = setsockopt(b->num, IPPROTO_IP, IP_MTU_DISCOVER,
+                                  &sockopt_val, sizeof(sockopt_val))) < 0) {
+                perror("setsockopt");
+                ret = -1;
+            }
+# elif defined(OPENSSL_SYS_WINDOWS) && defined(IP_DONTFRAGMENT)
+            if ((ret = setsockopt(b->num, IPPROTO_IP, IP_DONTFRAGMENT,
+                                  (const char *)&sockopt_val,
+                                  sizeof(sockopt_val))) < 0) {
+                perror("setsockopt");
+                ret = -1;
+            }
+# else
+            ret = -1;
+# endif
+            break;
+# if OPENSSL_USE_IPV6
+        case AF_INET6:
+#  if defined(IPV6_DONTFRAG)
+            if ((ret = setsockopt(b->num, IPPROTO_IPV6, IPV6_DONTFRAG,
+                                  (const void *)&sockopt_val,
+                                  sizeof(sockopt_val))) < 0) {
+                perror("setsockopt");
+                ret = -1;
+            }
+#  elif defined(OPENSSL_SYS_LINUX) && defined(IPV6_MTUDISCOVER)
+            if ((sockopt_val = num ? IP_PMTUDISC_PROBE : IP_PMTUDISC_DONT),
+                (ret = setsockopt(b->num, IPPROTO_IPV6, IPV6_MTU_DISCOVER,
+                                  &sockopt_val, sizeof(sockopt_val))) < 0) {
+                perror("setsockopt");
+                ret = -1;
+            }
+#  else
+            ret = -1;
+#  endif
+            break;
+# endif
+        default:
+            ret = -1;
+            break;
+        }
+        break;
+    case BIO_CTRL_DGRAM_GET_MTU_OVERHEAD:
+        ret = dgram_get_mtu_overhead(data);
+        break;
+
+    /*
+     * BIO_CTRL_DGRAM_SCTP_SET_IN_HANDSHAKE is used here for compatibility
+     * reasons. When BIO_CTRL_DGRAM_SET_PEEK_MODE was first defined its value
+     * was incorrectly clashing with BIO_CTRL_DGRAM_SCTP_SET_IN_HANDSHAKE. The
+     * value has been updated to a non-clashing value. However to preserve
+     * binary compatiblity we now respond to both the old value and the new one
+     */
+    case BIO_CTRL_DGRAM_SCTP_SET_IN_HANDSHAKE:
+    case BIO_CTRL_DGRAM_SET_PEEK_MODE:
+        data->peekmode = (unsigned int)num;
+        break;
+    default:
+        ret = 0;
+        break;
+    }
+    return ret;
+}
+
+static int dgram_puts(BIO *bp, const char *str)
+{
+    int n, ret;
+
+    n = strlen(str);
+    ret = dgram_write(bp, str, n);
+    return ret;
+}
+
+# ifndef OPENSSL_NO_SCTP
+const BIO_METHOD *BIO_s_datagram_sctp(void)
+{
+    return &methods_dgramp_sctp;
+}
+
+BIO *BIO_new_dgram_sctp(int fd, int close_flag)
+{
+    BIO *bio;
+    int ret, optval = 20000;
+    int auth_data = 0, auth_forward = 0;
+    unsigned char *p;
+    struct sctp_authchunk auth;
+    struct sctp_authchunks *authchunks;
+    socklen_t sockopt_len;
+#  ifdef SCTP_AUTHENTICATION_EVENT
+#   ifdef SCTP_EVENT
+    struct sctp_event event;
+#   else
+    struct sctp_event_subscribe event;
+#   endif
+#  endif
+
+    bio = BIO_new(BIO_s_datagram_sctp());
+    if (bio == NULL)
+        return NULL;
+    BIO_set_fd(bio, fd, close_flag);
+
+    /* Activate SCTP-AUTH for DATA and FORWARD-TSN chunks */
+    auth.sauth_chunk = OPENSSL_SCTP_DATA_CHUNK_TYPE;
+    ret =
+        setsockopt(fd, IPPROTO_SCTP, SCTP_AUTH_CHUNK, &auth,
+                   sizeof(struct sctp_authchunk));
+    if (ret < 0) {
+        BIO_vfree(bio);
+        BIOerr(BIO_F_BIO_NEW_DGRAM_SCTP, ERR_R_SYS_LIB);
+        ERR_add_error_data(1, "Ensure SCTP AUTH chunks are enabled in kernel");
+        return NULL;
+    }
+    auth.sauth_chunk = OPENSSL_SCTP_FORWARD_CUM_TSN_CHUNK_TYPE;
+    ret =
+        setsockopt(fd, IPPROTO_SCTP, SCTP_AUTH_CHUNK, &auth,
+                   sizeof(struct sctp_authchunk));
+    if (ret < 0) {
+        BIO_vfree(bio);
+        BIOerr(BIO_F_BIO_NEW_DGRAM_SCTP, ERR_R_SYS_LIB);
+        ERR_add_error_data(1, "Ensure SCTP AUTH chunks are enabled in kernel");
+        return NULL;
+    }
+
+    /*
+     * Test if activation was successful. When using accept(), SCTP-AUTH has
+     * to be activated for the listening socket already, otherwise the
+     * connected socket won't use it. Similarly with connect(): the socket
+     * prior to connection must be activated for SCTP-AUTH
+     */
+    sockopt_len = (socklen_t) (sizeof(sctp_assoc_t) + 256 * sizeof(uint8_t));
+    authchunks = OPENSSL_zalloc(sockopt_len);
+    if (authchunks == NULL) {
+        BIO_vfree(bio);
+        return NULL;
+    }
+    ret = getsockopt(fd, IPPROTO_SCTP, SCTP_LOCAL_AUTH_CHUNKS, authchunks,
+                   &sockopt_len);
+    if (ret < 0) {
+        OPENSSL_free(authchunks);
+        BIO_vfree(bio);
+        return NULL;
+    }
+
+    for (p = (unsigned char *)authchunks->gauth_chunks;
+         p < (unsigned char *)authchunks + sockopt_len;
+         p += sizeof(uint8_t)) {
+        if (*p == OPENSSL_SCTP_DATA_CHUNK_TYPE)
+            auth_data = 1;
+        if (*p == OPENSSL_SCTP_FORWARD_CUM_TSN_CHUNK_TYPE)
+            auth_forward = 1;
+    }
+
+    OPENSSL_free(authchunks);
+
+    if (!auth_data || !auth_forward) {
+        BIO_vfree(bio);
+        BIOerr(BIO_F_BIO_NEW_DGRAM_SCTP, ERR_R_SYS_LIB);
+        ERR_add_error_data(1,
+                           "Ensure SCTP AUTH chunks are enabled on the "
+                           "underlying socket");
+        return NULL;
+    }
+
+#  ifdef SCTP_AUTHENTICATION_EVENT
+#   ifdef SCTP_EVENT
+    memset(&event, 0, sizeof(event));
+    event.se_assoc_id = 0;
+    event.se_type = SCTP_AUTHENTICATION_EVENT;
+    event.se_on = 1;
+    ret =
+        setsockopt(fd, IPPROTO_SCTP, SCTP_EVENT, &event,
+                   sizeof(struct sctp_event));
+    if (ret < 0) {
+        BIO_vfree(bio);
+        return NULL;
+    }
+#   else
+    sockopt_len = (socklen_t) sizeof(struct sctp_event_subscribe);
+    ret = getsockopt(fd, IPPROTO_SCTP, SCTP_EVENTS, &event, &sockopt_len);
+    if (ret < 0) {
+        BIO_vfree(bio);
+        return NULL;
+    }
+
+    event.sctp_authentication_event = 1;
+
+    ret =
+        setsockopt(fd, IPPROTO_SCTP, SCTP_EVENTS, &event,
+                   sizeof(struct sctp_event_subscribe));
+    if (ret < 0) {
+        BIO_vfree(bio);
+        return NULL;
+    }
+#   endif
+#  endif
+
+    /*
+     * Disable partial delivery by setting the min size larger than the max
+     * record size of 2^14 + 2048 + 13
+     */
+    ret =
+        setsockopt(fd, IPPROTO_SCTP, SCTP_PARTIAL_DELIVERY_POINT, &optval,
+                   sizeof(optval));
+    if (ret < 0) {
+        BIO_vfree(bio);
+        return NULL;
+    }
+
+    return bio;
+}
+
+int BIO_dgram_is_sctp(BIO *bio)
+{
+    return (BIO_method_type(bio) == BIO_TYPE_DGRAM_SCTP);
+}
+
+static int dgram_sctp_new(BIO *bi)
+{
+    bio_dgram_sctp_data *data = NULL;
+
+    bi->init = 0;
+    bi->num = 0;
+    if ((data = OPENSSL_zalloc(sizeof(*data))) == NULL) {
+        BIOerr(BIO_F_DGRAM_SCTP_NEW, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+#  ifdef SCTP_PR_SCTP_NONE
+    data->prinfo.pr_policy = SCTP_PR_SCTP_NONE;
+#  endif
+    bi->ptr = data;
+
+    bi->flags = 0;
+    return 1;
+}
+
+static int dgram_sctp_free(BIO *a)
+{
+    bio_dgram_sctp_data *data;
+
+    if (a == NULL)
+        return 0;
+    if (!dgram_clear(a))
+        return 0;
+
+    data = (bio_dgram_sctp_data *) a->ptr;
+    if (data != NULL)
+        OPENSSL_free(data);
+
+    return 1;
+}
+
+#  ifdef SCTP_AUTHENTICATION_EVENT
+void dgram_sctp_handle_auth_free_key_event(BIO *b,
+                                           union sctp_notification *snp)
+{
+    int ret;
+    struct sctp_authkey_event *authkeyevent = &snp->sn_auth_event;
+
+    if (authkeyevent->auth_indication == SCTP_AUTH_FREE_KEY) {
+        struct sctp_authkeyid authkeyid;
+
+        /* delete key */
+        authkeyid.scact_keynumber = authkeyevent->auth_keynumber;
+        ret = setsockopt(b->num, IPPROTO_SCTP, SCTP_AUTH_DELETE_KEY,
+                         &authkeyid, sizeof(struct sctp_authkeyid));
+    }
+}
+#  endif
+
+static int dgram_sctp_read(BIO *b, char *out, int outl)
+{
+    int ret = 0, n = 0, i, optval;
+    socklen_t optlen;
+    bio_dgram_sctp_data *data = (bio_dgram_sctp_data *) b->ptr;
+    union sctp_notification *snp;
+    struct msghdr msg;
+    struct iovec iov;
+    struct cmsghdr *cmsg;
+    char cmsgbuf[512];
+
+    if (out != NULL) {
+        clear_socket_error();
+
+        do {
+            memset(&data->rcvinfo, 0, sizeof(data->rcvinfo));
+            iov.iov_base = out;
+            iov.iov_len = outl;
+            msg.msg_name = NULL;
+            msg.msg_namelen = 0;
+            msg.msg_iov = &iov;
+            msg.msg_iovlen = 1;
+            msg.msg_control = cmsgbuf;
+            msg.msg_controllen = 512;
+            msg.msg_flags = 0;
+            n = recvmsg(b->num, &msg, 0);
+
+            if (n <= 0) {
+                if (n < 0)
+                    ret = n;
+                break;
+            }
+
+            if (msg.msg_controllen > 0) {
+                for (cmsg = CMSG_FIRSTHDR(&msg); cmsg;
+                     cmsg = CMSG_NXTHDR(&msg, cmsg)) {
+                    if (cmsg->cmsg_level != IPPROTO_SCTP)
+                        continue;
+#  ifdef SCTP_RCVINFO
+                    if (cmsg->cmsg_type == SCTP_RCVINFO) {
+                        struct sctp_rcvinfo *rcvinfo;
+
+                        rcvinfo = (struct sctp_rcvinfo *)CMSG_DATA(cmsg);
+                        data->rcvinfo.rcv_sid = rcvinfo->rcv_sid;
+                        data->rcvinfo.rcv_ssn = rcvinfo->rcv_ssn;
+                        data->rcvinfo.rcv_flags = rcvinfo->rcv_flags;
+                        data->rcvinfo.rcv_ppid = rcvinfo->rcv_ppid;
+                        data->rcvinfo.rcv_tsn = rcvinfo->rcv_tsn;
+                        data->rcvinfo.rcv_cumtsn = rcvinfo->rcv_cumtsn;
+                        data->rcvinfo.rcv_context = rcvinfo->rcv_context;
+                    }
+#  endif
+#  ifdef SCTP_SNDRCV
+                    if (cmsg->cmsg_type == SCTP_SNDRCV) {
+                        struct sctp_sndrcvinfo *sndrcvinfo;
+
+                        sndrcvinfo =
+                            (struct sctp_sndrcvinfo *)CMSG_DATA(cmsg);
+                        data->rcvinfo.rcv_sid = sndrcvinfo->sinfo_stream;
+                        data->rcvinfo.rcv_ssn = sndrcvinfo->sinfo_ssn;
+                        data->rcvinfo.rcv_flags = sndrcvinfo->sinfo_flags;
+                        data->rcvinfo.rcv_ppid = sndrcvinfo->sinfo_ppid;
+                        data->rcvinfo.rcv_tsn = sndrcvinfo->sinfo_tsn;
+                        data->rcvinfo.rcv_cumtsn = sndrcvinfo->sinfo_cumtsn;
+                        data->rcvinfo.rcv_context = sndrcvinfo->sinfo_context;
+                    }
+#  endif
+                }
+            }
+
+            if (msg.msg_flags & MSG_NOTIFICATION) {
+                snp = (union sctp_notification *)out;
+                if (snp->sn_header.sn_type == SCTP_SENDER_DRY_EVENT) {
+#  ifdef SCTP_EVENT
+                    struct sctp_event event;
+#  else
+                    struct sctp_event_subscribe event;
+                    socklen_t eventsize;
+#  endif
+
+                    /* disable sender dry event */
+#  ifdef SCTP_EVENT
+                    memset(&event, 0, sizeof(event));
+                    event.se_assoc_id = 0;
+                    event.se_type = SCTP_SENDER_DRY_EVENT;
+                    event.se_on = 0;
+                    i = setsockopt(b->num, IPPROTO_SCTP, SCTP_EVENT, &event,
+                                   sizeof(struct sctp_event));
+                    if (i < 0) {
+                        ret = i;
+                        break;
+                    }
+#  else
+                    eventsize = sizeof(struct sctp_event_subscribe);
+                    i = getsockopt(b->num, IPPROTO_SCTP, SCTP_EVENTS, &event,
+                                   &eventsize);
+                    if (i < 0) {
+                        ret = i;
+                        break;
+                    }
+
+                    event.sctp_sender_dry_event = 0;
+
+                    i = setsockopt(b->num, IPPROTO_SCTP, SCTP_EVENTS, &event,
+                                   sizeof(struct sctp_event_subscribe));
+                    if (i < 0) {
+                        ret = i;
+                        break;
+                    }
+#  endif
+                }
+#  ifdef SCTP_AUTHENTICATION_EVENT
+                if (snp->sn_header.sn_type == SCTP_AUTHENTICATION_EVENT)
+                    dgram_sctp_handle_auth_free_key_event(b, snp);
+#  endif
+
+                if (data->handle_notifications != NULL)
+                    data->handle_notifications(b, data->notification_context,
+                                               (void *)out);
+
+                memset(out, 0, outl);
+            } else
+                ret += n;
+        }
+        while ((msg.msg_flags & MSG_NOTIFICATION) && (msg.msg_flags & MSG_EOR)
+               && (ret < outl));
+
+        if (ret > 0 && !(msg.msg_flags & MSG_EOR)) {
+            /* Partial message read, this should never happen! */
+
+            /*
+             * The buffer was too small, this means the peer sent a message
+             * that was larger than allowed.
+             */
+            if (ret == outl)
+                return -1;
+
+            /*
+             * Test if socket buffer can handle max record size (2^14 + 2048
+             * + 13)
+             */
+            optlen = (socklen_t) sizeof(int);
+            ret = getsockopt(b->num, SOL_SOCKET, SO_RCVBUF, &optval, &optlen);
+            if (ret >= 0)
+                OPENSSL_assert(optval >= 18445);
+
+            /*
+             * Test if SCTP doesn't partially deliver below max record size
+             * (2^14 + 2048 + 13)
+             */
+            optlen = (socklen_t) sizeof(int);
+            ret =
+                getsockopt(b->num, IPPROTO_SCTP, SCTP_PARTIAL_DELIVERY_POINT,
+                           &optval, &optlen);
+            if (ret >= 0)
+                OPENSSL_assert(optval >= 18445);
+
+            /*
+             * Partially delivered notification??? Probably a bug....
+             */
+            OPENSSL_assert(!(msg.msg_flags & MSG_NOTIFICATION));
+
+            /*
+             * Everything seems ok till now, so it's most likely a message
+             * dropped by PR-SCTP.
+             */
+            memset(out, 0, outl);
+            BIO_set_retry_read(b);
+            return -1;
+        }
+
+        BIO_clear_retry_flags(b);
+        if (ret < 0) {
+            if (BIO_dgram_should_retry(ret)) {
+                BIO_set_retry_read(b);
+                data->_errno = get_last_socket_error();
+            }
+        }
+
+        /* Test if peer uses SCTP-AUTH before continuing */
+        if (!data->peer_auth_tested) {
+            int ii, auth_data = 0, auth_forward = 0;
+            unsigned char *p;
+            struct sctp_authchunks *authchunks;
+
+            optlen =
+                (socklen_t) (sizeof(sctp_assoc_t) + 256 * sizeof(uint8_t));
+            authchunks = OPENSSL_malloc(optlen);
+            if (authchunks == NULL) {
+                BIOerr(BIO_F_DGRAM_SCTP_READ, ERR_R_MALLOC_FAILURE);
+                return -1;
+            }
+            memset(authchunks, 0, optlen);
+            ii = getsockopt(b->num, IPPROTO_SCTP, SCTP_PEER_AUTH_CHUNKS,
+                            authchunks, &optlen);
+
+            if (ii >= 0)
+                for (p = (unsigned char *)authchunks->gauth_chunks;
+                     p < (unsigned char *)authchunks + optlen;
+                     p += sizeof(uint8_t)) {
+                    if (*p == OPENSSL_SCTP_DATA_CHUNK_TYPE)
+                        auth_data = 1;
+                    if (*p == OPENSSL_SCTP_FORWARD_CUM_TSN_CHUNK_TYPE)
+                        auth_forward = 1;
+                }
+
+            OPENSSL_free(authchunks);
+
+            if (!auth_data || !auth_forward) {
+                BIOerr(BIO_F_DGRAM_SCTP_READ, BIO_R_CONNECT_ERROR);
+                return -1;
+            }
+
+            data->peer_auth_tested = 1;
+        }
+    }
+    return ret;
+}
+
+/*
+ * dgram_sctp_write - send message on SCTP socket
+ * @b: BIO to write to
+ * @in: data to send
+ * @inl: amount of bytes in @in to send
+ *
+ * Returns -1 on error or the sent amount of bytes on success
+ */
+static int dgram_sctp_write(BIO *b, const char *in, int inl)
+{
+    int ret;
+    bio_dgram_sctp_data *data = (bio_dgram_sctp_data *) b->ptr;
+    struct bio_dgram_sctp_sndinfo *sinfo = &(data->sndinfo);
+    struct bio_dgram_sctp_prinfo *pinfo = &(data->prinfo);
+    struct bio_dgram_sctp_sndinfo handshake_sinfo;
+    struct iovec iov[1];
+    struct msghdr msg;
+    struct cmsghdr *cmsg;
+#  if defined(SCTP_SNDINFO) && defined(SCTP_PRINFO)
+    char cmsgbuf[CMSG_SPACE(sizeof(struct sctp_sndinfo)) +
+                 CMSG_SPACE(sizeof(struct sctp_prinfo))];
+    struct sctp_sndinfo *sndinfo;
+    struct sctp_prinfo *prinfo;
+#  else
+    char cmsgbuf[CMSG_SPACE(sizeof(struct sctp_sndrcvinfo))];
+    struct sctp_sndrcvinfo *sndrcvinfo;
+#  endif
+
+    clear_socket_error();
+
+    /*
+     * If we're send anything else than application data, disable all user
+     * parameters and flags.
+     */
+    if (in[0] != 23) {
+        memset(&handshake_sinfo, 0, sizeof(handshake_sinfo));
+#  ifdef SCTP_SACK_IMMEDIATELY
+        handshake_sinfo.snd_flags = SCTP_SACK_IMMEDIATELY;
+#  endif
+        sinfo = &handshake_sinfo;
+    }
+
+    /* We can only send a shutdown alert if the socket is dry */
+    if (data->save_shutdown) {
+        ret = BIO_dgram_sctp_wait_for_dry(b);
+        if (ret < 0)
+            return -1;
+        if (ret == 0) {
+            BIO_clear_retry_flags(b);
+            BIO_set_retry_write(b);
+            return -1;
+        }
+    }
+
+    iov[0].iov_base = (char *)in;
+    iov[0].iov_len = inl;
+    msg.msg_name = NULL;
+    msg.msg_namelen = 0;
+    msg.msg_iov = iov;
+    msg.msg_iovlen = 1;
+    msg.msg_control = (caddr_t) cmsgbuf;
+    msg.msg_controllen = 0;
+    msg.msg_flags = 0;
+#  if defined(SCTP_SNDINFO) && defined(SCTP_PRINFO)
+    cmsg = (struct cmsghdr *)cmsgbuf;
+    cmsg->cmsg_level = IPPROTO_SCTP;
+    cmsg->cmsg_type = SCTP_SNDINFO;
+    cmsg->cmsg_len = CMSG_LEN(sizeof(struct sctp_sndinfo));
+    sndinfo = (struct sctp_sndinfo *)CMSG_DATA(cmsg);
+    memset(sndinfo, 0, sizeof(*sndinfo));
+    sndinfo->snd_sid = sinfo->snd_sid;
+    sndinfo->snd_flags = sinfo->snd_flags;
+    sndinfo->snd_ppid = sinfo->snd_ppid;
+    sndinfo->snd_context = sinfo->snd_context;
+    msg.msg_controllen += CMSG_SPACE(sizeof(struct sctp_sndinfo));
+
+    cmsg =
+        (struct cmsghdr *)&cmsgbuf[CMSG_SPACE(sizeof(struct sctp_sndinfo))];
+    cmsg->cmsg_level = IPPROTO_SCTP;
+    cmsg->cmsg_type = SCTP_PRINFO;
+    cmsg->cmsg_len = CMSG_LEN(sizeof(struct sctp_prinfo));
+    prinfo = (struct sctp_prinfo *)CMSG_DATA(cmsg);
+    memset(prinfo, 0, sizeof(*prinfo));
+    prinfo->pr_policy = pinfo->pr_policy;
+    prinfo->pr_value = pinfo->pr_value;
+    msg.msg_controllen += CMSG_SPACE(sizeof(struct sctp_prinfo));
+#  else
+    cmsg = (struct cmsghdr *)cmsgbuf;
+    cmsg->cmsg_level = IPPROTO_SCTP;
+    cmsg->cmsg_type = SCTP_SNDRCV;
+    cmsg->cmsg_len = CMSG_LEN(sizeof(struct sctp_sndrcvinfo));
+    sndrcvinfo = (struct sctp_sndrcvinfo *)CMSG_DATA(cmsg);
+    memset(sndrcvinfo, 0, sizeof(*sndrcvinfo));
+    sndrcvinfo->sinfo_stream = sinfo->snd_sid;
+    sndrcvinfo->sinfo_flags = sinfo->snd_flags;
+#   ifdef __FreeBSD__
+    sndrcvinfo->sinfo_flags |= pinfo->pr_policy;
+#   endif
+    sndrcvinfo->sinfo_ppid = sinfo->snd_ppid;
+    sndrcvinfo->sinfo_context = sinfo->snd_context;
+    sndrcvinfo->sinfo_timetolive = pinfo->pr_value;
+    msg.msg_controllen += CMSG_SPACE(sizeof(struct sctp_sndrcvinfo));
+#  endif
+
+    ret = sendmsg(b->num, &msg, 0);
+
+    BIO_clear_retry_flags(b);
+    if (ret <= 0) {
+        if (BIO_dgram_should_retry(ret)) {
+            BIO_set_retry_write(b);
+            data->_errno = get_last_socket_error();
+        }
+    }
+    return ret;
+}
+
+static long dgram_sctp_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    long ret = 1;
+    bio_dgram_sctp_data *data = NULL;
+    socklen_t sockopt_len = 0;
+    struct sctp_authkeyid authkeyid;
+    struct sctp_authkey *authkey = NULL;
+
+    data = (bio_dgram_sctp_data *) b->ptr;
+
+    switch (cmd) {
+    case BIO_CTRL_DGRAM_QUERY_MTU:
+        /*
+         * Set to maximum (2^14) and ignore user input to enable transport
+         * protocol fragmentation. Returns always 2^14.
+         */
+        data->mtu = 16384;
+        ret = data->mtu;
+        break;
+    case BIO_CTRL_DGRAM_SET_MTU:
+        /*
+         * Set to maximum (2^14) and ignore input to enable transport
+         * protocol fragmentation. Returns always 2^14.
+         */
+        data->mtu = 16384;
+        ret = data->mtu;
+        break;
+    case BIO_CTRL_DGRAM_SET_CONNECTED:
+    case BIO_CTRL_DGRAM_CONNECT:
+        /* Returns always -1. */
+        ret = -1;
+        break;
+    case BIO_CTRL_DGRAM_SET_NEXT_TIMEOUT:
+        /*
+         * SCTP doesn't need the DTLS timer Returns always 1.
+         */
+        break;
+    case BIO_CTRL_DGRAM_GET_MTU_OVERHEAD:
+        /*
+         * We allow transport protocol fragmentation so this is irrelevant
+         */
+        ret = 0;
+        break;
+    case BIO_CTRL_DGRAM_SCTP_SET_IN_HANDSHAKE:
+        if (num > 0)
+            data->in_handshake = 1;
+        else
+            data->in_handshake = 0;
+
+        ret =
+            setsockopt(b->num, IPPROTO_SCTP, SCTP_NODELAY,
+                       &data->in_handshake, sizeof(int));
+        break;
+    case BIO_CTRL_DGRAM_SCTP_ADD_AUTH_KEY:
+        /*
+         * New shared key for SCTP AUTH. Returns 0 on success, -1 otherwise.
+         */
+
+        /* Get active key */
+        sockopt_len = sizeof(struct sctp_authkeyid);
+        ret =
+            getsockopt(b->num, IPPROTO_SCTP, SCTP_AUTH_ACTIVE_KEY, &authkeyid,
+                       &sockopt_len);
+        if (ret < 0)
+            break;
+
+        /* Add new key */
+        sockopt_len = sizeof(struct sctp_authkey) + 64 * sizeof(uint8_t);
+        authkey = OPENSSL_malloc(sockopt_len);
+        if (authkey == NULL) {
+            ret = -1;
+            break;
+        }
+        memset(authkey, 0, sockopt_len);
+        authkey->sca_keynumber = authkeyid.scact_keynumber + 1;
+#  ifndef __FreeBSD__
+        /*
+         * This field is missing in FreeBSD 8.2 and earlier, and FreeBSD 8.3
+         * and higher work without it.
+         */
+        authkey->sca_keylength = 64;
+#  endif
+        memcpy(&authkey->sca_key[0], ptr, 64 * sizeof(uint8_t));
+
+        ret =
+            setsockopt(b->num, IPPROTO_SCTP, SCTP_AUTH_KEY, authkey,
+                       sockopt_len);
+        OPENSSL_free(authkey);
+        authkey = NULL;
+        if (ret < 0)
+            break;
+
+        /* Reset active key */
+        ret = setsockopt(b->num, IPPROTO_SCTP, SCTP_AUTH_ACTIVE_KEY,
+                         &authkeyid, sizeof(struct sctp_authkeyid));
+        if (ret < 0)
+            break;
+
+        break;
+    case BIO_CTRL_DGRAM_SCTP_NEXT_AUTH_KEY:
+        /* Returns 0 on success, -1 otherwise. */
+
+        /* Get active key */
+        sockopt_len = sizeof(struct sctp_authkeyid);
+        ret =
+            getsockopt(b->num, IPPROTO_SCTP, SCTP_AUTH_ACTIVE_KEY, &authkeyid,
+                       &sockopt_len);
+        if (ret < 0)
+            break;
+
+        /* Set active key */
+        authkeyid.scact_keynumber = authkeyid.scact_keynumber + 1;
+        ret = setsockopt(b->num, IPPROTO_SCTP, SCTP_AUTH_ACTIVE_KEY,
+                         &authkeyid, sizeof(struct sctp_authkeyid));
+        if (ret < 0)
+            break;
+
+        /*
+         * CCS has been sent, so remember that and fall through to check if
+         * we need to deactivate an old key
+         */
+        data->ccs_sent = 1;
+        /* fall-through */
+
+    case BIO_CTRL_DGRAM_SCTP_AUTH_CCS_RCVD:
+        /* Returns 0 on success, -1 otherwise. */
+
+        /*
+         * Has this command really been called or is this just a
+         * fall-through?
+         */
+        if (cmd == BIO_CTRL_DGRAM_SCTP_AUTH_CCS_RCVD)
+            data->ccs_rcvd = 1;
+
+        /*
+         * CSS has been both, received and sent, so deactivate an old key
+         */
+        if (data->ccs_rcvd == 1 && data->ccs_sent == 1) {
+            /* Get active key */
+            sockopt_len = sizeof(struct sctp_authkeyid);
+            ret =
+                getsockopt(b->num, IPPROTO_SCTP, SCTP_AUTH_ACTIVE_KEY,
+                           &authkeyid, &sockopt_len);
+            if (ret < 0)
+                break;
+
+            /*
+             * Deactivate key or delete second last key if
+             * SCTP_AUTHENTICATION_EVENT is not available.
+             */
+            authkeyid.scact_keynumber = authkeyid.scact_keynumber - 1;
+#  ifdef SCTP_AUTH_DEACTIVATE_KEY
+            sockopt_len = sizeof(struct sctp_authkeyid);
+            ret = setsockopt(b->num, IPPROTO_SCTP, SCTP_AUTH_DEACTIVATE_KEY,
+                             &authkeyid, sockopt_len);
+            if (ret < 0)
+                break;
+#  endif
+#  ifndef SCTP_AUTHENTICATION_EVENT
+            if (authkeyid.scact_keynumber > 0) {
+                authkeyid.scact_keynumber = authkeyid.scact_keynumber - 1;
+                ret = setsockopt(b->num, IPPROTO_SCTP, SCTP_AUTH_DELETE_KEY,
+                                 &authkeyid, sizeof(struct sctp_authkeyid));
+                if (ret < 0)
+                    break;
+            }
+#  endif
+
+            data->ccs_rcvd = 0;
+            data->ccs_sent = 0;
+        }
+        break;
+    case BIO_CTRL_DGRAM_SCTP_GET_SNDINFO:
+        /* Returns the size of the copied struct. */
+        if (num > (long)sizeof(struct bio_dgram_sctp_sndinfo))
+            num = sizeof(struct bio_dgram_sctp_sndinfo);
+
+        memcpy(ptr, &(data->sndinfo), num);
+        ret = num;
+        break;
+    case BIO_CTRL_DGRAM_SCTP_SET_SNDINFO:
+        /* Returns the size of the copied struct. */
+        if (num > (long)sizeof(struct bio_dgram_sctp_sndinfo))
+            num = sizeof(struct bio_dgram_sctp_sndinfo);
+
+        memcpy(&(data->sndinfo), ptr, num);
+        break;
+    case BIO_CTRL_DGRAM_SCTP_GET_RCVINFO:
+        /* Returns the size of the copied struct. */
+        if (num > (long)sizeof(struct bio_dgram_sctp_rcvinfo))
+            num = sizeof(struct bio_dgram_sctp_rcvinfo);
+
+        memcpy(ptr, &data->rcvinfo, num);
+
+        ret = num;
+        break;
+    case BIO_CTRL_DGRAM_SCTP_SET_RCVINFO:
+        /* Returns the size of the copied struct. */
+        if (num > (long)sizeof(struct bio_dgram_sctp_rcvinfo))
+            num = sizeof(struct bio_dgram_sctp_rcvinfo);
+
+        memcpy(&(data->rcvinfo), ptr, num);
+        break;
+    case BIO_CTRL_DGRAM_SCTP_GET_PRINFO:
+        /* Returns the size of the copied struct. */
+        if (num > (long)sizeof(struct bio_dgram_sctp_prinfo))
+            num = sizeof(struct bio_dgram_sctp_prinfo);
+
+        memcpy(ptr, &(data->prinfo), num);
+        ret = num;
+        break;
+    case BIO_CTRL_DGRAM_SCTP_SET_PRINFO:
+        /* Returns the size of the copied struct. */
+        if (num > (long)sizeof(struct bio_dgram_sctp_prinfo))
+            num = sizeof(struct bio_dgram_sctp_prinfo);
+
+        memcpy(&(data->prinfo), ptr, num);
+        break;
+    case BIO_CTRL_DGRAM_SCTP_SAVE_SHUTDOWN:
+        /* Returns always 1. */
+        if (num > 0)
+            data->save_shutdown = 1;
+        else
+            data->save_shutdown = 0;
+        break;
+
+    default:
+        /*
+         * Pass to default ctrl function to process SCTP unspecific commands
+         */
+        ret = dgram_ctrl(b, cmd, num, ptr);
+        break;
+    }
+    return ret;
+}
+
+int BIO_dgram_sctp_notification_cb(BIO *b,
+                                   void (*handle_notifications) (BIO *bio,
+                                                                 void
+                                                                 *context,
+                                                                 void *buf),
+                                   void *context)
+{
+    bio_dgram_sctp_data *data = (bio_dgram_sctp_data *) b->ptr;
+
+    if (handle_notifications != NULL) {
+        data->handle_notifications = handle_notifications;
+        data->notification_context = context;
+    } else
+        return -1;
+
+    return 0;
+}
+
+/*
+ * BIO_dgram_sctp_wait_for_dry - Wait for SCTP SENDER_DRY event
+ * @b: The BIO to check for the dry event
+ *
+ * Wait until the peer confirms all packets have been received, and so that
+ * our kernel doesn't have anything to send anymore.  This is only received by
+ * the peer's kernel, not the application.
+ *
+ * Returns:
+ * -1 on error
+ *  0 when not dry yet
+ *  1 when dry
+ */
+int BIO_dgram_sctp_wait_for_dry(BIO *b)
+{
+    int is_dry = 0;
+    int sockflags = 0;
+    int n, ret;
+    union sctp_notification snp;
+    struct msghdr msg;
+    struct iovec iov;
+#  ifdef SCTP_EVENT
+    struct sctp_event event;
+#  else
+    struct sctp_event_subscribe event;
+    socklen_t eventsize;
+#  endif
+    bio_dgram_sctp_data *data = (bio_dgram_sctp_data *) b->ptr;
+
+    /* set sender dry event */
+#  ifdef SCTP_EVENT
+    memset(&event, 0, sizeof(event));
+    event.se_assoc_id = 0;
+    event.se_type = SCTP_SENDER_DRY_EVENT;
+    event.se_on = 1;
+    ret =
+        setsockopt(b->num, IPPROTO_SCTP, SCTP_EVENT, &event,
+                   sizeof(struct sctp_event));
+#  else
+    eventsize = sizeof(struct sctp_event_subscribe);
+    ret = getsockopt(b->num, IPPROTO_SCTP, SCTP_EVENTS, &event, &eventsize);
+    if (ret < 0)
+        return -1;
+
+    event.sctp_sender_dry_event = 1;
+
+    ret =
+        setsockopt(b->num, IPPROTO_SCTP, SCTP_EVENTS, &event,
+                   sizeof(struct sctp_event_subscribe));
+#  endif
+    if (ret < 0)
+        return -1;
+
+    /* peek for notification */
+    memset(&snp, 0, sizeof(snp));
+    iov.iov_base = (char *)&snp;
+    iov.iov_len = sizeof(union sctp_notification);
+    msg.msg_name = NULL;
+    msg.msg_namelen = 0;
+    msg.msg_iov = &iov;
+    msg.msg_iovlen = 1;
+    msg.msg_control = NULL;
+    msg.msg_controllen = 0;
+    msg.msg_flags = 0;
+
+    n = recvmsg(b->num, &msg, MSG_PEEK);
+    if (n <= 0) {
+        if ((n < 0) && (get_last_socket_error() != EAGAIN)
+            && (get_last_socket_error() != EWOULDBLOCK))
+            return -1;
+        else
+            return 0;
+    }
+
+    /* if we find a notification, process it and try again if necessary */
+    while (msg.msg_flags & MSG_NOTIFICATION) {
+        memset(&snp, 0, sizeof(snp));
+        iov.iov_base = (char *)&snp;
+        iov.iov_len = sizeof(union sctp_notification);
+        msg.msg_name = NULL;
+        msg.msg_namelen = 0;
+        msg.msg_iov = &iov;
+        msg.msg_iovlen = 1;
+        msg.msg_control = NULL;
+        msg.msg_controllen = 0;
+        msg.msg_flags = 0;
+
+        n = recvmsg(b->num, &msg, 0);
+        if (n <= 0) {
+            if ((n < 0) && (get_last_socket_error() != EAGAIN)
+                && (get_last_socket_error() != EWOULDBLOCK))
+                return -1;
+            else
+                return is_dry;
+        }
+
+        if (snp.sn_header.sn_type == SCTP_SENDER_DRY_EVENT) {
+            is_dry = 1;
+
+            /* disable sender dry event */
+#  ifdef SCTP_EVENT
+            memset(&event, 0, sizeof(event));
+            event.se_assoc_id = 0;
+            event.se_type = SCTP_SENDER_DRY_EVENT;
+            event.se_on = 0;
+            ret =
+                setsockopt(b->num, IPPROTO_SCTP, SCTP_EVENT, &event,
+                           sizeof(struct sctp_event));
+#  else
+            eventsize = (socklen_t) sizeof(struct sctp_event_subscribe);
+            ret =
+                getsockopt(b->num, IPPROTO_SCTP, SCTP_EVENTS, &event,
+                           &eventsize);
+            if (ret < 0)
+                return -1;
+
+            event.sctp_sender_dry_event = 0;
+
+            ret =
+                setsockopt(b->num, IPPROTO_SCTP, SCTP_EVENTS, &event,
+                           sizeof(struct sctp_event_subscribe));
+#  endif
+            if (ret < 0)
+                return -1;
+        }
+#  ifdef SCTP_AUTHENTICATION_EVENT
+        if (snp.sn_header.sn_type == SCTP_AUTHENTICATION_EVENT)
+            dgram_sctp_handle_auth_free_key_event(b, &snp);
+#  endif
+
+        if (data->handle_notifications != NULL)
+            data->handle_notifications(b, data->notification_context,
+                                       (void *)&snp);
+
+        /* found notification, peek again */
+        memset(&snp, 0, sizeof(snp));
+        iov.iov_base = (char *)&snp;
+        iov.iov_len = sizeof(union sctp_notification);
+        msg.msg_name = NULL;
+        msg.msg_namelen = 0;
+        msg.msg_iov = &iov;
+        msg.msg_iovlen = 1;
+        msg.msg_control = NULL;
+        msg.msg_controllen = 0;
+        msg.msg_flags = 0;
+
+        /* if we have seen the dry already, don't wait */
+        if (is_dry) {
+            sockflags = fcntl(b->num, F_GETFL, 0);
+            fcntl(b->num, F_SETFL, O_NONBLOCK);
+        }
+
+        n = recvmsg(b->num, &msg, MSG_PEEK);
+
+        if (is_dry) {
+            fcntl(b->num, F_SETFL, sockflags);
+        }
+
+        if (n <= 0) {
+            if ((n < 0) && (get_last_socket_error() != EAGAIN)
+                && (get_last_socket_error() != EWOULDBLOCK))
+                return -1;
+            else
+                return is_dry;
+        }
+    }
+
+    /* read anything else */
+    return is_dry;
+}
+
+int BIO_dgram_sctp_msg_waiting(BIO *b)
+{
+    int n, sockflags;
+    union sctp_notification snp;
+    struct msghdr msg;
+    struct iovec iov;
+    bio_dgram_sctp_data *data = (bio_dgram_sctp_data *) b->ptr;
+
+    /* Check if there are any messages waiting to be read */
+    do {
+        memset(&snp, 0, sizeof(snp));
+        iov.iov_base = (char *)&snp;
+        iov.iov_len = sizeof(union sctp_notification);
+        msg.msg_name = NULL;
+        msg.msg_namelen = 0;
+        msg.msg_iov = &iov;
+        msg.msg_iovlen = 1;
+        msg.msg_control = NULL;
+        msg.msg_controllen = 0;
+        msg.msg_flags = 0;
+
+        sockflags = fcntl(b->num, F_GETFL, 0);
+        fcntl(b->num, F_SETFL, O_NONBLOCK);
+        n = recvmsg(b->num, &msg, MSG_PEEK);
+        fcntl(b->num, F_SETFL, sockflags);
+
+        /* if notification, process and try again */
+        if (n > 0 && (msg.msg_flags & MSG_NOTIFICATION)) {
+#  ifdef SCTP_AUTHENTICATION_EVENT
+            if (snp.sn_header.sn_type == SCTP_AUTHENTICATION_EVENT)
+                dgram_sctp_handle_auth_free_key_event(b, &snp);
+#  endif
+
+            memset(&snp, 0, sizeof(snp));
+            iov.iov_base = (char *)&snp;
+            iov.iov_len = sizeof(union sctp_notification);
+            msg.msg_name = NULL;
+            msg.msg_namelen = 0;
+            msg.msg_iov = &iov;
+            msg.msg_iovlen = 1;
+            msg.msg_control = NULL;
+            msg.msg_controllen = 0;
+            msg.msg_flags = 0;
+            n = recvmsg(b->num, &msg, 0);
+
+            if (data->handle_notifications != NULL)
+                data->handle_notifications(b, data->notification_context,
+                                           (void *)&snp);
+        }
+
+    } while (n > 0 && (msg.msg_flags & MSG_NOTIFICATION));
+
+    /* Return 1 if there is a message to be read, return 0 otherwise. */
+    if (n > 0)
+        return 1;
+    else
+        return 0;
+}
+
+static int dgram_sctp_puts(BIO *bp, const char *str)
+{
+    int n, ret;
+
+    n = strlen(str);
+    ret = dgram_sctp_write(bp, str, n);
+    return ret;
+}
+# endif
+
+static int BIO_dgram_should_retry(int i)
+{
+    int err;
+
+    if ((i == 0) || (i == -1)) {
+        err = get_last_socket_error();
+
+# if defined(OPENSSL_SYS_WINDOWS)
+        /*
+         * If the socket return value (i) is -1 and err is unexpectedly 0 at
+         * this point, the error code was overwritten by another system call
+         * before this error handling is called.
+         */
+# endif
+
+        return BIO_dgram_non_fatal_error(err);
+    }
+    return 0;
+}
+
+int BIO_dgram_non_fatal_error(int err)
+{
+    switch (err) {
+# if defined(OPENSSL_SYS_WINDOWS)
+#  if defined(WSAEWOULDBLOCK)
+    case WSAEWOULDBLOCK:
+#  endif
+# endif
+
+# ifdef EWOULDBLOCK
+#  ifdef WSAEWOULDBLOCK
+#   if WSAEWOULDBLOCK != EWOULDBLOCK
+    case EWOULDBLOCK:
+#   endif
+#  else
+    case EWOULDBLOCK:
+#  endif
+# endif
+
+# ifdef EINTR
+    case EINTR:
+# endif
+
+# ifdef EAGAIN
+#  if EWOULDBLOCK != EAGAIN
+    case EAGAIN:
+#  endif
+# endif
+
+# ifdef EPROTO
+    case EPROTO:
+# endif
+
+# ifdef EINPROGRESS
+    case EINPROGRESS:
+# endif
+
+# ifdef EALREADY
+    case EALREADY:
+# endif
+
+        return 1;
+    default:
+        break;
+    }
+    return 0;
+}
+
+static void get_current_time(struct timeval *t)
+{
+# if defined(_WIN32)
+    SYSTEMTIME st;
+    union {
+        unsigned __int64 ul;
+        FILETIME ft;
+    } now;
+
+    GetSystemTime(&st);
+    SystemTimeToFileTime(&st, &now.ft);
+#  ifdef  __MINGW32__
+    now.ul -= 116444736000000000ULL;
+#  else
+    now.ul -= 116444736000000000UI64; /* re-bias to 1/1/1970 */
+#  endif
+    t->tv_sec = (long)(now.ul / 10000000);
+    t->tv_usec = ((int)(now.ul % 10000000)) / 10;
+# else
+    gettimeofday(t, NULL);
+# endif
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_fd.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_fd.c
new file mode 100644
index 000000000..5bc539c90
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_fd.c
@@ -0,0 +1,280 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <errno.h>
+
+#include "bio_lcl.h"
+
+#if defined(OPENSSL_NO_POSIX_IO)
+/*
+ * Dummy placeholder for BIO_s_fd...
+ */
+BIO *BIO_new_fd(int fd, int close_flag)
+{
+    return NULL;
+}
+
+int BIO_fd_non_fatal_error(int err)
+{
+    return 0;
+}
+
+int BIO_fd_should_retry(int i)
+{
+    return 0;
+}
+
+const BIO_METHOD *BIO_s_fd(void)
+{
+    return NULL;
+}
+#else
+/*
+ * As for unconditional usage of "UPLINK" interface in this module.
+ * Trouble is that unlike Unix file descriptors [which are indexes
+ * in kernel-side per-process table], corresponding descriptors on
+ * platforms which require "UPLINK" interface seem to be indexes
+ * in a user-land, non-global table. Well, in fact they are indexes
+ * in stdio _iob[], and recall that _iob[] was the very reason why
+ * "UPLINK" interface was introduced in first place. But one way on
+ * another. Neither libcrypto or libssl use this BIO meaning that
+ * file descriptors can only be provided by application. Therefore
+ * "UPLINK" calls are due...
+ */
+static int fd_write(BIO *h, const char *buf, int num);
+static int fd_read(BIO *h, char *buf, int size);
+static int fd_puts(BIO *h, const char *str);
+static int fd_gets(BIO *h, char *buf, int size);
+static long fd_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int fd_new(BIO *h);
+static int fd_free(BIO *data);
+int BIO_fd_should_retry(int s);
+
+static const BIO_METHOD methods_fdp = {
+    BIO_TYPE_FD,
+    "file descriptor",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    fd_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    fd_read,
+    fd_puts,
+    fd_gets,
+    fd_ctrl,
+    fd_new,
+    fd_free,
+    NULL,                       /* fd_callback_ctrl */
+};
+
+const BIO_METHOD *BIO_s_fd(void)
+{
+    return &methods_fdp;
+}
+
+BIO *BIO_new_fd(int fd, int close_flag)
+{
+    BIO *ret;
+    ret = BIO_new(BIO_s_fd());
+    if (ret == NULL)
+        return NULL;
+    BIO_set_fd(ret, fd, close_flag);
+    return ret;
+}
+
+static int fd_new(BIO *bi)
+{
+    bi->init = 0;
+    bi->num = -1;
+    bi->ptr = NULL;
+    bi->flags = BIO_FLAGS_UPLINK; /* essentially redundant */
+    return 1;
+}
+
+static int fd_free(BIO *a)
+{
+    if (a == NULL)
+        return 0;
+    if (a->shutdown) {
+        if (a->init) {
+            UP_close(a->num);
+        }
+        a->init = 0;
+        a->flags = BIO_FLAGS_UPLINK;
+    }
+    return 1;
+}
+
+static int fd_read(BIO *b, char *out, int outl)
+{
+    int ret = 0;
+
+    if (out != NULL) {
+        clear_sys_error();
+        ret = UP_read(b->num, out, outl);
+        BIO_clear_retry_flags(b);
+        if (ret <= 0) {
+            if (BIO_fd_should_retry(ret))
+                BIO_set_retry_read(b);
+        }
+    }
+    return ret;
+}
+
+static int fd_write(BIO *b, const char *in, int inl)
+{
+    int ret;
+    clear_sys_error();
+    ret = UP_write(b->num, in, inl);
+    BIO_clear_retry_flags(b);
+    if (ret <= 0) {
+        if (BIO_fd_should_retry(ret))
+            BIO_set_retry_write(b);
+    }
+    return ret;
+}
+
+static long fd_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    long ret = 1;
+    int *ip;
+
+    switch (cmd) {
+    case BIO_CTRL_RESET:
+        num = 0;
+        /* fall thru */
+    case BIO_C_FILE_SEEK:
+        ret = (long)UP_lseek(b->num, num, 0);
+        break;
+    case BIO_C_FILE_TELL:
+    case BIO_CTRL_INFO:
+        ret = (long)UP_lseek(b->num, 0, 1);
+        break;
+    case BIO_C_SET_FD:
+        fd_free(b);
+        b->num = *((int *)ptr);
+        b->shutdown = (int)num;
+        b->init = 1;
+        break;
+    case BIO_C_GET_FD:
+        if (b->init) {
+            ip = (int *)ptr;
+            if (ip != NULL)
+                *ip = b->num;
+            ret = b->num;
+        } else
+            ret = -1;
+        break;
+    case BIO_CTRL_GET_CLOSE:
+        ret = b->shutdown;
+        break;
+    case BIO_CTRL_SET_CLOSE:
+        b->shutdown = (int)num;
+        break;
+    case BIO_CTRL_PENDING:
+    case BIO_CTRL_WPENDING:
+        ret = 0;
+        break;
+    case BIO_CTRL_DUP:
+    case BIO_CTRL_FLUSH:
+        ret = 1;
+        break;
+    default:
+        ret = 0;
+        break;
+    }
+    return ret;
+}
+
+static int fd_puts(BIO *bp, const char *str)
+{
+    int n, ret;
+
+    n = strlen(str);
+    ret = fd_write(bp, str, n);
+    return ret;
+}
+
+static int fd_gets(BIO *bp, char *buf, int size)
+{
+    int ret = 0;
+    char *ptr = buf;
+    char *end = buf + size - 1;
+
+    while (ptr < end && fd_read(bp, ptr, 1) > 0) {
+        if (*ptr++ == '\n')
+           break;
+    }
+
+    ptr[0] = '\0';
+
+    if (buf[0] != '\0')
+        ret = strlen(buf);
+    return ret;
+}
+
+int BIO_fd_should_retry(int i)
+{
+    int err;
+
+    if ((i == 0) || (i == -1)) {
+        err = get_last_sys_error();
+
+        return BIO_fd_non_fatal_error(err);
+    }
+    return 0;
+}
+
+int BIO_fd_non_fatal_error(int err)
+{
+    switch (err) {
+
+# ifdef EWOULDBLOCK
+#  ifdef WSAEWOULDBLOCK
+#   if WSAEWOULDBLOCK != EWOULDBLOCK
+    case EWOULDBLOCK:
+#   endif
+#  else
+    case EWOULDBLOCK:
+#  endif
+# endif
+
+# if defined(ENOTCONN)
+    case ENOTCONN:
+# endif
+
+# ifdef EINTR
+    case EINTR:
+# endif
+
+# ifdef EAGAIN
+#  if EWOULDBLOCK != EAGAIN
+    case EAGAIN:
+#  endif
+# endif
+
+# ifdef EPROTO
+    case EPROTO:
+# endif
+
+# ifdef EINPROGRESS
+    case EINPROGRESS:
+# endif
+
+# ifdef EALREADY
+    case EALREADY:
+# endif
+        return 1;
+    default:
+        break;
+    }
+    return 0;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_file.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_file.c
new file mode 100644
index 000000000..057344783
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_file.c
@@ -0,0 +1,427 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_BSS_FILE_C
+# define HEADER_BSS_FILE_C
+
+# if defined(__linux) || defined(__sun) || defined(__hpux)
+/*
+ * Following definition aliases fopen to fopen64 on above mentioned
+ * platforms. This makes it possible to open and sequentially access files
+ * larger than 2GB from 32-bit application. It does not allow to traverse
+ * them beyond 2GB with fseek/ftell, but on the other hand *no* 32-bit
+ * platform permits that, not with fseek/ftell. Not to mention that breaking
+ * 2GB limit for seeking would require surgery to *our* API. But sequential
+ * access suffices for practical cases when you can run into large files,
+ * such as fingerprinting, so we can let API alone. For reference, the list
+ * of 32-bit platforms which allow for sequential access of large files
+ * without extra "magic" comprise *BSD, Darwin, IRIX...
+ */
+#  ifndef _FILE_OFFSET_BITS
+#   define _FILE_OFFSET_BITS 64
+#  endif
+# endif
+
+# include <stdio.h>
+# include <errno.h>
+# include "bio_lcl.h"
+# include <openssl/err.h>
+
+# if !defined(OPENSSL_NO_STDIO)
+
+static int file_write(BIO *h, const char *buf, int num);
+static int file_read(BIO *h, char *buf, int size);
+static int file_puts(BIO *h, const char *str);
+static int file_gets(BIO *h, char *str, int size);
+static long file_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int file_new(BIO *h);
+static int file_free(BIO *data);
+static const BIO_METHOD methods_filep = {
+    BIO_TYPE_FILE,
+    "FILE pointer",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    file_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    file_read,
+    file_puts,
+    file_gets,
+    file_ctrl,
+    file_new,
+    file_free,
+    NULL,                      /* file_callback_ctrl */
+};
+
+BIO *BIO_new_file(const char *filename, const char *mode)
+{
+    BIO  *ret;
+    FILE *file = openssl_fopen(filename, mode);
+    int fp_flags = BIO_CLOSE;
+
+    if (strchr(mode, 'b') == NULL)
+        fp_flags |= BIO_FP_TEXT;
+
+    if (file == NULL) {
+        SYSerr(SYS_F_FOPEN, get_last_sys_error());
+        ERR_add_error_data(5, "fopen('", filename, "','", mode, "')");
+        if (errno == ENOENT
+# ifdef ENXIO
+            || errno == ENXIO
+# endif
+            )
+            BIOerr(BIO_F_BIO_NEW_FILE, BIO_R_NO_SUCH_FILE);
+        else
+            BIOerr(BIO_F_BIO_NEW_FILE, ERR_R_SYS_LIB);
+        return NULL;
+    }
+    if ((ret = BIO_new(BIO_s_file())) == NULL) {
+        fclose(file);
+        return NULL;
+    }
+
+    BIO_clear_flags(ret, BIO_FLAGS_UPLINK); /* we did fopen -> we disengage
+                                             * UPLINK */
+    BIO_set_fp(ret, file, fp_flags);
+    return ret;
+}
+
+BIO *BIO_new_fp(FILE *stream, int close_flag)
+{
+    BIO *ret;
+
+    if ((ret = BIO_new(BIO_s_file())) == NULL)
+        return NULL;
+
+    /* redundant flag, left for documentation purposes */
+    BIO_set_flags(ret, BIO_FLAGS_UPLINK);
+    BIO_set_fp(ret, stream, close_flag);
+    return ret;
+}
+
+const BIO_METHOD *BIO_s_file(void)
+{
+    return &methods_filep;
+}
+
+static int file_new(BIO *bi)
+{
+    bi->init = 0;
+    bi->num = 0;
+    bi->ptr = NULL;
+    bi->flags = BIO_FLAGS_UPLINK; /* default to UPLINK */
+    return 1;
+}
+
+static int file_free(BIO *a)
+{
+    if (a == NULL)
+        return 0;
+    if (a->shutdown) {
+        if ((a->init) && (a->ptr != NULL)) {
+            if (a->flags & BIO_FLAGS_UPLINK)
+                UP_fclose(a->ptr);
+            else
+                fclose(a->ptr);
+            a->ptr = NULL;
+            a->flags = BIO_FLAGS_UPLINK;
+        }
+        a->init = 0;
+    }
+    return 1;
+}
+
+static int file_read(BIO *b, char *out, int outl)
+{
+    int ret = 0;
+
+    if (b->init && (out != NULL)) {
+        if (b->flags & BIO_FLAGS_UPLINK)
+            ret = UP_fread(out, 1, (int)outl, b->ptr);
+        else
+            ret = fread(out, 1, (int)outl, (FILE *)b->ptr);
+        if (ret == 0
+            && (b->flags & BIO_FLAGS_UPLINK) ? UP_ferror((FILE *)b->ptr) :
+                                               ferror((FILE *)b->ptr)) {
+            SYSerr(SYS_F_FREAD, get_last_sys_error());
+            BIOerr(BIO_F_FILE_READ, ERR_R_SYS_LIB);
+            ret = -1;
+        }
+    }
+    return ret;
+}
+
+static int file_write(BIO *b, const char *in, int inl)
+{
+    int ret = 0;
+
+    if (b->init && (in != NULL)) {
+        if (b->flags & BIO_FLAGS_UPLINK)
+            ret = UP_fwrite(in, (int)inl, 1, b->ptr);
+        else
+            ret = fwrite(in, (int)inl, 1, (FILE *)b->ptr);
+        if (ret)
+            ret = inl;
+        /* ret=fwrite(in,1,(int)inl,(FILE *)b->ptr); */
+        /*
+         * according to Tim Hudson <tjh@openssl.org>, the commented out
+         * version above can cause 'inl' write calls under some stupid stdio
+         * implementations (VMS)
+         */
+    }
+    return ret;
+}
+
+static long file_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    long ret = 1;
+    FILE *fp = (FILE *)b->ptr;
+    FILE **fpp;
+    char p[4];
+    int st;
+
+    switch (cmd) {
+    case BIO_C_FILE_SEEK:
+    case BIO_CTRL_RESET:
+        if (b->flags & BIO_FLAGS_UPLINK)
+            ret = (long)UP_fseek(b->ptr, num, 0);
+        else
+            ret = (long)fseek(fp, num, 0);
+        break;
+    case BIO_CTRL_EOF:
+        if (b->flags & BIO_FLAGS_UPLINK)
+            ret = (long)UP_feof(fp);
+        else
+            ret = (long)feof(fp);
+        break;
+    case BIO_C_FILE_TELL:
+    case BIO_CTRL_INFO:
+        if (b->flags & BIO_FLAGS_UPLINK)
+            ret = UP_ftell(b->ptr);
+        else
+            ret = ftell(fp);
+        break;
+    case BIO_C_SET_FILE_PTR:
+        file_free(b);
+        b->shutdown = (int)num & BIO_CLOSE;
+        b->ptr = ptr;
+        b->init = 1;
+#  if BIO_FLAGS_UPLINK!=0
+#   if defined(__MINGW32__) && defined(__MSVCRT__) && !defined(_IOB_ENTRIES)
+#    define _IOB_ENTRIES 20
+#   endif
+        /* Safety net to catch purely internal BIO_set_fp calls */
+#   if defined(_MSC_VER) && _MSC_VER>=1900
+        if (ptr == stdin || ptr == stdout || ptr == stderr)
+            BIO_clear_flags(b, BIO_FLAGS_UPLINK);
+#   elif defined(_IOB_ENTRIES)
+        if ((size_t)ptr >= (size_t)stdin &&
+            (size_t)ptr < (size_t)(stdin + _IOB_ENTRIES))
+            BIO_clear_flags(b, BIO_FLAGS_UPLINK);
+#   endif
+#  endif
+#  ifdef UP_fsetmod
+        if (b->flags & BIO_FLAGS_UPLINK)
+            UP_fsetmod(b->ptr, (char)((num & BIO_FP_TEXT) ? 't' : 'b'));
+        else
+#  endif
+        {
+#  if defined(OPENSSL_SYS_WINDOWS)
+            int fd = _fileno((FILE *)ptr);
+            if (num & BIO_FP_TEXT)
+                _setmode(fd, _O_TEXT);
+            else
+                _setmode(fd, _O_BINARY);
+#  elif defined(OPENSSL_SYS_MSDOS)
+            int fd = fileno((FILE *)ptr);
+            /* Set correct text/binary mode */
+            if (num & BIO_FP_TEXT)
+                _setmode(fd, _O_TEXT);
+            /* Dangerous to set stdin/stdout to raw (unless redirected) */
+            else {
+                if (fd == STDIN_FILENO || fd == STDOUT_FILENO) {
+                    if (isatty(fd) <= 0)
+                        _setmode(fd, _O_BINARY);
+                } else
+                    _setmode(fd, _O_BINARY);
+            }
+#  elif defined(OPENSSL_SYS_WIN32_CYGWIN)
+            int fd = fileno((FILE *)ptr);
+            if (!(num & BIO_FP_TEXT))
+                setmode(fd, O_BINARY);
+#  endif
+        }
+        break;
+    case BIO_C_SET_FILENAME:
+        file_free(b);
+        b->shutdown = (int)num & BIO_CLOSE;
+        if (num & BIO_FP_APPEND) {
+            if (num & BIO_FP_READ)
+                OPENSSL_strlcpy(p, "a+", sizeof(p));
+            else
+                OPENSSL_strlcpy(p, "a", sizeof(p));
+        } else if ((num & BIO_FP_READ) && (num & BIO_FP_WRITE))
+            OPENSSL_strlcpy(p, "r+", sizeof(p));
+        else if (num & BIO_FP_WRITE)
+            OPENSSL_strlcpy(p, "w", sizeof(p));
+        else if (num & BIO_FP_READ)
+            OPENSSL_strlcpy(p, "r", sizeof(p));
+        else {
+            BIOerr(BIO_F_FILE_CTRL, BIO_R_BAD_FOPEN_MODE);
+            ret = 0;
+            break;
+        }
+#  if defined(OPENSSL_SYS_MSDOS) || defined(OPENSSL_SYS_WINDOWS)
+        if (!(num & BIO_FP_TEXT))
+            OPENSSL_strlcat(p, "b", sizeof(p));
+        else
+            OPENSSL_strlcat(p, "t", sizeof(p));
+#  elif defined(OPENSSL_SYS_WIN32_CYGWIN)
+        if (!(num & BIO_FP_TEXT))
+            OPENSSL_strlcat(p, "b", sizeof(p));
+#  endif
+        fp = openssl_fopen(ptr, p);
+        if (fp == NULL) {
+            SYSerr(SYS_F_FOPEN, get_last_sys_error());
+            ERR_add_error_data(5, "fopen('", ptr, "','", p, "')");
+            BIOerr(BIO_F_FILE_CTRL, ERR_R_SYS_LIB);
+            ret = 0;
+            break;
+        }
+        b->ptr = fp;
+        b->init = 1;
+        BIO_clear_flags(b, BIO_FLAGS_UPLINK); /* we did fopen -> we disengage
+                                               * UPLINK */
+        break;
+    case BIO_C_GET_FILE_PTR:
+        /* the ptr parameter is actually a FILE ** in this case. */
+        if (ptr != NULL) {
+            fpp = (FILE **)ptr;
+            *fpp = (FILE *)b->ptr;
+        }
+        break;
+    case BIO_CTRL_GET_CLOSE:
+        ret = (long)b->shutdown;
+        break;
+    case BIO_CTRL_SET_CLOSE:
+        b->shutdown = (int)num;
+        break;
+    case BIO_CTRL_FLUSH:
+        st = b->flags & BIO_FLAGS_UPLINK
+                ? UP_fflush(b->ptr) : fflush((FILE *)b->ptr);
+        if (st == EOF) {
+            SYSerr(SYS_F_FFLUSH, get_last_sys_error());
+            ERR_add_error_data(1, "fflush()");
+            BIOerr(BIO_F_FILE_CTRL, ERR_R_SYS_LIB);
+            ret = 0;
+        }
+        break;
+    case BIO_CTRL_DUP:
+        ret = 1;
+        break;
+
+    case BIO_CTRL_WPENDING:
+    case BIO_CTRL_PENDING:
+    case BIO_CTRL_PUSH:
+    case BIO_CTRL_POP:
+    default:
+        ret = 0;
+        break;
+    }
+    return ret;
+}
+
+static int file_gets(BIO *bp, char *buf, int size)
+{
+    int ret = 0;
+
+    buf[0] = '\0';
+    if (bp->flags & BIO_FLAGS_UPLINK) {
+        if (!UP_fgets(buf, size, bp->ptr))
+            goto err;
+    } else {
+        if (!fgets(buf, size, (FILE *)bp->ptr))
+            goto err;
+    }
+    if (buf[0] != '\0')
+        ret = strlen(buf);
+ err:
+    return ret;
+}
+
+static int file_puts(BIO *bp, const char *str)
+{
+    int n, ret;
+
+    n = strlen(str);
+    ret = file_write(bp, str, n);
+    return ret;
+}
+
+#else
+
+static int file_write(BIO *b, const char *in, int inl)
+{
+    return -1;
+}
+static int file_read(BIO *b, char *out, int outl)
+{
+    return -1;
+}
+static int file_puts(BIO *bp, const char *str)
+{
+    return -1;
+}
+static int file_gets(BIO *bp, char *buf, int size)
+{
+    return 0;
+}
+static long file_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    return 0;
+}
+static int file_new(BIO *bi)
+{
+    return 0;
+}
+static int file_free(BIO *a)
+{
+    return 0;
+}
+
+static const BIO_METHOD methods_filep = {
+    BIO_TYPE_FILE,
+    "FILE pointer",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    file_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    file_read,
+    file_puts,
+    file_gets,
+    file_ctrl,
+    file_new,
+    file_free,
+    NULL,                      /* file_callback_ctrl */
+};
+
+const BIO_METHOD *BIO_s_file(void)
+{
+    return &methods_filep;
+}
+
+BIO *BIO_new_file(const char *filename, const char *mode)
+{
+    return NULL;
+}
+
+# endif                         /* OPENSSL_NO_STDIO */
+
+#endif                          /* HEADER_BSS_FILE_C */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_log.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_log.c
new file mode 100644
index 000000000..e9ab932ec
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_log.c
@@ -0,0 +1,416 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Why BIO_s_log?
+ *
+ * BIO_s_log is useful for system daemons (or services under NT). It is
+ * one-way BIO, it sends all stuff to syslogd (on system that commonly use
+ * that), or event log (on NT), or OPCOM (on OpenVMS).
+ *
+ */
+
+#include <stdio.h>
+#include <errno.h>
+
+#include "bio_lcl.h"
+#include "internal/cryptlib.h"
+
+#if defined(OPENSSL_SYS_WINCE)
+#elif defined(OPENSSL_SYS_WIN32)
+#elif defined(OPENSSL_SYS_VMS)
+# include <opcdef.h>
+# include <descrip.h>
+# include <lib$routines.h>
+# include <starlet.h>
+/* Some compiler options may mask the declaration of "_malloc32". */
+# if __INITIAL_POINTER_SIZE && defined _ANSI_C_SOURCE
+#  if __INITIAL_POINTER_SIZE == 64
+#   pragma pointer_size save
+#   pragma pointer_size 32
+void *_malloc32(__size_t);
+#   pragma pointer_size restore
+#  endif                        /* __INITIAL_POINTER_SIZE == 64 */
+# endif                         /* __INITIAL_POINTER_SIZE && defined
+                                 * _ANSI_C_SOURCE */
+#elif defined(__DJGPP__) && defined(OPENSSL_NO_SOCK)
+# define NO_SYSLOG
+#elif (!defined(MSDOS) || defined(WATT32)) && !defined(OPENSSL_SYS_VXWORKS) && !defined(NO_SYSLOG)
+# include <syslog.h>
+#endif
+
+#include <openssl/buffer.h>
+#include <openssl/err.h>
+
+#ifndef NO_SYSLOG
+
+# if defined(OPENSSL_SYS_WIN32)
+#  define LOG_EMERG       0
+#  define LOG_ALERT       1
+#  define LOG_CRIT        2
+#  define LOG_ERR         3
+#  define LOG_WARNING     4
+#  define LOG_NOTICE      5
+#  define LOG_INFO        6
+#  define LOG_DEBUG       7
+
+#  define LOG_DAEMON      (3<<3)
+# elif defined(OPENSSL_SYS_VMS)
+/* On VMS, we don't really care about these, but we need them to compile */
+#  define LOG_EMERG       0
+#  define LOG_ALERT       1
+#  define LOG_CRIT        2
+#  define LOG_ERR         3
+#  define LOG_WARNING     4
+#  define LOG_NOTICE      5
+#  define LOG_INFO        6
+#  define LOG_DEBUG       7
+
+#  define LOG_DAEMON      OPC$M_NM_NTWORK
+# endif
+
+static int slg_write(BIO *h, const char *buf, int num);
+static int slg_puts(BIO *h, const char *str);
+static long slg_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int slg_new(BIO *h);
+static int slg_free(BIO *data);
+static void xopenlog(BIO *bp, char *name, int level);
+static void xsyslog(BIO *bp, int priority, const char *string);
+static void xcloselog(BIO *bp);
+
+static const BIO_METHOD methods_slg = {
+    BIO_TYPE_MEM,
+    "syslog",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    slg_write,
+    NULL,                      /* slg_write_old,    */
+    NULL,                      /* slg_read,         */
+    slg_puts,
+    NULL,
+    slg_ctrl,
+    slg_new,
+    slg_free,
+    NULL,                      /* slg_callback_ctrl */
+};
+
+const BIO_METHOD *BIO_s_log(void)
+{
+    return &methods_slg;
+}
+
+static int slg_new(BIO *bi)
+{
+    bi->init = 1;
+    bi->num = 0;
+    bi->ptr = NULL;
+    xopenlog(bi, "application", LOG_DAEMON);
+    return 1;
+}
+
+static int slg_free(BIO *a)
+{
+    if (a == NULL)
+        return 0;
+    xcloselog(a);
+    return 1;
+}
+
+static int slg_write(BIO *b, const char *in, int inl)
+{
+    int ret = inl;
+    char *buf;
+    char *pp;
+    int priority, i;
+    static const struct {
+        int strl;
+        char str[10];
+        int log_level;
+    } mapping[] = {
+        {
+            6, "PANIC ", LOG_EMERG
+        },
+        {
+            6, "EMERG ", LOG_EMERG
+        },
+        {
+            4, "EMR ", LOG_EMERG
+        },
+        {
+            6, "ALERT ", LOG_ALERT
+        },
+        {
+            4, "ALR ", LOG_ALERT
+        },
+        {
+            5, "CRIT ", LOG_CRIT
+        },
+        {
+            4, "CRI ", LOG_CRIT
+        },
+        {
+            6, "ERROR ", LOG_ERR
+        },
+        {
+            4, "ERR ", LOG_ERR
+        },
+        {
+            8, "WARNING ", LOG_WARNING
+        },
+        {
+            5, "WARN ", LOG_WARNING
+        },
+        {
+            4, "WAR ", LOG_WARNING
+        },
+        {
+            7, "NOTICE ", LOG_NOTICE
+        },
+        {
+            5, "NOTE ", LOG_NOTICE
+        },
+        {
+            4, "NOT ", LOG_NOTICE
+        },
+        {
+            5, "INFO ", LOG_INFO
+        },
+        {
+            4, "INF ", LOG_INFO
+        },
+        {
+            6, "DEBUG ", LOG_DEBUG
+        },
+        {
+            4, "DBG ", LOG_DEBUG
+        },
+        {
+            0, "", LOG_ERR
+        }
+        /* The default */
+    };
+
+    if ((buf = OPENSSL_malloc(inl + 1)) == NULL) {
+        BIOerr(BIO_F_SLG_WRITE, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    memcpy(buf, in, inl);
+    buf[inl] = '\0';
+
+    i = 0;
+    while (strncmp(buf, mapping[i].str, mapping[i].strl) != 0)
+        i++;
+    priority = mapping[i].log_level;
+    pp = buf + mapping[i].strl;
+
+    xsyslog(b, priority, pp);
+
+    OPENSSL_free(buf);
+    return ret;
+}
+
+static long slg_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    switch (cmd) {
+    case BIO_CTRL_SET:
+        xcloselog(b);
+        xopenlog(b, ptr, num);
+        break;
+    default:
+        break;
+    }
+    return 0;
+}
+
+static int slg_puts(BIO *bp, const char *str)
+{
+    int n, ret;
+
+    n = strlen(str);
+    ret = slg_write(bp, str, n);
+    return ret;
+}
+
+# if defined(OPENSSL_SYS_WIN32)
+
+static void xopenlog(BIO *bp, char *name, int level)
+{
+    if (check_winnt())
+        bp->ptr = RegisterEventSourceA(NULL, name);
+    else
+        bp->ptr = NULL;
+}
+
+static void xsyslog(BIO *bp, int priority, const char *string)
+{
+    LPCSTR lpszStrings[2];
+    WORD evtype = EVENTLOG_ERROR_TYPE;
+    char pidbuf[DECIMAL_SIZE(DWORD) + 4];
+
+    if (bp->ptr == NULL)
+        return;
+
+    switch (priority) {
+    case LOG_EMERG:
+    case LOG_ALERT:
+    case LOG_CRIT:
+    case LOG_ERR:
+        evtype = EVENTLOG_ERROR_TYPE;
+        break;
+    case LOG_WARNING:
+        evtype = EVENTLOG_WARNING_TYPE;
+        break;
+    case LOG_NOTICE:
+    case LOG_INFO:
+    case LOG_DEBUG:
+        evtype = EVENTLOG_INFORMATION_TYPE;
+        break;
+    default:
+        /*
+         * Should never happen, but set it
+         * as error anyway.
+         */
+        evtype = EVENTLOG_ERROR_TYPE;
+        break;
+    }
+
+    sprintf(pidbuf, "[%lu] ", GetCurrentProcessId());
+    lpszStrings[0] = pidbuf;
+    lpszStrings[1] = string;
+
+    ReportEventA(bp->ptr, evtype, 0, 1024, NULL, 2, 0, lpszStrings, NULL);
+}
+
+static void xcloselog(BIO *bp)
+{
+    if (bp->ptr)
+        DeregisterEventSource((HANDLE) (bp->ptr));
+    bp->ptr = NULL;
+}
+
+# elif defined(OPENSSL_SYS_VMS)
+
+static int VMS_OPC_target = LOG_DAEMON;
+
+static void xopenlog(BIO *bp, char *name, int level)
+{
+    VMS_OPC_target = level;
+}
+
+static void xsyslog(BIO *bp, int priority, const char *string)
+{
+    struct dsc$descriptor_s opc_dsc;
+
+/* Arrange 32-bit pointer to opcdef buffer and malloc(), if needed. */
+#  if __INITIAL_POINTER_SIZE == 64
+#   pragma pointer_size save
+#   pragma pointer_size 32
+#   define OPCDEF_TYPE __char_ptr32
+#   define OPCDEF_MALLOC _malloc32
+#  else                         /* __INITIAL_POINTER_SIZE == 64 */
+#   define OPCDEF_TYPE char *
+#   define OPCDEF_MALLOC OPENSSL_malloc
+#  endif                        /* __INITIAL_POINTER_SIZE == 64 [else] */
+
+    struct opcdef *opcdef_p;
+
+#  if __INITIAL_POINTER_SIZE == 64
+#   pragma pointer_size restore
+#  endif                        /* __INITIAL_POINTER_SIZE == 64 */
+
+    char buf[10240];
+    unsigned int len;
+    struct dsc$descriptor_s buf_dsc;
+    $DESCRIPTOR(fao_cmd, "!AZ: !AZ");
+    char *priority_tag;
+
+    switch (priority) {
+    case LOG_EMERG:
+        priority_tag = "Emergency";
+        break;
+    case LOG_ALERT:
+        priority_tag = "Alert";
+        break;
+    case LOG_CRIT:
+        priority_tag = "Critical";
+        break;
+    case LOG_ERR:
+        priority_tag = "Error";
+        break;
+    case LOG_WARNING:
+        priority_tag = "Warning";
+        break;
+    case LOG_NOTICE:
+        priority_tag = "Notice";
+        break;
+    case LOG_INFO:
+        priority_tag = "Info";
+        break;
+    case LOG_DEBUG:
+        priority_tag = "DEBUG";
+        break;
+    }
+
+    buf_dsc.dsc$b_dtype = DSC$K_DTYPE_T;
+    buf_dsc.dsc$b_class = DSC$K_CLASS_S;
+    buf_dsc.dsc$a_pointer = buf;
+    buf_dsc.dsc$w_length = sizeof(buf) - 1;
+
+    lib$sys_fao(&fao_cmd, &len, &buf_dsc, priority_tag, string);
+
+    /* We know there's an 8-byte header.  That's documented. */
+    opcdef_p = OPCDEF_MALLOC(8 + len);
+    opcdef_p->opc$b_ms_type = OPC$_RQ_RQST;
+    memcpy(opcdef_p->opc$z_ms_target_classes, &VMS_OPC_target, 3);
+    opcdef_p->opc$l_ms_rqstid = 0;
+    memcpy(&opcdef_p->opc$l_ms_text, buf, len);
+
+    opc_dsc.dsc$b_dtype = DSC$K_DTYPE_T;
+    opc_dsc.dsc$b_class = DSC$K_CLASS_S;
+    opc_dsc.dsc$a_pointer = (OPCDEF_TYPE) opcdef_p;
+    opc_dsc.dsc$w_length = len + 8;
+
+    sys$sndopr(opc_dsc, 0);
+
+    OPENSSL_free(opcdef_p);
+}
+
+static void xcloselog(BIO *bp)
+{
+}
+
+# else                          /* Unix/Watt32 */
+
+static void xopenlog(BIO *bp, char *name, int level)
+{
+#  ifdef WATT32                 /* djgpp/DOS */
+    openlog(name, LOG_PID | LOG_CONS | LOG_NDELAY, level);
+#  else
+    openlog(name, LOG_PID | LOG_CONS, level);
+#  endif
+}
+
+static void xsyslog(BIO *bp, int priority, const char *string)
+{
+    syslog(priority, "%s", string);
+}
+
+static void xcloselog(BIO *bp)
+{
+    closelog();
+}
+
+# endif                         /* Unix */
+
+#else                           /* NO_SYSLOG */
+const BIO_METHOD *BIO_s_log(void)
+{
+    return NULL;
+}
+#endif                          /* NO_SYSLOG */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_mem.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_mem.c
new file mode 100644
index 000000000..10fcbf7a7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_mem.c
@@ -0,0 +1,357 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <errno.h>
+#include "bio_lcl.h"
+#include "internal/cryptlib.h"
+
+static int mem_write(BIO *h, const char *buf, int num);
+static int mem_read(BIO *h, char *buf, int size);
+static int mem_puts(BIO *h, const char *str);
+static int mem_gets(BIO *h, char *str, int size);
+static long mem_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int mem_new(BIO *h);
+static int secmem_new(BIO *h);
+static int mem_free(BIO *data);
+static int mem_buf_free(BIO *data);
+static int mem_buf_sync(BIO *h);
+
+static const BIO_METHOD mem_method = {
+    BIO_TYPE_MEM,
+    "memory buffer",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    mem_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    mem_read,
+    mem_puts,
+    mem_gets,
+    mem_ctrl,
+    mem_new,
+    mem_free,
+    NULL,                      /* mem_callback_ctrl */
+};
+
+static const BIO_METHOD secmem_method = {
+    BIO_TYPE_MEM,
+    "secure memory buffer",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    mem_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    mem_read,
+    mem_puts,
+    mem_gets,
+    mem_ctrl,
+    secmem_new,
+    mem_free,
+    NULL,                      /* mem_callback_ctrl */
+};
+
+/* BIO memory stores buffer and read pointer  */
+typedef struct bio_buf_mem_st {
+    struct buf_mem_st *buf;   /* allocated buffer */
+    struct buf_mem_st *readp; /* read pointer */
+} BIO_BUF_MEM;
+
+/*
+ * bio->num is used to hold the value to return on 'empty', if it is 0,
+ * should_retry is not set
+ */
+
+const BIO_METHOD *BIO_s_mem(void)
+{
+    return &mem_method;
+}
+
+const BIO_METHOD *BIO_s_secmem(void)
+{
+    return(&secmem_method);
+}
+
+BIO *BIO_new_mem_buf(const void *buf, int len)
+{
+    BIO *ret;
+    BUF_MEM *b;
+    BIO_BUF_MEM *bb;
+    size_t sz;
+
+    if (buf == NULL) {
+        BIOerr(BIO_F_BIO_NEW_MEM_BUF, BIO_R_NULL_PARAMETER);
+        return NULL;
+    }
+    sz = (len < 0) ? strlen(buf) : (size_t)len;
+    if ((ret = BIO_new(BIO_s_mem())) == NULL)
+        return NULL;
+    bb = (BIO_BUF_MEM *)ret->ptr;
+    b = bb->buf;
+    /* Cast away const and trust in the MEM_RDONLY flag. */
+    b->data = (void *)buf;
+    b->length = sz;
+    b->max = sz;
+    *bb->readp = *bb->buf;
+    ret->flags |= BIO_FLAGS_MEM_RDONLY;
+    /* Since this is static data retrying won't help */
+    ret->num = 0;
+    return ret;
+}
+
+static int mem_init(BIO *bi, unsigned long flags)
+{
+    BIO_BUF_MEM *bb = OPENSSL_zalloc(sizeof(*bb));
+
+    if (bb == NULL)
+        return 0;
+    if ((bb->buf = BUF_MEM_new_ex(flags)) == NULL) {
+        OPENSSL_free(bb);
+        return 0;
+    }
+    if ((bb->readp = OPENSSL_zalloc(sizeof(*bb->readp))) == NULL) {
+        BUF_MEM_free(bb->buf);
+        OPENSSL_free(bb);
+        return 0;
+    }
+    *bb->readp = *bb->buf;
+    bi->shutdown = 1;
+    bi->init = 1;
+    bi->num = -1;
+    bi->ptr = (char *)bb;
+    return 1;
+}
+
+static int mem_new(BIO *bi)
+{
+    return mem_init(bi, 0L);
+}
+
+static int secmem_new(BIO *bi)
+{
+    return mem_init(bi, BUF_MEM_FLAG_SECURE);
+}
+
+static int mem_free(BIO *a)
+{
+    BIO_BUF_MEM *bb;
+
+    if (a == NULL)
+        return 0;
+
+    bb = (BIO_BUF_MEM *)a->ptr;
+    if (!mem_buf_free(a))
+        return 0;
+    OPENSSL_free(bb->readp);
+    OPENSSL_free(bb);
+    return 1;
+}
+
+static int mem_buf_free(BIO *a)
+{
+    if (a == NULL)
+        return 0;
+
+    if (a->shutdown && a->init && a->ptr != NULL) {
+        BIO_BUF_MEM *bb = (BIO_BUF_MEM *)a->ptr;
+        BUF_MEM *b = bb->buf;
+
+        if (a->flags & BIO_FLAGS_MEM_RDONLY)
+            b->data = NULL;
+        BUF_MEM_free(b);
+    }
+    return 1;
+}
+
+/*
+ * Reallocate memory buffer if read pointer differs
+ */
+static int mem_buf_sync(BIO *b)
+{
+    if (b != NULL && b->init != 0 && b->ptr != NULL) {
+        BIO_BUF_MEM *bbm = (BIO_BUF_MEM *)b->ptr;
+
+        if (bbm->readp->data != bbm->buf->data) {
+            memmove(bbm->buf->data, bbm->readp->data, bbm->readp->length);
+            bbm->buf->length = bbm->readp->length;
+            bbm->readp->data = bbm->buf->data;
+        }
+    }
+    return 0;
+}
+
+static int mem_read(BIO *b, char *out, int outl)
+{
+    int ret = -1;
+    BIO_BUF_MEM *bbm = (BIO_BUF_MEM *)b->ptr;
+    BUF_MEM *bm = bbm->readp;
+
+    BIO_clear_retry_flags(b);
+    ret = (outl >= 0 && (size_t)outl > bm->length) ? (int)bm->length : outl;
+    if ((out != NULL) && (ret > 0)) {
+        memcpy(out, bm->data, ret);
+        bm->length -= ret;
+        bm->data += ret;
+    } else if (bm->length == 0) {
+        ret = b->num;
+        if (ret != 0)
+            BIO_set_retry_read(b);
+    }
+    return ret;
+}
+
+static int mem_write(BIO *b, const char *in, int inl)
+{
+    int ret = -1;
+    int blen;
+    BIO_BUF_MEM *bbm = (BIO_BUF_MEM *)b->ptr;
+
+    if (in == NULL) {
+        BIOerr(BIO_F_MEM_WRITE, BIO_R_NULL_PARAMETER);
+        goto end;
+    }
+    if (b->flags & BIO_FLAGS_MEM_RDONLY) {
+        BIOerr(BIO_F_MEM_WRITE, BIO_R_WRITE_TO_READ_ONLY_BIO);
+        goto end;
+    }
+    BIO_clear_retry_flags(b);
+    if (inl == 0)
+        return 0;
+    blen = bbm->readp->length;
+    mem_buf_sync(b);
+    if (BUF_MEM_grow_clean(bbm->buf, blen + inl) == 0)
+        goto end;
+    memcpy(bbm->buf->data + blen, in, inl);
+    *bbm->readp = *bbm->buf;
+    ret = inl;
+ end:
+    return ret;
+}
+
+static long mem_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    long ret = 1;
+    char **pptr;
+    BIO_BUF_MEM *bbm = (BIO_BUF_MEM *)b->ptr;
+    BUF_MEM *bm;
+
+    switch (cmd) {
+    case BIO_CTRL_RESET:
+        bm = bbm->buf;
+        if (bm->data != NULL) {
+            /* For read only case reset to the start again */
+            if ((b->flags & BIO_FLAGS_MEM_RDONLY) || (b->flags & BIO_FLAGS_NONCLEAR_RST)) {
+                bm->length = bm->max;
+            } else {
+                memset(bm->data, 0, bm->max);
+                bm->length = 0;
+            }
+            *bbm->readp = *bbm->buf;
+        }
+        break;
+    case BIO_CTRL_EOF:
+        bm = bbm->readp;
+        ret = (long)(bm->length == 0);
+        break;
+    case BIO_C_SET_BUF_MEM_EOF_RETURN:
+        b->num = (int)num;
+        break;
+    case BIO_CTRL_INFO:
+        bm = bbm->readp;
+        ret = (long)bm->length;
+        if (ptr != NULL) {
+            pptr = (char **)ptr;
+            *pptr = (char *)&(bm->data[0]);
+        }
+        break;
+    case BIO_C_SET_BUF_MEM:
+        mem_buf_free(b);
+        b->shutdown = (int)num;
+        bbm->buf = ptr;
+        *bbm->readp = *bbm->buf;
+        break;
+    case BIO_C_GET_BUF_MEM_PTR:
+        if (ptr != NULL) {
+            mem_buf_sync(b);
+            bm = bbm->readp;
+            pptr = (char **)ptr;
+            *pptr = (char *)bm;
+        }
+        break;
+    case BIO_CTRL_GET_CLOSE:
+        ret = (long)b->shutdown;
+        break;
+    case BIO_CTRL_SET_CLOSE:
+        b->shutdown = (int)num;
+        break;
+    case BIO_CTRL_WPENDING:
+        ret = 0L;
+        break;
+    case BIO_CTRL_PENDING:
+        bm = bbm->readp;
+        ret = (long)bm->length;
+        break;
+    case BIO_CTRL_DUP:
+    case BIO_CTRL_FLUSH:
+        ret = 1;
+        break;
+    case BIO_CTRL_PUSH:
+    case BIO_CTRL_POP:
+    default:
+        ret = 0;
+        break;
+    }
+    return ret;
+}
+
+static int mem_gets(BIO *bp, char *buf, int size)
+{
+    int i, j;
+    int ret = -1;
+    char *p;
+    BIO_BUF_MEM *bbm = (BIO_BUF_MEM *)bp->ptr;
+    BUF_MEM *bm = bbm->readp;
+
+    BIO_clear_retry_flags(bp);
+    j = bm->length;
+    if ((size - 1) < j)
+        j = size - 1;
+    if (j <= 0) {
+        *buf = '\0';
+        return 0;
+    }
+    p = bm->data;
+    for (i = 0; i < j; i++) {
+        if (p[i] == '\n') {
+            i++;
+            break;
+        }
+    }
+
+    /*
+     * i is now the max num of bytes to copy, either j or up to
+     * and including the first newline
+     */
+
+    i = mem_read(bp, buf, i);
+    if (i > 0)
+        buf[i] = '\0';
+    ret = i;
+    return ret;
+}
+
+static int mem_puts(BIO *bp, const char *str)
+{
+    int n, ret;
+
+    n = strlen(str);
+    ret = mem_write(bp, str, n);
+    /* memory semantics is that it will always work */
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_null.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_null.c
new file mode 100644
index 000000000..08f1d2bc9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_null.c
@@ -0,0 +1,87 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <errno.h>
+#include "bio_lcl.h"
+#include "internal/cryptlib.h"
+
+static int null_write(BIO *h, const char *buf, int num);
+static int null_read(BIO *h, char *buf, int size);
+static int null_puts(BIO *h, const char *str);
+static int null_gets(BIO *h, char *str, int size);
+static long null_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static const BIO_METHOD null_method = {
+    BIO_TYPE_NULL,
+    "NULL",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    null_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    null_read,
+    null_puts,
+    null_gets,
+    null_ctrl,
+    NULL,
+    NULL,
+    NULL,                     /* null_callback_ctrl */
+};
+
+const BIO_METHOD *BIO_s_null(void)
+{
+    return &null_method;
+}
+
+static int null_read(BIO *b, char *out, int outl)
+{
+    return 0;
+}
+
+static int null_write(BIO *b, const char *in, int inl)
+{
+    return inl;
+}
+
+static long null_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    long ret = 1;
+
+    switch (cmd) {
+    case BIO_CTRL_RESET:
+    case BIO_CTRL_EOF:
+    case BIO_CTRL_SET:
+    case BIO_CTRL_SET_CLOSE:
+    case BIO_CTRL_FLUSH:
+    case BIO_CTRL_DUP:
+        ret = 1;
+        break;
+    case BIO_CTRL_GET_CLOSE:
+    case BIO_CTRL_INFO:
+    case BIO_CTRL_GET:
+    case BIO_CTRL_PENDING:
+    case BIO_CTRL_WPENDING:
+    default:
+        ret = 0;
+        break;
+    }
+    return ret;
+}
+
+static int null_gets(BIO *bp, char *buf, int size)
+{
+    return 0;
+}
+
+static int null_puts(BIO *bp, const char *str)
+{
+    if (str == NULL)
+        return 0;
+    return strlen(str);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_sock.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_sock.c
new file mode 100644
index 000000000..ad3845320
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/bss_sock.c
@@ -0,0 +1,233 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <errno.h>
+#include "bio_lcl.h"
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_SOCK
+
+# include <openssl/bio.h>
+
+# ifdef WATT32
+/* Watt-32 uses same names */
+#  undef sock_write
+#  undef sock_read
+#  undef sock_puts
+#  define sock_write SockWrite
+#  define sock_read  SockRead
+#  define sock_puts  SockPuts
+# endif
+
+static int sock_write(BIO *h, const char *buf, int num);
+static int sock_read(BIO *h, char *buf, int size);
+static int sock_puts(BIO *h, const char *str);
+static long sock_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int sock_new(BIO *h);
+static int sock_free(BIO *data);
+int BIO_sock_should_retry(int s);
+
+static const BIO_METHOD methods_sockp = {
+    BIO_TYPE_SOCKET,
+    "socket",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    sock_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    sock_read,
+    sock_puts,
+    NULL,                       /* sock_gets,         */
+    sock_ctrl,
+    sock_new,
+    sock_free,
+    NULL,                       /* sock_callback_ctrl */
+};
+
+const BIO_METHOD *BIO_s_socket(void)
+{
+    return &methods_sockp;
+}
+
+BIO *BIO_new_socket(int fd, int close_flag)
+{
+    BIO *ret;
+
+    ret = BIO_new(BIO_s_socket());
+    if (ret == NULL)
+        return NULL;
+    BIO_set_fd(ret, fd, close_flag);
+    return ret;
+}
+
+static int sock_new(BIO *bi)
+{
+    bi->init = 0;
+    bi->num = 0;
+    bi->ptr = NULL;
+    bi->flags = 0;
+    return 1;
+}
+
+static int sock_free(BIO *a)
+{
+    if (a == NULL)
+        return 0;
+    if (a->shutdown) {
+        if (a->init) {
+            BIO_closesocket(a->num);
+        }
+        a->init = 0;
+        a->flags = 0;
+    }
+    return 1;
+}
+
+static int sock_read(BIO *b, char *out, int outl)
+{
+    int ret = 0;
+
+    if (out != NULL) {
+        clear_socket_error();
+        ret = readsocket(b->num, out, outl);
+        BIO_clear_retry_flags(b);
+        if (ret <= 0) {
+            if (BIO_sock_should_retry(ret))
+                BIO_set_retry_read(b);
+        }
+    }
+    return ret;
+}
+
+static int sock_write(BIO *b, const char *in, int inl)
+{
+    int ret;
+
+    clear_socket_error();
+    ret = writesocket(b->num, in, inl);
+    BIO_clear_retry_flags(b);
+    if (ret <= 0) {
+        if (BIO_sock_should_retry(ret))
+            BIO_set_retry_write(b);
+    }
+    return ret;
+}
+
+static long sock_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    long ret = 1;
+    int *ip;
+
+    switch (cmd) {
+    case BIO_C_SET_FD:
+        sock_free(b);
+        b->num = *((int *)ptr);
+        b->shutdown = (int)num;
+        b->init = 1;
+        break;
+    case BIO_C_GET_FD:
+        if (b->init) {
+            ip = (int *)ptr;
+            if (ip != NULL)
+                *ip = b->num;
+            ret = b->num;
+        } else
+            ret = -1;
+        break;
+    case BIO_CTRL_GET_CLOSE:
+        ret = b->shutdown;
+        break;
+    case BIO_CTRL_SET_CLOSE:
+        b->shutdown = (int)num;
+        break;
+    case BIO_CTRL_DUP:
+    case BIO_CTRL_FLUSH:
+        ret = 1;
+        break;
+    default:
+        ret = 0;
+        break;
+    }
+    return ret;
+}
+
+static int sock_puts(BIO *bp, const char *str)
+{
+    int n, ret;
+
+    n = strlen(str);
+    ret = sock_write(bp, str, n);
+    return ret;
+}
+
+int BIO_sock_should_retry(int i)
+{
+    int err;
+
+    if ((i == 0) || (i == -1)) {
+        err = get_last_socket_error();
+
+        return BIO_sock_non_fatal_error(err);
+    }
+    return 0;
+}
+
+int BIO_sock_non_fatal_error(int err)
+{
+    switch (err) {
+# if defined(OPENSSL_SYS_WINDOWS)
+#  if defined(WSAEWOULDBLOCK)
+    case WSAEWOULDBLOCK:
+#  endif
+# endif
+
+# ifdef EWOULDBLOCK
+#  ifdef WSAEWOULDBLOCK
+#   if WSAEWOULDBLOCK != EWOULDBLOCK
+    case EWOULDBLOCK:
+#   endif
+#  else
+    case EWOULDBLOCK:
+#  endif
+# endif
+
+# if defined(ENOTCONN)
+    case ENOTCONN:
+# endif
+
+# ifdef EINTR
+    case EINTR:
+# endif
+
+# ifdef EAGAIN
+#  if EWOULDBLOCK != EAGAIN
+    case EAGAIN:
+#  endif
+# endif
+
+# ifdef EPROTO
+    case EPROTO:
+# endif
+
+# ifdef EINPROGRESS
+    case EINPROGRESS:
+# endif
+
+# ifdef EALREADY
+    case EALREADY:
+# endif
+        return 1;
+    default:
+        break;
+    }
+    return 0;
+}
+
+#endif                          /* #ifndef OPENSSL_NO_SOCK */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bio/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/build.info
new file mode 100644
index 000000000..d1e7d73c5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bio/build.info
@@ -0,0 +1,8 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        bio_lib.c bio_cb.c bio_err.c \
+        bss_mem.c bss_null.c bss_fd.c \
+        bss_file.c bss_sock.c bss_conn.c \
+        bf_null.c bf_buff.c b_print.c b_dump.c b_addr.c \
+        b_sock.c b_sock2.c bss_acpt.c bf_nbio.c bss_log.c bss_bio.c \
+        bss_dgram.c bio_meth.c bf_lbuf.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/blake2_impl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/blake2_impl.h
new file mode 100644
index 000000000..80b717e79
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/blake2_impl.h
@@ -0,0 +1,129 @@
+/*
+ * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Derived from the BLAKE2 reference implementation written by Samuel Neves.
+ * Copyright 2012, Samuel Neves <sneves@dei.uc.pt>
+ * More information about the BLAKE2 hash function and its implementations
+ * can be found at https://blake2.net.
+ */
+
+#include <string.h>
+
+static ossl_inline uint32_t load32(const uint8_t *src)
+{
+    const union {
+        long one;
+        char little;
+    } is_endian = { 1 };
+
+    if (is_endian.little) {
+        uint32_t w;
+        memcpy(&w, src, sizeof(w));
+        return w;
+    } else {
+        uint32_t w = ((uint32_t)src[0])
+                   | ((uint32_t)src[1] <<  8)
+                   | ((uint32_t)src[2] << 16)
+                   | ((uint32_t)src[3] << 24);
+        return w;
+    }
+}
+
+static ossl_inline uint64_t load64(const uint8_t *src)
+{
+    const union {
+        long one;
+        char little;
+    } is_endian = { 1 };
+
+    if (is_endian.little) {
+        uint64_t w;
+        memcpy(&w, src, sizeof(w));
+        return w;
+    } else {
+        uint64_t w = ((uint64_t)src[0])
+                   | ((uint64_t)src[1] <<  8)
+                   | ((uint64_t)src[2] << 16)
+                   | ((uint64_t)src[3] << 24)
+                   | ((uint64_t)src[4] << 32)
+                   | ((uint64_t)src[5] << 40)
+                   | ((uint64_t)src[6] << 48)
+                   | ((uint64_t)src[7] << 56);
+        return w;
+    }
+}
+
+static ossl_inline void store32(uint8_t *dst, uint32_t w)
+{
+    const union {
+        long one;
+        char little;
+    } is_endian = { 1 };
+
+    if (is_endian.little) {
+        memcpy(dst, &w, sizeof(w));
+    } else {
+        uint8_t *p = (uint8_t *)dst;
+        int i;
+
+        for (i = 0; i < 4; i++)
+            p[i] = (uint8_t)(w >> (8 * i));
+    }
+}
+
+static ossl_inline void store64(uint8_t *dst, uint64_t w)
+{
+    const union {
+        long one;
+        char little;
+    } is_endian = { 1 };
+
+    if (is_endian.little) {
+        memcpy(dst, &w, sizeof(w));
+    } else {
+        uint8_t *p = (uint8_t *)dst;
+        int i;
+
+        for (i = 0; i < 8; i++)
+            p[i] = (uint8_t)(w >> (8 * i));
+    }
+}
+
+static ossl_inline uint64_t load48(const uint8_t *src)
+{
+    uint64_t w = ((uint64_t)src[0])
+               | ((uint64_t)src[1] <<  8)
+               | ((uint64_t)src[2] << 16)
+               | ((uint64_t)src[3] << 24)
+               | ((uint64_t)src[4] << 32)
+               | ((uint64_t)src[5] << 40);
+    return w;
+}
+
+static ossl_inline void store48(uint8_t *dst, uint64_t w)
+{
+    uint8_t *p = (uint8_t *)dst;
+    p[0] = (uint8_t)w;
+    p[1] = (uint8_t)(w>>8);
+    p[2] = (uint8_t)(w>>16);
+    p[3] = (uint8_t)(w>>24);
+    p[4] = (uint8_t)(w>>32);
+    p[5] = (uint8_t)(w>>40);
+}
+
+static ossl_inline uint32_t rotr32(const uint32_t w, const unsigned int c)
+{
+    return (w >> c) | (w << (32 - c));
+}
+
+static ossl_inline uint64_t rotr64(const uint64_t w, const unsigned int c)
+{
+    return (w >> c) | (w << (64 - c));
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/blake2_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/blake2_locl.h
new file mode 100644
index 000000000..926bae944
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/blake2_locl.h
@@ -0,0 +1,90 @@
+/*
+ * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Derived from the BLAKE2 reference implementation written by Samuel Neves.
+ * Copyright 2012, Samuel Neves <sneves@dei.uc.pt>
+ * More information about the BLAKE2 hash function and its implementations
+ * can be found at https://blake2.net.
+ */
+
+#include <stddef.h>
+
+#define BLAKE2S_BLOCKBYTES    64
+#define BLAKE2S_OUTBYTES      32
+#define BLAKE2S_KEYBYTES      32
+#define BLAKE2S_SALTBYTES     8
+#define BLAKE2S_PERSONALBYTES 8
+
+#define BLAKE2B_BLOCKBYTES    128
+#define BLAKE2B_OUTBYTES      64
+#define BLAKE2B_KEYBYTES      64
+#define BLAKE2B_SALTBYTES     16
+#define BLAKE2B_PERSONALBYTES 16
+
+struct blake2s_param_st {
+    uint8_t  digest_length; /* 1 */
+    uint8_t  key_length;    /* 2 */
+    uint8_t  fanout;        /* 3 */
+    uint8_t  depth;         /* 4 */
+    uint8_t  leaf_length[4];/* 8 */
+    uint8_t  node_offset[6];/* 14 */
+    uint8_t  node_depth;    /* 15 */
+    uint8_t  inner_length;  /* 16 */
+    uint8_t  salt[BLAKE2S_SALTBYTES]; /* 24 */
+    uint8_t  personal[BLAKE2S_PERSONALBYTES];  /* 32 */
+};
+
+typedef struct blake2s_param_st BLAKE2S_PARAM;
+
+struct blake2s_ctx_st {
+    uint32_t h[8];
+    uint32_t t[2];
+    uint32_t f[2];
+    uint8_t  buf[BLAKE2S_BLOCKBYTES];
+    size_t   buflen;
+};
+
+struct blake2b_param_st {
+    uint8_t  digest_length; /* 1 */
+    uint8_t  key_length;    /* 2 */
+    uint8_t  fanout;        /* 3 */
+    uint8_t  depth;         /* 4 */
+    uint8_t  leaf_length[4];/* 8 */
+    uint8_t  node_offset[8];/* 16 */
+    uint8_t  node_depth;    /* 17 */
+    uint8_t  inner_length;  /* 18 */
+    uint8_t  reserved[14];  /* 32 */
+    uint8_t  salt[BLAKE2B_SALTBYTES]; /* 48 */
+    uint8_t  personal[BLAKE2B_PERSONALBYTES];  /* 64 */
+};
+
+typedef struct blake2b_param_st BLAKE2B_PARAM;
+
+struct blake2b_ctx_st {
+    uint64_t h[8];
+    uint64_t t[2];
+    uint64_t f[2];
+    uint8_t  buf[BLAKE2B_BLOCKBYTES];
+    size_t   buflen;
+};
+
+#define BLAKE2B_DIGEST_LENGTH 64
+#define BLAKE2S_DIGEST_LENGTH 32
+
+typedef struct blake2s_ctx_st BLAKE2S_CTX;
+typedef struct blake2b_ctx_st BLAKE2B_CTX;
+
+int BLAKE2b_Init(BLAKE2B_CTX *c);
+int BLAKE2b_Update(BLAKE2B_CTX *c, const void *data, size_t datalen);
+int BLAKE2b_Final(unsigned char *md, BLAKE2B_CTX *c);
+
+int BLAKE2s_Init(BLAKE2S_CTX *c);
+int BLAKE2s_Update(BLAKE2S_CTX *c, const void *data, size_t datalen);
+int BLAKE2s_Final(unsigned char *md, BLAKE2S_CTX *c);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/blake2b.c b/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/blake2b.c
new file mode 100644
index 000000000..829ba5b50
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/blake2b.c
@@ -0,0 +1,269 @@
+/*
+ * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Derived from the BLAKE2 reference implementation written by Samuel Neves.
+ * Copyright 2012, Samuel Neves <sneves@dei.uc.pt>
+ * More information about the BLAKE2 hash function and its implementations
+ * can be found at https://blake2.net.
+ */
+
+#include <assert.h>
+#include <string.h>
+#include <openssl/crypto.h>
+
+#include "blake2_locl.h"
+#include "blake2_impl.h"
+
+static const uint64_t blake2b_IV[8] =
+{
+    0x6a09e667f3bcc908U, 0xbb67ae8584caa73bU,
+    0x3c6ef372fe94f82bU, 0xa54ff53a5f1d36f1U,
+    0x510e527fade682d1U, 0x9b05688c2b3e6c1fU,
+    0x1f83d9abfb41bd6bU, 0x5be0cd19137e2179U
+};
+
+static const uint8_t blake2b_sigma[12][16] =
+{
+    {  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14, 15 } ,
+    { 14, 10,  4,  8,  9, 15, 13,  6,  1, 12,  0,  2, 11,  7,  5,  3 } ,
+    { 11,  8, 12,  0,  5,  2, 15, 13, 10, 14,  3,  6,  7,  1,  9,  4 } ,
+    {  7,  9,  3,  1, 13, 12, 11, 14,  2,  6,  5, 10,  4,  0, 15,  8 } ,
+    {  9,  0,  5,  7,  2,  4, 10, 15, 14,  1, 11, 12,  6,  8,  3, 13 } ,
+    {  2, 12,  6, 10,  0, 11,  8,  3,  4, 13,  7,  5, 15, 14,  1,  9 } ,
+    { 12,  5,  1, 15, 14, 13,  4, 10,  0,  7,  6,  3,  9,  2,  8, 11 } ,
+    { 13, 11,  7, 14, 12,  1,  3,  9,  5,  0, 15,  4,  8,  6,  2, 10 } ,
+    {  6, 15, 14,  9, 11,  3,  0,  8, 12,  2, 13,  7,  1,  4, 10,  5 } ,
+    { 10,  2,  8,  4,  7,  6,  1,  5, 15, 11,  9, 14,  3, 12, 13 , 0 } ,
+    {  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14, 15 } ,
+    { 14, 10,  4,  8,  9, 15, 13,  6,  1, 12,  0,  2, 11,  7,  5,  3 }
+};
+
+/* Set that it's the last block we'll compress */
+static ossl_inline void blake2b_set_lastblock(BLAKE2B_CTX *S)
+{
+    S->f[0] = -1;
+}
+
+/* Initialize the hashing state. */
+static ossl_inline void blake2b_init0(BLAKE2B_CTX *S)
+{
+    int i;
+
+    memset(S, 0, sizeof(BLAKE2B_CTX));
+    for (i = 0; i < 8; ++i) {
+        S->h[i] = blake2b_IV[i];
+    }
+}
+
+/* init xors IV with input parameter block */
+static void blake2b_init_param(BLAKE2B_CTX *S, const BLAKE2B_PARAM *P)
+{
+    size_t i;
+    const uint8_t *p = (const uint8_t *)(P);
+    blake2b_init0(S);
+
+    /* The param struct is carefully hand packed, and should be 64 bytes on
+     * every platform. */
+    assert(sizeof(BLAKE2B_PARAM) == 64);
+    /* IV XOR ParamBlock */
+    for (i = 0; i < 8; ++i) {
+        S->h[i] ^= load64(p + sizeof(S->h[i]) * i);
+    }
+}
+
+/* Initialize the hashing context.  Always returns 1. */
+int BLAKE2b_Init(BLAKE2B_CTX *c)
+{
+    BLAKE2B_PARAM P[1];
+    P->digest_length = BLAKE2B_DIGEST_LENGTH;
+    P->key_length    = 0;
+    P->fanout        = 1;
+    P->depth         = 1;
+    store32(P->leaf_length, 0);
+    store64(P->node_offset, 0);
+    P->node_depth    = 0;
+    P->inner_length  = 0;
+    memset(P->reserved, 0, sizeof(P->reserved));
+    memset(P->salt,     0, sizeof(P->salt));
+    memset(P->personal, 0, sizeof(P->personal));
+    blake2b_init_param(c, P);
+    return 1;
+}
+
+/* Permute the state while xoring in the block of data. */
+static void blake2b_compress(BLAKE2B_CTX *S,
+                            const uint8_t *blocks,
+                            size_t len)
+{
+    uint64_t m[16];
+    uint64_t v[16];
+    int i;
+    size_t increment;
+
+    /*
+     * There are two distinct usage vectors for this function:
+     *
+     * a) BLAKE2b_Update uses it to process complete blocks,
+     *    possibly more than one at a time;
+     *
+     * b) BLAK2b_Final uses it to process last block, always
+     *    single but possibly incomplete, in which case caller
+     *    pads input with zeros.
+     */
+    assert(len < BLAKE2B_BLOCKBYTES || len % BLAKE2B_BLOCKBYTES == 0);
+
+    /*
+     * Since last block is always processed with separate call,
+     * |len| not being multiple of complete blocks can be observed
+     * only with |len| being less than BLAKE2B_BLOCKBYTES ("less"
+     * including even zero), which is why following assignment doesn't
+     * have to reside inside the main loop below.
+     */
+    increment = len < BLAKE2B_BLOCKBYTES ? len : BLAKE2B_BLOCKBYTES;
+
+    for (i = 0; i < 8; ++i) {
+        v[i] = S->h[i];
+    }
+
+    do {
+        for (i = 0; i < 16; ++i) {
+            m[i] = load64(blocks + i * sizeof(m[i]));
+        }
+
+        /* blake2b_increment_counter */
+        S->t[0] += increment;
+        S->t[1] += (S->t[0] < increment);
+
+        v[8]  = blake2b_IV[0];
+        v[9]  = blake2b_IV[1];
+        v[10] = blake2b_IV[2];
+        v[11] = blake2b_IV[3];
+        v[12] = S->t[0] ^ blake2b_IV[4];
+        v[13] = S->t[1] ^ blake2b_IV[5];
+        v[14] = S->f[0] ^ blake2b_IV[6];
+        v[15] = S->f[1] ^ blake2b_IV[7];
+#define G(r,i,a,b,c,d) \
+        do { \
+            a = a + b + m[blake2b_sigma[r][2*i+0]]; \
+            d = rotr64(d ^ a, 32); \
+            c = c + d; \
+            b = rotr64(b ^ c, 24); \
+            a = a + b + m[blake2b_sigma[r][2*i+1]]; \
+            d = rotr64(d ^ a, 16); \
+            c = c + d; \
+            b = rotr64(b ^ c, 63); \
+        } while (0)
+#define ROUND(r)  \
+        do { \
+            G(r,0,v[ 0],v[ 4],v[ 8],v[12]); \
+            G(r,1,v[ 1],v[ 5],v[ 9],v[13]); \
+            G(r,2,v[ 2],v[ 6],v[10],v[14]); \
+            G(r,3,v[ 3],v[ 7],v[11],v[15]); \
+            G(r,4,v[ 0],v[ 5],v[10],v[15]); \
+            G(r,5,v[ 1],v[ 6],v[11],v[12]); \
+            G(r,6,v[ 2],v[ 7],v[ 8],v[13]); \
+            G(r,7,v[ 3],v[ 4],v[ 9],v[14]); \
+        } while (0)
+#if defined(OPENSSL_SMALL_FOOTPRINT)
+        /* 3x size reduction on x86_64, almost 7x on ARMv8, 9x on ARMv4 */
+        for (i = 0; i < 12; i++) {
+            ROUND(i);
+        }
+#else
+        ROUND(0);
+        ROUND(1);
+        ROUND(2);
+        ROUND(3);
+        ROUND(4);
+        ROUND(5);
+        ROUND(6);
+        ROUND(7);
+        ROUND(8);
+        ROUND(9);
+        ROUND(10);
+        ROUND(11);
+#endif
+
+        for (i = 0; i < 8; ++i) {
+            S->h[i] = v[i] ^= v[i + 8] ^ S->h[i];
+        }
+#undef G
+#undef ROUND
+        blocks += increment;
+        len -= increment;
+    } while (len);
+}
+
+/* Absorb the input data into the hash state.  Always returns 1. */
+int BLAKE2b_Update(BLAKE2B_CTX *c, const void *data, size_t datalen)
+{
+    const uint8_t *in = data;
+    size_t fill;
+
+    /*
+     * Intuitively one would expect intermediate buffer, c->buf, to
+     * store incomplete blocks. But in this case we are interested to
+     * temporarily stash even complete blocks, because last one in the
+     * stream has to be treated in special way, and at this point we
+     * don't know if last block in *this* call is last one "ever". This
+     * is the reason for why |datalen| is compared as >, and not >=.
+     */
+    fill = sizeof(c->buf) - c->buflen;
+    if (datalen > fill) {
+        if (c->buflen) {
+            memcpy(c->buf + c->buflen, in, fill); /* Fill buffer */
+            blake2b_compress(c, c->buf, BLAKE2B_BLOCKBYTES);
+            c->buflen = 0;
+            in += fill;
+            datalen -= fill;
+        }
+        if (datalen > BLAKE2B_BLOCKBYTES) {
+            size_t stashlen = datalen % BLAKE2B_BLOCKBYTES;
+            /*
+             * If |datalen| is a multiple of the blocksize, stash
+             * last complete block, it can be final one...
+             */
+            stashlen = stashlen ? stashlen : BLAKE2B_BLOCKBYTES;
+            datalen -= stashlen;
+            blake2b_compress(c, in, datalen);
+            in += datalen;
+            datalen = stashlen;
+        }
+    }
+
+    assert(datalen <= BLAKE2B_BLOCKBYTES);
+
+    memcpy(c->buf + c->buflen, in, datalen);
+    c->buflen += datalen; /* Be lazy, do not compress */
+
+    return 1;
+}
+
+/*
+ * Calculate the final hash and save it in md.
+ * Always returns 1.
+ */
+int BLAKE2b_Final(unsigned char *md, BLAKE2B_CTX *c)
+{
+    int i;
+
+    blake2b_set_lastblock(c);
+    /* Padding */
+    memset(c->buf + c->buflen, 0, sizeof(c->buf) - c->buflen);
+    blake2b_compress(c, c->buf, c->buflen);
+
+    /* Output full hash to message digest */
+    for (i = 0; i < 8; ++i) {
+        store64(md + sizeof(c->h[i]) * i, c->h[i]);
+    }
+
+    OPENSSL_cleanse(c, sizeof(BLAKE2B_CTX));
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/blake2s.c b/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/blake2s.c
new file mode 100644
index 000000000..8211374d1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/blake2s.c
@@ -0,0 +1,263 @@
+/*
+ * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Derived from the BLAKE2 reference implementation written by Samuel Neves.
+ * Copyright 2012, Samuel Neves <sneves@dei.uc.pt>
+ * More information about the BLAKE2 hash function and its implementations
+ * can be found at https://blake2.net.
+ */
+
+#include <assert.h>
+#include <string.h>
+#include <openssl/crypto.h>
+
+#include "blake2_locl.h"
+#include "blake2_impl.h"
+
+static const uint32_t blake2s_IV[8] =
+{
+    0x6A09E667U, 0xBB67AE85U, 0x3C6EF372U, 0xA54FF53AU,
+    0x510E527FU, 0x9B05688CU, 0x1F83D9ABU, 0x5BE0CD19U
+};
+
+static const uint8_t blake2s_sigma[10][16] =
+{
+    {  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14, 15 } ,
+    { 14, 10,  4,  8,  9, 15, 13,  6,  1, 12,  0,  2, 11,  7,  5,  3 } ,
+    { 11,  8, 12,  0,  5,  2, 15, 13, 10, 14,  3,  6,  7,  1,  9,  4 } ,
+    {  7,  9,  3,  1, 13, 12, 11, 14,  2,  6,  5, 10,  4,  0, 15,  8 } ,
+    {  9,  0,  5,  7,  2,  4, 10, 15, 14,  1, 11, 12,  6,  8,  3, 13 } ,
+    {  2, 12,  6, 10,  0, 11,  8,  3,  4, 13,  7,  5, 15, 14,  1,  9 } ,
+    { 12,  5,  1, 15, 14, 13,  4, 10,  0,  7,  6,  3,  9,  2,  8, 11 } ,
+    { 13, 11,  7, 14, 12,  1,  3,  9,  5,  0, 15,  4,  8,  6,  2, 10 } ,
+    {  6, 15, 14,  9, 11,  3,  0,  8, 12,  2, 13,  7,  1,  4, 10,  5 } ,
+    { 10,  2,  8,  4,  7,  6,  1,  5, 15, 11,  9, 14,  3, 12, 13 , 0 } ,
+};
+
+/* Set that it's the last block we'll compress */
+static ossl_inline void blake2s_set_lastblock(BLAKE2S_CTX *S)
+{
+    S->f[0] = -1;
+}
+
+/* Initialize the hashing state. */
+static ossl_inline void blake2s_init0(BLAKE2S_CTX *S)
+{
+    int i;
+
+    memset(S, 0, sizeof(BLAKE2S_CTX));
+    for (i = 0; i < 8; ++i) {
+        S->h[i] = blake2s_IV[i];
+    }
+}
+
+/* init2 xors IV with input parameter block */
+static void blake2s_init_param(BLAKE2S_CTX *S, const BLAKE2S_PARAM *P)
+{
+    const uint8_t *p = (const uint8_t *)(P);
+    size_t i;
+
+    /* The param struct is carefully hand packed, and should be 32 bytes on
+     * every platform. */
+    assert(sizeof(BLAKE2S_PARAM) == 32);
+    blake2s_init0(S);
+    /* IV XOR ParamBlock */
+    for (i = 0; i < 8; ++i) {
+        S->h[i] ^= load32(&p[i*4]);
+    }
+}
+
+/* Initialize the hashing context.  Always returns 1. */
+int BLAKE2s_Init(BLAKE2S_CTX *c)
+{
+    BLAKE2S_PARAM P[1];
+
+    P->digest_length = BLAKE2S_DIGEST_LENGTH;
+    P->key_length    = 0;
+    P->fanout        = 1;
+    P->depth         = 1;
+    store32(P->leaf_length, 0);
+    store48(P->node_offset, 0);
+    P->node_depth    = 0;
+    P->inner_length  = 0;
+    memset(P->salt,     0, sizeof(P->salt));
+    memset(P->personal, 0, sizeof(P->personal));
+    blake2s_init_param(c, P);
+    return 1;
+}
+
+/* Permute the state while xoring in the block of data. */
+static void blake2s_compress(BLAKE2S_CTX *S,
+                            const uint8_t *blocks,
+                            size_t len)
+{
+    uint32_t m[16];
+    uint32_t v[16];
+    size_t i;
+    size_t increment;
+
+    /*
+     * There are two distinct usage vectors for this function:
+     *
+     * a) BLAKE2s_Update uses it to process complete blocks,
+     *    possibly more than one at a time;
+     *
+     * b) BLAK2s_Final uses it to process last block, always
+     *    single but possibly incomplete, in which case caller
+     *    pads input with zeros.
+     */
+    assert(len < BLAKE2S_BLOCKBYTES || len % BLAKE2S_BLOCKBYTES == 0);
+
+    /*
+     * Since last block is always processed with separate call,
+     * |len| not being multiple of complete blocks can be observed
+     * only with |len| being less than BLAKE2S_BLOCKBYTES ("less"
+     * including even zero), which is why following assignment doesn't
+     * have to reside inside the main loop below.
+     */
+    increment = len < BLAKE2S_BLOCKBYTES ? len : BLAKE2S_BLOCKBYTES;
+
+    for (i = 0; i < 8; ++i) {
+        v[i] = S->h[i];
+    }
+
+    do {
+        for (i = 0; i < 16; ++i) {
+            m[i] = load32(blocks + i * sizeof(m[i]));
+        }
+
+        /* blake2s_increment_counter */
+        S->t[0] += increment;
+        S->t[1] += (S->t[0] < increment);
+
+        v[ 8] = blake2s_IV[0];
+        v[ 9] = blake2s_IV[1];
+        v[10] = blake2s_IV[2];
+        v[11] = blake2s_IV[3];
+        v[12] = S->t[0] ^ blake2s_IV[4];
+        v[13] = S->t[1] ^ blake2s_IV[5];
+        v[14] = S->f[0] ^ blake2s_IV[6];
+        v[15] = S->f[1] ^ blake2s_IV[7];
+#define G(r,i,a,b,c,d) \
+        do { \
+            a = a + b + m[blake2s_sigma[r][2*i+0]]; \
+            d = rotr32(d ^ a, 16); \
+            c = c + d; \
+            b = rotr32(b ^ c, 12); \
+            a = a + b + m[blake2s_sigma[r][2*i+1]]; \
+            d = rotr32(d ^ a, 8); \
+            c = c + d; \
+            b = rotr32(b ^ c, 7); \
+        } while (0)
+#define ROUND(r)  \
+        do { \
+            G(r,0,v[ 0],v[ 4],v[ 8],v[12]); \
+            G(r,1,v[ 1],v[ 5],v[ 9],v[13]); \
+            G(r,2,v[ 2],v[ 6],v[10],v[14]); \
+            G(r,3,v[ 3],v[ 7],v[11],v[15]); \
+            G(r,4,v[ 0],v[ 5],v[10],v[15]); \
+            G(r,5,v[ 1],v[ 6],v[11],v[12]); \
+            G(r,6,v[ 2],v[ 7],v[ 8],v[13]); \
+            G(r,7,v[ 3],v[ 4],v[ 9],v[14]); \
+        } while (0)
+#if defined(OPENSSL_SMALL_FOOTPRINT)
+        /* almost 3x reduction on x86_64, 4.5x on ARMv8, 4x on ARMv4 */
+        for (i = 0; i < 10; i++) {
+            ROUND(i);
+        }
+#else
+        ROUND(0);
+        ROUND(1);
+        ROUND(2);
+        ROUND(3);
+        ROUND(4);
+        ROUND(5);
+        ROUND(6);
+        ROUND(7);
+        ROUND(8);
+        ROUND(9);
+#endif
+
+        for (i = 0; i < 8; ++i) {
+            S->h[i] = v[i] ^= v[i + 8] ^ S->h[i];
+        }
+#undef G
+#undef ROUND
+        blocks += increment;
+        len -= increment;
+    } while (len);
+}
+
+/* Absorb the input data into the hash state.  Always returns 1. */
+int BLAKE2s_Update(BLAKE2S_CTX *c, const void *data, size_t datalen)
+{
+    const uint8_t *in = data;
+    size_t fill;
+
+    /*
+     * Intuitively one would expect intermediate buffer, c->buf, to
+     * store incomplete blocks. But in this case we are interested to
+     * temporarily stash even complete blocks, because last one in the
+     * stream has to be treated in special way, and at this point we
+     * don't know if last block in *this* call is last one "ever". This
+     * is the reason for why |datalen| is compared as >, and not >=.
+     */
+    fill = sizeof(c->buf) - c->buflen;
+    if (datalen > fill) {
+        if (c->buflen) {
+            memcpy(c->buf + c->buflen, in, fill); /* Fill buffer */
+            blake2s_compress(c, c->buf, BLAKE2S_BLOCKBYTES);
+            c->buflen = 0;
+            in += fill;
+            datalen -= fill;
+        }
+        if (datalen > BLAKE2S_BLOCKBYTES) {
+            size_t stashlen = datalen % BLAKE2S_BLOCKBYTES;
+            /*
+             * If |datalen| is a multiple of the blocksize, stash
+             * last complete block, it can be final one...
+             */
+            stashlen = stashlen ? stashlen : BLAKE2S_BLOCKBYTES;
+            datalen -= stashlen;
+            blake2s_compress(c, in, datalen);
+            in += datalen;
+            datalen = stashlen;
+        }
+    }
+
+    assert(datalen <= BLAKE2S_BLOCKBYTES);
+
+    memcpy(c->buf + c->buflen, in, datalen);
+    c->buflen += datalen; /* Be lazy, do not compress */
+
+    return 1;
+}
+
+/*
+ * Calculate the final hash and save it in md.
+ * Always returns 1.
+ */
+int BLAKE2s_Final(unsigned char *md, BLAKE2S_CTX *c)
+{
+    int i;
+
+    blake2s_set_lastblock(c);
+    /* Padding */
+    memset(c->buf + c->buflen, 0, sizeof(c->buf) - c->buflen);
+    blake2s_compress(c, c->buf, c->buflen);
+
+    /* Output full hash to temp buffer */
+    for (i = 0; i < 8; ++i) {
+        store32(md + sizeof(c->h[i]) * i, c->h[i]);
+    }
+
+    OPENSSL_cleanse(c, sizeof(BLAKE2S_CTX));
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/build.info
new file mode 100644
index 000000000..0036f0848
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/build.info
@@ -0,0 +1,3 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        blake2b.c blake2s.c m_blake2b.c m_blake2s.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/m_blake2b.c b/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/m_blake2b.c
new file mode 100644
index 000000000..c493648c3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/m_blake2b.c
@@ -0,0 +1,59 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Derived from the BLAKE2 reference implementation written by Samuel Neves.
+ * Copyright 2012, Samuel Neves <sneves@dei.uc.pt>
+ * More information about the BLAKE2 hash function and its implementations
+ * can be found at https://blake2.net.
+ */
+
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_BLAKE2
+
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include "blake2_locl.h"
+# include "internal/evp_int.h"
+
+static int init(EVP_MD_CTX *ctx)
+{
+    return BLAKE2b_Init(EVP_MD_CTX_md_data(ctx));
+}
+
+static int update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return BLAKE2b_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return BLAKE2b_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
+static const EVP_MD blake2b_md = {
+    NID_blake2b512,
+    0,
+    BLAKE2B_DIGEST_LENGTH,
+    0,
+    init,
+    update,
+    final,
+    NULL,
+    NULL,
+    BLAKE2B_BLOCKBYTES,
+    sizeof(EVP_MD *) + sizeof(BLAKE2B_CTX),
+};
+
+const EVP_MD *EVP_blake2b512(void)
+{
+    return &blake2b_md;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/m_blake2s.c b/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/m_blake2s.c
new file mode 100644
index 000000000..83b2811e4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/blake2/m_blake2s.c
@@ -0,0 +1,59 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Derived from the BLAKE2 reference implementation written by Samuel Neves.
+ * Copyright 2012, Samuel Neves <sneves@dei.uc.pt>
+ * More information about the BLAKE2 hash function and its implementations
+ * can be found at https://blake2.net.
+ */
+
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_BLAKE2
+
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include "blake2_locl.h"
+# include "internal/evp_int.h"
+
+static int init(EVP_MD_CTX *ctx)
+{
+    return BLAKE2s_Init(EVP_MD_CTX_md_data(ctx));
+}
+
+static int update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return BLAKE2s_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return BLAKE2s_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
+static const EVP_MD blake2s_md = {
+    NID_blake2s256,
+    0,
+    BLAKE2S_DIGEST_LENGTH,
+    0,
+    init,
+    update,
+    final,
+    NULL,
+    NULL,
+    BLAKE2S_BLOCKBYTES,
+    sizeof(EVP_MD *) + sizeof(BLAKE2S_CTX),
+};
+
+const EVP_MD *EVP_blake2s256(void)
+{
+    return &blake2s_md;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/README.pod b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/README.pod
new file mode 100644
index 000000000..706a14034
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/README.pod
@@ -0,0 +1,241 @@
+=pod
+
+=head1 NAME
+
+bn_mul_words, bn_mul_add_words, bn_sqr_words, bn_div_words,
+bn_add_words, bn_sub_words, bn_mul_comba4, bn_mul_comba8,
+bn_sqr_comba4, bn_sqr_comba8, bn_cmp_words, bn_mul_normal,
+bn_mul_low_normal, bn_mul_recursive, bn_mul_part_recursive,
+bn_mul_low_recursive, bn_sqr_normal, bn_sqr_recursive,
+bn_expand, bn_wexpand, bn_expand2, bn_fix_top, bn_check_top,
+bn_print, bn_dump, bn_set_max, bn_set_high, bn_set_low - BIGNUM
+library internal functions
+
+=head1 SYNOPSIS
+
+ #include <openssl/bn.h>
+
+ BN_ULONG bn_mul_words(BN_ULONG *rp, BN_ULONG *ap, int num, BN_ULONG w);
+ BN_ULONG bn_mul_add_words(BN_ULONG *rp, BN_ULONG *ap, int num,
+   BN_ULONG w);
+ void     bn_sqr_words(BN_ULONG *rp, BN_ULONG *ap, int num);
+ BN_ULONG bn_div_words(BN_ULONG h, BN_ULONG l, BN_ULONG d);
+ BN_ULONG bn_add_words(BN_ULONG *rp, BN_ULONG *ap, BN_ULONG *bp,
+   int num);
+ BN_ULONG bn_sub_words(BN_ULONG *rp, BN_ULONG *ap, BN_ULONG *bp,
+   int num);
+
+ void bn_mul_comba4(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b);
+ void bn_mul_comba8(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b);
+ void bn_sqr_comba4(BN_ULONG *r, BN_ULONG *a);
+ void bn_sqr_comba8(BN_ULONG *r, BN_ULONG *a);
+
+ int bn_cmp_words(BN_ULONG *a, BN_ULONG *b, int n);
+
+ void bn_mul_normal(BN_ULONG *r, BN_ULONG *a, int na, BN_ULONG *b,
+   int nb);
+ void bn_mul_low_normal(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n);
+ void bn_mul_recursive(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n2,
+   int dna, int dnb, BN_ULONG *tmp);
+ void bn_mul_part_recursive(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b,
+   int n, int tna, int tnb, BN_ULONG *tmp);
+ void bn_mul_low_recursive(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b,
+   int n2, BN_ULONG *tmp);
+
+ void bn_sqr_normal(BN_ULONG *r, BN_ULONG *a, int n, BN_ULONG *tmp);
+ void bn_sqr_recursive(BN_ULONG *r, BN_ULONG *a, int n2, BN_ULONG *tmp);
+
+ void mul(BN_ULONG r, BN_ULONG a, BN_ULONG w, BN_ULONG c);
+ void mul_add(BN_ULONG r, BN_ULONG a, BN_ULONG w, BN_ULONG c);
+ void sqr(BN_ULONG r0, BN_ULONG r1, BN_ULONG a);
+
+ BIGNUM *bn_expand(BIGNUM *a, int bits);
+ BIGNUM *bn_wexpand(BIGNUM *a, int n);
+ BIGNUM *bn_expand2(BIGNUM *a, int n);
+ void bn_fix_top(BIGNUM *a);
+
+ void bn_check_top(BIGNUM *a);
+ void bn_print(BIGNUM *a);
+ void bn_dump(BN_ULONG *d, int n);
+ void bn_set_max(BIGNUM *a);
+ void bn_set_high(BIGNUM *r, BIGNUM *a, int n);
+ void bn_set_low(BIGNUM *r, BIGNUM *a, int n);
+
+=head1 DESCRIPTION
+
+This page documents the internal functions used by the OpenSSL
+B<BIGNUM> implementation. They are described here to facilitate
+debugging and extending the library. They are I<not> to be used by
+applications.
+
+=head2 The BIGNUM structure
+
+ typedef struct bignum_st BIGNUM;
+
+ struct bignum_st
+        {
+        BN_ULONG *d;    /* Pointer to an array of 'BN_BITS2' bit chunks. */
+        int top;        /* Index of last used d +1. */
+        /* The next are internal book keeping for bn_expand. */
+        int dmax;       /* Size of the d array. */
+        int neg;        /* one if the number is negative */
+        int flags;
+        };
+
+
+The integer value is stored in B<d>, a malloc()ed array of words (B<BN_ULONG>),
+least significant word first. A B<BN_ULONG> can be either 16, 32 or 64 bits
+in size, depending on the 'number of bits' (B<BITS2>) specified in
+C<openssl/bn.h>.
+
+B<dmax> is the size of the B<d> array that has been allocated.  B<top>
+is the number of words being used, so for a value of 4, bn.d[0]=4 and
+bn.top=1.  B<neg> is 1 if the number is negative.  When a B<BIGNUM> is
+B<0>, the B<d> field can be B<NULL> and B<top> == B<0>.
+
+B<flags> is a bit field of flags which are defined in C<openssl/bn.h>. The
+flags begin with B<BN_FLG_>. The macros BN_set_flags(b, n) and
+BN_get_flags(b, n) exist to enable or fetch flag(s) B<n> from B<BIGNUM>
+structure B<b>.
+
+Various routines in this library require the use of temporary
+B<BIGNUM> variables during their execution.  Since dynamic memory
+allocation to create B<BIGNUM>s is rather expensive when used in
+conjunction with repeated subroutine calls, the B<BN_CTX> structure is
+used.  This structure contains B<BN_CTX_NUM> B<BIGNUM>s, see
+L<BN_CTX_start(3)>.
+
+=head2 Low-level arithmetic operations
+
+These functions are implemented in C and for several platforms in
+assembly language:
+
+bn_mul_words(B<rp>, B<ap>, B<num>, B<w>) operates on the B<num> word
+arrays B<rp> and B<ap>.  It computes B<ap> * B<w>, places the result
+in B<rp>, and returns the high word (carry).
+
+bn_mul_add_words(B<rp>, B<ap>, B<num>, B<w>) operates on the B<num>
+word arrays B<rp> and B<ap>.  It computes B<ap> * B<w> + B<rp>, places
+the result in B<rp>, and returns the high word (carry).
+
+bn_sqr_words(B<rp>, B<ap>, B<n>) operates on the B<num> word array
+B<ap> and the 2*B<num> word array B<ap>.  It computes B<ap> * B<ap>
+word-wise, and places the low and high bytes of the result in B<rp>.
+
+bn_div_words(B<h>, B<l>, B<d>) divides the two word number (B<h>, B<l>)
+by B<d> and returns the result.
+
+bn_add_words(B<rp>, B<ap>, B<bp>, B<num>) operates on the B<num> word
+arrays B<ap>, B<bp> and B<rp>.  It computes B<ap> + B<bp>, places the
+result in B<rp>, and returns the high word (carry).
+
+bn_sub_words(B<rp>, B<ap>, B<bp>, B<num>) operates on the B<num> word
+arrays B<ap>, B<bp> and B<rp>.  It computes B<ap> - B<bp>, places the
+result in B<rp>, and returns the carry (1 if B<bp> E<gt> B<ap>, 0
+otherwise).
+
+bn_mul_comba4(B<r>, B<a>, B<b>) operates on the 4 word arrays B<a> and
+B<b> and the 8 word array B<r>.  It computes B<a>*B<b> and places the
+result in B<r>.
+
+bn_mul_comba8(B<r>, B<a>, B<b>) operates on the 8 word arrays B<a> and
+B<b> and the 16 word array B<r>.  It computes B<a>*B<b> and places the
+result in B<r>.
+
+bn_sqr_comba4(B<r>, B<a>, B<b>) operates on the 4 word arrays B<a> and
+B<b> and the 8 word array B<r>.
+
+bn_sqr_comba8(B<r>, B<a>, B<b>) operates on the 8 word arrays B<a> and
+B<b> and the 16 word array B<r>.
+
+The following functions are implemented in C:
+
+bn_cmp_words(B<a>, B<b>, B<n>) operates on the B<n> word arrays B<a>
+and B<b>.  It returns 1, 0 and -1 if B<a> is greater than, equal and
+less than B<b>.
+
+bn_mul_normal(B<r>, B<a>, B<na>, B<b>, B<nb>) operates on the B<na>
+word array B<a>, the B<nb> word array B<b> and the B<na>+B<nb> word
+array B<r>.  It computes B<a>*B<b> and places the result in B<r>.
+
+bn_mul_low_normal(B<r>, B<a>, B<b>, B<n>) operates on the B<n> word
+arrays B<r>, B<a> and B<b>.  It computes the B<n> low words of
+B<a>*B<b> and places the result in B<r>.
+
+bn_mul_recursive(B<r>, B<a>, B<b>, B<n2>, B<dna>, B<dnb>, B<t>) operates
+on the word arrays B<a> and B<b> of length B<n2>+B<dna> and B<n2>+B<dnb>
+(B<dna> and B<dnb> are currently allowed to be 0 or negative) and the 2*B<n2>
+word arrays B<r> and B<t>.  B<n2> must be a power of 2.  It computes
+B<a>*B<b> and places the result in B<r>.
+
+bn_mul_part_recursive(B<r>, B<a>, B<b>, B<n>, B<tna>, B<tnb>, B<tmp>)
+operates on the word arrays B<a> and B<b> of length B<n>+B<tna> and
+B<n>+B<tnb> and the 4*B<n> word arrays B<r> and B<tmp>.
+
+bn_mul_low_recursive(B<r>, B<a>, B<b>, B<n2>, B<tmp>) operates on the
+B<n2> word arrays B<r> and B<tmp> and the B<n2>/2 word arrays B<a>
+and B<b>.
+
+BN_mul() calls bn_mul_normal(), or an optimized implementation if the
+factors have the same size: bn_mul_comba8() is used if they are 8
+words long, bn_mul_recursive() if they are larger than
+B<BN_MULL_SIZE_NORMAL> and the size is an exact multiple of the word
+size, and bn_mul_part_recursive() for others that are larger than
+B<BN_MULL_SIZE_NORMAL>.
+
+bn_sqr_normal(B<r>, B<a>, B<n>, B<tmp>) operates on the B<n> word array
+B<a> and the 2*B<n> word arrays B<tmp> and B<r>.
+
+The implementations use the following macros which, depending on the
+architecture, may use "long long" C operations or inline assembler.
+They are defined in C<bn_lcl.h>.
+
+mul(B<r>, B<a>, B<w>, B<c>) computes B<w>*B<a>+B<c> and places the
+low word of the result in B<r> and the high word in B<c>.
+
+mul_add(B<r>, B<a>, B<w>, B<c>) computes B<w>*B<a>+B<r>+B<c> and
+places the low word of the result in B<r> and the high word in B<c>.
+
+sqr(B<r0>, B<r1>, B<a>) computes B<a>*B<a> and places the low word
+of the result in B<r0> and the high word in B<r1>.
+
+=head2 Size changes
+
+bn_expand() ensures that B<b> has enough space for a B<bits> bit
+number.  bn_wexpand() ensures that B<b> has enough space for an
+B<n> word number.  If the number has to be expanded, both macros
+call bn_expand2(), which allocates a new B<d> array and copies the
+data.  They return B<NULL> on error, B<b> otherwise.
+
+The bn_fix_top() macro reduces B<a-E<gt>top> to point to the most
+significant non-zero word plus one when B<a> has shrunk.
+
+=head2 Debugging
+
+bn_check_top() verifies that C<((a)-E<gt>top E<gt>= 0 && (a)-E<gt>top
+E<lt>= (a)-E<gt>dmax)>.  A violation will cause the program to abort.
+
+bn_print() prints B<a> to stderr. bn_dump() prints B<n> words at B<d>
+(in reverse order, i.e. most significant word first) to stderr.
+
+bn_set_max() makes B<a> a static number with a B<dmax> of its current size.
+This is used by bn_set_low() and bn_set_high() to make B<r> a read-only
+B<BIGNUM> that contains the B<n> low or high words of B<a>.
+
+If B<BN_DEBUG> is not defined, bn_check_top(), bn_print(), bn_dump()
+and bn_set_max() are defined as empty macros.
+
+=head1 SEE ALSO
+
+L<bn(3)>
+
+=head1 COPYRIGHT
+
+Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+
+Licensed under the OpenSSL license (the "License").  You may not use
+this file except in compliance with the License.  You can obtain a copy
+in the file LICENSE in the source distribution or at
+L<https://www.openssl.org/source/license.html>.
+
+=cut
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/alpha-mont.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/alpha-mont.pl
new file mode 100644
index 000000000..c9b962a15
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/alpha-mont.pl
@@ -0,0 +1,328 @@
+#! /usr/bin/env perl
+# Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# On 21264 RSA sign performance improves by 70/35/20/15 percent for
+# 512/1024/2048/4096 bit key lengths. This is against vendor compiler
+# instructed to '-tune host' code with in-line assembler. Other
+# benchmarks improve by 15-20%. To anchor it to something else, the
+# code provides approximately the same performance per GHz as AMD64.
+# I.e. if you compare 1GHz 21264 and 2GHz Opteron, you'll observe ~2x
+# difference.
+
+$output=pop;
+open STDOUT,">$output";
+
+# int bn_mul_mont(
+$rp="a0";	# BN_ULONG *rp,
+$ap="a1";	# const BN_ULONG *ap,
+$bp="a2";	# const BN_ULONG *bp,
+$np="a3";	# const BN_ULONG *np,
+$n0="a4";	# const BN_ULONG *n0,
+$num="a5";	# int num);
+
+$lo0="t0";
+$hi0="t1";
+$lo1="t2";
+$hi1="t3";
+$aj="t4";
+$bi="t5";
+$nj="t6";
+$tp="t7";
+$alo="t8";
+$ahi="t9";
+$nlo="t10";
+$nhi="t11";
+$tj="t12";
+$i="s3";
+$j="s4";
+$m1="s5";
+
+$code=<<___;
+#ifdef __linux__
+#include <asm/regdef.h>
+#else
+#include <asm.h>
+#include <regdef.h>
+#endif
+
+.text
+
+.set	noat
+.set	noreorder
+
+.globl	bn_mul_mont
+.align	5
+.ent	bn_mul_mont
+bn_mul_mont:
+	lda	sp,-48(sp)
+	stq	ra,0(sp)
+	stq	s3,8(sp)
+	stq	s4,16(sp)
+	stq	s5,24(sp)
+	stq	fp,32(sp)
+	mov	sp,fp
+	.mask	0x0400f000,-48
+	.frame	fp,48,ra
+	.prologue 0
+
+	.align	4
+	.set	reorder
+	sextl	$num,$num
+	mov	0,v0
+	cmplt	$num,4,AT
+	bne	AT,.Lexit
+
+	ldq	$hi0,0($ap)	# ap[0]
+	s8addq	$num,16,AT
+	ldq	$aj,8($ap)
+	subq	sp,AT,sp
+	ldq	$bi,0($bp)	# bp[0]
+	lda	AT,-4096(zero)	# mov	-4096,AT
+	ldq	$n0,0($n0)
+	and	sp,AT,sp
+
+	mulq	$hi0,$bi,$lo0
+	ldq	$hi1,0($np)	# np[0]
+	umulh	$hi0,$bi,$hi0
+	ldq	$nj,8($np)
+
+	mulq	$lo0,$n0,$m1
+
+	mulq	$hi1,$m1,$lo1
+	umulh	$hi1,$m1,$hi1
+
+	addq	$lo1,$lo0,$lo1
+	cmpult	$lo1,$lo0,AT
+	addq	$hi1,AT,$hi1
+
+	mulq	$aj,$bi,$alo
+	mov	2,$j
+	umulh	$aj,$bi,$ahi
+	mov	sp,$tp
+
+	mulq	$nj,$m1,$nlo
+	s8addq	$j,$ap,$aj
+	umulh	$nj,$m1,$nhi
+	s8addq	$j,$np,$nj
+.align	4
+.L1st:
+	.set	noreorder
+	ldq	$aj,0($aj)
+	addl	$j,1,$j
+	ldq	$nj,0($nj)
+	lda	$tp,8($tp)
+
+	addq	$alo,$hi0,$lo0
+	mulq	$aj,$bi,$alo
+	cmpult	$lo0,$hi0,AT
+	addq	$nlo,$hi1,$lo1
+
+	mulq	$nj,$m1,$nlo
+	addq	$ahi,AT,$hi0
+	cmpult	$lo1,$hi1,v0
+	cmplt	$j,$num,$tj
+
+	umulh	$aj,$bi,$ahi
+	addq	$nhi,v0,$hi1
+	addq	$lo1,$lo0,$lo1
+	s8addq	$j,$ap,$aj
+
+	umulh	$nj,$m1,$nhi
+	cmpult	$lo1,$lo0,v0
+	addq	$hi1,v0,$hi1
+	s8addq	$j,$np,$nj
+
+	stq	$lo1,-8($tp)
+	nop
+	unop
+	bne	$tj,.L1st
+	.set	reorder
+
+	addq	$alo,$hi0,$lo0
+	addq	$nlo,$hi1,$lo1
+	cmpult	$lo0,$hi0,AT
+	cmpult	$lo1,$hi1,v0
+	addq	$ahi,AT,$hi0
+	addq	$nhi,v0,$hi1
+
+	addq	$lo1,$lo0,$lo1
+	cmpult	$lo1,$lo0,v0
+	addq	$hi1,v0,$hi1
+
+	stq	$lo1,0($tp)
+
+	addq	$hi1,$hi0,$hi1
+	cmpult	$hi1,$hi0,AT
+	stq	$hi1,8($tp)
+	stq	AT,16($tp)
+
+	mov	1,$i
+.align	4
+.Louter:
+	s8addq	$i,$bp,$bi
+	ldq	$hi0,0($ap)
+	ldq	$aj,8($ap)
+	ldq	$bi,0($bi)
+	ldq	$hi1,0($np)
+	ldq	$nj,8($np)
+	ldq	$tj,0(sp)
+
+	mulq	$hi0,$bi,$lo0
+	umulh	$hi0,$bi,$hi0
+
+	addq	$lo0,$tj,$lo0
+	cmpult	$lo0,$tj,AT
+	addq	$hi0,AT,$hi0
+
+	mulq	$lo0,$n0,$m1
+
+	mulq	$hi1,$m1,$lo1
+	umulh	$hi1,$m1,$hi1
+
+	addq	$lo1,$lo0,$lo1
+	cmpult	$lo1,$lo0,AT
+	mov	2,$j
+	addq	$hi1,AT,$hi1
+
+	mulq	$aj,$bi,$alo
+	mov	sp,$tp
+	umulh	$aj,$bi,$ahi
+
+	mulq	$nj,$m1,$nlo
+	s8addq	$j,$ap,$aj
+	umulh	$nj,$m1,$nhi
+.align	4
+.Linner:
+	.set	noreorder
+	ldq	$tj,8($tp)	#L0
+	nop			#U1
+	ldq	$aj,0($aj)	#L1
+	s8addq	$j,$np,$nj	#U0
+
+	ldq	$nj,0($nj)	#L0
+	nop			#U1
+	addq	$alo,$hi0,$lo0	#L1
+	lda	$tp,8($tp)
+
+	mulq	$aj,$bi,$alo	#U1
+	cmpult	$lo0,$hi0,AT	#L0
+	addq	$nlo,$hi1,$lo1	#L1
+	addl	$j,1,$j
+
+	mulq	$nj,$m1,$nlo	#U1
+	addq	$ahi,AT,$hi0	#L0
+	addq	$lo0,$tj,$lo0	#L1
+	cmpult	$lo1,$hi1,v0	#U0
+
+	umulh	$aj,$bi,$ahi	#U1
+	cmpult	$lo0,$tj,AT	#L0
+	addq	$lo1,$lo0,$lo1	#L1
+	addq	$nhi,v0,$hi1	#U0
+
+	umulh	$nj,$m1,$nhi	#U1
+	s8addq	$j,$ap,$aj	#L0
+	cmpult	$lo1,$lo0,v0	#L1
+	cmplt	$j,$num,$tj	#U0	# borrow $tj
+
+	addq	$hi0,AT,$hi0	#L0
+	addq	$hi1,v0,$hi1	#U1
+	stq	$lo1,-8($tp)	#L1
+	bne	$tj,.Linner	#U0
+	.set	reorder
+
+	ldq	$tj,8($tp)
+	addq	$alo,$hi0,$lo0
+	addq	$nlo,$hi1,$lo1
+	cmpult	$lo0,$hi0,AT
+	cmpult	$lo1,$hi1,v0
+	addq	$ahi,AT,$hi0
+	addq	$nhi,v0,$hi1
+
+	addq	$lo0,$tj,$lo0
+	cmpult	$lo0,$tj,AT
+	addq	$hi0,AT,$hi0
+
+	ldq	$tj,16($tp)
+	addq	$lo1,$lo0,$j
+	cmpult	$j,$lo0,v0
+	addq	$hi1,v0,$hi1
+
+	addq	$hi1,$hi0,$lo1
+	stq	$j,0($tp)
+	cmpult	$lo1,$hi0,$hi1
+	addq	$lo1,$tj,$lo1
+	cmpult	$lo1,$tj,AT
+	addl	$i,1,$i
+	addq	$hi1,AT,$hi1
+	stq	$lo1,8($tp)
+	cmplt	$i,$num,$tj	# borrow $tj
+	stq	$hi1,16($tp)
+	bne	$tj,.Louter
+
+	s8addq	$num,sp,$tj	# &tp[num]
+	mov	$rp,$bp		# put rp aside
+	mov	sp,$tp
+	mov	sp,$ap
+	mov	0,$hi0		# clear borrow bit
+
+.align	4
+.Lsub:	ldq	$lo0,0($tp)
+	ldq	$lo1,0($np)
+	lda	$tp,8($tp)
+	lda	$np,8($np)
+	subq	$lo0,$lo1,$lo1	# tp[i]-np[i]
+	cmpult	$lo0,$lo1,AT
+	subq	$lo1,$hi0,$lo0
+	cmpult	$lo1,$lo0,$hi0
+	or	$hi0,AT,$hi0
+	stq	$lo0,0($rp)
+	cmpult	$tp,$tj,v0
+	lda	$rp,8($rp)
+	bne	v0,.Lsub
+
+	subq	$hi1,$hi0,$hi0	# handle upmost overflow bit
+	mov	sp,$tp
+	mov	$bp,$rp		# restore rp
+
+.align	4
+.Lcopy:	ldq	$aj,0($tp)	# conditional copy
+	ldq	$nj,0($rp)
+	lda	$tp,8($tp)
+	lda	$rp,8($rp)
+	cmoveq	$hi0,$nj,$aj
+	stq	zero,-8($tp)	# zap tp
+	cmpult	$tp,$tj,AT
+	stq	$aj,-8($rp)
+	bne	AT,.Lcopy
+	mov	1,v0
+
+.Lexit:
+	.set	noreorder
+	mov	fp,sp
+	/*ldq	ra,0(sp)*/
+	ldq	s3,8(sp)
+	ldq	s4,16(sp)
+	ldq	s5,24(sp)
+	ldq	fp,32(sp)
+	lda	sp,48(sp)
+	ret	(ra)
+.end	bn_mul_mont
+.ascii	"Montgomery Multiplication for Alpha, CRYPTOGAMS by <appro\@openssl.org>"
+.align	2
+___
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/armv4-gf2m.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/armv4-gf2m.pl
new file mode 100644
index 000000000..7a0cdb2e8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/armv4-gf2m.pl
@@ -0,0 +1,332 @@
+#! /usr/bin/env perl
+# Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# May 2011
+#
+# The module implements bn_GF2m_mul_2x2 polynomial multiplication
+# used in bn_gf2m.c. It's kind of low-hanging mechanical port from
+# C for the time being... Except that it has two code paths: pure
+# integer code suitable for any ARMv4 and later CPU and NEON code
+# suitable for ARMv7. Pure integer 1x1 multiplication subroutine runs
+# in ~45 cycles on dual-issue core such as Cortex A8, which is ~50%
+# faster than compiler-generated code. For ECDH and ECDSA verify (but
+# not for ECDSA sign) it means 25%-45% improvement depending on key
+# length, more for longer keys. Even though NEON 1x1 multiplication
+# runs in even less cycles, ~30, improvement is measurable only on
+# longer keys. One has to optimize code elsewhere to get NEON glow...
+#
+# April 2014
+#
+# Double bn_GF2m_mul_2x2 performance by using algorithm from paper
+# referred below, which improves ECDH and ECDSA verify benchmarks
+# by 18-40%.
+#
+# Câmara, D.; Gouvêa, C. P. L.; López, J. & Dahab, R.: Fast Software
+# Polynomial Multiplication on ARM Processors using the NEON Engine.
+#
+# http://conradoplg.cryptoland.net/files/2010/12/mocrysen13.pdf
+
+$flavour = shift;
+if ($flavour=~/\w[\w\-]*\.\w+$/) { $output=$flavour; undef $flavour; }
+else { while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {} }
+
+if ($flavour && $flavour ne "void") {
+    $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+    ( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+    ( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+    die "can't locate arm-xlate.pl";
+
+    open STDOUT,"| \"$^X\" $xlate $flavour $output";
+} else {
+    open STDOUT,">$output";
+}
+
+$code=<<___;
+#include "arm_arch.h"
+
+.text
+#if defined(__thumb2__)
+.syntax	unified
+.thumb
+#else
+.code	32
+#endif
+___
+################
+# private interface to mul_1x1_ialu
+#
+$a="r1";
+$b="r0";
+
+($a0,$a1,$a2,$a12,$a4,$a14)=
+($hi,$lo,$t0,$t1, $i0,$i1 )=map("r$_",(4..9),12);
+
+$mask="r12";
+
+$code.=<<___;
+.type	mul_1x1_ialu,%function
+.align	5
+mul_1x1_ialu:
+	mov	$a0,#0
+	bic	$a1,$a,#3<<30		@ a1=a&0x3fffffff
+	str	$a0,[sp,#0]		@ tab[0]=0
+	add	$a2,$a1,$a1		@ a2=a1<<1
+	str	$a1,[sp,#4]		@ tab[1]=a1
+	eor	$a12,$a1,$a2		@ a1^a2
+	str	$a2,[sp,#8]		@ tab[2]=a2
+	mov	$a4,$a1,lsl#2		@ a4=a1<<2
+	str	$a12,[sp,#12]		@ tab[3]=a1^a2
+	eor	$a14,$a1,$a4		@ a1^a4
+	str	$a4,[sp,#16]		@ tab[4]=a4
+	eor	$a0,$a2,$a4		@ a2^a4
+	str	$a14,[sp,#20]		@ tab[5]=a1^a4
+	eor	$a12,$a12,$a4		@ a1^a2^a4
+	str	$a0,[sp,#24]		@ tab[6]=a2^a4
+	and	$i0,$mask,$b,lsl#2
+	str	$a12,[sp,#28]		@ tab[7]=a1^a2^a4
+
+	and	$i1,$mask,$b,lsr#1
+	ldr	$lo,[sp,$i0]		@ tab[b       & 0x7]
+	and	$i0,$mask,$b,lsr#4
+	ldr	$t1,[sp,$i1]		@ tab[b >>  3 & 0x7]
+	and	$i1,$mask,$b,lsr#7
+	ldr	$t0,[sp,$i0]		@ tab[b >>  6 & 0x7]
+	eor	$lo,$lo,$t1,lsl#3	@ stall
+	mov	$hi,$t1,lsr#29
+	ldr	$t1,[sp,$i1]		@ tab[b >>  9 & 0x7]
+
+	and	$i0,$mask,$b,lsr#10
+	eor	$lo,$lo,$t0,lsl#6
+	eor	$hi,$hi,$t0,lsr#26
+	ldr	$t0,[sp,$i0]		@ tab[b >> 12 & 0x7]
+
+	and	$i1,$mask,$b,lsr#13
+	eor	$lo,$lo,$t1,lsl#9
+	eor	$hi,$hi,$t1,lsr#23
+	ldr	$t1,[sp,$i1]		@ tab[b >> 15 & 0x7]
+
+	and	$i0,$mask,$b,lsr#16
+	eor	$lo,$lo,$t0,lsl#12
+	eor	$hi,$hi,$t0,lsr#20
+	ldr	$t0,[sp,$i0]		@ tab[b >> 18 & 0x7]
+
+	and	$i1,$mask,$b,lsr#19
+	eor	$lo,$lo,$t1,lsl#15
+	eor	$hi,$hi,$t1,lsr#17
+	ldr	$t1,[sp,$i1]		@ tab[b >> 21 & 0x7]
+
+	and	$i0,$mask,$b,lsr#22
+	eor	$lo,$lo,$t0,lsl#18
+	eor	$hi,$hi,$t0,lsr#14
+	ldr	$t0,[sp,$i0]		@ tab[b >> 24 & 0x7]
+
+	and	$i1,$mask,$b,lsr#25
+	eor	$lo,$lo,$t1,lsl#21
+	eor	$hi,$hi,$t1,lsr#11
+	ldr	$t1,[sp,$i1]		@ tab[b >> 27 & 0x7]
+
+	tst	$a,#1<<30
+	and	$i0,$mask,$b,lsr#28
+	eor	$lo,$lo,$t0,lsl#24
+	eor	$hi,$hi,$t0,lsr#8
+	ldr	$t0,[sp,$i0]		@ tab[b >> 30      ]
+
+#ifdef	__thumb2__
+	itt	ne
+#endif
+	eorne	$lo,$lo,$b,lsl#30
+	eorne	$hi,$hi,$b,lsr#2
+	tst	$a,#1<<31
+	eor	$lo,$lo,$t1,lsl#27
+	eor	$hi,$hi,$t1,lsr#5
+#ifdef	__thumb2__
+	itt	ne
+#endif
+	eorne	$lo,$lo,$b,lsl#31
+	eorne	$hi,$hi,$b,lsr#1
+	eor	$lo,$lo,$t0,lsl#30
+	eor	$hi,$hi,$t0,lsr#2
+
+	mov	pc,lr
+.size	mul_1x1_ialu,.-mul_1x1_ialu
+___
+################
+# void	bn_GF2m_mul_2x2(BN_ULONG *r,
+#	BN_ULONG a1,BN_ULONG a0,
+#	BN_ULONG b1,BN_ULONG b0);	# r[3..0]=a1a0·b1b0
+{
+$code.=<<___;
+.global	bn_GF2m_mul_2x2
+.type	bn_GF2m_mul_2x2,%function
+.align	5
+bn_GF2m_mul_2x2:
+#if __ARM_MAX_ARCH__>=7
+	stmdb	sp!,{r10,lr}
+	ldr	r12,.LOPENSSL_armcap
+	adr	r10,.LOPENSSL_armcap
+	ldr	r12,[r12,r10]
+#ifdef	__APPLE__
+	ldr	r12,[r12]
+#endif
+	tst	r12,#ARMV7_NEON
+	itt	ne
+	ldrne	r10,[sp],#8
+	bne	.LNEON
+	stmdb	sp!,{r4-r9}
+#else
+	stmdb	sp!,{r4-r10,lr}
+#endif
+___
+$ret="r10";	# reassigned 1st argument
+$code.=<<___;
+	mov	$ret,r0			@ reassign 1st argument
+	mov	$b,r3			@ $b=b1
+	sub	r7,sp,#36
+	mov	r8,sp
+	and	r7,r7,#-32
+	ldr	r3,[sp,#32]		@ load b0
+	mov	$mask,#7<<2
+	mov	sp,r7			@ allocate tab[8]
+	str	r8,[r7,#32]
+
+	bl	mul_1x1_ialu		@ a1·b1
+	str	$lo,[$ret,#8]
+	str	$hi,[$ret,#12]
+
+	eor	$b,$b,r3		@ flip b0 and b1
+	 eor	$a,$a,r2		@ flip a0 and a1
+	eor	r3,r3,$b
+	 eor	r2,r2,$a
+	eor	$b,$b,r3
+	 eor	$a,$a,r2
+	bl	mul_1x1_ialu		@ a0·b0
+	str	$lo,[$ret]
+	str	$hi,[$ret,#4]
+
+	eor	$a,$a,r2
+	eor	$b,$b,r3
+	bl	mul_1x1_ialu		@ (a1+a0)·(b1+b0)
+___
+@r=map("r$_",(6..9));
+$code.=<<___;
+	ldmia	$ret,{@r[0]-@r[3]}
+	eor	$lo,$lo,$hi
+	ldr	sp,[sp,#32]		@ destroy tab[8]
+	eor	$hi,$hi,@r[1]
+	eor	$lo,$lo,@r[0]
+	eor	$hi,$hi,@r[2]
+	eor	$lo,$lo,@r[3]
+	eor	$hi,$hi,@r[3]
+	str	$hi,[$ret,#8]
+	eor	$lo,$lo,$hi
+	str	$lo,[$ret,#4]
+
+#if __ARM_ARCH__>=5
+	ldmia	sp!,{r4-r10,pc}
+#else
+	ldmia	sp!,{r4-r10,lr}
+	tst	lr,#1
+	moveq	pc,lr			@ be binary compatible with V4, yet
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+___
+}
+{
+my ($r,$t0,$t1,$t2,$t3)=map("q$_",(0..3,8..12));
+my ($a,$b,$k48,$k32,$k16)=map("d$_",(26..31));
+
+$code.=<<___;
+#if __ARM_MAX_ARCH__>=7
+.arch	armv7-a
+.fpu	neon
+
+.align	5
+.LNEON:
+	ldr		r12, [sp]		@ 5th argument
+	vmov		$a, r2, r1
+	vmov		$b, r12, r3
+	vmov.i64	$k48, #0x0000ffffffffffff
+	vmov.i64	$k32, #0x00000000ffffffff
+	vmov.i64	$k16, #0x000000000000ffff
+
+	vext.8		$t0#lo, $a, $a, #1	@ A1
+	vmull.p8	$t0, $t0#lo, $b		@ F = A1*B
+	vext.8		$r#lo, $b, $b, #1	@ B1
+	vmull.p8	$r, $a, $r#lo		@ E = A*B1
+	vext.8		$t1#lo, $a, $a, #2	@ A2
+	vmull.p8	$t1, $t1#lo, $b		@ H = A2*B
+	vext.8		$t3#lo, $b, $b, #2	@ B2
+	vmull.p8	$t3, $a, $t3#lo		@ G = A*B2
+	vext.8		$t2#lo, $a, $a, #3	@ A3
+	veor		$t0, $t0, $r		@ L = E + F
+	vmull.p8	$t2, $t2#lo, $b		@ J = A3*B
+	vext.8		$r#lo, $b, $b, #3	@ B3
+	veor		$t1, $t1, $t3		@ M = G + H
+	vmull.p8	$r, $a, $r#lo		@ I = A*B3
+	veor		$t0#lo, $t0#lo, $t0#hi	@ t0 = (L) (P0 + P1) << 8
+	vand		$t0#hi, $t0#hi, $k48
+	vext.8		$t3#lo, $b, $b, #4	@ B4
+	veor		$t1#lo, $t1#lo, $t1#hi	@ t1 = (M) (P2 + P3) << 16
+	vand		$t1#hi, $t1#hi, $k32
+	vmull.p8	$t3, $a, $t3#lo		@ K = A*B4
+	veor		$t2, $t2, $r		@ N = I + J
+	veor		$t0#lo, $t0#lo, $t0#hi
+	veor		$t1#lo, $t1#lo, $t1#hi
+	veor		$t2#lo, $t2#lo, $t2#hi	@ t2 = (N) (P4 + P5) << 24
+	vand		$t2#hi, $t2#hi, $k16
+	vext.8		$t0, $t0, $t0, #15
+	veor		$t3#lo, $t3#lo, $t3#hi	@ t3 = (K) (P6 + P7) << 32
+	vmov.i64	$t3#hi, #0
+	vext.8		$t1, $t1, $t1, #14
+	veor		$t2#lo, $t2#lo, $t2#hi
+	vmull.p8	$r, $a, $b		@ D = A*B
+	vext.8		$t3, $t3, $t3, #12
+	vext.8		$t2, $t2, $t2, #13
+	veor		$t0, $t0, $t1
+	veor		$t2, $t2, $t3
+	veor		$r, $r, $t0
+	veor		$r, $r, $t2
+
+	vst1.32		{$r}, [r0]
+	ret		@ bx lr
+#endif
+___
+}
+$code.=<<___;
+.size	bn_GF2m_mul_2x2,.-bn_GF2m_mul_2x2
+#if __ARM_MAX_ARCH__>=7
+.align	5
+.LOPENSSL_armcap:
+.word	OPENSSL_armcap_P-.
+#endif
+.asciz	"GF(2^m) Multiplication for ARMv4/NEON, CRYPTOGAMS by <appro\@openssl.org>"
+.align	5
+
+#if __ARM_MAX_ARCH__>=7
+.comm	OPENSSL_armcap_P,4,4
+#endif
+___
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/geo;
+
+	s/\bq([0-9]+)#(lo|hi)/sprintf "d%d",2*$1+($2 eq "hi")/geo	or
+	s/\bret\b/bx	lr/go		or
+	s/\bbx\s+lr\b/.word\t0xe12fff1e/go;    # make it possible to compile with -march=armv4
+
+	print $_,"\n";
+}
+close STDOUT;   # enforce flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/armv4-mont.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/armv4-mont.pl
new file mode 100644
index 000000000..6bedc62ba
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/armv4-mont.pl
@@ -0,0 +1,757 @@
+#! /usr/bin/env perl
+# Copyright 2007-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# January 2007.
+
+# Montgomery multiplication for ARMv4.
+#
+# Performance improvement naturally varies among CPU implementations
+# and compilers. The code was observed to provide +65-35% improvement
+# [depending on key length, less for longer keys] on ARM920T, and
+# +115-80% on Intel IXP425. This is compared to pre-bn_mul_mont code
+# base and compiler generated code with in-lined umull and even umlal
+# instructions. The latter means that this code didn't really have an
+# "advantage" of utilizing some "secret" instruction.
+#
+# The code is interoperable with Thumb ISA and is rather compact, less
+# than 1/2KB. Windows CE port would be trivial, as it's exclusively
+# about decorations, ABI and instruction syntax are identical.
+
+# November 2013
+#
+# Add NEON code path, which handles lengths divisible by 8. RSA/DSA
+# performance improvement on Cortex-A8 is ~45-100% depending on key
+# length, more for longer keys. On Cortex-A15 the span is ~10-105%.
+# On Snapdragon S4 improvement was measured to vary from ~70% to
+# incredible ~380%, yes, 4.8x faster, for RSA4096 sign. But this is
+# rather because original integer-only code seems to perform
+# suboptimally on S4. Situation on Cortex-A9 is unfortunately
+# different. It's being looked into, but the trouble is that
+# performance for vectors longer than 256 bits is actually couple
+# of percent worse than for integer-only code. The code is chosen
+# for execution on all NEON-capable processors, because gain on
+# others outweighs the marginal loss on Cortex-A9.
+
+# September 2015
+#
+# Align Cortex-A9 performance with November 2013 improvements, i.e.
+# NEON code is now ~20-105% faster than integer-only one on this
+# processor. But this optimization further improved performance even
+# on other processors: NEON code path is ~45-180% faster than original
+# integer-only on Cortex-A8, ~10-210% on Cortex-A15, ~70-450% on
+# Snapdragon S4.
+
+$flavour = shift;
+if ($flavour=~/\w[\w\-]*\.\w+$/) { $output=$flavour; undef $flavour; }
+else { while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {} }
+
+if ($flavour && $flavour ne "void") {
+    $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+    ( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+    ( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+    die "can't locate arm-xlate.pl";
+
+    open STDOUT,"| \"$^X\" $xlate $flavour $output";
+} else {
+    open STDOUT,">$output";
+}
+
+$num="r0";	# starts as num argument, but holds &tp[num-1]
+$ap="r1";
+$bp="r2"; $bi="r2"; $rp="r2";
+$np="r3";
+$tp="r4";
+$aj="r5";
+$nj="r6";
+$tj="r7";
+$n0="r8";
+###########	# r9 is reserved by ELF as platform specific, e.g. TLS pointer
+$alo="r10";	# sl, gcc uses it to keep @GOT
+$ahi="r11";	# fp
+$nlo="r12";	# ip
+###########	# r13 is stack pointer
+$nhi="r14";	# lr
+###########	# r15 is program counter
+
+#### argument block layout relative to &tp[num-1], a.k.a. $num
+$_rp="$num,#12*4";
+# ap permanently resides in r1
+$_bp="$num,#13*4";
+# np permanently resides in r3
+$_n0="$num,#14*4";
+$_num="$num,#15*4";	$_bpend=$_num;
+
+$code=<<___;
+#include "arm_arch.h"
+
+.text
+#if defined(__thumb2__)
+.syntax	unified
+.thumb
+#else
+.code	32
+#endif
+
+#if __ARM_MAX_ARCH__>=7
+.align	5
+.LOPENSSL_armcap:
+.word	OPENSSL_armcap_P-.Lbn_mul_mont
+#endif
+
+.global	bn_mul_mont
+.type	bn_mul_mont,%function
+
+.align	5
+bn_mul_mont:
+.Lbn_mul_mont:
+	ldr	ip,[sp,#4]		@ load num
+	stmdb	sp!,{r0,r2}		@ sp points at argument block
+#if __ARM_MAX_ARCH__>=7
+	tst	ip,#7
+	bne	.Lialu
+	adr	r0,.Lbn_mul_mont
+	ldr	r2,.LOPENSSL_armcap
+	ldr	r0,[r0,r2]
+#ifdef	__APPLE__
+	ldr	r0,[r0]
+#endif
+	tst	r0,#ARMV7_NEON		@ NEON available?
+	ldmia	sp, {r0,r2}
+	beq	.Lialu
+	add	sp,sp,#8
+	b	bn_mul8x_mont_neon
+.align	4
+.Lialu:
+#endif
+	cmp	ip,#2
+	mov	$num,ip			@ load num
+#ifdef	__thumb2__
+	ittt	lt
+#endif
+	movlt	r0,#0
+	addlt	sp,sp,#2*4
+	blt	.Labrt
+
+	stmdb	sp!,{r4-r12,lr}		@ save 10 registers
+
+	mov	$num,$num,lsl#2		@ rescale $num for byte count
+	sub	sp,sp,$num		@ alloca(4*num)
+	sub	sp,sp,#4		@ +extra dword
+	sub	$num,$num,#4		@ "num=num-1"
+	add	$tp,$bp,$num		@ &bp[num-1]
+
+	add	$num,sp,$num		@ $num to point at &tp[num-1]
+	ldr	$n0,[$_n0]		@ &n0
+	ldr	$bi,[$bp]		@ bp[0]
+	ldr	$aj,[$ap],#4		@ ap[0],ap++
+	ldr	$nj,[$np],#4		@ np[0],np++
+	ldr	$n0,[$n0]		@ *n0
+	str	$tp,[$_bpend]		@ save &bp[num]
+
+	umull	$alo,$ahi,$aj,$bi	@ ap[0]*bp[0]
+	str	$n0,[$_n0]		@ save n0 value
+	mul	$n0,$alo,$n0		@ "tp[0]"*n0
+	mov	$nlo,#0
+	umlal	$alo,$nlo,$nj,$n0	@ np[0]*n0+"t[0]"
+	mov	$tp,sp
+
+.L1st:
+	ldr	$aj,[$ap],#4		@ ap[j],ap++
+	mov	$alo,$ahi
+	ldr	$nj,[$np],#4		@ np[j],np++
+	mov	$ahi,#0
+	umlal	$alo,$ahi,$aj,$bi	@ ap[j]*bp[0]
+	mov	$nhi,#0
+	umlal	$nlo,$nhi,$nj,$n0	@ np[j]*n0
+	adds	$nlo,$nlo,$alo
+	str	$nlo,[$tp],#4		@ tp[j-1]=,tp++
+	adc	$nlo,$nhi,#0
+	cmp	$tp,$num
+	bne	.L1st
+
+	adds	$nlo,$nlo,$ahi
+	ldr	$tp,[$_bp]		@ restore bp
+	mov	$nhi,#0
+	ldr	$n0,[$_n0]		@ restore n0
+	adc	$nhi,$nhi,#0
+	str	$nlo,[$num]		@ tp[num-1]=
+	mov	$tj,sp
+	str	$nhi,[$num,#4]		@ tp[num]=
+
+.Louter:
+	sub	$tj,$num,$tj		@ "original" $num-1 value
+	sub	$ap,$ap,$tj		@ "rewind" ap to &ap[1]
+	ldr	$bi,[$tp,#4]!		@ *(++bp)
+	sub	$np,$np,$tj		@ "rewind" np to &np[1]
+	ldr	$aj,[$ap,#-4]		@ ap[0]
+	ldr	$alo,[sp]		@ tp[0]
+	ldr	$nj,[$np,#-4]		@ np[0]
+	ldr	$tj,[sp,#4]		@ tp[1]
+
+	mov	$ahi,#0
+	umlal	$alo,$ahi,$aj,$bi	@ ap[0]*bp[i]+tp[0]
+	str	$tp,[$_bp]		@ save bp
+	mul	$n0,$alo,$n0
+	mov	$nlo,#0
+	umlal	$alo,$nlo,$nj,$n0	@ np[0]*n0+"tp[0]"
+	mov	$tp,sp
+
+.Linner:
+	ldr	$aj,[$ap],#4		@ ap[j],ap++
+	adds	$alo,$ahi,$tj		@ +=tp[j]
+	ldr	$nj,[$np],#4		@ np[j],np++
+	mov	$ahi,#0
+	umlal	$alo,$ahi,$aj,$bi	@ ap[j]*bp[i]
+	mov	$nhi,#0
+	umlal	$nlo,$nhi,$nj,$n0	@ np[j]*n0
+	adc	$ahi,$ahi,#0
+	ldr	$tj,[$tp,#8]		@ tp[j+1]
+	adds	$nlo,$nlo,$alo
+	str	$nlo,[$tp],#4		@ tp[j-1]=,tp++
+	adc	$nlo,$nhi,#0
+	cmp	$tp,$num
+	bne	.Linner
+
+	adds	$nlo,$nlo,$ahi
+	mov	$nhi,#0
+	ldr	$tp,[$_bp]		@ restore bp
+	adc	$nhi,$nhi,#0
+	ldr	$n0,[$_n0]		@ restore n0
+	adds	$nlo,$nlo,$tj
+	ldr	$tj,[$_bpend]		@ restore &bp[num]
+	adc	$nhi,$nhi,#0
+	str	$nlo,[$num]		@ tp[num-1]=
+	str	$nhi,[$num,#4]		@ tp[num]=
+
+	cmp	$tp,$tj
+#ifdef	__thumb2__
+	itt	ne
+#endif
+	movne	$tj,sp
+	bne	.Louter
+
+	ldr	$rp,[$_rp]		@ pull rp
+	mov	$aj,sp
+	add	$num,$num,#4		@ $num to point at &tp[num]
+	sub	$aj,$num,$aj		@ "original" num value
+	mov	$tp,sp			@ "rewind" $tp
+	mov	$ap,$tp			@ "borrow" $ap
+	sub	$np,$np,$aj		@ "rewind" $np to &np[0]
+
+	subs	$tj,$tj,$tj		@ "clear" carry flag
+.Lsub:	ldr	$tj,[$tp],#4
+	ldr	$nj,[$np],#4
+	sbcs	$tj,$tj,$nj		@ tp[j]-np[j]
+	str	$tj,[$rp],#4		@ rp[j]=
+	teq	$tp,$num		@ preserve carry
+	bne	.Lsub
+	sbcs	$nhi,$nhi,#0		@ upmost carry
+	mov	$tp,sp			@ "rewind" $tp
+	sub	$rp,$rp,$aj		@ "rewind" $rp
+
+.Lcopy:	ldr	$tj,[$tp]		@ conditional copy
+	ldr	$aj,[$rp]
+	str	sp,[$tp],#4		@ zap tp
+#ifdef	__thumb2__
+	it	cc
+#endif
+	movcc	$aj,$tj
+	str	$aj,[$rp],#4
+	teq	$tp,$num		@ preserve carry
+	bne	.Lcopy
+
+	mov	sp,$num
+	add	sp,sp,#4		@ skip over tp[num+1]
+	ldmia	sp!,{r4-r12,lr}		@ restore registers
+	add	sp,sp,#2*4		@ skip over {r0,r2}
+	mov	r0,#1
+.Labrt:
+#if __ARM_ARCH__>=5
+	ret				@ bx lr
+#else
+	tst	lr,#1
+	moveq	pc,lr			@ be binary compatible with V4, yet
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	bn_mul_mont,.-bn_mul_mont
+___
+{
+my ($A0,$A1,$A2,$A3)=map("d$_",(0..3));
+my ($N0,$N1,$N2,$N3)=map("d$_",(4..7));
+my ($Z,$Temp)=("q4","q5");
+my @ACC=map("q$_",(6..13));
+my ($Bi,$Ni,$M0)=map("d$_",(28..31));
+my $zero="$Z#lo";
+my $temp="$Temp#lo";
+
+my ($rptr,$aptr,$bptr,$nptr,$n0,$num)=map("r$_",(0..5));
+my ($tinptr,$toutptr,$inner,$outer,$bnptr)=map("r$_",(6..11));
+
+$code.=<<___;
+#if __ARM_MAX_ARCH__>=7
+.arch	armv7-a
+.fpu	neon
+
+.type	bn_mul8x_mont_neon,%function
+.align	5
+bn_mul8x_mont_neon:
+	mov	ip,sp
+	stmdb	sp!,{r4-r11}
+	vstmdb	sp!,{d8-d15}		@ ABI specification says so
+	ldmia	ip,{r4-r5}		@ load rest of parameter block
+	mov	ip,sp
+
+	cmp	$num,#8
+	bhi	.LNEON_8n
+
+	@ special case for $num==8, everything is in register bank...
+
+	vld1.32		{${Bi}[0]}, [$bptr,:32]!
+	veor		$zero,$zero,$zero
+	sub		$toutptr,sp,$num,lsl#4
+	vld1.32		{$A0-$A3},  [$aptr]!		@ can't specify :32 :-(
+	and		$toutptr,$toutptr,#-64
+	vld1.32		{${M0}[0]}, [$n0,:32]
+	mov		sp,$toutptr			@ alloca
+	vzip.16		$Bi,$zero
+
+	vmull.u32	@ACC[0],$Bi,${A0}[0]
+	vmull.u32	@ACC[1],$Bi,${A0}[1]
+	vmull.u32	@ACC[2],$Bi,${A1}[0]
+	vshl.i64	$Ni,@ACC[0]#hi,#16
+	vmull.u32	@ACC[3],$Bi,${A1}[1]
+
+	vadd.u64	$Ni,$Ni,@ACC[0]#lo
+	veor		$zero,$zero,$zero
+	vmul.u32	$Ni,$Ni,$M0
+
+	vmull.u32	@ACC[4],$Bi,${A2}[0]
+	 vld1.32	{$N0-$N3}, [$nptr]!
+	vmull.u32	@ACC[5],$Bi,${A2}[1]
+	vmull.u32	@ACC[6],$Bi,${A3}[0]
+	vzip.16		$Ni,$zero
+	vmull.u32	@ACC[7],$Bi,${A3}[1]
+
+	vmlal.u32	@ACC[0],$Ni,${N0}[0]
+	sub		$outer,$num,#1
+	vmlal.u32	@ACC[1],$Ni,${N0}[1]
+	vmlal.u32	@ACC[2],$Ni,${N1}[0]
+	vmlal.u32	@ACC[3],$Ni,${N1}[1]
+
+	vmlal.u32	@ACC[4],$Ni,${N2}[0]
+	vmov		$Temp,@ACC[0]
+	vmlal.u32	@ACC[5],$Ni,${N2}[1]
+	vmov		@ACC[0],@ACC[1]
+	vmlal.u32	@ACC[6],$Ni,${N3}[0]
+	vmov		@ACC[1],@ACC[2]
+	vmlal.u32	@ACC[7],$Ni,${N3}[1]
+	vmov		@ACC[2],@ACC[3]
+	vmov		@ACC[3],@ACC[4]
+	vshr.u64	$temp,$temp,#16
+	vmov		@ACC[4],@ACC[5]
+	vmov		@ACC[5],@ACC[6]
+	vadd.u64	$temp,$temp,$Temp#hi
+	vmov		@ACC[6],@ACC[7]
+	veor		@ACC[7],@ACC[7]
+	vshr.u64	$temp,$temp,#16
+
+	b	.LNEON_outer8
+
+.align	4
+.LNEON_outer8:
+	vld1.32		{${Bi}[0]}, [$bptr,:32]!
+	veor		$zero,$zero,$zero
+	vzip.16		$Bi,$zero
+	vadd.u64	@ACC[0]#lo,@ACC[0]#lo,$temp
+
+	vmlal.u32	@ACC[0],$Bi,${A0}[0]
+	vmlal.u32	@ACC[1],$Bi,${A0}[1]
+	vmlal.u32	@ACC[2],$Bi,${A1}[0]
+	vshl.i64	$Ni,@ACC[0]#hi,#16
+	vmlal.u32	@ACC[3],$Bi,${A1}[1]
+
+	vadd.u64	$Ni,$Ni,@ACC[0]#lo
+	veor		$zero,$zero,$zero
+	subs		$outer,$outer,#1
+	vmul.u32	$Ni,$Ni,$M0
+
+	vmlal.u32	@ACC[4],$Bi,${A2}[0]
+	vmlal.u32	@ACC[5],$Bi,${A2}[1]
+	vmlal.u32	@ACC[6],$Bi,${A3}[0]
+	vzip.16		$Ni,$zero
+	vmlal.u32	@ACC[7],$Bi,${A3}[1]
+
+	vmlal.u32	@ACC[0],$Ni,${N0}[0]
+	vmlal.u32	@ACC[1],$Ni,${N0}[1]
+	vmlal.u32	@ACC[2],$Ni,${N1}[0]
+	vmlal.u32	@ACC[3],$Ni,${N1}[1]
+
+	vmlal.u32	@ACC[4],$Ni,${N2}[0]
+	vmov		$Temp,@ACC[0]
+	vmlal.u32	@ACC[5],$Ni,${N2}[1]
+	vmov		@ACC[0],@ACC[1]
+	vmlal.u32	@ACC[6],$Ni,${N3}[0]
+	vmov		@ACC[1],@ACC[2]
+	vmlal.u32	@ACC[7],$Ni,${N3}[1]
+	vmov		@ACC[2],@ACC[3]
+	vmov		@ACC[3],@ACC[4]
+	vshr.u64	$temp,$temp,#16
+	vmov		@ACC[4],@ACC[5]
+	vmov		@ACC[5],@ACC[6]
+	vadd.u64	$temp,$temp,$Temp#hi
+	vmov		@ACC[6],@ACC[7]
+	veor		@ACC[7],@ACC[7]
+	vshr.u64	$temp,$temp,#16
+
+	bne	.LNEON_outer8
+
+	vadd.u64	@ACC[0]#lo,@ACC[0]#lo,$temp
+	mov		$toutptr,sp
+	vshr.u64	$temp,@ACC[0]#lo,#16
+	mov		$inner,$num
+	vadd.u64	@ACC[0]#hi,@ACC[0]#hi,$temp
+	add		$tinptr,sp,#96
+	vshr.u64	$temp,@ACC[0]#hi,#16
+	vzip.16		@ACC[0]#lo,@ACC[0]#hi
+
+	b	.LNEON_tail_entry
+
+.align	4
+.LNEON_8n:
+	veor		@ACC[0],@ACC[0],@ACC[0]
+	 sub		$toutptr,sp,#128
+	veor		@ACC[1],@ACC[1],@ACC[1]
+	 sub		$toutptr,$toutptr,$num,lsl#4
+	veor		@ACC[2],@ACC[2],@ACC[2]
+	 and		$toutptr,$toutptr,#-64
+	veor		@ACC[3],@ACC[3],@ACC[3]
+	 mov		sp,$toutptr			@ alloca
+	veor		@ACC[4],@ACC[4],@ACC[4]
+	 add		$toutptr,$toutptr,#256
+	veor		@ACC[5],@ACC[5],@ACC[5]
+	 sub		$inner,$num,#8
+	veor		@ACC[6],@ACC[6],@ACC[6]
+	veor		@ACC[7],@ACC[7],@ACC[7]
+
+.LNEON_8n_init:
+	vst1.64		{@ACC[0]-@ACC[1]},[$toutptr,:256]!
+	subs		$inner,$inner,#8
+	vst1.64		{@ACC[2]-@ACC[3]},[$toutptr,:256]!
+	vst1.64		{@ACC[4]-@ACC[5]},[$toutptr,:256]!
+	vst1.64		{@ACC[6]-@ACC[7]},[$toutptr,:256]!
+	bne		.LNEON_8n_init
+
+	add		$tinptr,sp,#256
+	vld1.32		{$A0-$A3},[$aptr]!
+	add		$bnptr,sp,#8
+	vld1.32		{${M0}[0]},[$n0,:32]
+	mov		$outer,$num
+	b		.LNEON_8n_outer
+
+.align	4
+.LNEON_8n_outer:
+	vld1.32		{${Bi}[0]},[$bptr,:32]!	@ *b++
+	veor		$zero,$zero,$zero
+	vzip.16		$Bi,$zero
+	add		$toutptr,sp,#128
+	vld1.32		{$N0-$N3},[$nptr]!
+
+	vmlal.u32	@ACC[0],$Bi,${A0}[0]
+	vmlal.u32	@ACC[1],$Bi,${A0}[1]
+	 veor		$zero,$zero,$zero
+	vmlal.u32	@ACC[2],$Bi,${A1}[0]
+	 vshl.i64	$Ni,@ACC[0]#hi,#16
+	vmlal.u32	@ACC[3],$Bi,${A1}[1]
+	 vadd.u64	$Ni,$Ni,@ACC[0]#lo
+	vmlal.u32	@ACC[4],$Bi,${A2}[0]
+	 vmul.u32	$Ni,$Ni,$M0
+	vmlal.u32	@ACC[5],$Bi,${A2}[1]
+	vst1.32		{$Bi},[sp,:64]		@ put aside smashed b[8*i+0]
+	vmlal.u32	@ACC[6],$Bi,${A3}[0]
+	 vzip.16	$Ni,$zero
+	vmlal.u32	@ACC[7],$Bi,${A3}[1]
+___
+for ($i=0; $i<7;) {
+$code.=<<___;
+	vld1.32		{${Bi}[0]},[$bptr,:32]!	@ *b++
+	vmlal.u32	@ACC[0],$Ni,${N0}[0]
+	veor		$temp,$temp,$temp
+	vmlal.u32	@ACC[1],$Ni,${N0}[1]
+	vzip.16		$Bi,$temp
+	vmlal.u32	@ACC[2],$Ni,${N1}[0]
+	 vshr.u64	@ACC[0]#lo,@ACC[0]#lo,#16
+	vmlal.u32	@ACC[3],$Ni,${N1}[1]
+	vmlal.u32	@ACC[4],$Ni,${N2}[0]
+	 vadd.u64	@ACC[0]#lo,@ACC[0]#lo,@ACC[0]#hi
+	vmlal.u32	@ACC[5],$Ni,${N2}[1]
+	 vshr.u64	@ACC[0]#lo,@ACC[0]#lo,#16
+	vmlal.u32	@ACC[6],$Ni,${N3}[0]
+	vmlal.u32	@ACC[7],$Ni,${N3}[1]
+	 vadd.u64	@ACC[1]#lo,@ACC[1]#lo,@ACC[0]#lo
+	vst1.32		{$Ni},[$bnptr,:64]!	@ put aside smashed m[8*i+$i]
+___
+	push(@ACC,shift(@ACC));	$i++;
+$code.=<<___;
+	vmlal.u32	@ACC[0],$Bi,${A0}[0]
+	vld1.64		{@ACC[7]},[$tinptr,:128]!
+	vmlal.u32	@ACC[1],$Bi,${A0}[1]
+	 veor		$zero,$zero,$zero
+	vmlal.u32	@ACC[2],$Bi,${A1}[0]
+	 vshl.i64	$Ni,@ACC[0]#hi,#16
+	vmlal.u32	@ACC[3],$Bi,${A1}[1]
+	 vadd.u64	$Ni,$Ni,@ACC[0]#lo
+	vmlal.u32	@ACC[4],$Bi,${A2}[0]
+	 vmul.u32	$Ni,$Ni,$M0
+	vmlal.u32	@ACC[5],$Bi,${A2}[1]
+	vst1.32		{$Bi},[$bnptr,:64]!	@ put aside smashed b[8*i+$i]
+	vmlal.u32	@ACC[6],$Bi,${A3}[0]
+	 vzip.16	$Ni,$zero
+	vmlal.u32	@ACC[7],$Bi,${A3}[1]
+___
+}
+$code.=<<___;
+	vld1.32		{$Bi},[sp,:64]		@ pull smashed b[8*i+0]
+	vmlal.u32	@ACC[0],$Ni,${N0}[0]
+	vld1.32		{$A0-$A3},[$aptr]!
+	vmlal.u32	@ACC[1],$Ni,${N0}[1]
+	vmlal.u32	@ACC[2],$Ni,${N1}[0]
+	 vshr.u64	@ACC[0]#lo,@ACC[0]#lo,#16
+	vmlal.u32	@ACC[3],$Ni,${N1}[1]
+	vmlal.u32	@ACC[4],$Ni,${N2}[0]
+	 vadd.u64	@ACC[0]#lo,@ACC[0]#lo,@ACC[0]#hi
+	vmlal.u32	@ACC[5],$Ni,${N2}[1]
+	 vshr.u64	@ACC[0]#lo,@ACC[0]#lo,#16
+	vmlal.u32	@ACC[6],$Ni,${N3}[0]
+	vmlal.u32	@ACC[7],$Ni,${N3}[1]
+	 vadd.u64	@ACC[1]#lo,@ACC[1]#lo,@ACC[0]#lo
+	vst1.32		{$Ni},[$bnptr,:64]	@ put aside smashed m[8*i+$i]
+	add		$bnptr,sp,#8		@ rewind
+___
+	push(@ACC,shift(@ACC));
+$code.=<<___;
+	sub		$inner,$num,#8
+	b		.LNEON_8n_inner
+
+.align	4
+.LNEON_8n_inner:
+	subs		$inner,$inner,#8
+	vmlal.u32	@ACC[0],$Bi,${A0}[0]
+	vld1.64		{@ACC[7]},[$tinptr,:128]
+	vmlal.u32	@ACC[1],$Bi,${A0}[1]
+	vld1.32		{$Ni},[$bnptr,:64]!	@ pull smashed m[8*i+0]
+	vmlal.u32	@ACC[2],$Bi,${A1}[0]
+	vld1.32		{$N0-$N3},[$nptr]!
+	vmlal.u32	@ACC[3],$Bi,${A1}[1]
+	it		ne
+	addne		$tinptr,$tinptr,#16	@ don't advance in last iteration
+	vmlal.u32	@ACC[4],$Bi,${A2}[0]
+	vmlal.u32	@ACC[5],$Bi,${A2}[1]
+	vmlal.u32	@ACC[6],$Bi,${A3}[0]
+	vmlal.u32	@ACC[7],$Bi,${A3}[1]
+___
+for ($i=1; $i<8; $i++) {
+$code.=<<___;
+	vld1.32		{$Bi},[$bnptr,:64]!	@ pull smashed b[8*i+$i]
+	vmlal.u32	@ACC[0],$Ni,${N0}[0]
+	vmlal.u32	@ACC[1],$Ni,${N0}[1]
+	vmlal.u32	@ACC[2],$Ni,${N1}[0]
+	vmlal.u32	@ACC[3],$Ni,${N1}[1]
+	vmlal.u32	@ACC[4],$Ni,${N2}[0]
+	vmlal.u32	@ACC[5],$Ni,${N2}[1]
+	vmlal.u32	@ACC[6],$Ni,${N3}[0]
+	vmlal.u32	@ACC[7],$Ni,${N3}[1]
+	vst1.64		{@ACC[0]},[$toutptr,:128]!
+___
+	push(@ACC,shift(@ACC));
+$code.=<<___;
+	vmlal.u32	@ACC[0],$Bi,${A0}[0]
+	vld1.64		{@ACC[7]},[$tinptr,:128]
+	vmlal.u32	@ACC[1],$Bi,${A0}[1]
+	vld1.32		{$Ni},[$bnptr,:64]!	@ pull smashed m[8*i+$i]
+	vmlal.u32	@ACC[2],$Bi,${A1}[0]
+	it		ne
+	addne		$tinptr,$tinptr,#16	@ don't advance in last iteration
+	vmlal.u32	@ACC[3],$Bi,${A1}[1]
+	vmlal.u32	@ACC[4],$Bi,${A2}[0]
+	vmlal.u32	@ACC[5],$Bi,${A2}[1]
+	vmlal.u32	@ACC[6],$Bi,${A3}[0]
+	vmlal.u32	@ACC[7],$Bi,${A3}[1]
+___
+}
+$code.=<<___;
+	it		eq
+	subeq		$aptr,$aptr,$num,lsl#2	@ rewind
+	vmlal.u32	@ACC[0],$Ni,${N0}[0]
+	vld1.32		{$Bi},[sp,:64]		@ pull smashed b[8*i+0]
+	vmlal.u32	@ACC[1],$Ni,${N0}[1]
+	vld1.32		{$A0-$A3},[$aptr]!
+	vmlal.u32	@ACC[2],$Ni,${N1}[0]
+	add		$bnptr,sp,#8		@ rewind
+	vmlal.u32	@ACC[3],$Ni,${N1}[1]
+	vmlal.u32	@ACC[4],$Ni,${N2}[0]
+	vmlal.u32	@ACC[5],$Ni,${N2}[1]
+	vmlal.u32	@ACC[6],$Ni,${N3}[0]
+	vst1.64		{@ACC[0]},[$toutptr,:128]!
+	vmlal.u32	@ACC[7],$Ni,${N3}[1]
+
+	bne		.LNEON_8n_inner
+___
+	push(@ACC,shift(@ACC));
+$code.=<<___;
+	add		$tinptr,sp,#128
+	vst1.64		{@ACC[0]-@ACC[1]},[$toutptr,:256]!
+	veor		q2,q2,q2		@ $N0-$N1
+	vst1.64		{@ACC[2]-@ACC[3]},[$toutptr,:256]!
+	veor		q3,q3,q3		@ $N2-$N3
+	vst1.64		{@ACC[4]-@ACC[5]},[$toutptr,:256]!
+	vst1.64		{@ACC[6]},[$toutptr,:128]
+
+	subs		$outer,$outer,#8
+	vld1.64		{@ACC[0]-@ACC[1]},[$tinptr,:256]!
+	vld1.64		{@ACC[2]-@ACC[3]},[$tinptr,:256]!
+	vld1.64		{@ACC[4]-@ACC[5]},[$tinptr,:256]!
+	vld1.64		{@ACC[6]-@ACC[7]},[$tinptr,:256]!
+
+	itt		ne
+	subne		$nptr,$nptr,$num,lsl#2	@ rewind
+	bne		.LNEON_8n_outer
+
+	add		$toutptr,sp,#128
+	vst1.64		{q2-q3}, [sp,:256]!	@ start wiping stack frame
+	vshr.u64	$temp,@ACC[0]#lo,#16
+	vst1.64		{q2-q3},[sp,:256]!
+	vadd.u64	@ACC[0]#hi,@ACC[0]#hi,$temp
+	vst1.64		{q2-q3}, [sp,:256]!
+	vshr.u64	$temp,@ACC[0]#hi,#16
+	vst1.64		{q2-q3}, [sp,:256]!
+	vzip.16		@ACC[0]#lo,@ACC[0]#hi
+
+	mov		$inner,$num
+	b		.LNEON_tail_entry
+
+.align	4
+.LNEON_tail:
+	vadd.u64	@ACC[0]#lo,@ACC[0]#lo,$temp
+	vshr.u64	$temp,@ACC[0]#lo,#16
+	vld1.64		{@ACC[2]-@ACC[3]}, [$tinptr, :256]!
+	vadd.u64	@ACC[0]#hi,@ACC[0]#hi,$temp
+	vld1.64		{@ACC[4]-@ACC[5]}, [$tinptr, :256]!
+	vshr.u64	$temp,@ACC[0]#hi,#16
+	vld1.64		{@ACC[6]-@ACC[7]}, [$tinptr, :256]!
+	vzip.16		@ACC[0]#lo,@ACC[0]#hi
+
+.LNEON_tail_entry:
+___
+for ($i=1; $i<8; $i++) {
+$code.=<<___;
+	vadd.u64	@ACC[1]#lo,@ACC[1]#lo,$temp
+	vst1.32		{@ACC[0]#lo[0]}, [$toutptr, :32]!
+	vshr.u64	$temp,@ACC[1]#lo,#16
+	vadd.u64	@ACC[1]#hi,@ACC[1]#hi,$temp
+	vshr.u64	$temp,@ACC[1]#hi,#16
+	vzip.16		@ACC[1]#lo,@ACC[1]#hi
+___
+	push(@ACC,shift(@ACC));
+}
+	push(@ACC,shift(@ACC));
+$code.=<<___;
+	vld1.64		{@ACC[0]-@ACC[1]}, [$tinptr, :256]!
+	subs		$inner,$inner,#8
+	vst1.32		{@ACC[7]#lo[0]},   [$toutptr, :32]!
+	bne	.LNEON_tail
+
+	vst1.32	{${temp}[0]}, [$toutptr, :32]		@ top-most bit
+	sub	$nptr,$nptr,$num,lsl#2			@ rewind $nptr
+	subs	$aptr,sp,#0				@ clear carry flag
+	add	$bptr,sp,$num,lsl#2
+
+.LNEON_sub:
+	ldmia	$aptr!, {r4-r7}
+	ldmia	$nptr!, {r8-r11}
+	sbcs	r8, r4,r8
+	sbcs	r9, r5,r9
+	sbcs	r10,r6,r10
+	sbcs	r11,r7,r11
+	teq	$aptr,$bptr				@ preserves carry
+	stmia	$rptr!, {r8-r11}
+	bne	.LNEON_sub
+
+	ldr	r10, [$aptr]				@ load top-most bit
+	mov	r11,sp
+	veor	q0,q0,q0
+	sub	r11,$bptr,r11				@ this is num*4
+	veor	q1,q1,q1
+	mov	$aptr,sp
+	sub	$rptr,$rptr,r11				@ rewind $rptr
+	mov	$nptr,$bptr				@ second 3/4th of frame
+	sbcs	r10,r10,#0				@ result is carry flag
+
+.LNEON_copy_n_zap:
+	ldmia	$aptr!, {r4-r7}
+	ldmia	$rptr,  {r8-r11}
+	it	cc
+	movcc	r8, r4
+	vst1.64	{q0-q1}, [$nptr,:256]!			@ wipe
+	itt	cc
+	movcc	r9, r5
+	movcc	r10,r6
+	vst1.64	{q0-q1}, [$nptr,:256]!			@ wipe
+	it	cc
+	movcc	r11,r7
+	ldmia	$aptr, {r4-r7}
+	stmia	$rptr!, {r8-r11}
+	sub	$aptr,$aptr,#16
+	ldmia	$rptr, {r8-r11}
+	it	cc
+	movcc	r8, r4
+	vst1.64	{q0-q1}, [$aptr,:256]!			@ wipe
+	itt	cc
+	movcc	r9, r5
+	movcc	r10,r6
+	vst1.64	{q0-q1}, [$nptr,:256]!			@ wipe
+	it	cc
+	movcc	r11,r7
+	teq	$aptr,$bptr				@ preserves carry
+	stmia	$rptr!, {r8-r11}
+	bne	.LNEON_copy_n_zap
+
+	mov	sp,ip
+        vldmia  sp!,{d8-d15}
+        ldmia   sp!,{r4-r11}
+	ret						@ bx lr
+.size	bn_mul8x_mont_neon,.-bn_mul8x_mont_neon
+#endif
+___
+}
+$code.=<<___;
+.asciz	"Montgomery multiplication for ARMv4/NEON, CRYPTOGAMS by <appro\@openssl.org>"
+.align	2
+#if __ARM_MAX_ARCH__>=7
+.comm	OPENSSL_armcap_P,4,4
+#endif
+___
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	s/\bq([0-9]+)#(lo|hi)/sprintf "d%d",2*$1+($2 eq "hi")/ge	or
+	s/\bret\b/bx    lr/g						or
+	s/\bbx\s+lr\b/.word\t0xe12fff1e/g;	# make it possible to compile with -march=armv4
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/armv8-mont.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/armv8-mont.pl
new file mode 100755
index 000000000..d8347bf93
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/armv8-mont.pl
@@ -0,0 +1,1514 @@
+#! /usr/bin/env perl
+# Copyright 2015-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# March 2015
+#
+# "Teaser" Montgomery multiplication module for ARMv8. Needs more
+# work. While it does improve RSA sign performance by 20-30% (less for
+# longer keys) on most processors, for some reason RSA2048 is not
+# faster and RSA4096 goes 15-20% slower on Cortex-A57. Multiplication
+# instruction issue rate is limited on processor in question, meaning
+# that dedicated squaring procedure is a must. Well, actually all
+# contemporary AArch64 processors seem to have limited multiplication
+# issue rate, i.e. they can't issue multiplication every cycle, which
+# explains moderate improvement coefficients in comparison to
+# compiler-generated code. Recall that compiler is instructed to use
+# umulh and therefore uses same amount of multiplication instructions
+# to do the job. Assembly's edge is to minimize number of "collateral"
+# instructions and of course instruction scheduling.
+#
+# April 2015
+#
+# Squaring procedure that handles lengths divisible by 8 improves
+# RSA/DSA performance by 25-40-60% depending on processor and key
+# length. Overall improvement coefficients are always positive in
+# comparison to compiler-generated code. On Cortex-A57 improvement
+# is still modest on longest key lengths, while others exhibit e.g.
+# 50-70% improvement for RSA4096 sign. RSA2048 sign is ~25% faster
+# on Cortex-A57 and ~60-100% faster on others.
+
+$flavour = shift;
+$output  = shift;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+die "can't locate arm-xlate.pl";
+
+open OUT,"| \"$^X\" $xlate $flavour $output";
+*STDOUT=*OUT;
+
+($lo0,$hi0,$aj,$m0,$alo,$ahi,
+ $lo1,$hi1,$nj,$m1,$nlo,$nhi,
+ $ovf, $i,$j,$tp,$tj) = map("x$_",6..17,19..24);
+
+# int bn_mul_mont(
+$rp="x0";	# BN_ULONG *rp,
+$ap="x1";	# const BN_ULONG *ap,
+$bp="x2";	# const BN_ULONG *bp,
+$np="x3";	# const BN_ULONG *np,
+$n0="x4";	# const BN_ULONG *n0,
+$num="x5";	# int num);
+
+$code.=<<___;
+.text
+
+.globl	bn_mul_mont
+.type	bn_mul_mont,%function
+.align	5
+bn_mul_mont:
+	tst	$num,#7
+	b.eq	__bn_sqr8x_mont
+	tst	$num,#3
+	b.eq	__bn_mul4x_mont
+.Lmul_mont:
+	stp	x29,x30,[sp,#-64]!
+	add	x29,sp,#0
+	stp	x19,x20,[sp,#16]
+	stp	x21,x22,[sp,#32]
+	stp	x23,x24,[sp,#48]
+
+	ldr	$m0,[$bp],#8		// bp[0]
+	sub	$tp,sp,$num,lsl#3
+	ldp	$hi0,$aj,[$ap],#16	// ap[0..1]
+	lsl	$num,$num,#3
+	ldr	$n0,[$n0]		// *n0
+	and	$tp,$tp,#-16		// ABI says so
+	ldp	$hi1,$nj,[$np],#16	// np[0..1]
+
+	mul	$lo0,$hi0,$m0		// ap[0]*bp[0]
+	sub	$j,$num,#16		// j=num-2
+	umulh	$hi0,$hi0,$m0
+	mul	$alo,$aj,$m0		// ap[1]*bp[0]
+	umulh	$ahi,$aj,$m0
+
+	mul	$m1,$lo0,$n0		// "tp[0]"*n0
+	mov	sp,$tp			// alloca
+
+	// (*)	mul	$lo1,$hi1,$m1	// np[0]*m1
+	umulh	$hi1,$hi1,$m1
+	mul	$nlo,$nj,$m1		// np[1]*m1
+	// (*)	adds	$lo1,$lo1,$lo0	// discarded
+	// (*)	As for removal of first multiplication and addition
+	//	instructions. The outcome of first addition is
+	//	guaranteed to be zero, which leaves two computationally
+	//	significant outcomes: it either carries or not. Then
+	//	question is when does it carry? Is there alternative
+	//	way to deduce it? If you follow operations, you can
+	//	observe that condition for carry is quite simple:
+	//	$lo0 being non-zero. So that carry can be calculated
+	//	by adding -1 to $lo0. That's what next instruction does.
+	subs	xzr,$lo0,#1		// (*)
+	umulh	$nhi,$nj,$m1
+	adc	$hi1,$hi1,xzr
+	cbz	$j,.L1st_skip
+
+.L1st:
+	ldr	$aj,[$ap],#8
+	adds	$lo0,$alo,$hi0
+	sub	$j,$j,#8		// j--
+	adc	$hi0,$ahi,xzr
+
+	ldr	$nj,[$np],#8
+	adds	$lo1,$nlo,$hi1
+	mul	$alo,$aj,$m0		// ap[j]*bp[0]
+	adc	$hi1,$nhi,xzr
+	umulh	$ahi,$aj,$m0
+
+	adds	$lo1,$lo1,$lo0
+	mul	$nlo,$nj,$m1		// np[j]*m1
+	adc	$hi1,$hi1,xzr
+	umulh	$nhi,$nj,$m1
+	str	$lo1,[$tp],#8		// tp[j-1]
+	cbnz	$j,.L1st
+
+.L1st_skip:
+	adds	$lo0,$alo,$hi0
+	sub	$ap,$ap,$num		// rewind $ap
+	adc	$hi0,$ahi,xzr
+
+	adds	$lo1,$nlo,$hi1
+	sub	$np,$np,$num		// rewind $np
+	adc	$hi1,$nhi,xzr
+
+	adds	$lo1,$lo1,$lo0
+	sub	$i,$num,#8		// i=num-1
+	adcs	$hi1,$hi1,$hi0
+
+	adc	$ovf,xzr,xzr		// upmost overflow bit
+	stp	$lo1,$hi1,[$tp]
+
+.Louter:
+	ldr	$m0,[$bp],#8		// bp[i]
+	ldp	$hi0,$aj,[$ap],#16
+	ldr	$tj,[sp]		// tp[0]
+	add	$tp,sp,#8
+
+	mul	$lo0,$hi0,$m0		// ap[0]*bp[i]
+	sub	$j,$num,#16		// j=num-2
+	umulh	$hi0,$hi0,$m0
+	ldp	$hi1,$nj,[$np],#16
+	mul	$alo,$aj,$m0		// ap[1]*bp[i]
+	adds	$lo0,$lo0,$tj
+	umulh	$ahi,$aj,$m0
+	adc	$hi0,$hi0,xzr
+
+	mul	$m1,$lo0,$n0
+	sub	$i,$i,#8		// i--
+
+	// (*)	mul	$lo1,$hi1,$m1	// np[0]*m1
+	umulh	$hi1,$hi1,$m1
+	mul	$nlo,$nj,$m1		// np[1]*m1
+	// (*)	adds	$lo1,$lo1,$lo0
+	subs	xzr,$lo0,#1		// (*)
+	umulh	$nhi,$nj,$m1
+	cbz	$j,.Linner_skip
+
+.Linner:
+	ldr	$aj,[$ap],#8
+	adc	$hi1,$hi1,xzr
+	ldr	$tj,[$tp],#8		// tp[j]
+	adds	$lo0,$alo,$hi0
+	sub	$j,$j,#8		// j--
+	adc	$hi0,$ahi,xzr
+
+	adds	$lo1,$nlo,$hi1
+	ldr	$nj,[$np],#8
+	adc	$hi1,$nhi,xzr
+
+	mul	$alo,$aj,$m0		// ap[j]*bp[i]
+	adds	$lo0,$lo0,$tj
+	umulh	$ahi,$aj,$m0
+	adc	$hi0,$hi0,xzr
+
+	mul	$nlo,$nj,$m1		// np[j]*m1
+	adds	$lo1,$lo1,$lo0
+	umulh	$nhi,$nj,$m1
+	str	$lo1,[$tp,#-16]		// tp[j-1]
+	cbnz	$j,.Linner
+
+.Linner_skip:
+	ldr	$tj,[$tp],#8		// tp[j]
+	adc	$hi1,$hi1,xzr
+	adds	$lo0,$alo,$hi0
+	sub	$ap,$ap,$num		// rewind $ap
+	adc	$hi0,$ahi,xzr
+
+	adds	$lo1,$nlo,$hi1
+	sub	$np,$np,$num		// rewind $np
+	adcs	$hi1,$nhi,$ovf
+	adc	$ovf,xzr,xzr
+
+	adds	$lo0,$lo0,$tj
+	adc	$hi0,$hi0,xzr
+
+	adds	$lo1,$lo1,$lo0
+	adcs	$hi1,$hi1,$hi0
+	adc	$ovf,$ovf,xzr		// upmost overflow bit
+	stp	$lo1,$hi1,[$tp,#-16]
+
+	cbnz	$i,.Louter
+
+	// Final step. We see if result is larger than modulus, and
+	// if it is, subtract the modulus. But comparison implies
+	// subtraction. So we subtract modulus, see if it borrowed,
+	// and conditionally copy original value.
+	ldr	$tj,[sp]		// tp[0]
+	add	$tp,sp,#8
+	ldr	$nj,[$np],#8		// np[0]
+	subs	$j,$num,#8		// j=num-1 and clear borrow
+	mov	$ap,$rp
+.Lsub:
+	sbcs	$aj,$tj,$nj		// tp[j]-np[j]
+	ldr	$tj,[$tp],#8
+	sub	$j,$j,#8		// j--
+	ldr	$nj,[$np],#8
+	str	$aj,[$ap],#8		// rp[j]=tp[j]-np[j]
+	cbnz	$j,.Lsub
+
+	sbcs	$aj,$tj,$nj
+	sbcs	$ovf,$ovf,xzr		// did it borrow?
+	str	$aj,[$ap],#8		// rp[num-1]
+
+	ldr	$tj,[sp]		// tp[0]
+	add	$tp,sp,#8
+	ldr	$aj,[$rp],#8		// rp[0]
+	sub	$num,$num,#8		// num--
+	nop
+.Lcond_copy:
+	sub	$num,$num,#8		// num--
+	csel	$nj,$tj,$aj,lo		// did it borrow?
+	ldr	$tj,[$tp],#8
+	ldr	$aj,[$rp],#8
+	str	xzr,[$tp,#-16]		// wipe tp
+	str	$nj,[$rp,#-16]
+	cbnz	$num,.Lcond_copy
+
+	csel	$nj,$tj,$aj,lo
+	str	xzr,[$tp,#-8]		// wipe tp
+	str	$nj,[$rp,#-8]
+
+	ldp	x19,x20,[x29,#16]
+	mov	sp,x29
+	ldp	x21,x22,[x29,#32]
+	mov	x0,#1
+	ldp	x23,x24,[x29,#48]
+	ldr	x29,[sp],#64
+	ret
+.size	bn_mul_mont,.-bn_mul_mont
+___
+{
+########################################################################
+# Following is ARMv8 adaptation of sqrx8x_mont from x86_64-mont5 module.
+
+my ($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("x$_",(6..13));
+my ($t0,$t1,$t2,$t3)=map("x$_",(14..17));
+my ($acc0,$acc1,$acc2,$acc3,$acc4,$acc5,$acc6,$acc7)=map("x$_",(19..26));
+my ($cnt,$carry,$topmost)=("x27","x28","x30");
+my ($tp,$ap_end,$na0)=($bp,$np,$carry);
+
+$code.=<<___;
+.type	__bn_sqr8x_mont,%function
+.align	5
+__bn_sqr8x_mont:
+	cmp	$ap,$bp
+	b.ne	__bn_mul4x_mont
+.Lsqr8x_mont:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-128]!
+	add	x29,sp,#0
+	stp	x19,x20,[sp,#16]
+	stp	x21,x22,[sp,#32]
+	stp	x23,x24,[sp,#48]
+	stp	x25,x26,[sp,#64]
+	stp	x27,x28,[sp,#80]
+	stp	$rp,$np,[sp,#96]	// offload rp and np
+
+	ldp	$a0,$a1,[$ap,#8*0]
+	ldp	$a2,$a3,[$ap,#8*2]
+	ldp	$a4,$a5,[$ap,#8*4]
+	ldp	$a6,$a7,[$ap,#8*6]
+
+	sub	$tp,sp,$num,lsl#4
+	lsl	$num,$num,#3
+	ldr	$n0,[$n0]		// *n0
+	mov	sp,$tp			// alloca
+	sub	$cnt,$num,#8*8
+	b	.Lsqr8x_zero_start
+
+.Lsqr8x_zero:
+	sub	$cnt,$cnt,#8*8
+	stp	xzr,xzr,[$tp,#8*0]
+	stp	xzr,xzr,[$tp,#8*2]
+	stp	xzr,xzr,[$tp,#8*4]
+	stp	xzr,xzr,[$tp,#8*6]
+.Lsqr8x_zero_start:
+	stp	xzr,xzr,[$tp,#8*8]
+	stp	xzr,xzr,[$tp,#8*10]
+	stp	xzr,xzr,[$tp,#8*12]
+	stp	xzr,xzr,[$tp,#8*14]
+	add	$tp,$tp,#8*16
+	cbnz	$cnt,.Lsqr8x_zero
+
+	add	$ap_end,$ap,$num
+	add	$ap,$ap,#8*8
+	mov	$acc0,xzr
+	mov	$acc1,xzr
+	mov	$acc2,xzr
+	mov	$acc3,xzr
+	mov	$acc4,xzr
+	mov	$acc5,xzr
+	mov	$acc6,xzr
+	mov	$acc7,xzr
+	mov	$tp,sp
+	str	$n0,[x29,#112]		// offload n0
+
+	// Multiply everything but a[i]*a[i]
+.align	4
+.Lsqr8x_outer_loop:
+        //                                                 a[1]a[0]	(i)
+        //                                             a[2]a[0]
+        //                                         a[3]a[0]
+        //                                     a[4]a[0]
+        //                                 a[5]a[0]
+        //                             a[6]a[0]
+        //                         a[7]a[0]
+        //                                         a[2]a[1]		(ii)
+        //                                     a[3]a[1]
+        //                                 a[4]a[1]
+        //                             a[5]a[1]
+        //                         a[6]a[1]
+        //                     a[7]a[1]
+        //                                 a[3]a[2]			(iii)
+        //                             a[4]a[2]
+        //                         a[5]a[2]
+        //                     a[6]a[2]
+        //                 a[7]a[2]
+        //                         a[4]a[3]				(iv)
+        //                     a[5]a[3]
+        //                 a[6]a[3]
+        //             a[7]a[3]
+        //                 a[5]a[4]					(v)
+        //             a[6]a[4]
+        //         a[7]a[4]
+        //         a[6]a[5]						(vi)
+        //     a[7]a[5]
+        // a[7]a[6]							(vii)
+
+	mul	$t0,$a1,$a0		// lo(a[1..7]*a[0])		(i)
+	mul	$t1,$a2,$a0
+	mul	$t2,$a3,$a0
+	mul	$t3,$a4,$a0
+	adds	$acc1,$acc1,$t0		// t[1]+lo(a[1]*a[0])
+	mul	$t0,$a5,$a0
+	adcs	$acc2,$acc2,$t1
+	mul	$t1,$a6,$a0
+	adcs	$acc3,$acc3,$t2
+	mul	$t2,$a7,$a0
+	adcs	$acc4,$acc4,$t3
+	umulh	$t3,$a1,$a0		// hi(a[1..7]*a[0])
+	adcs	$acc5,$acc5,$t0
+	umulh	$t0,$a2,$a0
+	adcs	$acc6,$acc6,$t1
+	umulh	$t1,$a3,$a0
+	adcs	$acc7,$acc7,$t2
+	umulh	$t2,$a4,$a0
+	stp	$acc0,$acc1,[$tp],#8*2	// t[0..1]
+	adc	$acc0,xzr,xzr		// t[8]
+	adds	$acc2,$acc2,$t3		// t[2]+lo(a[1]*a[0])
+	umulh	$t3,$a5,$a0
+	adcs	$acc3,$acc3,$t0
+	umulh	$t0,$a6,$a0
+	adcs	$acc4,$acc4,$t1
+	umulh	$t1,$a7,$a0
+	adcs	$acc5,$acc5,$t2
+	 mul	$t2,$a2,$a1		// lo(a[2..7]*a[1])		(ii)
+	adcs	$acc6,$acc6,$t3
+	 mul	$t3,$a3,$a1
+	adcs	$acc7,$acc7,$t0
+	 mul	$t0,$a4,$a1
+	adc	$acc0,$acc0,$t1
+
+	mul	$t1,$a5,$a1
+	adds	$acc3,$acc3,$t2
+	mul	$t2,$a6,$a1
+	adcs	$acc4,$acc4,$t3
+	mul	$t3,$a7,$a1
+	adcs	$acc5,$acc5,$t0
+	umulh	$t0,$a2,$a1		// hi(a[2..7]*a[1])
+	adcs	$acc6,$acc6,$t1
+	umulh	$t1,$a3,$a1
+	adcs	$acc7,$acc7,$t2
+	umulh	$t2,$a4,$a1
+	adcs	$acc0,$acc0,$t3
+	umulh	$t3,$a5,$a1
+	stp	$acc2,$acc3,[$tp],#8*2	// t[2..3]
+	adc	$acc1,xzr,xzr		// t[9]
+	adds	$acc4,$acc4,$t0
+	umulh	$t0,$a6,$a1
+	adcs	$acc5,$acc5,$t1
+	umulh	$t1,$a7,$a1
+	adcs	$acc6,$acc6,$t2
+	 mul	$t2,$a3,$a2		// lo(a[3..7]*a[2])		(iii)
+	adcs	$acc7,$acc7,$t3
+	 mul	$t3,$a4,$a2
+	adcs	$acc0,$acc0,$t0
+	 mul	$t0,$a5,$a2
+	adc	$acc1,$acc1,$t1
+
+	mul	$t1,$a6,$a2
+	adds	$acc5,$acc5,$t2
+	mul	$t2,$a7,$a2
+	adcs	$acc6,$acc6,$t3
+	umulh	$t3,$a3,$a2		// hi(a[3..7]*a[2])
+	adcs	$acc7,$acc7,$t0
+	umulh	$t0,$a4,$a2
+	adcs	$acc0,$acc0,$t1
+	umulh	$t1,$a5,$a2
+	adcs	$acc1,$acc1,$t2
+	umulh	$t2,$a6,$a2
+	stp	$acc4,$acc5,[$tp],#8*2	// t[4..5]
+	adc	$acc2,xzr,xzr		// t[10]
+	adds	$acc6,$acc6,$t3
+	umulh	$t3,$a7,$a2
+	adcs	$acc7,$acc7,$t0
+	 mul	$t0,$a4,$a3		// lo(a[4..7]*a[3])		(iv)
+	adcs	$acc0,$acc0,$t1
+	 mul	$t1,$a5,$a3
+	adcs	$acc1,$acc1,$t2
+	 mul	$t2,$a6,$a3
+	adc	$acc2,$acc2,$t3
+
+	mul	$t3,$a7,$a3
+	adds	$acc7,$acc7,$t0
+	umulh	$t0,$a4,$a3		// hi(a[4..7]*a[3])
+	adcs	$acc0,$acc0,$t1
+	umulh	$t1,$a5,$a3
+	adcs	$acc1,$acc1,$t2
+	umulh	$t2,$a6,$a3
+	adcs	$acc2,$acc2,$t3
+	umulh	$t3,$a7,$a3
+	stp	$acc6,$acc7,[$tp],#8*2	// t[6..7]
+	adc	$acc3,xzr,xzr		// t[11]
+	adds	$acc0,$acc0,$t0
+	 mul	$t0,$a5,$a4		// lo(a[5..7]*a[4])		(v)
+	adcs	$acc1,$acc1,$t1
+	 mul	$t1,$a6,$a4
+	adcs	$acc2,$acc2,$t2
+	 mul	$t2,$a7,$a4
+	adc	$acc3,$acc3,$t3
+
+	umulh	$t3,$a5,$a4		// hi(a[5..7]*a[4])
+	adds	$acc1,$acc1,$t0
+	umulh	$t0,$a6,$a4
+	adcs	$acc2,$acc2,$t1
+	umulh	$t1,$a7,$a4
+	adcs	$acc3,$acc3,$t2
+	 mul	$t2,$a6,$a5		// lo(a[6..7]*a[5])		(vi)
+	adc	$acc4,xzr,xzr		// t[12]
+	adds	$acc2,$acc2,$t3
+	 mul	$t3,$a7,$a5
+	adcs	$acc3,$acc3,$t0
+	 umulh	$t0,$a6,$a5		// hi(a[6..7]*a[5])
+	adc	$acc4,$acc4,$t1
+
+	umulh	$t1,$a7,$a5
+	adds	$acc3,$acc3,$t2
+	 mul	$t2,$a7,$a6		// lo(a[7]*a[6])		(vii)
+	adcs	$acc4,$acc4,$t3
+	 umulh	$t3,$a7,$a6		// hi(a[7]*a[6])
+	adc	$acc5,xzr,xzr		// t[13]
+	adds	$acc4,$acc4,$t0
+	sub	$cnt,$ap_end,$ap	// done yet?
+	adc	$acc5,$acc5,$t1
+
+	adds	$acc5,$acc5,$t2
+	sub	$t0,$ap_end,$num	// rewinded ap
+	adc	$acc6,xzr,xzr		// t[14]
+	add	$acc6,$acc6,$t3
+
+	cbz	$cnt,.Lsqr8x_outer_break
+
+	mov	$n0,$a0
+	ldp	$a0,$a1,[$tp,#8*0]
+	ldp	$a2,$a3,[$tp,#8*2]
+	ldp	$a4,$a5,[$tp,#8*4]
+	ldp	$a6,$a7,[$tp,#8*6]
+	adds	$acc0,$acc0,$a0
+	adcs	$acc1,$acc1,$a1
+	ldp	$a0,$a1,[$ap,#8*0]
+	adcs	$acc2,$acc2,$a2
+	adcs	$acc3,$acc3,$a3
+	ldp	$a2,$a3,[$ap,#8*2]
+	adcs	$acc4,$acc4,$a4
+	adcs	$acc5,$acc5,$a5
+	ldp	$a4,$a5,[$ap,#8*4]
+	adcs	$acc6,$acc6,$a6
+	mov	$rp,$ap
+	adcs	$acc7,xzr,$a7
+	ldp	$a6,$a7,[$ap,#8*6]
+	add	$ap,$ap,#8*8
+	//adc	$carry,xzr,xzr		// moved below
+	mov	$cnt,#-8*8
+
+	//                                                         a[8]a[0]
+	//                                                     a[9]a[0]
+	//                                                 a[a]a[0]
+	//                                             a[b]a[0]
+	//                                         a[c]a[0]
+	//                                     a[d]a[0]
+	//                                 a[e]a[0]
+	//                             a[f]a[0]
+	//                                                     a[8]a[1]
+	//                         a[f]a[1]........................
+	//                                                 a[8]a[2]
+	//                     a[f]a[2]........................
+	//                                             a[8]a[3]
+	//                 a[f]a[3]........................
+	//                                         a[8]a[4]
+	//             a[f]a[4]........................
+	//                                     a[8]a[5]
+	//         a[f]a[5]........................
+	//                                 a[8]a[6]
+	//     a[f]a[6]........................
+	//                             a[8]a[7]
+	// a[f]a[7]........................
+.Lsqr8x_mul:
+	mul	$t0,$a0,$n0
+	adc	$carry,xzr,xzr		// carry bit, modulo-scheduled
+	mul	$t1,$a1,$n0
+	add	$cnt,$cnt,#8
+	mul	$t2,$a2,$n0
+	mul	$t3,$a3,$n0
+	adds	$acc0,$acc0,$t0
+	mul	$t0,$a4,$n0
+	adcs	$acc1,$acc1,$t1
+	mul	$t1,$a5,$n0
+	adcs	$acc2,$acc2,$t2
+	mul	$t2,$a6,$n0
+	adcs	$acc3,$acc3,$t3
+	mul	$t3,$a7,$n0
+	adcs	$acc4,$acc4,$t0
+	umulh	$t0,$a0,$n0
+	adcs	$acc5,$acc5,$t1
+	umulh	$t1,$a1,$n0
+	adcs	$acc6,$acc6,$t2
+	umulh	$t2,$a2,$n0
+	adcs	$acc7,$acc7,$t3
+	umulh	$t3,$a3,$n0
+	adc	$carry,$carry,xzr
+	str	$acc0,[$tp],#8
+	adds	$acc0,$acc1,$t0
+	umulh	$t0,$a4,$n0
+	adcs	$acc1,$acc2,$t1
+	umulh	$t1,$a5,$n0
+	adcs	$acc2,$acc3,$t2
+	umulh	$t2,$a6,$n0
+	adcs	$acc3,$acc4,$t3
+	umulh	$t3,$a7,$n0
+	ldr	$n0,[$rp,$cnt]
+	adcs	$acc4,$acc5,$t0
+	adcs	$acc5,$acc6,$t1
+	adcs	$acc6,$acc7,$t2
+	adcs	$acc7,$carry,$t3
+	//adc	$carry,xzr,xzr		// moved above
+	cbnz	$cnt,.Lsqr8x_mul
+					// note that carry flag is guaranteed
+					// to be zero at this point
+	cmp	$ap,$ap_end		// done yet?
+	b.eq	.Lsqr8x_break
+
+	ldp	$a0,$a1,[$tp,#8*0]
+	ldp	$a2,$a3,[$tp,#8*2]
+	ldp	$a4,$a5,[$tp,#8*4]
+	ldp	$a6,$a7,[$tp,#8*6]
+	adds	$acc0,$acc0,$a0
+	ldr	$n0,[$rp,#-8*8]
+	adcs	$acc1,$acc1,$a1
+	ldp	$a0,$a1,[$ap,#8*0]
+	adcs	$acc2,$acc2,$a2
+	adcs	$acc3,$acc3,$a3
+	ldp	$a2,$a3,[$ap,#8*2]
+	adcs	$acc4,$acc4,$a4
+	adcs	$acc5,$acc5,$a5
+	ldp	$a4,$a5,[$ap,#8*4]
+	adcs	$acc6,$acc6,$a6
+	mov	$cnt,#-8*8
+	adcs	$acc7,$acc7,$a7
+	ldp	$a6,$a7,[$ap,#8*6]
+	add	$ap,$ap,#8*8
+	//adc	$carry,xzr,xzr		// moved above
+	b	.Lsqr8x_mul
+
+.align	4
+.Lsqr8x_break:
+	ldp	$a0,$a1,[$rp,#8*0]
+	add	$ap,$rp,#8*8
+	ldp	$a2,$a3,[$rp,#8*2]
+	sub	$t0,$ap_end,$ap		// is it last iteration?
+	ldp	$a4,$a5,[$rp,#8*4]
+	sub	$t1,$tp,$t0
+	ldp	$a6,$a7,[$rp,#8*6]
+	cbz	$t0,.Lsqr8x_outer_loop
+
+	stp	$acc0,$acc1,[$tp,#8*0]
+	ldp	$acc0,$acc1,[$t1,#8*0]
+	stp	$acc2,$acc3,[$tp,#8*2]
+	ldp	$acc2,$acc3,[$t1,#8*2]
+	stp	$acc4,$acc5,[$tp,#8*4]
+	ldp	$acc4,$acc5,[$t1,#8*4]
+	stp	$acc6,$acc7,[$tp,#8*6]
+	mov	$tp,$t1
+	ldp	$acc6,$acc7,[$t1,#8*6]
+	b	.Lsqr8x_outer_loop
+
+.align	4
+.Lsqr8x_outer_break:
+	// Now multiply above result by 2 and add a[n-1]*a[n-1]|...|a[0]*a[0]
+	ldp	$a1,$a3,[$t0,#8*0]	// recall that $t0 is &a[0]
+	ldp	$t1,$t2,[sp,#8*1]
+	ldp	$a5,$a7,[$t0,#8*2]
+	add	$ap,$t0,#8*4
+	ldp	$t3,$t0,[sp,#8*3]
+
+	stp	$acc0,$acc1,[$tp,#8*0]
+	mul	$acc0,$a1,$a1
+	stp	$acc2,$acc3,[$tp,#8*2]
+	umulh	$a1,$a1,$a1
+	stp	$acc4,$acc5,[$tp,#8*4]
+	mul	$a2,$a3,$a3
+	stp	$acc6,$acc7,[$tp,#8*6]
+	mov	$tp,sp
+	umulh	$a3,$a3,$a3
+	adds	$acc1,$a1,$t1,lsl#1
+	extr	$t1,$t2,$t1,#63
+	sub	$cnt,$num,#8*4
+
+.Lsqr4x_shift_n_add:
+	adcs	$acc2,$a2,$t1
+	extr	$t2,$t3,$t2,#63
+	sub	$cnt,$cnt,#8*4
+	adcs	$acc3,$a3,$t2
+	ldp	$t1,$t2,[$tp,#8*5]
+	mul	$a4,$a5,$a5
+	ldp	$a1,$a3,[$ap],#8*2
+	umulh	$a5,$a5,$a5
+	mul	$a6,$a7,$a7
+	umulh	$a7,$a7,$a7
+	extr	$t3,$t0,$t3,#63
+	stp	$acc0,$acc1,[$tp,#8*0]
+	adcs	$acc4,$a4,$t3
+	extr	$t0,$t1,$t0,#63
+	stp	$acc2,$acc3,[$tp,#8*2]
+	adcs	$acc5,$a5,$t0
+	ldp	$t3,$t0,[$tp,#8*7]
+	extr	$t1,$t2,$t1,#63
+	adcs	$acc6,$a6,$t1
+	extr	$t2,$t3,$t2,#63
+	adcs	$acc7,$a7,$t2
+	ldp	$t1,$t2,[$tp,#8*9]
+	mul	$a0,$a1,$a1
+	ldp	$a5,$a7,[$ap],#8*2
+	umulh	$a1,$a1,$a1
+	mul	$a2,$a3,$a3
+	umulh	$a3,$a3,$a3
+	stp	$acc4,$acc5,[$tp,#8*4]
+	extr	$t3,$t0,$t3,#63
+	stp	$acc6,$acc7,[$tp,#8*6]
+	add	$tp,$tp,#8*8
+	adcs	$acc0,$a0,$t3
+	extr	$t0,$t1,$t0,#63
+	adcs	$acc1,$a1,$t0
+	ldp	$t3,$t0,[$tp,#8*3]
+	extr	$t1,$t2,$t1,#63
+	cbnz	$cnt,.Lsqr4x_shift_n_add
+___
+my ($np,$np_end)=($ap,$ap_end);
+$code.=<<___;
+	 ldp	$np,$n0,[x29,#104]	// pull np and n0
+
+	adcs	$acc2,$a2,$t1
+	extr	$t2,$t3,$t2,#63
+	adcs	$acc3,$a3,$t2
+	ldp	$t1,$t2,[$tp,#8*5]
+	mul	$a4,$a5,$a5
+	umulh	$a5,$a5,$a5
+	stp	$acc0,$acc1,[$tp,#8*0]
+	mul	$a6,$a7,$a7
+	umulh	$a7,$a7,$a7
+	stp	$acc2,$acc3,[$tp,#8*2]
+	extr	$t3,$t0,$t3,#63
+	adcs	$acc4,$a4,$t3
+	extr	$t0,$t1,$t0,#63
+	 ldp	$acc0,$acc1,[sp,#8*0]
+	adcs	$acc5,$a5,$t0
+	extr	$t1,$t2,$t1,#63
+	 ldp	$a0,$a1,[$np,#8*0]
+	adcs	$acc6,$a6,$t1
+	extr	$t2,xzr,$t2,#63
+	 ldp	$a2,$a3,[$np,#8*2]
+	adc	$acc7,$a7,$t2
+	 ldp	$a4,$a5,[$np,#8*4]
+
+	// Reduce by 512 bits per iteration
+	mul	$na0,$n0,$acc0		// t[0]*n0
+	ldp	$a6,$a7,[$np,#8*6]
+	add	$np_end,$np,$num
+	ldp	$acc2,$acc3,[sp,#8*2]
+	stp	$acc4,$acc5,[$tp,#8*4]
+	ldp	$acc4,$acc5,[sp,#8*4]
+	stp	$acc6,$acc7,[$tp,#8*6]
+	ldp	$acc6,$acc7,[sp,#8*6]
+	add	$np,$np,#8*8
+	mov	$topmost,xzr		// initial top-most carry
+	mov	$tp,sp
+	mov	$cnt,#8
+
+.Lsqr8x_reduction:
+	// (*)	mul	$t0,$a0,$na0	// lo(n[0-7])*lo(t[0]*n0)
+	mul	$t1,$a1,$na0
+	sub	$cnt,$cnt,#1
+	mul	$t2,$a2,$na0
+	str	$na0,[$tp],#8		// put aside t[0]*n0 for tail processing
+	mul	$t3,$a3,$na0
+	// (*)	adds	xzr,$acc0,$t0
+	subs	xzr,$acc0,#1		// (*)
+	mul	$t0,$a4,$na0
+	adcs	$acc0,$acc1,$t1
+	mul	$t1,$a5,$na0
+	adcs	$acc1,$acc2,$t2
+	mul	$t2,$a6,$na0
+	adcs	$acc2,$acc3,$t3
+	mul	$t3,$a7,$na0
+	adcs	$acc3,$acc4,$t0
+	umulh	$t0,$a0,$na0		// hi(n[0-7])*lo(t[0]*n0)
+	adcs	$acc4,$acc5,$t1
+	umulh	$t1,$a1,$na0
+	adcs	$acc5,$acc6,$t2
+	umulh	$t2,$a2,$na0
+	adcs	$acc6,$acc7,$t3
+	umulh	$t3,$a3,$na0
+	adc	$acc7,xzr,xzr
+	adds	$acc0,$acc0,$t0
+	umulh	$t0,$a4,$na0
+	adcs	$acc1,$acc1,$t1
+	umulh	$t1,$a5,$na0
+	adcs	$acc2,$acc2,$t2
+	umulh	$t2,$a6,$na0
+	adcs	$acc3,$acc3,$t3
+	umulh	$t3,$a7,$na0
+	mul	$na0,$n0,$acc0		// next t[0]*n0
+	adcs	$acc4,$acc4,$t0
+	adcs	$acc5,$acc5,$t1
+	adcs	$acc6,$acc6,$t2
+	adc	$acc7,$acc7,$t3
+	cbnz	$cnt,.Lsqr8x_reduction
+
+	ldp	$t0,$t1,[$tp,#8*0]
+	ldp	$t2,$t3,[$tp,#8*2]
+	mov	$rp,$tp
+	sub	$cnt,$np_end,$np	// done yet?
+	adds	$acc0,$acc0,$t0
+	adcs	$acc1,$acc1,$t1
+	ldp	$t0,$t1,[$tp,#8*4]
+	adcs	$acc2,$acc2,$t2
+	adcs	$acc3,$acc3,$t3
+	ldp	$t2,$t3,[$tp,#8*6]
+	adcs	$acc4,$acc4,$t0
+	adcs	$acc5,$acc5,$t1
+	adcs	$acc6,$acc6,$t2
+	adcs	$acc7,$acc7,$t3
+	//adc	$carry,xzr,xzr		// moved below
+	cbz	$cnt,.Lsqr8x8_post_condition
+
+	ldr	$n0,[$tp,#-8*8]
+	ldp	$a0,$a1,[$np,#8*0]
+	ldp	$a2,$a3,[$np,#8*2]
+	ldp	$a4,$a5,[$np,#8*4]
+	mov	$cnt,#-8*8
+	ldp	$a6,$a7,[$np,#8*6]
+	add	$np,$np,#8*8
+
+.Lsqr8x_tail:
+	mul	$t0,$a0,$n0
+	adc	$carry,xzr,xzr		// carry bit, modulo-scheduled
+	mul	$t1,$a1,$n0
+	add	$cnt,$cnt,#8
+	mul	$t2,$a2,$n0
+	mul	$t3,$a3,$n0
+	adds	$acc0,$acc0,$t0
+	mul	$t0,$a4,$n0
+	adcs	$acc1,$acc1,$t1
+	mul	$t1,$a5,$n0
+	adcs	$acc2,$acc2,$t2
+	mul	$t2,$a6,$n0
+	adcs	$acc3,$acc3,$t3
+	mul	$t3,$a7,$n0
+	adcs	$acc4,$acc4,$t0
+	umulh	$t0,$a0,$n0
+	adcs	$acc5,$acc5,$t1
+	umulh	$t1,$a1,$n0
+	adcs	$acc6,$acc6,$t2
+	umulh	$t2,$a2,$n0
+	adcs	$acc7,$acc7,$t3
+	umulh	$t3,$a3,$n0
+	adc	$carry,$carry,xzr
+	str	$acc0,[$tp],#8
+	adds	$acc0,$acc1,$t0
+	umulh	$t0,$a4,$n0
+	adcs	$acc1,$acc2,$t1
+	umulh	$t1,$a5,$n0
+	adcs	$acc2,$acc3,$t2
+	umulh	$t2,$a6,$n0
+	adcs	$acc3,$acc4,$t3
+	umulh	$t3,$a7,$n0
+	ldr	$n0,[$rp,$cnt]
+	adcs	$acc4,$acc5,$t0
+	adcs	$acc5,$acc6,$t1
+	adcs	$acc6,$acc7,$t2
+	adcs	$acc7,$carry,$t3
+	//adc	$carry,xzr,xzr		// moved above
+	cbnz	$cnt,.Lsqr8x_tail
+					// note that carry flag is guaranteed
+					// to be zero at this point
+	ldp	$a0,$a1,[$tp,#8*0]
+	sub	$cnt,$np_end,$np	// done yet?
+	sub	$t2,$np_end,$num	// rewinded np
+	ldp	$a2,$a3,[$tp,#8*2]
+	ldp	$a4,$a5,[$tp,#8*4]
+	ldp	$a6,$a7,[$tp,#8*6]
+	cbz	$cnt,.Lsqr8x_tail_break
+
+	ldr	$n0,[$rp,#-8*8]
+	adds	$acc0,$acc0,$a0
+	adcs	$acc1,$acc1,$a1
+	ldp	$a0,$a1,[$np,#8*0]
+	adcs	$acc2,$acc2,$a2
+	adcs	$acc3,$acc3,$a3
+	ldp	$a2,$a3,[$np,#8*2]
+	adcs	$acc4,$acc4,$a4
+	adcs	$acc5,$acc5,$a5
+	ldp	$a4,$a5,[$np,#8*4]
+	adcs	$acc6,$acc6,$a6
+	mov	$cnt,#-8*8
+	adcs	$acc7,$acc7,$a7
+	ldp	$a6,$a7,[$np,#8*6]
+	add	$np,$np,#8*8
+	//adc	$carry,xzr,xzr		// moved above
+	b	.Lsqr8x_tail
+
+.align	4
+.Lsqr8x_tail_break:
+	ldr	$n0,[x29,#112]		// pull n0
+	add	$cnt,$tp,#8*8		// end of current t[num] window
+
+	subs	xzr,$topmost,#1		// "move" top-most carry to carry bit
+	adcs	$t0,$acc0,$a0
+	adcs	$t1,$acc1,$a1
+	ldp	$acc0,$acc1,[$rp,#8*0]
+	adcs	$acc2,$acc2,$a2
+	ldp	$a0,$a1,[$t2,#8*0]	// recall that $t2 is &n[0]
+	adcs	$acc3,$acc3,$a3
+	ldp	$a2,$a3,[$t2,#8*2]
+	adcs	$acc4,$acc4,$a4
+	adcs	$acc5,$acc5,$a5
+	ldp	$a4,$a5,[$t2,#8*4]
+	adcs	$acc6,$acc6,$a6
+	adcs	$acc7,$acc7,$a7
+	ldp	$a6,$a7,[$t2,#8*6]
+	add	$np,$t2,#8*8
+	adc	$topmost,xzr,xzr	// top-most carry
+	mul	$na0,$n0,$acc0
+	stp	$t0,$t1,[$tp,#8*0]
+	stp	$acc2,$acc3,[$tp,#8*2]
+	ldp	$acc2,$acc3,[$rp,#8*2]
+	stp	$acc4,$acc5,[$tp,#8*4]
+	ldp	$acc4,$acc5,[$rp,#8*4]
+	cmp	$cnt,x29		// did we hit the bottom?
+	stp	$acc6,$acc7,[$tp,#8*6]
+	mov	$tp,$rp			// slide the window
+	ldp	$acc6,$acc7,[$rp,#8*6]
+	mov	$cnt,#8
+	b.ne	.Lsqr8x_reduction
+
+	// Final step. We see if result is larger than modulus, and
+	// if it is, subtract the modulus. But comparison implies
+	// subtraction. So we subtract modulus, see if it borrowed,
+	// and conditionally copy original value.
+	ldr	$rp,[x29,#96]		// pull rp
+	add	$tp,$tp,#8*8
+	subs	$t0,$acc0,$a0
+	sbcs	$t1,$acc1,$a1
+	sub	$cnt,$num,#8*8
+	mov	$ap_end,$rp		// $rp copy
+
+.Lsqr8x_sub:
+	sbcs	$t2,$acc2,$a2
+	ldp	$a0,$a1,[$np,#8*0]
+	sbcs	$t3,$acc3,$a3
+	stp	$t0,$t1,[$rp,#8*0]
+	sbcs	$t0,$acc4,$a4
+	ldp	$a2,$a3,[$np,#8*2]
+	sbcs	$t1,$acc5,$a5
+	stp	$t2,$t3,[$rp,#8*2]
+	sbcs	$t2,$acc6,$a6
+	ldp	$a4,$a5,[$np,#8*4]
+	sbcs	$t3,$acc7,$a7
+	ldp	$a6,$a7,[$np,#8*6]
+	add	$np,$np,#8*8
+	ldp	$acc0,$acc1,[$tp,#8*0]
+	sub	$cnt,$cnt,#8*8
+	ldp	$acc2,$acc3,[$tp,#8*2]
+	ldp	$acc4,$acc5,[$tp,#8*4]
+	ldp	$acc6,$acc7,[$tp,#8*6]
+	add	$tp,$tp,#8*8
+	stp	$t0,$t1,[$rp,#8*4]
+	sbcs	$t0,$acc0,$a0
+	stp	$t2,$t3,[$rp,#8*6]
+	add	$rp,$rp,#8*8
+	sbcs	$t1,$acc1,$a1
+	cbnz	$cnt,.Lsqr8x_sub
+
+	sbcs	$t2,$acc2,$a2
+	 mov	$tp,sp
+	 add	$ap,sp,$num
+	 ldp	$a0,$a1,[$ap_end,#8*0]
+	sbcs	$t3,$acc3,$a3
+	stp	$t0,$t1,[$rp,#8*0]
+	sbcs	$t0,$acc4,$a4
+	 ldp	$a2,$a3,[$ap_end,#8*2]
+	sbcs	$t1,$acc5,$a5
+	stp	$t2,$t3,[$rp,#8*2]
+	sbcs	$t2,$acc6,$a6
+	 ldp	$acc0,$acc1,[$ap,#8*0]
+	sbcs	$t3,$acc7,$a7
+	 ldp	$acc2,$acc3,[$ap,#8*2]
+	sbcs	xzr,$topmost,xzr	// did it borrow?
+	ldr	x30,[x29,#8]		// pull return address
+	stp	$t0,$t1,[$rp,#8*4]
+	stp	$t2,$t3,[$rp,#8*6]
+
+	sub	$cnt,$num,#8*4
+.Lsqr4x_cond_copy:
+	sub	$cnt,$cnt,#8*4
+	csel	$t0,$acc0,$a0,lo
+	 stp	xzr,xzr,[$tp,#8*0]
+	csel	$t1,$acc1,$a1,lo
+	ldp	$a0,$a1,[$ap_end,#8*4]
+	ldp	$acc0,$acc1,[$ap,#8*4]
+	csel	$t2,$acc2,$a2,lo
+	 stp	xzr,xzr,[$tp,#8*2]
+	 add	$tp,$tp,#8*4
+	csel	$t3,$acc3,$a3,lo
+	ldp	$a2,$a3,[$ap_end,#8*6]
+	ldp	$acc2,$acc3,[$ap,#8*6]
+	add	$ap,$ap,#8*4
+	stp	$t0,$t1,[$ap_end,#8*0]
+	stp	$t2,$t3,[$ap_end,#8*2]
+	add	$ap_end,$ap_end,#8*4
+	 stp	xzr,xzr,[$ap,#8*0]
+	 stp	xzr,xzr,[$ap,#8*2]
+	cbnz	$cnt,.Lsqr4x_cond_copy
+
+	csel	$t0,$acc0,$a0,lo
+	 stp	xzr,xzr,[$tp,#8*0]
+	csel	$t1,$acc1,$a1,lo
+	 stp	xzr,xzr,[$tp,#8*2]
+	csel	$t2,$acc2,$a2,lo
+	csel	$t3,$acc3,$a3,lo
+	stp	$t0,$t1,[$ap_end,#8*0]
+	stp	$t2,$t3,[$ap_end,#8*2]
+
+	b	.Lsqr8x_done
+
+.align	4
+.Lsqr8x8_post_condition:
+	adc	$carry,xzr,xzr
+	ldr	x30,[x29,#8]		// pull return address
+	// $acc0-7,$carry hold result, $a0-7 hold modulus
+	subs	$a0,$acc0,$a0
+	ldr	$ap,[x29,#96]		// pull rp
+	sbcs	$a1,$acc1,$a1
+	 stp	xzr,xzr,[sp,#8*0]
+	sbcs	$a2,$acc2,$a2
+	 stp	xzr,xzr,[sp,#8*2]
+	sbcs	$a3,$acc3,$a3
+	 stp	xzr,xzr,[sp,#8*4]
+	sbcs	$a4,$acc4,$a4
+	 stp	xzr,xzr,[sp,#8*6]
+	sbcs	$a5,$acc5,$a5
+	 stp	xzr,xzr,[sp,#8*8]
+	sbcs	$a6,$acc6,$a6
+	 stp	xzr,xzr,[sp,#8*10]
+	sbcs	$a7,$acc7,$a7
+	 stp	xzr,xzr,[sp,#8*12]
+	sbcs	$carry,$carry,xzr	// did it borrow?
+	 stp	xzr,xzr,[sp,#8*14]
+
+	// $a0-7 hold result-modulus
+	csel	$a0,$acc0,$a0,lo
+	csel	$a1,$acc1,$a1,lo
+	csel	$a2,$acc2,$a2,lo
+	csel	$a3,$acc3,$a3,lo
+	stp	$a0,$a1,[$ap,#8*0]
+	csel	$a4,$acc4,$a4,lo
+	csel	$a5,$acc5,$a5,lo
+	stp	$a2,$a3,[$ap,#8*2]
+	csel	$a6,$acc6,$a6,lo
+	csel	$a7,$acc7,$a7,lo
+	stp	$a4,$a5,[$ap,#8*4]
+	stp	$a6,$a7,[$ap,#8*6]
+
+.Lsqr8x_done:
+	ldp	x19,x20,[x29,#16]
+	mov	sp,x29
+	ldp	x21,x22,[x29,#32]
+	mov	x0,#1
+	ldp	x23,x24,[x29,#48]
+	ldp	x25,x26,[x29,#64]
+	ldp	x27,x28,[x29,#80]
+	ldr	x29,[sp],#128
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	__bn_sqr8x_mont,.-__bn_sqr8x_mont
+___
+}
+
+{
+########################################################################
+# Even though this might look as ARMv8 adaptation of mulx4x_mont from
+# x86_64-mont5 module, it's different in sense that it performs
+# reduction 256 bits at a time.
+
+my ($a0,$a1,$a2,$a3,
+    $t0,$t1,$t2,$t3,
+    $m0,$m1,$m2,$m3,
+    $acc0,$acc1,$acc2,$acc3,$acc4,
+    $bi,$mi,$tp,$ap_end,$cnt) = map("x$_",(6..17,19..28));
+my  $bp_end=$rp;
+my  ($carry,$topmost) = ($rp,"x30");
+
+$code.=<<___;
+.type	__bn_mul4x_mont,%function
+.align	5
+__bn_mul4x_mont:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-128]!
+	add	x29,sp,#0
+	stp	x19,x20,[sp,#16]
+	stp	x21,x22,[sp,#32]
+	stp	x23,x24,[sp,#48]
+	stp	x25,x26,[sp,#64]
+	stp	x27,x28,[sp,#80]
+
+	sub	$tp,sp,$num,lsl#3
+	lsl	$num,$num,#3
+	ldr	$n0,[$n0]		// *n0
+	sub	sp,$tp,#8*4		// alloca
+
+	add	$t0,$bp,$num
+	add	$ap_end,$ap,$num
+	stp	$rp,$t0,[x29,#96]	// offload rp and &b[num]
+
+	ldr	$bi,[$bp,#8*0]		// b[0]
+	ldp	$a0,$a1,[$ap,#8*0]	// a[0..3]
+	ldp	$a2,$a3,[$ap,#8*2]
+	add	$ap,$ap,#8*4
+	mov	$acc0,xzr
+	mov	$acc1,xzr
+	mov	$acc2,xzr
+	mov	$acc3,xzr
+	ldp	$m0,$m1,[$np,#8*0]	// n[0..3]
+	ldp	$m2,$m3,[$np,#8*2]
+	adds	$np,$np,#8*4		// clear carry bit
+	mov	$carry,xzr
+	mov	$cnt,#0
+	mov	$tp,sp
+
+.Loop_mul4x_1st_reduction:
+	mul	$t0,$a0,$bi		// lo(a[0..3]*b[0])
+	adc	$carry,$carry,xzr	// modulo-scheduled
+	mul	$t1,$a1,$bi
+	add	$cnt,$cnt,#8
+	mul	$t2,$a2,$bi
+	and	$cnt,$cnt,#31
+	mul	$t3,$a3,$bi
+	adds	$acc0,$acc0,$t0
+	umulh	$t0,$a0,$bi		// hi(a[0..3]*b[0])
+	adcs	$acc1,$acc1,$t1
+	mul	$mi,$acc0,$n0		// t[0]*n0
+	adcs	$acc2,$acc2,$t2
+	umulh	$t1,$a1,$bi
+	adcs	$acc3,$acc3,$t3
+	umulh	$t2,$a2,$bi
+	adc	$acc4,xzr,xzr
+	umulh	$t3,$a3,$bi
+	ldr	$bi,[$bp,$cnt]		// next b[i] (or b[0])
+	adds	$acc1,$acc1,$t0
+	// (*)	mul	$t0,$m0,$mi	// lo(n[0..3]*t[0]*n0)
+	str	$mi,[$tp],#8		// put aside t[0]*n0 for tail processing
+	adcs	$acc2,$acc2,$t1
+	mul	$t1,$m1,$mi
+	adcs	$acc3,$acc3,$t2
+	mul	$t2,$m2,$mi
+	adc	$acc4,$acc4,$t3		// can't overflow
+	mul	$t3,$m3,$mi
+	// (*)	adds	xzr,$acc0,$t0
+	subs	xzr,$acc0,#1		// (*)
+	umulh	$t0,$m0,$mi		// hi(n[0..3]*t[0]*n0)
+	adcs	$acc0,$acc1,$t1
+	umulh	$t1,$m1,$mi
+	adcs	$acc1,$acc2,$t2
+	umulh	$t2,$m2,$mi
+	adcs	$acc2,$acc3,$t3
+	umulh	$t3,$m3,$mi
+	adcs	$acc3,$acc4,$carry
+	adc	$carry,xzr,xzr
+	adds	$acc0,$acc0,$t0
+	sub	$t0,$ap_end,$ap
+	adcs	$acc1,$acc1,$t1
+	adcs	$acc2,$acc2,$t2
+	adcs	$acc3,$acc3,$t3
+	//adc	$carry,$carry,xzr
+	cbnz	$cnt,.Loop_mul4x_1st_reduction
+
+	cbz	$t0,.Lmul4x4_post_condition
+
+	ldp	$a0,$a1,[$ap,#8*0]	// a[4..7]
+	ldp	$a2,$a3,[$ap,#8*2]
+	add	$ap,$ap,#8*4
+	ldr	$mi,[sp]		// a[0]*n0
+	ldp	$m0,$m1,[$np,#8*0]	// n[4..7]
+	ldp	$m2,$m3,[$np,#8*2]
+	add	$np,$np,#8*4
+
+.Loop_mul4x_1st_tail:
+	mul	$t0,$a0,$bi		// lo(a[4..7]*b[i])
+	adc	$carry,$carry,xzr	// modulo-scheduled
+	mul	$t1,$a1,$bi
+	add	$cnt,$cnt,#8
+	mul	$t2,$a2,$bi
+	and	$cnt,$cnt,#31
+	mul	$t3,$a3,$bi
+	adds	$acc0,$acc0,$t0
+	umulh	$t0,$a0,$bi		// hi(a[4..7]*b[i])
+	adcs	$acc1,$acc1,$t1
+	umulh	$t1,$a1,$bi
+	adcs	$acc2,$acc2,$t2
+	umulh	$t2,$a2,$bi
+	adcs	$acc3,$acc3,$t3
+	umulh	$t3,$a3,$bi
+	adc	$acc4,xzr,xzr
+	ldr	$bi,[$bp,$cnt]		// next b[i] (or b[0])
+	adds	$acc1,$acc1,$t0
+	mul	$t0,$m0,$mi		// lo(n[4..7]*a[0]*n0)
+	adcs	$acc2,$acc2,$t1
+	mul	$t1,$m1,$mi
+	adcs	$acc3,$acc3,$t2
+	mul	$t2,$m2,$mi
+	adc	$acc4,$acc4,$t3		// can't overflow
+	mul	$t3,$m3,$mi
+	adds	$acc0,$acc0,$t0
+	umulh	$t0,$m0,$mi		// hi(n[4..7]*a[0]*n0)
+	adcs	$acc1,$acc1,$t1
+	umulh	$t1,$m1,$mi
+	adcs	$acc2,$acc2,$t2
+	umulh	$t2,$m2,$mi
+	adcs	$acc3,$acc3,$t3
+	adcs	$acc4,$acc4,$carry
+	umulh	$t3,$m3,$mi
+	adc	$carry,xzr,xzr
+	ldr	$mi,[sp,$cnt]		// next t[0]*n0
+	str	$acc0,[$tp],#8		// result!!!
+	adds	$acc0,$acc1,$t0
+	sub	$t0,$ap_end,$ap		// done yet?
+	adcs	$acc1,$acc2,$t1
+	adcs	$acc2,$acc3,$t2
+	adcs	$acc3,$acc4,$t3
+	//adc	$carry,$carry,xzr
+	cbnz	$cnt,.Loop_mul4x_1st_tail
+
+	sub	$t1,$ap_end,$num	// rewinded $ap
+	cbz	$t0,.Lmul4x_proceed
+
+	ldp	$a0,$a1,[$ap,#8*0]
+	ldp	$a2,$a3,[$ap,#8*2]
+	add	$ap,$ap,#8*4
+	ldp	$m0,$m1,[$np,#8*0]
+	ldp	$m2,$m3,[$np,#8*2]
+	add	$np,$np,#8*4
+	b	.Loop_mul4x_1st_tail
+
+.align	5
+.Lmul4x_proceed:
+	ldr	$bi,[$bp,#8*4]!		// *++b
+	adc	$topmost,$carry,xzr
+	ldp	$a0,$a1,[$t1,#8*0]	// a[0..3]
+	sub	$np,$np,$num		// rewind np
+	ldp	$a2,$a3,[$t1,#8*2]
+	add	$ap,$t1,#8*4
+
+	stp	$acc0,$acc1,[$tp,#8*0]	// result!!!
+	ldp	$acc0,$acc1,[sp,#8*4]	// t[0..3]
+	stp	$acc2,$acc3,[$tp,#8*2]	// result!!!
+	ldp	$acc2,$acc3,[sp,#8*6]
+
+	ldp	$m0,$m1,[$np,#8*0]	// n[0..3]
+	mov	$tp,sp
+	ldp	$m2,$m3,[$np,#8*2]
+	adds	$np,$np,#8*4		// clear carry bit
+	mov	$carry,xzr
+
+.align	4
+.Loop_mul4x_reduction:
+	mul	$t0,$a0,$bi		// lo(a[0..3]*b[4])
+	adc	$carry,$carry,xzr	// modulo-scheduled
+	mul	$t1,$a1,$bi
+	add	$cnt,$cnt,#8
+	mul	$t2,$a2,$bi
+	and	$cnt,$cnt,#31
+	mul	$t3,$a3,$bi
+	adds	$acc0,$acc0,$t0
+	umulh	$t0,$a0,$bi		// hi(a[0..3]*b[4])
+	adcs	$acc1,$acc1,$t1
+	mul	$mi,$acc0,$n0		// t[0]*n0
+	adcs	$acc2,$acc2,$t2
+	umulh	$t1,$a1,$bi
+	adcs	$acc3,$acc3,$t3
+	umulh	$t2,$a2,$bi
+	adc	$acc4,xzr,xzr
+	umulh	$t3,$a3,$bi
+	ldr	$bi,[$bp,$cnt]		// next b[i]
+	adds	$acc1,$acc1,$t0
+	// (*)	mul	$t0,$m0,$mi
+	str	$mi,[$tp],#8		// put aside t[0]*n0 for tail processing
+	adcs	$acc2,$acc2,$t1
+	mul	$t1,$m1,$mi		// lo(n[0..3]*t[0]*n0
+	adcs	$acc3,$acc3,$t2
+	mul	$t2,$m2,$mi
+	adc	$acc4,$acc4,$t3		// can't overflow
+	mul	$t3,$m3,$mi
+	// (*)	adds	xzr,$acc0,$t0
+	subs	xzr,$acc0,#1		// (*)
+	umulh	$t0,$m0,$mi		// hi(n[0..3]*t[0]*n0
+	adcs	$acc0,$acc1,$t1
+	umulh	$t1,$m1,$mi
+	adcs	$acc1,$acc2,$t2
+	umulh	$t2,$m2,$mi
+	adcs	$acc2,$acc3,$t3
+	umulh	$t3,$m3,$mi
+	adcs	$acc3,$acc4,$carry
+	adc	$carry,xzr,xzr
+	adds	$acc0,$acc0,$t0
+	adcs	$acc1,$acc1,$t1
+	adcs	$acc2,$acc2,$t2
+	adcs	$acc3,$acc3,$t3
+	//adc	$carry,$carry,xzr
+	cbnz	$cnt,.Loop_mul4x_reduction
+
+	adc	$carry,$carry,xzr
+	ldp	$t0,$t1,[$tp,#8*4]	// t[4..7]
+	ldp	$t2,$t3,[$tp,#8*6]
+	ldp	$a0,$a1,[$ap,#8*0]	// a[4..7]
+	ldp	$a2,$a3,[$ap,#8*2]
+	add	$ap,$ap,#8*4
+	adds	$acc0,$acc0,$t0
+	adcs	$acc1,$acc1,$t1
+	adcs	$acc2,$acc2,$t2
+	adcs	$acc3,$acc3,$t3
+	//adc	$carry,$carry,xzr
+
+	ldr	$mi,[sp]		// t[0]*n0
+	ldp	$m0,$m1,[$np,#8*0]	// n[4..7]
+	ldp	$m2,$m3,[$np,#8*2]
+	add	$np,$np,#8*4
+
+.align	4
+.Loop_mul4x_tail:
+	mul	$t0,$a0,$bi		// lo(a[4..7]*b[4])
+	adc	$carry,$carry,xzr	// modulo-scheduled
+	mul	$t1,$a1,$bi
+	add	$cnt,$cnt,#8
+	mul	$t2,$a2,$bi
+	and	$cnt,$cnt,#31
+	mul	$t3,$a3,$bi
+	adds	$acc0,$acc0,$t0
+	umulh	$t0,$a0,$bi		// hi(a[4..7]*b[4])
+	adcs	$acc1,$acc1,$t1
+	umulh	$t1,$a1,$bi
+	adcs	$acc2,$acc2,$t2
+	umulh	$t2,$a2,$bi
+	adcs	$acc3,$acc3,$t3
+	umulh	$t3,$a3,$bi
+	adc	$acc4,xzr,xzr
+	ldr	$bi,[$bp,$cnt]		// next b[i]
+	adds	$acc1,$acc1,$t0
+	mul	$t0,$m0,$mi		// lo(n[4..7]*t[0]*n0)
+	adcs	$acc2,$acc2,$t1
+	mul	$t1,$m1,$mi
+	adcs	$acc3,$acc3,$t2
+	mul	$t2,$m2,$mi
+	adc	$acc4,$acc4,$t3		// can't overflow
+	mul	$t3,$m3,$mi
+	adds	$acc0,$acc0,$t0
+	umulh	$t0,$m0,$mi		// hi(n[4..7]*t[0]*n0)
+	adcs	$acc1,$acc1,$t1
+	umulh	$t1,$m1,$mi
+	adcs	$acc2,$acc2,$t2
+	umulh	$t2,$m2,$mi
+	adcs	$acc3,$acc3,$t3
+	umulh	$t3,$m3,$mi
+	adcs	$acc4,$acc4,$carry
+	ldr	$mi,[sp,$cnt]		// next a[0]*n0
+	adc	$carry,xzr,xzr
+	str	$acc0,[$tp],#8		// result!!!
+	adds	$acc0,$acc1,$t0
+	sub	$t0,$ap_end,$ap		// done yet?
+	adcs	$acc1,$acc2,$t1
+	adcs	$acc2,$acc3,$t2
+	adcs	$acc3,$acc4,$t3
+	//adc	$carry,$carry,xzr
+	cbnz	$cnt,.Loop_mul4x_tail
+
+	sub	$t1,$np,$num		// rewinded np?
+	adc	$carry,$carry,xzr
+	cbz	$t0,.Loop_mul4x_break
+
+	ldp	$t0,$t1,[$tp,#8*4]
+	ldp	$t2,$t3,[$tp,#8*6]
+	ldp	$a0,$a1,[$ap,#8*0]
+	ldp	$a2,$a3,[$ap,#8*2]
+	add	$ap,$ap,#8*4
+	adds	$acc0,$acc0,$t0
+	adcs	$acc1,$acc1,$t1
+	adcs	$acc2,$acc2,$t2
+	adcs	$acc3,$acc3,$t3
+	//adc	$carry,$carry,xzr
+	ldp	$m0,$m1,[$np,#8*0]
+	ldp	$m2,$m3,[$np,#8*2]
+	add	$np,$np,#8*4
+	b	.Loop_mul4x_tail
+
+.align	4
+.Loop_mul4x_break:
+	ldp	$t2,$t3,[x29,#96]	// pull rp and &b[num]
+	adds	$acc0,$acc0,$topmost
+	add	$bp,$bp,#8*4		// bp++
+	adcs	$acc1,$acc1,xzr
+	sub	$ap,$ap,$num		// rewind ap
+	adcs	$acc2,$acc2,xzr
+	stp	$acc0,$acc1,[$tp,#8*0]	// result!!!
+	adcs	$acc3,$acc3,xzr
+	ldp	$acc0,$acc1,[sp,#8*4]	// t[0..3]
+	adc	$topmost,$carry,xzr
+	stp	$acc2,$acc3,[$tp,#8*2]	// result!!!
+	cmp	$bp,$t3			// done yet?
+	ldp	$acc2,$acc3,[sp,#8*6]
+	ldp	$m0,$m1,[$t1,#8*0]	// n[0..3]
+	ldp	$m2,$m3,[$t1,#8*2]
+	add	$np,$t1,#8*4
+	b.eq	.Lmul4x_post
+
+	ldr	$bi,[$bp]
+	ldp	$a0,$a1,[$ap,#8*0]	// a[0..3]
+	ldp	$a2,$a3,[$ap,#8*2]
+	adds	$ap,$ap,#8*4		// clear carry bit
+	mov	$carry,xzr
+	mov	$tp,sp
+	b	.Loop_mul4x_reduction
+
+.align	4
+.Lmul4x_post:
+	// Final step. We see if result is larger than modulus, and
+	// if it is, subtract the modulus. But comparison implies
+	// subtraction. So we subtract modulus, see if it borrowed,
+	// and conditionally copy original value.
+	mov	$rp,$t2
+	mov	$ap_end,$t2		// $rp copy
+	subs	$t0,$acc0,$m0
+	add	$tp,sp,#8*8
+	sbcs	$t1,$acc1,$m1
+	sub	$cnt,$num,#8*4
+
+.Lmul4x_sub:
+	sbcs	$t2,$acc2,$m2
+	ldp	$m0,$m1,[$np,#8*0]
+	sub	$cnt,$cnt,#8*4
+	ldp	$acc0,$acc1,[$tp,#8*0]
+	sbcs	$t3,$acc3,$m3
+	ldp	$m2,$m3,[$np,#8*2]
+	add	$np,$np,#8*4
+	ldp	$acc2,$acc3,[$tp,#8*2]
+	add	$tp,$tp,#8*4
+	stp	$t0,$t1,[$rp,#8*0]
+	sbcs	$t0,$acc0,$m0
+	stp	$t2,$t3,[$rp,#8*2]
+	add	$rp,$rp,#8*4
+	sbcs	$t1,$acc1,$m1
+	cbnz	$cnt,.Lmul4x_sub
+
+	sbcs	$t2,$acc2,$m2
+	 mov	$tp,sp
+	 add	$ap,sp,#8*4
+	 ldp	$a0,$a1,[$ap_end,#8*0]
+	sbcs	$t3,$acc3,$m3
+	stp	$t0,$t1,[$rp,#8*0]
+	 ldp	$a2,$a3,[$ap_end,#8*2]
+	stp	$t2,$t3,[$rp,#8*2]
+	 ldp	$acc0,$acc1,[$ap,#8*0]
+	 ldp	$acc2,$acc3,[$ap,#8*2]
+	sbcs	xzr,$topmost,xzr	// did it borrow?
+	ldr	x30,[x29,#8]		// pull return address
+
+	sub	$cnt,$num,#8*4
+.Lmul4x_cond_copy:
+	sub	$cnt,$cnt,#8*4
+	csel	$t0,$acc0,$a0,lo
+	 stp	xzr,xzr,[$tp,#8*0]
+	csel	$t1,$acc1,$a1,lo
+	ldp	$a0,$a1,[$ap_end,#8*4]
+	ldp	$acc0,$acc1,[$ap,#8*4]
+	csel	$t2,$acc2,$a2,lo
+	 stp	xzr,xzr,[$tp,#8*2]
+	 add	$tp,$tp,#8*4
+	csel	$t3,$acc3,$a3,lo
+	ldp	$a2,$a3,[$ap_end,#8*6]
+	ldp	$acc2,$acc3,[$ap,#8*6]
+	add	$ap,$ap,#8*4
+	stp	$t0,$t1,[$ap_end,#8*0]
+	stp	$t2,$t3,[$ap_end,#8*2]
+	add	$ap_end,$ap_end,#8*4
+	cbnz	$cnt,.Lmul4x_cond_copy
+
+	csel	$t0,$acc0,$a0,lo
+	 stp	xzr,xzr,[$tp,#8*0]
+	csel	$t1,$acc1,$a1,lo
+	 stp	xzr,xzr,[$tp,#8*2]
+	csel	$t2,$acc2,$a2,lo
+	 stp	xzr,xzr,[$tp,#8*3]
+	csel	$t3,$acc3,$a3,lo
+	 stp	xzr,xzr,[$tp,#8*4]
+	stp	$t0,$t1,[$ap_end,#8*0]
+	stp	$t2,$t3,[$ap_end,#8*2]
+
+	b	.Lmul4x_done
+
+.align	4
+.Lmul4x4_post_condition:
+	adc	$carry,$carry,xzr
+	ldr	$ap,[x29,#96]		// pull rp
+	// $acc0-3,$carry hold result, $m0-7 hold modulus
+	subs	$a0,$acc0,$m0
+	ldr	x30,[x29,#8]		// pull return address
+	sbcs	$a1,$acc1,$m1
+	 stp	xzr,xzr,[sp,#8*0]
+	sbcs	$a2,$acc2,$m2
+	 stp	xzr,xzr,[sp,#8*2]
+	sbcs	$a3,$acc3,$m3
+	 stp	xzr,xzr,[sp,#8*4]
+	sbcs	xzr,$carry,xzr		// did it borrow?
+	 stp	xzr,xzr,[sp,#8*6]
+
+	// $a0-3 hold result-modulus
+	csel	$a0,$acc0,$a0,lo
+	csel	$a1,$acc1,$a1,lo
+	csel	$a2,$acc2,$a2,lo
+	csel	$a3,$acc3,$a3,lo
+	stp	$a0,$a1,[$ap,#8*0]
+	stp	$a2,$a3,[$ap,#8*2]
+
+.Lmul4x_done:
+	ldp	x19,x20,[x29,#16]
+	mov	sp,x29
+	ldp	x21,x22,[x29,#32]
+	mov	x0,#1
+	ldp	x23,x24,[x29,#48]
+	ldp	x25,x26,[x29,#64]
+	ldp	x27,x28,[x29,#80]
+	ldr	x29,[sp],#128
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	__bn_mul4x_mont,.-__bn_mul4x_mont
+___
+}
+$code.=<<___;
+.asciz	"Montgomery Multiplication for ARMv8, CRYPTOGAMS by <appro\@openssl.org>"
+.align	4
+___
+
+print $code;
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/bn-586.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/bn-586.pl
new file mode 100644
index 000000000..58effc880
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/bn-586.pl
@@ -0,0 +1,785 @@
+#! /usr/bin/env perl
+# Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output = pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0]);
+
+$sse2=0;
+for (@ARGV) { $sse2=1 if (/-DOPENSSL_IA32_SSE2/); }
+
+&external_label("OPENSSL_ia32cap_P") if ($sse2);
+
+&bn_mul_add_words("bn_mul_add_words");
+&bn_mul_words("bn_mul_words");
+&bn_sqr_words("bn_sqr_words");
+&bn_div_words("bn_div_words");
+&bn_add_words("bn_add_words");
+&bn_sub_words("bn_sub_words");
+&bn_sub_part_words("bn_sub_part_words");
+
+&asm_finish();
+
+close STDOUT;
+
+sub bn_mul_add_words
+	{
+	local($name)=@_;
+
+	&function_begin_B($name,$sse2?"EXTRN\t_OPENSSL_ia32cap_P:DWORD":"");
+
+	$r="eax";
+	$a="edx";
+	$c="ecx";
+
+	if ($sse2) {
+		&picmeup("eax","OPENSSL_ia32cap_P");
+		&bt(&DWP(0,"eax"),26);
+		&jnc(&label("maw_non_sse2"));
+
+		&mov($r,&wparam(0));
+		&mov($a,&wparam(1));
+		&mov($c,&wparam(2));
+		&movd("mm0",&wparam(3));	# mm0 = w
+		&pxor("mm1","mm1");		# mm1 = carry_in
+		&jmp(&label("maw_sse2_entry"));
+
+	&set_label("maw_sse2_unrolled",16);
+		&movd("mm3",&DWP(0,$r,"",0));	# mm3 = r[0]
+		&paddq("mm1","mm3");		# mm1 = carry_in + r[0]
+		&movd("mm2",&DWP(0,$a,"",0));	# mm2 = a[0]
+		&pmuludq("mm2","mm0");		# mm2 = w*a[0]
+		&movd("mm4",&DWP(4,$a,"",0));	# mm4 = a[1]
+		&pmuludq("mm4","mm0");		# mm4 = w*a[1]
+		&movd("mm6",&DWP(8,$a,"",0));	# mm6 = a[2]
+		&pmuludq("mm6","mm0");		# mm6 = w*a[2]
+		&movd("mm7",&DWP(12,$a,"",0));	# mm7 = a[3]
+		&pmuludq("mm7","mm0");		# mm7 = w*a[3]
+		&paddq("mm1","mm2");		# mm1 = carry_in + r[0] + w*a[0]
+		&movd("mm3",&DWP(4,$r,"",0));	# mm3 = r[1]
+		&paddq("mm3","mm4");		# mm3 = r[1] + w*a[1]
+		&movd("mm5",&DWP(8,$r,"",0));	# mm5 = r[2]
+		&paddq("mm5","mm6");		# mm5 = r[2] + w*a[2]
+		&movd("mm4",&DWP(12,$r,"",0));	# mm4 = r[3]
+		&paddq("mm7","mm4");		# mm7 = r[3] + w*a[3]
+		&movd(&DWP(0,$r,"",0),"mm1");
+		&movd("mm2",&DWP(16,$a,"",0));	# mm2 = a[4]
+		&pmuludq("mm2","mm0");		# mm2 = w*a[4]
+		&psrlq("mm1",32);		# mm1 = carry0
+		&movd("mm4",&DWP(20,$a,"",0));	# mm4 = a[5]
+		&pmuludq("mm4","mm0");		# mm4 = w*a[5]
+		&paddq("mm1","mm3");		# mm1 = carry0 + r[1] + w*a[1]
+		&movd("mm6",&DWP(24,$a,"",0));	# mm6 = a[6]
+		&pmuludq("mm6","mm0");		# mm6 = w*a[6]
+		&movd(&DWP(4,$r,"",0),"mm1");
+		&psrlq("mm1",32);		# mm1 = carry1
+		&movd("mm3",&DWP(28,$a,"",0));	# mm3 = a[7]
+		&add($a,32);
+		&pmuludq("mm3","mm0");		# mm3 = w*a[7]
+		&paddq("mm1","mm5");		# mm1 = carry1 + r[2] + w*a[2]
+		&movd("mm5",&DWP(16,$r,"",0));	# mm5 = r[4]
+		&paddq("mm2","mm5");		# mm2 = r[4] + w*a[4]
+		&movd(&DWP(8,$r,"",0),"mm1");
+		&psrlq("mm1",32);		# mm1 = carry2
+		&paddq("mm1","mm7");		# mm1 = carry2 + r[3] + w*a[3]
+		&movd("mm5",&DWP(20,$r,"",0));	# mm5 = r[5]
+		&paddq("mm4","mm5");		# mm4 = r[5] + w*a[5]
+		&movd(&DWP(12,$r,"",0),"mm1");
+		&psrlq("mm1",32);		# mm1 = carry3
+		&paddq("mm1","mm2");		# mm1 = carry3 + r[4] + w*a[4]
+		&movd("mm5",&DWP(24,$r,"",0));	# mm5 = r[6]
+		&paddq("mm6","mm5");		# mm6 = r[6] + w*a[6]
+		&movd(&DWP(16,$r,"",0),"mm1");
+		&psrlq("mm1",32);		# mm1 = carry4
+		&paddq("mm1","mm4");		# mm1 = carry4 + r[5] + w*a[5]
+		&movd("mm5",&DWP(28,$r,"",0));	# mm5 = r[7]
+		&paddq("mm3","mm5");		# mm3 = r[7] + w*a[7]
+		&movd(&DWP(20,$r,"",0),"mm1");
+		&psrlq("mm1",32);		# mm1 = carry5
+		&paddq("mm1","mm6");		# mm1 = carry5 + r[6] + w*a[6]
+		&movd(&DWP(24,$r,"",0),"mm1");
+		&psrlq("mm1",32);		# mm1 = carry6
+		&paddq("mm1","mm3");		# mm1 = carry6 + r[7] + w*a[7]
+		&movd(&DWP(28,$r,"",0),"mm1");
+		&lea($r,&DWP(32,$r));
+		&psrlq("mm1",32);		# mm1 = carry_out
+
+		&sub($c,8);
+		&jz(&label("maw_sse2_exit"));
+	&set_label("maw_sse2_entry");
+		&test($c,0xfffffff8);
+		&jnz(&label("maw_sse2_unrolled"));
+
+	&set_label("maw_sse2_loop",4);
+		&movd("mm2",&DWP(0,$a));	# mm2 = a[i]
+		&movd("mm3",&DWP(0,$r));	# mm3 = r[i]
+		&pmuludq("mm2","mm0");		# a[i] *= w
+		&lea($a,&DWP(4,$a));
+		&paddq("mm1","mm3");		# carry += r[i]
+		&paddq("mm1","mm2");		# carry += a[i]*w
+		&movd(&DWP(0,$r),"mm1");	# r[i] = carry_low
+		&sub($c,1);
+		&psrlq("mm1",32);		# carry = carry_high
+		&lea($r,&DWP(4,$r));
+		&jnz(&label("maw_sse2_loop"));
+	&set_label("maw_sse2_exit");
+		&movd("eax","mm1");		# c = carry_out
+		&emms();
+		&ret();
+
+	&set_label("maw_non_sse2",16);
+	}
+
+	# function_begin prologue
+	&push("ebp");
+	&push("ebx");
+	&push("esi");
+	&push("edi");
+
+	&comment("");
+	$Low="eax";
+	$High="edx";
+	$a="ebx";
+	$w="ebp";
+	$r="edi";
+	$c="esi";
+
+	&xor($c,$c);		# clear carry
+	&mov($r,&wparam(0));	#
+
+	&mov("ecx",&wparam(2));	#
+	&mov($a,&wparam(1));	#
+
+	&and("ecx",0xfffffff8);	# num / 8
+	&mov($w,&wparam(3));	#
+
+	&push("ecx");		# Up the stack for a tmp variable
+
+	&jz(&label("maw_finish"));
+
+	&set_label("maw_loop",16);
+
+	for ($i=0; $i<32; $i+=4)
+		{
+		&comment("Round $i");
+
+		 &mov("eax",&DWP($i,$a)); 	# *a
+		&mul($w);			# *a * w
+		&add("eax",$c);			# L(t)+= c
+		&adc("edx",0);			# H(t)+=carry
+		 &add("eax",&DWP($i,$r));	# L(t)+= *r
+		&adc("edx",0);			# H(t)+=carry
+		 &mov(&DWP($i,$r),"eax");	# *r= L(t);
+		&mov($c,"edx");			# c=  H(t);
+		}
+
+	&comment("");
+	&sub("ecx",8);
+	&lea($a,&DWP(32,$a));
+	&lea($r,&DWP(32,$r));
+	&jnz(&label("maw_loop"));
+
+	&set_label("maw_finish",0);
+	&mov("ecx",&wparam(2));	# get num
+	&and("ecx",7);
+	&jnz(&label("maw_finish2"));	# helps branch prediction
+	&jmp(&label("maw_end"));
+
+	&set_label("maw_finish2",1);
+	for ($i=0; $i<7; $i++)
+		{
+		&comment("Tail Round $i");
+		 &mov("eax",&DWP($i*4,$a));	# *a
+		&mul($w);			# *a * w
+		&add("eax",$c);			# L(t)+=c
+		&adc("edx",0);			# H(t)+=carry
+		 &add("eax",&DWP($i*4,$r));	# L(t)+= *r
+		&adc("edx",0);			# H(t)+=carry
+		 &dec("ecx") if ($i != 7-1);
+		&mov(&DWP($i*4,$r),"eax");	# *r= L(t);
+		 &mov($c,"edx");		# c=  H(t);
+		&jz(&label("maw_end")) if ($i != 7-1);
+		}
+	&set_label("maw_end",0);
+	&mov("eax",$c);
+
+	&pop("ecx");	# clear variable from
+
+	&function_end($name);
+	}
+
+sub bn_mul_words
+	{
+	local($name)=@_;
+
+	&function_begin_B($name,$sse2?"EXTRN\t_OPENSSL_ia32cap_P:DWORD":"");
+
+	$r="eax";
+	$a="edx";
+	$c="ecx";
+
+	if ($sse2) {
+		&picmeup("eax","OPENSSL_ia32cap_P");
+		&bt(&DWP(0,"eax"),26);
+		&jnc(&label("mw_non_sse2"));
+
+		&mov($r,&wparam(0));
+		&mov($a,&wparam(1));
+		&mov($c,&wparam(2));
+		&movd("mm0",&wparam(3));	# mm0 = w
+		&pxor("mm1","mm1");		# mm1 = carry = 0
+
+	&set_label("mw_sse2_loop",16);
+		&movd("mm2",&DWP(0,$a));	# mm2 = a[i]
+		&pmuludq("mm2","mm0");		# a[i] *= w
+		&lea($a,&DWP(4,$a));
+		&paddq("mm1","mm2");		# carry += a[i]*w
+		&movd(&DWP(0,$r),"mm1");	# r[i] = carry_low
+		&sub($c,1);
+		&psrlq("mm1",32);		# carry = carry_high
+		&lea($r,&DWP(4,$r));
+		&jnz(&label("mw_sse2_loop"));
+
+		&movd("eax","mm1");		# return carry
+		&emms();
+		&ret();
+	&set_label("mw_non_sse2",16);
+	}
+
+	# function_begin prologue
+	&push("ebp");
+	&push("ebx");
+	&push("esi");
+	&push("edi");
+
+	&comment("");
+	$Low="eax";
+	$High="edx";
+	$a="ebx";
+	$w="ecx";
+	$r="edi";
+	$c="esi";
+	$num="ebp";
+
+	&xor($c,$c);		# clear carry
+	&mov($r,&wparam(0));	#
+	&mov($a,&wparam(1));	#
+	&mov($num,&wparam(2));	#
+	&mov($w,&wparam(3));	#
+
+	&and($num,0xfffffff8);	# num / 8
+	&jz(&label("mw_finish"));
+
+	&set_label("mw_loop",0);
+	for ($i=0; $i<32; $i+=4)
+		{
+		&comment("Round $i");
+
+		 &mov("eax",&DWP($i,$a,"",0)); 	# *a
+		&mul($w);			# *a * w
+		&add("eax",$c);			# L(t)+=c
+		 # XXX
+
+		&adc("edx",0);			# H(t)+=carry
+		 &mov(&DWP($i,$r,"",0),"eax");	# *r= L(t);
+
+		&mov($c,"edx");			# c=  H(t);
+		}
+
+	&comment("");
+	&add($a,32);
+	&add($r,32);
+	&sub($num,8);
+	&jz(&label("mw_finish"));
+	&jmp(&label("mw_loop"));
+
+	&set_label("mw_finish",0);
+	&mov($num,&wparam(2));	# get num
+	&and($num,7);
+	&jnz(&label("mw_finish2"));
+	&jmp(&label("mw_end"));
+
+	&set_label("mw_finish2",1);
+	for ($i=0; $i<7; $i++)
+		{
+		&comment("Tail Round $i");
+		 &mov("eax",&DWP($i*4,$a,"",0));# *a
+		&mul($w);			# *a * w
+		&add("eax",$c);			# L(t)+=c
+		 # XXX
+		&adc("edx",0);			# H(t)+=carry
+		 &mov(&DWP($i*4,$r,"",0),"eax");# *r= L(t);
+		&mov($c,"edx");			# c=  H(t);
+		 &dec($num) if ($i != 7-1);
+		&jz(&label("mw_end")) if ($i != 7-1);
+		}
+	&set_label("mw_end",0);
+	&mov("eax",$c);
+
+	&function_end($name);
+	}
+
+sub bn_sqr_words
+	{
+	local($name)=@_;
+
+	&function_begin_B($name,$sse2?"EXTRN\t_OPENSSL_ia32cap_P:DWORD":"");
+
+	$r="eax";
+	$a="edx";
+	$c="ecx";
+
+	if ($sse2) {
+		&picmeup("eax","OPENSSL_ia32cap_P");
+		&bt(&DWP(0,"eax"),26);
+		&jnc(&label("sqr_non_sse2"));
+
+		&mov($r,&wparam(0));
+		&mov($a,&wparam(1));
+		&mov($c,&wparam(2));
+
+	&set_label("sqr_sse2_loop",16);
+		&movd("mm0",&DWP(0,$a));	# mm0 = a[i]
+		&pmuludq("mm0","mm0");		# a[i] *= a[i]
+		&lea($a,&DWP(4,$a));		# a++
+		&movq(&QWP(0,$r),"mm0");	# r[i] = a[i]*a[i]
+		&sub($c,1);
+		&lea($r,&DWP(8,$r));		# r += 2
+		&jnz(&label("sqr_sse2_loop"));
+
+		&emms();
+		&ret();
+	&set_label("sqr_non_sse2",16);
+	}
+
+	# function_begin prologue
+	&push("ebp");
+	&push("ebx");
+	&push("esi");
+	&push("edi");
+
+	&comment("");
+	$r="esi";
+	$a="edi";
+	$num="ebx";
+
+	&mov($r,&wparam(0));	#
+	&mov($a,&wparam(1));	#
+	&mov($num,&wparam(2));	#
+
+	&and($num,0xfffffff8);	# num / 8
+	&jz(&label("sw_finish"));
+
+	&set_label("sw_loop",0);
+	for ($i=0; $i<32; $i+=4)
+		{
+		&comment("Round $i");
+		&mov("eax",&DWP($i,$a,"",0)); 	# *a
+		 # XXX
+		&mul("eax");			# *a * *a
+		&mov(&DWP($i*2,$r,"",0),"eax");	#
+		 &mov(&DWP($i*2+4,$r,"",0),"edx");#
+		}
+
+	&comment("");
+	&add($a,32);
+	&add($r,64);
+	&sub($num,8);
+	&jnz(&label("sw_loop"));
+
+	&set_label("sw_finish",0);
+	&mov($num,&wparam(2));	# get num
+	&and($num,7);
+	&jz(&label("sw_end"));
+
+	for ($i=0; $i<7; $i++)
+		{
+		&comment("Tail Round $i");
+		&mov("eax",&DWP($i*4,$a,"",0));	# *a
+		 # XXX
+		&mul("eax");			# *a * *a
+		&mov(&DWP($i*8,$r,"",0),"eax");	#
+		 &dec($num) if ($i != 7-1);
+		&mov(&DWP($i*8+4,$r,"",0),"edx");
+		 &jz(&label("sw_end")) if ($i != 7-1);
+		}
+	&set_label("sw_end",0);
+
+	&function_end($name);
+	}
+
+sub bn_div_words
+	{
+	local($name)=@_;
+
+	&function_begin_B($name,"");
+	&mov("edx",&wparam(0));	#
+	&mov("eax",&wparam(1));	#
+	&mov("ecx",&wparam(2));	#
+	&div("ecx");
+	&ret();
+	&function_end_B($name);
+	}
+
+sub bn_add_words
+	{
+	local($name)=@_;
+
+	&function_begin($name,"");
+
+	&comment("");
+	$a="esi";
+	$b="edi";
+	$c="eax";
+	$r="ebx";
+	$tmp1="ecx";
+	$tmp2="edx";
+	$num="ebp";
+
+	&mov($r,&wparam(0));	# get r
+	 &mov($a,&wparam(1));	# get a
+	&mov($b,&wparam(2));	# get b
+	 &mov($num,&wparam(3));	# get num
+	&xor($c,$c);		# clear carry
+	 &and($num,0xfffffff8);	# num / 8
+
+	&jz(&label("aw_finish"));
+
+	&set_label("aw_loop",0);
+	for ($i=0; $i<8; $i++)
+		{
+		&comment("Round $i");
+
+		&mov($tmp1,&DWP($i*4,$a,"",0)); 	# *a
+		 &mov($tmp2,&DWP($i*4,$b,"",0)); 	# *b
+		&add($tmp1,$c);
+		 &mov($c,0);
+		&adc($c,$c);
+		 &add($tmp1,$tmp2);
+		&adc($c,0);
+		 &mov(&DWP($i*4,$r,"",0),$tmp1); 	# *r
+		}
+
+	&comment("");
+	&add($a,32);
+	 &add($b,32);
+	&add($r,32);
+	 &sub($num,8);
+	&jnz(&label("aw_loop"));
+
+	&set_label("aw_finish",0);
+	&mov($num,&wparam(3));	# get num
+	&and($num,7);
+	 &jz(&label("aw_end"));
+
+	for ($i=0; $i<7; $i++)
+		{
+		&comment("Tail Round $i");
+		&mov($tmp1,&DWP($i*4,$a,"",0));	# *a
+		 &mov($tmp2,&DWP($i*4,$b,"",0));# *b
+		&add($tmp1,$c);
+		 &mov($c,0);
+		&adc($c,$c);
+		 &add($tmp1,$tmp2);
+		&adc($c,0);
+		 &dec($num) if ($i != 6);
+		&mov(&DWP($i*4,$r,"",0),$tmp1);	# *r
+		 &jz(&label("aw_end")) if ($i != 6);
+		}
+	&set_label("aw_end",0);
+
+#	&mov("eax",$c);		# $c is "eax"
+
+	&function_end($name);
+	}
+
+sub bn_sub_words
+	{
+	local($name)=@_;
+
+	&function_begin($name,"");
+
+	&comment("");
+	$a="esi";
+	$b="edi";
+	$c="eax";
+	$r="ebx";
+	$tmp1="ecx";
+	$tmp2="edx";
+	$num="ebp";
+
+	&mov($r,&wparam(0));	# get r
+	 &mov($a,&wparam(1));	# get a
+	&mov($b,&wparam(2));	# get b
+	 &mov($num,&wparam(3));	# get num
+	&xor($c,$c);		# clear carry
+	 &and($num,0xfffffff8);	# num / 8
+
+	&jz(&label("aw_finish"));
+
+	&set_label("aw_loop",0);
+	for ($i=0; $i<8; $i++)
+		{
+		&comment("Round $i");
+
+		&mov($tmp1,&DWP($i*4,$a,"",0)); 	# *a
+		 &mov($tmp2,&DWP($i*4,$b,"",0)); 	# *b
+		&sub($tmp1,$c);
+		 &mov($c,0);
+		&adc($c,$c);
+		 &sub($tmp1,$tmp2);
+		&adc($c,0);
+		 &mov(&DWP($i*4,$r,"",0),$tmp1); 	# *r
+		}
+
+	&comment("");
+	&add($a,32);
+	 &add($b,32);
+	&add($r,32);
+	 &sub($num,8);
+	&jnz(&label("aw_loop"));
+
+	&set_label("aw_finish",0);
+	&mov($num,&wparam(3));	# get num
+	&and($num,7);
+	 &jz(&label("aw_end"));
+
+	for ($i=0; $i<7; $i++)
+		{
+		&comment("Tail Round $i");
+		&mov($tmp1,&DWP($i*4,$a,"",0));	# *a
+		 &mov($tmp2,&DWP($i*4,$b,"",0));# *b
+		&sub($tmp1,$c);
+		 &mov($c,0);
+		&adc($c,$c);
+		 &sub($tmp1,$tmp2);
+		&adc($c,0);
+		 &dec($num) if ($i != 6);
+		&mov(&DWP($i*4,$r,"",0),$tmp1);	# *r
+		 &jz(&label("aw_end")) if ($i != 6);
+		}
+	&set_label("aw_end",0);
+
+#	&mov("eax",$c);		# $c is "eax"
+
+	&function_end($name);
+	}
+
+sub bn_sub_part_words
+	{
+	local($name)=@_;
+
+	&function_begin($name,"");
+
+	&comment("");
+	$a="esi";
+	$b="edi";
+	$c="eax";
+	$r="ebx";
+	$tmp1="ecx";
+	$tmp2="edx";
+	$num="ebp";
+
+	&mov($r,&wparam(0));	# get r
+	 &mov($a,&wparam(1));	# get a
+	&mov($b,&wparam(2));	# get b
+	 &mov($num,&wparam(3));	# get num
+	&xor($c,$c);		# clear carry
+	 &and($num,0xfffffff8);	# num / 8
+
+	&jz(&label("aw_finish"));
+
+	&set_label("aw_loop",0);
+	for ($i=0; $i<8; $i++)
+		{
+		&comment("Round $i");
+
+		&mov($tmp1,&DWP($i*4,$a,"",0)); 	# *a
+		 &mov($tmp2,&DWP($i*4,$b,"",0)); 	# *b
+		&sub($tmp1,$c);
+		 &mov($c,0);
+		&adc($c,$c);
+		 &sub($tmp1,$tmp2);
+		&adc($c,0);
+		 &mov(&DWP($i*4,$r,"",0),$tmp1); 	# *r
+		}
+
+	&comment("");
+	&add($a,32);
+	 &add($b,32);
+	&add($r,32);
+	 &sub($num,8);
+	&jnz(&label("aw_loop"));
+
+	&set_label("aw_finish",0);
+	&mov($num,&wparam(3));	# get num
+	&and($num,7);
+	 &jz(&label("aw_end"));
+
+	for ($i=0; $i<7; $i++)
+		{
+		&comment("Tail Round $i");
+		&mov($tmp1,&DWP(0,$a,"",0));	# *a
+		 &mov($tmp2,&DWP(0,$b,"",0));# *b
+		&sub($tmp1,$c);
+		 &mov($c,0);
+		&adc($c,$c);
+		 &sub($tmp1,$tmp2);
+		&adc($c,0);
+		&mov(&DWP(0,$r,"",0),$tmp1);	# *r
+		&add($a, 4);
+		&add($b, 4);
+		&add($r, 4);
+		 &dec($num) if ($i != 6);
+		 &jz(&label("aw_end")) if ($i != 6);
+		}
+	&set_label("aw_end",0);
+
+	&cmp(&wparam(4),0);
+	&je(&label("pw_end"));
+
+	&mov($num,&wparam(4));	# get dl
+	&cmp($num,0);
+	&je(&label("pw_end"));
+	&jge(&label("pw_pos"));
+
+	&comment("pw_neg");
+	&mov($tmp2,0);
+	&sub($tmp2,$num);
+	&mov($num,$tmp2);
+	&and($num,0xfffffff8);	# num / 8
+	&jz(&label("pw_neg_finish"));
+
+	&set_label("pw_neg_loop",0);
+	for ($i=0; $i<8; $i++)
+	{
+	    &comment("dl<0 Round $i");
+
+	    &mov($tmp1,0);
+	    &mov($tmp2,&DWP($i*4,$b,"",0)); 	# *b
+	    &sub($tmp1,$c);
+	    &mov($c,0);
+	    &adc($c,$c);
+	    &sub($tmp1,$tmp2);
+	    &adc($c,0);
+	    &mov(&DWP($i*4,$r,"",0),$tmp1); 	# *r
+	}
+
+	&comment("");
+	&add($b,32);
+	&add($r,32);
+	&sub($num,8);
+	&jnz(&label("pw_neg_loop"));
+
+	&set_label("pw_neg_finish",0);
+	&mov($tmp2,&wparam(4));	# get dl
+	&mov($num,0);
+	&sub($num,$tmp2);
+	&and($num,7);
+	&jz(&label("pw_end"));
+
+	for ($i=0; $i<7; $i++)
+	{
+	    &comment("dl<0 Tail Round $i");
+	    &mov($tmp1,0);
+	    &mov($tmp2,&DWP($i*4,$b,"",0));# *b
+	    &sub($tmp1,$c);
+	    &mov($c,0);
+	    &adc($c,$c);
+	    &sub($tmp1,$tmp2);
+	    &adc($c,0);
+	    &dec($num) if ($i != 6);
+	    &mov(&DWP($i*4,$r,"",0),$tmp1);	# *r
+	    &jz(&label("pw_end")) if ($i != 6);
+	}
+
+	&jmp(&label("pw_end"));
+
+	&set_label("pw_pos",0);
+
+	&and($num,0xfffffff8);	# num / 8
+	&jz(&label("pw_pos_finish"));
+
+	&set_label("pw_pos_loop",0);
+
+	for ($i=0; $i<8; $i++)
+	{
+	    &comment("dl>0 Round $i");
+
+	    &mov($tmp1,&DWP($i*4,$a,"",0));	# *a
+	    &sub($tmp1,$c);
+	    &mov(&DWP($i*4,$r,"",0),$tmp1);	# *r
+	    &jnc(&label("pw_nc".$i));
+	}
+
+	&comment("");
+	&add($a,32);
+	&add($r,32);
+	&sub($num,8);
+	&jnz(&label("pw_pos_loop"));
+
+	&set_label("pw_pos_finish",0);
+	&mov($num,&wparam(4));	# get dl
+	&and($num,7);
+	&jz(&label("pw_end"));
+
+	for ($i=0; $i<7; $i++)
+	{
+	    &comment("dl>0 Tail Round $i");
+	    &mov($tmp1,&DWP($i*4,$a,"",0));	# *a
+	    &sub($tmp1,$c);
+	    &mov(&DWP($i*4,$r,"",0),$tmp1);	# *r
+	    &jnc(&label("pw_tail_nc".$i));
+	    &dec($num) if ($i != 6);
+	    &jz(&label("pw_end")) if ($i != 6);
+	}
+	&mov($c,1);
+	&jmp(&label("pw_end"));
+
+	&set_label("pw_nc_loop",0);
+	for ($i=0; $i<8; $i++)
+	{
+	    &mov($tmp1,&DWP($i*4,$a,"",0));	# *a
+	    &mov(&DWP($i*4,$r,"",0),$tmp1);	# *r
+	    &set_label("pw_nc".$i,0);
+	}
+
+	&comment("");
+	&add($a,32);
+	&add($r,32);
+	&sub($num,8);
+	&jnz(&label("pw_nc_loop"));
+
+	&mov($num,&wparam(4));	# get dl
+	&and($num,7);
+	&jz(&label("pw_nc_end"));
+
+	for ($i=0; $i<7; $i++)
+	{
+	    &mov($tmp1,&DWP($i*4,$a,"",0));	# *a
+	    &mov(&DWP($i*4,$r,"",0),$tmp1);	# *r
+	    &set_label("pw_tail_nc".$i,0);
+	    &dec($num) if ($i != 6);
+	    &jz(&label("pw_nc_end")) if ($i != 6);
+	}
+
+	&set_label("pw_nc_end",0);
+	&mov($c,0);
+
+	&set_label("pw_end",0);
+
+#	&mov("eax",$c);		# $c is "eax"
+
+	&function_end($name);
+	}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/bn-c64xplus.asm b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/bn-c64xplus.asm
new file mode 100644
index 000000000..de6d37728
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/bn-c64xplus.asm
@@ -0,0 +1,382 @@
+;; Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.
+;;
+;; Licensed under the OpenSSL license (the "License").  You may not use
+;; this file except in compliance with the License.  You can obtain a copy
+;; in the file LICENSE in the source distribution or at
+;; https://www.openssl.org/source/license.html
+;;
+;;====================================================================
+;; Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+;; project.
+;;
+;; Rights for redistribution and usage in source and binary forms are
+;; granted according to the OpenSSL license. Warranty of any kind is
+;; disclaimed.
+;;====================================================================
+;; Compiler-generated multiply-n-add SPLOOP runs at 12*n cycles, n
+;; being the number of 32-bit words, addition - 8*n. Corresponding 4x
+;; unrolled SPLOOP-free loops - at ~8*n and ~5*n. Below assembler
+;; SPLOOPs spin at ... 2*n cycles [plus epilogue].
+;;====================================================================
+	.text
+
+	.if	.ASSEMBLER_VERSION<7000000
+	.asg	0,__TI_EABI__
+	.endif
+	.if	__TI_EABI__
+	.asg	bn_mul_add_words,_bn_mul_add_words
+	.asg	bn_mul_words,_bn_mul_words
+	.asg	bn_sqr_words,_bn_sqr_words
+	.asg	bn_add_words,_bn_add_words
+	.asg	bn_sub_words,_bn_sub_words
+	.asg	bn_div_words,_bn_div_words
+	.asg	bn_sqr_comba8,_bn_sqr_comba8
+	.asg	bn_mul_comba8,_bn_mul_comba8
+	.asg	bn_sqr_comba4,_bn_sqr_comba4
+	.asg	bn_mul_comba4,_bn_mul_comba4
+	.endif
+
+	.asg	B3,RA
+	.asg	A4,ARG0
+	.asg	B4,ARG1
+	.asg	A6,ARG2
+	.asg	B6,ARG3
+	.asg	A8,ARG4
+	.asg	B8,ARG5
+	.asg	A4,RET
+	.asg	A15,FP
+	.asg	B14,DP
+	.asg	B15,SP
+
+	.global	_bn_mul_add_words
+_bn_mul_add_words:
+	.asmfunc
+	MV	ARG2,B0
+  [!B0]	BNOP	RA
+||[!B0]	MVK	0,RET
+   [B0]	MVC	B0,ILC
+   [B0]	ZERO	A19		; high part of accumulator
+|| [B0]	MV	ARG0,A2
+|| [B0]	MV	ARG3,A3
+	NOP	3
+
+	SPLOOP	2		; 2*n+10
+;;====================================================================
+	LDW	*ARG1++,B7	; ap[i]
+	NOP	3
+	LDW	*ARG0++,A7	; rp[i]
+	MPY32U	B7,A3,A17:A16
+	NOP	3		; [2,0] in epilogue
+	ADDU	A16,A7,A21:A20
+	ADDU	A19,A21:A20,A19:A18
+||	MV.S	A17,A23
+	SPKERNEL 2,1		; leave slot for "return value"
+||	STW	A18,*A2++	; rp[i]
+||	ADD	A19,A23,A19
+;;====================================================================
+	BNOP	RA,4
+	MV	A19,RET		; return value
+	.endasmfunc
+
+	.global	_bn_mul_words
+_bn_mul_words:
+	.asmfunc
+	MV	ARG2,B0
+  [!B0]	BNOP	RA
+||[!B0]	MVK	0,RET
+   [B0]	MVC	B0,ILC
+   [B0]	ZERO	A19		; high part of accumulator
+	NOP	3
+
+	SPLOOP	2		; 2*n+10
+;;====================================================================
+	LDW	*ARG1++,A7	; ap[i]
+	NOP	4
+	MPY32U	A7,ARG3,A17:A16
+	NOP	4		; [2,0] in epiloque
+	ADDU	A19,A16,A19:A18
+||	MV.S	A17,A21
+	SPKERNEL 2,1		; leave slot for "return value"
+||	STW	A18,*ARG0++	; rp[i]
+||	ADD.L	A19,A21,A19
+;;====================================================================
+	BNOP	RA,4
+	MV	A19,RET		; return value
+	.endasmfunc
+
+	.global	_bn_sqr_words
+_bn_sqr_words:
+	.asmfunc
+	MV	ARG2,B0
+  [!B0]	BNOP	RA
+||[!B0]	MVK	0,RET
+   [B0]	MVC	B0,ILC
+   [B0]	MV	ARG0,B2
+|| [B0]	ADD	4,ARG0,ARG0
+	NOP	3
+
+	SPLOOP	2		; 2*n+10
+;;====================================================================
+	LDW	*ARG1++,B7	; ap[i]
+	NOP	4
+	MPY32U	B7,B7,B1:B0
+	NOP	3		; [2,0] in epilogue
+	STW	B0,*B2++(8)	; rp[2*i]
+	MV	B1,A1
+	SPKERNEL 2,0		; fully overlap BNOP RA,5
+||	STW	A1,*ARG0++(8)	; rp[2*i+1]
+;;====================================================================
+	BNOP	RA,5
+	.endasmfunc
+
+	.global	_bn_add_words
+_bn_add_words:
+	.asmfunc
+	MV	ARG3,B0
+  [!B0]	BNOP	RA
+||[!B0]	MVK	0,RET
+   [B0]	MVC	B0,ILC
+   [B0]	ZERO	A1		; carry flag
+|| [B0]	MV	ARG0,A3
+	NOP	3
+
+	SPLOOP	2		; 2*n+6
+;;====================================================================
+	LDW	*ARG2++,A7	; bp[i]
+||	LDW	*ARG1++,B7	; ap[i]
+	NOP	4
+	ADDU	A7,B7,A9:A8
+	ADDU	A1,A9:A8,A1:A0
+	SPKERNEL 0,0		; fully overlap BNOP RA,5
+||	STW	A0,*A3++	; write result
+||	MV	A1,RET		; keep carry flag in RET
+;;====================================================================
+	BNOP	RA,5
+	.endasmfunc
+
+	.global	_bn_sub_words
+_bn_sub_words:
+	.asmfunc
+	MV	ARG3,B0
+  [!B0]	BNOP	RA
+||[!B0]	MVK	0,RET
+   [B0]	MVC	B0,ILC
+   [B0]	ZERO	A2		; borrow flag
+|| [B0]	MV	ARG0,A3
+	NOP	3
+
+	SPLOOP	2		; 2*n+6
+;;====================================================================
+	LDW	*ARG2++,A7	; bp[i]
+||	LDW	*ARG1++,B7	; ap[i]
+	NOP	4
+	SUBU	B7,A7,A1:A0
+  [A2]	SUB	A1:A0,1,A1:A0
+	SPKERNEL 0,1		; leave slot for "return borrow flag"
+||	STW	A0,*A3++	; write result
+||	AND	1,A1,A2		; pass on borrow flag
+;;====================================================================
+	BNOP	RA,4
+	AND	1,A1,RET	; return borrow flag
+	.endasmfunc
+
+	.global	_bn_div_words
+_bn_div_words:
+	.asmfunc
+	LMBD	1,A6,A0		; leading zero bits in dv
+	LMBD	1,A4,A1		; leading zero bits in hi
+||	MVK	32,B0
+	CMPLTU	A1,A0,A2
+||	ADD	A0,B0,B0
+  [ A2]	BNOP	RA
+||[ A2]	MVK	-1,A4		; return overflow
+||[!A2]	MV	A4,A3		; reassign hi
+  [!A2]	MV	B4,A4		; reassign lo, will be quotient
+||[!A2]	MVC	B0,ILC
+  [!A2]	SHL	A6,A0,A6	; normalize dv
+||	MVK	1,A1
+
+  [!A2]	CMPLTU	A3,A6,A1	; hi<dv?
+||[!A2]	SHL	A4,1,A5:A4	; lo<<1
+  [!A1]	SUB	A3,A6,A3	; hi-=dv
+||[!A1]	OR	1,A4,A4
+  [!A2]	SHRU	A3,31,A1	; upper bit
+||[!A2]	ADDAH	A5,A3,A3	; hi<<1|lo>>31
+
+	SPLOOP	3
+  [!A1]	CMPLTU	A3,A6,A1	; hi<dv?
+||[ A1]	ZERO	A1
+||	SHL	A4,1,A5:A4	; lo<<1
+  [!A1]	SUB	A3,A6,A3	; hi-=dv
+||[!A1]	OR	1,A4,A4		; quotient
+	SHRU	A3,31,A1	; upper bit
+||	ADDAH	A5,A3,A3	; hi<<1|lo>>31
+	SPKERNEL
+
+	BNOP	RA,5
+	.endasmfunc
+
+;;====================================================================
+;; Not really Comba algorithm, just straightforward NxM... Dedicated
+;; fully unrolled real Comba implementations are asymptotically 2x
+;; faster, but naturally larger undertaking. Purpose of this exercise
+;; was rather to learn to master nested SPLOOPs...
+;;====================================================================
+	.global	_bn_sqr_comba8
+	.global	_bn_mul_comba8
+_bn_sqr_comba8:
+	MV	ARG1,ARG2
+_bn_mul_comba8:
+	.asmfunc
+	MVK	8,B0		; N, RILC
+||	MVK	8,A0		; M, outer loop counter
+||	MV	ARG1,A5		; copy ap
+||	MV	ARG0,B4		; copy rp
+||	ZERO	B19		; high part of accumulator
+	MVC	B0,RILC
+||	SUB	B0,2,B1		; N-2, initial ILC
+||	SUB	B0,1,B2		; const B2=N-1
+||	LDW	*A5++,B6	; ap[0]
+||	MV	A0,A3		; const A3=M
+sploopNxM?:			; for best performance arrange M<=N
+   [A0]	SPLOOPD	2		; 2*n+10
+||	MVC	B1,ILC
+||	ADDAW	B4,B0,B5
+||	ZERO	B7
+||	LDW	*A5++,A9	; pre-fetch ap[1]
+||	ZERO	A1
+||	SUB	A0,1,A0
+;;====================================================================
+;; SPLOOP from bn_mul_add_words, but with flipped A<>B register files.
+;; This is because of Advisory 15 from TI publication SPRZ247I.
+	LDW	*ARG2++,A7	; bp[i]
+	NOP	3
+   [A1]	LDW	*B5++,B7	; rp[i]
+	MPY32U	A7,B6,B17:B16
+	NOP	3
+	ADDU	B16,B7,B21:B20
+	ADDU	B19,B21:B20,B19:B18
+||	MV.S	B17,B23
+	SPKERNEL
+||	STW	B18,*B4++	; rp[i]
+||	ADD.S	B19,B23,B19
+;;====================================================================
+outer?:				; m*2*(n+1)+10
+	SUBAW	ARG2,A3,ARG2	; rewind bp to bp[0]
+	SPMASKR
+||	CMPGT	A0,1,A2		; done pre-fetching ap[i+1]?
+	MVD	A9,B6		; move through .M unit(*)
+   [A2]	LDW	*A5++,A9	; pre-fetch ap[i+1]
+	SUBAW	B5,B2,B5	; rewind rp to rp[1]
+	MVK	1,A1
+   [A0]	BNOP.S1	outer?,4
+|| [A0]	SUB.L	A0,1,A0
+	STW	B19,*B4--[B2]	; rewind rp tp rp[1]
+||	ZERO.S	B19		; high part of accumulator
+;; end of outer?
+	BNOP	RA,5		; return
+	.endasmfunc
+;; (*)	It should be noted that B6 is used as input to MPY32U in
+;;	chronologically next cycle in *preceding* SPLOOP iteration.
+;;	Normally such arrangement would require DINT, but at this
+;;	point SPLOOP is draining and interrupts are disabled
+;;	implicitly.
+
+	.global	_bn_sqr_comba4
+	.global	_bn_mul_comba4
+_bn_sqr_comba4:
+	MV	ARG1,ARG2
+_bn_mul_comba4:
+	.asmfunc
+	.if	0
+	BNOP	sploopNxM?,3
+	;; Above mentioned m*2*(n+1)+10 does not apply in n=m=4 case,
+	;; because of low-counter effect, when prologue phase finishes
+	;; before SPKERNEL instruction is reached. As result it's 25%
+	;; slower than expected...
+	MVK	4,B0		; N, RILC
+||	MVK	4,A0		; M, outer loop counter
+||	MV	ARG1,A5		; copy ap
+||	MV	ARG0,B4		; copy rp
+||	ZERO	B19		; high part of accumulator
+	MVC	B0,RILC
+||	SUB	B0,2,B1		; first ILC
+||	SUB	B0,1,B2		; const B2=N-1
+||	LDW	*A5++,B6	; ap[0]
+||	MV	A0,A3		; const A3=M
+	.else
+	;; This alternative is an exercise in fully unrolled Comba
+	;; algorithm implementation that operates at n*(n+1)+12, or
+	;; as little as 32 cycles...
+	LDW	*ARG1[0],B16	; a[0]
+||	LDW	*ARG2[0],A16	; b[0]
+	LDW	*ARG1[1],B17	; a[1]
+||	LDW	*ARG2[1],A17	; b[1]
+	LDW	*ARG1[2],B18	; a[2]
+||	LDW	*ARG2[2],A18	; b[2]
+	LDW	*ARG1[3],B19	; a[3]
+||	LDW	*ARG2[3],A19	; b[3]
+	NOP
+	MPY32U	A16,B16,A1:A0	; a[0]*b[0]
+	MPY32U	A17,B16,A23:A22	; a[0]*b[1]
+	MPY32U	A16,B17,A25:A24	; a[1]*b[0]
+	MPY32U	A16,B18,A27:A26	; a[2]*b[0]
+	STW	A0,*ARG0[0]
+||	MPY32U	A17,B17,A29:A28	; a[1]*b[1]
+	MPY32U	A18,B16,A31:A30	; a[0]*b[2]
+||	ADDU	A22,A1,A1:A0
+	MV	A23,B0
+||	MPY32U	A19,B16,A21:A20	; a[3]*b[0]
+||	ADDU	A24,A1:A0,A1:A0
+	ADDU	A25,B0,B1:B0
+||	STW	A0,*ARG0[1]
+||	MPY32U	A18,B17,A23:A22	; a[2]*b[1]
+||	ADDU	A26,A1,A9:A8
+	ADDU	A27,B1,B9:B8
+||	MPY32U	A17,B18,A25:A24	; a[1]*b[2]
+||	ADDU	A28,A9:A8,A9:A8
+	ADDU	A29,B9:B8,B9:B8
+||	MPY32U	A16,B19,A27:A26	; a[0]*b[3]
+||	ADDU	A30,A9:A8,A9:A8
+	ADDU	A31,B9:B8,B9:B8
+||	ADDU	B0,A9:A8,A9:A8
+	STW	A8,*ARG0[2]
+||	ADDU	A20,A9,A1:A0
+	ADDU	A21,B9,B1:B0
+||	MPY32U	A19,B17,A21:A20	; a[3]*b[1]
+||	ADDU	A22,A1:A0,A1:A0
+	ADDU	A23,B1:B0,B1:B0
+||	MPY32U	A18,B18,A23:A22	; a[2]*b[2]
+||	ADDU	A24,A1:A0,A1:A0
+	ADDU	A25,B1:B0,B1:B0
+||	MPY32U	A17,B19,A25:A24	; a[1]*b[3]
+||	ADDU	A26,A1:A0,A1:A0
+	ADDU	A27,B1:B0,B1:B0
+||	ADDU	B8,A1:A0,A1:A0
+	STW	A0,*ARG0[3]
+||	MPY32U	A19,B18,A27:A26	; a[3]*b[2]
+||	ADDU	A20,A1,A9:A8
+	ADDU	A21,B1,B9:B8
+||	MPY32U	A18,B19,A29:A28	; a[2]*b[3]
+||	ADDU	A22,A9:A8,A9:A8
+	ADDU	A23,B9:B8,B9:B8
+||	MPY32U	A19,B19,A31:A30	; a[3]*b[3]
+||	ADDU	A24,A9:A8,A9:A8
+	ADDU	A25,B9:B8,B9:B8
+||	ADDU	B0,A9:A8,A9:A8
+	STW	A8,*ARG0[4]
+||	ADDU	A26,A9,A1:A0
+	ADDU	A27,B9,B1:B0
+||	ADDU	A28,A1:A0,A1:A0
+	ADDU	A29,B1:B0,B1:B0
+||	BNOP	RA
+||	ADDU	B8,A1:A0,A1:A0
+	STW	A0,*ARG0[5]
+||	ADDU	A30,A1,A9:A8
+	ADD	A31,B1,B8
+	ADDU	B0,A9:A8,A9:A8	; removed || to avoid cross-path stall below
+	ADD	B8,A9,A9
+||	STW	A8,*ARG0[6]
+	STW	A9,*ARG0[7]
+	.endif
+	.endasmfunc
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/c64xplus-gf2m.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/c64xplus-gf2m.pl
new file mode 100644
index 000000000..9c46da3af
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/c64xplus-gf2m.pl
@@ -0,0 +1,160 @@
+#! /usr/bin/env perl
+# Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# February 2012
+#
+# The module implements bn_GF2m_mul_2x2 polynomial multiplication
+# used in bn_gf2m.c. It's kind of low-hanging mechanical port from
+# C for the time being... The subroutine runs in 37 cycles, which is
+# 4.5x faster than compiler-generated code. Though comparison is
+# totally unfair, because this module utilizes Galois Field Multiply
+# instruction.
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+($rp,$a1,$a0,$b1,$b0)=("A4","B4","A6","B6","A8");   # argument vector
+
+($Alo,$Alox0,$Alox1,$Alox2,$Alox3)=map("A$_",(16..20));
+($Ahi,$Ahix0,$Ahix1,$Ahix2,$Ahix3)=map("B$_",(16..20));
+($B_0,$B_1,$B_2,$B_3)=("B5","A5","A7","B7");
+($A,$B)=($Alo,$B_1);
+$xFF="B1";
+
+sub mul_1x1_upper {
+my ($A,$B)=@_;
+$code.=<<___;
+	EXTU	$B,8,24,$B_2		; smash $B to 4 bytes
+||	AND	$B,$xFF,$B_0
+||	SHRU	$B,24,$B_3
+	SHRU	$A,16,   $Ahi		; smash $A to two halfwords
+||	EXTU	$A,16,16,$Alo
+
+	XORMPY	$Alo,$B_2,$Alox2	; 16x8 bits multiplication
+||	XORMPY	$Ahi,$B_2,$Ahix2
+||	EXTU	$B,16,24,$B_1
+	XORMPY	$Alo,$B_0,$Alox0
+||	XORMPY	$Ahi,$B_0,$Ahix0
+	XORMPY	$Alo,$B_3,$Alox3
+||	XORMPY	$Ahi,$B_3,$Ahix3
+	XORMPY	$Alo,$B_1,$Alox1
+||	XORMPY	$Ahi,$B_1,$Ahix1
+___
+}
+sub mul_1x1_merged {
+my ($OUTlo,$OUThi,$A,$B)=@_;
+$code.=<<___;
+	 EXTU	$B,8,24,$B_2		; smash $B to 4 bytes
+||	 AND	$B,$xFF,$B_0
+||	 SHRU	$B,24,$B_3
+	 SHRU	$A,16,   $Ahi		; smash $A to two halfwords
+||	 EXTU	$A,16,16,$Alo
+
+	XOR	$Ahix0,$Alox2,$Ahix0
+||	MV	$Ahix2,$OUThi
+||	 XORMPY	$Alo,$B_2,$Alox2
+	 XORMPY	$Ahi,$B_2,$Ahix2
+||	 EXTU	$B,16,24,$B_1
+||	 XORMPY	$Alo,$B_0,A1		; $Alox0
+	XOR	$Ahix1,$Alox3,$Ahix1
+||	SHL	$Ahix0,16,$OUTlo
+||	SHRU	$Ahix0,16,$Ahix0
+	XOR	$Alox0,$OUTlo,$OUTlo
+||	XOR	$Ahix0,$OUThi,$OUThi
+||	 XORMPY	$Ahi,$B_0,$Ahix0
+||	 XORMPY	$Alo,$B_3,$Alox3
+||	SHL	$Alox1,8,$Alox1
+||	SHL	$Ahix3,8,$Ahix3
+	XOR	$Alox1,$OUTlo,$OUTlo
+||	XOR	$Ahix3,$OUThi,$OUThi
+||	 XORMPY	$Ahi,$B_3,$Ahix3
+||	SHL	$Ahix1,24,$Alox1
+||	SHRU	$Ahix1,8, $Ahix1
+	XOR	$Alox1,$OUTlo,$OUTlo
+||	XOR	$Ahix1,$OUThi,$OUThi
+||	 XORMPY	$Alo,$B_1,$Alox1
+||	 XORMPY	$Ahi,$B_1,$Ahix1
+||	 MV	A1,$Alox0
+___
+}
+sub mul_1x1_lower {
+my ($OUTlo,$OUThi)=@_;
+$code.=<<___;
+	;NOP
+	XOR	$Ahix0,$Alox2,$Ahix0
+||	MV	$Ahix2,$OUThi
+	NOP
+	XOR	$Ahix1,$Alox3,$Ahix1
+||	SHL	$Ahix0,16,$OUTlo
+||	SHRU	$Ahix0,16,$Ahix0
+	XOR	$Alox0,$OUTlo,$OUTlo
+||	XOR	$Ahix0,$OUThi,$OUThi
+||	SHL	$Alox1,8,$Alox1
+||	SHL	$Ahix3,8,$Ahix3
+	XOR	$Alox1,$OUTlo,$OUTlo
+||	XOR	$Ahix3,$OUThi,$OUThi
+||	SHL	$Ahix1,24,$Alox1
+||	SHRU	$Ahix1,8, $Ahix1
+	XOR	$Alox1,$OUTlo,$OUTlo
+||	XOR	$Ahix1,$OUThi,$OUThi
+___
+}
+$code.=<<___;
+	.text
+
+	.if	.ASSEMBLER_VERSION<7000000
+	.asg	0,__TI_EABI__
+	.endif
+	.if	__TI_EABI__
+	.asg	bn_GF2m_mul_2x2,_bn_GF2m_mul_2x2
+	.endif
+
+	.global	_bn_GF2m_mul_2x2
+_bn_GF2m_mul_2x2:
+	.asmfunc
+	MVK	0xFF,$xFF
+___
+	&mul_1x1_upper($a0,$b0);		# a0·b0
+$code.=<<___;
+||	MV	$b1,$B
+	MV	$a1,$A
+___
+	&mul_1x1_merged("A28","B28",$A,$B);	# a0·b0/a1·b1
+$code.=<<___;
+||	XOR	$b0,$b1,$B
+	XOR	$a0,$a1,$A
+___
+	&mul_1x1_merged("A31","B31",$A,$B);	# a1·b1/(a0+a1)·(b0+b1)
+$code.=<<___;
+	XOR	A28,A31,A29
+||	XOR	B28,B31,B29			; a0·b0+a1·b1
+___
+	&mul_1x1_lower("A30","B30");		# (a0+a1)·(b0+b1)
+$code.=<<___;
+||	BNOP	B3
+	XOR	A29,A30,A30
+||	XOR	B29,B30,B30			; (a0+a1)·(b0+b1)-a0·b0-a1·b1
+	XOR	B28,A30,A30
+||	STW	A28,*${rp}[0]
+	XOR	B30,A31,A31
+||	STW	A30,*${rp}[1]
+	STW	A31,*${rp}[2]
+	STW	B31,*${rp}[3]
+	.endasmfunc
+___
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/co-586.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/co-586.pl
new file mode 100644
index 000000000..97f5e3a19
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/co-586.pl
@@ -0,0 +1,298 @@
+#! /usr/bin/env perl
+# Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output = pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0]);
+
+&bn_mul_comba("bn_mul_comba8",8);
+&bn_mul_comba("bn_mul_comba4",4);
+&bn_sqr_comba("bn_sqr_comba8",8);
+&bn_sqr_comba("bn_sqr_comba4",4);
+
+&asm_finish();
+
+close STDOUT;
+
+sub mul_add_c
+	{
+	local($a,$ai,$b,$bi,$c0,$c1,$c2,$pos,$i,$na,$nb)=@_;
+
+	# pos == -1 if eax and edx are pre-loaded, 0 to load from next
+	# words, and 1 if load return value
+
+	&comment("mul a[$ai]*b[$bi]");
+
+	# "eax" and "edx" will always be pre-loaded.
+	# &mov("eax",&DWP($ai*4,$a,"",0)) ;
+	# &mov("edx",&DWP($bi*4,$b,"",0));
+
+	&mul("edx");
+	&add($c0,"eax");
+	 &mov("eax",&DWP(($na)*4,$a,"",0)) if $pos == 0;	# laod next a
+	 &mov("eax",&wparam(0)) if $pos > 0;			# load r[]
+	 ###
+	&adc($c1,"edx");
+	 &mov("edx",&DWP(($nb)*4,$b,"",0)) if $pos == 0;	# laod next b
+	 &mov("edx",&DWP(($nb)*4,$b,"",0)) if $pos == 1;	# laod next b
+	 ###
+	&adc($c2,0);
+	 # is pos > 1, it means it is the last loop
+	 &mov(&DWP($i*4,"eax","",0),$c0) if $pos > 0;		# save r[];
+	&mov("eax",&DWP(($na)*4,$a,"",0)) if $pos == 1;		# laod next a
+	}
+
+sub sqr_add_c
+	{
+	local($r,$a,$ai,$bi,$c0,$c1,$c2,$pos,$i,$na,$nb)=@_;
+
+	# pos == -1 if eax and edx are pre-loaded, 0 to load from next
+	# words, and 1 if load return value
+
+	&comment("sqr a[$ai]*a[$bi]");
+
+	# "eax" and "edx" will always be pre-loaded.
+	# &mov("eax",&DWP($ai*4,$a,"",0)) ;
+	# &mov("edx",&DWP($bi*4,$b,"",0));
+
+	if ($ai == $bi)
+		{ &mul("eax");}
+	else
+		{ &mul("edx");}
+	&add($c0,"eax");
+	 &mov("eax",&DWP(($na)*4,$a,"",0)) if $pos == 0;	# load next a
+	 ###
+	&adc($c1,"edx");
+	 &mov("edx",&DWP(($nb)*4,$a,"",0)) if ($pos == 1) && ($na != $nb);
+	 ###
+	&adc($c2,0);
+	 # is pos > 1, it means it is the last loop
+	 &mov(&DWP($i*4,$r,"",0),$c0) if $pos > 0;		# save r[];
+	&mov("eax",&DWP(($na)*4,$a,"",0)) if $pos == 1;		# load next b
+	}
+
+sub sqr_add_c2
+	{
+	local($r,$a,$ai,$bi,$c0,$c1,$c2,$pos,$i,$na,$nb)=@_;
+
+	# pos == -1 if eax and edx are pre-loaded, 0 to load from next
+	# words, and 1 if load return value
+
+	&comment("sqr a[$ai]*a[$bi]");
+
+	# "eax" and "edx" will always be pre-loaded.
+	# &mov("eax",&DWP($ai*4,$a,"",0)) ;
+	# &mov("edx",&DWP($bi*4,$a,"",0));
+
+	if ($ai == $bi)
+		{ &mul("eax");}
+	else
+		{ &mul("edx");}
+	&add("eax","eax");
+	 ###
+	&adc("edx","edx");
+	 ###
+	&adc($c2,0);
+	 &add($c0,"eax");
+	&adc($c1,"edx");
+	 &mov("eax",&DWP(($na)*4,$a,"",0)) if $pos == 0;	# load next a
+	 &mov("eax",&DWP(($na)*4,$a,"",0)) if $pos == 1;	# load next b
+	&adc($c2,0);
+	&mov(&DWP($i*4,$r,"",0),$c0) if $pos > 0;		# save r[];
+	 &mov("edx",&DWP(($nb)*4,$a,"",0)) if ($pos <= 1) && ($na != $nb);
+	 ###
+	}
+
+sub bn_mul_comba
+	{
+	local($name,$num)=@_;
+	local($a,$b,$c0,$c1,$c2);
+	local($i,$as,$ae,$bs,$be,$ai,$bi);
+	local($tot,$end);
+
+	&function_begin_B($name,"");
+
+	$c0="ebx";
+	$c1="ecx";
+	$c2="ebp";
+	$a="esi";
+	$b="edi";
+
+	$as=0;
+	$ae=0;
+	$bs=0;
+	$be=0;
+	$tot=$num+$num-1;
+
+	&push("esi");
+	 &mov($a,&wparam(1));
+	&push("edi");
+	 &mov($b,&wparam(2));
+	&push("ebp");
+	 &push("ebx");
+
+	&xor($c0,$c0);
+	 &mov("eax",&DWP(0,$a,"",0));	# load the first word
+	&xor($c1,$c1);
+	 &mov("edx",&DWP(0,$b,"",0));	# load the first second
+
+	for ($i=0; $i<$tot; $i++)
+		{
+		$ai=$as;
+		$bi=$bs;
+		$end=$be+1;
+
+		&comment("################## Calculate word $i");
+
+		for ($j=$bs; $j<$end; $j++)
+			{
+			&xor($c2,$c2) if ($j == $bs);
+			if (($j+1) == $end)
+				{
+				$v=1;
+				$v=2 if (($i+1) == $tot);
+				}
+			else
+				{ $v=0; }
+			if (($j+1) != $end)
+				{
+				$na=($ai-1);
+				$nb=($bi+1);
+				}
+			else
+				{
+				$na=$as+($i < ($num-1));
+				$nb=$bs+($i >= ($num-1));
+				}
+#printf STDERR "[$ai,$bi] -> [$na,$nb]\n";
+			&mul_add_c($a,$ai,$b,$bi,$c0,$c1,$c2,$v,$i,$na,$nb);
+			if ($v)
+				{
+				&comment("saved r[$i]");
+				# &mov("eax",&wparam(0));
+				# &mov(&DWP($i*4,"eax","",0),$c0);
+				($c0,$c1,$c2)=($c1,$c2,$c0);
+				}
+			$ai--;
+			$bi++;
+			}
+		$as++ if ($i < ($num-1));
+		$ae++ if ($i >= ($num-1));
+
+		$bs++ if ($i >= ($num-1));
+		$be++ if ($i < ($num-1));
+		}
+	&comment("save r[$i]");
+	# &mov("eax",&wparam(0));
+	&mov(&DWP($i*4,"eax","",0),$c0);
+
+	&pop("ebx");
+	&pop("ebp");
+	&pop("edi");
+	&pop("esi");
+	&ret();
+	&function_end_B($name);
+	}
+
+sub bn_sqr_comba
+	{
+	local($name,$num)=@_;
+	local($r,$a,$c0,$c1,$c2)=@_;
+	local($i,$as,$ae,$bs,$be,$ai,$bi);
+	local($b,$tot,$end,$half);
+
+	&function_begin_B($name,"");
+
+	$c0="ebx";
+	$c1="ecx";
+	$c2="ebp";
+	$a="esi";
+	$r="edi";
+
+	&push("esi");
+	 &push("edi");
+	&push("ebp");
+	 &push("ebx");
+	&mov($r,&wparam(0));
+	 &mov($a,&wparam(1));
+	&xor($c0,$c0);
+	 &xor($c1,$c1);
+	&mov("eax",&DWP(0,$a,"",0)); # load the first word
+
+	$as=0;
+	$ae=0;
+	$bs=0;
+	$be=0;
+	$tot=$num+$num-1;
+
+	for ($i=0; $i<$tot; $i++)
+		{
+		$ai=$as;
+		$bi=$bs;
+		$end=$be+1;
+
+		&comment("############### Calculate word $i");
+		for ($j=$bs; $j<$end; $j++)
+			{
+			&xor($c2,$c2) if ($j == $bs);
+			if (($ai-1) < ($bi+1))
+				{
+				$v=1;
+				$v=2 if ($i+1) == $tot;
+				}
+			else
+				{ $v=0; }
+			if (!$v)
+				{
+				$na=$ai-1;
+				$nb=$bi+1;
+				}
+			else
+				{
+				$na=$as+($i < ($num-1));
+				$nb=$bs+($i >= ($num-1));
+				}
+			if ($ai == $bi)
+				{
+				&sqr_add_c($r,$a,$ai,$bi,
+					$c0,$c1,$c2,$v,$i,$na,$nb);
+				}
+			else
+				{
+				&sqr_add_c2($r,$a,$ai,$bi,
+					$c0,$c1,$c2,$v,$i,$na,$nb);
+				}
+			if ($v)
+				{
+				&comment("saved r[$i]");
+				#&mov(&DWP($i*4,$r,"",0),$c0);
+				($c0,$c1,$c2)=($c1,$c2,$c0);
+				last;
+				}
+			$ai--;
+			$bi++;
+			}
+		$as++ if ($i < ($num-1));
+		$ae++ if ($i >= ($num-1));
+
+		$bs++ if ($i >= ($num-1));
+		$be++ if ($i < ($num-1));
+		}
+	&mov(&DWP($i*4,$r,"",0),$c0);
+	&pop("ebx");
+	&pop("ebp");
+	&pop("edi");
+	&pop("esi");
+	&ret();
+	&function_end_B($name);
+	}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ia64-mont.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ia64-mont.pl
new file mode 100644
index 000000000..ec486f777
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ia64-mont.pl
@@ -0,0 +1,860 @@
+#! /usr/bin/env perl
+# Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# January 2010
+#
+# "Teaser" Montgomery multiplication module for IA-64. There are
+# several possibilities for improvement:
+#
+# - modulo-scheduling outer loop would eliminate quite a number of
+#   stalls after ldf8, xma and getf.sig outside inner loop and
+#   improve shorter key performance;
+# - shorter vector support [with input vectors being fetched only
+#   once] should be added;
+# - 2x unroll with help of n0[1] would make the code scalable on
+#   "wider" IA-64, "wider" than Itanium 2 that is, which is not of
+#   acute interest, because upcoming Tukwila's individual cores are
+#   reportedly based on Itanium 2 design;
+# - dedicated squaring procedure(?);
+#
+# January 2010
+#
+# Shorter vector support is implemented by zero-padding ap and np
+# vectors up to 8 elements, or 512 bits. This means that 256-bit
+# inputs will be processed only 2 times faster than 512-bit inputs,
+# not 4 [as one would expect, because algorithm complexity is n^2].
+# The reason for padding is that inputs shorter than 512 bits won't
+# be processed faster anyway, because minimal critical path of the
+# core loop happens to match 512-bit timing. Either way, it resulted
+# in >100% improvement of 512-bit RSA sign benchmark and 50% - of
+# 1024-bit one [in comparison to original version of *this* module].
+#
+# So far 'openssl speed rsa dsa' output on 900MHz Itanium 2 *with*
+# this module is:
+#                   sign    verify    sign/s verify/s
+# rsa  512 bits 0.000290s 0.000024s   3452.8  42031.4
+# rsa 1024 bits 0.000793s 0.000058s   1261.7  17172.0
+# rsa 2048 bits 0.005908s 0.000148s    169.3   6754.0
+# rsa 4096 bits 0.033456s 0.000469s     29.9   2133.6
+# dsa  512 bits 0.000253s 0.000198s   3949.9   5057.0
+# dsa 1024 bits 0.000585s 0.000607s   1708.4   1647.4
+# dsa 2048 bits 0.001453s 0.001703s    688.1    587.4
+#
+# ... and *without* (but still with ia64.S):
+#
+# rsa  512 bits 0.000670s 0.000041s   1491.8  24145.5
+# rsa 1024 bits 0.001988s 0.000080s    502.9  12499.3
+# rsa 2048 bits 0.008702s 0.000189s    114.9   5293.9
+# rsa 4096 bits 0.043860s 0.000533s     22.8   1875.9
+# dsa  512 bits 0.000441s 0.000427s   2265.3   2340.6
+# dsa 1024 bits 0.000823s 0.000867s   1215.6   1153.2
+# dsa 2048 bits 0.001894s 0.002179s    528.1    458.9
+#
+# As it can be seen, RSA sign performance improves by 130-30%,
+# hereafter less for longer keys, while verify - by 74-13%.
+# DSA performance improves by 115-30%.
+
+$output=pop;
+
+if ($^O eq "hpux") {
+    $ADDP="addp4";
+    for (@ARGV) { $ADDP="add" if (/[\+DD|\-mlp]64/); }
+} else { $ADDP="add"; }
+
+$code=<<___;
+.explicit
+.text
+
+// int bn_mul_mont (BN_ULONG *rp,const BN_ULONG *ap,
+//		    const BN_ULONG *bp,const BN_ULONG *np,
+//		    const BN_ULONG *n0p,int num);
+.align	64
+.global	bn_mul_mont#
+.proc	bn_mul_mont#
+bn_mul_mont:
+	.prologue
+	.body
+{ .mmi;	cmp4.le		p6,p7=2,r37;;
+(p6)	cmp4.lt.unc	p8,p9=8,r37
+	mov		ret0=r0		};;
+{ .bbb;
+(p9)	br.cond.dptk.many	bn_mul_mont_8
+(p8)	br.cond.dpnt.many	bn_mul_mont_general
+(p7)	br.ret.spnt.many	b0	};;
+.endp	bn_mul_mont#
+
+prevfs=r2;	prevpr=r3;	prevlc=r10;	prevsp=r11;
+
+rptr=r8;	aptr=r9;	bptr=r14;	nptr=r15;
+tptr=r16;	// &tp[0]
+tp_1=r17;	// &tp[-1]
+num=r18;	len=r19;	lc=r20;
+topbit=r21;	// carry bit from tmp[num]
+
+n0=f6;
+m0=f7;
+bi=f8;
+
+.align	64
+.local	bn_mul_mont_general#
+.proc	bn_mul_mont_general#
+bn_mul_mont_general:
+	.prologue
+{ .mmi;	.save	ar.pfs,prevfs
+	alloc	prevfs=ar.pfs,6,2,0,8
+	$ADDP	aptr=0,in1
+	.save	ar.lc,prevlc
+	mov	prevlc=ar.lc		}
+{ .mmi;	.vframe	prevsp
+	mov	prevsp=sp
+	$ADDP	bptr=0,in2
+	.save	pr,prevpr
+	mov	prevpr=pr		};;
+
+	.body
+	.rotf		alo[6],nlo[4],ahi[8],nhi[6]
+	.rotr		a[3],n[3],t[2]
+
+{ .mmi;	ldf8		bi=[bptr],8		// (*bp++)
+	ldf8		alo[4]=[aptr],16	// ap[0]
+	$ADDP		r30=8,in1	};;
+{ .mmi;	ldf8		alo[3]=[r30],16		// ap[1]
+	ldf8		alo[2]=[aptr],16	// ap[2]
+	$ADDP		in4=0,in4	};;
+{ .mmi;	ldf8		alo[1]=[r30]		// ap[3]
+	ldf8		n0=[in4]		// n0
+	$ADDP		rptr=0,in0		}
+{ .mmi;	$ADDP		nptr=0,in3
+	mov		r31=16
+	zxt4		num=in5		};;
+{ .mmi;	ldf8		nlo[2]=[nptr],8		// np[0]
+	shladd		len=num,3,r0
+	shladd		r31=num,3,r31	};;
+{ .mmi;	ldf8		nlo[1]=[nptr],8		// np[1]
+	add		lc=-5,num
+	sub		r31=sp,r31	};;
+{ .mfb;	and		sp=-16,r31		// alloca
+	xmpy.hu		ahi[2]=alo[4],bi	// ap[0]*bp[0]
+	nop.b		0		}
+{ .mfb;	nop.m		0
+	xmpy.lu		alo[4]=alo[4],bi
+	brp.loop.imp	.L1st_ctop,.L1st_cend-16
+					};;
+{ .mfi;	nop.m		0
+	xma.hu		ahi[1]=alo[3],bi,ahi[2]	// ap[1]*bp[0]
+	add		tp_1=8,sp	}
+{ .mfi;	nop.m		0
+	xma.lu		alo[3]=alo[3],bi,ahi[2]
+	mov		pr.rot=0x20001f<<16
+			// ------^----- (p40) at first (p23)
+			// ----------^^ p[16:20]=1
+					};;
+{ .mfi;	nop.m		0
+	xmpy.lu		m0=alo[4],n0		// (ap[0]*bp[0])*n0
+	mov		ar.lc=lc	}
+{ .mfi;	nop.m		0
+	fcvt.fxu.s1	nhi[1]=f0
+	mov		ar.ec=8		};;
+
+.align	32
+.L1st_ctop:
+.pred.rel	"mutex",p40,p42
+{ .mfi;	(p16)	ldf8		alo[0]=[aptr],8		    // *(aptr++)
+	(p18)	xma.hu		ahi[0]=alo[2],bi,ahi[1]
+	(p40)	add		n[2]=n[2],a[2]		}   // (p23)					}
+{ .mfi;	(p18)	ldf8		nlo[0]=[nptr],8		    // *(nptr++)(p16)
+	(p18)	xma.lu		alo[2]=alo[2],bi,ahi[1]
+	(p42)	add		n[2]=n[2],a[2],1	};; // (p23)
+{ .mfi;	(p21)	getf.sig	a[0]=alo[5]
+	(p20)	xma.hu		nhi[0]=nlo[2],m0,nhi[1]
+	(p42)	cmp.leu		p41,p39=n[2],a[2]   	}   // (p23)
+{ .mfi;	(p23)	st8		[tp_1]=n[2],8
+	(p20)	xma.lu		nlo[2]=nlo[2],m0,nhi[1]
+	(p40)	cmp.ltu		p41,p39=n[2],a[2]	}   // (p23)
+{ .mmb;	(p21)	getf.sig	n[0]=nlo[3]
+	(p16)	nop.m		0
+	br.ctop.sptk	.L1st_ctop			};;
+.L1st_cend:
+
+{ .mmi;	getf.sig	a[0]=ahi[6]		// (p24)
+	getf.sig	n[0]=nhi[4]
+	add		num=-1,num	};;	// num--
+{ .mmi;	.pred.rel	"mutex",p40,p42
+(p40)	add		n[0]=n[0],a[0]
+(p42)	add		n[0]=n[0],a[0],1
+	sub		aptr=aptr,len	};;	// rewind
+{ .mmi;	.pred.rel	"mutex",p40,p42
+(p40)	cmp.ltu		p41,p39=n[0],a[0]
+(p42)	cmp.leu		p41,p39=n[0],a[0]
+	sub		nptr=nptr,len	};;
+{ .mmi;	.pred.rel	"mutex",p39,p41
+(p39)	add		topbit=r0,r0
+(p41)	add		topbit=r0,r0,1
+	nop.i		0		}
+{ .mmi;	st8		[tp_1]=n[0]
+	add		tptr=16,sp
+	add		tp_1=8,sp	};;
+
+.Louter:
+{ .mmi;	ldf8		bi=[bptr],8		// (*bp++)
+	ldf8		ahi[3]=[tptr]		// tp[0]
+	add		r30=8,aptr	};;
+{ .mmi;	ldf8		alo[4]=[aptr],16	// ap[0]
+	ldf8		alo[3]=[r30],16		// ap[1]
+	add		r31=8,nptr	};;
+{ .mfb;	ldf8		alo[2]=[aptr],16	// ap[2]
+	xma.hu		ahi[2]=alo[4],bi,ahi[3]	// ap[0]*bp[i]+tp[0]
+	brp.loop.imp	.Linner_ctop,.Linner_cend-16
+					}
+{ .mfb;	ldf8		alo[1]=[r30]		// ap[3]
+	xma.lu		alo[4]=alo[4],bi,ahi[3]
+	clrrrb.pr			};;
+{ .mfi;	ldf8		nlo[2]=[nptr],16	// np[0]
+	xma.hu		ahi[1]=alo[3],bi,ahi[2]	// ap[1]*bp[i]
+	nop.i		0		}
+{ .mfi;	ldf8		nlo[1]=[r31]		// np[1]
+	xma.lu		alo[3]=alo[3],bi,ahi[2]
+	mov		pr.rot=0x20101f<<16
+			// ------^----- (p40) at first (p23)
+			// --------^--- (p30) at first (p22)
+			// ----------^^ p[16:20]=1
+					};;
+{ .mfi;	st8		[tptr]=r0		// tp[0] is already accounted
+	xmpy.lu		m0=alo[4],n0		// (ap[0]*bp[i]+tp[0])*n0
+	mov		ar.lc=lc	}
+{ .mfi;
+	fcvt.fxu.s1	nhi[1]=f0
+	mov		ar.ec=8		};;
+
+// This loop spins in 4*(n+7) ticks on Itanium 2 and should spin in
+// 7*(n+7) ticks on Itanium (the one codenamed Merced). Factor of 7
+// in latter case accounts for two-tick pipeline stall, which means
+// that its performance would be ~20% lower than optimal one. No
+// attempt was made to address this, because original Itanium is
+// hardly represented out in the wild...
+.align	32
+.Linner_ctop:
+.pred.rel	"mutex",p40,p42
+.pred.rel	"mutex",p30,p32
+{ .mfi;	(p16)	ldf8		alo[0]=[aptr],8		    // *(aptr++)
+	(p18)	xma.hu		ahi[0]=alo[2],bi,ahi[1]
+	(p40)	add		n[2]=n[2],a[2]		}   // (p23)
+{ .mfi;	(p16)	nop.m		0
+	(p18)	xma.lu		alo[2]=alo[2],bi,ahi[1]
+	(p42)	add		n[2]=n[2],a[2],1	};; // (p23)
+{ .mfi;	(p21)	getf.sig	a[0]=alo[5]
+	(p16)	nop.f		0
+	(p40)	cmp.ltu		p41,p39=n[2],a[2]	}   // (p23)
+{ .mfi;	(p21)	ld8		t[0]=[tptr],8
+	(p16)	nop.f		0
+	(p42)	cmp.leu		p41,p39=n[2],a[2]	};; // (p23)
+{ .mfi;	(p18)	ldf8		nlo[0]=[nptr],8		    // *(nptr++)
+	(p20)	xma.hu		nhi[0]=nlo[2],m0,nhi[1]
+	(p30)	add		a[1]=a[1],t[1]		}   // (p22)
+{ .mfi;	(p16)	nop.m		0
+	(p20)	xma.lu		nlo[2]=nlo[2],m0,nhi[1]
+	(p32)	add		a[1]=a[1],t[1],1	};; // (p22)
+{ .mmi;	(p21)	getf.sig	n[0]=nlo[3]
+	(p16)	nop.m		0
+	(p30)	cmp.ltu		p31,p29=a[1],t[1]	}   // (p22)
+{ .mmb;	(p23)	st8		[tp_1]=n[2],8
+	(p32)	cmp.leu		p31,p29=a[1],t[1]	    // (p22)
+	br.ctop.sptk	.Linner_ctop			};;
+.Linner_cend:
+
+{ .mmi;	getf.sig	a[0]=ahi[6]		// (p24)
+	getf.sig	n[0]=nhi[4]
+	nop.i		0		};;
+
+{ .mmi;	.pred.rel	"mutex",p31,p33
+(p31)	add		a[0]=a[0],topbit
+(p33)	add		a[0]=a[0],topbit,1
+	mov		topbit=r0	};;
+{ .mfi; .pred.rel	"mutex",p31,p33
+(p31)	cmp.ltu		p32,p30=a[0],topbit
+(p33)	cmp.leu		p32,p30=a[0],topbit
+					}
+{ .mfi;	.pred.rel	"mutex",p40,p42
+(p40)	add		n[0]=n[0],a[0]
+(p42)	add		n[0]=n[0],a[0],1
+					};;
+{ .mmi;	.pred.rel	"mutex",p44,p46
+(p40)	cmp.ltu		p41,p39=n[0],a[0]
+(p42)	cmp.leu		p41,p39=n[0],a[0]
+(p32)	add		topbit=r0,r0,1	}
+
+{ .mmi;	st8		[tp_1]=n[0],8
+	cmp4.ne		p6,p0=1,num
+	sub		aptr=aptr,len	};;	// rewind
+{ .mmi;	sub		nptr=nptr,len
+(p41)	add		topbit=r0,r0,1
+	add		tptr=16,sp	}
+{ .mmb;	add		tp_1=8,sp
+	add		num=-1,num		// num--
+(p6)	br.cond.sptk.many	.Louter	};;
+
+{ .mbb;	add		lc=4,lc
+	brp.loop.imp	.Lsub_ctop,.Lsub_cend-16
+	clrrrb.pr			};;
+{ .mii;	nop.m		0
+	mov		pr.rot=0x10001<<16
+			// ------^---- (p33) at first (p17)
+	mov		ar.lc=lc	}
+{ .mii;	nop.m		0
+	mov		ar.ec=3
+	nop.i		0		};;
+
+.Lsub_ctop:
+.pred.rel	"mutex",p33,p35
+{ .mfi;	(p16)	ld8		t[0]=[tptr],8		    // t=*(tp++)
+	(p16)	nop.f		0
+	(p33)	sub		n[1]=t[1],n[1]		}   // (p17)
+{ .mfi;	(p16)	ld8		n[0]=[nptr],8		    // n=*(np++)
+	(p16)	nop.f		0
+	(p35)	sub		n[1]=t[1],n[1],1	};; // (p17)
+{ .mib;	(p18)	st8		[rptr]=n[2],8		    // *(rp++)=r
+	(p33)	cmp.gtu		p34,p32=n[1],t[1]	    // (p17)
+	(p18)	nop.b		0			}
+{ .mib;	(p18)	nop.m		0
+	(p35)	cmp.geu		p34,p32=n[1],t[1]	    // (p17)
+	br.ctop.sptk	.Lsub_ctop			};;
+.Lsub_cend:
+
+{ .mmb;	.pred.rel	"mutex",p34,p36
+(p34)	sub	topbit=topbit,r0	// (p19)
+(p36)	sub	topbit=topbit,r0,1
+	brp.loop.imp	.Lcopy_ctop,.Lcopy_cend-16
+					}
+{ .mmb;	sub	rptr=rptr,len		// rewind
+	sub	tptr=tptr,len
+	clrrrb.pr			};;
+{ .mmi;	mov	aptr=rptr
+	mov	bptr=tptr
+	mov	pr.rot=1<<16		};;
+{ .mii;	cmp.eq	p0,p6=topbit,r0
+	mov	ar.lc=lc
+	mov	ar.ec=2			};;
+
+.Lcopy_ctop:
+{ .mmi;	(p16)	ld8	a[0]=[aptr],8
+	(p16)	ld8	t[0]=[bptr],8
+	(p6)	mov	a[1]=t[1]	};;	// (p17)
+{ .mmb;	(p17)	st8	[rptr]=a[1],8
+	(p17)	st8	[tptr]=r0,8
+	br.ctop.sptk	.Lcopy_ctop	};;
+.Lcopy_cend:
+
+{ .mmi;	mov		ret0=1			// signal "handled"
+	rum		1<<5			// clear um.mfh
+	mov		ar.lc=prevlc	}
+{ .mib;	.restore	sp
+	mov		sp=prevsp
+	mov		pr=prevpr,0x1ffff
+	br.ret.sptk.many	b0	};;
+.endp	bn_mul_mont_general#
+
+a1=r16;  a2=r17;  a3=r18;  a4=r19;  a5=r20;  a6=r21;  a7=r22;  a8=r23;
+n1=r24;  n2=r25;  n3=r26;  n4=r27;  n5=r28;  n6=r29;  n7=r30;  n8=r31;
+t0=r15;
+
+ai0=f8;  ai1=f9;  ai2=f10; ai3=f11; ai4=f12; ai5=f13; ai6=f14; ai7=f15;
+ni0=f16; ni1=f17; ni2=f18; ni3=f19; ni4=f20; ni5=f21; ni6=f22; ni7=f23;
+
+.align	64
+.skip	48		// aligns loop body
+.local	bn_mul_mont_8#
+.proc	bn_mul_mont_8#
+bn_mul_mont_8:
+	.prologue
+{ .mmi;	.save		ar.pfs,prevfs
+	alloc		prevfs=ar.pfs,6,2,0,8
+	.vframe		prevsp
+	mov		prevsp=sp
+	.save		ar.lc,prevlc
+	mov		prevlc=ar.lc	}
+{ .mmi;	add		r17=-6*16,sp
+	add		sp=-7*16,sp
+	.save		pr,prevpr
+	mov		prevpr=pr	};;
+
+{ .mmi;	.save.gf	0,0x10
+	stf.spill	[sp]=f16,-16
+	.save.gf	0,0x20
+	stf.spill	[r17]=f17,32
+	add		r16=-5*16,prevsp};;
+{ .mmi;	.save.gf	0,0x40
+	stf.spill	[r16]=f18,32
+	.save.gf	0,0x80
+	stf.spill	[r17]=f19,32
+	$ADDP		aptr=0,in1	};;
+{ .mmi;	.save.gf	0,0x100
+	stf.spill	[r16]=f20,32
+	.save.gf	0,0x200
+	stf.spill	[r17]=f21,32
+	$ADDP		r29=8,in1	};;
+{ .mmi;	.save.gf	0,0x400
+	stf.spill	[r16]=f22
+	.save.gf	0,0x800
+	stf.spill	[r17]=f23
+	$ADDP		rptr=0,in0	};;
+
+	.body
+	.rotf		bj[8],mj[2],tf[2],alo[10],ahi[10],nlo[10],nhi[10]
+	.rotr		t[8]
+
+// load input vectors padding them to 8 elements
+{ .mmi;	ldf8		ai0=[aptr],16		// ap[0]
+	ldf8		ai1=[r29],16		// ap[1]
+	$ADDP		bptr=0,in2	}
+{ .mmi;	$ADDP		r30=8,in2
+	$ADDP		nptr=0,in3
+	$ADDP		r31=8,in3	};;
+{ .mmi;	ldf8		bj[7]=[bptr],16		// bp[0]
+	ldf8		bj[6]=[r30],16		// bp[1]
+	cmp4.le		p4,p5=3,in5	}
+{ .mmi;	ldf8		ni0=[nptr],16		// np[0]
+	ldf8		ni1=[r31],16		// np[1]
+	cmp4.le		p6,p7=4,in5	};;
+
+{ .mfi;	(p4)ldf8	ai2=[aptr],16		// ap[2]
+	(p5)fcvt.fxu	ai2=f0
+	cmp4.le		p8,p9=5,in5	}
+{ .mfi;	(p6)ldf8	ai3=[r29],16		// ap[3]
+	(p7)fcvt.fxu	ai3=f0
+	cmp4.le		p10,p11=6,in5	}
+{ .mfi;	(p4)ldf8	bj[5]=[bptr],16		// bp[2]
+	(p5)fcvt.fxu	bj[5]=f0
+	cmp4.le		p12,p13=7,in5	}
+{ .mfi;	(p6)ldf8	bj[4]=[r30],16		// bp[3]
+	(p7)fcvt.fxu	bj[4]=f0
+	cmp4.le		p14,p15=8,in5	}
+{ .mfi;	(p4)ldf8	ni2=[nptr],16		// np[2]
+	(p5)fcvt.fxu	ni2=f0
+	addp4		r28=-1,in5	}
+{ .mfi;	(p6)ldf8	ni3=[r31],16		// np[3]
+	(p7)fcvt.fxu	ni3=f0
+	$ADDP		in4=0,in4	};;
+
+{ .mfi;	ldf8		n0=[in4]
+	fcvt.fxu	tf[1]=f0
+	nop.i		0		}
+
+{ .mfi;	(p8)ldf8	ai4=[aptr],16		// ap[4]
+	(p9)fcvt.fxu	ai4=f0
+	mov		t[0]=r0		}
+{ .mfi;	(p10)ldf8	ai5=[r29],16		// ap[5]
+	(p11)fcvt.fxu	ai5=f0
+	mov		t[1]=r0		}
+{ .mfi;	(p8)ldf8	bj[3]=[bptr],16		// bp[4]
+	(p9)fcvt.fxu	bj[3]=f0
+	mov		t[2]=r0		}
+{ .mfi;	(p10)ldf8	bj[2]=[r30],16		// bp[5]
+	(p11)fcvt.fxu	bj[2]=f0
+	mov		t[3]=r0		}
+{ .mfi;	(p8)ldf8	ni4=[nptr],16		// np[4]
+	(p9)fcvt.fxu	ni4=f0
+	mov		t[4]=r0		}
+{ .mfi;	(p10)ldf8	ni5=[r31],16		// np[5]
+	(p11)fcvt.fxu	ni5=f0
+	mov		t[5]=r0		};;
+
+{ .mfi;	(p12)ldf8	ai6=[aptr],16		// ap[6]
+	(p13)fcvt.fxu	ai6=f0
+	mov		t[6]=r0		}
+{ .mfi;	(p14)ldf8	ai7=[r29],16		// ap[7]
+	(p15)fcvt.fxu	ai7=f0
+	mov		t[7]=r0		}
+{ .mfi;	(p12)ldf8	bj[1]=[bptr],16		// bp[6]
+	(p13)fcvt.fxu	bj[1]=f0
+	mov		ar.lc=r28	}
+{ .mfi;	(p14)ldf8	bj[0]=[r30],16		// bp[7]
+	(p15)fcvt.fxu	bj[0]=f0
+	mov		ar.ec=1		}
+{ .mfi;	(p12)ldf8	ni6=[nptr],16		// np[6]
+	(p13)fcvt.fxu	ni6=f0
+	mov		pr.rot=1<<16	}
+{ .mfb;	(p14)ldf8	ni7=[r31],16		// np[7]
+	(p15)fcvt.fxu	ni7=f0
+	brp.loop.imp	.Louter_8_ctop,.Louter_8_cend-16
+					};;
+
+// The loop is scheduled for 32*n ticks on Itanium 2. Actual attempt
+// to measure with help of Interval Time Counter indicated that the
+// factor is a tad higher: 33 or 34, if not 35. Exact measurement and
+// addressing the issue is problematic, because I don't have access
+// to platform-specific instruction-level profiler. On Itanium it
+// should run in 56*n ticks, because of higher xma latency...
+.Louter_8_ctop:
+	.pred.rel		"mutex",p40,p42
+	.pred.rel		"mutex",p48,p50
+{ .mfi;	(p16)	nop.m		0			// 0:
+	(p16)	xma.hu		ahi[0]=ai0,bj[7],tf[1]	//	ap[0]*b[i]+t[0]
+	(p40)	add		a3=a3,n3	}	//	(p17) a3+=n3
+{ .mfi;	(p42)	add		a3=a3,n3,1
+	(p16)	xma.lu		alo[0]=ai0,bj[7],tf[1]
+	(p16)	nop.i		0		};;
+{ .mii;	(p17)	getf.sig	a7=alo[8]		// 1:
+	(p48)	add		t[6]=t[6],a3		//	(p17) t[6]+=a3
+	(p50)	add		t[6]=t[6],a3,1	};;
+{ .mfi;	(p17)	getf.sig	a8=ahi[8]		// 2:
+	(p17)	xma.hu		nhi[7]=ni6,mj[1],nhi[6]	//	np[6]*m0
+	(p40)	cmp.ltu		p43,p41=a3,n3	}
+{ .mfi;	(p42)	cmp.leu		p43,p41=a3,n3
+	(p17)	xma.lu		nlo[7]=ni6,mj[1],nhi[6]
+	(p16)	nop.i		0		};;
+{ .mii;	(p17)	getf.sig	n5=nlo[6]		// 3:
+	(p48)	cmp.ltu		p51,p49=t[6],a3
+	(p50)	cmp.leu		p51,p49=t[6],a3	};;
+	.pred.rel		"mutex",p41,p43
+	.pred.rel		"mutex",p49,p51
+{ .mfi;	(p16)	nop.m		0			// 4:
+	(p16)	xma.hu		ahi[1]=ai1,bj[7],ahi[0]	//	ap[1]*b[i]
+	(p41)	add		a4=a4,n4	}	//	(p17) a4+=n4
+{ .mfi;	(p43)	add		a4=a4,n4,1
+	(p16)	xma.lu		alo[1]=ai1,bj[7],ahi[0]
+	(p16)	nop.i		0		};;
+{ .mfi;	(p49)	add		t[5]=t[5],a4		// 5:	(p17) t[5]+=a4
+	(p16)	xmpy.lu		mj[0]=alo[0],n0		//	(ap[0]*b[i]+t[0])*n0
+	(p51)	add		t[5]=t[5],a4,1	};;
+{ .mfi;	(p16)	nop.m		0			// 6:
+	(p17)	xma.hu		nhi[8]=ni7,mj[1],nhi[7]	//	np[7]*m0
+	(p41)	cmp.ltu		p42,p40=a4,n4	}
+{ .mfi;	(p43)	cmp.leu		p42,p40=a4,n4
+	(p17)	xma.lu		nlo[8]=ni7,mj[1],nhi[7]
+	(p16)	nop.i		0		};;
+{ .mii;	(p17)	getf.sig	n6=nlo[7]		// 7:
+	(p49)	cmp.ltu		p50,p48=t[5],a4
+	(p51)	cmp.leu		p50,p48=t[5],a4	};;
+	.pred.rel		"mutex",p40,p42
+	.pred.rel		"mutex",p48,p50
+{ .mfi;	(p16)	nop.m		0			// 8:
+	(p16)	xma.hu		ahi[2]=ai2,bj[7],ahi[1]	//	ap[2]*b[i]
+	(p40)	add		a5=a5,n5	}	//	(p17) a5+=n5
+{ .mfi;	(p42)	add		a5=a5,n5,1
+	(p16)	xma.lu		alo[2]=ai2,bj[7],ahi[1]
+	(p16)	nop.i		0		};;
+{ .mii;	(p16)	getf.sig	a1=alo[1]		// 9:
+	(p48)	add		t[4]=t[4],a5		//	p(17) t[4]+=a5
+	(p50)	add		t[4]=t[4],a5,1	};;
+{ .mfi;	(p16)	nop.m		0			// 10:
+	(p16)	xma.hu		nhi[0]=ni0,mj[0],alo[0]	//	np[0]*m0
+	(p40)	cmp.ltu		p43,p41=a5,n5	}
+{ .mfi;	(p42)	cmp.leu		p43,p41=a5,n5
+	(p16)	xma.lu		nlo[0]=ni0,mj[0],alo[0]
+	(p16)	nop.i		0		};;
+{ .mii;	(p17)	getf.sig	n7=nlo[8]		// 11:
+	(p48)	cmp.ltu		p51,p49=t[4],a5
+	(p50)	cmp.leu		p51,p49=t[4],a5	};;
+	.pred.rel		"mutex",p41,p43
+	.pred.rel		"mutex",p49,p51
+{ .mfi;	(p17)	getf.sig	n8=nhi[8]		// 12:
+	(p16)	xma.hu		ahi[3]=ai3,bj[7],ahi[2]	//	ap[3]*b[i]
+	(p41)	add		a6=a6,n6	}	//	(p17) a6+=n6
+{ .mfi;	(p43)	add		a6=a6,n6,1
+	(p16)	xma.lu		alo[3]=ai3,bj[7],ahi[2]
+	(p16)	nop.i		0		};;
+{ .mii;	(p16)	getf.sig	a2=alo[2]		// 13:
+	(p49)	add		t[3]=t[3],a6		//	(p17) t[3]+=a6
+	(p51)	add		t[3]=t[3],a6,1	};;
+{ .mfi;	(p16)	nop.m		0			// 14:
+	(p16)	xma.hu		nhi[1]=ni1,mj[0],nhi[0]	//	np[1]*m0
+	(p41)	cmp.ltu		p42,p40=a6,n6	}
+{ .mfi;	(p43)	cmp.leu		p42,p40=a6,n6
+	(p16)	xma.lu		nlo[1]=ni1,mj[0],nhi[0]
+	(p16)	nop.i		0		};;
+{ .mii;	(p16)	nop.m		0			// 15:
+	(p49)	cmp.ltu		p50,p48=t[3],a6
+	(p51)	cmp.leu		p50,p48=t[3],a6	};;
+	.pred.rel		"mutex",p40,p42
+	.pred.rel		"mutex",p48,p50
+{ .mfi;	(p16)	nop.m		0			// 16:
+	(p16)	xma.hu		ahi[4]=ai4,bj[7],ahi[3]	//	ap[4]*b[i]
+	(p40)	add		a7=a7,n7	}	//	(p17) a7+=n7
+{ .mfi;	(p42)	add		a7=a7,n7,1
+	(p16)	xma.lu		alo[4]=ai4,bj[7],ahi[3]
+	(p16)	nop.i		0		};;
+{ .mii;	(p16)	getf.sig	a3=alo[3]		// 17:
+	(p48)	add		t[2]=t[2],a7		//	(p17) t[2]+=a7
+	(p50)	add		t[2]=t[2],a7,1	};;
+{ .mfi;	(p16)	nop.m		0			// 18:
+	(p16)	xma.hu		nhi[2]=ni2,mj[0],nhi[1]	//	np[2]*m0
+	(p40)	cmp.ltu		p43,p41=a7,n7	}
+{ .mfi;	(p42)	cmp.leu		p43,p41=a7,n7
+	(p16)	xma.lu		nlo[2]=ni2,mj[0],nhi[1]
+	(p16)	nop.i		0		};;
+{ .mii;	(p16)	getf.sig	n1=nlo[1]		// 19:
+	(p48)	cmp.ltu		p51,p49=t[2],a7
+	(p50)	cmp.leu		p51,p49=t[2],a7	};;
+	.pred.rel		"mutex",p41,p43
+	.pred.rel		"mutex",p49,p51
+{ .mfi;	(p16)	nop.m		0			// 20:
+	(p16)	xma.hu		ahi[5]=ai5,bj[7],ahi[4]	//	ap[5]*b[i]
+	(p41)	add		a8=a8,n8	}	//	(p17) a8+=n8
+{ .mfi;	(p43)	add		a8=a8,n8,1
+	(p16)	xma.lu		alo[5]=ai5,bj[7],ahi[4]
+	(p16)	nop.i		0		};;
+{ .mii;	(p16)	getf.sig	a4=alo[4]		// 21:
+	(p49)	add		t[1]=t[1],a8		//	(p17) t[1]+=a8
+	(p51)	add		t[1]=t[1],a8,1	};;
+{ .mfi;	(p16)	nop.m		0			// 22:
+	(p16)	xma.hu		nhi[3]=ni3,mj[0],nhi[2]	//	np[3]*m0
+	(p41)	cmp.ltu		p42,p40=a8,n8	}
+{ .mfi;	(p43)	cmp.leu		p42,p40=a8,n8
+	(p16)	xma.lu		nlo[3]=ni3,mj[0],nhi[2]
+	(p16)	nop.i		0		};;
+{ .mii;	(p16)	getf.sig	n2=nlo[2]		// 23:
+	(p49)	cmp.ltu		p50,p48=t[1],a8
+	(p51)	cmp.leu		p50,p48=t[1],a8	};;
+{ .mfi;	(p16)	nop.m		0			// 24:
+	(p16)	xma.hu		ahi[6]=ai6,bj[7],ahi[5]	//	ap[6]*b[i]
+	(p16)	add		a1=a1,n1	}	//	(p16) a1+=n1
+{ .mfi;	(p16)	nop.m		0
+	(p16)	xma.lu		alo[6]=ai6,bj[7],ahi[5]
+	(p17)	mov		t[0]=r0		};;
+{ .mii;	(p16)	getf.sig	a5=alo[5]		// 25:
+	(p16)	add		t0=t[7],a1		//	(p16) t[7]+=a1
+	(p42)	add		t[0]=t[0],r0,1	};;
+{ .mfi;	(p16)	setf.sig	tf[0]=t0		// 26:
+	(p16)	xma.hu		nhi[4]=ni4,mj[0],nhi[3]	//	np[4]*m0
+	(p50)	add		t[0]=t[0],r0,1	}
+{ .mfi;	(p16)	cmp.ltu.unc	p42,p40=a1,n1
+	(p16)	xma.lu		nlo[4]=ni4,mj[0],nhi[3]
+	(p16)	nop.i		0		};;
+{ .mii;	(p16)	getf.sig	n3=nlo[3]		// 27:
+	(p16)	cmp.ltu.unc	p50,p48=t0,a1
+	(p16)	nop.i		0		};;
+	.pred.rel		"mutex",p40,p42
+	.pred.rel		"mutex",p48,p50
+{ .mfi;	(p16)	nop.m		0			// 28:
+	(p16)	xma.hu		ahi[7]=ai7,bj[7],ahi[6]	//	ap[7]*b[i]
+	(p40)	add		a2=a2,n2	}	//	(p16) a2+=n2
+{ .mfi;	(p42)	add		a2=a2,n2,1
+	(p16)	xma.lu		alo[7]=ai7,bj[7],ahi[6]
+	(p16)	nop.i		0		};;
+{ .mii;	(p16)	getf.sig	a6=alo[6]		// 29:
+	(p48)	add		t[6]=t[6],a2		//	(p16) t[6]+=a2
+	(p50)	add		t[6]=t[6],a2,1	};;
+{ .mfi;	(p16)	nop.m		0			// 30:
+	(p16)	xma.hu		nhi[5]=ni5,mj[0],nhi[4]	//	np[5]*m0
+	(p40)	cmp.ltu		p41,p39=a2,n2	}
+{ .mfi;	(p42)	cmp.leu		p41,p39=a2,n2
+	(p16)	xma.lu		nlo[5]=ni5,mj[0],nhi[4]
+	(p16)	nop.i		0		};;
+{ .mfi;	(p16)	getf.sig	n4=nlo[4]		// 31:
+	(p16)	nop.f		0
+	(p48)	cmp.ltu		p49,p47=t[6],a2	}
+{ .mfb;	(p50)	cmp.leu		p49,p47=t[6],a2
+	(p16)	nop.f		0
+	br.ctop.sptk.many	.Louter_8_ctop	};;
+.Louter_8_cend:
+
+// above loop has to execute one more time, without (p16), which is
+// replaced with merged move of np[8] to GPR bank
+	.pred.rel		"mutex",p40,p42
+	.pred.rel		"mutex",p48,p50
+{ .mmi;	(p0)	getf.sig	n1=ni0			// 0:
+	(p40)	add		a3=a3,n3		//	(p17) a3+=n3
+	(p42)	add		a3=a3,n3,1	};;
+{ .mii;	(p17)	getf.sig	a7=alo[8]		// 1:
+	(p48)	add		t[6]=t[6],a3		//	(p17) t[6]+=a3
+	(p50)	add		t[6]=t[6],a3,1	};;
+{ .mfi;	(p17)	getf.sig	a8=ahi[8]		// 2:
+	(p17)	xma.hu		nhi[7]=ni6,mj[1],nhi[6]	//	np[6]*m0
+	(p40)	cmp.ltu		p43,p41=a3,n3	}
+{ .mfi;	(p42)	cmp.leu		p43,p41=a3,n3
+	(p17)	xma.lu		nlo[7]=ni6,mj[1],nhi[6]
+	(p0)	nop.i		0		};;
+{ .mii;	(p17)	getf.sig	n5=nlo[6]		// 3:
+	(p48)	cmp.ltu		p51,p49=t[6],a3
+	(p50)	cmp.leu		p51,p49=t[6],a3	};;
+	.pred.rel		"mutex",p41,p43
+	.pred.rel		"mutex",p49,p51
+{ .mmi;	(p0)	getf.sig	n2=ni1			// 4:
+	(p41)	add		a4=a4,n4		//	(p17) a4+=n4
+	(p43)	add		a4=a4,n4,1	};;
+{ .mfi;	(p49)	add		t[5]=t[5],a4		// 5:	(p17) t[5]+=a4
+	(p0)	nop.f		0
+	(p51)	add		t[5]=t[5],a4,1	};;
+{ .mfi;	(p0)	getf.sig	n3=ni2			// 6:
+	(p17)	xma.hu		nhi[8]=ni7,mj[1],nhi[7]	//	np[7]*m0
+	(p41)	cmp.ltu		p42,p40=a4,n4	}
+{ .mfi;	(p43)	cmp.leu		p42,p40=a4,n4
+	(p17)	xma.lu		nlo[8]=ni7,mj[1],nhi[7]
+	(p0)	nop.i		0		};;
+{ .mii;	(p17)	getf.sig	n6=nlo[7]		// 7:
+	(p49)	cmp.ltu		p50,p48=t[5],a4
+	(p51)	cmp.leu		p50,p48=t[5],a4	};;
+	.pred.rel		"mutex",p40,p42
+	.pred.rel		"mutex",p48,p50
+{ .mii;	(p0)	getf.sig	n4=ni3			// 8:
+	(p40)	add		a5=a5,n5		//	(p17) a5+=n5
+	(p42)	add		a5=a5,n5,1	};;
+{ .mii;	(p0)	nop.m		0			// 9:
+	(p48)	add		t[4]=t[4],a5		//	p(17) t[4]+=a5
+	(p50)	add		t[4]=t[4],a5,1	};;
+{ .mii;	(p0)	nop.m		0			// 10:
+	(p40)	cmp.ltu		p43,p41=a5,n5
+	(p42)	cmp.leu		p43,p41=a5,n5	};;
+{ .mii;	(p17)	getf.sig	n7=nlo[8]		// 11:
+	(p48)	cmp.ltu		p51,p49=t[4],a5
+	(p50)	cmp.leu		p51,p49=t[4],a5	};;
+	.pred.rel		"mutex",p41,p43
+	.pred.rel		"mutex",p49,p51
+{ .mii;	(p17)	getf.sig	n8=nhi[8]		// 12:
+	(p41)	add		a6=a6,n6		//	(p17) a6+=n6
+	(p43)	add		a6=a6,n6,1	};;
+{ .mii;	(p0)	getf.sig	n5=ni4			// 13:
+	(p49)	add		t[3]=t[3],a6		//	(p17) t[3]+=a6
+	(p51)	add		t[3]=t[3],a6,1	};;
+{ .mii;	(p0)	nop.m		0			// 14:
+	(p41)	cmp.ltu		p42,p40=a6,n6
+	(p43)	cmp.leu		p42,p40=a6,n6	};;
+{ .mii;	(p0)	getf.sig	n6=ni5			// 15:
+	(p49)	cmp.ltu		p50,p48=t[3],a6
+	(p51)	cmp.leu		p50,p48=t[3],a6	};;
+	.pred.rel		"mutex",p40,p42
+	.pred.rel		"mutex",p48,p50
+{ .mii;	(p0)	nop.m		0			// 16:
+	(p40)	add		a7=a7,n7		//	(p17) a7+=n7
+	(p42)	add		a7=a7,n7,1	};;
+{ .mii;	(p0)	nop.m		0			// 17:
+	(p48)	add		t[2]=t[2],a7		//	(p17) t[2]+=a7
+	(p50)	add		t[2]=t[2],a7,1	};;
+{ .mii;	(p0)	nop.m		0			// 18:
+	(p40)	cmp.ltu		p43,p41=a7,n7
+	(p42)	cmp.leu		p43,p41=a7,n7	};;
+{ .mii;	(p0)	getf.sig	n7=ni6			// 19:
+	(p48)	cmp.ltu		p51,p49=t[2],a7
+	(p50)	cmp.leu		p51,p49=t[2],a7	};;
+	.pred.rel		"mutex",p41,p43
+	.pred.rel		"mutex",p49,p51
+{ .mii;	(p0)	nop.m		0			// 20:
+	(p41)	add		a8=a8,n8		//	(p17) a8+=n8
+	(p43)	add		a8=a8,n8,1	};;
+{ .mmi;	(p0)	nop.m		0			// 21:
+	(p49)	add		t[1]=t[1],a8		//	(p17) t[1]+=a8
+	(p51)	add		t[1]=t[1],a8,1	}
+{ .mmi;	(p17)	mov		t[0]=r0
+	(p41)	cmp.ltu		p42,p40=a8,n8
+	(p43)	cmp.leu		p42,p40=a8,n8	};;
+{ .mmi;	(p0)	getf.sig	n8=ni7			// 22:
+	(p49)	cmp.ltu		p50,p48=t[1],a8
+	(p51)	cmp.leu		p50,p48=t[1],a8	}
+{ .mmi;	(p42)	add		t[0]=t[0],r0,1
+	(p0)	add		r16=-7*16,prevsp
+	(p0)	add		r17=-6*16,prevsp	};;
+
+// subtract np[8] from carrybit|tmp[8]
+// carrybit|tmp[8] layout upon exit from above loop is:
+//	t[0]|t[1]|t[2]|t[3]|t[4]|t[5]|t[6]|t[7]|t0 (least significant)
+{ .mmi;	(p50)add	t[0]=t[0],r0,1
+	add		r18=-5*16,prevsp
+	sub		n1=t0,n1	};;
+{ .mmi;	cmp.gtu		p34,p32=n1,t0;;
+	.pred.rel	"mutex",p32,p34
+	(p32)sub	n2=t[7],n2
+	(p34)sub	n2=t[7],n2,1	};;
+{ .mii;	(p32)cmp.gtu	p35,p33=n2,t[7]
+	(p34)cmp.geu	p35,p33=n2,t[7];;
+	.pred.rel	"mutex",p33,p35
+	(p33)sub	n3=t[6],n3	}
+{ .mmi;	(p35)sub	n3=t[6],n3,1;;
+	(p33)cmp.gtu	p34,p32=n3,t[6]
+	(p35)cmp.geu	p34,p32=n3,t[6]	};;
+	.pred.rel	"mutex",p32,p34
+{ .mii;	(p32)sub	n4=t[5],n4
+	(p34)sub	n4=t[5],n4,1;;
+	(p32)cmp.gtu	p35,p33=n4,t[5]	}
+{ .mmi;	(p34)cmp.geu	p35,p33=n4,t[5];;
+	.pred.rel	"mutex",p33,p35
+	(p33)sub	n5=t[4],n5
+	(p35)sub	n5=t[4],n5,1	};;
+{ .mii;	(p33)cmp.gtu	p34,p32=n5,t[4]
+	(p35)cmp.geu	p34,p32=n5,t[4];;
+	.pred.rel	"mutex",p32,p34
+	(p32)sub	n6=t[3],n6	}
+{ .mmi;	(p34)sub	n6=t[3],n6,1;;
+	(p32)cmp.gtu	p35,p33=n6,t[3]
+	(p34)cmp.geu	p35,p33=n6,t[3]	};;
+	.pred.rel	"mutex",p33,p35
+{ .mii;	(p33)sub	n7=t[2],n7
+	(p35)sub	n7=t[2],n7,1;;
+	(p33)cmp.gtu	p34,p32=n7,t[2]	}
+{ .mmi;	(p35)cmp.geu	p34,p32=n7,t[2];;
+	.pred.rel	"mutex",p32,p34
+	(p32)sub	n8=t[1],n8
+	(p34)sub	n8=t[1],n8,1	};;
+{ .mii;	(p32)cmp.gtu	p35,p33=n8,t[1]
+	(p34)cmp.geu	p35,p33=n8,t[1];;
+	.pred.rel	"mutex",p33,p35
+	(p33)sub	a8=t[0],r0	}
+{ .mmi;	(p35)sub	a8=t[0],r0,1;;
+	(p33)cmp.gtu	p34,p32=a8,t[0]
+	(p35)cmp.geu	p34,p32=a8,t[0]	};;
+
+// save the result, either tmp[num] or tmp[num]-np[num]
+	.pred.rel	"mutex",p32,p34
+{ .mmi;	(p32)st8	[rptr]=n1,8
+	(p34)st8	[rptr]=t0,8
+	add		r19=-4*16,prevsp};;
+{ .mmb;	(p32)st8	[rptr]=n2,8
+	(p34)st8	[rptr]=t[7],8
+	(p5)br.cond.dpnt.few	.Ldone	};;
+{ .mmb;	(p32)st8	[rptr]=n3,8
+	(p34)st8	[rptr]=t[6],8
+	(p7)br.cond.dpnt.few	.Ldone	};;
+{ .mmb;	(p32)st8	[rptr]=n4,8
+	(p34)st8	[rptr]=t[5],8
+	(p9)br.cond.dpnt.few	.Ldone	};;
+{ .mmb;	(p32)st8	[rptr]=n5,8
+	(p34)st8	[rptr]=t[4],8
+	(p11)br.cond.dpnt.few	.Ldone	};;
+{ .mmb;	(p32)st8	[rptr]=n6,8
+	(p34)st8	[rptr]=t[3],8
+	(p13)br.cond.dpnt.few	.Ldone	};;
+{ .mmb;	(p32)st8	[rptr]=n7,8
+	(p34)st8	[rptr]=t[2],8
+	(p15)br.cond.dpnt.few	.Ldone	};;
+{ .mmb;	(p32)st8	[rptr]=n8,8
+	(p34)st8	[rptr]=t[1],8
+	nop.b		0		};;
+.Ldone:						// epilogue
+{ .mmi;	ldf.fill	f16=[r16],64
+	ldf.fill	f17=[r17],64
+	nop.i		0		}
+{ .mmi;	ldf.fill	f18=[r18],64
+	ldf.fill	f19=[r19],64
+	mov		pr=prevpr,0x1ffff	};;
+{ .mmi;	ldf.fill	f20=[r16]
+	ldf.fill	f21=[r17]
+	mov		ar.lc=prevlc	}
+{ .mmi;	ldf.fill	f22=[r18]
+	ldf.fill	f23=[r19]
+	mov		ret0=1		}	// signal "handled"
+{ .mib;	rum		1<<5
+	.restore	sp
+	mov		sp=prevsp
+	br.ret.sptk.many	b0	};;
+.endp	bn_mul_mont_8#
+
+.type	copyright#,\@object
+copyright:
+stringz	"Montgomery multiplication for IA-64, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+open STDOUT,">$output" if $output;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ia64.S b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ia64.S
new file mode 100644
index 000000000..0a26735c6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ia64.S
@@ -0,0 +1,1565 @@
+.explicit
+.text
+.ident	"ia64.S, Version 2.1"
+.ident	"IA-64 ISA artwork by Andy Polyakov <appro@openssl.org>"
+
+// Copyright 2001-2019 The OpenSSL Project Authors. All Rights Reserved.
+//
+// Licensed under the OpenSSL license (the "License").  You may not use
+// this file except in compliance with the License.  You can obtain a copy
+// in the file LICENSE in the source distribution or at
+// https://www.openssl.org/source/license.html
+
+//
+// ====================================================================
+// Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+// project.
+//
+// Rights for redistribution and usage in source and binary forms are
+// granted according to the OpenSSL license. Warranty of any kind is
+// disclaimed.
+// ====================================================================
+//
+// Version 2.x is Itanium2 re-tune. Few words about how Itanium2 is
+// different from Itanium to this module viewpoint. Most notably, is it
+// "wider" than Itanium? Can you experience loop scalability as
+// discussed in commentary sections? Not really:-( Itanium2 has 6
+// integer ALU ports, i.e. it's 2 ports wider, but it's not enough to
+// spin twice as fast, as I need 8 IALU ports. Amount of floating point
+// ports is the same, i.e. 2, while I need 4. In other words, to this
+// module Itanium2 remains effectively as "wide" as Itanium. Yet it's
+// essentially different in respect to this module, and a re-tune was
+// required. Well, because some instruction latencies has changed. Most
+// noticeably those intensively used:
+//
+//			Itanium	Itanium2
+//	ldf8		9	6		L2 hit
+//	ld8		2	1		L1 hit
+//	getf		2	5
+//	xma[->getf]	7[+1]	4[+0]
+//	add[->st8]	1[+1]	1[+0]
+//
+// What does it mean? You might ratiocinate that the original code
+// should run just faster... Because sum of latencies is smaller...
+// Wrong! Note that getf latency increased. This means that if a loop is
+// scheduled for lower latency (as they were), then it will suffer from
+// stall condition and the code will therefore turn anti-scalable, e.g.
+// original bn_mul_words spun at 5*n or 2.5 times slower than expected
+// on Itanium2! What to do? Reschedule loops for Itanium2? But then
+// Itanium would exhibit anti-scalability. So I've chosen to reschedule
+// for worst latency for every instruction aiming for best *all-round*
+// performance.
+
+// Q.	How much faster does it get?
+// A.	Here is the output from 'openssl speed rsa dsa' for vanilla
+//	0.9.6a compiled with gcc version 2.96 20000731 (Red Hat
+//	Linux 7.1 2.96-81):
+//
+//	                  sign    verify    sign/s verify/s
+//	rsa  512 bits   0.0036s   0.0003s    275.3   2999.2
+//	rsa 1024 bits   0.0203s   0.0011s     49.3    894.1
+//	rsa 2048 bits   0.1331s   0.0040s      7.5    250.9
+//	rsa 4096 bits   0.9270s   0.0147s      1.1     68.1
+//	                  sign    verify    sign/s verify/s
+//	dsa  512 bits   0.0035s   0.0043s    288.3    234.8
+//	dsa 1024 bits   0.0111s   0.0135s     90.0     74.2
+//
+//	And here is similar output but for this assembler
+//	implementation:-)
+//
+//	                  sign    verify    sign/s verify/s
+//	rsa  512 bits   0.0021s   0.0001s    549.4   9638.5
+//	rsa 1024 bits   0.0055s   0.0002s    183.8   4481.1
+//	rsa 2048 bits   0.0244s   0.0006s     41.4   1726.3
+//	rsa 4096 bits   0.1295s   0.0018s      7.7    561.5
+//	                  sign    verify    sign/s verify/s
+//	dsa  512 bits   0.0012s   0.0013s    891.9    756.6
+//	dsa 1024 bits   0.0023s   0.0028s    440.4    376.2
+//	
+//	Yes, you may argue that it's not fair comparison as it's
+//	possible to craft the C implementation with BN_UMULT_HIGH
+//	inline assembler macro. But of course! Here is the output
+//	with the macro:
+//
+//	                  sign    verify    sign/s verify/s
+//	rsa  512 bits   0.0020s   0.0002s    495.0   6561.0
+//	rsa 1024 bits   0.0086s   0.0004s    116.2   2235.7
+//	rsa 2048 bits   0.0519s   0.0015s     19.3    667.3
+//	rsa 4096 bits   0.3464s   0.0053s      2.9    187.7
+//	                  sign    verify    sign/s verify/s
+//	dsa  512 bits   0.0016s   0.0020s    613.1    510.5
+//	dsa 1024 bits   0.0045s   0.0054s    221.0    183.9
+//
+//	My code is still way faster, huh:-) And I believe that even
+//	higher performance can be achieved. Note that as keys get
+//	longer, performance gain is larger. Why? According to the
+//	profiler there is another player in the field, namely
+//	BN_from_montgomery consuming larger and larger portion of CPU
+//	time as keysize decreases. I therefore consider putting effort
+//	to assembler implementation of the following routine:
+//
+//	void bn_mul_add_mont (BN_ULONG *rp,BN_ULONG *np,int nl,BN_ULONG n0)
+//	{
+//	int      i,j;
+//	BN_ULONG v;
+//
+//	for (i=0; i<nl; i++)
+//		{
+//		v=bn_mul_add_words(rp,np,nl,(rp[0]*n0)&BN_MASK2);
+//		nrp++;
+//		rp++;
+//		if (((nrp[-1]+=v)&BN_MASK2) < v)
+//			for (j=0; ((++nrp[j])&BN_MASK2) == 0; j++) ;
+//		}
+//	}
+//
+//	It might as well be beneficial to implement even combaX
+//	variants, as it appears as it can literally unleash the
+//	performance (see comment section to bn_mul_comba8 below).
+//
+//	And finally for your reference the output for 0.9.6a compiled
+//	with SGIcc version 0.01.0-12 (keep in mind that for the moment
+//	of this writing it's not possible to convince SGIcc to use
+//	BN_UMULT_HIGH inline assembler macro, yet the code is fast,
+//	i.e. for a compiler generated one:-):
+//
+//	                  sign    verify    sign/s verify/s
+//	rsa  512 bits   0.0022s   0.0002s    452.7   5894.3
+//	rsa 1024 bits   0.0097s   0.0005s    102.7   2002.9
+//	rsa 2048 bits   0.0578s   0.0017s     17.3    600.2
+//	rsa 4096 bits   0.3838s   0.0061s      2.6    164.5
+//	                  sign    verify    sign/s verify/s
+//	dsa  512 bits   0.0018s   0.0022s    547.3    459.6
+//	dsa 1024 bits   0.0051s   0.0062s    196.6    161.3
+//
+//	Oh! Benchmarks were performed on 733MHz Lion-class Itanium
+//	system running Redhat Linux 7.1 (very special thanks to Ray
+//	McCaffity of Williams Communications for providing an account).
+//
+// Q.	What's the heck with 'rum 1<<5' at the end of every function?
+// A.	Well, by clearing the "upper FP registers written" bit of the
+//	User Mask I want to excuse the kernel from preserving upper
+//	(f32-f128) FP register bank over process context switch, thus
+//	minimizing bus bandwidth consumption during the switch (i.e.
+//	after PKI operation completes and the program is off doing
+//	something else like bulk symmetric encryption). Having said
+//	this, I also want to point out that it might be good idea
+//	to compile the whole toolkit (as well as majority of the
+//	programs for that matter) with -mfixed-range=f32-f127 command
+//	line option. No, it doesn't prevent the compiler from writing
+//	to upper bank, but at least discourages to do so. If you don't
+//	like the idea you have the option to compile the module with
+//	-Drum=nop.m in command line.
+//
+
+#if defined(_HPUX_SOURCE) && !defined(_LP64)
+#define	ADDP	addp4
+#else
+#define	ADDP	add
+#endif
+#ifdef __VMS
+.alias abort, "decc$abort"
+#endif
+
+#if 1
+//
+// bn_[add|sub]_words routines.
+//
+// Loops are spinning in 2*(n+5) ticks on Itanium (provided that the
+// data reside in L1 cache, i.e. 2 ticks away). It's possible to
+// compress the epilogue and get down to 2*n+6, but at the cost of
+// scalability (the neat feature of this implementation is that it
+// shall automagically spin in n+5 on "wider" IA-64 implementations:-)
+// I consider that the epilogue is short enough as it is to trade tiny
+// performance loss on Itanium for scalability.
+//
+// BN_ULONG bn_add_words(BN_ULONG *rp, BN_ULONG *ap, BN_ULONG *bp,int num)
+//
+.global	bn_add_words#
+.proc	bn_add_words#
+.align	64
+.skip	32	// makes the loop body aligned at 64-byte boundary
+bn_add_words:
+	.prologue
+	.save	ar.pfs,r2
+{ .mii;	alloc		r2=ar.pfs,4,12,0,16
+	cmp4.le		p6,p0=r35,r0	};;
+{ .mfb;	mov		r8=r0			// return value
+(p6)	br.ret.spnt.many	b0	};;
+
+{ .mib;	sub		r10=r35,r0,1
+	.save	ar.lc,r3
+	mov		r3=ar.lc
+	brp.loop.imp	.L_bn_add_words_ctop,.L_bn_add_words_cend-16
+					}
+{ .mib;	ADDP		r14=0,r32		// rp
+	.save	pr,r9
+	mov		r9=pr		};;
+	.body
+{ .mii;	ADDP		r15=0,r33		// ap
+	mov		ar.lc=r10
+	mov		ar.ec=6		}
+{ .mib;	ADDP		r16=0,r34		// bp
+	mov		pr.rot=1<<16	};;
+
+.L_bn_add_words_ctop:
+{ .mii;	(p16)	ld8		r32=[r16],8	  // b=*(bp++)
+	(p18)	add		r39=r37,r34
+	(p19)	cmp.ltu.unc	p56,p0=r40,r38	}
+{ .mfb;	(p0)	nop.m		0x0
+	(p0)	nop.f		0x0
+	(p0)	nop.b		0x0		}
+{ .mii;	(p16)	ld8		r35=[r15],8	  // a=*(ap++)
+	(p58)	cmp.eq.or	p57,p0=-1,r41	  // (p20)
+	(p58)	add		r41=1,r41	} // (p20)
+{ .mfb;	(p21)	st8		[r14]=r42,8	  // *(rp++)=r
+	(p0)	nop.f		0x0
+	br.ctop.sptk	.L_bn_add_words_ctop	};;
+.L_bn_add_words_cend:
+
+{ .mii;
+(p59)	add		r8=1,r8		// return value
+	mov		pr=r9,0x1ffff
+	mov		ar.lc=r3	}
+{ .mbb;	nop.b		0x0
+	br.ret.sptk.many	b0	};;
+.endp	bn_add_words#
+
+//
+// BN_ULONG bn_sub_words(BN_ULONG *rp, BN_ULONG *ap, BN_ULONG *bp,int num)
+//
+.global	bn_sub_words#
+.proc	bn_sub_words#
+.align	64
+.skip	32	// makes the loop body aligned at 64-byte boundary
+bn_sub_words:
+	.prologue
+	.save	ar.pfs,r2
+{ .mii;	alloc		r2=ar.pfs,4,12,0,16
+	cmp4.le		p6,p0=r35,r0	};;
+{ .mfb;	mov		r8=r0			// return value
+(p6)	br.ret.spnt.many	b0	};;
+
+{ .mib;	sub		r10=r35,r0,1
+	.save	ar.lc,r3
+	mov		r3=ar.lc
+	brp.loop.imp	.L_bn_sub_words_ctop,.L_bn_sub_words_cend-16
+					}
+{ .mib;	ADDP		r14=0,r32		// rp
+	.save	pr,r9
+	mov		r9=pr		};;
+	.body
+{ .mii;	ADDP		r15=0,r33		// ap
+	mov		ar.lc=r10
+	mov		ar.ec=6		}
+{ .mib;	ADDP		r16=0,r34		// bp
+	mov		pr.rot=1<<16	};;
+
+.L_bn_sub_words_ctop:
+{ .mii;	(p16)	ld8		r32=[r16],8	  // b=*(bp++)
+	(p18)	sub		r39=r37,r34
+	(p19)	cmp.gtu.unc	p56,p0=r40,r38	}
+{ .mfb;	(p0)	nop.m		0x0
+	(p0)	nop.f		0x0
+	(p0)	nop.b		0x0		}
+{ .mii;	(p16)	ld8		r35=[r15],8	  // a=*(ap++)
+	(p58)	cmp.eq.or	p57,p0=0,r41	  // (p20)
+	(p58)	add		r41=-1,r41	} // (p20)
+{ .mbb;	(p21)	st8		[r14]=r42,8	  // *(rp++)=r
+	(p0)	nop.b		0x0
+	br.ctop.sptk	.L_bn_sub_words_ctop	};;
+.L_bn_sub_words_cend:
+
+{ .mii;
+(p59)	add		r8=1,r8		// return value
+	mov		pr=r9,0x1ffff
+	mov		ar.lc=r3	}
+{ .mbb;	nop.b		0x0
+	br.ret.sptk.many	b0	};;
+.endp	bn_sub_words#
+#endif
+
+#if 0
+#define XMA_TEMPTATION
+#endif
+
+#if 1
+//
+// BN_ULONG bn_mul_words(BN_ULONG *rp, BN_ULONG *ap, int num, BN_ULONG w)
+//
+.global	bn_mul_words#
+.proc	bn_mul_words#
+.align	64
+.skip	32	// makes the loop body aligned at 64-byte boundary
+bn_mul_words:
+	.prologue
+	.save	ar.pfs,r2
+#ifdef XMA_TEMPTATION
+{ .mfi;	alloc		r2=ar.pfs,4,0,0,0	};;
+#else
+{ .mfi;	alloc		r2=ar.pfs,4,12,0,16	};;
+#endif
+{ .mib;	mov		r8=r0			// return value
+	cmp4.le		p6,p0=r34,r0
+(p6)	br.ret.spnt.many	b0		};;
+
+{ .mii;	sub	r10=r34,r0,1
+	.save	ar.lc,r3
+	mov	r3=ar.lc
+	.save	pr,r9
+	mov	r9=pr			};;
+
+	.body
+{ .mib;	setf.sig	f8=r35	// w
+	mov		pr.rot=0x800001<<16
+			// ------^----- serves as (p50) at first (p27)
+	brp.loop.imp	.L_bn_mul_words_ctop,.L_bn_mul_words_cend-16
+					}
+
+#ifndef XMA_TEMPTATION
+
+{ .mmi;	ADDP		r14=0,r32	// rp
+	ADDP		r15=0,r33	// ap
+	mov		ar.lc=r10	}
+{ .mmi;	mov		r40=0		// serves as r35 at first (p27)
+	mov		ar.ec=13	};;
+
+// This loop spins in 2*(n+12) ticks. It's scheduled for data in Itanium
+// L2 cache (i.e. 9 ticks away) as floating point load/store instructions
+// bypass L1 cache and L2 latency is actually best-case scenario for
+// ldf8. The loop is not scalable and shall run in 2*(n+12) even on
+// "wider" IA-64 implementations. It's a trade-off here. n+24 loop
+// would give us ~5% in *overall* performance improvement on "wider"
+// IA-64, but would hurt Itanium for about same because of longer
+// epilogue. As it's a matter of few percents in either case I've
+// chosen to trade the scalability for development time (you can see
+// this very instruction sequence in bn_mul_add_words loop which in
+// turn is scalable).
+.L_bn_mul_words_ctop:
+{ .mfi;	(p25)	getf.sig	r36=f52			// low
+	(p21)	xmpy.lu		f48=f37,f8
+	(p28)	cmp.ltu		p54,p50=r41,r39	}
+{ .mfi;	(p16)	ldf8		f32=[r15],8
+	(p21)	xmpy.hu		f40=f37,f8
+	(p0)	nop.i		0x0		};;
+{ .mii;	(p25)	getf.sig	r32=f44			// high
+	.pred.rel	"mutex",p50,p54
+	(p50)	add		r40=r38,r35		// (p27)
+	(p54)	add		r40=r38,r35,1	}	// (p27)
+{ .mfb;	(p28)	st8		[r14]=r41,8
+	(p0)	nop.f		0x0
+	br.ctop.sptk	.L_bn_mul_words_ctop	};;
+.L_bn_mul_words_cend:
+
+{ .mii;	nop.m		0x0
+.pred.rel	"mutex",p51,p55
+(p51)	add		r8=r36,r0
+(p55)	add		r8=r36,r0,1	}
+{ .mfb;	nop.m	0x0
+	nop.f	0x0
+	nop.b	0x0			}
+
+#else	// XMA_TEMPTATION
+
+	setf.sig	f37=r0	// serves as carry at (p18) tick
+	mov		ar.lc=r10
+	mov		ar.ec=5;;
+
+// Most of you examining this code very likely wonder why in the name
+// of Intel the following loop is commented out? Indeed, it looks so
+// neat that you find it hard to believe that it's something wrong
+// with it, right? The catch is that every iteration depends on the
+// result from previous one and the latter isn't available instantly.
+// The loop therefore spins at the latency of xma minus 1, or in other
+// words at 6*(n+4) ticks:-( Compare to the "production" loop above
+// that runs in 2*(n+11) where the low latency problem is worked around
+// by moving the dependency to one-tick latent integer ALU. Note that
+// "distance" between ldf8 and xma is not latency of ldf8, but the
+// *difference* between xma and ldf8 latencies.
+.L_bn_mul_words_ctop:
+{ .mfi;	(p16)	ldf8		f32=[r33],8
+	(p18)	xma.hu		f38=f34,f8,f39	}
+{ .mfb;	(p20)	stf8		[r32]=f37,8
+	(p18)	xma.lu		f35=f34,f8,f39
+	br.ctop.sptk	.L_bn_mul_words_ctop	};;
+.L_bn_mul_words_cend:
+
+	getf.sig	r8=f41		// the return value
+
+#endif	// XMA_TEMPTATION
+
+{ .mii;	nop.m		0x0
+	mov		pr=r9,0x1ffff
+	mov		ar.lc=r3	}
+{ .mfb;	rum		1<<5		// clear um.mfh
+	nop.f		0x0
+	br.ret.sptk.many	b0	};;
+.endp	bn_mul_words#
+#endif
+
+#if 1
+//
+// BN_ULONG bn_mul_add_words(BN_ULONG *rp, BN_ULONG *ap, int num, BN_ULONG w)
+//
+.global	bn_mul_add_words#
+.proc	bn_mul_add_words#
+.align	64
+.skip	48	// makes the loop body aligned at 64-byte boundary
+bn_mul_add_words:
+	.prologue
+	.save	ar.pfs,r2
+{ .mmi;	alloc		r2=ar.pfs,4,4,0,8
+	cmp4.le		p6,p0=r34,r0
+	.save	ar.lc,r3
+	mov		r3=ar.lc	};;
+{ .mib;	mov		r8=r0		// return value
+	sub		r10=r34,r0,1
+(p6)	br.ret.spnt.many	b0	};;
+
+{ .mib;	setf.sig	f8=r35		// w
+	.save	pr,r9
+	mov		r9=pr
+	brp.loop.imp	.L_bn_mul_add_words_ctop,.L_bn_mul_add_words_cend-16
+					}
+	.body
+{ .mmi;	ADDP		r14=0,r32	// rp
+	ADDP		r15=0,r33	// ap
+	mov		ar.lc=r10	}
+{ .mii;	ADDP		r16=0,r32	// rp copy
+	mov		pr.rot=0x2001<<16
+			// ------^----- serves as (p40) at first (p27)
+	mov		ar.ec=11	};;
+
+// This loop spins in 3*(n+10) ticks on Itanium and in 2*(n+10) on
+// Itanium 2. Yes, unlike previous versions it scales:-) Previous
+// version was performing *all* additions in IALU and was starving
+// for those even on Itanium 2. In this version one addition is
+// moved to FPU and is folded with multiplication. This is at cost
+// of propagating the result from previous call to this subroutine
+// to L2 cache... In other words negligible even for shorter keys.
+// *Overall* performance improvement [over previous version] varies
+// from 11 to 22 percent depending on key length.
+.L_bn_mul_add_words_ctop:
+.pred.rel	"mutex",p40,p42
+{ .mfi;	(p23)	getf.sig	r36=f45			// low
+	(p20)	xma.lu		f42=f36,f8,f50		// low
+	(p40)	add		r39=r39,r35	}	// (p27)
+{ .mfi;	(p16)	ldf8		f32=[r15],8		// *(ap++)
+	(p20)	xma.hu		f36=f36,f8,f50		// high
+	(p42)	add		r39=r39,r35,1	};;	// (p27)
+{ .mmi;	(p24)	getf.sig	r32=f40			// high
+	(p16)	ldf8		f46=[r16],8		// *(rp1++)
+	(p40)	cmp.ltu		p41,p39=r39,r35	}	// (p27)
+{ .mib;	(p26)	st8		[r14]=r39,8		// *(rp2++)
+	(p42)	cmp.leu		p41,p39=r39,r35		// (p27)
+	br.ctop.sptk	.L_bn_mul_add_words_ctop};;
+.L_bn_mul_add_words_cend:
+
+{ .mmi;	.pred.rel	"mutex",p40,p42
+(p40)	add		r8=r35,r0
+(p42)	add		r8=r35,r0,1
+	mov		pr=r9,0x1ffff	}
+{ .mib;	rum		1<<5		// clear um.mfh
+	mov		ar.lc=r3
+	br.ret.sptk.many	b0	};;
+.endp	bn_mul_add_words#
+#endif
+
+#if 1
+//
+// void bn_sqr_words(BN_ULONG *rp, BN_ULONG *ap, int num)
+//
+.global	bn_sqr_words#
+.proc	bn_sqr_words#
+.align	64
+.skip	32	// makes the loop body aligned at 64-byte boundary
+bn_sqr_words:
+	.prologue
+	.save	ar.pfs,r2
+{ .mii;	alloc		r2=ar.pfs,3,0,0,0
+	sxt4		r34=r34		};;
+{ .mii;	cmp.le		p6,p0=r34,r0
+	mov		r8=r0		}	// return value
+{ .mfb;	ADDP		r32=0,r32
+	nop.f		0x0
+(p6)	br.ret.spnt.many	b0	};;
+
+{ .mii;	sub	r10=r34,r0,1
+	.save	ar.lc,r3
+	mov	r3=ar.lc
+	.save	pr,r9
+	mov	r9=pr			};;
+
+	.body
+{ .mib;	ADDP		r33=0,r33
+	mov		pr.rot=1<<16
+	brp.loop.imp	.L_bn_sqr_words_ctop,.L_bn_sqr_words_cend-16
+					}
+{ .mii;	add		r34=8,r32
+	mov		ar.lc=r10
+	mov		ar.ec=18	};;
+
+// 2*(n+17) on Itanium, (n+17) on "wider" IA-64 implementations. It's
+// possible to compress the epilogue (I'm getting tired to write this
+// comment over and over) and get down to 2*n+16 at the cost of
+// scalability. The decision will very likely be reconsidered after the
+// benchmark program is profiled. I.e. if performance gain on Itanium
+// will appear larger than loss on "wider" IA-64, then the loop should
+// be explicitly split and the epilogue compressed.
+.L_bn_sqr_words_ctop:
+{ .mfi;	(p16)	ldf8		f32=[r33],8
+	(p25)	xmpy.lu		f42=f41,f41
+	(p0)	nop.i		0x0		}
+{ .mib;	(p33)	stf8		[r32]=f50,16
+	(p0)	nop.i		0x0
+	(p0)	nop.b		0x0		}
+{ .mfi;	(p0)	nop.m		0x0
+	(p25)	xmpy.hu		f52=f41,f41
+	(p0)	nop.i		0x0		}
+{ .mib;	(p33)	stf8		[r34]=f60,16
+	(p0)	nop.i		0x0
+	br.ctop.sptk	.L_bn_sqr_words_ctop	};;
+.L_bn_sqr_words_cend:
+
+{ .mii;	nop.m		0x0
+	mov		pr=r9,0x1ffff
+	mov		ar.lc=r3	}
+{ .mfb;	rum		1<<5		// clear um.mfh
+	nop.f		0x0
+	br.ret.sptk.many	b0	};;
+.endp	bn_sqr_words#
+#endif
+
+#if 1
+// Apparently we win nothing by implementing special bn_sqr_comba8.
+// Yes, it is possible to reduce the number of multiplications by
+// almost factor of two, but then the amount of additions would
+// increase by factor of two (as we would have to perform those
+// otherwise performed by xma ourselves). Normally we would trade
+// anyway as multiplications are way more expensive, but not this
+// time... Multiplication kernel is fully pipelined and as we drain
+// one 128-bit multiplication result per clock cycle multiplications
+// are effectively as inexpensive as additions. Special implementation
+// might become of interest for "wider" IA-64 implementation as you'll
+// be able to get through the multiplication phase faster (there won't
+// be any stall issues as discussed in the commentary section below and
+// you therefore will be able to employ all 4 FP units)... But these
+// Itanium days it's simply too hard to justify the effort so I just
+// drop down to bn_mul_comba8 code:-)
+//
+// void bn_sqr_comba8(BN_ULONG *r, BN_ULONG *a)
+//
+.global	bn_sqr_comba8#
+.proc	bn_sqr_comba8#
+.align	64
+bn_sqr_comba8:
+	.prologue
+	.save	ar.pfs,r2
+#if defined(_HPUX_SOURCE) && !defined(_LP64)
+{ .mii;	alloc	r2=ar.pfs,2,1,0,0
+	addp4	r33=0,r33
+	addp4	r32=0,r32		};;
+{ .mii;
+#else
+{ .mii;	alloc	r2=ar.pfs,2,1,0,0
+#endif
+	mov	r34=r33
+	add	r14=8,r33		};;
+	.body
+{ .mii;	add	r17=8,r34
+	add	r15=16,r33
+	add	r18=16,r34		}
+{ .mfb;	add	r16=24,r33
+	br	.L_cheat_entry_point8	};;
+.endp	bn_sqr_comba8#
+#endif
+
+#if 1
+// I've estimated this routine to run in ~120 ticks, but in reality
+// (i.e. according to ar.itc) it takes ~160 ticks. Are those extra
+// cycles consumed for instructions fetch? Or did I misinterpret some
+// clause in Itanium µ-architecture manual? Comments are welcomed and
+// highly appreciated.
+//
+// On Itanium 2 it takes ~190 ticks. This is because of stalls on
+// result from getf.sig. I do nothing about it at this point for
+// reasons depicted below.
+//
+// However! It should be noted that even 160 ticks is darn good result
+// as it's over 10 (yes, ten, spelled as t-e-n) times faster than the
+// C version (compiled with gcc with inline assembler). I really
+// kicked compiler's butt here, didn't I? Yeah! This brings us to the
+// following statement. It's damn shame that this routine isn't called
+// very often nowadays! According to the profiler most CPU time is
+// consumed by bn_mul_add_words called from BN_from_montgomery. In
+// order to estimate what we're missing, I've compared the performance
+// of this routine against "traditional" implementation, i.e. against
+// following routine:
+//
+// void bn_mul_comba8(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b)
+// {	r[ 8]=bn_mul_words(    &(r[0]),a,8,b[0]);
+//	r[ 9]=bn_mul_add_words(&(r[1]),a,8,b[1]);
+//	r[10]=bn_mul_add_words(&(r[2]),a,8,b[2]);
+//	r[11]=bn_mul_add_words(&(r[3]),a,8,b[3]);
+//	r[12]=bn_mul_add_words(&(r[4]),a,8,b[4]);
+//	r[13]=bn_mul_add_words(&(r[5]),a,8,b[5]);
+//	r[14]=bn_mul_add_words(&(r[6]),a,8,b[6]);
+//	r[15]=bn_mul_add_words(&(r[7]),a,8,b[7]);
+// }
+//
+// The one below is over 8 times faster than the one above:-( Even
+// more reasons to "combafy" bn_mul_add_mont...
+//
+// And yes, this routine really made me wish there were an optimizing
+// assembler! It also feels like it deserves a dedication.
+//
+//	To my wife for being there and to my kids...
+//
+// void bn_mul_comba8(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b)
+//
+#define	carry1	r14
+#define	carry2	r15
+#define	carry3	r34
+.global	bn_mul_comba8#
+.proc	bn_mul_comba8#
+.align	64
+bn_mul_comba8:
+	.prologue
+	.save	ar.pfs,r2
+#if defined(_HPUX_SOURCE) && !defined(_LP64)
+{ .mii;	alloc	r2=ar.pfs,3,0,0,0
+	addp4	r33=0,r33
+	addp4	r34=0,r34		};;
+{ .mii;	addp4	r32=0,r32
+#else
+{ .mii;	alloc   r2=ar.pfs,3,0,0,0
+#endif
+	add	r14=8,r33
+	add	r17=8,r34		}
+	.body
+{ .mii;	add	r15=16,r33
+	add	r18=16,r34
+	add	r16=24,r33		}
+.L_cheat_entry_point8:
+{ .mmi;	add	r19=24,r34
+
+	ldf8	f32=[r33],32		};;
+
+{ .mmi;	ldf8	f120=[r34],32
+	ldf8	f121=[r17],32		}
+{ .mmi;	ldf8	f122=[r18],32
+	ldf8	f123=[r19],32		};;
+{ .mmi;	ldf8	f124=[r34]
+	ldf8	f125=[r17]		}
+{ .mmi;	ldf8	f126=[r18]
+	ldf8	f127=[r19]		}
+
+{ .mmi;	ldf8	f33=[r14],32
+	ldf8	f34=[r15],32		}
+{ .mmi;	ldf8	f35=[r16],32;;
+	ldf8	f36=[r33]		}
+{ .mmi;	ldf8	f37=[r14]
+	ldf8	f38=[r15]		}
+{ .mfi;	ldf8	f39=[r16]
+// -------\ Entering multiplier's heaven /-------
+// ------------\                    /------------
+// -----------------\          /-----------------
+// ----------------------\/----------------------
+		xma.hu	f41=f32,f120,f0		}
+{ .mfi;		xma.lu	f40=f32,f120,f0		};; // (*)
+{ .mfi;		xma.hu	f51=f32,f121,f0		}
+{ .mfi;		xma.lu	f50=f32,f121,f0		};;
+{ .mfi;		xma.hu	f61=f32,f122,f0		}
+{ .mfi;		xma.lu	f60=f32,f122,f0		};;
+{ .mfi;		xma.hu	f71=f32,f123,f0		}
+{ .mfi;		xma.lu	f70=f32,f123,f0		};;
+{ .mfi;		xma.hu	f81=f32,f124,f0		}
+{ .mfi;		xma.lu	f80=f32,f124,f0		};;
+{ .mfi;		xma.hu	f91=f32,f125,f0		}
+{ .mfi;		xma.lu	f90=f32,f125,f0		};;
+{ .mfi;		xma.hu	f101=f32,f126,f0	}
+{ .mfi;		xma.lu	f100=f32,f126,f0	};;
+{ .mfi;		xma.hu	f111=f32,f127,f0	}
+{ .mfi;		xma.lu	f110=f32,f127,f0	};;//
+// (*)	You can argue that splitting at every second bundle would
+//	prevent "wider" IA-64 implementations from achieving the peak
+//	performance. Well, not really... The catch is that if you
+//	intend to keep 4 FP units busy by splitting at every fourth
+//	bundle and thus perform these 16 multiplications in 4 ticks,
+//	the first bundle *below* would stall because the result from
+//	the first xma bundle *above* won't be available for another 3
+//	ticks (if not more, being an optimist, I assume that "wider"
+//	implementation will have same latency:-). This stall will hold
+//	you back and the performance would be as if every second bundle
+//	were split *anyway*...
+{ .mfi;	getf.sig	r16=f40
+		xma.hu	f42=f33,f120,f41
+	add		r33=8,r32		}
+{ .mfi;		xma.lu	f41=f33,f120,f41	};;
+{ .mfi;	getf.sig	r24=f50
+		xma.hu	f52=f33,f121,f51	}
+{ .mfi;		xma.lu	f51=f33,f121,f51	};;
+{ .mfi;	st8		[r32]=r16,16
+		xma.hu	f62=f33,f122,f61	}
+{ .mfi;		xma.lu	f61=f33,f122,f61	};;
+{ .mfi;		xma.hu	f72=f33,f123,f71	}
+{ .mfi;		xma.lu	f71=f33,f123,f71	};;
+{ .mfi;		xma.hu	f82=f33,f124,f81	}
+{ .mfi;		xma.lu	f81=f33,f124,f81	};;
+{ .mfi;		xma.hu	f92=f33,f125,f91	}
+{ .mfi;		xma.lu	f91=f33,f125,f91	};;
+{ .mfi;		xma.hu	f102=f33,f126,f101	}
+{ .mfi;		xma.lu	f101=f33,f126,f101	};;
+{ .mfi;		xma.hu	f112=f33,f127,f111	}
+{ .mfi;		xma.lu	f111=f33,f127,f111	};;//
+//-------------------------------------------------//
+{ .mfi;	getf.sig	r25=f41
+		xma.hu	f43=f34,f120,f42	}
+{ .mfi;		xma.lu	f42=f34,f120,f42	};;
+{ .mfi;	getf.sig	r16=f60
+		xma.hu	f53=f34,f121,f52	}
+{ .mfi;		xma.lu	f52=f34,f121,f52	};;
+{ .mfi;	getf.sig	r17=f51
+		xma.hu	f63=f34,f122,f62
+	add		r25=r25,r24		}
+{ .mfi;		xma.lu	f62=f34,f122,f62
+	mov		carry1=0		};;
+{ .mfi;	cmp.ltu		p6,p0=r25,r24
+		xma.hu	f73=f34,f123,f72	}
+{ .mfi;		xma.lu	f72=f34,f123,f72	};;
+{ .mfi;	st8		[r33]=r25,16
+		xma.hu	f83=f34,f124,f82
+(p6)	add		carry1=1,carry1		}
+{ .mfi;		xma.lu	f82=f34,f124,f82	};;
+{ .mfi;		xma.hu	f93=f34,f125,f92	}
+{ .mfi;		xma.lu	f92=f34,f125,f92	};;
+{ .mfi;		xma.hu	f103=f34,f126,f102	}
+{ .mfi;		xma.lu	f102=f34,f126,f102	};;
+{ .mfi;		xma.hu	f113=f34,f127,f112	}
+{ .mfi;		xma.lu	f112=f34,f127,f112	};;//
+//-------------------------------------------------//
+{ .mfi;	getf.sig	r18=f42
+		xma.hu	f44=f35,f120,f43
+	add		r17=r17,r16		}
+{ .mfi;		xma.lu	f43=f35,f120,f43	};;
+{ .mfi;	getf.sig	r24=f70
+		xma.hu	f54=f35,f121,f53	}
+{ .mfi;	mov		carry2=0
+		xma.lu	f53=f35,f121,f53	};;
+{ .mfi;	getf.sig	r25=f61
+		xma.hu	f64=f35,f122,f63
+	cmp.ltu		p7,p0=r17,r16		}
+{ .mfi;	add		r18=r18,r17
+		xma.lu	f63=f35,f122,f63	};;
+{ .mfi;	getf.sig	r26=f52
+		xma.hu	f74=f35,f123,f73
+(p7)	add		carry2=1,carry2		}
+{ .mfi;	cmp.ltu		p7,p0=r18,r17
+		xma.lu	f73=f35,f123,f73
+	add		r18=r18,carry1		};;
+{ .mfi;
+		xma.hu	f84=f35,f124,f83
+(p7)	add		carry2=1,carry2		}
+{ .mfi;	cmp.ltu		p7,p0=r18,carry1
+		xma.lu	f83=f35,f124,f83	};;
+{ .mfi;	st8		[r32]=r18,16
+		xma.hu	f94=f35,f125,f93
+(p7)	add		carry2=1,carry2		}
+{ .mfi;		xma.lu	f93=f35,f125,f93	};;
+{ .mfi;		xma.hu	f104=f35,f126,f103	}
+{ .mfi;		xma.lu	f103=f35,f126,f103	};;
+{ .mfi;		xma.hu	f114=f35,f127,f113	}
+{ .mfi;	mov		carry1=0
+		xma.lu	f113=f35,f127,f113
+	add		r25=r25,r24		};;//
+//-------------------------------------------------//
+{ .mfi;	getf.sig	r27=f43
+		xma.hu	f45=f36,f120,f44
+	cmp.ltu		p6,p0=r25,r24		}
+{ .mfi;		xma.lu	f44=f36,f120,f44	
+	add		r26=r26,r25		};;
+{ .mfi;	getf.sig	r16=f80
+		xma.hu	f55=f36,f121,f54
+(p6)	add		carry1=1,carry1		}
+{ .mfi;		xma.lu	f54=f36,f121,f54	};;
+{ .mfi;	getf.sig	r17=f71
+		xma.hu	f65=f36,f122,f64
+	cmp.ltu		p6,p0=r26,r25		}
+{ .mfi;		xma.lu	f64=f36,f122,f64
+	add		r27=r27,r26		};;
+{ .mfi;	getf.sig	r18=f62
+		xma.hu	f75=f36,f123,f74
+(p6)	add		carry1=1,carry1		}
+{ .mfi;	cmp.ltu		p6,p0=r27,r26
+		xma.lu	f74=f36,f123,f74
+	add		r27=r27,carry2		};;
+{ .mfi;	getf.sig	r19=f53
+		xma.hu	f85=f36,f124,f84
+(p6)	add		carry1=1,carry1		}
+{ .mfi;		xma.lu	f84=f36,f124,f84
+	cmp.ltu		p6,p0=r27,carry2	};;
+{ .mfi;	st8		[r33]=r27,16
+		xma.hu	f95=f36,f125,f94
+(p6)	add		carry1=1,carry1		}
+{ .mfi;		xma.lu	f94=f36,f125,f94	};;
+{ .mfi;		xma.hu	f105=f36,f126,f104	}
+{ .mfi;	mov		carry2=0
+		xma.lu	f104=f36,f126,f104
+	add		r17=r17,r16		};;
+{ .mfi;		xma.hu	f115=f36,f127,f114
+	cmp.ltu		p7,p0=r17,r16		}
+{ .mfi;		xma.lu	f114=f36,f127,f114
+	add		r18=r18,r17		};;//
+//-------------------------------------------------//
+{ .mfi;	getf.sig	r20=f44
+		xma.hu	f46=f37,f120,f45
+(p7)	add		carry2=1,carry2		}
+{ .mfi;	cmp.ltu		p7,p0=r18,r17
+		xma.lu	f45=f37,f120,f45
+	add		r19=r19,r18		};;
+{ .mfi;	getf.sig	r24=f90
+		xma.hu	f56=f37,f121,f55	}
+{ .mfi;		xma.lu	f55=f37,f121,f55	};;
+{ .mfi;	getf.sig	r25=f81
+		xma.hu	f66=f37,f122,f65
+(p7)	add		carry2=1,carry2		}
+{ .mfi;	cmp.ltu		p7,p0=r19,r18
+		xma.lu	f65=f37,f122,f65
+	add		r20=r20,r19		};;
+{ .mfi;	getf.sig	r26=f72
+		xma.hu	f76=f37,f123,f75
+(p7)	add		carry2=1,carry2		}
+{ .mfi;	cmp.ltu		p7,p0=r20,r19
+		xma.lu	f75=f37,f123,f75
+	add		r20=r20,carry1		};;
+{ .mfi;	getf.sig	r27=f63
+		xma.hu	f86=f37,f124,f85
+(p7)	add		carry2=1,carry2		}
+{ .mfi;		xma.lu	f85=f37,f124,f85
+	cmp.ltu		p7,p0=r20,carry1	};;
+{ .mfi;	getf.sig	r28=f54
+		xma.hu	f96=f37,f125,f95
+(p7)	add		carry2=1,carry2		}
+{ .mfi;	st8		[r32]=r20,16
+		xma.lu	f95=f37,f125,f95	};;
+{ .mfi;		xma.hu	f106=f37,f126,f105	}
+{ .mfi;	mov		carry1=0
+		xma.lu	f105=f37,f126,f105
+	add		r25=r25,r24		};;
+{ .mfi;		xma.hu	f116=f37,f127,f115
+	cmp.ltu		p6,p0=r25,r24		}
+{ .mfi;		xma.lu	f115=f37,f127,f115
+	add		r26=r26,r25		};;//
+//-------------------------------------------------//
+{ .mfi;	getf.sig	r29=f45
+		xma.hu	f47=f38,f120,f46
+(p6)	add		carry1=1,carry1		}
+{ .mfi;	cmp.ltu		p6,p0=r26,r25
+		xma.lu	f46=f38,f120,f46
+	add		r27=r27,r26		};;
+{ .mfi;	getf.sig	r16=f100
+		xma.hu	f57=f38,f121,f56
+(p6)	add		carry1=1,carry1		}
+{ .mfi;	cmp.ltu		p6,p0=r27,r26
+		xma.lu	f56=f38,f121,f56
+	add		r28=r28,r27		};;
+{ .mfi;	getf.sig	r17=f91
+		xma.hu	f67=f38,f122,f66
+(p6)	add		carry1=1,carry1		}
+{ .mfi;	cmp.ltu		p6,p0=r28,r27
+		xma.lu	f66=f38,f122,f66
+	add		r29=r29,r28		};;
+{ .mfi;	getf.sig	r18=f82
+		xma.hu	f77=f38,f123,f76
+(p6)	add		carry1=1,carry1		}
+{ .mfi;	cmp.ltu		p6,p0=r29,r28
+		xma.lu	f76=f38,f123,f76
+	add		r29=r29,carry2		};;
+{ .mfi;	getf.sig	r19=f73
+		xma.hu	f87=f38,f124,f86
+(p6)	add		carry1=1,carry1		}
+{ .mfi;		xma.lu	f86=f38,f124,f86
+	cmp.ltu		p6,p0=r29,carry2	};;
+{ .mfi;	getf.sig	r20=f64
+		xma.hu	f97=f38,f125,f96
+(p6)	add		carry1=1,carry1		}
+{ .mfi;	st8		[r33]=r29,16
+		xma.lu	f96=f38,f125,f96	};;
+{ .mfi;	getf.sig	r21=f55
+		xma.hu	f107=f38,f126,f106	}
+{ .mfi;	mov		carry2=0
+		xma.lu	f106=f38,f126,f106
+	add		r17=r17,r16		};;
+{ .mfi;		xma.hu	f117=f38,f127,f116
+	cmp.ltu		p7,p0=r17,r16		}
+{ .mfi;		xma.lu	f116=f38,f127,f116
+	add		r18=r18,r17		};;//
+//-------------------------------------------------//
+{ .mfi;	getf.sig	r22=f46
+		xma.hu	f48=f39,f120,f47
+(p7)	add		carry2=1,carry2		}
+{ .mfi;	cmp.ltu		p7,p0=r18,r17
+		xma.lu	f47=f39,f120,f47
+	add		r19=r19,r18		};;
+{ .mfi;	getf.sig	r24=f110
+		xma.hu	f58=f39,f121,f57
+(p7)	add		carry2=1,carry2		}
+{ .mfi;	cmp.ltu		p7,p0=r19,r18
+		xma.lu	f57=f39,f121,f57
+	add		r20=r20,r19		};;
+{ .mfi;	getf.sig	r25=f101
+		xma.hu	f68=f39,f122,f67
+(p7)	add		carry2=1,carry2		}
+{ .mfi;	cmp.ltu		p7,p0=r20,r19
+		xma.lu	f67=f39,f122,f67
+	add		r21=r21,r20		};;
+{ .mfi;	getf.sig	r26=f92
+		xma.hu	f78=f39,f123,f77
+(p7)	add		carry2=1,carry2		}
+{ .mfi;	cmp.ltu		p7,p0=r21,r20
+		xma.lu	f77=f39,f123,f77
+	add		r22=r22,r21		};;
+{ .mfi;	getf.sig	r27=f83
+		xma.hu	f88=f39,f124,f87
+(p7)	add		carry2=1,carry2		}
+{ .mfi;	cmp.ltu		p7,p0=r22,r21
+		xma.lu	f87=f39,f124,f87
+	add		r22=r22,carry1		};;
+{ .mfi;	getf.sig	r28=f74
+		xma.hu	f98=f39,f125,f97
+(p7)	add		carry2=1,carry2		}
+{ .mfi;		xma.lu	f97=f39,f125,f97
+	cmp.ltu		p7,p0=r22,carry1	};;
+{ .mfi;	getf.sig	r29=f65
+		xma.hu	f108=f39,f126,f107
+(p7)	add		carry2=1,carry2		}
+{ .mfi;	st8		[r32]=r22,16
+		xma.lu	f107=f39,f126,f107	};;
+{ .mfi;	getf.sig	r30=f56
+		xma.hu	f118=f39,f127,f117	}
+{ .mfi;		xma.lu	f117=f39,f127,f117	};;//
+//-------------------------------------------------//
+// Leaving multiplier's heaven... Quite a ride, huh?
+
+{ .mii;	getf.sig	r31=f47
+	add		r25=r25,r24
+	mov		carry1=0		};;
+{ .mii;		getf.sig	r16=f111
+	cmp.ltu		p6,p0=r25,r24
+	add		r26=r26,r25		};;
+{ .mfb;		getf.sig	r17=f102	}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r26,r25
+	add		r27=r27,r26		};;
+{ .mfb;	nop.m	0x0				}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r27,r26
+	add		r28=r28,r27		};;
+{ .mii;		getf.sig	r18=f93
+		add		r17=r17,r16
+		mov		carry3=0	}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r28,r27
+	add		r29=r29,r28		};;
+{ .mii;		getf.sig	r19=f84
+		cmp.ltu		p7,p0=r17,r16	}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r29,r28
+	add		r30=r30,r29		};;
+{ .mii;		getf.sig	r20=f75
+		add		r18=r18,r17	}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r30,r29
+	add		r31=r31,r30		};;
+{ .mfb;		getf.sig	r21=f66		}
+{ .mii;	(p7)	add		carry3=1,carry3
+		cmp.ltu		p7,p0=r18,r17
+		add		r19=r19,r18	}
+{ .mfb;	nop.m	0x0				}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r31,r30
+	add		r31=r31,carry2		};;
+{ .mfb;		getf.sig	r22=f57		}
+{ .mii;	(p7)	add		carry3=1,carry3
+		cmp.ltu		p7,p0=r19,r18
+		add		r20=r20,r19	}
+{ .mfb;	nop.m	0x0				}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r31,carry2	};;
+{ .mfb;		getf.sig	r23=f48		}
+{ .mii;	(p7)	add		carry3=1,carry3
+		cmp.ltu		p7,p0=r20,r19
+		add		r21=r21,r20	}
+{ .mii;
+(p6)	add		carry1=1,carry1		}
+{ .mfb;	st8		[r33]=r31,16		};;
+
+{ .mfb;	getf.sig	r24=f112		}
+{ .mii;	(p7)	add		carry3=1,carry3
+		cmp.ltu		p7,p0=r21,r20
+		add		r22=r22,r21	};;
+{ .mfb;	getf.sig	r25=f103		}
+{ .mii;	(p7)	add		carry3=1,carry3
+		cmp.ltu		p7,p0=r22,r21
+		add		r23=r23,r22	};;
+{ .mfb;	getf.sig	r26=f94			}
+{ .mii;	(p7)	add		carry3=1,carry3
+		cmp.ltu		p7,p0=r23,r22
+		add		r23=r23,carry1	};;
+{ .mfb;	getf.sig	r27=f85			}
+{ .mii;	(p7)	add		carry3=1,carry3
+		cmp.ltu		p7,p8=r23,carry1};;
+{ .mii;	getf.sig	r28=f76
+	add		r25=r25,r24
+	mov		carry1=0		}
+{ .mii;		st8		[r32]=r23,16
+	(p7)	add		carry2=1,carry3
+	(p8)	add		carry2=0,carry3	};;
+
+{ .mfb;	nop.m	0x0				}
+{ .mii;	getf.sig	r29=f67
+	cmp.ltu		p6,p0=r25,r24
+	add		r26=r26,r25		};;
+{ .mfb;	getf.sig	r30=f58			}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r26,r25
+	add		r27=r27,r26		};;
+{ .mfb;		getf.sig	r16=f113	}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r27,r26
+	add		r28=r28,r27		};;
+{ .mfb;		getf.sig	r17=f104	}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r28,r27
+	add		r29=r29,r28		};;
+{ .mfb;		getf.sig	r18=f95		}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r29,r28
+	add		r30=r30,r29		};;
+{ .mii;		getf.sig	r19=f86
+		add		r17=r17,r16
+		mov		carry3=0	}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r30,r29
+	add		r30=r30,carry2		};;
+{ .mii;		getf.sig	r20=f77
+		cmp.ltu		p7,p0=r17,r16
+		add		r18=r18,r17	}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r30,carry2	};;
+{ .mfb;		getf.sig	r21=f68		}
+{ .mii;	st8		[r33]=r30,16
+(p6)	add		carry1=1,carry1		};;
+
+{ .mfb;	getf.sig	r24=f114		}
+{ .mii;	(p7)	add		carry3=1,carry3
+		cmp.ltu		p7,p0=r18,r17
+		add		r19=r19,r18	};;
+{ .mfb;	getf.sig	r25=f105		}
+{ .mii;	(p7)	add		carry3=1,carry3
+		cmp.ltu		p7,p0=r19,r18
+		add		r20=r20,r19	};;
+{ .mfb;	getf.sig	r26=f96			}
+{ .mii;	(p7)	add		carry3=1,carry3
+		cmp.ltu		p7,p0=r20,r19
+		add		r21=r21,r20	};;
+{ .mfb;	getf.sig	r27=f87			}
+{ .mii;	(p7)	add		carry3=1,carry3
+		cmp.ltu		p7,p0=r21,r20
+		add		r21=r21,carry1	};;
+{ .mib;	getf.sig	r28=f78			
+	add		r25=r25,r24		}
+{ .mib;	(p7)	add		carry3=1,carry3
+		cmp.ltu		p7,p8=r21,carry1};;
+{ .mii;		st8		[r32]=r21,16
+	(p7)	add		carry2=1,carry3
+	(p8)	add		carry2=0,carry3	}
+
+{ .mii;	mov		carry1=0
+	cmp.ltu		p6,p0=r25,r24
+	add		r26=r26,r25		};;
+{ .mfb;		getf.sig	r16=f115	}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r26,r25
+	add		r27=r27,r26		};;
+{ .mfb;		getf.sig	r17=f106	}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r27,r26
+	add		r28=r28,r27		};;
+{ .mfb;		getf.sig	r18=f97		}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r28,r27
+	add		r28=r28,carry2		};;
+{ .mib;		getf.sig	r19=f88
+		add		r17=r17,r16	}
+{ .mib;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r28,carry2	};;
+{ .mii;	st8		[r33]=r28,16
+(p6)	add		carry1=1,carry1		}
+
+{ .mii;		mov		carry2=0
+		cmp.ltu		p7,p0=r17,r16
+		add		r18=r18,r17	};;
+{ .mfb;	getf.sig	r24=f116		}
+{ .mii;	(p7)	add		carry2=1,carry2
+		cmp.ltu		p7,p0=r18,r17
+		add		r19=r19,r18	};;
+{ .mfb;	getf.sig	r25=f107		}
+{ .mii;	(p7)	add		carry2=1,carry2
+		cmp.ltu		p7,p0=r19,r18
+		add		r19=r19,carry1	};;
+{ .mfb;	getf.sig	r26=f98			}
+{ .mii;	(p7)	add		carry2=1,carry2
+		cmp.ltu		p7,p0=r19,carry1};;
+{ .mii;		st8		[r32]=r19,16
+	(p7)	add		carry2=1,carry2	}
+
+{ .mfb;	add		r25=r25,r24		};;
+
+{ .mfb;		getf.sig	r16=f117	}
+{ .mii;	mov		carry1=0
+	cmp.ltu		p6,p0=r25,r24
+	add		r26=r26,r25		};;
+{ .mfb;		getf.sig	r17=f108	}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r26,r25
+	add		r26=r26,carry2		};;
+{ .mfb;	nop.m	0x0				}
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r26,carry2	};;
+{ .mii;	st8		[r33]=r26,16
+(p6)	add		carry1=1,carry1		}
+
+{ .mfb;		add		r17=r17,r16	};;
+{ .mfb;	getf.sig	r24=f118		}
+{ .mii;		mov		carry2=0
+		cmp.ltu		p7,p0=r17,r16
+		add		r17=r17,carry1	};;
+{ .mii;	(p7)	add		carry2=1,carry2
+		cmp.ltu		p7,p0=r17,carry1};;
+{ .mii;		st8		[r32]=r17
+	(p7)	add		carry2=1,carry2	};;
+{ .mfb;	add		r24=r24,carry2		};;
+{ .mib;	st8		[r33]=r24		}
+
+{ .mib;	rum		1<<5		// clear um.mfh
+	br.ret.sptk.many	b0	};;
+.endp	bn_mul_comba8#
+#undef	carry3
+#undef	carry2
+#undef	carry1
+#endif
+
+#if 1
+// It's possible to make it faster (see comment to bn_sqr_comba8), but
+// I reckon it doesn't worth the effort. Basically because the routine
+// (actually both of them) practically never called... So I just play
+// same trick as with bn_sqr_comba8.
+//
+// void bn_sqr_comba4(BN_ULONG *r, BN_ULONG *a)
+//
+.global	bn_sqr_comba4#
+.proc	bn_sqr_comba4#
+.align	64
+bn_sqr_comba4:
+	.prologue
+	.save	ar.pfs,r2
+#if defined(_HPUX_SOURCE) && !defined(_LP64)
+{ .mii;	alloc   r2=ar.pfs,2,1,0,0
+	addp4	r32=0,r32
+	addp4	r33=0,r33		};;
+{ .mii;
+#else
+{ .mii;	alloc	r2=ar.pfs,2,1,0,0
+#endif
+	mov	r34=r33
+	add	r14=8,r33		};;
+	.body
+{ .mii;	add	r17=8,r34
+	add	r15=16,r33
+	add	r18=16,r34		}
+{ .mfb;	add	r16=24,r33
+	br	.L_cheat_entry_point4	};;
+.endp	bn_sqr_comba4#
+#endif
+
+#if 1
+// Runs in ~115 cycles and ~4.5 times faster than C. Well, whatever...
+//
+// void bn_mul_comba4(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b)
+//
+#define	carry1	r14
+#define	carry2	r15
+.global	bn_mul_comba4#
+.proc	bn_mul_comba4#
+.align	64
+bn_mul_comba4:
+	.prologue
+	.save	ar.pfs,r2
+#if defined(_HPUX_SOURCE) && !defined(_LP64)
+{ .mii;	alloc   r2=ar.pfs,3,0,0,0
+	addp4	r33=0,r33
+	addp4	r34=0,r34		};;
+{ .mii;	addp4	r32=0,r32
+#else
+{ .mii;	alloc	r2=ar.pfs,3,0,0,0
+#endif
+	add	r14=8,r33
+	add	r17=8,r34		}
+	.body
+{ .mii;	add	r15=16,r33
+	add	r18=16,r34
+	add	r16=24,r33		};;
+.L_cheat_entry_point4:
+{ .mmi;	add	r19=24,r34
+
+	ldf8	f32=[r33]		}
+
+{ .mmi;	ldf8	f120=[r34]
+	ldf8	f121=[r17]		};;
+{ .mmi;	ldf8	f122=[r18]
+	ldf8	f123=[r19]		}
+
+{ .mmi;	ldf8	f33=[r14]
+	ldf8	f34=[r15]		}
+{ .mfi;	ldf8	f35=[r16]
+
+		xma.hu	f41=f32,f120,f0		}
+{ .mfi;		xma.lu	f40=f32,f120,f0		};;
+{ .mfi;		xma.hu	f51=f32,f121,f0		}
+{ .mfi;		xma.lu	f50=f32,f121,f0		};;
+{ .mfi;		xma.hu	f61=f32,f122,f0		}
+{ .mfi;		xma.lu	f60=f32,f122,f0		};;
+{ .mfi;		xma.hu	f71=f32,f123,f0		}
+{ .mfi;		xma.lu	f70=f32,f123,f0		};;//
+// Major stall takes place here, and 3 more places below. Result from
+// first xma is not available for another 3 ticks.
+{ .mfi;	getf.sig	r16=f40
+		xma.hu	f42=f33,f120,f41
+	add		r33=8,r32		}
+{ .mfi;		xma.lu	f41=f33,f120,f41	};;
+{ .mfi;	getf.sig	r24=f50
+		xma.hu	f52=f33,f121,f51	}
+{ .mfi;		xma.lu	f51=f33,f121,f51	};;
+{ .mfi;	st8		[r32]=r16,16
+		xma.hu	f62=f33,f122,f61	}
+{ .mfi;		xma.lu	f61=f33,f122,f61	};;
+{ .mfi;		xma.hu	f72=f33,f123,f71	}
+{ .mfi;		xma.lu	f71=f33,f123,f71	};;//
+//-------------------------------------------------//
+{ .mfi;	getf.sig	r25=f41
+		xma.hu	f43=f34,f120,f42	}
+{ .mfi;		xma.lu	f42=f34,f120,f42	};;
+{ .mfi;	getf.sig	r16=f60
+		xma.hu	f53=f34,f121,f52	}
+{ .mfi;		xma.lu	f52=f34,f121,f52	};;
+{ .mfi;	getf.sig	r17=f51
+		xma.hu	f63=f34,f122,f62
+	add		r25=r25,r24		}
+{ .mfi;	mov		carry1=0
+		xma.lu	f62=f34,f122,f62	};;
+{ .mfi;	st8		[r33]=r25,16
+		xma.hu	f73=f34,f123,f72
+	cmp.ltu		p6,p0=r25,r24		}
+{ .mfi;		xma.lu	f72=f34,f123,f72	};;//
+//-------------------------------------------------//
+{ .mfi;	getf.sig	r18=f42
+		xma.hu	f44=f35,f120,f43
+(p6)	add		carry1=1,carry1		}
+{ .mfi;	add		r17=r17,r16
+		xma.lu	f43=f35,f120,f43
+	mov		carry2=0		};;
+{ .mfi;	getf.sig	r24=f70
+		xma.hu	f54=f35,f121,f53
+	cmp.ltu		p7,p0=r17,r16		}
+{ .mfi;		xma.lu	f53=f35,f121,f53	};;
+{ .mfi;	getf.sig	r25=f61
+		xma.hu	f64=f35,f122,f63
+	add		r18=r18,r17		}
+{ .mfi;		xma.lu	f63=f35,f122,f63
+(p7)	add		carry2=1,carry2		};;
+{ .mfi;	getf.sig	r26=f52
+		xma.hu	f74=f35,f123,f73
+	cmp.ltu		p7,p0=r18,r17		}
+{ .mfi;		xma.lu	f73=f35,f123,f73
+	add		r18=r18,carry1		};;
+//-------------------------------------------------//
+{ .mii;	st8		[r32]=r18,16
+(p7)	add		carry2=1,carry2
+	cmp.ltu		p7,p0=r18,carry1	};;
+
+{ .mfi;	getf.sig	r27=f43	// last major stall
+(p7)	add		carry2=1,carry2		};;
+{ .mii;		getf.sig	r16=f71
+	add		r25=r25,r24
+	mov		carry1=0		};;
+{ .mii;		getf.sig	r17=f62	
+	cmp.ltu		p6,p0=r25,r24
+	add		r26=r26,r25		};;
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r26,r25
+	add		r27=r27,r26		};;
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r27,r26
+	add		r27=r27,carry2		};;
+{ .mii;		getf.sig	r18=f53
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r27,carry2	};;
+{ .mfi;	st8		[r33]=r27,16
+(p6)	add		carry1=1,carry1		}
+
+{ .mii;		getf.sig	r19=f44
+		add		r17=r17,r16
+		mov		carry2=0	};;
+{ .mii;	getf.sig	r24=f72
+		cmp.ltu		p7,p0=r17,r16
+		add		r18=r18,r17	};;
+{ .mii;	(p7)	add		carry2=1,carry2
+		cmp.ltu		p7,p0=r18,r17
+		add		r19=r19,r18	};;
+{ .mii;	(p7)	add		carry2=1,carry2
+		cmp.ltu		p7,p0=r19,r18
+		add		r19=r19,carry1	};;
+{ .mii;	getf.sig	r25=f63
+	(p7)	add		carry2=1,carry2
+		cmp.ltu		p7,p0=r19,carry1};;
+{ .mii;		st8		[r32]=r19,16
+	(p7)	add		carry2=1,carry2	}
+
+{ .mii;	getf.sig	r26=f54
+	add		r25=r25,r24
+	mov		carry1=0		};;
+{ .mii;		getf.sig	r16=f73
+	cmp.ltu		p6,p0=r25,r24
+	add		r26=r26,r25		};;
+{ .mii;
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r26,r25
+	add		r26=r26,carry2		};;
+{ .mii;		getf.sig	r17=f64
+(p6)	add		carry1=1,carry1
+	cmp.ltu		p6,p0=r26,carry2	};;
+{ .mii;	st8		[r33]=r26,16
+(p6)	add		carry1=1,carry1		}
+
+{ .mii;	getf.sig	r24=f74
+		add		r17=r17,r16	
+		mov		carry2=0	};;
+{ .mii;		cmp.ltu		p7,p0=r17,r16
+		add		r17=r17,carry1	};;
+
+{ .mii;	(p7)	add		carry2=1,carry2
+		cmp.ltu		p7,p0=r17,carry1};;
+{ .mii;		st8		[r32]=r17,16
+	(p7)	add		carry2=1,carry2	};;
+
+{ .mii;	add		r24=r24,carry2		};;
+{ .mii;	st8		[r33]=r24		}
+
+{ .mib;	rum		1<<5		// clear um.mfh
+	br.ret.sptk.many	b0	};;
+.endp	bn_mul_comba4#
+#undef	carry2
+#undef	carry1
+#endif
+
+#if 1
+//
+// BN_ULONG bn_div_words(BN_ULONG h, BN_ULONG l, BN_ULONG d)
+//
+// In the nutshell it's a port of my MIPS III/IV implementation.
+//
+#define	AT	r14
+#define	H	r16
+#define	HH	r20
+#define	L	r17
+#define	D	r18
+#define	DH	r22
+#define	I	r21
+
+#if 0
+// Some preprocessors (most notably HP-UX) appear to be allergic to
+// macros enclosed to parenthesis [as these three were].
+#define	cont	p16
+#define	break	p0	// p20
+#define	equ	p24
+#else
+cont=p16
+break=p0
+equ=p24
+#endif
+
+.global	abort#
+.global	bn_div_words#
+.proc	bn_div_words#
+.align	64
+bn_div_words:
+	.prologue
+	.save	ar.pfs,r2
+{ .mii;	alloc		r2=ar.pfs,3,5,0,8
+	.save	b0,r3
+	mov		r3=b0
+	.save	pr,r10
+	mov		r10=pr		};;
+{ .mmb;	cmp.eq		p6,p0=r34,r0
+	mov		r8=-1
+(p6)	br.ret.spnt.many	b0	};;
+
+	.body
+{ .mii;	mov		H=r32		// save h
+	mov		ar.ec=0		// don't rotate at exit
+	mov		pr.rot=0	}
+{ .mii;	mov		L=r33		// save l
+	mov		r25=r0		// needed if abort is called on VMS
+	mov		r36=r0		};;
+
+.L_divw_shift:	// -vv- note signed comparison
+{ .mfi;	(p0)	cmp.lt		p16,p0=r0,r34	// d
+	(p0)	shladd		r33=r34,1,r0	}
+{ .mfb;	(p0)	add		r35=1,r36
+	(p0)	nop.f		0x0
+(p16)	br.wtop.dpnt		.L_divw_shift	};;
+
+{ .mii;	mov		D=r34
+	shr.u		DH=r34,32
+	sub		r35=64,r36		};;
+{ .mii;	setf.sig	f7=DH
+	shr.u		AT=H,r35
+	mov		I=r36			};;
+{ .mib;	cmp.ne		p6,p0=r0,AT
+	shl		H=H,r36
+(p6)	br.call.spnt.clr	b0=abort	};;	// overflow, die...
+
+{ .mfi;	fcvt.xuf.s1	f7=f7
+	shr.u		AT=L,r35		};;
+{ .mii;	shl		L=L,r36
+	or		H=H,AT			};;
+
+{ .mii;	nop.m		0x0
+	cmp.leu		p6,p0=D,H;;
+(p6)	sub		H=H,D			}
+
+{ .mlx;	setf.sig	f14=D
+	movl		AT=0xffffffff		};;
+///////////////////////////////////////////////////////////
+{ .mii;	setf.sig	f6=H
+	shr.u		HH=H,32;;
+	cmp.eq		p6,p7=HH,DH		};;
+{ .mfb;
+(p6)	setf.sig	f8=AT
+(p7)	fcvt.xuf.s1	f6=f6
+(p7)	br.call.sptk	b6=.L_udiv64_32_b6	};;
+
+{ .mfi;	getf.sig	r33=f8				// q
+	xmpy.lu		f9=f8,f14		}
+{ .mfi;	xmpy.hu		f10=f8,f14
+	shrp		H=H,L,32		};;
+
+{ .mmi;	getf.sig	r35=f9				// tl
+	getf.sig	r31=f10			};;	// th
+
+.L_divw_1st_iter:
+{ .mii;	(p0)	add		r32=-1,r33
+	(p0)	cmp.eq		equ,cont=HH,r31		};;
+{ .mii;	(p0)	cmp.ltu		p8,p0=r35,D
+	(p0)	sub		r34=r35,D
+	(equ)	cmp.leu		break,cont=r35,H	};;
+{ .mib;	(cont)	cmp.leu		cont,break=HH,r31
+	(p8)	add		r31=-1,r31
+(cont)	br.wtop.spnt		.L_divw_1st_iter	};;
+///////////////////////////////////////////////////////////
+{ .mii;	sub		H=H,r35
+	shl		r8=r33,32
+	shl		L=L,32			};;
+///////////////////////////////////////////////////////////
+{ .mii;	setf.sig	f6=H
+	shr.u		HH=H,32;;
+	cmp.eq		p6,p7=HH,DH		};;
+{ .mfb;
+(p6)	setf.sig	f8=AT
+(p7)	fcvt.xuf.s1	f6=f6
+(p7)	br.call.sptk	b6=.L_udiv64_32_b6	};;
+
+{ .mfi;	getf.sig	r33=f8				// q
+	xmpy.lu		f9=f8,f14		}
+{ .mfi;	xmpy.hu		f10=f8,f14
+	shrp		H=H,L,32		};;
+
+{ .mmi;	getf.sig	r35=f9				// tl
+	getf.sig	r31=f10			};;	// th
+
+.L_divw_2nd_iter:
+{ .mii;	(p0)	add		r32=-1,r33
+	(p0)	cmp.eq		equ,cont=HH,r31		};;
+{ .mii;	(p0)	cmp.ltu		p8,p0=r35,D
+	(p0)	sub		r34=r35,D
+	(equ)	cmp.leu		break,cont=r35,H	};;
+{ .mib;	(cont)	cmp.leu		cont,break=HH,r31
+	(p8)	add		r31=-1,r31
+(cont)	br.wtop.spnt		.L_divw_2nd_iter	};;
+///////////////////////////////////////////////////////////
+{ .mii;	sub	H=H,r35
+	or	r8=r8,r33
+	mov	ar.pfs=r2		};;
+{ .mii;	shr.u	r9=H,I			// remainder if anybody wants it
+	mov	pr=r10,0x1ffff		}
+{ .mfb;	br.ret.sptk.many	b0	};;
+
+// Unsigned 64 by 32 (well, by 64 for the moment) bit integer division
+// procedure.
+//
+// inputs:	f6 = (double)a, f7 = (double)b
+// output:	f8 = (int)(a/b)
+// clobbered:	f8,f9,f10,f11,pred
+pred=p15
+// This snippet is based on text found in the "Divide, Square
+// Root and Remainder" section at
+// http://www.intel.com/software/products/opensource/libraries/num.htm.
+// Yes, I admit that the referred code was used as template,
+// but after I realized that there hardly is any other instruction
+// sequence which would perform this operation. I mean I figure that
+// any independent attempt to implement high-performance division
+// will result in code virtually identical to the Intel code. It
+// should be noted though that below division kernel is 1 cycle
+// faster than Intel one (note commented splits:-), not to mention
+// original prologue (rather lack of one) and epilogue.
+.align	32
+.skip	16
+.L_udiv64_32_b6:
+	frcpa.s1	f8,pred=f6,f7;;		// [0]  y0 = 1 / b
+
+(pred)	fnma.s1		f9=f7,f8,f1		// [5]  e0 = 1 - b * y0
+(pred)	fmpy.s1		f10=f6,f8;;		// [5]  q0 = a * y0
+(pred)	fmpy.s1		f11=f9,f9		// [10] e1 = e0 * e0
+(pred)	fma.s1		f10=f9,f10,f10;;	// [10] q1 = q0 + e0 * q0
+(pred)	fma.s1		f8=f9,f8,f8	//;;	// [15] y1 = y0 + e0 * y0
+(pred)	fma.s1		f9=f11,f10,f10;;	// [15] q2 = q1 + e1 * q1
+(pred)	fma.s1		f8=f11,f8,f8	//;;	// [20] y2 = y1 + e1 * y1
+(pred)	fnma.s1		f10=f7,f9,f6;;		// [20] r2 = a - b * q2
+(pred)	fma.s1		f8=f10,f8,f9;;		// [25] q3 = q2 + r2 * y2
+
+	fcvt.fxu.trunc.s1	f8=f8		// [30] q = trunc(q3)
+	br.ret.sptk.many	b6;;
+.endp	bn_div_words#
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/mips-mont.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/mips-mont.pl
new file mode 100644
index 000000000..fbe5d04f7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/mips-mont.pl
@@ -0,0 +1,433 @@
+#! /usr/bin/env perl
+# Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# This module doesn't present direct interest for OpenSSL, because it
+# doesn't provide better performance for longer keys, at least not on
+# in-order-execution cores. While 512-bit RSA sign operations can be
+# 65% faster in 64-bit mode, 1024-bit ones are only 15% faster, and
+# 4096-bit ones are up to 15% slower. In 32-bit mode it varies from
+# 16% improvement for 512-bit RSA sign to -33% for 4096-bit RSA
+# verify:-( All comparisons are against bn_mul_mont-free assembler.
+# The module might be of interest to embedded system developers, as
+# the code is smaller than 1KB, yet offers >3x improvement on MIPS64
+# and 75-30% [less for longer keys] on MIPS32 over compiler-generated
+# code.
+
+######################################################################
+# There is a number of MIPS ABI in use, O32 and N32/64 are most
+# widely used. Then there is a new contender: NUBI. It appears that if
+# one picks the latter, it's possible to arrange code in ABI neutral
+# manner. Therefore let's stick to NUBI register layout:
+#
+($zero,$at,$t0,$t1,$t2)=map("\$$_",(0..2,24,25));
+($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("\$$_",(4..11));
+($s0,$s1,$s2,$s3,$s4,$s5,$s6,$s7,$s8,$s9,$s10,$s11)=map("\$$_",(12..23));
+($gp,$tp,$sp,$fp,$ra)=map("\$$_",(3,28..31));
+#
+# The return value is placed in $a0. Following coding rules facilitate
+# interoperability:
+#
+# - never ever touch $tp, "thread pointer", former $gp;
+# - copy return value to $t0, former $v0 [or to $a0 if you're adapting
+#   old code];
+# - on O32 populate $a4-$a7 with 'lw $aN,4*N($sp)' if necessary;
+#
+# For reference here is register layout for N32/64 MIPS ABIs:
+#
+# ($zero,$at,$v0,$v1)=map("\$$_",(0..3));
+# ($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("\$$_",(4..11));
+# ($t0,$t1,$t2,$t3,$t8,$t9)=map("\$$_",(12..15,24,25));
+# ($s0,$s1,$s2,$s3,$s4,$s5,$s6,$s7)=map("\$$_",(16..23));
+# ($gp,$sp,$fp,$ra)=map("\$$_",(28..31));
+#
+$flavour = shift || "o32"; # supported flavours are o32,n32,64,nubi32,nubi64
+
+if ($flavour =~ /64|n32/i) {
+	$PTR_ADD="daddu";	# incidentally works even on n32
+	$PTR_SUB="dsubu";	# incidentally works even on n32
+	$REG_S="sd";
+	$REG_L="ld";
+	$SZREG=8;
+} else {
+	$PTR_ADD="addu";
+	$PTR_SUB="subu";
+	$REG_S="sw";
+	$REG_L="lw";
+	$SZREG=4;
+}
+$SAVED_REGS_MASK = ($flavour =~ /nubi/i) ? 0x00fff000 : 0x00ff0000;
+#
+# <appro@openssl.org>
+#
+######################################################################
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+if ($flavour =~ /64|n32/i) {
+	$LD="ld";
+	$ST="sd";
+	$MULTU="dmultu";
+	$ADDU="daddu";
+	$SUBU="dsubu";
+	$BNSZ=8;
+} else {
+	$LD="lw";
+	$ST="sw";
+	$MULTU="multu";
+	$ADDU="addu";
+	$SUBU="subu";
+	$BNSZ=4;
+}
+
+# int bn_mul_mont(
+$rp=$a0;	# BN_ULONG *rp,
+$ap=$a1;	# const BN_ULONG *ap,
+$bp=$a2;	# const BN_ULONG *bp,
+$np=$a3;	# const BN_ULONG *np,
+$n0=$a4;	# const BN_ULONG *n0,
+$num=$a5;	# int num);
+
+$lo0=$a6;
+$hi0=$a7;
+$lo1=$t1;
+$hi1=$t2;
+$aj=$s0;
+$bi=$s1;
+$nj=$s2;
+$tp=$s3;
+$alo=$s4;
+$ahi=$s5;
+$nlo=$s6;
+$nhi=$s7;
+$tj=$s8;
+$i=$s9;
+$j=$s10;
+$m1=$s11;
+
+$FRAMESIZE=14;
+
+$code=<<___;
+#include "mips_arch.h"
+
+.text
+
+.set	noat
+.set	noreorder
+
+.align	5
+.globl	bn_mul_mont
+.ent	bn_mul_mont
+bn_mul_mont:
+___
+$code.=<<___ if ($flavour =~ /o32/i);
+	lw	$n0,16($sp)
+	lw	$num,20($sp)
+___
+$code.=<<___;
+	slt	$at,$num,4
+	bnez	$at,1f
+	li	$t0,0
+	slt	$at,$num,17	# on in-order CPU
+	bnez	$at,bn_mul_mont_internal
+	nop
+1:	jr	$ra
+	li	$a0,0
+.end	bn_mul_mont
+
+.align	5
+.ent	bn_mul_mont_internal
+bn_mul_mont_internal:
+	.frame	$fp,$FRAMESIZE*$SZREG,$ra
+	.mask	0x40000000|$SAVED_REGS_MASK,-$SZREG
+	$PTR_SUB $sp,$FRAMESIZE*$SZREG
+	$REG_S	$fp,($FRAMESIZE-1)*$SZREG($sp)
+	$REG_S	$s11,($FRAMESIZE-2)*$SZREG($sp)
+	$REG_S	$s10,($FRAMESIZE-3)*$SZREG($sp)
+	$REG_S	$s9,($FRAMESIZE-4)*$SZREG($sp)
+	$REG_S	$s8,($FRAMESIZE-5)*$SZREG($sp)
+	$REG_S	$s7,($FRAMESIZE-6)*$SZREG($sp)
+	$REG_S	$s6,($FRAMESIZE-7)*$SZREG($sp)
+	$REG_S	$s5,($FRAMESIZE-8)*$SZREG($sp)
+	$REG_S	$s4,($FRAMESIZE-9)*$SZREG($sp)
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_S	$s3,($FRAMESIZE-10)*$SZREG($sp)
+	$REG_S	$s2,($FRAMESIZE-11)*$SZREG($sp)
+	$REG_S	$s1,($FRAMESIZE-12)*$SZREG($sp)
+	$REG_S	$s0,($FRAMESIZE-13)*$SZREG($sp)
+___
+$code.=<<___;
+	move	$fp,$sp
+
+	.set	reorder
+	$LD	$n0,0($n0)
+	$LD	$bi,0($bp)	# bp[0]
+	$LD	$aj,0($ap)	# ap[0]
+	$LD	$nj,0($np)	# np[0]
+
+	$PTR_SUB $sp,2*$BNSZ	# place for two extra words
+	sll	$num,`log($BNSZ)/log(2)`
+	li	$at,-4096
+	$PTR_SUB $sp,$num
+	and	$sp,$at
+
+	$MULTU	($aj,$bi)
+	$LD	$ahi,$BNSZ($ap)
+	$LD	$nhi,$BNSZ($np)
+	mflo	($lo0,$aj,$bi)
+	mfhi	($hi0,$aj,$bi)
+	$MULTU	($lo0,$n0)
+	mflo	($m1,$lo0,$n0)
+
+	$MULTU	($ahi,$bi)
+	mflo	($alo,$ahi,$bi)
+	mfhi	($ahi,$ahi,$bi)
+
+	$MULTU	($nj,$m1)
+	mflo	($lo1,$nj,$m1)
+	mfhi	($hi1,$nj,$m1)
+	$MULTU	($nhi,$m1)
+	$ADDU	$lo1,$lo0
+	sltu	$at,$lo1,$lo0
+	$ADDU	$hi1,$at
+	mflo	($nlo,$nhi,$m1)
+	mfhi	($nhi,$nhi,$m1)
+
+	move	$tp,$sp
+	li	$j,2*$BNSZ
+.align	4
+.L1st:
+	.set	noreorder
+	$PTR_ADD $aj,$ap,$j
+	$PTR_ADD $nj,$np,$j
+	$LD	$aj,($aj)
+	$LD	$nj,($nj)
+
+	$MULTU	($aj,$bi)
+	$ADDU	$lo0,$alo,$hi0
+	$ADDU	$lo1,$nlo,$hi1
+	sltu	$at,$lo0,$hi0
+	sltu	$t0,$lo1,$hi1
+	$ADDU	$hi0,$ahi,$at
+	$ADDU	$hi1,$nhi,$t0
+	mflo	($alo,$aj,$bi)
+	mfhi	($ahi,$aj,$bi)
+
+	$ADDU	$lo1,$lo0
+	sltu	$at,$lo1,$lo0
+	$MULTU	($nj,$m1)
+	$ADDU	$hi1,$at
+	addu	$j,$BNSZ
+	$ST	$lo1,($tp)
+	sltu	$t0,$j,$num
+	mflo	($nlo,$nj,$m1)
+	mfhi	($nhi,$nj,$m1)
+
+	bnez	$t0,.L1st
+	$PTR_ADD $tp,$BNSZ
+	.set	reorder
+
+	$ADDU	$lo0,$alo,$hi0
+	sltu	$at,$lo0,$hi0
+	$ADDU	$hi0,$ahi,$at
+
+	$ADDU	$lo1,$nlo,$hi1
+	sltu	$t0,$lo1,$hi1
+	$ADDU	$hi1,$nhi,$t0
+	$ADDU	$lo1,$lo0
+	sltu	$at,$lo1,$lo0
+	$ADDU	$hi1,$at
+
+	$ST	$lo1,($tp)
+
+	$ADDU	$hi1,$hi0
+	sltu	$at,$hi1,$hi0
+	$ST	$hi1,$BNSZ($tp)
+	$ST	$at,2*$BNSZ($tp)
+
+	li	$i,$BNSZ
+.align	4
+.Louter:
+	$PTR_ADD $bi,$bp,$i
+	$LD	$bi,($bi)
+	$LD	$aj,($ap)
+	$LD	$ahi,$BNSZ($ap)
+	$LD	$tj,($sp)
+
+	$MULTU	($aj,$bi)
+	$LD	$nj,($np)
+	$LD	$nhi,$BNSZ($np)
+	mflo	($lo0,$aj,$bi)
+	mfhi	($hi0,$aj,$bi)
+	$ADDU	$lo0,$tj
+	$MULTU	($lo0,$n0)
+	sltu	$at,$lo0,$tj
+	$ADDU	$hi0,$at
+	mflo	($m1,$lo0,$n0)
+
+	$MULTU	($ahi,$bi)
+	mflo	($alo,$ahi,$bi)
+	mfhi	($ahi,$ahi,$bi)
+
+	$MULTU	($nj,$m1)
+	mflo	($lo1,$nj,$m1)
+	mfhi	($hi1,$nj,$m1)
+
+	$MULTU	($nhi,$m1)
+	$ADDU	$lo1,$lo0
+	sltu	$at,$lo1,$lo0
+	$ADDU	$hi1,$at
+	mflo	($nlo,$nhi,$m1)
+	mfhi	($nhi,$nhi,$m1)
+
+	move	$tp,$sp
+	li	$j,2*$BNSZ
+	$LD	$tj,$BNSZ($tp)
+.align	4
+.Linner:
+	.set	noreorder
+	$PTR_ADD $aj,$ap,$j
+	$PTR_ADD $nj,$np,$j
+	$LD	$aj,($aj)
+	$LD	$nj,($nj)
+
+	$MULTU	($aj,$bi)
+	$ADDU	$lo0,$alo,$hi0
+	$ADDU	$lo1,$nlo,$hi1
+	sltu	$at,$lo0,$hi0
+	sltu	$t0,$lo1,$hi1
+	$ADDU	$hi0,$ahi,$at
+	$ADDU	$hi1,$nhi,$t0
+	mflo	($alo,$aj,$bi)
+	mfhi	($ahi,$aj,$bi)
+
+	$ADDU	$lo0,$tj
+	addu	$j,$BNSZ
+	$MULTU	($nj,$m1)
+	sltu	$at,$lo0,$tj
+	$ADDU	$lo1,$lo0
+	$ADDU	$hi0,$at
+	sltu	$t0,$lo1,$lo0
+	$LD	$tj,2*$BNSZ($tp)
+	$ADDU	$hi1,$t0
+	sltu	$at,$j,$num
+	mflo	($nlo,$nj,$m1)
+	mfhi	($nhi,$nj,$m1)
+	$ST	$lo1,($tp)
+	bnez	$at,.Linner
+	$PTR_ADD $tp,$BNSZ
+	.set	reorder
+
+	$ADDU	$lo0,$alo,$hi0
+	sltu	$at,$lo0,$hi0
+	$ADDU	$hi0,$ahi,$at
+	$ADDU	$lo0,$tj
+	sltu	$t0,$lo0,$tj
+	$ADDU	$hi0,$t0
+
+	$LD	$tj,2*$BNSZ($tp)
+	$ADDU	$lo1,$nlo,$hi1
+	sltu	$at,$lo1,$hi1
+	$ADDU	$hi1,$nhi,$at
+	$ADDU	$lo1,$lo0
+	sltu	$t0,$lo1,$lo0
+	$ADDU	$hi1,$t0
+	$ST	$lo1,($tp)
+
+	$ADDU	$lo1,$hi1,$hi0
+	sltu	$hi1,$lo1,$hi0
+	$ADDU	$lo1,$tj
+	sltu	$at,$lo1,$tj
+	$ADDU	$hi1,$at
+	$ST	$lo1,$BNSZ($tp)
+	$ST	$hi1,2*$BNSZ($tp)
+
+	addu	$i,$BNSZ
+	sltu	$t0,$i,$num
+	bnez	$t0,.Louter
+
+	.set	noreorder
+	$PTR_ADD $tj,$sp,$num	# &tp[num]
+	move	$tp,$sp
+	move	$ap,$sp
+	li	$hi0,0		# clear borrow bit
+
+.align	4
+.Lsub:	$LD	$lo0,($tp)
+	$LD	$lo1,($np)
+	$PTR_ADD $tp,$BNSZ
+	$PTR_ADD $np,$BNSZ
+	$SUBU	$lo1,$lo0,$lo1	# tp[i]-np[i]
+	sgtu	$at,$lo1,$lo0
+	$SUBU	$lo0,$lo1,$hi0
+	sgtu	$hi0,$lo0,$lo1
+	$ST	$lo0,($rp)
+	or	$hi0,$at
+	sltu	$at,$tp,$tj
+	bnez	$at,.Lsub
+	$PTR_ADD $rp,$BNSZ
+
+	$SUBU	$hi0,$hi1,$hi0	# handle upmost overflow bit
+	move	$tp,$sp
+	$PTR_SUB $rp,$num	# restore rp
+	not	$hi1,$hi0
+
+.Lcopy:	$LD	$nj,($tp)	# conditional move
+	$LD	$aj,($rp)
+	$ST	$zero,($tp)
+	$PTR_ADD $tp,$BNSZ
+	and	$nj,$hi0
+	and	$aj,$hi1
+	or	$aj,$nj
+	sltu	$at,$tp,$tj
+	$ST	$aj,($rp)
+	bnez	$at,.Lcopy
+	$PTR_ADD $rp,$BNSZ
+
+	li	$a0,1
+	li	$t0,1
+
+	.set	noreorder
+	move	$sp,$fp
+	$REG_L	$fp,($FRAMESIZE-1)*$SZREG($sp)
+	$REG_L	$s11,($FRAMESIZE-2)*$SZREG($sp)
+	$REG_L	$s10,($FRAMESIZE-3)*$SZREG($sp)
+	$REG_L	$s9,($FRAMESIZE-4)*$SZREG($sp)
+	$REG_L	$s8,($FRAMESIZE-5)*$SZREG($sp)
+	$REG_L	$s7,($FRAMESIZE-6)*$SZREG($sp)
+	$REG_L	$s6,($FRAMESIZE-7)*$SZREG($sp)
+	$REG_L	$s5,($FRAMESIZE-8)*$SZREG($sp)
+	$REG_L	$s4,($FRAMESIZE-9)*$SZREG($sp)
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	$s3,($FRAMESIZE-10)*$SZREG($sp)
+	$REG_L	$s2,($FRAMESIZE-11)*$SZREG($sp)
+	$REG_L	$s1,($FRAMESIZE-12)*$SZREG($sp)
+	$REG_L	$s0,($FRAMESIZE-13)*$SZREG($sp)
+___
+$code.=<<___;
+	jr	$ra
+	$PTR_ADD $sp,$FRAMESIZE*$SZREG
+.end	bn_mul_mont_internal
+.rdata
+.asciiz	"Montgomery Multiplication for MIPS, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/mips.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/mips.pl
new file mode 100644
index 000000000..3875132bd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/mips.pl
@@ -0,0 +1,2263 @@
+#! /usr/bin/env perl
+# Copyright 2010-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project.
+#
+# Rights for redistribution and usage in source and binary forms are
+# granted according to the OpenSSL license. Warranty of any kind is
+# disclaimed.
+# ====================================================================
+
+
+# July 1999
+#
+# This is drop-in MIPS III/IV ISA replacement for crypto/bn/bn_asm.c.
+#
+# The module is designed to work with either of the "new" MIPS ABI(5),
+# namely N32 or N64, offered by IRIX 6.x. It's not meant to work under
+# IRIX 5.x not only because it doesn't support new ABIs but also
+# because 5.x kernels put R4x00 CPU into 32-bit mode and all those
+# 64-bit instructions (daddu, dmultu, etc.) found below gonna only
+# cause illegal instruction exception:-(
+#
+# In addition the code depends on preprocessor flags set up by MIPSpro
+# compiler driver (either as or cc) and therefore (probably?) can't be
+# compiled by the GNU assembler. GNU C driver manages fine though...
+# I mean as long as -mmips-as is specified or is the default option,
+# because then it simply invokes /usr/bin/as which in turn takes
+# perfect care of the preprocessor definitions. Another neat feature
+# offered by the MIPSpro assembler is an optimization pass. This gave
+# me the opportunity to have the code looking more regular as all those
+# architecture dependent instruction rescheduling details were left to
+# the assembler. Cool, huh?
+#
+# Performance improvement is astonishing! 'apps/openssl speed rsa dsa'
+# goes way over 3 times faster!
+#
+#					<appro@openssl.org>
+
+# October 2010
+#
+# Adapt the module even for 32-bit ABIs and other OSes. The former was
+# achieved by mechanical replacement of 64-bit arithmetic instructions
+# such as dmultu, daddu, etc. with their 32-bit counterparts and
+# adjusting offsets denoting multiples of BN_ULONG. Above mentioned
+# >3x performance improvement naturally does not apply to 32-bit code
+# [because there is no instruction 32-bit compiler can't use], one
+# has to content with 40-85% improvement depending on benchmark and
+# key length, more for longer keys.
+
+$flavour = shift || "o32";
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+if ($flavour =~ /64|n32/i) {
+	$LD="ld";
+	$ST="sd";
+	$MULTU="dmultu";
+	$DIVU="ddivu";
+	$ADDU="daddu";
+	$SUBU="dsubu";
+	$SRL="dsrl";
+	$SLL="dsll";
+	$BNSZ=8;
+	$PTR_ADD="daddu";
+	$PTR_SUB="dsubu";
+	$SZREG=8;
+	$REG_S="sd";
+	$REG_L="ld";
+} else {
+	$LD="lw";
+	$ST="sw";
+	$MULTU="multu";
+	$DIVU="divu";
+	$ADDU="addu";
+	$SUBU="subu";
+	$SRL="srl";
+	$SLL="sll";
+	$BNSZ=4;
+	$PTR_ADD="addu";
+	$PTR_SUB="subu";
+	$SZREG=4;
+	$REG_S="sw";
+	$REG_L="lw";
+	$code=".set	mips2\n";
+}
+
+# Below is N32/64 register layout used in the original module.
+#
+($zero,$at,$v0,$v1)=map("\$$_",(0..3));
+($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("\$$_",(4..11));
+($t0,$t1,$t2,$t3,$t8,$t9)=map("\$$_",(12..15,24,25));
+($s0,$s1,$s2,$s3,$s4,$s5,$s6,$s7)=map("\$$_",(16..23));
+($gp,$sp,$fp,$ra)=map("\$$_",(28..31));
+($ta0,$ta1,$ta2,$ta3)=($a4,$a5,$a6,$a7);
+#
+# No special adaptation is required for O32. NUBI on the other hand
+# is treated by saving/restoring ($v1,$t0..$t3).
+
+$gp=$v1 if ($flavour =~ /nubi/i);
+
+$minus4=$v1;
+
+$code.=<<___;
+#include "mips_arch.h"
+
+#if defined(_MIPS_ARCH_MIPS64R6)
+# define ddivu(rs,rt)
+# define mfqt(rd,rs,rt)	ddivu	rd,rs,rt
+# define mfrm(rd,rs,rt)	dmodu	rd,rs,rt
+#elif defined(_MIPS_ARCH_MIPS32R6)
+# define divu(rs,rt)
+# define mfqt(rd,rs,rt)	divu	rd,rs,rt
+# define mfrm(rd,rs,rt)	modu	rd,rs,rt
+#else
+# define $DIVU(rs,rt)	$DIVU	$zero,rs,rt
+# define mfqt(rd,rs,rt)	mflo	rd
+# define mfrm(rd,rs,rt)	mfhi	rd
+#endif
+
+.rdata
+.asciiz	"mips3.s, Version 1.2"
+.asciiz	"MIPS II/III/IV ISA artwork by Andy Polyakov <appro\@fy.chalmers.se>"
+
+.text
+.set	noat
+
+.align	5
+.globl	bn_mul_add_words
+.ent	bn_mul_add_words
+bn_mul_add_words:
+	.set	noreorder
+	bgtz	$a2,bn_mul_add_words_internal
+	move	$v0,$zero
+	jr	$ra
+	move	$a0,$v0
+.end	bn_mul_add_words
+
+.align	5
+.ent	bn_mul_add_words_internal
+bn_mul_add_words_internal:
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	.frame	$sp,6*$SZREG,$ra
+	.mask	0x8000f008,-$SZREG
+	.set	noreorder
+	$PTR_SUB $sp,6*$SZREG
+	$REG_S	$ra,5*$SZREG($sp)
+	$REG_S	$t3,4*$SZREG($sp)
+	$REG_S	$t2,3*$SZREG($sp)
+	$REG_S	$t1,2*$SZREG($sp)
+	$REG_S	$t0,1*$SZREG($sp)
+	$REG_S	$gp,0*$SZREG($sp)
+___
+$code.=<<___;
+	.set	reorder
+	li	$minus4,-4
+	and	$ta0,$a2,$minus4
+	beqz	$ta0,.L_bn_mul_add_words_tail
+
+.L_bn_mul_add_words_loop:
+	$LD	$t0,0($a1)
+	$MULTU	($t0,$a3)
+	$LD	$t1,0($a0)
+	$LD	$t2,$BNSZ($a1)
+	$LD	$t3,$BNSZ($a0)
+	$LD	$ta0,2*$BNSZ($a1)
+	$LD	$ta1,2*$BNSZ($a0)
+	$ADDU	$t1,$v0
+	sltu	$v0,$t1,$v0	# All manuals say it "compares 32-bit
+				# values", but it seems to work fine
+				# even on 64-bit registers.
+	mflo	($at,$t0,$a3)
+	mfhi	($t0,$t0,$a3)
+	$ADDU	$t1,$at
+	$ADDU	$v0,$t0
+	 $MULTU	($t2,$a3)
+	sltu	$at,$t1,$at
+	$ST	$t1,0($a0)
+	$ADDU	$v0,$at
+
+	$LD	$ta2,3*$BNSZ($a1)
+	$LD	$ta3,3*$BNSZ($a0)
+	$ADDU	$t3,$v0
+	sltu	$v0,$t3,$v0
+	mflo	($at,$t2,$a3)
+	mfhi	($t2,$t2,$a3)
+	$ADDU	$t3,$at
+	$ADDU	$v0,$t2
+	 $MULTU	($ta0,$a3)
+	sltu	$at,$t3,$at
+	$ST	$t3,$BNSZ($a0)
+	$ADDU	$v0,$at
+
+	subu	$a2,4
+	$PTR_ADD $a0,4*$BNSZ
+	$PTR_ADD $a1,4*$BNSZ
+	$ADDU	$ta1,$v0
+	sltu	$v0,$ta1,$v0
+	mflo	($at,$ta0,$a3)
+	mfhi	($ta0,$ta0,$a3)
+	$ADDU	$ta1,$at
+	$ADDU	$v0,$ta0
+	 $MULTU	($ta2,$a3)
+	sltu	$at,$ta1,$at
+	$ST	$ta1,-2*$BNSZ($a0)
+	$ADDU	$v0,$at
+
+
+	and	$ta0,$a2,$minus4
+	$ADDU	$ta3,$v0
+	sltu	$v0,$ta3,$v0
+	mflo	($at,$ta2,$a3)
+	mfhi	($ta2,$ta2,$a3)
+	$ADDU	$ta3,$at
+	$ADDU	$v0,$ta2
+	sltu	$at,$ta3,$at
+	$ST	$ta3,-$BNSZ($a0)
+	.set	noreorder
+	bgtz	$ta0,.L_bn_mul_add_words_loop
+	$ADDU	$v0,$at
+
+	beqz	$a2,.L_bn_mul_add_words_return
+	nop
+
+.L_bn_mul_add_words_tail:
+	.set	reorder
+	$LD	$t0,0($a1)
+	$MULTU	($t0,$a3)
+	$LD	$t1,0($a0)
+	subu	$a2,1
+	$ADDU	$t1,$v0
+	sltu	$v0,$t1,$v0
+	mflo	($at,$t0,$a3)
+	mfhi	($t0,$t0,$a3)
+	$ADDU	$t1,$at
+	$ADDU	$v0,$t0
+	sltu	$at,$t1,$at
+	$ST	$t1,0($a0)
+	$ADDU	$v0,$at
+	beqz	$a2,.L_bn_mul_add_words_return
+
+	$LD	$t0,$BNSZ($a1)
+	$MULTU	($t0,$a3)
+	$LD	$t1,$BNSZ($a0)
+	subu	$a2,1
+	$ADDU	$t1,$v0
+	sltu	$v0,$t1,$v0
+	mflo	($at,$t0,$a3)
+	mfhi	($t0,$t0,$a3)
+	$ADDU	$t1,$at
+	$ADDU	$v0,$t0
+	sltu	$at,$t1,$at
+	$ST	$t1,$BNSZ($a0)
+	$ADDU	$v0,$at
+	beqz	$a2,.L_bn_mul_add_words_return
+
+	$LD	$t0,2*$BNSZ($a1)
+	$MULTU	($t0,$a3)
+	$LD	$t1,2*$BNSZ($a0)
+	$ADDU	$t1,$v0
+	sltu	$v0,$t1,$v0
+	mflo	($at,$t0,$a3)
+	mfhi	($t0,$t0,$a3)
+	$ADDU	$t1,$at
+	$ADDU	$v0,$t0
+	sltu	$at,$t1,$at
+	$ST	$t1,2*$BNSZ($a0)
+	$ADDU	$v0,$at
+
+.L_bn_mul_add_words_return:
+	.set	noreorder
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	$t3,4*$SZREG($sp)
+	$REG_L	$t2,3*$SZREG($sp)
+	$REG_L	$t1,2*$SZREG($sp)
+	$REG_L	$t0,1*$SZREG($sp)
+	$REG_L	$gp,0*$SZREG($sp)
+	$PTR_ADD $sp,6*$SZREG
+___
+$code.=<<___;
+	jr	$ra
+	move	$a0,$v0
+.end	bn_mul_add_words_internal
+
+.align	5
+.globl	bn_mul_words
+.ent	bn_mul_words
+bn_mul_words:
+	.set	noreorder
+	bgtz	$a2,bn_mul_words_internal
+	move	$v0,$zero
+	jr	$ra
+	move	$a0,$v0
+.end	bn_mul_words
+
+.align	5
+.ent	bn_mul_words_internal
+bn_mul_words_internal:
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	.frame	$sp,6*$SZREG,$ra
+	.mask	0x8000f008,-$SZREG
+	.set	noreorder
+	$PTR_SUB $sp,6*$SZREG
+	$REG_S	$ra,5*$SZREG($sp)
+	$REG_S	$t3,4*$SZREG($sp)
+	$REG_S	$t2,3*$SZREG($sp)
+	$REG_S	$t1,2*$SZREG($sp)
+	$REG_S	$t0,1*$SZREG($sp)
+	$REG_S	$gp,0*$SZREG($sp)
+___
+$code.=<<___;
+	.set	reorder
+	li	$minus4,-4
+	and	$ta0,$a2,$minus4
+	beqz	$ta0,.L_bn_mul_words_tail
+
+.L_bn_mul_words_loop:
+	$LD	$t0,0($a1)
+	$MULTU	($t0,$a3)
+	$LD	$t2,$BNSZ($a1)
+	$LD	$ta0,2*$BNSZ($a1)
+	$LD	$ta2,3*$BNSZ($a1)
+	mflo	($at,$t0,$a3)
+	mfhi	($t0,$t0,$a3)
+	$ADDU	$v0,$at
+	sltu	$t1,$v0,$at
+	 $MULTU	($t2,$a3)
+	$ST	$v0,0($a0)
+	$ADDU	$v0,$t1,$t0
+
+	subu	$a2,4
+	$PTR_ADD $a0,4*$BNSZ
+	$PTR_ADD $a1,4*$BNSZ
+	mflo	($at,$t2,$a3)
+	mfhi	($t2,$t2,$a3)
+	$ADDU	$v0,$at
+	sltu	$t3,$v0,$at
+	 $MULTU	($ta0,$a3)
+	$ST	$v0,-3*$BNSZ($a0)
+	$ADDU	$v0,$t3,$t2
+
+	mflo	($at,$ta0,$a3)
+	mfhi	($ta0,$ta0,$a3)
+	$ADDU	$v0,$at
+	sltu	$ta1,$v0,$at
+	 $MULTU	($ta2,$a3)
+	$ST	$v0,-2*$BNSZ($a0)
+	$ADDU	$v0,$ta1,$ta0
+
+	and	$ta0,$a2,$minus4
+	mflo	($at,$ta2,$a3)
+	mfhi	($ta2,$ta2,$a3)
+	$ADDU	$v0,$at
+	sltu	$ta3,$v0,$at
+	$ST	$v0,-$BNSZ($a0)
+	.set	noreorder
+	bgtz	$ta0,.L_bn_mul_words_loop
+	$ADDU	$v0,$ta3,$ta2
+
+	beqz	$a2,.L_bn_mul_words_return
+	nop
+
+.L_bn_mul_words_tail:
+	.set	reorder
+	$LD	$t0,0($a1)
+	$MULTU	($t0,$a3)
+	subu	$a2,1
+	mflo	($at,$t0,$a3)
+	mfhi	($t0,$t0,$a3)
+	$ADDU	$v0,$at
+	sltu	$t1,$v0,$at
+	$ST	$v0,0($a0)
+	$ADDU	$v0,$t1,$t0
+	beqz	$a2,.L_bn_mul_words_return
+
+	$LD	$t0,$BNSZ($a1)
+	$MULTU	($t0,$a3)
+	subu	$a2,1
+	mflo	($at,$t0,$a3)
+	mfhi	($t0,$t0,$a3)
+	$ADDU	$v0,$at
+	sltu	$t1,$v0,$at
+	$ST	$v0,$BNSZ($a0)
+	$ADDU	$v0,$t1,$t0
+	beqz	$a2,.L_bn_mul_words_return
+
+	$LD	$t0,2*$BNSZ($a1)
+	$MULTU	($t0,$a3)
+	mflo	($at,$t0,$a3)
+	mfhi	($t0,$t0,$a3)
+	$ADDU	$v0,$at
+	sltu	$t1,$v0,$at
+	$ST	$v0,2*$BNSZ($a0)
+	$ADDU	$v0,$t1,$t0
+
+.L_bn_mul_words_return:
+	.set	noreorder
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	$t3,4*$SZREG($sp)
+	$REG_L	$t2,3*$SZREG($sp)
+	$REG_L	$t1,2*$SZREG($sp)
+	$REG_L	$t0,1*$SZREG($sp)
+	$REG_L	$gp,0*$SZREG($sp)
+	$PTR_ADD $sp,6*$SZREG
+___
+$code.=<<___;
+	jr	$ra
+	move	$a0,$v0
+.end	bn_mul_words_internal
+
+.align	5
+.globl	bn_sqr_words
+.ent	bn_sqr_words
+bn_sqr_words:
+	.set	noreorder
+	bgtz	$a2,bn_sqr_words_internal
+	move	$v0,$zero
+	jr	$ra
+	move	$a0,$v0
+.end	bn_sqr_words
+
+.align	5
+.ent	bn_sqr_words_internal
+bn_sqr_words_internal:
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	.frame	$sp,6*$SZREG,$ra
+	.mask	0x8000f008,-$SZREG
+	.set	noreorder
+	$PTR_SUB $sp,6*$SZREG
+	$REG_S	$ra,5*$SZREG($sp)
+	$REG_S	$t3,4*$SZREG($sp)
+	$REG_S	$t2,3*$SZREG($sp)
+	$REG_S	$t1,2*$SZREG($sp)
+	$REG_S	$t0,1*$SZREG($sp)
+	$REG_S	$gp,0*$SZREG($sp)
+___
+$code.=<<___;
+	.set	reorder
+	li	$minus4,-4
+	and	$ta0,$a2,$minus4
+	beqz	$ta0,.L_bn_sqr_words_tail
+
+.L_bn_sqr_words_loop:
+	$LD	$t0,0($a1)
+	$MULTU	($t0,$t0)
+	$LD	$t2,$BNSZ($a1)
+	$LD	$ta0,2*$BNSZ($a1)
+	$LD	$ta2,3*$BNSZ($a1)
+	mflo	($t1,$t0,$t0)
+	mfhi	($t0,$t0,$t0)
+	$ST	$t1,0($a0)
+	$ST	$t0,$BNSZ($a0)
+
+	$MULTU	($t2,$t2)
+	subu	$a2,4
+	$PTR_ADD $a0,8*$BNSZ
+	$PTR_ADD $a1,4*$BNSZ
+	mflo	($t3,$t2,$t2)
+	mfhi	($t2,$t2,$t2)
+	$ST	$t3,-6*$BNSZ($a0)
+	$ST	$t2,-5*$BNSZ($a0)
+
+	$MULTU	($ta0,$ta0)
+	mflo	($ta1,$ta0,$ta0)
+	mfhi	($ta0,$ta0,$ta0)
+	$ST	$ta1,-4*$BNSZ($a0)
+	$ST	$ta0,-3*$BNSZ($a0)
+
+
+	$MULTU	($ta2,$ta2)
+	and	$ta0,$a2,$minus4
+	mflo	($ta3,$ta2,$ta2)
+	mfhi	($ta2,$ta2,$ta2)
+	$ST	$ta3,-2*$BNSZ($a0)
+
+	.set	noreorder
+	bgtz	$ta0,.L_bn_sqr_words_loop
+	$ST	$ta2,-$BNSZ($a0)
+
+	beqz	$a2,.L_bn_sqr_words_return
+	nop
+
+.L_bn_sqr_words_tail:
+	.set	reorder
+	$LD	$t0,0($a1)
+	$MULTU	($t0,$t0)
+	subu	$a2,1
+	mflo	($t1,$t0,$t0)
+	mfhi	($t0,$t0,$t0)
+	$ST	$t1,0($a0)
+	$ST	$t0,$BNSZ($a0)
+	beqz	$a2,.L_bn_sqr_words_return
+
+	$LD	$t0,$BNSZ($a1)
+	$MULTU	($t0,$t0)
+	subu	$a2,1
+	mflo	($t1,$t0,$t0)
+	mfhi	($t0,$t0,$t0)
+	$ST	$t1,2*$BNSZ($a0)
+	$ST	$t0,3*$BNSZ($a0)
+	beqz	$a2,.L_bn_sqr_words_return
+
+	$LD	$t0,2*$BNSZ($a1)
+	$MULTU	($t0,$t0)
+	mflo	($t1,$t0,$t0)
+	mfhi	($t0,$t0,$t0)
+	$ST	$t1,4*$BNSZ($a0)
+	$ST	$t0,5*$BNSZ($a0)
+
+.L_bn_sqr_words_return:
+	.set	noreorder
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	$t3,4*$SZREG($sp)
+	$REG_L	$t2,3*$SZREG($sp)
+	$REG_L	$t1,2*$SZREG($sp)
+	$REG_L	$t0,1*$SZREG($sp)
+	$REG_L	$gp,0*$SZREG($sp)
+	$PTR_ADD $sp,6*$SZREG
+___
+$code.=<<___;
+	jr	$ra
+	move	$a0,$v0
+
+.end	bn_sqr_words_internal
+
+.align	5
+.globl	bn_add_words
+.ent	bn_add_words
+bn_add_words:
+	.set	noreorder
+	bgtz	$a3,bn_add_words_internal
+	move	$v0,$zero
+	jr	$ra
+	move	$a0,$v0
+.end	bn_add_words
+
+.align	5
+.ent	bn_add_words_internal
+bn_add_words_internal:
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	.frame	$sp,6*$SZREG,$ra
+	.mask	0x8000f008,-$SZREG
+	.set	noreorder
+	$PTR_SUB $sp,6*$SZREG
+	$REG_S	$ra,5*$SZREG($sp)
+	$REG_S	$t3,4*$SZREG($sp)
+	$REG_S	$t2,3*$SZREG($sp)
+	$REG_S	$t1,2*$SZREG($sp)
+	$REG_S	$t0,1*$SZREG($sp)
+	$REG_S	$gp,0*$SZREG($sp)
+___
+$code.=<<___;
+	.set	reorder
+	li	$minus4,-4
+	and	$at,$a3,$minus4
+	beqz	$at,.L_bn_add_words_tail
+
+.L_bn_add_words_loop:
+	$LD	$t0,0($a1)
+	$LD	$ta0,0($a2)
+	subu	$a3,4
+	$LD	$t1,$BNSZ($a1)
+	and	$at,$a3,$minus4
+	$LD	$t2,2*$BNSZ($a1)
+	$PTR_ADD $a2,4*$BNSZ
+	$LD	$t3,3*$BNSZ($a1)
+	$PTR_ADD $a0,4*$BNSZ
+	$LD	$ta1,-3*$BNSZ($a2)
+	$PTR_ADD $a1,4*$BNSZ
+	$LD	$ta2,-2*$BNSZ($a2)
+	$LD	$ta3,-$BNSZ($a2)
+	$ADDU	$ta0,$t0
+	sltu	$t8,$ta0,$t0
+	$ADDU	$t0,$ta0,$v0
+	sltu	$v0,$t0,$ta0
+	$ST	$t0,-4*$BNSZ($a0)
+	$ADDU	$v0,$t8
+
+	$ADDU	$ta1,$t1
+	sltu	$t9,$ta1,$t1
+	$ADDU	$t1,$ta1,$v0
+	sltu	$v0,$t1,$ta1
+	$ST	$t1,-3*$BNSZ($a0)
+	$ADDU	$v0,$t9
+
+	$ADDU	$ta2,$t2
+	sltu	$t8,$ta2,$t2
+	$ADDU	$t2,$ta2,$v0
+	sltu	$v0,$t2,$ta2
+	$ST	$t2,-2*$BNSZ($a0)
+	$ADDU	$v0,$t8
+
+	$ADDU	$ta3,$t3
+	sltu	$t9,$ta3,$t3
+	$ADDU	$t3,$ta3,$v0
+	sltu	$v0,$t3,$ta3
+	$ST	$t3,-$BNSZ($a0)
+
+	.set	noreorder
+	bgtz	$at,.L_bn_add_words_loop
+	$ADDU	$v0,$t9
+
+	beqz	$a3,.L_bn_add_words_return
+	nop
+
+.L_bn_add_words_tail:
+	.set	reorder
+	$LD	$t0,0($a1)
+	$LD	$ta0,0($a2)
+	$ADDU	$ta0,$t0
+	subu	$a3,1
+	sltu	$t8,$ta0,$t0
+	$ADDU	$t0,$ta0,$v0
+	sltu	$v0,$t0,$ta0
+	$ST	$t0,0($a0)
+	$ADDU	$v0,$t8
+	beqz	$a3,.L_bn_add_words_return
+
+	$LD	$t1,$BNSZ($a1)
+	$LD	$ta1,$BNSZ($a2)
+	$ADDU	$ta1,$t1
+	subu	$a3,1
+	sltu	$t9,$ta1,$t1
+	$ADDU	$t1,$ta1,$v0
+	sltu	$v0,$t1,$ta1
+	$ST	$t1,$BNSZ($a0)
+	$ADDU	$v0,$t9
+	beqz	$a3,.L_bn_add_words_return
+
+	$LD	$t2,2*$BNSZ($a1)
+	$LD	$ta2,2*$BNSZ($a2)
+	$ADDU	$ta2,$t2
+	sltu	$t8,$ta2,$t2
+	$ADDU	$t2,$ta2,$v0
+	sltu	$v0,$t2,$ta2
+	$ST	$t2,2*$BNSZ($a0)
+	$ADDU	$v0,$t8
+
+.L_bn_add_words_return:
+	.set	noreorder
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	$t3,4*$SZREG($sp)
+	$REG_L	$t2,3*$SZREG($sp)
+	$REG_L	$t1,2*$SZREG($sp)
+	$REG_L	$t0,1*$SZREG($sp)
+	$REG_L	$gp,0*$SZREG($sp)
+	$PTR_ADD $sp,6*$SZREG
+___
+$code.=<<___;
+	jr	$ra
+	move	$a0,$v0
+
+.end	bn_add_words_internal
+
+.align	5
+.globl	bn_sub_words
+.ent	bn_sub_words
+bn_sub_words:
+	.set	noreorder
+	bgtz	$a3,bn_sub_words_internal
+	move	$v0,$zero
+	jr	$ra
+	move	$a0,$zero
+.end	bn_sub_words
+
+.align	5
+.ent	bn_sub_words_internal
+bn_sub_words_internal:
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	.frame	$sp,6*$SZREG,$ra
+	.mask	0x8000f008,-$SZREG
+	.set	noreorder
+	$PTR_SUB $sp,6*$SZREG
+	$REG_S	$ra,5*$SZREG($sp)
+	$REG_S	$t3,4*$SZREG($sp)
+	$REG_S	$t2,3*$SZREG($sp)
+	$REG_S	$t1,2*$SZREG($sp)
+	$REG_S	$t0,1*$SZREG($sp)
+	$REG_S	$gp,0*$SZREG($sp)
+___
+$code.=<<___;
+	.set	reorder
+	li	$minus4,-4
+	and	$at,$a3,$minus4
+	beqz	$at,.L_bn_sub_words_tail
+
+.L_bn_sub_words_loop:
+	$LD	$t0,0($a1)
+	$LD	$ta0,0($a2)
+	subu	$a3,4
+	$LD	$t1,$BNSZ($a1)
+	and	$at,$a3,$minus4
+	$LD	$t2,2*$BNSZ($a1)
+	$PTR_ADD $a2,4*$BNSZ
+	$LD	$t3,3*$BNSZ($a1)
+	$PTR_ADD $a0,4*$BNSZ
+	$LD	$ta1,-3*$BNSZ($a2)
+	$PTR_ADD $a1,4*$BNSZ
+	$LD	$ta2,-2*$BNSZ($a2)
+	$LD	$ta3,-$BNSZ($a2)
+	sltu	$t8,$t0,$ta0
+	$SUBU	$ta0,$t0,$ta0
+	$SUBU	$t0,$ta0,$v0
+	sgtu	$v0,$t0,$ta0
+	$ST	$t0,-4*$BNSZ($a0)
+	$ADDU	$v0,$t8
+
+	sltu	$t9,$t1,$ta1
+	$SUBU	$ta1,$t1,$ta1
+	$SUBU	$t1,$ta1,$v0
+	sgtu	$v0,$t1,$ta1
+	$ST	$t1,-3*$BNSZ($a0)
+	$ADDU	$v0,$t9
+
+
+	sltu	$t8,$t2,$ta2
+	$SUBU	$ta2,$t2,$ta2
+	$SUBU	$t2,$ta2,$v0
+	sgtu	$v0,$t2,$ta2
+	$ST	$t2,-2*$BNSZ($a0)
+	$ADDU	$v0,$t8
+
+	sltu	$t9,$t3,$ta3
+	$SUBU	$ta3,$t3,$ta3
+	$SUBU	$t3,$ta3,$v0
+	sgtu	$v0,$t3,$ta3
+	$ST	$t3,-$BNSZ($a0)
+
+	.set	noreorder
+	bgtz	$at,.L_bn_sub_words_loop
+	$ADDU	$v0,$t9
+
+	beqz	$a3,.L_bn_sub_words_return
+	nop
+
+.L_bn_sub_words_tail:
+	.set	reorder
+	$LD	$t0,0($a1)
+	$LD	$ta0,0($a2)
+	subu	$a3,1
+	sltu	$t8,$t0,$ta0
+	$SUBU	$ta0,$t0,$ta0
+	$SUBU	$t0,$ta0,$v0
+	sgtu	$v0,$t0,$ta0
+	$ST	$t0,0($a0)
+	$ADDU	$v0,$t8
+	beqz	$a3,.L_bn_sub_words_return
+
+	$LD	$t1,$BNSZ($a1)
+	subu	$a3,1
+	$LD	$ta1,$BNSZ($a2)
+	sltu	$t9,$t1,$ta1
+	$SUBU	$ta1,$t1,$ta1
+	$SUBU	$t1,$ta1,$v0
+	sgtu	$v0,$t1,$ta1
+	$ST	$t1,$BNSZ($a0)
+	$ADDU	$v0,$t9
+	beqz	$a3,.L_bn_sub_words_return
+
+	$LD	$t2,2*$BNSZ($a1)
+	$LD	$ta2,2*$BNSZ($a2)
+	sltu	$t8,$t2,$ta2
+	$SUBU	$ta2,$t2,$ta2
+	$SUBU	$t2,$ta2,$v0
+	sgtu	$v0,$t2,$ta2
+	$ST	$t2,2*$BNSZ($a0)
+	$ADDU	$v0,$t8
+
+.L_bn_sub_words_return:
+	.set	noreorder
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	$t3,4*$SZREG($sp)
+	$REG_L	$t2,3*$SZREG($sp)
+	$REG_L	$t1,2*$SZREG($sp)
+	$REG_L	$t0,1*$SZREG($sp)
+	$REG_L	$gp,0*$SZREG($sp)
+	$PTR_ADD $sp,6*$SZREG
+___
+$code.=<<___;
+	jr	$ra
+	move	$a0,$v0
+.end	bn_sub_words_internal
+
+#if 0
+/*
+ * The bn_div_3_words entry point is re-used for constant-time interface.
+ * Implementation is retained as hystorical reference.
+ */
+.align 5
+.globl	bn_div_3_words
+.ent	bn_div_3_words
+bn_div_3_words:
+	.set	noreorder
+	move	$a3,$a0		# we know that bn_div_words does not
+				# touch $a3, $ta2, $ta3 and preserves $a2
+				# so that we can save two arguments
+				# and return address in registers
+				# instead of stack:-)
+
+	$LD	$a0,($a3)
+	move	$ta2,$a1
+	bne	$a0,$a2,bn_div_3_words_internal
+	$LD	$a1,-$BNSZ($a3)
+	li	$v0,-1
+	jr	$ra
+	move	$a0,$v0
+.end	bn_div_3_words
+
+.align	5
+.ent	bn_div_3_words_internal
+bn_div_3_words_internal:
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	.frame	$sp,6*$SZREG,$ra
+	.mask	0x8000f008,-$SZREG
+	.set	noreorder
+	$PTR_SUB $sp,6*$SZREG
+	$REG_S	$ra,5*$SZREG($sp)
+	$REG_S	$t3,4*$SZREG($sp)
+	$REG_S	$t2,3*$SZREG($sp)
+	$REG_S	$t1,2*$SZREG($sp)
+	$REG_S	$t0,1*$SZREG($sp)
+	$REG_S	$gp,0*$SZREG($sp)
+___
+$code.=<<___;
+	.set	reorder
+	move	$ta3,$ra
+	bal	bn_div_words_internal
+	move	$ra,$ta3
+	$MULTU	($ta2,$v0)
+	$LD	$t2,-2*$BNSZ($a3)
+	move	$ta0,$zero
+	mfhi	($t1,$ta2,$v0)
+	mflo	($t0,$ta2,$v0)
+	sltu	$t8,$t1,$a1
+.L_bn_div_3_words_inner_loop:
+	bnez	$t8,.L_bn_div_3_words_inner_loop_done
+	sgeu	$at,$t2,$t0
+	seq	$t9,$t1,$a1
+	and	$at,$t9
+	sltu	$t3,$t0,$ta2
+	$ADDU	$a1,$a2
+	$SUBU	$t1,$t3
+	$SUBU	$t0,$ta2
+	sltu	$t8,$t1,$a1
+	sltu	$ta0,$a1,$a2
+	or	$t8,$ta0
+	.set	noreorder
+	beqz	$at,.L_bn_div_3_words_inner_loop
+	$SUBU	$v0,1
+	$ADDU	$v0,1
+	.set	reorder
+.L_bn_div_3_words_inner_loop_done:
+	.set	noreorder
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	$t3,4*$SZREG($sp)
+	$REG_L	$t2,3*$SZREG($sp)
+	$REG_L	$t1,2*$SZREG($sp)
+	$REG_L	$t0,1*$SZREG($sp)
+	$REG_L	$gp,0*$SZREG($sp)
+	$PTR_ADD $sp,6*$SZREG
+___
+$code.=<<___;
+	jr	$ra
+	move	$a0,$v0
+.end	bn_div_3_words_internal
+#endif
+
+.align	5
+.globl	bn_div_words
+.ent	bn_div_words
+bn_div_words:
+	.set	noreorder
+	bnez	$a2,bn_div_words_internal
+	li	$v0,-1		# I would rather signal div-by-zero
+				# which can be done with 'break 7'
+	jr	$ra
+	move	$a0,$v0
+.end	bn_div_words
+
+.align	5
+.ent	bn_div_words_internal
+bn_div_words_internal:
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	.frame	$sp,6*$SZREG,$ra
+	.mask	0x8000f008,-$SZREG
+	.set	noreorder
+	$PTR_SUB $sp,6*$SZREG
+	$REG_S	$ra,5*$SZREG($sp)
+	$REG_S	$t3,4*$SZREG($sp)
+	$REG_S	$t2,3*$SZREG($sp)
+	$REG_S	$t1,2*$SZREG($sp)
+	$REG_S	$t0,1*$SZREG($sp)
+	$REG_S	$gp,0*$SZREG($sp)
+___
+$code.=<<___;
+	move	$v1,$zero
+	bltz	$a2,.L_bn_div_words_body
+	move	$t9,$v1
+	$SLL	$a2,1
+	bgtz	$a2,.-4
+	addu	$t9,1
+
+	.set	reorder
+	negu	$t1,$t9
+	li	$t2,-1
+	$SLL	$t2,$t1
+	and	$t2,$a0
+	$SRL	$at,$a1,$t1
+	.set	noreorder
+	beqz	$t2,.+12
+	nop
+	break	6		# signal overflow
+	.set	reorder
+	$SLL	$a0,$t9
+	$SLL	$a1,$t9
+	or	$a0,$at
+___
+$QT=$ta0;
+$HH=$ta1;
+$DH=$v1;
+$code.=<<___;
+.L_bn_div_words_body:
+	$SRL	$DH,$a2,4*$BNSZ	# bits
+	sgeu	$at,$a0,$a2
+	.set	noreorder
+	beqz	$at,.+12
+	nop
+	$SUBU	$a0,$a2
+	.set	reorder
+
+	li	$QT,-1
+	$SRL	$HH,$a0,4*$BNSZ	# bits
+	$SRL	$QT,4*$BNSZ	# q=0xffffffff
+	beq	$DH,$HH,.L_bn_div_words_skip_div1
+	$DIVU	($a0,$DH)
+	mfqt	($QT,$a0,$DH)
+.L_bn_div_words_skip_div1:
+	$MULTU	($a2,$QT)
+	$SLL	$t3,$a0,4*$BNSZ	# bits
+	$SRL	$at,$a1,4*$BNSZ	# bits
+	or	$t3,$at
+	mflo	($t0,$a2,$QT)
+	mfhi	($t1,$a2,$QT)
+.L_bn_div_words_inner_loop1:
+	sltu	$t2,$t3,$t0
+	seq	$t8,$HH,$t1
+	sltu	$at,$HH,$t1
+	and	$t2,$t8
+	sltu	$v0,$t0,$a2
+	or	$at,$t2
+	.set	noreorder
+	beqz	$at,.L_bn_div_words_inner_loop1_done
+	$SUBU	$t1,$v0
+	$SUBU	$t0,$a2
+	b	.L_bn_div_words_inner_loop1
+	$SUBU	$QT,1
+	.set	reorder
+.L_bn_div_words_inner_loop1_done:
+
+	$SLL	$a1,4*$BNSZ	# bits
+	$SUBU	$a0,$t3,$t0
+	$SLL	$v0,$QT,4*$BNSZ	# bits
+
+	li	$QT,-1
+	$SRL	$HH,$a0,4*$BNSZ	# bits
+	$SRL	$QT,4*$BNSZ	# q=0xffffffff
+	beq	$DH,$HH,.L_bn_div_words_skip_div2
+	$DIVU	($a0,$DH)
+	mfqt	($QT,$a0,$DH)
+.L_bn_div_words_skip_div2:
+	$MULTU	($a2,$QT)
+	$SLL	$t3,$a0,4*$BNSZ	# bits
+	$SRL	$at,$a1,4*$BNSZ	# bits
+	or	$t3,$at
+	mflo	($t0,$a2,$QT)
+	mfhi	($t1,$a2,$QT)
+.L_bn_div_words_inner_loop2:
+	sltu	$t2,$t3,$t0
+	seq	$t8,$HH,$t1
+	sltu	$at,$HH,$t1
+	and	$t2,$t8
+	sltu	$v1,$t0,$a2
+	or	$at,$t2
+	.set	noreorder
+	beqz	$at,.L_bn_div_words_inner_loop2_done
+	$SUBU	$t1,$v1
+	$SUBU	$t0,$a2
+	b	.L_bn_div_words_inner_loop2
+	$SUBU	$QT,1
+	.set	reorder
+.L_bn_div_words_inner_loop2_done:
+
+	$SUBU	$a0,$t3,$t0
+	or	$v0,$QT
+	$SRL	$v1,$a0,$t9	# $v1 contains remainder if anybody wants it
+	$SRL	$a2,$t9		# restore $a2
+
+	.set	noreorder
+	move	$a1,$v1
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	$t3,4*$SZREG($sp)
+	$REG_L	$t2,3*$SZREG($sp)
+	$REG_L	$t1,2*$SZREG($sp)
+	$REG_L	$t0,1*$SZREG($sp)
+	$REG_L	$gp,0*$SZREG($sp)
+	$PTR_ADD $sp,6*$SZREG
+___
+$code.=<<___;
+	jr	$ra
+	move	$a0,$v0
+.end	bn_div_words_internal
+___
+undef $HH; undef $QT; undef $DH;
+
+($a_0,$a_1,$a_2,$a_3)=($t0,$t1,$t2,$t3);
+($b_0,$b_1,$b_2,$b_3)=($ta0,$ta1,$ta2,$ta3);
+
+($a_4,$a_5,$a_6,$a_7)=($s0,$s2,$s4,$a1); # once we load a[7], no use for $a1
+($b_4,$b_5,$b_6,$b_7)=($s1,$s3,$s5,$a2); # once we load b[7], no use for $a2
+
+($t_1,$t_2,$c_1,$c_2,$c_3)=($t8,$t9,$v0,$v1,$a3);
+
+$code.=<<___;
+
+.align	5
+.globl	bn_mul_comba8
+.ent	bn_mul_comba8
+bn_mul_comba8:
+	.set	noreorder
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	.frame	$sp,12*$SZREG,$ra
+	.mask	0x803ff008,-$SZREG
+	$PTR_SUB $sp,12*$SZREG
+	$REG_S	$ra,11*$SZREG($sp)
+	$REG_S	$s5,10*$SZREG($sp)
+	$REG_S	$s4,9*$SZREG($sp)
+	$REG_S	$s3,8*$SZREG($sp)
+	$REG_S	$s2,7*$SZREG($sp)
+	$REG_S	$s1,6*$SZREG($sp)
+	$REG_S	$s0,5*$SZREG($sp)
+	$REG_S	$t3,4*$SZREG($sp)
+	$REG_S	$t2,3*$SZREG($sp)
+	$REG_S	$t1,2*$SZREG($sp)
+	$REG_S	$t0,1*$SZREG($sp)
+	$REG_S	$gp,0*$SZREG($sp)
+___
+$code.=<<___ if ($flavour !~ /nubi/i);
+	.frame	$sp,6*$SZREG,$ra
+	.mask	0x003f0000,-$SZREG
+	$PTR_SUB $sp,6*$SZREG
+	$REG_S	$s5,5*$SZREG($sp)
+	$REG_S	$s4,4*$SZREG($sp)
+	$REG_S	$s3,3*$SZREG($sp)
+	$REG_S	$s2,2*$SZREG($sp)
+	$REG_S	$s1,1*$SZREG($sp)
+	$REG_S	$s0,0*$SZREG($sp)
+___
+$code.=<<___;
+
+	.set	reorder
+	$LD	$a_0,0($a1)	# If compiled with -mips3 option on
+				# R5000 box assembler barks on this
+				# 1ine with "should not have mult/div
+				# as last instruction in bb (R10K
+				# bug)" warning. If anybody out there
+				# has a clue about how to circumvent
+				# this do send me a note.
+				#		<appro\@fy.chalmers.se>
+
+	$LD	$b_0,0($a2)
+	$LD	$a_1,$BNSZ($a1)
+	$LD	$a_2,2*$BNSZ($a1)
+	$MULTU	($a_0,$b_0)		# mul_add_c(a[0],b[0],c1,c2,c3);
+	$LD	$a_3,3*$BNSZ($a1)
+	$LD	$b_1,$BNSZ($a2)
+	$LD	$b_2,2*$BNSZ($a2)
+	$LD	$b_3,3*$BNSZ($a2)
+	mflo	($c_1,$a_0,$b_0)
+	mfhi	($c_2,$a_0,$b_0)
+
+	$LD	$a_4,4*$BNSZ($a1)
+	$LD	$a_5,5*$BNSZ($a1)
+	$MULTU	($a_0,$b_1)		# mul_add_c(a[0],b[1],c2,c3,c1);
+	$LD	$a_6,6*$BNSZ($a1)
+	$LD	$a_7,7*$BNSZ($a1)
+	$LD	$b_4,4*$BNSZ($a2)
+	$LD	$b_5,5*$BNSZ($a2)
+	mflo	($t_1,$a_0,$b_1)
+	mfhi	($t_2,$a_0,$b_1)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_1,$b_0)		# mul_add_c(a[1],b[0],c2,c3,c1);
+	$ADDU	$c_3,$t_2,$at
+	$LD	$b_6,6*$BNSZ($a2)
+	$LD	$b_7,7*$BNSZ($a2)
+	$ST	$c_1,0($a0)	# r[0]=c1;
+	mflo	($t_1,$a_1,$b_0)
+	mfhi	($t_2,$a_1,$b_0)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	 $MULTU	($a_2,$b_0)		# mul_add_c(a[2],b[0],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$c_1,$c_3,$t_2
+	$ST	$c_2,$BNSZ($a0)	# r[1]=c2;
+
+	mflo	($t_1,$a_2,$b_0)
+	mfhi	($t_2,$a_2,$b_0)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_1,$b_1)		# mul_add_c(a[1],b[1],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	mflo	($t_1,$a_1,$b_1)
+	mfhi	($t_2,$a_1,$b_1)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_0,$b_2)		# mul_add_c(a[0],b[2],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$c_2,$c_1,$t_2
+	mflo	($t_1,$a_0,$b_2)
+	mfhi	($t_2,$a_0,$b_2)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	 $MULTU	($a_0,$b_3)		# mul_add_c(a[0],b[3],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	$ST	$c_3,2*$BNSZ($a0)	# r[2]=c3;
+
+	mflo	($t_1,$a_0,$b_3)
+	mfhi	($t_2,$a_0,$b_3)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_1,$b_2)		# mul_add_c(a[1],b[2],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$c_3,$c_2,$t_2
+	mflo	($t_1,$a_1,$b_2)
+	mfhi	($t_2,$a_1,$b_2)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_2,$b_1)		# mul_add_c(a[2],b[1],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	mflo	($t_1,$a_2,$b_1)
+	mfhi	($t_2,$a_2,$b_1)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_3,$b_0)		# mul_add_c(a[3],b[0],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	mflo	($t_1,$a_3,$b_0)
+	mfhi	($t_2,$a_3,$b_0)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	 $MULTU	($a_4,$b_0)		# mul_add_c(a[4],b[0],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	$ST	$c_1,3*$BNSZ($a0)	# r[3]=c1;
+
+	mflo	($t_1,$a_4,$b_0)
+	mfhi	($t_2,$a_4,$b_0)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_3,$b_1)		# mul_add_c(a[3],b[1],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$c_1,$c_3,$t_2
+	mflo	($t_1,$a_3,$b_1)
+	mfhi	($t_2,$a_3,$b_1)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_2,$b_2)		# mul_add_c(a[2],b[2],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	mflo	($t_1,$a_2,$b_2)
+	mfhi	($t_2,$a_2,$b_2)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_1,$b_3)		# mul_add_c(a[1],b[3],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	mflo	($t_1,$a_1,$b_3)
+	mfhi	($t_2,$a_1,$b_3)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_0,$b_4)		# mul_add_c(a[0],b[4],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	mflo	($t_1,$a_0,$b_4)
+	mfhi	($t_2,$a_0,$b_4)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	 $MULTU	($a_0,$b_5)		# mul_add_c(a[0],b[5],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	$ST	$c_2,4*$BNSZ($a0)	# r[4]=c2;
+
+	mflo	($t_1,$a_0,$b_5)
+	mfhi	($t_2,$a_0,$b_5)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_1,$b_4)		# mul_add_c(a[1],b[4],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$c_2,$c_1,$t_2
+	mflo	($t_1,$a_1,$b_4)
+	mfhi	($t_2,$a_1,$b_4)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_2,$b_3)		# mul_add_c(a[2],b[3],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	mflo	($t_1,$a_2,$b_3)
+	mfhi	($t_2,$a_2,$b_3)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_3,$b_2)		# mul_add_c(a[3],b[2],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	mflo	($t_1,$a_3,$b_2)
+	mfhi	($t_2,$a_3,$b_2)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_4,$b_1)		# mul_add_c(a[4],b[1],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	mflo	($t_1,$a_4,$b_1)
+	mfhi	($t_2,$a_4,$b_1)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_5,$b_0)		# mul_add_c(a[5],b[0],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	mflo	($t_1,$a_5,$b_0)
+	mfhi	($t_2,$a_5,$b_0)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	 $MULTU	($a_6,$b_0)		# mul_add_c(a[6],b[0],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	$ST	$c_3,5*$BNSZ($a0)	# r[5]=c3;
+
+	mflo	($t_1,$a_6,$b_0)
+	mfhi	($t_2,$a_6,$b_0)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_5,$b_1)		# mul_add_c(a[5],b[1],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$c_3,$c_2,$t_2
+	mflo	($t_1,$a_5,$b_1)
+	mfhi	($t_2,$a_5,$b_1)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_4,$b_2)		# mul_add_c(a[4],b[2],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	mflo	($t_1,$a_4,$b_2)
+	mfhi	($t_2,$a_4,$b_2)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_3,$b_3)		# mul_add_c(a[3],b[3],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	mflo	($t_1,$a_3,$b_3)
+	mfhi	($t_2,$a_3,$b_3)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_2,$b_4)		# mul_add_c(a[2],b[4],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	mflo	($t_1,$a_2,$b_4)
+	mfhi	($t_2,$a_2,$b_4)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_1,$b_5)		# mul_add_c(a[1],b[5],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	mflo	($t_1,$a_1,$b_5)
+	mfhi	($t_2,$a_1,$b_5)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_0,$b_6)		# mul_add_c(a[0],b[6],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	mflo	($t_1,$a_0,$b_6)
+	mfhi	($t_2,$a_0,$b_6)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	 $MULTU	($a_0,$b_7)		# mul_add_c(a[0],b[7],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	$ST	$c_1,6*$BNSZ($a0)	# r[6]=c1;
+
+	mflo	($t_1,$a_0,$b_7)
+	mfhi	($t_2,$a_0,$b_7)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_1,$b_6)		# mul_add_c(a[1],b[6],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$c_1,$c_3,$t_2
+	mflo	($t_1,$a_1,$b_6)
+	mfhi	($t_2,$a_1,$b_6)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_2,$b_5)		# mul_add_c(a[2],b[5],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	mflo	($t_1,$a_2,$b_5)
+	mfhi	($t_2,$a_2,$b_5)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_3,$b_4)		# mul_add_c(a[3],b[4],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	mflo	($t_1,$a_3,$b_4)
+	mfhi	($t_2,$a_3,$b_4)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_4,$b_3)		# mul_add_c(a[4],b[3],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	mflo	($t_1,$a_4,$b_3)
+	mfhi	($t_2,$a_4,$b_3)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_5,$b_2)		# mul_add_c(a[5],b[2],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	mflo	($t_1,$a_5,$b_2)
+	mfhi	($t_2,$a_5,$b_2)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_6,$b_1)		# mul_add_c(a[6],b[1],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	mflo	($t_1,$a_6,$b_1)
+	mfhi	($t_2,$a_6,$b_1)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_7,$b_0)		# mul_add_c(a[7],b[0],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	mflo	($t_1,$a_7,$b_0)
+	mfhi	($t_2,$a_7,$b_0)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	 $MULTU	($a_7,$b_1)		# mul_add_c(a[7],b[1],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	$ST	$c_2,7*$BNSZ($a0)	# r[7]=c2;
+
+	mflo	($t_1,$a_7,$b_1)
+	mfhi	($t_2,$a_7,$b_1)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_6,$b_2)		# mul_add_c(a[6],b[2],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$c_2,$c_1,$t_2
+	mflo	($t_1,$a_6,$b_2)
+	mfhi	($t_2,$a_6,$b_2)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_5,$b_3)		# mul_add_c(a[5],b[3],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	mflo	($t_1,$a_5,$b_3)
+	mfhi	($t_2,$a_5,$b_3)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_4,$b_4)		# mul_add_c(a[4],b[4],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	mflo	($t_1,$a_4,$b_4)
+	mfhi	($t_2,$a_4,$b_4)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_3,$b_5)		# mul_add_c(a[3],b[5],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	mflo	($t_1,$a_3,$b_5)
+	mfhi	($t_2,$a_3,$b_5)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_2,$b_6)		# mul_add_c(a[2],b[6],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	mflo	($t_1,$a_2,$b_6)
+	mfhi	($t_2,$a_2,$b_6)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_1,$b_7)		# mul_add_c(a[1],b[7],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	mflo	($t_1,$a_1,$b_7)
+	mfhi	($t_2,$a_1,$b_7)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	 $MULTU	($a_2,$b_7)		# mul_add_c(a[2],b[7],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	$ST	$c_3,8*$BNSZ($a0)	# r[8]=c3;
+
+	mflo	($t_1,$a_2,$b_7)
+	mfhi	($t_2,$a_2,$b_7)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_3,$b_6)		# mul_add_c(a[3],b[6],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$c_3,$c_2,$t_2
+	mflo	($t_1,$a_3,$b_6)
+	mfhi	($t_2,$a_3,$b_6)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_4,$b_5)		# mul_add_c(a[4],b[5],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	mflo	($t_1,$a_4,$b_5)
+	mfhi	($t_2,$a_4,$b_5)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_5,$b_4)		# mul_add_c(a[5],b[4],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	mflo	($t_1,$a_5,$b_4)
+	mfhi	($t_2,$a_5,$b_4)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_6,$b_3)		# mul_add_c(a[6],b[3],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	mflo	($t_1,$a_6,$b_3)
+	mfhi	($t_2,$a_6,$b_3)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_7,$b_2)		# mul_add_c(a[7],b[2],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	mflo	($t_1,$a_7,$b_2)
+	mfhi	($t_2,$a_7,$b_2)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	 $MULTU	($a_7,$b_3)		# mul_add_c(a[7],b[3],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	$ST	$c_1,9*$BNSZ($a0)	# r[9]=c1;
+
+	mflo	($t_1,$a_7,$b_3)
+	mfhi	($t_2,$a_7,$b_3)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_6,$b_4)		# mul_add_c(a[6],b[4],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$c_1,$c_3,$t_2
+	mflo	($t_1,$a_6,$b_4)
+	mfhi	($t_2,$a_6,$b_4)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_5,$b_5)		# mul_add_c(a[5],b[5],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	mflo	($t_1,$a_5,$b_5)
+	mfhi	($t_2,$a_5,$b_5)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_4,$b_6)		# mul_add_c(a[4],b[6],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	mflo	($t_1,$a_4,$b_6)
+	mfhi	($t_2,$a_4,$b_6)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_3,$b_7)		# mul_add_c(a[3],b[7],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	mflo	($t_1,$a_3,$b_7)
+	mfhi	($t_2,$a_3,$b_7)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_4,$b_7)		# mul_add_c(a[4],b[7],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	$ST	$c_2,10*$BNSZ($a0)	# r[10]=c2;
+
+	mflo	($t_1,$a_4,$b_7)
+	mfhi	($t_2,$a_4,$b_7)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_5,$b_6)		# mul_add_c(a[5],b[6],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$c_2,$c_1,$t_2
+	mflo	($t_1,$a_5,$b_6)
+	mfhi	($t_2,$a_5,$b_6)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_6,$b_5)		# mul_add_c(a[6],b[5],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	mflo	($t_1,$a_6,$b_5)
+	mfhi	($t_2,$a_6,$b_5)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_7,$b_4)		# mul_add_c(a[7],b[4],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	mflo	($t_1,$a_7,$b_4)
+	mfhi	($t_2,$a_7,$b_4)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	 $MULTU	($a_7,$b_5)		# mul_add_c(a[7],b[5],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	$ST	$c_3,11*$BNSZ($a0)	# r[11]=c3;
+
+	mflo	($t_1,$a_7,$b_5)
+	mfhi	($t_2,$a_7,$b_5)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_6,$b_6)		# mul_add_c(a[6],b[6],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$c_3,$c_2,$t_2
+	mflo	($t_1,$a_6,$b_6)
+	mfhi	($t_2,$a_6,$b_6)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_5,$b_7)		# mul_add_c(a[5],b[7],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	mflo	($t_1,$a_5,$b_7)
+	mfhi	($t_2,$a_5,$b_7)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	 $MULTU	($a_6,$b_7)		# mul_add_c(a[6],b[7],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	$ST	$c_1,12*$BNSZ($a0)	# r[12]=c1;
+
+	mflo	($t_1,$a_6,$b_7)
+	mfhi	($t_2,$a_6,$b_7)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_7,$b_6)		# mul_add_c(a[7],b[6],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$c_1,$c_3,$t_2
+	mflo	($t_1,$a_7,$b_6)
+	mfhi	($t_2,$a_7,$b_6)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_7,$b_7)		# mul_add_c(a[7],b[7],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	$ST	$c_2,13*$BNSZ($a0)	# r[13]=c2;
+
+	mflo	($t_1,$a_7,$b_7)
+	mfhi	($t_2,$a_7,$b_7)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	$ST	$c_3,14*$BNSZ($a0)	# r[14]=c3;
+	$ST	$c_1,15*$BNSZ($a0)	# r[15]=c1;
+
+	.set	noreorder
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	$s5,10*$SZREG($sp)
+	$REG_L	$s4,9*$SZREG($sp)
+	$REG_L	$s3,8*$SZREG($sp)
+	$REG_L	$s2,7*$SZREG($sp)
+	$REG_L	$s1,6*$SZREG($sp)
+	$REG_L	$s0,5*$SZREG($sp)
+	$REG_L	$t3,4*$SZREG($sp)
+	$REG_L	$t2,3*$SZREG($sp)
+	$REG_L	$t1,2*$SZREG($sp)
+	$REG_L	$t0,1*$SZREG($sp)
+	$REG_L	$gp,0*$SZREG($sp)
+	jr	$ra
+	$PTR_ADD $sp,12*$SZREG
+___
+$code.=<<___ if ($flavour !~ /nubi/i);
+	$REG_L	$s5,5*$SZREG($sp)
+	$REG_L	$s4,4*$SZREG($sp)
+	$REG_L	$s3,3*$SZREG($sp)
+	$REG_L	$s2,2*$SZREG($sp)
+	$REG_L	$s1,1*$SZREG($sp)
+	$REG_L	$s0,0*$SZREG($sp)
+	jr	$ra
+	$PTR_ADD $sp,6*$SZREG
+___
+$code.=<<___;
+.end	bn_mul_comba8
+
+.align	5
+.globl	bn_mul_comba4
+.ent	bn_mul_comba4
+bn_mul_comba4:
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	.frame	$sp,6*$SZREG,$ra
+	.mask	0x8000f008,-$SZREG
+	.set	noreorder
+	$PTR_SUB $sp,6*$SZREG
+	$REG_S	$ra,5*$SZREG($sp)
+	$REG_S	$t3,4*$SZREG($sp)
+	$REG_S	$t2,3*$SZREG($sp)
+	$REG_S	$t1,2*$SZREG($sp)
+	$REG_S	$t0,1*$SZREG($sp)
+	$REG_S	$gp,0*$SZREG($sp)
+___
+$code.=<<___;
+	.set	reorder
+	$LD	$a_0,0($a1)
+	$LD	$b_0,0($a2)
+	$LD	$a_1,$BNSZ($a1)
+	$LD	$a_2,2*$BNSZ($a1)
+	$MULTU	($a_0,$b_0)		# mul_add_c(a[0],b[0],c1,c2,c3);
+	$LD	$a_3,3*$BNSZ($a1)
+	$LD	$b_1,$BNSZ($a2)
+	$LD	$b_2,2*$BNSZ($a2)
+	$LD	$b_3,3*$BNSZ($a2)
+	mflo	($c_1,$a_0,$b_0)
+	mfhi	($c_2,$a_0,$b_0)
+	$ST	$c_1,0($a0)
+
+	$MULTU	($a_0,$b_1)		# mul_add_c(a[0],b[1],c2,c3,c1);
+	mflo	($t_1,$a_0,$b_1)
+	mfhi	($t_2,$a_0,$b_1)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_1,$b_0)		# mul_add_c(a[1],b[0],c2,c3,c1);
+	$ADDU	$c_3,$t_2,$at
+	mflo	($t_1,$a_1,$b_0)
+	mfhi	($t_2,$a_1,$b_0)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	 $MULTU	($a_2,$b_0)		# mul_add_c(a[2],b[0],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$c_1,$c_3,$t_2
+	$ST	$c_2,$BNSZ($a0)
+
+	mflo	($t_1,$a_2,$b_0)
+	mfhi	($t_2,$a_2,$b_0)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_1,$b_1)		# mul_add_c(a[1],b[1],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	mflo	($t_1,$a_1,$b_1)
+	mfhi	($t_2,$a_1,$b_1)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_0,$b_2)		# mul_add_c(a[0],b[2],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$c_2,$c_1,$t_2
+	mflo	($t_1,$a_0,$b_2)
+	mfhi	($t_2,$a_0,$b_2)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	 $MULTU	($a_0,$b_3)		# mul_add_c(a[0],b[3],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	$ST	$c_3,2*$BNSZ($a0)
+
+	mflo	($t_1,$a_0,$b_3)
+	mfhi	($t_2,$a_0,$b_3)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_1,$b_2)		# mul_add_c(a[1],b[2],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$c_3,$c_2,$t_2
+	mflo	($t_1,$a_1,$b_2)
+	mfhi	($t_2,$a_1,$b_2)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_2,$b_1)		# mul_add_c(a[2],b[1],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	mflo	($t_1,$a_2,$b_1)
+	mfhi	($t_2,$a_2,$b_1)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$MULTU	($a_3,$b_0)		# mul_add_c(a[3],b[0],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	mflo	($t_1,$a_3,$b_0)
+	mfhi	($t_2,$a_3,$b_0)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	 $MULTU	($a_3,$b_1)		# mul_add_c(a[3],b[1],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	$ST	$c_1,3*$BNSZ($a0)
+
+	mflo	($t_1,$a_3,$b_1)
+	mfhi	($t_2,$a_3,$b_1)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_2,$b_2)		# mul_add_c(a[2],b[2],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$c_1,$c_3,$t_2
+	mflo	($t_1,$a_2,$b_2)
+	mfhi	($t_2,$a_2,$b_2)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$MULTU	($a_1,$b_3)		# mul_add_c(a[1],b[3],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	mflo	($t_1,$a_1,$b_3)
+	mfhi	($t_2,$a_1,$b_3)
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	 $MULTU	($a_2,$b_3)		# mul_add_c(a[2],b[3],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	$ST	$c_2,4*$BNSZ($a0)
+
+	mflo	($t_1,$a_2,$b_3)
+	mfhi	($t_2,$a_2,$b_3)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$MULTU	($a_3,$b_2)		# mul_add_c(a[3],b[2],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$c_2,$c_1,$t_2
+	mflo	($t_1,$a_3,$b_2)
+	mfhi	($t_2,$a_3,$b_2)
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	 $MULTU	($a_3,$b_3)		# mul_add_c(a[3],b[3],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	$ST	$c_3,5*$BNSZ($a0)
+
+	mflo	($t_1,$a_3,$b_3)
+	mfhi	($t_2,$a_3,$b_3)
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	$ST	$c_1,6*$BNSZ($a0)
+	$ST	$c_2,7*$BNSZ($a0)
+
+	.set	noreorder
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	$t3,4*$SZREG($sp)
+	$REG_L	$t2,3*$SZREG($sp)
+	$REG_L	$t1,2*$SZREG($sp)
+	$REG_L	$t0,1*$SZREG($sp)
+	$REG_L	$gp,0*$SZREG($sp)
+	$PTR_ADD $sp,6*$SZREG
+___
+$code.=<<___;
+	jr	$ra
+	nop
+.end	bn_mul_comba4
+___
+
+($a_4,$a_5,$a_6,$a_7)=($b_0,$b_1,$b_2,$b_3);
+
+sub add_c2 () {
+my ($hi,$lo,$c0,$c1,$c2,
+    $warm,      # !$warm denotes first call with specific sequence of
+                # $c_[XYZ] when there is no Z-carry to accumulate yet;
+    $an,$bn     # these two are arguments for multiplication which
+                # result is used in *next* step [which is why it's
+                # commented as "forward multiplication" below];
+    )=@_;
+$code.=<<___;
+	$ADDU	$c0,$lo
+	sltu	$at,$c0,$lo
+	 $MULTU	($an,$bn)		# forward multiplication
+	$ADDU	$c0,$lo
+	$ADDU	$at,$hi
+	sltu	$lo,$c0,$lo
+	$ADDU	$c1,$at
+	$ADDU	$hi,$lo
+___
+$code.=<<___	if (!$warm);
+	sltu	$c2,$c1,$at
+	$ADDU	$c1,$hi
+___
+$code.=<<___	if ($warm);
+	sltu	$at,$c1,$at
+	$ADDU	$c1,$hi
+	$ADDU	$c2,$at
+___
+$code.=<<___;
+	sltu	$hi,$c1,$hi
+	$ADDU	$c2,$hi
+	mflo	($lo,$an,$bn)
+	mfhi	($hi,$an,$bn)
+___
+}
+
+$code.=<<___;
+
+.align	5
+.globl	bn_sqr_comba8
+.ent	bn_sqr_comba8
+bn_sqr_comba8:
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	.frame	$sp,6*$SZREG,$ra
+	.mask	0x8000f008,-$SZREG
+	.set	noreorder
+	$PTR_SUB $sp,6*$SZREG
+	$REG_S	$ra,5*$SZREG($sp)
+	$REG_S	$t3,4*$SZREG($sp)
+	$REG_S	$t2,3*$SZREG($sp)
+	$REG_S	$t1,2*$SZREG($sp)
+	$REG_S	$t0,1*$SZREG($sp)
+	$REG_S	$gp,0*$SZREG($sp)
+___
+$code.=<<___;
+	.set	reorder
+	$LD	$a_0,0($a1)
+	$LD	$a_1,$BNSZ($a1)
+	$LD	$a_2,2*$BNSZ($a1)
+	$LD	$a_3,3*$BNSZ($a1)
+
+	$MULTU	($a_0,$a_0)		# mul_add_c(a[0],b[0],c1,c2,c3);
+	$LD	$a_4,4*$BNSZ($a1)
+	$LD	$a_5,5*$BNSZ($a1)
+	$LD	$a_6,6*$BNSZ($a1)
+	$LD	$a_7,7*$BNSZ($a1)
+	mflo	($c_1,$a_0,$a_0)
+	mfhi	($c_2,$a_0,$a_0)
+	$ST	$c_1,0($a0)
+
+	$MULTU	($a_0,$a_1)		# mul_add_c2(a[0],b[1],c2,c3,c1);
+	mflo	($t_1,$a_0,$a_1)
+	mfhi	($t_2,$a_0,$a_1)
+	slt	$c_1,$t_2,$zero
+	$SLL	$t_2,1
+	 $MULTU	($a_2,$a_0)		# mul_add_c2(a[2],b[0],c3,c1,c2);
+	slt	$a2,$t_1,$zero
+	$ADDU	$t_2,$a2
+	$SLL	$t_1,1
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$ADDU	$c_3,$t_2,$at
+	$ST	$c_2,$BNSZ($a0)
+	mflo	($t_1,$a_2,$a_0)
+	mfhi	($t_2,$a_2,$a_0)
+___
+	&add_c2($t_2,$t_1,$c_3,$c_1,$c_2,0,
+		$a_1,$a_1);		# mul_add_c(a[1],b[1],c3,c1,c2);
+$code.=<<___;
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	 $MULTU	($a_0,$a_3)		# mul_add_c2(a[0],b[3],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	$ST	$c_3,2*$BNSZ($a0)
+	mflo	($t_1,$a_0,$a_3)
+	mfhi	($t_2,$a_0,$a_3)
+___
+	&add_c2($t_2,$t_1,$c_1,$c_2,$c_3,0,
+		$a_1,$a_2);		# mul_add_c2(a[1],b[2],c1,c2,c3);
+	&add_c2($t_2,$t_1,$c_1,$c_2,$c_3,1,
+		$a_4,$a_0);		# mul_add_c2(a[4],b[0],c2,c3,c1);
+$code.=<<___;
+	$ST	$c_1,3*$BNSZ($a0)
+___
+	&add_c2($t_2,$t_1,$c_2,$c_3,$c_1,0,
+		$a_3,$a_1);		# mul_add_c2(a[3],b[1],c2,c3,c1);
+	&add_c2($t_2,$t_1,$c_2,$c_3,$c_1,1,
+		$a_2,$a_2);		# mul_add_c(a[2],b[2],c2,c3,c1);
+$code.=<<___;
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	 $MULTU	($a_0,$a_5)		# mul_add_c2(a[0],b[5],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	$ST	$c_2,4*$BNSZ($a0)
+	mflo	($t_1,$a_0,$a_5)
+	mfhi	($t_2,$a_0,$a_5)
+___
+	&add_c2($t_2,$t_1,$c_3,$c_1,$c_2,0,
+		$a_1,$a_4);		# mul_add_c2(a[1],b[4],c3,c1,c2);
+	&add_c2($t_2,$t_1,$c_3,$c_1,$c_2,1,
+		$a_2,$a_3);		# mul_add_c2(a[2],b[3],c3,c1,c2);
+	&add_c2($t_2,$t_1,$c_3,$c_1,$c_2,1,
+		$a_6,$a_0);		# mul_add_c2(a[6],b[0],c1,c2,c3);
+$code.=<<___;
+	$ST	$c_3,5*$BNSZ($a0)
+___
+	&add_c2($t_2,$t_1,$c_1,$c_2,$c_3,0,
+		$a_5,$a_1);		# mul_add_c2(a[5],b[1],c1,c2,c3);
+	&add_c2($t_2,$t_1,$c_1,$c_2,$c_3,1,
+		$a_4,$a_2);		# mul_add_c2(a[4],b[2],c1,c2,c3);
+	&add_c2($t_2,$t_1,$c_1,$c_2,$c_3,1,
+		$a_3,$a_3);		# mul_add_c(a[3],b[3],c1,c2,c3);
+$code.=<<___;
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	 $MULTU	($a_0,$a_7)		# mul_add_c2(a[0],b[7],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	$ST	$c_1,6*$BNSZ($a0)
+	mflo	($t_1,$a_0,$a_7)
+	mfhi	($t_2,$a_0,$a_7)
+___
+	&add_c2($t_2,$t_1,$c_2,$c_3,$c_1,0,
+		$a_1,$a_6);		# mul_add_c2(a[1],b[6],c2,c3,c1);
+	&add_c2($t_2,$t_1,$c_2,$c_3,$c_1,1,
+		$a_2,$a_5);		# mul_add_c2(a[2],b[5],c2,c3,c1);
+	&add_c2($t_2,$t_1,$c_2,$c_3,$c_1,1,
+		$a_3,$a_4);		# mul_add_c2(a[3],b[4],c2,c3,c1);
+	&add_c2($t_2,$t_1,$c_2,$c_3,$c_1,1,
+		$a_7,$a_1);		# mul_add_c2(a[7],b[1],c3,c1,c2);
+$code.=<<___;
+	$ST	$c_2,7*$BNSZ($a0)
+___
+	&add_c2($t_2,$t_1,$c_3,$c_1,$c_2,0,
+		$a_6,$a_2);		# mul_add_c2(a[6],b[2],c3,c1,c2);
+	&add_c2($t_2,$t_1,$c_3,$c_1,$c_2,1,
+		$a_5,$a_3);		# mul_add_c2(a[5],b[3],c3,c1,c2);
+	&add_c2($t_2,$t_1,$c_3,$c_1,$c_2,1,
+		$a_4,$a_4);		# mul_add_c(a[4],b[4],c3,c1,c2);
+$code.=<<___;
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	 $MULTU	($a_2,$a_7)		# mul_add_c2(a[2],b[7],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	$ST	$c_3,8*$BNSZ($a0)
+	mflo	($t_1,$a_2,$a_7)
+	mfhi	($t_2,$a_2,$a_7)
+___
+	&add_c2($t_2,$t_1,$c_1,$c_2,$c_3,0,
+		$a_3,$a_6);		# mul_add_c2(a[3],b[6],c1,c2,c3);
+	&add_c2($t_2,$t_1,$c_1,$c_2,$c_3,1,
+		$a_4,$a_5);		# mul_add_c2(a[4],b[5],c1,c2,c3);
+	&add_c2($t_2,$t_1,$c_1,$c_2,$c_3,1,
+		$a_7,$a_3);		# mul_add_c2(a[7],b[3],c2,c3,c1);
+$code.=<<___;
+	$ST	$c_1,9*$BNSZ($a0)
+___
+	&add_c2($t_2,$t_1,$c_2,$c_3,$c_1,0,
+		$a_6,$a_4);		# mul_add_c2(a[6],b[4],c2,c3,c1);
+	&add_c2($t_2,$t_1,$c_2,$c_3,$c_1,1,
+		$a_5,$a_5);		# mul_add_c(a[5],b[5],c2,c3,c1);
+$code.=<<___;
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	 $MULTU	($a_4,$a_7)		# mul_add_c2(a[4],b[7],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	$ST	$c_2,10*$BNSZ($a0)
+	mflo	($t_1,$a_4,$a_7)
+	mfhi	($t_2,$a_4,$a_7)
+___
+	&add_c2($t_2,$t_1,$c_3,$c_1,$c_2,0,
+		$a_5,$a_6);		# mul_add_c2(a[5],b[6],c3,c1,c2);
+	&add_c2($t_2,$t_1,$c_3,$c_1,$c_2,1,
+		$a_7,$a_5);		# mul_add_c2(a[7],b[5],c1,c2,c3);
+$code.=<<___;
+	$ST	$c_3,11*$BNSZ($a0)
+___
+	&add_c2($t_2,$t_1,$c_1,$c_2,$c_3,0,
+		$a_6,$a_6);		# mul_add_c(a[6],b[6],c1,c2,c3);
+$code.=<<___;
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	 $MULTU	($a_6,$a_7)		# mul_add_c2(a[6],b[7],c2,c3,c1);
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	sltu	$at,$c_2,$t_2
+	$ADDU	$c_3,$at
+	$ST	$c_1,12*$BNSZ($a0)
+	mflo	($t_1,$a_6,$a_7)
+	mfhi	($t_2,$a_6,$a_7)
+___
+	&add_c2($t_2,$t_1,$c_2,$c_3,$c_1,0,
+		$a_7,$a_7);		# mul_add_c(a[7],b[7],c3,c1,c2);
+$code.=<<___;
+	$ST	$c_2,13*$BNSZ($a0)
+
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	$ST	$c_3,14*$BNSZ($a0)
+	$ST	$c_1,15*$BNSZ($a0)
+
+	.set	noreorder
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	$t3,4*$SZREG($sp)
+	$REG_L	$t2,3*$SZREG($sp)
+	$REG_L	$t1,2*$SZREG($sp)
+	$REG_L	$t0,1*$SZREG($sp)
+	$REG_L	$gp,0*$SZREG($sp)
+	$PTR_ADD $sp,6*$SZREG
+___
+$code.=<<___;
+	jr	$ra
+	nop
+.end	bn_sqr_comba8
+
+.align	5
+.globl	bn_sqr_comba4
+.ent	bn_sqr_comba4
+bn_sqr_comba4:
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	.frame	$sp,6*$SZREG,$ra
+	.mask	0x8000f008,-$SZREG
+	.set	noreorder
+	$PTR_SUB $sp,6*$SZREG
+	$REG_S	$ra,5*$SZREG($sp)
+	$REG_S	$t3,4*$SZREG($sp)
+	$REG_S	$t2,3*$SZREG($sp)
+	$REG_S	$t1,2*$SZREG($sp)
+	$REG_S	$t0,1*$SZREG($sp)
+	$REG_S	$gp,0*$SZREG($sp)
+___
+$code.=<<___;
+	.set	reorder
+	$LD	$a_0,0($a1)
+	$LD	$a_1,$BNSZ($a1)
+	$MULTU	($a_0,$a_0)		# mul_add_c(a[0],b[0],c1,c2,c3);
+	$LD	$a_2,2*$BNSZ($a1)
+	$LD	$a_3,3*$BNSZ($a1)
+	mflo	($c_1,$a_0,$a_0)
+	mfhi	($c_2,$a_0,$a_0)
+	$ST	$c_1,0($a0)
+
+	$MULTU	($a_0,$a_1)		# mul_add_c2(a[0],b[1],c2,c3,c1);
+	mflo	($t_1,$a_0,$a_1)
+	mfhi	($t_2,$a_0,$a_1)
+	slt	$c_1,$t_2,$zero
+	$SLL	$t_2,1
+	 $MULTU	($a_2,$a_0)		# mul_add_c2(a[2],b[0],c3,c1,c2);
+	slt	$a2,$t_1,$zero
+	$ADDU	$t_2,$a2
+	$SLL	$t_1,1
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	$ADDU	$c_3,$t_2,$at
+	$ST	$c_2,$BNSZ($a0)
+	mflo	($t_1,$a_2,$a_0)
+	mfhi	($t_2,$a_2,$a_0)
+___
+	&add_c2($t_2,$t_1,$c_3,$c_1,$c_2,0,
+		$a_1,$a_1);		# mul_add_c(a[1],b[1],c3,c1,c2);
+$code.=<<___;
+	$ADDU	$c_3,$t_1
+	sltu	$at,$c_3,$t_1
+	 $MULTU	($a_0,$a_3)		# mul_add_c2(a[0],b[3],c1,c2,c3);
+	$ADDU	$t_2,$at
+	$ADDU	$c_1,$t_2
+	sltu	$at,$c_1,$t_2
+	$ADDU	$c_2,$at
+	$ST	$c_3,2*$BNSZ($a0)
+	mflo	($t_1,$a_0,$a_3)
+	mfhi	($t_2,$a_0,$a_3)
+___
+	&add_c2($t_2,$t_1,$c_1,$c_2,$c_3,0,
+		$a_1,$a_2);		# mul_add_c2(a2[1],b[2],c1,c2,c3);
+	&add_c2($t_2,$t_1,$c_1,$c_2,$c_3,1,
+		$a_3,$a_1);		# mul_add_c2(a[3],b[1],c2,c3,c1);
+$code.=<<___;
+	$ST	$c_1,3*$BNSZ($a0)
+___
+	&add_c2($t_2,$t_1,$c_2,$c_3,$c_1,0,
+		$a_2,$a_2);		# mul_add_c(a[2],b[2],c2,c3,c1);
+$code.=<<___;
+	$ADDU	$c_2,$t_1
+	sltu	$at,$c_2,$t_1
+	 $MULTU	($a_2,$a_3)		# mul_add_c2(a[2],b[3],c3,c1,c2);
+	$ADDU	$t_2,$at
+	$ADDU	$c_3,$t_2
+	sltu	$at,$c_3,$t_2
+	$ADDU	$c_1,$at
+	$ST	$c_2,4*$BNSZ($a0)
+	mflo	($t_1,$a_2,$a_3)
+	mfhi	($t_2,$a_2,$a_3)
+___
+	&add_c2($t_2,$t_1,$c_3,$c_1,$c_2,0,
+		$a_3,$a_3);		# mul_add_c(a[3],b[3],c1,c2,c3);
+$code.=<<___;
+	$ST	$c_3,5*$BNSZ($a0)
+
+	$ADDU	$c_1,$t_1
+	sltu	$at,$c_1,$t_1
+	$ADDU	$t_2,$at
+	$ADDU	$c_2,$t_2
+	$ST	$c_1,6*$BNSZ($a0)
+	$ST	$c_2,7*$BNSZ($a0)
+
+	.set	noreorder
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	$t3,4*$SZREG($sp)
+	$REG_L	$t2,3*$SZREG($sp)
+	$REG_L	$t1,2*$SZREG($sp)
+	$REG_L	$t0,1*$SZREG($sp)
+	$REG_L	$gp,0*$SZREG($sp)
+	$PTR_ADD $sp,6*$SZREG
+___
+$code.=<<___;
+	jr	$ra
+	nop
+.end	bn_sqr_comba4
+___
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/parisc-mont.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/parisc-mont.pl
new file mode 100644
index 000000000..aa9f626ed
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/parisc-mont.pl
@@ -0,0 +1,1006 @@
+#! /usr/bin/env perl
+# Copyright 2009-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# On PA-7100LC this module performs ~90-50% better, less for longer
+# keys, than code generated by gcc 3.2 for PA-RISC 1.1. Latter means
+# that compiler utilized xmpyu instruction to perform 32x32=64-bit
+# multiplication, which in turn means that "baseline" performance was
+# optimal in respect to instruction set capabilities. Fair comparison
+# with vendor compiler is problematic, because OpenSSL doesn't define
+# BN_LLONG [presumably] for historical reasons, which drives compiler
+# toward 4 times 16x16=32-bit multiplications [plus complementary
+# shifts and additions] instead. This means that you should observe
+# several times improvement over code generated by vendor compiler
+# for PA-RISC 1.1, but the "baseline" is far from optimal. The actual
+# improvement coefficient was never collected on PA-7100LC, or any
+# other 1.1 CPU, because I don't have access to such machine with
+# vendor compiler. But to give you a taste, PA-RISC 1.1 code path
+# reportedly outperformed code generated by cc +DA1.1 +O3 by factor
+# of ~5x on PA-8600.
+#
+# On PA-RISC 2.0 it has to compete with pa-risc2[W].s, which is
+# reportedly ~2x faster than vendor compiler generated code [according
+# to comment in pa-risc2[W].s]. Here comes a catch. Execution core of
+# this implementation is actually 32-bit one, in the sense that it
+# operates on 32-bit values. But pa-risc2[W].s operates on arrays of
+# 64-bit BN_LONGs... How do they interoperate then? No problem. This
+# module picks halves of 64-bit values in reverse order and pretends
+# they were 32-bit BN_LONGs. But can 32-bit core compete with "pure"
+# 64-bit code such as pa-risc2[W].s then? Well, the thing is that
+# 32x32=64-bit multiplication is the best even PA-RISC 2.0 can do,
+# i.e. there is no "wider" multiplication like on most other 64-bit
+# platforms. This means that even being effectively 32-bit, this
+# implementation performs "64-bit" computational task in same amount
+# of arithmetic operations, most notably multiplications. It requires
+# more memory references, most notably to tp[num], but this doesn't
+# seem to exhaust memory port capacity. And indeed, dedicated PA-RISC
+# 2.0 code path provides virtually same performance as pa-risc2[W].s:
+# it's ~10% better for shortest key length and ~10% worse for longest
+# one.
+#
+# In case it wasn't clear. The module has two distinct code paths:
+# PA-RISC 1.1 and PA-RISC 2.0 ones. Latter features carry-free 64-bit
+# additions and 64-bit integer loads, not to mention specific
+# instruction scheduling. In 64-bit build naturally only 2.0 code path
+# is assembled. In 32-bit application context both code paths are
+# assembled, PA-RISC 2.0 CPU is detected at run-time and proper path
+# is taken automatically. Also, in 32-bit build the module imposes
+# couple of limitations: vector lengths has to be even and vector
+# addresses has to be 64-bit aligned. Normally neither is a problem:
+# most common key lengths are even and vectors are commonly malloc-ed,
+# which ensures alignment.
+#
+# Special thanks to polarhome.com for providing HP-UX account on
+# PA-RISC 1.1 machine, and to correspondent who chose to remain
+# anonymous for testing the code on PA-RISC 2.0 machine.
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+
+$flavour = shift;
+$output = shift;
+
+open STDOUT,">$output";
+
+if ($flavour =~ /64/) {
+	$LEVEL		="2.0W";
+	$SIZE_T		=8;
+	$FRAME_MARKER	=80;
+	$SAVED_RP	=16;
+	$PUSH		="std";
+	$PUSHMA		="std,ma";
+	$POP		="ldd";
+	$POPMB		="ldd,mb";
+	$BN_SZ		=$SIZE_T;
+} else {
+	$LEVEL		="1.1";	#$LEVEL.="\n\t.ALLOW\t2.0";
+	$SIZE_T		=4;
+	$FRAME_MARKER	=48;
+	$SAVED_RP	=20;
+	$PUSH		="stw";
+	$PUSHMA		="stwm";
+	$POP		="ldw";
+	$POPMB		="ldwm";
+	$BN_SZ		=$SIZE_T;
+	if (open CONF,"<${dir}../../opensslconf.h") {
+	    while(<CONF>) {
+		if (m/#\s*define\s+SIXTY_FOUR_BIT/) {
+		    $BN_SZ=8;
+		    $LEVEL="2.0";
+		    last;
+		}
+	    }
+	    close CONF;
+	}
+}
+
+$FRAME=8*$SIZE_T+$FRAME_MARKER;	# 8 saved regs + frame marker
+				#                [+ argument transfer]
+$LOCALS=$FRAME-$FRAME_MARKER;
+$FRAME+=32;			# local variables
+
+$tp="%r31";
+$ti1="%r29";
+$ti0="%r28";
+
+$rp="%r26";
+$ap="%r25";
+$bp="%r24";
+$np="%r23";
+$n0="%r22";	# passed through stack in 32-bit
+$num="%r21";	# passed through stack in 32-bit
+$idx="%r20";
+$arrsz="%r19";
+
+$nm1="%r7";
+$nm0="%r6";
+$ab1="%r5";
+$ab0="%r4";
+
+$fp="%r3";
+$hi1="%r2";
+$hi0="%r1";
+
+$xfer=$n0;	# accommodates [-16..15] offset in fld[dw]s
+
+$fm0="%fr4";	$fti=$fm0;
+$fbi="%fr5L";
+$fn0="%fr5R";
+$fai="%fr6";	$fab0="%fr7";	$fab1="%fr8";
+$fni="%fr9";	$fnm0="%fr10";	$fnm1="%fr11";
+
+$code=<<___;
+	.LEVEL	$LEVEL
+	.SPACE	\$TEXT\$
+	.SUBSPA	\$CODE\$,QUAD=0,ALIGN=8,ACCESS=0x2C,CODE_ONLY
+
+	.EXPORT	bn_mul_mont,ENTRY,ARGW0=GR,ARGW1=GR,ARGW2=GR,ARGW3=GR
+	.ALIGN	64
+bn_mul_mont
+	.PROC
+	.CALLINFO	FRAME=`$FRAME-8*$SIZE_T`,NO_CALLS,SAVE_RP,SAVE_SP,ENTRY_GR=6
+	.ENTRY
+	$PUSH	%r2,-$SAVED_RP(%sp)		; standard prologue
+	$PUSHMA	%r3,$FRAME(%sp)
+	$PUSH	%r4,`-$FRAME+1*$SIZE_T`(%sp)
+	$PUSH	%r5,`-$FRAME+2*$SIZE_T`(%sp)
+	$PUSH	%r6,`-$FRAME+3*$SIZE_T`(%sp)
+	$PUSH	%r7,`-$FRAME+4*$SIZE_T`(%sp)
+	$PUSH	%r8,`-$FRAME+5*$SIZE_T`(%sp)
+	$PUSH	%r9,`-$FRAME+6*$SIZE_T`(%sp)
+	$PUSH	%r10,`-$FRAME+7*$SIZE_T`(%sp)
+	ldo	-$FRAME(%sp),$fp
+___
+$code.=<<___ if ($SIZE_T==4);
+	ldw	`-$FRAME_MARKER-4`($fp),$n0
+	ldw	`-$FRAME_MARKER-8`($fp),$num
+	nop
+	nop					; alignment
+___
+$code.=<<___ if ($BN_SZ==4);
+	comiclr,<=	6,$num,%r0		; are vectors long enough?
+	b		L\$abort
+	ldi		0,%r28			; signal "unhandled"
+	add,ev		%r0,$num,$num		; is $num even?
+	b		L\$abort
+	nop
+	or		$ap,$np,$ti1
+	extru,=		$ti1,31,3,%r0		; are ap and np 64-bit aligned?
+	b		L\$abort
+	nop
+	nop					; alignment
+	nop
+
+	fldws		0($n0),${fn0}
+	fldws,ma	4($bp),${fbi}		; bp[0]
+___
+$code.=<<___ if ($BN_SZ==8);
+	comib,>		3,$num,L\$abort		; are vectors long enough?
+	ldi		0,%r28			; signal "unhandled"
+	addl		$num,$num,$num		; I operate on 32-bit values
+
+	fldws		4($n0),${fn0}		; only low part of n0
+	fldws		4($bp),${fbi}		; bp[0] in flipped word order
+___
+$code.=<<___;
+	fldds		0($ap),${fai}		; ap[0,1]
+	fldds		0($np),${fni}		; np[0,1]
+
+	sh2addl		$num,%r0,$arrsz
+	ldi		31,$hi0
+	ldo		36($arrsz),$hi1		; space for tp[num+1]
+	andcm		$hi1,$hi0,$hi1		; align
+	addl		$hi1,%sp,%sp
+	$PUSH		$fp,-$SIZE_T(%sp)
+
+	ldo		`$LOCALS+16`($fp),$xfer
+	ldo		`$LOCALS+32+4`($fp),$tp
+
+	xmpyu		${fai}L,${fbi},${fab0}	; ap[0]*bp[0]
+	xmpyu		${fai}R,${fbi},${fab1}	; ap[1]*bp[0]
+	xmpyu		${fn0},${fab0}R,${fm0}
+
+	addl		$arrsz,$ap,$ap		; point at the end
+	addl		$arrsz,$np,$np
+	subi		0,$arrsz,$idx		; j=0
+	ldo		8($idx),$idx		; j++++
+
+	xmpyu		${fni}L,${fm0}R,${fnm0}	; np[0]*m
+	xmpyu		${fni}R,${fm0}R,${fnm1}	; np[1]*m
+	fstds		${fab0},-16($xfer)
+	fstds		${fnm0},-8($xfer)
+	fstds		${fab1},0($xfer)
+	fstds		${fnm1},8($xfer)
+	 flddx		$idx($ap),${fai}	; ap[2,3]
+	 flddx		$idx($np),${fni}	; np[2,3]
+___
+$code.=<<___ if ($BN_SZ==4);
+	mtctl		$hi0,%cr11		; $hi0 still holds 31
+	extrd,u,*=	$hi0,%sar,1,$hi0	; executes on PA-RISC 1.0
+	b		L\$parisc11
+	nop
+___
+$code.=<<___;					# PA-RISC 2.0 code-path
+	xmpyu		${fai}L,${fbi},${fab0}	; ap[j]*bp[0]
+	xmpyu		${fni}L,${fm0}R,${fnm0}	; np[j]*m
+	ldd		-16($xfer),$ab0
+	fstds		${fab0},-16($xfer)
+
+	extrd,u		$ab0,31,32,$hi0
+	extrd,u		$ab0,63,32,$ab0
+	ldd		-8($xfer),$nm0
+	fstds		${fnm0},-8($xfer)
+	 ldo		8($idx),$idx		; j++++
+	 addl		$ab0,$nm0,$nm0		; low part is discarded
+	 extrd,u	$nm0,31,32,$hi1
+
+L\$1st
+	xmpyu		${fai}R,${fbi},${fab1}	; ap[j+1]*bp[0]
+	xmpyu		${fni}R,${fm0}R,${fnm1}	; np[j+1]*m
+	ldd		0($xfer),$ab1
+	fstds		${fab1},0($xfer)
+	 addl		$hi0,$ab1,$ab1
+	 extrd,u	$ab1,31,32,$hi0
+	ldd		8($xfer),$nm1
+	fstds		${fnm1},8($xfer)
+	 extrd,u	$ab1,63,32,$ab1
+	 addl		$hi1,$nm1,$nm1
+	flddx		$idx($ap),${fai}	; ap[j,j+1]
+	flddx		$idx($np),${fni}	; np[j,j+1]
+	 addl		$ab1,$nm1,$nm1
+	 extrd,u	$nm1,31,32,$hi1
+
+	xmpyu		${fai}L,${fbi},${fab0}	; ap[j]*bp[0]
+	xmpyu		${fni}L,${fm0}R,${fnm0}	; np[j]*m
+	ldd		-16($xfer),$ab0
+	fstds		${fab0},-16($xfer)
+	 addl		$hi0,$ab0,$ab0
+	 extrd,u	$ab0,31,32,$hi0
+	ldd		-8($xfer),$nm0
+	fstds		${fnm0},-8($xfer)
+	 extrd,u	$ab0,63,32,$ab0
+	 addl		$hi1,$nm0,$nm0
+	stw		$nm1,-4($tp)		; tp[j-1]
+	 addl		$ab0,$nm0,$nm0
+	 stw,ma		$nm0,8($tp)		; tp[j-1]
+	addib,<>	8,$idx,L\$1st		; j++++
+	 extrd,u	$nm0,31,32,$hi1
+
+	xmpyu		${fai}R,${fbi},${fab1}	; ap[j]*bp[0]
+	xmpyu		${fni}R,${fm0}R,${fnm1}	; np[j]*m
+	ldd		0($xfer),$ab1
+	fstds		${fab1},0($xfer)
+	 addl		$hi0,$ab1,$ab1
+	 extrd,u	$ab1,31,32,$hi0
+	ldd		8($xfer),$nm1
+	fstds		${fnm1},8($xfer)
+	 extrd,u	$ab1,63,32,$ab1
+	 addl		$hi1,$nm1,$nm1
+	ldd		-16($xfer),$ab0
+	 addl		$ab1,$nm1,$nm1
+	ldd		-8($xfer),$nm0
+	 extrd,u	$nm1,31,32,$hi1
+
+	 addl		$hi0,$ab0,$ab0
+	 extrd,u	$ab0,31,32,$hi0
+	stw		$nm1,-4($tp)		; tp[j-1]
+	 extrd,u	$ab0,63,32,$ab0
+	 addl		$hi1,$nm0,$nm0
+	ldd		0($xfer),$ab1
+	 addl		$ab0,$nm0,$nm0
+	ldd,mb		8($xfer),$nm1
+	 extrd,u	$nm0,31,32,$hi1
+	stw,ma		$nm0,8($tp)		; tp[j-1]
+
+	ldo		-1($num),$num		; i--
+	subi		0,$arrsz,$idx		; j=0
+___
+$code.=<<___ if ($BN_SZ==4);
+	fldws,ma	4($bp),${fbi}		; bp[1]
+___
+$code.=<<___ if ($BN_SZ==8);
+	fldws		0($bp),${fbi}		; bp[1] in flipped word order
+___
+$code.=<<___;
+	 flddx		$idx($ap),${fai}	; ap[0,1]
+	 flddx		$idx($np),${fni}	; np[0,1]
+	 fldws		8($xfer),${fti}R	; tp[0]
+	addl		$hi0,$ab1,$ab1
+	 extrd,u	$ab1,31,32,$hi0
+	 extrd,u	$ab1,63,32,$ab1
+	 ldo		8($idx),$idx		; j++++
+	 xmpyu		${fai}L,${fbi},${fab0}	; ap[0]*bp[1]
+	 xmpyu		${fai}R,${fbi},${fab1}	; ap[1]*bp[1]
+	addl		$hi1,$nm1,$nm1
+	addl		$ab1,$nm1,$nm1
+	extrd,u		$nm1,31,32,$hi1
+	 fstws,mb	${fab0}L,-8($xfer)	; save high part
+	stw		$nm1,-4($tp)		; tp[j-1]
+
+	 fcpy,sgl	%fr0,${fti}L		; zero high part
+	 fcpy,sgl	%fr0,${fab0}L
+	addl		$hi1,$hi0,$hi0
+	extrd,u		$hi0,31,32,$hi1
+	 fcnvxf,dbl,dbl	${fti},${fti}		; 32-bit unsigned int -> double
+	 fcnvxf,dbl,dbl	${fab0},${fab0}
+	stw		$hi0,0($tp)
+	stw		$hi1,4($tp)
+
+	fadd,dbl	${fti},${fab0},${fab0}	; add tp[0]
+	fcnvfx,dbl,dbl	${fab0},${fab0}		; double -> 33-bit unsigned int
+	xmpyu		${fn0},${fab0}R,${fm0}
+	ldo		`$LOCALS+32+4`($fp),$tp
+L\$outer
+	xmpyu		${fni}L,${fm0}R,${fnm0}	; np[0]*m
+	xmpyu		${fni}R,${fm0}R,${fnm1}	; np[1]*m
+	fstds		${fab0},-16($xfer)	; 33-bit value
+	fstds		${fnm0},-8($xfer)
+	 flddx		$idx($ap),${fai}	; ap[2]
+	 flddx		$idx($np),${fni}	; np[2]
+	 ldo		8($idx),$idx		; j++++
+	ldd		-16($xfer),$ab0		; 33-bit value
+	ldd		-8($xfer),$nm0
+	ldw		0($xfer),$hi0		; high part
+
+	xmpyu		${fai}L,${fbi},${fab0}	; ap[j]*bp[i]
+	xmpyu		${fni}L,${fm0}R,${fnm0}	; np[j]*m
+	 extrd,u	$ab0,31,32,$ti0		; carry bit
+	 extrd,u	$ab0,63,32,$ab0
+	fstds		${fab1},0($xfer)
+	 addl		$ti0,$hi0,$hi0		; account carry bit
+	fstds		${fnm1},8($xfer)
+	 addl		$ab0,$nm0,$nm0		; low part is discarded
+	ldw		0($tp),$ti1		; tp[1]
+	 extrd,u	$nm0,31,32,$hi1
+	fstds		${fab0},-16($xfer)
+	fstds		${fnm0},-8($xfer)
+
+L\$inner
+	xmpyu		${fai}R,${fbi},${fab1}	; ap[j+1]*bp[i]
+	xmpyu		${fni}R,${fm0}R,${fnm1}	; np[j+1]*m
+	ldd		0($xfer),$ab1
+	fstds		${fab1},0($xfer)
+	 addl		$hi0,$ti1,$ti1
+	 addl		$ti1,$ab1,$ab1
+	ldd		8($xfer),$nm1
+	fstds		${fnm1},8($xfer)
+	 extrd,u	$ab1,31,32,$hi0
+	 extrd,u	$ab1,63,32,$ab1
+	flddx		$idx($ap),${fai}	; ap[j,j+1]
+	flddx		$idx($np),${fni}	; np[j,j+1]
+	 addl		$hi1,$nm1,$nm1
+	 addl		$ab1,$nm1,$nm1
+	ldw		4($tp),$ti0		; tp[j]
+	stw		$nm1,-4($tp)		; tp[j-1]
+
+	xmpyu		${fai}L,${fbi},${fab0}	; ap[j]*bp[i]
+	xmpyu		${fni}L,${fm0}R,${fnm0}	; np[j]*m
+	ldd		-16($xfer),$ab0
+	fstds		${fab0},-16($xfer)
+	 addl		$hi0,$ti0,$ti0
+	 addl		$ti0,$ab0,$ab0
+	ldd		-8($xfer),$nm0
+	fstds		${fnm0},-8($xfer)
+	 extrd,u	$ab0,31,32,$hi0
+	 extrd,u	$nm1,31,32,$hi1
+	ldw		8($tp),$ti1		; tp[j]
+	 extrd,u	$ab0,63,32,$ab0
+	 addl		$hi1,$nm0,$nm0
+	 addl		$ab0,$nm0,$nm0
+	 stw,ma		$nm0,8($tp)		; tp[j-1]
+	addib,<>	8,$idx,L\$inner		; j++++
+	 extrd,u	$nm0,31,32,$hi1
+
+	xmpyu		${fai}R,${fbi},${fab1}	; ap[j]*bp[i]
+	xmpyu		${fni}R,${fm0}R,${fnm1}	; np[j]*m
+	ldd		0($xfer),$ab1
+	fstds		${fab1},0($xfer)
+	 addl		$hi0,$ti1,$ti1
+	 addl		$ti1,$ab1,$ab1
+	ldd		8($xfer),$nm1
+	fstds		${fnm1},8($xfer)
+	 extrd,u	$ab1,31,32,$hi0
+	 extrd,u	$ab1,63,32,$ab1
+	ldw		4($tp),$ti0		; tp[j]
+	 addl		$hi1,$nm1,$nm1
+	 addl		$ab1,$nm1,$nm1
+	ldd		-16($xfer),$ab0
+	ldd		-8($xfer),$nm0
+	 extrd,u	$nm1,31,32,$hi1
+
+	addl		$hi0,$ab0,$ab0
+	 addl		$ti0,$ab0,$ab0
+	 stw		$nm1,-4($tp)		; tp[j-1]
+	 extrd,u	$ab0,31,32,$hi0
+	ldw		8($tp),$ti1		; tp[j]
+	 extrd,u	$ab0,63,32,$ab0
+	 addl		$hi1,$nm0,$nm0
+	ldd		0($xfer),$ab1
+	 addl		$ab0,$nm0,$nm0
+	ldd,mb		8($xfer),$nm1
+	 extrd,u	$nm0,31,32,$hi1
+	 stw,ma		$nm0,8($tp)		; tp[j-1]
+
+	addib,=		-1,$num,L\$outerdone	; i--
+	subi		0,$arrsz,$idx		; j=0
+___
+$code.=<<___ if ($BN_SZ==4);
+	fldws,ma	4($bp),${fbi}		; bp[i]
+___
+$code.=<<___ if ($BN_SZ==8);
+	ldi		12,$ti0			; bp[i] in flipped word order
+	addl,ev		%r0,$num,$num
+	ldi		-4,$ti0
+	addl		$ti0,$bp,$bp
+	fldws		0($bp),${fbi}
+___
+$code.=<<___;
+	 flddx		$idx($ap),${fai}	; ap[0]
+	addl		$hi0,$ab1,$ab1
+	 flddx		$idx($np),${fni}	; np[0]
+	 fldws		8($xfer),${fti}R	; tp[0]
+	addl		$ti1,$ab1,$ab1
+	extrd,u		$ab1,31,32,$hi0
+	extrd,u		$ab1,63,32,$ab1
+
+	 ldo		8($idx),$idx		; j++++
+	 xmpyu		${fai}L,${fbi},${fab0}	; ap[0]*bp[i]
+	 xmpyu		${fai}R,${fbi},${fab1}	; ap[1]*bp[i]
+	ldw		4($tp),$ti0		; tp[j]
+
+	addl		$hi1,$nm1,$nm1
+	 fstws,mb	${fab0}L,-8($xfer)	; save high part
+	addl		$ab1,$nm1,$nm1
+	extrd,u		$nm1,31,32,$hi1
+	 fcpy,sgl	%fr0,${fti}L		; zero high part
+	 fcpy,sgl	%fr0,${fab0}L
+	stw		$nm1,-4($tp)		; tp[j-1]
+
+	 fcnvxf,dbl,dbl	${fti},${fti}		; 32-bit unsigned int -> double
+	 fcnvxf,dbl,dbl	${fab0},${fab0}
+	addl		$hi1,$hi0,$hi0
+	 fadd,dbl	${fti},${fab0},${fab0}	; add tp[0]
+	addl		$ti0,$hi0,$hi0
+	extrd,u		$hi0,31,32,$hi1
+	 fcnvfx,dbl,dbl	${fab0},${fab0}		; double -> 33-bit unsigned int
+	stw		$hi0,0($tp)
+	stw		$hi1,4($tp)
+	 xmpyu		${fn0},${fab0}R,${fm0}
+
+	b		L\$outer
+	ldo		`$LOCALS+32+4`($fp),$tp
+
+L\$outerdone
+	addl		$hi0,$ab1,$ab1
+	addl		$ti1,$ab1,$ab1
+	extrd,u		$ab1,31,32,$hi0
+	extrd,u		$ab1,63,32,$ab1
+
+	ldw		4($tp),$ti0		; tp[j]
+
+	addl		$hi1,$nm1,$nm1
+	addl		$ab1,$nm1,$nm1
+	extrd,u		$nm1,31,32,$hi1
+	stw		$nm1,-4($tp)		; tp[j-1]
+
+	addl		$hi1,$hi0,$hi0
+	addl		$ti0,$hi0,$hi0
+	extrd,u		$hi0,31,32,$hi1
+	stw		$hi0,0($tp)
+	stw		$hi1,4($tp)
+
+	ldo		`$LOCALS+32`($fp),$tp
+	sub		%r0,%r0,%r0		; clear borrow
+___
+$code.=<<___ if ($BN_SZ==4);
+	ldws,ma		4($tp),$ti0
+	extru,=		$rp,31,3,%r0		; is rp 64-bit aligned?
+	b		L\$sub_pa11
+	addl		$tp,$arrsz,$tp
+L\$sub
+	ldwx		$idx($np),$hi0
+	subb		$ti0,$hi0,$hi1
+	ldwx		$idx($tp),$ti0
+	addib,<>	4,$idx,L\$sub
+	stws,ma		$hi1,4($rp)
+
+	subb		$ti0,%r0,$hi1
+___
+$code.=<<___ if ($BN_SZ==8);
+	ldd,ma		8($tp),$ti0
+L\$sub
+	ldd		$idx($np),$hi0
+	shrpd		$ti0,$ti0,32,$ti0	; flip word order
+	std		$ti0,-8($tp)		; save flipped value
+	sub,db		$ti0,$hi0,$hi1
+	ldd,ma		8($tp),$ti0
+	addib,<>	8,$idx,L\$sub
+	std,ma		$hi1,8($rp)
+
+	extrd,u		$ti0,31,32,$ti0		; carry in flipped word order
+	sub,db		$ti0,%r0,$hi1
+___
+$code.=<<___;
+	ldo		`$LOCALS+32`($fp),$tp
+	sub		$rp,$arrsz,$rp		; rewind rp
+	subi		0,$arrsz,$idx
+L\$copy
+	ldd		0($tp),$ti0
+	ldd		0($rp),$hi0
+	std,ma		%r0,8($tp)
+	comiclr,=	0,$hi1,%r0
+	copy		$ti0,$hi0
+	addib,<>	8,$idx,L\$copy
+	std,ma		$hi0,8($rp)
+___
+
+if ($BN_SZ==4) {				# PA-RISC 1.1 code-path
+$ablo=$ab0;
+$abhi=$ab1;
+$nmlo0=$nm0;
+$nmhi0=$nm1;
+$nmlo1="%r9";
+$nmhi1="%r8";
+
+$code.=<<___;
+	b		L\$done
+	nop
+
+	.ALIGN		8
+L\$parisc11
+	xmpyu		${fai}L,${fbi},${fab0}	; ap[j]*bp[0]
+	xmpyu		${fni}L,${fm0}R,${fnm0}	; np[j]*m
+	ldw		-12($xfer),$ablo
+	ldw		-16($xfer),$hi0
+	ldw		-4($xfer),$nmlo0
+	ldw		-8($xfer),$nmhi0
+	fstds		${fab0},-16($xfer)
+	fstds		${fnm0},-8($xfer)
+
+	 ldo		8($idx),$idx		; j++++
+	 add		$ablo,$nmlo0,$nmlo0	; discarded
+	 addc		%r0,$nmhi0,$hi1
+	ldw		4($xfer),$ablo
+	ldw		0($xfer),$abhi
+	nop
+
+L\$1st_pa11
+	xmpyu		${fai}R,${fbi},${fab1}	; ap[j+1]*bp[0]
+	flddx		$idx($ap),${fai}	; ap[j,j+1]
+	xmpyu		${fni}R,${fm0}R,${fnm1}	; np[j+1]*m
+	flddx		$idx($np),${fni}	; np[j,j+1]
+	 add		$hi0,$ablo,$ablo
+	ldw		12($xfer),$nmlo1
+	 addc		%r0,$abhi,$hi0
+	ldw		8($xfer),$nmhi1
+	 add		$ablo,$nmlo1,$nmlo1
+	fstds		${fab1},0($xfer)
+	 addc		%r0,$nmhi1,$nmhi1
+	fstds		${fnm1},8($xfer)
+	 add		$hi1,$nmlo1,$nmlo1
+	ldw		-12($xfer),$ablo
+	 addc		%r0,$nmhi1,$hi1
+	ldw		-16($xfer),$abhi
+
+	xmpyu		${fai}L,${fbi},${fab0}	; ap[j]*bp[0]
+	ldw		-4($xfer),$nmlo0
+	xmpyu		${fni}L,${fm0}R,${fnm0}	; np[j]*m
+	ldw		-8($xfer),$nmhi0
+	 add		$hi0,$ablo,$ablo
+	stw		$nmlo1,-4($tp)		; tp[j-1]
+	 addc		%r0,$abhi,$hi0
+	fstds		${fab0},-16($xfer)
+	 add		$ablo,$nmlo0,$nmlo0
+	fstds		${fnm0},-8($xfer)
+	 addc		%r0,$nmhi0,$nmhi0
+	ldw		0($xfer),$abhi
+	 add		$hi1,$nmlo0,$nmlo0
+	ldw		4($xfer),$ablo
+	 stws,ma	$nmlo0,8($tp)		; tp[j-1]
+	addib,<>	8,$idx,L\$1st_pa11	; j++++
+	 addc		%r0,$nmhi0,$hi1
+
+	 ldw		8($xfer),$nmhi1
+	 ldw		12($xfer),$nmlo1
+	xmpyu		${fai}R,${fbi},${fab1}	; ap[j]*bp[0]
+	xmpyu		${fni}R,${fm0}R,${fnm1}	; np[j]*m
+	 add		$hi0,$ablo,$ablo
+	fstds		${fab1},0($xfer)
+	 addc		%r0,$abhi,$hi0
+	fstds		${fnm1},8($xfer)
+	 add		$ablo,$nmlo1,$nmlo1
+	ldw		-16($xfer),$abhi
+	 addc		%r0,$nmhi1,$nmhi1
+	ldw		-12($xfer),$ablo
+	 add		$hi1,$nmlo1,$nmlo1
+	ldw		-8($xfer),$nmhi0
+	 addc		%r0,$nmhi1,$hi1
+	ldw		-4($xfer),$nmlo0
+
+	 add		$hi0,$ablo,$ablo
+	stw		$nmlo1,-4($tp)		; tp[j-1]
+	 addc		%r0,$abhi,$hi0
+	ldw		0($xfer),$abhi
+	 add		$ablo,$nmlo0,$nmlo0
+	ldw		4($xfer),$ablo
+	 addc		%r0,$nmhi0,$nmhi0
+	ldws,mb		8($xfer),$nmhi1
+	 add		$hi1,$nmlo0,$nmlo0
+	ldw		4($xfer),$nmlo1
+	 addc		%r0,$nmhi0,$hi1
+	stws,ma		$nmlo0,8($tp)		; tp[j-1]
+
+	ldo		-1($num),$num		; i--
+	subi		0,$arrsz,$idx		; j=0
+
+	 fldws,ma	4($bp),${fbi}		; bp[1]
+	 flddx		$idx($ap),${fai}	; ap[0,1]
+	 flddx		$idx($np),${fni}	; np[0,1]
+	 fldws		8($xfer),${fti}R	; tp[0]
+	add		$hi0,$ablo,$ablo
+	addc		%r0,$abhi,$hi0
+	 ldo		8($idx),$idx		; j++++
+	 xmpyu		${fai}L,${fbi},${fab0}	; ap[0]*bp[1]
+	 xmpyu		${fai}R,${fbi},${fab1}	; ap[1]*bp[1]
+	add		$hi1,$nmlo1,$nmlo1
+	addc		%r0,$nmhi1,$nmhi1
+	add		$ablo,$nmlo1,$nmlo1
+	addc		%r0,$nmhi1,$hi1
+	 fstws,mb	${fab0}L,-8($xfer)	; save high part
+	stw		$nmlo1,-4($tp)		; tp[j-1]
+
+	 fcpy,sgl	%fr0,${fti}L		; zero high part
+	 fcpy,sgl	%fr0,${fab0}L
+	add		$hi1,$hi0,$hi0
+	addc		%r0,%r0,$hi1
+	 fcnvxf,dbl,dbl	${fti},${fti}		; 32-bit unsigned int -> double
+	 fcnvxf,dbl,dbl	${fab0},${fab0}
+	stw		$hi0,0($tp)
+	stw		$hi1,4($tp)
+
+	fadd,dbl	${fti},${fab0},${fab0}	; add tp[0]
+	fcnvfx,dbl,dbl	${fab0},${fab0}		; double -> 33-bit unsigned int
+	xmpyu		${fn0},${fab0}R,${fm0}
+	ldo		`$LOCALS+32+4`($fp),$tp
+L\$outer_pa11
+	xmpyu		${fni}L,${fm0}R,${fnm0}	; np[0]*m
+	xmpyu		${fni}R,${fm0}R,${fnm1}	; np[1]*m
+	fstds		${fab0},-16($xfer)	; 33-bit value
+	fstds		${fnm0},-8($xfer)
+	 flddx		$idx($ap),${fai}	; ap[2,3]
+	 flddx		$idx($np),${fni}	; np[2,3]
+	ldw		-16($xfer),$abhi	; carry bit actually
+	 ldo		8($idx),$idx		; j++++
+	ldw		-12($xfer),$ablo
+	ldw		-8($xfer),$nmhi0
+	ldw		-4($xfer),$nmlo0
+	ldw		0($xfer),$hi0		; high part
+
+	xmpyu		${fai}L,${fbi},${fab0}	; ap[j]*bp[i]
+	xmpyu		${fni}L,${fm0}R,${fnm0}	; np[j]*m
+	fstds		${fab1},0($xfer)
+	 addl		$abhi,$hi0,$hi0		; account carry bit
+	fstds		${fnm1},8($xfer)
+	 add		$ablo,$nmlo0,$nmlo0	; discarded
+	ldw		0($tp),$ti1		; tp[1]
+	 addc		%r0,$nmhi0,$hi1
+	fstds		${fab0},-16($xfer)
+	fstds		${fnm0},-8($xfer)
+	ldw		4($xfer),$ablo
+	ldw		0($xfer),$abhi
+
+L\$inner_pa11
+	xmpyu		${fai}R,${fbi},${fab1}	; ap[j+1]*bp[i]
+	flddx		$idx($ap),${fai}	; ap[j,j+1]
+	xmpyu		${fni}R,${fm0}R,${fnm1}	; np[j+1]*m
+	flddx		$idx($np),${fni}	; np[j,j+1]
+	 add		$hi0,$ablo,$ablo
+	ldw		4($tp),$ti0		; tp[j]
+	 addc		%r0,$abhi,$abhi
+	ldw		12($xfer),$nmlo1
+	 add		$ti1,$ablo,$ablo
+	ldw		8($xfer),$nmhi1
+	 addc		%r0,$abhi,$hi0
+	fstds		${fab1},0($xfer)
+	 add		$ablo,$nmlo1,$nmlo1
+	fstds		${fnm1},8($xfer)
+	 addc		%r0,$nmhi1,$nmhi1
+	ldw		-12($xfer),$ablo
+	 add		$hi1,$nmlo1,$nmlo1
+	ldw		-16($xfer),$abhi
+	 addc		%r0,$nmhi1,$hi1
+
+	xmpyu		${fai}L,${fbi},${fab0}	; ap[j]*bp[i]
+	ldw		8($tp),$ti1		; tp[j]
+	xmpyu		${fni}L,${fm0}R,${fnm0}	; np[j]*m
+	ldw		-4($xfer),$nmlo0
+	 add		$hi0,$ablo,$ablo
+	ldw		-8($xfer),$nmhi0
+	 addc		%r0,$abhi,$abhi
+	stw		$nmlo1,-4($tp)		; tp[j-1]
+	 add		$ti0,$ablo,$ablo
+	fstds		${fab0},-16($xfer)
+	 addc		%r0,$abhi,$hi0
+	fstds		${fnm0},-8($xfer)
+	 add		$ablo,$nmlo0,$nmlo0
+	ldw		4($xfer),$ablo
+	 addc		%r0,$nmhi0,$nmhi0
+	ldw		0($xfer),$abhi
+	 add		$hi1,$nmlo0,$nmlo0
+	 stws,ma	$nmlo0,8($tp)		; tp[j-1]
+	addib,<>	8,$idx,L\$inner_pa11	; j++++
+	 addc		%r0,$nmhi0,$hi1
+
+	xmpyu		${fai}R,${fbi},${fab1}	; ap[j]*bp[i]
+	ldw		12($xfer),$nmlo1
+	xmpyu		${fni}R,${fm0}R,${fnm1}	; np[j]*m
+	ldw		8($xfer),$nmhi1
+	 add		$hi0,$ablo,$ablo
+	ldw		4($tp),$ti0		; tp[j]
+	 addc		%r0,$abhi,$abhi
+	fstds		${fab1},0($xfer)
+	 add		$ti1,$ablo,$ablo
+	fstds		${fnm1},8($xfer)
+	 addc		%r0,$abhi,$hi0
+	ldw		-16($xfer),$abhi
+	 add		$ablo,$nmlo1,$nmlo1
+	ldw		-12($xfer),$ablo
+	 addc		%r0,$nmhi1,$nmhi1
+	ldw		-8($xfer),$nmhi0
+	 add		$hi1,$nmlo1,$nmlo1
+	ldw		-4($xfer),$nmlo0
+	 addc		%r0,$nmhi1,$hi1
+
+	add		$hi0,$ablo,$ablo
+	 stw		$nmlo1,-4($tp)		; tp[j-1]
+	addc		%r0,$abhi,$abhi
+	 add		$ti0,$ablo,$ablo
+	ldw		8($tp),$ti1		; tp[j]
+	 addc		%r0,$abhi,$hi0
+	ldw		0($xfer),$abhi
+	 add		$ablo,$nmlo0,$nmlo0
+	ldw		4($xfer),$ablo
+	 addc		%r0,$nmhi0,$nmhi0
+	ldws,mb		8($xfer),$nmhi1
+	 add		$hi1,$nmlo0,$nmlo0
+	ldw		4($xfer),$nmlo1
+	 addc		%r0,$nmhi0,$hi1
+	 stws,ma	$nmlo0,8($tp)		; tp[j-1]
+
+	addib,=		-1,$num,L\$outerdone_pa11; i--
+	subi		0,$arrsz,$idx		; j=0
+
+	 fldws,ma	4($bp),${fbi}		; bp[i]
+	 flddx		$idx($ap),${fai}	; ap[0]
+	add		$hi0,$ablo,$ablo
+	addc		%r0,$abhi,$abhi
+	 flddx		$idx($np),${fni}	; np[0]
+	 fldws		8($xfer),${fti}R	; tp[0]
+	add		$ti1,$ablo,$ablo
+	addc		%r0,$abhi,$hi0
+
+	 ldo		8($idx),$idx		; j++++
+	 xmpyu		${fai}L,${fbi},${fab0}	; ap[0]*bp[i]
+	 xmpyu		${fai}R,${fbi},${fab1}	; ap[1]*bp[i]
+	ldw		4($tp),$ti0		; tp[j]
+
+	add		$hi1,$nmlo1,$nmlo1
+	addc		%r0,$nmhi1,$nmhi1
+	 fstws,mb	${fab0}L,-8($xfer)	; save high part
+	add		$ablo,$nmlo1,$nmlo1
+	addc		%r0,$nmhi1,$hi1
+	 fcpy,sgl	%fr0,${fti}L		; zero high part
+	 fcpy,sgl	%fr0,${fab0}L
+	stw		$nmlo1,-4($tp)		; tp[j-1]
+
+	 fcnvxf,dbl,dbl	${fti},${fti}		; 32-bit unsigned int -> double
+	 fcnvxf,dbl,dbl	${fab0},${fab0}
+	add		$hi1,$hi0,$hi0
+	addc		%r0,%r0,$hi1
+	 fadd,dbl	${fti},${fab0},${fab0}	; add tp[0]
+	add		$ti0,$hi0,$hi0
+	addc		%r0,$hi1,$hi1
+	 fcnvfx,dbl,dbl	${fab0},${fab0}		; double -> 33-bit unsigned int
+	stw		$hi0,0($tp)
+	stw		$hi1,4($tp)
+	 xmpyu		${fn0},${fab0}R,${fm0}
+
+	b		L\$outer_pa11
+	ldo		`$LOCALS+32+4`($fp),$tp
+
+L\$outerdone_pa11
+	add		$hi0,$ablo,$ablo
+	addc		%r0,$abhi,$abhi
+	add		$ti1,$ablo,$ablo
+	addc		%r0,$abhi,$hi0
+
+	ldw		4($tp),$ti0		; tp[j]
+
+	add		$hi1,$nmlo1,$nmlo1
+	addc		%r0,$nmhi1,$nmhi1
+	add		$ablo,$nmlo1,$nmlo1
+	addc		%r0,$nmhi1,$hi1
+	stw		$nmlo1,-4($tp)		; tp[j-1]
+
+	add		$hi1,$hi0,$hi0
+	addc		%r0,%r0,$hi1
+	add		$ti0,$hi0,$hi0
+	addc		%r0,$hi1,$hi1
+	stw		$hi0,0($tp)
+	stw		$hi1,4($tp)
+
+	ldo		`$LOCALS+32+4`($fp),$tp
+	sub		%r0,%r0,%r0		; clear borrow
+	ldw		-4($tp),$ti0
+	addl		$tp,$arrsz,$tp
+L\$sub_pa11
+	ldwx		$idx($np),$hi0
+	subb		$ti0,$hi0,$hi1
+	ldwx		$idx($tp),$ti0
+	addib,<>	4,$idx,L\$sub_pa11
+	stws,ma		$hi1,4($rp)
+
+	subb		$ti0,%r0,$hi1
+
+	ldo		`$LOCALS+32`($fp),$tp
+	sub		$rp,$arrsz,$rp		; rewind rp
+	subi		0,$arrsz,$idx
+L\$copy_pa11
+	ldw		0($tp),$ti0
+	ldw		0($rp),$hi0
+	stws,ma		%r0,4($tp)
+	comiclr,=	0,$hi1,%r0
+	copy		$ti0,$hi0
+	addib,<>	4,$idx,L\$copy_pa11
+	stws,ma		$hi0,4($rp)
+
+	nop					; alignment
+L\$done
+___
+}
+
+$code.=<<___;
+	ldi		1,%r28			; signal "handled"
+	ldo		$FRAME($fp),%sp		; destroy tp[num+1]
+
+	$POP	`-$FRAME-$SAVED_RP`(%sp),%r2	; standard epilogue
+	$POP	`-$FRAME+1*$SIZE_T`(%sp),%r4
+	$POP	`-$FRAME+2*$SIZE_T`(%sp),%r5
+	$POP	`-$FRAME+3*$SIZE_T`(%sp),%r6
+	$POP	`-$FRAME+4*$SIZE_T`(%sp),%r7
+	$POP	`-$FRAME+5*$SIZE_T`(%sp),%r8
+	$POP	`-$FRAME+6*$SIZE_T`(%sp),%r9
+	$POP	`-$FRAME+7*$SIZE_T`(%sp),%r10
+L\$abort
+	bv	(%r2)
+	.EXIT
+	$POPMB	-$FRAME(%sp),%r3
+	.PROCEND
+	.STRINGZ "Montgomery Multiplication for PA-RISC, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+# Explicitly encode PA-RISC 2.0 instructions used in this module, so
+# that it can be compiled with .LEVEL 1.0. It should be noted that I
+# wouldn't have to do this, if GNU assembler understood .ALLOW 2.0
+# directive...
+
+my $ldd = sub {
+  my ($mod,$args) = @_;
+  my $orig = "ldd$mod\t$args";
+
+    if ($args =~ /%r([0-9]+)\(%r([0-9]+)\),%r([0-9]+)/)		# format 4
+    {	my $opcode=(0x03<<26)|($2<<21)|($1<<16)|(3<<6)|$3;
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    elsif ($args =~ /(\-?[0-9]+)\(%r([0-9]+)\),%r([0-9]+)/)	# format 5
+    {	my $opcode=(0x03<<26)|($2<<21)|(1<<12)|(3<<6)|$3;
+	$opcode|=(($1&0xF)<<17)|(($1&0x10)<<12);		# encode offset
+	$opcode|=(1<<5)  if ($mod =~ /^,m/);
+	$opcode|=(1<<13) if ($mod =~ /^,mb/);
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    else { "\t".$orig; }
+};
+
+my $std = sub {
+  my ($mod,$args) = @_;
+  my $orig = "std$mod\t$args";
+
+    if ($args =~ /%r([0-9]+),(\-?[0-9]+)\(%r([0-9]+)\)/)	# format 6
+    {	my $opcode=(0x03<<26)|($3<<21)|($1<<16)|(1<<12)|(0xB<<6);
+	$opcode|=(($2&0xF)<<1)|(($2&0x10)>>4);			# encode offset
+	$opcode|=(1<<5)  if ($mod =~ /^,m/);
+	$opcode|=(1<<13) if ($mod =~ /^,mb/);
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    else { "\t".$orig; }
+};
+
+my $extrd = sub {
+  my ($mod,$args) = @_;
+  my $orig = "extrd$mod\t$args";
+
+    # I only have ",u" completer, it's implicitly encoded...
+    if ($args =~ /%r([0-9]+),([0-9]+),([0-9]+),%r([0-9]+)/)	# format 15
+    {	my $opcode=(0x36<<26)|($1<<21)|($4<<16);
+	my $len=32-$3;
+	$opcode |= (($2&0x20)<<6)|(($2&0x1f)<<5);		# encode pos
+	$opcode |= (($len&0x20)<<7)|($len&0x1f);		# encode len
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    elsif ($args =~ /%r([0-9]+),%sar,([0-9]+),%r([0-9]+)/)	# format 12
+    {	my $opcode=(0x34<<26)|($1<<21)|($3<<16)|(2<<11)|(1<<9);
+	my $len=32-$2;
+	$opcode |= (($len&0x20)<<3)|($len&0x1f);		# encode len
+	$opcode |= (1<<13) if ($mod =~ /,\**=/);
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    else { "\t".$orig; }
+};
+
+my $shrpd = sub {
+  my ($mod,$args) = @_;
+  my $orig = "shrpd$mod\t$args";
+
+    if ($args =~ /%r([0-9]+),%r([0-9]+),([0-9]+),%r([0-9]+)/)	# format 14
+    {	my $opcode=(0x34<<26)|($2<<21)|($1<<16)|(1<<10)|$4;
+	my $cpos=63-$3;
+	$opcode |= (($cpos&0x20)<<6)|(($cpos&0x1f)<<5);		# encode sa
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    else { "\t".$orig; }
+};
+
+my $sub = sub {
+  my ($mod,$args) = @_;
+  my $orig = "sub$mod\t$args";
+
+    if ($mod eq ",db" && $args =~ /%r([0-9]+),%r([0-9]+),%r([0-9]+)/) {
+	my $opcode=(0x02<<26)|($2<<21)|($1<<16)|$3;
+	$opcode|=(1<<10);	# e1
+	$opcode|=(1<<8);	# e2
+	$opcode|=(1<<5);	# d
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig
+    }
+    else { "\t".$orig; }
+};
+
+sub assemble {
+  my ($mnemonic,$mod,$args)=@_;
+  my $opcode = eval("\$$mnemonic");
+
+    ref($opcode) eq 'CODE' ? &$opcode($mod,$args) : "\t$mnemonic$mod\t$args";
+}
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+	=~ /GNU assembler/) {
+    $gnuas = 1;
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+	# flip word order in 64-bit mode...
+	s/(xmpyu\s+)($fai|$fni)([LR])/$1.$2.($3 eq "L"?"R":"L")/e if ($BN_SZ==8);
+	# assemble 2.0 instructions in 32-bit mode...
+	s/^\s+([a-z]+)([\S]*)\s+([\S]*)/&assemble($1,$2,$3)/e if ($BN_SZ==4);
+
+	s/(\.LEVEL\s+2\.0)W/$1w/	if ($gnuas && $SIZE_T==8);
+	s/\.SPACE\s+\$TEXT\$/.text/	if ($gnuas && $SIZE_T==8);
+	s/\.SUBSPA.*//			if ($gnuas && $SIZE_T==8);
+	s/\bbv\b/bve/			if ($SIZE_T==8);
+
+	print $_,"\n";
+}
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ppc-mont.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ppc-mont.pl
new file mode 100644
index 000000000..ec7e019a4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ppc-mont.pl
@@ -0,0 +1,1990 @@
+#! /usr/bin/env perl
+# Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# April 2006
+
+# "Teaser" Montgomery multiplication module for PowerPC. It's possible
+# to gain a bit more by modulo-scheduling outer loop, then dedicated
+# squaring procedure should give further 20% and code can be adapted
+# for 32-bit application running on 64-bit CPU. As for the latter.
+# It won't be able to achieve "native" 64-bit performance, because in
+# 32-bit application context every addc instruction will have to be
+# expanded as addc, twice right shift by 32 and finally adde, etc.
+# So far RSA *sign* performance improvement over pre-bn_mul_mont asm
+# for 64-bit application running on PPC970/G5 is:
+#
+# 512-bit	+65%
+# 1024-bit	+35%
+# 2048-bit	+18%
+# 4096-bit	+4%
+
+# September 2016
+#
+# Add multiplication procedure operating on lengths divisible by 4
+# and squaring procedure operating on lengths divisible by 8. Length
+# is expressed in number of limbs. RSA private key operations are
+# ~35-50% faster (more for longer keys) on contemporary high-end POWER
+# processors in 64-bit builds, [mysteriously enough] more in 32-bit
+# builds. On low-end 32-bit processors performance improvement turned
+# to be marginal...
+
+$flavour = shift;
+
+if ($flavour =~ /32/) {
+	$BITS=	32;
+	$BNSZ=	$BITS/8;
+	$SIZE_T=4;
+	$RZONE=	224;
+
+	$LD=	"lwz";		# load
+	$LDU=	"lwzu";		# load and update
+	$LDX=	"lwzx";		# load indexed
+	$ST=	"stw";		# store
+	$STU=	"stwu";		# store and update
+	$STX=	"stwx";		# store indexed
+	$STUX=	"stwux";	# store indexed and update
+	$UMULL=	"mullw";	# unsigned multiply low
+	$UMULH=	"mulhwu";	# unsigned multiply high
+	$UCMP=	"cmplw";	# unsigned compare
+	$SHRI=	"srwi";		# unsigned shift right by immediate
+	$SHLI=	"slwi";		# unsigned shift left by immediate
+	$PUSH=	$ST;
+	$POP=	$LD;
+} elsif ($flavour =~ /64/) {
+	$BITS=	64;
+	$BNSZ=	$BITS/8;
+	$SIZE_T=8;
+	$RZONE=	288;
+
+	# same as above, but 64-bit mnemonics...
+	$LD=	"ld";		# load
+	$LDU=	"ldu";		# load and update
+	$LDX=	"ldx";		# load indexed
+	$ST=	"std";		# store
+	$STU=	"stdu";		# store and update
+	$STX=	"stdx";		# store indexed
+	$STUX=	"stdux";	# store indexed and update
+	$UMULL=	"mulld";	# unsigned multiply low
+	$UMULH=	"mulhdu";	# unsigned multiply high
+	$UCMP=	"cmpld";	# unsigned compare
+	$SHRI=	"srdi";		# unsigned shift right by immediate
+	$SHLI=	"sldi";		# unsigned shift left by immediate
+	$PUSH=	$ST;
+	$POP=	$LD;
+} else { die "nonsense $flavour"; }
+
+$FRAME=8*$SIZE_T+$RZONE;
+$LOCALS=8*$SIZE_T;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open STDOUT,"| $^X $xlate $flavour ".shift || die "can't call $xlate: $!";
+
+$sp="r1";
+$toc="r2";
+$rp="r3";
+$ap="r4";
+$bp="r5";
+$np="r6";
+$n0="r7";
+$num="r8";
+
+{
+my $ovf=$rp;
+my $rp="r9";	# $rp is reassigned
+my $aj="r10";
+my $nj="r11";
+my $tj="r12";
+# non-volatile registers
+my $i="r20";
+my $j="r21";
+my $tp="r22";
+my $m0="r23";
+my $m1="r24";
+my $lo0="r25";
+my $hi0="r26";
+my $lo1="r27";
+my $hi1="r28";
+my $alo="r29";
+my $ahi="r30";
+my $nlo="r31";
+#
+my $nhi="r0";
+
+$code=<<___;
+.machine "any"
+.text
+
+.globl	.bn_mul_mont_int
+.align	5
+.bn_mul_mont_int:
+	mr	$rp,r3		; $rp is reassigned
+	li	r3,0
+___
+$code.=<<___ if ($BNSZ==4);
+	cmpwi	$num,32		; longer key performance is not better
+	bgelr
+___
+$code.=<<___;
+	slwi	$num,$num,`log($BNSZ)/log(2)`
+	li	$tj,-4096
+	addi	$ovf,$num,$FRAME
+	subf	$ovf,$ovf,$sp	; $sp-$ovf
+	and	$ovf,$ovf,$tj	; minimize TLB usage
+	subf	$ovf,$sp,$ovf	; $ovf-$sp
+	mr	$tj,$sp
+	srwi	$num,$num,`log($BNSZ)/log(2)`
+	$STUX	$sp,$sp,$ovf
+
+	$PUSH	r20,`-12*$SIZE_T`($tj)
+	$PUSH	r21,`-11*$SIZE_T`($tj)
+	$PUSH	r22,`-10*$SIZE_T`($tj)
+	$PUSH	r23,`-9*$SIZE_T`($tj)
+	$PUSH	r24,`-8*$SIZE_T`($tj)
+	$PUSH	r25,`-7*$SIZE_T`($tj)
+	$PUSH	r26,`-6*$SIZE_T`($tj)
+	$PUSH	r27,`-5*$SIZE_T`($tj)
+	$PUSH	r28,`-4*$SIZE_T`($tj)
+	$PUSH	r29,`-3*$SIZE_T`($tj)
+	$PUSH	r30,`-2*$SIZE_T`($tj)
+	$PUSH	r31,`-1*$SIZE_T`($tj)
+
+	$LD	$n0,0($n0)	; pull n0[0] value
+	addi	$num,$num,-2	; adjust $num for counter register
+
+	$LD	$m0,0($bp)	; m0=bp[0]
+	$LD	$aj,0($ap)	; ap[0]
+	addi	$tp,$sp,$LOCALS
+	$UMULL	$lo0,$aj,$m0	; ap[0]*bp[0]
+	$UMULH	$hi0,$aj,$m0
+
+	$LD	$aj,$BNSZ($ap)	; ap[1]
+	$LD	$nj,0($np)	; np[0]
+
+	$UMULL	$m1,$lo0,$n0	; "tp[0]"*n0
+
+	$UMULL	$alo,$aj,$m0	; ap[1]*bp[0]
+	$UMULH	$ahi,$aj,$m0
+
+	$UMULL	$lo1,$nj,$m1	; np[0]*m1
+	$UMULH	$hi1,$nj,$m1
+	$LD	$nj,$BNSZ($np)	; np[1]
+	addc	$lo1,$lo1,$lo0
+	addze	$hi1,$hi1
+
+	$UMULL	$nlo,$nj,$m1	; np[1]*m1
+	$UMULH	$nhi,$nj,$m1
+
+	mtctr	$num
+	li	$j,`2*$BNSZ`
+.align	4
+L1st:
+	$LDX	$aj,$ap,$j	; ap[j]
+	addc	$lo0,$alo,$hi0
+	$LDX	$nj,$np,$j	; np[j]
+	addze	$hi0,$ahi
+	$UMULL	$alo,$aj,$m0	; ap[j]*bp[0]
+	addc	$lo1,$nlo,$hi1
+	$UMULH	$ahi,$aj,$m0
+	addze	$hi1,$nhi
+	$UMULL	$nlo,$nj,$m1	; np[j]*m1
+	addc	$lo1,$lo1,$lo0	; np[j]*m1+ap[j]*bp[0]
+	$UMULH	$nhi,$nj,$m1
+	addze	$hi1,$hi1
+	$ST	$lo1,0($tp)	; tp[j-1]
+
+	addi	$j,$j,$BNSZ	; j++
+	addi	$tp,$tp,$BNSZ	; tp++
+	bdnz	L1st
+;L1st
+	addc	$lo0,$alo,$hi0
+	addze	$hi0,$ahi
+
+	addc	$lo1,$nlo,$hi1
+	addze	$hi1,$nhi
+	addc	$lo1,$lo1,$lo0	; np[j]*m1+ap[j]*bp[0]
+	addze	$hi1,$hi1
+	$ST	$lo1,0($tp)	; tp[j-1]
+
+	li	$ovf,0
+	addc	$hi1,$hi1,$hi0
+	addze	$ovf,$ovf	; upmost overflow bit
+	$ST	$hi1,$BNSZ($tp)
+
+	li	$i,$BNSZ
+.align	4
+Louter:
+	$LDX	$m0,$bp,$i	; m0=bp[i]
+	$LD	$aj,0($ap)	; ap[0]
+	addi	$tp,$sp,$LOCALS
+	$LD	$tj,$LOCALS($sp); tp[0]
+	$UMULL	$lo0,$aj,$m0	; ap[0]*bp[i]
+	$UMULH	$hi0,$aj,$m0
+	$LD	$aj,$BNSZ($ap)	; ap[1]
+	$LD	$nj,0($np)	; np[0]
+	addc	$lo0,$lo0,$tj	; ap[0]*bp[i]+tp[0]
+	$UMULL	$alo,$aj,$m0	; ap[j]*bp[i]
+	addze	$hi0,$hi0
+	$UMULL	$m1,$lo0,$n0	; tp[0]*n0
+	$UMULH	$ahi,$aj,$m0
+	$UMULL	$lo1,$nj,$m1	; np[0]*m1
+	$UMULH	$hi1,$nj,$m1
+	$LD	$nj,$BNSZ($np)	; np[1]
+	addc	$lo1,$lo1,$lo0
+	$UMULL	$nlo,$nj,$m1	; np[1]*m1
+	addze	$hi1,$hi1
+	$UMULH	$nhi,$nj,$m1
+
+	mtctr	$num
+	li	$j,`2*$BNSZ`
+.align	4
+Linner:
+	$LDX	$aj,$ap,$j	; ap[j]
+	addc	$lo0,$alo,$hi0
+	$LD	$tj,$BNSZ($tp)	; tp[j]
+	addze	$hi0,$ahi
+	$LDX	$nj,$np,$j	; np[j]
+	addc	$lo1,$nlo,$hi1
+	$UMULL	$alo,$aj,$m0	; ap[j]*bp[i]
+	addze	$hi1,$nhi
+	$UMULH	$ahi,$aj,$m0
+	addc	$lo0,$lo0,$tj	; ap[j]*bp[i]+tp[j]
+	$UMULL	$nlo,$nj,$m1	; np[j]*m1
+	addze	$hi0,$hi0
+	$UMULH	$nhi,$nj,$m1
+	addc	$lo1,$lo1,$lo0	; np[j]*m1+ap[j]*bp[i]+tp[j]
+	addi	$j,$j,$BNSZ	; j++
+	addze	$hi1,$hi1
+	$ST	$lo1,0($tp)	; tp[j-1]
+	addi	$tp,$tp,$BNSZ	; tp++
+	bdnz	Linner
+;Linner
+	$LD	$tj,$BNSZ($tp)	; tp[j]
+	addc	$lo0,$alo,$hi0
+	addze	$hi0,$ahi
+	addc	$lo0,$lo0,$tj	; ap[j]*bp[i]+tp[j]
+	addze	$hi0,$hi0
+
+	addc	$lo1,$nlo,$hi1
+	addze	$hi1,$nhi
+	addc	$lo1,$lo1,$lo0	; np[j]*m1+ap[j]*bp[i]+tp[j]
+	addze	$hi1,$hi1
+	$ST	$lo1,0($tp)	; tp[j-1]
+
+	addic	$ovf,$ovf,-1	; move upmost overflow to XER[CA]
+	li	$ovf,0
+	adde	$hi1,$hi1,$hi0
+	addze	$ovf,$ovf
+	$ST	$hi1,$BNSZ($tp)
+;
+	slwi	$tj,$num,`log($BNSZ)/log(2)`
+	$UCMP	$i,$tj
+	addi	$i,$i,$BNSZ
+	ble	Louter
+
+	addi	$num,$num,2	; restore $num
+	subfc	$j,$j,$j	; j=0 and "clear" XER[CA]
+	addi	$tp,$sp,$LOCALS
+	mtctr	$num
+
+.align	4
+Lsub:	$LDX	$tj,$tp,$j
+	$LDX	$nj,$np,$j
+	subfe	$aj,$nj,$tj	; tp[j]-np[j]
+	$STX	$aj,$rp,$j
+	addi	$j,$j,$BNSZ
+	bdnz	Lsub
+
+	li	$j,0
+	mtctr	$num
+	subfe	$ovf,$j,$ovf	; handle upmost overflow bit
+
+.align	4
+Lcopy:				; conditional copy
+	$LDX	$tj,$tp,$j
+	$LDX	$aj,$rp,$j
+	and	$tj,$tj,$ovf
+	andc	$aj,$aj,$ovf
+	$STX	$j,$tp,$j	; zap at once
+	or	$aj,$aj,$tj
+	$STX	$aj,$rp,$j
+	addi	$j,$j,$BNSZ
+	bdnz	Lcopy
+
+	$POP	$tj,0($sp)
+	li	r3,1
+	$POP	r20,`-12*$SIZE_T`($tj)
+	$POP	r21,`-11*$SIZE_T`($tj)
+	$POP	r22,`-10*$SIZE_T`($tj)
+	$POP	r23,`-9*$SIZE_T`($tj)
+	$POP	r24,`-8*$SIZE_T`($tj)
+	$POP	r25,`-7*$SIZE_T`($tj)
+	$POP	r26,`-6*$SIZE_T`($tj)
+	$POP	r27,`-5*$SIZE_T`($tj)
+	$POP	r28,`-4*$SIZE_T`($tj)
+	$POP	r29,`-3*$SIZE_T`($tj)
+	$POP	r30,`-2*$SIZE_T`($tj)
+	$POP	r31,`-1*$SIZE_T`($tj)
+	mr	$sp,$tj
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,12,6,0
+	.long	0
+.size	.bn_mul_mont_int,.-.bn_mul_mont_int
+___
+}
+if (1) {
+my ($a0,$a1,$a2,$a3,
+    $t0,$t1,$t2,$t3,
+    $m0,$m1,$m2,$m3,
+    $acc0,$acc1,$acc2,$acc3,$acc4,
+    $bi,$mi,$tp,$ap_end,$cnt) = map("r$_",(9..12,14..31));
+my  ($carry,$zero) = ($rp,"r0");
+
+# sp----------->+-------------------------------+
+#		| saved sp			|
+#		+-------------------------------+
+#		.				.
+# +8*size_t	+-------------------------------+
+#		| 4 "n0*t0"			|
+#		.				.
+#		.				.
+# +12*size_t	+-------------------------------+
+#		| size_t tmp[num]		|
+#		.				.
+#		.				.
+#		.				.
+#		+-------------------------------+
+#		| topmost carry			|
+#		.				.
+# -18*size_t	+-------------------------------+
+#		| 18 saved gpr, r14-r31		|
+#		.				.
+#		.				.
+#		+-------------------------------+
+$code.=<<___;
+.globl	.bn_mul4x_mont_int
+.align	5
+.bn_mul4x_mont_int:
+	andi.	r0,$num,7
+	bne	.Lmul4x_do
+	$UCMP	$ap,$bp
+	bne	.Lmul4x_do
+	b	.Lsqr8x_do
+.Lmul4x_do:
+	slwi	$num,$num,`log($SIZE_T)/log(2)`
+	mr	$a0,$sp
+	li	$a1,-32*$SIZE_T
+	sub	$a1,$a1,$num
+	$STUX	$sp,$sp,$a1		# alloca
+
+	$PUSH	r14,-$SIZE_T*18($a0)
+	$PUSH	r15,-$SIZE_T*17($a0)
+	$PUSH	r16,-$SIZE_T*16($a0)
+	$PUSH	r17,-$SIZE_T*15($a0)
+	$PUSH	r18,-$SIZE_T*14($a0)
+	$PUSH	r19,-$SIZE_T*13($a0)
+	$PUSH	r20,-$SIZE_T*12($a0)
+	$PUSH	r21,-$SIZE_T*11($a0)
+	$PUSH	r22,-$SIZE_T*10($a0)
+	$PUSH	r23,-$SIZE_T*9($a0)
+	$PUSH	r24,-$SIZE_T*8($a0)
+	$PUSH	r25,-$SIZE_T*7($a0)
+	$PUSH	r26,-$SIZE_T*6($a0)
+	$PUSH	r27,-$SIZE_T*5($a0)
+	$PUSH	r28,-$SIZE_T*4($a0)
+	$PUSH	r29,-$SIZE_T*3($a0)
+	$PUSH	r30,-$SIZE_T*2($a0)
+	$PUSH	r31,-$SIZE_T*1($a0)
+
+	subi	$ap,$ap,$SIZE_T		# bias by -1
+	subi	$np,$np,$SIZE_T		# bias by -1
+	subi	$rp,$rp,$SIZE_T		# bias by -1
+	$LD	$n0,0($n0)		# *n0
+
+	add	$t0,$bp,$num
+	add	$ap_end,$ap,$num
+	subi	$t0,$t0,$SIZE_T*4	# &b[num-4]
+
+	$LD	$bi,$SIZE_T*0($bp)	# b[0]
+	li	$acc0,0
+	$LD	$a0,$SIZE_T*1($ap)	# a[0..3]
+	li	$acc1,0
+	$LD	$a1,$SIZE_T*2($ap)
+	li	$acc2,0
+	$LD	$a2,$SIZE_T*3($ap)
+	li	$acc3,0
+	$LDU	$a3,$SIZE_T*4($ap)
+	$LD	$m0,$SIZE_T*1($np)	# n[0..3]
+	$LD	$m1,$SIZE_T*2($np)
+	$LD	$m2,$SIZE_T*3($np)
+	$LDU	$m3,$SIZE_T*4($np)
+
+	$PUSH	$rp,$SIZE_T*6($sp)	# offload rp and &b[num-4]
+	$PUSH	$t0,$SIZE_T*7($sp)
+	li	$carry,0
+	addic	$tp,$sp,$SIZE_T*7	# &t[-1], clear carry bit
+	li	$cnt,0
+	li	$zero,0
+	b	.Loop_mul4x_1st_reduction
+
+.align	5
+.Loop_mul4x_1st_reduction:
+	$UMULL	$t0,$a0,$bi		# lo(a[0..3]*b[0])
+	addze	$carry,$carry		# modulo-scheduled
+	$UMULL	$t1,$a1,$bi
+	addi	$cnt,$cnt,$SIZE_T
+	$UMULL	$t2,$a2,$bi
+	andi.	$cnt,$cnt,$SIZE_T*4-1
+	$UMULL	$t3,$a3,$bi
+	addc	$acc0,$acc0,$t0
+	$UMULH	$t0,$a0,$bi		# hi(a[0..3]*b[0])
+	adde	$acc1,$acc1,$t1
+	$UMULH	$t1,$a1,$bi
+	adde	$acc2,$acc2,$t2
+	$UMULL	$mi,$acc0,$n0		# t[0]*n0
+	adde	$acc3,$acc3,$t3
+	$UMULH	$t2,$a2,$bi
+	addze	$acc4,$zero
+	$UMULH	$t3,$a3,$bi
+	$LDX	$bi,$bp,$cnt		# next b[i] (or b[0])
+	addc	$acc1,$acc1,$t0
+	# (*)	mul	$t0,$m0,$mi	# lo(n[0..3]*t[0]*n0)
+	$STU	$mi,$SIZE_T($tp)	# put aside t[0]*n0 for tail processing
+	adde	$acc2,$acc2,$t1
+	$UMULL	$t1,$m1,$mi
+	adde	$acc3,$acc3,$t2
+	$UMULL	$t2,$m2,$mi
+	adde	$acc4,$acc4,$t3		# can't overflow
+	$UMULL	$t3,$m3,$mi
+	# (*)	addc	$acc0,$acc0,$t0
+	# (*)	As for removal of first multiplication and addition
+	#	instructions. The outcome of first addition is
+	#	guaranteed to be zero, which leaves two computationally
+	#	significant outcomes: it either carries or not. Then
+	#	question is when does it carry? Is there alternative
+	#	way to deduce it? If you follow operations, you can
+	#	observe that condition for carry is quite simple:
+	#	$acc0 being non-zero. So that carry can be calculated
+	#	by adding -1 to $acc0. That's what next instruction does.
+	addic	$acc0,$acc0,-1		# (*), discarded
+	$UMULH	$t0,$m0,$mi		# hi(n[0..3]*t[0]*n0)
+	adde	$acc0,$acc1,$t1
+	$UMULH	$t1,$m1,$mi
+	adde	$acc1,$acc2,$t2
+	$UMULH	$t2,$m2,$mi
+	adde	$acc2,$acc3,$t3
+	$UMULH	$t3,$m3,$mi
+	adde	$acc3,$acc4,$carry
+	addze	$carry,$zero
+	addc	$acc0,$acc0,$t0
+	adde	$acc1,$acc1,$t1
+	adde	$acc2,$acc2,$t2
+	adde	$acc3,$acc3,$t3
+	#addze	$carry,$carry
+	bne	.Loop_mul4x_1st_reduction
+
+	$UCMP	$ap_end,$ap
+	beq	.Lmul4x4_post_condition
+
+	$LD	$a0,$SIZE_T*1($ap)	# a[4..7]
+	$LD	$a1,$SIZE_T*2($ap)
+	$LD	$a2,$SIZE_T*3($ap)
+	$LDU	$a3,$SIZE_T*4($ap)
+	$LD	$mi,$SIZE_T*8($sp)	# a[0]*n0
+	$LD	$m0,$SIZE_T*1($np)	# n[4..7]
+	$LD	$m1,$SIZE_T*2($np)
+	$LD	$m2,$SIZE_T*3($np)
+	$LDU	$m3,$SIZE_T*4($np)
+	b	.Loop_mul4x_1st_tail
+
+.align	5
+.Loop_mul4x_1st_tail:
+	$UMULL	$t0,$a0,$bi		# lo(a[4..7]*b[i])
+	addze	$carry,$carry		# modulo-scheduled
+	$UMULL	$t1,$a1,$bi
+	addi	$cnt,$cnt,$SIZE_T
+	$UMULL	$t2,$a2,$bi
+	andi.	$cnt,$cnt,$SIZE_T*4-1
+	$UMULL	$t3,$a3,$bi
+	addc	$acc0,$acc0,$t0
+	$UMULH	$t0,$a0,$bi		# hi(a[4..7]*b[i])
+	adde	$acc1,$acc1,$t1
+	$UMULH	$t1,$a1,$bi
+	adde	$acc2,$acc2,$t2
+	$UMULH	$t2,$a2,$bi
+	adde	$acc3,$acc3,$t3
+	$UMULH	$t3,$a3,$bi
+	addze	$acc4,$zero
+	$LDX	$bi,$bp,$cnt		# next b[i] (or b[0])
+	addc	$acc1,$acc1,$t0
+	$UMULL	$t0,$m0,$mi		# lo(n[4..7]*a[0]*n0)
+	adde	$acc2,$acc2,$t1
+	$UMULL	$t1,$m1,$mi
+	adde	$acc3,$acc3,$t2
+	$UMULL	$t2,$m2,$mi
+	adde	$acc4,$acc4,$t3		# can't overflow
+	$UMULL	$t3,$m3,$mi
+	addc	$acc0,$acc0,$t0
+	$UMULH	$t0,$m0,$mi		# hi(n[4..7]*a[0]*n0)
+	adde	$acc1,$acc1,$t1
+	$UMULH	$t1,$m1,$mi
+	adde	$acc2,$acc2,$t2
+	$UMULH	$t2,$m2,$mi
+	adde	$acc3,$acc3,$t3
+	adde	$acc4,$acc4,$carry
+	$UMULH	$t3,$m3,$mi
+	addze	$carry,$zero
+	addi	$mi,$sp,$SIZE_T*8
+	$LDX	$mi,$mi,$cnt		# next t[0]*n0
+	$STU	$acc0,$SIZE_T($tp)	# word of result
+	addc	$acc0,$acc1,$t0
+	adde	$acc1,$acc2,$t1
+	adde	$acc2,$acc3,$t2
+	adde	$acc3,$acc4,$t3
+	#addze	$carry,$carry
+	bne	.Loop_mul4x_1st_tail
+
+	sub	$t1,$ap_end,$num	# rewinded $ap
+	$UCMP	$ap_end,$ap		# done yet?
+	beq	.Lmul4x_proceed
+
+	$LD	$a0,$SIZE_T*1($ap)
+	$LD	$a1,$SIZE_T*2($ap)
+	$LD	$a2,$SIZE_T*3($ap)
+	$LDU	$a3,$SIZE_T*4($ap)
+	$LD	$m0,$SIZE_T*1($np)
+	$LD	$m1,$SIZE_T*2($np)
+	$LD	$m2,$SIZE_T*3($np)
+	$LDU	$m3,$SIZE_T*4($np)
+	b	.Loop_mul4x_1st_tail
+
+.align	5
+.Lmul4x_proceed:
+	$LDU	$bi,$SIZE_T*4($bp)	# *++b
+	addze	$carry,$carry		# topmost carry
+	$LD	$a0,$SIZE_T*1($t1)
+	$LD	$a1,$SIZE_T*2($t1)
+	$LD	$a2,$SIZE_T*3($t1)
+	$LD	$a3,$SIZE_T*4($t1)
+	addi	$ap,$t1,$SIZE_T*4
+	sub	$np,$np,$num		# rewind np
+
+	$ST	$acc0,$SIZE_T*1($tp)	# result
+	$ST	$acc1,$SIZE_T*2($tp)
+	$ST	$acc2,$SIZE_T*3($tp)
+	$ST	$acc3,$SIZE_T*4($tp)
+	$ST	$carry,$SIZE_T*5($tp)	# save topmost carry
+	$LD	$acc0,$SIZE_T*12($sp)	# t[0..3]
+	$LD	$acc1,$SIZE_T*13($sp)
+	$LD	$acc2,$SIZE_T*14($sp)
+	$LD	$acc3,$SIZE_T*15($sp)
+
+	$LD	$m0,$SIZE_T*1($np)	# n[0..3]
+	$LD	$m1,$SIZE_T*2($np)
+	$LD	$m2,$SIZE_T*3($np)
+	$LDU	$m3,$SIZE_T*4($np)
+	addic	$tp,$sp,$SIZE_T*7	# &t[-1], clear carry bit
+	li	$carry,0
+	b	.Loop_mul4x_reduction
+
+.align	5
+.Loop_mul4x_reduction:
+	$UMULL	$t0,$a0,$bi		# lo(a[0..3]*b[4])
+	addze	$carry,$carry		# modulo-scheduled
+	$UMULL	$t1,$a1,$bi
+	addi	$cnt,$cnt,$SIZE_T
+	$UMULL	$t2,$a2,$bi
+	andi.	$cnt,$cnt,$SIZE_T*4-1
+	$UMULL	$t3,$a3,$bi
+	addc	$acc0,$acc0,$t0
+	$UMULH	$t0,$a0,$bi		# hi(a[0..3]*b[4])
+	adde	$acc1,$acc1,$t1
+	$UMULH	$t1,$a1,$bi
+	adde	$acc2,$acc2,$t2
+	$UMULL	$mi,$acc0,$n0		# t[0]*n0
+	adde	$acc3,$acc3,$t3
+	$UMULH	$t2,$a2,$bi
+	addze	$acc4,$zero
+	$UMULH	$t3,$a3,$bi
+	$LDX	$bi,$bp,$cnt		# next b[i]
+	addc	$acc1,$acc1,$t0
+	# (*)	mul	$t0,$m0,$mi
+	$STU	$mi,$SIZE_T($tp)	# put aside t[0]*n0 for tail processing
+	adde	$acc2,$acc2,$t1
+	$UMULL	$t1,$m1,$mi		# lo(n[0..3]*t[0]*n0
+	adde	$acc3,$acc3,$t2
+	$UMULL	$t2,$m2,$mi
+	adde	$acc4,$acc4,$t3		# can't overflow
+	$UMULL	$t3,$m3,$mi
+	# (*)	addc	$acc0,$acc0,$t0
+	addic	$acc0,$acc0,-1		# (*), discarded
+	$UMULH	$t0,$m0,$mi		# hi(n[0..3]*t[0]*n0
+	adde	$acc0,$acc1,$t1
+	$UMULH	$t1,$m1,$mi
+	adde	$acc1,$acc2,$t2
+	$UMULH	$t2,$m2,$mi
+	adde	$acc2,$acc3,$t3
+	$UMULH	$t3,$m3,$mi
+	adde	$acc3,$acc4,$carry
+	addze	$carry,$zero
+	addc	$acc0,$acc0,$t0
+	adde	$acc1,$acc1,$t1
+	adde	$acc2,$acc2,$t2
+	adde	$acc3,$acc3,$t3
+	#addze	$carry,$carry
+	bne	.Loop_mul4x_reduction
+
+	$LD	$t0,$SIZE_T*5($tp)	# t[4..7]
+	addze	$carry,$carry
+	$LD	$t1,$SIZE_T*6($tp)
+	$LD	$t2,$SIZE_T*7($tp)
+	$LD	$t3,$SIZE_T*8($tp)
+	$LD	$a0,$SIZE_T*1($ap)	# a[4..7]
+	$LD	$a1,$SIZE_T*2($ap)
+	$LD	$a2,$SIZE_T*3($ap)
+	$LDU	$a3,$SIZE_T*4($ap)
+	addc	$acc0,$acc0,$t0
+	adde	$acc1,$acc1,$t1
+	adde	$acc2,$acc2,$t2
+	adde	$acc3,$acc3,$t3
+	#addze	$carry,$carry
+
+	$LD	$mi,$SIZE_T*8($sp)	# t[0]*n0
+	$LD	$m0,$SIZE_T*1($np)	# n[4..7]
+	$LD	$m1,$SIZE_T*2($np)
+	$LD	$m2,$SIZE_T*3($np)
+	$LDU	$m3,$SIZE_T*4($np)
+	b	.Loop_mul4x_tail
+
+.align	5
+.Loop_mul4x_tail:
+	$UMULL	$t0,$a0,$bi		# lo(a[4..7]*b[4])
+	addze	$carry,$carry		# modulo-scheduled
+	$UMULL	$t1,$a1,$bi
+	addi	$cnt,$cnt,$SIZE_T
+	$UMULL	$t2,$a2,$bi
+	andi.	$cnt,$cnt,$SIZE_T*4-1
+	$UMULL	$t3,$a3,$bi
+	addc	$acc0,$acc0,$t0
+	$UMULH	$t0,$a0,$bi		# hi(a[4..7]*b[4])
+	adde	$acc1,$acc1,$t1
+	$UMULH	$t1,$a1,$bi
+	adde	$acc2,$acc2,$t2
+	$UMULH	$t2,$a2,$bi
+	adde	$acc3,$acc3,$t3
+	$UMULH	$t3,$a3,$bi
+	addze	$acc4,$zero
+	$LDX	$bi,$bp,$cnt		# next b[i]
+	addc	$acc1,$acc1,$t0
+	$UMULL	$t0,$m0,$mi		# lo(n[4..7]*t[0]*n0)
+	adde	$acc2,$acc2,$t1
+	$UMULL	$t1,$m1,$mi
+	adde	$acc3,$acc3,$t2
+	$UMULL	$t2,$m2,$mi
+	adde	$acc4,$acc4,$t3		# can't overflow
+	$UMULL	$t3,$m3,$mi
+	addc	$acc0,$acc0,$t0
+	$UMULH	$t0,$m0,$mi		# hi(n[4..7]*t[0]*n0)
+	adde	$acc1,$acc1,$t1
+	$UMULH	$t1,$m1,$mi
+	adde	$acc2,$acc2,$t2
+	$UMULH	$t2,$m2,$mi
+	adde	$acc3,$acc3,$t3
+	$UMULH	$t3,$m3,$mi
+	adde	$acc4,$acc4,$carry
+	addi	$mi,$sp,$SIZE_T*8
+	$LDX	$mi,$mi,$cnt		# next a[0]*n0
+	addze	$carry,$zero
+	$STU	$acc0,$SIZE_T($tp)	# word of result
+	addc	$acc0,$acc1,$t0
+	adde	$acc1,$acc2,$t1
+	adde	$acc2,$acc3,$t2
+	adde	$acc3,$acc4,$t3
+	#addze	$carry,$carry
+	bne	.Loop_mul4x_tail
+
+	$LD	$t0,$SIZE_T*5($tp)	# next t[i] or topmost carry
+	sub	$t1,$np,$num		# rewinded np?
+	addze	$carry,$carry
+	$UCMP	$ap_end,$ap		# done yet?
+	beq	.Loop_mul4x_break
+
+	$LD	$t1,$SIZE_T*6($tp)
+	$LD	$t2,$SIZE_T*7($tp)
+	$LD	$t3,$SIZE_T*8($tp)
+	$LD	$a0,$SIZE_T*1($ap)
+	$LD	$a1,$SIZE_T*2($ap)
+	$LD	$a2,$SIZE_T*3($ap)
+	$LDU	$a3,$SIZE_T*4($ap)
+	addc	$acc0,$acc0,$t0
+	adde	$acc1,$acc1,$t1
+	adde	$acc2,$acc2,$t2
+	adde	$acc3,$acc3,$t3
+	#addze	$carry,$carry
+
+	$LD	$m0,$SIZE_T*1($np)	# n[4..7]
+	$LD	$m1,$SIZE_T*2($np)
+	$LD	$m2,$SIZE_T*3($np)
+	$LDU	$m3,$SIZE_T*4($np)
+	b	.Loop_mul4x_tail
+
+.align	5
+.Loop_mul4x_break:
+	$POP	$t2,$SIZE_T*6($sp)	# pull rp and &b[num-4]
+	$POP	$t3,$SIZE_T*7($sp)
+	addc	$a0,$acc0,$t0		# accumulate topmost carry
+	$LD	$acc0,$SIZE_T*12($sp)	# t[0..3]
+	addze	$a1,$acc1
+	$LD	$acc1,$SIZE_T*13($sp)
+	addze	$a2,$acc2
+	$LD	$acc2,$SIZE_T*14($sp)
+	addze	$a3,$acc3
+	$LD	$acc3,$SIZE_T*15($sp)
+	addze	$carry,$carry		# topmost carry
+	$ST	$a0,$SIZE_T*1($tp)	# result
+	sub	$ap,$ap_end,$num	# rewind ap
+	$ST	$a1,$SIZE_T*2($tp)
+	$ST	$a2,$SIZE_T*3($tp)
+	$ST	$a3,$SIZE_T*4($tp)
+	$ST	$carry,$SIZE_T*5($tp)	# store topmost carry
+
+	$LD	$m0,$SIZE_T*1($t1)	# n[0..3]
+	$LD	$m1,$SIZE_T*2($t1)
+	$LD	$m2,$SIZE_T*3($t1)
+	$LD	$m3,$SIZE_T*4($t1)
+	addi	$np,$t1,$SIZE_T*4
+	$UCMP	$bp,$t3			# done yet?
+	beq	.Lmul4x_post
+
+	$LDU	$bi,$SIZE_T*4($bp)
+	$LD	$a0,$SIZE_T*1($ap)	# a[0..3]
+	$LD	$a1,$SIZE_T*2($ap)
+	$LD	$a2,$SIZE_T*3($ap)
+	$LDU	$a3,$SIZE_T*4($ap)
+	li	$carry,0
+	addic	$tp,$sp,$SIZE_T*7	# &t[-1], clear carry bit
+	b	.Loop_mul4x_reduction
+
+.align	5
+.Lmul4x_post:
+	# Final step. We see if result is larger than modulus, and
+	# if it is, subtract the modulus. But comparison implies
+	# subtraction. So we subtract modulus, see if it borrowed,
+	# and conditionally copy original value.
+	srwi	$cnt,$num,`log($SIZE_T)/log(2)+2`
+	mr	$bp,$t2			# &rp[-1]
+	subi	$cnt,$cnt,1
+	mr	$ap_end,$t2		# &rp[-1] copy
+	subfc	$t0,$m0,$acc0
+	addi	$tp,$sp,$SIZE_T*15
+	subfe	$t1,$m1,$acc1
+
+	mtctr	$cnt
+.Lmul4x_sub:
+	$LD	$m0,$SIZE_T*1($np)
+	$LD	$acc0,$SIZE_T*1($tp)
+	subfe	$t2,$m2,$acc2
+	$LD	$m1,$SIZE_T*2($np)
+	$LD	$acc1,$SIZE_T*2($tp)
+	subfe	$t3,$m3,$acc3
+	$LD	$m2,$SIZE_T*3($np)
+	$LD	$acc2,$SIZE_T*3($tp)
+	$LDU	$m3,$SIZE_T*4($np)
+	$LDU	$acc3,$SIZE_T*4($tp)
+	$ST	$t0,$SIZE_T*1($bp)
+	$ST	$t1,$SIZE_T*2($bp)
+	subfe	$t0,$m0,$acc0
+	$ST	$t2,$SIZE_T*3($bp)
+	$STU	$t3,$SIZE_T*4($bp)
+	subfe	$t1,$m1,$acc1
+	bdnz	.Lmul4x_sub
+
+	 $LD	$a0,$SIZE_T*1($ap_end)
+	$ST	$t0,$SIZE_T*1($bp)
+	 $LD	$t0,$SIZE_T*12($sp)
+	subfe	$t2,$m2,$acc2
+	 $LD	$a1,$SIZE_T*2($ap_end)
+	$ST	$t1,$SIZE_T*2($bp)
+	 $LD	$t1,$SIZE_T*13($sp)
+	subfe	$t3,$m3,$acc3
+	subfe	$carry,$zero,$carry	# did it borrow?
+	 addi	$tp,$sp,$SIZE_T*12
+	 $LD	$a2,$SIZE_T*3($ap_end)
+	$ST	$t2,$SIZE_T*3($bp)
+	 $LD	$t2,$SIZE_T*14($sp)
+	 $LD	$a3,$SIZE_T*4($ap_end)
+	$ST	$t3,$SIZE_T*4($bp)
+	 $LD	$t3,$SIZE_T*15($sp)
+
+	mtctr	$cnt
+.Lmul4x_cond_copy:
+	and	$t0,$t0,$carry
+	andc	$a0,$a0,$carry
+	$ST	$zero,$SIZE_T*0($tp)	# wipe stack clean
+	and	$t1,$t1,$carry
+	andc	$a1,$a1,$carry
+	$ST	$zero,$SIZE_T*1($tp)
+	and	$t2,$t2,$carry
+	andc	$a2,$a2,$carry
+	$ST	$zero,$SIZE_T*2($tp)
+	and	$t3,$t3,$carry
+	andc	$a3,$a3,$carry
+	$ST	$zero,$SIZE_T*3($tp)
+	or	$acc0,$t0,$a0
+	$LD	$a0,$SIZE_T*5($ap_end)
+	$LD	$t0,$SIZE_T*4($tp)
+	or	$acc1,$t1,$a1
+	$LD	$a1,$SIZE_T*6($ap_end)
+	$LD	$t1,$SIZE_T*5($tp)
+	or	$acc2,$t2,$a2
+	$LD	$a2,$SIZE_T*7($ap_end)
+	$LD	$t2,$SIZE_T*6($tp)
+	or	$acc3,$t3,$a3
+	$LD	$a3,$SIZE_T*8($ap_end)
+	$LD	$t3,$SIZE_T*7($tp)
+	addi	$tp,$tp,$SIZE_T*4
+	$ST	$acc0,$SIZE_T*1($ap_end)
+	$ST	$acc1,$SIZE_T*2($ap_end)
+	$ST	$acc2,$SIZE_T*3($ap_end)
+	$STU	$acc3,$SIZE_T*4($ap_end)
+	bdnz	.Lmul4x_cond_copy
+
+	$POP	$bp,0($sp)		# pull saved sp
+	and	$t0,$t0,$carry
+	andc	$a0,$a0,$carry
+	$ST	$zero,$SIZE_T*0($tp)
+	and	$t1,$t1,$carry
+	andc	$a1,$a1,$carry
+	$ST	$zero,$SIZE_T*1($tp)
+	and	$t2,$t2,$carry
+	andc	$a2,$a2,$carry
+	$ST	$zero,$SIZE_T*2($tp)
+	and	$t3,$t3,$carry
+	andc	$a3,$a3,$carry
+	$ST	$zero,$SIZE_T*3($tp)
+	or	$acc0,$t0,$a0
+	or	$acc1,$t1,$a1
+	$ST	$zero,$SIZE_T*4($tp)
+	or	$acc2,$t2,$a2
+	or	$acc3,$t3,$a3
+	$ST	$acc0,$SIZE_T*1($ap_end)
+	$ST	$acc1,$SIZE_T*2($ap_end)
+	$ST	$acc2,$SIZE_T*3($ap_end)
+	$ST	$acc3,$SIZE_T*4($ap_end)
+
+	b	.Lmul4x_done
+
+.align	4
+.Lmul4x4_post_condition:
+	$POP	$ap,$SIZE_T*6($sp)	# pull &rp[-1]
+	$POP	$bp,0($sp)		# pull saved sp
+	addze	$carry,$carry		# modulo-scheduled
+	# $acc0-3,$carry hold result, $m0-3 hold modulus
+	subfc	$a0,$m0,$acc0
+	subfe	$a1,$m1,$acc1
+	subfe	$a2,$m2,$acc2
+	subfe	$a3,$m3,$acc3
+	subfe	$carry,$zero,$carry	# did it borrow?
+
+	and	$m0,$m0,$carry
+	and	$m1,$m1,$carry
+	addc	$a0,$a0,$m0
+	and	$m2,$m2,$carry
+	adde	$a1,$a1,$m1
+	and	$m3,$m3,$carry
+	adde	$a2,$a2,$m2
+	adde	$a3,$a3,$m3
+
+	$ST	$a0,$SIZE_T*1($ap)	# write result
+	$ST	$a1,$SIZE_T*2($ap)
+	$ST	$a2,$SIZE_T*3($ap)
+	$ST	$a3,$SIZE_T*4($ap)
+
+.Lmul4x_done:
+	$ST	$zero,$SIZE_T*8($sp)	# wipe stack clean
+	$ST	$zero,$SIZE_T*9($sp)
+	$ST	$zero,$SIZE_T*10($sp)
+	$ST	$zero,$SIZE_T*11($sp)
+	li	r3,1			# signal "done"
+	$POP	r14,-$SIZE_T*18($bp)
+	$POP	r15,-$SIZE_T*17($bp)
+	$POP	r16,-$SIZE_T*16($bp)
+	$POP	r17,-$SIZE_T*15($bp)
+	$POP	r18,-$SIZE_T*14($bp)
+	$POP	r19,-$SIZE_T*13($bp)
+	$POP	r20,-$SIZE_T*12($bp)
+	$POP	r21,-$SIZE_T*11($bp)
+	$POP	r22,-$SIZE_T*10($bp)
+	$POP	r23,-$SIZE_T*9($bp)
+	$POP	r24,-$SIZE_T*8($bp)
+	$POP	r25,-$SIZE_T*7($bp)
+	$POP	r26,-$SIZE_T*6($bp)
+	$POP	r27,-$SIZE_T*5($bp)
+	$POP	r28,-$SIZE_T*4($bp)
+	$POP	r29,-$SIZE_T*3($bp)
+	$POP	r30,-$SIZE_T*2($bp)
+	$POP	r31,-$SIZE_T*1($bp)
+	mr	$sp,$bp
+	blr
+	.long	0
+	.byte	0,12,4,0x20,0x80,18,6,0
+	.long	0
+.size	.bn_mul4x_mont_int,.-.bn_mul4x_mont_int
+___
+}
+
+if (1) {
+########################################################################
+# Following is PPC adaptation of sqrx8x_mont from x86_64-mont5 module.
+
+my ($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("r$_",(9..12,14..17));
+my ($t0,$t1,$t2,$t3)=map("r$_",(18..21));
+my ($acc0,$acc1,$acc2,$acc3,$acc4,$acc5,$acc6,$acc7)=map("r$_",(22..29));
+my ($cnt,$carry,$zero)=("r30","r31","r0");
+my ($tp,$ap_end,$na0)=($bp,$np,$carry);
+
+# sp----------->+-------------------------------+
+#		| saved sp			|
+#		+-------------------------------+
+#		.				.
+# +12*size_t	+-------------------------------+
+#		| size_t tmp[2*num]		|
+#		.				.
+#		.				.
+#		.				.
+#		+-------------------------------+
+#		.				.
+# -18*size_t	+-------------------------------+
+#		| 18 saved gpr, r14-r31		|
+#		.				.
+#		.				.
+#		+-------------------------------+
+$code.=<<___;
+.align	5
+__bn_sqr8x_mont:
+.Lsqr8x_do:
+	mr	$a0,$sp
+	slwi	$a1,$num,`log($SIZE_T)/log(2)+1`
+	li	$a2,-32*$SIZE_T
+	sub	$a1,$a2,$a1
+	slwi	$num,$num,`log($SIZE_T)/log(2)`
+	$STUX	$sp,$sp,$a1		# alloca
+
+	$PUSH	r14,-$SIZE_T*18($a0)
+	$PUSH	r15,-$SIZE_T*17($a0)
+	$PUSH	r16,-$SIZE_T*16($a0)
+	$PUSH	r17,-$SIZE_T*15($a0)
+	$PUSH	r18,-$SIZE_T*14($a0)
+	$PUSH	r19,-$SIZE_T*13($a0)
+	$PUSH	r20,-$SIZE_T*12($a0)
+	$PUSH	r21,-$SIZE_T*11($a0)
+	$PUSH	r22,-$SIZE_T*10($a0)
+	$PUSH	r23,-$SIZE_T*9($a0)
+	$PUSH	r24,-$SIZE_T*8($a0)
+	$PUSH	r25,-$SIZE_T*7($a0)
+	$PUSH	r26,-$SIZE_T*6($a0)
+	$PUSH	r27,-$SIZE_T*5($a0)
+	$PUSH	r28,-$SIZE_T*4($a0)
+	$PUSH	r29,-$SIZE_T*3($a0)
+	$PUSH	r30,-$SIZE_T*2($a0)
+	$PUSH	r31,-$SIZE_T*1($a0)
+
+	subi	$ap,$ap,$SIZE_T		# bias by -1
+	subi	$t0,$np,$SIZE_T		# bias by -1
+	subi	$rp,$rp,$SIZE_T		# bias by -1
+	$LD	$n0,0($n0)		# *n0
+	li	$zero,0
+
+	add	$ap_end,$ap,$num
+	$LD	$a0,$SIZE_T*1($ap)
+	#li	$acc0,0
+	$LD	$a1,$SIZE_T*2($ap)
+	li	$acc1,0
+	$LD	$a2,$SIZE_T*3($ap)
+	li	$acc2,0
+	$LD	$a3,$SIZE_T*4($ap)
+	li	$acc3,0
+	$LD	$a4,$SIZE_T*5($ap)
+	li	$acc4,0
+	$LD	$a5,$SIZE_T*6($ap)
+	li	$acc5,0
+	$LD	$a6,$SIZE_T*7($ap)
+	li	$acc6,0
+	$LDU	$a7,$SIZE_T*8($ap)
+	li	$acc7,0
+
+	addi	$tp,$sp,$SIZE_T*11	# &tp[-1]
+	subic.	$cnt,$num,$SIZE_T*8
+	b	.Lsqr8x_zero_start
+
+.align	5
+.Lsqr8x_zero:
+	subic.	$cnt,$cnt,$SIZE_T*8
+	$ST	$zero,$SIZE_T*1($tp)
+	$ST	$zero,$SIZE_T*2($tp)
+	$ST	$zero,$SIZE_T*3($tp)
+	$ST	$zero,$SIZE_T*4($tp)
+	$ST	$zero,$SIZE_T*5($tp)
+	$ST	$zero,$SIZE_T*6($tp)
+	$ST	$zero,$SIZE_T*7($tp)
+	$ST	$zero,$SIZE_T*8($tp)
+.Lsqr8x_zero_start:
+	$ST	$zero,$SIZE_T*9($tp)
+	$ST	$zero,$SIZE_T*10($tp)
+	$ST	$zero,$SIZE_T*11($tp)
+	$ST	$zero,$SIZE_T*12($tp)
+	$ST	$zero,$SIZE_T*13($tp)
+	$ST	$zero,$SIZE_T*14($tp)
+	$ST	$zero,$SIZE_T*15($tp)
+	$STU	$zero,$SIZE_T*16($tp)
+	bne	.Lsqr8x_zero
+
+	$PUSH	$rp,$SIZE_T*6($sp)	# offload &rp[-1]
+	$PUSH	$t0,$SIZE_T*7($sp)	# offload &np[-1]
+	$PUSH	$n0,$SIZE_T*8($sp)	# offload n0
+	$PUSH	$tp,$SIZE_T*9($sp)	# &tp[2*num-1]
+	$PUSH	$zero,$SIZE_T*10($sp)	# initial top-most carry
+	addi	$tp,$sp,$SIZE_T*11	# &tp[-1]
+
+	# Multiply everything but a[i]*a[i]
+.align	5
+.Lsqr8x_outer_loop:
+	#						  a[1]a[0]     (i)
+	#					      a[2]a[0]
+	#					  a[3]a[0]
+	#				      a[4]a[0]
+	#				  a[5]a[0]
+	#			      a[6]a[0]
+	#			  a[7]a[0]
+	#					  a[2]a[1]	       (ii)
+	#				      a[3]a[1]
+	#				  a[4]a[1]
+	#			      a[5]a[1]
+	#			  a[6]a[1]
+	#		      a[7]a[1]
+	#				  a[3]a[2]		       (iii)
+	#			      a[4]a[2]
+	#			  a[5]a[2]
+	#		      a[6]a[2]
+	#		  a[7]a[2]
+	#			  a[4]a[3]			       (iv)
+	#		      a[5]a[3]
+	#		  a[6]a[3]
+	#	      a[7]a[3]
+	#		  a[5]a[4]				       (v)
+	#	      a[6]a[4]
+	#	  a[7]a[4]
+	#	  a[6]a[5]					       (vi)
+	#     a[7]a[5]
+	# a[7]a[6]						       (vii)
+
+	$UMULL	$t0,$a1,$a0		# lo(a[1..7]*a[0])		(i)
+	$UMULL	$t1,$a2,$a0
+	$UMULL	$t2,$a3,$a0
+	$UMULL	$t3,$a4,$a0
+	addc	$acc1,$acc1,$t0		# t[1]+lo(a[1]*a[0])
+	$UMULL	$t0,$a5,$a0
+	adde	$acc2,$acc2,$t1
+	$UMULL	$t1,$a6,$a0
+	adde	$acc3,$acc3,$t2
+	$UMULL	$t2,$a7,$a0
+	adde	$acc4,$acc4,$t3
+	$UMULH	$t3,$a1,$a0		# hi(a[1..7]*a[0])
+	adde	$acc5,$acc5,$t0
+	$UMULH	$t0,$a2,$a0
+	adde	$acc6,$acc6,$t1
+	$UMULH	$t1,$a3,$a0
+	adde	$acc7,$acc7,$t2
+	$UMULH	$t2,$a4,$a0
+	$ST	$acc0,$SIZE_T*1($tp)	# t[0]
+	addze	$acc0,$zero		# t[8]
+	$ST	$acc1,$SIZE_T*2($tp)	# t[1]
+	addc	$acc2,$acc2,$t3		# t[2]+lo(a[1]*a[0])
+	$UMULH	$t3,$a5,$a0
+	adde	$acc3,$acc3,$t0
+	$UMULH	$t0,$a6,$a0
+	adde	$acc4,$acc4,$t1
+	$UMULH	$t1,$a7,$a0
+	adde	$acc5,$acc5,$t2
+	 $UMULL	$t2,$a2,$a1		# lo(a[2..7]*a[1])		(ii)
+	adde	$acc6,$acc6,$t3
+	 $UMULL	$t3,$a3,$a1
+	adde	$acc7,$acc7,$t0
+	 $UMULL	$t0,$a4,$a1
+	adde	$acc0,$acc0,$t1
+
+	$UMULL	$t1,$a5,$a1
+	addc	$acc3,$acc3,$t2
+	$UMULL	$t2,$a6,$a1
+	adde	$acc4,$acc4,$t3
+	$UMULL	$t3,$a7,$a1
+	adde	$acc5,$acc5,$t0
+	$UMULH	$t0,$a2,$a1		# hi(a[2..7]*a[1])
+	adde	$acc6,$acc6,$t1
+	$UMULH	$t1,$a3,$a1
+	adde	$acc7,$acc7,$t2
+	$UMULH	$t2,$a4,$a1
+	adde	$acc0,$acc0,$t3
+	$UMULH	$t3,$a5,$a1
+	$ST	$acc2,$SIZE_T*3($tp)	# t[2]
+	addze	$acc1,$zero		# t[9]
+	$ST	$acc3,$SIZE_T*4($tp)	# t[3]
+	addc	$acc4,$acc4,$t0
+	$UMULH	$t0,$a6,$a1
+	adde	$acc5,$acc5,$t1
+	$UMULH	$t1,$a7,$a1
+	adde	$acc6,$acc6,$t2
+	 $UMULL	$t2,$a3,$a2		# lo(a[3..7]*a[2])		(iii)
+	adde	$acc7,$acc7,$t3
+	 $UMULL	$t3,$a4,$a2
+	adde	$acc0,$acc0,$t0
+	 $UMULL	$t0,$a5,$a2
+	adde	$acc1,$acc1,$t1
+
+	$UMULL	$t1,$a6,$a2
+	addc	$acc5,$acc5,$t2
+	$UMULL	$t2,$a7,$a2
+	adde	$acc6,$acc6,$t3
+	$UMULH	$t3,$a3,$a2		# hi(a[3..7]*a[2])
+	adde	$acc7,$acc7,$t0
+	$UMULH	$t0,$a4,$a2
+	adde	$acc0,$acc0,$t1
+	$UMULH	$t1,$a5,$a2
+	adde	$acc1,$acc1,$t2
+	$UMULH	$t2,$a6,$a2
+	$ST	$acc4,$SIZE_T*5($tp)	# t[4]
+	addze	$acc2,$zero		# t[10]
+	$ST	$acc5,$SIZE_T*6($tp)	# t[5]
+	addc	$acc6,$acc6,$t3
+	$UMULH	$t3,$a7,$a2
+	adde	$acc7,$acc7,$t0
+	 $UMULL	$t0,$a4,$a3		# lo(a[4..7]*a[3])		(iv)
+	adde	$acc0,$acc0,$t1
+	 $UMULL	$t1,$a5,$a3
+	adde	$acc1,$acc1,$t2
+	 $UMULL	$t2,$a6,$a3
+	adde	$acc2,$acc2,$t3
+
+	$UMULL	$t3,$a7,$a3
+	addc	$acc7,$acc7,$t0
+	$UMULH	$t0,$a4,$a3		# hi(a[4..7]*a[3])
+	adde	$acc0,$acc0,$t1
+	$UMULH	$t1,$a5,$a3
+	adde	$acc1,$acc1,$t2
+	$UMULH	$t2,$a6,$a3
+	adde	$acc2,$acc2,$t3
+	$UMULH	$t3,$a7,$a3
+	$ST	$acc6,$SIZE_T*7($tp)	# t[6]
+	addze	$acc3,$zero		# t[11]
+	$STU	$acc7,$SIZE_T*8($tp)	# t[7]
+	addc	$acc0,$acc0,$t0
+	 $UMULL	$t0,$a5,$a4		# lo(a[5..7]*a[4])		(v)
+	adde	$acc1,$acc1,$t1
+	 $UMULL	$t1,$a6,$a4
+	adde	$acc2,$acc2,$t2
+	 $UMULL	$t2,$a7,$a4
+	adde	$acc3,$acc3,$t3
+
+	$UMULH	$t3,$a5,$a4		# hi(a[5..7]*a[4])
+	addc	$acc1,$acc1,$t0
+	$UMULH	$t0,$a6,$a4
+	adde	$acc2,$acc2,$t1
+	$UMULH	$t1,$a7,$a4
+	adde	$acc3,$acc3,$t2
+	 $UMULL	$t2,$a6,$a5		# lo(a[6..7]*a[5])		(vi)
+	addze	$acc4,$zero		# t[12]
+	addc	$acc2,$acc2,$t3
+	 $UMULL	$t3,$a7,$a5
+	adde	$acc3,$acc3,$t0
+	 $UMULH	$t0,$a6,$a5		# hi(a[6..7]*a[5])
+	adde	$acc4,$acc4,$t1
+
+	$UMULH	$t1,$a7,$a5
+	addc	$acc3,$acc3,$t2
+	 $UMULL	$t2,$a7,$a6		# lo(a[7]*a[6])			(vii)
+	adde	$acc4,$acc4,$t3
+	 $UMULH	$t3,$a7,$a6		# hi(a[7]*a[6])
+	addze	$acc5,$zero		# t[13]
+	addc	$acc4,$acc4,$t0
+	$UCMP	$ap_end,$ap		# done yet?
+	adde	$acc5,$acc5,$t1
+
+	addc	$acc5,$acc5,$t2
+	sub	$t0,$ap_end,$num	# rewinded ap
+	addze	$acc6,$zero		# t[14]
+	add	$acc6,$acc6,$t3
+
+	beq	.Lsqr8x_outer_break
+
+	mr	$n0,$a0
+	$LD	$a0,$SIZE_T*1($tp)
+	$LD	$a1,$SIZE_T*2($tp)
+	$LD	$a2,$SIZE_T*3($tp)
+	$LD	$a3,$SIZE_T*4($tp)
+	$LD	$a4,$SIZE_T*5($tp)
+	$LD	$a5,$SIZE_T*6($tp)
+	$LD	$a6,$SIZE_T*7($tp)
+	$LD	$a7,$SIZE_T*8($tp)
+	addc	$acc0,$acc0,$a0
+	$LD	$a0,$SIZE_T*1($ap)
+	adde	$acc1,$acc1,$a1
+	$LD	$a1,$SIZE_T*2($ap)
+	adde	$acc2,$acc2,$a2
+	$LD	$a2,$SIZE_T*3($ap)
+	adde	$acc3,$acc3,$a3
+	$LD	$a3,$SIZE_T*4($ap)
+	adde	$acc4,$acc4,$a4
+	$LD	$a4,$SIZE_T*5($ap)
+	adde	$acc5,$acc5,$a5
+	$LD	$a5,$SIZE_T*6($ap)
+	adde	$acc6,$acc6,$a6
+	$LD	$a6,$SIZE_T*7($ap)
+	subi	$rp,$ap,$SIZE_T*7
+	addze	$acc7,$a7
+	$LDU	$a7,$SIZE_T*8($ap)
+	#addze	$carry,$zero		# moved below
+	li	$cnt,0
+	b	.Lsqr8x_mul
+
+	#                                                          a[8]a[0]
+	#                                                      a[9]a[0]
+	#                                                  a[a]a[0]
+	#                                              a[b]a[0]
+	#                                          a[c]a[0]
+	#                                      a[d]a[0]
+	#                                  a[e]a[0]
+	#                              a[f]a[0]
+	#                                                      a[8]a[1]
+	#                          a[f]a[1]........................
+	#                                                  a[8]a[2]
+	#                      a[f]a[2]........................
+	#                                              a[8]a[3]
+	#                  a[f]a[3]........................
+	#                                          a[8]a[4]
+	#              a[f]a[4]........................
+	#                                      a[8]a[5]
+	#          a[f]a[5]........................
+	#                                  a[8]a[6]
+	#      a[f]a[6]........................
+	#                              a[8]a[7]
+	#  a[f]a[7]........................
+.align	5
+.Lsqr8x_mul:
+	$UMULL	$t0,$a0,$n0
+	addze	$carry,$zero		# carry bit, modulo-scheduled
+	$UMULL	$t1,$a1,$n0
+	addi	$cnt,$cnt,$SIZE_T
+	$UMULL	$t2,$a2,$n0
+	andi.	$cnt,$cnt,$SIZE_T*8-1
+	$UMULL	$t3,$a3,$n0
+	addc	$acc0,$acc0,$t0
+	$UMULL	$t0,$a4,$n0
+	adde	$acc1,$acc1,$t1
+	$UMULL	$t1,$a5,$n0
+	adde	$acc2,$acc2,$t2
+	$UMULL	$t2,$a6,$n0
+	adde	$acc3,$acc3,$t3
+	$UMULL	$t3,$a7,$n0
+	adde	$acc4,$acc4,$t0
+	$UMULH	$t0,$a0,$n0
+	adde	$acc5,$acc5,$t1
+	$UMULH	$t1,$a1,$n0
+	adde	$acc6,$acc6,$t2
+	$UMULH	$t2,$a2,$n0
+	adde	$acc7,$acc7,$t3
+	$UMULH	$t3,$a3,$n0
+	addze	$carry,$carry
+	$STU	$acc0,$SIZE_T($tp)
+	addc	$acc0,$acc1,$t0
+	$UMULH	$t0,$a4,$n0
+	adde	$acc1,$acc2,$t1
+	$UMULH	$t1,$a5,$n0
+	adde	$acc2,$acc3,$t2
+	$UMULH	$t2,$a6,$n0
+	adde	$acc3,$acc4,$t3
+	$UMULH	$t3,$a7,$n0
+	$LDX	$n0,$rp,$cnt
+	adde	$acc4,$acc5,$t0
+	adde	$acc5,$acc6,$t1
+	adde	$acc6,$acc7,$t2
+	adde	$acc7,$carry,$t3
+	#addze	$carry,$zero		# moved above
+	bne	.Lsqr8x_mul
+					# note that carry flag is guaranteed
+					# to be zero at this point
+	$UCMP	$ap,$ap_end		# done yet?
+	beq	.Lsqr8x_break
+
+	$LD	$a0,$SIZE_T*1($tp)
+	$LD	$a1,$SIZE_T*2($tp)
+	$LD	$a2,$SIZE_T*3($tp)
+	$LD	$a3,$SIZE_T*4($tp)
+	$LD	$a4,$SIZE_T*5($tp)
+	$LD	$a5,$SIZE_T*6($tp)
+	$LD	$a6,$SIZE_T*7($tp)
+	$LD	$a7,$SIZE_T*8($tp)
+	addc	$acc0,$acc0,$a0
+	$LD	$a0,$SIZE_T*1($ap)
+	adde	$acc1,$acc1,$a1
+	$LD	$a1,$SIZE_T*2($ap)
+	adde	$acc2,$acc2,$a2
+	$LD	$a2,$SIZE_T*3($ap)
+	adde	$acc3,$acc3,$a3
+	$LD	$a3,$SIZE_T*4($ap)
+	adde	$acc4,$acc4,$a4
+	$LD	$a4,$SIZE_T*5($ap)
+	adde	$acc5,$acc5,$a5
+	$LD	$a5,$SIZE_T*6($ap)
+	adde	$acc6,$acc6,$a6
+	$LD	$a6,$SIZE_T*7($ap)
+	adde	$acc7,$acc7,$a7
+	$LDU	$a7,$SIZE_T*8($ap)
+	#addze	$carry,$zero		# moved above
+	b	.Lsqr8x_mul
+
+.align	5
+.Lsqr8x_break:
+	$LD	$a0,$SIZE_T*8($rp)
+	addi	$ap,$rp,$SIZE_T*15
+	$LD	$a1,$SIZE_T*9($rp)
+	sub.	$t0,$ap_end,$ap		# is it last iteration?
+	$LD	$a2,$SIZE_T*10($rp)
+	sub	$t1,$tp,$t0
+	$LD	$a3,$SIZE_T*11($rp)
+	$LD	$a4,$SIZE_T*12($rp)
+	$LD	$a5,$SIZE_T*13($rp)
+	$LD	$a6,$SIZE_T*14($rp)
+	$LD	$a7,$SIZE_T*15($rp)
+	beq	.Lsqr8x_outer_loop
+
+	$ST	$acc0,$SIZE_T*1($tp)
+	$LD	$acc0,$SIZE_T*1($t1)
+	$ST	$acc1,$SIZE_T*2($tp)
+	$LD	$acc1,$SIZE_T*2($t1)
+	$ST	$acc2,$SIZE_T*3($tp)
+	$LD	$acc2,$SIZE_T*3($t1)
+	$ST	$acc3,$SIZE_T*4($tp)
+	$LD	$acc3,$SIZE_T*4($t1)
+	$ST	$acc4,$SIZE_T*5($tp)
+	$LD	$acc4,$SIZE_T*5($t1)
+	$ST	$acc5,$SIZE_T*6($tp)
+	$LD	$acc5,$SIZE_T*6($t1)
+	$ST	$acc6,$SIZE_T*7($tp)
+	$LD	$acc6,$SIZE_T*7($t1)
+	$ST	$acc7,$SIZE_T*8($tp)
+	$LD	$acc7,$SIZE_T*8($t1)
+	mr	$tp,$t1
+	b	.Lsqr8x_outer_loop
+
+.align	5
+.Lsqr8x_outer_break:
+	####################################################################
+	# Now multiply above result by 2 and add a[n-1]*a[n-1]|...|a[0]*a[0]
+	$LD	$a1,$SIZE_T*1($t0)	# recall that $t0 is &a[-1]
+	$LD	$a3,$SIZE_T*2($t0)
+	$LD	$a5,$SIZE_T*3($t0)
+	$LD	$a7,$SIZE_T*4($t0)
+	addi	$ap,$t0,$SIZE_T*4
+					# "tp[x]" comments are for num==8 case
+	$LD	$t1,$SIZE_T*13($sp)	# =tp[1], t[0] is not interesting
+	$LD	$t2,$SIZE_T*14($sp)
+	$LD	$t3,$SIZE_T*15($sp)
+	$LD	$t0,$SIZE_T*16($sp)
+
+	$ST	$acc0,$SIZE_T*1($tp)	# tp[8]=
+	srwi	$cnt,$num,`log($SIZE_T)/log(2)+2`
+	$ST	$acc1,$SIZE_T*2($tp)
+	subi	$cnt,$cnt,1
+	$ST	$acc2,$SIZE_T*3($tp)
+	$ST	$acc3,$SIZE_T*4($tp)
+	$ST	$acc4,$SIZE_T*5($tp)
+	$ST	$acc5,$SIZE_T*6($tp)
+	$ST	$acc6,$SIZE_T*7($tp)
+	#$ST	$acc7,$SIZE_T*8($tp)	# tp[15] is not interesting
+	addi	$tp,$sp,$SIZE_T*11	# &tp[-1]
+	$UMULL	$acc0,$a1,$a1
+	$UMULH	$a1,$a1,$a1
+	add	$acc1,$t1,$t1		# <<1
+	$SHRI	$t1,$t1,$BITS-1
+	$UMULL	$a2,$a3,$a3
+	$UMULH	$a3,$a3,$a3
+	addc	$acc1,$acc1,$a1
+	add	$acc2,$t2,$t2
+	$SHRI	$t2,$t2,$BITS-1
+	add	$acc3,$t3,$t3
+	$SHRI	$t3,$t3,$BITS-1
+	or	$acc2,$acc2,$t1
+
+	mtctr	$cnt
+.Lsqr4x_shift_n_add:
+	$UMULL	$a4,$a5,$a5
+	$UMULH	$a5,$a5,$a5
+	$LD	$t1,$SIZE_T*6($tp)	# =tp[5]
+	$LD	$a1,$SIZE_T*1($ap)
+	adde	$acc2,$acc2,$a2
+	add	$acc4,$t0,$t0
+	$SHRI	$t0,$t0,$BITS-1
+	or	$acc3,$acc3,$t2
+	$LD	$t2,$SIZE_T*7($tp)	# =tp[6]
+	adde	$acc3,$acc3,$a3
+	$LD	$a3,$SIZE_T*2($ap)
+	add	$acc5,$t1,$t1
+	$SHRI	$t1,$t1,$BITS-1
+	or	$acc4,$acc4,$t3
+	$LD	$t3,$SIZE_T*8($tp)	# =tp[7]
+	$UMULL	$a6,$a7,$a7
+	$UMULH	$a7,$a7,$a7
+	adde	$acc4,$acc4,$a4
+	add	$acc6,$t2,$t2
+	$SHRI	$t2,$t2,$BITS-1
+	or	$acc5,$acc5,$t0
+	$LD	$t0,$SIZE_T*9($tp)	# =tp[8]
+	adde	$acc5,$acc5,$a5
+	$LD	$a5,$SIZE_T*3($ap)
+	add	$acc7,$t3,$t3
+	$SHRI	$t3,$t3,$BITS-1
+	or	$acc6,$acc6,$t1
+	$LD	$t1,$SIZE_T*10($tp)	# =tp[9]
+	$UMULL	$a0,$a1,$a1
+	$UMULH	$a1,$a1,$a1
+	adde	$acc6,$acc6,$a6
+	$ST	$acc0,$SIZE_T*1($tp)	# tp[0]=
+	add	$acc0,$t0,$t0
+	$SHRI	$t0,$t0,$BITS-1
+	or	$acc7,$acc7,$t2
+	$LD	$t2,$SIZE_T*11($tp)	# =tp[10]
+	adde	$acc7,$acc7,$a7
+	$LDU	$a7,$SIZE_T*4($ap)
+	$ST	$acc1,$SIZE_T*2($tp)	# tp[1]=
+	add	$acc1,$t1,$t1
+	$SHRI	$t1,$t1,$BITS-1
+	or	$acc0,$acc0,$t3
+	$LD	$t3,$SIZE_T*12($tp)	# =tp[11]
+	$UMULL	$a2,$a3,$a3
+	$UMULH	$a3,$a3,$a3
+	adde	$acc0,$acc0,$a0
+	$ST	$acc2,$SIZE_T*3($tp)	# tp[2]=
+	add	$acc2,$t2,$t2
+	$SHRI	$t2,$t2,$BITS-1
+	or	$acc1,$acc1,$t0
+	$LD	$t0,$SIZE_T*13($tp)	# =tp[12]
+	adde	$acc1,$acc1,$a1
+	$ST	$acc3,$SIZE_T*4($tp)	# tp[3]=
+	$ST	$acc4,$SIZE_T*5($tp)	# tp[4]=
+	$ST	$acc5,$SIZE_T*6($tp)	# tp[5]=
+	$ST	$acc6,$SIZE_T*7($tp)	# tp[6]=
+	$STU	$acc7,$SIZE_T*8($tp)	# tp[7]=
+	add	$acc3,$t3,$t3
+	$SHRI	$t3,$t3,$BITS-1
+	or	$acc2,$acc2,$t1
+	bdnz	.Lsqr4x_shift_n_add
+___
+my ($np,$np_end)=($ap,$ap_end);
+$code.=<<___;
+	 $POP	$np,$SIZE_T*7($sp)	# pull &np[-1] and n0
+	 $POP	$n0,$SIZE_T*8($sp)
+
+	$UMULL	$a4,$a5,$a5
+	$UMULH	$a5,$a5,$a5
+	$ST	$acc0,$SIZE_T*1($tp)	# tp[8]=
+	 $LD	$acc0,$SIZE_T*12($sp)	# =tp[0]
+	$LD	$t1,$SIZE_T*6($tp)	# =tp[13]
+	adde	$acc2,$acc2,$a2
+	add	$acc4,$t0,$t0
+	$SHRI	$t0,$t0,$BITS-1
+	or	$acc3,$acc3,$t2
+	$LD	$t2,$SIZE_T*7($tp)	# =tp[14]
+	adde	$acc3,$acc3,$a3
+	add	$acc5,$t1,$t1
+	$SHRI	$t1,$t1,$BITS-1
+	or	$acc4,$acc4,$t3
+	$UMULL	$a6,$a7,$a7
+	$UMULH	$a7,$a7,$a7
+	adde	$acc4,$acc4,$a4
+	add	$acc6,$t2,$t2
+	$SHRI	$t2,$t2,$BITS-1
+	or	$acc5,$acc5,$t0
+	$ST	$acc1,$SIZE_T*2($tp)	# tp[9]=
+	 $LD	$acc1,$SIZE_T*13($sp)	# =tp[1]
+	adde	$acc5,$acc5,$a5
+	or	$acc6,$acc6,$t1
+	 $LD	$a0,$SIZE_T*1($np)
+	 $LD	$a1,$SIZE_T*2($np)
+	adde	$acc6,$acc6,$a6
+	 $LD	$a2,$SIZE_T*3($np)
+	 $LD	$a3,$SIZE_T*4($np)
+	adde	$acc7,$a7,$t2
+	 $LD	$a4,$SIZE_T*5($np)
+	 $LD	$a5,$SIZE_T*6($np)
+
+	################################################################
+	# Reduce by 8 limbs per iteration
+	$UMULL	$na0,$n0,$acc0		# t[0]*n0
+	li	$cnt,8
+	$LD	$a6,$SIZE_T*7($np)
+	add	$np_end,$np,$num
+	$LDU	$a7,$SIZE_T*8($np)
+	$ST	$acc2,$SIZE_T*3($tp)	# tp[10]=
+	$LD	$acc2,$SIZE_T*14($sp)
+	$ST	$acc3,$SIZE_T*4($tp)	# tp[11]=
+	$LD	$acc3,$SIZE_T*15($sp)
+	$ST	$acc4,$SIZE_T*5($tp)	# tp[12]=
+	$LD	$acc4,$SIZE_T*16($sp)
+	$ST	$acc5,$SIZE_T*6($tp)	# tp[13]=
+	$LD	$acc5,$SIZE_T*17($sp)
+	$ST	$acc6,$SIZE_T*7($tp)	# tp[14]=
+	$LD	$acc6,$SIZE_T*18($sp)
+	$ST	$acc7,$SIZE_T*8($tp)	# tp[15]=
+	$LD	$acc7,$SIZE_T*19($sp)
+	addi	$tp,$sp,$SIZE_T*11	# &tp[-1]
+	mtctr	$cnt
+	b	.Lsqr8x_reduction
+
+.align	5
+.Lsqr8x_reduction:
+	# (*)	$UMULL	$t0,$a0,$na0	# lo(n[0-7])*lo(t[0]*n0)
+	$UMULL	$t1,$a1,$na0
+	$UMULL	$t2,$a2,$na0
+	$STU	$na0,$SIZE_T($tp)	# put aside t[0]*n0 for tail processing
+	$UMULL	$t3,$a3,$na0
+	# (*)	addc	$acc0,$acc0,$t0
+	addic	$acc0,$acc0,-1		# (*)
+	$UMULL	$t0,$a4,$na0
+	adde	$acc0,$acc1,$t1
+	$UMULL	$t1,$a5,$na0
+	adde	$acc1,$acc2,$t2
+	$UMULL	$t2,$a6,$na0
+	adde	$acc2,$acc3,$t3
+	$UMULL	$t3,$a7,$na0
+	adde	$acc3,$acc4,$t0
+	$UMULH	$t0,$a0,$na0		# hi(n[0-7])*lo(t[0]*n0)
+	adde	$acc4,$acc5,$t1
+	$UMULH	$t1,$a1,$na0
+	adde	$acc5,$acc6,$t2
+	$UMULH	$t2,$a2,$na0
+	adde	$acc6,$acc7,$t3
+	$UMULH	$t3,$a3,$na0
+	addze	$acc7,$zero
+	addc	$acc0,$acc0,$t0
+	$UMULH	$t0,$a4,$na0
+	adde	$acc1,$acc1,$t1
+	$UMULH	$t1,$a5,$na0
+	adde	$acc2,$acc2,$t2
+	$UMULH	$t2,$a6,$na0
+	adde	$acc3,$acc3,$t3
+	$UMULH	$t3,$a7,$na0
+	$UMULL	$na0,$n0,$acc0		# next t[0]*n0
+	adde	$acc4,$acc4,$t0
+	adde	$acc5,$acc5,$t1
+	adde	$acc6,$acc6,$t2
+	adde	$acc7,$acc7,$t3
+	bdnz	.Lsqr8x_reduction
+
+	$LD	$t0,$SIZE_T*1($tp)
+	$LD	$t1,$SIZE_T*2($tp)
+	$LD	$t2,$SIZE_T*3($tp)
+	$LD	$t3,$SIZE_T*4($tp)
+	subi	$rp,$tp,$SIZE_T*7
+	$UCMP	$np_end,$np		# done yet?
+	addc	$acc0,$acc0,$t0
+	$LD	$t0,$SIZE_T*5($tp)
+	adde	$acc1,$acc1,$t1
+	$LD	$t1,$SIZE_T*6($tp)
+	adde	$acc2,$acc2,$t2
+	$LD	$t2,$SIZE_T*7($tp)
+	adde	$acc3,$acc3,$t3
+	$LD	$t3,$SIZE_T*8($tp)
+	adde	$acc4,$acc4,$t0
+	adde	$acc5,$acc5,$t1
+	adde	$acc6,$acc6,$t2
+	adde	$acc7,$acc7,$t3
+	#addze	$carry,$zero		# moved below
+	beq	.Lsqr8x8_post_condition
+
+	$LD	$n0,$SIZE_T*0($rp)
+	$LD	$a0,$SIZE_T*1($np)
+	$LD	$a1,$SIZE_T*2($np)
+	$LD	$a2,$SIZE_T*3($np)
+	$LD	$a3,$SIZE_T*4($np)
+	$LD	$a4,$SIZE_T*5($np)
+	$LD	$a5,$SIZE_T*6($np)
+	$LD	$a6,$SIZE_T*7($np)
+	$LDU	$a7,$SIZE_T*8($np)
+	li	$cnt,0
+
+.align	5
+.Lsqr8x_tail:
+	$UMULL	$t0,$a0,$n0
+	addze	$carry,$zero		# carry bit, modulo-scheduled
+	$UMULL	$t1,$a1,$n0
+	addi	$cnt,$cnt,$SIZE_T
+	$UMULL	$t2,$a2,$n0
+	andi.	$cnt,$cnt,$SIZE_T*8-1
+	$UMULL	$t3,$a3,$n0
+	addc	$acc0,$acc0,$t0
+	$UMULL	$t0,$a4,$n0
+	adde	$acc1,$acc1,$t1
+	$UMULL	$t1,$a5,$n0
+	adde	$acc2,$acc2,$t2
+	$UMULL	$t2,$a6,$n0
+	adde	$acc3,$acc3,$t3
+	$UMULL	$t3,$a7,$n0
+	adde	$acc4,$acc4,$t0
+	$UMULH	$t0,$a0,$n0
+	adde	$acc5,$acc5,$t1
+	$UMULH	$t1,$a1,$n0
+	adde	$acc6,$acc6,$t2
+	$UMULH	$t2,$a2,$n0
+	adde	$acc7,$acc7,$t3
+	$UMULH	$t3,$a3,$n0
+	addze	$carry,$carry
+	$STU	$acc0,$SIZE_T($tp)
+	addc	$acc0,$acc1,$t0
+	$UMULH	$t0,$a4,$n0
+	adde	$acc1,$acc2,$t1
+	$UMULH	$t1,$a5,$n0
+	adde	$acc2,$acc3,$t2
+	$UMULH	$t2,$a6,$n0
+	adde	$acc3,$acc4,$t3
+	$UMULH	$t3,$a7,$n0
+	$LDX	$n0,$rp,$cnt
+	adde	$acc4,$acc5,$t0
+	adde	$acc5,$acc6,$t1
+	adde	$acc6,$acc7,$t2
+	adde	$acc7,$carry,$t3
+	#addze	$carry,$zero		# moved above
+	bne	.Lsqr8x_tail
+					# note that carry flag is guaranteed
+					# to be zero at this point
+	$LD	$a0,$SIZE_T*1($tp)
+	$POP	$carry,$SIZE_T*10($sp)	# pull top-most carry in case we break
+	$UCMP	$np_end,$np		# done yet?
+	$LD	$a1,$SIZE_T*2($tp)
+	sub	$t2,$np_end,$num	# rewinded np
+	$LD	$a2,$SIZE_T*3($tp)
+	$LD	$a3,$SIZE_T*4($tp)
+	$LD	$a4,$SIZE_T*5($tp)
+	$LD	$a5,$SIZE_T*6($tp)
+	$LD	$a6,$SIZE_T*7($tp)
+	$LD	$a7,$SIZE_T*8($tp)
+	beq	.Lsqr8x_tail_break
+
+	addc	$acc0,$acc0,$a0
+	$LD	$a0,$SIZE_T*1($np)
+	adde	$acc1,$acc1,$a1
+	$LD	$a1,$SIZE_T*2($np)
+	adde	$acc2,$acc2,$a2
+	$LD	$a2,$SIZE_T*3($np)
+	adde	$acc3,$acc3,$a3
+	$LD	$a3,$SIZE_T*4($np)
+	adde	$acc4,$acc4,$a4
+	$LD	$a4,$SIZE_T*5($np)
+	adde	$acc5,$acc5,$a5
+	$LD	$a5,$SIZE_T*6($np)
+	adde	$acc6,$acc6,$a6
+	$LD	$a6,$SIZE_T*7($np)
+	adde	$acc7,$acc7,$a7
+	$LDU	$a7,$SIZE_T*8($np)
+	#addze	$carry,$zero		# moved above
+	b	.Lsqr8x_tail
+
+.align	5
+.Lsqr8x_tail_break:
+	$POP	$n0,$SIZE_T*8($sp)	# pull n0
+	$POP	$t3,$SIZE_T*9($sp)	# &tp[2*num-1]
+	addi	$cnt,$tp,$SIZE_T*8	# end of current t[num] window
+
+	addic	$carry,$carry,-1	# "move" top-most carry to carry bit
+	adde	$t0,$acc0,$a0
+	$LD	$acc0,$SIZE_T*8($rp)
+	$LD	$a0,$SIZE_T*1($t2)	# recall that $t2 is &n[-1]
+	adde	$t1,$acc1,$a1
+	$LD	$acc1,$SIZE_T*9($rp)
+	$LD	$a1,$SIZE_T*2($t2)
+	adde	$acc2,$acc2,$a2
+	$LD	$a2,$SIZE_T*3($t2)
+	adde	$acc3,$acc3,$a3
+	$LD	$a3,$SIZE_T*4($t2)
+	adde	$acc4,$acc4,$a4
+	$LD	$a4,$SIZE_T*5($t2)
+	adde	$acc5,$acc5,$a5
+	$LD	$a5,$SIZE_T*6($t2)
+	adde	$acc6,$acc6,$a6
+	$LD	$a6,$SIZE_T*7($t2)
+	adde	$acc7,$acc7,$a7
+	$LD	$a7,$SIZE_T*8($t2)
+	addi	$np,$t2,$SIZE_T*8
+	addze	$t2,$zero		# top-most carry
+	$UMULL	$na0,$n0,$acc0
+	$ST	$t0,$SIZE_T*1($tp)
+	$UCMP	$cnt,$t3		# did we hit the bottom?
+	$ST	$t1,$SIZE_T*2($tp)
+	li	$cnt,8
+	$ST	$acc2,$SIZE_T*3($tp)
+	$LD	$acc2,$SIZE_T*10($rp)
+	$ST	$acc3,$SIZE_T*4($tp)
+	$LD	$acc3,$SIZE_T*11($rp)
+	$ST	$acc4,$SIZE_T*5($tp)
+	$LD	$acc4,$SIZE_T*12($rp)
+	$ST	$acc5,$SIZE_T*6($tp)
+	$LD	$acc5,$SIZE_T*13($rp)
+	$ST	$acc6,$SIZE_T*7($tp)
+	$LD	$acc6,$SIZE_T*14($rp)
+	$ST	$acc7,$SIZE_T*8($tp)
+	$LD	$acc7,$SIZE_T*15($rp)
+	$PUSH	$t2,$SIZE_T*10($sp)	# off-load top-most carry
+	addi	$tp,$rp,$SIZE_T*7	# slide the window
+	mtctr	$cnt
+	bne	.Lsqr8x_reduction
+
+	################################################################
+	# Final step. We see if result is larger than modulus, and
+	# if it is, subtract the modulus. But comparison implies
+	# subtraction. So we subtract modulus, see if it borrowed,
+	# and conditionally copy original value.
+	$POP	$rp,$SIZE_T*6($sp)	# pull &rp[-1]
+	srwi	$cnt,$num,`log($SIZE_T)/log(2)+3`
+	mr	$n0,$tp			# put tp aside
+	addi	$tp,$tp,$SIZE_T*8
+	subi	$cnt,$cnt,1
+	subfc	$t0,$a0,$acc0
+	subfe	$t1,$a1,$acc1
+	mr	$carry,$t2
+	mr	$ap_end,$rp		# $rp copy
+
+	mtctr	$cnt
+	b	.Lsqr8x_sub
+
+.align	5
+.Lsqr8x_sub:
+	$LD	$a0,$SIZE_T*1($np)
+	$LD	$acc0,$SIZE_T*1($tp)
+	$LD	$a1,$SIZE_T*2($np)
+	$LD	$acc1,$SIZE_T*2($tp)
+	subfe	$t2,$a2,$acc2
+	$LD	$a2,$SIZE_T*3($np)
+	$LD	$acc2,$SIZE_T*3($tp)
+	subfe	$t3,$a3,$acc3
+	$LD	$a3,$SIZE_T*4($np)
+	$LD	$acc3,$SIZE_T*4($tp)
+	$ST	$t0,$SIZE_T*1($rp)
+	subfe	$t0,$a4,$acc4
+	$LD	$a4,$SIZE_T*5($np)
+	$LD	$acc4,$SIZE_T*5($tp)
+	$ST	$t1,$SIZE_T*2($rp)
+	subfe	$t1,$a5,$acc5
+	$LD	$a5,$SIZE_T*6($np)
+	$LD	$acc5,$SIZE_T*6($tp)
+	$ST	$t2,$SIZE_T*3($rp)
+	subfe	$t2,$a6,$acc6
+	$LD	$a6,$SIZE_T*7($np)
+	$LD	$acc6,$SIZE_T*7($tp)
+	$ST	$t3,$SIZE_T*4($rp)
+	subfe	$t3,$a7,$acc7
+	$LDU	$a7,$SIZE_T*8($np)
+	$LDU	$acc7,$SIZE_T*8($tp)
+	$ST	$t0,$SIZE_T*5($rp)
+	subfe	$t0,$a0,$acc0
+	$ST	$t1,$SIZE_T*6($rp)
+	subfe	$t1,$a1,$acc1
+	$ST	$t2,$SIZE_T*7($rp)
+	$STU	$t3,$SIZE_T*8($rp)
+	bdnz	.Lsqr8x_sub
+
+	srwi	$cnt,$num,`log($SIZE_T)/log(2)+2`
+	 $LD	$a0,$SIZE_T*1($ap_end)	# original $rp
+	 $LD	$acc0,$SIZE_T*1($n0)	# original $tp
+	subi	$cnt,$cnt,1
+	 $LD	$a1,$SIZE_T*2($ap_end)
+	 $LD	$acc1,$SIZE_T*2($n0)
+	subfe	$t2,$a2,$acc2
+	 $LD	$a2,$SIZE_T*3($ap_end)
+	 $LD	$acc2,$SIZE_T*3($n0)
+	subfe	$t3,$a3,$acc3
+	 $LD	$a3,$SIZE_T*4($ap_end)
+	 $LDU	$acc3,$SIZE_T*4($n0)
+	$ST	$t0,$SIZE_T*1($rp)
+	subfe	$t0,$a4,$acc4
+	$ST	$t1,$SIZE_T*2($rp)
+	subfe	$t1,$a5,$acc5
+	$ST	$t2,$SIZE_T*3($rp)
+	subfe	$t2,$a6,$acc6
+	$ST	$t3,$SIZE_T*4($rp)
+	subfe	$t3,$a7,$acc7
+	$ST	$t0,$SIZE_T*5($rp)
+	subfe	$carry,$zero,$carry	# did it borrow?
+	$ST	$t1,$SIZE_T*6($rp)
+	$ST	$t2,$SIZE_T*7($rp)
+	$ST	$t3,$SIZE_T*8($rp)
+
+	addi	$tp,$sp,$SIZE_T*11
+	mtctr	$cnt
+
+.Lsqr4x_cond_copy:
+	andc	$a0,$a0,$carry
+	 $ST	$zero,-$SIZE_T*3($n0)	# wipe stack clean
+	and	$acc0,$acc0,$carry
+	 $ST	$zero,-$SIZE_T*2($n0)
+	andc	$a1,$a1,$carry
+	 $ST	$zero,-$SIZE_T*1($n0)
+	and	$acc1,$acc1,$carry
+	 $ST	$zero,-$SIZE_T*0($n0)
+	andc	$a2,$a2,$carry
+	 $ST	$zero,$SIZE_T*1($tp)
+	and	$acc2,$acc2,$carry
+	 $ST	$zero,$SIZE_T*2($tp)
+	andc	$a3,$a3,$carry
+	 $ST	$zero,$SIZE_T*3($tp)
+	and	$acc3,$acc3,$carry
+	 $STU	$zero,$SIZE_T*4($tp)
+	or	$t0,$a0,$acc0
+	$LD	$a0,$SIZE_T*5($ap_end)
+	$LD	$acc0,$SIZE_T*1($n0)
+	or	$t1,$a1,$acc1
+	$LD	$a1,$SIZE_T*6($ap_end)
+	$LD	$acc1,$SIZE_T*2($n0)
+	or	$t2,$a2,$acc2
+	$LD	$a2,$SIZE_T*7($ap_end)
+	$LD	$acc2,$SIZE_T*3($n0)
+	or	$t3,$a3,$acc3
+	$LD	$a3,$SIZE_T*8($ap_end)
+	$LDU	$acc3,$SIZE_T*4($n0)
+	$ST	$t0,$SIZE_T*1($ap_end)
+	$ST	$t1,$SIZE_T*2($ap_end)
+	$ST	$t2,$SIZE_T*3($ap_end)
+	$STU	$t3,$SIZE_T*4($ap_end)
+	bdnz	.Lsqr4x_cond_copy
+
+	$POP	$ap,0($sp)		# pull saved sp
+	andc	$a0,$a0,$carry
+	and	$acc0,$acc0,$carry
+	andc	$a1,$a1,$carry
+	and	$acc1,$acc1,$carry
+	andc	$a2,$a2,$carry
+	and	$acc2,$acc2,$carry
+	andc	$a3,$a3,$carry
+	and	$acc3,$acc3,$carry
+	or	$t0,$a0,$acc0
+	or	$t1,$a1,$acc1
+	or	$t2,$a2,$acc2
+	or	$t3,$a3,$acc3
+	$ST	$t0,$SIZE_T*1($ap_end)
+	$ST	$t1,$SIZE_T*2($ap_end)
+	$ST	$t2,$SIZE_T*3($ap_end)
+	$ST	$t3,$SIZE_T*4($ap_end)
+
+	b	.Lsqr8x_done
+
+.align	5
+.Lsqr8x8_post_condition:
+	$POP	$rp,$SIZE_T*6($sp)	# pull rp
+	$POP	$ap,0($sp)		# pull saved sp
+	addze	$carry,$zero
+
+	# $acc0-7,$carry hold result, $a0-7 hold modulus
+	subfc	$acc0,$a0,$acc0
+	subfe	$acc1,$a1,$acc1
+	 $ST	$zero,$SIZE_T*12($sp)	# wipe stack clean
+	 $ST	$zero,$SIZE_T*13($sp)
+	subfe	$acc2,$a2,$acc2
+	 $ST	$zero,$SIZE_T*14($sp)
+	 $ST	$zero,$SIZE_T*15($sp)
+	subfe	$acc3,$a3,$acc3
+	 $ST	$zero,$SIZE_T*16($sp)
+	 $ST	$zero,$SIZE_T*17($sp)
+	subfe	$acc4,$a4,$acc4
+	 $ST	$zero,$SIZE_T*18($sp)
+	 $ST	$zero,$SIZE_T*19($sp)
+	subfe	$acc5,$a5,$acc5
+	 $ST	$zero,$SIZE_T*20($sp)
+	 $ST	$zero,$SIZE_T*21($sp)
+	subfe	$acc6,$a6,$acc6
+	 $ST	$zero,$SIZE_T*22($sp)
+	 $ST	$zero,$SIZE_T*23($sp)
+	subfe	$acc7,$a7,$acc7
+	 $ST	$zero,$SIZE_T*24($sp)
+	 $ST	$zero,$SIZE_T*25($sp)
+	subfe	$carry,$zero,$carry	# did it borrow?
+	 $ST	$zero,$SIZE_T*26($sp)
+	 $ST	$zero,$SIZE_T*27($sp)
+
+	and	$a0,$a0,$carry
+	and	$a1,$a1,$carry
+	addc	$acc0,$acc0,$a0		# add modulus back if borrowed
+	and	$a2,$a2,$carry
+	adde	$acc1,$acc1,$a1
+	and	$a3,$a3,$carry
+	adde	$acc2,$acc2,$a2
+	and	$a4,$a4,$carry
+	adde	$acc3,$acc3,$a3
+	and	$a5,$a5,$carry
+	adde	$acc4,$acc4,$a4
+	and	$a6,$a6,$carry
+	adde	$acc5,$acc5,$a5
+	and	$a7,$a7,$carry
+	adde	$acc6,$acc6,$a6
+	adde	$acc7,$acc7,$a7
+	$ST	$acc0,$SIZE_T*1($rp)
+	$ST	$acc1,$SIZE_T*2($rp)
+	$ST	$acc2,$SIZE_T*3($rp)
+	$ST	$acc3,$SIZE_T*4($rp)
+	$ST	$acc4,$SIZE_T*5($rp)
+	$ST	$acc5,$SIZE_T*6($rp)
+	$ST	$acc6,$SIZE_T*7($rp)
+	$ST	$acc7,$SIZE_T*8($rp)
+
+.Lsqr8x_done:
+	$PUSH	$zero,$SIZE_T*8($sp)
+	$PUSH	$zero,$SIZE_T*10($sp)
+
+	$POP	r14,-$SIZE_T*18($ap)
+	li	r3,1			# signal "done"
+	$POP	r15,-$SIZE_T*17($ap)
+	$POP	r16,-$SIZE_T*16($ap)
+	$POP	r17,-$SIZE_T*15($ap)
+	$POP	r18,-$SIZE_T*14($ap)
+	$POP	r19,-$SIZE_T*13($ap)
+	$POP	r20,-$SIZE_T*12($ap)
+	$POP	r21,-$SIZE_T*11($ap)
+	$POP	r22,-$SIZE_T*10($ap)
+	$POP	r23,-$SIZE_T*9($ap)
+	$POP	r24,-$SIZE_T*8($ap)
+	$POP	r25,-$SIZE_T*7($ap)
+	$POP	r26,-$SIZE_T*6($ap)
+	$POP	r27,-$SIZE_T*5($ap)
+	$POP	r28,-$SIZE_T*4($ap)
+	$POP	r29,-$SIZE_T*3($ap)
+	$POP	r30,-$SIZE_T*2($ap)
+	$POP	r31,-$SIZE_T*1($ap)
+	mr	$sp,$ap
+	blr
+	.long	0
+	.byte	0,12,4,0x20,0x80,18,6,0
+	.long	0
+.size	__bn_sqr8x_mont,.-__bn_sqr8x_mont
+___
+}
+$code.=<<___;
+.asciz  "Montgomery Multiplication for PPC, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ppc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ppc.pl
new file mode 100644
index 000000000..e37068192
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ppc.pl
@@ -0,0 +1,2011 @@
+#! /usr/bin/env perl
+# Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# Implemented as a Perl wrapper as we want to support several different
+# architectures with single file. We pick up the target based on the
+# file name we are asked to generate.
+#
+# It should be noted though that this perl code is nothing like
+# <openssl>/crypto/perlasm/x86*. In this case perl is used pretty much
+# as pre-processor to cover for platform differences in name decoration,
+# linker tables, 32-/64-bit instruction sets...
+#
+# As you might know there're several PowerPC ABI in use. Most notably
+# Linux and AIX use different 32-bit ABIs. Good news are that these ABIs
+# are similar enough to implement leaf(!) functions, which would be ABI
+# neutral. And that's what you find here: ABI neutral leaf functions.
+# In case you wonder what that is...
+#
+#       AIX performance
+#
+#	MEASUREMENTS WITH cc ON a 200 MhZ PowerPC 604e.
+#
+#	The following is the performance of 32-bit compiler
+#	generated code:
+#
+#	OpenSSL 0.9.6c 21 dec 2001
+#	built on: Tue Jun 11 11:06:51 EDT 2002
+#	options:bn(64,32) ...
+#compiler: cc -DTHREADS  -DAIX -DB_ENDIAN -DBN_LLONG -O3
+#                  sign    verify    sign/s verify/s
+#rsa  512 bits   0.0098s   0.0009s    102.0   1170.6
+#rsa 1024 bits   0.0507s   0.0026s     19.7    387.5
+#rsa 2048 bits   0.3036s   0.0085s      3.3    117.1
+#rsa 4096 bits   2.0040s   0.0299s      0.5     33.4
+#dsa  512 bits   0.0087s   0.0106s    114.3     94.5
+#dsa 1024 bits   0.0256s   0.0313s     39.0     32.0
+#
+#	Same benchmark with this assembler code:
+#
+#rsa  512 bits   0.0056s   0.0005s    178.6   2049.2
+#rsa 1024 bits   0.0283s   0.0015s     35.3    674.1
+#rsa 2048 bits   0.1744s   0.0050s      5.7    201.2
+#rsa 4096 bits   1.1644s   0.0179s      0.9     55.7
+#dsa  512 bits   0.0052s   0.0062s    191.6    162.0
+#dsa 1024 bits   0.0149s   0.0180s     67.0     55.5
+#
+#	Number of operations increases by at almost 75%
+#
+#	Here are performance numbers for 64-bit compiler
+#	generated code:
+#
+#	OpenSSL 0.9.6g [engine] 9 Aug 2002
+#	built on: Fri Apr 18 16:59:20 EDT 2003
+#	options:bn(64,64) ...
+#	compiler: cc -DTHREADS -D_REENTRANT -q64 -DB_ENDIAN -O3
+#                  sign    verify    sign/s verify/s
+#rsa  512 bits   0.0028s   0.0003s    357.1   3844.4
+#rsa 1024 bits   0.0148s   0.0008s     67.5   1239.7
+#rsa 2048 bits   0.0963s   0.0028s     10.4    353.0
+#rsa 4096 bits   0.6538s   0.0102s      1.5     98.1
+#dsa  512 bits   0.0026s   0.0032s    382.5    313.7
+#dsa 1024 bits   0.0081s   0.0099s    122.8    100.6
+#
+#	Same benchmark with this assembler code:
+#
+#rsa  512 bits   0.0020s   0.0002s    510.4   6273.7
+#rsa 1024 bits   0.0088s   0.0005s    114.1   2128.3
+#rsa 2048 bits   0.0540s   0.0016s     18.5    622.5
+#rsa 4096 bits   0.3700s   0.0058s      2.7    171.0
+#dsa  512 bits   0.0016s   0.0020s    610.7    507.1
+#dsa 1024 bits   0.0047s   0.0058s    212.5    173.2
+#
+#	Again, performance increases by at about 75%
+#
+#       Mac OS X, Apple G5 1.8GHz (Note this is 32 bit code)
+#       OpenSSL 0.9.7c 30 Sep 2003
+#
+#       Original code.
+#
+#rsa  512 bits   0.0011s   0.0001s    906.1  11012.5
+#rsa 1024 bits   0.0060s   0.0003s    166.6   3363.1
+#rsa 2048 bits   0.0370s   0.0010s     27.1    982.4
+#rsa 4096 bits   0.2426s   0.0036s      4.1    280.4
+#dsa  512 bits   0.0010s   0.0012s   1038.1    841.5
+#dsa 1024 bits   0.0030s   0.0037s    329.6    269.7
+#dsa 2048 bits   0.0101s   0.0127s     98.9     78.6
+#
+#       Same benchmark with this assembler code:
+#
+#rsa  512 bits   0.0007s   0.0001s   1416.2  16645.9
+#rsa 1024 bits   0.0036s   0.0002s    274.4   5380.6
+#rsa 2048 bits   0.0222s   0.0006s     45.1   1589.5
+#rsa 4096 bits   0.1469s   0.0022s      6.8    449.6
+#dsa  512 bits   0.0006s   0.0007s   1664.2   1376.2
+#dsa 1024 bits   0.0018s   0.0023s    545.0    442.2
+#dsa 2048 bits   0.0061s   0.0075s    163.5    132.8
+#
+#        Performance increase of ~60%
+#        Based on submission from Suresh N. Chari of IBM
+
+$flavour = shift;
+
+if ($flavour =~ /32/) {
+	$BITS=	32;
+	$BNSZ=	$BITS/8;
+	$ISA=	"\"ppc\"";
+
+	$LD=	"lwz";		# load
+	$LDU=	"lwzu";		# load and update
+	$ST=	"stw";		# store
+	$STU=	"stwu";		# store and update
+	$UMULL=	"mullw";	# unsigned multiply low
+	$UMULH=	"mulhwu";	# unsigned multiply high
+	$UDIV=	"divwu";	# unsigned divide
+	$UCMPI=	"cmplwi";	# unsigned compare with immediate
+	$UCMP=	"cmplw";	# unsigned compare
+	$CNTLZ=	"cntlzw";	# count leading zeros
+	$SHL=	"slw";		# shift left
+	$SHR=	"srw";		# unsigned shift right
+	$SHRI=	"srwi";		# unsigned shift right by immediate
+	$SHLI=	"slwi";		# shift left by immediate
+	$CLRU=	"clrlwi";	# clear upper bits
+	$INSR=	"insrwi";	# insert right
+	$ROTL=	"rotlwi";	# rotate left by immediate
+	$TR=	"tw";		# conditional trap
+} elsif ($flavour =~ /64/) {
+	$BITS=	64;
+	$BNSZ=	$BITS/8;
+	$ISA=	"\"ppc64\"";
+
+	# same as above, but 64-bit mnemonics...
+	$LD=	"ld";		# load
+	$LDU=	"ldu";		# load and update
+	$ST=	"std";		# store
+	$STU=	"stdu";		# store and update
+	$UMULL=	"mulld";	# unsigned multiply low
+	$UMULH=	"mulhdu";	# unsigned multiply high
+	$UDIV=	"divdu";	# unsigned divide
+	$UCMPI=	"cmpldi";	# unsigned compare with immediate
+	$UCMP=	"cmpld";	# unsigned compare
+	$CNTLZ=	"cntlzd";	# count leading zeros
+	$SHL=	"sld";		# shift left
+	$SHR=	"srd";		# unsigned shift right
+	$SHRI=	"srdi";		# unsigned shift right by immediate
+	$SHLI=	"sldi";		# shift left by immediate
+	$CLRU=	"clrldi";	# clear upper bits
+	$INSR=	"insrdi";	# insert right
+	$ROTL=	"rotldi";	# rotate left by immediate
+	$TR=	"td";		# conditional trap
+} else { die "nonsense $flavour"; }
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open STDOUT,"| $^X $xlate $flavour ".shift || die "can't call $xlate: $!";
+
+$data=<<EOF;
+#--------------------------------------------------------------------
+#
+#
+#
+#
+#	File:		ppc32.s
+#
+#	Created by:	Suresh Chari
+#			IBM Thomas J. Watson Research Library
+#			Hawthorne, NY
+#
+#
+#	Description:	Optimized assembly routines for OpenSSL crypto
+#			on the 32 bitPowerPC platform.
+#
+#
+#	Version History
+#
+#	2. Fixed bn_add,bn_sub and bn_div_words, added comments,
+#	   cleaned up code. Also made a single version which can
+#	   be used for both the AIX and Linux compilers. See NOTE
+#	   below.
+#				12/05/03		Suresh Chari
+#			(with lots of help from)        Andy Polyakov
+##
+#	1. Initial version	10/20/02		Suresh Chari
+#
+#
+#	The following file works for the xlc,cc
+#	and gcc compilers.
+#
+#	NOTE:	To get the file to link correctly with the gcc compiler
+#	        you have to change the names of the routines and remove
+#		the first .(dot) character. This should automatically
+#		be done in the build process.
+#
+#	Hand optimized assembly code for the following routines
+#
+#	bn_sqr_comba4
+#	bn_sqr_comba8
+#	bn_mul_comba4
+#	bn_mul_comba8
+#	bn_sub_words
+#	bn_add_words
+#	bn_div_words
+#	bn_sqr_words
+#	bn_mul_words
+#	bn_mul_add_words
+#
+#	NOTE:	It is possible to optimize this code more for
+#	specific PowerPC or Power architectures. On the Northstar
+#	architecture the optimizations in this file do
+#	 NOT provide much improvement.
+#
+#	If you have comments or suggestions to improve code send
+#	me a note at schari\@us.ibm.com
+#
+#--------------------------------------------------------------------------
+#
+#	Defines to be used in the assembly code.
+#
+#.set r0,0	# we use it as storage for value of 0
+#.set SP,1	# preserved
+#.set RTOC,2	# preserved
+#.set r3,3	# 1st argument/return value
+#.set r4,4	# 2nd argument/volatile register
+#.set r5,5	# 3rd argument/volatile register
+#.set r6,6	# ...
+#.set r7,7
+#.set r8,8
+#.set r9,9
+#.set r10,10
+#.set r11,11
+#.set r12,12
+#.set r13,13	# not used, nor any other "below" it...
+
+#	Declare function names to be global
+#	NOTE:	For gcc these names MUST be changed to remove
+#	        the first . i.e. for example change ".bn_sqr_comba4"
+#		to "bn_sqr_comba4". This should be automatically done
+#		in the build.
+
+	.globl	.bn_sqr_comba4
+	.globl	.bn_sqr_comba8
+	.globl	.bn_mul_comba4
+	.globl	.bn_mul_comba8
+	.globl	.bn_sub_words
+	.globl	.bn_add_words
+	.globl	.bn_div_words
+	.globl	.bn_sqr_words
+	.globl	.bn_mul_words
+	.globl	.bn_mul_add_words
+
+# .text section
+
+	.machine	"any"
+
+#
+#	NOTE:	The following label name should be changed to
+#		"bn_sqr_comba4" i.e. remove the first dot
+#		for the gcc compiler. This should be automatically
+#		done in the build
+#
+
+.align	4
+.bn_sqr_comba4:
+#
+# Optimized version of bn_sqr_comba4.
+#
+# void bn_sqr_comba4(BN_ULONG *r, BN_ULONG *a)
+# r3 contains r
+# r4 contains a
+#
+# Freely use registers r5,r6,r7,r8,r9,r10,r11 as follows:
+#
+# r5,r6 are the two BN_ULONGs being multiplied.
+# r7,r8 are the results of the 32x32 giving 64 bit multiply.
+# r9,r10, r11 are the equivalents of c1,c2, c3.
+# Here's the assembly
+#
+#
+	xor		r0,r0,r0		# set r0 = 0. Used in the addze
+						# instructions below
+
+						#sqr_add_c(a,0,c1,c2,c3)
+	$LD		r5,`0*$BNSZ`(r4)
+	$UMULL		r9,r5,r5
+	$UMULH		r10,r5,r5		#in first iteration. No need
+						#to add since c1=c2=c3=0.
+						# Note c3(r11) is NOT set to 0
+						# but will be.
+
+	$ST		r9,`0*$BNSZ`(r3)	# r[0]=c1;
+						# sqr_add_c2(a,1,0,c2,c3,c1);
+	$LD		r6,`1*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r7,r7,r7		# compute (r7,r8)=2*(r7,r8)
+	adde		r8,r8,r8
+	addze		r9,r0			# catch carry if any.
+						# r9= r0(=0) and carry
+
+	addc		r10,r7,r10		# now add to temp result.
+	addze		r11,r8                  # r8 added to r11 which is 0
+	addze		r9,r9
+
+	$ST		r10,`1*$BNSZ`(r3)	#r[1]=c2;
+						#sqr_add_c(a,1,c3,c1,c2)
+	$UMULL		r7,r6,r6
+	$UMULH		r8,r6,r6
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r0
+						#sqr_add_c2(a,2,0,c3,c1,c2)
+	$LD		r6,`2*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r7,r7,r7
+	adde		r8,r8,r8
+	addze		r10,r10
+
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+	$ST		r11,`2*$BNSZ`(r3)	#r[2]=c3
+						#sqr_add_c2(a,3,0,c1,c2,c3);
+	$LD		r6,`3*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+	addc		r7,r7,r7
+	adde		r8,r8,r8
+	addze		r11,r0
+
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+						#sqr_add_c2(a,2,1,c1,c2,c3);
+	$LD		r5,`1*$BNSZ`(r4)
+	$LD		r6,`2*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r7,r7,r7
+	adde		r8,r8,r8
+	addze		r11,r11
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+	$ST		r9,`3*$BNSZ`(r3)	#r[3]=c1
+						#sqr_add_c(a,2,c2,c3,c1);
+	$UMULL		r7,r6,r6
+	$UMULH		r8,r6,r6
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r0
+						#sqr_add_c2(a,3,1,c2,c3,c1);
+	$LD		r6,`3*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+	addc		r7,r7,r7
+	adde		r8,r8,r8
+	addze		r9,r9
+
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+	$ST		r10,`4*$BNSZ`(r3)	#r[4]=c2
+						#sqr_add_c2(a,3,2,c3,c1,c2);
+	$LD		r5,`2*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+	addc		r7,r7,r7
+	adde		r8,r8,r8
+	addze		r10,r0
+
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+	$ST		r11,`5*$BNSZ`(r3)	#r[5] = c3
+						#sqr_add_c(a,3,c1,c2,c3);
+	$UMULL		r7,r6,r6
+	$UMULH		r8,r6,r6
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+
+	$ST		r9,`6*$BNSZ`(r3)	#r[6]=c1
+	$ST		r10,`7*$BNSZ`(r3)	#r[7]=c2
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,2,0
+	.long	0
+.size	.bn_sqr_comba4,.-.bn_sqr_comba4
+
+#
+#	NOTE:	The following label name should be changed to
+#		"bn_sqr_comba8" i.e. remove the first dot
+#		for the gcc compiler. This should be automatically
+#		done in the build
+#
+
+.align	4
+.bn_sqr_comba8:
+#
+# This is an optimized version of the bn_sqr_comba8 routine.
+# Tightly uses the adde instruction
+#
+#
+# void bn_sqr_comba8(BN_ULONG *r, BN_ULONG *a)
+# r3 contains r
+# r4 contains a
+#
+# Freely use registers r5,r6,r7,r8,r9,r10,r11 as follows:
+#
+# r5,r6 are the two BN_ULONGs being multiplied.
+# r7,r8 are the results of the 32x32 giving 64 bit multiply.
+# r9,r10, r11 are the equivalents of c1,c2, c3.
+#
+# Possible optimization of loading all 8 longs of a into registers
+# doesn't provide any speedup
+#
+
+	xor		r0,r0,r0		#set r0 = 0.Used in addze
+						#instructions below.
+
+						#sqr_add_c(a,0,c1,c2,c3);
+	$LD		r5,`0*$BNSZ`(r4)
+	$UMULL		r9,r5,r5		#1st iteration:	no carries.
+	$UMULH		r10,r5,r5
+	$ST		r9,`0*$BNSZ`(r3)	# r[0]=c1;
+						#sqr_add_c2(a,1,0,c2,c3,c1);
+	$LD		r6,`1*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r10,r7,r10		#add the two register number
+	adde		r11,r8,r0 		# (r8,r7) to the three register
+	addze		r9,r0			# number (r9,r11,r10).NOTE:r0=0
+
+	addc		r10,r7,r10		#add the two register number
+	adde		r11,r8,r11 		# (r8,r7) to the three register
+	addze		r9,r9			# number (r9,r11,r10).
+
+	$ST		r10,`1*$BNSZ`(r3)	# r[1]=c2
+
+						#sqr_add_c(a,1,c3,c1,c2);
+	$UMULL		r7,r6,r6
+	$UMULH		r8,r6,r6
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r0
+						#sqr_add_c2(a,2,0,c3,c1,c2);
+	$LD		r6,`2*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+
+	$ST		r11,`2*$BNSZ`(r3)	#r[2]=c3
+						#sqr_add_c2(a,3,0,c1,c2,c3);
+	$LD		r6,`3*$BNSZ`(r4)	#r6 = a[3]. r5 is already a[0].
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r0
+
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+						#sqr_add_c2(a,2,1,c1,c2,c3);
+	$LD		r5,`1*$BNSZ`(r4)
+	$LD		r6,`2*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+
+	$ST		r9,`3*$BNSZ`(r3)	#r[3]=c1;
+						#sqr_add_c(a,2,c2,c3,c1);
+	$UMULL		r7,r6,r6
+	$UMULH		r8,r6,r6
+
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r0
+						#sqr_add_c2(a,3,1,c2,c3,c1);
+	$LD		r6,`3*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+						#sqr_add_c2(a,4,0,c2,c3,c1);
+	$LD		r5,`0*$BNSZ`(r4)
+	$LD		r6,`4*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+	$ST		r10,`4*$BNSZ`(r3)	#r[4]=c2;
+						#sqr_add_c2(a,5,0,c3,c1,c2);
+	$LD		r6,`5*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r0
+
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+						#sqr_add_c2(a,4,1,c3,c1,c2);
+	$LD		r5,`1*$BNSZ`(r4)
+	$LD		r6,`4*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+						#sqr_add_c2(a,3,2,c3,c1,c2);
+	$LD		r5,`2*$BNSZ`(r4)
+	$LD		r6,`3*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+	$ST		r11,`5*$BNSZ`(r3)	#r[5]=c3;
+						#sqr_add_c(a,3,c1,c2,c3);
+	$UMULL		r7,r6,r6
+	$UMULH		r8,r6,r6
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r0
+						#sqr_add_c2(a,4,2,c1,c2,c3);
+	$LD		r6,`4*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+						#sqr_add_c2(a,5,1,c1,c2,c3);
+	$LD		r5,`1*$BNSZ`(r4)
+	$LD		r6,`5*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+						#sqr_add_c2(a,6,0,c1,c2,c3);
+	$LD		r5,`0*$BNSZ`(r4)
+	$LD		r6,`6*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+	$ST		r9,`6*$BNSZ`(r3)	#r[6]=c1;
+						#sqr_add_c2(a,7,0,c2,c3,c1);
+	$LD		r6,`7*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r0
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+						#sqr_add_c2(a,6,1,c2,c3,c1);
+	$LD		r5,`1*$BNSZ`(r4)
+	$LD		r6,`6*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+						#sqr_add_c2(a,5,2,c2,c3,c1);
+	$LD		r5,`2*$BNSZ`(r4)
+	$LD		r6,`5*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+						#sqr_add_c2(a,4,3,c2,c3,c1);
+	$LD		r5,`3*$BNSZ`(r4)
+	$LD		r6,`4*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+	$ST		r10,`7*$BNSZ`(r3)	#r[7]=c2;
+						#sqr_add_c(a,4,c3,c1,c2);
+	$UMULL		r7,r6,r6
+	$UMULH		r8,r6,r6
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r0
+						#sqr_add_c2(a,5,3,c3,c1,c2);
+	$LD		r6,`5*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+						#sqr_add_c2(a,6,2,c3,c1,c2);
+	$LD		r5,`2*$BNSZ`(r4)
+	$LD		r6,`6*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+						#sqr_add_c2(a,7,1,c3,c1,c2);
+	$LD		r5,`1*$BNSZ`(r4)
+	$LD		r6,`7*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+	$ST		r11,`8*$BNSZ`(r3)	#r[8]=c3;
+						#sqr_add_c2(a,7,2,c1,c2,c3);
+	$LD		r5,`2*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r0
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+						#sqr_add_c2(a,6,3,c1,c2,c3);
+	$LD		r5,`3*$BNSZ`(r4)
+	$LD		r6,`6*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+						#sqr_add_c2(a,5,4,c1,c2,c3);
+	$LD		r5,`4*$BNSZ`(r4)
+	$LD		r6,`5*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+	$ST		r9,`9*$BNSZ`(r3)	#r[9]=c1;
+						#sqr_add_c(a,5,c2,c3,c1);
+	$UMULL		r7,r6,r6
+	$UMULH		r8,r6,r6
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r0
+						#sqr_add_c2(a,6,4,c2,c3,c1);
+	$LD		r6,`6*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+						#sqr_add_c2(a,7,3,c2,c3,c1);
+	$LD		r5,`3*$BNSZ`(r4)
+	$LD		r6,`7*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+	$ST		r10,`10*$BNSZ`(r3)	#r[10]=c2;
+						#sqr_add_c2(a,7,4,c3,c1,c2);
+	$LD		r5,`4*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r0
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+						#sqr_add_c2(a,6,5,c3,c1,c2);
+	$LD		r5,`5*$BNSZ`(r4)
+	$LD		r6,`6*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	addze		r10,r10
+	$ST		r11,`11*$BNSZ`(r3)	#r[11]=c3;
+						#sqr_add_c(a,6,c1,c2,c3);
+	$UMULL		r7,r6,r6
+	$UMULH		r8,r6,r6
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r0
+						#sqr_add_c2(a,7,5,c1,c2,c3)
+	$LD		r6,`7*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+	addc		r9,r7,r9
+	adde		r10,r8,r10
+	addze		r11,r11
+	$ST		r9,`12*$BNSZ`(r3)	#r[12]=c1;
+
+						#sqr_add_c2(a,7,6,c2,c3,c1)
+	$LD		r5,`6*$BNSZ`(r4)
+	$UMULL		r7,r5,r6
+	$UMULH		r8,r5,r6
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r0
+	addc		r10,r7,r10
+	adde		r11,r8,r11
+	addze		r9,r9
+	$ST		r10,`13*$BNSZ`(r3)	#r[13]=c2;
+						#sqr_add_c(a,7,c3,c1,c2);
+	$UMULL		r7,r6,r6
+	$UMULH		r8,r6,r6
+	addc		r11,r7,r11
+	adde		r9,r8,r9
+	$ST		r11,`14*$BNSZ`(r3)	#r[14]=c3;
+	$ST		r9, `15*$BNSZ`(r3)	#r[15]=c1;
+
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,2,0
+	.long	0
+.size	.bn_sqr_comba8,.-.bn_sqr_comba8
+
+#
+#	NOTE:	The following label name should be changed to
+#		"bn_mul_comba4" i.e. remove the first dot
+#		for the gcc compiler. This should be automatically
+#		done in the build
+#
+
+.align	4
+.bn_mul_comba4:
+#
+# This is an optimized version of the bn_mul_comba4 routine.
+#
+# void bn_mul_comba4(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b)
+# r3 contains r
+# r4 contains a
+# r5 contains b
+# r6, r7 are the 2 BN_ULONGs being multiplied.
+# r8, r9 are the results of the 32x32 giving 64 multiply.
+# r10, r11, r12 are the equivalents of c1, c2, and c3.
+#
+	xor	r0,r0,r0		#r0=0. Used in addze below.
+					#mul_add_c(a[0],b[0],c1,c2,c3);
+	$LD	r6,`0*$BNSZ`(r4)
+	$LD	r7,`0*$BNSZ`(r5)
+	$UMULL	r10,r6,r7
+	$UMULH	r11,r6,r7
+	$ST	r10,`0*$BNSZ`(r3)	#r[0]=c1
+					#mul_add_c(a[0],b[1],c2,c3,c1);
+	$LD	r7,`1*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r8,r11
+	adde	r12,r9,r0
+	addze	r10,r0
+					#mul_add_c(a[1],b[0],c2,c3,c1);
+	$LD	r6, `1*$BNSZ`(r4)
+	$LD	r7, `0*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r8,r11
+	adde	r12,r9,r12
+	addze	r10,r10
+	$ST	r11,`1*$BNSZ`(r3)	#r[1]=c2
+					#mul_add_c(a[2],b[0],c3,c1,c2);
+	$LD	r6,`2*$BNSZ`(r4)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r8,r12
+	adde	r10,r9,r10
+	addze	r11,r0
+					#mul_add_c(a[1],b[1],c3,c1,c2);
+	$LD	r6,`1*$BNSZ`(r4)
+	$LD	r7,`1*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r8,r12
+	adde	r10,r9,r10
+	addze	r11,r11
+					#mul_add_c(a[0],b[2],c3,c1,c2);
+	$LD	r6,`0*$BNSZ`(r4)
+	$LD	r7,`2*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r8,r12
+	adde	r10,r9,r10
+	addze	r11,r11
+	$ST	r12,`2*$BNSZ`(r3)	#r[2]=c3
+					#mul_add_c(a[0],b[3],c1,c2,c3);
+	$LD	r7,`3*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r8,r10
+	adde	r11,r9,r11
+	addze	r12,r0
+					#mul_add_c(a[1],b[2],c1,c2,c3);
+	$LD	r6,`1*$BNSZ`(r4)
+	$LD	r7,`2*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r8,r10
+	adde	r11,r9,r11
+	addze	r12,r12
+					#mul_add_c(a[2],b[1],c1,c2,c3);
+	$LD	r6,`2*$BNSZ`(r4)
+	$LD	r7,`1*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r8,r10
+	adde	r11,r9,r11
+	addze	r12,r12
+					#mul_add_c(a[3],b[0],c1,c2,c3);
+	$LD	r6,`3*$BNSZ`(r4)
+	$LD	r7,`0*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r8,r10
+	adde	r11,r9,r11
+	addze	r12,r12
+	$ST	r10,`3*$BNSZ`(r3)	#r[3]=c1
+					#mul_add_c(a[3],b[1],c2,c3,c1);
+	$LD	r7,`1*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r8,r11
+	adde	r12,r9,r12
+	addze	r10,r0
+					#mul_add_c(a[2],b[2],c2,c3,c1);
+	$LD	r6,`2*$BNSZ`(r4)
+	$LD	r7,`2*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r8,r11
+	adde	r12,r9,r12
+	addze	r10,r10
+					#mul_add_c(a[1],b[3],c2,c3,c1);
+	$LD	r6,`1*$BNSZ`(r4)
+	$LD	r7,`3*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r8,r11
+	adde	r12,r9,r12
+	addze	r10,r10
+	$ST	r11,`4*$BNSZ`(r3)	#r[4]=c2
+					#mul_add_c(a[2],b[3],c3,c1,c2);
+	$LD	r6,`2*$BNSZ`(r4)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r8,r12
+	adde	r10,r9,r10
+	addze	r11,r0
+					#mul_add_c(a[3],b[2],c3,c1,c2);
+	$LD	r6,`3*$BNSZ`(r4)
+	$LD	r7,`2*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r8,r12
+	adde	r10,r9,r10
+	addze	r11,r11
+	$ST	r12,`5*$BNSZ`(r3)	#r[5]=c3
+					#mul_add_c(a[3],b[3],c1,c2,c3);
+	$LD	r7,`3*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r8,r10
+	adde	r11,r9,r11
+
+	$ST	r10,`6*$BNSZ`(r3)	#r[6]=c1
+	$ST	r11,`7*$BNSZ`(r3)	#r[7]=c2
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+	.long	0
+.size	.bn_mul_comba4,.-.bn_mul_comba4
+
+#
+#	NOTE:	The following label name should be changed to
+#		"bn_mul_comba8" i.e. remove the first dot
+#		for the gcc compiler. This should be automatically
+#		done in the build
+#
+
+.align	4
+.bn_mul_comba8:
+#
+# Optimized version of the bn_mul_comba8 routine.
+#
+# void bn_mul_comba8(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b)
+# r3 contains r
+# r4 contains a
+# r5 contains b
+# r6, r7 are the 2 BN_ULONGs being multiplied.
+# r8, r9 are the results of the 32x32 giving 64 multiply.
+# r10, r11, r12 are the equivalents of c1, c2, and c3.
+#
+	xor	r0,r0,r0		#r0=0. Used in addze below.
+
+					#mul_add_c(a[0],b[0],c1,c2,c3);
+	$LD	r6,`0*$BNSZ`(r4)	#a[0]
+	$LD	r7,`0*$BNSZ`(r5)	#b[0]
+	$UMULL	r10,r6,r7
+	$UMULH	r11,r6,r7
+	$ST	r10,`0*$BNSZ`(r3)	#r[0]=c1;
+					#mul_add_c(a[0],b[1],c2,c3,c1);
+	$LD	r7,`1*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	addze	r12,r9			# since we didn't set r12 to zero before.
+	addze	r10,r0
+					#mul_add_c(a[1],b[0],c2,c3,c1);
+	$LD	r6,`1*$BNSZ`(r4)
+	$LD	r7,`0*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+	$ST	r11,`1*$BNSZ`(r3)	#r[1]=c2;
+					#mul_add_c(a[2],b[0],c3,c1,c2);
+	$LD	r6,`2*$BNSZ`(r4)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r0
+					#mul_add_c(a[1],b[1],c3,c1,c2);
+	$LD	r6,`1*$BNSZ`(r4)
+	$LD	r7,`1*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r11
+					#mul_add_c(a[0],b[2],c3,c1,c2);
+	$LD	r6,`0*$BNSZ`(r4)
+	$LD	r7,`2*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r11
+	$ST	r12,`2*$BNSZ`(r3)	#r[2]=c3;
+					#mul_add_c(a[0],b[3],c1,c2,c3);
+	$LD	r7,`3*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r0
+					#mul_add_c(a[1],b[2],c1,c2,c3);
+	$LD	r6,`1*$BNSZ`(r4)
+	$LD	r7,`2*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r12
+
+					#mul_add_c(a[2],b[1],c1,c2,c3);
+	$LD	r6,`2*$BNSZ`(r4)
+	$LD	r7,`1*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r12
+					#mul_add_c(a[3],b[0],c1,c2,c3);
+	$LD	r6,`3*$BNSZ`(r4)
+	$LD	r7,`0*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r12
+	$ST	r10,`3*$BNSZ`(r3)	#r[3]=c1;
+					#mul_add_c(a[4],b[0],c2,c3,c1);
+	$LD	r6,`4*$BNSZ`(r4)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r0
+					#mul_add_c(a[3],b[1],c2,c3,c1);
+	$LD	r6,`3*$BNSZ`(r4)
+	$LD	r7,`1*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+					#mul_add_c(a[2],b[2],c2,c3,c1);
+	$LD	r6,`2*$BNSZ`(r4)
+	$LD	r7,`2*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+					#mul_add_c(a[1],b[3],c2,c3,c1);
+	$LD	r6,`1*$BNSZ`(r4)
+	$LD	r7,`3*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+					#mul_add_c(a[0],b[4],c2,c3,c1);
+	$LD	r6,`0*$BNSZ`(r4)
+	$LD	r7,`4*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+	$ST	r11,`4*$BNSZ`(r3)	#r[4]=c2;
+					#mul_add_c(a[0],b[5],c3,c1,c2);
+	$LD	r7,`5*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r0
+					#mul_add_c(a[1],b[4],c3,c1,c2);
+	$LD	r6,`1*$BNSZ`(r4)
+	$LD	r7,`4*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r11
+					#mul_add_c(a[2],b[3],c3,c1,c2);
+	$LD	r6,`2*$BNSZ`(r4)
+	$LD	r7,`3*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r11
+					#mul_add_c(a[3],b[2],c3,c1,c2);
+	$LD	r6,`3*$BNSZ`(r4)
+	$LD	r7,`2*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r11
+					#mul_add_c(a[4],b[1],c3,c1,c2);
+	$LD	r6,`4*$BNSZ`(r4)
+	$LD	r7,`1*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r11
+					#mul_add_c(a[5],b[0],c3,c1,c2);
+	$LD	r6,`5*$BNSZ`(r4)
+	$LD	r7,`0*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r11
+	$ST	r12,`5*$BNSZ`(r3)	#r[5]=c3;
+					#mul_add_c(a[6],b[0],c1,c2,c3);
+	$LD	r6,`6*$BNSZ`(r4)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r0
+					#mul_add_c(a[5],b[1],c1,c2,c3);
+	$LD	r6,`5*$BNSZ`(r4)
+	$LD	r7,`1*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r12
+					#mul_add_c(a[4],b[2],c1,c2,c3);
+	$LD	r6,`4*$BNSZ`(r4)
+	$LD	r7,`2*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r12
+					#mul_add_c(a[3],b[3],c1,c2,c3);
+	$LD	r6,`3*$BNSZ`(r4)
+	$LD	r7,`3*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r12
+					#mul_add_c(a[2],b[4],c1,c2,c3);
+	$LD	r6,`2*$BNSZ`(r4)
+	$LD	r7,`4*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r12
+					#mul_add_c(a[1],b[5],c1,c2,c3);
+	$LD	r6,`1*$BNSZ`(r4)
+	$LD	r7,`5*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r12
+					#mul_add_c(a[0],b[6],c1,c2,c3);
+	$LD	r6,`0*$BNSZ`(r4)
+	$LD	r7,`6*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r12
+	$ST	r10,`6*$BNSZ`(r3)	#r[6]=c1;
+					#mul_add_c(a[0],b[7],c2,c3,c1);
+	$LD	r7,`7*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r0
+					#mul_add_c(a[1],b[6],c2,c3,c1);
+	$LD	r6,`1*$BNSZ`(r4)
+	$LD	r7,`6*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+					#mul_add_c(a[2],b[5],c2,c3,c1);
+	$LD	r6,`2*$BNSZ`(r4)
+	$LD	r7,`5*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+					#mul_add_c(a[3],b[4],c2,c3,c1);
+	$LD	r6,`3*$BNSZ`(r4)
+	$LD	r7,`4*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+					#mul_add_c(a[4],b[3],c2,c3,c1);
+	$LD	r6,`4*$BNSZ`(r4)
+	$LD	r7,`3*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+					#mul_add_c(a[5],b[2],c2,c3,c1);
+	$LD	r6,`5*$BNSZ`(r4)
+	$LD	r7,`2*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+					#mul_add_c(a[6],b[1],c2,c3,c1);
+	$LD	r6,`6*$BNSZ`(r4)
+	$LD	r7,`1*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+					#mul_add_c(a[7],b[0],c2,c3,c1);
+	$LD	r6,`7*$BNSZ`(r4)
+	$LD	r7,`0*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+	$ST	r11,`7*$BNSZ`(r3)	#r[7]=c2;
+					#mul_add_c(a[7],b[1],c3,c1,c2);
+	$LD	r7,`1*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r0
+					#mul_add_c(a[6],b[2],c3,c1,c2);
+	$LD	r6,`6*$BNSZ`(r4)
+	$LD	r7,`2*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r11
+					#mul_add_c(a[5],b[3],c3,c1,c2);
+	$LD	r6,`5*$BNSZ`(r4)
+	$LD	r7,`3*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r11
+					#mul_add_c(a[4],b[4],c3,c1,c2);
+	$LD	r6,`4*$BNSZ`(r4)
+	$LD	r7,`4*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r11
+					#mul_add_c(a[3],b[5],c3,c1,c2);
+	$LD	r6,`3*$BNSZ`(r4)
+	$LD	r7,`5*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r11
+					#mul_add_c(a[2],b[6],c3,c1,c2);
+	$LD	r6,`2*$BNSZ`(r4)
+	$LD	r7,`6*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r11
+					#mul_add_c(a[1],b[7],c3,c1,c2);
+	$LD	r6,`1*$BNSZ`(r4)
+	$LD	r7,`7*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r11
+	$ST	r12,`8*$BNSZ`(r3)	#r[8]=c3;
+					#mul_add_c(a[2],b[7],c1,c2,c3);
+	$LD	r6,`2*$BNSZ`(r4)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r0
+					#mul_add_c(a[3],b[6],c1,c2,c3);
+	$LD	r6,`3*$BNSZ`(r4)
+	$LD	r7,`6*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r12
+					#mul_add_c(a[4],b[5],c1,c2,c3);
+	$LD	r6,`4*$BNSZ`(r4)
+	$LD	r7,`5*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r12
+					#mul_add_c(a[5],b[4],c1,c2,c3);
+	$LD	r6,`5*$BNSZ`(r4)
+	$LD	r7,`4*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r12
+					#mul_add_c(a[6],b[3],c1,c2,c3);
+	$LD	r6,`6*$BNSZ`(r4)
+	$LD	r7,`3*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r12
+					#mul_add_c(a[7],b[2],c1,c2,c3);
+	$LD	r6,`7*$BNSZ`(r4)
+	$LD	r7,`2*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r12
+	$ST	r10,`9*$BNSZ`(r3)	#r[9]=c1;
+					#mul_add_c(a[7],b[3],c2,c3,c1);
+	$LD	r7,`3*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r0
+					#mul_add_c(a[6],b[4],c2,c3,c1);
+	$LD	r6,`6*$BNSZ`(r4)
+	$LD	r7,`4*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+					#mul_add_c(a[5],b[5],c2,c3,c1);
+	$LD	r6,`5*$BNSZ`(r4)
+	$LD	r7,`5*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+					#mul_add_c(a[4],b[6],c2,c3,c1);
+	$LD	r6,`4*$BNSZ`(r4)
+	$LD	r7,`6*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+					#mul_add_c(a[3],b[7],c2,c3,c1);
+	$LD	r6,`3*$BNSZ`(r4)
+	$LD	r7,`7*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+	$ST	r11,`10*$BNSZ`(r3)	#r[10]=c2;
+					#mul_add_c(a[4],b[7],c3,c1,c2);
+	$LD	r6,`4*$BNSZ`(r4)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r0
+					#mul_add_c(a[5],b[6],c3,c1,c2);
+	$LD	r6,`5*$BNSZ`(r4)
+	$LD	r7,`6*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r11
+					#mul_add_c(a[6],b[5],c3,c1,c2);
+	$LD	r6,`6*$BNSZ`(r4)
+	$LD	r7,`5*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r11
+					#mul_add_c(a[7],b[4],c3,c1,c2);
+	$LD	r6,`7*$BNSZ`(r4)
+	$LD	r7,`4*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	addze	r11,r11
+	$ST	r12,`11*$BNSZ`(r3)	#r[11]=c3;
+					#mul_add_c(a[7],b[5],c1,c2,c3);
+	$LD	r7,`5*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r0
+					#mul_add_c(a[6],b[6],c1,c2,c3);
+	$LD	r6,`6*$BNSZ`(r4)
+	$LD	r7,`6*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r12
+					#mul_add_c(a[5],b[7],c1,c2,c3);
+	$LD	r6,`5*$BNSZ`(r4)
+	$LD	r7,`7*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r10,r10,r8
+	adde	r11,r11,r9
+	addze	r12,r12
+	$ST	r10,`12*$BNSZ`(r3)	#r[12]=c1;
+					#mul_add_c(a[6],b[7],c2,c3,c1);
+	$LD	r6,`6*$BNSZ`(r4)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r0
+					#mul_add_c(a[7],b[6],c2,c3,c1);
+	$LD	r6,`7*$BNSZ`(r4)
+	$LD	r7,`6*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r11,r11,r8
+	adde	r12,r12,r9
+	addze	r10,r10
+	$ST	r11,`13*$BNSZ`(r3)	#r[13]=c2;
+					#mul_add_c(a[7],b[7],c3,c1,c2);
+	$LD	r7,`7*$BNSZ`(r5)
+	$UMULL	r8,r6,r7
+	$UMULH	r9,r6,r7
+	addc	r12,r12,r8
+	adde	r10,r10,r9
+	$ST	r12,`14*$BNSZ`(r3)	#r[14]=c3;
+	$ST	r10,`15*$BNSZ`(r3)	#r[15]=c1;
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+	.long	0
+.size	.bn_mul_comba8,.-.bn_mul_comba8
+
+#
+#	NOTE:	The following label name should be changed to
+#		"bn_sub_words" i.e. remove the first dot
+#		for the gcc compiler. This should be automatically
+#		done in the build
+#
+#
+.align	4
+.bn_sub_words:
+#
+#	Handcoded version of bn_sub_words
+#
+#BN_ULONG bn_sub_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
+#
+#	r3 = r
+#	r4 = a
+#	r5 = b
+#	r6 = n
+#
+#       Note:	No loop unrolling done since this is not a performance
+#               critical loop.
+
+	xor	r0,r0,r0	#set r0 = 0
+#
+#	check for r6 = 0 AND set carry bit.
+#
+	subfc.	r7,r0,r6        # If r6 is 0 then result is 0.
+				# if r6 > 0 then result !=0
+				# In either case carry bit is set.
+	beq	Lppcasm_sub_adios
+	addi	r4,r4,-$BNSZ
+	addi	r3,r3,-$BNSZ
+	addi	r5,r5,-$BNSZ
+	mtctr	r6
+Lppcasm_sub_mainloop:
+	$LDU	r7,$BNSZ(r4)
+	$LDU	r8,$BNSZ(r5)
+	subfe	r6,r8,r7	# r6 = r7+carry bit + onescomplement(r8)
+				# if carry = 1 this is r7-r8. Else it
+				# is r7-r8 -1 as we need.
+	$STU	r6,$BNSZ(r3)
+	bdnz	Lppcasm_sub_mainloop
+Lppcasm_sub_adios:
+	subfze	r3,r0		# if carry bit is set then r3 = 0 else -1
+	andi.	r3,r3,1         # keep only last bit.
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,4,0
+	.long	0
+.size	.bn_sub_words,.-.bn_sub_words
+
+#
+#	NOTE:	The following label name should be changed to
+#		"bn_add_words" i.e. remove the first dot
+#		for the gcc compiler. This should be automatically
+#		done in the build
+#
+
+.align	4
+.bn_add_words:
+#
+#	Handcoded version of bn_add_words
+#
+#BN_ULONG bn_add_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
+#
+#	r3 = r
+#	r4 = a
+#	r5 = b
+#	r6 = n
+#
+#       Note:	No loop unrolling done since this is not a performance
+#               critical loop.
+
+	xor	r0,r0,r0
+#
+#	check for r6 = 0. Is this needed?
+#
+	addic.	r6,r6,0		#test r6 and clear carry bit.
+	beq	Lppcasm_add_adios
+	addi	r4,r4,-$BNSZ
+	addi	r3,r3,-$BNSZ
+	addi	r5,r5,-$BNSZ
+	mtctr	r6
+Lppcasm_add_mainloop:
+	$LDU	r7,$BNSZ(r4)
+	$LDU	r8,$BNSZ(r5)
+	adde	r8,r7,r8
+	$STU	r8,$BNSZ(r3)
+	bdnz	Lppcasm_add_mainloop
+Lppcasm_add_adios:
+	addze	r3,r0			#return carry bit.
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,4,0
+	.long	0
+.size	.bn_add_words,.-.bn_add_words
+
+#
+#	NOTE:	The following label name should be changed to
+#		"bn_div_words" i.e. remove the first dot
+#		for the gcc compiler. This should be automatically
+#		done in the build
+#
+
+.align	4
+.bn_div_words:
+#
+#	This is a cleaned up version of code generated by
+#	the AIX compiler. The only optimization is to use
+#	the PPC instruction to count leading zeros instead
+#	of call to num_bits_word. Since this was compiled
+#	only at level -O2 we can possibly squeeze it more?
+#
+#	r3 = h
+#	r4 = l
+#	r5 = d
+
+	$UCMPI	0,r5,0			# compare r5 and 0
+	bne	Lppcasm_div1		# proceed if d!=0
+	li	r3,-1			# d=0 return -1
+	blr
+Lppcasm_div1:
+	xor	r0,r0,r0		#r0=0
+	li	r8,$BITS
+	$CNTLZ.	r7,r5			#r7 = num leading 0s in d.
+	beq	Lppcasm_div2		#proceed if no leading zeros
+	subf	r8,r7,r8		#r8 = BN_num_bits_word(d)
+	$SHR.	r9,r3,r8		#are there any bits above r8'th?
+	$TR	16,r9,r0		#if there're, signal to dump core...
+Lppcasm_div2:
+	$UCMP	0,r3,r5			#h>=d?
+	blt	Lppcasm_div3		#goto Lppcasm_div3 if not
+	subf	r3,r5,r3		#h-=d ;
+Lppcasm_div3:				#r7 = BN_BITS2-i. so r7=i
+	cmpi	0,0,r7,0		# is (i == 0)?
+	beq	Lppcasm_div4
+	$SHL	r3,r3,r7		# h = (h<< i)
+	$SHR	r8,r4,r8		# r8 = (l >> BN_BITS2 -i)
+	$SHL	r5,r5,r7		# d<<=i
+	or	r3,r3,r8		# h = (h<<i)|(l>>(BN_BITS2-i))
+	$SHL	r4,r4,r7		# l <<=i
+Lppcasm_div4:
+	$SHRI	r9,r5,`$BITS/2`		# r9 = dh
+					# dl will be computed when needed
+					# as it saves registers.
+	li	r6,2			#r6=2
+	mtctr	r6			#counter will be in count.
+Lppcasm_divouterloop:
+	$SHRI	r8,r3,`$BITS/2`		#r8 = (h>>BN_BITS4)
+	$SHRI	r11,r4,`$BITS/2`	#r11= (l&BN_MASK2h)>>BN_BITS4
+					# compute here for innerloop.
+	$UCMP	0,r8,r9			# is (h>>BN_BITS4)==dh
+	bne	Lppcasm_div5		# goto Lppcasm_div5 if not
+
+	li	r8,-1
+	$CLRU	r8,r8,`$BITS/2`		#q = BN_MASK2l
+	b	Lppcasm_div6
+Lppcasm_div5:
+	$UDIV	r8,r3,r9		#q = h/dh
+Lppcasm_div6:
+	$UMULL	r12,r9,r8		#th = q*dh
+	$CLRU	r10,r5,`$BITS/2`	#r10=dl
+	$UMULL	r6,r8,r10		#tl = q*dl
+
+Lppcasm_divinnerloop:
+	subf	r10,r12,r3		#t = h -th
+	$SHRI	r7,r10,`$BITS/2`	#r7= (t &BN_MASK2H), sort of...
+	addic.	r7,r7,0			#test if r7 == 0. used below.
+					# now want to compute
+					# r7 = (t<<BN_BITS4)|((l&BN_MASK2h)>>BN_BITS4)
+					# the following 2 instructions do that
+	$SHLI	r7,r10,`$BITS/2`	# r7 = (t<<BN_BITS4)
+	or	r7,r7,r11		# r7|=((l&BN_MASK2h)>>BN_BITS4)
+	$UCMP	cr1,r6,r7		# compare (tl <= r7)
+	bne	Lppcasm_divinnerexit
+	ble	cr1,Lppcasm_divinnerexit
+	addi	r8,r8,-1		#q--
+	subf	r12,r9,r12		#th -=dh
+	$CLRU	r10,r5,`$BITS/2`	#r10=dl. t is no longer needed in loop.
+	subf	r6,r10,r6		#tl -=dl
+	b	Lppcasm_divinnerloop
+Lppcasm_divinnerexit:
+	$SHRI	r10,r6,`$BITS/2`	#t=(tl>>BN_BITS4)
+	$SHLI	r11,r6,`$BITS/2`	#tl=(tl<<BN_BITS4)&BN_MASK2h;
+	$UCMP	cr1,r4,r11		# compare l and tl
+	add	r12,r12,r10		# th+=t
+	bge	cr1,Lppcasm_div7	# if (l>=tl) goto Lppcasm_div7
+	addi	r12,r12,1		# th++
+Lppcasm_div7:
+	subf	r11,r11,r4		#r11=l-tl
+	$UCMP	cr1,r3,r12		#compare h and th
+	bge	cr1,Lppcasm_div8	#if (h>=th) goto Lppcasm_div8
+	addi	r8,r8,-1		# q--
+	add	r3,r5,r3		# h+=d
+Lppcasm_div8:
+	subf	r12,r12,r3		#r12 = h-th
+	$SHLI	r4,r11,`$BITS/2`	#l=(l&BN_MASK2l)<<BN_BITS4
+					# want to compute
+					# h = ((h<<BN_BITS4)|(l>>BN_BITS4))&BN_MASK2
+					# the following 2 instructions will do this.
+	$INSR	r11,r12,`$BITS/2`,`$BITS/2`	# r11 is the value we want rotated $BITS/2.
+	$ROTL	r3,r11,`$BITS/2`	# rotate by $BITS/2 and store in r3
+	bdz	Lppcasm_div9		#if (count==0) break ;
+	$SHLI	r0,r8,`$BITS/2`		#ret =q<<BN_BITS4
+	b	Lppcasm_divouterloop
+Lppcasm_div9:
+	or	r3,r8,r0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+	.long	0
+.size	.bn_div_words,.-.bn_div_words
+
+#
+#	NOTE:	The following label name should be changed to
+#		"bn_sqr_words" i.e. remove the first dot
+#		for the gcc compiler. This should be automatically
+#		done in the build
+#
+.align	4
+.bn_sqr_words:
+#
+#	Optimized version of bn_sqr_words
+#
+#	void bn_sqr_words(BN_ULONG *r, BN_ULONG *a, int n)
+#
+#	r3 = r
+#	r4 = a
+#	r5 = n
+#
+#	r6 = a[i].
+#	r7,r8 = product.
+#
+#	No unrolling done here. Not performance critical.
+
+	addic.	r5,r5,0			#test r5.
+	beq	Lppcasm_sqr_adios
+	addi	r4,r4,-$BNSZ
+	addi	r3,r3,-$BNSZ
+	mtctr	r5
+Lppcasm_sqr_mainloop:
+					#sqr(r[0],r[1],a[0]);
+	$LDU	r6,$BNSZ(r4)
+	$UMULL	r7,r6,r6
+	$UMULH  r8,r6,r6
+	$STU	r7,$BNSZ(r3)
+	$STU	r8,$BNSZ(r3)
+	bdnz	Lppcasm_sqr_mainloop
+Lppcasm_sqr_adios:
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+	.long	0
+.size	.bn_sqr_words,.-.bn_sqr_words
+
+#
+#	NOTE:	The following label name should be changed to
+#		"bn_mul_words" i.e. remove the first dot
+#		for the gcc compiler. This should be automatically
+#		done in the build
+#
+
+.align	4
+.bn_mul_words:
+#
+# BN_ULONG bn_mul_words(BN_ULONG *rp, BN_ULONG *ap, int num, BN_ULONG w)
+#
+# r3 = rp
+# r4 = ap
+# r5 = num
+# r6 = w
+	xor	r0,r0,r0
+	xor	r12,r12,r12		# used for carry
+	rlwinm.	r7,r5,30,2,31		# num >> 2
+	beq	Lppcasm_mw_REM
+	mtctr	r7
+Lppcasm_mw_LOOP:
+					#mul(rp[0],ap[0],w,c1);
+	$LD	r8,`0*$BNSZ`(r4)
+	$UMULL	r9,r6,r8
+	$UMULH  r10,r6,r8
+	addc	r9,r9,r12
+	#addze	r10,r10			#carry is NOT ignored.
+					#will be taken care of
+					#in second spin below
+					#using adde.
+	$ST	r9,`0*$BNSZ`(r3)
+					#mul(rp[1],ap[1],w,c1);
+	$LD	r8,`1*$BNSZ`(r4)
+	$UMULL	r11,r6,r8
+	$UMULH  r12,r6,r8
+	adde	r11,r11,r10
+	#addze	r12,r12
+	$ST	r11,`1*$BNSZ`(r3)
+					#mul(rp[2],ap[2],w,c1);
+	$LD	r8,`2*$BNSZ`(r4)
+	$UMULL	r9,r6,r8
+	$UMULH  r10,r6,r8
+	adde	r9,r9,r12
+	#addze	r10,r10
+	$ST	r9,`2*$BNSZ`(r3)
+					#mul_add(rp[3],ap[3],w,c1);
+	$LD	r8,`3*$BNSZ`(r4)
+	$UMULL	r11,r6,r8
+	$UMULH  r12,r6,r8
+	adde	r11,r11,r10
+	addze	r12,r12			#this spin we collect carry into
+					#r12
+	$ST	r11,`3*$BNSZ`(r3)
+
+	addi	r3,r3,`4*$BNSZ`
+	addi	r4,r4,`4*$BNSZ`
+	bdnz	Lppcasm_mw_LOOP
+
+Lppcasm_mw_REM:
+	andi.	r5,r5,0x3
+	beq	Lppcasm_mw_OVER
+					#mul(rp[0],ap[0],w,c1);
+	$LD	r8,`0*$BNSZ`(r4)
+	$UMULL	r9,r6,r8
+	$UMULH  r10,r6,r8
+	addc	r9,r9,r12
+	addze	r10,r10
+	$ST	r9,`0*$BNSZ`(r3)
+	addi	r12,r10,0
+
+	addi	r5,r5,-1
+	cmpli	0,0,r5,0
+	beq	Lppcasm_mw_OVER
+
+
+					#mul(rp[1],ap[1],w,c1);
+	$LD	r8,`1*$BNSZ`(r4)
+	$UMULL	r9,r6,r8
+	$UMULH  r10,r6,r8
+	addc	r9,r9,r12
+	addze	r10,r10
+	$ST	r9,`1*$BNSZ`(r3)
+	addi	r12,r10,0
+
+	addi	r5,r5,-1
+	cmpli	0,0,r5,0
+	beq	Lppcasm_mw_OVER
+
+					#mul_add(rp[2],ap[2],w,c1);
+	$LD	r8,`2*$BNSZ`(r4)
+	$UMULL	r9,r6,r8
+	$UMULH  r10,r6,r8
+	addc	r9,r9,r12
+	addze	r10,r10
+	$ST	r9,`2*$BNSZ`(r3)
+	addi	r12,r10,0
+
+Lppcasm_mw_OVER:
+	addi	r3,r12,0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,4,0
+	.long	0
+.size	.bn_mul_words,.-.bn_mul_words
+
+#
+#	NOTE:	The following label name should be changed to
+#		"bn_mul_add_words" i.e. remove the first dot
+#		for the gcc compiler. This should be automatically
+#		done in the build
+#
+
+.align	4
+.bn_mul_add_words:
+#
+# BN_ULONG bn_mul_add_words(BN_ULONG *rp, BN_ULONG *ap, int num, BN_ULONG w)
+#
+# r3 = rp
+# r4 = ap
+# r5 = num
+# r6 = w
+#
+# empirical evidence suggests that unrolled version performs best!!
+#
+	xor	r0,r0,r0		#r0 = 0
+	xor	r12,r12,r12  		#r12 = 0 . used for carry
+	rlwinm.	r7,r5,30,2,31		# num >> 2
+	beq	Lppcasm_maw_leftover	# if (num < 4) go LPPCASM_maw_leftover
+	mtctr	r7
+Lppcasm_maw_mainloop:
+					#mul_add(rp[0],ap[0],w,c1);
+	$LD	r8,`0*$BNSZ`(r4)
+	$LD	r11,`0*$BNSZ`(r3)
+	$UMULL	r9,r6,r8
+	$UMULH  r10,r6,r8
+	addc	r9,r9,r12		#r12 is carry.
+	addze	r10,r10
+	addc	r9,r9,r11
+	#addze	r10,r10
+					#the above instruction addze
+					#is NOT needed. Carry will NOT
+					#be ignored. It's not affected
+					#by multiply and will be collected
+					#in the next spin
+	$ST	r9,`0*$BNSZ`(r3)
+
+					#mul_add(rp[1],ap[1],w,c1);
+	$LD	r8,`1*$BNSZ`(r4)
+	$LD	r9,`1*$BNSZ`(r3)
+	$UMULL	r11,r6,r8
+	$UMULH  r12,r6,r8
+	adde	r11,r11,r10		#r10 is carry.
+	addze	r12,r12
+	addc	r11,r11,r9
+	#addze	r12,r12
+	$ST	r11,`1*$BNSZ`(r3)
+
+					#mul_add(rp[2],ap[2],w,c1);
+	$LD	r8,`2*$BNSZ`(r4)
+	$UMULL	r9,r6,r8
+	$LD	r11,`2*$BNSZ`(r3)
+	$UMULH  r10,r6,r8
+	adde	r9,r9,r12
+	addze	r10,r10
+	addc	r9,r9,r11
+	#addze	r10,r10
+	$ST	r9,`2*$BNSZ`(r3)
+
+					#mul_add(rp[3],ap[3],w,c1);
+	$LD	r8,`3*$BNSZ`(r4)
+	$UMULL	r11,r6,r8
+	$LD	r9,`3*$BNSZ`(r3)
+	$UMULH  r12,r6,r8
+	adde	r11,r11,r10
+	addze	r12,r12
+	addc	r11,r11,r9
+	addze	r12,r12
+	$ST	r11,`3*$BNSZ`(r3)
+	addi	r3,r3,`4*$BNSZ`
+	addi	r4,r4,`4*$BNSZ`
+	bdnz	Lppcasm_maw_mainloop
+
+Lppcasm_maw_leftover:
+	andi.	r5,r5,0x3
+	beq	Lppcasm_maw_adios
+	addi	r3,r3,-$BNSZ
+	addi	r4,r4,-$BNSZ
+					#mul_add(rp[0],ap[0],w,c1);
+	mtctr	r5
+	$LDU	r8,$BNSZ(r4)
+	$UMULL	r9,r6,r8
+	$UMULH  r10,r6,r8
+	$LDU	r11,$BNSZ(r3)
+	addc	r9,r9,r11
+	addze	r10,r10
+	addc	r9,r9,r12
+	addze	r12,r10
+	$ST	r9,0(r3)
+
+	bdz	Lppcasm_maw_adios
+					#mul_add(rp[1],ap[1],w,c1);
+	$LDU	r8,$BNSZ(r4)
+	$UMULL	r9,r6,r8
+	$UMULH  r10,r6,r8
+	$LDU	r11,$BNSZ(r3)
+	addc	r9,r9,r11
+	addze	r10,r10
+	addc	r9,r9,r12
+	addze	r12,r10
+	$ST	r9,0(r3)
+
+	bdz	Lppcasm_maw_adios
+					#mul_add(rp[2],ap[2],w,c1);
+	$LDU	r8,$BNSZ(r4)
+	$UMULL	r9,r6,r8
+	$UMULH  r10,r6,r8
+	$LDU	r11,$BNSZ(r3)
+	addc	r9,r9,r11
+	addze	r10,r10
+	addc	r9,r9,r12
+	addze	r12,r10
+	$ST	r9,0(r3)
+
+Lppcasm_maw_adios:
+	addi	r3,r12,0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,4,0
+	.long	0
+.size	.bn_mul_add_words,.-.bn_mul_add_words
+	.align	4
+EOF
+$data =~ s/\`([^\`]*)\`/eval $1/gem;
+print $data;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ppc64-mont.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ppc64-mont.pl
new file mode 100644
index 000000000..c41b620bc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/ppc64-mont.pl
@@ -0,0 +1,1652 @@
+#! /usr/bin/env perl
+# Copyright 2007-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# December 2007
+
+# The reason for undertaken effort is basically following. Even though
+# Power 6 CPU operates at incredible 4.7GHz clock frequency, its PKI
+# performance was observed to be less than impressive, essentially as
+# fast as 1.8GHz PPC970, or 2.6 times(!) slower than one would hope.
+# Well, it's not surprising that IBM had to make some sacrifices to
+# boost the clock frequency that much, but no overall improvement?
+# Having observed how much difference did switching to FPU make on
+# UltraSPARC, playing same stunt on Power 6 appeared appropriate...
+# Unfortunately the resulting performance improvement is not as
+# impressive, ~30%, and in absolute terms is still very far from what
+# one would expect from 4.7GHz CPU. There is a chance that I'm doing
+# something wrong, but in the lack of assembler level micro-profiling
+# data or at least decent platform guide I can't tell... Or better
+# results might be achieved with VMX... Anyway, this module provides
+# *worse* performance on other PowerPC implementations, ~40-15% slower
+# on PPC970 depending on key length and ~40% slower on Power 5 for all
+# key lengths. As it's obviously inappropriate as "best all-round"
+# alternative, it has to be complemented with run-time CPU family
+# detection. Oh! It should also be noted that unlike other PowerPC
+# implementation IALU ppc-mont.pl module performs *suboptimally* on
+# >=1024-bit key lengths on Power 6. It should also be noted that
+# *everything* said so far applies to 64-bit builds! As far as 32-bit
+# application executed on 64-bit CPU goes, this module is likely to
+# become preferred choice, because it's easy to adapt it for such
+# case and *is* faster than 32-bit ppc-mont.pl on *all* processors.
+
+# February 2008
+
+# Micro-profiling assisted optimization results in ~15% improvement
+# over original ppc64-mont.pl version, or overall ~50% improvement
+# over ppc.pl module on Power 6. If compared to ppc-mont.pl on same
+# Power 6 CPU, this module is 5-150% faster depending on key length,
+# [hereafter] more for longer keys. But if compared to ppc-mont.pl
+# on 1.8GHz PPC970, it's only 5-55% faster. Still far from impressive
+# in absolute terms, but it's apparently the way Power 6 is...
+
+# December 2009
+
+# Adapted for 32-bit build this module delivers 25-120%, yes, more
+# than *twice* for longer keys, performance improvement over 32-bit
+# ppc-mont.pl on 1.8GHz PPC970. However! This implementation utilizes
+# even 64-bit integer operations and the trouble is that most PPC
+# operating systems don't preserve upper halves of general purpose
+# registers upon 32-bit signal delivery. They do preserve them upon
+# context switch, but not signalling:-( This means that asynchronous
+# signals have to be blocked upon entry to this subroutine. Signal
+# masking (and of course complementary unmasking) has quite an impact
+# on performance, naturally larger for shorter keys. It's so severe
+# that 512-bit key performance can be as low as 1/3 of expected one.
+# This is why this routine can be engaged for longer key operations
+# only on these OSes, see crypto/ppccap.c for further details. MacOS X
+# is an exception from this and doesn't require signal masking, and
+# that's where above improvement coefficients were collected. For
+# others alternative would be to break dependence on upper halves of
+# GPRs by sticking to 32-bit integer operations...
+
+# December 2012
+
+# Remove above mentioned dependence on GPRs' upper halves in 32-bit
+# build. No signal masking overhead, but integer instructions are
+# *more* numerous... It's still "universally" faster than 32-bit
+# ppc-mont.pl, but improvement coefficient is not as impressive
+# for longer keys...
+
+$flavour = shift;
+
+if ($flavour =~ /32/) {
+	$SIZE_T=4;
+	$RZONE=	224;
+	$fname=	"bn_mul_mont_fpu64";
+
+	$STUX=	"stwux";	# store indexed and update
+	$PUSH=	"stw";
+	$POP=	"lwz";
+} elsif ($flavour =~ /64/) {
+	$SIZE_T=8;
+	$RZONE=	288;
+	$fname=	"bn_mul_mont_fpu64";
+
+	# same as above, but 64-bit mnemonics...
+	$STUX=	"stdux";	# store indexed and update
+	$PUSH=	"std";
+	$POP=	"ld";
+} else { die "nonsense $flavour"; }
+
+$LITTLE_ENDIAN = ($flavour=~/le$/) ? 4 : 0;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open STDOUT,"| $^X $xlate $flavour ".shift || die "can't call $xlate: $!";
+
+$FRAME=64;	# padded frame header
+$TRANSFER=16*8;
+
+$carry="r0";
+$sp="r1";
+$toc="r2";
+$rp="r3";	$ovf="r3";
+$ap="r4";
+$bp="r5";
+$np="r6";
+$n0="r7";
+$num="r8";
+$rp="r9";	# $rp is reassigned
+$tp="r10";
+$j="r11";
+$i="r12";
+# non-volatile registers
+$c1="r19";
+$n1="r20";
+$a1="r21";
+$nap_d="r22";	# interleaved ap and np in double format
+$a0="r23";	# ap[0]
+$t0="r24";	# temporary registers
+$t1="r25";
+$t2="r26";
+$t3="r27";
+$t4="r28";
+$t5="r29";
+$t6="r30";
+$t7="r31";
+
+# PPC offers enough register bank capacity to unroll inner loops twice
+#
+#     ..A3A2A1A0
+#           dcba
+#    -----------
+#            A0a
+#           A0b
+#          A0c
+#         A0d
+#          A1a
+#         A1b
+#        A1c
+#       A1d
+#        A2a
+#       A2b
+#      A2c
+#     A2d
+#      A3a
+#     A3b
+#    A3c
+#   A3d
+#    ..a
+#   ..b
+#
+$ba="f0";	$bb="f1";	$bc="f2";	$bd="f3";
+$na="f4";	$nb="f5";	$nc="f6";	$nd="f7";
+$dota="f8";	$dotb="f9";
+$A0="f10";	$A1="f11";	$A2="f12";	$A3="f13";
+$N0="f20";	$N1="f21";	$N2="f22";	$N3="f23";
+$T0a="f24";	$T0b="f25";
+$T1a="f26";	$T1b="f27";
+$T2a="f28";	$T2b="f29";
+$T3a="f30";	$T3b="f31";
+
+# sp----------->+-------------------------------+
+#		| saved sp			|
+#		+-------------------------------+
+#		.				.
+#   +64		+-------------------------------+
+#		| 16 gpr<->fpr transfer zone	|
+#		.				.
+#		.				.
+#   +16*8	+-------------------------------+
+#		| __int64 tmp[-1]		|
+#		+-------------------------------+
+#		| __int64 tmp[num]		|
+#		.				.
+#		.				.
+#		.				.
+#   +(num+1)*8	+-------------------------------+
+#		| padding to 64 byte boundary	|
+#		.				.
+#   +X		+-------------------------------+
+#		| double nap_d[4*num]		|
+#		.				.
+#		.				.
+#		.				.
+#		+-------------------------------+
+#		.				.
+#   -13*size_t	+-------------------------------+
+#		| 13 saved gpr, r19-r31		|
+#		.				.
+#		.				.
+#   -12*8	+-------------------------------+
+#		| 12 saved fpr, f20-f31		|
+#		.				.
+#		.				.
+#		+-------------------------------+
+
+$code=<<___;
+.machine "any"
+.text
+
+.globl	.$fname
+.align	5
+.$fname:
+	cmpwi	$num,`3*8/$SIZE_T`
+	mr	$rp,r3		; $rp is reassigned
+	li	r3,0		; possible "not handled" return code
+	bltlr-
+	andi.	r0,$num,`16/$SIZE_T-1`		; $num has to be "even"
+	bnelr-
+
+	slwi	$num,$num,`log($SIZE_T)/log(2)`	; num*=sizeof(BN_LONG)
+	li	$i,-4096
+	slwi	$tp,$num,2	; place for {an}p_{lh}[num], i.e. 4*num
+	add	$tp,$tp,$num	; place for tp[num+1]
+	addi	$tp,$tp,`$FRAME+$TRANSFER+8+64+$RZONE`
+	subf	$tp,$tp,$sp	; $sp-$tp
+	and	$tp,$tp,$i	; minimize TLB usage
+	subf	$tp,$sp,$tp	; $tp-$sp
+	mr	$i,$sp
+	$STUX	$sp,$sp,$tp	; alloca
+
+	$PUSH	r19,`-12*8-13*$SIZE_T`($i)
+	$PUSH	r20,`-12*8-12*$SIZE_T`($i)
+	$PUSH	r21,`-12*8-11*$SIZE_T`($i)
+	$PUSH	r22,`-12*8-10*$SIZE_T`($i)
+	$PUSH	r23,`-12*8-9*$SIZE_T`($i)
+	$PUSH	r24,`-12*8-8*$SIZE_T`($i)
+	$PUSH	r25,`-12*8-7*$SIZE_T`($i)
+	$PUSH	r26,`-12*8-6*$SIZE_T`($i)
+	$PUSH	r27,`-12*8-5*$SIZE_T`($i)
+	$PUSH	r28,`-12*8-4*$SIZE_T`($i)
+	$PUSH	r29,`-12*8-3*$SIZE_T`($i)
+	$PUSH	r30,`-12*8-2*$SIZE_T`($i)
+	$PUSH	r31,`-12*8-1*$SIZE_T`($i)
+	stfd	f20,`-12*8`($i)
+	stfd	f21,`-11*8`($i)
+	stfd	f22,`-10*8`($i)
+	stfd	f23,`-9*8`($i)
+	stfd	f24,`-8*8`($i)
+	stfd	f25,`-7*8`($i)
+	stfd	f26,`-6*8`($i)
+	stfd	f27,`-5*8`($i)
+	stfd	f28,`-4*8`($i)
+	stfd	f29,`-3*8`($i)
+	stfd	f30,`-2*8`($i)
+	stfd	f31,`-1*8`($i)
+
+	addi	$tp,$sp,`$FRAME+$TRANSFER+8+64`
+	li	$i,-64
+	add	$nap_d,$tp,$num
+	and	$nap_d,$nap_d,$i	; align to 64 bytes
+	; nap_d is off by 1, because it's used with stfdu/lfdu
+	addi	$nap_d,$nap_d,-8
+	srwi	$j,$num,`3+1`	; counter register, num/2
+	addi	$j,$j,-1
+	addi	$tp,$sp,`$FRAME+$TRANSFER-8`
+	li	$carry,0
+	mtctr	$j
+___
+
+$code.=<<___ if ($SIZE_T==8);
+	ld	$a0,0($ap)		; pull ap[0] value
+	ld	$t3,0($bp)		; bp[0]
+	ld	$n0,0($n0)		; pull n0[0] value
+
+	mulld	$t7,$a0,$t3		; ap[0]*bp[0]
+	; transfer bp[0] to FPU as 4x16-bit values
+	extrdi	$t0,$t3,16,48
+	extrdi	$t1,$t3,16,32
+	extrdi	$t2,$t3,16,16
+	extrdi	$t3,$t3,16,0
+	std	$t0,`$FRAME+0`($sp)
+	std	$t1,`$FRAME+8`($sp)
+	std	$t2,`$FRAME+16`($sp)
+	std	$t3,`$FRAME+24`($sp)
+
+	mulld	$t7,$t7,$n0		; tp[0]*n0
+	; transfer (ap[0]*bp[0])*n0 to FPU as 4x16-bit values
+	extrdi	$t4,$t7,16,48
+	extrdi	$t5,$t7,16,32
+	extrdi	$t6,$t7,16,16
+	extrdi	$t7,$t7,16,0
+	std	$t4,`$FRAME+32`($sp)
+	std	$t5,`$FRAME+40`($sp)
+	std	$t6,`$FRAME+48`($sp)
+	std	$t7,`$FRAME+56`($sp)
+
+	extrdi	$t0,$a0,32,32		; lwz	$t0,4($ap)
+	extrdi	$t1,$a0,32,0		; lwz	$t1,0($ap)
+	lwz	$t2,`12^$LITTLE_ENDIAN`($ap)	; load a[1] as 32-bit word pair
+	lwz	$t3,`8^$LITTLE_ENDIAN`($ap)
+	lwz	$t4,`4^$LITTLE_ENDIAN`($np)	; load n[0] as 32-bit word pair
+	lwz	$t5,`0^$LITTLE_ENDIAN`($np)
+	lwz	$t6,`12^$LITTLE_ENDIAN`($np)	; load n[1] as 32-bit word pair
+	lwz	$t7,`8^$LITTLE_ENDIAN`($np)
+___
+$code.=<<___ if ($SIZE_T==4);
+	lwz	$a0,0($ap)		; pull ap[0,1] value
+	mr	$n1,$n0
+	lwz	$a1,4($ap)
+	li	$c1,0
+	lwz	$t1,0($bp)		; bp[0,1]
+	lwz	$t3,4($bp)
+	lwz	$n0,0($n1)		; pull n0[0,1] value
+	lwz	$n1,4($n1)
+
+	mullw	$t4,$a0,$t1		; mulld ap[0]*bp[0]
+	mulhwu	$t5,$a0,$t1
+	mullw	$t6,$a1,$t1
+	mullw	$t7,$a0,$t3
+	add	$t5,$t5,$t6
+	add	$t5,$t5,$t7
+	; transfer bp[0] to FPU as 4x16-bit values
+	extrwi	$t0,$t1,16,16
+	extrwi	$t1,$t1,16,0
+	extrwi	$t2,$t3,16,16
+	extrwi	$t3,$t3,16,0
+	std	$t0,`$FRAME+0`($sp)	; yes, std in 32-bit build
+	std	$t1,`$FRAME+8`($sp)
+	std	$t2,`$FRAME+16`($sp)
+	std	$t3,`$FRAME+24`($sp)
+
+	mullw	$t0,$t4,$n0		; mulld tp[0]*n0
+	mulhwu	$t1,$t4,$n0
+	mullw	$t2,$t5,$n0
+	mullw	$t3,$t4,$n1
+	add	$t1,$t1,$t2
+	add	$t1,$t1,$t3
+	; transfer (ap[0]*bp[0])*n0 to FPU as 4x16-bit values
+	extrwi	$t4,$t0,16,16
+	extrwi	$t5,$t0,16,0
+	extrwi	$t6,$t1,16,16
+	extrwi	$t7,$t1,16,0
+	std	$t4,`$FRAME+32`($sp)	; yes, std in 32-bit build
+	std	$t5,`$FRAME+40`($sp)
+	std	$t6,`$FRAME+48`($sp)
+	std	$t7,`$FRAME+56`($sp)
+
+	mr	$t0,$a0			; lwz	$t0,0($ap)
+	mr	$t1,$a1			; lwz	$t1,4($ap)
+	lwz	$t2,8($ap)		; load a[j..j+3] as 32-bit word pairs
+	lwz	$t3,12($ap)
+	lwz	$t4,0($np)		; load n[j..j+3] as 32-bit word pairs
+	lwz	$t5,4($np)
+	lwz	$t6,8($np)
+	lwz	$t7,12($np)
+___
+$code.=<<___;
+	lfd	$ba,`$FRAME+0`($sp)
+	lfd	$bb,`$FRAME+8`($sp)
+	lfd	$bc,`$FRAME+16`($sp)
+	lfd	$bd,`$FRAME+24`($sp)
+	lfd	$na,`$FRAME+32`($sp)
+	lfd	$nb,`$FRAME+40`($sp)
+	lfd	$nc,`$FRAME+48`($sp)
+	lfd	$nd,`$FRAME+56`($sp)
+	std	$t0,`$FRAME+64`($sp)	; yes, std even in 32-bit build
+	std	$t1,`$FRAME+72`($sp)
+	std	$t2,`$FRAME+80`($sp)
+	std	$t3,`$FRAME+88`($sp)
+	std	$t4,`$FRAME+96`($sp)
+	std	$t5,`$FRAME+104`($sp)
+	std	$t6,`$FRAME+112`($sp)
+	std	$t7,`$FRAME+120`($sp)
+	fcfid	$ba,$ba
+	fcfid	$bb,$bb
+	fcfid	$bc,$bc
+	fcfid	$bd,$bd
+	fcfid	$na,$na
+	fcfid	$nb,$nb
+	fcfid	$nc,$nc
+	fcfid	$nd,$nd
+
+	lfd	$A0,`$FRAME+64`($sp)
+	lfd	$A1,`$FRAME+72`($sp)
+	lfd	$A2,`$FRAME+80`($sp)
+	lfd	$A3,`$FRAME+88`($sp)
+	lfd	$N0,`$FRAME+96`($sp)
+	lfd	$N1,`$FRAME+104`($sp)
+	lfd	$N2,`$FRAME+112`($sp)
+	lfd	$N3,`$FRAME+120`($sp)
+	fcfid	$A0,$A0
+	fcfid	$A1,$A1
+	fcfid	$A2,$A2
+	fcfid	$A3,$A3
+	fcfid	$N0,$N0
+	fcfid	$N1,$N1
+	fcfid	$N2,$N2
+	fcfid	$N3,$N3
+	addi	$ap,$ap,16
+	addi	$np,$np,16
+
+	fmul	$T1a,$A1,$ba
+	fmul	$T1b,$A1,$bb
+	stfd	$A0,8($nap_d)		; save a[j] in double format
+	stfd	$A1,16($nap_d)
+	fmul	$T2a,$A2,$ba
+	fmul	$T2b,$A2,$bb
+	stfd	$A2,24($nap_d)		; save a[j+1] in double format
+	stfd	$A3,32($nap_d)
+	fmul	$T3a,$A3,$ba
+	fmul	$T3b,$A3,$bb
+	stfd	$N0,40($nap_d)		; save n[j] in double format
+	stfd	$N1,48($nap_d)
+	fmul	$T0a,$A0,$ba
+	fmul	$T0b,$A0,$bb
+	stfd	$N2,56($nap_d)		; save n[j+1] in double format
+	stfdu	$N3,64($nap_d)
+
+	fmadd	$T1a,$A0,$bc,$T1a
+	fmadd	$T1b,$A0,$bd,$T1b
+	fmadd	$T2a,$A1,$bc,$T2a
+	fmadd	$T2b,$A1,$bd,$T2b
+	fmadd	$T3a,$A2,$bc,$T3a
+	fmadd	$T3b,$A2,$bd,$T3b
+	fmul	$dota,$A3,$bc
+	fmul	$dotb,$A3,$bd
+
+	fmadd	$T1a,$N1,$na,$T1a
+	fmadd	$T1b,$N1,$nb,$T1b
+	fmadd	$T2a,$N2,$na,$T2a
+	fmadd	$T2b,$N2,$nb,$T2b
+	fmadd	$T3a,$N3,$na,$T3a
+	fmadd	$T3b,$N3,$nb,$T3b
+	fmadd	$T0a,$N0,$na,$T0a
+	fmadd	$T0b,$N0,$nb,$T0b
+
+	fmadd	$T1a,$N0,$nc,$T1a
+	fmadd	$T1b,$N0,$nd,$T1b
+	fmadd	$T2a,$N1,$nc,$T2a
+	fmadd	$T2b,$N1,$nd,$T2b
+	fmadd	$T3a,$N2,$nc,$T3a
+	fmadd	$T3b,$N2,$nd,$T3b
+	fmadd	$dota,$N3,$nc,$dota
+	fmadd	$dotb,$N3,$nd,$dotb
+
+	fctid	$T0a,$T0a
+	fctid	$T0b,$T0b
+	fctid	$T1a,$T1a
+	fctid	$T1b,$T1b
+	fctid	$T2a,$T2a
+	fctid	$T2b,$T2b
+	fctid	$T3a,$T3a
+	fctid	$T3b,$T3b
+
+	stfd	$T0a,`$FRAME+0`($sp)
+	stfd	$T0b,`$FRAME+8`($sp)
+	stfd	$T1a,`$FRAME+16`($sp)
+	stfd	$T1b,`$FRAME+24`($sp)
+	stfd	$T2a,`$FRAME+32`($sp)
+	stfd	$T2b,`$FRAME+40`($sp)
+	stfd	$T3a,`$FRAME+48`($sp)
+	stfd	$T3b,`$FRAME+56`($sp)
+
+.align	5
+L1st:
+___
+$code.=<<___ if ($SIZE_T==8);
+	lwz	$t0,`4^$LITTLE_ENDIAN`($ap)	; load a[j] as 32-bit word pair
+	lwz	$t1,`0^$LITTLE_ENDIAN`($ap)
+	lwz	$t2,`12^$LITTLE_ENDIAN`($ap)	; load a[j+1] as 32-bit word pair
+	lwz	$t3,`8^$LITTLE_ENDIAN`($ap)
+	lwz	$t4,`4^$LITTLE_ENDIAN`($np)	; load n[j] as 32-bit word pair
+	lwz	$t5,`0^$LITTLE_ENDIAN`($np)
+	lwz	$t6,`12^$LITTLE_ENDIAN`($np)	; load n[j+1] as 32-bit word pair
+	lwz	$t7,`8^$LITTLE_ENDIAN`($np)
+___
+$code.=<<___ if ($SIZE_T==4);
+	lwz	$t0,0($ap)		; load a[j..j+3] as 32-bit word pairs
+	lwz	$t1,4($ap)
+	lwz	$t2,8($ap)
+	lwz	$t3,12($ap)
+	lwz	$t4,0($np)		; load n[j..j+3] as 32-bit word pairs
+	lwz	$t5,4($np)
+	lwz	$t6,8($np)
+	lwz	$t7,12($np)
+___
+$code.=<<___;
+	std	$t0,`$FRAME+64`($sp)	; yes, std even in 32-bit build
+	std	$t1,`$FRAME+72`($sp)
+	std	$t2,`$FRAME+80`($sp)
+	std	$t3,`$FRAME+88`($sp)
+	std	$t4,`$FRAME+96`($sp)
+	std	$t5,`$FRAME+104`($sp)
+	std	$t6,`$FRAME+112`($sp)
+	std	$t7,`$FRAME+120`($sp)
+___
+if ($SIZE_T==8 or $flavour =~ /osx/) {
+$code.=<<___;
+	ld	$t0,`$FRAME+0`($sp)
+	ld	$t1,`$FRAME+8`($sp)
+	ld	$t2,`$FRAME+16`($sp)
+	ld	$t3,`$FRAME+24`($sp)
+	ld	$t4,`$FRAME+32`($sp)
+	ld	$t5,`$FRAME+40`($sp)
+	ld	$t6,`$FRAME+48`($sp)
+	ld	$t7,`$FRAME+56`($sp)
+___
+} else {
+$code.=<<___;
+	lwz	$t1,`$FRAME+0^$LITTLE_ENDIAN`($sp)
+	lwz	$t0,`$FRAME+4^$LITTLE_ENDIAN`($sp)
+	lwz	$t3,`$FRAME+8^$LITTLE_ENDIAN`($sp)
+	lwz	$t2,`$FRAME+12^$LITTLE_ENDIAN`($sp)
+	lwz	$t5,`$FRAME+16^$LITTLE_ENDIAN`($sp)
+	lwz	$t4,`$FRAME+20^$LITTLE_ENDIAN`($sp)
+	lwz	$t7,`$FRAME+24^$LITTLE_ENDIAN`($sp)
+	lwz	$t6,`$FRAME+28^$LITTLE_ENDIAN`($sp)
+___
+}
+$code.=<<___;
+	lfd	$A0,`$FRAME+64`($sp)
+	lfd	$A1,`$FRAME+72`($sp)
+	lfd	$A2,`$FRAME+80`($sp)
+	lfd	$A3,`$FRAME+88`($sp)
+	lfd	$N0,`$FRAME+96`($sp)
+	lfd	$N1,`$FRAME+104`($sp)
+	lfd	$N2,`$FRAME+112`($sp)
+	lfd	$N3,`$FRAME+120`($sp)
+	fcfid	$A0,$A0
+	fcfid	$A1,$A1
+	fcfid	$A2,$A2
+	fcfid	$A3,$A3
+	fcfid	$N0,$N0
+	fcfid	$N1,$N1
+	fcfid	$N2,$N2
+	fcfid	$N3,$N3
+	addi	$ap,$ap,16
+	addi	$np,$np,16
+
+	fmul	$T1a,$A1,$ba
+	fmul	$T1b,$A1,$bb
+	fmul	$T2a,$A2,$ba
+	fmul	$T2b,$A2,$bb
+	stfd	$A0,8($nap_d)		; save a[j] in double format
+	stfd	$A1,16($nap_d)
+	fmul	$T3a,$A3,$ba
+	fmul	$T3b,$A3,$bb
+	fmadd	$T0a,$A0,$ba,$dota
+	fmadd	$T0b,$A0,$bb,$dotb
+	stfd	$A2,24($nap_d)		; save a[j+1] in double format
+	stfd	$A3,32($nap_d)
+___
+if ($SIZE_T==8 or $flavour =~ /osx/) {
+$code.=<<___;
+	fmadd	$T1a,$A0,$bc,$T1a
+	fmadd	$T1b,$A0,$bd,$T1b
+	fmadd	$T2a,$A1,$bc,$T2a
+	fmadd	$T2b,$A1,$bd,$T2b
+	stfd	$N0,40($nap_d)		; save n[j] in double format
+	stfd	$N1,48($nap_d)
+	fmadd	$T3a,$A2,$bc,$T3a
+	fmadd	$T3b,$A2,$bd,$T3b
+	 add	$t0,$t0,$carry		; can not overflow
+	fmul	$dota,$A3,$bc
+	fmul	$dotb,$A3,$bd
+	stfd	$N2,56($nap_d)		; save n[j+1] in double format
+	stfdu	$N3,64($nap_d)
+	 srdi	$carry,$t0,16
+	 add	$t1,$t1,$carry
+	 srdi	$carry,$t1,16
+
+	fmadd	$T1a,$N1,$na,$T1a
+	fmadd	$T1b,$N1,$nb,$T1b
+	 insrdi	$t0,$t1,16,32
+	fmadd	$T2a,$N2,$na,$T2a
+	fmadd	$T2b,$N2,$nb,$T2b
+	 add	$t2,$t2,$carry
+	fmadd	$T3a,$N3,$na,$T3a
+	fmadd	$T3b,$N3,$nb,$T3b
+	 srdi	$carry,$t2,16
+	fmadd	$T0a,$N0,$na,$T0a
+	fmadd	$T0b,$N0,$nb,$T0b
+	 insrdi	$t0,$t2,16,16
+	 add	$t3,$t3,$carry
+	 srdi	$carry,$t3,16
+
+	fmadd	$T1a,$N0,$nc,$T1a
+	fmadd	$T1b,$N0,$nd,$T1b
+	 insrdi	$t0,$t3,16,0		; 0..63 bits
+	fmadd	$T2a,$N1,$nc,$T2a
+	fmadd	$T2b,$N1,$nd,$T2b
+	 add	$t4,$t4,$carry
+	fmadd	$T3a,$N2,$nc,$T3a
+	fmadd	$T3b,$N2,$nd,$T3b
+	 srdi	$carry,$t4,16
+	fmadd	$dota,$N3,$nc,$dota
+	fmadd	$dotb,$N3,$nd,$dotb
+	 add	$t5,$t5,$carry
+	 srdi	$carry,$t5,16
+	 insrdi	$t4,$t5,16,32
+
+	fctid	$T0a,$T0a
+	fctid	$T0b,$T0b
+	 add	$t6,$t6,$carry
+	fctid	$T1a,$T1a
+	fctid	$T1b,$T1b
+	 srdi	$carry,$t6,16
+	fctid	$T2a,$T2a
+	fctid	$T2b,$T2b
+	 insrdi	$t4,$t6,16,16
+	fctid	$T3a,$T3a
+	fctid	$T3b,$T3b
+	 add	$t7,$t7,$carry
+	 insrdi	$t4,$t7,16,0		; 64..127 bits
+	 srdi	$carry,$t7,16		; upper 33 bits
+
+	stfd	$T0a,`$FRAME+0`($sp)
+	stfd	$T0b,`$FRAME+8`($sp)
+	stfd	$T1a,`$FRAME+16`($sp)
+	stfd	$T1b,`$FRAME+24`($sp)
+	stfd	$T2a,`$FRAME+32`($sp)
+	stfd	$T2b,`$FRAME+40`($sp)
+	stfd	$T3a,`$FRAME+48`($sp)
+	stfd	$T3b,`$FRAME+56`($sp)
+	 std	$t0,8($tp)		; tp[j-1]
+	 stdu	$t4,16($tp)		; tp[j]
+___
+} else {
+$code.=<<___;
+	fmadd	$T1a,$A0,$bc,$T1a
+	fmadd	$T1b,$A0,$bd,$T1b
+	 addc	$t0,$t0,$carry
+	 adde	$t1,$t1,$c1
+	 srwi	$carry,$t0,16
+	fmadd	$T2a,$A1,$bc,$T2a
+	fmadd	$T2b,$A1,$bd,$T2b
+	stfd	$N0,40($nap_d)		; save n[j] in double format
+	stfd	$N1,48($nap_d)
+	 srwi	$c1,$t1,16
+	 insrwi	$carry,$t1,16,0
+	fmadd	$T3a,$A2,$bc,$T3a
+	fmadd	$T3b,$A2,$bd,$T3b
+	 addc	$t2,$t2,$carry
+	 adde	$t3,$t3,$c1
+	 srwi	$carry,$t2,16
+	fmul	$dota,$A3,$bc
+	fmul	$dotb,$A3,$bd
+	stfd	$N2,56($nap_d)		; save n[j+1] in double format
+	stfdu	$N3,64($nap_d)
+	 insrwi	$t0,$t2,16,0		; 0..31 bits
+	 srwi	$c1,$t3,16
+	 insrwi	$carry,$t3,16,0
+
+	fmadd	$T1a,$N1,$na,$T1a
+	fmadd	$T1b,$N1,$nb,$T1b
+	 lwz	$t3,`$FRAME+32^$LITTLE_ENDIAN`($sp)	; permuted $t1
+	 lwz	$t2,`$FRAME+36^$LITTLE_ENDIAN`($sp)	; permuted $t0
+	 addc	$t4,$t4,$carry
+	 adde	$t5,$t5,$c1
+	 srwi	$carry,$t4,16
+	fmadd	$T2a,$N2,$na,$T2a
+	fmadd	$T2b,$N2,$nb,$T2b
+	 srwi	$c1,$t5,16
+	 insrwi	$carry,$t5,16,0
+	fmadd	$T3a,$N3,$na,$T3a
+	fmadd	$T3b,$N3,$nb,$T3b
+	 addc	$t6,$t6,$carry
+	 adde	$t7,$t7,$c1
+	 srwi	$carry,$t6,16
+	fmadd	$T0a,$N0,$na,$T0a
+	fmadd	$T0b,$N0,$nb,$T0b
+	 insrwi	$t4,$t6,16,0		; 32..63 bits
+	 srwi	$c1,$t7,16
+	 insrwi	$carry,$t7,16,0
+
+	fmadd	$T1a,$N0,$nc,$T1a
+	fmadd	$T1b,$N0,$nd,$T1b
+	 lwz	$t7,`$FRAME+40^$LITTLE_ENDIAN`($sp)	; permuted $t3
+	 lwz	$t6,`$FRAME+44^$LITTLE_ENDIAN`($sp)	; permuted $t2
+	 addc	$t2,$t2,$carry
+	 adde	$t3,$t3,$c1
+	 srwi	$carry,$t2,16
+	fmadd	$T2a,$N1,$nc,$T2a
+	fmadd	$T2b,$N1,$nd,$T2b
+	 stw	$t0,12($tp)		; tp[j-1]
+	 stw	$t4,8($tp)
+	 srwi	$c1,$t3,16
+	 insrwi	$carry,$t3,16,0
+	fmadd	$T3a,$N2,$nc,$T3a
+	fmadd	$T3b,$N2,$nd,$T3b
+	 lwz	$t1,`$FRAME+48^$LITTLE_ENDIAN`($sp)	; permuted $t5
+	 lwz	$t0,`$FRAME+52^$LITTLE_ENDIAN`($sp)	; permuted $t4
+	 addc	$t6,$t6,$carry
+	 adde	$t7,$t7,$c1
+	 srwi	$carry,$t6,16
+	fmadd	$dota,$N3,$nc,$dota
+	fmadd	$dotb,$N3,$nd,$dotb
+	 insrwi	$t2,$t6,16,0		; 64..95 bits
+	 srwi	$c1,$t7,16
+	 insrwi	$carry,$t7,16,0
+
+	fctid	$T0a,$T0a
+	fctid	$T0b,$T0b
+	 lwz	$t5,`$FRAME+56^$LITTLE_ENDIAN`($sp)	; permuted $t7
+	 lwz	$t4,`$FRAME+60^$LITTLE_ENDIAN`($sp)	; permuted $t6
+	 addc	$t0,$t0,$carry
+	 adde	$t1,$t1,$c1
+	 srwi	$carry,$t0,16
+	fctid	$T1a,$T1a
+	fctid	$T1b,$T1b
+	 srwi	$c1,$t1,16
+	 insrwi	$carry,$t1,16,0
+	fctid	$T2a,$T2a
+	fctid	$T2b,$T2b
+	 addc	$t4,$t4,$carry
+	 adde	$t5,$t5,$c1
+	 srwi	$carry,$t4,16
+	fctid	$T3a,$T3a
+	fctid	$T3b,$T3b
+	 insrwi	$t0,$t4,16,0		; 96..127 bits
+	 srwi	$c1,$t5,16
+	 insrwi	$carry,$t5,16,0
+
+	stfd	$T0a,`$FRAME+0`($sp)
+	stfd	$T0b,`$FRAME+8`($sp)
+	stfd	$T1a,`$FRAME+16`($sp)
+	stfd	$T1b,`$FRAME+24`($sp)
+	stfd	$T2a,`$FRAME+32`($sp)
+	stfd	$T2b,`$FRAME+40`($sp)
+	stfd	$T3a,`$FRAME+48`($sp)
+	stfd	$T3b,`$FRAME+56`($sp)
+	 stw	$t2,20($tp)		; tp[j]
+	 stwu	$t0,16($tp)
+___
+}
+$code.=<<___;
+	bdnz	L1st
+
+	fctid	$dota,$dota
+	fctid	$dotb,$dotb
+___
+if ($SIZE_T==8 or $flavour =~ /osx/) {
+$code.=<<___;
+	ld	$t0,`$FRAME+0`($sp)
+	ld	$t1,`$FRAME+8`($sp)
+	ld	$t2,`$FRAME+16`($sp)
+	ld	$t3,`$FRAME+24`($sp)
+	ld	$t4,`$FRAME+32`($sp)
+	ld	$t5,`$FRAME+40`($sp)
+	ld	$t6,`$FRAME+48`($sp)
+	ld	$t7,`$FRAME+56`($sp)
+	stfd	$dota,`$FRAME+64`($sp)
+	stfd	$dotb,`$FRAME+72`($sp)
+
+	add	$t0,$t0,$carry		; can not overflow
+	srdi	$carry,$t0,16
+	add	$t1,$t1,$carry
+	srdi	$carry,$t1,16
+	insrdi	$t0,$t1,16,32
+	add	$t2,$t2,$carry
+	srdi	$carry,$t2,16
+	insrdi	$t0,$t2,16,16
+	add	$t3,$t3,$carry
+	srdi	$carry,$t3,16
+	insrdi	$t0,$t3,16,0		; 0..63 bits
+	add	$t4,$t4,$carry
+	srdi	$carry,$t4,16
+	add	$t5,$t5,$carry
+	srdi	$carry,$t5,16
+	insrdi	$t4,$t5,16,32
+	add	$t6,$t6,$carry
+	srdi	$carry,$t6,16
+	insrdi	$t4,$t6,16,16
+	add	$t7,$t7,$carry
+	insrdi	$t4,$t7,16,0		; 64..127 bits
+	srdi	$carry,$t7,16		; upper 33 bits
+	ld	$t6,`$FRAME+64`($sp)
+	ld	$t7,`$FRAME+72`($sp)
+
+	std	$t0,8($tp)		; tp[j-1]
+	stdu	$t4,16($tp)		; tp[j]
+
+	add	$t6,$t6,$carry		; can not overflow
+	srdi	$carry,$t6,16
+	add	$t7,$t7,$carry
+	insrdi	$t6,$t7,48,0
+	srdi	$ovf,$t7,48
+	std	$t6,8($tp)		; tp[num-1]
+___
+} else {
+$code.=<<___;
+	lwz	$t1,`$FRAME+0^$LITTLE_ENDIAN`($sp)
+	lwz	$t0,`$FRAME+4^$LITTLE_ENDIAN`($sp)
+	lwz	$t3,`$FRAME+8^$LITTLE_ENDIAN`($sp)
+	lwz	$t2,`$FRAME+12^$LITTLE_ENDIAN`($sp)
+	lwz	$t5,`$FRAME+16^$LITTLE_ENDIAN`($sp)
+	lwz	$t4,`$FRAME+20^$LITTLE_ENDIAN`($sp)
+	lwz	$t7,`$FRAME+24^$LITTLE_ENDIAN`($sp)
+	lwz	$t6,`$FRAME+28^$LITTLE_ENDIAN`($sp)
+	stfd	$dota,`$FRAME+64`($sp)
+	stfd	$dotb,`$FRAME+72`($sp)
+
+	addc	$t0,$t0,$carry
+	adde	$t1,$t1,$c1
+	srwi	$carry,$t0,16
+	insrwi	$carry,$t1,16,0
+	srwi	$c1,$t1,16
+	addc	$t2,$t2,$carry
+	adde	$t3,$t3,$c1
+	srwi	$carry,$t2,16
+	 insrwi	$t0,$t2,16,0		; 0..31 bits
+	insrwi	$carry,$t3,16,0
+	srwi	$c1,$t3,16
+	addc	$t4,$t4,$carry
+	adde	$t5,$t5,$c1
+	srwi	$carry,$t4,16
+	insrwi	$carry,$t5,16,0
+	srwi	$c1,$t5,16
+	addc	$t6,$t6,$carry
+	adde	$t7,$t7,$c1
+	srwi	$carry,$t6,16
+	 insrwi	$t4,$t6,16,0		; 32..63 bits
+	insrwi	$carry,$t7,16,0
+	srwi	$c1,$t7,16
+	 stw	$t0,12($tp)		; tp[j-1]
+	 stw	$t4,8($tp)
+
+	lwz	$t3,`$FRAME+32^$LITTLE_ENDIAN`($sp)	; permuted $t1
+	lwz	$t2,`$FRAME+36^$LITTLE_ENDIAN`($sp)	; permuted $t0
+	lwz	$t7,`$FRAME+40^$LITTLE_ENDIAN`($sp)	; permuted $t3
+	lwz	$t6,`$FRAME+44^$LITTLE_ENDIAN`($sp)	; permuted $t2
+	lwz	$t1,`$FRAME+48^$LITTLE_ENDIAN`($sp)	; permuted $t5
+	lwz	$t0,`$FRAME+52^$LITTLE_ENDIAN`($sp)	; permuted $t4
+	lwz	$t5,`$FRAME+56^$LITTLE_ENDIAN`($sp)	; permuted $t7
+	lwz	$t4,`$FRAME+60^$LITTLE_ENDIAN`($sp)	; permuted $t6
+
+	addc	$t2,$t2,$carry
+	adde	$t3,$t3,$c1
+	srwi	$carry,$t2,16
+	insrwi	$carry,$t3,16,0
+	srwi	$c1,$t3,16
+	addc	$t6,$t6,$carry
+	adde	$t7,$t7,$c1
+	srwi	$carry,$t6,16
+	 insrwi	$t2,$t6,16,0		; 64..95 bits
+	insrwi	$carry,$t7,16,0
+	srwi	$c1,$t7,16
+	addc	$t0,$t0,$carry
+	adde	$t1,$t1,$c1
+	srwi	$carry,$t0,16
+	insrwi	$carry,$t1,16,0
+	srwi	$c1,$t1,16
+	addc	$t4,$t4,$carry
+	adde	$t5,$t5,$c1
+	srwi	$carry,$t4,16
+	 insrwi	$t0,$t4,16,0		; 96..127 bits
+	insrwi	$carry,$t5,16,0
+	srwi	$c1,$t5,16
+	 stw	$t2,20($tp)		; tp[j]
+	 stwu	$t0,16($tp)
+
+	lwz	$t7,`$FRAME+64^$LITTLE_ENDIAN`($sp)
+	lwz	$t6,`$FRAME+68^$LITTLE_ENDIAN`($sp)
+	lwz	$t5,`$FRAME+72^$LITTLE_ENDIAN`($sp)
+	lwz	$t4,`$FRAME+76^$LITTLE_ENDIAN`($sp)
+
+	addc	$t6,$t6,$carry
+	adde	$t7,$t7,$c1
+	srwi	$carry,$t6,16
+	insrwi	$carry,$t7,16,0
+	srwi	$c1,$t7,16
+	addc	$t4,$t4,$carry
+	adde	$t5,$t5,$c1
+
+	insrwi	$t6,$t4,16,0
+	srwi	$t4,$t4,16
+	insrwi	$t4,$t5,16,0
+	srwi	$ovf,$t5,16
+	stw	$t6,12($tp)		; tp[num-1]
+	stw	$t4,8($tp)
+___
+}
+$code.=<<___;
+	slwi	$t7,$num,2
+	subf	$nap_d,$t7,$nap_d	; rewind pointer
+
+	li	$i,8			; i=1
+.align	5
+Louter:
+	addi	$tp,$sp,`$FRAME+$TRANSFER`
+	li	$carry,0
+	mtctr	$j
+___
+$code.=<<___ if ($SIZE_T==8);
+	ldx	$t3,$bp,$i		; bp[i]
+
+	ld	$t6,`$FRAME+$TRANSFER+8`($sp)	; tp[0]
+	mulld	$t7,$a0,$t3		; ap[0]*bp[i]
+	add	$t7,$t7,$t6		; ap[0]*bp[i]+tp[0]
+	; transfer bp[i] to FPU as 4x16-bit values
+	extrdi	$t0,$t3,16,48
+	extrdi	$t1,$t3,16,32
+	extrdi	$t2,$t3,16,16
+	extrdi	$t3,$t3,16,0
+	std	$t0,`$FRAME+0`($sp)
+	std	$t1,`$FRAME+8`($sp)
+	std	$t2,`$FRAME+16`($sp)
+	std	$t3,`$FRAME+24`($sp)
+
+	mulld	$t7,$t7,$n0		; tp[0]*n0
+	; transfer (ap[0]*bp[i]+tp[0])*n0 to FPU as 4x16-bit values
+	extrdi	$t4,$t7,16,48
+	extrdi	$t5,$t7,16,32
+	extrdi	$t6,$t7,16,16
+	extrdi	$t7,$t7,16,0
+	std	$t4,`$FRAME+32`($sp)
+	std	$t5,`$FRAME+40`($sp)
+	std	$t6,`$FRAME+48`($sp)
+	std	$t7,`$FRAME+56`($sp)
+___
+$code.=<<___ if ($SIZE_T==4);
+	add	$t0,$bp,$i
+	li	$c1,0
+	lwz	$t1,0($t0)		; bp[i,i+1]
+	lwz	$t3,4($t0)
+
+	mullw	$t4,$a0,$t1		; ap[0]*bp[i]
+	lwz	$t0,`$FRAME+$TRANSFER+8+4`($sp)	; tp[0]
+	mulhwu	$t5,$a0,$t1
+	lwz	$t2,`$FRAME+$TRANSFER+8`($sp)	; tp[0]
+	mullw	$t6,$a1,$t1
+	mullw	$t7,$a0,$t3
+	add	$t5,$t5,$t6
+	add	$t5,$t5,$t7
+	addc	$t4,$t4,$t0		; ap[0]*bp[i]+tp[0]
+	adde	$t5,$t5,$t2
+	; transfer bp[i] to FPU as 4x16-bit values
+	extrwi	$t0,$t1,16,16
+	extrwi	$t1,$t1,16,0
+	extrwi	$t2,$t3,16,16
+	extrwi	$t3,$t3,16,0
+	std	$t0,`$FRAME+0`($sp)	; yes, std in 32-bit build
+	std	$t1,`$FRAME+8`($sp)
+	std	$t2,`$FRAME+16`($sp)
+	std	$t3,`$FRAME+24`($sp)
+
+	mullw	$t0,$t4,$n0		; mulld tp[0]*n0
+	mulhwu	$t1,$t4,$n0
+	mullw	$t2,$t5,$n0
+	mullw	$t3,$t4,$n1
+	add	$t1,$t1,$t2
+	add	$t1,$t1,$t3
+	; transfer (ap[0]*bp[i]+tp[0])*n0 to FPU as 4x16-bit values
+	extrwi	$t4,$t0,16,16
+	extrwi	$t5,$t0,16,0
+	extrwi	$t6,$t1,16,16
+	extrwi	$t7,$t1,16,0
+	std	$t4,`$FRAME+32`($sp)	; yes, std in 32-bit build
+	std	$t5,`$FRAME+40`($sp)
+	std	$t6,`$FRAME+48`($sp)
+	std	$t7,`$FRAME+56`($sp)
+___
+$code.=<<___;
+	lfd	$A0,8($nap_d)		; load a[j] in double format
+	lfd	$A1,16($nap_d)
+	lfd	$A2,24($nap_d)		; load a[j+1] in double format
+	lfd	$A3,32($nap_d)
+	lfd	$N0,40($nap_d)		; load n[j] in double format
+	lfd	$N1,48($nap_d)
+	lfd	$N2,56($nap_d)		; load n[j+1] in double format
+	lfdu	$N3,64($nap_d)
+
+	lfd	$ba,`$FRAME+0`($sp)
+	lfd	$bb,`$FRAME+8`($sp)
+	lfd	$bc,`$FRAME+16`($sp)
+	lfd	$bd,`$FRAME+24`($sp)
+	lfd	$na,`$FRAME+32`($sp)
+	lfd	$nb,`$FRAME+40`($sp)
+	lfd	$nc,`$FRAME+48`($sp)
+	lfd	$nd,`$FRAME+56`($sp)
+
+	fcfid	$ba,$ba
+	fcfid	$bb,$bb
+	fcfid	$bc,$bc
+	fcfid	$bd,$bd
+	fcfid	$na,$na
+	fcfid	$nb,$nb
+	fcfid	$nc,$nc
+	fcfid	$nd,$nd
+
+	fmul	$T1a,$A1,$ba
+	fmul	$T1b,$A1,$bb
+	fmul	$T2a,$A2,$ba
+	fmul	$T2b,$A2,$bb
+	fmul	$T3a,$A3,$ba
+	fmul	$T3b,$A3,$bb
+	fmul	$T0a,$A0,$ba
+	fmul	$T0b,$A0,$bb
+
+	fmadd	$T1a,$A0,$bc,$T1a
+	fmadd	$T1b,$A0,$bd,$T1b
+	fmadd	$T2a,$A1,$bc,$T2a
+	fmadd	$T2b,$A1,$bd,$T2b
+	fmadd	$T3a,$A2,$bc,$T3a
+	fmadd	$T3b,$A2,$bd,$T3b
+	fmul	$dota,$A3,$bc
+	fmul	$dotb,$A3,$bd
+
+	fmadd	$T1a,$N1,$na,$T1a
+	fmadd	$T1b,$N1,$nb,$T1b
+	 lfd	$A0,8($nap_d)		; load a[j] in double format
+	 lfd	$A1,16($nap_d)
+	fmadd	$T2a,$N2,$na,$T2a
+	fmadd	$T2b,$N2,$nb,$T2b
+	 lfd	$A2,24($nap_d)		; load a[j+1] in double format
+	 lfd	$A3,32($nap_d)
+	fmadd	$T3a,$N3,$na,$T3a
+	fmadd	$T3b,$N3,$nb,$T3b
+	fmadd	$T0a,$N0,$na,$T0a
+	fmadd	$T0b,$N0,$nb,$T0b
+
+	fmadd	$T1a,$N0,$nc,$T1a
+	fmadd	$T1b,$N0,$nd,$T1b
+	fmadd	$T2a,$N1,$nc,$T2a
+	fmadd	$T2b,$N1,$nd,$T2b
+	fmadd	$T3a,$N2,$nc,$T3a
+	fmadd	$T3b,$N2,$nd,$T3b
+	fmadd	$dota,$N3,$nc,$dota
+	fmadd	$dotb,$N3,$nd,$dotb
+
+	fctid	$T0a,$T0a
+	fctid	$T0b,$T0b
+	fctid	$T1a,$T1a
+	fctid	$T1b,$T1b
+	fctid	$T2a,$T2a
+	fctid	$T2b,$T2b
+	fctid	$T3a,$T3a
+	fctid	$T3b,$T3b
+
+	stfd	$T0a,`$FRAME+0`($sp)
+	stfd	$T0b,`$FRAME+8`($sp)
+	stfd	$T1a,`$FRAME+16`($sp)
+	stfd	$T1b,`$FRAME+24`($sp)
+	stfd	$T2a,`$FRAME+32`($sp)
+	stfd	$T2b,`$FRAME+40`($sp)
+	stfd	$T3a,`$FRAME+48`($sp)
+	stfd	$T3b,`$FRAME+56`($sp)
+
+.align	5
+Linner:
+	fmul	$T1a,$A1,$ba
+	fmul	$T1b,$A1,$bb
+	fmul	$T2a,$A2,$ba
+	fmul	$T2b,$A2,$bb
+	lfd	$N0,40($nap_d)		; load n[j] in double format
+	lfd	$N1,48($nap_d)
+	fmul	$T3a,$A3,$ba
+	fmul	$T3b,$A3,$bb
+	fmadd	$T0a,$A0,$ba,$dota
+	fmadd	$T0b,$A0,$bb,$dotb
+	lfd	$N2,56($nap_d)		; load n[j+1] in double format
+	lfdu	$N3,64($nap_d)
+
+	fmadd	$T1a,$A0,$bc,$T1a
+	fmadd	$T1b,$A0,$bd,$T1b
+	fmadd	$T2a,$A1,$bc,$T2a
+	fmadd	$T2b,$A1,$bd,$T2b
+	 lfd	$A0,8($nap_d)		; load a[j] in double format
+	 lfd	$A1,16($nap_d)
+	fmadd	$T3a,$A2,$bc,$T3a
+	fmadd	$T3b,$A2,$bd,$T3b
+	fmul	$dota,$A3,$bc
+	fmul	$dotb,$A3,$bd
+	 lfd	$A2,24($nap_d)		; load a[j+1] in double format
+	 lfd	$A3,32($nap_d)
+___
+if ($SIZE_T==8 or $flavour =~ /osx/) {
+$code.=<<___;
+	fmadd	$T1a,$N1,$na,$T1a
+	fmadd	$T1b,$N1,$nb,$T1b
+	 ld	$t0,`$FRAME+0`($sp)
+	 ld	$t1,`$FRAME+8`($sp)
+	fmadd	$T2a,$N2,$na,$T2a
+	fmadd	$T2b,$N2,$nb,$T2b
+	 ld	$t2,`$FRAME+16`($sp)
+	 ld	$t3,`$FRAME+24`($sp)
+	fmadd	$T3a,$N3,$na,$T3a
+	fmadd	$T3b,$N3,$nb,$T3b
+	 add	$t0,$t0,$carry		; can not overflow
+	 ld	$t4,`$FRAME+32`($sp)
+	 ld	$t5,`$FRAME+40`($sp)
+	fmadd	$T0a,$N0,$na,$T0a
+	fmadd	$T0b,$N0,$nb,$T0b
+	 srdi	$carry,$t0,16
+	 add	$t1,$t1,$carry
+	 srdi	$carry,$t1,16
+	 ld	$t6,`$FRAME+48`($sp)
+	 ld	$t7,`$FRAME+56`($sp)
+
+	fmadd	$T1a,$N0,$nc,$T1a
+	fmadd	$T1b,$N0,$nd,$T1b
+	 insrdi	$t0,$t1,16,32
+	 ld	$t1,8($tp)		; tp[j]
+	fmadd	$T2a,$N1,$nc,$T2a
+	fmadd	$T2b,$N1,$nd,$T2b
+	 add	$t2,$t2,$carry
+	fmadd	$T3a,$N2,$nc,$T3a
+	fmadd	$T3b,$N2,$nd,$T3b
+	 srdi	$carry,$t2,16
+	 insrdi	$t0,$t2,16,16
+	fmadd	$dota,$N3,$nc,$dota
+	fmadd	$dotb,$N3,$nd,$dotb
+	 add	$t3,$t3,$carry
+	 ldu	$t2,16($tp)		; tp[j+1]
+	 srdi	$carry,$t3,16
+	 insrdi	$t0,$t3,16,0		; 0..63 bits
+	 add	$t4,$t4,$carry
+
+	fctid	$T0a,$T0a
+	fctid	$T0b,$T0b
+	 srdi	$carry,$t4,16
+	fctid	$T1a,$T1a
+	fctid	$T1b,$T1b
+	 add	$t5,$t5,$carry
+	fctid	$T2a,$T2a
+	fctid	$T2b,$T2b
+	 srdi	$carry,$t5,16
+	 insrdi	$t4,$t5,16,32
+	fctid	$T3a,$T3a
+	fctid	$T3b,$T3b
+	 add	$t6,$t6,$carry
+	 srdi	$carry,$t6,16
+	 insrdi	$t4,$t6,16,16
+
+	stfd	$T0a,`$FRAME+0`($sp)
+	stfd	$T0b,`$FRAME+8`($sp)
+	 add	$t7,$t7,$carry
+	 addc	$t3,$t0,$t1
+___
+$code.=<<___ if ($SIZE_T==4);		# adjust XER[CA]
+	extrdi	$t0,$t0,32,0
+	extrdi	$t1,$t1,32,0
+	adde	$t0,$t0,$t1
+___
+$code.=<<___;
+	stfd	$T1a,`$FRAME+16`($sp)
+	stfd	$T1b,`$FRAME+24`($sp)
+	 insrdi	$t4,$t7,16,0		; 64..127 bits
+	 srdi	$carry,$t7,16		; upper 33 bits
+	stfd	$T2a,`$FRAME+32`($sp)
+	stfd	$T2b,`$FRAME+40`($sp)
+	 adde	$t5,$t4,$t2
+___
+$code.=<<___ if ($SIZE_T==4);		# adjust XER[CA]
+	extrdi	$t4,$t4,32,0
+	extrdi	$t2,$t2,32,0
+	adde	$t4,$t4,$t2
+___
+$code.=<<___;
+	stfd	$T3a,`$FRAME+48`($sp)
+	stfd	$T3b,`$FRAME+56`($sp)
+	 addze	$carry,$carry
+	 std	$t3,-16($tp)		; tp[j-1]
+	 std	$t5,-8($tp)		; tp[j]
+___
+} else {
+$code.=<<___;
+	fmadd	$T1a,$N1,$na,$T1a
+	fmadd	$T1b,$N1,$nb,$T1b
+	 lwz	$t1,`$FRAME+0^$LITTLE_ENDIAN`($sp)
+	 lwz	$t0,`$FRAME+4^$LITTLE_ENDIAN`($sp)
+	fmadd	$T2a,$N2,$na,$T2a
+	fmadd	$T2b,$N2,$nb,$T2b
+	 lwz	$t3,`$FRAME+8^$LITTLE_ENDIAN`($sp)
+	 lwz	$t2,`$FRAME+12^$LITTLE_ENDIAN`($sp)
+	fmadd	$T3a,$N3,$na,$T3a
+	fmadd	$T3b,$N3,$nb,$T3b
+	 lwz	$t5,`$FRAME+16^$LITTLE_ENDIAN`($sp)
+	 lwz	$t4,`$FRAME+20^$LITTLE_ENDIAN`($sp)
+	 addc	$t0,$t0,$carry
+	 adde	$t1,$t1,$c1
+	 srwi	$carry,$t0,16
+	fmadd	$T0a,$N0,$na,$T0a
+	fmadd	$T0b,$N0,$nb,$T0b
+	 lwz	$t7,`$FRAME+24^$LITTLE_ENDIAN`($sp)
+	 lwz	$t6,`$FRAME+28^$LITTLE_ENDIAN`($sp)
+	 srwi	$c1,$t1,16
+	 insrwi	$carry,$t1,16,0
+
+	fmadd	$T1a,$N0,$nc,$T1a
+	fmadd	$T1b,$N0,$nd,$T1b
+	 addc	$t2,$t2,$carry
+	 adde	$t3,$t3,$c1
+	 srwi	$carry,$t2,16
+	fmadd	$T2a,$N1,$nc,$T2a
+	fmadd	$T2b,$N1,$nd,$T2b
+	 insrwi	$t0,$t2,16,0		; 0..31 bits
+	 srwi	$c1,$t3,16
+	 insrwi	$carry,$t3,16,0
+	fmadd	$T3a,$N2,$nc,$T3a
+	fmadd	$T3b,$N2,$nd,$T3b
+	 lwz	$t2,12($tp)		; tp[j]
+	 lwz	$t3,8($tp)
+	 addc	$t4,$t4,$carry
+	 adde	$t5,$t5,$c1
+	 srwi	$carry,$t4,16
+	fmadd	$dota,$N3,$nc,$dota
+	fmadd	$dotb,$N3,$nd,$dotb
+	 srwi	$c1,$t5,16
+	 insrwi	$carry,$t5,16,0
+
+	fctid	$T0a,$T0a
+	 addc	$t6,$t6,$carry
+	 adde	$t7,$t7,$c1
+	 srwi	$carry,$t6,16
+	fctid	$T0b,$T0b
+	 insrwi	$t4,$t6,16,0		; 32..63 bits
+	 srwi	$c1,$t7,16
+	 insrwi	$carry,$t7,16,0
+	fctid	$T1a,$T1a
+	 addc	$t0,$t0,$t2
+	 adde	$t4,$t4,$t3
+	 lwz	$t3,`$FRAME+32^$LITTLE_ENDIAN`($sp)	; permuted $t1
+	 lwz	$t2,`$FRAME+36^$LITTLE_ENDIAN`($sp)	; permuted $t0
+	fctid	$T1b,$T1b
+	 addze	$carry,$carry
+	 addze	$c1,$c1
+	 stw	$t0,4($tp)		; tp[j-1]
+	 stw	$t4,0($tp)
+	fctid	$T2a,$T2a
+	 addc	$t2,$t2,$carry
+	 adde	$t3,$t3,$c1
+	 srwi	$carry,$t2,16
+	 lwz	$t7,`$FRAME+40^$LITTLE_ENDIAN`($sp)	; permuted $t3
+	 lwz	$t6,`$FRAME+44^$LITTLE_ENDIAN`($sp)	; permuted $t2
+	fctid	$T2b,$T2b
+	 srwi	$c1,$t3,16
+	 insrwi	$carry,$t3,16,0
+	 lwz	$t1,`$FRAME+48^$LITTLE_ENDIAN`($sp)	; permuted $t5
+	 lwz	$t0,`$FRAME+52^$LITTLE_ENDIAN`($sp)	; permuted $t4
+	fctid	$T3a,$T3a
+	 addc	$t6,$t6,$carry
+	 adde	$t7,$t7,$c1
+	 srwi	$carry,$t6,16
+	 lwz	$t5,`$FRAME+56^$LITTLE_ENDIAN`($sp)	; permuted $t7
+	 lwz	$t4,`$FRAME+60^$LITTLE_ENDIAN`($sp)	; permuted $t6
+	fctid	$T3b,$T3b
+
+	 insrwi	$t2,$t6,16,0		; 64..95 bits
+	insrwi	$carry,$t7,16,0
+	srwi	$c1,$t7,16
+	 lwz	$t6,20($tp)
+	 lwzu	$t7,16($tp)
+	addc	$t0,$t0,$carry
+	 stfd	$T0a,`$FRAME+0`($sp)
+	adde	$t1,$t1,$c1
+	srwi	$carry,$t0,16
+	 stfd	$T0b,`$FRAME+8`($sp)
+	insrwi	$carry,$t1,16,0
+	srwi	$c1,$t1,16
+	addc	$t4,$t4,$carry
+	 stfd	$T1a,`$FRAME+16`($sp)
+	adde	$t5,$t5,$c1
+	srwi	$carry,$t4,16
+	 insrwi	$t0,$t4,16,0		; 96..127 bits
+	 stfd	$T1b,`$FRAME+24`($sp)
+	insrwi	$carry,$t5,16,0
+	srwi	$c1,$t5,16
+
+	addc	$t2,$t2,$t6
+	 stfd	$T2a,`$FRAME+32`($sp)
+	adde	$t0,$t0,$t7
+	 stfd	$T2b,`$FRAME+40`($sp)
+	addze	$carry,$carry
+	 stfd	$T3a,`$FRAME+48`($sp)
+	addze	$c1,$c1
+	 stfd	$T3b,`$FRAME+56`($sp)
+	 stw	$t2,-4($tp)		; tp[j]
+	 stw	$t0,-8($tp)
+___
+}
+$code.=<<___;
+	bdnz	Linner
+
+	fctid	$dota,$dota
+	fctid	$dotb,$dotb
+___
+if ($SIZE_T==8 or $flavour =~ /osx/) {
+$code.=<<___;
+	ld	$t0,`$FRAME+0`($sp)
+	ld	$t1,`$FRAME+8`($sp)
+	ld	$t2,`$FRAME+16`($sp)
+	ld	$t3,`$FRAME+24`($sp)
+	ld	$t4,`$FRAME+32`($sp)
+	ld	$t5,`$FRAME+40`($sp)
+	ld	$t6,`$FRAME+48`($sp)
+	ld	$t7,`$FRAME+56`($sp)
+	stfd	$dota,`$FRAME+64`($sp)
+	stfd	$dotb,`$FRAME+72`($sp)
+
+	add	$t0,$t0,$carry		; can not overflow
+	srdi	$carry,$t0,16
+	add	$t1,$t1,$carry
+	srdi	$carry,$t1,16
+	insrdi	$t0,$t1,16,32
+	add	$t2,$t2,$carry
+	ld	$t1,8($tp)		; tp[j]
+	srdi	$carry,$t2,16
+	insrdi	$t0,$t2,16,16
+	add	$t3,$t3,$carry
+	ldu	$t2,16($tp)		; tp[j+1]
+	srdi	$carry,$t3,16
+	insrdi	$t0,$t3,16,0		; 0..63 bits
+	add	$t4,$t4,$carry
+	srdi	$carry,$t4,16
+	add	$t5,$t5,$carry
+	srdi	$carry,$t5,16
+	insrdi	$t4,$t5,16,32
+	add	$t6,$t6,$carry
+	srdi	$carry,$t6,16
+	insrdi	$t4,$t6,16,16
+	add	$t7,$t7,$carry
+	insrdi	$t4,$t7,16,0		; 64..127 bits
+	srdi	$carry,$t7,16		; upper 33 bits
+	ld	$t6,`$FRAME+64`($sp)
+	ld	$t7,`$FRAME+72`($sp)
+
+	addc	$t3,$t0,$t1
+___
+$code.=<<___ if ($SIZE_T==4);		# adjust XER[CA]
+	extrdi	$t0,$t0,32,0
+	extrdi	$t1,$t1,32,0
+	adde	$t0,$t0,$t1
+___
+$code.=<<___;
+	adde	$t5,$t4,$t2
+___
+$code.=<<___ if ($SIZE_T==4);		# adjust XER[CA]
+	extrdi	$t4,$t4,32,0
+	extrdi	$t2,$t2,32,0
+	adde	$t4,$t4,$t2
+___
+$code.=<<___;
+	addze	$carry,$carry
+
+	std	$t3,-16($tp)		; tp[j-1]
+	std	$t5,-8($tp)		; tp[j]
+
+	add	$carry,$carry,$ovf	; consume upmost overflow
+	add	$t6,$t6,$carry		; can not overflow
+	srdi	$carry,$t6,16
+	add	$t7,$t7,$carry
+	insrdi	$t6,$t7,48,0
+	srdi	$ovf,$t7,48
+	std	$t6,0($tp)		; tp[num-1]
+___
+} else {
+$code.=<<___;
+	lwz	$t1,`$FRAME+0^$LITTLE_ENDIAN`($sp)
+	lwz	$t0,`$FRAME+4^$LITTLE_ENDIAN`($sp)
+	lwz	$t3,`$FRAME+8^$LITTLE_ENDIAN`($sp)
+	lwz	$t2,`$FRAME+12^$LITTLE_ENDIAN`($sp)
+	lwz	$t5,`$FRAME+16^$LITTLE_ENDIAN`($sp)
+	lwz	$t4,`$FRAME+20^$LITTLE_ENDIAN`($sp)
+	lwz	$t7,`$FRAME+24^$LITTLE_ENDIAN`($sp)
+	lwz	$t6,`$FRAME+28^$LITTLE_ENDIAN`($sp)
+	stfd	$dota,`$FRAME+64`($sp)
+	stfd	$dotb,`$FRAME+72`($sp)
+
+	addc	$t0,$t0,$carry
+	adde	$t1,$t1,$c1
+	srwi	$carry,$t0,16
+	insrwi	$carry,$t1,16,0
+	srwi	$c1,$t1,16
+	addc	$t2,$t2,$carry
+	adde	$t3,$t3,$c1
+	srwi	$carry,$t2,16
+	 insrwi	$t0,$t2,16,0		; 0..31 bits
+	 lwz	$t2,12($tp)		; tp[j]
+	insrwi	$carry,$t3,16,0
+	srwi	$c1,$t3,16
+	 lwz	$t3,8($tp)
+	addc	$t4,$t4,$carry
+	adde	$t5,$t5,$c1
+	srwi	$carry,$t4,16
+	insrwi	$carry,$t5,16,0
+	srwi	$c1,$t5,16
+	addc	$t6,$t6,$carry
+	adde	$t7,$t7,$c1
+	srwi	$carry,$t6,16
+	 insrwi	$t4,$t6,16,0		; 32..63 bits
+	insrwi	$carry,$t7,16,0
+	srwi	$c1,$t7,16
+
+	addc	$t0,$t0,$t2
+	adde	$t4,$t4,$t3
+	addze	$carry,$carry
+	addze	$c1,$c1
+	 stw	$t0,4($tp)		; tp[j-1]
+	 stw	$t4,0($tp)
+
+	lwz	$t3,`$FRAME+32^$LITTLE_ENDIAN`($sp)	; permuted $t1
+	lwz	$t2,`$FRAME+36^$LITTLE_ENDIAN`($sp)	; permuted $t0
+	lwz	$t7,`$FRAME+40^$LITTLE_ENDIAN`($sp)	; permuted $t3
+	lwz	$t6,`$FRAME+44^$LITTLE_ENDIAN`($sp)	; permuted $t2
+	lwz	$t1,`$FRAME+48^$LITTLE_ENDIAN`($sp)	; permuted $t5
+	lwz	$t0,`$FRAME+52^$LITTLE_ENDIAN`($sp)	; permuted $t4
+	lwz	$t5,`$FRAME+56^$LITTLE_ENDIAN`($sp)	; permuted $t7
+	lwz	$t4,`$FRAME+60^$LITTLE_ENDIAN`($sp)	; permuted $t6
+
+	addc	$t2,$t2,$carry
+	adde	$t3,$t3,$c1
+	srwi	$carry,$t2,16
+	insrwi	$carry,$t3,16,0
+	srwi	$c1,$t3,16
+	addc	$t6,$t6,$carry
+	adde	$t7,$t7,$c1
+	srwi	$carry,$t6,16
+	 insrwi	$t2,$t6,16,0		; 64..95 bits
+	 lwz	$t6,20($tp)
+	insrwi	$carry,$t7,16,0
+	srwi	$c1,$t7,16
+	 lwzu	$t7,16($tp)
+	addc	$t0,$t0,$carry
+	adde	$t1,$t1,$c1
+	srwi	$carry,$t0,16
+	insrwi	$carry,$t1,16,0
+	srwi	$c1,$t1,16
+	addc	$t4,$t4,$carry
+	adde	$t5,$t5,$c1
+	srwi	$carry,$t4,16
+	 insrwi	$t0,$t4,16,0		; 96..127 bits
+	insrwi	$carry,$t5,16,0
+	srwi	$c1,$t5,16
+
+	addc	$t2,$t2,$t6
+	adde	$t0,$t0,$t7
+	 lwz	$t7,`$FRAME+64^$LITTLE_ENDIAN`($sp)
+	 lwz	$t6,`$FRAME+68^$LITTLE_ENDIAN`($sp)
+	addze	$carry,$carry
+	addze	$c1,$c1
+	 lwz	$t5,`$FRAME+72^$LITTLE_ENDIAN`($sp)
+	 lwz	$t4,`$FRAME+76^$LITTLE_ENDIAN`($sp)
+
+	addc	$t6,$t6,$carry
+	adde	$t7,$t7,$c1
+	 stw	$t2,-4($tp)		; tp[j]
+	 stw	$t0,-8($tp)
+	addc	$t6,$t6,$ovf
+	addze	$t7,$t7
+	srwi	$carry,$t6,16
+	insrwi	$carry,$t7,16,0
+	srwi	$c1,$t7,16
+	addc	$t4,$t4,$carry
+	adde	$t5,$t5,$c1
+
+	insrwi	$t6,$t4,16,0
+	srwi	$t4,$t4,16
+	insrwi	$t4,$t5,16,0
+	srwi	$ovf,$t5,16
+	stw	$t6,4($tp)		; tp[num-1]
+	stw	$t4,0($tp)
+___
+}
+$code.=<<___;
+	slwi	$t7,$num,2
+	addi	$i,$i,8
+	subf	$nap_d,$t7,$nap_d	; rewind pointer
+	cmpw	$i,$num
+	blt-	Louter
+___
+
+$code.=<<___ if ($SIZE_T==8);
+	subf	$np,$num,$np	; rewind np
+	addi	$j,$j,1		; restore counter
+	subfc	$i,$i,$i	; j=0 and "clear" XER[CA]
+	addi	$tp,$sp,`$FRAME+$TRANSFER+8`
+	addi	$t4,$sp,`$FRAME+$TRANSFER+16`
+	addi	$t5,$np,8
+	addi	$t6,$rp,8
+	mtctr	$j
+
+.align	4
+Lsub:	ldx	$t0,$tp,$i
+	ldx	$t1,$np,$i
+	ldx	$t2,$t4,$i
+	ldx	$t3,$t5,$i
+	subfe	$t0,$t1,$t0	; tp[j]-np[j]
+	subfe	$t2,$t3,$t2	; tp[j+1]-np[j+1]
+	stdx	$t0,$rp,$i
+	stdx	$t2,$t6,$i
+	addi	$i,$i,16
+	bdnz	Lsub
+
+	li	$i,0
+	subfe	$ovf,$i,$ovf	; handle upmost overflow bit
+	mtctr	$j
+
+.align	4
+Lcopy:				; conditional copy
+	ldx	$t0,$tp,$i
+	ldx	$t1,$t4,$i
+	ldx	$t2,$rp,$i
+	ldx	$t3,$t6,$i
+	std	$i,8($nap_d)	; zap nap_d
+	std	$i,16($nap_d)
+	std	$i,24($nap_d)
+	std	$i,32($nap_d)
+	std	$i,40($nap_d)
+	std	$i,48($nap_d)
+	std	$i,56($nap_d)
+	stdu	$i,64($nap_d)
+	and	$t0,$t0,$ovf
+	and	$t1,$t1,$ovf
+	andc	$t2,$t2,$ovf
+	andc	$t3,$t3,$ovf
+	or	$t0,$t0,$t2
+	or	$t1,$t1,$t3
+	stdx	$t0,$rp,$i
+	stdx	$t1,$t6,$i
+	stdx	$i,$tp,$i	; zap tp at once
+	stdx	$i,$t4,$i
+	addi	$i,$i,16
+	bdnz	Lcopy
+___
+$code.=<<___ if ($SIZE_T==4);
+	subf	$np,$num,$np	; rewind np
+	addi	$j,$j,1		; restore counter
+	subfc	$i,$i,$i	; j=0 and "clear" XER[CA]
+	addi	$tp,$sp,`$FRAME+$TRANSFER`
+	addi	$np,$np,-4
+	addi	$rp,$rp,-4
+	addi	$ap,$sp,`$FRAME+$TRANSFER+4`
+	mtctr	$j
+
+.align	4
+Lsub:	lwz	$t0,12($tp)	; load tp[j..j+3] in 64-bit word order
+	lwz	$t1,8($tp)
+	lwz	$t2,20($tp)
+	lwzu	$t3,16($tp)
+	lwz	$t4,4($np)	; load np[j..j+3] in 32-bit word order
+	lwz	$t5,8($np)
+	lwz	$t6,12($np)
+	lwzu	$t7,16($np)
+	subfe	$t4,$t4,$t0	; tp[j]-np[j]
+	 stw	$t0,4($ap)	; save tp[j..j+3] in 32-bit word order
+	subfe	$t5,$t5,$t1	; tp[j+1]-np[j+1]
+	 stw	$t1,8($ap)
+	subfe	$t6,$t6,$t2	; tp[j+2]-np[j+2]
+	 stw	$t2,12($ap)
+	subfe	$t7,$t7,$t3	; tp[j+3]-np[j+3]
+	 stwu	$t3,16($ap)
+	stw	$t4,4($rp)
+	stw	$t5,8($rp)
+	stw	$t6,12($rp)
+	stwu	$t7,16($rp)
+	bdnz	Lsub
+
+	li	$i,0
+	subfe	$ovf,$i,$ovf	; handle upmost overflow bit
+	addi	$ap,$sp,`$FRAME+$TRANSFER+4`
+	subf	$rp,$num,$rp	; rewind rp
+	addi	$tp,$sp,`$FRAME+$TRANSFER`
+	mtctr	$j
+
+.align	4
+Lcopy:				; conditional copy
+	lwz	$t0,4($ap)
+	lwz	$t1,8($ap)
+	lwz	$t2,12($ap)
+	lwzu	$t3,16($ap)
+	lwz	$t4,4($rp)
+	lwz	$t5,8($rp)
+	lwz	$t6,12($rp)
+	lwz	$t7,16($rp)
+	std	$i,8($nap_d)	; zap nap_d
+	std	$i,16($nap_d)
+	std	$i,24($nap_d)
+	std	$i,32($nap_d)
+	std	$i,40($nap_d)
+	std	$i,48($nap_d)
+	std	$i,56($nap_d)
+	stdu	$i,64($nap_d)
+	and	$t0,$t0,$ovf
+	and	$t1,$t1,$ovf
+	and	$t2,$t2,$ovf
+	and	$t3,$t3,$ovf
+	andc	$t4,$t4,$ovf
+	andc	$t5,$t5,$ovf
+	andc	$t6,$t6,$ovf
+	andc	$t7,$t7,$ovf
+	or	$t0,$t0,$t4
+	or	$t1,$t1,$t5
+	or	$t2,$t2,$t6
+	or	$t3,$t3,$t7
+	stw	$t0,4($rp)
+	stw	$t1,8($rp)
+	stw	$t2,12($rp)
+	stwu	$t3,16($rp)
+	std	$i,8($tp)	; zap tp at once
+	stdu	$i,16($tp)
+	bdnz	Lcopy
+___
+
+$code.=<<___;
+	$POP	$i,0($sp)
+	li	r3,1	; signal "handled"
+	$POP	r19,`-12*8-13*$SIZE_T`($i)
+	$POP	r20,`-12*8-12*$SIZE_T`($i)
+	$POP	r21,`-12*8-11*$SIZE_T`($i)
+	$POP	r22,`-12*8-10*$SIZE_T`($i)
+	$POP	r23,`-12*8-9*$SIZE_T`($i)
+	$POP	r24,`-12*8-8*$SIZE_T`($i)
+	$POP	r25,`-12*8-7*$SIZE_T`($i)
+	$POP	r26,`-12*8-6*$SIZE_T`($i)
+	$POP	r27,`-12*8-5*$SIZE_T`($i)
+	$POP	r28,`-12*8-4*$SIZE_T`($i)
+	$POP	r29,`-12*8-3*$SIZE_T`($i)
+	$POP	r30,`-12*8-2*$SIZE_T`($i)
+	$POP	r31,`-12*8-1*$SIZE_T`($i)
+	lfd	f20,`-12*8`($i)
+	lfd	f21,`-11*8`($i)
+	lfd	f22,`-10*8`($i)
+	lfd	f23,`-9*8`($i)
+	lfd	f24,`-8*8`($i)
+	lfd	f25,`-7*8`($i)
+	lfd	f26,`-6*8`($i)
+	lfd	f27,`-5*8`($i)
+	lfd	f28,`-4*8`($i)
+	lfd	f29,`-3*8`($i)
+	lfd	f30,`-2*8`($i)
+	lfd	f31,`-1*8`($i)
+	mr	$sp,$i
+	blr
+	.long	0
+	.byte	0,12,4,0,0x8c,13,6,0
+	.long	0
+.size	.$fname,.-.$fname
+
+.asciz  "Montgomery Multiplication for PPC64, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/rsaz-avx2.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/rsaz-avx2.pl
new file mode 100755
index 000000000..85cd73c66
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/rsaz-avx2.pl
@@ -0,0 +1,1982 @@
+#! /usr/bin/env perl
+# Copyright 2013-2019 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright (c) 2012, Intel Corporation. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# Originally written by Shay Gueron (1, 2), and Vlad Krasnov (1)
+# (1) Intel Corporation, Israel Development Center, Haifa, Israel
+# (2) University of Haifa, Israel
+#
+# References:
+# [1] S. Gueron, V. Krasnov: "Software Implementation of Modular
+#     Exponentiation,  Using Advanced Vector Instructions Architectures",
+#     F. Ozbudak and F. Rodriguez-Henriquez (Eds.): WAIFI 2012, LNCS 7369,
+#     pp. 119?135, 2012. Springer-Verlag Berlin Heidelberg 2012
+# [2] S. Gueron: "Efficient Software Implementations of Modular
+#     Exponentiation", Journal of Cryptographic Engineering 2:31-43 (2012).
+# [3] S. Gueron, V. Krasnov: "Speeding up Big-numbers Squaring",IEEE
+#     Proceedings of 9th International Conference on Information Technology:
+#     New Generations (ITNG 2012), pp.821-823 (2012)
+# [4] S. Gueron, V. Krasnov: "[PATCH] Efficient and side channel analysis
+#     resistant 1024-bit modular exponentiation, for optimizing RSA2048
+#     on AVX2 capable x86_64 platforms",
+#     http://rt.openssl.org/Ticket/Display.html?id=2850&user=guest&pass=guest
+#
+# +13% improvement over original submission by <appro@openssl.org>
+#
+# rsa2048 sign/sec	OpenSSL 1.0.1	scalar(*)	this
+# 2.3GHz Haswell	621		765/+23%	1113/+79%
+# 2.3GHz Broadwell(**)	688		1200(***)/+74%	1120/+63%
+#
+# (*)	if system doesn't support AVX2, for reference purposes;
+# (**)	scaled to 2.3GHz to simplify comparison;
+# (***)	scalar AD*X code is faster than AVX2 and is preferred code
+#	path for Broadwell;
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.19) + ($1>=2.22);
+	$addx = ($1>=2.23);
+}
+
+if (!$avx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	    `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.09) + ($1>=2.10);
+	$addx = ($1>=2.10);
+}
+
+if (!$avx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	    `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$avx = ($1>=10) + ($1>=11);
+	$addx = ($1>=11);
+}
+
+if (!$avx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|based on LLVM) ([3-9])\.([0-9]+)/) {
+	my $ver = $2 + $3/100.0;	# 3.1->3.01, 3.10->3.10
+	$avx = ($ver>=3.0) + ($ver>=3.01);
+	$addx = ($ver>=3.03);
+}
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT = *OUT;
+
+if ($avx>1) {{{
+{ # void AMS_WW(
+my $rp="%rdi";	# BN_ULONG *rp,
+my $ap="%rsi";	# const BN_ULONG *ap,
+my $np="%rdx";	# const BN_ULONG *np,
+my $n0="%ecx";	# const BN_ULONG n0,
+my $rep="%r8d";	# int repeat);
+
+# The registers that hold the accumulated redundant result
+# The AMM works on 1024 bit operands, and redundant word size is 29
+# Therefore: ceil(1024/29)/4 = 9
+my $ACC0="%ymm0";
+my $ACC1="%ymm1";
+my $ACC2="%ymm2";
+my $ACC3="%ymm3";
+my $ACC4="%ymm4";
+my $ACC5="%ymm5";
+my $ACC6="%ymm6";
+my $ACC7="%ymm7";
+my $ACC8="%ymm8";
+my $ACC9="%ymm9";
+# Registers that hold the broadcasted words of bp, currently used
+my $B1="%ymm10";
+my $B2="%ymm11";
+# Registers that hold the broadcasted words of Y, currently used
+my $Y1="%ymm12";
+my $Y2="%ymm13";
+# Helper registers
+my $TEMP1="%ymm14";
+my $AND_MASK="%ymm15";
+# alu registers that hold the first words of the ACC
+my $r0="%r9";
+my $r1="%r10";
+my $r2="%r11";
+my $r3="%r12";
+
+my $i="%r14d";			# loop counter
+my $tmp = "%r15";
+
+my $FrameSize=32*18+32*8;	# place for A^2 and 2*A
+
+my $aap=$r0;
+my $tp0="%rbx";
+my $tp1=$r3;
+my $tpa=$tmp;
+
+$np="%r13";			# reassigned argument
+
+$code.=<<___;
+.text
+
+.globl	rsaz_1024_sqr_avx2
+.type	rsaz_1024_sqr_avx2,\@function,5
+.align	64
+rsaz_1024_sqr_avx2:		# 702 cycles, 14% faster than rsaz_1024_mul_avx2
+.cfi_startproc
+	lea	(%rsp), %rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	lea	-0xa8(%rsp),%rsp
+	vmovaps	%xmm6,-0xd8(%rax)
+	vmovaps	%xmm7,-0xc8(%rax)
+	vmovaps	%xmm8,-0xb8(%rax)
+	vmovaps	%xmm9,-0xa8(%rax)
+	vmovaps	%xmm10,-0x98(%rax)
+	vmovaps	%xmm11,-0x88(%rax)
+	vmovaps	%xmm12,-0x78(%rax)
+	vmovaps	%xmm13,-0x68(%rax)
+	vmovaps	%xmm14,-0x58(%rax)
+	vmovaps	%xmm15,-0x48(%rax)
+.Lsqr_1024_body:
+___
+$code.=<<___;
+	mov	%rax,%rbp
+.cfi_def_cfa_register	%rbp
+	mov	%rdx, $np			# reassigned argument
+	sub	\$$FrameSize, %rsp
+	mov	$np, $tmp
+	sub	\$-128, $rp			# size optimization
+	sub	\$-128, $ap
+	sub	\$-128, $np
+
+	and	\$4095, $tmp			# see if $np crosses page
+	add	\$32*10, $tmp
+	shr	\$12, $tmp
+	vpxor	$ACC9,$ACC9,$ACC9
+	jz	.Lsqr_1024_no_n_copy
+
+	# unaligned 256-bit load that crosses page boundary can
+	# cause >2x performance degradation here, so if $np does
+	# cross page boundary, copy it to stack and make sure stack
+	# frame doesn't...
+	sub		\$32*10,%rsp
+	vmovdqu		32*0-128($np), $ACC0
+	and		\$-2048, %rsp
+	vmovdqu		32*1-128($np), $ACC1
+	vmovdqu		32*2-128($np), $ACC2
+	vmovdqu		32*3-128($np), $ACC3
+	vmovdqu		32*4-128($np), $ACC4
+	vmovdqu		32*5-128($np), $ACC5
+	vmovdqu		32*6-128($np), $ACC6
+	vmovdqu		32*7-128($np), $ACC7
+	vmovdqu		32*8-128($np), $ACC8
+	lea		$FrameSize+128(%rsp),$np
+	vmovdqu		$ACC0, 32*0-128($np)
+	vmovdqu		$ACC1, 32*1-128($np)
+	vmovdqu		$ACC2, 32*2-128($np)
+	vmovdqu		$ACC3, 32*3-128($np)
+	vmovdqu		$ACC4, 32*4-128($np)
+	vmovdqu		$ACC5, 32*5-128($np)
+	vmovdqu		$ACC6, 32*6-128($np)
+	vmovdqu		$ACC7, 32*7-128($np)
+	vmovdqu		$ACC8, 32*8-128($np)
+	vmovdqu		$ACC9, 32*9-128($np)	# $ACC9 is zero
+
+.Lsqr_1024_no_n_copy:
+	and		\$-1024, %rsp
+
+	vmovdqu		32*1-128($ap), $ACC1
+	vmovdqu		32*2-128($ap), $ACC2
+	vmovdqu		32*3-128($ap), $ACC3
+	vmovdqu		32*4-128($ap), $ACC4
+	vmovdqu		32*5-128($ap), $ACC5
+	vmovdqu		32*6-128($ap), $ACC6
+	vmovdqu		32*7-128($ap), $ACC7
+	vmovdqu		32*8-128($ap), $ACC8
+
+	lea	192(%rsp), $tp0			# 64+128=192
+	vmovdqu	.Land_mask(%rip), $AND_MASK
+	jmp	.LOOP_GRANDE_SQR_1024
+
+.align	32
+.LOOP_GRANDE_SQR_1024:
+	lea	32*18+128(%rsp), $aap		# size optimization
+	lea	448(%rsp), $tp1			# 64+128+256=448
+
+	# the squaring is performed as described in Variant B of
+	# "Speeding up Big-Number Squaring", so start by calculating
+	# the A*2=A+A vector
+	vpaddq		$ACC1, $ACC1, $ACC1
+	 vpbroadcastq	32*0-128($ap), $B1
+	vpaddq		$ACC2, $ACC2, $ACC2
+	vmovdqa		$ACC1, 32*0-128($aap)
+	vpaddq		$ACC3, $ACC3, $ACC3
+	vmovdqa		$ACC2, 32*1-128($aap)
+	vpaddq		$ACC4, $ACC4, $ACC4
+	vmovdqa		$ACC3, 32*2-128($aap)
+	vpaddq		$ACC5, $ACC5, $ACC5
+	vmovdqa		$ACC4, 32*3-128($aap)
+	vpaddq		$ACC6, $ACC6, $ACC6
+	vmovdqa		$ACC5, 32*4-128($aap)
+	vpaddq		$ACC7, $ACC7, $ACC7
+	vmovdqa		$ACC6, 32*5-128($aap)
+	vpaddq		$ACC8, $ACC8, $ACC8
+	vmovdqa		$ACC7, 32*6-128($aap)
+	vpxor		$ACC9, $ACC9, $ACC9
+	vmovdqa		$ACC8, 32*7-128($aap)
+
+	vpmuludq	32*0-128($ap), $B1, $ACC0
+	 vpbroadcastq	32*1-128($ap), $B2
+	 vmovdqu	$ACC9, 32*9-192($tp0)	# zero upper half
+	vpmuludq	$B1, $ACC1, $ACC1
+	 vmovdqu	$ACC9, 32*10-448($tp1)
+	vpmuludq	$B1, $ACC2, $ACC2
+	 vmovdqu	$ACC9, 32*11-448($tp1)
+	vpmuludq	$B1, $ACC3, $ACC3
+	 vmovdqu	$ACC9, 32*12-448($tp1)
+	vpmuludq	$B1, $ACC4, $ACC4
+	 vmovdqu	$ACC9, 32*13-448($tp1)
+	vpmuludq	$B1, $ACC5, $ACC5
+	 vmovdqu	$ACC9, 32*14-448($tp1)
+	vpmuludq	$B1, $ACC6, $ACC6
+	 vmovdqu	$ACC9, 32*15-448($tp1)
+	vpmuludq	$B1, $ACC7, $ACC7
+	 vmovdqu	$ACC9, 32*16-448($tp1)
+	vpmuludq	$B1, $ACC8, $ACC8
+	 vpbroadcastq	32*2-128($ap), $B1
+	 vmovdqu	$ACC9, 32*17-448($tp1)
+
+	mov	$ap, $tpa
+	mov 	\$4, $i
+	jmp	.Lsqr_entry_1024
+___
+$TEMP0=$Y1;
+$TEMP2=$Y2;
+$code.=<<___;
+.align	32
+.LOOP_SQR_1024:
+	 vpbroadcastq	32*1-128($tpa), $B2
+	vpmuludq	32*0-128($ap), $B1, $ACC0
+	vpaddq		32*0-192($tp0), $ACC0, $ACC0
+	vpmuludq	32*0-128($aap), $B1, $ACC1
+	vpaddq		32*1-192($tp0), $ACC1, $ACC1
+	vpmuludq	32*1-128($aap), $B1, $ACC2
+	vpaddq		32*2-192($tp0), $ACC2, $ACC2
+	vpmuludq	32*2-128($aap), $B1, $ACC3
+	vpaddq		32*3-192($tp0), $ACC3, $ACC3
+	vpmuludq	32*3-128($aap), $B1, $ACC4
+	vpaddq		32*4-192($tp0), $ACC4, $ACC4
+	vpmuludq	32*4-128($aap), $B1, $ACC5
+	vpaddq		32*5-192($tp0), $ACC5, $ACC5
+	vpmuludq	32*5-128($aap), $B1, $ACC6
+	vpaddq		32*6-192($tp0), $ACC6, $ACC6
+	vpmuludq	32*6-128($aap), $B1, $ACC7
+	vpaddq		32*7-192($tp0), $ACC7, $ACC7
+	vpmuludq	32*7-128($aap), $B1, $ACC8
+	 vpbroadcastq	32*2-128($tpa), $B1
+	vpaddq		32*8-192($tp0), $ACC8, $ACC8
+.Lsqr_entry_1024:
+	vmovdqu		$ACC0, 32*0-192($tp0)
+	vmovdqu		$ACC1, 32*1-192($tp0)
+
+	vpmuludq	32*1-128($ap), $B2, $TEMP0
+	vpaddq		$TEMP0, $ACC2, $ACC2
+	vpmuludq	32*1-128($aap), $B2, $TEMP1
+	vpaddq		$TEMP1, $ACC3, $ACC3
+	vpmuludq	32*2-128($aap), $B2, $TEMP2
+	vpaddq		$TEMP2, $ACC4, $ACC4
+	vpmuludq	32*3-128($aap), $B2, $TEMP0
+	vpaddq		$TEMP0, $ACC5, $ACC5
+	vpmuludq	32*4-128($aap), $B2, $TEMP1
+	vpaddq		$TEMP1, $ACC6, $ACC6
+	vpmuludq	32*5-128($aap), $B2, $TEMP2
+	vpaddq		$TEMP2, $ACC7, $ACC7
+	vpmuludq	32*6-128($aap), $B2, $TEMP0
+	vpaddq		$TEMP0, $ACC8, $ACC8
+	vpmuludq	32*7-128($aap), $B2, $ACC0
+	 vpbroadcastq	32*3-128($tpa), $B2
+	vpaddq		32*9-192($tp0), $ACC0, $ACC0
+
+	vmovdqu		$ACC2, 32*2-192($tp0)
+	vmovdqu		$ACC3, 32*3-192($tp0)
+
+	vpmuludq	32*2-128($ap), $B1, $TEMP2
+	vpaddq		$TEMP2, $ACC4, $ACC4
+	vpmuludq	32*2-128($aap), $B1, $TEMP0
+	vpaddq		$TEMP0, $ACC5, $ACC5
+	vpmuludq	32*3-128($aap), $B1, $TEMP1
+	vpaddq		$TEMP1, $ACC6, $ACC6
+	vpmuludq	32*4-128($aap), $B1, $TEMP2
+	vpaddq		$TEMP2, $ACC7, $ACC7
+	vpmuludq	32*5-128($aap), $B1, $TEMP0
+	vpaddq		$TEMP0, $ACC8, $ACC8
+	vpmuludq	32*6-128($aap), $B1, $TEMP1
+	vpaddq		$TEMP1, $ACC0, $ACC0
+	vpmuludq	32*7-128($aap), $B1, $ACC1
+	 vpbroadcastq	32*4-128($tpa), $B1
+	vpaddq		32*10-448($tp1), $ACC1, $ACC1
+
+	vmovdqu		$ACC4, 32*4-192($tp0)
+	vmovdqu		$ACC5, 32*5-192($tp0)
+
+	vpmuludq	32*3-128($ap), $B2, $TEMP0
+	vpaddq		$TEMP0, $ACC6, $ACC6
+	vpmuludq	32*3-128($aap), $B2, $TEMP1
+	vpaddq		$TEMP1, $ACC7, $ACC7
+	vpmuludq	32*4-128($aap), $B2, $TEMP2
+	vpaddq		$TEMP2, $ACC8, $ACC8
+	vpmuludq	32*5-128($aap), $B2, $TEMP0
+	vpaddq		$TEMP0, $ACC0, $ACC0
+	vpmuludq	32*6-128($aap), $B2, $TEMP1
+	vpaddq		$TEMP1, $ACC1, $ACC1
+	vpmuludq	32*7-128($aap), $B2, $ACC2
+	 vpbroadcastq	32*5-128($tpa), $B2
+	vpaddq		32*11-448($tp1), $ACC2, $ACC2
+
+	vmovdqu		$ACC6, 32*6-192($tp0)
+	vmovdqu		$ACC7, 32*7-192($tp0)
+
+	vpmuludq	32*4-128($ap), $B1, $TEMP0
+	vpaddq		$TEMP0, $ACC8, $ACC8
+	vpmuludq	32*4-128($aap), $B1, $TEMP1
+	vpaddq		$TEMP1, $ACC0, $ACC0
+	vpmuludq	32*5-128($aap), $B1, $TEMP2
+	vpaddq		$TEMP2, $ACC1, $ACC1
+	vpmuludq	32*6-128($aap), $B1, $TEMP0
+	vpaddq		$TEMP0, $ACC2, $ACC2
+	vpmuludq	32*7-128($aap), $B1, $ACC3
+	 vpbroadcastq	32*6-128($tpa), $B1
+	vpaddq		32*12-448($tp1), $ACC3, $ACC3
+
+	vmovdqu		$ACC8, 32*8-192($tp0)
+	vmovdqu		$ACC0, 32*9-192($tp0)
+	lea		8($tp0), $tp0
+
+	vpmuludq	32*5-128($ap), $B2, $TEMP2
+	vpaddq		$TEMP2, $ACC1, $ACC1
+	vpmuludq	32*5-128($aap), $B2, $TEMP0
+	vpaddq		$TEMP0, $ACC2, $ACC2
+	vpmuludq	32*6-128($aap), $B2, $TEMP1
+	vpaddq		$TEMP1, $ACC3, $ACC3
+	vpmuludq	32*7-128($aap), $B2, $ACC4
+	 vpbroadcastq	32*7-128($tpa), $B2
+	vpaddq		32*13-448($tp1), $ACC4, $ACC4
+
+	vmovdqu		$ACC1, 32*10-448($tp1)
+	vmovdqu		$ACC2, 32*11-448($tp1)
+
+	vpmuludq	32*6-128($ap), $B1, $TEMP0
+	vpaddq		$TEMP0, $ACC3, $ACC3
+	vpmuludq	32*6-128($aap), $B1, $TEMP1
+	 vpbroadcastq	32*8-128($tpa), $ACC0		# borrow $ACC0 for $B1
+	vpaddq		$TEMP1, $ACC4, $ACC4
+	vpmuludq	32*7-128($aap), $B1, $ACC5
+	 vpbroadcastq	32*0+8-128($tpa), $B1		# for next iteration
+	vpaddq		32*14-448($tp1), $ACC5, $ACC5
+
+	vmovdqu		$ACC3, 32*12-448($tp1)
+	vmovdqu		$ACC4, 32*13-448($tp1)
+	lea		8($tpa), $tpa
+
+	vpmuludq	32*7-128($ap), $B2, $TEMP0
+	vpaddq		$TEMP0, $ACC5, $ACC5
+	vpmuludq	32*7-128($aap), $B2, $ACC6
+	vpaddq		32*15-448($tp1), $ACC6, $ACC6
+
+	vpmuludq	32*8-128($ap), $ACC0, $ACC7
+	vmovdqu		$ACC5, 32*14-448($tp1)
+	vpaddq		32*16-448($tp1), $ACC7, $ACC7
+	vmovdqu		$ACC6, 32*15-448($tp1)
+	vmovdqu		$ACC7, 32*16-448($tp1)
+	lea		8($tp1), $tp1
+
+	dec	$i
+	jnz	.LOOP_SQR_1024
+___
+$ZERO = $ACC9;
+$TEMP0 = $B1;
+$TEMP2 = $B2;
+$TEMP3 = $Y1;
+$TEMP4 = $Y2;
+$code.=<<___;
+	# we need to fix indices 32-39 to avoid overflow
+	vmovdqu		32*8(%rsp), $ACC8		# 32*8-192($tp0),
+	vmovdqu		32*9(%rsp), $ACC1		# 32*9-192($tp0)
+	vmovdqu		32*10(%rsp), $ACC2		# 32*10-192($tp0)
+	lea		192(%rsp), $tp0			# 64+128=192
+
+	vpsrlq		\$29, $ACC8, $TEMP1
+	vpand		$AND_MASK, $ACC8, $ACC8
+	vpsrlq		\$29, $ACC1, $TEMP2
+	vpand		$AND_MASK, $ACC1, $ACC1
+
+	vpermq		\$0x93, $TEMP1, $TEMP1
+	vpxor		$ZERO, $ZERO, $ZERO
+	vpermq		\$0x93, $TEMP2, $TEMP2
+
+	vpblendd	\$3, $ZERO, $TEMP1, $TEMP0
+	vpblendd	\$3, $TEMP1, $TEMP2, $TEMP1
+	vpaddq		$TEMP0, $ACC8, $ACC8
+	vpblendd	\$3, $TEMP2, $ZERO, $TEMP2
+	vpaddq		$TEMP1, $ACC1, $ACC1
+	vpaddq		$TEMP2, $ACC2, $ACC2
+	vmovdqu		$ACC1, 32*9-192($tp0)
+	vmovdqu		$ACC2, 32*10-192($tp0)
+
+	mov	(%rsp), %rax
+	mov	8(%rsp), $r1
+	mov	16(%rsp), $r2
+	mov	24(%rsp), $r3
+	vmovdqu	32*1(%rsp), $ACC1
+	vmovdqu	32*2-192($tp0), $ACC2
+	vmovdqu	32*3-192($tp0), $ACC3
+	vmovdqu	32*4-192($tp0), $ACC4
+	vmovdqu	32*5-192($tp0), $ACC5
+	vmovdqu	32*6-192($tp0), $ACC6
+	vmovdqu	32*7-192($tp0), $ACC7
+
+	mov	%rax, $r0
+	imull	$n0, %eax
+	and	\$0x1fffffff, %eax
+	vmovd	%eax, $Y1
+
+	mov	%rax, %rdx
+	imulq	-128($np), %rax
+	 vpbroadcastq	$Y1, $Y1
+	add	%rax, $r0
+	mov	%rdx, %rax
+	imulq	8-128($np), %rax
+	shr	\$29, $r0
+	add	%rax, $r1
+	mov	%rdx, %rax
+	imulq	16-128($np), %rax
+	add	$r0, $r1
+	add	%rax, $r2
+	imulq	24-128($np), %rdx
+	add	%rdx, $r3
+
+	mov	$r1, %rax
+	imull	$n0, %eax
+	and	\$0x1fffffff, %eax
+
+	mov \$9, $i
+	jmp .LOOP_REDUCE_1024
+
+.align	32
+.LOOP_REDUCE_1024:
+	vmovd	%eax, $Y2
+	vpbroadcastq	$Y2, $Y2
+
+	vpmuludq	32*1-128($np), $Y1, $TEMP0
+	 mov	%rax, %rdx
+	 imulq	-128($np), %rax
+	vpaddq		$TEMP0, $ACC1, $ACC1
+	 add	%rax, $r1
+	vpmuludq	32*2-128($np), $Y1, $TEMP1
+	 mov	%rdx, %rax
+	 imulq	8-128($np), %rax
+	vpaddq		$TEMP1, $ACC2, $ACC2
+	vpmuludq	32*3-128($np), $Y1, $TEMP2
+	 .byte	0x67
+	 add	%rax, $r2
+	 .byte	0x67
+	 mov	%rdx, %rax
+	 imulq	16-128($np), %rax
+	 shr	\$29, $r1
+	vpaddq		$TEMP2, $ACC3, $ACC3
+	vpmuludq	32*4-128($np), $Y1, $TEMP0
+	 add	%rax, $r3
+	 add	$r1, $r2
+	vpaddq		$TEMP0, $ACC4, $ACC4
+	vpmuludq	32*5-128($np), $Y1, $TEMP1
+	 mov	$r2, %rax
+	 imull	$n0, %eax
+	vpaddq		$TEMP1, $ACC5, $ACC5
+	vpmuludq	32*6-128($np), $Y1, $TEMP2
+	 and	\$0x1fffffff, %eax
+	vpaddq		$TEMP2, $ACC6, $ACC6
+	vpmuludq	32*7-128($np), $Y1, $TEMP0
+	vpaddq		$TEMP0, $ACC7, $ACC7
+	vpmuludq	32*8-128($np), $Y1, $TEMP1
+	 vmovd	%eax, $Y1
+	 #vmovdqu	32*1-8-128($np), $TEMP2		# moved below
+	vpaddq		$TEMP1, $ACC8, $ACC8
+	 #vmovdqu	32*2-8-128($np), $TEMP0		# moved below
+	 vpbroadcastq	$Y1, $Y1
+
+	vpmuludq	32*1-8-128($np), $Y2, $TEMP2	# see above
+	vmovdqu		32*3-8-128($np), $TEMP1
+	 mov	%rax, %rdx
+	 imulq	-128($np), %rax
+	vpaddq		$TEMP2, $ACC1, $ACC1
+	vpmuludq	32*2-8-128($np), $Y2, $TEMP0	# see above
+	vmovdqu		32*4-8-128($np), $TEMP2
+	 add	%rax, $r2
+	 mov	%rdx, %rax
+	 imulq	8-128($np), %rax
+	vpaddq		$TEMP0, $ACC2, $ACC2
+	 add	$r3, %rax
+	 shr	\$29, $r2
+	vpmuludq	$Y2, $TEMP1, $TEMP1
+	vmovdqu		32*5-8-128($np), $TEMP0
+	 add	$r2, %rax
+	vpaddq		$TEMP1, $ACC3, $ACC3
+	vpmuludq	$Y2, $TEMP2, $TEMP2
+	vmovdqu		32*6-8-128($np), $TEMP1
+	 .byte	0x67
+	 mov	%rax, $r3
+	 imull	$n0, %eax
+	vpaddq		$TEMP2, $ACC4, $ACC4
+	vpmuludq	$Y2, $TEMP0, $TEMP0
+	.byte	0xc4,0x41,0x7e,0x6f,0x9d,0x58,0x00,0x00,0x00	# vmovdqu		32*7-8-128($np), $TEMP2
+	 and	\$0x1fffffff, %eax
+	vpaddq		$TEMP0, $ACC5, $ACC5
+	vpmuludq	$Y2, $TEMP1, $TEMP1
+	vmovdqu		32*8-8-128($np), $TEMP0
+	vpaddq		$TEMP1, $ACC6, $ACC6
+	vpmuludq	$Y2, $TEMP2, $TEMP2
+	vmovdqu		32*9-8-128($np), $ACC9
+	 vmovd	%eax, $ACC0			# borrow ACC0 for Y2
+	 imulq	-128($np), %rax
+	vpaddq		$TEMP2, $ACC7, $ACC7
+	vpmuludq	$Y2, $TEMP0, $TEMP0
+	 vmovdqu	32*1-16-128($np), $TEMP1
+	 vpbroadcastq	$ACC0, $ACC0
+	vpaddq		$TEMP0, $ACC8, $ACC8
+	vpmuludq	$Y2, $ACC9, $ACC9
+	 vmovdqu	32*2-16-128($np), $TEMP2
+	 add	%rax, $r3
+
+___
+($ACC0,$Y2)=($Y2,$ACC0);
+$code.=<<___;
+	 vmovdqu	32*1-24-128($np), $ACC0
+	vpmuludq	$Y1, $TEMP1, $TEMP1
+	vmovdqu		32*3-16-128($np), $TEMP0
+	vpaddq		$TEMP1, $ACC1, $ACC1
+	 vpmuludq	$Y2, $ACC0, $ACC0
+	vpmuludq	$Y1, $TEMP2, $TEMP2
+	.byte	0xc4,0x41,0x7e,0x6f,0xb5,0xf0,0xff,0xff,0xff	# vmovdqu		32*4-16-128($np), $TEMP1
+	 vpaddq		$ACC1, $ACC0, $ACC0
+	vpaddq		$TEMP2, $ACC2, $ACC2
+	vpmuludq	$Y1, $TEMP0, $TEMP0
+	vmovdqu		32*5-16-128($np), $TEMP2
+	 .byte	0x67
+	 vmovq		$ACC0, %rax
+	 vmovdqu	$ACC0, (%rsp)		# transfer $r0-$r3
+	vpaddq		$TEMP0, $ACC3, $ACC3
+	vpmuludq	$Y1, $TEMP1, $TEMP1
+	vmovdqu		32*6-16-128($np), $TEMP0
+	vpaddq		$TEMP1, $ACC4, $ACC4
+	vpmuludq	$Y1, $TEMP2, $TEMP2
+	vmovdqu		32*7-16-128($np), $TEMP1
+	vpaddq		$TEMP2, $ACC5, $ACC5
+	vpmuludq	$Y1, $TEMP0, $TEMP0
+	vmovdqu		32*8-16-128($np), $TEMP2
+	vpaddq		$TEMP0, $ACC6, $ACC6
+	vpmuludq	$Y1, $TEMP1, $TEMP1
+	 shr	\$29, $r3
+	vmovdqu		32*9-16-128($np), $TEMP0
+	 add	$r3, %rax
+	vpaddq		$TEMP1, $ACC7, $ACC7
+	vpmuludq	$Y1, $TEMP2, $TEMP2
+	 #vmovdqu	32*2-24-128($np), $TEMP1	# moved below
+	 mov	%rax, $r0
+	 imull	$n0, %eax
+	vpaddq		$TEMP2, $ACC8, $ACC8
+	vpmuludq	$Y1, $TEMP0, $TEMP0
+	 and	\$0x1fffffff, %eax
+	 vmovd	%eax, $Y1
+	 vmovdqu	32*3-24-128($np), $TEMP2
+	.byte	0x67
+	vpaddq		$TEMP0, $ACC9, $ACC9
+	 vpbroadcastq	$Y1, $Y1
+
+	vpmuludq	32*2-24-128($np), $Y2, $TEMP1	# see above
+	vmovdqu		32*4-24-128($np), $TEMP0
+	 mov	%rax, %rdx
+	 imulq	-128($np), %rax
+	 mov	8(%rsp), $r1
+	vpaddq		$TEMP1, $ACC2, $ACC1
+	vpmuludq	$Y2, $TEMP2, $TEMP2
+	vmovdqu		32*5-24-128($np), $TEMP1
+	 add	%rax, $r0
+	 mov	%rdx, %rax
+	 imulq	8-128($np), %rax
+	 .byte	0x67
+	 shr	\$29, $r0
+	 mov	16(%rsp), $r2
+	vpaddq		$TEMP2, $ACC3, $ACC2
+	vpmuludq	$Y2, $TEMP0, $TEMP0
+	vmovdqu		32*6-24-128($np), $TEMP2
+	 add	%rax, $r1
+	 mov	%rdx, %rax
+	 imulq	16-128($np), %rax
+	vpaddq		$TEMP0, $ACC4, $ACC3
+	vpmuludq	$Y2, $TEMP1, $TEMP1
+	vmovdqu		32*7-24-128($np), $TEMP0
+	 imulq	24-128($np), %rdx		# future $r3
+	 add	%rax, $r2
+	 lea	($r0,$r1), %rax
+	vpaddq		$TEMP1, $ACC5, $ACC4
+	vpmuludq	$Y2, $TEMP2, $TEMP2
+	vmovdqu		32*8-24-128($np), $TEMP1
+	 mov	%rax, $r1
+	 imull	$n0, %eax
+	vpmuludq	$Y2, $TEMP0, $TEMP0
+	vpaddq		$TEMP2, $ACC6, $ACC5
+	vmovdqu		32*9-24-128($np), $TEMP2
+	 and	\$0x1fffffff, %eax
+	vpaddq		$TEMP0, $ACC7, $ACC6
+	vpmuludq	$Y2, $TEMP1, $TEMP1
+	 add	24(%rsp), %rdx
+	vpaddq		$TEMP1, $ACC8, $ACC7
+	vpmuludq	$Y2, $TEMP2, $TEMP2
+	vpaddq		$TEMP2, $ACC9, $ACC8
+	 vmovq	$r3, $ACC9
+	 mov	%rdx, $r3
+
+	dec	$i
+	jnz	.LOOP_REDUCE_1024
+___
+($ACC0,$Y2)=($Y2,$ACC0);
+$code.=<<___;
+	lea	448(%rsp), $tp1			# size optimization
+	vpaddq	$ACC9, $Y2, $ACC0
+	vpxor	$ZERO, $ZERO, $ZERO
+
+	vpaddq		32*9-192($tp0), $ACC0, $ACC0
+	vpaddq		32*10-448($tp1), $ACC1, $ACC1
+	vpaddq		32*11-448($tp1), $ACC2, $ACC2
+	vpaddq		32*12-448($tp1), $ACC3, $ACC3
+	vpaddq		32*13-448($tp1), $ACC4, $ACC4
+	vpaddq		32*14-448($tp1), $ACC5, $ACC5
+	vpaddq		32*15-448($tp1), $ACC6, $ACC6
+	vpaddq		32*16-448($tp1), $ACC7, $ACC7
+	vpaddq		32*17-448($tp1), $ACC8, $ACC8
+
+	vpsrlq		\$29, $ACC0, $TEMP1
+	vpand		$AND_MASK, $ACC0, $ACC0
+	vpsrlq		\$29, $ACC1, $TEMP2
+	vpand		$AND_MASK, $ACC1, $ACC1
+	vpsrlq		\$29, $ACC2, $TEMP3
+	vpermq		\$0x93, $TEMP1, $TEMP1
+	vpand		$AND_MASK, $ACC2, $ACC2
+	vpsrlq		\$29, $ACC3, $TEMP4
+	vpermq		\$0x93, $TEMP2, $TEMP2
+	vpand		$AND_MASK, $ACC3, $ACC3
+	vpermq		\$0x93, $TEMP3, $TEMP3
+
+	vpblendd	\$3, $ZERO, $TEMP1, $TEMP0
+	vpermq		\$0x93, $TEMP4, $TEMP4
+	vpblendd	\$3, $TEMP1, $TEMP2, $TEMP1
+	vpaddq		$TEMP0, $ACC0, $ACC0
+	vpblendd	\$3, $TEMP2, $TEMP3, $TEMP2
+	vpaddq		$TEMP1, $ACC1, $ACC1
+	vpblendd	\$3, $TEMP3, $TEMP4, $TEMP3
+	vpaddq		$TEMP2, $ACC2, $ACC2
+	vpblendd	\$3, $TEMP4, $ZERO, $TEMP4
+	vpaddq		$TEMP3, $ACC3, $ACC3
+	vpaddq		$TEMP4, $ACC4, $ACC4
+
+	vpsrlq		\$29, $ACC0, $TEMP1
+	vpand		$AND_MASK, $ACC0, $ACC0
+	vpsrlq		\$29, $ACC1, $TEMP2
+	vpand		$AND_MASK, $ACC1, $ACC1
+	vpsrlq		\$29, $ACC2, $TEMP3
+	vpermq		\$0x93, $TEMP1, $TEMP1
+	vpand		$AND_MASK, $ACC2, $ACC2
+	vpsrlq		\$29, $ACC3, $TEMP4
+	vpermq		\$0x93, $TEMP2, $TEMP2
+	vpand		$AND_MASK, $ACC3, $ACC3
+	vpermq		\$0x93, $TEMP3, $TEMP3
+
+	vpblendd	\$3, $ZERO, $TEMP1, $TEMP0
+	vpermq		\$0x93, $TEMP4, $TEMP4
+	vpblendd	\$3, $TEMP1, $TEMP2, $TEMP1
+	vpaddq		$TEMP0, $ACC0, $ACC0
+	vpblendd	\$3, $TEMP2, $TEMP3, $TEMP2
+	vpaddq		$TEMP1, $ACC1, $ACC1
+	vmovdqu		$ACC0, 32*0-128($rp)
+	vpblendd	\$3, $TEMP3, $TEMP4, $TEMP3
+	vpaddq		$TEMP2, $ACC2, $ACC2
+	vmovdqu		$ACC1, 32*1-128($rp)
+	vpblendd	\$3, $TEMP4, $ZERO, $TEMP4
+	vpaddq		$TEMP3, $ACC3, $ACC3
+	vmovdqu		$ACC2, 32*2-128($rp)
+	vpaddq		$TEMP4, $ACC4, $ACC4
+	vmovdqu		$ACC3, 32*3-128($rp)
+___
+$TEMP5=$ACC0;
+$code.=<<___;
+	vpsrlq		\$29, $ACC4, $TEMP1
+	vpand		$AND_MASK, $ACC4, $ACC4
+	vpsrlq		\$29, $ACC5, $TEMP2
+	vpand		$AND_MASK, $ACC5, $ACC5
+	vpsrlq		\$29, $ACC6, $TEMP3
+	vpermq		\$0x93, $TEMP1, $TEMP1
+	vpand		$AND_MASK, $ACC6, $ACC6
+	vpsrlq		\$29, $ACC7, $TEMP4
+	vpermq		\$0x93, $TEMP2, $TEMP2
+	vpand		$AND_MASK, $ACC7, $ACC7
+	vpsrlq		\$29, $ACC8, $TEMP5
+	vpermq		\$0x93, $TEMP3, $TEMP3
+	vpand		$AND_MASK, $ACC8, $ACC8
+	vpermq		\$0x93, $TEMP4, $TEMP4
+
+	vpblendd	\$3, $ZERO, $TEMP1, $TEMP0
+	vpermq		\$0x93, $TEMP5, $TEMP5
+	vpblendd	\$3, $TEMP1, $TEMP2, $TEMP1
+	vpaddq		$TEMP0, $ACC4, $ACC4
+	vpblendd	\$3, $TEMP2, $TEMP3, $TEMP2
+	vpaddq		$TEMP1, $ACC5, $ACC5
+	vpblendd	\$3, $TEMP3, $TEMP4, $TEMP3
+	vpaddq		$TEMP2, $ACC6, $ACC6
+	vpblendd	\$3, $TEMP4, $TEMP5, $TEMP4
+	vpaddq		$TEMP3, $ACC7, $ACC7
+	vpaddq		$TEMP4, $ACC8, $ACC8
+
+	vpsrlq		\$29, $ACC4, $TEMP1
+	vpand		$AND_MASK, $ACC4, $ACC4
+	vpsrlq		\$29, $ACC5, $TEMP2
+	vpand		$AND_MASK, $ACC5, $ACC5
+	vpsrlq		\$29, $ACC6, $TEMP3
+	vpermq		\$0x93, $TEMP1, $TEMP1
+	vpand		$AND_MASK, $ACC6, $ACC6
+	vpsrlq		\$29, $ACC7, $TEMP4
+	vpermq		\$0x93, $TEMP2, $TEMP2
+	vpand		$AND_MASK, $ACC7, $ACC7
+	vpsrlq		\$29, $ACC8, $TEMP5
+	vpermq		\$0x93, $TEMP3, $TEMP3
+	vpand		$AND_MASK, $ACC8, $ACC8
+	vpermq		\$0x93, $TEMP4, $TEMP4
+
+	vpblendd	\$3, $ZERO, $TEMP1, $TEMP0
+	vpermq		\$0x93, $TEMP5, $TEMP5
+	vpblendd	\$3, $TEMP1, $TEMP2, $TEMP1
+	vpaddq		$TEMP0, $ACC4, $ACC4
+	vpblendd	\$3, $TEMP2, $TEMP3, $TEMP2
+	vpaddq		$TEMP1, $ACC5, $ACC5
+	vmovdqu		$ACC4, 32*4-128($rp)
+	vpblendd	\$3, $TEMP3, $TEMP4, $TEMP3
+	vpaddq		$TEMP2, $ACC6, $ACC6
+	vmovdqu		$ACC5, 32*5-128($rp)
+	vpblendd	\$3, $TEMP4, $TEMP5, $TEMP4
+	vpaddq		$TEMP3, $ACC7, $ACC7
+	vmovdqu		$ACC6, 32*6-128($rp)
+	vpaddq		$TEMP4, $ACC8, $ACC8
+	vmovdqu		$ACC7, 32*7-128($rp)
+	vmovdqu		$ACC8, 32*8-128($rp)
+
+	mov	$rp, $ap
+	dec	$rep
+	jne	.LOOP_GRANDE_SQR_1024
+
+	vzeroall
+	mov	%rbp, %rax
+.cfi_def_cfa_register	%rax
+___
+$code.=<<___ if ($win64);
+.Lsqr_1024_in_tail:
+	movaps	-0xd8(%rax),%xmm6
+	movaps	-0xc8(%rax),%xmm7
+	movaps	-0xb8(%rax),%xmm8
+	movaps	-0xa8(%rax),%xmm9
+	movaps	-0x98(%rax),%xmm10
+	movaps	-0x88(%rax),%xmm11
+	movaps	-0x78(%rax),%xmm12
+	movaps	-0x68(%rax),%xmm13
+	movaps	-0x58(%rax),%xmm14
+	movaps	-0x48(%rax),%xmm15
+___
+$code.=<<___;
+	mov	-48(%rax),%r15
+.cfi_restore	%r15
+	mov	-40(%rax),%r14
+.cfi_restore	%r14
+	mov	-32(%rax),%r13
+.cfi_restore	%r13
+	mov	-24(%rax),%r12
+.cfi_restore	%r12
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp		# restore %rsp
+.cfi_def_cfa_register	%rsp
+.Lsqr_1024_epilogue:
+	ret
+.cfi_endproc
+.size	rsaz_1024_sqr_avx2,.-rsaz_1024_sqr_avx2
+___
+}
+
+{ # void AMM_WW(
+my $rp="%rdi";	# BN_ULONG *rp,
+my $ap="%rsi";	# const BN_ULONG *ap,
+my $bp="%rdx";	# const BN_ULONG *bp,
+my $np="%rcx";	# const BN_ULONG *np,
+my $n0="%r8d";	# unsigned int n0);
+
+# The registers that hold the accumulated redundant result
+# The AMM works on 1024 bit operands, and redundant word size is 29
+# Therefore: ceil(1024/29)/4 = 9
+my $ACC0="%ymm0";
+my $ACC1="%ymm1";
+my $ACC2="%ymm2";
+my $ACC3="%ymm3";
+my $ACC4="%ymm4";
+my $ACC5="%ymm5";
+my $ACC6="%ymm6";
+my $ACC7="%ymm7";
+my $ACC8="%ymm8";
+my $ACC9="%ymm9";
+
+# Registers that hold the broadcasted words of multiplier, currently used
+my $Bi="%ymm10";
+my $Yi="%ymm11";
+
+# Helper registers
+my $TEMP0=$ACC0;
+my $TEMP1="%ymm12";
+my $TEMP2="%ymm13";
+my $ZERO="%ymm14";
+my $AND_MASK="%ymm15";
+
+# alu registers that hold the first words of the ACC
+my $r0="%r9";
+my $r1="%r10";
+my $r2="%r11";
+my $r3="%r12";
+
+my $i="%r14d";
+my $tmp="%r15";
+
+$bp="%r13";	# reassigned argument
+
+$code.=<<___;
+.globl	rsaz_1024_mul_avx2
+.type	rsaz_1024_mul_avx2,\@function,5
+.align	64
+rsaz_1024_mul_avx2:
+.cfi_startproc
+	lea	(%rsp), %rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+___
+$code.=<<___ if ($win64);
+	vzeroupper
+	lea	-0xa8(%rsp),%rsp
+	vmovaps	%xmm6,-0xd8(%rax)
+	vmovaps	%xmm7,-0xc8(%rax)
+	vmovaps	%xmm8,-0xb8(%rax)
+	vmovaps	%xmm9,-0xa8(%rax)
+	vmovaps	%xmm10,-0x98(%rax)
+	vmovaps	%xmm11,-0x88(%rax)
+	vmovaps	%xmm12,-0x78(%rax)
+	vmovaps	%xmm13,-0x68(%rax)
+	vmovaps	%xmm14,-0x58(%rax)
+	vmovaps	%xmm15,-0x48(%rax)
+.Lmul_1024_body:
+___
+$code.=<<___;
+	mov	%rax,%rbp
+.cfi_def_cfa_register	%rbp
+	vzeroall
+	mov	%rdx, $bp	# reassigned argument
+	sub	\$64,%rsp
+
+	# unaligned 256-bit load that crosses page boundary can
+	# cause severe performance degradation here, so if $ap does
+	# cross page boundary, swap it with $bp [meaning that caller
+	# is advised to lay down $ap and $bp next to each other, so
+	# that only one can cross page boundary].
+	.byte	0x67,0x67
+	mov	$ap, $tmp
+	and	\$4095, $tmp
+	add	\$32*10, $tmp
+	shr	\$12, $tmp
+	mov	$ap, $tmp
+	cmovnz	$bp, $ap
+	cmovnz	$tmp, $bp
+
+	mov	$np, $tmp
+	sub	\$-128,$ap	# size optimization
+	sub	\$-128,$np
+	sub	\$-128,$rp
+
+	and	\$4095, $tmp	# see if $np crosses page
+	add	\$32*10, $tmp
+	.byte	0x67,0x67
+	shr	\$12, $tmp
+	jz	.Lmul_1024_no_n_copy
+
+	# unaligned 256-bit load that crosses page boundary can
+	# cause severe performance degradation here, so if $np does
+	# cross page boundary, copy it to stack and make sure stack
+	# frame doesn't...
+	sub		\$32*10,%rsp
+	vmovdqu		32*0-128($np), $ACC0
+	and		\$-512, %rsp
+	vmovdqu		32*1-128($np), $ACC1
+	vmovdqu		32*2-128($np), $ACC2
+	vmovdqu		32*3-128($np), $ACC3
+	vmovdqu		32*4-128($np), $ACC4
+	vmovdqu		32*5-128($np), $ACC5
+	vmovdqu		32*6-128($np), $ACC6
+	vmovdqu		32*7-128($np), $ACC7
+	vmovdqu		32*8-128($np), $ACC8
+	lea		64+128(%rsp),$np
+	vmovdqu		$ACC0, 32*0-128($np)
+	vpxor		$ACC0, $ACC0, $ACC0
+	vmovdqu		$ACC1, 32*1-128($np)
+	vpxor		$ACC1, $ACC1, $ACC1
+	vmovdqu		$ACC2, 32*2-128($np)
+	vpxor		$ACC2, $ACC2, $ACC2
+	vmovdqu		$ACC3, 32*3-128($np)
+	vpxor		$ACC3, $ACC3, $ACC3
+	vmovdqu		$ACC4, 32*4-128($np)
+	vpxor		$ACC4, $ACC4, $ACC4
+	vmovdqu		$ACC5, 32*5-128($np)
+	vpxor		$ACC5, $ACC5, $ACC5
+	vmovdqu		$ACC6, 32*6-128($np)
+	vpxor		$ACC6, $ACC6, $ACC6
+	vmovdqu		$ACC7, 32*7-128($np)
+	vpxor		$ACC7, $ACC7, $ACC7
+	vmovdqu		$ACC8, 32*8-128($np)
+	vmovdqa		$ACC0, $ACC8
+	vmovdqu		$ACC9, 32*9-128($np)	# $ACC9 is zero after vzeroall
+.Lmul_1024_no_n_copy:
+	and	\$-64,%rsp
+
+	mov	($bp), %rbx
+	vpbroadcastq ($bp), $Bi
+	vmovdqu	$ACC0, (%rsp)			# clear top of stack
+	xor	$r0, $r0
+	.byte	0x67
+	xor	$r1, $r1
+	xor	$r2, $r2
+	xor	$r3, $r3
+
+	vmovdqu	.Land_mask(%rip), $AND_MASK
+	mov	\$9, $i
+	vmovdqu	$ACC9, 32*9-128($rp)		# $ACC9 is zero after vzeroall
+	jmp	.Loop_mul_1024
+
+.align	32
+.Loop_mul_1024:
+	 vpsrlq		\$29, $ACC3, $ACC9		# correct $ACC3(*)
+	mov	%rbx, %rax
+	imulq	-128($ap), %rax
+	add	$r0, %rax
+	mov	%rbx, $r1
+	imulq	8-128($ap), $r1
+	add	8(%rsp), $r1
+
+	mov	%rax, $r0
+	imull	$n0, %eax
+	and	\$0x1fffffff, %eax
+
+	 mov	%rbx, $r2
+	 imulq	16-128($ap), $r2
+	 add	16(%rsp), $r2
+
+	 mov	%rbx, $r3
+	 imulq	24-128($ap), $r3
+	 add	24(%rsp), $r3
+	vpmuludq	32*1-128($ap),$Bi,$TEMP0
+	 vmovd		%eax, $Yi
+	vpaddq		$TEMP0,$ACC1,$ACC1
+	vpmuludq	32*2-128($ap),$Bi,$TEMP1
+	 vpbroadcastq	$Yi, $Yi
+	vpaddq		$TEMP1,$ACC2,$ACC2
+	vpmuludq	32*3-128($ap),$Bi,$TEMP2
+	 vpand		$AND_MASK, $ACC3, $ACC3		# correct $ACC3
+	vpaddq		$TEMP2,$ACC3,$ACC3
+	vpmuludq	32*4-128($ap),$Bi,$TEMP0
+	vpaddq		$TEMP0,$ACC4,$ACC4
+	vpmuludq	32*5-128($ap),$Bi,$TEMP1
+	vpaddq		$TEMP1,$ACC5,$ACC5
+	vpmuludq	32*6-128($ap),$Bi,$TEMP2
+	vpaddq		$TEMP2,$ACC6,$ACC6
+	vpmuludq	32*7-128($ap),$Bi,$TEMP0
+	 vpermq		\$0x93, $ACC9, $ACC9		# correct $ACC3
+	vpaddq		$TEMP0,$ACC7,$ACC7
+	vpmuludq	32*8-128($ap),$Bi,$TEMP1
+	 vpbroadcastq	8($bp), $Bi
+	vpaddq		$TEMP1,$ACC8,$ACC8
+
+	mov	%rax,%rdx
+	imulq	-128($np),%rax
+	add	%rax,$r0
+	mov	%rdx,%rax
+	imulq	8-128($np),%rax
+	add	%rax,$r1
+	mov	%rdx,%rax
+	imulq	16-128($np),%rax
+	add	%rax,$r2
+	shr	\$29, $r0
+	imulq	24-128($np),%rdx
+	add	%rdx,$r3
+	add	$r0, $r1
+
+	vpmuludq	32*1-128($np),$Yi,$TEMP2
+	 vmovq		$Bi, %rbx
+	vpaddq		$TEMP2,$ACC1,$ACC1
+	vpmuludq	32*2-128($np),$Yi,$TEMP0
+	vpaddq		$TEMP0,$ACC2,$ACC2
+	vpmuludq	32*3-128($np),$Yi,$TEMP1
+	vpaddq		$TEMP1,$ACC3,$ACC3
+	vpmuludq	32*4-128($np),$Yi,$TEMP2
+	vpaddq		$TEMP2,$ACC4,$ACC4
+	vpmuludq	32*5-128($np),$Yi,$TEMP0
+	vpaddq		$TEMP0,$ACC5,$ACC5
+	vpmuludq	32*6-128($np),$Yi,$TEMP1
+	vpaddq		$TEMP1,$ACC6,$ACC6
+	vpmuludq	32*7-128($np),$Yi,$TEMP2
+	 vpblendd	\$3, $ZERO, $ACC9, $TEMP1	# correct $ACC3
+	vpaddq		$TEMP2,$ACC7,$ACC7
+	vpmuludq	32*8-128($np),$Yi,$TEMP0
+	 vpaddq		$TEMP1, $ACC3, $ACC3		# correct $ACC3
+	vpaddq		$TEMP0,$ACC8,$ACC8
+
+	mov	%rbx, %rax
+	imulq	-128($ap),%rax
+	add	%rax,$r1
+	 vmovdqu	-8+32*1-128($ap),$TEMP1
+	mov	%rbx, %rax
+	imulq	8-128($ap),%rax
+	add	%rax,$r2
+	 vmovdqu	-8+32*2-128($ap),$TEMP2
+
+	mov	$r1, %rax
+	 vpblendd	\$0xfc, $ZERO, $ACC9, $ACC9	# correct $ACC3
+	imull	$n0, %eax
+	 vpaddq		$ACC9,$ACC4,$ACC4		# correct $ACC3
+	and	\$0x1fffffff, %eax
+
+	 imulq	16-128($ap),%rbx
+	 add	%rbx,$r3
+	vpmuludq	$Bi,$TEMP1,$TEMP1
+	 vmovd		%eax, $Yi
+	vmovdqu		-8+32*3-128($ap),$TEMP0
+	vpaddq		$TEMP1,$ACC1,$ACC1
+	vpmuludq	$Bi,$TEMP2,$TEMP2
+	 vpbroadcastq	$Yi, $Yi
+	vmovdqu		-8+32*4-128($ap),$TEMP1
+	vpaddq		$TEMP2,$ACC2,$ACC2
+	vpmuludq	$Bi,$TEMP0,$TEMP0
+	vmovdqu		-8+32*5-128($ap),$TEMP2
+	vpaddq		$TEMP0,$ACC3,$ACC3
+	vpmuludq	$Bi,$TEMP1,$TEMP1
+	vmovdqu		-8+32*6-128($ap),$TEMP0
+	vpaddq		$TEMP1,$ACC4,$ACC4
+	vpmuludq	$Bi,$TEMP2,$TEMP2
+	vmovdqu		-8+32*7-128($ap),$TEMP1
+	vpaddq		$TEMP2,$ACC5,$ACC5
+	vpmuludq	$Bi,$TEMP0,$TEMP0
+	vmovdqu		-8+32*8-128($ap),$TEMP2
+	vpaddq		$TEMP0,$ACC6,$ACC6
+	vpmuludq	$Bi,$TEMP1,$TEMP1
+	vmovdqu		-8+32*9-128($ap),$ACC9
+	vpaddq		$TEMP1,$ACC7,$ACC7
+	vpmuludq	$Bi,$TEMP2,$TEMP2
+	vpaddq		$TEMP2,$ACC8,$ACC8
+	vpmuludq	$Bi,$ACC9,$ACC9
+	 vpbroadcastq	16($bp), $Bi
+
+	mov	%rax,%rdx
+	imulq	-128($np),%rax
+	add	%rax,$r1
+	 vmovdqu	-8+32*1-128($np),$TEMP0
+	mov	%rdx,%rax
+	imulq	8-128($np),%rax
+	add	%rax,$r2
+	 vmovdqu	-8+32*2-128($np),$TEMP1
+	shr	\$29, $r1
+	imulq	16-128($np),%rdx
+	add	%rdx,$r3
+	add	$r1, $r2
+
+	vpmuludq	$Yi,$TEMP0,$TEMP0
+	 vmovq		$Bi, %rbx
+	vmovdqu		-8+32*3-128($np),$TEMP2
+	vpaddq		$TEMP0,$ACC1,$ACC1
+	vpmuludq	$Yi,$TEMP1,$TEMP1
+	vmovdqu		-8+32*4-128($np),$TEMP0
+	vpaddq		$TEMP1,$ACC2,$ACC2
+	vpmuludq	$Yi,$TEMP2,$TEMP2
+	vmovdqu		-8+32*5-128($np),$TEMP1
+	vpaddq		$TEMP2,$ACC3,$ACC3
+	vpmuludq	$Yi,$TEMP0,$TEMP0
+	vmovdqu		-8+32*6-128($np),$TEMP2
+	vpaddq		$TEMP0,$ACC4,$ACC4
+	vpmuludq	$Yi,$TEMP1,$TEMP1
+	vmovdqu		-8+32*7-128($np),$TEMP0
+	vpaddq		$TEMP1,$ACC5,$ACC5
+	vpmuludq	$Yi,$TEMP2,$TEMP2
+	vmovdqu		-8+32*8-128($np),$TEMP1
+	vpaddq		$TEMP2,$ACC6,$ACC6
+	vpmuludq	$Yi,$TEMP0,$TEMP0
+	vmovdqu		-8+32*9-128($np),$TEMP2
+	vpaddq		$TEMP0,$ACC7,$ACC7
+	vpmuludq	$Yi,$TEMP1,$TEMP1
+	vpaddq		$TEMP1,$ACC8,$ACC8
+	vpmuludq	$Yi,$TEMP2,$TEMP2
+	vpaddq		$TEMP2,$ACC9,$ACC9
+
+	 vmovdqu	-16+32*1-128($ap),$TEMP0
+	mov	%rbx,%rax
+	imulq	-128($ap),%rax
+	add	$r2,%rax
+
+	 vmovdqu	-16+32*2-128($ap),$TEMP1
+	mov	%rax,$r2
+	imull	$n0, %eax
+	and	\$0x1fffffff, %eax
+
+	 imulq	8-128($ap),%rbx
+	 add	%rbx,$r3
+	vpmuludq	$Bi,$TEMP0,$TEMP0
+	 vmovd		%eax, $Yi
+	vmovdqu		-16+32*3-128($ap),$TEMP2
+	vpaddq		$TEMP0,$ACC1,$ACC1
+	vpmuludq	$Bi,$TEMP1,$TEMP1
+	 vpbroadcastq	$Yi, $Yi
+	vmovdqu		-16+32*4-128($ap),$TEMP0
+	vpaddq		$TEMP1,$ACC2,$ACC2
+	vpmuludq	$Bi,$TEMP2,$TEMP2
+	vmovdqu		-16+32*5-128($ap),$TEMP1
+	vpaddq		$TEMP2,$ACC3,$ACC3
+	vpmuludq	$Bi,$TEMP0,$TEMP0
+	vmovdqu		-16+32*6-128($ap),$TEMP2
+	vpaddq		$TEMP0,$ACC4,$ACC4
+	vpmuludq	$Bi,$TEMP1,$TEMP1
+	vmovdqu		-16+32*7-128($ap),$TEMP0
+	vpaddq		$TEMP1,$ACC5,$ACC5
+	vpmuludq	$Bi,$TEMP2,$TEMP2
+	vmovdqu		-16+32*8-128($ap),$TEMP1
+	vpaddq		$TEMP2,$ACC6,$ACC6
+	vpmuludq	$Bi,$TEMP0,$TEMP0
+	vmovdqu		-16+32*9-128($ap),$TEMP2
+	vpaddq		$TEMP0,$ACC7,$ACC7
+	vpmuludq	$Bi,$TEMP1,$TEMP1
+	vpaddq		$TEMP1,$ACC8,$ACC8
+	vpmuludq	$Bi,$TEMP2,$TEMP2
+	 vpbroadcastq	24($bp), $Bi
+	vpaddq		$TEMP2,$ACC9,$ACC9
+
+	 vmovdqu	-16+32*1-128($np),$TEMP0
+	mov	%rax,%rdx
+	imulq	-128($np),%rax
+	add	%rax,$r2
+	 vmovdqu	-16+32*2-128($np),$TEMP1
+	imulq	8-128($np),%rdx
+	add	%rdx,$r3
+	shr	\$29, $r2
+
+	vpmuludq	$Yi,$TEMP0,$TEMP0
+	 vmovq		$Bi, %rbx
+	vmovdqu		-16+32*3-128($np),$TEMP2
+	vpaddq		$TEMP0,$ACC1,$ACC1
+	vpmuludq	$Yi,$TEMP1,$TEMP1
+	vmovdqu		-16+32*4-128($np),$TEMP0
+	vpaddq		$TEMP1,$ACC2,$ACC2
+	vpmuludq	$Yi,$TEMP2,$TEMP2
+	vmovdqu		-16+32*5-128($np),$TEMP1
+	vpaddq		$TEMP2,$ACC3,$ACC3
+	vpmuludq	$Yi,$TEMP0,$TEMP0
+	vmovdqu		-16+32*6-128($np),$TEMP2
+	vpaddq		$TEMP0,$ACC4,$ACC4
+	vpmuludq	$Yi,$TEMP1,$TEMP1
+	vmovdqu		-16+32*7-128($np),$TEMP0
+	vpaddq		$TEMP1,$ACC5,$ACC5
+	vpmuludq	$Yi,$TEMP2,$TEMP2
+	vmovdqu		-16+32*8-128($np),$TEMP1
+	vpaddq		$TEMP2,$ACC6,$ACC6
+	vpmuludq	$Yi,$TEMP0,$TEMP0
+	vmovdqu		-16+32*9-128($np),$TEMP2
+	vpaddq		$TEMP0,$ACC7,$ACC7
+	vpmuludq	$Yi,$TEMP1,$TEMP1
+	 vmovdqu	-24+32*1-128($ap),$TEMP0
+	vpaddq		$TEMP1,$ACC8,$ACC8
+	vpmuludq	$Yi,$TEMP2,$TEMP2
+	 vmovdqu	-24+32*2-128($ap),$TEMP1
+	vpaddq		$TEMP2,$ACC9,$ACC9
+
+	add	$r2, $r3
+	imulq	-128($ap),%rbx
+	add	%rbx,$r3
+
+	mov	$r3, %rax
+	imull	$n0, %eax
+	and	\$0x1fffffff, %eax
+
+	vpmuludq	$Bi,$TEMP0,$TEMP0
+	 vmovd		%eax, $Yi
+	vmovdqu		-24+32*3-128($ap),$TEMP2
+	vpaddq		$TEMP0,$ACC1,$ACC1
+	vpmuludq	$Bi,$TEMP1,$TEMP1
+	 vpbroadcastq	$Yi, $Yi
+	vmovdqu		-24+32*4-128($ap),$TEMP0
+	vpaddq		$TEMP1,$ACC2,$ACC2
+	vpmuludq	$Bi,$TEMP2,$TEMP2
+	vmovdqu		-24+32*5-128($ap),$TEMP1
+	vpaddq		$TEMP2,$ACC3,$ACC3
+	vpmuludq	$Bi,$TEMP0,$TEMP0
+	vmovdqu		-24+32*6-128($ap),$TEMP2
+	vpaddq		$TEMP0,$ACC4,$ACC4
+	vpmuludq	$Bi,$TEMP1,$TEMP1
+	vmovdqu		-24+32*7-128($ap),$TEMP0
+	vpaddq		$TEMP1,$ACC5,$ACC5
+	vpmuludq	$Bi,$TEMP2,$TEMP2
+	vmovdqu		-24+32*8-128($ap),$TEMP1
+	vpaddq		$TEMP2,$ACC6,$ACC6
+	vpmuludq	$Bi,$TEMP0,$TEMP0
+	vmovdqu		-24+32*9-128($ap),$TEMP2
+	vpaddq		$TEMP0,$ACC7,$ACC7
+	vpmuludq	$Bi,$TEMP1,$TEMP1
+	vpaddq		$TEMP1,$ACC8,$ACC8
+	vpmuludq	$Bi,$TEMP2,$TEMP2
+	 vpbroadcastq	32($bp), $Bi
+	vpaddq		$TEMP2,$ACC9,$ACC9
+	 add		\$32, $bp			# $bp++
+
+	vmovdqu		-24+32*1-128($np),$TEMP0
+	imulq	-128($np),%rax
+	add	%rax,$r3
+	shr	\$29, $r3
+
+	vmovdqu		-24+32*2-128($np),$TEMP1
+	vpmuludq	$Yi,$TEMP0,$TEMP0
+	 vmovq		$Bi, %rbx
+	vmovdqu		-24+32*3-128($np),$TEMP2
+	vpaddq		$TEMP0,$ACC1,$ACC0		# $ACC0==$TEMP0
+	vpmuludq	$Yi,$TEMP1,$TEMP1
+	 vmovdqu	$ACC0, (%rsp)			# transfer $r0-$r3
+	vpaddq		$TEMP1,$ACC2,$ACC1
+	vmovdqu		-24+32*4-128($np),$TEMP0
+	vpmuludq	$Yi,$TEMP2,$TEMP2
+	vmovdqu		-24+32*5-128($np),$TEMP1
+	vpaddq		$TEMP2,$ACC3,$ACC2
+	vpmuludq	$Yi,$TEMP0,$TEMP0
+	vmovdqu		-24+32*6-128($np),$TEMP2
+	vpaddq		$TEMP0,$ACC4,$ACC3
+	vpmuludq	$Yi,$TEMP1,$TEMP1
+	vmovdqu		-24+32*7-128($np),$TEMP0
+	vpaddq		$TEMP1,$ACC5,$ACC4
+	vpmuludq	$Yi,$TEMP2,$TEMP2
+	vmovdqu		-24+32*8-128($np),$TEMP1
+	vpaddq		$TEMP2,$ACC6,$ACC5
+	vpmuludq	$Yi,$TEMP0,$TEMP0
+	vmovdqu		-24+32*9-128($np),$TEMP2
+	 mov	$r3, $r0
+	vpaddq		$TEMP0,$ACC7,$ACC6
+	vpmuludq	$Yi,$TEMP1,$TEMP1
+	 add	(%rsp), $r0
+	vpaddq		$TEMP1,$ACC8,$ACC7
+	vpmuludq	$Yi,$TEMP2,$TEMP2
+	 vmovq	$r3, $TEMP1
+	vpaddq		$TEMP2,$ACC9,$ACC8
+
+	dec	$i
+	jnz	.Loop_mul_1024
+___
+
+# (*)	Original implementation was correcting ACC1-ACC3 for overflow
+#	after 7 loop runs, or after 28 iterations, or 56 additions.
+#	But as we underutilize resources, it's possible to correct in
+#	each iteration with marginal performance loss. But then, as
+#	we do it in each iteration, we can correct less digits, and
+#	avoid performance penalties completely.
+
+$TEMP0 = $ACC9;
+$TEMP3 = $Bi;
+$TEMP4 = $Yi;
+$code.=<<___;
+	vpaddq		(%rsp), $TEMP1, $ACC0
+
+	vpsrlq		\$29, $ACC0, $TEMP1
+	vpand		$AND_MASK, $ACC0, $ACC0
+	vpsrlq		\$29, $ACC1, $TEMP2
+	vpand		$AND_MASK, $ACC1, $ACC1
+	vpsrlq		\$29, $ACC2, $TEMP3
+	vpermq		\$0x93, $TEMP1, $TEMP1
+	vpand		$AND_MASK, $ACC2, $ACC2
+	vpsrlq		\$29, $ACC3, $TEMP4
+	vpermq		\$0x93, $TEMP2, $TEMP2
+	vpand		$AND_MASK, $ACC3, $ACC3
+
+	vpblendd	\$3, $ZERO, $TEMP1, $TEMP0
+	vpermq		\$0x93, $TEMP3, $TEMP3
+	vpblendd	\$3, $TEMP1, $TEMP2, $TEMP1
+	vpermq		\$0x93, $TEMP4, $TEMP4
+	vpaddq		$TEMP0, $ACC0, $ACC0
+	vpblendd	\$3, $TEMP2, $TEMP3, $TEMP2
+	vpaddq		$TEMP1, $ACC1, $ACC1
+	vpblendd	\$3, $TEMP3, $TEMP4, $TEMP3
+	vpaddq		$TEMP2, $ACC2, $ACC2
+	vpblendd	\$3, $TEMP4, $ZERO, $TEMP4
+	vpaddq		$TEMP3, $ACC3, $ACC3
+	vpaddq		$TEMP4, $ACC4, $ACC4
+
+	vpsrlq		\$29, $ACC0, $TEMP1
+	vpand		$AND_MASK, $ACC0, $ACC0
+	vpsrlq		\$29, $ACC1, $TEMP2
+	vpand		$AND_MASK, $ACC1, $ACC1
+	vpsrlq		\$29, $ACC2, $TEMP3
+	vpermq		\$0x93, $TEMP1, $TEMP1
+	vpand		$AND_MASK, $ACC2, $ACC2
+	vpsrlq		\$29, $ACC3, $TEMP4
+	vpermq		\$0x93, $TEMP2, $TEMP2
+	vpand		$AND_MASK, $ACC3, $ACC3
+	vpermq		\$0x93, $TEMP3, $TEMP3
+
+	vpblendd	\$3, $ZERO, $TEMP1, $TEMP0
+	vpermq		\$0x93, $TEMP4, $TEMP4
+	vpblendd	\$3, $TEMP1, $TEMP2, $TEMP1
+	vpaddq		$TEMP0, $ACC0, $ACC0
+	vpblendd	\$3, $TEMP2, $TEMP3, $TEMP2
+	vpaddq		$TEMP1, $ACC1, $ACC1
+	vpblendd	\$3, $TEMP3, $TEMP4, $TEMP3
+	vpaddq		$TEMP2, $ACC2, $ACC2
+	vpblendd	\$3, $TEMP4, $ZERO, $TEMP4
+	vpaddq		$TEMP3, $ACC3, $ACC3
+	vpaddq		$TEMP4, $ACC4, $ACC4
+
+	vmovdqu		$ACC0, 0-128($rp)
+	vmovdqu		$ACC1, 32-128($rp)
+	vmovdqu		$ACC2, 64-128($rp)
+	vmovdqu		$ACC3, 96-128($rp)
+___
+
+$TEMP5=$ACC0;
+$code.=<<___;
+	vpsrlq		\$29, $ACC4, $TEMP1
+	vpand		$AND_MASK, $ACC4, $ACC4
+	vpsrlq		\$29, $ACC5, $TEMP2
+	vpand		$AND_MASK, $ACC5, $ACC5
+	vpsrlq		\$29, $ACC6, $TEMP3
+	vpermq		\$0x93, $TEMP1, $TEMP1
+	vpand		$AND_MASK, $ACC6, $ACC6
+	vpsrlq		\$29, $ACC7, $TEMP4
+	vpermq		\$0x93, $TEMP2, $TEMP2
+	vpand		$AND_MASK, $ACC7, $ACC7
+	vpsrlq		\$29, $ACC8, $TEMP5
+	vpermq		\$0x93, $TEMP3, $TEMP3
+	vpand		$AND_MASK, $ACC8, $ACC8
+	vpermq		\$0x93, $TEMP4, $TEMP4
+
+	vpblendd	\$3, $ZERO, $TEMP1, $TEMP0
+	vpermq		\$0x93, $TEMP5, $TEMP5
+	vpblendd	\$3, $TEMP1, $TEMP2, $TEMP1
+	vpaddq		$TEMP0, $ACC4, $ACC4
+	vpblendd	\$3, $TEMP2, $TEMP3, $TEMP2
+	vpaddq		$TEMP1, $ACC5, $ACC5
+	vpblendd	\$3, $TEMP3, $TEMP4, $TEMP3
+	vpaddq		$TEMP2, $ACC6, $ACC6
+	vpblendd	\$3, $TEMP4, $TEMP5, $TEMP4
+	vpaddq		$TEMP3, $ACC7, $ACC7
+	vpaddq		$TEMP4, $ACC8, $ACC8
+
+	vpsrlq		\$29, $ACC4, $TEMP1
+	vpand		$AND_MASK, $ACC4, $ACC4
+	vpsrlq		\$29, $ACC5, $TEMP2
+	vpand		$AND_MASK, $ACC5, $ACC5
+	vpsrlq		\$29, $ACC6, $TEMP3
+	vpermq		\$0x93, $TEMP1, $TEMP1
+	vpand		$AND_MASK, $ACC6, $ACC6
+	vpsrlq		\$29, $ACC7, $TEMP4
+	vpermq		\$0x93, $TEMP2, $TEMP2
+	vpand		$AND_MASK, $ACC7, $ACC7
+	vpsrlq		\$29, $ACC8, $TEMP5
+	vpermq		\$0x93, $TEMP3, $TEMP3
+	vpand		$AND_MASK, $ACC8, $ACC8
+	vpermq		\$0x93, $TEMP4, $TEMP4
+
+	vpblendd	\$3, $ZERO, $TEMP1, $TEMP0
+	vpermq		\$0x93, $TEMP5, $TEMP5
+	vpblendd	\$3, $TEMP1, $TEMP2, $TEMP1
+	vpaddq		$TEMP0, $ACC4, $ACC4
+	vpblendd	\$3, $TEMP2, $TEMP3, $TEMP2
+	vpaddq		$TEMP1, $ACC5, $ACC5
+	vpblendd	\$3, $TEMP3, $TEMP4, $TEMP3
+	vpaddq		$TEMP2, $ACC6, $ACC6
+	vpblendd	\$3, $TEMP4, $TEMP5, $TEMP4
+	vpaddq		$TEMP3, $ACC7, $ACC7
+	vpaddq		$TEMP4, $ACC8, $ACC8
+
+	vmovdqu		$ACC4, 128-128($rp)
+	vmovdqu		$ACC5, 160-128($rp)
+	vmovdqu		$ACC6, 192-128($rp)
+	vmovdqu		$ACC7, 224-128($rp)
+	vmovdqu		$ACC8, 256-128($rp)
+	vzeroupper
+
+	mov	%rbp, %rax
+.cfi_def_cfa_register	%rax
+___
+$code.=<<___ if ($win64);
+.Lmul_1024_in_tail:
+	movaps	-0xd8(%rax),%xmm6
+	movaps	-0xc8(%rax),%xmm7
+	movaps	-0xb8(%rax),%xmm8
+	movaps	-0xa8(%rax),%xmm9
+	movaps	-0x98(%rax),%xmm10
+	movaps	-0x88(%rax),%xmm11
+	movaps	-0x78(%rax),%xmm12
+	movaps	-0x68(%rax),%xmm13
+	movaps	-0x58(%rax),%xmm14
+	movaps	-0x48(%rax),%xmm15
+___
+$code.=<<___;
+	mov	-48(%rax),%r15
+.cfi_restore	%r15
+	mov	-40(%rax),%r14
+.cfi_restore	%r14
+	mov	-32(%rax),%r13
+.cfi_restore	%r13
+	mov	-24(%rax),%r12
+.cfi_restore	%r12
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp		# restore %rsp
+.cfi_def_cfa_register	%rsp
+.Lmul_1024_epilogue:
+	ret
+.cfi_endproc
+.size	rsaz_1024_mul_avx2,.-rsaz_1024_mul_avx2
+___
+}
+{
+my ($out,$inp) = $win64 ? ("%rcx","%rdx") : ("%rdi","%rsi");
+my @T = map("%r$_",(8..11));
+
+$code.=<<___;
+.globl	rsaz_1024_red2norm_avx2
+.type	rsaz_1024_red2norm_avx2,\@abi-omnipotent
+.align	32
+rsaz_1024_red2norm_avx2:
+.cfi_startproc
+	sub	\$-128,$inp	# size optimization
+	xor	%rax,%rax
+___
+
+for ($j=0,$i=0; $i<16; $i++) {
+    my $k=0;
+    while (29*$j<64*($i+1)) {	# load data till boundary
+	$code.="	mov	`8*$j-128`($inp), @T[0]\n";
+	$j++; $k++; push(@T,shift(@T));
+    }
+    $l=$k;
+    while ($k>1) {		# shift loaded data but last value
+	$code.="	shl	\$`29*($j-$k)`,@T[-$k]\n";
+	$k--;
+    }
+    $code.=<<___;		# shift last value
+	mov	@T[-1], @T[0]
+	shl	\$`29*($j-1)`, @T[-1]
+	shr	\$`-29*($j-1)`, @T[0]
+___
+    while ($l) {		# accumulate all values
+	$code.="	add	@T[-$l], %rax\n";
+	$l--;
+    }
+	$code.=<<___;
+	adc	\$0, @T[0]	# consume eventual carry
+	mov	%rax, 8*$i($out)
+	mov	@T[0], %rax
+___
+    push(@T,shift(@T));
+}
+$code.=<<___;
+	ret
+.cfi_endproc
+.size	rsaz_1024_red2norm_avx2,.-rsaz_1024_red2norm_avx2
+
+.globl	rsaz_1024_norm2red_avx2
+.type	rsaz_1024_norm2red_avx2,\@abi-omnipotent
+.align	32
+rsaz_1024_norm2red_avx2:
+.cfi_startproc
+	sub	\$-128,$out	# size optimization
+	mov	($inp),@T[0]
+	mov	\$0x1fffffff,%eax
+___
+for ($j=0,$i=0; $i<16; $i++) {
+    $code.="	mov	`8*($i+1)`($inp),@T[1]\n"	if ($i<15);
+    $code.="	xor	@T[1],@T[1]\n"			if ($i==15);
+    my $k=1;
+    while (29*($j+1)<64*($i+1)) {
+    	$code.=<<___;
+	mov	@T[0],@T[-$k]
+	shr	\$`29*$j`,@T[-$k]
+	and	%rax,@T[-$k]				# &0x1fffffff
+	mov	@T[-$k],`8*$j-128`($out)
+___
+	$j++; $k++;
+    }
+    $code.=<<___;
+	shrd	\$`29*$j`,@T[1],@T[0]
+	and	%rax,@T[0]
+	mov	@T[0],`8*$j-128`($out)
+___
+    $j++;
+    push(@T,shift(@T));
+}
+$code.=<<___;
+	mov	@T[0],`8*$j-128`($out)			# zero
+	mov	@T[0],`8*($j+1)-128`($out)
+	mov	@T[0],`8*($j+2)-128`($out)
+	mov	@T[0],`8*($j+3)-128`($out)
+	ret
+.cfi_endproc
+.size	rsaz_1024_norm2red_avx2,.-rsaz_1024_norm2red_avx2
+___
+}
+{
+my ($out,$inp,$power) = $win64 ? ("%rcx","%rdx","%r8d") : ("%rdi","%rsi","%edx");
+
+$code.=<<___;
+.globl	rsaz_1024_scatter5_avx2
+.type	rsaz_1024_scatter5_avx2,\@abi-omnipotent
+.align	32
+rsaz_1024_scatter5_avx2:
+.cfi_startproc
+	vzeroupper
+	vmovdqu	.Lscatter_permd(%rip),%ymm5
+	shl	\$4,$power
+	lea	($out,$power),$out
+	mov	\$9,%eax
+	jmp	.Loop_scatter_1024
+
+.align	32
+.Loop_scatter_1024:
+	vmovdqu		($inp),%ymm0
+	lea		32($inp),$inp
+	vpermd		%ymm0,%ymm5,%ymm0
+	vmovdqu		%xmm0,($out)
+	lea		16*32($out),$out
+	dec	%eax
+	jnz	.Loop_scatter_1024
+
+	vzeroupper
+	ret
+.cfi_endproc
+.size	rsaz_1024_scatter5_avx2,.-rsaz_1024_scatter5_avx2
+
+.globl	rsaz_1024_gather5_avx2
+.type	rsaz_1024_gather5_avx2,\@abi-omnipotent
+.align	32
+rsaz_1024_gather5_avx2:
+.cfi_startproc
+	vzeroupper
+	mov	%rsp,%r11
+.cfi_def_cfa_register	%r11
+___
+$code.=<<___ if ($win64);
+	lea	-0x88(%rsp),%rax
+.LSEH_begin_rsaz_1024_gather5:
+	# I can't trust assembler to use specific encoding:-(
+	.byte	0x48,0x8d,0x60,0xe0		# lea	-0x20(%rax),%rsp
+	.byte	0xc5,0xf8,0x29,0x70,0xe0	# vmovaps %xmm6,-0x20(%rax)
+	.byte	0xc5,0xf8,0x29,0x78,0xf0	# vmovaps %xmm7,-0x10(%rax)
+	.byte	0xc5,0x78,0x29,0x40,0x00	# vmovaps %xmm8,0(%rax)
+	.byte	0xc5,0x78,0x29,0x48,0x10	# vmovaps %xmm9,0x10(%rax)
+	.byte	0xc5,0x78,0x29,0x50,0x20	# vmovaps %xmm10,0x20(%rax)
+	.byte	0xc5,0x78,0x29,0x58,0x30	# vmovaps %xmm11,0x30(%rax)
+	.byte	0xc5,0x78,0x29,0x60,0x40	# vmovaps %xmm12,0x40(%rax)
+	.byte	0xc5,0x78,0x29,0x68,0x50	# vmovaps %xmm13,0x50(%rax)
+	.byte	0xc5,0x78,0x29,0x70,0x60	# vmovaps %xmm14,0x60(%rax)
+	.byte	0xc5,0x78,0x29,0x78,0x70	# vmovaps %xmm15,0x70(%rax)
+___
+$code.=<<___;
+	lea	-0x100(%rsp),%rsp
+	and	\$-32, %rsp
+	lea	.Linc(%rip), %r10
+	lea	-128(%rsp),%rax			# control u-op density
+
+	vmovd		$power, %xmm4
+	vmovdqa		(%r10),%ymm0
+	vmovdqa		32(%r10),%ymm1
+	vmovdqa		64(%r10),%ymm5
+	vpbroadcastd	%xmm4,%ymm4
+
+	vpaddd		%ymm5, %ymm0, %ymm2
+	vpcmpeqd	%ymm4, %ymm0, %ymm0
+	vpaddd		%ymm5, %ymm1, %ymm3
+	vpcmpeqd	%ymm4, %ymm1, %ymm1
+	vmovdqa		%ymm0, 32*0+128(%rax)
+	vpaddd		%ymm5, %ymm2, %ymm0
+	vpcmpeqd	%ymm4, %ymm2, %ymm2
+	vmovdqa		%ymm1, 32*1+128(%rax)
+	vpaddd		%ymm5, %ymm3, %ymm1
+	vpcmpeqd	%ymm4, %ymm3, %ymm3
+	vmovdqa		%ymm2, 32*2+128(%rax)
+	vpaddd		%ymm5, %ymm0, %ymm2
+	vpcmpeqd	%ymm4, %ymm0, %ymm0
+	vmovdqa		%ymm3, 32*3+128(%rax)
+	vpaddd		%ymm5, %ymm1, %ymm3
+	vpcmpeqd	%ymm4, %ymm1, %ymm1
+	vmovdqa		%ymm0, 32*4+128(%rax)
+	vpaddd		%ymm5, %ymm2, %ymm8
+	vpcmpeqd	%ymm4, %ymm2, %ymm2
+	vmovdqa		%ymm1, 32*5+128(%rax)
+	vpaddd		%ymm5, %ymm3, %ymm9
+	vpcmpeqd	%ymm4, %ymm3, %ymm3
+	vmovdqa		%ymm2, 32*6+128(%rax)
+	vpaddd		%ymm5, %ymm8, %ymm10
+	vpcmpeqd	%ymm4, %ymm8, %ymm8
+	vmovdqa		%ymm3, 32*7+128(%rax)
+	vpaddd		%ymm5, %ymm9, %ymm11
+	vpcmpeqd	%ymm4, %ymm9, %ymm9
+	vpaddd		%ymm5, %ymm10, %ymm12
+	vpcmpeqd	%ymm4, %ymm10, %ymm10
+	vpaddd		%ymm5, %ymm11, %ymm13
+	vpcmpeqd	%ymm4, %ymm11, %ymm11
+	vpaddd		%ymm5, %ymm12, %ymm14
+	vpcmpeqd	%ymm4, %ymm12, %ymm12
+	vpaddd		%ymm5, %ymm13, %ymm15
+	vpcmpeqd	%ymm4, %ymm13, %ymm13
+	vpcmpeqd	%ymm4, %ymm14, %ymm14
+	vpcmpeqd	%ymm4, %ymm15, %ymm15
+
+	vmovdqa	-32(%r10),%ymm7			# .Lgather_permd
+	lea	128($inp), $inp
+	mov	\$9,$power
+
+.Loop_gather_1024:
+	vmovdqa		32*0-128($inp),	%ymm0
+	vmovdqa		32*1-128($inp),	%ymm1
+	vmovdqa		32*2-128($inp),	%ymm2
+	vmovdqa		32*3-128($inp),	%ymm3
+	vpand		32*0+128(%rax),	%ymm0,	%ymm0
+	vpand		32*1+128(%rax),	%ymm1,	%ymm1
+	vpand		32*2+128(%rax),	%ymm2,	%ymm2
+	vpor		%ymm0, %ymm1, %ymm4
+	vpand		32*3+128(%rax),	%ymm3,	%ymm3
+	vmovdqa		32*4-128($inp),	%ymm0
+	vmovdqa		32*5-128($inp),	%ymm1
+	vpor		%ymm2, %ymm3, %ymm5
+	vmovdqa		32*6-128($inp),	%ymm2
+	vmovdqa		32*7-128($inp),	%ymm3
+	vpand		32*4+128(%rax),	%ymm0,	%ymm0
+	vpand		32*5+128(%rax),	%ymm1,	%ymm1
+	vpand		32*6+128(%rax),	%ymm2,	%ymm2
+	vpor		%ymm0, %ymm4, %ymm4
+	vpand		32*7+128(%rax),	%ymm3,	%ymm3
+	vpand		32*8-128($inp),	%ymm8,	%ymm0
+	vpor		%ymm1, %ymm5, %ymm5
+	vpand		32*9-128($inp),	%ymm9,	%ymm1
+	vpor		%ymm2, %ymm4, %ymm4
+	vpand		32*10-128($inp),%ymm10,	%ymm2
+	vpor		%ymm3, %ymm5, %ymm5
+	vpand		32*11-128($inp),%ymm11,	%ymm3
+	vpor		%ymm0, %ymm4, %ymm4
+	vpand		32*12-128($inp),%ymm12,	%ymm0
+	vpor		%ymm1, %ymm5, %ymm5
+	vpand		32*13-128($inp),%ymm13,	%ymm1
+	vpor		%ymm2, %ymm4, %ymm4
+	vpand		32*14-128($inp),%ymm14,	%ymm2
+	vpor		%ymm3, %ymm5, %ymm5
+	vpand		32*15-128($inp),%ymm15,	%ymm3
+	lea		32*16($inp), $inp
+	vpor		%ymm0, %ymm4, %ymm4
+	vpor		%ymm1, %ymm5, %ymm5
+	vpor		%ymm2, %ymm4, %ymm4
+	vpor		%ymm3, %ymm5, %ymm5
+
+	vpor		%ymm5, %ymm4, %ymm4
+	vextracti128	\$1, %ymm4, %xmm5	# upper half is cleared
+	vpor		%xmm4, %xmm5, %xmm5
+	vpermd		%ymm5,%ymm7,%ymm5
+	vmovdqu		%ymm5,($out)
+	lea		32($out),$out
+	dec	$power
+	jnz	.Loop_gather_1024
+
+	vpxor	%ymm0,%ymm0,%ymm0
+	vmovdqu	%ymm0,($out)
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	movaps	-0xa8(%r11),%xmm6
+	movaps	-0x98(%r11),%xmm7
+	movaps	-0x88(%r11),%xmm8
+	movaps	-0x78(%r11),%xmm9
+	movaps	-0x68(%r11),%xmm10
+	movaps	-0x58(%r11),%xmm11
+	movaps	-0x48(%r11),%xmm12
+	movaps	-0x38(%r11),%xmm13
+	movaps	-0x28(%r11),%xmm14
+	movaps	-0x18(%r11),%xmm15
+___
+$code.=<<___;
+	lea	(%r11),%rsp
+.cfi_def_cfa_register	%rsp
+	ret
+.cfi_endproc
+.LSEH_end_rsaz_1024_gather5:
+.size	rsaz_1024_gather5_avx2,.-rsaz_1024_gather5_avx2
+___
+}
+
+$code.=<<___;
+.extern	OPENSSL_ia32cap_P
+.globl	rsaz_avx2_eligible
+.type	rsaz_avx2_eligible,\@abi-omnipotent
+.align	32
+rsaz_avx2_eligible:
+	mov	OPENSSL_ia32cap_P+8(%rip),%eax
+___
+$code.=<<___	if ($addx);
+	mov	\$`1<<8|1<<19`,%ecx
+	mov	\$0,%edx
+	and	%eax,%ecx
+	cmp	\$`1<<8|1<<19`,%ecx	# check for BMI2+AD*X
+	cmove	%edx,%eax
+___
+$code.=<<___;
+	and	\$`1<<5`,%eax
+	shr	\$5,%eax
+	ret
+.size	rsaz_avx2_eligible,.-rsaz_avx2_eligible
+
+.align	64
+.Land_mask:
+	.quad	0x1fffffff,0x1fffffff,0x1fffffff,0x1fffffff
+.Lscatter_permd:
+	.long	0,2,4,6,7,7,7,7
+.Lgather_permd:
+	.long	0,7,1,7,2,7,3,7
+.Linc:
+	.long	0,0,0,0, 1,1,1,1
+	.long	2,2,2,2, 3,3,3,3
+	.long	4,4,4,4, 4,4,4,4
+.align	64
+___
+
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___
+.extern	__imp_RtlVirtualUnwind
+.type	rsaz_se_handler,\@abi-omnipotent
+.align	16
+rsaz_se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lcommon_seh_tail
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lcommon_seh_tail
+
+	mov	160($context),%rbp	# pull context->Rbp
+
+	mov	8(%r11),%r10d		# HandlerData[2]
+	lea	(%rsi,%r10),%r10	# "in tail" label
+	cmp	%r10,%rbx		# context->Rip>="in tail" label
+	cmovc	%rbp,%rax
+
+	mov	-48(%rax),%r15
+	mov	-40(%rax),%r14
+	mov	-32(%rax),%r13
+	mov	-24(%rax),%r12
+	mov	-16(%rax),%rbp
+	mov	-8(%rax),%rbx
+	mov	%r15,240($context)
+	mov	%r14,232($context)
+	mov	%r13,224($context)
+	mov	%r12,216($context)
+	mov	%rbp,160($context)
+	mov	%rbx,144($context)
+
+	lea	-0xd8(%rax),%rsi	# %xmm save area
+	lea	512($context),%rdi	# & context.Xmm6
+	mov	\$20,%ecx		# 10*sizeof(%xmm0)/sizeof(%rax)
+	.long	0xa548f3fc		# cld; rep movsq
+
+.Lcommon_seh_tail:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	rsaz_se_handler,.-rsaz_se_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_rsaz_1024_sqr_avx2
+	.rva	.LSEH_end_rsaz_1024_sqr_avx2
+	.rva	.LSEH_info_rsaz_1024_sqr_avx2
+
+	.rva	.LSEH_begin_rsaz_1024_mul_avx2
+	.rva	.LSEH_end_rsaz_1024_mul_avx2
+	.rva	.LSEH_info_rsaz_1024_mul_avx2
+
+	.rva	.LSEH_begin_rsaz_1024_gather5
+	.rva	.LSEH_end_rsaz_1024_gather5
+	.rva	.LSEH_info_rsaz_1024_gather5
+.section	.xdata
+.align	8
+.LSEH_info_rsaz_1024_sqr_avx2:
+	.byte	9,0,0,0
+	.rva	rsaz_se_handler
+	.rva	.Lsqr_1024_body,.Lsqr_1024_epilogue,.Lsqr_1024_in_tail
+	.long	0
+.LSEH_info_rsaz_1024_mul_avx2:
+	.byte	9,0,0,0
+	.rva	rsaz_se_handler
+	.rva	.Lmul_1024_body,.Lmul_1024_epilogue,.Lmul_1024_in_tail
+	.long	0
+.LSEH_info_rsaz_1024_gather5:
+	.byte	0x01,0x36,0x17,0x0b
+	.byte	0x36,0xf8,0x09,0x00	# vmovaps 0x90(rsp),xmm15
+	.byte	0x31,0xe8,0x08,0x00	# vmovaps 0x80(rsp),xmm14
+	.byte	0x2c,0xd8,0x07,0x00	# vmovaps 0x70(rsp),xmm13
+	.byte	0x27,0xc8,0x06,0x00	# vmovaps 0x60(rsp),xmm12
+	.byte	0x22,0xb8,0x05,0x00	# vmovaps 0x50(rsp),xmm11
+	.byte	0x1d,0xa8,0x04,0x00	# vmovaps 0x40(rsp),xmm10
+	.byte	0x18,0x98,0x03,0x00	# vmovaps 0x30(rsp),xmm9
+	.byte	0x13,0x88,0x02,0x00	# vmovaps 0x20(rsp),xmm8
+	.byte	0x0e,0x78,0x01,0x00	# vmovaps 0x10(rsp),xmm7
+	.byte	0x09,0x68,0x00,0x00	# vmovaps 0x00(rsp),xmm6
+	.byte	0x04,0x01,0x15,0x00	# sub	  rsp,0xa8
+	.byte	0x00,0xb3,0x00,0x00	# set_frame r11
+___
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval($1)/ge;
+
+	s/\b(sh[rl]d?\s+\$)(-?[0-9]+)/$1.$2%64/ge		or
+
+	s/\b(vmov[dq])\b(.+)%ymm([0-9]+)/$1$2%xmm$3/go		or
+	s/\b(vmovdqu)\b(.+)%x%ymm([0-9]+)/$1$2%xmm$3/go		or
+	s/\b(vpinsr[qd])\b(.+)%ymm([0-9]+)/$1$2%xmm$3/go	or
+	s/\b(vpextr[qd])\b(.+)%ymm([0-9]+)/$1$2%xmm$3/go	or
+	s/\b(vpbroadcast[qd]\s+)%ymm([0-9]+)/$1%xmm$2/go;
+	print $_,"\n";
+}
+
+}}} else {{{
+print <<___;	# assembler is too old
+.text
+
+.globl	rsaz_avx2_eligible
+.type	rsaz_avx2_eligible,\@abi-omnipotent
+rsaz_avx2_eligible:
+	xor	%eax,%eax
+	ret
+.size	rsaz_avx2_eligible,.-rsaz_avx2_eligible
+
+.globl	rsaz_1024_sqr_avx2
+.globl	rsaz_1024_mul_avx2
+.globl	rsaz_1024_norm2red_avx2
+.globl	rsaz_1024_red2norm_avx2
+.globl	rsaz_1024_scatter5_avx2
+.globl	rsaz_1024_gather5_avx2
+.type	rsaz_1024_sqr_avx2,\@abi-omnipotent
+rsaz_1024_sqr_avx2:
+rsaz_1024_mul_avx2:
+rsaz_1024_norm2red_avx2:
+rsaz_1024_red2norm_avx2:
+rsaz_1024_scatter5_avx2:
+rsaz_1024_gather5_avx2:
+	.byte	0x0f,0x0b	# ud2
+	ret
+.size	rsaz_1024_sqr_avx2,.-rsaz_1024_sqr_avx2
+___
+}}}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/rsaz-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/rsaz-x86_64.pl
new file mode 100755
index 000000000..b1797b649
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/rsaz-x86_64.pl
@@ -0,0 +1,2404 @@
+#! /usr/bin/env perl
+# Copyright 2013-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright (c) 2012, Intel Corporation. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# Originally written by Shay Gueron (1, 2), and Vlad Krasnov (1)
+# (1) Intel Corporation, Israel Development Center, Haifa, Israel
+# (2) University of Haifa, Israel
+#
+# References:
+# [1] S. Gueron, "Efficient Software Implementations of Modular
+#     Exponentiation", http://eprint.iacr.org/2011/239
+# [2] S. Gueron, V. Krasnov. "Speeding up Big-Numbers Squaring".
+#     IEEE Proceedings of 9th International Conference on Information
+#     Technology: New Generations (ITNG 2012), 821-823 (2012).
+# [3] S. Gueron, Efficient Software Implementations of Modular Exponentiation
+#     Journal of Cryptographic Engineering 2:31-43 (2012).
+# [4] S. Gueron, V. Krasnov: "[PATCH] Efficient and side channel analysis
+#     resistant 512-bit and 1024-bit modular exponentiation for optimizing
+#     RSA1024 and RSA2048 on x86_64 platforms",
+#     http://rt.openssl.org/Ticket/Display.html?id=2582&user=guest&pass=guest
+#
+# While original submission covers 512- and 1024-bit exponentiation,
+# this module is limited to 512-bit version only (and as such
+# accelerates RSA1024 sign). This is because improvement for longer
+# keys is not high enough to justify the effort, highest measured
+# was ~5% on Westmere. [This is relative to OpenSSL 1.0.2, upcoming
+# for the moment of this writing!] Nor does this module implement
+# "monolithic" complete exponentiation jumbo-subroutine, but adheres
+# to more modular mixture of C and assembly. And it's optimized even
+# for processors other than Intel Core family (see table below for
+# improvement coefficients).
+# 						<appro@openssl.org>
+#
+# RSA1024 sign/sec	this/original	|this/rsax(*)	this/fips(*)
+#			----------------+---------------------------
+# Opteron		+13%		|+5%		+20%
+# Bulldozer		-0%		|-1%		+10%
+# P4			+11%		|+7%		+8%
+# Westmere		+5%		|+14%		+17%
+# Sandy Bridge		+2%		|+12%		+29%
+# Ivy Bridge		+1%		|+11%		+35%
+# Haswell(**)		-0%		|+12%		+39%
+# Atom			+13%		|+11%		+4%
+# VIA Nano		+70%		|+9%		+25%
+#
+# (*)	rsax engine and fips numbers are presented for reference
+#	purposes;
+# (**)	MULX was attempted, but found to give only marginal improvement;
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$addx = ($1>=2.23);
+}
+
+if (!$addx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	    `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$addx = ($1>=2.10);
+}
+
+if (!$addx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	    `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$addx = ($1>=12);
+}
+
+if (!$addx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([3-9])\.([0-9]+)/) {
+	my $ver = $2 + $3/100.0;	# 3.1->3.01, 3.10->3.10
+	$addx = ($ver>=3.03);
+}
+
+($out, $inp, $mod) = ("%rdi", "%rsi", "%rbp");	# common internal API
+{
+my ($out,$inp,$mod,$n0,$times) = ("%rdi","%rsi","%rdx","%rcx","%r8d");
+
+$code.=<<___;
+.text
+
+.extern	OPENSSL_ia32cap_P
+
+.globl	rsaz_512_sqr
+.type	rsaz_512_sqr,\@function,5
+.align	32
+rsaz_512_sqr:				# 25-29% faster than rsaz_512_mul
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+
+	subq	\$128+24, %rsp
+.cfi_adjust_cfa_offset	128+24
+.Lsqr_body:
+	movq	$mod, %rbp		# common argument
+	movq	($inp), %rdx
+	movq	8($inp), %rax
+	movq	$n0, 128(%rsp)
+___
+$code.=<<___ if ($addx);
+	movl	\$0x80100,%r11d
+	andl	OPENSSL_ia32cap_P+8(%rip),%r11d
+	cmpl	\$0x80100,%r11d		# check for MULX and ADO/CX
+	je	.Loop_sqrx
+___
+$code.=<<___;
+	jmp	.Loop_sqr
+
+.align	32
+.Loop_sqr:
+	movl	$times,128+8(%rsp)
+#first iteration
+	movq	%rdx, %rbx
+	mulq	%rdx
+	movq	%rax, %r8
+	movq	16($inp), %rax
+	movq	%rdx, %r9
+
+	mulq	%rbx
+	addq	%rax, %r9
+	movq	24($inp), %rax
+	movq	%rdx, %r10
+	adcq	\$0, %r10
+
+	mulq	%rbx
+	addq	%rax, %r10
+	movq	32($inp), %rax
+	movq	%rdx, %r11
+	adcq	\$0, %r11
+
+	mulq	%rbx
+	addq	%rax, %r11
+	movq	40($inp), %rax
+	movq	%rdx, %r12
+	adcq	\$0, %r12
+
+	mulq	%rbx
+	addq	%rax, %r12
+	movq	48($inp), %rax
+	movq	%rdx, %r13
+	adcq	\$0, %r13
+
+	mulq	%rbx
+	addq	%rax, %r13
+	movq	56($inp), %rax
+	movq	%rdx, %r14
+	adcq	\$0, %r14
+
+	mulq	%rbx
+	addq	%rax, %r14
+	movq	%rbx, %rax
+	movq	%rdx, %r15
+	adcq	\$0, %r15
+
+	addq	%r8, %r8		#shlq	\$1, %r8
+	movq	%r9, %rcx
+	adcq	%r9, %r9		#shld	\$1, %r8, %r9
+
+	mulq	%rax
+	movq	%rax, (%rsp)
+	addq	%rdx, %r8
+	adcq	\$0, %r9
+
+	movq	%r8, 8(%rsp)
+	shrq	\$63, %rcx
+
+#second iteration
+	movq	8($inp), %r8
+	movq	16($inp), %rax
+	mulq	%r8
+	addq	%rax, %r10
+	movq	24($inp), %rax
+	movq	%rdx, %rbx
+	adcq	\$0, %rbx
+
+	mulq	%r8
+	addq	%rax, %r11
+	movq	32($inp), %rax
+	adcq	\$0, %rdx
+	addq	%rbx, %r11
+	movq	%rdx, %rbx
+	adcq	\$0, %rbx
+
+	mulq	%r8
+	addq	%rax, %r12
+	movq	40($inp), %rax
+	adcq	\$0, %rdx
+	addq	%rbx, %r12
+	movq	%rdx, %rbx
+	adcq	\$0, %rbx
+
+	mulq	%r8
+	addq	%rax, %r13
+	movq	48($inp), %rax
+	adcq	\$0, %rdx
+	addq	%rbx, %r13
+	movq	%rdx, %rbx
+	adcq	\$0, %rbx
+
+	mulq	%r8
+	addq	%rax, %r14
+	movq	56($inp), %rax
+	adcq	\$0, %rdx
+	addq	%rbx, %r14
+	movq	%rdx, %rbx
+	adcq	\$0, %rbx
+
+	mulq	%r8
+	addq	%rax, %r15
+	movq	%r8, %rax
+	adcq	\$0, %rdx
+	addq	%rbx, %r15
+	movq	%rdx, %r8
+	movq	%r10, %rdx
+	adcq	\$0, %r8
+
+	add	%rdx, %rdx
+	lea	(%rcx,%r10,2), %r10	#shld	\$1, %rcx, %r10
+	movq	%r11, %rbx
+	adcq	%r11, %r11		#shld	\$1, %r10, %r11
+
+	mulq	%rax
+	addq	%rax, %r9
+	adcq	%rdx, %r10
+	adcq	\$0, %r11
+
+	movq	%r9, 16(%rsp)
+	movq	%r10, 24(%rsp)
+	shrq	\$63, %rbx
+
+#third iteration
+	movq	16($inp), %r9
+	movq	24($inp), %rax
+	mulq	%r9
+	addq	%rax, %r12
+	movq	32($inp), %rax
+	movq	%rdx, %rcx
+	adcq	\$0, %rcx
+
+	mulq	%r9
+	addq	%rax, %r13
+	movq	40($inp), %rax
+	adcq	\$0, %rdx
+	addq	%rcx, %r13
+	movq	%rdx, %rcx
+	adcq	\$0, %rcx
+
+	mulq	%r9
+	addq	%rax, %r14
+	movq	48($inp), %rax
+	adcq	\$0, %rdx
+	addq	%rcx, %r14
+	movq	%rdx, %rcx
+	adcq	\$0, %rcx
+
+	mulq	%r9
+	 movq	%r12, %r10
+	 lea	(%rbx,%r12,2), %r12	#shld	\$1, %rbx, %r12
+	addq	%rax, %r15
+	movq	56($inp), %rax
+	adcq	\$0, %rdx
+	addq	%rcx, %r15
+	movq	%rdx, %rcx
+	adcq	\$0, %rcx
+
+	mulq	%r9
+	 shrq	\$63, %r10
+	addq	%rax, %r8
+	movq	%r9, %rax
+	adcq	\$0, %rdx
+	addq	%rcx, %r8
+	movq	%rdx, %r9
+	adcq	\$0, %r9
+
+	movq	%r13, %rcx
+	leaq	(%r10,%r13,2), %r13	#shld	\$1, %r12, %r13
+
+	mulq	%rax
+	addq	%rax, %r11
+	adcq	%rdx, %r12
+	adcq	\$0, %r13
+
+	movq	%r11, 32(%rsp)
+	movq	%r12, 40(%rsp)
+	shrq	\$63, %rcx
+
+#fourth iteration
+	movq	24($inp), %r10
+	movq	32($inp), %rax
+	mulq	%r10
+	addq	%rax, %r14
+	movq	40($inp), %rax
+	movq	%rdx, %rbx
+	adcq	\$0, %rbx
+
+	mulq	%r10
+	addq	%rax, %r15
+	movq	48($inp), %rax
+	adcq	\$0, %rdx
+	addq	%rbx, %r15
+	movq	%rdx, %rbx
+	adcq	\$0, %rbx
+
+	mulq	%r10
+	 movq	%r14, %r12
+	 leaq	(%rcx,%r14,2), %r14	#shld	\$1, %rcx, %r14
+	addq	%rax, %r8
+	movq	56($inp), %rax
+	adcq	\$0, %rdx
+	addq	%rbx, %r8
+	movq	%rdx, %rbx
+	adcq	\$0, %rbx
+
+	mulq	%r10
+	 shrq	\$63, %r12
+	addq	%rax, %r9
+	movq	%r10, %rax
+	adcq	\$0, %rdx
+	addq	%rbx, %r9
+	movq	%rdx, %r10
+	adcq	\$0, %r10
+
+	movq	%r15, %rbx
+	leaq	(%r12,%r15,2),%r15	#shld	\$1, %r14, %r15
+
+	mulq	%rax
+	addq	%rax, %r13
+	adcq	%rdx, %r14
+	adcq	\$0, %r15
+
+	movq	%r13, 48(%rsp)
+	movq	%r14, 56(%rsp)
+	shrq	\$63, %rbx
+
+#fifth iteration
+	movq	32($inp), %r11
+	movq	40($inp), %rax
+	mulq	%r11
+	addq	%rax, %r8
+	movq	48($inp), %rax
+	movq	%rdx, %rcx
+	adcq	\$0, %rcx
+
+	mulq	%r11
+	addq	%rax, %r9
+	movq	56($inp), %rax
+	adcq	\$0, %rdx
+	 movq	%r8, %r12
+	 leaq	(%rbx,%r8,2), %r8	#shld	\$1, %rbx, %r8
+	addq	%rcx, %r9
+	movq	%rdx, %rcx
+	adcq	\$0, %rcx
+
+	mulq	%r11
+	 shrq	\$63, %r12
+	addq	%rax, %r10
+	movq	%r11, %rax
+	adcq	\$0, %rdx
+	addq	%rcx, %r10
+	movq	%rdx, %r11
+	adcq	\$0, %r11
+
+	movq	%r9, %rcx
+	leaq	(%r12,%r9,2), %r9	#shld	\$1, %r8, %r9
+
+	mulq	%rax
+	addq	%rax, %r15
+	adcq	%rdx, %r8
+	adcq	\$0, %r9
+
+	movq	%r15, 64(%rsp)
+	movq	%r8, 72(%rsp)
+	shrq	\$63, %rcx
+
+#sixth iteration
+	movq	40($inp), %r12
+	movq	48($inp), %rax
+	mulq	%r12
+	addq	%rax, %r10
+	movq	56($inp), %rax
+	movq	%rdx, %rbx
+	adcq	\$0, %rbx
+
+	mulq	%r12
+	addq	%rax, %r11
+	movq	%r12, %rax
+	 movq	%r10, %r15
+	 leaq	(%rcx,%r10,2), %r10	#shld	\$1, %rcx, %r10
+	adcq	\$0, %rdx
+	 shrq	\$63, %r15
+	addq	%rbx, %r11
+	movq	%rdx, %r12
+	adcq	\$0, %r12
+
+	movq	%r11, %rbx
+	leaq	(%r15,%r11,2), %r11	#shld	\$1, %r10, %r11
+
+	mulq	%rax
+	addq	%rax, %r9
+	adcq	%rdx, %r10
+	adcq	\$0, %r11
+
+	movq	%r9, 80(%rsp)
+	movq	%r10, 88(%rsp)
+
+#seventh iteration
+	movq	48($inp), %r13
+	movq	56($inp), %rax
+	mulq	%r13
+	addq	%rax, %r12
+	movq	%r13, %rax
+	movq	%rdx, %r13
+	adcq	\$0, %r13
+
+	xorq	%r14, %r14
+	shlq	\$1, %rbx
+	adcq	%r12, %r12		#shld	\$1, %rbx, %r12
+	adcq	%r13, %r13		#shld	\$1, %r12, %r13
+	adcq	%r14, %r14		#shld	\$1, %r13, %r14
+
+	mulq	%rax
+	addq	%rax, %r11
+	adcq	%rdx, %r12
+	adcq	\$0, %r13
+
+	movq	%r11, 96(%rsp)
+	movq	%r12, 104(%rsp)
+
+#eighth iteration
+	movq	56($inp), %rax
+	mulq	%rax
+	addq	%rax, %r13
+	adcq	\$0, %rdx
+
+	addq	%rdx, %r14
+
+	movq	%r13, 112(%rsp)
+	movq	%r14, 120(%rsp)
+
+	movq	(%rsp), %r8
+	movq	8(%rsp), %r9
+	movq	16(%rsp), %r10
+	movq	24(%rsp), %r11
+	movq	32(%rsp), %r12
+	movq	40(%rsp), %r13
+	movq	48(%rsp), %r14
+	movq	56(%rsp), %r15
+
+	call	__rsaz_512_reduce
+
+	addq	64(%rsp), %r8
+	adcq	72(%rsp), %r9
+	adcq	80(%rsp), %r10
+	adcq	88(%rsp), %r11
+	adcq	96(%rsp), %r12
+	adcq	104(%rsp), %r13
+	adcq	112(%rsp), %r14
+	adcq	120(%rsp), %r15
+	sbbq	%rcx, %rcx
+
+	call	__rsaz_512_subtract
+
+	movq	%r8, %rdx
+	movq	%r9, %rax
+	movl	128+8(%rsp), $times
+	movq	$out, $inp
+
+	decl	$times
+	jnz	.Loop_sqr
+___
+if ($addx) {
+$code.=<<___;
+	jmp	.Lsqr_tail
+
+.align	32
+.Loop_sqrx:
+	movl	$times,128+8(%rsp)
+	movq	$out, %xmm0		# off-load
+	movq	%rbp, %xmm1		# off-load
+#first iteration
+	mulx	%rax, %r8, %r9
+
+	mulx	16($inp), %rcx, %r10
+	xor	%rbp, %rbp		# cf=0, of=0
+
+	mulx	24($inp), %rax, %r11
+	adcx	%rcx, %r9
+
+	mulx	32($inp), %rcx, %r12
+	adcx	%rax, %r10
+
+	mulx	40($inp), %rax, %r13
+	adcx	%rcx, %r11
+
+	.byte	0xc4,0x62,0xf3,0xf6,0xb6,0x30,0x00,0x00,0x00	# mulx	48($inp), %rcx, %r14
+	adcx	%rax, %r12
+	adcx	%rcx, %r13
+
+	.byte	0xc4,0x62,0xfb,0xf6,0xbe,0x38,0x00,0x00,0x00	# mulx	56($inp), %rax, %r15
+	adcx	%rax, %r14
+	adcx	%rbp, %r15		# %rbp is 0
+
+	mov	%r9, %rcx
+	shld	\$1, %r8, %r9
+	shl	\$1, %r8
+
+	xor	%ebp, %ebp
+	mulx	%rdx, %rax, %rdx
+	adcx	%rdx, %r8
+	 mov	8($inp), %rdx
+	adcx	%rbp, %r9
+
+	mov	%rax, (%rsp)
+	mov	%r8, 8(%rsp)
+
+#second iteration
+	mulx	16($inp), %rax, %rbx
+	adox	%rax, %r10
+	adcx	%rbx, %r11
+
+	.byte	0xc4,0x62,0xc3,0xf6,0x86,0x18,0x00,0x00,0x00	# mulx	24($inp), $out, %r8
+	adox	$out, %r11
+	adcx	%r8, %r12
+
+	mulx	32($inp), %rax, %rbx
+	adox	%rax, %r12
+	adcx	%rbx, %r13
+
+	mulx	40($inp), $out, %r8
+	adox	$out, %r13
+	adcx	%r8, %r14
+
+	.byte	0xc4,0xe2,0xfb,0xf6,0x9e,0x30,0x00,0x00,0x00	# mulx	48($inp), %rax, %rbx
+	adox	%rax, %r14
+	adcx	%rbx, %r15
+
+	.byte	0xc4,0x62,0xc3,0xf6,0x86,0x38,0x00,0x00,0x00	# mulx	56($inp), $out, %r8
+	adox	$out, %r15
+	adcx	%rbp, %r8
+	adox	%rbp, %r8
+
+	mov	%r11, %rbx
+	shld	\$1, %r10, %r11
+	shld	\$1, %rcx, %r10
+
+	xor	%ebp,%ebp
+	mulx	%rdx, %rax, %rcx
+	 mov	16($inp), %rdx
+	adcx	%rax, %r9
+	adcx	%rcx, %r10
+	adcx	%rbp, %r11
+
+	mov	%r9, 16(%rsp)
+	.byte	0x4c,0x89,0x94,0x24,0x18,0x00,0x00,0x00		# mov	%r10, 24(%rsp)
+
+#third iteration
+	.byte	0xc4,0x62,0xc3,0xf6,0x8e,0x18,0x00,0x00,0x00	# mulx	24($inp), $out, %r9
+	adox	$out, %r12
+	adcx	%r9, %r13
+
+	mulx	32($inp), %rax, %rcx
+	adox	%rax, %r13
+	adcx	%rcx, %r14
+
+	mulx	40($inp), $out, %r9
+	adox	$out, %r14
+	adcx	%r9, %r15
+
+	.byte	0xc4,0xe2,0xfb,0xf6,0x8e,0x30,0x00,0x00,0x00	# mulx	48($inp), %rax, %rcx
+	adox	%rax, %r15
+	adcx	%rcx, %r8
+
+	.byte	0xc4,0x62,0xc3,0xf6,0x8e,0x38,0x00,0x00,0x00	# mulx	56($inp), $out, %r9
+	adox	$out, %r8
+	adcx	%rbp, %r9
+	adox	%rbp, %r9
+
+	mov	%r13, %rcx
+	shld	\$1, %r12, %r13
+	shld	\$1, %rbx, %r12
+
+	xor	%ebp, %ebp
+	mulx	%rdx, %rax, %rdx
+	adcx	%rax, %r11
+	adcx	%rdx, %r12
+	 mov	24($inp), %rdx
+	adcx	%rbp, %r13
+
+	mov	%r11, 32(%rsp)
+	.byte	0x4c,0x89,0xa4,0x24,0x28,0x00,0x00,0x00		# mov	%r12, 40(%rsp)
+
+#fourth iteration
+	.byte	0xc4,0xe2,0xfb,0xf6,0x9e,0x20,0x00,0x00,0x00	# mulx	32($inp), %rax, %rbx
+	adox	%rax, %r14
+	adcx	%rbx, %r15
+
+	mulx	40($inp), $out, %r10
+	adox	$out, %r15
+	adcx	%r10, %r8
+
+	mulx	48($inp), %rax, %rbx
+	adox	%rax, %r8
+	adcx	%rbx, %r9
+
+	mulx	56($inp), $out, %r10
+	adox	$out, %r9
+	adcx	%rbp, %r10
+	adox	%rbp, %r10
+
+	.byte	0x66
+	mov	%r15, %rbx
+	shld	\$1, %r14, %r15
+	shld	\$1, %rcx, %r14
+
+	xor	%ebp, %ebp
+	mulx	%rdx, %rax, %rdx
+	adcx	%rax, %r13
+	adcx	%rdx, %r14
+	 mov	32($inp), %rdx
+	adcx	%rbp, %r15
+
+	mov	%r13, 48(%rsp)
+	mov	%r14, 56(%rsp)
+
+#fifth iteration
+	.byte	0xc4,0x62,0xc3,0xf6,0x9e,0x28,0x00,0x00,0x00	# mulx	40($inp), $out, %r11
+	adox	$out, %r8
+	adcx	%r11, %r9
+
+	mulx	48($inp), %rax, %rcx
+	adox	%rax, %r9
+	adcx	%rcx, %r10
+
+	mulx	56($inp), $out, %r11
+	adox	$out, %r10
+	adcx	%rbp, %r11
+	adox	%rbp, %r11
+
+	mov	%r9, %rcx
+	shld	\$1, %r8, %r9
+	shld	\$1, %rbx, %r8
+
+	xor	%ebp, %ebp
+	mulx	%rdx, %rax, %rdx
+	adcx	%rax, %r15
+	adcx	%rdx, %r8
+	 mov	40($inp), %rdx
+	adcx	%rbp, %r9
+
+	mov	%r15, 64(%rsp)
+	mov	%r8, 72(%rsp)
+
+#sixth iteration
+	.byte	0xc4,0xe2,0xfb,0xf6,0x9e,0x30,0x00,0x00,0x00	# mulx	48($inp), %rax, %rbx
+	adox	%rax, %r10
+	adcx	%rbx, %r11
+
+	.byte	0xc4,0x62,0xc3,0xf6,0xa6,0x38,0x00,0x00,0x00	# mulx	56($inp), $out, %r12
+	adox	$out, %r11
+	adcx	%rbp, %r12
+	adox	%rbp, %r12
+
+	mov	%r11, %rbx
+	shld	\$1, %r10, %r11
+	shld	\$1, %rcx, %r10
+
+	xor	%ebp, %ebp
+	mulx	%rdx, %rax, %rdx
+	adcx	%rax, %r9
+	adcx	%rdx, %r10
+	 mov	48($inp), %rdx
+	adcx	%rbp, %r11
+
+	mov	%r9, 80(%rsp)
+	mov	%r10, 88(%rsp)
+
+#seventh iteration
+	.byte	0xc4,0x62,0xfb,0xf6,0xae,0x38,0x00,0x00,0x00	# mulx	56($inp), %rax, %r13
+	adox	%rax, %r12
+	adox	%rbp, %r13
+
+	xor	%r14, %r14
+	shld	\$1, %r13, %r14
+	shld	\$1, %r12, %r13
+	shld	\$1, %rbx, %r12
+
+	xor	%ebp, %ebp
+	mulx	%rdx, %rax, %rdx
+	adcx	%rax, %r11
+	adcx	%rdx, %r12
+	 mov	56($inp), %rdx
+	adcx	%rbp, %r13
+
+	.byte	0x4c,0x89,0x9c,0x24,0x60,0x00,0x00,0x00		# mov	%r11, 96(%rsp)
+	.byte	0x4c,0x89,0xa4,0x24,0x68,0x00,0x00,0x00		# mov	%r12, 104(%rsp)
+
+#eighth iteration
+	mulx	%rdx, %rax, %rdx
+	adox	%rax, %r13
+	adox	%rbp, %rdx
+
+	.byte	0x66
+	add	%rdx, %r14
+
+	movq	%r13, 112(%rsp)
+	movq	%r14, 120(%rsp)
+	movq	%xmm0, $out
+	movq	%xmm1, %rbp
+
+	movq	128(%rsp), %rdx		# pull $n0
+	movq	(%rsp), %r8
+	movq	8(%rsp), %r9
+	movq	16(%rsp), %r10
+	movq	24(%rsp), %r11
+	movq	32(%rsp), %r12
+	movq	40(%rsp), %r13
+	movq	48(%rsp), %r14
+	movq	56(%rsp), %r15
+
+	call	__rsaz_512_reducex
+
+	addq	64(%rsp), %r8
+	adcq	72(%rsp), %r9
+	adcq	80(%rsp), %r10
+	adcq	88(%rsp), %r11
+	adcq	96(%rsp), %r12
+	adcq	104(%rsp), %r13
+	adcq	112(%rsp), %r14
+	adcq	120(%rsp), %r15
+	sbbq	%rcx, %rcx
+
+	call	__rsaz_512_subtract
+
+	movq	%r8, %rdx
+	movq	%r9, %rax
+	movl	128+8(%rsp), $times
+	movq	$out, $inp
+
+	decl	$times
+	jnz	.Loop_sqrx
+
+.Lsqr_tail:
+___
+}
+$code.=<<___;
+
+	leaq	128+24+48(%rsp), %rax
+.cfi_def_cfa	%rax,8
+	movq	-48(%rax), %r15
+.cfi_restore	%r15
+	movq	-40(%rax), %r14
+.cfi_restore	%r14
+	movq	-32(%rax), %r13
+.cfi_restore	%r13
+	movq	-24(%rax), %r12
+.cfi_restore	%r12
+	movq	-16(%rax), %rbp
+.cfi_restore	%rbp
+	movq	-8(%rax), %rbx
+.cfi_restore	%rbx
+	leaq	(%rax), %rsp
+.cfi_def_cfa_register	%rsp
+.Lsqr_epilogue:
+	ret
+.cfi_endproc
+.size	rsaz_512_sqr,.-rsaz_512_sqr
+___
+}
+{
+my ($out,$ap,$bp,$mod,$n0) = ("%rdi","%rsi","%rdx","%rcx","%r8");
+$code.=<<___;
+.globl	rsaz_512_mul
+.type	rsaz_512_mul,\@function,5
+.align	32
+rsaz_512_mul:
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+
+	subq	\$128+24, %rsp
+.cfi_adjust_cfa_offset	128+24
+.Lmul_body:
+	movq	$out, %xmm0		# off-load arguments
+	movq	$mod, %xmm1
+	movq	$n0, 128(%rsp)
+___
+$code.=<<___ if ($addx);
+	movl	\$0x80100,%r11d
+	andl	OPENSSL_ia32cap_P+8(%rip),%r11d
+	cmpl	\$0x80100,%r11d		# check for MULX and ADO/CX
+	je	.Lmulx
+___
+$code.=<<___;
+	movq	($bp), %rbx		# pass b[0]
+	movq	$bp, %rbp		# pass argument
+	call	__rsaz_512_mul
+
+	movq	%xmm0, $out
+	movq	%xmm1, %rbp
+
+	movq	(%rsp), %r8
+	movq	8(%rsp), %r9
+	movq	16(%rsp), %r10
+	movq	24(%rsp), %r11
+	movq	32(%rsp), %r12
+	movq	40(%rsp), %r13
+	movq	48(%rsp), %r14
+	movq	56(%rsp), %r15
+
+	call	__rsaz_512_reduce
+___
+$code.=<<___ if ($addx);
+	jmp	.Lmul_tail
+
+.align	32
+.Lmulx:
+	movq	$bp, %rbp		# pass argument
+	movq	($bp), %rdx		# pass b[0]
+	call	__rsaz_512_mulx
+
+	movq	%xmm0, $out
+	movq	%xmm1, %rbp
+
+	movq	128(%rsp), %rdx		# pull $n0
+	movq	(%rsp), %r8
+	movq	8(%rsp), %r9
+	movq	16(%rsp), %r10
+	movq	24(%rsp), %r11
+	movq	32(%rsp), %r12
+	movq	40(%rsp), %r13
+	movq	48(%rsp), %r14
+	movq	56(%rsp), %r15
+
+	call	__rsaz_512_reducex
+.Lmul_tail:
+___
+$code.=<<___;
+	addq	64(%rsp), %r8
+	adcq	72(%rsp), %r9
+	adcq	80(%rsp), %r10
+	adcq	88(%rsp), %r11
+	adcq	96(%rsp), %r12
+	adcq	104(%rsp), %r13
+	adcq	112(%rsp), %r14
+	adcq	120(%rsp), %r15
+	sbbq	%rcx, %rcx
+
+	call	__rsaz_512_subtract
+
+	leaq	128+24+48(%rsp), %rax
+.cfi_def_cfa	%rax,8
+	movq	-48(%rax), %r15
+.cfi_restore	%r15
+	movq	-40(%rax), %r14
+.cfi_restore	%r14
+	movq	-32(%rax), %r13
+.cfi_restore	%r13
+	movq	-24(%rax), %r12
+.cfi_restore	%r12
+	movq	-16(%rax), %rbp
+.cfi_restore	%rbp
+	movq	-8(%rax), %rbx
+.cfi_restore	%rbx
+	leaq	(%rax), %rsp
+.cfi_def_cfa_register	%rsp
+.Lmul_epilogue:
+	ret
+.cfi_endproc
+.size	rsaz_512_mul,.-rsaz_512_mul
+___
+}
+{
+my ($out,$ap,$bp,$mod,$n0,$pwr) = ("%rdi","%rsi","%rdx","%rcx","%r8","%r9d");
+$code.=<<___;
+.globl	rsaz_512_mul_gather4
+.type	rsaz_512_mul_gather4,\@function,6
+.align	32
+rsaz_512_mul_gather4:
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+
+	subq	\$`128+24+($win64?0xb0:0)`, %rsp
+.cfi_adjust_cfa_offset	`128+24+($win64?0xb0:0)`
+___
+$code.=<<___	if ($win64);
+	movaps	%xmm6,0xa0(%rsp)
+	movaps	%xmm7,0xb0(%rsp)
+	movaps	%xmm8,0xc0(%rsp)
+	movaps	%xmm9,0xd0(%rsp)
+	movaps	%xmm10,0xe0(%rsp)
+	movaps	%xmm11,0xf0(%rsp)
+	movaps	%xmm12,0x100(%rsp)
+	movaps	%xmm13,0x110(%rsp)
+	movaps	%xmm14,0x120(%rsp)
+	movaps	%xmm15,0x130(%rsp)
+___
+$code.=<<___;
+.Lmul_gather4_body:
+	movd	$pwr,%xmm8
+	movdqa	.Linc+16(%rip),%xmm1	# 00000002000000020000000200000002
+	movdqa	.Linc(%rip),%xmm0	# 00000001000000010000000000000000
+
+	pshufd	\$0,%xmm8,%xmm8		# broadcast $power
+	movdqa	%xmm1,%xmm7
+	movdqa	%xmm1,%xmm2
+___
+########################################################################
+# calculate mask by comparing 0..15 to $power
+#
+for($i=0;$i<4;$i++) {
+$code.=<<___;
+	paddd	%xmm`$i`,%xmm`$i+1`
+	pcmpeqd	%xmm8,%xmm`$i`
+	movdqa	%xmm7,%xmm`$i+3`
+___
+}
+for(;$i<7;$i++) {
+$code.=<<___;
+	paddd	%xmm`$i`,%xmm`$i+1`
+	pcmpeqd	%xmm8,%xmm`$i`
+___
+}
+$code.=<<___;
+	pcmpeqd	%xmm8,%xmm7
+
+	movdqa	16*0($bp),%xmm8
+	movdqa	16*1($bp),%xmm9
+	movdqa	16*2($bp),%xmm10
+	movdqa	16*3($bp),%xmm11
+	pand	%xmm0,%xmm8
+	movdqa	16*4($bp),%xmm12
+	pand	%xmm1,%xmm9
+	movdqa	16*5($bp),%xmm13
+	pand	%xmm2,%xmm10
+	movdqa	16*6($bp),%xmm14
+	pand	%xmm3,%xmm11
+	movdqa	16*7($bp),%xmm15
+	leaq	128($bp), %rbp
+	pand	%xmm4,%xmm12
+	pand	%xmm5,%xmm13
+	pand	%xmm6,%xmm14
+	pand	%xmm7,%xmm15
+	por	%xmm10,%xmm8
+	por	%xmm11,%xmm9
+	por	%xmm12,%xmm8
+	por	%xmm13,%xmm9
+	por	%xmm14,%xmm8
+	por	%xmm15,%xmm9
+
+	por	%xmm9,%xmm8
+	pshufd	\$0x4e,%xmm8,%xmm9
+	por	%xmm9,%xmm8
+___
+$code.=<<___ if ($addx);
+	movl	\$0x80100,%r11d
+	andl	OPENSSL_ia32cap_P+8(%rip),%r11d
+	cmpl	\$0x80100,%r11d		# check for MULX and ADO/CX
+	je	.Lmulx_gather
+___
+$code.=<<___;
+	movq	%xmm8,%rbx
+
+	movq	$n0, 128(%rsp)		# off-load arguments
+	movq	$out, 128+8(%rsp)
+	movq	$mod, 128+16(%rsp)
+
+	movq	($ap), %rax
+	 movq	8($ap), %rcx
+	mulq	%rbx			# 0 iteration
+	movq	%rax, (%rsp)
+	movq	%rcx, %rax
+	movq	%rdx, %r8
+
+	mulq	%rbx
+	addq	%rax, %r8
+	movq	16($ap), %rax
+	movq	%rdx, %r9
+	adcq	\$0, %r9
+
+	mulq	%rbx
+	addq	%rax, %r9
+	movq	24($ap), %rax
+	movq	%rdx, %r10
+	adcq	\$0, %r10
+
+	mulq	%rbx
+	addq	%rax, %r10
+	movq	32($ap), %rax
+	movq	%rdx, %r11
+	adcq	\$0, %r11
+
+	mulq	%rbx
+	addq	%rax, %r11
+	movq	40($ap), %rax
+	movq	%rdx, %r12
+	adcq	\$0, %r12
+
+	mulq	%rbx
+	addq	%rax, %r12
+	movq	48($ap), %rax
+	movq	%rdx, %r13
+	adcq	\$0, %r13
+
+	mulq	%rbx
+	addq	%rax, %r13
+	movq	56($ap), %rax
+	movq	%rdx, %r14
+	adcq	\$0, %r14
+
+	mulq	%rbx
+	addq	%rax, %r14
+	 movq	($ap), %rax
+	movq	%rdx, %r15
+	adcq	\$0, %r15
+
+	leaq	8(%rsp), %rdi
+	movl	\$7, %ecx
+	jmp	.Loop_mul_gather
+
+.align	32
+.Loop_mul_gather:
+	movdqa	16*0(%rbp),%xmm8
+	movdqa	16*1(%rbp),%xmm9
+	movdqa	16*2(%rbp),%xmm10
+	movdqa	16*3(%rbp),%xmm11
+	pand	%xmm0,%xmm8
+	movdqa	16*4(%rbp),%xmm12
+	pand	%xmm1,%xmm9
+	movdqa	16*5(%rbp),%xmm13
+	pand	%xmm2,%xmm10
+	movdqa	16*6(%rbp),%xmm14
+	pand	%xmm3,%xmm11
+	movdqa	16*7(%rbp),%xmm15
+	leaq	128(%rbp), %rbp
+	pand	%xmm4,%xmm12
+	pand	%xmm5,%xmm13
+	pand	%xmm6,%xmm14
+	pand	%xmm7,%xmm15
+	por	%xmm10,%xmm8
+	por	%xmm11,%xmm9
+	por	%xmm12,%xmm8
+	por	%xmm13,%xmm9
+	por	%xmm14,%xmm8
+	por	%xmm15,%xmm9
+
+	por	%xmm9,%xmm8
+	pshufd	\$0x4e,%xmm8,%xmm9
+	por	%xmm9,%xmm8
+	movq	%xmm8,%rbx
+
+	mulq	%rbx
+	addq	%rax, %r8
+	movq	8($ap), %rax
+	movq	%r8, (%rdi)
+	movq	%rdx, %r8
+	adcq	\$0, %r8
+
+	mulq	%rbx
+	addq	%rax, %r9
+	movq	16($ap), %rax
+	adcq	\$0, %rdx
+	addq	%r9, %r8
+	movq	%rdx, %r9
+	adcq	\$0, %r9
+
+	mulq	%rbx
+	addq	%rax, %r10
+	movq	24($ap), %rax
+	adcq	\$0, %rdx
+	addq	%r10, %r9
+	movq	%rdx, %r10
+	adcq	\$0, %r10
+
+	mulq	%rbx
+	addq	%rax, %r11
+	movq	32($ap), %rax
+	adcq	\$0, %rdx
+	addq	%r11, %r10
+	movq	%rdx, %r11
+	adcq	\$0, %r11
+
+	mulq	%rbx
+	addq	%rax, %r12
+	movq	40($ap), %rax
+	adcq	\$0, %rdx
+	addq	%r12, %r11
+	movq	%rdx, %r12
+	adcq	\$0, %r12
+
+	mulq	%rbx
+	addq	%rax, %r13
+	movq	48($ap), %rax
+	adcq	\$0, %rdx
+	addq	%r13, %r12
+	movq	%rdx, %r13
+	adcq	\$0, %r13
+
+	mulq	%rbx
+	addq	%rax, %r14
+	movq	56($ap), %rax
+	adcq	\$0, %rdx
+	addq	%r14, %r13
+	movq	%rdx, %r14
+	adcq	\$0, %r14
+
+	mulq	%rbx
+	addq	%rax, %r15
+	 movq	($ap), %rax
+	adcq	\$0, %rdx
+	addq	%r15, %r14
+	movq	%rdx, %r15
+	adcq	\$0, %r15
+
+	leaq	8(%rdi), %rdi
+
+	decl	%ecx
+	jnz	.Loop_mul_gather
+
+	movq	%r8, (%rdi)
+	movq	%r9, 8(%rdi)
+	movq	%r10, 16(%rdi)
+	movq	%r11, 24(%rdi)
+	movq	%r12, 32(%rdi)
+	movq	%r13, 40(%rdi)
+	movq	%r14, 48(%rdi)
+	movq	%r15, 56(%rdi)
+
+	movq	128+8(%rsp), $out
+	movq	128+16(%rsp), %rbp
+
+	movq	(%rsp), %r8
+	movq	8(%rsp), %r9
+	movq	16(%rsp), %r10
+	movq	24(%rsp), %r11
+	movq	32(%rsp), %r12
+	movq	40(%rsp), %r13
+	movq	48(%rsp), %r14
+	movq	56(%rsp), %r15
+
+	call	__rsaz_512_reduce
+___
+$code.=<<___ if ($addx);
+	jmp	.Lmul_gather_tail
+
+.align	32
+.Lmulx_gather:
+	movq	%xmm8,%rdx
+
+	mov	$n0, 128(%rsp)		# off-load arguments
+	mov	$out, 128+8(%rsp)
+	mov	$mod, 128+16(%rsp)
+
+	mulx	($ap), %rbx, %r8	# 0 iteration
+	mov	%rbx, (%rsp)
+	xor	%edi, %edi		# cf=0, of=0
+
+	mulx	8($ap), %rax, %r9
+
+	mulx	16($ap), %rbx, %r10
+	adcx	%rax, %r8
+
+	mulx	24($ap), %rax, %r11
+	adcx	%rbx, %r9
+
+	mulx	32($ap), %rbx, %r12
+	adcx	%rax, %r10
+
+	mulx	40($ap), %rax, %r13
+	adcx	%rbx, %r11
+
+	mulx	48($ap), %rbx, %r14
+	adcx	%rax, %r12
+
+	mulx	56($ap), %rax, %r15
+	adcx	%rbx, %r13
+	adcx	%rax, %r14
+	.byte	0x67
+	mov	%r8, %rbx
+	adcx	%rdi, %r15		# %rdi is 0
+
+	mov	\$-7, %rcx
+	jmp	.Loop_mulx_gather
+
+.align	32
+.Loop_mulx_gather:
+	movdqa	16*0(%rbp),%xmm8
+	movdqa	16*1(%rbp),%xmm9
+	movdqa	16*2(%rbp),%xmm10
+	movdqa	16*3(%rbp),%xmm11
+	pand	%xmm0,%xmm8
+	movdqa	16*4(%rbp),%xmm12
+	pand	%xmm1,%xmm9
+	movdqa	16*5(%rbp),%xmm13
+	pand	%xmm2,%xmm10
+	movdqa	16*6(%rbp),%xmm14
+	pand	%xmm3,%xmm11
+	movdqa	16*7(%rbp),%xmm15
+	leaq	128(%rbp), %rbp
+	pand	%xmm4,%xmm12
+	pand	%xmm5,%xmm13
+	pand	%xmm6,%xmm14
+	pand	%xmm7,%xmm15
+	por	%xmm10,%xmm8
+	por	%xmm11,%xmm9
+	por	%xmm12,%xmm8
+	por	%xmm13,%xmm9
+	por	%xmm14,%xmm8
+	por	%xmm15,%xmm9
+
+	por	%xmm9,%xmm8
+	pshufd	\$0x4e,%xmm8,%xmm9
+	por	%xmm9,%xmm8
+	movq	%xmm8,%rdx
+
+	.byte	0xc4,0x62,0xfb,0xf6,0x86,0x00,0x00,0x00,0x00	# mulx	($ap), %rax, %r8
+	adcx	%rax, %rbx
+	adox	%r9, %r8
+
+	mulx	8($ap), %rax, %r9
+	adcx	%rax, %r8
+	adox	%r10, %r9
+
+	mulx	16($ap), %rax, %r10
+	adcx	%rax, %r9
+	adox	%r11, %r10
+
+	.byte	0xc4,0x62,0xfb,0xf6,0x9e,0x18,0x00,0x00,0x00	# mulx	24($ap), %rax, %r11
+	adcx	%rax, %r10
+	adox	%r12, %r11
+
+	mulx	32($ap), %rax, %r12
+	adcx	%rax, %r11
+	adox	%r13, %r12
+
+	mulx	40($ap), %rax, %r13
+	adcx	%rax, %r12
+	adox	%r14, %r13
+
+	.byte	0xc4,0x62,0xfb,0xf6,0xb6,0x30,0x00,0x00,0x00	# mulx	48($ap), %rax, %r14
+	adcx	%rax, %r13
+	.byte	0x67
+	adox	%r15, %r14
+
+	mulx	56($ap), %rax, %r15
+	 mov	%rbx, 64(%rsp,%rcx,8)
+	adcx	%rax, %r14
+	adox	%rdi, %r15
+	mov	%r8, %rbx
+	adcx	%rdi, %r15		# cf=0
+
+	inc	%rcx			# of=0
+	jnz	.Loop_mulx_gather
+
+	mov	%r8, 64(%rsp)
+	mov	%r9, 64+8(%rsp)
+	mov	%r10, 64+16(%rsp)
+	mov	%r11, 64+24(%rsp)
+	mov	%r12, 64+32(%rsp)
+	mov	%r13, 64+40(%rsp)
+	mov	%r14, 64+48(%rsp)
+	mov	%r15, 64+56(%rsp)
+
+	mov	128(%rsp), %rdx		# pull arguments
+	mov	128+8(%rsp), $out
+	mov	128+16(%rsp), %rbp
+
+	mov	(%rsp), %r8
+	mov	8(%rsp), %r9
+	mov	16(%rsp), %r10
+	mov	24(%rsp), %r11
+	mov	32(%rsp), %r12
+	mov	40(%rsp), %r13
+	mov	48(%rsp), %r14
+	mov	56(%rsp), %r15
+
+	call	__rsaz_512_reducex
+
+.Lmul_gather_tail:
+___
+$code.=<<___;
+	addq	64(%rsp), %r8
+	adcq	72(%rsp), %r9
+	adcq	80(%rsp), %r10
+	adcq	88(%rsp), %r11
+	adcq	96(%rsp), %r12
+	adcq	104(%rsp), %r13
+	adcq	112(%rsp), %r14
+	adcq	120(%rsp), %r15
+	sbbq	%rcx, %rcx
+
+	call	__rsaz_512_subtract
+
+	leaq	128+24+48(%rsp), %rax
+___
+$code.=<<___	if ($win64);
+	movaps	0xa0-0xc8(%rax),%xmm6
+	movaps	0xb0-0xc8(%rax),%xmm7
+	movaps	0xc0-0xc8(%rax),%xmm8
+	movaps	0xd0-0xc8(%rax),%xmm9
+	movaps	0xe0-0xc8(%rax),%xmm10
+	movaps	0xf0-0xc8(%rax),%xmm11
+	movaps	0x100-0xc8(%rax),%xmm12
+	movaps	0x110-0xc8(%rax),%xmm13
+	movaps	0x120-0xc8(%rax),%xmm14
+	movaps	0x130-0xc8(%rax),%xmm15
+	lea	0xb0(%rax),%rax
+___
+$code.=<<___;
+.cfi_def_cfa	%rax,8
+	movq	-48(%rax), %r15
+.cfi_restore	%r15
+	movq	-40(%rax), %r14
+.cfi_restore	%r14
+	movq	-32(%rax), %r13
+.cfi_restore	%r13
+	movq	-24(%rax), %r12
+.cfi_restore	%r12
+	movq	-16(%rax), %rbp
+.cfi_restore	%rbp
+	movq	-8(%rax), %rbx
+.cfi_restore	%rbx
+	leaq	(%rax), %rsp
+.cfi_def_cfa_register	%rsp
+.Lmul_gather4_epilogue:
+	ret
+.cfi_endproc
+.size	rsaz_512_mul_gather4,.-rsaz_512_mul_gather4
+___
+}
+{
+my ($out,$ap,$mod,$n0,$tbl,$pwr) = ("%rdi","%rsi","%rdx","%rcx","%r8","%r9d");
+$code.=<<___;
+.globl	rsaz_512_mul_scatter4
+.type	rsaz_512_mul_scatter4,\@function,6
+.align	32
+rsaz_512_mul_scatter4:
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+
+	mov	$pwr, $pwr
+	subq	\$128+24, %rsp
+.cfi_adjust_cfa_offset	128+24
+.Lmul_scatter4_body:
+	leaq	($tbl,$pwr,8), $tbl
+	movq	$out, %xmm0		# off-load arguments
+	movq	$mod, %xmm1
+	movq	$tbl, %xmm2
+	movq	$n0, 128(%rsp)
+
+	movq	$out, %rbp
+___
+$code.=<<___ if ($addx);
+	movl	\$0x80100,%r11d
+	andl	OPENSSL_ia32cap_P+8(%rip),%r11d
+	cmpl	\$0x80100,%r11d		# check for MULX and ADO/CX
+	je	.Lmulx_scatter
+___
+$code.=<<___;
+	movq	($out),%rbx		# pass b[0]
+	call	__rsaz_512_mul
+
+	movq	%xmm0, $out
+	movq	%xmm1, %rbp
+
+	movq	(%rsp), %r8
+	movq	8(%rsp), %r9
+	movq	16(%rsp), %r10
+	movq	24(%rsp), %r11
+	movq	32(%rsp), %r12
+	movq	40(%rsp), %r13
+	movq	48(%rsp), %r14
+	movq	56(%rsp), %r15
+
+	call	__rsaz_512_reduce
+___
+$code.=<<___ if ($addx);
+	jmp	.Lmul_scatter_tail
+
+.align	32
+.Lmulx_scatter:
+	movq	($out), %rdx		# pass b[0]
+	call	__rsaz_512_mulx
+
+	movq	%xmm0, $out
+	movq	%xmm1, %rbp
+
+	movq	128(%rsp), %rdx		# pull $n0
+	movq	(%rsp), %r8
+	movq	8(%rsp), %r9
+	movq	16(%rsp), %r10
+	movq	24(%rsp), %r11
+	movq	32(%rsp), %r12
+	movq	40(%rsp), %r13
+	movq	48(%rsp), %r14
+	movq	56(%rsp), %r15
+
+	call	__rsaz_512_reducex
+
+.Lmul_scatter_tail:
+___
+$code.=<<___;
+	addq	64(%rsp), %r8
+	adcq	72(%rsp), %r9
+	adcq	80(%rsp), %r10
+	adcq	88(%rsp), %r11
+	adcq	96(%rsp), %r12
+	adcq	104(%rsp), %r13
+	adcq	112(%rsp), %r14
+	adcq	120(%rsp), %r15
+	movq	%xmm2, $inp
+	sbbq	%rcx, %rcx
+
+	call	__rsaz_512_subtract
+
+	movq	%r8, 128*0($inp)	# scatter
+	movq	%r9, 128*1($inp)
+	movq	%r10, 128*2($inp)
+	movq	%r11, 128*3($inp)
+	movq	%r12, 128*4($inp)
+	movq	%r13, 128*5($inp)
+	movq	%r14, 128*6($inp)
+	movq	%r15, 128*7($inp)
+
+	leaq	128+24+48(%rsp), %rax
+.cfi_def_cfa	%rax,8
+	movq	-48(%rax), %r15
+.cfi_restore	%r15
+	movq	-40(%rax), %r14
+.cfi_restore	%r14
+	movq	-32(%rax), %r13
+.cfi_restore	%r13
+	movq	-24(%rax), %r12
+.cfi_restore	%r12
+	movq	-16(%rax), %rbp
+.cfi_restore	%rbp
+	movq	-8(%rax), %rbx
+.cfi_restore	%rbx
+	leaq	(%rax), %rsp
+.cfi_def_cfa_register	%rsp
+.Lmul_scatter4_epilogue:
+	ret
+.cfi_endproc
+.size	rsaz_512_mul_scatter4,.-rsaz_512_mul_scatter4
+___
+}
+{
+my ($out,$inp,$mod,$n0) = ("%rdi","%rsi","%rdx","%rcx");
+$code.=<<___;
+.globl	rsaz_512_mul_by_one
+.type	rsaz_512_mul_by_one,\@function,4
+.align	32
+rsaz_512_mul_by_one:
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+
+	subq	\$128+24, %rsp
+.cfi_adjust_cfa_offset	128+24
+.Lmul_by_one_body:
+___
+$code.=<<___ if ($addx);
+	movl	OPENSSL_ia32cap_P+8(%rip),%eax
+___
+$code.=<<___;
+	movq	$mod, %rbp	# reassign argument
+	movq	$n0, 128(%rsp)
+
+	movq	($inp), %r8
+	pxor	%xmm0, %xmm0
+	movq	8($inp), %r9
+	movq	16($inp), %r10
+	movq	24($inp), %r11
+	movq	32($inp), %r12
+	movq	40($inp), %r13
+	movq	48($inp), %r14
+	movq	56($inp), %r15
+
+	movdqa	%xmm0, (%rsp)
+	movdqa	%xmm0, 16(%rsp)
+	movdqa	%xmm0, 32(%rsp)
+	movdqa	%xmm0, 48(%rsp)
+	movdqa	%xmm0, 64(%rsp)
+	movdqa	%xmm0, 80(%rsp)
+	movdqa	%xmm0, 96(%rsp)
+___
+$code.=<<___ if ($addx);
+	andl	\$0x80100,%eax
+	cmpl	\$0x80100,%eax		# check for MULX and ADO/CX
+	je	.Lby_one_callx
+___
+$code.=<<___;
+	call	__rsaz_512_reduce
+___
+$code.=<<___ if ($addx);
+	jmp	.Lby_one_tail
+.align	32
+.Lby_one_callx:
+	movq	128(%rsp), %rdx		# pull $n0
+	call	__rsaz_512_reducex
+.Lby_one_tail:
+___
+$code.=<<___;
+	movq	%r8, ($out)
+	movq	%r9, 8($out)
+	movq	%r10, 16($out)
+	movq	%r11, 24($out)
+	movq	%r12, 32($out)
+	movq	%r13, 40($out)
+	movq	%r14, 48($out)
+	movq	%r15, 56($out)
+
+	leaq	128+24+48(%rsp), %rax
+.cfi_def_cfa	%rax,8
+	movq	-48(%rax), %r15
+.cfi_restore	%r15
+	movq	-40(%rax), %r14
+.cfi_restore	%r14
+	movq	-32(%rax), %r13
+.cfi_restore	%r13
+	movq	-24(%rax), %r12
+.cfi_restore	%r12
+	movq	-16(%rax), %rbp
+.cfi_restore	%rbp
+	movq	-8(%rax), %rbx
+.cfi_restore	%rbx
+	leaq	(%rax), %rsp
+.cfi_def_cfa_register	%rsp
+.Lmul_by_one_epilogue:
+	ret
+.cfi_endproc
+.size	rsaz_512_mul_by_one,.-rsaz_512_mul_by_one
+___
+}
+{	# __rsaz_512_reduce
+	#
+	# input:	%r8-%r15, %rbp - mod, 128(%rsp) - n0
+	# output:	%r8-%r15
+	# clobbers:	everything except %rbp and %rdi
+$code.=<<___;
+.type	__rsaz_512_reduce,\@abi-omnipotent
+.align	32
+__rsaz_512_reduce:
+	movq	%r8, %rbx
+	imulq	128+8(%rsp), %rbx
+	movq	0(%rbp), %rax
+	movl	\$8, %ecx
+	jmp	.Lreduction_loop
+
+.align	32
+.Lreduction_loop:
+	mulq	%rbx
+	movq	8(%rbp), %rax
+	negq	%r8
+	movq	%rdx, %r8
+	adcq	\$0, %r8
+
+	mulq	%rbx
+	addq	%rax, %r9
+	movq	16(%rbp), %rax
+	adcq	\$0, %rdx
+	addq	%r9, %r8
+	movq	%rdx, %r9
+	adcq	\$0, %r9
+
+	mulq	%rbx
+	addq	%rax, %r10
+	movq	24(%rbp), %rax
+	adcq	\$0, %rdx
+	addq	%r10, %r9
+	movq	%rdx, %r10
+	adcq	\$0, %r10
+
+	mulq	%rbx
+	addq	%rax, %r11
+	movq	32(%rbp), %rax
+	adcq	\$0, %rdx
+	addq	%r11, %r10
+	 movq	128+8(%rsp), %rsi
+	#movq	%rdx, %r11
+	#adcq	\$0, %r11
+	adcq	\$0, %rdx
+	movq	%rdx, %r11
+
+	mulq	%rbx
+	addq	%rax, %r12
+	movq	40(%rbp), %rax
+	adcq	\$0, %rdx
+	 imulq	%r8, %rsi
+	addq	%r12, %r11
+	movq	%rdx, %r12
+	adcq	\$0, %r12
+
+	mulq	%rbx
+	addq	%rax, %r13
+	movq	48(%rbp), %rax
+	adcq	\$0, %rdx
+	addq	%r13, %r12
+	movq	%rdx, %r13
+	adcq	\$0, %r13
+
+	mulq	%rbx
+	addq	%rax, %r14
+	movq	56(%rbp), %rax
+	adcq	\$0, %rdx
+	addq	%r14, %r13
+	movq	%rdx, %r14
+	adcq	\$0, %r14
+
+	mulq	%rbx
+	 movq	%rsi, %rbx
+	addq	%rax, %r15
+	 movq	0(%rbp), %rax
+	adcq	\$0, %rdx
+	addq	%r15, %r14
+	movq	%rdx, %r15
+	adcq	\$0, %r15
+
+	decl	%ecx
+	jne	.Lreduction_loop
+
+	ret
+.size	__rsaz_512_reduce,.-__rsaz_512_reduce
+___
+}
+if ($addx) {
+	# __rsaz_512_reducex
+	#
+	# input:	%r8-%r15, %rbp - mod, 128(%rsp) - n0
+	# output:	%r8-%r15
+	# clobbers:	everything except %rbp and %rdi
+$code.=<<___;
+.type	__rsaz_512_reducex,\@abi-omnipotent
+.align	32
+__rsaz_512_reducex:
+	#movq	128+8(%rsp), %rdx		# pull $n0
+	imulq	%r8, %rdx
+	xorq	%rsi, %rsi			# cf=0,of=0
+	movl	\$8, %ecx
+	jmp	.Lreduction_loopx
+
+.align	32
+.Lreduction_loopx:
+	mov	%r8, %rbx
+	mulx	0(%rbp), %rax, %r8
+	adcx	%rbx, %rax
+	adox	%r9, %r8
+
+	mulx	8(%rbp), %rax, %r9
+	adcx	%rax, %r8
+	adox	%r10, %r9
+
+	mulx	16(%rbp), %rbx, %r10
+	adcx	%rbx, %r9
+	adox	%r11, %r10
+
+	mulx	24(%rbp), %rbx, %r11
+	adcx	%rbx, %r10
+	adox	%r12, %r11
+
+	.byte	0xc4,0x62,0xe3,0xf6,0xa5,0x20,0x00,0x00,0x00	# mulx	32(%rbp), %rbx, %r12
+	 mov	%rdx, %rax
+	 mov	%r8, %rdx
+	adcx	%rbx, %r11
+	adox	%r13, %r12
+
+	 mulx	128+8(%rsp), %rbx, %rdx
+	 mov	%rax, %rdx
+
+	mulx	40(%rbp), %rax, %r13
+	adcx	%rax, %r12
+	adox	%r14, %r13
+
+	.byte	0xc4,0x62,0xfb,0xf6,0xb5,0x30,0x00,0x00,0x00	# mulx	48(%rbp), %rax, %r14
+	adcx	%rax, %r13
+	adox	%r15, %r14
+
+	mulx	56(%rbp), %rax, %r15
+	 mov	%rbx, %rdx
+	adcx	%rax, %r14
+	adox	%rsi, %r15			# %rsi is 0
+	adcx	%rsi, %r15			# cf=0
+
+	decl	%ecx				# of=0
+	jne	.Lreduction_loopx
+
+	ret
+.size	__rsaz_512_reducex,.-__rsaz_512_reducex
+___
+}
+{	# __rsaz_512_subtract
+	# input: %r8-%r15, %rdi - $out, %rbp - $mod, %rcx - mask
+	# output:
+	# clobbers: everything but %rdi, %rsi and %rbp
+$code.=<<___;
+.type	__rsaz_512_subtract,\@abi-omnipotent
+.align	32
+__rsaz_512_subtract:
+	movq	%r8, ($out)
+	movq	%r9, 8($out)
+	movq	%r10, 16($out)
+	movq	%r11, 24($out)
+	movq	%r12, 32($out)
+	movq	%r13, 40($out)
+	movq	%r14, 48($out)
+	movq	%r15, 56($out)
+
+	movq	0($mod), %r8
+	movq	8($mod), %r9
+	negq	%r8
+	notq	%r9
+	andq	%rcx, %r8
+	movq	16($mod), %r10
+	andq	%rcx, %r9
+	notq	%r10
+	movq	24($mod), %r11
+	andq	%rcx, %r10
+	notq	%r11
+	movq	32($mod), %r12
+	andq	%rcx, %r11
+	notq	%r12
+	movq	40($mod), %r13
+	andq	%rcx, %r12
+	notq	%r13
+	movq	48($mod), %r14
+	andq	%rcx, %r13
+	notq	%r14
+	movq	56($mod), %r15
+	andq	%rcx, %r14
+	notq	%r15
+	andq	%rcx, %r15
+
+	addq	($out), %r8
+	adcq	8($out), %r9
+	adcq	16($out), %r10
+	adcq	24($out), %r11
+	adcq	32($out), %r12
+	adcq	40($out), %r13
+	adcq	48($out), %r14
+	adcq	56($out), %r15
+
+	movq	%r8, ($out)
+	movq	%r9, 8($out)
+	movq	%r10, 16($out)
+	movq	%r11, 24($out)
+	movq	%r12, 32($out)
+	movq	%r13, 40($out)
+	movq	%r14, 48($out)
+	movq	%r15, 56($out)
+
+	ret
+.size	__rsaz_512_subtract,.-__rsaz_512_subtract
+___
+}
+{	# __rsaz_512_mul
+	#
+	# input: %rsi - ap, %rbp - bp
+	# output:
+	# clobbers: everything
+my ($ap,$bp) = ("%rsi","%rbp");
+$code.=<<___;
+.type	__rsaz_512_mul,\@abi-omnipotent
+.align	32
+__rsaz_512_mul:
+	leaq	8(%rsp), %rdi
+
+	movq	($ap), %rax
+	mulq	%rbx
+	movq	%rax, (%rdi)
+	movq	8($ap), %rax
+	movq	%rdx, %r8
+
+	mulq	%rbx
+	addq	%rax, %r8
+	movq	16($ap), %rax
+	movq	%rdx, %r9
+	adcq	\$0, %r9
+
+	mulq	%rbx
+	addq	%rax, %r9
+	movq	24($ap), %rax
+	movq	%rdx, %r10
+	adcq	\$0, %r10
+
+	mulq	%rbx
+	addq	%rax, %r10
+	movq	32($ap), %rax
+	movq	%rdx, %r11
+	adcq	\$0, %r11
+
+	mulq	%rbx
+	addq	%rax, %r11
+	movq	40($ap), %rax
+	movq	%rdx, %r12
+	adcq	\$0, %r12
+
+	mulq	%rbx
+	addq	%rax, %r12
+	movq	48($ap), %rax
+	movq	%rdx, %r13
+	adcq	\$0, %r13
+
+	mulq	%rbx
+	addq	%rax, %r13
+	movq	56($ap), %rax
+	movq	%rdx, %r14
+	adcq	\$0, %r14
+
+	mulq	%rbx
+	addq	%rax, %r14
+	 movq	($ap), %rax
+	movq	%rdx, %r15
+	adcq	\$0, %r15
+
+	leaq	8($bp), $bp
+	leaq	8(%rdi), %rdi
+
+	movl	\$7, %ecx
+	jmp	.Loop_mul
+
+.align	32
+.Loop_mul:
+	movq	($bp), %rbx
+	mulq	%rbx
+	addq	%rax, %r8
+	movq	8($ap), %rax
+	movq	%r8, (%rdi)
+	movq	%rdx, %r8
+	adcq	\$0, %r8
+
+	mulq	%rbx
+	addq	%rax, %r9
+	movq	16($ap), %rax
+	adcq	\$0, %rdx
+	addq	%r9, %r8
+	movq	%rdx, %r9
+	adcq	\$0, %r9
+
+	mulq	%rbx
+	addq	%rax, %r10
+	movq	24($ap), %rax
+	adcq	\$0, %rdx
+	addq	%r10, %r9
+	movq	%rdx, %r10
+	adcq	\$0, %r10
+
+	mulq	%rbx
+	addq	%rax, %r11
+	movq	32($ap), %rax
+	adcq	\$0, %rdx
+	addq	%r11, %r10
+	movq	%rdx, %r11
+	adcq	\$0, %r11
+
+	mulq	%rbx
+	addq	%rax, %r12
+	movq	40($ap), %rax
+	adcq	\$0, %rdx
+	addq	%r12, %r11
+	movq	%rdx, %r12
+	adcq	\$0, %r12
+
+	mulq	%rbx
+	addq	%rax, %r13
+	movq	48($ap), %rax
+	adcq	\$0, %rdx
+	addq	%r13, %r12
+	movq	%rdx, %r13
+	adcq	\$0, %r13
+
+	mulq	%rbx
+	addq	%rax, %r14
+	movq	56($ap), %rax
+	adcq	\$0, %rdx
+	addq	%r14, %r13
+	movq	%rdx, %r14
+	 leaq	8($bp), $bp
+	adcq	\$0, %r14
+
+	mulq	%rbx
+	addq	%rax, %r15
+	 movq	($ap), %rax
+	adcq	\$0, %rdx
+	addq	%r15, %r14
+	movq	%rdx, %r15
+	adcq	\$0, %r15
+
+	leaq	8(%rdi), %rdi
+
+	decl	%ecx
+	jnz	.Loop_mul
+
+	movq	%r8, (%rdi)
+	movq	%r9, 8(%rdi)
+	movq	%r10, 16(%rdi)
+	movq	%r11, 24(%rdi)
+	movq	%r12, 32(%rdi)
+	movq	%r13, 40(%rdi)
+	movq	%r14, 48(%rdi)
+	movq	%r15, 56(%rdi)
+
+	ret
+.size	__rsaz_512_mul,.-__rsaz_512_mul
+___
+}
+if ($addx) {
+	# __rsaz_512_mulx
+	#
+	# input: %rsi - ap, %rbp - bp
+	# output:
+	# clobbers: everything
+my ($ap,$bp,$zero) = ("%rsi","%rbp","%rdi");
+$code.=<<___;
+.type	__rsaz_512_mulx,\@abi-omnipotent
+.align	32
+__rsaz_512_mulx:
+	mulx	($ap), %rbx, %r8	# initial %rdx preloaded by caller
+	mov	\$-6, %rcx
+
+	mulx	8($ap), %rax, %r9
+	movq	%rbx, 8(%rsp)
+
+	mulx	16($ap), %rbx, %r10
+	adc	%rax, %r8
+
+	mulx	24($ap), %rax, %r11
+	adc	%rbx, %r9
+
+	mulx	32($ap), %rbx, %r12
+	adc	%rax, %r10
+
+	mulx	40($ap), %rax, %r13
+	adc	%rbx, %r11
+
+	mulx	48($ap), %rbx, %r14
+	adc	%rax, %r12
+
+	mulx	56($ap), %rax, %r15
+	 mov	8($bp), %rdx
+	adc	%rbx, %r13
+	adc	%rax, %r14
+	adc	\$0, %r15
+
+	xor	$zero, $zero		# cf=0,of=0
+	jmp	.Loop_mulx
+
+.align	32
+.Loop_mulx:
+	movq	%r8, %rbx
+	mulx	($ap), %rax, %r8
+	adcx	%rax, %rbx
+	adox	%r9, %r8
+
+	mulx	8($ap), %rax, %r9
+	adcx	%rax, %r8
+	adox	%r10, %r9
+
+	mulx	16($ap), %rax, %r10
+	adcx	%rax, %r9
+	adox	%r11, %r10
+
+	mulx	24($ap), %rax, %r11
+	adcx	%rax, %r10
+	adox	%r12, %r11
+
+	.byte	0x3e,0xc4,0x62,0xfb,0xf6,0xa6,0x20,0x00,0x00,0x00	# mulx	32($ap), %rax, %r12
+	adcx	%rax, %r11
+	adox	%r13, %r12
+
+	mulx	40($ap), %rax, %r13
+	adcx	%rax, %r12
+	adox	%r14, %r13
+
+	mulx	48($ap), %rax, %r14
+	adcx	%rax, %r13
+	adox	%r15, %r14
+
+	mulx	56($ap), %rax, %r15
+	 movq	64($bp,%rcx,8), %rdx
+	 movq	%rbx, 8+64-8(%rsp,%rcx,8)
+	adcx	%rax, %r14
+	adox	$zero, %r15
+	adcx	$zero, %r15		# cf=0
+
+	inc	%rcx			# of=0
+	jnz	.Loop_mulx
+
+	movq	%r8, %rbx
+	mulx	($ap), %rax, %r8
+	adcx	%rax, %rbx
+	adox	%r9, %r8
+
+	.byte	0xc4,0x62,0xfb,0xf6,0x8e,0x08,0x00,0x00,0x00	# mulx	8($ap), %rax, %r9
+	adcx	%rax, %r8
+	adox	%r10, %r9
+
+	.byte	0xc4,0x62,0xfb,0xf6,0x96,0x10,0x00,0x00,0x00	# mulx	16($ap), %rax, %r10
+	adcx	%rax, %r9
+	adox	%r11, %r10
+
+	mulx	24($ap), %rax, %r11
+	adcx	%rax, %r10
+	adox	%r12, %r11
+
+	mulx	32($ap), %rax, %r12
+	adcx	%rax, %r11
+	adox	%r13, %r12
+
+	mulx	40($ap), %rax, %r13
+	adcx	%rax, %r12
+	adox	%r14, %r13
+
+	.byte	0xc4,0x62,0xfb,0xf6,0xb6,0x30,0x00,0x00,0x00	# mulx	48($ap), %rax, %r14
+	adcx	%rax, %r13
+	adox	%r15, %r14
+
+	.byte	0xc4,0x62,0xfb,0xf6,0xbe,0x38,0x00,0x00,0x00	# mulx	56($ap), %rax, %r15
+	adcx	%rax, %r14
+	adox	$zero, %r15
+	adcx	$zero, %r15
+
+	mov	%rbx, 8+64-8(%rsp)
+	mov	%r8, 8+64(%rsp)
+	mov	%r9, 8+64+8(%rsp)
+	mov	%r10, 8+64+16(%rsp)
+	mov	%r11, 8+64+24(%rsp)
+	mov	%r12, 8+64+32(%rsp)
+	mov	%r13, 8+64+40(%rsp)
+	mov	%r14, 8+64+48(%rsp)
+	mov	%r15, 8+64+56(%rsp)
+
+	ret
+.size	__rsaz_512_mulx,.-__rsaz_512_mulx
+___
+}
+{
+my ($out,$inp,$power)= $win64 ? ("%rcx","%rdx","%r8d") : ("%rdi","%rsi","%edx");
+$code.=<<___;
+.globl	rsaz_512_scatter4
+.type	rsaz_512_scatter4,\@abi-omnipotent
+.align	16
+rsaz_512_scatter4:
+	leaq	($out,$power,8), $out
+	movl	\$8, %r9d
+	jmp	.Loop_scatter
+.align	16
+.Loop_scatter:
+	movq	($inp), %rax
+	leaq	8($inp), $inp
+	movq	%rax, ($out)
+	leaq	128($out), $out
+	decl	%r9d
+	jnz	.Loop_scatter
+	ret
+.size	rsaz_512_scatter4,.-rsaz_512_scatter4
+
+.globl	rsaz_512_gather4
+.type	rsaz_512_gather4,\@abi-omnipotent
+.align	16
+rsaz_512_gather4:
+___
+$code.=<<___	if ($win64);
+.LSEH_begin_rsaz_512_gather4:
+	.byte	0x48,0x81,0xec,0xa8,0x00,0x00,0x00	# sub    $0xa8,%rsp
+	.byte	0x0f,0x29,0x34,0x24			# movaps %xmm6,(%rsp)
+	.byte	0x0f,0x29,0x7c,0x24,0x10		# movaps %xmm7,0x10(%rsp)
+	.byte	0x44,0x0f,0x29,0x44,0x24,0x20		# movaps %xmm8,0x20(%rsp)
+	.byte	0x44,0x0f,0x29,0x4c,0x24,0x30		# movaps %xmm9,0x30(%rsp)
+	.byte	0x44,0x0f,0x29,0x54,0x24,0x40		# movaps %xmm10,0x40(%rsp)
+	.byte	0x44,0x0f,0x29,0x5c,0x24,0x50		# movaps %xmm11,0x50(%rsp)
+	.byte	0x44,0x0f,0x29,0x64,0x24,0x60		# movaps %xmm12,0x60(%rsp)
+	.byte	0x44,0x0f,0x29,0x6c,0x24,0x70		# movaps %xmm13,0x70(%rsp)
+	.byte	0x44,0x0f,0x29,0xb4,0x24,0x80,0,0,0	# movaps %xmm14,0x80(%rsp)
+	.byte	0x44,0x0f,0x29,0xbc,0x24,0x90,0,0,0	# movaps %xmm15,0x90(%rsp)
+___
+$code.=<<___;
+	movd	$power,%xmm8
+	movdqa	.Linc+16(%rip),%xmm1	# 00000002000000020000000200000002
+	movdqa	.Linc(%rip),%xmm0	# 00000001000000010000000000000000
+
+	pshufd	\$0,%xmm8,%xmm8		# broadcast $power
+	movdqa	%xmm1,%xmm7
+	movdqa	%xmm1,%xmm2
+___
+########################################################################
+# calculate mask by comparing 0..15 to $power
+#
+for($i=0;$i<4;$i++) {
+$code.=<<___;
+	paddd	%xmm`$i`,%xmm`$i+1`
+	pcmpeqd	%xmm8,%xmm`$i`
+	movdqa	%xmm7,%xmm`$i+3`
+___
+}
+for(;$i<7;$i++) {
+$code.=<<___;
+	paddd	%xmm`$i`,%xmm`$i+1`
+	pcmpeqd	%xmm8,%xmm`$i`
+___
+}
+$code.=<<___;
+	pcmpeqd	%xmm8,%xmm7
+	movl	\$8, %r9d
+	jmp	.Loop_gather
+.align	16
+.Loop_gather:
+	movdqa	16*0($inp),%xmm8
+	movdqa	16*1($inp),%xmm9
+	movdqa	16*2($inp),%xmm10
+	movdqa	16*3($inp),%xmm11
+	pand	%xmm0,%xmm8
+	movdqa	16*4($inp),%xmm12
+	pand	%xmm1,%xmm9
+	movdqa	16*5($inp),%xmm13
+	pand	%xmm2,%xmm10
+	movdqa	16*6($inp),%xmm14
+	pand	%xmm3,%xmm11
+	movdqa	16*7($inp),%xmm15
+	leaq	128($inp), $inp
+	pand	%xmm4,%xmm12
+	pand	%xmm5,%xmm13
+	pand	%xmm6,%xmm14
+	pand	%xmm7,%xmm15
+	por	%xmm10,%xmm8
+	por	%xmm11,%xmm9
+	por	%xmm12,%xmm8
+	por	%xmm13,%xmm9
+	por	%xmm14,%xmm8
+	por	%xmm15,%xmm9
+
+	por	%xmm9,%xmm8
+	pshufd	\$0x4e,%xmm8,%xmm9
+	por	%xmm9,%xmm8
+	movq	%xmm8,($out)
+	leaq	8($out), $out
+	decl	%r9d
+	jnz	.Loop_gather
+___
+$code.=<<___	if ($win64);
+	movaps	0x00(%rsp),%xmm6
+	movaps	0x10(%rsp),%xmm7
+	movaps	0x20(%rsp),%xmm8
+	movaps	0x30(%rsp),%xmm9
+	movaps	0x40(%rsp),%xmm10
+	movaps	0x50(%rsp),%xmm11
+	movaps	0x60(%rsp),%xmm12
+	movaps	0x70(%rsp),%xmm13
+	movaps	0x80(%rsp),%xmm14
+	movaps	0x90(%rsp),%xmm15
+	add	\$0xa8,%rsp
+___
+$code.=<<___;
+	ret
+.LSEH_end_rsaz_512_gather4:
+.size	rsaz_512_gather4,.-rsaz_512_gather4
+
+.align	64
+.Linc:
+	.long	0,0, 1,1
+	.long	2,2, 2,2
+___
+}
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	se_handler,\@abi-omnipotent
+.align	16
+se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# end of prologue label
+	cmp	%r10,%rbx		# context->Rip<end of prologue label
+	jb	.Lcommon_seh_tail
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lcommon_seh_tail
+
+	lea	128+24+48(%rax),%rax
+
+	lea	.Lmul_gather4_epilogue(%rip),%rbx
+	cmp	%r10,%rbx
+	jne	.Lse_not_in_mul_gather4
+
+	lea	0xb0(%rax),%rax
+
+	lea	-48-0xa8(%rax),%rsi
+	lea	512($context),%rdi
+	mov	\$20,%ecx
+	.long	0xa548f3fc		# cld; rep movsq
+
+.Lse_not_in_mul_gather4:
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+.Lcommon_seh_tail:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	se_handler,.-se_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_rsaz_512_sqr
+	.rva	.LSEH_end_rsaz_512_sqr
+	.rva	.LSEH_info_rsaz_512_sqr
+
+	.rva	.LSEH_begin_rsaz_512_mul
+	.rva	.LSEH_end_rsaz_512_mul
+	.rva	.LSEH_info_rsaz_512_mul
+
+	.rva	.LSEH_begin_rsaz_512_mul_gather4
+	.rva	.LSEH_end_rsaz_512_mul_gather4
+	.rva	.LSEH_info_rsaz_512_mul_gather4
+
+	.rva	.LSEH_begin_rsaz_512_mul_scatter4
+	.rva	.LSEH_end_rsaz_512_mul_scatter4
+	.rva	.LSEH_info_rsaz_512_mul_scatter4
+
+	.rva	.LSEH_begin_rsaz_512_mul_by_one
+	.rva	.LSEH_end_rsaz_512_mul_by_one
+	.rva	.LSEH_info_rsaz_512_mul_by_one
+
+	.rva	.LSEH_begin_rsaz_512_gather4
+	.rva	.LSEH_end_rsaz_512_gather4
+	.rva	.LSEH_info_rsaz_512_gather4
+
+.section	.xdata
+.align	8
+.LSEH_info_rsaz_512_sqr:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lsqr_body,.Lsqr_epilogue			# HandlerData[]
+.LSEH_info_rsaz_512_mul:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lmul_body,.Lmul_epilogue			# HandlerData[]
+.LSEH_info_rsaz_512_mul_gather4:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lmul_gather4_body,.Lmul_gather4_epilogue	# HandlerData[]
+.LSEH_info_rsaz_512_mul_scatter4:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lmul_scatter4_body,.Lmul_scatter4_epilogue	# HandlerData[]
+.LSEH_info_rsaz_512_mul_by_one:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lmul_by_one_body,.Lmul_by_one_epilogue		# HandlerData[]
+.LSEH_info_rsaz_512_gather4:
+	.byte	0x01,0x46,0x16,0x00
+	.byte	0x46,0xf8,0x09,0x00	# vmovaps 0x90(rsp),xmm15
+	.byte	0x3d,0xe8,0x08,0x00	# vmovaps 0x80(rsp),xmm14
+	.byte	0x34,0xd8,0x07,0x00	# vmovaps 0x70(rsp),xmm13
+	.byte	0x2e,0xc8,0x06,0x00	# vmovaps 0x60(rsp),xmm12
+	.byte	0x28,0xb8,0x05,0x00	# vmovaps 0x50(rsp),xmm11
+	.byte	0x22,0xa8,0x04,0x00	# vmovaps 0x40(rsp),xmm10
+	.byte	0x1c,0x98,0x03,0x00	# vmovaps 0x30(rsp),xmm9
+	.byte	0x16,0x88,0x02,0x00	# vmovaps 0x20(rsp),xmm8
+	.byte	0x10,0x78,0x01,0x00	# vmovaps 0x10(rsp),xmm7
+	.byte	0x0b,0x68,0x00,0x00	# vmovaps 0x00(rsp),xmm6
+	.byte	0x07,0x01,0x15,0x00	# sub     rsp,0xa8
+___
+}
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/s390x-gf2m.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/s390x-gf2m.pl
new file mode 100644
index 000000000..06181bf9b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/s390x-gf2m.pl
@@ -0,0 +1,228 @@
+#! /usr/bin/env perl
+# Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# May 2011
+#
+# The module implements bn_GF2m_mul_2x2 polynomial multiplication used
+# in bn_gf2m.c. It's kind of low-hanging mechanical port from C for
+# the time being... gcc 4.3 appeared to generate poor code, therefore
+# the effort. And indeed, the module delivers 55%-90%(*) improvement
+# on heaviest ECDSA verify and ECDH benchmarks for 163- and 571-bit
+# key lengths on z990, 30%-55%(*) - on z10, and 70%-110%(*) - on z196.
+# This is for 64-bit build. In 32-bit "highgprs" case improvement is
+# even higher, for example on z990 it was measured 80%-150%. ECDSA
+# sign is modest 9%-12% faster. Keep in mind that these coefficients
+# are not ones for bn_GF2m_mul_2x2 itself, as not all CPU time is
+# burnt in it...
+#
+# (*)	gcc 4.1 was observed to deliver better results than gcc 4.3,
+#	so that improvement coefficients can vary from one specific
+#	setup to another.
+
+$flavour = shift;
+
+if ($flavour =~ /3[12]/) {
+        $SIZE_T=4;
+        $g="";
+} else {
+        $SIZE_T=8;
+        $g="g";
+}
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+$stdframe=16*$SIZE_T+4*8;
+
+$rp="%r2";
+$a1="%r3";
+$a0="%r4";
+$b1="%r5";
+$b0="%r6";
+
+$ra="%r14";
+$sp="%r15";
+
+@T=("%r0","%r1");
+@i=("%r12","%r13");
+
+($a1,$a2,$a4,$a8,$a12,$a48)=map("%r$_",(6..11));
+($lo,$hi,$b)=map("%r$_",(3..5)); $a=$lo; $mask=$a8;
+
+$code.=<<___;
+.text
+
+.type	_mul_1x1,\@function
+.align	16
+_mul_1x1:
+	lgr	$a1,$a
+	sllg	$a2,$a,1
+	sllg	$a4,$a,2
+	sllg	$a8,$a,3
+
+	srag	$lo,$a1,63			# broadcast 63rd bit
+	nihh	$a1,0x1fff
+	srag	@i[0],$a2,63			# broadcast 62nd bit
+	nihh	$a2,0x3fff
+	srag	@i[1],$a4,63			# broadcast 61st bit
+	nihh	$a4,0x7fff
+	ngr	$lo,$b
+	ngr	@i[0],$b
+	ngr	@i[1],$b
+
+	lghi	@T[0],0
+	lgr	$a12,$a1
+	stg	@T[0],`$stdframe+0*8`($sp)	# tab[0]=0
+	xgr	$a12,$a2
+	stg	$a1,`$stdframe+1*8`($sp)	# tab[1]=a1
+	 lgr	$a48,$a4
+	stg	$a2,`$stdframe+2*8`($sp)	# tab[2]=a2
+	 xgr	$a48,$a8
+	stg	$a12,`$stdframe+3*8`($sp)	# tab[3]=a1^a2
+	 xgr	$a1,$a4
+
+	stg	$a4,`$stdframe+4*8`($sp)	# tab[4]=a4
+	xgr	$a2,$a4
+	stg	$a1,`$stdframe+5*8`($sp)	# tab[5]=a1^a4
+	xgr	$a12,$a4
+	stg	$a2,`$stdframe+6*8`($sp)	# tab[6]=a2^a4
+	 xgr	$a1,$a48
+	stg	$a12,`$stdframe+7*8`($sp)	# tab[7]=a1^a2^a4
+	 xgr	$a2,$a48
+
+	stg	$a8,`$stdframe+8*8`($sp)	# tab[8]=a8
+	xgr	$a12,$a48
+	stg	$a1,`$stdframe+9*8`($sp)	# tab[9]=a1^a8
+	 xgr	$a1,$a4
+	stg	$a2,`$stdframe+10*8`($sp)	# tab[10]=a2^a8
+	 xgr	$a2,$a4
+	stg	$a12,`$stdframe+11*8`($sp)	# tab[11]=a1^a2^a8
+
+	xgr	$a12,$a4
+	stg	$a48,`$stdframe+12*8`($sp)	# tab[12]=a4^a8
+	 srlg	$hi,$lo,1
+	stg	$a1,`$stdframe+13*8`($sp)	# tab[13]=a1^a4^a8
+	 sllg	$lo,$lo,63
+	stg	$a2,`$stdframe+14*8`($sp)	# tab[14]=a2^a4^a8
+	 srlg	@T[0],@i[0],2
+	stg	$a12,`$stdframe+15*8`($sp)	# tab[15]=a1^a2^a4^a8
+
+	lghi	$mask,`0xf<<3`
+	sllg	$a1,@i[0],62
+	 sllg	@i[0],$b,3
+	srlg	@T[1],@i[1],3
+	 ngr	@i[0],$mask
+	sllg	$a2,@i[1],61
+	 srlg	@i[1],$b,4-3
+	xgr	$hi,@T[0]
+	 ngr	@i[1],$mask
+	xgr	$lo,$a1
+	xgr	$hi,@T[1]
+	xgr	$lo,$a2
+
+	xg	$lo,$stdframe(@i[0],$sp)
+	srlg	@i[0],$b,8-3
+	ngr	@i[0],$mask
+___
+for($n=1;$n<14;$n++) {
+$code.=<<___;
+	lg	@T[1],$stdframe(@i[1],$sp)
+	srlg	@i[1],$b,`($n+2)*4`-3
+	sllg	@T[0],@T[1],`$n*4`
+	ngr	@i[1],$mask
+	srlg	@T[1],@T[1],`64-$n*4`
+	xgr	$lo,@T[0]
+	xgr	$hi,@T[1]
+___
+	push(@i,shift(@i)); push(@T,shift(@T));
+}
+$code.=<<___;
+	lg	@T[1],$stdframe(@i[1],$sp)
+	sllg	@T[0],@T[1],`$n*4`
+	srlg	@T[1],@T[1],`64-$n*4`
+	xgr	$lo,@T[0]
+	xgr	$hi,@T[1]
+
+	lg	@T[0],$stdframe(@i[0],$sp)
+	sllg	@T[1],@T[0],`($n+1)*4`
+	srlg	@T[0],@T[0],`64-($n+1)*4`
+	xgr	$lo,@T[1]
+	xgr	$hi,@T[0]
+
+	br	$ra
+.size	_mul_1x1,.-_mul_1x1
+
+.globl	bn_GF2m_mul_2x2
+.type	bn_GF2m_mul_2x2,\@function
+.align	16
+bn_GF2m_mul_2x2:
+	stm${g}	%r3,%r15,3*$SIZE_T($sp)
+
+	lghi	%r1,-$stdframe-128
+	la	%r0,0($sp)
+	la	$sp,0(%r1,$sp)			# alloca
+	st${g}	%r0,0($sp)			# back chain
+___
+if ($SIZE_T==8) {
+my @r=map("%r$_",(6..9));
+$code.=<<___;
+	bras	$ra,_mul_1x1			# a1·b1
+	stmg	$lo,$hi,16($rp)
+
+	lg	$a,`$stdframe+128+4*$SIZE_T`($sp)
+	lg	$b,`$stdframe+128+6*$SIZE_T`($sp)
+	bras	$ra,_mul_1x1			# a0·b0
+	stmg	$lo,$hi,0($rp)
+
+	lg	$a,`$stdframe+128+3*$SIZE_T`($sp)
+	lg	$b,`$stdframe+128+5*$SIZE_T`($sp)
+	xg	$a,`$stdframe+128+4*$SIZE_T`($sp)
+	xg	$b,`$stdframe+128+6*$SIZE_T`($sp)
+	bras	$ra,_mul_1x1			# (a0+a1)·(b0+b1)
+	lmg	@r[0],@r[3],0($rp)
+
+	xgr	$lo,$hi
+	xgr	$hi,@r[1]
+	xgr	$lo,@r[0]
+	xgr	$hi,@r[2]
+	xgr	$lo,@r[3]
+	xgr	$hi,@r[3]
+	xgr	$lo,$hi
+	stg	$hi,16($rp)
+	stg	$lo,8($rp)
+___
+} else {
+$code.=<<___;
+	sllg	%r3,%r3,32
+	sllg	%r5,%r5,32
+	or	%r3,%r4
+	or	%r5,%r6
+	bras	$ra,_mul_1x1
+	rllg	$lo,$lo,32
+	rllg	$hi,$hi,32
+	stmg	$lo,$hi,0($rp)
+___
+}
+$code.=<<___;
+	lm${g}	%r6,%r15,`$stdframe+128+6*$SIZE_T`($sp)
+	br	$ra
+.size	bn_GF2m_mul_2x2,.-bn_GF2m_mul_2x2
+.string	"GF(2^m) Multiplication for s390x, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+$code =~ s/\`([^\`]*)\`/eval($1)/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/s390x-mont.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/s390x-mont.pl
new file mode 100644
index 000000000..c2fc5adff
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/s390x-mont.pl
@@ -0,0 +1,284 @@
+#! /usr/bin/env perl
+# Copyright 2007-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# April 2007.
+#
+# Performance improvement over vanilla C code varies from 85% to 45%
+# depending on key length and benchmark. Unfortunately in this context
+# these are not very impressive results [for code that utilizes "wide"
+# 64x64=128-bit multiplication, which is not commonly available to C
+# programmers], at least hand-coded bn_asm.c replacement is known to
+# provide 30-40% better results for longest keys. Well, on a second
+# thought it's not very surprising, because z-CPUs are single-issue
+# and _strictly_ in-order execution, while bn_mul_mont is more or less
+# dependent on CPU ability to pipe-line instructions and have several
+# of them "in-flight" at the same time. I mean while other methods,
+# for example Karatsuba, aim to minimize amount of multiplications at
+# the cost of other operations increase, bn_mul_mont aim to neatly
+# "overlap" multiplications and the other operations [and on most
+# platforms even minimize the amount of the other operations, in
+# particular references to memory]. But it's possible to improve this
+# module performance by implementing dedicated squaring code-path and
+# possibly by unrolling loops...
+
+# January 2009.
+#
+# Reschedule to minimize/avoid Address Generation Interlock hazard,
+# make inner loops counter-based.
+
+# November 2010.
+#
+# Adapt for -m31 build. If kernel supports what's called "highgprs"
+# feature on Linux [see /proc/cpuinfo], it's possible to use 64-bit
+# instructions and achieve "64-bit" performance even in 31-bit legacy
+# application context. The feature is not specific to any particular
+# processor, as long as it's "z-CPU". Latter implies that the code
+# remains z/Architecture specific. Compatibility with 32-bit BN_ULONG
+# is achieved by swapping words after 64-bit loads, follow _dswap-s.
+# On z990 it was measured to perform 2.6-2.2 times better than
+# compiler-generated code, less for longer keys...
+
+$flavour = shift;
+
+if ($flavour =~ /3[12]/) {
+	$SIZE_T=4;
+	$g="";
+} else {
+	$SIZE_T=8;
+	$g="g";
+}
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+$stdframe=16*$SIZE_T+4*8;
+
+$mn0="%r0";
+$num="%r1";
+
+# int bn_mul_mont(
+$rp="%r2";		# BN_ULONG *rp,
+$ap="%r3";		# const BN_ULONG *ap,
+$bp="%r4";		# const BN_ULONG *bp,
+$np="%r5";		# const BN_ULONG *np,
+$n0="%r6";		# const BN_ULONG *n0,
+#$num="160(%r15)"	# int num);
+
+$bi="%r2";	# zaps rp
+$j="%r7";
+
+$ahi="%r8";
+$alo="%r9";
+$nhi="%r10";
+$nlo="%r11";
+$AHI="%r12";
+$NHI="%r13";
+$count="%r14";
+$sp="%r15";
+
+$code.=<<___;
+.text
+.globl	bn_mul_mont
+.type	bn_mul_mont,\@function
+bn_mul_mont:
+	lgf	$num,`$stdframe+$SIZE_T-4`($sp)	# pull $num
+	sla	$num,`log($SIZE_T)/log(2)`	# $num to enumerate bytes
+	la	$bp,0($num,$bp)
+
+	st${g}	%r2,2*$SIZE_T($sp)
+
+	cghi	$num,16		#
+	lghi	%r2,0		#
+	blr	%r14		# if($num<16) return 0;
+___
+$code.=<<___ if ($flavour =~ /3[12]/);
+	tmll	$num,4
+	bnzr	%r14		# if ($num&1) return 0;
+___
+$code.=<<___ if ($flavour !~ /3[12]/);
+	cghi	$num,96		#
+	bhr	%r14		# if($num>96) return 0;
+___
+$code.=<<___;
+	stm${g}	%r3,%r15,3*$SIZE_T($sp)
+
+	lghi	$rp,-$stdframe-8	# leave room for carry bit
+	lcgr	$j,$num		# -$num
+	lgr	%r0,$sp
+	la	$rp,0($rp,$sp)
+	la	$sp,0($j,$rp)	# alloca
+	st${g}	%r0,0($sp)	# back chain
+
+	sra	$num,3		# restore $num
+	la	$bp,0($j,$bp)	# restore $bp
+	ahi	$num,-1		# adjust $num for inner loop
+	lg	$n0,0($n0)	# pull n0
+	_dswap	$n0
+
+	lg	$bi,0($bp)
+	_dswap	$bi
+	lg	$alo,0($ap)
+	_dswap	$alo
+	mlgr	$ahi,$bi	# ap[0]*bp[0]
+	lgr	$AHI,$ahi
+
+	lgr	$mn0,$alo	# "tp[0]"*n0
+	msgr	$mn0,$n0
+
+	lg	$nlo,0($np)	#
+	_dswap	$nlo
+	mlgr	$nhi,$mn0	# np[0]*m1
+	algr	$nlo,$alo	# +="tp[0]"
+	lghi	$NHI,0
+	alcgr	$NHI,$nhi
+
+	la	$j,8(%r0)	# j=1
+	lr	$count,$num
+
+.align	16
+.L1st:
+	lg	$alo,0($j,$ap)
+	_dswap	$alo
+	mlgr	$ahi,$bi	# ap[j]*bp[0]
+	algr	$alo,$AHI
+	lghi	$AHI,0
+	alcgr	$AHI,$ahi
+
+	lg	$nlo,0($j,$np)
+	_dswap	$nlo
+	mlgr	$nhi,$mn0	# np[j]*m1
+	algr	$nlo,$NHI
+	lghi	$NHI,0
+	alcgr	$nhi,$NHI	# +="tp[j]"
+	algr	$nlo,$alo
+	alcgr	$NHI,$nhi
+
+	stg	$nlo,$stdframe-8($j,$sp)	# tp[j-1]=
+	la	$j,8($j)	# j++
+	brct	$count,.L1st
+
+	algr	$NHI,$AHI
+	lghi	$AHI,0
+	alcgr	$AHI,$AHI	# upmost overflow bit
+	stg	$NHI,$stdframe-8($j,$sp)
+	stg	$AHI,$stdframe($j,$sp)
+	la	$bp,8($bp)	# bp++
+
+.Louter:
+	lg	$bi,0($bp)	# bp[i]
+	_dswap	$bi
+	lg	$alo,0($ap)
+	_dswap	$alo
+	mlgr	$ahi,$bi	# ap[0]*bp[i]
+	alg	$alo,$stdframe($sp)	# +=tp[0]
+	lghi	$AHI,0
+	alcgr	$AHI,$ahi
+
+	lgr	$mn0,$alo
+	msgr	$mn0,$n0	# tp[0]*n0
+
+	lg	$nlo,0($np)	# np[0]
+	_dswap	$nlo
+	mlgr	$nhi,$mn0	# np[0]*m1
+	algr	$nlo,$alo	# +="tp[0]"
+	lghi	$NHI,0
+	alcgr	$NHI,$nhi
+
+	la	$j,8(%r0)	# j=1
+	lr	$count,$num
+
+.align	16
+.Linner:
+	lg	$alo,0($j,$ap)
+	_dswap	$alo
+	mlgr	$ahi,$bi	# ap[j]*bp[i]
+	algr	$alo,$AHI
+	lghi	$AHI,0
+	alcgr	$ahi,$AHI
+	alg	$alo,$stdframe($j,$sp)# +=tp[j]
+	alcgr	$AHI,$ahi
+
+	lg	$nlo,0($j,$np)
+	_dswap	$nlo
+	mlgr	$nhi,$mn0	# np[j]*m1
+	algr	$nlo,$NHI
+	lghi	$NHI,0
+	alcgr	$nhi,$NHI
+	algr	$nlo,$alo	# +="tp[j]"
+	alcgr	$NHI,$nhi
+
+	stg	$nlo,$stdframe-8($j,$sp)	# tp[j-1]=
+	la	$j,8($j)	# j++
+	brct	$count,.Linner
+
+	algr	$NHI,$AHI
+	lghi	$AHI,0
+	alcgr	$AHI,$AHI
+	alg	$NHI,$stdframe($j,$sp)# accumulate previous upmost overflow bit
+	lghi	$ahi,0
+	alcgr	$AHI,$ahi	# new upmost overflow bit
+	stg	$NHI,$stdframe-8($j,$sp)
+	stg	$AHI,$stdframe($j,$sp)
+
+	la	$bp,8($bp)	# bp++
+	cl${g}	$bp,`$stdframe+8+4*$SIZE_T`($j,$sp)	# compare to &bp[num]
+	jne	.Louter
+
+	l${g}	$rp,`$stdframe+8+2*$SIZE_T`($j,$sp)	# reincarnate rp
+	la	$ap,$stdframe($sp)
+	ahi	$num,1		# restore $num, incidentally clears "borrow"
+
+	la	$j,0(%r0)
+	lr	$count,$num
+.Lsub:	lg	$alo,0($j,$ap)
+	lg	$nlo,0($j,$np)
+	_dswap	$nlo
+	slbgr	$alo,$nlo
+	stg	$alo,0($j,$rp)
+	la	$j,8($j)
+	brct	$count,.Lsub
+	lghi	$ahi,0
+	slbgr	$AHI,$ahi	# handle upmost carry
+	lghi	$NHI,-1
+	xgr	$NHI,$AHI
+
+	la	$j,0(%r0)
+	lgr	$count,$num
+.Lcopy:	lg	$ahi,$stdframe($j,$sp)	# conditional copy
+	lg	$alo,0($j,$rp)
+	ngr	$ahi,$AHI
+	ngr	$alo,$NHI
+	ogr	$alo,$ahi
+	_dswap	$alo
+	stg	$j,$stdframe($j,$sp)	# zap tp
+	stg	$alo,0($j,$rp)
+	la	$j,8($j)
+	brct	$count,.Lcopy
+
+	la	%r1,`$stdframe+8+6*$SIZE_T`($j,$sp)
+	lm${g}	%r6,%r15,0(%r1)
+	lghi	%r2,1		# signal "processed"
+	br	%r14
+.size	bn_mul_mont,.-bn_mul_mont
+.string	"Montgomery Multiplication for s390x, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+	s/_dswap\s+(%r[0-9]+)/sprintf("rllg\t%s,%s,32",$1,$1) if($SIZE_T==4)/e;
+	print $_,"\n";
+}
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/s390x.S b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/s390x.S
new file mode 100644
index 000000000..292a7a999
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/s390x.S
@@ -0,0 +1,713 @@
+.ident "s390x.S, version 1.1"
+// ====================================================================
+// Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+//
+// Licensed under the OpenSSL license (the "License").  You may not use
+// this file except in compliance with the License.  You can obtain a copy
+// in the file LICENSE in the source distribution or at
+// https://www.openssl.org/source/license.html
+// ====================================================================
+
+.text
+
+#define zero	%r0
+
+// BN_ULONG bn_mul_add_words(BN_ULONG *r2,BN_ULONG *r3,int r4,BN_ULONG r5);
+.globl	bn_mul_add_words
+.type	bn_mul_add_words,@function
+.align	4
+bn_mul_add_words:
+	lghi	zero,0		// zero = 0
+	la	%r1,0(%r2)	// put rp aside [to give way to]
+	lghi	%r2,0		// return value
+	ltgfr	%r4,%r4
+	bler	%r14		// if (len<=0) return 0;
+
+	stmg	%r6,%r13,48(%r15)
+	lghi	%r2,3
+	lghi	%r12,0		// carry = 0
+	slgr	%r1,%r3		// rp-=ap
+	nr	%r2,%r4		// len%4
+	sra	%r4,2		// cnt=len/4
+	jz	.Loop1_madd	// carry is incidentally cleared if branch taken
+	algr	zero,zero	// clear carry
+
+	lg	%r7,0(%r3)	// ap[0]
+	lg	%r9,8(%r3)	// ap[1]
+	mlgr	%r6,%r5		// *=w
+	brct	%r4,.Loop4_madd
+	j	.Loop4_madd_tail
+
+.Loop4_madd:
+	mlgr	%r8,%r5
+	lg	%r11,16(%r3)	// ap[i+2]
+	alcgr	%r7,%r12	// +=carry
+	alcgr	%r6,zero
+	alg	%r7,0(%r3,%r1)	// +=rp[i]
+	stg	%r7,0(%r3,%r1)	// rp[i]=
+
+	mlgr	%r10,%r5
+	lg	%r13,24(%r3)
+	alcgr	%r9,%r6
+	alcgr	%r8,zero
+	alg	%r9,8(%r3,%r1)
+	stg	%r9,8(%r3,%r1)
+
+	mlgr	%r12,%r5
+	lg	%r7,32(%r3)
+	alcgr	%r11,%r8
+	alcgr	%r10,zero
+	alg	%r11,16(%r3,%r1)
+	stg	%r11,16(%r3,%r1)
+
+	mlgr	%r6,%r5
+	lg	%r9,40(%r3)
+	alcgr	%r13,%r10
+	alcgr	%r12,zero
+	alg	%r13,24(%r3,%r1)
+	stg	%r13,24(%r3,%r1)
+
+	la	%r3,32(%r3)	// i+=4
+	brct	%r4,.Loop4_madd
+
+.Loop4_madd_tail:
+	mlgr	%r8,%r5
+	lg	%r11,16(%r3)
+	alcgr	%r7,%r12	// +=carry
+	alcgr	%r6,zero
+	alg	%r7,0(%r3,%r1)	// +=rp[i]
+	stg	%r7,0(%r3,%r1)	// rp[i]=
+
+	mlgr	%r10,%r5
+	lg	%r13,24(%r3)
+	alcgr	%r9,%r6
+	alcgr	%r8,zero
+	alg	%r9,8(%r3,%r1)
+	stg	%r9,8(%r3,%r1)
+
+	mlgr	%r12,%r5
+	alcgr	%r11,%r8
+	alcgr	%r10,zero
+	alg	%r11,16(%r3,%r1)
+	stg	%r11,16(%r3,%r1)
+
+	alcgr	%r13,%r10
+	alcgr	%r12,zero
+	alg	%r13,24(%r3,%r1)
+	stg	%r13,24(%r3,%r1)
+
+	la	%r3,32(%r3)	// i+=4
+
+	la	%r2,1(%r2)	// see if len%4 is zero ...
+	brct	%r2,.Loop1_madd	// without touching condition code:-)
+
+.Lend_madd:
+	lgr	%r2,zero	// return value
+	alcgr	%r2,%r12	// collect even carry bit
+	lmg	%r6,%r13,48(%r15)
+	br	%r14
+
+.Loop1_madd:
+	lg	%r7,0(%r3)	// ap[i]
+	mlgr	%r6,%r5		// *=w
+	alcgr	%r7,%r12	// +=carry
+	alcgr	%r6,zero
+	alg	%r7,0(%r3,%r1)	// +=rp[i]
+	stg	%r7,0(%r3,%r1)	// rp[i]=
+
+	lgr	%r12,%r6
+	la	%r3,8(%r3)	// i++
+	brct	%r2,.Loop1_madd
+
+	j	.Lend_madd
+.size	bn_mul_add_words,.-bn_mul_add_words
+
+// BN_ULONG bn_mul_words(BN_ULONG *r2,BN_ULONG *r3,int r4,BN_ULONG r5);
+.globl	bn_mul_words
+.type	bn_mul_words,@function
+.align	4
+bn_mul_words:
+	lghi	zero,0		// zero = 0
+	la	%r1,0(%r2)	// put rp aside
+	lghi	%r2,0		// i=0;
+	ltgfr	%r4,%r4
+	bler	%r14		// if (len<=0) return 0;
+
+	stmg	%r6,%r10,48(%r15)
+	lghi	%r10,3
+	lghi	%r8,0		// carry = 0
+	nr	%r10,%r4	// len%4
+	sra	%r4,2		// cnt=len/4
+	jz	.Loop1_mul	// carry is incidentally cleared if branch taken
+	algr	zero,zero	// clear carry
+
+.Loop4_mul:
+	lg	%r7,0(%r2,%r3)	// ap[i]
+	mlgr	%r6,%r5		// *=w
+	alcgr	%r7,%r8		// +=carry
+	stg	%r7,0(%r2,%r1)	// rp[i]=
+
+	lg	%r9,8(%r2,%r3)
+	mlgr	%r8,%r5
+	alcgr	%r9,%r6
+	stg	%r9,8(%r2,%r1)
+
+	lg	%r7,16(%r2,%r3)
+	mlgr	%r6,%r5
+	alcgr	%r7,%r8
+	stg	%r7,16(%r2,%r1)
+
+	lg	%r9,24(%r2,%r3)
+	mlgr	%r8,%r5
+	alcgr	%r9,%r6
+	stg	%r9,24(%r2,%r1)
+
+	la	%r2,32(%r2)	// i+=4
+	brct	%r4,.Loop4_mul
+
+	la	%r10,1(%r10)		// see if len%4 is zero ...
+	brct	%r10,.Loop1_mul		// without touching condition code:-)
+
+.Lend_mul:
+	alcgr	%r8,zero	// collect carry bit
+	lgr	%r2,%r8
+	lmg	%r6,%r10,48(%r15)
+	br	%r14
+
+.Loop1_mul:
+	lg	%r7,0(%r2,%r3)	// ap[i]
+	mlgr	%r6,%r5		// *=w
+	alcgr	%r7,%r8		// +=carry
+	stg	%r7,0(%r2,%r1)	// rp[i]=
+
+	lgr	%r8,%r6
+	la	%r2,8(%r2)	// i++
+	brct	%r10,.Loop1_mul
+
+	j	.Lend_mul
+.size	bn_mul_words,.-bn_mul_words
+
+// void bn_sqr_words(BN_ULONG *r2,BN_ULONG *r2,int r4)
+.globl	bn_sqr_words
+.type	bn_sqr_words,@function
+.align	4
+bn_sqr_words:
+	ltgfr	%r4,%r4
+	bler	%r14
+
+	stmg	%r6,%r7,48(%r15)
+	srag	%r1,%r4,2	// cnt=len/4
+	jz	.Loop1_sqr
+
+.Loop4_sqr:
+	lg	%r7,0(%r3)
+	mlgr	%r6,%r7
+	stg	%r7,0(%r2)
+	stg	%r6,8(%r2)
+
+	lg	%r7,8(%r3)
+	mlgr	%r6,%r7
+	stg	%r7,16(%r2)
+	stg	%r6,24(%r2)
+
+	lg	%r7,16(%r3)
+	mlgr	%r6,%r7
+	stg	%r7,32(%r2)
+	stg	%r6,40(%r2)
+
+	lg	%r7,24(%r3)
+	mlgr	%r6,%r7
+	stg	%r7,48(%r2)
+	stg	%r6,56(%r2)
+
+	la	%r3,32(%r3)
+	la	%r2,64(%r2)
+	brct	%r1,.Loop4_sqr
+
+	lghi	%r1,3
+	nr	%r4,%r1		// cnt=len%4
+	jz	.Lend_sqr
+
+.Loop1_sqr:
+	lg	%r7,0(%r3)
+	mlgr	%r6,%r7
+	stg	%r7,0(%r2)
+	stg	%r6,8(%r2)
+
+	la	%r3,8(%r3)
+	la	%r2,16(%r2)
+	brct	%r4,.Loop1_sqr
+
+.Lend_sqr:
+	lmg	%r6,%r7,48(%r15)
+	br	%r14
+.size	bn_sqr_words,.-bn_sqr_words
+
+// BN_ULONG bn_div_words(BN_ULONG h,BN_ULONG l,BN_ULONG d);
+.globl	bn_div_words
+.type	bn_div_words,@function
+.align	4
+bn_div_words:
+	dlgr	%r2,%r4
+	lgr	%r2,%r3
+	br	%r14
+.size	bn_div_words,.-bn_div_words
+
+// BN_ULONG bn_add_words(BN_ULONG *r2,BN_ULONG *r3,BN_ULONG *r4,int r5);
+.globl	bn_add_words
+.type	bn_add_words,@function
+.align	4
+bn_add_words:
+	la	%r1,0(%r2)	// put rp aside
+	lghi	%r2,0		// i=0
+	ltgfr	%r5,%r5
+	bler	%r14		// if (len<=0) return 0;
+
+	stg	%r6,48(%r15)
+	lghi	%r6,3
+	nr	%r6,%r5		// len%4
+	sra	%r5,2		// len/4, use sra because it sets condition code
+	jz	.Loop1_add	// carry is incidentally cleared if branch taken
+	algr	%r2,%r2		// clear carry
+
+.Loop4_add:
+	lg	%r0,0(%r2,%r3)
+	alcg	%r0,0(%r2,%r4)
+	stg	%r0,0(%r2,%r1)
+	lg	%r0,8(%r2,%r3)
+	alcg	%r0,8(%r2,%r4)
+	stg	%r0,8(%r2,%r1)
+	lg	%r0,16(%r2,%r3)
+	alcg	%r0,16(%r2,%r4)
+	stg	%r0,16(%r2,%r1)
+	lg	%r0,24(%r2,%r3)
+	alcg	%r0,24(%r2,%r4)
+	stg	%r0,24(%r2,%r1)
+
+	la	%r2,32(%r2)	// i+=4
+	brct	%r5,.Loop4_add
+
+	la	%r6,1(%r6)	// see if len%4 is zero ...
+	brct	%r6,.Loop1_add	// without touching condition code:-)
+
+.Lexit_add:
+	lghi	%r2,0
+	alcgr	%r2,%r2
+	lg	%r6,48(%r15)
+	br	%r14
+
+.Loop1_add:
+	lg	%r0,0(%r2,%r3)
+	alcg	%r0,0(%r2,%r4)
+	stg	%r0,0(%r2,%r1)
+
+	la	%r2,8(%r2)	// i++
+	brct	%r6,.Loop1_add
+
+	j	.Lexit_add
+.size	bn_add_words,.-bn_add_words
+
+// BN_ULONG bn_sub_words(BN_ULONG *r2,BN_ULONG *r3,BN_ULONG *r4,int r5);
+.globl	bn_sub_words
+.type	bn_sub_words,@function
+.align	4
+bn_sub_words:
+	la	%r1,0(%r2)	// put rp aside
+	lghi	%r2,0		// i=0
+	ltgfr	%r5,%r5
+	bler	%r14		// if (len<=0) return 0;
+
+	stg	%r6,48(%r15)
+	lghi	%r6,3
+	nr	%r6,%r5		// len%4
+	sra	%r5,2		// len/4, use sra because it sets condition code
+	jnz	.Loop4_sub	// borrow is incidentally cleared if branch taken
+	slgr	%r2,%r2		// clear borrow
+
+.Loop1_sub:
+	lg	%r0,0(%r2,%r3)
+	slbg	%r0,0(%r2,%r4)
+	stg	%r0,0(%r2,%r1)
+
+	la	%r2,8(%r2)	// i++
+	brct	%r6,.Loop1_sub
+	j	.Lexit_sub
+
+.Loop4_sub:
+	lg	%r0,0(%r2,%r3)
+	slbg	%r0,0(%r2,%r4)
+	stg	%r0,0(%r2,%r1)
+	lg	%r0,8(%r2,%r3)
+	slbg	%r0,8(%r2,%r4)
+	stg	%r0,8(%r2,%r1)
+	lg	%r0,16(%r2,%r3)
+	slbg	%r0,16(%r2,%r4)
+	stg	%r0,16(%r2,%r1)
+	lg	%r0,24(%r2,%r3)
+	slbg	%r0,24(%r2,%r4)
+	stg	%r0,24(%r2,%r1)
+
+	la	%r2,32(%r2)	// i+=4
+	brct	%r5,.Loop4_sub
+
+	la	%r6,1(%r6)	// see if len%4 is zero ...
+	brct	%r6,.Loop1_sub	// without touching condition code:-)
+
+.Lexit_sub:
+	lghi	%r2,0
+	slbgr	%r2,%r2
+	lcgr	%r2,%r2
+	lg	%r6,48(%r15)
+	br	%r14
+.size	bn_sub_words,.-bn_sub_words
+
+#define c1	%r1
+#define c2	%r5
+#define c3	%r8
+
+#define mul_add_c(ai,bi,c1,c2,c3)	\
+	lg	%r7,ai*8(%r3);		\
+	mlg	%r6,bi*8(%r4);		\
+	algr	c1,%r7;			\
+	alcgr	c2,%r6;			\
+	alcgr	c3,zero
+
+// void bn_mul_comba8(BN_ULONG *r2,BN_ULONG *r3,BN_ULONG *r4);
+.globl	bn_mul_comba8
+.type	bn_mul_comba8,@function
+.align	4
+bn_mul_comba8:
+	stmg	%r6,%r8,48(%r15)
+
+	lghi	c1,0
+	lghi	c2,0
+	lghi	c3,0
+	lghi	zero,0
+
+	mul_add_c(0,0,c1,c2,c3);
+	stg	c1,0*8(%r2)
+	lghi	c1,0
+
+	mul_add_c(0,1,c2,c3,c1);
+	mul_add_c(1,0,c2,c3,c1);
+	stg	c2,1*8(%r2)
+	lghi	c2,0
+
+	mul_add_c(2,0,c3,c1,c2);
+	mul_add_c(1,1,c3,c1,c2);
+	mul_add_c(0,2,c3,c1,c2);
+	stg	c3,2*8(%r2)
+	lghi	c3,0
+
+	mul_add_c(0,3,c1,c2,c3);
+	mul_add_c(1,2,c1,c2,c3);
+	mul_add_c(2,1,c1,c2,c3);
+	mul_add_c(3,0,c1,c2,c3);
+	stg	c1,3*8(%r2)
+	lghi	c1,0
+
+	mul_add_c(4,0,c2,c3,c1);
+	mul_add_c(3,1,c2,c3,c1);
+	mul_add_c(2,2,c2,c3,c1);
+	mul_add_c(1,3,c2,c3,c1);
+	mul_add_c(0,4,c2,c3,c1);
+	stg	c2,4*8(%r2)
+	lghi	c2,0
+
+	mul_add_c(0,5,c3,c1,c2);
+	mul_add_c(1,4,c3,c1,c2);
+	mul_add_c(2,3,c3,c1,c2);
+	mul_add_c(3,2,c3,c1,c2);
+	mul_add_c(4,1,c3,c1,c2);
+	mul_add_c(5,0,c3,c1,c2);
+	stg	c3,5*8(%r2)
+	lghi	c3,0
+
+	mul_add_c(6,0,c1,c2,c3);
+	mul_add_c(5,1,c1,c2,c3);
+	mul_add_c(4,2,c1,c2,c3);
+	mul_add_c(3,3,c1,c2,c3);
+	mul_add_c(2,4,c1,c2,c3);
+	mul_add_c(1,5,c1,c2,c3);
+	mul_add_c(0,6,c1,c2,c3);
+	stg	c1,6*8(%r2)
+	lghi	c1,0
+
+	mul_add_c(0,7,c2,c3,c1);
+	mul_add_c(1,6,c2,c3,c1);
+	mul_add_c(2,5,c2,c3,c1);
+	mul_add_c(3,4,c2,c3,c1);
+	mul_add_c(4,3,c2,c3,c1);
+	mul_add_c(5,2,c2,c3,c1);
+	mul_add_c(6,1,c2,c3,c1);
+	mul_add_c(7,0,c2,c3,c1);
+	stg	c2,7*8(%r2)
+	lghi	c2,0
+
+	mul_add_c(7,1,c3,c1,c2);
+	mul_add_c(6,2,c3,c1,c2);
+	mul_add_c(5,3,c3,c1,c2);
+	mul_add_c(4,4,c3,c1,c2);
+	mul_add_c(3,5,c3,c1,c2);
+	mul_add_c(2,6,c3,c1,c2);
+	mul_add_c(1,7,c3,c1,c2);
+	stg	c3,8*8(%r2)
+	lghi	c3,0
+
+	mul_add_c(2,7,c1,c2,c3);
+	mul_add_c(3,6,c1,c2,c3);
+	mul_add_c(4,5,c1,c2,c3);
+	mul_add_c(5,4,c1,c2,c3);
+	mul_add_c(6,3,c1,c2,c3);
+	mul_add_c(7,2,c1,c2,c3);
+	stg	c1,9*8(%r2)
+	lghi	c1,0
+
+	mul_add_c(7,3,c2,c3,c1);
+	mul_add_c(6,4,c2,c3,c1);
+	mul_add_c(5,5,c2,c3,c1);
+	mul_add_c(4,6,c2,c3,c1);
+	mul_add_c(3,7,c2,c3,c1);
+	stg	c2,10*8(%r2)
+	lghi	c2,0
+
+	mul_add_c(4,7,c3,c1,c2);
+	mul_add_c(5,6,c3,c1,c2);
+	mul_add_c(6,5,c3,c1,c2);
+	mul_add_c(7,4,c3,c1,c2);
+	stg	c3,11*8(%r2)
+	lghi	c3,0
+
+	mul_add_c(7,5,c1,c2,c3);
+	mul_add_c(6,6,c1,c2,c3);
+	mul_add_c(5,7,c1,c2,c3);
+	stg	c1,12*8(%r2)
+	lghi	c1,0
+
+
+	mul_add_c(6,7,c2,c3,c1);
+	mul_add_c(7,6,c2,c3,c1);
+	stg	c2,13*8(%r2)
+	lghi	c2,0
+
+	mul_add_c(7,7,c3,c1,c2);
+	stg	c3,14*8(%r2)
+	stg	c1,15*8(%r2)
+
+	lmg	%r6,%r8,48(%r15)
+	br	%r14
+.size	bn_mul_comba8,.-bn_mul_comba8
+
+// void bn_mul_comba4(BN_ULONG *r2,BN_ULONG *r3,BN_ULONG *r4);
+.globl	bn_mul_comba4
+.type	bn_mul_comba4,@function
+.align	4
+bn_mul_comba4:
+	stmg	%r6,%r8,48(%r15)
+
+	lghi	c1,0
+	lghi	c2,0
+	lghi	c3,0
+	lghi	zero,0
+
+	mul_add_c(0,0,c1,c2,c3);
+	stg	c1,0*8(%r3)
+	lghi	c1,0
+
+	mul_add_c(0,1,c2,c3,c1);
+	mul_add_c(1,0,c2,c3,c1);
+	stg	c2,1*8(%r2)
+	lghi	c2,0
+
+	mul_add_c(2,0,c3,c1,c2);
+	mul_add_c(1,1,c3,c1,c2);
+	mul_add_c(0,2,c3,c1,c2);
+	stg	c3,2*8(%r2)
+	lghi	c3,0
+
+	mul_add_c(0,3,c1,c2,c3);
+	mul_add_c(1,2,c1,c2,c3);
+	mul_add_c(2,1,c1,c2,c3);
+	mul_add_c(3,0,c1,c2,c3);
+	stg	c1,3*8(%r2)
+	lghi	c1,0
+
+	mul_add_c(3,1,c2,c3,c1);
+	mul_add_c(2,2,c2,c3,c1);
+	mul_add_c(1,3,c2,c3,c1);
+	stg	c2,4*8(%r2)
+	lghi	c2,0
+
+	mul_add_c(2,3,c3,c1,c2);
+	mul_add_c(3,2,c3,c1,c2);
+	stg	c3,5*8(%r2)
+	lghi	c3,0
+
+	mul_add_c(3,3,c1,c2,c3);
+	stg	c1,6*8(%r2)
+	stg	c2,7*8(%r2)
+
+	stmg	%r6,%r8,48(%r15)
+	br	%r14
+.size	bn_mul_comba4,.-bn_mul_comba4
+
+#define sqr_add_c(ai,c1,c2,c3)		\
+	lg	%r7,ai*8(%r3);		\
+	mlgr	%r6,%r7;		\
+	algr	c1,%r7;			\
+	alcgr	c2,%r6;			\
+	alcgr	c3,zero
+
+#define sqr_add_c2(ai,aj,c1,c2,c3)	\
+	lg	%r7,ai*8(%r3);		\
+	mlg	%r6,aj*8(%r3);		\
+	algr	c1,%r7;			\
+	alcgr	c2,%r6;			\
+	alcgr	c3,zero;		\
+	algr	c1,%r7;			\
+	alcgr	c2,%r6;			\
+	alcgr	c3,zero
+
+// void bn_sqr_comba8(BN_ULONG *r2,BN_ULONG *r3);
+.globl	bn_sqr_comba8
+.type	bn_sqr_comba8,@function
+.align	4
+bn_sqr_comba8:
+	stmg	%r6,%r8,48(%r15)
+
+	lghi	c1,0
+	lghi	c2,0
+	lghi	c3,0
+	lghi	zero,0
+
+	sqr_add_c(0,c1,c2,c3);
+	stg	c1,0*8(%r2)
+	lghi	c1,0
+
+	sqr_add_c2(1,0,c2,c3,c1);
+	stg	c2,1*8(%r2)
+	lghi	c2,0
+
+	sqr_add_c(1,c3,c1,c2);
+	sqr_add_c2(2,0,c3,c1,c2);
+	stg	c3,2*8(%r2)
+	lghi	c3,0
+
+	sqr_add_c2(3,0,c1,c2,c3);
+	sqr_add_c2(2,1,c1,c2,c3);
+	stg	c1,3*8(%r2)
+	lghi	c1,0
+
+	sqr_add_c(2,c2,c3,c1);
+	sqr_add_c2(3,1,c2,c3,c1);
+	sqr_add_c2(4,0,c2,c3,c1);
+	stg	c2,4*8(%r2)
+	lghi	c2,0
+
+	sqr_add_c2(5,0,c3,c1,c2);
+	sqr_add_c2(4,1,c3,c1,c2);
+	sqr_add_c2(3,2,c3,c1,c2);
+	stg	c3,5*8(%r2)
+	lghi	c3,0
+
+	sqr_add_c(3,c1,c2,c3);
+	sqr_add_c2(4,2,c1,c2,c3);
+	sqr_add_c2(5,1,c1,c2,c3);
+	sqr_add_c2(6,0,c1,c2,c3);
+	stg	c1,6*8(%r2)
+	lghi	c1,0
+
+	sqr_add_c2(7,0,c2,c3,c1);
+	sqr_add_c2(6,1,c2,c3,c1);
+	sqr_add_c2(5,2,c2,c3,c1);
+	sqr_add_c2(4,3,c2,c3,c1);
+	stg	c2,7*8(%r2)
+	lghi	c2,0
+
+	sqr_add_c(4,c3,c1,c2);
+	sqr_add_c2(5,3,c3,c1,c2);
+	sqr_add_c2(6,2,c3,c1,c2);
+	sqr_add_c2(7,1,c3,c1,c2);
+	stg	c3,8*8(%r2)
+	lghi	c3,0
+
+	sqr_add_c2(7,2,c1,c2,c3);
+	sqr_add_c2(6,3,c1,c2,c3);
+	sqr_add_c2(5,4,c1,c2,c3);
+	stg	c1,9*8(%r2)
+	lghi	c1,0
+
+	sqr_add_c(5,c2,c3,c1);
+	sqr_add_c2(6,4,c2,c3,c1);
+	sqr_add_c2(7,3,c2,c3,c1);
+	stg	c2,10*8(%r2)
+	lghi	c2,0
+
+	sqr_add_c2(7,4,c3,c1,c2);
+	sqr_add_c2(6,5,c3,c1,c2);
+	stg	c3,11*8(%r2)
+	lghi	c3,0
+
+	sqr_add_c(6,c1,c2,c3);
+	sqr_add_c2(7,5,c1,c2,c3);
+	stg	c1,12*8(%r2)
+	lghi	c1,0
+
+	sqr_add_c2(7,6,c2,c3,c1);
+	stg	c2,13*8(%r2)
+	lghi	c2,0
+
+	sqr_add_c(7,c3,c1,c2);
+	stg	c3,14*8(%r2)
+	stg	c1,15*8(%r2)
+
+	lmg	%r6,%r8,48(%r15)
+	br	%r14
+.size	bn_sqr_comba8,.-bn_sqr_comba8
+
+// void bn_sqr_comba4(BN_ULONG *r2,BN_ULONG *r3);
+.globl bn_sqr_comba4
+.type	bn_sqr_comba4,@function
+.align	4
+bn_sqr_comba4:
+	stmg	%r6,%r8,48(%r15)
+
+	lghi	c1,0
+	lghi	c2,0
+	lghi	c3,0
+	lghi	zero,0
+
+	sqr_add_c(0,c1,c2,c3);
+	stg	c1,0*8(%r2)
+	lghi	c1,0
+
+	sqr_add_c2(1,0,c2,c3,c1);
+	stg	c2,1*8(%r2)
+	lghi	c2,0
+
+	sqr_add_c(1,c3,c1,c2);
+	sqr_add_c2(2,0,c3,c1,c2);
+	stg	c3,2*8(%r2)
+	lghi	c3,0
+
+	sqr_add_c2(3,0,c1,c2,c3);
+	sqr_add_c2(2,1,c1,c2,c3);
+	stg	c1,3*8(%r2)
+	lghi	c1,0
+
+	sqr_add_c(2,c2,c3,c1);
+	sqr_add_c2(3,1,c2,c3,c1);
+	stg	c2,4*8(%r2)
+	lghi	c2,0
+
+	sqr_add_c2(3,2,c3,c1,c2);
+	stg	c3,5*8(%r2)
+	lghi	c3,0
+
+	sqr_add_c(3,c1,c2,c3);
+	stg	c1,6*8(%r2)
+	stg	c2,7*8(%r2)
+
+	lmg	%r6,%r8,48(%r15)
+	br	%r14
+.size	bn_sqr_comba4,.-bn_sqr_comba4
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparct4-mont.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparct4-mont.pl
new file mode 100755
index 000000000..fcae9cfc5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparct4-mont.pl
@@ -0,0 +1,1228 @@
+#! /usr/bin/env perl
+# Copyright 2012-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by David S. Miller and Andy Polyakov
+# The module is licensed under 2-clause BSD license.
+# November 2012. All rights reserved.
+# ====================================================================
+
+######################################################################
+# Montgomery squaring-n-multiplication module for SPARC T4.
+#
+# The module consists of three parts:
+#
+# 1) collection of "single-op" subroutines that perform single
+#    operation, Montgomery squaring or multiplication, on 512-,
+#    1024-, 1536- and 2048-bit operands;
+# 2) collection of "multi-op" subroutines that perform 5 squaring and
+#    1 multiplication operations on operands of above lengths;
+# 3) fall-back and helper VIS3 subroutines.
+#
+# RSA sign is dominated by multi-op subroutine, while RSA verify and
+# DSA - by single-op. Special note about 4096-bit RSA verify result.
+# Operands are too long for dedicated hardware and it's handled by
+# VIS3 code, which is why you don't see any improvement. It's surely
+# possible to improve it [by deploying 'mpmul' instruction], maybe in
+# the future...
+#
+# Performance improvement.
+#
+# 64-bit process, VIS3:
+#                   sign    verify    sign/s verify/s
+# rsa 1024 bits 0.000628s 0.000028s   1592.4  35434.4
+# rsa 2048 bits 0.003282s 0.000106s    304.7   9438.3
+# rsa 4096 bits 0.025866s 0.000340s     38.7   2940.9
+# dsa 1024 bits 0.000301s 0.000332s   3323.7   3013.9
+# dsa 2048 bits 0.001056s 0.001233s    946.9    810.8
+#
+# 64-bit process, this module:
+#                   sign    verify    sign/s verify/s
+# rsa 1024 bits 0.000256s 0.000016s   3904.4  61411.9
+# rsa 2048 bits 0.000946s 0.000029s   1056.8  34292.7
+# rsa 4096 bits 0.005061s 0.000340s    197.6   2940.5
+# dsa 1024 bits 0.000176s 0.000195s   5674.7   5130.5
+# dsa 2048 bits 0.000296s 0.000354s   3383.2   2827.6
+#
+######################################################################
+# 32-bit process, VIS3:
+#                   sign    verify    sign/s verify/s
+# rsa 1024 bits 0.000665s 0.000028s   1504.8  35233.3
+# rsa 2048 bits 0.003349s 0.000106s    298.6   9433.4
+# rsa 4096 bits 0.025959s 0.000341s     38.5   2934.8
+# dsa 1024 bits 0.000320s 0.000341s   3123.3   2929.6
+# dsa 2048 bits 0.001101s 0.001260s    908.2    793.4
+#
+# 32-bit process, this module:
+#                   sign    verify    sign/s verify/s
+# rsa 1024 bits 0.000301s 0.000017s   3317.1  60240.0
+# rsa 2048 bits 0.001034s 0.000030s    966.9  33812.7
+# rsa 4096 bits 0.005244s 0.000341s    190.7   2935.4
+# dsa 1024 bits 0.000201s 0.000205s   4976.1   4879.2
+# dsa 2048 bits 0.000328s 0.000360s   3051.1   2774.2
+#
+# 32-bit code is prone to performance degradation as interrupt rate
+# dispatched to CPU executing the code grows. This is because in
+# standard process of handling interrupt in 32-bit process context
+# upper halves of most integer registers used as input or output are
+# zeroed. This renders result invalid, and operation has to be re-run.
+# If CPU is "bothered" with timer interrupts only, the penalty is
+# hardly measurable. But in order to mitigate this problem for higher
+# interrupt rates contemporary Linux kernel recognizes biased stack
+# even in 32-bit process context and preserves full register contents.
+# See http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=517ffce4e1a03aea979fe3a18a3dd1761a24fafb
+# for details.
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "sparcv9_modes.pl";
+
+$output = pop;
+open STDOUT,">$output";
+
+$code.=<<___;
+#include "sparc_arch.h"
+
+#ifdef	__arch64__
+.register	%g2,#scratch
+.register	%g3,#scratch
+#endif
+
+.section	".text",#alloc,#execinstr
+
+#ifdef	__PIC__
+SPARC_PIC_THUNK(%g1)
+#endif
+___
+
+########################################################################
+# Register layout for mont[mul|sqr] instructions.
+# For details see "Oracle SPARC Architecture 2011" manual at
+# http://www.oracle.com/technetwork/server-storage/sun-sparc-enterprise/documentation/.
+#
+my @R=map("%f".2*$_,(0..11,30,31,12..29));
+my @N=(map("%l$_",(0..7)),map("%o$_",(0..5))); @N=(@N,@N,@N[0..3]);
+my @A=(@N[0..13],@R[14..31]);
+my @B=(map("%i$_",(0..5)),map("%l$_",(0..7))); @B=(@B,@B,map("%o$_",(0..3)));
+
+########################################################################
+# int bn_mul_mont_t4_$NUM(u64 *rp,const u64 *ap,const u64 *bp,
+#			  const u64 *np,const BN_ULONG *n0);
+#
+sub generate_bn_mul_mont_t4() {
+my $NUM=shift;
+my ($rp,$ap,$bp,$np,$sentinel)=map("%g$_",(1..5));
+
+$code.=<<___;
+.globl	bn_mul_mont_t4_$NUM
+.align	32
+bn_mul_mont_t4_$NUM:
+#ifdef	__arch64__
+	mov	0,$sentinel
+	mov	-128,%g4
+#elif defined(SPARCV9_64BIT_STACK)
+	SPARC_LOAD_ADDRESS_LEAF(OPENSSL_sparcv9cap_P,%g1,%g5)
+	ld	[%g1+0],%g1	! OPENSSL_sparcv9_P[0]
+	mov	-2047,%g4
+	and	%g1,SPARCV9_64BIT_STACK,%g1
+	movrz	%g1,0,%g4
+	mov	-1,$sentinel
+	add	%g4,-128,%g4
+#else
+	mov	-1,$sentinel
+	mov	-128,%g4
+#endif
+	sllx	$sentinel,32,$sentinel
+	save	%sp,%g4,%sp
+#ifndef	__arch64__
+	save	%sp,-128,%sp	! warm it up
+	save	%sp,-128,%sp
+	save	%sp,-128,%sp
+	save	%sp,-128,%sp
+	save	%sp,-128,%sp
+	save	%sp,-128,%sp
+	restore
+	restore
+	restore
+	restore
+	restore
+	restore
+#endif
+	and	%sp,1,%g4
+	or	$sentinel,%fp,%fp
+	or	%g4,$sentinel,$sentinel
+
+	! copy arguments to global registers
+	mov	%i0,$rp
+	mov	%i1,$ap
+	mov	%i2,$bp
+	mov	%i3,$np
+	ld	[%i4+0],%f1	! load *n0
+	ld	[%i4+4],%f0
+	fsrc2	%f0,%f60
+___
+
+# load ap[$NUM] ########################################################
+$code.=<<___;
+	save	%sp,-128,%sp;		or	$sentinel,%fp,%fp
+___
+for($i=0; $i<14 && $i<$NUM; $i++) {
+my $lo=$i<13?@A[$i+1]:"%o7";
+$code.=<<___;
+	ld	[$ap+$i*8+0],$lo
+	ld	[$ap+$i*8+4],@A[$i]
+	sllx	@A[$i],32,@A[$i]
+	or	$lo,@A[$i],@A[$i]
+___
+}
+for(; $i<$NUM; $i++) {
+my ($hi,$lo)=("%f".2*($i%4),"%f".(2*($i%4)+1));
+$code.=<<___;
+	ld	[$ap+$i*8+0],$lo
+	ld	[$ap+$i*8+4],$hi
+	fsrc2	$hi,@A[$i]
+___
+}
+# load np[$NUM] ########################################################
+$code.=<<___;
+	save	%sp,-128,%sp;		or	$sentinel,%fp,%fp
+___
+for($i=0; $i<14 && $i<$NUM; $i++) {
+my $lo=$i<13?@N[$i+1]:"%o7";
+$code.=<<___;
+	ld	[$np+$i*8+0],$lo
+	ld	[$np+$i*8+4],@N[$i]
+	sllx	@N[$i],32,@N[$i]
+	or	$lo,@N[$i],@N[$i]
+___
+}
+$code.=<<___;
+	save	%sp,-128,%sp;		or	$sentinel,%fp,%fp
+___
+for(; $i<28 && $i<$NUM; $i++) {
+my $lo=$i<27?@N[$i+1]:"%o7";
+$code.=<<___;
+	ld	[$np+$i*8+0],$lo
+	ld	[$np+$i*8+4],@N[$i]
+	sllx	@N[$i],32,@N[$i]
+	or	$lo,@N[$i],@N[$i]
+___
+}
+$code.=<<___;
+	save	%sp,-128,%sp;		or	$sentinel,%fp,%fp
+___
+for(; $i<$NUM; $i++) {
+my $lo=($i<$NUM-1)?@N[$i+1]:"%o7";
+$code.=<<___;
+	ld	[$np+$i*8+0],$lo
+	ld	[$np+$i*8+4],@N[$i]
+	sllx	@N[$i],32,@N[$i]
+	or	$lo,@N[$i],@N[$i]
+___
+}
+$code.=<<___;
+	cmp	$ap,$bp
+	be	SIZE_T_CC,.Lmsquare_$NUM
+	nop
+___
+
+# load bp[$NUM] ########################################################
+$code.=<<___;
+	save	%sp,-128,%sp;		or	$sentinel,%fp,%fp
+___
+for($i=0; $i<14 && $i<$NUM; $i++) {
+my $lo=$i<13?@B[$i+1]:"%o7";
+$code.=<<___;
+	ld	[$bp+$i*8+0],$lo
+	ld	[$bp+$i*8+4],@B[$i]
+	sllx	@B[$i],32,@B[$i]
+	or	$lo,@B[$i],@B[$i]
+___
+}
+$code.=<<___;
+	save	%sp,-128,%sp;		or	$sentinel,%fp,%fp
+___
+for(; $i<$NUM; $i++) {
+my $lo=($i<$NUM-1)?@B[$i+1]:"%o7";
+$code.=<<___;
+	ld	[$bp+$i*8+0],$lo
+	ld	[$bp+$i*8+4],@B[$i]
+	sllx	@B[$i],32,@B[$i]
+	or	$lo,@B[$i],@B[$i]
+___
+}
+# magic ################################################################
+$code.=<<___;
+	.word	0x81b02920+$NUM-1	! montmul	$NUM-1
+.Lmresume_$NUM:
+	fbu,pn	%fcc3,.Lmabort_$NUM
+#ifndef	__arch64__
+	and	%fp,$sentinel,$sentinel
+	brz,pn	$sentinel,.Lmabort_$NUM
+#endif
+	nop
+#ifdef	__arch64__
+	restore
+	restore
+	restore
+	restore
+	restore
+#else
+	restore;		and	%fp,$sentinel,$sentinel
+	restore;		and	%fp,$sentinel,$sentinel
+	restore;		and	%fp,$sentinel,$sentinel
+	restore;		and	%fp,$sentinel,$sentinel
+	 brz,pn	$sentinel,.Lmabort1_$NUM
+	restore
+#endif
+___
+
+# save tp[$NUM] ########################################################
+for($i=0; $i<14 && $i<$NUM; $i++) {
+$code.=<<___;
+	movxtod	@A[$i],@R[$i]
+___
+}
+$code.=<<___;
+#ifdef	__arch64__
+	restore
+#else
+	 and	%fp,$sentinel,$sentinel
+	restore
+	 and	$sentinel,1,%o7
+	 and	%fp,$sentinel,$sentinel
+	 srl	%fp,0,%fp		! just in case?
+	 or	%o7,$sentinel,$sentinel
+	brz,a,pn $sentinel,.Lmdone_$NUM
+	mov	0,%i0		! return failure
+#endif
+___
+for($i=0; $i<12 && $i<$NUM; $i++) {
+@R[$i] =~ /%f([0-9]+)/;
+my $lo = "%f".($1+1);
+$code.=<<___;
+	st	$lo,[$rp+$i*8+0]
+	st	@R[$i],[$rp+$i*8+4]
+___
+}
+for(; $i<$NUM; $i++) {
+my ($hi,$lo)=("%f".2*($i%4),"%f".(2*($i%4)+1));
+$code.=<<___;
+	fsrc2	@R[$i],$hi
+	st	$lo,[$rp+$i*8+0]
+	st	$hi,[$rp+$i*8+4]
+___
+}
+$code.=<<___;
+	mov	1,%i0		! return success
+.Lmdone_$NUM:
+	ret
+	restore
+
+.Lmabort_$NUM:
+	restore
+	restore
+	restore
+	restore
+	restore
+.Lmabort1_$NUM:
+	restore
+
+	mov	0,%i0		! return failure
+	ret
+	restore
+
+.align	32
+.Lmsquare_$NUM:
+	save	%sp,-128,%sp;		or	$sentinel,%fp,%fp
+	save	%sp,-128,%sp;		or	$sentinel,%fp,%fp
+	.word   0x81b02940+$NUM-1	! montsqr	$NUM-1
+	ba	.Lmresume_$NUM
+	nop
+.type	bn_mul_mont_t4_$NUM, #function
+.size	bn_mul_mont_t4_$NUM, .-bn_mul_mont_t4_$NUM
+___
+}
+
+for ($i=8;$i<=32;$i+=8) {
+	&generate_bn_mul_mont_t4($i);
+}
+
+########################################################################
+#
+sub load_ccr {
+my ($ptbl,$pwr,$ccr,$skip_wr)=@_;
+$code.=<<___;
+	srl	$pwr,	2,	%o4
+	and	$pwr,	3,	%o5
+	and	%o4,	7,	%o4
+	sll	%o5,	3,	%o5	! offset within first cache line
+	add	%o5,	$ptbl,	$ptbl	! of the pwrtbl
+	or	%g0,	1,	%o5
+	sll	%o5,	%o4,	$ccr
+___
+$code.=<<___	if (!$skip_wr);
+	wr	$ccr,	%g0,	%ccr
+___
+}
+sub load_b_pair {
+my ($pwrtbl,$B0,$B1)=@_;
+
+$code.=<<___;
+	ldx	[$pwrtbl+0*32],	$B0
+	ldx	[$pwrtbl+8*32],	$B1
+	ldx	[$pwrtbl+1*32],	%o4
+	ldx	[$pwrtbl+9*32],	%o5
+	movvs	%icc,	%o4,	$B0
+	ldx	[$pwrtbl+2*32],	%o4
+	movvs	%icc,	%o5,	$B1
+	ldx	[$pwrtbl+10*32],%o5
+	move	%icc,	%o4,	$B0
+	ldx	[$pwrtbl+3*32],	%o4
+	move	%icc,	%o5,	$B1
+	ldx	[$pwrtbl+11*32],%o5
+	movneg	%icc,	%o4,	$B0
+	ldx	[$pwrtbl+4*32],	%o4
+	movneg	%icc,	%o5,	$B1
+	ldx	[$pwrtbl+12*32],%o5
+	movcs	%xcc,	%o4,	$B0
+	ldx	[$pwrtbl+5*32],%o4
+	movcs	%xcc,	%o5,	$B1
+	ldx	[$pwrtbl+13*32],%o5
+	movvs	%xcc,	%o4,	$B0
+	ldx	[$pwrtbl+6*32],	%o4
+	movvs	%xcc,	%o5,	$B1
+	ldx	[$pwrtbl+14*32],%o5
+	move	%xcc,	%o4,	$B0
+	ldx	[$pwrtbl+7*32],	%o4
+	move	%xcc,	%o5,	$B1
+	ldx	[$pwrtbl+15*32],%o5
+	movneg	%xcc,	%o4,	$B0
+	add	$pwrtbl,16*32,	$pwrtbl
+	movneg	%xcc,	%o5,	$B1
+___
+}
+sub load_b {
+my ($pwrtbl,$Bi)=@_;
+
+$code.=<<___;
+	ldx	[$pwrtbl+0*32],	$Bi
+	ldx	[$pwrtbl+1*32],	%o4
+	ldx	[$pwrtbl+2*32],	%o5
+	movvs	%icc,	%o4,	$Bi
+	ldx	[$pwrtbl+3*32],	%o4
+	move	%icc,	%o5,	$Bi
+	ldx	[$pwrtbl+4*32],	%o5
+	movneg	%icc,	%o4,	$Bi
+	ldx	[$pwrtbl+5*32],	%o4
+	movcs	%xcc,	%o5,	$Bi
+	ldx	[$pwrtbl+6*32],	%o5
+	movvs	%xcc,	%o4,	$Bi
+	ldx	[$pwrtbl+7*32],	%o4
+	move	%xcc,	%o5,	$Bi
+	add	$pwrtbl,8*32,	$pwrtbl
+	movneg	%xcc,	%o4,	$Bi
+___
+}
+
+########################################################################
+# int bn_pwr5_mont_t4_$NUM(u64 *tp,const u64 *np,const BN_ULONG *n0,
+#			   const u64 *pwrtbl,int pwr,int stride);
+#
+sub generate_bn_pwr5_mont_t4() {
+my $NUM=shift;
+my ($tp,$np,$pwrtbl,$pwr,$sentinel)=map("%g$_",(1..5));
+
+$code.=<<___;
+.globl	bn_pwr5_mont_t4_$NUM
+.align	32
+bn_pwr5_mont_t4_$NUM:
+#ifdef	__arch64__
+	mov	0,$sentinel
+	mov	-128,%g4
+#elif defined(SPARCV9_64BIT_STACK)
+	SPARC_LOAD_ADDRESS_LEAF(OPENSSL_sparcv9cap_P,%g1,%g5)
+	ld	[%g1+0],%g1	! OPENSSL_sparcv9_P[0]
+	mov	-2047,%g4
+	and	%g1,SPARCV9_64BIT_STACK,%g1
+	movrz	%g1,0,%g4
+	mov	-1,$sentinel
+	add	%g4,-128,%g4
+#else
+	mov	-1,$sentinel
+	mov	-128,%g4
+#endif
+	sllx	$sentinel,32,$sentinel
+	save	%sp,%g4,%sp
+#ifndef	__arch64__
+	save	%sp,-128,%sp	! warm it up
+	save	%sp,-128,%sp
+	save	%sp,-128,%sp
+	save	%sp,-128,%sp
+	save	%sp,-128,%sp
+	save	%sp,-128,%sp
+	restore
+	restore
+	restore
+	restore
+	restore
+	restore
+#endif
+	and	%sp,1,%g4
+	or	$sentinel,%fp,%fp
+	or	%g4,$sentinel,$sentinel
+
+	! copy arguments to global registers
+	mov	%i0,$tp
+	mov	%i1,$np
+	ld	[%i2+0],%f1	! load *n0
+	ld	[%i2+4],%f0
+	mov	%i3,$pwrtbl
+	srl	%i4,%g0,%i4	! pack last arguments
+	sllx	%i5,32,$pwr
+	or	%i4,$pwr,$pwr
+	fsrc2	%f0,%f60
+___
+
+# load tp[$NUM] ########################################################
+$code.=<<___;
+	save	%sp,-128,%sp;		or	$sentinel,%fp,%fp
+___
+for($i=0; $i<14 && $i<$NUM; $i++) {
+$code.=<<___;
+	ldx	[$tp+$i*8],@A[$i]
+___
+}
+for(; $i<$NUM; $i++) {
+$code.=<<___;
+	ldd	[$tp+$i*8],@A[$i]
+___
+}
+# load np[$NUM] ########################################################
+$code.=<<___;
+	save	%sp,-128,%sp;		or	$sentinel,%fp,%fp
+___
+for($i=0; $i<14 && $i<$NUM; $i++) {
+$code.=<<___;
+	ldx	[$np+$i*8],@N[$i]
+___
+}
+$code.=<<___;
+	save	%sp,-128,%sp;		or	$sentinel,%fp,%fp
+___
+for(; $i<28 && $i<$NUM; $i++) {
+$code.=<<___;
+	ldx	[$np+$i*8],@N[$i]
+___
+}
+$code.=<<___;
+	save	%sp,-128,%sp;		or	$sentinel,%fp,%fp
+___
+for(; $i<$NUM; $i++) {
+$code.=<<___;
+	ldx	[$np+$i*8],@N[$i]
+___
+}
+# load pwrtbl[pwr] ########################################################
+$code.=<<___;
+	save	%sp,-128,%sp;		or	$sentinel,%fp,%fp
+
+	srlx	$pwr,	32,	%o4		! unpack $pwr
+	srl	$pwr,	%g0,	%o5
+	sub	%o4,	5,	%o4
+	mov	$pwrtbl,	%o7
+	sllx	%o4,	32,	$pwr		! re-pack $pwr
+	or	%o5,	$pwr,	$pwr
+	srl	%o5,	%o4,	%o5
+___
+	&load_ccr("%o7","%o5","%o4");
+$code.=<<___;
+	b	.Lstride_$NUM
+	nop
+.align	16
+.Lstride_$NUM:
+___
+for($i=0; $i<14 && $i<$NUM; $i+=2) {
+	&load_b_pair("%o7",@B[$i],@B[$i+1]);
+}
+$code.=<<___;
+	save	%sp,-128,%sp;		or	$sentinel,%fp,%fp
+___
+for(; $i<$NUM; $i+=2) {
+	&load_b_pair("%i7",@B[$i],@B[$i+1]);
+}
+$code.=<<___;
+	srax	$pwr,	32,	%o4		! unpack $pwr
+	srl	$pwr,	%g0,	%o5
+	sub	%o4,	5,	%o4
+	mov	$pwrtbl,	%i7
+	sllx	%o4,	32,	$pwr		! re-pack $pwr
+	or	%o5,	$pwr,	$pwr
+	srl	%o5,	%o4,	%o5
+___
+	&load_ccr("%i7","%o5","%o4",1);
+
+# magic ################################################################
+for($i=0; $i<5; $i++) {
+$code.=<<___;
+	.word	0x81b02940+$NUM-1	! montsqr	$NUM-1
+	fbu,pn	%fcc3,.Labort_$NUM
+#ifndef	__arch64__
+	and	%fp,$sentinel,$sentinel
+	brz,pn	$sentinel,.Labort_$NUM
+#endif
+	nop
+___
+}
+$code.=<<___;
+	wr	%o4,	%g0,	%ccr
+	.word	0x81b02920+$NUM-1	! montmul	$NUM-1
+	fbu,pn	%fcc3,.Labort_$NUM
+#ifndef	__arch64__
+	and	%fp,$sentinel,$sentinel
+	brz,pn	$sentinel,.Labort_$NUM
+#endif
+
+	srax	$pwr,	32,	%o4
+#ifdef	__arch64__
+	brgez	%o4,.Lstride_$NUM
+	restore
+	restore
+	restore
+	restore
+	restore
+#else
+	brgez	%o4,.Lstride_$NUM
+	restore;		and	%fp,$sentinel,$sentinel
+	restore;		and	%fp,$sentinel,$sentinel
+	restore;		and	%fp,$sentinel,$sentinel
+	restore;		and	%fp,$sentinel,$sentinel
+	 brz,pn	$sentinel,.Labort1_$NUM
+	restore
+#endif
+___
+
+# save tp[$NUM] ########################################################
+for($i=0; $i<14 && $i<$NUM; $i++) {
+$code.=<<___;
+	movxtod	@A[$i],@R[$i]
+___
+}
+$code.=<<___;
+#ifdef	__arch64__
+	restore
+#else
+	 and	%fp,$sentinel,$sentinel
+	restore
+	 and	$sentinel,1,%o7
+	 and	%fp,$sentinel,$sentinel
+	 srl	%fp,0,%fp		! just in case?
+	 or	%o7,$sentinel,$sentinel
+	brz,a,pn $sentinel,.Ldone_$NUM
+	mov	0,%i0		! return failure
+#endif
+___
+for($i=0; $i<$NUM; $i++) {
+$code.=<<___;
+	std	@R[$i],[$tp+$i*8]
+___
+}
+$code.=<<___;
+	mov	1,%i0		! return success
+.Ldone_$NUM:
+	ret
+	restore
+
+.Labort_$NUM:
+	restore
+	restore
+	restore
+	restore
+	restore
+.Labort1_$NUM:
+	restore
+
+	mov	0,%i0		! return failure
+	ret
+	restore
+.type	bn_pwr5_mont_t4_$NUM, #function
+.size	bn_pwr5_mont_t4_$NUM, .-bn_pwr5_mont_t4_$NUM
+___
+}
+
+for ($i=8;$i<=32;$i+=8) {
+	&generate_bn_pwr5_mont_t4($i);
+}
+
+{
+########################################################################
+# Fall-back subroutines
+#
+# copy of bn_mul_mont_vis3 adjusted for vectors of 64-bit values
+#
+($n0,$m0,$m1,$lo0,$hi0, $lo1,$hi1,$aj,$alo,$nj,$nlo,$tj)=
+	(map("%g$_",(1..5)),map("%o$_",(0..5,7)));
+
+# int bn_mul_mont(
+$rp="%o0";	# u64 *rp,
+$ap="%o1";	# const u64 *ap,
+$bp="%o2";	# const u64 *bp,
+$np="%o3";	# const u64 *np,
+$n0p="%o4";	# const BN_ULONG *n0,
+$num="%o5";	# int num);	# caller ensures that num is >=3
+$code.=<<___;
+.globl	bn_mul_mont_t4
+.align	32
+bn_mul_mont_t4:
+	add	%sp,	STACK_BIAS,	%g4	! real top of stack
+	sll	$num,	3,	$num		! size in bytes
+	add	$num,	63,	%g1
+	andn	%g1,	63,	%g1		! buffer size rounded up to 64 bytes
+	sub	%g4,	%g1,	%g1
+	andn	%g1,	63,	%g1		! align at 64 byte
+	sub	%g1,	STACK_FRAME,	%g1	! new top of stack
+	sub	%g1,	%g4,	%g1
+
+	save	%sp,	%g1,	%sp
+___
+#	+-------------------------------+<-----	%sp
+#	.				.
+#	+-------------------------------+<-----	aligned at 64 bytes
+#	| __int64 tmp[0]		|
+#	+-------------------------------+
+#	.				.
+#	.				.
+#	+-------------------------------+<-----	aligned at 64 bytes
+#	.				.
+($rp,$ap,$bp,$np,$n0p,$num)=map("%i$_",(0..5));
+($t0,$t1,$t2,$t3,$cnt,$tp,$bufsz)=map("%l$_",(0..7));
+($ovf,$i)=($t0,$t1);
+$code.=<<___;
+	ld	[$n0p+0],	$t0	! pull n0[0..1] value
+	ld	[$n0p+4],	$t1
+	add	%sp, STACK_BIAS+STACK_FRAME, $tp
+	ldx	[$bp+0],	$m0	! m0=bp[0]
+	sllx	$t1,	32,	$n0
+	add	$bp,	8,	$bp
+	or	$t0,	$n0,	$n0
+
+	ldx	[$ap+0],	$aj	! ap[0]
+
+	mulx	$aj,	$m0,	$lo0	! ap[0]*bp[0]
+	umulxhi	$aj,	$m0,	$hi0
+
+	ldx	[$ap+8],	$aj	! ap[1]
+	add	$ap,	16,	$ap
+	ldx	[$np+0],	$nj	! np[0]
+
+	mulx	$lo0,	$n0,	$m1	! "tp[0]"*n0
+
+	mulx	$aj,	$m0,	$alo	! ap[1]*bp[0]
+	umulxhi	$aj,	$m0,	$aj	! ahi=aj
+
+	mulx	$nj,	$m1,	$lo1	! np[0]*m1
+	umulxhi	$nj,	$m1,	$hi1
+
+	ldx	[$np+8],	$nj	! np[1]
+
+	addcc	$lo0,	$lo1,	$lo1
+	add	$np,	16,	$np
+	addxc	%g0,	$hi1,	$hi1
+
+	mulx	$nj,	$m1,	$nlo	! np[1]*m1
+	umulxhi	$nj,	$m1,	$nj	! nhi=nj
+
+	ba	.L1st
+	sub	$num,	24,	$cnt	! cnt=num-3
+
+.align	16
+.L1st:
+	addcc	$alo,	$hi0,	$lo0
+	addxc	$aj,	%g0,	$hi0
+
+	ldx	[$ap+0],	$aj	! ap[j]
+	addcc	$nlo,	$hi1,	$lo1
+	add	$ap,	8,	$ap
+	addxc	$nj,	%g0,	$hi1	! nhi=nj
+
+	ldx	[$np+0],	$nj	! np[j]
+	mulx	$aj,	$m0,	$alo	! ap[j]*bp[0]
+	add	$np,	8,	$np
+	umulxhi	$aj,	$m0,	$aj	! ahi=aj
+
+	mulx	$nj,	$m1,	$nlo	! np[j]*m1
+	addcc	$lo0,	$lo1,	$lo1	! np[j]*m1+ap[j]*bp[0]
+	umulxhi	$nj,	$m1,	$nj	! nhi=nj
+	addxc	%g0,	$hi1,	$hi1
+	stxa	$lo1,	[$tp]0xe2	! tp[j-1]
+	add	$tp,	8,	$tp	! tp++
+
+	brnz,pt	$cnt,	.L1st
+	sub	$cnt,	8,	$cnt	! j--
+!.L1st
+	addcc	$alo,	$hi0,	$lo0
+	addxc	$aj,	%g0,	$hi0	! ahi=aj
+
+	addcc	$nlo,	$hi1,	$lo1
+	addxc	$nj,	%g0,	$hi1
+	addcc	$lo0,	$lo1,	$lo1	! np[j]*m1+ap[j]*bp[0]
+	addxc	%g0,	$hi1,	$hi1
+	stxa	$lo1,	[$tp]0xe2	! tp[j-1]
+	add	$tp,	8,	$tp
+
+	addcc	$hi0,	$hi1,	$hi1
+	addxc	%g0,	%g0,	$ovf	! upmost overflow bit
+	stxa	$hi1,	[$tp]0xe2
+	add	$tp,	8,	$tp
+
+	ba	.Louter
+	sub	$num,	16,	$i	! i=num-2
+
+.align	16
+.Louter:
+	ldx	[$bp+0],	$m0	! m0=bp[i]
+	add	$bp,	8,	$bp
+
+	sub	$ap,	$num,	$ap	! rewind
+	sub	$np,	$num,	$np
+	sub	$tp,	$num,	$tp
+
+	ldx	[$ap+0],	$aj	! ap[0]
+	ldx	[$np+0],	$nj	! np[0]
+
+	mulx	$aj,	$m0,	$lo0	! ap[0]*bp[i]
+	ldx	[$tp],		$tj	! tp[0]
+	umulxhi	$aj,	$m0,	$hi0
+	ldx	[$ap+8],	$aj	! ap[1]
+	addcc	$lo0,	$tj,	$lo0	! ap[0]*bp[i]+tp[0]
+	mulx	$aj,	$m0,	$alo	! ap[1]*bp[i]
+	addxc	%g0,	$hi0,	$hi0
+	mulx	$lo0,	$n0,	$m1	! tp[0]*n0
+	umulxhi	$aj,	$m0,	$aj	! ahi=aj
+	mulx	$nj,	$m1,	$lo1	! np[0]*m1
+	add	$ap,	16,	$ap
+	umulxhi	$nj,	$m1,	$hi1
+	ldx	[$np+8],	$nj	! np[1]
+	add	$np,	16,	$np
+	addcc	$lo1,	$lo0,	$lo1
+	mulx	$nj,	$m1,	$nlo	! np[1]*m1
+	addxc	%g0,	$hi1,	$hi1
+	umulxhi	$nj,	$m1,	$nj	! nhi=nj
+
+	ba	.Linner
+	sub	$num,	24,	$cnt	! cnt=num-3
+.align	16
+.Linner:
+	addcc	$alo,	$hi0,	$lo0
+	ldx	[$tp+8],	$tj	! tp[j]
+	addxc	$aj,	%g0,	$hi0	! ahi=aj
+	ldx	[$ap+0],	$aj	! ap[j]
+	add	$ap,	8,	$ap
+	addcc	$nlo,	$hi1,	$lo1
+	mulx	$aj,	$m0,	$alo	! ap[j]*bp[i]
+	addxc	$nj,	%g0,	$hi1	! nhi=nj
+	ldx	[$np+0],	$nj	! np[j]
+	add	$np,	8,	$np
+	umulxhi	$aj,	$m0,	$aj	! ahi=aj
+	addcc	$lo0,	$tj,	$lo0	! ap[j]*bp[i]+tp[j]
+	mulx	$nj,	$m1,	$nlo	! np[j]*m1
+	addxc	%g0,	$hi0,	$hi0
+	umulxhi	$nj,	$m1,	$nj	! nhi=nj
+	addcc	$lo1,	$lo0,	$lo1	! np[j]*m1+ap[j]*bp[i]+tp[j]
+	addxc	%g0,	$hi1,	$hi1
+	stx	$lo1,	[$tp]		! tp[j-1]
+	add	$tp,	8,	$tp
+	brnz,pt	$cnt,	.Linner
+	sub	$cnt,	8,	$cnt
+!.Linner
+	ldx	[$tp+8],	$tj	! tp[j]
+	addcc	$alo,	$hi0,	$lo0
+	addxc	$aj,	%g0,	$hi0	! ahi=aj
+	addcc	$lo0,	$tj,	$lo0	! ap[j]*bp[i]+tp[j]
+	addxc	%g0,	$hi0,	$hi0
+
+	addcc	$nlo,	$hi1,	$lo1
+	addxc	$nj,	%g0,	$hi1	! nhi=nj
+	addcc	$lo1,	$lo0,	$lo1	! np[j]*m1+ap[j]*bp[i]+tp[j]
+	addxc	%g0,	$hi1,	$hi1
+	stx	$lo1,	[$tp]		! tp[j-1]
+
+	subcc	%g0,	$ovf,	%g0	! move upmost overflow to CCR.xcc
+	addxccc	$hi1,	$hi0,	$hi1
+	addxc	%g0,	%g0,	$ovf
+	stx	$hi1,	[$tp+8]
+	add	$tp,	16,	$tp
+
+	brnz,pt	$i,	.Louter
+	sub	$i,	8,	$i
+
+	sub	$ap,	$num,	$ap	! rewind
+	sub	$np,	$num,	$np
+	sub	$tp,	$num,	$tp
+	ba	.Lsub
+	subcc	$num,	8,	$cnt	! cnt=num-1 and clear CCR.xcc
+
+.align	16
+.Lsub:
+	ldx	[$tp],		$tj
+	add	$tp,	8,	$tp
+	ldx	[$np+0],	$nj
+	add	$np,	8,	$np
+	subccc	$tj,	$nj,	$t2	! tp[j]-np[j]
+	srlx	$tj,	32,	$tj
+	srlx	$nj,	32,	$nj
+	subccc	$tj,	$nj,	$t3
+	add	$rp,	8,	$rp
+	st	$t2,	[$rp-4]		! reverse order
+	st	$t3,	[$rp-8]
+	brnz,pt	$cnt,	.Lsub
+	sub	$cnt,	8,	$cnt
+
+	sub	$np,	$num,	$np	! rewind
+	sub	$tp,	$num,	$tp
+	sub	$rp,	$num,	$rp
+
+	subccc	$ovf,	%g0,	$ovf	! handle upmost overflow bit
+	ba	.Lcopy
+	sub	$num,	8,	$cnt
+
+.align	16
+.Lcopy:					! conditional copy
+	ldx	[$tp],		$tj
+	ldx	[$rp+0],	$t2
+	stx	%g0,	[$tp]		! zap
+	add	$tp,	8,	$tp
+	movcs	%icc,	$tj,	$t2
+	stx	$t2,	[$rp+0]
+	add	$rp,	8,	$rp
+	brnz	$cnt,	.Lcopy
+	sub	$cnt,	8,	$cnt
+
+	mov	1,	%o0
+	ret
+	restore
+.type	bn_mul_mont_t4, #function
+.size	bn_mul_mont_t4, .-bn_mul_mont_t4
+___
+
+# int bn_mul_mont_gather5(
+$rp="%o0";	# u64 *rp,
+$ap="%o1";	# const u64 *ap,
+$bp="%o2";	# const u64 *pwrtbl,
+$np="%o3";	# const u64 *np,
+$n0p="%o4";	# const BN_ULONG *n0,
+$num="%o5";	# int num,	# caller ensures that num is >=3
+		# int power);
+$code.=<<___;
+.globl	bn_mul_mont_gather5_t4
+.align	32
+bn_mul_mont_gather5_t4:
+	add	%sp,	STACK_BIAS,	%g4	! real top of stack
+	sll	$num,	3,	$num		! size in bytes
+	add	$num,	63,	%g1
+	andn	%g1,	63,	%g1		! buffer size rounded up to 64 bytes
+	sub	%g4,	%g1,	%g1
+	andn	%g1,	63,	%g1		! align at 64 byte
+	sub	%g1,	STACK_FRAME,	%g1	! new top of stack
+	sub	%g1,	%g4,	%g1
+	LDPTR	[%sp+STACK_7thARG],	%g4	! load power, 7th argument
+
+	save	%sp,	%g1,	%sp
+___
+#	+-------------------------------+<-----	%sp
+#	.				.
+#	+-------------------------------+<-----	aligned at 64 bytes
+#	| __int64 tmp[0]		|
+#	+-------------------------------+
+#	.				.
+#	.				.
+#	+-------------------------------+<-----	aligned at 64 bytes
+#	.				.
+($rp,$ap,$bp,$np,$n0p,$num)=map("%i$_",(0..5));
+($t0,$t1,$t2,$t3,$cnt,$tp,$bufsz,$ccr)=map("%l$_",(0..7));
+($ovf,$i)=($t0,$t1);
+	&load_ccr($bp,"%g4",$ccr);
+	&load_b($bp,$m0,"%o7");		# m0=bp[0]
+
+$code.=<<___;
+	ld	[$n0p+0],	$t0	! pull n0[0..1] value
+	ld	[$n0p+4],	$t1
+	add	%sp, STACK_BIAS+STACK_FRAME, $tp
+	sllx	$t1,	32,	$n0
+	or	$t0,	$n0,	$n0
+
+	ldx	[$ap+0],	$aj	! ap[0]
+
+	mulx	$aj,	$m0,	$lo0	! ap[0]*bp[0]
+	umulxhi	$aj,	$m0,	$hi0
+
+	ldx	[$ap+8],	$aj	! ap[1]
+	add	$ap,	16,	$ap
+	ldx	[$np+0],	$nj	! np[0]
+
+	mulx	$lo0,	$n0,	$m1	! "tp[0]"*n0
+
+	mulx	$aj,	$m0,	$alo	! ap[1]*bp[0]
+	umulxhi	$aj,	$m0,	$aj	! ahi=aj
+
+	mulx	$nj,	$m1,	$lo1	! np[0]*m1
+	umulxhi	$nj,	$m1,	$hi1
+
+	ldx	[$np+8],	$nj	! np[1]
+
+	addcc	$lo0,	$lo1,	$lo1
+	add	$np,	16,	$np
+	addxc	%g0,	$hi1,	$hi1
+
+	mulx	$nj,	$m1,	$nlo	! np[1]*m1
+	umulxhi	$nj,	$m1,	$nj	! nhi=nj
+
+	ba	.L1st_g5
+	sub	$num,	24,	$cnt	! cnt=num-3
+
+.align	16
+.L1st_g5:
+	addcc	$alo,	$hi0,	$lo0
+	addxc	$aj,	%g0,	$hi0
+
+	ldx	[$ap+0],	$aj	! ap[j]
+	addcc	$nlo,	$hi1,	$lo1
+	add	$ap,	8,	$ap
+	addxc	$nj,	%g0,	$hi1	! nhi=nj
+
+	ldx	[$np+0],	$nj	! np[j]
+	mulx	$aj,	$m0,	$alo	! ap[j]*bp[0]
+	add	$np,	8,	$np
+	umulxhi	$aj,	$m0,	$aj	! ahi=aj
+
+	mulx	$nj,	$m1,	$nlo	! np[j]*m1
+	addcc	$lo0,	$lo1,	$lo1	! np[j]*m1+ap[j]*bp[0]
+	umulxhi	$nj,	$m1,	$nj	! nhi=nj
+	addxc	%g0,	$hi1,	$hi1
+	stxa	$lo1,	[$tp]0xe2	! tp[j-1]
+	add	$tp,	8,	$tp	! tp++
+
+	brnz,pt	$cnt,	.L1st_g5
+	sub	$cnt,	8,	$cnt	! j--
+!.L1st_g5
+	addcc	$alo,	$hi0,	$lo0
+	addxc	$aj,	%g0,	$hi0	! ahi=aj
+
+	addcc	$nlo,	$hi1,	$lo1
+	addxc	$nj,	%g0,	$hi1
+	addcc	$lo0,	$lo1,	$lo1	! np[j]*m1+ap[j]*bp[0]
+	addxc	%g0,	$hi1,	$hi1
+	stxa	$lo1,	[$tp]0xe2	! tp[j-1]
+	add	$tp,	8,	$tp
+
+	addcc	$hi0,	$hi1,	$hi1
+	addxc	%g0,	%g0,	$ovf	! upmost overflow bit
+	stxa	$hi1,	[$tp]0xe2
+	add	$tp,	8,	$tp
+
+	ba	.Louter_g5
+	sub	$num,	16,	$i	! i=num-2
+
+.align	16
+.Louter_g5:
+	wr	$ccr,	%g0,	%ccr
+___
+	&load_b($bp,$m0);		# m0=bp[i]
+$code.=<<___;
+	sub	$ap,	$num,	$ap	! rewind
+	sub	$np,	$num,	$np
+	sub	$tp,	$num,	$tp
+
+	ldx	[$ap+0],	$aj	! ap[0]
+	ldx	[$np+0],	$nj	! np[0]
+
+	mulx	$aj,	$m0,	$lo0	! ap[0]*bp[i]
+	ldx	[$tp],		$tj	! tp[0]
+	umulxhi	$aj,	$m0,	$hi0
+	ldx	[$ap+8],	$aj	! ap[1]
+	addcc	$lo0,	$tj,	$lo0	! ap[0]*bp[i]+tp[0]
+	mulx	$aj,	$m0,	$alo	! ap[1]*bp[i]
+	addxc	%g0,	$hi0,	$hi0
+	mulx	$lo0,	$n0,	$m1	! tp[0]*n0
+	umulxhi	$aj,	$m0,	$aj	! ahi=aj
+	mulx	$nj,	$m1,	$lo1	! np[0]*m1
+	add	$ap,	16,	$ap
+	umulxhi	$nj,	$m1,	$hi1
+	ldx	[$np+8],	$nj	! np[1]
+	add	$np,	16,	$np
+	addcc	$lo1,	$lo0,	$lo1
+	mulx	$nj,	$m1,	$nlo	! np[1]*m1
+	addxc	%g0,	$hi1,	$hi1
+	umulxhi	$nj,	$m1,	$nj	! nhi=nj
+
+	ba	.Linner_g5
+	sub	$num,	24,	$cnt	! cnt=num-3
+.align	16
+.Linner_g5:
+	addcc	$alo,	$hi0,	$lo0
+	ldx	[$tp+8],	$tj	! tp[j]
+	addxc	$aj,	%g0,	$hi0	! ahi=aj
+	ldx	[$ap+0],	$aj	! ap[j]
+	add	$ap,	8,	$ap
+	addcc	$nlo,	$hi1,	$lo1
+	mulx	$aj,	$m0,	$alo	! ap[j]*bp[i]
+	addxc	$nj,	%g0,	$hi1	! nhi=nj
+	ldx	[$np+0],	$nj	! np[j]
+	add	$np,	8,	$np
+	umulxhi	$aj,	$m0,	$aj	! ahi=aj
+	addcc	$lo0,	$tj,	$lo0	! ap[j]*bp[i]+tp[j]
+	mulx	$nj,	$m1,	$nlo	! np[j]*m1
+	addxc	%g0,	$hi0,	$hi0
+	umulxhi	$nj,	$m1,	$nj	! nhi=nj
+	addcc	$lo1,	$lo0,	$lo1	! np[j]*m1+ap[j]*bp[i]+tp[j]
+	addxc	%g0,	$hi1,	$hi1
+	stx	$lo1,	[$tp]		! tp[j-1]
+	add	$tp,	8,	$tp
+	brnz,pt	$cnt,	.Linner_g5
+	sub	$cnt,	8,	$cnt
+!.Linner_g5
+	ldx	[$tp+8],	$tj	! tp[j]
+	addcc	$alo,	$hi0,	$lo0
+	addxc	$aj,	%g0,	$hi0	! ahi=aj
+	addcc	$lo0,	$tj,	$lo0	! ap[j]*bp[i]+tp[j]
+	addxc	%g0,	$hi0,	$hi0
+
+	addcc	$nlo,	$hi1,	$lo1
+	addxc	$nj,	%g0,	$hi1	! nhi=nj
+	addcc	$lo1,	$lo0,	$lo1	! np[j]*m1+ap[j]*bp[i]+tp[j]
+	addxc	%g0,	$hi1,	$hi1
+	stx	$lo1,	[$tp]		! tp[j-1]
+
+	subcc	%g0,	$ovf,	%g0	! move upmost overflow to CCR.xcc
+	addxccc	$hi1,	$hi0,	$hi1
+	addxc	%g0,	%g0,	$ovf
+	stx	$hi1,	[$tp+8]
+	add	$tp,	16,	$tp
+
+	brnz,pt	$i,	.Louter_g5
+	sub	$i,	8,	$i
+
+	sub	$ap,	$num,	$ap	! rewind
+	sub	$np,	$num,	$np
+	sub	$tp,	$num,	$tp
+	ba	.Lsub_g5
+	subcc	$num,	8,	$cnt	! cnt=num-1 and clear CCR.xcc
+
+.align	16
+.Lsub_g5:
+	ldx	[$tp],		$tj
+	add	$tp,	8,	$tp
+	ldx	[$np+0],	$nj
+	add	$np,	8,	$np
+	subccc	$tj,	$nj,	$t2	! tp[j]-np[j]
+	srlx	$tj,	32,	$tj
+	srlx	$nj,	32,	$nj
+	subccc	$tj,	$nj,	$t3
+	add	$rp,	8,	$rp
+	st	$t2,	[$rp-4]		! reverse order
+	st	$t3,	[$rp-8]
+	brnz,pt	$cnt,	.Lsub_g5
+	sub	$cnt,	8,	$cnt
+
+	sub	$np,	$num,	$np	! rewind
+	sub	$tp,	$num,	$tp
+	sub	$rp,	$num,	$rp
+
+	subccc	$ovf,	%g0,	$ovf	! handle upmost overflow bit
+	ba	.Lcopy_g5
+	sub	$num,	8,	$cnt
+
+.align	16
+.Lcopy_g5:				! conditional copy
+	ldx	[$tp],		$tj
+	ldx	[$rp+0],	$t2
+	stx	%g0,	[$tp]		! zap
+	add	$tp,	8,	$tp
+	movcs	%icc,	$tj,	$t2
+	stx	$t2,	[$rp+0]
+	add	$rp,	8,	$rp
+	brnz	$cnt,	.Lcopy_g5
+	sub	$cnt,	8,	$cnt
+
+	mov	1,	%o0
+	ret
+	restore
+.type	bn_mul_mont_gather5_t4, #function
+.size	bn_mul_mont_gather5_t4, .-bn_mul_mont_gather5_t4
+___
+}
+
+$code.=<<___;
+.globl	bn_flip_t4
+.align	32
+bn_flip_t4:
+.Loop_flip:
+	ld	[%o1+0],	%o4
+	sub	%o2,	1,	%o2
+	ld	[%o1+4],	%o5
+	add	%o1,	8,	%o1
+	st	%o5,	[%o0+0]
+	st	%o4,	[%o0+4]
+	brnz	%o2,	.Loop_flip
+	add	%o0,	8,	%o0
+	retl
+	nop
+.type	bn_flip_t4, #function
+.size	bn_flip_t4, .-bn_flip_t4
+
+.globl	bn_flip_n_scatter5_t4
+.align	32
+bn_flip_n_scatter5_t4:
+	sll	%o3,	3,	%o3
+	srl	%o1,	1,	%o1
+	add	%o3,	%o2,	%o2	! &pwrtbl[pwr]
+	sub	%o1,	1,	%o1
+.Loop_flip_n_scatter5:
+	ld	[%o0+0],	%o4	! inp[i]
+	ld	[%o0+4],	%o5
+	add	%o0,	8,	%o0
+	sllx	%o5,	32,	%o5
+	or	%o4,	%o5,	%o5
+	stx	%o5,	[%o2]
+	add	%o2,	32*8,	%o2
+	brnz	%o1,	.Loop_flip_n_scatter5
+	sub	%o1,	1,	%o1
+	retl
+	nop
+.type	bn_flip_n_scatter5_t4, #function
+.size	bn_flip_n_scatter5_t4, .-bn_flip_n_scatter5_t4
+
+.globl	bn_gather5_t4
+.align	32
+bn_gather5_t4:
+___
+	&load_ccr("%o2","%o3","%g1");
+$code.=<<___;
+	sub	%o1,	1,	%o1
+.Loop_gather5:
+___
+	&load_b("%o2","%g1");
+$code.=<<___;
+	stx	%g1,	[%o0]
+	add	%o0,	8,	%o0
+	brnz	%o1,	.Loop_gather5
+	sub	%o1,	1,	%o1
+
+	retl
+	nop
+.type	bn_gather5_t4, #function
+.size	bn_gather5_t4, .-bn_gather5_t4
+
+.asciz	"Montgomery Multiplication for SPARC T4, David S. Miller, Andy Polyakov"
+.align	4
+___
+
+&emit_assembler();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv8.S b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv8.S
new file mode 100644
index 000000000..75d72eb92
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv8.S
@@ -0,0 +1,1458 @@
+.ident	"sparcv8.s, Version 1.4"
+.ident	"SPARC v8 ISA artwork by Andy Polyakov <appro@openssl.org>"
+
+/*
+ * ====================================================================
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ * ====================================================================
+ */
+
+/*
+ * This is my modest contribution to OpenSSL project (see
+ * http://www.openssl.org/ for more information about it) and is
+ * a drop-in SuperSPARC ISA replacement for crypto/bn/bn_asm.c
+ * module. For updates see http://fy.chalmers.se/~appro/hpe/.
+ *
+ * See bn_asm.sparc.v8plus.S for more details.
+ */
+
+/*
+ * Revision history.
+ *
+ * 1.1	- new loop unrolling model(*);
+ * 1.2	- made gas friendly;
+ * 1.3	- fixed problem with /usr/ccs/lib/cpp;
+ * 1.4	- some retunes;
+ *
+ * (*)	see bn_asm.sparc.v8plus.S for details
+ */
+
+.section	".text",#alloc,#execinstr
+.file		"bn_asm.sparc.v8.S"
+
+.align	32
+
+.global bn_mul_add_words
+/*
+ * BN_ULONG bn_mul_add_words(rp,ap,num,w)
+ * BN_ULONG *rp,*ap;
+ * int num;
+ * BN_ULONG w;
+ */
+bn_mul_add_words:
+	cmp	%o2,0
+	bg,a	.L_bn_mul_add_words_proceed
+	ld	[%o1],%g2
+	retl
+	clr	%o0
+
+.L_bn_mul_add_words_proceed:
+	andcc	%o2,-4,%g0
+	bz	.L_bn_mul_add_words_tail
+	clr	%o5
+
+.L_bn_mul_add_words_loop:
+	ld	[%o0],%o4
+	ld	[%o1+4],%g3
+	umul	%o3,%g2,%g2
+	rd	%y,%g1
+	addcc	%o4,%o5,%o4
+	addx	%g1,0,%g1
+	addcc	%o4,%g2,%o4
+	st	%o4,[%o0]
+	addx	%g1,0,%o5
+
+	ld	[%o0+4],%o4
+	ld	[%o1+8],%g2
+	umul	%o3,%g3,%g3
+	dec	4,%o2
+	rd	%y,%g1
+	addcc	%o4,%o5,%o4
+	addx	%g1,0,%g1
+	addcc	%o4,%g3,%o4
+	st	%o4,[%o0+4]
+	addx	%g1,0,%o5
+
+	ld	[%o0+8],%o4
+	ld	[%o1+12],%g3
+	umul	%o3,%g2,%g2
+	inc	16,%o1
+	rd	%y,%g1
+	addcc	%o4,%o5,%o4
+	addx	%g1,0,%g1
+	addcc	%o4,%g2,%o4
+	st	%o4,[%o0+8]
+	addx	%g1,0,%o5
+
+	ld	[%o0+12],%o4
+	umul	%o3,%g3,%g3
+	inc	16,%o0
+	rd	%y,%g1
+	addcc	%o4,%o5,%o4
+	addx	%g1,0,%g1
+	addcc	%o4,%g3,%o4
+	st	%o4,[%o0-4]
+	addx	%g1,0,%o5
+	andcc	%o2,-4,%g0
+	bnz,a	.L_bn_mul_add_words_loop
+	ld	[%o1],%g2
+
+	tst	%o2
+	bnz,a	.L_bn_mul_add_words_tail
+	ld	[%o1],%g2
+.L_bn_mul_add_words_return:
+	retl
+	mov	%o5,%o0
+	nop
+
+.L_bn_mul_add_words_tail:
+	ld	[%o0],%o4
+	umul	%o3,%g2,%g2
+	addcc	%o4,%o5,%o4
+	rd	%y,%g1
+	addx	%g1,0,%g1
+	addcc	%o4,%g2,%o4
+	addx	%g1,0,%o5
+	deccc	%o2
+	bz	.L_bn_mul_add_words_return
+	st	%o4,[%o0]
+
+	ld	[%o1+4],%g2
+	ld	[%o0+4],%o4
+	umul	%o3,%g2,%g2
+	rd	%y,%g1
+	addcc	%o4,%o5,%o4
+	addx	%g1,0,%g1
+	addcc	%o4,%g2,%o4
+	addx	%g1,0,%o5
+	deccc	%o2
+	bz	.L_bn_mul_add_words_return
+	st	%o4,[%o0+4]
+
+	ld	[%o1+8],%g2
+	ld	[%o0+8],%o4
+	umul	%o3,%g2,%g2
+	rd	%y,%g1
+	addcc	%o4,%o5,%o4
+	addx	%g1,0,%g1
+	addcc	%o4,%g2,%o4
+	st	%o4,[%o0+8]
+	retl
+	addx	%g1,0,%o0
+
+.type	bn_mul_add_words,#function
+.size	bn_mul_add_words,(.-bn_mul_add_words)
+
+.align	32
+
+.global bn_mul_words
+/*
+ * BN_ULONG bn_mul_words(rp,ap,num,w)
+ * BN_ULONG *rp,*ap;
+ * int num;
+ * BN_ULONG w;
+ */
+bn_mul_words:
+	cmp	%o2,0
+	bg,a	.L_bn_mul_words_proceed
+	ld	[%o1],%g2
+	retl
+	clr	%o0
+
+.L_bn_mul_words_proceed:
+	andcc	%o2,-4,%g0
+	bz	.L_bn_mul_words_tail
+	clr	%o5
+
+.L_bn_mul_words_loop:
+	ld	[%o1+4],%g3
+	umul	%o3,%g2,%g2
+	addcc	%g2,%o5,%g2
+	rd	%y,%g1
+	addx	%g1,0,%o5
+	st	%g2,[%o0]
+
+	ld	[%o1+8],%g2
+	umul	%o3,%g3,%g3
+	addcc	%g3,%o5,%g3
+	rd	%y,%g1
+	dec	4,%o2
+	addx	%g1,0,%o5
+	st	%g3,[%o0+4]
+
+	ld	[%o1+12],%g3
+	umul	%o3,%g2,%g2
+	addcc	%g2,%o5,%g2
+	rd	%y,%g1
+	inc	16,%o1
+	st	%g2,[%o0+8]
+	addx	%g1,0,%o5
+
+	umul	%o3,%g3,%g3
+	addcc	%g3,%o5,%g3
+	rd	%y,%g1
+	inc	16,%o0
+	addx	%g1,0,%o5
+	st	%g3,[%o0-4]
+	andcc	%o2,-4,%g0
+	nop
+	bnz,a	.L_bn_mul_words_loop
+	ld	[%o1],%g2
+
+	tst	%o2
+	bnz,a	.L_bn_mul_words_tail
+	ld	[%o1],%g2
+.L_bn_mul_words_return:
+	retl
+	mov	%o5,%o0
+	nop
+
+.L_bn_mul_words_tail:
+	umul	%o3,%g2,%g2
+	addcc	%g2,%o5,%g2
+	rd	%y,%g1
+	addx	%g1,0,%o5
+	deccc	%o2
+	bz	.L_bn_mul_words_return
+	st	%g2,[%o0]
+	nop
+
+	ld	[%o1+4],%g2
+	umul	%o3,%g2,%g2
+	addcc	%g2,%o5,%g2
+	rd	%y,%g1
+	addx	%g1,0,%o5
+	deccc	%o2
+	bz	.L_bn_mul_words_return
+	st	%g2,[%o0+4]
+
+	ld	[%o1+8],%g2
+	umul	%o3,%g2,%g2
+	addcc	%g2,%o5,%g2
+	rd	%y,%g1
+	st	%g2,[%o0+8]
+	retl
+	addx	%g1,0,%o0
+
+.type	bn_mul_words,#function
+.size	bn_mul_words,(.-bn_mul_words)
+
+.align  32
+.global	bn_sqr_words
+/*
+ * void bn_sqr_words(r,a,n)
+ * BN_ULONG *r,*a;
+ * int n;
+ */
+bn_sqr_words:
+	cmp	%o2,0
+	bg,a	.L_bn_sqr_words_proceed
+	ld	[%o1],%g2
+	retl
+	clr	%o0
+
+.L_bn_sqr_words_proceed:
+	andcc	%o2,-4,%g0
+	bz	.L_bn_sqr_words_tail
+	clr	%o5
+
+.L_bn_sqr_words_loop:
+	ld	[%o1+4],%g3
+	umul	%g2,%g2,%o4
+	st	%o4,[%o0]
+	rd	%y,%o5
+	st	%o5,[%o0+4]
+
+	ld	[%o1+8],%g2
+	umul	%g3,%g3,%o4
+	dec	4,%o2
+	st	%o4,[%o0+8]
+	rd	%y,%o5
+	st	%o5,[%o0+12]
+	nop
+
+	ld	[%o1+12],%g3
+	umul	%g2,%g2,%o4
+	st	%o4,[%o0+16]
+	rd	%y,%o5
+	inc	16,%o1
+	st	%o5,[%o0+20]
+
+	umul	%g3,%g3,%o4
+	inc	32,%o0
+	st	%o4,[%o0-8]
+	rd	%y,%o5
+	st	%o5,[%o0-4]
+	andcc	%o2,-4,%g2
+	bnz,a	.L_bn_sqr_words_loop
+	ld	[%o1],%g2
+
+	tst	%o2
+	nop
+	bnz,a	.L_bn_sqr_words_tail
+	ld	[%o1],%g2
+.L_bn_sqr_words_return:
+	retl
+	clr	%o0
+
+.L_bn_sqr_words_tail:
+	umul	%g2,%g2,%o4
+	st	%o4,[%o0]
+	deccc	%o2
+	rd	%y,%o5
+	bz	.L_bn_sqr_words_return
+	st	%o5,[%o0+4]
+
+	ld	[%o1+4],%g2
+	umul	%g2,%g2,%o4
+	st	%o4,[%o0+8]
+	deccc	%o2
+	rd	%y,%o5
+	nop
+	bz	.L_bn_sqr_words_return
+	st	%o5,[%o0+12]
+
+	ld	[%o1+8],%g2
+	umul	%g2,%g2,%o4
+	st	%o4,[%o0+16]
+	rd	%y,%o5
+	st	%o5,[%o0+20]
+	retl
+	clr	%o0
+
+.type	bn_sqr_words,#function
+.size	bn_sqr_words,(.-bn_sqr_words)
+
+.align	32
+
+.global bn_div_words
+/*
+ * BN_ULONG bn_div_words(h,l,d)
+ * BN_ULONG h,l,d;
+ */
+bn_div_words:
+	wr	%o0,%y
+	udiv	%o1,%o2,%o0
+	retl
+	nop
+
+.type	bn_div_words,#function
+.size	bn_div_words,(.-bn_div_words)
+
+.align	32
+
+.global bn_add_words
+/*
+ * BN_ULONG bn_add_words(rp,ap,bp,n)
+ * BN_ULONG *rp,*ap,*bp;
+ * int n;
+ */
+bn_add_words:
+	cmp	%o3,0
+	bg,a	.L_bn_add_words_proceed
+	ld	[%o1],%o4
+	retl
+	clr	%o0
+
+.L_bn_add_words_proceed:
+	andcc	%o3,-4,%g0
+	bz	.L_bn_add_words_tail
+	clr	%g1
+	ba	.L_bn_add_words_warn_loop
+	addcc	%g0,0,%g0	! clear carry flag
+
+.L_bn_add_words_loop:
+	ld	[%o1],%o4
+.L_bn_add_words_warn_loop:
+	ld	[%o2],%o5
+	ld	[%o1+4],%g3
+	ld	[%o2+4],%g4
+	dec	4,%o3
+	addxcc	%o5,%o4,%o5
+	st	%o5,[%o0]
+
+	ld	[%o1+8],%o4
+	ld	[%o2+8],%o5
+	inc	16,%o1
+	addxcc	%g3,%g4,%g3
+	st	%g3,[%o0+4]
+	
+	ld	[%o1-4],%g3
+	ld	[%o2+12],%g4
+	inc	16,%o2
+	addxcc	%o5,%o4,%o5
+	st	%o5,[%o0+8]
+
+	inc	16,%o0
+	addxcc	%g3,%g4,%g3
+	st	%g3,[%o0-4]
+	addx	%g0,0,%g1
+	andcc	%o3,-4,%g0
+	bnz,a	.L_bn_add_words_loop
+	addcc	%g1,-1,%g0
+
+	tst	%o3
+	bnz,a	.L_bn_add_words_tail
+	ld	[%o1],%o4
+.L_bn_add_words_return:
+	retl
+	mov	%g1,%o0
+
+.L_bn_add_words_tail:
+	addcc	%g1,-1,%g0
+	ld	[%o2],%o5
+	addxcc	%o5,%o4,%o5
+	addx	%g0,0,%g1
+	deccc	%o3
+	bz	.L_bn_add_words_return
+	st	%o5,[%o0]
+
+	ld	[%o1+4],%o4
+	addcc	%g1,-1,%g0
+	ld	[%o2+4],%o5
+	addxcc	%o5,%o4,%o5
+	addx	%g0,0,%g1
+	deccc	%o3
+	bz	.L_bn_add_words_return
+	st	%o5,[%o0+4]
+
+	ld	[%o1+8],%o4
+	addcc	%g1,-1,%g0
+	ld	[%o2+8],%o5
+	addxcc	%o5,%o4,%o5
+	st	%o5,[%o0+8]
+	retl
+	addx	%g0,0,%o0
+
+.type	bn_add_words,#function
+.size	bn_add_words,(.-bn_add_words)
+
+.align	32
+
+.global bn_sub_words
+/*
+ * BN_ULONG bn_sub_words(rp,ap,bp,n)
+ * BN_ULONG *rp,*ap,*bp;
+ * int n;
+ */
+bn_sub_words:
+	cmp	%o3,0
+	bg,a	.L_bn_sub_words_proceed
+	ld	[%o1],%o4
+	retl
+	clr	%o0
+
+.L_bn_sub_words_proceed:
+	andcc	%o3,-4,%g0
+	bz	.L_bn_sub_words_tail
+	clr	%g1
+	ba	.L_bn_sub_words_warm_loop
+	addcc	%g0,0,%g0	! clear carry flag
+
+.L_bn_sub_words_loop:
+	ld	[%o1],%o4
+.L_bn_sub_words_warm_loop:
+	ld	[%o2],%o5
+	ld	[%o1+4],%g3
+	ld	[%o2+4],%g4
+	dec	4,%o3
+	subxcc	%o4,%o5,%o5
+	st	%o5,[%o0]
+
+	ld	[%o1+8],%o4
+	ld	[%o2+8],%o5
+	inc	16,%o1
+	subxcc	%g3,%g4,%g4
+	st	%g4,[%o0+4]
+	
+	ld	[%o1-4],%g3
+	ld	[%o2+12],%g4
+	inc	16,%o2
+	subxcc	%o4,%o5,%o5
+	st	%o5,[%o0+8]
+
+	inc	16,%o0
+	subxcc	%g3,%g4,%g4
+	st	%g4,[%o0-4]
+	addx	%g0,0,%g1
+	andcc	%o3,-4,%g0
+	bnz,a	.L_bn_sub_words_loop
+	addcc	%g1,-1,%g0
+
+	tst	%o3
+	nop
+	bnz,a	.L_bn_sub_words_tail
+	ld	[%o1],%o4
+.L_bn_sub_words_return:
+	retl
+	mov	%g1,%o0
+
+.L_bn_sub_words_tail:
+	addcc	%g1,-1,%g0
+	ld	[%o2],%o5
+	subxcc	%o4,%o5,%o5
+	addx	%g0,0,%g1
+	deccc	%o3
+	bz	.L_bn_sub_words_return
+	st	%o5,[%o0]
+	nop
+
+	ld	[%o1+4],%o4
+	addcc	%g1,-1,%g0
+	ld	[%o2+4],%o5
+	subxcc	%o4,%o5,%o5
+	addx	%g0,0,%g1
+	deccc	%o3
+	bz	.L_bn_sub_words_return
+	st	%o5,[%o0+4]
+
+	ld	[%o1+8],%o4
+	addcc	%g1,-1,%g0
+	ld	[%o2+8],%o5
+	subxcc	%o4,%o5,%o5
+	st	%o5,[%o0+8]
+	retl
+	addx	%g0,0,%o0
+
+.type	bn_sub_words,#function
+.size	bn_sub_words,(.-bn_sub_words)
+
+#define FRAME_SIZE	-96
+
+/*
+ * Here is register usage map for *all* routines below.
+ */
+#define t_1	%o0
+#define	t_2	%o1
+#define c_1	%o2
+#define c_2	%o3
+#define c_3	%o4
+
+#define ap(I)	[%i1+4*I]
+#define bp(I)	[%i2+4*I]
+#define rp(I)	[%i0+4*I]
+
+#define	a_0	%l0
+#define	a_1	%l1
+#define	a_2	%l2
+#define	a_3	%l3
+#define	a_4	%l4
+#define	a_5	%l5
+#define	a_6	%l6
+#define	a_7	%l7
+
+#define	b_0	%i3
+#define	b_1	%i4
+#define	b_2	%i5
+#define	b_3	%o5
+#define	b_4	%g1
+#define	b_5	%g2
+#define	b_6	%g3
+#define	b_7	%g4
+
+.align	32
+.global bn_mul_comba8
+/*
+ * void bn_mul_comba8(r,a,b)
+ * BN_ULONG *r,*a,*b;
+ */
+bn_mul_comba8:
+	save	%sp,FRAME_SIZE,%sp
+	ld	ap(0),a_0
+	ld	bp(0),b_0
+	umul	a_0,b_0,c_1	!=!mul_add_c(a[0],b[0],c1,c2,c3);
+	ld	bp(1),b_1
+	rd	%y,c_2
+	st	c_1,rp(0)	!r[0]=c1;
+
+	umul	a_0,b_1,t_1	!=!mul_add_c(a[0],b[1],c2,c3,c1);
+	ld	ap(1),a_1
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2
+	addxcc	%g0,t_2,c_3	!=
+	addx	%g0,%g0,c_1
+	ld	ap(2),a_2
+	umul	a_1,b_0,t_1	!mul_add_c(a[1],b[0],c2,c3,c1);
+	addcc	c_2,t_1,c_2	!=
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3
+	st	c_2,rp(1)	!r[1]=c2;
+	addx	c_1,%g0,c_1	!=
+
+	umul	a_2,b_0,t_1	!mul_add_c(a[2],b[0],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1	!=
+	addx	%g0,%g0,c_2
+	ld	bp(2),b_2
+	umul	a_1,b_1,t_1	!mul_add_c(a[1],b[1],c3,c1,c2);
+	addcc	c_3,t_1,c_3	!=
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	ld	bp(3),b_3
+	addx	c_2,%g0,c_2	!=
+	umul	a_0,b_2,t_1	!mul_add_c(a[0],b[2],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1	!=
+	addx	c_2,%g0,c_2
+	st	c_3,rp(2)	!r[2]=c3;
+
+	umul	a_0,b_3,t_1	!mul_add_c(a[0],b[3],c1,c2,c3);
+	addcc	c_1,t_1,c_1	!=
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	%g0,%g0,c_3
+	umul	a_1,b_2,t_1	!=!mul_add_c(a[1],b[2],c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3	!=
+	ld	ap(3),a_3
+	umul	a_2,b_1,t_1	!mul_add_c(a[2],b[1],c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2		!=
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3
+	ld	ap(4),a_4
+	umul	a_3,b_0,t_1	!mul_add_c(a[3],b[0],c1,c2,c3);!=
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3	!=
+	st	c_1,rp(3)	!r[3]=c1;
+
+	umul	a_4,b_0,t_1	!mul_add_c(a[4],b[0],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	%g0,%g0,c_1
+	umul	a_3,b_1,t_1	!mul_add_c(a[3],b[1],c2,c3,c1);
+	addcc	c_2,t_1,c_2	!=
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1
+	umul	a_2,b_2,t_1	!=!mul_add_c(a[2],b[2],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1	!=
+	ld	bp(4),b_4
+	umul	a_1,b_3,t_1	!mul_add_c(a[1],b[3],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1
+	ld	bp(5),b_5
+	umul	a_0,b_4,t_1	!=!mul_add_c(a[0],b[4],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1	!=
+	st	c_2,rp(4)	!r[4]=c2;
+
+	umul	a_0,b_5,t_1	!mul_add_c(a[0],b[5],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2		!=
+	addxcc	c_1,t_2,c_1
+	addx	%g0,%g0,c_2
+	umul	a_1,b_4,t_1	!mul_add_c(a[1],b[4],c3,c1,c2);
+	addcc	c_3,t_1,c_3	!=
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2
+	umul	a_2,b_3,t_1	!=!mul_add_c(a[2],b[3],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2	!=
+	umul	a_3,b_2,t_1	!mul_add_c(a[3],b[2],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1	!=
+	addx	c_2,%g0,c_2
+	ld	ap(5),a_5
+	umul	a_4,b_1,t_1	!mul_add_c(a[4],b[1],c3,c1,c2);
+	addcc	c_3,t_1,c_3	!=
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	ld	ap(6),a_6
+	addx	c_2,%g0,c_2	!=
+	umul	a_5,b_0,t_1	!mul_add_c(a[5],b[0],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1	!=
+	addx	c_2,%g0,c_2
+	st	c_3,rp(5)	!r[5]=c3;
+
+	umul	a_6,b_0,t_1	!mul_add_c(a[6],b[0],c1,c2,c3);
+	addcc	c_1,t_1,c_1	!=
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	%g0,%g0,c_3
+	umul	a_5,b_1,t_1	!=!mul_add_c(a[5],b[1],c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3	!=
+	umul	a_4,b_2,t_1	!mul_add_c(a[4],b[2],c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2	!=
+	addx	c_3,%g0,c_3
+	umul	a_3,b_3,t_1	!mul_add_c(a[3],b[3],c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2		!=
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3
+	umul	a_2,b_4,t_1	!mul_add_c(a[2],b[4],c1,c2,c3);
+	addcc	c_1,t_1,c_1	!=
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	ld	bp(6),b_6
+	addx	c_3,%g0,c_3	!=
+	umul	a_1,b_5,t_1	!mul_add_c(a[1],b[5],c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2	!=
+	addx	c_3,%g0,c_3
+	ld	bp(7),b_7
+	umul	a_0,b_6,t_1	!mul_add_c(a[0],b[6],c1,c2,c3);
+	addcc	c_1,t_1,c_1	!=
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	st	c_1,rp(6)	!r[6]=c1;
+	addx	c_3,%g0,c_3	!=
+
+	umul	a_0,b_7,t_1	!mul_add_c(a[0],b[7],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3	!=
+	addx	%g0,%g0,c_1
+	umul	a_1,b_6,t_1	!mul_add_c(a[1],b[6],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1
+	umul	a_2,b_5,t_1	!mul_add_c(a[2],b[5],c2,c3,c1);
+	addcc	c_2,t_1,c_2	!=
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1
+	umul	a_3,b_4,t_1	!=!mul_add_c(a[3],b[4],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1	!=
+	umul	a_4,b_3,t_1	!mul_add_c(a[4],b[3],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3	!=
+	addx	c_1,%g0,c_1
+	umul	a_5,b_2,t_1	!mul_add_c(a[5],b[2],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1
+	ld	ap(7),a_7
+	umul	a_6,b_1,t_1	!=!mul_add_c(a[6],b[1],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1	!=
+	umul	a_7,b_0,t_1	!mul_add_c(a[7],b[0],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3	!=
+	addx	c_1,%g0,c_1
+	st	c_2,rp(7)	!r[7]=c2;
+
+	umul	a_7,b_1,t_1	!mul_add_c(a[7],b[1],c3,c1,c2);
+	addcc	c_3,t_1,c_3	!=
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	addx	%g0,%g0,c_2
+	umul	a_6,b_2,t_1	!=!mul_add_c(a[6],b[2],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2	!=
+	umul	a_5,b_3,t_1	!mul_add_c(a[5],b[3],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1	!=
+	addx	c_2,%g0,c_2
+	umul	a_4,b_4,t_1	!mul_add_c(a[4],b[4],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2		!=
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2
+	umul	a_3,b_5,t_1	!mul_add_c(a[3],b[5],c3,c1,c2);
+	addcc	c_3,t_1,c_3	!=
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2
+	umul	a_2,b_6,t_1	!=!mul_add_c(a[2],b[6],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2	!=
+	umul	a_1,b_7,t_1	!mul_add_c(a[1],b[7],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1	!
+	addx	c_2,%g0,c_2
+	st	c_3,rp(8)	!r[8]=c3;
+
+	umul	a_2,b_7,t_1	!mul_add_c(a[2],b[7],c1,c2,c3);
+	addcc	c_1,t_1,c_1	!=
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	%g0,%g0,c_3
+	umul	a_3,b_6,t_1	!=!mul_add_c(a[3],b[6],c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3	!=
+	umul	a_4,b_5,t_1	!mul_add_c(a[4],b[5],c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2	!=
+	addx	c_3,%g0,c_3
+	umul	a_5,b_4,t_1	!mul_add_c(a[5],b[4],c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2		!=
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3
+	umul	a_6,b_3,t_1	!mul_add_c(a[6],b[3],c1,c2,c3);
+	addcc	c_1,t_1,c_1	!=
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3
+	umul	a_7,b_2,t_1	!=!mul_add_c(a[7],b[2],c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3	!=
+	st	c_1,rp(9)	!r[9]=c1;
+
+	umul	a_7,b_3,t_1	!mul_add_c(a[7],b[3],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	%g0,%g0,c_1
+	umul	a_6,b_4,t_1	!mul_add_c(a[6],b[4],c2,c3,c1);
+	addcc	c_2,t_1,c_2	!=
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1
+	umul	a_5,b_5,t_1	!=!mul_add_c(a[5],b[5],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1	!=
+	umul	a_4,b_6,t_1	!mul_add_c(a[4],b[6],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3	!=
+	addx	c_1,%g0,c_1
+	umul	a_3,b_7,t_1	!mul_add_c(a[3],b[7],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1
+	st	c_2,rp(10)	!r[10]=c2;
+
+	umul	a_4,b_7,t_1	!=!mul_add_c(a[4],b[7],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	addx	%g0,%g0,c_2	!=
+	umul	a_5,b_6,t_1	!mul_add_c(a[5],b[6],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1	!=
+	addx	c_2,%g0,c_2
+	umul	a_6,b_5,t_1	!mul_add_c(a[6],b[5],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2		!=
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2
+	umul	a_7,b_4,t_1	!mul_add_c(a[7],b[4],c3,c1,c2);
+	addcc	c_3,t_1,c_3	!=
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	st	c_3,rp(11)	!r[11]=c3;
+	addx	c_2,%g0,c_2	!=
+
+	umul	a_7,b_5,t_1	!mul_add_c(a[7],b[5],c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2	!=
+	addx	%g0,%g0,c_3
+	umul	a_6,b_6,t_1	!mul_add_c(a[6],b[6],c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2		!=
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3
+	umul	a_5,b_7,t_1	!mul_add_c(a[5],b[7],c1,c2,c3);
+	addcc	c_1,t_1,c_1	!=
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	st	c_1,rp(12)	!r[12]=c1;
+	addx	c_3,%g0,c_3	!=
+
+	umul	a_6,b_7,t_1	!mul_add_c(a[6],b[7],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3	!=
+	addx	%g0,%g0,c_1
+	umul	a_7,b_6,t_1	!mul_add_c(a[7],b[6],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1
+	st	c_2,rp(13)	!r[13]=c2;
+
+	umul	a_7,b_7,t_1	!=!mul_add_c(a[7],b[7],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	nop			!=
+	st	c_3,rp(14)	!r[14]=c3;
+	st	c_1,rp(15)	!r[15]=c1;
+
+	ret
+	restore	%g0,%g0,%o0
+
+.type	bn_mul_comba8,#function
+.size	bn_mul_comba8,(.-bn_mul_comba8)
+
+.align	32
+
+.global bn_mul_comba4
+/*
+ * void bn_mul_comba4(r,a,b)
+ * BN_ULONG *r,*a,*b;
+ */
+bn_mul_comba4:
+	save	%sp,FRAME_SIZE,%sp
+	ld	ap(0),a_0
+	ld	bp(0),b_0
+	umul	a_0,b_0,c_1	!=!mul_add_c(a[0],b[0],c1,c2,c3);
+	ld	bp(1),b_1
+	rd	%y,c_2
+	st	c_1,rp(0)	!r[0]=c1;
+
+	umul	a_0,b_1,t_1	!=!mul_add_c(a[0],b[1],c2,c3,c1);
+	ld	ap(1),a_1
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	%g0,t_2,c_3
+	addx	%g0,%g0,c_1
+	ld	ap(2),a_2
+	umul	a_1,b_0,t_1	!=!mul_add_c(a[1],b[0],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1	!=
+	st	c_2,rp(1)	!r[1]=c2;
+
+	umul	a_2,b_0,t_1	!mul_add_c(a[2],b[0],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2		!=
+	addxcc	c_1,t_2,c_1
+	addx	%g0,%g0,c_2
+	ld	bp(2),b_2
+	umul	a_1,b_1,t_1	!=!mul_add_c(a[1],b[1],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2	!=
+	ld	bp(3),b_3
+	umul	a_0,b_2,t_1	!mul_add_c(a[0],b[2],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2		!=
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2
+	st	c_3,rp(2)	!r[2]=c3;
+
+	umul	a_0,b_3,t_1	!=!mul_add_c(a[0],b[3],c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	%g0,%g0,c_3	!=
+	umul	a_1,b_2,t_1	!mul_add_c(a[1],b[2],c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2	!=
+	addx	c_3,%g0,c_3
+	ld	ap(3),a_3
+	umul	a_2,b_1,t_1	!mul_add_c(a[2],b[1],c1,c2,c3);
+	addcc	c_1,t_1,c_1	!=
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3
+	umul	a_3,b_0,t_1	!=!mul_add_c(a[3],b[0],c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3	!=
+	st	c_1,rp(3)	!r[3]=c1;
+
+	umul	a_3,b_1,t_1	!mul_add_c(a[3],b[1],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	%g0,%g0,c_1
+	umul	a_2,b_2,t_1	!mul_add_c(a[2],b[2],c2,c3,c1);
+	addcc	c_2,t_1,c_2	!=
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1
+	umul	a_1,b_3,t_1	!=!mul_add_c(a[1],b[3],c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1	!=
+	st	c_2,rp(4)	!r[4]=c2;
+
+	umul	a_2,b_3,t_1	!mul_add_c(a[2],b[3],c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2		!=
+	addxcc	c_1,t_2,c_1
+	addx	%g0,%g0,c_2
+	umul	a_3,b_2,t_1	!mul_add_c(a[3],b[2],c3,c1,c2);
+	addcc	c_3,t_1,c_3	!=
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	st	c_3,rp(5)	!r[5]=c3;
+	addx	c_2,%g0,c_2	!=
+
+	umul	a_3,b_3,t_1	!mul_add_c(a[3],b[3],c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2	!=
+	st	c_1,rp(6)	!r[6]=c1;
+	st	c_2,rp(7)	!r[7]=c2;
+	
+	ret
+	restore	%g0,%g0,%o0
+
+.type	bn_mul_comba4,#function
+.size	bn_mul_comba4,(.-bn_mul_comba4)
+
+.align	32
+
+.global bn_sqr_comba8
+bn_sqr_comba8:
+	save	%sp,FRAME_SIZE,%sp
+	ld	ap(0),a_0
+	ld	ap(1),a_1
+	umul	a_0,a_0,c_1	!=!sqr_add_c(a,0,c1,c2,c3);
+	rd	%y,c_2
+	st	c_1,rp(0)	!r[0]=c1;
+
+	ld	ap(2),a_2
+	umul	a_0,a_1,t_1	!=!sqr_add_c2(a,1,0,c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2
+	addxcc	%g0,t_2,c_3
+	addx	%g0,%g0,c_1	!=
+	addcc	c_2,t_1,c_2
+	addxcc	c_3,t_2,c_3
+	st	c_2,rp(1)	!r[1]=c2;
+	addx	c_1,%g0,c_1	!=
+
+	umul	a_2,a_0,t_1	!sqr_add_c2(a,2,0,c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1	!=
+	addx	%g0,%g0,c_2
+	addcc	c_3,t_1,c_3
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2	!=
+	ld	ap(3),a_3
+	umul	a_1,a_1,t_1	!sqr_add_c(a,1,c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2		!=
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2
+	st	c_3,rp(2)	!r[2]=c3;
+
+	umul	a_0,a_3,t_1	!=!sqr_add_c2(a,3,0,c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	%g0,%g0,c_3	!=
+	addcc	c_1,t_1,c_1
+	addxcc	c_2,t_2,c_2
+	ld	ap(4),a_4
+	addx	c_3,%g0,c_3	!=
+	umul	a_1,a_2,t_1	!sqr_add_c2(a,2,1,c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2	!=
+	addx	c_3,%g0,c_3
+	addcc	c_1,t_1,c_1
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3	!=
+	st	c_1,rp(3)	!r[3]=c1;
+
+	umul	a_4,a_0,t_1	!sqr_add_c2(a,4,0,c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	%g0,%g0,c_1
+	addcc	c_2,t_1,c_2
+	addxcc	c_3,t_2,c_3	!=
+	addx	c_1,%g0,c_1
+	umul	a_3,a_1,t_1	!sqr_add_c2(a,3,1,c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1
+	addcc	c_2,t_1,c_2
+	addxcc	c_3,t_2,c_3	!=
+	addx	c_1,%g0,c_1
+	ld	ap(5),a_5
+	umul	a_2,a_2,t_1	!sqr_add_c(a,2,c2,c3,c1);
+	addcc	c_2,t_1,c_2	!=
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3
+	st	c_2,rp(4)	!r[4]=c2;
+	addx	c_1,%g0,c_1	!=
+
+	umul	a_0,a_5,t_1	!sqr_add_c2(a,5,0,c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1	!=
+	addx	%g0,%g0,c_2
+	addcc	c_3,t_1,c_3
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2	!=
+	umul	a_1,a_4,t_1	!sqr_add_c2(a,4,1,c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1	!=
+	addx	c_2,%g0,c_2
+	addcc	c_3,t_1,c_3
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2	!=
+	ld	ap(6),a_6
+	umul	a_2,a_3,t_1	!sqr_add_c2(a,3,2,c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2		!=
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2
+	addcc	c_3,t_1,c_3
+	addxcc	c_1,t_2,c_1	!=
+	addx	c_2,%g0,c_2
+	st	c_3,rp(5)	!r[5]=c3;
+
+	umul	a_6,a_0,t_1	!sqr_add_c2(a,6,0,c1,c2,c3);
+	addcc	c_1,t_1,c_1	!=
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	%g0,%g0,c_3
+	addcc	c_1,t_1,c_1	!=
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3
+	umul	a_5,a_1,t_1	!sqr_add_c2(a,5,1,c1,c2,c3);
+	addcc	c_1,t_1,c_1	!=
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3
+	addcc	c_1,t_1,c_1	!=
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3
+	umul	a_4,a_2,t_1	!sqr_add_c2(a,4,2,c1,c2,c3);
+	addcc	c_1,t_1,c_1	!=
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3
+	addcc	c_1,t_1,c_1	!=
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3
+	ld	ap(7),a_7
+	umul	a_3,a_3,t_1	!=!sqr_add_c(a,3,c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3	!=
+	st	c_1,rp(6)	!r[6]=c1;
+
+	umul	a_0,a_7,t_1	!sqr_add_c2(a,7,0,c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	%g0,%g0,c_1
+	addcc	c_2,t_1,c_2
+	addxcc	c_3,t_2,c_3	!=
+	addx	c_1,%g0,c_1
+	umul	a_1,a_6,t_1	!sqr_add_c2(a,6,1,c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1
+	addcc	c_2,t_1,c_2
+	addxcc	c_3,t_2,c_3	!=
+	addx	c_1,%g0,c_1
+	umul	a_2,a_5,t_1	!sqr_add_c2(a,5,2,c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1
+	addcc	c_2,t_1,c_2
+	addxcc	c_3,t_2,c_3	!=
+	addx	c_1,%g0,c_1
+	umul	a_3,a_4,t_1	!sqr_add_c2(a,4,3,c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1
+	addcc	c_2,t_1,c_2
+	addxcc	c_3,t_2,c_3	!=
+	addx	c_1,%g0,c_1
+	st	c_2,rp(7)	!r[7]=c2;
+
+	umul	a_7,a_1,t_1	!sqr_add_c2(a,7,1,c3,c1,c2);
+	addcc	c_3,t_1,c_3	!=
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	addx	%g0,%g0,c_2
+	addcc	c_3,t_1,c_3	!=
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2
+	umul	a_6,a_2,t_1	!sqr_add_c2(a,6,2,c3,c1,c2);
+	addcc	c_3,t_1,c_3	!=
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2
+	addcc	c_3,t_1,c_3	!=
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2
+	umul	a_5,a_3,t_1	!sqr_add_c2(a,5,3,c3,c1,c2);
+	addcc	c_3,t_1,c_3	!=
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2
+	addcc	c_3,t_1,c_3	!=
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2
+	umul	a_4,a_4,t_1	!sqr_add_c(a,4,c3,c1,c2);
+	addcc	c_3,t_1,c_3	!=
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	st	c_3,rp(8)	!r[8]=c3;
+	addx	c_2,%g0,c_2	!=
+
+	umul	a_2,a_7,t_1	!sqr_add_c2(a,7,2,c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2	!=
+	addx	%g0,%g0,c_3
+	addcc	c_1,t_1,c_1
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3	!=
+	umul	a_3,a_6,t_1	!sqr_add_c2(a,6,3,c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2	!=
+	addx	c_3,%g0,c_3
+	addcc	c_1,t_1,c_1
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3	!=
+	umul	a_4,a_5,t_1	!sqr_add_c2(a,5,4,c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2	!=
+	addx	c_3,%g0,c_3
+	addcc	c_1,t_1,c_1
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3	!=
+	st	c_1,rp(9)	!r[9]=c1;
+
+	umul	a_7,a_3,t_1	!sqr_add_c2(a,7,3,c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	%g0,%g0,c_1
+	addcc	c_2,t_1,c_2
+	addxcc	c_3,t_2,c_3	!=
+	addx	c_1,%g0,c_1
+	umul	a_6,a_4,t_1	!sqr_add_c2(a,6,4,c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1
+	addcc	c_2,t_1,c_2
+	addxcc	c_3,t_2,c_3	!=
+	addx	c_1,%g0,c_1
+	umul	a_5,a_5,t_1	!sqr_add_c(a,5,c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1
+	st	c_2,rp(10)	!r[10]=c2;
+
+	umul	a_4,a_7,t_1	!=!sqr_add_c2(a,7,4,c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	addx	%g0,%g0,c_2	!=
+	addcc	c_3,t_1,c_3
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2
+	umul	a_5,a_6,t_1	!=!sqr_add_c2(a,6,5,c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	addx	c_2,%g0,c_2	!=
+	addcc	c_3,t_1,c_3
+	addxcc	c_1,t_2,c_1
+	st	c_3,rp(11)	!r[11]=c3;
+	addx	c_2,%g0,c_2	!=
+
+	umul	a_7,a_5,t_1	!sqr_add_c2(a,7,5,c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2	!=
+	addx	%g0,%g0,c_3
+	addcc	c_1,t_1,c_1
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3	!=
+	umul	a_6,a_6,t_1	!sqr_add_c(a,6,c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2	!=
+	addx	c_3,%g0,c_3
+	st	c_1,rp(12)	!r[12]=c1;
+
+	umul	a_6,a_7,t_1	!sqr_add_c2(a,7,6,c2,c3,c1);
+	addcc	c_2,t_1,c_2	!=
+	rd	%y,t_2
+	addxcc	c_3,t_2,c_3
+	addx	%g0,%g0,c_1
+	addcc	c_2,t_1,c_2	!=
+	addxcc	c_3,t_2,c_3
+	st	c_2,rp(13)	!r[13]=c2;
+	addx	c_1,%g0,c_1	!=
+
+	umul	a_7,a_7,t_1	!sqr_add_c(a,7,c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1	!=
+	st	c_3,rp(14)	!r[14]=c3;
+	st	c_1,rp(15)	!r[15]=c1;
+
+	ret
+	restore	%g0,%g0,%o0
+
+.type	bn_sqr_comba8,#function
+.size	bn_sqr_comba8,(.-bn_sqr_comba8)
+
+.align	32
+
+.global bn_sqr_comba4
+/*
+ * void bn_sqr_comba4(r,a)
+ * BN_ULONG *r,*a;
+ */
+bn_sqr_comba4:
+	save	%sp,FRAME_SIZE,%sp
+	ld	ap(0),a_0
+	umul	a_0,a_0,c_1	!sqr_add_c(a,0,c1,c2,c3);
+	ld	ap(1),a_1	!=
+	rd	%y,c_2
+	st	c_1,rp(0)	!r[0]=c1;
+
+	ld	ap(2),a_2
+	umul	a_0,a_1,t_1	!=!sqr_add_c2(a,1,0,c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2
+	addxcc	%g0,t_2,c_3
+	addx	%g0,%g0,c_1	!=
+	addcc	c_2,t_1,c_2
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1	!=
+	st	c_2,rp(1)	!r[1]=c2;
+
+	umul	a_2,a_0,t_1	!sqr_add_c2(a,2,0,c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2		!=
+	addxcc	c_1,t_2,c_1
+	addx	%g0,%g0,c_2
+	addcc	c_3,t_1,c_3
+	addxcc	c_1,t_2,c_1	!=
+	addx	c_2,%g0,c_2
+	ld	ap(3),a_3
+	umul	a_1,a_1,t_1	!sqr_add_c(a,1,c3,c1,c2);
+	addcc	c_3,t_1,c_3	!=
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	st	c_3,rp(2)	!r[2]=c3;
+	addx	c_2,%g0,c_2	!=
+
+	umul	a_0,a_3,t_1	!sqr_add_c2(a,3,0,c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2	!=
+	addx	%g0,%g0,c_3
+	addcc	c_1,t_1,c_1
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3	!=
+	umul	a_1,a_2,t_1	!sqr_add_c2(a,2,1,c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2	!=
+	addx	c_3,%g0,c_3
+	addcc	c_1,t_1,c_1
+	addxcc	c_2,t_2,c_2
+	addx	c_3,%g0,c_3	!=
+	st	c_1,rp(3)	!r[3]=c1;
+
+	umul	a_3,a_1,t_1	!sqr_add_c2(a,3,1,c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	%g0,%g0,c_1
+	addcc	c_2,t_1,c_2
+	addxcc	c_3,t_2,c_3	!=
+	addx	c_1,%g0,c_1
+	umul	a_2,a_2,t_1	!sqr_add_c(a,2,c2,c3,c1);
+	addcc	c_2,t_1,c_2
+	rd	%y,t_2		!=
+	addxcc	c_3,t_2,c_3
+	addx	c_1,%g0,c_1
+	st	c_2,rp(4)	!r[4]=c2;
+
+	umul	a_2,a_3,t_1	!=!sqr_add_c2(a,3,2,c3,c1,c2);
+	addcc	c_3,t_1,c_3
+	rd	%y,t_2
+	addxcc	c_1,t_2,c_1
+	addx	%g0,%g0,c_2	!=
+	addcc	c_3,t_1,c_3
+	addxcc	c_1,t_2,c_1
+	st	c_3,rp(5)	!r[5]=c3;
+	addx	c_2,%g0,c_2	!=
+
+	umul	a_3,a_3,t_1	!sqr_add_c(a,3,c1,c2,c3);
+	addcc	c_1,t_1,c_1
+	rd	%y,t_2
+	addxcc	c_2,t_2,c_2	!=
+	st	c_1,rp(6)	!r[6]=c1;
+	st	c_2,rp(7)	!r[7]=c2;
+	
+	ret
+	restore	%g0,%g0,%o0
+
+.type	bn_sqr_comba4,#function
+.size	bn_sqr_comba4,(.-bn_sqr_comba4)
+
+.align	32
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv8plus.S b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv8plus.S
new file mode 100644
index 000000000..d520ffa7c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv8plus.S
@@ -0,0 +1,1558 @@
+.ident	"sparcv8plus.s, Version 1.4"
+.ident	"SPARC v9 ISA artwork by Andy Polyakov <appro@openssl.org>"
+
+/*
+ * ====================================================================
+ * Copyright 1999-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ * ====================================================================
+ */
+
+/*
+ * This is my modest contribution to OpenSSL project (see
+ * http://www.openssl.org/ for more information about it) and is
+ * a drop-in UltraSPARC ISA replacement for crypto/bn/bn_asm.c
+ * module. For updates see http://fy.chalmers.se/~appro/hpe/.
+ *
+ * Questions-n-answers.
+ *
+ * Q. How to compile?
+ * A. With SC4.x/SC5.x:
+ *
+ *	cc -xarch=v8plus -c bn_asm.sparc.v8plus.S -o bn_asm.o
+ *
+ *    and with gcc:
+ *
+ *	gcc -mcpu=ultrasparc -c bn_asm.sparc.v8plus.S -o bn_asm.o
+ *
+ *    or if above fails (it does if you have gas installed):
+ *
+ *	gcc -E bn_asm.sparc.v8plus.S | as -xarch=v8plus /dev/fd/0 -o bn_asm.o
+ *
+ *    Quick-n-dirty way to fuse the module into the library.
+ *    Provided that the library is already configured and built
+ *    (in 0.9.2 case with no-asm option):
+ *
+ *	# cd crypto/bn
+ *	# cp /some/place/bn_asm.sparc.v8plus.S .
+ *	# cc -xarch=v8plus -c bn_asm.sparc.v8plus.S -o bn_asm.o
+ *	# make
+ *	# cd ../..
+ *	# make; make test
+ *
+ *    Quick-n-dirty way to get rid of it:
+ *
+ *	# cd crypto/bn
+ *	# touch bn_asm.c
+ *	# make
+ *	# cd ../..
+ *	# make; make test
+ *
+ * Q. V8plus architecture? What kind of beast is that?
+ * A. Well, it's rather a programming model than an architecture...
+ *    It's actually v9-compliant, i.e. *any* UltraSPARC, CPU under
+ *    special conditions, namely when kernel doesn't preserve upper
+ *    32 bits of otherwise 64-bit registers during a context switch.
+ *
+ * Q. Why just UltraSPARC? What about SuperSPARC?
+ * A. Original release did target UltraSPARC only. Now SuperSPARC
+ *    version is provided along. Both version share bn_*comba[48]
+ *    implementations (see comment later in code for explanation).
+ *    But what's so special about this UltraSPARC implementation?
+ *    Why didn't I let compiler do the job? Trouble is that most of
+ *    available compilers (well, SC5.0 is the only exception) don't
+ *    attempt to take advantage of UltraSPARC's 64-bitness under
+ *    32-bit kernels even though it's perfectly possible (see next
+ *    question).
+ *
+ * Q. 64-bit registers under 32-bit kernels? Didn't you just say it
+ *    doesn't work?
+ * A. You can't address *all* registers as 64-bit wide:-( The catch is
+ *    that you actually may rely upon %o0-%o5 and %g1-%g4 being fully
+ *    preserved if you're in a leaf function, i.e. such never calling
+ *    any other functions. All functions in this module are leaf and
+ *    10 registers is a handful. And as a matter of fact none-"comba"
+ *    routines don't require even that much and I could even afford to
+ *    not allocate own stack frame for 'em:-)
+ *
+ * Q. What about 64-bit kernels?
+ * A. What about 'em? Just kidding:-) Pure 64-bit version is currently
+ *    under evaluation and development...
+ *
+ * Q. What about shared libraries?
+ * A. What about 'em? Kidding again:-) Code does *not* contain any
+ *    code position dependencies and it's safe to include it into
+ *    shared library as is.
+ *
+ * Q. How much faster does it go?
+ * A. Do you have a good benchmark? In either case below is what I
+ *    experience with crypto/bn/expspeed.c test program:
+ *
+ *	v8plus module on U10/300MHz against bn_asm.c compiled with:
+ *
+ *	cc-5.0 -xarch=v8plus -xO5 -xdepend	+7-12%
+ *	cc-4.2 -xarch=v8plus -xO5 -xdepend	+25-35%
+ *	egcs-1.1.2 -mcpu=ultrasparc -O3		+35-45%
+ *
+ *	v8 module on SS10/60MHz against bn_asm.c compiled with:
+ *
+ *	cc-5.0 -xarch=v8 -xO5 -xdepend		+7-10%
+ *	cc-4.2 -xarch=v8 -xO5 -xdepend		+10%
+ *	egcs-1.1.2 -mv8 -O3			+35-45%
+ *
+ *    As you can see it's damn hard to beat the new Sun C compiler
+ *    and it's in first place GNU C users who will appreciate this
+ *    assembler implementation:-)	
+ */
+
+/*
+ * Revision history.
+ *
+ * 1.0	- initial release;
+ * 1.1	- new loop unrolling model(*);
+ *	- some more fine tuning;
+ * 1.2	- made gas friendly;
+ *	- updates to documentation concerning v9;
+ *	- new performance comparison matrix;
+ * 1.3	- fixed problem with /usr/ccs/lib/cpp;
+ * 1.4	- native V9 bn_*_comba[48] implementation (15% more efficient)
+ *	  resulting in slight overall performance kick;
+ *	- some retunes;
+ *	- support for GNU as added;
+ *
+ * (*)	Originally unrolled loop looked like this:
+ *	    for (;;) {
+ *		op(p+0); if (--n==0) break;
+ *		op(p+1); if (--n==0) break;
+ *		op(p+2); if (--n==0) break;
+ *		op(p+3); if (--n==0) break;
+ *		p+=4;
+ *	    }
+ *	I unroll according to following:
+ *	    while (n&~3) {
+ *		op(p+0); op(p+1); op(p+2); op(p+3);
+ *		p+=4; n=-4;
+ *	    }
+ *	    if (n) {
+ *		op(p+0); if (--n==0) return;
+ *		op(p+2); if (--n==0) return;
+ *		op(p+3); return;
+ *	    }
+ */
+
+#if defined(__SUNPRO_C) && defined(__sparcv9)
+  /* They've said -xarch=v9 at command line */
+  .register	%g2,#scratch
+  .register	%g3,#scratch
+# define	FRAME_SIZE	-192
+#elif defined(__GNUC__) && defined(__arch64__)
+  /* They've said -m64 at command line */
+  .register	%g2,#scratch
+  .register	%g3,#scratch
+# define	FRAME_SIZE	-192
+#else
+# define	FRAME_SIZE	-96
+#endif
+/*
+ * GNU assembler can't stand stuw:-(
+ */
+#define stuw st
+
+.section	".text",#alloc,#execinstr
+.file		"bn_asm.sparc.v8plus.S"
+
+.align	32
+
+.global bn_mul_add_words
+/*
+ * BN_ULONG bn_mul_add_words(rp,ap,num,w)
+ * BN_ULONG *rp,*ap;
+ * int num;
+ * BN_ULONG w;
+ */
+bn_mul_add_words:
+	sra	%o2,%g0,%o2	! signx %o2
+	brgz,a	%o2,.L_bn_mul_add_words_proceed
+	lduw	[%o1],%g2
+	retl
+	clr	%o0
+	nop
+	nop
+	nop
+
+.L_bn_mul_add_words_proceed:
+	srl	%o3,%g0,%o3	! clruw	%o3
+	andcc	%o2,-4,%g0
+	bz,pn	%icc,.L_bn_mul_add_words_tail
+	clr	%o5
+
+.L_bn_mul_add_words_loop:	! wow! 32 aligned!
+	lduw	[%o0],%g1
+	lduw	[%o1+4],%g3
+	mulx	%o3,%g2,%g2
+	add	%g1,%o5,%o4
+	nop
+	add	%o4,%g2,%o4
+	stuw	%o4,[%o0]
+	srlx	%o4,32,%o5
+
+	lduw	[%o0+4],%g1
+	lduw	[%o1+8],%g2
+	mulx	%o3,%g3,%g3
+	add	%g1,%o5,%o4
+	dec	4,%o2
+	add	%o4,%g3,%o4
+	stuw	%o4,[%o0+4]
+	srlx	%o4,32,%o5
+
+	lduw	[%o0+8],%g1
+	lduw	[%o1+12],%g3
+	mulx	%o3,%g2,%g2
+	add	%g1,%o5,%o4
+	inc	16,%o1
+	add	%o4,%g2,%o4
+	stuw	%o4,[%o0+8]
+	srlx	%o4,32,%o5
+
+	lduw	[%o0+12],%g1
+	mulx	%o3,%g3,%g3
+	add	%g1,%o5,%o4
+	inc	16,%o0
+	add	%o4,%g3,%o4
+	andcc	%o2,-4,%g0
+	stuw	%o4,[%o0-4]
+	srlx	%o4,32,%o5
+	bnz,a,pt	%icc,.L_bn_mul_add_words_loop
+	lduw	[%o1],%g2
+
+	brnz,a,pn	%o2,.L_bn_mul_add_words_tail
+	lduw	[%o1],%g2
+.L_bn_mul_add_words_return:
+	retl
+	mov	%o5,%o0
+
+.L_bn_mul_add_words_tail:
+	lduw	[%o0],%g1
+	mulx	%o3,%g2,%g2
+	add	%g1,%o5,%o4
+	dec	%o2
+	add	%o4,%g2,%o4
+	srlx	%o4,32,%o5
+	brz,pt	%o2,.L_bn_mul_add_words_return
+	stuw	%o4,[%o0]
+
+	lduw	[%o1+4],%g2
+	lduw	[%o0+4],%g1
+	mulx	%o3,%g2,%g2
+	add	%g1,%o5,%o4
+	dec	%o2
+	add	%o4,%g2,%o4
+	srlx	%o4,32,%o5
+	brz,pt	%o2,.L_bn_mul_add_words_return
+	stuw	%o4,[%o0+4]
+
+	lduw	[%o1+8],%g2
+	lduw	[%o0+8],%g1
+	mulx	%o3,%g2,%g2
+	add	%g1,%o5,%o4
+	add	%o4,%g2,%o4
+	stuw	%o4,[%o0+8]
+	retl
+	srlx	%o4,32,%o0
+
+.type	bn_mul_add_words,#function
+.size	bn_mul_add_words,(.-bn_mul_add_words)
+
+.align	32
+
+.global bn_mul_words
+/*
+ * BN_ULONG bn_mul_words(rp,ap,num,w)
+ * BN_ULONG *rp,*ap;
+ * int num;
+ * BN_ULONG w;
+ */
+bn_mul_words:
+	sra	%o2,%g0,%o2	! signx %o2
+	brgz,a	%o2,.L_bn_mul_words_proceed
+	lduw	[%o1],%g2
+	retl
+	clr	%o0
+	nop
+	nop
+	nop
+
+.L_bn_mul_words_proceed:
+	srl	%o3,%g0,%o3	! clruw	%o3
+	andcc	%o2,-4,%g0
+	bz,pn	%icc,.L_bn_mul_words_tail
+	clr	%o5
+
+.L_bn_mul_words_loop:		! wow! 32 aligned!
+	lduw	[%o1+4],%g3
+	mulx	%o3,%g2,%g2
+	add	%g2,%o5,%o4
+	nop
+	stuw	%o4,[%o0]
+	srlx	%o4,32,%o5
+
+	lduw	[%o1+8],%g2
+	mulx	%o3,%g3,%g3
+	add	%g3,%o5,%o4
+	dec	4,%o2
+	stuw	%o4,[%o0+4]
+	srlx	%o4,32,%o5
+
+	lduw	[%o1+12],%g3
+	mulx	%o3,%g2,%g2
+	add	%g2,%o5,%o4
+	inc	16,%o1
+	stuw	%o4,[%o0+8]
+	srlx	%o4,32,%o5
+
+	mulx	%o3,%g3,%g3
+	add	%g3,%o5,%o4
+	inc	16,%o0
+	stuw	%o4,[%o0-4]
+	srlx	%o4,32,%o5
+	andcc	%o2,-4,%g0
+	bnz,a,pt	%icc,.L_bn_mul_words_loop
+	lduw	[%o1],%g2
+	nop
+	nop
+
+	brnz,a,pn	%o2,.L_bn_mul_words_tail
+	lduw	[%o1],%g2
+.L_bn_mul_words_return:
+	retl
+	mov	%o5,%o0
+
+.L_bn_mul_words_tail:
+	mulx	%o3,%g2,%g2
+	add	%g2,%o5,%o4
+	dec	%o2
+	srlx	%o4,32,%o5
+	brz,pt	%o2,.L_bn_mul_words_return
+	stuw	%o4,[%o0]
+
+	lduw	[%o1+4],%g2
+	mulx	%o3,%g2,%g2
+	add	%g2,%o5,%o4
+	dec	%o2
+	srlx	%o4,32,%o5
+	brz,pt	%o2,.L_bn_mul_words_return
+	stuw	%o4,[%o0+4]
+
+	lduw	[%o1+8],%g2
+	mulx	%o3,%g2,%g2
+	add	%g2,%o5,%o4
+	stuw	%o4,[%o0+8]
+	retl
+	srlx	%o4,32,%o0
+
+.type	bn_mul_words,#function
+.size	bn_mul_words,(.-bn_mul_words)
+
+.align  32
+.global	bn_sqr_words
+/*
+ * void bn_sqr_words(r,a,n)
+ * BN_ULONG *r,*a;
+ * int n;
+ */
+bn_sqr_words:
+	sra	%o2,%g0,%o2	! signx %o2
+	brgz,a	%o2,.L_bn_sqr_words_proceed
+	lduw	[%o1],%g2
+	retl
+	clr	%o0
+	nop
+	nop
+	nop
+
+.L_bn_sqr_words_proceed:
+	andcc	%o2,-4,%g0
+	nop
+	bz,pn	%icc,.L_bn_sqr_words_tail
+	nop
+
+.L_bn_sqr_words_loop:		! wow! 32 aligned!
+	lduw	[%o1+4],%g3
+	mulx	%g2,%g2,%o4
+	stuw	%o4,[%o0]
+	srlx	%o4,32,%o5
+	stuw	%o5,[%o0+4]
+	nop
+
+	lduw	[%o1+8],%g2
+	mulx	%g3,%g3,%o4
+	dec	4,%o2
+	stuw	%o4,[%o0+8]
+	srlx	%o4,32,%o5
+	stuw	%o5,[%o0+12]
+
+	lduw	[%o1+12],%g3
+	mulx	%g2,%g2,%o4
+	srlx	%o4,32,%o5
+	stuw	%o4,[%o0+16]
+	inc	16,%o1
+	stuw	%o5,[%o0+20]
+
+	mulx	%g3,%g3,%o4
+	inc	32,%o0
+	stuw	%o4,[%o0-8]
+	srlx	%o4,32,%o5
+	andcc	%o2,-4,%g2
+	stuw	%o5,[%o0-4]
+	bnz,a,pt	%icc,.L_bn_sqr_words_loop
+	lduw	[%o1],%g2
+	nop
+
+	brnz,a,pn	%o2,.L_bn_sqr_words_tail
+	lduw	[%o1],%g2
+.L_bn_sqr_words_return:
+	retl
+	clr	%o0
+
+.L_bn_sqr_words_tail:
+	mulx	%g2,%g2,%o4
+	dec	%o2
+	stuw	%o4,[%o0]
+	srlx	%o4,32,%o5
+	brz,pt	%o2,.L_bn_sqr_words_return
+	stuw	%o5,[%o0+4]
+
+	lduw	[%o1+4],%g2
+	mulx	%g2,%g2,%o4
+	dec	%o2
+	stuw	%o4,[%o0+8]
+	srlx	%o4,32,%o5
+	brz,pt	%o2,.L_bn_sqr_words_return
+	stuw	%o5,[%o0+12]
+
+	lduw	[%o1+8],%g2
+	mulx	%g2,%g2,%o4
+	srlx	%o4,32,%o5
+	stuw	%o4,[%o0+16]
+	stuw	%o5,[%o0+20]
+	retl
+	clr	%o0
+
+.type	bn_sqr_words,#function
+.size	bn_sqr_words,(.-bn_sqr_words)
+
+.align	32
+.global bn_div_words
+/*
+ * BN_ULONG bn_div_words(h,l,d)
+ * BN_ULONG h,l,d;
+ */
+bn_div_words:
+	sllx	%o0,32,%o0
+	or	%o0,%o1,%o0
+	udivx	%o0,%o2,%o0
+	retl
+	srl	%o0,%g0,%o0	! clruw	%o0
+
+.type	bn_div_words,#function
+.size	bn_div_words,(.-bn_div_words)
+
+.align	32
+
+.global bn_add_words
+/*
+ * BN_ULONG bn_add_words(rp,ap,bp,n)
+ * BN_ULONG *rp,*ap,*bp;
+ * int n;
+ */
+bn_add_words:
+	sra	%o3,%g0,%o3	! signx %o3
+	brgz,a	%o3,.L_bn_add_words_proceed
+	lduw	[%o1],%o4
+	retl
+	clr	%o0
+
+.L_bn_add_words_proceed:
+	andcc	%o3,-4,%g0
+	bz,pn	%icc,.L_bn_add_words_tail
+	addcc	%g0,0,%g0	! clear carry flag
+
+.L_bn_add_words_loop:		! wow! 32 aligned!
+	dec	4,%o3
+	lduw	[%o2],%o5
+	lduw	[%o1+4],%g1
+	lduw	[%o2+4],%g2
+	lduw	[%o1+8],%g3
+	lduw	[%o2+8],%g4
+	addccc	%o5,%o4,%o5
+	stuw	%o5,[%o0]
+
+	lduw	[%o1+12],%o4
+	lduw	[%o2+12],%o5
+	inc	16,%o1
+	addccc	%g1,%g2,%g1
+	stuw	%g1,[%o0+4]
+	
+	inc	16,%o2
+	addccc	%g3,%g4,%g3
+	stuw	%g3,[%o0+8]
+
+	inc	16,%o0
+	addccc	%o5,%o4,%o5
+	stuw	%o5,[%o0-4]
+	and	%o3,-4,%g1
+	brnz,a,pt	%g1,.L_bn_add_words_loop
+	lduw	[%o1],%o4
+
+	brnz,a,pn	%o3,.L_bn_add_words_tail
+	lduw	[%o1],%o4
+.L_bn_add_words_return:
+	clr	%o0
+	retl
+	movcs	%icc,1,%o0
+	nop
+
+.L_bn_add_words_tail:
+	lduw	[%o2],%o5
+	dec	%o3
+	addccc	%o5,%o4,%o5
+	brz,pt	%o3,.L_bn_add_words_return
+	stuw	%o5,[%o0]
+
+	lduw	[%o1+4],%o4
+	lduw	[%o2+4],%o5
+	dec	%o3
+	addccc	%o5,%o4,%o5
+	brz,pt	%o3,.L_bn_add_words_return
+	stuw	%o5,[%o0+4]
+
+	lduw	[%o1+8],%o4
+	lduw	[%o2+8],%o5
+	addccc	%o5,%o4,%o5
+	stuw	%o5,[%o0+8]
+	clr	%o0
+	retl
+	movcs	%icc,1,%o0
+
+.type	bn_add_words,#function
+.size	bn_add_words,(.-bn_add_words)
+
+.global bn_sub_words
+/*
+ * BN_ULONG bn_sub_words(rp,ap,bp,n)
+ * BN_ULONG *rp,*ap,*bp;
+ * int n;
+ */
+bn_sub_words:
+	sra	%o3,%g0,%o3	! signx %o3
+	brgz,a	%o3,.L_bn_sub_words_proceed
+	lduw	[%o1],%o4
+	retl
+	clr	%o0
+
+.L_bn_sub_words_proceed:
+	andcc	%o3,-4,%g0
+	bz,pn	%icc,.L_bn_sub_words_tail
+	addcc	%g0,0,%g0	! clear carry flag
+
+.L_bn_sub_words_loop:		! wow! 32 aligned!
+	dec	4,%o3
+	lduw	[%o2],%o5
+	lduw	[%o1+4],%g1
+	lduw	[%o2+4],%g2
+	lduw	[%o1+8],%g3
+	lduw	[%o2+8],%g4
+	subccc	%o4,%o5,%o5
+	stuw	%o5,[%o0]
+
+	lduw	[%o1+12],%o4
+	lduw	[%o2+12],%o5
+	inc	16,%o1
+	subccc	%g1,%g2,%g2
+	stuw	%g2,[%o0+4]
+
+	inc	16,%o2
+	subccc	%g3,%g4,%g4
+	stuw	%g4,[%o0+8]
+
+	inc	16,%o0
+	subccc	%o4,%o5,%o5
+	stuw	%o5,[%o0-4]
+	and	%o3,-4,%g1
+	brnz,a,pt	%g1,.L_bn_sub_words_loop
+	lduw	[%o1],%o4
+
+	brnz,a,pn	%o3,.L_bn_sub_words_tail
+	lduw	[%o1],%o4
+.L_bn_sub_words_return:
+	clr	%o0
+	retl
+	movcs	%icc,1,%o0
+	nop
+
+.L_bn_sub_words_tail:		! wow! 32 aligned!
+	lduw	[%o2],%o5
+	dec	%o3
+	subccc	%o4,%o5,%o5
+	brz,pt	%o3,.L_bn_sub_words_return
+	stuw	%o5,[%o0]
+
+	lduw	[%o1+4],%o4
+	lduw	[%o2+4],%o5
+	dec	%o3
+	subccc	%o4,%o5,%o5
+	brz,pt	%o3,.L_bn_sub_words_return
+	stuw	%o5,[%o0+4]
+
+	lduw	[%o1+8],%o4
+	lduw	[%o2+8],%o5
+	subccc	%o4,%o5,%o5
+	stuw	%o5,[%o0+8]
+	clr	%o0
+	retl
+	movcs	%icc,1,%o0
+
+.type	bn_sub_words,#function
+.size	bn_sub_words,(.-bn_sub_words)
+
+/*
+ * Code below depends on the fact that upper parts of the %l0-%l7
+ * and %i0-%i7 are zeroed by kernel after context switch. In
+ * previous versions this comment stated that "the trouble is that
+ * it's not feasible to implement the mumbo-jumbo in less V9
+ * instructions:-(" which apparently isn't true thanks to
+ * 'bcs,a %xcc,.+8; inc %rd' pair. But the performance improvement
+ * results not from the shorter code, but from elimination of
+ * multicycle none-pairable 'rd %y,%rd' instructions.
+ *
+ *							Andy.
+ */
+
+/*
+ * Here is register usage map for *all* routines below.
+ */
+#define t_1	%o0
+#define	t_2	%o1
+#define c_12	%o2
+#define c_3	%o3
+
+#define ap(I)	[%i1+4*I]
+#define bp(I)	[%i2+4*I]
+#define rp(I)	[%i0+4*I]
+
+#define	a_0	%l0
+#define	a_1	%l1
+#define	a_2	%l2
+#define	a_3	%l3
+#define	a_4	%l4
+#define	a_5	%l5
+#define	a_6	%l6
+#define	a_7	%l7
+
+#define	b_0	%i3
+#define	b_1	%i4
+#define	b_2	%i5
+#define	b_3	%o4
+#define	b_4	%o5
+#define	b_5	%o7
+#define	b_6	%g1
+#define	b_7	%g4
+
+.align	32
+.global bn_mul_comba8
+/*
+ * void bn_mul_comba8(r,a,b)
+ * BN_ULONG *r,*a,*b;
+ */
+bn_mul_comba8:
+	save	%sp,FRAME_SIZE,%sp
+	mov	1,t_2
+	lduw	ap(0),a_0
+	sllx	t_2,32,t_2
+	lduw	bp(0),b_0	!=
+	lduw	bp(1),b_1
+	mulx	a_0,b_0,t_1	!mul_add_c(a[0],b[0],c1,c2,c3);
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(0)	!=!r[0]=c1;
+
+	lduw	ap(1),a_1
+	mulx	a_0,b_1,t_1	!mul_add_c(a[0],b[1],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	clr	c_3		!=
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	lduw	ap(2),a_2
+	mulx	a_1,b_0,t_1	!=!mul_add_c(a[1],b[0],c2,c3,c1);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12	!=
+	stuw	t_1,rp(1)	!r[1]=c2;
+	or	c_12,c_3,c_12
+
+	mulx	a_2,b_0,t_1	!mul_add_c(a[2],b[0],c3,c1,c2);
+	addcc	c_12,t_1,c_12	!=
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	lduw	bp(2),b_2	!=
+	mulx	a_1,b_1,t_1	!mul_add_c(a[1],b[1],c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3	!=
+	lduw	bp(3),b_3
+	mulx	a_0,b_2,t_1	!mul_add_c(a[0],b[2],c3,c1,c2);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(2)	!r[2]=c3;
+	or	c_12,c_3,c_12	!=
+
+	mulx	a_0,b_3,t_1	!mul_add_c(a[0],b[3],c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_1,b_2,t_1	!=!mul_add_c(a[1],b[2],c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	lduw	ap(3),a_3
+	mulx	a_2,b_1,t_1	!mul_add_c(a[2],b[1],c1,c2,c3);
+	addcc	c_12,t_1,c_12	!=
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	lduw	ap(4),a_4
+	mulx	a_3,b_0,t_1	!=!mul_add_c(a[3],b[0],c1,c2,c3);!=
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12	!=
+	stuw	t_1,rp(3)	!r[3]=c1;
+	or	c_12,c_3,c_12
+
+	mulx	a_4,b_0,t_1	!mul_add_c(a[4],b[0],c2,c3,c1);
+	addcc	c_12,t_1,c_12	!=
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_3,b_1,t_1	!=!mul_add_c(a[3],b[1],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_2,b_2,t_1	!=!mul_add_c(a[2],b[2],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	lduw	bp(4),b_4	!=
+	mulx	a_1,b_3,t_1	!mul_add_c(a[1],b[3],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3	!=
+	lduw	bp(5),b_5
+	mulx	a_0,b_4,t_1	!mul_add_c(a[0],b[4],c2,c3,c1);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(4)	!r[4]=c2;
+	or	c_12,c_3,c_12	!=
+
+	mulx	a_0,b_5,t_1	!mul_add_c(a[0],b[5],c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_1,b_4,t_1	!mul_add_c(a[1],b[4],c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_2,b_3,t_1	!mul_add_c(a[2],b[3],c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_3,b_2,t_1	!mul_add_c(a[3],b[2],c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	lduw	ap(5),a_5
+	mulx	a_4,b_1,t_1	!mul_add_c(a[4],b[1],c3,c1,c2);
+	addcc	c_12,t_1,c_12	!=
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	lduw	ap(6),a_6
+	mulx	a_5,b_0,t_1	!=!mul_add_c(a[5],b[0],c3,c1,c2);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12	!=
+	stuw	t_1,rp(5)	!r[5]=c3;
+	or	c_12,c_3,c_12
+
+	mulx	a_6,b_0,t_1	!mul_add_c(a[6],b[0],c1,c2,c3);
+	addcc	c_12,t_1,c_12	!=
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_5,b_1,t_1	!=!mul_add_c(a[5],b[1],c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_4,b_2,t_1	!=!mul_add_c(a[4],b[2],c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_3,b_3,t_1	!=!mul_add_c(a[3],b[3],c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_2,b_4,t_1	!=!mul_add_c(a[2],b[4],c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	lduw	bp(6),b_6	!=
+	mulx	a_1,b_5,t_1	!mul_add_c(a[1],b[5],c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3	!=
+	lduw	bp(7),b_7
+	mulx	a_0,b_6,t_1	!mul_add_c(a[0],b[6],c1,c2,c3);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(6)	!r[6]=c1;
+	or	c_12,c_3,c_12	!=
+
+	mulx	a_0,b_7,t_1	!mul_add_c(a[0],b[7],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_1,b_6,t_1	!mul_add_c(a[1],b[6],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_2,b_5,t_1	!mul_add_c(a[2],b[5],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_3,b_4,t_1	!mul_add_c(a[3],b[4],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_4,b_3,t_1	!mul_add_c(a[4],b[3],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_5,b_2,t_1	!mul_add_c(a[5],b[2],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	lduw	ap(7),a_7
+	mulx	a_6,b_1,t_1	!=!mul_add_c(a[6],b[1],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_7,b_0,t_1	!=!mul_add_c(a[7],b[0],c2,c3,c1);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12	!=
+	stuw	t_1,rp(7)	!r[7]=c2;
+	or	c_12,c_3,c_12
+
+	mulx	a_7,b_1,t_1	!=!mul_add_c(a[7],b[1],c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3	!=
+	mulx	a_6,b_2,t_1	!mul_add_c(a[6],b[2],c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3	!=
+	mulx	a_5,b_3,t_1	!mul_add_c(a[5],b[3],c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3	!=
+	mulx	a_4,b_4,t_1	!mul_add_c(a[4],b[4],c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3	!=
+	mulx	a_3,b_5,t_1	!mul_add_c(a[3],b[5],c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3	!=
+	mulx	a_2,b_6,t_1	!mul_add_c(a[2],b[6],c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3	!=
+	mulx	a_1,b_7,t_1	!mul_add_c(a[1],b[7],c3,c1,c2);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3	!=
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(8)	!r[8]=c3;
+	or	c_12,c_3,c_12
+
+	mulx	a_2,b_7,t_1	!=!mul_add_c(a[2],b[7],c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3	!=
+	mulx	a_3,b_6,t_1	!mul_add_c(a[3],b[6],c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_4,b_5,t_1	!mul_add_c(a[4],b[5],c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_5,b_4,t_1	!mul_add_c(a[5],b[4],c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_6,b_3,t_1	!mul_add_c(a[6],b[3],c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_7,b_2,t_1	!mul_add_c(a[7],b[2],c1,c2,c3);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(9)	!r[9]=c1;
+	or	c_12,c_3,c_12	!=
+
+	mulx	a_7,b_3,t_1	!mul_add_c(a[7],b[3],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_6,b_4,t_1	!mul_add_c(a[6],b[4],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_5,b_5,t_1	!mul_add_c(a[5],b[5],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_4,b_6,t_1	!mul_add_c(a[4],b[6],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_3,b_7,t_1	!mul_add_c(a[3],b[7],c2,c3,c1);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(10)	!r[10]=c2;
+	or	c_12,c_3,c_12	!=
+
+	mulx	a_4,b_7,t_1	!mul_add_c(a[4],b[7],c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_5,b_6,t_1	!mul_add_c(a[5],b[6],c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_6,b_5,t_1	!mul_add_c(a[6],b[5],c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_7,b_4,t_1	!mul_add_c(a[7],b[4],c3,c1,c2);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(11)	!r[11]=c3;
+	or	c_12,c_3,c_12	!=
+
+	mulx	a_7,b_5,t_1	!mul_add_c(a[7],b[5],c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_6,b_6,t_1	!mul_add_c(a[6],b[6],c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_5,b_7,t_1	!mul_add_c(a[5],b[7],c1,c2,c3);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(12)	!r[12]=c1;
+	or	c_12,c_3,c_12	!=
+
+	mulx	a_6,b_7,t_1	!mul_add_c(a[6],b[7],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_7,b_6,t_1	!mul_add_c(a[7],b[6],c2,c3,c1);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	st	t_1,rp(13)	!r[13]=c2;
+	or	c_12,c_3,c_12	!=
+
+	mulx	a_7,b_7,t_1	!mul_add_c(a[7],b[7],c3,c1,c2);
+	addcc	c_12,t_1,t_1
+	srlx	t_1,32,c_12	!=
+	stuw	t_1,rp(14)	!r[14]=c3;
+	stuw	c_12,rp(15)	!r[15]=c1;
+
+	ret
+	restore	%g0,%g0,%o0	!=
+
+.type	bn_mul_comba8,#function
+.size	bn_mul_comba8,(.-bn_mul_comba8)
+
+.align	32
+
+.global bn_mul_comba4
+/*
+ * void bn_mul_comba4(r,a,b)
+ * BN_ULONG *r,*a,*b;
+ */
+bn_mul_comba4:
+	save	%sp,FRAME_SIZE,%sp
+	lduw	ap(0),a_0
+	mov	1,t_2
+	lduw	bp(0),b_0
+	sllx	t_2,32,t_2	!=
+	lduw	bp(1),b_1
+	mulx	a_0,b_0,t_1	!mul_add_c(a[0],b[0],c1,c2,c3);
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(0)	!=!r[0]=c1;
+
+	lduw	ap(1),a_1
+	mulx	a_0,b_1,t_1	!mul_add_c(a[0],b[1],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	clr	c_3		!=
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	lduw	ap(2),a_2
+	mulx	a_1,b_0,t_1	!=!mul_add_c(a[1],b[0],c2,c3,c1);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12	!=
+	stuw	t_1,rp(1)	!r[1]=c2;
+	or	c_12,c_3,c_12
+
+	mulx	a_2,b_0,t_1	!mul_add_c(a[2],b[0],c3,c1,c2);
+	addcc	c_12,t_1,c_12	!=
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	lduw	bp(2),b_2	!=
+	mulx	a_1,b_1,t_1	!mul_add_c(a[1],b[1],c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3	!=
+	lduw	bp(3),b_3
+	mulx	a_0,b_2,t_1	!mul_add_c(a[0],b[2],c3,c1,c2);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(2)	!r[2]=c3;
+	or	c_12,c_3,c_12	!=
+
+	mulx	a_0,b_3,t_1	!mul_add_c(a[0],b[3],c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	mulx	a_1,b_2,t_1	!mul_add_c(a[1],b[2],c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8	!=
+	add	c_3,t_2,c_3
+	lduw	ap(3),a_3
+	mulx	a_2,b_1,t_1	!mul_add_c(a[2],b[1],c1,c2,c3);
+	addcc	c_12,t_1,c_12	!=
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_3,b_0,t_1	!mul_add_c(a[3],b[0],c1,c2,c3);!=
+	addcc	c_12,t_1,t_1	!=
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(3)	!=!r[3]=c1;
+	or	c_12,c_3,c_12
+
+	mulx	a_3,b_1,t_1	!mul_add_c(a[3],b[1],c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	clr	c_3		!=
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_2,b_2,t_1	!mul_add_c(a[2],b[2],c2,c3,c1);
+	addcc	c_12,t_1,c_12	!=
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_1,b_3,t_1	!mul_add_c(a[1],b[3],c2,c3,c1);
+	addcc	c_12,t_1,t_1	!=
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(4)	!=!r[4]=c2;
+	or	c_12,c_3,c_12
+
+	mulx	a_2,b_3,t_1	!mul_add_c(a[2],b[3],c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	clr	c_3		!=
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_3,b_2,t_1	!mul_add_c(a[3],b[2],c3,c1,c2);
+	addcc	c_12,t_1,t_1	!=
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(5)	!=!r[5]=c3;
+	or	c_12,c_3,c_12
+
+	mulx	a_3,b_3,t_1	!mul_add_c(a[3],b[3],c1,c2,c3);
+	addcc	c_12,t_1,t_1
+	srlx	t_1,32,c_12	!=
+	stuw	t_1,rp(6)	!r[6]=c1;
+	stuw	c_12,rp(7)	!r[7]=c2;
+	
+	ret
+	restore	%g0,%g0,%o0
+
+.type	bn_mul_comba4,#function
+.size	bn_mul_comba4,(.-bn_mul_comba4)
+
+.align	32
+
+.global bn_sqr_comba8
+bn_sqr_comba8:
+	save	%sp,FRAME_SIZE,%sp
+	mov	1,t_2
+	lduw	ap(0),a_0
+	sllx	t_2,32,t_2
+	lduw	ap(1),a_1
+	mulx	a_0,a_0,t_1	!sqr_add_c(a,0,c1,c2,c3);
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(0)	!r[0]=c1;
+
+	lduw	ap(2),a_2
+	mulx	a_0,a_1,t_1	!=!sqr_add_c2(a,1,0,c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(1)	!r[1]=c2;
+	or	c_12,c_3,c_12
+
+	mulx	a_2,a_0,t_1	!sqr_add_c2(a,2,0,c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	lduw	ap(3),a_3
+	mulx	a_1,a_1,t_1	!sqr_add_c(a,1,c3,c1,c2);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(2)	!r[2]=c3;
+	or	c_12,c_3,c_12
+
+	mulx	a_0,a_3,t_1	!sqr_add_c2(a,3,0,c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	lduw	ap(4),a_4
+	mulx	a_1,a_2,t_1	!sqr_add_c2(a,2,1,c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	st	t_1,rp(3)	!r[3]=c1;
+	or	c_12,c_3,c_12
+
+	mulx	a_4,a_0,t_1	!sqr_add_c2(a,4,0,c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_3,a_1,t_1	!sqr_add_c2(a,3,1,c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	lduw	ap(5),a_5
+	mulx	a_2,a_2,t_1	!sqr_add_c(a,2,c2,c3,c1);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(4)	!r[4]=c2;
+	or	c_12,c_3,c_12
+
+	mulx	a_0,a_5,t_1	!sqr_add_c2(a,5,0,c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_1,a_4,t_1	!sqr_add_c2(a,4,1,c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	lduw	ap(6),a_6
+	mulx	a_2,a_3,t_1	!sqr_add_c2(a,3,2,c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(5)	!r[5]=c3;
+	or	c_12,c_3,c_12
+
+	mulx	a_6,a_0,t_1	!sqr_add_c2(a,6,0,c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_5,a_1,t_1	!sqr_add_c2(a,5,1,c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_4,a_2,t_1	!sqr_add_c2(a,4,2,c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	lduw	ap(7),a_7
+	mulx	a_3,a_3,t_1	!=!sqr_add_c(a,3,c1,c2,c3);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(6)	!r[6]=c1;
+	or	c_12,c_3,c_12
+
+	mulx	a_0,a_7,t_1	!sqr_add_c2(a,7,0,c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_1,a_6,t_1	!sqr_add_c2(a,6,1,c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_2,a_5,t_1	!sqr_add_c2(a,5,2,c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_3,a_4,t_1	!sqr_add_c2(a,4,3,c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(7)	!r[7]=c2;
+	or	c_12,c_3,c_12
+
+	mulx	a_7,a_1,t_1	!sqr_add_c2(a,7,1,c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_6,a_2,t_1	!sqr_add_c2(a,6,2,c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_5,a_3,t_1	!sqr_add_c2(a,5,3,c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_4,a_4,t_1	!sqr_add_c(a,4,c3,c1,c2);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(8)	!r[8]=c3;
+	or	c_12,c_3,c_12
+
+	mulx	a_2,a_7,t_1	!sqr_add_c2(a,7,2,c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_3,a_6,t_1	!sqr_add_c2(a,6,3,c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_4,a_5,t_1	!sqr_add_c2(a,5,4,c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(9)	!r[9]=c1;
+	or	c_12,c_3,c_12
+
+	mulx	a_7,a_3,t_1	!sqr_add_c2(a,7,3,c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_6,a_4,t_1	!sqr_add_c2(a,6,4,c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_5,a_5,t_1	!sqr_add_c(a,5,c2,c3,c1);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(10)	!r[10]=c2;
+	or	c_12,c_3,c_12
+
+	mulx	a_4,a_7,t_1	!sqr_add_c2(a,7,4,c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_5,a_6,t_1	!sqr_add_c2(a,6,5,c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(11)	!r[11]=c3;
+	or	c_12,c_3,c_12
+
+	mulx	a_7,a_5,t_1	!sqr_add_c2(a,7,5,c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_6,a_6,t_1	!sqr_add_c(a,6,c1,c2,c3);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(12)	!r[12]=c1;
+	or	c_12,c_3,c_12
+
+	mulx	a_6,a_7,t_1	!sqr_add_c2(a,7,6,c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(13)	!r[13]=c2;
+	or	c_12,c_3,c_12
+
+	mulx	a_7,a_7,t_1	!sqr_add_c(a,7,c3,c1,c2);
+	addcc	c_12,t_1,t_1
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(14)	!r[14]=c3;
+	stuw	c_12,rp(15)	!r[15]=c1;
+
+	ret
+	restore	%g0,%g0,%o0
+
+.type	bn_sqr_comba8,#function
+.size	bn_sqr_comba8,(.-bn_sqr_comba8)
+
+.align	32
+
+.global bn_sqr_comba4
+/*
+ * void bn_sqr_comba4(r,a)
+ * BN_ULONG *r,*a;
+ */
+bn_sqr_comba4:
+	save	%sp,FRAME_SIZE,%sp
+	mov	1,t_2
+	lduw	ap(0),a_0
+	sllx	t_2,32,t_2
+	lduw	ap(1),a_1
+	mulx	a_0,a_0,t_1	!sqr_add_c(a,0,c1,c2,c3);
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(0)	!r[0]=c1;
+
+	lduw	ap(2),a_2
+	mulx	a_0,a_1,t_1	!sqr_add_c2(a,1,0,c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(1)	!r[1]=c2;
+	or	c_12,c_3,c_12
+
+	mulx	a_2,a_0,t_1	!sqr_add_c2(a,2,0,c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	lduw	ap(3),a_3
+	mulx	a_1,a_1,t_1	!sqr_add_c(a,1,c3,c1,c2);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(2)	!r[2]=c3;
+	or	c_12,c_3,c_12
+
+	mulx	a_0,a_3,t_1	!sqr_add_c2(a,3,0,c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_1,a_2,t_1	!sqr_add_c2(a,2,1,c1,c2,c3);
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(3)	!r[3]=c1;
+	or	c_12,c_3,c_12
+
+	mulx	a_3,a_1,t_1	!sqr_add_c2(a,3,1,c2,c3,c1);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,c_12
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	mulx	a_2,a_2,t_1	!sqr_add_c(a,2,c2,c3,c1);
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(4)	!r[4]=c2;
+	or	c_12,c_3,c_12
+
+	mulx	a_2,a_3,t_1	!sqr_add_c2(a,3,2,c3,c1,c2);
+	addcc	c_12,t_1,c_12
+	clr	c_3
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	addcc	c_12,t_1,t_1
+	bcs,a	%xcc,.+8
+	add	c_3,t_2,c_3
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(5)	!r[5]=c3;
+	or	c_12,c_3,c_12
+
+	mulx	a_3,a_3,t_1	!sqr_add_c(a,3,c1,c2,c3);
+	addcc	c_12,t_1,t_1
+	srlx	t_1,32,c_12
+	stuw	t_1,rp(6)	!r[6]=c1;
+	stuw	c_12,rp(7)	!r[7]=c2;
+	
+	ret
+	restore	%g0,%g0,%o0
+
+.type	bn_sqr_comba4,#function
+.size	bn_sqr_comba4,(.-bn_sqr_comba4)
+
+.align	32
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv9-gf2m.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv9-gf2m.pl
new file mode 100644
index 000000000..dcf11a87a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv9-gf2m.pl
@@ -0,0 +1,200 @@
+#! /usr/bin/env perl
+# Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# October 2012
+#
+# The module implements bn_GF2m_mul_2x2 polynomial multiplication used
+# in bn_gf2m.c. It's kind of low-hanging mechanical port from C for
+# the time being... Except that it has two code paths: one suitable
+# for all SPARCv9 processors and one for VIS3-capable ones. Former
+# delivers ~25-45% more, more for longer keys, heaviest DH and DSA
+# verify operations on venerable UltraSPARC II. On T4 VIS3 code is
+# ~100-230% faster than gcc-generated code and ~35-90% faster than
+# the pure SPARCv9 code path.
+
+$output = pop;
+open STDOUT,">$output";
+
+$locals=16*8;
+
+$tab="%l0";
+
+@T=("%g2","%g3");
+@i=("%g4","%g5");
+
+($a1,$a2,$a4,$a8,$a12,$a48)=map("%o$_",(0..5));
+($lo,$hi,$b)=("%g1",$a8,"%o7"); $a=$lo;
+
+$code.=<<___;
+#include <sparc_arch.h>
+
+#ifdef __arch64__
+.register	%g2,#scratch
+.register	%g3,#scratch
+#endif
+
+#ifdef __PIC__
+SPARC_PIC_THUNK(%g1)
+#endif
+
+.globl	bn_GF2m_mul_2x2
+.align	16
+bn_GF2m_mul_2x2:
+        SPARC_LOAD_ADDRESS_LEAF(OPENSSL_sparcv9cap_P,%g1,%g5)
+        ld	[%g1+0],%g1             	! OPENSSL_sparcv9cap_P[0]
+
+        andcc	%g1, SPARCV9_VIS3, %g0
+        bz,pn	%icc,.Lsoftware
+        nop
+
+	sllx	%o1, 32, %o1
+	sllx	%o3, 32, %o3
+	or	%o2, %o1, %o1
+	or	%o4, %o3, %o3
+	.word	0x95b262ab			! xmulx   %o1, %o3, %o2
+	.word	0x99b262cb			! xmulxhi %o1, %o3, %o4
+	srlx	%o2, 32, %o1			! 13 cycles later
+	st	%o2, [%o0+0]
+	st	%o1, [%o0+4]
+	srlx	%o4, 32, %o3
+	st	%o4, [%o0+8]
+	retl
+	st	%o3, [%o0+12]
+
+.align	16
+.Lsoftware:
+	save	%sp,-STACK_FRAME-$locals,%sp
+
+	sllx	%i1,32,$a
+	mov	-1,$a12
+	sllx	%i3,32,$b
+	or	%i2,$a,$a
+	srlx	$a12,1,$a48			! 0x7fff...
+	or	%i4,$b,$b
+	srlx	$a12,2,$a12			! 0x3fff...
+	add	%sp,STACK_BIAS+STACK_FRAME,$tab
+
+	sllx	$a,2,$a4
+	mov	$a,$a1
+	sllx	$a,1,$a2
+
+	srax	$a4,63,@i[1]			! broadcast 61st bit
+	and	$a48,$a4,$a4			! (a<<2)&0x7fff...
+	srlx	$a48,2,$a48
+	srax	$a2,63,@i[0]			! broadcast 62nd bit
+	and	$a12,$a2,$a2			! (a<<1)&0x3fff...
+	srax	$a1,63,$lo			! broadcast 63rd bit
+	and	$a48,$a1,$a1			! (a<<0)&0x1fff...
+
+	sllx	$a1,3,$a8
+	and	$b,$lo,$lo
+	and	$b,@i[0],@i[0]
+	and	$b,@i[1],@i[1]
+
+	stx	%g0,[$tab+0*8]			! tab[0]=0
+	xor	$a1,$a2,$a12
+	stx	$a1,[$tab+1*8]			! tab[1]=a1
+	stx	$a2,[$tab+2*8]			! tab[2]=a2
+	 xor	$a4,$a8,$a48
+	stx	$a12,[$tab+3*8]			! tab[3]=a1^a2
+	 xor	$a4,$a1,$a1
+
+	stx	$a4,[$tab+4*8]			! tab[4]=a4
+	xor	$a4,$a2,$a2
+	stx	$a1,[$tab+5*8]			! tab[5]=a1^a4
+	xor	$a4,$a12,$a12
+	stx	$a2,[$tab+6*8]			! tab[6]=a2^a4
+	 xor	$a48,$a1,$a1
+	stx	$a12,[$tab+7*8]			! tab[7]=a1^a2^a4
+	 xor	$a48,$a2,$a2
+
+	stx	$a8,[$tab+8*8]			! tab[8]=a8
+	xor	$a48,$a12,$a12
+	stx	$a1,[$tab+9*8]			! tab[9]=a1^a8
+	 xor	$a4,$a1,$a1
+	stx	$a2,[$tab+10*8]			! tab[10]=a2^a8
+	 xor	$a4,$a2,$a2
+	stx	$a12,[$tab+11*8]		! tab[11]=a1^a2^a8
+
+	xor	$a4,$a12,$a12
+	stx	$a48,[$tab+12*8]		! tab[12]=a4^a8
+	 srlx	$lo,1,$hi
+	stx	$a1,[$tab+13*8]			! tab[13]=a1^a4^a8
+	 sllx	$lo,63,$lo
+	stx	$a2,[$tab+14*8]			! tab[14]=a2^a4^a8
+	 srlx	@i[0],2,@T[0]
+	stx	$a12,[$tab+15*8]		! tab[15]=a1^a2^a4^a8
+
+	sllx	@i[0],62,$a1
+	 sllx	$b,3,@i[0]
+	srlx	@i[1],3,@T[1]
+	 and	@i[0],`0xf<<3`,@i[0]
+	sllx	@i[1],61,$a2
+	 ldx	[$tab+@i[0]],@i[0]
+	 srlx	$b,4-3,@i[1]
+	xor	@T[0],$hi,$hi
+	 and	@i[1],`0xf<<3`,@i[1]
+	xor	$a1,$lo,$lo
+	 ldx	[$tab+@i[1]],@i[1]
+	xor	@T[1],$hi,$hi
+
+	xor	@i[0],$lo,$lo
+	srlx	$b,8-3,@i[0]
+	 xor	$a2,$lo,$lo
+	and	@i[0],`0xf<<3`,@i[0]
+___
+for($n=1;$n<14;$n++) {
+$code.=<<___;
+	sllx	@i[1],`$n*4`,@T[0]
+	ldx	[$tab+@i[0]],@i[0]
+	srlx	@i[1],`64-$n*4`,@T[1]
+	xor	@T[0],$lo,$lo
+	srlx	$b,`($n+2)*4`-3,@i[1]
+	xor	@T[1],$hi,$hi
+	and	@i[1],`0xf<<3`,@i[1]
+___
+	push(@i,shift(@i)); push(@T,shift(@T));
+}
+$code.=<<___;
+	sllx	@i[1],`$n*4`,@T[0]
+	ldx	[$tab+@i[0]],@i[0]
+	srlx	@i[1],`64-$n*4`,@T[1]
+	xor	@T[0],$lo,$lo
+
+	sllx	@i[0],`($n+1)*4`,@T[0]
+	 xor	@T[1],$hi,$hi
+	srlx	@i[0],`64-($n+1)*4`,@T[1]
+	xor	@T[0],$lo,$lo
+	xor	@T[1],$hi,$hi
+
+	srlx	$lo,32,%i1
+	st	$lo,[%i0+0]
+	st	%i1,[%i0+4]
+	srlx	$hi,32,%i2
+	st	$hi,[%i0+8]
+	st	%i2,[%i0+12]
+
+	ret
+	restore
+.type	bn_GF2m_mul_2x2,#function
+.size	bn_GF2m_mul_2x2,.-bn_GF2m_mul_2x2
+.asciz	"GF(2^m) Multiplication for SPARCv9, CRYPTOGAMS by <appro\@openssl.org>"
+.align	4
+___
+
+$code =~ s/\`([^\`]*)\`/eval($1)/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv9-mont.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv9-mont.pl
new file mode 100644
index 000000000..b41903af9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv9-mont.pl
@@ -0,0 +1,620 @@
+#! /usr/bin/env perl
+# Copyright 2005-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# December 2005
+#
+# Pure SPARCv9/8+ and IALU-only bn_mul_mont implementation. The reasons
+# for undertaken effort are multiple. First of all, UltraSPARC is not
+# the whole SPARCv9 universe and other VIS-free implementations deserve
+# optimized code as much. Secondly, newly introduced UltraSPARC T1,
+# a.k.a. Niagara, has shared FPU and concurrent FPU-intensive paths,
+# such as sparcv9a-mont, will simply sink it. Yes, T1 is equipped with
+# several integrated RSA/DSA accelerator circuits accessible through
+# kernel driver [only(*)], but having decent user-land software
+# implementation is important too. Finally, reasons like desire to
+# experiment with dedicated squaring procedure. Yes, this module
+# implements one, because it was easiest to draft it in SPARCv9
+# instructions...
+
+# (*)	Engine accessing the driver in question is on my TODO list.
+#	For reference, accelerator is estimated to give 6 to 10 times
+#	improvement on single-threaded RSA sign. It should be noted
+#	that 6-10x improvement coefficient does not actually mean
+#	something extraordinary in terms of absolute [single-threaded]
+#	performance, as SPARCv9 instruction set is by all means least
+#	suitable for high performance crypto among other 64 bit
+#	platforms. 6-10x factor simply places T1 in same performance
+#	domain as say AMD64 and IA-64. Improvement of RSA verify don't
+#	appear impressive at all, but it's the sign operation which is
+#	far more critical/interesting.
+
+# You might notice that inner loops are modulo-scheduled:-) This has
+# essentially negligible impact on UltraSPARC performance, it's
+# Fujitsu SPARC64 V users who should notice and hopefully appreciate
+# the advantage... Currently this module surpasses sparcv9a-mont.pl
+# by ~20% on UltraSPARC-III and later cores, but recall that sparcv9a
+# module still have hidden potential [see TODO list there], which is
+# estimated to be larger than 20%...
+
+$output = pop;
+open STDOUT,">$output";
+
+# int bn_mul_mont(
+$rp="%i0";	# BN_ULONG *rp,
+$ap="%i1";	# const BN_ULONG *ap,
+$bp="%i2";	# const BN_ULONG *bp,
+$np="%i3";	# const BN_ULONG *np,
+$n0="%i4";	# const BN_ULONG *n0,
+$num="%i5";	# int num);
+
+$frame="STACK_FRAME";
+$bias="STACK_BIAS";
+
+$car0="%o0";
+$car1="%o1";
+$car2="%o2";	# 1 bit
+$acc0="%o3";
+$acc1="%o4";
+$mask="%g1";	# 32 bits, what a waste...
+$tmp0="%g4";
+$tmp1="%g5";
+
+$i="%l0";
+$j="%l1";
+$mul0="%l2";
+$mul1="%l3";
+$tp="%l4";
+$apj="%l5";
+$npj="%l6";
+$tpj="%l7";
+
+$fname="bn_mul_mont_int";
+
+$code=<<___;
+#include "sparc_arch.h"
+
+.section	".text",#alloc,#execinstr
+
+.global	$fname
+.align	32
+$fname:
+	cmp	%o5,4			! 128 bits minimum
+	bge,pt	%icc,.Lenter
+	sethi	%hi(0xffffffff),$mask
+	retl
+	clr	%o0
+.align	32
+.Lenter:
+	save	%sp,-$frame,%sp
+	sll	$num,2,$num		! num*=4
+	or	$mask,%lo(0xffffffff),$mask
+	ld	[$n0],$n0
+	cmp	$ap,$bp
+	and	$num,$mask,$num
+	ld	[$bp],$mul0		! bp[0]
+	nop
+
+	add	%sp,$bias,%o7		! real top of stack
+	ld	[$ap],$car0		! ap[0] ! redundant in squaring context
+	sub	%o7,$num,%o7
+	ld	[$ap+4],$apj		! ap[1]
+	and	%o7,-1024,%o7
+	ld	[$np],$car1		! np[0]
+	sub	%o7,$bias,%sp		! alloca
+	ld	[$np+4],$npj		! np[1]
+	be,pt	SIZE_T_CC,.Lbn_sqr_mont
+	mov	12,$j
+
+	mulx	$car0,$mul0,$car0	! ap[0]*bp[0]
+	mulx	$apj,$mul0,$tmp0	!prologue! ap[1]*bp[0]
+	and	$car0,$mask,$acc0
+	add	%sp,$bias+$frame,$tp
+	ld	[$ap+8],$apj		!prologue!
+
+	mulx	$n0,$acc0,$mul1		! "t[0]"*n0
+	and	$mul1,$mask,$mul1
+
+	mulx	$car1,$mul1,$car1	! np[0]*"t[0]"*n0
+	mulx	$npj,$mul1,$acc1	!prologue! np[1]*"t[0]"*n0
+	srlx	$car0,32,$car0
+	add	$acc0,$car1,$car1
+	ld	[$np+8],$npj		!prologue!
+	srlx	$car1,32,$car1
+	mov	$tmp0,$acc0		!prologue!
+
+.L1st:
+	mulx	$apj,$mul0,$tmp0
+	mulx	$npj,$mul1,$tmp1
+	add	$acc0,$car0,$car0
+	ld	[$ap+$j],$apj		! ap[j]
+	and	$car0,$mask,$acc0
+	add	$acc1,$car1,$car1
+	ld	[$np+$j],$npj		! np[j]
+	srlx	$car0,32,$car0
+	add	$acc0,$car1,$car1
+	add	$j,4,$j			! j++
+	mov	$tmp0,$acc0
+	st	$car1,[$tp]
+	cmp	$j,$num
+	mov	$tmp1,$acc1
+	srlx	$car1,32,$car1
+	bl	%icc,.L1st
+	add	$tp,4,$tp		! tp++
+!.L1st
+
+	mulx	$apj,$mul0,$tmp0	!epilogue!
+	mulx	$npj,$mul1,$tmp1
+	add	$acc0,$car0,$car0
+	and	$car0,$mask,$acc0
+	add	$acc1,$car1,$car1
+	srlx	$car0,32,$car0
+	add	$acc0,$car1,$car1
+	st	$car1,[$tp]
+	srlx	$car1,32,$car1
+
+	add	$tmp0,$car0,$car0
+	and	$car0,$mask,$acc0
+	add	$tmp1,$car1,$car1
+	srlx	$car0,32,$car0
+	add	$acc0,$car1,$car1
+	st	$car1,[$tp+4]
+	srlx	$car1,32,$car1
+
+	add	$car0,$car1,$car1
+	st	$car1,[$tp+8]
+	srlx	$car1,32,$car2
+
+	mov	4,$i			! i++
+	ld	[$bp+4],$mul0		! bp[1]
+.Louter:
+	add	%sp,$bias+$frame,$tp
+	ld	[$ap],$car0		! ap[0]
+	ld	[$ap+4],$apj		! ap[1]
+	ld	[$np],$car1		! np[0]
+	ld	[$np+4],$npj		! np[1]
+	ld	[$tp],$tmp1		! tp[0]
+	ld	[$tp+4],$tpj		! tp[1]
+	mov	12,$j
+
+	mulx	$car0,$mul0,$car0
+	mulx	$apj,$mul0,$tmp0	!prologue!
+	add	$tmp1,$car0,$car0
+	ld	[$ap+8],$apj		!prologue!
+	and	$car0,$mask,$acc0
+
+	mulx	$n0,$acc0,$mul1
+	and	$mul1,$mask,$mul1
+
+	mulx	$car1,$mul1,$car1
+	mulx	$npj,$mul1,$acc1	!prologue!
+	srlx	$car0,32,$car0
+	add	$acc0,$car1,$car1
+	ld	[$np+8],$npj		!prologue!
+	srlx	$car1,32,$car1
+	mov	$tmp0,$acc0		!prologue!
+
+.Linner:
+	mulx	$apj,$mul0,$tmp0
+	mulx	$npj,$mul1,$tmp1
+	add	$tpj,$car0,$car0
+	ld	[$ap+$j],$apj		! ap[j]
+	add	$acc0,$car0,$car0
+	add	$acc1,$car1,$car1
+	ld	[$np+$j],$npj		! np[j]
+	and	$car0,$mask,$acc0
+	ld	[$tp+8],$tpj		! tp[j]
+	srlx	$car0,32,$car0
+	add	$acc0,$car1,$car1
+	add	$j,4,$j			! j++
+	mov	$tmp0,$acc0
+	st	$car1,[$tp]		! tp[j-1]
+	srlx	$car1,32,$car1
+	mov	$tmp1,$acc1
+	cmp	$j,$num
+	bl	%icc,.Linner
+	add	$tp,4,$tp		! tp++
+!.Linner
+
+	mulx	$apj,$mul0,$tmp0	!epilogue!
+	mulx	$npj,$mul1,$tmp1
+	add	$tpj,$car0,$car0
+	add	$acc0,$car0,$car0
+	ld	[$tp+8],$tpj		! tp[j]
+	and	$car0,$mask,$acc0
+	add	$acc1,$car1,$car1
+	srlx	$car0,32,$car0
+	add	$acc0,$car1,$car1
+	st	$car1,[$tp]		! tp[j-1]
+	srlx	$car1,32,$car1
+
+	add	$tpj,$car0,$car0
+	add	$tmp0,$car0,$car0
+	and	$car0,$mask,$acc0
+	add	$tmp1,$car1,$car1
+	add	$acc0,$car1,$car1
+	st	$car1,[$tp+4]		! tp[j-1]
+	srlx	$car0,32,$car0
+	add	$i,4,$i			! i++
+	srlx	$car1,32,$car1
+
+	add	$car0,$car1,$car1
+	cmp	$i,$num
+	add	$car2,$car1,$car1
+	st	$car1,[$tp+8]
+
+	srlx	$car1,32,$car2
+	bl,a	%icc,.Louter
+	ld	[$bp+$i],$mul0		! bp[i]
+!.Louter
+
+	add	$tp,12,$tp
+
+.Ltail:
+	add	$np,$num,$np
+	add	$rp,$num,$rp
+	sub	%g0,$num,%o7		! k=-num
+	ba	.Lsub
+	subcc	%g0,%g0,%g0		! clear %icc.c
+.align	16
+.Lsub:
+	ld	[$tp+%o7],%o0
+	ld	[$np+%o7],%o1
+	subccc	%o0,%o1,%o1		! tp[j]-np[j]
+	add	$rp,%o7,$i
+	add	%o7,4,%o7
+	brnz	%o7,.Lsub
+	st	%o1,[$i]
+	subccc	$car2,0,$car2		! handle upmost overflow bit
+	sub	%g0,$num,%o7
+
+.Lcopy:
+	ld	[$tp+%o7],%o1		! conditional copy
+	ld	[$rp+%o7],%o0
+	st	%g0,[$tp+%o7]		! zap tp
+	movcs	%icc,%o1,%o0
+	st	%o0,[$rp+%o7]
+	add	%o7,4,%o7
+	brnz	%o7,.Lcopy
+	nop
+	mov	1,%i0
+	ret
+	restore
+___
+
+########
+######## .Lbn_sqr_mont gives up to 20% *overall* improvement over
+######## code without following dedicated squaring procedure.
+########
+$sbit="%o5";
+
+$code.=<<___;
+.align	32
+.Lbn_sqr_mont:
+	mulx	$mul0,$mul0,$car0		! ap[0]*ap[0]
+	mulx	$apj,$mul0,$tmp0		!prologue!
+	and	$car0,$mask,$acc0
+	add	%sp,$bias+$frame,$tp
+	ld	[$ap+8],$apj			!prologue!
+
+	mulx	$n0,$acc0,$mul1			! "t[0]"*n0
+	srlx	$car0,32,$car0
+	and	$mul1,$mask,$mul1
+
+	mulx	$car1,$mul1,$car1		! np[0]*"t[0]"*n0
+	mulx	$npj,$mul1,$acc1		!prologue!
+	and	$car0,1,$sbit
+	ld	[$np+8],$npj			!prologue!
+	srlx	$car0,1,$car0
+	add	$acc0,$car1,$car1
+	srlx	$car1,32,$car1
+	mov	$tmp0,$acc0			!prologue!
+
+.Lsqr_1st:
+	mulx	$apj,$mul0,$tmp0
+	mulx	$npj,$mul1,$tmp1
+	add	$acc0,$car0,$car0		! ap[j]*a0+c0
+	add	$acc1,$car1,$car1
+	ld	[$ap+$j],$apj			! ap[j]
+	and	$car0,$mask,$acc0
+	ld	[$np+$j],$npj			! np[j]
+	srlx	$car0,32,$car0
+	add	$acc0,$acc0,$acc0
+	or	$sbit,$acc0,$acc0
+	mov	$tmp1,$acc1
+	srlx	$acc0,32,$sbit
+	add	$j,4,$j				! j++
+	and	$acc0,$mask,$acc0
+	cmp	$j,$num
+	add	$acc0,$car1,$car1
+	st	$car1,[$tp]
+	mov	$tmp0,$acc0
+	srlx	$car1,32,$car1
+	bl	%icc,.Lsqr_1st
+	add	$tp,4,$tp			! tp++
+!.Lsqr_1st
+
+	mulx	$apj,$mul0,$tmp0		! epilogue
+	mulx	$npj,$mul1,$tmp1
+	add	$acc0,$car0,$car0		! ap[j]*a0+c0
+	add	$acc1,$car1,$car1
+	and	$car0,$mask,$acc0
+	srlx	$car0,32,$car0
+	add	$acc0,$acc0,$acc0
+	or	$sbit,$acc0,$acc0
+	srlx	$acc0,32,$sbit
+	and	$acc0,$mask,$acc0
+	add	$acc0,$car1,$car1
+	st	$car1,[$tp]
+	srlx	$car1,32,$car1
+
+	add	$tmp0,$car0,$car0		! ap[j]*a0+c0
+	add	$tmp1,$car1,$car1
+	and	$car0,$mask,$acc0
+	srlx	$car0,32,$car0
+	add	$acc0,$acc0,$acc0
+	or	$sbit,$acc0,$acc0
+	srlx	$acc0,32,$sbit
+	and	$acc0,$mask,$acc0
+	add	$acc0,$car1,$car1
+	st	$car1,[$tp+4]
+	srlx	$car1,32,$car1
+
+	add	$car0,$car0,$car0
+	or	$sbit,$car0,$car0
+	add	$car0,$car1,$car1
+	st	$car1,[$tp+8]
+	srlx	$car1,32,$car2
+
+	ld	[%sp+$bias+$frame],$tmp0	! tp[0]
+	ld	[%sp+$bias+$frame+4],$tmp1	! tp[1]
+	ld	[%sp+$bias+$frame+8],$tpj	! tp[2]
+	ld	[$ap+4],$mul0			! ap[1]
+	ld	[$ap+8],$apj			! ap[2]
+	ld	[$np],$car1			! np[0]
+	ld	[$np+4],$npj			! np[1]
+	mulx	$n0,$tmp0,$mul1
+
+	mulx	$mul0,$mul0,$car0
+	and	$mul1,$mask,$mul1
+
+	mulx	$car1,$mul1,$car1
+	mulx	$npj,$mul1,$acc1
+	add	$tmp0,$car1,$car1
+	and	$car0,$mask,$acc0
+	ld	[$np+8],$npj			! np[2]
+	srlx	$car1,32,$car1
+	add	$tmp1,$car1,$car1
+	srlx	$car0,32,$car0
+	add	$acc0,$car1,$car1
+	and	$car0,1,$sbit
+	add	$acc1,$car1,$car1
+	srlx	$car0,1,$car0
+	mov	12,$j
+	st	$car1,[%sp+$bias+$frame]	! tp[0]=
+	srlx	$car1,32,$car1
+	add	%sp,$bias+$frame+4,$tp
+
+.Lsqr_2nd:
+	mulx	$apj,$mul0,$acc0
+	mulx	$npj,$mul1,$acc1
+	add	$acc0,$car0,$car0
+	add	$tpj,$sbit,$sbit
+	ld	[$ap+$j],$apj			! ap[j]
+	and	$car0,$mask,$acc0
+	ld	[$np+$j],$npj			! np[j]
+	srlx	$car0,32,$car0
+	add	$acc1,$car1,$car1
+	ld	[$tp+8],$tpj			! tp[j]
+	add	$acc0,$acc0,$acc0
+	add	$j,4,$j				! j++
+	add	$sbit,$acc0,$acc0
+	srlx	$acc0,32,$sbit
+	and	$acc0,$mask,$acc0
+	cmp	$j,$num
+	add	$acc0,$car1,$car1
+	st	$car1,[$tp]			! tp[j-1]
+	srlx	$car1,32,$car1
+	bl	%icc,.Lsqr_2nd
+	add	$tp,4,$tp			! tp++
+!.Lsqr_2nd
+
+	mulx	$apj,$mul0,$acc0
+	mulx	$npj,$mul1,$acc1
+	add	$acc0,$car0,$car0
+	add	$tpj,$sbit,$sbit
+	and	$car0,$mask,$acc0
+	srlx	$car0,32,$car0
+	add	$acc1,$car1,$car1
+	add	$acc0,$acc0,$acc0
+	add	$sbit,$acc0,$acc0
+	srlx	$acc0,32,$sbit
+	and	$acc0,$mask,$acc0
+	add	$acc0,$car1,$car1
+	st	$car1,[$tp]			! tp[j-1]
+	srlx	$car1,32,$car1
+
+	add	$car0,$car0,$car0
+	add	$sbit,$car0,$car0
+	add	$car0,$car1,$car1
+	add	$car2,$car1,$car1
+	st	$car1,[$tp+4]
+	srlx	$car1,32,$car2
+
+	ld	[%sp+$bias+$frame],$tmp1	! tp[0]
+	ld	[%sp+$bias+$frame+4],$tpj	! tp[1]
+	ld	[$ap+8],$mul0			! ap[2]
+	ld	[$np],$car1			! np[0]
+	ld	[$np+4],$npj			! np[1]
+	mulx	$n0,$tmp1,$mul1
+	and	$mul1,$mask,$mul1
+	mov	8,$i
+
+	mulx	$mul0,$mul0,$car0
+	mulx	$car1,$mul1,$car1
+	and	$car0,$mask,$acc0
+	add	$tmp1,$car1,$car1
+	srlx	$car0,32,$car0
+	add	%sp,$bias+$frame,$tp
+	srlx	$car1,32,$car1
+	and	$car0,1,$sbit
+	srlx	$car0,1,$car0
+	mov	4,$j
+
+.Lsqr_outer:
+.Lsqr_inner1:
+	mulx	$npj,$mul1,$acc1
+	add	$tpj,$car1,$car1
+	add	$j,4,$j
+	ld	[$tp+8],$tpj
+	cmp	$j,$i
+	add	$acc1,$car1,$car1
+	ld	[$np+$j],$npj
+	st	$car1,[$tp]
+	srlx	$car1,32,$car1
+	bl	%icc,.Lsqr_inner1
+	add	$tp,4,$tp
+!.Lsqr_inner1
+
+	add	$j,4,$j
+	ld	[$ap+$j],$apj			! ap[j]
+	mulx	$npj,$mul1,$acc1
+	add	$tpj,$car1,$car1
+	ld	[$np+$j],$npj			! np[j]
+	srlx	$car1,32,$tmp0
+	and	$car1,$mask,$car1
+	add	$tmp0,$sbit,$sbit
+	add	$acc0,$car1,$car1
+	ld	[$tp+8],$tpj			! tp[j]
+	add	$acc1,$car1,$car1
+	st	$car1,[$tp]
+	srlx	$car1,32,$car1
+
+	add	$j,4,$j
+	cmp	$j,$num
+	be,pn	%icc,.Lsqr_no_inner2
+	add	$tp,4,$tp
+
+.Lsqr_inner2:
+	mulx	$apj,$mul0,$acc0
+	mulx	$npj,$mul1,$acc1
+	add	$tpj,$sbit,$sbit
+	add	$acc0,$car0,$car0
+	ld	[$ap+$j],$apj			! ap[j]
+	and	$car0,$mask,$acc0
+	ld	[$np+$j],$npj			! np[j]
+	srlx	$car0,32,$car0
+	add	$acc0,$acc0,$acc0
+	ld	[$tp+8],$tpj			! tp[j]
+	add	$sbit,$acc0,$acc0
+	add	$j,4,$j				! j++
+	srlx	$acc0,32,$sbit
+	and	$acc0,$mask,$acc0
+	cmp	$j,$num
+	add	$acc0,$car1,$car1
+	add	$acc1,$car1,$car1
+	st	$car1,[$tp]			! tp[j-1]
+	srlx	$car1,32,$car1
+	bl	%icc,.Lsqr_inner2
+	add	$tp,4,$tp			! tp++
+
+.Lsqr_no_inner2:
+	mulx	$apj,$mul0,$acc0
+	mulx	$npj,$mul1,$acc1
+	add	$tpj,$sbit,$sbit
+	add	$acc0,$car0,$car0
+	and	$car0,$mask,$acc0
+	srlx	$car0,32,$car0
+	add	$acc0,$acc0,$acc0
+	add	$sbit,$acc0,$acc0
+	srlx	$acc0,32,$sbit
+	and	$acc0,$mask,$acc0
+	add	$acc0,$car1,$car1
+	add	$acc1,$car1,$car1
+	st	$car1,[$tp]			! tp[j-1]
+	srlx	$car1,32,$car1
+
+	add	$car0,$car0,$car0
+	add	$sbit,$car0,$car0
+	add	$car0,$car1,$car1
+	add	$car2,$car1,$car1
+	st	$car1,[$tp+4]
+	srlx	$car1,32,$car2
+
+	add	$i,4,$i				! i++
+	ld	[%sp+$bias+$frame],$tmp1	! tp[0]
+	ld	[%sp+$bias+$frame+4],$tpj	! tp[1]
+	ld	[$ap+$i],$mul0			! ap[j]
+	ld	[$np],$car1			! np[0]
+	ld	[$np+4],$npj			! np[1]
+	mulx	$n0,$tmp1,$mul1
+	and	$mul1,$mask,$mul1
+	add	$i,4,$tmp0
+
+	mulx	$mul0,$mul0,$car0
+	mulx	$car1,$mul1,$car1
+	and	$car0,$mask,$acc0
+	add	$tmp1,$car1,$car1
+	srlx	$car0,32,$car0
+	add	%sp,$bias+$frame,$tp
+	srlx	$car1,32,$car1
+	and	$car0,1,$sbit
+	srlx	$car0,1,$car0
+
+	cmp	$tmp0,$num			! i<num-1
+	bl	%icc,.Lsqr_outer
+	mov	4,$j
+
+.Lsqr_last:
+	mulx	$npj,$mul1,$acc1
+	add	$tpj,$car1,$car1
+	add	$j,4,$j
+	ld	[$tp+8],$tpj
+	cmp	$j,$i
+	add	$acc1,$car1,$car1
+	ld	[$np+$j],$npj
+	st	$car1,[$tp]
+	srlx	$car1,32,$car1
+	bl	%icc,.Lsqr_last
+	add	$tp,4,$tp
+!.Lsqr_last
+
+	mulx	$npj,$mul1,$acc1
+	add	$tpj,$acc0,$acc0
+	srlx	$acc0,32,$tmp0
+	and	$acc0,$mask,$acc0
+	add	$tmp0,$sbit,$sbit
+	add	$acc0,$car1,$car1
+	add	$acc1,$car1,$car1
+	st	$car1,[$tp]
+	srlx	$car1,32,$car1
+
+	add	$car0,$car0,$car0		! recover $car0
+	add	$sbit,$car0,$car0
+	add	$car0,$car1,$car1
+	add	$car2,$car1,$car1
+	st	$car1,[$tp+4]
+	srlx	$car1,32,$car2
+
+	ba	.Ltail
+	add	$tp,8,$tp
+.type	$fname,#function
+.size	$fname,(.-$fname)
+.asciz	"Montgomery Multiplication for SPARCv9, CRYPTOGAMS by <appro\@openssl.org>"
+.align	32
+___
+$code =~ s/\`([^\`]*)\`/eval($1)/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv9a-mont.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv9a-mont.pl
new file mode 100755
index 000000000..c8f759df9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/sparcv9a-mont.pl
@@ -0,0 +1,887 @@
+#! /usr/bin/env perl
+# Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# October 2005
+#
+# "Teaser" Montgomery multiplication module for UltraSPARC. Why FPU?
+# Because unlike integer multiplier, which simply stalls whole CPU,
+# FPU is fully pipelined and can effectively emit 48 bit partial
+# product every cycle. Why not blended SPARC v9? One can argue that
+# making this module dependent on UltraSPARC VIS extension limits its
+# binary compatibility. Well yes, it does exclude SPARC64 prior-V(!)
+# implementations from compatibility matrix. But the rest, whole Sun
+# UltraSPARC family and brand new Fujitsu's SPARC64 V, all support
+# VIS extension instructions used in this module. This is considered
+# good enough to not care about HAL SPARC64 users [if any] who have
+# integer-only pure SPARCv9 module to "fall down" to.
+
+# USI&II cores currently exhibit uniform 2x improvement [over pre-
+# bn_mul_mont codebase] for all key lengths and benchmarks. On USIII
+# performance improves few percents for shorter keys and worsens few
+# percents for longer keys. This is because USIII integer multiplier
+# is >3x faster than USI&II one, which is harder to match [but see
+# TODO list below]. It should also be noted that SPARC64 V features
+# out-of-order execution, which *might* mean that integer multiplier
+# is pipelined, which in turn *might* be impossible to match... On
+# additional note, SPARC64 V implements FP Multiply-Add instruction,
+# which is perfectly usable in this context... In other words, as far
+# as Fujitsu SPARC64 V goes, talk to the author:-)
+
+# The implementation implies following "non-natural" limitations on
+# input arguments:
+# - num may not be less than 4;
+# - num has to be even;
+# Failure to meet either condition has no fatal effects, simply
+# doesn't give any performance gain.
+
+# TODO:
+# - modulo-schedule inner loop for better performance (on in-order
+#   execution core such as UltraSPARC this shall result in further
+#   noticeable(!) improvement);
+# - dedicated squaring procedure[?];
+
+######################################################################
+# November 2006
+#
+# Modulo-scheduled inner loops allow to interleave floating point and
+# integer instructions and minimize Read-After-Write penalties. This
+# results in *further* 20-50% performance improvement [depending on
+# key length, more for longer keys] on USI&II cores and 30-80% - on
+# USIII&IV.
+
+$output = pop;
+open STDOUT,">$output";
+
+$fname="bn_mul_mont_fpu";
+
+$frame="STACK_FRAME";
+$bias="STACK_BIAS";
+$locals=64;
+
+# In order to provide for 32-/64-bit ABI duality, I keep integers wider
+# than 32 bit in %g1-%g4 and %o0-%o5. %l0-%l7 and %i0-%i5 are used
+# exclusively for pointers, indexes and other small values...
+# int bn_mul_mont(
+$rp="%i0";	# BN_ULONG *rp,
+$ap="%i1";	# const BN_ULONG *ap,
+$bp="%i2";	# const BN_ULONG *bp,
+$np="%i3";	# const BN_ULONG *np,
+$n0="%i4";	# const BN_ULONG *n0,
+$num="%i5";	# int num);
+
+$tp="%l0";	# t[num]
+$ap_l="%l1";	# a[num],n[num] are smashed to 32-bit words and saved
+$ap_h="%l2";	# to these four vectors as double-precision FP values.
+$np_l="%l3";	# This way a bunch of fxtods are eliminated in second
+$np_h="%l4";	# loop and L1-cache aliasing is minimized...
+$i="%l5";
+$j="%l6";
+$mask="%l7";	# 16-bit mask, 0xffff
+
+$n0="%g4";	# reassigned(!) to "64-bit" register
+$carry="%i4";	# %i4 reused(!) for a carry bit
+
+# FP register naming chart
+#
+#     ..HILO
+#       dcba
+#   --------
+#        LOa
+#       LOb
+#      LOc
+#     LOd
+#      HIa
+#     HIb
+#    HIc
+#   HId
+#    ..a
+#   ..b
+$ba="%f0";    $bb="%f2";    $bc="%f4";    $bd="%f6";
+$na="%f8";    $nb="%f10";   $nc="%f12";   $nd="%f14";
+$alo="%f16";  $alo_="%f17"; $ahi="%f18";  $ahi_="%f19";
+$nlo="%f20";  $nlo_="%f21"; $nhi="%f22";  $nhi_="%f23";
+
+$dota="%f24"; $dotb="%f26";
+
+$aloa="%f32"; $alob="%f34"; $aloc="%f36"; $alod="%f38";
+$ahia="%f40"; $ahib="%f42"; $ahic="%f44"; $ahid="%f46";
+$nloa="%f48"; $nlob="%f50"; $nloc="%f52"; $nlod="%f54";
+$nhia="%f56"; $nhib="%f58"; $nhic="%f60"; $nhid="%f62";
+
+$ASI_FL16_P=0xD2;	# magic ASI value to engage 16-bit FP load
+
+$code=<<___;
+#include "sparc_arch.h"
+
+.section	".text",#alloc,#execinstr
+
+.global $fname
+.align  32
+$fname:
+	save	%sp,-$frame-$locals,%sp
+
+	cmp	$num,4
+	bl,a,pn %icc,.Lret
+	clr	%i0
+	andcc	$num,1,%g0		! $num has to be even...
+	bnz,a,pn %icc,.Lret
+	clr	%i0			! signal "unsupported input value"
+
+	srl	$num,1,$num
+	sethi	%hi(0xffff),$mask
+	ld	[%i4+0],$n0		! $n0 reassigned, remember?
+	or	$mask,%lo(0xffff),$mask
+	ld	[%i4+4],%o0
+	sllx	%o0,32,%o0
+	or	%o0,$n0,$n0		! $n0=n0[1].n0[0]
+
+	sll	$num,3,$num		! num*=8
+
+	add	%sp,$bias,%o0		! real top of stack
+	sll	$num,2,%o1
+	add	%o1,$num,%o1		! %o1=num*5
+	sub	%o0,%o1,%o0
+	and	%o0,-2048,%o0		! optimize TLB utilization
+	sub	%o0,$bias,%sp		! alloca(5*num*8)
+
+	rd	%asi,%o7		! save %asi
+	add	%sp,$bias+$frame+$locals,$tp
+	add	$tp,$num,$ap_l
+	add	$ap_l,$num,$ap_l	! [an]p_[lh] point at the vectors' ends !
+	add	$ap_l,$num,$ap_h
+	add	$ap_h,$num,$np_l
+	add	$np_l,$num,$np_h
+
+	wr	%g0,$ASI_FL16_P,%asi	! setup %asi for 16-bit FP loads
+
+	add	$rp,$num,$rp		! readjust input pointers to point
+	add	$ap,$num,$ap		! at the ends too...
+	add	$bp,$num,$bp
+	add	$np,$num,$np
+
+	stx	%o7,[%sp+$bias+$frame+48]	! save %asi
+
+	sub	%g0,$num,$i		! i=-num
+	sub	%g0,$num,$j		! j=-num
+
+	add	$ap,$j,%o3
+	add	$bp,$i,%o4
+
+	ld	[%o3+4],%g1		! bp[0]
+	ld	[%o3+0],%o0
+	ld	[%o4+4],%g5		! ap[0]
+	sllx	%g1,32,%g1
+	ld	[%o4+0],%o1
+	sllx	%g5,32,%g5
+	or	%g1,%o0,%o0
+	or	%g5,%o1,%o1
+
+	add	$np,$j,%o5
+
+	mulx	%o1,%o0,%o0		! ap[0]*bp[0]
+	mulx	$n0,%o0,%o0		! ap[0]*bp[0]*n0
+	stx	%o0,[%sp+$bias+$frame+0]
+
+	ld	[%o3+0],$alo_	! load a[j] as pair of 32-bit words
+	fzeros	$alo
+	ld	[%o3+4],$ahi_
+	fzeros	$ahi
+	ld	[%o5+0],$nlo_	! load n[j] as pair of 32-bit words
+	fzeros	$nlo
+	ld	[%o5+4],$nhi_
+	fzeros	$nhi
+
+	! transfer b[i] to FPU as 4x16-bit values
+	ldda	[%o4+2]%asi,$ba
+	fxtod	$alo,$alo
+	ldda	[%o4+0]%asi,$bb
+	fxtod	$ahi,$ahi
+	ldda	[%o4+6]%asi,$bc
+	fxtod	$nlo,$nlo
+	ldda	[%o4+4]%asi,$bd
+	fxtod	$nhi,$nhi
+
+	! transfer ap[0]*b[0]*n0 to FPU as 4x16-bit values
+	ldda	[%sp+$bias+$frame+6]%asi,$na
+	fxtod	$ba,$ba
+	ldda	[%sp+$bias+$frame+4]%asi,$nb
+	fxtod	$bb,$bb
+	ldda	[%sp+$bias+$frame+2]%asi,$nc
+	fxtod	$bc,$bc
+	ldda	[%sp+$bias+$frame+0]%asi,$nd
+	fxtod	$bd,$bd
+
+	std	$alo,[$ap_l+$j]		! save smashed ap[j] in double format
+	fxtod	$na,$na
+	std	$ahi,[$ap_h+$j]
+	fxtod	$nb,$nb
+	std	$nlo,[$np_l+$j]		! save smashed np[j] in double format
+	fxtod	$nc,$nc
+	std	$nhi,[$np_h+$j]
+	fxtod	$nd,$nd
+
+		fmuld	$alo,$ba,$aloa
+		fmuld	$nlo,$na,$nloa
+		fmuld	$alo,$bb,$alob
+		fmuld	$nlo,$nb,$nlob
+		fmuld	$alo,$bc,$aloc
+	faddd	$aloa,$nloa,$nloa
+		fmuld	$nlo,$nc,$nloc
+		fmuld	$alo,$bd,$alod
+	faddd	$alob,$nlob,$nlob
+		fmuld	$nlo,$nd,$nlod
+		fmuld	$ahi,$ba,$ahia
+	faddd	$aloc,$nloc,$nloc
+		fmuld	$nhi,$na,$nhia
+		fmuld	$ahi,$bb,$ahib
+	faddd	$alod,$nlod,$nlod
+		fmuld	$nhi,$nb,$nhib
+		fmuld	$ahi,$bc,$ahic
+	faddd	$ahia,$nhia,$nhia
+		fmuld	$nhi,$nc,$nhic
+		fmuld	$ahi,$bd,$ahid
+	faddd	$ahib,$nhib,$nhib
+		fmuld	$nhi,$nd,$nhid
+
+	faddd	$ahic,$nhic,$dota	! $nhic
+	faddd	$ahid,$nhid,$dotb	! $nhid
+
+	faddd	$nloc,$nhia,$nloc
+	faddd	$nlod,$nhib,$nlod
+
+	fdtox	$nloa,$nloa
+	fdtox	$nlob,$nlob
+	fdtox	$nloc,$nloc
+	fdtox	$nlod,$nlod
+
+	std	$nloa,[%sp+$bias+$frame+0]
+	add	$j,8,$j
+	std	$nlob,[%sp+$bias+$frame+8]
+	add	$ap,$j,%o4
+	std	$nloc,[%sp+$bias+$frame+16]
+	add	$np,$j,%o5
+	std	$nlod,[%sp+$bias+$frame+24]
+
+	ld	[%o4+0],$alo_	! load a[j] as pair of 32-bit words
+	fzeros	$alo
+	ld	[%o4+4],$ahi_
+	fzeros	$ahi
+	ld	[%o5+0],$nlo_	! load n[j] as pair of 32-bit words
+	fzeros	$nlo
+	ld	[%o5+4],$nhi_
+	fzeros	$nhi
+
+	fxtod	$alo,$alo
+	fxtod	$ahi,$ahi
+	fxtod	$nlo,$nlo
+	fxtod	$nhi,$nhi
+
+	ldx	[%sp+$bias+$frame+0],%o0
+		fmuld	$alo,$ba,$aloa
+	ldx	[%sp+$bias+$frame+8],%o1
+		fmuld	$nlo,$na,$nloa
+	ldx	[%sp+$bias+$frame+16],%o2
+		fmuld	$alo,$bb,$alob
+	ldx	[%sp+$bias+$frame+24],%o3
+		fmuld	$nlo,$nb,$nlob
+
+	srlx	%o0,16,%o7
+	std	$alo,[$ap_l+$j]		! save smashed ap[j] in double format
+		fmuld	$alo,$bc,$aloc
+	add	%o7,%o1,%o1
+	std	$ahi,[$ap_h+$j]
+		faddd	$aloa,$nloa,$nloa
+		fmuld	$nlo,$nc,$nloc
+	srlx	%o1,16,%o7
+	std	$nlo,[$np_l+$j]		! save smashed np[j] in double format
+		fmuld	$alo,$bd,$alod
+	add	%o7,%o2,%o2
+	std	$nhi,[$np_h+$j]
+		faddd	$alob,$nlob,$nlob
+		fmuld	$nlo,$nd,$nlod
+	srlx	%o2,16,%o7
+		fmuld	$ahi,$ba,$ahia
+	add	%o7,%o3,%o3		! %o3.%o2[0..15].%o1[0..15].%o0[0..15]
+		faddd	$aloc,$nloc,$nloc
+		fmuld	$nhi,$na,$nhia
+	!and	%o0,$mask,%o0
+	!and	%o1,$mask,%o1
+	!and	%o2,$mask,%o2
+	!sllx	%o1,16,%o1
+	!sllx	%o2,32,%o2
+	!sllx	%o3,48,%o7
+	!or	%o1,%o0,%o0
+	!or	%o2,%o0,%o0
+	!or	%o7,%o0,%o0		! 64-bit result
+	srlx	%o3,16,%g1		! 34-bit carry
+		fmuld	$ahi,$bb,$ahib
+
+	faddd	$alod,$nlod,$nlod
+		fmuld	$nhi,$nb,$nhib
+		fmuld	$ahi,$bc,$ahic
+	faddd	$ahia,$nhia,$nhia
+		fmuld	$nhi,$nc,$nhic
+		fmuld	$ahi,$bd,$ahid
+	faddd	$ahib,$nhib,$nhib
+		fmuld	$nhi,$nd,$nhid
+
+	faddd	$dota,$nloa,$nloa
+	faddd	$dotb,$nlob,$nlob
+	faddd	$ahic,$nhic,$dota	! $nhic
+	faddd	$ahid,$nhid,$dotb	! $nhid
+
+	faddd	$nloc,$nhia,$nloc
+	faddd	$nlod,$nhib,$nlod
+
+	fdtox	$nloa,$nloa
+	fdtox	$nlob,$nlob
+	fdtox	$nloc,$nloc
+	fdtox	$nlod,$nlod
+
+	std	$nloa,[%sp+$bias+$frame+0]
+	std	$nlob,[%sp+$bias+$frame+8]
+	addcc	$j,8,$j
+	std	$nloc,[%sp+$bias+$frame+16]
+	bz,pn	%icc,.L1stskip
+	std	$nlod,[%sp+$bias+$frame+24]
+
+.align	32			! incidentally already aligned !
+.L1st:
+	add	$ap,$j,%o4
+	add	$np,$j,%o5
+	ld	[%o4+0],$alo_	! load a[j] as pair of 32-bit words
+	fzeros	$alo
+	ld	[%o4+4],$ahi_
+	fzeros	$ahi
+	ld	[%o5+0],$nlo_	! load n[j] as pair of 32-bit words
+	fzeros	$nlo
+	ld	[%o5+4],$nhi_
+	fzeros	$nhi
+
+	fxtod	$alo,$alo
+	fxtod	$ahi,$ahi
+	fxtod	$nlo,$nlo
+	fxtod	$nhi,$nhi
+
+	ldx	[%sp+$bias+$frame+0],%o0
+		fmuld	$alo,$ba,$aloa
+	ldx	[%sp+$bias+$frame+8],%o1
+		fmuld	$nlo,$na,$nloa
+	ldx	[%sp+$bias+$frame+16],%o2
+		fmuld	$alo,$bb,$alob
+	ldx	[%sp+$bias+$frame+24],%o3
+		fmuld	$nlo,$nb,$nlob
+
+	srlx	%o0,16,%o7
+	std	$alo,[$ap_l+$j]		! save smashed ap[j] in double format
+		fmuld	$alo,$bc,$aloc
+	add	%o7,%o1,%o1
+	std	$ahi,[$ap_h+$j]
+		faddd	$aloa,$nloa,$nloa
+		fmuld	$nlo,$nc,$nloc
+	srlx	%o1,16,%o7
+	std	$nlo,[$np_l+$j]		! save smashed np[j] in double format
+		fmuld	$alo,$bd,$alod
+	add	%o7,%o2,%o2
+	std	$nhi,[$np_h+$j]
+		faddd	$alob,$nlob,$nlob
+		fmuld	$nlo,$nd,$nlod
+	srlx	%o2,16,%o7
+		fmuld	$ahi,$ba,$ahia
+	add	%o7,%o3,%o3		! %o3.%o2[0..15].%o1[0..15].%o0[0..15]
+	and	%o0,$mask,%o0
+		faddd	$aloc,$nloc,$nloc
+		fmuld	$nhi,$na,$nhia
+	and	%o1,$mask,%o1
+	and	%o2,$mask,%o2
+		fmuld	$ahi,$bb,$ahib
+	sllx	%o1,16,%o1
+		faddd	$alod,$nlod,$nlod
+		fmuld	$nhi,$nb,$nhib
+	sllx	%o2,32,%o2
+		fmuld	$ahi,$bc,$ahic
+	sllx	%o3,48,%o7
+	or	%o1,%o0,%o0
+		faddd	$ahia,$nhia,$nhia
+		fmuld	$nhi,$nc,$nhic
+	or	%o2,%o0,%o0
+		fmuld	$ahi,$bd,$ahid
+	or	%o7,%o0,%o0		! 64-bit result
+		faddd	$ahib,$nhib,$nhib
+		fmuld	$nhi,$nd,$nhid
+	addcc	%g1,%o0,%o0
+		faddd	$dota,$nloa,$nloa
+	srlx	%o3,16,%g1		! 34-bit carry
+		faddd	$dotb,$nlob,$nlob
+	bcs,a	%xcc,.+8
+	add	%g1,1,%g1
+
+	stx	%o0,[$tp]		! tp[j-1]=
+
+	faddd	$ahic,$nhic,$dota	! $nhic
+	faddd	$ahid,$nhid,$dotb	! $nhid
+
+	faddd	$nloc,$nhia,$nloc
+	faddd	$nlod,$nhib,$nlod
+
+	fdtox	$nloa,$nloa
+	fdtox	$nlob,$nlob
+	fdtox	$nloc,$nloc
+	fdtox	$nlod,$nlod
+
+	std	$nloa,[%sp+$bias+$frame+0]
+	std	$nlob,[%sp+$bias+$frame+8]
+	std	$nloc,[%sp+$bias+$frame+16]
+	std	$nlod,[%sp+$bias+$frame+24]
+
+	addcc	$j,8,$j
+	bnz,pt	%icc,.L1st
+	add	$tp,8,$tp
+
+.L1stskip:
+	fdtox	$dota,$dota
+	fdtox	$dotb,$dotb
+
+	ldx	[%sp+$bias+$frame+0],%o0
+	ldx	[%sp+$bias+$frame+8],%o1
+	ldx	[%sp+$bias+$frame+16],%o2
+	ldx	[%sp+$bias+$frame+24],%o3
+
+	srlx	%o0,16,%o7
+	std	$dota,[%sp+$bias+$frame+32]
+	add	%o7,%o1,%o1
+	std	$dotb,[%sp+$bias+$frame+40]
+	srlx	%o1,16,%o7
+	add	%o7,%o2,%o2
+	srlx	%o2,16,%o7
+	add	%o7,%o3,%o3		! %o3.%o2[0..15].%o1[0..15].%o0[0..15]
+	and	%o0,$mask,%o0
+	and	%o1,$mask,%o1
+	and	%o2,$mask,%o2
+	sllx	%o1,16,%o1
+	sllx	%o2,32,%o2
+	sllx	%o3,48,%o7
+	or	%o1,%o0,%o0
+	or	%o2,%o0,%o0
+	or	%o7,%o0,%o0		! 64-bit result
+	ldx	[%sp+$bias+$frame+32],%o4
+	addcc	%g1,%o0,%o0
+	ldx	[%sp+$bias+$frame+40],%o5
+	srlx	%o3,16,%g1		! 34-bit carry
+	bcs,a	%xcc,.+8
+	add	%g1,1,%g1
+
+	stx	%o0,[$tp]		! tp[j-1]=
+	add	$tp,8,$tp
+
+	srlx	%o4,16,%o7
+	add	%o7,%o5,%o5
+	and	%o4,$mask,%o4
+	sllx	%o5,16,%o7
+	or	%o7,%o4,%o4
+	addcc	%g1,%o4,%o4
+	srlx	%o5,48,%g1
+	bcs,a	%xcc,.+8
+	add	%g1,1,%g1
+
+	mov	%g1,$carry
+	stx	%o4,[$tp]		! tp[num-1]=
+
+	ba	.Louter
+	add	$i,8,$i
+.align	32
+.Louter:
+	sub	%g0,$num,$j		! j=-num
+	add	%sp,$bias+$frame+$locals,$tp
+
+	add	$ap,$j,%o3
+	add	$bp,$i,%o4
+
+	ld	[%o3+4],%g1		! bp[i]
+	ld	[%o3+0],%o0
+	ld	[%o4+4],%g5		! ap[0]
+	sllx	%g1,32,%g1
+	ld	[%o4+0],%o1
+	sllx	%g5,32,%g5
+	or	%g1,%o0,%o0
+	or	%g5,%o1,%o1
+
+	ldx	[$tp],%o2		! tp[0]
+	mulx	%o1,%o0,%o0
+	addcc	%o2,%o0,%o0
+	mulx	$n0,%o0,%o0		! (ap[0]*bp[i]+t[0])*n0
+	stx	%o0,[%sp+$bias+$frame+0]
+
+	! transfer b[i] to FPU as 4x16-bit values
+	ldda	[%o4+2]%asi,$ba
+	ldda	[%o4+0]%asi,$bb
+	ldda	[%o4+6]%asi,$bc
+	ldda	[%o4+4]%asi,$bd
+
+	! transfer (ap[0]*b[i]+t[0])*n0 to FPU as 4x16-bit values
+	ldda	[%sp+$bias+$frame+6]%asi,$na
+	fxtod	$ba,$ba
+	ldda	[%sp+$bias+$frame+4]%asi,$nb
+	fxtod	$bb,$bb
+	ldda	[%sp+$bias+$frame+2]%asi,$nc
+	fxtod	$bc,$bc
+	ldda	[%sp+$bias+$frame+0]%asi,$nd
+	fxtod	$bd,$bd
+	ldd	[$ap_l+$j],$alo		! load a[j] in double format
+	fxtod	$na,$na
+	ldd	[$ap_h+$j],$ahi
+	fxtod	$nb,$nb
+	ldd	[$np_l+$j],$nlo		! load n[j] in double format
+	fxtod	$nc,$nc
+	ldd	[$np_h+$j],$nhi
+	fxtod	$nd,$nd
+
+		fmuld	$alo,$ba,$aloa
+		fmuld	$nlo,$na,$nloa
+		fmuld	$alo,$bb,$alob
+		fmuld	$nlo,$nb,$nlob
+		fmuld	$alo,$bc,$aloc
+	faddd	$aloa,$nloa,$nloa
+		fmuld	$nlo,$nc,$nloc
+		fmuld	$alo,$bd,$alod
+	faddd	$alob,$nlob,$nlob
+		fmuld	$nlo,$nd,$nlod
+		fmuld	$ahi,$ba,$ahia
+	faddd	$aloc,$nloc,$nloc
+		fmuld	$nhi,$na,$nhia
+		fmuld	$ahi,$bb,$ahib
+	faddd	$alod,$nlod,$nlod
+		fmuld	$nhi,$nb,$nhib
+		fmuld	$ahi,$bc,$ahic
+	faddd	$ahia,$nhia,$nhia
+		fmuld	$nhi,$nc,$nhic
+		fmuld	$ahi,$bd,$ahid
+	faddd	$ahib,$nhib,$nhib
+		fmuld	$nhi,$nd,$nhid
+
+	faddd	$ahic,$nhic,$dota	! $nhic
+	faddd	$ahid,$nhid,$dotb	! $nhid
+
+	faddd	$nloc,$nhia,$nloc
+	faddd	$nlod,$nhib,$nlod
+
+	fdtox	$nloa,$nloa
+	fdtox	$nlob,$nlob
+	fdtox	$nloc,$nloc
+	fdtox	$nlod,$nlod
+
+	std	$nloa,[%sp+$bias+$frame+0]
+	std	$nlob,[%sp+$bias+$frame+8]
+	std	$nloc,[%sp+$bias+$frame+16]
+	add	$j,8,$j
+	std	$nlod,[%sp+$bias+$frame+24]
+
+	ldd	[$ap_l+$j],$alo		! load a[j] in double format
+	ldd	[$ap_h+$j],$ahi
+	ldd	[$np_l+$j],$nlo		! load n[j] in double format
+	ldd	[$np_h+$j],$nhi
+
+		fmuld	$alo,$ba,$aloa
+		fmuld	$nlo,$na,$nloa
+		fmuld	$alo,$bb,$alob
+		fmuld	$nlo,$nb,$nlob
+		fmuld	$alo,$bc,$aloc
+	ldx	[%sp+$bias+$frame+0],%o0
+		faddd	$aloa,$nloa,$nloa
+		fmuld	$nlo,$nc,$nloc
+	ldx	[%sp+$bias+$frame+8],%o1
+		fmuld	$alo,$bd,$alod
+	ldx	[%sp+$bias+$frame+16],%o2
+		faddd	$alob,$nlob,$nlob
+		fmuld	$nlo,$nd,$nlod
+	ldx	[%sp+$bias+$frame+24],%o3
+		fmuld	$ahi,$ba,$ahia
+
+	srlx	%o0,16,%o7
+		faddd	$aloc,$nloc,$nloc
+		fmuld	$nhi,$na,$nhia
+	add	%o7,%o1,%o1
+		fmuld	$ahi,$bb,$ahib
+	srlx	%o1,16,%o7
+		faddd	$alod,$nlod,$nlod
+		fmuld	$nhi,$nb,$nhib
+	add	%o7,%o2,%o2
+		fmuld	$ahi,$bc,$ahic
+	srlx	%o2,16,%o7
+		faddd	$ahia,$nhia,$nhia
+		fmuld	$nhi,$nc,$nhic
+	add	%o7,%o3,%o3		! %o3.%o2[0..15].%o1[0..15].%o0[0..15]
+	! why?
+	and	%o0,$mask,%o0
+		fmuld	$ahi,$bd,$ahid
+	and	%o1,$mask,%o1
+	and	%o2,$mask,%o2
+		faddd	$ahib,$nhib,$nhib
+		fmuld	$nhi,$nd,$nhid
+	sllx	%o1,16,%o1
+		faddd	$dota,$nloa,$nloa
+	sllx	%o2,32,%o2
+		faddd	$dotb,$nlob,$nlob
+	sllx	%o3,48,%o7
+	or	%o1,%o0,%o0
+		faddd	$ahic,$nhic,$dota	! $nhic
+	or	%o2,%o0,%o0
+		faddd	$ahid,$nhid,$dotb	! $nhid
+	or	%o7,%o0,%o0		! 64-bit result
+	ldx	[$tp],%o7
+		faddd	$nloc,$nhia,$nloc
+	addcc	%o7,%o0,%o0
+	! end-of-why?
+		faddd	$nlod,$nhib,$nlod
+	srlx	%o3,16,%g1		! 34-bit carry
+		fdtox	$nloa,$nloa
+	bcs,a	%xcc,.+8
+	add	%g1,1,%g1
+
+	fdtox	$nlob,$nlob
+	fdtox	$nloc,$nloc
+	fdtox	$nlod,$nlod
+
+	std	$nloa,[%sp+$bias+$frame+0]
+	std	$nlob,[%sp+$bias+$frame+8]
+	addcc	$j,8,$j
+	std	$nloc,[%sp+$bias+$frame+16]
+	bz,pn	%icc,.Linnerskip
+	std	$nlod,[%sp+$bias+$frame+24]
+
+	ba	.Linner
+	nop
+.align	32
+.Linner:
+	ldd	[$ap_l+$j],$alo		! load a[j] in double format
+	ldd	[$ap_h+$j],$ahi
+	ldd	[$np_l+$j],$nlo		! load n[j] in double format
+	ldd	[$np_h+$j],$nhi
+
+		fmuld	$alo,$ba,$aloa
+		fmuld	$nlo,$na,$nloa
+		fmuld	$alo,$bb,$alob
+		fmuld	$nlo,$nb,$nlob
+		fmuld	$alo,$bc,$aloc
+	ldx	[%sp+$bias+$frame+0],%o0
+		faddd	$aloa,$nloa,$nloa
+		fmuld	$nlo,$nc,$nloc
+	ldx	[%sp+$bias+$frame+8],%o1
+		fmuld	$alo,$bd,$alod
+	ldx	[%sp+$bias+$frame+16],%o2
+		faddd	$alob,$nlob,$nlob
+		fmuld	$nlo,$nd,$nlod
+	ldx	[%sp+$bias+$frame+24],%o3
+		fmuld	$ahi,$ba,$ahia
+
+	srlx	%o0,16,%o7
+		faddd	$aloc,$nloc,$nloc
+		fmuld	$nhi,$na,$nhia
+	add	%o7,%o1,%o1
+		fmuld	$ahi,$bb,$ahib
+	srlx	%o1,16,%o7
+		faddd	$alod,$nlod,$nlod
+		fmuld	$nhi,$nb,$nhib
+	add	%o7,%o2,%o2
+		fmuld	$ahi,$bc,$ahic
+	srlx	%o2,16,%o7
+		faddd	$ahia,$nhia,$nhia
+		fmuld	$nhi,$nc,$nhic
+	add	%o7,%o3,%o3		! %o3.%o2[0..15].%o1[0..15].%o0[0..15]
+	and	%o0,$mask,%o0
+		fmuld	$ahi,$bd,$ahid
+	and	%o1,$mask,%o1
+	and	%o2,$mask,%o2
+		faddd	$ahib,$nhib,$nhib
+		fmuld	$nhi,$nd,$nhid
+	sllx	%o1,16,%o1
+		faddd	$dota,$nloa,$nloa
+	sllx	%o2,32,%o2
+		faddd	$dotb,$nlob,$nlob
+	sllx	%o3,48,%o7
+	or	%o1,%o0,%o0
+		faddd	$ahic,$nhic,$dota	! $nhic
+	or	%o2,%o0,%o0
+		faddd	$ahid,$nhid,$dotb	! $nhid
+	or	%o7,%o0,%o0		! 64-bit result
+		faddd	$nloc,$nhia,$nloc
+	addcc	%g1,%o0,%o0
+	ldx	[$tp+8],%o7		! tp[j]
+		faddd	$nlod,$nhib,$nlod
+	srlx	%o3,16,%g1		! 34-bit carry
+		fdtox	$nloa,$nloa
+	bcs,a	%xcc,.+8
+	add	%g1,1,%g1
+		fdtox	$nlob,$nlob
+	addcc	%o7,%o0,%o0
+		fdtox	$nloc,$nloc
+	bcs,a	%xcc,.+8
+	add	%g1,1,%g1
+
+	stx	%o0,[$tp]		! tp[j-1]
+		fdtox	$nlod,$nlod
+
+	std	$nloa,[%sp+$bias+$frame+0]
+	std	$nlob,[%sp+$bias+$frame+8]
+	std	$nloc,[%sp+$bias+$frame+16]
+	addcc	$j,8,$j
+	std	$nlod,[%sp+$bias+$frame+24]
+	bnz,pt	%icc,.Linner
+	add	$tp,8,$tp
+
+.Linnerskip:
+	fdtox	$dota,$dota
+	fdtox	$dotb,$dotb
+
+	ldx	[%sp+$bias+$frame+0],%o0
+	ldx	[%sp+$bias+$frame+8],%o1
+	ldx	[%sp+$bias+$frame+16],%o2
+	ldx	[%sp+$bias+$frame+24],%o3
+
+	srlx	%o0,16,%o7
+	std	$dota,[%sp+$bias+$frame+32]
+	add	%o7,%o1,%o1
+	std	$dotb,[%sp+$bias+$frame+40]
+	srlx	%o1,16,%o7
+	add	%o7,%o2,%o2
+	srlx	%o2,16,%o7
+	add	%o7,%o3,%o3		! %o3.%o2[0..15].%o1[0..15].%o0[0..15]
+	and	%o0,$mask,%o0
+	and	%o1,$mask,%o1
+	and	%o2,$mask,%o2
+	sllx	%o1,16,%o1
+	sllx	%o2,32,%o2
+	sllx	%o3,48,%o7
+	or	%o1,%o0,%o0
+	or	%o2,%o0,%o0
+	ldx	[%sp+$bias+$frame+32],%o4
+	or	%o7,%o0,%o0		! 64-bit result
+	ldx	[%sp+$bias+$frame+40],%o5
+	addcc	%g1,%o0,%o0
+	ldx	[$tp+8],%o7		! tp[j]
+	srlx	%o3,16,%g1		! 34-bit carry
+	bcs,a	%xcc,.+8
+	add	%g1,1,%g1
+
+	addcc	%o7,%o0,%o0
+	bcs,a	%xcc,.+8
+	add	%g1,1,%g1
+
+	stx	%o0,[$tp]		! tp[j-1]
+	add	$tp,8,$tp
+
+	srlx	%o4,16,%o7
+	add	%o7,%o5,%o5
+	and	%o4,$mask,%o4
+	sllx	%o5,16,%o7
+	or	%o7,%o4,%o4
+	addcc	%g1,%o4,%o4
+	srlx	%o5,48,%g1
+	bcs,a	%xcc,.+8
+	add	%g1,1,%g1
+
+	addcc	$carry,%o4,%o4
+	stx	%o4,[$tp]		! tp[num-1]
+	mov	%g1,$carry
+	bcs,a	%xcc,.+8
+	add	$carry,1,$carry
+
+	addcc	$i,8,$i
+	bnz	%icc,.Louter
+	nop
+
+	add	$tp,8,$tp		! adjust tp to point at the end
+	orn	%g0,%g0,%g4
+	sub	%g0,$num,%o7		! n=-num
+	ba	.Lsub
+	subcc	%g0,%g0,%g0		! clear %icc.c
+
+.align	32
+.Lsub:
+	ldx	[$tp+%o7],%o0
+	add	$np,%o7,%g1
+	ld	[%g1+0],%o2
+	ld	[%g1+4],%o3
+	srlx	%o0,32,%o1
+	subccc	%o0,%o2,%o2
+	add	$rp,%o7,%g1
+	subccc	%o1,%o3,%o3
+	st	%o2,[%g1+0]
+	add	%o7,8,%o7
+	brnz,pt	%o7,.Lsub
+	st	%o3,[%g1+4]
+	subc	$carry,0,%g4
+	sub	%g0,$num,%o7		! n=-num
+	ba	.Lcopy
+	nop
+
+.align	32
+.Lcopy:
+	ldx	[$tp+%o7],%o0
+	add	$rp,%o7,%g1
+	ld	[%g1+0],%o2
+	ld	[%g1+4],%o3
+	stx	%g0,[$tp+%o7]
+	and	%o0,%g4,%o0
+	srlx	%o0,32,%o1
+	andn	%o2,%g4,%o2
+	andn	%o3,%g4,%o3
+	or	%o2,%o0,%o0
+	or	%o3,%o1,%o1
+	st	%o0,[%g1+0]
+	add	%o7,8,%o7
+	brnz,pt	%o7,.Lcopy
+	st	%o1,[%g1+4]
+	sub	%g0,$num,%o7		! n=-num
+
+.Lzap:
+	stx	%g0,[$ap_l+%o7]
+	stx	%g0,[$ap_h+%o7]
+	stx	%g0,[$np_l+%o7]
+	stx	%g0,[$np_h+%o7]
+	add	%o7,8,%o7
+	brnz,pt	%o7,.Lzap
+	nop
+
+	ldx	[%sp+$bias+$frame+48],%o7
+	wr	%g0,%o7,%asi		! restore %asi
+
+	mov	1,%i0
+.Lret:
+	ret
+	restore
+.type   $fname,#function
+.size	$fname,(.-$fname)
+.asciz	"Montgomery Multiplication for UltraSPARC, CRYPTOGAMS by <appro\@openssl.org>"
+.align	32
+___
+
+$code =~ s/\`([^\`]*)\`/eval($1)/gem;
+
+# Below substitution makes it possible to compile without demanding
+# VIS extensions on command line, e.g. -xarch=v9 vs. -xarch=v9a. I
+# dare to do this, because VIS capability is detected at run-time now
+# and this routine is not called on CPU not capable to execute it. Do
+# note that fzeros is not the only VIS dependency! Another dependency
+# is implicit and is just _a_ numerical value loaded to %asi register,
+# which assembler can't recognize as VIS specific...
+$code =~ s/fzeros\s+%f([0-9]+)/
+	   sprintf(".word\t0x%x\t! fzeros %%f%d",0x81b00c20|($1<<25),$1)
+	  /gem;
+
+print $code;
+# flush
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/via-mont.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/via-mont.pl
new file mode 100644
index 000000000..9cf717e84
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/via-mont.pl
@@ -0,0 +1,251 @@
+#! /usr/bin/env perl
+# Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# Wrapper around 'rep montmul', VIA-specific instruction accessing
+# PadLock Montgomery Multiplier. The wrapper is designed as drop-in
+# replacement for OpenSSL bn_mul_mont [first implemented in 0.9.9].
+#
+# Below are interleaved outputs from 'openssl speed rsa dsa' for 4
+# different software configurations on 1.5GHz VIA Esther processor.
+# Lines marked with "software integer" denote performance of hand-
+# coded integer-only assembler found in OpenSSL 0.9.7. "Software SSE2"
+# refers to hand-coded SSE2 Montgomery multiplication procedure found
+# OpenSSL 0.9.9. "Hardware VIA SDK" refers to padlock_pmm routine from
+# Padlock SDK 2.0.1 available for download from VIA, which naturally
+# utilizes the magic 'repz montmul' instruction. And finally "hardware
+# this" refers to *this* implementation which also uses 'repz montmul'
+#
+#                   sign    verify    sign/s verify/s
+# rsa  512 bits 0.001720s 0.000140s    581.4   7149.7	software integer
+# rsa  512 bits 0.000690s 0.000086s   1450.3  11606.0	software SSE2
+# rsa  512 bits 0.006136s 0.000201s    163.0   4974.5	hardware VIA SDK
+# rsa  512 bits 0.000712s 0.000050s   1404.9  19858.5	hardware this
+#
+# rsa 1024 bits 0.008518s 0.000413s    117.4   2420.8	software integer
+# rsa 1024 bits 0.004275s 0.000277s    233.9   3609.7	software SSE2
+# rsa 1024 bits 0.012136s 0.000260s     82.4   3844.5	hardware VIA SDK
+# rsa 1024 bits 0.002522s 0.000116s    396.5   8650.9	hardware this
+#
+# rsa 2048 bits 0.050101s 0.001371s     20.0    729.6	software integer
+# rsa 2048 bits 0.030273s 0.001008s     33.0    991.9	software SSE2
+# rsa 2048 bits 0.030833s 0.000976s     32.4   1025.1	hardware VIA SDK
+# rsa 2048 bits 0.011879s 0.000342s     84.2   2921.7	hardware this
+#
+# rsa 4096 bits 0.327097s 0.004859s      3.1    205.8	software integer
+# rsa 4096 bits 0.229318s 0.003859s      4.4    259.2	software SSE2
+# rsa 4096 bits 0.233953s 0.003274s      4.3    305.4	hardware VIA SDK
+# rsa 4096 bits 0.070493s 0.001166s     14.2    857.6	hardware this
+#
+# dsa  512 bits 0.001342s 0.001651s    745.2    605.7	software integer
+# dsa  512 bits 0.000844s 0.000987s   1185.3   1013.1	software SSE2
+# dsa  512 bits 0.001902s 0.002247s    525.6    444.9	hardware VIA SDK
+# dsa  512 bits 0.000458s 0.000524s   2182.2   1909.1	hardware this
+#
+# dsa 1024 bits 0.003964s 0.004926s    252.3    203.0	software integer
+# dsa 1024 bits 0.002686s 0.003166s    372.3    315.8	software SSE2
+# dsa 1024 bits 0.002397s 0.002823s    417.1    354.3	hardware VIA SDK
+# dsa 1024 bits 0.000978s 0.001170s   1022.2    855.0	hardware this
+#
+# dsa 2048 bits 0.013280s 0.016518s     75.3     60.5	software integer
+# dsa 2048 bits 0.009911s 0.011522s    100.9     86.8	software SSE2
+# dsa 2048 bits 0.009542s 0.011763s    104.8     85.0	hardware VIA SDK
+# dsa 2048 bits 0.002884s 0.003352s    346.8    298.3	hardware this
+#
+# To give you some other reference point here is output for 2.4GHz P4
+# running hand-coded SSE2 bn_mul_mont found in 0.9.9, i.e. "software
+# SSE2" in above terms.
+#
+# rsa  512 bits 0.000407s 0.000047s   2454.2  21137.0
+# rsa 1024 bits 0.002426s 0.000141s    412.1   7100.0
+# rsa 2048 bits 0.015046s 0.000491s     66.5   2034.9
+# rsa 4096 bits 0.109770s 0.002379s      9.1    420.3
+# dsa  512 bits 0.000438s 0.000525s   2281.1   1904.1
+# dsa 1024 bits 0.001346s 0.001595s    742.7    627.0
+# dsa 2048 bits 0.004745s 0.005582s    210.7    179.1
+#
+# Conclusions:
+# - VIA SDK leaves a *lot* of room for improvement (which this
+#   implementation successfully fills:-);
+# - 'rep montmul' gives up to >3x performance improvement depending on
+#   key length;
+# - in terms of absolute performance it delivers approximately as much
+#   as modern out-of-order 32-bit cores [again, for longer keys].
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output = pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0]);
+
+# int bn_mul_mont(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp, const BN_ULONG *np,const BN_ULONG *n0, int num);
+$func="bn_mul_mont_padlock";
+
+$pad=16*1;	# amount of reserved bytes on top of every vector
+
+# stack layout
+$mZeroPrime=&DWP(0,"esp");		# these are specified by VIA
+$A=&DWP(4,"esp");
+$B=&DWP(8,"esp");
+$T=&DWP(12,"esp");
+$M=&DWP(16,"esp");
+$scratch=&DWP(20,"esp");
+$rp=&DWP(24,"esp");			# these are mine
+$sp=&DWP(28,"esp");
+# &DWP(32,"esp")			# 32 byte scratch area
+# &DWP(64+(4*$num+$pad)*0,"esp")	# padded tp[num]
+# &DWP(64+(4*$num+$pad)*1,"esp")	# padded copy of ap[num]
+# &DWP(64+(4*$num+$pad)*2,"esp")	# padded copy of bp[num]
+# &DWP(64+(4*$num+$pad)*3,"esp")	# padded copy of np[num]
+# Note that SDK suggests to unconditionally allocate 2K per vector. This
+# has quite an impact on performance. It naturally depends on key length,
+# but to give an example 1024 bit private RSA key operations suffer >30%
+# penalty. I allocate only as much as actually required...
+
+&function_begin($func);
+	&xor	("eax","eax");
+	&mov	("ecx",&wparam(5));	# num
+	# meet VIA's limitations for num [note that the specification
+	# expresses them in bits, while we work with amount of 32-bit words]
+	&test	("ecx",3);
+	&jnz	(&label("leave"));	# num % 4 != 0
+	&cmp	("ecx",8);
+	&jb	(&label("leave"));	# num < 8
+	&cmp	("ecx",1024);
+	&ja	(&label("leave"));	# num > 1024
+
+	&pushf	();
+	&cld	();
+
+	&mov	("edi",&wparam(0));	# rp
+	&mov	("eax",&wparam(1));	# ap
+	&mov	("ebx",&wparam(2));	# bp
+	&mov	("edx",&wparam(3));	# np
+	&mov	("esi",&wparam(4));	# n0
+	&mov	("esi",&DWP(0,"esi"));	# *n0
+
+	&lea	("ecx",&DWP($pad,"","ecx",4));	# ecx becomes vector size in bytes
+	&lea	("ebp",&DWP(64,"","ecx",4));	# allocate 4 vectors + 64 bytes
+	&neg	("ebp");
+	&add	("ebp","esp");
+	&and	("ebp",-64);		# align to cache-line
+	&xchg	("ebp","esp");		# alloca
+
+	&mov	($rp,"edi");		# save rp
+	&mov	($sp,"ebp");		# save esp
+
+	&mov	($mZeroPrime,"esi");
+	&lea	("esi",&DWP(64,"esp"));	# tp
+	&mov	($T,"esi");
+	&lea	("edi",&DWP(32,"esp"));	# scratch area
+	&mov	($scratch,"edi");
+	&mov	("esi","eax");
+
+	&lea	("ebp",&DWP(-$pad,"ecx"));
+	&shr	("ebp",2);		# restore original num value in ebp
+
+	&xor	("eax","eax");
+
+	&mov	("ecx","ebp");
+	&lea	("ecx",&DWP((32+$pad)/4,"ecx"));# padded tp + scratch
+	&data_byte(0xf3,0xab);		# rep stosl, bzero
+
+	&mov	("ecx","ebp");
+	&lea	("edi",&DWP(64+$pad,"esp","ecx",4));# pointer to ap copy
+	&mov	($A,"edi");
+	&data_byte(0xf3,0xa5);		# rep movsl, memcpy
+	&mov	("ecx",$pad/4);
+	&data_byte(0xf3,0xab);		# rep stosl, bzero pad
+	# edi points at the end of padded ap copy...
+
+	&mov	("ecx","ebp");
+	&mov	("esi","ebx");
+	&mov	($B,"edi");
+	&data_byte(0xf3,0xa5);		# rep movsl, memcpy
+	&mov	("ecx",$pad/4);
+	&data_byte(0xf3,0xab);		# rep stosl, bzero pad
+	# edi points at the end of padded bp copy...
+
+	&mov	("ecx","ebp");
+	&mov	("esi","edx");
+	&mov	($M,"edi");
+	&data_byte(0xf3,0xa5);		# rep movsl, memcpy
+	&mov	("ecx",$pad/4);
+	&data_byte(0xf3,0xab);		# rep stosl, bzero pad
+	# edi points at the end of padded np copy...
+
+	# let magic happen...
+	&mov	("ecx","ebp");
+	&mov	("esi","esp");
+	&shl	("ecx",5);		# convert word counter to bit counter
+	&align	(4);
+	&data_byte(0xf3,0x0f,0xa6,0xc0);# rep montmul
+
+	&mov	("ecx","ebp");
+	&lea	("esi",&DWP(64,"esp"));		# tp
+	# edi still points at the end of padded np copy...
+	&neg	("ebp");
+	&lea	("ebp",&DWP(-$pad,"edi","ebp",4));	# so just "rewind"
+	&mov	("edi",$rp);			# restore rp
+	&xor	("edx","edx");			# i=0 and clear CF
+
+&set_label("sub",8);
+	&mov	("eax",&DWP(0,"esi","edx",4));
+	&sbb	("eax",&DWP(0,"ebp","edx",4));
+	&mov	(&DWP(0,"edi","edx",4),"eax");	# rp[i]=tp[i]-np[i]
+	&lea	("edx",&DWP(1,"edx"));		# i++
+	&loop	(&label("sub"));		# doesn't affect CF!
+
+	&mov	("eax",&DWP(0,"esi","edx",4));	# upmost overflow bit
+	&sbb	("eax",0);
+
+	&mov	("ecx","edx");			# num
+	&mov	("edx",0);			# i=0
+
+&set_label("copy",8);
+	&mov	("ebx",&DWP(0,"esi","edx",4));
+	&mov	("eax",&DWP(0,"edi","edx",4));
+	&mov	(&DWP(0,"esi","edx",4),"ecx");	# zap tp
+	&cmovc	("eax","ebx");
+	&mov	(&DWP(0,"edi","edx",4),"eax");
+	&lea	("edx",&DWP(1,"edx"));		# i++
+	&loop	(&label("copy"));
+
+	&mov	("ebp",$sp);
+	&xor	("eax","eax");
+
+	&mov	("ecx",64/4);
+	&mov	("edi","esp");		# zap frame including scratch area
+	&data_byte(0xf3,0xab);		# rep stosl, bzero
+
+	# zap copies of ap, bp and np
+	&lea	("edi",&DWP(64+$pad,"esp","edx",4));# pointer to ap
+	&lea	("ecx",&DWP(3*$pad/4,"edx","edx",2));
+	&data_byte(0xf3,0xab);		# rep stosl, bzero
+
+	&mov	("esp","ebp");
+	&inc	("eax");		# signal "done"
+	&popf	();
+&set_label("leave");
+&function_end($func);
+
+&asciz("Padlock Montgomery Multiplication, CRYPTOGAMS by <appro\@openssl.org>");
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/vis3-mont.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/vis3-mont.pl
new file mode 100644
index 000000000..04833a0c8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/vis3-mont.pl
@@ -0,0 +1,384 @@
+#! /usr/bin/env perl
+# Copyright 2012-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# October 2012.
+#
+# SPARCv9 VIS3 Montgomery multiplication procedure suitable for T3 and
+# onward. There are three new instructions used here: umulxhi,
+# addxc[cc] and initializing store. On T3 RSA private key operations
+# are 1.54/1.87/2.11/2.26 times faster for 512/1024/2048/4096-bit key
+# lengths. This is without dedicated squaring procedure. On T4
+# corresponding coefficients are 1.47/2.10/2.80/2.90x, which is mostly
+# for reference purposes, because T4 has dedicated Montgomery
+# multiplication and squaring *instructions* that deliver even more.
+
+$output = pop;
+open STDOUT,">$output";
+
+$frame = "STACK_FRAME";
+$bias = "STACK_BIAS";
+
+$code.=<<___;
+#include "sparc_arch.h"
+
+#ifdef	__arch64__
+.register	%g2,#scratch
+.register	%g3,#scratch
+#endif
+
+.section	".text",#alloc,#execinstr
+___
+
+($n0,$m0,$m1,$lo0,$hi0, $lo1,$hi1,$aj,$alo,$nj,$nlo,$tj)=
+	(map("%g$_",(1..5)),map("%o$_",(0..5,7)));
+
+# int bn_mul_mont(
+$rp="%o0";	# BN_ULONG *rp,
+$ap="%o1";	# const BN_ULONG *ap,
+$bp="%o2";	# const BN_ULONG *bp,
+$np="%o3";	# const BN_ULONG *np,
+$n0p="%o4";	# const BN_ULONG *n0,
+$num="%o5";	# int num);	# caller ensures that num is even
+				# and >=6
+$code.=<<___;
+.globl	bn_mul_mont_vis3
+.align	32
+bn_mul_mont_vis3:
+	add	%sp,	$bias,	%g4	! real top of stack
+	sll	$num,	2,	$num	! size in bytes
+	add	$num,	63,	%g5
+	andn	%g5,	63,	%g5	! buffer size rounded up to 64 bytes
+	add	%g5,	%g5,	%g1
+	add	%g5,	%g1,	%g1	! 3*buffer size
+	sub	%g4,	%g1,	%g1
+	andn	%g1,	63,	%g1	! align at 64 byte
+	sub	%g1,	$frame,	%g1	! new top of stack
+	sub	%g1,	%g4,	%g1
+
+	save	%sp,	%g1,	%sp
+___
+
+#	+-------------------------------+<-----	%sp
+#	.				.
+#	+-------------------------------+<-----	aligned at 64 bytes
+#	| __int64 tmp[0]		|
+#	+-------------------------------+
+#	.				.
+#	.				.
+#	+-------------------------------+<----- aligned at 64 bytes
+#	| __int64 ap[1..0]		|	converted ap[]
+#	+-------------------------------+
+#	| __int64 np[1..0]		|	converted np[]
+#	+-------------------------------+
+#	| __int64 ap[3..2]		|
+#	.				.
+#	.				.
+#	+-------------------------------+
+($rp,$ap,$bp,$np,$n0p,$num)=map("%i$_",(0..5));
+($t0,$t1,$t2,$t3,$cnt,$tp,$bufsz,$anp)=map("%l$_",(0..7));
+($ovf,$i)=($t0,$t1);
+$code.=<<___;
+	ld	[$n0p+0],	$t0	! pull n0[0..1] value
+	add	%sp, $bias+$frame, $tp
+	ld	[$n0p+4],	$t1
+	add	$tp,	%g5,	$anp
+	ld	[$bp+0],	$t2	! m0=bp[0]
+	sllx	$t1,	32,	$n0
+	ld	[$bp+4],	$t3
+	or	$t0,	$n0,	$n0
+	add	$bp,	8,	$bp
+
+	ld	[$ap+0],	$t0	! ap[0]
+	sllx	$t3,	32,	$m0
+	ld	[$ap+4],	$t1
+	or	$t2,	$m0,	$m0
+
+	ld	[$ap+8],	$t2	! ap[1]
+	sllx	$t1,	32,	$aj
+	ld	[$ap+12],	$t3
+	or	$t0,	$aj,	$aj
+	add	$ap,	16,	$ap
+	stx	$aj,	[$anp]		! converted ap[0]
+
+	mulx	$aj,	$m0,	$lo0	! ap[0]*bp[0]
+	umulxhi	$aj,	$m0,	$hi0
+
+	ld	[$np+0],	$t0	! np[0]
+	sllx	$t3,	32,	$aj
+	ld	[$np+4],	$t1
+	or	$t2,	$aj,	$aj
+
+	ld	[$np+8],	$t2	! np[1]
+	sllx	$t1,	32,	$nj
+	ld	[$np+12],	$t3
+	or	$t0, $nj,	$nj
+	add	$np,	16,	$np
+	stx	$nj,	[$anp+8]	! converted np[0]
+
+	mulx	$lo0,	$n0,	$m1	! "tp[0]"*n0
+	stx	$aj,	[$anp+16]	! converted ap[1]
+
+	mulx	$aj,	$m0,	$alo	! ap[1]*bp[0]
+	umulxhi	$aj,	$m0,	$aj	! ahi=aj
+
+	mulx	$nj,	$m1,	$lo1	! np[0]*m1
+	umulxhi	$nj,	$m1,	$hi1
+
+	sllx	$t3,	32,	$nj
+	or	$t2,	$nj,	$nj
+	stx	$nj,	[$anp+24]	! converted np[1]
+	add	$anp,	32,	$anp
+
+	addcc	$lo0,	$lo1,	$lo1
+	addxc	%g0,	$hi1,	$hi1
+
+	mulx	$nj,	$m1,	$nlo	! np[1]*m1
+	umulxhi	$nj,	$m1,	$nj	! nhi=nj
+
+	ba	.L1st
+	sub	$num,	24,	$cnt	! cnt=num-3
+
+.align	16
+.L1st:
+	ld	[$ap+0],	$t0	! ap[j]
+	addcc	$alo,	$hi0,	$lo0
+	ld	[$ap+4],	$t1
+	addxc	$aj,	%g0,	$hi0
+
+	sllx	$t1,	32,	$aj
+	add	$ap,	8,	$ap
+	or	$t0,	$aj,	$aj
+	stx	$aj,	[$anp]		! converted ap[j]
+
+	ld	[$np+0],	$t2	! np[j]
+	addcc	$nlo,	$hi1,	$lo1
+	ld	[$np+4],	$t3
+	addxc	$nj,	%g0,	$hi1	! nhi=nj
+
+	sllx	$t3,	32,	$nj
+	add	$np,	8,	$np
+	mulx	$aj,	$m0,	$alo	! ap[j]*bp[0]
+	or	$t2,	$nj,	$nj
+	umulxhi	$aj,	$m0,	$aj	! ahi=aj
+	stx	$nj,	[$anp+8]	! converted np[j]
+	add	$anp,	16,	$anp	! anp++
+
+	mulx	$nj,	$m1,	$nlo	! np[j]*m1
+	addcc	$lo0,	$lo1,	$lo1	! np[j]*m1+ap[j]*bp[0]
+	umulxhi	$nj,	$m1,	$nj	! nhi=nj
+	addxc	%g0,	$hi1,	$hi1
+	stx	$lo1,	[$tp]		! tp[j-1]
+	add	$tp,	8,	$tp	! tp++
+
+	brnz,pt	$cnt,	.L1st
+	sub	$cnt,	8,	$cnt	! j--
+!.L1st
+	addcc	$alo,	$hi0,	$lo0
+	addxc	$aj,	%g0,	$hi0	! ahi=aj
+
+	addcc	$nlo,	$hi1,	$lo1
+	addxc	$nj,	%g0,	$hi1
+	addcc	$lo0,	$lo1,	$lo1	! np[j]*m1+ap[j]*bp[0]
+	addxc	%g0,	$hi1,	$hi1
+	stx	$lo1,	[$tp]		! tp[j-1]
+	add	$tp,	8,	$tp
+
+	addcc	$hi0,	$hi1,	$hi1
+	addxc	%g0,	%g0,	$ovf	! upmost overflow bit
+	stx	$hi1,	[$tp]
+	add	$tp,	8,	$tp
+
+	ba	.Louter
+	sub	$num,	16,	$i	! i=num-2
+
+.align	16
+.Louter:
+	ld	[$bp+0],	$t2	! m0=bp[i]
+	ld	[$bp+4],	$t3
+
+	sub	$anp,	$num,	$anp	! rewind
+	sub	$tp,	$num,	$tp
+	sub	$anp,	$num,	$anp
+
+	add	$bp,	8,	$bp
+	sllx	$t3,	32,	$m0
+	ldx	[$anp+0],	$aj	! ap[0]
+	or	$t2,	$m0,	$m0
+	ldx	[$anp+8],	$nj	! np[0]
+
+	mulx	$aj,	$m0,	$lo0	! ap[0]*bp[i]
+	ldx	[$tp],		$tj	! tp[0]
+	umulxhi	$aj,	$m0,	$hi0
+	ldx	[$anp+16],	$aj	! ap[1]
+	addcc	$lo0,	$tj,	$lo0	! ap[0]*bp[i]+tp[0]
+	mulx	$aj,	$m0,	$alo	! ap[1]*bp[i]
+	addxc	%g0,	$hi0,	$hi0
+	mulx	$lo0,	$n0,	$m1	! tp[0]*n0
+	umulxhi	$aj,	$m0,	$aj	! ahi=aj
+	mulx	$nj,	$m1,	$lo1	! np[0]*m1
+	umulxhi	$nj,	$m1,	$hi1
+	ldx	[$anp+24],	$nj	! np[1]
+	add	$anp,	32,	$anp
+	addcc	$lo1,	$lo0,	$lo1
+	mulx	$nj,	$m1,	$nlo	! np[1]*m1
+	addxc	%g0,	$hi1,	$hi1
+	umulxhi	$nj,	$m1,	$nj	! nhi=nj
+
+	ba	.Linner
+	sub	$num,	24,	$cnt	! cnt=num-3
+.align	16
+.Linner:
+	addcc	$alo,	$hi0,	$lo0
+	ldx	[$tp+8],	$tj	! tp[j]
+	addxc	$aj,	%g0,	$hi0	! ahi=aj
+	ldx	[$anp+0],	$aj	! ap[j]
+	addcc	$nlo,	$hi1,	$lo1
+	mulx	$aj,	$m0,	$alo	! ap[j]*bp[i]
+	addxc	$nj,	%g0,	$hi1	! nhi=nj
+	ldx	[$anp+8],	$nj	! np[j]
+	add	$anp,	16,	$anp
+	umulxhi	$aj,	$m0,	$aj	! ahi=aj
+	addcc	$lo0,	$tj,	$lo0	! ap[j]*bp[i]+tp[j]
+	mulx	$nj,	$m1,	$nlo	! np[j]*m1
+	addxc	%g0,	$hi0,	$hi0
+	umulxhi	$nj,	$m1,	$nj	! nhi=nj
+	addcc	$lo1,	$lo0,	$lo1	! np[j]*m1+ap[j]*bp[i]+tp[j]
+	addxc	%g0,	$hi1,	$hi1
+	stx	$lo1,	[$tp]		! tp[j-1]
+	add	$tp,	8,	$tp
+	brnz,pt	$cnt,	.Linner
+	sub	$cnt,	8,	$cnt
+!.Linner
+	ldx	[$tp+8],	$tj	! tp[j]
+	addcc	$alo,	$hi0,	$lo0
+	addxc	$aj,	%g0,	$hi0	! ahi=aj
+	addcc	$lo0,	$tj,	$lo0	! ap[j]*bp[i]+tp[j]
+	addxc	%g0,	$hi0,	$hi0
+
+	addcc	$nlo,	$hi1,	$lo1
+	addxc	$nj,	%g0,	$hi1	! nhi=nj
+	addcc	$lo1,	$lo0,	$lo1	! np[j]*m1+ap[j]*bp[i]+tp[j]
+	addxc	%g0,	$hi1,	$hi1
+	stx	$lo1,	[$tp]		! tp[j-1]
+
+	subcc	%g0,	$ovf,	%g0	! move upmost overflow to CCR.xcc
+	addxccc	$hi1,	$hi0,	$hi1
+	addxc	%g0,	%g0,	$ovf
+	stx	$hi1,	[$tp+8]
+	add	$tp,	16,	$tp
+
+	brnz,pt	$i,	.Louter
+	sub	$i,	8,	$i
+
+	sub	$anp,	$num,	$anp	! rewind
+	sub	$tp,	$num,	$tp
+	sub	$anp,	$num,	$anp
+	ba	.Lsub
+	subcc	$num,	8,	$cnt	! cnt=num-1 and clear CCR.xcc
+
+.align	16
+.Lsub:
+	ldx	[$tp],		$tj
+	add	$tp,	8,	$tp
+	ldx	[$anp+8],	$nj
+	add	$anp,	16,	$anp
+	subccc	$tj,	$nj,	$t2	! tp[j]-np[j]
+	srlx	$tj,	32,	$tj
+	srlx	$nj,	32,	$nj
+	subccc	$tj,	$nj,	$t3
+	add	$rp,	8,	$rp
+	st	$t2,	[$rp-4]		! reverse order
+	st	$t3,	[$rp-8]
+	brnz,pt	$cnt,	.Lsub
+	sub	$cnt,	8,	$cnt
+
+	sub	$anp,	$num,	$anp	! rewind
+	sub	$tp,	$num,	$tp
+	sub	$anp,	$num,	$anp
+	sub	$rp,	$num,	$rp
+
+	subccc	$ovf,	%g0,	$ovf	! handle upmost overflow bit
+	ba	.Lcopy
+	sub	$num,	8,	$cnt
+
+.align	16
+.Lcopy:					! conditional copy
+	ld	[$tp+0],	$t0
+	ld	[$tp+4],	$t1
+	ld	[$rp+0],	$t2
+	ld	[$rp+4],	$t3
+	stx	%g0,	[$tp]		! zap
+	add	$tp,	8,	$tp
+	stx	%g0,	[$anp]		! zap
+	stx	%g0,	[$anp+8]
+	add	$anp,	16,	$anp
+	movcs	%icc,	$t0,	$t2
+	movcs	%icc,	$t1,	$t3
+	st	$t3,	[$rp+0]		! flip order
+	st	$t2,	[$rp+4]
+	add	$rp,	8,	$rp
+	brnz	$cnt,	.Lcopy
+	sub	$cnt,	8,	$cnt
+
+	mov	1,	%o0
+	ret
+	restore
+.type	bn_mul_mont_vis3, #function
+.size	bn_mul_mont_vis3, .-bn_mul_mont_vis3
+.asciz  "Montgomery Multiplication for SPARCv9 VIS3, CRYPTOGAMS by <appro\@openssl.org>"
+.align	4
+___
+
+# Purpose of these subroutines is to explicitly encode VIS instructions,
+# so that one can compile the module without having to specify VIS
+# extensions on compiler command line, e.g. -xarch=v9 vs. -xarch=v9a.
+# Idea is to reserve for option to produce "universal" binary and let
+# programmer detect if current CPU is VIS capable at run-time.
+sub unvis3 {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my %bias = ( "g" => 0, "o" => 8, "l" => 16, "i" => 24 );
+my ($ref,$opf);
+my %visopf = (	"addxc"		=> 0x011,
+		"addxccc"	=> 0x013,
+		"umulxhi"	=> 0x016	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rd";
+
+    if ($opf=$visopf{$mnemonic}) {
+	foreach ($rs1,$rs2,$rd) {
+	    return $ref if (!/%([goli])([0-9])/);
+	    $_=$bias{$1}+$2;
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			0x81b00000|$rd<<25|$rs1<<14|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	s/\b(umulxhi|addxc[c]{0,2})\s+(%[goli][0-7]),\s*(%[goli][0-7]),\s*(%[goli][0-7])/
+		&unvis3($1,$2,$3,$4)
+	 /ge;
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86-gf2m.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86-gf2m.pl
new file mode 100644
index 000000000..d03efcc75
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86-gf2m.pl
@@ -0,0 +1,325 @@
+#! /usr/bin/env perl
+# Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# May 2011
+#
+# The module implements bn_GF2m_mul_2x2 polynomial multiplication used
+# in bn_gf2m.c. It's kind of low-hanging mechanical port from C for
+# the time being... Except that it has three code paths: pure integer
+# code suitable for any x86 CPU, MMX code suitable for PIII and later
+# and PCLMULQDQ suitable for Westmere and later. Improvement varies
+# from one benchmark and µ-arch to another. Below are interval values
+# for 163- and 571-bit ECDH benchmarks relative to compiler-generated
+# code:
+#
+# PIII		16%-30%
+# P4		12%-12%
+# Opteron	18%-40%
+# Core2		19%-44%
+# Atom		38%-64%
+# Westmere	53%-121%(PCLMULQDQ)/20%-32%(MMX)
+# Sandy Bridge	72%-127%(PCLMULQDQ)/27%-23%(MMX)
+#
+# Note that above improvement coefficients are not coefficients for
+# bn_GF2m_mul_2x2 itself. For example 120% ECDH improvement is result
+# of bn_GF2m_mul_2x2 being >4x faster. As it gets faster, benchmark
+# is more and more dominated by other subroutines, most notably by
+# BN_GF2m_mod[_mul]_arr...
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output = pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0],$x86only = $ARGV[$#ARGV] eq "386");
+
+$sse2=0;
+for (@ARGV) { $sse2=1 if (/-DOPENSSL_IA32_SSE2/); }
+
+&external_label("OPENSSL_ia32cap_P") if ($sse2);
+
+$a="eax";
+$b="ebx";
+($a1,$a2,$a4)=("ecx","edx","ebp");
+
+$R="mm0";
+@T=("mm1","mm2");
+($A,$B,$B30,$B31)=("mm2","mm3","mm4","mm5");
+@i=("esi","edi");
+
+					if (!$x86only) {
+&function_begin_B("_mul_1x1_mmx");
+	&sub	("esp",32+4);
+	 &mov	($a1,$a);
+	 &lea	($a2,&DWP(0,$a,$a));
+	 &and	($a1,0x3fffffff);
+	 &lea	($a4,&DWP(0,$a2,$a2));
+	 &mov	(&DWP(0*4,"esp"),0);
+	 &and	($a2,0x7fffffff);
+	&movd	($A,$a);
+	&movd	($B,$b);
+	 &mov	(&DWP(1*4,"esp"),$a1);	# a1
+	 &xor	($a1,$a2);		# a1^a2
+	&pxor	($B31,$B31);
+	&pxor	($B30,$B30);
+	 &mov	(&DWP(2*4,"esp"),$a2);	# a2
+	 &xor	($a2,$a4);		# a2^a4
+	 &mov	(&DWP(3*4,"esp"),$a1);	# a1^a2
+	&pcmpgtd($B31,$A);		# broadcast 31st bit
+	&paddd	($A,$A);		# $A<<=1
+	 &xor	($a1,$a2);		# a1^a4=a1^a2^a2^a4
+	 &mov	(&DWP(4*4,"esp"),$a4);	# a4
+	 &xor	($a4,$a2);		# a2=a4^a2^a4
+	&pand	($B31,$B);
+	&pcmpgtd($B30,$A);		# broadcast 30th bit
+	 &mov	(&DWP(5*4,"esp"),$a1);	# a1^a4
+	 &xor	($a4,$a1);		# a1^a2^a4
+	&psllq	($B31,31);
+	&pand	($B30,$B);
+	 &mov	(&DWP(6*4,"esp"),$a2);	# a2^a4
+	&mov	(@i[0],0x7);
+	 &mov	(&DWP(7*4,"esp"),$a4);	# a1^a2^a4
+	 &mov	($a4,@i[0]);
+	&and	(@i[0],$b);
+	&shr	($b,3);
+	&mov	(@i[1],$a4);
+	&psllq	($B30,30);
+	&and	(@i[1],$b);
+	&shr	($b,3);
+	&movd	($R,&DWP(0,"esp",@i[0],4));
+	&mov	(@i[0],$a4);
+	&and	(@i[0],$b);
+	&shr	($b,3);
+	for($n=1;$n<9;$n++) {
+		&movd	(@T[1],&DWP(0,"esp",@i[1],4));
+		&mov	(@i[1],$a4);
+		&psllq	(@T[1],3*$n);
+		&and	(@i[1],$b);
+		&shr	($b,3);
+		&pxor	($R,@T[1]);
+
+		push(@i,shift(@i)); push(@T,shift(@T));
+	}
+	&movd	(@T[1],&DWP(0,"esp",@i[1],4));
+	&pxor	($R,$B30);
+	&psllq	(@T[1],3*$n++);
+	&pxor	($R,@T[1]);
+
+	&movd	(@T[0],&DWP(0,"esp",@i[0],4));
+	&pxor	($R,$B31);
+	&psllq	(@T[0],3*$n);
+	&add	("esp",32+4);
+	&pxor	($R,@T[0]);
+	&ret	();
+&function_end_B("_mul_1x1_mmx");
+					}
+
+($lo,$hi)=("eax","edx");
+@T=("ecx","ebp");
+
+&function_begin_B("_mul_1x1_ialu");
+	&sub	("esp",32+4);
+	 &mov	($a1,$a);
+	 &lea	($a2,&DWP(0,$a,$a));
+	 &lea	($a4,&DWP(0,"",$a,4));
+	 &and	($a1,0x3fffffff);
+	&lea	(@i[1],&DWP(0,$lo,$lo));
+	&sar	($lo,31);		# broadcast 31st bit
+	 &mov	(&DWP(0*4,"esp"),0);
+	 &and	($a2,0x7fffffff);
+	 &mov	(&DWP(1*4,"esp"),$a1);	# a1
+	 &xor	($a1,$a2);		# a1^a2
+	 &mov	(&DWP(2*4,"esp"),$a2);	# a2
+	 &xor	($a2,$a4);		# a2^a4
+	 &mov	(&DWP(3*4,"esp"),$a1);	# a1^a2
+	 &xor	($a1,$a2);		# a1^a4=a1^a2^a2^a4
+	 &mov	(&DWP(4*4,"esp"),$a4);	# a4
+	 &xor	($a4,$a2);		# a2=a4^a2^a4
+	 &mov	(&DWP(5*4,"esp"),$a1);	# a1^a4
+	 &xor	($a4,$a1);		# a1^a2^a4
+	&sar	(@i[1],31);		# broadcast 30th bit
+	&and	($lo,$b);
+	 &mov	(&DWP(6*4,"esp"),$a2);	# a2^a4
+	&and	(@i[1],$b);
+	 &mov	(&DWP(7*4,"esp"),$a4);	# a1^a2^a4
+	&mov	($hi,$lo);
+	&shl	($lo,31);
+	&mov	(@T[0],@i[1]);
+	&shr	($hi,1);
+
+	 &mov	(@i[0],0x7);
+	&shl	(@i[1],30);
+	 &and	(@i[0],$b);
+	&shr	(@T[0],2);
+	&xor	($lo,@i[1]);
+
+	&shr	($b,3);
+	&mov	(@i[1],0x7);		# 5-byte instruction!?
+	&and	(@i[1],$b);
+	&shr	($b,3);
+	 &xor	($hi,@T[0]);
+	&xor	($lo,&DWP(0,"esp",@i[0],4));
+	&mov	(@i[0],0x7);
+	&and	(@i[0],$b);
+	&shr	($b,3);
+	for($n=1;$n<9;$n++) {
+		&mov	(@T[1],&DWP(0,"esp",@i[1],4));
+		&mov	(@i[1],0x7);
+		&mov	(@T[0],@T[1]);
+		&shl	(@T[1],3*$n);
+		&and	(@i[1],$b);
+		&shr	(@T[0],32-3*$n);
+		&xor	($lo,@T[1]);
+		&shr	($b,3);
+		&xor	($hi,@T[0]);
+
+		push(@i,shift(@i)); push(@T,shift(@T));
+	}
+	&mov	(@T[1],&DWP(0,"esp",@i[1],4));
+	&mov	(@T[0],@T[1]);
+	&shl	(@T[1],3*$n);
+	&mov	(@i[1],&DWP(0,"esp",@i[0],4));
+	&shr	(@T[0],32-3*$n);	$n++;
+	&mov	(@i[0],@i[1]);
+	&xor	($lo,@T[1]);
+	&shl	(@i[1],3*$n);
+	&xor	($hi,@T[0]);
+	&shr	(@i[0],32-3*$n);
+	&xor	($lo,@i[1]);
+	&xor	($hi,@i[0]);
+
+	&add	("esp",32+4);
+	&ret	();
+&function_end_B("_mul_1x1_ialu");
+
+# void bn_GF2m_mul_2x2(BN_ULONG *r, BN_ULONG a1, BN_ULONG a0, BN_ULONG b1, BN_ULONG b0);
+&function_begin_B("bn_GF2m_mul_2x2");
+if (!$x86only) {
+	&picmeup("edx","OPENSSL_ia32cap_P");
+	&mov	("eax",&DWP(0,"edx"));
+	&mov	("edx",&DWP(4,"edx"));
+	&test	("eax",1<<23);		# check MMX bit
+	&jz	(&label("ialu"));
+if ($sse2) {
+	&test	("eax",1<<24);		# check FXSR bit
+	&jz	(&label("mmx"));
+	&test	("edx",1<<1);		# check PCLMULQDQ bit
+	&jz	(&label("mmx"));
+
+	&movups		("xmm0",&QWP(8,"esp"));
+	&shufps		("xmm0","xmm0",0b10110001);
+	&pclmulqdq	("xmm0","xmm0",1);
+	&mov		("eax",&DWP(4,"esp"));
+	&movups		(&QWP(0,"eax"),"xmm0");
+	&ret	();
+
+&set_label("mmx",16);
+}
+	&push	("ebp");
+	&push	("ebx");
+	&push	("esi");
+	&push	("edi");
+	&mov	($a,&wparam(1));
+	&mov	($b,&wparam(3));
+	&call	("_mul_1x1_mmx");	# a1·b1
+	&movq	("mm7",$R);
+
+	&mov	($a,&wparam(2));
+	&mov	($b,&wparam(4));
+	&call	("_mul_1x1_mmx");	# a0·b0
+	&movq	("mm6",$R);
+
+	&mov	($a,&wparam(1));
+	&mov	($b,&wparam(3));
+	&xor	($a,&wparam(2));
+	&xor	($b,&wparam(4));
+	&call	("_mul_1x1_mmx");	# (a0+a1)·(b0+b1)
+	&pxor	($R,"mm7");
+	&mov	($a,&wparam(0));
+	&pxor	($R,"mm6");		# (a0+a1)·(b0+b1)-a1·b1-a0·b0
+
+	&movq	($A,$R);
+	&psllq	($R,32);
+	&pop	("edi");
+	&psrlq	($A,32);
+	&pop	("esi");
+	&pxor	($R,"mm6");
+	&pop	("ebx");
+	&pxor	($A,"mm7");
+	&movq	(&QWP(0,$a),$R);
+	&pop	("ebp");
+	&movq	(&QWP(8,$a),$A);
+	&emms	();
+	&ret	();
+&set_label("ialu",16);
+}
+	&push	("ebp");
+	&push	("ebx");
+	&push	("esi");
+	&push	("edi");
+	&stack_push(4+1);
+
+	&mov	($a,&wparam(1));
+	&mov	($b,&wparam(3));
+	&call	("_mul_1x1_ialu");	# a1·b1
+	&mov	(&DWP(8,"esp"),$lo);
+	&mov	(&DWP(12,"esp"),$hi);
+
+	&mov	($a,&wparam(2));
+	&mov	($b,&wparam(4));
+	&call	("_mul_1x1_ialu");	# a0·b0
+	&mov	(&DWP(0,"esp"),$lo);
+	&mov	(&DWP(4,"esp"),$hi);
+
+	&mov	($a,&wparam(1));
+	&mov	($b,&wparam(3));
+	&xor	($a,&wparam(2));
+	&xor	($b,&wparam(4));
+	&call	("_mul_1x1_ialu");	# (a0+a1)·(b0+b1)
+
+	&mov	("ebp",&wparam(0));
+		 @r=("ebx","ecx","edi","esi");
+	&mov	(@r[0],&DWP(0,"esp"));
+	&mov	(@r[1],&DWP(4,"esp"));
+	&mov	(@r[2],&DWP(8,"esp"));
+	&mov	(@r[3],&DWP(12,"esp"));
+
+	&xor	($lo,$hi);
+	&xor	($hi,@r[1]);
+	&xor	($lo,@r[0]);
+	&mov	(&DWP(0,"ebp"),@r[0]);
+	&xor	($hi,@r[2]);
+	&mov	(&DWP(12,"ebp"),@r[3]);
+	&xor	($lo,@r[3]);
+	&stack_pop(4+1);
+	&xor	($hi,@r[3]);
+	&pop	("edi");
+	&xor	($lo,$hi);
+	&pop	("esi");
+	&mov	(&DWP(8,"ebp"),$hi);
+	&pop	("ebx");
+	&mov	(&DWP(4,"ebp"),$lo);
+	&pop	("ebp");
+	&ret	();
+&function_end_B("bn_GF2m_mul_2x2");
+
+&asciz	("GF(2^m) Multiplication for x86, CRYPTOGAMS by <appro\@openssl.org>");
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86-mont.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86-mont.pl
new file mode 100755
index 000000000..7ba2133ac
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86-mont.pl
@@ -0,0 +1,631 @@
+#! /usr/bin/env perl
+# Copyright 2005-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# October 2005
+#
+# This is a "teaser" code, as it can be improved in several ways...
+# First of all non-SSE2 path should be implemented (yes, for now it
+# performs Montgomery multiplication/convolution only on SSE2-capable
+# CPUs such as P4, others fall down to original code). Then inner loop
+# can be unrolled and modulo-scheduled to improve ILP and possibly
+# moved to 128-bit XMM register bank (though it would require input
+# rearrangement and/or increase bus bandwidth utilization). Dedicated
+# squaring procedure should give further performance improvement...
+# Yet, for being draft, the code improves rsa512 *sign* benchmark by
+# 110%(!), rsa1024 one - by 70% and rsa4096 - by 20%:-)
+
+# December 2006
+#
+# Modulo-scheduling SSE2 loops results in further 15-20% improvement.
+# Integer-only code [being equipped with dedicated squaring procedure]
+# gives ~40% on rsa512 sign benchmark...
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output = pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0]);
+
+$sse2=0;
+for (@ARGV) { $sse2=1 if (/-DOPENSSL_IA32_SSE2/); }
+
+&external_label("OPENSSL_ia32cap_P") if ($sse2);
+
+&function_begin("bn_mul_mont");
+
+$i="edx";
+$j="ecx";
+$ap="esi";	$tp="esi";		# overlapping variables!!!
+$rp="edi";	$bp="edi";		# overlapping variables!!!
+$np="ebp";
+$num="ebx";
+
+$_num=&DWP(4*0,"esp");			# stack top layout
+$_rp=&DWP(4*1,"esp");
+$_ap=&DWP(4*2,"esp");
+$_bp=&DWP(4*3,"esp");
+$_np=&DWP(4*4,"esp");
+$_n0=&DWP(4*5,"esp");	$_n0q=&QWP(4*5,"esp");
+$_sp=&DWP(4*6,"esp");
+$_bpend=&DWP(4*7,"esp");
+$frame=32;				# size of above frame rounded up to 16n
+
+	&xor	("eax","eax");
+	&mov	("edi",&wparam(5));	# int num
+	&cmp	("edi",4);
+	&jl	(&label("just_leave"));
+
+	&lea	("esi",&wparam(0));	# put aside pointer to argument block
+	&lea	("edx",&wparam(1));	# load ap
+	&add	("edi",2);		# extra two words on top of tp
+	&neg	("edi");
+	&lea	("ebp",&DWP(-$frame,"esp","edi",4));	# future alloca($frame+4*(num+2))
+	&neg	("edi");
+
+	# minimize cache contention by arranging 2K window between stack
+	# pointer and ap argument [np is also position sensitive vector,
+	# but it's assumed to be near ap, as it's allocated at ~same
+	# time].
+	&mov	("eax","ebp");
+	&sub	("eax","edx");
+	&and	("eax",2047);
+	&sub	("ebp","eax");		# this aligns sp and ap modulo 2048
+
+	&xor	("edx","ebp");
+	&and	("edx",2048);
+	&xor	("edx",2048);
+	&sub	("ebp","edx");		# this splits them apart modulo 4096
+
+	&and	("ebp",-64);		# align to cache line
+
+	# An OS-agnostic version of __chkstk.
+	#
+	# Some OSes (Windows) insist on stack being "wired" to
+	# physical memory in strictly sequential manner, i.e. if stack
+	# allocation spans two pages, then reference to farmost one can
+	# be punishable by SEGV. But page walking can do good even on
+	# other OSes, because it guarantees that villain thread hits
+	# the guard page before it can make damage to innocent one...
+	&mov	("eax","esp");
+	&sub	("eax","ebp");
+	&and	("eax",-4096);
+	&mov	("edx","esp");		# saved stack pointer!
+	&lea	("esp",&DWP(0,"ebp","eax"));
+	&mov	("eax",&DWP(0,"esp"));
+	&cmp	("esp","ebp");
+	&ja	(&label("page_walk"));
+	&jmp	(&label("page_walk_done"));
+
+&set_label("page_walk",16);
+	&lea	("esp",&DWP(-4096,"esp"));
+	&mov	("eax",&DWP(0,"esp"));
+	&cmp	("esp","ebp");
+	&ja	(&label("page_walk"));
+&set_label("page_walk_done");
+
+	################################# load argument block...
+	&mov	("eax",&DWP(0*4,"esi"));# BN_ULONG *rp
+	&mov	("ebx",&DWP(1*4,"esi"));# const BN_ULONG *ap
+	&mov	("ecx",&DWP(2*4,"esi"));# const BN_ULONG *bp
+	&mov	("ebp",&DWP(3*4,"esi"));# const BN_ULONG *np
+	&mov	("esi",&DWP(4*4,"esi"));# const BN_ULONG *n0
+	#&mov	("edi",&DWP(5*4,"esi"));# int num
+
+	&mov	("esi",&DWP(0,"esi"));	# pull n0[0]
+	&mov	($_rp,"eax");		# ... save a copy of argument block
+	&mov	($_ap,"ebx");
+	&mov	($_bp,"ecx");
+	&mov	($_np,"ebp");
+	&mov	($_n0,"esi");
+	&lea	($num,&DWP(-3,"edi"));	# num=num-1 to assist modulo-scheduling
+	#&mov	($_num,$num);		# redundant as $num is not reused
+	&mov	($_sp,"edx");		# saved stack pointer!
+
+if($sse2) {
+$acc0="mm0";	# mmx register bank layout
+$acc1="mm1";
+$car0="mm2";
+$car1="mm3";
+$mul0="mm4";
+$mul1="mm5";
+$temp="mm6";
+$mask="mm7";
+
+	&picmeup("eax","OPENSSL_ia32cap_P");
+	&bt	(&DWP(0,"eax"),26);
+	&jnc	(&label("non_sse2"));
+
+	&mov	("eax",-1);
+	&movd	($mask,"eax");		# mask 32 lower bits
+
+	&mov	($ap,$_ap);		# load input pointers
+	&mov	($bp,$_bp);
+	&mov	($np,$_np);
+
+	&xor	($i,$i);		# i=0
+	&xor	($j,$j);		# j=0
+
+	&movd	($mul0,&DWP(0,$bp));		# bp[0]
+	&movd	($mul1,&DWP(0,$ap));		# ap[0]
+	&movd	($car1,&DWP(0,$np));		# np[0]
+
+	&pmuludq($mul1,$mul0);			# ap[0]*bp[0]
+	&movq	($car0,$mul1);
+	&movq	($acc0,$mul1);			# I wish movd worked for
+	&pand	($acc0,$mask);			# inter-register transfers
+
+	&pmuludq($mul1,$_n0q);			# *=n0
+
+	&pmuludq($car1,$mul1);			# "t[0]"*np[0]*n0
+	&paddq	($car1,$acc0);
+
+	&movd	($acc1,&DWP(4,$np));		# np[1]
+	&movd	($acc0,&DWP(4,$ap));		# ap[1]
+
+	&psrlq	($car0,32);
+	&psrlq	($car1,32);
+
+	&inc	($j);				# j++
+&set_label("1st",16);
+	&pmuludq($acc0,$mul0);			# ap[j]*bp[0]
+	&pmuludq($acc1,$mul1);			# np[j]*m1
+	&paddq	($car0,$acc0);			# +=c0
+	&paddq	($car1,$acc1);			# +=c1
+
+	&movq	($acc0,$car0);
+	&pand	($acc0,$mask);
+	&movd	($acc1,&DWP(4,$np,$j,4));	# np[j+1]
+	&paddq	($car1,$acc0);			# +=ap[j]*bp[0];
+	&movd	($acc0,&DWP(4,$ap,$j,4));	# ap[j+1]
+	&psrlq	($car0,32);
+	&movd	(&DWP($frame-4,"esp",$j,4),$car1);	# tp[j-1]=
+	&psrlq	($car1,32);
+
+	&lea	($j,&DWP(1,$j));
+	&cmp	($j,$num);
+	&jl	(&label("1st"));
+
+	&pmuludq($acc0,$mul0);			# ap[num-1]*bp[0]
+	&pmuludq($acc1,$mul1);			# np[num-1]*m1
+	&paddq	($car0,$acc0);			# +=c0
+	&paddq	($car1,$acc1);			# +=c1
+
+	&movq	($acc0,$car0);
+	&pand	($acc0,$mask);
+	&paddq	($car1,$acc0);			# +=ap[num-1]*bp[0];
+	&movd	(&DWP($frame-4,"esp",$j,4),$car1);	# tp[num-2]=
+
+	&psrlq	($car0,32);
+	&psrlq	($car1,32);
+
+	&paddq	($car1,$car0);
+	&movq	(&QWP($frame,"esp",$num,4),$car1);	# tp[num].tp[num-1]
+
+	&inc	($i);				# i++
+&set_label("outer");
+	&xor	($j,$j);			# j=0
+
+	&movd	($mul0,&DWP(0,$bp,$i,4));	# bp[i]
+	&movd	($mul1,&DWP(0,$ap));		# ap[0]
+	&movd	($temp,&DWP($frame,"esp"));	# tp[0]
+	&movd	($car1,&DWP(0,$np));		# np[0]
+	&pmuludq($mul1,$mul0);			# ap[0]*bp[i]
+
+	&paddq	($mul1,$temp);			# +=tp[0]
+	&movq	($acc0,$mul1);
+	&movq	($car0,$mul1);
+	&pand	($acc0,$mask);
+
+	&pmuludq($mul1,$_n0q);			# *=n0
+
+	&pmuludq($car1,$mul1);
+	&paddq	($car1,$acc0);
+
+	&movd	($temp,&DWP($frame+4,"esp"));	# tp[1]
+	&movd	($acc1,&DWP(4,$np));		# np[1]
+	&movd	($acc0,&DWP(4,$ap));		# ap[1]
+
+	&psrlq	($car0,32);
+	&psrlq	($car1,32);
+	&paddq	($car0,$temp);			# +=tp[1]
+
+	&inc	($j);				# j++
+	&dec	($num);
+&set_label("inner");
+	&pmuludq($acc0,$mul0);			# ap[j]*bp[i]
+	&pmuludq($acc1,$mul1);			# np[j]*m1
+	&paddq	($car0,$acc0);			# +=c0
+	&paddq	($car1,$acc1);			# +=c1
+
+	&movq	($acc0,$car0);
+	&movd	($temp,&DWP($frame+4,"esp",$j,4));# tp[j+1]
+	&pand	($acc0,$mask);
+	&movd	($acc1,&DWP(4,$np,$j,4));	# np[j+1]
+	&paddq	($car1,$acc0);			# +=ap[j]*bp[i]+tp[j]
+	&movd	($acc0,&DWP(4,$ap,$j,4));	# ap[j+1]
+	&psrlq	($car0,32);
+	&movd	(&DWP($frame-4,"esp",$j,4),$car1);# tp[j-1]=
+	&psrlq	($car1,32);
+	&paddq	($car0,$temp);			# +=tp[j+1]
+
+	&dec	($num);
+	&lea	($j,&DWP(1,$j));		# j++
+	&jnz	(&label("inner"));
+
+	&mov	($num,$j);
+	&pmuludq($acc0,$mul0);			# ap[num-1]*bp[i]
+	&pmuludq($acc1,$mul1);			# np[num-1]*m1
+	&paddq	($car0,$acc0);			# +=c0
+	&paddq	($car1,$acc1);			# +=c1
+
+	&movq	($acc0,$car0);
+	&pand	($acc0,$mask);
+	&paddq	($car1,$acc0);			# +=ap[num-1]*bp[i]+tp[num-1]
+	&movd	(&DWP($frame-4,"esp",$j,4),$car1);	# tp[num-2]=
+	&psrlq	($car0,32);
+	&psrlq	($car1,32);
+
+	&movd	($temp,&DWP($frame+4,"esp",$num,4));	# += tp[num]
+	&paddq	($car1,$car0);
+	&paddq	($car1,$temp);
+	&movq	(&QWP($frame,"esp",$num,4),$car1);	# tp[num].tp[num-1]
+
+	&lea	($i,&DWP(1,$i));		# i++
+	&cmp	($i,$num);
+	&jle	(&label("outer"));
+
+	&emms	();				# done with mmx bank
+	&jmp	(&label("common_tail"));
+
+&set_label("non_sse2",16);
+}
+
+if (0) {
+	&mov	("esp",$_sp);
+	&xor	("eax","eax");	# signal "not fast enough [yet]"
+	&jmp	(&label("just_leave"));
+	# While the below code provides competitive performance for
+	# all key lengths on modern Intel cores, it's still more
+	# than 10% slower for 4096-bit key elsewhere:-( "Competitive"
+	# means compared to the original integer-only assembler.
+	# 512-bit RSA sign is better by ~40%, but that's about all
+	# one can say about all CPUs...
+} else {
+$inp="esi";	# integer path uses these registers differently
+$word="edi";
+$carry="ebp";
+
+	&mov	($inp,$_ap);
+	&lea	($carry,&DWP(1,$num));
+	&mov	($word,$_bp);
+	&xor	($j,$j);				# j=0
+	&mov	("edx",$inp);
+	&and	($carry,1);				# see if num is even
+	&sub	("edx",$word);				# see if ap==bp
+	&lea	("eax",&DWP(4,$word,$num,4));		# &bp[num]
+	&or	($carry,"edx");
+	&mov	($word,&DWP(0,$word));			# bp[0]
+	&jz	(&label("bn_sqr_mont"));
+	&mov	($_bpend,"eax");
+	&mov	("eax",&DWP(0,$inp));
+	&xor	("edx","edx");
+
+&set_label("mull",16);
+	&mov	($carry,"edx");
+	&mul	($word);				# ap[j]*bp[0]
+	&add	($carry,"eax");
+	&lea	($j,&DWP(1,$j));
+	&adc	("edx",0);
+	&mov	("eax",&DWP(0,$inp,$j,4));		# ap[j+1]
+	&cmp	($j,$num);
+	&mov	(&DWP($frame-4,"esp",$j,4),$carry);	# tp[j]=
+	&jl	(&label("mull"));
+
+	&mov	($carry,"edx");
+	&mul	($word);				# ap[num-1]*bp[0]
+	 &mov	($word,$_n0);
+	&add	("eax",$carry);
+	 &mov	($inp,$_np);
+	&adc	("edx",0);
+	 &imul	($word,&DWP($frame,"esp"));		# n0*tp[0]
+
+	&mov	(&DWP($frame,"esp",$num,4),"eax");	# tp[num-1]=
+	&xor	($j,$j);
+	&mov	(&DWP($frame+4,"esp",$num,4),"edx");	# tp[num]=
+	&mov	(&DWP($frame+8,"esp",$num,4),$j);	# tp[num+1]=
+
+	&mov	("eax",&DWP(0,$inp));			# np[0]
+	&mul	($word);				# np[0]*m
+	&add	("eax",&DWP($frame,"esp"));		# +=tp[0]
+	&mov	("eax",&DWP(4,$inp));			# np[1]
+	&adc	("edx",0);
+	&inc	($j);
+
+	&jmp	(&label("2ndmadd"));
+
+&set_label("1stmadd",16);
+	&mov	($carry,"edx");
+	&mul	($word);				# ap[j]*bp[i]
+	&add	($carry,&DWP($frame,"esp",$j,4));	# +=tp[j]
+	&lea	($j,&DWP(1,$j));
+	&adc	("edx",0);
+	&add	($carry,"eax");
+	&mov	("eax",&DWP(0,$inp,$j,4));		# ap[j+1]
+	&adc	("edx",0);
+	&cmp	($j,$num);
+	&mov	(&DWP($frame-4,"esp",$j,4),$carry);	# tp[j]=
+	&jl	(&label("1stmadd"));
+
+	&mov	($carry,"edx");
+	&mul	($word);				# ap[num-1]*bp[i]
+	&add	("eax",&DWP($frame,"esp",$num,4));	# +=tp[num-1]
+	 &mov	($word,$_n0);
+	&adc	("edx",0);
+	 &mov	($inp,$_np);
+	&add	($carry,"eax");
+	&adc	("edx",0);
+	 &imul	($word,&DWP($frame,"esp"));		# n0*tp[0]
+
+	&xor	($j,$j);
+	&add	("edx",&DWP($frame+4,"esp",$num,4));	# carry+=tp[num]
+	&mov	(&DWP($frame,"esp",$num,4),$carry);	# tp[num-1]=
+	&adc	($j,0);
+	 &mov	("eax",&DWP(0,$inp));			# np[0]
+	&mov	(&DWP($frame+4,"esp",$num,4),"edx");	# tp[num]=
+	&mov	(&DWP($frame+8,"esp",$num,4),$j);	# tp[num+1]=
+
+	&mul	($word);				# np[0]*m
+	&add	("eax",&DWP($frame,"esp"));		# +=tp[0]
+	&mov	("eax",&DWP(4,$inp));			# np[1]
+	&adc	("edx",0);
+	&mov	($j,1);
+
+&set_label("2ndmadd",16);
+	&mov	($carry,"edx");
+	&mul	($word);				# np[j]*m
+	&add	($carry,&DWP($frame,"esp",$j,4));	# +=tp[j]
+	&lea	($j,&DWP(1,$j));
+	&adc	("edx",0);
+	&add	($carry,"eax");
+	&mov	("eax",&DWP(0,$inp,$j,4));		# np[j+1]
+	&adc	("edx",0);
+	&cmp	($j,$num);
+	&mov	(&DWP($frame-8,"esp",$j,4),$carry);	# tp[j-1]=
+	&jl	(&label("2ndmadd"));
+
+	&mov	($carry,"edx");
+	&mul	($word);				# np[j]*m
+	&add	($carry,&DWP($frame,"esp",$num,4));	# +=tp[num-1]
+	&adc	("edx",0);
+	&add	($carry,"eax");
+	&adc	("edx",0);
+	&mov	(&DWP($frame-4,"esp",$num,4),$carry);	# tp[num-2]=
+
+	&xor	("eax","eax");
+	 &mov	($j,$_bp);				# &bp[i]
+	&add	("edx",&DWP($frame+4,"esp",$num,4));	# carry+=tp[num]
+	&adc	("eax",&DWP($frame+8,"esp",$num,4));	# +=tp[num+1]
+	 &lea	($j,&DWP(4,$j));
+	&mov	(&DWP($frame,"esp",$num,4),"edx");	# tp[num-1]=
+	 &cmp	($j,$_bpend);
+	&mov	(&DWP($frame+4,"esp",$num,4),"eax");	# tp[num]=
+	&je	(&label("common_tail"));
+
+	&mov	($word,&DWP(0,$j));			# bp[i+1]
+	&mov	($inp,$_ap);
+	&mov	($_bp,$j);				# &bp[++i]
+	&xor	($j,$j);
+	&xor	("edx","edx");
+	&mov	("eax",&DWP(0,$inp));
+	&jmp	(&label("1stmadd"));
+
+&set_label("bn_sqr_mont",16);
+$sbit=$num;
+	&mov	($_num,$num);
+	&mov	($_bp,$j);				# i=0
+
+	&mov	("eax",$word);				# ap[0]
+	&mul	($word);				# ap[0]*ap[0]
+	&mov	(&DWP($frame,"esp"),"eax");		# tp[0]=
+	&mov	($sbit,"edx");
+	&shr	("edx",1);
+	&and	($sbit,1);
+	&inc	($j);
+&set_label("sqr",16);
+	&mov	("eax",&DWP(0,$inp,$j,4));		# ap[j]
+	&mov	($carry,"edx");
+	&mul	($word);				# ap[j]*ap[0]
+	&add	("eax",$carry);
+	&lea	($j,&DWP(1,$j));
+	&adc	("edx",0);
+	&lea	($carry,&DWP(0,$sbit,"eax",2));
+	&shr	("eax",31);
+	&cmp	($j,$_num);
+	&mov	($sbit,"eax");
+	&mov	(&DWP($frame-4,"esp",$j,4),$carry);	# tp[j]=
+	&jl	(&label("sqr"));
+
+	&mov	("eax",&DWP(0,$inp,$j,4));		# ap[num-1]
+	&mov	($carry,"edx");
+	&mul	($word);				# ap[num-1]*ap[0]
+	&add	("eax",$carry);
+	 &mov	($word,$_n0);
+	&adc	("edx",0);
+	 &mov	($inp,$_np);
+	&lea	($carry,&DWP(0,$sbit,"eax",2));
+	 &imul	($word,&DWP($frame,"esp"));		# n0*tp[0]
+	&shr	("eax",31);
+	&mov	(&DWP($frame,"esp",$j,4),$carry);	# tp[num-1]=
+
+	&lea	($carry,&DWP(0,"eax","edx",2));
+	 &mov	("eax",&DWP(0,$inp));			# np[0]
+	&shr	("edx",31);
+	&mov	(&DWP($frame+4,"esp",$j,4),$carry);	# tp[num]=
+	&mov	(&DWP($frame+8,"esp",$j,4),"edx");	# tp[num+1]=
+
+	&mul	($word);				# np[0]*m
+	&add	("eax",&DWP($frame,"esp"));		# +=tp[0]
+	&mov	($num,$j);
+	&adc	("edx",0);
+	&mov	("eax",&DWP(4,$inp));			# np[1]
+	&mov	($j,1);
+
+&set_label("3rdmadd",16);
+	&mov	($carry,"edx");
+	&mul	($word);				# np[j]*m
+	&add	($carry,&DWP($frame,"esp",$j,4));	# +=tp[j]
+	&adc	("edx",0);
+	&add	($carry,"eax");
+	&mov	("eax",&DWP(4,$inp,$j,4));		# np[j+1]
+	&adc	("edx",0);
+	&mov	(&DWP($frame-4,"esp",$j,4),$carry);	# tp[j-1]=
+
+	&mov	($carry,"edx");
+	&mul	($word);				# np[j+1]*m
+	&add	($carry,&DWP($frame+4,"esp",$j,4));	# +=tp[j+1]
+	&lea	($j,&DWP(2,$j));
+	&adc	("edx",0);
+	&add	($carry,"eax");
+	&mov	("eax",&DWP(0,$inp,$j,4));		# np[j+2]
+	&adc	("edx",0);
+	&cmp	($j,$num);
+	&mov	(&DWP($frame-8,"esp",$j,4),$carry);	# tp[j]=
+	&jl	(&label("3rdmadd"));
+
+	&mov	($carry,"edx");
+	&mul	($word);				# np[j]*m
+	&add	($carry,&DWP($frame,"esp",$num,4));	# +=tp[num-1]
+	&adc	("edx",0);
+	&add	($carry,"eax");
+	&adc	("edx",0);
+	&mov	(&DWP($frame-4,"esp",$num,4),$carry);	# tp[num-2]=
+
+	&mov	($j,$_bp);				# i
+	&xor	("eax","eax");
+	&mov	($inp,$_ap);
+	&add	("edx",&DWP($frame+4,"esp",$num,4));	# carry+=tp[num]
+	&adc	("eax",&DWP($frame+8,"esp",$num,4));	# +=tp[num+1]
+	&mov	(&DWP($frame,"esp",$num,4),"edx");	# tp[num-1]=
+	&cmp	($j,$num);
+	&mov	(&DWP($frame+4,"esp",$num,4),"eax");	# tp[num]=
+	&je	(&label("common_tail"));
+
+	&mov	($word,&DWP(4,$inp,$j,4));		# ap[i]
+	&lea	($j,&DWP(1,$j));
+	&mov	("eax",$word);
+	&mov	($_bp,$j);				# ++i
+	&mul	($word);				# ap[i]*ap[i]
+	&add	("eax",&DWP($frame,"esp",$j,4));	# +=tp[i]
+	&adc	("edx",0);
+	&mov	(&DWP($frame,"esp",$j,4),"eax");	# tp[i]=
+	&xor	($carry,$carry);
+	&cmp	($j,$num);
+	&lea	($j,&DWP(1,$j));
+	&je	(&label("sqrlast"));
+
+	&mov	($sbit,"edx");				# zaps $num
+	&shr	("edx",1);
+	&and	($sbit,1);
+&set_label("sqradd",16);
+	&mov	("eax",&DWP(0,$inp,$j,4));		# ap[j]
+	&mov	($carry,"edx");
+	&mul	($word);				# ap[j]*ap[i]
+	&add	("eax",$carry);
+	&lea	($carry,&DWP(0,"eax","eax"));
+	&adc	("edx",0);
+	&shr	("eax",31);
+	&add	($carry,&DWP($frame,"esp",$j,4));	# +=tp[j]
+	&lea	($j,&DWP(1,$j));
+	&adc	("eax",0);
+	&add	($carry,$sbit);
+	&adc	("eax",0);
+	&cmp	($j,$_num);
+	&mov	(&DWP($frame-4,"esp",$j,4),$carry);	# tp[j]=
+	&mov	($sbit,"eax");
+	&jle	(&label("sqradd"));
+
+	&mov	($carry,"edx");
+	&add	("edx","edx");
+	&shr	($carry,31);
+	&add	("edx",$sbit);
+	&adc	($carry,0);
+&set_label("sqrlast");
+	&mov	($word,$_n0);
+	&mov	($inp,$_np);
+	&imul	($word,&DWP($frame,"esp"));		# n0*tp[0]
+
+	&add	("edx",&DWP($frame,"esp",$j,4));	# +=tp[num]
+	&mov	("eax",&DWP(0,$inp));			# np[0]
+	&adc	($carry,0);
+	&mov	(&DWP($frame,"esp",$j,4),"edx");	# tp[num]=
+	&mov	(&DWP($frame+4,"esp",$j,4),$carry);	# tp[num+1]=
+
+	&mul	($word);				# np[0]*m
+	&add	("eax",&DWP($frame,"esp"));		# +=tp[0]
+	&lea	($num,&DWP(-1,$j));
+	&adc	("edx",0);
+	&mov	($j,1);
+	&mov	("eax",&DWP(4,$inp));			# np[1]
+
+	&jmp	(&label("3rdmadd"));
+}
+
+&set_label("common_tail",16);
+	&mov	($np,$_np);			# load modulus pointer
+	&mov	($rp,$_rp);			# load result pointer
+	&lea	($tp,&DWP($frame,"esp"));	# [$ap and $bp are zapped]
+
+	&mov	("eax",&DWP(0,$tp));		# tp[0]
+	&mov	($j,$num);			# j=num-1
+	&xor	($i,$i);			# i=0 and clear CF!
+
+&set_label("sub",16);
+	&sbb	("eax",&DWP(0,$np,$i,4));
+	&mov	(&DWP(0,$rp,$i,4),"eax");	# rp[i]=tp[i]-np[i]
+	&dec	($j);				# doesn't affect CF!
+	&mov	("eax",&DWP(4,$tp,$i,4));	# tp[i+1]
+	&lea	($i,&DWP(1,$i));		# i++
+	&jge	(&label("sub"));
+
+	&sbb	("eax",0);			# handle upmost overflow bit
+	&mov	("edx",-1);
+	&xor	("edx","eax");
+	&jmp	(&label("copy"));
+
+&set_label("copy",16);				# conditional copy
+	&mov	($tp,&DWP($frame,"esp",$num,4));
+	&mov	($np,&DWP(0,$rp,$num,4));
+	&mov	(&DWP($frame,"esp",$num,4),$j);	# zap temporary vector
+	&and	($tp,"eax");
+	&and	($np,"edx");
+	&or	($np,$tp);
+	&mov	(&DWP(0,$rp,$num,4),$np);
+	&dec	($num);
+	&jge	(&label("copy"));
+
+	&mov	("esp",$_sp);		# pull saved stack pointer
+	&mov	("eax",1);
+&set_label("just_leave");
+&function_end("bn_mul_mont");
+
+&asciz("Montgomery Multiplication for x86, CRYPTOGAMS by <appro\@openssl.org>");
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86_64-gcc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86_64-gcc.c
new file mode 100644
index 000000000..31839ba06
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86_64-gcc.c
@@ -0,0 +1,643 @@
+/*
+ * Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "../bn_lcl.h"
+#if !(defined(__GNUC__) && __GNUC__>=2)
+# include "../bn_asm.c"         /* kind of dirty hack for Sun Studio */
+#else
+/*-
+ * x86_64 BIGNUM accelerator version 0.1, December 2002.
+ *
+ * Implemented by Andy Polyakov <appro@openssl.org> for the OpenSSL
+ * project.
+ *
+ * Rights for redistribution and usage in source and binary forms are
+ * granted according to the OpenSSL license. Warranty of any kind is
+ * disclaimed.
+ *
+ * Q. Version 0.1? It doesn't sound like Andy, he used to assign real
+ *    versions, like 1.0...
+ * A. Well, that's because this code is basically a quick-n-dirty
+ *    proof-of-concept hack. As you can see it's implemented with
+ *    inline assembler, which means that you're bound to GCC and that
+ *    there might be enough room for further improvement.
+ *
+ * Q. Why inline assembler?
+ * A. x86_64 features own ABI which I'm not familiar with. This is
+ *    why I decided to let the compiler take care of subroutine
+ *    prologue/epilogue as well as register allocation. For reference.
+ *    Win64 implements different ABI for AMD64, different from Linux.
+ *
+ * Q. How much faster does it get?
+ * A. 'apps/openssl speed rsa dsa' output with no-asm:
+ *
+ *                        sign    verify    sign/s verify/s
+ *      rsa  512 bits   0.0006s   0.0001s   1683.8  18456.2
+ *      rsa 1024 bits   0.0028s   0.0002s    356.0   6407.0
+ *      rsa 2048 bits   0.0172s   0.0005s     58.0   1957.8
+ *      rsa 4096 bits   0.1155s   0.0018s      8.7    555.6
+ *                        sign    verify    sign/s verify/s
+ *      dsa  512 bits   0.0005s   0.0006s   2100.8   1768.3
+ *      dsa 1024 bits   0.0014s   0.0018s    692.3    559.2
+ *      dsa 2048 bits   0.0049s   0.0061s    204.7    165.0
+ *
+ *    'apps/openssl speed rsa dsa' output with this module:
+ *
+ *                        sign    verify    sign/s verify/s
+ *      rsa  512 bits   0.0004s   0.0000s   2767.1  33297.9
+ *      rsa 1024 bits   0.0012s   0.0001s    867.4  14674.7
+ *      rsa 2048 bits   0.0061s   0.0002s    164.0   5270.0
+ *      rsa 4096 bits   0.0384s   0.0006s     26.1   1650.8
+ *                        sign    verify    sign/s verify/s
+ *      dsa  512 bits   0.0002s   0.0003s   4442.2   3786.3
+ *      dsa 1024 bits   0.0005s   0.0007s   1835.1   1497.4
+ *      dsa 2048 bits   0.0016s   0.0020s    620.4    504.6
+ *
+ *    For the reference. IA-32 assembler implementation performs
+ *    very much like 64-bit code compiled with no-asm on the same
+ *    machine.
+ */
+
+# undef mul
+# undef mul_add
+
+/*-
+ * "m"(a), "+m"(r)      is the way to favor DirectPath µ-code;
+ * "g"(0)               let the compiler to decide where does it
+ *                      want to keep the value of zero;
+ */
+# define mul_add(r,a,word,carry) do {   \
+        register BN_ULONG high,low;     \
+        asm ("mulq %3"                  \
+                : "=a"(low),"=d"(high)  \
+                : "a"(word),"m"(a)      \
+                : "cc");                \
+        asm ("addq %2,%0; adcq %3,%1"   \
+                : "+r"(carry),"+d"(high)\
+                : "a"(low),"g"(0)       \
+                : "cc");                \
+        asm ("addq %2,%0; adcq %3,%1"   \
+                : "+m"(r),"+d"(high)    \
+                : "r"(carry),"g"(0)     \
+                : "cc");                \
+        carry=high;                     \
+        } while (0)
+
+# define mul(r,a,word,carry) do {       \
+        register BN_ULONG high,low;     \
+        asm ("mulq %3"                  \
+                : "=a"(low),"=d"(high)  \
+                : "a"(word),"g"(a)      \
+                : "cc");                \
+        asm ("addq %2,%0; adcq %3,%1"   \
+                : "+r"(carry),"+d"(high)\
+                : "a"(low),"g"(0)       \
+                : "cc");                \
+        (r)=carry, carry=high;          \
+        } while (0)
+# undef sqr
+# define sqr(r0,r1,a)                   \
+        asm ("mulq %2"                  \
+                : "=a"(r0),"=d"(r1)     \
+                : "a"(a)                \
+                : "cc");
+
+BN_ULONG bn_mul_add_words(BN_ULONG *rp, const BN_ULONG *ap, int num,
+                          BN_ULONG w)
+{
+    BN_ULONG c1 = 0;
+
+    if (num <= 0)
+        return c1;
+
+    while (num & ~3) {
+        mul_add(rp[0], ap[0], w, c1);
+        mul_add(rp[1], ap[1], w, c1);
+        mul_add(rp[2], ap[2], w, c1);
+        mul_add(rp[3], ap[3], w, c1);
+        ap += 4;
+        rp += 4;
+        num -= 4;
+    }
+    if (num) {
+        mul_add(rp[0], ap[0], w, c1);
+        if (--num == 0)
+            return c1;
+        mul_add(rp[1], ap[1], w, c1);
+        if (--num == 0)
+            return c1;
+        mul_add(rp[2], ap[2], w, c1);
+        return c1;
+    }
+
+    return c1;
+}
+
+BN_ULONG bn_mul_words(BN_ULONG *rp, const BN_ULONG *ap, int num, BN_ULONG w)
+{
+    BN_ULONG c1 = 0;
+
+    if (num <= 0)
+        return c1;
+
+    while (num & ~3) {
+        mul(rp[0], ap[0], w, c1);
+        mul(rp[1], ap[1], w, c1);
+        mul(rp[2], ap[2], w, c1);
+        mul(rp[3], ap[3], w, c1);
+        ap += 4;
+        rp += 4;
+        num -= 4;
+    }
+    if (num) {
+        mul(rp[0], ap[0], w, c1);
+        if (--num == 0)
+            return c1;
+        mul(rp[1], ap[1], w, c1);
+        if (--num == 0)
+            return c1;
+        mul(rp[2], ap[2], w, c1);
+    }
+    return c1;
+}
+
+void bn_sqr_words(BN_ULONG *r, const BN_ULONG *a, int n)
+{
+    if (n <= 0)
+        return;
+
+    while (n & ~3) {
+        sqr(r[0], r[1], a[0]);
+        sqr(r[2], r[3], a[1]);
+        sqr(r[4], r[5], a[2]);
+        sqr(r[6], r[7], a[3]);
+        a += 4;
+        r += 8;
+        n -= 4;
+    }
+    if (n) {
+        sqr(r[0], r[1], a[0]);
+        if (--n == 0)
+            return;
+        sqr(r[2], r[3], a[1]);
+        if (--n == 0)
+            return;
+        sqr(r[4], r[5], a[2]);
+    }
+}
+
+BN_ULONG bn_div_words(BN_ULONG h, BN_ULONG l, BN_ULONG d)
+{
+    BN_ULONG ret, waste;
+
+ asm("divq      %4":"=a"(ret), "=d"(waste)
+ :     "a"(l), "d"(h), "r"(d)
+ :     "cc");
+
+    return ret;
+}
+
+BN_ULONG bn_add_words(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp,
+                      int n)
+{
+    BN_ULONG ret;
+    size_t i = 0;
+
+    if (n <= 0)
+        return 0;
+
+    asm volatile ("       subq    %0,%0           \n" /* clear carry */
+                  "       jmp     1f              \n"
+                  ".p2align 4                     \n"
+                  "1:     movq    (%4,%2,8),%0    \n"
+                  "       adcq    (%5,%2,8),%0    \n"
+                  "       movq    %0,(%3,%2,8)    \n"
+                  "       lea     1(%2),%2        \n"
+                  "       dec     %1              \n"
+                  "       jnz     1b              \n"
+                  "       sbbq    %0,%0           \n"
+                  :"=&r" (ret), "+c"(n), "+r"(i)
+                  :"r"(rp), "r"(ap), "r"(bp)
+                  :"cc", "memory");
+
+    return ret & 1;
+}
+
+# ifndef SIMICS
+BN_ULONG bn_sub_words(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp,
+                      int n)
+{
+    BN_ULONG ret;
+    size_t i = 0;
+
+    if (n <= 0)
+        return 0;
+
+    asm volatile ("       subq    %0,%0           \n" /* clear borrow */
+                  "       jmp     1f              \n"
+                  ".p2align 4                     \n"
+                  "1:     movq    (%4,%2,8),%0    \n"
+                  "       sbbq    (%5,%2,8),%0    \n"
+                  "       movq    %0,(%3,%2,8)    \n"
+                  "       lea     1(%2),%2        \n"
+                  "       dec     %1              \n"
+                  "       jnz     1b              \n"
+                  "       sbbq    %0,%0           \n"
+                  :"=&r" (ret), "+c"(n), "+r"(i)
+                  :"r"(rp), "r"(ap), "r"(bp)
+                  :"cc", "memory");
+
+    return ret & 1;
+}
+# else
+/* Simics 1.4<7 has buggy sbbq:-( */
+#  define BN_MASK2 0xffffffffffffffffL
+BN_ULONG bn_sub_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
+{
+    BN_ULONG t1, t2;
+    int c = 0;
+
+    if (n <= 0)
+        return (BN_ULONG)0;
+
+    for (;;) {
+        t1 = a[0];
+        t2 = b[0];
+        r[0] = (t1 - t2 - c) & BN_MASK2;
+        if (t1 != t2)
+            c = (t1 < t2);
+        if (--n <= 0)
+            break;
+
+        t1 = a[1];
+        t2 = b[1];
+        r[1] = (t1 - t2 - c) & BN_MASK2;
+        if (t1 != t2)
+            c = (t1 < t2);
+        if (--n <= 0)
+            break;
+
+        t1 = a[2];
+        t2 = b[2];
+        r[2] = (t1 - t2 - c) & BN_MASK2;
+        if (t1 != t2)
+            c = (t1 < t2);
+        if (--n <= 0)
+            break;
+
+        t1 = a[3];
+        t2 = b[3];
+        r[3] = (t1 - t2 - c) & BN_MASK2;
+        if (t1 != t2)
+            c = (t1 < t2);
+        if (--n <= 0)
+            break;
+
+        a += 4;
+        b += 4;
+        r += 4;
+    }
+    return c;
+}
+# endif
+
+/* mul_add_c(a,b,c0,c1,c2)  -- c+=a*b for three word number c=(c2,c1,c0) */
+/* mul_add_c2(a,b,c0,c1,c2) -- c+=2*a*b for three word number c=(c2,c1,c0) */
+/* sqr_add_c(a,i,c0,c1,c2)  -- c+=a[i]^2 for three word number c=(c2,c1,c0) */
+/*
+ * sqr_add_c2(a,i,c0,c1,c2) -- c+=2*a[i]*a[j] for three word number
+ * c=(c2,c1,c0)
+ */
+
+/*
+ * Keep in mind that carrying into high part of multiplication result
+ * can not overflow, because it cannot be all-ones.
+ */
+# if 0
+/* original macros are kept for reference purposes */
+#  define mul_add_c(a,b,c0,c1,c2)       do {    \
+        BN_ULONG ta = (a), tb = (b);            \
+        BN_ULONG lo, hi;                        \
+        BN_UMULT_LOHI(lo,hi,ta,tb);             \
+        c0 += lo; hi += (c0<lo)?1:0;            \
+        c1 += hi; c2 += (c1<hi)?1:0;            \
+        } while(0)
+
+#  define mul_add_c2(a,b,c0,c1,c2)      do {    \
+        BN_ULONG ta = (a), tb = (b);            \
+        BN_ULONG lo, hi, tt;                    \
+        BN_UMULT_LOHI(lo,hi,ta,tb);             \
+        c0 += lo; tt = hi+((c0<lo)?1:0);        \
+        c1 += tt; c2 += (c1<tt)?1:0;            \
+        c0 += lo; hi += (c0<lo)?1:0;            \
+        c1 += hi; c2 += (c1<hi)?1:0;            \
+        } while(0)
+
+#  define sqr_add_c(a,i,c0,c1,c2)       do {    \
+        BN_ULONG ta = (a)[i];                   \
+        BN_ULONG lo, hi;                        \
+        BN_UMULT_LOHI(lo,hi,ta,ta);             \
+        c0 += lo; hi += (c0<lo)?1:0;            \
+        c1 += hi; c2 += (c1<hi)?1:0;            \
+        } while(0)
+# else
+#  define mul_add_c(a,b,c0,c1,c2) do {  \
+        BN_ULONG t1,t2;                 \
+        asm ("mulq %3"                  \
+                : "=a"(t1),"=d"(t2)     \
+                : "a"(a),"m"(b)         \
+                : "cc");                \
+        asm ("addq %3,%0; adcq %4,%1; adcq %5,%2"       \
+                : "+r"(c0),"+r"(c1),"+r"(c2)            \
+                : "r"(t1),"r"(t2),"g"(0)                \
+                : "cc");                                \
+        } while (0)
+
+#  define sqr_add_c(a,i,c0,c1,c2) do {  \
+        BN_ULONG t1,t2;                 \
+        asm ("mulq %2"                  \
+                : "=a"(t1),"=d"(t2)     \
+                : "a"(a[i])             \
+                : "cc");                \
+        asm ("addq %3,%0; adcq %4,%1; adcq %5,%2"       \
+                : "+r"(c0),"+r"(c1),"+r"(c2)            \
+                : "r"(t1),"r"(t2),"g"(0)                \
+                : "cc");                                \
+        } while (0)
+
+#  define mul_add_c2(a,b,c0,c1,c2) do { \
+        BN_ULONG t1,t2;                 \
+        asm ("mulq %3"                  \
+                : "=a"(t1),"=d"(t2)     \
+                : "a"(a),"m"(b)         \
+                : "cc");                \
+        asm ("addq %3,%0; adcq %4,%1; adcq %5,%2"       \
+                : "+r"(c0),"+r"(c1),"+r"(c2)            \
+                : "r"(t1),"r"(t2),"g"(0)                \
+                : "cc");                                \
+        asm ("addq %3,%0; adcq %4,%1; adcq %5,%2"       \
+                : "+r"(c0),"+r"(c1),"+r"(c2)            \
+                : "r"(t1),"r"(t2),"g"(0)                \
+                : "cc");                                \
+        } while (0)
+# endif
+
+# define sqr_add_c2(a,i,j,c0,c1,c2)      \
+        mul_add_c2((a)[i],(a)[j],c0,c1,c2)
+
+void bn_mul_comba8(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b)
+{
+    BN_ULONG c1, c2, c3;
+
+    c1 = 0;
+    c2 = 0;
+    c3 = 0;
+    mul_add_c(a[0], b[0], c1, c2, c3);
+    r[0] = c1;
+    c1 = 0;
+    mul_add_c(a[0], b[1], c2, c3, c1);
+    mul_add_c(a[1], b[0], c2, c3, c1);
+    r[1] = c2;
+    c2 = 0;
+    mul_add_c(a[2], b[0], c3, c1, c2);
+    mul_add_c(a[1], b[1], c3, c1, c2);
+    mul_add_c(a[0], b[2], c3, c1, c2);
+    r[2] = c3;
+    c3 = 0;
+    mul_add_c(a[0], b[3], c1, c2, c3);
+    mul_add_c(a[1], b[2], c1, c2, c3);
+    mul_add_c(a[2], b[1], c1, c2, c3);
+    mul_add_c(a[3], b[0], c1, c2, c3);
+    r[3] = c1;
+    c1 = 0;
+    mul_add_c(a[4], b[0], c2, c3, c1);
+    mul_add_c(a[3], b[1], c2, c3, c1);
+    mul_add_c(a[2], b[2], c2, c3, c1);
+    mul_add_c(a[1], b[3], c2, c3, c1);
+    mul_add_c(a[0], b[4], c2, c3, c1);
+    r[4] = c2;
+    c2 = 0;
+    mul_add_c(a[0], b[5], c3, c1, c2);
+    mul_add_c(a[1], b[4], c3, c1, c2);
+    mul_add_c(a[2], b[3], c3, c1, c2);
+    mul_add_c(a[3], b[2], c3, c1, c2);
+    mul_add_c(a[4], b[1], c3, c1, c2);
+    mul_add_c(a[5], b[0], c3, c1, c2);
+    r[5] = c3;
+    c3 = 0;
+    mul_add_c(a[6], b[0], c1, c2, c3);
+    mul_add_c(a[5], b[1], c1, c2, c3);
+    mul_add_c(a[4], b[2], c1, c2, c3);
+    mul_add_c(a[3], b[3], c1, c2, c3);
+    mul_add_c(a[2], b[4], c1, c2, c3);
+    mul_add_c(a[1], b[5], c1, c2, c3);
+    mul_add_c(a[0], b[6], c1, c2, c3);
+    r[6] = c1;
+    c1 = 0;
+    mul_add_c(a[0], b[7], c2, c3, c1);
+    mul_add_c(a[1], b[6], c2, c3, c1);
+    mul_add_c(a[2], b[5], c2, c3, c1);
+    mul_add_c(a[3], b[4], c2, c3, c1);
+    mul_add_c(a[4], b[3], c2, c3, c1);
+    mul_add_c(a[5], b[2], c2, c3, c1);
+    mul_add_c(a[6], b[1], c2, c3, c1);
+    mul_add_c(a[7], b[0], c2, c3, c1);
+    r[7] = c2;
+    c2 = 0;
+    mul_add_c(a[7], b[1], c3, c1, c2);
+    mul_add_c(a[6], b[2], c3, c1, c2);
+    mul_add_c(a[5], b[3], c3, c1, c2);
+    mul_add_c(a[4], b[4], c3, c1, c2);
+    mul_add_c(a[3], b[5], c3, c1, c2);
+    mul_add_c(a[2], b[6], c3, c1, c2);
+    mul_add_c(a[1], b[7], c3, c1, c2);
+    r[8] = c3;
+    c3 = 0;
+    mul_add_c(a[2], b[7], c1, c2, c3);
+    mul_add_c(a[3], b[6], c1, c2, c3);
+    mul_add_c(a[4], b[5], c1, c2, c3);
+    mul_add_c(a[5], b[4], c1, c2, c3);
+    mul_add_c(a[6], b[3], c1, c2, c3);
+    mul_add_c(a[7], b[2], c1, c2, c3);
+    r[9] = c1;
+    c1 = 0;
+    mul_add_c(a[7], b[3], c2, c3, c1);
+    mul_add_c(a[6], b[4], c2, c3, c1);
+    mul_add_c(a[5], b[5], c2, c3, c1);
+    mul_add_c(a[4], b[6], c2, c3, c1);
+    mul_add_c(a[3], b[7], c2, c3, c1);
+    r[10] = c2;
+    c2 = 0;
+    mul_add_c(a[4], b[7], c3, c1, c2);
+    mul_add_c(a[5], b[6], c3, c1, c2);
+    mul_add_c(a[6], b[5], c3, c1, c2);
+    mul_add_c(a[7], b[4], c3, c1, c2);
+    r[11] = c3;
+    c3 = 0;
+    mul_add_c(a[7], b[5], c1, c2, c3);
+    mul_add_c(a[6], b[6], c1, c2, c3);
+    mul_add_c(a[5], b[7], c1, c2, c3);
+    r[12] = c1;
+    c1 = 0;
+    mul_add_c(a[6], b[7], c2, c3, c1);
+    mul_add_c(a[7], b[6], c2, c3, c1);
+    r[13] = c2;
+    c2 = 0;
+    mul_add_c(a[7], b[7], c3, c1, c2);
+    r[14] = c3;
+    r[15] = c1;
+}
+
+void bn_mul_comba4(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b)
+{
+    BN_ULONG c1, c2, c3;
+
+    c1 = 0;
+    c2 = 0;
+    c3 = 0;
+    mul_add_c(a[0], b[0], c1, c2, c3);
+    r[0] = c1;
+    c1 = 0;
+    mul_add_c(a[0], b[1], c2, c3, c1);
+    mul_add_c(a[1], b[0], c2, c3, c1);
+    r[1] = c2;
+    c2 = 0;
+    mul_add_c(a[2], b[0], c3, c1, c2);
+    mul_add_c(a[1], b[1], c3, c1, c2);
+    mul_add_c(a[0], b[2], c3, c1, c2);
+    r[2] = c3;
+    c3 = 0;
+    mul_add_c(a[0], b[3], c1, c2, c3);
+    mul_add_c(a[1], b[2], c1, c2, c3);
+    mul_add_c(a[2], b[1], c1, c2, c3);
+    mul_add_c(a[3], b[0], c1, c2, c3);
+    r[3] = c1;
+    c1 = 0;
+    mul_add_c(a[3], b[1], c2, c3, c1);
+    mul_add_c(a[2], b[2], c2, c3, c1);
+    mul_add_c(a[1], b[3], c2, c3, c1);
+    r[4] = c2;
+    c2 = 0;
+    mul_add_c(a[2], b[3], c3, c1, c2);
+    mul_add_c(a[3], b[2], c3, c1, c2);
+    r[5] = c3;
+    c3 = 0;
+    mul_add_c(a[3], b[3], c1, c2, c3);
+    r[6] = c1;
+    r[7] = c2;
+}
+
+void bn_sqr_comba8(BN_ULONG *r, const BN_ULONG *a)
+{
+    BN_ULONG c1, c2, c3;
+
+    c1 = 0;
+    c2 = 0;
+    c3 = 0;
+    sqr_add_c(a, 0, c1, c2, c3);
+    r[0] = c1;
+    c1 = 0;
+    sqr_add_c2(a, 1, 0, c2, c3, c1);
+    r[1] = c2;
+    c2 = 0;
+    sqr_add_c(a, 1, c3, c1, c2);
+    sqr_add_c2(a, 2, 0, c3, c1, c2);
+    r[2] = c3;
+    c3 = 0;
+    sqr_add_c2(a, 3, 0, c1, c2, c3);
+    sqr_add_c2(a, 2, 1, c1, c2, c3);
+    r[3] = c1;
+    c1 = 0;
+    sqr_add_c(a, 2, c2, c3, c1);
+    sqr_add_c2(a, 3, 1, c2, c3, c1);
+    sqr_add_c2(a, 4, 0, c2, c3, c1);
+    r[4] = c2;
+    c2 = 0;
+    sqr_add_c2(a, 5, 0, c3, c1, c2);
+    sqr_add_c2(a, 4, 1, c3, c1, c2);
+    sqr_add_c2(a, 3, 2, c3, c1, c2);
+    r[5] = c3;
+    c3 = 0;
+    sqr_add_c(a, 3, c1, c2, c3);
+    sqr_add_c2(a, 4, 2, c1, c2, c3);
+    sqr_add_c2(a, 5, 1, c1, c2, c3);
+    sqr_add_c2(a, 6, 0, c1, c2, c3);
+    r[6] = c1;
+    c1 = 0;
+    sqr_add_c2(a, 7, 0, c2, c3, c1);
+    sqr_add_c2(a, 6, 1, c2, c3, c1);
+    sqr_add_c2(a, 5, 2, c2, c3, c1);
+    sqr_add_c2(a, 4, 3, c2, c3, c1);
+    r[7] = c2;
+    c2 = 0;
+    sqr_add_c(a, 4, c3, c1, c2);
+    sqr_add_c2(a, 5, 3, c3, c1, c2);
+    sqr_add_c2(a, 6, 2, c3, c1, c2);
+    sqr_add_c2(a, 7, 1, c3, c1, c2);
+    r[8] = c3;
+    c3 = 0;
+    sqr_add_c2(a, 7, 2, c1, c2, c3);
+    sqr_add_c2(a, 6, 3, c1, c2, c3);
+    sqr_add_c2(a, 5, 4, c1, c2, c3);
+    r[9] = c1;
+    c1 = 0;
+    sqr_add_c(a, 5, c2, c3, c1);
+    sqr_add_c2(a, 6, 4, c2, c3, c1);
+    sqr_add_c2(a, 7, 3, c2, c3, c1);
+    r[10] = c2;
+    c2 = 0;
+    sqr_add_c2(a, 7, 4, c3, c1, c2);
+    sqr_add_c2(a, 6, 5, c3, c1, c2);
+    r[11] = c3;
+    c3 = 0;
+    sqr_add_c(a, 6, c1, c2, c3);
+    sqr_add_c2(a, 7, 5, c1, c2, c3);
+    r[12] = c1;
+    c1 = 0;
+    sqr_add_c2(a, 7, 6, c2, c3, c1);
+    r[13] = c2;
+    c2 = 0;
+    sqr_add_c(a, 7, c3, c1, c2);
+    r[14] = c3;
+    r[15] = c1;
+}
+
+void bn_sqr_comba4(BN_ULONG *r, const BN_ULONG *a)
+{
+    BN_ULONG c1, c2, c3;
+
+    c1 = 0;
+    c2 = 0;
+    c3 = 0;
+    sqr_add_c(a, 0, c1, c2, c3);
+    r[0] = c1;
+    c1 = 0;
+    sqr_add_c2(a, 1, 0, c2, c3, c1);
+    r[1] = c2;
+    c2 = 0;
+    sqr_add_c(a, 1, c3, c1, c2);
+    sqr_add_c2(a, 2, 0, c3, c1, c2);
+    r[2] = c3;
+    c3 = 0;
+    sqr_add_c2(a, 3, 0, c1, c2, c3);
+    sqr_add_c2(a, 2, 1, c1, c2, c3);
+    r[3] = c1;
+    c1 = 0;
+    sqr_add_c(a, 2, c2, c3, c1);
+    sqr_add_c2(a, 3, 1, c2, c3, c1);
+    r[4] = c2;
+    c2 = 0;
+    sqr_add_c2(a, 3, 2, c3, c1, c2);
+    r[5] = c3;
+    c3 = 0;
+    sqr_add_c(a, 3, c1, c2, c3);
+    r[6] = c1;
+    r[7] = c2;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86_64-gf2m.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86_64-gf2m.pl
new file mode 100644
index 000000000..0fd6e985d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86_64-gf2m.pl
@@ -0,0 +1,424 @@
+#! /usr/bin/env perl
+# Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# May 2011
+#
+# The module implements bn_GF2m_mul_2x2 polynomial multiplication used
+# in bn_gf2m.c. It's kind of low-hanging mechanical port from C for
+# the time being... Except that it has two code paths: code suitable
+# for any x86_64 CPU and PCLMULQDQ one suitable for Westmere and
+# later. Improvement varies from one benchmark and µ-arch to another.
+# Vanilla code path is at most 20% faster than compiler-generated code
+# [not very impressive], while PCLMULQDQ - whole 85%-160% better on
+# 163- and 571-bit ECDH benchmarks on Intel CPUs. Keep in mind that
+# these coefficients are not ones for bn_GF2m_mul_2x2 itself, as not
+# all CPU time is burnt in it...
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+($lo,$hi)=("%rax","%rdx");	$a=$lo;
+($i0,$i1)=("%rsi","%rdi");
+($t0,$t1)=("%rbx","%rcx");
+($b,$mask)=("%rbp","%r8");
+($a1,$a2,$a4,$a8,$a12,$a48)=map("%r$_",(9..15));
+($R,$Tx)=("%xmm0","%xmm1");
+
+$code.=<<___;
+.text
+
+.type	_mul_1x1,\@abi-omnipotent
+.align	16
+_mul_1x1:
+.cfi_startproc
+	sub	\$128+8,%rsp
+.cfi_adjust_cfa_offset	128+8
+	mov	\$-1,$a1
+	lea	($a,$a),$i0
+	shr	\$3,$a1
+	lea	(,$a,4),$i1
+	and	$a,$a1			# a1=a&0x1fffffffffffffff
+	lea	(,$a,8),$a8
+	sar	\$63,$a			# broadcast 63rd bit
+	lea	($a1,$a1),$a2
+	sar	\$63,$i0		# broadcast 62nd bit
+	lea	(,$a1,4),$a4
+	and	$b,$a
+	sar	\$63,$i1		# broadcast 61st bit
+	mov	$a,$hi			# $a is $lo
+	shl	\$63,$lo
+	and	$b,$i0
+	shr	\$1,$hi
+	mov	$i0,$t1
+	shl	\$62,$i0
+	and	$b,$i1
+	shr	\$2,$t1
+	xor	$i0,$lo
+	mov	$i1,$t0
+	shl	\$61,$i1
+	xor	$t1,$hi
+	shr	\$3,$t0
+	xor	$i1,$lo
+	xor	$t0,$hi
+
+	mov	$a1,$a12
+	movq	\$0,0(%rsp)		# tab[0]=0
+	xor	$a2,$a12		# a1^a2
+	mov	$a1,8(%rsp)		# tab[1]=a1
+	 mov	$a4,$a48
+	mov	$a2,16(%rsp)		# tab[2]=a2
+	 xor	$a8,$a48		# a4^a8
+	mov	$a12,24(%rsp)		# tab[3]=a1^a2
+
+	xor	$a4,$a1
+	mov	$a4,32(%rsp)		# tab[4]=a4
+	xor	$a4,$a2
+	mov	$a1,40(%rsp)		# tab[5]=a1^a4
+	xor	$a4,$a12
+	mov	$a2,48(%rsp)		# tab[6]=a2^a4
+	 xor	$a48,$a1		# a1^a4^a4^a8=a1^a8
+	mov	$a12,56(%rsp)		# tab[7]=a1^a2^a4
+	 xor	$a48,$a2		# a2^a4^a4^a8=a1^a8
+
+	mov	$a8,64(%rsp)		# tab[8]=a8
+	xor	$a48,$a12		# a1^a2^a4^a4^a8=a1^a2^a8
+	mov	$a1,72(%rsp)		# tab[9]=a1^a8
+	 xor	$a4,$a1			# a1^a8^a4
+	mov	$a2,80(%rsp)		# tab[10]=a2^a8
+	 xor	$a4,$a2			# a2^a8^a4
+	mov	$a12,88(%rsp)		# tab[11]=a1^a2^a8
+
+	xor	$a4,$a12		# a1^a2^a8^a4
+	mov	$a48,96(%rsp)		# tab[12]=a4^a8
+	 mov	$mask,$i0
+	mov	$a1,104(%rsp)		# tab[13]=a1^a4^a8
+	 and	$b,$i0
+	mov	$a2,112(%rsp)		# tab[14]=a2^a4^a8
+	 shr	\$4,$b
+	mov	$a12,120(%rsp)		# tab[15]=a1^a2^a4^a8
+	 mov	$mask,$i1
+	 and	$b,$i1
+	 shr	\$4,$b
+
+	movq	(%rsp,$i0,8),$R		# half of calculations is done in SSE2
+	mov	$mask,$i0
+	and	$b,$i0
+	shr	\$4,$b
+___
+    for ($n=1;$n<8;$n++) {
+	$code.=<<___;
+	mov	(%rsp,$i1,8),$t1
+	mov	$mask,$i1
+	mov	$t1,$t0
+	shl	\$`8*$n-4`,$t1
+	and	$b,$i1
+	 movq	(%rsp,$i0,8),$Tx
+	shr	\$`64-(8*$n-4)`,$t0
+	xor	$t1,$lo
+	 pslldq	\$$n,$Tx
+	 mov	$mask,$i0
+	shr	\$4,$b
+	xor	$t0,$hi
+	 and	$b,$i0
+	 shr	\$4,$b
+	 pxor	$Tx,$R
+___
+    }
+$code.=<<___;
+	mov	(%rsp,$i1,8),$t1
+	mov	$t1,$t0
+	shl	\$`8*$n-4`,$t1
+	movq	$R,$i0
+	shr	\$`64-(8*$n-4)`,$t0
+	xor	$t1,$lo
+	psrldq	\$8,$R
+	xor	$t0,$hi
+	movq	$R,$i1
+	xor	$i0,$lo
+	xor	$i1,$hi
+
+	add	\$128+8,%rsp
+.cfi_adjust_cfa_offset	-128-8
+	ret
+.Lend_mul_1x1:
+.cfi_endproc
+.size	_mul_1x1,.-_mul_1x1
+___
+
+($rp,$a1,$a0,$b1,$b0) = $win64?	("%rcx","%rdx","%r8", "%r9","%r10") :	# Win64 order
+				("%rdi","%rsi","%rdx","%rcx","%r8");	# Unix order
+
+$code.=<<___;
+.extern	OPENSSL_ia32cap_P
+.globl	bn_GF2m_mul_2x2
+.type	bn_GF2m_mul_2x2,\@abi-omnipotent
+.align	16
+bn_GF2m_mul_2x2:
+.cfi_startproc
+	mov	%rsp,%rax
+	mov	OPENSSL_ia32cap_P(%rip),%r10
+	bt	\$33,%r10
+	jnc	.Lvanilla_mul_2x2
+
+	movq		$a1,%xmm0
+	movq		$b1,%xmm1
+	movq		$a0,%xmm2
+___
+$code.=<<___ if ($win64);
+	movq		40(%rsp),%xmm3
+___
+$code.=<<___ if (!$win64);
+	movq		$b0,%xmm3
+___
+$code.=<<___;
+	movdqa		%xmm0,%xmm4
+	movdqa		%xmm1,%xmm5
+	pclmulqdq	\$0,%xmm1,%xmm0	# a1·b1
+	pxor		%xmm2,%xmm4
+	pxor		%xmm3,%xmm5
+	pclmulqdq	\$0,%xmm3,%xmm2	# a0·b0
+	pclmulqdq	\$0,%xmm5,%xmm4	# (a0+a1)·(b0+b1)
+	xorps		%xmm0,%xmm4
+	xorps		%xmm2,%xmm4	# (a0+a1)·(b0+b1)-a0·b0-a1·b1
+	movdqa		%xmm4,%xmm5
+	pslldq		\$8,%xmm4
+	psrldq		\$8,%xmm5
+	pxor		%xmm4,%xmm2
+	pxor		%xmm5,%xmm0
+	movdqu		%xmm2,0($rp)
+	movdqu		%xmm0,16($rp)
+	ret
+
+.align	16
+.Lvanilla_mul_2x2:
+	lea	-8*17(%rsp),%rsp
+.cfi_adjust_cfa_offset	8*17
+___
+$code.=<<___ if ($win64);
+	mov	`8*17+40`(%rsp),$b0
+	mov	%rdi,8*15(%rsp)
+	mov	%rsi,8*16(%rsp)
+___
+$code.=<<___;
+	mov	%r14,8*10(%rsp)
+.cfi_rel_offset	%r14,8*10
+	mov	%r13,8*11(%rsp)
+.cfi_rel_offset	%r13,8*11
+	mov	%r12,8*12(%rsp)
+.cfi_rel_offset	%r12,8*12
+	mov	%rbp,8*13(%rsp)
+.cfi_rel_offset	%rbp,8*13
+	mov	%rbx,8*14(%rsp)
+.cfi_rel_offset	%rbx,8*14
+.Lbody_mul_2x2:
+	mov	$rp,32(%rsp)		# save the arguments
+	mov	$a1,40(%rsp)
+	mov	$a0,48(%rsp)
+	mov	$b1,56(%rsp)
+	mov	$b0,64(%rsp)
+
+	mov	\$0xf,$mask
+	mov	$a1,$a
+	mov	$b1,$b
+	call	_mul_1x1		# a1·b1
+	mov	$lo,16(%rsp)
+	mov	$hi,24(%rsp)
+
+	mov	48(%rsp),$a
+	mov	64(%rsp),$b
+	call	_mul_1x1		# a0·b0
+	mov	$lo,0(%rsp)
+	mov	$hi,8(%rsp)
+
+	mov	40(%rsp),$a
+	mov	56(%rsp),$b
+	xor	48(%rsp),$a
+	xor	64(%rsp),$b
+	call	_mul_1x1		# (a0+a1)·(b0+b1)
+___
+	@r=("%rbx","%rcx","%rdi","%rsi");
+$code.=<<___;
+	mov	0(%rsp),@r[0]
+	mov	8(%rsp),@r[1]
+	mov	16(%rsp),@r[2]
+	mov	24(%rsp),@r[3]
+	mov	32(%rsp),%rbp
+
+	xor	$hi,$lo
+	xor	@r[1],$hi
+	xor	@r[0],$lo
+	mov	@r[0],0(%rbp)
+	xor	@r[2],$hi
+	mov	@r[3],24(%rbp)
+	xor	@r[3],$lo
+	xor	@r[3],$hi
+	xor	$hi,$lo
+	mov	$hi,16(%rbp)
+	mov	$lo,8(%rbp)
+
+	mov	8*10(%rsp),%r14
+.cfi_restore	%r14
+	mov	8*11(%rsp),%r13
+.cfi_restore	%r13
+	mov	8*12(%rsp),%r12
+.cfi_restore	%r12
+	mov	8*13(%rsp),%rbp
+.cfi_restore	%rbp
+	mov	8*14(%rsp),%rbx
+.cfi_restore	%rbx
+___
+$code.=<<___ if ($win64);
+	mov	8*15(%rsp),%rdi
+	mov	8*16(%rsp),%rsi
+___
+$code.=<<___;
+	lea	8*17(%rsp),%rsp
+.cfi_adjust_cfa_offset	-8*17
+.Lepilogue_mul_2x2:
+	ret
+.Lend_mul_2x2:
+.cfi_endproc
+.size	bn_GF2m_mul_2x2,.-bn_GF2m_mul_2x2
+.asciz	"GF(2^m) Multiplication for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+.align	16
+___
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#               CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern __imp_RtlVirtualUnwind
+
+.type	se_handler,\@abi-omnipotent
+.align	16
+se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	lea	.Lbody_mul_2x2(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<"prologue" label
+	jb	.Lin_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	lea	.Lepilogue_mul_2x2(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip>="epilogue" label
+	jae	.Lin_prologue
+
+	mov	8*10(%rax),%r14		# mimic epilogue
+	mov	8*11(%rax),%r13
+	mov	8*12(%rax),%r12
+	mov	8*13(%rax),%rbp
+	mov	8*14(%rax),%rbx
+	mov	8*15(%rax),%rdi
+	mov	8*16(%rax),%rsi
+
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+
+	lea	8*17(%rax),%rax
+
+.Lin_prologue:
+	mov	%rax,152($context)	# restore context->Rsp
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	se_handler,.-se_handler
+
+.section	.pdata
+.align	4
+	.rva	_mul_1x1
+	.rva	.Lend_mul_1x1
+	.rva	.LSEH_info_1x1
+
+	.rva	.Lvanilla_mul_2x2
+	.rva	.Lend_mul_2x2
+	.rva	.LSEH_info_2x2
+.section	.xdata
+.align	8
+.LSEH_info_1x1:
+	.byte	0x01,0x07,0x02,0x00
+	.byte	0x07,0x01,0x11,0x00	# sub rsp,128+8
+.LSEH_info_2x2:
+	.byte	9,0,0,0
+	.rva	se_handler
+___
+}
+
+$code =~ s/\`([^\`]*)\`/eval($1)/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86_64-mont.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86_64-mont.pl
new file mode 100755
index 000000000..c051135e3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86_64-mont.pl
@@ -0,0 +1,1592 @@
+#! /usr/bin/env perl
+# Copyright 2005-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# October 2005.
+#
+# Montgomery multiplication routine for x86_64. While it gives modest
+# 9% improvement of rsa4096 sign on Opteron, rsa512 sign runs more
+# than twice, >2x, as fast. Most common rsa1024 sign is improved by
+# respectful 50%. It remains to be seen if loop unrolling and
+# dedicated squaring routine can provide further improvement...
+
+# July 2011.
+#
+# Add dedicated squaring procedure. Performance improvement varies
+# from platform to platform, but in average it's ~5%/15%/25%/33%
+# for 512-/1024-/2048-/4096-bit RSA *sign* benchmarks respectively.
+
+# August 2011.
+#
+# Unroll and modulo-schedule inner loops in such manner that they
+# are "fallen through" for input lengths of 8, which is critical for
+# 1024-bit RSA *sign*. Average performance improvement in comparison
+# to *initial* version of this module from 2005 is ~0%/30%/40%/45%
+# for 512-/1024-/2048-/4096-bit RSA *sign* benchmarks respectively.
+
+# June 2013.
+#
+# Optimize reduction in squaring procedure and improve 1024+-bit RSA
+# sign performance by 10-16% on Intel Sandy Bridge and later
+# (virtually same on non-Intel processors).
+
+# August 2013.
+#
+# Add MULX/ADOX/ADCX code path.
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$addx = ($1>=2.23);
+}
+
+if (!$addx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	    `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$addx = ($1>=2.10);
+}
+
+if (!$addx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	    `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$addx = ($1>=12);
+}
+
+if (!$addx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([3-9])\.([0-9]+)/) {
+	my $ver = $2 + $3/100.0;	# 3.1->3.01, 3.10->3.10
+	$addx = ($ver>=3.03);
+}
+
+# int bn_mul_mont(
+$rp="%rdi";	# BN_ULONG *rp,
+$ap="%rsi";	# const BN_ULONG *ap,
+$bp="%rdx";	# const BN_ULONG *bp,
+$np="%rcx";	# const BN_ULONG *np,
+$n0="%r8";	# const BN_ULONG *n0,
+$num="%r9";	# int num);
+$lo0="%r10";
+$hi0="%r11";
+$hi1="%r13";
+$i="%r14";
+$j="%r15";
+$m0="%rbx";
+$m1="%rbp";
+
+$code=<<___;
+.text
+
+.extern	OPENSSL_ia32cap_P
+
+.globl	bn_mul_mont
+.type	bn_mul_mont,\@function,6
+.align	16
+bn_mul_mont:
+.cfi_startproc
+	mov	${num}d,${num}d
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	test	\$3,${num}d
+	jnz	.Lmul_enter
+	cmp	\$8,${num}d
+	jb	.Lmul_enter
+___
+$code.=<<___ if ($addx);
+	mov	OPENSSL_ia32cap_P+8(%rip),%r11d
+___
+$code.=<<___;
+	cmp	$ap,$bp
+	jne	.Lmul4x_enter
+	test	\$7,${num}d
+	jz	.Lsqr8x_enter
+	jmp	.Lmul4x_enter
+
+.align	16
+.Lmul_enter:
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+
+	neg	$num
+	mov	%rsp,%r11
+	lea	-16(%rsp,$num,8),%r10	# future alloca(8*(num+2))
+	neg	$num			# restore $num
+	and	\$-1024,%r10		# minimize TLB usage
+
+	# An OS-agnostic version of __chkstk.
+	#
+	# Some OSes (Windows) insist on stack being "wired" to
+	# physical memory in strictly sequential manner, i.e. if stack
+	# allocation spans two pages, then reference to farmost one can
+	# be punishable by SEGV. But page walking can do good even on
+	# other OSes, because it guarantees that villain thread hits
+	# the guard page before it can make damage to innocent one...
+	sub	%r10,%r11
+	and	\$-4096,%r11
+	lea	(%r10,%r11),%rsp
+	mov	(%rsp),%r11
+	cmp	%r10,%rsp
+	ja	.Lmul_page_walk
+	jmp	.Lmul_page_walk_done
+
+.align	16
+.Lmul_page_walk:
+	lea	-4096(%rsp),%rsp
+	mov	(%rsp),%r11
+	cmp	%r10,%rsp
+	ja	.Lmul_page_walk
+.Lmul_page_walk_done:
+
+	mov	%rax,8(%rsp,$num,8)	# tp[num+1]=%rsp
+.cfi_cfa_expression	%rsp+8,$num,8,mul,plus,deref,+8
+.Lmul_body:
+	mov	$bp,%r12		# reassign $bp
+___
+		$bp="%r12";
+$code.=<<___;
+	mov	($n0),$n0		# pull n0[0] value
+	mov	($bp),$m0		# m0=bp[0]
+	mov	($ap),%rax
+
+	xor	$i,$i			# i=0
+	xor	$j,$j			# j=0
+
+	mov	$n0,$m1
+	mulq	$m0			# ap[0]*bp[0]
+	mov	%rax,$lo0
+	mov	($np),%rax
+
+	imulq	$lo0,$m1		# "tp[0]"*n0
+	mov	%rdx,$hi0
+
+	mulq	$m1			# np[0]*m1
+	add	%rax,$lo0		# discarded
+	mov	8($ap),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$hi1
+
+	lea	1($j),$j		# j++
+	jmp	.L1st_enter
+
+.align	16
+.L1st:
+	add	%rax,$hi1
+	mov	($ap,$j,8),%rax
+	adc	\$0,%rdx
+	add	$hi0,$hi1		# np[j]*m1+ap[j]*bp[0]
+	mov	$lo0,$hi0
+	adc	\$0,%rdx
+	mov	$hi1,-16(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$hi1
+
+.L1st_enter:
+	mulq	$m0			# ap[j]*bp[0]
+	add	%rax,$hi0
+	mov	($np,$j,8),%rax
+	adc	\$0,%rdx
+	lea	1($j),$j		# j++
+	mov	%rdx,$lo0
+
+	mulq	$m1			# np[j]*m1
+	cmp	$num,$j
+	jne	.L1st
+
+	add	%rax,$hi1
+	mov	($ap),%rax		# ap[0]
+	adc	\$0,%rdx
+	add	$hi0,$hi1		# np[j]*m1+ap[j]*bp[0]
+	adc	\$0,%rdx
+	mov	$hi1,-16(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$hi1
+	mov	$lo0,$hi0
+
+	xor	%rdx,%rdx
+	add	$hi0,$hi1
+	adc	\$0,%rdx
+	mov	$hi1,-8(%rsp,$num,8)
+	mov	%rdx,(%rsp,$num,8)	# store upmost overflow bit
+
+	lea	1($i),$i		# i++
+	jmp	.Louter
+.align	16
+.Louter:
+	mov	($bp,$i,8),$m0		# m0=bp[i]
+	xor	$j,$j			# j=0
+	mov	$n0,$m1
+	mov	(%rsp),$lo0
+	mulq	$m0			# ap[0]*bp[i]
+	add	%rax,$lo0		# ap[0]*bp[i]+tp[0]
+	mov	($np),%rax
+	adc	\$0,%rdx
+
+	imulq	$lo0,$m1		# tp[0]*n0
+	mov	%rdx,$hi0
+
+	mulq	$m1			# np[0]*m1
+	add	%rax,$lo0		# discarded
+	mov	8($ap),%rax
+	adc	\$0,%rdx
+	mov	8(%rsp),$lo0		# tp[1]
+	mov	%rdx,$hi1
+
+	lea	1($j),$j		# j++
+	jmp	.Linner_enter
+
+.align	16
+.Linner:
+	add	%rax,$hi1
+	mov	($ap,$j,8),%rax
+	adc	\$0,%rdx
+	add	$lo0,$hi1		# np[j]*m1+ap[j]*bp[i]+tp[j]
+	mov	(%rsp,$j,8),$lo0
+	adc	\$0,%rdx
+	mov	$hi1,-16(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$hi1
+
+.Linner_enter:
+	mulq	$m0			# ap[j]*bp[i]
+	add	%rax,$hi0
+	mov	($np,$j,8),%rax
+	adc	\$0,%rdx
+	add	$hi0,$lo0		# ap[j]*bp[i]+tp[j]
+	mov	%rdx,$hi0
+	adc	\$0,$hi0
+	lea	1($j),$j		# j++
+
+	mulq	$m1			# np[j]*m1
+	cmp	$num,$j
+	jne	.Linner
+
+	add	%rax,$hi1
+	mov	($ap),%rax		# ap[0]
+	adc	\$0,%rdx
+	add	$lo0,$hi1		# np[j]*m1+ap[j]*bp[i]+tp[j]
+	mov	(%rsp,$j,8),$lo0
+	adc	\$0,%rdx
+	mov	$hi1,-16(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$hi1
+
+	xor	%rdx,%rdx
+	add	$hi0,$hi1
+	adc	\$0,%rdx
+	add	$lo0,$hi1		# pull upmost overflow bit
+	adc	\$0,%rdx
+	mov	$hi1,-8(%rsp,$num,8)
+	mov	%rdx,(%rsp,$num,8)	# store upmost overflow bit
+
+	lea	1($i),$i		# i++
+	cmp	$num,$i
+	jb	.Louter
+
+	xor	$i,$i			# i=0 and clear CF!
+	mov	(%rsp),%rax		# tp[0]
+	mov	$num,$j			# j=num
+
+.align	16
+.Lsub:	sbb	($np,$i,8),%rax
+	mov	%rax,($rp,$i,8)		# rp[i]=tp[i]-np[i]
+	mov	8(%rsp,$i,8),%rax	# tp[i+1]
+	lea	1($i),$i		# i++
+	dec	$j			# doesn't affect CF!
+	jnz	.Lsub
+
+	sbb	\$0,%rax		# handle upmost overflow bit
+	mov	\$-1,%rbx
+	xor	%rax,%rbx		# not %rax
+	xor	$i,$i
+	mov	$num,$j			# j=num
+
+.Lcopy:					# conditional copy
+	mov	($rp,$i,8),%rcx
+	mov	(%rsp,$i,8),%rdx
+	and	%rbx,%rcx
+	and	%rax,%rdx
+	mov	$num,(%rsp,$i,8)	# zap temporary vector
+	or	%rcx,%rdx
+	mov	%rdx,($rp,$i,8)		# rp[i]=tp[i]
+	lea	1($i),$i
+	sub	\$1,$j
+	jnz	.Lcopy
+
+	mov	8(%rsp,$num,8),%rsi	# restore %rsp
+.cfi_def_cfa	%rsi,8
+	mov	\$1,%rax
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lmul_epilogue:
+	ret
+.cfi_endproc
+.size	bn_mul_mont,.-bn_mul_mont
+___
+{{{
+my @A=("%r10","%r11");
+my @N=("%r13","%rdi");
+$code.=<<___;
+.type	bn_mul4x_mont,\@function,6
+.align	16
+bn_mul4x_mont:
+.cfi_startproc
+	mov	${num}d,${num}d
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+.Lmul4x_enter:
+___
+$code.=<<___ if ($addx);
+	and	\$0x80100,%r11d
+	cmp	\$0x80100,%r11d
+	je	.Lmulx4x_enter
+___
+$code.=<<___;
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+
+	neg	$num
+	mov	%rsp,%r11
+	lea	-32(%rsp,$num,8),%r10	# future alloca(8*(num+4))
+	neg	$num			# restore
+	and	\$-1024,%r10		# minimize TLB usage
+
+	sub	%r10,%r11
+	and	\$-4096,%r11
+	lea	(%r10,%r11),%rsp
+	mov	(%rsp),%r11
+	cmp	%r10,%rsp
+	ja	.Lmul4x_page_walk
+	jmp	.Lmul4x_page_walk_done
+
+.Lmul4x_page_walk:
+	lea	-4096(%rsp),%rsp
+	mov	(%rsp),%r11
+	cmp	%r10,%rsp
+	ja	.Lmul4x_page_walk
+.Lmul4x_page_walk_done:
+
+	mov	%rax,8(%rsp,$num,8)	# tp[num+1]=%rsp
+.cfi_cfa_expression	%rsp+8,$num,8,mul,plus,deref,+8
+.Lmul4x_body:
+	mov	$rp,16(%rsp,$num,8)	# tp[num+2]=$rp
+	mov	%rdx,%r12		# reassign $bp
+___
+		$bp="%r12";
+$code.=<<___;
+	mov	($n0),$n0		# pull n0[0] value
+	mov	($bp),$m0		# m0=bp[0]
+	mov	($ap),%rax
+
+	xor	$i,$i			# i=0
+	xor	$j,$j			# j=0
+
+	mov	$n0,$m1
+	mulq	$m0			# ap[0]*bp[0]
+	mov	%rax,$A[0]
+	mov	($np),%rax
+
+	imulq	$A[0],$m1		# "tp[0]"*n0
+	mov	%rdx,$A[1]
+
+	mulq	$m1			# np[0]*m1
+	add	%rax,$A[0]		# discarded
+	mov	8($ap),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$N[1]
+
+	mulq	$m0
+	add	%rax,$A[1]
+	mov	8($np),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$A[0]
+
+	mulq	$m1
+	add	%rax,$N[1]
+	mov	16($ap),%rax
+	adc	\$0,%rdx
+	add	$A[1],$N[1]
+	lea	4($j),$j		# j++
+	adc	\$0,%rdx
+	mov	$N[1],(%rsp)
+	mov	%rdx,$N[0]
+	jmp	.L1st4x
+.align	16
+.L1st4x:
+	mulq	$m0			# ap[j]*bp[0]
+	add	%rax,$A[0]
+	mov	-16($np,$j,8),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$A[1]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[0]
+	mov	-8($ap,$j,8),%rax
+	adc	\$0,%rdx
+	add	$A[0],$N[0]		# np[j]*m1+ap[j]*bp[0]
+	adc	\$0,%rdx
+	mov	$N[0],-24(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$N[1]
+
+	mulq	$m0			# ap[j]*bp[0]
+	add	%rax,$A[1]
+	mov	-8($np,$j,8),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$A[0]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[1]
+	mov	($ap,$j,8),%rax
+	adc	\$0,%rdx
+	add	$A[1],$N[1]		# np[j]*m1+ap[j]*bp[0]
+	adc	\$0,%rdx
+	mov	$N[1],-16(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$N[0]
+
+	mulq	$m0			# ap[j]*bp[0]
+	add	%rax,$A[0]
+	mov	($np,$j,8),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$A[1]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[0]
+	mov	8($ap,$j,8),%rax
+	adc	\$0,%rdx
+	add	$A[0],$N[0]		# np[j]*m1+ap[j]*bp[0]
+	adc	\$0,%rdx
+	mov	$N[0],-8(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$N[1]
+
+	mulq	$m0			# ap[j]*bp[0]
+	add	%rax,$A[1]
+	mov	8($np,$j,8),%rax
+	adc	\$0,%rdx
+	lea	4($j),$j		# j++
+	mov	%rdx,$A[0]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[1]
+	mov	-16($ap,$j,8),%rax
+	adc	\$0,%rdx
+	add	$A[1],$N[1]		# np[j]*m1+ap[j]*bp[0]
+	adc	\$0,%rdx
+	mov	$N[1],-32(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$N[0]
+	cmp	$num,$j
+	jb	.L1st4x
+
+	mulq	$m0			# ap[j]*bp[0]
+	add	%rax,$A[0]
+	mov	-16($np,$j,8),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$A[1]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[0]
+	mov	-8($ap,$j,8),%rax
+	adc	\$0,%rdx
+	add	$A[0],$N[0]		# np[j]*m1+ap[j]*bp[0]
+	adc	\$0,%rdx
+	mov	$N[0],-24(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$N[1]
+
+	mulq	$m0			# ap[j]*bp[0]
+	add	%rax,$A[1]
+	mov	-8($np,$j,8),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$A[0]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[1]
+	mov	($ap),%rax		# ap[0]
+	adc	\$0,%rdx
+	add	$A[1],$N[1]		# np[j]*m1+ap[j]*bp[0]
+	adc	\$0,%rdx
+	mov	$N[1],-16(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$N[0]
+
+	xor	$N[1],$N[1]
+	add	$A[0],$N[0]
+	adc	\$0,$N[1]
+	mov	$N[0],-8(%rsp,$j,8)
+	mov	$N[1],(%rsp,$j,8)	# store upmost overflow bit
+
+	lea	1($i),$i		# i++
+.align	4
+.Louter4x:
+	mov	($bp,$i,8),$m0		# m0=bp[i]
+	xor	$j,$j			# j=0
+	mov	(%rsp),$A[0]
+	mov	$n0,$m1
+	mulq	$m0			# ap[0]*bp[i]
+	add	%rax,$A[0]		# ap[0]*bp[i]+tp[0]
+	mov	($np),%rax
+	adc	\$0,%rdx
+
+	imulq	$A[0],$m1		# tp[0]*n0
+	mov	%rdx,$A[1]
+
+	mulq	$m1			# np[0]*m1
+	add	%rax,$A[0]		# "$N[0]", discarded
+	mov	8($ap),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$N[1]
+
+	mulq	$m0			# ap[j]*bp[i]
+	add	%rax,$A[1]
+	mov	8($np),%rax
+	adc	\$0,%rdx
+	add	8(%rsp),$A[1]		# +tp[1]
+	adc	\$0,%rdx
+	mov	%rdx,$A[0]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[1]
+	mov	16($ap),%rax
+	adc	\$0,%rdx
+	add	$A[1],$N[1]		# np[j]*m1+ap[j]*bp[i]+tp[j]
+	lea	4($j),$j		# j+=2
+	adc	\$0,%rdx
+	mov	$N[1],(%rsp)		# tp[j-1]
+	mov	%rdx,$N[0]
+	jmp	.Linner4x
+.align	16
+.Linner4x:
+	mulq	$m0			# ap[j]*bp[i]
+	add	%rax,$A[0]
+	mov	-16($np,$j,8),%rax
+	adc	\$0,%rdx
+	add	-16(%rsp,$j,8),$A[0]	# ap[j]*bp[i]+tp[j]
+	adc	\$0,%rdx
+	mov	%rdx,$A[1]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[0]
+	mov	-8($ap,$j,8),%rax
+	adc	\$0,%rdx
+	add	$A[0],$N[0]
+	adc	\$0,%rdx
+	mov	$N[0],-24(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$N[1]
+
+	mulq	$m0			# ap[j]*bp[i]
+	add	%rax,$A[1]
+	mov	-8($np,$j,8),%rax
+	adc	\$0,%rdx
+	add	-8(%rsp,$j,8),$A[1]
+	adc	\$0,%rdx
+	mov	%rdx,$A[0]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[1]
+	mov	($ap,$j,8),%rax
+	adc	\$0,%rdx
+	add	$A[1],$N[1]
+	adc	\$0,%rdx
+	mov	$N[1],-16(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$N[0]
+
+	mulq	$m0			# ap[j]*bp[i]
+	add	%rax,$A[0]
+	mov	($np,$j,8),%rax
+	adc	\$0,%rdx
+	add	(%rsp,$j,8),$A[0]	# ap[j]*bp[i]+tp[j]
+	adc	\$0,%rdx
+	mov	%rdx,$A[1]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[0]
+	mov	8($ap,$j,8),%rax
+	adc	\$0,%rdx
+	add	$A[0],$N[0]
+	adc	\$0,%rdx
+	mov	$N[0],-8(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$N[1]
+
+	mulq	$m0			# ap[j]*bp[i]
+	add	%rax,$A[1]
+	mov	8($np,$j,8),%rax
+	adc	\$0,%rdx
+	add	8(%rsp,$j,8),$A[1]
+	adc	\$0,%rdx
+	lea	4($j),$j		# j++
+	mov	%rdx,$A[0]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[1]
+	mov	-16($ap,$j,8),%rax
+	adc	\$0,%rdx
+	add	$A[1],$N[1]
+	adc	\$0,%rdx
+	mov	$N[1],-32(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$N[0]
+	cmp	$num,$j
+	jb	.Linner4x
+
+	mulq	$m0			# ap[j]*bp[i]
+	add	%rax,$A[0]
+	mov	-16($np,$j,8),%rax
+	adc	\$0,%rdx
+	add	-16(%rsp,$j,8),$A[0]	# ap[j]*bp[i]+tp[j]
+	adc	\$0,%rdx
+	mov	%rdx,$A[1]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[0]
+	mov	-8($ap,$j,8),%rax
+	adc	\$0,%rdx
+	add	$A[0],$N[0]
+	adc	\$0,%rdx
+	mov	$N[0],-24(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$N[1]
+
+	mulq	$m0			# ap[j]*bp[i]
+	add	%rax,$A[1]
+	mov	-8($np,$j,8),%rax
+	adc	\$0,%rdx
+	add	-8(%rsp,$j,8),$A[1]
+	adc	\$0,%rdx
+	lea	1($i),$i		# i++
+	mov	%rdx,$A[0]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[1]
+	mov	($ap),%rax		# ap[0]
+	adc	\$0,%rdx
+	add	$A[1],$N[1]
+	adc	\$0,%rdx
+	mov	$N[1],-16(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$N[0]
+
+	xor	$N[1],$N[1]
+	add	$A[0],$N[0]
+	adc	\$0,$N[1]
+	add	(%rsp,$num,8),$N[0]	# pull upmost overflow bit
+	adc	\$0,$N[1]
+	mov	$N[0],-8(%rsp,$j,8)
+	mov	$N[1],(%rsp,$j,8)	# store upmost overflow bit
+
+	cmp	$num,$i
+	jb	.Louter4x
+___
+{
+my @ri=("%rax","%rdx",$m0,$m1);
+$code.=<<___;
+	mov	16(%rsp,$num,8),$rp	# restore $rp
+	lea	-4($num),$j
+	mov	0(%rsp),@ri[0]		# tp[0]
+	mov	8(%rsp),@ri[1]		# tp[1]
+	shr	\$2,$j			# j=num/4-1
+	lea	(%rsp),$ap		# borrow ap for tp
+	xor	$i,$i			# i=0 and clear CF!
+
+	sub	0($np),@ri[0]
+	mov	16($ap),@ri[2]		# tp[2]
+	mov	24($ap),@ri[3]		# tp[3]
+	sbb	8($np),@ri[1]
+
+.Lsub4x:
+	mov	@ri[0],0($rp,$i,8)	# rp[i]=tp[i]-np[i]
+	mov	@ri[1],8($rp,$i,8)	# rp[i]=tp[i]-np[i]
+	sbb	16($np,$i,8),@ri[2]
+	mov	32($ap,$i,8),@ri[0]	# tp[i+1]
+	mov	40($ap,$i,8),@ri[1]
+	sbb	24($np,$i,8),@ri[3]
+	mov	@ri[2],16($rp,$i,8)	# rp[i]=tp[i]-np[i]
+	mov	@ri[3],24($rp,$i,8)	# rp[i]=tp[i]-np[i]
+	sbb	32($np,$i,8),@ri[0]
+	mov	48($ap,$i,8),@ri[2]
+	mov	56($ap,$i,8),@ri[3]
+	sbb	40($np,$i,8),@ri[1]
+	lea	4($i),$i		# i++
+	dec	$j			# doesn't affect CF!
+	jnz	.Lsub4x
+
+	mov	@ri[0],0($rp,$i,8)	# rp[i]=tp[i]-np[i]
+	mov	32($ap,$i,8),@ri[0]	# load overflow bit
+	sbb	16($np,$i,8),@ri[2]
+	mov	@ri[1],8($rp,$i,8)	# rp[i]=tp[i]-np[i]
+	sbb	24($np,$i,8),@ri[3]
+	mov	@ri[2],16($rp,$i,8)	# rp[i]=tp[i]-np[i]
+
+	sbb	\$0,@ri[0]		# handle upmost overflow bit
+	mov	@ri[3],24($rp,$i,8)	# rp[i]=tp[i]-np[i]
+	pxor	%xmm0,%xmm0
+	movq	@ri[0],%xmm4
+	pcmpeqd	%xmm5,%xmm5
+	pshufd	\$0,%xmm4,%xmm4
+	mov	$num,$j
+	pxor	%xmm4,%xmm5
+	shr	\$2,$j			# j=num/4
+	xor	%eax,%eax		# i=0
+
+	jmp	.Lcopy4x
+.align	16
+.Lcopy4x:				# conditional copy
+	movdqa	(%rsp,%rax),%xmm1
+	movdqu	($rp,%rax),%xmm2
+	pand	%xmm4,%xmm1
+	pand	%xmm5,%xmm2
+	movdqa	16(%rsp,%rax),%xmm3
+	movdqa	%xmm0,(%rsp,%rax)
+	por	%xmm2,%xmm1
+	movdqu	16($rp,%rax),%xmm2
+	movdqu	%xmm1,($rp,%rax)
+	pand	%xmm4,%xmm3
+	pand	%xmm5,%xmm2
+	movdqa	%xmm0,16(%rsp,%rax)
+	por	%xmm2,%xmm3
+	movdqu	%xmm3,16($rp,%rax)
+	lea	32(%rax),%rax
+	dec	$j
+	jnz	.Lcopy4x
+___
+}
+$code.=<<___;
+	mov	8(%rsp,$num,8),%rsi	# restore %rsp
+.cfi_def_cfa	%rsi, 8
+	mov	\$1,%rax
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lmul4x_epilogue:
+	ret
+.cfi_endproc
+.size	bn_mul4x_mont,.-bn_mul4x_mont
+___
+}}}
+{{{
+######################################################################
+# void bn_sqr8x_mont(
+my $rptr="%rdi";	# const BN_ULONG *rptr,
+my $aptr="%rsi";	# const BN_ULONG *aptr,
+my $bptr="%rdx";	# not used
+my $nptr="%rcx";	# const BN_ULONG *nptr,
+my $n0  ="%r8";		# const BN_ULONG *n0);
+my $num ="%r9";		# int num, has to be divisible by 8
+
+my ($i,$j,$tptr)=("%rbp","%rcx",$rptr);
+my @A0=("%r10","%r11");
+my @A1=("%r12","%r13");
+my ($a0,$a1,$ai)=("%r14","%r15","%rbx");
+
+$code.=<<___	if ($addx);
+.extern	bn_sqrx8x_internal		# see x86_64-mont5 module
+___
+$code.=<<___;
+.extern	bn_sqr8x_internal		# see x86_64-mont5 module
+
+.type	bn_sqr8x_mont,\@function,6
+.align	32
+bn_sqr8x_mont:
+.cfi_startproc
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+.Lsqr8x_enter:
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lsqr8x_prologue:
+
+	mov	${num}d,%r10d
+	shl	\$3,${num}d		# convert $num to bytes
+	shl	\$3+2,%r10		# 4*$num
+	neg	$num
+
+	##############################################################
+	# ensure that stack frame doesn't alias with $aptr modulo
+	# 4096. this is done to allow memory disambiguation logic
+	# do its job.
+	#
+	lea	-64(%rsp,$num,2),%r11
+	mov	%rsp,%rbp
+	mov	($n0),$n0		# *n0
+	sub	$aptr,%r11
+	and	\$4095,%r11
+	cmp	%r11,%r10
+	jb	.Lsqr8x_sp_alt
+	sub	%r11,%rbp		# align with $aptr
+	lea	-64(%rbp,$num,2),%rbp	# future alloca(frame+2*$num)
+	jmp	.Lsqr8x_sp_done
+
+.align	32
+.Lsqr8x_sp_alt:
+	lea	4096-64(,$num,2),%r10	# 4096-frame-2*$num
+	lea	-64(%rbp,$num,2),%rbp	# future alloca(frame+2*$num)
+	sub	%r10,%r11
+	mov	\$0,%r10
+	cmovc	%r10,%r11
+	sub	%r11,%rbp
+.Lsqr8x_sp_done:
+	and	\$-64,%rbp
+	mov	%rsp,%r11
+	sub	%rbp,%r11
+	and	\$-4096,%r11
+	lea	(%rbp,%r11),%rsp
+	mov	(%rsp),%r10
+	cmp	%rbp,%rsp
+	ja	.Lsqr8x_page_walk
+	jmp	.Lsqr8x_page_walk_done
+
+.align	16
+.Lsqr8x_page_walk:
+	lea	-4096(%rsp),%rsp
+	mov	(%rsp),%r10
+	cmp	%rbp,%rsp
+	ja	.Lsqr8x_page_walk
+.Lsqr8x_page_walk_done:
+
+	mov	$num,%r10
+	neg	$num
+
+	mov	$n0,  32(%rsp)
+	mov	%rax, 40(%rsp)		# save original %rsp
+.cfi_cfa_expression	%rsp+40,deref,+8
+.Lsqr8x_body:
+
+	movq	$nptr, %xmm2		# save pointer to modulus
+	pxor	%xmm0,%xmm0
+	movq	$rptr,%xmm1		# save $rptr
+	movq	%r10, %xmm3		# -$num
+___
+$code.=<<___ if ($addx);
+	mov	OPENSSL_ia32cap_P+8(%rip),%eax
+	and	\$0x80100,%eax
+	cmp	\$0x80100,%eax
+	jne	.Lsqr8x_nox
+
+	call	bn_sqrx8x_internal	# see x86_64-mont5 module
+					# %rax	top-most carry
+					# %rbp	nptr
+					# %rcx	-8*num
+					# %r8	end of tp[2*num]
+	lea	(%r8,%rcx),%rbx
+	mov	%rcx,$num
+	mov	%rcx,%rdx
+	movq	%xmm1,$rptr
+	sar	\$3+2,%rcx		# %cf=0
+	jmp	.Lsqr8x_sub
+
+.align	32
+.Lsqr8x_nox:
+___
+$code.=<<___;
+	call	bn_sqr8x_internal	# see x86_64-mont5 module
+					# %rax	top-most carry
+					# %rbp	nptr
+					# %r8	-8*num
+					# %rdi	end of tp[2*num]
+	lea	(%rdi,$num),%rbx
+	mov	$num,%rcx
+	mov	$num,%rdx
+	movq	%xmm1,$rptr
+	sar	\$3+2,%rcx		# %cf=0
+	jmp	.Lsqr8x_sub
+
+.align	32
+.Lsqr8x_sub:
+	mov	8*0(%rbx),%r12
+	mov	8*1(%rbx),%r13
+	mov	8*2(%rbx),%r14
+	mov	8*3(%rbx),%r15
+	lea	8*4(%rbx),%rbx
+	sbb	8*0(%rbp),%r12
+	sbb	8*1(%rbp),%r13
+	sbb	8*2(%rbp),%r14
+	sbb	8*3(%rbp),%r15
+	lea	8*4(%rbp),%rbp
+	mov	%r12,8*0($rptr)
+	mov	%r13,8*1($rptr)
+	mov	%r14,8*2($rptr)
+	mov	%r15,8*3($rptr)
+	lea	8*4($rptr),$rptr
+	inc	%rcx			# preserves %cf
+	jnz	.Lsqr8x_sub
+
+	sbb	\$0,%rax		# top-most carry
+	lea	(%rbx,$num),%rbx	# rewind
+	lea	($rptr,$num),$rptr	# rewind
+
+	movq	%rax,%xmm1
+	pxor	%xmm0,%xmm0
+	pshufd	\$0,%xmm1,%xmm1
+	mov	40(%rsp),%rsi		# restore %rsp
+.cfi_def_cfa	%rsi,8
+	jmp	.Lsqr8x_cond_copy
+
+.align	32
+.Lsqr8x_cond_copy:
+	movdqa	16*0(%rbx),%xmm2
+	movdqa	16*1(%rbx),%xmm3
+	lea	16*2(%rbx),%rbx
+	movdqu	16*0($rptr),%xmm4
+	movdqu	16*1($rptr),%xmm5
+	lea	16*2($rptr),$rptr
+	movdqa	%xmm0,-16*2(%rbx)	# zero tp
+	movdqa	%xmm0,-16*1(%rbx)
+	movdqa	%xmm0,-16*2(%rbx,%rdx)
+	movdqa	%xmm0,-16*1(%rbx,%rdx)
+	pcmpeqd	%xmm1,%xmm0
+	pand	%xmm1,%xmm2
+	pand	%xmm1,%xmm3
+	pand	%xmm0,%xmm4
+	pand	%xmm0,%xmm5
+	pxor	%xmm0,%xmm0
+	por	%xmm2,%xmm4
+	por	%xmm3,%xmm5
+	movdqu	%xmm4,-16*2($rptr)
+	movdqu	%xmm5,-16*1($rptr)
+	add	\$32,$num
+	jnz	.Lsqr8x_cond_copy
+
+	mov	\$1,%rax
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lsqr8x_epilogue:
+	ret
+.cfi_endproc
+.size	bn_sqr8x_mont,.-bn_sqr8x_mont
+___
+}}}
+
+if ($addx) {{{
+my $bp="%rdx";	# original value
+
+$code.=<<___;
+.type	bn_mulx4x_mont,\@function,6
+.align	32
+bn_mulx4x_mont:
+.cfi_startproc
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+.Lmulx4x_enter:
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lmulx4x_prologue:
+
+	shl	\$3,${num}d		# convert $num to bytes
+	xor	%r10,%r10
+	sub	$num,%r10		# -$num
+	mov	($n0),$n0		# *n0
+	lea	-72(%rsp,%r10),%rbp	# future alloca(frame+$num+8)
+	and	\$-128,%rbp
+	mov	%rsp,%r11
+	sub	%rbp,%r11
+	and	\$-4096,%r11
+	lea	(%rbp,%r11),%rsp
+	mov	(%rsp),%r10
+	cmp	%rbp,%rsp
+	ja	.Lmulx4x_page_walk
+	jmp	.Lmulx4x_page_walk_done
+
+.align	16
+.Lmulx4x_page_walk:
+	lea	-4096(%rsp),%rsp
+	mov	(%rsp),%r10
+	cmp	%rbp,%rsp
+	ja	.Lmulx4x_page_walk
+.Lmulx4x_page_walk_done:
+
+	lea	($bp,$num),%r10
+	##############################################################
+	# Stack layout
+	# +0	num
+	# +8	off-loaded &b[i]
+	# +16	end of b[num]
+	# +24	saved n0
+	# +32	saved rp
+	# +40	saved %rsp
+	# +48	inner counter
+	# +56
+	# +64	tmp[num+1]
+	#
+	mov	$num,0(%rsp)		# save $num
+	shr	\$5,$num
+	mov	%r10,16(%rsp)		# end of b[num]
+	sub	\$1,$num
+	mov	$n0, 24(%rsp)		# save *n0
+	mov	$rp, 32(%rsp)		# save $rp
+	mov	%rax,40(%rsp)		# save original %rsp
+.cfi_cfa_expression	%rsp+40,deref,+8
+	mov	$num,48(%rsp)		# inner counter
+	jmp	.Lmulx4x_body
+
+.align	32
+.Lmulx4x_body:
+___
+my ($aptr, $bptr, $nptr, $tptr, $mi,  $bi,  $zero, $num)=
+   ("%rsi","%rdi","%rcx","%rbx","%r8","%r9","%rbp","%rax");
+my $rptr=$bptr;
+$code.=<<___;
+	lea	8($bp),$bptr
+	mov	($bp),%rdx		# b[0], $bp==%rdx actually
+	lea	64+32(%rsp),$tptr
+	mov	%rdx,$bi
+
+	mulx	0*8($aptr),$mi,%rax	# a[0]*b[0]
+	mulx	1*8($aptr),%r11,%r14	# a[1]*b[0]
+	add	%rax,%r11
+	mov	$bptr,8(%rsp)		# off-load &b[i]
+	mulx	2*8($aptr),%r12,%r13	# ...
+	adc	%r14,%r12
+	adc	\$0,%r13
+
+	mov	$mi,$bptr		# borrow $bptr
+	imulq	24(%rsp),$mi		# "t[0]"*n0
+	xor	$zero,$zero		# cf=0, of=0
+
+	mulx	3*8($aptr),%rax,%r14
+	 mov	$mi,%rdx
+	lea	4*8($aptr),$aptr
+	adcx	%rax,%r13
+	adcx	$zero,%r14		# cf=0
+
+	mulx	0*8($nptr),%rax,%r10
+	adcx	%rax,$bptr		# discarded
+	adox	%r11,%r10
+	mulx	1*8($nptr),%rax,%r11
+	adcx	%rax,%r10
+	adox	%r12,%r11
+	.byte	0xc4,0x62,0xfb,0xf6,0xa1,0x10,0x00,0x00,0x00	# mulx	2*8($nptr),%rax,%r12
+	mov	48(%rsp),$bptr		# counter value
+	mov	%r10,-4*8($tptr)
+	adcx	%rax,%r11
+	adox	%r13,%r12
+	mulx	3*8($nptr),%rax,%r15
+	 mov	$bi,%rdx
+	mov	%r11,-3*8($tptr)
+	adcx	%rax,%r12
+	adox	$zero,%r15		# of=0
+	lea	4*8($nptr),$nptr
+	mov	%r12,-2*8($tptr)
+
+	jmp	.Lmulx4x_1st
+
+.align	32
+.Lmulx4x_1st:
+	adcx	$zero,%r15		# cf=0, modulo-scheduled
+	mulx	0*8($aptr),%r10,%rax	# a[4]*b[0]
+	adcx	%r14,%r10
+	mulx	1*8($aptr),%r11,%r14	# a[5]*b[0]
+	adcx	%rax,%r11
+	mulx	2*8($aptr),%r12,%rax	# ...
+	adcx	%r14,%r12
+	mulx	3*8($aptr),%r13,%r14
+	 .byte	0x67,0x67
+	 mov	$mi,%rdx
+	adcx	%rax,%r13
+	adcx	$zero,%r14		# cf=0
+	lea	4*8($aptr),$aptr
+	lea	4*8($tptr),$tptr
+
+	adox	%r15,%r10
+	mulx	0*8($nptr),%rax,%r15
+	adcx	%rax,%r10
+	adox	%r15,%r11
+	mulx	1*8($nptr),%rax,%r15
+	adcx	%rax,%r11
+	adox	%r15,%r12
+	mulx	2*8($nptr),%rax,%r15
+	mov	%r10,-5*8($tptr)
+	adcx	%rax,%r12
+	mov	%r11,-4*8($tptr)
+	adox	%r15,%r13
+	mulx	3*8($nptr),%rax,%r15
+	 mov	$bi,%rdx
+	mov	%r12,-3*8($tptr)
+	adcx	%rax,%r13
+	adox	$zero,%r15
+	lea	4*8($nptr),$nptr
+	mov	%r13,-2*8($tptr)
+
+	dec	$bptr			# of=0, pass cf
+	jnz	.Lmulx4x_1st
+
+	mov	0(%rsp),$num		# load num
+	mov	8(%rsp),$bptr		# re-load &b[i]
+	adc	$zero,%r15		# modulo-scheduled
+	add	%r15,%r14
+	sbb	%r15,%r15		# top-most carry
+	mov	%r14,-1*8($tptr)
+	jmp	.Lmulx4x_outer
+
+.align	32
+.Lmulx4x_outer:
+	mov	($bptr),%rdx		# b[i]
+	lea	8($bptr),$bptr		# b++
+	sub	$num,$aptr		# rewind $aptr
+	mov	%r15,($tptr)		# save top-most carry
+	lea	64+4*8(%rsp),$tptr
+	sub	$num,$nptr		# rewind $nptr
+
+	mulx	0*8($aptr),$mi,%r11	# a[0]*b[i]
+	xor	%ebp,%ebp		# xor	$zero,$zero	# cf=0, of=0
+	mov	%rdx,$bi
+	mulx	1*8($aptr),%r14,%r12	# a[1]*b[i]
+	adox	-4*8($tptr),$mi
+	adcx	%r14,%r11
+	mulx	2*8($aptr),%r15,%r13	# ...
+	adox	-3*8($tptr),%r11
+	adcx	%r15,%r12
+	adox	-2*8($tptr),%r12
+	adcx	$zero,%r13
+	adox	$zero,%r13
+
+	mov	$bptr,8(%rsp)		# off-load &b[i]
+	mov	$mi,%r15
+	imulq	24(%rsp),$mi		# "t[0]"*n0
+	xor	%ebp,%ebp		# xor	$zero,$zero	# cf=0, of=0
+
+	mulx	3*8($aptr),%rax,%r14
+	 mov	$mi,%rdx
+	adcx	%rax,%r13
+	adox	-1*8($tptr),%r13
+	adcx	$zero,%r14
+	lea	4*8($aptr),$aptr
+	adox	$zero,%r14
+
+	mulx	0*8($nptr),%rax,%r10
+	adcx	%rax,%r15		# discarded
+	adox	%r11,%r10
+	mulx	1*8($nptr),%rax,%r11
+	adcx	%rax,%r10
+	adox	%r12,%r11
+	mulx	2*8($nptr),%rax,%r12
+	mov	%r10,-4*8($tptr)
+	adcx	%rax,%r11
+	adox	%r13,%r12
+	mulx	3*8($nptr),%rax,%r15
+	 mov	$bi,%rdx
+	mov	%r11,-3*8($tptr)
+	lea	4*8($nptr),$nptr
+	adcx	%rax,%r12
+	adox	$zero,%r15		# of=0
+	mov	48(%rsp),$bptr		# counter value
+	mov	%r12,-2*8($tptr)
+
+	jmp	.Lmulx4x_inner
+
+.align	32
+.Lmulx4x_inner:
+	mulx	0*8($aptr),%r10,%rax	# a[4]*b[i]
+	adcx	$zero,%r15		# cf=0, modulo-scheduled
+	adox	%r14,%r10
+	mulx	1*8($aptr),%r11,%r14	# a[5]*b[i]
+	adcx	0*8($tptr),%r10
+	adox	%rax,%r11
+	mulx	2*8($aptr),%r12,%rax	# ...
+	adcx	1*8($tptr),%r11
+	adox	%r14,%r12
+	mulx	3*8($aptr),%r13,%r14
+	 mov	$mi,%rdx
+	adcx	2*8($tptr),%r12
+	adox	%rax,%r13
+	adcx	3*8($tptr),%r13
+	adox	$zero,%r14		# of=0
+	lea	4*8($aptr),$aptr
+	lea	4*8($tptr),$tptr
+	adcx	$zero,%r14		# cf=0
+
+	adox	%r15,%r10
+	mulx	0*8($nptr),%rax,%r15
+	adcx	%rax,%r10
+	adox	%r15,%r11
+	mulx	1*8($nptr),%rax,%r15
+	adcx	%rax,%r11
+	adox	%r15,%r12
+	mulx	2*8($nptr),%rax,%r15
+	mov	%r10,-5*8($tptr)
+	adcx	%rax,%r12
+	adox	%r15,%r13
+	mulx	3*8($nptr),%rax,%r15
+	 mov	$bi,%rdx
+	mov	%r11,-4*8($tptr)
+	mov	%r12,-3*8($tptr)
+	adcx	%rax,%r13
+	adox	$zero,%r15
+	lea	4*8($nptr),$nptr
+	mov	%r13,-2*8($tptr)
+
+	dec	$bptr			# of=0, pass cf
+	jnz	.Lmulx4x_inner
+
+	mov	0(%rsp),$num		# load num
+	mov	8(%rsp),$bptr		# re-load &b[i]
+	adc	$zero,%r15		# modulo-scheduled
+	sub	0*8($tptr),$zero	# pull top-most carry
+	adc	%r15,%r14
+	sbb	%r15,%r15		# top-most carry
+	mov	%r14,-1*8($tptr)
+
+	cmp	16(%rsp),$bptr
+	jne	.Lmulx4x_outer
+
+	lea	64(%rsp),$tptr
+	sub	$num,$nptr		# rewind $nptr
+	neg	%r15
+	mov	$num,%rdx
+	shr	\$3+2,$num		# %cf=0
+	mov	32(%rsp),$rptr		# restore rp
+	jmp	.Lmulx4x_sub
+
+.align	32
+.Lmulx4x_sub:
+	mov	8*0($tptr),%r11
+	mov	8*1($tptr),%r12
+	mov	8*2($tptr),%r13
+	mov	8*3($tptr),%r14
+	lea	8*4($tptr),$tptr
+	sbb	8*0($nptr),%r11
+	sbb	8*1($nptr),%r12
+	sbb	8*2($nptr),%r13
+	sbb	8*3($nptr),%r14
+	lea	8*4($nptr),$nptr
+	mov	%r11,8*0($rptr)
+	mov	%r12,8*1($rptr)
+	mov	%r13,8*2($rptr)
+	mov	%r14,8*3($rptr)
+	lea	8*4($rptr),$rptr
+	dec	$num			# preserves %cf
+	jnz	.Lmulx4x_sub
+
+	sbb	\$0,%r15		# top-most carry
+	lea	64(%rsp),$tptr
+	sub	%rdx,$rptr		# rewind
+
+	movq	%r15,%xmm1
+	pxor	%xmm0,%xmm0
+	pshufd	\$0,%xmm1,%xmm1
+	mov	40(%rsp),%rsi		# restore %rsp
+.cfi_def_cfa	%rsi,8
+	jmp	.Lmulx4x_cond_copy
+
+.align	32
+.Lmulx4x_cond_copy:
+	movdqa	16*0($tptr),%xmm2
+	movdqa	16*1($tptr),%xmm3
+	lea	16*2($tptr),$tptr
+	movdqu	16*0($rptr),%xmm4
+	movdqu	16*1($rptr),%xmm5
+	lea	16*2($rptr),$rptr
+	movdqa	%xmm0,-16*2($tptr)	# zero tp
+	movdqa	%xmm0,-16*1($tptr)
+	pcmpeqd	%xmm1,%xmm0
+	pand	%xmm1,%xmm2
+	pand	%xmm1,%xmm3
+	pand	%xmm0,%xmm4
+	pand	%xmm0,%xmm5
+	pxor	%xmm0,%xmm0
+	por	%xmm2,%xmm4
+	por	%xmm3,%xmm5
+	movdqu	%xmm4,-16*2($rptr)
+	movdqu	%xmm5,-16*1($rptr)
+	sub	\$32,%rdx
+	jnz	.Lmulx4x_cond_copy
+
+	mov	%rdx,($tptr)
+
+	mov	\$1,%rax
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lmulx4x_epilogue:
+	ret
+.cfi_endproc
+.size	bn_mulx4x_mont,.-bn_mulx4x_mont
+___
+}}}
+$code.=<<___;
+.asciz	"Montgomery Multiplication for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+.align	16
+___
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	mul_handler,\@abi-omnipotent
+.align	16
+mul_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# end of prologue label
+	cmp	%r10,%rbx		# context->Rip<end of prologue label
+	jb	.Lcommon_seh_tail
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lcommon_seh_tail
+
+	mov	192($context),%r10	# pull $num
+	mov	8(%rax,%r10,8),%rax	# pull saved stack pointer
+
+	jmp	.Lcommon_pop_regs
+.size	mul_handler,.-mul_handler
+
+.type	sqr_handler,\@abi-omnipotent
+.align	16
+sqr_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# end of prologue label
+	cmp	%r10,%rbx		# context->Rip<.Lsqr_prologue
+	jb	.Lcommon_seh_tail
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# body label
+	cmp	%r10,%rbx		# context->Rip<.Lsqr_body
+	jb	.Lcommon_pop_regs
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	8(%r11),%r10d		# HandlerData[2]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=.Lsqr_epilogue
+	jae	.Lcommon_seh_tail
+
+	mov	40(%rax),%rax		# pull saved stack pointer
+
+.Lcommon_pop_regs:
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+.Lcommon_seh_tail:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	sqr_handler,.-sqr_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_bn_mul_mont
+	.rva	.LSEH_end_bn_mul_mont
+	.rva	.LSEH_info_bn_mul_mont
+
+	.rva	.LSEH_begin_bn_mul4x_mont
+	.rva	.LSEH_end_bn_mul4x_mont
+	.rva	.LSEH_info_bn_mul4x_mont
+
+	.rva	.LSEH_begin_bn_sqr8x_mont
+	.rva	.LSEH_end_bn_sqr8x_mont
+	.rva	.LSEH_info_bn_sqr8x_mont
+___
+$code.=<<___ if ($addx);
+	.rva	.LSEH_begin_bn_mulx4x_mont
+	.rva	.LSEH_end_bn_mulx4x_mont
+	.rva	.LSEH_info_bn_mulx4x_mont
+___
+$code.=<<___;
+.section	.xdata
+.align	8
+.LSEH_info_bn_mul_mont:
+	.byte	9,0,0,0
+	.rva	mul_handler
+	.rva	.Lmul_body,.Lmul_epilogue	# HandlerData[]
+.LSEH_info_bn_mul4x_mont:
+	.byte	9,0,0,0
+	.rva	mul_handler
+	.rva	.Lmul4x_body,.Lmul4x_epilogue	# HandlerData[]
+.LSEH_info_bn_sqr8x_mont:
+	.byte	9,0,0,0
+	.rva	sqr_handler
+	.rva	.Lsqr8x_prologue,.Lsqr8x_body,.Lsqr8x_epilogue		# HandlerData[]
+.align	8
+___
+$code.=<<___ if ($addx);
+.LSEH_info_bn_mulx4x_mont:
+	.byte	9,0,0,0
+	.rva	sqr_handler
+	.rva	.Lmulx4x_prologue,.Lmulx4x_body,.Lmulx4x_epilogue	# HandlerData[]
+.align	8
+___
+}
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86_64-mont5.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86_64-mont5.pl
new file mode 100755
index 000000000..f43e13d11
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/asm/x86_64-mont5.pl
@@ -0,0 +1,3945 @@
+#! /usr/bin/env perl
+# Copyright 2011-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# August 2011.
+#
+# Companion to x86_64-mont.pl that optimizes cache-timing attack
+# countermeasures. The subroutines are produced by replacing bp[i]
+# references in their x86_64-mont.pl counterparts with cache-neutral
+# references to powers table computed in BN_mod_exp_mont_consttime.
+# In addition subroutine that scatters elements of the powers table
+# is implemented, so that scatter-/gathering can be tuned without
+# bn_exp.c modifications.
+
+# August 2013.
+#
+# Add MULX/AD*X code paths and additional interfaces to optimize for
+# branch prediction unit. For input lengths that are multiples of 8
+# the np argument is not just modulus value, but one interleaved
+# with 0. This is to optimize post-condition...
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$addx = ($1>=2.23);
+}
+
+if (!$addx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	    `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$addx = ($1>=2.10);
+}
+
+if (!$addx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	    `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$addx = ($1>=12);
+}
+
+if (!$addx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([3-9])\.([0-9]+)/) {
+	my $ver = $2 + $3/100.0;	# 3.1->3.01, 3.10->3.10
+	$addx = ($ver>=3.03);
+}
+
+# int bn_mul_mont_gather5(
+$rp="%rdi";	# BN_ULONG *rp,
+$ap="%rsi";	# const BN_ULONG *ap,
+$bp="%rdx";	# const BN_ULONG *bp,
+$np="%rcx";	# const BN_ULONG *np,
+$n0="%r8";	# const BN_ULONG *n0,
+$num="%r9";	# int num,
+		# int idx);	# 0 to 2^5-1, "index" in $bp holding
+				# pre-computed powers of a', interlaced
+				# in such manner that b[0] is $bp[idx],
+				# b[1] is [2^5+idx], etc.
+$lo0="%r10";
+$hi0="%r11";
+$hi1="%r13";
+$i="%r14";
+$j="%r15";
+$m0="%rbx";
+$m1="%rbp";
+
+$code=<<___;
+.text
+
+.extern	OPENSSL_ia32cap_P
+
+.globl	bn_mul_mont_gather5
+.type	bn_mul_mont_gather5,\@function,6
+.align	64
+bn_mul_mont_gather5:
+.cfi_startproc
+	mov	${num}d,${num}d
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	test	\$7,${num}d
+	jnz	.Lmul_enter
+___
+$code.=<<___ if ($addx);
+	mov	OPENSSL_ia32cap_P+8(%rip),%r11d
+___
+$code.=<<___;
+	jmp	.Lmul4x_enter
+
+.align	16
+.Lmul_enter:
+	movd	`($win64?56:8)`(%rsp),%xmm5	# load 7th argument
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+
+	neg	$num
+	mov	%rsp,%r11
+	lea	-280(%rsp,$num,8),%r10	# future alloca(8*(num+2)+256+8)
+	neg	$num			# restore $num
+	and	\$-1024,%r10		# minimize TLB usage
+
+	# An OS-agnostic version of __chkstk.
+	#
+	# Some OSes (Windows) insist on stack being "wired" to
+	# physical memory in strictly sequential manner, i.e. if stack
+	# allocation spans two pages, then reference to farmost one can
+	# be punishable by SEGV. But page walking can do good even on
+	# other OSes, because it guarantees that villain thread hits
+	# the guard page before it can make damage to innocent one...
+	sub	%r10,%r11
+	and	\$-4096,%r11
+	lea	(%r10,%r11),%rsp
+	mov	(%rsp),%r11
+	cmp	%r10,%rsp
+	ja	.Lmul_page_walk
+	jmp	.Lmul_page_walk_done
+
+.Lmul_page_walk:
+	lea	-4096(%rsp),%rsp
+	mov	(%rsp),%r11
+	cmp	%r10,%rsp
+	ja	.Lmul_page_walk
+.Lmul_page_walk_done:
+
+	lea	.Linc(%rip),%r10
+	mov	%rax,8(%rsp,$num,8)	# tp[num+1]=%rsp
+.cfi_cfa_expression	%rsp+8,$num,8,mul,plus,deref,+8
+.Lmul_body:
+
+	lea	128($bp),%r12		# reassign $bp (+size optimization)
+___
+		$bp="%r12";
+		$STRIDE=2**5*8;		# 5 is "window size"
+		$N=$STRIDE/4;		# should match cache line size
+$code.=<<___;
+	movdqa	0(%r10),%xmm0		# 00000001000000010000000000000000
+	movdqa	16(%r10),%xmm1		# 00000002000000020000000200000002
+	lea	24-112(%rsp,$num,8),%r10# place the mask after tp[num+3] (+ICache optimization)
+	and	\$-16,%r10
+
+	pshufd	\$0,%xmm5,%xmm5		# broadcast index
+	movdqa	%xmm1,%xmm4
+	movdqa	%xmm1,%xmm2
+___
+########################################################################
+# calculate mask by comparing 0..31 to index and save result to stack
+#
+$code.=<<___;
+	paddd	%xmm0,%xmm1
+	pcmpeqd	%xmm5,%xmm0		# compare to 1,0
+	.byte	0x67
+	movdqa	%xmm4,%xmm3
+___
+for($k=0;$k<$STRIDE/16-4;$k+=4) {
+$code.=<<___;
+	paddd	%xmm1,%xmm2
+	pcmpeqd	%xmm5,%xmm1		# compare to 3,2
+	movdqa	%xmm0,`16*($k+0)+112`(%r10)
+	movdqa	%xmm4,%xmm0
+
+	paddd	%xmm2,%xmm3
+	pcmpeqd	%xmm5,%xmm2		# compare to 5,4
+	movdqa	%xmm1,`16*($k+1)+112`(%r10)
+	movdqa	%xmm4,%xmm1
+
+	paddd	%xmm3,%xmm0
+	pcmpeqd	%xmm5,%xmm3		# compare to 7,6
+	movdqa	%xmm2,`16*($k+2)+112`(%r10)
+	movdqa	%xmm4,%xmm2
+
+	paddd	%xmm0,%xmm1
+	pcmpeqd	%xmm5,%xmm0
+	movdqa	%xmm3,`16*($k+3)+112`(%r10)
+	movdqa	%xmm4,%xmm3
+___
+}
+$code.=<<___;				# last iteration can be optimized
+	paddd	%xmm1,%xmm2
+	pcmpeqd	%xmm5,%xmm1
+	movdqa	%xmm0,`16*($k+0)+112`(%r10)
+
+	paddd	%xmm2,%xmm3
+	.byte	0x67
+	pcmpeqd	%xmm5,%xmm2
+	movdqa	%xmm1,`16*($k+1)+112`(%r10)
+
+	pcmpeqd	%xmm5,%xmm3
+	movdqa	%xmm2,`16*($k+2)+112`(%r10)
+	pand	`16*($k+0)-128`($bp),%xmm0	# while it's still in register
+
+	pand	`16*($k+1)-128`($bp),%xmm1
+	pand	`16*($k+2)-128`($bp),%xmm2
+	movdqa	%xmm3,`16*($k+3)+112`(%r10)
+	pand	`16*($k+3)-128`($bp),%xmm3
+	por	%xmm2,%xmm0
+	por	%xmm3,%xmm1
+___
+for($k=0;$k<$STRIDE/16-4;$k+=4) {
+$code.=<<___;
+	movdqa	`16*($k+0)-128`($bp),%xmm4
+	movdqa	`16*($k+1)-128`($bp),%xmm5
+	movdqa	`16*($k+2)-128`($bp),%xmm2
+	pand	`16*($k+0)+112`(%r10),%xmm4
+	movdqa	`16*($k+3)-128`($bp),%xmm3
+	pand	`16*($k+1)+112`(%r10),%xmm5
+	por	%xmm4,%xmm0
+	pand	`16*($k+2)+112`(%r10),%xmm2
+	por	%xmm5,%xmm1
+	pand	`16*($k+3)+112`(%r10),%xmm3
+	por	%xmm2,%xmm0
+	por	%xmm3,%xmm1
+___
+}
+$code.=<<___;
+	por	%xmm1,%xmm0
+	pshufd	\$0x4e,%xmm0,%xmm1
+	por	%xmm1,%xmm0
+	lea	$STRIDE($bp),$bp
+	movq	%xmm0,$m0		# m0=bp[0]
+
+	mov	($n0),$n0		# pull n0[0] value
+	mov	($ap),%rax
+
+	xor	$i,$i			# i=0
+	xor	$j,$j			# j=0
+
+	mov	$n0,$m1
+	mulq	$m0			# ap[0]*bp[0]
+	mov	%rax,$lo0
+	mov	($np),%rax
+
+	imulq	$lo0,$m1		# "tp[0]"*n0
+	mov	%rdx,$hi0
+
+	mulq	$m1			# np[0]*m1
+	add	%rax,$lo0		# discarded
+	mov	8($ap),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$hi1
+
+	lea	1($j),$j		# j++
+	jmp	.L1st_enter
+
+.align	16
+.L1st:
+	add	%rax,$hi1
+	mov	($ap,$j,8),%rax
+	adc	\$0,%rdx
+	add	$hi0,$hi1		# np[j]*m1+ap[j]*bp[0]
+	mov	$lo0,$hi0
+	adc	\$0,%rdx
+	mov	$hi1,-16(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$hi1
+
+.L1st_enter:
+	mulq	$m0			# ap[j]*bp[0]
+	add	%rax,$hi0
+	mov	($np,$j,8),%rax
+	adc	\$0,%rdx
+	lea	1($j),$j		# j++
+	mov	%rdx,$lo0
+
+	mulq	$m1			# np[j]*m1
+	cmp	$num,$j
+	jne	.L1st			# note that upon exit $j==$num, so
+					# they can be used interchangeably
+
+	add	%rax,$hi1
+	adc	\$0,%rdx
+	add	$hi0,$hi1		# np[j]*m1+ap[j]*bp[0]
+	adc	\$0,%rdx
+	mov	$hi1,-16(%rsp,$num,8)	# tp[num-1]
+	mov	%rdx,$hi1
+	mov	$lo0,$hi0
+
+	xor	%rdx,%rdx
+	add	$hi0,$hi1
+	adc	\$0,%rdx
+	mov	$hi1,-8(%rsp,$num,8)
+	mov	%rdx,(%rsp,$num,8)	# store upmost overflow bit
+
+	lea	1($i),$i		# i++
+	jmp	.Louter
+.align	16
+.Louter:
+	lea	24+128(%rsp,$num,8),%rdx	# where 256-byte mask is (+size optimization)
+	and	\$-16,%rdx
+	pxor	%xmm4,%xmm4
+	pxor	%xmm5,%xmm5
+___
+for($k=0;$k<$STRIDE/16;$k+=4) {
+$code.=<<___;
+	movdqa	`16*($k+0)-128`($bp),%xmm0
+	movdqa	`16*($k+1)-128`($bp),%xmm1
+	movdqa	`16*($k+2)-128`($bp),%xmm2
+	movdqa	`16*($k+3)-128`($bp),%xmm3
+	pand	`16*($k+0)-128`(%rdx),%xmm0
+	pand	`16*($k+1)-128`(%rdx),%xmm1
+	por	%xmm0,%xmm4
+	pand	`16*($k+2)-128`(%rdx),%xmm2
+	por	%xmm1,%xmm5
+	pand	`16*($k+3)-128`(%rdx),%xmm3
+	por	%xmm2,%xmm4
+	por	%xmm3,%xmm5
+___
+}
+$code.=<<___;
+	por	%xmm5,%xmm4
+	pshufd	\$0x4e,%xmm4,%xmm0
+	por	%xmm4,%xmm0
+	lea	$STRIDE($bp),$bp
+
+	mov	($ap),%rax		# ap[0]
+	movq	%xmm0,$m0		# m0=bp[i]
+
+	xor	$j,$j			# j=0
+	mov	$n0,$m1
+	mov	(%rsp),$lo0
+
+	mulq	$m0			# ap[0]*bp[i]
+	add	%rax,$lo0		# ap[0]*bp[i]+tp[0]
+	mov	($np),%rax
+	adc	\$0,%rdx
+
+	imulq	$lo0,$m1		# tp[0]*n0
+	mov	%rdx,$hi0
+
+	mulq	$m1			# np[0]*m1
+	add	%rax,$lo0		# discarded
+	mov	8($ap),%rax
+	adc	\$0,%rdx
+	mov	8(%rsp),$lo0		# tp[1]
+	mov	%rdx,$hi1
+
+	lea	1($j),$j		# j++
+	jmp	.Linner_enter
+
+.align	16
+.Linner:
+	add	%rax,$hi1
+	mov	($ap,$j,8),%rax
+	adc	\$0,%rdx
+	add	$lo0,$hi1		# np[j]*m1+ap[j]*bp[i]+tp[j]
+	mov	(%rsp,$j,8),$lo0
+	adc	\$0,%rdx
+	mov	$hi1,-16(%rsp,$j,8)	# tp[j-1]
+	mov	%rdx,$hi1
+
+.Linner_enter:
+	mulq	$m0			# ap[j]*bp[i]
+	add	%rax,$hi0
+	mov	($np,$j,8),%rax
+	adc	\$0,%rdx
+	add	$hi0,$lo0		# ap[j]*bp[i]+tp[j]
+	mov	%rdx,$hi0
+	adc	\$0,$hi0
+	lea	1($j),$j		# j++
+
+	mulq	$m1			# np[j]*m1
+	cmp	$num,$j
+	jne	.Linner			# note that upon exit $j==$num, so
+					# they can be used interchangeably
+	add	%rax,$hi1
+	adc	\$0,%rdx
+	add	$lo0,$hi1		# np[j]*m1+ap[j]*bp[i]+tp[j]
+	mov	(%rsp,$num,8),$lo0
+	adc	\$0,%rdx
+	mov	$hi1,-16(%rsp,$num,8)	# tp[num-1]
+	mov	%rdx,$hi1
+
+	xor	%rdx,%rdx
+	add	$hi0,$hi1
+	adc	\$0,%rdx
+	add	$lo0,$hi1		# pull upmost overflow bit
+	adc	\$0,%rdx
+	mov	$hi1,-8(%rsp,$num,8)
+	mov	%rdx,(%rsp,$num,8)	# store upmost overflow bit
+
+	lea	1($i),$i		# i++
+	cmp	$num,$i
+	jb	.Louter
+
+	xor	$i,$i			# i=0 and clear CF!
+	mov	(%rsp),%rax		# tp[0]
+	lea	(%rsp),$ap		# borrow ap for tp
+	mov	$num,$j			# j=num
+	jmp	.Lsub
+.align	16
+.Lsub:	sbb	($np,$i,8),%rax
+	mov	%rax,($rp,$i,8)		# rp[i]=tp[i]-np[i]
+	mov	8($ap,$i,8),%rax	# tp[i+1]
+	lea	1($i),$i		# i++
+	dec	$j			# doesn't affect CF!
+	jnz	.Lsub
+
+	sbb	\$0,%rax		# handle upmost overflow bit
+	mov	\$-1,%rbx
+	xor	%rax,%rbx
+	xor	$i,$i
+	mov	$num,$j			# j=num
+
+.Lcopy:					# conditional copy
+	mov	($rp,$i,8),%rcx
+	mov	(%rsp,$i,8),%rdx
+	and	%rbx,%rcx
+	and	%rax,%rdx
+	mov	$i,(%rsp,$i,8)		# zap temporary vector
+	or	%rcx,%rdx
+	mov	%rdx,($rp,$i,8)		# rp[i]=tp[i]
+	lea	1($i),$i
+	sub	\$1,$j
+	jnz	.Lcopy
+
+	mov	8(%rsp,$num,8),%rsi	# restore %rsp
+.cfi_def_cfa	%rsi,8
+	mov	\$1,%rax
+
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lmul_epilogue:
+	ret
+.cfi_endproc
+.size	bn_mul_mont_gather5,.-bn_mul_mont_gather5
+___
+{{{
+my @A=("%r10","%r11");
+my @N=("%r13","%rdi");
+$code.=<<___;
+.type	bn_mul4x_mont_gather5,\@function,6
+.align	32
+bn_mul4x_mont_gather5:
+.cfi_startproc
+	.byte	0x67
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+.Lmul4x_enter:
+___
+$code.=<<___ if ($addx);
+	and	\$0x80108,%r11d
+	cmp	\$0x80108,%r11d		# check for AD*X+BMI2+BMI1
+	je	.Lmulx4x_enter
+___
+$code.=<<___;
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lmul4x_prologue:
+
+	.byte	0x67
+	shl	\$3,${num}d		# convert $num to bytes
+	lea	($num,$num,2),%r10	# 3*$num in bytes
+	neg	$num			# -$num
+
+	##############################################################
+	# Ensure that stack frame doesn't alias with $rptr+3*$num
+	# modulo 4096, which covers ret[num], am[num] and n[num]
+	# (see bn_exp.c). This is done to allow memory disambiguation
+	# logic do its magic. [Extra [num] is allocated in order
+	# to align with bn_power5's frame, which is cleansed after
+	# completing exponentiation. Extra 256 bytes is for power mask
+	# calculated from 7th argument, the index.]
+	#
+	lea	-320(%rsp,$num,2),%r11
+	mov	%rsp,%rbp
+	sub	$rp,%r11
+	and	\$4095,%r11
+	cmp	%r11,%r10
+	jb	.Lmul4xsp_alt
+	sub	%r11,%rbp		# align with $rp
+	lea	-320(%rbp,$num,2),%rbp	# future alloca(frame+2*num*8+256)
+	jmp	.Lmul4xsp_done
+
+.align	32
+.Lmul4xsp_alt:
+	lea	4096-320(,$num,2),%r10
+	lea	-320(%rbp,$num,2),%rbp	# future alloca(frame+2*num*8+256)
+	sub	%r10,%r11
+	mov	\$0,%r10
+	cmovc	%r10,%r11
+	sub	%r11,%rbp
+.Lmul4xsp_done:
+	and	\$-64,%rbp
+	mov	%rsp,%r11
+	sub	%rbp,%r11
+	and	\$-4096,%r11
+	lea	(%rbp,%r11),%rsp
+	mov	(%rsp),%r10
+	cmp	%rbp,%rsp
+	ja	.Lmul4x_page_walk
+	jmp	.Lmul4x_page_walk_done
+
+.Lmul4x_page_walk:
+	lea	-4096(%rsp),%rsp
+	mov	(%rsp),%r10
+	cmp	%rbp,%rsp
+	ja	.Lmul4x_page_walk
+.Lmul4x_page_walk_done:
+
+	neg	$num
+
+	mov	%rax,40(%rsp)
+.cfi_cfa_expression	%rsp+40,deref,+8
+.Lmul4x_body:
+
+	call	mul4x_internal
+
+	mov	40(%rsp),%rsi		# restore %rsp
+.cfi_def_cfa	%rsi,8
+	mov	\$1,%rax
+
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lmul4x_epilogue:
+	ret
+.cfi_endproc
+.size	bn_mul4x_mont_gather5,.-bn_mul4x_mont_gather5
+
+.type	mul4x_internal,\@abi-omnipotent
+.align	32
+mul4x_internal:
+	shl	\$5,$num		# $num was in bytes
+	movd	`($win64?56:8)`(%rax),%xmm5	# load 7th argument, index
+	lea	.Linc(%rip),%rax
+	lea	128(%rdx,$num),%r13	# end of powers table (+size optimization)
+	shr	\$5,$num		# restore $num
+___
+		$bp="%r12";
+		$STRIDE=2**5*8;		# 5 is "window size"
+		$N=$STRIDE/4;		# should match cache line size
+		$tp=$i;
+$code.=<<___;
+	movdqa	0(%rax),%xmm0		# 00000001000000010000000000000000
+	movdqa	16(%rax),%xmm1		# 00000002000000020000000200000002
+	lea	88-112(%rsp,$num),%r10	# place the mask after tp[num+1] (+ICache optimization)
+	lea	128(%rdx),$bp		# size optimization
+
+	pshufd	\$0,%xmm5,%xmm5		# broadcast index
+	movdqa	%xmm1,%xmm4
+	.byte	0x67,0x67
+	movdqa	%xmm1,%xmm2
+___
+########################################################################
+# calculate mask by comparing 0..31 to index and save result to stack
+#
+$code.=<<___;
+	paddd	%xmm0,%xmm1
+	pcmpeqd	%xmm5,%xmm0		# compare to 1,0
+	.byte	0x67
+	movdqa	%xmm4,%xmm3
+___
+for($i=0;$i<$STRIDE/16-4;$i+=4) {
+$code.=<<___;
+	paddd	%xmm1,%xmm2
+	pcmpeqd	%xmm5,%xmm1		# compare to 3,2
+	movdqa	%xmm0,`16*($i+0)+112`(%r10)
+	movdqa	%xmm4,%xmm0
+
+	paddd	%xmm2,%xmm3
+	pcmpeqd	%xmm5,%xmm2		# compare to 5,4
+	movdqa	%xmm1,`16*($i+1)+112`(%r10)
+	movdqa	%xmm4,%xmm1
+
+	paddd	%xmm3,%xmm0
+	pcmpeqd	%xmm5,%xmm3		# compare to 7,6
+	movdqa	%xmm2,`16*($i+2)+112`(%r10)
+	movdqa	%xmm4,%xmm2
+
+	paddd	%xmm0,%xmm1
+	pcmpeqd	%xmm5,%xmm0
+	movdqa	%xmm3,`16*($i+3)+112`(%r10)
+	movdqa	%xmm4,%xmm3
+___
+}
+$code.=<<___;				# last iteration can be optimized
+	paddd	%xmm1,%xmm2
+	pcmpeqd	%xmm5,%xmm1
+	movdqa	%xmm0,`16*($i+0)+112`(%r10)
+
+	paddd	%xmm2,%xmm3
+	.byte	0x67
+	pcmpeqd	%xmm5,%xmm2
+	movdqa	%xmm1,`16*($i+1)+112`(%r10)
+
+	pcmpeqd	%xmm5,%xmm3
+	movdqa	%xmm2,`16*($i+2)+112`(%r10)
+	pand	`16*($i+0)-128`($bp),%xmm0	# while it's still in register
+
+	pand	`16*($i+1)-128`($bp),%xmm1
+	pand	`16*($i+2)-128`($bp),%xmm2
+	movdqa	%xmm3,`16*($i+3)+112`(%r10)
+	pand	`16*($i+3)-128`($bp),%xmm3
+	por	%xmm2,%xmm0
+	por	%xmm3,%xmm1
+___
+for($i=0;$i<$STRIDE/16-4;$i+=4) {
+$code.=<<___;
+	movdqa	`16*($i+0)-128`($bp),%xmm4
+	movdqa	`16*($i+1)-128`($bp),%xmm5
+	movdqa	`16*($i+2)-128`($bp),%xmm2
+	pand	`16*($i+0)+112`(%r10),%xmm4
+	movdqa	`16*($i+3)-128`($bp),%xmm3
+	pand	`16*($i+1)+112`(%r10),%xmm5
+	por	%xmm4,%xmm0
+	pand	`16*($i+2)+112`(%r10),%xmm2
+	por	%xmm5,%xmm1
+	pand	`16*($i+3)+112`(%r10),%xmm3
+	por	%xmm2,%xmm0
+	por	%xmm3,%xmm1
+___
+}
+$code.=<<___;
+	por	%xmm1,%xmm0
+	pshufd	\$0x4e,%xmm0,%xmm1
+	por	%xmm1,%xmm0
+	lea	$STRIDE($bp),$bp
+	movq	%xmm0,$m0		# m0=bp[0]
+
+	mov	%r13,16+8(%rsp)		# save end of b[num]
+	mov	$rp, 56+8(%rsp)		# save $rp
+
+	mov	($n0),$n0		# pull n0[0] value
+	mov	($ap),%rax
+	lea	($ap,$num),$ap		# end of a[num]
+	neg	$num
+
+	mov	$n0,$m1
+	mulq	$m0			# ap[0]*bp[0]
+	mov	%rax,$A[0]
+	mov	($np),%rax
+
+	imulq	$A[0],$m1		# "tp[0]"*n0
+	lea	64+8(%rsp),$tp
+	mov	%rdx,$A[1]
+
+	mulq	$m1			# np[0]*m1
+	add	%rax,$A[0]		# discarded
+	mov	8($ap,$num),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$N[1]
+
+	mulq	$m0
+	add	%rax,$A[1]
+	mov	8*1($np),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$A[0]
+
+	mulq	$m1
+	add	%rax,$N[1]
+	mov	16($ap,$num),%rax
+	adc	\$0,%rdx
+	add	$A[1],$N[1]
+	lea	4*8($num),$j		# j=4
+	lea	8*4($np),$np
+	adc	\$0,%rdx
+	mov	$N[1],($tp)
+	mov	%rdx,$N[0]
+	jmp	.L1st4x
+
+.align	32
+.L1st4x:
+	mulq	$m0			# ap[j]*bp[0]
+	add	%rax,$A[0]
+	mov	-8*2($np),%rax
+	lea	32($tp),$tp
+	adc	\$0,%rdx
+	mov	%rdx,$A[1]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[0]
+	mov	-8($ap,$j),%rax
+	adc	\$0,%rdx
+	add	$A[0],$N[0]		# np[j]*m1+ap[j]*bp[0]
+	adc	\$0,%rdx
+	mov	$N[0],-24($tp)		# tp[j-1]
+	mov	%rdx,$N[1]
+
+	mulq	$m0			# ap[j]*bp[0]
+	add	%rax,$A[1]
+	mov	-8*1($np),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$A[0]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[1]
+	mov	($ap,$j),%rax
+	adc	\$0,%rdx
+	add	$A[1],$N[1]		# np[j]*m1+ap[j]*bp[0]
+	adc	\$0,%rdx
+	mov	$N[1],-16($tp)		# tp[j-1]
+	mov	%rdx,$N[0]
+
+	mulq	$m0			# ap[j]*bp[0]
+	add	%rax,$A[0]
+	mov	8*0($np),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$A[1]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[0]
+	mov	8($ap,$j),%rax
+	adc	\$0,%rdx
+	add	$A[0],$N[0]		# np[j]*m1+ap[j]*bp[0]
+	adc	\$0,%rdx
+	mov	$N[0],-8($tp)		# tp[j-1]
+	mov	%rdx,$N[1]
+
+	mulq	$m0			# ap[j]*bp[0]
+	add	%rax,$A[1]
+	mov	8*1($np),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$A[0]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[1]
+	mov	16($ap,$j),%rax
+	adc	\$0,%rdx
+	add	$A[1],$N[1]		# np[j]*m1+ap[j]*bp[0]
+	lea	8*4($np),$np
+	adc	\$0,%rdx
+	mov	$N[1],($tp)		# tp[j-1]
+	mov	%rdx,$N[0]
+
+	add	\$32,$j			# j+=4
+	jnz	.L1st4x
+
+	mulq	$m0			# ap[j]*bp[0]
+	add	%rax,$A[0]
+	mov	-8*2($np),%rax
+	lea	32($tp),$tp
+	adc	\$0,%rdx
+	mov	%rdx,$A[1]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[0]
+	mov	-8($ap),%rax
+	adc	\$0,%rdx
+	add	$A[0],$N[0]		# np[j]*m1+ap[j]*bp[0]
+	adc	\$0,%rdx
+	mov	$N[0],-24($tp)		# tp[j-1]
+	mov	%rdx,$N[1]
+
+	mulq	$m0			# ap[j]*bp[0]
+	add	%rax,$A[1]
+	mov	-8*1($np),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$A[0]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[1]
+	mov	($ap,$num),%rax		# ap[0]
+	adc	\$0,%rdx
+	add	$A[1],$N[1]		# np[j]*m1+ap[j]*bp[0]
+	adc	\$0,%rdx
+	mov	$N[1],-16($tp)		# tp[j-1]
+	mov	%rdx,$N[0]
+
+	lea	($np,$num),$np		# rewind $np
+
+	xor	$N[1],$N[1]
+	add	$A[0],$N[0]
+	adc	\$0,$N[1]
+	mov	$N[0],-8($tp)
+
+	jmp	.Louter4x
+
+.align	32
+.Louter4x:
+	lea	16+128($tp),%rdx	# where 256-byte mask is (+size optimization)
+	pxor	%xmm4,%xmm4
+	pxor	%xmm5,%xmm5
+___
+for($i=0;$i<$STRIDE/16;$i+=4) {
+$code.=<<___;
+	movdqa	`16*($i+0)-128`($bp),%xmm0
+	movdqa	`16*($i+1)-128`($bp),%xmm1
+	movdqa	`16*($i+2)-128`($bp),%xmm2
+	movdqa	`16*($i+3)-128`($bp),%xmm3
+	pand	`16*($i+0)-128`(%rdx),%xmm0
+	pand	`16*($i+1)-128`(%rdx),%xmm1
+	por	%xmm0,%xmm4
+	pand	`16*($i+2)-128`(%rdx),%xmm2
+	por	%xmm1,%xmm5
+	pand	`16*($i+3)-128`(%rdx),%xmm3
+	por	%xmm2,%xmm4
+	por	%xmm3,%xmm5
+___
+}
+$code.=<<___;
+	por	%xmm5,%xmm4
+	pshufd	\$0x4e,%xmm4,%xmm0
+	por	%xmm4,%xmm0
+	lea	$STRIDE($bp),$bp
+	movq	%xmm0,$m0		# m0=bp[i]
+
+	mov	($tp,$num),$A[0]
+	mov	$n0,$m1
+	mulq	$m0			# ap[0]*bp[i]
+	add	%rax,$A[0]		# ap[0]*bp[i]+tp[0]
+	mov	($np),%rax
+	adc	\$0,%rdx
+
+	imulq	$A[0],$m1		# tp[0]*n0
+	mov	%rdx,$A[1]
+	mov	$N[1],($tp)		# store upmost overflow bit
+
+	lea	($tp,$num),$tp		# rewind $tp
+
+	mulq	$m1			# np[0]*m1
+	add	%rax,$A[0]		# "$N[0]", discarded
+	mov	8($ap,$num),%rax
+	adc	\$0,%rdx
+	mov	%rdx,$N[1]
+
+	mulq	$m0			# ap[j]*bp[i]
+	add	%rax,$A[1]
+	mov	8*1($np),%rax
+	adc	\$0,%rdx
+	add	8($tp),$A[1]		# +tp[1]
+	adc	\$0,%rdx
+	mov	%rdx,$A[0]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[1]
+	mov	16($ap,$num),%rax
+	adc	\$0,%rdx
+	add	$A[1],$N[1]		# np[j]*m1+ap[j]*bp[i]+tp[j]
+	lea	4*8($num),$j		# j=4
+	lea	8*4($np),$np
+	adc	\$0,%rdx
+	mov	%rdx,$N[0]
+	jmp	.Linner4x
+
+.align	32
+.Linner4x:
+	mulq	$m0			# ap[j]*bp[i]
+	add	%rax,$A[0]
+	mov	-8*2($np),%rax
+	adc	\$0,%rdx
+	add	16($tp),$A[0]		# ap[j]*bp[i]+tp[j]
+	lea	32($tp),$tp
+	adc	\$0,%rdx
+	mov	%rdx,$A[1]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[0]
+	mov	-8($ap,$j),%rax
+	adc	\$0,%rdx
+	add	$A[0],$N[0]
+	adc	\$0,%rdx
+	mov	$N[1],-32($tp)		# tp[j-1]
+	mov	%rdx,$N[1]
+
+	mulq	$m0			# ap[j]*bp[i]
+	add	%rax,$A[1]
+	mov	-8*1($np),%rax
+	adc	\$0,%rdx
+	add	-8($tp),$A[1]
+	adc	\$0,%rdx
+	mov	%rdx,$A[0]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[1]
+	mov	($ap,$j),%rax
+	adc	\$0,%rdx
+	add	$A[1],$N[1]
+	adc	\$0,%rdx
+	mov	$N[0],-24($tp)		# tp[j-1]
+	mov	%rdx,$N[0]
+
+	mulq	$m0			# ap[j]*bp[i]
+	add	%rax,$A[0]
+	mov	8*0($np),%rax
+	adc	\$0,%rdx
+	add	($tp),$A[0]		# ap[j]*bp[i]+tp[j]
+	adc	\$0,%rdx
+	mov	%rdx,$A[1]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[0]
+	mov	8($ap,$j),%rax
+	adc	\$0,%rdx
+	add	$A[0],$N[0]
+	adc	\$0,%rdx
+	mov	$N[1],-16($tp)		# tp[j-1]
+	mov	%rdx,$N[1]
+
+	mulq	$m0			# ap[j]*bp[i]
+	add	%rax,$A[1]
+	mov	8*1($np),%rax
+	adc	\$0,%rdx
+	add	8($tp),$A[1]
+	adc	\$0,%rdx
+	mov	%rdx,$A[0]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[1]
+	mov	16($ap,$j),%rax
+	adc	\$0,%rdx
+	add	$A[1],$N[1]
+	lea	8*4($np),$np
+	adc	\$0,%rdx
+	mov	$N[0],-8($tp)		# tp[j-1]
+	mov	%rdx,$N[0]
+
+	add	\$32,$j			# j+=4
+	jnz	.Linner4x
+
+	mulq	$m0			# ap[j]*bp[i]
+	add	%rax,$A[0]
+	mov	-8*2($np),%rax
+	adc	\$0,%rdx
+	add	16($tp),$A[0]		# ap[j]*bp[i]+tp[j]
+	lea	32($tp),$tp
+	adc	\$0,%rdx
+	mov	%rdx,$A[1]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[0]
+	mov	-8($ap),%rax
+	adc	\$0,%rdx
+	add	$A[0],$N[0]
+	adc	\$0,%rdx
+	mov	$N[1],-32($tp)		# tp[j-1]
+	mov	%rdx,$N[1]
+
+	mulq	$m0			# ap[j]*bp[i]
+	add	%rax,$A[1]
+	mov	$m1,%rax
+	mov	-8*1($np),$m1
+	adc	\$0,%rdx
+	add	-8($tp),$A[1]
+	adc	\$0,%rdx
+	mov	%rdx,$A[0]
+
+	mulq	$m1			# np[j]*m1
+	add	%rax,$N[1]
+	mov	($ap,$num),%rax		# ap[0]
+	adc	\$0,%rdx
+	add	$A[1],$N[1]
+	adc	\$0,%rdx
+	mov	$N[0],-24($tp)		# tp[j-1]
+	mov	%rdx,$N[0]
+
+	mov	$N[1],-16($tp)		# tp[j-1]
+	lea	($np,$num),$np		# rewind $np
+
+	xor	$N[1],$N[1]
+	add	$A[0],$N[0]
+	adc	\$0,$N[1]
+	add	($tp),$N[0]		# pull upmost overflow bit
+	adc	\$0,$N[1]		# upmost overflow bit
+	mov	$N[0],-8($tp)
+
+	cmp	16+8(%rsp),$bp
+	jb	.Louter4x
+___
+if (1) {
+$code.=<<___;
+	xor	%rax,%rax
+	sub	$N[0],$m1		# compare top-most words
+	adc	$j,$j			# $j is zero
+	or	$j,$N[1]
+	sub	$N[1],%rax		# %rax=-$N[1]
+	lea	($tp,$num),%rbx		# tptr in .sqr4x_sub
+	mov	($np),%r12
+	lea	($np),%rbp		# nptr in .sqr4x_sub
+	mov	%r9,%rcx
+	sar	\$3+2,%rcx
+	mov	56+8(%rsp),%rdi		# rptr in .sqr4x_sub
+	dec	%r12			# so that after 'not' we get -n[0]
+	xor	%r10,%r10
+	mov	8*1(%rbp),%r13
+	mov	8*2(%rbp),%r14
+	mov	8*3(%rbp),%r15
+	jmp	.Lsqr4x_sub_entry
+___
+} else {
+my @ri=("%rax",$bp,$m0,$m1);
+my $rp="%rdx";
+$code.=<<___
+	xor	\$1,$N[1]
+	lea	($tp,$num),$tp		# rewind $tp
+	sar	\$5,$num		# cf=0
+	lea	($np,$N[1],8),$np
+	mov	56+8(%rsp),$rp		# restore $rp
+	jmp	.Lsub4x
+
+.align	32
+.Lsub4x:
+	.byte	0x66
+	mov	8*0($tp),@ri[0]
+	mov	8*1($tp),@ri[1]
+	.byte	0x66
+	sbb	16*0($np),@ri[0]
+	mov	8*2($tp),@ri[2]
+	sbb	16*1($np),@ri[1]
+	mov	3*8($tp),@ri[3]
+	lea	4*8($tp),$tp
+	sbb	16*2($np),@ri[2]
+	mov	@ri[0],8*0($rp)
+	sbb	16*3($np),@ri[3]
+	lea	16*4($np),$np
+	mov	@ri[1],8*1($rp)
+	mov	@ri[2],8*2($rp)
+	mov	@ri[3],8*3($rp)
+	lea	8*4($rp),$rp
+
+	inc	$num
+	jnz	.Lsub4x
+
+	ret
+___
+}
+$code.=<<___;
+.size	mul4x_internal,.-mul4x_internal
+___
+}}}
+{{{
+######################################################################
+# void bn_power5(
+my $rptr="%rdi";	# BN_ULONG *rptr,
+my $aptr="%rsi";	# const BN_ULONG *aptr,
+my $bptr="%rdx";	# const void *table,
+my $nptr="%rcx";	# const BN_ULONG *nptr,
+my $n0  ="%r8";		# const BN_ULONG *n0);
+my $num ="%r9";		# int num, has to be divisible by 8
+			# int pwr
+
+my ($i,$j,$tptr)=("%rbp","%rcx",$rptr);
+my @A0=("%r10","%r11");
+my @A1=("%r12","%r13");
+my ($a0,$a1,$ai)=("%r14","%r15","%rbx");
+
+$code.=<<___;
+.globl	bn_power5
+.type	bn_power5,\@function,6
+.align	32
+bn_power5:
+.cfi_startproc
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+___
+$code.=<<___ if ($addx);
+	mov	OPENSSL_ia32cap_P+8(%rip),%r11d
+	and	\$0x80108,%r11d
+	cmp	\$0x80108,%r11d		# check for AD*X+BMI2+BMI1
+	je	.Lpowerx5_enter
+___
+$code.=<<___;
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lpower5_prologue:
+
+	shl	\$3,${num}d		# convert $num to bytes
+	lea	($num,$num,2),%r10d	# 3*$num
+	neg	$num
+	mov	($n0),$n0		# *n0
+
+	##############################################################
+	# Ensure that stack frame doesn't alias with $rptr+3*$num
+	# modulo 4096, which covers ret[num], am[num] and n[num]
+	# (see bn_exp.c). This is done to allow memory disambiguation
+	# logic do its magic. [Extra 256 bytes is for power mask
+	# calculated from 7th argument, the index.]
+	#
+	lea	-320(%rsp,$num,2),%r11
+	mov	%rsp,%rbp
+	sub	$rptr,%r11
+	and	\$4095,%r11
+	cmp	%r11,%r10
+	jb	.Lpwr_sp_alt
+	sub	%r11,%rbp		# align with $aptr
+	lea	-320(%rbp,$num,2),%rbp	# future alloca(frame+2*num*8+256)
+	jmp	.Lpwr_sp_done
+
+.align	32
+.Lpwr_sp_alt:
+	lea	4096-320(,$num,2),%r10
+	lea	-320(%rbp,$num,2),%rbp	# future alloca(frame+2*num*8+256)
+	sub	%r10,%r11
+	mov	\$0,%r10
+	cmovc	%r10,%r11
+	sub	%r11,%rbp
+.Lpwr_sp_done:
+	and	\$-64,%rbp
+	mov	%rsp,%r11
+	sub	%rbp,%r11
+	and	\$-4096,%r11
+	lea	(%rbp,%r11),%rsp
+	mov	(%rsp),%r10
+	cmp	%rbp,%rsp
+	ja	.Lpwr_page_walk
+	jmp	.Lpwr_page_walk_done
+
+.Lpwr_page_walk:
+	lea	-4096(%rsp),%rsp
+	mov	(%rsp),%r10
+	cmp	%rbp,%rsp
+	ja	.Lpwr_page_walk
+.Lpwr_page_walk_done:
+
+	mov	$num,%r10
+	neg	$num
+
+	##############################################################
+	# Stack layout
+	#
+	# +0	saved $num, used in reduction section
+	# +8	&t[2*$num], used in reduction section
+	# +32	saved *n0
+	# +40	saved %rsp
+	# +48	t[2*$num]
+	#
+	mov	$n0,  32(%rsp)
+	mov	%rax, 40(%rsp)		# save original %rsp
+.cfi_cfa_expression	%rsp+40,deref,+8
+.Lpower5_body:
+	movq	$rptr,%xmm1		# save $rptr, used in sqr8x
+	movq	$nptr,%xmm2		# save $nptr
+	movq	%r10, %xmm3		# -$num, used in sqr8x
+	movq	$bptr,%xmm4
+
+	call	__bn_sqr8x_internal
+	call	__bn_post4x_internal
+	call	__bn_sqr8x_internal
+	call	__bn_post4x_internal
+	call	__bn_sqr8x_internal
+	call	__bn_post4x_internal
+	call	__bn_sqr8x_internal
+	call	__bn_post4x_internal
+	call	__bn_sqr8x_internal
+	call	__bn_post4x_internal
+
+	movq	%xmm2,$nptr
+	movq	%xmm4,$bptr
+	mov	$aptr,$rptr
+	mov	40(%rsp),%rax
+	lea	32(%rsp),$n0
+
+	call	mul4x_internal
+
+	mov	40(%rsp),%rsi		# restore %rsp
+.cfi_def_cfa	%rsi,8
+	mov	\$1,%rax
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lpower5_epilogue:
+	ret
+.cfi_endproc
+.size	bn_power5,.-bn_power5
+
+.globl	bn_sqr8x_internal
+.hidden	bn_sqr8x_internal
+.type	bn_sqr8x_internal,\@abi-omnipotent
+.align	32
+bn_sqr8x_internal:
+__bn_sqr8x_internal:
+	##############################################################
+	# Squaring part:
+	#
+	# a) multiply-n-add everything but a[i]*a[i];
+	# b) shift result of a) by 1 to the left and accumulate
+	#    a[i]*a[i] products;
+	#
+	##############################################################
+	#                                                     a[1]a[0]
+	#                                                 a[2]a[0]
+	#                                             a[3]a[0]
+	#                                             a[2]a[1]
+	#                                         a[4]a[0]
+	#                                         a[3]a[1]
+	#                                     a[5]a[0]
+	#                                     a[4]a[1]
+	#                                     a[3]a[2]
+	#                                 a[6]a[0]
+	#                                 a[5]a[1]
+	#                                 a[4]a[2]
+	#                             a[7]a[0]
+	#                             a[6]a[1]
+	#                             a[5]a[2]
+	#                             a[4]a[3]
+	#                         a[7]a[1]
+	#                         a[6]a[2]
+	#                         a[5]a[3]
+	#                     a[7]a[2]
+	#                     a[6]a[3]
+	#                     a[5]a[4]
+	#                 a[7]a[3]
+	#                 a[6]a[4]
+	#             a[7]a[4]
+	#             a[6]a[5]
+	#         a[7]a[5]
+	#     a[7]a[6]
+	#                                                     a[1]a[0]
+	#                                                 a[2]a[0]
+	#                                             a[3]a[0]
+	#                                         a[4]a[0]
+	#                                     a[5]a[0]
+	#                                 a[6]a[0]
+	#                             a[7]a[0]
+	#                                             a[2]a[1]
+	#                                         a[3]a[1]
+	#                                     a[4]a[1]
+	#                                 a[5]a[1]
+	#                             a[6]a[1]
+	#                         a[7]a[1]
+	#                                     a[3]a[2]
+	#                                 a[4]a[2]
+	#                             a[5]a[2]
+	#                         a[6]a[2]
+	#                     a[7]a[2]
+	#                             a[4]a[3]
+	#                         a[5]a[3]
+	#                     a[6]a[3]
+	#                 a[7]a[3]
+	#                     a[5]a[4]
+	#                 a[6]a[4]
+	#             a[7]a[4]
+	#             a[6]a[5]
+	#         a[7]a[5]
+	#     a[7]a[6]
+	#                                                         a[0]a[0]
+	#                                                 a[1]a[1]
+	#                                         a[2]a[2]
+	#                                 a[3]a[3]
+	#                         a[4]a[4]
+	#                 a[5]a[5]
+	#         a[6]a[6]
+	# a[7]a[7]
+
+	lea	32(%r10),$i		# $i=-($num-32)
+	lea	($aptr,$num),$aptr	# end of a[] buffer, ($aptr,$i)=&ap[2]
+
+	mov	$num,$j			# $j=$num
+
+					# comments apply to $num==8 case
+	mov	-32($aptr,$i),$a0	# a[0]
+	lea	48+8(%rsp,$num,2),$tptr	# end of tp[] buffer, &tp[2*$num]
+	mov	-24($aptr,$i),%rax	# a[1]
+	lea	-32($tptr,$i),$tptr	# end of tp[] window, &tp[2*$num-"$i"]
+	mov	-16($aptr,$i),$ai	# a[2]
+	mov	%rax,$a1
+
+	mul	$a0			# a[1]*a[0]
+	mov	%rax,$A0[0]		# a[1]*a[0]
+	 mov	$ai,%rax		# a[2]
+	mov	%rdx,$A0[1]
+	mov	$A0[0],-24($tptr,$i)	# t[1]
+
+	mul	$a0			# a[2]*a[0]
+	add	%rax,$A0[1]
+	 mov	$ai,%rax
+	adc	\$0,%rdx
+	mov	$A0[1],-16($tptr,$i)	# t[2]
+	mov	%rdx,$A0[0]
+
+
+	 mov	-8($aptr,$i),$ai	# a[3]
+	mul	$a1			# a[2]*a[1]
+	mov	%rax,$A1[0]		# a[2]*a[1]+t[3]
+	 mov	$ai,%rax
+	mov	%rdx,$A1[1]
+
+	 lea	($i),$j
+	mul	$a0			# a[3]*a[0]
+	add	%rax,$A0[0]		# a[3]*a[0]+a[2]*a[1]+t[3]
+	 mov	$ai,%rax
+	mov	%rdx,$A0[1]
+	adc	\$0,$A0[1]
+	add	$A1[0],$A0[0]
+	adc	\$0,$A0[1]
+	mov	$A0[0],-8($tptr,$j)	# t[3]
+	jmp	.Lsqr4x_1st
+
+.align	32
+.Lsqr4x_1st:
+	 mov	($aptr,$j),$ai		# a[4]
+	mul	$a1			# a[3]*a[1]
+	add	%rax,$A1[1]		# a[3]*a[1]+t[4]
+	 mov	$ai,%rax
+	mov	%rdx,$A1[0]
+	adc	\$0,$A1[0]
+
+	mul	$a0			# a[4]*a[0]
+	add	%rax,$A0[1]		# a[4]*a[0]+a[3]*a[1]+t[4]
+	 mov	$ai,%rax		# a[3]
+	 mov	8($aptr,$j),$ai		# a[5]
+	mov	%rdx,$A0[0]
+	adc	\$0,$A0[0]
+	add	$A1[1],$A0[1]
+	adc	\$0,$A0[0]
+
+
+	mul	$a1			# a[4]*a[3]
+	add	%rax,$A1[0]		# a[4]*a[3]+t[5]
+	 mov	$ai,%rax
+	 mov	$A0[1],($tptr,$j)	# t[4]
+	mov	%rdx,$A1[1]
+	adc	\$0,$A1[1]
+
+	mul	$a0			# a[5]*a[2]
+	add	%rax,$A0[0]		# a[5]*a[2]+a[4]*a[3]+t[5]
+	 mov	$ai,%rax
+	 mov	16($aptr,$j),$ai	# a[6]
+	mov	%rdx,$A0[1]
+	adc	\$0,$A0[1]
+	add	$A1[0],$A0[0]
+	adc	\$0,$A0[1]
+
+	mul	$a1			# a[5]*a[3]
+	add	%rax,$A1[1]		# a[5]*a[3]+t[6]
+	 mov	$ai,%rax
+	 mov	$A0[0],8($tptr,$j)	# t[5]
+	mov	%rdx,$A1[0]
+	adc	\$0,$A1[0]
+
+	mul	$a0			# a[6]*a[2]
+	add	%rax,$A0[1]		# a[6]*a[2]+a[5]*a[3]+t[6]
+	 mov	$ai,%rax		# a[3]
+	 mov	24($aptr,$j),$ai	# a[7]
+	mov	%rdx,$A0[0]
+	adc	\$0,$A0[0]
+	add	$A1[1],$A0[1]
+	adc	\$0,$A0[0]
+
+
+	mul	$a1			# a[6]*a[5]
+	add	%rax,$A1[0]		# a[6]*a[5]+t[7]
+	 mov	$ai,%rax
+	 mov	$A0[1],16($tptr,$j)	# t[6]
+	mov	%rdx,$A1[1]
+	adc	\$0,$A1[1]
+	 lea	32($j),$j
+
+	mul	$a0			# a[7]*a[4]
+	add	%rax,$A0[0]		# a[7]*a[4]+a[6]*a[5]+t[6]
+	 mov	$ai,%rax
+	mov	%rdx,$A0[1]
+	adc	\$0,$A0[1]
+	add	$A1[0],$A0[0]
+	adc	\$0,$A0[1]
+	mov	$A0[0],-8($tptr,$j)	# t[7]
+
+	cmp	\$0,$j
+	jne	.Lsqr4x_1st
+
+	mul	$a1			# a[7]*a[5]
+	add	%rax,$A1[1]
+	lea	16($i),$i
+	adc	\$0,%rdx
+	add	$A0[1],$A1[1]
+	adc	\$0,%rdx
+
+	mov	$A1[1],($tptr)		# t[8]
+	mov	%rdx,$A1[0]
+	mov	%rdx,8($tptr)		# t[9]
+	jmp	.Lsqr4x_outer
+
+.align	32
+.Lsqr4x_outer:				# comments apply to $num==6 case
+	mov	-32($aptr,$i),$a0	# a[0]
+	lea	48+8(%rsp,$num,2),$tptr	# end of tp[] buffer, &tp[2*$num]
+	mov	-24($aptr,$i),%rax	# a[1]
+	lea	-32($tptr,$i),$tptr	# end of tp[] window, &tp[2*$num-"$i"]
+	mov	-16($aptr,$i),$ai	# a[2]
+	mov	%rax,$a1
+
+	mul	$a0			# a[1]*a[0]
+	mov	-24($tptr,$i),$A0[0]	# t[1]
+	add	%rax,$A0[0]		# a[1]*a[0]+t[1]
+	 mov	$ai,%rax		# a[2]
+	adc	\$0,%rdx
+	mov	$A0[0],-24($tptr,$i)	# t[1]
+	mov	%rdx,$A0[1]
+
+	mul	$a0			# a[2]*a[0]
+	add	%rax,$A0[1]
+	 mov	$ai,%rax
+	adc	\$0,%rdx
+	add	-16($tptr,$i),$A0[1]	# a[2]*a[0]+t[2]
+	mov	%rdx,$A0[0]
+	adc	\$0,$A0[0]
+	mov	$A0[1],-16($tptr,$i)	# t[2]
+
+	xor	$A1[0],$A1[0]
+
+	 mov	-8($aptr,$i),$ai	# a[3]
+	mul	$a1			# a[2]*a[1]
+	add	%rax,$A1[0]		# a[2]*a[1]+t[3]
+	 mov	$ai,%rax
+	adc	\$0,%rdx
+	add	-8($tptr,$i),$A1[0]
+	mov	%rdx,$A1[1]
+	adc	\$0,$A1[1]
+
+	mul	$a0			# a[3]*a[0]
+	add	%rax,$A0[0]		# a[3]*a[0]+a[2]*a[1]+t[3]
+	 mov	$ai,%rax
+	adc	\$0,%rdx
+	add	$A1[0],$A0[0]
+	mov	%rdx,$A0[1]
+	adc	\$0,$A0[1]
+	mov	$A0[0],-8($tptr,$i)	# t[3]
+
+	lea	($i),$j
+	jmp	.Lsqr4x_inner
+
+.align	32
+.Lsqr4x_inner:
+	 mov	($aptr,$j),$ai		# a[4]
+	mul	$a1			# a[3]*a[1]
+	add	%rax,$A1[1]		# a[3]*a[1]+t[4]
+	 mov	$ai,%rax
+	mov	%rdx,$A1[0]
+	adc	\$0,$A1[0]
+	add	($tptr,$j),$A1[1]
+	adc	\$0,$A1[0]
+
+	.byte	0x67
+	mul	$a0			# a[4]*a[0]
+	add	%rax,$A0[1]		# a[4]*a[0]+a[3]*a[1]+t[4]
+	 mov	$ai,%rax		# a[3]
+	 mov	8($aptr,$j),$ai		# a[5]
+	mov	%rdx,$A0[0]
+	adc	\$0,$A0[0]
+	add	$A1[1],$A0[1]
+	adc	\$0,$A0[0]
+
+	mul	$a1			# a[4]*a[3]
+	add	%rax,$A1[0]		# a[4]*a[3]+t[5]
+	mov	$A0[1],($tptr,$j)	# t[4]
+	 mov	$ai,%rax
+	mov	%rdx,$A1[1]
+	adc	\$0,$A1[1]
+	add	8($tptr,$j),$A1[0]
+	lea	16($j),$j		# j++
+	adc	\$0,$A1[1]
+
+	mul	$a0			# a[5]*a[2]
+	add	%rax,$A0[0]		# a[5]*a[2]+a[4]*a[3]+t[5]
+	 mov	$ai,%rax
+	adc	\$0,%rdx
+	add	$A1[0],$A0[0]
+	mov	%rdx,$A0[1]
+	adc	\$0,$A0[1]
+	mov	$A0[0],-8($tptr,$j)	# t[5], "preloaded t[1]" below
+
+	cmp	\$0,$j
+	jne	.Lsqr4x_inner
+
+	.byte	0x67
+	mul	$a1			# a[5]*a[3]
+	add	%rax,$A1[1]
+	adc	\$0,%rdx
+	add	$A0[1],$A1[1]
+	adc	\$0,%rdx
+
+	mov	$A1[1],($tptr)		# t[6], "preloaded t[2]" below
+	mov	%rdx,$A1[0]
+	mov	%rdx,8($tptr)		# t[7], "preloaded t[3]" below
+
+	add	\$16,$i
+	jnz	.Lsqr4x_outer
+
+					# comments apply to $num==4 case
+	mov	-32($aptr),$a0		# a[0]
+	lea	48+8(%rsp,$num,2),$tptr	# end of tp[] buffer, &tp[2*$num]
+	mov	-24($aptr),%rax		# a[1]
+	lea	-32($tptr,$i),$tptr	# end of tp[] window, &tp[2*$num-"$i"]
+	mov	-16($aptr),$ai		# a[2]
+	mov	%rax,$a1
+
+	mul	$a0			# a[1]*a[0]
+	add	%rax,$A0[0]		# a[1]*a[0]+t[1], preloaded t[1]
+	 mov	$ai,%rax		# a[2]
+	mov	%rdx,$A0[1]
+	adc	\$0,$A0[1]
+
+	mul	$a0			# a[2]*a[0]
+	add	%rax,$A0[1]
+	 mov	$ai,%rax
+	 mov	$A0[0],-24($tptr)	# t[1]
+	mov	%rdx,$A0[0]
+	adc	\$0,$A0[0]
+	add	$A1[1],$A0[1]		# a[2]*a[0]+t[2], preloaded t[2]
+	 mov	-8($aptr),$ai		# a[3]
+	adc	\$0,$A0[0]
+
+	mul	$a1			# a[2]*a[1]
+	add	%rax,$A1[0]		# a[2]*a[1]+t[3], preloaded t[3]
+	 mov	$ai,%rax
+	 mov	$A0[1],-16($tptr)	# t[2]
+	mov	%rdx,$A1[1]
+	adc	\$0,$A1[1]
+
+	mul	$a0			# a[3]*a[0]
+	add	%rax,$A0[0]		# a[3]*a[0]+a[2]*a[1]+t[3]
+	 mov	$ai,%rax
+	mov	%rdx,$A0[1]
+	adc	\$0,$A0[1]
+	add	$A1[0],$A0[0]
+	adc	\$0,$A0[1]
+	mov	$A0[0],-8($tptr)	# t[3]
+
+	mul	$a1			# a[3]*a[1]
+	add	%rax,$A1[1]
+	 mov	-16($aptr),%rax		# a[2]
+	adc	\$0,%rdx
+	add	$A0[1],$A1[1]
+	adc	\$0,%rdx
+
+	mov	$A1[1],($tptr)		# t[4]
+	mov	%rdx,$A1[0]
+	mov	%rdx,8($tptr)		# t[5]
+
+	mul	$ai			# a[2]*a[3]
+___
+{
+my ($shift,$carry)=($a0,$a1);
+my @S=(@A1,$ai,$n0);
+$code.=<<___;
+	 add	\$16,$i
+	 xor	$shift,$shift
+	 sub	$num,$i			# $i=16-$num
+	 xor	$carry,$carry
+
+	add	$A1[0],%rax		# t[5]
+	adc	\$0,%rdx
+	mov	%rax,8($tptr)		# t[5]
+	mov	%rdx,16($tptr)		# t[6]
+	mov	$carry,24($tptr)	# t[7]
+
+	 mov	-16($aptr,$i),%rax	# a[0]
+	lea	48+8(%rsp),$tptr
+	 xor	$A0[0],$A0[0]		# t[0]
+	 mov	8($tptr),$A0[1]		# t[1]
+
+	lea	($shift,$A0[0],2),$S[0]	# t[2*i]<<1 | shift
+	shr	\$63,$A0[0]
+	lea	($j,$A0[1],2),$S[1]	# t[2*i+1]<<1 |
+	shr	\$63,$A0[1]
+	or	$A0[0],$S[1]		# | t[2*i]>>63
+	 mov	16($tptr),$A0[0]	# t[2*i+2]	# prefetch
+	mov	$A0[1],$shift		# shift=t[2*i+1]>>63
+	mul	%rax			# a[i]*a[i]
+	neg	$carry			# mov $carry,cf
+	 mov	24($tptr),$A0[1]	# t[2*i+2+1]	# prefetch
+	adc	%rax,$S[0]
+	 mov	-8($aptr,$i),%rax	# a[i+1]	# prefetch
+	mov	$S[0],($tptr)
+	adc	%rdx,$S[1]
+
+	lea	($shift,$A0[0],2),$S[2]	# t[2*i]<<1 | shift
+	 mov	$S[1],8($tptr)
+	 sbb	$carry,$carry		# mov cf,$carry
+	shr	\$63,$A0[0]
+	lea	($j,$A0[1],2),$S[3]	# t[2*i+1]<<1 |
+	shr	\$63,$A0[1]
+	or	$A0[0],$S[3]		# | t[2*i]>>63
+	 mov	32($tptr),$A0[0]	# t[2*i+2]	# prefetch
+	mov	$A0[1],$shift		# shift=t[2*i+1]>>63
+	mul	%rax			# a[i]*a[i]
+	neg	$carry			# mov $carry,cf
+	 mov	40($tptr),$A0[1]	# t[2*i+2+1]	# prefetch
+	adc	%rax,$S[2]
+	 mov	0($aptr,$i),%rax	# a[i+1]	# prefetch
+	mov	$S[2],16($tptr)
+	adc	%rdx,$S[3]
+	lea	16($i),$i
+	mov	$S[3],24($tptr)
+	sbb	$carry,$carry		# mov cf,$carry
+	lea	64($tptr),$tptr
+	jmp	.Lsqr4x_shift_n_add
+
+.align	32
+.Lsqr4x_shift_n_add:
+	lea	($shift,$A0[0],2),$S[0]	# t[2*i]<<1 | shift
+	shr	\$63,$A0[0]
+	lea	($j,$A0[1],2),$S[1]	# t[2*i+1]<<1 |
+	shr	\$63,$A0[1]
+	or	$A0[0],$S[1]		# | t[2*i]>>63
+	 mov	-16($tptr),$A0[0]	# t[2*i+2]	# prefetch
+	mov	$A0[1],$shift		# shift=t[2*i+1]>>63
+	mul	%rax			# a[i]*a[i]
+	neg	$carry			# mov $carry,cf
+	 mov	-8($tptr),$A0[1]	# t[2*i+2+1]	# prefetch
+	adc	%rax,$S[0]
+	 mov	-8($aptr,$i),%rax	# a[i+1]	# prefetch
+	mov	$S[0],-32($tptr)
+	adc	%rdx,$S[1]
+
+	lea	($shift,$A0[0],2),$S[2]	# t[2*i]<<1 | shift
+	 mov	$S[1],-24($tptr)
+	 sbb	$carry,$carry		# mov cf,$carry
+	shr	\$63,$A0[0]
+	lea	($j,$A0[1],2),$S[3]	# t[2*i+1]<<1 |
+	shr	\$63,$A0[1]
+	or	$A0[0],$S[3]		# | t[2*i]>>63
+	 mov	0($tptr),$A0[0]		# t[2*i+2]	# prefetch
+	mov	$A0[1],$shift		# shift=t[2*i+1]>>63
+	mul	%rax			# a[i]*a[i]
+	neg	$carry			# mov $carry,cf
+	 mov	8($tptr),$A0[1]		# t[2*i+2+1]	# prefetch
+	adc	%rax,$S[2]
+	 mov	0($aptr,$i),%rax	# a[i+1]	# prefetch
+	mov	$S[2],-16($tptr)
+	adc	%rdx,$S[3]
+
+	lea	($shift,$A0[0],2),$S[0]	# t[2*i]<<1 | shift
+	 mov	$S[3],-8($tptr)
+	 sbb	$carry,$carry		# mov cf,$carry
+	shr	\$63,$A0[0]
+	lea	($j,$A0[1],2),$S[1]	# t[2*i+1]<<1 |
+	shr	\$63,$A0[1]
+	or	$A0[0],$S[1]		# | t[2*i]>>63
+	 mov	16($tptr),$A0[0]	# t[2*i+2]	# prefetch
+	mov	$A0[1],$shift		# shift=t[2*i+1]>>63
+	mul	%rax			# a[i]*a[i]
+	neg	$carry			# mov $carry,cf
+	 mov	24($tptr),$A0[1]	# t[2*i+2+1]	# prefetch
+	adc	%rax,$S[0]
+	 mov	8($aptr,$i),%rax	# a[i+1]	# prefetch
+	mov	$S[0],0($tptr)
+	adc	%rdx,$S[1]
+
+	lea	($shift,$A0[0],2),$S[2]	# t[2*i]<<1 | shift
+	 mov	$S[1],8($tptr)
+	 sbb	$carry,$carry		# mov cf,$carry
+	shr	\$63,$A0[0]
+	lea	($j,$A0[1],2),$S[3]	# t[2*i+1]<<1 |
+	shr	\$63,$A0[1]
+	or	$A0[0],$S[3]		# | t[2*i]>>63
+	 mov	32($tptr),$A0[0]	# t[2*i+2]	# prefetch
+	mov	$A0[1],$shift		# shift=t[2*i+1]>>63
+	mul	%rax			# a[i]*a[i]
+	neg	$carry			# mov $carry,cf
+	 mov	40($tptr),$A0[1]	# t[2*i+2+1]	# prefetch
+	adc	%rax,$S[2]
+	 mov	16($aptr,$i),%rax	# a[i+1]	# prefetch
+	mov	$S[2],16($tptr)
+	adc	%rdx,$S[3]
+	mov	$S[3],24($tptr)
+	sbb	$carry,$carry		# mov cf,$carry
+	lea	64($tptr),$tptr
+	add	\$32,$i
+	jnz	.Lsqr4x_shift_n_add
+
+	lea	($shift,$A0[0],2),$S[0]	# t[2*i]<<1 | shift
+	.byte	0x67
+	shr	\$63,$A0[0]
+	lea	($j,$A0[1],2),$S[1]	# t[2*i+1]<<1 |
+	shr	\$63,$A0[1]
+	or	$A0[0],$S[1]		# | t[2*i]>>63
+	 mov	-16($tptr),$A0[0]	# t[2*i+2]	# prefetch
+	mov	$A0[1],$shift		# shift=t[2*i+1]>>63
+	mul	%rax			# a[i]*a[i]
+	neg	$carry			# mov $carry,cf
+	 mov	-8($tptr),$A0[1]	# t[2*i+2+1]	# prefetch
+	adc	%rax,$S[0]
+	 mov	-8($aptr),%rax		# a[i+1]	# prefetch
+	mov	$S[0],-32($tptr)
+	adc	%rdx,$S[1]
+
+	lea	($shift,$A0[0],2),$S[2]	# t[2*i]<<1|shift
+	 mov	$S[1],-24($tptr)
+	 sbb	$carry,$carry		# mov cf,$carry
+	shr	\$63,$A0[0]
+	lea	($j,$A0[1],2),$S[3]	# t[2*i+1]<<1 |
+	shr	\$63,$A0[1]
+	or	$A0[0],$S[3]		# | t[2*i]>>63
+	mul	%rax			# a[i]*a[i]
+	neg	$carry			# mov $carry,cf
+	adc	%rax,$S[2]
+	adc	%rdx,$S[3]
+	mov	$S[2],-16($tptr)
+	mov	$S[3],-8($tptr)
+___
+}
+######################################################################
+# Montgomery reduction part, "word-by-word" algorithm.
+#
+# This new path is inspired by multiple submissions from Intel, by
+# Shay Gueron, Vlad Krasnov, Erdinc Ozturk, James Guilford,
+# Vinodh Gopal...
+{
+my ($nptr,$tptr,$carry,$m0)=("%rbp","%rdi","%rsi","%rbx");
+
+$code.=<<___;
+	movq	%xmm2,$nptr
+__bn_sqr8x_reduction:
+	xor	%rax,%rax
+	lea	($nptr,$num),%rcx	# end of n[]
+	lea	48+8(%rsp,$num,2),%rdx	# end of t[] buffer
+	mov	%rcx,0+8(%rsp)
+	lea	48+8(%rsp,$num),$tptr	# end of initial t[] window
+	mov	%rdx,8+8(%rsp)
+	neg	$num
+	jmp	.L8x_reduction_loop
+
+.align	32
+.L8x_reduction_loop:
+	lea	($tptr,$num),$tptr	# start of current t[] window
+	.byte	0x66
+	mov	8*0($tptr),$m0
+	mov	8*1($tptr),%r9
+	mov	8*2($tptr),%r10
+	mov	8*3($tptr),%r11
+	mov	8*4($tptr),%r12
+	mov	8*5($tptr),%r13
+	mov	8*6($tptr),%r14
+	mov	8*7($tptr),%r15
+	mov	%rax,(%rdx)		# store top-most carry bit
+	lea	8*8($tptr),$tptr
+
+	.byte	0x67
+	mov	$m0,%r8
+	imulq	32+8(%rsp),$m0		# n0*a[0]
+	mov	8*0($nptr),%rax		# n[0]
+	mov	\$8,%ecx
+	jmp	.L8x_reduce
+
+.align	32
+.L8x_reduce:
+	mulq	$m0
+	 mov	8*1($nptr),%rax		# n[1]
+	neg	%r8
+	mov	%rdx,%r8
+	adc	\$0,%r8
+
+	mulq	$m0
+	add	%rax,%r9
+	 mov	8*2($nptr),%rax
+	adc	\$0,%rdx
+	add	%r9,%r8
+	 mov	$m0,48-8+8(%rsp,%rcx,8)	# put aside n0*a[i]
+	mov	%rdx,%r9
+	adc	\$0,%r9
+
+	mulq	$m0
+	add	%rax,%r10
+	 mov	8*3($nptr),%rax
+	adc	\$0,%rdx
+	add	%r10,%r9
+	 mov	32+8(%rsp),$carry	# pull n0, borrow $carry
+	mov	%rdx,%r10
+	adc	\$0,%r10
+
+	mulq	$m0
+	add	%rax,%r11
+	 mov	8*4($nptr),%rax
+	adc	\$0,%rdx
+	 imulq	%r8,$carry		# modulo-scheduled
+	add	%r11,%r10
+	mov	%rdx,%r11
+	adc	\$0,%r11
+
+	mulq	$m0
+	add	%rax,%r12
+	 mov	8*5($nptr),%rax
+	adc	\$0,%rdx
+	add	%r12,%r11
+	mov	%rdx,%r12
+	adc	\$0,%r12
+
+	mulq	$m0
+	add	%rax,%r13
+	 mov	8*6($nptr),%rax
+	adc	\$0,%rdx
+	add	%r13,%r12
+	mov	%rdx,%r13
+	adc	\$0,%r13
+
+	mulq	$m0
+	add	%rax,%r14
+	 mov	8*7($nptr),%rax
+	adc	\$0,%rdx
+	add	%r14,%r13
+	mov	%rdx,%r14
+	adc	\$0,%r14
+
+	mulq	$m0
+	 mov	$carry,$m0		# n0*a[i]
+	add	%rax,%r15
+	 mov	8*0($nptr),%rax		# n[0]
+	adc	\$0,%rdx
+	add	%r15,%r14
+	mov	%rdx,%r15
+	adc	\$0,%r15
+
+	dec	%ecx
+	jnz	.L8x_reduce
+
+	lea	8*8($nptr),$nptr
+	xor	%rax,%rax
+	mov	8+8(%rsp),%rdx		# pull end of t[]
+	cmp	0+8(%rsp),$nptr		# end of n[]?
+	jae	.L8x_no_tail
+
+	.byte	0x66
+	add	8*0($tptr),%r8
+	adc	8*1($tptr),%r9
+	adc	8*2($tptr),%r10
+	adc	8*3($tptr),%r11
+	adc	8*4($tptr),%r12
+	adc	8*5($tptr),%r13
+	adc	8*6($tptr),%r14
+	adc	8*7($tptr),%r15
+	sbb	$carry,$carry		# top carry
+
+	mov	48+56+8(%rsp),$m0	# pull n0*a[0]
+	mov	\$8,%ecx
+	mov	8*0($nptr),%rax
+	jmp	.L8x_tail
+
+.align	32
+.L8x_tail:
+	mulq	$m0
+	add	%rax,%r8
+	 mov	8*1($nptr),%rax
+	 mov	%r8,($tptr)		# save result
+	mov	%rdx,%r8
+	adc	\$0,%r8
+
+	mulq	$m0
+	add	%rax,%r9
+	 mov	8*2($nptr),%rax
+	adc	\$0,%rdx
+	add	%r9,%r8
+	 lea	8($tptr),$tptr		# $tptr++
+	mov	%rdx,%r9
+	adc	\$0,%r9
+
+	mulq	$m0
+	add	%rax,%r10
+	 mov	8*3($nptr),%rax
+	adc	\$0,%rdx
+	add	%r10,%r9
+	mov	%rdx,%r10
+	adc	\$0,%r10
+
+	mulq	$m0
+	add	%rax,%r11
+	 mov	8*4($nptr),%rax
+	adc	\$0,%rdx
+	add	%r11,%r10
+	mov	%rdx,%r11
+	adc	\$0,%r11
+
+	mulq	$m0
+	add	%rax,%r12
+	 mov	8*5($nptr),%rax
+	adc	\$0,%rdx
+	add	%r12,%r11
+	mov	%rdx,%r12
+	adc	\$0,%r12
+
+	mulq	$m0
+	add	%rax,%r13
+	 mov	8*6($nptr),%rax
+	adc	\$0,%rdx
+	add	%r13,%r12
+	mov	%rdx,%r13
+	adc	\$0,%r13
+
+	mulq	$m0
+	add	%rax,%r14
+	 mov	8*7($nptr),%rax
+	adc	\$0,%rdx
+	add	%r14,%r13
+	mov	%rdx,%r14
+	adc	\$0,%r14
+
+	mulq	$m0
+	 mov	48-16+8(%rsp,%rcx,8),$m0# pull n0*a[i]
+	add	%rax,%r15
+	adc	\$0,%rdx
+	add	%r15,%r14
+	 mov	8*0($nptr),%rax		# pull n[0]
+	mov	%rdx,%r15
+	adc	\$0,%r15
+
+	dec	%ecx
+	jnz	.L8x_tail
+
+	lea	8*8($nptr),$nptr
+	mov	8+8(%rsp),%rdx		# pull end of t[]
+	cmp	0+8(%rsp),$nptr		# end of n[]?
+	jae	.L8x_tail_done		# break out of loop
+
+	 mov	48+56+8(%rsp),$m0	# pull n0*a[0]
+	neg	$carry
+	 mov	8*0($nptr),%rax		# pull n[0]
+	adc	8*0($tptr),%r8
+	adc	8*1($tptr),%r9
+	adc	8*2($tptr),%r10
+	adc	8*3($tptr),%r11
+	adc	8*4($tptr),%r12
+	adc	8*5($tptr),%r13
+	adc	8*6($tptr),%r14
+	adc	8*7($tptr),%r15
+	sbb	$carry,$carry		# top carry
+
+	mov	\$8,%ecx
+	jmp	.L8x_tail
+
+.align	32
+.L8x_tail_done:
+	xor	%rax,%rax
+	add	(%rdx),%r8		# can this overflow?
+	adc	\$0,%r9
+	adc	\$0,%r10
+	adc	\$0,%r11
+	adc	\$0,%r12
+	adc	\$0,%r13
+	adc	\$0,%r14
+	adc	\$0,%r15
+	adc	\$0,%rax
+
+	neg	$carry
+.L8x_no_tail:
+	adc	8*0($tptr),%r8
+	adc	8*1($tptr),%r9
+	adc	8*2($tptr),%r10
+	adc	8*3($tptr),%r11
+	adc	8*4($tptr),%r12
+	adc	8*5($tptr),%r13
+	adc	8*6($tptr),%r14
+	adc	8*7($tptr),%r15
+	adc	\$0,%rax		# top-most carry
+	 mov	-8($nptr),%rcx		# np[num-1]
+	 xor	$carry,$carry
+
+	movq	%xmm2,$nptr		# restore $nptr
+
+	mov	%r8,8*0($tptr)		# store top 512 bits
+	mov	%r9,8*1($tptr)
+	 movq	%xmm3,$num		# $num is %r9, can't be moved upwards
+	mov	%r10,8*2($tptr)
+	mov	%r11,8*3($tptr)
+	mov	%r12,8*4($tptr)
+	mov	%r13,8*5($tptr)
+	mov	%r14,8*6($tptr)
+	mov	%r15,8*7($tptr)
+	lea	8*8($tptr),$tptr
+
+	cmp	%rdx,$tptr		# end of t[]?
+	jb	.L8x_reduction_loop
+	ret
+.size	bn_sqr8x_internal,.-bn_sqr8x_internal
+___
+}
+##############################################################
+# Post-condition, 4x unrolled
+#
+{
+my ($tptr,$nptr)=("%rbx","%rbp");
+$code.=<<___;
+.type	__bn_post4x_internal,\@abi-omnipotent
+.align	32
+__bn_post4x_internal:
+	mov	8*0($nptr),%r12
+	lea	(%rdi,$num),$tptr	# %rdi was $tptr above
+	mov	$num,%rcx
+	movq	%xmm1,$rptr		# restore $rptr
+	neg	%rax
+	movq	%xmm1,$aptr		# prepare for back-to-back call
+	sar	\$3+2,%rcx
+	dec	%r12			# so that after 'not' we get -n[0]
+	xor	%r10,%r10
+	mov	8*1($nptr),%r13
+	mov	8*2($nptr),%r14
+	mov	8*3($nptr),%r15
+	jmp	.Lsqr4x_sub_entry
+
+.align	16
+.Lsqr4x_sub:
+	mov	8*0($nptr),%r12
+	mov	8*1($nptr),%r13
+	mov	8*2($nptr),%r14
+	mov	8*3($nptr),%r15
+.Lsqr4x_sub_entry:
+	lea	8*4($nptr),$nptr
+	not	%r12
+	not	%r13
+	not	%r14
+	not	%r15
+	and	%rax,%r12
+	and	%rax,%r13
+	and	%rax,%r14
+	and	%rax,%r15
+
+	neg	%r10			# mov %r10,%cf
+	adc	8*0($tptr),%r12
+	adc	8*1($tptr),%r13
+	adc	8*2($tptr),%r14
+	adc	8*3($tptr),%r15
+	mov	%r12,8*0($rptr)
+	lea	8*4($tptr),$tptr
+	mov	%r13,8*1($rptr)
+	sbb	%r10,%r10		# mov %cf,%r10
+	mov	%r14,8*2($rptr)
+	mov	%r15,8*3($rptr)
+	lea	8*4($rptr),$rptr
+
+	inc	%rcx			# pass %cf
+	jnz	.Lsqr4x_sub
+
+	mov	$num,%r10		# prepare for back-to-back call
+	neg	$num			# restore $num
+	ret
+.size	__bn_post4x_internal,.-__bn_post4x_internal
+___
+}
+{
+$code.=<<___;
+.globl	bn_from_montgomery
+.type	bn_from_montgomery,\@abi-omnipotent
+.align	32
+bn_from_montgomery:
+	testl	\$7,`($win64?"48(%rsp)":"%r9d")`
+	jz	bn_from_mont8x
+	xor	%eax,%eax
+	ret
+.size	bn_from_montgomery,.-bn_from_montgomery
+
+.type	bn_from_mont8x,\@function,6
+.align	32
+bn_from_mont8x:
+.cfi_startproc
+	.byte	0x67
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lfrom_prologue:
+
+	shl	\$3,${num}d		# convert $num to bytes
+	lea	($num,$num,2),%r10	# 3*$num in bytes
+	neg	$num
+	mov	($n0),$n0		# *n0
+
+	##############################################################
+	# Ensure that stack frame doesn't alias with $rptr+3*$num
+	# modulo 4096, which covers ret[num], am[num] and n[num]
+	# (see bn_exp.c). The stack is allocated to aligned with
+	# bn_power5's frame, and as bn_from_montgomery happens to be
+	# last operation, we use the opportunity to cleanse it.
+	#
+	lea	-320(%rsp,$num,2),%r11
+	mov	%rsp,%rbp
+	sub	$rptr,%r11
+	and	\$4095,%r11
+	cmp	%r11,%r10
+	jb	.Lfrom_sp_alt
+	sub	%r11,%rbp		# align with $aptr
+	lea	-320(%rbp,$num,2),%rbp	# future alloca(frame+2*$num*8+256)
+	jmp	.Lfrom_sp_done
+
+.align	32
+.Lfrom_sp_alt:
+	lea	4096-320(,$num,2),%r10
+	lea	-320(%rbp,$num,2),%rbp	# future alloca(frame+2*$num*8+256)
+	sub	%r10,%r11
+	mov	\$0,%r10
+	cmovc	%r10,%r11
+	sub	%r11,%rbp
+.Lfrom_sp_done:
+	and	\$-64,%rbp
+	mov	%rsp,%r11
+	sub	%rbp,%r11
+	and	\$-4096,%r11
+	lea	(%rbp,%r11),%rsp
+	mov	(%rsp),%r10
+	cmp	%rbp,%rsp
+	ja	.Lfrom_page_walk
+	jmp	.Lfrom_page_walk_done
+
+.Lfrom_page_walk:
+	lea	-4096(%rsp),%rsp
+	mov	(%rsp),%r10
+	cmp	%rbp,%rsp
+	ja	.Lfrom_page_walk
+.Lfrom_page_walk_done:
+
+	mov	$num,%r10
+	neg	$num
+
+	##############################################################
+	# Stack layout
+	#
+	# +0	saved $num, used in reduction section
+	# +8	&t[2*$num], used in reduction section
+	# +32	saved *n0
+	# +40	saved %rsp
+	# +48	t[2*$num]
+	#
+	mov	$n0,  32(%rsp)
+	mov	%rax, 40(%rsp)		# save original %rsp
+.cfi_cfa_expression	%rsp+40,deref,+8
+.Lfrom_body:
+	mov	$num,%r11
+	lea	48(%rsp),%rax
+	pxor	%xmm0,%xmm0
+	jmp	.Lmul_by_1
+
+.align	32
+.Lmul_by_1:
+	movdqu	($aptr),%xmm1
+	movdqu	16($aptr),%xmm2
+	movdqu	32($aptr),%xmm3
+	movdqa	%xmm0,(%rax,$num)
+	movdqu	48($aptr),%xmm4
+	movdqa	%xmm0,16(%rax,$num)
+	.byte	0x48,0x8d,0xb6,0x40,0x00,0x00,0x00	# lea	64($aptr),$aptr
+	movdqa	%xmm1,(%rax)
+	movdqa	%xmm0,32(%rax,$num)
+	movdqa	%xmm2,16(%rax)
+	movdqa	%xmm0,48(%rax,$num)
+	movdqa	%xmm3,32(%rax)
+	movdqa	%xmm4,48(%rax)
+	lea	64(%rax),%rax
+	sub	\$64,%r11
+	jnz	.Lmul_by_1
+
+	movq	$rptr,%xmm1
+	movq	$nptr,%xmm2
+	.byte	0x67
+	mov	$nptr,%rbp
+	movq	%r10, %xmm3		# -num
+___
+$code.=<<___ if ($addx);
+	mov	OPENSSL_ia32cap_P+8(%rip),%r11d
+	and	\$0x80108,%r11d
+	cmp	\$0x80108,%r11d		# check for AD*X+BMI2+BMI1
+	jne	.Lfrom_mont_nox
+
+	lea	(%rax,$num),$rptr
+	call	__bn_sqrx8x_reduction
+	call	__bn_postx4x_internal
+
+	pxor	%xmm0,%xmm0
+	lea	48(%rsp),%rax
+	jmp	.Lfrom_mont_zero
+
+.align	32
+.Lfrom_mont_nox:
+___
+$code.=<<___;
+	call	__bn_sqr8x_reduction
+	call	__bn_post4x_internal
+
+	pxor	%xmm0,%xmm0
+	lea	48(%rsp),%rax
+	jmp	.Lfrom_mont_zero
+
+.align	32
+.Lfrom_mont_zero:
+	mov	40(%rsp),%rsi		# restore %rsp
+.cfi_def_cfa	%rsi,8
+	movdqa	%xmm0,16*0(%rax)
+	movdqa	%xmm0,16*1(%rax)
+	movdqa	%xmm0,16*2(%rax)
+	movdqa	%xmm0,16*3(%rax)
+	lea	16*4(%rax),%rax
+	sub	\$32,$num
+	jnz	.Lfrom_mont_zero
+
+	mov	\$1,%rax
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lfrom_epilogue:
+	ret
+.cfi_endproc
+.size	bn_from_mont8x,.-bn_from_mont8x
+___
+}
+}}}
+
+if ($addx) {{{
+my $bp="%rdx";	# restore original value
+
+$code.=<<___;
+.type	bn_mulx4x_mont_gather5,\@function,6
+.align	32
+bn_mulx4x_mont_gather5:
+.cfi_startproc
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+.Lmulx4x_enter:
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lmulx4x_prologue:
+
+	shl	\$3,${num}d		# convert $num to bytes
+	lea	($num,$num,2),%r10	# 3*$num in bytes
+	neg	$num			# -$num
+	mov	($n0),$n0		# *n0
+
+	##############################################################
+	# Ensure that stack frame doesn't alias with $rptr+3*$num
+	# modulo 4096, which covers ret[num], am[num] and n[num]
+	# (see bn_exp.c). This is done to allow memory disambiguation
+	# logic do its magic. [Extra [num] is allocated in order
+	# to align with bn_power5's frame, which is cleansed after
+	# completing exponentiation. Extra 256 bytes is for power mask
+	# calculated from 7th argument, the index.]
+	#
+	lea	-320(%rsp,$num,2),%r11
+	mov	%rsp,%rbp
+	sub	$rp,%r11
+	and	\$4095,%r11
+	cmp	%r11,%r10
+	jb	.Lmulx4xsp_alt
+	sub	%r11,%rbp		# align with $aptr
+	lea	-320(%rbp,$num,2),%rbp	# future alloca(frame+2*$num*8+256)
+	jmp	.Lmulx4xsp_done
+
+.Lmulx4xsp_alt:
+	lea	4096-320(,$num,2),%r10
+	lea	-320(%rbp,$num,2),%rbp	# future alloca(frame+2*$num*8+256)
+	sub	%r10,%r11
+	mov	\$0,%r10
+	cmovc	%r10,%r11
+	sub	%r11,%rbp
+.Lmulx4xsp_done:
+	and	\$-64,%rbp		# ensure alignment
+	mov	%rsp,%r11
+	sub	%rbp,%r11
+	and	\$-4096,%r11
+	lea	(%rbp,%r11),%rsp
+	mov	(%rsp),%r10
+	cmp	%rbp,%rsp
+	ja	.Lmulx4x_page_walk
+	jmp	.Lmulx4x_page_walk_done
+
+.Lmulx4x_page_walk:
+	lea	-4096(%rsp),%rsp
+	mov	(%rsp),%r10
+	cmp	%rbp,%rsp
+	ja	.Lmulx4x_page_walk
+.Lmulx4x_page_walk_done:
+
+	##############################################################
+	# Stack layout
+	# +0	-num
+	# +8	off-loaded &b[i]
+	# +16	end of b[num]
+	# +24	inner counter
+	# +32	saved n0
+	# +40	saved %rsp
+	# +48
+	# +56	saved rp
+	# +64	tmp[num+1]
+	#
+	mov	$n0, 32(%rsp)		# save *n0
+	mov	%rax,40(%rsp)		# save original %rsp
+.cfi_cfa_expression	%rsp+40,deref,+8
+.Lmulx4x_body:
+	call	mulx4x_internal
+
+	mov	40(%rsp),%rsi		# restore %rsp
+.cfi_def_cfa	%rsi,8
+	mov	\$1,%rax
+
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lmulx4x_epilogue:
+	ret
+.cfi_endproc
+.size	bn_mulx4x_mont_gather5,.-bn_mulx4x_mont_gather5
+
+.type	mulx4x_internal,\@abi-omnipotent
+.align	32
+mulx4x_internal:
+	mov	$num,8(%rsp)		# save -$num (it was in bytes)
+	mov	$num,%r10
+	neg	$num			# restore $num
+	shl	\$5,$num
+	neg	%r10			# restore $num
+	lea	128($bp,$num),%r13	# end of powers table (+size optimization)
+	shr	\$5+5,$num
+	movd	`($win64?56:8)`(%rax),%xmm5	# load 7th argument
+	sub	\$1,$num
+	lea	.Linc(%rip),%rax
+	mov	%r13,16+8(%rsp)		# end of b[num]
+	mov	$num,24+8(%rsp)		# inner counter
+	mov	$rp, 56+8(%rsp)		# save $rp
+___
+my ($aptr, $bptr, $nptr, $tptr, $mi,  $bi,  $zero, $num)=
+   ("%rsi","%rdi","%rcx","%rbx","%r8","%r9","%rbp","%rax");
+my $rptr=$bptr;
+my $STRIDE=2**5*8;		# 5 is "window size"
+my $N=$STRIDE/4;		# should match cache line size
+$code.=<<___;
+	movdqa	0(%rax),%xmm0		# 00000001000000010000000000000000
+	movdqa	16(%rax),%xmm1		# 00000002000000020000000200000002
+	lea	88-112(%rsp,%r10),%r10	# place the mask after tp[num+1] (+ICache optimization)
+	lea	128($bp),$bptr		# size optimization
+
+	pshufd	\$0,%xmm5,%xmm5		# broadcast index
+	movdqa	%xmm1,%xmm4
+	.byte	0x67
+	movdqa	%xmm1,%xmm2
+___
+########################################################################
+# calculate mask by comparing 0..31 to index and save result to stack
+#
+$code.=<<___;
+	.byte	0x67
+	paddd	%xmm0,%xmm1
+	pcmpeqd	%xmm5,%xmm0		# compare to 1,0
+	movdqa	%xmm4,%xmm3
+___
+for($i=0;$i<$STRIDE/16-4;$i+=4) {
+$code.=<<___;
+	paddd	%xmm1,%xmm2
+	pcmpeqd	%xmm5,%xmm1		# compare to 3,2
+	movdqa	%xmm0,`16*($i+0)+112`(%r10)
+	movdqa	%xmm4,%xmm0
+
+	paddd	%xmm2,%xmm3
+	pcmpeqd	%xmm5,%xmm2		# compare to 5,4
+	movdqa	%xmm1,`16*($i+1)+112`(%r10)
+	movdqa	%xmm4,%xmm1
+
+	paddd	%xmm3,%xmm0
+	pcmpeqd	%xmm5,%xmm3		# compare to 7,6
+	movdqa	%xmm2,`16*($i+2)+112`(%r10)
+	movdqa	%xmm4,%xmm2
+
+	paddd	%xmm0,%xmm1
+	pcmpeqd	%xmm5,%xmm0
+	movdqa	%xmm3,`16*($i+3)+112`(%r10)
+	movdqa	%xmm4,%xmm3
+___
+}
+$code.=<<___;				# last iteration can be optimized
+	.byte	0x67
+	paddd	%xmm1,%xmm2
+	pcmpeqd	%xmm5,%xmm1
+	movdqa	%xmm0,`16*($i+0)+112`(%r10)
+
+	paddd	%xmm2,%xmm3
+	pcmpeqd	%xmm5,%xmm2
+	movdqa	%xmm1,`16*($i+1)+112`(%r10)
+
+	pcmpeqd	%xmm5,%xmm3
+	movdqa	%xmm2,`16*($i+2)+112`(%r10)
+
+	pand	`16*($i+0)-128`($bptr),%xmm0	# while it's still in register
+	pand	`16*($i+1)-128`($bptr),%xmm1
+	pand	`16*($i+2)-128`($bptr),%xmm2
+	movdqa	%xmm3,`16*($i+3)+112`(%r10)
+	pand	`16*($i+3)-128`($bptr),%xmm3
+	por	%xmm2,%xmm0
+	por	%xmm3,%xmm1
+___
+for($i=0;$i<$STRIDE/16-4;$i+=4) {
+$code.=<<___;
+	movdqa	`16*($i+0)-128`($bptr),%xmm4
+	movdqa	`16*($i+1)-128`($bptr),%xmm5
+	movdqa	`16*($i+2)-128`($bptr),%xmm2
+	pand	`16*($i+0)+112`(%r10),%xmm4
+	movdqa	`16*($i+3)-128`($bptr),%xmm3
+	pand	`16*($i+1)+112`(%r10),%xmm5
+	por	%xmm4,%xmm0
+	pand	`16*($i+2)+112`(%r10),%xmm2
+	por	%xmm5,%xmm1
+	pand	`16*($i+3)+112`(%r10),%xmm3
+	por	%xmm2,%xmm0
+	por	%xmm3,%xmm1
+___
+}
+$code.=<<___;
+	pxor	%xmm1,%xmm0
+	pshufd	\$0x4e,%xmm0,%xmm1
+	por	%xmm1,%xmm0
+	lea	$STRIDE($bptr),$bptr
+	movq	%xmm0,%rdx		# bp[0]
+	lea	64+8*4+8(%rsp),$tptr
+
+	mov	%rdx,$bi
+	mulx	0*8($aptr),$mi,%rax	# a[0]*b[0]
+	mulx	1*8($aptr),%r11,%r12	# a[1]*b[0]
+	add	%rax,%r11
+	mulx	2*8($aptr),%rax,%r13	# ...
+	adc	%rax,%r12
+	adc	\$0,%r13
+	mulx	3*8($aptr),%rax,%r14
+
+	mov	$mi,%r15
+	imulq	32+8(%rsp),$mi		# "t[0]"*n0
+	xor	$zero,$zero		# cf=0, of=0
+	mov	$mi,%rdx
+
+	mov	$bptr,8+8(%rsp)		# off-load &b[i]
+
+	lea	4*8($aptr),$aptr
+	adcx	%rax,%r13
+	adcx	$zero,%r14		# cf=0
+
+	mulx	0*8($nptr),%rax,%r10
+	adcx	%rax,%r15		# discarded
+	adox	%r11,%r10
+	mulx	1*8($nptr),%rax,%r11
+	adcx	%rax,%r10
+	adox	%r12,%r11
+	mulx	2*8($nptr),%rax,%r12
+	mov	24+8(%rsp),$bptr	# counter value
+	mov	%r10,-8*4($tptr)
+	adcx	%rax,%r11
+	adox	%r13,%r12
+	mulx	3*8($nptr),%rax,%r15
+	 mov	$bi,%rdx
+	mov	%r11,-8*3($tptr)
+	adcx	%rax,%r12
+	adox	$zero,%r15		# of=0
+	lea	4*8($nptr),$nptr
+	mov	%r12,-8*2($tptr)
+	jmp	.Lmulx4x_1st
+
+.align	32
+.Lmulx4x_1st:
+	adcx	$zero,%r15		# cf=0, modulo-scheduled
+	mulx	0*8($aptr),%r10,%rax	# a[4]*b[0]
+	adcx	%r14,%r10
+	mulx	1*8($aptr),%r11,%r14	# a[5]*b[0]
+	adcx	%rax,%r11
+	mulx	2*8($aptr),%r12,%rax	# ...
+	adcx	%r14,%r12
+	mulx	3*8($aptr),%r13,%r14
+	 .byte	0x67,0x67
+	 mov	$mi,%rdx
+	adcx	%rax,%r13
+	adcx	$zero,%r14		# cf=0
+	lea	4*8($aptr),$aptr
+	lea	4*8($tptr),$tptr
+
+	adox	%r15,%r10
+	mulx	0*8($nptr),%rax,%r15
+	adcx	%rax,%r10
+	adox	%r15,%r11
+	mulx	1*8($nptr),%rax,%r15
+	adcx	%rax,%r11
+	adox	%r15,%r12
+	mulx	2*8($nptr),%rax,%r15
+	mov	%r10,-5*8($tptr)
+	adcx	%rax,%r12
+	mov	%r11,-4*8($tptr)
+	adox	%r15,%r13
+	mulx	3*8($nptr),%rax,%r15
+	 mov	$bi,%rdx
+	mov	%r12,-3*8($tptr)
+	adcx	%rax,%r13
+	adox	$zero,%r15
+	lea	4*8($nptr),$nptr
+	mov	%r13,-2*8($tptr)
+
+	dec	$bptr			# of=0, pass cf
+	jnz	.Lmulx4x_1st
+
+	mov	8(%rsp),$num		# load -num
+	adc	$zero,%r15		# modulo-scheduled
+	lea	($aptr,$num),$aptr	# rewind $aptr
+	add	%r15,%r14
+	mov	8+8(%rsp),$bptr		# re-load &b[i]
+	adc	$zero,$zero		# top-most carry
+	mov	%r14,-1*8($tptr)
+	jmp	.Lmulx4x_outer
+
+.align	32
+.Lmulx4x_outer:
+	lea	16-256($tptr),%r10	# where 256-byte mask is (+density control)
+	pxor	%xmm4,%xmm4
+	.byte	0x67,0x67
+	pxor	%xmm5,%xmm5
+___
+for($i=0;$i<$STRIDE/16;$i+=4) {
+$code.=<<___;
+	movdqa	`16*($i+0)-128`($bptr),%xmm0
+	movdqa	`16*($i+1)-128`($bptr),%xmm1
+	movdqa	`16*($i+2)-128`($bptr),%xmm2
+	pand	`16*($i+0)+256`(%r10),%xmm0
+	movdqa	`16*($i+3)-128`($bptr),%xmm3
+	pand	`16*($i+1)+256`(%r10),%xmm1
+	por	%xmm0,%xmm4
+	pand	`16*($i+2)+256`(%r10),%xmm2
+	por	%xmm1,%xmm5
+	pand	`16*($i+3)+256`(%r10),%xmm3
+	por	%xmm2,%xmm4
+	por	%xmm3,%xmm5
+___
+}
+$code.=<<___;
+	por	%xmm5,%xmm4
+	pshufd	\$0x4e,%xmm4,%xmm0
+	por	%xmm4,%xmm0
+	lea	$STRIDE($bptr),$bptr
+	movq	%xmm0,%rdx		# m0=bp[i]
+
+	mov	$zero,($tptr)		# save top-most carry
+	lea	4*8($tptr,$num),$tptr	# rewind $tptr
+	mulx	0*8($aptr),$mi,%r11	# a[0]*b[i]
+	xor	$zero,$zero		# cf=0, of=0
+	mov	%rdx,$bi
+	mulx	1*8($aptr),%r14,%r12	# a[1]*b[i]
+	adox	-4*8($tptr),$mi		# +t[0]
+	adcx	%r14,%r11
+	mulx	2*8($aptr),%r15,%r13	# ...
+	adox	-3*8($tptr),%r11
+	adcx	%r15,%r12
+	mulx	3*8($aptr),%rdx,%r14
+	adox	-2*8($tptr),%r12
+	adcx	%rdx,%r13
+	lea	($nptr,$num),$nptr	# rewind $nptr
+	lea	4*8($aptr),$aptr
+	adox	-1*8($tptr),%r13
+	adcx	$zero,%r14
+	adox	$zero,%r14
+
+	mov	$mi,%r15
+	imulq	32+8(%rsp),$mi		# "t[0]"*n0
+
+	mov	$mi,%rdx
+	xor	$zero,$zero		# cf=0, of=0
+	mov	$bptr,8+8(%rsp)		# off-load &b[i]
+
+	mulx	0*8($nptr),%rax,%r10
+	adcx	%rax,%r15		# discarded
+	adox	%r11,%r10
+	mulx	1*8($nptr),%rax,%r11
+	adcx	%rax,%r10
+	adox	%r12,%r11
+	mulx	2*8($nptr),%rax,%r12
+	adcx	%rax,%r11
+	adox	%r13,%r12
+	mulx	3*8($nptr),%rax,%r15
+	 mov	$bi,%rdx
+	mov	24+8(%rsp),$bptr	# counter value
+	mov	%r10,-8*4($tptr)
+	adcx	%rax,%r12
+	mov	%r11,-8*3($tptr)
+	adox	$zero,%r15		# of=0
+	mov	%r12,-8*2($tptr)
+	lea	4*8($nptr),$nptr
+	jmp	.Lmulx4x_inner
+
+.align	32
+.Lmulx4x_inner:
+	mulx	0*8($aptr),%r10,%rax	# a[4]*b[i]
+	adcx	$zero,%r15		# cf=0, modulo-scheduled
+	adox	%r14,%r10
+	mulx	1*8($aptr),%r11,%r14	# a[5]*b[i]
+	adcx	0*8($tptr),%r10
+	adox	%rax,%r11
+	mulx	2*8($aptr),%r12,%rax	# ...
+	adcx	1*8($tptr),%r11
+	adox	%r14,%r12
+	mulx	3*8($aptr),%r13,%r14
+	 mov	$mi,%rdx
+	adcx	2*8($tptr),%r12
+	adox	%rax,%r13
+	adcx	3*8($tptr),%r13
+	adox	$zero,%r14		# of=0
+	lea	4*8($aptr),$aptr
+	lea	4*8($tptr),$tptr
+	adcx	$zero,%r14		# cf=0
+
+	adox	%r15,%r10
+	mulx	0*8($nptr),%rax,%r15
+	adcx	%rax,%r10
+	adox	%r15,%r11
+	mulx	1*8($nptr),%rax,%r15
+	adcx	%rax,%r11
+	adox	%r15,%r12
+	mulx	2*8($nptr),%rax,%r15
+	mov	%r10,-5*8($tptr)
+	adcx	%rax,%r12
+	adox	%r15,%r13
+	mov	%r11,-4*8($tptr)
+	mulx	3*8($nptr),%rax,%r15
+	 mov	$bi,%rdx
+	lea	4*8($nptr),$nptr
+	mov	%r12,-3*8($tptr)
+	adcx	%rax,%r13
+	adox	$zero,%r15
+	mov	%r13,-2*8($tptr)
+
+	dec	$bptr			# of=0, pass cf
+	jnz	.Lmulx4x_inner
+
+	mov	0+8(%rsp),$num		# load -num
+	adc	$zero,%r15		# modulo-scheduled
+	sub	0*8($tptr),$bptr	# pull top-most carry to %cf
+	mov	8+8(%rsp),$bptr		# re-load &b[i]
+	mov	16+8(%rsp),%r10
+	adc	%r15,%r14
+	lea	($aptr,$num),$aptr	# rewind $aptr
+	adc	$zero,$zero		# top-most carry
+	mov	%r14,-1*8($tptr)
+
+	cmp	%r10,$bptr
+	jb	.Lmulx4x_outer
+
+	mov	-8($nptr),%r10
+	mov	$zero,%r8
+	mov	($nptr,$num),%r12
+	lea	($nptr,$num),%rbp	# rewind $nptr
+	mov	$num,%rcx
+	lea	($tptr,$num),%rdi	# rewind $tptr
+	xor	%eax,%eax
+	xor	%r15,%r15
+	sub	%r14,%r10		# compare top-most words
+	adc	%r15,%r15
+	or	%r15,%r8
+	sar	\$3+2,%rcx
+	sub	%r8,%rax		# %rax=-%r8
+	mov	56+8(%rsp),%rdx		# restore rp
+	dec	%r12			# so that after 'not' we get -n[0]
+	mov	8*1(%rbp),%r13
+	xor	%r8,%r8
+	mov	8*2(%rbp),%r14
+	mov	8*3(%rbp),%r15
+	jmp	.Lsqrx4x_sub_entry	# common post-condition
+.size	mulx4x_internal,.-mulx4x_internal
+___
+}{
+######################################################################
+# void bn_power5(
+my $rptr="%rdi";	# BN_ULONG *rptr,
+my $aptr="%rsi";	# const BN_ULONG *aptr,
+my $bptr="%rdx";	# const void *table,
+my $nptr="%rcx";	# const BN_ULONG *nptr,
+my $n0  ="%r8";		# const BN_ULONG *n0);
+my $num ="%r9";		# int num, has to be divisible by 8
+			# int pwr);
+
+my ($i,$j,$tptr)=("%rbp","%rcx",$rptr);
+my @A0=("%r10","%r11");
+my @A1=("%r12","%r13");
+my ($a0,$a1,$ai)=("%r14","%r15","%rbx");
+
+$code.=<<___;
+.type	bn_powerx5,\@function,6
+.align	32
+bn_powerx5:
+.cfi_startproc
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+.Lpowerx5_enter:
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lpowerx5_prologue:
+
+	shl	\$3,${num}d		# convert $num to bytes
+	lea	($num,$num,2),%r10	# 3*$num in bytes
+	neg	$num
+	mov	($n0),$n0		# *n0
+
+	##############################################################
+	# Ensure that stack frame doesn't alias with $rptr+3*$num
+	# modulo 4096, which covers ret[num], am[num] and n[num]
+	# (see bn_exp.c). This is done to allow memory disambiguation
+	# logic do its magic. [Extra 256 bytes is for power mask
+	# calculated from 7th argument, the index.]
+	#
+	lea	-320(%rsp,$num,2),%r11
+	mov	%rsp,%rbp
+	sub	$rptr,%r11
+	and	\$4095,%r11
+	cmp	%r11,%r10
+	jb	.Lpwrx_sp_alt
+	sub	%r11,%rbp		# align with $aptr
+	lea	-320(%rbp,$num,2),%rbp	# future alloca(frame+2*$num*8+256)
+	jmp	.Lpwrx_sp_done
+
+.align	32
+.Lpwrx_sp_alt:
+	lea	4096-320(,$num,2),%r10
+	lea	-320(%rbp,$num,2),%rbp	# alloca(frame+2*$num*8+256)
+	sub	%r10,%r11
+	mov	\$0,%r10
+	cmovc	%r10,%r11
+	sub	%r11,%rbp
+.Lpwrx_sp_done:
+	and	\$-64,%rbp
+	mov	%rsp,%r11
+	sub	%rbp,%r11
+	and	\$-4096,%r11
+	lea	(%rbp,%r11),%rsp
+	mov	(%rsp),%r10
+	cmp	%rbp,%rsp
+	ja	.Lpwrx_page_walk
+	jmp	.Lpwrx_page_walk_done
+
+.Lpwrx_page_walk:
+	lea	-4096(%rsp),%rsp
+	mov	(%rsp),%r10
+	cmp	%rbp,%rsp
+	ja	.Lpwrx_page_walk
+.Lpwrx_page_walk_done:
+
+	mov	$num,%r10
+	neg	$num
+
+	##############################################################
+	# Stack layout
+	#
+	# +0	saved $num, used in reduction section
+	# +8	&t[2*$num], used in reduction section
+	# +16	intermediate carry bit
+	# +24	top-most carry bit, used in reduction section
+	# +32	saved *n0
+	# +40	saved %rsp
+	# +48	t[2*$num]
+	#
+	pxor	%xmm0,%xmm0
+	movq	$rptr,%xmm1		# save $rptr
+	movq	$nptr,%xmm2		# save $nptr
+	movq	%r10, %xmm3		# -$num
+	movq	$bptr,%xmm4
+	mov	$n0,  32(%rsp)
+	mov	%rax, 40(%rsp)		# save original %rsp
+.cfi_cfa_expression	%rsp+40,deref,+8
+.Lpowerx5_body:
+
+	call	__bn_sqrx8x_internal
+	call	__bn_postx4x_internal
+	call	__bn_sqrx8x_internal
+	call	__bn_postx4x_internal
+	call	__bn_sqrx8x_internal
+	call	__bn_postx4x_internal
+	call	__bn_sqrx8x_internal
+	call	__bn_postx4x_internal
+	call	__bn_sqrx8x_internal
+	call	__bn_postx4x_internal
+
+	mov	%r10,$num		# -num
+	mov	$aptr,$rptr
+	movq	%xmm2,$nptr
+	movq	%xmm4,$bptr
+	mov	40(%rsp),%rax
+
+	call	mulx4x_internal
+
+	mov	40(%rsp),%rsi		# restore %rsp
+.cfi_def_cfa	%rsi,8
+	mov	\$1,%rax
+
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lpowerx5_epilogue:
+	ret
+.cfi_endproc
+.size	bn_powerx5,.-bn_powerx5
+
+.globl	bn_sqrx8x_internal
+.hidden	bn_sqrx8x_internal
+.type	bn_sqrx8x_internal,\@abi-omnipotent
+.align	32
+bn_sqrx8x_internal:
+__bn_sqrx8x_internal:
+.cfi_startproc
+	##################################################################
+	# Squaring part:
+	#
+	# a) multiply-n-add everything but a[i]*a[i];
+	# b) shift result of a) by 1 to the left and accumulate
+	#    a[i]*a[i] products;
+	#
+	##################################################################
+	# a[7]a[7]a[6]a[6]a[5]a[5]a[4]a[4]a[3]a[3]a[2]a[2]a[1]a[1]a[0]a[0]
+	#                                                     a[1]a[0]
+	#                                                 a[2]a[0]
+	#                                             a[3]a[0]
+	#                                             a[2]a[1]
+	#                                         a[3]a[1]
+	#                                     a[3]a[2]
+	#
+	#                                         a[4]a[0]
+	#                                     a[5]a[0]
+	#                                 a[6]a[0]
+	#                             a[7]a[0]
+	#                                     a[4]a[1]
+	#                                 a[5]a[1]
+	#                             a[6]a[1]
+	#                         a[7]a[1]
+	#                                 a[4]a[2]
+	#                             a[5]a[2]
+	#                         a[6]a[2]
+	#                     a[7]a[2]
+	#                             a[4]a[3]
+	#                         a[5]a[3]
+	#                     a[6]a[3]
+	#                 a[7]a[3]
+	#
+	#                     a[5]a[4]
+	#                 a[6]a[4]
+	#             a[7]a[4]
+	#             a[6]a[5]
+	#         a[7]a[5]
+	#     a[7]a[6]
+	# a[7]a[7]a[6]a[6]a[5]a[5]a[4]a[4]a[3]a[3]a[2]a[2]a[1]a[1]a[0]a[0]
+___
+{
+my ($zero,$carry)=("%rbp","%rcx");
+my $aaptr=$zero;
+$code.=<<___;
+	lea	48+8(%rsp),$tptr
+	lea	($aptr,$num),$aaptr
+	mov	$num,0+8(%rsp)			# save $num
+	mov	$aaptr,8+8(%rsp)		# save end of $aptr
+	jmp	.Lsqr8x_zero_start
+
+.align	32
+.byte	0x66,0x66,0x66,0x2e,0x0f,0x1f,0x84,0x00,0x00,0x00,0x00,0x00
+.Lsqrx8x_zero:
+	.byte	0x3e
+	movdqa	%xmm0,0*8($tptr)
+	movdqa	%xmm0,2*8($tptr)
+	movdqa	%xmm0,4*8($tptr)
+	movdqa	%xmm0,6*8($tptr)
+.Lsqr8x_zero_start:			# aligned at 32
+	movdqa	%xmm0,8*8($tptr)
+	movdqa	%xmm0,10*8($tptr)
+	movdqa	%xmm0,12*8($tptr)
+	movdqa	%xmm0,14*8($tptr)
+	lea	16*8($tptr),$tptr
+	sub	\$64,$num
+	jnz	.Lsqrx8x_zero
+
+	mov	0*8($aptr),%rdx		# a[0], modulo-scheduled
+	#xor	%r9,%r9			# t[1], ex-$num, zero already
+	xor	%r10,%r10
+	xor	%r11,%r11
+	xor	%r12,%r12
+	xor	%r13,%r13
+	xor	%r14,%r14
+	xor	%r15,%r15
+	lea	48+8(%rsp),$tptr
+	xor	$zero,$zero		# cf=0, cf=0
+	jmp	.Lsqrx8x_outer_loop
+
+.align	32
+.Lsqrx8x_outer_loop:
+	mulx	1*8($aptr),%r8,%rax	# a[1]*a[0]
+	adcx	%r9,%r8			# a[1]*a[0]+=t[1]
+	adox	%rax,%r10
+	mulx	2*8($aptr),%r9,%rax	# a[2]*a[0]
+	adcx	%r10,%r9
+	adox	%rax,%r11
+	.byte	0xc4,0xe2,0xab,0xf6,0x86,0x18,0x00,0x00,0x00	# mulx	3*8($aptr),%r10,%rax	# ...
+	adcx	%r11,%r10
+	adox	%rax,%r12
+	.byte	0xc4,0xe2,0xa3,0xf6,0x86,0x20,0x00,0x00,0x00	# mulx	4*8($aptr),%r11,%rax
+	adcx	%r12,%r11
+	adox	%rax,%r13
+	mulx	5*8($aptr),%r12,%rax
+	adcx	%r13,%r12
+	adox	%rax,%r14
+	mulx	6*8($aptr),%r13,%rax
+	adcx	%r14,%r13
+	adox	%r15,%rax
+	mulx	7*8($aptr),%r14,%r15
+	 mov	1*8($aptr),%rdx		# a[1]
+	adcx	%rax,%r14
+	adox	$zero,%r15
+	adc	8*8($tptr),%r15
+	mov	%r8,1*8($tptr)		# t[1]
+	mov	%r9,2*8($tptr)		# t[2]
+	sbb	$carry,$carry		# mov %cf,$carry
+	xor	$zero,$zero		# cf=0, of=0
+
+
+	mulx	2*8($aptr),%r8,%rbx	# a[2]*a[1]
+	mulx	3*8($aptr),%r9,%rax	# a[3]*a[1]
+	adcx	%r10,%r8
+	adox	%rbx,%r9
+	mulx	4*8($aptr),%r10,%rbx	# ...
+	adcx	%r11,%r9
+	adox	%rax,%r10
+	.byte	0xc4,0xe2,0xa3,0xf6,0x86,0x28,0x00,0x00,0x00	# mulx	5*8($aptr),%r11,%rax
+	adcx	%r12,%r10
+	adox	%rbx,%r11
+	.byte	0xc4,0xe2,0x9b,0xf6,0x9e,0x30,0x00,0x00,0x00	# mulx	6*8($aptr),%r12,%rbx
+	adcx	%r13,%r11
+	adox	%r14,%r12
+	.byte	0xc4,0x62,0x93,0xf6,0xb6,0x38,0x00,0x00,0x00	# mulx	7*8($aptr),%r13,%r14
+	 mov	2*8($aptr),%rdx		# a[2]
+	adcx	%rax,%r12
+	adox	%rbx,%r13
+	adcx	%r15,%r13
+	adox	$zero,%r14		# of=0
+	adcx	$zero,%r14		# cf=0
+
+	mov	%r8,3*8($tptr)		# t[3]
+	mov	%r9,4*8($tptr)		# t[4]
+
+	mulx	3*8($aptr),%r8,%rbx	# a[3]*a[2]
+	mulx	4*8($aptr),%r9,%rax	# a[4]*a[2]
+	adcx	%r10,%r8
+	adox	%rbx,%r9
+	mulx	5*8($aptr),%r10,%rbx	# ...
+	adcx	%r11,%r9
+	adox	%rax,%r10
+	.byte	0xc4,0xe2,0xa3,0xf6,0x86,0x30,0x00,0x00,0x00	# mulx	6*8($aptr),%r11,%rax
+	adcx	%r12,%r10
+	adox	%r13,%r11
+	.byte	0xc4,0x62,0x9b,0xf6,0xae,0x38,0x00,0x00,0x00	# mulx	7*8($aptr),%r12,%r13
+	.byte	0x3e
+	 mov	3*8($aptr),%rdx		# a[3]
+	adcx	%rbx,%r11
+	adox	%rax,%r12
+	adcx	%r14,%r12
+	mov	%r8,5*8($tptr)		# t[5]
+	mov	%r9,6*8($tptr)		# t[6]
+	 mulx	4*8($aptr),%r8,%rax	# a[4]*a[3]
+	adox	$zero,%r13		# of=0
+	adcx	$zero,%r13		# cf=0
+
+	mulx	5*8($aptr),%r9,%rbx	# a[5]*a[3]
+	adcx	%r10,%r8
+	adox	%rax,%r9
+	mulx	6*8($aptr),%r10,%rax	# ...
+	adcx	%r11,%r9
+	adox	%r12,%r10
+	mulx	7*8($aptr),%r11,%r12
+	 mov	4*8($aptr),%rdx		# a[4]
+	 mov	5*8($aptr),%r14		# a[5]
+	adcx	%rbx,%r10
+	adox	%rax,%r11
+	 mov	6*8($aptr),%r15		# a[6]
+	adcx	%r13,%r11
+	adox	$zero,%r12		# of=0
+	adcx	$zero,%r12		# cf=0
+
+	mov	%r8,7*8($tptr)		# t[7]
+	mov	%r9,8*8($tptr)		# t[8]
+
+	mulx	%r14,%r9,%rax		# a[5]*a[4]
+	 mov	7*8($aptr),%r8		# a[7]
+	adcx	%r10,%r9
+	mulx	%r15,%r10,%rbx		# a[6]*a[4]
+	adox	%rax,%r10
+	adcx	%r11,%r10
+	mulx	%r8,%r11,%rax		# a[7]*a[4]
+	 mov	%r14,%rdx		# a[5]
+	adox	%rbx,%r11
+	adcx	%r12,%r11
+	#adox	$zero,%rax		# of=0
+	adcx	$zero,%rax		# cf=0
+
+	mulx	%r15,%r14,%rbx		# a[6]*a[5]
+	mulx	%r8,%r12,%r13		# a[7]*a[5]
+	 mov	%r15,%rdx		# a[6]
+	 lea	8*8($aptr),$aptr
+	adcx	%r14,%r11
+	adox	%rbx,%r12
+	adcx	%rax,%r12
+	adox	$zero,%r13
+
+	.byte	0x67,0x67
+	mulx	%r8,%r8,%r14		# a[7]*a[6]
+	adcx	%r8,%r13
+	adcx	$zero,%r14
+
+	cmp	8+8(%rsp),$aptr
+	je	.Lsqrx8x_outer_break
+
+	neg	$carry			# mov $carry,%cf
+	mov	\$-8,%rcx
+	mov	$zero,%r15
+	mov	8*8($tptr),%r8
+	adcx	9*8($tptr),%r9		# +=t[9]
+	adcx	10*8($tptr),%r10	# ...
+	adcx	11*8($tptr),%r11
+	adc	12*8($tptr),%r12
+	adc	13*8($tptr),%r13
+	adc	14*8($tptr),%r14
+	adc	15*8($tptr),%r15
+	lea	($aptr),$aaptr
+	lea	2*64($tptr),$tptr
+	sbb	%rax,%rax		# mov %cf,$carry
+
+	mov	-64($aptr),%rdx		# a[0]
+	mov	%rax,16+8(%rsp)		# offload $carry
+	mov	$tptr,24+8(%rsp)
+
+	#lea	8*8($tptr),$tptr	# see 2*8*8($tptr) above
+	xor	%eax,%eax		# cf=0, of=0
+	jmp	.Lsqrx8x_loop
+
+.align	32
+.Lsqrx8x_loop:
+	mov	%r8,%rbx
+	mulx	0*8($aaptr),%rax,%r8	# a[8]*a[i]
+	adcx	%rax,%rbx		# +=t[8]
+	adox	%r9,%r8
+
+	mulx	1*8($aaptr),%rax,%r9	# ...
+	adcx	%rax,%r8
+	adox	%r10,%r9
+
+	mulx	2*8($aaptr),%rax,%r10
+	adcx	%rax,%r9
+	adox	%r11,%r10
+
+	mulx	3*8($aaptr),%rax,%r11
+	adcx	%rax,%r10
+	adox	%r12,%r11
+
+	.byte	0xc4,0x62,0xfb,0xf6,0xa5,0x20,0x00,0x00,0x00	# mulx	4*8($aaptr),%rax,%r12
+	adcx	%rax,%r11
+	adox	%r13,%r12
+
+	mulx	5*8($aaptr),%rax,%r13
+	adcx	%rax,%r12
+	adox	%r14,%r13
+
+	mulx	6*8($aaptr),%rax,%r14
+	 mov	%rbx,($tptr,%rcx,8)	# store t[8+i]
+	 mov	\$0,%ebx
+	adcx	%rax,%r13
+	adox	%r15,%r14
+
+	.byte	0xc4,0x62,0xfb,0xf6,0xbd,0x38,0x00,0x00,0x00	# mulx	7*8($aaptr),%rax,%r15
+	 mov	8($aptr,%rcx,8),%rdx	# a[i]
+	adcx	%rax,%r14
+	adox	%rbx,%r15		# %rbx is 0, of=0
+	adcx	%rbx,%r15		# cf=0
+
+	.byte	0x67
+	inc	%rcx			# of=0
+	jnz	.Lsqrx8x_loop
+
+	lea	8*8($aaptr),$aaptr
+	mov	\$-8,%rcx
+	cmp	8+8(%rsp),$aaptr	# done?
+	je	.Lsqrx8x_break
+
+	sub	16+8(%rsp),%rbx		# mov 16(%rsp),%cf
+	.byte	0x66
+	mov	-64($aptr),%rdx
+	adcx	0*8($tptr),%r8
+	adcx	1*8($tptr),%r9
+	adc	2*8($tptr),%r10
+	adc	3*8($tptr),%r11
+	adc	4*8($tptr),%r12
+	adc	5*8($tptr),%r13
+	adc	6*8($tptr),%r14
+	adc	7*8($tptr),%r15
+	lea	8*8($tptr),$tptr
+	.byte	0x67
+	sbb	%rax,%rax		# mov %cf,%rax
+	xor	%ebx,%ebx		# cf=0, of=0
+	mov	%rax,16+8(%rsp)		# offload carry
+	jmp	.Lsqrx8x_loop
+
+.align	32
+.Lsqrx8x_break:
+	xor	$zero,$zero
+	sub	16+8(%rsp),%rbx		# mov 16(%rsp),%cf
+	adcx	$zero,%r8
+	mov	24+8(%rsp),$carry	# initial $tptr, borrow $carry
+	adcx	$zero,%r9
+	mov	0*8($aptr),%rdx		# a[8], modulo-scheduled
+	adc	\$0,%r10
+	mov	%r8,0*8($tptr)
+	adc	\$0,%r11
+	adc	\$0,%r12
+	adc	\$0,%r13
+	adc	\$0,%r14
+	adc	\$0,%r15
+	cmp	$carry,$tptr		# cf=0, of=0
+	je	.Lsqrx8x_outer_loop
+
+	mov	%r9,1*8($tptr)
+	 mov	1*8($carry),%r9
+	mov	%r10,2*8($tptr)
+	 mov	2*8($carry),%r10
+	mov	%r11,3*8($tptr)
+	 mov	3*8($carry),%r11
+	mov	%r12,4*8($tptr)
+	 mov	4*8($carry),%r12
+	mov	%r13,5*8($tptr)
+	 mov	5*8($carry),%r13
+	mov	%r14,6*8($tptr)
+	 mov	6*8($carry),%r14
+	mov	%r15,7*8($tptr)
+	 mov	7*8($carry),%r15
+	mov	$carry,$tptr
+	jmp	.Lsqrx8x_outer_loop
+
+.align	32
+.Lsqrx8x_outer_break:
+	mov	%r9,9*8($tptr)		# t[9]
+	 movq	%xmm3,%rcx		# -$num
+	mov	%r10,10*8($tptr)	# ...
+	mov	%r11,11*8($tptr)
+	mov	%r12,12*8($tptr)
+	mov	%r13,13*8($tptr)
+	mov	%r14,14*8($tptr)
+___
+}{
+my $i="%rcx";
+$code.=<<___;
+	lea	48+8(%rsp),$tptr
+	mov	($aptr,$i),%rdx		# a[0]
+
+	mov	8($tptr),$A0[1]		# t[1]
+	xor	$A0[0],$A0[0]		# t[0], of=0, cf=0
+	mov	0+8(%rsp),$num		# restore $num
+	adox	$A0[1],$A0[1]
+	 mov	16($tptr),$A1[0]	# t[2]	# prefetch
+	 mov	24($tptr),$A1[1]	# t[3]	# prefetch
+	#jmp	.Lsqrx4x_shift_n_add	# happens to be aligned
+
+.align	32
+.Lsqrx4x_shift_n_add:
+	mulx	%rdx,%rax,%rbx
+	 adox	$A1[0],$A1[0]
+	adcx	$A0[0],%rax
+	 .byte	0x48,0x8b,0x94,0x0e,0x08,0x00,0x00,0x00	# mov	8($aptr,$i),%rdx	# a[i+1]	# prefetch
+	 .byte	0x4c,0x8b,0x97,0x20,0x00,0x00,0x00	# mov	32($tptr),$A0[0]	# t[2*i+4]	# prefetch
+	 adox	$A1[1],$A1[1]
+	adcx	$A0[1],%rbx
+	 mov	40($tptr),$A0[1]		# t[2*i+4+1]	# prefetch
+	mov	%rax,0($tptr)
+	mov	%rbx,8($tptr)
+
+	mulx	%rdx,%rax,%rbx
+	 adox	$A0[0],$A0[0]
+	adcx	$A1[0],%rax
+	 mov	16($aptr,$i),%rdx	# a[i+2]	# prefetch
+	 mov	48($tptr),$A1[0]	# t[2*i+6]	# prefetch
+	 adox	$A0[1],$A0[1]
+	adcx	$A1[1],%rbx
+	 mov	56($tptr),$A1[1]	# t[2*i+6+1]	# prefetch
+	mov	%rax,16($tptr)
+	mov	%rbx,24($tptr)
+
+	mulx	%rdx,%rax,%rbx
+	 adox	$A1[0],$A1[0]
+	adcx	$A0[0],%rax
+	 mov	24($aptr,$i),%rdx	# a[i+3]	# prefetch
+	 lea	32($i),$i
+	 mov	64($tptr),$A0[0]	# t[2*i+8]	# prefetch
+	 adox	$A1[1],$A1[1]
+	adcx	$A0[1],%rbx
+	 mov	72($tptr),$A0[1]	# t[2*i+8+1]	# prefetch
+	mov	%rax,32($tptr)
+	mov	%rbx,40($tptr)
+
+	mulx	%rdx,%rax,%rbx
+	 adox	$A0[0],$A0[0]
+	adcx	$A1[0],%rax
+	jrcxz	.Lsqrx4x_shift_n_add_break
+	 .byte	0x48,0x8b,0x94,0x0e,0x00,0x00,0x00,0x00	# mov	0($aptr,$i),%rdx	# a[i+4]	# prefetch
+	 adox	$A0[1],$A0[1]
+	adcx	$A1[1],%rbx
+	 mov	80($tptr),$A1[0]	# t[2*i+10]	# prefetch
+	 mov	88($tptr),$A1[1]	# t[2*i+10+1]	# prefetch
+	mov	%rax,48($tptr)
+	mov	%rbx,56($tptr)
+	lea	64($tptr),$tptr
+	nop
+	jmp	.Lsqrx4x_shift_n_add
+
+.align	32
+.Lsqrx4x_shift_n_add_break:
+	adcx	$A1[1],%rbx
+	mov	%rax,48($tptr)
+	mov	%rbx,56($tptr)
+	lea	64($tptr),$tptr		# end of t[] buffer
+___
+}
+######################################################################
+# Montgomery reduction part, "word-by-word" algorithm.
+#
+# This new path is inspired by multiple submissions from Intel, by
+# Shay Gueron, Vlad Krasnov, Erdinc Ozturk, James Guilford,
+# Vinodh Gopal...
+{
+my ($nptr,$carry,$m0)=("%rbp","%rsi","%rdx");
+
+$code.=<<___;
+	movq	%xmm2,$nptr
+__bn_sqrx8x_reduction:
+	xor	%eax,%eax		# initial top-most carry bit
+	mov	32+8(%rsp),%rbx		# n0
+	mov	48+8(%rsp),%rdx		# "%r8", 8*0($tptr)
+	lea	-8*8($nptr,$num),%rcx	# end of n[]
+	#lea	48+8(%rsp,$num,2),$tptr	# end of t[] buffer
+	mov	%rcx, 0+8(%rsp)		# save end of n[]
+	mov	$tptr,8+8(%rsp)		# save end of t[]
+
+	lea	48+8(%rsp),$tptr		# initial t[] window
+	jmp	.Lsqrx8x_reduction_loop
+
+.align	32
+.Lsqrx8x_reduction_loop:
+	mov	8*1($tptr),%r9
+	mov	8*2($tptr),%r10
+	mov	8*3($tptr),%r11
+	mov	8*4($tptr),%r12
+	mov	%rdx,%r8
+	imulq	%rbx,%rdx		# n0*a[i]
+	mov	8*5($tptr),%r13
+	mov	8*6($tptr),%r14
+	mov	8*7($tptr),%r15
+	mov	%rax,24+8(%rsp)		# store top-most carry bit
+
+	lea	8*8($tptr),$tptr
+	xor	$carry,$carry		# cf=0,of=0
+	mov	\$-8,%rcx
+	jmp	.Lsqrx8x_reduce
+
+.align	32
+.Lsqrx8x_reduce:
+	mov	%r8, %rbx
+	mulx	8*0($nptr),%rax,%r8	# n[0]
+	adcx	%rbx,%rax		# discarded
+	adox	%r9,%r8
+
+	mulx	8*1($nptr),%rbx,%r9	# n[1]
+	adcx	%rbx,%r8
+	adox	%r10,%r9
+
+	mulx	8*2($nptr),%rbx,%r10
+	adcx	%rbx,%r9
+	adox	%r11,%r10
+
+	mulx	8*3($nptr),%rbx,%r11
+	adcx	%rbx,%r10
+	adox	%r12,%r11
+
+	.byte	0xc4,0x62,0xe3,0xf6,0xa5,0x20,0x00,0x00,0x00	# mulx	8*4($nptr),%rbx,%r12
+	 mov	%rdx,%rax
+	 mov	%r8,%rdx
+	adcx	%rbx,%r11
+	adox	%r13,%r12
+
+	 mulx	32+8(%rsp),%rbx,%rdx	# %rdx discarded
+	 mov	%rax,%rdx
+	 mov	%rax,64+48+8(%rsp,%rcx,8)	# put aside n0*a[i]
+
+	mulx	8*5($nptr),%rax,%r13
+	adcx	%rax,%r12
+	adox	%r14,%r13
+
+	mulx	8*6($nptr),%rax,%r14
+	adcx	%rax,%r13
+	adox	%r15,%r14
+
+	mulx	8*7($nptr),%rax,%r15
+	 mov	%rbx,%rdx
+	adcx	%rax,%r14
+	adox	$carry,%r15		# $carry is 0
+	adcx	$carry,%r15		# cf=0
+
+	.byte	0x67,0x67,0x67
+	inc	%rcx			# of=0
+	jnz	.Lsqrx8x_reduce
+
+	mov	$carry,%rax		# xor	%rax,%rax
+	cmp	0+8(%rsp),$nptr		# end of n[]?
+	jae	.Lsqrx8x_no_tail
+
+	mov	48+8(%rsp),%rdx		# pull n0*a[0]
+	add	8*0($tptr),%r8
+	lea	8*8($nptr),$nptr
+	mov	\$-8,%rcx
+	adcx	8*1($tptr),%r9
+	adcx	8*2($tptr),%r10
+	adc	8*3($tptr),%r11
+	adc	8*4($tptr),%r12
+	adc	8*5($tptr),%r13
+	adc	8*6($tptr),%r14
+	adc	8*7($tptr),%r15
+	lea	8*8($tptr),$tptr
+	sbb	%rax,%rax		# top carry
+
+	xor	$carry,$carry		# of=0, cf=0
+	mov	%rax,16+8(%rsp)
+	jmp	.Lsqrx8x_tail
+
+.align	32
+.Lsqrx8x_tail:
+	mov	%r8,%rbx
+	mulx	8*0($nptr),%rax,%r8
+	adcx	%rax,%rbx
+	adox	%r9,%r8
+
+	mulx	8*1($nptr),%rax,%r9
+	adcx	%rax,%r8
+	adox	%r10,%r9
+
+	mulx	8*2($nptr),%rax,%r10
+	adcx	%rax,%r9
+	adox	%r11,%r10
+
+	mulx	8*3($nptr),%rax,%r11
+	adcx	%rax,%r10
+	adox	%r12,%r11
+
+	.byte	0xc4,0x62,0xfb,0xf6,0xa5,0x20,0x00,0x00,0x00	# mulx	8*4($nptr),%rax,%r12
+	adcx	%rax,%r11
+	adox	%r13,%r12
+
+	mulx	8*5($nptr),%rax,%r13
+	adcx	%rax,%r12
+	adox	%r14,%r13
+
+	mulx	8*6($nptr),%rax,%r14
+	adcx	%rax,%r13
+	adox	%r15,%r14
+
+	mulx	8*7($nptr),%rax,%r15
+	 mov	72+48+8(%rsp,%rcx,8),%rdx	# pull n0*a[i]
+	adcx	%rax,%r14
+	adox	$carry,%r15
+	 mov	%rbx,($tptr,%rcx,8)	# save result
+	 mov	%r8,%rbx
+	adcx	$carry,%r15		# cf=0
+
+	inc	%rcx			# of=0
+	jnz	.Lsqrx8x_tail
+
+	cmp	0+8(%rsp),$nptr		# end of n[]?
+	jae	.Lsqrx8x_tail_done	# break out of loop
+
+	sub	16+8(%rsp),$carry	# mov 16(%rsp),%cf
+	 mov	48+8(%rsp),%rdx		# pull n0*a[0]
+	 lea	8*8($nptr),$nptr
+	adc	8*0($tptr),%r8
+	adc	8*1($tptr),%r9
+	adc	8*2($tptr),%r10
+	adc	8*3($tptr),%r11
+	adc	8*4($tptr),%r12
+	adc	8*5($tptr),%r13
+	adc	8*6($tptr),%r14
+	adc	8*7($tptr),%r15
+	lea	8*8($tptr),$tptr
+	sbb	%rax,%rax
+	sub	\$8,%rcx		# mov	\$-8,%rcx
+
+	xor	$carry,$carry		# of=0, cf=0
+	mov	%rax,16+8(%rsp)
+	jmp	.Lsqrx8x_tail
+
+.align	32
+.Lsqrx8x_tail_done:
+	xor	%rax,%rax
+	add	24+8(%rsp),%r8		# can this overflow?
+	adc	\$0,%r9
+	adc	\$0,%r10
+	adc	\$0,%r11
+	adc	\$0,%r12
+	adc	\$0,%r13
+	adc	\$0,%r14
+	adc	\$0,%r15
+	adc	\$0,%rax
+
+	sub	16+8(%rsp),$carry	# mov 16(%rsp),%cf
+.Lsqrx8x_no_tail:			# %cf is 0 if jumped here
+	adc	8*0($tptr),%r8
+	 movq	%xmm3,%rcx
+	adc	8*1($tptr),%r9
+	 mov	8*7($nptr),$carry
+	 movq	%xmm2,$nptr		# restore $nptr
+	adc	8*2($tptr),%r10
+	adc	8*3($tptr),%r11
+	adc	8*4($tptr),%r12
+	adc	8*5($tptr),%r13
+	adc	8*6($tptr),%r14
+	adc	8*7($tptr),%r15
+	adc	\$0,%rax		# top-most carry
+
+	mov	32+8(%rsp),%rbx		# n0
+	mov	8*8($tptr,%rcx),%rdx	# modulo-scheduled "%r8"
+
+	mov	%r8,8*0($tptr)		# store top 512 bits
+	 lea	8*8($tptr),%r8		# borrow %r8
+	mov	%r9,8*1($tptr)
+	mov	%r10,8*2($tptr)
+	mov	%r11,8*3($tptr)
+	mov	%r12,8*4($tptr)
+	mov	%r13,8*5($tptr)
+	mov	%r14,8*6($tptr)
+	mov	%r15,8*7($tptr)
+
+	lea	8*8($tptr,%rcx),$tptr	# start of current t[] window
+	cmp	8+8(%rsp),%r8		# end of t[]?
+	jb	.Lsqrx8x_reduction_loop
+	ret
+.cfi_endproc
+.size	bn_sqrx8x_internal,.-bn_sqrx8x_internal
+___
+}
+##############################################################
+# Post-condition, 4x unrolled
+#
+{
+my ($rptr,$nptr)=("%rdx","%rbp");
+$code.=<<___;
+.align	32
+__bn_postx4x_internal:
+	mov	8*0($nptr),%r12
+	mov	%rcx,%r10		# -$num
+	mov	%rcx,%r9		# -$num
+	neg	%rax
+	sar	\$3+2,%rcx
+	#lea	48+8(%rsp,%r9),$tptr
+	movq	%xmm1,$rptr		# restore $rptr
+	movq	%xmm1,$aptr		# prepare for back-to-back call
+	dec	%r12			# so that after 'not' we get -n[0]
+	mov	8*1($nptr),%r13
+	xor	%r8,%r8
+	mov	8*2($nptr),%r14
+	mov	8*3($nptr),%r15
+	jmp	.Lsqrx4x_sub_entry
+
+.align	16
+.Lsqrx4x_sub:
+	mov	8*0($nptr),%r12
+	mov	8*1($nptr),%r13
+	mov	8*2($nptr),%r14
+	mov	8*3($nptr),%r15
+.Lsqrx4x_sub_entry:
+	andn	%rax,%r12,%r12
+	lea	8*4($nptr),$nptr
+	andn	%rax,%r13,%r13
+	andn	%rax,%r14,%r14
+	andn	%rax,%r15,%r15
+
+	neg	%r8			# mov %r8,%cf
+	adc	8*0($tptr),%r12
+	adc	8*1($tptr),%r13
+	adc	8*2($tptr),%r14
+	adc	8*3($tptr),%r15
+	mov	%r12,8*0($rptr)
+	lea	8*4($tptr),$tptr
+	mov	%r13,8*1($rptr)
+	sbb	%r8,%r8			# mov %cf,%r8
+	mov	%r14,8*2($rptr)
+	mov	%r15,8*3($rptr)
+	lea	8*4($rptr),$rptr
+
+	inc	%rcx
+	jnz	.Lsqrx4x_sub
+
+	neg	%r9			# restore $num
+
+	ret
+.size	__bn_postx4x_internal,.-__bn_postx4x_internal
+___
+}
+}}}
+{
+my ($inp,$num,$tbl,$idx)=$win64?("%rcx","%edx","%r8", "%r9d") : # Win64 order
+				("%rdi","%esi","%rdx","%ecx");  # Unix order
+my $out=$inp;
+my $STRIDE=2**5*8;
+my $N=$STRIDE/4;
+
+$code.=<<___;
+.globl	bn_get_bits5
+.type	bn_get_bits5,\@abi-omnipotent
+.align	16
+bn_get_bits5:
+	lea	0($inp),%r10
+	lea	1($inp),%r11
+	mov	$num,%ecx
+	shr	\$4,$num
+	and	\$15,%ecx
+	lea	-8(%ecx),%eax
+	cmp	\$11,%ecx
+	cmova	%r11,%r10
+	cmova	%eax,%ecx
+	movzw	(%r10,$num,2),%eax
+	shrl	%cl,%eax
+	and	\$31,%eax
+	ret
+.size	bn_get_bits5,.-bn_get_bits5
+
+.globl	bn_scatter5
+.type	bn_scatter5,\@abi-omnipotent
+.align	16
+bn_scatter5:
+	cmp	\$0, $num
+	jz	.Lscatter_epilogue
+	lea	($tbl,$idx,8),$tbl
+.Lscatter:
+	mov	($inp),%rax
+	lea	8($inp),$inp
+	mov	%rax,($tbl)
+	lea	32*8($tbl),$tbl
+	sub	\$1,$num
+	jnz	.Lscatter
+.Lscatter_epilogue:
+	ret
+.size	bn_scatter5,.-bn_scatter5
+
+.globl	bn_gather5
+.type	bn_gather5,\@abi-omnipotent
+.align	32
+bn_gather5:
+.LSEH_begin_bn_gather5:			# Win64 thing, but harmless in other cases
+	# I can't trust assembler to use specific encoding:-(
+	.byte	0x4c,0x8d,0x14,0x24			#lea    (%rsp),%r10
+	.byte	0x48,0x81,0xec,0x08,0x01,0x00,0x00	#sub	$0x108,%rsp
+	lea	.Linc(%rip),%rax
+	and	\$-16,%rsp		# shouldn't be formally required
+
+	movd	$idx,%xmm5
+	movdqa	0(%rax),%xmm0		# 00000001000000010000000000000000
+	movdqa	16(%rax),%xmm1		# 00000002000000020000000200000002
+	lea	128($tbl),%r11		# size optimization
+	lea	128(%rsp),%rax		# size optimization
+
+	pshufd	\$0,%xmm5,%xmm5		# broadcast $idx
+	movdqa	%xmm1,%xmm4
+	movdqa	%xmm1,%xmm2
+___
+########################################################################
+# calculate mask by comparing 0..31 to $idx and save result to stack
+#
+for($i=0;$i<$STRIDE/16;$i+=4) {
+$code.=<<___;
+	paddd	%xmm0,%xmm1
+	pcmpeqd	%xmm5,%xmm0		# compare to 1,0
+___
+$code.=<<___	if ($i);
+	movdqa	%xmm3,`16*($i-1)-128`(%rax)
+___
+$code.=<<___;
+	movdqa	%xmm4,%xmm3
+
+	paddd	%xmm1,%xmm2
+	pcmpeqd	%xmm5,%xmm1		# compare to 3,2
+	movdqa	%xmm0,`16*($i+0)-128`(%rax)
+	movdqa	%xmm4,%xmm0
+
+	paddd	%xmm2,%xmm3
+	pcmpeqd	%xmm5,%xmm2		# compare to 5,4
+	movdqa	%xmm1,`16*($i+1)-128`(%rax)
+	movdqa	%xmm4,%xmm1
+
+	paddd	%xmm3,%xmm0
+	pcmpeqd	%xmm5,%xmm3		# compare to 7,6
+	movdqa	%xmm2,`16*($i+2)-128`(%rax)
+	movdqa	%xmm4,%xmm2
+___
+}
+$code.=<<___;
+	movdqa	%xmm3,`16*($i-1)-128`(%rax)
+	jmp	.Lgather
+
+.align	32
+.Lgather:
+	pxor	%xmm4,%xmm4
+	pxor	%xmm5,%xmm5
+___
+for($i=0;$i<$STRIDE/16;$i+=4) {
+$code.=<<___;
+	movdqa	`16*($i+0)-128`(%r11),%xmm0
+	movdqa	`16*($i+1)-128`(%r11),%xmm1
+	movdqa	`16*($i+2)-128`(%r11),%xmm2
+	pand	`16*($i+0)-128`(%rax),%xmm0
+	movdqa	`16*($i+3)-128`(%r11),%xmm3
+	pand	`16*($i+1)-128`(%rax),%xmm1
+	por	%xmm0,%xmm4
+	pand	`16*($i+2)-128`(%rax),%xmm2
+	por	%xmm1,%xmm5
+	pand	`16*($i+3)-128`(%rax),%xmm3
+	por	%xmm2,%xmm4
+	por	%xmm3,%xmm5
+___
+}
+$code.=<<___;
+	por	%xmm5,%xmm4
+	lea	$STRIDE(%r11),%r11
+	pshufd	\$0x4e,%xmm4,%xmm0
+	por	%xmm4,%xmm0
+	movq	%xmm0,($out)		# m0=bp[0]
+	lea	8($out),$out
+	sub	\$1,$num
+	jnz	.Lgather
+
+	lea	(%r10),%rsp
+	ret
+.LSEH_end_bn_gather5:
+.size	bn_gather5,.-bn_gather5
+___
+}
+$code.=<<___;
+.align	64
+.Linc:
+	.long	0,0, 1,1
+	.long	2,2, 2,2
+.asciz	"Montgomery Multiplication with scatter/gather for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	mul_handler,\@abi-omnipotent
+.align	16
+mul_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# end of prologue label
+	cmp	%r10,%rbx		# context->Rip<end of prologue label
+	jb	.Lcommon_seh_tail
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# beginning of body label
+	cmp	%r10,%rbx		# context->Rip<body label
+	jb	.Lcommon_pop_regs
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	8(%r11),%r10d		# HandlerData[2]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lcommon_seh_tail
+
+	lea	.Lmul_epilogue(%rip),%r10
+	cmp	%r10,%rbx
+	ja	.Lbody_40
+
+	mov	192($context),%r10	# pull $num
+	mov	8(%rax,%r10,8),%rax	# pull saved stack pointer
+
+	jmp	.Lcommon_pop_regs
+
+.Lbody_40:
+	mov	40(%rax),%rax		# pull saved stack pointer
+.Lcommon_pop_regs:
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+.Lcommon_seh_tail:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	mul_handler,.-mul_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_bn_mul_mont_gather5
+	.rva	.LSEH_end_bn_mul_mont_gather5
+	.rva	.LSEH_info_bn_mul_mont_gather5
+
+	.rva	.LSEH_begin_bn_mul4x_mont_gather5
+	.rva	.LSEH_end_bn_mul4x_mont_gather5
+	.rva	.LSEH_info_bn_mul4x_mont_gather5
+
+	.rva	.LSEH_begin_bn_power5
+	.rva	.LSEH_end_bn_power5
+	.rva	.LSEH_info_bn_power5
+
+	.rva	.LSEH_begin_bn_from_mont8x
+	.rva	.LSEH_end_bn_from_mont8x
+	.rva	.LSEH_info_bn_from_mont8x
+___
+$code.=<<___ if ($addx);
+	.rva	.LSEH_begin_bn_mulx4x_mont_gather5
+	.rva	.LSEH_end_bn_mulx4x_mont_gather5
+	.rva	.LSEH_info_bn_mulx4x_mont_gather5
+
+	.rva	.LSEH_begin_bn_powerx5
+	.rva	.LSEH_end_bn_powerx5
+	.rva	.LSEH_info_bn_powerx5
+___
+$code.=<<___;
+	.rva	.LSEH_begin_bn_gather5
+	.rva	.LSEH_end_bn_gather5
+	.rva	.LSEH_info_bn_gather5
+
+.section	.xdata
+.align	8
+.LSEH_info_bn_mul_mont_gather5:
+	.byte	9,0,0,0
+	.rva	mul_handler
+	.rva	.Lmul_body,.Lmul_body,.Lmul_epilogue		# HandlerData[]
+.align	8
+.LSEH_info_bn_mul4x_mont_gather5:
+	.byte	9,0,0,0
+	.rva	mul_handler
+	.rva	.Lmul4x_prologue,.Lmul4x_body,.Lmul4x_epilogue		# HandlerData[]
+.align	8
+.LSEH_info_bn_power5:
+	.byte	9,0,0,0
+	.rva	mul_handler
+	.rva	.Lpower5_prologue,.Lpower5_body,.Lpower5_epilogue	# HandlerData[]
+.align	8
+.LSEH_info_bn_from_mont8x:
+	.byte	9,0,0,0
+	.rva	mul_handler
+	.rva	.Lfrom_prologue,.Lfrom_body,.Lfrom_epilogue		# HandlerData[]
+___
+$code.=<<___ if ($addx);
+.align	8
+.LSEH_info_bn_mulx4x_mont_gather5:
+	.byte	9,0,0,0
+	.rva	mul_handler
+	.rva	.Lmulx4x_prologue,.Lmulx4x_body,.Lmulx4x_epilogue	# HandlerData[]
+.align	8
+.LSEH_info_bn_powerx5:
+	.byte	9,0,0,0
+	.rva	mul_handler
+	.rva	.Lpowerx5_prologue,.Lpowerx5_body,.Lpowerx5_epilogue	# HandlerData[]
+___
+$code.=<<___;
+.align	8
+.LSEH_info_bn_gather5:
+	.byte	0x01,0x0b,0x03,0x0a
+	.byte	0x0b,0x01,0x21,0x00	# sub	rsp,0x108
+	.byte	0x04,0xa3,0x00,0x00	# lea	r10,(rsp)
+.align	8
+___
+}
+
+$code =~ s/\`([^\`]*)\`/eval($1)/gem;
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_add.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_add.c
new file mode 100644
index 000000000..f2736b8f6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_add.c
@@ -0,0 +1,171 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+/* signed add of b to a. */
+int BN_add(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
+{
+    int ret, r_neg, cmp_res;
+
+    bn_check_top(a);
+    bn_check_top(b);
+
+    if (a->neg == b->neg) {
+        r_neg = a->neg;
+        ret = BN_uadd(r, a, b);
+    } else {
+        cmp_res = BN_ucmp(a, b);
+        if (cmp_res > 0) {
+            r_neg = a->neg;
+            ret = BN_usub(r, a, b);
+        } else if (cmp_res < 0) {
+            r_neg = b->neg;
+            ret = BN_usub(r, b, a);
+        } else {
+            r_neg = 0;
+            BN_zero(r);
+            ret = 1;
+        }
+    }
+
+    r->neg = r_neg;
+    bn_check_top(r);
+    return ret;
+}
+
+/* signed sub of b from a. */
+int BN_sub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
+{
+    int ret, r_neg, cmp_res;
+
+    bn_check_top(a);
+    bn_check_top(b);
+
+    if (a->neg != b->neg) {
+        r_neg = a->neg;
+        ret = BN_uadd(r, a, b);
+    } else {
+        cmp_res = BN_ucmp(a, b);
+        if (cmp_res > 0) {
+            r_neg = a->neg;
+            ret = BN_usub(r, a, b);
+        } else if (cmp_res < 0) {
+            r_neg = !b->neg;
+            ret = BN_usub(r, b, a);
+        } else {
+            r_neg = 0;
+            BN_zero(r);
+            ret = 1;
+        }
+    }
+
+    r->neg = r_neg;
+    bn_check_top(r);
+    return ret;
+}
+
+/* unsigned add of b to a, r can be equal to a or b. */
+int BN_uadd(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
+{
+    int max, min, dif;
+    const BN_ULONG *ap, *bp;
+    BN_ULONG *rp, carry, t1, t2;
+
+    bn_check_top(a);
+    bn_check_top(b);
+
+    if (a->top < b->top) {
+        const BIGNUM *tmp;
+
+        tmp = a;
+        a = b;
+        b = tmp;
+    }
+    max = a->top;
+    min = b->top;
+    dif = max - min;
+
+    if (bn_wexpand(r, max + 1) == NULL)
+        return 0;
+
+    r->top = max;
+
+    ap = a->d;
+    bp = b->d;
+    rp = r->d;
+
+    carry = bn_add_words(rp, ap, bp, min);
+    rp += min;
+    ap += min;
+
+    while (dif) {
+        dif--;
+        t1 = *(ap++);
+        t2 = (t1 + carry) & BN_MASK2;
+        *(rp++) = t2;
+        carry &= (t2 == 0);
+    }
+    *rp = carry;
+    r->top += carry;
+
+    r->neg = 0;
+    bn_check_top(r);
+    return 1;
+}
+
+/* unsigned subtraction of b from a, a must be larger than b. */
+int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
+{
+    int max, min, dif;
+    BN_ULONG t1, t2, borrow, *rp;
+    const BN_ULONG *ap, *bp;
+
+    bn_check_top(a);
+    bn_check_top(b);
+
+    max = a->top;
+    min = b->top;
+    dif = max - min;
+
+    if (dif < 0) {              /* hmm... should not be happening */
+        BNerr(BN_F_BN_USUB, BN_R_ARG2_LT_ARG3);
+        return 0;
+    }
+
+    if (bn_wexpand(r, max) == NULL)
+        return 0;
+
+    ap = a->d;
+    bp = b->d;
+    rp = r->d;
+
+    borrow = bn_sub_words(rp, ap, bp, min);
+    ap += min;
+    rp += min;
+
+    while (dif) {
+        dif--;
+        t1 = *(ap++);
+        t2 = (t1 - borrow) & BN_MASK2;
+        *(rp++) = t2;
+        borrow &= (t1 == 0);
+    }
+
+    while (max && *--rp == 0)
+        max--;
+
+    r->top = max;
+    r->neg = 0;
+    bn_pollute(r);
+
+    return 1;
+}
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_asm.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_asm.c
new file mode 100644
index 000000000..729b2480a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_asm.c
@@ -0,0 +1,1039 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <assert.h>
+#include <openssl/crypto.h>
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+#if defined(BN_LLONG) || defined(BN_UMULT_HIGH)
+
+BN_ULONG bn_mul_add_words(BN_ULONG *rp, const BN_ULONG *ap, int num,
+                          BN_ULONG w)
+{
+    BN_ULONG c1 = 0;
+
+    assert(num >= 0);
+    if (num <= 0)
+        return c1;
+
+# ifndef OPENSSL_SMALL_FOOTPRINT
+    while (num & ~3) {
+        mul_add(rp[0], ap[0], w, c1);
+        mul_add(rp[1], ap[1], w, c1);
+        mul_add(rp[2], ap[2], w, c1);
+        mul_add(rp[3], ap[3], w, c1);
+        ap += 4;
+        rp += 4;
+        num -= 4;
+    }
+# endif
+    while (num) {
+        mul_add(rp[0], ap[0], w, c1);
+        ap++;
+        rp++;
+        num--;
+    }
+
+    return c1;
+}
+
+BN_ULONG bn_mul_words(BN_ULONG *rp, const BN_ULONG *ap, int num, BN_ULONG w)
+{
+    BN_ULONG c1 = 0;
+
+    assert(num >= 0);
+    if (num <= 0)
+        return c1;
+
+# ifndef OPENSSL_SMALL_FOOTPRINT
+    while (num & ~3) {
+        mul(rp[0], ap[0], w, c1);
+        mul(rp[1], ap[1], w, c1);
+        mul(rp[2], ap[2], w, c1);
+        mul(rp[3], ap[3], w, c1);
+        ap += 4;
+        rp += 4;
+        num -= 4;
+    }
+# endif
+    while (num) {
+        mul(rp[0], ap[0], w, c1);
+        ap++;
+        rp++;
+        num--;
+    }
+    return c1;
+}
+
+void bn_sqr_words(BN_ULONG *r, const BN_ULONG *a, int n)
+{
+    assert(n >= 0);
+    if (n <= 0)
+        return;
+
+# ifndef OPENSSL_SMALL_FOOTPRINT
+    while (n & ~3) {
+        sqr(r[0], r[1], a[0]);
+        sqr(r[2], r[3], a[1]);
+        sqr(r[4], r[5], a[2]);
+        sqr(r[6], r[7], a[3]);
+        a += 4;
+        r += 8;
+        n -= 4;
+    }
+# endif
+    while (n) {
+        sqr(r[0], r[1], a[0]);
+        a++;
+        r += 2;
+        n--;
+    }
+}
+
+#else                           /* !(defined(BN_LLONG) ||
+                                 * defined(BN_UMULT_HIGH)) */
+
+BN_ULONG bn_mul_add_words(BN_ULONG *rp, const BN_ULONG *ap, int num,
+                          BN_ULONG w)
+{
+    BN_ULONG c = 0;
+    BN_ULONG bl, bh;
+
+    assert(num >= 0);
+    if (num <= 0)
+        return (BN_ULONG)0;
+
+    bl = LBITS(w);
+    bh = HBITS(w);
+
+# ifndef OPENSSL_SMALL_FOOTPRINT
+    while (num & ~3) {
+        mul_add(rp[0], ap[0], bl, bh, c);
+        mul_add(rp[1], ap[1], bl, bh, c);
+        mul_add(rp[2], ap[2], bl, bh, c);
+        mul_add(rp[3], ap[3], bl, bh, c);
+        ap += 4;
+        rp += 4;
+        num -= 4;
+    }
+# endif
+    while (num) {
+        mul_add(rp[0], ap[0], bl, bh, c);
+        ap++;
+        rp++;
+        num--;
+    }
+    return c;
+}
+
+BN_ULONG bn_mul_words(BN_ULONG *rp, const BN_ULONG *ap, int num, BN_ULONG w)
+{
+    BN_ULONG carry = 0;
+    BN_ULONG bl, bh;
+
+    assert(num >= 0);
+    if (num <= 0)
+        return (BN_ULONG)0;
+
+    bl = LBITS(w);
+    bh = HBITS(w);
+
+# ifndef OPENSSL_SMALL_FOOTPRINT
+    while (num & ~3) {
+        mul(rp[0], ap[0], bl, bh, carry);
+        mul(rp[1], ap[1], bl, bh, carry);
+        mul(rp[2], ap[2], bl, bh, carry);
+        mul(rp[3], ap[3], bl, bh, carry);
+        ap += 4;
+        rp += 4;
+        num -= 4;
+    }
+# endif
+    while (num) {
+        mul(rp[0], ap[0], bl, bh, carry);
+        ap++;
+        rp++;
+        num--;
+    }
+    return carry;
+}
+
+void bn_sqr_words(BN_ULONG *r, const BN_ULONG *a, int n)
+{
+    assert(n >= 0);
+    if (n <= 0)
+        return;
+
+# ifndef OPENSSL_SMALL_FOOTPRINT
+    while (n & ~3) {
+        sqr64(r[0], r[1], a[0]);
+        sqr64(r[2], r[3], a[1]);
+        sqr64(r[4], r[5], a[2]);
+        sqr64(r[6], r[7], a[3]);
+        a += 4;
+        r += 8;
+        n -= 4;
+    }
+# endif
+    while (n) {
+        sqr64(r[0], r[1], a[0]);
+        a++;
+        r += 2;
+        n--;
+    }
+}
+
+#endif                          /* !(defined(BN_LLONG) ||
+                                 * defined(BN_UMULT_HIGH)) */
+
+#if defined(BN_LLONG) && defined(BN_DIV2W)
+
+BN_ULONG bn_div_words(BN_ULONG h, BN_ULONG l, BN_ULONG d)
+{
+    return ((BN_ULONG)(((((BN_ULLONG) h) << BN_BITS2) | l) / (BN_ULLONG) d));
+}
+
+#else
+
+/* Divide h,l by d and return the result. */
+/* I need to test this some more :-( */
+BN_ULONG bn_div_words(BN_ULONG h, BN_ULONG l, BN_ULONG d)
+{
+    BN_ULONG dh, dl, q, ret = 0, th, tl, t;
+    int i, count = 2;
+
+    if (d == 0)
+        return BN_MASK2;
+
+    i = BN_num_bits_word(d);
+    assert((i == BN_BITS2) || (h <= (BN_ULONG)1 << i));
+
+    i = BN_BITS2 - i;
+    if (h >= d)
+        h -= d;
+
+    if (i) {
+        d <<= i;
+        h = (h << i) | (l >> (BN_BITS2 - i));
+        l <<= i;
+    }
+    dh = (d & BN_MASK2h) >> BN_BITS4;
+    dl = (d & BN_MASK2l);
+    for (;;) {
+        if ((h >> BN_BITS4) == dh)
+            q = BN_MASK2l;
+        else
+            q = h / dh;
+
+        th = q * dh;
+        tl = dl * q;
+        for (;;) {
+            t = h - th;
+            if ((t & BN_MASK2h) ||
+                ((tl) <= ((t << BN_BITS4) | ((l & BN_MASK2h) >> BN_BITS4))))
+                break;
+            q--;
+            th -= dh;
+            tl -= dl;
+        }
+        t = (tl >> BN_BITS4);
+        tl = (tl << BN_BITS4) & BN_MASK2h;
+        th += t;
+
+        if (l < tl)
+            th++;
+        l -= tl;
+        if (h < th) {
+            h += d;
+            q--;
+        }
+        h -= th;
+
+        if (--count == 0)
+            break;
+
+        ret = q << BN_BITS4;
+        h = ((h << BN_BITS4) | (l >> BN_BITS4)) & BN_MASK2;
+        l = (l & BN_MASK2l) << BN_BITS4;
+    }
+    ret |= q;
+    return ret;
+}
+#endif                          /* !defined(BN_LLONG) && defined(BN_DIV2W) */
+
+#ifdef BN_LLONG
+BN_ULONG bn_add_words(BN_ULONG *r, const BN_ULONG *a, const BN_ULONG *b,
+                      int n)
+{
+    BN_ULLONG ll = 0;
+
+    assert(n >= 0);
+    if (n <= 0)
+        return (BN_ULONG)0;
+
+# ifndef OPENSSL_SMALL_FOOTPRINT
+    while (n & ~3) {
+        ll += (BN_ULLONG) a[0] + b[0];
+        r[0] = (BN_ULONG)ll & BN_MASK2;
+        ll >>= BN_BITS2;
+        ll += (BN_ULLONG) a[1] + b[1];
+        r[1] = (BN_ULONG)ll & BN_MASK2;
+        ll >>= BN_BITS2;
+        ll += (BN_ULLONG) a[2] + b[2];
+        r[2] = (BN_ULONG)ll & BN_MASK2;
+        ll >>= BN_BITS2;
+        ll += (BN_ULLONG) a[3] + b[3];
+        r[3] = (BN_ULONG)ll & BN_MASK2;
+        ll >>= BN_BITS2;
+        a += 4;
+        b += 4;
+        r += 4;
+        n -= 4;
+    }
+# endif
+    while (n) {
+        ll += (BN_ULLONG) a[0] + b[0];
+        r[0] = (BN_ULONG)ll & BN_MASK2;
+        ll >>= BN_BITS2;
+        a++;
+        b++;
+        r++;
+        n--;
+    }
+    return (BN_ULONG)ll;
+}
+#else                           /* !BN_LLONG */
+BN_ULONG bn_add_words(BN_ULONG *r, const BN_ULONG *a, const BN_ULONG *b,
+                      int n)
+{
+    BN_ULONG c, l, t;
+
+    assert(n >= 0);
+    if (n <= 0)
+        return (BN_ULONG)0;
+
+    c = 0;
+# ifndef OPENSSL_SMALL_FOOTPRINT
+    while (n & ~3) {
+        t = a[0];
+        t = (t + c) & BN_MASK2;
+        c = (t < c);
+        l = (t + b[0]) & BN_MASK2;
+        c += (l < t);
+        r[0] = l;
+        t = a[1];
+        t = (t + c) & BN_MASK2;
+        c = (t < c);
+        l = (t + b[1]) & BN_MASK2;
+        c += (l < t);
+        r[1] = l;
+        t = a[2];
+        t = (t + c) & BN_MASK2;
+        c = (t < c);
+        l = (t + b[2]) & BN_MASK2;
+        c += (l < t);
+        r[2] = l;
+        t = a[3];
+        t = (t + c) & BN_MASK2;
+        c = (t < c);
+        l = (t + b[3]) & BN_MASK2;
+        c += (l < t);
+        r[3] = l;
+        a += 4;
+        b += 4;
+        r += 4;
+        n -= 4;
+    }
+# endif
+    while (n) {
+        t = a[0];
+        t = (t + c) & BN_MASK2;
+        c = (t < c);
+        l = (t + b[0]) & BN_MASK2;
+        c += (l < t);
+        r[0] = l;
+        a++;
+        b++;
+        r++;
+        n--;
+    }
+    return (BN_ULONG)c;
+}
+#endif                          /* !BN_LLONG */
+
+BN_ULONG bn_sub_words(BN_ULONG *r, const BN_ULONG *a, const BN_ULONG *b,
+                      int n)
+{
+    BN_ULONG t1, t2;
+    int c = 0;
+
+    assert(n >= 0);
+    if (n <= 0)
+        return (BN_ULONG)0;
+
+#ifndef OPENSSL_SMALL_FOOTPRINT
+    while (n & ~3) {
+        t1 = a[0];
+        t2 = b[0];
+        r[0] = (t1 - t2 - c) & BN_MASK2;
+        if (t1 != t2)
+            c = (t1 < t2);
+        t1 = a[1];
+        t2 = b[1];
+        r[1] = (t1 - t2 - c) & BN_MASK2;
+        if (t1 != t2)
+            c = (t1 < t2);
+        t1 = a[2];
+        t2 = b[2];
+        r[2] = (t1 - t2 - c) & BN_MASK2;
+        if (t1 != t2)
+            c = (t1 < t2);
+        t1 = a[3];
+        t2 = b[3];
+        r[3] = (t1 - t2 - c) & BN_MASK2;
+        if (t1 != t2)
+            c = (t1 < t2);
+        a += 4;
+        b += 4;
+        r += 4;
+        n -= 4;
+    }
+#endif
+    while (n) {
+        t1 = a[0];
+        t2 = b[0];
+        r[0] = (t1 - t2 - c) & BN_MASK2;
+        if (t1 != t2)
+            c = (t1 < t2);
+        a++;
+        b++;
+        r++;
+        n--;
+    }
+    return c;
+}
+
+#if defined(BN_MUL_COMBA) && !defined(OPENSSL_SMALL_FOOTPRINT)
+
+# undef bn_mul_comba8
+# undef bn_mul_comba4
+# undef bn_sqr_comba8
+# undef bn_sqr_comba4
+
+/* mul_add_c(a,b,c0,c1,c2)  -- c+=a*b for three word number c=(c2,c1,c0) */
+/* mul_add_c2(a,b,c0,c1,c2) -- c+=2*a*b for three word number c=(c2,c1,c0) */
+/* sqr_add_c(a,i,c0,c1,c2)  -- c+=a[i]^2 for three word number c=(c2,c1,c0) */
+/*
+ * sqr_add_c2(a,i,c0,c1,c2) -- c+=2*a[i]*a[j] for three word number
+ * c=(c2,c1,c0)
+ */
+
+# ifdef BN_LLONG
+/*
+ * Keep in mind that additions to multiplication result can not
+ * overflow, because its high half cannot be all-ones.
+ */
+#  define mul_add_c(a,b,c0,c1,c2)       do {    \
+        BN_ULONG hi;                            \
+        BN_ULLONG t = (BN_ULLONG)(a)*(b);       \
+        t += c0;                /* no carry */  \
+        c0 = (BN_ULONG)Lw(t);                   \
+        hi = (BN_ULONG)Hw(t);                   \
+        c1 = (c1+hi)&BN_MASK2; if (c1<hi) c2++; \
+        } while(0)
+
+#  define mul_add_c2(a,b,c0,c1,c2)      do {    \
+        BN_ULONG hi;                            \
+        BN_ULLONG t = (BN_ULLONG)(a)*(b);       \
+        BN_ULLONG tt = t+c0;    /* no carry */  \
+        c0 = (BN_ULONG)Lw(tt);                  \
+        hi = (BN_ULONG)Hw(tt);                  \
+        c1 = (c1+hi)&BN_MASK2; if (c1<hi) c2++; \
+        t += c0;                /* no carry */  \
+        c0 = (BN_ULONG)Lw(t);                   \
+        hi = (BN_ULONG)Hw(t);                   \
+        c1 = (c1+hi)&BN_MASK2; if (c1<hi) c2++; \
+        } while(0)
+
+#  define sqr_add_c(a,i,c0,c1,c2)       do {    \
+        BN_ULONG hi;                            \
+        BN_ULLONG t = (BN_ULLONG)a[i]*a[i];     \
+        t += c0;                /* no carry */  \
+        c0 = (BN_ULONG)Lw(t);                   \
+        hi = (BN_ULONG)Hw(t);                   \
+        c1 = (c1+hi)&BN_MASK2; if (c1<hi) c2++; \
+        } while(0)
+
+#  define sqr_add_c2(a,i,j,c0,c1,c2) \
+        mul_add_c2((a)[i],(a)[j],c0,c1,c2)
+
+# elif defined(BN_UMULT_LOHI)
+/*
+ * Keep in mind that additions to hi can not overflow, because
+ * the high word of a multiplication result cannot be all-ones.
+ */
+#  define mul_add_c(a,b,c0,c1,c2)       do {    \
+        BN_ULONG ta = (a), tb = (b);            \
+        BN_ULONG lo, hi;                        \
+        BN_UMULT_LOHI(lo,hi,ta,tb);             \
+        c0 += lo; hi += (c0<lo)?1:0;            \
+        c1 += hi; c2 += (c1<hi)?1:0;            \
+        } while(0)
+
+#  define mul_add_c2(a,b,c0,c1,c2)      do {    \
+        BN_ULONG ta = (a), tb = (b);            \
+        BN_ULONG lo, hi, tt;                    \
+        BN_UMULT_LOHI(lo,hi,ta,tb);             \
+        c0 += lo; tt = hi+((c0<lo)?1:0);        \
+        c1 += tt; c2 += (c1<tt)?1:0;            \
+        c0 += lo; hi += (c0<lo)?1:0;            \
+        c1 += hi; c2 += (c1<hi)?1:0;            \
+        } while(0)
+
+#  define sqr_add_c(a,i,c0,c1,c2)       do {    \
+        BN_ULONG ta = (a)[i];                   \
+        BN_ULONG lo, hi;                        \
+        BN_UMULT_LOHI(lo,hi,ta,ta);             \
+        c0 += lo; hi += (c0<lo)?1:0;            \
+        c1 += hi; c2 += (c1<hi)?1:0;            \
+        } while(0)
+
+#  define sqr_add_c2(a,i,j,c0,c1,c2)    \
+        mul_add_c2((a)[i],(a)[j],c0,c1,c2)
+
+# elif defined(BN_UMULT_HIGH)
+/*
+ * Keep in mind that additions to hi can not overflow, because
+ * the high word of a multiplication result cannot be all-ones.
+ */
+#  define mul_add_c(a,b,c0,c1,c2)       do {    \
+        BN_ULONG ta = (a), tb = (b);            \
+        BN_ULONG lo = ta * tb;                  \
+        BN_ULONG hi = BN_UMULT_HIGH(ta,tb);     \
+        c0 += lo; hi += (c0<lo)?1:0;            \
+        c1 += hi; c2 += (c1<hi)?1:0;            \
+        } while(0)
+
+#  define mul_add_c2(a,b,c0,c1,c2)      do {    \
+        BN_ULONG ta = (a), tb = (b), tt;        \
+        BN_ULONG lo = ta * tb;                  \
+        BN_ULONG hi = BN_UMULT_HIGH(ta,tb);     \
+        c0 += lo; tt = hi + ((c0<lo)?1:0);      \
+        c1 += tt; c2 += (c1<tt)?1:0;            \
+        c0 += lo; hi += (c0<lo)?1:0;            \
+        c1 += hi; c2 += (c1<hi)?1:0;            \
+        } while(0)
+
+#  define sqr_add_c(a,i,c0,c1,c2)       do {    \
+        BN_ULONG ta = (a)[i];                   \
+        BN_ULONG lo = ta * ta;                  \
+        BN_ULONG hi = BN_UMULT_HIGH(ta,ta);     \
+        c0 += lo; hi += (c0<lo)?1:0;            \
+        c1 += hi; c2 += (c1<hi)?1:0;            \
+        } while(0)
+
+#  define sqr_add_c2(a,i,j,c0,c1,c2)      \
+        mul_add_c2((a)[i],(a)[j],c0,c1,c2)
+
+# else                          /* !BN_LLONG */
+/*
+ * Keep in mind that additions to hi can not overflow, because
+ * the high word of a multiplication result cannot be all-ones.
+ */
+#  define mul_add_c(a,b,c0,c1,c2)       do {    \
+        BN_ULONG lo = LBITS(a), hi = HBITS(a);  \
+        BN_ULONG bl = LBITS(b), bh = HBITS(b);  \
+        mul64(lo,hi,bl,bh);                     \
+        c0 = (c0+lo)&BN_MASK2; if (c0<lo) hi++; \
+        c1 = (c1+hi)&BN_MASK2; if (c1<hi) c2++; \
+        } while(0)
+
+#  define mul_add_c2(a,b,c0,c1,c2)      do {    \
+        BN_ULONG tt;                            \
+        BN_ULONG lo = LBITS(a), hi = HBITS(a);  \
+        BN_ULONG bl = LBITS(b), bh = HBITS(b);  \
+        mul64(lo,hi,bl,bh);                     \
+        tt = hi;                                \
+        c0 = (c0+lo)&BN_MASK2; if (c0<lo) tt++; \
+        c1 = (c1+tt)&BN_MASK2; if (c1<tt) c2++; \
+        c0 = (c0+lo)&BN_MASK2; if (c0<lo) hi++; \
+        c1 = (c1+hi)&BN_MASK2; if (c1<hi) c2++; \
+        } while(0)
+
+#  define sqr_add_c(a,i,c0,c1,c2)       do {    \
+        BN_ULONG lo, hi;                        \
+        sqr64(lo,hi,(a)[i]);                    \
+        c0 = (c0+lo)&BN_MASK2; if (c0<lo) hi++; \
+        c1 = (c1+hi)&BN_MASK2; if (c1<hi) c2++; \
+        } while(0)
+
+#  define sqr_add_c2(a,i,j,c0,c1,c2) \
+        mul_add_c2((a)[i],(a)[j],c0,c1,c2)
+# endif                         /* !BN_LLONG */
+
+void bn_mul_comba8(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b)
+{
+    BN_ULONG c1, c2, c3;
+
+    c1 = 0;
+    c2 = 0;
+    c3 = 0;
+    mul_add_c(a[0], b[0], c1, c2, c3);
+    r[0] = c1;
+    c1 = 0;
+    mul_add_c(a[0], b[1], c2, c3, c1);
+    mul_add_c(a[1], b[0], c2, c3, c1);
+    r[1] = c2;
+    c2 = 0;
+    mul_add_c(a[2], b[0], c3, c1, c2);
+    mul_add_c(a[1], b[1], c3, c1, c2);
+    mul_add_c(a[0], b[2], c3, c1, c2);
+    r[2] = c3;
+    c3 = 0;
+    mul_add_c(a[0], b[3], c1, c2, c3);
+    mul_add_c(a[1], b[2], c1, c2, c3);
+    mul_add_c(a[2], b[1], c1, c2, c3);
+    mul_add_c(a[3], b[0], c1, c2, c3);
+    r[3] = c1;
+    c1 = 0;
+    mul_add_c(a[4], b[0], c2, c3, c1);
+    mul_add_c(a[3], b[1], c2, c3, c1);
+    mul_add_c(a[2], b[2], c2, c3, c1);
+    mul_add_c(a[1], b[3], c2, c3, c1);
+    mul_add_c(a[0], b[4], c2, c3, c1);
+    r[4] = c2;
+    c2 = 0;
+    mul_add_c(a[0], b[5], c3, c1, c2);
+    mul_add_c(a[1], b[4], c3, c1, c2);
+    mul_add_c(a[2], b[3], c3, c1, c2);
+    mul_add_c(a[3], b[2], c3, c1, c2);
+    mul_add_c(a[4], b[1], c3, c1, c2);
+    mul_add_c(a[5], b[0], c3, c1, c2);
+    r[5] = c3;
+    c3 = 0;
+    mul_add_c(a[6], b[0], c1, c2, c3);
+    mul_add_c(a[5], b[1], c1, c2, c3);
+    mul_add_c(a[4], b[2], c1, c2, c3);
+    mul_add_c(a[3], b[3], c1, c2, c3);
+    mul_add_c(a[2], b[4], c1, c2, c3);
+    mul_add_c(a[1], b[5], c1, c2, c3);
+    mul_add_c(a[0], b[6], c1, c2, c3);
+    r[6] = c1;
+    c1 = 0;
+    mul_add_c(a[0], b[7], c2, c3, c1);
+    mul_add_c(a[1], b[6], c2, c3, c1);
+    mul_add_c(a[2], b[5], c2, c3, c1);
+    mul_add_c(a[3], b[4], c2, c3, c1);
+    mul_add_c(a[4], b[3], c2, c3, c1);
+    mul_add_c(a[5], b[2], c2, c3, c1);
+    mul_add_c(a[6], b[1], c2, c3, c1);
+    mul_add_c(a[7], b[0], c2, c3, c1);
+    r[7] = c2;
+    c2 = 0;
+    mul_add_c(a[7], b[1], c3, c1, c2);
+    mul_add_c(a[6], b[2], c3, c1, c2);
+    mul_add_c(a[5], b[3], c3, c1, c2);
+    mul_add_c(a[4], b[4], c3, c1, c2);
+    mul_add_c(a[3], b[5], c3, c1, c2);
+    mul_add_c(a[2], b[6], c3, c1, c2);
+    mul_add_c(a[1], b[7], c3, c1, c2);
+    r[8] = c3;
+    c3 = 0;
+    mul_add_c(a[2], b[7], c1, c2, c3);
+    mul_add_c(a[3], b[6], c1, c2, c3);
+    mul_add_c(a[4], b[5], c1, c2, c3);
+    mul_add_c(a[5], b[4], c1, c2, c3);
+    mul_add_c(a[6], b[3], c1, c2, c3);
+    mul_add_c(a[7], b[2], c1, c2, c3);
+    r[9] = c1;
+    c1 = 0;
+    mul_add_c(a[7], b[3], c2, c3, c1);
+    mul_add_c(a[6], b[4], c2, c3, c1);
+    mul_add_c(a[5], b[5], c2, c3, c1);
+    mul_add_c(a[4], b[6], c2, c3, c1);
+    mul_add_c(a[3], b[7], c2, c3, c1);
+    r[10] = c2;
+    c2 = 0;
+    mul_add_c(a[4], b[7], c3, c1, c2);
+    mul_add_c(a[5], b[6], c3, c1, c2);
+    mul_add_c(a[6], b[5], c3, c1, c2);
+    mul_add_c(a[7], b[4], c3, c1, c2);
+    r[11] = c3;
+    c3 = 0;
+    mul_add_c(a[7], b[5], c1, c2, c3);
+    mul_add_c(a[6], b[6], c1, c2, c3);
+    mul_add_c(a[5], b[7], c1, c2, c3);
+    r[12] = c1;
+    c1 = 0;
+    mul_add_c(a[6], b[7], c2, c3, c1);
+    mul_add_c(a[7], b[6], c2, c3, c1);
+    r[13] = c2;
+    c2 = 0;
+    mul_add_c(a[7], b[7], c3, c1, c2);
+    r[14] = c3;
+    r[15] = c1;
+}
+
+void bn_mul_comba4(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b)
+{
+    BN_ULONG c1, c2, c3;
+
+    c1 = 0;
+    c2 = 0;
+    c3 = 0;
+    mul_add_c(a[0], b[0], c1, c2, c3);
+    r[0] = c1;
+    c1 = 0;
+    mul_add_c(a[0], b[1], c2, c3, c1);
+    mul_add_c(a[1], b[0], c2, c3, c1);
+    r[1] = c2;
+    c2 = 0;
+    mul_add_c(a[2], b[0], c3, c1, c2);
+    mul_add_c(a[1], b[1], c3, c1, c2);
+    mul_add_c(a[0], b[2], c3, c1, c2);
+    r[2] = c3;
+    c3 = 0;
+    mul_add_c(a[0], b[3], c1, c2, c3);
+    mul_add_c(a[1], b[2], c1, c2, c3);
+    mul_add_c(a[2], b[1], c1, c2, c3);
+    mul_add_c(a[3], b[0], c1, c2, c3);
+    r[3] = c1;
+    c1 = 0;
+    mul_add_c(a[3], b[1], c2, c3, c1);
+    mul_add_c(a[2], b[2], c2, c3, c1);
+    mul_add_c(a[1], b[3], c2, c3, c1);
+    r[4] = c2;
+    c2 = 0;
+    mul_add_c(a[2], b[3], c3, c1, c2);
+    mul_add_c(a[3], b[2], c3, c1, c2);
+    r[5] = c3;
+    c3 = 0;
+    mul_add_c(a[3], b[3], c1, c2, c3);
+    r[6] = c1;
+    r[7] = c2;
+}
+
+void bn_sqr_comba8(BN_ULONG *r, const BN_ULONG *a)
+{
+    BN_ULONG c1, c2, c3;
+
+    c1 = 0;
+    c2 = 0;
+    c3 = 0;
+    sqr_add_c(a, 0, c1, c2, c3);
+    r[0] = c1;
+    c1 = 0;
+    sqr_add_c2(a, 1, 0, c2, c3, c1);
+    r[1] = c2;
+    c2 = 0;
+    sqr_add_c(a, 1, c3, c1, c2);
+    sqr_add_c2(a, 2, 0, c3, c1, c2);
+    r[2] = c3;
+    c3 = 0;
+    sqr_add_c2(a, 3, 0, c1, c2, c3);
+    sqr_add_c2(a, 2, 1, c1, c2, c3);
+    r[3] = c1;
+    c1 = 0;
+    sqr_add_c(a, 2, c2, c3, c1);
+    sqr_add_c2(a, 3, 1, c2, c3, c1);
+    sqr_add_c2(a, 4, 0, c2, c3, c1);
+    r[4] = c2;
+    c2 = 0;
+    sqr_add_c2(a, 5, 0, c3, c1, c2);
+    sqr_add_c2(a, 4, 1, c3, c1, c2);
+    sqr_add_c2(a, 3, 2, c3, c1, c2);
+    r[5] = c3;
+    c3 = 0;
+    sqr_add_c(a, 3, c1, c2, c3);
+    sqr_add_c2(a, 4, 2, c1, c2, c3);
+    sqr_add_c2(a, 5, 1, c1, c2, c3);
+    sqr_add_c2(a, 6, 0, c1, c2, c3);
+    r[6] = c1;
+    c1 = 0;
+    sqr_add_c2(a, 7, 0, c2, c3, c1);
+    sqr_add_c2(a, 6, 1, c2, c3, c1);
+    sqr_add_c2(a, 5, 2, c2, c3, c1);
+    sqr_add_c2(a, 4, 3, c2, c3, c1);
+    r[7] = c2;
+    c2 = 0;
+    sqr_add_c(a, 4, c3, c1, c2);
+    sqr_add_c2(a, 5, 3, c3, c1, c2);
+    sqr_add_c2(a, 6, 2, c3, c1, c2);
+    sqr_add_c2(a, 7, 1, c3, c1, c2);
+    r[8] = c3;
+    c3 = 0;
+    sqr_add_c2(a, 7, 2, c1, c2, c3);
+    sqr_add_c2(a, 6, 3, c1, c2, c3);
+    sqr_add_c2(a, 5, 4, c1, c2, c3);
+    r[9] = c1;
+    c1 = 0;
+    sqr_add_c(a, 5, c2, c3, c1);
+    sqr_add_c2(a, 6, 4, c2, c3, c1);
+    sqr_add_c2(a, 7, 3, c2, c3, c1);
+    r[10] = c2;
+    c2 = 0;
+    sqr_add_c2(a, 7, 4, c3, c1, c2);
+    sqr_add_c2(a, 6, 5, c3, c1, c2);
+    r[11] = c3;
+    c3 = 0;
+    sqr_add_c(a, 6, c1, c2, c3);
+    sqr_add_c2(a, 7, 5, c1, c2, c3);
+    r[12] = c1;
+    c1 = 0;
+    sqr_add_c2(a, 7, 6, c2, c3, c1);
+    r[13] = c2;
+    c2 = 0;
+    sqr_add_c(a, 7, c3, c1, c2);
+    r[14] = c3;
+    r[15] = c1;
+}
+
+void bn_sqr_comba4(BN_ULONG *r, const BN_ULONG *a)
+{
+    BN_ULONG c1, c2, c3;
+
+    c1 = 0;
+    c2 = 0;
+    c3 = 0;
+    sqr_add_c(a, 0, c1, c2, c3);
+    r[0] = c1;
+    c1 = 0;
+    sqr_add_c2(a, 1, 0, c2, c3, c1);
+    r[1] = c2;
+    c2 = 0;
+    sqr_add_c(a, 1, c3, c1, c2);
+    sqr_add_c2(a, 2, 0, c3, c1, c2);
+    r[2] = c3;
+    c3 = 0;
+    sqr_add_c2(a, 3, 0, c1, c2, c3);
+    sqr_add_c2(a, 2, 1, c1, c2, c3);
+    r[3] = c1;
+    c1 = 0;
+    sqr_add_c(a, 2, c2, c3, c1);
+    sqr_add_c2(a, 3, 1, c2, c3, c1);
+    r[4] = c2;
+    c2 = 0;
+    sqr_add_c2(a, 3, 2, c3, c1, c2);
+    r[5] = c3;
+    c3 = 0;
+    sqr_add_c(a, 3, c1, c2, c3);
+    r[6] = c1;
+    r[7] = c2;
+}
+
+# ifdef OPENSSL_NO_ASM
+#  ifdef OPENSSL_BN_ASM_MONT
+#   include <alloca.h>
+/*
+ * This is essentially reference implementation, which may or may not
+ * result in performance improvement. E.g. on IA-32 this routine was
+ * observed to give 40% faster rsa1024 private key operations and 10%
+ * faster rsa4096 ones, while on AMD64 it improves rsa1024 sign only
+ * by 10% and *worsens* rsa4096 sign by 15%. Once again, it's a
+ * reference implementation, one to be used as starting point for
+ * platform-specific assembler. Mentioned numbers apply to compiler
+ * generated code compiled with and without -DOPENSSL_BN_ASM_MONT and
+ * can vary not only from platform to platform, but even for compiler
+ * versions. Assembler vs. assembler improvement coefficients can
+ * [and are known to] differ and are to be documented elsewhere.
+ */
+int bn_mul_mont(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp,
+                const BN_ULONG *np, const BN_ULONG *n0p, int num)
+{
+    BN_ULONG c0, c1, ml, *tp, n0;
+#   ifdef mul64
+    BN_ULONG mh;
+#   endif
+    volatile BN_ULONG *vp;
+    int i = 0, j;
+
+#   if 0                        /* template for platform-specific
+                                 * implementation */
+    if (ap == bp)
+        return bn_sqr_mont(rp, ap, np, n0p, num);
+#   endif
+    vp = tp = alloca((num + 2) * sizeof(BN_ULONG));
+
+    n0 = *n0p;
+
+    c0 = 0;
+    ml = bp[0];
+#   ifdef mul64
+    mh = HBITS(ml);
+    ml = LBITS(ml);
+    for (j = 0; j < num; ++j)
+        mul(tp[j], ap[j], ml, mh, c0);
+#   else
+    for (j = 0; j < num; ++j)
+        mul(tp[j], ap[j], ml, c0);
+#   endif
+
+    tp[num] = c0;
+    tp[num + 1] = 0;
+    goto enter;
+
+    for (i = 0; i < num; i++) {
+        c0 = 0;
+        ml = bp[i];
+#   ifdef mul64
+        mh = HBITS(ml);
+        ml = LBITS(ml);
+        for (j = 0; j < num; ++j)
+            mul_add(tp[j], ap[j], ml, mh, c0);
+#   else
+        for (j = 0; j < num; ++j)
+            mul_add(tp[j], ap[j], ml, c0);
+#   endif
+        c1 = (tp[num] + c0) & BN_MASK2;
+        tp[num] = c1;
+        tp[num + 1] = (c1 < c0 ? 1 : 0);
+ enter:
+        c1 = tp[0];
+        ml = (c1 * n0) & BN_MASK2;
+        c0 = 0;
+#   ifdef mul64
+        mh = HBITS(ml);
+        ml = LBITS(ml);
+        mul_add(c1, np[0], ml, mh, c0);
+#   else
+        mul_add(c1, ml, np[0], c0);
+#   endif
+        for (j = 1; j < num; j++) {
+            c1 = tp[j];
+#   ifdef mul64
+            mul_add(c1, np[j], ml, mh, c0);
+#   else
+            mul_add(c1, ml, np[j], c0);
+#   endif
+            tp[j - 1] = c1 & BN_MASK2;
+        }
+        c1 = (tp[num] + c0) & BN_MASK2;
+        tp[num - 1] = c1;
+        tp[num] = tp[num + 1] + (c1 < c0 ? 1 : 0);
+    }
+
+    if (tp[num] != 0 || tp[num - 1] >= np[num - 1]) {
+        c0 = bn_sub_words(rp, tp, np, num);
+        if (tp[num] != 0 || c0 == 0) {
+            for (i = 0; i < num + 2; i++)
+                vp[i] = 0;
+            return 1;
+        }
+    }
+    for (i = 0; i < num; i++)
+        rp[i] = tp[i], vp[i] = 0;
+    vp[num] = 0;
+    vp[num + 1] = 0;
+    return 1;
+}
+#  else
+/*
+ * Return value of 0 indicates that multiplication/convolution was not
+ * performed to signal the caller to fall down to alternative/original
+ * code-path.
+ */
+int bn_mul_mont(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp,
+                const BN_ULONG *np, const BN_ULONG *n0, int num)
+{
+    return 0;
+}
+#  endif                        /* OPENSSL_BN_ASM_MONT */
+# endif
+
+#else                           /* !BN_MUL_COMBA */
+
+/* hmm... is it faster just to do a multiply? */
+# undef bn_sqr_comba4
+# undef bn_sqr_comba8
+void bn_sqr_comba4(BN_ULONG *r, const BN_ULONG *a)
+{
+    BN_ULONG t[8];
+    bn_sqr_normal(r, a, 4, t);
+}
+
+void bn_sqr_comba8(BN_ULONG *r, const BN_ULONG *a)
+{
+    BN_ULONG t[16];
+    bn_sqr_normal(r, a, 8, t);
+}
+
+void bn_mul_comba4(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b)
+{
+    r[4] = bn_mul_words(&(r[0]), a, 4, b[0]);
+    r[5] = bn_mul_add_words(&(r[1]), a, 4, b[1]);
+    r[6] = bn_mul_add_words(&(r[2]), a, 4, b[2]);
+    r[7] = bn_mul_add_words(&(r[3]), a, 4, b[3]);
+}
+
+void bn_mul_comba8(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b)
+{
+    r[8] = bn_mul_words(&(r[0]), a, 8, b[0]);
+    r[9] = bn_mul_add_words(&(r[1]), a, 8, b[1]);
+    r[10] = bn_mul_add_words(&(r[2]), a, 8, b[2]);
+    r[11] = bn_mul_add_words(&(r[3]), a, 8, b[3]);
+    r[12] = bn_mul_add_words(&(r[4]), a, 8, b[4]);
+    r[13] = bn_mul_add_words(&(r[5]), a, 8, b[5]);
+    r[14] = bn_mul_add_words(&(r[6]), a, 8, b[6]);
+    r[15] = bn_mul_add_words(&(r[7]), a, 8, b[7]);
+}
+
+# ifdef OPENSSL_NO_ASM
+#  ifdef OPENSSL_BN_ASM_MONT
+#   include <alloca.h>
+int bn_mul_mont(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp,
+                const BN_ULONG *np, const BN_ULONG *n0p, int num)
+{
+    BN_ULONG c0, c1, *tp, n0 = *n0p;
+    volatile BN_ULONG *vp;
+    int i = 0, j;
+
+    vp = tp = alloca((num + 2) * sizeof(BN_ULONG));
+
+    for (i = 0; i <= num; i++)
+        tp[i] = 0;
+
+    for (i = 0; i < num; i++) {
+        c0 = bn_mul_add_words(tp, ap, num, bp[i]);
+        c1 = (tp[num] + c0) & BN_MASK2;
+        tp[num] = c1;
+        tp[num + 1] = (c1 < c0 ? 1 : 0);
+
+        c0 = bn_mul_add_words(tp, np, num, tp[0] * n0);
+        c1 = (tp[num] + c0) & BN_MASK2;
+        tp[num] = c1;
+        tp[num + 1] += (c1 < c0 ? 1 : 0);
+        for (j = 0; j <= num; j++)
+            tp[j] = tp[j + 1];
+    }
+
+    if (tp[num] != 0 || tp[num - 1] >= np[num - 1]) {
+        c0 = bn_sub_words(rp, tp, np, num);
+        if (tp[num] != 0 || c0 == 0) {
+            for (i = 0; i < num + 2; i++)
+                vp[i] = 0;
+            return 1;
+        }
+    }
+    for (i = 0; i < num; i++)
+        rp[i] = tp[i], vp[i] = 0;
+    vp[num] = 0;
+    vp[num + 1] = 0;
+    return 1;
+}
+#  else
+int bn_mul_mont(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp,
+                const BN_ULONG *np, const BN_ULONG *n0, int num)
+{
+    return 0;
+}
+#  endif                        /* OPENSSL_BN_ASM_MONT */
+# endif
+
+#endif                          /* !BN_MUL_COMBA */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_blind.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_blind.c
new file mode 100644
index 000000000..450cdfb34
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_blind.c
@@ -0,0 +1,312 @@
+/*
+ * Copyright 1998-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+#define BN_BLINDING_COUNTER     32
+
+struct bn_blinding_st {
+    BIGNUM *A;
+    BIGNUM *Ai;
+    BIGNUM *e;
+    BIGNUM *mod;                /* just a reference */
+    CRYPTO_THREAD_ID tid;
+    int counter;
+    unsigned long flags;
+    BN_MONT_CTX *m_ctx;
+    int (*bn_mod_exp) (BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
+                       const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *m_ctx);
+    CRYPTO_RWLOCK *lock;
+};
+
+BN_BLINDING *BN_BLINDING_new(const BIGNUM *A, const BIGNUM *Ai, BIGNUM *mod)
+{
+    BN_BLINDING *ret = NULL;
+
+    bn_check_top(mod);
+
+    if ((ret = OPENSSL_zalloc(sizeof(*ret))) == NULL) {
+        BNerr(BN_F_BN_BLINDING_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        BNerr(BN_F_BN_BLINDING_NEW, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+
+    BN_BLINDING_set_current_thread(ret);
+
+    if (A != NULL) {
+        if ((ret->A = BN_dup(A)) == NULL)
+            goto err;
+    }
+
+    if (Ai != NULL) {
+        if ((ret->Ai = BN_dup(Ai)) == NULL)
+            goto err;
+    }
+
+    /* save a copy of mod in the BN_BLINDING structure */
+    if ((ret->mod = BN_dup(mod)) == NULL)
+        goto err;
+
+    if (BN_get_flags(mod, BN_FLG_CONSTTIME) != 0)
+        BN_set_flags(ret->mod, BN_FLG_CONSTTIME);
+
+    /*
+     * Set the counter to the special value -1 to indicate that this is
+     * never-used fresh blinding that does not need updating before first
+     * use.
+     */
+    ret->counter = -1;
+
+    return ret;
+
+ err:
+    BN_BLINDING_free(ret);
+    return NULL;
+}
+
+void BN_BLINDING_free(BN_BLINDING *r)
+{
+    if (r == NULL)
+        return;
+    BN_free(r->A);
+    BN_free(r->Ai);
+    BN_free(r->e);
+    BN_free(r->mod);
+    CRYPTO_THREAD_lock_free(r->lock);
+    OPENSSL_free(r);
+}
+
+int BN_BLINDING_update(BN_BLINDING *b, BN_CTX *ctx)
+{
+    int ret = 0;
+
+    if ((b->A == NULL) || (b->Ai == NULL)) {
+        BNerr(BN_F_BN_BLINDING_UPDATE, BN_R_NOT_INITIALIZED);
+        goto err;
+    }
+
+    if (b->counter == -1)
+        b->counter = 0;
+
+    if (++b->counter == BN_BLINDING_COUNTER && b->e != NULL &&
+        !(b->flags & BN_BLINDING_NO_RECREATE)) {
+        /* re-create blinding parameters */
+        if (!BN_BLINDING_create_param(b, NULL, NULL, ctx, NULL, NULL))
+            goto err;
+    } else if (!(b->flags & BN_BLINDING_NO_UPDATE)) {
+        if (b->m_ctx != NULL) {
+            if (!bn_mul_mont_fixed_top(b->Ai, b->Ai, b->Ai, b->m_ctx, ctx)
+                || !bn_mul_mont_fixed_top(b->A, b->A, b->A, b->m_ctx, ctx))
+                goto err;
+        } else {
+            if (!BN_mod_mul(b->Ai, b->Ai, b->Ai, b->mod, ctx)
+                || !BN_mod_mul(b->A, b->A, b->A, b->mod, ctx))
+                goto err;
+        }
+    }
+
+    ret = 1;
+ err:
+    if (b->counter == BN_BLINDING_COUNTER)
+        b->counter = 0;
+    return ret;
+}
+
+int BN_BLINDING_convert(BIGNUM *n, BN_BLINDING *b, BN_CTX *ctx)
+{
+    return BN_BLINDING_convert_ex(n, NULL, b, ctx);
+}
+
+int BN_BLINDING_convert_ex(BIGNUM *n, BIGNUM *r, BN_BLINDING *b, BN_CTX *ctx)
+{
+    int ret = 1;
+
+    bn_check_top(n);
+
+    if ((b->A == NULL) || (b->Ai == NULL)) {
+        BNerr(BN_F_BN_BLINDING_CONVERT_EX, BN_R_NOT_INITIALIZED);
+        return 0;
+    }
+
+    if (b->counter == -1)
+        /* Fresh blinding, doesn't need updating. */
+        b->counter = 0;
+    else if (!BN_BLINDING_update(b, ctx))
+        return 0;
+
+    if (r != NULL && (BN_copy(r, b->Ai) == NULL))
+        return 0;
+
+    if (b->m_ctx != NULL)
+        ret = BN_mod_mul_montgomery(n, n, b->A, b->m_ctx, ctx);
+    else
+        ret = BN_mod_mul(n, n, b->A, b->mod, ctx);
+
+    return ret;
+}
+
+int BN_BLINDING_invert(BIGNUM *n, BN_BLINDING *b, BN_CTX *ctx)
+{
+    return BN_BLINDING_invert_ex(n, NULL, b, ctx);
+}
+
+int BN_BLINDING_invert_ex(BIGNUM *n, const BIGNUM *r, BN_BLINDING *b,
+                          BN_CTX *ctx)
+{
+    int ret;
+
+    bn_check_top(n);
+
+    if (r == NULL && (r = b->Ai) == NULL) {
+        BNerr(BN_F_BN_BLINDING_INVERT_EX, BN_R_NOT_INITIALIZED);
+        return 0;
+    }
+
+    if (b->m_ctx != NULL) {
+        /* ensure that BN_mod_mul_montgomery takes pre-defined path */
+        if (n->dmax >= r->top) {
+            size_t i, rtop = r->top, ntop = n->top;
+            BN_ULONG mask;
+
+            for (i = 0; i < rtop; i++) {
+                mask = (BN_ULONG)0 - ((i - ntop) >> (8 * sizeof(i) - 1));
+                n->d[i] &= mask;
+            }
+            mask = (BN_ULONG)0 - ((rtop - ntop) >> (8 * sizeof(ntop) - 1));
+            /* always true, if (rtop >= ntop) n->top = r->top; */
+            n->top = (int)(rtop & ~mask) | (ntop & mask);
+            n->flags |= (BN_FLG_FIXED_TOP & ~mask);
+        }
+        ret = BN_mod_mul_montgomery(n, n, r, b->m_ctx, ctx);
+    } else {
+        ret = BN_mod_mul(n, n, r, b->mod, ctx);
+    }
+
+    bn_check_top(n);
+    return ret;
+}
+
+int BN_BLINDING_is_current_thread(BN_BLINDING *b)
+{
+    return CRYPTO_THREAD_compare_id(CRYPTO_THREAD_get_current_id(), b->tid);
+}
+
+void BN_BLINDING_set_current_thread(BN_BLINDING *b)
+{
+    b->tid = CRYPTO_THREAD_get_current_id();
+}
+
+int BN_BLINDING_lock(BN_BLINDING *b)
+{
+    return CRYPTO_THREAD_write_lock(b->lock);
+}
+
+int BN_BLINDING_unlock(BN_BLINDING *b)
+{
+    return CRYPTO_THREAD_unlock(b->lock);
+}
+
+unsigned long BN_BLINDING_get_flags(const BN_BLINDING *b)
+{
+    return b->flags;
+}
+
+void BN_BLINDING_set_flags(BN_BLINDING *b, unsigned long flags)
+{
+    b->flags = flags;
+}
+
+BN_BLINDING *BN_BLINDING_create_param(BN_BLINDING *b,
+                                      const BIGNUM *e, BIGNUM *m, BN_CTX *ctx,
+                                      int (*bn_mod_exp) (BIGNUM *r,
+                                                         const BIGNUM *a,
+                                                         const BIGNUM *p,
+                                                         const BIGNUM *m,
+                                                         BN_CTX *ctx,
+                                                         BN_MONT_CTX *m_ctx),
+                                      BN_MONT_CTX *m_ctx)
+{
+    int retry_counter = 32;
+    BN_BLINDING *ret = NULL;
+
+    if (b == NULL)
+        ret = BN_BLINDING_new(NULL, NULL, m);
+    else
+        ret = b;
+
+    if (ret == NULL)
+        goto err;
+
+    if (ret->A == NULL && (ret->A = BN_new()) == NULL)
+        goto err;
+    if (ret->Ai == NULL && (ret->Ai = BN_new()) == NULL)
+        goto err;
+
+    if (e != NULL) {
+        BN_free(ret->e);
+        ret->e = BN_dup(e);
+    }
+    if (ret->e == NULL)
+        goto err;
+
+    if (bn_mod_exp != NULL)
+        ret->bn_mod_exp = bn_mod_exp;
+    if (m_ctx != NULL)
+        ret->m_ctx = m_ctx;
+
+    do {
+        int rv;
+        if (!BN_priv_rand_range(ret->A, ret->mod))
+            goto err;
+        if (int_bn_mod_inverse(ret->Ai, ret->A, ret->mod, ctx, &rv))
+            break;
+
+        /*
+         * this should almost never happen for good RSA keys
+         */
+        if (!rv)
+            goto err;
+
+        if (retry_counter-- == 0) {
+            BNerr(BN_F_BN_BLINDING_CREATE_PARAM, BN_R_TOO_MANY_ITERATIONS);
+            goto err;
+        }
+    } while (1);
+
+    if (ret->bn_mod_exp != NULL && ret->m_ctx != NULL) {
+        if (!ret->bn_mod_exp(ret->A, ret->A, ret->e, ret->mod, ctx, ret->m_ctx))
+            goto err;
+    } else {
+        if (!BN_mod_exp(ret->A, ret->A, ret->e, ret->mod, ctx))
+            goto err;
+    }
+
+    if (ret->m_ctx != NULL) {
+        if (!bn_to_mont_fixed_top(ret->Ai, ret->Ai, ret->m_ctx, ctx)
+            || !bn_to_mont_fixed_top(ret->A, ret->A, ret->m_ctx, ctx))
+            goto err;
+    }
+
+    return ret;
+ err:
+    if (b == NULL) {
+        BN_BLINDING_free(ret);
+        ret = NULL;
+    }
+
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_const.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_const.c
new file mode 100644
index 000000000..39dd61202
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_const.c
@@ -0,0 +1,553 @@
+/*
+ * Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/bn.h>
+
+/*-
+ * "First Oakley Default Group" from RFC2409, section 6.1.
+ *
+ * The prime is: 2^768 - 2 ^704 - 1 + 2^64 * { [2^638 pi] + 149686 }
+ *
+ * RFC2409 specifies a generator of 2.
+ * RFC2412 specifies a generator of of 22.
+ */
+
+BIGNUM *BN_get_rfc2409_prime_768(BIGNUM *bn)
+{
+    static const unsigned char RFC2409_PRIME_768[] = {
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34,
+        0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1,
+        0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74,
+        0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,
+        0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD,
+        0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B,
+        0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37,
+        0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45,
+        0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,
+        0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x3A, 0x36, 0x20,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    };
+    return BN_bin2bn(RFC2409_PRIME_768, sizeof(RFC2409_PRIME_768), bn);
+}
+
+/*-
+ * "Second Oakley Default Group" from RFC2409, section 6.2.
+ *
+ * The prime is: 2^1024 - 2^960 - 1 + 2^64 * { [2^894 pi] + 129093 }.
+ *
+ * RFC2409 specifies a generator of 2.
+ * RFC2412 specifies a generator of 22.
+ */
+
+BIGNUM *BN_get_rfc2409_prime_1024(BIGNUM *bn)
+{
+    static const unsigned char RFC2409_PRIME_1024[] = {
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34,
+        0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1,
+        0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74,
+        0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,
+        0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD,
+        0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B,
+        0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37,
+        0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45,
+        0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,
+        0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B,
+        0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED,
+        0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5,
+        0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6,
+        0x49, 0x28, 0x66, 0x51, 0xEC, 0xE6, 0x53, 0x81,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    };
+    return BN_bin2bn(RFC2409_PRIME_1024, sizeof(RFC2409_PRIME_1024), bn);
+}
+
+/*-
+ * "1536-bit MODP Group" from RFC3526, Section 2.
+ *
+ * The prime is: 2^1536 - 2^1472 - 1 + 2^64 * { [2^1406 pi] + 741804 }
+ *
+ * RFC3526 specifies a generator of 2.
+ * RFC2312 specifies a generator of 22.
+ */
+
+BIGNUM *BN_get_rfc3526_prime_1536(BIGNUM *bn)
+{
+    static const unsigned char RFC3526_PRIME_1536[] = {
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34,
+        0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1,
+        0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74,
+        0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,
+        0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD,
+        0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B,
+        0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37,
+        0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45,
+        0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,
+        0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B,
+        0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED,
+        0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5,
+        0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6,
+        0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D,
+        0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05,
+        0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A,
+        0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F,
+        0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96,
+        0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB,
+        0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D,
+        0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04,
+        0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x23, 0x73, 0x27,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    };
+    return BN_bin2bn(RFC3526_PRIME_1536, sizeof(RFC3526_PRIME_1536), bn);
+}
+
+/*-
+ * "2048-bit MODP Group" from RFC3526, Section 3.
+ *
+ * The prime is: 2^2048 - 2^1984 - 1 + 2^64 * { [2^1918 pi] + 124476 }
+ *
+ * RFC3526 specifies a generator of 2.
+ */
+
+BIGNUM *BN_get_rfc3526_prime_2048(BIGNUM *bn)
+{
+    static const unsigned char RFC3526_PRIME_2048[] = {
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34,
+        0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1,
+        0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74,
+        0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,
+        0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD,
+        0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B,
+        0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37,
+        0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45,
+        0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,
+        0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B,
+        0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED,
+        0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5,
+        0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6,
+        0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D,
+        0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05,
+        0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A,
+        0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F,
+        0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96,
+        0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB,
+        0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D,
+        0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04,
+        0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C,
+        0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B,
+        0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03,
+        0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F,
+        0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9,
+        0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18,
+        0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5,
+        0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10,
+        0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAC, 0xAA, 0x68,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    };
+    return BN_bin2bn(RFC3526_PRIME_2048, sizeof(RFC3526_PRIME_2048), bn);
+}
+
+/*-
+ * "3072-bit MODP Group" from RFC3526, Section 4.
+ *
+ * The prime is: 2^3072 - 2^3008 - 1 + 2^64 * { [2^2942 pi] + 1690314 }
+ *
+ * RFC3526 specifies a generator of 2.
+ */
+
+BIGNUM *BN_get_rfc3526_prime_3072(BIGNUM *bn)
+{
+    static const unsigned char RFC3526_PRIME_3072[] = {
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34,
+        0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1,
+        0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74,
+        0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,
+        0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD,
+        0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B,
+        0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37,
+        0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45,
+        0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,
+        0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B,
+        0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED,
+        0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5,
+        0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6,
+        0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D,
+        0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05,
+        0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A,
+        0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F,
+        0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96,
+        0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB,
+        0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D,
+        0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04,
+        0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C,
+        0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B,
+        0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03,
+        0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F,
+        0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9,
+        0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18,
+        0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5,
+        0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10,
+        0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D,
+        0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33,
+        0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64,
+        0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A,
+        0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D,
+        0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7,
+        0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7,
+        0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D,
+        0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B,
+        0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64,
+        0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64,
+        0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C,
+        0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C,
+        0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2,
+        0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31,
+        0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E,
+        0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x3A, 0xD2, 0xCA,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    };
+    return BN_bin2bn(RFC3526_PRIME_3072, sizeof(RFC3526_PRIME_3072), bn);
+}
+
+/*-
+ * "4096-bit MODP Group" from RFC3526, Section 5.
+ *
+ * The prime is: 2^4096 - 2^4032 - 1 + 2^64 * { [2^3966 pi] + 240904 }
+ *
+ * RFC3526 specifies a generator of 2.
+ */
+
+BIGNUM *BN_get_rfc3526_prime_4096(BIGNUM *bn)
+{
+    static const unsigned char RFC3526_PRIME_4096[] = {
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34,
+        0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1,
+        0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74,
+        0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,
+        0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD,
+        0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B,
+        0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37,
+        0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45,
+        0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,
+        0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B,
+        0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED,
+        0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5,
+        0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6,
+        0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D,
+        0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05,
+        0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A,
+        0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F,
+        0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96,
+        0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB,
+        0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D,
+        0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04,
+        0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C,
+        0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B,
+        0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03,
+        0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F,
+        0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9,
+        0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18,
+        0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5,
+        0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10,
+        0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D,
+        0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33,
+        0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64,
+        0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A,
+        0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D,
+        0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7,
+        0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7,
+        0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D,
+        0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B,
+        0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64,
+        0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64,
+        0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C,
+        0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C,
+        0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2,
+        0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31,
+        0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E,
+        0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x21, 0x08, 0x01,
+        0x1A, 0x72, 0x3C, 0x12, 0xA7, 0x87, 0xE6, 0xD7,
+        0x88, 0x71, 0x9A, 0x10, 0xBD, 0xBA, 0x5B, 0x26,
+        0x99, 0xC3, 0x27, 0x18, 0x6A, 0xF4, 0xE2, 0x3C,
+        0x1A, 0x94, 0x68, 0x34, 0xB6, 0x15, 0x0B, 0xDA,
+        0x25, 0x83, 0xE9, 0xCA, 0x2A, 0xD4, 0x4C, 0xE8,
+        0xDB, 0xBB, 0xC2, 0xDB, 0x04, 0xDE, 0x8E, 0xF9,
+        0x2E, 0x8E, 0xFC, 0x14, 0x1F, 0xBE, 0xCA, 0xA6,
+        0x28, 0x7C, 0x59, 0x47, 0x4E, 0x6B, 0xC0, 0x5D,
+        0x99, 0xB2, 0x96, 0x4F, 0xA0, 0x90, 0xC3, 0xA2,
+        0x23, 0x3B, 0xA1, 0x86, 0x51, 0x5B, 0xE7, 0xED,
+        0x1F, 0x61, 0x29, 0x70, 0xCE, 0xE2, 0xD7, 0xAF,
+        0xB8, 0x1B, 0xDD, 0x76, 0x21, 0x70, 0x48, 0x1C,
+        0xD0, 0x06, 0x91, 0x27, 0xD5, 0xB0, 0x5A, 0xA9,
+        0x93, 0xB4, 0xEA, 0x98, 0x8D, 0x8F, 0xDD, 0xC1,
+        0x86, 0xFF, 0xB7, 0xDC, 0x90, 0xA6, 0xC0, 0x8F,
+        0x4D, 0xF4, 0x35, 0xC9, 0x34, 0x06, 0x31, 0x99,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    };
+    return BN_bin2bn(RFC3526_PRIME_4096, sizeof(RFC3526_PRIME_4096), bn);
+}
+
+/*-
+ * "6144-bit MODP Group" from RFC3526, Section 6.
+ *
+ * The prime is: 2^6144 - 2^6080 - 1 + 2^64 * { [2^6014 pi] + 929484 }
+ *
+ * RFC3526 specifies a generator of 2.
+ */
+
+BIGNUM *BN_get_rfc3526_prime_6144(BIGNUM *bn)
+{
+    static const unsigned char RFC3526_PRIME_6144[] = {
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34,
+        0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1,
+        0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74,
+        0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,
+        0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD,
+        0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B,
+        0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37,
+        0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45,
+        0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,
+        0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B,
+        0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED,
+        0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5,
+        0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6,
+        0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D,
+        0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05,
+        0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A,
+        0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F,
+        0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96,
+        0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB,
+        0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D,
+        0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04,
+        0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C,
+        0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B,
+        0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03,
+        0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F,
+        0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9,
+        0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18,
+        0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5,
+        0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10,
+        0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D,
+        0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33,
+        0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64,
+        0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A,
+        0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D,
+        0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7,
+        0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7,
+        0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D,
+        0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B,
+        0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64,
+        0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64,
+        0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C,
+        0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C,
+        0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2,
+        0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31,
+        0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E,
+        0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x21, 0x08, 0x01,
+        0x1A, 0x72, 0x3C, 0x12, 0xA7, 0x87, 0xE6, 0xD7,
+        0x88, 0x71, 0x9A, 0x10, 0xBD, 0xBA, 0x5B, 0x26,
+        0x99, 0xC3, 0x27, 0x18, 0x6A, 0xF4, 0xE2, 0x3C,
+        0x1A, 0x94, 0x68, 0x34, 0xB6, 0x15, 0x0B, 0xDA,
+        0x25, 0x83, 0xE9, 0xCA, 0x2A, 0xD4, 0x4C, 0xE8,
+        0xDB, 0xBB, 0xC2, 0xDB, 0x04, 0xDE, 0x8E, 0xF9,
+        0x2E, 0x8E, 0xFC, 0x14, 0x1F, 0xBE, 0xCA, 0xA6,
+        0x28, 0x7C, 0x59, 0x47, 0x4E, 0x6B, 0xC0, 0x5D,
+        0x99, 0xB2, 0x96, 0x4F, 0xA0, 0x90, 0xC3, 0xA2,
+        0x23, 0x3B, 0xA1, 0x86, 0x51, 0x5B, 0xE7, 0xED,
+        0x1F, 0x61, 0x29, 0x70, 0xCE, 0xE2, 0xD7, 0xAF,
+        0xB8, 0x1B, 0xDD, 0x76, 0x21, 0x70, 0x48, 0x1C,
+        0xD0, 0x06, 0x91, 0x27, 0xD5, 0xB0, 0x5A, 0xA9,
+        0x93, 0xB4, 0xEA, 0x98, 0x8D, 0x8F, 0xDD, 0xC1,
+        0x86, 0xFF, 0xB7, 0xDC, 0x90, 0xA6, 0xC0, 0x8F,
+        0x4D, 0xF4, 0x35, 0xC9, 0x34, 0x02, 0x84, 0x92,
+        0x36, 0xC3, 0xFA, 0xB4, 0xD2, 0x7C, 0x70, 0x26,
+        0xC1, 0xD4, 0xDC, 0xB2, 0x60, 0x26, 0x46, 0xDE,
+        0xC9, 0x75, 0x1E, 0x76, 0x3D, 0xBA, 0x37, 0xBD,
+        0xF8, 0xFF, 0x94, 0x06, 0xAD, 0x9E, 0x53, 0x0E,
+        0xE5, 0xDB, 0x38, 0x2F, 0x41, 0x30, 0x01, 0xAE,
+        0xB0, 0x6A, 0x53, 0xED, 0x90, 0x27, 0xD8, 0x31,
+        0x17, 0x97, 0x27, 0xB0, 0x86, 0x5A, 0x89, 0x18,
+        0xDA, 0x3E, 0xDB, 0xEB, 0xCF, 0x9B, 0x14, 0xED,
+        0x44, 0xCE, 0x6C, 0xBA, 0xCE, 0xD4, 0xBB, 0x1B,
+        0xDB, 0x7F, 0x14, 0x47, 0xE6, 0xCC, 0x25, 0x4B,
+        0x33, 0x20, 0x51, 0x51, 0x2B, 0xD7, 0xAF, 0x42,
+        0x6F, 0xB8, 0xF4, 0x01, 0x37, 0x8C, 0xD2, 0xBF,
+        0x59, 0x83, 0xCA, 0x01, 0xC6, 0x4B, 0x92, 0xEC,
+        0xF0, 0x32, 0xEA, 0x15, 0xD1, 0x72, 0x1D, 0x03,
+        0xF4, 0x82, 0xD7, 0xCE, 0x6E, 0x74, 0xFE, 0xF6,
+        0xD5, 0x5E, 0x70, 0x2F, 0x46, 0x98, 0x0C, 0x82,
+        0xB5, 0xA8, 0x40, 0x31, 0x90, 0x0B, 0x1C, 0x9E,
+        0x59, 0xE7, 0xC9, 0x7F, 0xBE, 0xC7, 0xE8, 0xF3,
+        0x23, 0xA9, 0x7A, 0x7E, 0x36, 0xCC, 0x88, 0xBE,
+        0x0F, 0x1D, 0x45, 0xB7, 0xFF, 0x58, 0x5A, 0xC5,
+        0x4B, 0xD4, 0x07, 0xB2, 0x2B, 0x41, 0x54, 0xAA,
+        0xCC, 0x8F, 0x6D, 0x7E, 0xBF, 0x48, 0xE1, 0xD8,
+        0x14, 0xCC, 0x5E, 0xD2, 0x0F, 0x80, 0x37, 0xE0,
+        0xA7, 0x97, 0x15, 0xEE, 0xF2, 0x9B, 0xE3, 0x28,
+        0x06, 0xA1, 0xD5, 0x8B, 0xB7, 0xC5, 0xDA, 0x76,
+        0xF5, 0x50, 0xAA, 0x3D, 0x8A, 0x1F, 0xBF, 0xF0,
+        0xEB, 0x19, 0xCC, 0xB1, 0xA3, 0x13, 0xD5, 0x5C,
+        0xDA, 0x56, 0xC9, 0xEC, 0x2E, 0xF2, 0x96, 0x32,
+        0x38, 0x7F, 0xE8, 0xD7, 0x6E, 0x3C, 0x04, 0x68,
+        0x04, 0x3E, 0x8F, 0x66, 0x3F, 0x48, 0x60, 0xEE,
+        0x12, 0xBF, 0x2D, 0x5B, 0x0B, 0x74, 0x74, 0xD6,
+        0xE6, 0x94, 0xF9, 0x1E, 0x6D, 0xCC, 0x40, 0x24,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    };
+    return BN_bin2bn(RFC3526_PRIME_6144, sizeof(RFC3526_PRIME_6144), bn);
+}
+
+/*-
+ * "8192-bit MODP Group" from RFC3526, Section 7.
+ *
+ * The prime is: 2^8192 - 2^8128 - 1 + 2^64 * { [2^8062 pi] + 4743158 }
+ *
+ * RFC3526 specifies a generator of 2.
+ */
+
+BIGNUM *BN_get_rfc3526_prime_8192(BIGNUM *bn)
+{
+    static const unsigned char RFC3526_PRIME_8192[] = {
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34,
+        0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1,
+        0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74,
+        0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,
+        0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD,
+        0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B,
+        0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37,
+        0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45,
+        0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,
+        0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B,
+        0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED,
+        0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5,
+        0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6,
+        0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, 0x3D,
+        0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, 0xBF, 0x05,
+        0x98, 0xDA, 0x48, 0x36, 0x1C, 0x55, 0xD3, 0x9A,
+        0x69, 0x16, 0x3F, 0xA8, 0xFD, 0x24, 0xCF, 0x5F,
+        0x83, 0x65, 0x5D, 0x23, 0xDC, 0xA3, 0xAD, 0x96,
+        0x1C, 0x62, 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB,
+        0x9E, 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D,
+        0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, 0x04,
+        0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, 0x21, 0x7C,
+        0x32, 0x90, 0x5E, 0x46, 0x2E, 0x36, 0xCE, 0x3B,
+        0xE3, 0x9E, 0x77, 0x2C, 0x18, 0x0E, 0x86, 0x03,
+        0x9B, 0x27, 0x83, 0xA2, 0xEC, 0x07, 0xA2, 0x8F,
+        0xB5, 0xC5, 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9,
+        0xDE, 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18,
+        0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, 0xE5,
+        0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, 0x05, 0x10,
+        0x15, 0x72, 0x8E, 0x5A, 0x8A, 0xAA, 0xC4, 0x2D,
+        0xAD, 0x33, 0x17, 0x0D, 0x04, 0x50, 0x7A, 0x33,
+        0xA8, 0x55, 0x21, 0xAB, 0xDF, 0x1C, 0xBA, 0x64,
+        0xEC, 0xFB, 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A,
+        0x8A, 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D,
+        0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, 0xC7,
+        0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, 0x33, 0xD7,
+        0x1E, 0x8C, 0x94, 0xE0, 0x4A, 0x25, 0x61, 0x9D,
+        0xCE, 0xE3, 0xD2, 0x26, 0x1A, 0xD2, 0xEE, 0x6B,
+        0xF1, 0x2F, 0xFA, 0x06, 0xD9, 0x8A, 0x08, 0x64,
+        0xD8, 0x76, 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64,
+        0x52, 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C,
+        0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, 0x6C,
+        0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, 0x46, 0xE2,
+        0x08, 0xE2, 0x4F, 0xA0, 0x74, 0xE5, 0xAB, 0x31,
+        0x43, 0xDB, 0x5B, 0xFC, 0xE0, 0xFD, 0x10, 0x8E,
+        0x4B, 0x82, 0xD1, 0x20, 0xA9, 0x21, 0x08, 0x01,
+        0x1A, 0x72, 0x3C, 0x12, 0xA7, 0x87, 0xE6, 0xD7,
+        0x88, 0x71, 0x9A, 0x10, 0xBD, 0xBA, 0x5B, 0x26,
+        0x99, 0xC3, 0x27, 0x18, 0x6A, 0xF4, 0xE2, 0x3C,
+        0x1A, 0x94, 0x68, 0x34, 0xB6, 0x15, 0x0B, 0xDA,
+        0x25, 0x83, 0xE9, 0xCA, 0x2A, 0xD4, 0x4C, 0xE8,
+        0xDB, 0xBB, 0xC2, 0xDB, 0x04, 0xDE, 0x8E, 0xF9,
+        0x2E, 0x8E, 0xFC, 0x14, 0x1F, 0xBE, 0xCA, 0xA6,
+        0x28, 0x7C, 0x59, 0x47, 0x4E, 0x6B, 0xC0, 0x5D,
+        0x99, 0xB2, 0x96, 0x4F, 0xA0, 0x90, 0xC3, 0xA2,
+        0x23, 0x3B, 0xA1, 0x86, 0x51, 0x5B, 0xE7, 0xED,
+        0x1F, 0x61, 0x29, 0x70, 0xCE, 0xE2, 0xD7, 0xAF,
+        0xB8, 0x1B, 0xDD, 0x76, 0x21, 0x70, 0x48, 0x1C,
+        0xD0, 0x06, 0x91, 0x27, 0xD5, 0xB0, 0x5A, 0xA9,
+        0x93, 0xB4, 0xEA, 0x98, 0x8D, 0x8F, 0xDD, 0xC1,
+        0x86, 0xFF, 0xB7, 0xDC, 0x90, 0xA6, 0xC0, 0x8F,
+        0x4D, 0xF4, 0x35, 0xC9, 0x34, 0x02, 0x84, 0x92,
+        0x36, 0xC3, 0xFA, 0xB4, 0xD2, 0x7C, 0x70, 0x26,
+        0xC1, 0xD4, 0xDC, 0xB2, 0x60, 0x26, 0x46, 0xDE,
+        0xC9, 0x75, 0x1E, 0x76, 0x3D, 0xBA, 0x37, 0xBD,
+        0xF8, 0xFF, 0x94, 0x06, 0xAD, 0x9E, 0x53, 0x0E,
+        0xE5, 0xDB, 0x38, 0x2F, 0x41, 0x30, 0x01, 0xAE,
+        0xB0, 0x6A, 0x53, 0xED, 0x90, 0x27, 0xD8, 0x31,
+        0x17, 0x97, 0x27, 0xB0, 0x86, 0x5A, 0x89, 0x18,
+        0xDA, 0x3E, 0xDB, 0xEB, 0xCF, 0x9B, 0x14, 0xED,
+        0x44, 0xCE, 0x6C, 0xBA, 0xCE, 0xD4, 0xBB, 0x1B,
+        0xDB, 0x7F, 0x14, 0x47, 0xE6, 0xCC, 0x25, 0x4B,
+        0x33, 0x20, 0x51, 0x51, 0x2B, 0xD7, 0xAF, 0x42,
+        0x6F, 0xB8, 0xF4, 0x01, 0x37, 0x8C, 0xD2, 0xBF,
+        0x59, 0x83, 0xCA, 0x01, 0xC6, 0x4B, 0x92, 0xEC,
+        0xF0, 0x32, 0xEA, 0x15, 0xD1, 0x72, 0x1D, 0x03,
+        0xF4, 0x82, 0xD7, 0xCE, 0x6E, 0x74, 0xFE, 0xF6,
+        0xD5, 0x5E, 0x70, 0x2F, 0x46, 0x98, 0x0C, 0x82,
+        0xB5, 0xA8, 0x40, 0x31, 0x90, 0x0B, 0x1C, 0x9E,
+        0x59, 0xE7, 0xC9, 0x7F, 0xBE, 0xC7, 0xE8, 0xF3,
+        0x23, 0xA9, 0x7A, 0x7E, 0x36, 0xCC, 0x88, 0xBE,
+        0x0F, 0x1D, 0x45, 0xB7, 0xFF, 0x58, 0x5A, 0xC5,
+        0x4B, 0xD4, 0x07, 0xB2, 0x2B, 0x41, 0x54, 0xAA,
+        0xCC, 0x8F, 0x6D, 0x7E, 0xBF, 0x48, 0xE1, 0xD8,
+        0x14, 0xCC, 0x5E, 0xD2, 0x0F, 0x80, 0x37, 0xE0,
+        0xA7, 0x97, 0x15, 0xEE, 0xF2, 0x9B, 0xE3, 0x28,
+        0x06, 0xA1, 0xD5, 0x8B, 0xB7, 0xC5, 0xDA, 0x76,
+        0xF5, 0x50, 0xAA, 0x3D, 0x8A, 0x1F, 0xBF, 0xF0,
+        0xEB, 0x19, 0xCC, 0xB1, 0xA3, 0x13, 0xD5, 0x5C,
+        0xDA, 0x56, 0xC9, 0xEC, 0x2E, 0xF2, 0x96, 0x32,
+        0x38, 0x7F, 0xE8, 0xD7, 0x6E, 0x3C, 0x04, 0x68,
+        0x04, 0x3E, 0x8F, 0x66, 0x3F, 0x48, 0x60, 0xEE,
+        0x12, 0xBF, 0x2D, 0x5B, 0x0B, 0x74, 0x74, 0xD6,
+        0xE6, 0x94, 0xF9, 0x1E, 0x6D, 0xBE, 0x11, 0x59,
+        0x74, 0xA3, 0x92, 0x6F, 0x12, 0xFE, 0xE5, 0xE4,
+        0x38, 0x77, 0x7C, 0xB6, 0xA9, 0x32, 0xDF, 0x8C,
+        0xD8, 0xBE, 0xC4, 0xD0, 0x73, 0xB9, 0x31, 0xBA,
+        0x3B, 0xC8, 0x32, 0xB6, 0x8D, 0x9D, 0xD3, 0x00,
+        0x74, 0x1F, 0xA7, 0xBF, 0x8A, 0xFC, 0x47, 0xED,
+        0x25, 0x76, 0xF6, 0x93, 0x6B, 0xA4, 0x24, 0x66,
+        0x3A, 0xAB, 0x63, 0x9C, 0x5A, 0xE4, 0xF5, 0x68,
+        0x34, 0x23, 0xB4, 0x74, 0x2B, 0xF1, 0xC9, 0x78,
+        0x23, 0x8F, 0x16, 0xCB, 0xE3, 0x9D, 0x65, 0x2D,
+        0xE3, 0xFD, 0xB8, 0xBE, 0xFC, 0x84, 0x8A, 0xD9,
+        0x22, 0x22, 0x2E, 0x04, 0xA4, 0x03, 0x7C, 0x07,
+        0x13, 0xEB, 0x57, 0xA8, 0x1A, 0x23, 0xF0, 0xC7,
+        0x34, 0x73, 0xFC, 0x64, 0x6C, 0xEA, 0x30, 0x6B,
+        0x4B, 0xCB, 0xC8, 0x86, 0x2F, 0x83, 0x85, 0xDD,
+        0xFA, 0x9D, 0x4B, 0x7F, 0xA2, 0xC0, 0x87, 0xE8,
+        0x79, 0x68, 0x33, 0x03, 0xED, 0x5B, 0xDD, 0x3A,
+        0x06, 0x2B, 0x3C, 0xF5, 0xB3, 0xA2, 0x78, 0xA6,
+        0x6D, 0x2A, 0x13, 0xF8, 0x3F, 0x44, 0xF8, 0x2D,
+        0xDF, 0x31, 0x0E, 0xE0, 0x74, 0xAB, 0x6A, 0x36,
+        0x45, 0x97, 0xE8, 0x99, 0xA0, 0x25, 0x5D, 0xC1,
+        0x64, 0xF3, 0x1C, 0xC5, 0x08, 0x46, 0x85, 0x1D,
+        0xF9, 0xAB, 0x48, 0x19, 0x5D, 0xED, 0x7E, 0xA1,
+        0xB1, 0xD5, 0x10, 0xBD, 0x7E, 0xE7, 0x4D, 0x73,
+        0xFA, 0xF3, 0x6B, 0xC3, 0x1E, 0xCF, 0xA2, 0x68,
+        0x35, 0x90, 0x46, 0xF4, 0xEB, 0x87, 0x9F, 0x92,
+        0x40, 0x09, 0x43, 0x8B, 0x48, 0x1C, 0x6C, 0xD7,
+        0x88, 0x9A, 0x00, 0x2E, 0xD5, 0xEE, 0x38, 0x2B,
+        0xC9, 0x19, 0x0D, 0xA6, 0xFC, 0x02, 0x6E, 0x47,
+        0x95, 0x58, 0xE4, 0x47, 0x56, 0x77, 0xE9, 0xAA,
+        0x9E, 0x30, 0x50, 0xE2, 0x76, 0x56, 0x94, 0xDF,
+        0xC8, 0x1F, 0x56, 0xE8, 0x80, 0xB9, 0x6E, 0x71,
+        0x60, 0xC9, 0x80, 0xDD, 0x98, 0xED, 0xD3, 0xDF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    };
+    return BN_bin2bn(RFC3526_PRIME_8192, sizeof(RFC3526_PRIME_8192), bn);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_ctx.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_ctx.c
new file mode 100644
index 000000000..54b799961
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_ctx.c
@@ -0,0 +1,361 @@
+/*
+ * Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+/*-
+ * TODO list
+ *
+ * 1. Check a bunch of "(words+1)" type hacks in various bignum functions and
+ * check they can be safely removed.
+ *  - Check +1 and other ugliness in BN_from_montgomery()
+ *
+ * 2. Consider allowing a BN_new_ex() that, at least, lets you specify an
+ * appropriate 'block' size that will be honoured by bn_expand_internal() to
+ * prevent piddly little reallocations. OTOH, profiling bignum expansions in
+ * BN_CTX doesn't show this to be a big issue.
+ */
+
+/* How many bignums are in each "pool item"; */
+#define BN_CTX_POOL_SIZE        16
+/* The stack frame info is resizing, set a first-time expansion size; */
+#define BN_CTX_START_FRAMES     32
+
+/***********/
+/* BN_POOL */
+/***********/
+
+/* A bundle of bignums that can be linked with other bundles */
+typedef struct bignum_pool_item {
+    /* The bignum values */
+    BIGNUM vals[BN_CTX_POOL_SIZE];
+    /* Linked-list admin */
+    struct bignum_pool_item *prev, *next;
+} BN_POOL_ITEM;
+/* A linked-list of bignums grouped in bundles */
+typedef struct bignum_pool {
+    /* Linked-list admin */
+    BN_POOL_ITEM *head, *current, *tail;
+    /* Stack depth and allocation size */
+    unsigned used, size;
+} BN_POOL;
+static void BN_POOL_init(BN_POOL *);
+static void BN_POOL_finish(BN_POOL *);
+static BIGNUM *BN_POOL_get(BN_POOL *, int);
+static void BN_POOL_release(BN_POOL *, unsigned int);
+
+/************/
+/* BN_STACK */
+/************/
+
+/* A wrapper to manage the "stack frames" */
+typedef struct bignum_ctx_stack {
+    /* Array of indexes into the bignum stack */
+    unsigned int *indexes;
+    /* Number of stack frames, and the size of the allocated array */
+    unsigned int depth, size;
+} BN_STACK;
+static void BN_STACK_init(BN_STACK *);
+static void BN_STACK_finish(BN_STACK *);
+static int BN_STACK_push(BN_STACK *, unsigned int);
+static unsigned int BN_STACK_pop(BN_STACK *);
+
+/**********/
+/* BN_CTX */
+/**********/
+
+/* The opaque BN_CTX type */
+struct bignum_ctx {
+    /* The bignum bundles */
+    BN_POOL pool;
+    /* The "stack frames", if you will */
+    BN_STACK stack;
+    /* The number of bignums currently assigned */
+    unsigned int used;
+    /* Depth of stack overflow */
+    int err_stack;
+    /* Block "gets" until an "end" (compatibility behaviour) */
+    int too_many;
+    /* Flags. */
+    int flags;
+};
+
+/* Enable this to find BN_CTX bugs */
+#ifdef BN_CTX_DEBUG
+static const char *ctxdbg_cur = NULL;
+static void ctxdbg(BN_CTX *ctx)
+{
+    unsigned int bnidx = 0, fpidx = 0;
+    BN_POOL_ITEM *item = ctx->pool.head;
+    BN_STACK *stack = &ctx->stack;
+    fprintf(stderr, "(%16p): ", ctx);
+    while (bnidx < ctx->used) {
+        fprintf(stderr, "%03x ", item->vals[bnidx++ % BN_CTX_POOL_SIZE].dmax);
+        if (!(bnidx % BN_CTX_POOL_SIZE))
+            item = item->next;
+    }
+    fprintf(stderr, "\n");
+    bnidx = 0;
+    fprintf(stderr, "          : ");
+    while (fpidx < stack->depth) {
+        while (bnidx++ < stack->indexes[fpidx])
+            fprintf(stderr, "    ");
+        fprintf(stderr, "^^^ ");
+        bnidx++;
+        fpidx++;
+    }
+    fprintf(stderr, "\n");
+}
+
+# define CTXDBG_ENTRY(str, ctx)  do { \
+                                ctxdbg_cur = (str); \
+                                fprintf(stderr,"Starting %s\n", ctxdbg_cur); \
+                                ctxdbg(ctx); \
+                                } while(0)
+# define CTXDBG_EXIT(ctx)        do { \
+                                fprintf(stderr,"Ending %s\n", ctxdbg_cur); \
+                                ctxdbg(ctx); \
+                                } while(0)
+# define CTXDBG_RET(ctx,ret)
+#else
+# define CTXDBG_ENTRY(str, ctx)
+# define CTXDBG_EXIT(ctx)
+# define CTXDBG_RET(ctx,ret)
+#endif
+
+
+BN_CTX *BN_CTX_new(void)
+{
+    BN_CTX *ret;
+
+    if ((ret = OPENSSL_zalloc(sizeof(*ret))) == NULL) {
+        BNerr(BN_F_BN_CTX_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    /* Initialise the structure */
+    BN_POOL_init(&ret->pool);
+    BN_STACK_init(&ret->stack);
+    return ret;
+}
+
+BN_CTX *BN_CTX_secure_new(void)
+{
+    BN_CTX *ret = BN_CTX_new();
+
+    if (ret != NULL)
+        ret->flags = BN_FLG_SECURE;
+    return ret;
+}
+
+void BN_CTX_free(BN_CTX *ctx)
+{
+    if (ctx == NULL)
+        return;
+#ifdef BN_CTX_DEBUG
+    {
+        BN_POOL_ITEM *pool = ctx->pool.head;
+        fprintf(stderr, "BN_CTX_free, stack-size=%d, pool-bignums=%d\n",
+                ctx->stack.size, ctx->pool.size);
+        fprintf(stderr, "dmaxs: ");
+        while (pool) {
+            unsigned loop = 0;
+            while (loop < BN_CTX_POOL_SIZE)
+                fprintf(stderr, "%02x ", pool->vals[loop++].dmax);
+            pool = pool->next;
+        }
+        fprintf(stderr, "\n");
+    }
+#endif
+    BN_STACK_finish(&ctx->stack);
+    BN_POOL_finish(&ctx->pool);
+    OPENSSL_free(ctx);
+}
+
+void BN_CTX_start(BN_CTX *ctx)
+{
+    CTXDBG_ENTRY("BN_CTX_start", ctx);
+    /* If we're already overflowing ... */
+    if (ctx->err_stack || ctx->too_many)
+        ctx->err_stack++;
+    /* (Try to) get a new frame pointer */
+    else if (!BN_STACK_push(&ctx->stack, ctx->used)) {
+        BNerr(BN_F_BN_CTX_START, BN_R_TOO_MANY_TEMPORARY_VARIABLES);
+        ctx->err_stack++;
+    }
+    CTXDBG_EXIT(ctx);
+}
+
+void BN_CTX_end(BN_CTX *ctx)
+{
+    CTXDBG_ENTRY("BN_CTX_end", ctx);
+    if (ctx->err_stack)
+        ctx->err_stack--;
+    else {
+        unsigned int fp = BN_STACK_pop(&ctx->stack);
+        /* Does this stack frame have anything to release? */
+        if (fp < ctx->used)
+            BN_POOL_release(&ctx->pool, ctx->used - fp);
+        ctx->used = fp;
+        /* Unjam "too_many" in case "get" had failed */
+        ctx->too_many = 0;
+    }
+    CTXDBG_EXIT(ctx);
+}
+
+BIGNUM *BN_CTX_get(BN_CTX *ctx)
+{
+    BIGNUM *ret;
+
+    CTXDBG_ENTRY("BN_CTX_get", ctx);
+    if (ctx->err_stack || ctx->too_many)
+        return NULL;
+    if ((ret = BN_POOL_get(&ctx->pool, ctx->flags)) == NULL) {
+        /*
+         * Setting too_many prevents repeated "get" attempts from cluttering
+         * the error stack.
+         */
+        ctx->too_many = 1;
+        BNerr(BN_F_BN_CTX_GET, BN_R_TOO_MANY_TEMPORARY_VARIABLES);
+        return NULL;
+    }
+    /* OK, make sure the returned bignum is "zero" */
+    BN_zero(ret);
+    /* clear BN_FLG_CONSTTIME if leaked from previous frames */
+    ret->flags &= (~BN_FLG_CONSTTIME);
+    ctx->used++;
+    CTXDBG_RET(ctx, ret);
+    return ret;
+}
+
+/************/
+/* BN_STACK */
+/************/
+
+static void BN_STACK_init(BN_STACK *st)
+{
+    st->indexes = NULL;
+    st->depth = st->size = 0;
+}
+
+static void BN_STACK_finish(BN_STACK *st)
+{
+    OPENSSL_free(st->indexes);
+    st->indexes = NULL;
+}
+
+
+static int BN_STACK_push(BN_STACK *st, unsigned int idx)
+{
+    if (st->depth == st->size) {
+        /* Need to expand */
+        unsigned int newsize =
+            st->size ? (st->size * 3 / 2) : BN_CTX_START_FRAMES;
+        unsigned int *newitems;
+
+        if ((newitems = OPENSSL_malloc(sizeof(*newitems) * newsize)) == NULL) {
+            BNerr(BN_F_BN_STACK_PUSH, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        if (st->depth)
+            memcpy(newitems, st->indexes, sizeof(*newitems) * st->depth);
+        OPENSSL_free(st->indexes);
+        st->indexes = newitems;
+        st->size = newsize;
+    }
+    st->indexes[(st->depth)++] = idx;
+    return 1;
+}
+
+static unsigned int BN_STACK_pop(BN_STACK *st)
+{
+    return st->indexes[--(st->depth)];
+}
+
+/***********/
+/* BN_POOL */
+/***********/
+
+static void BN_POOL_init(BN_POOL *p)
+{
+    p->head = p->current = p->tail = NULL;
+    p->used = p->size = 0;
+}
+
+static void BN_POOL_finish(BN_POOL *p)
+{
+    unsigned int loop;
+    BIGNUM *bn;
+
+    while (p->head) {
+        for (loop = 0, bn = p->head->vals; loop++ < BN_CTX_POOL_SIZE; bn++)
+            if (bn->d)
+                BN_clear_free(bn);
+        p->current = p->head->next;
+        OPENSSL_free(p->head);
+        p->head = p->current;
+    }
+}
+
+
+static BIGNUM *BN_POOL_get(BN_POOL *p, int flag)
+{
+    BIGNUM *bn;
+    unsigned int loop;
+
+    /* Full; allocate a new pool item and link it in. */
+    if (p->used == p->size) {
+        BN_POOL_ITEM *item;
+
+        if ((item = OPENSSL_malloc(sizeof(*item))) == NULL) {
+            BNerr(BN_F_BN_POOL_GET, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+        for (loop = 0, bn = item->vals; loop++ < BN_CTX_POOL_SIZE; bn++) {
+            bn_init(bn);
+            if ((flag & BN_FLG_SECURE) != 0)
+                BN_set_flags(bn, BN_FLG_SECURE);
+        }
+        item->prev = p->tail;
+        item->next = NULL;
+
+        if (p->head == NULL)
+            p->head = p->current = p->tail = item;
+        else {
+            p->tail->next = item;
+            p->tail = item;
+            p->current = item;
+        }
+        p->size += BN_CTX_POOL_SIZE;
+        p->used++;
+        /* Return the first bignum from the new pool */
+        return item->vals;
+    }
+
+    if (!p->used)
+        p->current = p->head;
+    else if ((p->used % BN_CTX_POOL_SIZE) == 0)
+        p->current = p->current->next;
+    return p->current->vals + ((p->used++) % BN_CTX_POOL_SIZE);
+}
+
+static void BN_POOL_release(BN_POOL *p, unsigned int num)
+{
+    unsigned int offset = (p->used - 1) % BN_CTX_POOL_SIZE;
+
+    p->used -= num;
+    while (num--) {
+        bn_check_top(p->current->vals + offset);
+        if (offset == 0) {
+            offset = BN_CTX_POOL_SIZE - 1;
+            p->current = p->current->prev;
+        } else
+            offset--;
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_depr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_depr.c
new file mode 100644
index 000000000..58bcf197a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_depr.c
@@ -0,0 +1,68 @@
+/*
+ * Copyright 2002-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Support for deprecated functions goes here - static linkage will only
+ * slurp this code if applications are using them directly.
+ */
+
+#include <openssl/opensslconf.h>
+#if OPENSSL_API_COMPAT >= 0x00908000L
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <stdio.h>
+# include <time.h>
+# include "internal/cryptlib.h"
+# include "bn_lcl.h"
+
+BIGNUM *BN_generate_prime(BIGNUM *ret, int bits, int safe,
+                          const BIGNUM *add, const BIGNUM *rem,
+                          void (*callback) (int, int, void *), void *cb_arg)
+{
+    BN_GENCB cb;
+    BIGNUM *rnd = NULL;
+
+    BN_GENCB_set_old(&cb, callback, cb_arg);
+
+    if (ret == NULL) {
+        if ((rnd = BN_new()) == NULL)
+            goto err;
+    } else
+        rnd = ret;
+    if (!BN_generate_prime_ex(rnd, bits, safe, add, rem, &cb))
+        goto err;
+
+    /* we have a prime :-) */
+    return rnd;
+ err:
+    BN_free(rnd);
+    return NULL;
+}
+
+int BN_is_prime(const BIGNUM *a, int checks,
+                void (*callback) (int, int, void *), BN_CTX *ctx_passed,
+                void *cb_arg)
+{
+    BN_GENCB cb;
+    BN_GENCB_set_old(&cb, callback, cb_arg);
+    return BN_is_prime_ex(a, checks, ctx_passed, &cb);
+}
+
+int BN_is_prime_fasttest(const BIGNUM *a, int checks,
+                         void (*callback) (int, int, void *),
+                         BN_CTX *ctx_passed, void *cb_arg,
+                         int do_trial_division)
+{
+    BN_GENCB cb;
+    BN_GENCB_set_old(&cb, callback, cb_arg);
+    return BN_is_prime_fasttest_ex(a, checks, ctx_passed,
+                                   do_trial_division, &cb);
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_dh.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_dh.c
new file mode 100644
index 000000000..38acdee23
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_dh.c
@@ -0,0 +1,512 @@
+/*
+ * Copyright 2014-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "bn_lcl.h"
+#include "internal/nelem.h"
+
+#ifndef OPENSSL_NO_DH
+#include <openssl/dh.h>
+#include "internal/bn_dh.h"
+/* DH parameters from RFC5114 */
+
+# if BN_BITS2 == 64
+static const BN_ULONG dh1024_160_p[] = {
+    0xDF1FB2BC2E4A4371ULL, 0xE68CFDA76D4DA708ULL, 0x45BF37DF365C1A65ULL,
+    0xA151AF5F0DC8B4BDULL, 0xFAA31A4FF55BCCC0ULL, 0x4EFFD6FAE5644738ULL,
+    0x98488E9C219A7372ULL, 0xACCBDD7D90C4BD70ULL, 0x24975C3CD49B83BFULL,
+    0x13ECB4AEA9061123ULL, 0x9838EF1E2EE652C0ULL, 0x6073E28675A23D18ULL,
+    0x9A6A9DCA52D23B61ULL, 0x52C99FBCFB06A3C6ULL, 0xDE92DE5EAE5D54ECULL,
+    0xB10B8F96A080E01DULL
+};
+
+static const BN_ULONG dh1024_160_g[] = {
+    0x855E6EEB22B3B2E5ULL, 0x858F4DCEF97C2A24ULL, 0x2D779D5918D08BC8ULL,
+    0xD662A4D18E73AFA3ULL, 0x1DBF0A0169B6A28AULL, 0xA6A24C087A091F53ULL,
+    0x909D0D2263F80A76ULL, 0xD7FBD7D3B9A92EE1ULL, 0x5E91547F9E2749F4ULL,
+    0x160217B4B01B886AULL, 0x777E690F5504F213ULL, 0x266FEA1E5C41564BULL,
+    0xD6406CFF14266D31ULL, 0xF8104DD258AC507FULL, 0x6765A442EFB99905ULL,
+    0xA4D1CBD5C3FD3412ULL
+};
+
+static const BN_ULONG dh1024_160_q[] = {
+    0x64B7CB9D49462353ULL, 0x81A8DF278ABA4E7DULL, 0x00000000F518AA87ULL
+};
+
+static const BN_ULONG dh2048_224_p[] = {
+    0x0AC4DFFE0C10E64FULL, 0xCF9DE5384E71B81CULL, 0x7EF363E2FFA31F71ULL,
+    0xE3FB73C16B8E75B9ULL, 0xC9B53DCF4BA80A29ULL, 0x23F10B0E16E79763ULL,
+    0xC52172E413042E9BULL, 0xBE60E69CC928B2B9ULL, 0x80CD86A1B9E587E8ULL,
+    0x315D75E198C641A4ULL, 0xCDF93ACC44328387ULL, 0x15987D9ADC0A486DULL,
+    0x7310F7121FD5A074ULL, 0x278273C7DE31EFDCULL, 0x1602E714415D9330ULL,
+    0x81286130BC8985DBULL, 0xB3BF8A3170918836ULL, 0x6A00E0A0B9C49708ULL,
+    0xC6BA0B2C8BBC27BEULL, 0xC9F98D11ED34DBF6ULL, 0x7AD5B7D0B6C12207ULL,
+    0xD91E8FEF55B7394BULL, 0x9037C9EDEFDA4DF8ULL, 0x6D3F8152AD6AC212ULL,
+    0x1DE6B85A1274A0A6ULL, 0xEB3D688A309C180EULL, 0xAF9A3C407BA1DF15ULL,
+    0xE6FA141DF95A56DBULL, 0xB54B1597B61D0A75ULL, 0xA20D64E5683B9FD1ULL,
+    0xD660FAA79559C51FULL, 0xAD107E1E9123A9D0ULL
+};
+
+static const BN_ULONG dh2048_224_g[] = {
+    0x84B890D3191F2BFAULL, 0x81BC087F2A7065B3ULL, 0x19C418E1F6EC0179ULL,
+    0x7B5A0F1C71CFFF4CULL, 0xEDFE72FE9B6AA4BDULL, 0x81E1BCFE94B30269ULL,
+    0x566AFBB48D6C0191ULL, 0xB539CCE3409D13CDULL, 0x6AA21E7F5F2FF381ULL,
+    0xD9E263E4770589EFULL, 0x10E183EDD19963DDULL, 0xB70A8137150B8EEBULL,
+    0x051AE3D428C8F8ACULL, 0xBB77A86F0C1AB15BULL, 0x6E3025E316A330EFULL,
+    0x19529A45D6F83456ULL, 0xF180EB34118E98D1ULL, 0xB5F6C6B250717CBEULL,
+    0x09939D54DA7460CDULL, 0xE247150422EA1ED4ULL, 0xB8A762D0521BC98AULL,
+    0xF4D027275AC1348BULL, 0xC17669101999024AULL, 0xBE5E9001A8D66AD7ULL,
+    0xC57DB17C620A8652ULL, 0xAB739D7700C29F52ULL, 0xDD921F01A70C4AFAULL,
+    0xA6824A4E10B9A6F0ULL, 0x74866A08CFE4FFE3ULL, 0x6CDEBE7B89998CAFULL,
+    0x9DF30B5C8FFDAC50ULL, 0xAC4032EF4F2D9AE3ULL
+};
+
+static const BN_ULONG dh2048_224_q[] = {
+    0xBF389A99B36371EBULL, 0x1F80535A4738CEBCULL, 0xC58D93FE99717710ULL,
+    0x00000000801C0D34ULL
+};
+
+static const BN_ULONG dh2048_256_p[] = {
+    0xDB094AE91E1A1597ULL, 0x693877FAD7EF09CAULL, 0x6116D2276E11715FULL,
+    0xA4B54330C198AF12ULL, 0x75F26375D7014103ULL, 0xC3A3960A54E710C3ULL,
+    0xDED4010ABD0BE621ULL, 0xC0B857F689962856ULL, 0xB3CA3F7971506026ULL,
+    0x1CCACB83E6B486F6ULL, 0x67E144E514056425ULL, 0xF6A167B5A41825D9ULL,
+    0x3AD8347796524D8EULL, 0xF13C6D9A51BFA4ABULL, 0x2D52526735488A0EULL,
+    0xB63ACAE1CAA6B790ULL, 0x4FDB70C581B23F76ULL, 0xBC39A0BF12307F5CULL,
+    0xB941F54EB1E59BB8ULL, 0x6C5BFC11D45F9088ULL, 0x22E0B1EF4275BF7BULL,
+    0x91F9E6725B4758C0ULL, 0x5A8A9D306BCF67EDULL, 0x209E0C6497517ABDULL,
+    0x3BF4296D830E9A7CULL, 0x16C3D91134096FAAULL, 0xFAF7DF4561B2AA30ULL,
+    0xE00DF8F1D61957D4ULL, 0x5D2CEED4435E3B00ULL, 0x8CEEF608660DD0F2ULL,
+    0xFFBBD19C65195999ULL, 0x87A8E61DB4B6663CULL
+};
+
+static const BN_ULONG dh2048_256_g[] = {
+    0x664B4C0F6CC41659ULL, 0x5E2327CFEF98C582ULL, 0xD647D148D4795451ULL,
+    0x2F63078490F00EF8ULL, 0x184B523D1DB246C3ULL, 0xC7891428CDC67EB6ULL,
+    0x7FD028370DF92B52ULL, 0xB3353BBB64E0EC37ULL, 0xECD06E1557CD0915ULL,
+    0xB7D2BBD2DF016199ULL, 0xC8484B1E052588B9ULL, 0xDB2A3B7313D3FE14ULL,
+    0xD052B985D182EA0AULL, 0xA4BD1BFFE83B9C80ULL, 0xDFC967C1FB3F2E55ULL,
+    0xB5045AF2767164E1ULL, 0x1D14348F6F2F9193ULL, 0x64E67982428EBC83ULL,
+    0x8AC376D282D6ED38ULL, 0x777DE62AAAB8A862ULL, 0xDDF463E5E9EC144BULL,
+    0x0196F931C77A57F2ULL, 0xA55AE31341000A65ULL, 0x901228F8C28CBB18ULL,
+    0xBC3773BF7E8C6F62ULL, 0xBE3A6C1B0C6B47B1ULL, 0xFF4FED4AAC0BB555ULL,
+    0x10DBC15077BE463FULL, 0x07F4793A1A0BA125ULL, 0x4CA7B18F21EF2054ULL,
+    0x2E77506660EDBD48ULL, 0x3FB32C9B73134D0BULL
+};
+
+static const BN_ULONG dh2048_256_q[] = {
+    0xA308B0FE64F5FBD3ULL, 0x99B1A47D1EB3750BULL, 0xB447997640129DA2ULL,
+    0x8CF83642A709A097ULL
+};
+
+/* Primes from RFC 7919 */
+static const BN_ULONG ffdhe2048_p[] = {
+    0xFFFFFFFFFFFFFFFFULL, 0x886B423861285C97ULL, 0xC6F34A26C1B2EFFAULL,
+    0xC58EF1837D1683B2ULL, 0x3BB5FCBC2EC22005ULL, 0xC3FE3B1B4C6FAD73ULL,
+    0x8E4F1232EEF28183ULL, 0x9172FE9CE98583FFULL, 0xC03404CD28342F61ULL,
+    0x9E02FCE1CDF7E2ECULL, 0x0B07A7C8EE0A6D70ULL, 0xAE56EDE76372BB19ULL,
+    0x1D4F42A3DE394DF4ULL, 0xB96ADAB760D7F468ULL, 0xD108A94BB2C8E3FBULL,
+    0xBC0AB182B324FB61ULL, 0x30ACCA4F483A797AULL, 0x1DF158A136ADE735ULL,
+    0xE2A689DAF3EFE872ULL, 0x984F0C70E0E68B77ULL, 0xB557135E7F57C935ULL,
+    0x856365553DED1AF3ULL, 0x2433F51F5F066ED0ULL, 0xD3DF1ED5D5FD6561ULL,
+    0xF681B202AEC4617AULL, 0x7D2FE363630C75D8ULL, 0xCC939DCE249B3EF9ULL,
+    0xA9E13641146433FBULL, 0xD8B9C583CE2D3695ULL, 0xAFDC5620273D3CF1ULL,
+    0xADF85458A2BB4A9AULL, 0xFFFFFFFFFFFFFFFFULL
+};
+
+static const BN_ULONG ffdhe3072_p[] = {
+    0xFFFFFFFFFFFFFFFFULL, 0x25E41D2B66C62E37ULL, 0x3C1B20EE3FD59D7CULL,
+    0x0ABCD06BFA53DDEFULL, 0x1DBF9A42D5C4484EULL, 0xABC521979B0DEADAULL,
+    0xE86D2BC522363A0DULL, 0x5CAE82AB9C9DF69EULL, 0x64F2E21E71F54BFFULL,
+    0xF4FD4452E2D74DD3ULL, 0xB4130C93BC437944ULL, 0xAEFE130985139270ULL,
+    0x598CB0FAC186D91CULL, 0x7AD91D2691F7F7EEULL, 0x61B46FC9D6E6C907ULL,
+    0xBC34F4DEF99C0238ULL, 0xDE355B3B6519035BULL, 0x886B4238611FCFDCULL,
+    0xC6F34A26C1B2EFFAULL, 0xC58EF1837D1683B2ULL, 0x3BB5FCBC2EC22005ULL,
+    0xC3FE3B1B4C6FAD73ULL, 0x8E4F1232EEF28183ULL, 0x9172FE9CE98583FFULL,
+    0xC03404CD28342F61ULL, 0x9E02FCE1CDF7E2ECULL, 0x0B07A7C8EE0A6D70ULL,
+    0xAE56EDE76372BB19ULL, 0x1D4F42A3DE394DF4ULL, 0xB96ADAB760D7F468ULL,
+    0xD108A94BB2C8E3FBULL, 0xBC0AB182B324FB61ULL, 0x30ACCA4F483A797AULL,
+    0x1DF158A136ADE735ULL, 0xE2A689DAF3EFE872ULL, 0x984F0C70E0E68B77ULL,
+    0xB557135E7F57C935ULL, 0x856365553DED1AF3ULL, 0x2433F51F5F066ED0ULL,
+    0xD3DF1ED5D5FD6561ULL, 0xF681B202AEC4617AULL, 0x7D2FE363630C75D8ULL,
+    0xCC939DCE249B3EF9ULL, 0xA9E13641146433FBULL, 0xD8B9C583CE2D3695ULL,
+    0xAFDC5620273D3CF1ULL, 0xADF85458A2BB4A9AULL, 0xFFFFFFFFFFFFFFFFULL
+};
+
+static const BN_ULONG ffdhe4096_p[] = {
+    0xFFFFFFFFFFFFFFFFULL, 0xC68A007E5E655F6AULL, 0x4DB5A851F44182E1ULL,
+    0x8EC9B55A7F88A46BULL, 0x0A8291CDCEC97DCFULL, 0x2A4ECEA9F98D0ACCULL,
+    0x1A1DB93D7140003CULL, 0x092999A333CB8B7AULL, 0x6DC778F971AD0038ULL,
+    0xA907600A918130C4ULL, 0xED6A1E012D9E6832ULL, 0x7135C886EFB4318AULL,
+    0x87F55BA57E31CC7AULL, 0x7763CF1D55034004ULL, 0xAC7D5F42D69F6D18ULL,
+    0x7930E9E4E58857B6ULL, 0x6E6F52C3164DF4FBULL, 0x25E41D2B669E1EF1ULL,
+    0x3C1B20EE3FD59D7CULL, 0x0ABCD06BFA53DDEFULL, 0x1DBF9A42D5C4484EULL,
+    0xABC521979B0DEADAULL, 0xE86D2BC522363A0DULL, 0x5CAE82AB9C9DF69EULL,
+    0x64F2E21E71F54BFFULL, 0xF4FD4452E2D74DD3ULL, 0xB4130C93BC437944ULL,
+    0xAEFE130985139270ULL, 0x598CB0FAC186D91CULL, 0x7AD91D2691F7F7EEULL,
+    0x61B46FC9D6E6C907ULL, 0xBC34F4DEF99C0238ULL, 0xDE355B3B6519035BULL,
+    0x886B4238611FCFDCULL, 0xC6F34A26C1B2EFFAULL, 0xC58EF1837D1683B2ULL,
+    0x3BB5FCBC2EC22005ULL, 0xC3FE3B1B4C6FAD73ULL, 0x8E4F1232EEF28183ULL,
+    0x9172FE9CE98583FFULL, 0xC03404CD28342F61ULL, 0x9E02FCE1CDF7E2ECULL,
+    0x0B07A7C8EE0A6D70ULL, 0xAE56EDE76372BB19ULL, 0x1D4F42A3DE394DF4ULL,
+    0xB96ADAB760D7F468ULL, 0xD108A94BB2C8E3FBULL, 0xBC0AB182B324FB61ULL,
+    0x30ACCA4F483A797AULL, 0x1DF158A136ADE735ULL, 0xE2A689DAF3EFE872ULL,
+    0x984F0C70E0E68B77ULL, 0xB557135E7F57C935ULL, 0x856365553DED1AF3ULL,
+    0x2433F51F5F066ED0ULL, 0xD3DF1ED5D5FD6561ULL, 0xF681B202AEC4617AULL,
+    0x7D2FE363630C75D8ULL, 0xCC939DCE249B3EF9ULL, 0xA9E13641146433FBULL,
+    0xD8B9C583CE2D3695ULL, 0xAFDC5620273D3CF1ULL, 0xADF85458A2BB4A9AULL,
+    0xFFFFFFFFFFFFFFFFULL
+};
+
+static const BN_ULONG ffdhe6144_p[] = {
+    0xFFFFFFFFFFFFFFFFULL, 0xA40E329CD0E40E65ULL, 0xA41D570D7938DAD4ULL,
+    0x62A69526D43161C1ULL, 0x3FDD4A8E9ADB1E69ULL, 0x5B3B71F9DC6B80D6ULL,
+    0xEC9D1810C6272B04ULL, 0x8CCF2DD5CACEF403ULL, 0xE49F5235C95B9117ULL,
+    0x505DC82DB854338AULL, 0x62292C311562A846ULL, 0xD72B03746AE77F5EULL,
+    0xF9C9091B462D538CULL, 0x0AE8DB5847A67CBEULL, 0xB3A739C122611682ULL,
+    0xEEAAC0232A281BF6ULL, 0x94C6651E77CAF992ULL, 0x763E4E4B94B2BBC1ULL,
+    0x587E38DA0077D9B4ULL, 0x7FB29F8C183023C3ULL, 0x0ABEC1FFF9E3A26EULL,
+    0xA00EF092350511E3ULL, 0xB855322EDB6340D8ULL, 0xA52471F7A9A96910ULL,
+    0x388147FB4CFDB477ULL, 0x9B1F5C3E4E46041FULL, 0xCDAD0657FCCFEC71ULL,
+    0xB38E8C334C701C3AULL, 0x917BDD64B1C0FD4CULL, 0x3BB454329B7624C8ULL,
+    0x23BA4442CAF53EA6ULL, 0x4E677D2C38532A3AULL, 0x0BFD64B645036C7AULL,
+    0xC68A007E5E0DD902ULL, 0x4DB5A851F44182E1ULL, 0x8EC9B55A7F88A46BULL,
+    0x0A8291CDCEC97DCFULL, 0x2A4ECEA9F98D0ACCULL, 0x1A1DB93D7140003CULL,
+    0x092999A333CB8B7AULL, 0x6DC778F971AD0038ULL, 0xA907600A918130C4ULL,
+    0xED6A1E012D9E6832ULL, 0x7135C886EFB4318AULL, 0x87F55BA57E31CC7AULL,
+    0x7763CF1D55034004ULL, 0xAC7D5F42D69F6D18ULL, 0x7930E9E4E58857B6ULL,
+    0x6E6F52C3164DF4FBULL, 0x25E41D2B669E1EF1ULL, 0x3C1B20EE3FD59D7CULL,
+    0x0ABCD06BFA53DDEFULL, 0x1DBF9A42D5C4484EULL, 0xABC521979B0DEADAULL,
+    0xE86D2BC522363A0DULL, 0x5CAE82AB9C9DF69EULL, 0x64F2E21E71F54BFFULL,
+    0xF4FD4452E2D74DD3ULL, 0xB4130C93BC437944ULL, 0xAEFE130985139270ULL,
+    0x598CB0FAC186D91CULL, 0x7AD91D2691F7F7EEULL, 0x61B46FC9D6E6C907ULL,
+    0xBC34F4DEF99C0238ULL, 0xDE355B3B6519035BULL, 0x886B4238611FCFDCULL,
+    0xC6F34A26C1B2EFFAULL, 0xC58EF1837D1683B2ULL, 0x3BB5FCBC2EC22005ULL,
+    0xC3FE3B1B4C6FAD73ULL, 0x8E4F1232EEF28183ULL, 0x9172FE9CE98583FFULL,
+    0xC03404CD28342F61ULL, 0x9E02FCE1CDF7E2ECULL, 0x0B07A7C8EE0A6D70ULL,
+    0xAE56EDE76372BB19ULL, 0x1D4F42A3DE394DF4ULL, 0xB96ADAB760D7F468ULL,
+    0xD108A94BB2C8E3FBULL, 0xBC0AB182B324FB61ULL, 0x30ACCA4F483A797AULL,
+    0x1DF158A136ADE735ULL, 0xE2A689DAF3EFE872ULL, 0x984F0C70E0E68B77ULL,
+    0xB557135E7F57C935ULL, 0x856365553DED1AF3ULL, 0x2433F51F5F066ED0ULL,
+    0xD3DF1ED5D5FD6561ULL, 0xF681B202AEC4617AULL, 0x7D2FE363630C75D8ULL,
+    0xCC939DCE249B3EF9ULL, 0xA9E13641146433FBULL, 0xD8B9C583CE2D3695ULL,
+    0xAFDC5620273D3CF1ULL, 0xADF85458A2BB4A9AULL, 0xFFFFFFFFFFFFFFFFULL
+};
+
+static const BN_ULONG ffdhe8192_p[] = {
+    0xFFFFFFFFFFFFFFFFULL, 0xD68C8BB7C5C6424CULL, 0x011E2A94838FF88CULL,
+    0x0822E506A9F4614EULL, 0x97D11D49F7A8443DULL, 0xA6BBFDE530677F0DULL,
+    0x2F741EF8C1FE86FEULL, 0xFAFABE1C5D71A87EULL, 0xDED2FBABFBE58A30ULL,
+    0xB6855DFE72B0A66EULL, 0x1EFC8CE0BA8A4FE8ULL, 0x83F81D4A3F2FA457ULL,
+    0xA1FE3075A577E231ULL, 0xD5B8019488D9C0A0ULL, 0x624816CDAD9A95F9ULL,
+    0x99E9E31650C1217BULL, 0x51AA691E0E423CFCULL, 0x1C217E6C3826E52CULL,
+    0x51A8A93109703FEEULL, 0xBB7099876A460E74ULL, 0x541FC68C9C86B022ULL,
+    0x59160CC046FD8251ULL, 0x2846C0BA35C35F5CULL, 0x54504AC78B758282ULL,
+    0x29388839D2AF05E4ULL, 0xCB2C0F1CC01BD702ULL, 0x555B2F747C932665ULL,
+    0x86B63142A3AB8829ULL, 0x0B8CC3BDF64B10EFULL, 0x687FEB69EDD1CC5EULL,
+    0xFDB23FCEC9509D43ULL, 0x1E425A31D951AE64ULL, 0x36AD004CF600C838ULL,
+    0xA40E329CCFF46AAAULL, 0xA41D570D7938DAD4ULL, 0x62A69526D43161C1ULL,
+    0x3FDD4A8E9ADB1E69ULL, 0x5B3B71F9DC6B80D6ULL, 0xEC9D1810C6272B04ULL,
+    0x8CCF2DD5CACEF403ULL, 0xE49F5235C95B9117ULL, 0x505DC82DB854338AULL,
+    0x62292C311562A846ULL, 0xD72B03746AE77F5EULL, 0xF9C9091B462D538CULL,
+    0x0AE8DB5847A67CBEULL, 0xB3A739C122611682ULL, 0xEEAAC0232A281BF6ULL,
+    0x94C6651E77CAF992ULL, 0x763E4E4B94B2BBC1ULL, 0x587E38DA0077D9B4ULL,
+    0x7FB29F8C183023C3ULL, 0x0ABEC1FFF9E3A26EULL, 0xA00EF092350511E3ULL,
+    0xB855322EDB6340D8ULL, 0xA52471F7A9A96910ULL, 0x388147FB4CFDB477ULL,
+    0x9B1F5C3E4E46041FULL, 0xCDAD0657FCCFEC71ULL, 0xB38E8C334C701C3AULL,
+    0x917BDD64B1C0FD4CULL, 0x3BB454329B7624C8ULL, 0x23BA4442CAF53EA6ULL,
+    0x4E677D2C38532A3AULL, 0x0BFD64B645036C7AULL, 0xC68A007E5E0DD902ULL,
+    0x4DB5A851F44182E1ULL, 0x8EC9B55A7F88A46BULL, 0x0A8291CDCEC97DCFULL,
+    0x2A4ECEA9F98D0ACCULL, 0x1A1DB93D7140003CULL, 0x092999A333CB8B7AULL,
+    0x6DC778F971AD0038ULL, 0xA907600A918130C4ULL, 0xED6A1E012D9E6832ULL,
+    0x7135C886EFB4318AULL, 0x87F55BA57E31CC7AULL, 0x7763CF1D55034004ULL,
+    0xAC7D5F42D69F6D18ULL, 0x7930E9E4E58857B6ULL, 0x6E6F52C3164DF4FBULL,
+    0x25E41D2B669E1EF1ULL, 0x3C1B20EE3FD59D7CULL, 0x0ABCD06BFA53DDEFULL,
+    0x1DBF9A42D5C4484EULL, 0xABC521979B0DEADAULL, 0xE86D2BC522363A0DULL,
+    0x5CAE82AB9C9DF69EULL, 0x64F2E21E71F54BFFULL, 0xF4FD4452E2D74DD3ULL,
+    0xB4130C93BC437944ULL, 0xAEFE130985139270ULL, 0x598CB0FAC186D91CULL,
+    0x7AD91D2691F7F7EEULL, 0x61B46FC9D6E6C907ULL, 0xBC34F4DEF99C0238ULL,
+    0xDE355B3B6519035BULL, 0x886B4238611FCFDCULL, 0xC6F34A26C1B2EFFAULL,
+    0xC58EF1837D1683B2ULL, 0x3BB5FCBC2EC22005ULL, 0xC3FE3B1B4C6FAD73ULL,
+    0x8E4F1232EEF28183ULL, 0x9172FE9CE98583FFULL, 0xC03404CD28342F61ULL,
+    0x9E02FCE1CDF7E2ECULL, 0x0B07A7C8EE0A6D70ULL, 0xAE56EDE76372BB19ULL,
+    0x1D4F42A3DE394DF4ULL, 0xB96ADAB760D7F468ULL, 0xD108A94BB2C8E3FBULL,
+    0xBC0AB182B324FB61ULL, 0x30ACCA4F483A797AULL, 0x1DF158A136ADE735ULL,
+    0xE2A689DAF3EFE872ULL, 0x984F0C70E0E68B77ULL, 0xB557135E7F57C935ULL,
+    0x856365553DED1AF3ULL, 0x2433F51F5F066ED0ULL, 0xD3DF1ED5D5FD6561ULL,
+    0xF681B202AEC4617AULL, 0x7D2FE363630C75D8ULL, 0xCC939DCE249B3EF9ULL,
+    0xA9E13641146433FBULL, 0xD8B9C583CE2D3695ULL, 0xAFDC5620273D3CF1ULL,
+    0xADF85458A2BB4A9AULL, 0xFFFFFFFFFFFFFFFFULL
+};
+
+# elif BN_BITS2 == 32
+
+static const BN_ULONG dh1024_160_p[] = {
+    0x2E4A4371, 0xDF1FB2BC, 0x6D4DA708, 0xE68CFDA7, 0x365C1A65, 0x45BF37DF,
+    0x0DC8B4BD, 0xA151AF5F, 0xF55BCCC0, 0xFAA31A4F, 0xE5644738, 0x4EFFD6FA,
+    0x219A7372, 0x98488E9C, 0x90C4BD70, 0xACCBDD7D, 0xD49B83BF, 0x24975C3C,
+    0xA9061123, 0x13ECB4AE, 0x2EE652C0, 0x9838EF1E, 0x75A23D18, 0x6073E286,
+    0x52D23B61, 0x9A6A9DCA, 0xFB06A3C6, 0x52C99FBC, 0xAE5D54EC, 0xDE92DE5E,
+    0xA080E01D, 0xB10B8F96
+};
+
+static const BN_ULONG dh1024_160_g[] = {
+    0x22B3B2E5, 0x855E6EEB, 0xF97C2A24, 0x858F4DCE, 0x18D08BC8, 0x2D779D59,
+    0x8E73AFA3, 0xD662A4D1, 0x69B6A28A, 0x1DBF0A01, 0x7A091F53, 0xA6A24C08,
+    0x63F80A76, 0x909D0D22, 0xB9A92EE1, 0xD7FBD7D3, 0x9E2749F4, 0x5E91547F,
+    0xB01B886A, 0x160217B4, 0x5504F213, 0x777E690F, 0x5C41564B, 0x266FEA1E,
+    0x14266D31, 0xD6406CFF, 0x58AC507F, 0xF8104DD2, 0xEFB99905, 0x6765A442,
+    0xC3FD3412, 0xA4D1CBD5
+};
+
+static const BN_ULONG dh1024_160_q[] = {
+    0x49462353, 0x64B7CB9D, 0x8ABA4E7D, 0x81A8DF27, 0xF518AA87
+};
+
+static const BN_ULONG dh2048_224_p[] = {
+    0x0C10E64F, 0x0AC4DFFE, 0x4E71B81C, 0xCF9DE538, 0xFFA31F71, 0x7EF363E2,
+    0x6B8E75B9, 0xE3FB73C1, 0x4BA80A29, 0xC9B53DCF, 0x16E79763, 0x23F10B0E,
+    0x13042E9B, 0xC52172E4, 0xC928B2B9, 0xBE60E69C, 0xB9E587E8, 0x80CD86A1,
+    0x98C641A4, 0x315D75E1, 0x44328387, 0xCDF93ACC, 0xDC0A486D, 0x15987D9A,
+    0x1FD5A074, 0x7310F712, 0xDE31EFDC, 0x278273C7, 0x415D9330, 0x1602E714,
+    0xBC8985DB, 0x81286130, 0x70918836, 0xB3BF8A31, 0xB9C49708, 0x6A00E0A0,
+    0x8BBC27BE, 0xC6BA0B2C, 0xED34DBF6, 0xC9F98D11, 0xB6C12207, 0x7AD5B7D0,
+    0x55B7394B, 0xD91E8FEF, 0xEFDA4DF8, 0x9037C9ED, 0xAD6AC212, 0x6D3F8152,
+    0x1274A0A6, 0x1DE6B85A, 0x309C180E, 0xEB3D688A, 0x7BA1DF15, 0xAF9A3C40,
+    0xF95A56DB, 0xE6FA141D, 0xB61D0A75, 0xB54B1597, 0x683B9FD1, 0xA20D64E5,
+    0x9559C51F, 0xD660FAA7, 0x9123A9D0, 0xAD107E1E
+};
+
+static const BN_ULONG dh2048_224_g[] = {
+    0x191F2BFA, 0x84B890D3, 0x2A7065B3, 0x81BC087F, 0xF6EC0179, 0x19C418E1,
+    0x71CFFF4C, 0x7B5A0F1C, 0x9B6AA4BD, 0xEDFE72FE, 0x94B30269, 0x81E1BCFE,
+    0x8D6C0191, 0x566AFBB4, 0x409D13CD, 0xB539CCE3, 0x5F2FF381, 0x6AA21E7F,
+    0x770589EF, 0xD9E263E4, 0xD19963DD, 0x10E183ED, 0x150B8EEB, 0xB70A8137,
+    0x28C8F8AC, 0x051AE3D4, 0x0C1AB15B, 0xBB77A86F, 0x16A330EF, 0x6E3025E3,
+    0xD6F83456, 0x19529A45, 0x118E98D1, 0xF180EB34, 0x50717CBE, 0xB5F6C6B2,
+    0xDA7460CD, 0x09939D54, 0x22EA1ED4, 0xE2471504, 0x521BC98A, 0xB8A762D0,
+    0x5AC1348B, 0xF4D02727, 0x1999024A, 0xC1766910, 0xA8D66AD7, 0xBE5E9001,
+    0x620A8652, 0xC57DB17C, 0x00C29F52, 0xAB739D77, 0xA70C4AFA, 0xDD921F01,
+    0x10B9A6F0, 0xA6824A4E, 0xCFE4FFE3, 0x74866A08, 0x89998CAF, 0x6CDEBE7B,
+    0x8FFDAC50, 0x9DF30B5C, 0x4F2D9AE3, 0xAC4032EF
+};
+
+static const BN_ULONG dh2048_224_q[] = {
+    0xB36371EB, 0xBF389A99, 0x4738CEBC, 0x1F80535A, 0x99717710, 0xC58D93FE,
+    0x801C0D34
+};
+
+static const BN_ULONG dh2048_256_p[] = {
+    0x1E1A1597, 0xDB094AE9, 0xD7EF09CA, 0x693877FA, 0x6E11715F, 0x6116D227,
+    0xC198AF12, 0xA4B54330, 0xD7014103, 0x75F26375, 0x54E710C3, 0xC3A3960A,
+    0xBD0BE621, 0xDED4010A, 0x89962856, 0xC0B857F6, 0x71506026, 0xB3CA3F79,
+    0xE6B486F6, 0x1CCACB83, 0x14056425, 0x67E144E5, 0xA41825D9, 0xF6A167B5,
+    0x96524D8E, 0x3AD83477, 0x51BFA4AB, 0xF13C6D9A, 0x35488A0E, 0x2D525267,
+    0xCAA6B790, 0xB63ACAE1, 0x81B23F76, 0x4FDB70C5, 0x12307F5C, 0xBC39A0BF,
+    0xB1E59BB8, 0xB941F54E, 0xD45F9088, 0x6C5BFC11, 0x4275BF7B, 0x22E0B1EF,
+    0x5B4758C0, 0x91F9E672, 0x6BCF67ED, 0x5A8A9D30, 0x97517ABD, 0x209E0C64,
+    0x830E9A7C, 0x3BF4296D, 0x34096FAA, 0x16C3D911, 0x61B2AA30, 0xFAF7DF45,
+    0xD61957D4, 0xE00DF8F1, 0x435E3B00, 0x5D2CEED4, 0x660DD0F2, 0x8CEEF608,
+    0x65195999, 0xFFBBD19C, 0xB4B6663C, 0x87A8E61D
+};
+
+static const BN_ULONG dh2048_256_g[] = {
+    0x6CC41659, 0x664B4C0F, 0xEF98C582, 0x5E2327CF, 0xD4795451, 0xD647D148,
+    0x90F00EF8, 0x2F630784, 0x1DB246C3, 0x184B523D, 0xCDC67EB6, 0xC7891428,
+    0x0DF92B52, 0x7FD02837, 0x64E0EC37, 0xB3353BBB, 0x57CD0915, 0xECD06E15,
+    0xDF016199, 0xB7D2BBD2, 0x052588B9, 0xC8484B1E, 0x13D3FE14, 0xDB2A3B73,
+    0xD182EA0A, 0xD052B985, 0xE83B9C80, 0xA4BD1BFF, 0xFB3F2E55, 0xDFC967C1,
+    0x767164E1, 0xB5045AF2, 0x6F2F9193, 0x1D14348F, 0x428EBC83, 0x64E67982,
+    0x82D6ED38, 0x8AC376D2, 0xAAB8A862, 0x777DE62A, 0xE9EC144B, 0xDDF463E5,
+    0xC77A57F2, 0x0196F931, 0x41000A65, 0xA55AE313, 0xC28CBB18, 0x901228F8,
+    0x7E8C6F62, 0xBC3773BF, 0x0C6B47B1, 0xBE3A6C1B, 0xAC0BB555, 0xFF4FED4A,
+    0x77BE463F, 0x10DBC150, 0x1A0BA125, 0x07F4793A, 0x21EF2054, 0x4CA7B18F,
+    0x60EDBD48, 0x2E775066, 0x73134D0B, 0x3FB32C9B
+};
+
+static const BN_ULONG dh2048_256_q[] = {
+    0x64F5FBD3, 0xA308B0FE, 0x1EB3750B, 0x99B1A47D, 0x40129DA2, 0xB4479976,
+    0xA709A097, 0x8CF83642
+};
+
+/* Primes from RFC 7919 */
+
+static const BN_ULONG ffdhe2048_p[] = {
+    0xFFFFFFFF, 0xFFFFFFFF, 0x61285C97, 0x886B4238, 0xC1B2EFFA, 0xC6F34A26,
+    0x7D1683B2, 0xC58EF183, 0x2EC22005, 0x3BB5FCBC, 0x4C6FAD73, 0xC3FE3B1B,
+    0xEEF28183, 0x8E4F1232, 0xE98583FF, 0x9172FE9C, 0x28342F61, 0xC03404CD,
+    0xCDF7E2EC, 0x9E02FCE1, 0xEE0A6D70, 0x0B07A7C8, 0x6372BB19, 0xAE56EDE7,
+    0xDE394DF4, 0x1D4F42A3, 0x60D7F468, 0xB96ADAB7, 0xB2C8E3FB, 0xD108A94B,
+    0xB324FB61, 0xBC0AB182, 0x483A797A, 0x30ACCA4F, 0x36ADE735, 0x1DF158A1,
+    0xF3EFE872, 0xE2A689DA, 0xE0E68B77, 0x984F0C70, 0x7F57C935, 0xB557135E,
+    0x3DED1AF3, 0x85636555, 0x5F066ED0, 0x2433F51F, 0xD5FD6561, 0xD3DF1ED5,
+    0xAEC4617A, 0xF681B202, 0x630C75D8, 0x7D2FE363, 0x249B3EF9, 0xCC939DCE,
+    0x146433FB, 0xA9E13641, 0xCE2D3695, 0xD8B9C583, 0x273D3CF1, 0xAFDC5620,
+    0xA2BB4A9A, 0xADF85458, 0xFFFFFFFF, 0xFFFFFFFF
+};
+
+static const BN_ULONG ffdhe3072_p[] = {
+    0xFFFFFFFF, 0xFFFFFFFF, 0x66C62E37, 0x25E41D2B, 0x3FD59D7C, 0x3C1B20EE,
+    0xFA53DDEF, 0x0ABCD06B, 0xD5C4484E, 0x1DBF9A42, 0x9B0DEADA, 0xABC52197,
+    0x22363A0D, 0xE86D2BC5, 0x9C9DF69E, 0x5CAE82AB, 0x71F54BFF, 0x64F2E21E,
+    0xE2D74DD3, 0xF4FD4452, 0xBC437944, 0xB4130C93, 0x85139270, 0xAEFE1309,
+    0xC186D91C, 0x598CB0FA, 0x91F7F7EE, 0x7AD91D26, 0xD6E6C907, 0x61B46FC9,
+    0xF99C0238, 0xBC34F4DE, 0x6519035B, 0xDE355B3B, 0x611FCFDC, 0x886B4238,
+    0xC1B2EFFA, 0xC6F34A26, 0x7D1683B2, 0xC58EF183, 0x2EC22005, 0x3BB5FCBC,
+    0x4C6FAD73, 0xC3FE3B1B, 0xEEF28183, 0x8E4F1232, 0xE98583FF, 0x9172FE9C,
+    0x28342F61, 0xC03404CD, 0xCDF7E2EC, 0x9E02FCE1, 0xEE0A6D70, 0x0B07A7C8,
+    0x6372BB19, 0xAE56EDE7, 0xDE394DF4, 0x1D4F42A3, 0x60D7F468, 0xB96ADAB7,
+    0xB2C8E3FB, 0xD108A94B, 0xB324FB61, 0xBC0AB182, 0x483A797A, 0x30ACCA4F,
+    0x36ADE735, 0x1DF158A1, 0xF3EFE872, 0xE2A689DA, 0xE0E68B77, 0x984F0C70,
+    0x7F57C935, 0xB557135E, 0x3DED1AF3, 0x85636555, 0x5F066ED0, 0x2433F51F,
+    0xD5FD6561, 0xD3DF1ED5, 0xAEC4617A, 0xF681B202, 0x630C75D8, 0x7D2FE363,
+    0x249B3EF9, 0xCC939DCE, 0x146433FB, 0xA9E13641, 0xCE2D3695, 0xD8B9C583,
+    0x273D3CF1, 0xAFDC5620, 0xA2BB4A9A, 0xADF85458, 0xFFFFFFFF, 0xFFFFFFFF
+};
+
+static const BN_ULONG ffdhe4096_p[] = {
+    0xFFFFFFFF, 0xFFFFFFFF, 0x5E655F6A, 0xC68A007E, 0xF44182E1, 0x4DB5A851,
+    0x7F88A46B, 0x8EC9B55A, 0xCEC97DCF, 0x0A8291CD, 0xF98D0ACC, 0x2A4ECEA9,
+    0x7140003C, 0x1A1DB93D, 0x33CB8B7A, 0x092999A3, 0x71AD0038, 0x6DC778F9,
+    0x918130C4, 0xA907600A, 0x2D9E6832, 0xED6A1E01, 0xEFB4318A, 0x7135C886,
+    0x7E31CC7A, 0x87F55BA5, 0x55034004, 0x7763CF1D, 0xD69F6D18, 0xAC7D5F42,
+    0xE58857B6, 0x7930E9E4, 0x164DF4FB, 0x6E6F52C3, 0x669E1EF1, 0x25E41D2B,
+    0x3FD59D7C, 0x3C1B20EE, 0xFA53DDEF, 0x0ABCD06B, 0xD5C4484E, 0x1DBF9A42,
+    0x9B0DEADA, 0xABC52197, 0x22363A0D, 0xE86D2BC5, 0x9C9DF69E, 0x5CAE82AB,
+    0x71F54BFF, 0x64F2E21E, 0xE2D74DD3, 0xF4FD4452, 0xBC437944, 0xB4130C93,
+    0x85139270, 0xAEFE1309, 0xC186D91C, 0x598CB0FA, 0x91F7F7EE, 0x7AD91D26,
+    0xD6E6C907, 0x61B46FC9, 0xF99C0238, 0xBC34F4DE, 0x6519035B, 0xDE355B3B,
+    0x611FCFDC, 0x886B4238, 0xC1B2EFFA, 0xC6F34A26, 0x7D1683B2, 0xC58EF183,
+    0x2EC22005, 0x3BB5FCBC, 0x4C6FAD73, 0xC3FE3B1B, 0xEEF28183, 0x8E4F1232,
+    0xE98583FF, 0x9172FE9C, 0x28342F61, 0xC03404CD, 0xCDF7E2EC, 0x9E02FCE1,
+    0xEE0A6D70, 0x0B07A7C8, 0x6372BB19, 0xAE56EDE7, 0xDE394DF4, 0x1D4F42A3,
+    0x60D7F468, 0xB96ADAB7, 0xB2C8E3FB, 0xD108A94B, 0xB324FB61, 0xBC0AB182,
+    0x483A797A, 0x30ACCA4F, 0x36ADE735, 0x1DF158A1, 0xF3EFE872, 0xE2A689DA,
+    0xE0E68B77, 0x984F0C70, 0x7F57C935, 0xB557135E, 0x3DED1AF3, 0x85636555,
+    0x5F066ED0, 0x2433F51F, 0xD5FD6561, 0xD3DF1ED5, 0xAEC4617A, 0xF681B202,
+    0x630C75D8, 0x7D2FE363, 0x249B3EF9, 0xCC939DCE, 0x146433FB, 0xA9E13641,
+    0xCE2D3695, 0xD8B9C583, 0x273D3CF1, 0xAFDC5620, 0xA2BB4A9A, 0xADF85458,
+    0xFFFFFFFF, 0xFFFFFFFF
+};
+
+static const BN_ULONG ffdhe6144_p[] = {
+    0xFFFFFFFF, 0xFFFFFFFF, 0xD0E40E65, 0xA40E329C, 0x7938DAD4, 0xA41D570D,
+    0xD43161C1, 0x62A69526, 0x9ADB1E69, 0x3FDD4A8E, 0xDC6B80D6, 0x5B3B71F9,
+    0xC6272B04, 0xEC9D1810, 0xCACEF403, 0x8CCF2DD5, 0xC95B9117, 0xE49F5235,
+    0xB854338A, 0x505DC82D, 0x1562A846, 0x62292C31, 0x6AE77F5E, 0xD72B0374,
+    0x462D538C, 0xF9C9091B, 0x47A67CBE, 0x0AE8DB58, 0x22611682, 0xB3A739C1,
+    0x2A281BF6, 0xEEAAC023, 0x77CAF992, 0x94C6651E, 0x94B2BBC1, 0x763E4E4B,
+    0x0077D9B4, 0x587E38DA, 0x183023C3, 0x7FB29F8C, 0xF9E3A26E, 0x0ABEC1FF,
+    0x350511E3, 0xA00EF092, 0xDB6340D8, 0xB855322E, 0xA9A96910, 0xA52471F7,
+    0x4CFDB477, 0x388147FB, 0x4E46041F, 0x9B1F5C3E, 0xFCCFEC71, 0xCDAD0657,
+    0x4C701C3A, 0xB38E8C33, 0xB1C0FD4C, 0x917BDD64, 0x9B7624C8, 0x3BB45432,
+    0xCAF53EA6, 0x23BA4442, 0x38532A3A, 0x4E677D2C, 0x45036C7A, 0x0BFD64B6,
+    0x5E0DD902, 0xC68A007E, 0xF44182E1, 0x4DB5A851, 0x7F88A46B, 0x8EC9B55A,
+    0xCEC97DCF, 0x0A8291CD, 0xF98D0ACC, 0x2A4ECEA9, 0x7140003C, 0x1A1DB93D,
+    0x33CB8B7A, 0x092999A3, 0x71AD0038, 0x6DC778F9, 0x918130C4, 0xA907600A,
+    0x2D9E6832, 0xED6A1E01, 0xEFB4318A, 0x7135C886, 0x7E31CC7A, 0x87F55BA5,
+    0x55034004, 0x7763CF1D, 0xD69F6D18, 0xAC7D5F42, 0xE58857B6, 0x7930E9E4,
+    0x164DF4FB, 0x6E6F52C3, 0x669E1EF1, 0x25E41D2B, 0x3FD59D7C, 0x3C1B20EE,
+    0xFA53DDEF, 0x0ABCD06B, 0xD5C4484E, 0x1DBF9A42, 0x9B0DEADA, 0xABC52197,
+    0x22363A0D, 0xE86D2BC5, 0x9C9DF69E, 0x5CAE82AB, 0x71F54BFF, 0x64F2E21E,
+    0xE2D74DD3, 0xF4FD4452, 0xBC437944, 0xB4130C93, 0x85139270, 0xAEFE1309,
+    0xC186D91C, 0x598CB0FA, 0x91F7F7EE, 0x7AD91D26, 0xD6E6C907, 0x61B46FC9,
+    0xF99C0238, 0xBC34F4DE, 0x6519035B, 0xDE355B3B, 0x611FCFDC, 0x886B4238,
+    0xC1B2EFFA, 0xC6F34A26, 0x7D1683B2, 0xC58EF183, 0x2EC22005, 0x3BB5FCBC,
+    0x4C6FAD73, 0xC3FE3B1B, 0xEEF28183, 0x8E4F1232, 0xE98583FF, 0x9172FE9C,
+    0x28342F61, 0xC03404CD, 0xCDF7E2EC, 0x9E02FCE1, 0xEE0A6D70, 0x0B07A7C8,
+    0x6372BB19, 0xAE56EDE7, 0xDE394DF4, 0x1D4F42A3, 0x60D7F468, 0xB96ADAB7,
+    0xB2C8E3FB, 0xD108A94B, 0xB324FB61, 0xBC0AB182, 0x483A797A, 0x30ACCA4F,
+    0x36ADE735, 0x1DF158A1, 0xF3EFE872, 0xE2A689DA, 0xE0E68B77, 0x984F0C70,
+    0x7F57C935, 0xB557135E, 0x3DED1AF3, 0x85636555, 0x5F066ED0, 0x2433F51F,
+    0xD5FD6561, 0xD3DF1ED5, 0xAEC4617A, 0xF681B202, 0x630C75D8, 0x7D2FE363,
+    0x249B3EF9, 0xCC939DCE, 0x146433FB, 0xA9E13641, 0xCE2D3695, 0xD8B9C583,
+    0x273D3CF1, 0xAFDC5620, 0xA2BB4A9A, 0xADF85458, 0xFFFFFFFF, 0xFFFFFFFF
+};
+
+static const BN_ULONG ffdhe8192_p[] = {
+    0xFFFFFFFF, 0xFFFFFFFF, 0xC5C6424C, 0xD68C8BB7, 0x838FF88C, 0x011E2A94,
+    0xA9F4614E, 0x0822E506, 0xF7A8443D, 0x97D11D49, 0x30677F0D, 0xA6BBFDE5,
+    0xC1FE86FE, 0x2F741EF8, 0x5D71A87E, 0xFAFABE1C, 0xFBE58A30, 0xDED2FBAB,
+    0x72B0A66E, 0xB6855DFE, 0xBA8A4FE8, 0x1EFC8CE0, 0x3F2FA457, 0x83F81D4A,
+    0xA577E231, 0xA1FE3075, 0x88D9C0A0, 0xD5B80194, 0xAD9A95F9, 0x624816CD,
+    0x50C1217B, 0x99E9E316, 0x0E423CFC, 0x51AA691E, 0x3826E52C, 0x1C217E6C,
+    0x09703FEE, 0x51A8A931, 0x6A460E74, 0xBB709987, 0x9C86B022, 0x541FC68C,
+    0x46FD8251, 0x59160CC0, 0x35C35F5C, 0x2846C0BA, 0x8B758282, 0x54504AC7,
+    0xD2AF05E4, 0x29388839, 0xC01BD702, 0xCB2C0F1C, 0x7C932665, 0x555B2F74,
+    0xA3AB8829, 0x86B63142, 0xF64B10EF, 0x0B8CC3BD, 0xEDD1CC5E, 0x687FEB69,
+    0xC9509D43, 0xFDB23FCE, 0xD951AE64, 0x1E425A31, 0xF600C838, 0x36AD004C,
+    0xCFF46AAA, 0xA40E329C, 0x7938DAD4, 0xA41D570D, 0xD43161C1, 0x62A69526,
+    0x9ADB1E69, 0x3FDD4A8E, 0xDC6B80D6, 0x5B3B71F9, 0xC6272B04, 0xEC9D1810,
+    0xCACEF403, 0x8CCF2DD5, 0xC95B9117, 0xE49F5235, 0xB854338A, 0x505DC82D,
+    0x1562A846, 0x62292C31, 0x6AE77F5E, 0xD72B0374, 0x462D538C, 0xF9C9091B,
+    0x47A67CBE, 0x0AE8DB58, 0x22611682, 0xB3A739C1, 0x2A281BF6, 0xEEAAC023,
+    0x77CAF992, 0x94C6651E, 0x94B2BBC1, 0x763E4E4B, 0x0077D9B4, 0x587E38DA,
+    0x183023C3, 0x7FB29F8C, 0xF9E3A26E, 0x0ABEC1FF, 0x350511E3, 0xA00EF092,
+    0xDB6340D8, 0xB855322E, 0xA9A96910, 0xA52471F7, 0x4CFDB477, 0x388147FB,
+    0x4E46041F, 0x9B1F5C3E, 0xFCCFEC71, 0xCDAD0657, 0x4C701C3A, 0xB38E8C33,
+    0xB1C0FD4C, 0x917BDD64, 0x9B7624C8, 0x3BB45432, 0xCAF53EA6, 0x23BA4442,
+    0x38532A3A, 0x4E677D2C, 0x45036C7A, 0x0BFD64B6, 0x5E0DD902, 0xC68A007E,
+    0xF44182E1, 0x4DB5A851, 0x7F88A46B, 0x8EC9B55A, 0xCEC97DCF, 0x0A8291CD,
+    0xF98D0ACC, 0x2A4ECEA9, 0x7140003C, 0x1A1DB93D, 0x33CB8B7A, 0x092999A3,
+    0x71AD0038, 0x6DC778F9, 0x918130C4, 0xA907600A, 0x2D9E6832, 0xED6A1E01,
+    0xEFB4318A, 0x7135C886, 0x7E31CC7A, 0x87F55BA5, 0x55034004, 0x7763CF1D,
+    0xD69F6D18, 0xAC7D5F42, 0xE58857B6, 0x7930E9E4, 0x164DF4FB, 0x6E6F52C3,
+    0x669E1EF1, 0x25E41D2B, 0x3FD59D7C, 0x3C1B20EE, 0xFA53DDEF, 0x0ABCD06B,
+    0xD5C4484E, 0x1DBF9A42, 0x9B0DEADA, 0xABC52197, 0x22363A0D, 0xE86D2BC5,
+    0x9C9DF69E, 0x5CAE82AB, 0x71F54BFF, 0x64F2E21E, 0xE2D74DD3, 0xF4FD4452,
+    0xBC437944, 0xB4130C93, 0x85139270, 0xAEFE1309, 0xC186D91C, 0x598CB0FA,
+    0x91F7F7EE, 0x7AD91D26, 0xD6E6C907, 0x61B46FC9, 0xF99C0238, 0xBC34F4DE,
+    0x6519035B, 0xDE355B3B, 0x611FCFDC, 0x886B4238, 0xC1B2EFFA, 0xC6F34A26,
+    0x7D1683B2, 0xC58EF183, 0x2EC22005, 0x3BB5FCBC, 0x4C6FAD73, 0xC3FE3B1B,
+    0xEEF28183, 0x8E4F1232, 0xE98583FF, 0x9172FE9C, 0x28342F61, 0xC03404CD,
+    0xCDF7E2EC, 0x9E02FCE1, 0xEE0A6D70, 0x0B07A7C8, 0x6372BB19, 0xAE56EDE7,
+    0xDE394DF4, 0x1D4F42A3, 0x60D7F468, 0xB96ADAB7, 0xB2C8E3FB, 0xD108A94B,
+    0xB324FB61, 0xBC0AB182, 0x483A797A, 0x30ACCA4F, 0x36ADE735, 0x1DF158A1,
+    0xF3EFE872, 0xE2A689DA, 0xE0E68B77, 0x984F0C70, 0x7F57C935, 0xB557135E,
+    0x3DED1AF3, 0x85636555, 0x5F066ED0, 0x2433F51F, 0xD5FD6561, 0xD3DF1ED5,
+    0xAEC4617A, 0xF681B202, 0x630C75D8, 0x7D2FE363, 0x249B3EF9, 0xCC939DCE,
+    0x146433FB, 0xA9E13641, 0xCE2D3695, 0xD8B9C583, 0x273D3CF1, 0xAFDC5620,
+    0xA2BB4A9A, 0xADF85458, 0xFFFFFFFF, 0xFFFFFFFF
+};
+
+# else
+#  error "unsupported BN_BITS2"
+# endif
+
+/* Macro to make a BIGNUM from static data */
+
+# define make_dh_bn(x) extern const BIGNUM _bignum_##x; \
+                       const BIGNUM _bignum_##x = { (BN_ULONG *) x, \
+                        OSSL_NELEM(x),\
+                        OSSL_NELEM(x),\
+                        0, BN_FLG_STATIC_DATA };
+
+static const BN_ULONG value_2 = 2;
+
+const BIGNUM _bignum_const_2 =
+    { (BN_ULONG *)&value_2, 1, 1, 0, BN_FLG_STATIC_DATA };
+
+make_dh_bn(dh1024_160_p)
+make_dh_bn(dh1024_160_g)
+make_dh_bn(dh1024_160_q)
+make_dh_bn(dh2048_224_p)
+make_dh_bn(dh2048_224_g)
+make_dh_bn(dh2048_224_q)
+make_dh_bn(dh2048_256_p)
+make_dh_bn(dh2048_256_g)
+make_dh_bn(dh2048_256_q)
+
+make_dh_bn(ffdhe2048_p)
+make_dh_bn(ffdhe3072_p)
+make_dh_bn(ffdhe4096_p)
+make_dh_bn(ffdhe6144_p)
+make_dh_bn(ffdhe8192_p)
+
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_div.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_div.c
new file mode 100644
index 000000000..3a6fa0a1b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_div.c
@@ -0,0 +1,457 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <assert.h>
+#include <openssl/bn.h>
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+/* The old slow way */
+#if 0
+int BN_div(BIGNUM *dv, BIGNUM *rem, const BIGNUM *m, const BIGNUM *d,
+           BN_CTX *ctx)
+{
+    int i, nm, nd;
+    int ret = 0;
+    BIGNUM *D;
+
+    bn_check_top(m);
+    bn_check_top(d);
+    if (BN_is_zero(d)) {
+        BNerr(BN_F_BN_DIV, BN_R_DIV_BY_ZERO);
+        return 0;
+    }
+
+    if (BN_ucmp(m, d) < 0) {
+        if (rem != NULL) {
+            if (BN_copy(rem, m) == NULL)
+                return 0;
+        }
+        if (dv != NULL)
+            BN_zero(dv);
+        return 1;
+    }
+
+    BN_CTX_start(ctx);
+    D = BN_CTX_get(ctx);
+    if (dv == NULL)
+        dv = BN_CTX_get(ctx);
+    if (rem == NULL)
+        rem = BN_CTX_get(ctx);
+    if (D == NULL || dv == NULL || rem == NULL)
+        goto end;
+
+    nd = BN_num_bits(d);
+    nm = BN_num_bits(m);
+    if (BN_copy(D, d) == NULL)
+        goto end;
+    if (BN_copy(rem, m) == NULL)
+        goto end;
+
+    /*
+     * The next 2 are needed so we can do a dv->d[0]|=1 later since
+     * BN_lshift1 will only work once there is a value :-)
+     */
+    BN_zero(dv);
+    if (bn_wexpand(dv, 1) == NULL)
+        goto end;
+    dv->top = 1;
+
+    if (!BN_lshift(D, D, nm - nd))
+        goto end;
+    for (i = nm - nd; i >= 0; i--) {
+        if (!BN_lshift1(dv, dv))
+            goto end;
+        if (BN_ucmp(rem, D) >= 0) {
+            dv->d[0] |= 1;
+            if (!BN_usub(rem, rem, D))
+                goto end;
+        }
+/* CAN IMPROVE (and have now :=) */
+        if (!BN_rshift1(D, D))
+            goto end;
+    }
+    rem->neg = BN_is_zero(rem) ? 0 : m->neg;
+    dv->neg = m->neg ^ d->neg;
+    ret = 1;
+ end:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+#else
+
+# if defined(BN_DIV3W)
+BN_ULONG bn_div_3_words(const BN_ULONG *m, BN_ULONG d1, BN_ULONG d0);
+# elif 0
+/*
+ * This is #if-ed away, because it's a reference for assembly implementations,
+ * where it can and should be made constant-time. But if you want to test it,
+ * just replace 0 with 1.
+ */
+#  if BN_BITS2 == 64 && defined(__SIZEOF_INT128__) && __SIZEOF_INT128__==16
+#   undef BN_ULLONG
+#   define BN_ULLONG __uint128_t
+#   define BN_LLONG
+#  endif
+
+#  ifdef BN_LLONG
+#   define BN_DIV3W
+/*
+ * Interface is somewhat quirky, |m| is pointer to most significant limb,
+ * and less significant limb is referred at |m[-1]|. This means that caller
+ * is responsible for ensuring that |m[-1]| is valid. Second condition that
+ * has to be met is that |d0|'s most significant bit has to be set. Or in
+ * other words divisor has to be "bit-aligned to the left." bn_div_fixed_top
+ * does all this. The subroutine considers four limbs, two of which are
+ * "overlapping," hence the name...
+ */
+static BN_ULONG bn_div_3_words(const BN_ULONG *m, BN_ULONG d1, BN_ULONG d0)
+{
+    BN_ULLONG R = ((BN_ULLONG)m[0] << BN_BITS2) | m[-1];
+    BN_ULLONG D = ((BN_ULLONG)d0 << BN_BITS2) | d1;
+    BN_ULONG Q = 0, mask;
+    int i;
+
+    for (i = 0; i < BN_BITS2; i++) {
+        Q <<= 1;
+        if (R >= D) {
+            Q |= 1;
+            R -= D;
+        }
+        D >>= 1;
+    }
+
+    mask = 0 - (Q >> (BN_BITS2 - 1));   /* does it overflow? */
+
+    Q <<= 1;
+    Q |= (R >= D);
+
+    return (Q | mask) & BN_MASK2;
+}
+#  endif
+# endif
+
+static int bn_left_align(BIGNUM *num)
+{
+    BN_ULONG *d = num->d, n, m, rmask;
+    int top = num->top;
+    int rshift = BN_num_bits_word(d[top - 1]), lshift, i;
+
+    lshift = BN_BITS2 - rshift;
+    rshift %= BN_BITS2;            /* say no to undefined behaviour */
+    rmask = (BN_ULONG)0 - rshift;  /* rmask = 0 - (rshift != 0) */
+    rmask |= rmask >> 8;
+
+    for (i = 0, m = 0; i < top; i++) {
+        n = d[i];
+        d[i] = ((n << lshift) | m) & BN_MASK2;
+        m = (n >> rshift) & rmask;
+    }
+
+    return lshift;
+}
+
+# if !defined(OPENSSL_NO_ASM) && !defined(OPENSSL_NO_INLINE_ASM) \
+    && !defined(PEDANTIC) && !defined(BN_DIV3W)
+#  if defined(__GNUC__) && __GNUC__>=2
+#   if defined(__i386) || defined (__i386__)
+   /*-
+    * There were two reasons for implementing this template:
+    * - GNU C generates a call to a function (__udivdi3 to be exact)
+    *   in reply to ((((BN_ULLONG)n0)<<BN_BITS2)|n1)/d0 (I fail to
+    *   understand why...);
+    * - divl doesn't only calculate quotient, but also leaves
+    *   remainder in %edx which we can definitely use here:-)
+    */
+#    undef bn_div_words
+#    define bn_div_words(n0,n1,d0)                \
+        ({  asm volatile (                      \
+                "divl   %4"                     \
+                : "=a"(q), "=d"(rem)            \
+                : "a"(n1), "d"(n0), "r"(d0)     \
+                : "cc");                        \
+            q;                                  \
+        })
+#    define REMAINDER_IS_ALREADY_CALCULATED
+#   elif defined(__x86_64) && defined(SIXTY_FOUR_BIT_LONG)
+   /*
+    * Same story here, but it's 128-bit by 64-bit division. Wow!
+    */
+#    undef bn_div_words
+#    define bn_div_words(n0,n1,d0)                \
+        ({  asm volatile (                      \
+                "divq   %4"                     \
+                : "=a"(q), "=d"(rem)            \
+                : "a"(n1), "d"(n0), "r"(d0)     \
+                : "cc");                        \
+            q;                                  \
+        })
+#    define REMAINDER_IS_ALREADY_CALCULATED
+#   endif                       /* __<cpu> */
+#  endif                        /* __GNUC__ */
+# endif                         /* OPENSSL_NO_ASM */
+
+/*-
+ * BN_div computes  dv := num / divisor, rounding towards
+ * zero, and sets up rm  such that  dv*divisor + rm = num  holds.
+ * Thus:
+ *     dv->neg == num->neg ^ divisor->neg  (unless the result is zero)
+ *     rm->neg == num->neg                 (unless the remainder is zero)
+ * If 'dv' or 'rm' is NULL, the respective value is not returned.
+ */
+int BN_div(BIGNUM *dv, BIGNUM *rm, const BIGNUM *num, const BIGNUM *divisor,
+           BN_CTX *ctx)
+{
+    int ret;
+
+    if (BN_is_zero(divisor)) {
+        BNerr(BN_F_BN_DIV, BN_R_DIV_BY_ZERO);
+        return 0;
+    }
+
+    /*
+     * Invalid zero-padding would have particularly bad consequences so don't
+     * just rely on bn_check_top() here (bn_check_top() works only for
+     * BN_DEBUG builds)
+     */
+    if (divisor->d[divisor->top - 1] == 0) {
+        BNerr(BN_F_BN_DIV, BN_R_NOT_INITIALIZED);
+        return 0;
+    }
+
+    ret = bn_div_fixed_top(dv, rm, num, divisor, ctx);
+
+    if (ret) {
+        if (dv != NULL)
+            bn_correct_top(dv);
+        if (rm != NULL)
+            bn_correct_top(rm);
+    }
+
+    return ret;
+}
+
+/*
+ * It's argued that *length* of *significant* part of divisor is public.
+ * Even if it's private modulus that is. Again, *length* is assumed
+ * public, but not *value*. Former is likely to be pre-defined by
+ * algorithm with bit granularity, though below subroutine is invariant
+ * of limb length. Thanks to this assumption we can require that |divisor|
+ * may not be zero-padded, yet claim this subroutine "constant-time"(*).
+ * This is because zero-padded dividend, |num|, is tolerated, so that
+ * caller can pass dividend of public length(*), but with smaller amount
+ * of significant limbs. This naturally means that quotient, |dv|, would
+ * contain correspongly less significant limbs as well, and will be zero-
+ * padded accordingly. Returned remainder, |rm|, will have same bit length
+ * as divisor, also zero-padded if needed. These actually leave sign bits
+ * in ambiguous state. In sense that we try to avoid negative zeros, while
+ * zero-padded zeros would retain sign.
+ *
+ * (*) "Constant-time-ness" has two pre-conditions:
+ *
+ *     - availability of constant-time bn_div_3_words;
+ *     - dividend is at least as "wide" as divisor, limb-wise, zero-padded
+ *       if so requied, which shouldn't be a privacy problem, because
+ *       divisor's length is considered public;
+ */
+int bn_div_fixed_top(BIGNUM *dv, BIGNUM *rm, const BIGNUM *num,
+                     const BIGNUM *divisor, BN_CTX *ctx)
+{
+    int norm_shift, i, j, loop;
+    BIGNUM *tmp, *snum, *sdiv, *res;
+    BN_ULONG *resp, *wnum, *wnumtop;
+    BN_ULONG d0, d1;
+    int num_n, div_n;
+
+    assert(divisor->top > 0 && divisor->d[divisor->top - 1] != 0);
+
+    bn_check_top(num);
+    bn_check_top(divisor);
+    bn_check_top(dv);
+    bn_check_top(rm);
+
+    BN_CTX_start(ctx);
+    res = (dv == NULL) ? BN_CTX_get(ctx) : dv;
+    tmp = BN_CTX_get(ctx);
+    snum = BN_CTX_get(ctx);
+    sdiv = BN_CTX_get(ctx);
+    if (sdiv == NULL)
+        goto err;
+
+    /* First we normalise the numbers */
+    if (!BN_copy(sdiv, divisor))
+        goto err;
+    norm_shift = bn_left_align(sdiv);
+    sdiv->neg = 0;
+    /*
+     * Note that bn_lshift_fixed_top's output is always one limb longer
+     * than input, even when norm_shift is zero. This means that amount of
+     * inner loop iterations is invariant of dividend value, and that one
+     * doesn't need to compare dividend and divisor if they were originally
+     * of the same bit length.
+     */
+    if (!(bn_lshift_fixed_top(snum, num, norm_shift)))
+        goto err;
+
+    div_n = sdiv->top;
+    num_n = snum->top;
+
+    if (num_n <= div_n) {
+        /* caller didn't pad dividend -> no constant-time guarantee... */
+        if (bn_wexpand(snum, div_n + 1) == NULL)
+            goto err;
+        memset(&(snum->d[num_n]), 0, (div_n - num_n + 1) * sizeof(BN_ULONG));
+        snum->top = num_n = div_n + 1;
+    }
+
+    loop = num_n - div_n;
+    /*
+     * Lets setup a 'window' into snum This is the part that corresponds to
+     * the current 'area' being divided
+     */
+    wnum = &(snum->d[loop]);
+    wnumtop = &(snum->d[num_n - 1]);
+
+    /* Get the top 2 words of sdiv */
+    d0 = sdiv->d[div_n - 1];
+    d1 = (div_n == 1) ? 0 : sdiv->d[div_n - 2];
+
+    /* Setup quotient */
+    if (!bn_wexpand(res, loop))
+        goto err;
+    res->neg = (num->neg ^ divisor->neg);
+    res->top = loop;
+    res->flags |= BN_FLG_FIXED_TOP;
+    resp = &(res->d[loop]);
+
+    /* space for temp */
+    if (!bn_wexpand(tmp, (div_n + 1)))
+        goto err;
+
+    for (i = 0; i < loop; i++, wnumtop--) {
+        BN_ULONG q, l0;
+        /*
+         * the first part of the loop uses the top two words of snum and sdiv
+         * to calculate a BN_ULONG q such that | wnum - sdiv * q | < sdiv
+         */
+# if defined(BN_DIV3W)
+        q = bn_div_3_words(wnumtop, d1, d0);
+# else
+        BN_ULONG n0, n1, rem = 0;
+
+        n0 = wnumtop[0];
+        n1 = wnumtop[-1];
+        if (n0 == d0)
+            q = BN_MASK2;
+        else {                  /* n0 < d0 */
+            BN_ULONG n2 = (wnumtop == wnum) ? 0 : wnumtop[-2];
+#  ifdef BN_LLONG
+            BN_ULLONG t2;
+
+#   if defined(BN_LLONG) && defined(BN_DIV2W) && !defined(bn_div_words)
+            q = (BN_ULONG)(((((BN_ULLONG) n0) << BN_BITS2) | n1) / d0);
+#   else
+            q = bn_div_words(n0, n1, d0);
+#   endif
+
+#   ifndef REMAINDER_IS_ALREADY_CALCULATED
+            /*
+             * rem doesn't have to be BN_ULLONG. The least we
+             * know it's less that d0, isn't it?
+             */
+            rem = (n1 - q * d0) & BN_MASK2;
+#   endif
+            t2 = (BN_ULLONG) d1 *q;
+
+            for (;;) {
+                if (t2 <= ((((BN_ULLONG) rem) << BN_BITS2) | n2))
+                    break;
+                q--;
+                rem += d0;
+                if (rem < d0)
+                    break;      /* don't let rem overflow */
+                t2 -= d1;
+            }
+#  else                         /* !BN_LLONG */
+            BN_ULONG t2l, t2h;
+
+            q = bn_div_words(n0, n1, d0);
+#   ifndef REMAINDER_IS_ALREADY_CALCULATED
+            rem = (n1 - q * d0) & BN_MASK2;
+#   endif
+
+#   if defined(BN_UMULT_LOHI)
+            BN_UMULT_LOHI(t2l, t2h, d1, q);
+#   elif defined(BN_UMULT_HIGH)
+            t2l = d1 * q;
+            t2h = BN_UMULT_HIGH(d1, q);
+#   else
+            {
+                BN_ULONG ql, qh;
+                t2l = LBITS(d1);
+                t2h = HBITS(d1);
+                ql = LBITS(q);
+                qh = HBITS(q);
+                mul64(t2l, t2h, ql, qh); /* t2=(BN_ULLONG)d1*q; */
+            }
+#   endif
+
+            for (;;) {
+                if ((t2h < rem) || ((t2h == rem) && (t2l <= n2)))
+                    break;
+                q--;
+                rem += d0;
+                if (rem < d0)
+                    break;      /* don't let rem overflow */
+                if (t2l < d1)
+                    t2h--;
+                t2l -= d1;
+            }
+#  endif                        /* !BN_LLONG */
+        }
+# endif                         /* !BN_DIV3W */
+
+        l0 = bn_mul_words(tmp->d, sdiv->d, div_n, q);
+        tmp->d[div_n] = l0;
+        wnum--;
+        /*
+         * ignore top values of the bignums just sub the two BN_ULONG arrays
+         * with bn_sub_words
+         */
+        l0 = bn_sub_words(wnum, wnum, tmp->d, div_n + 1);
+        q -= l0;
+        /*
+         * Note: As we have considered only the leading two BN_ULONGs in
+         * the calculation of q, sdiv * q might be greater than wnum (but
+         * then (q-1) * sdiv is less or equal than wnum)
+         */
+        for (l0 = 0 - l0, j = 0; j < div_n; j++)
+            tmp->d[j] = sdiv->d[j] & l0;
+        l0 = bn_add_words(wnum, wnum, tmp->d, div_n);
+        (*wnumtop) += l0;
+        assert((*wnumtop) == 0);
+
+        /* store part of the result */
+        *--resp = q;
+    }
+    /* snum holds remainder, it's as wide as divisor */
+    snum->neg = num->neg;
+    snum->top = div_n;
+    snum->flags |= BN_FLG_FIXED_TOP;
+    if (rm != NULL)
+        bn_rshift_fixed_top(rm, snum, norm_shift);
+    BN_CTX_end(ctx);
+    return 1;
+ err:
+    bn_check_top(rm);
+    BN_CTX_end(ctx);
+    return 0;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_err.c
new file mode 100644
index 000000000..dd87c152c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_err.c
@@ -0,0 +1,118 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/bnerr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA BN_str_functs[] = {
+    {ERR_PACK(ERR_LIB_BN, BN_F_BNRAND, 0), "bnrand"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BNRAND_RANGE, 0), "bnrand_range"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_BLINDING_CONVERT_EX, 0),
+     "BN_BLINDING_convert_ex"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_BLINDING_CREATE_PARAM, 0),
+     "BN_BLINDING_create_param"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_BLINDING_INVERT_EX, 0),
+     "BN_BLINDING_invert_ex"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_BLINDING_NEW, 0), "BN_BLINDING_new"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_BLINDING_UPDATE, 0), "BN_BLINDING_update"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_BN2DEC, 0), "BN_bn2dec"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_BN2HEX, 0), "BN_bn2hex"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_COMPUTE_WNAF, 0), "bn_compute_wNAF"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_CTX_GET, 0), "BN_CTX_get"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_CTX_NEW, 0), "BN_CTX_new"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_CTX_START, 0), "BN_CTX_start"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_DIV, 0), "BN_div"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_DIV_RECP, 0), "BN_div_recp"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_EXP, 0), "BN_exp"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_EXPAND_INTERNAL, 0), "bn_expand_internal"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_GENCB_NEW, 0), "BN_GENCB_new"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_GENERATE_DSA_NONCE, 0),
+     "BN_generate_dsa_nonce"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_GENERATE_PRIME_EX, 0),
+     "BN_generate_prime_ex"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_GF2M_MOD, 0), "BN_GF2m_mod"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_GF2M_MOD_EXP, 0), "BN_GF2m_mod_exp"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_GF2M_MOD_MUL, 0), "BN_GF2m_mod_mul"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_GF2M_MOD_SOLVE_QUAD, 0),
+     "BN_GF2m_mod_solve_quad"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_GF2M_MOD_SOLVE_QUAD_ARR, 0),
+     "BN_GF2m_mod_solve_quad_arr"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_GF2M_MOD_SQR, 0), "BN_GF2m_mod_sqr"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_GF2M_MOD_SQRT, 0), "BN_GF2m_mod_sqrt"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_LSHIFT, 0), "BN_lshift"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_MOD_EXP2_MONT, 0), "BN_mod_exp2_mont"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_MOD_EXP_MONT, 0), "BN_mod_exp_mont"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_MOD_EXP_MONT_CONSTTIME, 0),
+     "BN_mod_exp_mont_consttime"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_MOD_EXP_MONT_WORD, 0),
+     "BN_mod_exp_mont_word"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_MOD_EXP_RECP, 0), "BN_mod_exp_recp"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_MOD_EXP_SIMPLE, 0), "BN_mod_exp_simple"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_MOD_INVERSE, 0), "BN_mod_inverse"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_MOD_INVERSE_NO_BRANCH, 0),
+     "BN_mod_inverse_no_branch"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_MOD_LSHIFT_QUICK, 0), "BN_mod_lshift_quick"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_MOD_SQRT, 0), "BN_mod_sqrt"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_MONT_CTX_NEW, 0), "BN_MONT_CTX_new"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_MPI2BN, 0), "BN_mpi2bn"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_NEW, 0), "BN_new"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_POOL_GET, 0), "BN_POOL_get"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_RAND, 0), "BN_rand"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_RAND_RANGE, 0), "BN_rand_range"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_RECP_CTX_NEW, 0), "BN_RECP_CTX_new"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_RSHIFT, 0), "BN_rshift"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_SET_WORDS, 0), "bn_set_words"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_STACK_PUSH, 0), "BN_STACK_push"},
+    {ERR_PACK(ERR_LIB_BN, BN_F_BN_USUB, 0), "BN_usub"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA BN_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_ARG2_LT_ARG3), "arg2 lt arg3"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_BAD_RECIPROCAL), "bad reciprocal"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_BIGNUM_TOO_LONG), "bignum too long"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_BITS_TOO_SMALL), "bits too small"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_CALLED_WITH_EVEN_MODULUS),
+    "called with even modulus"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_DIV_BY_ZERO), "div by zero"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_ENCODING_ERROR), "encoding error"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_EXPAND_ON_STATIC_BIGNUM_DATA),
+    "expand on static bignum data"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_INPUT_NOT_REDUCED), "input not reduced"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_INVALID_LENGTH), "invalid length"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_INVALID_RANGE), "invalid range"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_INVALID_SHIFT), "invalid shift"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_NOT_A_SQUARE), "not a square"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_NOT_INITIALIZED), "not initialized"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_NO_INVERSE), "no inverse"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_NO_SOLUTION), "no solution"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_PRIVATE_KEY_TOO_LARGE),
+    "private key too large"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_P_IS_NOT_PRIME), "p is not prime"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_TOO_MANY_ITERATIONS), "too many iterations"},
+    {ERR_PACK(ERR_LIB_BN, 0, BN_R_TOO_MANY_TEMPORARY_VARIABLES),
+    "too many temporary variables"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_BN_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(BN_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(BN_str_functs);
+        ERR_load_strings_const(BN_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_exp.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_exp.c
new file mode 100644
index 000000000..88f2baf0e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_exp.c
@@ -0,0 +1,1395 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "internal/constant_time_locl.h"
+#include "bn_lcl.h"
+
+#include <stdlib.h>
+#ifdef _WIN32
+# include <malloc.h>
+# ifndef alloca
+#  define alloca _alloca
+# endif
+#elif defined(__GNUC__)
+# ifndef alloca
+#  define alloca(s) __builtin_alloca((s))
+# endif
+#elif defined(__sun)
+# include <alloca.h>
+#endif
+
+#include "rsaz_exp.h"
+
+#undef SPARC_T4_MONT
+#if defined(OPENSSL_BN_ASM_MONT) && (defined(__sparc__) || defined(__sparc))
+# include "sparc_arch.h"
+extern unsigned int OPENSSL_sparcv9cap_P[];
+# define SPARC_T4_MONT
+#endif
+
+/* maximum precomputation table size for *variable* sliding windows */
+#define TABLE_SIZE      32
+
+/* this one works - simple but works */
+int BN_exp(BIGNUM *r, const BIGNUM *a, const BIGNUM *p, BN_CTX *ctx)
+{
+    int i, bits, ret = 0;
+    BIGNUM *v, *rr;
+
+    if (BN_get_flags(p, BN_FLG_CONSTTIME) != 0
+            || BN_get_flags(a, BN_FLG_CONSTTIME) != 0) {
+        /* BN_FLG_CONSTTIME only supported by BN_mod_exp_mont() */
+        BNerr(BN_F_BN_EXP, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+
+    BN_CTX_start(ctx);
+    rr = ((r == a) || (r == p)) ? BN_CTX_get(ctx) : r;
+    v = BN_CTX_get(ctx);
+    if (rr == NULL || v == NULL)
+        goto err;
+
+    if (BN_copy(v, a) == NULL)
+        goto err;
+    bits = BN_num_bits(p);
+
+    if (BN_is_odd(p)) {
+        if (BN_copy(rr, a) == NULL)
+            goto err;
+    } else {
+        if (!BN_one(rr))
+            goto err;
+    }
+
+    for (i = 1; i < bits; i++) {
+        if (!BN_sqr(v, v, ctx))
+            goto err;
+        if (BN_is_bit_set(p, i)) {
+            if (!BN_mul(rr, rr, v, ctx))
+                goto err;
+        }
+    }
+    if (r != rr && BN_copy(r, rr) == NULL)
+        goto err;
+
+    ret = 1;
+ err:
+    BN_CTX_end(ctx);
+    bn_check_top(r);
+    return ret;
+}
+
+int BN_mod_exp(BIGNUM *r, const BIGNUM *a, const BIGNUM *p, const BIGNUM *m,
+               BN_CTX *ctx)
+{
+    int ret;
+
+    bn_check_top(a);
+    bn_check_top(p);
+    bn_check_top(m);
+
+    /*-
+     * For even modulus  m = 2^k*m_odd, it might make sense to compute
+     * a^p mod m_odd  and  a^p mod 2^k  separately (with Montgomery
+     * exponentiation for the odd part), using appropriate exponent
+     * reductions, and combine the results using the CRT.
+     *
+     * For now, we use Montgomery only if the modulus is odd; otherwise,
+     * exponentiation using the reciprocal-based quick remaindering
+     * algorithm is used.
+     *
+     * (Timing obtained with expspeed.c [computations  a^p mod m
+     * where  a, p, m  are of the same length: 256, 512, 1024, 2048,
+     * 4096, 8192 bits], compared to the running time of the
+     * standard algorithm:
+     *
+     *   BN_mod_exp_mont   33 .. 40 %  [AMD K6-2, Linux, debug configuration]
+     *                     55 .. 77 %  [UltraSparc processor, but
+     *                                  debug-solaris-sparcv8-gcc conf.]
+     *
+     *   BN_mod_exp_recp   50 .. 70 %  [AMD K6-2, Linux, debug configuration]
+     *                     62 .. 118 % [UltraSparc, debug-solaris-sparcv8-gcc]
+     *
+     * On the Sparc, BN_mod_exp_recp was faster than BN_mod_exp_mont
+     * at 2048 and more bits, but at 512 and 1024 bits, it was
+     * slower even than the standard algorithm!
+     *
+     * "Real" timings [linux-elf, solaris-sparcv9-gcc configurations]
+     * should be obtained when the new Montgomery reduction code
+     * has been integrated into OpenSSL.)
+     */
+
+#define MONT_MUL_MOD
+#define MONT_EXP_WORD
+#define RECP_MUL_MOD
+
+#ifdef MONT_MUL_MOD
+    if (BN_is_odd(m)) {
+# ifdef MONT_EXP_WORD
+        if (a->top == 1 && !a->neg
+            && (BN_get_flags(p, BN_FLG_CONSTTIME) == 0)
+            && (BN_get_flags(a, BN_FLG_CONSTTIME) == 0)
+            && (BN_get_flags(m, BN_FLG_CONSTTIME) == 0)) {
+            BN_ULONG A = a->d[0];
+            ret = BN_mod_exp_mont_word(r, A, p, m, ctx, NULL);
+        } else
+# endif
+            ret = BN_mod_exp_mont(r, a, p, m, ctx, NULL);
+    } else
+#endif
+#ifdef RECP_MUL_MOD
+    {
+        ret = BN_mod_exp_recp(r, a, p, m, ctx);
+    }
+#else
+    {
+        ret = BN_mod_exp_simple(r, a, p, m, ctx);
+    }
+#endif
+
+    bn_check_top(r);
+    return ret;
+}
+
+int BN_mod_exp_recp(BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
+                    const BIGNUM *m, BN_CTX *ctx)
+{
+    int i, j, bits, ret = 0, wstart, wend, window, wvalue;
+    int start = 1;
+    BIGNUM *aa;
+    /* Table of variables obtained from 'ctx' */
+    BIGNUM *val[TABLE_SIZE];
+    BN_RECP_CTX recp;
+
+    if (BN_get_flags(p, BN_FLG_CONSTTIME) != 0
+            || BN_get_flags(a, BN_FLG_CONSTTIME) != 0
+            || BN_get_flags(m, BN_FLG_CONSTTIME) != 0) {
+        /* BN_FLG_CONSTTIME only supported by BN_mod_exp_mont() */
+        BNerr(BN_F_BN_MOD_EXP_RECP, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+
+    bits = BN_num_bits(p);
+    if (bits == 0) {
+        /* x**0 mod 1, or x**0 mod -1 is still zero. */
+        if (BN_abs_is_word(m, 1)) {
+            ret = 1;
+            BN_zero(r);
+        } else {
+            ret = BN_one(r);
+        }
+        return ret;
+    }
+
+    BN_CTX_start(ctx);
+    aa = BN_CTX_get(ctx);
+    val[0] = BN_CTX_get(ctx);
+    if (val[0] == NULL)
+        goto err;
+
+    BN_RECP_CTX_init(&recp);
+    if (m->neg) {
+        /* ignore sign of 'm' */
+        if (!BN_copy(aa, m))
+            goto err;
+        aa->neg = 0;
+        if (BN_RECP_CTX_set(&recp, aa, ctx) <= 0)
+            goto err;
+    } else {
+        if (BN_RECP_CTX_set(&recp, m, ctx) <= 0)
+            goto err;
+    }
+
+    if (!BN_nnmod(val[0], a, m, ctx))
+        goto err;               /* 1 */
+    if (BN_is_zero(val[0])) {
+        BN_zero(r);
+        ret = 1;
+        goto err;
+    }
+
+    window = BN_window_bits_for_exponent_size(bits);
+    if (window > 1) {
+        if (!BN_mod_mul_reciprocal(aa, val[0], val[0], &recp, ctx))
+            goto err;           /* 2 */
+        j = 1 << (window - 1);
+        for (i = 1; i < j; i++) {
+            if (((val[i] = BN_CTX_get(ctx)) == NULL) ||
+                !BN_mod_mul_reciprocal(val[i], val[i - 1], aa, &recp, ctx))
+                goto err;
+        }
+    }
+
+    start = 1;                  /* This is used to avoid multiplication etc
+                                 * when there is only the value '1' in the
+                                 * buffer. */
+    wvalue = 0;                 /* The 'value' of the window */
+    wstart = bits - 1;          /* The top bit of the window */
+    wend = 0;                   /* The bottom bit of the window */
+
+    if (!BN_one(r))
+        goto err;
+
+    for (;;) {
+        if (BN_is_bit_set(p, wstart) == 0) {
+            if (!start)
+                if (!BN_mod_mul_reciprocal(r, r, r, &recp, ctx))
+                    goto err;
+            if (wstart == 0)
+                break;
+            wstart--;
+            continue;
+        }
+        /*
+         * We now have wstart on a 'set' bit, we now need to work out how bit
+         * a window to do.  To do this we need to scan forward until the last
+         * set bit before the end of the window
+         */
+        j = wstart;
+        wvalue = 1;
+        wend = 0;
+        for (i = 1; i < window; i++) {
+            if (wstart - i < 0)
+                break;
+            if (BN_is_bit_set(p, wstart - i)) {
+                wvalue <<= (i - wend);
+                wvalue |= 1;
+                wend = i;
+            }
+        }
+
+        /* wend is the size of the current window */
+        j = wend + 1;
+        /* add the 'bytes above' */
+        if (!start)
+            for (i = 0; i < j; i++) {
+                if (!BN_mod_mul_reciprocal(r, r, r, &recp, ctx))
+                    goto err;
+            }
+
+        /* wvalue will be an odd number < 2^window */
+        if (!BN_mod_mul_reciprocal(r, r, val[wvalue >> 1], &recp, ctx))
+            goto err;
+
+        /* move the 'window' down further */
+        wstart -= wend + 1;
+        wvalue = 0;
+        start = 0;
+        if (wstart < 0)
+            break;
+    }
+    ret = 1;
+ err:
+    BN_CTX_end(ctx);
+    BN_RECP_CTX_free(&recp);
+    bn_check_top(r);
+    return ret;
+}
+
+int BN_mod_exp_mont(BIGNUM *rr, const BIGNUM *a, const BIGNUM *p,
+                    const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *in_mont)
+{
+    int i, j, bits, ret = 0, wstart, wend, window, wvalue;
+    int start = 1;
+    BIGNUM *d, *r;
+    const BIGNUM *aa;
+    /* Table of variables obtained from 'ctx' */
+    BIGNUM *val[TABLE_SIZE];
+    BN_MONT_CTX *mont = NULL;
+
+    if (BN_get_flags(p, BN_FLG_CONSTTIME) != 0
+            || BN_get_flags(a, BN_FLG_CONSTTIME) != 0
+            || BN_get_flags(m, BN_FLG_CONSTTIME) != 0) {
+        return BN_mod_exp_mont_consttime(rr, a, p, m, ctx, in_mont);
+    }
+
+    bn_check_top(a);
+    bn_check_top(p);
+    bn_check_top(m);
+
+    if (!BN_is_odd(m)) {
+        BNerr(BN_F_BN_MOD_EXP_MONT, BN_R_CALLED_WITH_EVEN_MODULUS);
+        return 0;
+    }
+    bits = BN_num_bits(p);
+    if (bits == 0) {
+        /* x**0 mod 1, or x**0 mod -1 is still zero. */
+        if (BN_abs_is_word(m, 1)) {
+            ret = 1;
+            BN_zero(rr);
+        } else {
+            ret = BN_one(rr);
+        }
+        return ret;
+    }
+
+    BN_CTX_start(ctx);
+    d = BN_CTX_get(ctx);
+    r = BN_CTX_get(ctx);
+    val[0] = BN_CTX_get(ctx);
+    if (val[0] == NULL)
+        goto err;
+
+    /*
+     * If this is not done, things will break in the montgomery part
+     */
+
+    if (in_mont != NULL)
+        mont = in_mont;
+    else {
+        if ((mont = BN_MONT_CTX_new()) == NULL)
+            goto err;
+        if (!BN_MONT_CTX_set(mont, m, ctx))
+            goto err;
+    }
+
+    if (a->neg || BN_ucmp(a, m) >= 0) {
+        if (!BN_nnmod(val[0], a, m, ctx))
+            goto err;
+        aa = val[0];
+    } else
+        aa = a;
+    if (!bn_to_mont_fixed_top(val[0], aa, mont, ctx))
+        goto err;               /* 1 */
+
+    window = BN_window_bits_for_exponent_size(bits);
+    if (window > 1) {
+        if (!bn_mul_mont_fixed_top(d, val[0], val[0], mont, ctx))
+            goto err;           /* 2 */
+        j = 1 << (window - 1);
+        for (i = 1; i < j; i++) {
+            if (((val[i] = BN_CTX_get(ctx)) == NULL) ||
+                !bn_mul_mont_fixed_top(val[i], val[i - 1], d, mont, ctx))
+                goto err;
+        }
+    }
+
+    start = 1;                  /* This is used to avoid multiplication etc
+                                 * when there is only the value '1' in the
+                                 * buffer. */
+    wvalue = 0;                 /* The 'value' of the window */
+    wstart = bits - 1;          /* The top bit of the window */
+    wend = 0;                   /* The bottom bit of the window */
+
+#if 1                           /* by Shay Gueron's suggestion */
+    j = m->top;                 /* borrow j */
+    if (m->d[j - 1] & (((BN_ULONG)1) << (BN_BITS2 - 1))) {
+        if (bn_wexpand(r, j) == NULL)
+            goto err;
+        /* 2^(top*BN_BITS2) - m */
+        r->d[0] = (0 - m->d[0]) & BN_MASK2;
+        for (i = 1; i < j; i++)
+            r->d[i] = (~m->d[i]) & BN_MASK2;
+        r->top = j;
+        r->flags |= BN_FLG_FIXED_TOP;
+    } else
+#endif
+    if (!bn_to_mont_fixed_top(r, BN_value_one(), mont, ctx))
+        goto err;
+    for (;;) {
+        if (BN_is_bit_set(p, wstart) == 0) {
+            if (!start) {
+                if (!bn_mul_mont_fixed_top(r, r, r, mont, ctx))
+                    goto err;
+            }
+            if (wstart == 0)
+                break;
+            wstart--;
+            continue;
+        }
+        /*
+         * We now have wstart on a 'set' bit, we now need to work out how bit
+         * a window to do.  To do this we need to scan forward until the last
+         * set bit before the end of the window
+         */
+        j = wstart;
+        wvalue = 1;
+        wend = 0;
+        for (i = 1; i < window; i++) {
+            if (wstart - i < 0)
+                break;
+            if (BN_is_bit_set(p, wstart - i)) {
+                wvalue <<= (i - wend);
+                wvalue |= 1;
+                wend = i;
+            }
+        }
+
+        /* wend is the size of the current window */
+        j = wend + 1;
+        /* add the 'bytes above' */
+        if (!start)
+            for (i = 0; i < j; i++) {
+                if (!bn_mul_mont_fixed_top(r, r, r, mont, ctx))
+                    goto err;
+            }
+
+        /* wvalue will be an odd number < 2^window */
+        if (!bn_mul_mont_fixed_top(r, r, val[wvalue >> 1], mont, ctx))
+            goto err;
+
+        /* move the 'window' down further */
+        wstart -= wend + 1;
+        wvalue = 0;
+        start = 0;
+        if (wstart < 0)
+            break;
+    }
+    /*
+     * Done with zero-padded intermediate BIGNUMs. Final BN_from_montgomery
+     * removes padding [if any] and makes return value suitable for public
+     * API consumer.
+     */
+#if defined(SPARC_T4_MONT)
+    if (OPENSSL_sparcv9cap_P[0] & (SPARCV9_VIS3 | SPARCV9_PREFER_FPU)) {
+        j = mont->N.top;        /* borrow j */
+        val[0]->d[0] = 1;       /* borrow val[0] */
+        for (i = 1; i < j; i++)
+            val[0]->d[i] = 0;
+        val[0]->top = j;
+        if (!BN_mod_mul_montgomery(rr, r, val[0], mont, ctx))
+            goto err;
+    } else
+#endif
+    if (!BN_from_montgomery(rr, r, mont, ctx))
+        goto err;
+    ret = 1;
+ err:
+    if (in_mont == NULL)
+        BN_MONT_CTX_free(mont);
+    BN_CTX_end(ctx);
+    bn_check_top(rr);
+    return ret;
+}
+
+static BN_ULONG bn_get_bits(const BIGNUM *a, int bitpos)
+{
+    BN_ULONG ret = 0;
+    int wordpos;
+
+    wordpos = bitpos / BN_BITS2;
+    bitpos %= BN_BITS2;
+    if (wordpos >= 0 && wordpos < a->top) {
+        ret = a->d[wordpos] & BN_MASK2;
+        if (bitpos) {
+            ret >>= bitpos;
+            if (++wordpos < a->top)
+                ret |= a->d[wordpos] << (BN_BITS2 - bitpos);
+        }
+    }
+
+    return ret & BN_MASK2;
+}
+
+/*
+ * BN_mod_exp_mont_consttime() stores the precomputed powers in a specific
+ * layout so that accessing any of these table values shows the same access
+ * pattern as far as cache lines are concerned.  The following functions are
+ * used to transfer a BIGNUM from/to that table.
+ */
+
+static int MOD_EXP_CTIME_COPY_TO_PREBUF(const BIGNUM *b, int top,
+                                        unsigned char *buf, int idx,
+                                        int window)
+{
+    int i, j;
+    int width = 1 << window;
+    BN_ULONG *table = (BN_ULONG *)buf;
+
+    if (top > b->top)
+        top = b->top;           /* this works because 'buf' is explicitly
+                                 * zeroed */
+    for (i = 0, j = idx; i < top; i++, j += width) {
+        table[j] = b->d[i];
+    }
+
+    return 1;
+}
+
+static int MOD_EXP_CTIME_COPY_FROM_PREBUF(BIGNUM *b, int top,
+                                          unsigned char *buf, int idx,
+                                          int window)
+{
+    int i, j;
+    int width = 1 << window;
+    /*
+     * We declare table 'volatile' in order to discourage compiler
+     * from reordering loads from the table. Concern is that if
+     * reordered in specific manner loads might give away the
+     * information we are trying to conceal. Some would argue that
+     * compiler can reorder them anyway, but it can as well be
+     * argued that doing so would be violation of standard...
+     */
+    volatile BN_ULONG *table = (volatile BN_ULONG *)buf;
+
+    if (bn_wexpand(b, top) == NULL)
+        return 0;
+
+    if (window <= 3) {
+        for (i = 0; i < top; i++, table += width) {
+            BN_ULONG acc = 0;
+
+            for (j = 0; j < width; j++) {
+                acc |= table[j] &
+                       ((BN_ULONG)0 - (constant_time_eq_int(j,idx)&1));
+            }
+
+            b->d[i] = acc;
+        }
+    } else {
+        int xstride = 1 << (window - 2);
+        BN_ULONG y0, y1, y2, y3;
+
+        i = idx >> (window - 2);        /* equivalent of idx / xstride */
+        idx &= xstride - 1;             /* equivalent of idx % xstride */
+
+        y0 = (BN_ULONG)0 - (constant_time_eq_int(i,0)&1);
+        y1 = (BN_ULONG)0 - (constant_time_eq_int(i,1)&1);
+        y2 = (BN_ULONG)0 - (constant_time_eq_int(i,2)&1);
+        y3 = (BN_ULONG)0 - (constant_time_eq_int(i,3)&1);
+
+        for (i = 0; i < top; i++, table += width) {
+            BN_ULONG acc = 0;
+
+            for (j = 0; j < xstride; j++) {
+                acc |= ( (table[j + 0 * xstride] & y0) |
+                         (table[j + 1 * xstride] & y1) |
+                         (table[j + 2 * xstride] & y2) |
+                         (table[j + 3 * xstride] & y3) )
+                       & ((BN_ULONG)0 - (constant_time_eq_int(j,idx)&1));
+            }
+
+            b->d[i] = acc;
+        }
+    }
+
+    b->top = top;
+    b->flags |= BN_FLG_FIXED_TOP;
+    return 1;
+}
+
+/*
+ * Given a pointer value, compute the next address that is a cache line
+ * multiple.
+ */
+#define MOD_EXP_CTIME_ALIGN(x_) \
+        ((unsigned char*)(x_) + (MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH - (((size_t)(x_)) & (MOD_EXP_CTIME_MIN_CACHE_LINE_MASK))))
+
+/*
+ * This variant of BN_mod_exp_mont() uses fixed windows and the special
+ * precomputation memory layout to limit data-dependency to a minimum to
+ * protect secret exponents (cf. the hyper-threading timing attacks pointed
+ * out by Colin Percival,
+ * http://www.daemonology.net/hyperthreading-considered-harmful/)
+ */
+int BN_mod_exp_mont_consttime(BIGNUM *rr, const BIGNUM *a, const BIGNUM *p,
+                              const BIGNUM *m, BN_CTX *ctx,
+                              BN_MONT_CTX *in_mont)
+{
+    int i, bits, ret = 0, window, wvalue, wmask, window0;
+    int top;
+    BN_MONT_CTX *mont = NULL;
+
+    int numPowers;
+    unsigned char *powerbufFree = NULL;
+    int powerbufLen = 0;
+    unsigned char *powerbuf = NULL;
+    BIGNUM tmp, am;
+#if defined(SPARC_T4_MONT)
+    unsigned int t4 = 0;
+#endif
+
+    bn_check_top(a);
+    bn_check_top(p);
+    bn_check_top(m);
+
+    if (!BN_is_odd(m)) {
+        BNerr(BN_F_BN_MOD_EXP_MONT_CONSTTIME, BN_R_CALLED_WITH_EVEN_MODULUS);
+        return 0;
+    }
+
+    top = m->top;
+
+    /*
+     * Use all bits stored in |p|, rather than |BN_num_bits|, so we do not leak
+     * whether the top bits are zero.
+     */
+    bits = p->top * BN_BITS2;
+    if (bits == 0) {
+        /* x**0 mod 1, or x**0 mod -1 is still zero. */
+        if (BN_abs_is_word(m, 1)) {
+            ret = 1;
+            BN_zero(rr);
+        } else {
+            ret = BN_one(rr);
+        }
+        return ret;
+    }
+
+    BN_CTX_start(ctx);
+
+    /*
+     * Allocate a montgomery context if it was not supplied by the caller. If
+     * this is not done, things will break in the montgomery part.
+     */
+    if (in_mont != NULL)
+        mont = in_mont;
+    else {
+        if ((mont = BN_MONT_CTX_new()) == NULL)
+            goto err;
+        if (!BN_MONT_CTX_set(mont, m, ctx))
+            goto err;
+    }
+
+    if (a->neg || BN_ucmp(a, m) >= 0) {
+        BIGNUM *reduced = BN_CTX_get(ctx);
+        if (reduced == NULL
+            || !BN_nnmod(reduced, a, m, ctx)) {
+            goto err;
+        }
+        a = reduced;
+    }
+
+#ifdef RSAZ_ENABLED
+    /*
+     * If the size of the operands allow it, perform the optimized
+     * RSAZ exponentiation. For further information see
+     * crypto/bn/rsaz_exp.c and accompanying assembly modules.
+     */
+    if ((16 == a->top) && (16 == p->top) && (BN_num_bits(m) == 1024)
+        && rsaz_avx2_eligible()) {
+        if (NULL == bn_wexpand(rr, 16))
+            goto err;
+        RSAZ_1024_mod_exp_avx2(rr->d, a->d, p->d, m->d, mont->RR.d,
+                               mont->n0[0]);
+        rr->top = 16;
+        rr->neg = 0;
+        bn_correct_top(rr);
+        ret = 1;
+        goto err;
+    } else if ((8 == a->top) && (8 == p->top) && (BN_num_bits(m) == 512)) {
+        if (NULL == bn_wexpand(rr, 8))
+            goto err;
+        RSAZ_512_mod_exp(rr->d, a->d, p->d, m->d, mont->n0[0], mont->RR.d);
+        rr->top = 8;
+        rr->neg = 0;
+        bn_correct_top(rr);
+        ret = 1;
+        goto err;
+    }
+#endif
+
+    /* Get the window size to use with size of p. */
+    window = BN_window_bits_for_ctime_exponent_size(bits);
+#if defined(SPARC_T4_MONT)
+    if (window >= 5 && (top & 15) == 0 && top <= 64 &&
+        (OPENSSL_sparcv9cap_P[1] & (CFR_MONTMUL | CFR_MONTSQR)) ==
+        (CFR_MONTMUL | CFR_MONTSQR) && (t4 = OPENSSL_sparcv9cap_P[0]))
+        window = 5;
+    else
+#endif
+#if defined(OPENSSL_BN_ASM_MONT5)
+    if (window >= 5) {
+        window = 5;             /* ~5% improvement for RSA2048 sign, and even
+                                 * for RSA4096 */
+        /* reserve space for mont->N.d[] copy */
+        powerbufLen += top * sizeof(mont->N.d[0]);
+    }
+#endif
+    (void)0;
+
+    /*
+     * Allocate a buffer large enough to hold all of the pre-computed powers
+     * of am, am itself and tmp.
+     */
+    numPowers = 1 << window;
+    powerbufLen += sizeof(m->d[0]) * (top * numPowers +
+                                      ((2 * top) >
+                                       numPowers ? (2 * top) : numPowers));
+#ifdef alloca
+    if (powerbufLen < 3072)
+        powerbufFree =
+            alloca(powerbufLen + MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH);
+    else
+#endif
+        if ((powerbufFree =
+             OPENSSL_malloc(powerbufLen + MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH))
+            == NULL)
+        goto err;
+
+    powerbuf = MOD_EXP_CTIME_ALIGN(powerbufFree);
+    memset(powerbuf, 0, powerbufLen);
+
+#ifdef alloca
+    if (powerbufLen < 3072)
+        powerbufFree = NULL;
+#endif
+
+    /* lay down tmp and am right after powers table */
+    tmp.d = (BN_ULONG *)(powerbuf + sizeof(m->d[0]) * top * numPowers);
+    am.d = tmp.d + top;
+    tmp.top = am.top = 0;
+    tmp.dmax = am.dmax = top;
+    tmp.neg = am.neg = 0;
+    tmp.flags = am.flags = BN_FLG_STATIC_DATA;
+
+    /* prepare a^0 in Montgomery domain */
+#if 1                           /* by Shay Gueron's suggestion */
+    if (m->d[top - 1] & (((BN_ULONG)1) << (BN_BITS2 - 1))) {
+        /* 2^(top*BN_BITS2) - m */
+        tmp.d[0] = (0 - m->d[0]) & BN_MASK2;
+        for (i = 1; i < top; i++)
+            tmp.d[i] = (~m->d[i]) & BN_MASK2;
+        tmp.top = top;
+    } else
+#endif
+    if (!bn_to_mont_fixed_top(&tmp, BN_value_one(), mont, ctx))
+        goto err;
+
+    /* prepare a^1 in Montgomery domain */
+    if (!bn_to_mont_fixed_top(&am, a, mont, ctx))
+        goto err;
+
+#if defined(SPARC_T4_MONT)
+    if (t4) {
+        typedef int (*bn_pwr5_mont_f) (BN_ULONG *tp, const BN_ULONG *np,
+                                       const BN_ULONG *n0, const void *table,
+                                       int power, int bits);
+        int bn_pwr5_mont_t4_8(BN_ULONG *tp, const BN_ULONG *np,
+                              const BN_ULONG *n0, const void *table,
+                              int power, int bits);
+        int bn_pwr5_mont_t4_16(BN_ULONG *tp, const BN_ULONG *np,
+                               const BN_ULONG *n0, const void *table,
+                               int power, int bits);
+        int bn_pwr5_mont_t4_24(BN_ULONG *tp, const BN_ULONG *np,
+                               const BN_ULONG *n0, const void *table,
+                               int power, int bits);
+        int bn_pwr5_mont_t4_32(BN_ULONG *tp, const BN_ULONG *np,
+                               const BN_ULONG *n0, const void *table,
+                               int power, int bits);
+        static const bn_pwr5_mont_f pwr5_funcs[4] = {
+            bn_pwr5_mont_t4_8, bn_pwr5_mont_t4_16,
+            bn_pwr5_mont_t4_24, bn_pwr5_mont_t4_32
+        };
+        bn_pwr5_mont_f pwr5_worker = pwr5_funcs[top / 16 - 1];
+
+        typedef int (*bn_mul_mont_f) (BN_ULONG *rp, const BN_ULONG *ap,
+                                      const void *bp, const BN_ULONG *np,
+                                      const BN_ULONG *n0);
+        int bn_mul_mont_t4_8(BN_ULONG *rp, const BN_ULONG *ap, const void *bp,
+                             const BN_ULONG *np, const BN_ULONG *n0);
+        int bn_mul_mont_t4_16(BN_ULONG *rp, const BN_ULONG *ap,
+                              const void *bp, const BN_ULONG *np,
+                              const BN_ULONG *n0);
+        int bn_mul_mont_t4_24(BN_ULONG *rp, const BN_ULONG *ap,
+                              const void *bp, const BN_ULONG *np,
+                              const BN_ULONG *n0);
+        int bn_mul_mont_t4_32(BN_ULONG *rp, const BN_ULONG *ap,
+                              const void *bp, const BN_ULONG *np,
+                              const BN_ULONG *n0);
+        static const bn_mul_mont_f mul_funcs[4] = {
+            bn_mul_mont_t4_8, bn_mul_mont_t4_16,
+            bn_mul_mont_t4_24, bn_mul_mont_t4_32
+        };
+        bn_mul_mont_f mul_worker = mul_funcs[top / 16 - 1];
+
+        void bn_mul_mont_vis3(BN_ULONG *rp, const BN_ULONG *ap,
+                              const void *bp, const BN_ULONG *np,
+                              const BN_ULONG *n0, int num);
+        void bn_mul_mont_t4(BN_ULONG *rp, const BN_ULONG *ap,
+                            const void *bp, const BN_ULONG *np,
+                            const BN_ULONG *n0, int num);
+        void bn_mul_mont_gather5_t4(BN_ULONG *rp, const BN_ULONG *ap,
+                                    const void *table, const BN_ULONG *np,
+                                    const BN_ULONG *n0, int num, int power);
+        void bn_flip_n_scatter5_t4(const BN_ULONG *inp, size_t num,
+                                   void *table, size_t power);
+        void bn_gather5_t4(BN_ULONG *out, size_t num,
+                           void *table, size_t power);
+        void bn_flip_t4(BN_ULONG *dst, BN_ULONG *src, size_t num);
+
+        BN_ULONG *np = mont->N.d, *n0 = mont->n0;
+        int stride = 5 * (6 - (top / 16 - 1)); /* multiple of 5, but less
+                                                * than 32 */
+
+        /*
+         * BN_to_montgomery can contaminate words above .top [in
+         * BN_DEBUG[_DEBUG] build]...
+         */
+        for (i = am.top; i < top; i++)
+            am.d[i] = 0;
+        for (i = tmp.top; i < top; i++)
+            tmp.d[i] = 0;
+
+        bn_flip_n_scatter5_t4(tmp.d, top, powerbuf, 0);
+        bn_flip_n_scatter5_t4(am.d, top, powerbuf, 1);
+        if (!(*mul_worker) (tmp.d, am.d, am.d, np, n0) &&
+            !(*mul_worker) (tmp.d, am.d, am.d, np, n0))
+            bn_mul_mont_vis3(tmp.d, am.d, am.d, np, n0, top);
+        bn_flip_n_scatter5_t4(tmp.d, top, powerbuf, 2);
+
+        for (i = 3; i < 32; i++) {
+            /* Calculate a^i = a^(i-1) * a */
+            if (!(*mul_worker) (tmp.d, tmp.d, am.d, np, n0) &&
+                !(*mul_worker) (tmp.d, tmp.d, am.d, np, n0))
+                bn_mul_mont_vis3(tmp.d, tmp.d, am.d, np, n0, top);
+            bn_flip_n_scatter5_t4(tmp.d, top, powerbuf, i);
+        }
+
+        /* switch to 64-bit domain */
+        np = alloca(top * sizeof(BN_ULONG));
+        top /= 2;
+        bn_flip_t4(np, mont->N.d, top);
+
+        /*
+         * The exponent may not have a whole number of fixed-size windows.
+         * To simplify the main loop, the initial window has between 1 and
+         * full-window-size bits such that what remains is always a whole
+         * number of windows
+         */
+        window0 = (bits - 1) % 5 + 1;
+        wmask = (1 << window0) - 1;
+        bits -= window0;
+        wvalue = bn_get_bits(p, bits) & wmask;
+        bn_gather5_t4(tmp.d, top, powerbuf, wvalue);
+
+        /*
+         * Scan the exponent one window at a time starting from the most
+         * significant bits.
+         */
+        while (bits > 0) {
+            if (bits < stride)
+                stride = bits;
+            bits -= stride;
+            wvalue = bn_get_bits(p, bits);
+
+            if ((*pwr5_worker) (tmp.d, np, n0, powerbuf, wvalue, stride))
+                continue;
+            /* retry once and fall back */
+            if ((*pwr5_worker) (tmp.d, np, n0, powerbuf, wvalue, stride))
+                continue;
+
+            bits += stride - 5;
+            wvalue >>= stride - 5;
+            wvalue &= 31;
+            bn_mul_mont_t4(tmp.d, tmp.d, tmp.d, np, n0, top);
+            bn_mul_mont_t4(tmp.d, tmp.d, tmp.d, np, n0, top);
+            bn_mul_mont_t4(tmp.d, tmp.d, tmp.d, np, n0, top);
+            bn_mul_mont_t4(tmp.d, tmp.d, tmp.d, np, n0, top);
+            bn_mul_mont_t4(tmp.d, tmp.d, tmp.d, np, n0, top);
+            bn_mul_mont_gather5_t4(tmp.d, tmp.d, powerbuf, np, n0, top,
+                                   wvalue);
+        }
+
+        bn_flip_t4(tmp.d, tmp.d, top);
+        top *= 2;
+        /* back to 32-bit domain */
+        tmp.top = top;
+        bn_correct_top(&tmp);
+        OPENSSL_cleanse(np, top * sizeof(BN_ULONG));
+    } else
+#endif
+#if defined(OPENSSL_BN_ASM_MONT5)
+    if (window == 5 && top > 1) {
+        /*
+         * This optimization uses ideas from http://eprint.iacr.org/2011/239,
+         * specifically optimization of cache-timing attack countermeasures
+         * and pre-computation optimization.
+         */
+
+        /*
+         * Dedicated window==4 case improves 512-bit RSA sign by ~15%, but as
+         * 512-bit RSA is hardly relevant, we omit it to spare size...
+         */
+        void bn_mul_mont_gather5(BN_ULONG *rp, const BN_ULONG *ap,
+                                 const void *table, const BN_ULONG *np,
+                                 const BN_ULONG *n0, int num, int power);
+        void bn_scatter5(const BN_ULONG *inp, size_t num,
+                         void *table, size_t power);
+        void bn_gather5(BN_ULONG *out, size_t num, void *table, size_t power);
+        void bn_power5(BN_ULONG *rp, const BN_ULONG *ap,
+                       const void *table, const BN_ULONG *np,
+                       const BN_ULONG *n0, int num, int power);
+        int bn_get_bits5(const BN_ULONG *ap, int off);
+        int bn_from_montgomery(BN_ULONG *rp, const BN_ULONG *ap,
+                               const BN_ULONG *not_used, const BN_ULONG *np,
+                               const BN_ULONG *n0, int num);
+
+        BN_ULONG *n0 = mont->n0, *np;
+
+        /*
+         * BN_to_montgomery can contaminate words above .top [in
+         * BN_DEBUG[_DEBUG] build]...
+         */
+        for (i = am.top; i < top; i++)
+            am.d[i] = 0;
+        for (i = tmp.top; i < top; i++)
+            tmp.d[i] = 0;
+
+        /*
+         * copy mont->N.d[] to improve cache locality
+         */
+        for (np = am.d + top, i = 0; i < top; i++)
+            np[i] = mont->N.d[i];
+
+        bn_scatter5(tmp.d, top, powerbuf, 0);
+        bn_scatter5(am.d, am.top, powerbuf, 1);
+        bn_mul_mont(tmp.d, am.d, am.d, np, n0, top);
+        bn_scatter5(tmp.d, top, powerbuf, 2);
+
+# if 0
+        for (i = 3; i < 32; i++) {
+            /* Calculate a^i = a^(i-1) * a */
+            bn_mul_mont_gather5(tmp.d, am.d, powerbuf, np, n0, top, i - 1);
+            bn_scatter5(tmp.d, top, powerbuf, i);
+        }
+# else
+        /* same as above, but uses squaring for 1/2 of operations */
+        for (i = 4; i < 32; i *= 2) {
+            bn_mul_mont(tmp.d, tmp.d, tmp.d, np, n0, top);
+            bn_scatter5(tmp.d, top, powerbuf, i);
+        }
+        for (i = 3; i < 8; i += 2) {
+            int j;
+            bn_mul_mont_gather5(tmp.d, am.d, powerbuf, np, n0, top, i - 1);
+            bn_scatter5(tmp.d, top, powerbuf, i);
+            for (j = 2 * i; j < 32; j *= 2) {
+                bn_mul_mont(tmp.d, tmp.d, tmp.d, np, n0, top);
+                bn_scatter5(tmp.d, top, powerbuf, j);
+            }
+        }
+        for (; i < 16; i += 2) {
+            bn_mul_mont_gather5(tmp.d, am.d, powerbuf, np, n0, top, i - 1);
+            bn_scatter5(tmp.d, top, powerbuf, i);
+            bn_mul_mont(tmp.d, tmp.d, tmp.d, np, n0, top);
+            bn_scatter5(tmp.d, top, powerbuf, 2 * i);
+        }
+        for (; i < 32; i += 2) {
+            bn_mul_mont_gather5(tmp.d, am.d, powerbuf, np, n0, top, i - 1);
+            bn_scatter5(tmp.d, top, powerbuf, i);
+        }
+# endif
+        /*
+         * The exponent may not have a whole number of fixed-size windows.
+         * To simplify the main loop, the initial window has between 1 and
+         * full-window-size bits such that what remains is always a whole
+         * number of windows
+         */
+        window0 = (bits - 1) % 5 + 1;
+        wmask = (1 << window0) - 1;
+        bits -= window0;
+        wvalue = bn_get_bits(p, bits) & wmask;
+        bn_gather5(tmp.d, top, powerbuf, wvalue);
+
+        /*
+         * Scan the exponent one window at a time starting from the most
+         * significant bits.
+         */
+        if (top & 7) {
+            while (bits > 0) {
+                bn_mul_mont(tmp.d, tmp.d, tmp.d, np, n0, top);
+                bn_mul_mont(tmp.d, tmp.d, tmp.d, np, n0, top);
+                bn_mul_mont(tmp.d, tmp.d, tmp.d, np, n0, top);
+                bn_mul_mont(tmp.d, tmp.d, tmp.d, np, n0, top);
+                bn_mul_mont(tmp.d, tmp.d, tmp.d, np, n0, top);
+                bn_mul_mont_gather5(tmp.d, tmp.d, powerbuf, np, n0, top,
+                                    bn_get_bits5(p->d, bits -= 5));
+            }
+        } else {
+            while (bits > 0) {
+                bn_power5(tmp.d, tmp.d, powerbuf, np, n0, top,
+                          bn_get_bits5(p->d, bits -= 5));
+            }
+        }
+
+        ret = bn_from_montgomery(tmp.d, tmp.d, NULL, np, n0, top);
+        tmp.top = top;
+        bn_correct_top(&tmp);
+        if (ret) {
+            if (!BN_copy(rr, &tmp))
+                ret = 0;
+            goto err;           /* non-zero ret means it's not error */
+        }
+    } else
+#endif
+    {
+        if (!MOD_EXP_CTIME_COPY_TO_PREBUF(&tmp, top, powerbuf, 0, window))
+            goto err;
+        if (!MOD_EXP_CTIME_COPY_TO_PREBUF(&am, top, powerbuf, 1, window))
+            goto err;
+
+        /*
+         * If the window size is greater than 1, then calculate
+         * val[i=2..2^winsize-1]. Powers are computed as a*a^(i-1) (even
+         * powers could instead be computed as (a^(i/2))^2 to use the slight
+         * performance advantage of sqr over mul).
+         */
+        if (window > 1) {
+            if (!bn_mul_mont_fixed_top(&tmp, &am, &am, mont, ctx))
+                goto err;
+            if (!MOD_EXP_CTIME_COPY_TO_PREBUF(&tmp, top, powerbuf, 2,
+                                              window))
+                goto err;
+            for (i = 3; i < numPowers; i++) {
+                /* Calculate a^i = a^(i-1) * a */
+                if (!bn_mul_mont_fixed_top(&tmp, &am, &tmp, mont, ctx))
+                    goto err;
+                if (!MOD_EXP_CTIME_COPY_TO_PREBUF(&tmp, top, powerbuf, i,
+                                                  window))
+                    goto err;
+            }
+        }
+
+        /*
+         * The exponent may not have a whole number of fixed-size windows.
+         * To simplify the main loop, the initial window has between 1 and
+         * full-window-size bits such that what remains is always a whole
+         * number of windows
+         */
+        window0 = (bits - 1) % window + 1;
+        wmask = (1 << window0) - 1;
+        bits -= window0;
+        wvalue = bn_get_bits(p, bits) & wmask;
+        if (!MOD_EXP_CTIME_COPY_FROM_PREBUF(&tmp, top, powerbuf, wvalue,
+                                            window))
+            goto err;
+
+        wmask = (1 << window) - 1;
+        /*
+         * Scan the exponent one window at a time starting from the most
+         * significant bits.
+         */
+        while (bits > 0) {
+
+            /* Square the result window-size times */
+            for (i = 0; i < window; i++)
+                if (!bn_mul_mont_fixed_top(&tmp, &tmp, &tmp, mont, ctx))
+                    goto err;
+
+            /*
+             * Get a window's worth of bits from the exponent
+             * This avoids calling BN_is_bit_set for each bit, which
+             * is not only slower but also makes each bit vulnerable to
+             * EM (and likely other) side-channel attacks like One&Done
+             * (for details see "One&Done: A Single-Decryption EM-Based
+             *  Attack on OpenSSL's Constant-Time Blinded RSA" by M. Alam,
+             *  H. Khan, M. Dey, N. Sinha, R. Callan, A. Zajic, and
+             *  M. Prvulovic, in USENIX Security'18)
+             */
+            bits -= window;
+            wvalue = bn_get_bits(p, bits) & wmask;
+            /*
+             * Fetch the appropriate pre-computed value from the pre-buf
+             */
+            if (!MOD_EXP_CTIME_COPY_FROM_PREBUF(&am, top, powerbuf, wvalue,
+                                                window))
+                goto err;
+
+            /* Multiply the result into the intermediate result */
+            if (!bn_mul_mont_fixed_top(&tmp, &tmp, &am, mont, ctx))
+                goto err;
+        }
+    }
+
+    /*
+     * Done with zero-padded intermediate BIGNUMs. Final BN_from_montgomery
+     * removes padding [if any] and makes return value suitable for public
+     * API consumer.
+     */
+#if defined(SPARC_T4_MONT)
+    if (OPENSSL_sparcv9cap_P[0] & (SPARCV9_VIS3 | SPARCV9_PREFER_FPU)) {
+        am.d[0] = 1;            /* borrow am */
+        for (i = 1; i < top; i++)
+            am.d[i] = 0;
+        if (!BN_mod_mul_montgomery(rr, &tmp, &am, mont, ctx))
+            goto err;
+    } else
+#endif
+    if (!BN_from_montgomery(rr, &tmp, mont, ctx))
+        goto err;
+    ret = 1;
+ err:
+    if (in_mont == NULL)
+        BN_MONT_CTX_free(mont);
+    if (powerbuf != NULL) {
+        OPENSSL_cleanse(powerbuf, powerbufLen);
+        OPENSSL_free(powerbufFree);
+    }
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+int BN_mod_exp_mont_word(BIGNUM *rr, BN_ULONG a, const BIGNUM *p,
+                         const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *in_mont)
+{
+    BN_MONT_CTX *mont = NULL;
+    int b, bits, ret = 0;
+    int r_is_one;
+    BN_ULONG w, next_w;
+    BIGNUM *r, *t;
+    BIGNUM *swap_tmp;
+#define BN_MOD_MUL_WORD(r, w, m) \
+                (BN_mul_word(r, (w)) && \
+                (/* BN_ucmp(r, (m)) < 0 ? 1 :*/  \
+                        (BN_mod(t, r, m, ctx) && (swap_tmp = r, r = t, t = swap_tmp, 1))))
+    /*
+     * BN_MOD_MUL_WORD is only used with 'w' large, so the BN_ucmp test is
+     * probably more overhead than always using BN_mod (which uses BN_copy if
+     * a similar test returns true).
+     */
+    /*
+     * We can use BN_mod and do not need BN_nnmod because our accumulator is
+     * never negative (the result of BN_mod does not depend on the sign of
+     * the modulus).
+     */
+#define BN_TO_MONTGOMERY_WORD(r, w, mont) \
+                (BN_set_word(r, (w)) && BN_to_montgomery(r, r, (mont), ctx))
+
+    if (BN_get_flags(p, BN_FLG_CONSTTIME) != 0
+            || BN_get_flags(m, BN_FLG_CONSTTIME) != 0) {
+        /* BN_FLG_CONSTTIME only supported by BN_mod_exp_mont() */
+        BNerr(BN_F_BN_MOD_EXP_MONT_WORD, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+
+    bn_check_top(p);
+    bn_check_top(m);
+
+    if (!BN_is_odd(m)) {
+        BNerr(BN_F_BN_MOD_EXP_MONT_WORD, BN_R_CALLED_WITH_EVEN_MODULUS);
+        return 0;
+    }
+    if (m->top == 1)
+        a %= m->d[0];           /* make sure that 'a' is reduced */
+
+    bits = BN_num_bits(p);
+    if (bits == 0) {
+        /* x**0 mod 1, or x**0 mod -1 is still zero. */
+        if (BN_abs_is_word(m, 1)) {
+            ret = 1;
+            BN_zero(rr);
+        } else {
+            ret = BN_one(rr);
+        }
+        return ret;
+    }
+    if (a == 0) {
+        BN_zero(rr);
+        ret = 1;
+        return ret;
+    }
+
+    BN_CTX_start(ctx);
+    r = BN_CTX_get(ctx);
+    t = BN_CTX_get(ctx);
+    if (t == NULL)
+        goto err;
+
+    if (in_mont != NULL)
+        mont = in_mont;
+    else {
+        if ((mont = BN_MONT_CTX_new()) == NULL)
+            goto err;
+        if (!BN_MONT_CTX_set(mont, m, ctx))
+            goto err;
+    }
+
+    r_is_one = 1;               /* except for Montgomery factor */
+
+    /* bits-1 >= 0 */
+
+    /* The result is accumulated in the product r*w. */
+    w = a;                      /* bit 'bits-1' of 'p' is always set */
+    for (b = bits - 2; b >= 0; b--) {
+        /* First, square r*w. */
+        next_w = w * w;
+        if ((next_w / w) != w) { /* overflow */
+            if (r_is_one) {
+                if (!BN_TO_MONTGOMERY_WORD(r, w, mont))
+                    goto err;
+                r_is_one = 0;
+            } else {
+                if (!BN_MOD_MUL_WORD(r, w, m))
+                    goto err;
+            }
+            next_w = 1;
+        }
+        w = next_w;
+        if (!r_is_one) {
+            if (!BN_mod_mul_montgomery(r, r, r, mont, ctx))
+                goto err;
+        }
+
+        /* Second, multiply r*w by 'a' if exponent bit is set. */
+        if (BN_is_bit_set(p, b)) {
+            next_w = w * a;
+            if ((next_w / a) != w) { /* overflow */
+                if (r_is_one) {
+                    if (!BN_TO_MONTGOMERY_WORD(r, w, mont))
+                        goto err;
+                    r_is_one = 0;
+                } else {
+                    if (!BN_MOD_MUL_WORD(r, w, m))
+                        goto err;
+                }
+                next_w = a;
+            }
+            w = next_w;
+        }
+    }
+
+    /* Finally, set r:=r*w. */
+    if (w != 1) {
+        if (r_is_one) {
+            if (!BN_TO_MONTGOMERY_WORD(r, w, mont))
+                goto err;
+            r_is_one = 0;
+        } else {
+            if (!BN_MOD_MUL_WORD(r, w, m))
+                goto err;
+        }
+    }
+
+    if (r_is_one) {             /* can happen only if a == 1 */
+        if (!BN_one(rr))
+            goto err;
+    } else {
+        if (!BN_from_montgomery(rr, r, mont, ctx))
+            goto err;
+    }
+    ret = 1;
+ err:
+    if (in_mont == NULL)
+        BN_MONT_CTX_free(mont);
+    BN_CTX_end(ctx);
+    bn_check_top(rr);
+    return ret;
+}
+
+/* The old fallback, simple version :-) */
+int BN_mod_exp_simple(BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
+                      const BIGNUM *m, BN_CTX *ctx)
+{
+    int i, j, bits, ret = 0, wstart, wend, window, wvalue;
+    int start = 1;
+    BIGNUM *d;
+    /* Table of variables obtained from 'ctx' */
+    BIGNUM *val[TABLE_SIZE];
+
+    if (BN_get_flags(p, BN_FLG_CONSTTIME) != 0
+            || BN_get_flags(a, BN_FLG_CONSTTIME) != 0
+            || BN_get_flags(m, BN_FLG_CONSTTIME) != 0) {
+        /* BN_FLG_CONSTTIME only supported by BN_mod_exp_mont() */
+        BNerr(BN_F_BN_MOD_EXP_SIMPLE, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+
+    bits = BN_num_bits(p);
+    if (bits == 0) {
+        /* x**0 mod 1, or x**0 mod -1 is still zero. */
+        if (BN_abs_is_word(m, 1)) {
+            ret = 1;
+            BN_zero(r);
+        } else {
+            ret = BN_one(r);
+        }
+        return ret;
+    }
+
+    BN_CTX_start(ctx);
+    d = BN_CTX_get(ctx);
+    val[0] = BN_CTX_get(ctx);
+    if (val[0] == NULL)
+        goto err;
+
+    if (!BN_nnmod(val[0], a, m, ctx))
+        goto err;               /* 1 */
+    if (BN_is_zero(val[0])) {
+        BN_zero(r);
+        ret = 1;
+        goto err;
+    }
+
+    window = BN_window_bits_for_exponent_size(bits);
+    if (window > 1) {
+        if (!BN_mod_mul(d, val[0], val[0], m, ctx))
+            goto err;           /* 2 */
+        j = 1 << (window - 1);
+        for (i = 1; i < j; i++) {
+            if (((val[i] = BN_CTX_get(ctx)) == NULL) ||
+                !BN_mod_mul(val[i], val[i - 1], d, m, ctx))
+                goto err;
+        }
+    }
+
+    start = 1;                  /* This is used to avoid multiplication etc
+                                 * when there is only the value '1' in the
+                                 * buffer. */
+    wvalue = 0;                 /* The 'value' of the window */
+    wstart = bits - 1;          /* The top bit of the window */
+    wend = 0;                   /* The bottom bit of the window */
+
+    if (!BN_one(r))
+        goto err;
+
+    for (;;) {
+        if (BN_is_bit_set(p, wstart) == 0) {
+            if (!start)
+                if (!BN_mod_mul(r, r, r, m, ctx))
+                    goto err;
+            if (wstart == 0)
+                break;
+            wstart--;
+            continue;
+        }
+        /*
+         * We now have wstart on a 'set' bit, we now need to work out how bit
+         * a window to do.  To do this we need to scan forward until the last
+         * set bit before the end of the window
+         */
+        j = wstart;
+        wvalue = 1;
+        wend = 0;
+        for (i = 1; i < window; i++) {
+            if (wstart - i < 0)
+                break;
+            if (BN_is_bit_set(p, wstart - i)) {
+                wvalue <<= (i - wend);
+                wvalue |= 1;
+                wend = i;
+            }
+        }
+
+        /* wend is the size of the current window */
+        j = wend + 1;
+        /* add the 'bytes above' */
+        if (!start)
+            for (i = 0; i < j; i++) {
+                if (!BN_mod_mul(r, r, r, m, ctx))
+                    goto err;
+            }
+
+        /* wvalue will be an odd number < 2^window */
+        if (!BN_mod_mul(r, r, val[wvalue >> 1], m, ctx))
+            goto err;
+
+        /* move the 'window' down further */
+        wstart -= wend + 1;
+        wvalue = 0;
+        start = 0;
+        if (wstart < 0)
+            break;
+    }
+    ret = 1;
+ err:
+    BN_CTX_end(ctx);
+    bn_check_top(r);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_exp2.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_exp2.c
new file mode 100644
index 000000000..082c9286a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_exp2.c
@@ -0,0 +1,201 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+#define TABLE_SIZE      32
+
+int BN_mod_exp2_mont(BIGNUM *rr, const BIGNUM *a1, const BIGNUM *p1,
+                     const BIGNUM *a2, const BIGNUM *p2, const BIGNUM *m,
+                     BN_CTX *ctx, BN_MONT_CTX *in_mont)
+{
+    int i, j, bits, b, bits1, bits2, ret =
+        0, wpos1, wpos2, window1, window2, wvalue1, wvalue2;
+    int r_is_one = 1;
+    BIGNUM *d, *r;
+    const BIGNUM *a_mod_m;
+    /* Tables of variables obtained from 'ctx' */
+    BIGNUM *val1[TABLE_SIZE], *val2[TABLE_SIZE];
+    BN_MONT_CTX *mont = NULL;
+
+    bn_check_top(a1);
+    bn_check_top(p1);
+    bn_check_top(a2);
+    bn_check_top(p2);
+    bn_check_top(m);
+
+    if (!(m->d[0] & 1)) {
+        BNerr(BN_F_BN_MOD_EXP2_MONT, BN_R_CALLED_WITH_EVEN_MODULUS);
+        return 0;
+    }
+    bits1 = BN_num_bits(p1);
+    bits2 = BN_num_bits(p2);
+    if ((bits1 == 0) && (bits2 == 0)) {
+        ret = BN_one(rr);
+        return ret;
+    }
+
+    bits = (bits1 > bits2) ? bits1 : bits2;
+
+    BN_CTX_start(ctx);
+    d = BN_CTX_get(ctx);
+    r = BN_CTX_get(ctx);
+    val1[0] = BN_CTX_get(ctx);
+    val2[0] = BN_CTX_get(ctx);
+    if (val2[0] == NULL)
+        goto err;
+
+    if (in_mont != NULL)
+        mont = in_mont;
+    else {
+        if ((mont = BN_MONT_CTX_new()) == NULL)
+            goto err;
+        if (!BN_MONT_CTX_set(mont, m, ctx))
+            goto err;
+    }
+
+    window1 = BN_window_bits_for_exponent_size(bits1);
+    window2 = BN_window_bits_for_exponent_size(bits2);
+
+    /*
+     * Build table for a1:   val1[i] := a1^(2*i + 1) mod m  for i = 0 .. 2^(window1-1)
+     */
+    if (a1->neg || BN_ucmp(a1, m) >= 0) {
+        if (!BN_mod(val1[0], a1, m, ctx))
+            goto err;
+        a_mod_m = val1[0];
+    } else
+        a_mod_m = a1;
+    if (BN_is_zero(a_mod_m)) {
+        BN_zero(rr);
+        ret = 1;
+        goto err;
+    }
+
+    if (!BN_to_montgomery(val1[0], a_mod_m, mont, ctx))
+        goto err;
+    if (window1 > 1) {
+        if (!BN_mod_mul_montgomery(d, val1[0], val1[0], mont, ctx))
+            goto err;
+
+        j = 1 << (window1 - 1);
+        for (i = 1; i < j; i++) {
+            if (((val1[i] = BN_CTX_get(ctx)) == NULL) ||
+                !BN_mod_mul_montgomery(val1[i], val1[i - 1], d, mont, ctx))
+                goto err;
+        }
+    }
+
+    /*
+     * Build table for a2:   val2[i] := a2^(2*i + 1) mod m  for i = 0 .. 2^(window2-1)
+     */
+    if (a2->neg || BN_ucmp(a2, m) >= 0) {
+        if (!BN_mod(val2[0], a2, m, ctx))
+            goto err;
+        a_mod_m = val2[0];
+    } else
+        a_mod_m = a2;
+    if (BN_is_zero(a_mod_m)) {
+        BN_zero(rr);
+        ret = 1;
+        goto err;
+    }
+    if (!BN_to_montgomery(val2[0], a_mod_m, mont, ctx))
+        goto err;
+    if (window2 > 1) {
+        if (!BN_mod_mul_montgomery(d, val2[0], val2[0], mont, ctx))
+            goto err;
+
+        j = 1 << (window2 - 1);
+        for (i = 1; i < j; i++) {
+            if (((val2[i] = BN_CTX_get(ctx)) == NULL) ||
+                !BN_mod_mul_montgomery(val2[i], val2[i - 1], d, mont, ctx))
+                goto err;
+        }
+    }
+
+    /* Now compute the power product, using independent windows. */
+    r_is_one = 1;
+    wvalue1 = 0;                /* The 'value' of the first window */
+    wvalue2 = 0;                /* The 'value' of the second window */
+    wpos1 = 0;                  /* If wvalue1 > 0, the bottom bit of the
+                                 * first window */
+    wpos2 = 0;                  /* If wvalue2 > 0, the bottom bit of the
+                                 * second window */
+
+    if (!BN_to_montgomery(r, BN_value_one(), mont, ctx))
+        goto err;
+    for (b = bits - 1; b >= 0; b--) {
+        if (!r_is_one) {
+            if (!BN_mod_mul_montgomery(r, r, r, mont, ctx))
+                goto err;
+        }
+
+        if (!wvalue1)
+            if (BN_is_bit_set(p1, b)) {
+                /*
+                 * consider bits b-window1+1 .. b for this window
+                 */
+                i = b - window1 + 1;
+                while (!BN_is_bit_set(p1, i)) /* works for i<0 */
+                    i++;
+                wpos1 = i;
+                wvalue1 = 1;
+                for (i = b - 1; i >= wpos1; i--) {
+                    wvalue1 <<= 1;
+                    if (BN_is_bit_set(p1, i))
+                        wvalue1++;
+                }
+            }
+
+        if (!wvalue2)
+            if (BN_is_bit_set(p2, b)) {
+                /*
+                 * consider bits b-window2+1 .. b for this window
+                 */
+                i = b - window2 + 1;
+                while (!BN_is_bit_set(p2, i))
+                    i++;
+                wpos2 = i;
+                wvalue2 = 1;
+                for (i = b - 1; i >= wpos2; i--) {
+                    wvalue2 <<= 1;
+                    if (BN_is_bit_set(p2, i))
+                        wvalue2++;
+                }
+            }
+
+        if (wvalue1 && b == wpos1) {
+            /* wvalue1 is odd and < 2^window1 */
+            if (!BN_mod_mul_montgomery(r, r, val1[wvalue1 >> 1], mont, ctx))
+                goto err;
+            wvalue1 = 0;
+            r_is_one = 0;
+        }
+
+        if (wvalue2 && b == wpos2) {
+            /* wvalue2 is odd and < 2^window2 */
+            if (!BN_mod_mul_montgomery(r, r, val2[wvalue2 >> 1], mont, ctx))
+                goto err;
+            wvalue2 = 0;
+            r_is_one = 0;
+        }
+    }
+    if (!BN_from_montgomery(rr, r, mont, ctx))
+        goto err;
+    ret = 1;
+ err:
+    if (in_mont == NULL)
+        BN_MONT_CTX_free(mont);
+    BN_CTX_end(ctx);
+    bn_check_top(rr);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_gcd.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_gcd.c
new file mode 100644
index 000000000..0091ea4e0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_gcd.c
@@ -0,0 +1,623 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+static BIGNUM *euclid(BIGNUM *a, BIGNUM *b);
+
+int BN_gcd(BIGNUM *r, const BIGNUM *in_a, const BIGNUM *in_b, BN_CTX *ctx)
+{
+    BIGNUM *a, *b, *t;
+    int ret = 0;
+
+    bn_check_top(in_a);
+    bn_check_top(in_b);
+
+    BN_CTX_start(ctx);
+    a = BN_CTX_get(ctx);
+    b = BN_CTX_get(ctx);
+    if (b == NULL)
+        goto err;
+
+    if (BN_copy(a, in_a) == NULL)
+        goto err;
+    if (BN_copy(b, in_b) == NULL)
+        goto err;
+    a->neg = 0;
+    b->neg = 0;
+
+    if (BN_cmp(a, b) < 0) {
+        t = a;
+        a = b;
+        b = t;
+    }
+    t = euclid(a, b);
+    if (t == NULL)
+        goto err;
+
+    if (BN_copy(r, t) == NULL)
+        goto err;
+    ret = 1;
+ err:
+    BN_CTX_end(ctx);
+    bn_check_top(r);
+    return ret;
+}
+
+static BIGNUM *euclid(BIGNUM *a, BIGNUM *b)
+{
+    BIGNUM *t;
+    int shifts = 0;
+
+    bn_check_top(a);
+    bn_check_top(b);
+
+    /* 0 <= b <= a */
+    while (!BN_is_zero(b)) {
+        /* 0 < b <= a */
+
+        if (BN_is_odd(a)) {
+            if (BN_is_odd(b)) {
+                if (!BN_sub(a, a, b))
+                    goto err;
+                if (!BN_rshift1(a, a))
+                    goto err;
+                if (BN_cmp(a, b) < 0) {
+                    t = a;
+                    a = b;
+                    b = t;
+                }
+            } else {            /* a odd - b even */
+
+                if (!BN_rshift1(b, b))
+                    goto err;
+                if (BN_cmp(a, b) < 0) {
+                    t = a;
+                    a = b;
+                    b = t;
+                }
+            }
+        } else {                /* a is even */
+
+            if (BN_is_odd(b)) {
+                if (!BN_rshift1(a, a))
+                    goto err;
+                if (BN_cmp(a, b) < 0) {
+                    t = a;
+                    a = b;
+                    b = t;
+                }
+            } else {            /* a even - b even */
+
+                if (!BN_rshift1(a, a))
+                    goto err;
+                if (!BN_rshift1(b, b))
+                    goto err;
+                shifts++;
+            }
+        }
+        /* 0 <= b <= a */
+    }
+
+    if (shifts) {
+        if (!BN_lshift(a, a, shifts))
+            goto err;
+    }
+    bn_check_top(a);
+    return a;
+ err:
+    return NULL;
+}
+
+/* solves ax == 1 (mod n) */
+static BIGNUM *BN_mod_inverse_no_branch(BIGNUM *in,
+                                        const BIGNUM *a, const BIGNUM *n,
+                                        BN_CTX *ctx);
+
+BIGNUM *BN_mod_inverse(BIGNUM *in,
+                       const BIGNUM *a, const BIGNUM *n, BN_CTX *ctx)
+{
+    BIGNUM *rv;
+    int noinv;
+    rv = int_bn_mod_inverse(in, a, n, ctx, &noinv);
+    if (noinv)
+        BNerr(BN_F_BN_MOD_INVERSE, BN_R_NO_INVERSE);
+    return rv;
+}
+
+BIGNUM *int_bn_mod_inverse(BIGNUM *in,
+                           const BIGNUM *a, const BIGNUM *n, BN_CTX *ctx,
+                           int *pnoinv)
+{
+    BIGNUM *A, *B, *X, *Y, *M, *D, *T, *R = NULL;
+    BIGNUM *ret = NULL;
+    int sign;
+
+    /* This is invalid input so we don't worry about constant time here */
+    if (BN_abs_is_word(n, 1) || BN_is_zero(n)) {
+        if (pnoinv != NULL)
+            *pnoinv = 1;
+        return NULL;
+    }
+
+    if (pnoinv != NULL)
+        *pnoinv = 0;
+
+    if ((BN_get_flags(a, BN_FLG_CONSTTIME) != 0)
+        || (BN_get_flags(n, BN_FLG_CONSTTIME) != 0)) {
+        return BN_mod_inverse_no_branch(in, a, n, ctx);
+    }
+
+    bn_check_top(a);
+    bn_check_top(n);
+
+    BN_CTX_start(ctx);
+    A = BN_CTX_get(ctx);
+    B = BN_CTX_get(ctx);
+    X = BN_CTX_get(ctx);
+    D = BN_CTX_get(ctx);
+    M = BN_CTX_get(ctx);
+    Y = BN_CTX_get(ctx);
+    T = BN_CTX_get(ctx);
+    if (T == NULL)
+        goto err;
+
+    if (in == NULL)
+        R = BN_new();
+    else
+        R = in;
+    if (R == NULL)
+        goto err;
+
+    BN_one(X);
+    BN_zero(Y);
+    if (BN_copy(B, a) == NULL)
+        goto err;
+    if (BN_copy(A, n) == NULL)
+        goto err;
+    A->neg = 0;
+    if (B->neg || (BN_ucmp(B, A) >= 0)) {
+        if (!BN_nnmod(B, B, A, ctx))
+            goto err;
+    }
+    sign = -1;
+    /*-
+     * From  B = a mod |n|,  A = |n|  it follows that
+     *
+     *      0 <= B < A,
+     *     -sign*X*a  ==  B   (mod |n|),
+     *      sign*Y*a  ==  A   (mod |n|).
+     */
+
+    if (BN_is_odd(n) && (BN_num_bits(n) <= 2048)) {
+        /*
+         * Binary inversion algorithm; requires odd modulus. This is faster
+         * than the general algorithm if the modulus is sufficiently small
+         * (about 400 .. 500 bits on 32-bit systems, but much more on 64-bit
+         * systems)
+         */
+        int shift;
+
+        while (!BN_is_zero(B)) {
+            /*-
+             *      0 < B < |n|,
+             *      0 < A <= |n|,
+             * (1) -sign*X*a  ==  B   (mod |n|),
+             * (2)  sign*Y*a  ==  A   (mod |n|)
+             */
+
+            /*
+             * Now divide B by the maximum possible power of two in the
+             * integers, and divide X by the same value mod |n|. When we're
+             * done, (1) still holds.
+             */
+            shift = 0;
+            while (!BN_is_bit_set(B, shift)) { /* note that 0 < B */
+                shift++;
+
+                if (BN_is_odd(X)) {
+                    if (!BN_uadd(X, X, n))
+                        goto err;
+                }
+                /*
+                 * now X is even, so we can easily divide it by two
+                 */
+                if (!BN_rshift1(X, X))
+                    goto err;
+            }
+            if (shift > 0) {
+                if (!BN_rshift(B, B, shift))
+                    goto err;
+            }
+
+            /*
+             * Same for A and Y.  Afterwards, (2) still holds.
+             */
+            shift = 0;
+            while (!BN_is_bit_set(A, shift)) { /* note that 0 < A */
+                shift++;
+
+                if (BN_is_odd(Y)) {
+                    if (!BN_uadd(Y, Y, n))
+                        goto err;
+                }
+                /* now Y is even */
+                if (!BN_rshift1(Y, Y))
+                    goto err;
+            }
+            if (shift > 0) {
+                if (!BN_rshift(A, A, shift))
+                    goto err;
+            }
+
+            /*-
+             * We still have (1) and (2).
+             * Both  A  and  B  are odd.
+             * The following computations ensure that
+             *
+             *     0 <= B < |n|,
+             *      0 < A < |n|,
+             * (1) -sign*X*a  ==  B   (mod |n|),
+             * (2)  sign*Y*a  ==  A   (mod |n|),
+             *
+             * and that either  A  or  B  is even in the next iteration.
+             */
+            if (BN_ucmp(B, A) >= 0) {
+                /* -sign*(X + Y)*a == B - A  (mod |n|) */
+                if (!BN_uadd(X, X, Y))
+                    goto err;
+                /*
+                 * NB: we could use BN_mod_add_quick(X, X, Y, n), but that
+                 * actually makes the algorithm slower
+                 */
+                if (!BN_usub(B, B, A))
+                    goto err;
+            } else {
+                /*  sign*(X + Y)*a == A - B  (mod |n|) */
+                if (!BN_uadd(Y, Y, X))
+                    goto err;
+                /*
+                 * as above, BN_mod_add_quick(Y, Y, X, n) would slow things down
+                 */
+                if (!BN_usub(A, A, B))
+                    goto err;
+            }
+        }
+    } else {
+        /* general inversion algorithm */
+
+        while (!BN_is_zero(B)) {
+            BIGNUM *tmp;
+
+            /*-
+             *      0 < B < A,
+             * (*) -sign*X*a  ==  B   (mod |n|),
+             *      sign*Y*a  ==  A   (mod |n|)
+             */
+
+            /* (D, M) := (A/B, A%B) ... */
+            if (BN_num_bits(A) == BN_num_bits(B)) {
+                if (!BN_one(D))
+                    goto err;
+                if (!BN_sub(M, A, B))
+                    goto err;
+            } else if (BN_num_bits(A) == BN_num_bits(B) + 1) {
+                /* A/B is 1, 2, or 3 */
+                if (!BN_lshift1(T, B))
+                    goto err;
+                if (BN_ucmp(A, T) < 0) {
+                    /* A < 2*B, so D=1 */
+                    if (!BN_one(D))
+                        goto err;
+                    if (!BN_sub(M, A, B))
+                        goto err;
+                } else {
+                    /* A >= 2*B, so D=2 or D=3 */
+                    if (!BN_sub(M, A, T))
+                        goto err;
+                    if (!BN_add(D, T, B))
+                        goto err; /* use D (:= 3*B) as temp */
+                    if (BN_ucmp(A, D) < 0) {
+                        /* A < 3*B, so D=2 */
+                        if (!BN_set_word(D, 2))
+                            goto err;
+                        /*
+                         * M (= A - 2*B) already has the correct value
+                         */
+                    } else {
+                        /* only D=3 remains */
+                        if (!BN_set_word(D, 3))
+                            goto err;
+                        /*
+                         * currently M = A - 2*B, but we need M = A - 3*B
+                         */
+                        if (!BN_sub(M, M, B))
+                            goto err;
+                    }
+                }
+            } else {
+                if (!BN_div(D, M, A, B, ctx))
+                    goto err;
+            }
+
+            /*-
+             * Now
+             *      A = D*B + M;
+             * thus we have
+             * (**)  sign*Y*a  ==  D*B + M   (mod |n|).
+             */
+
+            tmp = A;    /* keep the BIGNUM object, the value does not matter */
+
+            /* (A, B) := (B, A mod B) ... */
+            A = B;
+            B = M;
+            /* ... so we have  0 <= B < A  again */
+
+            /*-
+             * Since the former  M  is now  B  and the former  B  is now  A,
+             * (**) translates into
+             *       sign*Y*a  ==  D*A + B    (mod |n|),
+             * i.e.
+             *       sign*Y*a - D*A  ==  B    (mod |n|).
+             * Similarly, (*) translates into
+             *      -sign*X*a  ==  A          (mod |n|).
+             *
+             * Thus,
+             *   sign*Y*a + D*sign*X*a  ==  B  (mod |n|),
+             * i.e.
+             *        sign*(Y + D*X)*a  ==  B  (mod |n|).
+             *
+             * So if we set  (X, Y, sign) := (Y + D*X, X, -sign), we arrive back at
+             *      -sign*X*a  ==  B   (mod |n|),
+             *       sign*Y*a  ==  A   (mod |n|).
+             * Note that  X  and  Y  stay non-negative all the time.
+             */
+
+            /*
+             * most of the time D is very small, so we can optimize tmp := D*X+Y
+             */
+            if (BN_is_one(D)) {
+                if (!BN_add(tmp, X, Y))
+                    goto err;
+            } else {
+                if (BN_is_word(D, 2)) {
+                    if (!BN_lshift1(tmp, X))
+                        goto err;
+                } else if (BN_is_word(D, 4)) {
+                    if (!BN_lshift(tmp, X, 2))
+                        goto err;
+                } else if (D->top == 1) {
+                    if (!BN_copy(tmp, X))
+                        goto err;
+                    if (!BN_mul_word(tmp, D->d[0]))
+                        goto err;
+                } else {
+                    if (!BN_mul(tmp, D, X, ctx))
+                        goto err;
+                }
+                if (!BN_add(tmp, tmp, Y))
+                    goto err;
+            }
+
+            M = Y;      /* keep the BIGNUM object, the value does not matter */
+            Y = X;
+            X = tmp;
+            sign = -sign;
+        }
+    }
+
+    /*-
+     * The while loop (Euclid's algorithm) ends when
+     *      A == gcd(a,n);
+     * we have
+     *       sign*Y*a  ==  A  (mod |n|),
+     * where  Y  is non-negative.
+     */
+
+    if (sign < 0) {
+        if (!BN_sub(Y, n, Y))
+            goto err;
+    }
+    /* Now  Y*a  ==  A  (mod |n|).  */
+
+    if (BN_is_one(A)) {
+        /* Y*a == 1  (mod |n|) */
+        if (!Y->neg && BN_ucmp(Y, n) < 0) {
+            if (!BN_copy(R, Y))
+                goto err;
+        } else {
+            if (!BN_nnmod(R, Y, n, ctx))
+                goto err;
+        }
+    } else {
+        if (pnoinv)
+            *pnoinv = 1;
+        goto err;
+    }
+    ret = R;
+ err:
+    if ((ret == NULL) && (in == NULL))
+        BN_free(R);
+    BN_CTX_end(ctx);
+    bn_check_top(ret);
+    return ret;
+}
+
+/*
+ * BN_mod_inverse_no_branch is a special version of BN_mod_inverse. It does
+ * not contain branches that may leak sensitive information.
+ */
+static BIGNUM *BN_mod_inverse_no_branch(BIGNUM *in,
+                                        const BIGNUM *a, const BIGNUM *n,
+                                        BN_CTX *ctx)
+{
+    BIGNUM *A, *B, *X, *Y, *M, *D, *T, *R = NULL;
+    BIGNUM *ret = NULL;
+    int sign;
+
+    bn_check_top(a);
+    bn_check_top(n);
+
+    BN_CTX_start(ctx);
+    A = BN_CTX_get(ctx);
+    B = BN_CTX_get(ctx);
+    X = BN_CTX_get(ctx);
+    D = BN_CTX_get(ctx);
+    M = BN_CTX_get(ctx);
+    Y = BN_CTX_get(ctx);
+    T = BN_CTX_get(ctx);
+    if (T == NULL)
+        goto err;
+
+    if (in == NULL)
+        R = BN_new();
+    else
+        R = in;
+    if (R == NULL)
+        goto err;
+
+    BN_one(X);
+    BN_zero(Y);
+    if (BN_copy(B, a) == NULL)
+        goto err;
+    if (BN_copy(A, n) == NULL)
+        goto err;
+    A->neg = 0;
+
+    if (B->neg || (BN_ucmp(B, A) >= 0)) {
+        /*
+         * Turn BN_FLG_CONSTTIME flag on, so that when BN_div is invoked,
+         * BN_div_no_branch will be called eventually.
+         */
+         {
+            BIGNUM local_B;
+            bn_init(&local_B);
+            BN_with_flags(&local_B, B, BN_FLG_CONSTTIME);
+            if (!BN_nnmod(B, &local_B, A, ctx))
+                goto err;
+            /* Ensure local_B goes out of scope before any further use of B */
+        }
+    }
+    sign = -1;
+    /*-
+     * From  B = a mod |n|,  A = |n|  it follows that
+     *
+     *      0 <= B < A,
+     *     -sign*X*a  ==  B   (mod |n|),
+     *      sign*Y*a  ==  A   (mod |n|).
+     */
+
+    while (!BN_is_zero(B)) {
+        BIGNUM *tmp;
+
+        /*-
+         *      0 < B < A,
+         * (*) -sign*X*a  ==  B   (mod |n|),
+         *      sign*Y*a  ==  A   (mod |n|)
+         */
+
+        /*
+         * Turn BN_FLG_CONSTTIME flag on, so that when BN_div is invoked,
+         * BN_div_no_branch will be called eventually.
+         */
+        {
+            BIGNUM local_A;
+            bn_init(&local_A);
+            BN_with_flags(&local_A, A, BN_FLG_CONSTTIME);
+
+            /* (D, M) := (A/B, A%B) ... */
+            if (!BN_div(D, M, &local_A, B, ctx))
+                goto err;
+            /* Ensure local_A goes out of scope before any further use of A */
+        }
+
+        /*-
+         * Now
+         *      A = D*B + M;
+         * thus we have
+         * (**)  sign*Y*a  ==  D*B + M   (mod |n|).
+         */
+
+        tmp = A;                /* keep the BIGNUM object, the value does not
+                                 * matter */
+
+        /* (A, B) := (B, A mod B) ... */
+        A = B;
+        B = M;
+        /* ... so we have  0 <= B < A  again */
+
+        /*-
+         * Since the former  M  is now  B  and the former  B  is now  A,
+         * (**) translates into
+         *       sign*Y*a  ==  D*A + B    (mod |n|),
+         * i.e.
+         *       sign*Y*a - D*A  ==  B    (mod |n|).
+         * Similarly, (*) translates into
+         *      -sign*X*a  ==  A          (mod |n|).
+         *
+         * Thus,
+         *   sign*Y*a + D*sign*X*a  ==  B  (mod |n|),
+         * i.e.
+         *        sign*(Y + D*X)*a  ==  B  (mod |n|).
+         *
+         * So if we set  (X, Y, sign) := (Y + D*X, X, -sign), we arrive back at
+         *      -sign*X*a  ==  B   (mod |n|),
+         *       sign*Y*a  ==  A   (mod |n|).
+         * Note that  X  and  Y  stay non-negative all the time.
+         */
+
+        if (!BN_mul(tmp, D, X, ctx))
+            goto err;
+        if (!BN_add(tmp, tmp, Y))
+            goto err;
+
+        M = Y;                  /* keep the BIGNUM object, the value does not
+                                 * matter */
+        Y = X;
+        X = tmp;
+        sign = -sign;
+    }
+
+    /*-
+     * The while loop (Euclid's algorithm) ends when
+     *      A == gcd(a,n);
+     * we have
+     *       sign*Y*a  ==  A  (mod |n|),
+     * where  Y  is non-negative.
+     */
+
+    if (sign < 0) {
+        if (!BN_sub(Y, n, Y))
+            goto err;
+    }
+    /* Now  Y*a  ==  A  (mod |n|).  */
+
+    if (BN_is_one(A)) {
+        /* Y*a == 1  (mod |n|) */
+        if (!Y->neg && BN_ucmp(Y, n) < 0) {
+            if (!BN_copy(R, Y))
+                goto err;
+        } else {
+            if (!BN_nnmod(R, Y, n, ctx))
+                goto err;
+        }
+    } else {
+        BNerr(BN_F_BN_MOD_INVERSE_NO_BRANCH, BN_R_NO_INVERSE);
+        goto err;
+    }
+    ret = R;
+ err:
+    if ((ret == NULL) && (in == NULL))
+        BN_free(R);
+    BN_CTX_end(ctx);
+    bn_check_top(ret);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_gf2m.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_gf2m.c
new file mode 100644
index 000000000..34d8b69c1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_gf2m.c
@@ -0,0 +1,1166 @@
+/*
+ * Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <assert.h>
+#include <limits.h>
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+#ifndef OPENSSL_NO_EC2M
+
+/*
+ * Maximum number of iterations before BN_GF2m_mod_solve_quad_arr should
+ * fail.
+ */
+# define MAX_ITERATIONS 50
+
+# define SQR_nibble(w)   ((((w) & 8) << 3) \
+                       |  (((w) & 4) << 2) \
+                       |  (((w) & 2) << 1) \
+                       |   ((w) & 1))
+
+
+/* Platform-specific macros to accelerate squaring. */
+# if defined(SIXTY_FOUR_BIT) || defined(SIXTY_FOUR_BIT_LONG)
+#  define SQR1(w) \
+    SQR_nibble((w) >> 60) << 56 | SQR_nibble((w) >> 56) << 48 | \
+    SQR_nibble((w) >> 52) << 40 | SQR_nibble((w) >> 48) << 32 | \
+    SQR_nibble((w) >> 44) << 24 | SQR_nibble((w) >> 40) << 16 | \
+    SQR_nibble((w) >> 36) <<  8 | SQR_nibble((w) >> 32)
+#  define SQR0(w) \
+    SQR_nibble((w) >> 28) << 56 | SQR_nibble((w) >> 24) << 48 | \
+    SQR_nibble((w) >> 20) << 40 | SQR_nibble((w) >> 16) << 32 | \
+    SQR_nibble((w) >> 12) << 24 | SQR_nibble((w) >>  8) << 16 | \
+    SQR_nibble((w) >>  4) <<  8 | SQR_nibble((w)      )
+# endif
+# ifdef THIRTY_TWO_BIT
+#  define SQR1(w) \
+    SQR_nibble((w) >> 28) << 24 | SQR_nibble((w) >> 24) << 16 | \
+    SQR_nibble((w) >> 20) <<  8 | SQR_nibble((w) >> 16)
+#  define SQR0(w) \
+    SQR_nibble((w) >> 12) << 24 | SQR_nibble((w) >>  8) << 16 | \
+    SQR_nibble((w) >>  4) <<  8 | SQR_nibble((w)      )
+# endif
+
+# if !defined(OPENSSL_BN_ASM_GF2m)
+/*
+ * Product of two polynomials a, b each with degree < BN_BITS2 - 1, result is
+ * a polynomial r with degree < 2 * BN_BITS - 1 The caller MUST ensure that
+ * the variables have the right amount of space allocated.
+ */
+#  ifdef THIRTY_TWO_BIT
+static void bn_GF2m_mul_1x1(BN_ULONG *r1, BN_ULONG *r0, const BN_ULONG a,
+                            const BN_ULONG b)
+{
+    register BN_ULONG h, l, s;
+    BN_ULONG tab[8], top2b = a >> 30;
+    register BN_ULONG a1, a2, a4;
+
+    a1 = a & (0x3FFFFFFF);
+    a2 = a1 << 1;
+    a4 = a2 << 1;
+
+    tab[0] = 0;
+    tab[1] = a1;
+    tab[2] = a2;
+    tab[3] = a1 ^ a2;
+    tab[4] = a4;
+    tab[5] = a1 ^ a4;
+    tab[6] = a2 ^ a4;
+    tab[7] = a1 ^ a2 ^ a4;
+
+    s = tab[b & 0x7];
+    l = s;
+    s = tab[b >> 3 & 0x7];
+    l ^= s << 3;
+    h = s >> 29;
+    s = tab[b >> 6 & 0x7];
+    l ^= s << 6;
+    h ^= s >> 26;
+    s = tab[b >> 9 & 0x7];
+    l ^= s << 9;
+    h ^= s >> 23;
+    s = tab[b >> 12 & 0x7];
+    l ^= s << 12;
+    h ^= s >> 20;
+    s = tab[b >> 15 & 0x7];
+    l ^= s << 15;
+    h ^= s >> 17;
+    s = tab[b >> 18 & 0x7];
+    l ^= s << 18;
+    h ^= s >> 14;
+    s = tab[b >> 21 & 0x7];
+    l ^= s << 21;
+    h ^= s >> 11;
+    s = tab[b >> 24 & 0x7];
+    l ^= s << 24;
+    h ^= s >> 8;
+    s = tab[b >> 27 & 0x7];
+    l ^= s << 27;
+    h ^= s >> 5;
+    s = tab[b >> 30];
+    l ^= s << 30;
+    h ^= s >> 2;
+
+    /* compensate for the top two bits of a */
+
+    if (top2b & 01) {
+        l ^= b << 30;
+        h ^= b >> 2;
+    }
+    if (top2b & 02) {
+        l ^= b << 31;
+        h ^= b >> 1;
+    }
+
+    *r1 = h;
+    *r0 = l;
+}
+#  endif
+#  if defined(SIXTY_FOUR_BIT) || defined(SIXTY_FOUR_BIT_LONG)
+static void bn_GF2m_mul_1x1(BN_ULONG *r1, BN_ULONG *r0, const BN_ULONG a,
+                            const BN_ULONG b)
+{
+    register BN_ULONG h, l, s;
+    BN_ULONG tab[16], top3b = a >> 61;
+    register BN_ULONG a1, a2, a4, a8;
+
+    a1 = a & (0x1FFFFFFFFFFFFFFFULL);
+    a2 = a1 << 1;
+    a4 = a2 << 1;
+    a8 = a4 << 1;
+
+    tab[0] = 0;
+    tab[1] = a1;
+    tab[2] = a2;
+    tab[3] = a1 ^ a2;
+    tab[4] = a4;
+    tab[5] = a1 ^ a4;
+    tab[6] = a2 ^ a4;
+    tab[7] = a1 ^ a2 ^ a4;
+    tab[8] = a8;
+    tab[9] = a1 ^ a8;
+    tab[10] = a2 ^ a8;
+    tab[11] = a1 ^ a2 ^ a8;
+    tab[12] = a4 ^ a8;
+    tab[13] = a1 ^ a4 ^ a8;
+    tab[14] = a2 ^ a4 ^ a8;
+    tab[15] = a1 ^ a2 ^ a4 ^ a8;
+
+    s = tab[b & 0xF];
+    l = s;
+    s = tab[b >> 4 & 0xF];
+    l ^= s << 4;
+    h = s >> 60;
+    s = tab[b >> 8 & 0xF];
+    l ^= s << 8;
+    h ^= s >> 56;
+    s = tab[b >> 12 & 0xF];
+    l ^= s << 12;
+    h ^= s >> 52;
+    s = tab[b >> 16 & 0xF];
+    l ^= s << 16;
+    h ^= s >> 48;
+    s = tab[b >> 20 & 0xF];
+    l ^= s << 20;
+    h ^= s >> 44;
+    s = tab[b >> 24 & 0xF];
+    l ^= s << 24;
+    h ^= s >> 40;
+    s = tab[b >> 28 & 0xF];
+    l ^= s << 28;
+    h ^= s >> 36;
+    s = tab[b >> 32 & 0xF];
+    l ^= s << 32;
+    h ^= s >> 32;
+    s = tab[b >> 36 & 0xF];
+    l ^= s << 36;
+    h ^= s >> 28;
+    s = tab[b >> 40 & 0xF];
+    l ^= s << 40;
+    h ^= s >> 24;
+    s = tab[b >> 44 & 0xF];
+    l ^= s << 44;
+    h ^= s >> 20;
+    s = tab[b >> 48 & 0xF];
+    l ^= s << 48;
+    h ^= s >> 16;
+    s = tab[b >> 52 & 0xF];
+    l ^= s << 52;
+    h ^= s >> 12;
+    s = tab[b >> 56 & 0xF];
+    l ^= s << 56;
+    h ^= s >> 8;
+    s = tab[b >> 60];
+    l ^= s << 60;
+    h ^= s >> 4;
+
+    /* compensate for the top three bits of a */
+
+    if (top3b & 01) {
+        l ^= b << 61;
+        h ^= b >> 3;
+    }
+    if (top3b & 02) {
+        l ^= b << 62;
+        h ^= b >> 2;
+    }
+    if (top3b & 04) {
+        l ^= b << 63;
+        h ^= b >> 1;
+    }
+
+    *r1 = h;
+    *r0 = l;
+}
+#  endif
+
+/*
+ * Product of two polynomials a, b each with degree < 2 * BN_BITS2 - 1,
+ * result is a polynomial r with degree < 4 * BN_BITS2 - 1 The caller MUST
+ * ensure that the variables have the right amount of space allocated.
+ */
+static void bn_GF2m_mul_2x2(BN_ULONG *r, const BN_ULONG a1, const BN_ULONG a0,
+                            const BN_ULONG b1, const BN_ULONG b0)
+{
+    BN_ULONG m1, m0;
+    /* r[3] = h1, r[2] = h0; r[1] = l1; r[0] = l0 */
+    bn_GF2m_mul_1x1(r + 3, r + 2, a1, b1);
+    bn_GF2m_mul_1x1(r + 1, r, a0, b0);
+    bn_GF2m_mul_1x1(&m1, &m0, a0 ^ a1, b0 ^ b1);
+    /* Correction on m1 ^= l1 ^ h1; m0 ^= l0 ^ h0; */
+    r[2] ^= m1 ^ r[1] ^ r[3];   /* h0 ^= m1 ^ l1 ^ h1; */
+    r[1] = r[3] ^ r[2] ^ r[0] ^ m1 ^ m0; /* l1 ^= l0 ^ h0 ^ m0; */
+}
+# else
+void bn_GF2m_mul_2x2(BN_ULONG *r, BN_ULONG a1, BN_ULONG a0, BN_ULONG b1,
+                     BN_ULONG b0);
+# endif
+
+/*
+ * Add polynomials a and b and store result in r; r could be a or b, a and b
+ * could be equal; r is the bitwise XOR of a and b.
+ */
+int BN_GF2m_add(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
+{
+    int i;
+    const BIGNUM *at, *bt;
+
+    bn_check_top(a);
+    bn_check_top(b);
+
+    if (a->top < b->top) {
+        at = b;
+        bt = a;
+    } else {
+        at = a;
+        bt = b;
+    }
+
+    if (bn_wexpand(r, at->top) == NULL)
+        return 0;
+
+    for (i = 0; i < bt->top; i++) {
+        r->d[i] = at->d[i] ^ bt->d[i];
+    }
+    for (; i < at->top; i++) {
+        r->d[i] = at->d[i];
+    }
+
+    r->top = at->top;
+    bn_correct_top(r);
+
+    return 1;
+}
+
+/*-
+ * Some functions allow for representation of the irreducible polynomials
+ * as an int[], say p.  The irreducible f(t) is then of the form:
+ *     t^p[0] + t^p[1] + ... + t^p[k]
+ * where m = p[0] > p[1] > ... > p[k] = 0.
+ */
+
+/* Performs modular reduction of a and store result in r.  r could be a. */
+int BN_GF2m_mod_arr(BIGNUM *r, const BIGNUM *a, const int p[])
+{
+    int j, k;
+    int n, dN, d0, d1;
+    BN_ULONG zz, *z;
+
+    bn_check_top(a);
+
+    if (!p[0]) {
+        /* reduction mod 1 => return 0 */
+        BN_zero(r);
+        return 1;
+    }
+
+    /*
+     * Since the algorithm does reduction in the r value, if a != r, copy the
+     * contents of a into r so we can do reduction in r.
+     */
+    if (a != r) {
+        if (!bn_wexpand(r, a->top))
+            return 0;
+        for (j = 0; j < a->top; j++) {
+            r->d[j] = a->d[j];
+        }
+        r->top = a->top;
+    }
+    z = r->d;
+
+    /* start reduction */
+    dN = p[0] / BN_BITS2;
+    for (j = r->top - 1; j > dN;) {
+        zz = z[j];
+        if (z[j] == 0) {
+            j--;
+            continue;
+        }
+        z[j] = 0;
+
+        for (k = 1; p[k] != 0; k++) {
+            /* reducing component t^p[k] */
+            n = p[0] - p[k];
+            d0 = n % BN_BITS2;
+            d1 = BN_BITS2 - d0;
+            n /= BN_BITS2;
+            z[j - n] ^= (zz >> d0);
+            if (d0)
+                z[j - n - 1] ^= (zz << d1);
+        }
+
+        /* reducing component t^0 */
+        n = dN;
+        d0 = p[0] % BN_BITS2;
+        d1 = BN_BITS2 - d0;
+        z[j - n] ^= (zz >> d0);
+        if (d0)
+            z[j - n - 1] ^= (zz << d1);
+    }
+
+    /* final round of reduction */
+    while (j == dN) {
+
+        d0 = p[0] % BN_BITS2;
+        zz = z[dN] >> d0;
+        if (zz == 0)
+            break;
+        d1 = BN_BITS2 - d0;
+
+        /* clear up the top d1 bits */
+        if (d0)
+            z[dN] = (z[dN] << d1) >> d1;
+        else
+            z[dN] = 0;
+        z[0] ^= zz;             /* reduction t^0 component */
+
+        for (k = 1; p[k] != 0; k++) {
+            BN_ULONG tmp_ulong;
+
+            /* reducing component t^p[k] */
+            n = p[k] / BN_BITS2;
+            d0 = p[k] % BN_BITS2;
+            d1 = BN_BITS2 - d0;
+            z[n] ^= (zz << d0);
+            if (d0 && (tmp_ulong = zz >> d1))
+                z[n + 1] ^= tmp_ulong;
+        }
+
+    }
+
+    bn_correct_top(r);
+    return 1;
+}
+
+/*
+ * Performs modular reduction of a by p and store result in r.  r could be a.
+ * This function calls down to the BN_GF2m_mod_arr implementation; this wrapper
+ * function is only provided for convenience; for best performance, use the
+ * BN_GF2m_mod_arr function.
+ */
+int BN_GF2m_mod(BIGNUM *r, const BIGNUM *a, const BIGNUM *p)
+{
+    int ret = 0;
+    int arr[6];
+    bn_check_top(a);
+    bn_check_top(p);
+    ret = BN_GF2m_poly2arr(p, arr, OSSL_NELEM(arr));
+    if (!ret || ret > (int)OSSL_NELEM(arr)) {
+        BNerr(BN_F_BN_GF2M_MOD, BN_R_INVALID_LENGTH);
+        return 0;
+    }
+    ret = BN_GF2m_mod_arr(r, a, arr);
+    bn_check_top(r);
+    return ret;
+}
+
+/*
+ * Compute the product of two polynomials a and b, reduce modulo p, and store
+ * the result in r.  r could be a or b; a could be b.
+ */
+int BN_GF2m_mod_mul_arr(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                        const int p[], BN_CTX *ctx)
+{
+    int zlen, i, j, k, ret = 0;
+    BIGNUM *s;
+    BN_ULONG x1, x0, y1, y0, zz[4];
+
+    bn_check_top(a);
+    bn_check_top(b);
+
+    if (a == b) {
+        return BN_GF2m_mod_sqr_arr(r, a, p, ctx);
+    }
+
+    BN_CTX_start(ctx);
+    if ((s = BN_CTX_get(ctx)) == NULL)
+        goto err;
+
+    zlen = a->top + b->top + 4;
+    if (!bn_wexpand(s, zlen))
+        goto err;
+    s->top = zlen;
+
+    for (i = 0; i < zlen; i++)
+        s->d[i] = 0;
+
+    for (j = 0; j < b->top; j += 2) {
+        y0 = b->d[j];
+        y1 = ((j + 1) == b->top) ? 0 : b->d[j + 1];
+        for (i = 0; i < a->top; i += 2) {
+            x0 = a->d[i];
+            x1 = ((i + 1) == a->top) ? 0 : a->d[i + 1];
+            bn_GF2m_mul_2x2(zz, x1, x0, y1, y0);
+            for (k = 0; k < 4; k++)
+                s->d[i + j + k] ^= zz[k];
+        }
+    }
+
+    bn_correct_top(s);
+    if (BN_GF2m_mod_arr(r, s, p))
+        ret = 1;
+    bn_check_top(r);
+
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+/*
+ * Compute the product of two polynomials a and b, reduce modulo p, and store
+ * the result in r.  r could be a or b; a could equal b. This function calls
+ * down to the BN_GF2m_mod_mul_arr implementation; this wrapper function is
+ * only provided for convenience; for best performance, use the
+ * BN_GF2m_mod_mul_arr function.
+ */
+int BN_GF2m_mod_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                    const BIGNUM *p, BN_CTX *ctx)
+{
+    int ret = 0;
+    const int max = BN_num_bits(p) + 1;
+    int *arr = NULL;
+    bn_check_top(a);
+    bn_check_top(b);
+    bn_check_top(p);
+    if ((arr = OPENSSL_malloc(sizeof(*arr) * max)) == NULL)
+        goto err;
+    ret = BN_GF2m_poly2arr(p, arr, max);
+    if (!ret || ret > max) {
+        BNerr(BN_F_BN_GF2M_MOD_MUL, BN_R_INVALID_LENGTH);
+        goto err;
+    }
+    ret = BN_GF2m_mod_mul_arr(r, a, b, arr, ctx);
+    bn_check_top(r);
+ err:
+    OPENSSL_free(arr);
+    return ret;
+}
+
+/* Square a, reduce the result mod p, and store it in a.  r could be a. */
+int BN_GF2m_mod_sqr_arr(BIGNUM *r, const BIGNUM *a, const int p[],
+                        BN_CTX *ctx)
+{
+    int i, ret = 0;
+    BIGNUM *s;
+
+    bn_check_top(a);
+    BN_CTX_start(ctx);
+    if ((s = BN_CTX_get(ctx)) == NULL)
+        goto err;
+    if (!bn_wexpand(s, 2 * a->top))
+        goto err;
+
+    for (i = a->top - 1; i >= 0; i--) {
+        s->d[2 * i + 1] = SQR1(a->d[i]);
+        s->d[2 * i] = SQR0(a->d[i]);
+    }
+
+    s->top = 2 * a->top;
+    bn_correct_top(s);
+    if (!BN_GF2m_mod_arr(r, s, p))
+        goto err;
+    bn_check_top(r);
+    ret = 1;
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+/*
+ * Square a, reduce the result mod p, and store it in a.  r could be a. This
+ * function calls down to the BN_GF2m_mod_sqr_arr implementation; this
+ * wrapper function is only provided for convenience; for best performance,
+ * use the BN_GF2m_mod_sqr_arr function.
+ */
+int BN_GF2m_mod_sqr(BIGNUM *r, const BIGNUM *a, const BIGNUM *p, BN_CTX *ctx)
+{
+    int ret = 0;
+    const int max = BN_num_bits(p) + 1;
+    int *arr = NULL;
+
+    bn_check_top(a);
+    bn_check_top(p);
+    if ((arr = OPENSSL_malloc(sizeof(*arr) * max)) == NULL)
+        goto err;
+    ret = BN_GF2m_poly2arr(p, arr, max);
+    if (!ret || ret > max) {
+        BNerr(BN_F_BN_GF2M_MOD_SQR, BN_R_INVALID_LENGTH);
+        goto err;
+    }
+    ret = BN_GF2m_mod_sqr_arr(r, a, arr, ctx);
+    bn_check_top(r);
+ err:
+    OPENSSL_free(arr);
+    return ret;
+}
+
+/*
+ * Invert a, reduce modulo p, and store the result in r. r could be a. Uses
+ * Modified Almost Inverse Algorithm (Algorithm 10) from Hankerson, D.,
+ * Hernandez, J.L., and Menezes, A.  "Software Implementation of Elliptic
+ * Curve Cryptography Over Binary Fields".
+ */
+static int BN_GF2m_mod_inv_vartime(BIGNUM *r, const BIGNUM *a,
+                                   const BIGNUM *p, BN_CTX *ctx)
+{
+    BIGNUM *b, *c = NULL, *u = NULL, *v = NULL, *tmp;
+    int ret = 0;
+
+    bn_check_top(a);
+    bn_check_top(p);
+
+    BN_CTX_start(ctx);
+
+    b = BN_CTX_get(ctx);
+    c = BN_CTX_get(ctx);
+    u = BN_CTX_get(ctx);
+    v = BN_CTX_get(ctx);
+    if (v == NULL)
+        goto err;
+
+    if (!BN_GF2m_mod(u, a, p))
+        goto err;
+    if (BN_is_zero(u))
+        goto err;
+
+    if (!BN_copy(v, p))
+        goto err;
+# if 0
+    if (!BN_one(b))
+        goto err;
+
+    while (1) {
+        while (!BN_is_odd(u)) {
+            if (BN_is_zero(u))
+                goto err;
+            if (!BN_rshift1(u, u))
+                goto err;
+            if (BN_is_odd(b)) {
+                if (!BN_GF2m_add(b, b, p))
+                    goto err;
+            }
+            if (!BN_rshift1(b, b))
+                goto err;
+        }
+
+        if (BN_abs_is_word(u, 1))
+            break;
+
+        if (BN_num_bits(u) < BN_num_bits(v)) {
+            tmp = u;
+            u = v;
+            v = tmp;
+            tmp = b;
+            b = c;
+            c = tmp;
+        }
+
+        if (!BN_GF2m_add(u, u, v))
+            goto err;
+        if (!BN_GF2m_add(b, b, c))
+            goto err;
+    }
+# else
+    {
+        int i;
+        int ubits = BN_num_bits(u);
+        int vbits = BN_num_bits(v); /* v is copy of p */
+        int top = p->top;
+        BN_ULONG *udp, *bdp, *vdp, *cdp;
+
+        if (!bn_wexpand(u, top))
+            goto err;
+        udp = u->d;
+        for (i = u->top; i < top; i++)
+            udp[i] = 0;
+        u->top = top;
+        if (!bn_wexpand(b, top))
+          goto err;
+        bdp = b->d;
+        bdp[0] = 1;
+        for (i = 1; i < top; i++)
+            bdp[i] = 0;
+        b->top = top;
+        if (!bn_wexpand(c, top))
+          goto err;
+        cdp = c->d;
+        for (i = 0; i < top; i++)
+            cdp[i] = 0;
+        c->top = top;
+        vdp = v->d;             /* It pays off to "cache" *->d pointers,
+                                 * because it allows optimizer to be more
+                                 * aggressive. But we don't have to "cache"
+                                 * p->d, because *p is declared 'const'... */
+        while (1) {
+            while (ubits && !(udp[0] & 1)) {
+                BN_ULONG u0, u1, b0, b1, mask;
+
+                u0 = udp[0];
+                b0 = bdp[0];
+                mask = (BN_ULONG)0 - (b0 & 1);
+                b0 ^= p->d[0] & mask;
+                for (i = 0; i < top - 1; i++) {
+                    u1 = udp[i + 1];
+                    udp[i] = ((u0 >> 1) | (u1 << (BN_BITS2 - 1))) & BN_MASK2;
+                    u0 = u1;
+                    b1 = bdp[i + 1] ^ (p->d[i + 1] & mask);
+                    bdp[i] = ((b0 >> 1) | (b1 << (BN_BITS2 - 1))) & BN_MASK2;
+                    b0 = b1;
+                }
+                udp[i] = u0 >> 1;
+                bdp[i] = b0 >> 1;
+                ubits--;
+            }
+
+            if (ubits <= BN_BITS2) {
+                if (udp[0] == 0) /* poly was reducible */
+                    goto err;
+                if (udp[0] == 1)
+                    break;
+            }
+
+            if (ubits < vbits) {
+                i = ubits;
+                ubits = vbits;
+                vbits = i;
+                tmp = u;
+                u = v;
+                v = tmp;
+                tmp = b;
+                b = c;
+                c = tmp;
+                udp = vdp;
+                vdp = v->d;
+                bdp = cdp;
+                cdp = c->d;
+            }
+            for (i = 0; i < top; i++) {
+                udp[i] ^= vdp[i];
+                bdp[i] ^= cdp[i];
+            }
+            if (ubits == vbits) {
+                BN_ULONG ul;
+                int utop = (ubits - 1) / BN_BITS2;
+
+                while ((ul = udp[utop]) == 0 && utop)
+                    utop--;
+                ubits = utop * BN_BITS2 + BN_num_bits_word(ul);
+            }
+        }
+        bn_correct_top(b);
+    }
+# endif
+
+    if (!BN_copy(r, b))
+        goto err;
+    bn_check_top(r);
+    ret = 1;
+
+ err:
+# ifdef BN_DEBUG                /* BN_CTX_end would complain about the
+                                 * expanded form */
+    bn_correct_top(c);
+    bn_correct_top(u);
+    bn_correct_top(v);
+# endif
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+/*-
+ * Wrapper for BN_GF2m_mod_inv_vartime that blinds the input before calling.
+ * This is not constant time.
+ * But it does eliminate first order deduction on the input.
+ */
+int BN_GF2m_mod_inv(BIGNUM *r, const BIGNUM *a, const BIGNUM *p, BN_CTX *ctx)
+{
+    BIGNUM *b = NULL;
+    int ret = 0;
+
+    BN_CTX_start(ctx);
+    if ((b = BN_CTX_get(ctx)) == NULL)
+        goto err;
+
+    /* generate blinding value */
+    do {
+        if (!BN_priv_rand(b, BN_num_bits(p) - 1,
+                          BN_RAND_TOP_ANY, BN_RAND_BOTTOM_ANY))
+            goto err;
+    } while (BN_is_zero(b));
+
+    /* r := a * b */
+    if (!BN_GF2m_mod_mul(r, a, b, p, ctx))
+        goto err;
+
+    /* r := 1/(a * b) */
+    if (!BN_GF2m_mod_inv_vartime(r, r, p, ctx))
+        goto err;
+
+    /* r := b/(a * b) = 1/a */
+    if (!BN_GF2m_mod_mul(r, r, b, p, ctx))
+        goto err;
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+/*
+ * Invert xx, reduce modulo p, and store the result in r. r could be xx.
+ * This function calls down to the BN_GF2m_mod_inv implementation; this
+ * wrapper function is only provided for convenience; for best performance,
+ * use the BN_GF2m_mod_inv function.
+ */
+int BN_GF2m_mod_inv_arr(BIGNUM *r, const BIGNUM *xx, const int p[],
+                        BN_CTX *ctx)
+{
+    BIGNUM *field;
+    int ret = 0;
+
+    bn_check_top(xx);
+    BN_CTX_start(ctx);
+    if ((field = BN_CTX_get(ctx)) == NULL)
+        goto err;
+    if (!BN_GF2m_arr2poly(p, field))
+        goto err;
+
+    ret = BN_GF2m_mod_inv(r, xx, field, ctx);
+    bn_check_top(r);
+
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+/*
+ * Divide y by x, reduce modulo p, and store the result in r. r could be x
+ * or y, x could equal y.
+ */
+int BN_GF2m_mod_div(BIGNUM *r, const BIGNUM *y, const BIGNUM *x,
+                    const BIGNUM *p, BN_CTX *ctx)
+{
+    BIGNUM *xinv = NULL;
+    int ret = 0;
+
+    bn_check_top(y);
+    bn_check_top(x);
+    bn_check_top(p);
+
+    BN_CTX_start(ctx);
+    xinv = BN_CTX_get(ctx);
+    if (xinv == NULL)
+        goto err;
+
+    if (!BN_GF2m_mod_inv(xinv, x, p, ctx))
+        goto err;
+    if (!BN_GF2m_mod_mul(r, y, xinv, p, ctx))
+        goto err;
+    bn_check_top(r);
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+/*
+ * Divide yy by xx, reduce modulo p, and store the result in r. r could be xx
+ * * or yy, xx could equal yy. This function calls down to the
+ * BN_GF2m_mod_div implementation; this wrapper function is only provided for
+ * convenience; for best performance, use the BN_GF2m_mod_div function.
+ */
+int BN_GF2m_mod_div_arr(BIGNUM *r, const BIGNUM *yy, const BIGNUM *xx,
+                        const int p[], BN_CTX *ctx)
+{
+    BIGNUM *field;
+    int ret = 0;
+
+    bn_check_top(yy);
+    bn_check_top(xx);
+
+    BN_CTX_start(ctx);
+    if ((field = BN_CTX_get(ctx)) == NULL)
+        goto err;
+    if (!BN_GF2m_arr2poly(p, field))
+        goto err;
+
+    ret = BN_GF2m_mod_div(r, yy, xx, field, ctx);
+    bn_check_top(r);
+
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+/*
+ * Compute the bth power of a, reduce modulo p, and store the result in r.  r
+ * could be a. Uses simple square-and-multiply algorithm A.5.1 from IEEE
+ * P1363.
+ */
+int BN_GF2m_mod_exp_arr(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                        const int p[], BN_CTX *ctx)
+{
+    int ret = 0, i, n;
+    BIGNUM *u;
+
+    bn_check_top(a);
+    bn_check_top(b);
+
+    if (BN_is_zero(b))
+        return BN_one(r);
+
+    if (BN_abs_is_word(b, 1))
+        return (BN_copy(r, a) != NULL);
+
+    BN_CTX_start(ctx);
+    if ((u = BN_CTX_get(ctx)) == NULL)
+        goto err;
+
+    if (!BN_GF2m_mod_arr(u, a, p))
+        goto err;
+
+    n = BN_num_bits(b) - 1;
+    for (i = n - 1; i >= 0; i--) {
+        if (!BN_GF2m_mod_sqr_arr(u, u, p, ctx))
+            goto err;
+        if (BN_is_bit_set(b, i)) {
+            if (!BN_GF2m_mod_mul_arr(u, u, a, p, ctx))
+                goto err;
+        }
+    }
+    if (!BN_copy(r, u))
+        goto err;
+    bn_check_top(r);
+    ret = 1;
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+/*
+ * Compute the bth power of a, reduce modulo p, and store the result in r.  r
+ * could be a. This function calls down to the BN_GF2m_mod_exp_arr
+ * implementation; this wrapper function is only provided for convenience;
+ * for best performance, use the BN_GF2m_mod_exp_arr function.
+ */
+int BN_GF2m_mod_exp(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                    const BIGNUM *p, BN_CTX *ctx)
+{
+    int ret = 0;
+    const int max = BN_num_bits(p) + 1;
+    int *arr = NULL;
+    bn_check_top(a);
+    bn_check_top(b);
+    bn_check_top(p);
+    if ((arr = OPENSSL_malloc(sizeof(*arr) * max)) == NULL)
+        goto err;
+    ret = BN_GF2m_poly2arr(p, arr, max);
+    if (!ret || ret > max) {
+        BNerr(BN_F_BN_GF2M_MOD_EXP, BN_R_INVALID_LENGTH);
+        goto err;
+    }
+    ret = BN_GF2m_mod_exp_arr(r, a, b, arr, ctx);
+    bn_check_top(r);
+ err:
+    OPENSSL_free(arr);
+    return ret;
+}
+
+/*
+ * Compute the square root of a, reduce modulo p, and store the result in r.
+ * r could be a. Uses exponentiation as in algorithm A.4.1 from IEEE P1363.
+ */
+int BN_GF2m_mod_sqrt_arr(BIGNUM *r, const BIGNUM *a, const int p[],
+                         BN_CTX *ctx)
+{
+    int ret = 0;
+    BIGNUM *u;
+
+    bn_check_top(a);
+
+    if (!p[0]) {
+        /* reduction mod 1 => return 0 */
+        BN_zero(r);
+        return 1;
+    }
+
+    BN_CTX_start(ctx);
+    if ((u = BN_CTX_get(ctx)) == NULL)
+        goto err;
+
+    if (!BN_set_bit(u, p[0] - 1))
+        goto err;
+    ret = BN_GF2m_mod_exp_arr(r, a, u, p, ctx);
+    bn_check_top(r);
+
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+/*
+ * Compute the square root of a, reduce modulo p, and store the result in r.
+ * r could be a. This function calls down to the BN_GF2m_mod_sqrt_arr
+ * implementation; this wrapper function is only provided for convenience;
+ * for best performance, use the BN_GF2m_mod_sqrt_arr function.
+ */
+int BN_GF2m_mod_sqrt(BIGNUM *r, const BIGNUM *a, const BIGNUM *p, BN_CTX *ctx)
+{
+    int ret = 0;
+    const int max = BN_num_bits(p) + 1;
+    int *arr = NULL;
+    bn_check_top(a);
+    bn_check_top(p);
+    if ((arr = OPENSSL_malloc(sizeof(*arr) * max)) == NULL)
+        goto err;
+    ret = BN_GF2m_poly2arr(p, arr, max);
+    if (!ret || ret > max) {
+        BNerr(BN_F_BN_GF2M_MOD_SQRT, BN_R_INVALID_LENGTH);
+        goto err;
+    }
+    ret = BN_GF2m_mod_sqrt_arr(r, a, arr, ctx);
+    bn_check_top(r);
+ err:
+    OPENSSL_free(arr);
+    return ret;
+}
+
+/*
+ * Find r such that r^2 + r = a mod p.  r could be a. If no r exists returns
+ * 0. Uses algorithms A.4.7 and A.4.6 from IEEE P1363.
+ */
+int BN_GF2m_mod_solve_quad_arr(BIGNUM *r, const BIGNUM *a_, const int p[],
+                               BN_CTX *ctx)
+{
+    int ret = 0, count = 0, j;
+    BIGNUM *a, *z, *rho, *w, *w2, *tmp;
+
+    bn_check_top(a_);
+
+    if (!p[0]) {
+        /* reduction mod 1 => return 0 */
+        BN_zero(r);
+        return 1;
+    }
+
+    BN_CTX_start(ctx);
+    a = BN_CTX_get(ctx);
+    z = BN_CTX_get(ctx);
+    w = BN_CTX_get(ctx);
+    if (w == NULL)
+        goto err;
+
+    if (!BN_GF2m_mod_arr(a, a_, p))
+        goto err;
+
+    if (BN_is_zero(a)) {
+        BN_zero(r);
+        ret = 1;
+        goto err;
+    }
+
+    if (p[0] & 0x1) {           /* m is odd */
+        /* compute half-trace of a */
+        if (!BN_copy(z, a))
+            goto err;
+        for (j = 1; j <= (p[0] - 1) / 2; j++) {
+            if (!BN_GF2m_mod_sqr_arr(z, z, p, ctx))
+                goto err;
+            if (!BN_GF2m_mod_sqr_arr(z, z, p, ctx))
+                goto err;
+            if (!BN_GF2m_add(z, z, a))
+                goto err;
+        }
+
+    } else {                    /* m is even */
+
+        rho = BN_CTX_get(ctx);
+        w2 = BN_CTX_get(ctx);
+        tmp = BN_CTX_get(ctx);
+        if (tmp == NULL)
+            goto err;
+        do {
+            if (!BN_priv_rand(rho, p[0], BN_RAND_TOP_ONE, BN_RAND_BOTTOM_ANY))
+                goto err;
+            if (!BN_GF2m_mod_arr(rho, rho, p))
+                goto err;
+            BN_zero(z);
+            if (!BN_copy(w, rho))
+                goto err;
+            for (j = 1; j <= p[0] - 1; j++) {
+                if (!BN_GF2m_mod_sqr_arr(z, z, p, ctx))
+                    goto err;
+                if (!BN_GF2m_mod_sqr_arr(w2, w, p, ctx))
+                    goto err;
+                if (!BN_GF2m_mod_mul_arr(tmp, w2, a, p, ctx))
+                    goto err;
+                if (!BN_GF2m_add(z, z, tmp))
+                    goto err;
+                if (!BN_GF2m_add(w, w2, rho))
+                    goto err;
+            }
+            count++;
+        } while (BN_is_zero(w) && (count < MAX_ITERATIONS));
+        if (BN_is_zero(w)) {
+            BNerr(BN_F_BN_GF2M_MOD_SOLVE_QUAD_ARR, BN_R_TOO_MANY_ITERATIONS);
+            goto err;
+        }
+    }
+
+    if (!BN_GF2m_mod_sqr_arr(w, z, p, ctx))
+        goto err;
+    if (!BN_GF2m_add(w, z, w))
+        goto err;
+    if (BN_GF2m_cmp(w, a)) {
+        BNerr(BN_F_BN_GF2M_MOD_SOLVE_QUAD_ARR, BN_R_NO_SOLUTION);
+        goto err;
+    }
+
+    if (!BN_copy(r, z))
+        goto err;
+    bn_check_top(r);
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+/*
+ * Find r such that r^2 + r = a mod p.  r could be a. If no r exists returns
+ * 0. This function calls down to the BN_GF2m_mod_solve_quad_arr
+ * implementation; this wrapper function is only provided for convenience;
+ * for best performance, use the BN_GF2m_mod_solve_quad_arr function.
+ */
+int BN_GF2m_mod_solve_quad(BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
+                           BN_CTX *ctx)
+{
+    int ret = 0;
+    const int max = BN_num_bits(p) + 1;
+    int *arr = NULL;
+    bn_check_top(a);
+    bn_check_top(p);
+    if ((arr = OPENSSL_malloc(sizeof(*arr) * max)) == NULL)
+        goto err;
+    ret = BN_GF2m_poly2arr(p, arr, max);
+    if (!ret || ret > max) {
+        BNerr(BN_F_BN_GF2M_MOD_SOLVE_QUAD, BN_R_INVALID_LENGTH);
+        goto err;
+    }
+    ret = BN_GF2m_mod_solve_quad_arr(r, a, arr, ctx);
+    bn_check_top(r);
+ err:
+    OPENSSL_free(arr);
+    return ret;
+}
+
+/*
+ * Convert the bit-string representation of a polynomial ( \sum_{i=0}^n a_i *
+ * x^i) into an array of integers corresponding to the bits with non-zero
+ * coefficient.  Array is terminated with -1. Up to max elements of the array
+ * will be filled.  Return value is total number of array elements that would
+ * be filled if array was large enough.
+ */
+int BN_GF2m_poly2arr(const BIGNUM *a, int p[], int max)
+{
+    int i, j, k = 0;
+    BN_ULONG mask;
+
+    if (BN_is_zero(a))
+        return 0;
+
+    for (i = a->top - 1; i >= 0; i--) {
+        if (!a->d[i])
+            /* skip word if a->d[i] == 0 */
+            continue;
+        mask = BN_TBIT;
+        for (j = BN_BITS2 - 1; j >= 0; j--) {
+            if (a->d[i] & mask) {
+                if (k < max)
+                    p[k] = BN_BITS2 * i + j;
+                k++;
+            }
+            mask >>= 1;
+        }
+    }
+
+    if (k < max) {
+        p[k] = -1;
+        k++;
+    }
+
+    return k;
+}
+
+/*
+ * Convert the coefficient array representation of a polynomial to a
+ * bit-string.  The array must be terminated by -1.
+ */
+int BN_GF2m_arr2poly(const int p[], BIGNUM *a)
+{
+    int i;
+
+    bn_check_top(a);
+    BN_zero(a);
+    for (i = 0; p[i] != -1; i++) {
+        if (BN_set_bit(a, p[i]) == 0)
+            return 0;
+    }
+    bn_check_top(a);
+
+    return 1;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_intern.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_intern.c
new file mode 100644
index 000000000..46bc97575
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_intern.c
@@ -0,0 +1,199 @@
+/*
+ * Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+/*
+ * Determine the modified width-(w+1) Non-Adjacent Form (wNAF) of 'scalar'.
+ * This is an array  r[]  of values that are either zero or odd with an
+ * absolute value less than  2^w  satisfying
+ *     scalar = \sum_j r[j]*2^j
+ * where at most one of any  w+1  consecutive digits is non-zero
+ * with the exception that the most significant digit may be only
+ * w-1 zeros away from that next non-zero digit.
+ */
+signed char *bn_compute_wNAF(const BIGNUM *scalar, int w, size_t *ret_len)
+{
+    int window_val;
+    signed char *r = NULL;
+    int sign = 1;
+    int bit, next_bit, mask;
+    size_t len = 0, j;
+
+    if (BN_is_zero(scalar)) {
+        r = OPENSSL_malloc(1);
+        if (r == NULL) {
+            BNerr(BN_F_BN_COMPUTE_WNAF, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        r[0] = 0;
+        *ret_len = 1;
+        return r;
+    }
+
+    if (w <= 0 || w > 7) {      /* 'signed char' can represent integers with
+                                 * absolute values less than 2^7 */
+        BNerr(BN_F_BN_COMPUTE_WNAF, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    bit = 1 << w;               /* at most 128 */
+    next_bit = bit << 1;        /* at most 256 */
+    mask = next_bit - 1;        /* at most 255 */
+
+    if (BN_is_negative(scalar)) {
+        sign = -1;
+    }
+
+    if (scalar->d == NULL || scalar->top == 0) {
+        BNerr(BN_F_BN_COMPUTE_WNAF, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    len = BN_num_bits(scalar);
+    r = OPENSSL_malloc(len + 1); /*
+                                  * Modified wNAF may be one digit longer than binary representation
+                                  * (*ret_len will be set to the actual length, i.e. at most
+                                  * BN_num_bits(scalar) + 1)
+                                  */
+    if (r == NULL) {
+        BNerr(BN_F_BN_COMPUTE_WNAF, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    window_val = scalar->d[0] & mask;
+    j = 0;
+    while ((window_val != 0) || (j + w + 1 < len)) { /* if j+w+1 >= len,
+                                                      * window_val will not
+                                                      * increase */
+        int digit = 0;
+
+        /* 0 <= window_val <= 2^(w+1) */
+
+        if (window_val & 1) {
+            /* 0 < window_val < 2^(w+1) */
+
+            if (window_val & bit) {
+                digit = window_val - next_bit; /* -2^w < digit < 0 */
+
+#if 1                           /* modified wNAF */
+                if (j + w + 1 >= len) {
+                    /*
+                     * Special case for generating modified wNAFs:
+                     * no new bits will be added into window_val,
+                     * so using a positive digit here will decrease
+                     * the total length of the representation
+                     */
+
+                    digit = window_val & (mask >> 1); /* 0 < digit < 2^w */
+                }
+#endif
+            } else {
+                digit = window_val; /* 0 < digit < 2^w */
+            }
+
+            if (digit <= -bit || digit >= bit || !(digit & 1)) {
+                BNerr(BN_F_BN_COMPUTE_WNAF, ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+
+            window_val -= digit;
+
+            /*
+             * now window_val is 0 or 2^(w+1) in standard wNAF generation;
+             * for modified window NAFs, it may also be 2^w
+             */
+            if (window_val != 0 && window_val != next_bit
+                && window_val != bit) {
+                BNerr(BN_F_BN_COMPUTE_WNAF, ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+        }
+
+        r[j++] = sign * digit;
+
+        window_val >>= 1;
+        window_val += bit * BN_is_bit_set(scalar, j + w);
+
+        if (window_val > next_bit) {
+            BNerr(BN_F_BN_COMPUTE_WNAF, ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+    }
+
+    if (j > len + 1) {
+        BNerr(BN_F_BN_COMPUTE_WNAF, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    *ret_len = j;
+    return r;
+
+ err:
+    OPENSSL_free(r);
+    return NULL;
+}
+
+int bn_get_top(const BIGNUM *a)
+{
+    return a->top;
+}
+
+int bn_get_dmax(const BIGNUM *a)
+{
+    return a->dmax;
+}
+
+void bn_set_all_zero(BIGNUM *a)
+{
+    int i;
+
+    for (i = a->top; i < a->dmax; i++)
+        a->d[i] = 0;
+}
+
+int bn_copy_words(BN_ULONG *out, const BIGNUM *in, int size)
+{
+    if (in->top > size)
+        return 0;
+
+    memset(out, 0, sizeof(*out) * size);
+    if (in->d != NULL)
+        memcpy(out, in->d, sizeof(*out) * in->top);
+    return 1;
+}
+
+BN_ULONG *bn_get_words(const BIGNUM *a)
+{
+    return a->d;
+}
+
+void bn_set_static_words(BIGNUM *a, const BN_ULONG *words, int size)
+{
+    /*
+     * |const| qualifier omission is compensated by BN_FLG_STATIC_DATA
+     * flag, which effectively means "read-only data".
+     */
+    a->d = (BN_ULONG *)words;
+    a->dmax = a->top = size;
+    a->neg = 0;
+    a->flags |= BN_FLG_STATIC_DATA;
+    bn_correct_top(a);
+}
+
+int bn_set_words(BIGNUM *a, const BN_ULONG *words, int num_words)
+{
+    if (bn_wexpand(a, num_words) == NULL) {
+        BNerr(BN_F_BN_SET_WORDS, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    memcpy(a->d, words, sizeof(BN_ULONG) * num_words);
+    a->top = num_words;
+    bn_correct_top(a);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_kron.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_kron.c
new file mode 100644
index 000000000..b9bc6cca2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_kron.c
@@ -0,0 +1,140 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+/* least significant word */
+#define BN_lsw(n) (((n)->top == 0) ? (BN_ULONG) 0 : (n)->d[0])
+
+/* Returns -2 for errors because both -1 and 0 are valid results. */
+int BN_kronecker(const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx)
+{
+    int i;
+    int ret = -2;               /* avoid 'uninitialized' warning */
+    int err = 0;
+    BIGNUM *A, *B, *tmp;
+    /*-
+     * In 'tab', only odd-indexed entries are relevant:
+     * For any odd BIGNUM n,
+     *     tab[BN_lsw(n) & 7]
+     * is $(-1)^{(n^2-1)/8}$ (using TeX notation).
+     * Note that the sign of n does not matter.
+     */
+    static const int tab[8] = { 0, 1, 0, -1, 0, -1, 0, 1 };
+
+    bn_check_top(a);
+    bn_check_top(b);
+
+    BN_CTX_start(ctx);
+    A = BN_CTX_get(ctx);
+    B = BN_CTX_get(ctx);
+    if (B == NULL)
+        goto end;
+
+    err = !BN_copy(A, a);
+    if (err)
+        goto end;
+    err = !BN_copy(B, b);
+    if (err)
+        goto end;
+
+    /*
+     * Kronecker symbol, implemented according to Henri Cohen,
+     * "A Course in Computational Algebraic Number Theory"
+     * (algorithm 1.4.10).
+     */
+
+    /* Cohen's step 1: */
+
+    if (BN_is_zero(B)) {
+        ret = BN_abs_is_word(A, 1);
+        goto end;
+    }
+
+    /* Cohen's step 2: */
+
+    if (!BN_is_odd(A) && !BN_is_odd(B)) {
+        ret = 0;
+        goto end;
+    }
+
+    /* now  B  is non-zero */
+    i = 0;
+    while (!BN_is_bit_set(B, i))
+        i++;
+    err = !BN_rshift(B, B, i);
+    if (err)
+        goto end;
+    if (i & 1) {
+        /* i is odd */
+        /* (thus  B  was even, thus  A  must be odd!)  */
+
+        /* set 'ret' to $(-1)^{(A^2-1)/8}$ */
+        ret = tab[BN_lsw(A) & 7];
+    } else {
+        /* i is even */
+        ret = 1;
+    }
+
+    if (B->neg) {
+        B->neg = 0;
+        if (A->neg)
+            ret = -ret;
+    }
+
+    /*
+     * now B is positive and odd, so what remains to be done is to compute
+     * the Jacobi symbol (A/B) and multiply it by 'ret'
+     */
+
+    while (1) {
+        /* Cohen's step 3: */
+
+        /*  B  is positive and odd */
+
+        if (BN_is_zero(A)) {
+            ret = BN_is_one(B) ? ret : 0;
+            goto end;
+        }
+
+        /* now  A  is non-zero */
+        i = 0;
+        while (!BN_is_bit_set(A, i))
+            i++;
+        err = !BN_rshift(A, A, i);
+        if (err)
+            goto end;
+        if (i & 1) {
+            /* i is odd */
+            /* multiply 'ret' by  $(-1)^{(B^2-1)/8}$ */
+            ret = ret * tab[BN_lsw(B) & 7];
+        }
+
+        /* Cohen's step 4: */
+        /* multiply 'ret' by  $(-1)^{(A-1)(B-1)/4}$ */
+        if ((A->neg ? ~BN_lsw(A) : BN_lsw(A)) & BN_lsw(B) & 2)
+            ret = -ret;
+
+        /* (A, B) := (B mod |A|, |A|) */
+        err = !BN_nnmod(B, B, A, ctx);
+        if (err)
+            goto end;
+        tmp = A;
+        A = B;
+        B = tmp;
+        tmp->neg = 0;
+    }
+ end:
+    BN_CTX_end(ctx);
+    if (err)
+        return -2;
+    else
+        return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_lcl.h
new file mode 100644
index 000000000..8a36db2e8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_lcl.h
@@ -0,0 +1,671 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_BN_LCL_H
+# define HEADER_BN_LCL_H
+
+/*
+ * The EDK2 build doesn't use bn_conf.h; it sets THIRTY_TWO_BIT or
+ * SIXTY_FOUR_BIT in its own environment since it doesn't re-run our
+ * Configure script and needs to support both 32-bit and 64-bit.
+ */
+# include <openssl/opensslconf.h>
+
+# if !defined(OPENSSL_SYS_UEFI)
+#  include "internal/bn_conf.h"
+# endif
+
+# include "internal/bn_int.h"
+
+/*
+ * These preprocessor symbols control various aspects of the bignum headers
+ * and library code. They're not defined by any "normal" configuration, as
+ * they are intended for development and testing purposes. NB: defining all
+ * three can be useful for debugging application code as well as openssl
+ * itself. BN_DEBUG - turn on various debugging alterations to the bignum
+ * code BN_DEBUG_RAND - uses random poisoning of unused words to trip up
+ * mismanagement of bignum internals. You must also define BN_DEBUG.
+ */
+/* #define BN_DEBUG */
+/* #define BN_DEBUG_RAND */
+
+# ifndef OPENSSL_SMALL_FOOTPRINT
+#  define BN_MUL_COMBA
+#  define BN_SQR_COMBA
+#  define BN_RECURSION
+# endif
+
+/*
+ * This next option uses the C libraries (2 word)/(1 word) function. If it is
+ * not defined, I use my C version (which is slower). The reason for this
+ * flag is that when the particular C compiler library routine is used, and
+ * the library is linked with a different compiler, the library is missing.
+ * This mostly happens when the library is built with gcc and then linked
+ * using normal cc.  This would be a common occurrence because gcc normally
+ * produces code that is 2 times faster than system compilers for the big
+ * number stuff. For machines with only one compiler (or shared libraries),
+ * this should be on.  Again this in only really a problem on machines using
+ * "long long's", are 32bit, and are not using my assembler code.
+ */
+# if defined(OPENSSL_SYS_MSDOS) || defined(OPENSSL_SYS_WINDOWS) || \
+    defined(OPENSSL_SYS_WIN32) || defined(linux)
+#  define BN_DIV2W
+# endif
+
+/*
+ * 64-bit processor with LP64 ABI
+ */
+# ifdef SIXTY_FOUR_BIT_LONG
+#  define BN_ULLONG       unsigned long long
+#  define BN_BITS4        32
+#  define BN_MASK2        (0xffffffffffffffffL)
+#  define BN_MASK2l       (0xffffffffL)
+#  define BN_MASK2h       (0xffffffff00000000L)
+#  define BN_MASK2h1      (0xffffffff80000000L)
+#  define BN_DEC_CONV     (10000000000000000000UL)
+#  define BN_DEC_NUM      19
+#  define BN_DEC_FMT1     "%lu"
+#  define BN_DEC_FMT2     "%019lu"
+# endif
+
+/*
+ * 64-bit processor other than LP64 ABI
+ */
+# ifdef SIXTY_FOUR_BIT
+#  undef BN_LLONG
+#  undef BN_ULLONG
+#  define BN_BITS4        32
+#  define BN_MASK2        (0xffffffffffffffffLL)
+#  define BN_MASK2l       (0xffffffffL)
+#  define BN_MASK2h       (0xffffffff00000000LL)
+#  define BN_MASK2h1      (0xffffffff80000000LL)
+#  define BN_DEC_CONV     (10000000000000000000ULL)
+#  define BN_DEC_NUM      19
+#  define BN_DEC_FMT1     "%llu"
+#  define BN_DEC_FMT2     "%019llu"
+# endif
+
+# ifdef THIRTY_TWO_BIT
+#  ifdef BN_LLONG
+#   if defined(_WIN32) && !defined(__GNUC__)
+#    define BN_ULLONG     unsigned __int64
+#   else
+#    define BN_ULLONG     unsigned long long
+#   endif
+#  endif
+#  define BN_BITS4        16
+#  define BN_MASK2        (0xffffffffL)
+#  define BN_MASK2l       (0xffff)
+#  define BN_MASK2h1      (0xffff8000L)
+#  define BN_MASK2h       (0xffff0000L)
+#  define BN_DEC_CONV     (1000000000L)
+#  define BN_DEC_NUM      9
+#  define BN_DEC_FMT1     "%u"
+#  define BN_DEC_FMT2     "%09u"
+# endif
+
+
+/*-
+ * Bignum consistency macros
+ * There is one "API" macro, bn_fix_top(), for stripping leading zeroes from
+ * bignum data after direct manipulations on the data. There is also an
+ * "internal" macro, bn_check_top(), for verifying that there are no leading
+ * zeroes. Unfortunately, some auditing is required due to the fact that
+ * bn_fix_top() has become an overabused duct-tape because bignum data is
+ * occasionally passed around in an inconsistent state. So the following
+ * changes have been made to sort this out;
+ * - bn_fix_top()s implementation has been moved to bn_correct_top()
+ * - if BN_DEBUG isn't defined, bn_fix_top() maps to bn_correct_top(), and
+ *   bn_check_top() is as before.
+ * - if BN_DEBUG *is* defined;
+ *   - bn_check_top() tries to pollute unused words even if the bignum 'top' is
+ *     consistent. (ed: only if BN_DEBUG_RAND is defined)
+ *   - bn_fix_top() maps to bn_check_top() rather than "fixing" anything.
+ * The idea is to have debug builds flag up inconsistent bignums when they
+ * occur. If that occurs in a bn_fix_top(), we examine the code in question; if
+ * the use of bn_fix_top() was appropriate (ie. it follows directly after code
+ * that manipulates the bignum) it is converted to bn_correct_top(), and if it
+ * was not appropriate, we convert it permanently to bn_check_top() and track
+ * down the cause of the bug. Eventually, no internal code should be using the
+ * bn_fix_top() macro. External applications and libraries should try this with
+ * their own code too, both in terms of building against the openssl headers
+ * with BN_DEBUG defined *and* linking with a version of OpenSSL built with it
+ * defined. This not only improves external code, it provides more test
+ * coverage for openssl's own code.
+ */
+
+# ifdef BN_DEBUG
+/*
+ * The new BN_FLG_FIXED_TOP flag marks vectors that were not treated with
+ * bn_correct_top, in other words such vectors are permitted to have zeros
+ * in most significant limbs. Such vectors are used internally to achieve
+ * execution time invariance for critical operations with private keys.
+ * It's BN_DEBUG-only flag, because user application is not supposed to
+ * observe it anyway. Moreover, optimizing compiler would actually remove
+ * all operations manipulating the bit in question in non-BN_DEBUG build.
+ */
+#  define BN_FLG_FIXED_TOP 0x10000
+#  ifdef BN_DEBUG_RAND
+#   define bn_pollute(a) \
+        do { \
+            const BIGNUM *_bnum1 = (a); \
+            if (_bnum1->top < _bnum1->dmax) { \
+                unsigned char _tmp_char; \
+                /* We cast away const without the compiler knowing, any \
+                 * *genuinely* constant variables that aren't mutable \
+                 * wouldn't be constructed with top!=dmax. */ \
+                BN_ULONG *_not_const; \
+                memcpy(&_not_const, &_bnum1->d, sizeof(_not_const)); \
+                RAND_bytes(&_tmp_char, 1); /* Debug only - safe to ignore error return */\
+                memset(_not_const + _bnum1->top, _tmp_char, \
+                       sizeof(*_not_const) * (_bnum1->dmax - _bnum1->top)); \
+            } \
+        } while(0)
+#  else
+#   define bn_pollute(a)
+#  endif
+#  define bn_check_top(a) \
+        do { \
+                const BIGNUM *_bnum2 = (a); \
+                if (_bnum2 != NULL) { \
+                        int _top = _bnum2->top; \
+                        (void)ossl_assert((_top == 0 && !_bnum2->neg) || \
+                                  (_top && ((_bnum2->flags & BN_FLG_FIXED_TOP) \
+                                            || _bnum2->d[_top - 1] != 0))); \
+                        bn_pollute(_bnum2); \
+                } \
+        } while(0)
+
+#  define bn_fix_top(a)           bn_check_top(a)
+
+#  define bn_check_size(bn, bits) bn_wcheck_size(bn, ((bits+BN_BITS2-1))/BN_BITS2)
+#  define bn_wcheck_size(bn, words) \
+        do { \
+                const BIGNUM *_bnum2 = (bn); \
+                assert((words) <= (_bnum2)->dmax && \
+                       (words) >= (_bnum2)->top); \
+                /* avoid unused variable warning with NDEBUG */ \
+                (void)(_bnum2); \
+        } while(0)
+
+# else                          /* !BN_DEBUG */
+
+#  define BN_FLG_FIXED_TOP 0
+#  define bn_pollute(a)
+#  define bn_check_top(a)
+#  define bn_fix_top(a)           bn_correct_top(a)
+#  define bn_check_size(bn, bits)
+#  define bn_wcheck_size(bn, words)
+
+# endif
+
+BN_ULONG bn_mul_add_words(BN_ULONG *rp, const BN_ULONG *ap, int num,
+                          BN_ULONG w);
+BN_ULONG bn_mul_words(BN_ULONG *rp, const BN_ULONG *ap, int num, BN_ULONG w);
+void bn_sqr_words(BN_ULONG *rp, const BN_ULONG *ap, int num);
+BN_ULONG bn_div_words(BN_ULONG h, BN_ULONG l, BN_ULONG d);
+BN_ULONG bn_add_words(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp,
+                      int num);
+BN_ULONG bn_sub_words(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp,
+                      int num);
+
+struct bignum_st {
+    BN_ULONG *d;                /* Pointer to an array of 'BN_BITS2' bit
+                                 * chunks. */
+    int top;                    /* Index of last used d +1. */
+    /* The next are internal book keeping for bn_expand. */
+    int dmax;                   /* Size of the d array. */
+    int neg;                    /* one if the number is negative */
+    int flags;
+};
+
+/* Used for montgomery multiplication */
+struct bn_mont_ctx_st {
+    int ri;                     /* number of bits in R */
+    BIGNUM RR;                  /* used to convert to montgomery form,
+                                   possibly zero-padded */
+    BIGNUM N;                   /* The modulus */
+    BIGNUM Ni;                  /* R*(1/R mod N) - N*Ni = 1 (Ni is only
+                                 * stored for bignum algorithm) */
+    BN_ULONG n0[2];             /* least significant word(s) of Ni; (type
+                                 * changed with 0.9.9, was "BN_ULONG n0;"
+                                 * before) */
+    int flags;
+};
+
+/*
+ * Used for reciprocal division/mod functions It cannot be shared between
+ * threads
+ */
+struct bn_recp_ctx_st {
+    BIGNUM N;                   /* the divisor */
+    BIGNUM Nr;                  /* the reciprocal */
+    int num_bits;
+    int shift;
+    int flags;
+};
+
+/* Used for slow "generation" functions. */
+struct bn_gencb_st {
+    unsigned int ver;           /* To handle binary (in)compatibility */
+    void *arg;                  /* callback-specific data */
+    union {
+        /* if (ver==1) - handles old style callbacks */
+        void (*cb_1) (int, int, void *);
+        /* if (ver==2) - new callback style */
+        int (*cb_2) (int, int, BN_GENCB *);
+    } cb;
+};
+
+/*-
+ * BN_window_bits_for_exponent_size -- macro for sliding window mod_exp functions
+ *
+ *
+ * For window size 'w' (w >= 2) and a random 'b' bits exponent,
+ * the number of multiplications is a constant plus on average
+ *
+ *    2^(w-1) + (b-w)/(w+1);
+ *
+ * here  2^(w-1)  is for precomputing the table (we actually need
+ * entries only for windows that have the lowest bit set), and
+ * (b-w)/(w+1)  is an approximation for the expected number of
+ * w-bit windows, not counting the first one.
+ *
+ * Thus we should use
+ *
+ *    w >= 6  if        b > 671
+ *     w = 5  if  671 > b > 239
+ *     w = 4  if  239 > b >  79
+ *     w = 3  if   79 > b >  23
+ *    w <= 2  if   23 > b
+ *
+ * (with draws in between).  Very small exponents are often selected
+ * with low Hamming weight, so we use  w = 1  for b <= 23.
+ */
+# define BN_window_bits_for_exponent_size(b) \
+                ((b) > 671 ? 6 : \
+                 (b) > 239 ? 5 : \
+                 (b) >  79 ? 4 : \
+                 (b) >  23 ? 3 : 1)
+
+/*
+ * BN_mod_exp_mont_conttime is based on the assumption that the L1 data cache
+ * line width of the target processor is at least the following value.
+ */
+# define MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH      ( 64 )
+# define MOD_EXP_CTIME_MIN_CACHE_LINE_MASK       (MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH - 1)
+
+/*
+ * Window sizes optimized for fixed window size modular exponentiation
+ * algorithm (BN_mod_exp_mont_consttime). To achieve the security goals of
+ * BN_mode_exp_mont_consttime, the maximum size of the window must not exceed
+ * log_2(MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH). Window size thresholds are
+ * defined for cache line sizes of 32 and 64, cache line sizes where
+ * log_2(32)=5 and log_2(64)=6 respectively. A window size of 7 should only be
+ * used on processors that have a 128 byte or greater cache line size.
+ */
+# if MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH == 64
+
+#  define BN_window_bits_for_ctime_exponent_size(b) \
+                ((b) > 937 ? 6 : \
+                 (b) > 306 ? 5 : \
+                 (b) >  89 ? 4 : \
+                 (b) >  22 ? 3 : 1)
+#  define BN_MAX_WINDOW_BITS_FOR_CTIME_EXPONENT_SIZE    (6)
+
+# elif MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH == 32
+
+#  define BN_window_bits_for_ctime_exponent_size(b) \
+                ((b) > 306 ? 5 : \
+                 (b) >  89 ? 4 : \
+                 (b) >  22 ? 3 : 1)
+#  define BN_MAX_WINDOW_BITS_FOR_CTIME_EXPONENT_SIZE    (5)
+
+# endif
+
+/* Pentium pro 16,16,16,32,64 */
+/* Alpha       16,16,16,16.64 */
+# define BN_MULL_SIZE_NORMAL                     (16)/* 32 */
+# define BN_MUL_RECURSIVE_SIZE_NORMAL            (16)/* 32 less than */
+# define BN_SQR_RECURSIVE_SIZE_NORMAL            (16)/* 32 */
+# define BN_MUL_LOW_RECURSIVE_SIZE_NORMAL        (32)/* 32 */
+# define BN_MONT_CTX_SET_SIZE_WORD               (64)/* 32 */
+
+/*
+ * 2011-02-22 SMS. In various places, a size_t variable or a type cast to
+ * size_t was used to perform integer-only operations on pointers.  This
+ * failed on VMS with 64-bit pointers (CC /POINTER_SIZE = 64) because size_t
+ * is still only 32 bits.  What's needed in these cases is an integer type
+ * with the same size as a pointer, which size_t is not certain to be. The
+ * only fix here is VMS-specific.
+ */
+# if defined(OPENSSL_SYS_VMS)
+#  if __INITIAL_POINTER_SIZE == 64
+#   define PTR_SIZE_INT long long
+#  else                         /* __INITIAL_POINTER_SIZE == 64 */
+#   define PTR_SIZE_INT int
+#  endif                        /* __INITIAL_POINTER_SIZE == 64 [else] */
+# elif !defined(PTR_SIZE_INT)   /* defined(OPENSSL_SYS_VMS) */
+#  define PTR_SIZE_INT size_t
+# endif                         /* defined(OPENSSL_SYS_VMS) [else] */
+
+# if !defined(OPENSSL_NO_ASM) && !defined(OPENSSL_NO_INLINE_ASM) && !defined(PEDANTIC)
+/*
+ * BN_UMULT_HIGH section.
+ * If the compiler doesn't support 2*N integer type, then you have to
+ * replace every N*N multiplication with 4 (N/2)*(N/2) accompanied by some
+ * shifts and additions which unavoidably results in severe performance
+ * penalties. Of course provided that the hardware is capable of producing
+ * 2*N result... That's when you normally start considering assembler
+ * implementation. However! It should be pointed out that some CPUs (e.g.,
+ * PowerPC, Alpha, and IA-64) provide *separate* instruction calculating
+ * the upper half of the product placing the result into a general
+ * purpose register. Now *if* the compiler supports inline assembler,
+ * then it's not impossible to implement the "bignum" routines (and have
+ * the compiler optimize 'em) exhibiting "native" performance in C. That's
+ * what BN_UMULT_HIGH macro is about:-) Note that more recent compilers do
+ * support 2*64 integer type, which is also used here.
+ */
+#  if defined(__SIZEOF_INT128__) && __SIZEOF_INT128__==16 && \
+      (defined(SIXTY_FOUR_BIT) || defined(SIXTY_FOUR_BIT_LONG))
+#   define BN_UMULT_HIGH(a,b)          (((__uint128_t)(a)*(b))>>64)
+#   define BN_UMULT_LOHI(low,high,a,b) ({       \
+        __uint128_t ret=(__uint128_t)(a)*(b);   \
+        (high)=ret>>64; (low)=ret;      })
+#  elif defined(__alpha) && (defined(SIXTY_FOUR_BIT_LONG) || defined(SIXTY_FOUR_BIT))
+#   if defined(__DECC)
+#    include <c_asm.h>
+#    define BN_UMULT_HIGH(a,b)   (BN_ULONG)asm("umulh %a0,%a1,%v0",(a),(b))
+#   elif defined(__GNUC__) && __GNUC__>=2
+#    define BN_UMULT_HIGH(a,b)   ({     \
+        register BN_ULONG ret;          \
+        asm ("umulh     %1,%2,%0"       \
+             : "=r"(ret)                \
+             : "r"(a), "r"(b));         \
+        ret;                      })
+#   endif                       /* compiler */
+#  elif defined(_ARCH_PPC64) && defined(SIXTY_FOUR_BIT_LONG)
+#   if defined(__GNUC__) && __GNUC__>=2
+#    define BN_UMULT_HIGH(a,b)   ({     \
+        register BN_ULONG ret;          \
+        asm ("mulhdu    %0,%1,%2"       \
+             : "=r"(ret)                \
+             : "r"(a), "r"(b));         \
+        ret;                      })
+#   endif                       /* compiler */
+#  elif (defined(__x86_64) || defined(__x86_64__)) && \
+       (defined(SIXTY_FOUR_BIT_LONG) || defined(SIXTY_FOUR_BIT))
+#   if defined(__GNUC__) && __GNUC__>=2
+#    define BN_UMULT_HIGH(a,b)   ({     \
+        register BN_ULONG ret,discard;  \
+        asm ("mulq      %3"             \
+             : "=a"(discard),"=d"(ret)  \
+             : "a"(a), "g"(b)           \
+             : "cc");                   \
+        ret;                      })
+#    define BN_UMULT_LOHI(low,high,a,b) \
+        asm ("mulq      %3"             \
+                : "=a"(low),"=d"(high)  \
+                : "a"(a),"g"(b)         \
+                : "cc");
+#   endif
+#  elif (defined(_M_AMD64) || defined(_M_X64)) && defined(SIXTY_FOUR_BIT)
+#   if defined(_MSC_VER) && _MSC_VER>=1400
+unsigned __int64 __umulh(unsigned __int64 a, unsigned __int64 b);
+unsigned __int64 _umul128(unsigned __int64 a, unsigned __int64 b,
+                          unsigned __int64 *h);
+#    pragma intrinsic(__umulh,_umul128)
+#    define BN_UMULT_HIGH(a,b)           __umulh((a),(b))
+#    define BN_UMULT_LOHI(low,high,a,b)  ((low)=_umul128((a),(b),&(high)))
+#   endif
+#  elif defined(__mips) && (defined(SIXTY_FOUR_BIT) || defined(SIXTY_FOUR_BIT_LONG))
+#   if defined(__GNUC__) && __GNUC__>=2
+#    define BN_UMULT_HIGH(a,b) ({       \
+        register BN_ULONG ret;          \
+        asm ("dmultu    %1,%2"          \
+             : "=h"(ret)                \
+             : "r"(a), "r"(b) : "l");   \
+        ret;                    })
+#    define BN_UMULT_LOHI(low,high,a,b) \
+        asm ("dmultu    %2,%3"          \
+             : "=l"(low),"=h"(high)     \
+             : "r"(a), "r"(b));
+#   endif
+#  elif defined(__aarch64__) && defined(SIXTY_FOUR_BIT_LONG)
+#   if defined(__GNUC__) && __GNUC__>=2
+#    define BN_UMULT_HIGH(a,b)   ({     \
+        register BN_ULONG ret;          \
+        asm ("umulh     %0,%1,%2"       \
+             : "=r"(ret)                \
+             : "r"(a), "r"(b));         \
+        ret;                      })
+#   endif
+#  endif                        /* cpu */
+# endif                         /* OPENSSL_NO_ASM */
+
+# ifdef BN_DEBUG_RAND
+#  define bn_clear_top2max(a) \
+        { \
+        int      ind = (a)->dmax - (a)->top; \
+        BN_ULONG *ftl = &(a)->d[(a)->top-1]; \
+        for (; ind != 0; ind--) \
+                *(++ftl) = 0x0; \
+        }
+# else
+#  define bn_clear_top2max(a)
+# endif
+
+# ifdef BN_LLONG
+/*******************************************************************
+ * Using the long long type, has to be twice as wide as BN_ULONG...
+ */
+#  define Lw(t)    (((BN_ULONG)(t))&BN_MASK2)
+#  define Hw(t)    (((BN_ULONG)((t)>>BN_BITS2))&BN_MASK2)
+
+#  define mul_add(r,a,w,c) { \
+        BN_ULLONG t; \
+        t=(BN_ULLONG)w * (a) + (r) + (c); \
+        (r)= Lw(t); \
+        (c)= Hw(t); \
+        }
+
+#  define mul(r,a,w,c) { \
+        BN_ULLONG t; \
+        t=(BN_ULLONG)w * (a) + (c); \
+        (r)= Lw(t); \
+        (c)= Hw(t); \
+        }
+
+#  define sqr(r0,r1,a) { \
+        BN_ULLONG t; \
+        t=(BN_ULLONG)(a)*(a); \
+        (r0)=Lw(t); \
+        (r1)=Hw(t); \
+        }
+
+# elif defined(BN_UMULT_LOHI)
+#  define mul_add(r,a,w,c) {              \
+        BN_ULONG high,low,ret,tmp=(a);  \
+        ret =  (r);                     \
+        BN_UMULT_LOHI(low,high,w,tmp);  \
+        ret += (c);                     \
+        (c) =  (ret<(c))?1:0;           \
+        (c) += high;                    \
+        ret += low;                     \
+        (c) += (ret<low)?1:0;           \
+        (r) =  ret;                     \
+        }
+
+#  define mul(r,a,w,c)    {               \
+        BN_ULONG high,low,ret,ta=(a);   \
+        BN_UMULT_LOHI(low,high,w,ta);   \
+        ret =  low + (c);               \
+        (c) =  high;                    \
+        (c) += (ret<low)?1:0;           \
+        (r) =  ret;                     \
+        }
+
+#  define sqr(r0,r1,a)    {               \
+        BN_ULONG tmp=(a);               \
+        BN_UMULT_LOHI(r0,r1,tmp,tmp);   \
+        }
+
+# elif defined(BN_UMULT_HIGH)
+#  define mul_add(r,a,w,c) {              \
+        BN_ULONG high,low,ret,tmp=(a);  \
+        ret =  (r);                     \
+        high=  BN_UMULT_HIGH(w,tmp);    \
+        ret += (c);                     \
+        low =  (w) * tmp;               \
+        (c) =  (ret<(c))?1:0;           \
+        (c) += high;                    \
+        ret += low;                     \
+        (c) += (ret<low)?1:0;           \
+        (r) =  ret;                     \
+        }
+
+#  define mul(r,a,w,c)    {               \
+        BN_ULONG high,low,ret,ta=(a);   \
+        low =  (w) * ta;                \
+        high=  BN_UMULT_HIGH(w,ta);     \
+        ret =  low + (c);               \
+        (c) =  high;                    \
+        (c) += (ret<low)?1:0;           \
+        (r) =  ret;                     \
+        }
+
+#  define sqr(r0,r1,a)    {               \
+        BN_ULONG tmp=(a);               \
+        (r0) = tmp * tmp;               \
+        (r1) = BN_UMULT_HIGH(tmp,tmp);  \
+        }
+
+# else
+/*************************************************************
+ * No long long type
+ */
+
+#  define LBITS(a)        ((a)&BN_MASK2l)
+#  define HBITS(a)        (((a)>>BN_BITS4)&BN_MASK2l)
+#  define L2HBITS(a)      (((a)<<BN_BITS4)&BN_MASK2)
+
+#  define LLBITS(a)       ((a)&BN_MASKl)
+#  define LHBITS(a)       (((a)>>BN_BITS2)&BN_MASKl)
+#  define LL2HBITS(a)     ((BN_ULLONG)((a)&BN_MASKl)<<BN_BITS2)
+
+#  define mul64(l,h,bl,bh) \
+        { \
+        BN_ULONG m,m1,lt,ht; \
+ \
+        lt=l; \
+        ht=h; \
+        m =(bh)*(lt); \
+        lt=(bl)*(lt); \
+        m1=(bl)*(ht); \
+        ht =(bh)*(ht); \
+        m=(m+m1)&BN_MASK2; if (m < m1) ht+=L2HBITS((BN_ULONG)1); \
+        ht+=HBITS(m); \
+        m1=L2HBITS(m); \
+        lt=(lt+m1)&BN_MASK2; if (lt < m1) ht++; \
+        (l)=lt; \
+        (h)=ht; \
+        }
+
+#  define sqr64(lo,ho,in) \
+        { \
+        BN_ULONG l,h,m; \
+ \
+        h=(in); \
+        l=LBITS(h); \
+        h=HBITS(h); \
+        m =(l)*(h); \
+        l*=l; \
+        h*=h; \
+        h+=(m&BN_MASK2h1)>>(BN_BITS4-1); \
+        m =(m&BN_MASK2l)<<(BN_BITS4+1); \
+        l=(l+m)&BN_MASK2; if (l < m) h++; \
+        (lo)=l; \
+        (ho)=h; \
+        }
+
+#  define mul_add(r,a,bl,bh,c) { \
+        BN_ULONG l,h; \
+ \
+        h= (a); \
+        l=LBITS(h); \
+        h=HBITS(h); \
+        mul64(l,h,(bl),(bh)); \
+ \
+        /* non-multiply part */ \
+        l=(l+(c))&BN_MASK2; if (l < (c)) h++; \
+        (c)=(r); \
+        l=(l+(c))&BN_MASK2; if (l < (c)) h++; \
+        (c)=h&BN_MASK2; \
+        (r)=l; \
+        }
+
+#  define mul(r,a,bl,bh,c) { \
+        BN_ULONG l,h; \
+ \
+        h= (a); \
+        l=LBITS(h); \
+        h=HBITS(h); \
+        mul64(l,h,(bl),(bh)); \
+ \
+        /* non-multiply part */ \
+        l+=(c); if ((l&BN_MASK2) < (c)) h++; \
+        (c)=h&BN_MASK2; \
+        (r)=l&BN_MASK2; \
+        }
+# endif                         /* !BN_LLONG */
+
+void BN_RECP_CTX_init(BN_RECP_CTX *recp);
+void BN_MONT_CTX_init(BN_MONT_CTX *ctx);
+
+void bn_init(BIGNUM *a);
+void bn_mul_normal(BN_ULONG *r, BN_ULONG *a, int na, BN_ULONG *b, int nb);
+void bn_mul_comba8(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b);
+void bn_mul_comba4(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b);
+void bn_sqr_normal(BN_ULONG *r, const BN_ULONG *a, int n, BN_ULONG *tmp);
+void bn_sqr_comba8(BN_ULONG *r, const BN_ULONG *a);
+void bn_sqr_comba4(BN_ULONG *r, const BN_ULONG *a);
+int bn_cmp_words(const BN_ULONG *a, const BN_ULONG *b, int n);
+int bn_cmp_part_words(const BN_ULONG *a, const BN_ULONG *b, int cl, int dl);
+void bn_mul_recursive(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n2,
+                      int dna, int dnb, BN_ULONG *t);
+void bn_mul_part_recursive(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b,
+                           int n, int tna, int tnb, BN_ULONG *t);
+void bn_sqr_recursive(BN_ULONG *r, const BN_ULONG *a, int n2, BN_ULONG *t);
+void bn_mul_low_normal(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n);
+void bn_mul_low_recursive(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n2,
+                          BN_ULONG *t);
+BN_ULONG bn_sub_part_words(BN_ULONG *r, const BN_ULONG *a, const BN_ULONG *b,
+                           int cl, int dl);
+int bn_mul_mont(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp,
+                const BN_ULONG *np, const BN_ULONG *n0, int num);
+
+BIGNUM *int_bn_mod_inverse(BIGNUM *in,
+                           const BIGNUM *a, const BIGNUM *n, BN_CTX *ctx,
+                           int *noinv);
+
+int bn_probable_prime_dh(BIGNUM *rnd, int bits,
+                         const BIGNUM *add, const BIGNUM *rem, BN_CTX *ctx);
+
+static ossl_inline BIGNUM *bn_expand(BIGNUM *a, int bits)
+{
+    if (bits > (INT_MAX - BN_BITS2 + 1))
+        return NULL;
+
+    if (((bits+BN_BITS2-1)/BN_BITS2) <= (a)->dmax)
+        return a;
+
+    return bn_expand2((a),(bits+BN_BITS2-1)/BN_BITS2);
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_lib.c
new file mode 100644
index 000000000..8286b3855
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_lib.c
@@ -0,0 +1,964 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <assert.h>
+#include <limits.h>
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+#include <openssl/opensslconf.h>
+#include "internal/constant_time_locl.h"
+
+/* This stuff appears to be completely unused, so is deprecated */
+#if OPENSSL_API_COMPAT < 0x00908000L
+/*-
+ * For a 32 bit machine
+ * 2 -   4 ==  128
+ * 3 -   8 ==  256
+ * 4 -  16 ==  512
+ * 5 -  32 == 1024
+ * 6 -  64 == 2048
+ * 7 - 128 == 4096
+ * 8 - 256 == 8192
+ */
+static int bn_limit_bits = 0;
+static int bn_limit_num = 8;    /* (1<<bn_limit_bits) */
+static int bn_limit_bits_low = 0;
+static int bn_limit_num_low = 8; /* (1<<bn_limit_bits_low) */
+static int bn_limit_bits_high = 0;
+static int bn_limit_num_high = 8; /* (1<<bn_limit_bits_high) */
+static int bn_limit_bits_mont = 0;
+static int bn_limit_num_mont = 8; /* (1<<bn_limit_bits_mont) */
+
+void BN_set_params(int mult, int high, int low, int mont)
+{
+    if (mult >= 0) {
+        if (mult > (int)(sizeof(int) * 8) - 1)
+            mult = sizeof(int) * 8 - 1;
+        bn_limit_bits = mult;
+        bn_limit_num = 1 << mult;
+    }
+    if (high >= 0) {
+        if (high > (int)(sizeof(int) * 8) - 1)
+            high = sizeof(int) * 8 - 1;
+        bn_limit_bits_high = high;
+        bn_limit_num_high = 1 << high;
+    }
+    if (low >= 0) {
+        if (low > (int)(sizeof(int) * 8) - 1)
+            low = sizeof(int) * 8 - 1;
+        bn_limit_bits_low = low;
+        bn_limit_num_low = 1 << low;
+    }
+    if (mont >= 0) {
+        if (mont > (int)(sizeof(int) * 8) - 1)
+            mont = sizeof(int) * 8 - 1;
+        bn_limit_bits_mont = mont;
+        bn_limit_num_mont = 1 << mont;
+    }
+}
+
+int BN_get_params(int which)
+{
+    if (which == 0)
+        return bn_limit_bits;
+    else if (which == 1)
+        return bn_limit_bits_high;
+    else if (which == 2)
+        return bn_limit_bits_low;
+    else if (which == 3)
+        return bn_limit_bits_mont;
+    else
+        return 0;
+}
+#endif
+
+const BIGNUM *BN_value_one(void)
+{
+    static const BN_ULONG data_one = 1L;
+    static const BIGNUM const_one =
+        { (BN_ULONG *)&data_one, 1, 1, 0, BN_FLG_STATIC_DATA };
+
+    return &const_one;
+}
+
+int BN_num_bits_word(BN_ULONG l)
+{
+    BN_ULONG x, mask;
+    int bits = (l != 0);
+
+#if BN_BITS2 > 32
+    x = l >> 32;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 32 & mask;
+    l ^= (x ^ l) & mask;
+#endif
+
+    x = l >> 16;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 16 & mask;
+    l ^= (x ^ l) & mask;
+
+    x = l >> 8;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 8 & mask;
+    l ^= (x ^ l) & mask;
+
+    x = l >> 4;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 4 & mask;
+    l ^= (x ^ l) & mask;
+
+    x = l >> 2;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 2 & mask;
+    l ^= (x ^ l) & mask;
+
+    x = l >> 1;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 1 & mask;
+
+    return bits;
+}
+
+int BN_num_bits(const BIGNUM *a)
+{
+    int i = a->top - 1;
+    bn_check_top(a);
+
+    if (BN_is_zero(a))
+        return 0;
+    return ((i * BN_BITS2) + BN_num_bits_word(a->d[i]));
+}
+
+static void bn_free_d(BIGNUM *a)
+{
+    if (BN_get_flags(a, BN_FLG_SECURE))
+        OPENSSL_secure_free(a->d);
+    else
+        OPENSSL_free(a->d);
+}
+
+
+void BN_clear_free(BIGNUM *a)
+{
+    if (a == NULL)
+        return;
+    if (a->d != NULL && !BN_get_flags(a, BN_FLG_STATIC_DATA)) {
+        OPENSSL_cleanse(a->d, a->dmax * sizeof(a->d[0]));
+        bn_free_d(a);
+    }
+    if (BN_get_flags(a, BN_FLG_MALLOCED)) {
+        OPENSSL_cleanse(a, sizeof(*a));
+        OPENSSL_free(a);
+    }
+}
+
+void BN_free(BIGNUM *a)
+{
+    if (a == NULL)
+        return;
+    if (!BN_get_flags(a, BN_FLG_STATIC_DATA))
+        bn_free_d(a);
+    if (a->flags & BN_FLG_MALLOCED)
+        OPENSSL_free(a);
+}
+
+void bn_init(BIGNUM *a)
+{
+    static BIGNUM nilbn;
+
+    *a = nilbn;
+    bn_check_top(a);
+}
+
+BIGNUM *BN_new(void)
+{
+    BIGNUM *ret;
+
+    if ((ret = OPENSSL_zalloc(sizeof(*ret))) == NULL) {
+        BNerr(BN_F_BN_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    ret->flags = BN_FLG_MALLOCED;
+    bn_check_top(ret);
+    return ret;
+}
+
+ BIGNUM *BN_secure_new(void)
+ {
+     BIGNUM *ret = BN_new();
+     if (ret != NULL)
+         ret->flags |= BN_FLG_SECURE;
+     return ret;
+ }
+
+/* This is used by bn_expand2() */
+/* The caller MUST check that words > b->dmax before calling this */
+static BN_ULONG *bn_expand_internal(const BIGNUM *b, int words)
+{
+    BN_ULONG *a = NULL;
+
+    if (words > (INT_MAX / (4 * BN_BITS2))) {
+        BNerr(BN_F_BN_EXPAND_INTERNAL, BN_R_BIGNUM_TOO_LONG);
+        return NULL;
+    }
+    if (BN_get_flags(b, BN_FLG_STATIC_DATA)) {
+        BNerr(BN_F_BN_EXPAND_INTERNAL, BN_R_EXPAND_ON_STATIC_BIGNUM_DATA);
+        return NULL;
+    }
+    if (BN_get_flags(b, BN_FLG_SECURE))
+        a = OPENSSL_secure_zalloc(words * sizeof(*a));
+    else
+        a = OPENSSL_zalloc(words * sizeof(*a));
+    if (a == NULL) {
+        BNerr(BN_F_BN_EXPAND_INTERNAL, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    assert(b->top <= words);
+    if (b->top > 0)
+        memcpy(a, b->d, sizeof(*a) * b->top);
+
+    return a;
+}
+
+/*
+ * This is an internal function that should not be used in applications. It
+ * ensures that 'b' has enough room for a 'words' word number and initialises
+ * any unused part of b->d with leading zeros. It is mostly used by the
+ * various BIGNUM routines. If there is an error, NULL is returned. If not,
+ * 'b' is returned.
+ */
+
+BIGNUM *bn_expand2(BIGNUM *b, int words)
+{
+    if (words > b->dmax) {
+        BN_ULONG *a = bn_expand_internal(b, words);
+        if (!a)
+            return NULL;
+        if (b->d) {
+            OPENSSL_cleanse(b->d, b->dmax * sizeof(b->d[0]));
+            bn_free_d(b);
+        }
+        b->d = a;
+        b->dmax = words;
+    }
+
+    return b;
+}
+
+BIGNUM *BN_dup(const BIGNUM *a)
+{
+    BIGNUM *t;
+
+    if (a == NULL)
+        return NULL;
+    bn_check_top(a);
+
+    t = BN_get_flags(a, BN_FLG_SECURE) ? BN_secure_new() : BN_new();
+    if (t == NULL)
+        return NULL;
+    if (!BN_copy(t, a)) {
+        BN_free(t);
+        return NULL;
+    }
+    bn_check_top(t);
+    return t;
+}
+
+BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
+{
+    bn_check_top(b);
+
+    if (a == b)
+        return a;
+    if (bn_wexpand(a, b->top) == NULL)
+        return NULL;
+
+    if (b->top > 0)
+        memcpy(a->d, b->d, sizeof(b->d[0]) * b->top);
+
+    a->neg = b->neg;
+    a->top = b->top;
+    a->flags |= b->flags & BN_FLG_FIXED_TOP;
+    bn_check_top(a);
+    return a;
+}
+
+#define FLAGS_DATA(flags) ((flags) & (BN_FLG_STATIC_DATA \
+                                    | BN_FLG_CONSTTIME   \
+                                    | BN_FLG_SECURE      \
+                                    | BN_FLG_FIXED_TOP))
+#define FLAGS_STRUCT(flags) ((flags) & (BN_FLG_MALLOCED))
+
+void BN_swap(BIGNUM *a, BIGNUM *b)
+{
+    int flags_old_a, flags_old_b;
+    BN_ULONG *tmp_d;
+    int tmp_top, tmp_dmax, tmp_neg;
+
+    bn_check_top(a);
+    bn_check_top(b);
+
+    flags_old_a = a->flags;
+    flags_old_b = b->flags;
+
+    tmp_d = a->d;
+    tmp_top = a->top;
+    tmp_dmax = a->dmax;
+    tmp_neg = a->neg;
+
+    a->d = b->d;
+    a->top = b->top;
+    a->dmax = b->dmax;
+    a->neg = b->neg;
+
+    b->d = tmp_d;
+    b->top = tmp_top;
+    b->dmax = tmp_dmax;
+    b->neg = tmp_neg;
+
+    a->flags = FLAGS_STRUCT(flags_old_a) | FLAGS_DATA(flags_old_b);
+    b->flags = FLAGS_STRUCT(flags_old_b) | FLAGS_DATA(flags_old_a);
+    bn_check_top(a);
+    bn_check_top(b);
+}
+
+void BN_clear(BIGNUM *a)
+{
+    bn_check_top(a);
+    if (a->d != NULL)
+        OPENSSL_cleanse(a->d, sizeof(*a->d) * a->dmax);
+    a->neg = 0;
+    a->top = 0;
+    a->flags &= ~BN_FLG_FIXED_TOP;
+}
+
+BN_ULONG BN_get_word(const BIGNUM *a)
+{
+    if (a->top > 1)
+        return BN_MASK2;
+    else if (a->top == 1)
+        return a->d[0];
+    /* a->top == 0 */
+    return 0;
+}
+
+int BN_set_word(BIGNUM *a, BN_ULONG w)
+{
+    bn_check_top(a);
+    if (bn_expand(a, (int)sizeof(BN_ULONG) * 8) == NULL)
+        return 0;
+    a->neg = 0;
+    a->d[0] = w;
+    a->top = (w ? 1 : 0);
+    a->flags &= ~BN_FLG_FIXED_TOP;
+    bn_check_top(a);
+    return 1;
+}
+
+BIGNUM *BN_bin2bn(const unsigned char *s, int len, BIGNUM *ret)
+{
+    unsigned int i, m;
+    unsigned int n;
+    BN_ULONG l;
+    BIGNUM *bn = NULL;
+
+    if (ret == NULL)
+        ret = bn = BN_new();
+    if (ret == NULL)
+        return NULL;
+    bn_check_top(ret);
+    /* Skip leading zero's. */
+    for ( ; len > 0 && *s == 0; s++, len--)
+        continue;
+    n = len;
+    if (n == 0) {
+        ret->top = 0;
+        return ret;
+    }
+    i = ((n - 1) / BN_BYTES) + 1;
+    m = ((n - 1) % (BN_BYTES));
+    if (bn_wexpand(ret, (int)i) == NULL) {
+        BN_free(bn);
+        return NULL;
+    }
+    ret->top = i;
+    ret->neg = 0;
+    l = 0;
+    while (n--) {
+        l = (l << 8L) | *(s++);
+        if (m-- == 0) {
+            ret->d[--i] = l;
+            l = 0;
+            m = BN_BYTES - 1;
+        }
+    }
+    /*
+     * need to call this due to clear byte at top if avoiding having the top
+     * bit set (-ve number)
+     */
+    bn_correct_top(ret);
+    return ret;
+}
+
+/* ignore negative */
+static int bn2binpad(const BIGNUM *a, unsigned char *to, int tolen)
+{
+    int n;
+    size_t i, lasti, j, atop, mask;
+    BN_ULONG l;
+
+    /*
+     * In case |a| is fixed-top, BN_num_bytes can return bogus length,
+     * but it's assumed that fixed-top inputs ought to be "nominated"
+     * even for padded output, so it works out...
+     */
+    n = BN_num_bytes(a);
+    if (tolen == -1) {
+        tolen = n;
+    } else if (tolen < n) {     /* uncommon/unlike case */
+        BIGNUM temp = *a;
+
+        bn_correct_top(&temp);
+        n = BN_num_bytes(&temp);
+        if (tolen < n)
+            return -1;
+    }
+
+    /* Swipe through whole available data and don't give away padded zero. */
+    atop = a->dmax * BN_BYTES;
+    if (atop == 0) {
+        OPENSSL_cleanse(to, tolen);
+        return tolen;
+    }
+
+    lasti = atop - 1;
+    atop = a->top * BN_BYTES;
+    for (i = 0, j = 0, to += tolen; j < (size_t)tolen; j++) {
+        l = a->d[i / BN_BYTES];
+        mask = 0 - ((j - atop) >> (8 * sizeof(i) - 1));
+        *--to = (unsigned char)(l >> (8 * (i % BN_BYTES)) & mask);
+        i += (i - lasti) >> (8 * sizeof(i) - 1); /* stay on last limb */
+    }
+
+    return tolen;
+}
+
+int BN_bn2binpad(const BIGNUM *a, unsigned char *to, int tolen)
+{
+    if (tolen < 0)
+        return -1;
+    return bn2binpad(a, to, tolen);
+}
+
+int BN_bn2bin(const BIGNUM *a, unsigned char *to)
+{
+    return bn2binpad(a, to, -1);
+}
+
+BIGNUM *BN_lebin2bn(const unsigned char *s, int len, BIGNUM *ret)
+{
+    unsigned int i, m;
+    unsigned int n;
+    BN_ULONG l;
+    BIGNUM *bn = NULL;
+
+    if (ret == NULL)
+        ret = bn = BN_new();
+    if (ret == NULL)
+        return NULL;
+    bn_check_top(ret);
+    s += len;
+    /* Skip trailing zeroes. */
+    for ( ; len > 0 && s[-1] == 0; s--, len--)
+        continue;
+    n = len;
+    if (n == 0) {
+        ret->top = 0;
+        return ret;
+    }
+    i = ((n - 1) / BN_BYTES) + 1;
+    m = ((n - 1) % (BN_BYTES));
+    if (bn_wexpand(ret, (int)i) == NULL) {
+        BN_free(bn);
+        return NULL;
+    }
+    ret->top = i;
+    ret->neg = 0;
+    l = 0;
+    while (n--) {
+        s--;
+        l = (l << 8L) | *s;
+        if (m-- == 0) {
+            ret->d[--i] = l;
+            l = 0;
+            m = BN_BYTES - 1;
+        }
+    }
+    /*
+     * need to call this due to clear byte at top if avoiding having the top
+     * bit set (-ve number)
+     */
+    bn_correct_top(ret);
+    return ret;
+}
+
+int BN_bn2lebinpad(const BIGNUM *a, unsigned char *to, int tolen)
+{
+    int i;
+    BN_ULONG l;
+    bn_check_top(a);
+    i = BN_num_bytes(a);
+    if (tolen < i)
+        return -1;
+    /* Add trailing zeroes if necessary */
+    if (tolen > i)
+        memset(to + i, 0, tolen - i);
+    to += i;
+    while (i--) {
+        l = a->d[i / BN_BYTES];
+        to--;
+        *to = (unsigned char)(l >> (8 * (i % BN_BYTES))) & 0xff;
+    }
+    return tolen;
+}
+
+int BN_ucmp(const BIGNUM *a, const BIGNUM *b)
+{
+    int i;
+    BN_ULONG t1, t2, *ap, *bp;
+
+    bn_check_top(a);
+    bn_check_top(b);
+
+    i = a->top - b->top;
+    if (i != 0)
+        return i;
+    ap = a->d;
+    bp = b->d;
+    for (i = a->top - 1; i >= 0; i--) {
+        t1 = ap[i];
+        t2 = bp[i];
+        if (t1 != t2)
+            return ((t1 > t2) ? 1 : -1);
+    }
+    return 0;
+}
+
+int BN_cmp(const BIGNUM *a, const BIGNUM *b)
+{
+    int i;
+    int gt, lt;
+    BN_ULONG t1, t2;
+
+    if ((a == NULL) || (b == NULL)) {
+        if (a != NULL)
+            return -1;
+        else if (b != NULL)
+            return 1;
+        else
+            return 0;
+    }
+
+    bn_check_top(a);
+    bn_check_top(b);
+
+    if (a->neg != b->neg) {
+        if (a->neg)
+            return -1;
+        else
+            return 1;
+    }
+    if (a->neg == 0) {
+        gt = 1;
+        lt = -1;
+    } else {
+        gt = -1;
+        lt = 1;
+    }
+
+    if (a->top > b->top)
+        return gt;
+    if (a->top < b->top)
+        return lt;
+    for (i = a->top - 1; i >= 0; i--) {
+        t1 = a->d[i];
+        t2 = b->d[i];
+        if (t1 > t2)
+            return gt;
+        if (t1 < t2)
+            return lt;
+    }
+    return 0;
+}
+
+int BN_set_bit(BIGNUM *a, int n)
+{
+    int i, j, k;
+
+    if (n < 0)
+        return 0;
+
+    i = n / BN_BITS2;
+    j = n % BN_BITS2;
+    if (a->top <= i) {
+        if (bn_wexpand(a, i + 1) == NULL)
+            return 0;
+        for (k = a->top; k < i + 1; k++)
+            a->d[k] = 0;
+        a->top = i + 1;
+        a->flags &= ~BN_FLG_FIXED_TOP;
+    }
+
+    a->d[i] |= (((BN_ULONG)1) << j);
+    bn_check_top(a);
+    return 1;
+}
+
+int BN_clear_bit(BIGNUM *a, int n)
+{
+    int i, j;
+
+    bn_check_top(a);
+    if (n < 0)
+        return 0;
+
+    i = n / BN_BITS2;
+    j = n % BN_BITS2;
+    if (a->top <= i)
+        return 0;
+
+    a->d[i] &= (~(((BN_ULONG)1) << j));
+    bn_correct_top(a);
+    return 1;
+}
+
+int BN_is_bit_set(const BIGNUM *a, int n)
+{
+    int i, j;
+
+    bn_check_top(a);
+    if (n < 0)
+        return 0;
+    i = n / BN_BITS2;
+    j = n % BN_BITS2;
+    if (a->top <= i)
+        return 0;
+    return (int)(((a->d[i]) >> j) & ((BN_ULONG)1));
+}
+
+int BN_mask_bits(BIGNUM *a, int n)
+{
+    int b, w;
+
+    bn_check_top(a);
+    if (n < 0)
+        return 0;
+
+    w = n / BN_BITS2;
+    b = n % BN_BITS2;
+    if (w >= a->top)
+        return 0;
+    if (b == 0)
+        a->top = w;
+    else {
+        a->top = w + 1;
+        a->d[w] &= ~(BN_MASK2 << b);
+    }
+    bn_correct_top(a);
+    return 1;
+}
+
+void BN_set_negative(BIGNUM *a, int b)
+{
+    if (b && !BN_is_zero(a))
+        a->neg = 1;
+    else
+        a->neg = 0;
+}
+
+int bn_cmp_words(const BN_ULONG *a, const BN_ULONG *b, int n)
+{
+    int i;
+    BN_ULONG aa, bb;
+
+    if (n == 0)
+        return 0;
+
+    aa = a[n - 1];
+    bb = b[n - 1];
+    if (aa != bb)
+        return ((aa > bb) ? 1 : -1);
+    for (i = n - 2; i >= 0; i--) {
+        aa = a[i];
+        bb = b[i];
+        if (aa != bb)
+            return ((aa > bb) ? 1 : -1);
+    }
+    return 0;
+}
+
+/*
+ * Here follows a specialised variants of bn_cmp_words().  It has the
+ * capability of performing the operation on arrays of different sizes. The
+ * sizes of those arrays is expressed through cl, which is the common length
+ * ( basically, min(len(a),len(b)) ), and dl, which is the delta between the
+ * two lengths, calculated as len(a)-len(b). All lengths are the number of
+ * BN_ULONGs...
+ */
+
+int bn_cmp_part_words(const BN_ULONG *a, const BN_ULONG *b, int cl, int dl)
+{
+    int n, i;
+    n = cl - 1;
+
+    if (dl < 0) {
+        for (i = dl; i < 0; i++) {
+            if (b[n - i] != 0)
+                return -1;      /* a < b */
+        }
+    }
+    if (dl > 0) {
+        for (i = dl; i > 0; i--) {
+            if (a[n + i] != 0)
+                return 1;       /* a > b */
+        }
+    }
+    return bn_cmp_words(a, b, cl);
+}
+
+/*-
+ * Constant-time conditional swap of a and b.
+ * a and b are swapped if condition is not 0.
+ * nwords is the number of words to swap.
+ * Assumes that at least nwords are allocated in both a and b.
+ * Assumes that no more than nwords are used by either a or b.
+ */
+void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
+{
+    BN_ULONG t;
+    int i;
+
+    if (a == b)
+        return;
+
+    bn_wcheck_size(a, nwords);
+    bn_wcheck_size(b, nwords);
+
+    condition = ((~condition & ((condition - 1))) >> (BN_BITS2 - 1)) - 1;
+
+    t = (a->top ^ b->top) & condition;
+    a->top ^= t;
+    b->top ^= t;
+
+    t = (a->neg ^ b->neg) & condition;
+    a->neg ^= t;
+    b->neg ^= t;
+
+    /*-
+     * BN_FLG_STATIC_DATA: indicates that data may not be written to. Intention
+     * is actually to treat it as it's read-only data, and some (if not most)
+     * of it does reside in read-only segment. In other words observation of
+     * BN_FLG_STATIC_DATA in BN_consttime_swap should be treated as fatal
+     * condition. It would either cause SEGV or effectively cause data
+     * corruption.
+     *
+     * BN_FLG_MALLOCED: refers to BN structure itself, and hence must be
+     * preserved.
+     *
+     * BN_FLG_SECURE: must be preserved, because it determines how x->d was
+     * allocated and hence how to free it.
+     *
+     * BN_FLG_CONSTTIME: sufficient to mask and swap
+     *
+     * BN_FLG_FIXED_TOP: indicates that we haven't called bn_correct_top() on
+     * the data, so the d array may be padded with additional 0 values (i.e.
+     * top could be greater than the minimal value that it could be). We should
+     * be swapping it
+     */
+
+#define BN_CONSTTIME_SWAP_FLAGS (BN_FLG_CONSTTIME | BN_FLG_FIXED_TOP)
+
+    t = ((a->flags ^ b->flags) & BN_CONSTTIME_SWAP_FLAGS) & condition;
+    a->flags ^= t;
+    b->flags ^= t;
+
+    /* conditionally swap the data */
+    for (i = 0; i < nwords; i++) {
+        t = (a->d[i] ^ b->d[i]) & condition;
+        a->d[i] ^= t;
+        b->d[i] ^= t;
+    }
+}
+
+#undef BN_CONSTTIME_SWAP_FLAGS
+
+/* Bits of security, see SP800-57 */
+
+int BN_security_bits(int L, int N)
+{
+    int secbits, bits;
+    if (L >= 15360)
+        secbits = 256;
+    else if (L >= 7680)
+        secbits = 192;
+    else if (L >= 3072)
+        secbits = 128;
+    else if (L >= 2048)
+        secbits = 112;
+    else if (L >= 1024)
+        secbits = 80;
+    else
+        return 0;
+    if (N == -1)
+        return secbits;
+    bits = N / 2;
+    if (bits < 80)
+        return 0;
+    return bits >= secbits ? secbits : bits;
+}
+
+void BN_zero_ex(BIGNUM *a)
+{
+    a->neg = 0;
+    a->top = 0;
+    a->flags &= ~BN_FLG_FIXED_TOP;
+}
+
+int BN_abs_is_word(const BIGNUM *a, const BN_ULONG w)
+{
+    return ((a->top == 1) && (a->d[0] == w)) || ((w == 0) && (a->top == 0));
+}
+
+int BN_is_zero(const BIGNUM *a)
+{
+    return a->top == 0;
+}
+
+int BN_is_one(const BIGNUM *a)
+{
+    return BN_abs_is_word(a, 1) && !a->neg;
+}
+
+int BN_is_word(const BIGNUM *a, const BN_ULONG w)
+{
+    return BN_abs_is_word(a, w) && (!w || !a->neg);
+}
+
+int BN_is_odd(const BIGNUM *a)
+{
+    return (a->top > 0) && (a->d[0] & 1);
+}
+
+int BN_is_negative(const BIGNUM *a)
+{
+    return (a->neg != 0);
+}
+
+int BN_to_montgomery(BIGNUM *r, const BIGNUM *a, BN_MONT_CTX *mont,
+                     BN_CTX *ctx)
+{
+    return BN_mod_mul_montgomery(r, a, &(mont->RR), mont, ctx);
+}
+
+void BN_with_flags(BIGNUM *dest, const BIGNUM *b, int flags)
+{
+    dest->d = b->d;
+    dest->top = b->top;
+    dest->dmax = b->dmax;
+    dest->neg = b->neg;
+    dest->flags = ((dest->flags & BN_FLG_MALLOCED)
+                   | (b->flags & ~BN_FLG_MALLOCED)
+                   | BN_FLG_STATIC_DATA | flags);
+}
+
+BN_GENCB *BN_GENCB_new(void)
+{
+    BN_GENCB *ret;
+
+    if ((ret = OPENSSL_malloc(sizeof(*ret))) == NULL) {
+        BNerr(BN_F_BN_GENCB_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    return ret;
+}
+
+void BN_GENCB_free(BN_GENCB *cb)
+{
+    if (cb == NULL)
+        return;
+    OPENSSL_free(cb);
+}
+
+void BN_set_flags(BIGNUM *b, int n)
+{
+    b->flags |= n;
+}
+
+int BN_get_flags(const BIGNUM *b, int n)
+{
+    return b->flags & n;
+}
+
+/* Populate a BN_GENCB structure with an "old"-style callback */
+void BN_GENCB_set_old(BN_GENCB *gencb, void (*callback) (int, int, void *),
+                      void *cb_arg)
+{
+    BN_GENCB *tmp_gencb = gencb;
+    tmp_gencb->ver = 1;
+    tmp_gencb->arg = cb_arg;
+    tmp_gencb->cb.cb_1 = callback;
+}
+
+/* Populate a BN_GENCB structure with a "new"-style callback */
+void BN_GENCB_set(BN_GENCB *gencb, int (*callback) (int, int, BN_GENCB *),
+                  void *cb_arg)
+{
+    BN_GENCB *tmp_gencb = gencb;
+    tmp_gencb->ver = 2;
+    tmp_gencb->arg = cb_arg;
+    tmp_gencb->cb.cb_2 = callback;
+}
+
+void *BN_GENCB_get_arg(BN_GENCB *cb)
+{
+    return cb->arg;
+}
+
+BIGNUM *bn_wexpand(BIGNUM *a, int words)
+{
+    return (words <= a->dmax) ? a : bn_expand2(a, words);
+}
+
+void bn_correct_top(BIGNUM *a)
+{
+    BN_ULONG *ftl;
+    int tmp_top = a->top;
+
+    if (tmp_top > 0) {
+        for (ftl = &(a->d[tmp_top]); tmp_top > 0; tmp_top--) {
+            ftl--;
+            if (*ftl != 0)
+                break;
+        }
+        a->top = tmp_top;
+    }
+    if (a->top == 0)
+        a->neg = 0;
+    a->flags &= ~BN_FLG_FIXED_TOP;
+    bn_pollute(a);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_mod.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_mod.c
new file mode 100644
index 000000000..712fc8ac1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_mod.c
@@ -0,0 +1,321 @@
+/*
+ * Copyright 1998-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+int BN_nnmod(BIGNUM *r, const BIGNUM *m, const BIGNUM *d, BN_CTX *ctx)
+{
+    /*
+     * like BN_mod, but returns non-negative remainder (i.e., 0 <= r < |d|
+     * always holds)
+     */
+
+    if (!(BN_mod(r, m, d, ctx)))
+        return 0;
+    if (!r->neg)
+        return 1;
+    /* now   -|d| < r < 0,  so we have to set  r := r + |d| */
+    return (d->neg ? BN_sub : BN_add) (r, r, d);
+}
+
+int BN_mod_add(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, const BIGNUM *m,
+               BN_CTX *ctx)
+{
+    if (!BN_add(r, a, b))
+        return 0;
+    return BN_nnmod(r, r, m, ctx);
+}
+
+/*
+ * BN_mod_add variant that may be used if both a and b are non-negative and
+ * less than m. The original algorithm was
+ *
+ *    if (!BN_uadd(r, a, b))
+ *       return 0;
+ *    if (BN_ucmp(r, m) >= 0)
+ *       return BN_usub(r, r, m);
+ *
+ * which is replaced with addition, subtracting modulus, and conditional
+ * move depending on whether or not subtraction borrowed.
+ */
+int bn_mod_add_fixed_top(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                         const BIGNUM *m)
+{
+    size_t i, ai, bi, mtop = m->top;
+    BN_ULONG storage[1024 / BN_BITS2];
+    BN_ULONG carry, temp, mask, *rp, *tp = storage;
+    const BN_ULONG *ap, *bp;
+
+    if (bn_wexpand(r, mtop) == NULL)
+        return 0;
+
+    if (mtop > sizeof(storage) / sizeof(storage[0])
+        && (tp = OPENSSL_malloc(mtop * sizeof(BN_ULONG))) == NULL)
+        return 0;
+
+    ap = a->d != NULL ? a->d : tp;
+    bp = b->d != NULL ? b->d : tp;
+
+    for (i = 0, ai = 0, bi = 0, carry = 0; i < mtop;) {
+        mask = (BN_ULONG)0 - ((i - a->top) >> (8 * sizeof(i) - 1));
+        temp = ((ap[ai] & mask) + carry) & BN_MASK2;
+        carry = (temp < carry);
+
+        mask = (BN_ULONG)0 - ((i - b->top) >> (8 * sizeof(i) - 1));
+        tp[i] = ((bp[bi] & mask) + temp) & BN_MASK2;
+        carry += (tp[i] < temp);
+
+        i++;
+        ai += (i - a->dmax) >> (8 * sizeof(i) - 1);
+        bi += (i - b->dmax) >> (8 * sizeof(i) - 1);
+    }
+    rp = r->d;
+    carry -= bn_sub_words(rp, tp, m->d, mtop);
+    for (i = 0; i < mtop; i++) {
+        rp[i] = (carry & tp[i]) | (~carry & rp[i]);
+        ((volatile BN_ULONG *)tp)[i] = 0;
+    }
+    r->top = mtop;
+    r->flags |= BN_FLG_FIXED_TOP;
+    r->neg = 0;
+
+    if (tp != storage)
+        OPENSSL_free(tp);
+
+    return 1;
+}
+
+int BN_mod_add_quick(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                     const BIGNUM *m)
+{
+    int ret = bn_mod_add_fixed_top(r, a, b, m);
+
+    if (ret)
+        bn_correct_top(r);
+
+    return ret;
+}
+
+int BN_mod_sub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, const BIGNUM *m,
+               BN_CTX *ctx)
+{
+    if (!BN_sub(r, a, b))
+        return 0;
+    return BN_nnmod(r, r, m, ctx);
+}
+
+/*
+ * BN_mod_sub variant that may be used if both a and b are non-negative,
+ * a is less than m, while b is of same bit width as m. It's implemented
+ * as subtraction followed by two conditional additions.
+ *
+ * 0 <= a < m
+ * 0 <= b < 2^w < 2*m
+ *
+ * after subtraction
+ *
+ * -2*m < r = a - b < m
+ *
+ * Thus it takes up to two conditional additions to make |r| positive.
+ */
+int bn_mod_sub_fixed_top(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                         const BIGNUM *m)
+{
+    size_t i, ai, bi, mtop = m->top;
+    BN_ULONG borrow, carry, ta, tb, mask, *rp;
+    const BN_ULONG *ap, *bp;
+
+    if (bn_wexpand(r, mtop) == NULL)
+        return 0;
+
+    rp = r->d;
+    ap = a->d != NULL ? a->d : rp;
+    bp = b->d != NULL ? b->d : rp;
+
+    for (i = 0, ai = 0, bi = 0, borrow = 0; i < mtop;) {
+        mask = (BN_ULONG)0 - ((i - a->top) >> (8 * sizeof(i) - 1));
+        ta = ap[ai] & mask;
+
+        mask = (BN_ULONG)0 - ((i - b->top) >> (8 * sizeof(i) - 1));
+        tb = bp[bi] & mask;
+        rp[i] = ta - tb - borrow;
+        if (ta != tb)
+            borrow = (ta < tb);
+
+        i++;
+        ai += (i - a->dmax) >> (8 * sizeof(i) - 1);
+        bi += (i - b->dmax) >> (8 * sizeof(i) - 1);
+    }
+    ap = m->d;
+    for (i = 0, mask = 0 - borrow, carry = 0; i < mtop; i++) {
+        ta = ((ap[i] & mask) + carry) & BN_MASK2;
+        carry = (ta < carry);
+        rp[i] = (rp[i] + ta) & BN_MASK2;
+        carry += (rp[i] < ta);
+    }
+    borrow -= carry;
+    for (i = 0, mask = 0 - borrow, carry = 0; i < mtop; i++) {
+        ta = ((ap[i] & mask) + carry) & BN_MASK2;
+        carry = (ta < carry);
+        rp[i] = (rp[i] + ta) & BN_MASK2;
+        carry += (rp[i] < ta);
+    }
+
+    r->top = mtop;
+    r->flags |= BN_FLG_FIXED_TOP;
+    r->neg = 0;
+
+    return 1;
+}
+
+/*
+ * BN_mod_sub variant that may be used if both a and b are non-negative and
+ * less than m
+ */
+int BN_mod_sub_quick(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                     const BIGNUM *m)
+{
+    if (!BN_sub(r, a, b))
+        return 0;
+    if (r->neg)
+        return BN_add(r, r, m);
+    return 1;
+}
+
+/* slow but works */
+int BN_mod_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, const BIGNUM *m,
+               BN_CTX *ctx)
+{
+    BIGNUM *t;
+    int ret = 0;
+
+    bn_check_top(a);
+    bn_check_top(b);
+    bn_check_top(m);
+
+    BN_CTX_start(ctx);
+    if ((t = BN_CTX_get(ctx)) == NULL)
+        goto err;
+    if (a == b) {
+        if (!BN_sqr(t, a, ctx))
+            goto err;
+    } else {
+        if (!BN_mul(t, a, b, ctx))
+            goto err;
+    }
+    if (!BN_nnmod(r, t, m, ctx))
+        goto err;
+    bn_check_top(r);
+    ret = 1;
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+int BN_mod_sqr(BIGNUM *r, const BIGNUM *a, const BIGNUM *m, BN_CTX *ctx)
+{
+    if (!BN_sqr(r, a, ctx))
+        return 0;
+    /* r->neg == 0,  thus we don't need BN_nnmod */
+    return BN_mod(r, r, m, ctx);
+}
+
+int BN_mod_lshift1(BIGNUM *r, const BIGNUM *a, const BIGNUM *m, BN_CTX *ctx)
+{
+    if (!BN_lshift1(r, a))
+        return 0;
+    bn_check_top(r);
+    return BN_nnmod(r, r, m, ctx);
+}
+
+/*
+ * BN_mod_lshift1 variant that may be used if a is non-negative and less than
+ * m
+ */
+int BN_mod_lshift1_quick(BIGNUM *r, const BIGNUM *a, const BIGNUM *m)
+{
+    if (!BN_lshift1(r, a))
+        return 0;
+    bn_check_top(r);
+    if (BN_cmp(r, m) >= 0)
+        return BN_sub(r, r, m);
+    return 1;
+}
+
+int BN_mod_lshift(BIGNUM *r, const BIGNUM *a, int n, const BIGNUM *m,
+                  BN_CTX *ctx)
+{
+    BIGNUM *abs_m = NULL;
+    int ret;
+
+    if (!BN_nnmod(r, a, m, ctx))
+        return 0;
+
+    if (m->neg) {
+        abs_m = BN_dup(m);
+        if (abs_m == NULL)
+            return 0;
+        abs_m->neg = 0;
+    }
+
+    ret = BN_mod_lshift_quick(r, r, n, (abs_m ? abs_m : m));
+    bn_check_top(r);
+
+    BN_free(abs_m);
+    return ret;
+}
+
+/*
+ * BN_mod_lshift variant that may be used if a is non-negative and less than
+ * m
+ */
+int BN_mod_lshift_quick(BIGNUM *r, const BIGNUM *a, int n, const BIGNUM *m)
+{
+    if (r != a) {
+        if (BN_copy(r, a) == NULL)
+            return 0;
+    }
+
+    while (n > 0) {
+        int max_shift;
+
+        /* 0 < r < m */
+        max_shift = BN_num_bits(m) - BN_num_bits(r);
+        /* max_shift >= 0 */
+
+        if (max_shift < 0) {
+            BNerr(BN_F_BN_MOD_LSHIFT_QUICK, BN_R_INPUT_NOT_REDUCED);
+            return 0;
+        }
+
+        if (max_shift > n)
+            max_shift = n;
+
+        if (max_shift) {
+            if (!BN_lshift(r, r, max_shift))
+                return 0;
+            n -= max_shift;
+        } else {
+            if (!BN_lshift1(r, r))
+                return 0;
+            --n;
+        }
+
+        /* BN_num_bits(r) <= BN_num_bits(m) */
+
+        if (BN_cmp(r, m) >= 0) {
+            if (!BN_sub(r, r, m))
+                return 0;
+        }
+    }
+    bn_check_top(r);
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_mont.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_mont.c
new file mode 100644
index 000000000..393d27c39
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_mont.c
@@ -0,0 +1,464 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Details about Montgomery multiplication algorithms can be found at
+ * http://security.ece.orst.edu/publications.html, e.g.
+ * http://security.ece.orst.edu/koc/papers/j37acmon.pdf and
+ * sections 3.8 and 4.2 in http://security.ece.orst.edu/koc/papers/r01rsasw.pdf
+ */
+
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+#define MONT_WORD               /* use the faster word-based algorithm */
+
+#ifdef MONT_WORD
+static int bn_from_montgomery_word(BIGNUM *ret, BIGNUM *r, BN_MONT_CTX *mont);
+#endif
+
+int BN_mod_mul_montgomery(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                          BN_MONT_CTX *mont, BN_CTX *ctx)
+{
+    int ret = bn_mul_mont_fixed_top(r, a, b, mont, ctx);
+
+    bn_correct_top(r);
+    bn_check_top(r);
+
+    return ret;
+}
+
+int bn_mul_mont_fixed_top(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                          BN_MONT_CTX *mont, BN_CTX *ctx)
+{
+    BIGNUM *tmp;
+    int ret = 0;
+    int num = mont->N.top;
+
+#if defined(OPENSSL_BN_ASM_MONT) && defined(MONT_WORD)
+    if (num > 1 && a->top == num && b->top == num) {
+        if (bn_wexpand(r, num) == NULL)
+            return 0;
+        if (bn_mul_mont(r->d, a->d, b->d, mont->N.d, mont->n0, num)) {
+            r->neg = a->neg ^ b->neg;
+            r->top = num;
+            r->flags |= BN_FLG_FIXED_TOP;
+            return 1;
+        }
+    }
+#endif
+
+    if ((a->top + b->top) > 2 * num)
+        return 0;
+
+    BN_CTX_start(ctx);
+    tmp = BN_CTX_get(ctx);
+    if (tmp == NULL)
+        goto err;
+
+    bn_check_top(tmp);
+    if (a == b) {
+        if (!bn_sqr_fixed_top(tmp, a, ctx))
+            goto err;
+    } else {
+        if (!bn_mul_fixed_top(tmp, a, b, ctx))
+            goto err;
+    }
+    /* reduce from aRR to aR */
+#ifdef MONT_WORD
+    if (!bn_from_montgomery_word(r, tmp, mont))
+        goto err;
+#else
+    if (!BN_from_montgomery(r, tmp, mont, ctx))
+        goto err;
+#endif
+    ret = 1;
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+#ifdef MONT_WORD
+static int bn_from_montgomery_word(BIGNUM *ret, BIGNUM *r, BN_MONT_CTX *mont)
+{
+    BIGNUM *n;
+    BN_ULONG *ap, *np, *rp, n0, v, carry;
+    int nl, max, i;
+    unsigned int rtop;
+
+    n = &(mont->N);
+    nl = n->top;
+    if (nl == 0) {
+        ret->top = 0;
+        return 1;
+    }
+
+    max = (2 * nl);             /* carry is stored separately */
+    if (bn_wexpand(r, max) == NULL)
+        return 0;
+
+    r->neg ^= n->neg;
+    np = n->d;
+    rp = r->d;
+
+    /* clear the top words of T */
+    for (rtop = r->top, i = 0; i < max; i++) {
+        v = (BN_ULONG)0 - ((i - rtop) >> (8 * sizeof(rtop) - 1));
+        rp[i] &= v;
+    }
+
+    r->top = max;
+    r->flags |= BN_FLG_FIXED_TOP;
+    n0 = mont->n0[0];
+
+    /*
+     * Add multiples of |n| to |r| until R = 2^(nl * BN_BITS2) divides it. On
+     * input, we had |r| < |n| * R, so now |r| < 2 * |n| * R. Note that |r|
+     * includes |carry| which is stored separately.
+     */
+    for (carry = 0, i = 0; i < nl; i++, rp++) {
+        v = bn_mul_add_words(rp, np, nl, (rp[0] * n0) & BN_MASK2);
+        v = (v + carry + rp[nl]) & BN_MASK2;
+        carry |= (v != rp[nl]);
+        carry &= (v <= rp[nl]);
+        rp[nl] = v;
+    }
+
+    if (bn_wexpand(ret, nl) == NULL)
+        return 0;
+    ret->top = nl;
+    ret->flags |= BN_FLG_FIXED_TOP;
+    ret->neg = r->neg;
+
+    rp = ret->d;
+
+    /*
+     * Shift |nl| words to divide by R. We have |ap| < 2 * |n|. Note that |ap|
+     * includes |carry| which is stored separately.
+     */
+    ap = &(r->d[nl]);
+
+    carry -= bn_sub_words(rp, ap, np, nl);
+    /*
+     * |carry| is -1 if |ap| - |np| underflowed or zero if it did not. Note
+     * |carry| cannot be 1. That would imply the subtraction did not fit in
+     * |nl| words, and we know at most one subtraction is needed.
+     */
+    for (i = 0; i < nl; i++) {
+        rp[i] = (carry & ap[i]) | (~carry & rp[i]);
+        ap[i] = 0;
+    }
+
+    return 1;
+}
+#endif                          /* MONT_WORD */
+
+int BN_from_montgomery(BIGNUM *ret, const BIGNUM *a, BN_MONT_CTX *mont,
+                       BN_CTX *ctx)
+{
+    int retn;
+
+    retn = bn_from_mont_fixed_top(ret, a, mont, ctx);
+    bn_correct_top(ret);
+    bn_check_top(ret);
+
+    return retn;
+}
+
+int bn_from_mont_fixed_top(BIGNUM *ret, const BIGNUM *a, BN_MONT_CTX *mont,
+                           BN_CTX *ctx)
+{
+    int retn = 0;
+#ifdef MONT_WORD
+    BIGNUM *t;
+
+    BN_CTX_start(ctx);
+    if ((t = BN_CTX_get(ctx)) && BN_copy(t, a)) {
+        retn = bn_from_montgomery_word(ret, t, mont);
+    }
+    BN_CTX_end(ctx);
+#else                           /* !MONT_WORD */
+    BIGNUM *t1, *t2;
+
+    BN_CTX_start(ctx);
+    t1 = BN_CTX_get(ctx);
+    t2 = BN_CTX_get(ctx);
+    if (t2 == NULL)
+        goto err;
+
+    if (!BN_copy(t1, a))
+        goto err;
+    BN_mask_bits(t1, mont->ri);
+
+    if (!BN_mul(t2, t1, &mont->Ni, ctx))
+        goto err;
+    BN_mask_bits(t2, mont->ri);
+
+    if (!BN_mul(t1, t2, &mont->N, ctx))
+        goto err;
+    if (!BN_add(t2, a, t1))
+        goto err;
+    if (!BN_rshift(ret, t2, mont->ri))
+        goto err;
+
+    if (BN_ucmp(ret, &(mont->N)) >= 0) {
+        if (!BN_usub(ret, ret, &(mont->N)))
+            goto err;
+    }
+    retn = 1;
+    bn_check_top(ret);
+ err:
+    BN_CTX_end(ctx);
+#endif                          /* MONT_WORD */
+    return retn;
+}
+
+int bn_to_mont_fixed_top(BIGNUM *r, const BIGNUM *a, BN_MONT_CTX *mont,
+                         BN_CTX *ctx)
+{
+    return bn_mul_mont_fixed_top(r, a, &(mont->RR), mont, ctx);
+}
+
+BN_MONT_CTX *BN_MONT_CTX_new(void)
+{
+    BN_MONT_CTX *ret;
+
+    if ((ret = OPENSSL_malloc(sizeof(*ret))) == NULL) {
+        BNerr(BN_F_BN_MONT_CTX_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    BN_MONT_CTX_init(ret);
+    ret->flags = BN_FLG_MALLOCED;
+    return ret;
+}
+
+void BN_MONT_CTX_init(BN_MONT_CTX *ctx)
+{
+    ctx->ri = 0;
+    bn_init(&ctx->RR);
+    bn_init(&ctx->N);
+    bn_init(&ctx->Ni);
+    ctx->n0[0] = ctx->n0[1] = 0;
+    ctx->flags = 0;
+}
+
+void BN_MONT_CTX_free(BN_MONT_CTX *mont)
+{
+    if (mont == NULL)
+        return;
+    BN_clear_free(&mont->RR);
+    BN_clear_free(&mont->N);
+    BN_clear_free(&mont->Ni);
+    if (mont->flags & BN_FLG_MALLOCED)
+        OPENSSL_free(mont);
+}
+
+int BN_MONT_CTX_set(BN_MONT_CTX *mont, const BIGNUM *mod, BN_CTX *ctx)
+{
+    int i, ret = 0;
+    BIGNUM *Ri, *R;
+
+    if (BN_is_zero(mod))
+        return 0;
+
+    BN_CTX_start(ctx);
+    if ((Ri = BN_CTX_get(ctx)) == NULL)
+        goto err;
+    R = &(mont->RR);            /* grab RR as a temp */
+    if (!BN_copy(&(mont->N), mod))
+        goto err;               /* Set N */
+    if (BN_get_flags(mod, BN_FLG_CONSTTIME) != 0)
+        BN_set_flags(&(mont->N), BN_FLG_CONSTTIME);
+    mont->N.neg = 0;
+
+#ifdef MONT_WORD
+    {
+        BIGNUM tmod;
+        BN_ULONG buf[2];
+
+        bn_init(&tmod);
+        tmod.d = buf;
+        tmod.dmax = 2;
+        tmod.neg = 0;
+
+        if (BN_get_flags(mod, BN_FLG_CONSTTIME) != 0)
+            BN_set_flags(&tmod, BN_FLG_CONSTTIME);
+
+        mont->ri = (BN_num_bits(mod) + (BN_BITS2 - 1)) / BN_BITS2 * BN_BITS2;
+
+# if defined(OPENSSL_BN_ASM_MONT) && (BN_BITS2<=32)
+        /*
+         * Only certain BN_BITS2<=32 platforms actually make use of n0[1],
+         * and we could use the #else case (with a shorter R value) for the
+         * others.  However, currently only the assembler files do know which
+         * is which.
+         */
+
+        BN_zero(R);
+        if (!(BN_set_bit(R, 2 * BN_BITS2)))
+            goto err;
+
+        tmod.top = 0;
+        if ((buf[0] = mod->d[0]))
+            tmod.top = 1;
+        if ((buf[1] = mod->top > 1 ? mod->d[1] : 0))
+            tmod.top = 2;
+
+        if (BN_is_one(&tmod))
+            BN_zero(Ri);
+        else if ((BN_mod_inverse(Ri, R, &tmod, ctx)) == NULL)
+            goto err;
+        if (!BN_lshift(Ri, Ri, 2 * BN_BITS2))
+            goto err;           /* R*Ri */
+        if (!BN_is_zero(Ri)) {
+            if (!BN_sub_word(Ri, 1))
+                goto err;
+        } else {                /* if N mod word size == 1 */
+
+            if (bn_expand(Ri, (int)sizeof(BN_ULONG) * 2) == NULL)
+                goto err;
+            /* Ri-- (mod double word size) */
+            Ri->neg = 0;
+            Ri->d[0] = BN_MASK2;
+            Ri->d[1] = BN_MASK2;
+            Ri->top = 2;
+        }
+        if (!BN_div(Ri, NULL, Ri, &tmod, ctx))
+            goto err;
+        /*
+         * Ni = (R*Ri-1)/N, keep only couple of least significant words:
+         */
+        mont->n0[0] = (Ri->top > 0) ? Ri->d[0] : 0;
+        mont->n0[1] = (Ri->top > 1) ? Ri->d[1] : 0;
+# else
+        BN_zero(R);
+        if (!(BN_set_bit(R, BN_BITS2)))
+            goto err;           /* R */
+
+        buf[0] = mod->d[0];     /* tmod = N mod word size */
+        buf[1] = 0;
+        tmod.top = buf[0] != 0 ? 1 : 0;
+        /* Ri = R^-1 mod N */
+        if (BN_is_one(&tmod))
+            BN_zero(Ri);
+        else if ((BN_mod_inverse(Ri, R, &tmod, ctx)) == NULL)
+            goto err;
+        if (!BN_lshift(Ri, Ri, BN_BITS2))
+            goto err;           /* R*Ri */
+        if (!BN_is_zero(Ri)) {
+            if (!BN_sub_word(Ri, 1))
+                goto err;
+        } else {                /* if N mod word size == 1 */
+
+            if (!BN_set_word(Ri, BN_MASK2))
+                goto err;       /* Ri-- (mod word size) */
+        }
+        if (!BN_div(Ri, NULL, Ri, &tmod, ctx))
+            goto err;
+        /*
+         * Ni = (R*Ri-1)/N, keep only least significant word:
+         */
+        mont->n0[0] = (Ri->top > 0) ? Ri->d[0] : 0;
+        mont->n0[1] = 0;
+# endif
+    }
+#else                           /* !MONT_WORD */
+    {                           /* bignum version */
+        mont->ri = BN_num_bits(&mont->N);
+        BN_zero(R);
+        if (!BN_set_bit(R, mont->ri))
+            goto err;           /* R = 2^ri */
+        /* Ri = R^-1 mod N */
+        if ((BN_mod_inverse(Ri, R, &mont->N, ctx)) == NULL)
+            goto err;
+        if (!BN_lshift(Ri, Ri, mont->ri))
+            goto err;           /* R*Ri */
+        if (!BN_sub_word(Ri, 1))
+            goto err;
+        /*
+         * Ni = (R*Ri-1) / N
+         */
+        if (!BN_div(&(mont->Ni), NULL, Ri, &mont->N, ctx))
+            goto err;
+    }
+#endif
+
+    /* setup RR for conversions */
+    BN_zero(&(mont->RR));
+    if (!BN_set_bit(&(mont->RR), mont->ri * 2))
+        goto err;
+    if (!BN_mod(&(mont->RR), &(mont->RR), &(mont->N), ctx))
+        goto err;
+
+    for (i = mont->RR.top, ret = mont->N.top; i < ret; i++)
+        mont->RR.d[i] = 0;
+    mont->RR.top = ret;
+    mont->RR.flags |= BN_FLG_FIXED_TOP;
+
+    ret = 1;
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+BN_MONT_CTX *BN_MONT_CTX_copy(BN_MONT_CTX *to, BN_MONT_CTX *from)
+{
+    if (to == from)
+        return to;
+
+    if (!BN_copy(&(to->RR), &(from->RR)))
+        return NULL;
+    if (!BN_copy(&(to->N), &(from->N)))
+        return NULL;
+    if (!BN_copy(&(to->Ni), &(from->Ni)))
+        return NULL;
+    to->ri = from->ri;
+    to->n0[0] = from->n0[0];
+    to->n0[1] = from->n0[1];
+    return to;
+}
+
+BN_MONT_CTX *BN_MONT_CTX_set_locked(BN_MONT_CTX **pmont, CRYPTO_RWLOCK *lock,
+                                    const BIGNUM *mod, BN_CTX *ctx)
+{
+    BN_MONT_CTX *ret;
+
+    CRYPTO_THREAD_read_lock(lock);
+    ret = *pmont;
+    CRYPTO_THREAD_unlock(lock);
+    if (ret)
+        return ret;
+
+    /*
+     * We don't want to serialise globally while doing our lazy-init math in
+     * BN_MONT_CTX_set. That punishes threads that are doing independent
+     * things. Instead, punish the case where more than one thread tries to
+     * lazy-init the same 'pmont', by having each do the lazy-init math work
+     * independently and only use the one from the thread that wins the race
+     * (the losers throw away the work they've done).
+     */
+    ret = BN_MONT_CTX_new();
+    if (ret == NULL)
+        return NULL;
+    if (!BN_MONT_CTX_set(ret, mod, ctx)) {
+        BN_MONT_CTX_free(ret);
+        return NULL;
+    }
+
+    /* The locked compare-and-set, after the local work is done. */
+    CRYPTO_THREAD_write_lock(lock);
+    if (*pmont) {
+        BN_MONT_CTX_free(ret);
+        ret = *pmont;
+    } else
+        *pmont = ret;
+    CRYPTO_THREAD_unlock(lock);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_mpi.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_mpi.c
new file mode 100644
index 000000000..043e21d26
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_mpi.c
@@ -0,0 +1,86 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+int BN_bn2mpi(const BIGNUM *a, unsigned char *d)
+{
+    int bits;
+    int num = 0;
+    int ext = 0;
+    long l;
+
+    bits = BN_num_bits(a);
+    num = (bits + 7) / 8;
+    if (bits > 0) {
+        ext = ((bits & 0x07) == 0);
+    }
+    if (d == NULL)
+        return (num + 4 + ext);
+
+    l = num + ext;
+    d[0] = (unsigned char)(l >> 24) & 0xff;
+    d[1] = (unsigned char)(l >> 16) & 0xff;
+    d[2] = (unsigned char)(l >> 8) & 0xff;
+    d[3] = (unsigned char)(l) & 0xff;
+    if (ext)
+        d[4] = 0;
+    num = BN_bn2bin(a, &(d[4 + ext]));
+    if (a->neg)
+        d[4] |= 0x80;
+    return (num + 4 + ext);
+}
+
+BIGNUM *BN_mpi2bn(const unsigned char *d, int n, BIGNUM *ain)
+{
+    long len;
+    int neg = 0;
+    BIGNUM *a = NULL;
+
+    if (n < 4) {
+        BNerr(BN_F_BN_MPI2BN, BN_R_INVALID_LENGTH);
+        return NULL;
+    }
+    len = ((long)d[0] << 24) | ((long)d[1] << 16) | ((int)d[2] << 8) | (int)
+        d[3];
+    if ((len + 4) != n) {
+        BNerr(BN_F_BN_MPI2BN, BN_R_ENCODING_ERROR);
+        return NULL;
+    }
+
+    if (ain == NULL)
+        a = BN_new();
+    else
+        a = ain;
+
+    if (a == NULL)
+        return NULL;
+
+    if (len == 0) {
+        a->neg = 0;
+        a->top = 0;
+        return a;
+    }
+    d += 4;
+    if ((*d) & 0x80)
+        neg = 1;
+    if (BN_bin2bn(d, (int)len, a) == NULL) {
+        if (ain == NULL)
+            BN_free(a);
+        return NULL;
+    }
+    a->neg = neg;
+    if (neg) {
+        BN_clear_bit(a, BN_num_bits(a) - 1);
+    }
+    bn_check_top(a);
+    return a;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_mul.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_mul.c
new file mode 100644
index 000000000..5eda65cfb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_mul.c
@@ -0,0 +1,684 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <assert.h>
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+#if defined(OPENSSL_NO_ASM) || !defined(OPENSSL_BN_ASM_PART_WORDS)
+/*
+ * Here follows specialised variants of bn_add_words() and bn_sub_words().
+ * They have the property performing operations on arrays of different sizes.
+ * The sizes of those arrays is expressed through cl, which is the common
+ * length ( basically, min(len(a),len(b)) ), and dl, which is the delta
+ * between the two lengths, calculated as len(a)-len(b). All lengths are the
+ * number of BN_ULONGs...  For the operations that require a result array as
+ * parameter, it must have the length cl+abs(dl). These functions should
+ * probably end up in bn_asm.c as soon as there are assembler counterparts
+ * for the systems that use assembler files.
+ */
+
+BN_ULONG bn_sub_part_words(BN_ULONG *r,
+                           const BN_ULONG *a, const BN_ULONG *b,
+                           int cl, int dl)
+{
+    BN_ULONG c, t;
+
+    assert(cl >= 0);
+    c = bn_sub_words(r, a, b, cl);
+
+    if (dl == 0)
+        return c;
+
+    r += cl;
+    a += cl;
+    b += cl;
+
+    if (dl < 0) {
+        for (;;) {
+            t = b[0];
+            r[0] = (0 - t - c) & BN_MASK2;
+            if (t != 0)
+                c = 1;
+            if (++dl >= 0)
+                break;
+
+            t = b[1];
+            r[1] = (0 - t - c) & BN_MASK2;
+            if (t != 0)
+                c = 1;
+            if (++dl >= 0)
+                break;
+
+            t = b[2];
+            r[2] = (0 - t - c) & BN_MASK2;
+            if (t != 0)
+                c = 1;
+            if (++dl >= 0)
+                break;
+
+            t = b[3];
+            r[3] = (0 - t - c) & BN_MASK2;
+            if (t != 0)
+                c = 1;
+            if (++dl >= 0)
+                break;
+
+            b += 4;
+            r += 4;
+        }
+    } else {
+        int save_dl = dl;
+        while (c) {
+            t = a[0];
+            r[0] = (t - c) & BN_MASK2;
+            if (t != 0)
+                c = 0;
+            if (--dl <= 0)
+                break;
+
+            t = a[1];
+            r[1] = (t - c) & BN_MASK2;
+            if (t != 0)
+                c = 0;
+            if (--dl <= 0)
+                break;
+
+            t = a[2];
+            r[2] = (t - c) & BN_MASK2;
+            if (t != 0)
+                c = 0;
+            if (--dl <= 0)
+                break;
+
+            t = a[3];
+            r[3] = (t - c) & BN_MASK2;
+            if (t != 0)
+                c = 0;
+            if (--dl <= 0)
+                break;
+
+            save_dl = dl;
+            a += 4;
+            r += 4;
+        }
+        if (dl > 0) {
+            if (save_dl > dl) {
+                switch (save_dl - dl) {
+                case 1:
+                    r[1] = a[1];
+                    if (--dl <= 0)
+                        break;
+                    /* fall thru */
+                case 2:
+                    r[2] = a[2];
+                    if (--dl <= 0)
+                        break;
+                    /* fall thru */
+                case 3:
+                    r[3] = a[3];
+                    if (--dl <= 0)
+                        break;
+                }
+                a += 4;
+                r += 4;
+            }
+        }
+        if (dl > 0) {
+            for (;;) {
+                r[0] = a[0];
+                if (--dl <= 0)
+                    break;
+                r[1] = a[1];
+                if (--dl <= 0)
+                    break;
+                r[2] = a[2];
+                if (--dl <= 0)
+                    break;
+                r[3] = a[3];
+                if (--dl <= 0)
+                    break;
+
+                a += 4;
+                r += 4;
+            }
+        }
+    }
+    return c;
+}
+#endif
+
+#ifdef BN_RECURSION
+/*
+ * Karatsuba recursive multiplication algorithm (cf. Knuth, The Art of
+ * Computer Programming, Vol. 2)
+ */
+
+/*-
+ * r is 2*n2 words in size,
+ * a and b are both n2 words in size.
+ * n2 must be a power of 2.
+ * We multiply and return the result.
+ * t must be 2*n2 words in size
+ * We calculate
+ * a[0]*b[0]
+ * a[0]*b[0]+a[1]*b[1]+(a[0]-a[1])*(b[1]-b[0])
+ * a[1]*b[1]
+ */
+/* dnX may not be positive, but n2/2+dnX has to be */
+void bn_mul_recursive(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n2,
+                      int dna, int dnb, BN_ULONG *t)
+{
+    int n = n2 / 2, c1, c2;
+    int tna = n + dna, tnb = n + dnb;
+    unsigned int neg, zero;
+    BN_ULONG ln, lo, *p;
+
+# ifdef BN_MUL_COMBA
+#  if 0
+    if (n2 == 4) {
+        bn_mul_comba4(r, a, b);
+        return;
+    }
+#  endif
+    /*
+     * Only call bn_mul_comba 8 if n2 == 8 and the two arrays are complete
+     * [steve]
+     */
+    if (n2 == 8 && dna == 0 && dnb == 0) {
+        bn_mul_comba8(r, a, b);
+        return;
+    }
+# endif                         /* BN_MUL_COMBA */
+    /* Else do normal multiply */
+    if (n2 < BN_MUL_RECURSIVE_SIZE_NORMAL) {
+        bn_mul_normal(r, a, n2 + dna, b, n2 + dnb);
+        if ((dna + dnb) < 0)
+            memset(&r[2 * n2 + dna + dnb], 0,
+                   sizeof(BN_ULONG) * -(dna + dnb));
+        return;
+    }
+    /* r=(a[0]-a[1])*(b[1]-b[0]) */
+    c1 = bn_cmp_part_words(a, &(a[n]), tna, n - tna);
+    c2 = bn_cmp_part_words(&(b[n]), b, tnb, tnb - n);
+    zero = neg = 0;
+    switch (c1 * 3 + c2) {
+    case -4:
+        bn_sub_part_words(t, &(a[n]), a, tna, tna - n); /* - */
+        bn_sub_part_words(&(t[n]), b, &(b[n]), tnb, n - tnb); /* - */
+        break;
+    case -3:
+        zero = 1;
+        break;
+    case -2:
+        bn_sub_part_words(t, &(a[n]), a, tna, tna - n); /* - */
+        bn_sub_part_words(&(t[n]), &(b[n]), b, tnb, tnb - n); /* + */
+        neg = 1;
+        break;
+    case -1:
+    case 0:
+    case 1:
+        zero = 1;
+        break;
+    case 2:
+        bn_sub_part_words(t, a, &(a[n]), tna, n - tna); /* + */
+        bn_sub_part_words(&(t[n]), b, &(b[n]), tnb, n - tnb); /* - */
+        neg = 1;
+        break;
+    case 3:
+        zero = 1;
+        break;
+    case 4:
+        bn_sub_part_words(t, a, &(a[n]), tna, n - tna);
+        bn_sub_part_words(&(t[n]), &(b[n]), b, tnb, tnb - n);
+        break;
+    }
+
+# ifdef BN_MUL_COMBA
+    if (n == 4 && dna == 0 && dnb == 0) { /* XXX: bn_mul_comba4 could take
+                                           * extra args to do this well */
+        if (!zero)
+            bn_mul_comba4(&(t[n2]), t, &(t[n]));
+        else
+            memset(&t[n2], 0, sizeof(*t) * 8);
+
+        bn_mul_comba4(r, a, b);
+        bn_mul_comba4(&(r[n2]), &(a[n]), &(b[n]));
+    } else if (n == 8 && dna == 0 && dnb == 0) { /* XXX: bn_mul_comba8 could
+                                                  * take extra args to do
+                                                  * this well */
+        if (!zero)
+            bn_mul_comba8(&(t[n2]), t, &(t[n]));
+        else
+            memset(&t[n2], 0, sizeof(*t) * 16);
+
+        bn_mul_comba8(r, a, b);
+        bn_mul_comba8(&(r[n2]), &(a[n]), &(b[n]));
+    } else
+# endif                         /* BN_MUL_COMBA */
+    {
+        p = &(t[n2 * 2]);
+        if (!zero)
+            bn_mul_recursive(&(t[n2]), t, &(t[n]), n, 0, 0, p);
+        else
+            memset(&t[n2], 0, sizeof(*t) * n2);
+        bn_mul_recursive(r, a, b, n, 0, 0, p);
+        bn_mul_recursive(&(r[n2]), &(a[n]), &(b[n]), n, dna, dnb, p);
+    }
+
+    /*-
+     * t[32] holds (a[0]-a[1])*(b[1]-b[0]), c1 is the sign
+     * r[10] holds (a[0]*b[0])
+     * r[32] holds (b[1]*b[1])
+     */
+
+    c1 = (int)(bn_add_words(t, r, &(r[n2]), n2));
+
+    if (neg) {                  /* if t[32] is negative */
+        c1 -= (int)(bn_sub_words(&(t[n2]), t, &(t[n2]), n2));
+    } else {
+        /* Might have a carry */
+        c1 += (int)(bn_add_words(&(t[n2]), &(t[n2]), t, n2));
+    }
+
+    /*-
+     * t[32] holds (a[0]-a[1])*(b[1]-b[0])+(a[0]*b[0])+(a[1]*b[1])
+     * r[10] holds (a[0]*b[0])
+     * r[32] holds (b[1]*b[1])
+     * c1 holds the carry bits
+     */
+    c1 += (int)(bn_add_words(&(r[n]), &(r[n]), &(t[n2]), n2));
+    if (c1) {
+        p = &(r[n + n2]);
+        lo = *p;
+        ln = (lo + c1) & BN_MASK2;
+        *p = ln;
+
+        /*
+         * The overflow will stop before we over write words we should not
+         * overwrite
+         */
+        if (ln < (BN_ULONG)c1) {
+            do {
+                p++;
+                lo = *p;
+                ln = (lo + 1) & BN_MASK2;
+                *p = ln;
+            } while (ln == 0);
+        }
+    }
+}
+
+/*
+ * n+tn is the word length t needs to be n*4 is size, as does r
+ */
+/* tnX may not be negative but less than n */
+void bn_mul_part_recursive(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n,
+                           int tna, int tnb, BN_ULONG *t)
+{
+    int i, j, n2 = n * 2;
+    int c1, c2, neg;
+    BN_ULONG ln, lo, *p;
+
+    if (n < 8) {
+        bn_mul_normal(r, a, n + tna, b, n + tnb);
+        return;
+    }
+
+    /* r=(a[0]-a[1])*(b[1]-b[0]) */
+    c1 = bn_cmp_part_words(a, &(a[n]), tna, n - tna);
+    c2 = bn_cmp_part_words(&(b[n]), b, tnb, tnb - n);
+    neg = 0;
+    switch (c1 * 3 + c2) {
+    case -4:
+        bn_sub_part_words(t, &(a[n]), a, tna, tna - n); /* - */
+        bn_sub_part_words(&(t[n]), b, &(b[n]), tnb, n - tnb); /* - */
+        break;
+    case -3:
+    case -2:
+        bn_sub_part_words(t, &(a[n]), a, tna, tna - n); /* - */
+        bn_sub_part_words(&(t[n]), &(b[n]), b, tnb, tnb - n); /* + */
+        neg = 1;
+        break;
+    case -1:
+    case 0:
+    case 1:
+    case 2:
+        bn_sub_part_words(t, a, &(a[n]), tna, n - tna); /* + */
+        bn_sub_part_words(&(t[n]), b, &(b[n]), tnb, n - tnb); /* - */
+        neg = 1;
+        break;
+    case 3:
+    case 4:
+        bn_sub_part_words(t, a, &(a[n]), tna, n - tna);
+        bn_sub_part_words(&(t[n]), &(b[n]), b, tnb, tnb - n);
+        break;
+    }
+    /*
+     * The zero case isn't yet implemented here. The speedup would probably
+     * be negligible.
+     */
+# if 0
+    if (n == 4) {
+        bn_mul_comba4(&(t[n2]), t, &(t[n]));
+        bn_mul_comba4(r, a, b);
+        bn_mul_normal(&(r[n2]), &(a[n]), tn, &(b[n]), tn);
+        memset(&r[n2 + tn * 2], 0, sizeof(*r) * (n2 - tn * 2));
+    } else
+# endif
+    if (n == 8) {
+        bn_mul_comba8(&(t[n2]), t, &(t[n]));
+        bn_mul_comba8(r, a, b);
+        bn_mul_normal(&(r[n2]), &(a[n]), tna, &(b[n]), tnb);
+        memset(&r[n2 + tna + tnb], 0, sizeof(*r) * (n2 - tna - tnb));
+    } else {
+        p = &(t[n2 * 2]);
+        bn_mul_recursive(&(t[n2]), t, &(t[n]), n, 0, 0, p);
+        bn_mul_recursive(r, a, b, n, 0, 0, p);
+        i = n / 2;
+        /*
+         * If there is only a bottom half to the number, just do it
+         */
+        if (tna > tnb)
+            j = tna - i;
+        else
+            j = tnb - i;
+        if (j == 0) {
+            bn_mul_recursive(&(r[n2]), &(a[n]), &(b[n]),
+                             i, tna - i, tnb - i, p);
+            memset(&r[n2 + i * 2], 0, sizeof(*r) * (n2 - i * 2));
+        } else if (j > 0) {     /* eg, n == 16, i == 8 and tn == 11 */
+            bn_mul_part_recursive(&(r[n2]), &(a[n]), &(b[n]),
+                                  i, tna - i, tnb - i, p);
+            memset(&(r[n2 + tna + tnb]), 0,
+                   sizeof(BN_ULONG) * (n2 - tna - tnb));
+        } else {                /* (j < 0) eg, n == 16, i == 8 and tn == 5 */
+
+            memset(&r[n2], 0, sizeof(*r) * n2);
+            if (tna < BN_MUL_RECURSIVE_SIZE_NORMAL
+                && tnb < BN_MUL_RECURSIVE_SIZE_NORMAL) {
+                bn_mul_normal(&(r[n2]), &(a[n]), tna, &(b[n]), tnb);
+            } else {
+                for (;;) {
+                    i /= 2;
+                    /*
+                     * these simplified conditions work exclusively because
+                     * difference between tna and tnb is 1 or 0
+                     */
+                    if (i < tna || i < tnb) {
+                        bn_mul_part_recursive(&(r[n2]),
+                                              &(a[n]), &(b[n]),
+                                              i, tna - i, tnb - i, p);
+                        break;
+                    } else if (i == tna || i == tnb) {
+                        bn_mul_recursive(&(r[n2]),
+                                         &(a[n]), &(b[n]),
+                                         i, tna - i, tnb - i, p);
+                        break;
+                    }
+                }
+            }
+        }
+    }
+
+    /*-
+     * t[32] holds (a[0]-a[1])*(b[1]-b[0]), c1 is the sign
+     * r[10] holds (a[0]*b[0])
+     * r[32] holds (b[1]*b[1])
+     */
+
+    c1 = (int)(bn_add_words(t, r, &(r[n2]), n2));
+
+    if (neg) {                  /* if t[32] is negative */
+        c1 -= (int)(bn_sub_words(&(t[n2]), t, &(t[n2]), n2));
+    } else {
+        /* Might have a carry */
+        c1 += (int)(bn_add_words(&(t[n2]), &(t[n2]), t, n2));
+    }
+
+    /*-
+     * t[32] holds (a[0]-a[1])*(b[1]-b[0])+(a[0]*b[0])+(a[1]*b[1])
+     * r[10] holds (a[0]*b[0])
+     * r[32] holds (b[1]*b[1])
+     * c1 holds the carry bits
+     */
+    c1 += (int)(bn_add_words(&(r[n]), &(r[n]), &(t[n2]), n2));
+    if (c1) {
+        p = &(r[n + n2]);
+        lo = *p;
+        ln = (lo + c1) & BN_MASK2;
+        *p = ln;
+
+        /*
+         * The overflow will stop before we over write words we should not
+         * overwrite
+         */
+        if (ln < (BN_ULONG)c1) {
+            do {
+                p++;
+                lo = *p;
+                ln = (lo + 1) & BN_MASK2;
+                *p = ln;
+            } while (ln == 0);
+        }
+    }
+}
+
+/*-
+ * a and b must be the same size, which is n2.
+ * r needs to be n2 words and t needs to be n2*2
+ */
+void bn_mul_low_recursive(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n2,
+                          BN_ULONG *t)
+{
+    int n = n2 / 2;
+
+    bn_mul_recursive(r, a, b, n, 0, 0, &(t[0]));
+    if (n >= BN_MUL_LOW_RECURSIVE_SIZE_NORMAL) {
+        bn_mul_low_recursive(&(t[0]), &(a[0]), &(b[n]), n, &(t[n2]));
+        bn_add_words(&(r[n]), &(r[n]), &(t[0]), n);
+        bn_mul_low_recursive(&(t[0]), &(a[n]), &(b[0]), n, &(t[n2]));
+        bn_add_words(&(r[n]), &(r[n]), &(t[0]), n);
+    } else {
+        bn_mul_low_normal(&(t[0]), &(a[0]), &(b[n]), n);
+        bn_mul_low_normal(&(t[n]), &(a[n]), &(b[0]), n);
+        bn_add_words(&(r[n]), &(r[n]), &(t[0]), n);
+        bn_add_words(&(r[n]), &(r[n]), &(t[n]), n);
+    }
+}
+#endif                          /* BN_RECURSION */
+
+int BN_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx)
+{
+    int ret = bn_mul_fixed_top(r, a, b, ctx);
+
+    bn_correct_top(r);
+    bn_check_top(r);
+
+    return ret;
+}
+
+int bn_mul_fixed_top(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx)
+{
+    int ret = 0;
+    int top, al, bl;
+    BIGNUM *rr;
+#if defined(BN_MUL_COMBA) || defined(BN_RECURSION)
+    int i;
+#endif
+#ifdef BN_RECURSION
+    BIGNUM *t = NULL;
+    int j = 0, k;
+#endif
+
+    bn_check_top(a);
+    bn_check_top(b);
+    bn_check_top(r);
+
+    al = a->top;
+    bl = b->top;
+
+    if ((al == 0) || (bl == 0)) {
+        BN_zero(r);
+        return 1;
+    }
+    top = al + bl;
+
+    BN_CTX_start(ctx);
+    if ((r == a) || (r == b)) {
+        if ((rr = BN_CTX_get(ctx)) == NULL)
+            goto err;
+    } else
+        rr = r;
+
+#if defined(BN_MUL_COMBA) || defined(BN_RECURSION)
+    i = al - bl;
+#endif
+#ifdef BN_MUL_COMBA
+    if (i == 0) {
+# if 0
+        if (al == 4) {
+            if (bn_wexpand(rr, 8) == NULL)
+                goto err;
+            rr->top = 8;
+            bn_mul_comba4(rr->d, a->d, b->d);
+            goto end;
+        }
+# endif
+        if (al == 8) {
+            if (bn_wexpand(rr, 16) == NULL)
+                goto err;
+            rr->top = 16;
+            bn_mul_comba8(rr->d, a->d, b->d);
+            goto end;
+        }
+    }
+#endif                          /* BN_MUL_COMBA */
+#ifdef BN_RECURSION
+    if ((al >= BN_MULL_SIZE_NORMAL) && (bl >= BN_MULL_SIZE_NORMAL)) {
+        if (i >= -1 && i <= 1) {
+            /*
+             * Find out the power of two lower or equal to the longest of the
+             * two numbers
+             */
+            if (i >= 0) {
+                j = BN_num_bits_word((BN_ULONG)al);
+            }
+            if (i == -1) {
+                j = BN_num_bits_word((BN_ULONG)bl);
+            }
+            j = 1 << (j - 1);
+            assert(j <= al || j <= bl);
+            k = j + j;
+            t = BN_CTX_get(ctx);
+            if (t == NULL)
+                goto err;
+            if (al > j || bl > j) {
+                if (bn_wexpand(t, k * 4) == NULL)
+                    goto err;
+                if (bn_wexpand(rr, k * 4) == NULL)
+                    goto err;
+                bn_mul_part_recursive(rr->d, a->d, b->d,
+                                      j, al - j, bl - j, t->d);
+            } else {            /* al <= j || bl <= j */
+
+                if (bn_wexpand(t, k * 2) == NULL)
+                    goto err;
+                if (bn_wexpand(rr, k * 2) == NULL)
+                    goto err;
+                bn_mul_recursive(rr->d, a->d, b->d, j, al - j, bl - j, t->d);
+            }
+            rr->top = top;
+            goto end;
+        }
+    }
+#endif                          /* BN_RECURSION */
+    if (bn_wexpand(rr, top) == NULL)
+        goto err;
+    rr->top = top;
+    bn_mul_normal(rr->d, a->d, al, b->d, bl);
+
+#if defined(BN_MUL_COMBA) || defined(BN_RECURSION)
+ end:
+#endif
+    rr->neg = a->neg ^ b->neg;
+    rr->flags |= BN_FLG_FIXED_TOP;
+    if (r != rr && BN_copy(r, rr) == NULL)
+        goto err;
+
+    ret = 1;
+ err:
+    bn_check_top(r);
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+void bn_mul_normal(BN_ULONG *r, BN_ULONG *a, int na, BN_ULONG *b, int nb)
+{
+    BN_ULONG *rr;
+
+    if (na < nb) {
+        int itmp;
+        BN_ULONG *ltmp;
+
+        itmp = na;
+        na = nb;
+        nb = itmp;
+        ltmp = a;
+        a = b;
+        b = ltmp;
+
+    }
+    rr = &(r[na]);
+    if (nb <= 0) {
+        (void)bn_mul_words(r, a, na, 0);
+        return;
+    } else
+        rr[0] = bn_mul_words(r, a, na, b[0]);
+
+    for (;;) {
+        if (--nb <= 0)
+            return;
+        rr[1] = bn_mul_add_words(&(r[1]), a, na, b[1]);
+        if (--nb <= 0)
+            return;
+        rr[2] = bn_mul_add_words(&(r[2]), a, na, b[2]);
+        if (--nb <= 0)
+            return;
+        rr[3] = bn_mul_add_words(&(r[3]), a, na, b[3]);
+        if (--nb <= 0)
+            return;
+        rr[4] = bn_mul_add_words(&(r[4]), a, na, b[4]);
+        rr += 4;
+        r += 4;
+        b += 4;
+    }
+}
+
+void bn_mul_low_normal(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
+{
+    bn_mul_words(r, a, n, b[0]);
+
+    for (;;) {
+        if (--n <= 0)
+            return;
+        bn_mul_add_words(&(r[1]), a, n, b[1]);
+        if (--n <= 0)
+            return;
+        bn_mul_add_words(&(r[2]), a, n, b[2]);
+        if (--n <= 0)
+            return;
+        bn_mul_add_words(&(r[3]), a, n, b[3]);
+        if (--n <= 0)
+            return;
+        bn_mul_add_words(&(r[4]), a, n, b[4]);
+        r += 4;
+        b += 4;
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_nist.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_nist.c
new file mode 100644
index 000000000..dcdd321c6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_nist.c
@@ -0,0 +1,1239 @@
+/*
+ * Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "bn_lcl.h"
+#include "internal/cryptlib.h"
+
+#define BN_NIST_192_TOP (192+BN_BITS2-1)/BN_BITS2
+#define BN_NIST_224_TOP (224+BN_BITS2-1)/BN_BITS2
+#define BN_NIST_256_TOP (256+BN_BITS2-1)/BN_BITS2
+#define BN_NIST_384_TOP (384+BN_BITS2-1)/BN_BITS2
+#define BN_NIST_521_TOP (521+BN_BITS2-1)/BN_BITS2
+
+/* pre-computed tables are "carry-less" values of modulus*(i+1) */
+#if BN_BITS2 == 64
+static const BN_ULONG _nist_p_192[][BN_NIST_192_TOP] = {
+    {0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFEULL, 0xFFFFFFFFFFFFFFFFULL},
+    {0xFFFFFFFFFFFFFFFEULL, 0xFFFFFFFFFFFFFFFDULL, 0xFFFFFFFFFFFFFFFFULL},
+    {0xFFFFFFFFFFFFFFFDULL, 0xFFFFFFFFFFFFFFFCULL, 0xFFFFFFFFFFFFFFFFULL}
+};
+
+static const BN_ULONG _nist_p_192_sqr[] = {
+    0x0000000000000001ULL, 0x0000000000000002ULL, 0x0000000000000001ULL,
+    0xFFFFFFFFFFFFFFFEULL, 0xFFFFFFFFFFFFFFFDULL, 0xFFFFFFFFFFFFFFFFULL
+};
+
+static const BN_ULONG _nist_p_224[][BN_NIST_224_TOP] = {
+    {0x0000000000000001ULL, 0xFFFFFFFF00000000ULL,
+     0xFFFFFFFFFFFFFFFFULL, 0x00000000FFFFFFFFULL},
+    {0x0000000000000002ULL, 0xFFFFFFFE00000000ULL,
+     0xFFFFFFFFFFFFFFFFULL, 0x00000001FFFFFFFFULL} /* this one is
+                                                    * "carry-full" */
+};
+
+static const BN_ULONG _nist_p_224_sqr[] = {
+    0x0000000000000001ULL, 0xFFFFFFFE00000000ULL,
+    0xFFFFFFFFFFFFFFFFULL, 0x0000000200000000ULL,
+    0x0000000000000000ULL, 0xFFFFFFFFFFFFFFFEULL,
+    0xFFFFFFFFFFFFFFFFULL
+};
+
+static const BN_ULONG _nist_p_256[][BN_NIST_256_TOP] = {
+    {0xFFFFFFFFFFFFFFFFULL, 0x00000000FFFFFFFFULL,
+     0x0000000000000000ULL, 0xFFFFFFFF00000001ULL},
+    {0xFFFFFFFFFFFFFFFEULL, 0x00000001FFFFFFFFULL,
+     0x0000000000000000ULL, 0xFFFFFFFE00000002ULL},
+    {0xFFFFFFFFFFFFFFFDULL, 0x00000002FFFFFFFFULL,
+     0x0000000000000000ULL, 0xFFFFFFFD00000003ULL},
+    {0xFFFFFFFFFFFFFFFCULL, 0x00000003FFFFFFFFULL,
+     0x0000000000000000ULL, 0xFFFFFFFC00000004ULL},
+    {0xFFFFFFFFFFFFFFFBULL, 0x00000004FFFFFFFFULL,
+     0x0000000000000000ULL, 0xFFFFFFFB00000005ULL},
+};
+
+static const BN_ULONG _nist_p_256_sqr[] = {
+    0x0000000000000001ULL, 0xFFFFFFFE00000000ULL,
+    0xFFFFFFFFFFFFFFFFULL, 0x00000001FFFFFFFEULL,
+    0x00000001FFFFFFFEULL, 0x00000001FFFFFFFEULL,
+    0xFFFFFFFE00000001ULL, 0xFFFFFFFE00000002ULL
+};
+
+static const BN_ULONG _nist_p_384[][BN_NIST_384_TOP] = {
+    {0x00000000FFFFFFFFULL, 0xFFFFFFFF00000000ULL, 0xFFFFFFFFFFFFFFFEULL,
+     0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL},
+    {0x00000001FFFFFFFEULL, 0xFFFFFFFE00000000ULL, 0xFFFFFFFFFFFFFFFDULL,
+     0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL},
+    {0x00000002FFFFFFFDULL, 0xFFFFFFFD00000000ULL, 0xFFFFFFFFFFFFFFFCULL,
+     0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL},
+    {0x00000003FFFFFFFCULL, 0xFFFFFFFC00000000ULL, 0xFFFFFFFFFFFFFFFBULL,
+     0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL},
+    {0x00000004FFFFFFFBULL, 0xFFFFFFFB00000000ULL, 0xFFFFFFFFFFFFFFFAULL,
+     0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL},
+};
+
+static const BN_ULONG _nist_p_384_sqr[] = {
+    0xFFFFFFFE00000001ULL, 0x0000000200000000ULL, 0xFFFFFFFE00000000ULL,
+    0x0000000200000000ULL, 0x0000000000000001ULL, 0x0000000000000000ULL,
+    0x00000001FFFFFFFEULL, 0xFFFFFFFE00000000ULL, 0xFFFFFFFFFFFFFFFDULL,
+    0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL
+};
+
+static const BN_ULONG _nist_p_521[] =
+    { 0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL,
+    0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL,
+    0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL,
+    0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL,
+    0x00000000000001FFULL
+};
+
+static const BN_ULONG _nist_p_521_sqr[] = {
+    0x0000000000000001ULL, 0x0000000000000000ULL, 0x0000000000000000ULL,
+    0x0000000000000000ULL, 0x0000000000000000ULL, 0x0000000000000000ULL,
+    0x0000000000000000ULL, 0x0000000000000000ULL, 0xFFFFFFFFFFFFFC00ULL,
+    0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL,
+    0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL, 0xFFFFFFFFFFFFFFFFULL,
+    0xFFFFFFFFFFFFFFFFULL, 0x000000000003FFFFULL
+};
+#elif BN_BITS2 == 32
+static const BN_ULONG _nist_p_192[][BN_NIST_192_TOP] = {
+    {0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF},
+    {0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFD, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF},
+    {0xFFFFFFFD, 0xFFFFFFFF, 0xFFFFFFFC, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF}
+};
+
+static const BN_ULONG _nist_p_192_sqr[] = {
+    0x00000001, 0x00000000, 0x00000002, 0x00000000, 0x00000001, 0x00000000,
+    0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFD, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF
+};
+
+static const BN_ULONG _nist_p_224[][BN_NIST_224_TOP] = {
+    {0x00000001, 0x00000000, 0x00000000, 0xFFFFFFFF,
+     0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF},
+    {0x00000002, 0x00000000, 0x00000000, 0xFFFFFFFE,
+     0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF}
+};
+
+static const BN_ULONG _nist_p_224_sqr[] = {
+    0x00000001, 0x00000000, 0x00000000, 0xFFFFFFFE,
+    0xFFFFFFFF, 0xFFFFFFFF, 0x00000000, 0x00000002,
+    0x00000000, 0x00000000, 0xFFFFFFFE, 0xFFFFFFFF,
+    0xFFFFFFFF, 0xFFFFFFFF
+};
+
+static const BN_ULONG _nist_p_256[][BN_NIST_256_TOP] = {
+    {0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0x00000000,
+     0x00000000, 0x00000000, 0x00000001, 0xFFFFFFFF},
+    {0xFFFFFFFE, 0xFFFFFFFF, 0xFFFFFFFF, 0x00000001,
+     0x00000000, 0x00000000, 0x00000002, 0xFFFFFFFE},
+    {0xFFFFFFFD, 0xFFFFFFFF, 0xFFFFFFFF, 0x00000002,
+     0x00000000, 0x00000000, 0x00000003, 0xFFFFFFFD},
+    {0xFFFFFFFC, 0xFFFFFFFF, 0xFFFFFFFF, 0x00000003,
+     0x00000000, 0x00000000, 0x00000004, 0xFFFFFFFC},
+    {0xFFFFFFFB, 0xFFFFFFFF, 0xFFFFFFFF, 0x00000004,
+     0x00000000, 0x00000000, 0x00000005, 0xFFFFFFFB},
+};
+
+static const BN_ULONG _nist_p_256_sqr[] = {
+    0x00000001, 0x00000000, 0x00000000, 0xFFFFFFFE,
+    0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFE, 0x00000001,
+    0xFFFFFFFE, 0x00000001, 0xFFFFFFFE, 0x00000001,
+    0x00000001, 0xFFFFFFFE, 0x00000002, 0xFFFFFFFE
+};
+
+static const BN_ULONG _nist_p_384[][BN_NIST_384_TOP] = {
+    {0xFFFFFFFF, 0x00000000, 0x00000000, 0xFFFFFFFF, 0xFFFFFFFE, 0xFFFFFFFF,
+     0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF},
+    {0xFFFFFFFE, 0x00000001, 0x00000000, 0xFFFFFFFE, 0xFFFFFFFD, 0xFFFFFFFF,
+     0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF},
+    {0xFFFFFFFD, 0x00000002, 0x00000000, 0xFFFFFFFD, 0xFFFFFFFC, 0xFFFFFFFF,
+     0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF},
+    {0xFFFFFFFC, 0x00000003, 0x00000000, 0xFFFFFFFC, 0xFFFFFFFB, 0xFFFFFFFF,
+     0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF},
+    {0xFFFFFFFB, 0x00000004, 0x00000000, 0xFFFFFFFB, 0xFFFFFFFA, 0xFFFFFFFF,
+     0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF},
+};
+
+static const BN_ULONG _nist_p_384_sqr[] = {
+    0x00000001, 0xFFFFFFFE, 0x00000000, 0x00000002, 0x00000000, 0xFFFFFFFE,
+    0x00000000, 0x00000002, 0x00000001, 0x00000000, 0x00000000, 0x00000000,
+    0xFFFFFFFE, 0x00000001, 0x00000000, 0xFFFFFFFE, 0xFFFFFFFD, 0xFFFFFFFF,
+    0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF
+};
+
+static const BN_ULONG _nist_p_521[] = { 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF,
+    0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF,
+    0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF,
+    0xFFFFFFFF, 0x000001FF
+};
+
+static const BN_ULONG _nist_p_521_sqr[] = {
+    0x00000001, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000,
+    0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000,
+    0x00000000, 0x00000000, 0x00000000, 0x00000000, 0xFFFFFC00, 0xFFFFFFFF,
+    0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF,
+    0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF,
+    0xFFFFFFFF, 0xFFFFFFFF, 0x0003FFFF
+};
+#else
+# error "unsupported BN_BITS2"
+#endif
+
+static const BIGNUM _bignum_nist_p_192 = {
+    (BN_ULONG *)_nist_p_192[0],
+    BN_NIST_192_TOP,
+    BN_NIST_192_TOP,
+    0,
+    BN_FLG_STATIC_DATA
+};
+
+static const BIGNUM _bignum_nist_p_224 = {
+    (BN_ULONG *)_nist_p_224[0],
+    BN_NIST_224_TOP,
+    BN_NIST_224_TOP,
+    0,
+    BN_FLG_STATIC_DATA
+};
+
+static const BIGNUM _bignum_nist_p_256 = {
+    (BN_ULONG *)_nist_p_256[0],
+    BN_NIST_256_TOP,
+    BN_NIST_256_TOP,
+    0,
+    BN_FLG_STATIC_DATA
+};
+
+static const BIGNUM _bignum_nist_p_384 = {
+    (BN_ULONG *)_nist_p_384[0],
+    BN_NIST_384_TOP,
+    BN_NIST_384_TOP,
+    0,
+    BN_FLG_STATIC_DATA
+};
+
+static const BIGNUM _bignum_nist_p_521 = {
+    (BN_ULONG *)_nist_p_521,
+    BN_NIST_521_TOP,
+    BN_NIST_521_TOP,
+    0,
+    BN_FLG_STATIC_DATA
+};
+
+const BIGNUM *BN_get0_nist_prime_192(void)
+{
+    return &_bignum_nist_p_192;
+}
+
+const BIGNUM *BN_get0_nist_prime_224(void)
+{
+    return &_bignum_nist_p_224;
+}
+
+const BIGNUM *BN_get0_nist_prime_256(void)
+{
+    return &_bignum_nist_p_256;
+}
+
+const BIGNUM *BN_get0_nist_prime_384(void)
+{
+    return &_bignum_nist_p_384;
+}
+
+const BIGNUM *BN_get0_nist_prime_521(void)
+{
+    return &_bignum_nist_p_521;
+}
+
+static void nist_cp_bn_0(BN_ULONG *dst, const BN_ULONG *src, int top, int max)
+{
+    int i;
+
+#ifdef BN_DEBUG
+    (void)ossl_assert(top <= max);
+#endif
+    for (i = 0; i < top; i++)
+        dst[i] = src[i];
+    for (; i < max; i++)
+        dst[i] = 0;
+}
+
+static void nist_cp_bn(BN_ULONG *dst, const BN_ULONG *src, int top)
+{
+    int i;
+
+    for (i = 0; i < top; i++)
+        dst[i] = src[i];
+}
+
+#if BN_BITS2 == 64
+# define bn_cp_64(to, n, from, m)        (to)[n] = (m>=0)?((from)[m]):0;
+# define bn_64_set_0(to, n)              (to)[n] = (BN_ULONG)0;
+/*
+ * two following macros are implemented under assumption that they
+ * are called in a sequence with *ascending* n, i.e. as they are...
+ */
+# define bn_cp_32_naked(to, n, from, m)  (((n)&1)?(to[(n)/2]|=((m)&1)?(from[(m)/2]&BN_MASK2h):(from[(m)/2]<<32))\
+                                                :(to[(n)/2] =((m)&1)?(from[(m)/2]>>32):(from[(m)/2]&BN_MASK2l)))
+# define bn_32_set_0(to, n)              (((n)&1)?(to[(n)/2]&=BN_MASK2l):(to[(n)/2]=0));
+# define bn_cp_32(to,n,from,m)           ((m)>=0)?bn_cp_32_naked(to,n,from,m):bn_32_set_0(to,n)
+# if defined(L_ENDIAN)
+#  if defined(__arch64__)
+#   define NIST_INT64 long
+#  else
+#   define NIST_INT64 long long
+#  endif
+# endif
+#else
+# define bn_cp_64(to, n, from, m) \
+        { \
+        bn_cp_32(to, (n)*2, from, (m)*2); \
+        bn_cp_32(to, (n)*2+1, from, (m)*2+1); \
+        }
+# define bn_64_set_0(to, n) \
+        { \
+        bn_32_set_0(to, (n)*2); \
+        bn_32_set_0(to, (n)*2+1); \
+        }
+# define bn_cp_32(to, n, from, m)        (to)[n] = (m>=0)?((from)[m]):0;
+# define bn_32_set_0(to, n)              (to)[n] = (BN_ULONG)0;
+# if defined(_WIN32) && !defined(__GNUC__)
+#  define NIST_INT64 __int64
+# elif defined(BN_LLONG)
+#  define NIST_INT64 long long
+# endif
+#endif                          /* BN_BITS2 != 64 */
+
+#define nist_set_192(to, from, a1, a2, a3) \
+        { \
+        bn_cp_64(to, 0, from, (a3) - 3) \
+        bn_cp_64(to, 1, from, (a2) - 3) \
+        bn_cp_64(to, 2, from, (a1) - 3) \
+        }
+
+int BN_nist_mod_192(BIGNUM *r, const BIGNUM *a, const BIGNUM *field,
+                    BN_CTX *ctx)
+{
+    int top = a->top, i;
+    int carry;
+    register BN_ULONG *r_d, *a_d = a->d;
+    union {
+        BN_ULONG bn[BN_NIST_192_TOP];
+        unsigned int ui[BN_NIST_192_TOP * sizeof(BN_ULONG) /
+                        sizeof(unsigned int)];
+    } buf;
+    BN_ULONG c_d[BN_NIST_192_TOP], *res;
+    PTR_SIZE_INT mask;
+    static const BIGNUM _bignum_nist_p_192_sqr = {
+        (BN_ULONG *)_nist_p_192_sqr,
+        OSSL_NELEM(_nist_p_192_sqr),
+        OSSL_NELEM(_nist_p_192_sqr),
+        0, BN_FLG_STATIC_DATA
+    };
+
+    field = &_bignum_nist_p_192; /* just to make sure */
+
+    if (BN_is_negative(a) || BN_ucmp(a, &_bignum_nist_p_192_sqr) >= 0)
+        return BN_nnmod(r, a, field, ctx);
+
+    i = BN_ucmp(field, a);
+    if (i == 0) {
+        BN_zero(r);
+        return 1;
+    } else if (i > 0)
+        return (r == a) ? 1 : (BN_copy(r, a) != NULL);
+
+    if (r != a) {
+        if (!bn_wexpand(r, BN_NIST_192_TOP))
+            return 0;
+        r_d = r->d;
+        nist_cp_bn(r_d, a_d, BN_NIST_192_TOP);
+    } else
+        r_d = a_d;
+
+    nist_cp_bn_0(buf.bn, a_d + BN_NIST_192_TOP, top - BN_NIST_192_TOP,
+                 BN_NIST_192_TOP);
+
+#if defined(NIST_INT64)
+    {
+        NIST_INT64 acc;         /* accumulator */
+        unsigned int *rp = (unsigned int *)r_d;
+        const unsigned int *bp = (const unsigned int *)buf.ui;
+
+        acc = rp[0];
+        acc += bp[3 * 2 - 6];
+        acc += bp[5 * 2 - 6];
+        rp[0] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[1];
+        acc += bp[3 * 2 - 5];
+        acc += bp[5 * 2 - 5];
+        rp[1] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[2];
+        acc += bp[3 * 2 - 6];
+        acc += bp[4 * 2 - 6];
+        acc += bp[5 * 2 - 6];
+        rp[2] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[3];
+        acc += bp[3 * 2 - 5];
+        acc += bp[4 * 2 - 5];
+        acc += bp[5 * 2 - 5];
+        rp[3] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[4];
+        acc += bp[4 * 2 - 6];
+        acc += bp[5 * 2 - 6];
+        rp[4] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[5];
+        acc += bp[4 * 2 - 5];
+        acc += bp[5 * 2 - 5];
+        rp[5] = (unsigned int)acc;
+
+        carry = (int)(acc >> 32);
+    }
+#else
+    {
+        BN_ULONG t_d[BN_NIST_192_TOP];
+
+        nist_set_192(t_d, buf.bn, 0, 3, 3);
+        carry = (int)bn_add_words(r_d, r_d, t_d, BN_NIST_192_TOP);
+        nist_set_192(t_d, buf.bn, 4, 4, 0);
+        carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_192_TOP);
+        nist_set_192(t_d, buf.bn, 5, 5, 5)
+            carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_192_TOP);
+    }
+#endif
+    if (carry > 0)
+        carry =
+            (int)bn_sub_words(r_d, r_d, _nist_p_192[carry - 1],
+                              BN_NIST_192_TOP);
+    else
+        carry = 1;
+
+    /*
+     * we need 'if (carry==0 || result>=modulus) result-=modulus;'
+     * as comparison implies subtraction, we can write
+     * 'tmp=result-modulus; if (!carry || !borrow) result=tmp;'
+     * this is what happens below, but without explicit if:-) a.
+     */
+    mask =
+        0 - (PTR_SIZE_INT) bn_sub_words(c_d, r_d, _nist_p_192[0],
+                                        BN_NIST_192_TOP);
+    mask &= 0 - (PTR_SIZE_INT) carry;
+    res = c_d;
+    res = (BN_ULONG *)
+        (((PTR_SIZE_INT) res & ~mask) | ((PTR_SIZE_INT) r_d & mask));
+    nist_cp_bn(r_d, res, BN_NIST_192_TOP);
+    r->top = BN_NIST_192_TOP;
+    bn_correct_top(r);
+
+    return 1;
+}
+
+typedef BN_ULONG (*bn_addsub_f) (BN_ULONG *, const BN_ULONG *,
+                                 const BN_ULONG *, int);
+
+#define nist_set_224(to, from, a1, a2, a3, a4, a5, a6, a7) \
+        { \
+        bn_cp_32(to, 0, from, (a7) - 7) \
+        bn_cp_32(to, 1, from, (a6) - 7) \
+        bn_cp_32(to, 2, from, (a5) - 7) \
+        bn_cp_32(to, 3, from, (a4) - 7) \
+        bn_cp_32(to, 4, from, (a3) - 7) \
+        bn_cp_32(to, 5, from, (a2) - 7) \
+        bn_cp_32(to, 6, from, (a1) - 7) \
+        }
+
+int BN_nist_mod_224(BIGNUM *r, const BIGNUM *a, const BIGNUM *field,
+                    BN_CTX *ctx)
+{
+    int top = a->top, i;
+    int carry;
+    BN_ULONG *r_d, *a_d = a->d;
+    union {
+        BN_ULONG bn[BN_NIST_224_TOP];
+        unsigned int ui[BN_NIST_224_TOP * sizeof(BN_ULONG) /
+                        sizeof(unsigned int)];
+    } buf;
+    BN_ULONG c_d[BN_NIST_224_TOP], *res;
+    PTR_SIZE_INT mask;
+    union {
+        bn_addsub_f f;
+        PTR_SIZE_INT p;
+    } u;
+    static const BIGNUM _bignum_nist_p_224_sqr = {
+        (BN_ULONG *)_nist_p_224_sqr,
+        OSSL_NELEM(_nist_p_224_sqr),
+        OSSL_NELEM(_nist_p_224_sqr),
+        0, BN_FLG_STATIC_DATA
+    };
+
+    field = &_bignum_nist_p_224; /* just to make sure */
+
+    if (BN_is_negative(a) || BN_ucmp(a, &_bignum_nist_p_224_sqr) >= 0)
+        return BN_nnmod(r, a, field, ctx);
+
+    i = BN_ucmp(field, a);
+    if (i == 0) {
+        BN_zero(r);
+        return 1;
+    } else if (i > 0)
+        return (r == a) ? 1 : (BN_copy(r, a) != NULL);
+
+    if (r != a) {
+        if (!bn_wexpand(r, BN_NIST_224_TOP))
+            return 0;
+        r_d = r->d;
+        nist_cp_bn(r_d, a_d, BN_NIST_224_TOP);
+    } else
+        r_d = a_d;
+
+#if BN_BITS2==64
+    /* copy upper 256 bits of 448 bit number ... */
+    nist_cp_bn_0(c_d, a_d + (BN_NIST_224_TOP - 1),
+                 top - (BN_NIST_224_TOP - 1), BN_NIST_224_TOP);
+    /* ... and right shift by 32 to obtain upper 224 bits */
+    nist_set_224(buf.bn, c_d, 14, 13, 12, 11, 10, 9, 8);
+    /* truncate lower part to 224 bits too */
+    r_d[BN_NIST_224_TOP - 1] &= BN_MASK2l;
+#else
+    nist_cp_bn_0(buf.bn, a_d + BN_NIST_224_TOP, top - BN_NIST_224_TOP,
+                 BN_NIST_224_TOP);
+#endif
+
+#if defined(NIST_INT64) && BN_BITS2!=64
+    {
+        NIST_INT64 acc;         /* accumulator */
+        unsigned int *rp = (unsigned int *)r_d;
+        const unsigned int *bp = (const unsigned int *)buf.ui;
+
+        acc = rp[0];
+        acc -= bp[7 - 7];
+        acc -= bp[11 - 7];
+        rp[0] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[1];
+        acc -= bp[8 - 7];
+        acc -= bp[12 - 7];
+        rp[1] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[2];
+        acc -= bp[9 - 7];
+        acc -= bp[13 - 7];
+        rp[2] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[3];
+        acc += bp[7 - 7];
+        acc += bp[11 - 7];
+        acc -= bp[10 - 7];
+        rp[3] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[4];
+        acc += bp[8 - 7];
+        acc += bp[12 - 7];
+        acc -= bp[11 - 7];
+        rp[4] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[5];
+        acc += bp[9 - 7];
+        acc += bp[13 - 7];
+        acc -= bp[12 - 7];
+        rp[5] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[6];
+        acc += bp[10 - 7];
+        acc -= bp[13 - 7];
+        rp[6] = (unsigned int)acc;
+
+        carry = (int)(acc >> 32);
+# if BN_BITS2==64
+        rp[7] = carry;
+# endif
+    }
+#else
+    {
+        BN_ULONG t_d[BN_NIST_224_TOP];
+
+        nist_set_224(t_d, buf.bn, 10, 9, 8, 7, 0, 0, 0);
+        carry = (int)bn_add_words(r_d, r_d, t_d, BN_NIST_224_TOP);
+        nist_set_224(t_d, buf.bn, 0, 13, 12, 11, 0, 0, 0);
+        carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_224_TOP);
+        nist_set_224(t_d, buf.bn, 13, 12, 11, 10, 9, 8, 7);
+        carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_224_TOP);
+        nist_set_224(t_d, buf.bn, 0, 0, 0, 0, 13, 12, 11);
+        carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_224_TOP);
+
+# if BN_BITS2==64
+        carry = (int)(r_d[BN_NIST_224_TOP - 1] >> 32);
+# endif
+    }
+#endif
+    u.f = bn_sub_words;
+    if (carry > 0) {
+        carry =
+            (int)bn_sub_words(r_d, r_d, _nist_p_224[carry - 1],
+                              BN_NIST_224_TOP);
+#if BN_BITS2==64
+        carry = (int)(~(r_d[BN_NIST_224_TOP - 1] >> 32)) & 1;
+#endif
+    } else if (carry < 0) {
+        /*
+         * it's a bit more complicated logic in this case. if bn_add_words
+         * yields no carry, then result has to be adjusted by unconditionally
+         * *adding* the modulus. but if it does, then result has to be
+         * compared to the modulus and conditionally adjusted by
+         * *subtracting* the latter.
+         */
+        carry =
+            (int)bn_add_words(r_d, r_d, _nist_p_224[-carry - 1],
+                              BN_NIST_224_TOP);
+        mask = 0 - (PTR_SIZE_INT) carry;
+        u.p = ((PTR_SIZE_INT) bn_sub_words & mask) |
+            ((PTR_SIZE_INT) bn_add_words & ~mask);
+    } else
+        carry = 1;
+
+    /* otherwise it's effectively same as in BN_nist_mod_192... */
+    mask =
+        0 - (PTR_SIZE_INT) (*u.f) (c_d, r_d, _nist_p_224[0], BN_NIST_224_TOP);
+    mask &= 0 - (PTR_SIZE_INT) carry;
+    res = c_d;
+    res = (BN_ULONG *)(((PTR_SIZE_INT) res & ~mask) |
+                       ((PTR_SIZE_INT) r_d & mask));
+    nist_cp_bn(r_d, res, BN_NIST_224_TOP);
+    r->top = BN_NIST_224_TOP;
+    bn_correct_top(r);
+
+    return 1;
+}
+
+#define nist_set_256(to, from, a1, a2, a3, a4, a5, a6, a7, a8) \
+        { \
+        bn_cp_32(to, 0, from, (a8) - 8) \
+        bn_cp_32(to, 1, from, (a7) - 8) \
+        bn_cp_32(to, 2, from, (a6) - 8) \
+        bn_cp_32(to, 3, from, (a5) - 8) \
+        bn_cp_32(to, 4, from, (a4) - 8) \
+        bn_cp_32(to, 5, from, (a3) - 8) \
+        bn_cp_32(to, 6, from, (a2) - 8) \
+        bn_cp_32(to, 7, from, (a1) - 8) \
+        }
+
+int BN_nist_mod_256(BIGNUM *r, const BIGNUM *a, const BIGNUM *field,
+                    BN_CTX *ctx)
+{
+    int i, top = a->top;
+    int carry = 0;
+    register BN_ULONG *a_d = a->d, *r_d;
+    union {
+        BN_ULONG bn[BN_NIST_256_TOP];
+        unsigned int ui[BN_NIST_256_TOP * sizeof(BN_ULONG) /
+                        sizeof(unsigned int)];
+    } buf;
+    BN_ULONG c_d[BN_NIST_256_TOP], *res;
+    PTR_SIZE_INT mask;
+    union {
+        bn_addsub_f f;
+        PTR_SIZE_INT p;
+    } u;
+    static const BIGNUM _bignum_nist_p_256_sqr = {
+        (BN_ULONG *)_nist_p_256_sqr,
+        OSSL_NELEM(_nist_p_256_sqr),
+        OSSL_NELEM(_nist_p_256_sqr),
+        0, BN_FLG_STATIC_DATA
+    };
+
+    field = &_bignum_nist_p_256; /* just to make sure */
+
+    if (BN_is_negative(a) || BN_ucmp(a, &_bignum_nist_p_256_sqr) >= 0)
+        return BN_nnmod(r, a, field, ctx);
+
+    i = BN_ucmp(field, a);
+    if (i == 0) {
+        BN_zero(r);
+        return 1;
+    } else if (i > 0)
+        return (r == a) ? 1 : (BN_copy(r, a) != NULL);
+
+    if (r != a) {
+        if (!bn_wexpand(r, BN_NIST_256_TOP))
+            return 0;
+        r_d = r->d;
+        nist_cp_bn(r_d, a_d, BN_NIST_256_TOP);
+    } else
+        r_d = a_d;
+
+    nist_cp_bn_0(buf.bn, a_d + BN_NIST_256_TOP, top - BN_NIST_256_TOP,
+                 BN_NIST_256_TOP);
+
+#if defined(NIST_INT64)
+    {
+        NIST_INT64 acc;         /* accumulator */
+        unsigned int *rp = (unsigned int *)r_d;
+        const unsigned int *bp = (const unsigned int *)buf.ui;
+
+        acc = rp[0];
+        acc += bp[8 - 8];
+        acc += bp[9 - 8];
+        acc -= bp[11 - 8];
+        acc -= bp[12 - 8];
+        acc -= bp[13 - 8];
+        acc -= bp[14 - 8];
+        rp[0] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[1];
+        acc += bp[9 - 8];
+        acc += bp[10 - 8];
+        acc -= bp[12 - 8];
+        acc -= bp[13 - 8];
+        acc -= bp[14 - 8];
+        acc -= bp[15 - 8];
+        rp[1] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[2];
+        acc += bp[10 - 8];
+        acc += bp[11 - 8];
+        acc -= bp[13 - 8];
+        acc -= bp[14 - 8];
+        acc -= bp[15 - 8];
+        rp[2] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[3];
+        acc += bp[11 - 8];
+        acc += bp[11 - 8];
+        acc += bp[12 - 8];
+        acc += bp[12 - 8];
+        acc += bp[13 - 8];
+        acc -= bp[15 - 8];
+        acc -= bp[8 - 8];
+        acc -= bp[9 - 8];
+        rp[3] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[4];
+        acc += bp[12 - 8];
+        acc += bp[12 - 8];
+        acc += bp[13 - 8];
+        acc += bp[13 - 8];
+        acc += bp[14 - 8];
+        acc -= bp[9 - 8];
+        acc -= bp[10 - 8];
+        rp[4] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[5];
+        acc += bp[13 - 8];
+        acc += bp[13 - 8];
+        acc += bp[14 - 8];
+        acc += bp[14 - 8];
+        acc += bp[15 - 8];
+        acc -= bp[10 - 8];
+        acc -= bp[11 - 8];
+        rp[5] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[6];
+        acc += bp[14 - 8];
+        acc += bp[14 - 8];
+        acc += bp[15 - 8];
+        acc += bp[15 - 8];
+        acc += bp[14 - 8];
+        acc += bp[13 - 8];
+        acc -= bp[8 - 8];
+        acc -= bp[9 - 8];
+        rp[6] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[7];
+        acc += bp[15 - 8];
+        acc += bp[15 - 8];
+        acc += bp[15 - 8];
+        acc += bp[8 - 8];
+        acc -= bp[10 - 8];
+        acc -= bp[11 - 8];
+        acc -= bp[12 - 8];
+        acc -= bp[13 - 8];
+        rp[7] = (unsigned int)acc;
+
+        carry = (int)(acc >> 32);
+    }
+#else
+    {
+        BN_ULONG t_d[BN_NIST_256_TOP];
+
+        /*
+         * S1
+         */
+        nist_set_256(t_d, buf.bn, 15, 14, 13, 12, 11, 0, 0, 0);
+        /*
+         * S2
+         */
+        nist_set_256(c_d, buf.bn, 0, 15, 14, 13, 12, 0, 0, 0);
+        carry = (int)bn_add_words(t_d, t_d, c_d, BN_NIST_256_TOP);
+        /* left shift */
+        {
+            register BN_ULONG *ap, t, c;
+            ap = t_d;
+            c = 0;
+            for (i = BN_NIST_256_TOP; i != 0; --i) {
+                t = *ap;
+                *(ap++) = ((t << 1) | c) & BN_MASK2;
+                c = (t & BN_TBIT) ? 1 : 0;
+            }
+            carry <<= 1;
+            carry |= c;
+        }
+        carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_256_TOP);
+        /*
+         * S3
+         */
+        nist_set_256(t_d, buf.bn, 15, 14, 0, 0, 0, 10, 9, 8);
+        carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_256_TOP);
+        /*
+         * S4
+         */
+        nist_set_256(t_d, buf.bn, 8, 13, 15, 14, 13, 11, 10, 9);
+        carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_256_TOP);
+        /*
+         * D1
+         */
+        nist_set_256(t_d, buf.bn, 10, 8, 0, 0, 0, 13, 12, 11);
+        carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_256_TOP);
+        /*
+         * D2
+         */
+        nist_set_256(t_d, buf.bn, 11, 9, 0, 0, 15, 14, 13, 12);
+        carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_256_TOP);
+        /*
+         * D3
+         */
+        nist_set_256(t_d, buf.bn, 12, 0, 10, 9, 8, 15, 14, 13);
+        carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_256_TOP);
+        /*
+         * D4
+         */
+        nist_set_256(t_d, buf.bn, 13, 0, 11, 10, 9, 0, 15, 14);
+        carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_256_TOP);
+
+    }
+#endif
+    /* see BN_nist_mod_224 for explanation */
+    u.f = bn_sub_words;
+    if (carry > 0)
+        carry =
+            (int)bn_sub_words(r_d, r_d, _nist_p_256[carry - 1],
+                              BN_NIST_256_TOP);
+    else if (carry < 0) {
+        carry =
+            (int)bn_add_words(r_d, r_d, _nist_p_256[-carry - 1],
+                              BN_NIST_256_TOP);
+        mask = 0 - (PTR_SIZE_INT) carry;
+        u.p = ((PTR_SIZE_INT) bn_sub_words & mask) |
+            ((PTR_SIZE_INT) bn_add_words & ~mask);
+    } else
+        carry = 1;
+
+    mask =
+        0 - (PTR_SIZE_INT) (*u.f) (c_d, r_d, _nist_p_256[0], BN_NIST_256_TOP);
+    mask &= 0 - (PTR_SIZE_INT) carry;
+    res = c_d;
+    res = (BN_ULONG *)(((PTR_SIZE_INT) res & ~mask) |
+                       ((PTR_SIZE_INT) r_d & mask));
+    nist_cp_bn(r_d, res, BN_NIST_256_TOP);
+    r->top = BN_NIST_256_TOP;
+    bn_correct_top(r);
+
+    return 1;
+}
+
+#define nist_set_384(to,from,a1,a2,a3,a4,a5,a6,a7,a8,a9,a10,a11,a12) \
+        { \
+        bn_cp_32(to, 0, from,  (a12) - 12) \
+        bn_cp_32(to, 1, from,  (a11) - 12) \
+        bn_cp_32(to, 2, from,  (a10) - 12) \
+        bn_cp_32(to, 3, from,  (a9) - 12)  \
+        bn_cp_32(to, 4, from,  (a8) - 12)  \
+        bn_cp_32(to, 5, from,  (a7) - 12)  \
+        bn_cp_32(to, 6, from,  (a6) - 12)  \
+        bn_cp_32(to, 7, from,  (a5) - 12)  \
+        bn_cp_32(to, 8, from,  (a4) - 12)  \
+        bn_cp_32(to, 9, from,  (a3) - 12)  \
+        bn_cp_32(to, 10, from, (a2) - 12)  \
+        bn_cp_32(to, 11, from, (a1) - 12)  \
+        }
+
+int BN_nist_mod_384(BIGNUM *r, const BIGNUM *a, const BIGNUM *field,
+                    BN_CTX *ctx)
+{
+    int i, top = a->top;
+    int carry = 0;
+    register BN_ULONG *r_d, *a_d = a->d;
+    union {
+        BN_ULONG bn[BN_NIST_384_TOP];
+        unsigned int ui[BN_NIST_384_TOP * sizeof(BN_ULONG) /
+                        sizeof(unsigned int)];
+    } buf;
+    BN_ULONG c_d[BN_NIST_384_TOP], *res;
+    PTR_SIZE_INT mask;
+    union {
+        bn_addsub_f f;
+        PTR_SIZE_INT p;
+    } u;
+    static const BIGNUM _bignum_nist_p_384_sqr = {
+        (BN_ULONG *)_nist_p_384_sqr,
+        OSSL_NELEM(_nist_p_384_sqr),
+        OSSL_NELEM(_nist_p_384_sqr),
+        0, BN_FLG_STATIC_DATA
+    };
+
+    field = &_bignum_nist_p_384; /* just to make sure */
+
+    if (BN_is_negative(a) || BN_ucmp(a, &_bignum_nist_p_384_sqr) >= 0)
+        return BN_nnmod(r, a, field, ctx);
+
+    i = BN_ucmp(field, a);
+    if (i == 0) {
+        BN_zero(r);
+        return 1;
+    } else if (i > 0)
+        return (r == a) ? 1 : (BN_copy(r, a) != NULL);
+
+    if (r != a) {
+        if (!bn_wexpand(r, BN_NIST_384_TOP))
+            return 0;
+        r_d = r->d;
+        nist_cp_bn(r_d, a_d, BN_NIST_384_TOP);
+    } else
+        r_d = a_d;
+
+    nist_cp_bn_0(buf.bn, a_d + BN_NIST_384_TOP, top - BN_NIST_384_TOP,
+                 BN_NIST_384_TOP);
+
+#if defined(NIST_INT64)
+    {
+        NIST_INT64 acc;         /* accumulator */
+        unsigned int *rp = (unsigned int *)r_d;
+        const unsigned int *bp = (const unsigned int *)buf.ui;
+
+        acc = rp[0];
+        acc += bp[12 - 12];
+        acc += bp[21 - 12];
+        acc += bp[20 - 12];
+        acc -= bp[23 - 12];
+        rp[0] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[1];
+        acc += bp[13 - 12];
+        acc += bp[22 - 12];
+        acc += bp[23 - 12];
+        acc -= bp[12 - 12];
+        acc -= bp[20 - 12];
+        rp[1] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[2];
+        acc += bp[14 - 12];
+        acc += bp[23 - 12];
+        acc -= bp[13 - 12];
+        acc -= bp[21 - 12];
+        rp[2] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[3];
+        acc += bp[15 - 12];
+        acc += bp[12 - 12];
+        acc += bp[20 - 12];
+        acc += bp[21 - 12];
+        acc -= bp[14 - 12];
+        acc -= bp[22 - 12];
+        acc -= bp[23 - 12];
+        rp[3] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[4];
+        acc += bp[21 - 12];
+        acc += bp[21 - 12];
+        acc += bp[16 - 12];
+        acc += bp[13 - 12];
+        acc += bp[12 - 12];
+        acc += bp[20 - 12];
+        acc += bp[22 - 12];
+        acc -= bp[15 - 12];
+        acc -= bp[23 - 12];
+        acc -= bp[23 - 12];
+        rp[4] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[5];
+        acc += bp[22 - 12];
+        acc += bp[22 - 12];
+        acc += bp[17 - 12];
+        acc += bp[14 - 12];
+        acc += bp[13 - 12];
+        acc += bp[21 - 12];
+        acc += bp[23 - 12];
+        acc -= bp[16 - 12];
+        rp[5] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[6];
+        acc += bp[23 - 12];
+        acc += bp[23 - 12];
+        acc += bp[18 - 12];
+        acc += bp[15 - 12];
+        acc += bp[14 - 12];
+        acc += bp[22 - 12];
+        acc -= bp[17 - 12];
+        rp[6] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[7];
+        acc += bp[19 - 12];
+        acc += bp[16 - 12];
+        acc += bp[15 - 12];
+        acc += bp[23 - 12];
+        acc -= bp[18 - 12];
+        rp[7] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[8];
+        acc += bp[20 - 12];
+        acc += bp[17 - 12];
+        acc += bp[16 - 12];
+        acc -= bp[19 - 12];
+        rp[8] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[9];
+        acc += bp[21 - 12];
+        acc += bp[18 - 12];
+        acc += bp[17 - 12];
+        acc -= bp[20 - 12];
+        rp[9] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[10];
+        acc += bp[22 - 12];
+        acc += bp[19 - 12];
+        acc += bp[18 - 12];
+        acc -= bp[21 - 12];
+        rp[10] = (unsigned int)acc;
+        acc >>= 32;
+
+        acc += rp[11];
+        acc += bp[23 - 12];
+        acc += bp[20 - 12];
+        acc += bp[19 - 12];
+        acc -= bp[22 - 12];
+        rp[11] = (unsigned int)acc;
+
+        carry = (int)(acc >> 32);
+    }
+#else
+    {
+        BN_ULONG t_d[BN_NIST_384_TOP];
+
+        /*
+         * S1
+         */
+        nist_set_256(t_d, buf.bn, 0, 0, 0, 0, 0, 23 - 4, 22 - 4, 21 - 4);
+        /* left shift */
+        {
+            register BN_ULONG *ap, t, c;
+            ap = t_d;
+            c = 0;
+            for (i = 3; i != 0; --i) {
+                t = *ap;
+                *(ap++) = ((t << 1) | c) & BN_MASK2;
+                c = (t & BN_TBIT) ? 1 : 0;
+            }
+            *ap = c;
+        }
+        carry =
+            (int)bn_add_words(r_d + (128 / BN_BITS2), r_d + (128 / BN_BITS2),
+                              t_d, BN_NIST_256_TOP);
+        /*
+         * S2
+         */
+        carry += (int)bn_add_words(r_d, r_d, buf.bn, BN_NIST_384_TOP);
+        /*
+         * S3
+         */
+        nist_set_384(t_d, buf.bn, 20, 19, 18, 17, 16, 15, 14, 13, 12, 23, 22,
+                     21);
+        carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_384_TOP);
+        /*
+         * S4
+         */
+        nist_set_384(t_d, buf.bn, 19, 18, 17, 16, 15, 14, 13, 12, 20, 0, 23,
+                     0);
+        carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_384_TOP);
+        /*
+         * S5
+         */
+        nist_set_384(t_d, buf.bn, 0, 0, 0, 0, 23, 22, 21, 20, 0, 0, 0, 0);
+        carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_384_TOP);
+        /*
+         * S6
+         */
+        nist_set_384(t_d, buf.bn, 0, 0, 0, 0, 0, 0, 23, 22, 21, 0, 0, 20);
+        carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_384_TOP);
+        /*
+         * D1
+         */
+        nist_set_384(t_d, buf.bn, 22, 21, 20, 19, 18, 17, 16, 15, 14, 13, 12,
+                     23);
+        carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_384_TOP);
+        /*
+         * D2
+         */
+        nist_set_384(t_d, buf.bn, 0, 0, 0, 0, 0, 0, 0, 23, 22, 21, 20, 0);
+        carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_384_TOP);
+        /*
+         * D3
+         */
+        nist_set_384(t_d, buf.bn, 0, 0, 0, 0, 0, 0, 0, 23, 23, 0, 0, 0);
+        carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_384_TOP);
+
+    }
+#endif
+    /* see BN_nist_mod_224 for explanation */
+    u.f = bn_sub_words;
+    if (carry > 0)
+        carry =
+            (int)bn_sub_words(r_d, r_d, _nist_p_384[carry - 1],
+                              BN_NIST_384_TOP);
+    else if (carry < 0) {
+        carry =
+            (int)bn_add_words(r_d, r_d, _nist_p_384[-carry - 1],
+                              BN_NIST_384_TOP);
+        mask = 0 - (PTR_SIZE_INT) carry;
+        u.p = ((PTR_SIZE_INT) bn_sub_words & mask) |
+            ((PTR_SIZE_INT) bn_add_words & ~mask);
+    } else
+        carry = 1;
+
+    mask =
+        0 - (PTR_SIZE_INT) (*u.f) (c_d, r_d, _nist_p_384[0], BN_NIST_384_TOP);
+    mask &= 0 - (PTR_SIZE_INT) carry;
+    res = c_d;
+    res = (BN_ULONG *)(((PTR_SIZE_INT) res & ~mask) |
+                       ((PTR_SIZE_INT) r_d & mask));
+    nist_cp_bn(r_d, res, BN_NIST_384_TOP);
+    r->top = BN_NIST_384_TOP;
+    bn_correct_top(r);
+
+    return 1;
+}
+
+#define BN_NIST_521_RSHIFT      (521%BN_BITS2)
+#define BN_NIST_521_LSHIFT      (BN_BITS2-BN_NIST_521_RSHIFT)
+#define BN_NIST_521_TOP_MASK    ((BN_ULONG)BN_MASK2>>BN_NIST_521_LSHIFT)
+
+int BN_nist_mod_521(BIGNUM *r, const BIGNUM *a, const BIGNUM *field,
+                    BN_CTX *ctx)
+{
+    int top = a->top, i;
+    BN_ULONG *r_d, *a_d = a->d, t_d[BN_NIST_521_TOP], val, tmp, *res;
+    PTR_SIZE_INT mask;
+    static const BIGNUM _bignum_nist_p_521_sqr = {
+        (BN_ULONG *)_nist_p_521_sqr,
+        OSSL_NELEM(_nist_p_521_sqr),
+        OSSL_NELEM(_nist_p_521_sqr),
+        0, BN_FLG_STATIC_DATA
+    };
+
+    field = &_bignum_nist_p_521; /* just to make sure */
+
+    if (BN_is_negative(a) || BN_ucmp(a, &_bignum_nist_p_521_sqr) >= 0)
+        return BN_nnmod(r, a, field, ctx);
+
+    i = BN_ucmp(field, a);
+    if (i == 0) {
+        BN_zero(r);
+        return 1;
+    } else if (i > 0)
+        return (r == a) ? 1 : (BN_copy(r, a) != NULL);
+
+    if (r != a) {
+        if (!bn_wexpand(r, BN_NIST_521_TOP))
+            return 0;
+        r_d = r->d;
+        nist_cp_bn(r_d, a_d, BN_NIST_521_TOP);
+    } else
+        r_d = a_d;
+
+    /* upper 521 bits, copy ... */
+    nist_cp_bn_0(t_d, a_d + (BN_NIST_521_TOP - 1),
+                 top - (BN_NIST_521_TOP - 1), BN_NIST_521_TOP);
+    /* ... and right shift */
+    for (val = t_d[0], i = 0; i < BN_NIST_521_TOP - 1; i++) {
+#if 0
+        /*
+         * MSC ARM compiler [version 2013, presumably even earlier,
+         * much earlier] miscompiles this code, but not one in
+         * #else section. See RT#3541.
+         */
+        tmp = val >> BN_NIST_521_RSHIFT;
+        val = t_d[i + 1];
+        t_d[i] = (tmp | val << BN_NIST_521_LSHIFT) & BN_MASK2;
+#else
+        t_d[i] = (val >> BN_NIST_521_RSHIFT |
+                  (tmp = t_d[i + 1]) << BN_NIST_521_LSHIFT) & BN_MASK2;
+        val = tmp;
+#endif
+    }
+    t_d[i] = val >> BN_NIST_521_RSHIFT;
+    /* lower 521 bits */
+    r_d[i] &= BN_NIST_521_TOP_MASK;
+
+    bn_add_words(r_d, r_d, t_d, BN_NIST_521_TOP);
+    mask =
+        0 - (PTR_SIZE_INT) bn_sub_words(t_d, r_d, _nist_p_521,
+                                        BN_NIST_521_TOP);
+    res = t_d;
+    res = (BN_ULONG *)(((PTR_SIZE_INT) res & ~mask) |
+                       ((PTR_SIZE_INT) r_d & mask));
+    nist_cp_bn(r_d, res, BN_NIST_521_TOP);
+    r->top = BN_NIST_521_TOP;
+    bn_correct_top(r);
+
+    return 1;
+}
+
+int (*BN_nist_mod_func(const BIGNUM *p)) (BIGNUM *r, const BIGNUM *a,
+                                          const BIGNUM *field, BN_CTX *ctx) {
+    if (BN_ucmp(&_bignum_nist_p_192, p) == 0)
+        return BN_nist_mod_192;
+    if (BN_ucmp(&_bignum_nist_p_224, p) == 0)
+        return BN_nist_mod_224;
+    if (BN_ucmp(&_bignum_nist_p_256, p) == 0)
+        return BN_nist_mod_256;
+    if (BN_ucmp(&_bignum_nist_p_384, p) == 0)
+        return BN_nist_mod_384;
+    if (BN_ucmp(&_bignum_nist_p_521, p) == 0)
+        return BN_nist_mod_521;
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_prime.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_prime.c
new file mode 100644
index 000000000..b91b31b1f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_prime.c
@@ -0,0 +1,469 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+/*
+ * The quick sieve algorithm approach to weeding out primes is Philip
+ * Zimmermann's, as implemented in PGP.  I have had a read of his comments
+ * and implemented my own version.
+ */
+#include "bn_prime.h"
+
+static int witness(BIGNUM *w, const BIGNUM *a, const BIGNUM *a1,
+                   const BIGNUM *a1_odd, int k, BN_CTX *ctx,
+                   BN_MONT_CTX *mont);
+static int probable_prime(BIGNUM *rnd, int bits, prime_t *mods);
+static int probable_prime_dh_safe(BIGNUM *rnd, int bits,
+                                  const BIGNUM *add, const BIGNUM *rem,
+                                  BN_CTX *ctx);
+
+int BN_GENCB_call(BN_GENCB *cb, int a, int b)
+{
+    /* No callback means continue */
+    if (!cb)
+        return 1;
+    switch (cb->ver) {
+    case 1:
+        /* Deprecated-style callbacks */
+        if (!cb->cb.cb_1)
+            return 1;
+        cb->cb.cb_1(a, b, cb->arg);
+        return 1;
+    case 2:
+        /* New-style callbacks */
+        return cb->cb.cb_2(a, b, cb);
+    default:
+        break;
+    }
+    /* Unrecognised callback type */
+    return 0;
+}
+
+int BN_generate_prime_ex(BIGNUM *ret, int bits, int safe,
+                         const BIGNUM *add, const BIGNUM *rem, BN_GENCB *cb)
+{
+    BIGNUM *t;
+    int found = 0;
+    int i, j, c1 = 0;
+    BN_CTX *ctx = NULL;
+    prime_t *mods = NULL;
+    int checks = BN_prime_checks_for_size(bits);
+
+    if (bits < 2) {
+        /* There are no prime numbers this small. */
+        BNerr(BN_F_BN_GENERATE_PRIME_EX, BN_R_BITS_TOO_SMALL);
+        return 0;
+    } else if (bits == 2 && safe) {
+        /* The smallest safe prime (7) is three bits. */
+        BNerr(BN_F_BN_GENERATE_PRIME_EX, BN_R_BITS_TOO_SMALL);
+        return 0;
+    }
+
+    mods = OPENSSL_zalloc(sizeof(*mods) * NUMPRIMES);
+    if (mods == NULL)
+        goto err;
+
+    ctx = BN_CTX_new();
+    if (ctx == NULL)
+        goto err;
+    BN_CTX_start(ctx);
+    t = BN_CTX_get(ctx);
+    if (t == NULL)
+        goto err;
+ loop:
+    /* make a random number and set the top and bottom bits */
+    if (add == NULL) {
+        if (!probable_prime(ret, bits, mods))
+            goto err;
+    } else {
+        if (safe) {
+            if (!probable_prime_dh_safe(ret, bits, add, rem, ctx))
+                goto err;
+        } else {
+            if (!bn_probable_prime_dh(ret, bits, add, rem, ctx))
+                goto err;
+        }
+    }
+
+    if (!BN_GENCB_call(cb, 0, c1++))
+        /* aborted */
+        goto err;
+
+    if (!safe) {
+        i = BN_is_prime_fasttest_ex(ret, checks, ctx, 0, cb);
+        if (i == -1)
+            goto err;
+        if (i == 0)
+            goto loop;
+    } else {
+        /*
+         * for "safe prime" generation, check that (p-1)/2 is prime. Since a
+         * prime is odd, We just need to divide by 2
+         */
+        if (!BN_rshift1(t, ret))
+            goto err;
+
+        for (i = 0; i < checks; i++) {
+            j = BN_is_prime_fasttest_ex(ret, 1, ctx, 0, cb);
+            if (j == -1)
+                goto err;
+            if (j == 0)
+                goto loop;
+
+            j = BN_is_prime_fasttest_ex(t, 1, ctx, 0, cb);
+            if (j == -1)
+                goto err;
+            if (j == 0)
+                goto loop;
+
+            if (!BN_GENCB_call(cb, 2, c1 - 1))
+                goto err;
+            /* We have a safe prime test pass */
+        }
+    }
+    /* we have a prime :-) */
+    found = 1;
+ err:
+    OPENSSL_free(mods);
+    if (ctx != NULL)
+        BN_CTX_end(ctx);
+    BN_CTX_free(ctx);
+    bn_check_top(ret);
+    return found;
+}
+
+int BN_is_prime_ex(const BIGNUM *a, int checks, BN_CTX *ctx_passed,
+                   BN_GENCB *cb)
+{
+    return BN_is_prime_fasttest_ex(a, checks, ctx_passed, 0, cb);
+}
+
+int BN_is_prime_fasttest_ex(const BIGNUM *a, int checks, BN_CTX *ctx_passed,
+                            int do_trial_division, BN_GENCB *cb)
+{
+    int i, j, ret = -1;
+    int k;
+    BN_CTX *ctx = NULL;
+    BIGNUM *A1, *A1_odd, *A3, *check; /* taken from ctx */
+    BN_MONT_CTX *mont = NULL;
+
+    /* Take care of the really small primes 2 & 3 */
+    if (BN_is_word(a, 2) || BN_is_word(a, 3))
+        return 1;
+
+    /* Check odd and bigger than 1 */
+    if (!BN_is_odd(a) || BN_cmp(a, BN_value_one()) <= 0)
+        return 0;
+
+    if (checks == BN_prime_checks)
+        checks = BN_prime_checks_for_size(BN_num_bits(a));
+
+    /* first look for small factors */
+    if (do_trial_division) {
+        for (i = 1; i < NUMPRIMES; i++) {
+            BN_ULONG mod = BN_mod_word(a, primes[i]);
+            if (mod == (BN_ULONG)-1)
+                goto err;
+            if (mod == 0)
+                return BN_is_word(a, primes[i]);
+        }
+        if (!BN_GENCB_call(cb, 1, -1))
+            goto err;
+    }
+
+    if (ctx_passed != NULL)
+        ctx = ctx_passed;
+    else if ((ctx = BN_CTX_new()) == NULL)
+        goto err;
+    BN_CTX_start(ctx);
+
+    A1 = BN_CTX_get(ctx);
+    A3 = BN_CTX_get(ctx);
+    A1_odd = BN_CTX_get(ctx);
+    check = BN_CTX_get(ctx);
+    if (check == NULL)
+        goto err;
+
+    /* compute A1 := a - 1 */
+    if (!BN_copy(A1, a) || !BN_sub_word(A1, 1))
+        goto err;
+    /* compute A3 := a - 3 */
+    if (!BN_copy(A3, a) || !BN_sub_word(A3, 3))
+        goto err;
+
+    /* write  A1  as  A1_odd * 2^k */
+    k = 1;
+    while (!BN_is_bit_set(A1, k))
+        k++;
+    if (!BN_rshift(A1_odd, A1, k))
+        goto err;
+
+    /* Montgomery setup for computations mod a */
+    mont = BN_MONT_CTX_new();
+    if (mont == NULL)
+        goto err;
+    if (!BN_MONT_CTX_set(mont, a, ctx))
+        goto err;
+
+    for (i = 0; i < checks; i++) {
+        /* 1 < check < a-1 */
+        if (!BN_priv_rand_range(check, A3) || !BN_add_word(check, 2))
+            goto err;
+
+        j = witness(check, a, A1, A1_odd, k, ctx, mont);
+        if (j == -1)
+            goto err;
+        if (j) {
+            ret = 0;
+            goto err;
+        }
+        if (!BN_GENCB_call(cb, 1, i))
+            goto err;
+    }
+    ret = 1;
+ err:
+    if (ctx != NULL) {
+        BN_CTX_end(ctx);
+        if (ctx_passed == NULL)
+            BN_CTX_free(ctx);
+    }
+    BN_MONT_CTX_free(mont);
+
+    return ret;
+}
+
+static int witness(BIGNUM *w, const BIGNUM *a, const BIGNUM *a1,
+                   const BIGNUM *a1_odd, int k, BN_CTX *ctx,
+                   BN_MONT_CTX *mont)
+{
+    if (!BN_mod_exp_mont(w, w, a1_odd, a, ctx, mont)) /* w := w^a1_odd mod a */
+        return -1;
+    if (BN_is_one(w))
+        return 0;               /* probably prime */
+    if (BN_cmp(w, a1) == 0)
+        return 0;               /* w == -1 (mod a), 'a' is probably prime */
+    while (--k) {
+        if (!BN_mod_mul(w, w, w, a, ctx)) /* w := w^2 mod a */
+            return -1;
+        if (BN_is_one(w))
+            return 1;           /* 'a' is composite, otherwise a previous 'w'
+                                 * would have been == -1 (mod 'a') */
+        if (BN_cmp(w, a1) == 0)
+            return 0;           /* w == -1 (mod a), 'a' is probably prime */
+    }
+    /*
+     * If we get here, 'w' is the (a-1)/2-th power of the original 'w', and
+     * it is neither -1 nor +1 -- so 'a' cannot be prime
+     */
+    bn_check_top(w);
+    return 1;
+}
+
+static int probable_prime(BIGNUM *rnd, int bits, prime_t *mods)
+{
+    int i;
+    BN_ULONG delta;
+    BN_ULONG maxdelta = BN_MASK2 - primes[NUMPRIMES - 1];
+    char is_single_word = bits <= BN_BITS2;
+
+ again:
+    /* TODO: Not all primes are private */
+    if (!BN_priv_rand(rnd, bits, BN_RAND_TOP_TWO, BN_RAND_BOTTOM_ODD))
+        return 0;
+    /* we now have a random number 'rnd' to test. */
+    for (i = 1; i < NUMPRIMES; i++) {
+        BN_ULONG mod = BN_mod_word(rnd, (BN_ULONG)primes[i]);
+        if (mod == (BN_ULONG)-1)
+            return 0;
+        mods[i] = (prime_t) mod;
+    }
+    /*
+     * If bits is so small that it fits into a single word then we
+     * additionally don't want to exceed that many bits.
+     */
+    if (is_single_word) {
+        BN_ULONG size_limit;
+
+        if (bits == BN_BITS2) {
+            /*
+             * Shifting by this much has undefined behaviour so we do it a
+             * different way
+             */
+            size_limit = ~((BN_ULONG)0) - BN_get_word(rnd);
+        } else {
+            size_limit = (((BN_ULONG)1) << bits) - BN_get_word(rnd) - 1;
+        }
+        if (size_limit < maxdelta)
+            maxdelta = size_limit;
+    }
+    delta = 0;
+ loop:
+    if (is_single_word) {
+        BN_ULONG rnd_word = BN_get_word(rnd);
+
+        /*-
+         * In the case that the candidate prime is a single word then
+         * we check that:
+         *   1) It's greater than primes[i] because we shouldn't reject
+         *      3 as being a prime number because it's a multiple of
+         *      three.
+         *   2) That it's not a multiple of a known prime. We don't
+         *      check that rnd-1 is also coprime to all the known
+         *      primes because there aren't many small primes where
+         *      that's true.
+         */
+        for (i = 1; i < NUMPRIMES && primes[i] < rnd_word; i++) {
+            if ((mods[i] + delta) % primes[i] == 0) {
+                delta += 2;
+                if (delta > maxdelta)
+                    goto again;
+                goto loop;
+            }
+        }
+    } else {
+        for (i = 1; i < NUMPRIMES; i++) {
+            /*
+             * check that rnd is not a prime and also that gcd(rnd-1,primes)
+             * == 1 (except for 2)
+             */
+            if (((mods[i] + delta) % primes[i]) <= 1) {
+                delta += 2;
+                if (delta > maxdelta)
+                    goto again;
+                goto loop;
+            }
+        }
+    }
+    if (!BN_add_word(rnd, delta))
+        return 0;
+    if (BN_num_bits(rnd) != bits)
+        goto again;
+    bn_check_top(rnd);
+    return 1;
+}
+
+int bn_probable_prime_dh(BIGNUM *rnd, int bits,
+                         const BIGNUM *add, const BIGNUM *rem, BN_CTX *ctx)
+{
+    int i, ret = 0;
+    BIGNUM *t1;
+
+    BN_CTX_start(ctx);
+    if ((t1 = BN_CTX_get(ctx)) == NULL)
+        goto err;
+
+    if (!BN_rand(rnd, bits, BN_RAND_TOP_ONE, BN_RAND_BOTTOM_ODD))
+        goto err;
+
+    /* we need ((rnd-rem) % add) == 0 */
+
+    if (!BN_mod(t1, rnd, add, ctx))
+        goto err;
+    if (!BN_sub(rnd, rnd, t1))
+        goto err;
+    if (rem == NULL) {
+        if (!BN_add_word(rnd, 1))
+            goto err;
+    } else {
+        if (!BN_add(rnd, rnd, rem))
+            goto err;
+    }
+
+    /* we now have a random number 'rand' to test. */
+
+ loop:
+    for (i = 1; i < NUMPRIMES; i++) {
+        /* check that rnd is a prime */
+        BN_ULONG mod = BN_mod_word(rnd, (BN_ULONG)primes[i]);
+        if (mod == (BN_ULONG)-1)
+            goto err;
+        if (mod <= 1) {
+            if (!BN_add(rnd, rnd, add))
+                goto err;
+            goto loop;
+        }
+    }
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    bn_check_top(rnd);
+    return ret;
+}
+
+static int probable_prime_dh_safe(BIGNUM *p, int bits, const BIGNUM *padd,
+                                  const BIGNUM *rem, BN_CTX *ctx)
+{
+    int i, ret = 0;
+    BIGNUM *t1, *qadd, *q;
+
+    bits--;
+    BN_CTX_start(ctx);
+    t1 = BN_CTX_get(ctx);
+    q = BN_CTX_get(ctx);
+    qadd = BN_CTX_get(ctx);
+    if (qadd == NULL)
+        goto err;
+
+    if (!BN_rshift1(qadd, padd))
+        goto err;
+
+    if (!BN_rand(q, bits, BN_RAND_TOP_ONE, BN_RAND_BOTTOM_ODD))
+        goto err;
+
+    /* we need ((rnd-rem) % add) == 0 */
+    if (!BN_mod(t1, q, qadd, ctx))
+        goto err;
+    if (!BN_sub(q, q, t1))
+        goto err;
+    if (rem == NULL) {
+        if (!BN_add_word(q, 1))
+            goto err;
+    } else {
+        if (!BN_rshift1(t1, rem))
+            goto err;
+        if (!BN_add(q, q, t1))
+            goto err;
+    }
+
+    /* we now have a random number 'rand' to test. */
+    if (!BN_lshift1(p, q))
+        goto err;
+    if (!BN_add_word(p, 1))
+        goto err;
+
+ loop:
+    for (i = 1; i < NUMPRIMES; i++) {
+        /* check that p and q are prime */
+        /*
+         * check that for p and q gcd(p-1,primes) == 1 (except for 2)
+         */
+        BN_ULONG pmod = BN_mod_word(p, (BN_ULONG)primes[i]);
+        BN_ULONG qmod = BN_mod_word(q, (BN_ULONG)primes[i]);
+        if (pmod == (BN_ULONG)-1 || qmod == (BN_ULONG)-1)
+            goto err;
+        if (pmod == 0 || qmod == 0) {
+            if (!BN_add(p, p, padd))
+                goto err;
+            if (!BN_add(q, q, qadd))
+                goto err;
+            goto loop;
+        }
+    }
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    bn_check_top(p);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_prime.h b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_prime.h
new file mode 100644
index 000000000..2eb7b52f7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_prime.h
@@ -0,0 +1,273 @@
+/*
+ * WARNING: do not edit!
+ * Generated by crypto/bn/bn_prime.pl
+ *
+ * Copyright 1998-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+typedef unsigned short prime_t;
+# define NUMPRIMES 2048
+
+static const prime_t primes[2048] = {
+        2,     3,     5,     7,    11,    13,    17,    19,
+       23,    29,    31,    37,    41,    43,    47,    53,
+       59,    61,    67,    71,    73,    79,    83,    89,
+       97,   101,   103,   107,   109,   113,   127,   131,
+      137,   139,   149,   151,   157,   163,   167,   173,
+      179,   181,   191,   193,   197,   199,   211,   223,
+      227,   229,   233,   239,   241,   251,   257,   263,
+      269,   271,   277,   281,   283,   293,   307,   311,
+      313,   317,   331,   337,   347,   349,   353,   359,
+      367,   373,   379,   383,   389,   397,   401,   409,
+      419,   421,   431,   433,   439,   443,   449,   457,
+      461,   463,   467,   479,   487,   491,   499,   503,
+      509,   521,   523,   541,   547,   557,   563,   569,
+      571,   577,   587,   593,   599,   601,   607,   613,
+      617,   619,   631,   641,   643,   647,   653,   659,
+      661,   673,   677,   683,   691,   701,   709,   719,
+      727,   733,   739,   743,   751,   757,   761,   769,
+      773,   787,   797,   809,   811,   821,   823,   827,
+      829,   839,   853,   857,   859,   863,   877,   881,
+      883,   887,   907,   911,   919,   929,   937,   941,
+      947,   953,   967,   971,   977,   983,   991,   997,
+     1009,  1013,  1019,  1021,  1031,  1033,  1039,  1049,
+     1051,  1061,  1063,  1069,  1087,  1091,  1093,  1097,
+     1103,  1109,  1117,  1123,  1129,  1151,  1153,  1163,
+     1171,  1181,  1187,  1193,  1201,  1213,  1217,  1223,
+     1229,  1231,  1237,  1249,  1259,  1277,  1279,  1283,
+     1289,  1291,  1297,  1301,  1303,  1307,  1319,  1321,
+     1327,  1361,  1367,  1373,  1381,  1399,  1409,  1423,
+     1427,  1429,  1433,  1439,  1447,  1451,  1453,  1459,
+     1471,  1481,  1483,  1487,  1489,  1493,  1499,  1511,
+     1523,  1531,  1543,  1549,  1553,  1559,  1567,  1571,
+     1579,  1583,  1597,  1601,  1607,  1609,  1613,  1619,
+     1621,  1627,  1637,  1657,  1663,  1667,  1669,  1693,
+     1697,  1699,  1709,  1721,  1723,  1733,  1741,  1747,
+     1753,  1759,  1777,  1783,  1787,  1789,  1801,  1811,
+     1823,  1831,  1847,  1861,  1867,  1871,  1873,  1877,
+     1879,  1889,  1901,  1907,  1913,  1931,  1933,  1949,
+     1951,  1973,  1979,  1987,  1993,  1997,  1999,  2003,
+     2011,  2017,  2027,  2029,  2039,  2053,  2063,  2069,
+     2081,  2083,  2087,  2089,  2099,  2111,  2113,  2129,
+     2131,  2137,  2141,  2143,  2153,  2161,  2179,  2203,
+     2207,  2213,  2221,  2237,  2239,  2243,  2251,  2267,
+     2269,  2273,  2281,  2287,  2293,  2297,  2309,  2311,
+     2333,  2339,  2341,  2347,  2351,  2357,  2371,  2377,
+     2381,  2383,  2389,  2393,  2399,  2411,  2417,  2423,
+     2437,  2441,  2447,  2459,  2467,  2473,  2477,  2503,
+     2521,  2531,  2539,  2543,  2549,  2551,  2557,  2579,
+     2591,  2593,  2609,  2617,  2621,  2633,  2647,  2657,
+     2659,  2663,  2671,  2677,  2683,  2687,  2689,  2693,
+     2699,  2707,  2711,  2713,  2719,  2729,  2731,  2741,
+     2749,  2753,  2767,  2777,  2789,  2791,  2797,  2801,
+     2803,  2819,  2833,  2837,  2843,  2851,  2857,  2861,
+     2879,  2887,  2897,  2903,  2909,  2917,  2927,  2939,
+     2953,  2957,  2963,  2969,  2971,  2999,  3001,  3011,
+     3019,  3023,  3037,  3041,  3049,  3061,  3067,  3079,
+     3083,  3089,  3109,  3119,  3121,  3137,  3163,  3167,
+     3169,  3181,  3187,  3191,  3203,  3209,  3217,  3221,
+     3229,  3251,  3253,  3257,  3259,  3271,  3299,  3301,
+     3307,  3313,  3319,  3323,  3329,  3331,  3343,  3347,
+     3359,  3361,  3371,  3373,  3389,  3391,  3407,  3413,
+     3433,  3449,  3457,  3461,  3463,  3467,  3469,  3491,
+     3499,  3511,  3517,  3527,  3529,  3533,  3539,  3541,
+     3547,  3557,  3559,  3571,  3581,  3583,  3593,  3607,
+     3613,  3617,  3623,  3631,  3637,  3643,  3659,  3671,
+     3673,  3677,  3691,  3697,  3701,  3709,  3719,  3727,
+     3733,  3739,  3761,  3767,  3769,  3779,  3793,  3797,
+     3803,  3821,  3823,  3833,  3847,  3851,  3853,  3863,
+     3877,  3881,  3889,  3907,  3911,  3917,  3919,  3923,
+     3929,  3931,  3943,  3947,  3967,  3989,  4001,  4003,
+     4007,  4013,  4019,  4021,  4027,  4049,  4051,  4057,
+     4073,  4079,  4091,  4093,  4099,  4111,  4127,  4129,
+     4133,  4139,  4153,  4157,  4159,  4177,  4201,  4211,
+     4217,  4219,  4229,  4231,  4241,  4243,  4253,  4259,
+     4261,  4271,  4273,  4283,  4289,  4297,  4327,  4337,
+     4339,  4349,  4357,  4363,  4373,  4391,  4397,  4409,
+     4421,  4423,  4441,  4447,  4451,  4457,  4463,  4481,
+     4483,  4493,  4507,  4513,  4517,  4519,  4523,  4547,
+     4549,  4561,  4567,  4583,  4591,  4597,  4603,  4621,
+     4637,  4639,  4643,  4649,  4651,  4657,  4663,  4673,
+     4679,  4691,  4703,  4721,  4723,  4729,  4733,  4751,
+     4759,  4783,  4787,  4789,  4793,  4799,  4801,  4813,
+     4817,  4831,  4861,  4871,  4877,  4889,  4903,  4909,
+     4919,  4931,  4933,  4937,  4943,  4951,  4957,  4967,
+     4969,  4973,  4987,  4993,  4999,  5003,  5009,  5011,
+     5021,  5023,  5039,  5051,  5059,  5077,  5081,  5087,
+     5099,  5101,  5107,  5113,  5119,  5147,  5153,  5167,
+     5171,  5179,  5189,  5197,  5209,  5227,  5231,  5233,
+     5237,  5261,  5273,  5279,  5281,  5297,  5303,  5309,
+     5323,  5333,  5347,  5351,  5381,  5387,  5393,  5399,
+     5407,  5413,  5417,  5419,  5431,  5437,  5441,  5443,
+     5449,  5471,  5477,  5479,  5483,  5501,  5503,  5507,
+     5519,  5521,  5527,  5531,  5557,  5563,  5569,  5573,
+     5581,  5591,  5623,  5639,  5641,  5647,  5651,  5653,
+     5657,  5659,  5669,  5683,  5689,  5693,  5701,  5711,
+     5717,  5737,  5741,  5743,  5749,  5779,  5783,  5791,
+     5801,  5807,  5813,  5821,  5827,  5839,  5843,  5849,
+     5851,  5857,  5861,  5867,  5869,  5879,  5881,  5897,
+     5903,  5923,  5927,  5939,  5953,  5981,  5987,  6007,
+     6011,  6029,  6037,  6043,  6047,  6053,  6067,  6073,
+     6079,  6089,  6091,  6101,  6113,  6121,  6131,  6133,
+     6143,  6151,  6163,  6173,  6197,  6199,  6203,  6211,
+     6217,  6221,  6229,  6247,  6257,  6263,  6269,  6271,
+     6277,  6287,  6299,  6301,  6311,  6317,  6323,  6329,
+     6337,  6343,  6353,  6359,  6361,  6367,  6373,  6379,
+     6389,  6397,  6421,  6427,  6449,  6451,  6469,  6473,
+     6481,  6491,  6521,  6529,  6547,  6551,  6553,  6563,
+     6569,  6571,  6577,  6581,  6599,  6607,  6619,  6637,
+     6653,  6659,  6661,  6673,  6679,  6689,  6691,  6701,
+     6703,  6709,  6719,  6733,  6737,  6761,  6763,  6779,
+     6781,  6791,  6793,  6803,  6823,  6827,  6829,  6833,
+     6841,  6857,  6863,  6869,  6871,  6883,  6899,  6907,
+     6911,  6917,  6947,  6949,  6959,  6961,  6967,  6971,
+     6977,  6983,  6991,  6997,  7001,  7013,  7019,  7027,
+     7039,  7043,  7057,  7069,  7079,  7103,  7109,  7121,
+     7127,  7129,  7151,  7159,  7177,  7187,  7193,  7207,
+     7211,  7213,  7219,  7229,  7237,  7243,  7247,  7253,
+     7283,  7297,  7307,  7309,  7321,  7331,  7333,  7349,
+     7351,  7369,  7393,  7411,  7417,  7433,  7451,  7457,
+     7459,  7477,  7481,  7487,  7489,  7499,  7507,  7517,
+     7523,  7529,  7537,  7541,  7547,  7549,  7559,  7561,
+     7573,  7577,  7583,  7589,  7591,  7603,  7607,  7621,
+     7639,  7643,  7649,  7669,  7673,  7681,  7687,  7691,
+     7699,  7703,  7717,  7723,  7727,  7741,  7753,  7757,
+     7759,  7789,  7793,  7817,  7823,  7829,  7841,  7853,
+     7867,  7873,  7877,  7879,  7883,  7901,  7907,  7919,
+     7927,  7933,  7937,  7949,  7951,  7963,  7993,  8009,
+     8011,  8017,  8039,  8053,  8059,  8069,  8081,  8087,
+     8089,  8093,  8101,  8111,  8117,  8123,  8147,  8161,
+     8167,  8171,  8179,  8191,  8209,  8219,  8221,  8231,
+     8233,  8237,  8243,  8263,  8269,  8273,  8287,  8291,
+     8293,  8297,  8311,  8317,  8329,  8353,  8363,  8369,
+     8377,  8387,  8389,  8419,  8423,  8429,  8431,  8443,
+     8447,  8461,  8467,  8501,  8513,  8521,  8527,  8537,
+     8539,  8543,  8563,  8573,  8581,  8597,  8599,  8609,
+     8623,  8627,  8629,  8641,  8647,  8663,  8669,  8677,
+     8681,  8689,  8693,  8699,  8707,  8713,  8719,  8731,
+     8737,  8741,  8747,  8753,  8761,  8779,  8783,  8803,
+     8807,  8819,  8821,  8831,  8837,  8839,  8849,  8861,
+     8863,  8867,  8887,  8893,  8923,  8929,  8933,  8941,
+     8951,  8963,  8969,  8971,  8999,  9001,  9007,  9011,
+     9013,  9029,  9041,  9043,  9049,  9059,  9067,  9091,
+     9103,  9109,  9127,  9133,  9137,  9151,  9157,  9161,
+     9173,  9181,  9187,  9199,  9203,  9209,  9221,  9227,
+     9239,  9241,  9257,  9277,  9281,  9283,  9293,  9311,
+     9319,  9323,  9337,  9341,  9343,  9349,  9371,  9377,
+     9391,  9397,  9403,  9413,  9419,  9421,  9431,  9433,
+     9437,  9439,  9461,  9463,  9467,  9473,  9479,  9491,
+     9497,  9511,  9521,  9533,  9539,  9547,  9551,  9587,
+     9601,  9613,  9619,  9623,  9629,  9631,  9643,  9649,
+     9661,  9677,  9679,  9689,  9697,  9719,  9721,  9733,
+     9739,  9743,  9749,  9767,  9769,  9781,  9787,  9791,
+     9803,  9811,  9817,  9829,  9833,  9839,  9851,  9857,
+     9859,  9871,  9883,  9887,  9901,  9907,  9923,  9929,
+     9931,  9941,  9949,  9967,  9973, 10007, 10009, 10037,
+    10039, 10061, 10067, 10069, 10079, 10091, 10093, 10099,
+    10103, 10111, 10133, 10139, 10141, 10151, 10159, 10163,
+    10169, 10177, 10181, 10193, 10211, 10223, 10243, 10247,
+    10253, 10259, 10267, 10271, 10273, 10289, 10301, 10303,
+    10313, 10321, 10331, 10333, 10337, 10343, 10357, 10369,
+    10391, 10399, 10427, 10429, 10433, 10453, 10457, 10459,
+    10463, 10477, 10487, 10499, 10501, 10513, 10529, 10531,
+    10559, 10567, 10589, 10597, 10601, 10607, 10613, 10627,
+    10631, 10639, 10651, 10657, 10663, 10667, 10687, 10691,
+    10709, 10711, 10723, 10729, 10733, 10739, 10753, 10771,
+    10781, 10789, 10799, 10831, 10837, 10847, 10853, 10859,
+    10861, 10867, 10883, 10889, 10891, 10903, 10909, 10937,
+    10939, 10949, 10957, 10973, 10979, 10987, 10993, 11003,
+    11027, 11047, 11057, 11059, 11069, 11071, 11083, 11087,
+    11093, 11113, 11117, 11119, 11131, 11149, 11159, 11161,
+    11171, 11173, 11177, 11197, 11213, 11239, 11243, 11251,
+    11257, 11261, 11273, 11279, 11287, 11299, 11311, 11317,
+    11321, 11329, 11351, 11353, 11369, 11383, 11393, 11399,
+    11411, 11423, 11437, 11443, 11447, 11467, 11471, 11483,
+    11489, 11491, 11497, 11503, 11519, 11527, 11549, 11551,
+    11579, 11587, 11593, 11597, 11617, 11621, 11633, 11657,
+    11677, 11681, 11689, 11699, 11701, 11717, 11719, 11731,
+    11743, 11777, 11779, 11783, 11789, 11801, 11807, 11813,
+    11821, 11827, 11831, 11833, 11839, 11863, 11867, 11887,
+    11897, 11903, 11909, 11923, 11927, 11933, 11939, 11941,
+    11953, 11959, 11969, 11971, 11981, 11987, 12007, 12011,
+    12037, 12041, 12043, 12049, 12071, 12073, 12097, 12101,
+    12107, 12109, 12113, 12119, 12143, 12149, 12157, 12161,
+    12163, 12197, 12203, 12211, 12227, 12239, 12241, 12251,
+    12253, 12263, 12269, 12277, 12281, 12289, 12301, 12323,
+    12329, 12343, 12347, 12373, 12377, 12379, 12391, 12401,
+    12409, 12413, 12421, 12433, 12437, 12451, 12457, 12473,
+    12479, 12487, 12491, 12497, 12503, 12511, 12517, 12527,
+    12539, 12541, 12547, 12553, 12569, 12577, 12583, 12589,
+    12601, 12611, 12613, 12619, 12637, 12641, 12647, 12653,
+    12659, 12671, 12689, 12697, 12703, 12713, 12721, 12739,
+    12743, 12757, 12763, 12781, 12791, 12799, 12809, 12821,
+    12823, 12829, 12841, 12853, 12889, 12893, 12899, 12907,
+    12911, 12917, 12919, 12923, 12941, 12953, 12959, 12967,
+    12973, 12979, 12983, 13001, 13003, 13007, 13009, 13033,
+    13037, 13043, 13049, 13063, 13093, 13099, 13103, 13109,
+    13121, 13127, 13147, 13151, 13159, 13163, 13171, 13177,
+    13183, 13187, 13217, 13219, 13229, 13241, 13249, 13259,
+    13267, 13291, 13297, 13309, 13313, 13327, 13331, 13337,
+    13339, 13367, 13381, 13397, 13399, 13411, 13417, 13421,
+    13441, 13451, 13457, 13463, 13469, 13477, 13487, 13499,
+    13513, 13523, 13537, 13553, 13567, 13577, 13591, 13597,
+    13613, 13619, 13627, 13633, 13649, 13669, 13679, 13681,
+    13687, 13691, 13693, 13697, 13709, 13711, 13721, 13723,
+    13729, 13751, 13757, 13759, 13763, 13781, 13789, 13799,
+    13807, 13829, 13831, 13841, 13859, 13873, 13877, 13879,
+    13883, 13901, 13903, 13907, 13913, 13921, 13931, 13933,
+    13963, 13967, 13997, 13999, 14009, 14011, 14029, 14033,
+    14051, 14057, 14071, 14081, 14083, 14087, 14107, 14143,
+    14149, 14153, 14159, 14173, 14177, 14197, 14207, 14221,
+    14243, 14249, 14251, 14281, 14293, 14303, 14321, 14323,
+    14327, 14341, 14347, 14369, 14387, 14389, 14401, 14407,
+    14411, 14419, 14423, 14431, 14437, 14447, 14449, 14461,
+    14479, 14489, 14503, 14519, 14533, 14537, 14543, 14549,
+    14551, 14557, 14561, 14563, 14591, 14593, 14621, 14627,
+    14629, 14633, 14639, 14653, 14657, 14669, 14683, 14699,
+    14713, 14717, 14723, 14731, 14737, 14741, 14747, 14753,
+    14759, 14767, 14771, 14779, 14783, 14797, 14813, 14821,
+    14827, 14831, 14843, 14851, 14867, 14869, 14879, 14887,
+    14891, 14897, 14923, 14929, 14939, 14947, 14951, 14957,
+    14969, 14983, 15013, 15017, 15031, 15053, 15061, 15073,
+    15077, 15083, 15091, 15101, 15107, 15121, 15131, 15137,
+    15139, 15149, 15161, 15173, 15187, 15193, 15199, 15217,
+    15227, 15233, 15241, 15259, 15263, 15269, 15271, 15277,
+    15287, 15289, 15299, 15307, 15313, 15319, 15329, 15331,
+    15349, 15359, 15361, 15373, 15377, 15383, 15391, 15401,
+    15413, 15427, 15439, 15443, 15451, 15461, 15467, 15473,
+    15493, 15497, 15511, 15527, 15541, 15551, 15559, 15569,
+    15581, 15583, 15601, 15607, 15619, 15629, 15641, 15643,
+    15647, 15649, 15661, 15667, 15671, 15679, 15683, 15727,
+    15731, 15733, 15737, 15739, 15749, 15761, 15767, 15773,
+    15787, 15791, 15797, 15803, 15809, 15817, 15823, 15859,
+    15877, 15881, 15887, 15889, 15901, 15907, 15913, 15919,
+    15923, 15937, 15959, 15971, 15973, 15991, 16001, 16007,
+    16033, 16057, 16061, 16063, 16067, 16069, 16073, 16087,
+    16091, 16097, 16103, 16111, 16127, 16139, 16141, 16183,
+    16187, 16189, 16193, 16217, 16223, 16229, 16231, 16249,
+    16253, 16267, 16273, 16301, 16319, 16333, 16339, 16349,
+    16361, 16363, 16369, 16381, 16411, 16417, 16421, 16427,
+    16433, 16447, 16451, 16453, 16477, 16481, 16487, 16493,
+    16519, 16529, 16547, 16553, 16561, 16567, 16573, 16603,
+    16607, 16619, 16631, 16633, 16649, 16651, 16657, 16661,
+    16673, 16691, 16693, 16699, 16703, 16729, 16741, 16747,
+    16759, 16763, 16787, 16811, 16823, 16829, 16831, 16843,
+    16871, 16879, 16883, 16889, 16901, 16903, 16921, 16927,
+    16931, 16937, 16943, 16963, 16979, 16981, 16987, 16993,
+    17011, 17021, 17027, 17029, 17033, 17041, 17047, 17053,
+    17077, 17093, 17099, 17107, 17117, 17123, 17137, 17159,
+    17167, 17183, 17189, 17191, 17203, 17207, 17209, 17231,
+    17239, 17257, 17291, 17293, 17299, 17317, 17321, 17327,
+    17333, 17341, 17351, 17359, 17377, 17383, 17387, 17389,
+    17393, 17401, 17417, 17419, 17431, 17443, 17449, 17467,
+    17471, 17477, 17483, 17489, 17491, 17497, 17509, 17519,
+    17539, 17551, 17569, 17573, 17579, 17581, 17597, 17599,
+    17609, 17623, 17627, 17657, 17659, 17669, 17681, 17683,
+    17707, 17713, 17729, 17737, 17747, 17749, 17761, 17783,
+    17789, 17791, 17807, 17827, 17837, 17839, 17851, 17863,
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_prime.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_prime.pl
new file mode 100644
index 000000000..b0b160874
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_prime.pl
@@ -0,0 +1,48 @@
+#! /usr/bin/env perl
+# Copyright 1998-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# Output year depends on the year of the script.
+my $YEAR = [localtime([stat($0)]->[9])]->[5] + 1900;
+print <<"EOF";
+/*
+ * WARNING: do not edit!
+ * Generated by crypto/bn/bn_prime.pl
+ *
+ * Copyright 1998-$YEAR The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+EOF
+
+
+my $num = shift || 2048;
+my @primes = ( 2 );
+my $p = 1;
+loop: while ($#primes < $num-1) {
+    $p += 2;
+    my $s = int(sqrt($p));
+
+    for (my $i = 0; defined($primes[$i]) && $primes[$i] <= $s; $i++) {
+        next loop if ($p % $primes[$i]) == 0;
+    }
+    push(@primes, $p);
+}
+
+print "typedef unsigned short prime_t;\n";
+printf "# define NUMPRIMES %d\n\n", $num;
+
+printf "static const prime_t primes[%d] = {", $num;
+for (my $i = 0; $i <= $#primes; $i++) {
+    printf "\n   " if ($i % 8) == 0;
+    printf " %5d,", $primes[$i];
+}
+print "\n};\n";
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_print.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_print.c
new file mode 100644
index 000000000..1853269d9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_print.c
@@ -0,0 +1,345 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/ctype.h"
+#include <limits.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include "bn_lcl.h"
+
+static const char Hex[] = "0123456789ABCDEF";
+
+/* Must 'OPENSSL_free' the returned data */
+char *BN_bn2hex(const BIGNUM *a)
+{
+    int i, j, v, z = 0;
+    char *buf;
+    char *p;
+
+    if (BN_is_zero(a))
+        return OPENSSL_strdup("0");
+    buf = OPENSSL_malloc(a->top * BN_BYTES * 2 + 2);
+    if (buf == NULL) {
+        BNerr(BN_F_BN_BN2HEX, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    p = buf;
+    if (a->neg)
+        *p++ = '-';
+    for (i = a->top - 1; i >= 0; i--) {
+        for (j = BN_BITS2 - 8; j >= 0; j -= 8) {
+            /* strip leading zeros */
+            v = (int)((a->d[i] >> j) & 0xff);
+            if (z || v != 0) {
+                *p++ = Hex[v >> 4];
+                *p++ = Hex[v & 0x0f];
+                z = 1;
+            }
+        }
+    }
+    *p = '\0';
+ err:
+    return buf;
+}
+
+/* Must 'OPENSSL_free' the returned data */
+char *BN_bn2dec(const BIGNUM *a)
+{
+    int i = 0, num, ok = 0, n, tbytes;
+    char *buf = NULL;
+    char *p;
+    BIGNUM *t = NULL;
+    BN_ULONG *bn_data = NULL, *lp;
+    int bn_data_num;
+
+    /*-
+     * get an upper bound for the length of the decimal integer
+     * num <= (BN_num_bits(a) + 1) * log(2)
+     *     <= 3 * BN_num_bits(a) * 0.101 + log(2) + 1     (rounding error)
+     *     <= 3 * BN_num_bits(a) / 10 + 3 * BN_num_bits / 1000 + 1 + 1
+     */
+    i = BN_num_bits(a) * 3;
+    num = (i / 10 + i / 1000 + 1) + 1;
+    tbytes = num + 3;   /* negative and terminator and one spare? */
+    bn_data_num = num / BN_DEC_NUM + 1;
+    bn_data = OPENSSL_malloc(bn_data_num * sizeof(BN_ULONG));
+    buf = OPENSSL_malloc(tbytes);
+    if (buf == NULL || bn_data == NULL) {
+        BNerr(BN_F_BN_BN2DEC, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if ((t = BN_dup(a)) == NULL)
+        goto err;
+
+    p = buf;
+    lp = bn_data;
+    if (BN_is_zero(t)) {
+        *p++ = '0';
+        *p++ = '\0';
+    } else {
+        if (BN_is_negative(t))
+            *p++ = '-';
+
+        while (!BN_is_zero(t)) {
+            if (lp - bn_data >= bn_data_num)
+                goto err;
+            *lp = BN_div_word(t, BN_DEC_CONV);
+            if (*lp == (BN_ULONG)-1)
+                goto err;
+            lp++;
+        }
+        lp--;
+        /*
+         * We now have a series of blocks, BN_DEC_NUM chars in length, where
+         * the last one needs truncation. The blocks need to be reversed in
+         * order.
+         */
+        n = BIO_snprintf(p, tbytes - (size_t)(p - buf), BN_DEC_FMT1, *lp);
+        if (n < 0)
+            goto err;
+        p += n;
+        while (lp != bn_data) {
+            lp--;
+            n = BIO_snprintf(p, tbytes - (size_t)(p - buf), BN_DEC_FMT2, *lp);
+            if (n < 0)
+                goto err;
+            p += n;
+        }
+    }
+    ok = 1;
+ err:
+    OPENSSL_free(bn_data);
+    BN_free(t);
+    if (ok)
+        return buf;
+    OPENSSL_free(buf);
+    return NULL;
+}
+
+int BN_hex2bn(BIGNUM **bn, const char *a)
+{
+    BIGNUM *ret = NULL;
+    BN_ULONG l = 0;
+    int neg = 0, h, m, i, j, k, c;
+    int num;
+
+    if (a == NULL || *a == '\0')
+        return 0;
+
+    if (*a == '-') {
+        neg = 1;
+        a++;
+    }
+
+    for (i = 0; i <= INT_MAX / 4 && ossl_isxdigit(a[i]); i++)
+        continue;
+
+    if (i == 0 || i > INT_MAX / 4)
+        goto err;
+
+    num = i + neg;
+    if (bn == NULL)
+        return num;
+
+    /* a is the start of the hex digits, and it is 'i' long */
+    if (*bn == NULL) {
+        if ((ret = BN_new()) == NULL)
+            return 0;
+    } else {
+        ret = *bn;
+        BN_zero(ret);
+    }
+
+    /* i is the number of hex digits */
+    if (bn_expand(ret, i * 4) == NULL)
+        goto err;
+
+    j = i;                      /* least significant 'hex' */
+    m = 0;
+    h = 0;
+    while (j > 0) {
+        m = (BN_BYTES * 2 <= j) ? BN_BYTES * 2 : j;
+        l = 0;
+        for (;;) {
+            c = a[j - m];
+            k = OPENSSL_hexchar2int(c);
+            if (k < 0)
+                k = 0;          /* paranoia */
+            l = (l << 4) | k;
+
+            if (--m <= 0) {
+                ret->d[h++] = l;
+                break;
+            }
+        }
+        j -= BN_BYTES * 2;
+    }
+    ret->top = h;
+    bn_correct_top(ret);
+
+    *bn = ret;
+    bn_check_top(ret);
+    /* Don't set the negative flag if it's zero. */
+    if (ret->top != 0)
+        ret->neg = neg;
+    return num;
+ err:
+    if (*bn == NULL)
+        BN_free(ret);
+    return 0;
+}
+
+int BN_dec2bn(BIGNUM **bn, const char *a)
+{
+    BIGNUM *ret = NULL;
+    BN_ULONG l = 0;
+    int neg = 0, i, j;
+    int num;
+
+    if (a == NULL || *a == '\0')
+        return 0;
+    if (*a == '-') {
+        neg = 1;
+        a++;
+    }
+
+    for (i = 0; i <= INT_MAX / 4 && ossl_isdigit(a[i]); i++)
+        continue;
+
+    if (i == 0 || i > INT_MAX / 4)
+        goto err;
+
+    num = i + neg;
+    if (bn == NULL)
+        return num;
+
+    /*
+     * a is the start of the digits, and it is 'i' long. We chop it into
+     * BN_DEC_NUM digits at a time
+     */
+    if (*bn == NULL) {
+        if ((ret = BN_new()) == NULL)
+            return 0;
+    } else {
+        ret = *bn;
+        BN_zero(ret);
+    }
+
+    /* i is the number of digits, a bit of an over expand */
+    if (bn_expand(ret, i * 4) == NULL)
+        goto err;
+
+    j = BN_DEC_NUM - i % BN_DEC_NUM;
+    if (j == BN_DEC_NUM)
+        j = 0;
+    l = 0;
+    while (--i >= 0) {
+        l *= 10;
+        l += *a - '0';
+        a++;
+        if (++j == BN_DEC_NUM) {
+            if (!BN_mul_word(ret, BN_DEC_CONV)
+                || !BN_add_word(ret, l))
+                goto err;
+            l = 0;
+            j = 0;
+        }
+    }
+
+    bn_correct_top(ret);
+    *bn = ret;
+    bn_check_top(ret);
+    /* Don't set the negative flag if it's zero. */
+    if (ret->top != 0)
+        ret->neg = neg;
+    return num;
+ err:
+    if (*bn == NULL)
+        BN_free(ret);
+    return 0;
+}
+
+int BN_asc2bn(BIGNUM **bn, const char *a)
+{
+    const char *p = a;
+
+    if (*p == '-')
+        p++;
+
+    if (p[0] == '0' && (p[1] == 'X' || p[1] == 'x')) {
+        if (!BN_hex2bn(bn, p + 2))
+            return 0;
+    } else {
+        if (!BN_dec2bn(bn, p))
+            return 0;
+    }
+    /* Don't set the negative flag if it's zero. */
+    if (*a == '-' && (*bn)->top != 0)
+        (*bn)->neg = 1;
+    return 1;
+}
+
+# ifndef OPENSSL_NO_STDIO
+int BN_print_fp(FILE *fp, const BIGNUM *a)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL)
+        return 0;
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = BN_print(b, a);
+    BIO_free(b);
+    return ret;
+}
+# endif
+
+int BN_print(BIO *bp, const BIGNUM *a)
+{
+    int i, j, v, z = 0;
+    int ret = 0;
+
+    if ((a->neg) && BIO_write(bp, "-", 1) != 1)
+        goto end;
+    if (BN_is_zero(a) && BIO_write(bp, "0", 1) != 1)
+        goto end;
+    for (i = a->top - 1; i >= 0; i--) {
+        for (j = BN_BITS2 - 4; j >= 0; j -= 4) {
+            /* strip leading zeros */
+            v = (int)((a->d[i] >> j) & 0x0f);
+            if (z || v != 0) {
+                if (BIO_write(bp, &Hex[v], 1) != 1)
+                    goto end;
+                z = 1;
+            }
+        }
+    }
+    ret = 1;
+ end:
+    return ret;
+}
+
+char *BN_options(void)
+{
+    static int init = 0;
+    static char data[16];
+
+    if (!init) {
+        init++;
+#ifdef BN_LLONG
+        BIO_snprintf(data, sizeof(data), "bn(%zu,%zu)",
+                     sizeof(BN_ULLONG) * 8, sizeof(BN_ULONG) * 8);
+#else
+        BIO_snprintf(data, sizeof(data), "bn(%zu,%zu)",
+                     sizeof(BN_ULONG) * 8, sizeof(BN_ULONG) * 8);
+#endif
+    }
+    return data;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_rand.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_rand.c
new file mode 100644
index 000000000..c0d1a3229
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_rand.c
@@ -0,0 +1,268 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+#include <openssl/rand.h>
+#include <openssl/sha.h>
+
+typedef enum bnrand_flag_e {
+    NORMAL, TESTING, PRIVATE
+} BNRAND_FLAG;
+
+static int bnrand(BNRAND_FLAG flag, BIGNUM *rnd, int bits, int top, int bottom)
+{
+    unsigned char *buf = NULL;
+    int b, ret = 0, bit, bytes, mask;
+
+    if (bits == 0) {
+        if (top != BN_RAND_TOP_ANY || bottom != BN_RAND_BOTTOM_ANY)
+            goto toosmall;
+        BN_zero(rnd);
+        return 1;
+    }
+    if (bits < 0 || (bits == 1 && top > 0))
+        goto toosmall;
+
+    bytes = (bits + 7) / 8;
+    bit = (bits - 1) % 8;
+    mask = 0xff << (bit + 1);
+
+    buf = OPENSSL_malloc(bytes);
+    if (buf == NULL) {
+        BNerr(BN_F_BNRAND, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    /* make a random number and set the top and bottom bits */
+    b = flag == NORMAL ? RAND_bytes(buf, bytes) : RAND_priv_bytes(buf, bytes);
+    if (b <= 0)
+        goto err;
+
+    if (flag == TESTING) {
+        /*
+         * generate patterns that are more likely to trigger BN library bugs
+         */
+        int i;
+        unsigned char c;
+
+        for (i = 0; i < bytes; i++) {
+            if (RAND_bytes(&c, 1) <= 0)
+                goto err;
+            if (c >= 128 && i > 0)
+                buf[i] = buf[i - 1];
+            else if (c < 42)
+                buf[i] = 0;
+            else if (c < 84)
+                buf[i] = 255;
+        }
+    }
+
+    if (top >= 0) {
+        if (top) {
+            if (bit == 0) {
+                buf[0] = 1;
+                buf[1] |= 0x80;
+            } else {
+                buf[0] |= (3 << (bit - 1));
+            }
+        } else {
+            buf[0] |= (1 << bit);
+        }
+    }
+    buf[0] &= ~mask;
+    if (bottom)                 /* set bottom bit if requested */
+        buf[bytes - 1] |= 1;
+    if (!BN_bin2bn(buf, bytes, rnd))
+        goto err;
+    ret = 1;
+ err:
+    OPENSSL_clear_free(buf, bytes);
+    bn_check_top(rnd);
+    return ret;
+
+toosmall:
+    BNerr(BN_F_BNRAND, BN_R_BITS_TOO_SMALL);
+    return 0;
+}
+
+int BN_rand(BIGNUM *rnd, int bits, int top, int bottom)
+{
+    return bnrand(NORMAL, rnd, bits, top, bottom);
+}
+
+int BN_bntest_rand(BIGNUM *rnd, int bits, int top, int bottom)
+{
+    return bnrand(TESTING, rnd, bits, top, bottom);
+}
+
+int BN_priv_rand(BIGNUM *rnd, int bits, int top, int bottom)
+{
+    return bnrand(PRIVATE, rnd, bits, top, bottom);
+}
+
+/* random number r:  0 <= r < range */
+static int bnrand_range(BNRAND_FLAG flag, BIGNUM *r, const BIGNUM *range)
+{
+    int n;
+    int count = 100;
+
+    if (range->neg || BN_is_zero(range)) {
+        BNerr(BN_F_BNRAND_RANGE, BN_R_INVALID_RANGE);
+        return 0;
+    }
+
+    n = BN_num_bits(range);     /* n > 0 */
+
+    /* BN_is_bit_set(range, n - 1) always holds */
+
+    if (n == 1)
+        BN_zero(r);
+    else if (!BN_is_bit_set(range, n - 2) && !BN_is_bit_set(range, n - 3)) {
+        /*
+         * range = 100..._2, so 3*range (= 11..._2) is exactly one bit longer
+         * than range
+         */
+        do {
+            if (!bnrand(flag, r, n + 1, BN_RAND_TOP_ANY, BN_RAND_BOTTOM_ANY))
+                return 0;
+
+            /*
+             * If r < 3*range, use r := r MOD range (which is either r, r -
+             * range, or r - 2*range). Otherwise, iterate once more. Since
+             * 3*range = 11..._2, each iteration succeeds with probability >=
+             * .75.
+             */
+            if (BN_cmp(r, range) >= 0) {
+                if (!BN_sub(r, r, range))
+                    return 0;
+                if (BN_cmp(r, range) >= 0)
+                    if (!BN_sub(r, r, range))
+                        return 0;
+            }
+
+            if (!--count) {
+                BNerr(BN_F_BNRAND_RANGE, BN_R_TOO_MANY_ITERATIONS);
+                return 0;
+            }
+
+        }
+        while (BN_cmp(r, range) >= 0);
+    } else {
+        do {
+            /* range = 11..._2  or  range = 101..._2 */
+            if (!bnrand(flag, r, n, BN_RAND_TOP_ANY, BN_RAND_BOTTOM_ANY))
+                return 0;
+
+            if (!--count) {
+                BNerr(BN_F_BNRAND_RANGE, BN_R_TOO_MANY_ITERATIONS);
+                return 0;
+            }
+        }
+        while (BN_cmp(r, range) >= 0);
+    }
+
+    bn_check_top(r);
+    return 1;
+}
+
+int BN_rand_range(BIGNUM *r, const BIGNUM *range)
+{
+    return bnrand_range(NORMAL, r, range);
+}
+
+int BN_priv_rand_range(BIGNUM *r, const BIGNUM *range)
+{
+    return bnrand_range(PRIVATE, r, range);
+}
+
+int BN_pseudo_rand(BIGNUM *rnd, int bits, int top, int bottom)
+{
+    return BN_rand(rnd, bits, top, bottom);
+}
+
+int BN_pseudo_rand_range(BIGNUM *r, const BIGNUM *range)
+{
+    return BN_rand_range(r, range);
+}
+
+/*
+ * BN_generate_dsa_nonce generates a random number 0 <= out < range. Unlike
+ * BN_rand_range, it also includes the contents of |priv| and |message| in
+ * the generation so that an RNG failure isn't fatal as long as |priv|
+ * remains secret. This is intended for use in DSA and ECDSA where an RNG
+ * weakness leads directly to private key exposure unless this function is
+ * used.
+ */
+int BN_generate_dsa_nonce(BIGNUM *out, const BIGNUM *range,
+                          const BIGNUM *priv, const unsigned char *message,
+                          size_t message_len, BN_CTX *ctx)
+{
+    SHA512_CTX sha;
+    /*
+     * We use 512 bits of random data per iteration to ensure that we have at
+     * least |range| bits of randomness.
+     */
+    unsigned char random_bytes[64];
+    unsigned char digest[SHA512_DIGEST_LENGTH];
+    unsigned done, todo;
+    /* We generate |range|+8 bytes of random output. */
+    const unsigned num_k_bytes = BN_num_bytes(range) + 8;
+    unsigned char private_bytes[96];
+    unsigned char *k_bytes;
+    int ret = 0;
+
+    k_bytes = OPENSSL_malloc(num_k_bytes);
+    if (k_bytes == NULL)
+        goto err;
+
+    /* We copy |priv| into a local buffer to avoid exposing its length. */
+    todo = sizeof(priv->d[0]) * priv->top;
+    if (todo > sizeof(private_bytes)) {
+        /*
+         * No reasonable DSA or ECDSA key should have a private key this
+         * large and we don't handle this case in order to avoid leaking the
+         * length of the private key.
+         */
+        BNerr(BN_F_BN_GENERATE_DSA_NONCE, BN_R_PRIVATE_KEY_TOO_LARGE);
+        goto err;
+    }
+    memcpy(private_bytes, priv->d, todo);
+    memset(private_bytes + todo, 0, sizeof(private_bytes) - todo);
+
+    for (done = 0; done < num_k_bytes;) {
+        if (RAND_priv_bytes(random_bytes, sizeof(random_bytes)) != 1)
+            goto err;
+        SHA512_Init(&sha);
+        SHA512_Update(&sha, &done, sizeof(done));
+        SHA512_Update(&sha, private_bytes, sizeof(private_bytes));
+        SHA512_Update(&sha, message, message_len);
+        SHA512_Update(&sha, random_bytes, sizeof(random_bytes));
+        SHA512_Final(digest, &sha);
+
+        todo = num_k_bytes - done;
+        if (todo > SHA512_DIGEST_LENGTH)
+            todo = SHA512_DIGEST_LENGTH;
+        memcpy(k_bytes + done, digest, todo);
+        done += todo;
+    }
+
+    if (!BN_bin2bn(k_bytes, num_k_bytes, out))
+        goto err;
+    if (BN_mod(out, out, range, ctx) != 1)
+        goto err;
+    ret = 1;
+
+ err:
+    OPENSSL_free(k_bytes);
+    OPENSSL_cleanse(private_bytes, sizeof(private_bytes));
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_recp.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_recp.c
new file mode 100644
index 000000000..9ab767f42
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_recp.c
@@ -0,0 +1,194 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+void BN_RECP_CTX_init(BN_RECP_CTX *recp)
+{
+    memset(recp, 0, sizeof(*recp));
+    bn_init(&(recp->N));
+    bn_init(&(recp->Nr));
+}
+
+BN_RECP_CTX *BN_RECP_CTX_new(void)
+{
+    BN_RECP_CTX *ret;
+
+    if ((ret = OPENSSL_zalloc(sizeof(*ret))) == NULL) {
+        BNerr(BN_F_BN_RECP_CTX_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    bn_init(&(ret->N));
+    bn_init(&(ret->Nr));
+    ret->flags = BN_FLG_MALLOCED;
+    return ret;
+}
+
+void BN_RECP_CTX_free(BN_RECP_CTX *recp)
+{
+    if (recp == NULL)
+        return;
+    BN_free(&recp->N);
+    BN_free(&recp->Nr);
+    if (recp->flags & BN_FLG_MALLOCED)
+        OPENSSL_free(recp);
+}
+
+int BN_RECP_CTX_set(BN_RECP_CTX *recp, const BIGNUM *d, BN_CTX *ctx)
+{
+    if (!BN_copy(&(recp->N), d))
+        return 0;
+    BN_zero(&(recp->Nr));
+    recp->num_bits = BN_num_bits(d);
+    recp->shift = 0;
+    return 1;
+}
+
+int BN_mod_mul_reciprocal(BIGNUM *r, const BIGNUM *x, const BIGNUM *y,
+                          BN_RECP_CTX *recp, BN_CTX *ctx)
+{
+    int ret = 0;
+    BIGNUM *a;
+    const BIGNUM *ca;
+
+    BN_CTX_start(ctx);
+    if ((a = BN_CTX_get(ctx)) == NULL)
+        goto err;
+    if (y != NULL) {
+        if (x == y) {
+            if (!BN_sqr(a, x, ctx))
+                goto err;
+        } else {
+            if (!BN_mul(a, x, y, ctx))
+                goto err;
+        }
+        ca = a;
+    } else
+        ca = x;                 /* Just do the mod */
+
+    ret = BN_div_recp(NULL, r, ca, recp, ctx);
+ err:
+    BN_CTX_end(ctx);
+    bn_check_top(r);
+    return ret;
+}
+
+int BN_div_recp(BIGNUM *dv, BIGNUM *rem, const BIGNUM *m,
+                BN_RECP_CTX *recp, BN_CTX *ctx)
+{
+    int i, j, ret = 0;
+    BIGNUM *a, *b, *d, *r;
+
+    BN_CTX_start(ctx);
+    d = (dv != NULL) ? dv : BN_CTX_get(ctx);
+    r = (rem != NULL) ? rem : BN_CTX_get(ctx);
+    a = BN_CTX_get(ctx);
+    b = BN_CTX_get(ctx);
+    if (b == NULL)
+        goto err;
+
+    if (BN_ucmp(m, &(recp->N)) < 0) {
+        BN_zero(d);
+        if (!BN_copy(r, m)) {
+            BN_CTX_end(ctx);
+            return 0;
+        }
+        BN_CTX_end(ctx);
+        return 1;
+    }
+
+    /*
+     * We want the remainder Given input of ABCDEF / ab we need multiply
+     * ABCDEF by 3 digests of the reciprocal of ab
+     */
+
+    /* i := max(BN_num_bits(m), 2*BN_num_bits(N)) */
+    i = BN_num_bits(m);
+    j = recp->num_bits << 1;
+    if (j > i)
+        i = j;
+
+    /* Nr := round(2^i / N) */
+    if (i != recp->shift)
+        recp->shift = BN_reciprocal(&(recp->Nr), &(recp->N), i, ctx);
+    /* BN_reciprocal could have returned -1 for an error */
+    if (recp->shift == -1)
+        goto err;
+
+    /*-
+     * d := |round(round(m / 2^BN_num_bits(N)) * recp->Nr / 2^(i - BN_num_bits(N)))|
+     *    = |round(round(m / 2^BN_num_bits(N)) * round(2^i / N) / 2^(i - BN_num_bits(N)))|
+     *   <= |(m / 2^BN_num_bits(N)) * (2^i / N) * (2^BN_num_bits(N) / 2^i)|
+     *    = |m/N|
+     */
+    if (!BN_rshift(a, m, recp->num_bits))
+        goto err;
+    if (!BN_mul(b, a, &(recp->Nr), ctx))
+        goto err;
+    if (!BN_rshift(d, b, i - recp->num_bits))
+        goto err;
+    d->neg = 0;
+
+    if (!BN_mul(b, &(recp->N), d, ctx))
+        goto err;
+    if (!BN_usub(r, m, b))
+        goto err;
+    r->neg = 0;
+
+    j = 0;
+    while (BN_ucmp(r, &(recp->N)) >= 0) {
+        if (j++ > 2) {
+            BNerr(BN_F_BN_DIV_RECP, BN_R_BAD_RECIPROCAL);
+            goto err;
+        }
+        if (!BN_usub(r, r, &(recp->N)))
+            goto err;
+        if (!BN_add_word(d, 1))
+            goto err;
+    }
+
+    r->neg = BN_is_zero(r) ? 0 : m->neg;
+    d->neg = m->neg ^ recp->N.neg;
+    ret = 1;
+ err:
+    BN_CTX_end(ctx);
+    bn_check_top(dv);
+    bn_check_top(rem);
+    return ret;
+}
+
+/*
+ * len is the expected size of the result We actually calculate with an extra
+ * word of precision, so we can do faster division if the remainder is not
+ * required.
+ */
+/* r := 2^len / m */
+int BN_reciprocal(BIGNUM *r, const BIGNUM *m, int len, BN_CTX *ctx)
+{
+    int ret = -1;
+    BIGNUM *t;
+
+    BN_CTX_start(ctx);
+    if ((t = BN_CTX_get(ctx)) == NULL)
+        goto err;
+
+    if (!BN_set_bit(t, len))
+        goto err;
+
+    if (!BN_div(r, NULL, t, m, ctx))
+        goto err;
+
+    ret = len;
+ err:
+    bn_check_top(r);
+    BN_CTX_end(ctx);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_shift.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_shift.c
new file mode 100644
index 000000000..b7a1e0ff9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_shift.c
@@ -0,0 +1,257 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <assert.h>
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+int BN_lshift1(BIGNUM *r, const BIGNUM *a)
+{
+    register BN_ULONG *ap, *rp, t, c;
+    int i;
+
+    bn_check_top(r);
+    bn_check_top(a);
+
+    if (r != a) {
+        r->neg = a->neg;
+        if (bn_wexpand(r, a->top + 1) == NULL)
+            return 0;
+        r->top = a->top;
+    } else {
+        if (bn_wexpand(r, a->top + 1) == NULL)
+            return 0;
+    }
+    ap = a->d;
+    rp = r->d;
+    c = 0;
+    for (i = 0; i < a->top; i++) {
+        t = *(ap++);
+        *(rp++) = ((t << 1) | c) & BN_MASK2;
+        c = (t & BN_TBIT) ? 1 : 0;
+    }
+    if (c) {
+        *rp = 1;
+        r->top++;
+    }
+    bn_check_top(r);
+    return 1;
+}
+
+int BN_rshift1(BIGNUM *r, const BIGNUM *a)
+{
+    BN_ULONG *ap, *rp, t, c;
+    int i, j;
+
+    bn_check_top(r);
+    bn_check_top(a);
+
+    if (BN_is_zero(a)) {
+        BN_zero(r);
+        return 1;
+    }
+    i = a->top;
+    ap = a->d;
+    j = i - (ap[i - 1] == 1);
+    if (a != r) {
+        if (bn_wexpand(r, j) == NULL)
+            return 0;
+        r->neg = a->neg;
+    }
+    rp = r->d;
+    t = ap[--i];
+    c = (t & 1) ? BN_TBIT : 0;
+    if (t >>= 1)
+        rp[i] = t;
+    while (i > 0) {
+        t = ap[--i];
+        rp[i] = ((t >> 1) & BN_MASK2) | c;
+        c = (t & 1) ? BN_TBIT : 0;
+    }
+    r->top = j;
+    if (!r->top)
+        r->neg = 0; /* don't allow negative zero */
+    bn_check_top(r);
+    return 1;
+}
+
+int BN_lshift(BIGNUM *r, const BIGNUM *a, int n)
+{
+    int ret;
+
+    if (n < 0) {
+        BNerr(BN_F_BN_LSHIFT, BN_R_INVALID_SHIFT);
+        return 0;
+    }
+
+    ret = bn_lshift_fixed_top(r, a, n);
+
+    bn_correct_top(r);
+    bn_check_top(r);
+
+    return ret;
+}
+
+/*
+ * In respect to shift factor the execution time is invariant of
+ * |n % BN_BITS2|, but not |n / BN_BITS2|. Or in other words pre-condition
+ * for constant-time-ness is |n < BN_BITS2| or |n / BN_BITS2| being
+ * non-secret.
+ */
+int bn_lshift_fixed_top(BIGNUM *r, const BIGNUM *a, int n)
+{
+    int i, nw;
+    unsigned int lb, rb;
+    BN_ULONG *t, *f;
+    BN_ULONG l, m, rmask = 0;
+
+    assert(n >= 0);
+
+    bn_check_top(r);
+    bn_check_top(a);
+
+    nw = n / BN_BITS2;
+    if (bn_wexpand(r, a->top + nw + 1) == NULL)
+        return 0;
+
+    if (a->top != 0) {
+        lb = (unsigned int)n % BN_BITS2;
+        rb = BN_BITS2 - lb;
+        rb %= BN_BITS2;            /* say no to undefined behaviour */
+        rmask = (BN_ULONG)0 - rb;  /* rmask = 0 - (rb != 0) */
+        rmask |= rmask >> 8;
+        f = &(a->d[0]);
+        t = &(r->d[nw]);
+        l = f[a->top - 1];
+        t[a->top] = (l >> rb) & rmask;
+        for (i = a->top - 1; i > 0; i--) {
+            m = l << lb;
+            l = f[i - 1];
+            t[i] = (m | ((l >> rb) & rmask)) & BN_MASK2;
+        }
+        t[0] = (l << lb) & BN_MASK2;
+    } else {
+        /* shouldn't happen, but formally required */
+        r->d[nw] = 0;
+    }
+    if (nw != 0)
+        memset(r->d, 0, sizeof(*t) * nw);
+
+    r->neg = a->neg;
+    r->top = a->top + nw + 1;
+    r->flags |= BN_FLG_FIXED_TOP;
+
+    return 1;
+}
+
+int BN_rshift(BIGNUM *r, const BIGNUM *a, int n)
+{
+    int i, j, nw, lb, rb;
+    BN_ULONG *t, *f;
+    BN_ULONG l, tmp;
+
+    bn_check_top(r);
+    bn_check_top(a);
+
+    if (n < 0) {
+        BNerr(BN_F_BN_RSHIFT, BN_R_INVALID_SHIFT);
+        return 0;
+    }
+
+    nw = n / BN_BITS2;
+    rb = n % BN_BITS2;
+    lb = BN_BITS2 - rb;
+    if (nw >= a->top || a->top == 0) {
+        BN_zero(r);
+        return 1;
+    }
+    i = (BN_num_bits(a) - n + (BN_BITS2 - 1)) / BN_BITS2;
+    if (r != a) {
+        if (bn_wexpand(r, i) == NULL)
+            return 0;
+        r->neg = a->neg;
+    } else {
+        if (n == 0)
+            return 1;           /* or the copying loop will go berserk */
+    }
+
+    f = &(a->d[nw]);
+    t = r->d;
+    j = a->top - nw;
+    r->top = i;
+
+    if (rb == 0) {
+        for (i = j; i != 0; i--)
+            *(t++) = *(f++);
+    } else {
+        l = *(f++);
+        for (i = j - 1; i != 0; i--) {
+            tmp = (l >> rb) & BN_MASK2;
+            l = *(f++);
+            *(t++) = (tmp | (l << lb)) & BN_MASK2;
+        }
+        if ((l = (l >> rb) & BN_MASK2))
+            *(t) = l;
+    }
+    if (!r->top)
+        r->neg = 0; /* don't allow negative zero */
+    bn_check_top(r);
+    return 1;
+}
+
+/*
+ * In respect to shift factor the execution time is invariant of
+ * |n % BN_BITS2|, but not |n / BN_BITS2|. Or in other words pre-condition
+ * for constant-time-ness for sufficiently[!] zero-padded inputs is
+ * |n < BN_BITS2| or |n / BN_BITS2| being non-secret.
+ */
+int bn_rshift_fixed_top(BIGNUM *r, const BIGNUM *a, int n)
+{
+    int i, top, nw;
+    unsigned int lb, rb;
+    BN_ULONG *t, *f;
+    BN_ULONG l, m, mask;
+
+    bn_check_top(r);
+    bn_check_top(a);
+
+    assert(n >= 0);
+
+    nw = n / BN_BITS2;
+    if (nw >= a->top) {
+        /* shouldn't happen, but formally required */
+        BN_zero(r);
+        return 1;
+    }
+
+    rb = (unsigned int)n % BN_BITS2;
+    lb = BN_BITS2 - rb;
+    lb %= BN_BITS2;            /* say no to undefined behaviour */
+    mask = (BN_ULONG)0 - lb;   /* mask = 0 - (lb != 0) */
+    mask |= mask >> 8;
+    top = a->top - nw;
+    if (r != a && bn_wexpand(r, top) == NULL)
+        return 0;
+
+    t = &(r->d[0]);
+    f = &(a->d[nw]);
+    l = f[0];
+    for (i = 0; i < top - 1; i++) {
+        m = f[i + 1];
+        t[i] = (l >> rb) | ((m << lb) & mask);
+        l = m;
+    }
+    t[i] = l >> rb;
+
+    r->neg = a->neg;
+    r->top = top;
+    r->flags |= BN_FLG_FIXED_TOP;
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_sqr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_sqr.c
new file mode 100644
index 000000000..0c0a590f0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_sqr.c
@@ -0,0 +1,239 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+/* r must not be a */
+/*
+ * I've just gone over this and it is now %20 faster on x86 - eay - 27 Jun 96
+ */
+int BN_sqr(BIGNUM *r, const BIGNUM *a, BN_CTX *ctx)
+{
+    int ret = bn_sqr_fixed_top(r, a, ctx);
+
+    bn_correct_top(r);
+    bn_check_top(r);
+
+    return ret;
+}
+
+int bn_sqr_fixed_top(BIGNUM *r, const BIGNUM *a, BN_CTX *ctx)
+{
+    int max, al;
+    int ret = 0;
+    BIGNUM *tmp, *rr;
+
+    bn_check_top(a);
+
+    al = a->top;
+    if (al <= 0) {
+        r->top = 0;
+        r->neg = 0;
+        return 1;
+    }
+
+    BN_CTX_start(ctx);
+    rr = (a != r) ? r : BN_CTX_get(ctx);
+    tmp = BN_CTX_get(ctx);
+    if (rr == NULL || tmp == NULL)
+        goto err;
+
+    max = 2 * al;               /* Non-zero (from above) */
+    if (bn_wexpand(rr, max) == NULL)
+        goto err;
+
+    if (al == 4) {
+#ifndef BN_SQR_COMBA
+        BN_ULONG t[8];
+        bn_sqr_normal(rr->d, a->d, 4, t);
+#else
+        bn_sqr_comba4(rr->d, a->d);
+#endif
+    } else if (al == 8) {
+#ifndef BN_SQR_COMBA
+        BN_ULONG t[16];
+        bn_sqr_normal(rr->d, a->d, 8, t);
+#else
+        bn_sqr_comba8(rr->d, a->d);
+#endif
+    } else {
+#if defined(BN_RECURSION)
+        if (al < BN_SQR_RECURSIVE_SIZE_NORMAL) {
+            BN_ULONG t[BN_SQR_RECURSIVE_SIZE_NORMAL * 2];
+            bn_sqr_normal(rr->d, a->d, al, t);
+        } else {
+            int j, k;
+
+            j = BN_num_bits_word((BN_ULONG)al);
+            j = 1 << (j - 1);
+            k = j + j;
+            if (al == j) {
+                if (bn_wexpand(tmp, k * 2) == NULL)
+                    goto err;
+                bn_sqr_recursive(rr->d, a->d, al, tmp->d);
+            } else {
+                if (bn_wexpand(tmp, max) == NULL)
+                    goto err;
+                bn_sqr_normal(rr->d, a->d, al, tmp->d);
+            }
+        }
+#else
+        if (bn_wexpand(tmp, max) == NULL)
+            goto err;
+        bn_sqr_normal(rr->d, a->d, al, tmp->d);
+#endif
+    }
+
+    rr->neg = 0;
+    rr->top = max;
+    rr->flags |= BN_FLG_FIXED_TOP;
+    if (r != rr && BN_copy(r, rr) == NULL)
+        goto err;
+
+    ret = 1;
+ err:
+    bn_check_top(rr);
+    bn_check_top(tmp);
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+/* tmp must have 2*n words */
+void bn_sqr_normal(BN_ULONG *r, const BN_ULONG *a, int n, BN_ULONG *tmp)
+{
+    int i, j, max;
+    const BN_ULONG *ap;
+    BN_ULONG *rp;
+
+    max = n * 2;
+    ap = a;
+    rp = r;
+    rp[0] = rp[max - 1] = 0;
+    rp++;
+    j = n;
+
+    if (--j > 0) {
+        ap++;
+        rp[j] = bn_mul_words(rp, ap, j, ap[-1]);
+        rp += 2;
+    }
+
+    for (i = n - 2; i > 0; i--) {
+        j--;
+        ap++;
+        rp[j] = bn_mul_add_words(rp, ap, j, ap[-1]);
+        rp += 2;
+    }
+
+    bn_add_words(r, r, r, max);
+
+    /* There will not be a carry */
+
+    bn_sqr_words(tmp, a, n);
+
+    bn_add_words(r, r, tmp, max);
+}
+
+#ifdef BN_RECURSION
+/*-
+ * r is 2*n words in size,
+ * a and b are both n words in size.    (There's not actually a 'b' here ...)
+ * n must be a power of 2.
+ * We multiply and return the result.
+ * t must be 2*n words in size
+ * We calculate
+ * a[0]*b[0]
+ * a[0]*b[0]+a[1]*b[1]+(a[0]-a[1])*(b[1]-b[0])
+ * a[1]*b[1]
+ */
+void bn_sqr_recursive(BN_ULONG *r, const BN_ULONG *a, int n2, BN_ULONG *t)
+{
+    int n = n2 / 2;
+    int zero, c1;
+    BN_ULONG ln, lo, *p;
+
+    if (n2 == 4) {
+# ifndef BN_SQR_COMBA
+        bn_sqr_normal(r, a, 4, t);
+# else
+        bn_sqr_comba4(r, a);
+# endif
+        return;
+    } else if (n2 == 8) {
+# ifndef BN_SQR_COMBA
+        bn_sqr_normal(r, a, 8, t);
+# else
+        bn_sqr_comba8(r, a);
+# endif
+        return;
+    }
+    if (n2 < BN_SQR_RECURSIVE_SIZE_NORMAL) {
+        bn_sqr_normal(r, a, n2, t);
+        return;
+    }
+    /* r=(a[0]-a[1])*(a[1]-a[0]) */
+    c1 = bn_cmp_words(a, &(a[n]), n);
+    zero = 0;
+    if (c1 > 0)
+        bn_sub_words(t, a, &(a[n]), n);
+    else if (c1 < 0)
+        bn_sub_words(t, &(a[n]), a, n);
+    else
+        zero = 1;
+
+    /* The result will always be negative unless it is zero */
+    p = &(t[n2 * 2]);
+
+    if (!zero)
+        bn_sqr_recursive(&(t[n2]), t, n, p);
+    else
+        memset(&t[n2], 0, sizeof(*t) * n2);
+    bn_sqr_recursive(r, a, n, p);
+    bn_sqr_recursive(&(r[n2]), &(a[n]), n, p);
+
+    /*-
+     * t[32] holds (a[0]-a[1])*(a[1]-a[0]), it is negative or zero
+     * r[10] holds (a[0]*b[0])
+     * r[32] holds (b[1]*b[1])
+     */
+
+    c1 = (int)(bn_add_words(t, r, &(r[n2]), n2));
+
+    /* t[32] is negative */
+    c1 -= (int)(bn_sub_words(&(t[n2]), t, &(t[n2]), n2));
+
+    /*-
+     * t[32] holds (a[0]-a[1])*(a[1]-a[0])+(a[0]*a[0])+(a[1]*a[1])
+     * r[10] holds (a[0]*a[0])
+     * r[32] holds (a[1]*a[1])
+     * c1 holds the carry bits
+     */
+    c1 += (int)(bn_add_words(&(r[n]), &(r[n]), &(t[n2]), n2));
+    if (c1) {
+        p = &(r[n + n2]);
+        lo = *p;
+        ln = (lo + c1) & BN_MASK2;
+        *p = ln;
+
+        /*
+         * The overflow will stop before we over write words we should not
+         * overwrite
+         */
+        if (ln < (BN_ULONG)c1) {
+            do {
+                p++;
+                lo = *p;
+                ln = (lo + 1) & BN_MASK2;
+                *p = ln;
+            } while (ln == 0);
+        }
+    }
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_sqrt.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_sqrt.c
new file mode 100644
index 000000000..b97d8ca43
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_sqrt.c
@@ -0,0 +1,358 @@
+/*
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+BIGNUM *BN_mod_sqrt(BIGNUM *in, const BIGNUM *a, const BIGNUM *p, BN_CTX *ctx)
+/*
+ * Returns 'ret' such that ret^2 == a (mod p), using the Tonelli/Shanks
+ * algorithm (cf. Henri Cohen, "A Course in Algebraic Computational Number
+ * Theory", algorithm 1.5.1). 'p' must be prime!
+ */
+{
+    BIGNUM *ret = in;
+    int err = 1;
+    int r;
+    BIGNUM *A, *b, *q, *t, *x, *y;
+    int e, i, j;
+
+    if (!BN_is_odd(p) || BN_abs_is_word(p, 1)) {
+        if (BN_abs_is_word(p, 2)) {
+            if (ret == NULL)
+                ret = BN_new();
+            if (ret == NULL)
+                goto end;
+            if (!BN_set_word(ret, BN_is_bit_set(a, 0))) {
+                if (ret != in)
+                    BN_free(ret);
+                return NULL;
+            }
+            bn_check_top(ret);
+            return ret;
+        }
+
+        BNerr(BN_F_BN_MOD_SQRT, BN_R_P_IS_NOT_PRIME);
+        return NULL;
+    }
+
+    if (BN_is_zero(a) || BN_is_one(a)) {
+        if (ret == NULL)
+            ret = BN_new();
+        if (ret == NULL)
+            goto end;
+        if (!BN_set_word(ret, BN_is_one(a))) {
+            if (ret != in)
+                BN_free(ret);
+            return NULL;
+        }
+        bn_check_top(ret);
+        return ret;
+    }
+
+    BN_CTX_start(ctx);
+    A = BN_CTX_get(ctx);
+    b = BN_CTX_get(ctx);
+    q = BN_CTX_get(ctx);
+    t = BN_CTX_get(ctx);
+    x = BN_CTX_get(ctx);
+    y = BN_CTX_get(ctx);
+    if (y == NULL)
+        goto end;
+
+    if (ret == NULL)
+        ret = BN_new();
+    if (ret == NULL)
+        goto end;
+
+    /* A = a mod p */
+    if (!BN_nnmod(A, a, p, ctx))
+        goto end;
+
+    /* now write  |p| - 1  as  2^e*q  where  q  is odd */
+    e = 1;
+    while (!BN_is_bit_set(p, e))
+        e++;
+    /* we'll set  q  later (if needed) */
+
+    if (e == 1) {
+        /*-
+         * The easy case:  (|p|-1)/2  is odd, so 2 has an inverse
+         * modulo  (|p|-1)/2,  and square roots can be computed
+         * directly by modular exponentiation.
+         * We have
+         *     2 * (|p|+1)/4 == 1   (mod (|p|-1)/2),
+         * so we can use exponent  (|p|+1)/4,  i.e.  (|p|-3)/4 + 1.
+         */
+        if (!BN_rshift(q, p, 2))
+            goto end;
+        q->neg = 0;
+        if (!BN_add_word(q, 1))
+            goto end;
+        if (!BN_mod_exp(ret, A, q, p, ctx))
+            goto end;
+        err = 0;
+        goto vrfy;
+    }
+
+    if (e == 2) {
+        /*-
+         * |p| == 5  (mod 8)
+         *
+         * In this case  2  is always a non-square since
+         * Legendre(2,p) = (-1)^((p^2-1)/8)  for any odd prime.
+         * So if  a  really is a square, then  2*a  is a non-square.
+         * Thus for
+         *      b := (2*a)^((|p|-5)/8),
+         *      i := (2*a)*b^2
+         * we have
+         *     i^2 = (2*a)^((1 + (|p|-5)/4)*2)
+         *         = (2*a)^((p-1)/2)
+         *         = -1;
+         * so if we set
+         *      x := a*b*(i-1),
+         * then
+         *     x^2 = a^2 * b^2 * (i^2 - 2*i + 1)
+         *         = a^2 * b^2 * (-2*i)
+         *         = a*(-i)*(2*a*b^2)
+         *         = a*(-i)*i
+         *         = a.
+         *
+         * (This is due to A.O.L. Atkin,
+         * <URL: http://listserv.nodak.edu/scripts/wa.exe?A2=ind9211&L=nmbrthry&O=T&P=562>,
+         * November 1992.)
+         */
+
+        /* t := 2*a */
+        if (!BN_mod_lshift1_quick(t, A, p))
+            goto end;
+
+        /* b := (2*a)^((|p|-5)/8) */
+        if (!BN_rshift(q, p, 3))
+            goto end;
+        q->neg = 0;
+        if (!BN_mod_exp(b, t, q, p, ctx))
+            goto end;
+
+        /* y := b^2 */
+        if (!BN_mod_sqr(y, b, p, ctx))
+            goto end;
+
+        /* t := (2*a)*b^2 - 1 */
+        if (!BN_mod_mul(t, t, y, p, ctx))
+            goto end;
+        if (!BN_sub_word(t, 1))
+            goto end;
+
+        /* x = a*b*t */
+        if (!BN_mod_mul(x, A, b, p, ctx))
+            goto end;
+        if (!BN_mod_mul(x, x, t, p, ctx))
+            goto end;
+
+        if (!BN_copy(ret, x))
+            goto end;
+        err = 0;
+        goto vrfy;
+    }
+
+    /*
+     * e > 2, so we really have to use the Tonelli/Shanks algorithm. First,
+     * find some y that is not a square.
+     */
+    if (!BN_copy(q, p))
+        goto end;               /* use 'q' as temp */
+    q->neg = 0;
+    i = 2;
+    do {
+        /*
+         * For efficiency, try small numbers first; if this fails, try random
+         * numbers.
+         */
+        if (i < 22) {
+            if (!BN_set_word(y, i))
+                goto end;
+        } else {
+            if (!BN_priv_rand(y, BN_num_bits(p), 0, 0))
+                goto end;
+            if (BN_ucmp(y, p) >= 0) {
+                if (!(p->neg ? BN_add : BN_sub) (y, y, p))
+                    goto end;
+            }
+            /* now 0 <= y < |p| */
+            if (BN_is_zero(y))
+                if (!BN_set_word(y, i))
+                    goto end;
+        }
+
+        r = BN_kronecker(y, q, ctx); /* here 'q' is |p| */
+        if (r < -1)
+            goto end;
+        if (r == 0) {
+            /* m divides p */
+            BNerr(BN_F_BN_MOD_SQRT, BN_R_P_IS_NOT_PRIME);
+            goto end;
+        }
+    }
+    while (r == 1 && ++i < 82);
+
+    if (r != -1) {
+        /*
+         * Many rounds and still no non-square -- this is more likely a bug
+         * than just bad luck. Even if p is not prime, we should have found
+         * some y such that r == -1.
+         */
+        BNerr(BN_F_BN_MOD_SQRT, BN_R_TOO_MANY_ITERATIONS);
+        goto end;
+    }
+
+    /* Here's our actual 'q': */
+    if (!BN_rshift(q, q, e))
+        goto end;
+
+    /*
+     * Now that we have some non-square, we can find an element of order 2^e
+     * by computing its q'th power.
+     */
+    if (!BN_mod_exp(y, y, q, p, ctx))
+        goto end;
+    if (BN_is_one(y)) {
+        BNerr(BN_F_BN_MOD_SQRT, BN_R_P_IS_NOT_PRIME);
+        goto end;
+    }
+
+    /*-
+     * Now we know that (if  p  is indeed prime) there is an integer
+     * k,  0 <= k < 2^e,  such that
+     *
+     *      a^q * y^k == 1   (mod p).
+     *
+     * As  a^q  is a square and  y  is not,  k  must be even.
+     * q+1  is even, too, so there is an element
+     *
+     *     X := a^((q+1)/2) * y^(k/2),
+     *
+     * and it satisfies
+     *
+     *     X^2 = a^q * a     * y^k
+     *         = a,
+     *
+     * so it is the square root that we are looking for.
+     */
+
+    /* t := (q-1)/2  (note that  q  is odd) */
+    if (!BN_rshift1(t, q))
+        goto end;
+
+    /* x := a^((q-1)/2) */
+    if (BN_is_zero(t)) {        /* special case: p = 2^e + 1 */
+        if (!BN_nnmod(t, A, p, ctx))
+            goto end;
+        if (BN_is_zero(t)) {
+            /* special case: a == 0  (mod p) */
+            BN_zero(ret);
+            err = 0;
+            goto end;
+        } else if (!BN_one(x))
+            goto end;
+    } else {
+        if (!BN_mod_exp(x, A, t, p, ctx))
+            goto end;
+        if (BN_is_zero(x)) {
+            /* special case: a == 0  (mod p) */
+            BN_zero(ret);
+            err = 0;
+            goto end;
+        }
+    }
+
+    /* b := a*x^2  (= a^q) */
+    if (!BN_mod_sqr(b, x, p, ctx))
+        goto end;
+    if (!BN_mod_mul(b, b, A, p, ctx))
+        goto end;
+
+    /* x := a*x    (= a^((q+1)/2)) */
+    if (!BN_mod_mul(x, x, A, p, ctx))
+        goto end;
+
+    while (1) {
+        /*-
+         * Now  b  is  a^q * y^k  for some even  k  (0 <= k < 2^E
+         * where  E  refers to the original value of  e,  which we
+         * don't keep in a variable),  and  x  is  a^((q+1)/2) * y^(k/2).
+         *
+         * We have  a*b = x^2,
+         *    y^2^(e-1) = -1,
+         *    b^2^(e-1) = 1.
+         */
+
+        if (BN_is_one(b)) {
+            if (!BN_copy(ret, x))
+                goto end;
+            err = 0;
+            goto vrfy;
+        }
+
+        /* find smallest  i  such that  b^(2^i) = 1 */
+        i = 1;
+        if (!BN_mod_sqr(t, b, p, ctx))
+            goto end;
+        while (!BN_is_one(t)) {
+            i++;
+            if (i == e) {
+                BNerr(BN_F_BN_MOD_SQRT, BN_R_NOT_A_SQUARE);
+                goto end;
+            }
+            if (!BN_mod_mul(t, t, t, p, ctx))
+                goto end;
+        }
+
+        /* t := y^2^(e - i - 1) */
+        if (!BN_copy(t, y))
+            goto end;
+        for (j = e - i - 1; j > 0; j--) {
+            if (!BN_mod_sqr(t, t, p, ctx))
+                goto end;
+        }
+        if (!BN_mod_mul(y, t, t, p, ctx))
+            goto end;
+        if (!BN_mod_mul(x, x, t, p, ctx))
+            goto end;
+        if (!BN_mod_mul(b, b, y, p, ctx))
+            goto end;
+        e = i;
+    }
+
+ vrfy:
+    if (!err) {
+        /*
+         * verify the result -- the input might have been not a square (test
+         * added in 0.9.8)
+         */
+
+        if (!BN_mod_sqr(x, ret, p, ctx))
+            err = 1;
+
+        if (!err && 0 != BN_cmp(x, A)) {
+            BNerr(BN_F_BN_MOD_SQRT, BN_R_NOT_A_SQUARE);
+            err = 1;
+        }
+    }
+
+ end:
+    if (err) {
+        if (ret != in)
+            BN_clear_free(ret);
+        ret = NULL;
+    }
+    BN_CTX_end(ctx);
+    bn_check_top(ret);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_srp.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_srp.c
new file mode 100644
index 000000000..27b6ebe51
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_srp.c
@@ -0,0 +1,545 @@
+/*
+ * Copyright 2014-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "bn_lcl.h"
+#include "internal/nelem.h"
+
+#ifndef OPENSSL_NO_SRP
+
+#include <openssl/srp.h>
+#include "internal/bn_srp.h"
+
+# if (BN_BYTES == 8)
+#  if (defined(_WIN32) || defined(_WIN64)) && !defined(__MINGW32__)
+#   define bn_pack4(a1,a2,a3,a4) ((a1##UI64<<48)|(a2##UI64<<32)|(a3##UI64<<16)|a4##UI64)
+#  elif defined(__arch64__)
+#   define bn_pack4(a1,a2,a3,a4) ((a1##UL<<48)|(a2##UL<<32)|(a3##UL<<16)|a4##UL)
+#  else
+#   define bn_pack4(a1,a2,a3,a4) ((a1##ULL<<48)|(a2##ULL<<32)|(a3##ULL<<16)|a4##ULL)
+#  endif
+# elif (BN_BYTES == 4)
+#  define bn_pack4(a1,a2,a3,a4)  ((a3##UL<<16)|a4##UL), ((a1##UL<<16)|a2##UL)
+# else
+#  error "unsupported BN_BYTES"
+# endif
+
+static const BN_ULONG bn_group_1024_value[] = {
+    bn_pack4(0x9FC6, 0x1D2F, 0xC0EB, 0x06E3),
+    bn_pack4(0xFD51, 0x38FE, 0x8376, 0x435B),
+    bn_pack4(0x2FD4, 0xCBF4, 0x976E, 0xAA9A),
+    bn_pack4(0x68ED, 0xBC3C, 0x0572, 0x6CC0),
+    bn_pack4(0xC529, 0xF566, 0x660E, 0x57EC),
+    bn_pack4(0x8255, 0x9B29, 0x7BCF, 0x1885),
+    bn_pack4(0xCE8E, 0xF4AD, 0x69B1, 0x5D49),
+    bn_pack4(0x5DC7, 0xD7B4, 0x6154, 0xD6B6),
+    bn_pack4(0x8E49, 0x5C1D, 0x6089, 0xDAD1),
+    bn_pack4(0xE0D5, 0xD8E2, 0x50B9, 0x8BE4),
+    bn_pack4(0x383B, 0x4813, 0xD692, 0xC6E0),
+    bn_pack4(0xD674, 0xDF74, 0x96EA, 0x81D3),
+    bn_pack4(0x9EA2, 0x314C, 0x9C25, 0x6576),
+    bn_pack4(0x6072, 0x6187, 0x75FF, 0x3C0B),
+    bn_pack4(0x9C33, 0xF80A, 0xFA8F, 0xC5E8),
+    bn_pack4(0xEEAF, 0x0AB9, 0xADB3, 0x8DD6)
+};
+
+const BIGNUM bn_group_1024 = {
+    (BN_ULONG *)bn_group_1024_value,
+    OSSL_NELEM(bn_group_1024_value),
+    OSSL_NELEM(bn_group_1024_value),
+    0,
+    BN_FLG_STATIC_DATA
+};
+
+static const BN_ULONG bn_group_1536_value[] = {
+    bn_pack4(0xCF76, 0xE3FE, 0xD135, 0xF9BB),
+    bn_pack4(0x1518, 0x0F93, 0x499A, 0x234D),
+    bn_pack4(0x8CE7, 0xA28C, 0x2442, 0xC6F3),
+    bn_pack4(0x5A02, 0x1FFF, 0x5E91, 0x479E),
+    bn_pack4(0x7F8A, 0x2FE9, 0xB8B5, 0x292E),
+    bn_pack4(0x837C, 0x264A, 0xE3A9, 0xBEB8),
+    bn_pack4(0xE442, 0x734A, 0xF7CC, 0xB7AE),
+    bn_pack4(0x6577, 0x2E43, 0x7D6C, 0x7F8C),
+    bn_pack4(0xDB2F, 0xD53D, 0x24B7, 0xC486),
+    bn_pack4(0x6EDF, 0x0195, 0x3934, 0x9627),
+    bn_pack4(0x158B, 0xFD3E, 0x2B9C, 0x8CF5),
+    bn_pack4(0x764E, 0x3F4B, 0x53DD, 0x9DA1),
+    bn_pack4(0x4754, 0x8381, 0xDBC5, 0xB1FC),
+    bn_pack4(0x9B60, 0x9E0B, 0xE3BA, 0xB63D),
+    bn_pack4(0x8134, 0xB1C8, 0xB979, 0x8914),
+    bn_pack4(0xDF02, 0x8A7C, 0xEC67, 0xF0D0),
+    bn_pack4(0x80B6, 0x55BB, 0x9A22, 0xE8DC),
+    bn_pack4(0x1558, 0x903B, 0xA0D0, 0xF843),
+    bn_pack4(0x51C6, 0xA94B, 0xE460, 0x7A29),
+    bn_pack4(0x5F4F, 0x5F55, 0x6E27, 0xCBDE),
+    bn_pack4(0xBEEE, 0xA961, 0x4B19, 0xCC4D),
+    bn_pack4(0xDBA5, 0x1DF4, 0x99AC, 0x4C80),
+    bn_pack4(0xB1F1, 0x2A86, 0x17A4, 0x7BBB),
+    bn_pack4(0x9DEF, 0x3CAF, 0xB939, 0x277A)
+};
+
+const BIGNUM bn_group_1536 = {
+    (BN_ULONG *)bn_group_1536_value,
+    OSSL_NELEM(bn_group_1536_value),
+    OSSL_NELEM(bn_group_1536_value),
+    0,
+    BN_FLG_STATIC_DATA
+};
+
+static const BN_ULONG bn_group_2048_value[] = {
+    bn_pack4(0x0FA7, 0x111F, 0x9E4A, 0xFF73),
+    bn_pack4(0x9B65, 0xE372, 0xFCD6, 0x8EF2),
+    bn_pack4(0x35DE, 0x236D, 0x525F, 0x5475),
+    bn_pack4(0x94B5, 0xC803, 0xD89F, 0x7AE4),
+    bn_pack4(0x71AE, 0x35F8, 0xE9DB, 0xFBB6),
+    bn_pack4(0x2A56, 0x98F3, 0xA8D0, 0xC382),
+    bn_pack4(0x9CCC, 0x041C, 0x7BC3, 0x08D8),
+    bn_pack4(0xAF87, 0x4E73, 0x03CE, 0x5329),
+    bn_pack4(0x6160, 0x2790, 0x04E5, 0x7AE6),
+    bn_pack4(0x032C, 0xFBDB, 0xF52F, 0xB378),
+    bn_pack4(0x5EA7, 0x7A27, 0x75D2, 0xECFA),
+    bn_pack4(0x5445, 0x23B5, 0x24B0, 0xD57D),
+    bn_pack4(0x5B9D, 0x32E6, 0x88F8, 0x7748),
+    bn_pack4(0xF1D2, 0xB907, 0x8717, 0x461A),
+    bn_pack4(0x76BD, 0x207A, 0x436C, 0x6481),
+    bn_pack4(0xCA97, 0xB43A, 0x23FB, 0x8016),
+    bn_pack4(0x1D28, 0x1E44, 0x6B14, 0x773B),
+    bn_pack4(0x7359, 0xD041, 0xD5C3, 0x3EA7),
+    bn_pack4(0xA80D, 0x740A, 0xDBF4, 0xFF74),
+    bn_pack4(0x55F9, 0x7993, 0xEC97, 0x5EEA),
+    bn_pack4(0x2918, 0xA996, 0x2F0B, 0x93B8),
+    bn_pack4(0x661A, 0x05FB, 0xD5FA, 0xAAE8),
+    bn_pack4(0xCF60, 0x9517, 0x9A16, 0x3AB3),
+    bn_pack4(0xE808, 0x3969, 0xEDB7, 0x67B0),
+    bn_pack4(0xCD7F, 0x48A9, 0xDA04, 0xFD50),
+    bn_pack4(0xD523, 0x12AB, 0x4B03, 0x310D),
+    bn_pack4(0x8193, 0xE075, 0x7767, 0xA13D),
+    bn_pack4(0xA373, 0x29CB, 0xB4A0, 0x99ED),
+    bn_pack4(0xFC31, 0x9294, 0x3DB5, 0x6050),
+    bn_pack4(0xAF72, 0xB665, 0x1987, 0xEE07),
+    bn_pack4(0xF166, 0xDE5E, 0x1389, 0x582F),
+    bn_pack4(0xAC6B, 0xDB41, 0x324A, 0x9A9B)
+};
+
+const BIGNUM bn_group_2048 = {
+    (BN_ULONG *)bn_group_2048_value,
+    OSSL_NELEM(bn_group_2048_value),
+    OSSL_NELEM(bn_group_2048_value),
+    0,
+    BN_FLG_STATIC_DATA
+};
+
+static const BN_ULONG bn_group_3072_value[] = {
+    bn_pack4(0xFFFF, 0xFFFF, 0xFFFF, 0xFFFF),
+    bn_pack4(0x4B82, 0xD120, 0xA93A, 0xD2CA),
+    bn_pack4(0x43DB, 0x5BFC, 0xE0FD, 0x108E),
+    bn_pack4(0x08E2, 0x4FA0, 0x74E5, 0xAB31),
+    bn_pack4(0x7709, 0x88C0, 0xBAD9, 0x46E2),
+    bn_pack4(0xBBE1, 0x1757, 0x7A61, 0x5D6C),
+    bn_pack4(0x521F, 0x2B18, 0x177B, 0x200C),
+    bn_pack4(0xD876, 0x0273, 0x3EC8, 0x6A64),
+    bn_pack4(0xF12F, 0xFA06, 0xD98A, 0x0864),
+    bn_pack4(0xCEE3, 0xD226, 0x1AD2, 0xEE6B),
+    bn_pack4(0x1E8C, 0x94E0, 0x4A25, 0x619D),
+    bn_pack4(0xABF5, 0xAE8C, 0xDB09, 0x33D7),
+    bn_pack4(0xB397, 0x0F85, 0xA6E1, 0xE4C7),
+    bn_pack4(0x8AEA, 0x7157, 0x5D06, 0x0C7D),
+    bn_pack4(0xECFB, 0x8504, 0x58DB, 0xEF0A),
+    bn_pack4(0xA855, 0x21AB, 0xDF1C, 0xBA64),
+    bn_pack4(0xAD33, 0x170D, 0x0450, 0x7A33),
+    bn_pack4(0x1572, 0x8E5A, 0x8AAA, 0xC42D),
+    bn_pack4(0x15D2, 0x2618, 0x98FA, 0x0510),
+    bn_pack4(0x3995, 0x497C, 0xEA95, 0x6AE5),
+    bn_pack4(0xDE2B, 0xCBF6, 0x9558, 0x1718),
+    bn_pack4(0xB5C5, 0x5DF0, 0x6F4C, 0x52C9),
+    bn_pack4(0x9B27, 0x83A2, 0xEC07, 0xA28F),
+    bn_pack4(0xE39E, 0x772C, 0x180E, 0x8603),
+    bn_pack4(0x3290, 0x5E46, 0x2E36, 0xCE3B),
+    bn_pack4(0xF174, 0x6C08, 0xCA18, 0x217C),
+    bn_pack4(0x670C, 0x354E, 0x4ABC, 0x9804),
+    bn_pack4(0x9ED5, 0x2907, 0x7096, 0x966D),
+    bn_pack4(0x1C62, 0xF356, 0x2085, 0x52BB),
+    bn_pack4(0x8365, 0x5D23, 0xDCA3, 0xAD96),
+    bn_pack4(0x6916, 0x3FA8, 0xFD24, 0xCF5F),
+    bn_pack4(0x98DA, 0x4836, 0x1C55, 0xD39A),
+    bn_pack4(0xC200, 0x7CB8, 0xA163, 0xBF05),
+    bn_pack4(0x4928, 0x6651, 0xECE4, 0x5B3D),
+    bn_pack4(0xAE9F, 0x2411, 0x7C4B, 0x1FE6),
+    bn_pack4(0xEE38, 0x6BFB, 0x5A89, 0x9FA5),
+    bn_pack4(0x0BFF, 0x5CB6, 0xF406, 0xB7ED),
+    bn_pack4(0xF44C, 0x42E9, 0xA637, 0xED6B),
+    bn_pack4(0xE485, 0xB576, 0x625E, 0x7EC6),
+    bn_pack4(0x4FE1, 0x356D, 0x6D51, 0xC245),
+    bn_pack4(0x302B, 0x0A6D, 0xF25F, 0x1437),
+    bn_pack4(0xEF95, 0x19B3, 0xCD3A, 0x431B),
+    bn_pack4(0x514A, 0x0879, 0x8E34, 0x04DD),
+    bn_pack4(0x020B, 0xBEA6, 0x3B13, 0x9B22),
+    bn_pack4(0x2902, 0x4E08, 0x8A67, 0xCC74),
+    bn_pack4(0xC4C6, 0x628B, 0x80DC, 0x1CD1),
+    bn_pack4(0xC90F, 0xDAA2, 0x2168, 0xC234),
+    bn_pack4(0xFFFF, 0xFFFF, 0xFFFF, 0xFFFF)
+};
+
+const BIGNUM bn_group_3072 = {
+    (BN_ULONG *)bn_group_3072_value,
+    OSSL_NELEM(bn_group_3072_value),
+    OSSL_NELEM(bn_group_3072_value),
+    0,
+    BN_FLG_STATIC_DATA
+};
+
+static const BN_ULONG bn_group_4096_value[] = {
+    bn_pack4(0xFFFF, 0xFFFF, 0xFFFF, 0xFFFF),
+    bn_pack4(0x4DF4, 0x35C9, 0x3406, 0x3199),
+    bn_pack4(0x86FF, 0xB7DC, 0x90A6, 0xC08F),
+    bn_pack4(0x93B4, 0xEA98, 0x8D8F, 0xDDC1),
+    bn_pack4(0xD006, 0x9127, 0xD5B0, 0x5AA9),
+    bn_pack4(0xB81B, 0xDD76, 0x2170, 0x481C),
+    bn_pack4(0x1F61, 0x2970, 0xCEE2, 0xD7AF),
+    bn_pack4(0x233B, 0xA186, 0x515B, 0xE7ED),
+    bn_pack4(0x99B2, 0x964F, 0xA090, 0xC3A2),
+    bn_pack4(0x287C, 0x5947, 0x4E6B, 0xC05D),
+    bn_pack4(0x2E8E, 0xFC14, 0x1FBE, 0xCAA6),
+    bn_pack4(0xDBBB, 0xC2DB, 0x04DE, 0x8EF9),
+    bn_pack4(0x2583, 0xE9CA, 0x2AD4, 0x4CE8),
+    bn_pack4(0x1A94, 0x6834, 0xB615, 0x0BDA),
+    bn_pack4(0x99C3, 0x2718, 0x6AF4, 0xE23C),
+    bn_pack4(0x8871, 0x9A10, 0xBDBA, 0x5B26),
+    bn_pack4(0x1A72, 0x3C12, 0xA787, 0xE6D7),
+    bn_pack4(0x4B82, 0xD120, 0xA921, 0x0801),
+    bn_pack4(0x43DB, 0x5BFC, 0xE0FD, 0x108E),
+    bn_pack4(0x08E2, 0x4FA0, 0x74E5, 0xAB31),
+    bn_pack4(0x7709, 0x88C0, 0xBAD9, 0x46E2),
+    bn_pack4(0xBBE1, 0x1757, 0x7A61, 0x5D6C),
+    bn_pack4(0x521F, 0x2B18, 0x177B, 0x200C),
+    bn_pack4(0xD876, 0x0273, 0x3EC8, 0x6A64),
+    bn_pack4(0xF12F, 0xFA06, 0xD98A, 0x0864),
+    bn_pack4(0xCEE3, 0xD226, 0x1AD2, 0xEE6B),
+    bn_pack4(0x1E8C, 0x94E0, 0x4A25, 0x619D),
+    bn_pack4(0xABF5, 0xAE8C, 0xDB09, 0x33D7),
+    bn_pack4(0xB397, 0x0F85, 0xA6E1, 0xE4C7),
+    bn_pack4(0x8AEA, 0x7157, 0x5D06, 0x0C7D),
+    bn_pack4(0xECFB, 0x8504, 0x58DB, 0xEF0A),
+    bn_pack4(0xA855, 0x21AB, 0xDF1C, 0xBA64),
+    bn_pack4(0xAD33, 0x170D, 0x0450, 0x7A33),
+    bn_pack4(0x1572, 0x8E5A, 0x8AAA, 0xC42D),
+    bn_pack4(0x15D2, 0x2618, 0x98FA, 0x0510),
+    bn_pack4(0x3995, 0x497C, 0xEA95, 0x6AE5),
+    bn_pack4(0xDE2B, 0xCBF6, 0x9558, 0x1718),
+    bn_pack4(0xB5C5, 0x5DF0, 0x6F4C, 0x52C9),
+    bn_pack4(0x9B27, 0x83A2, 0xEC07, 0xA28F),
+    bn_pack4(0xE39E, 0x772C, 0x180E, 0x8603),
+    bn_pack4(0x3290, 0x5E46, 0x2E36, 0xCE3B),
+    bn_pack4(0xF174, 0x6C08, 0xCA18, 0x217C),
+    bn_pack4(0x670C, 0x354E, 0x4ABC, 0x9804),
+    bn_pack4(0x9ED5, 0x2907, 0x7096, 0x966D),
+    bn_pack4(0x1C62, 0xF356, 0x2085, 0x52BB),
+    bn_pack4(0x8365, 0x5D23, 0xDCA3, 0xAD96),
+    bn_pack4(0x6916, 0x3FA8, 0xFD24, 0xCF5F),
+    bn_pack4(0x98DA, 0x4836, 0x1C55, 0xD39A),
+    bn_pack4(0xC200, 0x7CB8, 0xA163, 0xBF05),
+    bn_pack4(0x4928, 0x6651, 0xECE4, 0x5B3D),
+    bn_pack4(0xAE9F, 0x2411, 0x7C4B, 0x1FE6),
+    bn_pack4(0xEE38, 0x6BFB, 0x5A89, 0x9FA5),
+    bn_pack4(0x0BFF, 0x5CB6, 0xF406, 0xB7ED),
+    bn_pack4(0xF44C, 0x42E9, 0xA637, 0xED6B),
+    bn_pack4(0xE485, 0xB576, 0x625E, 0x7EC6),
+    bn_pack4(0x4FE1, 0x356D, 0x6D51, 0xC245),
+    bn_pack4(0x302B, 0x0A6D, 0xF25F, 0x1437),
+    bn_pack4(0xEF95, 0x19B3, 0xCD3A, 0x431B),
+    bn_pack4(0x514A, 0x0879, 0x8E34, 0x04DD),
+    bn_pack4(0x020B, 0xBEA6, 0x3B13, 0x9B22),
+    bn_pack4(0x2902, 0x4E08, 0x8A67, 0xCC74),
+    bn_pack4(0xC4C6, 0x628B, 0x80DC, 0x1CD1),
+    bn_pack4(0xC90F, 0xDAA2, 0x2168, 0xC234),
+    bn_pack4(0xFFFF, 0xFFFF, 0xFFFF, 0xFFFF)
+};
+
+const BIGNUM bn_group_4096 = {
+    (BN_ULONG *)bn_group_4096_value,
+    OSSL_NELEM(bn_group_4096_value),
+    OSSL_NELEM(bn_group_4096_value),
+    0,
+    BN_FLG_STATIC_DATA
+};
+
+static const BN_ULONG bn_group_6144_value[] = {
+    bn_pack4(0xFFFF, 0xFFFF, 0xFFFF, 0xFFFF),
+    bn_pack4(0xE694, 0xF91E, 0x6DCC, 0x4024),
+    bn_pack4(0x12BF, 0x2D5B, 0x0B74, 0x74D6),
+    bn_pack4(0x043E, 0x8F66, 0x3F48, 0x60EE),
+    bn_pack4(0x387F, 0xE8D7, 0x6E3C, 0x0468),
+    bn_pack4(0xDA56, 0xC9EC, 0x2EF2, 0x9632),
+    bn_pack4(0xEB19, 0xCCB1, 0xA313, 0xD55C),
+    bn_pack4(0xF550, 0xAA3D, 0x8A1F, 0xBFF0),
+    bn_pack4(0x06A1, 0xD58B, 0xB7C5, 0xDA76),
+    bn_pack4(0xA797, 0x15EE, 0xF29B, 0xE328),
+    bn_pack4(0x14CC, 0x5ED2, 0x0F80, 0x37E0),
+    bn_pack4(0xCC8F, 0x6D7E, 0xBF48, 0xE1D8),
+    bn_pack4(0x4BD4, 0x07B2, 0x2B41, 0x54AA),
+    bn_pack4(0x0F1D, 0x45B7, 0xFF58, 0x5AC5),
+    bn_pack4(0x23A9, 0x7A7E, 0x36CC, 0x88BE),
+    bn_pack4(0x59E7, 0xC97F, 0xBEC7, 0xE8F3),
+    bn_pack4(0xB5A8, 0x4031, 0x900B, 0x1C9E),
+    bn_pack4(0xD55E, 0x702F, 0x4698, 0x0C82),
+    bn_pack4(0xF482, 0xD7CE, 0x6E74, 0xFEF6),
+    bn_pack4(0xF032, 0xEA15, 0xD172, 0x1D03),
+    bn_pack4(0x5983, 0xCA01, 0xC64B, 0x92EC),
+    bn_pack4(0x6FB8, 0xF401, 0x378C, 0xD2BF),
+    bn_pack4(0x3320, 0x5151, 0x2BD7, 0xAF42),
+    bn_pack4(0xDB7F, 0x1447, 0xE6CC, 0x254B),
+    bn_pack4(0x44CE, 0x6CBA, 0xCED4, 0xBB1B),
+    bn_pack4(0xDA3E, 0xDBEB, 0xCF9B, 0x14ED),
+    bn_pack4(0x1797, 0x27B0, 0x865A, 0x8918),
+    bn_pack4(0xB06A, 0x53ED, 0x9027, 0xD831),
+    bn_pack4(0xE5DB, 0x382F, 0x4130, 0x01AE),
+    bn_pack4(0xF8FF, 0x9406, 0xAD9E, 0x530E),
+    bn_pack4(0xC975, 0x1E76, 0x3DBA, 0x37BD),
+    bn_pack4(0xC1D4, 0xDCB2, 0x6026, 0x46DE),
+    bn_pack4(0x36C3, 0xFAB4, 0xD27C, 0x7026),
+    bn_pack4(0x4DF4, 0x35C9, 0x3402, 0x8492),
+    bn_pack4(0x86FF, 0xB7DC, 0x90A6, 0xC08F),
+    bn_pack4(0x93B4, 0xEA98, 0x8D8F, 0xDDC1),
+    bn_pack4(0xD006, 0x9127, 0xD5B0, 0x5AA9),
+    bn_pack4(0xB81B, 0xDD76, 0x2170, 0x481C),
+    bn_pack4(0x1F61, 0x2970, 0xCEE2, 0xD7AF),
+    bn_pack4(0x233B, 0xA186, 0x515B, 0xE7ED),
+    bn_pack4(0x99B2, 0x964F, 0xA090, 0xC3A2),
+    bn_pack4(0x287C, 0x5947, 0x4E6B, 0xC05D),
+    bn_pack4(0x2E8E, 0xFC14, 0x1FBE, 0xCAA6),
+    bn_pack4(0xDBBB, 0xC2DB, 0x04DE, 0x8EF9),
+    bn_pack4(0x2583, 0xE9CA, 0x2AD4, 0x4CE8),
+    bn_pack4(0x1A94, 0x6834, 0xB615, 0x0BDA),
+    bn_pack4(0x99C3, 0x2718, 0x6AF4, 0xE23C),
+    bn_pack4(0x8871, 0x9A10, 0xBDBA, 0x5B26),
+    bn_pack4(0x1A72, 0x3C12, 0xA787, 0xE6D7),
+    bn_pack4(0x4B82, 0xD120, 0xA921, 0x0801),
+    bn_pack4(0x43DB, 0x5BFC, 0xE0FD, 0x108E),
+    bn_pack4(0x08E2, 0x4FA0, 0x74E5, 0xAB31),
+    bn_pack4(0x7709, 0x88C0, 0xBAD9, 0x46E2),
+    bn_pack4(0xBBE1, 0x1757, 0x7A61, 0x5D6C),
+    bn_pack4(0x521F, 0x2B18, 0x177B, 0x200C),
+    bn_pack4(0xD876, 0x0273, 0x3EC8, 0x6A64),
+    bn_pack4(0xF12F, 0xFA06, 0xD98A, 0x0864),
+    bn_pack4(0xCEE3, 0xD226, 0x1AD2, 0xEE6B),
+    bn_pack4(0x1E8C, 0x94E0, 0x4A25, 0x619D),
+    bn_pack4(0xABF5, 0xAE8C, 0xDB09, 0x33D7),
+    bn_pack4(0xB397, 0x0F85, 0xA6E1, 0xE4C7),
+    bn_pack4(0x8AEA, 0x7157, 0x5D06, 0x0C7D),
+    bn_pack4(0xECFB, 0x8504, 0x58DB, 0xEF0A),
+    bn_pack4(0xA855, 0x21AB, 0xDF1C, 0xBA64),
+    bn_pack4(0xAD33, 0x170D, 0x0450, 0x7A33),
+    bn_pack4(0x1572, 0x8E5A, 0x8AAA, 0xC42D),
+    bn_pack4(0x15D2, 0x2618, 0x98FA, 0x0510),
+    bn_pack4(0x3995, 0x497C, 0xEA95, 0x6AE5),
+    bn_pack4(0xDE2B, 0xCBF6, 0x9558, 0x1718),
+    bn_pack4(0xB5C5, 0x5DF0, 0x6F4C, 0x52C9),
+    bn_pack4(0x9B27, 0x83A2, 0xEC07, 0xA28F),
+    bn_pack4(0xE39E, 0x772C, 0x180E, 0x8603),
+    bn_pack4(0x3290, 0x5E46, 0x2E36, 0xCE3B),
+    bn_pack4(0xF174, 0x6C08, 0xCA18, 0x217C),
+    bn_pack4(0x670C, 0x354E, 0x4ABC, 0x9804),
+    bn_pack4(0x9ED5, 0x2907, 0x7096, 0x966D),
+    bn_pack4(0x1C62, 0xF356, 0x2085, 0x52BB),
+    bn_pack4(0x8365, 0x5D23, 0xDCA3, 0xAD96),
+    bn_pack4(0x6916, 0x3FA8, 0xFD24, 0xCF5F),
+    bn_pack4(0x98DA, 0x4836, 0x1C55, 0xD39A),
+    bn_pack4(0xC200, 0x7CB8, 0xA163, 0xBF05),
+    bn_pack4(0x4928, 0x6651, 0xECE4, 0x5B3D),
+    bn_pack4(0xAE9F, 0x2411, 0x7C4B, 0x1FE6),
+    bn_pack4(0xEE38, 0x6BFB, 0x5A89, 0x9FA5),
+    bn_pack4(0x0BFF, 0x5CB6, 0xF406, 0xB7ED),
+    bn_pack4(0xF44C, 0x42E9, 0xA637, 0xED6B),
+    bn_pack4(0xE485, 0xB576, 0x625E, 0x7EC6),
+    bn_pack4(0x4FE1, 0x356D, 0x6D51, 0xC245),
+    bn_pack4(0x302B, 0x0A6D, 0xF25F, 0x1437),
+    bn_pack4(0xEF95, 0x19B3, 0xCD3A, 0x431B),
+    bn_pack4(0x514A, 0x0879, 0x8E34, 0x04DD),
+    bn_pack4(0x020B, 0xBEA6, 0x3B13, 0x9B22),
+    bn_pack4(0x2902, 0x4E08, 0x8A67, 0xCC74),
+    bn_pack4(0xC4C6, 0x628B, 0x80DC, 0x1CD1),
+    bn_pack4(0xC90F, 0xDAA2, 0x2168, 0xC234),
+    bn_pack4(0xFFFF, 0xFFFF, 0xFFFF, 0xFFFF)
+};
+
+const BIGNUM bn_group_6144 = {
+    (BN_ULONG *)bn_group_6144_value,
+    OSSL_NELEM(bn_group_6144_value),
+    OSSL_NELEM(bn_group_6144_value),
+    0,
+    BN_FLG_STATIC_DATA
+};
+
+static const BN_ULONG bn_group_8192_value[] = {
+    bn_pack4(0xFFFF, 0xFFFF, 0xFFFF, 0xFFFF),
+    bn_pack4(0x60C9, 0x80DD, 0x98ED, 0xD3DF),
+    bn_pack4(0xC81F, 0x56E8, 0x80B9, 0x6E71),
+    bn_pack4(0x9E30, 0x50E2, 0x7656, 0x94DF),
+    bn_pack4(0x9558, 0xE447, 0x5677, 0xE9AA),
+    bn_pack4(0xC919, 0x0DA6, 0xFC02, 0x6E47),
+    bn_pack4(0x889A, 0x002E, 0xD5EE, 0x382B),
+    bn_pack4(0x4009, 0x438B, 0x481C, 0x6CD7),
+    bn_pack4(0x3590, 0x46F4, 0xEB87, 0x9F92),
+    bn_pack4(0xFAF3, 0x6BC3, 0x1ECF, 0xA268),
+    bn_pack4(0xB1D5, 0x10BD, 0x7EE7, 0x4D73),
+    bn_pack4(0xF9AB, 0x4819, 0x5DED, 0x7EA1),
+    bn_pack4(0x64F3, 0x1CC5, 0x0846, 0x851D),
+    bn_pack4(0x4597, 0xE899, 0xA025, 0x5DC1),
+    bn_pack4(0xDF31, 0x0EE0, 0x74AB, 0x6A36),
+    bn_pack4(0x6D2A, 0x13F8, 0x3F44, 0xF82D),
+    bn_pack4(0x062B, 0x3CF5, 0xB3A2, 0x78A6),
+    bn_pack4(0x7968, 0x3303, 0xED5B, 0xDD3A),
+    bn_pack4(0xFA9D, 0x4B7F, 0xA2C0, 0x87E8),
+    bn_pack4(0x4BCB, 0xC886, 0x2F83, 0x85DD),
+    bn_pack4(0x3473, 0xFC64, 0x6CEA, 0x306B),
+    bn_pack4(0x13EB, 0x57A8, 0x1A23, 0xF0C7),
+    bn_pack4(0x2222, 0x2E04, 0xA403, 0x7C07),
+    bn_pack4(0xE3FD, 0xB8BE, 0xFC84, 0x8AD9),
+    bn_pack4(0x238F, 0x16CB, 0xE39D, 0x652D),
+    bn_pack4(0x3423, 0xB474, 0x2BF1, 0xC978),
+    bn_pack4(0x3AAB, 0x639C, 0x5AE4, 0xF568),
+    bn_pack4(0x2576, 0xF693, 0x6BA4, 0x2466),
+    bn_pack4(0x741F, 0xA7BF, 0x8AFC, 0x47ED),
+    bn_pack4(0x3BC8, 0x32B6, 0x8D9D, 0xD300),
+    bn_pack4(0xD8BE, 0xC4D0, 0x73B9, 0x31BA),
+    bn_pack4(0x3877, 0x7CB6, 0xA932, 0xDF8C),
+    bn_pack4(0x74A3, 0x926F, 0x12FE, 0xE5E4),
+    bn_pack4(0xE694, 0xF91E, 0x6DBE, 0x1159),
+    bn_pack4(0x12BF, 0x2D5B, 0x0B74, 0x74D6),
+    bn_pack4(0x043E, 0x8F66, 0x3F48, 0x60EE),
+    bn_pack4(0x387F, 0xE8D7, 0x6E3C, 0x0468),
+    bn_pack4(0xDA56, 0xC9EC, 0x2EF2, 0x9632),
+    bn_pack4(0xEB19, 0xCCB1, 0xA313, 0xD55C),
+    bn_pack4(0xF550, 0xAA3D, 0x8A1F, 0xBFF0),
+    bn_pack4(0x06A1, 0xD58B, 0xB7C5, 0xDA76),
+    bn_pack4(0xA797, 0x15EE, 0xF29B, 0xE328),
+    bn_pack4(0x14CC, 0x5ED2, 0x0F80, 0x37E0),
+    bn_pack4(0xCC8F, 0x6D7E, 0xBF48, 0xE1D8),
+    bn_pack4(0x4BD4, 0x07B2, 0x2B41, 0x54AA),
+    bn_pack4(0x0F1D, 0x45B7, 0xFF58, 0x5AC5),
+    bn_pack4(0x23A9, 0x7A7E, 0x36CC, 0x88BE),
+    bn_pack4(0x59E7, 0xC97F, 0xBEC7, 0xE8F3),
+    bn_pack4(0xB5A8, 0x4031, 0x900B, 0x1C9E),
+    bn_pack4(0xD55E, 0x702F, 0x4698, 0x0C82),
+    bn_pack4(0xF482, 0xD7CE, 0x6E74, 0xFEF6),
+    bn_pack4(0xF032, 0xEA15, 0xD172, 0x1D03),
+    bn_pack4(0x5983, 0xCA01, 0xC64B, 0x92EC),
+    bn_pack4(0x6FB8, 0xF401, 0x378C, 0xD2BF),
+    bn_pack4(0x3320, 0x5151, 0x2BD7, 0xAF42),
+    bn_pack4(0xDB7F, 0x1447, 0xE6CC, 0x254B),
+    bn_pack4(0x44CE, 0x6CBA, 0xCED4, 0xBB1B),
+    bn_pack4(0xDA3E, 0xDBEB, 0xCF9B, 0x14ED),
+    bn_pack4(0x1797, 0x27B0, 0x865A, 0x8918),
+    bn_pack4(0xB06A, 0x53ED, 0x9027, 0xD831),
+    bn_pack4(0xE5DB, 0x382F, 0x4130, 0x01AE),
+    bn_pack4(0xF8FF, 0x9406, 0xAD9E, 0x530E),
+    bn_pack4(0xC975, 0x1E76, 0x3DBA, 0x37BD),
+    bn_pack4(0xC1D4, 0xDCB2, 0x6026, 0x46DE),
+    bn_pack4(0x36C3, 0xFAB4, 0xD27C, 0x7026),
+    bn_pack4(0x4DF4, 0x35C9, 0x3402, 0x8492),
+    bn_pack4(0x86FF, 0xB7DC, 0x90A6, 0xC08F),
+    bn_pack4(0x93B4, 0xEA98, 0x8D8F, 0xDDC1),
+    bn_pack4(0xD006, 0x9127, 0xD5B0, 0x5AA9),
+    bn_pack4(0xB81B, 0xDD76, 0x2170, 0x481C),
+    bn_pack4(0x1F61, 0x2970, 0xCEE2, 0xD7AF),
+    bn_pack4(0x233B, 0xA186, 0x515B, 0xE7ED),
+    bn_pack4(0x99B2, 0x964F, 0xA090, 0xC3A2),
+    bn_pack4(0x287C, 0x5947, 0x4E6B, 0xC05D),
+    bn_pack4(0x2E8E, 0xFC14, 0x1FBE, 0xCAA6),
+    bn_pack4(0xDBBB, 0xC2DB, 0x04DE, 0x8EF9),
+    bn_pack4(0x2583, 0xE9CA, 0x2AD4, 0x4CE8),
+    bn_pack4(0x1A94, 0x6834, 0xB615, 0x0BDA),
+    bn_pack4(0x99C3, 0x2718, 0x6AF4, 0xE23C),
+    bn_pack4(0x8871, 0x9A10, 0xBDBA, 0x5B26),
+    bn_pack4(0x1A72, 0x3C12, 0xA787, 0xE6D7),
+    bn_pack4(0x4B82, 0xD120, 0xA921, 0x0801),
+    bn_pack4(0x43DB, 0x5BFC, 0xE0FD, 0x108E),
+    bn_pack4(0x08E2, 0x4FA0, 0x74E5, 0xAB31),
+    bn_pack4(0x7709, 0x88C0, 0xBAD9, 0x46E2),
+    bn_pack4(0xBBE1, 0x1757, 0x7A61, 0x5D6C),
+    bn_pack4(0x521F, 0x2B18, 0x177B, 0x200C),
+    bn_pack4(0xD876, 0x0273, 0x3EC8, 0x6A64),
+    bn_pack4(0xF12F, 0xFA06, 0xD98A, 0x0864),
+    bn_pack4(0xCEE3, 0xD226, 0x1AD2, 0xEE6B),
+    bn_pack4(0x1E8C, 0x94E0, 0x4A25, 0x619D),
+    bn_pack4(0xABF5, 0xAE8C, 0xDB09, 0x33D7),
+    bn_pack4(0xB397, 0x0F85, 0xA6E1, 0xE4C7),
+    bn_pack4(0x8AEA, 0x7157, 0x5D06, 0x0C7D),
+    bn_pack4(0xECFB, 0x8504, 0x58DB, 0xEF0A),
+    bn_pack4(0xA855, 0x21AB, 0xDF1C, 0xBA64),
+    bn_pack4(0xAD33, 0x170D, 0x0450, 0x7A33),
+    bn_pack4(0x1572, 0x8E5A, 0x8AAA, 0xC42D),
+    bn_pack4(0x15D2, 0x2618, 0x98FA, 0x0510),
+    bn_pack4(0x3995, 0x497C, 0xEA95, 0x6AE5),
+    bn_pack4(0xDE2B, 0xCBF6, 0x9558, 0x1718),
+    bn_pack4(0xB5C5, 0x5DF0, 0x6F4C, 0x52C9),
+    bn_pack4(0x9B27, 0x83A2, 0xEC07, 0xA28F),
+    bn_pack4(0xE39E, 0x772C, 0x180E, 0x8603),
+    bn_pack4(0x3290, 0x5E46, 0x2E36, 0xCE3B),
+    bn_pack4(0xF174, 0x6C08, 0xCA18, 0x217C),
+    bn_pack4(0x670C, 0x354E, 0x4ABC, 0x9804),
+    bn_pack4(0x9ED5, 0x2907, 0x7096, 0x966D),
+    bn_pack4(0x1C62, 0xF356, 0x2085, 0x52BB),
+    bn_pack4(0x8365, 0x5D23, 0xDCA3, 0xAD96),
+    bn_pack4(0x6916, 0x3FA8, 0xFD24, 0xCF5F),
+    bn_pack4(0x98DA, 0x4836, 0x1C55, 0xD39A),
+    bn_pack4(0xC200, 0x7CB8, 0xA163, 0xBF05),
+    bn_pack4(0x4928, 0x6651, 0xECE4, 0x5B3D),
+    bn_pack4(0xAE9F, 0x2411, 0x7C4B, 0x1FE6),
+    bn_pack4(0xEE38, 0x6BFB, 0x5A89, 0x9FA5),
+    bn_pack4(0x0BFF, 0x5CB6, 0xF406, 0xB7ED),
+    bn_pack4(0xF44C, 0x42E9, 0xA637, 0xED6B),
+    bn_pack4(0xE485, 0xB576, 0x625E, 0x7EC6),
+    bn_pack4(0x4FE1, 0x356D, 0x6D51, 0xC245),
+    bn_pack4(0x302B, 0x0A6D, 0xF25F, 0x1437),
+    bn_pack4(0xEF95, 0x19B3, 0xCD3A, 0x431B),
+    bn_pack4(0x514A, 0x0879, 0x8E34, 0x04DD),
+    bn_pack4(0x020B, 0xBEA6, 0x3B13, 0x9B22),
+    bn_pack4(0x2902, 0x4E08, 0x8A67, 0xCC74),
+    bn_pack4(0xC4C6, 0x628B, 0x80DC, 0x1CD1),
+    bn_pack4(0xC90F, 0xDAA2, 0x2168, 0xC234),
+    bn_pack4(0xFFFF, 0xFFFF, 0xFFFF, 0xFFFF)
+};
+
+const BIGNUM bn_group_8192 = {
+    (BN_ULONG *)bn_group_8192_value,
+    OSSL_NELEM(bn_group_8192_value),
+    OSSL_NELEM(bn_group_8192_value),
+    0,
+    BN_FLG_STATIC_DATA
+};
+
+static const BN_ULONG bn_generator_19_value[] = { 19 };
+
+const BIGNUM bn_generator_19 = {
+    (BN_ULONG *)bn_generator_19_value,
+    1,
+    1,
+    0,
+    BN_FLG_STATIC_DATA
+};
+static const BN_ULONG bn_generator_5_value[] = { 5 };
+
+const BIGNUM bn_generator_5 = {
+    (BN_ULONG *)bn_generator_5_value,
+    1,
+    1,
+    0,
+    BN_FLG_STATIC_DATA
+};
+static const BN_ULONG bn_generator_2_value[] = { 2 };
+
+const BIGNUM bn_generator_2 = {
+    (BN_ULONG *)bn_generator_2_value,
+    1,
+    1,
+    0,
+    BN_FLG_STATIC_DATA
+};
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_word.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_word.c
new file mode 100644
index 000000000..262d7668f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_word.c
@@ -0,0 +1,201 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "bn_lcl.h"
+
+BN_ULONG BN_mod_word(const BIGNUM *a, BN_ULONG w)
+{
+#ifndef BN_LLONG
+    BN_ULONG ret = 0;
+#else
+    BN_ULLONG ret = 0;
+#endif
+    int i;
+
+    if (w == 0)
+        return (BN_ULONG)-1;
+
+#ifndef BN_LLONG
+    /*
+     * If |w| is too long and we don't have BN_ULLONG then we need to fall
+     * back to using BN_div_word
+     */
+    if (w > ((BN_ULONG)1 << BN_BITS4)) {
+        BIGNUM *tmp = BN_dup(a);
+        if (tmp == NULL)
+            return (BN_ULONG)-1;
+
+        ret = BN_div_word(tmp, w);
+        BN_free(tmp);
+
+        return ret;
+    }
+#endif
+
+    bn_check_top(a);
+    w &= BN_MASK2;
+    for (i = a->top - 1; i >= 0; i--) {
+#ifndef BN_LLONG
+        /*
+         * We can assume here that | w <= ((BN_ULONG)1 << BN_BITS4) | and so
+         * | ret < ((BN_ULONG)1 << BN_BITS4) | and therefore the shifts here are
+         * safe and will not overflow
+         */
+        ret = ((ret << BN_BITS4) | ((a->d[i] >> BN_BITS4) & BN_MASK2l)) % w;
+        ret = ((ret << BN_BITS4) | (a->d[i] & BN_MASK2l)) % w;
+#else
+        ret = (BN_ULLONG) (((ret << (BN_ULLONG) BN_BITS2) | a->d[i]) %
+                           (BN_ULLONG) w);
+#endif
+    }
+    return (BN_ULONG)ret;
+}
+
+BN_ULONG BN_div_word(BIGNUM *a, BN_ULONG w)
+{
+    BN_ULONG ret = 0;
+    int i, j;
+
+    bn_check_top(a);
+    w &= BN_MASK2;
+
+    if (!w)
+        /* actually this an error (division by zero) */
+        return (BN_ULONG)-1;
+    if (a->top == 0)
+        return 0;
+
+    /* normalize input (so bn_div_words doesn't complain) */
+    j = BN_BITS2 - BN_num_bits_word(w);
+    w <<= j;
+    if (!BN_lshift(a, a, j))
+        return (BN_ULONG)-1;
+
+    for (i = a->top - 1; i >= 0; i--) {
+        BN_ULONG l, d;
+
+        l = a->d[i];
+        d = bn_div_words(ret, l, w);
+        ret = (l - ((d * w) & BN_MASK2)) & BN_MASK2;
+        a->d[i] = d;
+    }
+    if ((a->top > 0) && (a->d[a->top - 1] == 0))
+        a->top--;
+    ret >>= j;
+    if (!a->top)
+        a->neg = 0; /* don't allow negative zero */
+    bn_check_top(a);
+    return ret;
+}
+
+int BN_add_word(BIGNUM *a, BN_ULONG w)
+{
+    BN_ULONG l;
+    int i;
+
+    bn_check_top(a);
+    w &= BN_MASK2;
+
+    /* degenerate case: w is zero */
+    if (!w)
+        return 1;
+    /* degenerate case: a is zero */
+    if (BN_is_zero(a))
+        return BN_set_word(a, w);
+    /* handle 'a' when negative */
+    if (a->neg) {
+        a->neg = 0;
+        i = BN_sub_word(a, w);
+        if (!BN_is_zero(a))
+            a->neg = !(a->neg);
+        return i;
+    }
+    for (i = 0; w != 0 && i < a->top; i++) {
+        a->d[i] = l = (a->d[i] + w) & BN_MASK2;
+        w = (w > l) ? 1 : 0;
+    }
+    if (w && i == a->top) {
+        if (bn_wexpand(a, a->top + 1) == NULL)
+            return 0;
+        a->top++;
+        a->d[i] = w;
+    }
+    bn_check_top(a);
+    return 1;
+}
+
+int BN_sub_word(BIGNUM *a, BN_ULONG w)
+{
+    int i;
+
+    bn_check_top(a);
+    w &= BN_MASK2;
+
+    /* degenerate case: w is zero */
+    if (!w)
+        return 1;
+    /* degenerate case: a is zero */
+    if (BN_is_zero(a)) {
+        i = BN_set_word(a, w);
+        if (i != 0)
+            BN_set_negative(a, 1);
+        return i;
+    }
+    /* handle 'a' when negative */
+    if (a->neg) {
+        a->neg = 0;
+        i = BN_add_word(a, w);
+        a->neg = 1;
+        return i;
+    }
+
+    if ((a->top == 1) && (a->d[0] < w)) {
+        a->d[0] = w - a->d[0];
+        a->neg = 1;
+        return 1;
+    }
+    i = 0;
+    for (;;) {
+        if (a->d[i] >= w) {
+            a->d[i] -= w;
+            break;
+        } else {
+            a->d[i] = (a->d[i] - w) & BN_MASK2;
+            i++;
+            w = 1;
+        }
+    }
+    if ((a->d[i] == 0) && (i == (a->top - 1)))
+        a->top--;
+    bn_check_top(a);
+    return 1;
+}
+
+int BN_mul_word(BIGNUM *a, BN_ULONG w)
+{
+    BN_ULONG ll;
+
+    bn_check_top(a);
+    w &= BN_MASK2;
+    if (a->top) {
+        if (w == 0)
+            BN_zero(a);
+        else {
+            ll = bn_mul_words(a->d, a->d, a->top, w);
+            if (ll) {
+                if (bn_wexpand(a, a->top + 1) == NULL)
+                    return 0;
+                a->d[a->top++] = ll;
+            }
+        }
+    }
+    bn_check_top(a);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_x931p.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_x931p.c
new file mode 100644
index 000000000..9eb8384fd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/bn_x931p.c
@@ -0,0 +1,244 @@
+/*
+ * Copyright 2011-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <openssl/bn.h>
+#include "bn_lcl.h"
+
+/* X9.31 routines for prime derivation */
+
+/*
+ * X9.31 prime derivation. This is used to generate the primes pi (p1, p2,
+ * q1, q2) from a parameter Xpi by checking successive odd integers.
+ */
+
+static int bn_x931_derive_pi(BIGNUM *pi, const BIGNUM *Xpi, BN_CTX *ctx,
+                             BN_GENCB *cb)
+{
+    int i = 0, is_prime;
+    if (!BN_copy(pi, Xpi))
+        return 0;
+    if (!BN_is_odd(pi) && !BN_add_word(pi, 1))
+        return 0;
+    for (;;) {
+        i++;
+        BN_GENCB_call(cb, 0, i);
+        /* NB 27 MR is specified in X9.31 */
+        is_prime = BN_is_prime_fasttest_ex(pi, 27, ctx, 1, cb);
+        if (is_prime < 0)
+            return 0;
+        if (is_prime)
+            break;
+        if (!BN_add_word(pi, 2))
+            return 0;
+    }
+    BN_GENCB_call(cb, 2, i);
+    return 1;
+}
+
+/*
+ * This is the main X9.31 prime derivation function. From parameters Xp1, Xp2
+ * and Xp derive the prime p. If the parameters p1 or p2 are not NULL they
+ * will be returned too: this is needed for testing.
+ */
+
+int BN_X931_derive_prime_ex(BIGNUM *p, BIGNUM *p1, BIGNUM *p2,
+                            const BIGNUM *Xp, const BIGNUM *Xp1,
+                            const BIGNUM *Xp2, const BIGNUM *e, BN_CTX *ctx,
+                            BN_GENCB *cb)
+{
+    int ret = 0;
+
+    BIGNUM *t, *p1p2, *pm1;
+
+    /* Only even e supported */
+    if (!BN_is_odd(e))
+        return 0;
+
+    BN_CTX_start(ctx);
+    if (p1 == NULL)
+        p1 = BN_CTX_get(ctx);
+
+    if (p2 == NULL)
+        p2 = BN_CTX_get(ctx);
+
+    t = BN_CTX_get(ctx);
+
+    p1p2 = BN_CTX_get(ctx);
+
+    pm1 = BN_CTX_get(ctx);
+
+    if (pm1 == NULL)
+        goto err;
+
+    if (!bn_x931_derive_pi(p1, Xp1, ctx, cb))
+        goto err;
+
+    if (!bn_x931_derive_pi(p2, Xp2, ctx, cb))
+        goto err;
+
+    if (!BN_mul(p1p2, p1, p2, ctx))
+        goto err;
+
+    /* First set p to value of Rp */
+
+    if (!BN_mod_inverse(p, p2, p1, ctx))
+        goto err;
+
+    if (!BN_mul(p, p, p2, ctx))
+        goto err;
+
+    if (!BN_mod_inverse(t, p1, p2, ctx))
+        goto err;
+
+    if (!BN_mul(t, t, p1, ctx))
+        goto err;
+
+    if (!BN_sub(p, p, t))
+        goto err;
+
+    if (p->neg && !BN_add(p, p, p1p2))
+        goto err;
+
+    /* p now equals Rp */
+
+    if (!BN_mod_sub(p, p, Xp, p1p2, ctx))
+        goto err;
+
+    if (!BN_add(p, p, Xp))
+        goto err;
+
+    /* p now equals Yp0 */
+
+    for (;;) {
+        int i = 1;
+        BN_GENCB_call(cb, 0, i++);
+        if (!BN_copy(pm1, p))
+            goto err;
+        if (!BN_sub_word(pm1, 1))
+            goto err;
+        if (!BN_gcd(t, pm1, e, ctx))
+            goto err;
+        if (BN_is_one(t)) {
+            /*
+             * X9.31 specifies 8 MR and 1 Lucas test or any prime test
+             * offering similar or better guarantees 50 MR is considerably
+             * better.
+             */
+            int r = BN_is_prime_fasttest_ex(p, 50, ctx, 1, cb);
+            if (r < 0)
+                goto err;
+            if (r)
+                break;
+        }
+        if (!BN_add(p, p, p1p2))
+            goto err;
+    }
+
+    BN_GENCB_call(cb, 3, 0);
+
+    ret = 1;
+
+ err:
+
+    BN_CTX_end(ctx);
+
+    return ret;
+}
+
+/*
+ * Generate pair of parameters Xp, Xq for X9.31 prime generation. Note: nbits
+ * parameter is sum of number of bits in both.
+ */
+
+int BN_X931_generate_Xpq(BIGNUM *Xp, BIGNUM *Xq, int nbits, BN_CTX *ctx)
+{
+    BIGNUM *t;
+    int i;
+    /*
+     * Number of bits for each prime is of the form 512+128s for s = 0, 1,
+     * ...
+     */
+    if ((nbits < 1024) || (nbits & 0xff))
+        return 0;
+    nbits >>= 1;
+    /*
+     * The random value Xp must be between sqrt(2) * 2^(nbits-1) and 2^nbits
+     * - 1. By setting the top two bits we ensure that the lower bound is
+     * exceeded.
+     */
+    if (!BN_priv_rand(Xp, nbits, BN_RAND_TOP_TWO, BN_RAND_BOTTOM_ANY))
+        goto err;
+
+    BN_CTX_start(ctx);
+    t = BN_CTX_get(ctx);
+    if (t == NULL)
+        goto err;
+
+    for (i = 0; i < 1000; i++) {
+        if (!BN_priv_rand(Xq, nbits, BN_RAND_TOP_TWO, BN_RAND_BOTTOM_ANY))
+            goto err;
+
+        /* Check that |Xp - Xq| > 2^(nbits - 100) */
+        if (!BN_sub(t, Xp, Xq))
+            goto err;
+        if (BN_num_bits(t) > (nbits - 100))
+            break;
+    }
+
+    BN_CTX_end(ctx);
+
+    if (i < 1000)
+        return 1;
+
+    return 0;
+
+ err:
+    BN_CTX_end(ctx);
+    return 0;
+}
+
+/*
+ * Generate primes using X9.31 algorithm. Of the values p, p1, p2, Xp1 and
+ * Xp2 only 'p' needs to be non-NULL. If any of the others are not NULL the
+ * relevant parameter will be stored in it. Due to the fact that |Xp - Xq| >
+ * 2^(nbits - 100) must be satisfied Xp and Xq are generated using the
+ * previous function and supplied as input.
+ */
+
+int BN_X931_generate_prime_ex(BIGNUM *p, BIGNUM *p1, BIGNUM *p2,
+                              BIGNUM *Xp1, BIGNUM *Xp2,
+                              const BIGNUM *Xp,
+                              const BIGNUM *e, BN_CTX *ctx, BN_GENCB *cb)
+{
+    int ret = 0;
+
+    BN_CTX_start(ctx);
+    if (Xp1 == NULL)
+        Xp1 = BN_CTX_get(ctx);
+    if (Xp2 == NULL)
+        Xp2 = BN_CTX_get(ctx);
+    if (Xp1 == NULL || Xp2 == NULL)
+        goto error;
+
+    if (!BN_priv_rand(Xp1, 101, BN_RAND_TOP_ONE, BN_RAND_BOTTOM_ANY))
+        goto error;
+    if (!BN_priv_rand(Xp2, 101, BN_RAND_TOP_ONE, BN_RAND_BOTTOM_ANY))
+        goto error;
+    if (!BN_X931_derive_prime_ex(p, p1, p2, Xp, Xp1, Xp2, e, ctx, cb))
+        goto error;
+
+    ret = 1;
+
+ error:
+    BN_CTX_end(ctx);
+
+    return ret;
+
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/build.info
new file mode 100644
index 000000000..a463eddab
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/build.info
@@ -0,0 +1,67 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        bn_add.c bn_div.c bn_exp.c bn_lib.c bn_ctx.c bn_mul.c bn_mod.c \
+        bn_print.c bn_rand.c bn_shift.c bn_word.c bn_blind.c \
+        bn_kron.c bn_sqrt.c bn_gcd.c bn_prime.c bn_err.c bn_sqr.c \
+        {- $target{bn_asm_src} -} \
+        bn_recp.c bn_mont.c bn_mpi.c bn_exp2.c bn_gf2m.c bn_nist.c \
+        bn_depr.c bn_const.c bn_x931p.c bn_intern.c bn_dh.c bn_srp.c
+INCLUDE[../../libcrypto]=../../crypto/include
+
+INCLUDE[bn_exp.o]=..
+
+GENERATE[bn-586.s]=asm/bn-586.pl \
+	$(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+DEPEND[bn-586.s]=../perlasm/x86asm.pl
+GENERATE[co-586.s]=asm/co-586.pl \
+	$(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+DEPEND[co-586.s]=../perlasm/x86asm.pl
+GENERATE[x86-mont.s]=asm/x86-mont.pl \
+	$(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+DEPEND[x86-mont.s]=../perlasm/x86asm.pl
+GENERATE[x86-gf2m.s]=asm/x86-gf2m.pl \
+	$(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+DEPEND[x86-gf2m.s]=../perlasm/x86asm.pl
+
+GENERATE[sparcv9a-mont.S]=asm/sparcv9a-mont.pl $(PERLASM_SCHEME)
+INCLUDE[sparcv9a-mont.o]=..
+GENERATE[sparcv9-mont.S]=asm/sparcv9-mont.pl $(PERLASM_SCHEME)
+INCLUDE[sparcv9-mont.o]=..
+GENERATE[vis3-mont.S]=asm/vis3-mont.pl $(PERLASM_SCHEME)
+INCLUDE[vis3-mont.o]=..
+GENERATE[sparct4-mont.S]=asm/sparct4-mont.pl $(PERLASM_SCHEME)
+INCLUDE[sparct4-mont.o]=..
+GENERATE[sparcv9-gf2m.S]=asm/sparcv9-gf2m.pl $(PERLASM_SCHEME)
+INCLUDE[sparcv9-gf2m.o]=..
+
+GENERATE[bn-mips.S]=asm/mips.pl $(PERLASM_SCHEME)
+INCLUDE[bn-mips.o]=..
+GENERATE[mips-mont.S]=asm/mips-mont.pl $(PERLASM_SCHEME)
+INCLUDE[mips-mont.o]=..
+
+GENERATE[s390x-mont.S]=asm/s390x-mont.pl $(PERLASM_SCHEME)
+GENERATE[s390x-gf2m.s]=asm/s390x-gf2m.pl $(PERLASM_SCHEME)
+
+GENERATE[x86_64-mont.s]=asm/x86_64-mont.pl $(PERLASM_SCHEME)
+GENERATE[x86_64-mont5.s]=asm/x86_64-mont5.pl $(PERLASM_SCHEME)
+GENERATE[x86_64-gf2m.s]=asm/x86_64-gf2m.pl $(PERLASM_SCHEME)
+GENERATE[rsaz-x86_64.s]=asm/rsaz-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[rsaz-avx2.s]=asm/rsaz-avx2.pl $(PERLASM_SCHEME)
+
+GENERATE[bn-ia64.s]=asm/ia64.S
+GENERATE[ia64-mont.s]=asm/ia64-mont.pl $(LIB_CFLAGS) $(LIB_CPPFLAGS)
+
+GENERATE[parisc-mont.s]=asm/parisc-mont.pl $(PERLASM_SCHEME)
+
+# ppc - AIX, Linux, MacOS X...
+GENERATE[bn-ppc.s]=asm/ppc.pl $(PERLASM_SCHEME)
+GENERATE[ppc-mont.s]=asm/ppc-mont.pl $(PERLASM_SCHEME)
+GENERATE[ppc64-mont.s]=asm/ppc64-mont.pl $(PERLASM_SCHEME)
+
+GENERATE[alpha-mont.S]=asm/alpha-mont.pl $(PERLASM_SCHEME)
+
+GENERATE[armv4-mont.S]=asm/armv4-mont.pl $(PERLASM_SCHEME)
+INCLUDE[armv4-mont.o]=..
+GENERATE[armv4-gf2m.S]=asm/armv4-gf2m.pl $(PERLASM_SCHEME)
+INCLUDE[armv4-gf2m.o]=..
+GENERATE[armv8-mont.S]=asm/armv8-mont.pl $(PERLASM_SCHEME)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/rsaz_exp.c b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/rsaz_exp.c
new file mode 100644
index 000000000..22455b8a6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/rsaz_exp.c
@@ -0,0 +1,315 @@
+/*
+ * Copyright 2013-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2012, Intel Corporation. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Shay Gueron (1, 2), and Vlad Krasnov (1)
+ * (1) Intel Corporation, Israel Development Center, Haifa, Israel
+ * (2) University of Haifa, Israel
+ */
+
+#include <openssl/opensslconf.h>
+#include "rsaz_exp.h"
+
+#ifndef RSAZ_ENABLED
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+/*
+ * See crypto/bn/asm/rsaz-avx2.pl for further details.
+ */
+void rsaz_1024_norm2red_avx2(void *red, const void *norm);
+void rsaz_1024_mul_avx2(void *ret, const void *a, const void *b,
+                        const void *n, BN_ULONG k);
+void rsaz_1024_sqr_avx2(void *ret, const void *a, const void *n, BN_ULONG k,
+                        int cnt);
+void rsaz_1024_scatter5_avx2(void *tbl, const void *val, int i);
+void rsaz_1024_gather5_avx2(void *val, const void *tbl, int i);
+void rsaz_1024_red2norm_avx2(void *norm, const void *red);
+
+#if defined(__GNUC__)
+# define ALIGN64        __attribute__((aligned(64)))
+#elif defined(_MSC_VER)
+# define ALIGN64        __declspec(align(64))
+#elif defined(__SUNPRO_C)
+# define ALIGN64
+# pragma align 64(one,two80)
+#else
+/* not fatal, might hurt performance a little */
+# define ALIGN64
+#endif
+
+ALIGN64 static const BN_ULONG one[40] = {
+    1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+    0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0
+};
+
+ALIGN64 static const BN_ULONG two80[40] = {
+    0, 0, 1 << 22, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+    0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0
+};
+
+void RSAZ_1024_mod_exp_avx2(BN_ULONG result_norm[16],
+                            const BN_ULONG base_norm[16],
+                            const BN_ULONG exponent[16],
+                            const BN_ULONG m_norm[16], const BN_ULONG RR[16],
+                            BN_ULONG k0)
+{
+    unsigned char storage[320 * 3 + 32 * 9 * 16 + 64]; /* 5.5KB */
+    unsigned char *p_str = storage + (64 - ((size_t)storage % 64));
+    unsigned char *a_inv, *m, *result;
+    unsigned char *table_s = p_str + 320 * 3;
+    unsigned char *R2 = table_s; /* borrow */
+    int index;
+    int wvalue;
+
+    if ((((size_t)p_str & 4095) + 320) >> 12) {
+        result = p_str;
+        a_inv = p_str + 320;
+        m = p_str + 320 * 2;    /* should not cross page */
+    } else {
+        m = p_str;              /* should not cross page */
+        result = p_str + 320;
+        a_inv = p_str + 320 * 2;
+    }
+
+    rsaz_1024_norm2red_avx2(m, m_norm);
+    rsaz_1024_norm2red_avx2(a_inv, base_norm);
+    rsaz_1024_norm2red_avx2(R2, RR);
+
+    rsaz_1024_mul_avx2(R2, R2, R2, m, k0);
+    rsaz_1024_mul_avx2(R2, R2, two80, m, k0);
+
+    /* table[0] = 1 */
+    rsaz_1024_mul_avx2(result, R2, one, m, k0);
+    /* table[1] = a_inv^1 */
+    rsaz_1024_mul_avx2(a_inv, a_inv, R2, m, k0);
+
+    rsaz_1024_scatter5_avx2(table_s, result, 0);
+    rsaz_1024_scatter5_avx2(table_s, a_inv, 1);
+
+    /* table[2] = a_inv^2 */
+    rsaz_1024_sqr_avx2(result, a_inv, m, k0, 1);
+    rsaz_1024_scatter5_avx2(table_s, result, 2);
+#if 0
+    /* this is almost 2x smaller and less than 1% slower */
+    for (index = 3; index < 32; index++) {
+        rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+        rsaz_1024_scatter5_avx2(table_s, result, index);
+    }
+#else
+    /* table[4] = a_inv^4 */
+    rsaz_1024_sqr_avx2(result, result, m, k0, 1);
+    rsaz_1024_scatter5_avx2(table_s, result, 4);
+    /* table[8] = a_inv^8 */
+    rsaz_1024_sqr_avx2(result, result, m, k0, 1);
+    rsaz_1024_scatter5_avx2(table_s, result, 8);
+    /* table[16] = a_inv^16 */
+    rsaz_1024_sqr_avx2(result, result, m, k0, 1);
+    rsaz_1024_scatter5_avx2(table_s, result, 16);
+    /* table[17] = a_inv^17 */
+    rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+    rsaz_1024_scatter5_avx2(table_s, result, 17);
+
+    /* table[3] */
+    rsaz_1024_gather5_avx2(result, table_s, 2);
+    rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+    rsaz_1024_scatter5_avx2(table_s, result, 3);
+    /* table[6] */
+    rsaz_1024_sqr_avx2(result, result, m, k0, 1);
+    rsaz_1024_scatter5_avx2(table_s, result, 6);
+    /* table[12] */
+    rsaz_1024_sqr_avx2(result, result, m, k0, 1);
+    rsaz_1024_scatter5_avx2(table_s, result, 12);
+    /* table[24] */
+    rsaz_1024_sqr_avx2(result, result, m, k0, 1);
+    rsaz_1024_scatter5_avx2(table_s, result, 24);
+    /* table[25] */
+    rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+    rsaz_1024_scatter5_avx2(table_s, result, 25);
+
+    /* table[5] */
+    rsaz_1024_gather5_avx2(result, table_s, 4);
+    rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+    rsaz_1024_scatter5_avx2(table_s, result, 5);
+    /* table[10] */
+    rsaz_1024_sqr_avx2(result, result, m, k0, 1);
+    rsaz_1024_scatter5_avx2(table_s, result, 10);
+    /* table[20] */
+    rsaz_1024_sqr_avx2(result, result, m, k0, 1);
+    rsaz_1024_scatter5_avx2(table_s, result, 20);
+    /* table[21] */
+    rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+    rsaz_1024_scatter5_avx2(table_s, result, 21);
+
+    /* table[7] */
+    rsaz_1024_gather5_avx2(result, table_s, 6);
+    rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+    rsaz_1024_scatter5_avx2(table_s, result, 7);
+    /* table[14] */
+    rsaz_1024_sqr_avx2(result, result, m, k0, 1);
+    rsaz_1024_scatter5_avx2(table_s, result, 14);
+    /* table[28] */
+    rsaz_1024_sqr_avx2(result, result, m, k0, 1);
+    rsaz_1024_scatter5_avx2(table_s, result, 28);
+    /* table[29] */
+    rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+    rsaz_1024_scatter5_avx2(table_s, result, 29);
+
+    /* table[9] */
+    rsaz_1024_gather5_avx2(result, table_s, 8);
+    rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+    rsaz_1024_scatter5_avx2(table_s, result, 9);
+    /* table[18] */
+    rsaz_1024_sqr_avx2(result, result, m, k0, 1);
+    rsaz_1024_scatter5_avx2(table_s, result, 18);
+    /* table[19] */
+    rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+    rsaz_1024_scatter5_avx2(table_s, result, 19);
+
+    /* table[11] */
+    rsaz_1024_gather5_avx2(result, table_s, 10);
+    rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+    rsaz_1024_scatter5_avx2(table_s, result, 11);
+    /* table[22] */
+    rsaz_1024_sqr_avx2(result, result, m, k0, 1);
+    rsaz_1024_scatter5_avx2(table_s, result, 22);
+    /* table[23] */
+    rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+    rsaz_1024_scatter5_avx2(table_s, result, 23);
+
+    /* table[13] */
+    rsaz_1024_gather5_avx2(result, table_s, 12);
+    rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+    rsaz_1024_scatter5_avx2(table_s, result, 13);
+    /* table[26] */
+    rsaz_1024_sqr_avx2(result, result, m, k0, 1);
+    rsaz_1024_scatter5_avx2(table_s, result, 26);
+    /* table[27] */
+    rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+    rsaz_1024_scatter5_avx2(table_s, result, 27);
+
+    /* table[15] */
+    rsaz_1024_gather5_avx2(result, table_s, 14);
+    rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+    rsaz_1024_scatter5_avx2(table_s, result, 15);
+    /* table[30] */
+    rsaz_1024_sqr_avx2(result, result, m, k0, 1);
+    rsaz_1024_scatter5_avx2(table_s, result, 30);
+    /* table[31] */
+    rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+    rsaz_1024_scatter5_avx2(table_s, result, 31);
+#endif
+
+    /* load first window */
+    p_str = (unsigned char *)exponent;
+    wvalue = p_str[127] >> 3;
+    rsaz_1024_gather5_avx2(result, table_s, wvalue);
+
+    index = 1014;
+
+    while (index > -1) {        /* loop for the remaining 127 windows */
+
+        rsaz_1024_sqr_avx2(result, result, m, k0, 5);
+
+        wvalue = (p_str[(index / 8) + 1] << 8) | p_str[index / 8];
+        wvalue = (wvalue >> (index % 8)) & 31;
+        index -= 5;
+
+        rsaz_1024_gather5_avx2(a_inv, table_s, wvalue); /* borrow a_inv */
+        rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+    }
+
+    /* square four times */
+    rsaz_1024_sqr_avx2(result, result, m, k0, 4);
+
+    wvalue = p_str[0] & 15;
+
+    rsaz_1024_gather5_avx2(a_inv, table_s, wvalue); /* borrow a_inv */
+    rsaz_1024_mul_avx2(result, result, a_inv, m, k0);
+
+    /* from Montgomery */
+    rsaz_1024_mul_avx2(result, result, one, m, k0);
+
+    rsaz_1024_red2norm_avx2(result_norm, result);
+
+    OPENSSL_cleanse(storage, sizeof(storage));
+}
+
+/*
+ * See crypto/bn/rsaz-x86_64.pl for further details.
+ */
+void rsaz_512_mul(void *ret, const void *a, const void *b, const void *n,
+                  BN_ULONG k);
+void rsaz_512_mul_scatter4(void *ret, const void *a, const void *n,
+                           BN_ULONG k, const void *tbl, unsigned int power);
+void rsaz_512_mul_gather4(void *ret, const void *a, const void *tbl,
+                          const void *n, BN_ULONG k, unsigned int power);
+void rsaz_512_mul_by_one(void *ret, const void *a, const void *n, BN_ULONG k);
+void rsaz_512_sqr(void *ret, const void *a, const void *n, BN_ULONG k,
+                  int cnt);
+void rsaz_512_scatter4(void *tbl, const BN_ULONG *val, int power);
+void rsaz_512_gather4(BN_ULONG *val, const void *tbl, int power);
+
+void RSAZ_512_mod_exp(BN_ULONG result[8],
+                      const BN_ULONG base[8], const BN_ULONG exponent[8],
+                      const BN_ULONG m[8], BN_ULONG k0, const BN_ULONG RR[8])
+{
+    unsigned char storage[16 * 8 * 8 + 64 * 2 + 64]; /* 1.2KB */
+    unsigned char *table = storage + (64 - ((size_t)storage % 64));
+    BN_ULONG *a_inv = (BN_ULONG *)(table + 16 * 8 * 8);
+    BN_ULONG *temp = (BN_ULONG *)(table + 16 * 8 * 8 + 8 * 8);
+    unsigned char *p_str = (unsigned char *)exponent;
+    int index;
+    unsigned int wvalue;
+
+    /* table[0] = 1_inv */
+    temp[0] = 0 - m[0];
+    temp[1] = ~m[1];
+    temp[2] = ~m[2];
+    temp[3] = ~m[3];
+    temp[4] = ~m[4];
+    temp[5] = ~m[5];
+    temp[6] = ~m[6];
+    temp[7] = ~m[7];
+    rsaz_512_scatter4(table, temp, 0);
+
+    /* table [1] = a_inv^1 */
+    rsaz_512_mul(a_inv, base, RR, m, k0);
+    rsaz_512_scatter4(table, a_inv, 1);
+
+    /* table [2] = a_inv^2 */
+    rsaz_512_sqr(temp, a_inv, m, k0, 1);
+    rsaz_512_scatter4(table, temp, 2);
+
+    for (index = 3; index < 16; index++)
+        rsaz_512_mul_scatter4(temp, a_inv, m, k0, table, index);
+
+    /* load first window */
+    wvalue = p_str[63];
+
+    rsaz_512_gather4(temp, table, wvalue >> 4);
+    rsaz_512_sqr(temp, temp, m, k0, 4);
+    rsaz_512_mul_gather4(temp, temp, table, m, k0, wvalue & 0xf);
+
+    for (index = 62; index >= 0; index--) {
+        wvalue = p_str[index];
+
+        rsaz_512_sqr(temp, temp, m, k0, 4);
+        rsaz_512_mul_gather4(temp, temp, table, m, k0, wvalue >> 4);
+
+        rsaz_512_sqr(temp, temp, m, k0, 4);
+        rsaz_512_mul_gather4(temp, temp, table, m, k0, wvalue & 0x0f);
+    }
+
+    /* from Montgomery */
+    rsaz_512_mul_by_one(result, temp, m, k0);
+
+    OPENSSL_cleanse(storage, sizeof(storage));
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/bn/rsaz_exp.h b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/rsaz_exp.h
new file mode 100644
index 000000000..c5864f8aa
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/bn/rsaz_exp.h
@@ -0,0 +1,40 @@
+/*
+ * Copyright 2013-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2012, Intel Corporation. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Shay Gueron (1, 2), and Vlad Krasnov (1)
+ * (1) Intel Corporation, Israel Development Center, Haifa, Israel
+ * (2) University of Haifa, Israel
+ */
+
+#ifndef RSAZ_EXP_H
+# define RSAZ_EXP_H
+
+# undef RSAZ_ENABLED
+# if defined(OPENSSL_BN_ASM_MONT) && \
+        (defined(__x86_64) || defined(__x86_64__) || \
+         defined(_M_AMD64) || defined(_M_X64))
+#  define RSAZ_ENABLED
+
+#  include <openssl/bn.h>
+
+void RSAZ_1024_mod_exp_avx2(BN_ULONG result[16],
+                            const BN_ULONG base_norm[16],
+                            const BN_ULONG exponent[16],
+                            const BN_ULONG m_norm[16], const BN_ULONG RR[16],
+                            BN_ULONG k0);
+int rsaz_avx2_eligible(void);
+
+void RSAZ_512_mod_exp(BN_ULONG result[8],
+                      const BN_ULONG base_norm[8], const BN_ULONG exponent[8],
+                      const BN_ULONG m_norm[8], BN_ULONG k0,
+                      const BN_ULONG RR[8]);
+
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/buffer/buf_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/buffer/buf_err.c
new file mode 100644
index 000000000..7e6e53226
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/buffer/buf_err.c
@@ -0,0 +1,38 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/buffererr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA BUF_str_functs[] = {
+    {ERR_PACK(ERR_LIB_BUF, BUF_F_BUF_MEM_GROW, 0), "BUF_MEM_grow"},
+    {ERR_PACK(ERR_LIB_BUF, BUF_F_BUF_MEM_GROW_CLEAN, 0), "BUF_MEM_grow_clean"},
+    {ERR_PACK(ERR_LIB_BUF, BUF_F_BUF_MEM_NEW, 0), "BUF_MEM_new"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA BUF_str_reasons[] = {
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_BUF_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(BUF_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(BUF_str_functs);
+        ERR_load_strings_const(BUF_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/buffer/buffer.c b/trunk/3rdparty/openssl-1.1-fit/crypto/buffer/buffer.c
new file mode 100644
index 000000000..72258abb9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/buffer/buffer.c
@@ -0,0 +1,165 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+
+/*
+ * LIMIT_BEFORE_EXPANSION is the maximum n such that (n+3)/3*4 < 2**31. That
+ * function is applied in several functions in this file and this limit
+ * ensures that the result fits in an int.
+ */
+#define LIMIT_BEFORE_EXPANSION 0x5ffffffc
+
+BUF_MEM *BUF_MEM_new_ex(unsigned long flags)
+{
+    BUF_MEM *ret;
+
+    ret = BUF_MEM_new();
+    if (ret != NULL)
+        ret->flags = flags;
+    return ret;
+}
+
+BUF_MEM *BUF_MEM_new(void)
+{
+    BUF_MEM *ret;
+
+    ret = OPENSSL_zalloc(sizeof(*ret));
+    if (ret == NULL) {
+        BUFerr(BUF_F_BUF_MEM_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    return ret;
+}
+
+void BUF_MEM_free(BUF_MEM *a)
+{
+    if (a == NULL)
+        return;
+    if (a->data != NULL) {
+        if (a->flags & BUF_MEM_FLAG_SECURE)
+            OPENSSL_secure_clear_free(a->data, a->max);
+        else
+            OPENSSL_clear_free(a->data, a->max);
+    }
+    OPENSSL_free(a);
+}
+
+/* Allocate a block of secure memory; copy over old data if there
+ * was any, and then free it. */
+static char *sec_alloc_realloc(BUF_MEM *str, size_t len)
+{
+    char *ret;
+
+    ret = OPENSSL_secure_malloc(len);
+    if (str->data != NULL) {
+        if (ret != NULL) {
+            memcpy(ret, str->data, str->length);
+            OPENSSL_secure_clear_free(str->data, str->length);
+            str->data = NULL;
+        }
+    }
+    return ret;
+}
+
+size_t BUF_MEM_grow(BUF_MEM *str, size_t len)
+{
+    char *ret;
+    size_t n;
+
+    if (str->length >= len) {
+        str->length = len;
+        return len;
+    }
+    if (str->max >= len) {
+        if (str->data != NULL)
+            memset(&str->data[str->length], 0, len - str->length);
+        str->length = len;
+        return len;
+    }
+    /* This limit is sufficient to ensure (len+3)/3*4 < 2**31 */
+    if (len > LIMIT_BEFORE_EXPANSION) {
+        BUFerr(BUF_F_BUF_MEM_GROW, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    n = (len + 3) / 3 * 4;
+    if ((str->flags & BUF_MEM_FLAG_SECURE))
+        ret = sec_alloc_realloc(str, n);
+    else
+        ret = OPENSSL_realloc(str->data, n);
+    if (ret == NULL) {
+        BUFerr(BUF_F_BUF_MEM_GROW, ERR_R_MALLOC_FAILURE);
+        len = 0;
+    } else {
+        str->data = ret;
+        str->max = n;
+        memset(&str->data[str->length], 0, len - str->length);
+        str->length = len;
+    }
+    return len;
+}
+
+size_t BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
+{
+    char *ret;
+    size_t n;
+
+    if (str->length >= len) {
+        if (str->data != NULL)
+            memset(&str->data[len], 0, str->length - len);
+        str->length = len;
+        return len;
+    }
+    if (str->max >= len) {
+        memset(&str->data[str->length], 0, len - str->length);
+        str->length = len;
+        return len;
+    }
+    /* This limit is sufficient to ensure (len+3)/3*4 < 2**31 */
+    if (len > LIMIT_BEFORE_EXPANSION) {
+        BUFerr(BUF_F_BUF_MEM_GROW_CLEAN, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    n = (len + 3) / 3 * 4;
+    if ((str->flags & BUF_MEM_FLAG_SECURE))
+        ret = sec_alloc_realloc(str, n);
+    else
+        ret = OPENSSL_clear_realloc(str->data, str->max, n);
+    if (ret == NULL) {
+        BUFerr(BUF_F_BUF_MEM_GROW_CLEAN, ERR_R_MALLOC_FAILURE);
+        len = 0;
+    } else {
+        str->data = ret;
+        str->max = n;
+        memset(&str->data[str->length], 0, len - str->length);
+        str->length = len;
+    }
+    return len;
+}
+
+void BUF_reverse(unsigned char *out, const unsigned char *in, size_t size)
+{
+    size_t i;
+    if (in) {
+        out += size - 1;
+        for (i = 0; i < size; i++)
+            *out-- = *in++;
+    } else {
+        unsigned char *q;
+        char c;
+        q = out + size - 1;
+        for (i = 0; i < size / 2; i++) {
+            c = *q;
+            *q-- = *out;
+            *out++ = c;
+        }
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/buffer/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/buffer/build.info
new file mode 100644
index 000000000..54da1f92a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/buffer/build.info
@@ -0,0 +1,2 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=buffer.c buf_err.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/build.info
new file mode 100644
index 000000000..2c619c62e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/build.info
@@ -0,0 +1,39 @@
+LIBS=../libcrypto
+SOURCE[../libcrypto]=\
+        cryptlib.c mem.c mem_dbg.c cversion.c ex_data.c cpt_err.c \
+        ebcdic.c uid.c o_time.c o_str.c o_dir.c o_fopen.c ctype.c \
+        threads_pthread.c threads_win.c threads_none.c getenv.c \
+        o_init.c o_fips.c mem_sec.c init.c {- $target{cpuid_asm_src} -} \
+        {- $target{uplink_aux_src} -}
+EXTRA=  ../ms/uplink-x86.pl ../ms/uplink.c ../ms/applink.c \
+        x86cpuid.pl x86_64cpuid.pl ia64cpuid.S \
+        ppccpuid.pl pariscid.pl alphacpuid.pl arm64cpuid.pl armv4cpuid.pl
+
+DEPEND[cversion.o]=buildinf.h
+GENERATE[buildinf.h]=../util/mkbuildinf.pl "$(CC) $(LIB_CFLAGS) $(CPPFLAGS_Q)" "$(PLATFORM)"
+DEPEND[buildinf.h]=../configdata.pm
+
+GENERATE[uplink-x86.s]=../ms/uplink-x86.pl $(PERLASM_SCHEME)
+GENERATE[uplink-x86_64.s]=../ms/uplink-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[uplink-ia64.s]=../ms/uplink-ia64.pl $(PERLASM_SCHEME)
+
+GENERATE[x86cpuid.s]=x86cpuid.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+DEPEND[x86cpuid.s]=perlasm/x86asm.pl
+
+GENERATE[x86_64cpuid.s]=x86_64cpuid.pl $(PERLASM_SCHEME)
+
+GENERATE[ia64cpuid.s]=ia64cpuid.S
+GENERATE[ppccpuid.s]=ppccpuid.pl $(PERLASM_SCHEME)
+GENERATE[pariscid.s]=pariscid.pl $(PERLASM_SCHEME)
+GENERATE[alphacpuid.s]=alphacpuid.pl
+GENERATE[arm64cpuid.S]=arm64cpuid.pl $(PERLASM_SCHEME)
+INCLUDE[arm64cpuid.o]=.
+GENERATE[armv4cpuid.S]=armv4cpuid.pl $(PERLASM_SCHEME)
+INCLUDE[armv4cpuid.o]=.
+GENERATE[s390xcpuid.S]=s390xcpuid.pl $(PERLASM_SCHEME)
+INCLUDE[s390xcpuid.o]=.
+
+IF[{- $config{target} =~ /^(?:Cygwin|mingw|VC-)/ -}]
+  SHARED_SOURCE[../libcrypto]=dllmain.c
+ENDIF
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/c64xpluscpuid.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/c64xpluscpuid.pl
new file mode 100644
index 000000000..b7b11d503
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/c64xpluscpuid.pl
@@ -0,0 +1,287 @@
+#! /usr/bin/env perl
+# Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+$code.=<<___;
+	.text
+
+	.if	.ASSEMBLER_VERSION<7000000
+	.asg	0,__TI_EABI__
+	.endif
+	.if	__TI_EABI__
+	.asg	OPENSSL_rdtsc,_OPENSSL_rdtsc
+	.asg	OPENSSL_cleanse,_OPENSSL_cleanse
+	.asg	CRYPTO_memcmp,_CRYPTO_memcmp
+	.asg	OPENSSL_atomic_add,_OPENSSL_atomic_add
+	.asg	OPENSSL_wipe_cpu,_OPENSSL_wipe_cpu
+	.asg	OPENSSL_instrument_bus,_OPENSSL_instrument_bus
+	.asg	OPENSSL_instrument_bus2,_OPENSSL_instrument_bus2
+	.endif
+
+	.asg	B3,RA
+
+	.global	_OPENSSL_rdtsc
+_OPENSSL_rdtsc:
+	.asmfunc
+	B	RA
+	MVC	TSCL,B0
+	MVC	TSCH,B1
+  [!B0]	MVC	B0,TSCL		; start TSC
+	MV	B0,A4
+	MV	B1,A5
+	.endasmfunc
+
+	.global	_OPENSSL_cleanse
+_OPENSSL_cleanse:
+	.asmfunc
+	ZERO	A3:A2
+||	ZERO	B2
+||	SHRU	B4,3,B0		; is length >= 8
+||	ADD	1,A4,B6
+  [!B0]	BNOP	RA
+||	ZERO	A1
+||	ZERO	B1
+   [B0]	MVC	B0,ILC
+||[!B0]	CMPLT	0,B4,A1
+||[!B0]	CMPLT	1,B4,B1
+   [A1]	STB	A2,*A4++[2]
+|| [B1] STB	B2,*B6++[2]
+||[!B0]	CMPLT	2,B4,A1
+||[!B0]	CMPLT	3,B4,B1
+   [A1]	STB	A2,*A4++[2]
+|| [B1] STB	B2,*B6++[2]
+||[!B0]	CMPLT	4,B4,A1
+||[!B0]	CMPLT	5,B4,B1
+   [A1]	STB	A2,*A4++[2]
+|| [B1] STB	B2,*B6++[2]
+||[!B0]	CMPLT	6,B4,A1
+   [A1]	STB	A2,*A4++[2]
+
+	SPLOOP	1
+	STNDW	A3:A2,*A4++
+||	SUB	B4,8,B4
+	SPKERNEL
+
+	MV	B4,B0		; remaining bytes
+||	ADD	1,A4,B6
+||	BNOP	RA
+   [B0]	CMPLT	0,B0,A1
+|| [B0]	CMPLT	1,B0,B1
+   [A1]	STB	A2,*A4++[2]
+|| [B1] STB	B2,*B6++[2]
+|| [B0]	CMPLT	2,B0,A1
+|| [B0]	CMPLT	3,B0,B1
+   [A1]	STB	A2,*A4++[2]
+|| [B1] STB	B2,*B6++[2]
+|| [B0]	CMPLT	4,B0,A1
+|| [B0]	CMPLT	5,B0,B1
+   [A1]	STB	A2,*A4++[2]
+|| [B1] STB	B2,*B6++[2]
+|| [B0]	CMPLT	6,B0,A1
+   [A1]	STB	A2,*A4++[2]
+	.endasmfunc
+
+	.global	_CRYPTO_memcmp
+_CRYPTO_memcmp:
+	.asmfunc
+	MV	A6,B0
+  [!B0]	BNOP	RA
+||[!B0]	ZERO	A4
+   [B0]	MVC	B0,ILC
+|| [B0]	ZERO	A0
+	NOP	4
+
+	SPLOOP	1
+	LDBU	*A4++,A1
+||	LDBU	*B4++,B1
+	NOP	4
+	XOR.L	B1,A1,A2
+	SPKERNEL 1,0
+||	OR.S	A2,A0,A0
+
+	BNOP	RA,3
+	ZERO.L	A4
+  [A0]	MVK	1,A4
+	.endasmfunc
+
+	.global	_OPENSSL_atomic_add
+_OPENSSL_atomic_add:
+	.asmfunc
+	MV	A4,B0
+atomic_add?:
+	LL	*B0,B5
+	NOP	4
+	ADD	B4,B5,B5
+	SL	B5,*B0
+	CMTL	*B0,B1
+	NOP	4
+  [!B1]	B	atomic_add?
+   [B1]	BNOP	RA,4
+	MV	B5,A4
+	.endasmfunc
+
+	.global	_OPENSSL_wipe_cpu
+_OPENSSL_wipe_cpu:
+	.asmfunc
+	ZERO	A0
+||	ZERO	B0
+||	ZERO	A1
+||	ZERO	B1
+	ZERO	A3:A2
+||	MVD	B0,B2
+||	ZERO	A4
+||	ZERO	B4
+||	ZERO	A5
+||	ZERO	B5
+||	BNOP	RA
+	ZERO	A7:A6
+||	ZERO	B7:B6
+||	ZERO	A8
+||	ZERO	B8
+||	ZERO	A9
+||	ZERO	B9
+	ZERO	A17:A16
+||	ZERO	B17:B16
+||	ZERO	A18
+||	ZERO	B18
+||	ZERO	A19
+||	ZERO	B19
+	ZERO	A21:A20
+||	ZERO	B21:B20
+||	ZERO	A22
+||	ZERO	B22
+||	ZERO	A23
+||	ZERO	B23
+	ZERO	A25:A24
+||	ZERO	B25:B24
+||	ZERO	A26
+||	ZERO	B26
+||	ZERO	A27
+||	ZERO	B27
+	ZERO	A29:A28
+||	ZERO	B29:B28
+||	ZERO	A30
+||	ZERO	B30
+||	ZERO	A31
+||	ZERO	B31
+	.endasmfunc
+
+CLFLUSH	.macro	CONTROL,ADDR,LEN
+	B	passthrough?
+||	STW	ADDR,*CONTROL[0]
+	STW	LEN,*CONTROL[1]
+spinlock?:
+	LDW	*CONTROL[1],A0
+	NOP	3
+passthrough?:
+	NOP
+  [A0]	BNOP	spinlock?,5
+	.endm
+
+	.global	_OPENSSL_instrument_bus
+_OPENSSL_instrument_bus:
+	.asmfunc
+	MV	B4,B0			; reassign sizeof(output)
+||	MV	A4,B4			; reassign output
+||	MVK	0x00004030,A3
+	MV	B0,A4			; return value
+||	MVK	1,A1
+||	MVKH	0x01840000,A3		; L1DWIBAR
+	MVC	TSCL,B8			; collect 1st tick
+||	MVK	0x00004010,A5
+	MV	B8,B9			; lasttick = tick
+||	MVK	0,B7			; lastdiff = 0
+||	MVKH	0x01840000,A5		; L2WIBAR
+	CLFLUSH	A3,B4,A1		; write-back and invalidate L1D line
+	CLFLUSH	A5,B4,A1		; write-back and invalidate L2 line
+	LL	*B4,B5
+	NOP	4
+	ADD	B7,B5,B5
+	SL	B5,*B4
+	CMTL	*B4,B1
+	NOP	4
+	STW	B5,*B4
+bus_loop1?:
+	MVC	TSCL,B8
+|| [B0]	SUB	B0,1,B0
+	SUB	B8,B9,B7		; lastdiff = tick - lasttick
+||	MV	B8,B9			; lasttick = tick
+	CLFLUSH	A3,B4,A1		; write-back and invalidate L1D line
+	CLFLUSH	A5,B4,A1		; write-back and invalidate L2 line
+	LL	*B4,B5
+	NOP	4
+	ADD	B7,B5,B5
+	SL	B5,*B4
+	CMTL	*B4,B1
+	STW	B5,*B4			; [!B1] is removed to flatten samples
+||	ADDK	4,B4
+|| [B0]	BNOP	bus_loop1?,5
+
+	BNOP	RA,5
+	.endasmfunc
+
+	.global	_OPENSSL_instrument_bus2
+_OPENSSL_instrument_bus2:
+	.asmfunc
+	MV	A6,B0			; reassign max
+||	MV	B4,A6			; reassign sizeof(output)
+||	MVK	0x00004030,A3
+	MV	A4,B4			; reassign output
+||	MVK	0,A4			; return value
+||	MVK	1,A1
+||	MVKH	0x01840000,A3		; L1DWIBAR
+
+	MVC	TSCL,B8			; collect 1st tick
+||	MVK	0x00004010,A5
+	MV	B8,B9			; lasttick = tick
+||	MVK	0,B7			; lastdiff = 0
+||	MVKH	0x01840000,A5		; L2WIBAR
+	CLFLUSH	A3,B4,A1		; write-back and invalidate L1D line
+	CLFLUSH	A5,B4,A1		; write-back and invalidate L2 line
+	LL	*B4,B5
+	NOP	4
+	ADD	B7,B5,B5
+	SL	B5,*B4
+	CMTL	*B4,B1
+	NOP	4
+	STW	B5,*B4
+
+	MVC	TSCL,B8			; collect 1st diff
+	SUB	B8,B9,B7		; lastdiff = tick - lasttick
+||	MV	B8,B9			; lasttick = tick
+||	SUB	B0,1,B0
+bus_loop2?:
+	CLFLUSH	A3,B4,A1		; write-back and invalidate L1D line
+	CLFLUSH	A5,B4,A1		; write-back and invalidate L2 line
+	LL	*B4,B5
+	NOP	4
+	ADD	B7,B5,B5
+	SL	B5,*B4
+	CMTL	*B4,B1
+	STW	B5,*B4			; [!B1] is removed to flatten samples
+||[!B0]	BNOP	bus_loop2_done?,2
+||	SUB	B0,1,B0
+	MVC	TSCL,B8
+	SUB	B8,B9,B8
+||	MV	B8,B9
+	CMPEQ	B8,B7,B2
+||	MV	B8,B7
+  [!B2]	ADDAW	B4,1,B4
+||[!B2]	ADDK	1,A4
+	CMPEQ	A4,A6,A2
+  [!A2]	BNOP	bus_loop2?,5
+
+bus_loop2_done?:
+	BNOP	RA,5
+	.endasmfunc
+___
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/asm/cmll-x86.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/asm/cmll-x86.pl
new file mode 100644
index 000000000..55af9b4e3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/asm/cmll-x86.pl
@@ -0,0 +1,1150 @@
+#! /usr/bin/env perl
+# Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Copyright (c) 2008 Andy Polyakov <appro@openssl.org>
+#
+# This module may be used under the terms of either the GNU General
+# Public License version 2 or later, the GNU Lesser General Public
+# License version 2.1 or later, the Mozilla Public License version
+# 1.1 or the BSD License. The exact terms of either license are
+# distributed along with this module. For further details see
+# http://www.openssl.org/~appro/camellia/.
+# ====================================================================
+
+# Performance in cycles per processed byte (less is better) in
+# 'openssl speed ...' benchmark:
+#
+#			AMD K8	Core2	PIII	P4
+# -evp camellia-128-ecb	21.5	22.8	27.0	28.9
+# + over gcc 3.4.6	+90/11% +70/10%	+53/4%	+160/64%
+# + over icc 8.0	+48/19% +21/15%	+21/17%	+55/37%
+#
+# camellia-128-cbc	17.3	21.1	23.9	25.9
+#
+# 128-bit key setup	196	280	256	240	cycles/key
+# + over gcc 3.4.6	+30/0%	+17/11%	+11/0%	+63/40%
+# + over icc 8.0	+18/3%	+10/0%	+10/3%	+21/10%
+#
+# Pairs of numbers in "+" rows represent performance improvement over
+# compiler generated position-independent code, PIC, and non-PIC
+# respectively. PIC results are of greater relevance, as this module
+# is position-independent, i.e. suitable for a shared library or PIE.
+# Position independence "costs" one register, which is why compilers
+# are so close with non-PIC results, they have an extra register to
+# spare. CBC results are better than ECB ones thanks to "zero-copy"
+# private _x86_* interface, and are ~30-40% better than with compiler
+# generated cmll_cbc.o, and reach ~80-90% of x86_64 performance on
+# same CPU (where applicable).
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$OPENSSL=1;
+
+$output = pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0],$ARGV[$#ARGV] eq "386");
+
+@T=("eax","ebx","ecx","edx");
+$idx="esi";
+$key="edi";
+$Tbl="ebp";
+
+# stack frame layout in _x86_Camellia_* routines, frame is allocated
+# by caller
+$__ra=&DWP(0,"esp");	# return address
+$__s0=&DWP(4,"esp");	# s0 backing store
+$__s1=&DWP(8,"esp");	# s1 backing store
+$__s2=&DWP(12,"esp");	# s2 backing store
+$__s3=&DWP(16,"esp");	# s3 backing store
+$__end=&DWP(20,"esp");	# pointer to end/start of key schedule
+
+# stack frame layout in Camellia_[en|crypt] routines, which differs from
+# above by 4 and overlaps by pointer to end/start of key schedule
+$_end=&DWP(16,"esp");
+$_esp=&DWP(20,"esp");
+
+# const unsigned int Camellia_SBOX[4][256];
+# Well, sort of... Camellia_SBOX[0][] is interleaved with [1][],
+# and [2][] - with [3][]. This is done to optimize code size.
+$SBOX1_1110=0;		# Camellia_SBOX[0]
+$SBOX4_4404=4;		# Camellia_SBOX[1]
+$SBOX2_0222=2048;	# Camellia_SBOX[2]
+$SBOX3_3033=2052;	# Camellia_SBOX[3]
+&static_label("Camellia_SIGMA");
+&static_label("Camellia_SBOX");
+
+sub Camellia_Feistel {
+my $i=@_[0];
+my $seed=defined(@_[1])?@_[1]:0;
+my $scale=$seed<0?-8:8;
+my $frame=defined(@_[2])?@_[2]:0;
+my $j=($i&1)*2;
+my $t0=@T[($j)%4],$t1=@T[($j+1)%4],$t2=@T[($j+2)%4],$t3=@T[($j+3)%4];
+
+	&xor	($t0,$idx);				# t0^=key[0]
+	&xor	($t1,&DWP($seed+$i*$scale+4,$key));	# t1^=key[1]
+	&movz	($idx,&HB($t0));			# (t0>>8)&0xff
+	&mov	($t3,&DWP($SBOX3_3033,$Tbl,$idx,8));	# t3=SBOX3_3033[0]
+	&movz	($idx,&LB($t0));			# (t0>>0)&0xff
+	&xor	($t3,&DWP($SBOX4_4404,$Tbl,$idx,8));	# t3^=SBOX4_4404[0]
+	&shr	($t0,16);
+	&movz	($idx,&LB($t1));			# (t1>>0)&0xff
+	&mov	($t2,&DWP($SBOX1_1110,$Tbl,$idx,8));	# t2=SBOX1_1110[1]
+	&movz	($idx,&HB($t0));			# (t0>>24)&0xff
+	&xor	($t3,&DWP($SBOX1_1110,$Tbl,$idx,8));	# t3^=SBOX1_1110[0]
+	&movz	($idx,&HB($t1));			# (t1>>8)&0xff
+	&xor	($t2,&DWP($SBOX4_4404,$Tbl,$idx,8));	# t2^=SBOX4_4404[1]
+	&shr	($t1,16);
+	&movz	($t0,&LB($t0));				# (t0>>16)&0xff
+	&xor	($t3,&DWP($SBOX2_0222,$Tbl,$t0,8));	# t3^=SBOX2_0222[0]
+	&movz	($idx,&HB($t1));			# (t1>>24)&0xff
+	&mov	($t0,&DWP($frame+4*(($j+3)%4),"esp"));	# prefetch "s3"
+	&xor	($t2,$t3);				# t2^=t3
+	&rotr	($t3,8);				# t3=RightRotate(t3,8)
+	&xor	($t2,&DWP($SBOX2_0222,$Tbl,$idx,8));	# t2^=SBOX2_0222[1]
+	&movz	($idx,&LB($t1));			# (t1>>16)&0xff
+	&mov	($t1,&DWP($frame+4*(($j+2)%4),"esp"));	# prefetch "s2"
+	&xor	($t3,$t0);				# t3^=s3
+	&xor	($t2,&DWP($SBOX3_3033,$Tbl,$idx,8));	# t2^=SBOX3_3033[1]
+	&mov	($idx,&DWP($seed+($i+1)*$scale,$key));	# prefetch key[i+1]
+	&xor	($t3,$t2);				# t3^=t2
+	&mov	(&DWP($frame+4*(($j+3)%4),"esp"),$t3);	# s3=t3
+	&xor	($t2,$t1);				# t2^=s2
+	&mov	(&DWP($frame+4*(($j+2)%4),"esp"),$t2);	# s2=t2
+}
+
+# void Camellia_EncryptBlock_Rounds(
+#		int grandRounds,
+#		const Byte plaintext[],
+#		const KEY_TABLE_TYPE keyTable,
+#		Byte ciphertext[])
+&function_begin("Camellia_EncryptBlock_Rounds");
+	&mov	("eax",&wparam(0));	# load grandRounds
+	&mov	($idx,&wparam(1));	# load plaintext pointer
+	&mov	($key,&wparam(2));	# load key schedule pointer
+
+	&mov	("ebx","esp");
+	&sub	("esp",7*4);		# place for s[0-3],keyEnd,esp and ra
+	&and	("esp",-64);
+
+	# place stack frame just "above mod 1024" the key schedule
+	# this ensures that cache associativity of 2 suffices
+	&lea	("ecx",&DWP(-64-63,$key));
+	&sub	("ecx","esp");
+	&neg	("ecx");
+	&and	("ecx",0x3C0);	# modulo 1024, but aligned to cache-line
+	&sub	("esp","ecx");
+	&add	("esp",4);	# 4 is reserved for callee's return address
+
+	&shl	("eax",6);
+	&lea	("eax",&DWP(0,$key,"eax"));
+	&mov	($_esp,"ebx");	# save %esp
+	&mov	($_end,"eax");	# save keyEnd
+
+	&call	(&label("pic_point"));
+	&set_label("pic_point");
+	&blindpop($Tbl);
+	&lea	($Tbl,&DWP(&label("Camellia_SBOX")."-".&label("pic_point"),$Tbl));
+
+	&mov	(@T[0],&DWP(0,$idx));	# load plaintext
+	&mov	(@T[1],&DWP(4,$idx));
+	&mov	(@T[2],&DWP(8,$idx));
+	&bswap	(@T[0]);
+	&mov	(@T[3],&DWP(12,$idx));
+	&bswap	(@T[1]);
+	&bswap	(@T[2]);
+	&bswap	(@T[3]);
+
+	&call	("_x86_Camellia_encrypt");
+
+	&mov	("esp",$_esp);
+	&bswap	(@T[0]);
+	&mov	($idx,&wparam(3));	# load ciphertext pointer
+	&bswap	(@T[1]);
+	&bswap	(@T[2]);
+	&bswap	(@T[3]);
+	&mov	(&DWP(0,$idx),@T[0]);	# write ciphertext
+	&mov	(&DWP(4,$idx),@T[1]);
+	&mov	(&DWP(8,$idx),@T[2]);
+	&mov	(&DWP(12,$idx),@T[3]);
+&function_end("Camellia_EncryptBlock_Rounds");
+# V1.x API
+&function_begin_B("Camellia_EncryptBlock");
+	&mov	("eax",128);
+	&sub	("eax",&wparam(0));	# load keyBitLength
+	&mov	("eax",3);
+	&adc	("eax",0);		# keyBitLength==128?3:4
+	&mov	(&wparam(0),"eax");
+	&jmp	(&label("Camellia_EncryptBlock_Rounds"));
+&function_end_B("Camellia_EncryptBlock");
+
+if ($OPENSSL) {
+# void Camellia_encrypt(
+#		const unsigned char *in,
+#		unsigned char *out,
+#		const CAMELLIA_KEY *key)
+&function_begin("Camellia_encrypt");
+	&mov	($idx,&wparam(0));	# load plaintext pointer
+	&mov	($key,&wparam(2));	# load key schedule pointer
+
+	&mov	("ebx","esp");
+	&sub	("esp",7*4);		# place for s[0-3],keyEnd,esp and ra
+	&and	("esp",-64);
+	&mov	("eax",&DWP(272,$key));	# load grandRounds counter
+
+	# place stack frame just "above mod 1024" the key schedule
+	# this ensures that cache associativity of 2 suffices
+	&lea	("ecx",&DWP(-64-63,$key));
+	&sub	("ecx","esp");
+	&neg	("ecx");
+	&and	("ecx",0x3C0);	# modulo 1024, but aligned to cache-line
+	&sub	("esp","ecx");
+	&add	("esp",4);	# 4 is reserved for callee's return address
+
+	&shl	("eax",6);
+	&lea	("eax",&DWP(0,$key,"eax"));
+	&mov	($_esp,"ebx");	# save %esp
+	&mov	($_end,"eax");	# save keyEnd
+
+	&call	(&label("pic_point"));
+	&set_label("pic_point");
+	&blindpop($Tbl);
+	&lea	($Tbl,&DWP(&label("Camellia_SBOX")."-".&label("pic_point"),$Tbl));
+
+	&mov	(@T[0],&DWP(0,$idx));	# load plaintext
+	&mov	(@T[1],&DWP(4,$idx));
+	&mov	(@T[2],&DWP(8,$idx));
+	&bswap	(@T[0]);
+	&mov	(@T[3],&DWP(12,$idx));
+	&bswap	(@T[1]);
+	&bswap	(@T[2]);
+	&bswap	(@T[3]);
+
+	&call	("_x86_Camellia_encrypt");
+
+	&mov	("esp",$_esp);
+	&bswap	(@T[0]);
+	&mov	($idx,&wparam(1));	# load ciphertext pointer
+	&bswap	(@T[1]);
+	&bswap	(@T[2]);
+	&bswap	(@T[3]);
+	&mov	(&DWP(0,$idx),@T[0]);	# write ciphertext
+	&mov	(&DWP(4,$idx),@T[1]);
+	&mov	(&DWP(8,$idx),@T[2]);
+	&mov	(&DWP(12,$idx),@T[3]);
+&function_end("Camellia_encrypt");
+}
+
+&function_begin_B("_x86_Camellia_encrypt");
+	&xor	(@T[0],&DWP(0,$key));	# ^=key[0-3]
+	&xor	(@T[1],&DWP(4,$key));
+	&xor	(@T[2],&DWP(8,$key));
+	&xor	(@T[3],&DWP(12,$key));
+	&mov	($idx,&DWP(16,$key));	# prefetch key[4]
+
+	&mov	($__s0,@T[0]);		# save s[0-3]
+	&mov	($__s1,@T[1]);
+	&mov	($__s2,@T[2]);
+	&mov	($__s3,@T[3]);
+
+&set_label("loop",16);
+	for ($i=0;$i<6;$i++) { Camellia_Feistel($i,16,4); }
+
+	&add	($key,16*4);
+	&cmp	($key,$__end);
+	&je	(&label("done"));
+
+	# @T[0-1] are preloaded, $idx is preloaded with key[0]
+	&and	($idx,@T[0]);
+	 &mov	 (@T[3],$__s3);
+	&rotl	($idx,1);
+	 &mov	 (@T[2],@T[3]);
+	&xor	(@T[1],$idx);
+	 &or	 (@T[2],&DWP(12,$key));
+	&mov	($__s1,@T[1]);		# s1^=LeftRotate(s0&key[0],1);
+	 &xor	 (@T[2],$__s2);
+
+	&mov	($idx,&DWP(4,$key));
+	 &mov	 ($__s2,@T[2]);		# s2^=s3|key[3];
+	&or	($idx,@T[1]);
+	 &and	 (@T[2],&DWP(8,$key));
+	&xor	(@T[0],$idx);
+	 &rotl	 (@T[2],1);
+	&mov	($__s0,@T[0]);		# s0^=s1|key[1];
+	 &xor	 (@T[3],@T[2]);
+	&mov	($idx,&DWP(16,$key));		# prefetch key[4]
+	 &mov	 ($__s3,@T[3]);		# s3^=LeftRotate(s2&key[2],1);
+	&jmp	(&label("loop"));
+
+&set_label("done",8);
+	&mov	(@T[2],@T[0]);		# SwapHalf
+	&mov	(@T[3],@T[1]);
+	&mov	(@T[0],$__s2);
+	&mov	(@T[1],$__s3);
+	&xor	(@T[0],$idx);		# $idx is preloaded with key[0]
+	&xor	(@T[1],&DWP(4,$key));
+	&xor	(@T[2],&DWP(8,$key));
+	&xor	(@T[3],&DWP(12,$key));
+	&ret	();
+&function_end_B("_x86_Camellia_encrypt");
+
+# void Camellia_DecryptBlock_Rounds(
+#		int grandRounds,
+#		const Byte ciphertext[],
+#		const KEY_TABLE_TYPE keyTable,
+#		Byte plaintext[])
+&function_begin("Camellia_DecryptBlock_Rounds");
+	&mov	("eax",&wparam(0));	# load grandRounds
+	&mov	($idx,&wparam(1));	# load ciphertext pointer
+	&mov	($key,&wparam(2));	# load key schedule pointer
+
+	&mov	("ebx","esp");
+	&sub	("esp",7*4);		# place for s[0-3],keyEnd,esp and ra
+	&and	("esp",-64);
+
+	# place stack frame just "above mod 1024" the key schedule
+	# this ensures that cache associativity of 2 suffices
+	&lea	("ecx",&DWP(-64-63,$key));
+	&sub	("ecx","esp");
+	&neg	("ecx");
+	&and	("ecx",0x3C0);	# modulo 1024, but aligned to cache-line
+	&sub	("esp","ecx");
+	&add	("esp",4);	# 4 is reserved for callee's return address
+
+	&shl	("eax",6);
+	&mov	(&DWP(4*4,"esp"),$key);	# save keyStart
+	&lea	($key,&DWP(0,$key,"eax"));
+	&mov	(&DWP(5*4,"esp"),"ebx");# save %esp
+
+	&call	(&label("pic_point"));
+	&set_label("pic_point");
+	&blindpop($Tbl);
+	&lea	($Tbl,&DWP(&label("Camellia_SBOX")."-".&label("pic_point"),$Tbl));
+
+	&mov	(@T[0],&DWP(0,$idx));	# load ciphertext
+	&mov	(@T[1],&DWP(4,$idx));
+	&mov	(@T[2],&DWP(8,$idx));
+	&bswap	(@T[0]);
+	&mov	(@T[3],&DWP(12,$idx));
+	&bswap	(@T[1]);
+	&bswap	(@T[2]);
+	&bswap	(@T[3]);
+
+	&call	("_x86_Camellia_decrypt");
+
+	&mov	("esp",&DWP(5*4,"esp"));
+	&bswap	(@T[0]);
+	&mov	($idx,&wparam(3));	# load plaintext pointer
+	&bswap	(@T[1]);
+	&bswap	(@T[2]);
+	&bswap	(@T[3]);
+	&mov	(&DWP(0,$idx),@T[0]);	# write plaintext
+	&mov	(&DWP(4,$idx),@T[1]);
+	&mov	(&DWP(8,$idx),@T[2]);
+	&mov	(&DWP(12,$idx),@T[3]);
+&function_end("Camellia_DecryptBlock_Rounds");
+# V1.x API
+&function_begin_B("Camellia_DecryptBlock");
+	&mov	("eax",128);
+	&sub	("eax",&wparam(0));	# load keyBitLength
+	&mov	("eax",3);
+	&adc	("eax",0);		# keyBitLength==128?3:4
+	&mov	(&wparam(0),"eax");
+	&jmp	(&label("Camellia_DecryptBlock_Rounds"));
+&function_end_B("Camellia_DecryptBlock");
+
+if ($OPENSSL) {
+# void Camellia_decrypt(
+#		const unsigned char *in,
+#		unsigned char *out,
+#		const CAMELLIA_KEY *key)
+&function_begin("Camellia_decrypt");
+	&mov	($idx,&wparam(0));	# load ciphertext pointer
+	&mov	($key,&wparam(2));	# load key schedule pointer
+
+	&mov	("ebx","esp");
+	&sub	("esp",7*4);		# place for s[0-3],keyEnd,esp and ra
+	&and	("esp",-64);
+	&mov	("eax",&DWP(272,$key));	# load grandRounds counter
+
+	# place stack frame just "above mod 1024" the key schedule
+	# this ensures that cache associativity of 2 suffices
+	&lea	("ecx",&DWP(-64-63,$key));
+	&sub	("ecx","esp");
+	&neg	("ecx");
+	&and	("ecx",0x3C0);	# modulo 1024, but aligned to cache-line
+	&sub	("esp","ecx");
+	&add	("esp",4);	# 4 is reserved for callee's return address
+
+	&shl	("eax",6);
+	&mov	(&DWP(4*4,"esp"),$key);	# save keyStart
+	&lea	($key,&DWP(0,$key,"eax"));
+	&mov	(&DWP(5*4,"esp"),"ebx");# save %esp
+
+	&call	(&label("pic_point"));
+	&set_label("pic_point");
+	&blindpop($Tbl);
+	&lea	($Tbl,&DWP(&label("Camellia_SBOX")."-".&label("pic_point"),$Tbl));
+
+	&mov	(@T[0],&DWP(0,$idx));	# load ciphertext
+	&mov	(@T[1],&DWP(4,$idx));
+	&mov	(@T[2],&DWP(8,$idx));
+	&bswap	(@T[0]);
+	&mov	(@T[3],&DWP(12,$idx));
+	&bswap	(@T[1]);
+	&bswap	(@T[2]);
+	&bswap	(@T[3]);
+
+	&call	("_x86_Camellia_decrypt");
+
+	&mov	("esp",&DWP(5*4,"esp"));
+	&bswap	(@T[0]);
+	&mov	($idx,&wparam(1));	# load plaintext pointer
+	&bswap	(@T[1]);
+	&bswap	(@T[2]);
+	&bswap	(@T[3]);
+	&mov	(&DWP(0,$idx),@T[0]);	# write plaintext
+	&mov	(&DWP(4,$idx),@T[1]);
+	&mov	(&DWP(8,$idx),@T[2]);
+	&mov	(&DWP(12,$idx),@T[3]);
+&function_end("Camellia_decrypt");
+}
+
+&function_begin_B("_x86_Camellia_decrypt");
+	&xor	(@T[0],&DWP(0,$key));	# ^=key[0-3]
+	&xor	(@T[1],&DWP(4,$key));
+	&xor	(@T[2],&DWP(8,$key));
+	&xor	(@T[3],&DWP(12,$key));
+	&mov	($idx,&DWP(-8,$key));	# prefetch key[-2]
+
+	&mov	($__s0,@T[0]);		# save s[0-3]
+	&mov	($__s1,@T[1]);
+	&mov	($__s2,@T[2]);
+	&mov	($__s3,@T[3]);
+
+&set_label("loop",16);
+	for ($i=0;$i<6;$i++) { Camellia_Feistel($i,-8,4); }
+
+	&sub	($key,16*4);
+	&cmp	($key,$__end);
+	&je	(&label("done"));
+
+	# @T[0-1] are preloaded, $idx is preloaded with key[2]
+	&and	($idx,@T[0]);
+	 &mov	 (@T[3],$__s3);
+	&rotl	($idx,1);
+	 &mov	 (@T[2],@T[3]);
+	&xor	(@T[1],$idx);
+	 &or	 (@T[2],&DWP(4,$key));
+	&mov	($__s1,@T[1]);		# s1^=LeftRotate(s0&key[0],1);
+	 &xor	 (@T[2],$__s2);
+
+	&mov	($idx,&DWP(12,$key));
+	 &mov	 ($__s2,@T[2]);		# s2^=s3|key[3];
+	&or	($idx,@T[1]);
+	 &and	 (@T[2],&DWP(0,$key));
+	&xor	(@T[0],$idx);
+	 &rotl	 (@T[2],1);
+	&mov	($__s0,@T[0]);		# s0^=s1|key[1];
+	 &xor	 (@T[3],@T[2]);
+	&mov	($idx,&DWP(-8,$key));	# prefetch key[4]
+	 &mov	 ($__s3,@T[3]);		# s3^=LeftRotate(s2&key[2],1);
+	&jmp	(&label("loop"));
+
+&set_label("done",8);
+	&mov	(@T[2],@T[0]);		# SwapHalf
+	&mov	(@T[3],@T[1]);
+	&mov	(@T[0],$__s2);
+	&mov	(@T[1],$__s3);
+	&xor	(@T[2],$idx);		# $idx is preloaded with key[2]
+	&xor	(@T[3],&DWP(12,$key));
+	&xor	(@T[0],&DWP(0,$key));
+	&xor	(@T[1],&DWP(4,$key));
+	&ret	();
+&function_end_B("_x86_Camellia_decrypt");
+
+# shld is very slow on Intel P4 family. Even on AMD it limits
+# instruction decode rate [because it's VectorPath] and consequently
+# performance. PIII, PM and Core[2] seem to be the only ones which
+# execute this code ~7% faster...
+sub __rotl128 {
+  my ($i0,$i1,$i2,$i3,$rot,$rnd,@T)=@_;
+
+    $rnd *= 2;
+    if ($rot) {
+	&mov	($idx,$i0);
+	&shld	($i0,$i1,$rot);
+	&shld	($i1,$i2,$rot);
+	&shld	($i2,$i3,$rot);
+	&shld	($i3,$idx,$rot);
+    }
+    &mov	(&DWP(-128+4*$rnd++,$key),shift(@T))	if ($i0 eq @T[0]);
+    &mov	(&DWP(-128+4*$rnd++,$key),shift(@T))	if ($i1 eq @T[0]);
+    &mov	(&DWP(-128+4*$rnd++,$key),shift(@T))	if ($i2 eq @T[0]);
+    &mov	(&DWP(-128+4*$rnd++,$key),shift(@T))	if ($i3 eq @T[0]);
+}
+
+# ... Implementing 128-bit rotate without shld gives >3x performance
+# improvement on P4, only ~7% degradation on other Intel CPUs and
+# not worse performance on AMD. This is therefore preferred.
+sub _rotl128 {
+  my ($i0,$i1,$i2,$i3,$rot,$rnd,@T)=@_;
+
+    $rnd *= 2;
+    if ($rot) {
+	&mov	($Tbl,$i0);
+	&shl	($i0,$rot);
+	&mov	($idx,$i1);
+	&shr	($idx,32-$rot);
+	&shl	($i1,$rot);
+	&or	($i0,$idx);
+	&mov	($idx,$i2);
+	&shl	($i2,$rot);
+	&mov	(&DWP(-128+4*$rnd++,$key),shift(@T))	if ($i0 eq @T[0]);
+	&shr	($idx,32-$rot);
+	&or	($i1,$idx);
+	&shr	($Tbl,32-$rot);
+	&mov	($idx,$i3);
+	&shr	($idx,32-$rot);
+	&mov	(&DWP(-128+4*$rnd++,$key),shift(@T))	if ($i1 eq @T[0]);
+	&shl	($i3,$rot);
+	&or	($i2,$idx);
+	&or	($i3,$Tbl);
+	&mov	(&DWP(-128+4*$rnd++,$key),shift(@T))	if ($i2 eq @T[0]);
+	&mov	(&DWP(-128+4*$rnd++,$key),shift(@T))	if ($i3 eq @T[0]);
+    } else {
+	&mov	(&DWP(-128+4*$rnd++,$key),shift(@T))	if ($i0 eq @T[0]);
+	&mov	(&DWP(-128+4*$rnd++,$key),shift(@T))	if ($i1 eq @T[0]);
+	&mov	(&DWP(-128+4*$rnd++,$key),shift(@T))	if ($i2 eq @T[0]);
+	&mov	(&DWP(-128+4*$rnd++,$key),shift(@T))	if ($i3 eq @T[0]);
+    }
+}
+
+sub _saveround {
+my ($rnd,$key,@T)=@_;
+my $bias=int(@T[0])?shift(@T):0;
+
+	&mov	(&DWP($bias+$rnd*8+0,$key),@T[0]);
+	&mov	(&DWP($bias+$rnd*8+4,$key),@T[1])	if ($#T>=1);
+	&mov	(&DWP($bias+$rnd*8+8,$key),@T[2])	if ($#T>=2);
+	&mov	(&DWP($bias+$rnd*8+12,$key),@T[3])	if ($#T>=3);
+}
+
+sub _loadround {
+my ($rnd,$key,@T)=@_;
+my $bias=int(@T[0])?shift(@T):0;
+
+	&mov	(@T[0],&DWP($bias+$rnd*8+0,$key));
+	&mov	(@T[1],&DWP($bias+$rnd*8+4,$key))	if ($#T>=1);
+	&mov	(@T[2],&DWP($bias+$rnd*8+8,$key))	if ($#T>=2);
+	&mov	(@T[3],&DWP($bias+$rnd*8+12,$key))	if ($#T>=3);
+}
+
+# void Camellia_Ekeygen(
+#		const int keyBitLength,
+#		const Byte *rawKey,
+#		KEY_TABLE_TYPE keyTable)
+&function_begin("Camellia_Ekeygen");
+{ my $step=0;
+
+	&stack_push(4);				# place for s[0-3]
+
+	&mov	($Tbl,&wparam(0));		# load arguments
+	&mov	($idx,&wparam(1));
+	&mov	($key,&wparam(2));
+
+	&mov	(@T[0],&DWP(0,$idx));		# load 0-127 bits
+	&mov	(@T[1],&DWP(4,$idx));
+	&mov	(@T[2],&DWP(8,$idx));
+	&mov	(@T[3],&DWP(12,$idx));
+
+	&bswap	(@T[0]);
+	&bswap	(@T[1]);
+	&bswap	(@T[2]);
+	&bswap	(@T[3]);
+
+	&_saveround	(0,$key,@T);		# KL<<<0
+
+	&cmp	($Tbl,128);
+	&je	(&label("1st128"));
+
+	&mov	(@T[0],&DWP(16,$idx));		# load 128-191 bits
+	&mov	(@T[1],&DWP(20,$idx));
+	&cmp	($Tbl,192);
+	&je	(&label("1st192"));
+	&mov	(@T[2],&DWP(24,$idx));		# load 192-255 bits
+	&mov	(@T[3],&DWP(28,$idx));
+	&jmp	(&label("1st256"));
+&set_label("1st192",4);
+	&mov	(@T[2],@T[0]);
+	&mov	(@T[3],@T[1]);
+	&not	(@T[2]);
+	&not	(@T[3]);
+&set_label("1st256",4);
+	&bswap	(@T[0]);
+	&bswap	(@T[1]);
+	&bswap	(@T[2]);
+	&bswap	(@T[3]);
+
+	&_saveround	(4,$key,@T);		# temporary storage for KR!
+
+	&xor	(@T[0],&DWP(0*8+0,$key));	# KR^KL
+	&xor	(@T[1],&DWP(0*8+4,$key));
+	&xor	(@T[2],&DWP(1*8+0,$key));
+	&xor	(@T[3],&DWP(1*8+4,$key));
+
+&set_label("1st128",4);
+	&call	(&label("pic_point"));
+	&set_label("pic_point");
+	&blindpop($Tbl);
+	&lea	($Tbl,&DWP(&label("Camellia_SBOX")."-".&label("pic_point"),$Tbl));
+	&lea	($key,&DWP(&label("Camellia_SIGMA")."-".&label("Camellia_SBOX"),$Tbl));
+
+	&mov	($idx,&DWP($step*8,$key));	# prefetch SIGMA[0]
+	&mov	(&swtmp(0),@T[0]);		# save s[0-3]
+	&mov	(&swtmp(1),@T[1]);
+	&mov	(&swtmp(2),@T[2]);
+	&mov	(&swtmp(3),@T[3]);
+	&Camellia_Feistel($step++);
+	&Camellia_Feistel($step++);
+	&mov	(@T[2],&swtmp(2));
+	&mov	(@T[3],&swtmp(3));
+
+	&mov	($idx,&wparam(2));
+	&xor	(@T[0],&DWP(0*8+0,$idx));	# ^KL
+	&xor	(@T[1],&DWP(0*8+4,$idx));
+	&xor	(@T[2],&DWP(1*8+0,$idx));
+	&xor	(@T[3],&DWP(1*8+4,$idx));
+
+	&mov	($idx,&DWP($step*8,$key));	# prefetch SIGMA[4]
+	&mov	(&swtmp(0),@T[0]);		# save s[0-3]
+	&mov	(&swtmp(1),@T[1]);
+	&mov	(&swtmp(2),@T[2]);
+	&mov	(&swtmp(3),@T[3]);
+	&Camellia_Feistel($step++);
+	&Camellia_Feistel($step++);
+	&mov	(@T[2],&swtmp(2));
+	&mov	(@T[3],&swtmp(3));
+
+	&mov	($idx,&wparam(0));
+	&cmp	($idx,128);
+	&jne	(&label("2nd256"));
+
+	&mov	($key,&wparam(2));
+	&lea	($key,&DWP(128,$key));		# size optimization
+
+	####### process KA
+	&_saveround	(2,$key,-128,@T);	# KA<<<0
+	&_rotl128	(@T,15,6,@T);		# KA<<<15
+	&_rotl128	(@T,15,8,@T);		# KA<<<(15+15=30)
+	&_rotl128	(@T,15,12,@T[0],@T[1]);	# KA<<<(30+15=45)
+	&_rotl128	(@T,15,14,@T);		# KA<<<(45+15=60)
+	push		(@T,shift(@T));		# rotl128(@T,32);
+	&_rotl128	(@T,2,20,@T);		# KA<<<(60+32+2=94)
+	&_rotl128	(@T,17,24,@T);		# KA<<<(94+17=111)
+
+	####### process KL
+	&_loadround	(0,$key,-128,@T);	# load KL
+	&_rotl128	(@T,15,4,@T);		# KL<<<15
+	&_rotl128	(@T,30,10,@T);		# KL<<<(15+30=45)
+	&_rotl128	(@T,15,13,@T[2],@T[3]);	# KL<<<(45+15=60)
+	&_rotl128	(@T,17,16,@T);		# KL<<<(60+17=77)
+	&_rotl128	(@T,17,18,@T);		# KL<<<(77+17=94)
+	&_rotl128	(@T,17,22,@T);		# KL<<<(94+17=111)
+
+	while (@T[0] ne "eax")			# restore order
+	{   unshift	(@T,pop(@T));   }
+
+	&mov	("eax",3);			# 3 grandRounds
+	&jmp	(&label("done"));
+
+&set_label("2nd256",16);
+	&mov	($idx,&wparam(2));
+	&_saveround	(6,$idx,@T);		# temporary storage for KA!
+
+	&xor	(@T[0],&DWP(4*8+0,$idx));	# KA^KR
+	&xor	(@T[1],&DWP(4*8+4,$idx));
+	&xor	(@T[2],&DWP(5*8+0,$idx));
+	&xor	(@T[3],&DWP(5*8+4,$idx));
+
+	&mov	($idx,&DWP($step*8,$key));	# prefetch SIGMA[8]
+	&mov	(&swtmp(0),@T[0]);		# save s[0-3]
+	&mov	(&swtmp(1),@T[1]);
+	&mov	(&swtmp(2),@T[2]);
+	&mov	(&swtmp(3),@T[3]);
+	&Camellia_Feistel($step++);
+	&Camellia_Feistel($step++);
+	&mov	(@T[2],&swtmp(2));
+	&mov	(@T[3],&swtmp(3));
+
+	&mov	($key,&wparam(2));
+	&lea	($key,&DWP(128,$key));		# size optimization
+
+	####### process KB
+	&_saveround	(2,$key,-128,@T);	# KB<<<0
+	&_rotl128	(@T,30,10,@T);		# KB<<<30
+	&_rotl128	(@T,30,20,@T);		# KB<<<(30+30=60)
+	push		(@T,shift(@T));		# rotl128(@T,32);
+	&_rotl128	(@T,19,32,@T);		# KB<<<(60+32+19=111)
+
+	####### process KR
+	&_loadround	(4,$key,-128,@T);	# load KR
+	&_rotl128	(@T,15,4,@T);		# KR<<<15
+	&_rotl128	(@T,15,8,@T);		# KR<<<(15+15=30)
+	&_rotl128	(@T,30,18,@T);		# KR<<<(30+30=60)
+	push		(@T,shift(@T));		# rotl128(@T,32);
+	&_rotl128	(@T,2,26,@T);		# KR<<<(60+32+2=94)
+
+	####### process KA
+	&_loadround	(6,$key,-128,@T);	# load KA
+	&_rotl128	(@T,15,6,@T);		# KA<<<15
+	&_rotl128	(@T,30,14,@T);		# KA<<<(15+30=45)
+	push		(@T,shift(@T));		# rotl128(@T,32);
+	&_rotl128	(@T,0,24,@T);		# KA<<<(45+32+0=77)
+	&_rotl128	(@T,17,28,@T);		# KA<<<(77+17=94)
+
+	####### process KL
+	&_loadround	(0,$key,-128,@T);	# load KL
+	push		(@T,shift(@T));		# rotl128(@T,32);
+	&_rotl128	(@T,13,12,@T);		# KL<<<(32+13=45)
+	&_rotl128	(@T,15,16,@T);		# KL<<<(45+15=60)
+	&_rotl128	(@T,17,22,@T);		# KL<<<(60+17=77)
+	push		(@T,shift(@T));		# rotl128(@T,32);
+	&_rotl128	(@T,2,30,@T);		# KL<<<(77+32+2=111)
+
+	while (@T[0] ne "eax")			# restore order
+	{   unshift	(@T,pop(@T));   }
+
+	&mov	("eax",4);			# 4 grandRounds
+&set_label("done");
+	&lea	("edx",&DWP(272-128,$key));	# end of key schedule
+	&stack_pop(4);
+}
+&function_end("Camellia_Ekeygen");
+
+if ($OPENSSL) {
+# int Camellia_set_key (
+#		const unsigned char *userKey,
+#		int bits,
+#		CAMELLIA_KEY *key)
+&function_begin_B("Camellia_set_key");
+	&push	("ebx");
+	&mov	("ecx",&wparam(0));	# pull arguments
+	&mov	("ebx",&wparam(1));
+	&mov	("edx",&wparam(2));
+
+	&mov	("eax",-1);
+	&test	("ecx","ecx");
+	&jz	(&label("done"));	# userKey==NULL?
+	&test	("edx","edx");
+	&jz	(&label("done"));	# key==NULL?
+
+	&mov	("eax",-2);
+	&cmp	("ebx",256);
+	&je	(&label("arg_ok"));	# bits==256?
+	&cmp	("ebx",192);
+	&je	(&label("arg_ok"));	# bits==192?
+	&cmp	("ebx",128);
+	&jne	(&label("done"));	# bits!=128?
+&set_label("arg_ok",4);
+
+	&push	("edx");		# push arguments
+	&push	("ecx");
+	&push	("ebx");
+	&call	("Camellia_Ekeygen");
+	&stack_pop(3);
+
+	# eax holds grandRounds and edx points at where to put it
+	&mov	(&DWP(0,"edx"),"eax");
+	&xor	("eax","eax");
+&set_label("done",4);
+	&pop	("ebx");
+	&ret	();
+&function_end_B("Camellia_set_key");
+}
+
+@SBOX=(
+112,130, 44,236,179, 39,192,229,228,133, 87, 53,234, 12,174, 65,
+ 35,239,107,147, 69, 25,165, 33,237, 14, 79, 78, 29,101,146,189,
+134,184,175,143,124,235, 31,206, 62, 48,220, 95, 94,197, 11, 26,
+166,225, 57,202,213, 71, 93, 61,217,  1, 90,214, 81, 86,108, 77,
+139, 13,154,102,251,204,176, 45,116, 18, 43, 32,240,177,132,153,
+223, 76,203,194, 52,126,118,  5,109,183,169, 49,209, 23,  4,215,
+ 20, 88, 58, 97,222, 27, 17, 28, 50, 15,156, 22, 83, 24,242, 34,
+254, 68,207,178,195,181,122,145, 36,  8,232,168, 96,252,105, 80,
+170,208,160,125,161,137, 98,151, 84, 91, 30,149,224,255,100,210,
+ 16,196,  0, 72,163,247,117,219,138,  3,230,218,  9, 63,221,148,
+135, 92,131,  2,205, 74,144, 51,115,103,246,243,157,127,191,226,
+ 82,155,216, 38,200, 55,198, 59,129,150,111, 75, 19,190, 99, 46,
+233,121,167,140,159,110,188,142, 41,245,249,182, 47,253,180, 89,
+120,152,  6,106,231, 70,113,186,212, 37,171, 66,136,162,141,250,
+114,  7,185, 85,248,238,172, 10, 54, 73, 42,104, 60, 56,241,164,
+ 64, 40,211,123,187,201, 67,193, 21,227,173,244,119,199,128,158);
+
+sub S1110 { my $i=shift; $i=@SBOX[$i]; return $i<<24|$i<<16|$i<<8; }
+sub S4404 { my $i=shift; $i=($i<<1|$i>>7)&0xff; $i=@SBOX[$i]; return $i<<24|$i<<16|$i; }
+sub S0222 { my $i=shift; $i=@SBOX[$i]; $i=($i<<1|$i>>7)&0xff; return $i<<16|$i<<8|$i; }
+sub S3033 { my $i=shift; $i=@SBOX[$i]; $i=($i>>1|$i<<7)&0xff; return $i<<24|$i<<8|$i; }
+
+&set_label("Camellia_SIGMA",64);
+&data_word(
+    0xa09e667f, 0x3bcc908b, 0xb67ae858, 0x4caa73b2,
+    0xc6ef372f, 0xe94f82be, 0x54ff53a5, 0xf1d36f1c,
+    0x10e527fa, 0xde682d1d, 0xb05688c2, 0xb3e6c1fd,
+    0,          0,          0,          0);
+&set_label("Camellia_SBOX",64);
+# tables are interleaved, remember?
+for ($i=0;$i<256;$i++) { &data_word(&S1110($i),&S4404($i)); }
+for ($i=0;$i<256;$i++) { &data_word(&S0222($i),&S3033($i)); }
+
+# void Camellia_cbc_encrypt (const void char *inp, unsigned char *out,
+#			size_t length, const CAMELLIA_KEY *key,
+#			unsigned char *ivp,const int enc);
+{
+# stack frame layout
+#             -4(%esp)		# return address	 0(%esp)
+#              0(%esp)		# s0			 4(%esp)
+#              4(%esp)		# s1			 8(%esp)
+#              8(%esp)		# s2			12(%esp)
+#             12(%esp)		# s3			16(%esp)
+#             16(%esp)		# end of key schedule	20(%esp)
+#             20(%esp)		# %esp backup
+my $_inp=&DWP(24,"esp");	#copy of wparam(0)
+my $_out=&DWP(28,"esp");	#copy of wparam(1)
+my $_len=&DWP(32,"esp");	#copy of wparam(2)
+my $_key=&DWP(36,"esp");	#copy of wparam(3)
+my $_ivp=&DWP(40,"esp");	#copy of wparam(4)
+my $ivec=&DWP(44,"esp");	#ivec[16]
+my $_tmp=&DWP(44,"esp");	#volatile variable [yes, aliases with ivec]
+my ($s0,$s1,$s2,$s3) = @T;
+
+&function_begin("Camellia_cbc_encrypt");
+	&mov	($s2 eq "ecx"? $s2 : "",&wparam(2));	# load len
+	&cmp	($s2,0);
+	&je	(&label("enc_out"));
+
+	&pushf	();
+	&cld	();
+
+	&mov	($s0,&wparam(0));	# load inp
+	&mov	($s1,&wparam(1));	# load out
+	#&mov	($s2,&wparam(2));	# load len
+	&mov	($s3,&wparam(3));	# load key
+	&mov	($Tbl,&wparam(4));	# load ivp
+
+	# allocate aligned stack frame...
+	&lea	($idx,&DWP(-64,"esp"));
+	&and	($idx,-64);
+
+	# place stack frame just "above mod 1024" the key schedule
+	# this ensures that cache associativity of 2 suffices
+	&lea	($key,&DWP(-64-63,$s3));
+	&sub	($key,$idx);
+	&neg	($key);
+	&and	($key,0x3C0);	# modulo 1024, but aligned to cache-line
+	&sub	($idx,$key);
+
+	&mov	($key,&wparam(5));	# load enc
+
+	&exch	("esp",$idx);
+	&add	("esp",4);		# reserve for return address!
+	&mov	($_esp,$idx);		# save %esp
+
+	&mov	($_inp,$s0);		# save copy of inp
+	&mov	($_out,$s1);		# save copy of out
+	&mov	($_len,$s2);		# save copy of len
+	&mov	($_key,$s3);		# save copy of key
+	&mov	($_ivp,$Tbl);		# save copy of ivp
+
+	&call   (&label("pic_point"));	# make it PIC!
+	&set_label("pic_point");
+	&blindpop($Tbl);
+	&lea    ($Tbl,&DWP(&label("Camellia_SBOX")."-".&label("pic_point"),$Tbl));
+
+	&mov	($idx,32);
+	&set_label("prefetch_sbox",4);
+		&mov	($s0,&DWP(0,$Tbl));
+		&mov	($s1,&DWP(32,$Tbl));
+		&mov	($s2,&DWP(64,$Tbl));
+		&mov	($s3,&DWP(96,$Tbl));
+		&lea	($Tbl,&DWP(128,$Tbl));
+		&dec	($idx);
+	&jnz	(&label("prefetch_sbox"));
+	&mov	($s0,$_key);
+	&sub	($Tbl,4096);
+	&mov	($idx,$_inp);
+	&mov	($s3,&DWP(272,$s0));		# load grandRounds
+
+	&cmp	($key,0);
+	&je	(&label("DECRYPT"));
+
+	&mov	($s2,$_len);
+	&mov	($key,$_ivp);
+	&shl	($s3,6);
+	&lea	($s3,&DWP(0,$s0,$s3));
+	&mov	($_end,$s3);
+
+	&test	($s2,0xFFFFFFF0);
+	&jz	(&label("enc_tail"));		# short input...
+
+	&mov	($s0,&DWP(0,$key));		# load iv
+	&mov	($s1,&DWP(4,$key));
+
+	&set_label("enc_loop",4);
+		&mov	($s2,&DWP(8,$key));
+		&mov	($s3,&DWP(12,$key));
+
+		&xor	($s0,&DWP(0,$idx));	# xor input data
+		&xor	($s1,&DWP(4,$idx));
+		&xor	($s2,&DWP(8,$idx));
+		&bswap	($s0);
+		&xor	($s3,&DWP(12,$idx));
+		&bswap	($s1);
+		&mov	($key,$_key);		# load key
+		&bswap	($s2);
+		&bswap	($s3);
+
+		&call	("_x86_Camellia_encrypt");
+
+		&mov	($idx,$_inp);		# load inp
+		&mov	($key,$_out);		# load out
+
+		&bswap	($s0);
+		&bswap	($s1);
+		&bswap	($s2);
+		&mov	(&DWP(0,$key),$s0);	# save output data
+		&bswap	($s3);
+		&mov	(&DWP(4,$key),$s1);
+		&mov	(&DWP(8,$key),$s2);
+		&mov	(&DWP(12,$key),$s3);
+
+		&mov	($s2,$_len);		# load len
+
+		&lea	($idx,&DWP(16,$idx));
+		&mov	($_inp,$idx);		# save inp
+
+		&lea	($s3,&DWP(16,$key));
+		&mov	($_out,$s3);		# save out
+
+		&sub	($s2,16);
+		&test	($s2,0xFFFFFFF0);
+		&mov	($_len,$s2);		# save len
+	&jnz	(&label("enc_loop"));
+	&test	($s2,15);
+	&jnz	(&label("enc_tail"));
+	&mov	($idx,$_ivp);		# load ivp
+	&mov	($s2,&DWP(8,$key));	# restore last dwords
+	&mov	($s3,&DWP(12,$key));
+	&mov	(&DWP(0,$idx),$s0);	# save ivec
+	&mov	(&DWP(4,$idx),$s1);
+	&mov	(&DWP(8,$idx),$s2);
+	&mov	(&DWP(12,$idx),$s3);
+
+	&mov	("esp",$_esp);
+	&popf	();
+    &set_label("enc_out");
+	&function_end_A();
+	&pushf	();			# kludge, never executed
+
+    &set_label("enc_tail",4);
+	&mov	($s0,$key eq "edi" ? $key : "");
+	&mov	($key,$_out);			# load out
+	&push	($s0);				# push ivp
+	&mov	($s1,16);
+	&sub	($s1,$s2);
+	&cmp	($key,$idx);			# compare with inp
+	&je	(&label("enc_in_place"));
+	&align	(4);
+	&data_word(0xA4F3F689);	# rep movsb	# copy input
+	&jmp	(&label("enc_skip_in_place"));
+    &set_label("enc_in_place");
+	&lea	($key,&DWP(0,$key,$s2));
+    &set_label("enc_skip_in_place");
+	&mov	($s2,$s1);
+	&xor	($s0,$s0);
+	&align	(4);
+	&data_word(0xAAF3F689);	# rep stosb	# zero tail
+	&pop	($key);				# pop ivp
+
+	&mov	($idx,$_out);			# output as input
+	&mov	($s0,&DWP(0,$key));
+	&mov	($s1,&DWP(4,$key));
+	&mov	($_len,16);			# len=16
+	&jmp	(&label("enc_loop"));		# one more spin...
+
+#----------------------------- DECRYPT -----------------------------#
+&set_label("DECRYPT",16);
+	&shl	($s3,6);
+	&lea	($s3,&DWP(0,$s0,$s3));
+	&mov	($_end,$s0);
+	&mov	($_key,$s3);
+
+	&cmp	($idx,$_out);
+	&je	(&label("dec_in_place"));	# in-place processing...
+
+	&mov	($key,$_ivp);			# load ivp
+	&mov	($_tmp,$key);
+
+	&set_label("dec_loop",4);
+		&mov	($s0,&DWP(0,$idx));	# read input
+		&mov	($s1,&DWP(4,$idx));
+		&mov	($s2,&DWP(8,$idx));
+		&bswap	($s0);
+		&mov	($s3,&DWP(12,$idx));
+		&bswap	($s1);
+		&mov	($key,$_key);		# load key
+		&bswap	($s2);
+		&bswap	($s3);
+
+		&call	("_x86_Camellia_decrypt");
+
+		&mov	($key,$_tmp);		# load ivp
+		&mov	($idx,$_len);		# load len
+
+		&bswap	($s0);
+		&bswap	($s1);
+		&bswap	($s2);
+		&xor	($s0,&DWP(0,$key));	# xor iv
+		&bswap	($s3);
+		&xor	($s1,&DWP(4,$key));
+		&xor	($s2,&DWP(8,$key));
+		&xor	($s3,&DWP(12,$key));
+
+		&sub	($idx,16);
+		&jc	(&label("dec_partial"));
+		&mov	($_len,$idx);		# save len
+		&mov	($idx,$_inp);		# load inp
+		&mov	($key,$_out);		# load out
+
+		&mov	(&DWP(0,$key),$s0);	# write output
+		&mov	(&DWP(4,$key),$s1);
+		&mov	(&DWP(8,$key),$s2);
+		&mov	(&DWP(12,$key),$s3);
+
+		&mov	($_tmp,$idx);		# save ivp
+		&lea	($idx,&DWP(16,$idx));
+		&mov	($_inp,$idx);		# save inp
+
+		&lea	($key,&DWP(16,$key));
+		&mov	($_out,$key);		# save out
+
+	&jnz	(&label("dec_loop"));
+	&mov	($key,$_tmp);		# load temp ivp
+    &set_label("dec_end");
+	&mov	($idx,$_ivp);		# load user ivp
+	&mov	($s0,&DWP(0,$key));	# load iv
+	&mov	($s1,&DWP(4,$key));
+	&mov	($s2,&DWP(8,$key));
+	&mov	($s3,&DWP(12,$key));
+	&mov	(&DWP(0,$idx),$s0);	# copy back to user
+	&mov	(&DWP(4,$idx),$s1);
+	&mov	(&DWP(8,$idx),$s2);
+	&mov	(&DWP(12,$idx),$s3);
+	&jmp	(&label("dec_out"));
+
+    &set_label("dec_partial",4);
+	&lea	($key,$ivec);
+	&mov	(&DWP(0,$key),$s0);	# dump output to stack
+	&mov	(&DWP(4,$key),$s1);
+	&mov	(&DWP(8,$key),$s2);
+	&mov	(&DWP(12,$key),$s3);
+	&lea	($s2 eq "ecx" ? $s2 : "",&DWP(16,$idx));
+	&mov	($idx eq "esi" ? $idx : "",$key);
+	&mov	($key eq "edi" ? $key : "",$_out);	# load out
+	&data_word(0xA4F3F689);	# rep movsb		# copy output
+	&mov	($key,$_inp);				# use inp as temp ivp
+	&jmp	(&label("dec_end"));
+
+    &set_label("dec_in_place",4);
+	&set_label("dec_in_place_loop");
+		&lea	($key,$ivec);
+		&mov	($s0,&DWP(0,$idx));	# read input
+		&mov	($s1,&DWP(4,$idx));
+		&mov	($s2,&DWP(8,$idx));
+		&mov	($s3,&DWP(12,$idx));
+
+		&mov	(&DWP(0,$key),$s0);	# copy to temp
+		&mov	(&DWP(4,$key),$s1);
+		&mov	(&DWP(8,$key),$s2);
+		&bswap	($s0);
+		&mov	(&DWP(12,$key),$s3);
+		&bswap	($s1);
+		&mov	($key,$_key);		# load key
+		&bswap	($s2);
+		&bswap	($s3);
+
+		&call	("_x86_Camellia_decrypt");
+
+		&mov	($key,$_ivp);		# load ivp
+		&mov	($idx,$_out);		# load out
+
+		&bswap	($s0);
+		&bswap	($s1);
+		&bswap	($s2);
+		&xor	($s0,&DWP(0,$key));	# xor iv
+		&bswap	($s3);
+		&xor	($s1,&DWP(4,$key));
+		&xor	($s2,&DWP(8,$key));
+		&xor	($s3,&DWP(12,$key));
+
+		&mov	(&DWP(0,$idx),$s0);	# write output
+		&mov	(&DWP(4,$idx),$s1);
+		&mov	(&DWP(8,$idx),$s2);
+		&mov	(&DWP(12,$idx),$s3);
+
+		&lea	($idx,&DWP(16,$idx));
+		&mov	($_out,$idx);		# save out
+
+		&lea	($idx,$ivec);
+		&mov	($s0,&DWP(0,$idx));	# read temp
+		&mov	($s1,&DWP(4,$idx));
+		&mov	($s2,&DWP(8,$idx));
+		&mov	($s3,&DWP(12,$idx));
+
+		&mov	(&DWP(0,$key),$s0);	# copy iv
+		&mov	(&DWP(4,$key),$s1);
+		&mov	(&DWP(8,$key),$s2);
+		&mov	(&DWP(12,$key),$s3);
+
+		&mov	($idx,$_inp);		# load inp
+
+		&lea	($idx,&DWP(16,$idx));
+		&mov	($_inp,$idx);		# save inp
+
+		&mov	($s2,$_len);		# load len
+		&sub	($s2,16);
+		&jc	(&label("dec_in_place_partial"));
+		&mov	($_len,$s2);		# save len
+	&jnz	(&label("dec_in_place_loop"));
+	&jmp	(&label("dec_out"));
+
+    &set_label("dec_in_place_partial",4);
+	# one can argue if this is actually required...
+	&mov	($key eq "edi" ? $key : "",$_out);
+	&lea	($idx eq "esi" ? $idx : "",$ivec);
+	&lea	($key,&DWP(0,$key,$s2));
+	&lea	($idx,&DWP(16,$idx,$s2));
+	&neg	($s2 eq "ecx" ? $s2 : "");
+	&data_word(0xA4F3F689);	# rep movsb	# restore tail
+
+    &set_label("dec_out",4);
+    &mov	("esp",$_esp);
+    &popf	();
+&function_end("Camellia_cbc_encrypt");
+}
+
+&asciz("Camellia for x86 by <appro\@openssl.org>");
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/asm/cmll-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/asm/cmll-x86_64.pl
new file mode 100644
index 000000000..02c52c3ef
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/asm/cmll-x86_64.pl
@@ -0,0 +1,1145 @@
+#! /usr/bin/env perl
+# Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Copyright (c) 2008 Andy Polyakov <appro@openssl.org>
+#
+# This module may be used under the terms of either the GNU General
+# Public License version 2 or later, the GNU Lesser General Public
+# License version 2.1 or later, the Mozilla Public License version
+# 1.1 or the BSD License. The exact terms of either license are
+# distributed along with this module. For further details see
+# http://www.openssl.org/~appro/camellia/.
+# ====================================================================
+
+# Performance in cycles per processed byte (less is better) in
+# 'openssl speed ...' benchmark:
+#
+#			AMD64	Core2	EM64T
+# -evp camellia-128-ecb	16.7	21.0	22.7
+# + over gcc 3.4.6	+25%	+5%	0%
+#
+# camellia-128-cbc	15.7	20.4	21.1
+#
+# 128-bit key setup	128	216	205	cycles/key
+# + over gcc 3.4.6	+54%	+39%	+15%
+#
+# Numbers in "+" rows represent performance improvement over compiler
+# generated code. Key setup timings are impressive on AMD and Core2
+# thanks to 64-bit operations being covertly deployed. Improvement on
+# EM64T, pre-Core2 Intel x86_64 CPU, is not as impressive, because it
+# apparently emulates some of 64-bit operations in [32-bit] microcode.
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+sub hi() { my $r=shift; $r =~ s/%[er]([a-d])x/%\1h/;    $r; }
+sub lo() { my $r=shift; $r =~ s/%[er]([a-d])x/%\1l/;
+                        $r =~ s/%[er]([sd]i)/%\1l/;
+                        $r =~ s/%(r[0-9]+)[d]?/%\1b/;   $r; }
+
+$t0="%eax";$t1="%ebx";$t2="%ecx";$t3="%edx";
+@S=("%r8d","%r9d","%r10d","%r11d");
+$i0="%esi";
+$i1="%edi";
+$Tbl="%rbp";	# size optimization
+$inp="%r12";
+$out="%r13";
+$key="%r14";
+$keyend="%r15";
+$arg0d=$win64?"%ecx":"%edi";
+
+# const unsigned int Camellia_SBOX[4][256];
+# Well, sort of... Camellia_SBOX[0][] is interleaved with [1][],
+# and [2][] - with [3][]. This is done to minimize code size.
+$SBOX1_1110=0;		# Camellia_SBOX[0]
+$SBOX4_4404=4;		# Camellia_SBOX[1]
+$SBOX2_0222=2048;	# Camellia_SBOX[2]
+$SBOX3_3033=2052;	# Camellia_SBOX[3]
+
+sub Camellia_Feistel {
+my $i=@_[0];
+my $seed=defined(@_[1])?@_[1]:0;
+my $scale=$seed<0?-8:8;
+my $j=($i&1)*2;
+my ($s0,$s1,$s2,$s3)=(@S[($j)%4],@S[($j+1)%4],@S[($j+2)%4],@S[($j+3)%4]);
+
+$code.=<<___;
+	xor	$s0,$t0				# t0^=key[0]
+	xor	$s1,$t1				# t1^=key[1]
+	movz	`&hi("$t0")`,$i0		# (t0>>8)&0xff
+	movz	`&lo("$t1")`,$i1		# (t1>>0)&0xff
+	mov	$SBOX3_3033($Tbl,$i0,8),$t3	# t3=SBOX3_3033[0]
+	mov	$SBOX1_1110($Tbl,$i1,8),$t2	# t2=SBOX1_1110[1]
+	movz	`&lo("$t0")`,$i0		# (t0>>0)&0xff
+	shr	\$16,$t0
+	movz	`&hi("$t1")`,$i1		# (t1>>8)&0xff
+	xor	$SBOX4_4404($Tbl,$i0,8),$t3	# t3^=SBOX4_4404[0]
+	shr	\$16,$t1
+	xor	$SBOX4_4404($Tbl,$i1,8),$t2	# t2^=SBOX4_4404[1]
+	movz	`&hi("$t0")`,$i0		# (t0>>24)&0xff
+	movz	`&lo("$t1")`,$i1		# (t1>>16)&0xff
+	xor	$SBOX1_1110($Tbl,$i0,8),$t3	# t3^=SBOX1_1110[0]
+	xor	$SBOX3_3033($Tbl,$i1,8),$t2	# t2^=SBOX3_3033[1]
+	movz	`&lo("$t0")`,$i0		# (t0>>16)&0xff
+	movz	`&hi("$t1")`,$i1		# (t1>>24)&0xff
+	xor	$SBOX2_0222($Tbl,$i0,8),$t3	# t3^=SBOX2_0222[0]
+	xor	$SBOX2_0222($Tbl,$i1,8),$t2	# t2^=SBOX2_0222[1]
+	mov	`$seed+($i+1)*$scale`($key),$t1	# prefetch key[i+1]
+	mov	`$seed+($i+1)*$scale+4`($key),$t0
+	xor	$t3,$t2				# t2^=t3
+	ror	\$8,$t3				# t3=RightRotate(t3,8)
+	xor	$t2,$s2
+	xor	$t2,$s3
+	xor	$t3,$s3
+___
+}
+
+# void Camellia_EncryptBlock_Rounds(
+#		int grandRounds,
+#		const Byte plaintext[],
+#		const KEY_TABLE_TYPE keyTable,
+#		Byte ciphertext[])
+$code=<<___;
+.text
+
+# V1.x API
+.globl	Camellia_EncryptBlock
+.type	Camellia_EncryptBlock,\@abi-omnipotent
+.align	16
+Camellia_EncryptBlock:
+	movl	\$128,%eax
+	subl	$arg0d,%eax
+	movl	\$3,$arg0d
+	adcl	\$0,$arg0d	# keyBitLength==128?3:4
+	jmp	.Lenc_rounds
+.size	Camellia_EncryptBlock,.-Camellia_EncryptBlock
+# V2
+.globl	Camellia_EncryptBlock_Rounds
+.type	Camellia_EncryptBlock_Rounds,\@function,4
+.align	16
+.Lenc_rounds:
+Camellia_EncryptBlock_Rounds:
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lenc_prologue:
+
+	#mov	%rsi,$inp		# put away arguments
+	mov	%rcx,$out
+	mov	%rdx,$key
+
+	shl	\$6,%edi		# process grandRounds
+	lea	.LCamellia_SBOX(%rip),$Tbl
+	lea	($key,%rdi),$keyend
+
+	mov	0(%rsi),@S[0]		# load plaintext
+	mov	4(%rsi),@S[1]
+	mov	8(%rsi),@S[2]
+	bswap	@S[0]
+	mov	12(%rsi),@S[3]
+	bswap	@S[1]
+	bswap	@S[2]
+	bswap	@S[3]
+
+	call	_x86_64_Camellia_encrypt
+
+	bswap	@S[0]
+	bswap	@S[1]
+	bswap	@S[2]
+	mov	@S[0],0($out)
+	bswap	@S[3]
+	mov	@S[1],4($out)
+	mov	@S[2],8($out)
+	mov	@S[3],12($out)
+
+	mov	0(%rsp),%r15
+.cfi_restore	%r15
+	mov	8(%rsp),%r14
+.cfi_restore	%r14
+	mov	16(%rsp),%r13
+.cfi_restore	%r13
+	mov	24(%rsp),%rbp
+.cfi_restore	%rbp
+	mov	32(%rsp),%rbx
+.cfi_restore	%rbx
+	lea	40(%rsp),%rsp
+.cfi_adjust_cfa_offset	-40
+.Lenc_epilogue:
+	ret
+.cfi_endproc
+.size	Camellia_EncryptBlock_Rounds,.-Camellia_EncryptBlock_Rounds
+
+.type	_x86_64_Camellia_encrypt,\@abi-omnipotent
+.align	16
+_x86_64_Camellia_encrypt:
+	xor	0($key),@S[1]
+	xor	4($key),@S[0]		# ^=key[0-3]
+	xor	8($key),@S[3]
+	xor	12($key),@S[2]
+.align	16
+.Leloop:
+	mov	16($key),$t1		# prefetch key[4-5]
+	mov	20($key),$t0
+
+___
+	for ($i=0;$i<6;$i++) { Camellia_Feistel($i,16); }
+$code.=<<___;
+	lea	16*4($key),$key
+	cmp	$keyend,$key
+	mov	8($key),$t3		# prefetch key[2-3]
+	mov	12($key),$t2
+	je	.Ledone
+
+	and	@S[0],$t0
+	or	@S[3],$t3
+	rol	\$1,$t0
+	xor	$t3,@S[2]		# s2^=s3|key[3];
+	xor	$t0,@S[1]		# s1^=LeftRotate(s0&key[0],1);
+	and	@S[2],$t2
+	or	@S[1],$t1
+	rol	\$1,$t2
+	xor	$t1,@S[0]		# s0^=s1|key[1];
+	xor	$t2,@S[3]		# s3^=LeftRotate(s2&key[2],1);
+	jmp	.Leloop
+
+.align	16
+.Ledone:
+	xor	@S[2],$t0		# SwapHalf
+	xor	@S[3],$t1
+	xor	@S[0],$t2
+	xor	@S[1],$t3
+
+	mov	$t0,@S[0]
+	mov	$t1,@S[1]
+	mov	$t2,@S[2]
+	mov	$t3,@S[3]
+
+	.byte	0xf3,0xc3		# rep ret
+.size	_x86_64_Camellia_encrypt,.-_x86_64_Camellia_encrypt
+
+# V1.x API
+.globl	Camellia_DecryptBlock
+.type	Camellia_DecryptBlock,\@abi-omnipotent
+.align	16
+Camellia_DecryptBlock:
+	movl	\$128,%eax
+	subl	$arg0d,%eax
+	movl	\$3,$arg0d
+	adcl	\$0,$arg0d	# keyBitLength==128?3:4
+	jmp	.Ldec_rounds
+.size	Camellia_DecryptBlock,.-Camellia_DecryptBlock
+# V2
+.globl	Camellia_DecryptBlock_Rounds
+.type	Camellia_DecryptBlock_Rounds,\@function,4
+.align	16
+.Ldec_rounds:
+Camellia_DecryptBlock_Rounds:
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Ldec_prologue:
+
+	#mov	%rsi,$inp		# put away arguments
+	mov	%rcx,$out
+	mov	%rdx,$keyend
+
+	shl	\$6,%edi		# process grandRounds
+	lea	.LCamellia_SBOX(%rip),$Tbl
+	lea	($keyend,%rdi),$key
+
+	mov	0(%rsi),@S[0]		# load plaintext
+	mov	4(%rsi),@S[1]
+	mov	8(%rsi),@S[2]
+	bswap	@S[0]
+	mov	12(%rsi),@S[3]
+	bswap	@S[1]
+	bswap	@S[2]
+	bswap	@S[3]
+
+	call	_x86_64_Camellia_decrypt
+
+	bswap	@S[0]
+	bswap	@S[1]
+	bswap	@S[2]
+	mov	@S[0],0($out)
+	bswap	@S[3]
+	mov	@S[1],4($out)
+	mov	@S[2],8($out)
+	mov	@S[3],12($out)
+
+	mov	0(%rsp),%r15
+.cfi_restore	%r15
+	mov	8(%rsp),%r14
+.cfi_restore	%r14
+	mov	16(%rsp),%r13
+.cfi_restore	%r13
+	mov	24(%rsp),%rbp
+.cfi_restore	%rbp
+	mov	32(%rsp),%rbx
+.cfi_restore	%rbx
+	lea	40(%rsp),%rsp
+.cfi_adjust_cfa_offset	-40
+.Ldec_epilogue:
+	ret
+.cfi_endproc
+.size	Camellia_DecryptBlock_Rounds,.-Camellia_DecryptBlock_Rounds
+
+.type	_x86_64_Camellia_decrypt,\@abi-omnipotent
+.align	16
+_x86_64_Camellia_decrypt:
+	xor	0($key),@S[1]
+	xor	4($key),@S[0]		# ^=key[0-3]
+	xor	8($key),@S[3]
+	xor	12($key),@S[2]
+.align	16
+.Ldloop:
+	mov	-8($key),$t1		# prefetch key[4-5]
+	mov	-4($key),$t0
+
+___
+	for ($i=0;$i<6;$i++) { Camellia_Feistel($i,-8); }
+$code.=<<___;
+	lea	-16*4($key),$key
+	cmp	$keyend,$key
+	mov	0($key),$t3		# prefetch key[2-3]
+	mov	4($key),$t2
+	je	.Lddone
+
+	and	@S[0],$t0
+	or	@S[3],$t3
+	rol	\$1,$t0
+	xor	$t3,@S[2]		# s2^=s3|key[3];
+	xor	$t0,@S[1]		# s1^=LeftRotate(s0&key[0],1);
+	and	@S[2],$t2
+	or	@S[1],$t1
+	rol	\$1,$t2
+	xor	$t1,@S[0]		# s0^=s1|key[1];
+	xor	$t2,@S[3]		# s3^=LeftRotate(s2&key[2],1);
+
+	jmp	.Ldloop
+
+.align	16
+.Lddone:
+	xor	@S[2],$t2
+	xor	@S[3],$t3
+	xor	@S[0],$t0
+	xor	@S[1],$t1
+
+	mov	$t2,@S[0]		# SwapHalf
+	mov	$t3,@S[1]
+	mov	$t0,@S[2]
+	mov	$t1,@S[3]
+
+	.byte	0xf3,0xc3		# rep ret
+.size	_x86_64_Camellia_decrypt,.-_x86_64_Camellia_decrypt
+___
+
+sub _saveround {
+my ($rnd,$key,@T)=@_;
+my $bias=int(@T[0])?shift(@T):0;
+
+    if ($#T==3) {
+	$code.=<<___;
+	mov	@T[1],`$bias+$rnd*8+0`($key)
+	mov	@T[0],`$bias+$rnd*8+4`($key)
+	mov	@T[3],`$bias+$rnd*8+8`($key)
+	mov	@T[2],`$bias+$rnd*8+12`($key)
+___
+    } else {
+	$code.="	mov	@T[0],`$bias+$rnd*8+0`($key)\n";
+	$code.="	mov	@T[1],`$bias+$rnd*8+8`($key)\n"	if ($#T>=1);
+    }
+}
+
+sub _loadround {
+my ($rnd,$key,@T)=@_;
+my $bias=int(@T[0])?shift(@T):0;
+
+$code.="	mov	`$bias+$rnd*8+0`($key),@T[0]\n";
+$code.="	mov	`$bias+$rnd*8+8`($key),@T[1]\n"	if ($#T>=1);
+}
+
+# shld is very slow on Intel EM64T family. Even on AMD it limits
+# instruction decode rate [because it's VectorPath] and consequently
+# performance...
+sub __rotl128 {
+my ($i0,$i1,$rot)=@_;
+
+    if ($rot) {
+	$code.=<<___;
+	mov	$i0,%r11
+	shld	\$$rot,$i1,$i0
+	shld	\$$rot,%r11,$i1
+___
+    }
+}
+
+# ... Implementing 128-bit rotate without shld gives 80% better
+# performance EM64T, +15% on AMD64 and only ~7% degradation on
+# Core2. This is therefore preferred.
+sub _rotl128 {
+my ($i0,$i1,$rot)=@_;
+
+    if ($rot) {
+	$code.=<<___;
+	mov	$i0,%r11
+	shl	\$$rot,$i0
+	mov	$i1,%r9
+	shr	\$`64-$rot`,%r9
+	shr	\$`64-$rot`,%r11
+	or	%r9,$i0
+	shl	\$$rot,$i1
+	or	%r11,$i1
+___
+    }
+}
+
+{ my $step=0;
+
+$code.=<<___;
+.globl	Camellia_Ekeygen
+.type	Camellia_Ekeygen,\@function,3
+.align	16
+Camellia_Ekeygen:
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lkey_prologue:
+
+	mov	%edi,${keyend}d		# put away arguments, keyBitLength
+	mov	%rdx,$out		# keyTable
+
+	mov	0(%rsi),@S[0]		# load 0-127 bits
+	mov	4(%rsi),@S[1]
+	mov	8(%rsi),@S[2]
+	mov	12(%rsi),@S[3]
+
+	bswap	@S[0]
+	bswap	@S[1]
+	bswap	@S[2]
+	bswap	@S[3]
+___
+	&_saveround	(0,$out,@S);	# KL<<<0
+$code.=<<___;
+	cmp	\$128,$keyend		# check keyBitLength
+	je	.L1st128
+
+	mov	16(%rsi),@S[0]		# load 128-191 bits
+	mov	20(%rsi),@S[1]
+	cmp	\$192,$keyend
+	je	.L1st192
+	mov	24(%rsi),@S[2]		# load 192-255 bits
+	mov	28(%rsi),@S[3]
+	jmp	.L1st256
+.L1st192:
+	mov	@S[0],@S[2]
+	mov	@S[1],@S[3]
+	not	@S[2]
+	not	@S[3]
+.L1st256:
+	bswap	@S[0]
+	bswap	@S[1]
+	bswap	@S[2]
+	bswap	@S[3]
+___
+	&_saveround	(4,$out,@S);	# temp storage for KR!
+$code.=<<___;
+	xor	0($out),@S[1]		# KR^KL
+	xor	4($out),@S[0]
+	xor	8($out),@S[3]
+	xor	12($out),@S[2]
+
+.L1st128:
+	lea	.LCamellia_SIGMA(%rip),$key
+	lea	.LCamellia_SBOX(%rip),$Tbl
+
+	mov	0($key),$t1
+	mov	4($key),$t0
+___
+	&Camellia_Feistel($step++);
+	&Camellia_Feistel($step++);
+$code.=<<___;
+	xor	0($out),@S[1]		# ^KL
+	xor	4($out),@S[0]
+	xor	8($out),@S[3]
+	xor	12($out),@S[2]
+___
+	&Camellia_Feistel($step++);
+	&Camellia_Feistel($step++);
+$code.=<<___;
+	cmp	\$128,$keyend
+	jne	.L2nd256
+
+	lea	128($out),$out		# size optimization
+	shl	\$32,%r8		# @S[0]||
+	shl	\$32,%r10		# @S[2]||
+	or	%r9,%r8			# ||@S[1]
+	or	%r11,%r10		# ||@S[3]
+___
+	&_loadround	(0,$out,-128,"%rax","%rbx");	# KL
+	&_saveround	(2,$out,-128,"%r8","%r10");	# KA<<<0
+	&_rotl128	("%rax","%rbx",15);
+	&_saveround	(4,$out,-128,"%rax","%rbx");	# KL<<<15
+	&_rotl128	("%r8","%r10",15);
+	&_saveround	(6,$out,-128,"%r8","%r10");	# KA<<<15
+	&_rotl128	("%r8","%r10",15);		# 15+15=30
+	&_saveround	(8,$out,-128,"%r8","%r10");	# KA<<<30
+	&_rotl128	("%rax","%rbx",30);		# 15+30=45
+	&_saveround	(10,$out,-128,"%rax","%rbx");	# KL<<<45
+	&_rotl128	("%r8","%r10",15);		# 30+15=45
+	&_saveround	(12,$out,-128,"%r8");		# KA<<<45
+	&_rotl128	("%rax","%rbx",15);		# 45+15=60
+	&_saveround	(13,$out,-128,"%rbx");		# KL<<<60
+	&_rotl128	("%r8","%r10",15);		# 45+15=60
+	&_saveround	(14,$out,-128,"%r8","%r10");	# KA<<<60
+	&_rotl128	("%rax","%rbx",17);		# 60+17=77
+	&_saveround	(16,$out,-128,"%rax","%rbx");	# KL<<<77
+	&_rotl128	("%rax","%rbx",17);		# 77+17=94
+	&_saveround	(18,$out,-128,"%rax","%rbx");	# KL<<<94
+	&_rotl128	("%r8","%r10",34);		# 60+34=94
+	&_saveround	(20,$out,-128,"%r8","%r10");	# KA<<<94
+	&_rotl128	("%rax","%rbx",17);		# 94+17=111
+	&_saveround	(22,$out,-128,"%rax","%rbx");	# KL<<<111
+	&_rotl128	("%r8","%r10",17);		# 94+17=111
+	&_saveround	(24,$out,-128,"%r8","%r10");	# KA<<<111
+$code.=<<___;
+	mov	\$3,%eax
+	jmp	.Ldone
+.align	16
+.L2nd256:
+___
+	&_saveround	(6,$out,@S);	# temp storage for KA!
+$code.=<<___;
+	xor	`4*8+0`($out),@S[1]	# KA^KR
+	xor	`4*8+4`($out),@S[0]
+	xor	`5*8+0`($out),@S[3]
+	xor	`5*8+4`($out),@S[2]
+___
+	&Camellia_Feistel($step++);
+	&Camellia_Feistel($step++);
+
+	&_loadround	(0,$out,"%rax","%rbx");	# KL
+	&_loadround	(4,$out,"%rcx","%rdx");	# KR
+	&_loadround	(6,$out,"%r14","%r15");	# KA
+$code.=<<___;
+	lea	128($out),$out		# size optimization
+	shl	\$32,%r8		# @S[0]||
+	shl	\$32,%r10		# @S[2]||
+	or	%r9,%r8			# ||@S[1]
+	or	%r11,%r10		# ||@S[3]
+___
+	&_saveround	(2,$out,-128,"%r8","%r10");	# KB<<<0
+	&_rotl128	("%rcx","%rdx",15);
+	&_saveround	(4,$out,-128,"%rcx","%rdx");	# KR<<<15
+	&_rotl128	("%r14","%r15",15);
+	&_saveround	(6,$out,-128,"%r14","%r15");	# KA<<<15
+	&_rotl128	("%rcx","%rdx",15);		# 15+15=30
+	&_saveround	(8,$out,-128,"%rcx","%rdx");	# KR<<<30
+	&_rotl128	("%r8","%r10",30);
+	&_saveround	(10,$out,-128,"%r8","%r10");	# KB<<<30
+	&_rotl128	("%rax","%rbx",45);
+	&_saveround	(12,$out,-128,"%rax","%rbx");	# KL<<<45
+	&_rotl128	("%r14","%r15",30);		# 15+30=45
+	&_saveround	(14,$out,-128,"%r14","%r15");	# KA<<<45
+	&_rotl128	("%rax","%rbx",15);		# 45+15=60
+	&_saveround	(16,$out,-128,"%rax","%rbx");	# KL<<<60
+	&_rotl128	("%rcx","%rdx",30);		# 30+30=60
+	&_saveround	(18,$out,-128,"%rcx","%rdx");	# KR<<<60
+	&_rotl128	("%r8","%r10",30);		# 30+30=60
+	&_saveround	(20,$out,-128,"%r8","%r10");	# KB<<<60
+	&_rotl128	("%rax","%rbx",17);		# 60+17=77
+	&_saveround	(22,$out,-128,"%rax","%rbx");	# KL<<<77
+	&_rotl128	("%r14","%r15",32);		# 45+32=77
+	&_saveround	(24,$out,-128,"%r14","%r15");	# KA<<<77
+	&_rotl128	("%rcx","%rdx",34);		# 60+34=94
+	&_saveround	(26,$out,-128,"%rcx","%rdx");	# KR<<<94
+	&_rotl128	("%r14","%r15",17);		# 77+17=94
+	&_saveround	(28,$out,-128,"%r14","%r15");	# KA<<<77
+	&_rotl128	("%rax","%rbx",34);		# 77+34=111
+	&_saveround	(30,$out,-128,"%rax","%rbx");	# KL<<<111
+	&_rotl128	("%r8","%r10",51);		# 60+51=111
+	&_saveround	(32,$out,-128,"%r8","%r10");	# KB<<<111
+$code.=<<___;
+	mov	\$4,%eax
+.Ldone:
+	mov	0(%rsp),%r15
+.cfi_restore	%r15
+	mov	8(%rsp),%r14
+.cfi_restore	%r14
+	mov	16(%rsp),%r13
+.cfi_restore	%r13
+	mov	24(%rsp),%rbp
+.cfi_restore	%rbp
+	mov	32(%rsp),%rbx
+.cfi_restore	%rbx
+	lea	40(%rsp),%rsp
+.cfi_adjust_cfa_offset	-40
+.Lkey_epilogue:
+	ret
+.cfi_endproc
+.size	Camellia_Ekeygen,.-Camellia_Ekeygen
+___
+}
+
+@SBOX=(
+112,130, 44,236,179, 39,192,229,228,133, 87, 53,234, 12,174, 65,
+ 35,239,107,147, 69, 25,165, 33,237, 14, 79, 78, 29,101,146,189,
+134,184,175,143,124,235, 31,206, 62, 48,220, 95, 94,197, 11, 26,
+166,225, 57,202,213, 71, 93, 61,217,  1, 90,214, 81, 86,108, 77,
+139, 13,154,102,251,204,176, 45,116, 18, 43, 32,240,177,132,153,
+223, 76,203,194, 52,126,118,  5,109,183,169, 49,209, 23,  4,215,
+ 20, 88, 58, 97,222, 27, 17, 28, 50, 15,156, 22, 83, 24,242, 34,
+254, 68,207,178,195,181,122,145, 36,  8,232,168, 96,252,105, 80,
+170,208,160,125,161,137, 98,151, 84, 91, 30,149,224,255,100,210,
+ 16,196,  0, 72,163,247,117,219,138,  3,230,218,  9, 63,221,148,
+135, 92,131,  2,205, 74,144, 51,115,103,246,243,157,127,191,226,
+ 82,155,216, 38,200, 55,198, 59,129,150,111, 75, 19,190, 99, 46,
+233,121,167,140,159,110,188,142, 41,245,249,182, 47,253,180, 89,
+120,152,  6,106,231, 70,113,186,212, 37,171, 66,136,162,141,250,
+114,  7,185, 85,248,238,172, 10, 54, 73, 42,104, 60, 56,241,164,
+ 64, 40,211,123,187,201, 67,193, 21,227,173,244,119,199,128,158);
+
+sub S1110 { my $i=shift; $i=@SBOX[$i]; $i=$i<<24|$i<<16|$i<<8; sprintf("0x%08x",$i); }
+sub S4404 { my $i=shift; $i=($i<<1|$i>>7)&0xff; $i=@SBOX[$i]; $i=$i<<24|$i<<16|$i; sprintf("0x%08x",$i); }
+sub S0222 { my $i=shift; $i=@SBOX[$i]; $i=($i<<1|$i>>7)&0xff; $i=$i<<16|$i<<8|$i; sprintf("0x%08x",$i); }
+sub S3033 { my $i=shift; $i=@SBOX[$i]; $i=($i>>1|$i<<7)&0xff; $i=$i<<24|$i<<8|$i; sprintf("0x%08x",$i); }
+
+$code.=<<___;
+.align	64
+.LCamellia_SIGMA:
+.long	0x3bcc908b, 0xa09e667f, 0x4caa73b2, 0xb67ae858
+.long	0xe94f82be, 0xc6ef372f, 0xf1d36f1c, 0x54ff53a5
+.long	0xde682d1d, 0x10e527fa, 0xb3e6c1fd, 0xb05688c2
+.long	0,          0,          0,          0
+.LCamellia_SBOX:
+___
+# tables are interleaved, remember?
+sub data_word { $code.=".long\t".join(',',@_)."\n"; }
+for ($i=0;$i<256;$i++) { &data_word(&S1110($i),&S4404($i)); }
+for ($i=0;$i<256;$i++) { &data_word(&S0222($i),&S3033($i)); }
+
+# void Camellia_cbc_encrypt (const void char *inp, unsigned char *out,
+#			size_t length, const CAMELLIA_KEY *key,
+#			unsigned char *ivp,const int enc);
+{
+$_key="0(%rsp)";
+$_end="8(%rsp)";	# inp+len&~15
+$_res="16(%rsp)";	# len&15
+$ivec="24(%rsp)";
+$_ivp="40(%rsp)";
+$_rsp="48(%rsp)";
+
+$code.=<<___;
+.globl	Camellia_cbc_encrypt
+.type	Camellia_cbc_encrypt,\@function,6
+.align	16
+Camellia_cbc_encrypt:
+.cfi_startproc
+	cmp	\$0,%rdx
+	je	.Lcbc_abort
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lcbc_prologue:
+
+	mov	%rsp,%rbp
+.cfi_def_cfa_register	%rbp
+	sub	\$64,%rsp
+	and	\$-64,%rsp
+
+	# place stack frame just "above mod 1024" the key schedule,
+	# this ensures that cache associativity suffices
+	lea	-64-63(%rcx),%r10
+	sub	%rsp,%r10
+	neg	%r10
+	and	\$0x3C0,%r10
+	sub	%r10,%rsp
+	#add	\$8,%rsp		# 8 is reserved for callee's ra
+
+	mov	%rdi,$inp		# inp argument
+	mov	%rsi,$out		# out argument
+	mov	%r8,%rbx		# ivp argument
+	mov	%rcx,$key		# key argument
+	mov	272(%rcx),${keyend}d	# grandRounds
+
+	mov	%r8,$_ivp
+	mov	%rbp,$_rsp
+.cfi_cfa_expression	$_rsp,deref,+56
+
+.Lcbc_body:
+	lea	.LCamellia_SBOX(%rip),$Tbl
+
+	mov	\$32,%ecx
+.align	4
+.Lcbc_prefetch_sbox:
+	mov	0($Tbl),%rax
+	mov	32($Tbl),%rsi
+	mov	64($Tbl),%rdi
+	mov	96($Tbl),%r11
+	lea	128($Tbl),$Tbl
+	loop	.Lcbc_prefetch_sbox
+	sub	\$4096,$Tbl
+	shl	\$6,$keyend
+	mov	%rdx,%rcx		# len argument
+	lea	($key,$keyend),$keyend
+
+	cmp	\$0,%r9d		# enc argument
+	je	.LCBC_DECRYPT
+
+	and	\$-16,%rdx
+	and	\$15,%rcx		# length residue
+	lea	($inp,%rdx),%rdx
+	mov	$key,$_key
+	mov	%rdx,$_end
+	mov	%rcx,$_res
+
+	cmp	$inp,%rdx
+	mov	0(%rbx),@S[0]		# load IV
+	mov	4(%rbx),@S[1]
+	mov	8(%rbx),@S[2]
+	mov	12(%rbx),@S[3]
+	je	.Lcbc_enc_tail
+	jmp	.Lcbc_eloop
+
+.align	16
+.Lcbc_eloop:
+	xor	0($inp),@S[0]
+	xor	4($inp),@S[1]
+	xor	8($inp),@S[2]
+	bswap	@S[0]
+	xor	12($inp),@S[3]
+	bswap	@S[1]
+	bswap	@S[2]
+	bswap	@S[3]
+
+	call	_x86_64_Camellia_encrypt
+
+	mov	$_key,$key		# "rewind" the key
+	bswap	@S[0]
+	mov	$_end,%rdx
+	bswap	@S[1]
+	mov	$_res,%rcx
+	bswap	@S[2]
+	mov	@S[0],0($out)
+	bswap	@S[3]
+	mov	@S[1],4($out)
+	mov	@S[2],8($out)
+	lea	16($inp),$inp
+	mov	@S[3],12($out)
+	cmp	%rdx,$inp
+	lea	16($out),$out
+	jne	.Lcbc_eloop
+
+	cmp	\$0,%rcx
+	jne	.Lcbc_enc_tail
+
+	mov	$_ivp,$out
+	mov	@S[0],0($out)		# write out IV residue
+	mov	@S[1],4($out)
+	mov	@S[2],8($out)
+	mov	@S[3],12($out)
+	jmp	.Lcbc_done
+
+.align	16
+.Lcbc_enc_tail:
+	xor	%rax,%rax
+	mov	%rax,0+$ivec
+	mov	%rax,8+$ivec
+	mov	%rax,$_res
+
+.Lcbc_enc_pushf:
+	pushfq
+	cld
+	mov	$inp,%rsi
+	lea	8+$ivec,%rdi
+	.long	0x9066A4F3		# rep movsb
+	popfq
+.Lcbc_enc_popf:
+
+	lea	$ivec,$inp
+	lea	16+$ivec,%rax
+	mov	%rax,$_end
+	jmp	.Lcbc_eloop		# one more time
+
+.align	16
+.LCBC_DECRYPT:
+	xchg	$key,$keyend
+	add	\$15,%rdx
+	and	\$15,%rcx		# length residue
+	and	\$-16,%rdx
+	mov	$key,$_key
+	lea	($inp,%rdx),%rdx
+	mov	%rdx,$_end
+	mov	%rcx,$_res
+
+	mov	(%rbx),%rax		# load IV
+	mov	8(%rbx),%rbx
+	jmp	.Lcbc_dloop
+.align	16
+.Lcbc_dloop:
+	mov	0($inp),@S[0]
+	mov	4($inp),@S[1]
+	mov	8($inp),@S[2]
+	bswap	@S[0]
+	mov	12($inp),@S[3]
+	bswap	@S[1]
+	mov	%rax,0+$ivec		# save IV to temporary storage
+	bswap	@S[2]
+	mov	%rbx,8+$ivec
+	bswap	@S[3]
+
+	call	_x86_64_Camellia_decrypt
+
+	mov	$_key,$key		# "rewind" the key
+	mov	$_end,%rdx
+	mov	$_res,%rcx
+
+	bswap	@S[0]
+	mov	($inp),%rax		# load IV for next iteration
+	bswap	@S[1]
+	mov	8($inp),%rbx
+	bswap	@S[2]
+	xor	0+$ivec,@S[0]
+	bswap	@S[3]
+	xor	4+$ivec,@S[1]
+	xor	8+$ivec,@S[2]
+	lea	16($inp),$inp
+	xor	12+$ivec,@S[3]
+	cmp	%rdx,$inp
+	je	.Lcbc_ddone
+
+	mov	@S[0],0($out)
+	mov	@S[1],4($out)
+	mov	@S[2],8($out)
+	mov	@S[3],12($out)
+
+	lea	16($out),$out
+	jmp	.Lcbc_dloop
+
+.align	16
+.Lcbc_ddone:
+	mov	$_ivp,%rdx
+	cmp	\$0,%rcx
+	jne	.Lcbc_dec_tail
+
+	mov	@S[0],0($out)
+	mov	@S[1],4($out)
+	mov	@S[2],8($out)
+	mov	@S[3],12($out)
+
+	mov	%rax,(%rdx)		# write out IV residue
+	mov	%rbx,8(%rdx)
+	jmp	.Lcbc_done
+.align	16
+.Lcbc_dec_tail:
+	mov	@S[0],0+$ivec
+	mov	@S[1],4+$ivec
+	mov	@S[2],8+$ivec
+	mov	@S[3],12+$ivec
+
+.Lcbc_dec_pushf:
+	pushfq
+	cld
+	lea	8+$ivec,%rsi
+	lea	($out),%rdi
+	.long	0x9066A4F3		# rep movsb
+	popfq
+.Lcbc_dec_popf:
+
+	mov	%rax,(%rdx)		# write out IV residue
+	mov	%rbx,8(%rdx)
+	jmp	.Lcbc_done
+
+.align	16
+.Lcbc_done:
+	mov	$_rsp,%rcx
+.cfi_def_cfa	%rcx,56
+	mov	0(%rcx),%r15
+.cfi_restore	%r15
+	mov	8(%rcx),%r14
+.cfi_restore	%r14
+	mov	16(%rcx),%r13
+.cfi_restore	%r13
+	mov	24(%rcx),%r12
+.cfi_restore	%r12
+	mov	32(%rcx),%rbp
+.cfi_restore	%rbp
+	mov	40(%rcx),%rbx
+.cfi_restore	%rbx
+	lea	48(%rcx),%rsp
+.cfi_def_cfa	%rsp,8
+.Lcbc_abort:
+	ret
+.cfi_endproc
+.size	Camellia_cbc_encrypt,.-Camellia_cbc_encrypt
+
+.asciz	"Camellia for x86_64 by <appro\@openssl.org>"
+___
+}
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	common_se_handler,\@abi-omnipotent
+.align	16
+common_se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	lea	-64(%rsp),%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lin_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lin_prologue
+
+	lea	40(%rax),%rax
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r13
+	mov	-32(%rax),%r14
+	mov	-40(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+.Lin_prologue:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	jmp	.Lcommon_seh_exit
+.size	common_se_handler,.-common_se_handler
+
+.type	cbc_se_handler,\@abi-omnipotent
+.align	16
+cbc_se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	lea	-64(%rsp),%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	lea	.Lcbc_prologue(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<.Lcbc_prologue
+	jb	.Lin_cbc_prologue
+
+	lea	.Lcbc_body(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<.Lcbc_body
+	jb	.Lin_cbc_frame_setup
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	lea	.Lcbc_abort(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip>=.Lcbc_abort
+	jae	.Lin_cbc_prologue
+
+	# handle pushf/popf in Camellia_cbc_encrypt
+	lea	.Lcbc_enc_pushf(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<=.Lcbc_enc_pushf
+	jbe	.Lin_cbc_no_flag
+	lea	8(%rax),%rax
+	lea	.Lcbc_enc_popf(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<.Lcbc_enc_popf
+	jb	.Lin_cbc_no_flag
+	lea	-8(%rax),%rax
+	lea	.Lcbc_dec_pushf(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<=.Lcbc_dec_pushf
+	jbe	.Lin_cbc_no_flag
+	lea	8(%rax),%rax
+	lea	.Lcbc_dec_popf(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<.Lcbc_dec_popf
+	jb	.Lin_cbc_no_flag
+	lea	-8(%rax),%rax
+
+.Lin_cbc_no_flag:
+	mov	48(%rax),%rax		# $_rsp
+	lea	48(%rax),%rax
+
+.Lin_cbc_frame_setup:
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+.Lin_cbc_prologue:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+.align	4
+.Lcommon_seh_exit:
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$`1232/8`,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	lea	64(%rsp),%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	cbc_se_handler,.-cbc_se_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_Camellia_EncryptBlock_Rounds
+	.rva	.LSEH_end_Camellia_EncryptBlock_Rounds
+	.rva	.LSEH_info_Camellia_EncryptBlock_Rounds
+
+	.rva	.LSEH_begin_Camellia_DecryptBlock_Rounds
+	.rva	.LSEH_end_Camellia_DecryptBlock_Rounds
+	.rva	.LSEH_info_Camellia_DecryptBlock_Rounds
+
+	.rva	.LSEH_begin_Camellia_Ekeygen
+	.rva	.LSEH_end_Camellia_Ekeygen
+	.rva	.LSEH_info_Camellia_Ekeygen
+
+	.rva	.LSEH_begin_Camellia_cbc_encrypt
+	.rva	.LSEH_end_Camellia_cbc_encrypt
+	.rva	.LSEH_info_Camellia_cbc_encrypt
+
+.section	.xdata
+.align	8
+.LSEH_info_Camellia_EncryptBlock_Rounds:
+	.byte	9,0,0,0
+	.rva	common_se_handler
+	.rva	.Lenc_prologue,.Lenc_epilogue	# HandlerData[]
+.LSEH_info_Camellia_DecryptBlock_Rounds:
+	.byte	9,0,0,0
+	.rva	common_se_handler
+	.rva	.Ldec_prologue,.Ldec_epilogue	# HandlerData[]
+.LSEH_info_Camellia_Ekeygen:
+	.byte	9,0,0,0
+	.rva	common_se_handler
+	.rva	.Lkey_prologue,.Lkey_epilogue	# HandlerData[]
+.LSEH_info_Camellia_cbc_encrypt:
+	.byte	9,0,0,0
+	.rva	cbc_se_handler
+___
+}
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/asm/cmllt4-sparcv9.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/asm/cmllt4-sparcv9.pl
new file mode 100644
index 000000000..6396679a5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/asm/cmllt4-sparcv9.pl
@@ -0,0 +1,939 @@
+#! /usr/bin/env perl
+# Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by David S. Miller and Andy Polyakov.
+# The module is licensed under 2-clause BSD
+# license. October 2012. All rights reserved.
+# ====================================================================
+
+######################################################################
+# Camellia for SPARC T4.
+#
+# As with AES below results [for aligned data] are virtually identical
+# to critical path lengths for 3-cycle instruction latency:
+#
+#		128-bit key	192/256-
+# CBC encrypt	4.14/4.21(*)	5.46/5.52
+#			 (*) numbers after slash are for
+#			     misaligned data.
+#
+# As with Intel AES-NI, question is if it's possible to improve
+# performance of parallelizable modes by interleaving round
+# instructions. In Camellia every instruction is dependent on
+# previous, which means that there is place for 2 additional ones
+# in between two dependent. Can we expect 3x performance improvement?
+# At least one can argue that it should be possible to break 2x
+# barrier... For some reason not even 2x appears to be possible:
+#
+#		128-bit key	192/256-
+# CBC decrypt	2.21/2.74	2.99/3.40
+# CTR		2.15/2.68(*)	2.93/3.34
+#			 (*) numbers after slash are for
+#			     misaligned data.
+#
+# This is for 2x interleave. But compared to 1x interleave CBC decrypt
+# improved by ... 0% for 128-bit key, and 11% for 192/256-bit one.
+# So that out-of-order execution logic can take non-interleaved code
+# to 1.87x, but can't take 2x interleaved one any further. There
+# surely is some explanation... As result 3x interleave was not even
+# attempted. Instead an effort was made to share specific modes
+# implementations with AES module (therefore sparct4_modes.pl).
+#
+# To anchor to something else, software C implementation processes
+# one byte in 38 cycles with 128-bit key on same processor.
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "sparcv9_modes.pl";
+
+$output = pop;
+open STDOUT,">$output";
+
+$::evp=1;	# if $evp is set to 0, script generates module with
+# Camellia_[en|de]crypt, Camellia_set_key and Camellia_cbc_encrypt
+# entry points. These are fully compatible with openssl/camellia.h.
+
+######################################################################
+# single-round subroutines
+#
+{
+my ($inp,$out,$key,$rounds,$tmp,$mask)=map("%o$_",(0..5));
+
+$code=<<___;
+#include "sparc_arch.h"
+
+.text
+
+.globl	cmll_t4_encrypt
+.align	32
+cmll_t4_encrypt:
+	andcc		$inp, 7, %g1		! is input aligned?
+	andn		$inp, 7, $inp
+
+	ldx		[$key + 0], %g4
+	ldx		[$key + 8], %g5
+
+	ldx		[$inp + 0], %o4
+	bz,pt		%icc, 1f
+	ldx		[$inp + 8], %o5
+	ldx		[$inp + 16], $inp
+	sll		%g1, 3, %g1
+	sub		%g0, %g1, %o3
+	sllx		%o4, %g1, %o4
+	sllx		%o5, %g1, %g1
+	srlx		%o5, %o3, %o5
+	srlx		$inp, %o3, %o3
+	or		%o5, %o4, %o4
+	or		%o3, %g1, %o5
+1:
+	ld		[$key + 272], $rounds	! grandRounds, 3 or 4
+	ldd		[$key + 16], %f12
+	ldd		[$key + 24], %f14
+	xor		%g4, %o4, %o4
+	xor		%g5, %o5, %o5
+	ldd		[$key + 32], %f16
+	ldd		[$key + 40], %f18
+	movxtod		%o4, %f0
+	movxtod		%o5, %f2
+	ldd		[$key + 48], %f20
+	ldd		[$key + 56], %f22
+	sub		$rounds, 1, $rounds
+	ldd		[$key + 64], %f24
+	ldd		[$key + 72], %f26
+	add		$key, 80, $key
+
+.Lenc:
+	camellia_f	%f12, %f2, %f0, %f2
+	ldd		[$key + 0], %f12
+	sub		$rounds,1,$rounds
+	camellia_f	%f14, %f0, %f2, %f0
+	ldd		[$key + 8], %f14
+	camellia_f	%f16, %f2, %f0, %f2
+	ldd		[$key + 16], %f16
+	camellia_f	%f18, %f0, %f2, %f0
+	ldd		[$key + 24], %f18
+	camellia_f	%f20, %f2, %f0, %f2
+	ldd		[$key + 32], %f20
+	camellia_f	%f22, %f0, %f2, %f0
+	ldd		[$key + 40], %f22
+	camellia_fl	%f24, %f0, %f0
+	ldd		[$key + 48], %f24
+	camellia_fli	%f26, %f2, %f2
+	ldd		[$key + 56], %f26
+	brnz,pt		$rounds, .Lenc
+	add		$key, 64, $key
+
+	andcc		$out, 7, $tmp		! is output aligned?
+	camellia_f	%f12, %f2, %f0, %f2
+	camellia_f	%f14, %f0, %f2, %f0
+	camellia_f	%f16, %f2, %f0, %f2
+	camellia_f	%f18, %f0, %f2, %f0
+	camellia_f	%f20, %f2, %f0, %f4
+	camellia_f	%f22, %f0, %f4, %f2
+	fxor		%f24, %f4, %f0
+	fxor		%f26, %f2, %f2
+
+	bnz,pn		%icc, 2f
+	nop
+
+	std		%f0, [$out + 0]
+	retl
+	std		%f2, [$out + 8]
+
+2:	alignaddrl	$out, %g0, $out
+	mov		0xff, $mask
+	srl		$mask, $tmp, $mask
+
+	faligndata	%f0, %f0, %f4
+	faligndata	%f0, %f2, %f6
+	faligndata	%f2, %f2, %f8
+
+	stda		%f4, [$out + $mask]0xc0	! partial store
+	std		%f6, [$out + 8]
+	add		$out, 16, $out
+	orn		%g0, $mask, $mask
+	retl
+	stda		%f8, [$out + $mask]0xc0	! partial store
+.type	cmll_t4_encrypt,#function
+.size	cmll_t4_encrypt,.-cmll_t4_encrypt
+
+.globl	cmll_t4_decrypt
+.align	32
+cmll_t4_decrypt:
+	ld		[$key + 272], $rounds	! grandRounds, 3 or 4
+	andcc		$inp, 7, %g1		! is input aligned?
+	andn		$inp, 7, $inp
+
+	sll		$rounds, 6, $rounds
+	add		$rounds, $key, $key
+
+	ldx		[$inp + 0], %o4
+	bz,pt		%icc, 1f
+	ldx		[$inp + 8], %o5
+	ldx		[$inp + 16], $inp
+	sll		%g1, 3, %g1
+	sub		%g0, %g1, %g4
+	sllx		%o4, %g1, %o4
+	sllx		%o5, %g1, %g1
+	srlx		%o5, %g4, %o5
+	srlx		$inp, %g4, %g4
+	or		%o5, %o4, %o4
+	or		%g4, %g1, %o5
+1:
+	ldx		[$key + 0], %g4
+	ldx		[$key + 8], %g5
+	ldd		[$key - 8], %f12
+	ldd		[$key - 16], %f14
+	xor		%g4, %o4, %o4
+	xor		%g5, %o5, %o5
+	ldd		[$key - 24], %f16
+	ldd		[$key - 32], %f18
+	movxtod		%o4, %f0
+	movxtod		%o5, %f2
+	ldd		[$key - 40], %f20
+	ldd		[$key - 48], %f22
+	sub		$rounds, 64, $rounds
+	ldd		[$key - 56], %f24
+	ldd		[$key - 64], %f26
+	sub		$key, 64, $key
+
+.Ldec:
+	camellia_f	%f12, %f2, %f0, %f2
+	ldd		[$key - 8], %f12
+	sub		$rounds, 64, $rounds
+	camellia_f	%f14, %f0, %f2, %f0
+	ldd		[$key - 16], %f14
+	camellia_f	%f16, %f2, %f0, %f2
+	ldd		[$key - 24], %f16
+	camellia_f	%f18, %f0, %f2, %f0
+	ldd		[$key - 32], %f18
+	camellia_f	%f20, %f2, %f0, %f2
+	ldd		[$key - 40], %f20
+	camellia_f	%f22, %f0, %f2, %f0
+	ldd		[$key - 48], %f22
+	camellia_fl	%f24, %f0, %f0
+	ldd		[$key - 56], %f24
+	camellia_fli	%f26, %f2, %f2
+	ldd		[$key - 64], %f26
+	brnz,pt		$rounds, .Ldec
+	sub		$key, 64, $key
+
+	andcc		$out, 7, $tmp		! is output aligned?
+	camellia_f	%f12, %f2, %f0, %f2
+	camellia_f	%f14, %f0, %f2, %f0
+	camellia_f	%f16, %f2, %f0, %f2
+	camellia_f	%f18, %f0, %f2, %f0
+	camellia_f	%f20, %f2, %f0, %f4
+	camellia_f	%f22, %f0, %f4, %f2
+	fxor		%f26, %f4, %f0
+	fxor		%f24, %f2, %f2
+
+	bnz,pn		%icc, 2f
+	nop
+
+	std		%f0, [$out + 0]
+	retl
+	std		%f2, [$out + 8]
+
+2:	alignaddrl	$out, %g0, $out
+	mov		0xff, $mask
+	srl		$mask, $tmp, $mask
+
+	faligndata	%f0, %f0, %f4
+	faligndata	%f0, %f2, %f6
+	faligndata	%f2, %f2, %f8
+
+	stda		%f4, [$out + $mask]0xc0	! partial store
+	std		%f6, [$out + 8]
+	add		$out, 16, $out
+	orn		%g0, $mask, $mask
+	retl
+	stda		%f8, [$out + $mask]0xc0	! partial store
+.type	cmll_t4_decrypt,#function
+.size	cmll_t4_decrypt,.-cmll_t4_decrypt
+___
+}
+
+######################################################################
+# key setup subroutines
+#
+{
+sub ROTL128 {
+  my $rot = shift;
+
+	"srlx	%o4, 64-$rot, %g4\n\t".
+	"sllx	%o4, $rot, %o4\n\t".
+	"srlx	%o5, 64-$rot, %g5\n\t".
+	"sllx	%o5, $rot, %o5\n\t".
+	"or	%o4, %g5, %o4\n\t".
+	"or	%o5, %g4, %o5";
+}
+
+my ($inp,$bits,$out,$tmp)=map("%o$_",(0..5));
+$code.=<<___;
+.globl	cmll_t4_set_key
+.align	32
+cmll_t4_set_key:
+	and		$inp, 7, $tmp
+	alignaddr	$inp, %g0, $inp
+	cmp		$bits, 192
+	ldd		[$inp + 0], %f0
+	bl,pt		%icc,.L128
+	ldd		[$inp + 8], %f2
+
+	be,pt		%icc,.L192
+	ldd		[$inp + 16], %f4
+
+	brz,pt		$tmp, .L256aligned
+	ldd		[$inp + 24], %f6
+
+	ldd		[$inp + 32], %f8
+	faligndata	%f0, %f2, %f0
+	faligndata	%f2, %f4, %f2
+	faligndata	%f4, %f6, %f4
+	b		.L256aligned
+	faligndata	%f6, %f8, %f6
+
+.align	16
+.L192:
+	brz,a,pt	$tmp, .L256aligned
+	fnot2		%f4, %f6
+
+	ldd		[$inp + 24], %f6
+	nop
+	faligndata	%f0, %f2, %f0
+	faligndata	%f2, %f4, %f2
+	faligndata	%f4, %f6, %f4
+	fnot2		%f4, %f6
+
+.L256aligned:
+	std		%f0, [$out + 0]		! k[0, 1]
+	fsrc2		%f0, %f28
+	std		%f2, [$out + 8]		! k[2, 3]
+	fsrc2		%f2, %f30
+	fxor		%f4, %f0, %f0
+	b		.L128key
+	fxor		%f6, %f2, %f2
+
+.align	16
+.L128:
+	brz,pt		$tmp, .L128aligned
+	nop
+
+	ldd		[$inp + 16], %f4
+	nop
+	faligndata	%f0, %f2, %f0
+	faligndata	%f2, %f4, %f2
+
+.L128aligned:
+	std		%f0, [$out + 0]		! k[0, 1]
+	fsrc2		%f0, %f28
+	std		%f2, [$out + 8]		! k[2, 3]
+	fsrc2		%f2, %f30
+
+.L128key:
+	mov		%o7, %o5
+1:	call		.+8
+	add		%o7, SIGMA-1b, %o4
+	mov		%o5, %o7
+
+	ldd		[%o4 + 0], %f16
+	ldd		[%o4 + 8], %f18
+	ldd		[%o4 + 16], %f20
+	ldd		[%o4 + 24], %f22
+
+	camellia_f	%f16, %f2, %f0, %f2
+	camellia_f	%f18, %f0, %f2, %f0
+	fxor		%f28, %f0, %f0
+	fxor		%f30, %f2, %f2
+	camellia_f	%f20, %f2, %f0, %f2
+	camellia_f	%f22, %f0, %f2, %f0
+
+	bge,pn		%icc, .L256key
+	nop
+	std	%f0, [$out + 0x10]	! k[ 4,  5]
+	std	%f2, [$out + 0x18]	! k[ 6,  7]
+
+	movdtox	%f0, %o4
+	movdtox	%f2, %o5
+	`&ROTL128(15)`
+	stx	%o4, [$out + 0x30]	! k[12, 13]
+	stx	%o5, [$out + 0x38]	! k[14, 15]
+	`&ROTL128(15)`
+	stx	%o4, [$out + 0x40]	! k[16, 17]
+	stx	%o5, [$out + 0x48]	! k[18, 19]
+	`&ROTL128(15)`
+	stx	%o4, [$out + 0x60]	! k[24, 25]
+	`&ROTL128(15)`
+	stx	%o4, [$out + 0x70]	! k[28, 29]
+	stx	%o5, [$out + 0x78]	! k[30, 31]
+	`&ROTL128(34)`
+	stx	%o4, [$out + 0xa0]	! k[40, 41]
+	stx	%o5, [$out + 0xa8]	! k[42, 43]
+	`&ROTL128(17)`
+	stx	%o4, [$out + 0xc0]	! k[48, 49]
+	stx	%o5, [$out + 0xc8]	! k[50, 51]
+
+	movdtox	%f28, %o4		! k[ 0,  1]
+	movdtox	%f30, %o5		! k[ 2,  3]
+	`&ROTL128(15)`
+	stx	%o4, [$out + 0x20]	! k[ 8,  9]
+	stx	%o5, [$out + 0x28]	! k[10, 11]
+	`&ROTL128(30)`
+	stx	%o4, [$out + 0x50]	! k[20, 21]
+	stx	%o5, [$out + 0x58]	! k[22, 23]
+	`&ROTL128(15)`
+	stx	%o5, [$out + 0x68]	! k[26, 27]
+	`&ROTL128(17)`
+	stx	%o4, [$out + 0x80]	! k[32, 33]
+	stx	%o5, [$out + 0x88]	! k[34, 35]
+	`&ROTL128(17)`
+	stx	%o4, [$out + 0x90]	! k[36, 37]
+	stx	%o5, [$out + 0x98]	! k[38, 39]
+	`&ROTL128(17)`
+	stx	%o4, [$out + 0xb0]	! k[44, 45]
+	stx	%o5, [$out + 0xb8]	! k[46, 47]
+
+	mov		3, $tmp
+	st		$tmp, [$out + 0x110]
+	retl
+	xor		%o0, %o0, %o0
+
+.align	16
+.L256key:
+	ldd		[%o4 + 32], %f24
+	ldd		[%o4 + 40], %f26
+
+	std		%f0, [$out + 0x30]	! k[12, 13]
+	std		%f2, [$out + 0x38]	! k[14, 15]
+
+	fxor		%f4, %f0, %f0
+	fxor		%f6, %f2, %f2
+	camellia_f	%f24, %f2, %f0, %f2
+	camellia_f	%f26, %f0, %f2, %f0
+
+	std	%f0, [$out + 0x10]	! k[ 4,  5]
+	std	%f2, [$out + 0x18]	! k[ 6,  7]
+
+	movdtox	%f0, %o4
+	movdtox	%f2, %o5
+	`&ROTL128(30)`
+	stx	%o4, [$out + 0x50]	! k[20, 21]
+	stx	%o5, [$out + 0x58]	! k[22, 23]
+	`&ROTL128(30)`
+	stx	%o4, [$out + 0xa0]	! k[40, 41]
+	stx	%o5, [$out + 0xa8]	! k[42, 43]
+	`&ROTL128(51)`
+	stx	%o4, [$out + 0x100]	! k[64, 65]
+	stx	%o5, [$out + 0x108]	! k[66, 67]
+
+	movdtox	%f4, %o4		! k[ 8,  9]
+	movdtox	%f6, %o5		! k[10, 11]
+	`&ROTL128(15)`
+	stx	%o4, [$out + 0x20]	! k[ 8,  9]
+	stx	%o5, [$out + 0x28]	! k[10, 11]
+	`&ROTL128(15)`
+	stx	%o4, [$out + 0x40]	! k[16, 17]
+	stx	%o5, [$out + 0x48]	! k[18, 19]
+	`&ROTL128(30)`
+	stx	%o4, [$out + 0x90]	! k[36, 37]
+	stx	%o5, [$out + 0x98]	! k[38, 39]
+	`&ROTL128(34)`
+	stx	%o4, [$out + 0xd0]	! k[52, 53]
+	stx	%o5, [$out + 0xd8]	! k[54, 55]
+	ldx	[$out + 0x30], %o4	! k[12, 13]
+	ldx	[$out + 0x38], %o5	! k[14, 15]
+	`&ROTL128(15)`
+	stx	%o4, [$out + 0x30]	! k[12, 13]
+	stx	%o5, [$out + 0x38]	! k[14, 15]
+	`&ROTL128(30)`
+	stx	%o4, [$out + 0x70]	! k[28, 29]
+	stx	%o5, [$out + 0x78]	! k[30, 31]
+	srlx	%o4, 32, %g4
+	srlx	%o5, 32, %g5
+	st	%o4, [$out + 0xc0]	! k[48]
+	st	%g5, [$out + 0xc4]	! k[49]
+	st	%o5, [$out + 0xc8]	! k[50]
+	st	%g4, [$out + 0xcc]	! k[51]
+	`&ROTL128(49)`
+	stx	%o4, [$out + 0xe0]	! k[56, 57]
+	stx	%o5, [$out + 0xe8]	! k[58, 59]
+
+	movdtox	%f28, %o4		! k[ 0,  1]
+	movdtox	%f30, %o5		! k[ 2,  3]
+	`&ROTL128(45)`
+	stx	%o4, [$out + 0x60]	! k[24, 25]
+	stx	%o5, [$out + 0x68]	! k[26, 27]
+	`&ROTL128(15)`
+	stx	%o4, [$out + 0x80]	! k[32, 33]
+	stx	%o5, [$out + 0x88]	! k[34, 35]
+	`&ROTL128(17)`
+	stx	%o4, [$out + 0xb0]	! k[44, 45]
+	stx	%o5, [$out + 0xb8]	! k[46, 47]
+	`&ROTL128(34)`
+	stx	%o4, [$out + 0xf0]	! k[60, 61]
+	stx	%o5, [$out + 0xf8]	! k[62, 63]
+
+	mov		4, $tmp
+	st		$tmp, [$out + 0x110]
+	retl
+	xor		%o0, %o0, %o0
+.type	cmll_t4_set_key,#function
+.size	cmll_t4_set_key,.-cmll_t4_set_key
+.align	32
+SIGMA:
+	.long	0xa09e667f, 0x3bcc908b, 0xb67ae858, 0x4caa73b2
+	.long	0xc6ef372f, 0xe94f82be, 0x54ff53a5, 0xf1d36f1c
+	.long	0x10e527fa, 0xde682d1d, 0xb05688c2, 0xb3e6c1fd
+.type	SIGMA,#object
+.size	SIGMA,.-SIGMA
+.asciz	"Camellia for SPARC T4, David S. Miller, Andy Polyakov"
+___
+}
+
+{{{
+my ($inp,$out,$len,$key,$ivec,$enc)=map("%i$_",(0..5));
+my ($ileft,$iright,$ooff,$omask,$ivoff)=map("%l$_",(1..7));
+
+$code.=<<___;
+.align	32
+_cmll128_load_enckey:
+	ldx		[$key + 0], %g4
+	ldx		[$key + 8], %g5
+___
+for ($i=2; $i<26;$i++) {			# load key schedule
+    $code.=<<___;
+	ldd		[$key + `8*$i`], %f`12+2*$i`
+___
+}
+$code.=<<___;
+	retl
+	nop
+.type	_cmll128_load_enckey,#function
+.size	_cmll128_load_enckey,.-_cmll128_load_enckey
+_cmll256_load_enckey=_cmll128_load_enckey
+
+.align	32
+_cmll256_load_deckey:
+	ldd		[$key + 64], %f62
+	ldd		[$key + 72], %f60
+	b		.Load_deckey
+	add		$key, 64, $key
+_cmll128_load_deckey:
+	ldd		[$key + 0], %f60
+	ldd		[$key + 8], %f62
+.Load_deckey:
+___
+for ($i=2; $i<24;$i++) {			# load key schedule
+    $code.=<<___;
+	ldd		[$key + `8*$i`], %f`62-2*$i`
+___
+}
+$code.=<<___;
+	ldx		[$key + 192], %g4
+	retl
+	ldx		[$key + 200], %g5
+.type	_cmll256_load_deckey,#function
+.size	_cmll256_load_deckey,.-_cmll256_load_deckey
+
+.align	32
+_cmll128_encrypt_1x:
+___
+for ($i=0; $i<3; $i++) {
+    $code.=<<___;
+	camellia_f	%f`16+16*$i+0`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+2`, %f0, %f2, %f0
+	camellia_f	%f`16+16*$i+4`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+6`, %f0, %f2, %f0
+___
+$code.=<<___ if ($i<2);
+	camellia_f	%f`16+16*$i+8`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+10`, %f0, %f2, %f0
+	camellia_fl	%f`16+16*$i+12`, %f0,      %f0
+	camellia_fli	%f`16+16*$i+14`, %f2,      %f2
+___
+}
+$code.=<<___;
+	camellia_f	%f56, %f2, %f0, %f4
+	camellia_f	%f58, %f0, %f4, %f2
+	fxor		%f60, %f4, %f0
+	retl
+	fxor		%f62, %f2, %f2
+.type	_cmll128_encrypt_1x,#function
+.size	_cmll128_encrypt_1x,.-_cmll128_encrypt_1x
+_cmll128_decrypt_1x=_cmll128_encrypt_1x
+
+.align	32
+_cmll128_encrypt_2x:
+___
+for ($i=0; $i<3; $i++) {
+    $code.=<<___;
+	camellia_f	%f`16+16*$i+0`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+0`, %f6, %f4, %f6
+	camellia_f	%f`16+16*$i+2`, %f0, %f2, %f0
+	camellia_f	%f`16+16*$i+2`, %f4, %f6, %f4
+	camellia_f	%f`16+16*$i+4`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+4`, %f6, %f4, %f6
+	camellia_f	%f`16+16*$i+6`, %f0, %f2, %f0
+	camellia_f	%f`16+16*$i+6`, %f4, %f6, %f4
+___
+$code.=<<___ if ($i<2);
+	camellia_f	%f`16+16*$i+8`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+8`, %f6, %f4, %f6
+	camellia_f	%f`16+16*$i+10`, %f0, %f2, %f0
+	camellia_f	%f`16+16*$i+10`, %f4, %f6, %f4
+	camellia_fl	%f`16+16*$i+12`, %f0,      %f0
+	camellia_fl	%f`16+16*$i+12`, %f4,      %f4
+	camellia_fli	%f`16+16*$i+14`, %f2,      %f2
+	camellia_fli	%f`16+16*$i+14`, %f6,      %f6
+___
+}
+$code.=<<___;
+	camellia_f	%f56, %f2, %f0, %f8
+	camellia_f	%f56, %f6, %f4, %f10
+	camellia_f	%f58, %f0, %f8, %f2
+	camellia_f	%f58, %f4, %f10, %f6
+	fxor		%f60, %f8, %f0
+	fxor		%f60, %f10, %f4
+	fxor		%f62, %f2, %f2
+	retl
+	fxor		%f62, %f6, %f6
+.type	_cmll128_encrypt_2x,#function
+.size	_cmll128_encrypt_2x,.-_cmll128_encrypt_2x
+_cmll128_decrypt_2x=_cmll128_encrypt_2x
+
+.align	32
+_cmll256_encrypt_1x:
+	camellia_f	%f16, %f2, %f0, %f2
+	camellia_f	%f18, %f0, %f2, %f0
+	ldd		[$key + 208], %f16
+	ldd		[$key + 216], %f18
+	camellia_f	%f20, %f2, %f0, %f2
+	camellia_f	%f22, %f0, %f2, %f0
+	ldd		[$key + 224], %f20
+	ldd		[$key + 232], %f22
+	camellia_f	%f24, %f2, %f0, %f2
+	camellia_f	%f26, %f0, %f2, %f0
+	ldd		[$key + 240], %f24
+	ldd		[$key + 248], %f26
+	camellia_fl	%f28, %f0, %f0
+	camellia_fli	%f30, %f2, %f2
+	ldd		[$key + 256], %f28
+	ldd		[$key + 264], %f30
+___
+for ($i=1; $i<3; $i++) {
+    $code.=<<___;
+	camellia_f	%f`16+16*$i+0`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+2`, %f0, %f2, %f0
+	camellia_f	%f`16+16*$i+4`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+6`, %f0, %f2, %f0
+	camellia_f	%f`16+16*$i+8`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+10`, %f0, %f2, %f0
+	camellia_fl	%f`16+16*$i+12`, %f0,      %f0
+	camellia_fli	%f`16+16*$i+14`, %f2,      %f2
+___
+}
+$code.=<<___;
+	camellia_f	%f16, %f2, %f0, %f2
+	camellia_f	%f18, %f0, %f2, %f0
+	ldd		[$key + 16], %f16
+	ldd		[$key + 24], %f18
+	camellia_f	%f20, %f2, %f0, %f2
+	camellia_f	%f22, %f0, %f2, %f0
+	ldd		[$key + 32], %f20
+	ldd		[$key + 40], %f22
+	camellia_f	%f24, %f2, %f0, %f4
+	camellia_f	%f26, %f0, %f4, %f2
+	ldd		[$key + 48], %f24
+	ldd		[$key + 56], %f26
+	fxor		%f28, %f4, %f0
+	fxor		%f30, %f2, %f2
+	ldd		[$key + 64], %f28
+	retl
+	ldd		[$key + 72], %f30
+.type	_cmll256_encrypt_1x,#function
+.size	_cmll256_encrypt_1x,.-_cmll256_encrypt_1x
+
+.align	32
+_cmll256_encrypt_2x:
+	camellia_f	%f16, %f2, %f0, %f2
+	camellia_f	%f16, %f6, %f4, %f6
+	camellia_f	%f18, %f0, %f2, %f0
+	camellia_f	%f18, %f4, %f6, %f4
+	ldd		[$key + 208], %f16
+	ldd		[$key + 216], %f18
+	camellia_f	%f20, %f2, %f0, %f2
+	camellia_f	%f20, %f6, %f4, %f6
+	camellia_f	%f22, %f0, %f2, %f0
+	camellia_f	%f22, %f4, %f6, %f4
+	ldd		[$key + 224], %f20
+	ldd		[$key + 232], %f22
+	camellia_f	%f24, %f2, %f0, %f2
+	camellia_f	%f24, %f6, %f4, %f6
+	camellia_f	%f26, %f0, %f2, %f0
+	camellia_f	%f26, %f4, %f6, %f4
+	ldd		[$key + 240], %f24
+	ldd		[$key + 248], %f26
+	camellia_fl	%f28, %f0, %f0
+	camellia_fl	%f28, %f4, %f4
+	camellia_fli	%f30, %f2, %f2
+	camellia_fli	%f30, %f6, %f6
+	ldd		[$key + 256], %f28
+	ldd		[$key + 264], %f30
+___
+for ($i=1; $i<3; $i++) {
+    $code.=<<___;
+	camellia_f	%f`16+16*$i+0`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+0`, %f6, %f4, %f6
+	camellia_f	%f`16+16*$i+2`, %f0, %f2, %f0
+	camellia_f	%f`16+16*$i+2`, %f4, %f6, %f4
+	camellia_f	%f`16+16*$i+4`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+4`, %f6, %f4, %f6
+	camellia_f	%f`16+16*$i+6`, %f0, %f2, %f0
+	camellia_f	%f`16+16*$i+6`, %f4, %f6, %f4
+	camellia_f	%f`16+16*$i+8`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+8`, %f6, %f4, %f6
+	camellia_f	%f`16+16*$i+10`, %f0, %f2, %f0
+	camellia_f	%f`16+16*$i+10`, %f4, %f6, %f4
+	camellia_fl	%f`16+16*$i+12`, %f0,      %f0
+	camellia_fl	%f`16+16*$i+12`, %f4,      %f4
+	camellia_fli	%f`16+16*$i+14`, %f2,      %f2
+	camellia_fli	%f`16+16*$i+14`, %f6,      %f6
+___
+}
+$code.=<<___;
+	camellia_f	%f16, %f2, %f0, %f2
+	camellia_f	%f16, %f6, %f4, %f6
+	camellia_f	%f18, %f0, %f2, %f0
+	camellia_f	%f18, %f4, %f6, %f4
+	ldd		[$key + 16], %f16
+	ldd		[$key + 24], %f18
+	camellia_f	%f20, %f2, %f0, %f2
+	camellia_f	%f20, %f6, %f4, %f6
+	camellia_f	%f22, %f0, %f2, %f0
+	camellia_f	%f22, %f4, %f6, %f4
+	ldd		[$key + 32], %f20
+	ldd		[$key + 40], %f22
+	camellia_f	%f24, %f2, %f0, %f8
+	camellia_f	%f24, %f6, %f4, %f10
+	camellia_f	%f26, %f0, %f8, %f2
+	camellia_f	%f26, %f4, %f10, %f6
+	ldd		[$key + 48], %f24
+	ldd		[$key + 56], %f26
+	fxor		%f28, %f8, %f0
+	fxor		%f28, %f10, %f4
+	fxor		%f30, %f2, %f2
+	fxor		%f30, %f6, %f6
+	ldd		[$key + 64], %f28
+	retl
+	ldd		[$key + 72], %f30
+.type	_cmll256_encrypt_2x,#function
+.size	_cmll256_encrypt_2x,.-_cmll256_encrypt_2x
+
+.align	32
+_cmll256_decrypt_1x:
+	camellia_f	%f16, %f2, %f0, %f2
+	camellia_f	%f18, %f0, %f2, %f0
+	ldd		[$key - 8], %f16
+	ldd		[$key - 16], %f18
+	camellia_f	%f20, %f2, %f0, %f2
+	camellia_f	%f22, %f0, %f2, %f0
+	ldd		[$key - 24], %f20
+	ldd		[$key - 32], %f22
+	camellia_f	%f24, %f2, %f0, %f2
+	camellia_f	%f26, %f0, %f2, %f0
+	ldd		[$key - 40], %f24
+	ldd		[$key - 48], %f26
+	camellia_fl	%f28, %f0, %f0
+	camellia_fli	%f30, %f2, %f2
+	ldd		[$key - 56], %f28
+	ldd		[$key - 64], %f30
+___
+for ($i=1; $i<3; $i++) {
+    $code.=<<___;
+	camellia_f	%f`16+16*$i+0`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+2`, %f0, %f2, %f0
+	camellia_f	%f`16+16*$i+4`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+6`, %f0, %f2, %f0
+	camellia_f	%f`16+16*$i+8`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+10`, %f0, %f2, %f0
+	camellia_fl	%f`16+16*$i+12`, %f0,      %f0
+	camellia_fli	%f`16+16*$i+14`, %f2,      %f2
+___
+}
+$code.=<<___;
+	camellia_f	%f16, %f2, %f0, %f2
+	camellia_f	%f18, %f0, %f2, %f0
+	ldd		[$key + 184], %f16
+	ldd		[$key + 176], %f18
+	camellia_f	%f20, %f2, %f0, %f2
+	camellia_f	%f22, %f0, %f2, %f0
+	ldd		[$key + 168], %f20
+	ldd		[$key + 160], %f22
+	camellia_f	%f24, %f2, %f0, %f4
+	camellia_f	%f26, %f0, %f4, %f2
+	ldd		[$key + 152], %f24
+	ldd		[$key + 144], %f26
+	fxor		%f30, %f4, %f0
+	fxor		%f28, %f2, %f2
+	ldd		[$key + 136], %f28
+	retl
+	ldd		[$key + 128], %f30
+.type	_cmll256_decrypt_1x,#function
+.size	_cmll256_decrypt_1x,.-_cmll256_decrypt_1x
+
+.align	32
+_cmll256_decrypt_2x:
+	camellia_f	%f16, %f2, %f0, %f2
+	camellia_f	%f16, %f6, %f4, %f6
+	camellia_f	%f18, %f0, %f2, %f0
+	camellia_f	%f18, %f4, %f6, %f4
+	ldd		[$key - 8], %f16
+	ldd		[$key - 16], %f18
+	camellia_f	%f20, %f2, %f0, %f2
+	camellia_f	%f20, %f6, %f4, %f6
+	camellia_f	%f22, %f0, %f2, %f0
+	camellia_f	%f22, %f4, %f6, %f4
+	ldd		[$key - 24], %f20
+	ldd		[$key - 32], %f22
+	camellia_f	%f24, %f2, %f0, %f2
+	camellia_f	%f24, %f6, %f4, %f6
+	camellia_f	%f26, %f0, %f2, %f0
+	camellia_f	%f26, %f4, %f6, %f4
+	ldd		[$key - 40], %f24
+	ldd		[$key - 48], %f26
+	camellia_fl	%f28, %f0, %f0
+	camellia_fl	%f28, %f4, %f4
+	camellia_fli	%f30, %f2, %f2
+	camellia_fli	%f30, %f6, %f6
+	ldd		[$key - 56], %f28
+	ldd		[$key - 64], %f30
+___
+for ($i=1; $i<3; $i++) {
+    $code.=<<___;
+	camellia_f	%f`16+16*$i+0`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+0`, %f6, %f4, %f6
+	camellia_f	%f`16+16*$i+2`, %f0, %f2, %f0
+	camellia_f	%f`16+16*$i+2`, %f4, %f6, %f4
+	camellia_f	%f`16+16*$i+4`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+4`, %f6, %f4, %f6
+	camellia_f	%f`16+16*$i+6`, %f0, %f2, %f0
+	camellia_f	%f`16+16*$i+6`, %f4, %f6, %f4
+	camellia_f	%f`16+16*$i+8`, %f2, %f0, %f2
+	camellia_f	%f`16+16*$i+8`, %f6, %f4, %f6
+	camellia_f	%f`16+16*$i+10`, %f0, %f2, %f0
+	camellia_f	%f`16+16*$i+10`, %f4, %f6, %f4
+	camellia_fl	%f`16+16*$i+12`, %f0,      %f0
+	camellia_fl	%f`16+16*$i+12`, %f4,      %f4
+	camellia_fli	%f`16+16*$i+14`, %f2,      %f2
+	camellia_fli	%f`16+16*$i+14`, %f6,      %f6
+___
+}
+$code.=<<___;
+	camellia_f	%f16, %f2, %f0, %f2
+	camellia_f	%f16, %f6, %f4, %f6
+	camellia_f	%f18, %f0, %f2, %f0
+	camellia_f	%f18, %f4, %f6, %f4
+	ldd		[$key + 184], %f16
+	ldd		[$key + 176], %f18
+	camellia_f	%f20, %f2, %f0, %f2
+	camellia_f	%f20, %f6, %f4, %f6
+	camellia_f	%f22, %f0, %f2, %f0
+	camellia_f	%f22, %f4, %f6, %f4
+	ldd		[$key + 168], %f20
+	ldd		[$key + 160], %f22
+	camellia_f	%f24, %f2, %f0, %f8
+	camellia_f	%f24, %f6, %f4, %f10
+	camellia_f	%f26, %f0, %f8, %f2
+	camellia_f	%f26, %f4, %f10, %f6
+	ldd		[$key + 152], %f24
+	ldd		[$key + 144], %f26
+	fxor		%f30, %f8, %f0
+	fxor		%f30, %f10, %f4
+	fxor		%f28, %f2, %f2
+	fxor		%f28, %f6, %f6
+	ldd		[$key + 136], %f28
+	retl
+	ldd		[$key + 128], %f30
+.type	_cmll256_decrypt_2x,#function
+.size	_cmll256_decrypt_2x,.-_cmll256_decrypt_2x
+___
+
+&alg_cbc_encrypt_implement("cmll",128);
+&alg_cbc_encrypt_implement("cmll",256);
+
+&alg_cbc_decrypt_implement("cmll",128);
+&alg_cbc_decrypt_implement("cmll",256);
+
+if ($::evp) {
+    &alg_ctr32_implement("cmll",128);
+    &alg_ctr32_implement("cmll",256);
+}
+}}}
+
+if (!$::evp) {
+$code.=<<___;
+.global	Camellia_encrypt
+Camellia_encrypt=cmll_t4_encrypt
+.global	Camellia_decrypt
+Camellia_decrypt=cmll_t4_decrypt
+.global	Camellia_set_key
+.align	32
+Camellia_set_key:
+	andcc		%o2, 7, %g0		! double-check alignment
+	bnz,a,pn	%icc, 1f
+	mov		-1, %o0
+	brz,a,pn	%o0, 1f
+	mov		-1, %o0
+	brz,a,pn	%o2, 1f
+	mov		-1, %o0
+	andncc		%o1, 0x1c0, %g0
+	bnz,a,pn	%icc, 1f
+	mov		-2, %o0
+	cmp		%o1, 128
+	bl,a,pn		%icc, 1f
+	mov		-2, %o0
+	b		cmll_t4_set_key
+	nop
+1:	retl
+	nop
+.type	Camellia_set_key,#function
+.size	Camellia_set_key,.-Camellia_set_key
+___
+
+my ($inp,$out,$len,$key,$ivec,$enc)=map("%o$_",(0..5));
+
+$code.=<<___;
+.globl	Camellia_cbc_encrypt
+.align	32
+Camellia_cbc_encrypt:
+	ld		[$key + 272], %g1
+	nop
+	brz		$enc, .Lcbc_decrypt
+	cmp		%g1, 3
+
+	be,pt		%icc, cmll128_t4_cbc_encrypt
+	nop
+	ba		cmll256_t4_cbc_encrypt
+	nop
+
+.Lcbc_decrypt:
+	be,pt		%icc, cmll128_t4_cbc_decrypt
+	nop
+	ba		cmll256_t4_cbc_decrypt
+	nop
+.type	Camellia_cbc_encrypt,#function
+.size	Camellia_cbc_encrypt,.-Camellia_cbc_encrypt
+___
+}
+
+&emit_assembler();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/build.info
new file mode 100644
index 000000000..e36a19bd4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/build.info
@@ -0,0 +1,13 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        cmll_ecb.c cmll_ofb.c cmll_cfb.c cmll_ctr.c \
+        {- $target{cmll_asm_src} -}
+
+GENERATE[cmll-x86.s]=asm/cmll-x86.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) \
+        $(PROCESSOR)
+DEPEND[cmll-x86.s]=../perlasm/x86asm.pl
+GENERATE[cmll-x86_64.s]=asm/cmll-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[cmllt4-sparcv9.S]=asm/cmllt4-sparcv9.pl $(PERLASM_SCHEME)
+INCLUDE[cmllt4-sparcv9.o]=..
+DEPEND[cmllt4-sparcv9.S]=../perlasm/sparcv9_modes.pl
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/camellia.c b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/camellia.c
new file mode 100644
index 000000000..c200b8230
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/camellia.c
@@ -0,0 +1,501 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* ====================================================================
+ * Copyright 2006 NTT (Nippon Telegraph and Telephone Corporation) .
+ * ALL RIGHTS RESERVED.
+ *
+ * Intellectual Property information for Camellia:
+ *     http://info.isl.ntt.co.jp/crypt/eng/info/chiteki.html
+ *
+ * News Release for Announcement of Camellia open source:
+ *     http://www.ntt.co.jp/news/news06e/0604/060413a.html
+ *
+ * The Camellia Code included herein is developed by
+ * NTT (Nippon Telegraph and Telephone Corporation), and is contributed
+ * to the OpenSSL project.
+ */
+
+/*
+ * Algorithm Specification
+ * http://info.isl.ntt.co.jp/crypt/eng/camellia/specifications.html
+ */
+
+/*
+ * This release balances code size and performance. In particular key
+ * schedule setup is fully unrolled, because doing so *significantly*
+ * reduces amount of instructions per setup round and code increase is
+ * justifiable. In block functions on the other hand only inner loops
+ * are unrolled, as full unroll gives only nominal performance boost,
+ * while code size grows 4 or 7 times. Also, unlike previous versions
+ * this one "encourages" compiler to keep intermediate variables in
+ * registers, which should give better "all round" results, in other
+ * words reasonable performance even with not so modern compilers.
+ */
+
+#include <openssl/camellia.h>
+#include "cmll_locl.h"
+#include <string.h>
+#include <stdlib.h>
+
+#define RightRotate(x, s) ( ((x) >> (s)) + ((x) << (32 - s)) )
+#define LeftRotate(x, s)  ( ((x) << (s)) + ((x) >> (32 - s)) )
+
+#define GETU32(p)   (((u32)(p)[0] << 24) ^ ((u32)(p)[1] << 16) ^ ((u32)(p)[2] <<  8) ^ ((u32)(p)[3]))
+#define PUTU32(p,v) ((p)[0] = (u8)((v) >> 24), (p)[1] = (u8)((v) >> 16), (p)[2] = (u8)((v) >>  8), (p)[3] = (u8)(v))
+
+/* S-box data */
+#define SBOX1_1110 Camellia_SBOX[0]
+#define SBOX4_4404 Camellia_SBOX[1]
+#define SBOX2_0222 Camellia_SBOX[2]
+#define SBOX3_3033 Camellia_SBOX[3]
+static const u32 Camellia_SBOX[][256] = {
+    {0x70707000, 0x82828200, 0x2c2c2c00, 0xececec00, 0xb3b3b300, 0x27272700,
+     0xc0c0c000, 0xe5e5e500, 0xe4e4e400, 0x85858500, 0x57575700, 0x35353500,
+     0xeaeaea00, 0x0c0c0c00, 0xaeaeae00, 0x41414100, 0x23232300, 0xefefef00,
+     0x6b6b6b00, 0x93939300, 0x45454500, 0x19191900, 0xa5a5a500, 0x21212100,
+     0xededed00, 0x0e0e0e00, 0x4f4f4f00, 0x4e4e4e00, 0x1d1d1d00, 0x65656500,
+     0x92929200, 0xbdbdbd00, 0x86868600, 0xb8b8b800, 0xafafaf00, 0x8f8f8f00,
+     0x7c7c7c00, 0xebebeb00, 0x1f1f1f00, 0xcecece00, 0x3e3e3e00, 0x30303000,
+     0xdcdcdc00, 0x5f5f5f00, 0x5e5e5e00, 0xc5c5c500, 0x0b0b0b00, 0x1a1a1a00,
+     0xa6a6a600, 0xe1e1e100, 0x39393900, 0xcacaca00, 0xd5d5d500, 0x47474700,
+     0x5d5d5d00, 0x3d3d3d00, 0xd9d9d900, 0x01010100, 0x5a5a5a00, 0xd6d6d600,
+     0x51515100, 0x56565600, 0x6c6c6c00, 0x4d4d4d00, 0x8b8b8b00, 0x0d0d0d00,
+     0x9a9a9a00, 0x66666600, 0xfbfbfb00, 0xcccccc00, 0xb0b0b000, 0x2d2d2d00,
+     0x74747400, 0x12121200, 0x2b2b2b00, 0x20202000, 0xf0f0f000, 0xb1b1b100,
+     0x84848400, 0x99999900, 0xdfdfdf00, 0x4c4c4c00, 0xcbcbcb00, 0xc2c2c200,
+     0x34343400, 0x7e7e7e00, 0x76767600, 0x05050500, 0x6d6d6d00, 0xb7b7b700,
+     0xa9a9a900, 0x31313100, 0xd1d1d100, 0x17171700, 0x04040400, 0xd7d7d700,
+     0x14141400, 0x58585800, 0x3a3a3a00, 0x61616100, 0xdedede00, 0x1b1b1b00,
+     0x11111100, 0x1c1c1c00, 0x32323200, 0x0f0f0f00, 0x9c9c9c00, 0x16161600,
+     0x53535300, 0x18181800, 0xf2f2f200, 0x22222200, 0xfefefe00, 0x44444400,
+     0xcfcfcf00, 0xb2b2b200, 0xc3c3c300, 0xb5b5b500, 0x7a7a7a00, 0x91919100,
+     0x24242400, 0x08080800, 0xe8e8e800, 0xa8a8a800, 0x60606000, 0xfcfcfc00,
+     0x69696900, 0x50505000, 0xaaaaaa00, 0xd0d0d000, 0xa0a0a000, 0x7d7d7d00,
+     0xa1a1a100, 0x89898900, 0x62626200, 0x97979700, 0x54545400, 0x5b5b5b00,
+     0x1e1e1e00, 0x95959500, 0xe0e0e000, 0xffffff00, 0x64646400, 0xd2d2d200,
+     0x10101000, 0xc4c4c400, 0x00000000, 0x48484800, 0xa3a3a300, 0xf7f7f700,
+     0x75757500, 0xdbdbdb00, 0x8a8a8a00, 0x03030300, 0xe6e6e600, 0xdadada00,
+     0x09090900, 0x3f3f3f00, 0xdddddd00, 0x94949400, 0x87878700, 0x5c5c5c00,
+     0x83838300, 0x02020200, 0xcdcdcd00, 0x4a4a4a00, 0x90909000, 0x33333300,
+     0x73737300, 0x67676700, 0xf6f6f600, 0xf3f3f300, 0x9d9d9d00, 0x7f7f7f00,
+     0xbfbfbf00, 0xe2e2e200, 0x52525200, 0x9b9b9b00, 0xd8d8d800, 0x26262600,
+     0xc8c8c800, 0x37373700, 0xc6c6c600, 0x3b3b3b00, 0x81818100, 0x96969600,
+     0x6f6f6f00, 0x4b4b4b00, 0x13131300, 0xbebebe00, 0x63636300, 0x2e2e2e00,
+     0xe9e9e900, 0x79797900, 0xa7a7a700, 0x8c8c8c00, 0x9f9f9f00, 0x6e6e6e00,
+     0xbcbcbc00, 0x8e8e8e00, 0x29292900, 0xf5f5f500, 0xf9f9f900, 0xb6b6b600,
+     0x2f2f2f00, 0xfdfdfd00, 0xb4b4b400, 0x59595900, 0x78787800, 0x98989800,
+     0x06060600, 0x6a6a6a00, 0xe7e7e700, 0x46464600, 0x71717100, 0xbababa00,
+     0xd4d4d400, 0x25252500, 0xababab00, 0x42424200, 0x88888800, 0xa2a2a200,
+     0x8d8d8d00, 0xfafafa00, 0x72727200, 0x07070700, 0xb9b9b900, 0x55555500,
+     0xf8f8f800, 0xeeeeee00, 0xacacac00, 0x0a0a0a00, 0x36363600, 0x49494900,
+     0x2a2a2a00, 0x68686800, 0x3c3c3c00, 0x38383800, 0xf1f1f100, 0xa4a4a400,
+     0x40404000, 0x28282800, 0xd3d3d300, 0x7b7b7b00, 0xbbbbbb00, 0xc9c9c900,
+     0x43434300, 0xc1c1c100, 0x15151500, 0xe3e3e300, 0xadadad00, 0xf4f4f400,
+     0x77777700, 0xc7c7c700, 0x80808000, 0x9e9e9e00},
+    {0x70700070, 0x2c2c002c, 0xb3b300b3, 0xc0c000c0, 0xe4e400e4, 0x57570057,
+     0xeaea00ea, 0xaeae00ae, 0x23230023, 0x6b6b006b, 0x45450045, 0xa5a500a5,
+     0xeded00ed, 0x4f4f004f, 0x1d1d001d, 0x92920092, 0x86860086, 0xafaf00af,
+     0x7c7c007c, 0x1f1f001f, 0x3e3e003e, 0xdcdc00dc, 0x5e5e005e, 0x0b0b000b,
+     0xa6a600a6, 0x39390039, 0xd5d500d5, 0x5d5d005d, 0xd9d900d9, 0x5a5a005a,
+     0x51510051, 0x6c6c006c, 0x8b8b008b, 0x9a9a009a, 0xfbfb00fb, 0xb0b000b0,
+     0x74740074, 0x2b2b002b, 0xf0f000f0, 0x84840084, 0xdfdf00df, 0xcbcb00cb,
+     0x34340034, 0x76760076, 0x6d6d006d, 0xa9a900a9, 0xd1d100d1, 0x04040004,
+     0x14140014, 0x3a3a003a, 0xdede00de, 0x11110011, 0x32320032, 0x9c9c009c,
+     0x53530053, 0xf2f200f2, 0xfefe00fe, 0xcfcf00cf, 0xc3c300c3, 0x7a7a007a,
+     0x24240024, 0xe8e800e8, 0x60600060, 0x69690069, 0xaaaa00aa, 0xa0a000a0,
+     0xa1a100a1, 0x62620062, 0x54540054, 0x1e1e001e, 0xe0e000e0, 0x64640064,
+     0x10100010, 0x00000000, 0xa3a300a3, 0x75750075, 0x8a8a008a, 0xe6e600e6,
+     0x09090009, 0xdddd00dd, 0x87870087, 0x83830083, 0xcdcd00cd, 0x90900090,
+     0x73730073, 0xf6f600f6, 0x9d9d009d, 0xbfbf00bf, 0x52520052, 0xd8d800d8,
+     0xc8c800c8, 0xc6c600c6, 0x81810081, 0x6f6f006f, 0x13130013, 0x63630063,
+     0xe9e900e9, 0xa7a700a7, 0x9f9f009f, 0xbcbc00bc, 0x29290029, 0xf9f900f9,
+     0x2f2f002f, 0xb4b400b4, 0x78780078, 0x06060006, 0xe7e700e7, 0x71710071,
+     0xd4d400d4, 0xabab00ab, 0x88880088, 0x8d8d008d, 0x72720072, 0xb9b900b9,
+     0xf8f800f8, 0xacac00ac, 0x36360036, 0x2a2a002a, 0x3c3c003c, 0xf1f100f1,
+     0x40400040, 0xd3d300d3, 0xbbbb00bb, 0x43430043, 0x15150015, 0xadad00ad,
+     0x77770077, 0x80800080, 0x82820082, 0xecec00ec, 0x27270027, 0xe5e500e5,
+     0x85850085, 0x35350035, 0x0c0c000c, 0x41410041, 0xefef00ef, 0x93930093,
+     0x19190019, 0x21210021, 0x0e0e000e, 0x4e4e004e, 0x65650065, 0xbdbd00bd,
+     0xb8b800b8, 0x8f8f008f, 0xebeb00eb, 0xcece00ce, 0x30300030, 0x5f5f005f,
+     0xc5c500c5, 0x1a1a001a, 0xe1e100e1, 0xcaca00ca, 0x47470047, 0x3d3d003d,
+     0x01010001, 0xd6d600d6, 0x56560056, 0x4d4d004d, 0x0d0d000d, 0x66660066,
+     0xcccc00cc, 0x2d2d002d, 0x12120012, 0x20200020, 0xb1b100b1, 0x99990099,
+     0x4c4c004c, 0xc2c200c2, 0x7e7e007e, 0x05050005, 0xb7b700b7, 0x31310031,
+     0x17170017, 0xd7d700d7, 0x58580058, 0x61610061, 0x1b1b001b, 0x1c1c001c,
+     0x0f0f000f, 0x16160016, 0x18180018, 0x22220022, 0x44440044, 0xb2b200b2,
+     0xb5b500b5, 0x91910091, 0x08080008, 0xa8a800a8, 0xfcfc00fc, 0x50500050,
+     0xd0d000d0, 0x7d7d007d, 0x89890089, 0x97970097, 0x5b5b005b, 0x95950095,
+     0xffff00ff, 0xd2d200d2, 0xc4c400c4, 0x48480048, 0xf7f700f7, 0xdbdb00db,
+     0x03030003, 0xdada00da, 0x3f3f003f, 0x94940094, 0x5c5c005c, 0x02020002,
+     0x4a4a004a, 0x33330033, 0x67670067, 0xf3f300f3, 0x7f7f007f, 0xe2e200e2,
+     0x9b9b009b, 0x26260026, 0x37370037, 0x3b3b003b, 0x96960096, 0x4b4b004b,
+     0xbebe00be, 0x2e2e002e, 0x79790079, 0x8c8c008c, 0x6e6e006e, 0x8e8e008e,
+     0xf5f500f5, 0xb6b600b6, 0xfdfd00fd, 0x59590059, 0x98980098, 0x6a6a006a,
+     0x46460046, 0xbaba00ba, 0x25250025, 0x42420042, 0xa2a200a2, 0xfafa00fa,
+     0x07070007, 0x55550055, 0xeeee00ee, 0x0a0a000a, 0x49490049, 0x68680068,
+     0x38380038, 0xa4a400a4, 0x28280028, 0x7b7b007b, 0xc9c900c9, 0xc1c100c1,
+     0xe3e300e3, 0xf4f400f4, 0xc7c700c7, 0x9e9e009e},
+    {0x00e0e0e0, 0x00050505, 0x00585858, 0x00d9d9d9, 0x00676767, 0x004e4e4e,
+     0x00818181, 0x00cbcbcb, 0x00c9c9c9, 0x000b0b0b, 0x00aeaeae, 0x006a6a6a,
+     0x00d5d5d5, 0x00181818, 0x005d5d5d, 0x00828282, 0x00464646, 0x00dfdfdf,
+     0x00d6d6d6, 0x00272727, 0x008a8a8a, 0x00323232, 0x004b4b4b, 0x00424242,
+     0x00dbdbdb, 0x001c1c1c, 0x009e9e9e, 0x009c9c9c, 0x003a3a3a, 0x00cacaca,
+     0x00252525, 0x007b7b7b, 0x000d0d0d, 0x00717171, 0x005f5f5f, 0x001f1f1f,
+     0x00f8f8f8, 0x00d7d7d7, 0x003e3e3e, 0x009d9d9d, 0x007c7c7c, 0x00606060,
+     0x00b9b9b9, 0x00bebebe, 0x00bcbcbc, 0x008b8b8b, 0x00161616, 0x00343434,
+     0x004d4d4d, 0x00c3c3c3, 0x00727272, 0x00959595, 0x00ababab, 0x008e8e8e,
+     0x00bababa, 0x007a7a7a, 0x00b3b3b3, 0x00020202, 0x00b4b4b4, 0x00adadad,
+     0x00a2a2a2, 0x00acacac, 0x00d8d8d8, 0x009a9a9a, 0x00171717, 0x001a1a1a,
+     0x00353535, 0x00cccccc, 0x00f7f7f7, 0x00999999, 0x00616161, 0x005a5a5a,
+     0x00e8e8e8, 0x00242424, 0x00565656, 0x00404040, 0x00e1e1e1, 0x00636363,
+     0x00090909, 0x00333333, 0x00bfbfbf, 0x00989898, 0x00979797, 0x00858585,
+     0x00686868, 0x00fcfcfc, 0x00ececec, 0x000a0a0a, 0x00dadada, 0x006f6f6f,
+     0x00535353, 0x00626262, 0x00a3a3a3, 0x002e2e2e, 0x00080808, 0x00afafaf,
+     0x00282828, 0x00b0b0b0, 0x00747474, 0x00c2c2c2, 0x00bdbdbd, 0x00363636,
+     0x00222222, 0x00383838, 0x00646464, 0x001e1e1e, 0x00393939, 0x002c2c2c,
+     0x00a6a6a6, 0x00303030, 0x00e5e5e5, 0x00444444, 0x00fdfdfd, 0x00888888,
+     0x009f9f9f, 0x00656565, 0x00878787, 0x006b6b6b, 0x00f4f4f4, 0x00232323,
+     0x00484848, 0x00101010, 0x00d1d1d1, 0x00515151, 0x00c0c0c0, 0x00f9f9f9,
+     0x00d2d2d2, 0x00a0a0a0, 0x00555555, 0x00a1a1a1, 0x00414141, 0x00fafafa,
+     0x00434343, 0x00131313, 0x00c4c4c4, 0x002f2f2f, 0x00a8a8a8, 0x00b6b6b6,
+     0x003c3c3c, 0x002b2b2b, 0x00c1c1c1, 0x00ffffff, 0x00c8c8c8, 0x00a5a5a5,
+     0x00202020, 0x00898989, 0x00000000, 0x00909090, 0x00474747, 0x00efefef,
+     0x00eaeaea, 0x00b7b7b7, 0x00151515, 0x00060606, 0x00cdcdcd, 0x00b5b5b5,
+     0x00121212, 0x007e7e7e, 0x00bbbbbb, 0x00292929, 0x000f0f0f, 0x00b8b8b8,
+     0x00070707, 0x00040404, 0x009b9b9b, 0x00949494, 0x00212121, 0x00666666,
+     0x00e6e6e6, 0x00cecece, 0x00ededed, 0x00e7e7e7, 0x003b3b3b, 0x00fefefe,
+     0x007f7f7f, 0x00c5c5c5, 0x00a4a4a4, 0x00373737, 0x00b1b1b1, 0x004c4c4c,
+     0x00919191, 0x006e6e6e, 0x008d8d8d, 0x00767676, 0x00030303, 0x002d2d2d,
+     0x00dedede, 0x00969696, 0x00262626, 0x007d7d7d, 0x00c6c6c6, 0x005c5c5c,
+     0x00d3d3d3, 0x00f2f2f2, 0x004f4f4f, 0x00191919, 0x003f3f3f, 0x00dcdcdc,
+     0x00797979, 0x001d1d1d, 0x00525252, 0x00ebebeb, 0x00f3f3f3, 0x006d6d6d,
+     0x005e5e5e, 0x00fbfbfb, 0x00696969, 0x00b2b2b2, 0x00f0f0f0, 0x00313131,
+     0x000c0c0c, 0x00d4d4d4, 0x00cfcfcf, 0x008c8c8c, 0x00e2e2e2, 0x00757575,
+     0x00a9a9a9, 0x004a4a4a, 0x00575757, 0x00848484, 0x00111111, 0x00454545,
+     0x001b1b1b, 0x00f5f5f5, 0x00e4e4e4, 0x000e0e0e, 0x00737373, 0x00aaaaaa,
+     0x00f1f1f1, 0x00dddddd, 0x00595959, 0x00141414, 0x006c6c6c, 0x00929292,
+     0x00545454, 0x00d0d0d0, 0x00787878, 0x00707070, 0x00e3e3e3, 0x00494949,
+     0x00808080, 0x00505050, 0x00a7a7a7, 0x00f6f6f6, 0x00777777, 0x00939393,
+     0x00868686, 0x00838383, 0x002a2a2a, 0x00c7c7c7, 0x005b5b5b, 0x00e9e9e9,
+     0x00eeeeee, 0x008f8f8f, 0x00010101, 0x003d3d3d},
+    {0x38003838, 0x41004141, 0x16001616, 0x76007676, 0xd900d9d9, 0x93009393,
+     0x60006060, 0xf200f2f2, 0x72007272, 0xc200c2c2, 0xab00abab, 0x9a009a9a,
+     0x75007575, 0x06000606, 0x57005757, 0xa000a0a0, 0x91009191, 0xf700f7f7,
+     0xb500b5b5, 0xc900c9c9, 0xa200a2a2, 0x8c008c8c, 0xd200d2d2, 0x90009090,
+     0xf600f6f6, 0x07000707, 0xa700a7a7, 0x27002727, 0x8e008e8e, 0xb200b2b2,
+     0x49004949, 0xde00dede, 0x43004343, 0x5c005c5c, 0xd700d7d7, 0xc700c7c7,
+     0x3e003e3e, 0xf500f5f5, 0x8f008f8f, 0x67006767, 0x1f001f1f, 0x18001818,
+     0x6e006e6e, 0xaf00afaf, 0x2f002f2f, 0xe200e2e2, 0x85008585, 0x0d000d0d,
+     0x53005353, 0xf000f0f0, 0x9c009c9c, 0x65006565, 0xea00eaea, 0xa300a3a3,
+     0xae00aeae, 0x9e009e9e, 0xec00ecec, 0x80008080, 0x2d002d2d, 0x6b006b6b,
+     0xa800a8a8, 0x2b002b2b, 0x36003636, 0xa600a6a6, 0xc500c5c5, 0x86008686,
+     0x4d004d4d, 0x33003333, 0xfd00fdfd, 0x66006666, 0x58005858, 0x96009696,
+     0x3a003a3a, 0x09000909, 0x95009595, 0x10001010, 0x78007878, 0xd800d8d8,
+     0x42004242, 0xcc00cccc, 0xef00efef, 0x26002626, 0xe500e5e5, 0x61006161,
+     0x1a001a1a, 0x3f003f3f, 0x3b003b3b, 0x82008282, 0xb600b6b6, 0xdb00dbdb,
+     0xd400d4d4, 0x98009898, 0xe800e8e8, 0x8b008b8b, 0x02000202, 0xeb00ebeb,
+     0x0a000a0a, 0x2c002c2c, 0x1d001d1d, 0xb000b0b0, 0x6f006f6f, 0x8d008d8d,
+     0x88008888, 0x0e000e0e, 0x19001919, 0x87008787, 0x4e004e4e, 0x0b000b0b,
+     0xa900a9a9, 0x0c000c0c, 0x79007979, 0x11001111, 0x7f007f7f, 0x22002222,
+     0xe700e7e7, 0x59005959, 0xe100e1e1, 0xda00dada, 0x3d003d3d, 0xc800c8c8,
+     0x12001212, 0x04000404, 0x74007474, 0x54005454, 0x30003030, 0x7e007e7e,
+     0xb400b4b4, 0x28002828, 0x55005555, 0x68006868, 0x50005050, 0xbe00bebe,
+     0xd000d0d0, 0xc400c4c4, 0x31003131, 0xcb00cbcb, 0x2a002a2a, 0xad00adad,
+     0x0f000f0f, 0xca00caca, 0x70007070, 0xff00ffff, 0x32003232, 0x69006969,
+     0x08000808, 0x62006262, 0x00000000, 0x24002424, 0xd100d1d1, 0xfb00fbfb,
+     0xba00baba, 0xed00eded, 0x45004545, 0x81008181, 0x73007373, 0x6d006d6d,
+     0x84008484, 0x9f009f9f, 0xee00eeee, 0x4a004a4a, 0xc300c3c3, 0x2e002e2e,
+     0xc100c1c1, 0x01000101, 0xe600e6e6, 0x25002525, 0x48004848, 0x99009999,
+     0xb900b9b9, 0xb300b3b3, 0x7b007b7b, 0xf900f9f9, 0xce00cece, 0xbf00bfbf,
+     0xdf00dfdf, 0x71007171, 0x29002929, 0xcd00cdcd, 0x6c006c6c, 0x13001313,
+     0x64006464, 0x9b009b9b, 0x63006363, 0x9d009d9d, 0xc000c0c0, 0x4b004b4b,
+     0xb700b7b7, 0xa500a5a5, 0x89008989, 0x5f005f5f, 0xb100b1b1, 0x17001717,
+     0xf400f4f4, 0xbc00bcbc, 0xd300d3d3, 0x46004646, 0xcf00cfcf, 0x37003737,
+     0x5e005e5e, 0x47004747, 0x94009494, 0xfa00fafa, 0xfc00fcfc, 0x5b005b5b,
+     0x97009797, 0xfe00fefe, 0x5a005a5a, 0xac00acac, 0x3c003c3c, 0x4c004c4c,
+     0x03000303, 0x35003535, 0xf300f3f3, 0x23002323, 0xb800b8b8, 0x5d005d5d,
+     0x6a006a6a, 0x92009292, 0xd500d5d5, 0x21002121, 0x44004444, 0x51005151,
+     0xc600c6c6, 0x7d007d7d, 0x39003939, 0x83008383, 0xdc00dcdc, 0xaa00aaaa,
+     0x7c007c7c, 0x77007777, 0x56005656, 0x05000505, 0x1b001b1b, 0xa400a4a4,
+     0x15001515, 0x34003434, 0x1e001e1e, 0x1c001c1c, 0xf800f8f8, 0x52005252,
+     0x20002020, 0x14001414, 0xe900e9e9, 0xbd00bdbd, 0xdd00dddd, 0xe400e4e4,
+     0xa100a1a1, 0xe000e0e0, 0x8a008a8a, 0xf100f1f1, 0xd600d6d6, 0x7a007a7a,
+     0xbb00bbbb, 0xe300e3e3, 0x40004040, 0x4f004f4f}
+};
+
+/* Key generation constants */
+static const u32 SIGMA[] = {
+    0xa09e667f, 0x3bcc908b, 0xb67ae858, 0x4caa73b2, 0xc6ef372f, 0xe94f82be,
+    0x54ff53a5, 0xf1d36f1c, 0x10e527fa, 0xde682d1d, 0xb05688c2, 0xb3e6c1fd
+};
+
+/* The phi algorithm given in C.2.7 of the Camellia spec document. */
+/*
+ * This version does not attempt to minimize amount of temporary
+ * variables, but instead explicitly exposes algorithm's parallelism.
+ * It is therefore most appropriate for platforms with not less than
+ * ~16 registers. For platforms with less registers [well, x86 to be
+ * specific] assembler version should be/is provided anyway...
+ */
+#define Camellia_Feistel(_s0,_s1,_s2,_s3,_key) do {\
+        register u32 _t0,_t1,_t2,_t3;\
+\
+        _t0  = _s0 ^ (_key)[0];\
+        _t3  = SBOX4_4404[_t0&0xff];\
+        _t1  = _s1 ^ (_key)[1];\
+        _t3 ^= SBOX3_3033[(_t0 >> 8)&0xff];\
+        _t2  = SBOX1_1110[_t1&0xff];\
+        _t3 ^= SBOX2_0222[(_t0 >> 16)&0xff];\
+        _t2 ^= SBOX4_4404[(_t1 >> 8)&0xff];\
+        _t3 ^= SBOX1_1110[(_t0 >> 24)];\
+        _t2 ^= _t3;\
+        _t3  = RightRotate(_t3,8);\
+        _t2 ^= SBOX3_3033[(_t1 >> 16)&0xff];\
+        _s3 ^= _t3;\
+        _t2 ^= SBOX2_0222[(_t1 >> 24)];\
+        _s2 ^= _t2; \
+        _s3 ^= _t2;\
+} while(0)
+
+/*
+ * Note that n has to be less than 32. Rotations for larger amount
+ * of bits are achieved by "rotating" order of s-elements and
+ * adjusting n accordingly, e.g. RotLeft128(s1,s2,s3,s0,n-32).
+ */
+#define RotLeft128(_s0,_s1,_s2,_s3,_n) do {\
+        u32 _t0=_s0>>(32-_n);\
+        _s0 = (_s0<<_n) | (_s1>>(32-_n));\
+        _s1 = (_s1<<_n) | (_s2>>(32-_n));\
+        _s2 = (_s2<<_n) | (_s3>>(32-_n));\
+        _s3 = (_s3<<_n) | _t0;\
+} while (0)
+
+int Camellia_Ekeygen(int keyBitLength, const u8 *rawKey, KEY_TABLE_TYPE k)
+{
+    register u32 s0, s1, s2, s3;
+
+    k[0] = s0 = GETU32(rawKey);
+    k[1] = s1 = GETU32(rawKey + 4);
+    k[2] = s2 = GETU32(rawKey + 8);
+    k[3] = s3 = GETU32(rawKey + 12);
+
+    if (keyBitLength != 128) {
+        k[8] = s0 = GETU32(rawKey + 16);
+        k[9] = s1 = GETU32(rawKey + 20);
+        if (keyBitLength == 192) {
+            k[10] = s2 = ~s0;
+            k[11] = s3 = ~s1;
+        } else {
+            k[10] = s2 = GETU32(rawKey + 24);
+            k[11] = s3 = GETU32(rawKey + 28);
+        }
+        s0 ^= k[0], s1 ^= k[1], s2 ^= k[2], s3 ^= k[3];
+    }
+
+    /* Use the Feistel routine to scramble the key material */
+    Camellia_Feistel(s0, s1, s2, s3, SIGMA + 0);
+    Camellia_Feistel(s2, s3, s0, s1, SIGMA + 2);
+
+    s0 ^= k[0], s1 ^= k[1], s2 ^= k[2], s3 ^= k[3];
+    Camellia_Feistel(s0, s1, s2, s3, SIGMA + 4);
+    Camellia_Feistel(s2, s3, s0, s1, SIGMA + 6);
+
+    /* Fill the keyTable. Requires many block rotations. */
+    if (keyBitLength == 128) {
+        k[4] = s0, k[5] = s1, k[6] = s2, k[7] = s3;
+        RotLeft128(s0, s1, s2, s3, 15); /* KA <<< 15 */
+        k[12] = s0, k[13] = s1, k[14] = s2, k[15] = s3;
+        RotLeft128(s0, s1, s2, s3, 15); /* KA <<< 30 */
+        k[16] = s0, k[17] = s1, k[18] = s2, k[19] = s3;
+        RotLeft128(s0, s1, s2, s3, 15); /* KA <<< 45 */
+        k[24] = s0, k[25] = s1;
+        RotLeft128(s0, s1, s2, s3, 15); /* KA <<< 60 */
+        k[28] = s0, k[29] = s1, k[30] = s2, k[31] = s3;
+        RotLeft128(s1, s2, s3, s0, 2); /* KA <<< 94 */
+        k[40] = s1, k[41] = s2, k[42] = s3, k[43] = s0;
+        RotLeft128(s1, s2, s3, s0, 17); /* KA <<<111 */
+        k[48] = s1, k[49] = s2, k[50] = s3, k[51] = s0;
+
+        s0 = k[0], s1 = k[1], s2 = k[2], s3 = k[3];
+        RotLeft128(s0, s1, s2, s3, 15); /* KL <<< 15 */
+        k[8] = s0, k[9] = s1, k[10] = s2, k[11] = s3;
+        RotLeft128(s0, s1, s2, s3, 30); /* KL <<< 45 */
+        k[20] = s0, k[21] = s1, k[22] = s2, k[23] = s3;
+        RotLeft128(s0, s1, s2, s3, 15); /* KL <<< 60 */
+        k[26] = s2, k[27] = s3;
+        RotLeft128(s0, s1, s2, s3, 17); /* KL <<< 77 */
+        k[32] = s0, k[33] = s1, k[34] = s2, k[35] = s3;
+        RotLeft128(s0, s1, s2, s3, 17); /* KL <<< 94 */
+        k[36] = s0, k[37] = s1, k[38] = s2, k[39] = s3;
+        RotLeft128(s0, s1, s2, s3, 17); /* KL <<<111 */
+        k[44] = s0, k[45] = s1, k[46] = s2, k[47] = s3;
+
+        return 3;               /* grand rounds */
+    } else {
+        k[12] = s0, k[13] = s1, k[14] = s2, k[15] = s3;
+        s0 ^= k[8], s1 ^= k[9], s2 ^= k[10], s3 ^= k[11];
+        Camellia_Feistel(s0, s1, s2, s3, (SIGMA + 8));
+        Camellia_Feistel(s2, s3, s0, s1, (SIGMA + 10));
+
+        k[4] = s0, k[5] = s1, k[6] = s2, k[7] = s3;
+        RotLeft128(s0, s1, s2, s3, 30); /* KB <<< 30 */
+        k[20] = s0, k[21] = s1, k[22] = s2, k[23] = s3;
+        RotLeft128(s0, s1, s2, s3, 30); /* KB <<< 60 */
+        k[40] = s0, k[41] = s1, k[42] = s2, k[43] = s3;
+        RotLeft128(s1, s2, s3, s0, 19); /* KB <<<111 */
+        k[64] = s1, k[65] = s2, k[66] = s3, k[67] = s0;
+
+        s0 = k[8], s1 = k[9], s2 = k[10], s3 = k[11];
+        RotLeft128(s0, s1, s2, s3, 15); /* KR <<< 15 */
+        k[8] = s0, k[9] = s1, k[10] = s2, k[11] = s3;
+        RotLeft128(s0, s1, s2, s3, 15); /* KR <<< 30 */
+        k[16] = s0, k[17] = s1, k[18] = s2, k[19] = s3;
+        RotLeft128(s0, s1, s2, s3, 30); /* KR <<< 60 */
+        k[36] = s0, k[37] = s1, k[38] = s2, k[39] = s3;
+        RotLeft128(s1, s2, s3, s0, 2); /* KR <<< 94 */
+        k[52] = s1, k[53] = s2, k[54] = s3, k[55] = s0;
+
+        s0 = k[12], s1 = k[13], s2 = k[14], s3 = k[15];
+        RotLeft128(s0, s1, s2, s3, 15); /* KA <<< 15 */
+        k[12] = s0, k[13] = s1, k[14] = s2, k[15] = s3;
+        RotLeft128(s0, s1, s2, s3, 30); /* KA <<< 45 */
+        k[28] = s0, k[29] = s1, k[30] = s2, k[31] = s3;
+        /* KA <<< 77 */
+        k[48] = s1, k[49] = s2, k[50] = s3, k[51] = s0;
+        RotLeft128(s1, s2, s3, s0, 17); /* KA <<< 94 */
+        k[56] = s1, k[57] = s2, k[58] = s3, k[59] = s0;
+
+        s0 = k[0], s1 = k[1], s2 = k[2], s3 = k[3];
+        RotLeft128(s1, s2, s3, s0, 13); /* KL <<< 45 */
+        k[24] = s1, k[25] = s2, k[26] = s3, k[27] = s0;
+        RotLeft128(s1, s2, s3, s0, 15); /* KL <<< 60 */
+        k[32] = s1, k[33] = s2, k[34] = s3, k[35] = s0;
+        RotLeft128(s1, s2, s3, s0, 17); /* KL <<< 77 */
+        k[44] = s1, k[45] = s2, k[46] = s3, k[47] = s0;
+        RotLeft128(s2, s3, s0, s1, 2); /* KL <<<111 */
+        k[60] = s2, k[61] = s3, k[62] = s0, k[63] = s1;
+
+        return 4;               /* grand rounds */
+    }
+    /*
+     * It is possible to perform certain precalculations, which
+     * would spare few cycles in block procedure. It's not done,
+     * because it upsets the performance balance between key
+     * setup and block procedures, negatively affecting overall
+     * throughput in applications operating on short messages
+     * and volatile keys.
+     */
+}
+
+void Camellia_EncryptBlock_Rounds(int grandRounds, const u8 plaintext[],
+                                  const KEY_TABLE_TYPE keyTable,
+                                  u8 ciphertext[])
+{
+    register u32 s0, s1, s2, s3;
+    const u32 *k = keyTable, *kend = keyTable + grandRounds * 16;
+
+    s0 = GETU32(plaintext) ^ k[0];
+    s1 = GETU32(plaintext + 4) ^ k[1];
+    s2 = GETU32(plaintext + 8) ^ k[2];
+    s3 = GETU32(plaintext + 12) ^ k[3];
+    k += 4;
+
+    while (1) {
+        /* Camellia makes 6 Feistel rounds */
+        Camellia_Feistel(s0, s1, s2, s3, k + 0);
+        Camellia_Feistel(s2, s3, s0, s1, k + 2);
+        Camellia_Feistel(s0, s1, s2, s3, k + 4);
+        Camellia_Feistel(s2, s3, s0, s1, k + 6);
+        Camellia_Feistel(s0, s1, s2, s3, k + 8);
+        Camellia_Feistel(s2, s3, s0, s1, k + 10);
+        k += 12;
+
+        if (k == kend)
+            break;
+
+        /*
+         * This is the same function as the diffusion function D of the
+         * accompanying documentation. See section 3.2 for properties of the
+         * FLlayer function.
+         */
+        s1 ^= LeftRotate(s0 & k[0], 1);
+        s2 ^= s3 | k[3];
+        s0 ^= s1 | k[1];
+        s3 ^= LeftRotate(s2 & k[2], 1);
+        k += 4;
+    }
+
+    s2 ^= k[0], s3 ^= k[1], s0 ^= k[2], s1 ^= k[3];
+
+    PUTU32(ciphertext, s2);
+    PUTU32(ciphertext + 4, s3);
+    PUTU32(ciphertext + 8, s0);
+    PUTU32(ciphertext + 12, s1);
+}
+
+void Camellia_EncryptBlock(int keyBitLength, const u8 plaintext[],
+                           const KEY_TABLE_TYPE keyTable, u8 ciphertext[])
+{
+    Camellia_EncryptBlock_Rounds(keyBitLength == 128 ? 3 : 4,
+                                 plaintext, keyTable, ciphertext);
+}
+
+void Camellia_DecryptBlock_Rounds(int grandRounds, const u8 ciphertext[],
+                                  const KEY_TABLE_TYPE keyTable,
+                                  u8 plaintext[])
+{
+    u32 s0, s1, s2, s3;
+    const u32 *k = keyTable + grandRounds * 16, *kend = keyTable + 4;
+
+    s0 = GETU32(ciphertext) ^ k[0];
+    s1 = GETU32(ciphertext + 4) ^ k[1];
+    s2 = GETU32(ciphertext + 8) ^ k[2];
+    s3 = GETU32(ciphertext + 12) ^ k[3];
+
+    while (1) {
+        /* Camellia makes 6 Feistel rounds */
+        k -= 12;
+        Camellia_Feistel(s0, s1, s2, s3, k + 10);
+        Camellia_Feistel(s2, s3, s0, s1, k + 8);
+        Camellia_Feistel(s0, s1, s2, s3, k + 6);
+        Camellia_Feistel(s2, s3, s0, s1, k + 4);
+        Camellia_Feistel(s0, s1, s2, s3, k + 2);
+        Camellia_Feistel(s2, s3, s0, s1, k + 0);
+
+        if (k == kend)
+            break;
+
+        /*
+         * This is the same function as the diffusion function D of the
+         * accompanying documentation. See section 3.2 for properties of the
+         * FLlayer function.
+         */
+        k -= 4;
+        s1 ^= LeftRotate(s0 & k[2], 1);
+        s2 ^= s3 | k[1];
+        s0 ^= s1 | k[3];
+        s3 ^= LeftRotate(s2 & k[0], 1);
+    }
+
+    k -= 4;
+    s2 ^= k[0], s3 ^= k[1], s0 ^= k[2], s1 ^= k[3];
+
+    PUTU32(plaintext, s2);
+    PUTU32(plaintext + 4, s3);
+    PUTU32(plaintext + 8, s0);
+    PUTU32(plaintext + 12, s1);
+}
+
+void Camellia_DecryptBlock(int keyBitLength, const u8 plaintext[],
+                           const KEY_TABLE_TYPE keyTable, u8 ciphertext[])
+{
+    Camellia_DecryptBlock_Rounds(keyBitLength == 128 ? 3 : 4,
+                                 plaintext, keyTable, ciphertext);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_cbc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_cbc.c
new file mode 100644
index 000000000..b19171ded
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_cbc.c
@@ -0,0 +1,24 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/camellia.h>
+#include <openssl/modes.h>
+
+void Camellia_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                          size_t len, const CAMELLIA_KEY *key,
+                          unsigned char *ivec, const int enc)
+{
+
+    if (enc)
+        CRYPTO_cbc128_encrypt(in, out, len, key, ivec,
+                              (block128_f) Camellia_encrypt);
+    else
+        CRYPTO_cbc128_decrypt(in, out, len, key, ivec,
+                              (block128_f) Camellia_decrypt);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_cfb.c b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_cfb.c
new file mode 100644
index 000000000..4f49eaded
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_cfb.c
@@ -0,0 +1,43 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/camellia.h>
+#include <openssl/modes.h>
+
+/*
+ * The input and output encrypted as though 128bit cfb mode is being used.
+ * The extra state information to record how much of the 128bit block we have
+ * used is contained in *num;
+ */
+
+void Camellia_cfb128_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t length, const CAMELLIA_KEY *key,
+                             unsigned char *ivec, int *num, const int enc)
+{
+
+    CRYPTO_cfb128_encrypt(in, out, length, key, ivec, num, enc,
+                          (block128_f) Camellia_encrypt);
+}
+
+/* N.B. This expects the input to be packed, MS bit first */
+void Camellia_cfb1_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t length, const CAMELLIA_KEY *key,
+                           unsigned char *ivec, int *num, const int enc)
+{
+    CRYPTO_cfb128_1_encrypt(in, out, length, key, ivec, num, enc,
+                            (block128_f) Camellia_encrypt);
+}
+
+void Camellia_cfb8_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t length, const CAMELLIA_KEY *key,
+                           unsigned char *ivec, int *num, const int enc)
+{
+    CRYPTO_cfb128_8_encrypt(in, out, length, key, ivec, num, enc,
+                            (block128_f) Camellia_encrypt);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_ctr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_ctr.c
new file mode 100644
index 000000000..161d1e18c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_ctr.c
@@ -0,0 +1,22 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/camellia.h>
+#include <openssl/modes.h>
+
+void Camellia_ctr128_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t length, const CAMELLIA_KEY *key,
+                             unsigned char ivec[CAMELLIA_BLOCK_SIZE],
+                             unsigned char ecount_buf[CAMELLIA_BLOCK_SIZE],
+                             unsigned int *num)
+{
+
+    CRYPTO_ctr128_encrypt(in, out, length, key, ivec, ecount_buf, num,
+                          (block128_f) Camellia_encrypt);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_ecb.c b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_ecb.c
new file mode 100644
index 000000000..d932f1b37
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_ecb.c
@@ -0,0 +1,20 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/camellia.h>
+#include "cmll_locl.h"
+
+void Camellia_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                          const CAMELLIA_KEY *key, const int enc)
+{
+    if (CAMELLIA_ENCRYPT == enc)
+        Camellia_encrypt(in, out, key);
+    else
+        Camellia_decrypt(in, out, key);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_locl.h
new file mode 100644
index 000000000..6403b390d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_locl.h
@@ -0,0 +1,43 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* ====================================================================
+ * Copyright 2006 NTT (Nippon Telegraph and Telephone Corporation) .
+ * ALL RIGHTS RESERVED.
+ *
+ * Intellectual Property information for Camellia:
+ *     http://info.isl.ntt.co.jp/crypt/eng/info/chiteki.html
+ *
+ * News Release for Announcement of Camellia open source:
+ *     http://www.ntt.co.jp/news/news06e/0604/060413a.html
+ *
+ * The Camellia Code included herein is developed by
+ * NTT (Nippon Telegraph and Telephone Corporation), and is contributed
+ * to the OpenSSL project.
+ */
+
+#ifndef HEADER_CAMELLIA_LOCL_H
+# define HEADER_CAMELLIA_LOCL_H
+
+typedef unsigned int u32;
+typedef unsigned char u8;
+
+int Camellia_Ekeygen(int keyBitLength, const u8 *rawKey,
+                     KEY_TABLE_TYPE keyTable);
+void Camellia_EncryptBlock_Rounds(int grandRounds, const u8 plaintext[],
+                                  const KEY_TABLE_TYPE keyTable,
+                                  u8 ciphertext[]);
+void Camellia_DecryptBlock_Rounds(int grandRounds, const u8 ciphertext[],
+                                  const KEY_TABLE_TYPE keyTable,
+                                  u8 plaintext[]);
+void Camellia_EncryptBlock(int keyBitLength, const u8 plaintext[],
+                           const KEY_TABLE_TYPE keyTable, u8 ciphertext[]);
+void Camellia_DecryptBlock(int keyBitLength, const u8 ciphertext[],
+                           const KEY_TABLE_TYPE keyTable, u8 plaintext[]);
+#endif                          /* #ifndef HEADER_CAMELLIA_LOCL_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_misc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_misc.c
new file mode 100644
index 000000000..e5f014b79
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_misc.c
@@ -0,0 +1,35 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslv.h>
+#include <openssl/camellia.h>
+#include "cmll_locl.h"
+
+int Camellia_set_key(const unsigned char *userKey, const int bits,
+                     CAMELLIA_KEY *key)
+{
+    if (!userKey || !key)
+        return -1;
+    if (bits != 128 && bits != 192 && bits != 256)
+        return -2;
+    key->grand_rounds = Camellia_Ekeygen(bits, userKey, key->u.rd_key);
+    return 0;
+}
+
+void Camellia_encrypt(const unsigned char *in, unsigned char *out,
+                      const CAMELLIA_KEY *key)
+{
+    Camellia_EncryptBlock_Rounds(key->grand_rounds, in, key->u.rd_key, out);
+}
+
+void Camellia_decrypt(const unsigned char *in, unsigned char *out,
+                      const CAMELLIA_KEY *key)
+{
+    Camellia_DecryptBlock_Rounds(key->grand_rounds, in, key->u.rd_key, out);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_ofb.c b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_ofb.c
new file mode 100644
index 000000000..b43c685c7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/camellia/cmll_ofb.c
@@ -0,0 +1,24 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/camellia.h>
+#include <openssl/modes.h>
+
+/*
+ * The input and output encrypted as though 128bit ofb mode is being used.
+ * The extra state information to record how much of the 128bit block we have
+ * used is contained in *num;
+ */
+void Camellia_ofb128_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t length, const CAMELLIA_KEY *key,
+                             unsigned char *ivec, int *num)
+{
+    CRYPTO_ofb128_encrypt(in, out, length, key, ivec, num,
+                          (block128_f) Camellia_encrypt);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cast/asm/cast-586.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/asm/cast-586.pl
new file mode 100644
index 000000000..d5d38965c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/asm/cast-586.pl
@@ -0,0 +1,192 @@
+#! /usr/bin/env perl
+# Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# This flag makes the inner loop one cycle longer, but generates
+# code that runs %30 faster on the pentium pro/II, 44% faster
+# of PIII, while only %7 slower on the pentium.
+# By default, this flag is on.
+$ppro=1;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+require "cbc.pl";
+
+$output=pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0],$ARGV[$#ARGV] eq "386");
+
+$CAST_ROUNDS=16;
+$L="edi";
+$R="esi";
+$K="ebp";
+$tmp1="ecx";
+$tmp2="ebx";
+$tmp3="eax";
+$tmp4="edx";
+$S1="CAST_S_table0";
+$S2="CAST_S_table1";
+$S3="CAST_S_table2";
+$S4="CAST_S_table3";
+
+@F1=("add","xor","sub");
+@F2=("xor","sub","add");
+@F3=("sub","add","xor");
+
+&CAST_encrypt("CAST_encrypt",1);
+&CAST_encrypt("CAST_decrypt",0);
+&cbc("CAST_cbc_encrypt","CAST_encrypt","CAST_decrypt",1,4,5,3,-1,-1);
+
+&asm_finish();
+
+close STDOUT;
+
+sub CAST_encrypt {
+    local($name,$enc)=@_;
+
+    local($win_ex)=<<"EOF";
+EXTERN	_CAST_S_table0:DWORD
+EXTERN	_CAST_S_table1:DWORD
+EXTERN	_CAST_S_table2:DWORD
+EXTERN	_CAST_S_table3:DWORD
+EOF
+    &main::external_label(
+			  "CAST_S_table0",
+			  "CAST_S_table1",
+			  "CAST_S_table2",
+			  "CAST_S_table3",
+			  );
+
+    &function_begin_B($name,$win_ex);
+
+    &comment("");
+
+    &push("ebp");
+    &push("ebx");
+    &mov($tmp2,&wparam(0));
+    &mov($K,&wparam(1));
+    &push("esi");
+    &push("edi");
+
+    &comment("Load the 2 words");
+    &mov($L,&DWP(0,$tmp2,"",0));
+    &mov($R,&DWP(4,$tmp2,"",0));
+
+    &comment('Get short key flag');
+    &mov($tmp3,&DWP(128,$K,"",0));
+    if($enc) {
+	&push($tmp3);
+    } else {
+	&or($tmp3,$tmp3);
+	&jnz(&label('cast_dec_skip'));
+    }
+
+    &xor($tmp3,	$tmp3);
+
+    # encrypting part
+
+    if ($enc) {
+	&E_CAST( 0,$S,$L,$R,$K,@F1,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 1,$S,$R,$L,$K,@F2,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 2,$S,$L,$R,$K,@F3,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 3,$S,$R,$L,$K,@F1,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 4,$S,$L,$R,$K,@F2,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 5,$S,$R,$L,$K,@F3,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 6,$S,$L,$R,$K,@F1,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 7,$S,$R,$L,$K,@F2,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 8,$S,$L,$R,$K,@F3,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 9,$S,$R,$L,$K,@F1,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST(10,$S,$L,$R,$K,@F2,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST(11,$S,$R,$L,$K,@F3,$tmp1,$tmp2,$tmp3,$tmp4);
+	&comment('test short key flag');
+	&pop($tmp4);
+	&or($tmp4,$tmp4);
+	&jnz(&label('cast_enc_done'));
+	&E_CAST(12,$S,$L,$R,$K,@F1,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST(13,$S,$R,$L,$K,@F2,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST(14,$S,$L,$R,$K,@F3,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST(15,$S,$R,$L,$K,@F1,$tmp1,$tmp2,$tmp3,$tmp4);
+    } else {
+	&E_CAST(15,$S,$L,$R,$K,@F1,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST(14,$S,$R,$L,$K,@F3,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST(13,$S,$L,$R,$K,@F2,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST(12,$S,$R,$L,$K,@F1,$tmp1,$tmp2,$tmp3,$tmp4);
+	&set_label('cast_dec_skip');
+	&E_CAST(11,$S,$L,$R,$K,@F3,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST(10,$S,$R,$L,$K,@F2,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 9,$S,$L,$R,$K,@F1,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 8,$S,$R,$L,$K,@F3,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 7,$S,$L,$R,$K,@F2,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 6,$S,$R,$L,$K,@F1,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 5,$S,$L,$R,$K,@F3,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 4,$S,$R,$L,$K,@F2,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 3,$S,$L,$R,$K,@F1,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 2,$S,$R,$L,$K,@F3,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 1,$S,$L,$R,$K,@F2,$tmp1,$tmp2,$tmp3,$tmp4);
+	&E_CAST( 0,$S,$R,$L,$K,@F1,$tmp1,$tmp2,$tmp3,$tmp4);
+    }
+
+    &set_label('cast_enc_done') if $enc;
+# Why the nop? - Ben 17/1/99
+    &nop();
+    &mov($tmp3,&wparam(0));
+    &mov(&DWP(4,$tmp3,"",0),$L);
+    &mov(&DWP(0,$tmp3,"",0),$R);
+    &function_end($name);
+}
+
+sub E_CAST {
+    local($i,$S,$L,$R,$K,$OP1,$OP2,$OP3,$tmp1,$tmp2,$tmp3,$tmp4)=@_;
+    # Ri needs to have 16 pre added.
+
+    &comment("round $i");
+    &mov(	$tmp4,		&DWP($i*8,$K,"",1));
+
+    &mov(	$tmp1,		&DWP($i*8+4,$K,"",1));
+    &$OP1(	$tmp4,		$R);
+
+    &rotl(	$tmp4,		&LB($tmp1));
+
+    if ($ppro) {
+	&xor(	$tmp1,		$tmp1);
+	&mov(	$tmp2,		0xff);
+
+	&movb(	&LB($tmp1),	&HB($tmp4));	# A
+	&and(	$tmp2,		$tmp4);
+
+	&shr(	$tmp4,		16); 		#
+	&xor(	$tmp3,		$tmp3);
+    } else {
+	&mov(	$tmp2,		$tmp4);		# B
+	&movb(	&LB($tmp1),	&HB($tmp4));	# A	# BAD BAD BAD
+
+	&shr(	$tmp4,		16); 		#
+	&and(	$tmp2,		0xff);
+    }
+
+    &movb(	&LB($tmp3),	&HB($tmp4));	# C	# BAD BAD BAD
+    &and(	$tmp4,		0xff);		# D
+
+    &mov(	$tmp1,		&DWP($S1,"",$tmp1,4));
+    &mov(	$tmp2,		&DWP($S2,"",$tmp2,4));
+
+    &$OP2(	$tmp1,		$tmp2);
+    &mov(	$tmp2,		&DWP($S3,"",$tmp3,4));
+
+    &$OP3(	$tmp1,		$tmp2);
+    &mov(	$tmp2,		&DWP($S4,"",$tmp4,4));
+
+    &$OP1(	$tmp1,		$tmp2);
+    # XXX
+
+    &xor(	$L,		$tmp1);
+    # XXX
+}
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cast/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/build.info
new file mode 100644
index 000000000..b0f59f380
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/build.info
@@ -0,0 +1,7 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        c_skey.c c_ecb.c {- $target{cast_asm_src} -} c_cfb64.c c_ofb64.c
+
+GENERATE[cast-586.s]=asm/cast-586.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+DEPEND[cast-586.s]=../perlasm/x86asm.pl ../perlasm/cbc.pl
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_cfb64.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_cfb64.c
new file mode 100644
index 000000000..bd7cb2f46
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_cfb64.c
@@ -0,0 +1,74 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/cast.h>
+#include "cast_lcl.h"
+
+/*
+ * The input and output encrypted as though 64bit cfb mode is being used.
+ * The extra state information to record how much of the 64bit block we have
+ * used is contained in *num;
+ */
+
+void CAST_cfb64_encrypt(const unsigned char *in, unsigned char *out,
+                        long length, const CAST_KEY *schedule,
+                        unsigned char *ivec, int *num, int enc)
+{
+    register CAST_LONG v0, v1, t;
+    register int n = *num;
+    register long l = length;
+    CAST_LONG ti[2];
+    unsigned char *iv, c, cc;
+
+    iv = ivec;
+    if (enc) {
+        while (l--) {
+            if (n == 0) {
+                n2l(iv, v0);
+                ti[0] = v0;
+                n2l(iv, v1);
+                ti[1] = v1;
+                CAST_encrypt((CAST_LONG *)ti, schedule);
+                iv = ivec;
+                t = ti[0];
+                l2n(t, iv);
+                t = ti[1];
+                l2n(t, iv);
+                iv = ivec;
+            }
+            c = *(in++) ^ iv[n];
+            *(out++) = c;
+            iv[n] = c;
+            n = (n + 1) & 0x07;
+        }
+    } else {
+        while (l--) {
+            if (n == 0) {
+                n2l(iv, v0);
+                ti[0] = v0;
+                n2l(iv, v1);
+                ti[1] = v1;
+                CAST_encrypt((CAST_LONG *)ti, schedule);
+                iv = ivec;
+                t = ti[0];
+                l2n(t, iv);
+                t = ti[1];
+                l2n(t, iv);
+                iv = ivec;
+            }
+            cc = *(in++);
+            c = iv[n];
+            iv[n] = cc;
+            *(out++) = c ^ cc;
+            n = (n + 1) & 0x07;
+        }
+    }
+    v0 = v1 = ti[0] = ti[1] = t = c = cc = 0;
+    *num = n;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_ecb.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_ecb.c
new file mode 100644
index 000000000..da4179438
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_ecb.c
@@ -0,0 +1,32 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/cast.h>
+#include "cast_lcl.h"
+#include <openssl/opensslv.h>
+
+void CAST_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                      const CAST_KEY *ks, int enc)
+{
+    CAST_LONG l, d[2];
+
+    n2l(in, l);
+    d[0] = l;
+    n2l(in, l);
+    d[1] = l;
+    if (enc)
+        CAST_encrypt(d, ks);
+    else
+        CAST_decrypt(d, ks);
+    l = d[0];
+    l2n(l, out);
+    l = d[1];
+    l2n(l, out);
+    l = d[0] = d[1] = 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_enc.c
new file mode 100644
index 000000000..700b6d162
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_enc.c
@@ -0,0 +1,151 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/cast.h>
+#include "cast_lcl.h"
+
+void CAST_encrypt(CAST_LONG *data, const CAST_KEY *key)
+{
+    CAST_LONG l, r, t;
+    const CAST_LONG *k;
+
+    k = &(key->data[0]);
+    l = data[0];
+    r = data[1];
+
+    E_CAST(0, k, l, r, +, ^, -);
+    E_CAST(1, k, r, l, ^, -, +);
+    E_CAST(2, k, l, r, -, +, ^);
+    E_CAST(3, k, r, l, +, ^, -);
+    E_CAST(4, k, l, r, ^, -, +);
+    E_CAST(5, k, r, l, -, +, ^);
+    E_CAST(6, k, l, r, +, ^, -);
+    E_CAST(7, k, r, l, ^, -, +);
+    E_CAST(8, k, l, r, -, +, ^);
+    E_CAST(9, k, r, l, +, ^, -);
+    E_CAST(10, k, l, r, ^, -, +);
+    E_CAST(11, k, r, l, -, +, ^);
+    if (!key->short_key) {
+        E_CAST(12, k, l, r, +, ^, -);
+        E_CAST(13, k, r, l, ^, -, +);
+        E_CAST(14, k, l, r, -, +, ^);
+        E_CAST(15, k, r, l, +, ^, -);
+    }
+
+    data[1] = l & 0xffffffffL;
+    data[0] = r & 0xffffffffL;
+}
+
+void CAST_decrypt(CAST_LONG *data, const CAST_KEY *key)
+{
+    CAST_LONG l, r, t;
+    const CAST_LONG *k;
+
+    k = &(key->data[0]);
+    l = data[0];
+    r = data[1];
+
+    if (!key->short_key) {
+        E_CAST(15, k, l, r, +, ^, -);
+        E_CAST(14, k, r, l, -, +, ^);
+        E_CAST(13, k, l, r, ^, -, +);
+        E_CAST(12, k, r, l, +, ^, -);
+    }
+    E_CAST(11, k, l, r, -, +, ^);
+    E_CAST(10, k, r, l, ^, -, +);
+    E_CAST(9, k, l, r, +, ^, -);
+    E_CAST(8, k, r, l, -, +, ^);
+    E_CAST(7, k, l, r, ^, -, +);
+    E_CAST(6, k, r, l, +, ^, -);
+    E_CAST(5, k, l, r, -, +, ^);
+    E_CAST(4, k, r, l, ^, -, +);
+    E_CAST(3, k, l, r, +, ^, -);
+    E_CAST(2, k, r, l, -, +, ^);
+    E_CAST(1, k, l, r, ^, -, +);
+    E_CAST(0, k, r, l, +, ^, -);
+
+    data[1] = l & 0xffffffffL;
+    data[0] = r & 0xffffffffL;
+}
+
+void CAST_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                      long length, const CAST_KEY *ks, unsigned char *iv,
+                      int enc)
+{
+    register CAST_LONG tin0, tin1;
+    register CAST_LONG tout0, tout1, xor0, xor1;
+    register long l = length;
+    CAST_LONG tin[2];
+
+    if (enc) {
+        n2l(iv, tout0);
+        n2l(iv, tout1);
+        iv -= 8;
+        for (l -= 8; l >= 0; l -= 8) {
+            n2l(in, tin0);
+            n2l(in, tin1);
+            tin0 ^= tout0;
+            tin1 ^= tout1;
+            tin[0] = tin0;
+            tin[1] = tin1;
+            CAST_encrypt(tin, ks);
+            tout0 = tin[0];
+            tout1 = tin[1];
+            l2n(tout0, out);
+            l2n(tout1, out);
+        }
+        if (l != -8) {
+            n2ln(in, tin0, tin1, l + 8);
+            tin0 ^= tout0;
+            tin1 ^= tout1;
+            tin[0] = tin0;
+            tin[1] = tin1;
+            CAST_encrypt(tin, ks);
+            tout0 = tin[0];
+            tout1 = tin[1];
+            l2n(tout0, out);
+            l2n(tout1, out);
+        }
+        l2n(tout0, iv);
+        l2n(tout1, iv);
+    } else {
+        n2l(iv, xor0);
+        n2l(iv, xor1);
+        iv -= 8;
+        for (l -= 8; l >= 0; l -= 8) {
+            n2l(in, tin0);
+            n2l(in, tin1);
+            tin[0] = tin0;
+            tin[1] = tin1;
+            CAST_decrypt(tin, ks);
+            tout0 = tin[0] ^ xor0;
+            tout1 = tin[1] ^ xor1;
+            l2n(tout0, out);
+            l2n(tout1, out);
+            xor0 = tin0;
+            xor1 = tin1;
+        }
+        if (l != -8) {
+            n2l(in, tin0);
+            n2l(in, tin1);
+            tin[0] = tin0;
+            tin[1] = tin1;
+            CAST_decrypt(tin, ks);
+            tout0 = tin[0] ^ xor0;
+            tout1 = tin[1] ^ xor1;
+            l2nn(tout0, tout1, out, l + 8);
+            xor0 = tin0;
+            xor1 = tin1;
+        }
+        l2n(xor0, iv);
+        l2n(xor1, iv);
+    }
+    tin0 = tin1 = tout0 = tout1 = xor0 = xor1 = 0;
+    tin[0] = tin[1] = 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_ofb64.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_ofb64.c
new file mode 100644
index 000000000..dffb07476
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_ofb64.c
@@ -0,0 +1,61 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/cast.h>
+#include "cast_lcl.h"
+
+/*
+ * The input and output encrypted as though 64bit ofb mode is being used.
+ * The extra state information to record how much of the 64bit block we have
+ * used is contained in *num;
+ */
+void CAST_ofb64_encrypt(const unsigned char *in, unsigned char *out,
+                        long length, const CAST_KEY *schedule,
+                        unsigned char *ivec, int *num)
+{
+    register CAST_LONG v0, v1, t;
+    register int n = *num;
+    register long l = length;
+    unsigned char d[8];
+    register char *dp;
+    CAST_LONG ti[2];
+    unsigned char *iv;
+    int save = 0;
+
+    iv = ivec;
+    n2l(iv, v0);
+    n2l(iv, v1);
+    ti[0] = v0;
+    ti[1] = v1;
+    dp = (char *)d;
+    l2n(v0, dp);
+    l2n(v1, dp);
+    while (l--) {
+        if (n == 0) {
+            CAST_encrypt((CAST_LONG *)ti, schedule);
+            dp = (char *)d;
+            t = ti[0];
+            l2n(t, dp);
+            t = ti[1];
+            l2n(t, dp);
+            save++;
+        }
+        *(out++) = *(in++) ^ d[n];
+        n = (n + 1) & 0x07;
+    }
+    if (save) {
+        v0 = ti[0];
+        v1 = ti[1];
+        iv = ivec;
+        l2n(v0, iv);
+        l2n(v1, iv);
+    }
+    t = v0 = v1 = ti[0] = ti[1] = 0;
+    *num = n;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_skey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_skey.c
new file mode 100644
index 000000000..962d2a60b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/c_skey.c
@@ -0,0 +1,118 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/cast.h>
+#include "cast_lcl.h"
+#include "cast_s.h"
+
+#define CAST_exp(l,A,a,n) \
+        A[n/4]=l; \
+        a[n+3]=(l    )&0xff; \
+        a[n+2]=(l>> 8)&0xff; \
+        a[n+1]=(l>>16)&0xff; \
+        a[n+0]=(l>>24)&0xff;
+
+#define S4 CAST_S_table4
+#define S5 CAST_S_table5
+#define S6 CAST_S_table6
+#define S7 CAST_S_table7
+
+void CAST_set_key(CAST_KEY *key, int len, const unsigned char *data)
+{
+    CAST_LONG x[16];
+    CAST_LONG z[16];
+    CAST_LONG k[32];
+    CAST_LONG X[4], Z[4];
+    CAST_LONG l, *K;
+    int i;
+
+    for (i = 0; i < 16; i++)
+        x[i] = 0;
+    if (len > 16)
+        len = 16;
+    for (i = 0; i < len; i++)
+        x[i] = data[i];
+    if (len <= 10)
+        key->short_key = 1;
+    else
+        key->short_key = 0;
+
+    K = &k[0];
+    X[0] = ((x[0] << 24) | (x[1] << 16) | (x[2] << 8) | x[3]) & 0xffffffffL;
+    X[1] = ((x[4] << 24) | (x[5] << 16) | (x[6] << 8) | x[7]) & 0xffffffffL;
+    X[2] = ((x[8] << 24) | (x[9] << 16) | (x[10] << 8) | x[11]) & 0xffffffffL;
+    X[3] =
+        ((x[12] << 24) | (x[13] << 16) | (x[14] << 8) | x[15]) & 0xffffffffL;
+
+    for (;;) {
+        l = X[0] ^ S4[x[13]] ^ S5[x[15]] ^ S6[x[12]] ^ S7[x[14]] ^ S6[x[8]];
+        CAST_exp(l, Z, z, 0);
+        l = X[2] ^ S4[z[0]] ^ S5[z[2]] ^ S6[z[1]] ^ S7[z[3]] ^ S7[x[10]];
+        CAST_exp(l, Z, z, 4);
+        l = X[3] ^ S4[z[7]] ^ S5[z[6]] ^ S6[z[5]] ^ S7[z[4]] ^ S4[x[9]];
+        CAST_exp(l, Z, z, 8);
+        l = X[1] ^ S4[z[10]] ^ S5[z[9]] ^ S6[z[11]] ^ S7[z[8]] ^ S5[x[11]];
+        CAST_exp(l, Z, z, 12);
+
+        K[0] = S4[z[8]] ^ S5[z[9]] ^ S6[z[7]] ^ S7[z[6]] ^ S4[z[2]];
+        K[1] = S4[z[10]] ^ S5[z[11]] ^ S6[z[5]] ^ S7[z[4]] ^ S5[z[6]];
+        K[2] = S4[z[12]] ^ S5[z[13]] ^ S6[z[3]] ^ S7[z[2]] ^ S6[z[9]];
+        K[3] = S4[z[14]] ^ S5[z[15]] ^ S6[z[1]] ^ S7[z[0]] ^ S7[z[12]];
+
+        l = Z[2] ^ S4[z[5]] ^ S5[z[7]] ^ S6[z[4]] ^ S7[z[6]] ^ S6[z[0]];
+        CAST_exp(l, X, x, 0);
+        l = Z[0] ^ S4[x[0]] ^ S5[x[2]] ^ S6[x[1]] ^ S7[x[3]] ^ S7[z[2]];
+        CAST_exp(l, X, x, 4);
+        l = Z[1] ^ S4[x[7]] ^ S5[x[6]] ^ S6[x[5]] ^ S7[x[4]] ^ S4[z[1]];
+        CAST_exp(l, X, x, 8);
+        l = Z[3] ^ S4[x[10]] ^ S5[x[9]] ^ S6[x[11]] ^ S7[x[8]] ^ S5[z[3]];
+        CAST_exp(l, X, x, 12);
+
+        K[4] = S4[x[3]] ^ S5[x[2]] ^ S6[x[12]] ^ S7[x[13]] ^ S4[x[8]];
+        K[5] = S4[x[1]] ^ S5[x[0]] ^ S6[x[14]] ^ S7[x[15]] ^ S5[x[13]];
+        K[6] = S4[x[7]] ^ S5[x[6]] ^ S6[x[8]] ^ S7[x[9]] ^ S6[x[3]];
+        K[7] = S4[x[5]] ^ S5[x[4]] ^ S6[x[10]] ^ S7[x[11]] ^ S7[x[7]];
+
+        l = X[0] ^ S4[x[13]] ^ S5[x[15]] ^ S6[x[12]] ^ S7[x[14]] ^ S6[x[8]];
+        CAST_exp(l, Z, z, 0);
+        l = X[2] ^ S4[z[0]] ^ S5[z[2]] ^ S6[z[1]] ^ S7[z[3]] ^ S7[x[10]];
+        CAST_exp(l, Z, z, 4);
+        l = X[3] ^ S4[z[7]] ^ S5[z[6]] ^ S6[z[5]] ^ S7[z[4]] ^ S4[x[9]];
+        CAST_exp(l, Z, z, 8);
+        l = X[1] ^ S4[z[10]] ^ S5[z[9]] ^ S6[z[11]] ^ S7[z[8]] ^ S5[x[11]];
+        CAST_exp(l, Z, z, 12);
+
+        K[8] = S4[z[3]] ^ S5[z[2]] ^ S6[z[12]] ^ S7[z[13]] ^ S4[z[9]];
+        K[9] = S4[z[1]] ^ S5[z[0]] ^ S6[z[14]] ^ S7[z[15]] ^ S5[z[12]];
+        K[10] = S4[z[7]] ^ S5[z[6]] ^ S6[z[8]] ^ S7[z[9]] ^ S6[z[2]];
+        K[11] = S4[z[5]] ^ S5[z[4]] ^ S6[z[10]] ^ S7[z[11]] ^ S7[z[6]];
+
+        l = Z[2] ^ S4[z[5]] ^ S5[z[7]] ^ S6[z[4]] ^ S7[z[6]] ^ S6[z[0]];
+        CAST_exp(l, X, x, 0);
+        l = Z[0] ^ S4[x[0]] ^ S5[x[2]] ^ S6[x[1]] ^ S7[x[3]] ^ S7[z[2]];
+        CAST_exp(l, X, x, 4);
+        l = Z[1] ^ S4[x[7]] ^ S5[x[6]] ^ S6[x[5]] ^ S7[x[4]] ^ S4[z[1]];
+        CAST_exp(l, X, x, 8);
+        l = Z[3] ^ S4[x[10]] ^ S5[x[9]] ^ S6[x[11]] ^ S7[x[8]] ^ S5[z[3]];
+        CAST_exp(l, X, x, 12);
+
+        K[12] = S4[x[8]] ^ S5[x[9]] ^ S6[x[7]] ^ S7[x[6]] ^ S4[x[3]];
+        K[13] = S4[x[10]] ^ S5[x[11]] ^ S6[x[5]] ^ S7[x[4]] ^ S5[x[7]];
+        K[14] = S4[x[12]] ^ S5[x[13]] ^ S6[x[3]] ^ S7[x[2]] ^ S6[x[8]];
+        K[15] = S4[x[14]] ^ S5[x[15]] ^ S6[x[1]] ^ S7[x[0]] ^ S7[x[13]];
+        if (K != k)
+            break;
+        K += 16;
+    }
+
+    for (i = 0; i < 16; i++) {
+        key->data[i * 2] = k[i];
+        key->data[i * 2 + 1] = ((k[i + 16]) + 16) & 0x1f;
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cast/cast_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/cast_lcl.h
new file mode 100644
index 000000000..35e89930a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/cast_lcl.h
@@ -0,0 +1,188 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifdef OPENSSL_SYS_WIN32
+# include <stdlib.h>
+#endif
+
+#undef c2l
+#define c2l(c,l)        (l =((unsigned long)(*((c)++)))    , \
+                         l|=((unsigned long)(*((c)++)))<< 8L, \
+                         l|=((unsigned long)(*((c)++)))<<16L, \
+                         l|=((unsigned long)(*((c)++)))<<24L)
+
+/* NOTE - c is not incremented as per c2l */
+#undef c2ln
+#define c2ln(c,l1,l2,n) { \
+                        c+=n; \
+                        l1=l2=0; \
+                        switch (n) { \
+                        case 8: l2 =((unsigned long)(*(--(c))))<<24L; \
+                        case 7: l2|=((unsigned long)(*(--(c))))<<16L; \
+                        case 6: l2|=((unsigned long)(*(--(c))))<< 8L; \
+                        case 5: l2|=((unsigned long)(*(--(c))));     \
+                        case 4: l1 =((unsigned long)(*(--(c))))<<24L; \
+                        case 3: l1|=((unsigned long)(*(--(c))))<<16L; \
+                        case 2: l1|=((unsigned long)(*(--(c))))<< 8L; \
+                        case 1: l1|=((unsigned long)(*(--(c))));     \
+                                } \
+                        }
+
+#undef l2c
+#define l2c(l,c)        (*((c)++)=(unsigned char)(((l)     )&0xff), \
+                         *((c)++)=(unsigned char)(((l)>> 8L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>16L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>24L)&0xff))
+
+/* NOTE - c is not incremented as per l2c */
+#undef l2cn
+#define l2cn(l1,l2,c,n) { \
+                        c+=n; \
+                        switch (n) { \
+                        case 8: *(--(c))=(unsigned char)(((l2)>>24L)&0xff); \
+                        case 7: *(--(c))=(unsigned char)(((l2)>>16L)&0xff); \
+                        case 6: *(--(c))=(unsigned char)(((l2)>> 8L)&0xff); \
+                        case 5: *(--(c))=(unsigned char)(((l2)     )&0xff); \
+                        case 4: *(--(c))=(unsigned char)(((l1)>>24L)&0xff); \
+                        case 3: *(--(c))=(unsigned char)(((l1)>>16L)&0xff); \
+                        case 2: *(--(c))=(unsigned char)(((l1)>> 8L)&0xff); \
+                        case 1: *(--(c))=(unsigned char)(((l1)     )&0xff); \
+                                } \
+                        }
+
+/* NOTE - c is not incremented as per n2l */
+#define n2ln(c,l1,l2,n) { \
+                        c+=n; \
+                        l1=l2=0; \
+                        switch (n) { \
+                        case 8: l2 =((unsigned long)(*(--(c))))    ; \
+                        /* fall thru */                              \
+                        case 7: l2|=((unsigned long)(*(--(c))))<< 8; \
+                        /* fall thru */                              \
+                        case 6: l2|=((unsigned long)(*(--(c))))<<16; \
+                        /* fall thru */                              \
+                        case 5: l2|=((unsigned long)(*(--(c))))<<24; \
+                        /* fall thru */                              \
+                        case 4: l1 =((unsigned long)(*(--(c))))    ; \
+                        /* fall thru */                              \
+                        case 3: l1|=((unsigned long)(*(--(c))))<< 8; \
+                        /* fall thru */                              \
+                        case 2: l1|=((unsigned long)(*(--(c))))<<16; \
+                        /* fall thru */                              \
+                        case 1: l1|=((unsigned long)(*(--(c))))<<24; \
+                                } \
+                        }
+
+/* NOTE - c is not incremented as per l2n */
+#define l2nn(l1,l2,c,n) { \
+                        c+=n; \
+                        switch (n) { \
+                        case 8: *(--(c))=(unsigned char)(((l2)    )&0xff); \
+                        /* fall thru */                                    \
+                        case 7: *(--(c))=(unsigned char)(((l2)>> 8)&0xff); \
+                        /* fall thru */                                    \
+                        case 6: *(--(c))=(unsigned char)(((l2)>>16)&0xff); \
+                        /* fall thru */                                    \
+                        case 5: *(--(c))=(unsigned char)(((l2)>>24)&0xff); \
+                        /* fall thru */                                    \
+                        case 4: *(--(c))=(unsigned char)(((l1)    )&0xff); \
+                        /* fall thru */                                    \
+                        case 3: *(--(c))=(unsigned char)(((l1)>> 8)&0xff); \
+                        /* fall thru */                                    \
+                        case 2: *(--(c))=(unsigned char)(((l1)>>16)&0xff); \
+                        /* fall thru */                                    \
+                        case 1: *(--(c))=(unsigned char)(((l1)>>24)&0xff); \
+                                } \
+                        }
+
+#undef n2l
+#define n2l(c,l)        (l =((unsigned long)(*((c)++)))<<24L, \
+                         l|=((unsigned long)(*((c)++)))<<16L, \
+                         l|=((unsigned long)(*((c)++)))<< 8L, \
+                         l|=((unsigned long)(*((c)++))))
+
+#undef l2n
+#define l2n(l,c)        (*((c)++)=(unsigned char)(((l)>>24L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>16L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>> 8L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)     )&0xff))
+
+#if defined(OPENSSL_SYS_WIN32) && defined(_MSC_VER)
+# define ROTL(a,n)     (_lrotl(a,n))
+#else
+# define ROTL(a,n)     ((((a)<<(n))&0xffffffffL)|((a)>>((32-(n))&31)))
+#endif
+
+#define C_M    0x3fc
+#define C_0    22L
+#define C_1    14L
+#define C_2     6L
+#define C_3     2L              /* left shift */
+
+/* The rotate has an extra 16 added to it to help the x86 asm */
+#if defined(CAST_PTR)
+# define E_CAST(n,key,L,R,OP1,OP2,OP3) \
+        { \
+        int i; \
+        t=(key[n*2] OP1 R)&0xffffffffL; \
+        i=key[n*2+1]; \
+        t=ROTL(t,i); \
+        L^= (((((*(CAST_LONG *)((unsigned char *) \
+                        CAST_S_table0+((t>>C_2)&C_M)) OP2 \
+                *(CAST_LONG *)((unsigned char *) \
+                        CAST_S_table1+((t<<C_3)&C_M)))&0xffffffffL) OP3 \
+                *(CAST_LONG *)((unsigned char *) \
+                        CAST_S_table2+((t>>C_0)&C_M)))&0xffffffffL) OP1 \
+                *(CAST_LONG *)((unsigned char *) \
+                        CAST_S_table3+((t>>C_1)&C_M)))&0xffffffffL; \
+        }
+#elif defined(CAST_PTR2)
+# define E_CAST(n,key,L,R,OP1,OP2,OP3) \
+        { \
+        int i; \
+        CAST_LONG u,v,w; \
+        w=(key[n*2] OP1 R)&0xffffffffL; \
+        i=key[n*2+1]; \
+        w=ROTL(w,i); \
+        u=w>>C_2; \
+        v=w<<C_3; \
+        u&=C_M; \
+        v&=C_M; \
+        t= *(CAST_LONG *)((unsigned char *)CAST_S_table0+u); \
+        u=w>>C_0; \
+        t=(t OP2 *(CAST_LONG *)((unsigned char *)CAST_S_table1+v))&0xffffffffL;\
+        v=w>>C_1; \
+        u&=C_M; \
+        v&=C_M; \
+        t=(t OP3 *(CAST_LONG *)((unsigned char *)CAST_S_table2+u)&0xffffffffL);\
+        t=(t OP1 *(CAST_LONG *)((unsigned char *)CAST_S_table3+v)&0xffffffffL);\
+        L^=(t&0xffffffff); \
+        }
+#else
+# define E_CAST(n,key,L,R,OP1,OP2,OP3) \
+        { \
+        CAST_LONG a,b,c,d; \
+        t=(key[n*2] OP1 R)&0xffffffff; \
+        t=ROTL(t,(key[n*2+1])); \
+        a=CAST_S_table0[(t>> 8)&0xff]; \
+        b=CAST_S_table1[(t    )&0xff]; \
+        c=CAST_S_table2[(t>>24)&0xff]; \
+        d=CAST_S_table3[(t>>16)&0xff]; \
+        L^=(((((a OP2 b)&0xffffffffL) OP3 c)&0xffffffffL) OP1 d)&0xffffffffL; \
+        }
+#endif
+
+extern const CAST_LONG CAST_S_table0[256];
+extern const CAST_LONG CAST_S_table1[256];
+extern const CAST_LONG CAST_S_table2[256];
+extern const CAST_LONG CAST_S_table3[256];
+extern const CAST_LONG CAST_S_table4[256];
+extern const CAST_LONG CAST_S_table5[256];
+extern const CAST_LONG CAST_S_table6[256];
+extern const CAST_LONG CAST_S_table7[256];
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cast/cast_s.h b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/cast_s.h
new file mode 100644
index 000000000..b27415b96
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cast/cast_s.h
@@ -0,0 +1,544 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+const CAST_LONG CAST_S_table0[256] = {
+    0x30fb40d4, 0x9fa0ff0b, 0x6beccd2f, 0x3f258c7a,
+    0x1e213f2f, 0x9c004dd3, 0x6003e540, 0xcf9fc949,
+    0xbfd4af27, 0x88bbbdb5, 0xe2034090, 0x98d09675,
+    0x6e63a0e0, 0x15c361d2, 0xc2e7661d, 0x22d4ff8e,
+    0x28683b6f, 0xc07fd059, 0xff2379c8, 0x775f50e2,
+    0x43c340d3, 0xdf2f8656, 0x887ca41a, 0xa2d2bd2d,
+    0xa1c9e0d6, 0x346c4819, 0x61b76d87, 0x22540f2f,
+    0x2abe32e1, 0xaa54166b, 0x22568e3a, 0xa2d341d0,
+    0x66db40c8, 0xa784392f, 0x004dff2f, 0x2db9d2de,
+    0x97943fac, 0x4a97c1d8, 0x527644b7, 0xb5f437a7,
+    0xb82cbaef, 0xd751d159, 0x6ff7f0ed, 0x5a097a1f,
+    0x827b68d0, 0x90ecf52e, 0x22b0c054, 0xbc8e5935,
+    0x4b6d2f7f, 0x50bb64a2, 0xd2664910, 0xbee5812d,
+    0xb7332290, 0xe93b159f, 0xb48ee411, 0x4bff345d,
+    0xfd45c240, 0xad31973f, 0xc4f6d02e, 0x55fc8165,
+    0xd5b1caad, 0xa1ac2dae, 0xa2d4b76d, 0xc19b0c50,
+    0x882240f2, 0x0c6e4f38, 0xa4e4bfd7, 0x4f5ba272,
+    0x564c1d2f, 0xc59c5319, 0xb949e354, 0xb04669fe,
+    0xb1b6ab8a, 0xc71358dd, 0x6385c545, 0x110f935d,
+    0x57538ad5, 0x6a390493, 0xe63d37e0, 0x2a54f6b3,
+    0x3a787d5f, 0x6276a0b5, 0x19a6fcdf, 0x7a42206a,
+    0x29f9d4d5, 0xf61b1891, 0xbb72275e, 0xaa508167,
+    0x38901091, 0xc6b505eb, 0x84c7cb8c, 0x2ad75a0f,
+    0x874a1427, 0xa2d1936b, 0x2ad286af, 0xaa56d291,
+    0xd7894360, 0x425c750d, 0x93b39e26, 0x187184c9,
+    0x6c00b32d, 0x73e2bb14, 0xa0bebc3c, 0x54623779,
+    0x64459eab, 0x3f328b82, 0x7718cf82, 0x59a2cea6,
+    0x04ee002e, 0x89fe78e6, 0x3fab0950, 0x325ff6c2,
+    0x81383f05, 0x6963c5c8, 0x76cb5ad6, 0xd49974c9,
+    0xca180dcf, 0x380782d5, 0xc7fa5cf6, 0x8ac31511,
+    0x35e79e13, 0x47da91d0, 0xf40f9086, 0xa7e2419e,
+    0x31366241, 0x051ef495, 0xaa573b04, 0x4a805d8d,
+    0x548300d0, 0x00322a3c, 0xbf64cddf, 0xba57a68e,
+    0x75c6372b, 0x50afd341, 0xa7c13275, 0x915a0bf5,
+    0x6b54bfab, 0x2b0b1426, 0xab4cc9d7, 0x449ccd82,
+    0xf7fbf265, 0xab85c5f3, 0x1b55db94, 0xaad4e324,
+    0xcfa4bd3f, 0x2deaa3e2, 0x9e204d02, 0xc8bd25ac,
+    0xeadf55b3, 0xd5bd9e98, 0xe31231b2, 0x2ad5ad6c,
+    0x954329de, 0xadbe4528, 0xd8710f69, 0xaa51c90f,
+    0xaa786bf6, 0x22513f1e, 0xaa51a79b, 0x2ad344cc,
+    0x7b5a41f0, 0xd37cfbad, 0x1b069505, 0x41ece491,
+    0xb4c332e6, 0x032268d4, 0xc9600acc, 0xce387e6d,
+    0xbf6bb16c, 0x6a70fb78, 0x0d03d9c9, 0xd4df39de,
+    0xe01063da, 0x4736f464, 0x5ad328d8, 0xb347cc96,
+    0x75bb0fc3, 0x98511bfb, 0x4ffbcc35, 0xb58bcf6a,
+    0xe11f0abc, 0xbfc5fe4a, 0xa70aec10, 0xac39570a,
+    0x3f04442f, 0x6188b153, 0xe0397a2e, 0x5727cb79,
+    0x9ceb418f, 0x1cacd68d, 0x2ad37c96, 0x0175cb9d,
+    0xc69dff09, 0xc75b65f0, 0xd9db40d8, 0xec0e7779,
+    0x4744ead4, 0xb11c3274, 0xdd24cb9e, 0x7e1c54bd,
+    0xf01144f9, 0xd2240eb1, 0x9675b3fd, 0xa3ac3755,
+    0xd47c27af, 0x51c85f4d, 0x56907596, 0xa5bb15e6,
+    0x580304f0, 0xca042cf1, 0x011a37ea, 0x8dbfaadb,
+    0x35ba3e4a, 0x3526ffa0, 0xc37b4d09, 0xbc306ed9,
+    0x98a52666, 0x5648f725, 0xff5e569d, 0x0ced63d0,
+    0x7c63b2cf, 0x700b45e1, 0xd5ea50f1, 0x85a92872,
+    0xaf1fbda7, 0xd4234870, 0xa7870bf3, 0x2d3b4d79,
+    0x42e04198, 0x0cd0ede7, 0x26470db8, 0xf881814c,
+    0x474d6ad7, 0x7c0c5e5c, 0xd1231959, 0x381b7298,
+    0xf5d2f4db, 0xab838653, 0x6e2f1e23, 0x83719c9e,
+    0xbd91e046, 0x9a56456e, 0xdc39200c, 0x20c8c571,
+    0x962bda1c, 0xe1e696ff, 0xb141ab08, 0x7cca89b9,
+    0x1a69e783, 0x02cc4843, 0xa2f7c579, 0x429ef47d,
+    0x427b169c, 0x5ac9f049, 0xdd8f0f00, 0x5c8165bf,
+};
+
+const CAST_LONG CAST_S_table1[256] = {
+    0x1f201094, 0xef0ba75b, 0x69e3cf7e, 0x393f4380,
+    0xfe61cf7a, 0xeec5207a, 0x55889c94, 0x72fc0651,
+    0xada7ef79, 0x4e1d7235, 0xd55a63ce, 0xde0436ba,
+    0x99c430ef, 0x5f0c0794, 0x18dcdb7d, 0xa1d6eff3,
+    0xa0b52f7b, 0x59e83605, 0xee15b094, 0xe9ffd909,
+    0xdc440086, 0xef944459, 0xba83ccb3, 0xe0c3cdfb,
+    0xd1da4181, 0x3b092ab1, 0xf997f1c1, 0xa5e6cf7b,
+    0x01420ddb, 0xe4e7ef5b, 0x25a1ff41, 0xe180f806,
+    0x1fc41080, 0x179bee7a, 0xd37ac6a9, 0xfe5830a4,
+    0x98de8b7f, 0x77e83f4e, 0x79929269, 0x24fa9f7b,
+    0xe113c85b, 0xacc40083, 0xd7503525, 0xf7ea615f,
+    0x62143154, 0x0d554b63, 0x5d681121, 0xc866c359,
+    0x3d63cf73, 0xcee234c0, 0xd4d87e87, 0x5c672b21,
+    0x071f6181, 0x39f7627f, 0x361e3084, 0xe4eb573b,
+    0x602f64a4, 0xd63acd9c, 0x1bbc4635, 0x9e81032d,
+    0x2701f50c, 0x99847ab4, 0xa0e3df79, 0xba6cf38c,
+    0x10843094, 0x2537a95e, 0xf46f6ffe, 0xa1ff3b1f,
+    0x208cfb6a, 0x8f458c74, 0xd9e0a227, 0x4ec73a34,
+    0xfc884f69, 0x3e4de8df, 0xef0e0088, 0x3559648d,
+    0x8a45388c, 0x1d804366, 0x721d9bfd, 0xa58684bb,
+    0xe8256333, 0x844e8212, 0x128d8098, 0xfed33fb4,
+    0xce280ae1, 0x27e19ba5, 0xd5a6c252, 0xe49754bd,
+    0xc5d655dd, 0xeb667064, 0x77840b4d, 0xa1b6a801,
+    0x84db26a9, 0xe0b56714, 0x21f043b7, 0xe5d05860,
+    0x54f03084, 0x066ff472, 0xa31aa153, 0xdadc4755,
+    0xb5625dbf, 0x68561be6, 0x83ca6b94, 0x2d6ed23b,
+    0xeccf01db, 0xa6d3d0ba, 0xb6803d5c, 0xaf77a709,
+    0x33b4a34c, 0x397bc8d6, 0x5ee22b95, 0x5f0e5304,
+    0x81ed6f61, 0x20e74364, 0xb45e1378, 0xde18639b,
+    0x881ca122, 0xb96726d1, 0x8049a7e8, 0x22b7da7b,
+    0x5e552d25, 0x5272d237, 0x79d2951c, 0xc60d894c,
+    0x488cb402, 0x1ba4fe5b, 0xa4b09f6b, 0x1ca815cf,
+    0xa20c3005, 0x8871df63, 0xb9de2fcb, 0x0cc6c9e9,
+    0x0beeff53, 0xe3214517, 0xb4542835, 0x9f63293c,
+    0xee41e729, 0x6e1d2d7c, 0x50045286, 0x1e6685f3,
+    0xf33401c6, 0x30a22c95, 0x31a70850, 0x60930f13,
+    0x73f98417, 0xa1269859, 0xec645c44, 0x52c877a9,
+    0xcdff33a6, 0xa02b1741, 0x7cbad9a2, 0x2180036f,
+    0x50d99c08, 0xcb3f4861, 0xc26bd765, 0x64a3f6ab,
+    0x80342676, 0x25a75e7b, 0xe4e6d1fc, 0x20c710e6,
+    0xcdf0b680, 0x17844d3b, 0x31eef84d, 0x7e0824e4,
+    0x2ccb49eb, 0x846a3bae, 0x8ff77888, 0xee5d60f6,
+    0x7af75673, 0x2fdd5cdb, 0xa11631c1, 0x30f66f43,
+    0xb3faec54, 0x157fd7fa, 0xef8579cc, 0xd152de58,
+    0xdb2ffd5e, 0x8f32ce19, 0x306af97a, 0x02f03ef8,
+    0x99319ad5, 0xc242fa0f, 0xa7e3ebb0, 0xc68e4906,
+    0xb8da230c, 0x80823028, 0xdcdef3c8, 0xd35fb171,
+    0x088a1bc8, 0xbec0c560, 0x61a3c9e8, 0xbca8f54d,
+    0xc72feffa, 0x22822e99, 0x82c570b4, 0xd8d94e89,
+    0x8b1c34bc, 0x301e16e6, 0x273be979, 0xb0ffeaa6,
+    0x61d9b8c6, 0x00b24869, 0xb7ffce3f, 0x08dc283b,
+    0x43daf65a, 0xf7e19798, 0x7619b72f, 0x8f1c9ba4,
+    0xdc8637a0, 0x16a7d3b1, 0x9fc393b7, 0xa7136eeb,
+    0xc6bcc63e, 0x1a513742, 0xef6828bc, 0x520365d6,
+    0x2d6a77ab, 0x3527ed4b, 0x821fd216, 0x095c6e2e,
+    0xdb92f2fb, 0x5eea29cb, 0x145892f5, 0x91584f7f,
+    0x5483697b, 0x2667a8cc, 0x85196048, 0x8c4bacea,
+    0x833860d4, 0x0d23e0f9, 0x6c387e8a, 0x0ae6d249,
+    0xb284600c, 0xd835731d, 0xdcb1c647, 0xac4c56ea,
+    0x3ebd81b3, 0x230eabb0, 0x6438bc87, 0xf0b5b1fa,
+    0x8f5ea2b3, 0xfc184642, 0x0a036b7a, 0x4fb089bd,
+    0x649da589, 0xa345415e, 0x5c038323, 0x3e5d3bb9,
+    0x43d79572, 0x7e6dd07c, 0x06dfdf1e, 0x6c6cc4ef,
+    0x7160a539, 0x73bfbe70, 0x83877605, 0x4523ecf1,
+};
+
+const CAST_LONG CAST_S_table2[256] = {
+    0x8defc240, 0x25fa5d9f, 0xeb903dbf, 0xe810c907,
+    0x47607fff, 0x369fe44b, 0x8c1fc644, 0xaececa90,
+    0xbeb1f9bf, 0xeefbcaea, 0xe8cf1950, 0x51df07ae,
+    0x920e8806, 0xf0ad0548, 0xe13c8d83, 0x927010d5,
+    0x11107d9f, 0x07647db9, 0xb2e3e4d4, 0x3d4f285e,
+    0xb9afa820, 0xfade82e0, 0xa067268b, 0x8272792e,
+    0x553fb2c0, 0x489ae22b, 0xd4ef9794, 0x125e3fbc,
+    0x21fffcee, 0x825b1bfd, 0x9255c5ed, 0x1257a240,
+    0x4e1a8302, 0xbae07fff, 0x528246e7, 0x8e57140e,
+    0x3373f7bf, 0x8c9f8188, 0xa6fc4ee8, 0xc982b5a5,
+    0xa8c01db7, 0x579fc264, 0x67094f31, 0xf2bd3f5f,
+    0x40fff7c1, 0x1fb78dfc, 0x8e6bd2c1, 0x437be59b,
+    0x99b03dbf, 0xb5dbc64b, 0x638dc0e6, 0x55819d99,
+    0xa197c81c, 0x4a012d6e, 0xc5884a28, 0xccc36f71,
+    0xb843c213, 0x6c0743f1, 0x8309893c, 0x0feddd5f,
+    0x2f7fe850, 0xd7c07f7e, 0x02507fbf, 0x5afb9a04,
+    0xa747d2d0, 0x1651192e, 0xaf70bf3e, 0x58c31380,
+    0x5f98302e, 0x727cc3c4, 0x0a0fb402, 0x0f7fef82,
+    0x8c96fdad, 0x5d2c2aae, 0x8ee99a49, 0x50da88b8,
+    0x8427f4a0, 0x1eac5790, 0x796fb449, 0x8252dc15,
+    0xefbd7d9b, 0xa672597d, 0xada840d8, 0x45f54504,
+    0xfa5d7403, 0xe83ec305, 0x4f91751a, 0x925669c2,
+    0x23efe941, 0xa903f12e, 0x60270df2, 0x0276e4b6,
+    0x94fd6574, 0x927985b2, 0x8276dbcb, 0x02778176,
+    0xf8af918d, 0x4e48f79e, 0x8f616ddf, 0xe29d840e,
+    0x842f7d83, 0x340ce5c8, 0x96bbb682, 0x93b4b148,
+    0xef303cab, 0x984faf28, 0x779faf9b, 0x92dc560d,
+    0x224d1e20, 0x8437aa88, 0x7d29dc96, 0x2756d3dc,
+    0x8b907cee, 0xb51fd240, 0xe7c07ce3, 0xe566b4a1,
+    0xc3e9615e, 0x3cf8209d, 0x6094d1e3, 0xcd9ca341,
+    0x5c76460e, 0x00ea983b, 0xd4d67881, 0xfd47572c,
+    0xf76cedd9, 0xbda8229c, 0x127dadaa, 0x438a074e,
+    0x1f97c090, 0x081bdb8a, 0x93a07ebe, 0xb938ca15,
+    0x97b03cff, 0x3dc2c0f8, 0x8d1ab2ec, 0x64380e51,
+    0x68cc7bfb, 0xd90f2788, 0x12490181, 0x5de5ffd4,
+    0xdd7ef86a, 0x76a2e214, 0xb9a40368, 0x925d958f,
+    0x4b39fffa, 0xba39aee9, 0xa4ffd30b, 0xfaf7933b,
+    0x6d498623, 0x193cbcfa, 0x27627545, 0x825cf47a,
+    0x61bd8ba0, 0xd11e42d1, 0xcead04f4, 0x127ea392,
+    0x10428db7, 0x8272a972, 0x9270c4a8, 0x127de50b,
+    0x285ba1c8, 0x3c62f44f, 0x35c0eaa5, 0xe805d231,
+    0x428929fb, 0xb4fcdf82, 0x4fb66a53, 0x0e7dc15b,
+    0x1f081fab, 0x108618ae, 0xfcfd086d, 0xf9ff2889,
+    0x694bcc11, 0x236a5cae, 0x12deca4d, 0x2c3f8cc5,
+    0xd2d02dfe, 0xf8ef5896, 0xe4cf52da, 0x95155b67,
+    0x494a488c, 0xb9b6a80c, 0x5c8f82bc, 0x89d36b45,
+    0x3a609437, 0xec00c9a9, 0x44715253, 0x0a874b49,
+    0xd773bc40, 0x7c34671c, 0x02717ef6, 0x4feb5536,
+    0xa2d02fff, 0xd2bf60c4, 0xd43f03c0, 0x50b4ef6d,
+    0x07478cd1, 0x006e1888, 0xa2e53f55, 0xb9e6d4bc,
+    0xa2048016, 0x97573833, 0xd7207d67, 0xde0f8f3d,
+    0x72f87b33, 0xabcc4f33, 0x7688c55d, 0x7b00a6b0,
+    0x947b0001, 0x570075d2, 0xf9bb88f8, 0x8942019e,
+    0x4264a5ff, 0x856302e0, 0x72dbd92b, 0xee971b69,
+    0x6ea22fde, 0x5f08ae2b, 0xaf7a616d, 0xe5c98767,
+    0xcf1febd2, 0x61efc8c2, 0xf1ac2571, 0xcc8239c2,
+    0x67214cb8, 0xb1e583d1, 0xb7dc3e62, 0x7f10bdce,
+    0xf90a5c38, 0x0ff0443d, 0x606e6dc6, 0x60543a49,
+    0x5727c148, 0x2be98a1d, 0x8ab41738, 0x20e1be24,
+    0xaf96da0f, 0x68458425, 0x99833be5, 0x600d457d,
+    0x282f9350, 0x8334b362, 0xd91d1120, 0x2b6d8da0,
+    0x642b1e31, 0x9c305a00, 0x52bce688, 0x1b03588a,
+    0xf7baefd5, 0x4142ed9c, 0xa4315c11, 0x83323ec5,
+    0xdfef4636, 0xa133c501, 0xe9d3531c, 0xee353783,
+};
+
+const CAST_LONG CAST_S_table3[256] = {
+    0x9db30420, 0x1fb6e9de, 0xa7be7bef, 0xd273a298,
+    0x4a4f7bdb, 0x64ad8c57, 0x85510443, 0xfa020ed1,
+    0x7e287aff, 0xe60fb663, 0x095f35a1, 0x79ebf120,
+    0xfd059d43, 0x6497b7b1, 0xf3641f63, 0x241e4adf,
+    0x28147f5f, 0x4fa2b8cd, 0xc9430040, 0x0cc32220,
+    0xfdd30b30, 0xc0a5374f, 0x1d2d00d9, 0x24147b15,
+    0xee4d111a, 0x0fca5167, 0x71ff904c, 0x2d195ffe,
+    0x1a05645f, 0x0c13fefe, 0x081b08ca, 0x05170121,
+    0x80530100, 0xe83e5efe, 0xac9af4f8, 0x7fe72701,
+    0xd2b8ee5f, 0x06df4261, 0xbb9e9b8a, 0x7293ea25,
+    0xce84ffdf, 0xf5718801, 0x3dd64b04, 0xa26f263b,
+    0x7ed48400, 0x547eebe6, 0x446d4ca0, 0x6cf3d6f5,
+    0x2649abdf, 0xaea0c7f5, 0x36338cc1, 0x503f7e93,
+    0xd3772061, 0x11b638e1, 0x72500e03, 0xf80eb2bb,
+    0xabe0502e, 0xec8d77de, 0x57971e81, 0xe14f6746,
+    0xc9335400, 0x6920318f, 0x081dbb99, 0xffc304a5,
+    0x4d351805, 0x7f3d5ce3, 0xa6c866c6, 0x5d5bcca9,
+    0xdaec6fea, 0x9f926f91, 0x9f46222f, 0x3991467d,
+    0xa5bf6d8e, 0x1143c44f, 0x43958302, 0xd0214eeb,
+    0x022083b8, 0x3fb6180c, 0x18f8931e, 0x281658e6,
+    0x26486e3e, 0x8bd78a70, 0x7477e4c1, 0xb506e07c,
+    0xf32d0a25, 0x79098b02, 0xe4eabb81, 0x28123b23,
+    0x69dead38, 0x1574ca16, 0xdf871b62, 0x211c40b7,
+    0xa51a9ef9, 0x0014377b, 0x041e8ac8, 0x09114003,
+    0xbd59e4d2, 0xe3d156d5, 0x4fe876d5, 0x2f91a340,
+    0x557be8de, 0x00eae4a7, 0x0ce5c2ec, 0x4db4bba6,
+    0xe756bdff, 0xdd3369ac, 0xec17b035, 0x06572327,
+    0x99afc8b0, 0x56c8c391, 0x6b65811c, 0x5e146119,
+    0x6e85cb75, 0xbe07c002, 0xc2325577, 0x893ff4ec,
+    0x5bbfc92d, 0xd0ec3b25, 0xb7801ab7, 0x8d6d3b24,
+    0x20c763ef, 0xc366a5fc, 0x9c382880, 0x0ace3205,
+    0xaac9548a, 0xeca1d7c7, 0x041afa32, 0x1d16625a,
+    0x6701902c, 0x9b757a54, 0x31d477f7, 0x9126b031,
+    0x36cc6fdb, 0xc70b8b46, 0xd9e66a48, 0x56e55a79,
+    0x026a4ceb, 0x52437eff, 0x2f8f76b4, 0x0df980a5,
+    0x8674cde3, 0xedda04eb, 0x17a9be04, 0x2c18f4df,
+    0xb7747f9d, 0xab2af7b4, 0xefc34d20, 0x2e096b7c,
+    0x1741a254, 0xe5b6a035, 0x213d42f6, 0x2c1c7c26,
+    0x61c2f50f, 0x6552daf9, 0xd2c231f8, 0x25130f69,
+    0xd8167fa2, 0x0418f2c8, 0x001a96a6, 0x0d1526ab,
+    0x63315c21, 0x5e0a72ec, 0x49bafefd, 0x187908d9,
+    0x8d0dbd86, 0x311170a7, 0x3e9b640c, 0xcc3e10d7,
+    0xd5cad3b6, 0x0caec388, 0xf73001e1, 0x6c728aff,
+    0x71eae2a1, 0x1f9af36e, 0xcfcbd12f, 0xc1de8417,
+    0xac07be6b, 0xcb44a1d8, 0x8b9b0f56, 0x013988c3,
+    0xb1c52fca, 0xb4be31cd, 0xd8782806, 0x12a3a4e2,
+    0x6f7de532, 0x58fd7eb6, 0xd01ee900, 0x24adffc2,
+    0xf4990fc5, 0x9711aac5, 0x001d7b95, 0x82e5e7d2,
+    0x109873f6, 0x00613096, 0xc32d9521, 0xada121ff,
+    0x29908415, 0x7fbb977f, 0xaf9eb3db, 0x29c9ed2a,
+    0x5ce2a465, 0xa730f32c, 0xd0aa3fe8, 0x8a5cc091,
+    0xd49e2ce7, 0x0ce454a9, 0xd60acd86, 0x015f1919,
+    0x77079103, 0xdea03af6, 0x78a8565e, 0xdee356df,
+    0x21f05cbe, 0x8b75e387, 0xb3c50651, 0xb8a5c3ef,
+    0xd8eeb6d2, 0xe523be77, 0xc2154529, 0x2f69efdf,
+    0xafe67afb, 0xf470c4b2, 0xf3e0eb5b, 0xd6cc9876,
+    0x39e4460c, 0x1fda8538, 0x1987832f, 0xca007367,
+    0xa99144f8, 0x296b299e, 0x492fc295, 0x9266beab,
+    0xb5676e69, 0x9bd3ddda, 0xdf7e052f, 0xdb25701c,
+    0x1b5e51ee, 0xf65324e6, 0x6afce36c, 0x0316cc04,
+    0x8644213e, 0xb7dc59d0, 0x7965291f, 0xccd6fd43,
+    0x41823979, 0x932bcdf6, 0xb657c34d, 0x4edfd282,
+    0x7ae5290c, 0x3cb9536b, 0x851e20fe, 0x9833557e,
+    0x13ecf0b0, 0xd3ffb372, 0x3f85c5c1, 0x0aef7ed2,
+};
+
+const CAST_LONG CAST_S_table4[256] = {
+    0x7ec90c04, 0x2c6e74b9, 0x9b0e66df, 0xa6337911,
+    0xb86a7fff, 0x1dd358f5, 0x44dd9d44, 0x1731167f,
+    0x08fbf1fa, 0xe7f511cc, 0xd2051b00, 0x735aba00,
+    0x2ab722d8, 0x386381cb, 0xacf6243a, 0x69befd7a,
+    0xe6a2e77f, 0xf0c720cd, 0xc4494816, 0xccf5c180,
+    0x38851640, 0x15b0a848, 0xe68b18cb, 0x4caadeff,
+    0x5f480a01, 0x0412b2aa, 0x259814fc, 0x41d0efe2,
+    0x4e40b48d, 0x248eb6fb, 0x8dba1cfe, 0x41a99b02,
+    0x1a550a04, 0xba8f65cb, 0x7251f4e7, 0x95a51725,
+    0xc106ecd7, 0x97a5980a, 0xc539b9aa, 0x4d79fe6a,
+    0xf2f3f763, 0x68af8040, 0xed0c9e56, 0x11b4958b,
+    0xe1eb5a88, 0x8709e6b0, 0xd7e07156, 0x4e29fea7,
+    0x6366e52d, 0x02d1c000, 0xc4ac8e05, 0x9377f571,
+    0x0c05372a, 0x578535f2, 0x2261be02, 0xd642a0c9,
+    0xdf13a280, 0x74b55bd2, 0x682199c0, 0xd421e5ec,
+    0x53fb3ce8, 0xc8adedb3, 0x28a87fc9, 0x3d959981,
+    0x5c1ff900, 0xfe38d399, 0x0c4eff0b, 0x062407ea,
+    0xaa2f4fb1, 0x4fb96976, 0x90c79505, 0xb0a8a774,
+    0xef55a1ff, 0xe59ca2c2, 0xa6b62d27, 0xe66a4263,
+    0xdf65001f, 0x0ec50966, 0xdfdd55bc, 0x29de0655,
+    0x911e739a, 0x17af8975, 0x32c7911c, 0x89f89468,
+    0x0d01e980, 0x524755f4, 0x03b63cc9, 0x0cc844b2,
+    0xbcf3f0aa, 0x87ac36e9, 0xe53a7426, 0x01b3d82b,
+    0x1a9e7449, 0x64ee2d7e, 0xcddbb1da, 0x01c94910,
+    0xb868bf80, 0x0d26f3fd, 0x9342ede7, 0x04a5c284,
+    0x636737b6, 0x50f5b616, 0xf24766e3, 0x8eca36c1,
+    0x136e05db, 0xfef18391, 0xfb887a37, 0xd6e7f7d4,
+    0xc7fb7dc9, 0x3063fcdf, 0xb6f589de, 0xec2941da,
+    0x26e46695, 0xb7566419, 0xf654efc5, 0xd08d58b7,
+    0x48925401, 0xc1bacb7f, 0xe5ff550f, 0xb6083049,
+    0x5bb5d0e8, 0x87d72e5a, 0xab6a6ee1, 0x223a66ce,
+    0xc62bf3cd, 0x9e0885f9, 0x68cb3e47, 0x086c010f,
+    0xa21de820, 0xd18b69de, 0xf3f65777, 0xfa02c3f6,
+    0x407edac3, 0xcbb3d550, 0x1793084d, 0xb0d70eba,
+    0x0ab378d5, 0xd951fb0c, 0xded7da56, 0x4124bbe4,
+    0x94ca0b56, 0x0f5755d1, 0xe0e1e56e, 0x6184b5be,
+    0x580a249f, 0x94f74bc0, 0xe327888e, 0x9f7b5561,
+    0xc3dc0280, 0x05687715, 0x646c6bd7, 0x44904db3,
+    0x66b4f0a3, 0xc0f1648a, 0x697ed5af, 0x49e92ff6,
+    0x309e374f, 0x2cb6356a, 0x85808573, 0x4991f840,
+    0x76f0ae02, 0x083be84d, 0x28421c9a, 0x44489406,
+    0x736e4cb8, 0xc1092910, 0x8bc95fc6, 0x7d869cf4,
+    0x134f616f, 0x2e77118d, 0xb31b2be1, 0xaa90b472,
+    0x3ca5d717, 0x7d161bba, 0x9cad9010, 0xaf462ba2,
+    0x9fe459d2, 0x45d34559, 0xd9f2da13, 0xdbc65487,
+    0xf3e4f94e, 0x176d486f, 0x097c13ea, 0x631da5c7,
+    0x445f7382, 0x175683f4, 0xcdc66a97, 0x70be0288,
+    0xb3cdcf72, 0x6e5dd2f3, 0x20936079, 0x459b80a5,
+    0xbe60e2db, 0xa9c23101, 0xeba5315c, 0x224e42f2,
+    0x1c5c1572, 0xf6721b2c, 0x1ad2fff3, 0x8c25404e,
+    0x324ed72f, 0x4067b7fd, 0x0523138e, 0x5ca3bc78,
+    0xdc0fd66e, 0x75922283, 0x784d6b17, 0x58ebb16e,
+    0x44094f85, 0x3f481d87, 0xfcfeae7b, 0x77b5ff76,
+    0x8c2302bf, 0xaaf47556, 0x5f46b02a, 0x2b092801,
+    0x3d38f5f7, 0x0ca81f36, 0x52af4a8a, 0x66d5e7c0,
+    0xdf3b0874, 0x95055110, 0x1b5ad7a8, 0xf61ed5ad,
+    0x6cf6e479, 0x20758184, 0xd0cefa65, 0x88f7be58,
+    0x4a046826, 0x0ff6f8f3, 0xa09c7f70, 0x5346aba0,
+    0x5ce96c28, 0xe176eda3, 0x6bac307f, 0x376829d2,
+    0x85360fa9, 0x17e3fe2a, 0x24b79767, 0xf5a96b20,
+    0xd6cd2595, 0x68ff1ebf, 0x7555442c, 0xf19f06be,
+    0xf9e0659a, 0xeeb9491d, 0x34010718, 0xbb30cab8,
+    0xe822fe15, 0x88570983, 0x750e6249, 0xda627e55,
+    0x5e76ffa8, 0xb1534546, 0x6d47de08, 0xefe9e7d4,
+};
+
+const CAST_LONG CAST_S_table5[256] = {
+    0xf6fa8f9d, 0x2cac6ce1, 0x4ca34867, 0xe2337f7c,
+    0x95db08e7, 0x016843b4, 0xeced5cbc, 0x325553ac,
+    0xbf9f0960, 0xdfa1e2ed, 0x83f0579d, 0x63ed86b9,
+    0x1ab6a6b8, 0xde5ebe39, 0xf38ff732, 0x8989b138,
+    0x33f14961, 0xc01937bd, 0xf506c6da, 0xe4625e7e,
+    0xa308ea99, 0x4e23e33c, 0x79cbd7cc, 0x48a14367,
+    0xa3149619, 0xfec94bd5, 0xa114174a, 0xeaa01866,
+    0xa084db2d, 0x09a8486f, 0xa888614a, 0x2900af98,
+    0x01665991, 0xe1992863, 0xc8f30c60, 0x2e78ef3c,
+    0xd0d51932, 0xcf0fec14, 0xf7ca07d2, 0xd0a82072,
+    0xfd41197e, 0x9305a6b0, 0xe86be3da, 0x74bed3cd,
+    0x372da53c, 0x4c7f4448, 0xdab5d440, 0x6dba0ec3,
+    0x083919a7, 0x9fbaeed9, 0x49dbcfb0, 0x4e670c53,
+    0x5c3d9c01, 0x64bdb941, 0x2c0e636a, 0xba7dd9cd,
+    0xea6f7388, 0xe70bc762, 0x35f29adb, 0x5c4cdd8d,
+    0xf0d48d8c, 0xb88153e2, 0x08a19866, 0x1ae2eac8,
+    0x284caf89, 0xaa928223, 0x9334be53, 0x3b3a21bf,
+    0x16434be3, 0x9aea3906, 0xefe8c36e, 0xf890cdd9,
+    0x80226dae, 0xc340a4a3, 0xdf7e9c09, 0xa694a807,
+    0x5b7c5ecc, 0x221db3a6, 0x9a69a02f, 0x68818a54,
+    0xceb2296f, 0x53c0843a, 0xfe893655, 0x25bfe68a,
+    0xb4628abc, 0xcf222ebf, 0x25ac6f48, 0xa9a99387,
+    0x53bddb65, 0xe76ffbe7, 0xe967fd78, 0x0ba93563,
+    0x8e342bc1, 0xe8a11be9, 0x4980740d, 0xc8087dfc,
+    0x8de4bf99, 0xa11101a0, 0x7fd37975, 0xda5a26c0,
+    0xe81f994f, 0x9528cd89, 0xfd339fed, 0xb87834bf,
+    0x5f04456d, 0x22258698, 0xc9c4c83b, 0x2dc156be,
+    0x4f628daa, 0x57f55ec5, 0xe2220abe, 0xd2916ebf,
+    0x4ec75b95, 0x24f2c3c0, 0x42d15d99, 0xcd0d7fa0,
+    0x7b6e27ff, 0xa8dc8af0, 0x7345c106, 0xf41e232f,
+    0x35162386, 0xe6ea8926, 0x3333b094, 0x157ec6f2,
+    0x372b74af, 0x692573e4, 0xe9a9d848, 0xf3160289,
+    0x3a62ef1d, 0xa787e238, 0xf3a5f676, 0x74364853,
+    0x20951063, 0x4576698d, 0xb6fad407, 0x592af950,
+    0x36f73523, 0x4cfb6e87, 0x7da4cec0, 0x6c152daa,
+    0xcb0396a8, 0xc50dfe5d, 0xfcd707ab, 0x0921c42f,
+    0x89dff0bb, 0x5fe2be78, 0x448f4f33, 0x754613c9,
+    0x2b05d08d, 0x48b9d585, 0xdc049441, 0xc8098f9b,
+    0x7dede786, 0xc39a3373, 0x42410005, 0x6a091751,
+    0x0ef3c8a6, 0x890072d6, 0x28207682, 0xa9a9f7be,
+    0xbf32679d, 0xd45b5b75, 0xb353fd00, 0xcbb0e358,
+    0x830f220a, 0x1f8fb214, 0xd372cf08, 0xcc3c4a13,
+    0x8cf63166, 0x061c87be, 0x88c98f88, 0x6062e397,
+    0x47cf8e7a, 0xb6c85283, 0x3cc2acfb, 0x3fc06976,
+    0x4e8f0252, 0x64d8314d, 0xda3870e3, 0x1e665459,
+    0xc10908f0, 0x513021a5, 0x6c5b68b7, 0x822f8aa0,
+    0x3007cd3e, 0x74719eef, 0xdc872681, 0x073340d4,
+    0x7e432fd9, 0x0c5ec241, 0x8809286c, 0xf592d891,
+    0x08a930f6, 0x957ef305, 0xb7fbffbd, 0xc266e96f,
+    0x6fe4ac98, 0xb173ecc0, 0xbc60b42a, 0x953498da,
+    0xfba1ae12, 0x2d4bd736, 0x0f25faab, 0xa4f3fceb,
+    0xe2969123, 0x257f0c3d, 0x9348af49, 0x361400bc,
+    0xe8816f4a, 0x3814f200, 0xa3f94043, 0x9c7a54c2,
+    0xbc704f57, 0xda41e7f9, 0xc25ad33a, 0x54f4a084,
+    0xb17f5505, 0x59357cbe, 0xedbd15c8, 0x7f97c5ab,
+    0xba5ac7b5, 0xb6f6deaf, 0x3a479c3a, 0x5302da25,
+    0x653d7e6a, 0x54268d49, 0x51a477ea, 0x5017d55b,
+    0xd7d25d88, 0x44136c76, 0x0404a8c8, 0xb8e5a121,
+    0xb81a928a, 0x60ed5869, 0x97c55b96, 0xeaec991b,
+    0x29935913, 0x01fdb7f1, 0x088e8dfa, 0x9ab6f6f5,
+    0x3b4cbf9f, 0x4a5de3ab, 0xe6051d35, 0xa0e1d855,
+    0xd36b4cf1, 0xf544edeb, 0xb0e93524, 0xbebb8fbd,
+    0xa2d762cf, 0x49c92f54, 0x38b5f331, 0x7128a454,
+    0x48392905, 0xa65b1db8, 0x851c97bd, 0xd675cf2f,
+};
+
+const CAST_LONG CAST_S_table6[256] = {
+    0x85e04019, 0x332bf567, 0x662dbfff, 0xcfc65693,
+    0x2a8d7f6f, 0xab9bc912, 0xde6008a1, 0x2028da1f,
+    0x0227bce7, 0x4d642916, 0x18fac300, 0x50f18b82,
+    0x2cb2cb11, 0xb232e75c, 0x4b3695f2, 0xb28707de,
+    0xa05fbcf6, 0xcd4181e9, 0xe150210c, 0xe24ef1bd,
+    0xb168c381, 0xfde4e789, 0x5c79b0d8, 0x1e8bfd43,
+    0x4d495001, 0x38be4341, 0x913cee1d, 0x92a79c3f,
+    0x089766be, 0xbaeeadf4, 0x1286becf, 0xb6eacb19,
+    0x2660c200, 0x7565bde4, 0x64241f7a, 0x8248dca9,
+    0xc3b3ad66, 0x28136086, 0x0bd8dfa8, 0x356d1cf2,
+    0x107789be, 0xb3b2e9ce, 0x0502aa8f, 0x0bc0351e,
+    0x166bf52a, 0xeb12ff82, 0xe3486911, 0xd34d7516,
+    0x4e7b3aff, 0x5f43671b, 0x9cf6e037, 0x4981ac83,
+    0x334266ce, 0x8c9341b7, 0xd0d854c0, 0xcb3a6c88,
+    0x47bc2829, 0x4725ba37, 0xa66ad22b, 0x7ad61f1e,
+    0x0c5cbafa, 0x4437f107, 0xb6e79962, 0x42d2d816,
+    0x0a961288, 0xe1a5c06e, 0x13749e67, 0x72fc081a,
+    0xb1d139f7, 0xf9583745, 0xcf19df58, 0xbec3f756,
+    0xc06eba30, 0x07211b24, 0x45c28829, 0xc95e317f,
+    0xbc8ec511, 0x38bc46e9, 0xc6e6fa14, 0xbae8584a,
+    0xad4ebc46, 0x468f508b, 0x7829435f, 0xf124183b,
+    0x821dba9f, 0xaff60ff4, 0xea2c4e6d, 0x16e39264,
+    0x92544a8b, 0x009b4fc3, 0xaba68ced, 0x9ac96f78,
+    0x06a5b79a, 0xb2856e6e, 0x1aec3ca9, 0xbe838688,
+    0x0e0804e9, 0x55f1be56, 0xe7e5363b, 0xb3a1f25d,
+    0xf7debb85, 0x61fe033c, 0x16746233, 0x3c034c28,
+    0xda6d0c74, 0x79aac56c, 0x3ce4e1ad, 0x51f0c802,
+    0x98f8f35a, 0x1626a49f, 0xeed82b29, 0x1d382fe3,
+    0x0c4fb99a, 0xbb325778, 0x3ec6d97b, 0x6e77a6a9,
+    0xcb658b5c, 0xd45230c7, 0x2bd1408b, 0x60c03eb7,
+    0xb9068d78, 0xa33754f4, 0xf430c87d, 0xc8a71302,
+    0xb96d8c32, 0xebd4e7be, 0xbe8b9d2d, 0x7979fb06,
+    0xe7225308, 0x8b75cf77, 0x11ef8da4, 0xe083c858,
+    0x8d6b786f, 0x5a6317a6, 0xfa5cf7a0, 0x5dda0033,
+    0xf28ebfb0, 0xf5b9c310, 0xa0eac280, 0x08b9767a,
+    0xa3d9d2b0, 0x79d34217, 0x021a718d, 0x9ac6336a,
+    0x2711fd60, 0x438050e3, 0x069908a8, 0x3d7fedc4,
+    0x826d2bef, 0x4eeb8476, 0x488dcf25, 0x36c9d566,
+    0x28e74e41, 0xc2610aca, 0x3d49a9cf, 0xbae3b9df,
+    0xb65f8de6, 0x92aeaf64, 0x3ac7d5e6, 0x9ea80509,
+    0xf22b017d, 0xa4173f70, 0xdd1e16c3, 0x15e0d7f9,
+    0x50b1b887, 0x2b9f4fd5, 0x625aba82, 0x6a017962,
+    0x2ec01b9c, 0x15488aa9, 0xd716e740, 0x40055a2c,
+    0x93d29a22, 0xe32dbf9a, 0x058745b9, 0x3453dc1e,
+    0xd699296e, 0x496cff6f, 0x1c9f4986, 0xdfe2ed07,
+    0xb87242d1, 0x19de7eae, 0x053e561a, 0x15ad6f8c,
+    0x66626c1c, 0x7154c24c, 0xea082b2a, 0x93eb2939,
+    0x17dcb0f0, 0x58d4f2ae, 0x9ea294fb, 0x52cf564c,
+    0x9883fe66, 0x2ec40581, 0x763953c3, 0x01d6692e,
+    0xd3a0c108, 0xa1e7160e, 0xe4f2dfa6, 0x693ed285,
+    0x74904698, 0x4c2b0edd, 0x4f757656, 0x5d393378,
+    0xa132234f, 0x3d321c5d, 0xc3f5e194, 0x4b269301,
+    0xc79f022f, 0x3c997e7e, 0x5e4f9504, 0x3ffafbbd,
+    0x76f7ad0e, 0x296693f4, 0x3d1fce6f, 0xc61e45be,
+    0xd3b5ab34, 0xf72bf9b7, 0x1b0434c0, 0x4e72b567,
+    0x5592a33d, 0xb5229301, 0xcfd2a87f, 0x60aeb767,
+    0x1814386b, 0x30bcc33d, 0x38a0c07d, 0xfd1606f2,
+    0xc363519b, 0x589dd390, 0x5479f8e6, 0x1cb8d647,
+    0x97fd61a9, 0xea7759f4, 0x2d57539d, 0x569a58cf,
+    0xe84e63ad, 0x462e1b78, 0x6580f87e, 0xf3817914,
+    0x91da55f4, 0x40a230f3, 0xd1988f35, 0xb6e318d2,
+    0x3ffa50bc, 0x3d40f021, 0xc3c0bdae, 0x4958c24c,
+    0x518f36b2, 0x84b1d370, 0x0fedce83, 0x878ddada,
+    0xf2a279c7, 0x94e01be8, 0x90716f4b, 0x954b8aa3,
+};
+
+const CAST_LONG CAST_S_table7[256] = {
+    0xe216300d, 0xbbddfffc, 0xa7ebdabd, 0x35648095,
+    0x7789f8b7, 0xe6c1121b, 0x0e241600, 0x052ce8b5,
+    0x11a9cfb0, 0xe5952f11, 0xece7990a, 0x9386d174,
+    0x2a42931c, 0x76e38111, 0xb12def3a, 0x37ddddfc,
+    0xde9adeb1, 0x0a0cc32c, 0xbe197029, 0x84a00940,
+    0xbb243a0f, 0xb4d137cf, 0xb44e79f0, 0x049eedfd,
+    0x0b15a15d, 0x480d3168, 0x8bbbde5a, 0x669ded42,
+    0xc7ece831, 0x3f8f95e7, 0x72df191b, 0x7580330d,
+    0x94074251, 0x5c7dcdfa, 0xabbe6d63, 0xaa402164,
+    0xb301d40a, 0x02e7d1ca, 0x53571dae, 0x7a3182a2,
+    0x12a8ddec, 0xfdaa335d, 0x176f43e8, 0x71fb46d4,
+    0x38129022, 0xce949ad4, 0xb84769ad, 0x965bd862,
+    0x82f3d055, 0x66fb9767, 0x15b80b4e, 0x1d5b47a0,
+    0x4cfde06f, 0xc28ec4b8, 0x57e8726e, 0x647a78fc,
+    0x99865d44, 0x608bd593, 0x6c200e03, 0x39dc5ff6,
+    0x5d0b00a3, 0xae63aff2, 0x7e8bd632, 0x70108c0c,
+    0xbbd35049, 0x2998df04, 0x980cf42a, 0x9b6df491,
+    0x9e7edd53, 0x06918548, 0x58cb7e07, 0x3b74ef2e,
+    0x522fffb1, 0xd24708cc, 0x1c7e27cd, 0xa4eb215b,
+    0x3cf1d2e2, 0x19b47a38, 0x424f7618, 0x35856039,
+    0x9d17dee7, 0x27eb35e6, 0xc9aff67b, 0x36baf5b8,
+    0x09c467cd, 0xc18910b1, 0xe11dbf7b, 0x06cd1af8,
+    0x7170c608, 0x2d5e3354, 0xd4de495a, 0x64c6d006,
+    0xbcc0c62c, 0x3dd00db3, 0x708f8f34, 0x77d51b42,
+    0x264f620f, 0x24b8d2bf, 0x15c1b79e, 0x46a52564,
+    0xf8d7e54e, 0x3e378160, 0x7895cda5, 0x859c15a5,
+    0xe6459788, 0xc37bc75f, 0xdb07ba0c, 0x0676a3ab,
+    0x7f229b1e, 0x31842e7b, 0x24259fd7, 0xf8bef472,
+    0x835ffcb8, 0x6df4c1f2, 0x96f5b195, 0xfd0af0fc,
+    0xb0fe134c, 0xe2506d3d, 0x4f9b12ea, 0xf215f225,
+    0xa223736f, 0x9fb4c428, 0x25d04979, 0x34c713f8,
+    0xc4618187, 0xea7a6e98, 0x7cd16efc, 0x1436876c,
+    0xf1544107, 0xbedeee14, 0x56e9af27, 0xa04aa441,
+    0x3cf7c899, 0x92ecbae6, 0xdd67016d, 0x151682eb,
+    0xa842eedf, 0xfdba60b4, 0xf1907b75, 0x20e3030f,
+    0x24d8c29e, 0xe139673b, 0xefa63fb8, 0x71873054,
+    0xb6f2cf3b, 0x9f326442, 0xcb15a4cc, 0xb01a4504,
+    0xf1e47d8d, 0x844a1be5, 0xbae7dfdc, 0x42cbda70,
+    0xcd7dae0a, 0x57e85b7a, 0xd53f5af6, 0x20cf4d8c,
+    0xcea4d428, 0x79d130a4, 0x3486ebfb, 0x33d3cddc,
+    0x77853b53, 0x37effcb5, 0xc5068778, 0xe580b3e6,
+    0x4e68b8f4, 0xc5c8b37e, 0x0d809ea2, 0x398feb7c,
+    0x132a4f94, 0x43b7950e, 0x2fee7d1c, 0x223613bd,
+    0xdd06caa2, 0x37df932b, 0xc4248289, 0xacf3ebc3,
+    0x5715f6b7, 0xef3478dd, 0xf267616f, 0xc148cbe4,
+    0x9052815e, 0x5e410fab, 0xb48a2465, 0x2eda7fa4,
+    0xe87b40e4, 0xe98ea084, 0x5889e9e1, 0xefd390fc,
+    0xdd07d35b, 0xdb485694, 0x38d7e5b2, 0x57720101,
+    0x730edebc, 0x5b643113, 0x94917e4f, 0x503c2fba,
+    0x646f1282, 0x7523d24a, 0xe0779695, 0xf9c17a8f,
+    0x7a5b2121, 0xd187b896, 0x29263a4d, 0xba510cdf,
+    0x81f47c9f, 0xad1163ed, 0xea7b5965, 0x1a00726e,
+    0x11403092, 0x00da6d77, 0x4a0cdd61, 0xad1f4603,
+    0x605bdfb0, 0x9eedc364, 0x22ebe6a8, 0xcee7d28a,
+    0xa0e736a0, 0x5564a6b9, 0x10853209, 0xc7eb8f37,
+    0x2de705ca, 0x8951570f, 0xdf09822b, 0xbd691a6c,
+    0xaa12e4f2, 0x87451c0f, 0xe0f6a27a, 0x3ada4819,
+    0x4cf1764f, 0x0d771c2b, 0x67cdb156, 0x350d8384,
+    0x5938fa0f, 0x42399ef3, 0x36997b07, 0x0e84093d,
+    0x4aa93e61, 0x8360d87b, 0x1fa98b0c, 0x1149382c,
+    0xe97625a5, 0x0614d1b7, 0x0e25244b, 0x0c768347,
+    0x589e8d82, 0x0d2059d1, 0xa466bb1e, 0xf8da0a82,
+    0x04f19130, 0xba6e4ec0, 0x99265164, 0x1ee7230d,
+    0x50b2ad80, 0xeaee6801, 0x8db2a283, 0xea8bf59e,
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-armv4.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-armv4.pl
new file mode 100755
index 000000000..d3fadcc63
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-armv4.pl
@@ -0,0 +1,1160 @@
+#! /usr/bin/env perl
+# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# December 2014
+#
+# ChaCha20 for ARMv4.
+#
+# Performance in cycles per byte out of large buffer.
+#
+#			IALU/gcc-4.4    1xNEON      3xNEON+1xIALU
+#
+# Cortex-A5		19.3(*)/+95%    21.8        14.1
+# Cortex-A8		10.5(*)/+160%   13.9        6.35
+# Cortex-A9		12.9(**)/+110%  14.3        6.50
+# Cortex-A15		11.0/+40%       16.0        5.00
+# Snapdragon S4		11.5/+125%      13.6        4.90
+#
+# (*)	most "favourable" result for aligned data on little-endian
+#	processor, result for misaligned data is 10-15% lower;
+# (**)	this result is a trade-off: it can be improved by 20%,
+#	but then Snapdragon S4 and Cortex-A8 results get
+#	20-25% worse;
+
+$flavour = shift;
+if ($flavour=~/\w[\w\-]*\.\w+$/) { $output=$flavour; undef $flavour; }
+else { while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {} }
+
+if ($flavour && $flavour ne "void") {
+    $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+    ( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+    ( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+    die "can't locate arm-xlate.pl";
+
+    open STDOUT,"| \"$^X\" $xlate $flavour $output";
+} else {
+    open STDOUT,">$output";
+}
+
+sub AUTOLOAD()		# thunk [simplified] x86-style perlasm
+{ my $opcode = $AUTOLOAD; $opcode =~ s/.*:://; $opcode =~ s/_/\./;
+  my $arg = pop;
+    $arg = "#$arg" if ($arg*1 eq $arg);
+    $code .= "\t$opcode\t".join(',',@_,$arg)."\n";
+}
+
+my @x=map("r$_",(0..7,"x","x","x","x",12,"x",14,"x"));
+my @t=map("r$_",(8..11));
+
+sub ROUND {
+my ($a0,$b0,$c0,$d0)=@_;
+my ($a1,$b1,$c1,$d1)=map(($_&~3)+(($_+1)&3),($a0,$b0,$c0,$d0));
+my ($a2,$b2,$c2,$d2)=map(($_&~3)+(($_+1)&3),($a1,$b1,$c1,$d1));
+my ($a3,$b3,$c3,$d3)=map(($_&~3)+(($_+1)&3),($a2,$b2,$c2,$d2));
+my $odd = $d0&1;
+my ($xc,$xc_) = (@t[0..1]);
+my ($xd,$xd_) = $odd ? (@t[2],@x[$d1]) : (@x[$d0],@t[2]);
+my @ret;
+
+	# Consider order in which variables are addressed by their
+	# index:
+	#
+	#       a   b   c   d
+	#
+	#       0   4   8  12 < even round
+	#       1   5   9  13
+	#       2   6  10  14
+	#       3   7  11  15
+	#       0   5  10  15 < odd round
+	#       1   6  11  12
+	#       2   7   8  13
+	#       3   4   9  14
+	#
+	# 'a', 'b' are permanently allocated in registers, @x[0..7],
+	# while 'c's and pair of 'd's are maintained in memory. If
+	# you observe 'c' column, you'll notice that pair of 'c's is
+	# invariant between rounds. This means that we have to reload
+	# them once per round, in the middle. This is why you'll see
+	# bunch of 'c' stores and loads in the middle, but none in
+	# the beginning or end. If you observe 'd' column, you'll
+	# notice that 15 and 13 are reused in next pair of rounds.
+	# This is why these two are chosen for offloading to memory,
+	# to make loads count more.
+							push @ret,(
+	"&add	(@x[$a0],@x[$a0],@x[$b0])",
+	"&mov	($xd,$xd,'ror#16')",
+	 "&add	(@x[$a1],@x[$a1],@x[$b1])",
+	 "&mov	($xd_,$xd_,'ror#16')",
+	"&eor	($xd,$xd,@x[$a0],'ror#16')",
+	 "&eor	($xd_,$xd_,@x[$a1],'ror#16')",
+
+	"&add	($xc,$xc,$xd)",
+	"&mov	(@x[$b0],@x[$b0],'ror#20')",
+	 "&add	($xc_,$xc_,$xd_)",
+	 "&mov	(@x[$b1],@x[$b1],'ror#20')",
+	"&eor	(@x[$b0],@x[$b0],$xc,'ror#20')",
+	 "&eor	(@x[$b1],@x[$b1],$xc_,'ror#20')",
+
+	"&add	(@x[$a0],@x[$a0],@x[$b0])",
+	"&mov	($xd,$xd,'ror#24')",
+	 "&add	(@x[$a1],@x[$a1],@x[$b1])",
+	 "&mov	($xd_,$xd_,'ror#24')",
+	"&eor	($xd,$xd,@x[$a0],'ror#24')",
+	 "&eor	($xd_,$xd_,@x[$a1],'ror#24')",
+
+	"&add	($xc,$xc,$xd)",
+	"&mov	(@x[$b0],@x[$b0],'ror#25')"		);
+							push @ret,(
+	"&str	($xd,'[sp,#4*(16+$d0)]')",
+	"&ldr	($xd,'[sp,#4*(16+$d2)]')"		) if ($odd);
+							push @ret,(
+	 "&add	($xc_,$xc_,$xd_)",
+	 "&mov	(@x[$b1],@x[$b1],'ror#25')"		);
+							push @ret,(
+	 "&str	($xd_,'[sp,#4*(16+$d1)]')",
+	 "&ldr	($xd_,'[sp,#4*(16+$d3)]')"		) if (!$odd);
+							push @ret,(
+	"&eor	(@x[$b0],@x[$b0],$xc,'ror#25')",
+	 "&eor	(@x[$b1],@x[$b1],$xc_,'ror#25')"	);
+
+	$xd=@x[$d2]					if (!$odd);
+	$xd_=@x[$d3]					if ($odd);
+							push @ret,(
+	"&str	($xc,'[sp,#4*(16+$c0)]')",
+	"&ldr	($xc,'[sp,#4*(16+$c2)]')",
+	"&add	(@x[$a2],@x[$a2],@x[$b2])",
+	"&mov	($xd,$xd,'ror#16')",
+	 "&str	($xc_,'[sp,#4*(16+$c1)]')",
+	 "&ldr	($xc_,'[sp,#4*(16+$c3)]')",
+	 "&add	(@x[$a3],@x[$a3],@x[$b3])",
+	 "&mov	($xd_,$xd_,'ror#16')",
+	"&eor	($xd,$xd,@x[$a2],'ror#16')",
+	 "&eor	($xd_,$xd_,@x[$a3],'ror#16')",
+
+	"&add	($xc,$xc,$xd)",
+	"&mov	(@x[$b2],@x[$b2],'ror#20')",
+	 "&add	($xc_,$xc_,$xd_)",
+	 "&mov	(@x[$b3],@x[$b3],'ror#20')",
+	"&eor	(@x[$b2],@x[$b2],$xc,'ror#20')",
+	 "&eor	(@x[$b3],@x[$b3],$xc_,'ror#20')",
+
+	"&add	(@x[$a2],@x[$a2],@x[$b2])",
+	"&mov	($xd,$xd,'ror#24')",
+	 "&add	(@x[$a3],@x[$a3],@x[$b3])",
+	 "&mov	($xd_,$xd_,'ror#24')",
+	"&eor	($xd,$xd,@x[$a2],'ror#24')",
+	 "&eor	($xd_,$xd_,@x[$a3],'ror#24')",
+
+	"&add	($xc,$xc,$xd)",
+	"&mov	(@x[$b2],@x[$b2],'ror#25')",
+	 "&add	($xc_,$xc_,$xd_)",
+	 "&mov	(@x[$b3],@x[$b3],'ror#25')",
+	"&eor	(@x[$b2],@x[$b2],$xc,'ror#25')",
+	 "&eor	(@x[$b3],@x[$b3],$xc_,'ror#25')"	);
+
+	@ret;
+}
+
+$code.=<<___;
+#include "arm_arch.h"
+
+.text
+#if defined(__thumb2__) || defined(__clang__)
+.syntax	unified
+#endif
+#if defined(__thumb2__)
+.thumb
+#else
+.code	32
+#endif
+
+#if defined(__thumb2__) || defined(__clang__)
+#define ldrhsb	ldrbhs
+#endif
+
+.align	5
+.Lsigma:
+.long	0x61707865,0x3320646e,0x79622d32,0x6b206574	@ endian-neutral
+.Lone:
+.long	1,0,0,0
+#if __ARM_MAX_ARCH__>=7
+.LOPENSSL_armcap:
+.word   OPENSSL_armcap_P-.LChaCha20_ctr32
+#else
+.word	-1
+#endif
+
+.globl	ChaCha20_ctr32
+.type	ChaCha20_ctr32,%function
+.align	5
+ChaCha20_ctr32:
+.LChaCha20_ctr32:
+	ldr	r12,[sp,#0]		@ pull pointer to counter and nonce
+	stmdb	sp!,{r0-r2,r4-r11,lr}
+#if __ARM_ARCH__<7 && !defined(__thumb2__)
+	sub	r14,pc,#16		@ ChaCha20_ctr32
+#else
+	adr	r14,.LChaCha20_ctr32
+#endif
+	cmp	r2,#0			@ len==0?
+#ifdef	__thumb2__
+	itt	eq
+#endif
+	addeq	sp,sp,#4*3
+	beq	.Lno_data
+#if __ARM_MAX_ARCH__>=7
+	cmp	r2,#192			@ test len
+	bls	.Lshort
+	ldr	r4,[r14,#-32]
+	ldr	r4,[r14,r4]
+# ifdef	__APPLE__
+	ldr	r4,[r4]
+# endif
+	tst	r4,#ARMV7_NEON
+	bne	.LChaCha20_neon
+.Lshort:
+#endif
+	ldmia	r12,{r4-r7}		@ load counter and nonce
+	sub	sp,sp,#4*(16)		@ off-load area
+	sub	r14,r14,#64		@ .Lsigma
+	stmdb	sp!,{r4-r7}		@ copy counter and nonce
+	ldmia	r3,{r4-r11}		@ load key
+	ldmia	r14,{r0-r3}		@ load sigma
+	stmdb	sp!,{r4-r11}		@ copy key
+	stmdb	sp!,{r0-r3}		@ copy sigma
+	str	r10,[sp,#4*(16+10)]	@ off-load "@x[10]"
+	str	r11,[sp,#4*(16+11)]	@ off-load "@x[11]"
+	b	.Loop_outer_enter
+
+.align	4
+.Loop_outer:
+	ldmia	sp,{r0-r9}		@ load key material
+	str	@t[3],[sp,#4*(32+2)]	@ save len
+	str	r12,  [sp,#4*(32+1)]	@ save inp
+	str	r14,  [sp,#4*(32+0)]	@ save out
+.Loop_outer_enter:
+	ldr	@t[3], [sp,#4*(15)]
+	ldr	@x[12],[sp,#4*(12)]	@ modulo-scheduled load
+	ldr	@t[2], [sp,#4*(13)]
+	ldr	@x[14],[sp,#4*(14)]
+	str	@t[3], [sp,#4*(16+15)]
+	mov	@t[3],#10
+	b	.Loop
+
+.align	4
+.Loop:
+	subs	@t[3],@t[3],#1
+___
+	foreach (&ROUND(0, 4, 8,12)) { eval; }
+	foreach (&ROUND(0, 5,10,15)) { eval; }
+$code.=<<___;
+	bne	.Loop
+
+	ldr	@t[3],[sp,#4*(32+2)]	@ load len
+
+	str	@t[0], [sp,#4*(16+8)]	@ modulo-scheduled store
+	str	@t[1], [sp,#4*(16+9)]
+	str	@x[12],[sp,#4*(16+12)]
+	str	@t[2], [sp,#4*(16+13)]
+	str	@x[14],[sp,#4*(16+14)]
+
+	@ at this point we have first half of 512-bit result in
+	@ @x[0-7] and second half at sp+4*(16+8)
+
+	cmp	@t[3],#64		@ done yet?
+#ifdef	__thumb2__
+	itete	lo
+#endif
+	addlo	r12,sp,#4*(0)		@ shortcut or ...
+	ldrhs	r12,[sp,#4*(32+1)]	@ ... load inp
+	addlo	r14,sp,#4*(0)		@ shortcut or ...
+	ldrhs	r14,[sp,#4*(32+0)]	@ ... load out
+
+	ldr	@t[0],[sp,#4*(0)]	@ load key material
+	ldr	@t[1],[sp,#4*(1)]
+
+#if __ARM_ARCH__>=6 || !defined(__ARMEB__)
+# if __ARM_ARCH__<7
+	orr	@t[2],r12,r14
+	tst	@t[2],#3		@ are input and output aligned?
+	ldr	@t[2],[sp,#4*(2)]
+	bne	.Lunaligned
+	cmp	@t[3],#64		@ restore flags
+# else
+	ldr	@t[2],[sp,#4*(2)]
+# endif
+	ldr	@t[3],[sp,#4*(3)]
+
+	add	@x[0],@x[0],@t[0]	@ accumulate key material
+	add	@x[1],@x[1],@t[1]
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	ldrhs	@t[0],[r12],#16		@ load input
+	ldrhs	@t[1],[r12,#-12]
+
+	add	@x[2],@x[2],@t[2]
+	add	@x[3],@x[3],@t[3]
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	ldrhs	@t[2],[r12,#-8]
+	ldrhs	@t[3],[r12,#-4]
+# if __ARM_ARCH__>=6 && defined(__ARMEB__)
+	rev	@x[0],@x[0]
+	rev	@x[1],@x[1]
+	rev	@x[2],@x[2]
+	rev	@x[3],@x[3]
+# endif
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	eorhs	@x[0],@x[0],@t[0]	@ xor with input
+	eorhs	@x[1],@x[1],@t[1]
+	 add	@t[0],sp,#4*(4)
+	str	@x[0],[r14],#16		@ store output
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	eorhs	@x[2],@x[2],@t[2]
+	eorhs	@x[3],@x[3],@t[3]
+	 ldmia	@t[0],{@t[0]-@t[3]}	@ load key material
+	str	@x[1],[r14,#-12]
+	str	@x[2],[r14,#-8]
+	str	@x[3],[r14,#-4]
+
+	add	@x[4],@x[4],@t[0]	@ accumulate key material
+	add	@x[5],@x[5],@t[1]
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	ldrhs	@t[0],[r12],#16		@ load input
+	ldrhs	@t[1],[r12,#-12]
+	add	@x[6],@x[6],@t[2]
+	add	@x[7],@x[7],@t[3]
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	ldrhs	@t[2],[r12,#-8]
+	ldrhs	@t[3],[r12,#-4]
+# if __ARM_ARCH__>=6 && defined(__ARMEB__)
+	rev	@x[4],@x[4]
+	rev	@x[5],@x[5]
+	rev	@x[6],@x[6]
+	rev	@x[7],@x[7]
+# endif
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	eorhs	@x[4],@x[4],@t[0]
+	eorhs	@x[5],@x[5],@t[1]
+	 add	@t[0],sp,#4*(8)
+	str	@x[4],[r14],#16		@ store output
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	eorhs	@x[6],@x[6],@t[2]
+	eorhs	@x[7],@x[7],@t[3]
+	str	@x[5],[r14,#-12]
+	 ldmia	@t[0],{@t[0]-@t[3]}	@ load key material
+	str	@x[6],[r14,#-8]
+	 add	@x[0],sp,#4*(16+8)
+	str	@x[7],[r14,#-4]
+
+	ldmia	@x[0],{@x[0]-@x[7]}	@ load second half
+
+	add	@x[0],@x[0],@t[0]	@ accumulate key material
+	add	@x[1],@x[1],@t[1]
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	ldrhs	@t[0],[r12],#16		@ load input
+	ldrhs	@t[1],[r12,#-12]
+# ifdef	__thumb2__
+	itt	hi
+# endif
+	 strhi	@t[2],[sp,#4*(16+10)]	@ copy "@x[10]" while at it
+	 strhi	@t[3],[sp,#4*(16+11)]	@ copy "@x[11]" while at it
+	add	@x[2],@x[2],@t[2]
+	add	@x[3],@x[3],@t[3]
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	ldrhs	@t[2],[r12,#-8]
+	ldrhs	@t[3],[r12,#-4]
+# if __ARM_ARCH__>=6 && defined(__ARMEB__)
+	rev	@x[0],@x[0]
+	rev	@x[1],@x[1]
+	rev	@x[2],@x[2]
+	rev	@x[3],@x[3]
+# endif
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	eorhs	@x[0],@x[0],@t[0]
+	eorhs	@x[1],@x[1],@t[1]
+	 add	@t[0],sp,#4*(12)
+	str	@x[0],[r14],#16		@ store output
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	eorhs	@x[2],@x[2],@t[2]
+	eorhs	@x[3],@x[3],@t[3]
+	str	@x[1],[r14,#-12]
+	 ldmia	@t[0],{@t[0]-@t[3]}	@ load key material
+	str	@x[2],[r14,#-8]
+	str	@x[3],[r14,#-4]
+
+	add	@x[4],@x[4],@t[0]	@ accumulate key material
+	add	@x[5],@x[5],@t[1]
+# ifdef	__thumb2__
+	itt	hi
+# endif
+	 addhi	@t[0],@t[0],#1		@ next counter value
+	 strhi	@t[0],[sp,#4*(12)]	@ save next counter value
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	ldrhs	@t[0],[r12],#16		@ load input
+	ldrhs	@t[1],[r12,#-12]
+	add	@x[6],@x[6],@t[2]
+	add	@x[7],@x[7],@t[3]
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	ldrhs	@t[2],[r12,#-8]
+	ldrhs	@t[3],[r12,#-4]
+# if __ARM_ARCH__>=6 && defined(__ARMEB__)
+	rev	@x[4],@x[4]
+	rev	@x[5],@x[5]
+	rev	@x[6],@x[6]
+	rev	@x[7],@x[7]
+# endif
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	eorhs	@x[4],@x[4],@t[0]
+	eorhs	@x[5],@x[5],@t[1]
+# ifdef	__thumb2__
+	 it	ne
+# endif
+	 ldrne	@t[0],[sp,#4*(32+2)]	@ re-load len
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	eorhs	@x[6],@x[6],@t[2]
+	eorhs	@x[7],@x[7],@t[3]
+	str	@x[4],[r14],#16		@ store output
+	str	@x[5],[r14,#-12]
+# ifdef	__thumb2__
+	it	hs
+# endif
+	 subhs	@t[3],@t[0],#64		@ len-=64
+	str	@x[6],[r14,#-8]
+	str	@x[7],[r14,#-4]
+	bhi	.Loop_outer
+
+	beq	.Ldone
+# if __ARM_ARCH__<7
+	b	.Ltail
+
+.align	4
+.Lunaligned:				@ unaligned endian-neutral path
+	cmp	@t[3],#64		@ restore flags
+# endif
+#endif
+#if __ARM_ARCH__<7
+	ldr	@t[3],[sp,#4*(3)]
+___
+for ($i=0;$i<16;$i+=4) {
+my $j=$i&0x7;
+
+$code.=<<___	if ($i==4);
+	add	@x[0],sp,#4*(16+8)
+___
+$code.=<<___	if ($i==8);
+	ldmia	@x[0],{@x[0]-@x[7]}		@ load second half
+# ifdef	__thumb2__
+	itt	hi
+# endif
+	strhi	@t[2],[sp,#4*(16+10)]		@ copy "@x[10]"
+	strhi	@t[3],[sp,#4*(16+11)]		@ copy "@x[11]"
+___
+$code.=<<___;
+	add	@x[$j+0],@x[$j+0],@t[0]		@ accumulate key material
+___
+$code.=<<___	if ($i==12);
+# ifdef	__thumb2__
+	itt	hi
+# endif
+	addhi	@t[0],@t[0],#1			@ next counter value
+	strhi	@t[0],[sp,#4*(12)]		@ save next counter value
+___
+$code.=<<___;
+	add	@x[$j+1],@x[$j+1],@t[1]
+	add	@x[$j+2],@x[$j+2],@t[2]
+# ifdef	__thumb2__
+	itete	lo
+# endif
+	eorlo	@t[0],@t[0],@t[0]		@ zero or ...
+	ldrhsb	@t[0],[r12],#16			@ ... load input
+	eorlo	@t[1],@t[1],@t[1]
+	ldrhsb	@t[1],[r12,#-12]
+
+	add	@x[$j+3],@x[$j+3],@t[3]
+# ifdef	__thumb2__
+	itete	lo
+# endif
+	eorlo	@t[2],@t[2],@t[2]
+	ldrhsb	@t[2],[r12,#-8]
+	eorlo	@t[3],@t[3],@t[3]
+	ldrhsb	@t[3],[r12,#-4]
+
+	eor	@x[$j+0],@t[0],@x[$j+0]		@ xor with input (or zero)
+	eor	@x[$j+1],@t[1],@x[$j+1]
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	ldrhsb	@t[0],[r12,#-15]		@ load more input
+	ldrhsb	@t[1],[r12,#-11]
+	eor	@x[$j+2],@t[2],@x[$j+2]
+	 strb	@x[$j+0],[r14],#16		@ store output
+	eor	@x[$j+3],@t[3],@x[$j+3]
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	ldrhsb	@t[2],[r12,#-7]
+	ldrhsb	@t[3],[r12,#-3]
+	 strb	@x[$j+1],[r14,#-12]
+	eor	@x[$j+0],@t[0],@x[$j+0],lsr#8
+	 strb	@x[$j+2],[r14,#-8]
+	eor	@x[$j+1],@t[1],@x[$j+1],lsr#8
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	ldrhsb	@t[0],[r12,#-14]		@ load more input
+	ldrhsb	@t[1],[r12,#-10]
+	 strb	@x[$j+3],[r14,#-4]
+	eor	@x[$j+2],@t[2],@x[$j+2],lsr#8
+	 strb	@x[$j+0],[r14,#-15]
+	eor	@x[$j+3],@t[3],@x[$j+3],lsr#8
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	ldrhsb	@t[2],[r12,#-6]
+	ldrhsb	@t[3],[r12,#-2]
+	 strb	@x[$j+1],[r14,#-11]
+	eor	@x[$j+0],@t[0],@x[$j+0],lsr#8
+	 strb	@x[$j+2],[r14,#-7]
+	eor	@x[$j+1],@t[1],@x[$j+1],lsr#8
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	ldrhsb	@t[0],[r12,#-13]		@ load more input
+	ldrhsb	@t[1],[r12,#-9]
+	 strb	@x[$j+3],[r14,#-3]
+	eor	@x[$j+2],@t[2],@x[$j+2],lsr#8
+	 strb	@x[$j+0],[r14,#-14]
+	eor	@x[$j+3],@t[3],@x[$j+3],lsr#8
+# ifdef	__thumb2__
+	itt	hs
+# endif
+	ldrhsb	@t[2],[r12,#-5]
+	ldrhsb	@t[3],[r12,#-1]
+	 strb	@x[$j+1],[r14,#-10]
+	 strb	@x[$j+2],[r14,#-6]
+	eor	@x[$j+0],@t[0],@x[$j+0],lsr#8
+	 strb	@x[$j+3],[r14,#-2]
+	eor	@x[$j+1],@t[1],@x[$j+1],lsr#8
+	 strb	@x[$j+0],[r14,#-13]
+	eor	@x[$j+2],@t[2],@x[$j+2],lsr#8
+	 strb	@x[$j+1],[r14,#-9]
+	eor	@x[$j+3],@t[3],@x[$j+3],lsr#8
+	 strb	@x[$j+2],[r14,#-5]
+	 strb	@x[$j+3],[r14,#-1]
+___
+$code.=<<___	if ($i<12);
+	add	@t[0],sp,#4*(4+$i)
+	ldmia	@t[0],{@t[0]-@t[3]}		@ load key material
+___
+}
+$code.=<<___;
+# ifdef	__thumb2__
+	it	ne
+# endif
+	ldrne	@t[0],[sp,#4*(32+2)]		@ re-load len
+# ifdef	__thumb2__
+	it	hs
+# endif
+	subhs	@t[3],@t[0],#64			@ len-=64
+	bhi	.Loop_outer
+
+	beq	.Ldone
+#endif
+
+.Ltail:
+	ldr	r12,[sp,#4*(32+1)]	@ load inp
+	add	@t[1],sp,#4*(0)
+	ldr	r14,[sp,#4*(32+0)]	@ load out
+
+.Loop_tail:
+	ldrb	@t[2],[@t[1]],#1	@ read buffer on stack
+	ldrb	@t[3],[r12],#1		@ read input
+	subs	@t[0],@t[0],#1
+	eor	@t[3],@t[3],@t[2]
+	strb	@t[3],[r14],#1		@ store output
+	bne	.Loop_tail
+
+.Ldone:
+	add	sp,sp,#4*(32+3)
+.Lno_data:
+	ldmia	sp!,{r4-r11,pc}
+.size	ChaCha20_ctr32,.-ChaCha20_ctr32
+___
+
+{{{
+my ($a0,$b0,$c0,$d0,$a1,$b1,$c1,$d1,$a2,$b2,$c2,$d2,$t0,$t1,$t2,$t3) =
+    map("q$_",(0..15));
+
+sub NEONROUND {
+my $odd = pop;
+my ($a,$b,$c,$d,$t)=@_;
+
+	(
+	"&vadd_i32	($a,$a,$b)",
+	"&veor		($d,$d,$a)",
+	"&vrev32_16	($d,$d)",	# vrot ($d,16)
+
+	"&vadd_i32	($c,$c,$d)",
+	"&veor		($t,$b,$c)",
+	"&vshr_u32	($b,$t,20)",
+	"&vsli_32	($b,$t,12)",
+
+	"&vadd_i32	($a,$a,$b)",
+	"&veor		($t,$d,$a)",
+	"&vshr_u32	($d,$t,24)",
+	"&vsli_32	($d,$t,8)",
+
+	"&vadd_i32	($c,$c,$d)",
+	"&veor		($t,$b,$c)",
+	"&vshr_u32	($b,$t,25)",
+	"&vsli_32	($b,$t,7)",
+
+	"&vext_8	($c,$c,$c,8)",
+	"&vext_8	($b,$b,$b,$odd?12:4)",
+	"&vext_8	($d,$d,$d,$odd?4:12)"
+	);
+}
+
+$code.=<<___;
+#if __ARM_MAX_ARCH__>=7
+.arch	armv7-a
+.fpu	neon
+
+.type	ChaCha20_neon,%function
+.align	5
+ChaCha20_neon:
+	ldr		r12,[sp,#0]		@ pull pointer to counter and nonce
+	stmdb		sp!,{r0-r2,r4-r11,lr}
+.LChaCha20_neon:
+	adr		r14,.Lsigma
+	vstmdb		sp!,{d8-d15}		@ ABI spec says so
+	stmdb		sp!,{r0-r3}
+
+	vld1.32		{$b0-$c0},[r3]		@ load key
+	ldmia		r3,{r4-r11}		@ load key
+
+	sub		sp,sp,#4*(16+16)
+	vld1.32		{$d0},[r12]		@ load counter and nonce
+	add		r12,sp,#4*8
+	ldmia		r14,{r0-r3}		@ load sigma
+	vld1.32		{$a0},[r14]!		@ load sigma
+	vld1.32		{$t0},[r14]		@ one
+	vst1.32		{$c0-$d0},[r12]		@ copy 1/2key|counter|nonce
+	vst1.32		{$a0-$b0},[sp]		@ copy sigma|1/2key
+
+	str		r10,[sp,#4*(16+10)]	@ off-load "@x[10]"
+	str		r11,[sp,#4*(16+11)]	@ off-load "@x[11]"
+	vshl.i32	$t1#lo,$t0#lo,#1	@ two
+	vstr		$t0#lo,[sp,#4*(16+0)]
+	vshl.i32	$t2#lo,$t0#lo,#2	@ four
+	vstr		$t1#lo,[sp,#4*(16+2)]
+	vmov		$a1,$a0
+	vstr		$t2#lo,[sp,#4*(16+4)]
+	vmov		$a2,$a0
+	vmov		$b1,$b0
+	vmov		$b2,$b0
+	b		.Loop_neon_enter
+
+.align	4
+.Loop_neon_outer:
+	ldmia		sp,{r0-r9}		@ load key material
+	cmp		@t[3],#64*2		@ if len<=64*2
+	bls		.Lbreak_neon		@ switch to integer-only
+	vmov		$a1,$a0
+	str		@t[3],[sp,#4*(32+2)]	@ save len
+	vmov		$a2,$a0
+	str		r12,  [sp,#4*(32+1)]	@ save inp
+	vmov		$b1,$b0
+	str		r14,  [sp,#4*(32+0)]	@ save out
+	vmov		$b2,$b0
+.Loop_neon_enter:
+	ldr		@t[3], [sp,#4*(15)]
+	vadd.i32	$d1,$d0,$t0		@ counter+1
+	ldr		@x[12],[sp,#4*(12)]	@ modulo-scheduled load
+	vmov		$c1,$c0
+	ldr		@t[2], [sp,#4*(13)]
+	vmov		$c2,$c0
+	ldr		@x[14],[sp,#4*(14)]
+	vadd.i32	$d2,$d1,$t0		@ counter+2
+	str		@t[3], [sp,#4*(16+15)]
+	mov		@t[3],#10
+	add		@x[12],@x[12],#3	@ counter+3
+	b		.Loop_neon
+
+.align	4
+.Loop_neon:
+	subs		@t[3],@t[3],#1
+___
+	my @thread0=&NEONROUND($a0,$b0,$c0,$d0,$t0,0);
+	my @thread1=&NEONROUND($a1,$b1,$c1,$d1,$t1,0);
+	my @thread2=&NEONROUND($a2,$b2,$c2,$d2,$t2,0);
+	my @thread3=&ROUND(0,4,8,12);
+
+	foreach (@thread0) {
+		eval;			eval(shift(@thread3));
+		eval(shift(@thread1));	eval(shift(@thread3));
+		eval(shift(@thread2));	eval(shift(@thread3));
+	}
+
+	@thread0=&NEONROUND($a0,$b0,$c0,$d0,$t0,1);
+	@thread1=&NEONROUND($a1,$b1,$c1,$d1,$t1,1);
+	@thread2=&NEONROUND($a2,$b2,$c2,$d2,$t2,1);
+	@thread3=&ROUND(0,5,10,15);
+
+	foreach (@thread0) {
+		eval;			eval(shift(@thread3));
+		eval(shift(@thread1));	eval(shift(@thread3));
+		eval(shift(@thread2));	eval(shift(@thread3));
+	}
+$code.=<<___;
+	bne		.Loop_neon
+
+	add		@t[3],sp,#32
+	vld1.32		{$t0-$t1},[sp]		@ load key material
+	vld1.32		{$t2-$t3},[@t[3]]
+
+	ldr		@t[3],[sp,#4*(32+2)]	@ load len
+
+	str		@t[0], [sp,#4*(16+8)]	@ modulo-scheduled store
+	str		@t[1], [sp,#4*(16+9)]
+	str		@x[12],[sp,#4*(16+12)]
+	str		@t[2], [sp,#4*(16+13)]
+	str		@x[14],[sp,#4*(16+14)]
+
+	@ at this point we have first half of 512-bit result in
+	@ @x[0-7] and second half at sp+4*(16+8)
+
+	ldr		r12,[sp,#4*(32+1)]	@ load inp
+	ldr		r14,[sp,#4*(32+0)]	@ load out
+
+	vadd.i32	$a0,$a0,$t0		@ accumulate key material
+	vadd.i32	$a1,$a1,$t0
+	vadd.i32	$a2,$a2,$t0
+	vldr		$t0#lo,[sp,#4*(16+0)]	@ one
+
+	vadd.i32	$b0,$b0,$t1
+	vadd.i32	$b1,$b1,$t1
+	vadd.i32	$b2,$b2,$t1
+	vldr		$t1#lo,[sp,#4*(16+2)]	@ two
+
+	vadd.i32	$c0,$c0,$t2
+	vadd.i32	$c1,$c1,$t2
+	vadd.i32	$c2,$c2,$t2
+	vadd.i32	$d1#lo,$d1#lo,$t0#lo	@ counter+1
+	vadd.i32	$d2#lo,$d2#lo,$t1#lo	@ counter+2
+
+	vadd.i32	$d0,$d0,$t3
+	vadd.i32	$d1,$d1,$t3
+	vadd.i32	$d2,$d2,$t3
+
+	cmp		@t[3],#64*4
+	blo		.Ltail_neon
+
+	vld1.8		{$t0-$t1},[r12]!	@ load input
+	 mov		@t[3],sp
+	vld1.8		{$t2-$t3},[r12]!
+	veor		$a0,$a0,$t0		@ xor with input
+	veor		$b0,$b0,$t1
+	vld1.8		{$t0-$t1},[r12]!
+	veor		$c0,$c0,$t2
+	veor		$d0,$d0,$t3
+	vld1.8		{$t2-$t3},[r12]!
+
+	veor		$a1,$a1,$t0
+	 vst1.8		{$a0-$b0},[r14]!	@ store output
+	veor		$b1,$b1,$t1
+	vld1.8		{$t0-$t1},[r12]!
+	veor		$c1,$c1,$t2
+	 vst1.8		{$c0-$d0},[r14]!
+	veor		$d1,$d1,$t3
+	vld1.8		{$t2-$t3},[r12]!
+
+	veor		$a2,$a2,$t0
+	 vld1.32	{$a0-$b0},[@t[3]]!	@ load for next iteration
+	 veor		$t0#hi,$t0#hi,$t0#hi
+	 vldr		$t0#lo,[sp,#4*(16+4)]	@ four
+	veor		$b2,$b2,$t1
+	 vld1.32	{$c0-$d0},[@t[3]]
+	veor		$c2,$c2,$t2
+	 vst1.8		{$a1-$b1},[r14]!
+	veor		$d2,$d2,$t3
+	 vst1.8		{$c1-$d1},[r14]!
+
+	vadd.i32	$d0#lo,$d0#lo,$t0#lo	@ next counter value
+	vldr		$t0#lo,[sp,#4*(16+0)]	@ one
+
+	ldmia		sp,{@t[0]-@t[3]}	@ load key material
+	add		@x[0],@x[0],@t[0]	@ accumulate key material
+	ldr		@t[0],[r12],#16		@ load input
+	 vst1.8		{$a2-$b2},[r14]!
+	add		@x[1],@x[1],@t[1]
+	ldr		@t[1],[r12,#-12]
+	 vst1.8		{$c2-$d2},[r14]!
+	add		@x[2],@x[2],@t[2]
+	ldr		@t[2],[r12,#-8]
+	add		@x[3],@x[3],@t[3]
+	ldr		@t[3],[r12,#-4]
+# ifdef	__ARMEB__
+	rev		@x[0],@x[0]
+	rev		@x[1],@x[1]
+	rev		@x[2],@x[2]
+	rev		@x[3],@x[3]
+# endif
+	eor		@x[0],@x[0],@t[0]	@ xor with input
+	 add		@t[0],sp,#4*(4)
+	eor		@x[1],@x[1],@t[1]
+	str		@x[0],[r14],#16		@ store output
+	eor		@x[2],@x[2],@t[2]
+	str		@x[1],[r14,#-12]
+	eor		@x[3],@x[3],@t[3]
+	 ldmia		@t[0],{@t[0]-@t[3]}	@ load key material
+	str		@x[2],[r14,#-8]
+	str		@x[3],[r14,#-4]
+
+	add		@x[4],@x[4],@t[0]	@ accumulate key material
+	ldr		@t[0],[r12],#16		@ load input
+	add		@x[5],@x[5],@t[1]
+	ldr		@t[1],[r12,#-12]
+	add		@x[6],@x[6],@t[2]
+	ldr		@t[2],[r12,#-8]
+	add		@x[7],@x[7],@t[3]
+	ldr		@t[3],[r12,#-4]
+# ifdef	__ARMEB__
+	rev		@x[4],@x[4]
+	rev		@x[5],@x[5]
+	rev		@x[6],@x[6]
+	rev		@x[7],@x[7]
+# endif
+	eor		@x[4],@x[4],@t[0]
+	 add		@t[0],sp,#4*(8)
+	eor		@x[5],@x[5],@t[1]
+	str		@x[4],[r14],#16		@ store output
+	eor		@x[6],@x[6],@t[2]
+	str		@x[5],[r14,#-12]
+	eor		@x[7],@x[7],@t[3]
+	 ldmia		@t[0],{@t[0]-@t[3]}	@ load key material
+	str		@x[6],[r14,#-8]
+	 add		@x[0],sp,#4*(16+8)
+	str		@x[7],[r14,#-4]
+
+	ldmia		@x[0],{@x[0]-@x[7]}	@ load second half
+
+	add		@x[0],@x[0],@t[0]	@ accumulate key material
+	ldr		@t[0],[r12],#16		@ load input
+	add		@x[1],@x[1],@t[1]
+	ldr		@t[1],[r12,#-12]
+# ifdef	__thumb2__
+	it	hi
+# endif
+	 strhi		@t[2],[sp,#4*(16+10)]	@ copy "@x[10]" while at it
+	add		@x[2],@x[2],@t[2]
+	ldr		@t[2],[r12,#-8]
+# ifdef	__thumb2__
+	it	hi
+# endif
+	 strhi		@t[3],[sp,#4*(16+11)]	@ copy "@x[11]" while at it
+	add		@x[3],@x[3],@t[3]
+	ldr		@t[3],[r12,#-4]
+# ifdef	__ARMEB__
+	rev		@x[0],@x[0]
+	rev		@x[1],@x[1]
+	rev		@x[2],@x[2]
+	rev		@x[3],@x[3]
+# endif
+	eor		@x[0],@x[0],@t[0]
+	 add		@t[0],sp,#4*(12)
+	eor		@x[1],@x[1],@t[1]
+	str		@x[0],[r14],#16		@ store output
+	eor		@x[2],@x[2],@t[2]
+	str		@x[1],[r14,#-12]
+	eor		@x[3],@x[3],@t[3]
+	 ldmia		@t[0],{@t[0]-@t[3]}	@ load key material
+	str		@x[2],[r14,#-8]
+	str		@x[3],[r14,#-4]
+
+	add		@x[4],@x[4],@t[0]	@ accumulate key material
+	 add		@t[0],@t[0],#4		@ next counter value
+	add		@x[5],@x[5],@t[1]
+	 str		@t[0],[sp,#4*(12)]	@ save next counter value
+	ldr		@t[0],[r12],#16		@ load input
+	add		@x[6],@x[6],@t[2]
+	 add		@x[4],@x[4],#3		@ counter+3
+	ldr		@t[1],[r12,#-12]
+	add		@x[7],@x[7],@t[3]
+	ldr		@t[2],[r12,#-8]
+	ldr		@t[3],[r12,#-4]
+# ifdef	__ARMEB__
+	rev		@x[4],@x[4]
+	rev		@x[5],@x[5]
+	rev		@x[6],@x[6]
+	rev		@x[7],@x[7]
+# endif
+	eor		@x[4],@x[4],@t[0]
+# ifdef	__thumb2__
+	it	hi
+# endif
+	 ldrhi		@t[0],[sp,#4*(32+2)]	@ re-load len
+	eor		@x[5],@x[5],@t[1]
+	eor		@x[6],@x[6],@t[2]
+	str		@x[4],[r14],#16		@ store output
+	eor		@x[7],@x[7],@t[3]
+	str		@x[5],[r14,#-12]
+	 sub		@t[3],@t[0],#64*4	@ len-=64*4
+	str		@x[6],[r14,#-8]
+	str		@x[7],[r14,#-4]
+	bhi		.Loop_neon_outer
+
+	b		.Ldone_neon
+
+.align	4
+.Lbreak_neon:
+	@ harmonize NEON and integer-only stack frames: load data
+	@ from NEON frame, but save to integer-only one; distance
+	@ between the two is 4*(32+4+16-32)=4*(20).
+
+	str		@t[3], [sp,#4*(20+32+2)]	@ save len
+	 add		@t[3],sp,#4*(32+4)
+	str		r12,   [sp,#4*(20+32+1)]	@ save inp
+	str		r14,   [sp,#4*(20+32+0)]	@ save out
+
+	ldr		@x[12],[sp,#4*(16+10)]
+	ldr		@x[14],[sp,#4*(16+11)]
+	 vldmia		@t[3],{d8-d15}			@ fulfill ABI requirement
+	str		@x[12],[sp,#4*(20+16+10)]	@ copy "@x[10]"
+	str		@x[14],[sp,#4*(20+16+11)]	@ copy "@x[11]"
+
+	ldr		@t[3], [sp,#4*(15)]
+	ldr		@x[12],[sp,#4*(12)]		@ modulo-scheduled load
+	ldr		@t[2], [sp,#4*(13)]
+	ldr		@x[14],[sp,#4*(14)]
+	str		@t[3], [sp,#4*(20+16+15)]
+	add		@t[3],sp,#4*(20)
+	vst1.32		{$a0-$b0},[@t[3]]!		@ copy key
+	add		sp,sp,#4*(20)			@ switch frame
+	vst1.32		{$c0-$d0},[@t[3]]
+	mov		@t[3],#10
+	b		.Loop				@ go integer-only
+
+.align	4
+.Ltail_neon:
+	cmp		@t[3],#64*3
+	bhs		.L192_or_more_neon
+	cmp		@t[3],#64*2
+	bhs		.L128_or_more_neon
+	cmp		@t[3],#64*1
+	bhs		.L64_or_more_neon
+
+	add		@t[0],sp,#4*(8)
+	vst1.8		{$a0-$b0},[sp]
+	add		@t[2],sp,#4*(0)
+	vst1.8		{$c0-$d0},[@t[0]]
+	b		.Loop_tail_neon
+
+.align	4
+.L64_or_more_neon:
+	vld1.8		{$t0-$t1},[r12]!
+	vld1.8		{$t2-$t3},[r12]!
+	veor		$a0,$a0,$t0
+	veor		$b0,$b0,$t1
+	veor		$c0,$c0,$t2
+	veor		$d0,$d0,$t3
+	vst1.8		{$a0-$b0},[r14]!
+	vst1.8		{$c0-$d0},[r14]!
+
+	beq		.Ldone_neon
+
+	add		@t[0],sp,#4*(8)
+	vst1.8		{$a1-$b1},[sp]
+	add		@t[2],sp,#4*(0)
+	vst1.8		{$c1-$d1},[@t[0]]
+	sub		@t[3],@t[3],#64*1	@ len-=64*1
+	b		.Loop_tail_neon
+
+.align	4
+.L128_or_more_neon:
+	vld1.8		{$t0-$t1},[r12]!
+	vld1.8		{$t2-$t3},[r12]!
+	veor		$a0,$a0,$t0
+	veor		$b0,$b0,$t1
+	vld1.8		{$t0-$t1},[r12]!
+	veor		$c0,$c0,$t2
+	veor		$d0,$d0,$t3
+	vld1.8		{$t2-$t3},[r12]!
+
+	veor		$a1,$a1,$t0
+	veor		$b1,$b1,$t1
+	 vst1.8		{$a0-$b0},[r14]!
+	veor		$c1,$c1,$t2
+	 vst1.8		{$c0-$d0},[r14]!
+	veor		$d1,$d1,$t3
+	vst1.8		{$a1-$b1},[r14]!
+	vst1.8		{$c1-$d1},[r14]!
+
+	beq		.Ldone_neon
+
+	add		@t[0],sp,#4*(8)
+	vst1.8		{$a2-$b2},[sp]
+	add		@t[2],sp,#4*(0)
+	vst1.8		{$c2-$d2},[@t[0]]
+	sub		@t[3],@t[3],#64*2	@ len-=64*2
+	b		.Loop_tail_neon
+
+.align	4
+.L192_or_more_neon:
+	vld1.8		{$t0-$t1},[r12]!
+	vld1.8		{$t2-$t3},[r12]!
+	veor		$a0,$a0,$t0
+	veor		$b0,$b0,$t1
+	vld1.8		{$t0-$t1},[r12]!
+	veor		$c0,$c0,$t2
+	veor		$d0,$d0,$t3
+	vld1.8		{$t2-$t3},[r12]!
+
+	veor		$a1,$a1,$t0
+	veor		$b1,$b1,$t1
+	vld1.8		{$t0-$t1},[r12]!
+	veor		$c1,$c1,$t2
+	 vst1.8		{$a0-$b0},[r14]!
+	veor		$d1,$d1,$t3
+	vld1.8		{$t2-$t3},[r12]!
+
+	veor		$a2,$a2,$t0
+	 vst1.8		{$c0-$d0},[r14]!
+	veor		$b2,$b2,$t1
+	 vst1.8		{$a1-$b1},[r14]!
+	veor		$c2,$c2,$t2
+	 vst1.8		{$c1-$d1},[r14]!
+	veor		$d2,$d2,$t3
+	vst1.8		{$a2-$b2},[r14]!
+	vst1.8		{$c2-$d2},[r14]!
+
+	beq		.Ldone_neon
+
+	ldmia		sp,{@t[0]-@t[3]}	@ load key material
+	add		@x[0],@x[0],@t[0]	@ accumulate key material
+	 add		@t[0],sp,#4*(4)
+	add		@x[1],@x[1],@t[1]
+	add		@x[2],@x[2],@t[2]
+	add		@x[3],@x[3],@t[3]
+	 ldmia		@t[0],{@t[0]-@t[3]}	@ load key material
+
+	add		@x[4],@x[4],@t[0]	@ accumulate key material
+	 add		@t[0],sp,#4*(8)
+	add		@x[5],@x[5],@t[1]
+	add		@x[6],@x[6],@t[2]
+	add		@x[7],@x[7],@t[3]
+	 ldmia		@t[0],{@t[0]-@t[3]}	@ load key material
+# ifdef	__ARMEB__
+	rev		@x[0],@x[0]
+	rev		@x[1],@x[1]
+	rev		@x[2],@x[2]
+	rev		@x[3],@x[3]
+	rev		@x[4],@x[4]
+	rev		@x[5],@x[5]
+	rev		@x[6],@x[6]
+	rev		@x[7],@x[7]
+# endif
+	stmia		sp,{@x[0]-@x[7]}
+	 add		@x[0],sp,#4*(16+8)
+
+	ldmia		@x[0],{@x[0]-@x[7]}	@ load second half
+
+	add		@x[0],@x[0],@t[0]	@ accumulate key material
+	 add		@t[0],sp,#4*(12)
+	add		@x[1],@x[1],@t[1]
+	add		@x[2],@x[2],@t[2]
+	add		@x[3],@x[3],@t[3]
+	 ldmia		@t[0],{@t[0]-@t[3]}	@ load key material
+
+	add		@x[4],@x[4],@t[0]	@ accumulate key material
+	 add		@t[0],sp,#4*(8)
+	add		@x[5],@x[5],@t[1]
+	 add		@x[4],@x[4],#3		@ counter+3
+	add		@x[6],@x[6],@t[2]
+	add		@x[7],@x[7],@t[3]
+	 ldr		@t[3],[sp,#4*(32+2)]	@ re-load len
+# ifdef	__ARMEB__
+	rev		@x[0],@x[0]
+	rev		@x[1],@x[1]
+	rev		@x[2],@x[2]
+	rev		@x[3],@x[3]
+	rev		@x[4],@x[4]
+	rev		@x[5],@x[5]
+	rev		@x[6],@x[6]
+	rev		@x[7],@x[7]
+# endif
+	stmia		@t[0],{@x[0]-@x[7]}
+	 add		@t[2],sp,#4*(0)
+	 sub		@t[3],@t[3],#64*3	@ len-=64*3
+
+.Loop_tail_neon:
+	ldrb		@t[0],[@t[2]],#1	@ read buffer on stack
+	ldrb		@t[1],[r12],#1		@ read input
+	subs		@t[3],@t[3],#1
+	eor		@t[0],@t[0],@t[1]
+	strb		@t[0],[r14],#1		@ store output
+	bne		.Loop_tail_neon
+
+.Ldone_neon:
+	add		sp,sp,#4*(32+4)
+	vldmia		sp,{d8-d15}
+	add		sp,sp,#4*(16+3)
+	ldmia		sp!,{r4-r11,pc}
+.size	ChaCha20_neon,.-ChaCha20_neon
+.comm	OPENSSL_armcap_P,4,4
+#endif
+___
+}}}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/geo;
+
+	s/\bq([0-9]+)#(lo|hi)/sprintf "d%d",2*$1+($2 eq "hi")/geo;
+
+	print $_,"\n";
+}
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-armv8.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-armv8.pl
new file mode 100755
index 000000000..e90be6d0e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-armv8.pl
@@ -0,0 +1,1144 @@
+#! /usr/bin/env perl
+# Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# June 2015
+#
+# ChaCha20 for ARMv8.
+#
+# Performance in cycles per byte out of large buffer.
+#
+#			IALU/gcc-4.9    3xNEON+1xIALU	6xNEON+2xIALU
+#
+# Apple A7		5.50/+49%       3.33            1.70
+# Cortex-A53		8.40/+80%       4.72		4.72(*)
+# Cortex-A57		8.06/+43%       4.90            4.43(**)
+# Denver		4.50/+82%       2.63		2.67(*)
+# X-Gene		9.50/+46%       8.82		8.89(*)
+# Mongoose		8.00/+44%	3.64		3.25
+# Kryo			8.17/+50%	4.83		4.65
+#
+# (*)	it's expected that doubling interleave factor doesn't help
+#	all processors, only those with higher NEON latency and
+#	higher instruction issue rate;
+# (**)	expected improvement was actually higher;
+
+$flavour=shift;
+$output=shift;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+die "can't locate arm-xlate.pl";
+
+open OUT,"| \"$^X\" $xlate $flavour $output";
+*STDOUT=*OUT;
+
+sub AUTOLOAD()		# thunk [simplified] x86-style perlasm
+{ my $opcode = $AUTOLOAD; $opcode =~ s/.*:://; $opcode =~ s/_/\./;
+  my $arg = pop;
+    $arg = "#$arg" if ($arg*1 eq $arg);
+    $code .= "\t$opcode\t".join(',',@_,$arg)."\n";
+}
+
+my ($out,$inp,$len,$key,$ctr) = map("x$_",(0..4));
+
+my @x=map("x$_",(5..17,19..21));
+my @d=map("x$_",(22..28,30));
+
+sub ROUND {
+my ($a0,$b0,$c0,$d0)=@_;
+my ($a1,$b1,$c1,$d1)=map(($_&~3)+(($_+1)&3),($a0,$b0,$c0,$d0));
+my ($a2,$b2,$c2,$d2)=map(($_&~3)+(($_+1)&3),($a1,$b1,$c1,$d1));
+my ($a3,$b3,$c3,$d3)=map(($_&~3)+(($_+1)&3),($a2,$b2,$c2,$d2));
+
+    (
+	"&add_32	(@x[$a0],@x[$a0],@x[$b0])",
+	 "&add_32	(@x[$a1],@x[$a1],@x[$b1])",
+	  "&add_32	(@x[$a2],@x[$a2],@x[$b2])",
+	   "&add_32	(@x[$a3],@x[$a3],@x[$b3])",
+	"&eor_32	(@x[$d0],@x[$d0],@x[$a0])",
+	 "&eor_32	(@x[$d1],@x[$d1],@x[$a1])",
+	  "&eor_32	(@x[$d2],@x[$d2],@x[$a2])",
+	   "&eor_32	(@x[$d3],@x[$d3],@x[$a3])",
+	"&ror_32	(@x[$d0],@x[$d0],16)",
+	 "&ror_32	(@x[$d1],@x[$d1],16)",
+	  "&ror_32	(@x[$d2],@x[$d2],16)",
+	   "&ror_32	(@x[$d3],@x[$d3],16)",
+
+	"&add_32	(@x[$c0],@x[$c0],@x[$d0])",
+	 "&add_32	(@x[$c1],@x[$c1],@x[$d1])",
+	  "&add_32	(@x[$c2],@x[$c2],@x[$d2])",
+	   "&add_32	(@x[$c3],@x[$c3],@x[$d3])",
+	"&eor_32	(@x[$b0],@x[$b0],@x[$c0])",
+	 "&eor_32	(@x[$b1],@x[$b1],@x[$c1])",
+	  "&eor_32	(@x[$b2],@x[$b2],@x[$c2])",
+	   "&eor_32	(@x[$b3],@x[$b3],@x[$c3])",
+	"&ror_32	(@x[$b0],@x[$b0],20)",
+	 "&ror_32	(@x[$b1],@x[$b1],20)",
+	  "&ror_32	(@x[$b2],@x[$b2],20)",
+	   "&ror_32	(@x[$b3],@x[$b3],20)",
+
+	"&add_32	(@x[$a0],@x[$a0],@x[$b0])",
+	 "&add_32	(@x[$a1],@x[$a1],@x[$b1])",
+	  "&add_32	(@x[$a2],@x[$a2],@x[$b2])",
+	   "&add_32	(@x[$a3],@x[$a3],@x[$b3])",
+	"&eor_32	(@x[$d0],@x[$d0],@x[$a0])",
+	 "&eor_32	(@x[$d1],@x[$d1],@x[$a1])",
+	  "&eor_32	(@x[$d2],@x[$d2],@x[$a2])",
+	   "&eor_32	(@x[$d3],@x[$d3],@x[$a3])",
+	"&ror_32	(@x[$d0],@x[$d0],24)",
+	 "&ror_32	(@x[$d1],@x[$d1],24)",
+	  "&ror_32	(@x[$d2],@x[$d2],24)",
+	   "&ror_32	(@x[$d3],@x[$d3],24)",
+
+	"&add_32	(@x[$c0],@x[$c0],@x[$d0])",
+	 "&add_32	(@x[$c1],@x[$c1],@x[$d1])",
+	  "&add_32	(@x[$c2],@x[$c2],@x[$d2])",
+	   "&add_32	(@x[$c3],@x[$c3],@x[$d3])",
+	"&eor_32	(@x[$b0],@x[$b0],@x[$c0])",
+	 "&eor_32	(@x[$b1],@x[$b1],@x[$c1])",
+	  "&eor_32	(@x[$b2],@x[$b2],@x[$c2])",
+	   "&eor_32	(@x[$b3],@x[$b3],@x[$c3])",
+	"&ror_32	(@x[$b0],@x[$b0],25)",
+	 "&ror_32	(@x[$b1],@x[$b1],25)",
+	  "&ror_32	(@x[$b2],@x[$b2],25)",
+	   "&ror_32	(@x[$b3],@x[$b3],25)"
+    );
+}
+
+$code.=<<___;
+#include "arm_arch.h"
+
+.text
+
+.extern	OPENSSL_armcap_P
+
+.align	5
+.Lsigma:
+.quad	0x3320646e61707865,0x6b20657479622d32		// endian-neutral
+.Lone:
+.long	1,0,0,0
+.LOPENSSL_armcap_P:
+#ifdef	__ILP32__
+.long	OPENSSL_armcap_P-.
+#else
+.quad	OPENSSL_armcap_P-.
+#endif
+.asciz	"ChaCha20 for ARMv8, CRYPTOGAMS by <appro\@openssl.org>"
+
+.globl	ChaCha20_ctr32
+.type	ChaCha20_ctr32,%function
+.align	5
+ChaCha20_ctr32:
+	cbz	$len,.Labort
+	adr	@x[0],.LOPENSSL_armcap_P
+	cmp	$len,#192
+	b.lo	.Lshort
+#ifdef	__ILP32__
+	ldrsw	@x[1],[@x[0]]
+#else
+	ldr	@x[1],[@x[0]]
+#endif
+	ldr	w17,[@x[1],@x[0]]
+	tst	w17,#ARMV7_NEON
+	b.ne	ChaCha20_neon
+
+.Lshort:
+	.inst	0xd503233f			// paciasp
+	stp	x29,x30,[sp,#-96]!
+	add	x29,sp,#0
+
+	adr	@x[0],.Lsigma
+	stp	x19,x20,[sp,#16]
+	stp	x21,x22,[sp,#32]
+	stp	x23,x24,[sp,#48]
+	stp	x25,x26,[sp,#64]
+	stp	x27,x28,[sp,#80]
+	sub	sp,sp,#64
+
+	ldp	@d[0],@d[1],[@x[0]]		// load sigma
+	ldp	@d[2],@d[3],[$key]		// load key
+	ldp	@d[4],@d[5],[$key,#16]
+	ldp	@d[6],@d[7],[$ctr]		// load counter
+#ifdef	__ARMEB__
+	ror	@d[2],@d[2],#32
+	ror	@d[3],@d[3],#32
+	ror	@d[4],@d[4],#32
+	ror	@d[5],@d[5],#32
+	ror	@d[6],@d[6],#32
+	ror	@d[7],@d[7],#32
+#endif
+
+.Loop_outer:
+	mov.32	@x[0],@d[0]			// unpack key block
+	lsr	@x[1],@d[0],#32
+	mov.32	@x[2],@d[1]
+	lsr	@x[3],@d[1],#32
+	mov.32	@x[4],@d[2]
+	lsr	@x[5],@d[2],#32
+	mov.32	@x[6],@d[3]
+	lsr	@x[7],@d[3],#32
+	mov.32	@x[8],@d[4]
+	lsr	@x[9],@d[4],#32
+	mov.32	@x[10],@d[5]
+	lsr	@x[11],@d[5],#32
+	mov.32	@x[12],@d[6]
+	lsr	@x[13],@d[6],#32
+	mov.32	@x[14],@d[7]
+	lsr	@x[15],@d[7],#32
+
+	mov	$ctr,#10
+	subs	$len,$len,#64
+.Loop:
+	sub	$ctr,$ctr,#1
+___
+	foreach (&ROUND(0, 4, 8,12)) { eval; }
+	foreach (&ROUND(0, 5,10,15)) { eval; }
+$code.=<<___;
+	cbnz	$ctr,.Loop
+
+	add.32	@x[0],@x[0],@d[0]		// accumulate key block
+	add	@x[1],@x[1],@d[0],lsr#32
+	add.32	@x[2],@x[2],@d[1]
+	add	@x[3],@x[3],@d[1],lsr#32
+	add.32	@x[4],@x[4],@d[2]
+	add	@x[5],@x[5],@d[2],lsr#32
+	add.32	@x[6],@x[6],@d[3]
+	add	@x[7],@x[7],@d[3],lsr#32
+	add.32	@x[8],@x[8],@d[4]
+	add	@x[9],@x[9],@d[4],lsr#32
+	add.32	@x[10],@x[10],@d[5]
+	add	@x[11],@x[11],@d[5],lsr#32
+	add.32	@x[12],@x[12],@d[6]
+	add	@x[13],@x[13],@d[6],lsr#32
+	add.32	@x[14],@x[14],@d[7]
+	add	@x[15],@x[15],@d[7],lsr#32
+
+	b.lo	.Ltail
+
+	add	@x[0],@x[0],@x[1],lsl#32	// pack
+	add	@x[2],@x[2],@x[3],lsl#32
+	ldp	@x[1],@x[3],[$inp,#0]		// load input
+	add	@x[4],@x[4],@x[5],lsl#32
+	add	@x[6],@x[6],@x[7],lsl#32
+	ldp	@x[5],@x[7],[$inp,#16]
+	add	@x[8],@x[8],@x[9],lsl#32
+	add	@x[10],@x[10],@x[11],lsl#32
+	ldp	@x[9],@x[11],[$inp,#32]
+	add	@x[12],@x[12],@x[13],lsl#32
+	add	@x[14],@x[14],@x[15],lsl#32
+	ldp	@x[13],@x[15],[$inp,#48]
+	add	$inp,$inp,#64
+#ifdef	__ARMEB__
+	rev	@x[0],@x[0]
+	rev	@x[2],@x[2]
+	rev	@x[4],@x[4]
+	rev	@x[6],@x[6]
+	rev	@x[8],@x[8]
+	rev	@x[10],@x[10]
+	rev	@x[12],@x[12]
+	rev	@x[14],@x[14]
+#endif
+	eor	@x[0],@x[0],@x[1]
+	eor	@x[2],@x[2],@x[3]
+	eor	@x[4],@x[4],@x[5]
+	eor	@x[6],@x[6],@x[7]
+	eor	@x[8],@x[8],@x[9]
+	eor	@x[10],@x[10],@x[11]
+	eor	@x[12],@x[12],@x[13]
+	eor	@x[14],@x[14],@x[15]
+
+	stp	@x[0],@x[2],[$out,#0]		// store output
+	 add	@d[6],@d[6],#1			// increment counter
+	stp	@x[4],@x[6],[$out,#16]
+	stp	@x[8],@x[10],[$out,#32]
+	stp	@x[12],@x[14],[$out,#48]
+	add	$out,$out,#64
+
+	b.hi	.Loop_outer
+
+	ldp	x19,x20,[x29,#16]
+	add	sp,sp,#64
+	ldp	x21,x22,[x29,#32]
+	ldp	x23,x24,[x29,#48]
+	ldp	x25,x26,[x29,#64]
+	ldp	x27,x28,[x29,#80]
+	ldp	x29,x30,[sp],#96
+	.inst	0xd50323bf			// autiasp
+.Labort:
+	ret
+
+.align	4
+.Ltail:
+	add	$len,$len,#64
+.Less_than_64:
+	sub	$out,$out,#1
+	add	$inp,$inp,$len
+	add	$out,$out,$len
+	add	$ctr,sp,$len
+	neg	$len,$len
+
+	add	@x[0],@x[0],@x[1],lsl#32	// pack
+	add	@x[2],@x[2],@x[3],lsl#32
+	add	@x[4],@x[4],@x[5],lsl#32
+	add	@x[6],@x[6],@x[7],lsl#32
+	add	@x[8],@x[8],@x[9],lsl#32
+	add	@x[10],@x[10],@x[11],lsl#32
+	add	@x[12],@x[12],@x[13],lsl#32
+	add	@x[14],@x[14],@x[15],lsl#32
+#ifdef	__ARMEB__
+	rev	@x[0],@x[0]
+	rev	@x[2],@x[2]
+	rev	@x[4],@x[4]
+	rev	@x[6],@x[6]
+	rev	@x[8],@x[8]
+	rev	@x[10],@x[10]
+	rev	@x[12],@x[12]
+	rev	@x[14],@x[14]
+#endif
+	stp	@x[0],@x[2],[sp,#0]
+	stp	@x[4],@x[6],[sp,#16]
+	stp	@x[8],@x[10],[sp,#32]
+	stp	@x[12],@x[14],[sp,#48]
+
+.Loop_tail:
+	ldrb	w10,[$inp,$len]
+	ldrb	w11,[$ctr,$len]
+	add	$len,$len,#1
+	eor	w10,w10,w11
+	strb	w10,[$out,$len]
+	cbnz	$len,.Loop_tail
+
+	stp	xzr,xzr,[sp,#0]
+	stp	xzr,xzr,[sp,#16]
+	stp	xzr,xzr,[sp,#32]
+	stp	xzr,xzr,[sp,#48]
+
+	ldp	x19,x20,[x29,#16]
+	add	sp,sp,#64
+	ldp	x21,x22,[x29,#32]
+	ldp	x23,x24,[x29,#48]
+	ldp	x25,x26,[x29,#64]
+	ldp	x27,x28,[x29,#80]
+	ldp	x29,x30,[sp],#96
+	.inst	0xd50323bf			// autiasp
+	ret
+.size	ChaCha20_ctr32,.-ChaCha20_ctr32
+___
+
+{{{
+my ($A0,$B0,$C0,$D0,$A1,$B1,$C1,$D1,$A2,$B2,$C2,$D2,$T0,$T1,$T2,$T3) =
+    map("v$_.4s",(0..7,16..23));
+my (@K)=map("v$_.4s",(24..30));
+my $ONE="v31.4s";
+
+sub NEONROUND {
+my $odd = pop;
+my ($a,$b,$c,$d,$t)=@_;
+
+	(
+	"&add		('$a','$a','$b')",
+	"&eor		('$d','$d','$a')",
+	"&rev32_16	('$d','$d')",		# vrot ($d,16)
+
+	"&add		('$c','$c','$d')",
+	"&eor		('$t','$b','$c')",
+	"&ushr		('$b','$t',20)",
+	"&sli		('$b','$t',12)",
+
+	"&add		('$a','$a','$b')",
+	"&eor		('$t','$d','$a')",
+	"&ushr		('$d','$t',24)",
+	"&sli		('$d','$t',8)",
+
+	"&add		('$c','$c','$d')",
+	"&eor		('$t','$b','$c')",
+	"&ushr		('$b','$t',25)",
+	"&sli		('$b','$t',7)",
+
+	"&ext		('$c','$c','$c',8)",
+	"&ext		('$d','$d','$d',$odd?4:12)",
+	"&ext		('$b','$b','$b',$odd?12:4)"
+	);
+}
+
+$code.=<<___;
+
+.type	ChaCha20_neon,%function
+.align	5
+ChaCha20_neon:
+	.inst	0xd503233f			// paciasp
+	stp	x29,x30,[sp,#-96]!
+	add	x29,sp,#0
+
+	adr	@x[0],.Lsigma
+	stp	x19,x20,[sp,#16]
+	stp	x21,x22,[sp,#32]
+	stp	x23,x24,[sp,#48]
+	stp	x25,x26,[sp,#64]
+	stp	x27,x28,[sp,#80]
+	cmp	$len,#512
+	b.hs	.L512_or_more_neon
+
+	sub	sp,sp,#64
+
+	ldp	@d[0],@d[1],[@x[0]]		// load sigma
+	ld1	{@K[0]},[@x[0]],#16
+	ldp	@d[2],@d[3],[$key]		// load key
+	ldp	@d[4],@d[5],[$key,#16]
+	ld1	{@K[1],@K[2]},[$key]
+	ldp	@d[6],@d[7],[$ctr]		// load counter
+	ld1	{@K[3]},[$ctr]
+	ld1	{$ONE},[@x[0]]
+#ifdef	__ARMEB__
+	rev64	@K[0],@K[0]
+	ror	@d[2],@d[2],#32
+	ror	@d[3],@d[3],#32
+	ror	@d[4],@d[4],#32
+	ror	@d[5],@d[5],#32
+	ror	@d[6],@d[6],#32
+	ror	@d[7],@d[7],#32
+#endif
+	add	@K[3],@K[3],$ONE		// += 1
+	add	@K[4],@K[3],$ONE
+	add	@K[5],@K[4],$ONE
+	shl	$ONE,$ONE,#2			// 1 -> 4
+
+.Loop_outer_neon:
+	mov.32	@x[0],@d[0]			// unpack key block
+	lsr	@x[1],@d[0],#32
+	 mov	$A0,@K[0]
+	mov.32	@x[2],@d[1]
+	lsr	@x[3],@d[1],#32
+	 mov	$A1,@K[0]
+	mov.32	@x[4],@d[2]
+	lsr	@x[5],@d[2],#32
+	 mov	$A2,@K[0]
+	mov.32	@x[6],@d[3]
+	 mov	$B0,@K[1]
+	lsr	@x[7],@d[3],#32
+	 mov	$B1,@K[1]
+	mov.32	@x[8],@d[4]
+	 mov	$B2,@K[1]
+	lsr	@x[9],@d[4],#32
+	 mov	$D0,@K[3]
+	mov.32	@x[10],@d[5]
+	 mov	$D1,@K[4]
+	lsr	@x[11],@d[5],#32
+	 mov	$D2,@K[5]
+	mov.32	@x[12],@d[6]
+	 mov	$C0,@K[2]
+	lsr	@x[13],@d[6],#32
+	 mov	$C1,@K[2]
+	mov.32	@x[14],@d[7]
+	 mov	$C2,@K[2]
+	lsr	@x[15],@d[7],#32
+
+	mov	$ctr,#10
+	subs	$len,$len,#256
+.Loop_neon:
+	sub	$ctr,$ctr,#1
+___
+	my @thread0=&NEONROUND($A0,$B0,$C0,$D0,$T0,0);
+	my @thread1=&NEONROUND($A1,$B1,$C1,$D1,$T1,0);
+	my @thread2=&NEONROUND($A2,$B2,$C2,$D2,$T2,0);
+	my @thread3=&ROUND(0,4,8,12);
+
+	foreach (@thread0) {
+		eval;			eval(shift(@thread3));
+		eval(shift(@thread1));	eval(shift(@thread3));
+		eval(shift(@thread2));	eval(shift(@thread3));
+	}
+
+	@thread0=&NEONROUND($A0,$B0,$C0,$D0,$T0,1);
+	@thread1=&NEONROUND($A1,$B1,$C1,$D1,$T1,1);
+	@thread2=&NEONROUND($A2,$B2,$C2,$D2,$T2,1);
+	@thread3=&ROUND(0,5,10,15);
+
+	foreach (@thread0) {
+		eval;			eval(shift(@thread3));
+		eval(shift(@thread1));	eval(shift(@thread3));
+		eval(shift(@thread2));	eval(shift(@thread3));
+	}
+$code.=<<___;
+	cbnz	$ctr,.Loop_neon
+
+	add.32	@x[0],@x[0],@d[0]		// accumulate key block
+	 add	$A0,$A0,@K[0]
+	add	@x[1],@x[1],@d[0],lsr#32
+	 add	$A1,$A1,@K[0]
+	add.32	@x[2],@x[2],@d[1]
+	 add	$A2,$A2,@K[0]
+	add	@x[3],@x[3],@d[1],lsr#32
+	 add	$C0,$C0,@K[2]
+	add.32	@x[4],@x[4],@d[2]
+	 add	$C1,$C1,@K[2]
+	add	@x[5],@x[5],@d[2],lsr#32
+	 add	$C2,$C2,@K[2]
+	add.32	@x[6],@x[6],@d[3]
+	 add	$D0,$D0,@K[3]
+	add	@x[7],@x[7],@d[3],lsr#32
+	add.32	@x[8],@x[8],@d[4]
+	 add	$D1,$D1,@K[4]
+	add	@x[9],@x[9],@d[4],lsr#32
+	add.32	@x[10],@x[10],@d[5]
+	 add	$D2,$D2,@K[5]
+	add	@x[11],@x[11],@d[5],lsr#32
+	add.32	@x[12],@x[12],@d[6]
+	 add	$B0,$B0,@K[1]
+	add	@x[13],@x[13],@d[6],lsr#32
+	add.32	@x[14],@x[14],@d[7]
+	 add	$B1,$B1,@K[1]
+	add	@x[15],@x[15],@d[7],lsr#32
+	 add	$B2,$B2,@K[1]
+
+	b.lo	.Ltail_neon
+
+	add	@x[0],@x[0],@x[1],lsl#32	// pack
+	add	@x[2],@x[2],@x[3],lsl#32
+	ldp	@x[1],@x[3],[$inp,#0]		// load input
+	add	@x[4],@x[4],@x[5],lsl#32
+	add	@x[6],@x[6],@x[7],lsl#32
+	ldp	@x[5],@x[7],[$inp,#16]
+	add	@x[8],@x[8],@x[9],lsl#32
+	add	@x[10],@x[10],@x[11],lsl#32
+	ldp	@x[9],@x[11],[$inp,#32]
+	add	@x[12],@x[12],@x[13],lsl#32
+	add	@x[14],@x[14],@x[15],lsl#32
+	ldp	@x[13],@x[15],[$inp,#48]
+	add	$inp,$inp,#64
+#ifdef	__ARMEB__
+	rev	@x[0],@x[0]
+	rev	@x[2],@x[2]
+	rev	@x[4],@x[4]
+	rev	@x[6],@x[6]
+	rev	@x[8],@x[8]
+	rev	@x[10],@x[10]
+	rev	@x[12],@x[12]
+	rev	@x[14],@x[14]
+#endif
+	ld1.8	{$T0-$T3},[$inp],#64
+	eor	@x[0],@x[0],@x[1]
+	eor	@x[2],@x[2],@x[3]
+	eor	@x[4],@x[4],@x[5]
+	eor	@x[6],@x[6],@x[7]
+	eor	@x[8],@x[8],@x[9]
+	 eor	$A0,$A0,$T0
+	eor	@x[10],@x[10],@x[11]
+	 eor	$B0,$B0,$T1
+	eor	@x[12],@x[12],@x[13]
+	 eor	$C0,$C0,$T2
+	eor	@x[14],@x[14],@x[15]
+	 eor	$D0,$D0,$T3
+	 ld1.8	{$T0-$T3},[$inp],#64
+
+	stp	@x[0],@x[2],[$out,#0]		// store output
+	 add	@d[6],@d[6],#4			// increment counter
+	stp	@x[4],@x[6],[$out,#16]
+	 add	@K[3],@K[3],$ONE		// += 4
+	stp	@x[8],@x[10],[$out,#32]
+	 add	@K[4],@K[4],$ONE
+	stp	@x[12],@x[14],[$out,#48]
+	 add	@K[5],@K[5],$ONE
+	add	$out,$out,#64
+
+	st1.8	{$A0-$D0},[$out],#64
+	ld1.8	{$A0-$D0},[$inp],#64
+
+	eor	$A1,$A1,$T0
+	eor	$B1,$B1,$T1
+	eor	$C1,$C1,$T2
+	eor	$D1,$D1,$T3
+	st1.8	{$A1-$D1},[$out],#64
+
+	eor	$A2,$A2,$A0
+	eor	$B2,$B2,$B0
+	eor	$C2,$C2,$C0
+	eor	$D2,$D2,$D0
+	st1.8	{$A2-$D2},[$out],#64
+
+	b.hi	.Loop_outer_neon
+
+	ldp	x19,x20,[x29,#16]
+	add	sp,sp,#64
+	ldp	x21,x22,[x29,#32]
+	ldp	x23,x24,[x29,#48]
+	ldp	x25,x26,[x29,#64]
+	ldp	x27,x28,[x29,#80]
+	ldp	x29,x30,[sp],#96
+	.inst	0xd50323bf			// autiasp
+	ret
+
+.Ltail_neon:
+	add	$len,$len,#256
+	cmp	$len,#64
+	b.lo	.Less_than_64
+
+	add	@x[0],@x[0],@x[1],lsl#32	// pack
+	add	@x[2],@x[2],@x[3],lsl#32
+	ldp	@x[1],@x[3],[$inp,#0]		// load input
+	add	@x[4],@x[4],@x[5],lsl#32
+	add	@x[6],@x[6],@x[7],lsl#32
+	ldp	@x[5],@x[7],[$inp,#16]
+	add	@x[8],@x[8],@x[9],lsl#32
+	add	@x[10],@x[10],@x[11],lsl#32
+	ldp	@x[9],@x[11],[$inp,#32]
+	add	@x[12],@x[12],@x[13],lsl#32
+	add	@x[14],@x[14],@x[15],lsl#32
+	ldp	@x[13],@x[15],[$inp,#48]
+	add	$inp,$inp,#64
+#ifdef	__ARMEB__
+	rev	@x[0],@x[0]
+	rev	@x[2],@x[2]
+	rev	@x[4],@x[4]
+	rev	@x[6],@x[6]
+	rev	@x[8],@x[8]
+	rev	@x[10],@x[10]
+	rev	@x[12],@x[12]
+	rev	@x[14],@x[14]
+#endif
+	eor	@x[0],@x[0],@x[1]
+	eor	@x[2],@x[2],@x[3]
+	eor	@x[4],@x[4],@x[5]
+	eor	@x[6],@x[6],@x[7]
+	eor	@x[8],@x[8],@x[9]
+	eor	@x[10],@x[10],@x[11]
+	eor	@x[12],@x[12],@x[13]
+	eor	@x[14],@x[14],@x[15]
+
+	stp	@x[0],@x[2],[$out,#0]		// store output
+	 add	@d[6],@d[6],#4			// increment counter
+	stp	@x[4],@x[6],[$out,#16]
+	stp	@x[8],@x[10],[$out,#32]
+	stp	@x[12],@x[14],[$out,#48]
+	add	$out,$out,#64
+	b.eq	.Ldone_neon
+	sub	$len,$len,#64
+	cmp	$len,#64
+	b.lo	.Less_than_128
+
+	ld1.8	{$T0-$T3},[$inp],#64
+	eor	$A0,$A0,$T0
+	eor	$B0,$B0,$T1
+	eor	$C0,$C0,$T2
+	eor	$D0,$D0,$T3
+	st1.8	{$A0-$D0},[$out],#64
+	b.eq	.Ldone_neon
+	sub	$len,$len,#64
+	cmp	$len,#64
+	b.lo	.Less_than_192
+
+	ld1.8	{$T0-$T3},[$inp],#64
+	eor	$A1,$A1,$T0
+	eor	$B1,$B1,$T1
+	eor	$C1,$C1,$T2
+	eor	$D1,$D1,$T3
+	st1.8	{$A1-$D1},[$out],#64
+	b.eq	.Ldone_neon
+	sub	$len,$len,#64
+
+	st1.8	{$A2-$D2},[sp]
+	b	.Last_neon
+
+.Less_than_128:
+	st1.8	{$A0-$D0},[sp]
+	b	.Last_neon
+.Less_than_192:
+	st1.8	{$A1-$D1},[sp]
+	b	.Last_neon
+
+.align	4
+.Last_neon:
+	sub	$out,$out,#1
+	add	$inp,$inp,$len
+	add	$out,$out,$len
+	add	$ctr,sp,$len
+	neg	$len,$len
+
+.Loop_tail_neon:
+	ldrb	w10,[$inp,$len]
+	ldrb	w11,[$ctr,$len]
+	add	$len,$len,#1
+	eor	w10,w10,w11
+	strb	w10,[$out,$len]
+	cbnz	$len,.Loop_tail_neon
+
+	stp	xzr,xzr,[sp,#0]
+	stp	xzr,xzr,[sp,#16]
+	stp	xzr,xzr,[sp,#32]
+	stp	xzr,xzr,[sp,#48]
+
+.Ldone_neon:
+	ldp	x19,x20,[x29,#16]
+	add	sp,sp,#64
+	ldp	x21,x22,[x29,#32]
+	ldp	x23,x24,[x29,#48]
+	ldp	x25,x26,[x29,#64]
+	ldp	x27,x28,[x29,#80]
+	ldp	x29,x30,[sp],#96
+	.inst	0xd50323bf			// autiasp
+	ret
+.size	ChaCha20_neon,.-ChaCha20_neon
+___
+{
+my ($T0,$T1,$T2,$T3,$T4,$T5)=@K;
+my ($A0,$B0,$C0,$D0,$A1,$B1,$C1,$D1,$A2,$B2,$C2,$D2,
+    $A3,$B3,$C3,$D3,$A4,$B4,$C4,$D4,$A5,$B5,$C5,$D5) = map("v$_.4s",(0..23));
+
+$code.=<<___;
+.type	ChaCha20_512_neon,%function
+.align	5
+ChaCha20_512_neon:
+	.inst	0xd503233f			// paciasp
+	stp	x29,x30,[sp,#-96]!
+	add	x29,sp,#0
+
+	adr	@x[0],.Lsigma
+	stp	x19,x20,[sp,#16]
+	stp	x21,x22,[sp,#32]
+	stp	x23,x24,[sp,#48]
+	stp	x25,x26,[sp,#64]
+	stp	x27,x28,[sp,#80]
+
+.L512_or_more_neon:
+	sub	sp,sp,#128+64
+
+	ldp	@d[0],@d[1],[@x[0]]		// load sigma
+	ld1	{@K[0]},[@x[0]],#16
+	ldp	@d[2],@d[3],[$key]		// load key
+	ldp	@d[4],@d[5],[$key,#16]
+	ld1	{@K[1],@K[2]},[$key]
+	ldp	@d[6],@d[7],[$ctr]		// load counter
+	ld1	{@K[3]},[$ctr]
+	ld1	{$ONE},[@x[0]]
+#ifdef	__ARMEB__
+	rev64	@K[0],@K[0]
+	ror	@d[2],@d[2],#32
+	ror	@d[3],@d[3],#32
+	ror	@d[4],@d[4],#32
+	ror	@d[5],@d[5],#32
+	ror	@d[6],@d[6],#32
+	ror	@d[7],@d[7],#32
+#endif
+	add	@K[3],@K[3],$ONE		// += 1
+	stp	@K[0],@K[1],[sp,#0]		// off-load key block, invariant part
+	add	@K[3],@K[3],$ONE		// not typo
+	str	@K[2],[sp,#32]
+	add	@K[4],@K[3],$ONE
+	add	@K[5],@K[4],$ONE
+	add	@K[6],@K[5],$ONE
+	shl	$ONE,$ONE,#2			// 1 -> 4
+
+	stp	d8,d9,[sp,#128+0]		// meet ABI requirements
+	stp	d10,d11,[sp,#128+16]
+	stp	d12,d13,[sp,#128+32]
+	stp	d14,d15,[sp,#128+48]
+
+	sub	$len,$len,#512			// not typo
+
+.Loop_outer_512_neon:
+	 mov	$A0,@K[0]
+	 mov	$A1,@K[0]
+	 mov	$A2,@K[0]
+	 mov	$A3,@K[0]
+	 mov	$A4,@K[0]
+	 mov	$A5,@K[0]
+	 mov	$B0,@K[1]
+	mov.32	@x[0],@d[0]			// unpack key block
+	 mov	$B1,@K[1]
+	lsr	@x[1],@d[0],#32
+	 mov	$B2,@K[1]
+	mov.32	@x[2],@d[1]
+	 mov	$B3,@K[1]
+	lsr	@x[3],@d[1],#32
+	 mov	$B4,@K[1]
+	mov.32	@x[4],@d[2]
+	 mov	$B5,@K[1]
+	lsr	@x[5],@d[2],#32
+	 mov	$D0,@K[3]
+	mov.32	@x[6],@d[3]
+	 mov	$D1,@K[4]
+	lsr	@x[7],@d[3],#32
+	 mov	$D2,@K[5]
+	mov.32	@x[8],@d[4]
+	 mov	$D3,@K[6]
+	lsr	@x[9],@d[4],#32
+	 mov	$C0,@K[2]
+	mov.32	@x[10],@d[5]
+	 mov	$C1,@K[2]
+	lsr	@x[11],@d[5],#32
+	 add	$D4,$D0,$ONE			// +4
+	mov.32	@x[12],@d[6]
+	 add	$D5,$D1,$ONE			// +4
+	lsr	@x[13],@d[6],#32
+	 mov	$C2,@K[2]
+	mov.32	@x[14],@d[7]
+	 mov	$C3,@K[2]
+	lsr	@x[15],@d[7],#32
+	 mov	$C4,@K[2]
+	 stp	@K[3],@K[4],[sp,#48]		// off-load key block, variable part
+	 mov	$C5,@K[2]
+	 str	@K[5],[sp,#80]
+
+	mov	$ctr,#5
+	subs	$len,$len,#512
+.Loop_upper_neon:
+	sub	$ctr,$ctr,#1
+___
+	my @thread0=&NEONROUND($A0,$B0,$C0,$D0,$T0,0);
+	my @thread1=&NEONROUND($A1,$B1,$C1,$D1,$T1,0);
+	my @thread2=&NEONROUND($A2,$B2,$C2,$D2,$T2,0);
+	my @thread3=&NEONROUND($A3,$B3,$C3,$D3,$T3,0);
+	my @thread4=&NEONROUND($A4,$B4,$C4,$D4,$T4,0);
+	my @thread5=&NEONROUND($A5,$B5,$C5,$D5,$T5,0);
+	my @thread67=(&ROUND(0,4,8,12),&ROUND(0,5,10,15));
+	my $diff = ($#thread0+1)*6 - $#thread67 - 1;
+	my $i = 0;
+
+	foreach (@thread0) {
+		eval;			eval(shift(@thread67));
+		eval(shift(@thread1));	eval(shift(@thread67));
+		eval(shift(@thread2));	eval(shift(@thread67));
+		eval(shift(@thread3));	eval(shift(@thread67));
+		eval(shift(@thread4));	eval(shift(@thread67));
+		eval(shift(@thread5));	eval(shift(@thread67));
+	}
+
+	@thread0=&NEONROUND($A0,$B0,$C0,$D0,$T0,1);
+	@thread1=&NEONROUND($A1,$B1,$C1,$D1,$T1,1);
+	@thread2=&NEONROUND($A2,$B2,$C2,$D2,$T2,1);
+	@thread3=&NEONROUND($A3,$B3,$C3,$D3,$T3,1);
+	@thread4=&NEONROUND($A4,$B4,$C4,$D4,$T4,1);
+	@thread5=&NEONROUND($A5,$B5,$C5,$D5,$T5,1);
+	@thread67=(&ROUND(0,4,8,12),&ROUND(0,5,10,15));
+
+	foreach (@thread0) {
+		eval;			eval(shift(@thread67));
+		eval(shift(@thread1));	eval(shift(@thread67));
+		eval(shift(@thread2));	eval(shift(@thread67));
+		eval(shift(@thread3));	eval(shift(@thread67));
+		eval(shift(@thread4));	eval(shift(@thread67));
+		eval(shift(@thread5));	eval(shift(@thread67));
+	}
+$code.=<<___;
+	cbnz	$ctr,.Loop_upper_neon
+
+	add.32	@x[0],@x[0],@d[0]		// accumulate key block
+	add	@x[1],@x[1],@d[0],lsr#32
+	add.32	@x[2],@x[2],@d[1]
+	add	@x[3],@x[3],@d[1],lsr#32
+	add.32	@x[4],@x[4],@d[2]
+	add	@x[5],@x[5],@d[2],lsr#32
+	add.32	@x[6],@x[6],@d[3]
+	add	@x[7],@x[7],@d[3],lsr#32
+	add.32	@x[8],@x[8],@d[4]
+	add	@x[9],@x[9],@d[4],lsr#32
+	add.32	@x[10],@x[10],@d[5]
+	add	@x[11],@x[11],@d[5],lsr#32
+	add.32	@x[12],@x[12],@d[6]
+	add	@x[13],@x[13],@d[6],lsr#32
+	add.32	@x[14],@x[14],@d[7]
+	add	@x[15],@x[15],@d[7],lsr#32
+
+	add	@x[0],@x[0],@x[1],lsl#32	// pack
+	add	@x[2],@x[2],@x[3],lsl#32
+	ldp	@x[1],@x[3],[$inp,#0]		// load input
+	add	@x[4],@x[4],@x[5],lsl#32
+	add	@x[6],@x[6],@x[7],lsl#32
+	ldp	@x[5],@x[7],[$inp,#16]
+	add	@x[8],@x[8],@x[9],lsl#32
+	add	@x[10],@x[10],@x[11],lsl#32
+	ldp	@x[9],@x[11],[$inp,#32]
+	add	@x[12],@x[12],@x[13],lsl#32
+	add	@x[14],@x[14],@x[15],lsl#32
+	ldp	@x[13],@x[15],[$inp,#48]
+	add	$inp,$inp,#64
+#ifdef	__ARMEB__
+	rev	@x[0],@x[0]
+	rev	@x[2],@x[2]
+	rev	@x[4],@x[4]
+	rev	@x[6],@x[6]
+	rev	@x[8],@x[8]
+	rev	@x[10],@x[10]
+	rev	@x[12],@x[12]
+	rev	@x[14],@x[14]
+#endif
+	eor	@x[0],@x[0],@x[1]
+	eor	@x[2],@x[2],@x[3]
+	eor	@x[4],@x[4],@x[5]
+	eor	@x[6],@x[6],@x[7]
+	eor	@x[8],@x[8],@x[9]
+	eor	@x[10],@x[10],@x[11]
+	eor	@x[12],@x[12],@x[13]
+	eor	@x[14],@x[14],@x[15]
+
+	 stp	@x[0],@x[2],[$out,#0]		// store output
+	 add	@d[6],@d[6],#1			// increment counter
+	mov.32	@x[0],@d[0]			// unpack key block
+	lsr	@x[1],@d[0],#32
+	 stp	@x[4],@x[6],[$out,#16]
+	mov.32	@x[2],@d[1]
+	lsr	@x[3],@d[1],#32
+	 stp	@x[8],@x[10],[$out,#32]
+	mov.32	@x[4],@d[2]
+	lsr	@x[5],@d[2],#32
+	 stp	@x[12],@x[14],[$out,#48]
+	 add	$out,$out,#64
+	mov.32	@x[6],@d[3]
+	lsr	@x[7],@d[3],#32
+	mov.32	@x[8],@d[4]
+	lsr	@x[9],@d[4],#32
+	mov.32	@x[10],@d[5]
+	lsr	@x[11],@d[5],#32
+	mov.32	@x[12],@d[6]
+	lsr	@x[13],@d[6],#32
+	mov.32	@x[14],@d[7]
+	lsr	@x[15],@d[7],#32
+
+	mov	$ctr,#5
+.Loop_lower_neon:
+	sub	$ctr,$ctr,#1
+___
+	@thread0=&NEONROUND($A0,$B0,$C0,$D0,$T0,0);
+	@thread1=&NEONROUND($A1,$B1,$C1,$D1,$T1,0);
+	@thread2=&NEONROUND($A2,$B2,$C2,$D2,$T2,0);
+	@thread3=&NEONROUND($A3,$B3,$C3,$D3,$T3,0);
+	@thread4=&NEONROUND($A4,$B4,$C4,$D4,$T4,0);
+	@thread5=&NEONROUND($A5,$B5,$C5,$D5,$T5,0);
+	@thread67=(&ROUND(0,4,8,12),&ROUND(0,5,10,15));
+
+	foreach (@thread0) {
+		eval;			eval(shift(@thread67));
+		eval(shift(@thread1));	eval(shift(@thread67));
+		eval(shift(@thread2));	eval(shift(@thread67));
+		eval(shift(@thread3));	eval(shift(@thread67));
+		eval(shift(@thread4));	eval(shift(@thread67));
+		eval(shift(@thread5));	eval(shift(@thread67));
+	}
+
+	@thread0=&NEONROUND($A0,$B0,$C0,$D0,$T0,1);
+	@thread1=&NEONROUND($A1,$B1,$C1,$D1,$T1,1);
+	@thread2=&NEONROUND($A2,$B2,$C2,$D2,$T2,1);
+	@thread3=&NEONROUND($A3,$B3,$C3,$D3,$T3,1);
+	@thread4=&NEONROUND($A4,$B4,$C4,$D4,$T4,1);
+	@thread5=&NEONROUND($A5,$B5,$C5,$D5,$T5,1);
+	@thread67=(&ROUND(0,4,8,12),&ROUND(0,5,10,15));
+
+	foreach (@thread0) {
+		eval;			eval(shift(@thread67));
+		eval(shift(@thread1));	eval(shift(@thread67));
+		eval(shift(@thread2));	eval(shift(@thread67));
+		eval(shift(@thread3));	eval(shift(@thread67));
+		eval(shift(@thread4));	eval(shift(@thread67));
+		eval(shift(@thread5));	eval(shift(@thread67));
+	}
+$code.=<<___;
+	cbnz	$ctr,.Loop_lower_neon
+
+	add.32	@x[0],@x[0],@d[0]		// accumulate key block
+	 ldp	@K[0],@K[1],[sp,#0]
+	add	@x[1],@x[1],@d[0],lsr#32
+	 ldp	@K[2],@K[3],[sp,#32]
+	add.32	@x[2],@x[2],@d[1]
+	 ldp	@K[4],@K[5],[sp,#64]
+	add	@x[3],@x[3],@d[1],lsr#32
+	 add	$A0,$A0,@K[0]
+	add.32	@x[4],@x[4],@d[2]
+	 add	$A1,$A1,@K[0]
+	add	@x[5],@x[5],@d[2],lsr#32
+	 add	$A2,$A2,@K[0]
+	add.32	@x[6],@x[6],@d[3]
+	 add	$A3,$A3,@K[0]
+	add	@x[7],@x[7],@d[3],lsr#32
+	 add	$A4,$A4,@K[0]
+	add.32	@x[8],@x[8],@d[4]
+	 add	$A5,$A5,@K[0]
+	add	@x[9],@x[9],@d[4],lsr#32
+	 add	$C0,$C0,@K[2]
+	add.32	@x[10],@x[10],@d[5]
+	 add	$C1,$C1,@K[2]
+	add	@x[11],@x[11],@d[5],lsr#32
+	 add	$C2,$C2,@K[2]
+	add.32	@x[12],@x[12],@d[6]
+	 add	$C3,$C3,@K[2]
+	add	@x[13],@x[13],@d[6],lsr#32
+	 add	$C4,$C4,@K[2]
+	add.32	@x[14],@x[14],@d[7]
+	 add	$C5,$C5,@K[2]
+	add	@x[15],@x[15],@d[7],lsr#32
+	 add	$D4,$D4,$ONE			// +4
+	add	@x[0],@x[0],@x[1],lsl#32	// pack
+	 add	$D5,$D5,$ONE			// +4
+	add	@x[2],@x[2],@x[3],lsl#32
+	 add	$D0,$D0,@K[3]
+	ldp	@x[1],@x[3],[$inp,#0]		// load input
+	 add	$D1,$D1,@K[4]
+	add	@x[4],@x[4],@x[5],lsl#32
+	 add	$D2,$D2,@K[5]
+	add	@x[6],@x[6],@x[7],lsl#32
+	 add	$D3,$D3,@K[6]
+	ldp	@x[5],@x[7],[$inp,#16]
+	 add	$D4,$D4,@K[3]
+	add	@x[8],@x[8],@x[9],lsl#32
+	 add	$D5,$D5,@K[4]
+	add	@x[10],@x[10],@x[11],lsl#32
+	 add	$B0,$B0,@K[1]
+	ldp	@x[9],@x[11],[$inp,#32]
+	 add	$B1,$B1,@K[1]
+	add	@x[12],@x[12],@x[13],lsl#32
+	 add	$B2,$B2,@K[1]
+	add	@x[14],@x[14],@x[15],lsl#32
+	 add	$B3,$B3,@K[1]
+	ldp	@x[13],@x[15],[$inp,#48]
+	 add	$B4,$B4,@K[1]
+	add	$inp,$inp,#64
+	 add	$B5,$B5,@K[1]
+
+#ifdef	__ARMEB__
+	rev	@x[0],@x[0]
+	rev	@x[2],@x[2]
+	rev	@x[4],@x[4]
+	rev	@x[6],@x[6]
+	rev	@x[8],@x[8]
+	rev	@x[10],@x[10]
+	rev	@x[12],@x[12]
+	rev	@x[14],@x[14]
+#endif
+	ld1.8	{$T0-$T3},[$inp],#64
+	eor	@x[0],@x[0],@x[1]
+	eor	@x[2],@x[2],@x[3]
+	eor	@x[4],@x[4],@x[5]
+	eor	@x[6],@x[6],@x[7]
+	eor	@x[8],@x[8],@x[9]
+	 eor	$A0,$A0,$T0
+	eor	@x[10],@x[10],@x[11]
+	 eor	$B0,$B0,$T1
+	eor	@x[12],@x[12],@x[13]
+	 eor	$C0,$C0,$T2
+	eor	@x[14],@x[14],@x[15]
+	 eor	$D0,$D0,$T3
+	 ld1.8	{$T0-$T3},[$inp],#64
+
+	stp	@x[0],@x[2],[$out,#0]		// store output
+	 add	@d[6],@d[6],#7			// increment counter
+	stp	@x[4],@x[6],[$out,#16]
+	stp	@x[8],@x[10],[$out,#32]
+	stp	@x[12],@x[14],[$out,#48]
+	add	$out,$out,#64
+	st1.8	{$A0-$D0},[$out],#64
+
+	ld1.8	{$A0-$D0},[$inp],#64
+	eor	$A1,$A1,$T0
+	eor	$B1,$B1,$T1
+	eor	$C1,$C1,$T2
+	eor	$D1,$D1,$T3
+	st1.8	{$A1-$D1},[$out],#64
+
+	ld1.8	{$A1-$D1},[$inp],#64
+	eor	$A2,$A2,$A0
+	 ldp	@K[0],@K[1],[sp,#0]
+	eor	$B2,$B2,$B0
+	 ldp	@K[2],@K[3],[sp,#32]
+	eor	$C2,$C2,$C0
+	eor	$D2,$D2,$D0
+	st1.8	{$A2-$D2},[$out],#64
+
+	ld1.8	{$A2-$D2},[$inp],#64
+	eor	$A3,$A3,$A1
+	eor	$B3,$B3,$B1
+	eor	$C3,$C3,$C1
+	eor	$D3,$D3,$D1
+	st1.8	{$A3-$D3},[$out],#64
+
+	ld1.8	{$A3-$D3},[$inp],#64
+	eor	$A4,$A4,$A2
+	eor	$B4,$B4,$B2
+	eor	$C4,$C4,$C2
+	eor	$D4,$D4,$D2
+	st1.8	{$A4-$D4},[$out],#64
+
+	shl	$A0,$ONE,#1			// 4 -> 8
+	eor	$A5,$A5,$A3
+	eor	$B5,$B5,$B3
+	eor	$C5,$C5,$C3
+	eor	$D5,$D5,$D3
+	st1.8	{$A5-$D5},[$out],#64
+
+	add	@K[3],@K[3],$A0			// += 8
+	add	@K[4],@K[4],$A0
+	add	@K[5],@K[5],$A0
+	add	@K[6],@K[6],$A0
+
+	b.hs	.Loop_outer_512_neon
+
+	adds	$len,$len,#512
+	ushr	$A0,$ONE,#2			// 4 -> 1
+
+	ldp	d8,d9,[sp,#128+0]		// meet ABI requirements
+	ldp	d10,d11,[sp,#128+16]
+	ldp	d12,d13,[sp,#128+32]
+	ldp	d14,d15,[sp,#128+48]
+
+	stp	@K[0],$ONE,[sp,#0]		// wipe off-load area
+	stp	@K[0],$ONE,[sp,#32]
+	stp	@K[0],$ONE,[sp,#64]
+
+	b.eq	.Ldone_512_neon
+
+	cmp	$len,#192
+	sub	@K[3],@K[3],$A0			// -= 1
+	sub	@K[4],@K[4],$A0
+	sub	@K[5],@K[5],$A0
+	add	sp,sp,#128
+	b.hs	.Loop_outer_neon
+
+	eor	@K[1],@K[1],@K[1]
+	eor	@K[2],@K[2],@K[2]
+	eor	@K[3],@K[3],@K[3]
+	eor	@K[4],@K[4],@K[4]
+	eor	@K[5],@K[5],@K[5]
+	eor	@K[6],@K[6],@K[6]
+	b	.Loop_outer
+
+.Ldone_512_neon:
+	ldp	x19,x20,[x29,#16]
+	add	sp,sp,#128+64
+	ldp	x21,x22,[x29,#32]
+	ldp	x23,x24,[x29,#48]
+	ldp	x25,x26,[x29,#64]
+	ldp	x27,x28,[x29,#80]
+	ldp	x29,x30,[sp],#96
+	.inst	0xd50323bf			// autiasp
+	ret
+.size	ChaCha20_512_neon,.-ChaCha20_512_neon
+___
+}
+}}}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/geo;
+
+	(s/\b([a-z]+)\.32\b/$1/ and (s/x([0-9]+)/w$1/g or 1))	or
+	(m/\b(eor|ext|mov)\b/ and (s/\.4s/\.16b/g or 1))	or
+	(s/\b((?:ld|st)1)\.8\b/$1/ and (s/\.4s/\.16b/g or 1))	or
+	(m/\b(ld|st)[rp]\b/ and (s/v([0-9]+)\.4s/q$1/g or 1))	or
+	(s/\brev32\.16\b/rev32/ and (s/\.4s/\.8h/g or 1));
+
+	#s/\bq([0-9]+)#(lo|hi)/sprintf "d%d",2*$1+($2 eq "hi")/geo;
+
+	print $_,"\n";
+}
+close STDOUT;	# flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-c64xplus.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-c64xplus.pl
new file mode 100755
index 000000000..266401eb1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-c64xplus.pl
@@ -0,0 +1,926 @@
+#! /usr/bin/env perl
+# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# ChaCha20 for C64x+.
+#
+# October 2015
+#
+# Performance is 3.54 cycles per processed byte, which is ~4.3 times
+# faster than code generated by TI compiler. Compiler also disables
+# interrupts for some reason, thus making interrupt response time
+# dependent on input length. This module on the other hand is free
+# from such limitation.
+
+$output=pop;
+open STDOUT,">$output";
+
+($OUT,$INP,$LEN,$KEYB,$COUNTERA)=("A4","B4","A6","B6","A8");
+($KEYA,$COUNTERB,$STEP)=("A7","B7","A3");
+
+@X=  ("A16","B16","A17","B17","A18","B18","A19","B19",
+      "A20","B20","A21","B21","A22","B22","A23","B23");
+@Y=  ("A24","B24","A25","B25","A26","B26","A27","B27",
+      "A28","B28","A29","B29","A30","B30","A31","B31");
+@DAT=("A6", "A7", "B6", "B7", "A8", "A9", "B8", "B9",
+      "A10","A11","B10","B11","A12","A13","B12","B13");
+
+# yes, overlaps with @DAT, used only in 2x interleave code path...
+@K2x=("A6", "B6", "A7", "B7", "A8", "B8", "A9", "B9",
+      "A10","B10","A11","B11","A2", "B2", "A13","B13");
+
+$code.=<<___;
+	.text
+
+	.if	.ASSEMBLER_VERSION<7000000
+	.asg	0,__TI_EABI__
+	.endif
+	.if	__TI_EABI__
+	.asg	ChaCha20_ctr32,_ChaCha20_ctr32
+	.endif
+
+	.asg	B3,RA
+	.asg	A15,FP
+	.asg	B15,SP
+
+	.global	_ChaCha20_ctr32
+	.align	32
+_ChaCha20_ctr32:
+	.asmfunc	stack_usage(40+64)
+	MV	$LEN,A0			; reassign
+  [!A0]	BNOP	RA			; no data
+|| [A0]	STW	FP,*SP--(40+64)		; save frame pointer and alloca(40+64)
+|| [A0]	MV	SP,FP
+   [A0]	STDW	B13:B12,*SP[4+8]	; ABI says so
+|| [A0]	MV	$KEYB,$KEYA
+|| [A0]	MV	$COUNTERA,$COUNTERB
+   [A0]	STDW	B11:B10,*SP[3+8]
+|| [A0]	STDW	A13:A12,*FP[-3]
+   [A0]	STDW	A11:A10,*FP[-4]
+|| [A0]	MVK	128,$STEP		; 2 * input block size
+
+   [A0]	LDW	*${KEYA}[0],@Y[4]	; load key
+|| [A0]	LDW	*${KEYB}[1],@Y[5]
+|| [A0]	MVK	0x00007865,@Y[0]	; synthesize sigma
+|| [A0]	MVK	0x0000646e,@Y[1]
+   [A0]	LDW	*${KEYA}[2],@Y[6]
+|| [A0]	LDW	*${KEYB}[3],@Y[7]
+|| [A0]	MVKH	0x61700000,@Y[0]
+|| [A0]	MVKH	0x33200000,@Y[1]
+	LDW	*${KEYA}[4],@Y[8]
+||	LDW	*${KEYB}[5],@Y[9]
+||	MVK	0x00002d32,@Y[2]
+||	MVK	0x00006574,@Y[3]
+	LDW	*${KEYA}[6],@Y[10]
+||	LDW	*${KEYB}[7],@Y[11]
+||	MVKH	0x79620000,@Y[2]
+||	MVKH	0x6b200000,@Y[3]
+	LDW	*${COUNTERA}[0],@Y[12]	; load counter||nonce
+||	LDW	*${COUNTERB}[1],@Y[13]
+||	CMPLTU	A0,$STEP,A1		; is length < 2*blocks?
+	LDW	*${COUNTERA}[2],@Y[14]
+||	LDW	*${COUNTERB}[3],@Y[15]
+|| [A1]	BNOP	top1x?
+   [A1]	MVK	64,$STEP		; input block size
+||	MVK	10,B0			; inner loop counter
+
+	DMV	@Y[2],@Y[0],@X[2]:@X[0]	; copy block
+||	DMV	@Y[3],@Y[1],@X[3]:@X[1]
+||[!A1]	STDW	@Y[2]:@Y[0],*FP[-12]	; offload key material to stack
+||[!A1]	STDW	@Y[3]:@Y[1],*SP[2]
+	DMV	@Y[6],@Y[4],@X[6]:@X[4]
+||	DMV	@Y[7],@Y[5],@X[7]:@X[5]
+||[!A1]	STDW	@Y[6]:@Y[4],*FP[-10]
+||[!A1]	STDW	@Y[7]:@Y[5],*SP[4]
+	DMV	@Y[10],@Y[8],@X[10]:@X[8]
+||	DMV	@Y[11],@Y[9],@X[11]:@X[9]
+||[!A1]	STDW	@Y[10]:@Y[8],*FP[-8]
+||[!A1]	STDW	@Y[11]:@Y[9],*SP[6]
+	DMV	@Y[14],@Y[12],@X[14]:@X[12]
+||	DMV	@Y[15],@Y[13],@X[15]:@X[13]
+||[!A1]	MV	@Y[12],@K2x[12]		; counter
+||[!A1]	MV	@Y[13],@K2x[13]
+||[!A1]	STW	@Y[14],*FP[-6*2]
+||[!A1]	STW	@Y[15],*SP[8*2]
+___
+{	################################################################
+	# 2x interleave gives 50% performance improvement
+	#
+my ($a0,$a1,$a2,$a3) = (0..3);
+my ($b0,$b1,$b2,$b3) = (4..7);
+my ($c0,$c1,$c2,$c3) = (8..11);
+my ($d0,$d1,$d2,$d3) = (12..15);
+
+$code.=<<___;
+outer2x?:
+	ADD	@X[$b1],@X[$a1],@X[$a1]
+||	ADD	@X[$b2],@X[$a2],@X[$a2]
+||	ADD	@X[$b0],@X[$a0],@X[$a0]
+||	ADD	@X[$b3],@X[$a3],@X[$a3]
+||	 DMV	@Y[2],@Y[0],@K2x[2]:@K2x[0]
+||	 DMV	@Y[3],@Y[1],@K2x[3]:@K2x[1]
+	XOR	@X[$a1],@X[$d1],@X[$d1]
+||	XOR	@X[$a2],@X[$d2],@X[$d2]
+||	XOR	@X[$a0],@X[$d0],@X[$d0]
+||	XOR	@X[$a3],@X[$d3],@X[$d3]
+||	 DMV	@Y[6],@Y[4],@K2x[6]:@K2x[4]
+||	 DMV	@Y[7],@Y[5],@K2x[7]:@K2x[5]
+	SWAP2	@X[$d1],@X[$d1]		; rotate by 16
+||	SWAP2	@X[$d2],@X[$d2]
+||	SWAP2	@X[$d0],@X[$d0]
+||	SWAP2	@X[$d3],@X[$d3]
+
+	ADD	@X[$d1],@X[$c1],@X[$c1]
+||	ADD	@X[$d2],@X[$c2],@X[$c2]
+||	ADD	@X[$d0],@X[$c0],@X[$c0]
+||	ADD	@X[$d3],@X[$c3],@X[$c3]
+||	 DMV	@Y[10],@Y[8],@K2x[10]:@K2x[8]
+||	 DMV	@Y[11],@Y[9],@K2x[11]:@K2x[9]
+	XOR	@X[$c1],@X[$b1],@X[$b1]
+||	XOR	@X[$c2],@X[$b2],@X[$b2]
+||	XOR	@X[$c0],@X[$b0],@X[$b0]
+||	XOR	@X[$c3],@X[$b3],@X[$b3]
+||	 ADD	1,@Y[12],@Y[12]		; adjust counter for 2nd block
+	ROTL	@X[$b1],12,@X[$b1]
+||	ROTL	@X[$b2],12,@X[$b2]
+||	 MV	@Y[14],@K2x[14]
+||	 MV	@Y[15],@K2x[15]
+top2x?:
+	ROTL	@X[$b0],12,@X[$b0]
+||	ROTL	@X[$b3],12,@X[$b3]
+||	 ADD	@Y[$b1],@Y[$a1],@Y[$a1]
+||	 ADD	@Y[$b2],@Y[$a2],@Y[$a2]
+	 ADD	@Y[$b0],@Y[$a0],@Y[$a0]
+||	 ADD	@Y[$b3],@Y[$a3],@Y[$a3]
+
+||	ADD	@X[$b1],@X[$a1],@X[$a1]
+||	ADD	@X[$b2],@X[$a2],@X[$a2]
+||	 XOR	@Y[$a1],@Y[$d1],@Y[$d1]
+||	 XOR	@Y[$a2],@Y[$d2],@Y[$d2]
+	 XOR	@Y[$a0],@Y[$d0],@Y[$d0]
+||	 XOR	@Y[$a3],@Y[$d3],@Y[$d3]
+||	ADD	@X[$b0],@X[$a0],@X[$a0]
+||	ADD	@X[$b3],@X[$a3],@X[$a3]
+||	XOR	@X[$a1],@X[$d1],@X[$d1]
+||	XOR	@X[$a2],@X[$d2],@X[$d2]
+	XOR	@X[$a0],@X[$d0],@X[$d0]
+||	XOR	@X[$a3],@X[$d3],@X[$d3]
+||	ROTL	@X[$d1],8,@X[$d1]
+||	ROTL	@X[$d2],8,@X[$d2]
+||	 SWAP2	@Y[$d1],@Y[$d1]		; rotate by 16
+||	 SWAP2	@Y[$d2],@Y[$d2]
+||	 SWAP2	@Y[$d0],@Y[$d0]
+||	 SWAP2	@Y[$d3],@Y[$d3]
+	ROTL	@X[$d0],8,@X[$d0]
+||	ROTL	@X[$d3],8,@X[$d3]
+||	 ADD	@Y[$d1],@Y[$c1],@Y[$c1]
+||	 ADD	@Y[$d2],@Y[$c2],@Y[$c2]
+||	 ADD	@Y[$d0],@Y[$c0],@Y[$c0]
+||	 ADD	@Y[$d3],@Y[$c3],@Y[$c3]
+||	BNOP	middle2x1?		; protect from interrupt
+
+	ADD	@X[$d1],@X[$c1],@X[$c1]
+||	ADD	@X[$d2],@X[$c2],@X[$c2]
+||	 XOR	@Y[$c1],@Y[$b1],@Y[$b1]
+||	 XOR	@Y[$c2],@Y[$b2],@Y[$b2]
+||	 XOR	@Y[$c0],@Y[$b0],@Y[$b0]
+||	 XOR	@Y[$c3],@Y[$b3],@Y[$b3]
+	ADD	@X[$d0],@X[$c0],@X[$c0]
+||	ADD	@X[$d3],@X[$c3],@X[$c3]
+||	XOR	@X[$c1],@X[$b1],@X[$b1]
+||	XOR	@X[$c2],@X[$b2],@X[$b2]
+||	ROTL	@X[$d1],0,@X[$d2]	; moved to avoid cross-path stall
+||	ROTL	@X[$d2],0,@X[$d3]
+	XOR	@X[$c0],@X[$b0],@X[$b0]
+||	XOR	@X[$c3],@X[$b3],@X[$b3]
+||	MV	@X[$d0],@X[$d1]
+||	MV	@X[$d3],@X[$d0]
+||	 ROTL	@Y[$b1],12,@Y[$b1]
+||	 ROTL	@Y[$b2],12,@Y[$b2]
+	ROTL	@X[$b1],7,@X[$b0]	; avoided cross-path stall
+||	ROTL	@X[$b2],7,@X[$b1]
+	ROTL	@X[$b0],7,@X[$b3]
+||	ROTL	@X[$b3],7,@X[$b2]
+middle2x1?:
+
+	 ROTL	@Y[$b0],12,@Y[$b0]
+||	 ROTL	@Y[$b3],12,@Y[$b3]
+||	ADD	@X[$b0],@X[$a0],@X[$a0]
+||	ADD	@X[$b1],@X[$a1],@X[$a1]
+	ADD	@X[$b2],@X[$a2],@X[$a2]
+||	ADD	@X[$b3],@X[$a3],@X[$a3]
+
+||	 ADD	@Y[$b1],@Y[$a1],@Y[$a1]
+||	 ADD	@Y[$b2],@Y[$a2],@Y[$a2]
+||	XOR	@X[$a0],@X[$d0],@X[$d0]
+||	XOR	@X[$a1],@X[$d1],@X[$d1]
+	XOR	@X[$a2],@X[$d2],@X[$d2]
+||	XOR	@X[$a3],@X[$d3],@X[$d3]
+||	 ADD	@Y[$b0],@Y[$a0],@Y[$a0]
+||	 ADD	@Y[$b3],@Y[$a3],@Y[$a3]
+||	 XOR	@Y[$a1],@Y[$d1],@Y[$d1]
+||	 XOR	@Y[$a2],@Y[$d2],@Y[$d2]
+	 XOR	@Y[$a0],@Y[$d0],@Y[$d0]
+||	 XOR	@Y[$a3],@Y[$d3],@Y[$d3]
+||	 ROTL	@Y[$d1],8,@Y[$d1]
+||	 ROTL	@Y[$d2],8,@Y[$d2]
+||	SWAP2	@X[$d0],@X[$d0]		; rotate by 16
+||	SWAP2	@X[$d1],@X[$d1]
+||	SWAP2	@X[$d2],@X[$d2]
+||	SWAP2	@X[$d3],@X[$d3]
+	 ROTL	@Y[$d0],8,@Y[$d0]
+||	 ROTL	@Y[$d3],8,@Y[$d3]
+||	ADD	@X[$d0],@X[$c2],@X[$c2]
+||	ADD	@X[$d1],@X[$c3],@X[$c3]
+||	ADD	@X[$d2],@X[$c0],@X[$c0]
+||	ADD	@X[$d3],@X[$c1],@X[$c1]
+||	BNOP	middle2x2?		; protect from interrupt
+
+	 ADD	@Y[$d1],@Y[$c1],@Y[$c1]
+||	 ADD	@Y[$d2],@Y[$c2],@Y[$c2]
+||	XOR	@X[$c2],@X[$b0],@X[$b0]
+||	XOR	@X[$c3],@X[$b1],@X[$b1]
+||	XOR	@X[$c0],@X[$b2],@X[$b2]
+||	XOR	@X[$c1],@X[$b3],@X[$b3]
+	 ADD	@Y[$d0],@Y[$c0],@Y[$c0]
+||	 ADD	@Y[$d3],@Y[$c3],@Y[$c3]
+||	 XOR	@Y[$c1],@Y[$b1],@Y[$b1]
+||	 XOR	@Y[$c2],@Y[$b2],@Y[$b2]
+||	 ROTL	@Y[$d1],0,@Y[$d2]	; moved to avoid cross-path stall
+||	 ROTL	@Y[$d2],0,@Y[$d3]
+	 XOR	@Y[$c0],@Y[$b0],@Y[$b0]
+||	 XOR	@Y[$c3],@Y[$b3],@Y[$b3]
+||	 MV	@Y[$d0],@Y[$d1]
+||	 MV	@Y[$d3],@Y[$d0]
+||	ROTL	@X[$b0],12,@X[$b0]
+||	ROTL	@X[$b1],12,@X[$b1]
+	 ROTL	@Y[$b1],7,@Y[$b0]	; avoided cross-path stall
+||	 ROTL	@Y[$b2],7,@Y[$b1]
+	 ROTL	@Y[$b0],7,@Y[$b3]
+||	 ROTL	@Y[$b3],7,@Y[$b2]
+middle2x2?:
+
+	ROTL	@X[$b2],12,@X[$b2]
+||	ROTL	@X[$b3],12,@X[$b3]
+||	 ADD	@Y[$b0],@Y[$a0],@Y[$a0]
+||	 ADD	@Y[$b1],@Y[$a1],@Y[$a1]
+	 ADD	@Y[$b2],@Y[$a2],@Y[$a2]
+||	 ADD	@Y[$b3],@Y[$a3],@Y[$a3]
+
+||	ADD	@X[$b0],@X[$a0],@X[$a0]
+||	ADD	@X[$b1],@X[$a1],@X[$a1]
+||	 XOR	@Y[$a0],@Y[$d0],@Y[$d0]
+||	 XOR	@Y[$a1],@Y[$d1],@Y[$d1]
+	 XOR	@Y[$a2],@Y[$d2],@Y[$d2]
+||	 XOR	@Y[$a3],@Y[$d3],@Y[$d3]
+||	ADD	@X[$b2],@X[$a2],@X[$a2]
+||	ADD	@X[$b3],@X[$a3],@X[$a3]
+||	XOR	@X[$a0],@X[$d0],@X[$d0]
+||	XOR	@X[$a1],@X[$d1],@X[$d1]
+	XOR	@X[$a2],@X[$d2],@X[$d2]
+||	XOR	@X[$a3],@X[$d3],@X[$d3]
+||	ROTL	@X[$d0],8,@X[$d0]
+||	ROTL	@X[$d1],8,@X[$d1]
+||	 SWAP2	@Y[$d0],@Y[$d0]		; rotate by 16
+||	 SWAP2	@Y[$d1],@Y[$d1]
+||	 SWAP2	@Y[$d2],@Y[$d2]
+||	 SWAP2	@Y[$d3],@Y[$d3]
+	ROTL	@X[$d2],8,@X[$d2]
+||	ROTL	@X[$d3],8,@X[$d3]
+||	 ADD	@Y[$d0],@Y[$c2],@Y[$c2]
+||	 ADD	@Y[$d1],@Y[$c3],@Y[$c3]
+||	 ADD	@Y[$d2],@Y[$c0],@Y[$c0]
+||	 ADD	@Y[$d3],@Y[$c1],@Y[$c1]
+||	BNOP	bottom2x1?		; protect from interrupt
+
+	ADD	@X[$d0],@X[$c2],@X[$c2]
+||	ADD	@X[$d1],@X[$c3],@X[$c3]
+||	 XOR	@Y[$c2],@Y[$b0],@Y[$b0]
+||	 XOR	@Y[$c3],@Y[$b1],@Y[$b1]
+||	 XOR	@Y[$c0],@Y[$b2],@Y[$b2]
+||	 XOR	@Y[$c1],@Y[$b3],@Y[$b3]
+	ADD	@X[$d2],@X[$c0],@X[$c0]
+||	ADD	@X[$d3],@X[$c1],@X[$c1]
+||	XOR	@X[$c2],@X[$b0],@X[$b0]
+||	XOR	@X[$c3],@X[$b1],@X[$b1]
+||	ROTL	@X[$d0],0,@X[$d3]	; moved to avoid cross-path stall
+||	ROTL	@X[$d1],0,@X[$d0]
+	XOR	@X[$c0],@X[$b2],@X[$b2]
+||	XOR	@X[$c1],@X[$b3],@X[$b3]
+||	MV	@X[$d2],@X[$d1]
+||	MV	@X[$d3],@X[$d2]
+||	 ROTL	@Y[$b0],12,@Y[$b0]
+||	 ROTL	@Y[$b1],12,@Y[$b1]
+	ROTL	@X[$b0],7,@X[$b1]	; avoided cross-path stall
+||	ROTL	@X[$b1],7,@X[$b2]
+	ROTL	@X[$b2],7,@X[$b3]
+||	ROTL	@X[$b3],7,@X[$b0]
+|| [B0]	SUB	B0,1,B0			; decrement inner loop counter
+bottom2x1?:
+
+	 ROTL	@Y[$b2],12,@Y[$b2]
+||	 ROTL	@Y[$b3],12,@Y[$b3]
+|| [B0]	ADD	@X[$b1],@X[$a1],@X[$a1]	; modulo-scheduled
+|| [B0]	ADD	@X[$b2],@X[$a2],@X[$a2]
+   [B0]	ADD	@X[$b0],@X[$a0],@X[$a0]
+|| [B0]	ADD	@X[$b3],@X[$a3],@X[$a3]
+
+||	 ADD	@Y[$b0],@Y[$a0],@Y[$a0]
+||	 ADD	@Y[$b1],@Y[$a1],@Y[$a1]
+|| [B0]	XOR	@X[$a1],@X[$d1],@X[$d1]
+|| [B0]	XOR	@X[$a2],@X[$d2],@X[$d2]
+   [B0]	XOR	@X[$a0],@X[$d0],@X[$d0]
+|| [B0]	XOR	@X[$a3],@X[$d3],@X[$d3]
+||	 ADD	@Y[$b2],@Y[$a2],@Y[$a2]
+||	 ADD	@Y[$b3],@Y[$a3],@Y[$a3]
+||	 XOR	@Y[$a0],@Y[$d0],@Y[$d0]
+||	 XOR	@Y[$a1],@Y[$d1],@Y[$d1]
+	 XOR	@Y[$a2],@Y[$d2],@Y[$d2]
+||	 XOR	@Y[$a3],@Y[$d3],@Y[$d3]
+||	 ROTL	@Y[$d0],8,@Y[$d0]
+||	 ROTL	@Y[$d1],8,@Y[$d1]
+|| [B0]	SWAP2	@X[$d1],@X[$d1]		; rotate by 16
+|| [B0]	SWAP2	@X[$d2],@X[$d2]
+|| [B0]	SWAP2	@X[$d0],@X[$d0]
+|| [B0]	SWAP2	@X[$d3],@X[$d3]
+	 ROTL	@Y[$d2],8,@Y[$d2]
+||	 ROTL	@Y[$d3],8,@Y[$d3]
+|| [B0]	ADD	@X[$d1],@X[$c1],@X[$c1]
+|| [B0]	ADD	@X[$d2],@X[$c2],@X[$c2]
+|| [B0]	ADD	@X[$d0],@X[$c0],@X[$c0]
+|| [B0]	ADD	@X[$d3],@X[$c3],@X[$c3]
+|| [B0]	BNOP	top2x?			; even protects from interrupt
+
+	 ADD	@Y[$d0],@Y[$c2],@Y[$c2]
+||	 ADD	@Y[$d1],@Y[$c3],@Y[$c3]
+|| [B0]	XOR	@X[$c1],@X[$b1],@X[$b1]
+|| [B0]	XOR	@X[$c2],@X[$b2],@X[$b2]
+|| [B0]	XOR	@X[$c0],@X[$b0],@X[$b0]
+|| [B0]	XOR	@X[$c3],@X[$b3],@X[$b3]
+	 ADD	@Y[$d2],@Y[$c0],@Y[$c0]
+||	 ADD	@Y[$d3],@Y[$c1],@Y[$c1]
+||	 XOR	@Y[$c2],@Y[$b0],@Y[$b0]
+||	 XOR	@Y[$c3],@Y[$b1],@Y[$b1]
+||	 ROTL	@Y[$d0],0,@Y[$d3]	; moved to avoid cross-path stall
+||	 ROTL	@Y[$d1],0,@Y[$d0]
+	 XOR	@Y[$c0],@Y[$b2],@Y[$b2]
+||	 XOR	@Y[$c1],@Y[$b3],@Y[$b3]
+||	 MV	@Y[$d2],@Y[$d1]
+||	 MV	@Y[$d3],@Y[$d2]
+|| [B0]	ROTL	@X[$b1],12,@X[$b1]
+|| [B0]	ROTL	@X[$b2],12,@X[$b2]
+	 ROTL	@Y[$b0],7,@Y[$b1]	; avoided cross-path stall
+||	 ROTL	@Y[$b1],7,@Y[$b2]
+	 ROTL	@Y[$b2],7,@Y[$b3]
+||	 ROTL	@Y[$b3],7,@Y[$b0]
+bottom2x2?:
+___
+}
+
+$code.=<<___;
+	ADD	@K2x[0],@X[0],@X[0]	; accumulate key material
+||	ADD	@K2x[1],@X[1],@X[1]
+||	ADD	@K2x[2],@X[2],@X[2]
+||	ADD	@K2x[3],@X[3],@X[3]
+	 ADD	@K2x[0],@Y[0],@Y[0]
+||	 ADD	@K2x[1],@Y[1],@Y[1]
+||	 ADD	@K2x[2],@Y[2],@Y[2]
+||	 ADD	@K2x[3],@Y[3],@Y[3]
+||	LDNDW	*${INP}++[8],@DAT[1]:@DAT[0]
+	ADD	@K2x[4],@X[4],@X[4]
+||	ADD	@K2x[5],@X[5],@X[5]
+||	ADD	@K2x[6],@X[6],@X[6]
+||	ADD	@K2x[7],@X[7],@X[7]
+||	LDNDW	*${INP}[-7],@DAT[3]:@DAT[2]
+	 ADD	@K2x[4],@Y[4],@Y[4]
+||	 ADD	@K2x[5],@Y[5],@Y[5]
+||	 ADD	@K2x[6],@Y[6],@Y[6]
+||	 ADD	@K2x[7],@Y[7],@Y[7]
+||	LDNDW	*${INP}[-6],@DAT[5]:@DAT[4]
+	ADD	@K2x[8],@X[8],@X[8]
+||	ADD	@K2x[9],@X[9],@X[9]
+||	ADD	@K2x[10],@X[10],@X[10]
+||	ADD	@K2x[11],@X[11],@X[11]
+||	LDNDW	*${INP}[-5],@DAT[7]:@DAT[6]
+	 ADD	@K2x[8],@Y[8],@Y[8]
+||	 ADD	@K2x[9],@Y[9],@Y[9]
+||	 ADD	@K2x[10],@Y[10],@Y[10]
+||	 ADD	@K2x[11],@Y[11],@Y[11]
+||	LDNDW	*${INP}[-4],@DAT[9]:@DAT[8]
+	ADD	@K2x[12],@X[12],@X[12]
+||	ADD	@K2x[13],@X[13],@X[13]
+||	ADD	@K2x[14],@X[14],@X[14]
+||	ADD	@K2x[15],@X[15],@X[15]
+||	LDNDW	*${INP}[-3],@DAT[11]:@DAT[10]
+	 ADD	@K2x[12],@Y[12],@Y[12]
+||	 ADD	@K2x[13],@Y[13],@Y[13]
+||	 ADD	@K2x[14],@Y[14],@Y[14]
+||	 ADD	@K2x[15],@Y[15],@Y[15]
+||	LDNDW	*${INP}[-2],@DAT[13]:@DAT[12]
+	 ADD	1,@Y[12],@Y[12]		; adjust counter for 2nd block
+||	ADD	2,@K2x[12],@K2x[12]	; increment counter
+||	LDNDW	*${INP}[-1],@DAT[15]:@DAT[14]
+
+	.if	.BIG_ENDIAN
+	SWAP2	@X[0],@X[0]
+||	SWAP2	@X[1],@X[1]
+||	SWAP2	@X[2],@X[2]
+||	SWAP2	@X[3],@X[3]
+	SWAP2	@X[4],@X[4]
+||	SWAP2	@X[5],@X[5]
+||	SWAP2	@X[6],@X[6]
+||	SWAP2	@X[7],@X[7]
+	SWAP2	@X[8],@X[8]
+||	SWAP2	@X[9],@X[9]
+||	SWAP4	@X[0],@X[1]
+||	SWAP4	@X[1],@X[0]
+	SWAP2	@X[10],@X[10]
+||	SWAP2	@X[11],@X[11]
+||	SWAP4	@X[2],@X[3]
+||	SWAP4	@X[3],@X[2]
+	SWAP2	@X[12],@X[12]
+||	SWAP2	@X[13],@X[13]
+||	SWAP4	@X[4],@X[5]
+||	SWAP4	@X[5],@X[4]
+	SWAP2	@X[14],@X[14]
+||	SWAP2	@X[15],@X[15]
+||	SWAP4	@X[6],@X[7]
+||	SWAP4	@X[7],@X[6]
+	SWAP4	@X[8],@X[9]
+||	SWAP4	@X[9],@X[8]
+||	 SWAP2	@Y[0],@Y[0]
+||	 SWAP2	@Y[1],@Y[1]
+	SWAP4	@X[10],@X[11]
+||	SWAP4	@X[11],@X[10]
+||	 SWAP2	@Y[2],@Y[2]
+||	 SWAP2	@Y[3],@Y[3]
+	SWAP4	@X[12],@X[13]
+||	SWAP4	@X[13],@X[12]
+||	 SWAP2	@Y[4],@Y[4]
+||	 SWAP2	@Y[5],@Y[5]
+	SWAP4	@X[14],@X[15]
+||	SWAP4	@X[15],@X[14]
+||	 SWAP2	@Y[6],@Y[6]
+||	 SWAP2	@Y[7],@Y[7]
+	 SWAP2	@Y[8],@Y[8]
+||	 SWAP2	@Y[9],@Y[9]
+||	 SWAP4	@Y[0],@Y[1]
+||	 SWAP4	@Y[1],@Y[0]
+	 SWAP2	@Y[10],@Y[10]
+||	 SWAP2	@Y[11],@Y[11]
+||	 SWAP4	@Y[2],@Y[3]
+||	 SWAP4	@Y[3],@Y[2]
+	 SWAP2	@Y[12],@Y[12]
+||	 SWAP2	@Y[13],@Y[13]
+||	 SWAP4	@Y[4],@Y[5]
+||	 SWAP4	@Y[5],@Y[4]
+	 SWAP2	@Y[14],@Y[14]
+||	 SWAP2	@Y[15],@Y[15]
+||	 SWAP4	@Y[6],@Y[7]
+||	 SWAP4	@Y[7],@Y[6]
+	 SWAP4	@Y[8],@Y[9]
+||	 SWAP4	@Y[9],@Y[8]
+	 SWAP4	@Y[10],@Y[11]
+||	 SWAP4	@Y[11],@Y[10]
+	 SWAP4	@Y[12],@Y[13]
+||	 SWAP4	@Y[13],@Y[12]
+	 SWAP4	@Y[14],@Y[15]
+||	 SWAP4	@Y[15],@Y[14]
+	.endif
+
+	XOR	@DAT[0],@X[0],@X[0]	; xor 1st block
+||	XOR	@DAT[3],@X[3],@X[3]
+||	XOR	@DAT[2],@X[2],@X[1]
+||	XOR	@DAT[1],@X[1],@X[2]
+||	LDNDW	*${INP}++[8],@DAT[1]:@DAT[0]
+	XOR	@DAT[4],@X[4],@X[4]
+||	XOR	@DAT[7],@X[7],@X[7]
+||	LDNDW	*${INP}[-7],@DAT[3]:@DAT[2]
+	XOR	@DAT[6],@X[6],@X[5]
+||	XOR	@DAT[5],@X[5],@X[6]
+||	LDNDW	*${INP}[-6],@DAT[5]:@DAT[4]
+	XOR	@DAT[8],@X[8],@X[8]
+||	XOR	@DAT[11],@X[11],@X[11]
+||	LDNDW	*${INP}[-5],@DAT[7]:@DAT[6]
+	XOR	@DAT[10],@X[10],@X[9]
+||	XOR	@DAT[9],@X[9],@X[10]
+||	LDNDW	*${INP}[-4],@DAT[9]:@DAT[8]
+	XOR	@DAT[12],@X[12],@X[12]
+||	XOR	@DAT[15],@X[15],@X[15]
+||	LDNDW	*${INP}[-3],@DAT[11]:@DAT[10]
+	XOR	@DAT[14],@X[14],@X[13]
+||	XOR	@DAT[13],@X[13],@X[14]
+||	LDNDW	*${INP}[-2],@DAT[13]:@DAT[12]
+   [A0]	SUB	A0,$STEP,A0		; SUB	A0,128,A0
+||	LDNDW	*${INP}[-1],@DAT[15]:@DAT[14]
+
+	XOR	@Y[0],@DAT[0],@DAT[0]	; xor 2nd block
+||	XOR	@Y[1],@DAT[1],@DAT[1]
+||	STNDW	@X[2]:@X[0],*${OUT}++[8]
+	XOR	@Y[2],@DAT[2],@DAT[2]
+||	XOR	@Y[3],@DAT[3],@DAT[3]
+||	STNDW	@X[3]:@X[1],*${OUT}[-7]
+	XOR	@Y[4],@DAT[4],@DAT[4]
+|| [A0]	LDDW	*FP[-12],@X[2]:@X[0]	; re-load key material from stack
+|| [A0]	LDDW	*SP[2],  @X[3]:@X[1]
+	XOR	@Y[5],@DAT[5],@DAT[5]
+||	STNDW	@X[6]:@X[4],*${OUT}[-6]
+	XOR	@Y[6],@DAT[6],@DAT[6]
+||	XOR	@Y[7],@DAT[7],@DAT[7]
+||	STNDW	@X[7]:@X[5],*${OUT}[-5]
+	XOR	@Y[8],@DAT[8],@DAT[8]
+|| [A0]	LDDW	*FP[-10],@X[6]:@X[4]
+|| [A0]	LDDW	*SP[4],  @X[7]:@X[5]
+	XOR	@Y[9],@DAT[9],@DAT[9]
+||	STNDW	@X[10]:@X[8],*${OUT}[-4]
+	XOR	@Y[10],@DAT[10],@DAT[10]
+||	XOR	@Y[11],@DAT[11],@DAT[11]
+||	STNDW	@X[11]:@X[9],*${OUT}[-3]
+	XOR	@Y[12],@DAT[12],@DAT[12]
+|| [A0]	LDDW	*FP[-8], @X[10]:@X[8]
+|| [A0]	LDDW	*SP[6],  @X[11]:@X[9]
+	XOR	@Y[13],@DAT[13],@DAT[13]
+||	STNDW	@X[14]:@X[12],*${OUT}[-2]
+	XOR	@Y[14],@DAT[14],@DAT[14]
+||	XOR	@Y[15],@DAT[15],@DAT[15]
+||	STNDW	@X[15]:@X[13],*${OUT}[-1]
+
+   [A0]	MV	@K2x[12],@X[12]
+|| [A0]	MV	@K2x[13],@X[13]
+|| [A0]	LDW	*FP[-6*2], @X[14]
+|| [A0]	LDW	*SP[8*2],  @X[15]
+
+   [A0]	DMV	@X[2],@X[0],@Y[2]:@Y[0]	; duplicate key material
+||	STNDW	@DAT[1]:@DAT[0],*${OUT}++[8]
+   [A0]	DMV	@X[3],@X[1],@Y[3]:@Y[1]
+||	STNDW	@DAT[3]:@DAT[2],*${OUT}[-7]
+   [A0]	DMV	@X[6],@X[4],@Y[6]:@Y[4]
+||	STNDW	@DAT[5]:@DAT[4],*${OUT}[-6]
+||	CMPLTU	A0,$STEP,A1		; is remaining length < 2*blocks?
+||[!A0]	BNOP	epilogue?
+   [A0]	DMV	@X[7],@X[5],@Y[7]:@Y[5]
+||	STNDW	@DAT[7]:@DAT[6],*${OUT}[-5]
+||[!A1]	BNOP	outer2x?
+   [A0]	DMV	@X[10],@X[8],@Y[10]:@Y[8]
+||	STNDW	@DAT[9]:@DAT[8],*${OUT}[-4]
+   [A0]	DMV	@X[11],@X[9],@Y[11]:@Y[9]
+||	STNDW	@DAT[11]:@DAT[10],*${OUT}[-3]
+   [A0]	DMV	@X[14],@X[12],@Y[14]:@Y[12]
+||	STNDW	@DAT[13]:@DAT[12],*${OUT}[-2]
+   [A0]	DMV	@X[15],@X[13],@Y[15]:@Y[13]
+||	STNDW	@DAT[15]:@DAT[14],*${OUT}[-1]
+;;===== branch to epilogue? is taken here
+   [A1]	MVK	64,$STEP
+|| [A0]	MVK	10,B0			; inner loop counter
+;;===== branch to outer2x? is taken here
+___
+{
+my ($a0,$a1,$a2,$a3) = (0..3);
+my ($b0,$b1,$b2,$b3) = (4..7);
+my ($c0,$c1,$c2,$c3) = (8..11);
+my ($d0,$d1,$d2,$d3) = (12..15);
+
+$code.=<<___;
+top1x?:
+	ADD	@X[$b1],@X[$a1],@X[$a1]
+||	ADD	@X[$b2],@X[$a2],@X[$a2]
+	ADD	@X[$b0],@X[$a0],@X[$a0]
+||	ADD	@X[$b3],@X[$a3],@X[$a3]
+||	XOR	@X[$a1],@X[$d1],@X[$d1]
+||	XOR	@X[$a2],@X[$d2],@X[$d2]
+	XOR	@X[$a0],@X[$d0],@X[$d0]
+||	XOR	@X[$a3],@X[$d3],@X[$d3]
+||	SWAP2	@X[$d1],@X[$d1]		; rotate by 16
+||	SWAP2	@X[$d2],@X[$d2]
+	SWAP2	@X[$d0],@X[$d0]
+||	SWAP2	@X[$d3],@X[$d3]
+
+||	ADD	@X[$d1],@X[$c1],@X[$c1]
+||	ADD	@X[$d2],@X[$c2],@X[$c2]
+	ADD	@X[$d0],@X[$c0],@X[$c0]
+||	ADD	@X[$d3],@X[$c3],@X[$c3]
+||	XOR	@X[$c1],@X[$b1],@X[$b1]
+||	XOR	@X[$c2],@X[$b2],@X[$b2]
+	XOR	@X[$c0],@X[$b0],@X[$b0]
+||	XOR	@X[$c3],@X[$b3],@X[$b3]
+||	ROTL	@X[$b1],12,@X[$b1]
+||	ROTL	@X[$b2],12,@X[$b2]
+	ROTL	@X[$b0],12,@X[$b0]
+||	ROTL	@X[$b3],12,@X[$b3]
+
+	ADD	@X[$b1],@X[$a1],@X[$a1]
+||	ADD	@X[$b2],@X[$a2],@X[$a2]
+	ADD	@X[$b0],@X[$a0],@X[$a0]
+||	ADD	@X[$b3],@X[$a3],@X[$a3]
+||	XOR	@X[$a1],@X[$d1],@X[$d1]
+||	XOR	@X[$a2],@X[$d2],@X[$d2]
+	XOR	@X[$a0],@X[$d0],@X[$d0]
+||	XOR	@X[$a3],@X[$d3],@X[$d3]
+||	ROTL	@X[$d1],8,@X[$d1]
+||	ROTL	@X[$d2],8,@X[$d2]
+	ROTL	@X[$d0],8,@X[$d0]
+||	ROTL	@X[$d3],8,@X[$d3]
+||	BNOP	middle1x?		; protect from interrupt
+
+	ADD	@X[$d1],@X[$c1],@X[$c1]
+||	ADD	@X[$d2],@X[$c2],@X[$c2]
+	ADD	@X[$d0],@X[$c0],@X[$c0]
+||	ADD	@X[$d3],@X[$c3],@X[$c3]
+||	XOR	@X[$c1],@X[$b1],@X[$b1]
+||	XOR	@X[$c2],@X[$b2],@X[$b2]
+||	ROTL	@X[$d1],0,@X[$d2]	; moved to avoid cross-path stall
+||	ROTL	@X[$d2],0,@X[$d3]
+	XOR	@X[$c0],@X[$b0],@X[$b0]
+||	XOR	@X[$c3],@X[$b3],@X[$b3]
+||	ROTL	@X[$d0],0,@X[$d1]
+||	ROTL	@X[$d3],0,@X[$d0]
+	ROTL	@X[$b1],7,@X[$b0]	; avoided cross-path stall
+||	ROTL	@X[$b2],7,@X[$b1]
+	ROTL	@X[$b0],7,@X[$b3]
+||	ROTL	@X[$b3],7,@X[$b2]
+middle1x?:
+
+	ADD	@X[$b0],@X[$a0],@X[$a0]
+||	ADD	@X[$b1],@X[$a1],@X[$a1]
+	ADD	@X[$b2],@X[$a2],@X[$a2]
+||	ADD	@X[$b3],@X[$a3],@X[$a3]
+||	XOR	@X[$a0],@X[$d0],@X[$d0]
+||	XOR	@X[$a1],@X[$d1],@X[$d1]
+	XOR	@X[$a2],@X[$d2],@X[$d2]
+||	XOR	@X[$a3],@X[$d3],@X[$d3]
+||	SWAP2	@X[$d0],@X[$d0]		; rotate by 16
+||	SWAP2	@X[$d1],@X[$d1]
+	SWAP2	@X[$d2],@X[$d2]
+||	SWAP2	@X[$d3],@X[$d3]
+
+||	ADD	@X[$d0],@X[$c2],@X[$c2]
+||	ADD	@X[$d1],@X[$c3],@X[$c3]
+	ADD	@X[$d2],@X[$c0],@X[$c0]
+||	ADD	@X[$d3],@X[$c1],@X[$c1]
+||	XOR	@X[$c2],@X[$b0],@X[$b0]
+||	XOR	@X[$c3],@X[$b1],@X[$b1]
+	XOR	@X[$c0],@X[$b2],@X[$b2]
+||	XOR	@X[$c1],@X[$b3],@X[$b3]
+||	ROTL	@X[$b0],12,@X[$b0]
+||	ROTL	@X[$b1],12,@X[$b1]
+	ROTL	@X[$b2],12,@X[$b2]
+||	ROTL	@X[$b3],12,@X[$b3]
+
+	ADD	@X[$b0],@X[$a0],@X[$a0]
+||	ADD	@X[$b1],@X[$a1],@X[$a1]
+|| [B0]	SUB	B0,1,B0			; decrement inner loop counter
+	ADD	@X[$b2],@X[$a2],@X[$a2]
+||	ADD	@X[$b3],@X[$a3],@X[$a3]
+||	XOR	@X[$a0],@X[$d0],@X[$d0]
+||	XOR	@X[$a1],@X[$d1],@X[$d1]
+	XOR	@X[$a2],@X[$d2],@X[$d2]
+||	XOR	@X[$a3],@X[$d3],@X[$d3]
+||	ROTL	@X[$d0],8,@X[$d0]
+||	ROTL	@X[$d1],8,@X[$d1]
+	ROTL	@X[$d2],8,@X[$d2]
+||	ROTL	@X[$d3],8,@X[$d3]
+|| [B0]	BNOP	top1x?			; even protects from interrupt
+
+	ADD	@X[$d0],@X[$c2],@X[$c2]
+||	ADD	@X[$d1],@X[$c3],@X[$c3]
+	ADD	@X[$d2],@X[$c0],@X[$c0]
+||	ADD	@X[$d3],@X[$c1],@X[$c1]
+||	XOR	@X[$c2],@X[$b0],@X[$b0]
+||	XOR	@X[$c3],@X[$b1],@X[$b1]
+||	ROTL	@X[$d0],0,@X[$d3]	; moved to avoid cross-path stall
+||	ROTL	@X[$d1],0,@X[$d0]
+	XOR	@X[$c0],@X[$b2],@X[$b2]
+||	XOR	@X[$c1],@X[$b3],@X[$b3]
+||	ROTL	@X[$d2],0,@X[$d1]
+||	ROTL	@X[$d3],0,@X[$d2]
+	ROTL	@X[$b0],7,@X[$b1]	; avoided cross-path stall
+||	ROTL	@X[$b1],7,@X[$b2]
+	ROTL	@X[$b2],7,@X[$b3]
+||	ROTL	@X[$b3],7,@X[$b0]
+||[!B0]	CMPLTU	A0,$STEP,A1		; less than 64 bytes left?
+bottom1x?:
+___
+}
+
+$code.=<<___;
+	ADD	@Y[0],@X[0],@X[0]	; accumulate key material
+||	ADD	@Y[1],@X[1],@X[1]
+||	ADD	@Y[2],@X[2],@X[2]
+||	ADD	@Y[3],@X[3],@X[3]
+||[!A1]	LDNDW	*${INP}++[8],@DAT[1]:@DAT[0]
+|| [A1]	BNOP	tail?
+	ADD	@Y[4],@X[4],@X[4]
+||	ADD	@Y[5],@X[5],@X[5]
+||	ADD	@Y[6],@X[6],@X[6]
+||	ADD	@Y[7],@X[7],@X[7]
+||[!A1]	LDNDW	*${INP}[-7],@DAT[3]:@DAT[2]
+	ADD	@Y[8],@X[8],@X[8]
+||	ADD	@Y[9],@X[9],@X[9]
+||	ADD	@Y[10],@X[10],@X[10]
+||	ADD	@Y[11],@X[11],@X[11]
+||[!A1]	LDNDW	*${INP}[-6],@DAT[5]:@DAT[4]
+	ADD	@Y[12],@X[12],@X[12]
+||	ADD	@Y[13],@X[13],@X[13]
+||	ADD	@Y[14],@X[14],@X[14]
+||	ADD	@Y[15],@X[15],@X[15]
+||[!A1]	LDNDW	*${INP}[-5],@DAT[7]:@DAT[6]
+  [!A1]	LDNDW	*${INP}[-4],@DAT[9]:@DAT[8]
+  [!A1]	LDNDW	*${INP}[-3],@DAT[11]:@DAT[10]
+	LDNDW	*${INP}[-2],@DAT[13]:@DAT[12]
+	LDNDW	*${INP}[-1],@DAT[15]:@DAT[14]
+
+	.if	.BIG_ENDIAN
+	SWAP2	@X[0],@X[0]
+||	SWAP2	@X[1],@X[1]
+||	SWAP2	@X[2],@X[2]
+||	SWAP2	@X[3],@X[3]
+	SWAP2	@X[4],@X[4]
+||	SWAP2	@X[5],@X[5]
+||	SWAP2	@X[6],@X[6]
+||	SWAP2	@X[7],@X[7]
+	SWAP2	@X[8],@X[8]
+||	SWAP2	@X[9],@X[9]
+||	SWAP4	@X[0],@X[1]
+||	SWAP4	@X[1],@X[0]
+	SWAP2	@X[10],@X[10]
+||	SWAP2	@X[11],@X[11]
+||	SWAP4	@X[2],@X[3]
+||	SWAP4	@X[3],@X[2]
+	SWAP2	@X[12],@X[12]
+||	SWAP2	@X[13],@X[13]
+||	SWAP4	@X[4],@X[5]
+||	SWAP4	@X[5],@X[4]
+	SWAP2	@X[14],@X[14]
+||	SWAP2	@X[15],@X[15]
+||	SWAP4	@X[6],@X[7]
+||	SWAP4	@X[7],@X[6]
+	SWAP4	@X[8],@X[9]
+||	SWAP4	@X[9],@X[8]
+	SWAP4	@X[10],@X[11]
+||	SWAP4	@X[11],@X[10]
+	SWAP4	@X[12],@X[13]
+||	SWAP4	@X[13],@X[12]
+	SWAP4	@X[14],@X[15]
+||	SWAP4	@X[15],@X[14]
+	.else
+	NOP	1
+	.endif
+
+	XOR	@X[0],@DAT[0],@DAT[0]	; xor with input
+||	XOR	@X[1],@DAT[1],@DAT[1]
+||	XOR	@X[2],@DAT[2],@DAT[2]
+||	XOR	@X[3],@DAT[3],@DAT[3]
+|| [A0]	SUB	A0,$STEP,A0		; SUB	A0,64,A0
+	XOR	@X[4],@DAT[4],@DAT[4]
+||	XOR	@X[5],@DAT[5],@DAT[5]
+||	XOR	@X[6],@DAT[6],@DAT[6]
+||	XOR	@X[7],@DAT[7],@DAT[7]
+||	STNDW	@DAT[1]:@DAT[0],*${OUT}++[8]
+	XOR	@X[8],@DAT[8],@DAT[8]
+||	XOR	@X[9],@DAT[9],@DAT[9]
+||	XOR	@X[10],@DAT[10],@DAT[10]
+||	XOR	@X[11],@DAT[11],@DAT[11]
+||	STNDW	@DAT[3]:@DAT[2],*${OUT}[-7]
+	XOR	@X[12],@DAT[12],@DAT[12]
+||	XOR	@X[13],@DAT[13],@DAT[13]
+||	XOR	@X[14],@DAT[14],@DAT[14]
+||	XOR	@X[15],@DAT[15],@DAT[15]
+||	STNDW	@DAT[5]:@DAT[4],*${OUT}[-6]
+|| [A0]	BNOP	top1x?
+   [A0]	DMV	@Y[2],@Y[0],@X[2]:@X[0]	; duplicate key material
+|| [A0]	DMV	@Y[3],@Y[1],@X[3]:@X[1]
+||	STNDW	@DAT[7]:@DAT[6],*${OUT}[-5]
+   [A0]	DMV	@Y[6],@Y[4],@X[6]:@X[4]
+|| [A0]	DMV	@Y[7],@Y[5],@X[7]:@X[5]
+||	STNDW	@DAT[9]:@DAT[8],*${OUT}[-4]
+   [A0]	DMV	@Y[10],@Y[8],@X[10]:@X[8]
+|| [A0]	DMV	@Y[11],@Y[9],@X[11]:@X[9]
+|| [A0]	ADD	1,@Y[12],@Y[12]		; increment counter
+||	STNDW	@DAT[11]:@DAT[10],*${OUT}[-3]
+   [A0]	DMV	@Y[14],@Y[12],@X[14]:@X[12]
+|| [A0]	DMV	@Y[15],@Y[13],@X[15]:@X[13]
+||	STNDW	@DAT[13]:@DAT[12],*${OUT}[-2]
+   [A0]	MVK	10,B0			; inner loop counter
+||	STNDW	@DAT[15]:@DAT[14],*${OUT}[-1]
+;;===== branch to top1x? is taken here
+
+epilogue?:
+	LDDW	*FP[-4],A11:A10		; ABI says so
+	LDDW	*FP[-3],A13:A12
+||	LDDW	*SP[3+8],B11:B10
+	LDDW	*SP[4+8],B13:B12
+||	BNOP	RA
+	LDW	*++SP(40+64),FP		; restore frame pointer
+	NOP	4
+
+tail?:
+	LDBU	*${INP}++[1],B24	; load byte by byte
+||	SUB	A0,1,A0
+||	SUB	A0,1,B1
+  [!B1]	BNOP	epilogue?		; interrupts are disabled for whole time
+|| [A0] LDBU	*${INP}++[1],B24
+|| [A0]	SUB	A0,1,A0
+||	SUB	B1,1,B1
+  [!B1]	BNOP	epilogue?
+|| [A0] LDBU	*${INP}++[1],B24
+|| [A0]	SUB	A0,1,A0
+||	SUB	B1,1,B1
+  [!B1]	BNOP	epilogue?
+||	ROTL	@X[0],0,A24
+|| [A0] LDBU	*${INP}++[1],B24
+|| [A0]	SUB	A0,1,A0
+||	SUB	B1,1,B1
+  [!B1]	BNOP	epilogue?
+||	ROTL	@X[0],24,A24
+|| [A0] LDBU	*${INP}++[1],A24
+|| [A0]	SUB	A0,1,A0
+||	SUB	B1,1,B1
+  [!B1]	BNOP	epilogue?
+||	ROTL	@X[0],16,A24
+|| [A0] LDBU	*${INP}++[1],A24
+|| [A0]	SUB	A0,1,A0
+||	SUB	B1,1,B1
+||	XOR	A24,B24,B25
+	STB	B25,*${OUT}++[1]	; store byte by byte
+||[!B1]	BNOP	epilogue?
+||	ROTL	@X[0],8,A24
+|| [A0] LDBU	*${INP}++[1],A24
+|| [A0]	SUB	A0,1,A0
+||	SUB	B1,1,B1
+||	XOR	A24,B24,B25
+	STB	B25,*${OUT}++[1]
+___
+sub TAIL_STEP {
+my $Xi= shift;
+my $T = ($Xi=~/^B/?"B24":"A24");	# match @X[i] to avoid cross path
+my $D = $T; $D=~tr/AB/BA/;
+my $O = $D; $O=~s/24/25/;
+
+$code.=<<___;
+||[!B1]	BNOP	epilogue?
+||	ROTL	$Xi,0,$T
+|| [A0] LDBU	*${INP}++[1],$D
+|| [A0]	SUB	A0,1,A0
+||	SUB	B1,1,B1
+||	XOR	A24,B24,$O
+	STB	$O,*${OUT}++[1]
+||[!B1]	BNOP	epilogue?
+||	ROTL	$Xi,24,$T
+|| [A0] LDBU	*${INP}++[1],$T
+|| [A0]	SUB	A0,1,A0
+||	SUB	B1,1,B1
+||	XOR	A24,B24,$O
+	STB	$O,*${OUT}++[1]
+||[!B1]	BNOP	epilogue?
+||	ROTL	$Xi,16,$T
+|| [A0] LDBU	*${INP}++[1],$T
+|| [A0]	SUB	A0,1,A0
+||	SUB	B1,1,B1
+||	XOR	A24,B24,$O
+	STB	$O,*${OUT}++[1]
+||[!B1]	BNOP	epilogue?
+||	ROTL	$Xi,8,$T
+|| [A0] LDBU	*${INP}++[1],$T
+|| [A0]	SUB	A0,1,A0
+||	SUB	B1,1,B1
+||	XOR	A24,B24,$O
+	STB	$O,*${OUT}++[1]
+___
+}
+	foreach (1..14) { TAIL_STEP(@X[$_]); }
+$code.=<<___;
+||[!B1]	BNOP	epilogue?
+||	ROTL	@X[15],0,B24
+||	XOR	A24,B24,A25
+	STB	A25,*${OUT}++[1]
+||	ROTL	@X[15],24,B24
+||	XOR	A24,B24,A25
+	STB	A25,*${OUT}++[1]
+||	ROTL	@X[15],16,B24
+||	XOR	A24,B24,A25
+	STB	A25,*${OUT}++[1]
+||	XOR	A24,B24,A25
+	STB	A25,*${OUT}++[1]
+||	XOR	A24,B24,B25
+	STB	B25,*${OUT}++[1]
+	.endasmfunc
+
+	.sect	.const
+	.cstring "ChaCha20 for C64x+, CRYPTOGAMS by <appro\@openssl.org>"
+	.align	4
+___
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-ppc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-ppc.pl
new file mode 100755
index 000000000..f4f8610bf
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-ppc.pl
@@ -0,0 +1,1348 @@
+#! /usr/bin/env perl
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# October 2015
+#
+# ChaCha20 for PowerPC/AltiVec.
+#
+# June 2018
+#
+# Add VSX 2.07 code path. Original 3xAltiVec+1xIALU is well-suited for
+# processors that can't issue more than one vector instruction per
+# cycle. But POWER8 (and POWER9) can issue a pair, and vector-only 4x
+# interleave would perform better. Incidentally PowerISA 2.07 (first
+# implemented by POWER8) defined new usable instructions, hence 4xVSX
+# code path...
+#
+# Performance in cycles per byte out of large buffer.
+#
+#			IALU/gcc-4.x    3xAltiVec+1xIALU	4xVSX
+#
+# Freescale e300	13.6/+115%	-			-
+# PPC74x0/G4e		6.81/+310%	3.81			-
+# PPC970/G5		9.29/+160%	?			-
+# POWER7		8.62/+61%	3.35			-
+# POWER8		8.70/+51%	2.91			2.09
+# POWER9		8.80/+29%	4.44(*)			2.45(**)
+#
+# (*)	this is trade-off result, it's possible to improve it, but
+#	then it would negatively affect all others;
+# (**)	POWER9 seems to be "allergic" to mixing vector and integer
+#	instructions, which is why switch to vector-only code pays
+#	off that much;
+
+$flavour = shift;
+
+if ($flavour =~ /64/) {
+	$SIZE_T	=8;
+	$LRSAVE	=2*$SIZE_T;
+	$STU	="stdu";
+	$POP	="ld";
+	$PUSH	="std";
+	$UCMP	="cmpld";
+} elsif ($flavour =~ /32/) {
+	$SIZE_T	=4;
+	$LRSAVE	=$SIZE_T;
+	$STU	="stwu";
+	$POP	="lwz";
+	$PUSH	="stw";
+	$UCMP	="cmplw";
+} else { die "nonsense $flavour"; }
+
+$LITTLE_ENDIAN = ($flavour=~/le$/) ? 1 : 0;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open STDOUT,"| $^X $xlate $flavour ".shift || die "can't call $xlate: $!";
+
+$LOCALS=6*$SIZE_T;
+$FRAME=$LOCALS+64+18*$SIZE_T;	# 64 is for local variables
+
+sub AUTOLOAD()		# thunk [simplified] x86-style perlasm
+{ my $opcode = $AUTOLOAD; $opcode =~ s/.*:://; $opcode =~ s/_/\./;
+    $code .= "\t$opcode\t".join(',',@_)."\n";
+}
+
+my $sp = "r1";
+
+my ($out,$inp,$len,$key,$ctr) = map("r$_",(3..7));
+
+my @x=map("r$_",(16..31));
+my @d=map("r$_",(11,12,14,15));
+my @t=map("r$_",(7..10));
+
+sub ROUND {
+my ($a0,$b0,$c0,$d0)=@_;
+my ($a1,$b1,$c1,$d1)=map(($_&~3)+(($_+1)&3),($a0,$b0,$c0,$d0));
+my ($a2,$b2,$c2,$d2)=map(($_&~3)+(($_+1)&3),($a1,$b1,$c1,$d1));
+my ($a3,$b3,$c3,$d3)=map(($_&~3)+(($_+1)&3),($a2,$b2,$c2,$d2));
+
+    (
+	"&add		(@x[$a0],@x[$a0],@x[$b0])",
+	 "&add		(@x[$a1],@x[$a1],@x[$b1])",
+	  "&add		(@x[$a2],@x[$a2],@x[$b2])",
+	   "&add	(@x[$a3],@x[$a3],@x[$b3])",
+	"&xor		(@x[$d0],@x[$d0],@x[$a0])",
+	 "&xor		(@x[$d1],@x[$d1],@x[$a1])",
+	  "&xor		(@x[$d2],@x[$d2],@x[$a2])",
+	   "&xor	(@x[$d3],@x[$d3],@x[$a3])",
+	"&rotlwi	(@x[$d0],@x[$d0],16)",
+	 "&rotlwi	(@x[$d1],@x[$d1],16)",
+	  "&rotlwi	(@x[$d2],@x[$d2],16)",
+	   "&rotlwi	(@x[$d3],@x[$d3],16)",
+
+	"&add		(@x[$c0],@x[$c0],@x[$d0])",
+	 "&add		(@x[$c1],@x[$c1],@x[$d1])",
+	  "&add		(@x[$c2],@x[$c2],@x[$d2])",
+	   "&add	(@x[$c3],@x[$c3],@x[$d3])",
+	"&xor		(@x[$b0],@x[$b0],@x[$c0])",
+	 "&xor		(@x[$b1],@x[$b1],@x[$c1])",
+	  "&xor		(@x[$b2],@x[$b2],@x[$c2])",
+	   "&xor	(@x[$b3],@x[$b3],@x[$c3])",
+	"&rotlwi	(@x[$b0],@x[$b0],12)",
+	 "&rotlwi	(@x[$b1],@x[$b1],12)",
+	  "&rotlwi	(@x[$b2],@x[$b2],12)",
+	   "&rotlwi	(@x[$b3],@x[$b3],12)",
+
+	"&add		(@x[$a0],@x[$a0],@x[$b0])",
+	 "&add		(@x[$a1],@x[$a1],@x[$b1])",
+	  "&add		(@x[$a2],@x[$a2],@x[$b2])",
+	   "&add	(@x[$a3],@x[$a3],@x[$b3])",
+	"&xor		(@x[$d0],@x[$d0],@x[$a0])",
+	 "&xor		(@x[$d1],@x[$d1],@x[$a1])",
+	  "&xor		(@x[$d2],@x[$d2],@x[$a2])",
+	   "&xor	(@x[$d3],@x[$d3],@x[$a3])",
+	"&rotlwi	(@x[$d0],@x[$d0],8)",
+	 "&rotlwi	(@x[$d1],@x[$d1],8)",
+	  "&rotlwi	(@x[$d2],@x[$d2],8)",
+	   "&rotlwi	(@x[$d3],@x[$d3],8)",
+
+	"&add		(@x[$c0],@x[$c0],@x[$d0])",
+	 "&add		(@x[$c1],@x[$c1],@x[$d1])",
+	  "&add		(@x[$c2],@x[$c2],@x[$d2])",
+	   "&add	(@x[$c3],@x[$c3],@x[$d3])",
+	"&xor		(@x[$b0],@x[$b0],@x[$c0])",
+	 "&xor		(@x[$b1],@x[$b1],@x[$c1])",
+	  "&xor		(@x[$b2],@x[$b2],@x[$c2])",
+	   "&xor	(@x[$b3],@x[$b3],@x[$c3])",
+	"&rotlwi	(@x[$b0],@x[$b0],7)",
+	 "&rotlwi	(@x[$b1],@x[$b1],7)",
+	  "&rotlwi	(@x[$b2],@x[$b2],7)",
+	   "&rotlwi	(@x[$b3],@x[$b3],7)"
+    );
+}
+
+$code.=<<___;
+.machine	"any"
+.text
+
+.globl	.ChaCha20_ctr32_int
+.align	5
+.ChaCha20_ctr32_int:
+__ChaCha20_ctr32_int:
+	${UCMP}i $len,0
+	beqlr-
+
+	$STU	$sp,-$FRAME($sp)
+	mflr	r0
+
+	$PUSH	r14,`$FRAME-$SIZE_T*18`($sp)
+	$PUSH	r15,`$FRAME-$SIZE_T*17`($sp)
+	$PUSH	r16,`$FRAME-$SIZE_T*16`($sp)
+	$PUSH	r17,`$FRAME-$SIZE_T*15`($sp)
+	$PUSH	r18,`$FRAME-$SIZE_T*14`($sp)
+	$PUSH	r19,`$FRAME-$SIZE_T*13`($sp)
+	$PUSH	r20,`$FRAME-$SIZE_T*12`($sp)
+	$PUSH	r21,`$FRAME-$SIZE_T*11`($sp)
+	$PUSH	r22,`$FRAME-$SIZE_T*10`($sp)
+	$PUSH	r23,`$FRAME-$SIZE_T*9`($sp)
+	$PUSH	r24,`$FRAME-$SIZE_T*8`($sp)
+	$PUSH	r25,`$FRAME-$SIZE_T*7`($sp)
+	$PUSH	r26,`$FRAME-$SIZE_T*6`($sp)
+	$PUSH	r27,`$FRAME-$SIZE_T*5`($sp)
+	$PUSH	r28,`$FRAME-$SIZE_T*4`($sp)
+	$PUSH	r29,`$FRAME-$SIZE_T*3`($sp)
+	$PUSH	r30,`$FRAME-$SIZE_T*2`($sp)
+	$PUSH	r31,`$FRAME-$SIZE_T*1`($sp)
+	$PUSH	r0,`$FRAME+$LRSAVE`($sp)
+
+	lwz	@d[0],0($ctr)			# load counter
+	lwz	@d[1],4($ctr)
+	lwz	@d[2],8($ctr)
+	lwz	@d[3],12($ctr)
+
+	bl	__ChaCha20_1x
+
+	$POP	r0,`$FRAME+$LRSAVE`($sp)
+	$POP	r14,`$FRAME-$SIZE_T*18`($sp)
+	$POP	r15,`$FRAME-$SIZE_T*17`($sp)
+	$POP	r16,`$FRAME-$SIZE_T*16`($sp)
+	$POP	r17,`$FRAME-$SIZE_T*15`($sp)
+	$POP	r18,`$FRAME-$SIZE_T*14`($sp)
+	$POP	r19,`$FRAME-$SIZE_T*13`($sp)
+	$POP	r20,`$FRAME-$SIZE_T*12`($sp)
+	$POP	r21,`$FRAME-$SIZE_T*11`($sp)
+	$POP	r22,`$FRAME-$SIZE_T*10`($sp)
+	$POP	r23,`$FRAME-$SIZE_T*9`($sp)
+	$POP	r24,`$FRAME-$SIZE_T*8`($sp)
+	$POP	r25,`$FRAME-$SIZE_T*7`($sp)
+	$POP	r26,`$FRAME-$SIZE_T*6`($sp)
+	$POP	r27,`$FRAME-$SIZE_T*5`($sp)
+	$POP	r28,`$FRAME-$SIZE_T*4`($sp)
+	$POP	r29,`$FRAME-$SIZE_T*3`($sp)
+	$POP	r30,`$FRAME-$SIZE_T*2`($sp)
+	$POP	r31,`$FRAME-$SIZE_T*1`($sp)
+	mtlr	r0
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,4,1,0x80,18,5,0
+	.long	0
+.size	.ChaCha20_ctr32_int,.-.ChaCha20_ctr32_int
+
+.align	5
+__ChaCha20_1x:
+Loop_outer:
+	lis	@x[0],0x6170			# synthesize sigma
+	lis	@x[1],0x3320
+	lis	@x[2],0x7962
+	lis	@x[3],0x6b20
+	ori	@x[0],@x[0],0x7865
+	ori	@x[1],@x[1],0x646e
+	ori	@x[2],@x[2],0x2d32
+	ori	@x[3],@x[3],0x6574
+
+	li	r0,10				# inner loop counter
+	lwz	@x[4],0($key)			# load key
+	lwz	@x[5],4($key)
+	lwz	@x[6],8($key)
+	lwz	@x[7],12($key)
+	lwz	@x[8],16($key)
+	mr	@x[12],@d[0]			# copy counter
+	lwz	@x[9],20($key)
+	mr	@x[13],@d[1]
+	lwz	@x[10],24($key)
+	mr	@x[14],@d[2]
+	lwz	@x[11],28($key)
+	mr	@x[15],@d[3]
+
+	mr	@t[0],@x[4]
+	mr	@t[1],@x[5]
+	mr	@t[2],@x[6]
+	mr	@t[3],@x[7]
+
+	mtctr	r0
+Loop:
+___
+	foreach (&ROUND(0, 4, 8,12)) { eval; }
+	foreach (&ROUND(0, 5,10,15)) { eval; }
+$code.=<<___;
+	bdnz	Loop
+
+	subic	$len,$len,64			# $len-=64
+	addi	@x[0],@x[0],0x7865		# accumulate key block
+	addi	@x[1],@x[1],0x646e
+	addi	@x[2],@x[2],0x2d32
+	addi	@x[3],@x[3],0x6574
+	addis	@x[0],@x[0],0x6170
+	addis	@x[1],@x[1],0x3320
+	addis	@x[2],@x[2],0x7962
+	addis	@x[3],@x[3],0x6b20
+
+	subfe.	r0,r0,r0			# borrow?-1:0
+	add	@x[4],@x[4],@t[0]
+	lwz	@t[0],16($key)
+	add	@x[5],@x[5],@t[1]
+	lwz	@t[1],20($key)
+	add	@x[6],@x[6],@t[2]
+	lwz	@t[2],24($key)
+	add	@x[7],@x[7],@t[3]
+	lwz	@t[3],28($key)
+	add	@x[8],@x[8],@t[0]
+	add	@x[9],@x[9],@t[1]
+	add	@x[10],@x[10],@t[2]
+	add	@x[11],@x[11],@t[3]
+
+	add	@x[12],@x[12],@d[0]
+	add	@x[13],@x[13],@d[1]
+	add	@x[14],@x[14],@d[2]
+	add	@x[15],@x[15],@d[3]
+	addi	@d[0],@d[0],1			# increment counter
+___
+if (!$LITTLE_ENDIAN) { for($i=0;$i<16;$i++) {	# flip byte order
+$code.=<<___;
+	mr	@t[$i&3],@x[$i]
+	rotlwi	@x[$i],@x[$i],8
+	rlwimi	@x[$i],@t[$i&3],24,0,7
+	rlwimi	@x[$i],@t[$i&3],24,16,23
+___
+} }
+$code.=<<___;
+	bne	Ltail				# $len-=64 borrowed
+
+	lwz	@t[0],0($inp)			# load input, aligned or not
+	lwz	@t[1],4($inp)
+	${UCMP}i $len,0				# done already?
+	lwz	@t[2],8($inp)
+	lwz	@t[3],12($inp)
+	xor	@x[0],@x[0],@t[0]		# xor with input
+	lwz	@t[0],16($inp)
+	xor	@x[1],@x[1],@t[1]
+	lwz	@t[1],20($inp)
+	xor	@x[2],@x[2],@t[2]
+	lwz	@t[2],24($inp)
+	xor	@x[3],@x[3],@t[3]
+	lwz	@t[3],28($inp)
+	xor	@x[4],@x[4],@t[0]
+	lwz	@t[0],32($inp)
+	xor	@x[5],@x[5],@t[1]
+	lwz	@t[1],36($inp)
+	xor	@x[6],@x[6],@t[2]
+	lwz	@t[2],40($inp)
+	xor	@x[7],@x[7],@t[3]
+	lwz	@t[3],44($inp)
+	xor	@x[8],@x[8],@t[0]
+	lwz	@t[0],48($inp)
+	xor	@x[9],@x[9],@t[1]
+	lwz	@t[1],52($inp)
+	xor	@x[10],@x[10],@t[2]
+	lwz	@t[2],56($inp)
+	xor	@x[11],@x[11],@t[3]
+	lwz	@t[3],60($inp)
+	xor	@x[12],@x[12],@t[0]
+	stw	@x[0],0($out)			# store output, aligned or not
+	xor	@x[13],@x[13],@t[1]
+	stw	@x[1],4($out)
+	xor	@x[14],@x[14],@t[2]
+	stw	@x[2],8($out)
+	xor	@x[15],@x[15],@t[3]
+	stw	@x[3],12($out)
+	stw	@x[4],16($out)
+	stw	@x[5],20($out)
+	stw	@x[6],24($out)
+	stw	@x[7],28($out)
+	stw	@x[8],32($out)
+	stw	@x[9],36($out)
+	stw	@x[10],40($out)
+	stw	@x[11],44($out)
+	stw	@x[12],48($out)
+	stw	@x[13],52($out)
+	stw	@x[14],56($out)
+	addi	$inp,$inp,64
+	stw	@x[15],60($out)
+	addi	$out,$out,64
+
+	bne	Loop_outer
+
+	blr
+
+.align	4
+Ltail:
+	addi	$len,$len,64			# restore tail length
+	subi	$inp,$inp,1			# prepare for *++ptr
+	subi	$out,$out,1
+	addi	@t[0],$sp,$LOCALS-1
+	mtctr	$len
+
+	stw	@x[0],`$LOCALS+0`($sp)		# save whole block to stack
+	stw	@x[1],`$LOCALS+4`($sp)
+	stw	@x[2],`$LOCALS+8`($sp)
+	stw	@x[3],`$LOCALS+12`($sp)
+	stw	@x[4],`$LOCALS+16`($sp)
+	stw	@x[5],`$LOCALS+20`($sp)
+	stw	@x[6],`$LOCALS+24`($sp)
+	stw	@x[7],`$LOCALS+28`($sp)
+	stw	@x[8],`$LOCALS+32`($sp)
+	stw	@x[9],`$LOCALS+36`($sp)
+	stw	@x[10],`$LOCALS+40`($sp)
+	stw	@x[11],`$LOCALS+44`($sp)
+	stw	@x[12],`$LOCALS+48`($sp)
+	stw	@x[13],`$LOCALS+52`($sp)
+	stw	@x[14],`$LOCALS+56`($sp)
+	stw	@x[15],`$LOCALS+60`($sp)
+
+Loop_tail:					# byte-by-byte loop
+	lbzu	@d[0],1($inp)
+	lbzu	@x[0],1(@t[0])
+	xor	@d[1],@d[0],@x[0]
+	stbu	@d[1],1($out)
+	bdnz	Loop_tail
+
+	stw	$sp,`$LOCALS+0`($sp)		# wipe block on stack
+	stw	$sp,`$LOCALS+4`($sp)
+	stw	$sp,`$LOCALS+8`($sp)
+	stw	$sp,`$LOCALS+12`($sp)
+	stw	$sp,`$LOCALS+16`($sp)
+	stw	$sp,`$LOCALS+20`($sp)
+	stw	$sp,`$LOCALS+24`($sp)
+	stw	$sp,`$LOCALS+28`($sp)
+	stw	$sp,`$LOCALS+32`($sp)
+	stw	$sp,`$LOCALS+36`($sp)
+	stw	$sp,`$LOCALS+40`($sp)
+	stw	$sp,`$LOCALS+44`($sp)
+	stw	$sp,`$LOCALS+48`($sp)
+	stw	$sp,`$LOCALS+52`($sp)
+	stw	$sp,`$LOCALS+56`($sp)
+	stw	$sp,`$LOCALS+60`($sp)
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+___
+
+{{{
+my ($A0,$B0,$C0,$D0,$A1,$B1,$C1,$D1,$A2,$B2,$C2,$D2)
+				= map("v$_",(0..11));
+my @K				= map("v$_",(12..17));
+my ($FOUR,$sixteen,$twenty4)	= map("v$_",(18..19,23));
+my ($inpperm,$outperm,$outmask)	= map("v$_",(24..26));
+my @D				= map("v$_",(27..31));
+my ($twelve,$seven,$T0,$T1) = @D;
+
+my $FRAME=$LOCALS+64+10*16+18*$SIZE_T;	# 10*16 is for v23-v31 offload
+
+sub VMXROUND {
+my $odd = pop;
+my ($a,$b,$c,$d)=@_;
+
+	(
+	"&vadduwm	('$a','$a','$b')",
+	"&vxor		('$d','$d','$a')",
+	"&vperm		('$d','$d','$d','$sixteen')",
+
+	"&vadduwm	('$c','$c','$d')",
+	"&vxor		('$b','$b','$c')",
+	"&vrlw		('$b','$b','$twelve')",
+
+	"&vadduwm	('$a','$a','$b')",
+	"&vxor		('$d','$d','$a')",
+	"&vperm		('$d','$d','$d','$twenty4')",
+
+	"&vadduwm	('$c','$c','$d')",
+	"&vxor		('$b','$b','$c')",
+	"&vrlw		('$b','$b','$seven')",
+
+	"&vrldoi	('$c','$c',8)",
+	"&vrldoi	('$b','$b',$odd?4:12)",
+	"&vrldoi	('$d','$d',$odd?12:4)"
+	);
+}
+
+$code.=<<___;
+
+.globl	.ChaCha20_ctr32_vmx
+.align	5
+.ChaCha20_ctr32_vmx:
+	${UCMP}i $len,256
+	blt	__ChaCha20_ctr32_int
+
+	$STU	$sp,-$FRAME($sp)
+	mflr	r0
+	li	r10,`15+$LOCALS+64`
+	li	r11,`31+$LOCALS+64`
+	mfspr	r12,256
+	stvx	v23,r10,$sp
+	addi	r10,r10,32
+	stvx	v24,r11,$sp
+	addi	r11,r11,32
+	stvx	v25,r10,$sp
+	addi	r10,r10,32
+	stvx	v26,r11,$sp
+	addi	r11,r11,32
+	stvx	v27,r10,$sp
+	addi	r10,r10,32
+	stvx	v28,r11,$sp
+	addi	r11,r11,32
+	stvx	v29,r10,$sp
+	addi	r10,r10,32
+	stvx	v30,r11,$sp
+	stvx	v31,r10,$sp
+	stw	r12,`$FRAME-$SIZE_T*18-4`($sp)	# save vrsave
+	$PUSH	r14,`$FRAME-$SIZE_T*18`($sp)
+	$PUSH	r15,`$FRAME-$SIZE_T*17`($sp)
+	$PUSH	r16,`$FRAME-$SIZE_T*16`($sp)
+	$PUSH	r17,`$FRAME-$SIZE_T*15`($sp)
+	$PUSH	r18,`$FRAME-$SIZE_T*14`($sp)
+	$PUSH	r19,`$FRAME-$SIZE_T*13`($sp)
+	$PUSH	r20,`$FRAME-$SIZE_T*12`($sp)
+	$PUSH	r21,`$FRAME-$SIZE_T*11`($sp)
+	$PUSH	r22,`$FRAME-$SIZE_T*10`($sp)
+	$PUSH	r23,`$FRAME-$SIZE_T*9`($sp)
+	$PUSH	r24,`$FRAME-$SIZE_T*8`($sp)
+	$PUSH	r25,`$FRAME-$SIZE_T*7`($sp)
+	$PUSH	r26,`$FRAME-$SIZE_T*6`($sp)
+	$PUSH	r27,`$FRAME-$SIZE_T*5`($sp)
+	$PUSH	r28,`$FRAME-$SIZE_T*4`($sp)
+	$PUSH	r29,`$FRAME-$SIZE_T*3`($sp)
+	$PUSH	r30,`$FRAME-$SIZE_T*2`($sp)
+	$PUSH	r31,`$FRAME-$SIZE_T*1`($sp)
+	li	r12,-4096+511
+	$PUSH	r0, `$FRAME+$LRSAVE`($sp)
+	mtspr	256,r12				# preserve 29 AltiVec registers
+
+	bl	Lconsts				# returns pointer Lsigma in r12
+	li	@x[0],16
+	li	@x[1],32
+	li	@x[2],48
+	li	@x[3],64
+	li	@x[4],31			# 31 is not a typo
+	li	@x[5],15			# nor is 15
+
+	lvx	@K[1],0,$key			# load key
+	?lvsr	$T0,0,$key			# prepare unaligned load
+	lvx	@K[2],@x[0],$key
+	lvx	@D[0],@x[4],$key
+
+	lvx	@K[3],0,$ctr			# load counter
+	?lvsr	$T1,0,$ctr			# prepare unaligned load
+	lvx	@D[1],@x[5],$ctr
+
+	lvx	@K[0],0,r12			# load constants
+	lvx	@K[5],@x[0],r12			# one
+	lvx	$FOUR,@x[1],r12
+	lvx	$sixteen,@x[2],r12
+	lvx	$twenty4,@x[3],r12
+
+	?vperm	@K[1],@K[2],@K[1],$T0		# align key
+	?vperm	@K[2],@D[0],@K[2],$T0
+	?vperm	@K[3],@D[1],@K[3],$T1		# align counter
+
+	lwz	@d[0],0($ctr)			# load counter to GPR
+	lwz	@d[1],4($ctr)
+	vadduwm	@K[3],@K[3],@K[5]		# adjust AltiVec counter
+	lwz	@d[2],8($ctr)
+	vadduwm	@K[4],@K[3],@K[5]
+	lwz	@d[3],12($ctr)
+	vadduwm	@K[5],@K[4],@K[5]
+
+	vxor	$T0,$T0,$T0			# 0x00..00
+	vspltisw $outmask,-1			# 0xff..ff
+	?lvsr	$inpperm,0,$inp			# prepare for unaligned load
+	?lvsl	$outperm,0,$out			# prepare for unaligned store
+	?vperm	$outmask,$outmask,$T0,$outperm
+
+	be?lvsl	$T0,0,@x[0]			# 0x00..0f
+	be?vspltisb $T1,3			# 0x03..03
+	be?vxor	$T0,$T0,$T1			# swap bytes within words
+	be?vxor	$outperm,$outperm,$T1
+	be?vperm $inpperm,$inpperm,$inpperm,$T0
+
+	li	r0,10				# inner loop counter
+	b	Loop_outer_vmx
+
+.align	4
+Loop_outer_vmx:
+	lis	@x[0],0x6170			# synthesize sigma
+	lis	@x[1],0x3320
+	 vmr	$A0,@K[0]
+	lis	@x[2],0x7962
+	lis	@x[3],0x6b20
+	 vmr	$A1,@K[0]
+	ori	@x[0],@x[0],0x7865
+	ori	@x[1],@x[1],0x646e
+	 vmr	$A2,@K[0]
+	ori	@x[2],@x[2],0x2d32
+	ori	@x[3],@x[3],0x6574
+	 vmr	$B0,@K[1]
+
+	lwz	@x[4],0($key)			# load key to GPR
+	 vmr	$B1,@K[1]
+	lwz	@x[5],4($key)
+	 vmr	$B2,@K[1]
+	lwz	@x[6],8($key)
+	 vmr	$C0,@K[2]
+	lwz	@x[7],12($key)
+	 vmr	$C1,@K[2]
+	lwz	@x[8],16($key)
+	 vmr	$C2,@K[2]
+	mr	@x[12],@d[0]			# copy GPR counter
+	lwz	@x[9],20($key)
+	 vmr	$D0,@K[3]
+	mr	@x[13],@d[1]
+	lwz	@x[10],24($key)
+	 vmr	$D1,@K[4]
+	mr	@x[14],@d[2]
+	lwz	@x[11],28($key)
+	 vmr	$D2,@K[5]
+	mr	@x[15],@d[3]
+
+	mr	@t[0],@x[4]
+	mr	@t[1],@x[5]
+	mr	@t[2],@x[6]
+	mr	@t[3],@x[7]
+
+	vspltisw $twelve,12			# synthesize constants
+	vspltisw $seven,7
+
+	mtctr	r0
+	nop
+Loop_vmx:
+___
+	my @thread0=&VMXROUND($A0,$B0,$C0,$D0,0);
+	my @thread1=&VMXROUND($A1,$B1,$C1,$D1,0);
+	my @thread2=&VMXROUND($A2,$B2,$C2,$D2,0);
+	my @thread3=&ROUND(0,4,8,12);
+
+	foreach (@thread0) {
+		eval;
+		eval(shift(@thread1));
+		eval(shift(@thread2));
+
+		eval(shift(@thread3));
+		eval(shift(@thread3));
+		eval(shift(@thread3));
+	}
+	foreach (@thread3) { eval; }
+
+	@thread0=&VMXROUND($A0,$B0,$C0,$D0,1);
+	@thread1=&VMXROUND($A1,$B1,$C1,$D1,1);
+	@thread2=&VMXROUND($A2,$B2,$C2,$D2,1);
+	@thread3=&ROUND(0,5,10,15);
+
+	foreach (@thread0) {
+		eval;
+		eval(shift(@thread1));
+		eval(shift(@thread2));
+
+		eval(shift(@thread3));
+		eval(shift(@thread3));
+		eval(shift(@thread3));
+	}
+	foreach (@thread3) { eval; }
+$code.=<<___;
+	bdnz	Loop_vmx
+
+	subi	$len,$len,256			# $len-=256
+	addi	@x[0],@x[0],0x7865		# accumulate key block
+	addi	@x[1],@x[1],0x646e
+	addi	@x[2],@x[2],0x2d32
+	addi	@x[3],@x[3],0x6574
+	addis	@x[0],@x[0],0x6170
+	addis	@x[1],@x[1],0x3320
+	addis	@x[2],@x[2],0x7962
+	addis	@x[3],@x[3],0x6b20
+	add	@x[4],@x[4],@t[0]
+	lwz	@t[0],16($key)
+	add	@x[5],@x[5],@t[1]
+	lwz	@t[1],20($key)
+	add	@x[6],@x[6],@t[2]
+	lwz	@t[2],24($key)
+	add	@x[7],@x[7],@t[3]
+	lwz	@t[3],28($key)
+	add	@x[8],@x[8],@t[0]
+	add	@x[9],@x[9],@t[1]
+	add	@x[10],@x[10],@t[2]
+	add	@x[11],@x[11],@t[3]
+	add	@x[12],@x[12],@d[0]
+	add	@x[13],@x[13],@d[1]
+	add	@x[14],@x[14],@d[2]
+	add	@x[15],@x[15],@d[3]
+
+	vadduwm	$A0,$A0,@K[0]			# accumulate key block
+	vadduwm	$A1,$A1,@K[0]
+	vadduwm	$A2,$A2,@K[0]
+	vadduwm	$B0,$B0,@K[1]
+	vadduwm	$B1,$B1,@K[1]
+	vadduwm	$B2,$B2,@K[1]
+	vadduwm	$C0,$C0,@K[2]
+	vadduwm	$C1,$C1,@K[2]
+	vadduwm	$C2,$C2,@K[2]
+	vadduwm	$D0,$D0,@K[3]
+	vadduwm	$D1,$D1,@K[4]
+	vadduwm	$D2,$D2,@K[5]
+
+	addi	@d[0],@d[0],4			# increment counter
+	vadduwm	@K[3],@K[3],$FOUR
+	vadduwm	@K[4],@K[4],$FOUR
+	vadduwm	@K[5],@K[5],$FOUR
+
+___
+if (!$LITTLE_ENDIAN) { for($i=0;$i<16;$i++) {	# flip byte order
+$code.=<<___;
+	mr	@t[$i&3],@x[$i]
+	rotlwi	@x[$i],@x[$i],8
+	rlwimi	@x[$i],@t[$i&3],24,0,7
+	rlwimi	@x[$i],@t[$i&3],24,16,23
+___
+} }
+$code.=<<___;
+	lwz	@t[0],0($inp)			# load input, aligned or not
+	lwz	@t[1],4($inp)
+	lwz	@t[2],8($inp)
+	lwz	@t[3],12($inp)
+	xor	@x[0],@x[0],@t[0]		# xor with input
+	lwz	@t[0],16($inp)
+	xor	@x[1],@x[1],@t[1]
+	lwz	@t[1],20($inp)
+	xor	@x[2],@x[2],@t[2]
+	lwz	@t[2],24($inp)
+	xor	@x[3],@x[3],@t[3]
+	lwz	@t[3],28($inp)
+	xor	@x[4],@x[4],@t[0]
+	lwz	@t[0],32($inp)
+	xor	@x[5],@x[5],@t[1]
+	lwz	@t[1],36($inp)
+	xor	@x[6],@x[6],@t[2]
+	lwz	@t[2],40($inp)
+	xor	@x[7],@x[7],@t[3]
+	lwz	@t[3],44($inp)
+	xor	@x[8],@x[8],@t[0]
+	lwz	@t[0],48($inp)
+	xor	@x[9],@x[9],@t[1]
+	lwz	@t[1],52($inp)
+	xor	@x[10],@x[10],@t[2]
+	lwz	@t[2],56($inp)
+	xor	@x[11],@x[11],@t[3]
+	lwz	@t[3],60($inp)
+	xor	@x[12],@x[12],@t[0]
+	stw	@x[0],0($out)			# store output, aligned or not
+	xor	@x[13],@x[13],@t[1]
+	stw	@x[1],4($out)
+	xor	@x[14],@x[14],@t[2]
+	stw	@x[2],8($out)
+	xor	@x[15],@x[15],@t[3]
+	stw	@x[3],12($out)
+	addi	$inp,$inp,64
+	stw	@x[4],16($out)
+	li	@t[0],16
+	stw	@x[5],20($out)
+	li	@t[1],32
+	stw	@x[6],24($out)
+	li	@t[2],48
+	stw	@x[7],28($out)
+	li	@t[3],64
+	stw	@x[8],32($out)
+	stw	@x[9],36($out)
+	stw	@x[10],40($out)
+	stw	@x[11],44($out)
+	stw	@x[12],48($out)
+	stw	@x[13],52($out)
+	stw	@x[14],56($out)
+	stw	@x[15],60($out)
+	addi	$out,$out,64
+
+	lvx	@D[0],0,$inp			# load input
+	lvx	@D[1],@t[0],$inp
+	lvx	@D[2],@t[1],$inp
+	lvx	@D[3],@t[2],$inp
+	lvx	@D[4],@t[3],$inp
+	addi	$inp,$inp,64
+
+	?vperm	@D[0],@D[1],@D[0],$inpperm	# align input
+	?vperm	@D[1],@D[2],@D[1],$inpperm
+	?vperm	@D[2],@D[3],@D[2],$inpperm
+	?vperm	@D[3],@D[4],@D[3],$inpperm
+	vxor	$A0,$A0,@D[0]			# xor with input
+	vxor	$B0,$B0,@D[1]
+	lvx	@D[1],@t[0],$inp		# keep loading input
+	vxor	$C0,$C0,@D[2]
+	lvx	@D[2],@t[1],$inp
+	vxor	$D0,$D0,@D[3]
+	lvx	@D[3],@t[2],$inp
+	lvx	@D[0],@t[3],$inp
+	addi	$inp,$inp,64
+	li	@t[3],63			# 63 is not a typo
+	vperm	$A0,$A0,$A0,$outperm		# pre-misalign output
+	vperm	$B0,$B0,$B0,$outperm
+	vperm	$C0,$C0,$C0,$outperm
+	vperm	$D0,$D0,$D0,$outperm
+
+	?vperm	@D[4],@D[1],@D[4],$inpperm	# align input
+	?vperm	@D[1],@D[2],@D[1],$inpperm
+	?vperm	@D[2],@D[3],@D[2],$inpperm
+	?vperm	@D[3],@D[0],@D[3],$inpperm
+	vxor	$A1,$A1,@D[4]
+	vxor	$B1,$B1,@D[1]
+	lvx	@D[1],@t[0],$inp		# keep loading input
+	vxor	$C1,$C1,@D[2]
+	lvx	@D[2],@t[1],$inp
+	vxor	$D1,$D1,@D[3]
+	lvx	@D[3],@t[2],$inp
+	lvx	@D[4],@t[3],$inp		# redundant in aligned case
+	addi	$inp,$inp,64
+	vperm	$A1,$A1,$A1,$outperm		# pre-misalign output
+	vperm	$B1,$B1,$B1,$outperm
+	vperm	$C1,$C1,$C1,$outperm
+	vperm	$D1,$D1,$D1,$outperm
+
+	?vperm	@D[0],@D[1],@D[0],$inpperm	# align input
+	?vperm	@D[1],@D[2],@D[1],$inpperm
+	?vperm	@D[2],@D[3],@D[2],$inpperm
+	?vperm	@D[3],@D[4],@D[3],$inpperm
+	vxor	$A2,$A2,@D[0]
+	vxor	$B2,$B2,@D[1]
+	vxor	$C2,$C2,@D[2]
+	vxor	$D2,$D2,@D[3]
+	vperm	$A2,$A2,$A2,$outperm		# pre-misalign output
+	vperm	$B2,$B2,$B2,$outperm
+	vperm	$C2,$C2,$C2,$outperm
+	vperm	$D2,$D2,$D2,$outperm
+
+	andi.	@x[1],$out,15			# is $out aligned?
+	mr	@x[0],$out
+
+	vsel	@D[0],$A0,$B0,$outmask		# collect pre-misaligned output
+	vsel	@D[1],$B0,$C0,$outmask
+	vsel	@D[2],$C0,$D0,$outmask
+	vsel	@D[3],$D0,$A1,$outmask
+	vsel	$B0,$A1,$B1,$outmask
+	vsel	$C0,$B1,$C1,$outmask
+	vsel	$D0,$C1,$D1,$outmask
+	vsel	$A1,$D1,$A2,$outmask
+	vsel	$B1,$A2,$B2,$outmask
+	vsel	$C1,$B2,$C2,$outmask
+	vsel	$D1,$C2,$D2,$outmask
+
+	#stvx	$A0,0,$out			# take it easy on the edges
+	stvx	@D[0],@t[0],$out		# store output
+	stvx	@D[1],@t[1],$out
+	stvx	@D[2],@t[2],$out
+	addi	$out,$out,64
+	stvx	@D[3],0,$out
+	stvx	$B0,@t[0],$out
+	stvx	$C0,@t[1],$out
+	stvx	$D0,@t[2],$out
+	addi	$out,$out,64
+	stvx	$A1,0,$out
+	stvx	$B1,@t[0],$out
+	stvx	$C1,@t[1],$out
+	stvx	$D1,@t[2],$out
+	addi	$out,$out,64
+
+	beq	Laligned_vmx
+
+	sub	@x[2],$out,@x[1]		# in misaligned case edges
+	li	@x[3],0				# are written byte-by-byte
+Lunaligned_tail_vmx:
+	stvebx	$D2,@x[3],@x[2]
+	addi	@x[3],@x[3],1
+	cmpw	@x[3],@x[1]
+	bne	Lunaligned_tail_vmx
+
+	sub	@x[2],@x[0],@x[1]
+Lunaligned_head_vmx:
+	stvebx	$A0,@x[1],@x[2]
+	cmpwi	@x[1],15
+	addi	@x[1],@x[1],1
+	bne	Lunaligned_head_vmx
+
+	${UCMP}i $len,255			# done with 256-byte blocks yet?
+	bgt	Loop_outer_vmx
+
+	b	Ldone_vmx
+
+.align	4
+Laligned_vmx:
+	stvx	$A0,0,@x[0]			# head hexaword was not stored
+
+	${UCMP}i $len,255			# done with 256-byte blocks yet?
+	bgt	Loop_outer_vmx
+	nop
+
+Ldone_vmx:
+	${UCMP}i $len,0				# done yet?
+	bnel	__ChaCha20_1x
+
+	lwz	r12,`$FRAME-$SIZE_T*18-4`($sp)	# pull vrsave
+	li	r10,`15+$LOCALS+64`
+	li	r11,`31+$LOCALS+64`
+	mtspr	256,r12				# restore vrsave
+	lvx	v23,r10,$sp
+	addi	r10,r10,32
+	lvx	v24,r11,$sp
+	addi	r11,r11,32
+	lvx	v25,r10,$sp
+	addi	r10,r10,32
+	lvx	v26,r11,$sp
+	addi	r11,r11,32
+	lvx	v27,r10,$sp
+	addi	r10,r10,32
+	lvx	v28,r11,$sp
+	addi	r11,r11,32
+	lvx	v29,r10,$sp
+	addi	r10,r10,32
+	lvx	v30,r11,$sp
+	lvx	v31,r10,$sp
+	$POP	r0, `$FRAME+$LRSAVE`($sp)
+	$POP	r14,`$FRAME-$SIZE_T*18`($sp)
+	$POP	r15,`$FRAME-$SIZE_T*17`($sp)
+	$POP	r16,`$FRAME-$SIZE_T*16`($sp)
+	$POP	r17,`$FRAME-$SIZE_T*15`($sp)
+	$POP	r18,`$FRAME-$SIZE_T*14`($sp)
+	$POP	r19,`$FRAME-$SIZE_T*13`($sp)
+	$POP	r20,`$FRAME-$SIZE_T*12`($sp)
+	$POP	r21,`$FRAME-$SIZE_T*11`($sp)
+	$POP	r22,`$FRAME-$SIZE_T*10`($sp)
+	$POP	r23,`$FRAME-$SIZE_T*9`($sp)
+	$POP	r24,`$FRAME-$SIZE_T*8`($sp)
+	$POP	r25,`$FRAME-$SIZE_T*7`($sp)
+	$POP	r26,`$FRAME-$SIZE_T*6`($sp)
+	$POP	r27,`$FRAME-$SIZE_T*5`($sp)
+	$POP	r28,`$FRAME-$SIZE_T*4`($sp)
+	$POP	r29,`$FRAME-$SIZE_T*3`($sp)
+	$POP	r30,`$FRAME-$SIZE_T*2`($sp)
+	$POP	r31,`$FRAME-$SIZE_T*1`($sp)
+	mtlr	r0
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,0x04,1,0x80,18,5,0
+	.long	0
+.size	.ChaCha20_ctr32_vmx,.-.ChaCha20_ctr32_vmx
+___
+}}}
+{{{
+my ($xa0,$xa1,$xa2,$xa3, $xb0,$xb1,$xb2,$xb3,
+    $xc0,$xc1,$xc2,$xc3, $xd0,$xd1,$xd2,$xd3) = map("v$_",(0..15));
+my @K = map("v$_",(16..19));
+my $CTR = "v26";
+my ($xt0,$xt1,$xt2,$xt3) = map("v$_",(27..30));
+my ($sixteen,$twelve,$eight,$seven) = ($xt0,$xt1,$xt2,$xt3);
+my $beperm = "v31";
+
+my ($x00,$x10,$x20,$x30) = (0, map("r$_",(8..10)));
+
+my $FRAME=$LOCALS+64+7*16;	# 7*16 is for v26-v31 offload
+
+sub VSX_lane_ROUND {
+my ($a0,$b0,$c0,$d0)=@_;
+my ($a1,$b1,$c1,$d1)=map(($_&~3)+(($_+1)&3),($a0,$b0,$c0,$d0));
+my ($a2,$b2,$c2,$d2)=map(($_&~3)+(($_+1)&3),($a1,$b1,$c1,$d1));
+my ($a3,$b3,$c3,$d3)=map(($_&~3)+(($_+1)&3),($a2,$b2,$c2,$d2));
+my @x=map("\"v$_\"",(0..15));
+
+	(
+	"&vadduwm	(@x[$a0],@x[$a0],@x[$b0])",	# Q1
+	 "&vadduwm	(@x[$a1],@x[$a1],@x[$b1])",	# Q2
+	  "&vadduwm	(@x[$a2],@x[$a2],@x[$b2])",	# Q3
+	   "&vadduwm	(@x[$a3],@x[$a3],@x[$b3])",	# Q4
+	"&vxor		(@x[$d0],@x[$d0],@x[$a0])",
+	 "&vxor		(@x[$d1],@x[$d1],@x[$a1])",
+	  "&vxor	(@x[$d2],@x[$d2],@x[$a2])",
+	   "&vxor	(@x[$d3],@x[$d3],@x[$a3])",
+	"&vrlw		(@x[$d0],@x[$d0],'$sixteen')",
+	 "&vrlw		(@x[$d1],@x[$d1],'$sixteen')",
+	  "&vrlw	(@x[$d2],@x[$d2],'$sixteen')",
+	   "&vrlw	(@x[$d3],@x[$d3],'$sixteen')",
+
+	"&vadduwm	(@x[$c0],@x[$c0],@x[$d0])",
+	 "&vadduwm	(@x[$c1],@x[$c1],@x[$d1])",
+	  "&vadduwm	(@x[$c2],@x[$c2],@x[$d2])",
+	   "&vadduwm	(@x[$c3],@x[$c3],@x[$d3])",
+	"&vxor		(@x[$b0],@x[$b0],@x[$c0])",
+	 "&vxor		(@x[$b1],@x[$b1],@x[$c1])",
+	  "&vxor	(@x[$b2],@x[$b2],@x[$c2])",
+	   "&vxor	(@x[$b3],@x[$b3],@x[$c3])",
+	"&vrlw		(@x[$b0],@x[$b0],'$twelve')",
+	 "&vrlw		(@x[$b1],@x[$b1],'$twelve')",
+	  "&vrlw	(@x[$b2],@x[$b2],'$twelve')",
+	   "&vrlw	(@x[$b3],@x[$b3],'$twelve')",
+
+	"&vadduwm	(@x[$a0],@x[$a0],@x[$b0])",
+	 "&vadduwm	(@x[$a1],@x[$a1],@x[$b1])",
+	  "&vadduwm	(@x[$a2],@x[$a2],@x[$b2])",
+	   "&vadduwm	(@x[$a3],@x[$a3],@x[$b3])",
+	"&vxor		(@x[$d0],@x[$d0],@x[$a0])",
+	 "&vxor		(@x[$d1],@x[$d1],@x[$a1])",
+	  "&vxor	(@x[$d2],@x[$d2],@x[$a2])",
+	   "&vxor	(@x[$d3],@x[$d3],@x[$a3])",
+	"&vrlw		(@x[$d0],@x[$d0],'$eight')",
+	 "&vrlw		(@x[$d1],@x[$d1],'$eight')",
+	  "&vrlw	(@x[$d2],@x[$d2],'$eight')",
+	   "&vrlw	(@x[$d3],@x[$d3],'$eight')",
+
+	"&vadduwm	(@x[$c0],@x[$c0],@x[$d0])",
+	 "&vadduwm	(@x[$c1],@x[$c1],@x[$d1])",
+	  "&vadduwm	(@x[$c2],@x[$c2],@x[$d2])",
+	   "&vadduwm	(@x[$c3],@x[$c3],@x[$d3])",
+	"&vxor		(@x[$b0],@x[$b0],@x[$c0])",
+	 "&vxor		(@x[$b1],@x[$b1],@x[$c1])",
+	  "&vxor	(@x[$b2],@x[$b2],@x[$c2])",
+	   "&vxor	(@x[$b3],@x[$b3],@x[$c3])",
+	"&vrlw		(@x[$b0],@x[$b0],'$seven')",
+	 "&vrlw		(@x[$b1],@x[$b1],'$seven')",
+	  "&vrlw	(@x[$b2],@x[$b2],'$seven')",
+	   "&vrlw	(@x[$b3],@x[$b3],'$seven')"
+	);
+}
+
+$code.=<<___;
+
+.globl	.ChaCha20_ctr32_vsx
+.align	5
+.ChaCha20_ctr32_vsx:
+	$STU	$sp,-$FRAME($sp)
+	mflr	r0
+	li	r10,`15+$LOCALS+64`
+	li	r11,`31+$LOCALS+64`
+	mfspr	r12,256
+	stvx	v26,r10,$sp
+	addi	r10,r10,32
+	stvx	v27,r11,$sp
+	addi	r11,r11,32
+	stvx	v28,r10,$sp
+	addi	r10,r10,32
+	stvx	v29,r11,$sp
+	addi	r11,r11,32
+	stvx	v30,r10,$sp
+	stvx	v31,r11,$sp
+	stw	r12,`$FRAME-4`($sp)		# save vrsave
+	li	r12,-4096+63
+	$PUSH	r0, `$FRAME+$LRSAVE`($sp)
+	mtspr	256,r12				# preserve 29 AltiVec registers
+
+	bl	Lconsts				# returns pointer Lsigma in r12
+	lvx_4w	@K[0],0,r12			# load sigma
+	addi	r12,r12,0x50
+	li	$x10,16
+	li	$x20,32
+	li	$x30,48
+	li	r11,64
+
+	lvx_4w	@K[1],0,$key			# load key
+	lvx_4w	@K[2],$x10,$key
+	lvx_4w	@K[3],0,$ctr			# load counter
+
+	vxor	$xt0,$xt0,$xt0
+	lvx_4w	$xt1,r11,r12
+	vspltw	$CTR,@K[3],0
+	vsldoi	@K[3],@K[3],$xt0,4
+	vsldoi	@K[3],$xt0,@K[3],12		# clear @K[3].word[0]
+	vadduwm	$CTR,$CTR,$xt1
+
+	be?lvsl	$beperm,0,$x10			# 0x00..0f
+	be?vspltisb $xt0,3			# 0x03..03
+	be?vxor	$beperm,$beperm,$xt0		# swap bytes within words
+
+	li	r0,10				# inner loop counter
+	mtctr	r0
+	b	Loop_outer_vsx
+
+.align	5
+Loop_outer_vsx:
+	lvx	$xa0,$x00,r12			# load [smashed] sigma
+	lvx	$xa1,$x10,r12
+	lvx	$xa2,$x20,r12
+	lvx	$xa3,$x30,r12
+
+	vspltw	$xb0,@K[1],0			# smash the key
+	vspltw	$xb1,@K[1],1
+	vspltw	$xb2,@K[1],2
+	vspltw	$xb3,@K[1],3
+
+	vspltw	$xc0,@K[2],0
+	vspltw	$xc1,@K[2],1
+	vspltw	$xc2,@K[2],2
+	vspltw	$xc3,@K[2],3
+
+	vmr	$xd0,$CTR			# smash the counter
+	vspltw	$xd1,@K[3],1
+	vspltw	$xd2,@K[3],2
+	vspltw	$xd3,@K[3],3
+
+	vspltisw $sixteen,-16			# synthesize constants
+	vspltisw $twelve,12
+	vspltisw $eight,8
+	vspltisw $seven,7
+
+Loop_vsx:
+___
+	foreach (&VSX_lane_ROUND(0, 4, 8,12)) { eval; }
+	foreach (&VSX_lane_ROUND(0, 5,10,15)) { eval; }
+$code.=<<___;
+	bdnz	Loop_vsx
+
+	vadduwm	$xd0,$xd0,$CTR
+
+	vmrgew	$xt0,$xa0,$xa1			# transpose data
+	vmrgew	$xt1,$xa2,$xa3
+	vmrgow	$xa0,$xa0,$xa1
+	vmrgow	$xa2,$xa2,$xa3
+	 vmrgew	$xt2,$xb0,$xb1
+	 vmrgew	$xt3,$xb2,$xb3
+	vpermdi	$xa1,$xa0,$xa2,0b00
+	vpermdi	$xa3,$xa0,$xa2,0b11
+	vpermdi	$xa0,$xt0,$xt1,0b00
+	vpermdi	$xa2,$xt0,$xt1,0b11
+
+	vmrgow	$xb0,$xb0,$xb1
+	vmrgow	$xb2,$xb2,$xb3
+	 vmrgew	$xt0,$xc0,$xc1
+	 vmrgew	$xt1,$xc2,$xc3
+	vpermdi	$xb1,$xb0,$xb2,0b00
+	vpermdi	$xb3,$xb0,$xb2,0b11
+	vpermdi	$xb0,$xt2,$xt3,0b00
+	vpermdi	$xb2,$xt2,$xt3,0b11
+
+	vmrgow	$xc0,$xc0,$xc1
+	vmrgow	$xc2,$xc2,$xc3
+	 vmrgew	$xt2,$xd0,$xd1
+	 vmrgew	$xt3,$xd2,$xd3
+	vpermdi	$xc1,$xc0,$xc2,0b00
+	vpermdi	$xc3,$xc0,$xc2,0b11
+	vpermdi	$xc0,$xt0,$xt1,0b00
+	vpermdi	$xc2,$xt0,$xt1,0b11
+
+	vmrgow	$xd0,$xd0,$xd1
+	vmrgow	$xd2,$xd2,$xd3
+	 vspltisw $xt0,4
+	 vadduwm  $CTR,$CTR,$xt0		# next counter value
+	vpermdi	$xd1,$xd0,$xd2,0b00
+	vpermdi	$xd3,$xd0,$xd2,0b11
+	vpermdi	$xd0,$xt2,$xt3,0b00
+	vpermdi	$xd2,$xt2,$xt3,0b11
+
+	vadduwm	$xa0,$xa0,@K[0]
+	vadduwm	$xb0,$xb0,@K[1]
+	vadduwm	$xc0,$xc0,@K[2]
+	vadduwm	$xd0,$xd0,@K[3]
+
+	be?vperm $xa0,$xa0,$xa0,$beperm
+	be?vperm $xb0,$xb0,$xb0,$beperm
+	be?vperm $xc0,$xc0,$xc0,$beperm
+	be?vperm $xd0,$xd0,$xd0,$beperm
+
+	${UCMP}i $len,0x40
+	blt	Ltail_vsx
+
+	lvx_4w	$xt0,$x00,$inp
+	lvx_4w	$xt1,$x10,$inp
+	lvx_4w	$xt2,$x20,$inp
+	lvx_4w	$xt3,$x30,$inp
+
+	vxor	$xt0,$xt0,$xa0
+	vxor	$xt1,$xt1,$xb0
+	vxor	$xt2,$xt2,$xc0
+	vxor	$xt3,$xt3,$xd0
+
+	stvx_4w	$xt0,$x00,$out
+	stvx_4w	$xt1,$x10,$out
+	addi	$inp,$inp,0x40
+	stvx_4w	$xt2,$x20,$out
+	subi	$len,$len,0x40
+	stvx_4w	$xt3,$x30,$out
+	addi	$out,$out,0x40
+	beq	Ldone_vsx
+
+	vadduwm	$xa0,$xa1,@K[0]
+	vadduwm	$xb0,$xb1,@K[1]
+	vadduwm	$xc0,$xc1,@K[2]
+	vadduwm	$xd0,$xd1,@K[3]
+
+	be?vperm $xa0,$xa0,$xa0,$beperm
+	be?vperm $xb0,$xb0,$xb0,$beperm
+	be?vperm $xc0,$xc0,$xc0,$beperm
+	be?vperm $xd0,$xd0,$xd0,$beperm
+
+	${UCMP}i $len,0x40
+	blt	Ltail_vsx
+
+	lvx_4w	$xt0,$x00,$inp
+	lvx_4w	$xt1,$x10,$inp
+	lvx_4w	$xt2,$x20,$inp
+	lvx_4w	$xt3,$x30,$inp
+
+	vxor	$xt0,$xt0,$xa0
+	vxor	$xt1,$xt1,$xb0
+	vxor	$xt2,$xt2,$xc0
+	vxor	$xt3,$xt3,$xd0
+
+	stvx_4w	$xt0,$x00,$out
+	stvx_4w	$xt1,$x10,$out
+	addi	$inp,$inp,0x40
+	stvx_4w	$xt2,$x20,$out
+	subi	$len,$len,0x40
+	stvx_4w	$xt3,$x30,$out
+	addi	$out,$out,0x40
+	beq	Ldone_vsx
+
+	vadduwm	$xa0,$xa2,@K[0]
+	vadduwm	$xb0,$xb2,@K[1]
+	vadduwm	$xc0,$xc2,@K[2]
+	vadduwm	$xd0,$xd2,@K[3]
+
+	be?vperm $xa0,$xa0,$xa0,$beperm
+	be?vperm $xb0,$xb0,$xb0,$beperm
+	be?vperm $xc0,$xc0,$xc0,$beperm
+	be?vperm $xd0,$xd0,$xd0,$beperm
+
+	${UCMP}i $len,0x40
+	blt	Ltail_vsx
+
+	lvx_4w	$xt0,$x00,$inp
+	lvx_4w	$xt1,$x10,$inp
+	lvx_4w	$xt2,$x20,$inp
+	lvx_4w	$xt3,$x30,$inp
+
+	vxor	$xt0,$xt0,$xa0
+	vxor	$xt1,$xt1,$xb0
+	vxor	$xt2,$xt2,$xc0
+	vxor	$xt3,$xt3,$xd0
+
+	stvx_4w	$xt0,$x00,$out
+	stvx_4w	$xt1,$x10,$out
+	addi	$inp,$inp,0x40
+	stvx_4w	$xt2,$x20,$out
+	subi	$len,$len,0x40
+	stvx_4w	$xt3,$x30,$out
+	addi	$out,$out,0x40
+	beq	Ldone_vsx
+
+	vadduwm	$xa0,$xa3,@K[0]
+	vadduwm	$xb0,$xb3,@K[1]
+	vadduwm	$xc0,$xc3,@K[2]
+	vadduwm	$xd0,$xd3,@K[3]
+
+	be?vperm $xa0,$xa0,$xa0,$beperm
+	be?vperm $xb0,$xb0,$xb0,$beperm
+	be?vperm $xc0,$xc0,$xc0,$beperm
+	be?vperm $xd0,$xd0,$xd0,$beperm
+
+	${UCMP}i $len,0x40
+	blt	Ltail_vsx
+
+	lvx_4w	$xt0,$x00,$inp
+	lvx_4w	$xt1,$x10,$inp
+	lvx_4w	$xt2,$x20,$inp
+	lvx_4w	$xt3,$x30,$inp
+
+	vxor	$xt0,$xt0,$xa0
+	vxor	$xt1,$xt1,$xb0
+	vxor	$xt2,$xt2,$xc0
+	vxor	$xt3,$xt3,$xd0
+
+	stvx_4w	$xt0,$x00,$out
+	stvx_4w	$xt1,$x10,$out
+	addi	$inp,$inp,0x40
+	stvx_4w	$xt2,$x20,$out
+	subi	$len,$len,0x40
+	stvx_4w	$xt3,$x30,$out
+	addi	$out,$out,0x40
+	mtctr	r0
+	bne	Loop_outer_vsx
+
+Ldone_vsx:
+	lwz	r12,`$FRAME-4`($sp)		# pull vrsave
+	li	r10,`15+$LOCALS+64`
+	li	r11,`31+$LOCALS+64`
+	$POP	r0, `$FRAME+$LRSAVE`($sp)
+	mtspr	256,r12				# restore vrsave
+	lvx	v26,r10,$sp
+	addi	r10,r10,32
+	lvx	v27,r11,$sp
+	addi	r11,r11,32
+	lvx	v28,r10,$sp
+	addi	r10,r10,32
+	lvx	v29,r11,$sp
+	addi	r11,r11,32
+	lvx	v30,r10,$sp
+	lvx	v31,r11,$sp
+	mtlr	r0
+	addi	$sp,$sp,$FRAME
+	blr
+
+.align	4
+Ltail_vsx:
+	addi	r11,$sp,$LOCALS
+	mtctr	$len
+	stvx_4w	$xa0,$x00,r11			# offload block to stack
+	stvx_4w	$xb0,$x10,r11
+	stvx_4w	$xc0,$x20,r11
+	stvx_4w	$xd0,$x30,r11
+	subi	r12,r11,1			# prepare for *++ptr
+	subi	$inp,$inp,1
+	subi	$out,$out,1
+
+Loop_tail_vsx:
+	lbzu	r6,1(r12)
+	lbzu	r7,1($inp)
+	xor	r6,r6,r7
+	stbu	r6,1($out)
+	bdnz	Loop_tail_vsx
+
+	stvx_4w	$K[0],$x00,r11			# wipe copy of the block
+	stvx_4w	$K[0],$x10,r11
+	stvx_4w	$K[0],$x20,r11
+	stvx_4w	$K[0],$x30,r11
+
+	b	Ldone_vsx
+	.long	0
+	.byte	0,12,0x04,1,0x80,0,5,0
+	.long	0
+.size	.ChaCha20_ctr32_vsx,.-.ChaCha20_ctr32_vsx
+___
+}}}
+$code.=<<___;
+.align	5
+Lconsts:
+	mflr	r0
+	bcl	20,31,\$+4
+	mflr	r12	#vvvvv "distance between . and Lsigma
+	addi	r12,r12,`64-8`
+	mtlr	r0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+	.space	`64-9*4`
+Lsigma:
+	.long   0x61707865,0x3320646e,0x79622d32,0x6b206574
+	.long	1,0,0,0
+	.long	4,0,0,0
+___
+$code.=<<___ 	if ($LITTLE_ENDIAN);
+	.long	0x0e0f0c0d,0x0a0b0809,0x06070405,0x02030001
+	.long	0x0d0e0f0c,0x090a0b08,0x05060704,0x01020300
+___
+$code.=<<___ 	if (!$LITTLE_ENDIAN);	# flipped words
+	.long	0x02030001,0x06070405,0x0a0b0809,0x0e0f0c0d
+	.long	0x01020300,0x05060704,0x090a0b08,0x0d0e0f0c
+___
+$code.=<<___;
+	.long	0x61707865,0x61707865,0x61707865,0x61707865
+	.long	0x3320646e,0x3320646e,0x3320646e,0x3320646e
+	.long	0x79622d32,0x79622d32,0x79622d32,0x79622d32
+	.long	0x6b206574,0x6b206574,0x6b206574,0x6b206574
+	.long	0,1,2,3
+.asciz  "ChaCha20 for PowerPC/AltiVec, CRYPTOGAMS by <appro\@openssl.org>"
+.align	2
+___
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	# instructions prefixed with '?' are endian-specific and need
+	# to be adjusted accordingly...
+	if ($flavour !~ /le$/) {	# big-endian
+	    s/be\?//		or
+	    s/le\?/#le#/	or
+	    s/\?lvsr/lvsl/	or
+	    s/\?lvsl/lvsr/	or
+	    s/\?(vperm\s+v[0-9]+,\s*)(v[0-9]+,\s*)(v[0-9]+,\s*)(v[0-9]+)/$1$3$2$4/ or
+	    s/vrldoi(\s+v[0-9]+,\s*)(v[0-9]+,)\s*([0-9]+)/vsldoi$1$2$2 16-$3/;
+	} else {			# little-endian
+	    s/le\?//		or
+	    s/be\?/#be#/	or
+	    s/\?([a-z]+)/$1/	or
+	    s/vrldoi(\s+v[0-9]+,\s*)(v[0-9]+,)\s*([0-9]+)/vsldoi$1$2$2 $3/;
+	}
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-s390x.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-s390x.pl
new file mode 100755
index 000000000..c31526473
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-s390x.pl
@@ -0,0 +1,326 @@
+#! /usr/bin/env perl
+# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# December 2015
+#
+# ChaCha20 for s390x.
+#
+# 3 times faster than compiler-generated code.
+
+$flavour = shift;
+
+if ($flavour =~ /3[12]/) {
+	$SIZE_T=4;
+	$g="";
+} else {
+	$SIZE_T=8;
+	$g="g";
+}
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+sub AUTOLOAD()		# thunk [simplified] x86-style perlasm
+{ my $opcode = $AUTOLOAD; $opcode =~ s/.*:://;
+    $code .= "\t$opcode\t".join(',',@_)."\n";
+}
+
+my $sp="%r15";
+
+my $stdframe=16*$SIZE_T+4*8;
+my $frame=$stdframe+4*20;
+
+my ($out,$inp,$len,$key,$counter)=map("%r$_",(2..6));
+
+my @x=map("%r$_",(0..7,"x","x","x","x",(10..13)));
+my @t=map("%r$_",(8,9));
+
+sub ROUND {
+my ($a0,$b0,$c0,$d0)=@_;
+my ($a1,$b1,$c1,$d1)=map(($_&~3)+(($_+1)&3),($a0,$b0,$c0,$d0));
+my ($a2,$b2,$c2,$d2)=map(($_&~3)+(($_+1)&3),($a1,$b1,$c1,$d1));
+my ($a3,$b3,$c3,$d3)=map(($_&~3)+(($_+1)&3),($a2,$b2,$c2,$d2));
+my ($xc,$xc_)=map("\"$_\"",@t);
+my @x=map("\"$_\"",@x);
+
+	# Consider order in which variables are addressed by their
+	# index:
+	#
+	#	a   b   c   d
+	#
+	#	0   4   8  12 < even round
+	#	1   5   9  13
+	#	2   6  10  14
+	#	3   7  11  15
+	#	0   5  10  15 < odd round
+	#	1   6  11  12
+	#	2   7   8  13
+	#	3   4   9  14
+	#
+	# 'a', 'b' and 'd's are permanently allocated in registers,
+	# @x[0..7,12..15], while 'c's are maintained in memory. If
+	# you observe 'c' column, you'll notice that pair of 'c's is
+	# invariant between rounds. This means that we have to reload
+	# them once per round, in the middle. This is why you'll see
+	# 'c' stores and loads in the middle, but none in the beginning
+	# or end.
+
+	(
+	"&alr	(@x[$a0],@x[$b0])",	# Q1
+	 "&alr	(@x[$a1],@x[$b1])",	# Q2
+	"&xr	(@x[$d0],@x[$a0])",
+	 "&xr	(@x[$d1],@x[$a1])",
+	"&rll	(@x[$d0],@x[$d0],16)",
+	 "&rll	(@x[$d1],@x[$d1],16)",
+
+	"&alr	($xc,@x[$d0])",
+	 "&alr	($xc_,@x[$d1])",
+	"&xr	(@x[$b0],$xc)",
+	 "&xr	(@x[$b1],$xc_)",
+	"&rll	(@x[$b0],@x[$b0],12)",
+	 "&rll	(@x[$b1],@x[$b1],12)",
+
+	"&alr	(@x[$a0],@x[$b0])",
+	 "&alr	(@x[$a1],@x[$b1])",
+	"&xr	(@x[$d0],@x[$a0])",
+	 "&xr	(@x[$d1],@x[$a1])",
+	"&rll	(@x[$d0],@x[$d0],8)",
+	 "&rll	(@x[$d1],@x[$d1],8)",
+
+	"&alr	($xc,@x[$d0])",
+	 "&alr	($xc_,@x[$d1])",
+	"&xr	(@x[$b0],$xc)",
+	 "&xr	(@x[$b1],$xc_)",
+	"&rll	(@x[$b0],@x[$b0],7)",
+	 "&rll	(@x[$b1],@x[$b1],7)",
+
+	"&stm	($xc,$xc_,'$stdframe+4*8+4*$c0($sp)')",	# reload pair of 'c's
+	"&lm	($xc,$xc_,'$stdframe+4*8+4*$c2($sp)')",
+
+	"&alr	(@x[$a2],@x[$b2])",	# Q3
+	 "&alr	(@x[$a3],@x[$b3])",	# Q4
+	"&xr	(@x[$d2],@x[$a2])",
+	 "&xr	(@x[$d3],@x[$a3])",
+	"&rll	(@x[$d2],@x[$d2],16)",
+	 "&rll	(@x[$d3],@x[$d3],16)",
+
+	"&alr	($xc,@x[$d2])",
+	 "&alr	($xc_,@x[$d3])",
+	"&xr	(@x[$b2],$xc)",
+	 "&xr	(@x[$b3],$xc_)",
+	"&rll	(@x[$b2],@x[$b2],12)",
+	 "&rll	(@x[$b3],@x[$b3],12)",
+
+	"&alr	(@x[$a2],@x[$b2])",
+	 "&alr	(@x[$a3],@x[$b3])",
+	"&xr	(@x[$d2],@x[$a2])",
+	 "&xr	(@x[$d3],@x[$a3])",
+	"&rll	(@x[$d2],@x[$d2],8)",
+	 "&rll	(@x[$d3],@x[$d3],8)",
+
+	"&alr	($xc,@x[$d2])",
+	 "&alr	($xc_,@x[$d3])",
+	"&xr	(@x[$b2],$xc)",
+	 "&xr	(@x[$b3],$xc_)",
+	"&rll	(@x[$b2],@x[$b2],7)",
+	 "&rll	(@x[$b3],@x[$b3],7)"
+	);
+}
+
+$code.=<<___;
+.text
+
+.globl	ChaCha20_ctr32
+.type	ChaCha20_ctr32,\@function
+.align	32
+ChaCha20_ctr32:
+	lt${g}r	$len,$len			# $len==0?
+	bzr	%r14
+	a${g}hi	$len,-64
+	l${g}hi	%r1,-$frame
+	stm${g}	%r6,%r15,`6*$SIZE_T`($sp)
+	sl${g}r	$out,$inp			# difference
+	la	$len,0($inp,$len)		# end of input minus 64
+	larl	%r7,.Lsigma
+	lgr	%r0,$sp
+	la	$sp,0(%r1,$sp)
+	st${g}	%r0,0($sp)
+
+	lmg	%r8,%r11,0($key)		# load key
+	lmg	%r12,%r13,0($counter)		# load counter
+	lmg	%r6,%r7,0(%r7)			# load sigma constant
+
+	la	%r14,0($inp)
+	st${g}	$out,$frame+3*$SIZE_T($sp)
+	st${g}	$len,$frame+4*$SIZE_T($sp)
+	stmg	%r6,%r13,$stdframe($sp)		# copy key schedule to stack
+	srlg	@x[12],%r12,32			# 32-bit counter value
+	j	.Loop_outer
+
+.align	16
+.Loop_outer:
+	lm	@x[0],@x[7],$stdframe+4*0($sp)		# load x[0]-x[7]
+	lm	@t[0],@t[1],$stdframe+4*10($sp)		# load x[10]-x[11]
+	lm	@x[13],@x[15],$stdframe+4*13($sp)	# load x[13]-x[15]
+	stm	@t[0],@t[1],$stdframe+4*8+4*10($sp)	# offload x[10]-x[11]
+	lm	@t[0],@t[1],$stdframe+4*8($sp)		# load x[8]-x[9]
+	st	@x[12],$stdframe+4*12($sp)		# save counter
+	st${g}	%r14,$frame+2*$SIZE_T($sp)		# save input pointer
+	lhi	%r14,10
+	j	.Loop
+
+.align	4
+.Loop:
+___
+	foreach (&ROUND(0, 4, 8,12)) { eval; }
+	foreach (&ROUND(0, 5,10,15)) { eval; }
+$code.=<<___;
+	brct	%r14,.Loop
+
+	l${g}	%r14,$frame+2*$SIZE_T($sp)		# pull input pointer
+	stm	@t[0],@t[1],$stdframe+4*8+4*8($sp)	# offload x[8]-x[9]
+	lm${g}	@t[0],@t[1],$frame+3*$SIZE_T($sp)
+
+	al	@x[0],$stdframe+4*0($sp)	# accumulate key schedule
+	al	@x[1],$stdframe+4*1($sp)
+	al	@x[2],$stdframe+4*2($sp)
+	al	@x[3],$stdframe+4*3($sp)
+	al	@x[4],$stdframe+4*4($sp)
+	al	@x[5],$stdframe+4*5($sp)
+	al	@x[6],$stdframe+4*6($sp)
+	al	@x[7],$stdframe+4*7($sp)
+	lrvr	@x[0],@x[0]
+	lrvr	@x[1],@x[1]
+	lrvr	@x[2],@x[2]
+	lrvr	@x[3],@x[3]
+	lrvr	@x[4],@x[4]
+	lrvr	@x[5],@x[5]
+	lrvr	@x[6],@x[6]
+	lrvr	@x[7],@x[7]
+	al	@x[12],$stdframe+4*12($sp)
+	al	@x[13],$stdframe+4*13($sp)
+	al	@x[14],$stdframe+4*14($sp)
+	al	@x[15],$stdframe+4*15($sp)
+	lrvr	@x[12],@x[12]
+	lrvr	@x[13],@x[13]
+	lrvr	@x[14],@x[14]
+	lrvr	@x[15],@x[15]
+
+	la	@t[0],0(@t[0],%r14)		# reconstruct output pointer
+	cl${g}r	%r14,@t[1]
+	jh	.Ltail
+
+	x	@x[0],4*0(%r14)			# xor with input
+	x	@x[1],4*1(%r14)
+	st	@x[0],4*0(@t[0])		# store output
+	x	@x[2],4*2(%r14)
+	st	@x[1],4*1(@t[0])
+	x	@x[3],4*3(%r14)
+	st	@x[2],4*2(@t[0])
+	x	@x[4],4*4(%r14)
+	st	@x[3],4*3(@t[0])
+	 lm	@x[0],@x[3],$stdframe+4*8+4*8($sp)	# load x[8]-x[11]
+	x	@x[5],4*5(%r14)
+	st	@x[4],4*4(@t[0])
+	x	@x[6],4*6(%r14)
+	 al	@x[0],$stdframe+4*8($sp)
+	st	@x[5],4*5(@t[0])
+	x	@x[7],4*7(%r14)
+	 al	@x[1],$stdframe+4*9($sp)
+	st	@x[6],4*6(@t[0])
+	x	@x[12],4*12(%r14)
+	 al	@x[2],$stdframe+4*10($sp)
+	st	@x[7],4*7(@t[0])
+	x	@x[13],4*13(%r14)
+	 al	@x[3],$stdframe+4*11($sp)
+	st	@x[12],4*12(@t[0])
+	x	@x[14],4*14(%r14)
+	st	@x[13],4*13(@t[0])
+	x	@x[15],4*15(%r14)
+	st	@x[14],4*14(@t[0])
+	 lrvr	@x[0],@x[0]
+	st	@x[15],4*15(@t[0])
+	 lrvr	@x[1],@x[1]
+	 lrvr	@x[2],@x[2]
+	 lrvr	@x[3],@x[3]
+	lhi	@x[12],1
+	 x	@x[0],4*8(%r14)
+	al	@x[12],$stdframe+4*12($sp)	# increment counter
+	 x	@x[1],4*9(%r14)
+	 st	@x[0],4*8(@t[0])
+	 x	@x[2],4*10(%r14)
+	 st	@x[1],4*9(@t[0])
+	 x	@x[3],4*11(%r14)
+	 st	@x[2],4*10(@t[0])
+	 st	@x[3],4*11(@t[0])
+
+	cl${g}r	%r14,@t[1]			# done yet?
+	la	%r14,64(%r14)
+	jl	.Loop_outer
+
+.Ldone:
+	xgr	%r0,%r0
+	xgr	%r1,%r1
+	xgr	%r2,%r2
+	xgr	%r3,%r3
+	stmg	%r0,%r3,$stdframe+4*4($sp)	# wipe key copy
+	stmg	%r0,%r3,$stdframe+4*12($sp)
+
+	lm${g}	%r6,%r15,`$frame+6*$SIZE_T`($sp)
+	br	%r14
+
+.align	16
+.Ltail:
+	la	@t[1],64($t[1])
+	stm	@x[0],@x[7],$stdframe+4*0($sp)
+	sl${g}r	@t[1],%r14
+	lm	@x[0],@x[3],$stdframe+4*8+4*8($sp)
+	l${g}hi	@x[6],0
+	stm	@x[12],@x[15],$stdframe+4*12($sp)
+	al	@x[0],$stdframe+4*8($sp)
+	al	@x[1],$stdframe+4*9($sp)
+	al	@x[2],$stdframe+4*10($sp)
+	al	@x[3],$stdframe+4*11($sp)
+	lrvr	@x[0],@x[0]
+	lrvr	@x[1],@x[1]
+	lrvr	@x[2],@x[2]
+	lrvr	@x[3],@x[3]
+	stm	@x[0],@x[3],$stdframe+4*8($sp)
+
+.Loop_tail:
+	llgc	@x[4],0(@x[6],%r14)
+	llgc	@x[5],$stdframe(@x[6],$sp)
+	xr	@x[5],@x[4]
+	stc	@x[5],0(@x[6],@t[0])
+	la	@x[6],1(@x[6])
+	brct	@t[1],.Loop_tail
+
+	j	.Ldone
+.size	ChaCha20_ctr32,.-ChaCha20_ctr32
+
+.align	32
+.Lsigma:
+.long	0x61707865,0x3320646e,0x79622d32,0x6b206574	# endian-neutral
+.asciz	"ChaCha20 for s390x, CRYPTOGAMS by <appro\@openssl.org>"
+.align	4
+___
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	print $_,"\n";
+}
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-x86.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-x86.pl
new file mode 100755
index 000000000..13c217dcf
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-x86.pl
@@ -0,0 +1,1155 @@
+#! /usr/bin/env perl
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# January 2015
+#
+# ChaCha20 for x86.
+#
+# Performance in cycles per byte out of large buffer.
+#
+#		1xIALU/gcc	4xSSSE3
+# Pentium	17.5/+80%
+# PIII		14.2/+60%
+# P4		18.6/+84%
+# Core2		9.56/+89%	4.83
+# Westmere	9.50/+45%	3.35
+# Sandy Bridge	10.5/+47%	3.20
+# Haswell	8.15/+50%	2.83
+# Skylake	7.53/+22%	2.75
+# Silvermont	17.4/+36%	8.35
+# Goldmont	13.4/+40%	4.36
+# Sledgehammer	10.2/+54%
+# Bulldozer	13.4/+50%	4.38(*)
+#
+# (*)	Bulldozer actually executes 4xXOP code path that delivers 3.55;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output=pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0],$ARGV[$#ARGV] eq "386");
+
+$xmm=$ymm=0;
+for (@ARGV) { $xmm=1 if (/-DOPENSSL_IA32_SSE2/); }
+
+$ymm=1 if ($xmm &&
+		`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+			=~ /GNU assembler version ([2-9]\.[0-9]+)/ &&
+		($gasver=$1)>=2.19);	# first version supporting AVX
+
+$ymm=1 if ($xmm && !$ymm && $ARGV[0] eq "win32n" &&
+		`nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/ &&
+		$1>=2.03);	# first version supporting AVX
+
+$ymm=1 if ($xmm && !$ymm && $ARGV[0] eq "win32" &&
+		`ml 2>&1` =~ /Version ([0-9]+)\./ &&
+		$1>=10);	# first version supporting AVX
+
+$ymm=1 if ($xmm && !$ymm &&
+		`$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|based on LLVM) ([3-9]\.[0-9]+)/ &&
+		$2>=3.0);	# first version supporting AVX
+
+$a="eax";
+($b,$b_)=("ebx","ebp");
+($c,$c_)=("ecx","esi");
+($d,$d_)=("edx","edi");
+
+sub QUARTERROUND {
+my ($ai,$bi,$ci,$di,$i)=@_;
+my ($an,$bn,$cn,$dn)=map(($_&~3)+(($_+1)&3),($ai,$bi,$ci,$di));	# next
+my ($ap,$bp,$cp,$dp)=map(($_&~3)+(($_-1)&3),($ai,$bi,$ci,$di));	# previous
+
+	#       a   b   c   d
+	#
+	#       0   4   8  12 < even round
+	#       1   5   9  13
+	#       2   6  10  14
+	#       3   7  11  15
+	#       0   5  10  15 < odd round
+	#       1   6  11  12
+	#       2   7   8  13
+	#       3   4   9  14
+
+	if ($i==0) {
+            my $j=4;
+	    ($ap,$bp,$cp,$dp)=map(($_&~3)+(($_-$j--)&3),($ap,$bp,$cp,$dp));
+	} elsif ($i==3) {
+            my $j=0;
+	    ($an,$bn,$cn,$dn)=map(($_&~3)+(($_+$j++)&3),($an,$bn,$cn,$dn));
+	} elsif ($i==4) {
+            my $j=4;
+	    ($ap,$bp,$cp,$dp)=map(($_&~3)+(($_+$j--)&3),($ap,$bp,$cp,$dp));
+	} elsif ($i==7) {
+            my $j=0;
+	    ($an,$bn,$cn,$dn)=map(($_&~3)+(($_-$j++)&3),($an,$bn,$cn,$dn));
+	}
+
+	#&add	($a,$b);			# see elsewhere
+	&xor	($d,$a);
+	 &mov	(&DWP(4*$cp,"esp"),$c_)		if ($ai>0 && $ai<3);
+	&rol	($d,16);
+	 &mov	(&DWP(4*$bp,"esp"),$b_)		if ($i!=0);
+	&add	($c,$d);
+	 &mov	($c_,&DWP(4*$cn,"esp"))		if ($ai>0 && $ai<3);
+	&xor	($b,$c);
+	 &mov	($d_,&DWP(4*$dn,"esp"))		if ($di!=$dn);
+	&rol	($b,12);
+	 &mov	($b_,&DWP(4*$bn,"esp"))		if ($i<7);
+	 &mov	($b_,&DWP(128,"esp"))		if ($i==7);	# loop counter
+	&add	($a,$b);
+	&xor	($d,$a);
+	&mov	(&DWP(4*$ai,"esp"),$a);
+	&rol	($d,8);
+	&mov	($a,&DWP(4*$an,"esp"));
+	&add	($c,$d);
+	&mov	(&DWP(4*$di,"esp"),$d)		if ($di!=$dn);
+	&mov	($d_,$d)			if ($di==$dn);
+	&xor	($b,$c);
+	 &add	($a,$b_)			if ($i<7);	# elsewhere
+	&rol	($b,7);
+
+	($b,$b_)=($b_,$b);
+	($c,$c_)=($c_,$c);
+	($d,$d_)=($d_,$d);
+}
+
+&static_label("ssse3_shortcut");
+&static_label("xop_shortcut");
+&static_label("ssse3_data");
+&static_label("pic_point");
+
+&function_begin("ChaCha20_ctr32");
+	&xor	("eax","eax");
+	&cmp	("eax",&wparam(2));		# len==0?
+	&je	(&label("no_data"));
+if ($xmm) {
+	&call	(&label("pic_point"));
+&set_label("pic_point");
+	&blindpop("eax");
+	&picmeup("ebp","OPENSSL_ia32cap_P","eax",&label("pic_point"));
+	&test	(&DWP(0,"ebp"),1<<24);		# test FXSR bit
+	&jz	(&label("x86"));
+	&test	(&DWP(4,"ebp"),1<<9);		# test SSSE3 bit
+	&jz	(&label("x86"));
+	&jmp	(&label("ssse3_shortcut"));
+&set_label("x86");
+}
+	&mov	("esi",&wparam(3));		# key
+	&mov	("edi",&wparam(4));		# counter and nonce
+
+	&stack_push(33);
+
+	&mov	("eax",&DWP(4*0,"esi"));	# copy key
+	&mov	("ebx",&DWP(4*1,"esi"));
+	&mov	("ecx",&DWP(4*2,"esi"));
+	&mov	("edx",&DWP(4*3,"esi"));
+	&mov	(&DWP(64+4*4,"esp"),"eax");
+	&mov	(&DWP(64+4*5,"esp"),"ebx");
+	&mov	(&DWP(64+4*6,"esp"),"ecx");
+	&mov	(&DWP(64+4*7,"esp"),"edx");
+	&mov	("eax",&DWP(4*4,"esi"));
+	&mov	("ebx",&DWP(4*5,"esi"));
+	&mov	("ecx",&DWP(4*6,"esi"));
+	&mov	("edx",&DWP(4*7,"esi"));
+	&mov	(&DWP(64+4*8,"esp"),"eax");
+	&mov	(&DWP(64+4*9,"esp"),"ebx");
+	&mov	(&DWP(64+4*10,"esp"),"ecx");
+	&mov	(&DWP(64+4*11,"esp"),"edx");
+	&mov	("eax",&DWP(4*0,"edi"));	# copy counter and nonce
+	&mov	("ebx",&DWP(4*1,"edi"));
+	&mov	("ecx",&DWP(4*2,"edi"));
+	&mov	("edx",&DWP(4*3,"edi"));
+	&sub	("eax",1);
+	&mov	(&DWP(64+4*12,"esp"),"eax");
+	&mov	(&DWP(64+4*13,"esp"),"ebx");
+	&mov	(&DWP(64+4*14,"esp"),"ecx");
+	&mov	(&DWP(64+4*15,"esp"),"edx");
+	&jmp	(&label("entry"));
+
+&set_label("outer_loop",16);
+	&mov	(&wparam(1),$b);		# save input
+	&mov	(&wparam(0),$a);		# save output
+	&mov	(&wparam(2),$c);		# save len
+&set_label("entry");
+	&mov	($a,0x61707865);
+	&mov	(&DWP(4*1,"esp"),0x3320646e);
+	&mov	(&DWP(4*2,"esp"),0x79622d32);
+	&mov	(&DWP(4*3,"esp"),0x6b206574);
+
+	&mov	($b, &DWP(64+4*5,"esp"));	# copy key material
+	&mov	($b_,&DWP(64+4*6,"esp"));
+	&mov	($c, &DWP(64+4*10,"esp"));
+	&mov	($c_,&DWP(64+4*11,"esp"));
+	&mov	($d, &DWP(64+4*13,"esp"));
+	&mov	($d_,&DWP(64+4*14,"esp"));
+	&mov	(&DWP(4*5,"esp"),$b);
+	&mov	(&DWP(4*6,"esp"),$b_);
+	&mov	(&DWP(4*10,"esp"),$c);
+	&mov	(&DWP(4*11,"esp"),$c_);
+	&mov	(&DWP(4*13,"esp"),$d);
+	&mov	(&DWP(4*14,"esp"),$d_);
+
+	&mov	($b, &DWP(64+4*7,"esp"));
+	&mov	($d_,&DWP(64+4*15,"esp"));
+	&mov	($d, &DWP(64+4*12,"esp"));
+	&mov	($b_,&DWP(64+4*4,"esp"));
+	&mov	($c, &DWP(64+4*8,"esp"));
+	&mov	($c_,&DWP(64+4*9,"esp"));
+	&add	($d,1);				# counter value
+	&mov	(&DWP(4*7,"esp"),$b);
+	&mov	(&DWP(4*15,"esp"),$d_);
+	&mov	(&DWP(64+4*12,"esp"),$d);	# save counter value
+
+	&mov	($b,10);			# loop counter
+	&jmp	(&label("loop"));
+
+&set_label("loop",16);
+	&add	($a,$b_);			# elsewhere
+	&mov	(&DWP(128,"esp"),$b);		# save loop counter
+	&mov	($b,$b_);
+	&QUARTERROUND(0, 4, 8, 12, 0);
+	&QUARTERROUND(1, 5, 9, 13, 1);
+	&QUARTERROUND(2, 6,10, 14, 2);
+	&QUARTERROUND(3, 7,11, 15, 3);
+	&QUARTERROUND(0, 5,10, 15, 4);
+	&QUARTERROUND(1, 6,11, 12, 5);
+	&QUARTERROUND(2, 7, 8, 13, 6);
+	&QUARTERROUND(3, 4, 9, 14, 7);
+	&dec	($b);
+	&jnz	(&label("loop"));
+
+	&mov	($b,&wparam(2));		# load len
+
+	&add	($a,0x61707865);		# accumulate key material
+	&add	($b_,&DWP(64+4*4,"esp"));
+	&add	($c, &DWP(64+4*8,"esp"));
+	&add	($c_,&DWP(64+4*9,"esp"));
+
+	&cmp	($b,64);
+	&jb	(&label("tail"));
+
+	&mov	($b,&wparam(1));		# load input pointer
+	&add	($d, &DWP(64+4*12,"esp"));
+	&add	($d_,&DWP(64+4*14,"esp"));
+
+	&xor	($a, &DWP(4*0,$b));		# xor with input
+	&xor	($b_,&DWP(4*4,$b));
+	&mov	(&DWP(4*0,"esp"),$a);
+	&mov	($a,&wparam(0));		# load output pointer
+	&xor	($c, &DWP(4*8,$b));
+	&xor	($c_,&DWP(4*9,$b));
+	&xor	($d, &DWP(4*12,$b));
+	&xor	($d_,&DWP(4*14,$b));
+	&mov	(&DWP(4*4,$a),$b_);		# write output
+	&mov	(&DWP(4*8,$a),$c);
+	&mov	(&DWP(4*9,$a),$c_);
+	&mov	(&DWP(4*12,$a),$d);
+	&mov	(&DWP(4*14,$a),$d_);
+
+	&mov	($b_,&DWP(4*1,"esp"));
+	&mov	($c, &DWP(4*2,"esp"));
+	&mov	($c_,&DWP(4*3,"esp"));
+	&mov	($d, &DWP(4*5,"esp"));
+	&mov	($d_,&DWP(4*6,"esp"));
+	&add	($b_,0x3320646e);		# accumulate key material
+	&add	($c, 0x79622d32);
+	&add	($c_,0x6b206574);
+	&add	($d, &DWP(64+4*5,"esp"));
+	&add	($d_,&DWP(64+4*6,"esp"));
+	&xor	($b_,&DWP(4*1,$b));
+	&xor	($c, &DWP(4*2,$b));
+	&xor	($c_,&DWP(4*3,$b));
+	&xor	($d, &DWP(4*5,$b));
+	&xor	($d_,&DWP(4*6,$b));
+	&mov	(&DWP(4*1,$a),$b_);
+	&mov	(&DWP(4*2,$a),$c);
+	&mov	(&DWP(4*3,$a),$c_);
+	&mov	(&DWP(4*5,$a),$d);
+	&mov	(&DWP(4*6,$a),$d_);
+
+	&mov	($b_,&DWP(4*7,"esp"));
+	&mov	($c, &DWP(4*10,"esp"));
+	&mov	($c_,&DWP(4*11,"esp"));
+	&mov	($d, &DWP(4*13,"esp"));
+	&mov	($d_,&DWP(4*15,"esp"));
+	&add	($b_,&DWP(64+4*7,"esp"));
+	&add	($c, &DWP(64+4*10,"esp"));
+	&add	($c_,&DWP(64+4*11,"esp"));
+	&add	($d, &DWP(64+4*13,"esp"));
+	&add	($d_,&DWP(64+4*15,"esp"));
+	&xor	($b_,&DWP(4*7,$b));
+	&xor	($c, &DWP(4*10,$b));
+	&xor	($c_,&DWP(4*11,$b));
+	&xor	($d, &DWP(4*13,$b));
+	&xor	($d_,&DWP(4*15,$b));
+	&lea	($b,&DWP(4*16,$b));
+	&mov	(&DWP(4*7,$a),$b_);
+	&mov	($b_,&DWP(4*0,"esp"));
+	&mov	(&DWP(4*10,$a),$c);
+	&mov	($c,&wparam(2));		# len
+	&mov	(&DWP(4*11,$a),$c_);
+	&mov	(&DWP(4*13,$a),$d);
+	&mov	(&DWP(4*15,$a),$d_);
+	&mov	(&DWP(4*0,$a),$b_);
+	&lea	($a,&DWP(4*16,$a));
+	&sub	($c,64);
+	&jnz	(&label("outer_loop"));
+
+	&jmp	(&label("done"));
+
+&set_label("tail");
+	&add	($d, &DWP(64+4*12,"esp"));
+	&add	($d_,&DWP(64+4*14,"esp"));
+	&mov	(&DWP(4*0,"esp"),$a);
+	&mov	(&DWP(4*4,"esp"),$b_);
+	&mov	(&DWP(4*8,"esp"),$c);
+	&mov	(&DWP(4*9,"esp"),$c_);
+	&mov	(&DWP(4*12,"esp"),$d);
+	&mov	(&DWP(4*14,"esp"),$d_);
+
+	&mov	($b_,&DWP(4*1,"esp"));
+	&mov	($c, &DWP(4*2,"esp"));
+	&mov	($c_,&DWP(4*3,"esp"));
+	&mov	($d, &DWP(4*5,"esp"));
+	&mov	($d_,&DWP(4*6,"esp"));
+	&add	($b_,0x3320646e);		# accumulate key material
+	&add	($c, 0x79622d32);
+	&add	($c_,0x6b206574);
+	&add	($d, &DWP(64+4*5,"esp"));
+	&add	($d_,&DWP(64+4*6,"esp"));
+	&mov	(&DWP(4*1,"esp"),$b_);
+	&mov	(&DWP(4*2,"esp"),$c);
+	&mov	(&DWP(4*3,"esp"),$c_);
+	&mov	(&DWP(4*5,"esp"),$d);
+	&mov	(&DWP(4*6,"esp"),$d_);
+
+	&mov	($b_,&DWP(4*7,"esp"));
+	&mov	($c, &DWP(4*10,"esp"));
+	&mov	($c_,&DWP(4*11,"esp"));
+	&mov	($d, &DWP(4*13,"esp"));
+	&mov	($d_,&DWP(4*15,"esp"));
+	&add	($b_,&DWP(64+4*7,"esp"));
+	&add	($c, &DWP(64+4*10,"esp"));
+	&add	($c_,&DWP(64+4*11,"esp"));
+	&add	($d, &DWP(64+4*13,"esp"));
+	&add	($d_,&DWP(64+4*15,"esp"));
+	&mov	(&DWP(4*7,"esp"),$b_);
+	&mov	($b_,&wparam(1));		# load input
+	&mov	(&DWP(4*10,"esp"),$c);
+	&mov	($c,&wparam(0));		# load output
+	&mov	(&DWP(4*11,"esp"),$c_);
+	&xor	($c_,$c_);
+	&mov	(&DWP(4*13,"esp"),$d);
+	&mov	(&DWP(4*15,"esp"),$d_);
+
+	&xor	("eax","eax");
+	&xor	("edx","edx");
+&set_label("tail_loop");
+	&movb	("al",&BP(0,$c_,$b_));
+	&movb	("dl",&BP(0,"esp",$c_));
+	&lea	($c_,&DWP(1,$c_));
+	&xor	("al","dl");
+	&mov	(&BP(-1,$c,$c_),"al");
+	&dec	($b);
+	&jnz	(&label("tail_loop"));
+
+&set_label("done");
+	&stack_pop(33);
+&set_label("no_data");
+&function_end("ChaCha20_ctr32");
+
+if ($xmm) {
+my ($xa,$xa_,$xb,$xb_,$xc,$xc_,$xd,$xd_)=map("xmm$_",(0..7));
+my ($out,$inp,$len)=("edi","esi","ecx");
+
+sub QUARTERROUND_SSSE3 {
+my ($ai,$bi,$ci,$di,$i)=@_;
+my ($an,$bn,$cn,$dn)=map(($_&~3)+(($_+1)&3),($ai,$bi,$ci,$di));	# next
+my ($ap,$bp,$cp,$dp)=map(($_&~3)+(($_-1)&3),($ai,$bi,$ci,$di));	# previous
+
+	#       a   b   c   d
+	#
+	#       0   4   8  12 < even round
+	#       1   5   9  13
+	#       2   6  10  14
+	#       3   7  11  15
+	#       0   5  10  15 < odd round
+	#       1   6  11  12
+	#       2   7   8  13
+	#       3   4   9  14
+
+	if ($i==0) {
+            my $j=4;
+	    ($ap,$bp,$cp,$dp)=map(($_&~3)+(($_-$j--)&3),($ap,$bp,$cp,$dp));
+	} elsif ($i==3) {
+            my $j=0;
+	    ($an,$bn,$cn,$dn)=map(($_&~3)+(($_+$j++)&3),($an,$bn,$cn,$dn));
+	} elsif ($i==4) {
+            my $j=4;
+	    ($ap,$bp,$cp,$dp)=map(($_&~3)+(($_+$j--)&3),($ap,$bp,$cp,$dp));
+	} elsif ($i==7) {
+            my $j=0;
+	    ($an,$bn,$cn,$dn)=map(($_&~3)+(($_-$j++)&3),($an,$bn,$cn,$dn));
+	}
+
+	#&paddd	($xa,$xb);			# see elsewhere
+	#&pxor	($xd,$xa);			# see elsewhere
+	 &movdqa(&QWP(16*$cp-128,"ebx"),$xc_)	if ($ai>0 && $ai<3);
+	&pshufb	($xd,&QWP(0,"eax"));		# rot16
+	 &movdqa(&QWP(16*$bp-128,"ebx"),$xb_)	if ($i!=0);
+	&paddd	($xc,$xd);
+	 &movdqa($xc_,&QWP(16*$cn-128,"ebx"))	if ($ai>0 && $ai<3);
+	&pxor	($xb,$xc);
+	 &movdqa($xb_,&QWP(16*$bn-128,"ebx"))	if ($i<7);
+	&movdqa	($xa_,$xb);			# borrow as temporary
+	&pslld	($xb,12);
+	&psrld	($xa_,20);
+	&por	($xb,$xa_);
+	 &movdqa($xa_,&QWP(16*$an-128,"ebx"));
+	&paddd	($xa,$xb);
+	 &movdqa($xd_,&QWP(16*$dn-128,"ebx"))	if ($di!=$dn);
+	&pxor	($xd,$xa);
+	&movdqa	(&QWP(16*$ai-128,"ebx"),$xa);
+	&pshufb	($xd,&QWP(16,"eax"));		# rot8
+	&paddd	($xc,$xd);
+	&movdqa	(&QWP(16*$di-128,"ebx"),$xd)	if ($di!=$dn);
+	&movdqa	($xd_,$xd)			if ($di==$dn);
+	&pxor	($xb,$xc);
+	 &paddd	($xa_,$xb_)			if ($i<7);	# elsewhere
+	&movdqa	($xa,$xb);			# borrow as temporary
+	&pslld	($xb,7);
+	&psrld	($xa,25);
+	 &pxor	($xd_,$xa_)			if ($i<7);	# elsewhere
+	&por	($xb,$xa);
+
+	($xa,$xa_)=($xa_,$xa);
+	($xb,$xb_)=($xb_,$xb);
+	($xc,$xc_)=($xc_,$xc);
+	($xd,$xd_)=($xd_,$xd);
+}
+
+&function_begin("ChaCha20_ssse3");
+&set_label("ssse3_shortcut");
+if ($ymm) {
+	&test		(&DWP(4,"ebp"),1<<11);		# test XOP bit
+	&jnz		(&label("xop_shortcut"));
+}
+
+	&mov		($out,&wparam(0));
+	&mov		($inp,&wparam(1));
+	&mov		($len,&wparam(2));
+	&mov		("edx",&wparam(3));		# key
+	&mov		("ebx",&wparam(4));		# counter and nonce
+
+	&mov		("ebp","esp");
+	&stack_push	(131);
+	&and		("esp",-64);
+	&mov		(&DWP(512,"esp"),"ebp");
+
+	&lea		("eax",&DWP(&label("ssse3_data")."-".
+				    &label("pic_point"),"eax"));
+	&movdqu		("xmm3",&QWP(0,"ebx"));		# counter and nonce
+
+if (defined($gasver) && $gasver>=2.17) {		# even though we encode
+							# pshufb manually, we
+							# handle only register
+							# operands, while this
+							# segment uses memory
+							# operand...
+	&cmp		($len,64*4);
+	&jb		(&label("1x"));
+
+	&mov		(&DWP(512+4,"esp"),"edx");	# offload pointers
+	&mov		(&DWP(512+8,"esp"),"ebx");
+	&sub		($len,64*4);			# bias len
+	&lea		("ebp",&DWP(256+128,"esp"));	# size optimization
+
+	&movdqu		("xmm7",&QWP(0,"edx"));		# key
+	&pshufd		("xmm0","xmm3",0x00);
+	&pshufd		("xmm1","xmm3",0x55);
+	&pshufd		("xmm2","xmm3",0xaa);
+	&pshufd		("xmm3","xmm3",0xff);
+	 &paddd		("xmm0",&QWP(16*3,"eax"));	# fix counters
+	&pshufd		("xmm4","xmm7",0x00);
+	&pshufd		("xmm5","xmm7",0x55);
+	 &psubd		("xmm0",&QWP(16*4,"eax"));
+	&pshufd		("xmm6","xmm7",0xaa);
+	&pshufd		("xmm7","xmm7",0xff);
+	&movdqa		(&QWP(16*12-128,"ebp"),"xmm0");
+	&movdqa		(&QWP(16*13-128,"ebp"),"xmm1");
+	&movdqa		(&QWP(16*14-128,"ebp"),"xmm2");
+	&movdqa		(&QWP(16*15-128,"ebp"),"xmm3");
+	 &movdqu	("xmm3",&QWP(16,"edx"));	# key
+	&movdqa		(&QWP(16*4-128,"ebp"),"xmm4");
+	&movdqa		(&QWP(16*5-128,"ebp"),"xmm5");
+	&movdqa		(&QWP(16*6-128,"ebp"),"xmm6");
+	&movdqa		(&QWP(16*7-128,"ebp"),"xmm7");
+	 &movdqa	("xmm7",&QWP(16*2,"eax"));	# sigma
+	 &lea		("ebx",&DWP(128,"esp"));	# size optimization
+
+	&pshufd		("xmm0","xmm3",0x00);
+	&pshufd		("xmm1","xmm3",0x55);
+	&pshufd		("xmm2","xmm3",0xaa);
+	&pshufd		("xmm3","xmm3",0xff);
+	&pshufd		("xmm4","xmm7",0x00);
+	&pshufd		("xmm5","xmm7",0x55);
+	&pshufd		("xmm6","xmm7",0xaa);
+	&pshufd		("xmm7","xmm7",0xff);
+	&movdqa		(&QWP(16*8-128,"ebp"),"xmm0");
+	&movdqa		(&QWP(16*9-128,"ebp"),"xmm1");
+	&movdqa		(&QWP(16*10-128,"ebp"),"xmm2");
+	&movdqa		(&QWP(16*11-128,"ebp"),"xmm3");
+	&movdqa		(&QWP(16*0-128,"ebp"),"xmm4");
+	&movdqa		(&QWP(16*1-128,"ebp"),"xmm5");
+	&movdqa		(&QWP(16*2-128,"ebp"),"xmm6");
+	&movdqa		(&QWP(16*3-128,"ebp"),"xmm7");
+
+	&lea		($inp,&DWP(128,$inp));		# size optimization
+	&lea		($out,&DWP(128,$out));		# size optimization
+	&jmp		(&label("outer_loop"));
+
+&set_label("outer_loop",16);
+	#&movdqa	("xmm0",&QWP(16*0-128,"ebp"));	# copy key material
+	&movdqa		("xmm1",&QWP(16*1-128,"ebp"));
+	&movdqa		("xmm2",&QWP(16*2-128,"ebp"));
+	&movdqa		("xmm3",&QWP(16*3-128,"ebp"));
+	#&movdqa	("xmm4",&QWP(16*4-128,"ebp"));
+	&movdqa		("xmm5",&QWP(16*5-128,"ebp"));
+	&movdqa		("xmm6",&QWP(16*6-128,"ebp"));
+	&movdqa		("xmm7",&QWP(16*7-128,"ebp"));
+	#&movdqa	(&QWP(16*0-128,"ebx"),"xmm0");
+	&movdqa		(&QWP(16*1-128,"ebx"),"xmm1");
+	&movdqa		(&QWP(16*2-128,"ebx"),"xmm2");
+	&movdqa		(&QWP(16*3-128,"ebx"),"xmm3");
+	#&movdqa	(&QWP(16*4-128,"ebx"),"xmm4");
+	&movdqa		(&QWP(16*5-128,"ebx"),"xmm5");
+	&movdqa		(&QWP(16*6-128,"ebx"),"xmm6");
+	&movdqa		(&QWP(16*7-128,"ebx"),"xmm7");
+	#&movdqa	("xmm0",&QWP(16*8-128,"ebp"));
+	#&movdqa	("xmm1",&QWP(16*9-128,"ebp"));
+	&movdqa		("xmm2",&QWP(16*10-128,"ebp"));
+	&movdqa		("xmm3",&QWP(16*11-128,"ebp"));
+	&movdqa		("xmm4",&QWP(16*12-128,"ebp"));
+	&movdqa		("xmm5",&QWP(16*13-128,"ebp"));
+	&movdqa		("xmm6",&QWP(16*14-128,"ebp"));
+	&movdqa		("xmm7",&QWP(16*15-128,"ebp"));
+	&paddd		("xmm4",&QWP(16*4,"eax"));	# counter value
+	#&movdqa	(&QWP(16*8-128,"ebx"),"xmm0");
+	#&movdqa	(&QWP(16*9-128,"ebx"),"xmm1");
+	&movdqa		(&QWP(16*10-128,"ebx"),"xmm2");
+	&movdqa		(&QWP(16*11-128,"ebx"),"xmm3");
+	&movdqa		(&QWP(16*12-128,"ebx"),"xmm4");
+	&movdqa		(&QWP(16*13-128,"ebx"),"xmm5");
+	&movdqa		(&QWP(16*14-128,"ebx"),"xmm6");
+	&movdqa		(&QWP(16*15-128,"ebx"),"xmm7");
+	&movdqa		(&QWP(16*12-128,"ebp"),"xmm4");	# save counter value
+
+	&movdqa		($xa, &QWP(16*0-128,"ebp"));
+	&movdqa		($xd, "xmm4");
+	&movdqa		($xb_,&QWP(16*4-128,"ebp"));
+	&movdqa		($xc, &QWP(16*8-128,"ebp"));
+	&movdqa		($xc_,&QWP(16*9-128,"ebp"));
+
+	&mov		("edx",10);			# loop counter
+	&nop		();
+
+&set_label("loop",16);
+	&paddd		($xa,$xb_);			# elsewhere
+	&movdqa		($xb,$xb_);
+	&pxor		($xd,$xa);			# elsewhere
+	&QUARTERROUND_SSSE3(0, 4, 8, 12, 0);
+	&QUARTERROUND_SSSE3(1, 5, 9, 13, 1);
+	&QUARTERROUND_SSSE3(2, 6,10, 14, 2);
+	&QUARTERROUND_SSSE3(3, 7,11, 15, 3);
+	&QUARTERROUND_SSSE3(0, 5,10, 15, 4);
+	&QUARTERROUND_SSSE3(1, 6,11, 12, 5);
+	&QUARTERROUND_SSSE3(2, 7, 8, 13, 6);
+	&QUARTERROUND_SSSE3(3, 4, 9, 14, 7);
+	&dec		("edx");
+	&jnz		(&label("loop"));
+
+	&movdqa		(&QWP(16*4-128,"ebx"),$xb_);
+	&movdqa		(&QWP(16*8-128,"ebx"),$xc);
+	&movdqa		(&QWP(16*9-128,"ebx"),$xc_);
+	&movdqa		(&QWP(16*12-128,"ebx"),$xd);
+	&movdqa		(&QWP(16*14-128,"ebx"),$xd_);
+
+    my ($xa0,$xa1,$xa2,$xa3,$xt0,$xt1,$xt2,$xt3)=map("xmm$_",(0..7));
+
+	#&movdqa	($xa0,&QWP(16*0-128,"ebx"));	# it's there
+	&movdqa		($xa1,&QWP(16*1-128,"ebx"));
+	&movdqa		($xa2,&QWP(16*2-128,"ebx"));
+	&movdqa		($xa3,&QWP(16*3-128,"ebx"));
+
+    for($i=0;$i<256;$i+=64) {
+	&paddd		($xa0,&QWP($i+16*0-128,"ebp"));	# accumulate key material
+	&paddd		($xa1,&QWP($i+16*1-128,"ebp"));
+	&paddd		($xa2,&QWP($i+16*2-128,"ebp"));
+	&paddd		($xa3,&QWP($i+16*3-128,"ebp"));
+
+	&movdqa		($xt2,$xa0);		# "de-interlace" data
+	&punpckldq	($xa0,$xa1);
+	&movdqa		($xt3,$xa2);
+	&punpckldq	($xa2,$xa3);
+	&punpckhdq	($xt2,$xa1);
+	&punpckhdq	($xt3,$xa3);
+	&movdqa		($xa1,$xa0);
+	&punpcklqdq	($xa0,$xa2);		# "a0"
+	&movdqa		($xa3,$xt2);
+	&punpcklqdq	($xt2,$xt3);		# "a2"
+	&punpckhqdq	($xa1,$xa2);		# "a1"
+	&punpckhqdq	($xa3,$xt3);		# "a3"
+
+	#($xa2,$xt2)=($xt2,$xa2);
+
+	&movdqu		($xt0,&QWP(64*0-128,$inp));	# load input
+	&movdqu		($xt1,&QWP(64*1-128,$inp));
+	&movdqu		($xa2,&QWP(64*2-128,$inp));
+	&movdqu		($xt3,&QWP(64*3-128,$inp));
+	&lea		($inp,&QWP($i<192?16:(64*4-16*3),$inp));
+	&pxor		($xt0,$xa0);
+	&movdqa		($xa0,&QWP($i+16*4-128,"ebx"))	if ($i<192);
+	&pxor		($xt1,$xa1);
+	&movdqa		($xa1,&QWP($i+16*5-128,"ebx"))	if ($i<192);
+	&pxor		($xt2,$xa2);
+	&movdqa		($xa2,&QWP($i+16*6-128,"ebx"))	if ($i<192);
+	&pxor		($xt3,$xa3);
+	&movdqa		($xa3,&QWP($i+16*7-128,"ebx"))	if ($i<192);
+	&movdqu		(&QWP(64*0-128,$out),$xt0);	# store output
+	&movdqu		(&QWP(64*1-128,$out),$xt1);
+	&movdqu		(&QWP(64*2-128,$out),$xt2);
+	&movdqu		(&QWP(64*3-128,$out),$xt3);
+	&lea		($out,&QWP($i<192?16:(64*4-16*3),$out));
+    }
+	&sub		($len,64*4);
+	&jnc		(&label("outer_loop"));
+
+	&add		($len,64*4);
+	&jz		(&label("done"));
+
+	&mov		("ebx",&DWP(512+8,"esp"));	# restore pointers
+	&lea		($inp,&DWP(-128,$inp));
+	&mov		("edx",&DWP(512+4,"esp"));
+	&lea		($out,&DWP(-128,$out));
+
+	&movd		("xmm2",&DWP(16*12-128,"ebp"));	# counter value
+	&movdqu		("xmm3",&QWP(0,"ebx"));
+	&paddd		("xmm2",&QWP(16*6,"eax"));	# +four
+	&pand		("xmm3",&QWP(16*7,"eax"));
+	&por		("xmm3","xmm2");		# counter value
+}
+{
+my ($a,$b,$c,$d,$t,$t1,$rot16,$rot24)=map("xmm$_",(0..7));
+
+sub SSSE3ROUND {	# critical path is 20 "SIMD ticks" per round
+	&paddd		($a,$b);
+	&pxor		($d,$a);
+	&pshufb		($d,$rot16);
+
+	&paddd		($c,$d);
+	&pxor		($b,$c);
+	&movdqa		($t,$b);
+	&psrld		($b,20);
+	&pslld		($t,12);
+	&por		($b,$t);
+
+	&paddd		($a,$b);
+	&pxor		($d,$a);
+	&pshufb		($d,$rot24);
+
+	&paddd		($c,$d);
+	&pxor		($b,$c);
+	&movdqa		($t,$b);
+	&psrld		($b,25);
+	&pslld		($t,7);
+	&por		($b,$t);
+}
+
+&set_label("1x");
+	&movdqa		($a,&QWP(16*2,"eax"));		# sigma
+	&movdqu		($b,&QWP(0,"edx"));
+	&movdqu		($c,&QWP(16,"edx"));
+	#&movdqu	($d,&QWP(0,"ebx"));		# already loaded
+	&movdqa		($rot16,&QWP(0,"eax"));
+	&movdqa		($rot24,&QWP(16,"eax"));
+	&mov		(&DWP(16*3,"esp"),"ebp");
+
+	&movdqa		(&QWP(16*0,"esp"),$a);
+	&movdqa		(&QWP(16*1,"esp"),$b);
+	&movdqa		(&QWP(16*2,"esp"),$c);
+	&movdqa		(&QWP(16*3,"esp"),$d);
+	&mov		("edx",10);
+	&jmp		(&label("loop1x"));
+
+&set_label("outer1x",16);
+	&movdqa		($d,&QWP(16*5,"eax"));		# one
+	&movdqa		($a,&QWP(16*0,"esp"));
+	&movdqa		($b,&QWP(16*1,"esp"));
+	&movdqa		($c,&QWP(16*2,"esp"));
+	&paddd		($d,&QWP(16*3,"esp"));
+	&mov		("edx",10);
+	&movdqa		(&QWP(16*3,"esp"),$d);
+	&jmp		(&label("loop1x"));
+
+&set_label("loop1x",16);
+	&SSSE3ROUND();
+	&pshufd	($c,$c,0b01001110);
+	&pshufd	($b,$b,0b00111001);
+	&pshufd	($d,$d,0b10010011);
+	&nop	();
+
+	&SSSE3ROUND();
+	&pshufd	($c,$c,0b01001110);
+	&pshufd	($b,$b,0b10010011);
+	&pshufd	($d,$d,0b00111001);
+
+	&dec		("edx");
+	&jnz		(&label("loop1x"));
+
+	&paddd		($a,&QWP(16*0,"esp"));
+	&paddd		($b,&QWP(16*1,"esp"));
+	&paddd		($c,&QWP(16*2,"esp"));
+	&paddd		($d,&QWP(16*3,"esp"));
+
+	&cmp		($len,64);
+	&jb		(&label("tail"));
+
+	&movdqu		($t,&QWP(16*0,$inp));
+	&movdqu		($t1,&QWP(16*1,$inp));
+	&pxor		($a,$t);		# xor with input
+	&movdqu		($t,&QWP(16*2,$inp));
+	&pxor		($b,$t1);
+	&movdqu		($t1,&QWP(16*3,$inp));
+	&pxor		($c,$t);
+	&pxor		($d,$t1);
+	&lea		($inp,&DWP(16*4,$inp));	# inp+=64
+
+	&movdqu		(&QWP(16*0,$out),$a);	# write output
+	&movdqu		(&QWP(16*1,$out),$b);
+	&movdqu		(&QWP(16*2,$out),$c);
+	&movdqu		(&QWP(16*3,$out),$d);
+	&lea		($out,&DWP(16*4,$out));	# inp+=64
+
+	&sub		($len,64);
+	&jnz		(&label("outer1x"));
+
+	&jmp		(&label("done"));
+
+&set_label("tail");
+	&movdqa		(&QWP(16*0,"esp"),$a);
+	&movdqa		(&QWP(16*1,"esp"),$b);
+	&movdqa		(&QWP(16*2,"esp"),$c);
+	&movdqa		(&QWP(16*3,"esp"),$d);
+
+	&xor		("eax","eax");
+	&xor		("edx","edx");
+	&xor		("ebp","ebp");
+
+&set_label("tail_loop");
+	&movb		("al",&BP(0,"esp","ebp"));
+	&movb		("dl",&BP(0,$inp,"ebp"));
+	&lea		("ebp",&DWP(1,"ebp"));
+	&xor		("al","dl");
+	&movb		(&BP(-1,$out,"ebp"),"al");
+	&dec		($len);
+	&jnz		(&label("tail_loop"));
+}
+&set_label("done");
+	&mov		("esp",&DWP(512,"esp"));
+&function_end("ChaCha20_ssse3");
+
+&align	(64);
+&set_label("ssse3_data");
+&data_byte(0x2,0x3,0x0,0x1, 0x6,0x7,0x4,0x5, 0xa,0xb,0x8,0x9, 0xe,0xf,0xc,0xd);
+&data_byte(0x3,0x0,0x1,0x2, 0x7,0x4,0x5,0x6, 0xb,0x8,0x9,0xa, 0xf,0xc,0xd,0xe);
+&data_word(0x61707865,0x3320646e,0x79622d32,0x6b206574);
+&data_word(0,1,2,3);
+&data_word(4,4,4,4);
+&data_word(1,0,0,0);
+&data_word(4,0,0,0);
+&data_word(0,-1,-1,-1);
+&align	(64);
+}
+&asciz	("ChaCha20 for x86, CRYPTOGAMS by <appro\@openssl.org>");
+
+if ($ymm) {
+my ($xa,$xa_,$xb,$xb_,$xc,$xc_,$xd,$xd_)=map("xmm$_",(0..7));
+my ($out,$inp,$len)=("edi","esi","ecx");
+
+sub QUARTERROUND_XOP {
+my ($ai,$bi,$ci,$di,$i)=@_;
+my ($an,$bn,$cn,$dn)=map(($_&~3)+(($_+1)&3),($ai,$bi,$ci,$di));	# next
+my ($ap,$bp,$cp,$dp)=map(($_&~3)+(($_-1)&3),($ai,$bi,$ci,$di));	# previous
+
+	#       a   b   c   d
+	#
+	#       0   4   8  12 < even round
+	#       1   5   9  13
+	#       2   6  10  14
+	#       3   7  11  15
+	#       0   5  10  15 < odd round
+	#       1   6  11  12
+	#       2   7   8  13
+	#       3   4   9  14
+
+	if ($i==0) {
+            my $j=4;
+	    ($ap,$bp,$cp,$dp)=map(($_&~3)+(($_-$j--)&3),($ap,$bp,$cp,$dp));
+	} elsif ($i==3) {
+            my $j=0;
+	    ($an,$bn,$cn,$dn)=map(($_&~3)+(($_+$j++)&3),($an,$bn,$cn,$dn));
+	} elsif ($i==4) {
+            my $j=4;
+	    ($ap,$bp,$cp,$dp)=map(($_&~3)+(($_+$j--)&3),($ap,$bp,$cp,$dp));
+	} elsif ($i==7) {
+            my $j=0;
+	    ($an,$bn,$cn,$dn)=map(($_&~3)+(($_-$j++)&3),($an,$bn,$cn,$dn));
+	}
+
+	#&vpaddd	($xa,$xa,$xb);			# see elsewhere
+	#&vpxor		($xd,$xd,$xa);			# see elsewhere
+	 &vmovdqa	(&QWP(16*$cp-128,"ebx"),$xc_)	if ($ai>0 && $ai<3);
+	&vprotd		($xd,$xd,16);
+	 &vmovdqa	(&QWP(16*$bp-128,"ebx"),$xb_)	if ($i!=0);
+	&vpaddd		($xc,$xc,$xd);
+	 &vmovdqa	($xc_,&QWP(16*$cn-128,"ebx"))	if ($ai>0 && $ai<3);
+	&vpxor		($xb,$i!=0?$xb:$xb_,$xc);
+	 &vmovdqa	($xa_,&QWP(16*$an-128,"ebx"));
+	&vprotd		($xb,$xb,12);
+	 &vmovdqa	($xb_,&QWP(16*$bn-128,"ebx"))	if ($i<7);
+	&vpaddd		($xa,$xa,$xb);
+	 &vmovdqa	($xd_,&QWP(16*$dn-128,"ebx"))	if ($di!=$dn);
+	&vpxor		($xd,$xd,$xa);
+	 &vpaddd	($xa_,$xa_,$xb_)		if ($i<7);	# elsewhere
+	&vprotd		($xd,$xd,8);
+	&vmovdqa	(&QWP(16*$ai-128,"ebx"),$xa);
+	&vpaddd		($xc,$xc,$xd);
+	&vmovdqa	(&QWP(16*$di-128,"ebx"),$xd)	if ($di!=$dn);
+	&vpxor		($xb,$xb,$xc);
+	 &vpxor		($xd_,$di==$dn?$xd:$xd_,$xa_)	if ($i<7);	# elsewhere
+	&vprotd		($xb,$xb,7);
+
+	($xa,$xa_)=($xa_,$xa);
+	($xb,$xb_)=($xb_,$xb);
+	($xc,$xc_)=($xc_,$xc);
+	($xd,$xd_)=($xd_,$xd);
+}
+
+&function_begin("ChaCha20_xop");
+&set_label("xop_shortcut");
+	&mov		($out,&wparam(0));
+	&mov		($inp,&wparam(1));
+	&mov		($len,&wparam(2));
+	&mov		("edx",&wparam(3));		# key
+	&mov		("ebx",&wparam(4));		# counter and nonce
+	&vzeroupper	();
+
+	&mov		("ebp","esp");
+	&stack_push	(131);
+	&and		("esp",-64);
+	&mov		(&DWP(512,"esp"),"ebp");
+
+	&lea		("eax",&DWP(&label("ssse3_data")."-".
+				    &label("pic_point"),"eax"));
+	&vmovdqu	("xmm3",&QWP(0,"ebx"));		# counter and nonce
+
+	&cmp		($len,64*4);
+	&jb		(&label("1x"));
+
+	&mov		(&DWP(512+4,"esp"),"edx");	# offload pointers
+	&mov		(&DWP(512+8,"esp"),"ebx");
+	&sub		($len,64*4);			# bias len
+	&lea		("ebp",&DWP(256+128,"esp"));	# size optimization
+
+	&vmovdqu	("xmm7",&QWP(0,"edx"));		# key
+	&vpshufd	("xmm0","xmm3",0x00);
+	&vpshufd	("xmm1","xmm3",0x55);
+	&vpshufd	("xmm2","xmm3",0xaa);
+	&vpshufd	("xmm3","xmm3",0xff);
+	 &vpaddd	("xmm0","xmm0",&QWP(16*3,"eax"));	# fix counters
+	&vpshufd	("xmm4","xmm7",0x00);
+	&vpshufd	("xmm5","xmm7",0x55);
+	 &vpsubd	("xmm0","xmm0",&QWP(16*4,"eax"));
+	&vpshufd	("xmm6","xmm7",0xaa);
+	&vpshufd	("xmm7","xmm7",0xff);
+	&vmovdqa	(&QWP(16*12-128,"ebp"),"xmm0");
+	&vmovdqa	(&QWP(16*13-128,"ebp"),"xmm1");
+	&vmovdqa	(&QWP(16*14-128,"ebp"),"xmm2");
+	&vmovdqa	(&QWP(16*15-128,"ebp"),"xmm3");
+	 &vmovdqu	("xmm3",&QWP(16,"edx"));	# key
+	&vmovdqa	(&QWP(16*4-128,"ebp"),"xmm4");
+	&vmovdqa	(&QWP(16*5-128,"ebp"),"xmm5");
+	&vmovdqa	(&QWP(16*6-128,"ebp"),"xmm6");
+	&vmovdqa	(&QWP(16*7-128,"ebp"),"xmm7");
+	 &vmovdqa	("xmm7",&QWP(16*2,"eax"));	# sigma
+	 &lea		("ebx",&DWP(128,"esp"));	# size optimization
+
+	&vpshufd	("xmm0","xmm3",0x00);
+	&vpshufd	("xmm1","xmm3",0x55);
+	&vpshufd	("xmm2","xmm3",0xaa);
+	&vpshufd	("xmm3","xmm3",0xff);
+	&vpshufd	("xmm4","xmm7",0x00);
+	&vpshufd	("xmm5","xmm7",0x55);
+	&vpshufd	("xmm6","xmm7",0xaa);
+	&vpshufd	("xmm7","xmm7",0xff);
+	&vmovdqa	(&QWP(16*8-128,"ebp"),"xmm0");
+	&vmovdqa	(&QWP(16*9-128,"ebp"),"xmm1");
+	&vmovdqa	(&QWP(16*10-128,"ebp"),"xmm2");
+	&vmovdqa	(&QWP(16*11-128,"ebp"),"xmm3");
+	&vmovdqa	(&QWP(16*0-128,"ebp"),"xmm4");
+	&vmovdqa	(&QWP(16*1-128,"ebp"),"xmm5");
+	&vmovdqa	(&QWP(16*2-128,"ebp"),"xmm6");
+	&vmovdqa	(&QWP(16*3-128,"ebp"),"xmm7");
+
+	&lea		($inp,&DWP(128,$inp));		# size optimization
+	&lea		($out,&DWP(128,$out));		# size optimization
+	&jmp		(&label("outer_loop"));
+
+&set_label("outer_loop",32);
+	#&vmovdqa	("xmm0",&QWP(16*0-128,"ebp"));	# copy key material
+	&vmovdqa	("xmm1",&QWP(16*1-128,"ebp"));
+	&vmovdqa	("xmm2",&QWP(16*2-128,"ebp"));
+	&vmovdqa	("xmm3",&QWP(16*3-128,"ebp"));
+	#&vmovdqa	("xmm4",&QWP(16*4-128,"ebp"));
+	&vmovdqa	("xmm5",&QWP(16*5-128,"ebp"));
+	&vmovdqa	("xmm6",&QWP(16*6-128,"ebp"));
+	&vmovdqa	("xmm7",&QWP(16*7-128,"ebp"));
+	#&vmovdqa	(&QWP(16*0-128,"ebx"),"xmm0");
+	&vmovdqa	(&QWP(16*1-128,"ebx"),"xmm1");
+	&vmovdqa	(&QWP(16*2-128,"ebx"),"xmm2");
+	&vmovdqa	(&QWP(16*3-128,"ebx"),"xmm3");
+	#&vmovdqa	(&QWP(16*4-128,"ebx"),"xmm4");
+	&vmovdqa	(&QWP(16*5-128,"ebx"),"xmm5");
+	&vmovdqa	(&QWP(16*6-128,"ebx"),"xmm6");
+	&vmovdqa	(&QWP(16*7-128,"ebx"),"xmm7");
+	#&vmovdqa	("xmm0",&QWP(16*8-128,"ebp"));
+	#&vmovdqa	("xmm1",&QWP(16*9-128,"ebp"));
+	&vmovdqa	("xmm2",&QWP(16*10-128,"ebp"));
+	&vmovdqa	("xmm3",&QWP(16*11-128,"ebp"));
+	&vmovdqa	("xmm4",&QWP(16*12-128,"ebp"));
+	&vmovdqa	("xmm5",&QWP(16*13-128,"ebp"));
+	&vmovdqa	("xmm6",&QWP(16*14-128,"ebp"));
+	&vmovdqa	("xmm7",&QWP(16*15-128,"ebp"));
+	&vpaddd		("xmm4","xmm4",&QWP(16*4,"eax"));	# counter value
+	#&vmovdqa	(&QWP(16*8-128,"ebx"),"xmm0");
+	#&vmovdqa	(&QWP(16*9-128,"ebx"),"xmm1");
+	&vmovdqa	(&QWP(16*10-128,"ebx"),"xmm2");
+	&vmovdqa	(&QWP(16*11-128,"ebx"),"xmm3");
+	&vmovdqa	(&QWP(16*12-128,"ebx"),"xmm4");
+	&vmovdqa	(&QWP(16*13-128,"ebx"),"xmm5");
+	&vmovdqa	(&QWP(16*14-128,"ebx"),"xmm6");
+	&vmovdqa	(&QWP(16*15-128,"ebx"),"xmm7");
+	&vmovdqa	(&QWP(16*12-128,"ebp"),"xmm4");	# save counter value
+
+	&vmovdqa	($xa, &QWP(16*0-128,"ebp"));
+	&vmovdqa	($xd, "xmm4");
+	&vmovdqa	($xb_,&QWP(16*4-128,"ebp"));
+	&vmovdqa	($xc, &QWP(16*8-128,"ebp"));
+	&vmovdqa	($xc_,&QWP(16*9-128,"ebp"));
+
+	&mov		("edx",10);			# loop counter
+	&nop		();
+
+&set_label("loop",32);
+	&vpaddd		($xa,$xa,$xb_);			# elsewhere
+	&vpxor		($xd,$xd,$xa);			# elsewhere
+	&QUARTERROUND_XOP(0, 4, 8, 12, 0);
+	&QUARTERROUND_XOP(1, 5, 9, 13, 1);
+	&QUARTERROUND_XOP(2, 6,10, 14, 2);
+	&QUARTERROUND_XOP(3, 7,11, 15, 3);
+	&QUARTERROUND_XOP(0, 5,10, 15, 4);
+	&QUARTERROUND_XOP(1, 6,11, 12, 5);
+	&QUARTERROUND_XOP(2, 7, 8, 13, 6);
+	&QUARTERROUND_XOP(3, 4, 9, 14, 7);
+	&dec		("edx");
+	&jnz		(&label("loop"));
+
+	&vmovdqa	(&QWP(16*4-128,"ebx"),$xb_);
+	&vmovdqa	(&QWP(16*8-128,"ebx"),$xc);
+	&vmovdqa	(&QWP(16*9-128,"ebx"),$xc_);
+	&vmovdqa	(&QWP(16*12-128,"ebx"),$xd);
+	&vmovdqa	(&QWP(16*14-128,"ebx"),$xd_);
+
+    my ($xa0,$xa1,$xa2,$xa3,$xt0,$xt1,$xt2,$xt3)=map("xmm$_",(0..7));
+
+	#&vmovdqa	($xa0,&QWP(16*0-128,"ebx"));	# it's there
+	&vmovdqa	($xa1,&QWP(16*1-128,"ebx"));
+	&vmovdqa	($xa2,&QWP(16*2-128,"ebx"));
+	&vmovdqa	($xa3,&QWP(16*3-128,"ebx"));
+
+    for($i=0;$i<256;$i+=64) {
+	&vpaddd		($xa0,$xa0,&QWP($i+16*0-128,"ebp"));	# accumulate key material
+	&vpaddd		($xa1,$xa1,&QWP($i+16*1-128,"ebp"));
+	&vpaddd		($xa2,$xa2,&QWP($i+16*2-128,"ebp"));
+	&vpaddd		($xa3,$xa3,&QWP($i+16*3-128,"ebp"));
+
+	&vpunpckldq	($xt2,$xa0,$xa1);	# "de-interlace" data
+	&vpunpckldq	($xt3,$xa2,$xa3);
+	&vpunpckhdq	($xa0,$xa0,$xa1);
+	&vpunpckhdq	($xa2,$xa2,$xa3);
+	&vpunpcklqdq	($xa1,$xt2,$xt3);	# "a0"
+	&vpunpckhqdq	($xt2,$xt2,$xt3);	# "a1"
+	&vpunpcklqdq	($xt3,$xa0,$xa2);	# "a2"
+	&vpunpckhqdq	($xa3,$xa0,$xa2);	# "a3"
+
+	&vpxor		($xt0,$xa1,&QWP(64*0-128,$inp));
+	&vpxor		($xt1,$xt2,&QWP(64*1-128,$inp));
+	&vpxor		($xt2,$xt3,&QWP(64*2-128,$inp));
+	&vpxor		($xt3,$xa3,&QWP(64*3-128,$inp));
+	&lea		($inp,&QWP($i<192?16:(64*4-16*3),$inp));
+	&vmovdqa	($xa0,&QWP($i+16*4-128,"ebx"))	if ($i<192);
+	&vmovdqa	($xa1,&QWP($i+16*5-128,"ebx"))	if ($i<192);
+	&vmovdqa	($xa2,&QWP($i+16*6-128,"ebx"))	if ($i<192);
+	&vmovdqa	($xa3,&QWP($i+16*7-128,"ebx"))	if ($i<192);
+	&vmovdqu	(&QWP(64*0-128,$out),$xt0);	# store output
+	&vmovdqu	(&QWP(64*1-128,$out),$xt1);
+	&vmovdqu	(&QWP(64*2-128,$out),$xt2);
+	&vmovdqu	(&QWP(64*3-128,$out),$xt3);
+	&lea		($out,&QWP($i<192?16:(64*4-16*3),$out));
+    }
+	&sub		($len,64*4);
+	&jnc		(&label("outer_loop"));
+
+	&add		($len,64*4);
+	&jz		(&label("done"));
+
+	&mov		("ebx",&DWP(512+8,"esp"));	# restore pointers
+	&lea		($inp,&DWP(-128,$inp));
+	&mov		("edx",&DWP(512+4,"esp"));
+	&lea		($out,&DWP(-128,$out));
+
+	&vmovd		("xmm2",&DWP(16*12-128,"ebp"));	# counter value
+	&vmovdqu	("xmm3",&QWP(0,"ebx"));
+	&vpaddd		("xmm2","xmm2",&QWP(16*6,"eax"));# +four
+	&vpand		("xmm3","xmm3",&QWP(16*7,"eax"));
+	&vpor		("xmm3","xmm3","xmm2");		# counter value
+{
+my ($a,$b,$c,$d,$t,$t1,$rot16,$rot24)=map("xmm$_",(0..7));
+
+sub XOPROUND {
+	&vpaddd		($a,$a,$b);
+	&vpxor		($d,$d,$a);
+	&vprotd		($d,$d,16);
+
+	&vpaddd		($c,$c,$d);
+	&vpxor		($b,$b,$c);
+	&vprotd		($b,$b,12);
+
+	&vpaddd		($a,$a,$b);
+	&vpxor		($d,$d,$a);
+	&vprotd		($d,$d,8);
+
+	&vpaddd		($c,$c,$d);
+	&vpxor		($b,$b,$c);
+	&vprotd		($b,$b,7);
+}
+
+&set_label("1x");
+	&vmovdqa	($a,&QWP(16*2,"eax"));		# sigma
+	&vmovdqu	($b,&QWP(0,"edx"));
+	&vmovdqu	($c,&QWP(16,"edx"));
+	#&vmovdqu	($d,&QWP(0,"ebx"));		# already loaded
+	&vmovdqa	($rot16,&QWP(0,"eax"));
+	&vmovdqa	($rot24,&QWP(16,"eax"));
+	&mov		(&DWP(16*3,"esp"),"ebp");
+
+	&vmovdqa	(&QWP(16*0,"esp"),$a);
+	&vmovdqa	(&QWP(16*1,"esp"),$b);
+	&vmovdqa	(&QWP(16*2,"esp"),$c);
+	&vmovdqa	(&QWP(16*3,"esp"),$d);
+	&mov		("edx",10);
+	&jmp		(&label("loop1x"));
+
+&set_label("outer1x",16);
+	&vmovdqa	($d,&QWP(16*5,"eax"));		# one
+	&vmovdqa	($a,&QWP(16*0,"esp"));
+	&vmovdqa	($b,&QWP(16*1,"esp"));
+	&vmovdqa	($c,&QWP(16*2,"esp"));
+	&vpaddd		($d,$d,&QWP(16*3,"esp"));
+	&mov		("edx",10);
+	&vmovdqa	(&QWP(16*3,"esp"),$d);
+	&jmp		(&label("loop1x"));
+
+&set_label("loop1x",16);
+	&XOPROUND();
+	&vpshufd	($c,$c,0b01001110);
+	&vpshufd	($b,$b,0b00111001);
+	&vpshufd	($d,$d,0b10010011);
+
+	&XOPROUND();
+	&vpshufd	($c,$c,0b01001110);
+	&vpshufd	($b,$b,0b10010011);
+	&vpshufd	($d,$d,0b00111001);
+
+	&dec		("edx");
+	&jnz		(&label("loop1x"));
+
+	&vpaddd		($a,$a,&QWP(16*0,"esp"));
+	&vpaddd		($b,$b,&QWP(16*1,"esp"));
+	&vpaddd		($c,$c,&QWP(16*2,"esp"));
+	&vpaddd		($d,$d,&QWP(16*3,"esp"));
+
+	&cmp		($len,64);
+	&jb		(&label("tail"));
+
+	&vpxor		($a,$a,&QWP(16*0,$inp));	# xor with input
+	&vpxor		($b,$b,&QWP(16*1,$inp));
+	&vpxor		($c,$c,&QWP(16*2,$inp));
+	&vpxor		($d,$d,&QWP(16*3,$inp));
+	&lea		($inp,&DWP(16*4,$inp));		# inp+=64
+
+	&vmovdqu	(&QWP(16*0,$out),$a);		# write output
+	&vmovdqu	(&QWP(16*1,$out),$b);
+	&vmovdqu	(&QWP(16*2,$out),$c);
+	&vmovdqu	(&QWP(16*3,$out),$d);
+	&lea		($out,&DWP(16*4,$out));		# inp+=64
+
+	&sub		($len,64);
+	&jnz		(&label("outer1x"));
+
+	&jmp		(&label("done"));
+
+&set_label("tail");
+	&vmovdqa	(&QWP(16*0,"esp"),$a);
+	&vmovdqa	(&QWP(16*1,"esp"),$b);
+	&vmovdqa	(&QWP(16*2,"esp"),$c);
+	&vmovdqa	(&QWP(16*3,"esp"),$d);
+
+	&xor		("eax","eax");
+	&xor		("edx","edx");
+	&xor		("ebp","ebp");
+
+&set_label("tail_loop");
+	&movb		("al",&BP(0,"esp","ebp"));
+	&movb		("dl",&BP(0,$inp,"ebp"));
+	&lea		("ebp",&DWP(1,"ebp"));
+	&xor		("al","dl");
+	&movb		(&BP(-1,$out,"ebp"),"al");
+	&dec		($len);
+	&jnz		(&label("tail_loop"));
+}
+&set_label("done");
+	&vzeroupper	();
+	&mov		("esp",&DWP(512,"esp"));
+&function_end("ChaCha20_xop");
+}
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-x86_64.pl
new file mode 100755
index 000000000..b54f3b152
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/asm/chacha-x86_64.pl
@@ -0,0 +1,4005 @@
+#! /usr/bin/env perl
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# November 2014
+#
+# ChaCha20 for x86_64.
+#
+# December 2016
+#
+# Add AVX512F code path.
+#
+# December 2017
+#
+# Add AVX512VL code path.
+#
+# Performance in cycles per byte out of large buffer.
+#
+#		IALU/gcc 4.8(i)	1x/2xSSSE3(ii)	4xSSSE3	    NxAVX(v)
+#
+# P4		9.48/+99%	-		-
+# Core2		7.83/+55%	7.90/5.76	4.35
+# Westmere	7.19/+50%	5.60/4.50	3.00
+# Sandy Bridge	8.31/+42%	5.45/4.00	2.72
+# Ivy Bridge	6.71/+46%	5.40/?		2.41
+# Haswell	5.92/+43%	5.20/3.45	2.42        1.23
+# Skylake[-X]	5.87/+39%	4.70/3.22	2.31        1.19[0.80(vi)]
+# Silvermont	12.0/+33%	7.75/6.90	7.03(iii)
+# Knights L	11.7/-		?		9.60(iii)   0.80
+# Goldmont	10.6/+17%	5.10/3.52	3.28
+# Sledgehammer	7.28/+52%	-		-
+# Bulldozer	9.66/+28%	9.85/5.35(iv)	3.06(iv)
+# Ryzen		5.96/+50%	5.19/3.00	2.40        2.09
+# VIA Nano	10.5/+46%	6.72/6.88	6.05
+#
+# (i)	compared to older gcc 3.x one can observe >2x improvement on
+#	most platforms;
+# (ii)	2xSSSE3 is code path optimized specifically for 128 bytes used
+#	by chacha20_poly1305_tls_cipher, results are EVP-free;
+# (iii)	this is not optimal result for Atom because of MSROM
+#	limitations, SSE2 can do better, but gain is considered too
+#	low to justify the [maintenance] effort;
+# (iv)	Bulldozer actually executes 4xXOP code path that delivers 2.20
+#	and 4.85 for 128-byte inputs;
+# (v)	8xAVX2, 8xAVX512VL or 16xAVX512F, whichever best applicable;
+# (vi)	even though Skylake-X can execute AVX512F code and deliver 0.57
+#	cpb in single thread, the corresponding capability is suppressed;
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.19) + ($1>=2.22) + ($1>=2.25);
+}
+
+if (!$avx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	   `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)(?:\.([0-9]+))?/) {
+	$avx = ($1>=2.09) + ($1>=2.10) + ($1>=2.12);
+	$avx += 1 if ($1==2.11 && $2>=8);
+}
+
+if (!$avx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	   `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$avx = ($1>=10) + ($1>=11);
+}
+
+if (!$avx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([3-9]\.[0-9]+)/) {
+	$avx = ($2>=3.0) + ($2>3.0);
+}
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+# input parameter block
+($out,$inp,$len,$key,$counter)=("%rdi","%rsi","%rdx","%rcx","%r8");
+
+$code.=<<___;
+.text
+
+.extern OPENSSL_ia32cap_P
+
+.align	64
+.Lzero:
+.long	0,0,0,0
+.Lone:
+.long	1,0,0,0
+.Linc:
+.long	0,1,2,3
+.Lfour:
+.long	4,4,4,4
+.Lincy:
+.long	0,2,4,6,1,3,5,7
+.Leight:
+.long	8,8,8,8,8,8,8,8
+.Lrot16:
+.byte	0x2,0x3,0x0,0x1, 0x6,0x7,0x4,0x5, 0xa,0xb,0x8,0x9, 0xe,0xf,0xc,0xd
+.Lrot24:
+.byte	0x3,0x0,0x1,0x2, 0x7,0x4,0x5,0x6, 0xb,0x8,0x9,0xa, 0xf,0xc,0xd,0xe
+.Ltwoy:
+.long	2,0,0,0, 2,0,0,0
+.align	64
+.Lzeroz:
+.long	0,0,0,0, 1,0,0,0, 2,0,0,0, 3,0,0,0
+.Lfourz:
+.long	4,0,0,0, 4,0,0,0, 4,0,0,0, 4,0,0,0
+.Lincz:
+.long	0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15
+.Lsixteen:
+.long	16,16,16,16,16,16,16,16,16,16,16,16,16,16,16,16
+.Lsigma:
+.asciz	"expand 32-byte k"
+.asciz	"ChaCha20 for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+sub AUTOLOAD()          # thunk [simplified] 32-bit style perlasm
+{ my $opcode = $AUTOLOAD; $opcode =~ s/.*:://;
+  my $arg = pop;
+    $arg = "\$$arg" if ($arg*1 eq $arg);
+    $code .= "\t$opcode\t".join(',',$arg,reverse @_)."\n";
+}
+
+@x=("%eax","%ebx","%ecx","%edx",map("%r${_}d",(8..11)),
+    "%nox","%nox","%nox","%nox",map("%r${_}d",(12..15)));
+@t=("%esi","%edi");
+
+sub ROUND {			# critical path is 24 cycles per round
+my ($a0,$b0,$c0,$d0)=@_;
+my ($a1,$b1,$c1,$d1)=map(($_&~3)+(($_+1)&3),($a0,$b0,$c0,$d0));
+my ($a2,$b2,$c2,$d2)=map(($_&~3)+(($_+1)&3),($a1,$b1,$c1,$d1));
+my ($a3,$b3,$c3,$d3)=map(($_&~3)+(($_+1)&3),($a2,$b2,$c2,$d2));
+my ($xc,$xc_)=map("\"$_\"",@t);
+my @x=map("\"$_\"",@x);
+
+	# Consider order in which variables are addressed by their
+	# index:
+	#
+	#	a   b   c   d
+	#
+	#	0   4   8  12 < even round
+	#	1   5   9  13
+	#	2   6  10  14
+	#	3   7  11  15
+	#	0   5  10  15 < odd round
+	#	1   6  11  12
+	#	2   7   8  13
+	#	3   4   9  14
+	#
+	# 'a', 'b' and 'd's are permanently allocated in registers,
+	# @x[0..7,12..15], while 'c's are maintained in memory. If
+	# you observe 'c' column, you'll notice that pair of 'c's is
+	# invariant between rounds. This means that we have to reload
+	# them once per round, in the middle. This is why you'll see
+	# bunch of 'c' stores and loads in the middle, but none in
+	# the beginning or end.
+
+	# Normally instructions would be interleaved to favour in-order
+	# execution. Generally out-of-order cores manage it gracefully,
+	# but not this time for some reason. As in-order execution
+	# cores are dying breed, old Atom is the only one around,
+	# instructions are left uninterleaved. Besides, Atom is better
+	# off executing 1xSSSE3 code anyway...
+
+	(
+	"&add	(@x[$a0],@x[$b0])",	# Q1
+	"&xor	(@x[$d0],@x[$a0])",
+	"&rol	(@x[$d0],16)",
+	 "&add	(@x[$a1],@x[$b1])",	# Q2
+	 "&xor	(@x[$d1],@x[$a1])",
+	 "&rol	(@x[$d1],16)",
+
+	"&add	($xc,@x[$d0])",
+	"&xor	(@x[$b0],$xc)",
+	"&rol	(@x[$b0],12)",
+	 "&add	($xc_,@x[$d1])",
+	 "&xor	(@x[$b1],$xc_)",
+	 "&rol	(@x[$b1],12)",
+
+	"&add	(@x[$a0],@x[$b0])",
+	"&xor	(@x[$d0],@x[$a0])",
+	"&rol	(@x[$d0],8)",
+	 "&add	(@x[$a1],@x[$b1])",
+	 "&xor	(@x[$d1],@x[$a1])",
+	 "&rol	(@x[$d1],8)",
+
+	"&add	($xc,@x[$d0])",
+	"&xor	(@x[$b0],$xc)",
+	"&rol	(@x[$b0],7)",
+	 "&add	($xc_,@x[$d1])",
+	 "&xor	(@x[$b1],$xc_)",
+	 "&rol	(@x[$b1],7)",
+
+	"&mov	(\"4*$c0(%rsp)\",$xc)",	# reload pair of 'c's
+	 "&mov	(\"4*$c1(%rsp)\",$xc_)",
+	"&mov	($xc,\"4*$c2(%rsp)\")",
+	 "&mov	($xc_,\"4*$c3(%rsp)\")",
+
+	"&add	(@x[$a2],@x[$b2])",	# Q3
+	"&xor	(@x[$d2],@x[$a2])",
+	"&rol	(@x[$d2],16)",
+	 "&add	(@x[$a3],@x[$b3])",	# Q4
+	 "&xor	(@x[$d3],@x[$a3])",
+	 "&rol	(@x[$d3],16)",
+
+	"&add	($xc,@x[$d2])",
+	"&xor	(@x[$b2],$xc)",
+	"&rol	(@x[$b2],12)",
+	 "&add	($xc_,@x[$d3])",
+	 "&xor	(@x[$b3],$xc_)",
+	 "&rol	(@x[$b3],12)",
+
+	"&add	(@x[$a2],@x[$b2])",
+	"&xor	(@x[$d2],@x[$a2])",
+	"&rol	(@x[$d2],8)",
+	 "&add	(@x[$a3],@x[$b3])",
+	 "&xor	(@x[$d3],@x[$a3])",
+	 "&rol	(@x[$d3],8)",
+
+	"&add	($xc,@x[$d2])",
+	"&xor	(@x[$b2],$xc)",
+	"&rol	(@x[$b2],7)",
+	 "&add	($xc_,@x[$d3])",
+	 "&xor	(@x[$b3],$xc_)",
+	 "&rol	(@x[$b3],7)"
+	);
+}
+
+########################################################################
+# Generic code path that handles all lengths on pre-SSSE3 processors.
+$code.=<<___;
+.globl	ChaCha20_ctr32
+.type	ChaCha20_ctr32,\@function,5
+.align	64
+ChaCha20_ctr32:
+.cfi_startproc
+	cmp	\$0,$len
+	je	.Lno_data
+	mov	OPENSSL_ia32cap_P+4(%rip),%r10
+___
+$code.=<<___	if ($avx>2);
+	bt	\$48,%r10		# check for AVX512F
+	jc	.LChaCha20_avx512
+	test	%r10,%r10		# check for AVX512VL
+	js	.LChaCha20_avx512vl
+___
+$code.=<<___;
+	test	\$`1<<(41-32)`,%r10d
+	jnz	.LChaCha20_ssse3
+
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	sub	\$64+24,%rsp
+.cfi_adjust_cfa_offset	64+24
+.Lctr32_body:
+
+	#movdqa	.Lsigma(%rip),%xmm0
+	movdqu	($key),%xmm1
+	movdqu	16($key),%xmm2
+	movdqu	($counter),%xmm3
+	movdqa	.Lone(%rip),%xmm4
+
+	#movdqa	%xmm0,4*0(%rsp)		# key[0]
+	movdqa	%xmm1,4*4(%rsp)		# key[1]
+	movdqa	%xmm2,4*8(%rsp)		# key[2]
+	movdqa	%xmm3,4*12(%rsp)	# key[3]
+	mov	$len,%rbp		# reassign $len
+	jmp	.Loop_outer
+
+.align	32
+.Loop_outer:
+	mov	\$0x61707865,@x[0]      # 'expa'
+	mov	\$0x3320646e,@x[1]      # 'nd 3'
+	mov	\$0x79622d32,@x[2]      # '2-by'
+	mov	\$0x6b206574,@x[3]      # 'te k'
+	mov	4*4(%rsp),@x[4]
+	mov	4*5(%rsp),@x[5]
+	mov	4*6(%rsp),@x[6]
+	mov	4*7(%rsp),@x[7]
+	movd	%xmm3,@x[12]
+	mov	4*13(%rsp),@x[13]
+	mov	4*14(%rsp),@x[14]
+	mov	4*15(%rsp),@x[15]
+
+	mov	%rbp,64+0(%rsp)		# save len
+	mov	\$10,%ebp
+	mov	$inp,64+8(%rsp)		# save inp
+	movq	%xmm2,%rsi		# "@x[8]"
+	mov	$out,64+16(%rsp)	# save out
+	mov	%rsi,%rdi
+	shr	\$32,%rdi		# "@x[9]"
+	jmp	.Loop
+
+.align	32
+.Loop:
+___
+	foreach (&ROUND (0, 4, 8,12)) { eval; }
+	foreach (&ROUND	(0, 5,10,15)) { eval; }
+	&dec	("%ebp");
+	&jnz	(".Loop");
+
+$code.=<<___;
+	mov	@t[1],4*9(%rsp)		# modulo-scheduled
+	mov	@t[0],4*8(%rsp)
+	mov	64(%rsp),%rbp		# load len
+	movdqa	%xmm2,%xmm1
+	mov	64+8(%rsp),$inp		# load inp
+	paddd	%xmm4,%xmm3		# increment counter
+	mov	64+16(%rsp),$out	# load out
+
+	add	\$0x61707865,@x[0]      # 'expa'
+	add	\$0x3320646e,@x[1]      # 'nd 3'
+	add	\$0x79622d32,@x[2]      # '2-by'
+	add	\$0x6b206574,@x[3]      # 'te k'
+	add	4*4(%rsp),@x[4]
+	add	4*5(%rsp),@x[5]
+	add	4*6(%rsp),@x[6]
+	add	4*7(%rsp),@x[7]
+	add	4*12(%rsp),@x[12]
+	add	4*13(%rsp),@x[13]
+	add	4*14(%rsp),@x[14]
+	add	4*15(%rsp),@x[15]
+	paddd	4*8(%rsp),%xmm1
+
+	cmp	\$64,%rbp
+	jb	.Ltail
+
+	xor	4*0($inp),@x[0]		# xor with input
+	xor	4*1($inp),@x[1]
+	xor	4*2($inp),@x[2]
+	xor	4*3($inp),@x[3]
+	xor	4*4($inp),@x[4]
+	xor	4*5($inp),@x[5]
+	xor	4*6($inp),@x[6]
+	xor	4*7($inp),@x[7]
+	movdqu	4*8($inp),%xmm0
+	xor	4*12($inp),@x[12]
+	xor	4*13($inp),@x[13]
+	xor	4*14($inp),@x[14]
+	xor	4*15($inp),@x[15]
+	lea	4*16($inp),$inp		# inp+=64
+	pxor	%xmm1,%xmm0
+
+	movdqa	%xmm2,4*8(%rsp)
+	movd	%xmm3,4*12(%rsp)
+
+	mov	@x[0],4*0($out)		# write output
+	mov	@x[1],4*1($out)
+	mov	@x[2],4*2($out)
+	mov	@x[3],4*3($out)
+	mov	@x[4],4*4($out)
+	mov	@x[5],4*5($out)
+	mov	@x[6],4*6($out)
+	mov	@x[7],4*7($out)
+	movdqu	%xmm0,4*8($out)
+	mov	@x[12],4*12($out)
+	mov	@x[13],4*13($out)
+	mov	@x[14],4*14($out)
+	mov	@x[15],4*15($out)
+	lea	4*16($out),$out		# out+=64
+
+	sub	\$64,%rbp
+	jnz	.Loop_outer
+
+	jmp	.Ldone
+
+.align	16
+.Ltail:
+	mov	@x[0],4*0(%rsp)
+	mov	@x[1],4*1(%rsp)
+	xor	%rbx,%rbx
+	mov	@x[2],4*2(%rsp)
+	mov	@x[3],4*3(%rsp)
+	mov	@x[4],4*4(%rsp)
+	mov	@x[5],4*5(%rsp)
+	mov	@x[6],4*6(%rsp)
+	mov	@x[7],4*7(%rsp)
+	movdqa	%xmm1,4*8(%rsp)
+	mov	@x[12],4*12(%rsp)
+	mov	@x[13],4*13(%rsp)
+	mov	@x[14],4*14(%rsp)
+	mov	@x[15],4*15(%rsp)
+
+.Loop_tail:
+	movzb	($inp,%rbx),%eax
+	movzb	(%rsp,%rbx),%edx
+	lea	1(%rbx),%rbx
+	xor	%edx,%eax
+	mov	%al,-1($out,%rbx)
+	dec	%rbp
+	jnz	.Loop_tail
+
+.Ldone:
+	lea	64+24+48(%rsp),%rsi
+.cfi_def_cfa	%rsi,8
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lno_data:
+	ret
+.cfi_endproc
+.size	ChaCha20_ctr32,.-ChaCha20_ctr32
+___
+
+########################################################################
+# SSSE3 code path that handles shorter lengths
+{
+my ($a,$b,$c,$d,$t,$t1,$rot16,$rot24)=map("%xmm$_",(0..7));
+
+sub SSSE3ROUND {	# critical path is 20 "SIMD ticks" per round
+	&paddd	($a,$b);
+	&pxor	($d,$a);
+	&pshufb	($d,$rot16);
+
+	&paddd	($c,$d);
+	&pxor	($b,$c);
+	&movdqa	($t,$b);
+	&psrld	($b,20);
+	&pslld	($t,12);
+	&por	($b,$t);
+
+	&paddd	($a,$b);
+	&pxor	($d,$a);
+	&pshufb	($d,$rot24);
+
+	&paddd	($c,$d);
+	&pxor	($b,$c);
+	&movdqa	($t,$b);
+	&psrld	($b,25);
+	&pslld	($t,7);
+	&por	($b,$t);
+}
+
+my $xframe = $win64 ? 32+8 : 8;
+
+$code.=<<___;
+.type	ChaCha20_ssse3,\@function,5
+.align	32
+ChaCha20_ssse3:
+.cfi_startproc
+.LChaCha20_ssse3:
+	mov	%rsp,%r9		# frame pointer
+.cfi_def_cfa_register	%r9
+___
+$code.=<<___	if ($avx);
+	test	\$`1<<(43-32)`,%r10d
+	jnz	.LChaCha20_4xop		# XOP is fastest even if we use 1/4
+___
+$code.=<<___;
+	cmp	\$128,$len		# we might throw away some data,
+	je	.LChaCha20_128
+	ja	.LChaCha20_4x		# but overall it won't be slower
+
+.Ldo_sse3_after_all:
+	sub	\$64+$xframe,%rsp
+___
+$code.=<<___	if ($win64);
+	movaps	%xmm6,-0x28(%r9)
+	movaps	%xmm7,-0x18(%r9)
+.Lssse3_body:
+___
+$code.=<<___;
+	movdqa	.Lsigma(%rip),$a
+	movdqu	($key),$b
+	movdqu	16($key),$c
+	movdqu	($counter),$d
+	movdqa	.Lrot16(%rip),$rot16
+	movdqa	.Lrot24(%rip),$rot24
+
+	movdqa	$a,0x00(%rsp)
+	movdqa	$b,0x10(%rsp)
+	movdqa	$c,0x20(%rsp)
+	movdqa	$d,0x30(%rsp)
+	mov	\$10,$counter		# reuse $counter
+	jmp	.Loop_ssse3
+
+.align	32
+.Loop_outer_ssse3:
+	movdqa	.Lone(%rip),$d
+	movdqa	0x00(%rsp),$a
+	movdqa	0x10(%rsp),$b
+	movdqa	0x20(%rsp),$c
+	paddd	0x30(%rsp),$d
+	mov	\$10,$counter
+	movdqa	$d,0x30(%rsp)
+	jmp	.Loop_ssse3
+
+.align	32
+.Loop_ssse3:
+___
+	&SSSE3ROUND();
+	&pshufd	($c,$c,0b01001110);
+	&pshufd	($b,$b,0b00111001);
+	&pshufd	($d,$d,0b10010011);
+	&nop	();
+
+	&SSSE3ROUND();
+	&pshufd	($c,$c,0b01001110);
+	&pshufd	($b,$b,0b10010011);
+	&pshufd	($d,$d,0b00111001);
+
+	&dec	($counter);
+	&jnz	(".Loop_ssse3");
+
+$code.=<<___;
+	paddd	0x00(%rsp),$a
+	paddd	0x10(%rsp),$b
+	paddd	0x20(%rsp),$c
+	paddd	0x30(%rsp),$d
+
+	cmp	\$64,$len
+	jb	.Ltail_ssse3
+
+	movdqu	0x00($inp),$t
+	movdqu	0x10($inp),$t1
+	pxor	$t,$a			# xor with input
+	movdqu	0x20($inp),$t
+	pxor	$t1,$b
+	movdqu	0x30($inp),$t1
+	lea	0x40($inp),$inp		# inp+=64
+	pxor	$t,$c
+	pxor	$t1,$d
+
+	movdqu	$a,0x00($out)		# write output
+	movdqu	$b,0x10($out)
+	movdqu	$c,0x20($out)
+	movdqu	$d,0x30($out)
+	lea	0x40($out),$out		# out+=64
+
+	sub	\$64,$len
+	jnz	.Loop_outer_ssse3
+
+	jmp	.Ldone_ssse3
+
+.align	16
+.Ltail_ssse3:
+	movdqa	$a,0x00(%rsp)
+	movdqa	$b,0x10(%rsp)
+	movdqa	$c,0x20(%rsp)
+	movdqa	$d,0x30(%rsp)
+	xor	$counter,$counter
+
+.Loop_tail_ssse3:
+	movzb	($inp,$counter),%eax
+	movzb	(%rsp,$counter),%ecx
+	lea	1($counter),$counter
+	xor	%ecx,%eax
+	mov	%al,-1($out,$counter)
+	dec	$len
+	jnz	.Loop_tail_ssse3
+
+.Ldone_ssse3:
+___
+$code.=<<___	if ($win64);
+	movaps	-0x28(%r9),%xmm6
+	movaps	-0x18(%r9),%xmm7
+___
+$code.=<<___;
+	lea	(%r9),%rsp
+.cfi_def_cfa_register	%rsp
+.Lssse3_epilogue:
+	ret
+.cfi_endproc
+.size	ChaCha20_ssse3,.-ChaCha20_ssse3
+___
+}
+
+########################################################################
+# SSSE3 code path that handles 128-byte inputs
+{
+my ($a,$b,$c,$d,$t,$t1,$rot16,$rot24)=map("%xmm$_",(8,9,2..7));
+my ($a1,$b1,$c1,$d1)=map("%xmm$_",(10,11,0,1));
+
+sub SSSE3ROUND_2x {
+	&paddd	($a,$b);
+	&pxor	($d,$a);
+	 &paddd	($a1,$b1);
+	 &pxor	($d1,$a1);
+	&pshufb	($d,$rot16);
+	 &pshufb($d1,$rot16);
+
+	&paddd	($c,$d);
+	 &paddd	($c1,$d1);
+	&pxor	($b,$c);
+	 &pxor	($b1,$c1);
+	&movdqa	($t,$b);
+	&psrld	($b,20);
+	 &movdqa($t1,$b1);
+	&pslld	($t,12);
+	 &psrld	($b1,20);
+	&por	($b,$t);
+	 &pslld	($t1,12);
+	 &por	($b1,$t1);
+
+	&paddd	($a,$b);
+	&pxor	($d,$a);
+	 &paddd	($a1,$b1);
+	 &pxor	($d1,$a1);
+	&pshufb	($d,$rot24);
+	 &pshufb($d1,$rot24);
+
+	&paddd	($c,$d);
+	 &paddd	($c1,$d1);
+	&pxor	($b,$c);
+	 &pxor	($b1,$c1);
+	&movdqa	($t,$b);
+	&psrld	($b,25);
+	 &movdqa($t1,$b1);
+	&pslld	($t,7);
+	 &psrld	($b1,25);
+	&por	($b,$t);
+	 &pslld	($t1,7);
+	 &por	($b1,$t1);
+}
+
+my $xframe = $win64 ? 0x68 : 8;
+
+$code.=<<___;
+.type	ChaCha20_128,\@function,5
+.align	32
+ChaCha20_128:
+.cfi_startproc
+.LChaCha20_128:
+	mov	%rsp,%r9		# frame pointer
+.cfi_def_cfa_register	%r9
+	sub	\$64+$xframe,%rsp
+___
+$code.=<<___	if ($win64);
+	movaps	%xmm6,-0x68(%r9)
+	movaps	%xmm7,-0x58(%r9)
+	movaps	%xmm8,-0x48(%r9)
+	movaps	%xmm9,-0x38(%r9)
+	movaps	%xmm10,-0x28(%r9)
+	movaps	%xmm11,-0x18(%r9)
+.L128_body:
+___
+$code.=<<___;
+	movdqa	.Lsigma(%rip),$a
+	movdqu	($key),$b
+	movdqu	16($key),$c
+	movdqu	($counter),$d
+	movdqa	.Lone(%rip),$d1
+	movdqa	.Lrot16(%rip),$rot16
+	movdqa	.Lrot24(%rip),$rot24
+
+	movdqa	$a,$a1
+	movdqa	$a,0x00(%rsp)
+	movdqa	$b,$b1
+	movdqa	$b,0x10(%rsp)
+	movdqa	$c,$c1
+	movdqa	$c,0x20(%rsp)
+	paddd	$d,$d1
+	movdqa	$d,0x30(%rsp)
+	mov	\$10,$counter		# reuse $counter
+	jmp	.Loop_128
+
+.align	32
+.Loop_128:
+___
+	&SSSE3ROUND_2x();
+	&pshufd	($c,$c,0b01001110);
+	&pshufd	($b,$b,0b00111001);
+	&pshufd	($d,$d,0b10010011);
+	&pshufd	($c1,$c1,0b01001110);
+	&pshufd	($b1,$b1,0b00111001);
+	&pshufd	($d1,$d1,0b10010011);
+
+	&SSSE3ROUND_2x();
+	&pshufd	($c,$c,0b01001110);
+	&pshufd	($b,$b,0b10010011);
+	&pshufd	($d,$d,0b00111001);
+	&pshufd	($c1,$c1,0b01001110);
+	&pshufd	($b1,$b1,0b10010011);
+	&pshufd	($d1,$d1,0b00111001);
+
+	&dec	($counter);
+	&jnz	(".Loop_128");
+
+$code.=<<___;
+	paddd	0x00(%rsp),$a
+	paddd	0x10(%rsp),$b
+	paddd	0x20(%rsp),$c
+	paddd	0x30(%rsp),$d
+	paddd	.Lone(%rip),$d1
+	paddd	0x00(%rsp),$a1
+	paddd	0x10(%rsp),$b1
+	paddd	0x20(%rsp),$c1
+	paddd	0x30(%rsp),$d1
+
+	movdqu	0x00($inp),$t
+	movdqu	0x10($inp),$t1
+	pxor	$t,$a			# xor with input
+	movdqu	0x20($inp),$t
+	pxor	$t1,$b
+	movdqu	0x30($inp),$t1
+	pxor	$t,$c
+	movdqu	0x40($inp),$t
+	pxor	$t1,$d
+	movdqu	0x50($inp),$t1
+	pxor	$t,$a1
+	movdqu	0x60($inp),$t
+	pxor	$t1,$b1
+	movdqu	0x70($inp),$t1
+	pxor	$t,$c1
+	pxor	$t1,$d1
+
+	movdqu	$a,0x00($out)		# write output
+	movdqu	$b,0x10($out)
+	movdqu	$c,0x20($out)
+	movdqu	$d,0x30($out)
+	movdqu	$a1,0x40($out)
+	movdqu	$b1,0x50($out)
+	movdqu	$c1,0x60($out)
+	movdqu	$d1,0x70($out)
+___
+$code.=<<___	if ($win64);
+	movaps	-0x68(%r9),%xmm6
+	movaps	-0x58(%r9),%xmm7
+	movaps	-0x48(%r9),%xmm8
+	movaps	-0x38(%r9),%xmm9
+	movaps	-0x28(%r9),%xmm10
+	movaps	-0x18(%r9),%xmm11
+___
+$code.=<<___;
+	lea	(%r9),%rsp
+.cfi_def_cfa_register	%rsp
+.L128_epilogue:
+	ret
+.cfi_endproc
+.size	ChaCha20_128,.-ChaCha20_128
+___
+}
+
+########################################################################
+# SSSE3 code path that handles longer messages.
+{
+# assign variables to favor Atom front-end
+my ($xd0,$xd1,$xd2,$xd3, $xt0,$xt1,$xt2,$xt3,
+    $xa0,$xa1,$xa2,$xa3, $xb0,$xb1,$xb2,$xb3)=map("%xmm$_",(0..15));
+my  @xx=($xa0,$xa1,$xa2,$xa3, $xb0,$xb1,$xb2,$xb3,
+	"%nox","%nox","%nox","%nox", $xd0,$xd1,$xd2,$xd3);
+
+sub SSSE3_lane_ROUND {
+my ($a0,$b0,$c0,$d0)=@_;
+my ($a1,$b1,$c1,$d1)=map(($_&~3)+(($_+1)&3),($a0,$b0,$c0,$d0));
+my ($a2,$b2,$c2,$d2)=map(($_&~3)+(($_+1)&3),($a1,$b1,$c1,$d1));
+my ($a3,$b3,$c3,$d3)=map(($_&~3)+(($_+1)&3),($a2,$b2,$c2,$d2));
+my ($xc,$xc_,$t0,$t1)=map("\"$_\"",$xt0,$xt1,$xt2,$xt3);
+my @x=map("\"$_\"",@xx);
+
+	# Consider order in which variables are addressed by their
+	# index:
+	#
+	#	a   b   c   d
+	#
+	#	0   4   8  12 < even round
+	#	1   5   9  13
+	#	2   6  10  14
+	#	3   7  11  15
+	#	0   5  10  15 < odd round
+	#	1   6  11  12
+	#	2   7   8  13
+	#	3   4   9  14
+	#
+	# 'a', 'b' and 'd's are permanently allocated in registers,
+	# @x[0..7,12..15], while 'c's are maintained in memory. If
+	# you observe 'c' column, you'll notice that pair of 'c's is
+	# invariant between rounds. This means that we have to reload
+	# them once per round, in the middle. This is why you'll see
+	# bunch of 'c' stores and loads in the middle, but none in
+	# the beginning or end.
+
+	(
+	"&paddd		(@x[$a0],@x[$b0])",	# Q1
+	 "&paddd	(@x[$a1],@x[$b1])",	# Q2
+	"&pxor		(@x[$d0],@x[$a0])",
+	 "&pxor		(@x[$d1],@x[$a1])",
+	"&pshufb	(@x[$d0],$t1)",
+	 "&pshufb	(@x[$d1],$t1)",
+
+	"&paddd		($xc,@x[$d0])",
+	 "&paddd	($xc_,@x[$d1])",
+	"&pxor		(@x[$b0],$xc)",
+	 "&pxor		(@x[$b1],$xc_)",
+	"&movdqa	($t0,@x[$b0])",
+	"&pslld		(@x[$b0],12)",
+	"&psrld		($t0,20)",
+	 "&movdqa	($t1,@x[$b1])",
+	 "&pslld	(@x[$b1],12)",
+	"&por		(@x[$b0],$t0)",
+	 "&psrld	($t1,20)",
+	"&movdqa	($t0,'(%r11)')",	# .Lrot24(%rip)
+	 "&por		(@x[$b1],$t1)",
+
+	"&paddd		(@x[$a0],@x[$b0])",
+	 "&paddd	(@x[$a1],@x[$b1])",
+	"&pxor		(@x[$d0],@x[$a0])",
+	 "&pxor		(@x[$d1],@x[$a1])",
+	"&pshufb	(@x[$d0],$t0)",
+	 "&pshufb	(@x[$d1],$t0)",
+
+	"&paddd		($xc,@x[$d0])",
+	 "&paddd	($xc_,@x[$d1])",
+	"&pxor		(@x[$b0],$xc)",
+	 "&pxor		(@x[$b1],$xc_)",
+	"&movdqa	($t1,@x[$b0])",
+	"&pslld		(@x[$b0],7)",
+	"&psrld		($t1,25)",
+	 "&movdqa	($t0,@x[$b1])",
+	 "&pslld	(@x[$b1],7)",
+	"&por		(@x[$b0],$t1)",
+	 "&psrld	($t0,25)",
+	"&movdqa	($t1,'(%r10)')",	# .Lrot16(%rip)
+	 "&por		(@x[$b1],$t0)",
+
+	"&movdqa	(\"`16*($c0-8)`(%rsp)\",$xc)",	# reload pair of 'c's
+	 "&movdqa	(\"`16*($c1-8)`(%rsp)\",$xc_)",
+	"&movdqa	($xc,\"`16*($c2-8)`(%rsp)\")",
+	 "&movdqa	($xc_,\"`16*($c3-8)`(%rsp)\")",
+
+	"&paddd		(@x[$a2],@x[$b2])",	# Q3
+	 "&paddd	(@x[$a3],@x[$b3])",	# Q4
+	"&pxor		(@x[$d2],@x[$a2])",
+	 "&pxor		(@x[$d3],@x[$a3])",
+	"&pshufb	(@x[$d2],$t1)",
+	 "&pshufb	(@x[$d3],$t1)",
+
+	"&paddd		($xc,@x[$d2])",
+	 "&paddd	($xc_,@x[$d3])",
+	"&pxor		(@x[$b2],$xc)",
+	 "&pxor		(@x[$b3],$xc_)",
+	"&movdqa	($t0,@x[$b2])",
+	"&pslld		(@x[$b2],12)",
+	"&psrld		($t0,20)",
+	 "&movdqa	($t1,@x[$b3])",
+	 "&pslld	(@x[$b3],12)",
+	"&por		(@x[$b2],$t0)",
+	 "&psrld	($t1,20)",
+	"&movdqa	($t0,'(%r11)')",	# .Lrot24(%rip)
+	 "&por		(@x[$b3],$t1)",
+
+	"&paddd		(@x[$a2],@x[$b2])",
+	 "&paddd	(@x[$a3],@x[$b3])",
+	"&pxor		(@x[$d2],@x[$a2])",
+	 "&pxor		(@x[$d3],@x[$a3])",
+	"&pshufb	(@x[$d2],$t0)",
+	 "&pshufb	(@x[$d3],$t0)",
+
+	"&paddd		($xc,@x[$d2])",
+	 "&paddd	($xc_,@x[$d3])",
+	"&pxor		(@x[$b2],$xc)",
+	 "&pxor		(@x[$b3],$xc_)",
+	"&movdqa	($t1,@x[$b2])",
+	"&pslld		(@x[$b2],7)",
+	"&psrld		($t1,25)",
+	 "&movdqa	($t0,@x[$b3])",
+	 "&pslld	(@x[$b3],7)",
+	"&por		(@x[$b2],$t1)",
+	 "&psrld	($t0,25)",
+	"&movdqa	($t1,'(%r10)')",	# .Lrot16(%rip)
+	 "&por		(@x[$b3],$t0)"
+	);
+}
+
+my $xframe = $win64 ? 0xa8 : 8;
+
+$code.=<<___;
+.type	ChaCha20_4x,\@function,5
+.align	32
+ChaCha20_4x:
+.cfi_startproc
+.LChaCha20_4x:
+	mov		%rsp,%r9		# frame pointer
+.cfi_def_cfa_register	%r9
+	mov		%r10,%r11
+___
+$code.=<<___	if ($avx>1);
+	shr		\$32,%r10		# OPENSSL_ia32cap_P+8
+	test		\$`1<<5`,%r10		# test AVX2
+	jnz		.LChaCha20_8x
+___
+$code.=<<___;
+	cmp		\$192,$len
+	ja		.Lproceed4x
+
+	and		\$`1<<26|1<<22`,%r11	# isolate XSAVE+MOVBE
+	cmp		\$`1<<22`,%r11		# check for MOVBE without XSAVE
+	je		.Ldo_sse3_after_all	# to detect Atom
+
+.Lproceed4x:
+	sub		\$0x140+$xframe,%rsp
+___
+	################ stack layout
+	# +0x00		SIMD equivalent of @x[8-12]
+	# ...
+	# +0x40		constant copy of key[0-2] smashed by lanes
+	# ...
+	# +0x100	SIMD counters (with nonce smashed by lanes)
+	# ...
+	# +0x140
+$code.=<<___	if ($win64);
+	movaps		%xmm6,-0xa8(%r9)
+	movaps		%xmm7,-0x98(%r9)
+	movaps		%xmm8,-0x88(%r9)
+	movaps		%xmm9,-0x78(%r9)
+	movaps		%xmm10,-0x68(%r9)
+	movaps		%xmm11,-0x58(%r9)
+	movaps		%xmm12,-0x48(%r9)
+	movaps		%xmm13,-0x38(%r9)
+	movaps		%xmm14,-0x28(%r9)
+	movaps		%xmm15,-0x18(%r9)
+.L4x_body:
+___
+$code.=<<___;
+	movdqa		.Lsigma(%rip),$xa3	# key[0]
+	movdqu		($key),$xb3		# key[1]
+	movdqu		16($key),$xt3		# key[2]
+	movdqu		($counter),$xd3		# key[3]
+	lea		0x100(%rsp),%rcx	# size optimization
+	lea		.Lrot16(%rip),%r10
+	lea		.Lrot24(%rip),%r11
+
+	pshufd		\$0x00,$xa3,$xa0	# smash key by lanes...
+	pshufd		\$0x55,$xa3,$xa1
+	movdqa		$xa0,0x40(%rsp)		# ... and offload
+	pshufd		\$0xaa,$xa3,$xa2
+	movdqa		$xa1,0x50(%rsp)
+	pshufd		\$0xff,$xa3,$xa3
+	movdqa		$xa2,0x60(%rsp)
+	movdqa		$xa3,0x70(%rsp)
+
+	pshufd		\$0x00,$xb3,$xb0
+	pshufd		\$0x55,$xb3,$xb1
+	movdqa		$xb0,0x80-0x100(%rcx)
+	pshufd		\$0xaa,$xb3,$xb2
+	movdqa		$xb1,0x90-0x100(%rcx)
+	pshufd		\$0xff,$xb3,$xb3
+	movdqa		$xb2,0xa0-0x100(%rcx)
+	movdqa		$xb3,0xb0-0x100(%rcx)
+
+	pshufd		\$0x00,$xt3,$xt0	# "$xc0"
+	pshufd		\$0x55,$xt3,$xt1	# "$xc1"
+	movdqa		$xt0,0xc0-0x100(%rcx)
+	pshufd		\$0xaa,$xt3,$xt2	# "$xc2"
+	movdqa		$xt1,0xd0-0x100(%rcx)
+	pshufd		\$0xff,$xt3,$xt3	# "$xc3"
+	movdqa		$xt2,0xe0-0x100(%rcx)
+	movdqa		$xt3,0xf0-0x100(%rcx)
+
+	pshufd		\$0x00,$xd3,$xd0
+	pshufd		\$0x55,$xd3,$xd1
+	paddd		.Linc(%rip),$xd0	# don't save counters yet
+	pshufd		\$0xaa,$xd3,$xd2
+	movdqa		$xd1,0x110-0x100(%rcx)
+	pshufd		\$0xff,$xd3,$xd3
+	movdqa		$xd2,0x120-0x100(%rcx)
+	movdqa		$xd3,0x130-0x100(%rcx)
+
+	jmp		.Loop_enter4x
+
+.align	32
+.Loop_outer4x:
+	movdqa		0x40(%rsp),$xa0		# re-load smashed key
+	movdqa		0x50(%rsp),$xa1
+	movdqa		0x60(%rsp),$xa2
+	movdqa		0x70(%rsp),$xa3
+	movdqa		0x80-0x100(%rcx),$xb0
+	movdqa		0x90-0x100(%rcx),$xb1
+	movdqa		0xa0-0x100(%rcx),$xb2
+	movdqa		0xb0-0x100(%rcx),$xb3
+	movdqa		0xc0-0x100(%rcx),$xt0	# "$xc0"
+	movdqa		0xd0-0x100(%rcx),$xt1	# "$xc1"
+	movdqa		0xe0-0x100(%rcx),$xt2	# "$xc2"
+	movdqa		0xf0-0x100(%rcx),$xt3	# "$xc3"
+	movdqa		0x100-0x100(%rcx),$xd0
+	movdqa		0x110-0x100(%rcx),$xd1
+	movdqa		0x120-0x100(%rcx),$xd2
+	movdqa		0x130-0x100(%rcx),$xd3
+	paddd		.Lfour(%rip),$xd0	# next SIMD counters
+
+.Loop_enter4x:
+	movdqa		$xt2,0x20(%rsp)		# SIMD equivalent of "@x[10]"
+	movdqa		$xt3,0x30(%rsp)		# SIMD equivalent of "@x[11]"
+	movdqa		(%r10),$xt3		# .Lrot16(%rip)
+	mov		\$10,%eax
+	movdqa		$xd0,0x100-0x100(%rcx)	# save SIMD counters
+	jmp		.Loop4x
+
+.align	32
+.Loop4x:
+___
+	foreach (&SSSE3_lane_ROUND(0, 4, 8,12)) { eval; }
+	foreach (&SSSE3_lane_ROUND(0, 5,10,15)) { eval; }
+$code.=<<___;
+	dec		%eax
+	jnz		.Loop4x
+
+	paddd		0x40(%rsp),$xa0		# accumulate key material
+	paddd		0x50(%rsp),$xa1
+	paddd		0x60(%rsp),$xa2
+	paddd		0x70(%rsp),$xa3
+
+	movdqa		$xa0,$xt2		# "de-interlace" data
+	punpckldq	$xa1,$xa0
+	movdqa		$xa2,$xt3
+	punpckldq	$xa3,$xa2
+	punpckhdq	$xa1,$xt2
+	punpckhdq	$xa3,$xt3
+	movdqa		$xa0,$xa1
+	punpcklqdq	$xa2,$xa0		# "a0"
+	movdqa		$xt2,$xa3
+	punpcklqdq	$xt3,$xt2		# "a2"
+	punpckhqdq	$xa2,$xa1		# "a1"
+	punpckhqdq	$xt3,$xa3		# "a3"
+___
+	($xa2,$xt2)=($xt2,$xa2);
+$code.=<<___;
+	paddd		0x80-0x100(%rcx),$xb0
+	paddd		0x90-0x100(%rcx),$xb1
+	paddd		0xa0-0x100(%rcx),$xb2
+	paddd		0xb0-0x100(%rcx),$xb3
+
+	movdqa		$xa0,0x00(%rsp)		# offload $xaN
+	movdqa		$xa1,0x10(%rsp)
+	movdqa		0x20(%rsp),$xa0		# "xc2"
+	movdqa		0x30(%rsp),$xa1		# "xc3"
+
+	movdqa		$xb0,$xt2
+	punpckldq	$xb1,$xb0
+	movdqa		$xb2,$xt3
+	punpckldq	$xb3,$xb2
+	punpckhdq	$xb1,$xt2
+	punpckhdq	$xb3,$xt3
+	movdqa		$xb0,$xb1
+	punpcklqdq	$xb2,$xb0		# "b0"
+	movdqa		$xt2,$xb3
+	punpcklqdq	$xt3,$xt2		# "b2"
+	punpckhqdq	$xb2,$xb1		# "b1"
+	punpckhqdq	$xt3,$xb3		# "b3"
+___
+	($xb2,$xt2)=($xt2,$xb2);
+	my ($xc0,$xc1,$xc2,$xc3)=($xt0,$xt1,$xa0,$xa1);
+$code.=<<___;
+	paddd		0xc0-0x100(%rcx),$xc0
+	paddd		0xd0-0x100(%rcx),$xc1
+	paddd		0xe0-0x100(%rcx),$xc2
+	paddd		0xf0-0x100(%rcx),$xc3
+
+	movdqa		$xa2,0x20(%rsp)		# keep offloading $xaN
+	movdqa		$xa3,0x30(%rsp)
+
+	movdqa		$xc0,$xt2
+	punpckldq	$xc1,$xc0
+	movdqa		$xc2,$xt3
+	punpckldq	$xc3,$xc2
+	punpckhdq	$xc1,$xt2
+	punpckhdq	$xc3,$xt3
+	movdqa		$xc0,$xc1
+	punpcklqdq	$xc2,$xc0		# "c0"
+	movdqa		$xt2,$xc3
+	punpcklqdq	$xt3,$xt2		# "c2"
+	punpckhqdq	$xc2,$xc1		# "c1"
+	punpckhqdq	$xt3,$xc3		# "c3"
+___
+	($xc2,$xt2)=($xt2,$xc2);
+	($xt0,$xt1)=($xa2,$xa3);		# use $xaN as temporary
+$code.=<<___;
+	paddd		0x100-0x100(%rcx),$xd0
+	paddd		0x110-0x100(%rcx),$xd1
+	paddd		0x120-0x100(%rcx),$xd2
+	paddd		0x130-0x100(%rcx),$xd3
+
+	movdqa		$xd0,$xt2
+	punpckldq	$xd1,$xd0
+	movdqa		$xd2,$xt3
+	punpckldq	$xd3,$xd2
+	punpckhdq	$xd1,$xt2
+	punpckhdq	$xd3,$xt3
+	movdqa		$xd0,$xd1
+	punpcklqdq	$xd2,$xd0		# "d0"
+	movdqa		$xt2,$xd3
+	punpcklqdq	$xt3,$xt2		# "d2"
+	punpckhqdq	$xd2,$xd1		# "d1"
+	punpckhqdq	$xt3,$xd3		# "d3"
+___
+	($xd2,$xt2)=($xt2,$xd2);
+$code.=<<___;
+	cmp		\$64*4,$len
+	jb		.Ltail4x
+
+	movdqu		0x00($inp),$xt0		# xor with input
+	movdqu		0x10($inp),$xt1
+	movdqu		0x20($inp),$xt2
+	movdqu		0x30($inp),$xt3
+	pxor		0x00(%rsp),$xt0		# $xaN is offloaded, remember?
+	pxor		$xb0,$xt1
+	pxor		$xc0,$xt2
+	pxor		$xd0,$xt3
+
+	 movdqu		$xt0,0x00($out)
+	movdqu		0x40($inp),$xt0
+	 movdqu		$xt1,0x10($out)
+	movdqu		0x50($inp),$xt1
+	 movdqu		$xt2,0x20($out)
+	movdqu		0x60($inp),$xt2
+	 movdqu		$xt3,0x30($out)
+	movdqu		0x70($inp),$xt3
+	lea		0x80($inp),$inp		# size optimization
+	pxor		0x10(%rsp),$xt0
+	pxor		$xb1,$xt1
+	pxor		$xc1,$xt2
+	pxor		$xd1,$xt3
+
+	 movdqu		$xt0,0x40($out)
+	movdqu		0x00($inp),$xt0
+	 movdqu		$xt1,0x50($out)
+	movdqu		0x10($inp),$xt1
+	 movdqu		$xt2,0x60($out)
+	movdqu		0x20($inp),$xt2
+	 movdqu		$xt3,0x70($out)
+	 lea		0x80($out),$out		# size optimization
+	movdqu		0x30($inp),$xt3
+	pxor		0x20(%rsp),$xt0
+	pxor		$xb2,$xt1
+	pxor		$xc2,$xt2
+	pxor		$xd2,$xt3
+
+	 movdqu		$xt0,0x00($out)
+	movdqu		0x40($inp),$xt0
+	 movdqu		$xt1,0x10($out)
+	movdqu		0x50($inp),$xt1
+	 movdqu		$xt2,0x20($out)
+	movdqu		0x60($inp),$xt2
+	 movdqu		$xt3,0x30($out)
+	movdqu		0x70($inp),$xt3
+	lea		0x80($inp),$inp		# inp+=64*4
+	pxor		0x30(%rsp),$xt0
+	pxor		$xb3,$xt1
+	pxor		$xc3,$xt2
+	pxor		$xd3,$xt3
+	movdqu		$xt0,0x40($out)
+	movdqu		$xt1,0x50($out)
+	movdqu		$xt2,0x60($out)
+	movdqu		$xt3,0x70($out)
+	lea		0x80($out),$out		# out+=64*4
+
+	sub		\$64*4,$len
+	jnz		.Loop_outer4x
+
+	jmp		.Ldone4x
+
+.Ltail4x:
+	cmp		\$192,$len
+	jae		.L192_or_more4x
+	cmp		\$128,$len
+	jae		.L128_or_more4x
+	cmp		\$64,$len
+	jae		.L64_or_more4x
+
+	#movdqa		0x00(%rsp),$xt0		# $xaN is offloaded, remember?
+	xor		%r10,%r10
+	#movdqa		$xt0,0x00(%rsp)
+	movdqa		$xb0,0x10(%rsp)
+	movdqa		$xc0,0x20(%rsp)
+	movdqa		$xd0,0x30(%rsp)
+	jmp		.Loop_tail4x
+
+.align	32
+.L64_or_more4x:
+	movdqu		0x00($inp),$xt0		# xor with input
+	movdqu		0x10($inp),$xt1
+	movdqu		0x20($inp),$xt2
+	movdqu		0x30($inp),$xt3
+	pxor		0x00(%rsp),$xt0		# $xaxN is offloaded, remember?
+	pxor		$xb0,$xt1
+	pxor		$xc0,$xt2
+	pxor		$xd0,$xt3
+	movdqu		$xt0,0x00($out)
+	movdqu		$xt1,0x10($out)
+	movdqu		$xt2,0x20($out)
+	movdqu		$xt3,0x30($out)
+	je		.Ldone4x
+
+	movdqa		0x10(%rsp),$xt0		# $xaN is offloaded, remember?
+	lea		0x40($inp),$inp		# inp+=64*1
+	xor		%r10,%r10
+	movdqa		$xt0,0x00(%rsp)
+	movdqa		$xb1,0x10(%rsp)
+	lea		0x40($out),$out		# out+=64*1
+	movdqa		$xc1,0x20(%rsp)
+	sub		\$64,$len		# len-=64*1
+	movdqa		$xd1,0x30(%rsp)
+	jmp		.Loop_tail4x
+
+.align	32
+.L128_or_more4x:
+	movdqu		0x00($inp),$xt0		# xor with input
+	movdqu		0x10($inp),$xt1
+	movdqu		0x20($inp),$xt2
+	movdqu		0x30($inp),$xt3
+	pxor		0x00(%rsp),$xt0		# $xaN is offloaded, remember?
+	pxor		$xb0,$xt1
+	pxor		$xc0,$xt2
+	pxor		$xd0,$xt3
+
+	 movdqu		$xt0,0x00($out)
+	movdqu		0x40($inp),$xt0
+	 movdqu		$xt1,0x10($out)
+	movdqu		0x50($inp),$xt1
+	 movdqu		$xt2,0x20($out)
+	movdqu		0x60($inp),$xt2
+	 movdqu		$xt3,0x30($out)
+	movdqu		0x70($inp),$xt3
+	pxor		0x10(%rsp),$xt0
+	pxor		$xb1,$xt1
+	pxor		$xc1,$xt2
+	pxor		$xd1,$xt3
+	movdqu		$xt0,0x40($out)
+	movdqu		$xt1,0x50($out)
+	movdqu		$xt2,0x60($out)
+	movdqu		$xt3,0x70($out)
+	je		.Ldone4x
+
+	movdqa		0x20(%rsp),$xt0		# $xaN is offloaded, remember?
+	lea		0x80($inp),$inp		# inp+=64*2
+	xor		%r10,%r10
+	movdqa		$xt0,0x00(%rsp)
+	movdqa		$xb2,0x10(%rsp)
+	lea		0x80($out),$out		# out+=64*2
+	movdqa		$xc2,0x20(%rsp)
+	sub		\$128,$len		# len-=64*2
+	movdqa		$xd2,0x30(%rsp)
+	jmp		.Loop_tail4x
+
+.align	32
+.L192_or_more4x:
+	movdqu		0x00($inp),$xt0		# xor with input
+	movdqu		0x10($inp),$xt1
+	movdqu		0x20($inp),$xt2
+	movdqu		0x30($inp),$xt3
+	pxor		0x00(%rsp),$xt0		# $xaN is offloaded, remember?
+	pxor		$xb0,$xt1
+	pxor		$xc0,$xt2
+	pxor		$xd0,$xt3
+
+	 movdqu		$xt0,0x00($out)
+	movdqu		0x40($inp),$xt0
+	 movdqu		$xt1,0x10($out)
+	movdqu		0x50($inp),$xt1
+	 movdqu		$xt2,0x20($out)
+	movdqu		0x60($inp),$xt2
+	 movdqu		$xt3,0x30($out)
+	movdqu		0x70($inp),$xt3
+	lea		0x80($inp),$inp		# size optimization
+	pxor		0x10(%rsp),$xt0
+	pxor		$xb1,$xt1
+	pxor		$xc1,$xt2
+	pxor		$xd1,$xt3
+
+	 movdqu		$xt0,0x40($out)
+	movdqu		0x00($inp),$xt0
+	 movdqu		$xt1,0x50($out)
+	movdqu		0x10($inp),$xt1
+	 movdqu		$xt2,0x60($out)
+	movdqu		0x20($inp),$xt2
+	 movdqu		$xt3,0x70($out)
+	 lea		0x80($out),$out		# size optimization
+	movdqu		0x30($inp),$xt3
+	pxor		0x20(%rsp),$xt0
+	pxor		$xb2,$xt1
+	pxor		$xc2,$xt2
+	pxor		$xd2,$xt3
+	movdqu		$xt0,0x00($out)
+	movdqu		$xt1,0x10($out)
+	movdqu		$xt2,0x20($out)
+	movdqu		$xt3,0x30($out)
+	je		.Ldone4x
+
+	movdqa		0x30(%rsp),$xt0		# $xaN is offloaded, remember?
+	lea		0x40($inp),$inp		# inp+=64*3
+	xor		%r10,%r10
+	movdqa		$xt0,0x00(%rsp)
+	movdqa		$xb3,0x10(%rsp)
+	lea		0x40($out),$out		# out+=64*3
+	movdqa		$xc3,0x20(%rsp)
+	sub		\$192,$len		# len-=64*3
+	movdqa		$xd3,0x30(%rsp)
+
+.Loop_tail4x:
+	movzb		($inp,%r10),%eax
+	movzb		(%rsp,%r10),%ecx
+	lea		1(%r10),%r10
+	xor		%ecx,%eax
+	mov		%al,-1($out,%r10)
+	dec		$len
+	jnz		.Loop_tail4x
+
+.Ldone4x:
+___
+$code.=<<___	if ($win64);
+	movaps		-0xa8(%r9),%xmm6
+	movaps		-0x98(%r9),%xmm7
+	movaps		-0x88(%r9),%xmm8
+	movaps		-0x78(%r9),%xmm9
+	movaps		-0x68(%r9),%xmm10
+	movaps		-0x58(%r9),%xmm11
+	movaps		-0x48(%r9),%xmm12
+	movaps		-0x38(%r9),%xmm13
+	movaps		-0x28(%r9),%xmm14
+	movaps		-0x18(%r9),%xmm15
+___
+$code.=<<___;
+	lea		(%r9),%rsp
+.cfi_def_cfa_register	%rsp
+.L4x_epilogue:
+	ret
+.cfi_endproc
+.size	ChaCha20_4x,.-ChaCha20_4x
+___
+}
+
+########################################################################
+# XOP code path that handles all lengths.
+if ($avx) {
+# There is some "anomaly" observed depending on instructions' size or
+# alignment. If you look closely at below code you'll notice that
+# sometimes argument order varies. The order affects instruction
+# encoding by making it larger, and such fiddling gives 5% performance
+# improvement. This is on FX-4100...
+
+my ($xb0,$xb1,$xb2,$xb3, $xd0,$xd1,$xd2,$xd3,
+    $xa0,$xa1,$xa2,$xa3, $xt0,$xt1,$xt2,$xt3)=map("%xmm$_",(0..15));
+my  @xx=($xa0,$xa1,$xa2,$xa3, $xb0,$xb1,$xb2,$xb3,
+	 $xt0,$xt1,$xt2,$xt3, $xd0,$xd1,$xd2,$xd3);
+
+sub XOP_lane_ROUND {
+my ($a0,$b0,$c0,$d0)=@_;
+my ($a1,$b1,$c1,$d1)=map(($_&~3)+(($_+1)&3),($a0,$b0,$c0,$d0));
+my ($a2,$b2,$c2,$d2)=map(($_&~3)+(($_+1)&3),($a1,$b1,$c1,$d1));
+my ($a3,$b3,$c3,$d3)=map(($_&~3)+(($_+1)&3),($a2,$b2,$c2,$d2));
+my @x=map("\"$_\"",@xx);
+
+	(
+	"&vpaddd	(@x[$a0],@x[$a0],@x[$b0])",	# Q1
+	 "&vpaddd	(@x[$a1],@x[$a1],@x[$b1])",	# Q2
+	  "&vpaddd	(@x[$a2],@x[$a2],@x[$b2])",	# Q3
+	   "&vpaddd	(@x[$a3],@x[$a3],@x[$b3])",	# Q4
+	"&vpxor		(@x[$d0],@x[$a0],@x[$d0])",
+	 "&vpxor	(@x[$d1],@x[$a1],@x[$d1])",
+	  "&vpxor	(@x[$d2],@x[$a2],@x[$d2])",
+	   "&vpxor	(@x[$d3],@x[$a3],@x[$d3])",
+	"&vprotd	(@x[$d0],@x[$d0],16)",
+	 "&vprotd	(@x[$d1],@x[$d1],16)",
+	  "&vprotd	(@x[$d2],@x[$d2],16)",
+	   "&vprotd	(@x[$d3],@x[$d3],16)",
+
+	"&vpaddd	(@x[$c0],@x[$c0],@x[$d0])",
+	 "&vpaddd	(@x[$c1],@x[$c1],@x[$d1])",
+	  "&vpaddd	(@x[$c2],@x[$c2],@x[$d2])",
+	   "&vpaddd	(@x[$c3],@x[$c3],@x[$d3])",
+	"&vpxor		(@x[$b0],@x[$c0],@x[$b0])",
+	 "&vpxor	(@x[$b1],@x[$c1],@x[$b1])",
+	  "&vpxor	(@x[$b2],@x[$b2],@x[$c2])",	# flip
+	   "&vpxor	(@x[$b3],@x[$b3],@x[$c3])",	# flip
+	"&vprotd	(@x[$b0],@x[$b0],12)",
+	 "&vprotd	(@x[$b1],@x[$b1],12)",
+	  "&vprotd	(@x[$b2],@x[$b2],12)",
+	   "&vprotd	(@x[$b3],@x[$b3],12)",
+
+	"&vpaddd	(@x[$a0],@x[$b0],@x[$a0])",	# flip
+	 "&vpaddd	(@x[$a1],@x[$b1],@x[$a1])",	# flip
+	  "&vpaddd	(@x[$a2],@x[$a2],@x[$b2])",
+	   "&vpaddd	(@x[$a3],@x[$a3],@x[$b3])",
+	"&vpxor		(@x[$d0],@x[$a0],@x[$d0])",
+	 "&vpxor	(@x[$d1],@x[$a1],@x[$d1])",
+	  "&vpxor	(@x[$d2],@x[$a2],@x[$d2])",
+	   "&vpxor	(@x[$d3],@x[$a3],@x[$d3])",
+	"&vprotd	(@x[$d0],@x[$d0],8)",
+	 "&vprotd	(@x[$d1],@x[$d1],8)",
+	  "&vprotd	(@x[$d2],@x[$d2],8)",
+	   "&vprotd	(@x[$d3],@x[$d3],8)",
+
+	"&vpaddd	(@x[$c0],@x[$c0],@x[$d0])",
+	 "&vpaddd	(@x[$c1],@x[$c1],@x[$d1])",
+	  "&vpaddd	(@x[$c2],@x[$c2],@x[$d2])",
+	   "&vpaddd	(@x[$c3],@x[$c3],@x[$d3])",
+	"&vpxor		(@x[$b0],@x[$c0],@x[$b0])",
+	 "&vpxor	(@x[$b1],@x[$c1],@x[$b1])",
+	  "&vpxor	(@x[$b2],@x[$b2],@x[$c2])",	# flip
+	   "&vpxor	(@x[$b3],@x[$b3],@x[$c3])",	# flip
+	"&vprotd	(@x[$b0],@x[$b0],7)",
+	 "&vprotd	(@x[$b1],@x[$b1],7)",
+	  "&vprotd	(@x[$b2],@x[$b2],7)",
+	   "&vprotd	(@x[$b3],@x[$b3],7)"
+	);
+}
+
+my $xframe = $win64 ? 0xa8 : 8;
+
+$code.=<<___;
+.type	ChaCha20_4xop,\@function,5
+.align	32
+ChaCha20_4xop:
+.cfi_startproc
+.LChaCha20_4xop:
+	mov		%rsp,%r9		# frame pointer
+.cfi_def_cfa_register	%r9
+	sub		\$0x140+$xframe,%rsp
+___
+	################ stack layout
+	# +0x00		SIMD equivalent of @x[8-12]
+	# ...
+	# +0x40		constant copy of key[0-2] smashed by lanes
+	# ...
+	# +0x100	SIMD counters (with nonce smashed by lanes)
+	# ...
+	# +0x140
+$code.=<<___	if ($win64);
+	movaps		%xmm6,-0xa8(%r9)
+	movaps		%xmm7,-0x98(%r9)
+	movaps		%xmm8,-0x88(%r9)
+	movaps		%xmm9,-0x78(%r9)
+	movaps		%xmm10,-0x68(%r9)
+	movaps		%xmm11,-0x58(%r9)
+	movaps		%xmm12,-0x48(%r9)
+	movaps		%xmm13,-0x38(%r9)
+	movaps		%xmm14,-0x28(%r9)
+	movaps		%xmm15,-0x18(%r9)
+.L4xop_body:
+___
+$code.=<<___;
+	vzeroupper
+
+	vmovdqa		.Lsigma(%rip),$xa3	# key[0]
+	vmovdqu		($key),$xb3		# key[1]
+	vmovdqu		16($key),$xt3		# key[2]
+	vmovdqu		($counter),$xd3		# key[3]
+	lea		0x100(%rsp),%rcx	# size optimization
+
+	vpshufd		\$0x00,$xa3,$xa0	# smash key by lanes...
+	vpshufd		\$0x55,$xa3,$xa1
+	vmovdqa		$xa0,0x40(%rsp)		# ... and offload
+	vpshufd		\$0xaa,$xa3,$xa2
+	vmovdqa		$xa1,0x50(%rsp)
+	vpshufd		\$0xff,$xa3,$xa3
+	vmovdqa		$xa2,0x60(%rsp)
+	vmovdqa		$xa3,0x70(%rsp)
+
+	vpshufd		\$0x00,$xb3,$xb0
+	vpshufd		\$0x55,$xb3,$xb1
+	vmovdqa		$xb0,0x80-0x100(%rcx)
+	vpshufd		\$0xaa,$xb3,$xb2
+	vmovdqa		$xb1,0x90-0x100(%rcx)
+	vpshufd		\$0xff,$xb3,$xb3
+	vmovdqa		$xb2,0xa0-0x100(%rcx)
+	vmovdqa		$xb3,0xb0-0x100(%rcx)
+
+	vpshufd		\$0x00,$xt3,$xt0	# "$xc0"
+	vpshufd		\$0x55,$xt3,$xt1	# "$xc1"
+	vmovdqa		$xt0,0xc0-0x100(%rcx)
+	vpshufd		\$0xaa,$xt3,$xt2	# "$xc2"
+	vmovdqa		$xt1,0xd0-0x100(%rcx)
+	vpshufd		\$0xff,$xt3,$xt3	# "$xc3"
+	vmovdqa		$xt2,0xe0-0x100(%rcx)
+	vmovdqa		$xt3,0xf0-0x100(%rcx)
+
+	vpshufd		\$0x00,$xd3,$xd0
+	vpshufd		\$0x55,$xd3,$xd1
+	vpaddd		.Linc(%rip),$xd0,$xd0	# don't save counters yet
+	vpshufd		\$0xaa,$xd3,$xd2
+	vmovdqa		$xd1,0x110-0x100(%rcx)
+	vpshufd		\$0xff,$xd3,$xd3
+	vmovdqa		$xd2,0x120-0x100(%rcx)
+	vmovdqa		$xd3,0x130-0x100(%rcx)
+
+	jmp		.Loop_enter4xop
+
+.align	32
+.Loop_outer4xop:
+	vmovdqa		0x40(%rsp),$xa0		# re-load smashed key
+	vmovdqa		0x50(%rsp),$xa1
+	vmovdqa		0x60(%rsp),$xa2
+	vmovdqa		0x70(%rsp),$xa3
+	vmovdqa		0x80-0x100(%rcx),$xb0
+	vmovdqa		0x90-0x100(%rcx),$xb1
+	vmovdqa		0xa0-0x100(%rcx),$xb2
+	vmovdqa		0xb0-0x100(%rcx),$xb3
+	vmovdqa		0xc0-0x100(%rcx),$xt0	# "$xc0"
+	vmovdqa		0xd0-0x100(%rcx),$xt1	# "$xc1"
+	vmovdqa		0xe0-0x100(%rcx),$xt2	# "$xc2"
+	vmovdqa		0xf0-0x100(%rcx),$xt3	# "$xc3"
+	vmovdqa		0x100-0x100(%rcx),$xd0
+	vmovdqa		0x110-0x100(%rcx),$xd1
+	vmovdqa		0x120-0x100(%rcx),$xd2
+	vmovdqa		0x130-0x100(%rcx),$xd3
+	vpaddd		.Lfour(%rip),$xd0,$xd0	# next SIMD counters
+
+.Loop_enter4xop:
+	mov		\$10,%eax
+	vmovdqa		$xd0,0x100-0x100(%rcx)	# save SIMD counters
+	jmp		.Loop4xop
+
+.align	32
+.Loop4xop:
+___
+	foreach (&XOP_lane_ROUND(0, 4, 8,12)) { eval; }
+	foreach (&XOP_lane_ROUND(0, 5,10,15)) { eval; }
+$code.=<<___;
+	dec		%eax
+	jnz		.Loop4xop
+
+	vpaddd		0x40(%rsp),$xa0,$xa0	# accumulate key material
+	vpaddd		0x50(%rsp),$xa1,$xa1
+	vpaddd		0x60(%rsp),$xa2,$xa2
+	vpaddd		0x70(%rsp),$xa3,$xa3
+
+	vmovdqa		$xt2,0x20(%rsp)		# offload $xc2,3
+	vmovdqa		$xt3,0x30(%rsp)
+
+	vpunpckldq	$xa1,$xa0,$xt2		# "de-interlace" data
+	vpunpckldq	$xa3,$xa2,$xt3
+	vpunpckhdq	$xa1,$xa0,$xa0
+	vpunpckhdq	$xa3,$xa2,$xa2
+	vpunpcklqdq	$xt3,$xt2,$xa1		# "a0"
+	vpunpckhqdq	$xt3,$xt2,$xt2		# "a1"
+	vpunpcklqdq	$xa2,$xa0,$xa3		# "a2"
+	vpunpckhqdq	$xa2,$xa0,$xa0		# "a3"
+___
+        ($xa0,$xa1,$xa2,$xa3,$xt2)=($xa1,$xt2,$xa3,$xa0,$xa2);
+$code.=<<___;
+	vpaddd		0x80-0x100(%rcx),$xb0,$xb0
+	vpaddd		0x90-0x100(%rcx),$xb1,$xb1
+	vpaddd		0xa0-0x100(%rcx),$xb2,$xb2
+	vpaddd		0xb0-0x100(%rcx),$xb3,$xb3
+
+	vmovdqa		$xa0,0x00(%rsp)		# offload $xa0,1
+	vmovdqa		$xa1,0x10(%rsp)
+	vmovdqa		0x20(%rsp),$xa0		# "xc2"
+	vmovdqa		0x30(%rsp),$xa1		# "xc3"
+
+	vpunpckldq	$xb1,$xb0,$xt2
+	vpunpckldq	$xb3,$xb2,$xt3
+	vpunpckhdq	$xb1,$xb0,$xb0
+	vpunpckhdq	$xb3,$xb2,$xb2
+	vpunpcklqdq	$xt3,$xt2,$xb1		# "b0"
+	vpunpckhqdq	$xt3,$xt2,$xt2		# "b1"
+	vpunpcklqdq	$xb2,$xb0,$xb3		# "b2"
+	vpunpckhqdq	$xb2,$xb0,$xb0		# "b3"
+___
+	($xb0,$xb1,$xb2,$xb3,$xt2)=($xb1,$xt2,$xb3,$xb0,$xb2);
+	my ($xc0,$xc1,$xc2,$xc3)=($xt0,$xt1,$xa0,$xa1);
+$code.=<<___;
+	vpaddd		0xc0-0x100(%rcx),$xc0,$xc0
+	vpaddd		0xd0-0x100(%rcx),$xc1,$xc1
+	vpaddd		0xe0-0x100(%rcx),$xc2,$xc2
+	vpaddd		0xf0-0x100(%rcx),$xc3,$xc3
+
+	vpunpckldq	$xc1,$xc0,$xt2
+	vpunpckldq	$xc3,$xc2,$xt3
+	vpunpckhdq	$xc1,$xc0,$xc0
+	vpunpckhdq	$xc3,$xc2,$xc2
+	vpunpcklqdq	$xt3,$xt2,$xc1		# "c0"
+	vpunpckhqdq	$xt3,$xt2,$xt2		# "c1"
+	vpunpcklqdq	$xc2,$xc0,$xc3		# "c2"
+	vpunpckhqdq	$xc2,$xc0,$xc0		# "c3"
+___
+	($xc0,$xc1,$xc2,$xc3,$xt2)=($xc1,$xt2,$xc3,$xc0,$xc2);
+$code.=<<___;
+	vpaddd		0x100-0x100(%rcx),$xd0,$xd0
+	vpaddd		0x110-0x100(%rcx),$xd1,$xd1
+	vpaddd		0x120-0x100(%rcx),$xd2,$xd2
+	vpaddd		0x130-0x100(%rcx),$xd3,$xd3
+
+	vpunpckldq	$xd1,$xd0,$xt2
+	vpunpckldq	$xd3,$xd2,$xt3
+	vpunpckhdq	$xd1,$xd0,$xd0
+	vpunpckhdq	$xd3,$xd2,$xd2
+	vpunpcklqdq	$xt3,$xt2,$xd1		# "d0"
+	vpunpckhqdq	$xt3,$xt2,$xt2		# "d1"
+	vpunpcklqdq	$xd2,$xd0,$xd3		# "d2"
+	vpunpckhqdq	$xd2,$xd0,$xd0		# "d3"
+___
+	($xd0,$xd1,$xd2,$xd3,$xt2)=($xd1,$xt2,$xd3,$xd0,$xd2);
+	($xa0,$xa1)=($xt2,$xt3);
+$code.=<<___;
+	vmovdqa		0x00(%rsp),$xa0		# restore $xa0,1
+	vmovdqa		0x10(%rsp),$xa1
+
+	cmp		\$64*4,$len
+	jb		.Ltail4xop
+
+	vpxor		0x00($inp),$xa0,$xa0	# xor with input
+	vpxor		0x10($inp),$xb0,$xb0
+	vpxor		0x20($inp),$xc0,$xc0
+	vpxor		0x30($inp),$xd0,$xd0
+	vpxor		0x40($inp),$xa1,$xa1
+	vpxor		0x50($inp),$xb1,$xb1
+	vpxor		0x60($inp),$xc1,$xc1
+	vpxor		0x70($inp),$xd1,$xd1
+	lea		0x80($inp),$inp		# size optimization
+	vpxor		0x00($inp),$xa2,$xa2
+	vpxor		0x10($inp),$xb2,$xb2
+	vpxor		0x20($inp),$xc2,$xc2
+	vpxor		0x30($inp),$xd2,$xd2
+	vpxor		0x40($inp),$xa3,$xa3
+	vpxor		0x50($inp),$xb3,$xb3
+	vpxor		0x60($inp),$xc3,$xc3
+	vpxor		0x70($inp),$xd3,$xd3
+	lea		0x80($inp),$inp		# inp+=64*4
+
+	vmovdqu		$xa0,0x00($out)
+	vmovdqu		$xb0,0x10($out)
+	vmovdqu		$xc0,0x20($out)
+	vmovdqu		$xd0,0x30($out)
+	vmovdqu		$xa1,0x40($out)
+	vmovdqu		$xb1,0x50($out)
+	vmovdqu		$xc1,0x60($out)
+	vmovdqu		$xd1,0x70($out)
+	lea		0x80($out),$out		# size optimization
+	vmovdqu		$xa2,0x00($out)
+	vmovdqu		$xb2,0x10($out)
+	vmovdqu		$xc2,0x20($out)
+	vmovdqu		$xd2,0x30($out)
+	vmovdqu		$xa3,0x40($out)
+	vmovdqu		$xb3,0x50($out)
+	vmovdqu		$xc3,0x60($out)
+	vmovdqu		$xd3,0x70($out)
+	lea		0x80($out),$out		# out+=64*4
+
+	sub		\$64*4,$len
+	jnz		.Loop_outer4xop
+
+	jmp		.Ldone4xop
+
+.align	32
+.Ltail4xop:
+	cmp		\$192,$len
+	jae		.L192_or_more4xop
+	cmp		\$128,$len
+	jae		.L128_or_more4xop
+	cmp		\$64,$len
+	jae		.L64_or_more4xop
+
+	xor		%r10,%r10
+	vmovdqa		$xa0,0x00(%rsp)
+	vmovdqa		$xb0,0x10(%rsp)
+	vmovdqa		$xc0,0x20(%rsp)
+	vmovdqa		$xd0,0x30(%rsp)
+	jmp		.Loop_tail4xop
+
+.align	32
+.L64_or_more4xop:
+	vpxor		0x00($inp),$xa0,$xa0	# xor with input
+	vpxor		0x10($inp),$xb0,$xb0
+	vpxor		0x20($inp),$xc0,$xc0
+	vpxor		0x30($inp),$xd0,$xd0
+	vmovdqu		$xa0,0x00($out)
+	vmovdqu		$xb0,0x10($out)
+	vmovdqu		$xc0,0x20($out)
+	vmovdqu		$xd0,0x30($out)
+	je		.Ldone4xop
+
+	lea		0x40($inp),$inp		# inp+=64*1
+	vmovdqa		$xa1,0x00(%rsp)
+	xor		%r10,%r10
+	vmovdqa		$xb1,0x10(%rsp)
+	lea		0x40($out),$out		# out+=64*1
+	vmovdqa		$xc1,0x20(%rsp)
+	sub		\$64,$len		# len-=64*1
+	vmovdqa		$xd1,0x30(%rsp)
+	jmp		.Loop_tail4xop
+
+.align	32
+.L128_or_more4xop:
+	vpxor		0x00($inp),$xa0,$xa0	# xor with input
+	vpxor		0x10($inp),$xb0,$xb0
+	vpxor		0x20($inp),$xc0,$xc0
+	vpxor		0x30($inp),$xd0,$xd0
+	vpxor		0x40($inp),$xa1,$xa1
+	vpxor		0x50($inp),$xb1,$xb1
+	vpxor		0x60($inp),$xc1,$xc1
+	vpxor		0x70($inp),$xd1,$xd1
+
+	vmovdqu		$xa0,0x00($out)
+	vmovdqu		$xb0,0x10($out)
+	vmovdqu		$xc0,0x20($out)
+	vmovdqu		$xd0,0x30($out)
+	vmovdqu		$xa1,0x40($out)
+	vmovdqu		$xb1,0x50($out)
+	vmovdqu		$xc1,0x60($out)
+	vmovdqu		$xd1,0x70($out)
+	je		.Ldone4xop
+
+	lea		0x80($inp),$inp		# inp+=64*2
+	vmovdqa		$xa2,0x00(%rsp)
+	xor		%r10,%r10
+	vmovdqa		$xb2,0x10(%rsp)
+	lea		0x80($out),$out		# out+=64*2
+	vmovdqa		$xc2,0x20(%rsp)
+	sub		\$128,$len		# len-=64*2
+	vmovdqa		$xd2,0x30(%rsp)
+	jmp		.Loop_tail4xop
+
+.align	32
+.L192_or_more4xop:
+	vpxor		0x00($inp),$xa0,$xa0	# xor with input
+	vpxor		0x10($inp),$xb0,$xb0
+	vpxor		0x20($inp),$xc0,$xc0
+	vpxor		0x30($inp),$xd0,$xd0
+	vpxor		0x40($inp),$xa1,$xa1
+	vpxor		0x50($inp),$xb1,$xb1
+	vpxor		0x60($inp),$xc1,$xc1
+	vpxor		0x70($inp),$xd1,$xd1
+	lea		0x80($inp),$inp		# size optimization
+	vpxor		0x00($inp),$xa2,$xa2
+	vpxor		0x10($inp),$xb2,$xb2
+	vpxor		0x20($inp),$xc2,$xc2
+	vpxor		0x30($inp),$xd2,$xd2
+
+	vmovdqu		$xa0,0x00($out)
+	vmovdqu		$xb0,0x10($out)
+	vmovdqu		$xc0,0x20($out)
+	vmovdqu		$xd0,0x30($out)
+	vmovdqu		$xa1,0x40($out)
+	vmovdqu		$xb1,0x50($out)
+	vmovdqu		$xc1,0x60($out)
+	vmovdqu		$xd1,0x70($out)
+	lea		0x80($out),$out		# size optimization
+	vmovdqu		$xa2,0x00($out)
+	vmovdqu		$xb2,0x10($out)
+	vmovdqu		$xc2,0x20($out)
+	vmovdqu		$xd2,0x30($out)
+	je		.Ldone4xop
+
+	lea		0x40($inp),$inp		# inp+=64*3
+	vmovdqa		$xa3,0x00(%rsp)
+	xor		%r10,%r10
+	vmovdqa		$xb3,0x10(%rsp)
+	lea		0x40($out),$out		# out+=64*3
+	vmovdqa		$xc3,0x20(%rsp)
+	sub		\$192,$len		# len-=64*3
+	vmovdqa		$xd3,0x30(%rsp)
+
+.Loop_tail4xop:
+	movzb		($inp,%r10),%eax
+	movzb		(%rsp,%r10),%ecx
+	lea		1(%r10),%r10
+	xor		%ecx,%eax
+	mov		%al,-1($out,%r10)
+	dec		$len
+	jnz		.Loop_tail4xop
+
+.Ldone4xop:
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	movaps		-0xa8(%r9),%xmm6
+	movaps		-0x98(%r9),%xmm7
+	movaps		-0x88(%r9),%xmm8
+	movaps		-0x78(%r9),%xmm9
+	movaps		-0x68(%r9),%xmm10
+	movaps		-0x58(%r9),%xmm11
+	movaps		-0x48(%r9),%xmm12
+	movaps		-0x38(%r9),%xmm13
+	movaps		-0x28(%r9),%xmm14
+	movaps		-0x18(%r9),%xmm15
+___
+$code.=<<___;
+	lea		(%r9),%rsp
+.cfi_def_cfa_register	%rsp
+.L4xop_epilogue:
+	ret
+.cfi_endproc
+.size	ChaCha20_4xop,.-ChaCha20_4xop
+___
+}
+
+########################################################################
+# AVX2 code path
+if ($avx>1) {
+my ($xb0,$xb1,$xb2,$xb3, $xd0,$xd1,$xd2,$xd3,
+    $xa0,$xa1,$xa2,$xa3, $xt0,$xt1,$xt2,$xt3)=map("%ymm$_",(0..15));
+my @xx=($xa0,$xa1,$xa2,$xa3, $xb0,$xb1,$xb2,$xb3,
+	"%nox","%nox","%nox","%nox", $xd0,$xd1,$xd2,$xd3);
+
+sub AVX2_lane_ROUND {
+my ($a0,$b0,$c0,$d0)=@_;
+my ($a1,$b1,$c1,$d1)=map(($_&~3)+(($_+1)&3),($a0,$b0,$c0,$d0));
+my ($a2,$b2,$c2,$d2)=map(($_&~3)+(($_+1)&3),($a1,$b1,$c1,$d1));
+my ($a3,$b3,$c3,$d3)=map(($_&~3)+(($_+1)&3),($a2,$b2,$c2,$d2));
+my ($xc,$xc_,$t0,$t1)=map("\"$_\"",$xt0,$xt1,$xt2,$xt3);
+my @x=map("\"$_\"",@xx);
+
+	# Consider order in which variables are addressed by their
+	# index:
+	#
+	#	a   b   c   d
+	#
+	#	0   4   8  12 < even round
+	#	1   5   9  13
+	#	2   6  10  14
+	#	3   7  11  15
+	#	0   5  10  15 < odd round
+	#	1   6  11  12
+	#	2   7   8  13
+	#	3   4   9  14
+	#
+	# 'a', 'b' and 'd's are permanently allocated in registers,
+	# @x[0..7,12..15], while 'c's are maintained in memory. If
+	# you observe 'c' column, you'll notice that pair of 'c's is
+	# invariant between rounds. This means that we have to reload
+	# them once per round, in the middle. This is why you'll see
+	# bunch of 'c' stores and loads in the middle, but none in
+	# the beginning or end.
+
+	(
+	"&vpaddd	(@x[$a0],@x[$a0],@x[$b0])",	# Q1
+	"&vpxor		(@x[$d0],@x[$a0],@x[$d0])",
+	"&vpshufb	(@x[$d0],@x[$d0],$t1)",
+	 "&vpaddd	(@x[$a1],@x[$a1],@x[$b1])",	# Q2
+	 "&vpxor	(@x[$d1],@x[$a1],@x[$d1])",
+	 "&vpshufb	(@x[$d1],@x[$d1],$t1)",
+
+	"&vpaddd	($xc,$xc,@x[$d0])",
+	"&vpxor		(@x[$b0],$xc,@x[$b0])",
+	"&vpslld	($t0,@x[$b0],12)",
+	"&vpsrld	(@x[$b0],@x[$b0],20)",
+	"&vpor		(@x[$b0],$t0,@x[$b0])",
+	"&vbroadcasti128($t0,'(%r11)')",		# .Lrot24(%rip)
+	 "&vpaddd	($xc_,$xc_,@x[$d1])",
+	 "&vpxor	(@x[$b1],$xc_,@x[$b1])",
+	 "&vpslld	($t1,@x[$b1],12)",
+	 "&vpsrld	(@x[$b1],@x[$b1],20)",
+	 "&vpor		(@x[$b1],$t1,@x[$b1])",
+
+	"&vpaddd	(@x[$a0],@x[$a0],@x[$b0])",
+	"&vpxor		(@x[$d0],@x[$a0],@x[$d0])",
+	"&vpshufb	(@x[$d0],@x[$d0],$t0)",
+	 "&vpaddd	(@x[$a1],@x[$a1],@x[$b1])",
+	 "&vpxor	(@x[$d1],@x[$a1],@x[$d1])",
+	 "&vpshufb	(@x[$d1],@x[$d1],$t0)",
+
+	"&vpaddd	($xc,$xc,@x[$d0])",
+	"&vpxor		(@x[$b0],$xc,@x[$b0])",
+	"&vpslld	($t1,@x[$b0],7)",
+	"&vpsrld	(@x[$b0],@x[$b0],25)",
+	"&vpor		(@x[$b0],$t1,@x[$b0])",
+	"&vbroadcasti128($t1,'(%r10)')",		# .Lrot16(%rip)
+	 "&vpaddd	($xc_,$xc_,@x[$d1])",
+	 "&vpxor	(@x[$b1],$xc_,@x[$b1])",
+	 "&vpslld	($t0,@x[$b1],7)",
+	 "&vpsrld	(@x[$b1],@x[$b1],25)",
+	 "&vpor		(@x[$b1],$t0,@x[$b1])",
+
+	"&vmovdqa	(\"`32*($c0-8)`(%rsp)\",$xc)",	# reload pair of 'c's
+	 "&vmovdqa	(\"`32*($c1-8)`(%rsp)\",$xc_)",
+	"&vmovdqa	($xc,\"`32*($c2-8)`(%rsp)\")",
+	 "&vmovdqa	($xc_,\"`32*($c3-8)`(%rsp)\")",
+
+	"&vpaddd	(@x[$a2],@x[$a2],@x[$b2])",	# Q3
+	"&vpxor		(@x[$d2],@x[$a2],@x[$d2])",
+	"&vpshufb	(@x[$d2],@x[$d2],$t1)",
+	 "&vpaddd	(@x[$a3],@x[$a3],@x[$b3])",	# Q4
+	 "&vpxor	(@x[$d3],@x[$a3],@x[$d3])",
+	 "&vpshufb	(@x[$d3],@x[$d3],$t1)",
+
+	"&vpaddd	($xc,$xc,@x[$d2])",
+	"&vpxor		(@x[$b2],$xc,@x[$b2])",
+	"&vpslld	($t0,@x[$b2],12)",
+	"&vpsrld	(@x[$b2],@x[$b2],20)",
+	"&vpor		(@x[$b2],$t0,@x[$b2])",
+	"&vbroadcasti128($t0,'(%r11)')",		# .Lrot24(%rip)
+	 "&vpaddd	($xc_,$xc_,@x[$d3])",
+	 "&vpxor	(@x[$b3],$xc_,@x[$b3])",
+	 "&vpslld	($t1,@x[$b3],12)",
+	 "&vpsrld	(@x[$b3],@x[$b3],20)",
+	 "&vpor		(@x[$b3],$t1,@x[$b3])",
+
+	"&vpaddd	(@x[$a2],@x[$a2],@x[$b2])",
+	"&vpxor		(@x[$d2],@x[$a2],@x[$d2])",
+	"&vpshufb	(@x[$d2],@x[$d2],$t0)",
+	 "&vpaddd	(@x[$a3],@x[$a3],@x[$b3])",
+	 "&vpxor	(@x[$d3],@x[$a3],@x[$d3])",
+	 "&vpshufb	(@x[$d3],@x[$d3],$t0)",
+
+	"&vpaddd	($xc,$xc,@x[$d2])",
+	"&vpxor		(@x[$b2],$xc,@x[$b2])",
+	"&vpslld	($t1,@x[$b2],7)",
+	"&vpsrld	(@x[$b2],@x[$b2],25)",
+	"&vpor		(@x[$b2],$t1,@x[$b2])",
+	"&vbroadcasti128($t1,'(%r10)')",		# .Lrot16(%rip)
+	 "&vpaddd	($xc_,$xc_,@x[$d3])",
+	 "&vpxor	(@x[$b3],$xc_,@x[$b3])",
+	 "&vpslld	($t0,@x[$b3],7)",
+	 "&vpsrld	(@x[$b3],@x[$b3],25)",
+	 "&vpor		(@x[$b3],$t0,@x[$b3])"
+	);
+}
+
+my $xframe = $win64 ? 0xa8 : 8;
+
+$code.=<<___;
+.type	ChaCha20_8x,\@function,5
+.align	32
+ChaCha20_8x:
+.cfi_startproc
+.LChaCha20_8x:
+	mov		%rsp,%r9		# frame register
+.cfi_def_cfa_register	%r9
+	sub		\$0x280+$xframe,%rsp
+	and		\$-32,%rsp
+___
+$code.=<<___	if ($win64);
+	movaps		%xmm6,-0xa8(%r9)
+	movaps		%xmm7,-0x98(%r9)
+	movaps		%xmm8,-0x88(%r9)
+	movaps		%xmm9,-0x78(%r9)
+	movaps		%xmm10,-0x68(%r9)
+	movaps		%xmm11,-0x58(%r9)
+	movaps		%xmm12,-0x48(%r9)
+	movaps		%xmm13,-0x38(%r9)
+	movaps		%xmm14,-0x28(%r9)
+	movaps		%xmm15,-0x18(%r9)
+.L8x_body:
+___
+$code.=<<___;
+	vzeroupper
+
+	################ stack layout
+	# +0x00		SIMD equivalent of @x[8-12]
+	# ...
+	# +0x80		constant copy of key[0-2] smashed by lanes
+	# ...
+	# +0x200	SIMD counters (with nonce smashed by lanes)
+	# ...
+	# +0x280
+
+	vbroadcasti128	.Lsigma(%rip),$xa3	# key[0]
+	vbroadcasti128	($key),$xb3		# key[1]
+	vbroadcasti128	16($key),$xt3		# key[2]
+	vbroadcasti128	($counter),$xd3		# key[3]
+	lea		0x100(%rsp),%rcx	# size optimization
+	lea		0x200(%rsp),%rax	# size optimization
+	lea		.Lrot16(%rip),%r10
+	lea		.Lrot24(%rip),%r11
+
+	vpshufd		\$0x00,$xa3,$xa0	# smash key by lanes...
+	vpshufd		\$0x55,$xa3,$xa1
+	vmovdqa		$xa0,0x80-0x100(%rcx)	# ... and offload
+	vpshufd		\$0xaa,$xa3,$xa2
+	vmovdqa		$xa1,0xa0-0x100(%rcx)
+	vpshufd		\$0xff,$xa3,$xa3
+	vmovdqa		$xa2,0xc0-0x100(%rcx)
+	vmovdqa		$xa3,0xe0-0x100(%rcx)
+
+	vpshufd		\$0x00,$xb3,$xb0
+	vpshufd		\$0x55,$xb3,$xb1
+	vmovdqa		$xb0,0x100-0x100(%rcx)
+	vpshufd		\$0xaa,$xb3,$xb2
+	vmovdqa		$xb1,0x120-0x100(%rcx)
+	vpshufd		\$0xff,$xb3,$xb3
+	vmovdqa		$xb2,0x140-0x100(%rcx)
+	vmovdqa		$xb3,0x160-0x100(%rcx)
+
+	vpshufd		\$0x00,$xt3,$xt0	# "xc0"
+	vpshufd		\$0x55,$xt3,$xt1	# "xc1"
+	vmovdqa		$xt0,0x180-0x200(%rax)
+	vpshufd		\$0xaa,$xt3,$xt2	# "xc2"
+	vmovdqa		$xt1,0x1a0-0x200(%rax)
+	vpshufd		\$0xff,$xt3,$xt3	# "xc3"
+	vmovdqa		$xt2,0x1c0-0x200(%rax)
+	vmovdqa		$xt3,0x1e0-0x200(%rax)
+
+	vpshufd		\$0x00,$xd3,$xd0
+	vpshufd		\$0x55,$xd3,$xd1
+	vpaddd		.Lincy(%rip),$xd0,$xd0	# don't save counters yet
+	vpshufd		\$0xaa,$xd3,$xd2
+	vmovdqa		$xd1,0x220-0x200(%rax)
+	vpshufd		\$0xff,$xd3,$xd3
+	vmovdqa		$xd2,0x240-0x200(%rax)
+	vmovdqa		$xd3,0x260-0x200(%rax)
+
+	jmp		.Loop_enter8x
+
+.align	32
+.Loop_outer8x:
+	vmovdqa		0x80-0x100(%rcx),$xa0	# re-load smashed key
+	vmovdqa		0xa0-0x100(%rcx),$xa1
+	vmovdqa		0xc0-0x100(%rcx),$xa2
+	vmovdqa		0xe0-0x100(%rcx),$xa3
+	vmovdqa		0x100-0x100(%rcx),$xb0
+	vmovdqa		0x120-0x100(%rcx),$xb1
+	vmovdqa		0x140-0x100(%rcx),$xb2
+	vmovdqa		0x160-0x100(%rcx),$xb3
+	vmovdqa		0x180-0x200(%rax),$xt0	# "xc0"
+	vmovdqa		0x1a0-0x200(%rax),$xt1	# "xc1"
+	vmovdqa		0x1c0-0x200(%rax),$xt2	# "xc2"
+	vmovdqa		0x1e0-0x200(%rax),$xt3	# "xc3"
+	vmovdqa		0x200-0x200(%rax),$xd0
+	vmovdqa		0x220-0x200(%rax),$xd1
+	vmovdqa		0x240-0x200(%rax),$xd2
+	vmovdqa		0x260-0x200(%rax),$xd3
+	vpaddd		.Leight(%rip),$xd0,$xd0	# next SIMD counters
+
+.Loop_enter8x:
+	vmovdqa		$xt2,0x40(%rsp)		# SIMD equivalent of "@x[10]"
+	vmovdqa		$xt3,0x60(%rsp)		# SIMD equivalent of "@x[11]"
+	vbroadcasti128	(%r10),$xt3
+	vmovdqa		$xd0,0x200-0x200(%rax)	# save SIMD counters
+	mov		\$10,%eax
+	jmp		.Loop8x
+
+.align	32
+.Loop8x:
+___
+	foreach (&AVX2_lane_ROUND(0, 4, 8,12)) { eval; }
+	foreach (&AVX2_lane_ROUND(0, 5,10,15)) { eval; }
+$code.=<<___;
+	dec		%eax
+	jnz		.Loop8x
+
+	lea		0x200(%rsp),%rax	# size optimization
+	vpaddd		0x80-0x100(%rcx),$xa0,$xa0	# accumulate key
+	vpaddd		0xa0-0x100(%rcx),$xa1,$xa1
+	vpaddd		0xc0-0x100(%rcx),$xa2,$xa2
+	vpaddd		0xe0-0x100(%rcx),$xa3,$xa3
+
+	vpunpckldq	$xa1,$xa0,$xt2		# "de-interlace" data
+	vpunpckldq	$xa3,$xa2,$xt3
+	vpunpckhdq	$xa1,$xa0,$xa0
+	vpunpckhdq	$xa3,$xa2,$xa2
+	vpunpcklqdq	$xt3,$xt2,$xa1		# "a0"
+	vpunpckhqdq	$xt3,$xt2,$xt2		# "a1"
+	vpunpcklqdq	$xa2,$xa0,$xa3		# "a2"
+	vpunpckhqdq	$xa2,$xa0,$xa0		# "a3"
+___
+	($xa0,$xa1,$xa2,$xa3,$xt2)=($xa1,$xt2,$xa3,$xa0,$xa2);
+$code.=<<___;
+	vpaddd		0x100-0x100(%rcx),$xb0,$xb0
+	vpaddd		0x120-0x100(%rcx),$xb1,$xb1
+	vpaddd		0x140-0x100(%rcx),$xb2,$xb2
+	vpaddd		0x160-0x100(%rcx),$xb3,$xb3
+
+	vpunpckldq	$xb1,$xb0,$xt2
+	vpunpckldq	$xb3,$xb2,$xt3
+	vpunpckhdq	$xb1,$xb0,$xb0
+	vpunpckhdq	$xb3,$xb2,$xb2
+	vpunpcklqdq	$xt3,$xt2,$xb1		# "b0"
+	vpunpckhqdq	$xt3,$xt2,$xt2		# "b1"
+	vpunpcklqdq	$xb2,$xb0,$xb3		# "b2"
+	vpunpckhqdq	$xb2,$xb0,$xb0		# "b3"
+___
+	($xb0,$xb1,$xb2,$xb3,$xt2)=($xb1,$xt2,$xb3,$xb0,$xb2);
+$code.=<<___;
+	vperm2i128	\$0x20,$xb0,$xa0,$xt3	# "de-interlace" further
+	vperm2i128	\$0x31,$xb0,$xa0,$xb0
+	vperm2i128	\$0x20,$xb1,$xa1,$xa0
+	vperm2i128	\$0x31,$xb1,$xa1,$xb1
+	vperm2i128	\$0x20,$xb2,$xa2,$xa1
+	vperm2i128	\$0x31,$xb2,$xa2,$xb2
+	vperm2i128	\$0x20,$xb3,$xa3,$xa2
+	vperm2i128	\$0x31,$xb3,$xa3,$xb3
+___
+	($xa0,$xa1,$xa2,$xa3,$xt3)=($xt3,$xa0,$xa1,$xa2,$xa3);
+	my ($xc0,$xc1,$xc2,$xc3)=($xt0,$xt1,$xa0,$xa1);
+$code.=<<___;
+	vmovdqa		$xa0,0x00(%rsp)		# offload $xaN
+	vmovdqa		$xa1,0x20(%rsp)
+	vmovdqa		0x40(%rsp),$xc2		# $xa0
+	vmovdqa		0x60(%rsp),$xc3		# $xa1
+
+	vpaddd		0x180-0x200(%rax),$xc0,$xc0
+	vpaddd		0x1a0-0x200(%rax),$xc1,$xc1
+	vpaddd		0x1c0-0x200(%rax),$xc2,$xc2
+	vpaddd		0x1e0-0x200(%rax),$xc3,$xc3
+
+	vpunpckldq	$xc1,$xc0,$xt2
+	vpunpckldq	$xc3,$xc2,$xt3
+	vpunpckhdq	$xc1,$xc0,$xc0
+	vpunpckhdq	$xc3,$xc2,$xc2
+	vpunpcklqdq	$xt3,$xt2,$xc1		# "c0"
+	vpunpckhqdq	$xt3,$xt2,$xt2		# "c1"
+	vpunpcklqdq	$xc2,$xc0,$xc3		# "c2"
+	vpunpckhqdq	$xc2,$xc0,$xc0		# "c3"
+___
+	($xc0,$xc1,$xc2,$xc3,$xt2)=($xc1,$xt2,$xc3,$xc0,$xc2);
+$code.=<<___;
+	vpaddd		0x200-0x200(%rax),$xd0,$xd0
+	vpaddd		0x220-0x200(%rax),$xd1,$xd1
+	vpaddd		0x240-0x200(%rax),$xd2,$xd2
+	vpaddd		0x260-0x200(%rax),$xd3,$xd3
+
+	vpunpckldq	$xd1,$xd0,$xt2
+	vpunpckldq	$xd3,$xd2,$xt3
+	vpunpckhdq	$xd1,$xd0,$xd0
+	vpunpckhdq	$xd3,$xd2,$xd2
+	vpunpcklqdq	$xt3,$xt2,$xd1		# "d0"
+	vpunpckhqdq	$xt3,$xt2,$xt2		# "d1"
+	vpunpcklqdq	$xd2,$xd0,$xd3		# "d2"
+	vpunpckhqdq	$xd2,$xd0,$xd0		# "d3"
+___
+	($xd0,$xd1,$xd2,$xd3,$xt2)=($xd1,$xt2,$xd3,$xd0,$xd2);
+$code.=<<___;
+	vperm2i128	\$0x20,$xd0,$xc0,$xt3	# "de-interlace" further
+	vperm2i128	\$0x31,$xd0,$xc0,$xd0
+	vperm2i128	\$0x20,$xd1,$xc1,$xc0
+	vperm2i128	\$0x31,$xd1,$xc1,$xd1
+	vperm2i128	\$0x20,$xd2,$xc2,$xc1
+	vperm2i128	\$0x31,$xd2,$xc2,$xd2
+	vperm2i128	\$0x20,$xd3,$xc3,$xc2
+	vperm2i128	\$0x31,$xd3,$xc3,$xd3
+___
+	($xc0,$xc1,$xc2,$xc3,$xt3)=($xt3,$xc0,$xc1,$xc2,$xc3);
+	($xb0,$xb1,$xb2,$xb3,$xc0,$xc1,$xc2,$xc3)=
+	($xc0,$xc1,$xc2,$xc3,$xb0,$xb1,$xb2,$xb3);
+	($xa0,$xa1)=($xt2,$xt3);
+$code.=<<___;
+	vmovdqa		0x00(%rsp),$xa0		# $xaN was offloaded, remember?
+	vmovdqa		0x20(%rsp),$xa1
+
+	cmp		\$64*8,$len
+	jb		.Ltail8x
+
+	vpxor		0x00($inp),$xa0,$xa0	# xor with input
+	vpxor		0x20($inp),$xb0,$xb0
+	vpxor		0x40($inp),$xc0,$xc0
+	vpxor		0x60($inp),$xd0,$xd0
+	lea		0x80($inp),$inp		# size optimization
+	vmovdqu		$xa0,0x00($out)
+	vmovdqu		$xb0,0x20($out)
+	vmovdqu		$xc0,0x40($out)
+	vmovdqu		$xd0,0x60($out)
+	lea		0x80($out),$out		# size optimization
+
+	vpxor		0x00($inp),$xa1,$xa1
+	vpxor		0x20($inp),$xb1,$xb1
+	vpxor		0x40($inp),$xc1,$xc1
+	vpxor		0x60($inp),$xd1,$xd1
+	lea		0x80($inp),$inp		# size optimization
+	vmovdqu		$xa1,0x00($out)
+	vmovdqu		$xb1,0x20($out)
+	vmovdqu		$xc1,0x40($out)
+	vmovdqu		$xd1,0x60($out)
+	lea		0x80($out),$out		# size optimization
+
+	vpxor		0x00($inp),$xa2,$xa2
+	vpxor		0x20($inp),$xb2,$xb2
+	vpxor		0x40($inp),$xc2,$xc2
+	vpxor		0x60($inp),$xd2,$xd2
+	lea		0x80($inp),$inp		# size optimization
+	vmovdqu		$xa2,0x00($out)
+	vmovdqu		$xb2,0x20($out)
+	vmovdqu		$xc2,0x40($out)
+	vmovdqu		$xd2,0x60($out)
+	lea		0x80($out),$out		# size optimization
+
+	vpxor		0x00($inp),$xa3,$xa3
+	vpxor		0x20($inp),$xb3,$xb3
+	vpxor		0x40($inp),$xc3,$xc3
+	vpxor		0x60($inp),$xd3,$xd3
+	lea		0x80($inp),$inp		# size optimization
+	vmovdqu		$xa3,0x00($out)
+	vmovdqu		$xb3,0x20($out)
+	vmovdqu		$xc3,0x40($out)
+	vmovdqu		$xd3,0x60($out)
+	lea		0x80($out),$out		# size optimization
+
+	sub		\$64*8,$len
+	jnz		.Loop_outer8x
+
+	jmp		.Ldone8x
+
+.Ltail8x:
+	cmp		\$448,$len
+	jae		.L448_or_more8x
+	cmp		\$384,$len
+	jae		.L384_or_more8x
+	cmp		\$320,$len
+	jae		.L320_or_more8x
+	cmp		\$256,$len
+	jae		.L256_or_more8x
+	cmp		\$192,$len
+	jae		.L192_or_more8x
+	cmp		\$128,$len
+	jae		.L128_or_more8x
+	cmp		\$64,$len
+	jae		.L64_or_more8x
+
+	xor		%r10,%r10
+	vmovdqa		$xa0,0x00(%rsp)
+	vmovdqa		$xb0,0x20(%rsp)
+	jmp		.Loop_tail8x
+
+.align	32
+.L64_or_more8x:
+	vpxor		0x00($inp),$xa0,$xa0	# xor with input
+	vpxor		0x20($inp),$xb0,$xb0
+	vmovdqu		$xa0,0x00($out)
+	vmovdqu		$xb0,0x20($out)
+	je		.Ldone8x
+
+	lea		0x40($inp),$inp		# inp+=64*1
+	xor		%r10,%r10
+	vmovdqa		$xc0,0x00(%rsp)
+	lea		0x40($out),$out		# out+=64*1
+	sub		\$64,$len		# len-=64*1
+	vmovdqa		$xd0,0x20(%rsp)
+	jmp		.Loop_tail8x
+
+.align	32
+.L128_or_more8x:
+	vpxor		0x00($inp),$xa0,$xa0	# xor with input
+	vpxor		0x20($inp),$xb0,$xb0
+	vpxor		0x40($inp),$xc0,$xc0
+	vpxor		0x60($inp),$xd0,$xd0
+	vmovdqu		$xa0,0x00($out)
+	vmovdqu		$xb0,0x20($out)
+	vmovdqu		$xc0,0x40($out)
+	vmovdqu		$xd0,0x60($out)
+	je		.Ldone8x
+
+	lea		0x80($inp),$inp		# inp+=64*2
+	xor		%r10,%r10
+	vmovdqa		$xa1,0x00(%rsp)
+	lea		0x80($out),$out		# out+=64*2
+	sub		\$128,$len		# len-=64*2
+	vmovdqa		$xb1,0x20(%rsp)
+	jmp		.Loop_tail8x
+
+.align	32
+.L192_or_more8x:
+	vpxor		0x00($inp),$xa0,$xa0	# xor with input
+	vpxor		0x20($inp),$xb0,$xb0
+	vpxor		0x40($inp),$xc0,$xc0
+	vpxor		0x60($inp),$xd0,$xd0
+	vpxor		0x80($inp),$xa1,$xa1
+	vpxor		0xa0($inp),$xb1,$xb1
+	vmovdqu		$xa0,0x00($out)
+	vmovdqu		$xb0,0x20($out)
+	vmovdqu		$xc0,0x40($out)
+	vmovdqu		$xd0,0x60($out)
+	vmovdqu		$xa1,0x80($out)
+	vmovdqu		$xb1,0xa0($out)
+	je		.Ldone8x
+
+	lea		0xc0($inp),$inp		# inp+=64*3
+	xor		%r10,%r10
+	vmovdqa		$xc1,0x00(%rsp)
+	lea		0xc0($out),$out		# out+=64*3
+	sub		\$192,$len		# len-=64*3
+	vmovdqa		$xd1,0x20(%rsp)
+	jmp		.Loop_tail8x
+
+.align	32
+.L256_or_more8x:
+	vpxor		0x00($inp),$xa0,$xa0	# xor with input
+	vpxor		0x20($inp),$xb0,$xb0
+	vpxor		0x40($inp),$xc0,$xc0
+	vpxor		0x60($inp),$xd0,$xd0
+	vpxor		0x80($inp),$xa1,$xa1
+	vpxor		0xa0($inp),$xb1,$xb1
+	vpxor		0xc0($inp),$xc1,$xc1
+	vpxor		0xe0($inp),$xd1,$xd1
+	vmovdqu		$xa0,0x00($out)
+	vmovdqu		$xb0,0x20($out)
+	vmovdqu		$xc0,0x40($out)
+	vmovdqu		$xd0,0x60($out)
+	vmovdqu		$xa1,0x80($out)
+	vmovdqu		$xb1,0xa0($out)
+	vmovdqu		$xc1,0xc0($out)
+	vmovdqu		$xd1,0xe0($out)
+	je		.Ldone8x
+
+	lea		0x100($inp),$inp	# inp+=64*4
+	xor		%r10,%r10
+	vmovdqa		$xa2,0x00(%rsp)
+	lea		0x100($out),$out	# out+=64*4
+	sub		\$256,$len		# len-=64*4
+	vmovdqa		$xb2,0x20(%rsp)
+	jmp		.Loop_tail8x
+
+.align	32
+.L320_or_more8x:
+	vpxor		0x00($inp),$xa0,$xa0	# xor with input
+	vpxor		0x20($inp),$xb0,$xb0
+	vpxor		0x40($inp),$xc0,$xc0
+	vpxor		0x60($inp),$xd0,$xd0
+	vpxor		0x80($inp),$xa1,$xa1
+	vpxor		0xa0($inp),$xb1,$xb1
+	vpxor		0xc0($inp),$xc1,$xc1
+	vpxor		0xe0($inp),$xd1,$xd1
+	vpxor		0x100($inp),$xa2,$xa2
+	vpxor		0x120($inp),$xb2,$xb2
+	vmovdqu		$xa0,0x00($out)
+	vmovdqu		$xb0,0x20($out)
+	vmovdqu		$xc0,0x40($out)
+	vmovdqu		$xd0,0x60($out)
+	vmovdqu		$xa1,0x80($out)
+	vmovdqu		$xb1,0xa0($out)
+	vmovdqu		$xc1,0xc0($out)
+	vmovdqu		$xd1,0xe0($out)
+	vmovdqu		$xa2,0x100($out)
+	vmovdqu		$xb2,0x120($out)
+	je		.Ldone8x
+
+	lea		0x140($inp),$inp	# inp+=64*5
+	xor		%r10,%r10
+	vmovdqa		$xc2,0x00(%rsp)
+	lea		0x140($out),$out	# out+=64*5
+	sub		\$320,$len		# len-=64*5
+	vmovdqa		$xd2,0x20(%rsp)
+	jmp		.Loop_tail8x
+
+.align	32
+.L384_or_more8x:
+	vpxor		0x00($inp),$xa0,$xa0	# xor with input
+	vpxor		0x20($inp),$xb0,$xb0
+	vpxor		0x40($inp),$xc0,$xc0
+	vpxor		0x60($inp),$xd0,$xd0
+	vpxor		0x80($inp),$xa1,$xa1
+	vpxor		0xa0($inp),$xb1,$xb1
+	vpxor		0xc0($inp),$xc1,$xc1
+	vpxor		0xe0($inp),$xd1,$xd1
+	vpxor		0x100($inp),$xa2,$xa2
+	vpxor		0x120($inp),$xb2,$xb2
+	vpxor		0x140($inp),$xc2,$xc2
+	vpxor		0x160($inp),$xd2,$xd2
+	vmovdqu		$xa0,0x00($out)
+	vmovdqu		$xb0,0x20($out)
+	vmovdqu		$xc0,0x40($out)
+	vmovdqu		$xd0,0x60($out)
+	vmovdqu		$xa1,0x80($out)
+	vmovdqu		$xb1,0xa0($out)
+	vmovdqu		$xc1,0xc0($out)
+	vmovdqu		$xd1,0xe0($out)
+	vmovdqu		$xa2,0x100($out)
+	vmovdqu		$xb2,0x120($out)
+	vmovdqu		$xc2,0x140($out)
+	vmovdqu		$xd2,0x160($out)
+	je		.Ldone8x
+
+	lea		0x180($inp),$inp	# inp+=64*6
+	xor		%r10,%r10
+	vmovdqa		$xa3,0x00(%rsp)
+	lea		0x180($out),$out	# out+=64*6
+	sub		\$384,$len		# len-=64*6
+	vmovdqa		$xb3,0x20(%rsp)
+	jmp		.Loop_tail8x
+
+.align	32
+.L448_or_more8x:
+	vpxor		0x00($inp),$xa0,$xa0	# xor with input
+	vpxor		0x20($inp),$xb0,$xb0
+	vpxor		0x40($inp),$xc0,$xc0
+	vpxor		0x60($inp),$xd0,$xd0
+	vpxor		0x80($inp),$xa1,$xa1
+	vpxor		0xa0($inp),$xb1,$xb1
+	vpxor		0xc0($inp),$xc1,$xc1
+	vpxor		0xe0($inp),$xd1,$xd1
+	vpxor		0x100($inp),$xa2,$xa2
+	vpxor		0x120($inp),$xb2,$xb2
+	vpxor		0x140($inp),$xc2,$xc2
+	vpxor		0x160($inp),$xd2,$xd2
+	vpxor		0x180($inp),$xa3,$xa3
+	vpxor		0x1a0($inp),$xb3,$xb3
+	vmovdqu		$xa0,0x00($out)
+	vmovdqu		$xb0,0x20($out)
+	vmovdqu		$xc0,0x40($out)
+	vmovdqu		$xd0,0x60($out)
+	vmovdqu		$xa1,0x80($out)
+	vmovdqu		$xb1,0xa0($out)
+	vmovdqu		$xc1,0xc0($out)
+	vmovdqu		$xd1,0xe0($out)
+	vmovdqu		$xa2,0x100($out)
+	vmovdqu		$xb2,0x120($out)
+	vmovdqu		$xc2,0x140($out)
+	vmovdqu		$xd2,0x160($out)
+	vmovdqu		$xa3,0x180($out)
+	vmovdqu		$xb3,0x1a0($out)
+	je		.Ldone8x
+
+	lea		0x1c0($inp),$inp	# inp+=64*7
+	xor		%r10,%r10
+	vmovdqa		$xc3,0x00(%rsp)
+	lea		0x1c0($out),$out	# out+=64*7
+	sub		\$448,$len		# len-=64*7
+	vmovdqa		$xd3,0x20(%rsp)
+
+.Loop_tail8x:
+	movzb		($inp,%r10),%eax
+	movzb		(%rsp,%r10),%ecx
+	lea		1(%r10),%r10
+	xor		%ecx,%eax
+	mov		%al,-1($out,%r10)
+	dec		$len
+	jnz		.Loop_tail8x
+
+.Ldone8x:
+	vzeroall
+___
+$code.=<<___	if ($win64);
+	movaps		-0xa8(%r9),%xmm6
+	movaps		-0x98(%r9),%xmm7
+	movaps		-0x88(%r9),%xmm8
+	movaps		-0x78(%r9),%xmm9
+	movaps		-0x68(%r9),%xmm10
+	movaps		-0x58(%r9),%xmm11
+	movaps		-0x48(%r9),%xmm12
+	movaps		-0x38(%r9),%xmm13
+	movaps		-0x28(%r9),%xmm14
+	movaps		-0x18(%r9),%xmm15
+___
+$code.=<<___;
+	lea		(%r9),%rsp
+.cfi_def_cfa_register	%rsp
+.L8x_epilogue:
+	ret
+.cfi_endproc
+.size	ChaCha20_8x,.-ChaCha20_8x
+___
+}
+
+########################################################################
+# AVX512 code paths
+if ($avx>2) {
+# This one handles shorter inputs...
+
+my ($a,$b,$c,$d, $a_,$b_,$c_,$d_,$fourz) = map("%zmm$_",(0..3,16..20));
+my ($t0,$t1,$t2,$t3) = map("%xmm$_",(4..7));
+
+sub vpxord()		# size optimization
+{ my $opcode = "vpxor";	# adhere to vpxor when possible
+
+    foreach (@_) {
+	if (/%([zy])mm([0-9]+)/ && ($1 eq "z" || $2>=16)) {
+	    $opcode = "vpxord";
+	    last;
+	}
+    }
+
+    $code .= "\t$opcode\t".join(',',reverse @_)."\n";
+}
+
+sub AVX512ROUND {	# critical path is 14 "SIMD ticks" per round
+	&vpaddd	($a,$a,$b);
+	&vpxord	($d,$d,$a);
+	&vprold	($d,$d,16);
+
+	&vpaddd	($c,$c,$d);
+	&vpxord	($b,$b,$c);
+	&vprold	($b,$b,12);
+
+	&vpaddd	($a,$a,$b);
+	&vpxord	($d,$d,$a);
+	&vprold	($d,$d,8);
+
+	&vpaddd	($c,$c,$d);
+	&vpxord	($b,$b,$c);
+	&vprold	($b,$b,7);
+}
+
+my $xframe = $win64 ? 32+8 : 8;
+
+$code.=<<___;
+.type	ChaCha20_avx512,\@function,5
+.align	32
+ChaCha20_avx512:
+.cfi_startproc
+.LChaCha20_avx512:
+	mov	%rsp,%r9		# frame pointer
+.cfi_def_cfa_register	%r9
+	cmp	\$512,$len
+	ja	.LChaCha20_16x
+
+	sub	\$64+$xframe,%rsp
+___
+$code.=<<___	if ($win64);
+	movaps	%xmm6,-0x28(%r9)
+	movaps	%xmm7,-0x18(%r9)
+.Lavx512_body:
+___
+$code.=<<___;
+	vbroadcasti32x4	.Lsigma(%rip),$a
+	vbroadcasti32x4	($key),$b
+	vbroadcasti32x4	16($key),$c
+	vbroadcasti32x4	($counter),$d
+
+	vmovdqa32	$a,$a_
+	vmovdqa32	$b,$b_
+	vmovdqa32	$c,$c_
+	vpaddd		.Lzeroz(%rip),$d,$d
+	vmovdqa32	.Lfourz(%rip),$fourz
+	mov		\$10,$counter	# reuse $counter
+	vmovdqa32	$d,$d_
+	jmp		.Loop_avx512
+
+.align	16
+.Loop_outer_avx512:
+	vmovdqa32	$a_,$a
+	vmovdqa32	$b_,$b
+	vmovdqa32	$c_,$c
+	vpaddd		$fourz,$d_,$d
+	mov		\$10,$counter
+	vmovdqa32	$d,$d_
+	jmp		.Loop_avx512
+
+.align	32
+.Loop_avx512:
+___
+	&AVX512ROUND();
+	&vpshufd	($c,$c,0b01001110);
+	&vpshufd	($b,$b,0b00111001);
+	&vpshufd	($d,$d,0b10010011);
+
+	&AVX512ROUND();
+	&vpshufd	($c,$c,0b01001110);
+	&vpshufd	($b,$b,0b10010011);
+	&vpshufd	($d,$d,0b00111001);
+
+	&dec		($counter);
+	&jnz		(".Loop_avx512");
+
+$code.=<<___;
+	vpaddd		$a_,$a,$a
+	vpaddd		$b_,$b,$b
+	vpaddd		$c_,$c,$c
+	vpaddd		$d_,$d,$d
+
+	sub		\$64,$len
+	jb		.Ltail64_avx512
+
+	vpxor		0x00($inp),%x#$a,$t0	# xor with input
+	vpxor		0x10($inp),%x#$b,$t1
+	vpxor		0x20($inp),%x#$c,$t2
+	vpxor		0x30($inp),%x#$d,$t3
+	lea		0x40($inp),$inp		# inp+=64
+
+	vmovdqu		$t0,0x00($out)		# write output
+	vmovdqu		$t1,0x10($out)
+	vmovdqu		$t2,0x20($out)
+	vmovdqu		$t3,0x30($out)
+	lea		0x40($out),$out		# out+=64
+
+	jz		.Ldone_avx512
+
+	vextracti32x4	\$1,$a,$t0
+	vextracti32x4	\$1,$b,$t1
+	vextracti32x4	\$1,$c,$t2
+	vextracti32x4	\$1,$d,$t3
+
+	sub		\$64,$len
+	jb		.Ltail_avx512
+
+	vpxor		0x00($inp),$t0,$t0	# xor with input
+	vpxor		0x10($inp),$t1,$t1
+	vpxor		0x20($inp),$t2,$t2
+	vpxor		0x30($inp),$t3,$t3
+	lea		0x40($inp),$inp		# inp+=64
+
+	vmovdqu		$t0,0x00($out)		# write output
+	vmovdqu		$t1,0x10($out)
+	vmovdqu		$t2,0x20($out)
+	vmovdqu		$t3,0x30($out)
+	lea		0x40($out),$out		# out+=64
+
+	jz		.Ldone_avx512
+
+	vextracti32x4	\$2,$a,$t0
+	vextracti32x4	\$2,$b,$t1
+	vextracti32x4	\$2,$c,$t2
+	vextracti32x4	\$2,$d,$t3
+
+	sub		\$64,$len
+	jb		.Ltail_avx512
+
+	vpxor		0x00($inp),$t0,$t0	# xor with input
+	vpxor		0x10($inp),$t1,$t1
+	vpxor		0x20($inp),$t2,$t2
+	vpxor		0x30($inp),$t3,$t3
+	lea		0x40($inp),$inp		# inp+=64
+
+	vmovdqu		$t0,0x00($out)		# write output
+	vmovdqu		$t1,0x10($out)
+	vmovdqu		$t2,0x20($out)
+	vmovdqu		$t3,0x30($out)
+	lea		0x40($out),$out		# out+=64
+
+	jz		.Ldone_avx512
+
+	vextracti32x4	\$3,$a,$t0
+	vextracti32x4	\$3,$b,$t1
+	vextracti32x4	\$3,$c,$t2
+	vextracti32x4	\$3,$d,$t3
+
+	sub		\$64,$len
+	jb		.Ltail_avx512
+
+	vpxor		0x00($inp),$t0,$t0	# xor with input
+	vpxor		0x10($inp),$t1,$t1
+	vpxor		0x20($inp),$t2,$t2
+	vpxor		0x30($inp),$t3,$t3
+	lea		0x40($inp),$inp		# inp+=64
+
+	vmovdqu		$t0,0x00($out)		# write output
+	vmovdqu		$t1,0x10($out)
+	vmovdqu		$t2,0x20($out)
+	vmovdqu		$t3,0x30($out)
+	lea		0x40($out),$out		# out+=64
+
+	jnz		.Loop_outer_avx512
+
+	jmp		.Ldone_avx512
+
+.align	16
+.Ltail64_avx512:
+	vmovdqa		%x#$a,0x00(%rsp)
+	vmovdqa		%x#$b,0x10(%rsp)
+	vmovdqa		%x#$c,0x20(%rsp)
+	vmovdqa		%x#$d,0x30(%rsp)
+	add		\$64,$len
+	jmp		.Loop_tail_avx512
+
+.align	16
+.Ltail_avx512:
+	vmovdqa		$t0,0x00(%rsp)
+	vmovdqa		$t1,0x10(%rsp)
+	vmovdqa		$t2,0x20(%rsp)
+	vmovdqa		$t3,0x30(%rsp)
+	add		\$64,$len
+
+.Loop_tail_avx512:
+	movzb		($inp,$counter),%eax
+	movzb		(%rsp,$counter),%ecx
+	lea		1($counter),$counter
+	xor		%ecx,%eax
+	mov		%al,-1($out,$counter)
+	dec		$len
+	jnz		.Loop_tail_avx512
+
+	vmovdqu32	$a_,0x00(%rsp)
+
+.Ldone_avx512:
+	vzeroall
+___
+$code.=<<___	if ($win64);
+	movaps	-0x28(%r9),%xmm6
+	movaps	-0x18(%r9),%xmm7
+___
+$code.=<<___;
+	lea	(%r9),%rsp
+.cfi_def_cfa_register	%rsp
+.Lavx512_epilogue:
+	ret
+.cfi_endproc
+.size	ChaCha20_avx512,.-ChaCha20_avx512
+___
+
+map(s/%z/%y/, $a,$b,$c,$d, $a_,$b_,$c_,$d_,$fourz);
+
+$code.=<<___;
+.type	ChaCha20_avx512vl,\@function,5
+.align	32
+ChaCha20_avx512vl:
+.cfi_startproc
+.LChaCha20_avx512vl:
+	mov	%rsp,%r9		# frame pointer
+.cfi_def_cfa_register	%r9
+	cmp	\$128,$len
+	ja	.LChaCha20_8xvl
+
+	sub	\$64+$xframe,%rsp
+___
+$code.=<<___	if ($win64);
+	movaps	%xmm6,-0x28(%r9)
+	movaps	%xmm7,-0x18(%r9)
+.Lavx512vl_body:
+___
+$code.=<<___;
+	vbroadcasti128	.Lsigma(%rip),$a
+	vbroadcasti128	($key),$b
+	vbroadcasti128	16($key),$c
+	vbroadcasti128	($counter),$d
+
+	vmovdqa32	$a,$a_
+	vmovdqa32	$b,$b_
+	vmovdqa32	$c,$c_
+	vpaddd		.Lzeroz(%rip),$d,$d
+	vmovdqa32	.Ltwoy(%rip),$fourz
+	mov		\$10,$counter	# reuse $counter
+	vmovdqa32	$d,$d_
+	jmp		.Loop_avx512vl
+
+.align	16
+.Loop_outer_avx512vl:
+	vmovdqa32	$c_,$c
+	vpaddd		$fourz,$d_,$d
+	mov		\$10,$counter
+	vmovdqa32	$d,$d_
+	jmp		.Loop_avx512vl
+
+.align	32
+.Loop_avx512vl:
+___
+	&AVX512ROUND();
+	&vpshufd	($c,$c,0b01001110);
+	&vpshufd	($b,$b,0b00111001);
+	&vpshufd	($d,$d,0b10010011);
+
+	&AVX512ROUND();
+	&vpshufd	($c,$c,0b01001110);
+	&vpshufd	($b,$b,0b10010011);
+	&vpshufd	($d,$d,0b00111001);
+
+	&dec		($counter);
+	&jnz		(".Loop_avx512vl");
+
+$code.=<<___;
+	vpaddd		$a_,$a,$a
+	vpaddd		$b_,$b,$b
+	vpaddd		$c_,$c,$c
+	vpaddd		$d_,$d,$d
+
+	sub		\$64,$len
+	jb		.Ltail64_avx512vl
+
+	vpxor		0x00($inp),%x#$a,$t0	# xor with input
+	vpxor		0x10($inp),%x#$b,$t1
+	vpxor		0x20($inp),%x#$c,$t2
+	vpxor		0x30($inp),%x#$d,$t3
+	lea		0x40($inp),$inp		# inp+=64
+
+	vmovdqu		$t0,0x00($out)		# write output
+	vmovdqu		$t1,0x10($out)
+	vmovdqu		$t2,0x20($out)
+	vmovdqu		$t3,0x30($out)
+	lea		0x40($out),$out		# out+=64
+
+	jz		.Ldone_avx512vl
+
+	vextracti128	\$1,$a,$t0
+	vextracti128	\$1,$b,$t1
+	vextracti128	\$1,$c,$t2
+	vextracti128	\$1,$d,$t3
+
+	sub		\$64,$len
+	jb		.Ltail_avx512vl
+
+	vpxor		0x00($inp),$t0,$t0	# xor with input
+	vpxor		0x10($inp),$t1,$t1
+	vpxor		0x20($inp),$t2,$t2
+	vpxor		0x30($inp),$t3,$t3
+	lea		0x40($inp),$inp		# inp+=64
+
+	vmovdqu		$t0,0x00($out)		# write output
+	vmovdqu		$t1,0x10($out)
+	vmovdqu		$t2,0x20($out)
+	vmovdqu		$t3,0x30($out)
+	lea		0x40($out),$out		# out+=64
+
+	vmovdqa32	$a_,$a
+	vmovdqa32	$b_,$b
+	jnz		.Loop_outer_avx512vl
+
+	jmp		.Ldone_avx512vl
+
+.align	16
+.Ltail64_avx512vl:
+	vmovdqa		%x#$a,0x00(%rsp)
+	vmovdqa		%x#$b,0x10(%rsp)
+	vmovdqa		%x#$c,0x20(%rsp)
+	vmovdqa		%x#$d,0x30(%rsp)
+	add		\$64,$len
+	jmp		.Loop_tail_avx512vl
+
+.align	16
+.Ltail_avx512vl:
+	vmovdqa		$t0,0x00(%rsp)
+	vmovdqa		$t1,0x10(%rsp)
+	vmovdqa		$t2,0x20(%rsp)
+	vmovdqa		$t3,0x30(%rsp)
+	add		\$64,$len
+
+.Loop_tail_avx512vl:
+	movzb		($inp,$counter),%eax
+	movzb		(%rsp,$counter),%ecx
+	lea		1($counter),$counter
+	xor		%ecx,%eax
+	mov		%al,-1($out,$counter)
+	dec		$len
+	jnz		.Loop_tail_avx512vl
+
+	vmovdqu32	$a_,0x00(%rsp)
+	vmovdqu32	$a_,0x20(%rsp)
+
+.Ldone_avx512vl:
+	vzeroall
+___
+$code.=<<___	if ($win64);
+	movaps	-0x28(%r9),%xmm6
+	movaps	-0x18(%r9),%xmm7
+___
+$code.=<<___;
+	lea	(%r9),%rsp
+.cfi_def_cfa_register	%rsp
+.Lavx512vl_epilogue:
+	ret
+.cfi_endproc
+.size	ChaCha20_avx512vl,.-ChaCha20_avx512vl
+___
+}
+if ($avx>2) {
+# This one handles longer inputs...
+
+my ($xa0,$xa1,$xa2,$xa3, $xb0,$xb1,$xb2,$xb3,
+    $xc0,$xc1,$xc2,$xc3, $xd0,$xd1,$xd2,$xd3)=map("%zmm$_",(0..15));
+my  @xx=($xa0,$xa1,$xa2,$xa3, $xb0,$xb1,$xb2,$xb3,
+	 $xc0,$xc1,$xc2,$xc3, $xd0,$xd1,$xd2,$xd3);
+my @key=map("%zmm$_",(16..31));
+my ($xt0,$xt1,$xt2,$xt3)=@key[0..3];
+
+sub AVX512_lane_ROUND {
+my ($a0,$b0,$c0,$d0)=@_;
+my ($a1,$b1,$c1,$d1)=map(($_&~3)+(($_+1)&3),($a0,$b0,$c0,$d0));
+my ($a2,$b2,$c2,$d2)=map(($_&~3)+(($_+1)&3),($a1,$b1,$c1,$d1));
+my ($a3,$b3,$c3,$d3)=map(($_&~3)+(($_+1)&3),($a2,$b2,$c2,$d2));
+my @x=map("\"$_\"",@xx);
+
+	(
+	"&vpaddd	(@x[$a0],@x[$a0],@x[$b0])",	# Q1
+	 "&vpaddd	(@x[$a1],@x[$a1],@x[$b1])",	# Q2
+	  "&vpaddd	(@x[$a2],@x[$a2],@x[$b2])",	# Q3
+	   "&vpaddd	(@x[$a3],@x[$a3],@x[$b3])",	# Q4
+	"&vpxord	(@x[$d0],@x[$d0],@x[$a0])",
+	 "&vpxord	(@x[$d1],@x[$d1],@x[$a1])",
+	  "&vpxord	(@x[$d2],@x[$d2],@x[$a2])",
+	   "&vpxord	(@x[$d3],@x[$d3],@x[$a3])",
+	"&vprold	(@x[$d0],@x[$d0],16)",
+	 "&vprold	(@x[$d1],@x[$d1],16)",
+	  "&vprold	(@x[$d2],@x[$d2],16)",
+	   "&vprold	(@x[$d3],@x[$d3],16)",
+
+	"&vpaddd	(@x[$c0],@x[$c0],@x[$d0])",
+	 "&vpaddd	(@x[$c1],@x[$c1],@x[$d1])",
+	  "&vpaddd	(@x[$c2],@x[$c2],@x[$d2])",
+	   "&vpaddd	(@x[$c3],@x[$c3],@x[$d3])",
+	"&vpxord	(@x[$b0],@x[$b0],@x[$c0])",
+	 "&vpxord	(@x[$b1],@x[$b1],@x[$c1])",
+	  "&vpxord	(@x[$b2],@x[$b2],@x[$c2])",
+	   "&vpxord	(@x[$b3],@x[$b3],@x[$c3])",
+	"&vprold	(@x[$b0],@x[$b0],12)",
+	 "&vprold	(@x[$b1],@x[$b1],12)",
+	  "&vprold	(@x[$b2],@x[$b2],12)",
+	   "&vprold	(@x[$b3],@x[$b3],12)",
+
+	"&vpaddd	(@x[$a0],@x[$a0],@x[$b0])",
+	 "&vpaddd	(@x[$a1],@x[$a1],@x[$b1])",
+	  "&vpaddd	(@x[$a2],@x[$a2],@x[$b2])",
+	   "&vpaddd	(@x[$a3],@x[$a3],@x[$b3])",
+	"&vpxord	(@x[$d0],@x[$d0],@x[$a0])",
+	 "&vpxord	(@x[$d1],@x[$d1],@x[$a1])",
+	  "&vpxord	(@x[$d2],@x[$d2],@x[$a2])",
+	   "&vpxord	(@x[$d3],@x[$d3],@x[$a3])",
+	"&vprold	(@x[$d0],@x[$d0],8)",
+	 "&vprold	(@x[$d1],@x[$d1],8)",
+	  "&vprold	(@x[$d2],@x[$d2],8)",
+	   "&vprold	(@x[$d3],@x[$d3],8)",
+
+	"&vpaddd	(@x[$c0],@x[$c0],@x[$d0])",
+	 "&vpaddd	(@x[$c1],@x[$c1],@x[$d1])",
+	  "&vpaddd	(@x[$c2],@x[$c2],@x[$d2])",
+	   "&vpaddd	(@x[$c3],@x[$c3],@x[$d3])",
+	"&vpxord	(@x[$b0],@x[$b0],@x[$c0])",
+	 "&vpxord	(@x[$b1],@x[$b1],@x[$c1])",
+	  "&vpxord	(@x[$b2],@x[$b2],@x[$c2])",
+	   "&vpxord	(@x[$b3],@x[$b3],@x[$c3])",
+	"&vprold	(@x[$b0],@x[$b0],7)",
+	 "&vprold	(@x[$b1],@x[$b1],7)",
+	  "&vprold	(@x[$b2],@x[$b2],7)",
+	   "&vprold	(@x[$b3],@x[$b3],7)"
+	);
+}
+
+my $xframe = $win64 ? 0xa8 : 8;
+
+$code.=<<___;
+.type	ChaCha20_16x,\@function,5
+.align	32
+ChaCha20_16x:
+.cfi_startproc
+.LChaCha20_16x:
+	mov		%rsp,%r9		# frame register
+.cfi_def_cfa_register	%r9
+	sub		\$64+$xframe,%rsp
+	and		\$-64,%rsp
+___
+$code.=<<___	if ($win64);
+	movaps		%xmm6,-0xa8(%r9)
+	movaps		%xmm7,-0x98(%r9)
+	movaps		%xmm8,-0x88(%r9)
+	movaps		%xmm9,-0x78(%r9)
+	movaps		%xmm10,-0x68(%r9)
+	movaps		%xmm11,-0x58(%r9)
+	movaps		%xmm12,-0x48(%r9)
+	movaps		%xmm13,-0x38(%r9)
+	movaps		%xmm14,-0x28(%r9)
+	movaps		%xmm15,-0x18(%r9)
+.L16x_body:
+___
+$code.=<<___;
+	vzeroupper
+
+	lea		.Lsigma(%rip),%r10
+	vbroadcasti32x4	(%r10),$xa3		# key[0]
+	vbroadcasti32x4	($key),$xb3		# key[1]
+	vbroadcasti32x4	16($key),$xc3		# key[2]
+	vbroadcasti32x4	($counter),$xd3		# key[3]
+
+	vpshufd		\$0x00,$xa3,$xa0	# smash key by lanes...
+	vpshufd		\$0x55,$xa3,$xa1
+	vpshufd		\$0xaa,$xa3,$xa2
+	vpshufd		\$0xff,$xa3,$xa3
+	vmovdqa64	$xa0,@key[0]
+	vmovdqa64	$xa1,@key[1]
+	vmovdqa64	$xa2,@key[2]
+	vmovdqa64	$xa3,@key[3]
+
+	vpshufd		\$0x00,$xb3,$xb0
+	vpshufd		\$0x55,$xb3,$xb1
+	vpshufd		\$0xaa,$xb3,$xb2
+	vpshufd		\$0xff,$xb3,$xb3
+	vmovdqa64	$xb0,@key[4]
+	vmovdqa64	$xb1,@key[5]
+	vmovdqa64	$xb2,@key[6]
+	vmovdqa64	$xb3,@key[7]
+
+	vpshufd		\$0x00,$xc3,$xc0
+	vpshufd		\$0x55,$xc3,$xc1
+	vpshufd		\$0xaa,$xc3,$xc2
+	vpshufd		\$0xff,$xc3,$xc3
+	vmovdqa64	$xc0,@key[8]
+	vmovdqa64	$xc1,@key[9]
+	vmovdqa64	$xc2,@key[10]
+	vmovdqa64	$xc3,@key[11]
+
+	vpshufd		\$0x00,$xd3,$xd0
+	vpshufd		\$0x55,$xd3,$xd1
+	vpshufd		\$0xaa,$xd3,$xd2
+	vpshufd		\$0xff,$xd3,$xd3
+	vpaddd		.Lincz(%rip),$xd0,$xd0	# don't save counters yet
+	vmovdqa64	$xd0,@key[12]
+	vmovdqa64	$xd1,@key[13]
+	vmovdqa64	$xd2,@key[14]
+	vmovdqa64	$xd3,@key[15]
+
+	mov		\$10,%eax
+	jmp		.Loop16x
+
+.align	32
+.Loop_outer16x:
+	vpbroadcastd	0(%r10),$xa0		# reload key
+	vpbroadcastd	4(%r10),$xa1
+	vpbroadcastd	8(%r10),$xa2
+	vpbroadcastd	12(%r10),$xa3
+	vpaddd		.Lsixteen(%rip),@key[12],@key[12]	# next SIMD counters
+	vmovdqa64	@key[4],$xb0
+	vmovdqa64	@key[5],$xb1
+	vmovdqa64	@key[6],$xb2
+	vmovdqa64	@key[7],$xb3
+	vmovdqa64	@key[8],$xc0
+	vmovdqa64	@key[9],$xc1
+	vmovdqa64	@key[10],$xc2
+	vmovdqa64	@key[11],$xc3
+	vmovdqa64	@key[12],$xd0
+	vmovdqa64	@key[13],$xd1
+	vmovdqa64	@key[14],$xd2
+	vmovdqa64	@key[15],$xd3
+
+	vmovdqa64	$xa0,@key[0]
+	vmovdqa64	$xa1,@key[1]
+	vmovdqa64	$xa2,@key[2]
+	vmovdqa64	$xa3,@key[3]
+
+	mov		\$10,%eax
+	jmp		.Loop16x
+
+.align	32
+.Loop16x:
+___
+	foreach (&AVX512_lane_ROUND(0, 4, 8,12)) { eval; }
+	foreach (&AVX512_lane_ROUND(0, 5,10,15)) { eval; }
+$code.=<<___;
+	dec		%eax
+	jnz		.Loop16x
+
+	vpaddd		@key[0],$xa0,$xa0	# accumulate key
+	vpaddd		@key[1],$xa1,$xa1
+	vpaddd		@key[2],$xa2,$xa2
+	vpaddd		@key[3],$xa3,$xa3
+
+	vpunpckldq	$xa1,$xa0,$xt2		# "de-interlace" data
+	vpunpckldq	$xa3,$xa2,$xt3
+	vpunpckhdq	$xa1,$xa0,$xa0
+	vpunpckhdq	$xa3,$xa2,$xa2
+	vpunpcklqdq	$xt3,$xt2,$xa1		# "a0"
+	vpunpckhqdq	$xt3,$xt2,$xt2		# "a1"
+	vpunpcklqdq	$xa2,$xa0,$xa3		# "a2"
+	vpunpckhqdq	$xa2,$xa0,$xa0		# "a3"
+___
+	($xa0,$xa1,$xa2,$xa3,$xt2)=($xa1,$xt2,$xa3,$xa0,$xa2);
+$code.=<<___;
+	vpaddd		@key[4],$xb0,$xb0
+	vpaddd		@key[5],$xb1,$xb1
+	vpaddd		@key[6],$xb2,$xb2
+	vpaddd		@key[7],$xb3,$xb3
+
+	vpunpckldq	$xb1,$xb0,$xt2
+	vpunpckldq	$xb3,$xb2,$xt3
+	vpunpckhdq	$xb1,$xb0,$xb0
+	vpunpckhdq	$xb3,$xb2,$xb2
+	vpunpcklqdq	$xt3,$xt2,$xb1		# "b0"
+	vpunpckhqdq	$xt3,$xt2,$xt2		# "b1"
+	vpunpcklqdq	$xb2,$xb0,$xb3		# "b2"
+	vpunpckhqdq	$xb2,$xb0,$xb0		# "b3"
+___
+	($xb0,$xb1,$xb2,$xb3,$xt2)=($xb1,$xt2,$xb3,$xb0,$xb2);
+$code.=<<___;
+	vshufi32x4	\$0x44,$xb0,$xa0,$xt3	# "de-interlace" further
+	vshufi32x4	\$0xee,$xb0,$xa0,$xb0
+	vshufi32x4	\$0x44,$xb1,$xa1,$xa0
+	vshufi32x4	\$0xee,$xb1,$xa1,$xb1
+	vshufi32x4	\$0x44,$xb2,$xa2,$xa1
+	vshufi32x4	\$0xee,$xb2,$xa2,$xb2
+	vshufi32x4	\$0x44,$xb3,$xa3,$xa2
+	vshufi32x4	\$0xee,$xb3,$xa3,$xb3
+___
+	($xa0,$xa1,$xa2,$xa3,$xt3)=($xt3,$xa0,$xa1,$xa2,$xa3);
+$code.=<<___;
+	vpaddd		@key[8],$xc0,$xc0
+	vpaddd		@key[9],$xc1,$xc1
+	vpaddd		@key[10],$xc2,$xc2
+	vpaddd		@key[11],$xc3,$xc3
+
+	vpunpckldq	$xc1,$xc0,$xt2
+	vpunpckldq	$xc3,$xc2,$xt3
+	vpunpckhdq	$xc1,$xc0,$xc0
+	vpunpckhdq	$xc3,$xc2,$xc2
+	vpunpcklqdq	$xt3,$xt2,$xc1		# "c0"
+	vpunpckhqdq	$xt3,$xt2,$xt2		# "c1"
+	vpunpcklqdq	$xc2,$xc0,$xc3		# "c2"
+	vpunpckhqdq	$xc2,$xc0,$xc0		# "c3"
+___
+	($xc0,$xc1,$xc2,$xc3,$xt2)=($xc1,$xt2,$xc3,$xc0,$xc2);
+$code.=<<___;
+	vpaddd		@key[12],$xd0,$xd0
+	vpaddd		@key[13],$xd1,$xd1
+	vpaddd		@key[14],$xd2,$xd2
+	vpaddd		@key[15],$xd3,$xd3
+
+	vpunpckldq	$xd1,$xd0,$xt2
+	vpunpckldq	$xd3,$xd2,$xt3
+	vpunpckhdq	$xd1,$xd0,$xd0
+	vpunpckhdq	$xd3,$xd2,$xd2
+	vpunpcklqdq	$xt3,$xt2,$xd1		# "d0"
+	vpunpckhqdq	$xt3,$xt2,$xt2		# "d1"
+	vpunpcklqdq	$xd2,$xd0,$xd3		# "d2"
+	vpunpckhqdq	$xd2,$xd0,$xd0		# "d3"
+___
+	($xd0,$xd1,$xd2,$xd3,$xt2)=($xd1,$xt2,$xd3,$xd0,$xd2);
+$code.=<<___;
+	vshufi32x4	\$0x44,$xd0,$xc0,$xt3	# "de-interlace" further
+	vshufi32x4	\$0xee,$xd0,$xc0,$xd0
+	vshufi32x4	\$0x44,$xd1,$xc1,$xc0
+	vshufi32x4	\$0xee,$xd1,$xc1,$xd1
+	vshufi32x4	\$0x44,$xd2,$xc2,$xc1
+	vshufi32x4	\$0xee,$xd2,$xc2,$xd2
+	vshufi32x4	\$0x44,$xd3,$xc3,$xc2
+	vshufi32x4	\$0xee,$xd3,$xc3,$xd3
+___
+	($xc0,$xc1,$xc2,$xc3,$xt3)=($xt3,$xc0,$xc1,$xc2,$xc3);
+$code.=<<___;
+	vshufi32x4	\$0x88,$xc0,$xa0,$xt0	# "de-interlace" further
+	vshufi32x4	\$0xdd,$xc0,$xa0,$xa0
+	 vshufi32x4	\$0x88,$xd0,$xb0,$xc0
+	 vshufi32x4	\$0xdd,$xd0,$xb0,$xd0
+	vshufi32x4	\$0x88,$xc1,$xa1,$xt1
+	vshufi32x4	\$0xdd,$xc1,$xa1,$xa1
+	 vshufi32x4	\$0x88,$xd1,$xb1,$xc1
+	 vshufi32x4	\$0xdd,$xd1,$xb1,$xd1
+	vshufi32x4	\$0x88,$xc2,$xa2,$xt2
+	vshufi32x4	\$0xdd,$xc2,$xa2,$xa2
+	 vshufi32x4	\$0x88,$xd2,$xb2,$xc2
+	 vshufi32x4	\$0xdd,$xd2,$xb2,$xd2
+	vshufi32x4	\$0x88,$xc3,$xa3,$xt3
+	vshufi32x4	\$0xdd,$xc3,$xa3,$xa3
+	 vshufi32x4	\$0x88,$xd3,$xb3,$xc3
+	 vshufi32x4	\$0xdd,$xd3,$xb3,$xd3
+___
+	($xa0,$xa1,$xa2,$xa3,$xb0,$xb1,$xb2,$xb3)=
+	($xt0,$xt1,$xt2,$xt3,$xa0,$xa1,$xa2,$xa3);
+
+	($xa0,$xb0,$xc0,$xd0, $xa1,$xb1,$xc1,$xd1,
+	 $xa2,$xb2,$xc2,$xd2, $xa3,$xb3,$xc3,$xd3) =
+	($xa0,$xa1,$xa2,$xa3, $xb0,$xb1,$xb2,$xb3,
+	 $xc0,$xc1,$xc2,$xc3, $xd0,$xd1,$xd2,$xd3);
+$code.=<<___;
+	cmp		\$64*16,$len
+	jb		.Ltail16x
+
+	vpxord		0x00($inp),$xa0,$xa0	# xor with input
+	vpxord		0x40($inp),$xb0,$xb0
+	vpxord		0x80($inp),$xc0,$xc0
+	vpxord		0xc0($inp),$xd0,$xd0
+	vmovdqu32	$xa0,0x00($out)
+	vmovdqu32	$xb0,0x40($out)
+	vmovdqu32	$xc0,0x80($out)
+	vmovdqu32	$xd0,0xc0($out)
+
+	vpxord		0x100($inp),$xa1,$xa1
+	vpxord		0x140($inp),$xb1,$xb1
+	vpxord		0x180($inp),$xc1,$xc1
+	vpxord		0x1c0($inp),$xd1,$xd1
+	vmovdqu32	$xa1,0x100($out)
+	vmovdqu32	$xb1,0x140($out)
+	vmovdqu32	$xc1,0x180($out)
+	vmovdqu32	$xd1,0x1c0($out)
+
+	vpxord		0x200($inp),$xa2,$xa2
+	vpxord		0x240($inp),$xb2,$xb2
+	vpxord		0x280($inp),$xc2,$xc2
+	vpxord		0x2c0($inp),$xd2,$xd2
+	vmovdqu32	$xa2,0x200($out)
+	vmovdqu32	$xb2,0x240($out)
+	vmovdqu32	$xc2,0x280($out)
+	vmovdqu32	$xd2,0x2c0($out)
+
+	vpxord		0x300($inp),$xa3,$xa3
+	vpxord		0x340($inp),$xb3,$xb3
+	vpxord		0x380($inp),$xc3,$xc3
+	vpxord		0x3c0($inp),$xd3,$xd3
+	lea		0x400($inp),$inp
+	vmovdqu32	$xa3,0x300($out)
+	vmovdqu32	$xb3,0x340($out)
+	vmovdqu32	$xc3,0x380($out)
+	vmovdqu32	$xd3,0x3c0($out)
+	lea		0x400($out),$out
+
+	sub		\$64*16,$len
+	jnz		.Loop_outer16x
+
+	jmp		.Ldone16x
+
+.align	32
+.Ltail16x:
+	xor		%r10,%r10
+	sub		$inp,$out
+	cmp		\$64*1,$len
+	jb		.Less_than_64_16x
+	vpxord		($inp),$xa0,$xa0	# xor with input
+	vmovdqu32	$xa0,($out,$inp)
+	je		.Ldone16x
+	vmovdqa32	$xb0,$xa0
+	lea		64($inp),$inp
+
+	cmp		\$64*2,$len
+	jb		.Less_than_64_16x
+	vpxord		($inp),$xb0,$xb0
+	vmovdqu32	$xb0,($out,$inp)
+	je		.Ldone16x
+	vmovdqa32	$xc0,$xa0
+	lea		64($inp),$inp
+
+	cmp		\$64*3,$len
+	jb		.Less_than_64_16x
+	vpxord		($inp),$xc0,$xc0
+	vmovdqu32	$xc0,($out,$inp)
+	je		.Ldone16x
+	vmovdqa32	$xd0,$xa0
+	lea		64($inp),$inp
+
+	cmp		\$64*4,$len
+	jb		.Less_than_64_16x
+	vpxord		($inp),$xd0,$xd0
+	vmovdqu32	$xd0,($out,$inp)
+	je		.Ldone16x
+	vmovdqa32	$xa1,$xa0
+	lea		64($inp),$inp
+
+	cmp		\$64*5,$len
+	jb		.Less_than_64_16x
+	vpxord		($inp),$xa1,$xa1
+	vmovdqu32	$xa1,($out,$inp)
+	je		.Ldone16x
+	vmovdqa32	$xb1,$xa0
+	lea		64($inp),$inp
+
+	cmp		\$64*6,$len
+	jb		.Less_than_64_16x
+	vpxord		($inp),$xb1,$xb1
+	vmovdqu32	$xb1,($out,$inp)
+	je		.Ldone16x
+	vmovdqa32	$xc1,$xa0
+	lea		64($inp),$inp
+
+	cmp		\$64*7,$len
+	jb		.Less_than_64_16x
+	vpxord		($inp),$xc1,$xc1
+	vmovdqu32	$xc1,($out,$inp)
+	je		.Ldone16x
+	vmovdqa32	$xd1,$xa0
+	lea		64($inp),$inp
+
+	cmp		\$64*8,$len
+	jb		.Less_than_64_16x
+	vpxord		($inp),$xd1,$xd1
+	vmovdqu32	$xd1,($out,$inp)
+	je		.Ldone16x
+	vmovdqa32	$xa2,$xa0
+	lea		64($inp),$inp
+
+	cmp		\$64*9,$len
+	jb		.Less_than_64_16x
+	vpxord		($inp),$xa2,$xa2
+	vmovdqu32	$xa2,($out,$inp)
+	je		.Ldone16x
+	vmovdqa32	$xb2,$xa0
+	lea		64($inp),$inp
+
+	cmp		\$64*10,$len
+	jb		.Less_than_64_16x
+	vpxord		($inp),$xb2,$xb2
+	vmovdqu32	$xb2,($out,$inp)
+	je		.Ldone16x
+	vmovdqa32	$xc2,$xa0
+	lea		64($inp),$inp
+
+	cmp		\$64*11,$len
+	jb		.Less_than_64_16x
+	vpxord		($inp),$xc2,$xc2
+	vmovdqu32	$xc2,($out,$inp)
+	je		.Ldone16x
+	vmovdqa32	$xd2,$xa0
+	lea		64($inp),$inp
+
+	cmp		\$64*12,$len
+	jb		.Less_than_64_16x
+	vpxord		($inp),$xd2,$xd2
+	vmovdqu32	$xd2,($out,$inp)
+	je		.Ldone16x
+	vmovdqa32	$xa3,$xa0
+	lea		64($inp),$inp
+
+	cmp		\$64*13,$len
+	jb		.Less_than_64_16x
+	vpxord		($inp),$xa3,$xa3
+	vmovdqu32	$xa3,($out,$inp)
+	je		.Ldone16x
+	vmovdqa32	$xb3,$xa0
+	lea		64($inp),$inp
+
+	cmp		\$64*14,$len
+	jb		.Less_than_64_16x
+	vpxord		($inp),$xb3,$xb3
+	vmovdqu32	$xb3,($out,$inp)
+	je		.Ldone16x
+	vmovdqa32	$xc3,$xa0
+	lea		64($inp),$inp
+
+	cmp		\$64*15,$len
+	jb		.Less_than_64_16x
+	vpxord		($inp),$xc3,$xc3
+	vmovdqu32	$xc3,($out,$inp)
+	je		.Ldone16x
+	vmovdqa32	$xd3,$xa0
+	lea		64($inp),$inp
+
+.Less_than_64_16x:
+	vmovdqa32	$xa0,0x00(%rsp)
+	lea		($out,$inp),$out
+	and		\$63,$len
+
+.Loop_tail16x:
+	movzb		($inp,%r10),%eax
+	movzb		(%rsp,%r10),%ecx
+	lea		1(%r10),%r10
+	xor		%ecx,%eax
+	mov		%al,-1($out,%r10)
+	dec		$len
+	jnz		.Loop_tail16x
+
+	vpxord		$xa0,$xa0,$xa0
+	vmovdqa32	$xa0,0(%rsp)
+
+.Ldone16x:
+	vzeroall
+___
+$code.=<<___	if ($win64);
+	movaps		-0xa8(%r9),%xmm6
+	movaps		-0x98(%r9),%xmm7
+	movaps		-0x88(%r9),%xmm8
+	movaps		-0x78(%r9),%xmm9
+	movaps		-0x68(%r9),%xmm10
+	movaps		-0x58(%r9),%xmm11
+	movaps		-0x48(%r9),%xmm12
+	movaps		-0x38(%r9),%xmm13
+	movaps		-0x28(%r9),%xmm14
+	movaps		-0x18(%r9),%xmm15
+___
+$code.=<<___;
+	lea		(%r9),%rsp
+.cfi_def_cfa_register	%rsp
+.L16x_epilogue:
+	ret
+.cfi_endproc
+.size	ChaCha20_16x,.-ChaCha20_16x
+___
+
+# switch to %ymm domain
+($xa0,$xa1,$xa2,$xa3, $xb0,$xb1,$xb2,$xb3,
+ $xc0,$xc1,$xc2,$xc3, $xd0,$xd1,$xd2,$xd3)=map("%ymm$_",(0..15));
+@xx=($xa0,$xa1,$xa2,$xa3, $xb0,$xb1,$xb2,$xb3,
+     $xc0,$xc1,$xc2,$xc3, $xd0,$xd1,$xd2,$xd3);
+@key=map("%ymm$_",(16..31));
+($xt0,$xt1,$xt2,$xt3)=@key[0..3];
+
+$code.=<<___;
+.type	ChaCha20_8xvl,\@function,5
+.align	32
+ChaCha20_8xvl:
+.cfi_startproc
+.LChaCha20_8xvl:
+	mov		%rsp,%r9		# frame register
+.cfi_def_cfa_register	%r9
+	sub		\$64+$xframe,%rsp
+	and		\$-64,%rsp
+___
+$code.=<<___	if ($win64);
+	movaps		%xmm6,-0xa8(%r9)
+	movaps		%xmm7,-0x98(%r9)
+	movaps		%xmm8,-0x88(%r9)
+	movaps		%xmm9,-0x78(%r9)
+	movaps		%xmm10,-0x68(%r9)
+	movaps		%xmm11,-0x58(%r9)
+	movaps		%xmm12,-0x48(%r9)
+	movaps		%xmm13,-0x38(%r9)
+	movaps		%xmm14,-0x28(%r9)
+	movaps		%xmm15,-0x18(%r9)
+.L8xvl_body:
+___
+$code.=<<___;
+	vzeroupper
+
+	lea		.Lsigma(%rip),%r10
+	vbroadcasti128	(%r10),$xa3		# key[0]
+	vbroadcasti128	($key),$xb3		# key[1]
+	vbroadcasti128	16($key),$xc3		# key[2]
+	vbroadcasti128	($counter),$xd3		# key[3]
+
+	vpshufd		\$0x00,$xa3,$xa0	# smash key by lanes...
+	vpshufd		\$0x55,$xa3,$xa1
+	vpshufd		\$0xaa,$xa3,$xa2
+	vpshufd		\$0xff,$xa3,$xa3
+	vmovdqa64	$xa0,@key[0]
+	vmovdqa64	$xa1,@key[1]
+	vmovdqa64	$xa2,@key[2]
+	vmovdqa64	$xa3,@key[3]
+
+	vpshufd		\$0x00,$xb3,$xb0
+	vpshufd		\$0x55,$xb3,$xb1
+	vpshufd		\$0xaa,$xb3,$xb2
+	vpshufd		\$0xff,$xb3,$xb3
+	vmovdqa64	$xb0,@key[4]
+	vmovdqa64	$xb1,@key[5]
+	vmovdqa64	$xb2,@key[6]
+	vmovdqa64	$xb3,@key[7]
+
+	vpshufd		\$0x00,$xc3,$xc0
+	vpshufd		\$0x55,$xc3,$xc1
+	vpshufd		\$0xaa,$xc3,$xc2
+	vpshufd		\$0xff,$xc3,$xc3
+	vmovdqa64	$xc0,@key[8]
+	vmovdqa64	$xc1,@key[9]
+	vmovdqa64	$xc2,@key[10]
+	vmovdqa64	$xc3,@key[11]
+
+	vpshufd		\$0x00,$xd3,$xd0
+	vpshufd		\$0x55,$xd3,$xd1
+	vpshufd		\$0xaa,$xd3,$xd2
+	vpshufd		\$0xff,$xd3,$xd3
+	vpaddd		.Lincy(%rip),$xd0,$xd0	# don't save counters yet
+	vmovdqa64	$xd0,@key[12]
+	vmovdqa64	$xd1,@key[13]
+	vmovdqa64	$xd2,@key[14]
+	vmovdqa64	$xd3,@key[15]
+
+	mov		\$10,%eax
+	jmp		.Loop8xvl
+
+.align	32
+.Loop_outer8xvl:
+	#vpbroadcastd	0(%r10),$xa0		# reload key
+	#vpbroadcastd	4(%r10),$xa1
+	vpbroadcastd	8(%r10),$xa2
+	vpbroadcastd	12(%r10),$xa3
+	vpaddd		.Leight(%rip),@key[12],@key[12]	# next SIMD counters
+	vmovdqa64	@key[4],$xb0
+	vmovdqa64	@key[5],$xb1
+	vmovdqa64	@key[6],$xb2
+	vmovdqa64	@key[7],$xb3
+	vmovdqa64	@key[8],$xc0
+	vmovdqa64	@key[9],$xc1
+	vmovdqa64	@key[10],$xc2
+	vmovdqa64	@key[11],$xc3
+	vmovdqa64	@key[12],$xd0
+	vmovdqa64	@key[13],$xd1
+	vmovdqa64	@key[14],$xd2
+	vmovdqa64	@key[15],$xd3
+
+	vmovdqa64	$xa0,@key[0]
+	vmovdqa64	$xa1,@key[1]
+	vmovdqa64	$xa2,@key[2]
+	vmovdqa64	$xa3,@key[3]
+
+	mov		\$10,%eax
+	jmp		.Loop8xvl
+
+.align	32
+.Loop8xvl:
+___
+	foreach (&AVX512_lane_ROUND(0, 4, 8,12)) { eval; }
+	foreach (&AVX512_lane_ROUND(0, 5,10,15)) { eval; }
+$code.=<<___;
+	dec		%eax
+	jnz		.Loop8xvl
+
+	vpaddd		@key[0],$xa0,$xa0	# accumulate key
+	vpaddd		@key[1],$xa1,$xa1
+	vpaddd		@key[2],$xa2,$xa2
+	vpaddd		@key[3],$xa3,$xa3
+
+	vpunpckldq	$xa1,$xa0,$xt2		# "de-interlace" data
+	vpunpckldq	$xa3,$xa2,$xt3
+	vpunpckhdq	$xa1,$xa0,$xa0
+	vpunpckhdq	$xa3,$xa2,$xa2
+	vpunpcklqdq	$xt3,$xt2,$xa1		# "a0"
+	vpunpckhqdq	$xt3,$xt2,$xt2		# "a1"
+	vpunpcklqdq	$xa2,$xa0,$xa3		# "a2"
+	vpunpckhqdq	$xa2,$xa0,$xa0		# "a3"
+___
+	($xa0,$xa1,$xa2,$xa3,$xt2)=($xa1,$xt2,$xa3,$xa0,$xa2);
+$code.=<<___;
+	vpaddd		@key[4],$xb0,$xb0
+	vpaddd		@key[5],$xb1,$xb1
+	vpaddd		@key[6],$xb2,$xb2
+	vpaddd		@key[7],$xb3,$xb3
+
+	vpunpckldq	$xb1,$xb0,$xt2
+	vpunpckldq	$xb3,$xb2,$xt3
+	vpunpckhdq	$xb1,$xb0,$xb0
+	vpunpckhdq	$xb3,$xb2,$xb2
+	vpunpcklqdq	$xt3,$xt2,$xb1		# "b0"
+	vpunpckhqdq	$xt3,$xt2,$xt2		# "b1"
+	vpunpcklqdq	$xb2,$xb0,$xb3		# "b2"
+	vpunpckhqdq	$xb2,$xb0,$xb0		# "b3"
+___
+	($xb0,$xb1,$xb2,$xb3,$xt2)=($xb1,$xt2,$xb3,$xb0,$xb2);
+$code.=<<___;
+	vshufi32x4	\$0,$xb0,$xa0,$xt3	# "de-interlace" further
+	vshufi32x4	\$3,$xb0,$xa0,$xb0
+	vshufi32x4	\$0,$xb1,$xa1,$xa0
+	vshufi32x4	\$3,$xb1,$xa1,$xb1
+	vshufi32x4	\$0,$xb2,$xa2,$xa1
+	vshufi32x4	\$3,$xb2,$xa2,$xb2
+	vshufi32x4	\$0,$xb3,$xa3,$xa2
+	vshufi32x4	\$3,$xb3,$xa3,$xb3
+___
+	($xa0,$xa1,$xa2,$xa3,$xt3)=($xt3,$xa0,$xa1,$xa2,$xa3);
+$code.=<<___;
+	vpaddd		@key[8],$xc0,$xc0
+	vpaddd		@key[9],$xc1,$xc1
+	vpaddd		@key[10],$xc2,$xc2
+	vpaddd		@key[11],$xc3,$xc3
+
+	vpunpckldq	$xc1,$xc0,$xt2
+	vpunpckldq	$xc3,$xc2,$xt3
+	vpunpckhdq	$xc1,$xc0,$xc0
+	vpunpckhdq	$xc3,$xc2,$xc2
+	vpunpcklqdq	$xt3,$xt2,$xc1		# "c0"
+	vpunpckhqdq	$xt3,$xt2,$xt2		# "c1"
+	vpunpcklqdq	$xc2,$xc0,$xc3		# "c2"
+	vpunpckhqdq	$xc2,$xc0,$xc0		# "c3"
+___
+	($xc0,$xc1,$xc2,$xc3,$xt2)=($xc1,$xt2,$xc3,$xc0,$xc2);
+$code.=<<___;
+	vpaddd		@key[12],$xd0,$xd0
+	vpaddd		@key[13],$xd1,$xd1
+	vpaddd		@key[14],$xd2,$xd2
+	vpaddd		@key[15],$xd3,$xd3
+
+	vpunpckldq	$xd1,$xd0,$xt2
+	vpunpckldq	$xd3,$xd2,$xt3
+	vpunpckhdq	$xd1,$xd0,$xd0
+	vpunpckhdq	$xd3,$xd2,$xd2
+	vpunpcklqdq	$xt3,$xt2,$xd1		# "d0"
+	vpunpckhqdq	$xt3,$xt2,$xt2		# "d1"
+	vpunpcklqdq	$xd2,$xd0,$xd3		# "d2"
+	vpunpckhqdq	$xd2,$xd0,$xd0		# "d3"
+___
+	($xd0,$xd1,$xd2,$xd3,$xt2)=($xd1,$xt2,$xd3,$xd0,$xd2);
+$code.=<<___;
+	vperm2i128	\$0x20,$xd0,$xc0,$xt3	# "de-interlace" further
+	vperm2i128	\$0x31,$xd0,$xc0,$xd0
+	vperm2i128	\$0x20,$xd1,$xc1,$xc0
+	vperm2i128	\$0x31,$xd1,$xc1,$xd1
+	vperm2i128	\$0x20,$xd2,$xc2,$xc1
+	vperm2i128	\$0x31,$xd2,$xc2,$xd2
+	vperm2i128	\$0x20,$xd3,$xc3,$xc2
+	vperm2i128	\$0x31,$xd3,$xc3,$xd3
+___
+	($xc0,$xc1,$xc2,$xc3,$xt3)=($xt3,$xc0,$xc1,$xc2,$xc3);
+	($xb0,$xb1,$xb2,$xb3,$xc0,$xc1,$xc2,$xc3)=
+	($xc0,$xc1,$xc2,$xc3,$xb0,$xb1,$xb2,$xb3);
+$code.=<<___;
+	cmp		\$64*8,$len
+	jb		.Ltail8xvl
+
+	mov		\$0x80,%eax		# size optimization
+	vpxord		0x00($inp),$xa0,$xa0	# xor with input
+	vpxor		0x20($inp),$xb0,$xb0
+	vpxor		0x40($inp),$xc0,$xc0
+	vpxor		0x60($inp),$xd0,$xd0
+	lea		($inp,%rax),$inp	# size optimization
+	vmovdqu32	$xa0,0x00($out)
+	vmovdqu		$xb0,0x20($out)
+	vmovdqu		$xc0,0x40($out)
+	vmovdqu		$xd0,0x60($out)
+	lea		($out,%rax),$out	# size optimization
+
+	vpxor		0x00($inp),$xa1,$xa1
+	vpxor		0x20($inp),$xb1,$xb1
+	vpxor		0x40($inp),$xc1,$xc1
+	vpxor		0x60($inp),$xd1,$xd1
+	lea		($inp,%rax),$inp	# size optimization
+	vmovdqu		$xa1,0x00($out)
+	vmovdqu		$xb1,0x20($out)
+	vmovdqu		$xc1,0x40($out)
+	vmovdqu		$xd1,0x60($out)
+	lea		($out,%rax),$out	# size optimization
+
+	vpxord		0x00($inp),$xa2,$xa2
+	vpxor		0x20($inp),$xb2,$xb2
+	vpxor		0x40($inp),$xc2,$xc2
+	vpxor		0x60($inp),$xd2,$xd2
+	lea		($inp,%rax),$inp	# size optimization
+	vmovdqu32	$xa2,0x00($out)
+	vmovdqu		$xb2,0x20($out)
+	vmovdqu		$xc2,0x40($out)
+	vmovdqu		$xd2,0x60($out)
+	lea		($out,%rax),$out	# size optimization
+
+	vpxor		0x00($inp),$xa3,$xa3
+	vpxor		0x20($inp),$xb3,$xb3
+	vpxor		0x40($inp),$xc3,$xc3
+	vpxor		0x60($inp),$xd3,$xd3
+	lea		($inp,%rax),$inp	# size optimization
+	vmovdqu		$xa3,0x00($out)
+	vmovdqu		$xb3,0x20($out)
+	vmovdqu		$xc3,0x40($out)
+	vmovdqu		$xd3,0x60($out)
+	lea		($out,%rax),$out	# size optimization
+
+	vpbroadcastd	0(%r10),%ymm0		# reload key
+	vpbroadcastd	4(%r10),%ymm1
+
+	sub		\$64*8,$len
+	jnz		.Loop_outer8xvl
+
+	jmp		.Ldone8xvl
+
+.align	32
+.Ltail8xvl:
+	vmovdqa64	$xa0,%ymm8		# size optimization
+___
+$xa0 = "%ymm8";
+$code.=<<___;
+	xor		%r10,%r10
+	sub		$inp,$out
+	cmp		\$64*1,$len
+	jb		.Less_than_64_8xvl
+	vpxor		0x00($inp),$xa0,$xa0	# xor with input
+	vpxor		0x20($inp),$xb0,$xb0
+	vmovdqu		$xa0,0x00($out,$inp)
+	vmovdqu		$xb0,0x20($out,$inp)
+	je		.Ldone8xvl
+	vmovdqa		$xc0,$xa0
+	vmovdqa		$xd0,$xb0
+	lea		64($inp),$inp
+
+	cmp		\$64*2,$len
+	jb		.Less_than_64_8xvl
+	vpxor		0x00($inp),$xc0,$xc0
+	vpxor		0x20($inp),$xd0,$xd0
+	vmovdqu		$xc0,0x00($out,$inp)
+	vmovdqu		$xd0,0x20($out,$inp)
+	je		.Ldone8xvl
+	vmovdqa		$xa1,$xa0
+	vmovdqa		$xb1,$xb0
+	lea		64($inp),$inp
+
+	cmp		\$64*3,$len
+	jb		.Less_than_64_8xvl
+	vpxor		0x00($inp),$xa1,$xa1
+	vpxor		0x20($inp),$xb1,$xb1
+	vmovdqu		$xa1,0x00($out,$inp)
+	vmovdqu		$xb1,0x20($out,$inp)
+	je		.Ldone8xvl
+	vmovdqa		$xc1,$xa0
+	vmovdqa		$xd1,$xb0
+	lea		64($inp),$inp
+
+	cmp		\$64*4,$len
+	jb		.Less_than_64_8xvl
+	vpxor		0x00($inp),$xc1,$xc1
+	vpxor		0x20($inp),$xd1,$xd1
+	vmovdqu		$xc1,0x00($out,$inp)
+	vmovdqu		$xd1,0x20($out,$inp)
+	je		.Ldone8xvl
+	vmovdqa32	$xa2,$xa0
+	vmovdqa		$xb2,$xb0
+	lea		64($inp),$inp
+
+	cmp		\$64*5,$len
+	jb		.Less_than_64_8xvl
+	vpxord		0x00($inp),$xa2,$xa2
+	vpxor		0x20($inp),$xb2,$xb2
+	vmovdqu32	$xa2,0x00($out,$inp)
+	vmovdqu		$xb2,0x20($out,$inp)
+	je		.Ldone8xvl
+	vmovdqa		$xc2,$xa0
+	vmovdqa		$xd2,$xb0
+	lea		64($inp),$inp
+
+	cmp		\$64*6,$len
+	jb		.Less_than_64_8xvl
+	vpxor		0x00($inp),$xc2,$xc2
+	vpxor		0x20($inp),$xd2,$xd2
+	vmovdqu		$xc2,0x00($out,$inp)
+	vmovdqu		$xd2,0x20($out,$inp)
+	je		.Ldone8xvl
+	vmovdqa		$xa3,$xa0
+	vmovdqa		$xb3,$xb0
+	lea		64($inp),$inp
+
+	cmp		\$64*7,$len
+	jb		.Less_than_64_8xvl
+	vpxor		0x00($inp),$xa3,$xa3
+	vpxor		0x20($inp),$xb3,$xb3
+	vmovdqu		$xa3,0x00($out,$inp)
+	vmovdqu		$xb3,0x20($out,$inp)
+	je		.Ldone8xvl
+	vmovdqa		$xc3,$xa0
+	vmovdqa		$xd3,$xb0
+	lea		64($inp),$inp
+
+.Less_than_64_8xvl:
+	vmovdqa		$xa0,0x00(%rsp)
+	vmovdqa		$xb0,0x20(%rsp)
+	lea		($out,$inp),$out
+	and		\$63,$len
+
+.Loop_tail8xvl:
+	movzb		($inp,%r10),%eax
+	movzb		(%rsp,%r10),%ecx
+	lea		1(%r10),%r10
+	xor		%ecx,%eax
+	mov		%al,-1($out,%r10)
+	dec		$len
+	jnz		.Loop_tail8xvl
+
+	vpxor		$xa0,$xa0,$xa0
+	vmovdqa		$xa0,0x00(%rsp)
+	vmovdqa		$xa0,0x20(%rsp)
+
+.Ldone8xvl:
+	vzeroall
+___
+$code.=<<___	if ($win64);
+	movaps		-0xa8(%r9),%xmm6
+	movaps		-0x98(%r9),%xmm7
+	movaps		-0x88(%r9),%xmm8
+	movaps		-0x78(%r9),%xmm9
+	movaps		-0x68(%r9),%xmm10
+	movaps		-0x58(%r9),%xmm11
+	movaps		-0x48(%r9),%xmm12
+	movaps		-0x38(%r9),%xmm13
+	movaps		-0x28(%r9),%xmm14
+	movaps		-0x18(%r9),%xmm15
+___
+$code.=<<___;
+	lea		(%r9),%rsp
+.cfi_def_cfa_register	%rsp
+.L8xvl_epilogue:
+	ret
+.cfi_endproc
+.size	ChaCha20_8xvl,.-ChaCha20_8xvl
+___
+}
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	se_handler,\@abi-omnipotent
+.align	16
+se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	lea	.Lctr32_body(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<.Lprologue
+	jb	.Lcommon_seh_tail
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	lea	.Lno_data(%rip),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=.Lepilogue
+	jae	.Lcommon_seh_tail
+
+	lea	64+24+48(%rax),%rax
+
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R14
+
+.Lcommon_seh_tail:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	se_handler,.-se_handler
+
+.type	simd_handler,\@abi-omnipotent
+.align	16
+simd_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lcommon_seh_tail
+
+	mov	192($context),%rax	# pull context->R9
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	mov	8(%r11),%ecx		# HandlerData[2]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lcommon_seh_tail
+
+	neg	%rcx
+	lea	-8(%rax,%rcx),%rsi
+	lea	512($context),%rdi	# &context.Xmm6
+	neg	%ecx
+	shr	\$3,%ecx
+	.long	0xa548f3fc		# cld; rep movsq
+
+	jmp	.Lcommon_seh_tail
+.size	simd_handler,.-simd_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_ChaCha20_ctr32
+	.rva	.LSEH_end_ChaCha20_ctr32
+	.rva	.LSEH_info_ChaCha20_ctr32
+
+	.rva	.LSEH_begin_ChaCha20_ssse3
+	.rva	.LSEH_end_ChaCha20_ssse3
+	.rva	.LSEH_info_ChaCha20_ssse3
+
+	.rva	.LSEH_begin_ChaCha20_128
+	.rva	.LSEH_end_ChaCha20_128
+	.rva	.LSEH_info_ChaCha20_128
+
+	.rva	.LSEH_begin_ChaCha20_4x
+	.rva	.LSEH_end_ChaCha20_4x
+	.rva	.LSEH_info_ChaCha20_4x
+___
+$code.=<<___ if ($avx);
+	.rva	.LSEH_begin_ChaCha20_4xop
+	.rva	.LSEH_end_ChaCha20_4xop
+	.rva	.LSEH_info_ChaCha20_4xop
+___
+$code.=<<___ if ($avx>1);
+	.rva	.LSEH_begin_ChaCha20_8x
+	.rva	.LSEH_end_ChaCha20_8x
+	.rva	.LSEH_info_ChaCha20_8x
+___
+$code.=<<___ if ($avx>2);
+	.rva	.LSEH_begin_ChaCha20_avx512
+	.rva	.LSEH_end_ChaCha20_avx512
+	.rva	.LSEH_info_ChaCha20_avx512
+
+	.rva	.LSEH_begin_ChaCha20_avx512vl
+	.rva	.LSEH_end_ChaCha20_avx512vl
+	.rva	.LSEH_info_ChaCha20_avx512vl
+
+	.rva	.LSEH_begin_ChaCha20_16x
+	.rva	.LSEH_end_ChaCha20_16x
+	.rva	.LSEH_info_ChaCha20_16x
+
+	.rva	.LSEH_begin_ChaCha20_8xvl
+	.rva	.LSEH_end_ChaCha20_8xvl
+	.rva	.LSEH_info_ChaCha20_8xvl
+___
+$code.=<<___;
+.section	.xdata
+.align	8
+.LSEH_info_ChaCha20_ctr32:
+	.byte	9,0,0,0
+	.rva	se_handler
+
+.LSEH_info_ChaCha20_ssse3:
+	.byte	9,0,0,0
+	.rva	simd_handler
+	.rva	.Lssse3_body,.Lssse3_epilogue
+	.long	0x20,0
+
+.LSEH_info_ChaCha20_128:
+	.byte	9,0,0,0
+	.rva	simd_handler
+	.rva	.L128_body,.L128_epilogue
+	.long	0x60,0
+
+.LSEH_info_ChaCha20_4x:
+	.byte	9,0,0,0
+	.rva	simd_handler
+	.rva	.L4x_body,.L4x_epilogue
+	.long	0xa0,0
+___
+$code.=<<___ if ($avx);
+.LSEH_info_ChaCha20_4xop:
+	.byte	9,0,0,0
+	.rva	simd_handler
+	.rva	.L4xop_body,.L4xop_epilogue		# HandlerData[]
+	.long	0xa0,0
+___
+$code.=<<___ if ($avx>1);
+.LSEH_info_ChaCha20_8x:
+	.byte	9,0,0,0
+	.rva	simd_handler
+	.rva	.L8x_body,.L8x_epilogue			# HandlerData[]
+	.long	0xa0,0
+___
+$code.=<<___ if ($avx>2);
+.LSEH_info_ChaCha20_avx512:
+	.byte	9,0,0,0
+	.rva	simd_handler
+	.rva	.Lavx512_body,.Lavx512_epilogue		# HandlerData[]
+	.long	0x20,0
+
+.LSEH_info_ChaCha20_avx512vl:
+	.byte	9,0,0,0
+	.rva	simd_handler
+	.rva	.Lavx512vl_body,.Lavx512vl_epilogue	# HandlerData[]
+	.long	0x20,0
+
+.LSEH_info_ChaCha20_16x:
+	.byte	9,0,0,0
+	.rva	simd_handler
+	.rva	.L16x_body,.L16x_epilogue		# HandlerData[]
+	.long	0xa0,0
+
+.LSEH_info_ChaCha20_8xvl:
+	.byte	9,0,0,0
+	.rva	simd_handler
+	.rva	.L8xvl_body,.L8xvl_epilogue		# HandlerData[]
+	.long	0xa0,0
+___
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	s/%x#%[yz]/%x/g;	# "down-shift"
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/build.info
new file mode 100644
index 000000000..02f8e518a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/build.info
@@ -0,0 +1,18 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]={- $target{chacha_asm_src} -}
+
+GENERATE[chacha-x86.s]=asm/chacha-x86.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+GENERATE[chacha-x86_64.s]=asm/chacha-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[chacha-ppc.s]=asm/chacha-ppc.pl $(PERLASM_SCHEME)
+GENERATE[chacha-armv4.S]=asm/chacha-armv4.pl $(PERLASM_SCHEME)
+INCLUDE[chacha-armv4.o]=..
+GENERATE[chacha-armv8.S]=asm/chacha-armv8.pl $(PERLASM_SCHEME)
+INCLUDE[chacha-armv8.o]=..
+
+BEGINRAW[Makefile(unix)]
+##### CHACHA assembler implementations
+
+{- $builddir -}/chacha-%.S:	{- $sourcedir -}/asm/chacha-%.pl
+	CC="$(CC)" $(PERL) $< $(PERLASM_SCHEME) $@
+ENDRAW[Makefile(unix)]
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/chacha_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/chacha_enc.c
new file mode 100644
index 000000000..239f68ab8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/chacha/chacha_enc.c
@@ -0,0 +1,121 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* Adapted from the public domain code by D. Bernstein from SUPERCOP. */
+
+#include <string.h>
+
+#include "internal/chacha.h"
+
+typedef unsigned int u32;
+typedef unsigned char u8;
+typedef union {
+    u32 u[16];
+    u8 c[64];
+} chacha_buf;
+
+# define ROTATE(v, n) (((v) << (n)) | ((v) >> (32 - (n))))
+
+# define U32TO8_LITTLE(p, v) do { \
+                                (p)[0] = (u8)(v >>  0); \
+                                (p)[1] = (u8)(v >>  8); \
+                                (p)[2] = (u8)(v >> 16); \
+                                (p)[3] = (u8)(v >> 24); \
+                                } while(0)
+
+/* QUARTERROUND updates a, b, c, d with a ChaCha "quarter" round. */
+# define QUARTERROUND(a,b,c,d) ( \
+                x[a] += x[b], x[d] = ROTATE((x[d] ^ x[a]),16), \
+                x[c] += x[d], x[b] = ROTATE((x[b] ^ x[c]),12), \
+                x[a] += x[b], x[d] = ROTATE((x[d] ^ x[a]), 8), \
+                x[c] += x[d], x[b] = ROTATE((x[b] ^ x[c]), 7)  )
+
+/* chacha_core performs 20 rounds of ChaCha on the input words in
+ * |input| and writes the 64 output bytes to |output|. */
+static void chacha20_core(chacha_buf *output, const u32 input[16])
+{
+    u32 x[16];
+    int i;
+    const union {
+        long one;
+        char little;
+    } is_endian = { 1 };
+
+    memcpy(x, input, sizeof(x));
+
+    for (i = 20; i > 0; i -= 2) {
+        QUARTERROUND(0, 4, 8, 12);
+        QUARTERROUND(1, 5, 9, 13);
+        QUARTERROUND(2, 6, 10, 14);
+        QUARTERROUND(3, 7, 11, 15);
+        QUARTERROUND(0, 5, 10, 15);
+        QUARTERROUND(1, 6, 11, 12);
+        QUARTERROUND(2, 7, 8, 13);
+        QUARTERROUND(3, 4, 9, 14);
+    }
+
+    if (is_endian.little) {
+        for (i = 0; i < 16; ++i)
+            output->u[i] = x[i] + input[i];
+    } else {
+        for (i = 0; i < 16; ++i)
+            U32TO8_LITTLE(output->c + 4 * i, (x[i] + input[i]));
+    }
+}
+
+void ChaCha20_ctr32(unsigned char *out, const unsigned char *inp,
+                    size_t len, const unsigned int key[8],
+                    const unsigned int counter[4])
+{
+    u32 input[16];
+    chacha_buf buf;
+    size_t todo, i;
+
+    /* sigma constant "expand 32-byte k" in little-endian encoding */
+    input[0] = ((u32)'e') | ((u32)'x'<<8) | ((u32)'p'<<16) | ((u32)'a'<<24);
+    input[1] = ((u32)'n') | ((u32)'d'<<8) | ((u32)' '<<16) | ((u32)'3'<<24);
+    input[2] = ((u32)'2') | ((u32)'-'<<8) | ((u32)'b'<<16) | ((u32)'y'<<24);
+    input[3] = ((u32)'t') | ((u32)'e'<<8) | ((u32)' '<<16) | ((u32)'k'<<24);
+
+    input[4] = key[0];
+    input[5] = key[1];
+    input[6] = key[2];
+    input[7] = key[3];
+    input[8] = key[4];
+    input[9] = key[5];
+    input[10] = key[6];
+    input[11] = key[7];
+
+    input[12] = counter[0];
+    input[13] = counter[1];
+    input[14] = counter[2];
+    input[15] = counter[3];
+
+    while (len > 0) {
+        todo = sizeof(buf);
+        if (len < todo)
+            todo = len;
+
+        chacha20_core(&buf, input);
+
+        for (i = 0; i < todo; i++)
+            out[i] = inp[i] ^ buf.c[i];
+        out += todo;
+        inp += todo;
+        len -= todo;
+
+        /*
+         * Advance 32-bit counter. Note that as subroutine is so to
+         * say nonce-agnostic, this limited counter width doesn't
+         * prevent caller from implementing wider counter. It would
+         * simply take two calls split on counter overflow...
+         */
+        input[12]++;
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cmac/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/cmac/build.info
new file mode 100644
index 000000000..c8a4949a0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cmac/build.info
@@ -0,0 +1,2 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=cmac.c cm_ameth.c cm_pmeth.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cmac/cm_ameth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cmac/cm_ameth.c
new file mode 100644
index 000000000..a58454a08
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cmac/cm_ameth.c
@@ -0,0 +1,51 @@
+/*
+ * Copyright 2010-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/cmac.h>
+#include "internal/asn1_int.h"
+
+/*
+ * CMAC "ASN1" method. This is just here to indicate the maximum CMAC output
+ * length and to free up a CMAC key.
+ */
+
+static int cmac_size(const EVP_PKEY *pkey)
+{
+    return EVP_MAX_BLOCK_LENGTH;
+}
+
+static void cmac_key_free(EVP_PKEY *pkey)
+{
+    CMAC_CTX *cmctx = EVP_PKEY_get0(pkey);
+    CMAC_CTX_free(cmctx);
+}
+
+const EVP_PKEY_ASN1_METHOD cmac_asn1_meth = {
+    EVP_PKEY_CMAC,
+    EVP_PKEY_CMAC,
+    0,
+
+    "CMAC",
+    "OpenSSL CMAC method",
+
+    0, 0, 0, 0,
+
+    0, 0, 0,
+
+    cmac_size,
+    0, 0,
+    0, 0, 0, 0, 0, 0, 0,
+
+    cmac_key_free,
+    0,
+    0, 0
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cmac/cm_pmeth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cmac/cm_pmeth.c
new file mode 100644
index 000000000..10748f148
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cmac/cm_pmeth.c
@@ -0,0 +1,161 @@
+/*
+ * Copyright 2010-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/evp.h>
+#include <openssl/cmac.h>
+#include "internal/evp_int.h"
+
+/* The context structure and "key" is simply a CMAC_CTX */
+
+static int pkey_cmac_init(EVP_PKEY_CTX *ctx)
+{
+    ctx->data = CMAC_CTX_new();
+    if (ctx->data == NULL)
+        return 0;
+    ctx->keygen_info_count = 0;
+    return 1;
+}
+
+static int pkey_cmac_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src)
+{
+    if (!pkey_cmac_init(dst))
+        return 0;
+    if (!CMAC_CTX_copy(dst->data, src->data))
+        return 0;
+    return 1;
+}
+
+static void pkey_cmac_cleanup(EVP_PKEY_CTX *ctx)
+{
+    CMAC_CTX_free(ctx->data);
+}
+
+static int pkey_cmac_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
+{
+    CMAC_CTX *cmkey = CMAC_CTX_new();
+    CMAC_CTX *cmctx = ctx->data;
+    if (cmkey == NULL)
+        return 0;
+    if (!CMAC_CTX_copy(cmkey, cmctx)) {
+        CMAC_CTX_free(cmkey);
+        return 0;
+    }
+    EVP_PKEY_assign(pkey, EVP_PKEY_CMAC, cmkey);
+
+    return 1;
+}
+
+static int int_update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    if (!CMAC_Update(EVP_MD_CTX_pkey_ctx(ctx)->data, data, count))
+        return 0;
+    return 1;
+}
+
+static int cmac_signctx_init(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx)
+{
+    EVP_MD_CTX_set_flags(mctx, EVP_MD_CTX_FLAG_NO_INIT);
+    EVP_MD_CTX_set_update_fn(mctx, int_update);
+    return 1;
+}
+
+static int cmac_signctx(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
+                        EVP_MD_CTX *mctx)
+{
+    return CMAC_Final(ctx->data, sig, siglen);
+}
+
+static int pkey_cmac_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
+{
+    CMAC_CTX *cmctx = ctx->data;
+    switch (type) {
+
+    case EVP_PKEY_CTRL_SET_MAC_KEY:
+        if (!p2 || p1 < 0)
+            return 0;
+        if (!CMAC_Init(cmctx, p2, p1, NULL, NULL))
+            return 0;
+        break;
+
+    case EVP_PKEY_CTRL_CIPHER:
+        if (!CMAC_Init(cmctx, NULL, 0, p2, ctx->engine))
+            return 0;
+        break;
+
+    case EVP_PKEY_CTRL_MD:
+        if (ctx->pkey && !CMAC_CTX_copy(ctx->data,
+                                        (CMAC_CTX *)ctx->pkey->pkey.ptr))
+            return 0;
+        if (!CMAC_Init(cmctx, NULL, 0, NULL, NULL))
+            return 0;
+        break;
+
+    default:
+        return -2;
+
+    }
+    return 1;
+}
+
+static int pkey_cmac_ctrl_str(EVP_PKEY_CTX *ctx,
+                              const char *type, const char *value)
+{
+    if (!value) {
+        return 0;
+    }
+    if (strcmp(type, "cipher") == 0) {
+        const EVP_CIPHER *c;
+        c = EVP_get_cipherbyname(value);
+        if (!c)
+            return 0;
+        return pkey_cmac_ctrl(ctx, EVP_PKEY_CTRL_CIPHER, -1, (void *)c);
+    }
+    if (strcmp(type, "key") == 0)
+        return EVP_PKEY_CTX_str2ctrl(ctx, EVP_PKEY_CTRL_SET_MAC_KEY, value);
+    if (strcmp(type, "hexkey") == 0)
+        return EVP_PKEY_CTX_hex2ctrl(ctx, EVP_PKEY_CTRL_SET_MAC_KEY, value);
+    return -2;
+}
+
+const EVP_PKEY_METHOD cmac_pkey_meth = {
+    EVP_PKEY_CMAC,
+    EVP_PKEY_FLAG_SIGCTX_CUSTOM,
+    pkey_cmac_init,
+    pkey_cmac_copy,
+    pkey_cmac_cleanup,
+
+    0, 0,
+
+    0,
+    pkey_cmac_keygen,
+
+    0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    cmac_signctx_init,
+    cmac_signctx,
+
+    0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    pkey_cmac_ctrl,
+    pkey_cmac_ctrl_str
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cmac/cmac.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cmac/cmac.c
new file mode 100644
index 000000000..6989c32d0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cmac/cmac.c
@@ -0,0 +1,226 @@
+/*
+ * Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include "internal/cryptlib.h"
+#include <openssl/cmac.h>
+#include <openssl/err.h>
+
+struct CMAC_CTX_st {
+    /* Cipher context to use */
+    EVP_CIPHER_CTX *cctx;
+    /* Keys k1 and k2 */
+    unsigned char k1[EVP_MAX_BLOCK_LENGTH];
+    unsigned char k2[EVP_MAX_BLOCK_LENGTH];
+    /* Temporary block */
+    unsigned char tbl[EVP_MAX_BLOCK_LENGTH];
+    /* Last (possibly partial) block */
+    unsigned char last_block[EVP_MAX_BLOCK_LENGTH];
+    /* Number of bytes in last block: -1 means context not initialised */
+    int nlast_block;
+};
+
+/* Make temporary keys K1 and K2 */
+
+static void make_kn(unsigned char *k1, const unsigned char *l, int bl)
+{
+    int i;
+    unsigned char c = l[0], carry = c >> 7, cnext;
+
+    /* Shift block to left, including carry */
+    for (i = 0; i < bl - 1; i++, c = cnext)
+        k1[i] = (c << 1) | ((cnext = l[i + 1]) >> 7);
+
+    /* If MSB set fixup with R */
+    k1[i] = (c << 1) ^ ((0 - carry) & (bl == 16 ? 0x87 : 0x1b));
+}
+
+CMAC_CTX *CMAC_CTX_new(void)
+{
+    CMAC_CTX *ctx;
+
+    if ((ctx = OPENSSL_malloc(sizeof(*ctx))) == NULL) {
+        CRYPTOerr(CRYPTO_F_CMAC_CTX_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    ctx->cctx = EVP_CIPHER_CTX_new();
+    if (ctx->cctx == NULL) {
+        OPENSSL_free(ctx);
+        return NULL;
+    }
+    ctx->nlast_block = -1;
+    return ctx;
+}
+
+void CMAC_CTX_cleanup(CMAC_CTX *ctx)
+{
+    EVP_CIPHER_CTX_reset(ctx->cctx);
+    OPENSSL_cleanse(ctx->tbl, EVP_MAX_BLOCK_LENGTH);
+    OPENSSL_cleanse(ctx->k1, EVP_MAX_BLOCK_LENGTH);
+    OPENSSL_cleanse(ctx->k2, EVP_MAX_BLOCK_LENGTH);
+    OPENSSL_cleanse(ctx->last_block, EVP_MAX_BLOCK_LENGTH);
+    ctx->nlast_block = -1;
+}
+
+EVP_CIPHER_CTX *CMAC_CTX_get0_cipher_ctx(CMAC_CTX *ctx)
+{
+    return ctx->cctx;
+}
+
+void CMAC_CTX_free(CMAC_CTX *ctx)
+{
+    if (!ctx)
+        return;
+    CMAC_CTX_cleanup(ctx);
+    EVP_CIPHER_CTX_free(ctx->cctx);
+    OPENSSL_free(ctx);
+}
+
+int CMAC_CTX_copy(CMAC_CTX *out, const CMAC_CTX *in)
+{
+    int bl;
+    if (in->nlast_block == -1)
+        return 0;
+    if (!EVP_CIPHER_CTX_copy(out->cctx, in->cctx))
+        return 0;
+    bl = EVP_CIPHER_CTX_block_size(in->cctx);
+    memcpy(out->k1, in->k1, bl);
+    memcpy(out->k2, in->k2, bl);
+    memcpy(out->tbl, in->tbl, bl);
+    memcpy(out->last_block, in->last_block, bl);
+    out->nlast_block = in->nlast_block;
+    return 1;
+}
+
+int CMAC_Init(CMAC_CTX *ctx, const void *key, size_t keylen,
+              const EVP_CIPHER *cipher, ENGINE *impl)
+{
+    static const unsigned char zero_iv[EVP_MAX_BLOCK_LENGTH] = { 0 };
+    /* All zeros means restart */
+    if (!key && !cipher && !impl && keylen == 0) {
+        /* Not initialised */
+        if (ctx->nlast_block == -1)
+            return 0;
+        if (!EVP_EncryptInit_ex(ctx->cctx, NULL, NULL, NULL, zero_iv))
+            return 0;
+        memset(ctx->tbl, 0, EVP_CIPHER_CTX_block_size(ctx->cctx));
+        ctx->nlast_block = 0;
+        return 1;
+    }
+    /* Initialise context */
+    if (cipher && !EVP_EncryptInit_ex(ctx->cctx, cipher, impl, NULL, NULL))
+        return 0;
+    /* Non-NULL key means initialisation complete */
+    if (key) {
+        int bl;
+        if (!EVP_CIPHER_CTX_cipher(ctx->cctx))
+            return 0;
+        if (!EVP_CIPHER_CTX_set_key_length(ctx->cctx, keylen))
+            return 0;
+        if (!EVP_EncryptInit_ex(ctx->cctx, NULL, NULL, key, zero_iv))
+            return 0;
+        bl = EVP_CIPHER_CTX_block_size(ctx->cctx);
+        if (!EVP_Cipher(ctx->cctx, ctx->tbl, zero_iv, bl))
+            return 0;
+        make_kn(ctx->k1, ctx->tbl, bl);
+        make_kn(ctx->k2, ctx->k1, bl);
+        OPENSSL_cleanse(ctx->tbl, bl);
+        /* Reset context again ready for first data block */
+        if (!EVP_EncryptInit_ex(ctx->cctx, NULL, NULL, NULL, zero_iv))
+            return 0;
+        /* Zero tbl so resume works */
+        memset(ctx->tbl, 0, bl);
+        ctx->nlast_block = 0;
+    }
+    return 1;
+}
+
+int CMAC_Update(CMAC_CTX *ctx, const void *in, size_t dlen)
+{
+    const unsigned char *data = in;
+    size_t bl;
+    if (ctx->nlast_block == -1)
+        return 0;
+    if (dlen == 0)
+        return 1;
+    bl = EVP_CIPHER_CTX_block_size(ctx->cctx);
+    /* Copy into partial block if we need to */
+    if (ctx->nlast_block > 0) {
+        size_t nleft;
+        nleft = bl - ctx->nlast_block;
+        if (dlen < nleft)
+            nleft = dlen;
+        memcpy(ctx->last_block + ctx->nlast_block, data, nleft);
+        dlen -= nleft;
+        ctx->nlast_block += nleft;
+        /* If no more to process return */
+        if (dlen == 0)
+            return 1;
+        data += nleft;
+        /* Else not final block so encrypt it */
+        if (!EVP_Cipher(ctx->cctx, ctx->tbl, ctx->last_block, bl))
+            return 0;
+    }
+    /* Encrypt all but one of the complete blocks left */
+    while (dlen > bl) {
+        if (!EVP_Cipher(ctx->cctx, ctx->tbl, data, bl))
+            return 0;
+        dlen -= bl;
+        data += bl;
+    }
+    /* Copy any data left to last block buffer */
+    memcpy(ctx->last_block, data, dlen);
+    ctx->nlast_block = dlen;
+    return 1;
+
+}
+
+int CMAC_Final(CMAC_CTX *ctx, unsigned char *out, size_t *poutlen)
+{
+    int i, bl, lb;
+    if (ctx->nlast_block == -1)
+        return 0;
+    bl = EVP_CIPHER_CTX_block_size(ctx->cctx);
+    *poutlen = (size_t)bl;
+    if (!out)
+        return 1;
+    lb = ctx->nlast_block;
+    /* Is last block complete? */
+    if (lb == bl) {
+        for (i = 0; i < bl; i++)
+            out[i] = ctx->last_block[i] ^ ctx->k1[i];
+    } else {
+        ctx->last_block[lb] = 0x80;
+        if (bl - lb > 1)
+            memset(ctx->last_block + lb + 1, 0, bl - lb - 1);
+        for (i = 0; i < bl; i++)
+            out[i] = ctx->last_block[i] ^ ctx->k2[i];
+    }
+    if (!EVP_Cipher(ctx->cctx, out, out, bl)) {
+        OPENSSL_cleanse(out, bl);
+        return 0;
+    }
+    return 1;
+}
+
+int CMAC_resume(CMAC_CTX *ctx)
+{
+    if (ctx->nlast_block == -1)
+        return 0;
+    /*
+     * The buffer "tbl" contains the last fully encrypted block which is the
+     * last IV (or all zeroes if no last encrypted block). The last block has
+     * not been modified since CMAC_final(). So reinitialising using the last
+     * decrypted block will allow CMAC to continue after calling
+     * CMAC_Final().
+     */
+    return EVP_EncryptInit_ex(ctx->cctx, NULL, NULL, NULL, ctx->tbl);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cms/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/build.info
new file mode 100644
index 000000000..cb675436e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/build.info
@@ -0,0 +1,5 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]= \
+        cms_lib.c cms_asn1.c cms_att.c cms_io.c cms_smime.c cms_err.c \
+        cms_sd.c cms_dd.c cms_cd.c cms_env.c cms_enc.c cms_ess.c \
+        cms_pwri.c cms_kari.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_asn1.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_asn1.c
new file mode 100644
index 000000000..993ea6b21
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_asn1.c
@@ -0,0 +1,403 @@
+/*
+ * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/asn1t.h>
+#include <openssl/pem.h>
+#include <openssl/x509v3.h>
+#include <openssl/cms.h>
+#include "cms_lcl.h"
+
+
+ASN1_SEQUENCE(CMS_IssuerAndSerialNumber) = {
+        ASN1_SIMPLE(CMS_IssuerAndSerialNumber, issuer, X509_NAME),
+        ASN1_SIMPLE(CMS_IssuerAndSerialNumber, serialNumber, ASN1_INTEGER)
+} ASN1_SEQUENCE_END(CMS_IssuerAndSerialNumber)
+
+ASN1_SEQUENCE(CMS_OtherCertificateFormat) = {
+        ASN1_SIMPLE(CMS_OtherCertificateFormat, otherCertFormat, ASN1_OBJECT),
+        ASN1_OPT(CMS_OtherCertificateFormat, otherCert, ASN1_ANY)
+} static_ASN1_SEQUENCE_END(CMS_OtherCertificateFormat)
+
+ASN1_CHOICE(CMS_CertificateChoices) = {
+        ASN1_SIMPLE(CMS_CertificateChoices, d.certificate, X509),
+        ASN1_IMP(CMS_CertificateChoices, d.extendedCertificate, ASN1_SEQUENCE, 0),
+        ASN1_IMP(CMS_CertificateChoices, d.v1AttrCert, ASN1_SEQUENCE, 1),
+        ASN1_IMP(CMS_CertificateChoices, d.v2AttrCert, ASN1_SEQUENCE, 2),
+        ASN1_IMP(CMS_CertificateChoices, d.other, CMS_OtherCertificateFormat, 3)
+} ASN1_CHOICE_END(CMS_CertificateChoices)
+
+ASN1_CHOICE(CMS_SignerIdentifier) = {
+        ASN1_SIMPLE(CMS_SignerIdentifier, d.issuerAndSerialNumber, CMS_IssuerAndSerialNumber),
+        ASN1_IMP(CMS_SignerIdentifier, d.subjectKeyIdentifier, ASN1_OCTET_STRING, 0)
+} static_ASN1_CHOICE_END(CMS_SignerIdentifier)
+
+ASN1_NDEF_SEQUENCE(CMS_EncapsulatedContentInfo) = {
+        ASN1_SIMPLE(CMS_EncapsulatedContentInfo, eContentType, ASN1_OBJECT),
+        ASN1_NDEF_EXP_OPT(CMS_EncapsulatedContentInfo, eContent, ASN1_OCTET_STRING_NDEF, 0)
+} static_ASN1_NDEF_SEQUENCE_END(CMS_EncapsulatedContentInfo)
+
+/* Minor tweak to operation: free up signer key, cert */
+static int cms_si_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                     void *exarg)
+{
+    if (operation == ASN1_OP_FREE_POST) {
+        CMS_SignerInfo *si = (CMS_SignerInfo *)*pval;
+        EVP_PKEY_free(si->pkey);
+        X509_free(si->signer);
+        EVP_MD_CTX_free(si->mctx);
+    }
+    return 1;
+}
+
+ASN1_SEQUENCE_cb(CMS_SignerInfo, cms_si_cb) = {
+        ASN1_EMBED(CMS_SignerInfo, version, INT32),
+        ASN1_SIMPLE(CMS_SignerInfo, sid, CMS_SignerIdentifier),
+        ASN1_SIMPLE(CMS_SignerInfo, digestAlgorithm, X509_ALGOR),
+        ASN1_IMP_SET_OF_OPT(CMS_SignerInfo, signedAttrs, X509_ATTRIBUTE, 0),
+        ASN1_SIMPLE(CMS_SignerInfo, signatureAlgorithm, X509_ALGOR),
+        ASN1_SIMPLE(CMS_SignerInfo, signature, ASN1_OCTET_STRING),
+        ASN1_IMP_SET_OF_OPT(CMS_SignerInfo, unsignedAttrs, X509_ATTRIBUTE, 1)
+} ASN1_SEQUENCE_END_cb(CMS_SignerInfo, CMS_SignerInfo)
+
+ASN1_SEQUENCE(CMS_OtherRevocationInfoFormat) = {
+        ASN1_SIMPLE(CMS_OtherRevocationInfoFormat, otherRevInfoFormat, ASN1_OBJECT),
+        ASN1_OPT(CMS_OtherRevocationInfoFormat, otherRevInfo, ASN1_ANY)
+} static_ASN1_SEQUENCE_END(CMS_OtherRevocationInfoFormat)
+
+ASN1_CHOICE(CMS_RevocationInfoChoice) = {
+        ASN1_SIMPLE(CMS_RevocationInfoChoice, d.crl, X509_CRL),
+        ASN1_IMP(CMS_RevocationInfoChoice, d.other, CMS_OtherRevocationInfoFormat, 1)
+} ASN1_CHOICE_END(CMS_RevocationInfoChoice)
+
+ASN1_NDEF_SEQUENCE(CMS_SignedData) = {
+        ASN1_EMBED(CMS_SignedData, version, INT32),
+        ASN1_SET_OF(CMS_SignedData, digestAlgorithms, X509_ALGOR),
+        ASN1_SIMPLE(CMS_SignedData, encapContentInfo, CMS_EncapsulatedContentInfo),
+        ASN1_IMP_SET_OF_OPT(CMS_SignedData, certificates, CMS_CertificateChoices, 0),
+        ASN1_IMP_SET_OF_OPT(CMS_SignedData, crls, CMS_RevocationInfoChoice, 1),
+        ASN1_SET_OF(CMS_SignedData, signerInfos, CMS_SignerInfo)
+} ASN1_NDEF_SEQUENCE_END(CMS_SignedData)
+
+ASN1_SEQUENCE(CMS_OriginatorInfo) = {
+        ASN1_IMP_SET_OF_OPT(CMS_OriginatorInfo, certificates, CMS_CertificateChoices, 0),
+        ASN1_IMP_SET_OF_OPT(CMS_OriginatorInfo, crls, CMS_RevocationInfoChoice, 1)
+} static_ASN1_SEQUENCE_END(CMS_OriginatorInfo)
+
+ASN1_NDEF_SEQUENCE(CMS_EncryptedContentInfo) = {
+        ASN1_SIMPLE(CMS_EncryptedContentInfo, contentType, ASN1_OBJECT),
+        ASN1_SIMPLE(CMS_EncryptedContentInfo, contentEncryptionAlgorithm, X509_ALGOR),
+        ASN1_IMP_OPT(CMS_EncryptedContentInfo, encryptedContent, ASN1_OCTET_STRING_NDEF, 0)
+} static_ASN1_NDEF_SEQUENCE_END(CMS_EncryptedContentInfo)
+
+ASN1_SEQUENCE(CMS_KeyTransRecipientInfo) = {
+        ASN1_EMBED(CMS_KeyTransRecipientInfo, version, INT32),
+        ASN1_SIMPLE(CMS_KeyTransRecipientInfo, rid, CMS_SignerIdentifier),
+        ASN1_SIMPLE(CMS_KeyTransRecipientInfo, keyEncryptionAlgorithm, X509_ALGOR),
+        ASN1_SIMPLE(CMS_KeyTransRecipientInfo, encryptedKey, ASN1_OCTET_STRING)
+} ASN1_SEQUENCE_END(CMS_KeyTransRecipientInfo)
+
+ASN1_SEQUENCE(CMS_OtherKeyAttribute) = {
+        ASN1_SIMPLE(CMS_OtherKeyAttribute, keyAttrId, ASN1_OBJECT),
+        ASN1_OPT(CMS_OtherKeyAttribute, keyAttr, ASN1_ANY)
+} ASN1_SEQUENCE_END(CMS_OtherKeyAttribute)
+
+ASN1_SEQUENCE(CMS_RecipientKeyIdentifier) = {
+        ASN1_SIMPLE(CMS_RecipientKeyIdentifier, subjectKeyIdentifier, ASN1_OCTET_STRING),
+        ASN1_OPT(CMS_RecipientKeyIdentifier, date, ASN1_GENERALIZEDTIME),
+        ASN1_OPT(CMS_RecipientKeyIdentifier, other, CMS_OtherKeyAttribute)
+} ASN1_SEQUENCE_END(CMS_RecipientKeyIdentifier)
+
+ASN1_CHOICE(CMS_KeyAgreeRecipientIdentifier) = {
+  ASN1_SIMPLE(CMS_KeyAgreeRecipientIdentifier, d.issuerAndSerialNumber, CMS_IssuerAndSerialNumber),
+  ASN1_IMP(CMS_KeyAgreeRecipientIdentifier, d.rKeyId, CMS_RecipientKeyIdentifier, 0)
+} static_ASN1_CHOICE_END(CMS_KeyAgreeRecipientIdentifier)
+
+static int cms_rek_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                      void *exarg)
+{
+    CMS_RecipientEncryptedKey *rek = (CMS_RecipientEncryptedKey *)*pval;
+    if (operation == ASN1_OP_FREE_POST) {
+        EVP_PKEY_free(rek->pkey);
+    }
+    return 1;
+}
+
+ASN1_SEQUENCE_cb(CMS_RecipientEncryptedKey, cms_rek_cb) = {
+        ASN1_SIMPLE(CMS_RecipientEncryptedKey, rid, CMS_KeyAgreeRecipientIdentifier),
+        ASN1_SIMPLE(CMS_RecipientEncryptedKey, encryptedKey, ASN1_OCTET_STRING)
+} ASN1_SEQUENCE_END_cb(CMS_RecipientEncryptedKey, CMS_RecipientEncryptedKey)
+
+ASN1_SEQUENCE(CMS_OriginatorPublicKey) = {
+  ASN1_SIMPLE(CMS_OriginatorPublicKey, algorithm, X509_ALGOR),
+  ASN1_SIMPLE(CMS_OriginatorPublicKey, publicKey, ASN1_BIT_STRING)
+} ASN1_SEQUENCE_END(CMS_OriginatorPublicKey)
+
+ASN1_CHOICE(CMS_OriginatorIdentifierOrKey) = {
+  ASN1_SIMPLE(CMS_OriginatorIdentifierOrKey, d.issuerAndSerialNumber, CMS_IssuerAndSerialNumber),
+  ASN1_IMP(CMS_OriginatorIdentifierOrKey, d.subjectKeyIdentifier, ASN1_OCTET_STRING, 0),
+  ASN1_IMP(CMS_OriginatorIdentifierOrKey, d.originatorKey, CMS_OriginatorPublicKey, 1)
+} static_ASN1_CHOICE_END(CMS_OriginatorIdentifierOrKey)
+
+static int cms_kari_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                       void *exarg)
+{
+    CMS_KeyAgreeRecipientInfo *kari = (CMS_KeyAgreeRecipientInfo *)*pval;
+    if (operation == ASN1_OP_NEW_POST) {
+        kari->ctx = EVP_CIPHER_CTX_new();
+        if (kari->ctx == NULL)
+            return 0;
+        EVP_CIPHER_CTX_set_flags(kari->ctx, EVP_CIPHER_CTX_FLAG_WRAP_ALLOW);
+        kari->pctx = NULL;
+    } else if (operation == ASN1_OP_FREE_POST) {
+        EVP_PKEY_CTX_free(kari->pctx);
+        EVP_CIPHER_CTX_free(kari->ctx);
+    }
+    return 1;
+}
+
+ASN1_SEQUENCE_cb(CMS_KeyAgreeRecipientInfo, cms_kari_cb) = {
+        ASN1_EMBED(CMS_KeyAgreeRecipientInfo, version, INT32),
+        ASN1_EXP(CMS_KeyAgreeRecipientInfo, originator, CMS_OriginatorIdentifierOrKey, 0),
+        ASN1_EXP_OPT(CMS_KeyAgreeRecipientInfo, ukm, ASN1_OCTET_STRING, 1),
+        ASN1_SIMPLE(CMS_KeyAgreeRecipientInfo, keyEncryptionAlgorithm, X509_ALGOR),
+        ASN1_SEQUENCE_OF(CMS_KeyAgreeRecipientInfo, recipientEncryptedKeys, CMS_RecipientEncryptedKey)
+} ASN1_SEQUENCE_END_cb(CMS_KeyAgreeRecipientInfo, CMS_KeyAgreeRecipientInfo)
+
+ASN1_SEQUENCE(CMS_KEKIdentifier) = {
+        ASN1_SIMPLE(CMS_KEKIdentifier, keyIdentifier, ASN1_OCTET_STRING),
+        ASN1_OPT(CMS_KEKIdentifier, date, ASN1_GENERALIZEDTIME),
+        ASN1_OPT(CMS_KEKIdentifier, other, CMS_OtherKeyAttribute)
+} static_ASN1_SEQUENCE_END(CMS_KEKIdentifier)
+
+ASN1_SEQUENCE(CMS_KEKRecipientInfo) = {
+        ASN1_EMBED(CMS_KEKRecipientInfo, version, INT32),
+        ASN1_SIMPLE(CMS_KEKRecipientInfo, kekid, CMS_KEKIdentifier),
+        ASN1_SIMPLE(CMS_KEKRecipientInfo, keyEncryptionAlgorithm, X509_ALGOR),
+        ASN1_SIMPLE(CMS_KEKRecipientInfo, encryptedKey, ASN1_OCTET_STRING)
+} ASN1_SEQUENCE_END(CMS_KEKRecipientInfo)
+
+ASN1_SEQUENCE(CMS_PasswordRecipientInfo) = {
+        ASN1_EMBED(CMS_PasswordRecipientInfo, version, INT32),
+        ASN1_IMP_OPT(CMS_PasswordRecipientInfo, keyDerivationAlgorithm, X509_ALGOR, 0),
+        ASN1_SIMPLE(CMS_PasswordRecipientInfo, keyEncryptionAlgorithm, X509_ALGOR),
+        ASN1_SIMPLE(CMS_PasswordRecipientInfo, encryptedKey, ASN1_OCTET_STRING)
+} ASN1_SEQUENCE_END(CMS_PasswordRecipientInfo)
+
+ASN1_SEQUENCE(CMS_OtherRecipientInfo) = {
+  ASN1_SIMPLE(CMS_OtherRecipientInfo, oriType, ASN1_OBJECT),
+  ASN1_OPT(CMS_OtherRecipientInfo, oriValue, ASN1_ANY)
+} static_ASN1_SEQUENCE_END(CMS_OtherRecipientInfo)
+
+/* Free up RecipientInfo additional data */
+static int cms_ri_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                     void *exarg)
+{
+    if (operation == ASN1_OP_FREE_PRE) {
+        CMS_RecipientInfo *ri = (CMS_RecipientInfo *)*pval;
+        if (ri->type == CMS_RECIPINFO_TRANS) {
+            CMS_KeyTransRecipientInfo *ktri = ri->d.ktri;
+            EVP_PKEY_free(ktri->pkey);
+            X509_free(ktri->recip);
+            EVP_PKEY_CTX_free(ktri->pctx);
+        } else if (ri->type == CMS_RECIPINFO_KEK) {
+            CMS_KEKRecipientInfo *kekri = ri->d.kekri;
+            OPENSSL_clear_free(kekri->key, kekri->keylen);
+        } else if (ri->type == CMS_RECIPINFO_PASS) {
+            CMS_PasswordRecipientInfo *pwri = ri->d.pwri;
+            OPENSSL_clear_free(pwri->pass, pwri->passlen);
+        }
+    }
+    return 1;
+}
+
+ASN1_CHOICE_cb(CMS_RecipientInfo, cms_ri_cb) = {
+        ASN1_SIMPLE(CMS_RecipientInfo, d.ktri, CMS_KeyTransRecipientInfo),
+        ASN1_IMP(CMS_RecipientInfo, d.kari, CMS_KeyAgreeRecipientInfo, 1),
+        ASN1_IMP(CMS_RecipientInfo, d.kekri, CMS_KEKRecipientInfo, 2),
+        ASN1_IMP(CMS_RecipientInfo, d.pwri, CMS_PasswordRecipientInfo, 3),
+        ASN1_IMP(CMS_RecipientInfo, d.ori, CMS_OtherRecipientInfo, 4)
+} ASN1_CHOICE_END_cb(CMS_RecipientInfo, CMS_RecipientInfo, type)
+
+ASN1_NDEF_SEQUENCE(CMS_EnvelopedData) = {
+        ASN1_EMBED(CMS_EnvelopedData, version, INT32),
+        ASN1_IMP_OPT(CMS_EnvelopedData, originatorInfo, CMS_OriginatorInfo, 0),
+        ASN1_SET_OF(CMS_EnvelopedData, recipientInfos, CMS_RecipientInfo),
+        ASN1_SIMPLE(CMS_EnvelopedData, encryptedContentInfo, CMS_EncryptedContentInfo),
+        ASN1_IMP_SET_OF_OPT(CMS_EnvelopedData, unprotectedAttrs, X509_ATTRIBUTE, 1)
+} ASN1_NDEF_SEQUENCE_END(CMS_EnvelopedData)
+
+ASN1_NDEF_SEQUENCE(CMS_DigestedData) = {
+        ASN1_EMBED(CMS_DigestedData, version, INT32),
+        ASN1_SIMPLE(CMS_DigestedData, digestAlgorithm, X509_ALGOR),
+        ASN1_SIMPLE(CMS_DigestedData, encapContentInfo, CMS_EncapsulatedContentInfo),
+        ASN1_SIMPLE(CMS_DigestedData, digest, ASN1_OCTET_STRING)
+} ASN1_NDEF_SEQUENCE_END(CMS_DigestedData)
+
+ASN1_NDEF_SEQUENCE(CMS_EncryptedData) = {
+        ASN1_EMBED(CMS_EncryptedData, version, INT32),
+        ASN1_SIMPLE(CMS_EncryptedData, encryptedContentInfo, CMS_EncryptedContentInfo),
+        ASN1_IMP_SET_OF_OPT(CMS_EncryptedData, unprotectedAttrs, X509_ATTRIBUTE, 1)
+} ASN1_NDEF_SEQUENCE_END(CMS_EncryptedData)
+
+ASN1_NDEF_SEQUENCE(CMS_AuthenticatedData) = {
+        ASN1_EMBED(CMS_AuthenticatedData, version, INT32),
+        ASN1_IMP_OPT(CMS_AuthenticatedData, originatorInfo, CMS_OriginatorInfo, 0),
+        ASN1_SET_OF(CMS_AuthenticatedData, recipientInfos, CMS_RecipientInfo),
+        ASN1_SIMPLE(CMS_AuthenticatedData, macAlgorithm, X509_ALGOR),
+        ASN1_IMP(CMS_AuthenticatedData, digestAlgorithm, X509_ALGOR, 1),
+        ASN1_SIMPLE(CMS_AuthenticatedData, encapContentInfo, CMS_EncapsulatedContentInfo),
+        ASN1_IMP_SET_OF_OPT(CMS_AuthenticatedData, authAttrs, X509_ALGOR, 2),
+        ASN1_SIMPLE(CMS_AuthenticatedData, mac, ASN1_OCTET_STRING),
+        ASN1_IMP_SET_OF_OPT(CMS_AuthenticatedData, unauthAttrs, X509_ALGOR, 3)
+} static_ASN1_NDEF_SEQUENCE_END(CMS_AuthenticatedData)
+
+ASN1_NDEF_SEQUENCE(CMS_CompressedData) = {
+        ASN1_EMBED(CMS_CompressedData, version, INT32),
+        ASN1_SIMPLE(CMS_CompressedData, compressionAlgorithm, X509_ALGOR),
+        ASN1_SIMPLE(CMS_CompressedData, encapContentInfo, CMS_EncapsulatedContentInfo),
+} ASN1_NDEF_SEQUENCE_END(CMS_CompressedData)
+
+/* This is the ANY DEFINED BY table for the top level ContentInfo structure */
+
+ASN1_ADB_TEMPLATE(cms_default) = ASN1_EXP(CMS_ContentInfo, d.other, ASN1_ANY, 0);
+
+ASN1_ADB(CMS_ContentInfo) = {
+        ADB_ENTRY(NID_pkcs7_data, ASN1_NDEF_EXP(CMS_ContentInfo, d.data, ASN1_OCTET_STRING_NDEF, 0)),
+        ADB_ENTRY(NID_pkcs7_signed, ASN1_NDEF_EXP(CMS_ContentInfo, d.signedData, CMS_SignedData, 0)),
+        ADB_ENTRY(NID_pkcs7_enveloped, ASN1_NDEF_EXP(CMS_ContentInfo, d.envelopedData, CMS_EnvelopedData, 0)),
+        ADB_ENTRY(NID_pkcs7_digest, ASN1_NDEF_EXP(CMS_ContentInfo, d.digestedData, CMS_DigestedData, 0)),
+        ADB_ENTRY(NID_pkcs7_encrypted, ASN1_NDEF_EXP(CMS_ContentInfo, d.encryptedData, CMS_EncryptedData, 0)),
+        ADB_ENTRY(NID_id_smime_ct_authData, ASN1_NDEF_EXP(CMS_ContentInfo, d.authenticatedData, CMS_AuthenticatedData, 0)),
+        ADB_ENTRY(NID_id_smime_ct_compressedData, ASN1_NDEF_EXP(CMS_ContentInfo, d.compressedData, CMS_CompressedData, 0)),
+} ASN1_ADB_END(CMS_ContentInfo, 0, contentType, 0, &cms_default_tt, NULL);
+
+/* CMS streaming support */
+static int cms_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                  void *exarg)
+{
+    ASN1_STREAM_ARG *sarg = exarg;
+    CMS_ContentInfo *cms = NULL;
+    if (pval)
+        cms = (CMS_ContentInfo *)*pval;
+    else
+        return 1;
+    switch (operation) {
+
+    case ASN1_OP_STREAM_PRE:
+        if (CMS_stream(&sarg->boundary, cms) <= 0)
+            return 0;
+        /* fall thru */
+    case ASN1_OP_DETACHED_PRE:
+        sarg->ndef_bio = CMS_dataInit(cms, sarg->out);
+        if (!sarg->ndef_bio)
+            return 0;
+        break;
+
+    case ASN1_OP_STREAM_POST:
+    case ASN1_OP_DETACHED_POST:
+        if (CMS_dataFinal(cms, sarg->ndef_bio) <= 0)
+            return 0;
+        break;
+
+    }
+    return 1;
+}
+
+ASN1_NDEF_SEQUENCE_cb(CMS_ContentInfo, cms_cb) = {
+        ASN1_SIMPLE(CMS_ContentInfo, contentType, ASN1_OBJECT),
+        ASN1_ADB_OBJECT(CMS_ContentInfo)
+} ASN1_NDEF_SEQUENCE_END_cb(CMS_ContentInfo, CMS_ContentInfo)
+
+/* Specials for signed attributes */
+
+/*
+ * When signing attributes we want to reorder them to match the sorted
+ * encoding.
+ */
+
+ASN1_ITEM_TEMPLATE(CMS_Attributes_Sign) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SET_ORDER, 0, CMS_ATTRIBUTES, X509_ATTRIBUTE)
+ASN1_ITEM_TEMPLATE_END(CMS_Attributes_Sign)
+
+/*
+ * When verifying attributes we need to use the received order. So we use
+ * SEQUENCE OF and tag it to SET OF
+ */
+
+ASN1_ITEM_TEMPLATE(CMS_Attributes_Verify) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF | ASN1_TFLG_IMPTAG | ASN1_TFLG_UNIVERSAL,
+                                V_ASN1_SET, CMS_ATTRIBUTES, X509_ATTRIBUTE)
+ASN1_ITEM_TEMPLATE_END(CMS_Attributes_Verify)
+
+
+
+ASN1_CHOICE(CMS_ReceiptsFrom) = {
+  ASN1_IMP_EMBED(CMS_ReceiptsFrom, d.allOrFirstTier, INT32, 0),
+  ASN1_IMP_SEQUENCE_OF(CMS_ReceiptsFrom, d.receiptList, GENERAL_NAMES, 1)
+} static_ASN1_CHOICE_END(CMS_ReceiptsFrom)
+
+ASN1_SEQUENCE(CMS_ReceiptRequest) = {
+  ASN1_SIMPLE(CMS_ReceiptRequest, signedContentIdentifier, ASN1_OCTET_STRING),
+  ASN1_SIMPLE(CMS_ReceiptRequest, receiptsFrom, CMS_ReceiptsFrom),
+  ASN1_SEQUENCE_OF(CMS_ReceiptRequest, receiptsTo, GENERAL_NAMES)
+} ASN1_SEQUENCE_END(CMS_ReceiptRequest)
+
+ASN1_SEQUENCE(CMS_Receipt) = {
+  ASN1_EMBED(CMS_Receipt, version, INT32),
+  ASN1_SIMPLE(CMS_Receipt, contentType, ASN1_OBJECT),
+  ASN1_SIMPLE(CMS_Receipt, signedContentIdentifier, ASN1_OCTET_STRING),
+  ASN1_SIMPLE(CMS_Receipt, originatorSignatureValue, ASN1_OCTET_STRING)
+} ASN1_SEQUENCE_END(CMS_Receipt)
+
+/*
+ * Utilities to encode the CMS_SharedInfo structure used during key
+ * derivation.
+ */
+
+typedef struct {
+    X509_ALGOR *keyInfo;
+    ASN1_OCTET_STRING *entityUInfo;
+    ASN1_OCTET_STRING *suppPubInfo;
+} CMS_SharedInfo;
+
+ASN1_SEQUENCE(CMS_SharedInfo) = {
+  ASN1_SIMPLE(CMS_SharedInfo, keyInfo, X509_ALGOR),
+  ASN1_EXP_OPT(CMS_SharedInfo, entityUInfo, ASN1_OCTET_STRING, 0),
+  ASN1_EXP_OPT(CMS_SharedInfo, suppPubInfo, ASN1_OCTET_STRING, 2),
+} static_ASN1_SEQUENCE_END(CMS_SharedInfo)
+
+int CMS_SharedInfo_encode(unsigned char **pder, X509_ALGOR *kekalg,
+                          ASN1_OCTET_STRING *ukm, int keylen)
+{
+    union {
+        CMS_SharedInfo *pecsi;
+        ASN1_VALUE *a;
+    } intsi = {
+        NULL
+    };
+
+    ASN1_OCTET_STRING oklen;
+    unsigned char kl[4];
+    CMS_SharedInfo ecsi;
+
+    keylen <<= 3;
+    kl[0] = (keylen >> 24) & 0xff;
+    kl[1] = (keylen >> 16) & 0xff;
+    kl[2] = (keylen >> 8) & 0xff;
+    kl[3] = keylen & 0xff;
+    oklen.length = 4;
+    oklen.data = kl;
+    oklen.type = V_ASN1_OCTET_STRING;
+    oklen.flags = 0;
+    ecsi.keyInfo = kekalg;
+    ecsi.entityUInfo = ukm;
+    ecsi.suppPubInfo = &oklen;
+    intsi.pecsi = &ecsi;
+    return ASN1_item_i2d(intsi.a, pder, ASN1_ITEM_rptr(CMS_SharedInfo));
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_att.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_att.c
new file mode 100644
index 000000000..664e64971
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_att.c
@@ -0,0 +1,152 @@
+/*
+ * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/asn1t.h>
+#include <openssl/pem.h>
+#include <openssl/x509v3.h>
+#include <openssl/err.h>
+#include <openssl/cms.h>
+#include "cms_lcl.h"
+
+/* CMS SignedData Attribute utilities */
+
+int CMS_signed_get_attr_count(const CMS_SignerInfo *si)
+{
+    return X509at_get_attr_count(si->signedAttrs);
+}
+
+int CMS_signed_get_attr_by_NID(const CMS_SignerInfo *si, int nid, int lastpos)
+{
+    return X509at_get_attr_by_NID(si->signedAttrs, nid, lastpos);
+}
+
+int CMS_signed_get_attr_by_OBJ(const CMS_SignerInfo *si, const ASN1_OBJECT *obj,
+                               int lastpos)
+{
+    return X509at_get_attr_by_OBJ(si->signedAttrs, obj, lastpos);
+}
+
+X509_ATTRIBUTE *CMS_signed_get_attr(const CMS_SignerInfo *si, int loc)
+{
+    return X509at_get_attr(si->signedAttrs, loc);
+}
+
+X509_ATTRIBUTE *CMS_signed_delete_attr(CMS_SignerInfo *si, int loc)
+{
+    return X509at_delete_attr(si->signedAttrs, loc);
+}
+
+int CMS_signed_add1_attr(CMS_SignerInfo *si, X509_ATTRIBUTE *attr)
+{
+    if (X509at_add1_attr(&si->signedAttrs, attr))
+        return 1;
+    return 0;
+}
+
+int CMS_signed_add1_attr_by_OBJ(CMS_SignerInfo *si,
+                                const ASN1_OBJECT *obj, int type,
+                                const void *bytes, int len)
+{
+    if (X509at_add1_attr_by_OBJ(&si->signedAttrs, obj, type, bytes, len))
+        return 1;
+    return 0;
+}
+
+int CMS_signed_add1_attr_by_NID(CMS_SignerInfo *si,
+                                int nid, int type, const void *bytes, int len)
+{
+    if (X509at_add1_attr_by_NID(&si->signedAttrs, nid, type, bytes, len))
+        return 1;
+    return 0;
+}
+
+int CMS_signed_add1_attr_by_txt(CMS_SignerInfo *si,
+                                const char *attrname, int type,
+                                const void *bytes, int len)
+{
+    if (X509at_add1_attr_by_txt(&si->signedAttrs, attrname, type, bytes, len))
+        return 1;
+    return 0;
+}
+
+void *CMS_signed_get0_data_by_OBJ(CMS_SignerInfo *si, const ASN1_OBJECT *oid,
+                                  int lastpos, int type)
+{
+    return X509at_get0_data_by_OBJ(si->signedAttrs, oid, lastpos, type);
+}
+
+int CMS_unsigned_get_attr_count(const CMS_SignerInfo *si)
+{
+    return X509at_get_attr_count(si->unsignedAttrs);
+}
+
+int CMS_unsigned_get_attr_by_NID(const CMS_SignerInfo *si, int nid,
+                                 int lastpos)
+{
+    return X509at_get_attr_by_NID(si->unsignedAttrs, nid, lastpos);
+}
+
+int CMS_unsigned_get_attr_by_OBJ(const CMS_SignerInfo *si,
+                                 const ASN1_OBJECT *obj, int lastpos)
+{
+    return X509at_get_attr_by_OBJ(si->unsignedAttrs, obj, lastpos);
+}
+
+X509_ATTRIBUTE *CMS_unsigned_get_attr(const CMS_SignerInfo *si, int loc)
+{
+    return X509at_get_attr(si->unsignedAttrs, loc);
+}
+
+X509_ATTRIBUTE *CMS_unsigned_delete_attr(CMS_SignerInfo *si, int loc)
+{
+    return X509at_delete_attr(si->unsignedAttrs, loc);
+}
+
+int CMS_unsigned_add1_attr(CMS_SignerInfo *si, X509_ATTRIBUTE *attr)
+{
+    if (X509at_add1_attr(&si->unsignedAttrs, attr))
+        return 1;
+    return 0;
+}
+
+int CMS_unsigned_add1_attr_by_OBJ(CMS_SignerInfo *si,
+                                  const ASN1_OBJECT *obj, int type,
+                                  const void *bytes, int len)
+{
+    if (X509at_add1_attr_by_OBJ(&si->unsignedAttrs, obj, type, bytes, len))
+        return 1;
+    return 0;
+}
+
+int CMS_unsigned_add1_attr_by_NID(CMS_SignerInfo *si,
+                                  int nid, int type,
+                                  const void *bytes, int len)
+{
+    if (X509at_add1_attr_by_NID(&si->unsignedAttrs, nid, type, bytes, len))
+        return 1;
+    return 0;
+}
+
+int CMS_unsigned_add1_attr_by_txt(CMS_SignerInfo *si,
+                                  const char *attrname, int type,
+                                  const void *bytes, int len)
+{
+    if (X509at_add1_attr_by_txt(&si->unsignedAttrs, attrname,
+                                type, bytes, len))
+        return 1;
+    return 0;
+}
+
+void *CMS_unsigned_get0_data_by_OBJ(CMS_SignerInfo *si, ASN1_OBJECT *oid,
+                                    int lastpos, int type)
+{
+    return X509at_get0_data_by_OBJ(si->unsignedAttrs, oid, lastpos, type);
+}
+
+/* Specific attribute cases */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_cd.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_cd.c
new file mode 100644
index 000000000..f05e30841
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_cd.c
@@ -0,0 +1,82 @@
+/*
+ * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/pem.h>
+#include <openssl/x509v3.h>
+#include <openssl/err.h>
+#include <openssl/cms.h>
+#include <openssl/bio.h>
+#include <openssl/comp.h>
+#include "cms_lcl.h"
+
+#ifdef ZLIB
+
+/* CMS CompressedData Utilities */
+
+CMS_ContentInfo *cms_CompressedData_create(int comp_nid)
+{
+    CMS_ContentInfo *cms;
+    CMS_CompressedData *cd;
+    /*
+     * Will need something cleverer if there is ever more than one
+     * compression algorithm or parameters have some meaning...
+     */
+    if (comp_nid != NID_zlib_compression) {
+        CMSerr(CMS_F_CMS_COMPRESSEDDATA_CREATE,
+               CMS_R_UNSUPPORTED_COMPRESSION_ALGORITHM);
+        return NULL;
+    }
+    cms = CMS_ContentInfo_new();
+    if (cms == NULL)
+        return NULL;
+
+    cd = M_ASN1_new_of(CMS_CompressedData);
+
+    if (cd == NULL)
+        goto err;
+
+    cms->contentType = OBJ_nid2obj(NID_id_smime_ct_compressedData);
+    cms->d.compressedData = cd;
+
+    cd->version = 0;
+
+    X509_ALGOR_set0(cd->compressionAlgorithm,
+                    OBJ_nid2obj(NID_zlib_compression), V_ASN1_UNDEF, NULL);
+
+    cd->encapContentInfo->eContentType = OBJ_nid2obj(NID_pkcs7_data);
+
+    return cms;
+
+ err:
+    CMS_ContentInfo_free(cms);
+    return NULL;
+}
+
+BIO *cms_CompressedData_init_bio(CMS_ContentInfo *cms)
+{
+    CMS_CompressedData *cd;
+    const ASN1_OBJECT *compoid;
+    if (OBJ_obj2nid(cms->contentType) != NID_id_smime_ct_compressedData) {
+        CMSerr(CMS_F_CMS_COMPRESSEDDATA_INIT_BIO,
+               CMS_R_CONTENT_TYPE_NOT_COMPRESSED_DATA);
+        return NULL;
+    }
+    cd = cms->d.compressedData;
+    X509_ALGOR_get0(&compoid, NULL, NULL, cd->compressionAlgorithm);
+    if (OBJ_obj2nid(compoid) != NID_zlib_compression) {
+        CMSerr(CMS_F_CMS_COMPRESSEDDATA_INIT_BIO,
+               CMS_R_UNSUPPORTED_COMPRESSION_ALGORITHM);
+        return NULL;
+    }
+    return BIO_new(BIO_f_zlib());
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_dd.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_dd.c
new file mode 100644
index 000000000..5da6802fc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_dd.c
@@ -0,0 +1,99 @@
+/*
+ * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/pem.h>
+#include <openssl/x509v3.h>
+#include <openssl/err.h>
+#include <openssl/cms.h>
+#include "cms_lcl.h"
+
+/* CMS DigestedData Utilities */
+
+CMS_ContentInfo *cms_DigestedData_create(const EVP_MD *md)
+{
+    CMS_ContentInfo *cms;
+    CMS_DigestedData *dd;
+    cms = CMS_ContentInfo_new();
+    if (cms == NULL)
+        return NULL;
+
+    dd = M_ASN1_new_of(CMS_DigestedData);
+
+    if (dd == NULL)
+        goto err;
+
+    cms->contentType = OBJ_nid2obj(NID_pkcs7_digest);
+    cms->d.digestedData = dd;
+
+    dd->version = 0;
+    dd->encapContentInfo->eContentType = OBJ_nid2obj(NID_pkcs7_data);
+
+    X509_ALGOR_set_md(dd->digestAlgorithm, md);
+
+    return cms;
+
+ err:
+    CMS_ContentInfo_free(cms);
+    return NULL;
+}
+
+BIO *cms_DigestedData_init_bio(CMS_ContentInfo *cms)
+{
+    CMS_DigestedData *dd;
+    dd = cms->d.digestedData;
+    return cms_DigestAlgorithm_init_bio(dd->digestAlgorithm);
+}
+
+int cms_DigestedData_do_final(CMS_ContentInfo *cms, BIO *chain, int verify)
+{
+    EVP_MD_CTX *mctx = EVP_MD_CTX_new();
+    unsigned char md[EVP_MAX_MD_SIZE];
+    unsigned int mdlen;
+    int r = 0;
+    CMS_DigestedData *dd;
+
+    if (mctx == NULL) {
+        CMSerr(CMS_F_CMS_DIGESTEDDATA_DO_FINAL, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    dd = cms->d.digestedData;
+
+    if (!cms_DigestAlgorithm_find_ctx(mctx, chain, dd->digestAlgorithm))
+        goto err;
+
+    if (EVP_DigestFinal_ex(mctx, md, &mdlen) <= 0)
+        goto err;
+
+    if (verify) {
+        if (mdlen != (unsigned int)dd->digest->length) {
+            CMSerr(CMS_F_CMS_DIGESTEDDATA_DO_FINAL,
+                   CMS_R_MESSAGEDIGEST_WRONG_LENGTH);
+            goto err;
+        }
+
+        if (memcmp(md, dd->digest->data, mdlen))
+            CMSerr(CMS_F_CMS_DIGESTEDDATA_DO_FINAL,
+                   CMS_R_VERIFICATION_FAILURE);
+        else
+            r = 1;
+    } else {
+        if (!ASN1_STRING_set(dd->digest, md, mdlen))
+            goto err;
+        r = 1;
+    }
+
+ err:
+    EVP_MD_CTX_free(mctx);
+
+    return r;
+
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_enc.c
new file mode 100644
index 000000000..a1719830e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_enc.c
@@ -0,0 +1,213 @@
+/*
+ * Copyright 2008-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/pem.h>
+#include <openssl/x509v3.h>
+#include <openssl/err.h>
+#include <openssl/cms.h>
+#include <openssl/rand.h>
+#include "cms_lcl.h"
+
+/* CMS EncryptedData Utilities */
+
+/* Return BIO based on EncryptedContentInfo and key */
+
+BIO *cms_EncryptedContent_init_bio(CMS_EncryptedContentInfo *ec)
+{
+    BIO *b;
+    EVP_CIPHER_CTX *ctx;
+    const EVP_CIPHER *ciph;
+    X509_ALGOR *calg = ec->contentEncryptionAlgorithm;
+    unsigned char iv[EVP_MAX_IV_LENGTH], *piv = NULL;
+    unsigned char *tkey = NULL;
+    size_t tkeylen = 0;
+
+    int ok = 0;
+
+    int enc, keep_key = 0;
+
+    enc = ec->cipher ? 1 : 0;
+
+    b = BIO_new(BIO_f_cipher());
+    if (b == NULL) {
+        CMSerr(CMS_F_CMS_ENCRYPTEDCONTENT_INIT_BIO, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    BIO_get_cipher_ctx(b, &ctx);
+
+    if (enc) {
+        ciph = ec->cipher;
+        /*
+         * If not keeping key set cipher to NULL so subsequent calls decrypt.
+         */
+        if (ec->key)
+            ec->cipher = NULL;
+    } else {
+        ciph = EVP_get_cipherbyobj(calg->algorithm);
+
+        if (!ciph) {
+            CMSerr(CMS_F_CMS_ENCRYPTEDCONTENT_INIT_BIO, CMS_R_UNKNOWN_CIPHER);
+            goto err;
+        }
+    }
+
+    if (EVP_CipherInit_ex(ctx, ciph, NULL, NULL, NULL, enc) <= 0) {
+        CMSerr(CMS_F_CMS_ENCRYPTEDCONTENT_INIT_BIO,
+               CMS_R_CIPHER_INITIALISATION_ERROR);
+        goto err;
+    }
+
+    if (enc) {
+        int ivlen;
+        calg->algorithm = OBJ_nid2obj(EVP_CIPHER_CTX_type(ctx));
+        /* Generate a random IV if we need one */
+        ivlen = EVP_CIPHER_CTX_iv_length(ctx);
+        if (ivlen > 0) {
+            if (RAND_bytes(iv, ivlen) <= 0)
+                goto err;
+            piv = iv;
+        }
+    } else if (EVP_CIPHER_asn1_to_param(ctx, calg->parameter) <= 0) {
+        CMSerr(CMS_F_CMS_ENCRYPTEDCONTENT_INIT_BIO,
+               CMS_R_CIPHER_PARAMETER_INITIALISATION_ERROR);
+        goto err;
+    }
+    tkeylen = EVP_CIPHER_CTX_key_length(ctx);
+    /* Generate random session key */
+    if (!enc || !ec->key) {
+        tkey = OPENSSL_malloc(tkeylen);
+        if (tkey == NULL) {
+            CMSerr(CMS_F_CMS_ENCRYPTEDCONTENT_INIT_BIO, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        if (EVP_CIPHER_CTX_rand_key(ctx, tkey) <= 0)
+            goto err;
+    }
+
+    if (!ec->key) {
+        ec->key = tkey;
+        ec->keylen = tkeylen;
+        tkey = NULL;
+        if (enc)
+            keep_key = 1;
+        else
+            ERR_clear_error();
+
+    }
+
+    if (ec->keylen != tkeylen) {
+        /* If necessary set key length */
+        if (EVP_CIPHER_CTX_set_key_length(ctx, ec->keylen) <= 0) {
+            /*
+             * Only reveal failure if debugging so we don't leak information
+             * which may be useful in MMA.
+             */
+            if (enc || ec->debug) {
+                CMSerr(CMS_F_CMS_ENCRYPTEDCONTENT_INIT_BIO,
+                       CMS_R_INVALID_KEY_LENGTH);
+                goto err;
+            } else {
+                /* Use random key */
+                OPENSSL_clear_free(ec->key, ec->keylen);
+                ec->key = tkey;
+                ec->keylen = tkeylen;
+                tkey = NULL;
+                ERR_clear_error();
+            }
+        }
+    }
+
+    if (EVP_CipherInit_ex(ctx, NULL, NULL, ec->key, piv, enc) <= 0) {
+        CMSerr(CMS_F_CMS_ENCRYPTEDCONTENT_INIT_BIO,
+               CMS_R_CIPHER_INITIALISATION_ERROR);
+        goto err;
+    }
+    if (enc) {
+        calg->parameter = ASN1_TYPE_new();
+        if (calg->parameter == NULL) {
+            CMSerr(CMS_F_CMS_ENCRYPTEDCONTENT_INIT_BIO, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        if (EVP_CIPHER_param_to_asn1(ctx, calg->parameter) <= 0) {
+            CMSerr(CMS_F_CMS_ENCRYPTEDCONTENT_INIT_BIO,
+                   CMS_R_CIPHER_PARAMETER_INITIALISATION_ERROR);
+            goto err;
+        }
+        /* If parameter type not set omit parameter */
+        if (calg->parameter->type == V_ASN1_UNDEF) {
+            ASN1_TYPE_free(calg->parameter);
+            calg->parameter = NULL;
+        }
+    }
+    ok = 1;
+
+ err:
+    if (!keep_key || !ok) {
+        OPENSSL_clear_free(ec->key, ec->keylen);
+        ec->key = NULL;
+    }
+    OPENSSL_clear_free(tkey, tkeylen);
+    if (ok)
+        return b;
+    BIO_free(b);
+    return NULL;
+}
+
+int cms_EncryptedContent_init(CMS_EncryptedContentInfo *ec,
+                              const EVP_CIPHER *cipher,
+                              const unsigned char *key, size_t keylen)
+{
+    ec->cipher = cipher;
+    if (key) {
+        if ((ec->key = OPENSSL_malloc(keylen)) == NULL) {
+            CMSerr(CMS_F_CMS_ENCRYPTEDCONTENT_INIT, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        memcpy(ec->key, key, keylen);
+    }
+    ec->keylen = keylen;
+    if (cipher)
+        ec->contentType = OBJ_nid2obj(NID_pkcs7_data);
+    return 1;
+}
+
+int CMS_EncryptedData_set1_key(CMS_ContentInfo *cms, const EVP_CIPHER *ciph,
+                               const unsigned char *key, size_t keylen)
+{
+    CMS_EncryptedContentInfo *ec;
+    if (!key || !keylen) {
+        CMSerr(CMS_F_CMS_ENCRYPTEDDATA_SET1_KEY, CMS_R_NO_KEY);
+        return 0;
+    }
+    if (ciph) {
+        cms->d.encryptedData = M_ASN1_new_of(CMS_EncryptedData);
+        if (!cms->d.encryptedData) {
+            CMSerr(CMS_F_CMS_ENCRYPTEDDATA_SET1_KEY, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        cms->contentType = OBJ_nid2obj(NID_pkcs7_encrypted);
+        cms->d.encryptedData->version = 0;
+    } else if (OBJ_obj2nid(cms->contentType) != NID_pkcs7_encrypted) {
+        CMSerr(CMS_F_CMS_ENCRYPTEDDATA_SET1_KEY, CMS_R_NOT_ENCRYPTED_DATA);
+        return 0;
+    }
+    ec = cms->d.encryptedData->encryptedContentInfo;
+    return cms_EncryptedContent_init(ec, ciph, key, keylen);
+}
+
+BIO *cms_EncryptedData_init_bio(CMS_ContentInfo *cms)
+{
+    CMS_EncryptedData *enc = cms->d.encryptedData;
+    if (enc->encryptedContentInfo->cipher && enc->unprotectedAttrs)
+        enc->version = 2;
+    return cms_EncryptedContent_init_bio(enc->encryptedContentInfo);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_env.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_env.c
new file mode 100644
index 000000000..bb95af75e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_env.c
@@ -0,0 +1,903 @@
+/*
+ * Copyright 2008-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/pem.h>
+#include <openssl/x509v3.h>
+#include <openssl/err.h>
+#include <openssl/cms.h>
+#include <openssl/aes.h>
+#include "cms_lcl.h"
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+
+/* CMS EnvelopedData Utilities */
+
+CMS_EnvelopedData *cms_get0_enveloped(CMS_ContentInfo *cms)
+{
+    if (OBJ_obj2nid(cms->contentType) != NID_pkcs7_enveloped) {
+        CMSerr(CMS_F_CMS_GET0_ENVELOPED,
+               CMS_R_CONTENT_TYPE_NOT_ENVELOPED_DATA);
+        return NULL;
+    }
+    return cms->d.envelopedData;
+}
+
+static CMS_EnvelopedData *cms_enveloped_data_init(CMS_ContentInfo *cms)
+{
+    if (cms->d.other == NULL) {
+        cms->d.envelopedData = M_ASN1_new_of(CMS_EnvelopedData);
+        if (!cms->d.envelopedData) {
+            CMSerr(CMS_F_CMS_ENVELOPED_DATA_INIT, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+        cms->d.envelopedData->version = 0;
+        cms->d.envelopedData->encryptedContentInfo->contentType =
+            OBJ_nid2obj(NID_pkcs7_data);
+        ASN1_OBJECT_free(cms->contentType);
+        cms->contentType = OBJ_nid2obj(NID_pkcs7_enveloped);
+        return cms->d.envelopedData;
+    }
+    return cms_get0_enveloped(cms);
+}
+
+int cms_env_asn1_ctrl(CMS_RecipientInfo *ri, int cmd)
+{
+    EVP_PKEY *pkey;
+    int i;
+    if (ri->type == CMS_RECIPINFO_TRANS)
+        pkey = ri->d.ktri->pkey;
+    else if (ri->type == CMS_RECIPINFO_AGREE) {
+        EVP_PKEY_CTX *pctx = ri->d.kari->pctx;
+        if (!pctx)
+            return 0;
+        pkey = EVP_PKEY_CTX_get0_pkey(pctx);
+        if (!pkey)
+            return 0;
+    } else
+        return 0;
+    if (!pkey->ameth || !pkey->ameth->pkey_ctrl)
+        return 1;
+    i = pkey->ameth->pkey_ctrl(pkey, ASN1_PKEY_CTRL_CMS_ENVELOPE, cmd, ri);
+    if (i == -2) {
+        CMSerr(CMS_F_CMS_ENV_ASN1_CTRL,
+               CMS_R_NOT_SUPPORTED_FOR_THIS_KEY_TYPE);
+        return 0;
+    }
+    if (i <= 0) {
+        CMSerr(CMS_F_CMS_ENV_ASN1_CTRL, CMS_R_CTRL_FAILURE);
+        return 0;
+    }
+    return 1;
+}
+
+STACK_OF(CMS_RecipientInfo) *CMS_get0_RecipientInfos(CMS_ContentInfo *cms)
+{
+    CMS_EnvelopedData *env;
+    env = cms_get0_enveloped(cms);
+    if (!env)
+        return NULL;
+    return env->recipientInfos;
+}
+
+int CMS_RecipientInfo_type(CMS_RecipientInfo *ri)
+{
+    return ri->type;
+}
+
+EVP_PKEY_CTX *CMS_RecipientInfo_get0_pkey_ctx(CMS_RecipientInfo *ri)
+{
+    if (ri->type == CMS_RECIPINFO_TRANS)
+        return ri->d.ktri->pctx;
+    else if (ri->type == CMS_RECIPINFO_AGREE)
+        return ri->d.kari->pctx;
+    return NULL;
+}
+
+CMS_ContentInfo *CMS_EnvelopedData_create(const EVP_CIPHER *cipher)
+{
+    CMS_ContentInfo *cms;
+    CMS_EnvelopedData *env;
+    cms = CMS_ContentInfo_new();
+    if (cms == NULL)
+        goto merr;
+    env = cms_enveloped_data_init(cms);
+    if (env == NULL)
+        goto merr;
+    if (!cms_EncryptedContent_init(env->encryptedContentInfo,
+                                   cipher, NULL, 0))
+        goto merr;
+    return cms;
+ merr:
+    CMS_ContentInfo_free(cms);
+    CMSerr(CMS_F_CMS_ENVELOPEDDATA_CREATE, ERR_R_MALLOC_FAILURE);
+    return NULL;
+}
+
+/* Key Transport Recipient Info (KTRI) routines */
+
+/* Initialise a ktri based on passed certificate and key */
+
+static int cms_RecipientInfo_ktri_init(CMS_RecipientInfo *ri, X509 *recip,
+                                       EVP_PKEY *pk, unsigned int flags)
+{
+    CMS_KeyTransRecipientInfo *ktri;
+    int idtype;
+
+    ri->d.ktri = M_ASN1_new_of(CMS_KeyTransRecipientInfo);
+    if (!ri->d.ktri)
+        return 0;
+    ri->type = CMS_RECIPINFO_TRANS;
+
+    ktri = ri->d.ktri;
+
+    if (flags & CMS_USE_KEYID) {
+        ktri->version = 2;
+        idtype = CMS_RECIPINFO_KEYIDENTIFIER;
+    } else {
+        ktri->version = 0;
+        idtype = CMS_RECIPINFO_ISSUER_SERIAL;
+    }
+
+    /*
+     * Not a typo: RecipientIdentifier and SignerIdentifier are the same
+     * structure.
+     */
+
+    if (!cms_set1_SignerIdentifier(ktri->rid, recip, idtype))
+        return 0;
+
+    X509_up_ref(recip);
+    EVP_PKEY_up_ref(pk);
+
+    ktri->pkey = pk;
+    ktri->recip = recip;
+
+    if (flags & CMS_KEY_PARAM) {
+        ktri->pctx = EVP_PKEY_CTX_new(ktri->pkey, NULL);
+        if (ktri->pctx == NULL)
+            return 0;
+        if (EVP_PKEY_encrypt_init(ktri->pctx) <= 0)
+            return 0;
+    } else if (!cms_env_asn1_ctrl(ri, 0))
+        return 0;
+    return 1;
+}
+
+/*
+ * Add a recipient certificate using appropriate type of RecipientInfo
+ */
+
+CMS_RecipientInfo *CMS_add1_recipient_cert(CMS_ContentInfo *cms,
+                                           X509 *recip, unsigned int flags)
+{
+    CMS_RecipientInfo *ri = NULL;
+    CMS_EnvelopedData *env;
+    EVP_PKEY *pk = NULL;
+    env = cms_get0_enveloped(cms);
+    if (!env)
+        goto err;
+
+    /* Initialize recipient info */
+    ri = M_ASN1_new_of(CMS_RecipientInfo);
+    if (!ri)
+        goto merr;
+
+    pk = X509_get0_pubkey(recip);
+    if (!pk) {
+        CMSerr(CMS_F_CMS_ADD1_RECIPIENT_CERT, CMS_R_ERROR_GETTING_PUBLIC_KEY);
+        goto err;
+    }
+
+    switch (cms_pkey_get_ri_type(pk)) {
+
+    case CMS_RECIPINFO_TRANS:
+        if (!cms_RecipientInfo_ktri_init(ri, recip, pk, flags))
+            goto err;
+        break;
+
+    case CMS_RECIPINFO_AGREE:
+        if (!cms_RecipientInfo_kari_init(ri, recip, pk, flags))
+            goto err;
+        break;
+
+    default:
+        CMSerr(CMS_F_CMS_ADD1_RECIPIENT_CERT,
+               CMS_R_NOT_SUPPORTED_FOR_THIS_KEY_TYPE);
+        goto err;
+
+    }
+
+    if (!sk_CMS_RecipientInfo_push(env->recipientInfos, ri))
+        goto merr;
+
+    return ri;
+
+ merr:
+    CMSerr(CMS_F_CMS_ADD1_RECIPIENT_CERT, ERR_R_MALLOC_FAILURE);
+ err:
+    M_ASN1_free_of(ri, CMS_RecipientInfo);
+    return NULL;
+
+}
+
+int CMS_RecipientInfo_ktri_get0_algs(CMS_RecipientInfo *ri,
+                                     EVP_PKEY **pk, X509 **recip,
+                                     X509_ALGOR **palg)
+{
+    CMS_KeyTransRecipientInfo *ktri;
+    if (ri->type != CMS_RECIPINFO_TRANS) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_GET0_ALGS,
+               CMS_R_NOT_KEY_TRANSPORT);
+        return 0;
+    }
+
+    ktri = ri->d.ktri;
+
+    if (pk)
+        *pk = ktri->pkey;
+    if (recip)
+        *recip = ktri->recip;
+    if (palg)
+        *palg = ktri->keyEncryptionAlgorithm;
+    return 1;
+}
+
+int CMS_RecipientInfo_ktri_get0_signer_id(CMS_RecipientInfo *ri,
+                                          ASN1_OCTET_STRING **keyid,
+                                          X509_NAME **issuer,
+                                          ASN1_INTEGER **sno)
+{
+    CMS_KeyTransRecipientInfo *ktri;
+    if (ri->type != CMS_RECIPINFO_TRANS) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_GET0_SIGNER_ID,
+               CMS_R_NOT_KEY_TRANSPORT);
+        return 0;
+    }
+    ktri = ri->d.ktri;
+
+    return cms_SignerIdentifier_get0_signer_id(ktri->rid, keyid, issuer, sno);
+}
+
+int CMS_RecipientInfo_ktri_cert_cmp(CMS_RecipientInfo *ri, X509 *cert)
+{
+    if (ri->type != CMS_RECIPINFO_TRANS) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_CERT_CMP,
+               CMS_R_NOT_KEY_TRANSPORT);
+        return -2;
+    }
+    return cms_SignerIdentifier_cert_cmp(ri->d.ktri->rid, cert);
+}
+
+int CMS_RecipientInfo_set0_pkey(CMS_RecipientInfo *ri, EVP_PKEY *pkey)
+{
+    if (ri->type != CMS_RECIPINFO_TRANS) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_SET0_PKEY, CMS_R_NOT_KEY_TRANSPORT);
+        return 0;
+    }
+    EVP_PKEY_free(ri->d.ktri->pkey);
+    ri->d.ktri->pkey = pkey;
+    return 1;
+}
+
+/* Encrypt content key in key transport recipient info */
+
+static int cms_RecipientInfo_ktri_encrypt(CMS_ContentInfo *cms,
+                                          CMS_RecipientInfo *ri)
+{
+    CMS_KeyTransRecipientInfo *ktri;
+    CMS_EncryptedContentInfo *ec;
+    EVP_PKEY_CTX *pctx;
+    unsigned char *ek = NULL;
+    size_t eklen;
+
+    int ret = 0;
+
+    if (ri->type != CMS_RECIPINFO_TRANS) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_ENCRYPT, CMS_R_NOT_KEY_TRANSPORT);
+        return 0;
+    }
+    ktri = ri->d.ktri;
+    ec = cms->d.envelopedData->encryptedContentInfo;
+
+    pctx = ktri->pctx;
+
+    if (pctx) {
+        if (!cms_env_asn1_ctrl(ri, 0))
+            goto err;
+    } else {
+        pctx = EVP_PKEY_CTX_new(ktri->pkey, NULL);
+        if (pctx == NULL)
+            return 0;
+
+        if (EVP_PKEY_encrypt_init(pctx) <= 0)
+            goto err;
+    }
+
+    if (EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_ENCRYPT,
+                          EVP_PKEY_CTRL_CMS_ENCRYPT, 0, ri) <= 0) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_ENCRYPT, CMS_R_CTRL_ERROR);
+        goto err;
+    }
+
+    if (EVP_PKEY_encrypt(pctx, NULL, &eklen, ec->key, ec->keylen) <= 0)
+        goto err;
+
+    ek = OPENSSL_malloc(eklen);
+
+    if (ek == NULL) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_ENCRYPT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (EVP_PKEY_encrypt(pctx, ek, &eklen, ec->key, ec->keylen) <= 0)
+        goto err;
+
+    ASN1_STRING_set0(ktri->encryptedKey, ek, eklen);
+    ek = NULL;
+
+    ret = 1;
+
+ err:
+    EVP_PKEY_CTX_free(pctx);
+    ktri->pctx = NULL;
+    OPENSSL_free(ek);
+    return ret;
+
+}
+
+/* Decrypt content key from KTRI */
+
+static int cms_RecipientInfo_ktri_decrypt(CMS_ContentInfo *cms,
+                                          CMS_RecipientInfo *ri)
+{
+    CMS_KeyTransRecipientInfo *ktri = ri->d.ktri;
+    EVP_PKEY *pkey = ktri->pkey;
+    unsigned char *ek = NULL;
+    size_t eklen;
+    int ret = 0;
+    CMS_EncryptedContentInfo *ec;
+    ec = cms->d.envelopedData->encryptedContentInfo;
+
+    if (ktri->pkey == NULL) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_DECRYPT, CMS_R_NO_PRIVATE_KEY);
+        return 0;
+    }
+
+    ktri->pctx = EVP_PKEY_CTX_new(pkey, NULL);
+    if (ktri->pctx == NULL)
+        return 0;
+
+    if (EVP_PKEY_decrypt_init(ktri->pctx) <= 0)
+        goto err;
+
+    if (!cms_env_asn1_ctrl(ri, 1))
+        goto err;
+
+    if (EVP_PKEY_CTX_ctrl(ktri->pctx, -1, EVP_PKEY_OP_DECRYPT,
+                          EVP_PKEY_CTRL_CMS_DECRYPT, 0, ri) <= 0) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_DECRYPT, CMS_R_CTRL_ERROR);
+        goto err;
+    }
+
+    if (EVP_PKEY_decrypt(ktri->pctx, NULL, &eklen,
+                         ktri->encryptedKey->data,
+                         ktri->encryptedKey->length) <= 0)
+        goto err;
+
+    ek = OPENSSL_malloc(eklen);
+
+    if (ek == NULL) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_DECRYPT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (EVP_PKEY_decrypt(ktri->pctx, ek, &eklen,
+                         ktri->encryptedKey->data,
+                         ktri->encryptedKey->length) <= 0) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_DECRYPT, CMS_R_CMS_LIB);
+        goto err;
+    }
+
+    ret = 1;
+
+    OPENSSL_clear_free(ec->key, ec->keylen);
+    ec->key = ek;
+    ec->keylen = eklen;
+
+ err:
+    EVP_PKEY_CTX_free(ktri->pctx);
+    ktri->pctx = NULL;
+    if (!ret)
+        OPENSSL_free(ek);
+
+    return ret;
+}
+
+/* Key Encrypted Key (KEK) RecipientInfo routines */
+
+int CMS_RecipientInfo_kekri_id_cmp(CMS_RecipientInfo *ri,
+                                   const unsigned char *id, size_t idlen)
+{
+    ASN1_OCTET_STRING tmp_os;
+    CMS_KEKRecipientInfo *kekri;
+    if (ri->type != CMS_RECIPINFO_KEK) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_ID_CMP, CMS_R_NOT_KEK);
+        return -2;
+    }
+    kekri = ri->d.kekri;
+    tmp_os.type = V_ASN1_OCTET_STRING;
+    tmp_os.flags = 0;
+    tmp_os.data = (unsigned char *)id;
+    tmp_os.length = (int)idlen;
+    return ASN1_OCTET_STRING_cmp(&tmp_os, kekri->kekid->keyIdentifier);
+}
+
+/* For now hard code AES key wrap info */
+
+static size_t aes_wrap_keylen(int nid)
+{
+    switch (nid) {
+    case NID_id_aes128_wrap:
+        return 16;
+
+    case NID_id_aes192_wrap:
+        return 24;
+
+    case NID_id_aes256_wrap:
+        return 32;
+
+    default:
+        return 0;
+    }
+}
+
+CMS_RecipientInfo *CMS_add0_recipient_key(CMS_ContentInfo *cms, int nid,
+                                          unsigned char *key, size_t keylen,
+                                          unsigned char *id, size_t idlen,
+                                          ASN1_GENERALIZEDTIME *date,
+                                          ASN1_OBJECT *otherTypeId,
+                                          ASN1_TYPE *otherType)
+{
+    CMS_RecipientInfo *ri = NULL;
+    CMS_EnvelopedData *env;
+    CMS_KEKRecipientInfo *kekri;
+    env = cms_get0_enveloped(cms);
+    if (!env)
+        goto err;
+
+    if (nid == NID_undef) {
+        switch (keylen) {
+        case 16:
+            nid = NID_id_aes128_wrap;
+            break;
+
+        case 24:
+            nid = NID_id_aes192_wrap;
+            break;
+
+        case 32:
+            nid = NID_id_aes256_wrap;
+            break;
+
+        default:
+            CMSerr(CMS_F_CMS_ADD0_RECIPIENT_KEY, CMS_R_INVALID_KEY_LENGTH);
+            goto err;
+        }
+
+    } else {
+
+        size_t exp_keylen = aes_wrap_keylen(nid);
+
+        if (!exp_keylen) {
+            CMSerr(CMS_F_CMS_ADD0_RECIPIENT_KEY,
+                   CMS_R_UNSUPPORTED_KEK_ALGORITHM);
+            goto err;
+        }
+
+        if (keylen != exp_keylen) {
+            CMSerr(CMS_F_CMS_ADD0_RECIPIENT_KEY, CMS_R_INVALID_KEY_LENGTH);
+            goto err;
+        }
+
+    }
+
+    /* Initialize recipient info */
+    ri = M_ASN1_new_of(CMS_RecipientInfo);
+    if (!ri)
+        goto merr;
+
+    ri->d.kekri = M_ASN1_new_of(CMS_KEKRecipientInfo);
+    if (!ri->d.kekri)
+        goto merr;
+    ri->type = CMS_RECIPINFO_KEK;
+
+    kekri = ri->d.kekri;
+
+    if (otherTypeId) {
+        kekri->kekid->other = M_ASN1_new_of(CMS_OtherKeyAttribute);
+        if (kekri->kekid->other == NULL)
+            goto merr;
+    }
+
+    if (!sk_CMS_RecipientInfo_push(env->recipientInfos, ri))
+        goto merr;
+
+    /* After this point no calls can fail */
+
+    kekri->version = 4;
+
+    kekri->key = key;
+    kekri->keylen = keylen;
+
+    ASN1_STRING_set0(kekri->kekid->keyIdentifier, id, idlen);
+
+    kekri->kekid->date = date;
+
+    if (kekri->kekid->other) {
+        kekri->kekid->other->keyAttrId = otherTypeId;
+        kekri->kekid->other->keyAttr = otherType;
+    }
+
+    X509_ALGOR_set0(kekri->keyEncryptionAlgorithm,
+                    OBJ_nid2obj(nid), V_ASN1_UNDEF, NULL);
+
+    return ri;
+
+ merr:
+    CMSerr(CMS_F_CMS_ADD0_RECIPIENT_KEY, ERR_R_MALLOC_FAILURE);
+ err:
+    M_ASN1_free_of(ri, CMS_RecipientInfo);
+    return NULL;
+
+}
+
+int CMS_RecipientInfo_kekri_get0_id(CMS_RecipientInfo *ri,
+                                    X509_ALGOR **palg,
+                                    ASN1_OCTET_STRING **pid,
+                                    ASN1_GENERALIZEDTIME **pdate,
+                                    ASN1_OBJECT **potherid,
+                                    ASN1_TYPE **pothertype)
+{
+    CMS_KEKIdentifier *rkid;
+    if (ri->type != CMS_RECIPINFO_KEK) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_GET0_ID, CMS_R_NOT_KEK);
+        return 0;
+    }
+    rkid = ri->d.kekri->kekid;
+    if (palg)
+        *palg = ri->d.kekri->keyEncryptionAlgorithm;
+    if (pid)
+        *pid = rkid->keyIdentifier;
+    if (pdate)
+        *pdate = rkid->date;
+    if (potherid) {
+        if (rkid->other)
+            *potherid = rkid->other->keyAttrId;
+        else
+            *potherid = NULL;
+    }
+    if (pothertype) {
+        if (rkid->other)
+            *pothertype = rkid->other->keyAttr;
+        else
+            *pothertype = NULL;
+    }
+    return 1;
+}
+
+int CMS_RecipientInfo_set0_key(CMS_RecipientInfo *ri,
+                               unsigned char *key, size_t keylen)
+{
+    CMS_KEKRecipientInfo *kekri;
+    if (ri->type != CMS_RECIPINFO_KEK) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_SET0_KEY, CMS_R_NOT_KEK);
+        return 0;
+    }
+
+    kekri = ri->d.kekri;
+    kekri->key = key;
+    kekri->keylen = keylen;
+    return 1;
+}
+
+/* Encrypt content key in KEK recipient info */
+
+static int cms_RecipientInfo_kekri_encrypt(CMS_ContentInfo *cms,
+                                           CMS_RecipientInfo *ri)
+{
+    CMS_EncryptedContentInfo *ec;
+    CMS_KEKRecipientInfo *kekri;
+    AES_KEY actx;
+    unsigned char *wkey = NULL;
+    int wkeylen;
+    int r = 0;
+
+    ec = cms->d.envelopedData->encryptedContentInfo;
+
+    kekri = ri->d.kekri;
+
+    if (!kekri->key) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_ENCRYPT, CMS_R_NO_KEY);
+        return 0;
+    }
+
+    if (AES_set_encrypt_key(kekri->key, kekri->keylen << 3, &actx)) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_ENCRYPT,
+               CMS_R_ERROR_SETTING_KEY);
+        goto err;
+    }
+
+    wkey = OPENSSL_malloc(ec->keylen + 8);
+
+    if (wkey == NULL) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_ENCRYPT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    wkeylen = AES_wrap_key(&actx, NULL, wkey, ec->key, ec->keylen);
+
+    if (wkeylen <= 0) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_ENCRYPT, CMS_R_WRAP_ERROR);
+        goto err;
+    }
+
+    ASN1_STRING_set0(kekri->encryptedKey, wkey, wkeylen);
+
+    r = 1;
+
+ err:
+
+    if (!r)
+        OPENSSL_free(wkey);
+    OPENSSL_cleanse(&actx, sizeof(actx));
+
+    return r;
+
+}
+
+/* Decrypt content key in KEK recipient info */
+
+static int cms_RecipientInfo_kekri_decrypt(CMS_ContentInfo *cms,
+                                           CMS_RecipientInfo *ri)
+{
+    CMS_EncryptedContentInfo *ec;
+    CMS_KEKRecipientInfo *kekri;
+    AES_KEY actx;
+    unsigned char *ukey = NULL;
+    int ukeylen;
+    int r = 0, wrap_nid;
+
+    ec = cms->d.envelopedData->encryptedContentInfo;
+
+    kekri = ri->d.kekri;
+
+    if (!kekri->key) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_DECRYPT, CMS_R_NO_KEY);
+        return 0;
+    }
+
+    wrap_nid = OBJ_obj2nid(kekri->keyEncryptionAlgorithm->algorithm);
+    if (aes_wrap_keylen(wrap_nid) != kekri->keylen) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_DECRYPT,
+               CMS_R_INVALID_KEY_LENGTH);
+        return 0;
+    }
+
+    /* If encrypted key length is invalid don't bother */
+
+    if (kekri->encryptedKey->length < 16) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_DECRYPT,
+               CMS_R_INVALID_ENCRYPTED_KEY_LENGTH);
+        goto err;
+    }
+
+    if (AES_set_decrypt_key(kekri->key, kekri->keylen << 3, &actx)) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_DECRYPT,
+               CMS_R_ERROR_SETTING_KEY);
+        goto err;
+    }
+
+    ukey = OPENSSL_malloc(kekri->encryptedKey->length - 8);
+
+    if (ukey == NULL) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_DECRYPT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    ukeylen = AES_unwrap_key(&actx, NULL, ukey,
+                             kekri->encryptedKey->data,
+                             kekri->encryptedKey->length);
+
+    if (ukeylen <= 0) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_DECRYPT, CMS_R_UNWRAP_ERROR);
+        goto err;
+    }
+
+    ec->key = ukey;
+    ec->keylen = ukeylen;
+
+    r = 1;
+
+ err:
+
+    if (!r)
+        OPENSSL_free(ukey);
+    OPENSSL_cleanse(&actx, sizeof(actx));
+
+    return r;
+
+}
+
+int CMS_RecipientInfo_decrypt(CMS_ContentInfo *cms, CMS_RecipientInfo *ri)
+{
+    switch (ri->type) {
+    case CMS_RECIPINFO_TRANS:
+        return cms_RecipientInfo_ktri_decrypt(cms, ri);
+
+    case CMS_RECIPINFO_KEK:
+        return cms_RecipientInfo_kekri_decrypt(cms, ri);
+
+    case CMS_RECIPINFO_PASS:
+        return cms_RecipientInfo_pwri_crypt(cms, ri, 0);
+
+    default:
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_DECRYPT,
+               CMS_R_UNSUPPORTED_RECIPIENTINFO_TYPE);
+        return 0;
+    }
+}
+
+int CMS_RecipientInfo_encrypt(CMS_ContentInfo *cms, CMS_RecipientInfo *ri)
+{
+    switch (ri->type) {
+    case CMS_RECIPINFO_TRANS:
+        return cms_RecipientInfo_ktri_encrypt(cms, ri);
+
+    case CMS_RECIPINFO_AGREE:
+        return cms_RecipientInfo_kari_encrypt(cms, ri);
+
+    case CMS_RECIPINFO_KEK:
+        return cms_RecipientInfo_kekri_encrypt(cms, ri);
+
+    case CMS_RECIPINFO_PASS:
+        return cms_RecipientInfo_pwri_crypt(cms, ri, 1);
+
+    default:
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_ENCRYPT,
+               CMS_R_UNSUPPORTED_RECIPIENT_TYPE);
+        return 0;
+    }
+}
+
+/* Check structures and fixup version numbers (if necessary) */
+
+static void cms_env_set_originfo_version(CMS_EnvelopedData *env)
+{
+    CMS_OriginatorInfo *org = env->originatorInfo;
+    int i;
+    if (org == NULL)
+        return;
+    for (i = 0; i < sk_CMS_CertificateChoices_num(org->certificates); i++) {
+        CMS_CertificateChoices *cch;
+        cch = sk_CMS_CertificateChoices_value(org->certificates, i);
+        if (cch->type == CMS_CERTCHOICE_OTHER) {
+            env->version = 4;
+            return;
+        } else if (cch->type == CMS_CERTCHOICE_V2ACERT) {
+            if (env->version < 3)
+                env->version = 3;
+        }
+    }
+
+    for (i = 0; i < sk_CMS_RevocationInfoChoice_num(org->crls); i++) {
+        CMS_RevocationInfoChoice *rch;
+        rch = sk_CMS_RevocationInfoChoice_value(org->crls, i);
+        if (rch->type == CMS_REVCHOICE_OTHER) {
+            env->version = 4;
+            return;
+        }
+    }
+}
+
+static void cms_env_set_version(CMS_EnvelopedData *env)
+{
+    int i;
+    CMS_RecipientInfo *ri;
+
+    /*
+     * Can't set version higher than 4 so if 4 or more already nothing to do.
+     */
+    if (env->version >= 4)
+        return;
+
+    cms_env_set_originfo_version(env);
+
+    if (env->version >= 3)
+        return;
+
+    for (i = 0; i < sk_CMS_RecipientInfo_num(env->recipientInfos); i++) {
+        ri = sk_CMS_RecipientInfo_value(env->recipientInfos, i);
+        if (ri->type == CMS_RECIPINFO_PASS || ri->type == CMS_RECIPINFO_OTHER) {
+            env->version = 3;
+            return;
+        } else if (ri->type != CMS_RECIPINFO_TRANS
+                   || ri->d.ktri->version != 0) {
+            env->version = 2;
+        }
+    }
+    if (env->originatorInfo || env->unprotectedAttrs)
+        env->version = 2;
+    if (env->version == 2)
+        return;
+    env->version = 0;
+}
+
+BIO *cms_EnvelopedData_init_bio(CMS_ContentInfo *cms)
+{
+    CMS_EncryptedContentInfo *ec;
+    STACK_OF(CMS_RecipientInfo) *rinfos;
+    CMS_RecipientInfo *ri;
+    int i, ok = 0;
+    BIO *ret;
+
+    /* Get BIO first to set up key */
+
+    ec = cms->d.envelopedData->encryptedContentInfo;
+    ret = cms_EncryptedContent_init_bio(ec);
+
+    /* If error or no cipher end of processing */
+
+    if (!ret || !ec->cipher)
+        return ret;
+
+    /* Now encrypt content key according to each RecipientInfo type */
+
+    rinfos = cms->d.envelopedData->recipientInfos;
+
+    for (i = 0; i < sk_CMS_RecipientInfo_num(rinfos); i++) {
+        ri = sk_CMS_RecipientInfo_value(rinfos, i);
+        if (CMS_RecipientInfo_encrypt(cms, ri) <= 0) {
+            CMSerr(CMS_F_CMS_ENVELOPEDDATA_INIT_BIO,
+                   CMS_R_ERROR_SETTING_RECIPIENTINFO);
+            goto err;
+        }
+    }
+    cms_env_set_version(cms->d.envelopedData);
+
+    ok = 1;
+
+ err:
+    ec->cipher = NULL;
+    OPENSSL_clear_free(ec->key, ec->keylen);
+    ec->key = NULL;
+    ec->keylen = 0;
+    if (ok)
+        return ret;
+    BIO_free(ret);
+    return NULL;
+
+}
+
+/*
+ * Get RecipientInfo type (if any) supported by a key (public or private). To
+ * retain compatibility with previous behaviour if the ctrl value isn't
+ * supported we assume key transport.
+ */
+int cms_pkey_get_ri_type(EVP_PKEY *pk)
+{
+    if (pk->ameth && pk->ameth->pkey_ctrl) {
+        int i, r;
+        i = pk->ameth->pkey_ctrl(pk, ASN1_PKEY_CTRL_CMS_RI_TYPE, 0, &r);
+        if (i > 0)
+            return r;
+    }
+    return CMS_RECIPINFO_TRANS;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_err.c
new file mode 100644
index 000000000..4432b471e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_err.c
@@ -0,0 +1,294 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/cmserr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA CMS_str_functs[] = {
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CHECK_CONTENT, 0), "check_content"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ADD0_CERT, 0), "CMS_add0_cert"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ADD0_RECIPIENT_KEY, 0),
+     "CMS_add0_recipient_key"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ADD0_RECIPIENT_PASSWORD, 0),
+     "CMS_add0_recipient_password"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ADD1_RECEIPTREQUEST, 0),
+     "CMS_add1_ReceiptRequest"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ADD1_RECIPIENT_CERT, 0),
+     "CMS_add1_recipient_cert"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ADD1_SIGNER, 0), "CMS_add1_signer"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ADD1_SIGNINGTIME, 0),
+     "cms_add1_signingTime"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_COMPRESS, 0), "CMS_compress"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_COMPRESSEDDATA_CREATE, 0),
+     "cms_CompressedData_create"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_COMPRESSEDDATA_INIT_BIO, 0),
+     "cms_CompressedData_init_bio"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_COPY_CONTENT, 0), "cms_copy_content"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_COPY_MESSAGEDIGEST, 0),
+     "cms_copy_messageDigest"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_DATA, 0), "CMS_data"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_DATAFINAL, 0), "CMS_dataFinal"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_DATAINIT, 0), "CMS_dataInit"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_DECRYPT, 0), "CMS_decrypt"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_DECRYPT_SET1_KEY, 0),
+     "CMS_decrypt_set1_key"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_DECRYPT_SET1_PASSWORD, 0),
+     "CMS_decrypt_set1_password"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_DECRYPT_SET1_PKEY, 0),
+     "CMS_decrypt_set1_pkey"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_DIGESTALGORITHM_FIND_CTX, 0),
+     "cms_DigestAlgorithm_find_ctx"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_DIGESTALGORITHM_INIT_BIO, 0),
+     "cms_DigestAlgorithm_init_bio"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_DIGESTEDDATA_DO_FINAL, 0),
+     "cms_DigestedData_do_final"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_DIGEST_VERIFY, 0), "CMS_digest_verify"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ENCODE_RECEIPT, 0), "cms_encode_Receipt"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ENCRYPT, 0), "CMS_encrypt"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ENCRYPTEDCONTENT_INIT, 0),
+     "cms_EncryptedContent_init"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ENCRYPTEDCONTENT_INIT_BIO, 0),
+     "cms_EncryptedContent_init_bio"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ENCRYPTEDDATA_DECRYPT, 0),
+     "CMS_EncryptedData_decrypt"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ENCRYPTEDDATA_ENCRYPT, 0),
+     "CMS_EncryptedData_encrypt"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ENCRYPTEDDATA_SET1_KEY, 0),
+     "CMS_EncryptedData_set1_key"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ENVELOPEDDATA_CREATE, 0),
+     "CMS_EnvelopedData_create"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ENVELOPEDDATA_INIT_BIO, 0),
+     "cms_EnvelopedData_init_bio"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ENVELOPED_DATA_INIT, 0),
+     "cms_enveloped_data_init"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_ENV_ASN1_CTRL, 0), "cms_env_asn1_ctrl"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_FINAL, 0), "CMS_final"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_GET0_CERTIFICATE_CHOICES, 0),
+     "cms_get0_certificate_choices"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_GET0_CONTENT, 0), "CMS_get0_content"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_GET0_ECONTENT_TYPE, 0),
+     "cms_get0_econtent_type"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_GET0_ENVELOPED, 0), "cms_get0_enveloped"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_GET0_REVOCATION_CHOICES, 0),
+     "cms_get0_revocation_choices"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_GET0_SIGNED, 0), "cms_get0_signed"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_MSGSIGDIGEST_ADD1, 0),
+     "cms_msgSigDigest_add1"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECEIPTREQUEST_CREATE0, 0),
+     "CMS_ReceiptRequest_create0"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECEIPT_VERIFY, 0), "cms_Receipt_verify"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_DECRYPT, 0),
+     "CMS_RecipientInfo_decrypt"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_ENCRYPT, 0),
+     "CMS_RecipientInfo_encrypt"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_KARI_ENCRYPT, 0),
+     "cms_RecipientInfo_kari_encrypt"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_KARI_GET0_ALG, 0),
+     "CMS_RecipientInfo_kari_get0_alg"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_KARI_GET0_ORIG_ID, 0),
+     "CMS_RecipientInfo_kari_get0_orig_id"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_KARI_GET0_REKS, 0),
+     "CMS_RecipientInfo_kari_get0_reks"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_KARI_ORIG_ID_CMP, 0),
+     "CMS_RecipientInfo_kari_orig_id_cmp"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_KEKRI_DECRYPT, 0),
+     "cms_RecipientInfo_kekri_decrypt"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_KEKRI_ENCRYPT, 0),
+     "cms_RecipientInfo_kekri_encrypt"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_KEKRI_GET0_ID, 0),
+     "CMS_RecipientInfo_kekri_get0_id"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_KEKRI_ID_CMP, 0),
+     "CMS_RecipientInfo_kekri_id_cmp"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_KTRI_CERT_CMP, 0),
+     "CMS_RecipientInfo_ktri_cert_cmp"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_KTRI_DECRYPT, 0),
+     "cms_RecipientInfo_ktri_decrypt"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_KTRI_ENCRYPT, 0),
+     "cms_RecipientInfo_ktri_encrypt"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_KTRI_GET0_ALGS, 0),
+     "CMS_RecipientInfo_ktri_get0_algs"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_KTRI_GET0_SIGNER_ID, 0),
+     "CMS_RecipientInfo_ktri_get0_signer_id"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_PWRI_CRYPT, 0),
+     "cms_RecipientInfo_pwri_crypt"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_SET0_KEY, 0),
+     "CMS_RecipientInfo_set0_key"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_SET0_PASSWORD, 0),
+     "CMS_RecipientInfo_set0_password"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_RECIPIENTINFO_SET0_PKEY, 0),
+     "CMS_RecipientInfo_set0_pkey"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_SD_ASN1_CTRL, 0), "cms_sd_asn1_ctrl"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_SET1_IAS, 0), "cms_set1_ias"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_SET1_KEYID, 0), "cms_set1_keyid"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_SET1_SIGNERIDENTIFIER, 0),
+     "cms_set1_SignerIdentifier"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_SET_DETACHED, 0), "CMS_set_detached"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_SIGN, 0), "CMS_sign"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_SIGNED_DATA_INIT, 0),
+     "cms_signed_data_init"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_SIGNERINFO_CONTENT_SIGN, 0),
+     "cms_SignerInfo_content_sign"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_SIGNERINFO_SIGN, 0),
+     "CMS_SignerInfo_sign"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_SIGNERINFO_VERIFY, 0),
+     "CMS_SignerInfo_verify"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_SIGNERINFO_VERIFY_CERT, 0),
+     "cms_signerinfo_verify_cert"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT, 0),
+     "CMS_SignerInfo_verify_content"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_SIGN_RECEIPT, 0), "CMS_sign_receipt"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_STREAM, 0), "CMS_stream"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_UNCOMPRESS, 0), "CMS_uncompress"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_CMS_VERIFY, 0), "CMS_verify"},
+    {ERR_PACK(ERR_LIB_CMS, CMS_F_KEK_UNWRAP_KEY, 0), "kek_unwrap_key"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA CMS_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_ADD_SIGNER_ERROR), "add signer error"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_CERTIFICATE_ALREADY_PRESENT),
+    "certificate already present"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_CERTIFICATE_HAS_NO_KEYID),
+    "certificate has no keyid"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_CERTIFICATE_VERIFY_ERROR),
+    "certificate verify error"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_CIPHER_INITIALISATION_ERROR),
+    "cipher initialisation error"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_CIPHER_PARAMETER_INITIALISATION_ERROR),
+    "cipher parameter initialisation error"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_CMS_DATAFINAL_ERROR),
+    "cms datafinal error"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_CMS_LIB), "cms lib"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_CONTENTIDENTIFIER_MISMATCH),
+    "contentidentifier mismatch"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_CONTENT_NOT_FOUND), "content not found"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_CONTENT_TYPE_MISMATCH),
+    "content type mismatch"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_CONTENT_TYPE_NOT_COMPRESSED_DATA),
+    "content type not compressed data"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_CONTENT_TYPE_NOT_ENVELOPED_DATA),
+    "content type not enveloped data"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_CONTENT_TYPE_NOT_SIGNED_DATA),
+    "content type not signed data"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_CONTENT_VERIFY_ERROR),
+    "content verify error"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_CTRL_ERROR), "ctrl error"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_CTRL_FAILURE), "ctrl failure"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_DECRYPT_ERROR), "decrypt error"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_ERROR_GETTING_PUBLIC_KEY),
+    "error getting public key"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_ERROR_READING_MESSAGEDIGEST_ATTRIBUTE),
+    "error reading messagedigest attribute"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_ERROR_SETTING_KEY), "error setting key"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_ERROR_SETTING_RECIPIENTINFO),
+    "error setting recipientinfo"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_INVALID_ENCRYPTED_KEY_LENGTH),
+    "invalid encrypted key length"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_INVALID_KEY_ENCRYPTION_PARAMETER),
+    "invalid key encryption parameter"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_INVALID_KEY_LENGTH), "invalid key length"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_MD_BIO_INIT_ERROR), "md bio init error"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_MESSAGEDIGEST_ATTRIBUTE_WRONG_LENGTH),
+    "messagedigest attribute wrong length"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_MESSAGEDIGEST_WRONG_LENGTH),
+    "messagedigest wrong length"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_MSGSIGDIGEST_ERROR), "msgsigdigest error"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_MSGSIGDIGEST_VERIFICATION_FAILURE),
+    "msgsigdigest verification failure"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_MSGSIGDIGEST_WRONG_LENGTH),
+    "msgsigdigest wrong length"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NEED_ONE_SIGNER), "need one signer"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NOT_A_SIGNED_RECEIPT),
+    "not a signed receipt"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NOT_ENCRYPTED_DATA), "not encrypted data"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NOT_KEK), "not kek"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NOT_KEY_AGREEMENT), "not key agreement"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NOT_KEY_TRANSPORT), "not key transport"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NOT_PWRI), "not pwri"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NOT_SUPPORTED_FOR_THIS_KEY_TYPE),
+    "not supported for this key type"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NO_CIPHER), "no cipher"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NO_CONTENT), "no content"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NO_CONTENT_TYPE), "no content type"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NO_DEFAULT_DIGEST), "no default digest"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NO_DIGEST_SET), "no digest set"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NO_KEY), "no key"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NO_KEY_OR_CERT), "no key or cert"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NO_MATCHING_DIGEST), "no matching digest"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NO_MATCHING_RECIPIENT),
+    "no matching recipient"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NO_MATCHING_SIGNATURE),
+    "no matching signature"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NO_MSGSIGDIGEST), "no msgsigdigest"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NO_PASSWORD), "no password"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NO_PRIVATE_KEY), "no private key"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NO_PUBLIC_KEY), "no public key"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NO_RECEIPT_REQUEST), "no receipt request"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_NO_SIGNERS), "no signers"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE),
+    "private key does not match certificate"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_RECEIPT_DECODE_ERROR),
+    "receipt decode error"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_RECIPIENT_ERROR), "recipient error"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_SIGNER_CERTIFICATE_NOT_FOUND),
+    "signer certificate not found"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_SIGNFINAL_ERROR), "signfinal error"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_SMIME_TEXT_ERROR), "smime text error"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_STORE_INIT_ERROR), "store init error"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_TYPE_NOT_COMPRESSED_DATA),
+    "type not compressed data"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_TYPE_NOT_DATA), "type not data"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_TYPE_NOT_DIGESTED_DATA),
+    "type not digested data"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_TYPE_NOT_ENCRYPTED_DATA),
+    "type not encrypted data"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_TYPE_NOT_ENVELOPED_DATA),
+    "type not enveloped data"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_UNABLE_TO_FINALIZE_CONTEXT),
+    "unable to finalize context"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_UNKNOWN_CIPHER), "unknown cipher"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_UNKNOWN_DIGEST_ALGORITHM),
+    "unknown digest algorithm"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_UNKNOWN_ID), "unknown id"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_UNSUPPORTED_COMPRESSION_ALGORITHM),
+    "unsupported compression algorithm"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_UNSUPPORTED_CONTENT_TYPE),
+    "unsupported content type"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_UNSUPPORTED_KEK_ALGORITHM),
+    "unsupported kek algorithm"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_UNSUPPORTED_KEY_ENCRYPTION_ALGORITHM),
+    "unsupported key encryption algorithm"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_UNSUPPORTED_RECIPIENTINFO_TYPE),
+    "unsupported recipientinfo type"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_UNSUPPORTED_RECIPIENT_TYPE),
+    "unsupported recipient type"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_UNSUPPORTED_TYPE), "unsupported type"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_UNWRAP_ERROR), "unwrap error"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_UNWRAP_FAILURE), "unwrap failure"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_VERIFICATION_FAILURE),
+    "verification failure"},
+    {ERR_PACK(ERR_LIB_CMS, 0, CMS_R_WRAP_ERROR), "wrap error"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_CMS_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(CMS_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(CMS_str_functs);
+        ERR_load_strings_const(CMS_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_ess.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_ess.c
new file mode 100644
index 000000000..4780231c2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_ess.c
@@ -0,0 +1,337 @@
+/*
+ * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/pem.h>
+#include <openssl/rand.h>
+#include <openssl/x509v3.h>
+#include <openssl/err.h>
+#include <openssl/cms.h>
+#include "cms_lcl.h"
+
+IMPLEMENT_ASN1_FUNCTIONS(CMS_ReceiptRequest)
+
+/* ESS services: for now just Signed Receipt related */
+
+int CMS_get1_ReceiptRequest(CMS_SignerInfo *si, CMS_ReceiptRequest **prr)
+{
+    ASN1_STRING *str;
+    CMS_ReceiptRequest *rr = NULL;
+    if (prr)
+        *prr = NULL;
+    str = CMS_signed_get0_data_by_OBJ(si,
+                                      OBJ_nid2obj
+                                      (NID_id_smime_aa_receiptRequest), -3,
+                                      V_ASN1_SEQUENCE);
+    if (!str)
+        return 0;
+
+    rr = ASN1_item_unpack(str, ASN1_ITEM_rptr(CMS_ReceiptRequest));
+    if (!rr)
+        return -1;
+    if (prr)
+        *prr = rr;
+    else
+        CMS_ReceiptRequest_free(rr);
+    return 1;
+}
+
+CMS_ReceiptRequest *CMS_ReceiptRequest_create0(unsigned char *id, int idlen,
+                                               int allorfirst,
+                                               STACK_OF(GENERAL_NAMES)
+                                               *receiptList, STACK_OF(GENERAL_NAMES)
+                                               *receiptsTo)
+{
+    CMS_ReceiptRequest *rr = NULL;
+
+    rr = CMS_ReceiptRequest_new();
+    if (rr == NULL)
+        goto merr;
+    if (id)
+        ASN1_STRING_set0(rr->signedContentIdentifier, id, idlen);
+    else {
+        if (!ASN1_STRING_set(rr->signedContentIdentifier, NULL, 32))
+            goto merr;
+        if (RAND_bytes(rr->signedContentIdentifier->data, 32) <= 0)
+            goto err;
+    }
+
+    sk_GENERAL_NAMES_pop_free(rr->receiptsTo, GENERAL_NAMES_free);
+    rr->receiptsTo = receiptsTo;
+
+    if (receiptList) {
+        rr->receiptsFrom->type = 1;
+        rr->receiptsFrom->d.receiptList = receiptList;
+    } else {
+        rr->receiptsFrom->type = 0;
+        rr->receiptsFrom->d.allOrFirstTier = allorfirst;
+    }
+
+    return rr;
+
+ merr:
+    CMSerr(CMS_F_CMS_RECEIPTREQUEST_CREATE0, ERR_R_MALLOC_FAILURE);
+
+ err:
+    CMS_ReceiptRequest_free(rr);
+    return NULL;
+
+}
+
+int CMS_add1_ReceiptRequest(CMS_SignerInfo *si, CMS_ReceiptRequest *rr)
+{
+    unsigned char *rrder = NULL;
+    int rrderlen, r = 0;
+
+    rrderlen = i2d_CMS_ReceiptRequest(rr, &rrder);
+    if (rrderlen < 0)
+        goto merr;
+
+    if (!CMS_signed_add1_attr_by_NID(si, NID_id_smime_aa_receiptRequest,
+                                     V_ASN1_SEQUENCE, rrder, rrderlen))
+        goto merr;
+
+    r = 1;
+
+ merr:
+    if (!r)
+        CMSerr(CMS_F_CMS_ADD1_RECEIPTREQUEST, ERR_R_MALLOC_FAILURE);
+
+    OPENSSL_free(rrder);
+
+    return r;
+
+}
+
+void CMS_ReceiptRequest_get0_values(CMS_ReceiptRequest *rr,
+                                    ASN1_STRING **pcid,
+                                    int *pallorfirst,
+                                    STACK_OF(GENERAL_NAMES) **plist,
+                                    STACK_OF(GENERAL_NAMES) **prto)
+{
+    if (pcid)
+        *pcid = rr->signedContentIdentifier;
+    if (rr->receiptsFrom->type == 0) {
+        if (pallorfirst)
+            *pallorfirst = (int)rr->receiptsFrom->d.allOrFirstTier;
+        if (plist)
+            *plist = NULL;
+    } else {
+        if (pallorfirst)
+            *pallorfirst = -1;
+        if (plist)
+            *plist = rr->receiptsFrom->d.receiptList;
+    }
+    if (prto)
+        *prto = rr->receiptsTo;
+}
+
+/* Digest a SignerInfo structure for msgSigDigest attribute processing */
+
+static int cms_msgSigDigest(CMS_SignerInfo *si,
+                            unsigned char *dig, unsigned int *diglen)
+{
+    const EVP_MD *md;
+    md = EVP_get_digestbyobj(si->digestAlgorithm->algorithm);
+    if (md == NULL)
+        return 0;
+    if (!ASN1_item_digest(ASN1_ITEM_rptr(CMS_Attributes_Verify), md,
+                          si->signedAttrs, dig, diglen))
+        return 0;
+    return 1;
+}
+
+/* Add a msgSigDigest attribute to a SignerInfo */
+
+int cms_msgSigDigest_add1(CMS_SignerInfo *dest, CMS_SignerInfo *src)
+{
+    unsigned char dig[EVP_MAX_MD_SIZE];
+    unsigned int diglen;
+    if (!cms_msgSigDigest(src, dig, &diglen)) {
+        CMSerr(CMS_F_CMS_MSGSIGDIGEST_ADD1, CMS_R_MSGSIGDIGEST_ERROR);
+        return 0;
+    }
+    if (!CMS_signed_add1_attr_by_NID(dest, NID_id_smime_aa_msgSigDigest,
+                                     V_ASN1_OCTET_STRING, dig, diglen)) {
+        CMSerr(CMS_F_CMS_MSGSIGDIGEST_ADD1, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    return 1;
+}
+
+/* Verify signed receipt after it has already passed normal CMS verify */
+
+int cms_Receipt_verify(CMS_ContentInfo *cms, CMS_ContentInfo *req_cms)
+{
+    int r = 0, i;
+    CMS_ReceiptRequest *rr = NULL;
+    CMS_Receipt *rct = NULL;
+    STACK_OF(CMS_SignerInfo) *sis, *osis;
+    CMS_SignerInfo *si, *osi = NULL;
+    ASN1_OCTET_STRING *msig, **pcont;
+    ASN1_OBJECT *octype;
+    unsigned char dig[EVP_MAX_MD_SIZE];
+    unsigned int diglen;
+
+    /* Get SignerInfos, also checks SignedData content type */
+    osis = CMS_get0_SignerInfos(req_cms);
+    sis = CMS_get0_SignerInfos(cms);
+    if (!osis || !sis)
+        goto err;
+
+    if (sk_CMS_SignerInfo_num(sis) != 1) {
+        CMSerr(CMS_F_CMS_RECEIPT_VERIFY, CMS_R_NEED_ONE_SIGNER);
+        goto err;
+    }
+
+    /* Check receipt content type */
+    if (OBJ_obj2nid(CMS_get0_eContentType(cms)) != NID_id_smime_ct_receipt) {
+        CMSerr(CMS_F_CMS_RECEIPT_VERIFY, CMS_R_NOT_A_SIGNED_RECEIPT);
+        goto err;
+    }
+
+    /* Extract and decode receipt content */
+    pcont = CMS_get0_content(cms);
+    if (!pcont || !*pcont) {
+        CMSerr(CMS_F_CMS_RECEIPT_VERIFY, CMS_R_NO_CONTENT);
+        goto err;
+    }
+
+    rct = ASN1_item_unpack(*pcont, ASN1_ITEM_rptr(CMS_Receipt));
+
+    if (!rct) {
+        CMSerr(CMS_F_CMS_RECEIPT_VERIFY, CMS_R_RECEIPT_DECODE_ERROR);
+        goto err;
+    }
+
+    /* Locate original request */
+
+    for (i = 0; i < sk_CMS_SignerInfo_num(osis); i++) {
+        osi = sk_CMS_SignerInfo_value(osis, i);
+        if (!ASN1_STRING_cmp(osi->signature, rct->originatorSignatureValue))
+            break;
+    }
+
+    if (i == sk_CMS_SignerInfo_num(osis)) {
+        CMSerr(CMS_F_CMS_RECEIPT_VERIFY, CMS_R_NO_MATCHING_SIGNATURE);
+        goto err;
+    }
+
+    si = sk_CMS_SignerInfo_value(sis, 0);
+
+    /* Get msgSigDigest value and compare */
+
+    msig = CMS_signed_get0_data_by_OBJ(si,
+                                       OBJ_nid2obj
+                                       (NID_id_smime_aa_msgSigDigest), -3,
+                                       V_ASN1_OCTET_STRING);
+
+    if (!msig) {
+        CMSerr(CMS_F_CMS_RECEIPT_VERIFY, CMS_R_NO_MSGSIGDIGEST);
+        goto err;
+    }
+
+    if (!cms_msgSigDigest(osi, dig, &diglen)) {
+        CMSerr(CMS_F_CMS_RECEIPT_VERIFY, CMS_R_MSGSIGDIGEST_ERROR);
+        goto err;
+    }
+
+    if (diglen != (unsigned int)msig->length) {
+        CMSerr(CMS_F_CMS_RECEIPT_VERIFY, CMS_R_MSGSIGDIGEST_WRONG_LENGTH);
+        goto err;
+    }
+
+    if (memcmp(dig, msig->data, diglen)) {
+        CMSerr(CMS_F_CMS_RECEIPT_VERIFY,
+               CMS_R_MSGSIGDIGEST_VERIFICATION_FAILURE);
+        goto err;
+    }
+
+    /* Compare content types */
+
+    octype = CMS_signed_get0_data_by_OBJ(osi,
+                                         OBJ_nid2obj(NID_pkcs9_contentType),
+                                         -3, V_ASN1_OBJECT);
+    if (!octype) {
+        CMSerr(CMS_F_CMS_RECEIPT_VERIFY, CMS_R_NO_CONTENT_TYPE);
+        goto err;
+    }
+
+    /* Compare details in receipt request */
+
+    if (OBJ_cmp(octype, rct->contentType)) {
+        CMSerr(CMS_F_CMS_RECEIPT_VERIFY, CMS_R_CONTENT_TYPE_MISMATCH);
+        goto err;
+    }
+
+    /* Get original receipt request details */
+
+    if (CMS_get1_ReceiptRequest(osi, &rr) <= 0) {
+        CMSerr(CMS_F_CMS_RECEIPT_VERIFY, CMS_R_NO_RECEIPT_REQUEST);
+        goto err;
+    }
+
+    if (ASN1_STRING_cmp(rr->signedContentIdentifier,
+                        rct->signedContentIdentifier)) {
+        CMSerr(CMS_F_CMS_RECEIPT_VERIFY, CMS_R_CONTENTIDENTIFIER_MISMATCH);
+        goto err;
+    }
+
+    r = 1;
+
+ err:
+    CMS_ReceiptRequest_free(rr);
+    M_ASN1_free_of(rct, CMS_Receipt);
+    return r;
+
+}
+
+/*
+ * Encode a Receipt into an OCTET STRING read for including into content of a
+ * SignedData ContentInfo.
+ */
+
+ASN1_OCTET_STRING *cms_encode_Receipt(CMS_SignerInfo *si)
+{
+    CMS_Receipt rct;
+    CMS_ReceiptRequest *rr = NULL;
+    ASN1_OBJECT *ctype;
+    ASN1_OCTET_STRING *os = NULL;
+
+    /* Get original receipt request */
+
+    /* Get original receipt request details */
+
+    if (CMS_get1_ReceiptRequest(si, &rr) <= 0) {
+        CMSerr(CMS_F_CMS_ENCODE_RECEIPT, CMS_R_NO_RECEIPT_REQUEST);
+        goto err;
+    }
+
+    /* Get original content type */
+
+    ctype = CMS_signed_get0_data_by_OBJ(si,
+                                        OBJ_nid2obj(NID_pkcs9_contentType),
+                                        -3, V_ASN1_OBJECT);
+    if (!ctype) {
+        CMSerr(CMS_F_CMS_ENCODE_RECEIPT, CMS_R_NO_CONTENT_TYPE);
+        goto err;
+    }
+
+    rct.version = 1;
+    rct.contentType = ctype;
+    rct.signedContentIdentifier = rr->signedContentIdentifier;
+    rct.originatorSignatureValue = si->signature;
+
+    os = ASN1_item_pack(&rct, ASN1_ITEM_rptr(CMS_Receipt), NULL);
+
+ err:
+    CMS_ReceiptRequest_free(rr);
+    return os;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_io.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_io.c
new file mode 100644
index 000000000..d18f980a9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_io.c
@@ -0,0 +1,88 @@
+/*
+ * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include <openssl/err.h>
+#include <openssl/pem.h>
+#include <openssl/cms.h>
+#include "cms_lcl.h"
+
+int CMS_stream(unsigned char ***boundary, CMS_ContentInfo *cms)
+{
+    ASN1_OCTET_STRING **pos;
+    pos = CMS_get0_content(cms);
+    if (pos == NULL)
+        return 0;
+    if (*pos == NULL)
+        *pos = ASN1_OCTET_STRING_new();
+    if (*pos != NULL) {
+        (*pos)->flags |= ASN1_STRING_FLAG_NDEF;
+        (*pos)->flags &= ~ASN1_STRING_FLAG_CONT;
+        *boundary = &(*pos)->data;
+        return 1;
+    }
+    CMSerr(CMS_F_CMS_STREAM, ERR_R_MALLOC_FAILURE);
+    return 0;
+}
+
+CMS_ContentInfo *d2i_CMS_bio(BIO *bp, CMS_ContentInfo **cms)
+{
+    return ASN1_item_d2i_bio(ASN1_ITEM_rptr(CMS_ContentInfo), bp, cms);
+}
+
+int i2d_CMS_bio(BIO *bp, CMS_ContentInfo *cms)
+{
+    return ASN1_item_i2d_bio(ASN1_ITEM_rptr(CMS_ContentInfo), bp, cms);
+}
+
+IMPLEMENT_PEM_rw_const(CMS, CMS_ContentInfo, PEM_STRING_CMS, CMS_ContentInfo)
+
+BIO *BIO_new_CMS(BIO *out, CMS_ContentInfo *cms)
+{
+    return BIO_new_NDEF(out, (ASN1_VALUE *)cms,
+                        ASN1_ITEM_rptr(CMS_ContentInfo));
+}
+
+/* CMS wrappers round generalised stream and MIME routines */
+
+int i2d_CMS_bio_stream(BIO *out, CMS_ContentInfo *cms, BIO *in, int flags)
+{
+    return i2d_ASN1_bio_stream(out, (ASN1_VALUE *)cms, in, flags,
+                               ASN1_ITEM_rptr(CMS_ContentInfo));
+}
+
+int PEM_write_bio_CMS_stream(BIO *out, CMS_ContentInfo *cms, BIO *in,
+                             int flags)
+{
+    return PEM_write_bio_ASN1_stream(out, (ASN1_VALUE *)cms, in, flags,
+                                     "CMS", ASN1_ITEM_rptr(CMS_ContentInfo));
+}
+
+int SMIME_write_CMS(BIO *bio, CMS_ContentInfo *cms, BIO *data, int flags)
+{
+    STACK_OF(X509_ALGOR) *mdalgs;
+    int ctype_nid = OBJ_obj2nid(cms->contentType);
+    int econt_nid = OBJ_obj2nid(CMS_get0_eContentType(cms));
+    if (ctype_nid == NID_pkcs7_signed)
+        mdalgs = cms->d.signedData->digestAlgorithms;
+    else
+        mdalgs = NULL;
+
+    return SMIME_write_ASN1(bio, (ASN1_VALUE *)cms, data, flags,
+                            ctype_nid, econt_nid, mdalgs,
+                            ASN1_ITEM_rptr(CMS_ContentInfo));
+}
+
+CMS_ContentInfo *SMIME_read_CMS(BIO *bio, BIO **bcont)
+{
+    return (CMS_ContentInfo *)SMIME_read_ASN1(bio, bcont,
+                                              ASN1_ITEM_rptr
+                                              (CMS_ContentInfo));
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_kari.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_kari.c
new file mode 100644
index 000000000..5e83814d0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_kari.c
@@ -0,0 +1,414 @@
+/*
+ * Copyright 2013-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/pem.h>
+#include <openssl/x509v3.h>
+#include <openssl/err.h>
+#include <openssl/cms.h>
+#include <openssl/aes.h>
+#include "cms_lcl.h"
+#include "internal/asn1_int.h"
+
+/* Key Agreement Recipient Info (KARI) routines */
+
+int CMS_RecipientInfo_kari_get0_alg(CMS_RecipientInfo *ri,
+                                    X509_ALGOR **palg,
+                                    ASN1_OCTET_STRING **pukm)
+{
+    if (ri->type != CMS_RECIPINFO_AGREE) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KARI_GET0_ALG,
+               CMS_R_NOT_KEY_AGREEMENT);
+        return 0;
+    }
+    if (palg)
+        *palg = ri->d.kari->keyEncryptionAlgorithm;
+    if (pukm)
+        *pukm = ri->d.kari->ukm;
+    return 1;
+}
+
+/* Retrieve recipient encrypted keys from a kari */
+
+STACK_OF(CMS_RecipientEncryptedKey)
+*CMS_RecipientInfo_kari_get0_reks(CMS_RecipientInfo *ri)
+{
+    if (ri->type != CMS_RECIPINFO_AGREE) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KARI_GET0_REKS,
+               CMS_R_NOT_KEY_AGREEMENT);
+        return NULL;
+    }
+    return ri->d.kari->recipientEncryptedKeys;
+}
+
+int CMS_RecipientInfo_kari_get0_orig_id(CMS_RecipientInfo *ri,
+                                        X509_ALGOR **pubalg,
+                                        ASN1_BIT_STRING **pubkey,
+                                        ASN1_OCTET_STRING **keyid,
+                                        X509_NAME **issuer,
+                                        ASN1_INTEGER **sno)
+{
+    CMS_OriginatorIdentifierOrKey *oik;
+    if (ri->type != CMS_RECIPINFO_AGREE) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KARI_GET0_ORIG_ID,
+               CMS_R_NOT_KEY_AGREEMENT);
+        return 0;
+    }
+    oik = ri->d.kari->originator;
+    if (issuer)
+        *issuer = NULL;
+    if (sno)
+        *sno = NULL;
+    if (keyid)
+        *keyid = NULL;
+    if (pubalg)
+        *pubalg = NULL;
+    if (pubkey)
+        *pubkey = NULL;
+    if (oik->type == CMS_OIK_ISSUER_SERIAL) {
+        if (issuer)
+            *issuer = oik->d.issuerAndSerialNumber->issuer;
+        if (sno)
+            *sno = oik->d.issuerAndSerialNumber->serialNumber;
+    } else if (oik->type == CMS_OIK_KEYIDENTIFIER) {
+        if (keyid)
+            *keyid = oik->d.subjectKeyIdentifier;
+    } else if (oik->type == CMS_OIK_PUBKEY) {
+        if (pubalg)
+            *pubalg = oik->d.originatorKey->algorithm;
+        if (pubkey)
+            *pubkey = oik->d.originatorKey->publicKey;
+    } else
+        return 0;
+    return 1;
+}
+
+int CMS_RecipientInfo_kari_orig_id_cmp(CMS_RecipientInfo *ri, X509 *cert)
+{
+    CMS_OriginatorIdentifierOrKey *oik;
+    if (ri->type != CMS_RECIPINFO_AGREE) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KARI_ORIG_ID_CMP,
+               CMS_R_NOT_KEY_AGREEMENT);
+        return -2;
+    }
+    oik = ri->d.kari->originator;
+    if (oik->type == CMS_OIK_ISSUER_SERIAL)
+        return cms_ias_cert_cmp(oik->d.issuerAndSerialNumber, cert);
+    else if (oik->type == CMS_OIK_KEYIDENTIFIER)
+        return cms_keyid_cert_cmp(oik->d.subjectKeyIdentifier, cert);
+    return -1;
+}
+
+int CMS_RecipientEncryptedKey_get0_id(CMS_RecipientEncryptedKey *rek,
+                                      ASN1_OCTET_STRING **keyid,
+                                      ASN1_GENERALIZEDTIME **tm,
+                                      CMS_OtherKeyAttribute **other,
+                                      X509_NAME **issuer, ASN1_INTEGER **sno)
+{
+    CMS_KeyAgreeRecipientIdentifier *rid = rek->rid;
+    if (rid->type == CMS_REK_ISSUER_SERIAL) {
+        if (issuer)
+            *issuer = rid->d.issuerAndSerialNumber->issuer;
+        if (sno)
+            *sno = rid->d.issuerAndSerialNumber->serialNumber;
+        if (keyid)
+            *keyid = NULL;
+        if (tm)
+            *tm = NULL;
+        if (other)
+            *other = NULL;
+    } else if (rid->type == CMS_REK_KEYIDENTIFIER) {
+        if (keyid)
+            *keyid = rid->d.rKeyId->subjectKeyIdentifier;
+        if (tm)
+            *tm = rid->d.rKeyId->date;
+        if (other)
+            *other = rid->d.rKeyId->other;
+        if (issuer)
+            *issuer = NULL;
+        if (sno)
+            *sno = NULL;
+    } else
+        return 0;
+    return 1;
+}
+
+int CMS_RecipientEncryptedKey_cert_cmp(CMS_RecipientEncryptedKey *rek,
+                                       X509 *cert)
+{
+    CMS_KeyAgreeRecipientIdentifier *rid = rek->rid;
+    if (rid->type == CMS_REK_ISSUER_SERIAL)
+        return cms_ias_cert_cmp(rid->d.issuerAndSerialNumber, cert);
+    else if (rid->type == CMS_REK_KEYIDENTIFIER)
+        return cms_keyid_cert_cmp(rid->d.rKeyId->subjectKeyIdentifier, cert);
+    else
+        return -1;
+}
+
+int CMS_RecipientInfo_kari_set0_pkey(CMS_RecipientInfo *ri, EVP_PKEY *pk)
+{
+    EVP_PKEY_CTX *pctx;
+    CMS_KeyAgreeRecipientInfo *kari = ri->d.kari;
+
+    EVP_PKEY_CTX_free(kari->pctx);
+    kari->pctx = NULL;
+    if (!pk)
+        return 1;
+    pctx = EVP_PKEY_CTX_new(pk, NULL);
+    if (!pctx || !EVP_PKEY_derive_init(pctx))
+        goto err;
+    kari->pctx = pctx;
+    return 1;
+ err:
+    EVP_PKEY_CTX_free(pctx);
+    return 0;
+}
+
+EVP_CIPHER_CTX *CMS_RecipientInfo_kari_get0_ctx(CMS_RecipientInfo *ri)
+{
+    if (ri->type == CMS_RECIPINFO_AGREE)
+        return ri->d.kari->ctx;
+    return NULL;
+}
+
+/*
+ * Derive KEK and decrypt/encrypt with it to produce either the original CEK
+ * or the encrypted CEK.
+ */
+
+static int cms_kek_cipher(unsigned char **pout, size_t *poutlen,
+                          const unsigned char *in, size_t inlen,
+                          CMS_KeyAgreeRecipientInfo *kari, int enc)
+{
+    /* Key encryption key */
+    unsigned char kek[EVP_MAX_KEY_LENGTH];
+    size_t keklen;
+    int rv = 0;
+    unsigned char *out = NULL;
+    int outlen;
+    keklen = EVP_CIPHER_CTX_key_length(kari->ctx);
+    if (keklen > EVP_MAX_KEY_LENGTH)
+        return 0;
+    /* Derive KEK */
+    if (EVP_PKEY_derive(kari->pctx, kek, &keklen) <= 0)
+        goto err;
+    /* Set KEK in context */
+    if (!EVP_CipherInit_ex(kari->ctx, NULL, NULL, kek, NULL, enc))
+        goto err;
+    /* obtain output length of ciphered key */
+    if (!EVP_CipherUpdate(kari->ctx, NULL, &outlen, in, inlen))
+        goto err;
+    out = OPENSSL_malloc(outlen);
+    if (out == NULL)
+        goto err;
+    if (!EVP_CipherUpdate(kari->ctx, out, &outlen, in, inlen))
+        goto err;
+    *pout = out;
+    *poutlen = (size_t)outlen;
+    rv = 1;
+
+ err:
+    OPENSSL_cleanse(kek, keklen);
+    if (!rv)
+        OPENSSL_free(out);
+    EVP_CIPHER_CTX_reset(kari->ctx);
+    /* FIXME: WHY IS kari->pctx freed here?  /RL */
+    EVP_PKEY_CTX_free(kari->pctx);
+    kari->pctx = NULL;
+    return rv;
+}
+
+int CMS_RecipientInfo_kari_decrypt(CMS_ContentInfo *cms,
+                                   CMS_RecipientInfo *ri,
+                                   CMS_RecipientEncryptedKey *rek)
+{
+    int rv = 0;
+    unsigned char *enckey = NULL, *cek = NULL;
+    size_t enckeylen;
+    size_t ceklen;
+    CMS_EncryptedContentInfo *ec;
+    enckeylen = rek->encryptedKey->length;
+    enckey = rek->encryptedKey->data;
+    /* Setup all parameters to derive KEK */
+    if (!cms_env_asn1_ctrl(ri, 1))
+        goto err;
+    /* Attempt to decrypt CEK */
+    if (!cms_kek_cipher(&cek, &ceklen, enckey, enckeylen, ri->d.kari, 0))
+        goto err;
+    ec = cms->d.envelopedData->encryptedContentInfo;
+    OPENSSL_clear_free(ec->key, ec->keylen);
+    ec->key = cek;
+    ec->keylen = ceklen;
+    cek = NULL;
+    rv = 1;
+ err:
+    OPENSSL_free(cek);
+    return rv;
+}
+
+/* Create ephemeral key and initialise context based on it */
+static int cms_kari_create_ephemeral_key(CMS_KeyAgreeRecipientInfo *kari,
+                                         EVP_PKEY *pk)
+{
+    EVP_PKEY_CTX *pctx = NULL;
+    EVP_PKEY *ekey = NULL;
+    int rv = 0;
+    pctx = EVP_PKEY_CTX_new(pk, NULL);
+    if (!pctx)
+        goto err;
+    if (EVP_PKEY_keygen_init(pctx) <= 0)
+        goto err;
+    if (EVP_PKEY_keygen(pctx, &ekey) <= 0)
+        goto err;
+    EVP_PKEY_CTX_free(pctx);
+    pctx = EVP_PKEY_CTX_new(ekey, NULL);
+    if (!pctx)
+        goto err;
+    if (EVP_PKEY_derive_init(pctx) <= 0)
+        goto err;
+    kari->pctx = pctx;
+    rv = 1;
+ err:
+    if (!rv)
+        EVP_PKEY_CTX_free(pctx);
+    EVP_PKEY_free(ekey);
+    return rv;
+}
+
+/* Initialise a kari based on passed certificate and key */
+
+int cms_RecipientInfo_kari_init(CMS_RecipientInfo *ri, X509 *recip,
+                                EVP_PKEY *pk, unsigned int flags)
+{
+    CMS_KeyAgreeRecipientInfo *kari;
+    CMS_RecipientEncryptedKey *rek = NULL;
+
+    ri->d.kari = M_ASN1_new_of(CMS_KeyAgreeRecipientInfo);
+    if (!ri->d.kari)
+        return 0;
+    ri->type = CMS_RECIPINFO_AGREE;
+
+    kari = ri->d.kari;
+    kari->version = 3;
+
+    rek = M_ASN1_new_of(CMS_RecipientEncryptedKey);
+    if (rek == NULL)
+        return 0;
+
+    if (!sk_CMS_RecipientEncryptedKey_push(kari->recipientEncryptedKeys, rek)) {
+        M_ASN1_free_of(rek, CMS_RecipientEncryptedKey);
+        return 0;
+    }
+
+    if (flags & CMS_USE_KEYID) {
+        rek->rid->type = CMS_REK_KEYIDENTIFIER;
+        rek->rid->d.rKeyId = M_ASN1_new_of(CMS_RecipientKeyIdentifier);
+        if (rek->rid->d.rKeyId == NULL)
+            return 0;
+        if (!cms_set1_keyid(&rek->rid->d.rKeyId->subjectKeyIdentifier, recip))
+            return 0;
+    } else {
+        rek->rid->type = CMS_REK_ISSUER_SERIAL;
+        if (!cms_set1_ias(&rek->rid->d.issuerAndSerialNumber, recip))
+            return 0;
+    }
+
+    /* Create ephemeral key */
+    if (!cms_kari_create_ephemeral_key(kari, pk))
+        return 0;
+
+    EVP_PKEY_up_ref(pk);
+    rek->pkey = pk;
+    return 1;
+}
+
+static int cms_wrap_init(CMS_KeyAgreeRecipientInfo *kari,
+                         const EVP_CIPHER *cipher)
+{
+    EVP_CIPHER_CTX *ctx = kari->ctx;
+    const EVP_CIPHER *kekcipher;
+    int keylen = EVP_CIPHER_key_length(cipher);
+    /* If a suitable wrap algorithm is already set nothing to do */
+    kekcipher = EVP_CIPHER_CTX_cipher(ctx);
+
+    if (kekcipher) {
+        if (EVP_CIPHER_CTX_mode(ctx) != EVP_CIPH_WRAP_MODE)
+            return 0;
+        return 1;
+    }
+    /*
+     * Pick a cipher based on content encryption cipher. If it is DES3 use
+     * DES3 wrap otherwise use AES wrap similar to key size.
+     */
+#ifndef OPENSSL_NO_DES
+    if (EVP_CIPHER_type(cipher) == NID_des_ede3_cbc)
+        kekcipher = EVP_des_ede3_wrap();
+    else
+#endif
+    if (keylen <= 16)
+        kekcipher = EVP_aes_128_wrap();
+    else if (keylen <= 24)
+        kekcipher = EVP_aes_192_wrap();
+    else
+        kekcipher = EVP_aes_256_wrap();
+    return EVP_EncryptInit_ex(ctx, kekcipher, NULL, NULL, NULL);
+}
+
+/* Encrypt content key in key agreement recipient info */
+
+int cms_RecipientInfo_kari_encrypt(CMS_ContentInfo *cms,
+                                   CMS_RecipientInfo *ri)
+{
+    CMS_KeyAgreeRecipientInfo *kari;
+    CMS_EncryptedContentInfo *ec;
+    CMS_RecipientEncryptedKey *rek;
+    STACK_OF(CMS_RecipientEncryptedKey) *reks;
+    int i;
+
+    if (ri->type != CMS_RECIPINFO_AGREE) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_KARI_ENCRYPT, CMS_R_NOT_KEY_AGREEMENT);
+        return 0;
+    }
+    kari = ri->d.kari;
+    reks = kari->recipientEncryptedKeys;
+    ec = cms->d.envelopedData->encryptedContentInfo;
+    /* Initialise wrap algorithm parameters */
+    if (!cms_wrap_init(kari, ec->cipher))
+        return 0;
+    /*
+     * If no originator key set up initialise for ephemeral key the public key
+     * ASN1 structure will set the actual public key value.
+     */
+    if (kari->originator->type == -1) {
+        CMS_OriginatorIdentifierOrKey *oik = kari->originator;
+        oik->type = CMS_OIK_PUBKEY;
+        oik->d.originatorKey = M_ASN1_new_of(CMS_OriginatorPublicKey);
+        if (!oik->d.originatorKey)
+            return 0;
+    }
+    /* Initialise KDF algorithm */
+    if (!cms_env_asn1_ctrl(ri, 0))
+        return 0;
+    /* For each rek, derive KEK, encrypt CEK */
+    for (i = 0; i < sk_CMS_RecipientEncryptedKey_num(reks); i++) {
+        unsigned char *enckey;
+        size_t enckeylen;
+        rek = sk_CMS_RecipientEncryptedKey_value(reks, i);
+        if (EVP_PKEY_derive_set_peer(kari->pctx, rek->pkey) <= 0)
+            return 0;
+        if (!cms_kek_cipher(&enckey, &enckeylen, ec->key, ec->keylen,
+                            kari, 1))
+            return 0;
+        ASN1_STRING_set0(rek->encryptedKey, enckey, enckeylen);
+    }
+
+    return 1;
+
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_lcl.h
new file mode 100644
index 000000000..916fcbfbe
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_lcl.h
@@ -0,0 +1,437 @@
+/*
+ * Copyright 2008-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_CMS_LCL_H
+# define HEADER_CMS_LCL_H
+
+# include <openssl/x509.h>
+
+/*
+ * Cryptographic message syntax (CMS) structures: taken from RFC3852
+ */
+
+/* Forward references */
+
+typedef struct CMS_IssuerAndSerialNumber_st CMS_IssuerAndSerialNumber;
+typedef struct CMS_EncapsulatedContentInfo_st CMS_EncapsulatedContentInfo;
+typedef struct CMS_SignerIdentifier_st CMS_SignerIdentifier;
+typedef struct CMS_SignedData_st CMS_SignedData;
+typedef struct CMS_OtherRevocationInfoFormat_st CMS_OtherRevocationInfoFormat;
+typedef struct CMS_OriginatorInfo_st CMS_OriginatorInfo;
+typedef struct CMS_EncryptedContentInfo_st CMS_EncryptedContentInfo;
+typedef struct CMS_EnvelopedData_st CMS_EnvelopedData;
+typedef struct CMS_DigestedData_st CMS_DigestedData;
+typedef struct CMS_EncryptedData_st CMS_EncryptedData;
+typedef struct CMS_AuthenticatedData_st CMS_AuthenticatedData;
+typedef struct CMS_CompressedData_st CMS_CompressedData;
+typedef struct CMS_OtherCertificateFormat_st CMS_OtherCertificateFormat;
+typedef struct CMS_KeyTransRecipientInfo_st CMS_KeyTransRecipientInfo;
+typedef struct CMS_OriginatorPublicKey_st CMS_OriginatorPublicKey;
+typedef struct CMS_OriginatorIdentifierOrKey_st CMS_OriginatorIdentifierOrKey;
+typedef struct CMS_KeyAgreeRecipientInfo_st CMS_KeyAgreeRecipientInfo;
+typedef struct CMS_RecipientKeyIdentifier_st CMS_RecipientKeyIdentifier;
+typedef struct CMS_KeyAgreeRecipientIdentifier_st
+    CMS_KeyAgreeRecipientIdentifier;
+typedef struct CMS_KEKIdentifier_st CMS_KEKIdentifier;
+typedef struct CMS_KEKRecipientInfo_st CMS_KEKRecipientInfo;
+typedef struct CMS_PasswordRecipientInfo_st CMS_PasswordRecipientInfo;
+typedef struct CMS_OtherRecipientInfo_st CMS_OtherRecipientInfo;
+typedef struct CMS_ReceiptsFrom_st CMS_ReceiptsFrom;
+
+struct CMS_ContentInfo_st {
+    ASN1_OBJECT *contentType;
+    union {
+        ASN1_OCTET_STRING *data;
+        CMS_SignedData *signedData;
+        CMS_EnvelopedData *envelopedData;
+        CMS_DigestedData *digestedData;
+        CMS_EncryptedData *encryptedData;
+        CMS_AuthenticatedData *authenticatedData;
+        CMS_CompressedData *compressedData;
+        ASN1_TYPE *other;
+        /* Other types ... */
+        void *otherData;
+    } d;
+};
+
+DEFINE_STACK_OF(CMS_CertificateChoices)
+
+struct CMS_SignedData_st {
+    int32_t version;
+    STACK_OF(X509_ALGOR) *digestAlgorithms;
+    CMS_EncapsulatedContentInfo *encapContentInfo;
+    STACK_OF(CMS_CertificateChoices) *certificates;
+    STACK_OF(CMS_RevocationInfoChoice) *crls;
+    STACK_OF(CMS_SignerInfo) *signerInfos;
+};
+
+struct CMS_EncapsulatedContentInfo_st {
+    ASN1_OBJECT *eContentType;
+    ASN1_OCTET_STRING *eContent;
+    /* Set to 1 if incomplete structure only part set up */
+    int partial;
+};
+
+struct CMS_SignerInfo_st {
+    int32_t version;
+    CMS_SignerIdentifier *sid;
+    X509_ALGOR *digestAlgorithm;
+    STACK_OF(X509_ATTRIBUTE) *signedAttrs;
+    X509_ALGOR *signatureAlgorithm;
+    ASN1_OCTET_STRING *signature;
+    STACK_OF(X509_ATTRIBUTE) *unsignedAttrs;
+    /* Signing certificate and key */
+    X509 *signer;
+    EVP_PKEY *pkey;
+    /* Digest and public key context for alternative parameters */
+    EVP_MD_CTX *mctx;
+    EVP_PKEY_CTX *pctx;
+};
+
+struct CMS_SignerIdentifier_st {
+    int type;
+    union {
+        CMS_IssuerAndSerialNumber *issuerAndSerialNumber;
+        ASN1_OCTET_STRING *subjectKeyIdentifier;
+    } d;
+};
+
+struct CMS_EnvelopedData_st {
+    int32_t version;
+    CMS_OriginatorInfo *originatorInfo;
+    STACK_OF(CMS_RecipientInfo) *recipientInfos;
+    CMS_EncryptedContentInfo *encryptedContentInfo;
+    STACK_OF(X509_ATTRIBUTE) *unprotectedAttrs;
+};
+
+struct CMS_OriginatorInfo_st {
+    STACK_OF(CMS_CertificateChoices) *certificates;
+    STACK_OF(CMS_RevocationInfoChoice) *crls;
+};
+
+struct CMS_EncryptedContentInfo_st {
+    ASN1_OBJECT *contentType;
+    X509_ALGOR *contentEncryptionAlgorithm;
+    ASN1_OCTET_STRING *encryptedContent;
+    /* Content encryption algorithm and key */
+    const EVP_CIPHER *cipher;
+    unsigned char *key;
+    size_t keylen;
+    /* Set to 1 if we are debugging decrypt and don't fake keys for MMA */
+    int debug;
+};
+
+struct CMS_RecipientInfo_st {
+    int type;
+    union {
+        CMS_KeyTransRecipientInfo *ktri;
+        CMS_KeyAgreeRecipientInfo *kari;
+        CMS_KEKRecipientInfo *kekri;
+        CMS_PasswordRecipientInfo *pwri;
+        CMS_OtherRecipientInfo *ori;
+    } d;
+};
+
+typedef CMS_SignerIdentifier CMS_RecipientIdentifier;
+
+struct CMS_KeyTransRecipientInfo_st {
+    int32_t version;
+    CMS_RecipientIdentifier *rid;
+    X509_ALGOR *keyEncryptionAlgorithm;
+    ASN1_OCTET_STRING *encryptedKey;
+    /* Recipient Key and cert */
+    X509 *recip;
+    EVP_PKEY *pkey;
+    /* Public key context for this operation */
+    EVP_PKEY_CTX *pctx;
+};
+
+struct CMS_KeyAgreeRecipientInfo_st {
+    int32_t version;
+    CMS_OriginatorIdentifierOrKey *originator;
+    ASN1_OCTET_STRING *ukm;
+    X509_ALGOR *keyEncryptionAlgorithm;
+    STACK_OF(CMS_RecipientEncryptedKey) *recipientEncryptedKeys;
+    /* Public key context associated with current operation */
+    EVP_PKEY_CTX *pctx;
+    /* Cipher context for CEK wrapping */
+    EVP_CIPHER_CTX *ctx;
+};
+
+struct CMS_OriginatorIdentifierOrKey_st {
+    int type;
+    union {
+        CMS_IssuerAndSerialNumber *issuerAndSerialNumber;
+        ASN1_OCTET_STRING *subjectKeyIdentifier;
+        CMS_OriginatorPublicKey *originatorKey;
+    } d;
+};
+
+struct CMS_OriginatorPublicKey_st {
+    X509_ALGOR *algorithm;
+    ASN1_BIT_STRING *publicKey;
+};
+
+struct CMS_RecipientEncryptedKey_st {
+    CMS_KeyAgreeRecipientIdentifier *rid;
+    ASN1_OCTET_STRING *encryptedKey;
+    /* Public key associated with this recipient */
+    EVP_PKEY *pkey;
+};
+
+struct CMS_KeyAgreeRecipientIdentifier_st {
+    int type;
+    union {
+        CMS_IssuerAndSerialNumber *issuerAndSerialNumber;
+        CMS_RecipientKeyIdentifier *rKeyId;
+    } d;
+};
+
+struct CMS_RecipientKeyIdentifier_st {
+    ASN1_OCTET_STRING *subjectKeyIdentifier;
+    ASN1_GENERALIZEDTIME *date;
+    CMS_OtherKeyAttribute *other;
+};
+
+struct CMS_KEKRecipientInfo_st {
+    int32_t version;
+    CMS_KEKIdentifier *kekid;
+    X509_ALGOR *keyEncryptionAlgorithm;
+    ASN1_OCTET_STRING *encryptedKey;
+    /* Extra info: symmetric key to use */
+    unsigned char *key;
+    size_t keylen;
+};
+
+struct CMS_KEKIdentifier_st {
+    ASN1_OCTET_STRING *keyIdentifier;
+    ASN1_GENERALIZEDTIME *date;
+    CMS_OtherKeyAttribute *other;
+};
+
+struct CMS_PasswordRecipientInfo_st {
+    int32_t version;
+    X509_ALGOR *keyDerivationAlgorithm;
+    X509_ALGOR *keyEncryptionAlgorithm;
+    ASN1_OCTET_STRING *encryptedKey;
+    /* Extra info: password to use */
+    unsigned char *pass;
+    size_t passlen;
+};
+
+struct CMS_OtherRecipientInfo_st {
+    ASN1_OBJECT *oriType;
+    ASN1_TYPE *oriValue;
+};
+
+struct CMS_DigestedData_st {
+    int32_t version;
+    X509_ALGOR *digestAlgorithm;
+    CMS_EncapsulatedContentInfo *encapContentInfo;
+    ASN1_OCTET_STRING *digest;
+};
+
+struct CMS_EncryptedData_st {
+    int32_t version;
+    CMS_EncryptedContentInfo *encryptedContentInfo;
+    STACK_OF(X509_ATTRIBUTE) *unprotectedAttrs;
+};
+
+struct CMS_AuthenticatedData_st {
+    int32_t version;
+    CMS_OriginatorInfo *originatorInfo;
+    STACK_OF(CMS_RecipientInfo) *recipientInfos;
+    X509_ALGOR *macAlgorithm;
+    X509_ALGOR *digestAlgorithm;
+    CMS_EncapsulatedContentInfo *encapContentInfo;
+    STACK_OF(X509_ATTRIBUTE) *authAttrs;
+    ASN1_OCTET_STRING *mac;
+    STACK_OF(X509_ATTRIBUTE) *unauthAttrs;
+};
+
+struct CMS_CompressedData_st {
+    int32_t version;
+    X509_ALGOR *compressionAlgorithm;
+    STACK_OF(CMS_RecipientInfo) *recipientInfos;
+    CMS_EncapsulatedContentInfo *encapContentInfo;
+};
+
+struct CMS_RevocationInfoChoice_st {
+    int type;
+    union {
+        X509_CRL *crl;
+        CMS_OtherRevocationInfoFormat *other;
+    } d;
+};
+
+# define CMS_REVCHOICE_CRL               0
+# define CMS_REVCHOICE_OTHER             1
+
+struct CMS_OtherRevocationInfoFormat_st {
+    ASN1_OBJECT *otherRevInfoFormat;
+    ASN1_TYPE *otherRevInfo;
+};
+
+struct CMS_CertificateChoices {
+    int type;
+    union {
+        X509 *certificate;
+        ASN1_STRING *extendedCertificate; /* Obsolete */
+        ASN1_STRING *v1AttrCert; /* Left encoded for now */
+        ASN1_STRING *v2AttrCert; /* Left encoded for now */
+        CMS_OtherCertificateFormat *other;
+    } d;
+};
+
+# define CMS_CERTCHOICE_CERT             0
+# define CMS_CERTCHOICE_EXCERT           1
+# define CMS_CERTCHOICE_V1ACERT          2
+# define CMS_CERTCHOICE_V2ACERT          3
+# define CMS_CERTCHOICE_OTHER            4
+
+struct CMS_OtherCertificateFormat_st {
+    ASN1_OBJECT *otherCertFormat;
+    ASN1_TYPE *otherCert;
+};
+
+/*
+ * This is also defined in pkcs7.h but we duplicate it to allow the CMS code
+ * to be independent of PKCS#7
+ */
+
+struct CMS_IssuerAndSerialNumber_st {
+    X509_NAME *issuer;
+    ASN1_INTEGER *serialNumber;
+};
+
+struct CMS_OtherKeyAttribute_st {
+    ASN1_OBJECT *keyAttrId;
+    ASN1_TYPE *keyAttr;
+};
+
+/* ESS structures */
+
+# ifdef HEADER_X509V3_H
+
+struct CMS_ReceiptRequest_st {
+    ASN1_OCTET_STRING *signedContentIdentifier;
+    CMS_ReceiptsFrom *receiptsFrom;
+    STACK_OF(GENERAL_NAMES) *receiptsTo;
+};
+
+struct CMS_ReceiptsFrom_st {
+    int type;
+    union {
+        int32_t allOrFirstTier;
+        STACK_OF(GENERAL_NAMES) *receiptList;
+    } d;
+};
+# endif
+
+struct CMS_Receipt_st {
+    int32_t version;
+    ASN1_OBJECT *contentType;
+    ASN1_OCTET_STRING *signedContentIdentifier;
+    ASN1_OCTET_STRING *originatorSignatureValue;
+};
+
+DECLARE_ASN1_FUNCTIONS(CMS_ContentInfo)
+DECLARE_ASN1_ITEM(CMS_SignerInfo)
+DECLARE_ASN1_ITEM(CMS_IssuerAndSerialNumber)
+DECLARE_ASN1_ITEM(CMS_Attributes_Sign)
+DECLARE_ASN1_ITEM(CMS_Attributes_Verify)
+DECLARE_ASN1_ITEM(CMS_RecipientInfo)
+DECLARE_ASN1_ITEM(CMS_PasswordRecipientInfo)
+DECLARE_ASN1_ALLOC_FUNCTIONS(CMS_IssuerAndSerialNumber)
+
+# define CMS_SIGNERINFO_ISSUER_SERIAL    0
+# define CMS_SIGNERINFO_KEYIDENTIFIER    1
+
+# define CMS_RECIPINFO_ISSUER_SERIAL     0
+# define CMS_RECIPINFO_KEYIDENTIFIER     1
+
+# define CMS_REK_ISSUER_SERIAL           0
+# define CMS_REK_KEYIDENTIFIER           1
+
+# define CMS_OIK_ISSUER_SERIAL           0
+# define CMS_OIK_KEYIDENTIFIER           1
+# define CMS_OIK_PUBKEY                  2
+
+BIO *cms_content_bio(CMS_ContentInfo *cms);
+
+CMS_ContentInfo *cms_Data_create(void);
+
+CMS_ContentInfo *cms_DigestedData_create(const EVP_MD *md);
+BIO *cms_DigestedData_init_bio(CMS_ContentInfo *cms);
+int cms_DigestedData_do_final(CMS_ContentInfo *cms, BIO *chain, int verify);
+
+BIO *cms_SignedData_init_bio(CMS_ContentInfo *cms);
+int cms_SignedData_final(CMS_ContentInfo *cms, BIO *chain);
+int cms_set1_SignerIdentifier(CMS_SignerIdentifier *sid, X509 *cert,
+                              int type);
+int cms_SignerIdentifier_get0_signer_id(CMS_SignerIdentifier *sid,
+                                        ASN1_OCTET_STRING **keyid,
+                                        X509_NAME **issuer,
+                                        ASN1_INTEGER **sno);
+int cms_SignerIdentifier_cert_cmp(CMS_SignerIdentifier *sid, X509 *cert);
+
+CMS_ContentInfo *cms_CompressedData_create(int comp_nid);
+BIO *cms_CompressedData_init_bio(CMS_ContentInfo *cms);
+
+BIO *cms_DigestAlgorithm_init_bio(X509_ALGOR *digestAlgorithm);
+int cms_DigestAlgorithm_find_ctx(EVP_MD_CTX *mctx, BIO *chain,
+                                 X509_ALGOR *mdalg);
+
+int cms_ias_cert_cmp(CMS_IssuerAndSerialNumber *ias, X509 *cert);
+int cms_keyid_cert_cmp(ASN1_OCTET_STRING *keyid, X509 *cert);
+int cms_set1_ias(CMS_IssuerAndSerialNumber **pias, X509 *cert);
+int cms_set1_keyid(ASN1_OCTET_STRING **pkeyid, X509 *cert);
+
+BIO *cms_EncryptedContent_init_bio(CMS_EncryptedContentInfo *ec);
+BIO *cms_EncryptedData_init_bio(CMS_ContentInfo *cms);
+int cms_EncryptedContent_init(CMS_EncryptedContentInfo *ec,
+                              const EVP_CIPHER *cipher,
+                              const unsigned char *key, size_t keylen);
+
+int cms_Receipt_verify(CMS_ContentInfo *cms, CMS_ContentInfo *req_cms);
+int cms_msgSigDigest_add1(CMS_SignerInfo *dest, CMS_SignerInfo *src);
+ASN1_OCTET_STRING *cms_encode_Receipt(CMS_SignerInfo *si);
+
+BIO *cms_EnvelopedData_init_bio(CMS_ContentInfo *cms);
+CMS_EnvelopedData *cms_get0_enveloped(CMS_ContentInfo *cms);
+int cms_env_asn1_ctrl(CMS_RecipientInfo *ri, int cmd);
+int cms_pkey_get_ri_type(EVP_PKEY *pk);
+/* KARI routines */
+int cms_RecipientInfo_kari_init(CMS_RecipientInfo *ri, X509 *recip,
+                                EVP_PKEY *pk, unsigned int flags);
+int cms_RecipientInfo_kari_encrypt(CMS_ContentInfo *cms,
+                                   CMS_RecipientInfo *ri);
+
+/* PWRI routines */
+int cms_RecipientInfo_pwri_crypt(CMS_ContentInfo *cms, CMS_RecipientInfo *ri,
+                                 int en_de);
+
+DECLARE_ASN1_ITEM(CMS_CertificateChoices)
+DECLARE_ASN1_ITEM(CMS_DigestedData)
+DECLARE_ASN1_ITEM(CMS_EncryptedData)
+DECLARE_ASN1_ITEM(CMS_EnvelopedData)
+DECLARE_ASN1_ITEM(CMS_KEKRecipientInfo)
+DECLARE_ASN1_ITEM(CMS_KeyAgreeRecipientInfo)
+DECLARE_ASN1_ITEM(CMS_KeyTransRecipientInfo)
+DECLARE_ASN1_ITEM(CMS_OriginatorPublicKey)
+DECLARE_ASN1_ITEM(CMS_OtherKeyAttribute)
+DECLARE_ASN1_ITEM(CMS_Receipt)
+DECLARE_ASN1_ITEM(CMS_ReceiptRequest)
+DECLARE_ASN1_ITEM(CMS_RecipientEncryptedKey)
+DECLARE_ASN1_ITEM(CMS_RecipientKeyIdentifier)
+DECLARE_ASN1_ITEM(CMS_RevocationInfoChoice)
+DECLARE_ASN1_ITEM(CMS_SignedData)
+DECLARE_ASN1_ITEM(CMS_CompressedData)
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_lib.c
new file mode 100644
index 000000000..c2cac2601
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_lib.c
@@ -0,0 +1,587 @@
+/*
+ * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/asn1t.h>
+#include <openssl/x509v3.h>
+#include <openssl/err.h>
+#include <openssl/pem.h>
+#include <openssl/bio.h>
+#include <openssl/asn1.h>
+#include <openssl/cms.h>
+#include "cms_lcl.h"
+
+IMPLEMENT_ASN1_FUNCTIONS(CMS_ContentInfo)
+IMPLEMENT_ASN1_PRINT_FUNCTION(CMS_ContentInfo)
+
+const ASN1_OBJECT *CMS_get0_type(const CMS_ContentInfo *cms)
+{
+    return cms->contentType;
+}
+
+CMS_ContentInfo *cms_Data_create(void)
+{
+    CMS_ContentInfo *cms;
+    cms = CMS_ContentInfo_new();
+    if (cms != NULL) {
+        cms->contentType = OBJ_nid2obj(NID_pkcs7_data);
+        /* Never detached */
+        CMS_set_detached(cms, 0);
+    }
+    return cms;
+}
+
+BIO *cms_content_bio(CMS_ContentInfo *cms)
+{
+    ASN1_OCTET_STRING **pos = CMS_get0_content(cms);
+    if (!pos)
+        return NULL;
+    /* If content detached data goes nowhere: create NULL BIO */
+    if (!*pos)
+        return BIO_new(BIO_s_null());
+    /*
+     * If content not detached and created return memory BIO
+     */
+    if (!*pos || ((*pos)->flags == ASN1_STRING_FLAG_CONT))
+        return BIO_new(BIO_s_mem());
+    /* Else content was read in: return read only BIO for it */
+    return BIO_new_mem_buf((*pos)->data, (*pos)->length);
+}
+
+BIO *CMS_dataInit(CMS_ContentInfo *cms, BIO *icont)
+{
+    BIO *cmsbio, *cont;
+    if (icont)
+        cont = icont;
+    else
+        cont = cms_content_bio(cms);
+    if (!cont) {
+        CMSerr(CMS_F_CMS_DATAINIT, CMS_R_NO_CONTENT);
+        return NULL;
+    }
+    switch (OBJ_obj2nid(cms->contentType)) {
+
+    case NID_pkcs7_data:
+        return cont;
+
+    case NID_pkcs7_signed:
+        cmsbio = cms_SignedData_init_bio(cms);
+        break;
+
+    case NID_pkcs7_digest:
+        cmsbio = cms_DigestedData_init_bio(cms);
+        break;
+#ifdef ZLIB
+    case NID_id_smime_ct_compressedData:
+        cmsbio = cms_CompressedData_init_bio(cms);
+        break;
+#endif
+
+    case NID_pkcs7_encrypted:
+        cmsbio = cms_EncryptedData_init_bio(cms);
+        break;
+
+    case NID_pkcs7_enveloped:
+        cmsbio = cms_EnvelopedData_init_bio(cms);
+        break;
+
+    default:
+        CMSerr(CMS_F_CMS_DATAINIT, CMS_R_UNSUPPORTED_TYPE);
+        return NULL;
+    }
+
+    if (cmsbio)
+        return BIO_push(cmsbio, cont);
+
+    if (!icont)
+        BIO_free(cont);
+    return NULL;
+
+}
+
+int CMS_dataFinal(CMS_ContentInfo *cms, BIO *cmsbio)
+{
+    ASN1_OCTET_STRING **pos = CMS_get0_content(cms);
+    if (!pos)
+        return 0;
+    /* If embedded content find memory BIO and set content */
+    if (*pos && ((*pos)->flags & ASN1_STRING_FLAG_CONT)) {
+        BIO *mbio;
+        unsigned char *cont;
+        long contlen;
+        mbio = BIO_find_type(cmsbio, BIO_TYPE_MEM);
+        if (!mbio) {
+            CMSerr(CMS_F_CMS_DATAFINAL, CMS_R_CONTENT_NOT_FOUND);
+            return 0;
+        }
+        contlen = BIO_get_mem_data(mbio, &cont);
+        /* Set bio as read only so its content can't be clobbered */
+        BIO_set_flags(mbio, BIO_FLAGS_MEM_RDONLY);
+        BIO_set_mem_eof_return(mbio, 0);
+        ASN1_STRING_set0(*pos, cont, contlen);
+        (*pos)->flags &= ~ASN1_STRING_FLAG_CONT;
+    }
+
+    switch (OBJ_obj2nid(cms->contentType)) {
+
+    case NID_pkcs7_data:
+    case NID_pkcs7_enveloped:
+    case NID_pkcs7_encrypted:
+    case NID_id_smime_ct_compressedData:
+        /* Nothing to do */
+        return 1;
+
+    case NID_pkcs7_signed:
+        return cms_SignedData_final(cms, cmsbio);
+
+    case NID_pkcs7_digest:
+        return cms_DigestedData_do_final(cms, cmsbio, 0);
+
+    default:
+        CMSerr(CMS_F_CMS_DATAFINAL, CMS_R_UNSUPPORTED_TYPE);
+        return 0;
+    }
+}
+
+/*
+ * Return an OCTET STRING pointer to content. This allows it to be accessed
+ * or set later.
+ */
+
+ASN1_OCTET_STRING **CMS_get0_content(CMS_ContentInfo *cms)
+{
+    switch (OBJ_obj2nid(cms->contentType)) {
+
+    case NID_pkcs7_data:
+        return &cms->d.data;
+
+    case NID_pkcs7_signed:
+        return &cms->d.signedData->encapContentInfo->eContent;
+
+    case NID_pkcs7_enveloped:
+        return &cms->d.envelopedData->encryptedContentInfo->encryptedContent;
+
+    case NID_pkcs7_digest:
+        return &cms->d.digestedData->encapContentInfo->eContent;
+
+    case NID_pkcs7_encrypted:
+        return &cms->d.encryptedData->encryptedContentInfo->encryptedContent;
+
+    case NID_id_smime_ct_authData:
+        return &cms->d.authenticatedData->encapContentInfo->eContent;
+
+    case NID_id_smime_ct_compressedData:
+        return &cms->d.compressedData->encapContentInfo->eContent;
+
+    default:
+        if (cms->d.other->type == V_ASN1_OCTET_STRING)
+            return &cms->d.other->value.octet_string;
+        CMSerr(CMS_F_CMS_GET0_CONTENT, CMS_R_UNSUPPORTED_CONTENT_TYPE);
+        return NULL;
+
+    }
+}
+
+/*
+ * Return an ASN1_OBJECT pointer to content type. This allows it to be
+ * accessed or set later.
+ */
+
+static ASN1_OBJECT **cms_get0_econtent_type(CMS_ContentInfo *cms)
+{
+    switch (OBJ_obj2nid(cms->contentType)) {
+
+    case NID_pkcs7_signed:
+        return &cms->d.signedData->encapContentInfo->eContentType;
+
+    case NID_pkcs7_enveloped:
+        return &cms->d.envelopedData->encryptedContentInfo->contentType;
+
+    case NID_pkcs7_digest:
+        return &cms->d.digestedData->encapContentInfo->eContentType;
+
+    case NID_pkcs7_encrypted:
+        return &cms->d.encryptedData->encryptedContentInfo->contentType;
+
+    case NID_id_smime_ct_authData:
+        return &cms->d.authenticatedData->encapContentInfo->eContentType;
+
+    case NID_id_smime_ct_compressedData:
+        return &cms->d.compressedData->encapContentInfo->eContentType;
+
+    default:
+        CMSerr(CMS_F_CMS_GET0_ECONTENT_TYPE, CMS_R_UNSUPPORTED_CONTENT_TYPE);
+        return NULL;
+
+    }
+}
+
+const ASN1_OBJECT *CMS_get0_eContentType(CMS_ContentInfo *cms)
+{
+    ASN1_OBJECT **petype;
+    petype = cms_get0_econtent_type(cms);
+    if (petype)
+        return *petype;
+    return NULL;
+}
+
+int CMS_set1_eContentType(CMS_ContentInfo *cms, const ASN1_OBJECT *oid)
+{
+    ASN1_OBJECT **petype, *etype;
+    petype = cms_get0_econtent_type(cms);
+    if (!petype)
+        return 0;
+    if (!oid)
+        return 1;
+    etype = OBJ_dup(oid);
+    if (!etype)
+        return 0;
+    ASN1_OBJECT_free(*petype);
+    *petype = etype;
+    return 1;
+}
+
+int CMS_is_detached(CMS_ContentInfo *cms)
+{
+    ASN1_OCTET_STRING **pos;
+    pos = CMS_get0_content(cms);
+    if (!pos)
+        return -1;
+    if (*pos)
+        return 0;
+    return 1;
+}
+
+int CMS_set_detached(CMS_ContentInfo *cms, int detached)
+{
+    ASN1_OCTET_STRING **pos;
+    pos = CMS_get0_content(cms);
+    if (!pos)
+        return 0;
+    if (detached) {
+        ASN1_OCTET_STRING_free(*pos);
+        *pos = NULL;
+        return 1;
+    }
+    if (*pos == NULL)
+        *pos = ASN1_OCTET_STRING_new();
+    if (*pos != NULL) {
+        /*
+         * NB: special flag to show content is created and not read in.
+         */
+        (*pos)->flags |= ASN1_STRING_FLAG_CONT;
+        return 1;
+    }
+    CMSerr(CMS_F_CMS_SET_DETACHED, ERR_R_MALLOC_FAILURE);
+    return 0;
+}
+
+/* Create a digest BIO from an X509_ALGOR structure */
+
+BIO *cms_DigestAlgorithm_init_bio(X509_ALGOR *digestAlgorithm)
+{
+    BIO *mdbio = NULL;
+    const ASN1_OBJECT *digestoid;
+    const EVP_MD *digest;
+    X509_ALGOR_get0(&digestoid, NULL, NULL, digestAlgorithm);
+    digest = EVP_get_digestbyobj(digestoid);
+    if (!digest) {
+        CMSerr(CMS_F_CMS_DIGESTALGORITHM_INIT_BIO,
+               CMS_R_UNKNOWN_DIGEST_ALGORITHM);
+        goto err;
+    }
+    mdbio = BIO_new(BIO_f_md());
+    if (mdbio == NULL || !BIO_set_md(mdbio, digest)) {
+        CMSerr(CMS_F_CMS_DIGESTALGORITHM_INIT_BIO, CMS_R_MD_BIO_INIT_ERROR);
+        goto err;
+    }
+    return mdbio;
+ err:
+    BIO_free(mdbio);
+    return NULL;
+}
+
+/* Locate a message digest content from a BIO chain based on SignerInfo */
+
+int cms_DigestAlgorithm_find_ctx(EVP_MD_CTX *mctx, BIO *chain,
+                                 X509_ALGOR *mdalg)
+{
+    int nid;
+    const ASN1_OBJECT *mdoid;
+    X509_ALGOR_get0(&mdoid, NULL, NULL, mdalg);
+    nid = OBJ_obj2nid(mdoid);
+    /* Look for digest type to match signature */
+    for (;;) {
+        EVP_MD_CTX *mtmp;
+        chain = BIO_find_type(chain, BIO_TYPE_MD);
+        if (chain == NULL) {
+            CMSerr(CMS_F_CMS_DIGESTALGORITHM_FIND_CTX,
+                   CMS_R_NO_MATCHING_DIGEST);
+            return 0;
+        }
+        BIO_get_md_ctx(chain, &mtmp);
+        if (EVP_MD_CTX_type(mtmp) == nid
+            /*
+             * Workaround for broken implementations that use signature
+             * algorithm OID instead of digest.
+             */
+            || EVP_MD_pkey_type(EVP_MD_CTX_md(mtmp)) == nid)
+            return EVP_MD_CTX_copy_ex(mctx, mtmp);
+        chain = BIO_next(chain);
+    }
+}
+
+static STACK_OF(CMS_CertificateChoices)
+**cms_get0_certificate_choices(CMS_ContentInfo *cms)
+{
+    switch (OBJ_obj2nid(cms->contentType)) {
+
+    case NID_pkcs7_signed:
+        return &cms->d.signedData->certificates;
+
+    case NID_pkcs7_enveloped:
+        if (cms->d.envelopedData->originatorInfo == NULL)
+            return NULL;
+        return &cms->d.envelopedData->originatorInfo->certificates;
+
+    default:
+        CMSerr(CMS_F_CMS_GET0_CERTIFICATE_CHOICES,
+               CMS_R_UNSUPPORTED_CONTENT_TYPE);
+        return NULL;
+
+    }
+}
+
+CMS_CertificateChoices *CMS_add0_CertificateChoices(CMS_ContentInfo *cms)
+{
+    STACK_OF(CMS_CertificateChoices) **pcerts;
+    CMS_CertificateChoices *cch;
+    pcerts = cms_get0_certificate_choices(cms);
+    if (!pcerts)
+        return NULL;
+    if (!*pcerts)
+        *pcerts = sk_CMS_CertificateChoices_new_null();
+    if (!*pcerts)
+        return NULL;
+    cch = M_ASN1_new_of(CMS_CertificateChoices);
+    if (!cch)
+        return NULL;
+    if (!sk_CMS_CertificateChoices_push(*pcerts, cch)) {
+        M_ASN1_free_of(cch, CMS_CertificateChoices);
+        return NULL;
+    }
+    return cch;
+}
+
+int CMS_add0_cert(CMS_ContentInfo *cms, X509 *cert)
+{
+    CMS_CertificateChoices *cch;
+    STACK_OF(CMS_CertificateChoices) **pcerts;
+    int i;
+    pcerts = cms_get0_certificate_choices(cms);
+    if (!pcerts)
+        return 0;
+    for (i = 0; i < sk_CMS_CertificateChoices_num(*pcerts); i++) {
+        cch = sk_CMS_CertificateChoices_value(*pcerts, i);
+        if (cch->type == CMS_CERTCHOICE_CERT) {
+            if (!X509_cmp(cch->d.certificate, cert)) {
+                CMSerr(CMS_F_CMS_ADD0_CERT,
+                       CMS_R_CERTIFICATE_ALREADY_PRESENT);
+                return 0;
+            }
+        }
+    }
+    cch = CMS_add0_CertificateChoices(cms);
+    if (!cch)
+        return 0;
+    cch->type = CMS_CERTCHOICE_CERT;
+    cch->d.certificate = cert;
+    return 1;
+}
+
+int CMS_add1_cert(CMS_ContentInfo *cms, X509 *cert)
+{
+    int r;
+    r = CMS_add0_cert(cms, cert);
+    if (r > 0)
+        X509_up_ref(cert);
+    return r;
+}
+
+static STACK_OF(CMS_RevocationInfoChoice)
+**cms_get0_revocation_choices(CMS_ContentInfo *cms)
+{
+    switch (OBJ_obj2nid(cms->contentType)) {
+
+    case NID_pkcs7_signed:
+        return &cms->d.signedData->crls;
+
+    case NID_pkcs7_enveloped:
+        if (cms->d.envelopedData->originatorInfo == NULL)
+            return NULL;
+        return &cms->d.envelopedData->originatorInfo->crls;
+
+    default:
+        CMSerr(CMS_F_CMS_GET0_REVOCATION_CHOICES,
+               CMS_R_UNSUPPORTED_CONTENT_TYPE);
+        return NULL;
+
+    }
+}
+
+CMS_RevocationInfoChoice *CMS_add0_RevocationInfoChoice(CMS_ContentInfo *cms)
+{
+    STACK_OF(CMS_RevocationInfoChoice) **pcrls;
+    CMS_RevocationInfoChoice *rch;
+    pcrls = cms_get0_revocation_choices(cms);
+    if (!pcrls)
+        return NULL;
+    if (!*pcrls)
+        *pcrls = sk_CMS_RevocationInfoChoice_new_null();
+    if (!*pcrls)
+        return NULL;
+    rch = M_ASN1_new_of(CMS_RevocationInfoChoice);
+    if (!rch)
+        return NULL;
+    if (!sk_CMS_RevocationInfoChoice_push(*pcrls, rch)) {
+        M_ASN1_free_of(rch, CMS_RevocationInfoChoice);
+        return NULL;
+    }
+    return rch;
+}
+
+int CMS_add0_crl(CMS_ContentInfo *cms, X509_CRL *crl)
+{
+    CMS_RevocationInfoChoice *rch;
+    rch = CMS_add0_RevocationInfoChoice(cms);
+    if (!rch)
+        return 0;
+    rch->type = CMS_REVCHOICE_CRL;
+    rch->d.crl = crl;
+    return 1;
+}
+
+int CMS_add1_crl(CMS_ContentInfo *cms, X509_CRL *crl)
+{
+    int r;
+    r = CMS_add0_crl(cms, crl);
+    if (r > 0)
+        X509_CRL_up_ref(crl);
+    return r;
+}
+
+STACK_OF(X509) *CMS_get1_certs(CMS_ContentInfo *cms)
+{
+    STACK_OF(X509) *certs = NULL;
+    CMS_CertificateChoices *cch;
+    STACK_OF(CMS_CertificateChoices) **pcerts;
+    int i;
+    pcerts = cms_get0_certificate_choices(cms);
+    if (!pcerts)
+        return NULL;
+    for (i = 0; i < sk_CMS_CertificateChoices_num(*pcerts); i++) {
+        cch = sk_CMS_CertificateChoices_value(*pcerts, i);
+        if (cch->type == 0) {
+            if (!certs) {
+                certs = sk_X509_new_null();
+                if (!certs)
+                    return NULL;
+            }
+            if (!sk_X509_push(certs, cch->d.certificate)) {
+                sk_X509_pop_free(certs, X509_free);
+                return NULL;
+            }
+            X509_up_ref(cch->d.certificate);
+        }
+    }
+    return certs;
+
+}
+
+STACK_OF(X509_CRL) *CMS_get1_crls(CMS_ContentInfo *cms)
+{
+    STACK_OF(X509_CRL) *crls = NULL;
+    STACK_OF(CMS_RevocationInfoChoice) **pcrls;
+    CMS_RevocationInfoChoice *rch;
+    int i;
+    pcrls = cms_get0_revocation_choices(cms);
+    if (!pcrls)
+        return NULL;
+    for (i = 0; i < sk_CMS_RevocationInfoChoice_num(*pcrls); i++) {
+        rch = sk_CMS_RevocationInfoChoice_value(*pcrls, i);
+        if (rch->type == 0) {
+            if (!crls) {
+                crls = sk_X509_CRL_new_null();
+                if (!crls)
+                    return NULL;
+            }
+            if (!sk_X509_CRL_push(crls, rch->d.crl)) {
+                sk_X509_CRL_pop_free(crls, X509_CRL_free);
+                return NULL;
+            }
+            X509_CRL_up_ref(rch->d.crl);
+        }
+    }
+    return crls;
+}
+
+int cms_ias_cert_cmp(CMS_IssuerAndSerialNumber *ias, X509 *cert)
+{
+    int ret;
+    ret = X509_NAME_cmp(ias->issuer, X509_get_issuer_name(cert));
+    if (ret)
+        return ret;
+    return ASN1_INTEGER_cmp(ias->serialNumber, X509_get_serialNumber(cert));
+}
+
+int cms_keyid_cert_cmp(ASN1_OCTET_STRING *keyid, X509 *cert)
+{
+    const ASN1_OCTET_STRING *cert_keyid = X509_get0_subject_key_id(cert);
+
+    if (cert_keyid == NULL)
+        return -1;
+    return ASN1_OCTET_STRING_cmp(keyid, cert_keyid);
+}
+
+int cms_set1_ias(CMS_IssuerAndSerialNumber **pias, X509 *cert)
+{
+    CMS_IssuerAndSerialNumber *ias;
+    ias = M_ASN1_new_of(CMS_IssuerAndSerialNumber);
+    if (!ias)
+        goto err;
+    if (!X509_NAME_set(&ias->issuer, X509_get_issuer_name(cert)))
+        goto err;
+    if (!ASN1_STRING_copy(ias->serialNumber, X509_get_serialNumber(cert)))
+        goto err;
+    M_ASN1_free_of(*pias, CMS_IssuerAndSerialNumber);
+    *pias = ias;
+    return 1;
+ err:
+    M_ASN1_free_of(ias, CMS_IssuerAndSerialNumber);
+    CMSerr(CMS_F_CMS_SET1_IAS, ERR_R_MALLOC_FAILURE);
+    return 0;
+}
+
+int cms_set1_keyid(ASN1_OCTET_STRING **pkeyid, X509 *cert)
+{
+    ASN1_OCTET_STRING *keyid = NULL;
+    const ASN1_OCTET_STRING *cert_keyid;
+    cert_keyid = X509_get0_subject_key_id(cert);
+    if (cert_keyid == NULL) {
+        CMSerr(CMS_F_CMS_SET1_KEYID, CMS_R_CERTIFICATE_HAS_NO_KEYID);
+        return 0;
+    }
+    keyid = ASN1_STRING_dup(cert_keyid);
+    if (!keyid) {
+        CMSerr(CMS_F_CMS_SET1_KEYID, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ASN1_OCTET_STRING_free(*pkeyid);
+    *pkeyid = keyid;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_pwri.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_pwri.c
new file mode 100644
index 000000000..26e3bdcf9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_pwri.c
@@ -0,0 +1,394 @@
+/*
+ * Copyright 2009-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/pem.h>
+#include <openssl/x509v3.h>
+#include <openssl/err.h>
+#include <openssl/cms.h>
+#include <openssl/rand.h>
+#include <openssl/aes.h>
+#include "cms_lcl.h"
+#include "internal/asn1_int.h"
+
+int CMS_RecipientInfo_set0_password(CMS_RecipientInfo *ri,
+                                    unsigned char *pass, ossl_ssize_t passlen)
+{
+    CMS_PasswordRecipientInfo *pwri;
+    if (ri->type != CMS_RECIPINFO_PASS) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_SET0_PASSWORD, CMS_R_NOT_PWRI);
+        return 0;
+    }
+
+    pwri = ri->d.pwri;
+    pwri->pass = pass;
+    if (pass && passlen < 0)
+        passlen = strlen((char *)pass);
+    pwri->passlen = passlen;
+    return 1;
+}
+
+CMS_RecipientInfo *CMS_add0_recipient_password(CMS_ContentInfo *cms,
+                                               int iter, int wrap_nid,
+                                               int pbe_nid,
+                                               unsigned char *pass,
+                                               ossl_ssize_t passlen,
+                                               const EVP_CIPHER *kekciph)
+{
+    CMS_RecipientInfo *ri = NULL;
+    CMS_EnvelopedData *env;
+    CMS_PasswordRecipientInfo *pwri;
+    EVP_CIPHER_CTX *ctx = NULL;
+    X509_ALGOR *encalg = NULL;
+    unsigned char iv[EVP_MAX_IV_LENGTH];
+    int ivlen;
+
+    env = cms_get0_enveloped(cms);
+    if (!env)
+        return NULL;
+
+    if (wrap_nid <= 0)
+        wrap_nid = NID_id_alg_PWRI_KEK;
+
+    if (pbe_nid <= 0)
+        pbe_nid = NID_id_pbkdf2;
+
+    /* Get from enveloped data */
+    if (kekciph == NULL)
+        kekciph = env->encryptedContentInfo->cipher;
+
+    if (kekciph == NULL) {
+        CMSerr(CMS_F_CMS_ADD0_RECIPIENT_PASSWORD, CMS_R_NO_CIPHER);
+        return NULL;
+    }
+    if (wrap_nid != NID_id_alg_PWRI_KEK) {
+        CMSerr(CMS_F_CMS_ADD0_RECIPIENT_PASSWORD,
+               CMS_R_UNSUPPORTED_KEY_ENCRYPTION_ALGORITHM);
+        return NULL;
+    }
+
+    /* Setup algorithm identifier for cipher */
+    encalg = X509_ALGOR_new();
+    if (encalg == NULL) {
+        goto merr;
+    }
+    ctx = EVP_CIPHER_CTX_new();
+
+    if (EVP_EncryptInit_ex(ctx, kekciph, NULL, NULL, NULL) <= 0) {
+        CMSerr(CMS_F_CMS_ADD0_RECIPIENT_PASSWORD, ERR_R_EVP_LIB);
+        goto err;
+    }
+
+    ivlen = EVP_CIPHER_CTX_iv_length(ctx);
+
+    if (ivlen > 0) {
+        if (RAND_bytes(iv, ivlen) <= 0)
+            goto err;
+        if (EVP_EncryptInit_ex(ctx, NULL, NULL, NULL, iv) <= 0) {
+            CMSerr(CMS_F_CMS_ADD0_RECIPIENT_PASSWORD, ERR_R_EVP_LIB);
+            goto err;
+        }
+        encalg->parameter = ASN1_TYPE_new();
+        if (!encalg->parameter) {
+            CMSerr(CMS_F_CMS_ADD0_RECIPIENT_PASSWORD, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        if (EVP_CIPHER_param_to_asn1(ctx, encalg->parameter) <= 0) {
+            CMSerr(CMS_F_CMS_ADD0_RECIPIENT_PASSWORD,
+                   CMS_R_CIPHER_PARAMETER_INITIALISATION_ERROR);
+            goto err;
+        }
+    }
+
+    encalg->algorithm = OBJ_nid2obj(EVP_CIPHER_CTX_type(ctx));
+
+    EVP_CIPHER_CTX_free(ctx);
+    ctx = NULL;
+
+    /* Initialize recipient info */
+    ri = M_ASN1_new_of(CMS_RecipientInfo);
+    if (ri == NULL)
+        goto merr;
+
+    ri->d.pwri = M_ASN1_new_of(CMS_PasswordRecipientInfo);
+    if (ri->d.pwri == NULL)
+        goto merr;
+    ri->type = CMS_RECIPINFO_PASS;
+
+    pwri = ri->d.pwri;
+    /* Since this is overwritten, free up empty structure already there */
+    X509_ALGOR_free(pwri->keyEncryptionAlgorithm);
+    pwri->keyEncryptionAlgorithm = X509_ALGOR_new();
+    if (pwri->keyEncryptionAlgorithm == NULL)
+        goto merr;
+    pwri->keyEncryptionAlgorithm->algorithm = OBJ_nid2obj(wrap_nid);
+    pwri->keyEncryptionAlgorithm->parameter = ASN1_TYPE_new();
+    if (pwri->keyEncryptionAlgorithm->parameter == NULL)
+        goto merr;
+
+    if (!ASN1_item_pack(encalg, ASN1_ITEM_rptr(X509_ALGOR),
+                        &pwri->keyEncryptionAlgorithm->parameter->
+                        value.sequence))
+         goto merr;
+    pwri->keyEncryptionAlgorithm->parameter->type = V_ASN1_SEQUENCE;
+
+    X509_ALGOR_free(encalg);
+    encalg = NULL;
+
+    /* Setup PBE algorithm */
+
+    pwri->keyDerivationAlgorithm = PKCS5_pbkdf2_set(iter, NULL, 0, -1, -1);
+
+    if (!pwri->keyDerivationAlgorithm)
+        goto err;
+
+    CMS_RecipientInfo_set0_password(ri, pass, passlen);
+    pwri->version = 0;
+
+    if (!sk_CMS_RecipientInfo_push(env->recipientInfos, ri))
+        goto merr;
+
+    return ri;
+
+ merr:
+    CMSerr(CMS_F_CMS_ADD0_RECIPIENT_PASSWORD, ERR_R_MALLOC_FAILURE);
+ err:
+    EVP_CIPHER_CTX_free(ctx);
+    if (ri)
+        M_ASN1_free_of(ri, CMS_RecipientInfo);
+    X509_ALGOR_free(encalg);
+    return NULL;
+
+}
+
+/*
+ * This is an implementation of the key wrapping mechanism in RFC3211, at
+ * some point this should go into EVP.
+ */
+
+static int kek_unwrap_key(unsigned char *out, size_t *outlen,
+                          const unsigned char *in, size_t inlen,
+                          EVP_CIPHER_CTX *ctx)
+{
+    size_t blocklen = EVP_CIPHER_CTX_block_size(ctx);
+    unsigned char *tmp;
+    int outl, rv = 0;
+    if (inlen < 2 * blocklen) {
+        /* too small */
+        return 0;
+    }
+    if (inlen % blocklen) {
+        /* Invalid size */
+        return 0;
+    }
+    if ((tmp = OPENSSL_malloc(inlen)) == NULL) {
+        CMSerr(CMS_F_KEK_UNWRAP_KEY, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    /* setup IV by decrypting last two blocks */
+    if (!EVP_DecryptUpdate(ctx, tmp + inlen - 2 * blocklen, &outl,
+                           in + inlen - 2 * blocklen, blocklen * 2)
+        /*
+         * Do a decrypt of last decrypted block to set IV to correct value
+         * output it to start of buffer so we don't corrupt decrypted block
+         * this works because buffer is at least two block lengths long.
+         */
+        || !EVP_DecryptUpdate(ctx, tmp, &outl,
+                              tmp + inlen - blocklen, blocklen)
+        /* Can now decrypt first n - 1 blocks */
+        || !EVP_DecryptUpdate(ctx, tmp, &outl, in, inlen - blocklen)
+
+        /* Reset IV to original value */
+        || !EVP_DecryptInit_ex(ctx, NULL, NULL, NULL, NULL)
+        /* Decrypt again */
+        || !EVP_DecryptUpdate(ctx, tmp, &outl, tmp, inlen))
+        goto err;
+    /* Check check bytes */
+    if (((tmp[1] ^ tmp[4]) & (tmp[2] ^ tmp[5]) & (tmp[3] ^ tmp[6])) != 0xff) {
+        /* Check byte failure */
+        goto err;
+    }
+    if (inlen < (size_t)(tmp[0] - 4)) {
+        /* Invalid length value */
+        goto err;
+    }
+    *outlen = (size_t)tmp[0];
+    memcpy(out, tmp + 4, *outlen);
+    rv = 1;
+ err:
+    OPENSSL_clear_free(tmp, inlen);
+    return rv;
+
+}
+
+static int kek_wrap_key(unsigned char *out, size_t *outlen,
+                        const unsigned char *in, size_t inlen,
+                        EVP_CIPHER_CTX *ctx)
+{
+    size_t blocklen = EVP_CIPHER_CTX_block_size(ctx);
+    size_t olen;
+    int dummy;
+    /*
+     * First decide length of output buffer: need header and round up to
+     * multiple of block length.
+     */
+    olen = (inlen + 4 + blocklen - 1) / blocklen;
+    olen *= blocklen;
+    if (olen < 2 * blocklen) {
+        /* Key too small */
+        return 0;
+    }
+    if (inlen > 0xFF) {
+        /* Key too large */
+        return 0;
+    }
+    if (out) {
+        /* Set header */
+        out[0] = (unsigned char)inlen;
+        out[1] = in[0] ^ 0xFF;
+        out[2] = in[1] ^ 0xFF;
+        out[3] = in[2] ^ 0xFF;
+        memcpy(out + 4, in, inlen);
+        /* Add random padding to end */
+        if (olen > inlen + 4
+            && RAND_bytes(out + 4 + inlen, olen - 4 - inlen) <= 0)
+            return 0;
+        /* Encrypt twice */
+        if (!EVP_EncryptUpdate(ctx, out, &dummy, out, olen)
+            || !EVP_EncryptUpdate(ctx, out, &dummy, out, olen))
+            return 0;
+    }
+
+    *outlen = olen;
+
+    return 1;
+}
+
+/* Encrypt/Decrypt content key in PWRI recipient info */
+
+int cms_RecipientInfo_pwri_crypt(CMS_ContentInfo *cms, CMS_RecipientInfo *ri,
+                                 int en_de)
+{
+    CMS_EncryptedContentInfo *ec;
+    CMS_PasswordRecipientInfo *pwri;
+    int r = 0;
+    X509_ALGOR *algtmp, *kekalg = NULL;
+    EVP_CIPHER_CTX *kekctx = NULL;
+    const EVP_CIPHER *kekcipher;
+    unsigned char *key = NULL;
+    size_t keylen;
+
+    ec = cms->d.envelopedData->encryptedContentInfo;
+
+    pwri = ri->d.pwri;
+
+    if (!pwri->pass) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_PWRI_CRYPT, CMS_R_NO_PASSWORD);
+        return 0;
+    }
+    algtmp = pwri->keyEncryptionAlgorithm;
+
+    if (!algtmp || OBJ_obj2nid(algtmp->algorithm) != NID_id_alg_PWRI_KEK) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_PWRI_CRYPT,
+               CMS_R_UNSUPPORTED_KEY_ENCRYPTION_ALGORITHM);
+        return 0;
+    }
+
+    kekalg = ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(X509_ALGOR),
+                                       algtmp->parameter);
+
+    if (kekalg == NULL) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_PWRI_CRYPT,
+               CMS_R_INVALID_KEY_ENCRYPTION_PARAMETER);
+        return 0;
+    }
+
+    kekcipher = EVP_get_cipherbyobj(kekalg->algorithm);
+
+    if (!kekcipher) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_PWRI_CRYPT, CMS_R_UNKNOWN_CIPHER);
+        return 0;
+    }
+
+    kekctx = EVP_CIPHER_CTX_new();
+    if (kekctx == NULL) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_PWRI_CRYPT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    /* Fixup cipher based on AlgorithmIdentifier to set IV etc */
+    if (!EVP_CipherInit_ex(kekctx, kekcipher, NULL, NULL, NULL, en_de))
+        goto err;
+    EVP_CIPHER_CTX_set_padding(kekctx, 0);
+    if (EVP_CIPHER_asn1_to_param(kekctx, kekalg->parameter) <= 0) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_PWRI_CRYPT,
+               CMS_R_CIPHER_PARAMETER_INITIALISATION_ERROR);
+        goto err;
+    }
+
+    algtmp = pwri->keyDerivationAlgorithm;
+
+    /* Finish password based key derivation to setup key in "ctx" */
+
+    if (EVP_PBE_CipherInit(algtmp->algorithm,
+                           (char *)pwri->pass, pwri->passlen,
+                           algtmp->parameter, kekctx, en_de) < 0) {
+        CMSerr(CMS_F_CMS_RECIPIENTINFO_PWRI_CRYPT, ERR_R_EVP_LIB);
+        goto err;
+    }
+
+    /* Finally wrap/unwrap the key */
+
+    if (en_de) {
+
+        if (!kek_wrap_key(NULL, &keylen, ec->key, ec->keylen, kekctx))
+            goto err;
+
+        key = OPENSSL_malloc(keylen);
+
+        if (key == NULL)
+            goto err;
+
+        if (!kek_wrap_key(key, &keylen, ec->key, ec->keylen, kekctx))
+            goto err;
+        pwri->encryptedKey->data = key;
+        pwri->encryptedKey->length = keylen;
+    } else {
+        key = OPENSSL_malloc(pwri->encryptedKey->length);
+
+        if (key == NULL) {
+            CMSerr(CMS_F_CMS_RECIPIENTINFO_PWRI_CRYPT, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        if (!kek_unwrap_key(key, &keylen,
+                            pwri->encryptedKey->data,
+                            pwri->encryptedKey->length, kekctx)) {
+            CMSerr(CMS_F_CMS_RECIPIENTINFO_PWRI_CRYPT, CMS_R_UNWRAP_FAILURE);
+            goto err;
+        }
+
+        OPENSSL_clear_free(ec->key, ec->keylen);
+        ec->key = key;
+        ec->keylen = keylen;
+
+    }
+
+    r = 1;
+
+ err:
+
+    EVP_CIPHER_CTX_free(kekctx);
+
+    if (!r)
+        OPENSSL_free(key);
+    X509_ALGOR_free(kekalg);
+
+    return r;
+
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_sd.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_sd.c
new file mode 100644
index 000000000..ff2d540b6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_sd.c
@@ -0,0 +1,926 @@
+/*
+ * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/pem.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/err.h>
+#include <openssl/cms.h>
+#include "cms_lcl.h"
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+
+/* CMS SignedData Utilities */
+
+static CMS_SignedData *cms_get0_signed(CMS_ContentInfo *cms)
+{
+    if (OBJ_obj2nid(cms->contentType) != NID_pkcs7_signed) {
+        CMSerr(CMS_F_CMS_GET0_SIGNED, CMS_R_CONTENT_TYPE_NOT_SIGNED_DATA);
+        return NULL;
+    }
+    return cms->d.signedData;
+}
+
+static CMS_SignedData *cms_signed_data_init(CMS_ContentInfo *cms)
+{
+    if (cms->d.other == NULL) {
+        cms->d.signedData = M_ASN1_new_of(CMS_SignedData);
+        if (!cms->d.signedData) {
+            CMSerr(CMS_F_CMS_SIGNED_DATA_INIT, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+        cms->d.signedData->version = 1;
+        cms->d.signedData->encapContentInfo->eContentType =
+            OBJ_nid2obj(NID_pkcs7_data);
+        cms->d.signedData->encapContentInfo->partial = 1;
+        ASN1_OBJECT_free(cms->contentType);
+        cms->contentType = OBJ_nid2obj(NID_pkcs7_signed);
+        return cms->d.signedData;
+    }
+    return cms_get0_signed(cms);
+}
+
+/* Just initialise SignedData e.g. for certs only structure */
+
+int CMS_SignedData_init(CMS_ContentInfo *cms)
+{
+    if (cms_signed_data_init(cms))
+        return 1;
+    else
+        return 0;
+}
+
+/* Check structures and fixup version numbers (if necessary) */
+
+static void cms_sd_set_version(CMS_SignedData *sd)
+{
+    int i;
+    CMS_CertificateChoices *cch;
+    CMS_RevocationInfoChoice *rch;
+    CMS_SignerInfo *si;
+
+    for (i = 0; i < sk_CMS_CertificateChoices_num(sd->certificates); i++) {
+        cch = sk_CMS_CertificateChoices_value(sd->certificates, i);
+        if (cch->type == CMS_CERTCHOICE_OTHER) {
+            if (sd->version < 5)
+                sd->version = 5;
+        } else if (cch->type == CMS_CERTCHOICE_V2ACERT) {
+            if (sd->version < 4)
+                sd->version = 4;
+        } else if (cch->type == CMS_CERTCHOICE_V1ACERT) {
+            if (sd->version < 3)
+                sd->version = 3;
+        }
+    }
+
+    for (i = 0; i < sk_CMS_RevocationInfoChoice_num(sd->crls); i++) {
+        rch = sk_CMS_RevocationInfoChoice_value(sd->crls, i);
+        if (rch->type == CMS_REVCHOICE_OTHER) {
+            if (sd->version < 5)
+                sd->version = 5;
+        }
+    }
+
+    if ((OBJ_obj2nid(sd->encapContentInfo->eContentType) != NID_pkcs7_data)
+        && (sd->version < 3))
+        sd->version = 3;
+
+    for (i = 0; i < sk_CMS_SignerInfo_num(sd->signerInfos); i++) {
+        si = sk_CMS_SignerInfo_value(sd->signerInfos, i);
+        if (si->sid->type == CMS_SIGNERINFO_KEYIDENTIFIER) {
+            if (si->version < 3)
+                si->version = 3;
+            if (sd->version < 3)
+                sd->version = 3;
+        } else if (si->version < 1)
+            si->version = 1;
+    }
+
+    if (sd->version < 1)
+        sd->version = 1;
+
+}
+
+/* Copy an existing messageDigest value */
+
+static int cms_copy_messageDigest(CMS_ContentInfo *cms, CMS_SignerInfo *si)
+{
+    STACK_OF(CMS_SignerInfo) *sinfos;
+    CMS_SignerInfo *sitmp;
+    int i;
+    sinfos = CMS_get0_SignerInfos(cms);
+    for (i = 0; i < sk_CMS_SignerInfo_num(sinfos); i++) {
+        ASN1_OCTET_STRING *messageDigest;
+        sitmp = sk_CMS_SignerInfo_value(sinfos, i);
+        if (sitmp == si)
+            continue;
+        if (CMS_signed_get_attr_count(sitmp) < 0)
+            continue;
+        if (OBJ_cmp(si->digestAlgorithm->algorithm,
+                    sitmp->digestAlgorithm->algorithm))
+            continue;
+        messageDigest = CMS_signed_get0_data_by_OBJ(sitmp,
+                                                    OBJ_nid2obj
+                                                    (NID_pkcs9_messageDigest),
+                                                    -3, V_ASN1_OCTET_STRING);
+        if (!messageDigest) {
+            CMSerr(CMS_F_CMS_COPY_MESSAGEDIGEST,
+                   CMS_R_ERROR_READING_MESSAGEDIGEST_ATTRIBUTE);
+            return 0;
+        }
+
+        if (CMS_signed_add1_attr_by_NID(si, NID_pkcs9_messageDigest,
+                                        V_ASN1_OCTET_STRING,
+                                        messageDigest, -1))
+            return 1;
+        else
+            return 0;
+    }
+    CMSerr(CMS_F_CMS_COPY_MESSAGEDIGEST, CMS_R_NO_MATCHING_DIGEST);
+    return 0;
+}
+
+int cms_set1_SignerIdentifier(CMS_SignerIdentifier *sid, X509 *cert, int type)
+{
+    switch (type) {
+    case CMS_SIGNERINFO_ISSUER_SERIAL:
+        if (!cms_set1_ias(&sid->d.issuerAndSerialNumber, cert))
+            return 0;
+        break;
+
+    case CMS_SIGNERINFO_KEYIDENTIFIER:
+        if (!cms_set1_keyid(&sid->d.subjectKeyIdentifier, cert))
+            return 0;
+        break;
+
+    default:
+        CMSerr(CMS_F_CMS_SET1_SIGNERIDENTIFIER, CMS_R_UNKNOWN_ID);
+        return 0;
+    }
+
+    sid->type = type;
+
+    return 1;
+}
+
+int cms_SignerIdentifier_get0_signer_id(CMS_SignerIdentifier *sid,
+                                        ASN1_OCTET_STRING **keyid,
+                                        X509_NAME **issuer,
+                                        ASN1_INTEGER **sno)
+{
+    if (sid->type == CMS_SIGNERINFO_ISSUER_SERIAL) {
+        if (issuer)
+            *issuer = sid->d.issuerAndSerialNumber->issuer;
+        if (sno)
+            *sno = sid->d.issuerAndSerialNumber->serialNumber;
+    } else if (sid->type == CMS_SIGNERINFO_KEYIDENTIFIER) {
+        if (keyid)
+            *keyid = sid->d.subjectKeyIdentifier;
+    } else
+        return 0;
+    return 1;
+}
+
+int cms_SignerIdentifier_cert_cmp(CMS_SignerIdentifier *sid, X509 *cert)
+{
+    if (sid->type == CMS_SIGNERINFO_ISSUER_SERIAL)
+        return cms_ias_cert_cmp(sid->d.issuerAndSerialNumber, cert);
+    else if (sid->type == CMS_SIGNERINFO_KEYIDENTIFIER)
+        return cms_keyid_cert_cmp(sid->d.subjectKeyIdentifier, cert);
+    else
+        return -1;
+}
+
+static int cms_sd_asn1_ctrl(CMS_SignerInfo *si, int cmd)
+{
+    EVP_PKEY *pkey = si->pkey;
+    int i;
+    if (!pkey->ameth || !pkey->ameth->pkey_ctrl)
+        return 1;
+    i = pkey->ameth->pkey_ctrl(pkey, ASN1_PKEY_CTRL_CMS_SIGN, cmd, si);
+    if (i == -2) {
+        CMSerr(CMS_F_CMS_SD_ASN1_CTRL, CMS_R_NOT_SUPPORTED_FOR_THIS_KEY_TYPE);
+        return 0;
+    }
+    if (i <= 0) {
+        CMSerr(CMS_F_CMS_SD_ASN1_CTRL, CMS_R_CTRL_FAILURE);
+        return 0;
+    }
+    return 1;
+}
+
+CMS_SignerInfo *CMS_add1_signer(CMS_ContentInfo *cms,
+                                X509 *signer, EVP_PKEY *pk, const EVP_MD *md,
+                                unsigned int flags)
+{
+    CMS_SignedData *sd;
+    CMS_SignerInfo *si = NULL;
+    X509_ALGOR *alg;
+    int i, type;
+    if (!X509_check_private_key(signer, pk)) {
+        CMSerr(CMS_F_CMS_ADD1_SIGNER,
+               CMS_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE);
+        return NULL;
+    }
+    sd = cms_signed_data_init(cms);
+    if (!sd)
+        goto err;
+    si = M_ASN1_new_of(CMS_SignerInfo);
+    if (!si)
+        goto merr;
+    /* Call for side-effect of computing hash and caching extensions */
+    X509_check_purpose(signer, -1, -1);
+
+    X509_up_ref(signer);
+    EVP_PKEY_up_ref(pk);
+
+    si->pkey = pk;
+    si->signer = signer;
+    si->mctx = EVP_MD_CTX_new();
+    si->pctx = NULL;
+
+    if (si->mctx == NULL) {
+        CMSerr(CMS_F_CMS_ADD1_SIGNER, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (flags & CMS_USE_KEYID) {
+        si->version = 3;
+        if (sd->version < 3)
+            sd->version = 3;
+        type = CMS_SIGNERINFO_KEYIDENTIFIER;
+    } else {
+        type = CMS_SIGNERINFO_ISSUER_SERIAL;
+        si->version = 1;
+    }
+
+    if (!cms_set1_SignerIdentifier(si->sid, signer, type))
+        goto err;
+
+    if (md == NULL) {
+        int def_nid;
+        if (EVP_PKEY_get_default_digest_nid(pk, &def_nid) <= 0)
+            goto err;
+        md = EVP_get_digestbynid(def_nid);
+        if (md == NULL) {
+            CMSerr(CMS_F_CMS_ADD1_SIGNER, CMS_R_NO_DEFAULT_DIGEST);
+            goto err;
+        }
+    }
+
+    if (!md) {
+        CMSerr(CMS_F_CMS_ADD1_SIGNER, CMS_R_NO_DIGEST_SET);
+        goto err;
+    }
+
+    X509_ALGOR_set_md(si->digestAlgorithm, md);
+
+    /* See if digest is present in digestAlgorithms */
+    for (i = 0; i < sk_X509_ALGOR_num(sd->digestAlgorithms); i++) {
+        const ASN1_OBJECT *aoid;
+        alg = sk_X509_ALGOR_value(sd->digestAlgorithms, i);
+        X509_ALGOR_get0(&aoid, NULL, NULL, alg);
+        if (OBJ_obj2nid(aoid) == EVP_MD_type(md))
+            break;
+    }
+
+    if (i == sk_X509_ALGOR_num(sd->digestAlgorithms)) {
+        alg = X509_ALGOR_new();
+        if (alg == NULL)
+            goto merr;
+        X509_ALGOR_set_md(alg, md);
+        if (!sk_X509_ALGOR_push(sd->digestAlgorithms, alg)) {
+            X509_ALGOR_free(alg);
+            goto merr;
+        }
+    }
+
+    if (!(flags & CMS_KEY_PARAM) && !cms_sd_asn1_ctrl(si, 0))
+        goto err;
+    if (!(flags & CMS_NOATTR)) {
+        /*
+         * Initialize signed attributes structure so other attributes
+         * such as signing time etc are added later even if we add none here.
+         */
+        if (!si->signedAttrs) {
+            si->signedAttrs = sk_X509_ATTRIBUTE_new_null();
+            if (!si->signedAttrs)
+                goto merr;
+        }
+
+        if (!(flags & CMS_NOSMIMECAP)) {
+            STACK_OF(X509_ALGOR) *smcap = NULL;
+            i = CMS_add_standard_smimecap(&smcap);
+            if (i)
+                i = CMS_add_smimecap(si, smcap);
+            sk_X509_ALGOR_pop_free(smcap, X509_ALGOR_free);
+            if (!i)
+                goto merr;
+        }
+        if (flags & CMS_REUSE_DIGEST) {
+            if (!cms_copy_messageDigest(cms, si))
+                goto err;
+            if (!(flags & (CMS_PARTIAL | CMS_KEY_PARAM)) &&
+                !CMS_SignerInfo_sign(si))
+                goto err;
+        }
+    }
+
+    if (!(flags & CMS_NOCERTS)) {
+        /* NB ignore -1 return for duplicate cert */
+        if (!CMS_add1_cert(cms, signer))
+            goto merr;
+    }
+
+    if (flags & CMS_KEY_PARAM) {
+        if (flags & CMS_NOATTR) {
+            si->pctx = EVP_PKEY_CTX_new(si->pkey, NULL);
+            if (si->pctx == NULL)
+                goto err;
+            if (EVP_PKEY_sign_init(si->pctx) <= 0)
+                goto err;
+            if (EVP_PKEY_CTX_set_signature_md(si->pctx, md) <= 0)
+                goto err;
+        } else if (EVP_DigestSignInit(si->mctx, &si->pctx, md, NULL, pk) <=
+                   0)
+            goto err;
+    }
+
+    if (!sd->signerInfos)
+        sd->signerInfos = sk_CMS_SignerInfo_new_null();
+    if (!sd->signerInfos || !sk_CMS_SignerInfo_push(sd->signerInfos, si))
+        goto merr;
+
+    return si;
+
+ merr:
+    CMSerr(CMS_F_CMS_ADD1_SIGNER, ERR_R_MALLOC_FAILURE);
+ err:
+    M_ASN1_free_of(si, CMS_SignerInfo);
+    return NULL;
+
+}
+
+static int cms_add1_signingTime(CMS_SignerInfo *si, ASN1_TIME *t)
+{
+    ASN1_TIME *tt;
+    int r = 0;
+    if (t)
+        tt = t;
+    else
+        tt = X509_gmtime_adj(NULL, 0);
+
+    if (!tt)
+        goto merr;
+
+    if (CMS_signed_add1_attr_by_NID(si, NID_pkcs9_signingTime,
+                                    tt->type, tt, -1) <= 0)
+        goto merr;
+
+    r = 1;
+
+ merr:
+
+    if (!t)
+        ASN1_TIME_free(tt);
+
+    if (!r)
+        CMSerr(CMS_F_CMS_ADD1_SIGNINGTIME, ERR_R_MALLOC_FAILURE);
+
+    return r;
+
+}
+
+EVP_PKEY_CTX *CMS_SignerInfo_get0_pkey_ctx(CMS_SignerInfo *si)
+{
+    return si->pctx;
+}
+
+EVP_MD_CTX *CMS_SignerInfo_get0_md_ctx(CMS_SignerInfo *si)
+{
+    return si->mctx;
+}
+
+STACK_OF(CMS_SignerInfo) *CMS_get0_SignerInfos(CMS_ContentInfo *cms)
+{
+    CMS_SignedData *sd;
+    sd = cms_get0_signed(cms);
+    if (!sd)
+        return NULL;
+    return sd->signerInfos;
+}
+
+STACK_OF(X509) *CMS_get0_signers(CMS_ContentInfo *cms)
+{
+    STACK_OF(X509) *signers = NULL;
+    STACK_OF(CMS_SignerInfo) *sinfos;
+    CMS_SignerInfo *si;
+    int i;
+    sinfos = CMS_get0_SignerInfos(cms);
+    for (i = 0; i < sk_CMS_SignerInfo_num(sinfos); i++) {
+        si = sk_CMS_SignerInfo_value(sinfos, i);
+        if (si->signer) {
+            if (!signers) {
+                signers = sk_X509_new_null();
+                if (!signers)
+                    return NULL;
+            }
+            if (!sk_X509_push(signers, si->signer)) {
+                sk_X509_free(signers);
+                return NULL;
+            }
+        }
+    }
+    return signers;
+}
+
+void CMS_SignerInfo_set1_signer_cert(CMS_SignerInfo *si, X509 *signer)
+{
+    if (signer) {
+        X509_up_ref(signer);
+        EVP_PKEY_free(si->pkey);
+        si->pkey = X509_get_pubkey(signer);
+    }
+    X509_free(si->signer);
+    si->signer = signer;
+}
+
+int CMS_SignerInfo_get0_signer_id(CMS_SignerInfo *si,
+                                  ASN1_OCTET_STRING **keyid,
+                                  X509_NAME **issuer, ASN1_INTEGER **sno)
+{
+    return cms_SignerIdentifier_get0_signer_id(si->sid, keyid, issuer, sno);
+}
+
+int CMS_SignerInfo_cert_cmp(CMS_SignerInfo *si, X509 *cert)
+{
+    return cms_SignerIdentifier_cert_cmp(si->sid, cert);
+}
+
+int CMS_set1_signers_certs(CMS_ContentInfo *cms, STACK_OF(X509) *scerts,
+                           unsigned int flags)
+{
+    CMS_SignedData *sd;
+    CMS_SignerInfo *si;
+    CMS_CertificateChoices *cch;
+    STACK_OF(CMS_CertificateChoices) *certs;
+    X509 *x;
+    int i, j;
+    int ret = 0;
+    sd = cms_get0_signed(cms);
+    if (!sd)
+        return -1;
+    certs = sd->certificates;
+    for (i = 0; i < sk_CMS_SignerInfo_num(sd->signerInfos); i++) {
+        si = sk_CMS_SignerInfo_value(sd->signerInfos, i);
+        if (si->signer)
+            continue;
+
+        for (j = 0; j < sk_X509_num(scerts); j++) {
+            x = sk_X509_value(scerts, j);
+            if (CMS_SignerInfo_cert_cmp(si, x) == 0) {
+                CMS_SignerInfo_set1_signer_cert(si, x);
+                ret++;
+                break;
+            }
+        }
+
+        if (si->signer || (flags & CMS_NOINTERN))
+            continue;
+
+        for (j = 0; j < sk_CMS_CertificateChoices_num(certs); j++) {
+            cch = sk_CMS_CertificateChoices_value(certs, j);
+            if (cch->type != 0)
+                continue;
+            x = cch->d.certificate;
+            if (CMS_SignerInfo_cert_cmp(si, x) == 0) {
+                CMS_SignerInfo_set1_signer_cert(si, x);
+                ret++;
+                break;
+            }
+        }
+    }
+    return ret;
+}
+
+void CMS_SignerInfo_get0_algs(CMS_SignerInfo *si, EVP_PKEY **pk,
+                              X509 **signer, X509_ALGOR **pdig,
+                              X509_ALGOR **psig)
+{
+    if (pk)
+        *pk = si->pkey;
+    if (signer)
+        *signer = si->signer;
+    if (pdig)
+        *pdig = si->digestAlgorithm;
+    if (psig)
+        *psig = si->signatureAlgorithm;
+}
+
+ASN1_OCTET_STRING *CMS_SignerInfo_get0_signature(CMS_SignerInfo *si)
+{
+    return si->signature;
+}
+
+static int cms_SignerInfo_content_sign(CMS_ContentInfo *cms,
+                                       CMS_SignerInfo *si, BIO *chain)
+{
+    EVP_MD_CTX *mctx = EVP_MD_CTX_new();
+    int r = 0;
+    EVP_PKEY_CTX *pctx = NULL;
+
+    if (mctx == NULL) {
+        CMSerr(CMS_F_CMS_SIGNERINFO_CONTENT_SIGN, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    if (!si->pkey) {
+        CMSerr(CMS_F_CMS_SIGNERINFO_CONTENT_SIGN, CMS_R_NO_PRIVATE_KEY);
+        goto err;
+    }
+
+    if (!cms_DigestAlgorithm_find_ctx(mctx, chain, si->digestAlgorithm))
+        goto err;
+    /* Set SignerInfo algorithm details if we used custom parameter */
+    if (si->pctx && !cms_sd_asn1_ctrl(si, 0))
+        goto err;
+
+    /*
+     * If any signed attributes calculate and add messageDigest attribute
+     */
+
+    if (CMS_signed_get_attr_count(si) >= 0) {
+        ASN1_OBJECT *ctype =
+            cms->d.signedData->encapContentInfo->eContentType;
+        unsigned char md[EVP_MAX_MD_SIZE];
+        unsigned int mdlen;
+        if (!EVP_DigestFinal_ex(mctx, md, &mdlen))
+            goto err;
+        if (!CMS_signed_add1_attr_by_NID(si, NID_pkcs9_messageDigest,
+                                         V_ASN1_OCTET_STRING, md, mdlen))
+            goto err;
+        /* Copy content type across */
+        if (CMS_signed_add1_attr_by_NID(si, NID_pkcs9_contentType,
+                                        V_ASN1_OBJECT, ctype, -1) <= 0)
+            goto err;
+        if (!CMS_SignerInfo_sign(si))
+            goto err;
+    } else if (si->pctx) {
+        unsigned char *sig;
+        size_t siglen;
+        unsigned char md[EVP_MAX_MD_SIZE];
+        unsigned int mdlen;
+        pctx = si->pctx;
+        if (!EVP_DigestFinal_ex(mctx, md, &mdlen))
+            goto err;
+        siglen = EVP_PKEY_size(si->pkey);
+        sig = OPENSSL_malloc(siglen);
+        if (sig == NULL) {
+            CMSerr(CMS_F_CMS_SIGNERINFO_CONTENT_SIGN, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        if (EVP_PKEY_sign(pctx, sig, &siglen, md, mdlen) <= 0) {
+            OPENSSL_free(sig);
+            goto err;
+        }
+        ASN1_STRING_set0(si->signature, sig, siglen);
+    } else {
+        unsigned char *sig;
+        unsigned int siglen;
+        sig = OPENSSL_malloc(EVP_PKEY_size(si->pkey));
+        if (sig == NULL) {
+            CMSerr(CMS_F_CMS_SIGNERINFO_CONTENT_SIGN, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        if (!EVP_SignFinal(mctx, sig, &siglen, si->pkey)) {
+            CMSerr(CMS_F_CMS_SIGNERINFO_CONTENT_SIGN, CMS_R_SIGNFINAL_ERROR);
+            OPENSSL_free(sig);
+            goto err;
+        }
+        ASN1_STRING_set0(si->signature, sig, siglen);
+    }
+
+    r = 1;
+
+ err:
+    EVP_MD_CTX_free(mctx);
+    EVP_PKEY_CTX_free(pctx);
+    return r;
+
+}
+
+int cms_SignedData_final(CMS_ContentInfo *cms, BIO *chain)
+{
+    STACK_OF(CMS_SignerInfo) *sinfos;
+    CMS_SignerInfo *si;
+    int i;
+    sinfos = CMS_get0_SignerInfos(cms);
+    for (i = 0; i < sk_CMS_SignerInfo_num(sinfos); i++) {
+        si = sk_CMS_SignerInfo_value(sinfos, i);
+        if (!cms_SignerInfo_content_sign(cms, si, chain))
+            return 0;
+    }
+    cms->d.signedData->encapContentInfo->partial = 0;
+    return 1;
+}
+
+int CMS_SignerInfo_sign(CMS_SignerInfo *si)
+{
+    EVP_MD_CTX *mctx = si->mctx;
+    EVP_PKEY_CTX *pctx = NULL;
+    unsigned char *abuf = NULL;
+    int alen;
+    size_t siglen;
+    const EVP_MD *md = NULL;
+
+    md = EVP_get_digestbyobj(si->digestAlgorithm->algorithm);
+    if (md == NULL)
+        return 0;
+
+    if (CMS_signed_get_attr_by_NID(si, NID_pkcs9_signingTime, -1) < 0) {
+        if (!cms_add1_signingTime(si, NULL))
+            goto err;
+    }
+
+    if (si->pctx)
+        pctx = si->pctx;
+    else {
+        EVP_MD_CTX_reset(mctx);
+        if (EVP_DigestSignInit(mctx, &pctx, md, NULL, si->pkey) <= 0)
+            goto err;
+        si->pctx = pctx;
+    }
+
+    if (EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_SIGN,
+                          EVP_PKEY_CTRL_CMS_SIGN, 0, si) <= 0) {
+        CMSerr(CMS_F_CMS_SIGNERINFO_SIGN, CMS_R_CTRL_ERROR);
+        goto err;
+    }
+
+    alen = ASN1_item_i2d((ASN1_VALUE *)si->signedAttrs, &abuf,
+                         ASN1_ITEM_rptr(CMS_Attributes_Sign));
+    if (!abuf)
+        goto err;
+    if (EVP_DigestSignUpdate(mctx, abuf, alen) <= 0)
+        goto err;
+    if (EVP_DigestSignFinal(mctx, NULL, &siglen) <= 0)
+        goto err;
+    OPENSSL_free(abuf);
+    abuf = OPENSSL_malloc(siglen);
+    if (abuf == NULL)
+        goto err;
+    if (EVP_DigestSignFinal(mctx, abuf, &siglen) <= 0)
+        goto err;
+
+    if (EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_SIGN,
+                          EVP_PKEY_CTRL_CMS_SIGN, 1, si) <= 0) {
+        CMSerr(CMS_F_CMS_SIGNERINFO_SIGN, CMS_R_CTRL_ERROR);
+        goto err;
+    }
+
+    EVP_MD_CTX_reset(mctx);
+
+    ASN1_STRING_set0(si->signature, abuf, siglen);
+
+    return 1;
+
+ err:
+    OPENSSL_free(abuf);
+    EVP_MD_CTX_reset(mctx);
+    return 0;
+
+}
+
+int CMS_SignerInfo_verify(CMS_SignerInfo *si)
+{
+    EVP_MD_CTX *mctx = NULL;
+    unsigned char *abuf = NULL;
+    int alen, r = -1;
+    const EVP_MD *md = NULL;
+
+    if (!si->pkey) {
+        CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY, CMS_R_NO_PUBLIC_KEY);
+        return -1;
+    }
+
+    md = EVP_get_digestbyobj(si->digestAlgorithm->algorithm);
+    if (md == NULL)
+        return -1;
+    if (si->mctx == NULL && (si->mctx = EVP_MD_CTX_new()) == NULL) {
+        CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+    mctx = si->mctx;
+    if (EVP_DigestVerifyInit(mctx, &si->pctx, md, NULL, si->pkey) <= 0)
+        goto err;
+
+    if (!cms_sd_asn1_ctrl(si, 1))
+        goto err;
+
+    alen = ASN1_item_i2d((ASN1_VALUE *)si->signedAttrs, &abuf,
+                         ASN1_ITEM_rptr(CMS_Attributes_Verify));
+    if (!abuf)
+        goto err;
+    r = EVP_DigestVerifyUpdate(mctx, abuf, alen);
+    OPENSSL_free(abuf);
+    if (r <= 0) {
+        r = -1;
+        goto err;
+    }
+    r = EVP_DigestVerifyFinal(mctx,
+                              si->signature->data, si->signature->length);
+    if (r <= 0)
+        CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY, CMS_R_VERIFICATION_FAILURE);
+ err:
+    EVP_MD_CTX_reset(mctx);
+    return r;
+}
+
+/* Create a chain of digest BIOs from a CMS ContentInfo */
+
+BIO *cms_SignedData_init_bio(CMS_ContentInfo *cms)
+{
+    int i;
+    CMS_SignedData *sd;
+    BIO *chain = NULL;
+    sd = cms_get0_signed(cms);
+    if (!sd)
+        return NULL;
+    if (cms->d.signedData->encapContentInfo->partial)
+        cms_sd_set_version(sd);
+    for (i = 0; i < sk_X509_ALGOR_num(sd->digestAlgorithms); i++) {
+        X509_ALGOR *digestAlgorithm;
+        BIO *mdbio;
+        digestAlgorithm = sk_X509_ALGOR_value(sd->digestAlgorithms, i);
+        mdbio = cms_DigestAlgorithm_init_bio(digestAlgorithm);
+        if (!mdbio)
+            goto err;
+        if (chain)
+            BIO_push(chain, mdbio);
+        else
+            chain = mdbio;
+    }
+    return chain;
+ err:
+    BIO_free_all(chain);
+    return NULL;
+}
+
+int CMS_SignerInfo_verify_content(CMS_SignerInfo *si, BIO *chain)
+{
+    ASN1_OCTET_STRING *os = NULL;
+    EVP_MD_CTX *mctx = EVP_MD_CTX_new();
+    EVP_PKEY_CTX *pkctx = NULL;
+    int r = -1;
+    unsigned char mval[EVP_MAX_MD_SIZE];
+    unsigned int mlen;
+
+    if (mctx == NULL) {
+        CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    /* If we have any signed attributes look for messageDigest value */
+    if (CMS_signed_get_attr_count(si) >= 0) {
+        os = CMS_signed_get0_data_by_OBJ(si,
+                                         OBJ_nid2obj(NID_pkcs9_messageDigest),
+                                         -3, V_ASN1_OCTET_STRING);
+        if (!os) {
+            CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT,
+                   CMS_R_ERROR_READING_MESSAGEDIGEST_ATTRIBUTE);
+            goto err;
+        }
+    }
+
+    if (!cms_DigestAlgorithm_find_ctx(mctx, chain, si->digestAlgorithm))
+        goto err;
+
+    if (EVP_DigestFinal_ex(mctx, mval, &mlen) <= 0) {
+        CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT,
+               CMS_R_UNABLE_TO_FINALIZE_CONTEXT);
+        goto err;
+    }
+
+    /* If messageDigest found compare it */
+
+    if (os) {
+        if (mlen != (unsigned int)os->length) {
+            CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT,
+                   CMS_R_MESSAGEDIGEST_ATTRIBUTE_WRONG_LENGTH);
+            goto err;
+        }
+
+        if (memcmp(mval, os->data, mlen)) {
+            CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT,
+                   CMS_R_VERIFICATION_FAILURE);
+            r = 0;
+        } else
+            r = 1;
+    } else {
+        const EVP_MD *md = EVP_MD_CTX_md(mctx);
+        pkctx = EVP_PKEY_CTX_new(si->pkey, NULL);
+        if (pkctx == NULL)
+            goto err;
+        if (EVP_PKEY_verify_init(pkctx) <= 0)
+            goto err;
+        if (EVP_PKEY_CTX_set_signature_md(pkctx, md) <= 0)
+            goto err;
+        si->pctx = pkctx;
+        if (!cms_sd_asn1_ctrl(si, 1))
+            goto err;
+        r = EVP_PKEY_verify(pkctx, si->signature->data,
+                            si->signature->length, mval, mlen);
+        if (r <= 0) {
+            CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT,
+                   CMS_R_VERIFICATION_FAILURE);
+            r = 0;
+        }
+    }
+
+ err:
+    EVP_PKEY_CTX_free(pkctx);
+    EVP_MD_CTX_free(mctx);
+    return r;
+
+}
+
+int CMS_add_smimecap(CMS_SignerInfo *si, STACK_OF(X509_ALGOR) *algs)
+{
+    unsigned char *smder = NULL;
+    int smderlen, r;
+    smderlen = i2d_X509_ALGORS(algs, &smder);
+    if (smderlen <= 0)
+        return 0;
+    r = CMS_signed_add1_attr_by_NID(si, NID_SMIMECapabilities,
+                                    V_ASN1_SEQUENCE, smder, smderlen);
+    OPENSSL_free(smder);
+    return r;
+}
+
+int CMS_add_simple_smimecap(STACK_OF(X509_ALGOR) **algs,
+                            int algnid, int keysize)
+{
+    X509_ALGOR *alg;
+    ASN1_INTEGER *key = NULL;
+    if (keysize > 0) {
+        key = ASN1_INTEGER_new();
+        if (key == NULL || !ASN1_INTEGER_set(key, keysize))
+            return 0;
+    }
+    alg = X509_ALGOR_new();
+    if (alg == NULL) {
+        ASN1_INTEGER_free(key);
+        return 0;
+    }
+
+    X509_ALGOR_set0(alg, OBJ_nid2obj(algnid),
+                    key ? V_ASN1_INTEGER : V_ASN1_UNDEF, key);
+    if (*algs == NULL)
+        *algs = sk_X509_ALGOR_new_null();
+    if (*algs == NULL || !sk_X509_ALGOR_push(*algs, alg)) {
+        X509_ALGOR_free(alg);
+        return 0;
+    }
+    return 1;
+}
+
+/* Check to see if a cipher exists and if so add S/MIME capabilities */
+
+static int cms_add_cipher_smcap(STACK_OF(X509_ALGOR) **sk, int nid, int arg)
+{
+    if (EVP_get_cipherbynid(nid))
+        return CMS_add_simple_smimecap(sk, nid, arg);
+    return 1;
+}
+
+static int cms_add_digest_smcap(STACK_OF(X509_ALGOR) **sk, int nid, int arg)
+{
+    if (EVP_get_digestbynid(nid))
+        return CMS_add_simple_smimecap(sk, nid, arg);
+    return 1;
+}
+
+int CMS_add_standard_smimecap(STACK_OF(X509_ALGOR) **smcap)
+{
+    if (!cms_add_cipher_smcap(smcap, NID_aes_256_cbc, -1)
+        || !cms_add_digest_smcap(smcap, NID_id_GostR3411_2012_256, -1)
+        || !cms_add_digest_smcap(smcap, NID_id_GostR3411_2012_512, -1)
+        || !cms_add_digest_smcap(smcap, NID_id_GostR3411_94, -1)
+        || !cms_add_cipher_smcap(smcap, NID_id_Gost28147_89, -1)
+        || !cms_add_cipher_smcap(smcap, NID_aes_192_cbc, -1)
+        || !cms_add_cipher_smcap(smcap, NID_aes_128_cbc, -1)
+        || !cms_add_cipher_smcap(smcap, NID_des_ede3_cbc, -1)
+        || !cms_add_cipher_smcap(smcap, NID_rc2_cbc, 128)
+        || !cms_add_cipher_smcap(smcap, NID_rc2_cbc, 64)
+        || !cms_add_cipher_smcap(smcap, NID_des_cbc, -1)
+        || !cms_add_cipher_smcap(smcap, NID_rc2_cbc, 40))
+        return 0;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_smime.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_smime.c
new file mode 100644
index 000000000..5dcf803f4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cms/cms_smime.c
@@ -0,0 +1,843 @@
+/*
+ * Copyright 2008-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/err.h>
+#include <openssl/cms.h>
+#include "cms_lcl.h"
+#include "internal/asn1_int.h"
+
+static BIO *cms_get_text_bio(BIO *out, unsigned int flags)
+{
+    BIO *rbio;
+    if (out == NULL)
+        rbio = BIO_new(BIO_s_null());
+    else if (flags & CMS_TEXT) {
+        rbio = BIO_new(BIO_s_mem());
+        BIO_set_mem_eof_return(rbio, 0);
+    } else
+        rbio = out;
+    return rbio;
+}
+
+static int cms_copy_content(BIO *out, BIO *in, unsigned int flags)
+{
+    unsigned char buf[4096];
+    int r = 0, i;
+    BIO *tmpout;
+
+    tmpout = cms_get_text_bio(out, flags);
+
+    if (tmpout == NULL) {
+        CMSerr(CMS_F_CMS_COPY_CONTENT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    /* Read all content through chain to process digest, decrypt etc */
+    for (;;) {
+        i = BIO_read(in, buf, sizeof(buf));
+        if (i <= 0) {
+            if (BIO_method_type(in) == BIO_TYPE_CIPHER) {
+                if (!BIO_get_cipher_status(in))
+                    goto err;
+            }
+            if (i < 0)
+                goto err;
+            break;
+        }
+
+        if (tmpout && (BIO_write(tmpout, buf, i) != i))
+            goto err;
+    }
+
+    if (flags & CMS_TEXT) {
+        if (!SMIME_text(tmpout, out)) {
+            CMSerr(CMS_F_CMS_COPY_CONTENT, CMS_R_SMIME_TEXT_ERROR);
+            goto err;
+        }
+    }
+
+    r = 1;
+
+ err:
+    if (tmpout != out)
+        BIO_free(tmpout);
+    return r;
+
+}
+
+static int check_content(CMS_ContentInfo *cms)
+{
+    ASN1_OCTET_STRING **pos = CMS_get0_content(cms);
+    if (!pos || !*pos) {
+        CMSerr(CMS_F_CHECK_CONTENT, CMS_R_NO_CONTENT);
+        return 0;
+    }
+    return 1;
+}
+
+static void do_free_upto(BIO *f, BIO *upto)
+{
+    if (upto) {
+        BIO *tbio;
+        do {
+            tbio = BIO_pop(f);
+            BIO_free(f);
+            f = tbio;
+        }
+        while (f && f != upto);
+    } else
+        BIO_free_all(f);
+}
+
+int CMS_data(CMS_ContentInfo *cms, BIO *out, unsigned int flags)
+{
+    BIO *cont;
+    int r;
+    if (OBJ_obj2nid(CMS_get0_type(cms)) != NID_pkcs7_data) {
+        CMSerr(CMS_F_CMS_DATA, CMS_R_TYPE_NOT_DATA);
+        return 0;
+    }
+    cont = CMS_dataInit(cms, NULL);
+    if (!cont)
+        return 0;
+    r = cms_copy_content(out, cont, flags);
+    BIO_free_all(cont);
+    return r;
+}
+
+CMS_ContentInfo *CMS_data_create(BIO *in, unsigned int flags)
+{
+    CMS_ContentInfo *cms;
+    cms = cms_Data_create();
+    if (!cms)
+        return NULL;
+
+    if ((flags & CMS_STREAM) || CMS_final(cms, in, NULL, flags))
+        return cms;
+
+    CMS_ContentInfo_free(cms);
+
+    return NULL;
+}
+
+int CMS_digest_verify(CMS_ContentInfo *cms, BIO *dcont, BIO *out,
+                      unsigned int flags)
+{
+    BIO *cont;
+    int r;
+    if (OBJ_obj2nid(CMS_get0_type(cms)) != NID_pkcs7_digest) {
+        CMSerr(CMS_F_CMS_DIGEST_VERIFY, CMS_R_TYPE_NOT_DIGESTED_DATA);
+        return 0;
+    }
+
+    if (!dcont && !check_content(cms))
+        return 0;
+
+    cont = CMS_dataInit(cms, dcont);
+    if (!cont)
+        return 0;
+    r = cms_copy_content(out, cont, flags);
+    if (r)
+        r = cms_DigestedData_do_final(cms, cont, 1);
+    do_free_upto(cont, dcont);
+    return r;
+}
+
+CMS_ContentInfo *CMS_digest_create(BIO *in, const EVP_MD *md,
+                                   unsigned int flags)
+{
+    CMS_ContentInfo *cms;
+    if (!md)
+        md = EVP_sha1();
+    cms = cms_DigestedData_create(md);
+    if (!cms)
+        return NULL;
+
+    if (!(flags & CMS_DETACHED))
+        CMS_set_detached(cms, 0);
+
+    if ((flags & CMS_STREAM) || CMS_final(cms, in, NULL, flags))
+        return cms;
+
+    CMS_ContentInfo_free(cms);
+    return NULL;
+}
+
+int CMS_EncryptedData_decrypt(CMS_ContentInfo *cms,
+                              const unsigned char *key, size_t keylen,
+                              BIO *dcont, BIO *out, unsigned int flags)
+{
+    BIO *cont;
+    int r;
+    if (OBJ_obj2nid(CMS_get0_type(cms)) != NID_pkcs7_encrypted) {
+        CMSerr(CMS_F_CMS_ENCRYPTEDDATA_DECRYPT,
+               CMS_R_TYPE_NOT_ENCRYPTED_DATA);
+        return 0;
+    }
+
+    if (!dcont && !check_content(cms))
+        return 0;
+
+    if (CMS_EncryptedData_set1_key(cms, NULL, key, keylen) <= 0)
+        return 0;
+    cont = CMS_dataInit(cms, dcont);
+    if (!cont)
+        return 0;
+    r = cms_copy_content(out, cont, flags);
+    do_free_upto(cont, dcont);
+    return r;
+}
+
+CMS_ContentInfo *CMS_EncryptedData_encrypt(BIO *in, const EVP_CIPHER *cipher,
+                                           const unsigned char *key,
+                                           size_t keylen, unsigned int flags)
+{
+    CMS_ContentInfo *cms;
+    if (!cipher) {
+        CMSerr(CMS_F_CMS_ENCRYPTEDDATA_ENCRYPT, CMS_R_NO_CIPHER);
+        return NULL;
+    }
+    cms = CMS_ContentInfo_new();
+    if (cms == NULL)
+        return NULL;
+    if (!CMS_EncryptedData_set1_key(cms, cipher, key, keylen))
+        return NULL;
+
+    if (!(flags & CMS_DETACHED))
+        CMS_set_detached(cms, 0);
+
+    if ((flags & (CMS_STREAM | CMS_PARTIAL))
+        || CMS_final(cms, in, NULL, flags))
+        return cms;
+
+    CMS_ContentInfo_free(cms);
+    return NULL;
+}
+
+static int cms_signerinfo_verify_cert(CMS_SignerInfo *si,
+                                      X509_STORE *store,
+                                      STACK_OF(X509) *certs,
+                                      STACK_OF(X509_CRL) *crls)
+{
+    X509_STORE_CTX *ctx = X509_STORE_CTX_new();
+    X509 *signer;
+    int i, j, r = 0;
+
+    if (ctx == NULL) {
+        CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CERT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    CMS_SignerInfo_get0_algs(si, NULL, &signer, NULL, NULL);
+    if (!X509_STORE_CTX_init(ctx, store, signer, certs)) {
+        CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CERT, CMS_R_STORE_INIT_ERROR);
+        goto err;
+    }
+    X509_STORE_CTX_set_default(ctx, "smime_sign");
+    if (crls)
+        X509_STORE_CTX_set0_crls(ctx, crls);
+
+    i = X509_verify_cert(ctx);
+    if (i <= 0) {
+        j = X509_STORE_CTX_get_error(ctx);
+        CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CERT,
+               CMS_R_CERTIFICATE_VERIFY_ERROR);
+        ERR_add_error_data(2, "Verify error:",
+                           X509_verify_cert_error_string(j));
+        goto err;
+    }
+    r = 1;
+ err:
+    X509_STORE_CTX_free(ctx);
+    return r;
+
+}
+
+int CMS_verify(CMS_ContentInfo *cms, STACK_OF(X509) *certs,
+               X509_STORE *store, BIO *dcont, BIO *out, unsigned int flags)
+{
+    CMS_SignerInfo *si;
+    STACK_OF(CMS_SignerInfo) *sinfos;
+    STACK_OF(X509) *cms_certs = NULL;
+    STACK_OF(X509_CRL) *crls = NULL;
+    X509 *signer;
+    int i, scount = 0, ret = 0;
+    BIO *cmsbio = NULL, *tmpin = NULL, *tmpout = NULL;
+
+    if (!dcont && !check_content(cms))
+        return 0;
+    if (dcont && !(flags & CMS_BINARY)) {
+        const ASN1_OBJECT *coid = CMS_get0_eContentType(cms);
+        if (OBJ_obj2nid(coid) == NID_id_ct_asciiTextWithCRLF)
+            flags |= CMS_ASCIICRLF;
+    }
+
+    /* Attempt to find all signer certificates */
+
+    sinfos = CMS_get0_SignerInfos(cms);
+
+    if (sk_CMS_SignerInfo_num(sinfos) <= 0) {
+        CMSerr(CMS_F_CMS_VERIFY, CMS_R_NO_SIGNERS);
+        goto err;
+    }
+
+    for (i = 0; i < sk_CMS_SignerInfo_num(sinfos); i++) {
+        si = sk_CMS_SignerInfo_value(sinfos, i);
+        CMS_SignerInfo_get0_algs(si, NULL, &signer, NULL, NULL);
+        if (signer)
+            scount++;
+    }
+
+    if (scount != sk_CMS_SignerInfo_num(sinfos))
+        scount += CMS_set1_signers_certs(cms, certs, flags);
+
+    if (scount != sk_CMS_SignerInfo_num(sinfos)) {
+        CMSerr(CMS_F_CMS_VERIFY, CMS_R_SIGNER_CERTIFICATE_NOT_FOUND);
+        goto err;
+    }
+
+    /* Attempt to verify all signers certs */
+
+    if (!(flags & CMS_NO_SIGNER_CERT_VERIFY)) {
+        cms_certs = CMS_get1_certs(cms);
+        if (!(flags & CMS_NOCRL))
+            crls = CMS_get1_crls(cms);
+        for (i = 0; i < sk_CMS_SignerInfo_num(sinfos); i++) {
+            si = sk_CMS_SignerInfo_value(sinfos, i);
+            if (!cms_signerinfo_verify_cert(si, store, cms_certs, crls))
+                goto err;
+        }
+    }
+
+    /* Attempt to verify all SignerInfo signed attribute signatures */
+
+    if (!(flags & CMS_NO_ATTR_VERIFY)) {
+        for (i = 0; i < sk_CMS_SignerInfo_num(sinfos); i++) {
+            si = sk_CMS_SignerInfo_value(sinfos, i);
+            if (CMS_signed_get_attr_count(si) < 0)
+                continue;
+            if (CMS_SignerInfo_verify(si) <= 0)
+                goto err;
+        }
+    }
+
+    /*
+     * Performance optimization: if the content is a memory BIO then store
+     * its contents in a temporary read only memory BIO. This avoids
+     * potentially large numbers of slow copies of data which will occur when
+     * reading from a read write memory BIO when signatures are calculated.
+     */
+
+    if (dcont && (BIO_method_type(dcont) == BIO_TYPE_MEM)) {
+        char *ptr;
+        long len;
+        len = BIO_get_mem_data(dcont, &ptr);
+        tmpin = BIO_new_mem_buf(ptr, len);
+        if (tmpin == NULL) {
+            CMSerr(CMS_F_CMS_VERIFY, ERR_R_MALLOC_FAILURE);
+            goto err2;
+        }
+    } else
+        tmpin = dcont;
+    /*
+     * If not binary mode and detached generate digests by *writing* through
+     * the BIO. That makes it possible to canonicalise the input.
+     */
+    if (!(flags & SMIME_BINARY) && dcont) {
+        /*
+         * Create output BIO so we can either handle text or to ensure
+         * included content doesn't override detached content.
+         */
+        tmpout = cms_get_text_bio(out, flags);
+        if (!tmpout) {
+            CMSerr(CMS_F_CMS_VERIFY, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        cmsbio = CMS_dataInit(cms, tmpout);
+        if (!cmsbio)
+            goto err;
+        /*
+         * Don't use SMIME_TEXT for verify: it adds headers and we want to
+         * remove them.
+         */
+        SMIME_crlf_copy(dcont, cmsbio, flags & ~SMIME_TEXT);
+
+        if (flags & CMS_TEXT) {
+            if (!SMIME_text(tmpout, out)) {
+                CMSerr(CMS_F_CMS_VERIFY, CMS_R_SMIME_TEXT_ERROR);
+                goto err;
+            }
+        }
+    } else {
+        cmsbio = CMS_dataInit(cms, tmpin);
+        if (!cmsbio)
+            goto err;
+
+        if (!cms_copy_content(out, cmsbio, flags))
+            goto err;
+
+    }
+    if (!(flags & CMS_NO_CONTENT_VERIFY)) {
+        for (i = 0; i < sk_CMS_SignerInfo_num(sinfos); i++) {
+            si = sk_CMS_SignerInfo_value(sinfos, i);
+            if (CMS_SignerInfo_verify_content(si, cmsbio) <= 0) {
+                CMSerr(CMS_F_CMS_VERIFY, CMS_R_CONTENT_VERIFY_ERROR);
+                goto err;
+            }
+        }
+    }
+
+    ret = 1;
+
+ err:
+    if (!(flags & SMIME_BINARY) && dcont) {
+        do_free_upto(cmsbio, tmpout);
+        if (tmpin != dcont)
+            BIO_free(tmpin);
+    } else {
+        if (dcont && (tmpin == dcont))
+            do_free_upto(cmsbio, dcont);
+        else
+            BIO_free_all(cmsbio);
+    }
+
+    if (out != tmpout)
+        BIO_free_all(tmpout);
+
+ err2:
+    sk_X509_pop_free(cms_certs, X509_free);
+    sk_X509_CRL_pop_free(crls, X509_CRL_free);
+
+    return ret;
+}
+
+int CMS_verify_receipt(CMS_ContentInfo *rcms, CMS_ContentInfo *ocms,
+                       STACK_OF(X509) *certs,
+                       X509_STORE *store, unsigned int flags)
+{
+    int r;
+    flags &= ~(CMS_DETACHED | CMS_TEXT);
+    r = CMS_verify(rcms, certs, store, NULL, NULL, flags);
+    if (r <= 0)
+        return r;
+    return cms_Receipt_verify(rcms, ocms);
+}
+
+CMS_ContentInfo *CMS_sign(X509 *signcert, EVP_PKEY *pkey,
+                          STACK_OF(X509) *certs, BIO *data,
+                          unsigned int flags)
+{
+    CMS_ContentInfo *cms;
+    int i;
+
+    cms = CMS_ContentInfo_new();
+    if (cms == NULL || !CMS_SignedData_init(cms))
+        goto merr;
+    if (flags & CMS_ASCIICRLF
+        && !CMS_set1_eContentType(cms,
+                                  OBJ_nid2obj(NID_id_ct_asciiTextWithCRLF)))
+        goto err;
+
+    if (pkey && !CMS_add1_signer(cms, signcert, pkey, NULL, flags)) {
+        CMSerr(CMS_F_CMS_SIGN, CMS_R_ADD_SIGNER_ERROR);
+        goto err;
+    }
+
+    for (i = 0; i < sk_X509_num(certs); i++) {
+        X509 *x = sk_X509_value(certs, i);
+        if (!CMS_add1_cert(cms, x))
+            goto merr;
+    }
+
+    if (!(flags & CMS_DETACHED))
+        CMS_set_detached(cms, 0);
+
+    if ((flags & (CMS_STREAM | CMS_PARTIAL))
+        || CMS_final(cms, data, NULL, flags))
+        return cms;
+    else
+        goto err;
+
+ merr:
+    CMSerr(CMS_F_CMS_SIGN, ERR_R_MALLOC_FAILURE);
+
+ err:
+    CMS_ContentInfo_free(cms);
+    return NULL;
+}
+
+CMS_ContentInfo *CMS_sign_receipt(CMS_SignerInfo *si,
+                                  X509 *signcert, EVP_PKEY *pkey,
+                                  STACK_OF(X509) *certs, unsigned int flags)
+{
+    CMS_SignerInfo *rct_si;
+    CMS_ContentInfo *cms = NULL;
+    ASN1_OCTET_STRING **pos, *os;
+    BIO *rct_cont = NULL;
+    int r = 0;
+
+    flags &= ~(CMS_STREAM | CMS_TEXT);
+    /* Not really detached but avoids content being allocated */
+    flags |= CMS_PARTIAL | CMS_BINARY | CMS_DETACHED;
+    if (!pkey || !signcert) {
+        CMSerr(CMS_F_CMS_SIGN_RECEIPT, CMS_R_NO_KEY_OR_CERT);
+        return NULL;
+    }
+
+    /* Initialize signed data */
+
+    cms = CMS_sign(NULL, NULL, certs, NULL, flags);
+    if (!cms)
+        goto err;
+
+    /* Set inner content type to signed receipt */
+    if (!CMS_set1_eContentType(cms, OBJ_nid2obj(NID_id_smime_ct_receipt)))
+        goto err;
+
+    rct_si = CMS_add1_signer(cms, signcert, pkey, NULL, flags);
+    if (!rct_si) {
+        CMSerr(CMS_F_CMS_SIGN_RECEIPT, CMS_R_ADD_SIGNER_ERROR);
+        goto err;
+    }
+
+    os = cms_encode_Receipt(si);
+
+    if (!os)
+        goto err;
+
+    /* Set content to digest */
+    rct_cont = BIO_new_mem_buf(os->data, os->length);
+    if (!rct_cont)
+        goto err;
+
+    /* Add msgSigDigest attribute */
+
+    if (!cms_msgSigDigest_add1(rct_si, si))
+        goto err;
+
+    /* Finalize structure */
+    if (!CMS_final(cms, rct_cont, NULL, flags))
+        goto err;
+
+    /* Set embedded content */
+    pos = CMS_get0_content(cms);
+    *pos = os;
+
+    r = 1;
+
+ err:
+    BIO_free(rct_cont);
+    if (r)
+        return cms;
+    CMS_ContentInfo_free(cms);
+    return NULL;
+
+}
+
+CMS_ContentInfo *CMS_encrypt(STACK_OF(X509) *certs, BIO *data,
+                             const EVP_CIPHER *cipher, unsigned int flags)
+{
+    CMS_ContentInfo *cms;
+    int i;
+    X509 *recip;
+    cms = CMS_EnvelopedData_create(cipher);
+    if (!cms)
+        goto merr;
+    for (i = 0; i < sk_X509_num(certs); i++) {
+        recip = sk_X509_value(certs, i);
+        if (!CMS_add1_recipient_cert(cms, recip, flags)) {
+            CMSerr(CMS_F_CMS_ENCRYPT, CMS_R_RECIPIENT_ERROR);
+            goto err;
+        }
+    }
+
+    if (!(flags & CMS_DETACHED))
+        CMS_set_detached(cms, 0);
+
+    if ((flags & (CMS_STREAM | CMS_PARTIAL))
+        || CMS_final(cms, data, NULL, flags))
+        return cms;
+    else
+        goto err;
+
+ merr:
+    CMSerr(CMS_F_CMS_ENCRYPT, ERR_R_MALLOC_FAILURE);
+ err:
+    CMS_ContentInfo_free(cms);
+    return NULL;
+}
+
+static int cms_kari_set1_pkey(CMS_ContentInfo *cms, CMS_RecipientInfo *ri,
+                              EVP_PKEY *pk, X509 *cert)
+{
+    int i;
+    STACK_OF(CMS_RecipientEncryptedKey) *reks;
+    CMS_RecipientEncryptedKey *rek;
+    reks = CMS_RecipientInfo_kari_get0_reks(ri);
+    for (i = 0; i < sk_CMS_RecipientEncryptedKey_num(reks); i++) {
+        int rv;
+        rek = sk_CMS_RecipientEncryptedKey_value(reks, i);
+        if (cert != NULL && CMS_RecipientEncryptedKey_cert_cmp(rek, cert))
+            continue;
+        CMS_RecipientInfo_kari_set0_pkey(ri, pk);
+        rv = CMS_RecipientInfo_kari_decrypt(cms, ri, rek);
+        CMS_RecipientInfo_kari_set0_pkey(ri, NULL);
+        if (rv > 0)
+            return 1;
+        return cert == NULL ? 0 : -1;
+    }
+    return 0;
+}
+
+int CMS_decrypt_set1_pkey(CMS_ContentInfo *cms, EVP_PKEY *pk, X509 *cert)
+{
+    STACK_OF(CMS_RecipientInfo) *ris;
+    CMS_RecipientInfo *ri;
+    int i, r, ri_type;
+    int debug = 0, match_ri = 0;
+    ris = CMS_get0_RecipientInfos(cms);
+    if (ris)
+        debug = cms->d.envelopedData->encryptedContentInfo->debug;
+    ri_type = cms_pkey_get_ri_type(pk);
+    if (ri_type == CMS_RECIPINFO_NONE) {
+        CMSerr(CMS_F_CMS_DECRYPT_SET1_PKEY,
+               CMS_R_NOT_SUPPORTED_FOR_THIS_KEY_TYPE);
+        return 0;
+    }
+
+    for (i = 0; i < sk_CMS_RecipientInfo_num(ris); i++) {
+        ri = sk_CMS_RecipientInfo_value(ris, i);
+        if (CMS_RecipientInfo_type(ri) != ri_type)
+            continue;
+        match_ri = 1;
+        if (ri_type == CMS_RECIPINFO_AGREE) {
+            r = cms_kari_set1_pkey(cms, ri, pk, cert);
+            if (r > 0)
+                return 1;
+            if (r < 0)
+                return 0;
+        }
+        /*
+         * If we have a cert try matching RecipientInfo otherwise try them
+         * all.
+         */
+        else if (!cert || !CMS_RecipientInfo_ktri_cert_cmp(ri, cert)) {
+            EVP_PKEY_up_ref(pk);
+            CMS_RecipientInfo_set0_pkey(ri, pk);
+            r = CMS_RecipientInfo_decrypt(cms, ri);
+            CMS_RecipientInfo_set0_pkey(ri, NULL);
+            if (cert) {
+                /*
+                 * If not debugging clear any error and return success to
+                 * avoid leaking of information useful to MMA
+                 */
+                if (!debug) {
+                    ERR_clear_error();
+                    return 1;
+                }
+                if (r > 0)
+                    return 1;
+                CMSerr(CMS_F_CMS_DECRYPT_SET1_PKEY, CMS_R_DECRYPT_ERROR);
+                return 0;
+            }
+            /*
+             * If no cert and not debugging don't leave loop after first
+             * successful decrypt. Always attempt to decrypt all recipients
+             * to avoid leaking timing of a successful decrypt.
+             */
+            else if (r > 0 && debug)
+                return 1;
+        }
+    }
+    /* If no cert, key transport and not debugging always return success */
+    if (cert == NULL && ri_type == CMS_RECIPINFO_TRANS && match_ri && !debug) {
+        ERR_clear_error();
+        return 1;
+    }
+
+    CMSerr(CMS_F_CMS_DECRYPT_SET1_PKEY, CMS_R_NO_MATCHING_RECIPIENT);
+    return 0;
+
+}
+
+int CMS_decrypt_set1_key(CMS_ContentInfo *cms,
+                         unsigned char *key, size_t keylen,
+                         const unsigned char *id, size_t idlen)
+{
+    STACK_OF(CMS_RecipientInfo) *ris;
+    CMS_RecipientInfo *ri;
+    int i, r;
+    ris = CMS_get0_RecipientInfos(cms);
+    for (i = 0; i < sk_CMS_RecipientInfo_num(ris); i++) {
+        ri = sk_CMS_RecipientInfo_value(ris, i);
+        if (CMS_RecipientInfo_type(ri) != CMS_RECIPINFO_KEK)
+            continue;
+
+        /*
+         * If we have an id try matching RecipientInfo otherwise try them
+         * all.
+         */
+        if (!id || (CMS_RecipientInfo_kekri_id_cmp(ri, id, idlen) == 0)) {
+            CMS_RecipientInfo_set0_key(ri, key, keylen);
+            r = CMS_RecipientInfo_decrypt(cms, ri);
+            CMS_RecipientInfo_set0_key(ri, NULL, 0);
+            if (r > 0)
+                return 1;
+            if (id) {
+                CMSerr(CMS_F_CMS_DECRYPT_SET1_KEY, CMS_R_DECRYPT_ERROR);
+                return 0;
+            }
+            ERR_clear_error();
+        }
+    }
+
+    CMSerr(CMS_F_CMS_DECRYPT_SET1_KEY, CMS_R_NO_MATCHING_RECIPIENT);
+    return 0;
+
+}
+
+int CMS_decrypt_set1_password(CMS_ContentInfo *cms,
+                              unsigned char *pass, ossl_ssize_t passlen)
+{
+    STACK_OF(CMS_RecipientInfo) *ris;
+    CMS_RecipientInfo *ri;
+    int i, r;
+    ris = CMS_get0_RecipientInfos(cms);
+    for (i = 0; i < sk_CMS_RecipientInfo_num(ris); i++) {
+        ri = sk_CMS_RecipientInfo_value(ris, i);
+        if (CMS_RecipientInfo_type(ri) != CMS_RECIPINFO_PASS)
+            continue;
+        CMS_RecipientInfo_set0_password(ri, pass, passlen);
+        r = CMS_RecipientInfo_decrypt(cms, ri);
+        CMS_RecipientInfo_set0_password(ri, NULL, 0);
+        if (r > 0)
+            return 1;
+    }
+
+    CMSerr(CMS_F_CMS_DECRYPT_SET1_PASSWORD, CMS_R_NO_MATCHING_RECIPIENT);
+    return 0;
+
+}
+
+int CMS_decrypt(CMS_ContentInfo *cms, EVP_PKEY *pk, X509 *cert,
+                BIO *dcont, BIO *out, unsigned int flags)
+{
+    int r;
+    BIO *cont;
+    if (OBJ_obj2nid(CMS_get0_type(cms)) != NID_pkcs7_enveloped) {
+        CMSerr(CMS_F_CMS_DECRYPT, CMS_R_TYPE_NOT_ENVELOPED_DATA);
+        return 0;
+    }
+    if (!dcont && !check_content(cms))
+        return 0;
+    if (flags & CMS_DEBUG_DECRYPT)
+        cms->d.envelopedData->encryptedContentInfo->debug = 1;
+    else
+        cms->d.envelopedData->encryptedContentInfo->debug = 0;
+    if (!pk && !cert && !dcont && !out)
+        return 1;
+    if (pk && !CMS_decrypt_set1_pkey(cms, pk, cert))
+        return 0;
+    cont = CMS_dataInit(cms, dcont);
+    if (!cont)
+        return 0;
+    r = cms_copy_content(out, cont, flags);
+    do_free_upto(cont, dcont);
+    return r;
+}
+
+int CMS_final(CMS_ContentInfo *cms, BIO *data, BIO *dcont, unsigned int flags)
+{
+    BIO *cmsbio;
+    int ret = 0;
+
+    if ((cmsbio = CMS_dataInit(cms, dcont)) == NULL) {
+        CMSerr(CMS_F_CMS_FINAL, CMS_R_CMS_LIB);
+        return 0;
+    }
+
+    SMIME_crlf_copy(data, cmsbio, flags);
+
+    (void)BIO_flush(cmsbio);
+
+    if (!CMS_dataFinal(cms, cmsbio)) {
+        CMSerr(CMS_F_CMS_FINAL, CMS_R_CMS_DATAFINAL_ERROR);
+        goto err;
+    }
+
+    ret = 1;
+
+ err:
+    do_free_upto(cmsbio, dcont);
+
+    return ret;
+
+}
+
+#ifdef ZLIB
+
+int CMS_uncompress(CMS_ContentInfo *cms, BIO *dcont, BIO *out,
+                   unsigned int flags)
+{
+    BIO *cont;
+    int r;
+    if (OBJ_obj2nid(CMS_get0_type(cms)) != NID_id_smime_ct_compressedData) {
+        CMSerr(CMS_F_CMS_UNCOMPRESS, CMS_R_TYPE_NOT_COMPRESSED_DATA);
+        return 0;
+    }
+
+    if (!dcont && !check_content(cms))
+        return 0;
+
+    cont = CMS_dataInit(cms, dcont);
+    if (!cont)
+        return 0;
+    r = cms_copy_content(out, cont, flags);
+    do_free_upto(cont, dcont);
+    return r;
+}
+
+CMS_ContentInfo *CMS_compress(BIO *in, int comp_nid, unsigned int flags)
+{
+    CMS_ContentInfo *cms;
+    if (comp_nid <= 0)
+        comp_nid = NID_zlib_compression;
+    cms = cms_CompressedData_create(comp_nid);
+    if (!cms)
+        return NULL;
+
+    if (!(flags & CMS_DETACHED))
+        CMS_set_detached(cms, 0);
+
+    if ((flags & CMS_STREAM) || CMS_final(cms, in, NULL, flags))
+        return cms;
+
+    CMS_ContentInfo_free(cms);
+    return NULL;
+}
+
+#else
+
+int CMS_uncompress(CMS_ContentInfo *cms, BIO *dcont, BIO *out,
+                   unsigned int flags)
+{
+    CMSerr(CMS_F_CMS_UNCOMPRESS, CMS_R_UNSUPPORTED_COMPRESSION_ALGORITHM);
+    return 0;
+}
+
+CMS_ContentInfo *CMS_compress(BIO *in, int comp_nid, unsigned int flags)
+{
+    CMSerr(CMS_F_CMS_COMPRESS, CMS_R_UNSUPPORTED_COMPRESSION_ALGORITHM);
+    return NULL;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/comp/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/comp/build.info
new file mode 100644
index 000000000..65df46a17
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/comp/build.info
@@ -0,0 +1,4 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]= \
+        comp_lib.c comp_err.c \
+        c_zlib.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/comp/c_zlib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/comp/c_zlib.c
new file mode 100644
index 000000000..d688deee5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/comp/c_zlib.c
@@ -0,0 +1,618 @@
+/*
+ * Copyright 1998-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <openssl/objects.h>
+#include "internal/comp.h"
+#include <openssl/err.h>
+#include "internal/cryptlib_int.h"
+#include "internal/bio.h"
+#include "comp_lcl.h"
+
+COMP_METHOD *COMP_zlib(void);
+
+static COMP_METHOD zlib_method_nozlib = {
+    NID_undef,
+    "(undef)",
+    NULL,
+    NULL,
+    NULL,
+    NULL,
+};
+
+#ifndef ZLIB
+# undef ZLIB_SHARED
+#else
+
+# include <zlib.h>
+
+static int zlib_stateful_init(COMP_CTX *ctx);
+static void zlib_stateful_finish(COMP_CTX *ctx);
+static int zlib_stateful_compress_block(COMP_CTX *ctx, unsigned char *out,
+                                        unsigned int olen, unsigned char *in,
+                                        unsigned int ilen);
+static int zlib_stateful_expand_block(COMP_CTX *ctx, unsigned char *out,
+                                      unsigned int olen, unsigned char *in,
+                                      unsigned int ilen);
+
+/* memory allocations functions for zlib initialisation */
+static void *zlib_zalloc(void *opaque, unsigned int no, unsigned int size)
+{
+    void *p;
+
+    p = OPENSSL_zalloc(no * size);
+    return p;
+}
+
+static void zlib_zfree(void *opaque, void *address)
+{
+    OPENSSL_free(address);
+}
+
+
+static COMP_METHOD zlib_stateful_method = {
+    NID_zlib_compression,
+    LN_zlib_compression,
+    zlib_stateful_init,
+    zlib_stateful_finish,
+    zlib_stateful_compress_block,
+    zlib_stateful_expand_block
+};
+
+/*
+ * When OpenSSL is built on Windows, we do not want to require that
+ * the ZLIB.DLL be available in order for the OpenSSL DLLs to
+ * work.  Therefore, all ZLIB routines are loaded at run time
+ * and we do not link to a .LIB file when ZLIB_SHARED is set.
+ */
+# if defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_WIN32)
+#  include <windows.h>
+# endif                         /* !(OPENSSL_SYS_WINDOWS ||
+                                 * OPENSSL_SYS_WIN32) */
+
+# ifdef ZLIB_SHARED
+#  include "internal/dso.h"
+
+/* Function pointers */
+typedef int (*compress_ft) (Bytef *dest, uLongf * destLen,
+                            const Bytef *source, uLong sourceLen);
+typedef int (*inflateEnd_ft) (z_streamp strm);
+typedef int (*inflate_ft) (z_streamp strm, int flush);
+typedef int (*inflateInit__ft) (z_streamp strm,
+                                const char *version, int stream_size);
+typedef int (*deflateEnd_ft) (z_streamp strm);
+typedef int (*deflate_ft) (z_streamp strm, int flush);
+typedef int (*deflateInit__ft) (z_streamp strm, int level,
+                                const char *version, int stream_size);
+typedef const char *(*zError__ft) (int err);
+static compress_ft p_compress = NULL;
+static inflateEnd_ft p_inflateEnd = NULL;
+static inflate_ft p_inflate = NULL;
+static inflateInit__ft p_inflateInit_ = NULL;
+static deflateEnd_ft p_deflateEnd = NULL;
+static deflate_ft p_deflate = NULL;
+static deflateInit__ft p_deflateInit_ = NULL;
+static zError__ft p_zError = NULL;
+
+static int zlib_loaded = 0;     /* only attempt to init func pts once */
+static DSO *zlib_dso = NULL;
+
+#  define compress                p_compress
+#  define inflateEnd              p_inflateEnd
+#  define inflate                 p_inflate
+#  define inflateInit_            p_inflateInit_
+#  define deflateEnd              p_deflateEnd
+#  define deflate                 p_deflate
+#  define deflateInit_            p_deflateInit_
+#  define zError                  p_zError
+# endif                         /* ZLIB_SHARED */
+
+struct zlib_state {
+    z_stream istream;
+    z_stream ostream;
+};
+
+static int zlib_stateful_init(COMP_CTX *ctx)
+{
+    int err;
+    struct zlib_state *state = OPENSSL_zalloc(sizeof(*state));
+
+    if (state == NULL)
+        goto err;
+
+    state->istream.zalloc = zlib_zalloc;
+    state->istream.zfree = zlib_zfree;
+    state->istream.opaque = Z_NULL;
+    state->istream.next_in = Z_NULL;
+    state->istream.next_out = Z_NULL;
+    err = inflateInit_(&state->istream, ZLIB_VERSION, sizeof(z_stream));
+    if (err != Z_OK)
+        goto err;
+
+    state->ostream.zalloc = zlib_zalloc;
+    state->ostream.zfree = zlib_zfree;
+    state->ostream.opaque = Z_NULL;
+    state->ostream.next_in = Z_NULL;
+    state->ostream.next_out = Z_NULL;
+    err = deflateInit_(&state->ostream, Z_DEFAULT_COMPRESSION,
+                       ZLIB_VERSION, sizeof(z_stream));
+    if (err != Z_OK)
+        goto err;
+
+    ctx->data = state;
+    return 1;
+ err:
+    OPENSSL_free(state);
+    return 0;
+}
+
+static void zlib_stateful_finish(COMP_CTX *ctx)
+{
+    struct zlib_state *state = ctx->data;
+    inflateEnd(&state->istream);
+    deflateEnd(&state->ostream);
+    OPENSSL_free(state);
+}
+
+static int zlib_stateful_compress_block(COMP_CTX *ctx, unsigned char *out,
+                                        unsigned int olen, unsigned char *in,
+                                        unsigned int ilen)
+{
+    int err = Z_OK;
+    struct zlib_state *state = ctx->data;
+
+    if (state == NULL)
+        return -1;
+
+    state->ostream.next_in = in;
+    state->ostream.avail_in = ilen;
+    state->ostream.next_out = out;
+    state->ostream.avail_out = olen;
+    if (ilen > 0)
+        err = deflate(&state->ostream, Z_SYNC_FLUSH);
+    if (err != Z_OK)
+        return -1;
+    return olen - state->ostream.avail_out;
+}
+
+static int zlib_stateful_expand_block(COMP_CTX *ctx, unsigned char *out,
+                                      unsigned int olen, unsigned char *in,
+                                      unsigned int ilen)
+{
+    int err = Z_OK;
+    struct zlib_state *state = ctx->data;
+
+    if (state == NULL)
+        return 0;
+
+    state->istream.next_in = in;
+    state->istream.avail_in = ilen;
+    state->istream.next_out = out;
+    state->istream.avail_out = olen;
+    if (ilen > 0)
+        err = inflate(&state->istream, Z_SYNC_FLUSH);
+    if (err != Z_OK)
+        return -1;
+    return olen - state->istream.avail_out;
+}
+
+#endif
+
+COMP_METHOD *COMP_zlib(void)
+{
+    COMP_METHOD *meth = &zlib_method_nozlib;
+
+#ifdef ZLIB_SHARED
+    /* LIBZ may be externally defined, and we should respect that value */
+# ifndef LIBZ
+#  if defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_WIN32)
+#   define LIBZ "ZLIB1"
+#  elif defined(OPENSSL_SYS_VMS)
+#   define LIBZ "LIBZ"
+#  else
+#   define LIBZ "z"
+#  endif
+# endif
+
+    if (!zlib_loaded) {
+        zlib_dso = DSO_load(NULL, LIBZ, NULL, 0);
+        if (zlib_dso != NULL) {
+            p_compress = (compress_ft) DSO_bind_func(zlib_dso, "compress");
+            p_inflateEnd
+                = (inflateEnd_ft) DSO_bind_func(zlib_dso, "inflateEnd");
+            p_inflate = (inflate_ft) DSO_bind_func(zlib_dso, "inflate");
+            p_inflateInit_
+                = (inflateInit__ft) DSO_bind_func(zlib_dso, "inflateInit_");
+            p_deflateEnd
+                = (deflateEnd_ft) DSO_bind_func(zlib_dso, "deflateEnd");
+            p_deflate = (deflate_ft) DSO_bind_func(zlib_dso, "deflate");
+            p_deflateInit_
+                = (deflateInit__ft) DSO_bind_func(zlib_dso, "deflateInit_");
+            p_zError = (zError__ft) DSO_bind_func(zlib_dso, "zError");
+
+            if (p_compress && p_inflateEnd && p_inflate
+                && p_inflateInit_ && p_deflateEnd
+                && p_deflate && p_deflateInit_ && p_zError)
+                zlib_loaded++;
+
+            if (!OPENSSL_init_crypto(OPENSSL_INIT_ZLIB, NULL)) {
+                comp_zlib_cleanup_int();
+                return meth;
+            }
+            if (zlib_loaded)
+                meth = &zlib_stateful_method;
+        }
+    }
+#endif
+#if defined(ZLIB)
+    meth = &zlib_stateful_method;
+#endif
+
+    return meth;
+}
+
+void comp_zlib_cleanup_int(void)
+{
+#ifdef ZLIB_SHARED
+    DSO_free(zlib_dso);
+    zlib_dso = NULL;
+#endif
+}
+
+#ifdef ZLIB
+
+/* Zlib based compression/decompression filter BIO */
+
+typedef struct {
+    unsigned char *ibuf;        /* Input buffer */
+    int ibufsize;               /* Buffer size */
+    z_stream zin;               /* Input decompress context */
+    unsigned char *obuf;        /* Output buffer */
+    int obufsize;               /* Output buffer size */
+    unsigned char *optr;        /* Position in output buffer */
+    int ocount;                 /* Amount of data in output buffer */
+    int odone;                  /* deflate EOF */
+    int comp_level;             /* Compression level to use */
+    z_stream zout;              /* Output compression context */
+} BIO_ZLIB_CTX;
+
+# define ZLIB_DEFAULT_BUFSIZE 1024
+
+static int bio_zlib_new(BIO *bi);
+static int bio_zlib_free(BIO *bi);
+static int bio_zlib_read(BIO *b, char *out, int outl);
+static int bio_zlib_write(BIO *b, const char *in, int inl);
+static long bio_zlib_ctrl(BIO *b, int cmd, long num, void *ptr);
+static long bio_zlib_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp);
+
+static const BIO_METHOD bio_meth_zlib = {
+    BIO_TYPE_COMP,
+    "zlib",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    bio_zlib_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    bio_zlib_read,
+    NULL,                      /* bio_zlib_puts, */
+    NULL,                      /* bio_zlib_gets, */
+    bio_zlib_ctrl,
+    bio_zlib_new,
+    bio_zlib_free,
+    bio_zlib_callback_ctrl
+};
+
+const BIO_METHOD *BIO_f_zlib(void)
+{
+    return &bio_meth_zlib;
+}
+
+static int bio_zlib_new(BIO *bi)
+{
+    BIO_ZLIB_CTX *ctx;
+# ifdef ZLIB_SHARED
+    (void)COMP_zlib();
+    if (!zlib_loaded) {
+        COMPerr(COMP_F_BIO_ZLIB_NEW, COMP_R_ZLIB_NOT_SUPPORTED);
+        return 0;
+    }
+# endif
+    ctx = OPENSSL_zalloc(sizeof(*ctx));
+    if (ctx == NULL) {
+        COMPerr(COMP_F_BIO_ZLIB_NEW, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ctx->ibufsize = ZLIB_DEFAULT_BUFSIZE;
+    ctx->obufsize = ZLIB_DEFAULT_BUFSIZE;
+    ctx->zin.zalloc = Z_NULL;
+    ctx->zin.zfree = Z_NULL;
+    ctx->zout.zalloc = Z_NULL;
+    ctx->zout.zfree = Z_NULL;
+    ctx->comp_level = Z_DEFAULT_COMPRESSION;
+    BIO_set_init(bi, 1);
+    BIO_set_data(bi, ctx);
+
+    return 1;
+}
+
+static int bio_zlib_free(BIO *bi)
+{
+    BIO_ZLIB_CTX *ctx;
+    if (!bi)
+        return 0;
+    ctx = BIO_get_data(bi);
+    if (ctx->ibuf) {
+        /* Destroy decompress context */
+        inflateEnd(&ctx->zin);
+        OPENSSL_free(ctx->ibuf);
+    }
+    if (ctx->obuf) {
+        /* Destroy compress context */
+        deflateEnd(&ctx->zout);
+        OPENSSL_free(ctx->obuf);
+    }
+    OPENSSL_free(ctx);
+    BIO_set_data(bi, NULL);
+    BIO_set_init(bi, 0);
+
+    return 1;
+}
+
+static int bio_zlib_read(BIO *b, char *out, int outl)
+{
+    BIO_ZLIB_CTX *ctx;
+    int ret;
+    z_stream *zin;
+    BIO *next = BIO_next(b);
+
+    if (!out || !outl)
+        return 0;
+    ctx = BIO_get_data(b);
+    zin = &ctx->zin;
+    BIO_clear_retry_flags(b);
+    if (!ctx->ibuf) {
+        ctx->ibuf = OPENSSL_malloc(ctx->ibufsize);
+        if (ctx->ibuf == NULL) {
+            COMPerr(COMP_F_BIO_ZLIB_READ, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        inflateInit(zin);
+        zin->next_in = ctx->ibuf;
+        zin->avail_in = 0;
+    }
+
+    /* Copy output data directly to supplied buffer */
+    zin->next_out = (unsigned char *)out;
+    zin->avail_out = (unsigned int)outl;
+    for (;;) {
+        /* Decompress while data available */
+        while (zin->avail_in) {
+            ret = inflate(zin, 0);
+            if ((ret != Z_OK) && (ret != Z_STREAM_END)) {
+                COMPerr(COMP_F_BIO_ZLIB_READ, COMP_R_ZLIB_INFLATE_ERROR);
+                ERR_add_error_data(2, "zlib error:", zError(ret));
+                return 0;
+            }
+            /* If EOF or we've read everything then return */
+            if ((ret == Z_STREAM_END) || !zin->avail_out)
+                return outl - zin->avail_out;
+        }
+
+        /*
+         * No data in input buffer try to read some in, if an error then
+         * return the total data read.
+         */
+        ret = BIO_read(next, ctx->ibuf, ctx->ibufsize);
+        if (ret <= 0) {
+            /* Total data read */
+            int tot = outl - zin->avail_out;
+            BIO_copy_next_retry(b);
+            if (ret < 0)
+                return (tot > 0) ? tot : ret;
+            return tot;
+        }
+        zin->avail_in = ret;
+        zin->next_in = ctx->ibuf;
+    }
+}
+
+static int bio_zlib_write(BIO *b, const char *in, int inl)
+{
+    BIO_ZLIB_CTX *ctx;
+    int ret;
+    z_stream *zout;
+    BIO *next = BIO_next(b);
+
+    if (!in || !inl)
+        return 0;
+    ctx = BIO_get_data(b);
+    if (ctx->odone)
+        return 0;
+    zout = &ctx->zout;
+    BIO_clear_retry_flags(b);
+    if (!ctx->obuf) {
+        ctx->obuf = OPENSSL_malloc(ctx->obufsize);
+        /* Need error here */
+        if (ctx->obuf == NULL) {
+            COMPerr(COMP_F_BIO_ZLIB_WRITE, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        ctx->optr = ctx->obuf;
+        ctx->ocount = 0;
+        deflateInit(zout, ctx->comp_level);
+        zout->next_out = ctx->obuf;
+        zout->avail_out = ctx->obufsize;
+    }
+    /* Obtain input data directly from supplied buffer */
+    zout->next_in = (void *)in;
+    zout->avail_in = inl;
+    for (;;) {
+        /* If data in output buffer write it first */
+        while (ctx->ocount) {
+            ret = BIO_write(next, ctx->optr, ctx->ocount);
+            if (ret <= 0) {
+                /* Total data written */
+                int tot = inl - zout->avail_in;
+                BIO_copy_next_retry(b);
+                if (ret < 0)
+                    return (tot > 0) ? tot : ret;
+                return tot;
+            }
+            ctx->optr += ret;
+            ctx->ocount -= ret;
+        }
+
+        /* Have we consumed all supplied data? */
+        if (!zout->avail_in)
+            return inl;
+
+        /* Compress some more */
+
+        /* Reset buffer */
+        ctx->optr = ctx->obuf;
+        zout->next_out = ctx->obuf;
+        zout->avail_out = ctx->obufsize;
+        /* Compress some more */
+        ret = deflate(zout, 0);
+        if (ret != Z_OK) {
+            COMPerr(COMP_F_BIO_ZLIB_WRITE, COMP_R_ZLIB_DEFLATE_ERROR);
+            ERR_add_error_data(2, "zlib error:", zError(ret));
+            return 0;
+        }
+        ctx->ocount = ctx->obufsize - zout->avail_out;
+    }
+}
+
+static int bio_zlib_flush(BIO *b)
+{
+    BIO_ZLIB_CTX *ctx;
+    int ret;
+    z_stream *zout;
+    BIO *next = BIO_next(b);
+
+    ctx = BIO_get_data(b);
+    /* If no data written or already flush show success */
+    if (!ctx->obuf || (ctx->odone && !ctx->ocount))
+        return 1;
+    zout = &ctx->zout;
+    BIO_clear_retry_flags(b);
+    /* No more input data */
+    zout->next_in = NULL;
+    zout->avail_in = 0;
+    for (;;) {
+        /* If data in output buffer write it first */
+        while (ctx->ocount) {
+            ret = BIO_write(next, ctx->optr, ctx->ocount);
+            if (ret <= 0) {
+                BIO_copy_next_retry(b);
+                return ret;
+            }
+            ctx->optr += ret;
+            ctx->ocount -= ret;
+        }
+        if (ctx->odone)
+            return 1;
+
+        /* Compress some more */
+
+        /* Reset buffer */
+        ctx->optr = ctx->obuf;
+        zout->next_out = ctx->obuf;
+        zout->avail_out = ctx->obufsize;
+        /* Compress some more */
+        ret = deflate(zout, Z_FINISH);
+        if (ret == Z_STREAM_END)
+            ctx->odone = 1;
+        else if (ret != Z_OK) {
+            COMPerr(COMP_F_BIO_ZLIB_FLUSH, COMP_R_ZLIB_DEFLATE_ERROR);
+            ERR_add_error_data(2, "zlib error:", zError(ret));
+            return 0;
+        }
+        ctx->ocount = ctx->obufsize - zout->avail_out;
+    }
+}
+
+static long bio_zlib_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    BIO_ZLIB_CTX *ctx;
+    int ret, *ip;
+    int ibs, obs;
+    BIO *next = BIO_next(b);
+
+    if (next == NULL)
+        return 0;
+    ctx = BIO_get_data(b);
+    switch (cmd) {
+
+    case BIO_CTRL_RESET:
+        ctx->ocount = 0;
+        ctx->odone = 0;
+        ret = 1;
+        break;
+
+    case BIO_CTRL_FLUSH:
+        ret = bio_zlib_flush(b);
+        if (ret > 0)
+            ret = BIO_flush(next);
+        break;
+
+    case BIO_C_SET_BUFF_SIZE:
+        ibs = -1;
+        obs = -1;
+        if (ptr != NULL) {
+            ip = ptr;
+            if (*ip == 0)
+                ibs = (int)num;
+            else
+                obs = (int)num;
+        } else {
+            ibs = (int)num;
+            obs = ibs;
+        }
+
+        if (ibs != -1) {
+            OPENSSL_free(ctx->ibuf);
+            ctx->ibuf = NULL;
+            ctx->ibufsize = ibs;
+        }
+
+        if (obs != -1) {
+            OPENSSL_free(ctx->obuf);
+            ctx->obuf = NULL;
+            ctx->obufsize = obs;
+        }
+        ret = 1;
+        break;
+
+    case BIO_C_DO_STATE_MACHINE:
+        BIO_clear_retry_flags(b);
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        BIO_copy_next_retry(b);
+        break;
+
+    default:
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+
+    }
+
+    return ret;
+}
+
+static long bio_zlib_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
+{
+    BIO *next = BIO_next(b);
+    if (next == NULL)
+        return 0;
+    return BIO_callback_ctrl(next, cmd, fp);
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/comp/comp_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/comp/comp_err.c
new file mode 100644
index 000000000..2dca315cf
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/comp/comp_err.c
@@ -0,0 +1,46 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/comperr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA COMP_str_functs[] = {
+    {ERR_PACK(ERR_LIB_COMP, COMP_F_BIO_ZLIB_FLUSH, 0), "bio_zlib_flush"},
+    {ERR_PACK(ERR_LIB_COMP, COMP_F_BIO_ZLIB_NEW, 0), "bio_zlib_new"},
+    {ERR_PACK(ERR_LIB_COMP, COMP_F_BIO_ZLIB_READ, 0), "bio_zlib_read"},
+    {ERR_PACK(ERR_LIB_COMP, COMP_F_BIO_ZLIB_WRITE, 0), "bio_zlib_write"},
+    {ERR_PACK(ERR_LIB_COMP, COMP_F_COMP_CTX_NEW, 0), "COMP_CTX_new"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA COMP_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_COMP, 0, COMP_R_ZLIB_DEFLATE_ERROR),
+    "zlib deflate error"},
+    {ERR_PACK(ERR_LIB_COMP, 0, COMP_R_ZLIB_INFLATE_ERROR),
+    "zlib inflate error"},
+    {ERR_PACK(ERR_LIB_COMP, 0, COMP_R_ZLIB_NOT_SUPPORTED),
+    "zlib not supported"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_COMP_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(COMP_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(COMP_str_functs);
+        ERR_load_strings_const(COMP_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/comp/comp_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/comp/comp_lcl.h
new file mode 100644
index 000000000..aa45fca23
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/comp/comp_lcl.h
@@ -0,0 +1,30 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+struct comp_method_st {
+    int type;                   /* NID for compression library */
+    const char *name;           /* A text string to identify the library */
+    int (*init) (COMP_CTX *ctx);
+    void (*finish) (COMP_CTX *ctx);
+    int (*compress) (COMP_CTX *ctx,
+                     unsigned char *out, unsigned int olen,
+                     unsigned char *in, unsigned int ilen);
+    int (*expand) (COMP_CTX *ctx,
+                   unsigned char *out, unsigned int olen,
+                   unsigned char *in, unsigned int ilen);
+};
+
+struct comp_ctx_st {
+    struct comp_method_st *meth;
+    unsigned long compress_in;
+    unsigned long compress_out;
+    unsigned long expand_in;
+    unsigned long expand_out;
+    void* data;
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/comp/comp_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/comp/comp_lib.c
new file mode 100644
index 000000000..6ae211449
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/comp/comp_lib.c
@@ -0,0 +1,93 @@
+/*
+ * Copyright 1998-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <openssl/objects.h>
+#include <openssl/comp.h>
+#include <openssl/err.h>
+#include "comp_lcl.h"
+
+COMP_CTX *COMP_CTX_new(COMP_METHOD *meth)
+{
+    COMP_CTX *ret;
+
+    if ((ret = OPENSSL_zalloc(sizeof(*ret))) == NULL) {
+        COMPerr(COMP_F_COMP_CTX_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    ret->meth = meth;
+    if ((ret->meth->init != NULL) && !ret->meth->init(ret)) {
+        OPENSSL_free(ret);
+        ret = NULL;
+    }
+    return ret;
+}
+
+const COMP_METHOD *COMP_CTX_get_method(const COMP_CTX *ctx)
+{
+    return ctx->meth;
+}
+
+int COMP_get_type(const COMP_METHOD *meth)
+{
+    return meth->type;
+}
+
+const char *COMP_get_name(const COMP_METHOD *meth)
+{
+    return meth->name;
+}
+
+void COMP_CTX_free(COMP_CTX *ctx)
+{
+    if (ctx == NULL)
+        return;
+    if (ctx->meth->finish != NULL)
+        ctx->meth->finish(ctx);
+
+    OPENSSL_free(ctx);
+}
+
+int COMP_compress_block(COMP_CTX *ctx, unsigned char *out, int olen,
+                        unsigned char *in, int ilen)
+{
+    int ret;
+    if (ctx->meth->compress == NULL) {
+        return -1;
+    }
+    ret = ctx->meth->compress(ctx, out, olen, in, ilen);
+    if (ret > 0) {
+        ctx->compress_in += ilen;
+        ctx->compress_out += ret;
+    }
+    return ret;
+}
+
+int COMP_expand_block(COMP_CTX *ctx, unsigned char *out, int olen,
+                      unsigned char *in, int ilen)
+{
+    int ret;
+
+    if (ctx->meth->expand == NULL) {
+        return -1;
+    }
+    ret = ctx->meth->expand(ctx, out, olen, in, ilen);
+    if (ret > 0) {
+        ctx->expand_in += ilen;
+        ctx->expand_out += ret;
+    }
+    return ret;
+}
+
+int COMP_CTX_get_type(const COMP_CTX* comp)
+{
+    return comp->meth ? comp->meth->type : NID_undef;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/conf/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/build.info
new file mode 100644
index 000000000..ff367994e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/build.info
@@ -0,0 +1,4 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]= \
+        conf_err.c conf_lib.c conf_api.c conf_def.c conf_mod.c \
+        conf_mall.c conf_sap.c conf_ssl.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_api.c b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_api.c
new file mode 100644
index 000000000..5e57d749c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_api.c
@@ -0,0 +1,218 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* Part of the code in here was originally in conf.c, which is now removed */
+
+#include "e_os.h"
+#include "internal/cryptlib.h"
+#include <stdlib.h>
+#include <string.h>
+#include <openssl/conf.h>
+#include <openssl/conf_api.h>
+
+static void value_free_hash(const CONF_VALUE *a, LHASH_OF(CONF_VALUE) *conf);
+static void value_free_stack_doall(CONF_VALUE *a);
+
+/* Up until OpenSSL 0.9.5a, this was get_section */
+CONF_VALUE *_CONF_get_section(const CONF *conf, const char *section)
+{
+    CONF_VALUE *v, vv;
+
+    if ((conf == NULL) || (section == NULL))
+        return NULL;
+    vv.name = NULL;
+    vv.section = (char *)section;
+    v = lh_CONF_VALUE_retrieve(conf->data, &vv);
+    return v;
+}
+
+/* Up until OpenSSL 0.9.5a, this was CONF_get_section */
+STACK_OF(CONF_VALUE) *_CONF_get_section_values(const CONF *conf,
+                                               const char *section)
+{
+    CONF_VALUE *v;
+
+    v = _CONF_get_section(conf, section);
+    if (v != NULL)
+        return ((STACK_OF(CONF_VALUE) *)v->value);
+    else
+        return NULL;
+}
+
+int _CONF_add_string(CONF *conf, CONF_VALUE *section, CONF_VALUE *value)
+{
+    CONF_VALUE *v = NULL;
+    STACK_OF(CONF_VALUE) *ts;
+
+    ts = (STACK_OF(CONF_VALUE) *)section->value;
+
+    value->section = section->section;
+    if (!sk_CONF_VALUE_push(ts, value)) {
+        return 0;
+    }
+
+    v = lh_CONF_VALUE_insert(conf->data, value);
+    if (v != NULL) {
+        (void)sk_CONF_VALUE_delete_ptr(ts, v);
+        OPENSSL_free(v->name);
+        OPENSSL_free(v->value);
+        OPENSSL_free(v);
+    }
+    return 1;
+}
+
+char *_CONF_get_string(const CONF *conf, const char *section,
+                       const char *name)
+{
+    CONF_VALUE *v, vv;
+    char *p;
+
+    if (name == NULL)
+        return NULL;
+    if (conf != NULL) {
+        if (section != NULL) {
+            vv.name = (char *)name;
+            vv.section = (char *)section;
+            v = lh_CONF_VALUE_retrieve(conf->data, &vv);
+            if (v != NULL)
+                return v->value;
+            if (strcmp(section, "ENV") == 0) {
+                p = ossl_safe_getenv(name);
+                if (p != NULL)
+                    return p;
+            }
+        }
+        vv.section = "default";
+        vv.name = (char *)name;
+        v = lh_CONF_VALUE_retrieve(conf->data, &vv);
+        if (v != NULL)
+            return v->value;
+        else
+            return NULL;
+    } else
+        return ossl_safe_getenv(name);
+}
+
+static unsigned long conf_value_hash(const CONF_VALUE *v)
+{
+    return (OPENSSL_LH_strhash(v->section) << 2) ^ OPENSSL_LH_strhash(v->name);
+}
+
+static int conf_value_cmp(const CONF_VALUE *a, const CONF_VALUE *b)
+{
+    int i;
+
+    if (a->section != b->section) {
+        i = strcmp(a->section, b->section);
+        if (i)
+            return i;
+    }
+
+    if ((a->name != NULL) && (b->name != NULL)) {
+        i = strcmp(a->name, b->name);
+        return i;
+    } else if (a->name == b->name)
+        return 0;
+    else
+        return ((a->name == NULL) ? -1 : 1);
+}
+
+int _CONF_new_data(CONF *conf)
+{
+    if (conf == NULL) {
+        return 0;
+    }
+    if (conf->data == NULL) {
+        conf->data = lh_CONF_VALUE_new(conf_value_hash, conf_value_cmp);
+        if (conf->data == NULL)
+            return 0;
+    }
+    return 1;
+}
+
+typedef LHASH_OF(CONF_VALUE) LH_CONF_VALUE;
+
+IMPLEMENT_LHASH_DOALL_ARG_CONST(CONF_VALUE, LH_CONF_VALUE);
+
+void _CONF_free_data(CONF *conf)
+{
+    if (conf == NULL || conf->data == NULL)
+        return;
+
+    /* evil thing to make sure the 'OPENSSL_free()' works as expected */
+    lh_CONF_VALUE_set_down_load(conf->data, 0);
+    lh_CONF_VALUE_doall_LH_CONF_VALUE(conf->data, value_free_hash, conf->data);
+
+    /*
+     * We now have only 'section' entries in the hash table. Due to problems
+     * with
+     */
+
+    lh_CONF_VALUE_doall(conf->data, value_free_stack_doall);
+    lh_CONF_VALUE_free(conf->data);
+}
+
+static void value_free_hash(const CONF_VALUE *a, LHASH_OF(CONF_VALUE) *conf)
+{
+    if (a->name != NULL)
+        (void)lh_CONF_VALUE_delete(conf, a);
+}
+
+static void value_free_stack_doall(CONF_VALUE *a)
+{
+    CONF_VALUE *vv;
+    STACK_OF(CONF_VALUE) *sk;
+    int i;
+
+    if (a->name != NULL)
+        return;
+
+    sk = (STACK_OF(CONF_VALUE) *)a->value;
+    for (i = sk_CONF_VALUE_num(sk) - 1; i >= 0; i--) {
+        vv = sk_CONF_VALUE_value(sk, i);
+        OPENSSL_free(vv->value);
+        OPENSSL_free(vv->name);
+        OPENSSL_free(vv);
+    }
+    sk_CONF_VALUE_free(sk);
+    OPENSSL_free(a->section);
+    OPENSSL_free(a);
+}
+
+/* Up until OpenSSL 0.9.5a, this was new_section */
+CONF_VALUE *_CONF_new_section(CONF *conf, const char *section)
+{
+    STACK_OF(CONF_VALUE) *sk = NULL;
+    int i;
+    CONF_VALUE *v = NULL, *vv;
+
+    if ((sk = sk_CONF_VALUE_new_null()) == NULL)
+        goto err;
+    if ((v = OPENSSL_malloc(sizeof(*v))) == NULL)
+        goto err;
+    i = strlen(section) + 1;
+    if ((v->section = OPENSSL_malloc(i)) == NULL)
+        goto err;
+
+    memcpy(v->section, section, i);
+    v->name = NULL;
+    v->value = (char *)sk;
+
+    vv = lh_CONF_VALUE_insert(conf->data, v);
+    if (vv != NULL || lh_CONF_VALUE_error(conf->data) > 0)
+        goto err;
+    return v;
+
+ err:
+    sk_CONF_VALUE_free(sk);
+    if (v != NULL)
+        OPENSSL_free(v->section);
+    OPENSSL_free(v);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_def.c b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_def.c
new file mode 100644
index 000000000..8e3f42a0c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_def.c
@@ -0,0 +1,878 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* Part of the code in here was originally in conf.c, which is now removed */
+
+#include <stdio.h>
+#include <string.h>
+#include "internal/cryptlib.h"
+#include "internal/o_dir.h"
+#include <openssl/lhash.h>
+#include <openssl/conf.h>
+#include <openssl/conf_api.h>
+#include "conf_def.h"
+#include <openssl/buffer.h>
+#include <openssl/err.h>
+#ifndef OPENSSL_NO_POSIX_IO
+# include <sys/stat.h>
+# ifdef _WIN32
+#  define stat    _stat
+#  define strcasecmp _stricmp
+# endif
+#endif
+
+#ifndef S_ISDIR
+# define S_ISDIR(a) (((a) & S_IFMT) == S_IFDIR)
+#endif
+
+/*
+ * The maximum length we can grow a value to after variable expansion. 64k
+ * should be more than enough for all reasonable uses.
+ */
+#define MAX_CONF_VALUE_LENGTH       65536
+
+static int is_keytype(const CONF *conf, char c, unsigned short type);
+static char *eat_ws(CONF *conf, char *p);
+static void trim_ws(CONF *conf, char *start);
+static char *eat_alpha_numeric(CONF *conf, char *p);
+static void clear_comments(CONF *conf, char *p);
+static int str_copy(CONF *conf, char *section, char **to, char *from);
+static char *scan_quote(CONF *conf, char *p);
+static char *scan_dquote(CONF *conf, char *p);
+#define scan_esc(conf,p)        (((IS_EOF((conf),(p)[1]))?((p)+1):((p)+2)))
+#ifndef OPENSSL_NO_POSIX_IO
+static BIO *process_include(char *include, OPENSSL_DIR_CTX **dirctx,
+                            char **dirpath);
+static BIO *get_next_file(const char *path, OPENSSL_DIR_CTX **dirctx);
+#endif
+
+static CONF *def_create(CONF_METHOD *meth);
+static int def_init_default(CONF *conf);
+static int def_init_WIN32(CONF *conf);
+static int def_destroy(CONF *conf);
+static int def_destroy_data(CONF *conf);
+static int def_load(CONF *conf, const char *name, long *eline);
+static int def_load_bio(CONF *conf, BIO *bp, long *eline);
+static int def_dump(const CONF *conf, BIO *bp);
+static int def_is_number(const CONF *conf, char c);
+static int def_to_int(const CONF *conf, char c);
+
+static CONF_METHOD default_method = {
+    "OpenSSL default",
+    def_create,
+    def_init_default,
+    def_destroy,
+    def_destroy_data,
+    def_load_bio,
+    def_dump,
+    def_is_number,
+    def_to_int,
+    def_load
+};
+
+static CONF_METHOD WIN32_method = {
+    "WIN32",
+    def_create,
+    def_init_WIN32,
+    def_destroy,
+    def_destroy_data,
+    def_load_bio,
+    def_dump,
+    def_is_number,
+    def_to_int,
+    def_load
+};
+
+CONF_METHOD *NCONF_default(void)
+{
+    return &default_method;
+}
+
+CONF_METHOD *NCONF_WIN32(void)
+{
+    return &WIN32_method;
+}
+
+static CONF *def_create(CONF_METHOD *meth)
+{
+    CONF *ret;
+
+    ret = OPENSSL_malloc(sizeof(*ret));
+    if (ret != NULL)
+        if (meth->init(ret) == 0) {
+            OPENSSL_free(ret);
+            ret = NULL;
+        }
+    return ret;
+}
+
+static int def_init_default(CONF *conf)
+{
+    if (conf == NULL)
+        return 0;
+
+    conf->meth = &default_method;
+    conf->meth_data = (void *)CONF_type_default;
+    conf->data = NULL;
+
+    return 1;
+}
+
+static int def_init_WIN32(CONF *conf)
+{
+    if (conf == NULL)
+        return 0;
+
+    conf->meth = &WIN32_method;
+    conf->meth_data = (void *)CONF_type_win32;
+    conf->data = NULL;
+
+    return 1;
+}
+
+static int def_destroy(CONF *conf)
+{
+    if (def_destroy_data(conf)) {
+        OPENSSL_free(conf);
+        return 1;
+    }
+    return 0;
+}
+
+static int def_destroy_data(CONF *conf)
+{
+    if (conf == NULL)
+        return 0;
+    _CONF_free_data(conf);
+    return 1;
+}
+
+static int def_load(CONF *conf, const char *name, long *line)
+{
+    int ret;
+    BIO *in = NULL;
+
+#ifdef OPENSSL_SYS_VMS
+    in = BIO_new_file(name, "r");
+#else
+    in = BIO_new_file(name, "rb");
+#endif
+    if (in == NULL) {
+        if (ERR_GET_REASON(ERR_peek_last_error()) == BIO_R_NO_SUCH_FILE)
+            CONFerr(CONF_F_DEF_LOAD, CONF_R_NO_SUCH_FILE);
+        else
+            CONFerr(CONF_F_DEF_LOAD, ERR_R_SYS_LIB);
+        return 0;
+    }
+
+    ret = def_load_bio(conf, in, line);
+    BIO_free(in);
+
+    return ret;
+}
+
+static int def_load_bio(CONF *conf, BIO *in, long *line)
+{
+/* The macro BUFSIZE conflicts with a system macro in VxWorks */
+#define CONFBUFSIZE     512
+    int bufnum = 0, i, ii;
+    BUF_MEM *buff = NULL;
+    char *s, *p, *end;
+    int again;
+    long eline = 0;
+    char btmp[DECIMAL_SIZE(eline) + 1];
+    CONF_VALUE *v = NULL, *tv;
+    CONF_VALUE *sv = NULL;
+    char *section = NULL, *buf;
+    char *start, *psection, *pname;
+    void *h = (void *)(conf->data);
+    STACK_OF(BIO) *biosk = NULL;
+#ifndef OPENSSL_NO_POSIX_IO
+    char *dirpath = NULL;
+    OPENSSL_DIR_CTX *dirctx = NULL;
+#endif
+
+    if ((buff = BUF_MEM_new()) == NULL) {
+        CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_BUF_LIB);
+        goto err;
+    }
+
+    section = OPENSSL_strdup("default");
+    if (section == NULL) {
+        CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (_CONF_new_data(conf) == 0) {
+        CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    sv = _CONF_new_section(conf, section);
+    if (sv == NULL) {
+        CONFerr(CONF_F_DEF_LOAD_BIO, CONF_R_UNABLE_TO_CREATE_NEW_SECTION);
+        goto err;
+    }
+
+    bufnum = 0;
+    again = 0;
+    for (;;) {
+        if (!BUF_MEM_grow(buff, bufnum + CONFBUFSIZE)) {
+            CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_BUF_LIB);
+            goto err;
+        }
+        p = &(buff->data[bufnum]);
+        *p = '\0';
+ read_retry:
+        BIO_gets(in, p, CONFBUFSIZE - 1);
+        p[CONFBUFSIZE - 1] = '\0';
+        ii = i = strlen(p);
+        if (i == 0 && !again) {
+            /* the currently processed BIO is at EOF */
+            BIO *parent;
+
+#ifndef OPENSSL_NO_POSIX_IO
+            /* continue processing with the next file from directory */
+            if (dirctx != NULL) {
+                BIO *next;
+
+                if ((next = get_next_file(dirpath, &dirctx)) != NULL) {
+                    BIO_vfree(in);
+                    in = next;
+                    goto read_retry;
+                } else {
+                    OPENSSL_free(dirpath);
+                    dirpath = NULL;
+                }
+            }
+#endif
+            /* no more files in directory, continue with processing parent */
+            if ((parent = sk_BIO_pop(biosk)) == NULL) {
+                /* everything processed get out of the loop */
+                break;
+            } else {
+                BIO_vfree(in);
+                in = parent;
+                goto read_retry;
+            }
+        }
+        again = 0;
+        while (i > 0) {
+            if ((p[i - 1] != '\r') && (p[i - 1] != '\n'))
+                break;
+            else
+                i--;
+        }
+        /*
+         * we removed some trailing stuff so there is a new line on the end.
+         */
+        if (ii && i == ii)
+            again = 1;          /* long line */
+        else {
+            p[i] = '\0';
+            eline++;            /* another input line */
+        }
+
+        /* we now have a line with trailing \r\n removed */
+
+        /* i is the number of bytes */
+        bufnum += i;
+
+        v = NULL;
+        /* check for line continuation */
+        if (bufnum >= 1) {
+            /*
+             * If we have bytes and the last char '\\' and second last char
+             * is not '\\'
+             */
+            p = &(buff->data[bufnum - 1]);
+            if (IS_ESC(conf, p[0]) && ((bufnum <= 1) || !IS_ESC(conf, p[-1]))) {
+                bufnum--;
+                again = 1;
+            }
+        }
+        if (again)
+            continue;
+        bufnum = 0;
+        buf = buff->data;
+
+        clear_comments(conf, buf);
+        s = eat_ws(conf, buf);
+        if (IS_EOF(conf, *s))
+            continue;           /* blank line */
+        if (*s == '[') {
+            char *ss;
+
+            s++;
+            start = eat_ws(conf, s);
+            ss = start;
+ again:
+            end = eat_alpha_numeric(conf, ss);
+            p = eat_ws(conf, end);
+            if (*p != ']') {
+                if (*p != '\0' && ss != p) {
+                    ss = p;
+                    goto again;
+                }
+                CONFerr(CONF_F_DEF_LOAD_BIO,
+                        CONF_R_MISSING_CLOSE_SQUARE_BRACKET);
+                goto err;
+            }
+            *end = '\0';
+            if (!str_copy(conf, NULL, &section, start))
+                goto err;
+            if ((sv = _CONF_get_section(conf, section)) == NULL)
+                sv = _CONF_new_section(conf, section);
+            if (sv == NULL) {
+                CONFerr(CONF_F_DEF_LOAD_BIO,
+                        CONF_R_UNABLE_TO_CREATE_NEW_SECTION);
+                goto err;
+            }
+            continue;
+        } else {
+            pname = s;
+            end = eat_alpha_numeric(conf, s);
+            if ((end[0] == ':') && (end[1] == ':')) {
+                *end = '\0';
+                end += 2;
+                psection = pname;
+                pname = end;
+                end = eat_alpha_numeric(conf, end);
+            } else {
+                psection = section;
+            }
+            p = eat_ws(conf, end);
+            if (strncmp(pname, ".include", 8) == 0
+                && (p != pname + 8 || *p == '=')) {
+                char *include = NULL;
+                BIO *next;
+
+                if (*p == '=') {
+                    p++;
+                    p = eat_ws(conf, p);
+                }
+                trim_ws(conf, p);
+                if (!str_copy(conf, psection, &include, p))
+                    goto err;
+                /* get the BIO of the included file */
+#ifndef OPENSSL_NO_POSIX_IO
+                next = process_include(include, &dirctx, &dirpath);
+                if (include != dirpath) {
+                    /* dirpath will contain include in case of a directory */
+                    OPENSSL_free(include);
+                }
+#else
+                next = BIO_new_file(include, "r");
+                OPENSSL_free(include);
+#endif
+                if (next != NULL) {
+                    /* push the currently processing BIO onto stack */
+                    if (biosk == NULL) {
+                        if ((biosk = sk_BIO_new_null()) == NULL) {
+                            CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_MALLOC_FAILURE);
+                            goto err;
+                        }
+                    }
+                    if (!sk_BIO_push(biosk, in)) {
+                        CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_MALLOC_FAILURE);
+                        goto err;
+                    }
+                    /* continue with reading from the included BIO */
+                    in = next;
+                }
+                continue;
+            } else if (*p != '=') {
+                CONFerr(CONF_F_DEF_LOAD_BIO, CONF_R_MISSING_EQUAL_SIGN);
+                goto err;
+            }
+            *end = '\0';
+            p++;
+            start = eat_ws(conf, p);
+            trim_ws(conf, start);
+
+            if ((v = OPENSSL_malloc(sizeof(*v))) == NULL) {
+                CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            v->name = OPENSSL_strdup(pname);
+            v->value = NULL;
+            if (v->name == NULL) {
+                CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            if (!str_copy(conf, psection, &(v->value), start))
+                goto err;
+
+            if (strcmp(psection, section) != 0) {
+                if ((tv = _CONF_get_section(conf, psection))
+                    == NULL)
+                    tv = _CONF_new_section(conf, psection);
+                if (tv == NULL) {
+                    CONFerr(CONF_F_DEF_LOAD_BIO,
+                            CONF_R_UNABLE_TO_CREATE_NEW_SECTION);
+                    goto err;
+                }
+            } else
+                tv = sv;
+            if (_CONF_add_string(conf, tv, v) == 0) {
+                CONFerr(CONF_F_DEF_LOAD_BIO, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            v = NULL;
+        }
+    }
+    BUF_MEM_free(buff);
+    OPENSSL_free(section);
+    /*
+     * No need to pop, since we only get here if the stack is empty.
+     * If this causes a BIO leak, THE ISSUE IS SOMEWHERE ELSE!
+     */
+    sk_BIO_free(biosk);
+    return 1;
+ err:
+    BUF_MEM_free(buff);
+    OPENSSL_free(section);
+    /*
+     * Since |in| is the first element of the stack and should NOT be freed
+     * here, we cannot use sk_BIO_pop_free().  Instead, we pop and free one
+     * BIO at a time, making sure that the last one popped isn't.
+     */
+    while (sk_BIO_num(biosk) > 0) {
+        BIO *popped = sk_BIO_pop(biosk);
+        BIO_vfree(in);
+        in = popped;
+    }
+    sk_BIO_free(biosk);
+#ifndef OPENSSL_NO_POSIX_IO
+    OPENSSL_free(dirpath);
+    if (dirctx != NULL)
+        OPENSSL_DIR_end(&dirctx);
+#endif
+    if (line != NULL)
+        *line = eline;
+    BIO_snprintf(btmp, sizeof(btmp), "%ld", eline);
+    ERR_add_error_data(2, "line ", btmp);
+    if (h != conf->data) {
+        CONF_free(conf->data);
+        conf->data = NULL;
+    }
+    if (v != NULL) {
+        OPENSSL_free(v->name);
+        OPENSSL_free(v->value);
+        OPENSSL_free(v);
+    }
+    return 0;
+}
+
+static void clear_comments(CONF *conf, char *p)
+{
+    for (;;) {
+        if (IS_FCOMMENT(conf, *p)) {
+            *p = '\0';
+            return;
+        }
+        if (!IS_WS(conf, *p)) {
+            break;
+        }
+        p++;
+    }
+
+    for (;;) {
+        if (IS_COMMENT(conf, *p)) {
+            *p = '\0';
+            return;
+        }
+        if (IS_DQUOTE(conf, *p)) {
+            p = scan_dquote(conf, p);
+            continue;
+        }
+        if (IS_QUOTE(conf, *p)) {
+            p = scan_quote(conf, p);
+            continue;
+        }
+        if (IS_ESC(conf, *p)) {
+            p = scan_esc(conf, p);
+            continue;
+        }
+        if (IS_EOF(conf, *p))
+            return;
+        else
+            p++;
+    }
+}
+
+static int str_copy(CONF *conf, char *section, char **pto, char *from)
+{
+    int q, r, rr = 0, to = 0, len = 0;
+    char *s, *e, *rp, *p, *rrp, *np, *cp, v;
+    BUF_MEM *buf;
+
+    if ((buf = BUF_MEM_new()) == NULL)
+        return 0;
+
+    len = strlen(from) + 1;
+    if (!BUF_MEM_grow(buf, len))
+        goto err;
+
+    for (;;) {
+        if (IS_QUOTE(conf, *from)) {
+            q = *from;
+            from++;
+            while (!IS_EOF(conf, *from) && (*from != q)) {
+                if (IS_ESC(conf, *from)) {
+                    from++;
+                    if (IS_EOF(conf, *from))
+                        break;
+                }
+                buf->data[to++] = *(from++);
+            }
+            if (*from == q)
+                from++;
+        } else if (IS_DQUOTE(conf, *from)) {
+            q = *from;
+            from++;
+            while (!IS_EOF(conf, *from)) {
+                if (*from == q) {
+                    if (*(from + 1) == q) {
+                        from++;
+                    } else {
+                        break;
+                    }
+                }
+                buf->data[to++] = *(from++);
+            }
+            if (*from == q)
+                from++;
+        } else if (IS_ESC(conf, *from)) {
+            from++;
+            v = *(from++);
+            if (IS_EOF(conf, v))
+                break;
+            else if (v == 'r')
+                v = '\r';
+            else if (v == 'n')
+                v = '\n';
+            else if (v == 'b')
+                v = '\b';
+            else if (v == 't')
+                v = '\t';
+            buf->data[to++] = v;
+        } else if (IS_EOF(conf, *from))
+            break;
+        else if (*from == '$') {
+            size_t newsize;
+
+            /* try to expand it */
+            rrp = NULL;
+            s = &(from[1]);
+            if (*s == '{')
+                q = '}';
+            else if (*s == '(')
+                q = ')';
+            else
+                q = 0;
+
+            if (q)
+                s++;
+            cp = section;
+            e = np = s;
+            while (IS_ALNUM(conf, *e))
+                e++;
+            if ((e[0] == ':') && (e[1] == ':')) {
+                cp = np;
+                rrp = e;
+                rr = *e;
+                *rrp = '\0';
+                e += 2;
+                np = e;
+                while (IS_ALNUM(conf, *e))
+                    e++;
+            }
+            r = *e;
+            *e = '\0';
+            rp = e;
+            if (q) {
+                if (r != q) {
+                    CONFerr(CONF_F_STR_COPY, CONF_R_NO_CLOSE_BRACE);
+                    goto err;
+                }
+                e++;
+            }
+            /*-
+             * So at this point we have
+             * np which is the start of the name string which is
+             *   '\0' terminated.
+             * cp which is the start of the section string which is
+             *   '\0' terminated.
+             * e is the 'next point after'.
+             * r and rr are the chars replaced by the '\0'
+             * rp and rrp is where 'r' and 'rr' came from.
+             */
+            p = _CONF_get_string(conf, cp, np);
+            if (rrp != NULL)
+                *rrp = rr;
+            *rp = r;
+            if (p == NULL) {
+                CONFerr(CONF_F_STR_COPY, CONF_R_VARIABLE_HAS_NO_VALUE);
+                goto err;
+            }
+            newsize = strlen(p) + buf->length - (e - from);
+            if (newsize > MAX_CONF_VALUE_LENGTH) {
+                CONFerr(CONF_F_STR_COPY, CONF_R_VARIABLE_EXPANSION_TOO_LONG);
+                goto err;
+            }
+            if (!BUF_MEM_grow_clean(buf, newsize)) {
+                CONFerr(CONF_F_STR_COPY, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            while (*p)
+                buf->data[to++] = *(p++);
+
+            /*
+             * Since we change the pointer 'from', we also have to change the
+             * perceived length of the string it points at.  /RL
+             */
+            len -= e - from;
+            from = e;
+
+            /*
+             * In case there were no braces or parenthesis around the
+             * variable reference, we have to put back the character that was
+             * replaced with a '\0'.  /RL
+             */
+            *rp = r;
+        } else
+            buf->data[to++] = *(from++);
+    }
+    buf->data[to] = '\0';
+    OPENSSL_free(*pto);
+    *pto = buf->data;
+    OPENSSL_free(buf);
+    return 1;
+ err:
+    BUF_MEM_free(buf);
+    return 0;
+}
+
+#ifndef OPENSSL_NO_POSIX_IO
+/*
+ * Check whether included path is a directory.
+ * Returns next BIO to process and in case of a directory
+ * also an opened directory context and the include path.
+ */
+static BIO *process_include(char *include, OPENSSL_DIR_CTX **dirctx,
+                            char **dirpath)
+{
+    struct stat st = { 0 };
+    BIO *next;
+
+    if (stat(include, &st) < 0) {
+        SYSerr(SYS_F_STAT, errno);
+        ERR_add_error_data(1, include);
+        /* missing include file is not fatal error */
+        return NULL;
+    }
+
+    if (S_ISDIR(st.st_mode)) {
+        if (*dirctx != NULL) {
+            CONFerr(CONF_F_PROCESS_INCLUDE,
+                    CONF_R_RECURSIVE_DIRECTORY_INCLUDE);
+            ERR_add_error_data(1, include);
+            return NULL;
+        }
+        /* a directory, load its contents */
+        if ((next = get_next_file(include, dirctx)) != NULL)
+            *dirpath = include;
+        return next;
+    }
+
+    next = BIO_new_file(include, "r");
+    return next;
+}
+
+/*
+ * Get next file from the directory path.
+ * Returns BIO of the next file to read and updates dirctx.
+ */
+static BIO *get_next_file(const char *path, OPENSSL_DIR_CTX **dirctx)
+{
+    const char *filename;
+
+    while ((filename = OPENSSL_DIR_read(dirctx, path)) != NULL) {
+        size_t namelen;
+
+        namelen = strlen(filename);
+
+
+        if ((namelen > 5 && strcasecmp(filename + namelen - 5, ".conf") == 0)
+            || (namelen > 4 && strcasecmp(filename + namelen - 4, ".cnf") == 0)) {
+            size_t newlen;
+            char *newpath;
+            BIO *bio;
+
+            newlen = strlen(path) + namelen + 2;
+            newpath = OPENSSL_zalloc(newlen);
+            if (newpath == NULL) {
+                CONFerr(CONF_F_GET_NEXT_FILE, ERR_R_MALLOC_FAILURE);
+                break;
+            }
+#ifdef OPENSSL_SYS_VMS
+            /*
+             * If the given path isn't clear VMS syntax,
+             * we treat it as on Unix.
+             */
+            {
+                size_t pathlen = strlen(path);
+
+                if (path[pathlen - 1] == ']' || path[pathlen - 1] == '>'
+                    || path[pathlen - 1] == ':') {
+                    /* Clear VMS directory syntax, just copy as is */
+                    OPENSSL_strlcpy(newpath, path, newlen);
+                }
+            }
+#endif
+            if (newpath[0] == '\0') {
+                OPENSSL_strlcpy(newpath, path, newlen);
+                OPENSSL_strlcat(newpath, "/", newlen);
+            }
+            OPENSSL_strlcat(newpath, filename, newlen);
+
+            bio = BIO_new_file(newpath, "r");
+            OPENSSL_free(newpath);
+            /* Errors when opening files are non-fatal. */
+            if (bio != NULL)
+                return bio;
+        }
+    }
+    OPENSSL_DIR_end(dirctx);
+    *dirctx = NULL;
+    return NULL;
+}
+#endif
+
+static int is_keytype(const CONF *conf, char c, unsigned short type)
+{
+    const unsigned short * keytypes = (const unsigned short *) conf->meth_data;
+    unsigned char key = (unsigned char)c;
+
+#ifdef CHARSET_EBCDIC
+# if CHAR_BIT > 8
+    if (key > 255) {
+        /* key is out of range for os_toascii table */
+        return 0;
+    }
+# endif
+    /* convert key from ebcdic to ascii */
+    key = os_toascii[key];
+#endif
+
+    if (key > 127) {
+        /* key is not a seven bit ascii character */
+        return 0;
+    }
+
+    return (keytypes[key] & type) ? 1 : 0;
+}
+
+static char *eat_ws(CONF *conf, char *p)
+{
+    while (IS_WS(conf, *p) && (!IS_EOF(conf, *p)))
+        p++;
+    return p;
+}
+
+static void trim_ws(CONF *conf, char *start)
+{
+    char *p = start;
+
+    while (!IS_EOF(conf, *p))
+        p++;
+    p--;
+    while ((p >= start) && IS_WS(conf, *p))
+        p--;
+    p++;
+    *p = '\0';
+}
+
+static char *eat_alpha_numeric(CONF *conf, char *p)
+{
+    for (;;) {
+        if (IS_ESC(conf, *p)) {
+            p = scan_esc(conf, p);
+            continue;
+        }
+        if (!IS_ALNUM_PUNCT(conf, *p))
+            return p;
+        p++;
+    }
+}
+
+static char *scan_quote(CONF *conf, char *p)
+{
+    int q = *p;
+
+    p++;
+    while (!(IS_EOF(conf, *p)) && (*p != q)) {
+        if (IS_ESC(conf, *p)) {
+            p++;
+            if (IS_EOF(conf, *p))
+                return p;
+        }
+        p++;
+    }
+    if (*p == q)
+        p++;
+    return p;
+}
+
+static char *scan_dquote(CONF *conf, char *p)
+{
+    int q = *p;
+
+    p++;
+    while (!(IS_EOF(conf, *p))) {
+        if (*p == q) {
+            if (*(p + 1) == q) {
+                p++;
+            } else {
+                break;
+            }
+        }
+        p++;
+    }
+    if (*p == q)
+        p++;
+    return p;
+}
+
+static void dump_value_doall_arg(const CONF_VALUE *a, BIO *out)
+{
+    if (a->name)
+        BIO_printf(out, "[%s] %s=%s\n", a->section, a->name, a->value);
+    else
+        BIO_printf(out, "[[%s]]\n", a->section);
+}
+
+IMPLEMENT_LHASH_DOALL_ARG_CONST(CONF_VALUE, BIO);
+
+static int def_dump(const CONF *conf, BIO *out)
+{
+    lh_CONF_VALUE_doall_BIO(conf->data, dump_value_doall_arg, out);
+    return 1;
+}
+
+static int def_is_number(const CONF *conf, char c)
+{
+    return IS_NUMBER(conf, c);
+}
+
+static int def_to_int(const CONF *conf, char c)
+{
+    return c - '0';
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_def.h b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_def.h
new file mode 100644
index 000000000..2016d31b8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_def.h
@@ -0,0 +1,76 @@
+/*
+ * WARNING: do not edit!
+ * Generated by crypto/conf/keysets.pl
+ *
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#define CONF_NUMBER       1
+#define CONF_UPPER        2
+#define CONF_LOWER        4
+#define CONF_UNDER        256
+#define CONF_PUNCT        512
+#define CONF_WS           16
+#define CONF_ESC          32
+#define CONF_QUOTE        64
+#define CONF_DQUOTE       1024
+#define CONF_COMMENT      128
+#define CONF_FCOMMENT     2048
+#define CONF_EOF          8
+#define CONF_ALPHA        (CONF_UPPER|CONF_LOWER)
+#define CONF_ALNUM        (CONF_ALPHA|CONF_NUMBER|CONF_UNDER)
+#define CONF_ALNUM_PUNCT  (CONF_ALPHA|CONF_NUMBER|CONF_UNDER|CONF_PUNCT)
+
+
+#define IS_COMMENT(conf,c)     is_keytype(conf, c, CONF_COMMENT)
+#define IS_FCOMMENT(conf,c)    is_keytype(conf, c, CONF_FCOMMENT)
+#define IS_EOF(conf,c)         is_keytype(conf, c, CONF_EOF)
+#define IS_ESC(conf,c)         is_keytype(conf, c, CONF_ESC)
+#define IS_NUMBER(conf,c)      is_keytype(conf, c, CONF_NUMBER)
+#define IS_WS(conf,c)          is_keytype(conf, c, CONF_WS)
+#define IS_ALNUM(conf,c)       is_keytype(conf, c, CONF_ALNUM)
+#define IS_ALNUM_PUNCT(conf,c) is_keytype(conf, c, CONF_ALNUM_PUNCT)
+#define IS_QUOTE(conf,c)       is_keytype(conf, c, CONF_QUOTE)
+#define IS_DQUOTE(conf,c)      is_keytype(conf, c, CONF_DQUOTE)
+
+static const unsigned short CONF_type_default[128] = {
+    0x0008, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
+    0x0000, 0x0010, 0x0010, 0x0000, 0x0000, 0x0010, 0x0000, 0x0000,
+    0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
+    0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
+    0x0010, 0x0200, 0x0040, 0x0080, 0x0000, 0x0200, 0x0200, 0x0040,
+    0x0000, 0x0000, 0x0200, 0x0200, 0x0200, 0x0200, 0x0200, 0x0200,
+    0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001,
+    0x0001, 0x0001, 0x0000, 0x0200, 0x0000, 0x0000, 0x0000, 0x0200,
+    0x0200, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002,
+    0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002,
+    0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002,
+    0x0002, 0x0002, 0x0002, 0x0000, 0x0020, 0x0000, 0x0200, 0x0100,
+    0x0040, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004,
+    0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004,
+    0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004,
+    0x0004, 0x0004, 0x0004, 0x0000, 0x0200, 0x0000, 0x0200, 0x0000,
+};
+
+static const unsigned short CONF_type_win32[128] = {
+    0x0008, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
+    0x0000, 0x0010, 0x0010, 0x0000, 0x0000, 0x0010, 0x0000, 0x0000,
+    0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
+    0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
+    0x0010, 0x0200, 0x0400, 0x0000, 0x0000, 0x0200, 0x0200, 0x0000,
+    0x0000, 0x0000, 0x0200, 0x0200, 0x0200, 0x0200, 0x0200, 0x0200,
+    0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001, 0x0001,
+    0x0001, 0x0001, 0x0000, 0x0A00, 0x0000, 0x0000, 0x0000, 0x0200,
+    0x0200, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002,
+    0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002,
+    0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002, 0x0002,
+    0x0002, 0x0002, 0x0002, 0x0000, 0x0000, 0x0000, 0x0200, 0x0100,
+    0x0000, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004,
+    0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004,
+    0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004, 0x0004,
+    0x0004, 0x0004, 0x0004, 0x0000, 0x0200, 0x0000, 0x0200, 0x0000,
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_err.c
new file mode 100644
index 000000000..f7613584e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_err.c
@@ -0,0 +1,95 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/conferr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA CONF_str_functs[] = {
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_CONF_DUMP_FP, 0), "CONF_dump_fp"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_CONF_LOAD, 0), "CONF_load"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_CONF_LOAD_FP, 0), "CONF_load_fp"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_CONF_PARSE_LIST, 0), "CONF_parse_list"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_DEF_LOAD, 0), "def_load"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_DEF_LOAD_BIO, 0), "def_load_bio"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_GET_NEXT_FILE, 0), "get_next_file"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_MODULE_ADD, 0), "module_add"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_MODULE_INIT, 0), "module_init"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_MODULE_LOAD_DSO, 0), "module_load_dso"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_MODULE_RUN, 0), "module_run"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_NCONF_DUMP_BIO, 0), "NCONF_dump_bio"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_NCONF_DUMP_FP, 0), "NCONF_dump_fp"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_NCONF_GET_NUMBER_E, 0),
+     "NCONF_get_number_e"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_NCONF_GET_SECTION, 0), "NCONF_get_section"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_NCONF_GET_STRING, 0), "NCONF_get_string"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_NCONF_LOAD, 0), "NCONF_load"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_NCONF_LOAD_BIO, 0), "NCONF_load_bio"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_NCONF_LOAD_FP, 0), "NCONF_load_fp"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_NCONF_NEW, 0), "NCONF_new"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_PROCESS_INCLUDE, 0), "process_include"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_SSL_MODULE_INIT, 0), "ssl_module_init"},
+    {ERR_PACK(ERR_LIB_CONF, CONF_F_STR_COPY, 0), "str_copy"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA CONF_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_ERROR_LOADING_DSO), "error loading dso"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_LIST_CANNOT_BE_NULL),
+    "list cannot be null"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_MISSING_CLOSE_SQUARE_BRACKET),
+    "missing close square bracket"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_MISSING_EQUAL_SIGN),
+    "missing equal sign"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_MISSING_INIT_FUNCTION),
+    "missing init function"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_MODULE_INITIALIZATION_ERROR),
+    "module initialization error"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_NO_CLOSE_BRACE), "no close brace"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_NO_CONF), "no conf"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_NO_CONF_OR_ENVIRONMENT_VARIABLE),
+    "no conf or environment variable"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_NO_SECTION), "no section"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_NO_SUCH_FILE), "no such file"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_NO_VALUE), "no value"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_NUMBER_TOO_LARGE), "number too large"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_RECURSIVE_DIRECTORY_INCLUDE),
+    "recursive directory include"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_SSL_COMMAND_SECTION_EMPTY),
+    "ssl command section empty"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_SSL_COMMAND_SECTION_NOT_FOUND),
+    "ssl command section not found"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_SSL_SECTION_EMPTY), "ssl section empty"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_SSL_SECTION_NOT_FOUND),
+    "ssl section not found"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_UNABLE_TO_CREATE_NEW_SECTION),
+    "unable to create new section"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_UNKNOWN_MODULE_NAME),
+    "unknown module name"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_VARIABLE_EXPANSION_TOO_LONG),
+    "variable expansion too long"},
+    {ERR_PACK(ERR_LIB_CONF, 0, CONF_R_VARIABLE_HAS_NO_VALUE),
+    "variable has no value"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_CONF_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(CONF_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(CONF_str_functs);
+        ERR_load_strings_const(CONF_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_lcl.h
new file mode 100644
index 000000000..6e1f7fe00
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_lcl.h
@@ -0,0 +1,11 @@
+/*
+ * Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+void conf_add_ssl_module(void);
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_lib.c
new file mode 100644
index 000000000..2d40ac97e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_lib.c
@@ -0,0 +1,414 @@
+/*
+ * Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include <stdio.h>
+#include <string.h>
+#include "internal/conf.h"
+#include "internal/ctype.h"
+#include <openssl/crypto.h>
+#include <openssl/err.h>
+#include <openssl/conf.h>
+#include <openssl/conf_api.h>
+#include <openssl/lhash.h>
+
+static CONF_METHOD *default_CONF_method = NULL;
+
+/* Init a 'CONF' structure from an old LHASH */
+
+void CONF_set_nconf(CONF *conf, LHASH_OF(CONF_VALUE) *hash)
+{
+    if (default_CONF_method == NULL)
+        default_CONF_method = NCONF_default();
+
+    default_CONF_method->init(conf);
+    conf->data = hash;
+}
+
+/*
+ * The following section contains the "CONF classic" functions, rewritten in
+ * terms of the new CONF interface.
+ */
+
+int CONF_set_default_method(CONF_METHOD *meth)
+{
+    default_CONF_method = meth;
+    return 1;
+}
+
+LHASH_OF(CONF_VALUE) *CONF_load(LHASH_OF(CONF_VALUE) *conf, const char *file,
+                                long *eline)
+{
+    LHASH_OF(CONF_VALUE) *ltmp;
+    BIO *in = NULL;
+
+#ifdef OPENSSL_SYS_VMS
+    in = BIO_new_file(file, "r");
+#else
+    in = BIO_new_file(file, "rb");
+#endif
+    if (in == NULL) {
+        CONFerr(CONF_F_CONF_LOAD, ERR_R_SYS_LIB);
+        return NULL;
+    }
+
+    ltmp = CONF_load_bio(conf, in, eline);
+    BIO_free(in);
+
+    return ltmp;
+}
+
+#ifndef OPENSSL_NO_STDIO
+LHASH_OF(CONF_VALUE) *CONF_load_fp(LHASH_OF(CONF_VALUE) *conf, FILE *fp,
+                                   long *eline)
+{
+    BIO *btmp;
+    LHASH_OF(CONF_VALUE) *ltmp;
+    if ((btmp = BIO_new_fp(fp, BIO_NOCLOSE)) == NULL) {
+        CONFerr(CONF_F_CONF_LOAD_FP, ERR_R_BUF_LIB);
+        return NULL;
+    }
+    ltmp = CONF_load_bio(conf, btmp, eline);
+    BIO_free(btmp);
+    return ltmp;
+}
+#endif
+
+LHASH_OF(CONF_VALUE) *CONF_load_bio(LHASH_OF(CONF_VALUE) *conf, BIO *bp,
+                                    long *eline)
+{
+    CONF ctmp;
+    int ret;
+
+    CONF_set_nconf(&ctmp, conf);
+
+    ret = NCONF_load_bio(&ctmp, bp, eline);
+    if (ret)
+        return ctmp.data;
+    return NULL;
+}
+
+STACK_OF(CONF_VALUE) *CONF_get_section(LHASH_OF(CONF_VALUE) *conf,
+                                       const char *section)
+{
+    if (conf == NULL) {
+        return NULL;
+    } else {
+        CONF ctmp;
+        CONF_set_nconf(&ctmp, conf);
+        return NCONF_get_section(&ctmp, section);
+    }
+}
+
+char *CONF_get_string(LHASH_OF(CONF_VALUE) *conf, const char *group,
+                      const char *name)
+{
+    if (conf == NULL) {
+        return NCONF_get_string(NULL, group, name);
+    } else {
+        CONF ctmp;
+        CONF_set_nconf(&ctmp, conf);
+        return NCONF_get_string(&ctmp, group, name);
+    }
+}
+
+long CONF_get_number(LHASH_OF(CONF_VALUE) *conf, const char *group,
+                     const char *name)
+{
+    int status;
+    long result = 0;
+
+    ERR_set_mark();
+    if (conf == NULL) {
+        status = NCONF_get_number_e(NULL, group, name, &result);
+    } else {
+        CONF ctmp;
+        CONF_set_nconf(&ctmp, conf);
+        status = NCONF_get_number_e(&ctmp, group, name, &result);
+    }
+    ERR_pop_to_mark();
+    return status == 0 ? 0L : result;
+}
+
+void CONF_free(LHASH_OF(CONF_VALUE) *conf)
+{
+    CONF ctmp;
+    CONF_set_nconf(&ctmp, conf);
+    NCONF_free_data(&ctmp);
+}
+
+#ifndef OPENSSL_NO_STDIO
+int CONF_dump_fp(LHASH_OF(CONF_VALUE) *conf, FILE *out)
+{
+    BIO *btmp;
+    int ret;
+
+    if ((btmp = BIO_new_fp(out, BIO_NOCLOSE)) == NULL) {
+        CONFerr(CONF_F_CONF_DUMP_FP, ERR_R_BUF_LIB);
+        return 0;
+    }
+    ret = CONF_dump_bio(conf, btmp);
+    BIO_free(btmp);
+    return ret;
+}
+#endif
+
+int CONF_dump_bio(LHASH_OF(CONF_VALUE) *conf, BIO *out)
+{
+    CONF ctmp;
+    CONF_set_nconf(&ctmp, conf);
+    return NCONF_dump_bio(&ctmp, out);
+}
+
+/*
+ * The following section contains the "New CONF" functions.  They are
+ * completely centralised around a new CONF structure that may contain
+ * basically anything, but at least a method pointer and a table of data.
+ * These functions are also written in terms of the bridge functions used by
+ * the "CONF classic" functions, for consistency.
+ */
+
+CONF *NCONF_new(CONF_METHOD *meth)
+{
+    CONF *ret;
+
+    if (meth == NULL)
+        meth = NCONF_default();
+
+    ret = meth->create(meth);
+    if (ret == NULL) {
+        CONFerr(CONF_F_NCONF_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    return ret;
+}
+
+void NCONF_free(CONF *conf)
+{
+    if (conf == NULL)
+        return;
+    conf->meth->destroy(conf);
+}
+
+void NCONF_free_data(CONF *conf)
+{
+    if (conf == NULL)
+        return;
+    conf->meth->destroy_data(conf);
+}
+
+int NCONF_load(CONF *conf, const char *file, long *eline)
+{
+    if (conf == NULL) {
+        CONFerr(CONF_F_NCONF_LOAD, CONF_R_NO_CONF);
+        return 0;
+    }
+
+    return conf->meth->load(conf, file, eline);
+}
+
+#ifndef OPENSSL_NO_STDIO
+int NCONF_load_fp(CONF *conf, FILE *fp, long *eline)
+{
+    BIO *btmp;
+    int ret;
+    if ((btmp = BIO_new_fp(fp, BIO_NOCLOSE)) == NULL) {
+        CONFerr(CONF_F_NCONF_LOAD_FP, ERR_R_BUF_LIB);
+        return 0;
+    }
+    ret = NCONF_load_bio(conf, btmp, eline);
+    BIO_free(btmp);
+    return ret;
+}
+#endif
+
+int NCONF_load_bio(CONF *conf, BIO *bp, long *eline)
+{
+    if (conf == NULL) {
+        CONFerr(CONF_F_NCONF_LOAD_BIO, CONF_R_NO_CONF);
+        return 0;
+    }
+
+    return conf->meth->load_bio(conf, bp, eline);
+}
+
+STACK_OF(CONF_VALUE) *NCONF_get_section(const CONF *conf, const char *section)
+{
+    if (conf == NULL) {
+        CONFerr(CONF_F_NCONF_GET_SECTION, CONF_R_NO_CONF);
+        return NULL;
+    }
+
+    if (section == NULL) {
+        CONFerr(CONF_F_NCONF_GET_SECTION, CONF_R_NO_SECTION);
+        return NULL;
+    }
+
+    return _CONF_get_section_values(conf, section);
+}
+
+char *NCONF_get_string(const CONF *conf, const char *group, const char *name)
+{
+    char *s = _CONF_get_string(conf, group, name);
+
+    /*
+     * Since we may get a value from an environment variable even if conf is
+     * NULL, let's check the value first
+     */
+    if (s)
+        return s;
+
+    if (conf == NULL) {
+        CONFerr(CONF_F_NCONF_GET_STRING,
+                CONF_R_NO_CONF_OR_ENVIRONMENT_VARIABLE);
+        return NULL;
+    }
+    CONFerr(CONF_F_NCONF_GET_STRING, CONF_R_NO_VALUE);
+    ERR_add_error_data(4, "group=", group, " name=", name);
+    return NULL;
+}
+
+static int default_is_number(const CONF *conf, char c)
+{
+    return ossl_isdigit(c);
+}
+
+static int default_to_int(const CONF *conf, char c)
+{
+    return (int)(c - '0');
+}
+
+int NCONF_get_number_e(const CONF *conf, const char *group, const char *name,
+                       long *result)
+{
+    char *str;
+    long res;
+    int (*is_number)(const CONF *, char) = &default_is_number;
+    int (*to_int)(const CONF *, char) = &default_to_int;
+
+    if (result == NULL) {
+        CONFerr(CONF_F_NCONF_GET_NUMBER_E, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+
+    str = NCONF_get_string(conf, group, name);
+
+    if (str == NULL)
+        return 0;
+
+    if (conf != NULL) {
+        if (conf->meth->is_number != NULL)
+            is_number = conf->meth->is_number;
+        if (conf->meth->to_int != NULL)
+            to_int = conf->meth->to_int;
+    }
+    for (res = 0; is_number(conf, *str); str++) {
+        const int d = to_int(conf, *str);
+
+        if (res > (LONG_MAX - d) / 10L) {
+            CONFerr(CONF_F_NCONF_GET_NUMBER_E, CONF_R_NUMBER_TOO_LARGE);
+            return 0;
+        }
+        res = res * 10 + d;
+    }
+
+    *result = res;
+    return 1;
+}
+
+#ifndef OPENSSL_NO_STDIO
+int NCONF_dump_fp(const CONF *conf, FILE *out)
+{
+    BIO *btmp;
+    int ret;
+    if ((btmp = BIO_new_fp(out, BIO_NOCLOSE)) == NULL) {
+        CONFerr(CONF_F_NCONF_DUMP_FP, ERR_R_BUF_LIB);
+        return 0;
+    }
+    ret = NCONF_dump_bio(conf, btmp);
+    BIO_free(btmp);
+    return ret;
+}
+#endif
+
+int NCONF_dump_bio(const CONF *conf, BIO *out)
+{
+    if (conf == NULL) {
+        CONFerr(CONF_F_NCONF_DUMP_BIO, CONF_R_NO_CONF);
+        return 0;
+    }
+
+    return conf->meth->dump(conf, out);
+}
+
+/*
+ * These routines call the C malloc/free, to avoid intermixing with
+ * OpenSSL function pointers before the library is initialized.
+ */
+OPENSSL_INIT_SETTINGS *OPENSSL_INIT_new(void)
+{
+    OPENSSL_INIT_SETTINGS *ret = malloc(sizeof(*ret));
+
+    if (ret != NULL)
+        memset(ret, 0, sizeof(*ret));
+    ret->flags = DEFAULT_CONF_MFLAGS;
+
+    return ret;
+}
+
+
+#ifndef OPENSSL_NO_STDIO
+int OPENSSL_INIT_set_config_filename(OPENSSL_INIT_SETTINGS *settings,
+                                     const char *filename)
+{
+    char *newfilename = NULL;
+
+    if (filename != NULL) {
+        newfilename = strdup(filename);
+        if (newfilename == NULL)
+            return 0;
+    }
+
+    free(settings->filename);
+    settings->filename = newfilename;
+
+    return 1;
+}
+
+void OPENSSL_INIT_set_config_file_flags(OPENSSL_INIT_SETTINGS *settings,
+                                        unsigned long flags)
+{
+    settings->flags = flags;
+}
+
+int OPENSSL_INIT_set_config_appname(OPENSSL_INIT_SETTINGS *settings,
+                                    const char *appname)
+{
+    char *newappname = NULL;
+
+    if (appname != NULL) {
+        newappname = strdup(appname);
+        if (newappname == NULL)
+            return 0;
+    }
+
+    free(settings->appname);
+    settings->appname = newappname;
+
+    return 1;
+}
+#endif
+
+void OPENSSL_INIT_free(OPENSSL_INIT_SETTINGS *settings)
+{
+    free(settings->filename);
+    free(settings->appname);
+    free(settings);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_mall.c b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_mall.c
new file mode 100644
index 000000000..7e86948e8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_mall.c
@@ -0,0 +1,31 @@
+/*
+ * Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <openssl/crypto.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/x509.h>
+#include <openssl/asn1.h>
+#include <openssl/engine.h>
+#include "conf_lcl.h"
+
+/* Load all OpenSSL builtin modules */
+
+void OPENSSL_load_builtin_modules(void)
+{
+    /* Add builtin modules here */
+    ASN1_add_oid_module();
+    ASN1_add_stable_module();
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_add_conf_module();
+#endif
+    EVP_add_alg_module();
+    conf_add_ssl_module();
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_mod.c b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_mod.c
new file mode 100644
index 000000000..e703d97f5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_mod.c
@@ -0,0 +1,551 @@
+/*
+ * Copyright 2002-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <stdio.h>
+#include <ctype.h>
+#include <openssl/crypto.h>
+#include "internal/conf.h"
+#include "internal/dso.h"
+#include <openssl/x509.h>
+
+#define DSO_mod_init_name "OPENSSL_init"
+#define DSO_mod_finish_name "OPENSSL_finish"
+
+/*
+ * This structure contains a data about supported modules. entries in this
+ * table correspond to either dynamic or static modules.
+ */
+
+struct conf_module_st {
+    /* DSO of this module or NULL if static */
+    DSO *dso;
+    /* Name of the module */
+    char *name;
+    /* Init function */
+    conf_init_func *init;
+    /* Finish function */
+    conf_finish_func *finish;
+    /* Number of successfully initialized modules */
+    int links;
+    void *usr_data;
+};
+
+/*
+ * This structure contains information about modules that have been
+ * successfully initialized. There may be more than one entry for a given
+ * module.
+ */
+
+struct conf_imodule_st {
+    CONF_MODULE *pmod;
+    char *name;
+    char *value;
+    unsigned long flags;
+    void *usr_data;
+};
+
+static STACK_OF(CONF_MODULE) *supported_modules = NULL;
+static STACK_OF(CONF_IMODULE) *initialized_modules = NULL;
+
+static void module_free(CONF_MODULE *md);
+static void module_finish(CONF_IMODULE *imod);
+static int module_run(const CONF *cnf, const char *name, const char *value,
+                      unsigned long flags);
+static CONF_MODULE *module_add(DSO *dso, const char *name,
+                               conf_init_func *ifunc,
+                               conf_finish_func *ffunc);
+static CONF_MODULE *module_find(const char *name);
+static int module_init(CONF_MODULE *pmod, const char *name, const char *value,
+                       const CONF *cnf);
+static CONF_MODULE *module_load_dso(const CONF *cnf, const char *name,
+                                    const char *value);
+
+/* Main function: load modules from a CONF structure */
+
+int CONF_modules_load(const CONF *cnf, const char *appname,
+                      unsigned long flags)
+{
+    STACK_OF(CONF_VALUE) *values;
+    CONF_VALUE *vl;
+    char *vsection = NULL;
+
+    int ret, i;
+
+    if (!cnf)
+        return 1;
+
+    if (appname)
+        vsection = NCONF_get_string(cnf, NULL, appname);
+
+    if (!appname || (!vsection && (flags & CONF_MFLAGS_DEFAULT_SECTION)))
+        vsection = NCONF_get_string(cnf, NULL, "openssl_conf");
+
+    if (!vsection) {
+        ERR_clear_error();
+        return 1;
+    }
+
+    values = NCONF_get_section(cnf, vsection);
+
+    if (!values)
+        return 0;
+
+    for (i = 0; i < sk_CONF_VALUE_num(values); i++) {
+        vl = sk_CONF_VALUE_value(values, i);
+        ret = module_run(cnf, vl->name, vl->value, flags);
+        if (ret <= 0)
+            if (!(flags & CONF_MFLAGS_IGNORE_ERRORS))
+                return ret;
+    }
+
+    return 1;
+
+}
+
+int CONF_modules_load_file(const char *filename, const char *appname,
+                           unsigned long flags)
+{
+    char *file = NULL;
+    CONF *conf = NULL;
+    int ret = 0;
+    conf = NCONF_new(NULL);
+    if (conf == NULL)
+        goto err;
+
+    if (filename == NULL) {
+        file = CONF_get1_default_config_file();
+        if (!file)
+            goto err;
+    } else
+        file = (char *)filename;
+
+    if (NCONF_load(conf, file, NULL) <= 0) {
+        if ((flags & CONF_MFLAGS_IGNORE_MISSING_FILE) &&
+            (ERR_GET_REASON(ERR_peek_last_error()) == CONF_R_NO_SUCH_FILE)) {
+            ERR_clear_error();
+            ret = 1;
+        }
+        goto err;
+    }
+
+    ret = CONF_modules_load(conf, appname, flags);
+
+ err:
+    if (filename == NULL)
+        OPENSSL_free(file);
+    NCONF_free(conf);
+
+    if (flags & CONF_MFLAGS_IGNORE_RETURN_CODES)
+        return 1;
+
+    return ret;
+}
+
+static int module_run(const CONF *cnf, const char *name, const char *value,
+                      unsigned long flags)
+{
+    CONF_MODULE *md;
+    int ret;
+
+    md = module_find(name);
+
+    /* Module not found: try to load DSO */
+    if (!md && !(flags & CONF_MFLAGS_NO_DSO))
+        md = module_load_dso(cnf, name, value);
+
+    if (!md) {
+        if (!(flags & CONF_MFLAGS_SILENT)) {
+            CONFerr(CONF_F_MODULE_RUN, CONF_R_UNKNOWN_MODULE_NAME);
+            ERR_add_error_data(2, "module=", name);
+        }
+        return -1;
+    }
+
+    ret = module_init(md, name, value, cnf);
+
+    if (ret <= 0) {
+        if (!(flags & CONF_MFLAGS_SILENT)) {
+            char rcode[DECIMAL_SIZE(ret) + 1];
+
+            CONFerr(CONF_F_MODULE_RUN, CONF_R_MODULE_INITIALIZATION_ERROR);
+            BIO_snprintf(rcode, sizeof(rcode), "%-8d", ret);
+            ERR_add_error_data(6, "module=", name, ", value=", value,
+                               ", retcode=", rcode);
+        }
+    }
+
+    return ret;
+}
+
+/* Load a module from a DSO */
+static CONF_MODULE *module_load_dso(const CONF *cnf,
+                                    const char *name, const char *value)
+{
+    DSO *dso = NULL;
+    conf_init_func *ifunc;
+    conf_finish_func *ffunc;
+    const char *path = NULL;
+    int errcode = 0;
+    CONF_MODULE *md;
+    /* Look for alternative path in module section */
+    path = NCONF_get_string(cnf, value, "path");
+    if (!path) {
+        ERR_clear_error();
+        path = name;
+    }
+    dso = DSO_load(NULL, path, NULL, 0);
+    if (!dso) {
+        errcode = CONF_R_ERROR_LOADING_DSO;
+        goto err;
+    }
+    ifunc = (conf_init_func *)DSO_bind_func(dso, DSO_mod_init_name);
+    if (!ifunc) {
+        errcode = CONF_R_MISSING_INIT_FUNCTION;
+        goto err;
+    }
+    ffunc = (conf_finish_func *)DSO_bind_func(dso, DSO_mod_finish_name);
+    /* All OK, add module */
+    md = module_add(dso, name, ifunc, ffunc);
+
+    if (!md)
+        goto err;
+
+    return md;
+
+ err:
+    DSO_free(dso);
+    CONFerr(CONF_F_MODULE_LOAD_DSO, errcode);
+    ERR_add_error_data(4, "module=", name, ", path=", path);
+    return NULL;
+}
+
+/* add module to list */
+static CONF_MODULE *module_add(DSO *dso, const char *name,
+                               conf_init_func *ifunc, conf_finish_func *ffunc)
+{
+    CONF_MODULE *tmod = NULL;
+    if (supported_modules == NULL)
+        supported_modules = sk_CONF_MODULE_new_null();
+    if (supported_modules == NULL)
+        return NULL;
+    if ((tmod = OPENSSL_zalloc(sizeof(*tmod))) == NULL) {
+        CONFerr(CONF_F_MODULE_ADD, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    tmod->dso = dso;
+    tmod->name = OPENSSL_strdup(name);
+    tmod->init = ifunc;
+    tmod->finish = ffunc;
+    if (tmod->name == NULL) {
+        OPENSSL_free(tmod);
+        return NULL;
+    }
+
+    if (!sk_CONF_MODULE_push(supported_modules, tmod)) {
+        OPENSSL_free(tmod->name);
+        OPENSSL_free(tmod);
+        return NULL;
+    }
+
+    return tmod;
+}
+
+/*
+ * Find a module from the list. We allow module names of the form
+ * modname.XXXX to just search for modname to allow the same module to be
+ * initialized more than once.
+ */
+
+static CONF_MODULE *module_find(const char *name)
+{
+    CONF_MODULE *tmod;
+    int i, nchar;
+    char *p;
+    p = strrchr(name, '.');
+
+    if (p)
+        nchar = p - name;
+    else
+        nchar = strlen(name);
+
+    for (i = 0; i < sk_CONF_MODULE_num(supported_modules); i++) {
+        tmod = sk_CONF_MODULE_value(supported_modules, i);
+        if (strncmp(tmod->name, name, nchar) == 0)
+            return tmod;
+    }
+
+    return NULL;
+
+}
+
+/* initialize a module */
+static int module_init(CONF_MODULE *pmod, const char *name, const char *value,
+                       const CONF *cnf)
+{
+    int ret = 1;
+    int init_called = 0;
+    CONF_IMODULE *imod = NULL;
+
+    /* Otherwise add initialized module to list */
+    imod = OPENSSL_malloc(sizeof(*imod));
+    if (imod == NULL)
+        goto err;
+
+    imod->pmod = pmod;
+    imod->name = OPENSSL_strdup(name);
+    imod->value = OPENSSL_strdup(value);
+    imod->usr_data = NULL;
+
+    if (!imod->name || !imod->value)
+        goto memerr;
+
+    /* Try to initialize module */
+    if (pmod->init) {
+        ret = pmod->init(imod, cnf);
+        init_called = 1;
+        /* Error occurred, exit */
+        if (ret <= 0)
+            goto err;
+    }
+
+    if (initialized_modules == NULL) {
+        initialized_modules = sk_CONF_IMODULE_new_null();
+        if (!initialized_modules) {
+            CONFerr(CONF_F_MODULE_INIT, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+
+    if (!sk_CONF_IMODULE_push(initialized_modules, imod)) {
+        CONFerr(CONF_F_MODULE_INIT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    pmod->links++;
+
+    return ret;
+
+ err:
+
+    /* We've started the module so we'd better finish it */
+    if (pmod->finish && init_called)
+        pmod->finish(imod);
+
+ memerr:
+    if (imod) {
+        OPENSSL_free(imod->name);
+        OPENSSL_free(imod->value);
+        OPENSSL_free(imod);
+    }
+
+    return -1;
+
+}
+
+/*
+ * Unload any dynamic modules that have a link count of zero: i.e. have no
+ * active initialized modules. If 'all' is set then all modules are unloaded
+ * including static ones.
+ */
+
+void CONF_modules_unload(int all)
+{
+    int i;
+    CONF_MODULE *md;
+    CONF_modules_finish();
+    /* unload modules in reverse order */
+    for (i = sk_CONF_MODULE_num(supported_modules) - 1; i >= 0; i--) {
+        md = sk_CONF_MODULE_value(supported_modules, i);
+        /* If static or in use and 'all' not set ignore it */
+        if (((md->links > 0) || !md->dso) && !all)
+            continue;
+        /* Since we're working in reverse this is OK */
+        (void)sk_CONF_MODULE_delete(supported_modules, i);
+        module_free(md);
+    }
+    if (sk_CONF_MODULE_num(supported_modules) == 0) {
+        sk_CONF_MODULE_free(supported_modules);
+        supported_modules = NULL;
+    }
+}
+
+/* unload a single module */
+static void module_free(CONF_MODULE *md)
+{
+    DSO_free(md->dso);
+    OPENSSL_free(md->name);
+    OPENSSL_free(md);
+}
+
+/* finish and free up all modules instances */
+
+void CONF_modules_finish(void)
+{
+    CONF_IMODULE *imod;
+    while (sk_CONF_IMODULE_num(initialized_modules) > 0) {
+        imod = sk_CONF_IMODULE_pop(initialized_modules);
+        module_finish(imod);
+    }
+    sk_CONF_IMODULE_free(initialized_modules);
+    initialized_modules = NULL;
+}
+
+/* finish a module instance */
+
+static void module_finish(CONF_IMODULE *imod)
+{
+    if (!imod)
+        return;
+    if (imod->pmod->finish)
+        imod->pmod->finish(imod);
+    imod->pmod->links--;
+    OPENSSL_free(imod->name);
+    OPENSSL_free(imod->value);
+    OPENSSL_free(imod);
+}
+
+/* Add a static module to OpenSSL */
+
+int CONF_module_add(const char *name, conf_init_func *ifunc,
+                    conf_finish_func *ffunc)
+{
+    if (module_add(NULL, name, ifunc, ffunc))
+        return 1;
+    else
+        return 0;
+}
+
+void conf_modules_free_int(void)
+{
+    CONF_modules_finish();
+    CONF_modules_unload(1);
+}
+
+/* Utility functions */
+
+const char *CONF_imodule_get_name(const CONF_IMODULE *md)
+{
+    return md->name;
+}
+
+const char *CONF_imodule_get_value(const CONF_IMODULE *md)
+{
+    return md->value;
+}
+
+void *CONF_imodule_get_usr_data(const CONF_IMODULE *md)
+{
+    return md->usr_data;
+}
+
+void CONF_imodule_set_usr_data(CONF_IMODULE *md, void *usr_data)
+{
+    md->usr_data = usr_data;
+}
+
+CONF_MODULE *CONF_imodule_get_module(const CONF_IMODULE *md)
+{
+    return md->pmod;
+}
+
+unsigned long CONF_imodule_get_flags(const CONF_IMODULE *md)
+{
+    return md->flags;
+}
+
+void CONF_imodule_set_flags(CONF_IMODULE *md, unsigned long flags)
+{
+    md->flags = flags;
+}
+
+void *CONF_module_get_usr_data(CONF_MODULE *pmod)
+{
+    return pmod->usr_data;
+}
+
+void CONF_module_set_usr_data(CONF_MODULE *pmod, void *usr_data)
+{
+    pmod->usr_data = usr_data;
+}
+
+/* Return default config file name */
+
+char *CONF_get1_default_config_file(void)
+{
+    char *file, *sep = "";
+    int len;
+
+    if ((file = ossl_safe_getenv("OPENSSL_CONF")) != NULL)
+        return OPENSSL_strdup(file);
+
+    len = strlen(X509_get_default_cert_area());
+#ifndef OPENSSL_SYS_VMS
+    len++;
+    sep = "/";
+#endif
+    len += strlen(OPENSSL_CONF);
+
+    file = OPENSSL_malloc(len + 1);
+
+    if (file == NULL)
+        return NULL;
+    BIO_snprintf(file, len + 1, "%s%s%s", X509_get_default_cert_area(),
+                 sep, OPENSSL_CONF);
+
+    return file;
+}
+
+/*
+ * This function takes a list separated by 'sep' and calls the callback
+ * function giving the start and length of each member optionally stripping
+ * leading and trailing whitespace. This can be used to parse comma separated
+ * lists for example.
+ */
+
+int CONF_parse_list(const char *list_, int sep, int nospc,
+                    int (*list_cb) (const char *elem, int len, void *usr),
+                    void *arg)
+{
+    int ret;
+    const char *lstart, *tmpend, *p;
+
+    if (list_ == NULL) {
+        CONFerr(CONF_F_CONF_PARSE_LIST, CONF_R_LIST_CANNOT_BE_NULL);
+        return 0;
+    }
+
+    lstart = list_;
+    for (;;) {
+        if (nospc) {
+            while (*lstart && isspace((unsigned char)*lstart))
+                lstart++;
+        }
+        p = strchr(lstart, sep);
+        if (p == lstart || !*lstart)
+            ret = list_cb(NULL, 0, arg);
+        else {
+            if (p)
+                tmpend = p - 1;
+            else
+                tmpend = lstart + strlen(lstart) - 1;
+            if (nospc) {
+                while (isspace((unsigned char)*tmpend))
+                    tmpend--;
+            }
+            ret = list_cb(lstart, tmpend - lstart + 1, arg);
+        }
+        if (ret <= 0)
+            return ret;
+        if (p == NULL)
+            return 1;
+        lstart = p + 1;
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_sap.c b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_sap.c
new file mode 100644
index 000000000..2ce42f0c6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_sap.c
@@ -0,0 +1,77 @@
+/*
+ * Copyright 2002-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <openssl/crypto.h>
+#include "internal/cryptlib.h"
+#include "internal/conf.h"
+#include <openssl/x509.h>
+#include <openssl/asn1.h>
+#include <openssl/engine.h>
+
+#ifdef _WIN32
+# define strdup _strdup
+#endif
+
+/*
+ * This is the automatic configuration loader: it is called automatically by
+ * OpenSSL when any of a number of standard initialisation functions are
+ * called, unless this is overridden by calling OPENSSL_no_config()
+ */
+
+static int openssl_configured = 0;
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+void OPENSSL_config(const char *appname)
+{
+    OPENSSL_INIT_SETTINGS settings;
+
+    memset(&settings, 0, sizeof(settings));
+    if (appname != NULL)
+        settings.appname = strdup(appname);
+    OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CONFIG, &settings);
+}
+#endif
+
+int openssl_config_int(const OPENSSL_INIT_SETTINGS *settings)
+{
+    int ret;
+    const char *filename;
+    const char *appname;
+    unsigned long flags;
+
+    if (openssl_configured)
+        return 1;
+
+    filename = settings ? settings->filename : NULL;
+    appname = settings ? settings->appname : NULL;
+    flags = settings ? settings->flags : DEFAULT_CONF_MFLAGS;
+
+#ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: openssl_config_int(%s, %s, %lu)\n",
+            filename, appname, flags);
+#endif
+
+    OPENSSL_load_builtin_modules();
+#ifndef OPENSSL_NO_ENGINE
+    /* Need to load ENGINEs */
+    ENGINE_load_builtin_engines();
+#endif
+    ERR_clear_error();
+#ifndef OPENSSL_SYS_UEFI
+    ret = CONF_modules_load_file(filename, appname, flags);
+#endif
+    openssl_configured = 1;
+    return ret;
+}
+
+void openssl_no_config_int(void)
+{
+    openssl_configured = 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_ssl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_ssl.c
new file mode 100644
index 000000000..387f2cf46
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/conf_ssl.c
@@ -0,0 +1,181 @@
+/*
+ * Copyright 2015-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include <openssl/conf.h>
+#include <openssl/err.h>
+#include "internal/sslconf.h"
+#include "conf_lcl.h"
+
+/*
+ * SSL library configuration module placeholder. We load it here but defer
+ * all decisions about its contents to libssl.
+ */
+
+struct ssl_conf_name_st {
+    /* Name of this set of commands */
+    char *name;
+    /* List of commands */
+    SSL_CONF_CMD *cmds;
+    /* Number of commands */
+    size_t cmd_count;
+};
+
+struct ssl_conf_cmd_st {
+    /* Command */
+    char *cmd;
+    /* Argument */
+    char *arg;
+};
+
+static struct ssl_conf_name_st *ssl_names;
+static size_t ssl_names_count;
+
+static void ssl_module_free(CONF_IMODULE *md)
+{
+    size_t i, j;
+    if (ssl_names == NULL)
+        return;
+    for (i = 0; i < ssl_names_count; i++) {
+        struct ssl_conf_name_st *tname = ssl_names + i;
+
+        OPENSSL_free(tname->name);
+        for (j = 0; j < tname->cmd_count; j++) {
+            OPENSSL_free(tname->cmds[j].cmd);
+            OPENSSL_free(tname->cmds[j].arg);
+        }
+        OPENSSL_free(tname->cmds);
+    }
+    OPENSSL_free(ssl_names);
+    ssl_names = NULL;
+    ssl_names_count = 0;
+}
+
+static int ssl_module_init(CONF_IMODULE *md, const CONF *cnf)
+{
+    size_t i, j, cnt;
+    int rv = 0;
+    const char *ssl_conf_section;
+    STACK_OF(CONF_VALUE) *cmd_lists;
+
+    ssl_conf_section = CONF_imodule_get_value(md);
+    cmd_lists = NCONF_get_section(cnf, ssl_conf_section);
+    if (sk_CONF_VALUE_num(cmd_lists) <= 0) {
+        if (cmd_lists == NULL)
+            CONFerr(CONF_F_SSL_MODULE_INIT, CONF_R_SSL_SECTION_NOT_FOUND);
+        else
+            CONFerr(CONF_F_SSL_MODULE_INIT, CONF_R_SSL_SECTION_EMPTY);
+        ERR_add_error_data(2, "section=", ssl_conf_section);
+        goto err;
+    }
+    cnt = sk_CONF_VALUE_num(cmd_lists);
+    ssl_module_free(md);
+    ssl_names = OPENSSL_zalloc(sizeof(*ssl_names) * cnt);
+    if (ssl_names == NULL)
+        goto err;
+    ssl_names_count = cnt;
+    for (i = 0; i < ssl_names_count; i++) {
+        struct ssl_conf_name_st *ssl_name = ssl_names + i;
+        CONF_VALUE *sect = sk_CONF_VALUE_value(cmd_lists, (int)i);
+        STACK_OF(CONF_VALUE) *cmds = NCONF_get_section(cnf, sect->value);
+
+        if (sk_CONF_VALUE_num(cmds) <= 0) {
+            if (cmds == NULL)
+                CONFerr(CONF_F_SSL_MODULE_INIT,
+                        CONF_R_SSL_COMMAND_SECTION_NOT_FOUND);
+            else
+                CONFerr(CONF_F_SSL_MODULE_INIT,
+                        CONF_R_SSL_COMMAND_SECTION_EMPTY);
+            ERR_add_error_data(4, "name=", sect->name, ", value=", sect->value);
+            goto err;
+        }
+        ssl_name->name = OPENSSL_strdup(sect->name);
+        if (ssl_name->name == NULL)
+            goto err;
+        cnt = sk_CONF_VALUE_num(cmds);
+        ssl_name->cmds = OPENSSL_zalloc(cnt * sizeof(struct ssl_conf_cmd_st));
+        if (ssl_name->cmds == NULL)
+            goto err;
+        ssl_name->cmd_count = cnt;
+        for (j = 0; j < cnt; j++) {
+            const char *name;
+            CONF_VALUE *cmd_conf = sk_CONF_VALUE_value(cmds, (int)j);
+            struct ssl_conf_cmd_st *cmd = ssl_name->cmds + j;
+
+            /* Skip any initial dot in name */
+            name = strchr(cmd_conf->name, '.');
+            if (name != NULL)
+                name++;
+            else
+                name = cmd_conf->name;
+            cmd->cmd = OPENSSL_strdup(name);
+            cmd->arg = OPENSSL_strdup(cmd_conf->value);
+            if (cmd->cmd == NULL || cmd->arg == NULL)
+                goto err;
+        }
+
+    }
+    rv = 1;
+ err:
+    if (rv == 0)
+        ssl_module_free(md);
+    return rv;
+}
+
+/*
+ * Returns the set of commands with index |idx| previously searched for via
+ * conf_ssl_name_find. Also stores the name of the set of commands in |*name|
+ * and the number of commands in the set in |*cnt|.
+ */
+const SSL_CONF_CMD *conf_ssl_get(size_t idx, const char **name, size_t *cnt)
+{
+    *name = ssl_names[idx].name;
+    *cnt = ssl_names[idx].cmd_count;
+    return ssl_names[idx].cmds;
+}
+
+/*
+ * Search for the named set of commands given in |name|. On success return the
+ * index for the command set in |*idx|.
+ * Returns 1 on success or 0 on failure.
+ */
+int conf_ssl_name_find(const char *name, size_t *idx)
+{
+    size_t i;
+    const struct ssl_conf_name_st *nm;
+
+    if (name == NULL)
+        return 0;
+    for (i = 0, nm = ssl_names; i < ssl_names_count; i++, nm++) {
+        if (strcmp(nm->name, name) == 0) {
+            *idx = i;
+            return 1;
+        }
+    }
+    return 0;
+}
+
+/*
+ * Given a command set |cmd|, return details on the command at index |idx| which
+ * must be less than the number of commands in the set (as returned by
+ * conf_ssl_get). The name of the command will be returned in |*cmdstr| and the
+ * argument is returned in |*arg|.
+ */
+void conf_ssl_get_cmd(const SSL_CONF_CMD *cmd, size_t idx, char **cmdstr,
+                      char **arg)
+{
+    *cmdstr = cmd[idx].cmd;
+    *arg = cmd[idx].arg;
+}
+
+void conf_add_ssl_module(void)
+{
+    CONF_module_add("ssl_conf", ssl_module_init, ssl_module_free);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/conf/keysets.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/keysets.pl
new file mode 100644
index 000000000..27a7214cc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/conf/keysets.pl
@@ -0,0 +1,116 @@
+#! /usr/bin/env perl
+# Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+use warnings;
+
+my $NUMBER      = 0x0001;
+my $UPPER       = 0x0002;
+my $LOWER       = 0x0004;
+my $UNDER       = 0x0100;
+my $PUNCTUATION = 0x0200;
+my $WS          = 0x0010;
+my $ESC         = 0x0020;
+my $QUOTE       = 0x0040;
+my $DQUOTE      = 0x0400;
+my $COMMENT     = 0x0080;
+my $FCOMMENT    = 0x0800;
+my $EOF         = 0x0008;
+my @V_def;
+my @V_w32;
+
+my $v;
+my $c;
+foreach (0 .. 127) {
+    $c = sprintf("%c", $_);
+    $v = 0;
+    $v |= $NUMBER      if $c =~ /[0-9]/;
+    $v |= $UPPER       if $c =~ /[A-Z]/;
+    $v |= $LOWER       if $c =~ /[a-z]/;
+    $v |= $UNDER       if $c =~ /_/;
+    $v |= $PUNCTUATION if $c =~ /[!\.%&\*\+,\/;\?\@\^\~\|-]/;
+    $v |= $WS          if $c =~ /[ \t\r\n]/;
+    $v |= $ESC         if $c =~ /\\/;
+    $v |= $QUOTE       if $c =~ /['`"]/;         # for emacs: "`'
+    $v |= $COMMENT     if $c =~ /\#/;
+    $v |= $EOF         if $c =~ /\0/;
+    push(@V_def, $v);
+
+    $v = 0;
+    $v |= $NUMBER      if $c =~ /[0-9]/;
+    $v |= $UPPER       if $c =~ /[A-Z]/;
+    $v |= $LOWER       if $c =~ /[a-z]/;
+    $v |= $UNDER       if $c =~ /_/;
+    $v |= $PUNCTUATION if $c =~ /[!\.%&\*\+,\/;\?\@\^\~\|-]/;
+    $v |= $WS          if $c =~ /[ \t\r\n]/;
+    $v |= $DQUOTE      if $c =~ /["]/;           # for emacs: "
+    $v |= $FCOMMENT    if $c =~ /;/;
+    $v |= $EOF         if $c =~ /\0/;
+    push(@V_w32, $v);
+}
+
+# Output year depends on the year of the script.
+my $YEAR = [localtime([stat($0)]->[9])]->[5] + 1900;
+
+print <<"EOF";
+/*
+ * WARNING: do not edit!
+ * Generated by crypto/conf/keysets.pl
+ *
+ * Copyright 1995-$YEAR The OpenSSL Project Authors. All Rights Reserved.
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#define CONF_NUMBER       $NUMBER
+#define CONF_UPPER        $UPPER
+#define CONF_LOWER        $LOWER
+#define CONF_UNDER        $UNDER
+#define CONF_PUNCT        $PUNCTUATION
+#define CONF_WS           $WS
+#define CONF_ESC          $ESC
+#define CONF_QUOTE        $QUOTE
+#define CONF_DQUOTE       $DQUOTE
+#define CONF_COMMENT      $COMMENT
+#define CONF_FCOMMENT     $FCOMMENT
+#define CONF_EOF          $EOF
+#define CONF_ALPHA        (CONF_UPPER|CONF_LOWER)
+#define CONF_ALNUM        (CONF_ALPHA|CONF_NUMBER|CONF_UNDER)
+#define CONF_ALNUM_PUNCT  (CONF_ALPHA|CONF_NUMBER|CONF_UNDER|CONF_PUNCT)
+
+
+#define IS_COMMENT(conf,c)     is_keytype(conf, c, CONF_COMMENT)
+#define IS_FCOMMENT(conf,c)    is_keytype(conf, c, CONF_FCOMMENT)
+#define IS_EOF(conf,c)         is_keytype(conf, c, CONF_EOF)
+#define IS_ESC(conf,c)         is_keytype(conf, c, CONF_ESC)
+#define IS_NUMBER(conf,c)      is_keytype(conf, c, CONF_NUMBER)
+#define IS_WS(conf,c)          is_keytype(conf, c, CONF_WS)
+#define IS_ALNUM(conf,c)       is_keytype(conf, c, CONF_ALNUM)
+#define IS_ALNUM_PUNCT(conf,c) is_keytype(conf, c, CONF_ALNUM_PUNCT)
+#define IS_QUOTE(conf,c)       is_keytype(conf, c, CONF_QUOTE)
+#define IS_DQUOTE(conf,c)      is_keytype(conf, c, CONF_DQUOTE)
+
+EOF
+
+my $i;
+
+print "static const unsigned short CONF_type_default[128] = {";
+for ($i = 0; $i < 128; $i++) {
+    print "\n   " if ($i % 8) == 0;
+    printf " 0x%04X,", $V_def[$i];
+}
+print "\n};\n\n";
+
+print "static const unsigned short CONF_type_win32[128] = {";
+for ($i = 0; $i < 128; $i++) {
+    print "\n   " if ($i % 8) == 0;
+    printf " 0x%04X,", $V_w32[$i];
+}
+print "\n};\n";
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cpt_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cpt_err.c
new file mode 100644
index 000000000..4147b1cb9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cpt_err.c
@@ -0,0 +1,77 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/cryptoerr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA CRYPTO_str_functs[] = {
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_CMAC_CTX_NEW, 0), "CMAC_CTX_new"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_CRYPTO_DUP_EX_DATA, 0),
+     "CRYPTO_dup_ex_data"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_CRYPTO_FREE_EX_DATA, 0),
+     "CRYPTO_free_ex_data"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_CRYPTO_GET_EX_NEW_INDEX, 0),
+     "CRYPTO_get_ex_new_index"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_CRYPTO_MEMDUP, 0), "CRYPTO_memdup"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_CRYPTO_NEW_EX_DATA, 0),
+     "CRYPTO_new_ex_data"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_CRYPTO_OCB128_COPY_CTX, 0),
+     "CRYPTO_ocb128_copy_ctx"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_CRYPTO_OCB128_INIT, 0),
+     "CRYPTO_ocb128_init"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_CRYPTO_SET_EX_DATA, 0),
+     "CRYPTO_set_ex_data"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_FIPS_MODE_SET, 0), "FIPS_mode_set"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_GET_AND_LOCK, 0), "get_and_lock"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_OPENSSL_ATEXIT, 0), "OPENSSL_atexit"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_OPENSSL_BUF2HEXSTR, 0),
+     "OPENSSL_buf2hexstr"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_OPENSSL_FOPEN, 0), "openssl_fopen"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_OPENSSL_HEXSTR2BUF, 0),
+     "OPENSSL_hexstr2buf"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_OPENSSL_INIT_CRYPTO, 0),
+     "OPENSSL_init_crypto"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_OPENSSL_LH_NEW, 0), "OPENSSL_LH_new"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_OPENSSL_SK_DEEP_COPY, 0),
+     "OPENSSL_sk_deep_copy"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_OPENSSL_SK_DUP, 0), "OPENSSL_sk_dup"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_PKEY_HMAC_INIT, 0), "pkey_hmac_init"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_PKEY_POLY1305_INIT, 0),
+     "pkey_poly1305_init"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_PKEY_SIPHASH_INIT, 0),
+     "pkey_siphash_init"},
+    {ERR_PACK(ERR_LIB_CRYPTO, CRYPTO_F_SK_RESERVE, 0), "sk_reserve"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA CRYPTO_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_CRYPTO, 0, CRYPTO_R_FIPS_MODE_NOT_SUPPORTED),
+    "fips mode not supported"},
+    {ERR_PACK(ERR_LIB_CRYPTO, 0, CRYPTO_R_ILLEGAL_HEX_DIGIT),
+    "illegal hex digit"},
+    {ERR_PACK(ERR_LIB_CRYPTO, 0, CRYPTO_R_ODD_NUMBER_OF_DIGITS),
+    "odd number of digits"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_CRYPTO_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(CRYPTO_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(CRYPTO_str_functs);
+        ERR_load_strings_const(CRYPTO_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cryptlib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cryptlib.c
new file mode 100644
index 000000000..7b761a3ad
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cryptlib.c
@@ -0,0 +1,473 @@
+/*
+ * Copyright 1998-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include "internal/cryptlib_int.h"
+#include <openssl/safestack.h>
+
+#if     defined(__i386)   || defined(__i386__)   || defined(_M_IX86) || \
+        defined(__x86_64) || defined(__x86_64__) || \
+        defined(_M_AMD64) || defined(_M_X64)
+
+extern unsigned int OPENSSL_ia32cap_P[4];
+
+# if defined(OPENSSL_CPUID_OBJ) && !defined(OPENSSL_NO_ASM) && !defined(I386_ONLY)
+
+/*
+ * Purpose of these minimalistic and character-type-agnostic subroutines
+ * is to break dependency on MSVCRT (on Windows) and locale. This makes
+ * OPENSSL_cpuid_setup safe to use as "constructor". "Character-type-
+ * agnostic" means that they work with either wide or 8-bit characters,
+ * exploiting the fact that first 127 characters can be simply casted
+ * between the sets, while the rest would be simply rejected by ossl_is*
+ * subroutines.
+ */
+#  ifdef _WIN32
+typedef WCHAR variant_char;
+
+static variant_char *ossl_getenv(const char *name)
+{
+    /*
+     * Since we pull only one environment variable, it's simpler to
+     * to just ignore |name| and use equivalent wide-char L-literal.
+     * As well as to ignore excessively long values...
+     */
+    static WCHAR value[48];
+    DWORD len = GetEnvironmentVariableW(L"OPENSSL_ia32cap", value, 48);
+
+    return (len > 0 && len < 48) ? value : NULL;
+}
+#  else
+typedef char variant_char;
+#   define ossl_getenv getenv
+#  endif
+
+#  include "internal/ctype.h"
+
+static int todigit(variant_char c)
+{
+    if (ossl_isdigit(c))
+        return c - '0';
+    else if (ossl_isxdigit(c))
+        return ossl_tolower(c) - 'a' + 10;
+
+    /* return largest base value to make caller terminate the loop */
+    return 16;
+}
+
+static uint64_t ossl_strtouint64(const variant_char *str)
+{
+    uint64_t ret = 0;
+    unsigned int digit, base = 10;
+
+    if (*str == '0') {
+        base = 8, str++;
+        if (ossl_tolower(*str) == 'x')
+            base = 16, str++;
+    }
+
+    while((digit = todigit(*str++)) < base)
+        ret = ret * base + digit;
+
+    return ret;
+}
+
+static variant_char *ossl_strchr(const variant_char *str, char srch)
+{   variant_char c;
+
+    while((c = *str)) {
+        if (c == srch)
+	    return (variant_char *)str;
+        str++;
+    }
+
+    return NULL;
+}
+
+#  define OPENSSL_CPUID_SETUP
+typedef uint64_t IA32CAP;
+
+void OPENSSL_cpuid_setup(void)
+{
+    static int trigger = 0;
+    IA32CAP OPENSSL_ia32_cpuid(unsigned int *);
+    IA32CAP vec;
+    const variant_char *env;
+
+    if (trigger)
+        return;
+
+    trigger = 1;
+    if ((env = ossl_getenv("OPENSSL_ia32cap")) != NULL) {
+        int off = (env[0] == '~') ? 1 : 0;
+
+        vec = ossl_strtouint64(env + off);
+
+        if (off) {
+            IA32CAP mask = vec;
+            vec = OPENSSL_ia32_cpuid(OPENSSL_ia32cap_P) & ~mask;
+            if (mask & (1<<24)) {
+                /*
+                 * User disables FXSR bit, mask even other capabilities
+                 * that operate exclusively on XMM, so we don't have to
+                 * double-check all the time. We mask PCLMULQDQ, AMD XOP,
+                 * AES-NI and AVX. Formally speaking we don't have to
+                 * do it in x86_64 case, but we can safely assume that
+                 * x86_64 users won't actually flip this flag.
+                 */
+                vec &= ~((IA32CAP)(1<<1|1<<11|1<<25|1<<28) << 32);
+            }
+        } else if (env[0] == ':') {
+            vec = OPENSSL_ia32_cpuid(OPENSSL_ia32cap_P);
+        }
+
+        if ((env = ossl_strchr(env, ':')) != NULL) {
+            IA32CAP vecx;
+
+            env++;
+            off = (env[0] == '~') ? 1 : 0;
+            vecx = ossl_strtouint64(env + off);
+            if (off) {
+                OPENSSL_ia32cap_P[2] &= ~(unsigned int)vecx;
+                OPENSSL_ia32cap_P[3] &= ~(unsigned int)(vecx >> 32);
+            } else {
+                OPENSSL_ia32cap_P[2] = (unsigned int)vecx;
+                OPENSSL_ia32cap_P[3] = (unsigned int)(vecx >> 32);
+            }
+        } else {
+            OPENSSL_ia32cap_P[2] = 0;
+            OPENSSL_ia32cap_P[3] = 0;
+        }
+    } else {
+        vec = OPENSSL_ia32_cpuid(OPENSSL_ia32cap_P);
+    }
+
+    /*
+     * |(1<<10) sets a reserved bit to signal that variable
+     * was initialized already... This is to avoid interference
+     * with cpuid snippets in ELF .init segment.
+     */
+    OPENSSL_ia32cap_P[0] = (unsigned int)vec | (1 << 10);
+    OPENSSL_ia32cap_P[1] = (unsigned int)(vec >> 32);
+}
+# else
+unsigned int OPENSSL_ia32cap_P[4];
+# endif
+#endif
+#if !defined(OPENSSL_CPUID_SETUP) && !defined(OPENSSL_CPUID_OBJ)
+void OPENSSL_cpuid_setup(void)
+{
+}
+#endif
+
+#if defined(_WIN32)
+# include <tchar.h>
+# include <signal.h>
+# ifdef __WATCOMC__
+#  if defined(_UNICODE) || defined(__UNICODE__)
+#   define _vsntprintf _vsnwprintf
+#  else
+#   define _vsntprintf _vsnprintf
+#  endif
+# endif
+# ifdef _MSC_VER
+#  define alloca _alloca
+# endif
+
+# if defined(_WIN32_WINNT) && _WIN32_WINNT>=0x0333
+#  ifdef OPENSSL_SYS_WIN_CORE
+
+int OPENSSL_isservice(void)
+{
+    /* OneCore API cannot interact with GUI */
+    return 1;
+}
+#  else
+int OPENSSL_isservice(void)
+{
+    HWINSTA h;
+    DWORD len;
+    WCHAR *name;
+    static union {
+        void *p;
+        FARPROC f;
+    } _OPENSSL_isservice = {
+        NULL
+    };
+
+    if (_OPENSSL_isservice.p == NULL) {
+        HANDLE mod = GetModuleHandle(NULL);
+        FARPROC f = NULL;
+
+        if (mod != NULL)
+            f = GetProcAddress(mod, "_OPENSSL_isservice");
+        if (f == NULL)
+            _OPENSSL_isservice.p = (void *)-1;
+        else
+            _OPENSSL_isservice.f = f;
+    }
+
+    if (_OPENSSL_isservice.p != (void *)-1)
+        return (*_OPENSSL_isservice.f) ();
+
+    h = GetProcessWindowStation();
+    if (h == NULL)
+        return -1;
+
+    if (GetUserObjectInformationW(h, UOI_NAME, NULL, 0, &len) ||
+        GetLastError() != ERROR_INSUFFICIENT_BUFFER)
+        return -1;
+
+    if (len > 512)
+        return -1;              /* paranoia */
+    len++, len &= ~1;           /* paranoia */
+    name = (WCHAR *)alloca(len + sizeof(WCHAR));
+    if (!GetUserObjectInformationW(h, UOI_NAME, name, len, &len))
+        return -1;
+
+    len++, len &= ~1;           /* paranoia */
+    name[len / sizeof(WCHAR)] = L'\0'; /* paranoia */
+#   if 1
+    /*
+     * This doesn't cover "interactive" services [working with real
+     * WinSta0's] nor programs started non-interactively by Task Scheduler
+     * [those are working with SAWinSta].
+     */
+    if (wcsstr(name, L"Service-0x"))
+        return 1;
+#   else
+    /* This covers all non-interactive programs such as services. */
+    if (!wcsstr(name, L"WinSta0"))
+        return 1;
+#   endif
+    else
+        return 0;
+}
+#  endif
+# else
+int OPENSSL_isservice(void)
+{
+    return 0;
+}
+# endif
+
+void OPENSSL_showfatal(const char *fmta, ...)
+{
+    va_list ap;
+    TCHAR buf[256];
+    const TCHAR *fmt;
+    /*
+     * First check if it's a console application, in which case the
+     * error message would be printed to standard error.
+     * Windows CE does not have a concept of a console application,
+     * so we need to guard the check.
+     */
+# ifdef STD_ERROR_HANDLE
+    HANDLE h;
+
+    if ((h = GetStdHandle(STD_ERROR_HANDLE)) != NULL &&
+        GetFileType(h) != FILE_TYPE_UNKNOWN) {
+        /* must be console application */
+        int len;
+        DWORD out;
+
+        va_start(ap, fmta);
+        len = _vsnprintf((char *)buf, sizeof(buf), fmta, ap);
+        WriteFile(h, buf, len < 0 ? sizeof(buf) : (DWORD) len, &out, NULL);
+        va_end(ap);
+        return;
+    }
+# endif
+
+    if (sizeof(TCHAR) == sizeof(char))
+        fmt = (const TCHAR *)fmta;
+    else
+        do {
+            int keepgoing;
+            size_t len_0 = strlen(fmta) + 1, i;
+            WCHAR *fmtw;
+
+            fmtw = (WCHAR *)alloca(len_0 * sizeof(WCHAR));
+            if (fmtw == NULL) {
+                fmt = (const TCHAR *)L"no stack?";
+                break;
+            }
+            if (!MultiByteToWideChar(CP_ACP, 0, fmta, len_0, fmtw, len_0))
+                for (i = 0; i < len_0; i++)
+                    fmtw[i] = (WCHAR)fmta[i];
+            for (i = 0; i < len_0; i++) {
+                if (fmtw[i] == L'%')
+                    do {
+                        keepgoing = 0;
+                        switch (fmtw[i + 1]) {
+                        case L'0':
+                        case L'1':
+                        case L'2':
+                        case L'3':
+                        case L'4':
+                        case L'5':
+                        case L'6':
+                        case L'7':
+                        case L'8':
+                        case L'9':
+                        case L'.':
+                        case L'*':
+                        case L'-':
+                            i++;
+                            keepgoing = 1;
+                            break;
+                        case L's':
+                            fmtw[i + 1] = L'S';
+                            break;
+                        case L'S':
+                            fmtw[i + 1] = L's';
+                            break;
+                        case L'c':
+                            fmtw[i + 1] = L'C';
+                            break;
+                        case L'C':
+                            fmtw[i + 1] = L'c';
+                            break;
+                        }
+                    } while (keepgoing);
+            }
+            fmt = (const TCHAR *)fmtw;
+        } while (0);
+
+    va_start(ap, fmta);
+    _vsntprintf(buf, OSSL_NELEM(buf) - 1, fmt, ap);
+    buf[OSSL_NELEM(buf) - 1] = _T('\0');
+    va_end(ap);
+
+# if defined(_WIN32_WINNT) && _WIN32_WINNT>=0x0333
+#  ifdef OPENSSL_SYS_WIN_CORE
+    /* ONECORE is always NONGUI and NT >= 0x0601 */
+
+    /*
+    * TODO: (For non GUI and no std error cases)
+    * Add event logging feature here.
+    */
+
+#   if !defined(NDEBUG)
+        /*
+        * We are in a situation where we tried to report a critical
+        * error and this failed for some reason. As a last resort,
+        * in debug builds, send output to the debugger or any other
+        * tool like DebugView which can monitor the output.
+        */
+        OutputDebugString(buf);
+#   endif
+#  else
+    /* this -------------v--- guards NT-specific calls */
+    if (check_winnt() && OPENSSL_isservice() > 0) {
+        HANDLE hEventLog = RegisterEventSource(NULL, _T("OpenSSL"));
+
+        if (hEventLog != NULL) {
+            const TCHAR *pmsg = buf;
+
+            if (!ReportEvent(hEventLog, EVENTLOG_ERROR_TYPE, 0, 0, NULL,
+                             1, 0, &pmsg, NULL)) {
+#   if !defined(NDEBUG)
+                /*
+                 * We are in a situation where we tried to report a critical
+                 * error and this failed for some reason. As a last resort,
+                 * in debug builds, send output to the debugger or any other
+                 * tool like DebugView which can monitor the output.
+                 */
+                OutputDebugString(pmsg);
+#   endif
+            }
+
+            (void)DeregisterEventSource(hEventLog);
+        }
+    } else {
+        MessageBox(NULL, buf, _T("OpenSSL: FATAL"), MB_OK | MB_ICONERROR);
+    }
+#  endif
+# else
+    MessageBox(NULL, buf, _T("OpenSSL: FATAL"), MB_OK | MB_ICONERROR);
+# endif
+}
+#else
+void OPENSSL_showfatal(const char *fmta, ...)
+{
+#ifndef OPENSSL_NO_STDIO
+    va_list ap;
+
+    va_start(ap, fmta);
+    vfprintf(stderr, fmta, ap);
+    va_end(ap);
+#endif
+}
+
+int OPENSSL_isservice(void)
+{
+    return 0;
+}
+#endif
+
+void OPENSSL_die(const char *message, const char *file, int line)
+{
+    OPENSSL_showfatal("%s:%d: OpenSSL internal error: %s\n",
+                      file, line, message);
+#if !defined(_WIN32)
+    abort();
+#else
+    /*
+     * Win32 abort() customarily shows a dialog, but we just did that...
+     */
+# if !defined(_WIN32_WCE)
+    raise(SIGABRT);
+# endif
+    _exit(3);
+#endif
+}
+
+#if !defined(OPENSSL_CPUID_OBJ)
+/*
+ * The volatile is used to to ensure that the compiler generates code that reads
+ * all values from the array and doesn't try to optimize this away. The standard
+ * doesn't actually require this behavior if the original data pointed to is
+ * not volatile, but compilers do this in practice anyway.
+ *
+ * There are also assembler versions of this function.
+ */
+# undef CRYPTO_memcmp
+int CRYPTO_memcmp(const void * in_a, const void * in_b, size_t len)
+{
+    size_t i;
+    const volatile unsigned char *a = in_a;
+    const volatile unsigned char *b = in_b;
+    unsigned char x = 0;
+
+    for (i = 0; i < len; i++)
+        x |= a[i] ^ b[i];
+
+    return x;
+}
+
+/*
+ * For systems that don't provide an instruction counter register or equivalent.
+ */
+uint32_t OPENSSL_rdtsc(void)
+{
+    return 0;
+}
+
+size_t OPENSSL_instrument_bus(unsigned int *out, size_t cnt)
+{
+    return 0;
+}
+
+size_t OPENSSL_instrument_bus2(unsigned int *out, size_t cnt, size_t max)
+{
+    return 0;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ct/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/build.info
new file mode 100644
index 000000000..3ca0e3160
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/build.info
@@ -0,0 +1,3 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]= ct_b64.c ct_err.c ct_log.c ct_oct.c ct_policy.c \
+                         ct_prn.c ct_sct.c ct_sct_ctx.c ct_vfy.c ct_x509v3.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_b64.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_b64.c
new file mode 100644
index 000000000..109ffcdcf
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_b64.c
@@ -0,0 +1,168 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <limits.h>
+#include <string.h>
+
+#include <openssl/ct.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+
+#include "ct_locl.h"
+
+/*
+ * Decodes the base64 string |in| into |out|.
+ * A new string will be malloc'd and assigned to |out|. This will be owned by
+ * the caller. Do not provide a pre-allocated string in |out|.
+ */
+static int ct_base64_decode(const char *in, unsigned char **out)
+{
+    size_t inlen = strlen(in);
+    int outlen, i;
+    unsigned char *outbuf = NULL;
+
+    if (inlen == 0) {
+        *out = NULL;
+        return 0;
+    }
+
+    outlen = (inlen / 4) * 3;
+    outbuf = OPENSSL_malloc(outlen);
+    if (outbuf == NULL) {
+        CTerr(CT_F_CT_BASE64_DECODE, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    outlen = EVP_DecodeBlock(outbuf, (unsigned char *)in, inlen);
+    if (outlen < 0) {
+        CTerr(CT_F_CT_BASE64_DECODE, CT_R_BASE64_DECODE_ERROR);
+        goto err;
+    }
+
+    /* Subtract padding bytes from |outlen|.  Any more than 2 is malformed. */
+    i = 0;
+    while (in[--inlen] == '=') {
+        --outlen;
+        if (++i > 2)
+            goto err;
+    }
+
+    *out = outbuf;
+    return outlen;
+err:
+    OPENSSL_free(outbuf);
+    return -1;
+}
+
+SCT *SCT_new_from_base64(unsigned char version, const char *logid_base64,
+                         ct_log_entry_type_t entry_type, uint64_t timestamp,
+                         const char *extensions_base64,
+                         const char *signature_base64)
+{
+    SCT *sct = SCT_new();
+    unsigned char *dec = NULL;
+    const unsigned char* p = NULL;
+    int declen;
+
+    if (sct == NULL) {
+        CTerr(CT_F_SCT_NEW_FROM_BASE64, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    /*
+     * RFC6962 section 4.1 says we "MUST NOT expect this to be 0", but we
+     * can only construct SCT versions that have been defined.
+     */
+    if (!SCT_set_version(sct, version)) {
+        CTerr(CT_F_SCT_NEW_FROM_BASE64, CT_R_SCT_UNSUPPORTED_VERSION);
+        goto err;
+    }
+
+    declen = ct_base64_decode(logid_base64, &dec);
+    if (declen < 0) {
+        CTerr(CT_F_SCT_NEW_FROM_BASE64, X509_R_BASE64_DECODE_ERROR);
+        goto err;
+    }
+    if (!SCT_set0_log_id(sct, dec, declen))
+        goto err;
+    dec = NULL;
+
+    declen = ct_base64_decode(extensions_base64, &dec);
+    if (declen < 0) {
+        CTerr(CT_F_SCT_NEW_FROM_BASE64, X509_R_BASE64_DECODE_ERROR);
+        goto err;
+    }
+    SCT_set0_extensions(sct, dec, declen);
+    dec = NULL;
+
+    declen = ct_base64_decode(signature_base64, &dec);
+    if (declen < 0) {
+        CTerr(CT_F_SCT_NEW_FROM_BASE64, X509_R_BASE64_DECODE_ERROR);
+        goto err;
+    }
+
+    p = dec;
+    if (o2i_SCT_signature(sct, &p, declen) <= 0)
+        goto err;
+    OPENSSL_free(dec);
+    dec = NULL;
+
+    SCT_set_timestamp(sct, timestamp);
+
+    if (!SCT_set_log_entry_type(sct, entry_type))
+        goto err;
+
+    return sct;
+
+ err:
+    OPENSSL_free(dec);
+    SCT_free(sct);
+    return NULL;
+}
+
+/*
+ * Allocate, build and returns a new |ct_log| from input |pkey_base64|
+ * It returns 1 on success,
+ * 0 on decoding failure, or invalid parameter if any
+ * -1 on internal (malloc) failure
+ */
+int CTLOG_new_from_base64(CTLOG **ct_log, const char *pkey_base64, const char *name)
+{
+    unsigned char *pkey_der = NULL;
+    int pkey_der_len;
+    const unsigned char *p;
+    EVP_PKEY *pkey = NULL;
+
+    if (ct_log == NULL) {
+        CTerr(CT_F_CTLOG_NEW_FROM_BASE64, ERR_R_PASSED_INVALID_ARGUMENT);
+        return 0;
+    }
+
+    pkey_der_len = ct_base64_decode(pkey_base64, &pkey_der);
+    if (pkey_der_len < 0) {
+        CTerr(CT_F_CTLOG_NEW_FROM_BASE64, CT_R_LOG_CONF_INVALID_KEY);
+        return 0;
+    }
+
+    p = pkey_der;
+    pkey = d2i_PUBKEY(NULL, &p, pkey_der_len);
+    OPENSSL_free(pkey_der);
+    if (pkey == NULL) {
+        CTerr(CT_F_CTLOG_NEW_FROM_BASE64, CT_R_LOG_CONF_INVALID_KEY);
+        return 0;
+    }
+
+    *ct_log = CTLOG_new(pkey, name);
+    if (*ct_log == NULL) {
+        EVP_PKEY_free(pkey);
+        return 0;
+    }
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_err.c
new file mode 100644
index 000000000..c0c62fee6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_err.c
@@ -0,0 +1,96 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/cterr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA CT_str_functs[] = {
+    {ERR_PACK(ERR_LIB_CT, CT_F_CTLOG_NEW, 0), "CTLOG_new"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_CTLOG_NEW_FROM_BASE64, 0),
+     "CTLOG_new_from_base64"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_CTLOG_NEW_FROM_CONF, 0), "ctlog_new_from_conf"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_CTLOG_STORE_LOAD_CTX_NEW, 0),
+     "ctlog_store_load_ctx_new"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_CTLOG_STORE_LOAD_FILE, 0),
+     "CTLOG_STORE_load_file"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_CTLOG_STORE_LOAD_LOG, 0),
+     "ctlog_store_load_log"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_CTLOG_STORE_NEW, 0), "CTLOG_STORE_new"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_CT_BASE64_DECODE, 0), "ct_base64_decode"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_CT_POLICY_EVAL_CTX_NEW, 0),
+     "CT_POLICY_EVAL_CTX_new"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_CT_V1_LOG_ID_FROM_PKEY, 0),
+     "ct_v1_log_id_from_pkey"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_I2O_SCT, 0), "i2o_SCT"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_I2O_SCT_LIST, 0), "i2o_SCT_LIST"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_I2O_SCT_SIGNATURE, 0), "i2o_SCT_signature"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_O2I_SCT, 0), "o2i_SCT"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_O2I_SCT_LIST, 0), "o2i_SCT_LIST"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_O2I_SCT_SIGNATURE, 0), "o2i_SCT_signature"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_SCT_CTX_NEW, 0), "SCT_CTX_new"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_SCT_CTX_VERIFY, 0), "SCT_CTX_verify"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_SCT_NEW, 0), "SCT_new"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_SCT_NEW_FROM_BASE64, 0), "SCT_new_from_base64"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_SCT_SET0_LOG_ID, 0), "SCT_set0_log_id"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_SCT_SET1_EXTENSIONS, 0), "SCT_set1_extensions"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_SCT_SET1_LOG_ID, 0), "SCT_set1_log_id"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_SCT_SET1_SIGNATURE, 0), "SCT_set1_signature"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_SCT_SET_LOG_ENTRY_TYPE, 0),
+     "SCT_set_log_entry_type"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_SCT_SET_SIGNATURE_NID, 0),
+     "SCT_set_signature_nid"},
+    {ERR_PACK(ERR_LIB_CT, CT_F_SCT_SET_VERSION, 0), "SCT_set_version"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA CT_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_BASE64_DECODE_ERROR), "base64 decode error"},
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_INVALID_LOG_ID_LENGTH),
+    "invalid log id length"},
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_LOG_CONF_INVALID), "log conf invalid"},
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_LOG_CONF_INVALID_KEY),
+    "log conf invalid key"},
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_LOG_CONF_MISSING_DESCRIPTION),
+    "log conf missing description"},
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_LOG_CONF_MISSING_KEY),
+    "log conf missing key"},
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_LOG_KEY_INVALID), "log key invalid"},
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_SCT_FUTURE_TIMESTAMP),
+    "sct future timestamp"},
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_SCT_INVALID), "sct invalid"},
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_SCT_INVALID_SIGNATURE),
+    "sct invalid signature"},
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_SCT_LIST_INVALID), "sct list invalid"},
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_SCT_LOG_ID_MISMATCH), "sct log id mismatch"},
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_SCT_NOT_SET), "sct not set"},
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_SCT_UNSUPPORTED_VERSION),
+    "sct unsupported version"},
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_UNRECOGNIZED_SIGNATURE_NID),
+    "unrecognized signature nid"},
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_UNSUPPORTED_ENTRY_TYPE),
+    "unsupported entry type"},
+    {ERR_PACK(ERR_LIB_CT, 0, CT_R_UNSUPPORTED_VERSION), "unsupported version"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_CT_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(CT_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(CT_str_functs);
+        ERR_load_strings_const(CT_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_locl.h
new file mode 100644
index 000000000..9f983c91b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_locl.h
@@ -0,0 +1,216 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stddef.h>
+#include <openssl/ct.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/safestack.h>
+
+/*
+ * From RFC6962: opaque SerializedSCT<1..2^16-1>; struct { SerializedSCT
+ * sct_list <1..2^16-1>; } SignedCertificateTimestampList;
+ */
+# define MAX_SCT_SIZE            65535
+# define MAX_SCT_LIST_SIZE       MAX_SCT_SIZE
+
+/*
+ * Macros to read and write integers in network-byte order.
+ */
+
+#define n2s(c,s)        ((s=(((unsigned int)((c)[0]))<< 8)| \
+                            (((unsigned int)((c)[1]))    )),c+=2)
+
+#define s2n(s,c)        ((c[0]=(unsigned char)(((s)>> 8)&0xff), \
+                          c[1]=(unsigned char)(((s)    )&0xff)),c+=2)
+
+#define l2n3(l,c)       ((c[0]=(unsigned char)(((l)>>16)&0xff), \
+                          c[1]=(unsigned char)(((l)>> 8)&0xff), \
+                          c[2]=(unsigned char)(((l)    )&0xff)),c+=3)
+
+#define n2l8(c,l)       (l =((uint64_t)(*((c)++)))<<56, \
+                         l|=((uint64_t)(*((c)++)))<<48, \
+                         l|=((uint64_t)(*((c)++)))<<40, \
+                         l|=((uint64_t)(*((c)++)))<<32, \
+                         l|=((uint64_t)(*((c)++)))<<24, \
+                         l|=((uint64_t)(*((c)++)))<<16, \
+                         l|=((uint64_t)(*((c)++)))<< 8, \
+                         l|=((uint64_t)(*((c)++))))
+
+#define l2n8(l,c)       (*((c)++)=(unsigned char)(((l)>>56)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>48)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>40)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>32)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>24)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>16)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>> 8)&0xff), \
+                         *((c)++)=(unsigned char)(((l)    )&0xff))
+
+/* Signed Certificate Timestamp */
+struct sct_st {
+    sct_version_t version;
+    /* If version is not SCT_VERSION_V1, this contains the encoded SCT */
+    unsigned char *sct;
+    size_t sct_len;
+    /* If version is SCT_VERSION_V1, fields below contain components of the SCT */
+    unsigned char *log_id;
+    size_t log_id_len;
+    /*
+    * Note, we cannot distinguish between an unset timestamp, and one
+    * that is set to 0.  However since CT didn't exist in 1970, no real
+    * SCT should ever be set as such.
+    */
+    uint64_t timestamp;
+    unsigned char *ext;
+    size_t ext_len;
+    unsigned char hash_alg;
+    unsigned char sig_alg;
+    unsigned char *sig;
+    size_t sig_len;
+    /* Log entry type */
+    ct_log_entry_type_t entry_type;
+    /* Where this SCT was found, e.g. certificate, OCSP response, etc. */
+    sct_source_t source;
+    /* The result of the last attempt to validate this SCT. */
+    sct_validation_status_t validation_status;
+};
+
+/* Miscellaneous data that is useful when verifying an SCT  */
+struct sct_ctx_st {
+    /* Public key */
+    EVP_PKEY *pkey;
+    /* Hash of public key */
+    unsigned char *pkeyhash;
+    size_t pkeyhashlen;
+    /* For pre-certificate: issuer public key hash */
+    unsigned char *ihash;
+    size_t ihashlen;
+    /* certificate encoding */
+    unsigned char *certder;
+    size_t certderlen;
+    /* pre-certificate encoding */
+    unsigned char *preder;
+    size_t prederlen;
+    /* milliseconds since epoch (to check that the SCT isn't from the future) */
+    uint64_t epoch_time_in_ms;
+};
+
+/* Context when evaluating whether a Certificate Transparency policy is met */
+struct ct_policy_eval_ctx_st {
+    X509 *cert;
+    X509 *issuer;
+    CTLOG_STORE *log_store;
+    /* milliseconds since epoch (to check that SCTs aren't from the future) */
+    uint64_t epoch_time_in_ms;
+};
+
+/*
+ * Creates a new context for verifying an SCT.
+ */
+SCT_CTX *SCT_CTX_new(void);
+/*
+ * Deletes an SCT verification context.
+ */
+void SCT_CTX_free(SCT_CTX *sctx);
+
+/*
+ * Sets the certificate that the SCT was created for.
+ * If *cert does not have a poison extension, presigner must be NULL.
+ * If *cert does not have a poison extension, it may have a single SCT
+ * (NID_ct_precert_scts) extension.
+ * If either *cert or *presigner have an AKID (NID_authority_key_identifier)
+ * extension, both must have one.
+ * Returns 1 on success, 0 on failure.
+ */
+__owur int SCT_CTX_set1_cert(SCT_CTX *sctx, X509 *cert, X509 *presigner);
+
+/*
+ * Sets the issuer of the certificate that the SCT was created for.
+ * This is just a convenience method to save extracting the public key and
+ * calling SCT_CTX_set1_issuer_pubkey().
+ * Issuer must not be NULL.
+ * Returns 1 on success, 0 on failure.
+ */
+__owur int SCT_CTX_set1_issuer(SCT_CTX *sctx, const X509 *issuer);
+
+/*
+ * Sets the public key of the issuer of the certificate that the SCT was created
+ * for.
+ * The public key must not be NULL.
+ * Returns 1 on success, 0 on failure.
+ */
+__owur int SCT_CTX_set1_issuer_pubkey(SCT_CTX *sctx, X509_PUBKEY *pubkey);
+
+/*
+ * Sets the public key of the CT log that the SCT is from.
+ * Returns 1 on success, 0 on failure.
+ */
+__owur int SCT_CTX_set1_pubkey(SCT_CTX *sctx, X509_PUBKEY *pubkey);
+
+/*
+ * Sets the time to evaluate the SCT against, in milliseconds since the Unix
+ * epoch. If the SCT's timestamp is after this time, it will be interpreted as
+ * having been issued in the future. RFC6962 states that "TLS clients MUST
+ * reject SCTs whose timestamp is in the future", so an SCT will not validate
+ * in this case.
+ */
+void SCT_CTX_set_time(SCT_CTX *sctx, uint64_t time_in_ms);
+
+/*
+ * Verifies an SCT with the given context.
+ * Returns 1 if the SCT verifies successfully; any other value indicates
+ * failure. See EVP_DigestVerifyFinal() for the meaning of those values.
+ */
+__owur int SCT_CTX_verify(const SCT_CTX *sctx, const SCT *sct);
+
+/*
+ * Does this SCT have the minimum fields populated to be usable?
+ * Returns 1 if so, 0 otherwise.
+ */
+__owur int SCT_is_complete(const SCT *sct);
+
+/*
+ * Does this SCT have the signature-related fields populated?
+ * Returns 1 if so, 0 otherwise.
+ * This checks that the signature and hash algorithms are set to supported
+ * values and that the signature field is set.
+ */
+__owur int SCT_signature_is_complete(const SCT *sct);
+
+/*
+ * TODO(RJPercival): Create an SCT_signature struct and make i2o_SCT_signature
+ * and o2i_SCT_signature conform to the i2d/d2i conventions.
+ */
+
+/*
+* Serialize (to TLS format) an |sct| signature and write it to |out|.
+* If |out| is null, no signature will be output but the length will be returned.
+* If |out| points to a null pointer, a string will be allocated to hold the
+* TLS-format signature. It is the responsibility of the caller to free it.
+* If |out| points to an allocated string, the signature will be written to it.
+* The length of the signature in TLS format will be returned.
+*/
+__owur int i2o_SCT_signature(const SCT *sct, unsigned char **out);
+
+/*
+* Parses an SCT signature in TLS format and populates the |sct| with it.
+* |in| should be a pointer to a string containing the TLS-format signature.
+* |in| will be advanced to the end of the signature if parsing succeeds.
+* |len| should be the length of the signature in |in|.
+* Returns the number of bytes parsed, or a negative integer if an error occurs.
+* If an error occurs, the SCT's signature NID may be updated whilst the
+* signature field itself remains unset.
+*/
+__owur int o2i_SCT_signature(SCT *sct, const unsigned char **in, size_t len);
+
+/*
+ * Handlers for Certificate Transparency X509v3/OCSP extensions
+ */
+extern const X509V3_EXT_METHOD v3_ct_scts[3];
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_log.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_log.c
new file mode 100644
index 000000000..c1bca3e14
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_log.c
@@ -0,0 +1,306 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdlib.h>
+#include <string.h>
+
+#include <openssl/conf.h>
+#include <openssl/ct.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/safestack.h>
+
+#include "internal/cryptlib.h"
+
+/*
+ * Information about a CT log server.
+ */
+struct ctlog_st {
+    char *name;
+    uint8_t log_id[CT_V1_HASHLEN];
+    EVP_PKEY *public_key;
+};
+
+/*
+ * A store for multiple CTLOG instances.
+ * It takes ownership of any CTLOG instances added to it.
+ */
+struct ctlog_store_st {
+    STACK_OF(CTLOG) *logs;
+};
+
+/* The context when loading a CT log list from a CONF file. */
+typedef struct ctlog_store_load_ctx_st {
+    CTLOG_STORE *log_store;
+    CONF *conf;
+    size_t invalid_log_entries;
+} CTLOG_STORE_LOAD_CTX;
+
+/*
+ * Creates an empty context for loading a CT log store.
+ * It should be populated before use.
+ */
+static CTLOG_STORE_LOAD_CTX *ctlog_store_load_ctx_new(void);
+
+/*
+ * Deletes a CT log store load context.
+ * Does not delete any of the fields.
+ */
+static void ctlog_store_load_ctx_free(CTLOG_STORE_LOAD_CTX* ctx);
+
+static CTLOG_STORE_LOAD_CTX *ctlog_store_load_ctx_new(void)
+{
+    CTLOG_STORE_LOAD_CTX *ctx = OPENSSL_zalloc(sizeof(*ctx));
+
+    if (ctx == NULL)
+        CTerr(CT_F_CTLOG_STORE_LOAD_CTX_NEW, ERR_R_MALLOC_FAILURE);
+
+    return ctx;
+}
+
+static void ctlog_store_load_ctx_free(CTLOG_STORE_LOAD_CTX* ctx)
+{
+    OPENSSL_free(ctx);
+}
+
+/* Converts a log's public key into a SHA256 log ID */
+static int ct_v1_log_id_from_pkey(EVP_PKEY *pkey,
+                                  unsigned char log_id[CT_V1_HASHLEN])
+{
+    int ret = 0;
+    unsigned char *pkey_der = NULL;
+    int pkey_der_len = i2d_PUBKEY(pkey, &pkey_der);
+
+    if (pkey_der_len <= 0) {
+        CTerr(CT_F_CT_V1_LOG_ID_FROM_PKEY, CT_R_LOG_KEY_INVALID);
+        goto err;
+    }
+
+    SHA256(pkey_der, pkey_der_len, log_id);
+    ret = 1;
+err:
+    OPENSSL_free(pkey_der);
+    return ret;
+}
+
+CTLOG_STORE *CTLOG_STORE_new(void)
+{
+    CTLOG_STORE *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        CTerr(CT_F_CTLOG_STORE_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ret->logs = sk_CTLOG_new_null();
+    if (ret->logs == NULL)
+        goto err;
+
+    return ret;
+err:
+    OPENSSL_free(ret);
+    return NULL;
+}
+
+void CTLOG_STORE_free(CTLOG_STORE *store)
+{
+    if (store != NULL) {
+        sk_CTLOG_pop_free(store->logs, CTLOG_free);
+        OPENSSL_free(store);
+    }
+}
+
+static int ctlog_new_from_conf(CTLOG **ct_log, const CONF *conf, const char *section)
+{
+    const char *description = NCONF_get_string(conf, section, "description");
+    char *pkey_base64;
+
+    if (description == NULL) {
+        CTerr(CT_F_CTLOG_NEW_FROM_CONF, CT_R_LOG_CONF_MISSING_DESCRIPTION);
+        return 0;
+    }
+
+    pkey_base64 = NCONF_get_string(conf, section, "key");
+    if (pkey_base64 == NULL) {
+        CTerr(CT_F_CTLOG_NEW_FROM_CONF, CT_R_LOG_CONF_MISSING_KEY);
+        return 0;
+    }
+
+    return CTLOG_new_from_base64(ct_log, pkey_base64, description);
+}
+
+int CTLOG_STORE_load_default_file(CTLOG_STORE *store)
+{
+    const char *fpath = ossl_safe_getenv(CTLOG_FILE_EVP);
+
+    if (fpath == NULL)
+      fpath = CTLOG_FILE;
+
+    return CTLOG_STORE_load_file(store, fpath);
+}
+
+/*
+ * Called by CONF_parse_list, which stops if this returns <= 0,
+ * Otherwise, one bad log entry would stop loading of any of
+ * the following log entries.
+ * It may stop parsing and returns -1 on any internal (malloc) error.
+ */
+static int ctlog_store_load_log(const char *log_name, int log_name_len,
+                                void *arg)
+{
+    CTLOG_STORE_LOAD_CTX *load_ctx = arg;
+    CTLOG *ct_log = NULL;
+    /* log_name may not be null-terminated, so fix that before using it */
+    char *tmp;
+    int ret = 0;
+
+    /* log_name will be NULL for empty list entries */
+    if (log_name == NULL)
+        return 1;
+
+    tmp = OPENSSL_strndup(log_name, log_name_len);
+    if (tmp == NULL)
+        goto mem_err;
+
+    ret = ctlog_new_from_conf(&ct_log, load_ctx->conf, tmp);
+    OPENSSL_free(tmp);
+
+    if (ret < 0) {
+        /* Propagate any internal error */
+        return ret;
+    }
+    if (ret == 0) {
+        /* If we can't load this log, record that fact and skip it */
+        ++load_ctx->invalid_log_entries;
+        return 1;
+    }
+
+    if (!sk_CTLOG_push(load_ctx->log_store->logs, ct_log)) {
+        goto mem_err;
+    }
+    return 1;
+
+mem_err:
+    CTLOG_free(ct_log);
+    CTerr(CT_F_CTLOG_STORE_LOAD_LOG, ERR_R_MALLOC_FAILURE);
+    return -1;
+}
+
+int CTLOG_STORE_load_file(CTLOG_STORE *store, const char *file)
+{
+    int ret = 0;
+    char *enabled_logs;
+    CTLOG_STORE_LOAD_CTX* load_ctx = ctlog_store_load_ctx_new();
+
+    if (load_ctx == NULL)
+        return 0;
+    load_ctx->log_store = store;
+    load_ctx->conf = NCONF_new(NULL);
+    if (load_ctx->conf == NULL)
+        goto end;
+
+    if (NCONF_load(load_ctx->conf, file, NULL) <= 0) {
+        CTerr(CT_F_CTLOG_STORE_LOAD_FILE, CT_R_LOG_CONF_INVALID);
+        goto end;
+    }
+
+    enabled_logs = NCONF_get_string(load_ctx->conf, NULL, "enabled_logs");
+    if (enabled_logs == NULL) {
+        CTerr(CT_F_CTLOG_STORE_LOAD_FILE, CT_R_LOG_CONF_INVALID);
+        goto end;
+    }
+
+    if (!CONF_parse_list(enabled_logs, ',', 1, ctlog_store_load_log, load_ctx) ||
+        load_ctx->invalid_log_entries > 0) {
+        CTerr(CT_F_CTLOG_STORE_LOAD_FILE, CT_R_LOG_CONF_INVALID);
+        goto end;
+    }
+
+    ret = 1;
+end:
+    NCONF_free(load_ctx->conf);
+    ctlog_store_load_ctx_free(load_ctx);
+    return ret;
+}
+
+/*
+ * Initialize a new CTLOG object.
+ * Takes ownership of the public key.
+ * Copies the name.
+ */
+CTLOG *CTLOG_new(EVP_PKEY *public_key, const char *name)
+{
+    CTLOG *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        CTerr(CT_F_CTLOG_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ret->name = OPENSSL_strdup(name);
+    if (ret->name == NULL) {
+        CTerr(CT_F_CTLOG_NEW, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (ct_v1_log_id_from_pkey(public_key, ret->log_id) != 1)
+        goto err;
+
+    ret->public_key = public_key;
+    return ret;
+err:
+    CTLOG_free(ret);
+    return NULL;
+}
+
+/* Frees CT log and associated structures */
+void CTLOG_free(CTLOG *log)
+{
+    if (log != NULL) {
+        OPENSSL_free(log->name);
+        EVP_PKEY_free(log->public_key);
+        OPENSSL_free(log);
+    }
+}
+
+const char *CTLOG_get0_name(const CTLOG *log)
+{
+    return log->name;
+}
+
+void CTLOG_get0_log_id(const CTLOG *log, const uint8_t **log_id,
+                       size_t *log_id_len)
+{
+    *log_id = log->log_id;
+    *log_id_len = CT_V1_HASHLEN;
+}
+
+EVP_PKEY *CTLOG_get0_public_key(const CTLOG *log)
+{
+    return log->public_key;
+}
+
+/*
+ * Given a log ID, finds the matching log.
+ * Returns NULL if no match found.
+ */
+const CTLOG *CTLOG_STORE_get0_log_by_id(const CTLOG_STORE *store,
+                                        const uint8_t *log_id,
+                                        size_t log_id_len)
+{
+    int i;
+
+    for (i = 0; i < sk_CTLOG_num(store->logs); ++i) {
+        const CTLOG *log = sk_CTLOG_value(store->logs, i);
+        if (memcmp(log->log_id, log_id, log_id_len) == 0)
+            return log;
+    }
+
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_oct.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_oct.c
new file mode 100644
index 000000000..0dd691c0f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_oct.c
@@ -0,0 +1,407 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifdef OPENSSL_NO_CT
+# error "CT is disabled"
+#endif
+
+#include <limits.h>
+#include <string.h>
+
+#include <openssl/asn1.h>
+#include <openssl/buffer.h>
+#include <openssl/ct.h>
+#include <openssl/err.h>
+
+#include "ct_locl.h"
+
+int o2i_SCT_signature(SCT *sct, const unsigned char **in, size_t len)
+{
+    size_t siglen;
+    size_t len_remaining = len;
+    const unsigned char *p;
+
+    if (sct->version != SCT_VERSION_V1) {
+        CTerr(CT_F_O2I_SCT_SIGNATURE, CT_R_UNSUPPORTED_VERSION);
+        return -1;
+    }
+    /*
+     * digitally-signed struct header: (1 byte) Hash algorithm (1 byte)
+     * Signature algorithm (2 bytes + ?) Signature
+     *
+     * This explicitly rejects empty signatures: they're invalid for
+     * all supported algorithms.
+     */
+    if (len <= 4) {
+        CTerr(CT_F_O2I_SCT_SIGNATURE, CT_R_SCT_INVALID_SIGNATURE);
+        return -1;
+    }
+
+    p = *in;
+    /* Get hash and signature algorithm */
+    sct->hash_alg = *p++;
+    sct->sig_alg = *p++;
+    if (SCT_get_signature_nid(sct) == NID_undef) {
+        CTerr(CT_F_O2I_SCT_SIGNATURE, CT_R_SCT_INVALID_SIGNATURE);
+        return -1;
+    }
+    /* Retrieve signature and check it is consistent with the buffer length */
+    n2s(p, siglen);
+    len_remaining -= (p - *in);
+    if (siglen > len_remaining) {
+        CTerr(CT_F_O2I_SCT_SIGNATURE, CT_R_SCT_INVALID_SIGNATURE);
+        return -1;
+    }
+
+    if (SCT_set1_signature(sct, p, siglen) != 1)
+        return -1;
+    len_remaining -= siglen;
+    *in = p + siglen;
+
+    return len - len_remaining;
+}
+
+SCT *o2i_SCT(SCT **psct, const unsigned char **in, size_t len)
+{
+    SCT *sct = NULL;
+    const unsigned char *p;
+
+    if (len == 0 || len > MAX_SCT_SIZE) {
+        CTerr(CT_F_O2I_SCT, CT_R_SCT_INVALID);
+        goto err;
+    }
+
+    if ((sct = SCT_new()) == NULL)
+        goto err;
+
+    p = *in;
+
+    sct->version = *p;
+    if (sct->version == SCT_VERSION_V1) {
+        int sig_len;
+        size_t len2;
+        /*-
+         * Fixed-length header:
+         *   struct {
+         *     Version sct_version;     (1 byte)
+         *     log_id id;               (32 bytes)
+         *     uint64 timestamp;        (8 bytes)
+         *     CtExtensions extensions; (2 bytes + ?)
+         *   }
+         */
+        if (len < 43) {
+            CTerr(CT_F_O2I_SCT, CT_R_SCT_INVALID);
+            goto err;
+        }
+        len -= 43;
+        p++;
+        sct->log_id = BUF_memdup(p, CT_V1_HASHLEN);
+        if (sct->log_id == NULL)
+            goto err;
+        sct->log_id_len = CT_V1_HASHLEN;
+        p += CT_V1_HASHLEN;
+
+        n2l8(p, sct->timestamp);
+
+        n2s(p, len2);
+        if (len < len2) {
+            CTerr(CT_F_O2I_SCT, CT_R_SCT_INVALID);
+            goto err;
+        }
+        if (len2 > 0) {
+            sct->ext = BUF_memdup(p, len2);
+            if (sct->ext == NULL)
+                goto err;
+        }
+        sct->ext_len = len2;
+        p += len2;
+        len -= len2;
+
+        sig_len = o2i_SCT_signature(sct, &p, len);
+        if (sig_len <= 0) {
+            CTerr(CT_F_O2I_SCT, CT_R_SCT_INVALID);
+            goto err;
+        }
+        len -= sig_len;
+        *in = p + len;
+    } else {
+        /* If not V1 just cache encoding */
+        sct->sct = BUF_memdup(p, len);
+        if (sct->sct == NULL)
+            goto err;
+        sct->sct_len = len;
+        *in = p + len;
+    }
+
+    if (psct != NULL) {
+        SCT_free(*psct);
+        *psct = sct;
+    }
+
+    return sct;
+err:
+    SCT_free(sct);
+    return NULL;
+}
+
+int i2o_SCT_signature(const SCT *sct, unsigned char **out)
+{
+    size_t len;
+    unsigned char *p = NULL, *pstart = NULL;
+
+    if (!SCT_signature_is_complete(sct)) {
+        CTerr(CT_F_I2O_SCT_SIGNATURE, CT_R_SCT_INVALID_SIGNATURE);
+        goto err;
+    }
+
+    if (sct->version != SCT_VERSION_V1) {
+        CTerr(CT_F_I2O_SCT_SIGNATURE, CT_R_UNSUPPORTED_VERSION);
+        goto err;
+    }
+
+    /*
+    * (1 byte) Hash algorithm
+    * (1 byte) Signature algorithm
+    * (2 bytes + ?) Signature
+    */
+    len = 4 + sct->sig_len;
+
+    if (out != NULL) {
+        if (*out != NULL) {
+            p = *out;
+            *out += len;
+        } else {
+            pstart = p = OPENSSL_malloc(len);
+            if (p == NULL) {
+                CTerr(CT_F_I2O_SCT_SIGNATURE, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            *out = p;
+        }
+
+        *p++ = sct->hash_alg;
+        *p++ = sct->sig_alg;
+        s2n(sct->sig_len, p);
+        memcpy(p, sct->sig, sct->sig_len);
+    }
+
+    return len;
+err:
+    OPENSSL_free(pstart);
+    return -1;
+}
+
+int i2o_SCT(const SCT *sct, unsigned char **out)
+{
+    size_t len;
+    unsigned char *p = NULL, *pstart = NULL;
+
+    if (!SCT_is_complete(sct)) {
+        CTerr(CT_F_I2O_SCT, CT_R_SCT_NOT_SET);
+        goto err;
+    }
+    /*
+     * Fixed-length header: struct { (1 byte) Version sct_version; (32 bytes)
+     * log_id id; (8 bytes) uint64 timestamp; (2 bytes + ?) CtExtensions
+     * extensions; (1 byte) Hash algorithm (1 byte) Signature algorithm (2
+     * bytes + ?) Signature
+     */
+    if (sct->version == SCT_VERSION_V1)
+        len = 43 + sct->ext_len + 4 + sct->sig_len;
+    else
+        len = sct->sct_len;
+
+    if (out == NULL)
+        return len;
+
+    if (*out != NULL) {
+        p = *out;
+        *out += len;
+    } else {
+        pstart = p = OPENSSL_malloc(len);
+        if (p == NULL) {
+            CTerr(CT_F_I2O_SCT, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        *out = p;
+    }
+
+    if (sct->version == SCT_VERSION_V1) {
+        *p++ = sct->version;
+        memcpy(p, sct->log_id, CT_V1_HASHLEN);
+        p += CT_V1_HASHLEN;
+        l2n8(sct->timestamp, p);
+        s2n(sct->ext_len, p);
+        if (sct->ext_len > 0) {
+            memcpy(p, sct->ext, sct->ext_len);
+            p += sct->ext_len;
+        }
+        if (i2o_SCT_signature(sct, &p) <= 0)
+            goto err;
+    } else {
+        memcpy(p, sct->sct, len);
+    }
+
+    return len;
+err:
+    OPENSSL_free(pstart);
+    return -1;
+}
+
+STACK_OF(SCT) *o2i_SCT_LIST(STACK_OF(SCT) **a, const unsigned char **pp,
+                            size_t len)
+{
+    STACK_OF(SCT) *sk = NULL;
+    size_t list_len, sct_len;
+
+    if (len < 2 || len > MAX_SCT_LIST_SIZE) {
+        CTerr(CT_F_O2I_SCT_LIST, CT_R_SCT_LIST_INVALID);
+        return NULL;
+    }
+
+    n2s(*pp, list_len);
+    if (list_len != len - 2) {
+        CTerr(CT_F_O2I_SCT_LIST, CT_R_SCT_LIST_INVALID);
+        return NULL;
+    }
+
+    if (a == NULL || *a == NULL) {
+        sk = sk_SCT_new_null();
+        if (sk == NULL)
+            return NULL;
+    } else {
+        SCT *sct;
+
+        /* Use the given stack, but empty it first. */
+        sk = *a;
+        while ((sct = sk_SCT_pop(sk)) != NULL)
+            SCT_free(sct);
+    }
+
+    while (list_len > 0) {
+        SCT *sct;
+
+        if (list_len < 2) {
+            CTerr(CT_F_O2I_SCT_LIST, CT_R_SCT_LIST_INVALID);
+            goto err;
+        }
+        n2s(*pp, sct_len);
+        list_len -= 2;
+
+        if (sct_len == 0 || sct_len > list_len) {
+            CTerr(CT_F_O2I_SCT_LIST, CT_R_SCT_LIST_INVALID);
+            goto err;
+        }
+        list_len -= sct_len;
+
+        if ((sct = o2i_SCT(NULL, pp, sct_len)) == NULL)
+            goto err;
+        if (!sk_SCT_push(sk, sct)) {
+            SCT_free(sct);
+            goto err;
+        }
+    }
+
+    if (a != NULL && *a == NULL)
+        *a = sk;
+    return sk;
+
+ err:
+    if (a == NULL || *a == NULL)
+        SCT_LIST_free(sk);
+    return NULL;
+}
+
+int i2o_SCT_LIST(const STACK_OF(SCT) *a, unsigned char **pp)
+{
+    int len, sct_len, i, is_pp_new = 0;
+    size_t len2;
+    unsigned char *p = NULL, *p2;
+
+    if (pp != NULL) {
+        if (*pp == NULL) {
+            if ((len = i2o_SCT_LIST(a, NULL)) == -1) {
+                CTerr(CT_F_I2O_SCT_LIST, CT_R_SCT_LIST_INVALID);
+                return -1;
+            }
+            if ((*pp = OPENSSL_malloc(len)) == NULL) {
+                CTerr(CT_F_I2O_SCT_LIST, ERR_R_MALLOC_FAILURE);
+                return -1;
+            }
+            is_pp_new = 1;
+        }
+        p = *pp + 2;
+    }
+
+    len2 = 2;
+    for (i = 0; i < sk_SCT_num(a); i++) {
+        if (pp != NULL) {
+            p2 = p;
+            p += 2;
+            if ((sct_len = i2o_SCT(sk_SCT_value(a, i), &p)) == -1)
+                goto err;
+            s2n(sct_len, p2);
+        } else {
+          if ((sct_len = i2o_SCT(sk_SCT_value(a, i), NULL)) == -1)
+              goto err;
+        }
+        len2 += 2 + sct_len;
+    }
+
+    if (len2 > MAX_SCT_LIST_SIZE)
+        goto err;
+
+    if (pp != NULL) {
+        p = *pp;
+        s2n(len2 - 2, p);
+        if (!is_pp_new)
+            *pp += len2;
+    }
+    return len2;
+
+ err:
+    if (is_pp_new) {
+        OPENSSL_free(*pp);
+        *pp = NULL;
+    }
+    return -1;
+}
+
+STACK_OF(SCT) *d2i_SCT_LIST(STACK_OF(SCT) **a, const unsigned char **pp,
+                            long len)
+{
+    ASN1_OCTET_STRING *oct = NULL;
+    STACK_OF(SCT) *sk = NULL;
+    const unsigned char *p;
+
+    p = *pp;
+    if (d2i_ASN1_OCTET_STRING(&oct, &p, len) == NULL)
+        return NULL;
+
+    p = oct->data;
+    if ((sk = o2i_SCT_LIST(a, &p, oct->length)) != NULL)
+        *pp += len;
+
+    ASN1_OCTET_STRING_free(oct);
+    return sk;
+}
+
+int i2d_SCT_LIST(const STACK_OF(SCT) *a, unsigned char **out)
+{
+    ASN1_OCTET_STRING oct;
+    int len;
+
+    oct.data = NULL;
+    if ((oct.length = i2o_SCT_LIST(a, &oct.data)) == -1)
+        return -1;
+
+    len = i2d_ASN1_OCTET_STRING(&oct, out);
+    OPENSSL_free(oct.data);
+    return len;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_policy.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_policy.c
new file mode 100644
index 000000000..0d7b34638
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_policy.c
@@ -0,0 +1,98 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifdef OPENSSL_NO_CT
+# error "CT is disabled"
+#endif
+
+#include <openssl/ct.h>
+#include <openssl/err.h>
+#include <time.h>
+
+#include "ct_locl.h"
+
+/*
+ * Number of seconds in the future that an SCT timestamp can be, by default,
+ * without being considered invalid. This is added to time() when setting a
+ * default value for CT_POLICY_EVAL_CTX.epoch_time_in_ms.
+ * It can be overridden by calling CT_POLICY_EVAL_CTX_set_time().
+ */
+static const time_t SCT_CLOCK_DRIFT_TOLERANCE = 300;
+
+CT_POLICY_EVAL_CTX *CT_POLICY_EVAL_CTX_new(void)
+{
+    CT_POLICY_EVAL_CTX *ctx = OPENSSL_zalloc(sizeof(CT_POLICY_EVAL_CTX));
+
+    if (ctx == NULL) {
+        CTerr(CT_F_CT_POLICY_EVAL_CTX_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    /* time(NULL) shouldn't ever fail, so don't bother checking for -1. */
+    ctx->epoch_time_in_ms = (uint64_t)(time(NULL) + SCT_CLOCK_DRIFT_TOLERANCE) *
+            1000;
+
+    return ctx;
+}
+
+void CT_POLICY_EVAL_CTX_free(CT_POLICY_EVAL_CTX *ctx)
+{
+    if (ctx == NULL)
+        return;
+    X509_free(ctx->cert);
+    X509_free(ctx->issuer);
+    OPENSSL_free(ctx);
+}
+
+int CT_POLICY_EVAL_CTX_set1_cert(CT_POLICY_EVAL_CTX *ctx, X509 *cert)
+{
+    if (!X509_up_ref(cert))
+        return 0;
+    ctx->cert = cert;
+    return 1;
+}
+
+int CT_POLICY_EVAL_CTX_set1_issuer(CT_POLICY_EVAL_CTX *ctx, X509 *issuer)
+{
+    if (!X509_up_ref(issuer))
+        return 0;
+    ctx->issuer = issuer;
+    return 1;
+}
+
+void CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE(CT_POLICY_EVAL_CTX *ctx,
+                                               CTLOG_STORE *log_store)
+{
+    ctx->log_store = log_store;
+}
+
+void CT_POLICY_EVAL_CTX_set_time(CT_POLICY_EVAL_CTX *ctx, uint64_t time_in_ms)
+{
+    ctx->epoch_time_in_ms = time_in_ms;
+}
+
+X509* CT_POLICY_EVAL_CTX_get0_cert(const CT_POLICY_EVAL_CTX *ctx)
+{
+    return ctx->cert;
+}
+
+X509* CT_POLICY_EVAL_CTX_get0_issuer(const CT_POLICY_EVAL_CTX *ctx)
+{
+    return ctx->issuer;
+}
+
+const CTLOG_STORE *CT_POLICY_EVAL_CTX_get0_log_store(const CT_POLICY_EVAL_CTX *ctx)
+{
+    return ctx->log_store;
+}
+
+uint64_t CT_POLICY_EVAL_CTX_get_time(const CT_POLICY_EVAL_CTX *ctx)
+{
+    return ctx->epoch_time_in_ms;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_prn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_prn.c
new file mode 100644
index 000000000..376e04523
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_prn.c
@@ -0,0 +1,127 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifdef OPENSSL_NO_CT
+# error "CT is disabled"
+#endif
+
+#include <openssl/asn1.h>
+#include <openssl/bio.h>
+
+#include "ct_locl.h"
+
+static void SCT_signature_algorithms_print(const SCT *sct, BIO *out)
+{
+    int nid = SCT_get_signature_nid(sct);
+
+    if (nid == NID_undef)
+        BIO_printf(out, "%02X%02X", sct->hash_alg, sct->sig_alg);
+    else
+        BIO_printf(out, "%s", OBJ_nid2ln(nid));
+}
+
+static void timestamp_print(uint64_t timestamp, BIO *out)
+{
+    ASN1_GENERALIZEDTIME *gen = ASN1_GENERALIZEDTIME_new();
+    char genstr[20];
+
+    if (gen == NULL)
+        return;
+    ASN1_GENERALIZEDTIME_adj(gen, (time_t)0,
+                             (int)(timestamp / 86400000),
+                             (timestamp % 86400000) / 1000);
+    /*
+     * Note GeneralizedTime from ASN1_GENERALIZETIME_adj is always 15
+     * characters long with a final Z. Update it with fractional seconds.
+     */
+    BIO_snprintf(genstr, sizeof(genstr), "%.14s.%03dZ",
+                 ASN1_STRING_get0_data(gen), (unsigned int)(timestamp % 1000));
+    if (ASN1_GENERALIZEDTIME_set_string(gen, genstr))
+        ASN1_GENERALIZEDTIME_print(out, gen);
+    ASN1_GENERALIZEDTIME_free(gen);
+}
+
+const char *SCT_validation_status_string(const SCT *sct)
+{
+
+    switch (SCT_get_validation_status(sct)) {
+    case SCT_VALIDATION_STATUS_NOT_SET:
+        return "not set";
+    case SCT_VALIDATION_STATUS_UNKNOWN_VERSION:
+        return "unknown version";
+    case SCT_VALIDATION_STATUS_UNKNOWN_LOG:
+        return "unknown log";
+    case SCT_VALIDATION_STATUS_UNVERIFIED:
+        return "unverified";
+    case SCT_VALIDATION_STATUS_INVALID:
+        return "invalid";
+    case SCT_VALIDATION_STATUS_VALID:
+        return "valid";
+    }
+    return "unknown status";
+}
+
+void SCT_print(const SCT *sct, BIO *out, int indent,
+               const CTLOG_STORE *log_store)
+{
+    const CTLOG *log = NULL;
+
+    if (log_store != NULL) {
+        log = CTLOG_STORE_get0_log_by_id(log_store, sct->log_id,
+                                         sct->log_id_len);
+    }
+
+    BIO_printf(out, "%*sSigned Certificate Timestamp:", indent, "");
+    BIO_printf(out, "\n%*sVersion   : ", indent + 4, "");
+
+    if (sct->version != SCT_VERSION_V1) {
+        BIO_printf(out, "unknown\n%*s", indent + 16, "");
+        BIO_hex_string(out, indent + 16, 16, sct->sct, sct->sct_len);
+        return;
+    }
+
+    BIO_printf(out, "v1 (0x0)");
+
+    if (log != NULL) {
+        BIO_printf(out, "\n%*sLog       : %s", indent + 4, "",
+                   CTLOG_get0_name(log));
+    }
+
+    BIO_printf(out, "\n%*sLog ID    : ", indent + 4, "");
+    BIO_hex_string(out, indent + 16, 16, sct->log_id, sct->log_id_len);
+
+    BIO_printf(out, "\n%*sTimestamp : ", indent + 4, "");
+    timestamp_print(sct->timestamp, out);
+
+    BIO_printf(out, "\n%*sExtensions: ", indent + 4, "");
+    if (sct->ext_len == 0)
+        BIO_printf(out, "none");
+    else
+        BIO_hex_string(out, indent + 16, 16, sct->ext, sct->ext_len);
+
+    BIO_printf(out, "\n%*sSignature : ", indent + 4, "");
+    SCT_signature_algorithms_print(sct, out);
+    BIO_printf(out, "\n%*s            ", indent + 4, "");
+    BIO_hex_string(out, indent + 16, 16, sct->sig, sct->sig_len);
+}
+
+void SCT_LIST_print(const STACK_OF(SCT) *sct_list, BIO *out, int indent,
+                    const char *separator, const CTLOG_STORE *log_store)
+{
+    int sct_count = sk_SCT_num(sct_list);
+    int i;
+
+    for (i = 0; i < sct_count; ++i) {
+        SCT *sct = sk_SCT_value(sct_list, i);
+
+        SCT_print(sct, out, indent, log_store);
+        if (i < sk_SCT_num(sct_list) - 1)
+            BIO_printf(out, "%s", separator);
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_sct.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_sct.c
new file mode 100644
index 000000000..1dc16857b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_sct.c
@@ -0,0 +1,396 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifdef OPENSSL_NO_CT
+# error "CT disabled"
+#endif
+
+#include <openssl/ct.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/tls1.h>
+#include <openssl/x509.h>
+
+#include "ct_locl.h"
+
+SCT *SCT_new(void)
+{
+    SCT *sct = OPENSSL_zalloc(sizeof(*sct));
+
+    if (sct == NULL) {
+        CTerr(CT_F_SCT_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    sct->entry_type = CT_LOG_ENTRY_TYPE_NOT_SET;
+    sct->version = SCT_VERSION_NOT_SET;
+    return sct;
+}
+
+void SCT_free(SCT *sct)
+{
+    if (sct == NULL)
+        return;
+
+    OPENSSL_free(sct->log_id);
+    OPENSSL_free(sct->ext);
+    OPENSSL_free(sct->sig);
+    OPENSSL_free(sct->sct);
+    OPENSSL_free(sct);
+}
+
+void SCT_LIST_free(STACK_OF(SCT) *a)
+{
+    sk_SCT_pop_free(a, SCT_free);
+}
+
+int SCT_set_version(SCT *sct, sct_version_t version)
+{
+    if (version != SCT_VERSION_V1) {
+        CTerr(CT_F_SCT_SET_VERSION, CT_R_UNSUPPORTED_VERSION);
+        return 0;
+    }
+    sct->version = version;
+    sct->validation_status = SCT_VALIDATION_STATUS_NOT_SET;
+    return 1;
+}
+
+int SCT_set_log_entry_type(SCT *sct, ct_log_entry_type_t entry_type)
+{
+    sct->validation_status = SCT_VALIDATION_STATUS_NOT_SET;
+
+    switch (entry_type) {
+    case CT_LOG_ENTRY_TYPE_X509:
+    case CT_LOG_ENTRY_TYPE_PRECERT:
+        sct->entry_type = entry_type;
+        return 1;
+    case CT_LOG_ENTRY_TYPE_NOT_SET:
+        break;
+    }
+    CTerr(CT_F_SCT_SET_LOG_ENTRY_TYPE, CT_R_UNSUPPORTED_ENTRY_TYPE);
+    return 0;
+}
+
+int SCT_set0_log_id(SCT *sct, unsigned char *log_id, size_t log_id_len)
+{
+    if (sct->version == SCT_VERSION_V1 && log_id_len != CT_V1_HASHLEN) {
+        CTerr(CT_F_SCT_SET0_LOG_ID, CT_R_INVALID_LOG_ID_LENGTH);
+        return 0;
+    }
+
+    OPENSSL_free(sct->log_id);
+    sct->log_id = log_id;
+    sct->log_id_len = log_id_len;
+    sct->validation_status = SCT_VALIDATION_STATUS_NOT_SET;
+    return 1;
+}
+
+int SCT_set1_log_id(SCT *sct, const unsigned char *log_id, size_t log_id_len)
+{
+    if (sct->version == SCT_VERSION_V1 && log_id_len != CT_V1_HASHLEN) {
+        CTerr(CT_F_SCT_SET1_LOG_ID, CT_R_INVALID_LOG_ID_LENGTH);
+        return 0;
+    }
+
+    OPENSSL_free(sct->log_id);
+    sct->log_id = NULL;
+    sct->log_id_len = 0;
+    sct->validation_status = SCT_VALIDATION_STATUS_NOT_SET;
+
+    if (log_id != NULL && log_id_len > 0) {
+        sct->log_id = OPENSSL_memdup(log_id, log_id_len);
+        if (sct->log_id == NULL) {
+            CTerr(CT_F_SCT_SET1_LOG_ID, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        sct->log_id_len = log_id_len;
+    }
+    return 1;
+}
+
+
+void SCT_set_timestamp(SCT *sct, uint64_t timestamp)
+{
+    sct->timestamp = timestamp;
+    sct->validation_status = SCT_VALIDATION_STATUS_NOT_SET;
+}
+
+int SCT_set_signature_nid(SCT *sct, int nid)
+{
+    switch (nid) {
+    case NID_sha256WithRSAEncryption:
+        sct->hash_alg = TLSEXT_hash_sha256;
+        sct->sig_alg = TLSEXT_signature_rsa;
+        sct->validation_status = SCT_VALIDATION_STATUS_NOT_SET;
+        return 1;
+    case NID_ecdsa_with_SHA256:
+        sct->hash_alg = TLSEXT_hash_sha256;
+        sct->sig_alg = TLSEXT_signature_ecdsa;
+        sct->validation_status = SCT_VALIDATION_STATUS_NOT_SET;
+        return 1;
+    default:
+        CTerr(CT_F_SCT_SET_SIGNATURE_NID, CT_R_UNRECOGNIZED_SIGNATURE_NID);
+        return 0;
+    }
+}
+
+void SCT_set0_extensions(SCT *sct, unsigned char *ext, size_t ext_len)
+{
+    OPENSSL_free(sct->ext);
+    sct->ext = ext;
+    sct->ext_len = ext_len;
+    sct->validation_status = SCT_VALIDATION_STATUS_NOT_SET;
+}
+
+int SCT_set1_extensions(SCT *sct, const unsigned char *ext, size_t ext_len)
+{
+    OPENSSL_free(sct->ext);
+    sct->ext = NULL;
+    sct->ext_len = 0;
+    sct->validation_status = SCT_VALIDATION_STATUS_NOT_SET;
+
+    if (ext != NULL && ext_len > 0) {
+        sct->ext = OPENSSL_memdup(ext, ext_len);
+        if (sct->ext == NULL) {
+            CTerr(CT_F_SCT_SET1_EXTENSIONS, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        sct->ext_len = ext_len;
+    }
+    return 1;
+}
+
+void SCT_set0_signature(SCT *sct, unsigned char *sig, size_t sig_len)
+{
+    OPENSSL_free(sct->sig);
+    sct->sig = sig;
+    sct->sig_len = sig_len;
+    sct->validation_status = SCT_VALIDATION_STATUS_NOT_SET;
+}
+
+int SCT_set1_signature(SCT *sct, const unsigned char *sig, size_t sig_len)
+{
+    OPENSSL_free(sct->sig);
+    sct->sig = NULL;
+    sct->sig_len = 0;
+    sct->validation_status = SCT_VALIDATION_STATUS_NOT_SET;
+
+    if (sig != NULL && sig_len > 0) {
+        sct->sig = OPENSSL_memdup(sig, sig_len);
+        if (sct->sig == NULL) {
+            CTerr(CT_F_SCT_SET1_SIGNATURE, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        sct->sig_len = sig_len;
+    }
+    return 1;
+}
+
+sct_version_t SCT_get_version(const SCT *sct)
+{
+    return sct->version;
+}
+
+ct_log_entry_type_t SCT_get_log_entry_type(const SCT *sct)
+{
+    return sct->entry_type;
+}
+
+size_t SCT_get0_log_id(const SCT *sct, unsigned char **log_id)
+{
+    *log_id = sct->log_id;
+    return sct->log_id_len;
+}
+
+uint64_t SCT_get_timestamp(const SCT *sct)
+{
+    return sct->timestamp;
+}
+
+int SCT_get_signature_nid(const SCT *sct)
+{
+    if (sct->version == SCT_VERSION_V1) {
+        if (sct->hash_alg == TLSEXT_hash_sha256) {
+            switch (sct->sig_alg) {
+            case TLSEXT_signature_ecdsa:
+                return NID_ecdsa_with_SHA256;
+            case TLSEXT_signature_rsa:
+                return NID_sha256WithRSAEncryption;
+            default:
+                return NID_undef;
+            }
+        }
+    }
+    return NID_undef;
+}
+
+size_t SCT_get0_extensions(const SCT *sct, unsigned char **ext)
+{
+    *ext = sct->ext;
+    return sct->ext_len;
+}
+
+size_t SCT_get0_signature(const SCT *sct, unsigned char **sig)
+{
+    *sig = sct->sig;
+    return sct->sig_len;
+}
+
+int SCT_is_complete(const SCT *sct)
+{
+    switch (sct->version) {
+    case SCT_VERSION_NOT_SET:
+        return 0;
+    case SCT_VERSION_V1:
+        return sct->log_id != NULL && SCT_signature_is_complete(sct);
+    default:
+        return sct->sct != NULL; /* Just need cached encoding */
+    }
+}
+
+int SCT_signature_is_complete(const SCT *sct)
+{
+    return SCT_get_signature_nid(sct) != NID_undef &&
+        sct->sig != NULL && sct->sig_len > 0;
+}
+
+sct_source_t SCT_get_source(const SCT *sct)
+{
+    return sct->source;
+}
+
+int SCT_set_source(SCT *sct, sct_source_t source)
+{
+    sct->source = source;
+    sct->validation_status = SCT_VALIDATION_STATUS_NOT_SET;
+    switch (source) {
+    case SCT_SOURCE_TLS_EXTENSION:
+    case SCT_SOURCE_OCSP_STAPLED_RESPONSE:
+        return SCT_set_log_entry_type(sct, CT_LOG_ENTRY_TYPE_X509);
+    case SCT_SOURCE_X509V3_EXTENSION:
+        return SCT_set_log_entry_type(sct, CT_LOG_ENTRY_TYPE_PRECERT);
+    case SCT_SOURCE_UNKNOWN:
+        break;
+    }
+    /* if we aren't sure, leave the log entry type alone */
+    return 1;
+}
+
+sct_validation_status_t SCT_get_validation_status(const SCT *sct)
+{
+    return sct->validation_status;
+}
+
+int SCT_validate(SCT *sct, const CT_POLICY_EVAL_CTX *ctx)
+{
+    int is_sct_valid = -1;
+    SCT_CTX *sctx = NULL;
+    X509_PUBKEY *pub = NULL, *log_pkey = NULL;
+    const CTLOG *log;
+
+    /*
+     * With an unrecognized SCT version we don't know what such an SCT means,
+     * let alone validate one.  So we return validation failure (0).
+     */
+    if (sct->version != SCT_VERSION_V1) {
+        sct->validation_status = SCT_VALIDATION_STATUS_UNKNOWN_VERSION;
+        return 0;
+    }
+
+    log = CTLOG_STORE_get0_log_by_id(ctx->log_store,
+                                     sct->log_id, sct->log_id_len);
+
+    /* Similarly, an SCT from an unknown log also cannot be validated. */
+    if (log == NULL) {
+        sct->validation_status = SCT_VALIDATION_STATUS_UNKNOWN_LOG;
+        return 0;
+    }
+
+    sctx = SCT_CTX_new();
+    if (sctx == NULL)
+        goto err;
+
+    if (X509_PUBKEY_set(&log_pkey, CTLOG_get0_public_key(log)) != 1)
+        goto err;
+    if (SCT_CTX_set1_pubkey(sctx, log_pkey) != 1)
+        goto err;
+
+    if (SCT_get_log_entry_type(sct) == CT_LOG_ENTRY_TYPE_PRECERT) {
+        EVP_PKEY *issuer_pkey;
+
+        if (ctx->issuer == NULL) {
+            sct->validation_status = SCT_VALIDATION_STATUS_UNVERIFIED;
+            goto end;
+        }
+
+        issuer_pkey = X509_get0_pubkey(ctx->issuer);
+
+        if (X509_PUBKEY_set(&pub, issuer_pkey) != 1)
+            goto err;
+        if (SCT_CTX_set1_issuer_pubkey(sctx, pub) != 1)
+            goto err;
+    }
+
+    SCT_CTX_set_time(sctx, ctx->epoch_time_in_ms);
+
+    /*
+     * XXX: Potential for optimization.  This repeats some idempotent heavy
+     * lifting on the certificate for each candidate SCT, and appears to not
+     * use any information in the SCT itself, only the certificate is
+     * processed.  So it may make more sense to to do this just once, perhaps
+     * associated with the shared (by all SCTs) policy eval ctx.
+     *
+     * XXX: Failure here is global (SCT independent) and represents either an
+     * issue with the certificate (e.g. duplicate extensions) or an out of
+     * memory condition.  When the certificate is incompatible with CT, we just
+     * mark the SCTs invalid, rather than report a failure to determine the
+     * validation status.  That way, callbacks that want to do "soft" SCT
+     * processing will not abort handshakes with false positive internal
+     * errors.  Since the function does not distinguish between certificate
+     * issues (peer's fault) and internal problems (out fault) the safe thing
+     * to do is to report a validation failure and let the callback or
+     * application decide what to do.
+     */
+    if (SCT_CTX_set1_cert(sctx, ctx->cert, NULL) != 1)
+        sct->validation_status = SCT_VALIDATION_STATUS_UNVERIFIED;
+    else
+        sct->validation_status = SCT_CTX_verify(sctx, sct) == 1 ?
+            SCT_VALIDATION_STATUS_VALID : SCT_VALIDATION_STATUS_INVALID;
+
+end:
+    is_sct_valid = sct->validation_status == SCT_VALIDATION_STATUS_VALID;
+err:
+    X509_PUBKEY_free(pub);
+    X509_PUBKEY_free(log_pkey);
+    SCT_CTX_free(sctx);
+
+    return is_sct_valid;
+}
+
+int SCT_LIST_validate(const STACK_OF(SCT) *scts, CT_POLICY_EVAL_CTX *ctx)
+{
+    int are_scts_valid = 1;
+    int sct_count = scts != NULL ? sk_SCT_num(scts) : 0;
+    int i;
+
+    for (i = 0; i < sct_count; ++i) {
+        int is_sct_valid = -1;
+        SCT *sct = sk_SCT_value(scts, i);
+
+        if (sct == NULL)
+            continue;
+
+        is_sct_valid = SCT_validate(sct, ctx);
+        if (is_sct_valid < 0)
+            return is_sct_valid;
+        are_scts_valid &= is_sct_valid;
+    }
+
+    return are_scts_valid;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_sct_ctx.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_sct_ctx.c
new file mode 100644
index 000000000..75a5027df
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_sct_ctx.c
@@ -0,0 +1,263 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifdef OPENSSL_NO_CT
+# error "CT is disabled"
+#endif
+
+#include <stddef.h>
+#include <string.h>
+
+#include <openssl/err.h>
+#include <openssl/obj_mac.h>
+#include <openssl/x509.h>
+
+#include "ct_locl.h"
+
+SCT_CTX *SCT_CTX_new(void)
+{
+    SCT_CTX *sctx = OPENSSL_zalloc(sizeof(*sctx));
+
+    if (sctx == NULL)
+        CTerr(CT_F_SCT_CTX_NEW, ERR_R_MALLOC_FAILURE);
+
+    return sctx;
+}
+
+void SCT_CTX_free(SCT_CTX *sctx)
+{
+    if (sctx == NULL)
+        return;
+    EVP_PKEY_free(sctx->pkey);
+    OPENSSL_free(sctx->pkeyhash);
+    OPENSSL_free(sctx->ihash);
+    OPENSSL_free(sctx->certder);
+    OPENSSL_free(sctx->preder);
+    OPENSSL_free(sctx);
+}
+
+/*
+ * Finds the index of the first extension with the given NID in cert.
+ * If there is more than one extension with that NID, *is_duplicated is set to
+ * 1, otherwise 0 (unless it is NULL).
+ */
+static int ct_x509_get_ext(X509 *cert, int nid, int *is_duplicated)
+{
+    int ret = X509_get_ext_by_NID(cert, nid, -1);
+
+    if (is_duplicated != NULL)
+        *is_duplicated = ret >= 0 && X509_get_ext_by_NID(cert, nid, ret) >= 0;
+
+    return ret;
+}
+
+/*
+ * Modifies a certificate by deleting extensions and copying the issuer and
+ * AKID from the presigner certificate, if necessary.
+ * Returns 1 on success, 0 otherwise.
+ */
+__owur static int ct_x509_cert_fixup(X509 *cert, X509 *presigner)
+{
+    int preidx, certidx;
+    int pre_akid_ext_is_dup, cert_akid_ext_is_dup;
+
+    if (presigner == NULL)
+        return 1;
+
+    preidx = ct_x509_get_ext(presigner, NID_authority_key_identifier,
+                             &pre_akid_ext_is_dup);
+    certidx = ct_x509_get_ext(cert, NID_authority_key_identifier,
+                              &cert_akid_ext_is_dup);
+
+    /* An error occurred whilst searching for the extension */
+    if (preidx < -1 || certidx < -1)
+        return 0;
+    /* Invalid certificate if they contain duplicate extensions */
+    if (pre_akid_ext_is_dup || cert_akid_ext_is_dup)
+        return 0;
+    /* AKID must be present in both certificate or absent in both */
+    if (preidx >= 0 && certidx == -1)
+        return 0;
+    if (preidx == -1 && certidx >= 0)
+        return 0;
+    /* Copy issuer name */
+    if (!X509_set_issuer_name(cert, X509_get_issuer_name(presigner)))
+        return 0;
+    if (preidx != -1) {
+        /* Retrieve and copy AKID encoding */
+        X509_EXTENSION *preext = X509_get_ext(presigner, preidx);
+        X509_EXTENSION *certext = X509_get_ext(cert, certidx);
+        ASN1_OCTET_STRING *preextdata;
+
+        /* Should never happen */
+        if (preext == NULL || certext == NULL)
+            return 0;
+        preextdata = X509_EXTENSION_get_data(preext);
+        if (preextdata == NULL ||
+            !X509_EXTENSION_set_data(certext, preextdata))
+            return 0;
+    }
+    return 1;
+}
+
+int SCT_CTX_set1_cert(SCT_CTX *sctx, X509 *cert, X509 *presigner)
+{
+    unsigned char *certder = NULL, *preder = NULL;
+    X509 *pretmp = NULL;
+    int certderlen = 0, prederlen = 0;
+    int idx = -1;
+    int poison_ext_is_dup, sct_ext_is_dup;
+    int poison_idx = ct_x509_get_ext(cert, NID_ct_precert_poison, &poison_ext_is_dup);
+
+    /* Duplicate poison extensions are present - error */
+    if (poison_ext_is_dup)
+        goto err;
+
+    /* If *cert doesn't have a poison extension, it isn't a precert */
+    if (poison_idx == -1) {
+        /* cert isn't a precert, so we shouldn't have a presigner */
+        if (presigner != NULL)
+            goto err;
+
+        certderlen = i2d_X509(cert, &certder);
+        if (certderlen < 0)
+            goto err;
+    }
+
+    /* See if cert has a precert SCTs extension */
+    idx = ct_x509_get_ext(cert, NID_ct_precert_scts, &sct_ext_is_dup);
+    /* Duplicate SCT extensions are present - error */
+    if (sct_ext_is_dup)
+        goto err;
+
+    if (idx >= 0 && poison_idx >= 0) {
+        /*
+         * cert can't both contain SCTs (i.e. have an SCT extension) and be a
+         * precert (i.e. have a poison extension).
+         */
+        goto err;
+    }
+
+    if (idx == -1) {
+        idx = poison_idx;
+    }
+
+    /*
+     * If either a poison or SCT extension is present, remove it before encoding
+     * cert. This, along with ct_x509_cert_fixup(), gets a TBSCertificate (see
+     * RFC5280) from cert, which is what the CT log signed when it produced the
+     * SCT.
+     */
+    if (idx >= 0) {
+        X509_EXTENSION *ext;
+
+        /* Take a copy of certificate so we don't modify passed version */
+        pretmp = X509_dup(cert);
+        if (pretmp == NULL)
+            goto err;
+
+        ext = X509_delete_ext(pretmp, idx);
+        X509_EXTENSION_free(ext);
+
+        if (!ct_x509_cert_fixup(pretmp, presigner))
+            goto err;
+
+        prederlen = i2d_re_X509_tbs(pretmp, &preder);
+        if (prederlen <= 0)
+            goto err;
+    }
+
+    X509_free(pretmp);
+
+    OPENSSL_free(sctx->certder);
+    sctx->certder = certder;
+    sctx->certderlen = certderlen;
+
+    OPENSSL_free(sctx->preder);
+    sctx->preder = preder;
+    sctx->prederlen = prederlen;
+
+    return 1;
+err:
+    OPENSSL_free(certder);
+    OPENSSL_free(preder);
+    X509_free(pretmp);
+    return 0;
+}
+
+__owur static int ct_public_key_hash(X509_PUBKEY *pkey, unsigned char **hash,
+                                     size_t *hash_len)
+{
+    int ret = 0;
+    unsigned char *md = NULL, *der = NULL;
+    int der_len;
+    unsigned int md_len;
+
+    /* Reuse buffer if possible */
+    if (*hash != NULL && *hash_len >= SHA256_DIGEST_LENGTH) {
+        md = *hash;
+    } else {
+        md = OPENSSL_malloc(SHA256_DIGEST_LENGTH);
+        if (md == NULL)
+            goto err;
+    }
+
+    /* Calculate key hash */
+    der_len = i2d_X509_PUBKEY(pkey, &der);
+    if (der_len <= 0)
+        goto err;
+
+    if (!EVP_Digest(der, der_len, md, &md_len, EVP_sha256(), NULL))
+        goto err;
+
+    if (md != *hash) {
+        OPENSSL_free(*hash);
+        *hash = md;
+        *hash_len = SHA256_DIGEST_LENGTH;
+    }
+
+    md = NULL;
+    ret = 1;
+ err:
+    OPENSSL_free(md);
+    OPENSSL_free(der);
+    return ret;
+}
+
+int SCT_CTX_set1_issuer(SCT_CTX *sctx, const X509 *issuer)
+{
+    return SCT_CTX_set1_issuer_pubkey(sctx, X509_get_X509_PUBKEY(issuer));
+}
+
+int SCT_CTX_set1_issuer_pubkey(SCT_CTX *sctx, X509_PUBKEY *pubkey)
+{
+    return ct_public_key_hash(pubkey, &sctx->ihash, &sctx->ihashlen);
+}
+
+int SCT_CTX_set1_pubkey(SCT_CTX *sctx, X509_PUBKEY *pubkey)
+{
+    EVP_PKEY *pkey = X509_PUBKEY_get(pubkey);
+
+    if (pkey == NULL)
+        return 0;
+
+    if (!ct_public_key_hash(pubkey, &sctx->pkeyhash, &sctx->pkeyhashlen)) {
+        EVP_PKEY_free(pkey);
+        return 0;
+    }
+
+    EVP_PKEY_free(sctx->pkey);
+    sctx->pkey = pkey;
+    return 1;
+}
+
+void SCT_CTX_set_time(SCT_CTX *sctx, uint64_t time_in_ms)
+{
+    sctx->epoch_time_in_ms = time_in_ms;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_vfy.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_vfy.c
new file mode 100644
index 000000000..cabcf5782
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_vfy.c
@@ -0,0 +1,140 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+
+#include <openssl/ct.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+
+#include "ct_locl.h"
+
+typedef enum sct_signature_type_t {
+    SIGNATURE_TYPE_NOT_SET = -1,
+    SIGNATURE_TYPE_CERT_TIMESTAMP,
+    SIGNATURE_TYPE_TREE_HASH
+} SCT_SIGNATURE_TYPE;
+
+/*
+ * Update encoding for SCT signature verification/generation to supplied
+ * EVP_MD_CTX.
+ */
+static int sct_ctx_update(EVP_MD_CTX *ctx, const SCT_CTX *sctx, const SCT *sct)
+{
+    unsigned char tmpbuf[12];
+    unsigned char *p, *der;
+    size_t derlen;
+    /*+
+     * digitally-signed struct {
+     *   (1 byte) Version sct_version;
+     *   (1 byte) SignatureType signature_type = certificate_timestamp;
+     *   (8 bytes) uint64 timestamp;
+     *   (2 bytes) LogEntryType entry_type;
+     *   (? bytes) select(entry_type) {
+     *     case x509_entry: ASN.1Cert;
+     *     case precert_entry: PreCert;
+     *   } signed_entry;
+     *   (2 bytes + sct->ext_len) CtExtensions extensions;
+     * }
+     */
+    if (sct->entry_type == CT_LOG_ENTRY_TYPE_NOT_SET)
+        return 0;
+    if (sct->entry_type == CT_LOG_ENTRY_TYPE_PRECERT && sctx->ihash == NULL)
+        return 0;
+
+    p = tmpbuf;
+    *p++ = sct->version;
+    *p++ = SIGNATURE_TYPE_CERT_TIMESTAMP;
+    l2n8(sct->timestamp, p);
+    s2n(sct->entry_type, p);
+
+    if (!EVP_DigestUpdate(ctx, tmpbuf, p - tmpbuf))
+        return 0;
+
+    if (sct->entry_type == CT_LOG_ENTRY_TYPE_X509) {
+        der = sctx->certder;
+        derlen = sctx->certderlen;
+    } else {
+        if (!EVP_DigestUpdate(ctx, sctx->ihash, sctx->ihashlen))
+            return 0;
+        der = sctx->preder;
+        derlen = sctx->prederlen;
+    }
+
+    /* If no encoding available, fatal error */
+    if (der == NULL)
+        return 0;
+
+    /* Include length first */
+    p = tmpbuf;
+    l2n3(derlen, p);
+
+    if (!EVP_DigestUpdate(ctx, tmpbuf, 3))
+        return 0;
+    if (!EVP_DigestUpdate(ctx, der, derlen))
+        return 0;
+
+    /* Add any extensions */
+    p = tmpbuf;
+    s2n(sct->ext_len, p);
+    if (!EVP_DigestUpdate(ctx, tmpbuf, 2))
+        return 0;
+
+    if (sct->ext_len && !EVP_DigestUpdate(ctx, sct->ext, sct->ext_len))
+        return 0;
+
+    return 1;
+}
+
+int SCT_CTX_verify(const SCT_CTX *sctx, const SCT *sct)
+{
+    EVP_MD_CTX *ctx = NULL;
+    int ret = 0;
+
+    if (!SCT_is_complete(sct) || sctx->pkey == NULL ||
+        sct->entry_type == CT_LOG_ENTRY_TYPE_NOT_SET ||
+        (sct->entry_type == CT_LOG_ENTRY_TYPE_PRECERT && sctx->ihash == NULL)) {
+        CTerr(CT_F_SCT_CTX_VERIFY, CT_R_SCT_NOT_SET);
+        return 0;
+    }
+    if (sct->version != SCT_VERSION_V1) {
+        CTerr(CT_F_SCT_CTX_VERIFY, CT_R_SCT_UNSUPPORTED_VERSION);
+        return 0;
+    }
+    if (sct->log_id_len != sctx->pkeyhashlen ||
+        memcmp(sct->log_id, sctx->pkeyhash, sctx->pkeyhashlen) != 0) {
+        CTerr(CT_F_SCT_CTX_VERIFY, CT_R_SCT_LOG_ID_MISMATCH);
+        return 0;
+    }
+    if (sct->timestamp > sctx->epoch_time_in_ms) {
+        CTerr(CT_F_SCT_CTX_VERIFY, CT_R_SCT_FUTURE_TIMESTAMP);
+        return 0;
+    }
+
+    ctx = EVP_MD_CTX_new();
+    if (ctx == NULL)
+        goto end;
+
+    if (!EVP_DigestVerifyInit(ctx, NULL, EVP_sha256(), NULL, sctx->pkey))
+        goto end;
+
+    if (!sct_ctx_update(ctx, sctx, sct))
+        goto end;
+
+    /* Verify signature */
+    ret = EVP_DigestVerifyFinal(ctx, sct->sig, sct->sig_len);
+    /* If ret < 0 some other error: fall through without setting error */
+    if (ret == 0)
+        CTerr(CT_F_SCT_CTX_VERIFY, CT_R_SCT_INVALID_SIGNATURE);
+
+end:
+    EVP_MD_CTX_free(ctx);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_x509v3.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_x509v3.c
new file mode 100644
index 000000000..ec186d1f5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ct/ct_x509v3.c
@@ -0,0 +1,104 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifdef OPENSSL_NO_CT
+# error "CT is disabled"
+#endif
+
+#include "ct_locl.h"
+
+static char *i2s_poison(const X509V3_EXT_METHOD *method, void *val)
+{
+    return OPENSSL_strdup("NULL");
+}
+
+static void *s2i_poison(const X509V3_EXT_METHOD *method, X509V3_CTX *ctx, const char *str)
+{
+   return ASN1_NULL_new();
+}
+
+static int i2r_SCT_LIST(X509V3_EXT_METHOD *method, STACK_OF(SCT) *sct_list,
+                 BIO *out, int indent)
+{
+    SCT_LIST_print(sct_list, out, indent, "\n", NULL);
+    return 1;
+}
+
+static int set_sct_list_source(STACK_OF(SCT) *s, sct_source_t source)
+{
+    if (s != NULL) {
+        int i;
+
+        for (i = 0; i < sk_SCT_num(s); i++) {
+            int res = SCT_set_source(sk_SCT_value(s, i), source);
+
+            if (res != 1) {
+                return 0;
+            }
+        }
+    }
+    return 1;
+}
+
+static STACK_OF(SCT) *x509_ext_d2i_SCT_LIST(STACK_OF(SCT) **a,
+                                            const unsigned char **pp,
+                                            long len)
+{
+     STACK_OF(SCT) *s = d2i_SCT_LIST(a, pp, len);
+
+     if (set_sct_list_source(s, SCT_SOURCE_X509V3_EXTENSION) != 1) {
+         SCT_LIST_free(s);
+         *a = NULL;
+         return NULL;
+     }
+     return s;
+}
+
+static STACK_OF(SCT) *ocsp_ext_d2i_SCT_LIST(STACK_OF(SCT) **a,
+                                            const unsigned char **pp,
+                                            long len)
+{
+    STACK_OF(SCT) *s = d2i_SCT_LIST(a, pp, len);
+
+    if (set_sct_list_source(s, SCT_SOURCE_OCSP_STAPLED_RESPONSE) != 1) {
+        SCT_LIST_free(s);
+        *a = NULL;
+        return NULL;
+    }
+    return s;
+}
+
+/* Handlers for X509v3/OCSP Certificate Transparency extensions */
+const X509V3_EXT_METHOD v3_ct_scts[3] = {
+    /* X509v3 extension in certificates that contains SCTs */
+    { NID_ct_precert_scts, 0, NULL,
+    NULL, (X509V3_EXT_FREE)SCT_LIST_free,
+    (X509V3_EXT_D2I)x509_ext_d2i_SCT_LIST, (X509V3_EXT_I2D)i2d_SCT_LIST,
+    NULL, NULL,
+    NULL, NULL,
+    (X509V3_EXT_I2R)i2r_SCT_LIST, NULL,
+    NULL },
+
+    /* X509v3 extension to mark a certificate as a pre-certificate */
+    { NID_ct_precert_poison, 0, ASN1_ITEM_ref(ASN1_NULL),
+    NULL, NULL, NULL, NULL,
+    i2s_poison, s2i_poison,
+    NULL, NULL,
+    NULL, NULL,
+    NULL },
+
+    /* OCSP extension that contains SCTs */
+    { NID_ct_cert_scts, 0, NULL,
+    0, (X509V3_EXT_FREE)SCT_LIST_free,
+    (X509V3_EXT_D2I)ocsp_ext_d2i_SCT_LIST, (X509V3_EXT_I2D)i2d_SCT_LIST,
+    NULL, NULL,
+    NULL, NULL,
+    (X509V3_EXT_I2R)i2r_SCT_LIST, NULL,
+    NULL },
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ctype.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ctype.c
new file mode 100644
index 000000000..813be25a0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ctype.c
@@ -0,0 +1,274 @@
+/*
+ * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include <stdio.h>
+#include "internal/ctype.h"
+#include "openssl/ebcdic.h"
+
+/*
+ * Define the character classes for each character in the seven bit ASCII
+ * character set.  This is independent of the host's character set, characters
+ * are converted to ASCII before being used as an index in to this table.
+ * Characters outside of the seven bit ASCII range are detected before indexing.
+ */
+static const unsigned short ctype_char_map[128] = {
+   /* 00 nul */ CTYPE_MASK_cntrl,
+   /* 01 soh */ CTYPE_MASK_cntrl,
+   /* 02 stx */ CTYPE_MASK_cntrl,
+   /* 03 etx */ CTYPE_MASK_cntrl,
+   /* 04 eot */ CTYPE_MASK_cntrl,
+   /* 05 enq */ CTYPE_MASK_cntrl,
+   /* 06 ack */ CTYPE_MASK_cntrl,
+   /* 07 \a  */ CTYPE_MASK_cntrl,
+   /* 08 \b  */ CTYPE_MASK_cntrl,
+   /* 09 \t  */ CTYPE_MASK_blank | CTYPE_MASK_cntrl | CTYPE_MASK_space,
+   /* 0A \n  */ CTYPE_MASK_cntrl | CTYPE_MASK_space,
+   /* 0B \v  */ CTYPE_MASK_cntrl | CTYPE_MASK_space,
+   /* 0C \f  */ CTYPE_MASK_cntrl | CTYPE_MASK_space,
+   /* 0D \r  */ CTYPE_MASK_cntrl | CTYPE_MASK_space,
+   /* 0E so  */ CTYPE_MASK_cntrl,
+   /* 0F si  */ CTYPE_MASK_cntrl,
+   /* 10 dle */ CTYPE_MASK_cntrl,
+   /* 11 dc1 */ CTYPE_MASK_cntrl,
+   /* 12 dc2 */ CTYPE_MASK_cntrl,
+   /* 13 dc3 */ CTYPE_MASK_cntrl,
+   /* 14 dc4 */ CTYPE_MASK_cntrl,
+   /* 15 nak */ CTYPE_MASK_cntrl,
+   /* 16 syn */ CTYPE_MASK_cntrl,
+   /* 17 etb */ CTYPE_MASK_cntrl,
+   /* 18 can */ CTYPE_MASK_cntrl,
+   /* 19 em  */ CTYPE_MASK_cntrl,
+   /* 1A sub */ CTYPE_MASK_cntrl,
+   /* 1B esc */ CTYPE_MASK_cntrl,
+   /* 1C fs  */ CTYPE_MASK_cntrl,
+   /* 1D gs  */ CTYPE_MASK_cntrl,
+   /* 1E rs  */ CTYPE_MASK_cntrl,
+   /* 1F us  */ CTYPE_MASK_cntrl,
+   /* 20     */ CTYPE_MASK_blank | CTYPE_MASK_print | CTYPE_MASK_space
+                | CTYPE_MASK_asn1print,
+   /* 21  !  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 22  "  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 23  #  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 24  $  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 25  %  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 26  &  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 27  '  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct
+                | CTYPE_MASK_asn1print,
+   /* 28  (  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct
+                | CTYPE_MASK_asn1print,
+   /* 29  )  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct
+                | CTYPE_MASK_asn1print,
+   /* 2A  *  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 2B  +  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 2C  ,  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct
+                | CTYPE_MASK_asn1print,
+   /* 2D  -  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct
+                | CTYPE_MASK_asn1print,
+   /* 2E  .  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct
+                | CTYPE_MASK_asn1print,
+   /* 2F  /  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 30  0  */ CTYPE_MASK_digit | CTYPE_MASK_graph | CTYPE_MASK_print
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 31  1  */ CTYPE_MASK_digit | CTYPE_MASK_graph | CTYPE_MASK_print
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 32  2  */ CTYPE_MASK_digit | CTYPE_MASK_graph | CTYPE_MASK_print
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 33  3  */ CTYPE_MASK_digit | CTYPE_MASK_graph | CTYPE_MASK_print
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 34  4  */ CTYPE_MASK_digit | CTYPE_MASK_graph | CTYPE_MASK_print
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 35  5  */ CTYPE_MASK_digit | CTYPE_MASK_graph | CTYPE_MASK_print
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 36  6  */ CTYPE_MASK_digit | CTYPE_MASK_graph | CTYPE_MASK_print
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 37  7  */ CTYPE_MASK_digit | CTYPE_MASK_graph | CTYPE_MASK_print
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 38  8  */ CTYPE_MASK_digit | CTYPE_MASK_graph | CTYPE_MASK_print
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 39  9  */ CTYPE_MASK_digit | CTYPE_MASK_graph | CTYPE_MASK_print
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 3A  :  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct
+                | CTYPE_MASK_asn1print,
+   /* 3B  ;  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 3C  <  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 3D  =  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 3E  >  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 3F  ?  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct
+                | CTYPE_MASK_asn1print,
+   /* 40  @  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 41  A  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 42  B  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 43  C  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 44  D  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 45  E  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 46  F  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 47  G  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 48  H  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 49  I  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 4A  J  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 4B  K  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 4C  L  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 4D  M  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 4E  N  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 4F  O  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 50  P  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 51  Q  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 52  R  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 53  S  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 54  T  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 55  U  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 56  V  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 57  W  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 58  X  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 59  Y  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 5A  Z  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_upper
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 5B  [  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 5C  \  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 5D  ]  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 5E  ^  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 5F  _  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 60  `  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 61  a  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 62  b  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 63  c  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 64  d  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 65  e  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 66  f  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_xdigit | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 67  g  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 68  h  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 69  i  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 6A  j  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 6B  k  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 6C  l  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 6D  m  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 6E  n  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 6F  o  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 70  p  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 71  q  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 72  r  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 73  s  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 74  t  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 75  u  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 76  v  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 77  w  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 78  x  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 79  y  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 7A  z  */ CTYPE_MASK_graph | CTYPE_MASK_lower | CTYPE_MASK_print
+                | CTYPE_MASK_base64 | CTYPE_MASK_asn1print,
+   /* 7B  {  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 7C  |  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 7D  }  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 7E  ~  */ CTYPE_MASK_graph | CTYPE_MASK_print | CTYPE_MASK_punct,
+   /* 7F del */ CTYPE_MASK_cntrl
+};
+
+#ifdef CHARSET_EBCDIC
+int ossl_toascii(int c)
+{
+    if (c < -128 || c > 256 || c == EOF)
+        return c;
+    /*
+     * Adjust negatively signed characters.
+     * This is not required for ASCII because any character that sign extends
+     * is not seven bit and all of the checks are on the seven bit characters.
+     * I.e. any check must fail on sign extension.
+     */
+    if (c < 0)
+        c += 256;
+    return os_toascii[c];
+}
+
+int ossl_fromascii(int c)
+{
+    if (c < -128 || c > 256 || c == EOF)
+        return c;
+    if (c < 0)
+        c += 256;
+    return os_toebcdic[c];
+}
+#endif
+
+int ossl_ctype_check(int c, unsigned int mask)
+{
+    const int max = sizeof(ctype_char_map) / sizeof(*ctype_char_map);
+    const int a = ossl_toascii(c);
+
+    return a >= 0 && a < max && (ctype_char_map[a] & mask) != 0;
+}
+
+#if defined(CHARSET_EBCDIC) && !defined(CHARSET_EBCDIC_TEST)
+static const int case_change = 0x40;
+#else
+static const int case_change = 0x20;
+#endif
+
+int ossl_tolower(int c)
+{
+    return ossl_isupper(c) ? c ^ case_change : c;
+}
+
+int ossl_toupper(int c)
+{
+    return ossl_islower(c) ? c ^ case_change : c;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/cversion.c b/trunk/3rdparty/openssl-1.1-fit/crypto/cversion.c
new file mode 100644
index 000000000..534e7eba5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/cversion.c
@@ -0,0 +1,44 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+
+#include "buildinf.h"
+
+unsigned long OpenSSL_version_num(void)
+{
+    return OPENSSL_VERSION_NUMBER;
+}
+
+const char *OpenSSL_version(int t)
+{
+    switch (t) {
+    case OPENSSL_VERSION:
+        return OPENSSL_VERSION_TEXT;
+    case OPENSSL_BUILT_ON:
+        return DATE;
+    case OPENSSL_CFLAGS:
+        return compiler_flags;
+    case OPENSSL_PLATFORM:
+        return PLATFORM;
+    case OPENSSL_DIR:
+#ifdef OPENSSLDIR
+        return "OPENSSLDIR: \"" OPENSSLDIR "\"";
+#else
+        return "OPENSSLDIR: N/A";
+#endif
+    case OPENSSL_ENGINES_DIR:
+#ifdef ENGINESDIR
+        return "ENGINESDIR: \"" ENGINESDIR "\"";
+#else
+        return "ENGINESDIR: N/A";
+#endif
+    }
+    return "not available";
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/crypt586.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/crypt586.pl
new file mode 100644
index 000000000..a02d18063
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/crypt586.pl
@@ -0,0 +1,217 @@
+#! /usr/bin/env perl
+# Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# The inner loop instruction sequence and the IP/FP modifications are from
+# Svend Olaf Mikkelsen
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output=pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0]);
+
+$L="edi";
+$R="esi";
+
+&external_label("DES_SPtrans");
+&fcrypt_body("fcrypt_body");
+&asm_finish();
+
+close STDOUT;
+
+sub fcrypt_body
+	{
+	local($name,$do_ip)=@_;
+
+	&function_begin($name);
+
+	&comment("");
+	&comment("Load the 2 words");
+	$trans="ebp";
+
+	&xor(	$L,	$L);
+	&xor(	$R,	$R);
+
+	# PIC-ification:-)
+	&picmeup("edx","DES_SPtrans");
+	#if ($cpp)	{ &picmeup("edx","DES_SPtrans");   }
+	#else		{ &lea("edx",&DWP("DES_SPtrans")); }
+	&push("edx");	# becomes &swtmp(1)
+	#
+	&mov($trans,&wparam(1)); # reloaded with DES_SPtrans in D_ENCRYPT
+
+	&push(&DWC(25)); # add a variable
+
+	&set_label("start");
+	for ($i=0; $i<16; $i+=2)
+		{
+		&comment("");
+		&comment("Round $i");
+		&D_ENCRYPT($i,$L,$R,$i*2,$trans,"eax","ebx","ecx","edx");
+
+		&comment("");
+		&comment("Round ".sprintf("%d",$i+1));
+		&D_ENCRYPT($i+1,$R,$L,($i+1)*2,$trans,"eax","ebx","ecx","edx");
+		}
+	 &mov("ebx",	&swtmp(0));
+	&mov("eax",	$L);
+	 &dec("ebx");
+	&mov($L,	$R);
+	 &mov($R,	"eax");
+	&mov(&swtmp(0),	"ebx");
+	 &jnz(&label("start"));
+
+	&comment("");
+	&comment("FP");
+	&mov("edx",&wparam(0));
+
+	&FP_new($R,$L,"eax",3);
+	&mov(&DWP(0,"edx","",0),"eax");
+	&mov(&DWP(4,"edx","",0),$L);
+
+	&add("esp",8);	# remove variables
+
+	&function_end($name);
+	}
+
+sub D_ENCRYPT
+	{
+	local($r,$L,$R,$S,$trans,$u,$tmp1,$tmp2,$t)=@_;
+
+	&mov(	$u,		&wparam(2));			# 2
+	&mov(	$t,		$R);
+	&shr(	$t,		16);				# 1
+	&mov(	$tmp2,		&wparam(3));			# 2
+	&xor(	$t,		$R);				# 1
+
+	&and(	$u,		$t);				# 2
+	&and(	$t,		$tmp2);				# 2
+
+	&mov(	$tmp1,		$u);
+	&shl(	$tmp1,		16); 				# 1
+	&mov(	$tmp2,		$t);
+	&shl(	$tmp2,		16); 				# 1
+	&xor(	$u,		$tmp1);				# 2
+	&xor(	$t,		$tmp2);				# 2
+	&mov(	$tmp1,		&DWP(&n2a($S*4),$trans,"",0));	# 2
+	&xor(	$u,		$tmp1);
+	&mov(	$tmp2,		&DWP(&n2a(($S+1)*4),$trans,"",0));	# 2
+	&xor(	$u,		$R);
+	&xor(	$t,		$R);
+	&xor(	$t,		$tmp2);
+
+	&and(	$u,		"0xfcfcfcfc"	);		# 2
+	&xor(	$tmp1,		$tmp1);				# 1
+	&and(	$t,		"0xcfcfcfcf"	);		# 2
+	&xor(	$tmp2,		$tmp2);
+	&movb(	&LB($tmp1),	&LB($u)	);
+	&movb(	&LB($tmp2),	&HB($u)	);
+	&rotr(	$t,		4		);
+	&mov(	$trans,		&swtmp(1));
+	&xor(	$L,		&DWP("     ",$trans,$tmp1,0));
+	&movb(	&LB($tmp1),	&LB($t)	);
+	&xor(	$L,		&DWP("0x200",$trans,$tmp2,0));
+	&movb(	&LB($tmp2),	&HB($t)	);
+	&shr(	$u,		16);
+	&xor(	$L,		&DWP("0x100",$trans,$tmp1,0));
+	&movb(	&LB($tmp1),	&HB($u)	);
+	&shr(	$t,		16);
+	&xor(	$L,		&DWP("0x300",$trans,$tmp2,0));
+	&movb(	&LB($tmp2),	&HB($t)	);
+	&and(	$u,		"0xff"	);
+	&and(	$t,		"0xff"	);
+	&mov(	$tmp1,		&DWP("0x600",$trans,$tmp1,0));
+	&xor(	$L,		$tmp1);
+	&mov(	$tmp1,		&DWP("0x700",$trans,$tmp2,0));
+	&xor(	$L,		$tmp1);
+	&mov(	$tmp1,		&DWP("0x400",$trans,$u,0));
+	&xor(	$L,		$tmp1);
+	&mov(	$tmp1,		&DWP("0x500",$trans,$t,0));
+	&xor(	$L,		$tmp1);
+	&mov(	$trans,		&wparam(1));
+	}
+
+sub n2a
+	{
+	sprintf("%d",$_[0]);
+	}
+
+# now has a side affect of rotating $a by $shift
+sub R_PERM_OP
+	{
+	local($a,$b,$tt,$shift,$mask,$last)=@_;
+
+	&rotl(	$a,		$shift		) if ($shift != 0);
+	&mov(	$tt,		$a		);
+	&xor(	$a,		$b		);
+	&and(	$a,		$mask		);
+	if ($notlast eq $b)
+		{
+		&xor(	$b,		$a		);
+		&xor(	$tt,		$a		);
+		}
+	else
+		{
+		&xor(	$tt,		$a		);
+		&xor(	$b,		$a		);
+		}
+	&comment("");
+	}
+
+sub IP_new
+	{
+	local($l,$r,$tt,$lr)=@_;
+
+	&R_PERM_OP($l,$r,$tt, 4,"0xf0f0f0f0",$l);
+	&R_PERM_OP($r,$tt,$l,20,"0xfff0000f",$l);
+	&R_PERM_OP($l,$tt,$r,14,"0x33333333",$r);
+	&R_PERM_OP($tt,$r,$l,22,"0x03fc03fc",$r);
+	&R_PERM_OP($l,$r,$tt, 9,"0xaaaaaaaa",$r);
+
+	if ($lr != 3)
+		{
+		if (($lr-3) < 0)
+			{ &rotr($tt,	3-$lr); }
+		else	{ &rotl($tt,	$lr-3); }
+		}
+	if ($lr != 2)
+		{
+		if (($lr-2) < 0)
+			{ &rotr($r,	2-$lr); }
+		else	{ &rotl($r,	$lr-2); }
+		}
+	}
+
+sub FP_new
+	{
+	local($l,$r,$tt,$lr)=@_;
+
+	if ($lr != 2)
+		{
+		if (($lr-2) < 0)
+			{ &rotl($r,	2-$lr); }
+		else	{ &rotr($r,	$lr-2); }
+		}
+	if ($lr != 3)
+		{
+		if (($lr-3) < 0)
+			{ &rotl($l,	3-$lr); }
+		else	{ &rotr($l,	$lr-3); }
+		}
+
+	&R_PERM_OP($l,$r,$tt, 0,"0xaaaaaaaa",$r);
+	&R_PERM_OP($tt,$r,$l,23,"0x03fc03fc",$r);
+	&R_PERM_OP($l,$r,$tt,10,"0x33333333",$l);
+	&R_PERM_OP($r,$tt,$l,18,"0xfff0000f",$l);
+	&R_PERM_OP($l,$tt,$r,12,"0xf0f0f0f0",$r);
+	&rotr($tt	, 4);
+	}
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/des-586.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/des-586.pl
new file mode 100644
index 000000000..2bcc54ef2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/des-586.pl
@@ -0,0 +1,465 @@
+#! /usr/bin/env perl
+# Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# The inner loop instruction sequence and the IP/FP modifications are from
+# Svend Olaf Mikkelsen.
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+require "cbc.pl";
+require "desboth.pl";
+
+# base code is in Microsoft
+# op dest, source
+# format.
+#
+
+$output=pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0]);
+
+$L="edi";
+$R="esi";
+$trans="ebp";
+$small_footprint=1 if (grep(/\-DOPENSSL_SMALL_FOOTPRINT/,@ARGV));
+# one can discuss setting this variable to 1 unconditionally, as
+# the folded loop is only 3% slower than unrolled, but >7 times smaller
+
+&public_label("DES_SPtrans");
+&static_label("des_sptrans");
+
+&DES_encrypt_internal();
+&DES_decrypt_internal();
+&DES_encrypt("DES_encrypt1",1);
+&DES_encrypt("DES_encrypt2",0);
+&DES_encrypt3("DES_encrypt3",1);
+&DES_encrypt3("DES_decrypt3",0);
+&cbc("DES_ncbc_encrypt","DES_encrypt1","DES_encrypt1",0,4,5,3,5,-1);
+&cbc("DES_ede3_cbc_encrypt","DES_encrypt3","DES_decrypt3",0,6,7,3,4,5);
+&DES_SPtrans();
+
+&asm_finish();
+
+close STDOUT;
+
+sub DES_encrypt_internal()
+	{
+	&function_begin_B("_x86_DES_encrypt");
+
+	if ($small_footprint)
+	    {
+	    &lea("edx",&DWP(128,"ecx"));
+	    &push("edx");
+	    &push("ecx");
+	    &set_label("eloop");
+		&D_ENCRYPT(0,$L,$R,0,$trans,"eax","ebx","ecx","edx",&swtmp(0));
+		&comment("");
+		&D_ENCRYPT(1,$R,$L,2,$trans,"eax","ebx","ecx","edx",&swtmp(0));
+		&comment("");
+		&add("ecx",16);
+		&cmp("ecx",&swtmp(1));
+		&mov(&swtmp(0),"ecx");
+		&jb(&label("eloop"));
+	    &add("esp",8);
+	    }
+	else
+	    {
+	    &push("ecx");
+	    for ($i=0; $i<16; $i+=2)
+		{
+		&comment("Round $i");
+		&D_ENCRYPT($i,$L,$R,$i*2,$trans,"eax","ebx","ecx","edx",&swtmp(0));
+		&comment("Round ".sprintf("%d",$i+1));
+		&D_ENCRYPT($i+1,$R,$L,($i+1)*2,$trans,"eax","ebx","ecx","edx",&swtmp(0));
+		}
+	    &add("esp",4);
+	}
+	&ret();
+
+	&function_end_B("_x86_DES_encrypt");
+	}
+
+sub DES_decrypt_internal()
+	{
+	&function_begin_B("_x86_DES_decrypt");
+
+	if ($small_footprint)
+	    {
+	    &push("ecx");
+	    &lea("ecx",&DWP(128,"ecx"));
+	    &push("ecx");
+	    &set_label("dloop");
+		&D_ENCRYPT(0,$L,$R,-2,$trans,"eax","ebx","ecx","edx",&swtmp(0));
+		&comment("");
+		&D_ENCRYPT(1,$R,$L,-4,$trans,"eax","ebx","ecx","edx",&swtmp(0));
+		&comment("");
+		&sub("ecx",16);
+		&cmp("ecx",&swtmp(1));
+		&mov(&swtmp(0),"ecx");
+		&ja(&label("dloop"));
+	    &add("esp",8);
+	    }
+	else
+	    {
+	    &push("ecx");
+	    for ($i=15; $i>0; $i-=2)
+		{
+		&comment("Round $i");
+		&D_ENCRYPT(15-$i,$L,$R,$i*2,$trans,"eax","ebx","ecx","edx",&swtmp(0));
+		&comment("Round ".sprintf("%d",$i-1));
+		&D_ENCRYPT(15-$i+1,$R,$L,($i-1)*2,$trans,"eax","ebx","ecx","edx",&swtmp(0));
+		}
+	    &add("esp",4);
+	    }
+	&ret();
+
+	&function_end_B("_x86_DES_decrypt");
+	}
+
+sub DES_encrypt
+	{
+	local($name,$do_ip)=@_;
+
+	&function_begin_B($name);
+
+	&push("esi");
+	&push("edi");
+
+	&comment("");
+	&comment("Load the 2 words");
+
+	if ($do_ip)
+		{
+		&mov($R,&wparam(0));
+		 &xor(	"ecx",		"ecx"		);
+
+		&push("ebx");
+		&push("ebp");
+
+		&mov("eax",&DWP(0,$R,"",0));
+		 &mov("ebx",&wparam(2));	# get encrypt flag
+		&mov($L,&DWP(4,$R,"",0));
+		&comment("");
+		&comment("IP");
+		&IP_new("eax",$L,$R,3);
+		}
+	else
+		{
+		&mov("eax",&wparam(0));
+		 &xor(	"ecx",		"ecx"		);
+
+		&push("ebx");
+		&push("ebp");
+
+		&mov($R,&DWP(0,"eax","",0));
+		 &mov("ebx",&wparam(2));	# get encrypt flag
+		&rotl($R,3);
+		&mov($L,&DWP(4,"eax","",0));
+		&rotl($L,3);
+		}
+
+	# PIC-ification:-)
+	&call	(&label("pic_point"));
+	&set_label("pic_point");
+	&blindpop($trans);
+	&lea	($trans,&DWP(&label("des_sptrans")."-".&label("pic_point"),$trans));
+
+	&mov(	"ecx",	&wparam(1)	);
+
+	&cmp("ebx","0");
+	&je(&label("decrypt"));
+	&call("_x86_DES_encrypt");
+	&jmp(&label("done"));
+	&set_label("decrypt");
+	&call("_x86_DES_decrypt");
+	&set_label("done");
+
+	if ($do_ip)
+		{
+		&comment("");
+		&comment("FP");
+		&mov("edx",&wparam(0));
+		&FP_new($L,$R,"eax",3);
+
+		&mov(&DWP(0,"edx","",0),"eax");
+		&mov(&DWP(4,"edx","",0),$R);
+		}
+	else
+		{
+		&comment("");
+		&comment("Fixup");
+		&rotr($L,3);		# r
+		 &mov("eax",&wparam(0));
+		&rotr($R,3);		# l
+		 &mov(&DWP(0,"eax","",0),$L);
+		 &mov(&DWP(4,"eax","",0),$R);
+		}
+
+	&pop("ebp");
+	&pop("ebx");
+	&pop("edi");
+	&pop("esi");
+	&ret();
+
+	&function_end_B($name);
+	}
+
+sub D_ENCRYPT
+	{
+	local($r,$L,$R,$S,$trans,$u,$tmp1,$tmp2,$t,$wp1)=@_;
+
+	 &mov(	$u,		&DWP(&n2a($S*4),$tmp2,"",0));
+	&xor(	$tmp1,		$tmp1);
+	 &mov(	$t,		&DWP(&n2a(($S+1)*4),$tmp2,"",0));
+	&xor(	$u,		$R);
+	&xor(	$tmp2,		$tmp2);
+	 &xor(	$t,		$R);
+	&and(	$u,		"0xfcfcfcfc"	);
+	 &and(	$t,		"0xcfcfcfcf"	);
+	&movb(	&LB($tmp1),	&LB($u)	);
+	 &movb(	&LB($tmp2),	&HB($u)	);
+	&rotr(	$t,		4		);
+	&xor(	$L,		&DWP("     ",$trans,$tmp1,0));
+	 &movb(	&LB($tmp1),	&LB($t)	);
+	 &xor(	$L,		&DWP("0x200",$trans,$tmp2,0));
+	 &movb(	&LB($tmp2),	&HB($t)	);
+	&shr(	$u,		16);
+	 &xor(	$L,		&DWP("0x100",$trans,$tmp1,0));
+	 &movb(	&LB($tmp1),	&HB($u)	);
+	&shr(	$t,		16);
+	 &xor(	$L,		&DWP("0x300",$trans,$tmp2,0));
+	&movb(	&LB($tmp2),	&HB($t)	);
+	 &and(	$u,		"0xff"	);
+	&and(	$t,		"0xff"	);
+	 &xor(	$L,		&DWP("0x600",$trans,$tmp1,0));
+	 &xor(	$L,		&DWP("0x700",$trans,$tmp2,0));
+	&mov(	$tmp2,		$wp1	);
+	 &xor(	$L,		&DWP("0x400",$trans,$u,0));
+	 &xor(	$L,		&DWP("0x500",$trans,$t,0));
+	}
+
+sub n2a
+	{
+	sprintf("%d",$_[0]);
+	}
+
+# now has a side affect of rotating $a by $shift
+sub R_PERM_OP
+	{
+	local($a,$b,$tt,$shift,$mask,$last)=@_;
+
+	&rotl(	$a,		$shift		) if ($shift != 0);
+	&mov(	$tt,		$a		);
+	&xor(	$a,		$b		);
+	&and(	$a,		$mask		);
+	# This can never succeed, and besides it is difficult to see what the
+	# idea was - Ben 13 Feb 99
+	if (!$last eq $b)
+		{
+		&xor(	$b,		$a		);
+		&xor(	$tt,		$a		);
+		}
+	else
+		{
+		&xor(	$tt,		$a		);
+		&xor(	$b,		$a		);
+		}
+	&comment("");
+	}
+
+sub IP_new
+	{
+	local($l,$r,$tt,$lr)=@_;
+
+	&R_PERM_OP($l,$r,$tt, 4,"0xf0f0f0f0",$l);
+	&R_PERM_OP($r,$tt,$l,20,"0xfff0000f",$l);
+	&R_PERM_OP($l,$tt,$r,14,"0x33333333",$r);
+	&R_PERM_OP($tt,$r,$l,22,"0x03fc03fc",$r);
+	&R_PERM_OP($l,$r,$tt, 9,"0xaaaaaaaa",$r);
+
+	if ($lr != 3)
+		{
+		if (($lr-3) < 0)
+			{ &rotr($tt,	3-$lr); }
+		else	{ &rotl($tt,	$lr-3); }
+		}
+	if ($lr != 2)
+		{
+		if (($lr-2) < 0)
+			{ &rotr($r,	2-$lr); }
+		else	{ &rotl($r,	$lr-2); }
+		}
+	}
+
+sub FP_new
+	{
+	local($l,$r,$tt,$lr)=@_;
+
+	if ($lr != 2)
+		{
+		if (($lr-2) < 0)
+			{ &rotl($r,	2-$lr); }
+		else	{ &rotr($r,	$lr-2); }
+		}
+	if ($lr != 3)
+		{
+		if (($lr-3) < 0)
+			{ &rotl($l,	3-$lr); }
+		else	{ &rotr($l,	$lr-3); }
+		}
+
+	&R_PERM_OP($l,$r,$tt, 0,"0xaaaaaaaa",$r);
+	&R_PERM_OP($tt,$r,$l,23,"0x03fc03fc",$r);
+	&R_PERM_OP($l,$r,$tt,10,"0x33333333",$l);
+	&R_PERM_OP($r,$tt,$l,18,"0xfff0000f",$l);
+	&R_PERM_OP($l,$tt,$r,12,"0xf0f0f0f0",$r);
+	&rotr($tt	, 4);
+	}
+
+sub DES_SPtrans
+	{
+	&set_label("DES_SPtrans",64);
+	&set_label("des_sptrans");
+	&data_word(0x02080800, 0x00080000, 0x02000002, 0x02080802);
+	&data_word(0x02000000, 0x00080802, 0x00080002, 0x02000002);
+	&data_word(0x00080802, 0x02080800, 0x02080000, 0x00000802);
+	&data_word(0x02000802, 0x02000000, 0x00000000, 0x00080002);
+	&data_word(0x00080000, 0x00000002, 0x02000800, 0x00080800);
+	&data_word(0x02080802, 0x02080000, 0x00000802, 0x02000800);
+	&data_word(0x00000002, 0x00000800, 0x00080800, 0x02080002);
+	&data_word(0x00000800, 0x02000802, 0x02080002, 0x00000000);
+	&data_word(0x00000000, 0x02080802, 0x02000800, 0x00080002);
+	&data_word(0x02080800, 0x00080000, 0x00000802, 0x02000800);
+	&data_word(0x02080002, 0x00000800, 0x00080800, 0x02000002);
+	&data_word(0x00080802, 0x00000002, 0x02000002, 0x02080000);
+	&data_word(0x02080802, 0x00080800, 0x02080000, 0x02000802);
+	&data_word(0x02000000, 0x00000802, 0x00080002, 0x00000000);
+	&data_word(0x00080000, 0x02000000, 0x02000802, 0x02080800);
+	&data_word(0x00000002, 0x02080002, 0x00000800, 0x00080802);
+	# nibble 1
+	&data_word(0x40108010, 0x00000000, 0x00108000, 0x40100000);
+	&data_word(0x40000010, 0x00008010, 0x40008000, 0x00108000);
+	&data_word(0x00008000, 0x40100010, 0x00000010, 0x40008000);
+	&data_word(0x00100010, 0x40108000, 0x40100000, 0x00000010);
+	&data_word(0x00100000, 0x40008010, 0x40100010, 0x00008000);
+	&data_word(0x00108010, 0x40000000, 0x00000000, 0x00100010);
+	&data_word(0x40008010, 0x00108010, 0x40108000, 0x40000010);
+	&data_word(0x40000000, 0x00100000, 0x00008010, 0x40108010);
+	&data_word(0x00100010, 0x40108000, 0x40008000, 0x00108010);
+	&data_word(0x40108010, 0x00100010, 0x40000010, 0x00000000);
+	&data_word(0x40000000, 0x00008010, 0x00100000, 0x40100010);
+	&data_word(0x00008000, 0x40000000, 0x00108010, 0x40008010);
+	&data_word(0x40108000, 0x00008000, 0x00000000, 0x40000010);
+	&data_word(0x00000010, 0x40108010, 0x00108000, 0x40100000);
+	&data_word(0x40100010, 0x00100000, 0x00008010, 0x40008000);
+	&data_word(0x40008010, 0x00000010, 0x40100000, 0x00108000);
+	# nibble 2
+	&data_word(0x04000001, 0x04040100, 0x00000100, 0x04000101);
+	&data_word(0x00040001, 0x04000000, 0x04000101, 0x00040100);
+	&data_word(0x04000100, 0x00040000, 0x04040000, 0x00000001);
+	&data_word(0x04040101, 0x00000101, 0x00000001, 0x04040001);
+	&data_word(0x00000000, 0x00040001, 0x04040100, 0x00000100);
+	&data_word(0x00000101, 0x04040101, 0x00040000, 0x04000001);
+	&data_word(0x04040001, 0x04000100, 0x00040101, 0x04040000);
+	&data_word(0x00040100, 0x00000000, 0x04000000, 0x00040101);
+	&data_word(0x04040100, 0x00000100, 0x00000001, 0x00040000);
+	&data_word(0x00000101, 0x00040001, 0x04040000, 0x04000101);
+	&data_word(0x00000000, 0x04040100, 0x00040100, 0x04040001);
+	&data_word(0x00040001, 0x04000000, 0x04040101, 0x00000001);
+	&data_word(0x00040101, 0x04000001, 0x04000000, 0x04040101);
+	&data_word(0x00040000, 0x04000100, 0x04000101, 0x00040100);
+	&data_word(0x04000100, 0x00000000, 0x04040001, 0x00000101);
+	&data_word(0x04000001, 0x00040101, 0x00000100, 0x04040000);
+	# nibble 3
+	&data_word(0x00401008, 0x10001000, 0x00000008, 0x10401008);
+	&data_word(0x00000000, 0x10400000, 0x10001008, 0x00400008);
+	&data_word(0x10401000, 0x10000008, 0x10000000, 0x00001008);
+	&data_word(0x10000008, 0x00401008, 0x00400000, 0x10000000);
+	&data_word(0x10400008, 0x00401000, 0x00001000, 0x00000008);
+	&data_word(0x00401000, 0x10001008, 0x10400000, 0x00001000);
+	&data_word(0x00001008, 0x00000000, 0x00400008, 0x10401000);
+	&data_word(0x10001000, 0x10400008, 0x10401008, 0x00400000);
+	&data_word(0x10400008, 0x00001008, 0x00400000, 0x10000008);
+	&data_word(0x00401000, 0x10001000, 0x00000008, 0x10400000);
+	&data_word(0x10001008, 0x00000000, 0x00001000, 0x00400008);
+	&data_word(0x00000000, 0x10400008, 0x10401000, 0x00001000);
+	&data_word(0x10000000, 0x10401008, 0x00401008, 0x00400000);
+	&data_word(0x10401008, 0x00000008, 0x10001000, 0x00401008);
+	&data_word(0x00400008, 0x00401000, 0x10400000, 0x10001008);
+	&data_word(0x00001008, 0x10000000, 0x10000008, 0x10401000);
+	# nibble 4
+	&data_word(0x08000000, 0x00010000, 0x00000400, 0x08010420);
+	&data_word(0x08010020, 0x08000400, 0x00010420, 0x08010000);
+	&data_word(0x00010000, 0x00000020, 0x08000020, 0x00010400);
+	&data_word(0x08000420, 0x08010020, 0x08010400, 0x00000000);
+	&data_word(0x00010400, 0x08000000, 0x00010020, 0x00000420);
+	&data_word(0x08000400, 0x00010420, 0x00000000, 0x08000020);
+	&data_word(0x00000020, 0x08000420, 0x08010420, 0x00010020);
+	&data_word(0x08010000, 0x00000400, 0x00000420, 0x08010400);
+	&data_word(0x08010400, 0x08000420, 0x00010020, 0x08010000);
+	&data_word(0x00010000, 0x00000020, 0x08000020, 0x08000400);
+	&data_word(0x08000000, 0x00010400, 0x08010420, 0x00000000);
+	&data_word(0x00010420, 0x08000000, 0x00000400, 0x00010020);
+	&data_word(0x08000420, 0x00000400, 0x00000000, 0x08010420);
+	&data_word(0x08010020, 0x08010400, 0x00000420, 0x00010000);
+	&data_word(0x00010400, 0x08010020, 0x08000400, 0x00000420);
+	&data_word(0x00000020, 0x00010420, 0x08010000, 0x08000020);
+	# nibble 5
+	&data_word(0x80000040, 0x00200040, 0x00000000, 0x80202000);
+	&data_word(0x00200040, 0x00002000, 0x80002040, 0x00200000);
+	&data_word(0x00002040, 0x80202040, 0x00202000, 0x80000000);
+	&data_word(0x80002000, 0x80000040, 0x80200000, 0x00202040);
+	&data_word(0x00200000, 0x80002040, 0x80200040, 0x00000000);
+	&data_word(0x00002000, 0x00000040, 0x80202000, 0x80200040);
+	&data_word(0x80202040, 0x80200000, 0x80000000, 0x00002040);
+	&data_word(0x00000040, 0x00202000, 0x00202040, 0x80002000);
+	&data_word(0x00002040, 0x80000000, 0x80002000, 0x00202040);
+	&data_word(0x80202000, 0x00200040, 0x00000000, 0x80002000);
+	&data_word(0x80000000, 0x00002000, 0x80200040, 0x00200000);
+	&data_word(0x00200040, 0x80202040, 0x00202000, 0x00000040);
+	&data_word(0x80202040, 0x00202000, 0x00200000, 0x80002040);
+	&data_word(0x80000040, 0x80200000, 0x00202040, 0x00000000);
+	&data_word(0x00002000, 0x80000040, 0x80002040, 0x80202000);
+	&data_word(0x80200000, 0x00002040, 0x00000040, 0x80200040);
+	# nibble 6
+	&data_word(0x00004000, 0x00000200, 0x01000200, 0x01000004);
+	&data_word(0x01004204, 0x00004004, 0x00004200, 0x00000000);
+	&data_word(0x01000000, 0x01000204, 0x00000204, 0x01004000);
+	&data_word(0x00000004, 0x01004200, 0x01004000, 0x00000204);
+	&data_word(0x01000204, 0x00004000, 0x00004004, 0x01004204);
+	&data_word(0x00000000, 0x01000200, 0x01000004, 0x00004200);
+	&data_word(0x01004004, 0x00004204, 0x01004200, 0x00000004);
+	&data_word(0x00004204, 0x01004004, 0x00000200, 0x01000000);
+	&data_word(0x00004204, 0x01004000, 0x01004004, 0x00000204);
+	&data_word(0x00004000, 0x00000200, 0x01000000, 0x01004004);
+	&data_word(0x01000204, 0x00004204, 0x00004200, 0x00000000);
+	&data_word(0x00000200, 0x01000004, 0x00000004, 0x01000200);
+	&data_word(0x00000000, 0x01000204, 0x01000200, 0x00004200);
+	&data_word(0x00000204, 0x00004000, 0x01004204, 0x01000000);
+	&data_word(0x01004200, 0x00000004, 0x00004004, 0x01004204);
+	&data_word(0x01000004, 0x01004200, 0x01004000, 0x00004004);
+	# nibble 7
+	&data_word(0x20800080, 0x20820000, 0x00020080, 0x00000000);
+	&data_word(0x20020000, 0x00800080, 0x20800000, 0x20820080);
+	&data_word(0x00000080, 0x20000000, 0x00820000, 0x00020080);
+	&data_word(0x00820080, 0x20020080, 0x20000080, 0x20800000);
+	&data_word(0x00020000, 0x00820080, 0x00800080, 0x20020000);
+	&data_word(0x20820080, 0x20000080, 0x00000000, 0x00820000);
+	&data_word(0x20000000, 0x00800000, 0x20020080, 0x20800080);
+	&data_word(0x00800000, 0x00020000, 0x20820000, 0x00000080);
+	&data_word(0x00800000, 0x00020000, 0x20000080, 0x20820080);
+	&data_word(0x00020080, 0x20000000, 0x00000000, 0x00820000);
+	&data_word(0x20800080, 0x20020080, 0x20020000, 0x00800080);
+	&data_word(0x20820000, 0x00000080, 0x00800080, 0x20020000);
+	&data_word(0x20820080, 0x00800000, 0x20800000, 0x20000080);
+	&data_word(0x00820000, 0x00020080, 0x20020080, 0x20800000);
+	&data_word(0x00000080, 0x20820000, 0x00820080, 0x00000000);
+	&data_word(0x20000000, 0x20800080, 0x00020000, 0x00820080);
+	}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/des_enc.m4 b/trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/des_enc.m4
new file mode 100644
index 000000000..4ada97b17
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/des_enc.m4
@@ -0,0 +1,1968 @@
+! Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved.
+!
+! Licensed under the OpenSSL license (the "License").  You may not use
+! this file except in compliance with the License.  You can obtain a copy
+! in the file LICENSE in the source distribution or at
+! https://www.openssl.org/source/license.html
+!
+!  To expand the m4 macros: m4 -B 8192 des_enc.m4 > des_enc.S
+!
+!  Global registers 1 to 5 are used. This is the same as done by the
+!  cc compiler. The UltraSPARC load/store little endian feature is used.
+!
+!  Instruction grouping often refers to one CPU cycle.
+!
+!  Assemble through gcc: gcc -c -mcpu=ultrasparc -o des_enc.o des_enc.S
+!
+!  Assemble through cc:  cc -c -xarch=v8plusa -o des_enc.o des_enc.S
+!
+!  Performance improvement according to './apps/openssl speed des'
+!
+!	32-bit build:
+!		23%  faster than cc-5.2 -xarch=v8plus -xO5
+!		115% faster than gcc-3.2.1 -m32 -mcpu=ultrasparc -O5
+!	64-bit build:
+!		50%  faster than cc-5.2 -xarch=v9 -xO5
+!		100% faster than gcc-3.2.1 -m64 -mcpu=ultrasparc -O5
+!
+
+.ident "des_enc.m4 2.1"
+.file  "des_enc-sparc.S"
+
+#include <openssl/opensslconf.h>
+
+#if defined(__SUNPRO_C) && defined(__sparcv9)
+# define ABI64  /* They've said -xarch=v9 at command line */
+#elif defined(__GNUC__) && defined(__arch64__)
+# define ABI64  /* They've said -m64 at command line */
+#endif
+
+#ifdef ABI64
+  .register	%g2,#scratch
+  .register	%g3,#scratch
+# define	FRAME	-192
+# define	BIAS	2047
+# define	LDPTR	ldx
+# define	STPTR	stx
+# define	ARG0	128
+# define	ARGSZ	8
+#else
+# define	FRAME	-96
+# define	BIAS	0
+# define	LDPTR	ld
+# define	STPTR	st
+# define	ARG0	68
+# define	ARGSZ	4
+#endif
+
+#define LOOPS 7
+
+#define global0 %g0
+#define global1 %g1
+#define global2 %g2
+#define global3 %g3
+#define global4 %g4
+#define global5 %g5
+
+#define local0 %l0
+#define local1 %l1
+#define local2 %l2
+#define local3 %l3
+#define local4 %l4
+#define local5 %l5
+#define local7 %l6
+#define local6 %l7
+
+#define in0 %i0
+#define in1 %i1
+#define in2 %i2
+#define in3 %i3
+#define in4 %i4
+#define in5 %i5
+#define in6 %i6
+#define in7 %i7
+
+#define out0 %o0
+#define out1 %o1
+#define out2 %o2
+#define out3 %o3
+#define out4 %o4
+#define out5 %o5
+#define out6 %o6
+#define out7 %o7
+
+#define stub stb
+
+changequote({,})
+
+
+! Macro definitions:
+
+
+! {ip_macro}
+!
+! The logic used in initial and final permutations is the same as in
+! the C code. The permutations are done with a clever shift, xor, and
+! technique.
+!
+! The macro also loads address sbox 1 to 5 to global 1 to 5, address
+! sbox 6 to local6, and addres sbox 8 to out3.
+!
+! Rotates the halfs 3 left to bring the sbox bits in convenient positions.
+!
+! Loads key first round from address in parameter 5 to out0, out1.
+!
+! After the original LibDES initial permutation, the resulting left
+! is in the variable initially used for right and vice versa. The macro
+! implements the possibility to keep the halfs in the original registers.
+!
+! parameter 1  left
+! parameter 2  right
+! parameter 3  result left (modify in first round)
+! parameter 4  result right (use in first round)
+! parameter 5  key address
+! parameter 6  1/2 for include encryption/decryption
+! parameter 7  1 for move in1 to in3
+! parameter 8  1 for move in3 to in4, 2 for move in4 to in3
+! parameter 9  1 for load ks3 and ks2 to in4 and in3
+
+define(ip_macro, {
+
+! {ip_macro}
+! $1 $2 $4 $3 $5 $6 $7 $8 $9
+
+	ld	[out2+256], local1
+	srl	$2, 4, local4
+
+	xor	local4, $1, local4
+	ifelse($7,1,{mov in1, in3},{nop})
+
+	ld	[out2+260], local2
+	and	local4, local1, local4
+	ifelse($8,1,{mov in3, in4},{})
+	ifelse($8,2,{mov in4, in3},{})
+
+	ld	[out2+280], out4          ! loop counter
+	sll	local4, 4, local1
+	xor	$1, local4, $1
+
+	ld	[out2+264], local3
+	srl	$1, 16, local4
+	xor	$2, local1, $2
+
+	ifelse($9,1,{LDPTR	KS3, in4},{})
+	xor	local4, $2, local4
+	nop	!sethi	%hi(DES_SPtrans), global1 ! sbox addr
+
+	ifelse($9,1,{LDPTR	KS2, in3},{})
+	and	local4, local2, local4
+	nop	!or	global1, %lo(DES_SPtrans), global1   ! sbox addr
+
+	sll	local4, 16, local1
+	xor	$2, local4, $2
+
+	srl	$2, 2, local4
+	xor	$1, local1, $1
+
+	sethi	%hi(16711680), local5
+	xor	local4, $1, local4
+
+	and	local4, local3, local4
+	or	local5, 255, local5
+
+	sll	local4, 2, local2
+	xor	$1, local4, $1
+
+	srl	$1, 8, local4
+	xor	$2, local2, $2
+
+	xor	local4, $2, local4
+	add	global1, 768, global4
+
+	and	local4, local5, local4
+	add	global1, 1024, global5
+
+	ld	[out2+272], local7
+	sll	local4, 8, local1
+	xor	$2, local4, $2
+
+	srl	$2, 1, local4
+	xor	$1, local1, $1
+
+	ld	[$5], out0                ! key 7531
+	xor	local4, $1, local4
+	add	global1, 256, global2
+
+	ld	[$5+4], out1              ! key 8642
+	and	local4, local7, local4
+	add	global1, 512, global3
+
+	sll	local4, 1, local1
+	xor	$1, local4, $1
+
+	sll	$1, 3, local3
+	xor	$2, local1, $2
+
+	sll	$2, 3, local2
+	add	global1, 1280, local6     ! address sbox 8
+
+	srl	$1, 29, local4
+	add	global1, 1792, out3       ! address sbox 8
+
+	srl	$2, 29, local1
+	or	local4, local3, $4
+
+	or	local2, local1, $3
+
+	ifelse($6, 1, {
+
+		ld	[out2+284], local5     ! 0x0000FC00 used in the rounds
+		or	local2, local1, $3
+		xor	$4, out0, local1
+
+		call .des_enc.1
+		and	local1, 252, local1
+
+	},{})
+
+	ifelse($6, 2, {
+
+		ld	[out2+284], local5     ! 0x0000FC00 used in the rounds
+		or	local2, local1, $3
+		xor	$4, out0, local1
+
+		call .des_dec.1
+		and	local1, 252, local1
+
+	},{})
+})
+
+
+! {rounds_macro}
+!
+! The logic used in the DES rounds is the same as in the C code,
+! except that calculations for sbox 1 and sbox 5 begin before
+! the previous round is finished.
+!
+! In each round one half (work) is modified based on key and the
+! other half (use).
+!
+! In this version we do two rounds in a loop repeated 7 times
+! and two rounds separately.
+!
+! One half has the bits for the sboxes in the following positions:
+!
+!	777777xx555555xx333333xx111111xx
+!
+!	88xx666666xx444444xx222222xx8888
+!
+! The bits for each sbox are xor-ed with the key bits for that box.
+! The above xx bits are cleared, and the result used for lookup in
+! the sbox table. Each sbox entry contains the 4 output bits permuted
+! into 32 bits according to the P permutation.
+!
+! In the description of DES, left and right are switched after
+! each round, except after last round. In this code the original
+! left and right are kept in the same register in all rounds, meaning
+! that after the 16 rounds the result for right is in the register
+! originally used for left.
+!
+! parameter 1  first work (left in first round)
+! parameter 2  first use (right in first round)
+! parameter 3  enc/dec  1/-1
+! parameter 4  loop label
+! parameter 5  key address register
+! parameter 6  optional address for key next encryption/decryption
+! parameter 7  not empty for include retl
+!
+! also compares in2 to 8
+
+define(rounds_macro, {
+
+! {rounds_macro}
+! $1 $2 $3 $4 $5 $6 $7 $8 $9
+
+	xor	$2, out0, local1
+
+	ld	[out2+284], local5        ! 0x0000FC00
+	ba	$4
+	and	local1, 252, local1
+
+	.align 32
+
+$4:
+	! local6 is address sbox 6
+	! out3   is address sbox 8
+	! out4   is loop counter
+
+	ld	[global1+local1], local1
+	xor	$2, out1, out1            ! 8642
+	xor	$2, out0, out0            ! 7531
+	! fmovs	%f0, %f0                  ! fxor used for alignment
+
+	srl	out1, 4, local0           ! rotate 4 right
+	and	out0, local5, local3      ! 3
+	! fmovs	%f0, %f0
+
+	ld	[$5+$3*8], local7         ! key 7531 next round
+	srl	local3, 8, local3         ! 3
+	and	local0, 252, local2       ! 2
+	! fmovs	%f0, %f0
+
+	ld	[global3+local3],local3   ! 3
+	sll	out1, 28, out1            ! rotate
+	xor	$1, local1, $1            ! 1 finished, local1 now sbox 7
+
+	ld	[global2+local2], local2  ! 2
+	srl	out0, 24, local1          ! 7
+	or	out1, local0, out1        ! rotate
+
+	ldub	[out2+local1], local1     ! 7 (and 0xFC)
+	srl	out1, 24, local0          ! 8
+	and	out1, local5, local4      ! 4
+
+	ldub	[out2+local0], local0     ! 8 (and 0xFC)
+	srl	local4, 8, local4         ! 4
+	xor	$1, local2, $1            ! 2 finished local2 now sbox 6
+
+	ld	[global4+local4],local4   ! 4
+	srl	out1, 16, local2          ! 6
+	xor	$1, local3, $1            ! 3 finished local3 now sbox 5
+
+	ld	[out3+local0],local0      ! 8
+	and	local2, 252, local2       ! 6
+	add	global1, 1536, local5     ! address sbox 7
+
+	ld	[local6+local2], local2   ! 6
+	srl	out0, 16, local3          ! 5
+	xor	$1, local4, $1            ! 4 finished
+
+	ld	[local5+local1],local1    ! 7
+	and	local3, 252, local3       ! 5
+	xor	$1, local0, $1            ! 8 finished
+
+	ld	[global5+local3],local3   ! 5
+	xor	$1, local2, $1            ! 6 finished
+	subcc	out4, 1, out4
+
+	ld	[$5+$3*8+4], out0         ! key 8642 next round
+	xor	$1, local7, local2        ! sbox 5 next round
+	xor	$1, local1, $1            ! 7 finished
+
+	srl	local2, 16, local2        ! sbox 5 next round
+	xor	$1, local3, $1            ! 5 finished
+
+	ld	[$5+$3*16+4], out1        ! key 8642 next round again
+	and	local2, 252, local2       ! sbox5 next round
+! next round
+	xor	$1, local7, local7        ! 7531
+
+	ld	[global5+local2], local2  ! 5
+	srl	local7, 24, local3        ! 7
+	xor	$1, out0, out0            ! 8642
+
+	ldub	[out2+local3], local3     ! 7 (and 0xFC)
+	srl	out0, 4, local0           ! rotate 4 right
+	and	local7, 252, local1       ! 1
+
+	sll	out0, 28, out0            ! rotate
+	xor	$2, local2, $2            ! 5 finished local2 used
+
+	srl	local0, 8, local4         ! 4
+	and	local0, 252, local2       ! 2
+	ld	[local5+local3], local3   ! 7
+
+	srl	local0, 16, local5        ! 6
+	or	out0, local0, out0        ! rotate
+	ld	[global2+local2], local2  ! 2
+
+	srl	out0, 24, local0
+	ld	[$5+$3*16], out0          ! key 7531 next round
+	and	local4, 252, local4	  ! 4
+
+	and	local5, 252, local5       ! 6
+	ld	[global4+local4], local4  ! 4
+	xor	$2, local3, $2            ! 7 finished local3 used
+
+	and	local0, 252, local0       ! 8
+	ld	[local6+local5], local5   ! 6
+	xor	$2, local2, $2            ! 2 finished local2 now sbox 3
+
+	srl	local7, 8, local2         ! 3 start
+	ld	[out3+local0], local0     ! 8
+	xor	$2, local4, $2            ! 4 finished
+
+	and	local2, 252, local2       ! 3
+	ld	[global1+local1], local1  ! 1
+	xor	$2, local5, $2            ! 6 finished local5 used
+
+	ld	[global3+local2], local2  ! 3
+	xor	$2, local0, $2            ! 8 finished
+	add	$5, $3*16, $5             ! enc add 8, dec add -8 to key pointer
+
+	ld	[out2+284], local5        ! 0x0000FC00
+	xor	$2, out0, local4          ! sbox 1 next round
+	xor	$2, local1, $2            ! 1 finished
+
+	xor	$2, local2, $2            ! 3 finished
+	bne	$4
+	and	local4, 252, local1       ! sbox 1 next round
+
+! two rounds more:
+
+	ld	[global1+local1], local1
+	xor	$2, out1, out1
+	xor	$2, out0, out0
+
+	srl	out1, 4, local0           ! rotate
+	and	out0, local5, local3
+
+	ld	[$5+$3*8], local7         ! key 7531
+	srl	local3, 8, local3
+	and	local0, 252, local2
+
+	ld	[global3+local3],local3
+	sll	out1, 28, out1            ! rotate
+	xor	$1, local1, $1            ! 1 finished, local1 now sbox 7
+
+	ld	[global2+local2], local2
+	srl	out0, 24, local1
+	or	out1, local0, out1        ! rotate
+
+	ldub	[out2+local1], local1
+	srl	out1, 24, local0
+	and	out1, local5, local4
+
+	ldub	[out2+local0], local0
+	srl	local4, 8, local4
+	xor	$1, local2, $1            ! 2 finished local2 now sbox 6
+
+	ld	[global4+local4],local4
+	srl	out1, 16, local2
+	xor	$1, local3, $1            ! 3 finished local3 now sbox 5
+
+	ld	[out3+local0],local0
+	and	local2, 252, local2
+	add	global1, 1536, local5     ! address sbox 7
+
+	ld	[local6+local2], local2
+	srl	out0, 16, local3
+	xor	$1, local4, $1            ! 4 finished
+
+	ld	[local5+local1],local1
+	and	local3, 252, local3
+	xor	$1, local0, $1
+
+	ld	[global5+local3],local3
+	xor	$1, local2, $1            ! 6 finished
+	cmp	in2, 8
+
+	ifelse($6,{}, {}, {ld	[out2+280], out4})  ! loop counter
+	xor	$1, local7, local2        ! sbox 5 next round
+	xor	$1, local1, $1            ! 7 finished
+
+	ld	[$5+$3*8+4], out0
+	srl	local2, 16, local2        ! sbox 5 next round
+	xor	$1, local3, $1            ! 5 finished
+
+	and	local2, 252, local2
+! next round (two rounds more)
+	xor	$1, local7, local7        ! 7531
+
+	ld	[global5+local2], local2
+	srl	local7, 24, local3
+	xor	$1, out0, out0            ! 8642
+
+	ldub	[out2+local3], local3
+	srl	out0, 4, local0           ! rotate
+	and	local7, 252, local1
+
+	sll	out0, 28, out0            ! rotate
+	xor	$2, local2, $2            ! 5 finished local2 used
+
+	srl	local0, 8, local4
+	and	local0, 252, local2
+	ld	[local5+local3], local3
+
+	srl	local0, 16, local5
+	or	out0, local0, out0        ! rotate
+	ld	[global2+local2], local2
+
+	srl	out0, 24, local0
+	ifelse($6,{}, {}, {ld	[$6], out0})   ! key next encryption/decryption
+	and	local4, 252, local4
+
+	and	local5, 252, local5
+	ld	[global4+local4], local4
+	xor	$2, local3, $2            ! 7 finished local3 used
+
+	and	local0, 252, local0
+	ld	[local6+local5], local5
+	xor	$2, local2, $2            ! 2 finished local2 now sbox 3
+
+	srl	local7, 8, local2         ! 3 start
+	ld	[out3+local0], local0
+	xor	$2, local4, $2
+
+	and	local2, 252, local2
+	ld	[global1+local1], local1
+	xor	$2, local5, $2            ! 6 finished local5 used
+
+	ld	[global3+local2], local2
+	srl	$1, 3, local3
+	xor	$2, local0, $2
+
+	ifelse($6,{}, {}, {ld	[$6+4], out1}) ! key next encryption/decryption
+	sll	$1, 29, local4
+	xor	$2, local1, $2
+
+	ifelse($7,{}, {}, {retl})
+	xor	$2, local2, $2
+})
+
+
+! {fp_macro}
+!
+!  parameter 1   right (original left)
+!  parameter 2   left (original right)
+!  parameter 3   1 for optional store to [in0]
+!  parameter 4   1 for load input/output address to local5/7
+!
+!  The final permutation logic switches the halves, meaning that
+!  left and right ends up the registers originally used.
+
+define(fp_macro, {
+
+! {fp_macro}
+! $1 $2 $3 $4 $5 $6 $7 $8 $9
+
+	! initially undo the rotate 3 left done after initial permutation
+	! original left is received shifted 3 right and 29 left in local3/4
+
+	sll	$2, 29, local1
+	or	local3, local4, $1
+
+	srl	$2, 3, $2
+	sethi	%hi(0x55555555), local2
+
+	or	$2, local1, $2
+	or	local2, %lo(0x55555555), local2
+
+	srl	$2, 1, local3
+	sethi	%hi(0x00ff00ff), local1
+	xor	local3, $1, local3
+	or	local1, %lo(0x00ff00ff), local1
+	and	local3, local2, local3
+	sethi	%hi(0x33333333), local4
+	sll	local3, 1, local2
+
+	xor	$1, local3, $1
+
+	srl	$1, 8, local3
+	xor	$2, local2, $2
+	xor	local3, $2, local3
+	or	local4, %lo(0x33333333), local4
+	and	local3, local1, local3
+	sethi	%hi(0x0000ffff), local1
+	sll	local3, 8, local2
+
+	xor	$2, local3, $2
+
+	srl	$2, 2, local3
+	xor	$1, local2, $1
+	xor	local3, $1, local3
+	or	local1, %lo(0x0000ffff), local1
+	and	local3, local4, local3
+	sethi	%hi(0x0f0f0f0f), local4
+	sll	local3, 2, local2
+
+	ifelse($4,1, {LDPTR INPUT, local5})
+	xor	$1, local3, $1
+
+	ifelse($4,1, {LDPTR OUTPUT, local7})
+	srl	$1, 16, local3
+	xor	$2, local2, $2
+	xor	local3, $2, local3
+	or	local4, %lo(0x0f0f0f0f), local4
+	and	local3, local1, local3
+	sll	local3, 16, local2
+
+	xor	$2, local3, local1
+
+	srl	local1, 4, local3
+	xor	$1, local2, $1
+	xor	local3, $1, local3
+	and	local3, local4, local3
+	sll	local3, 4, local2
+
+	xor	$1, local3, $1
+
+	! optional store:
+
+	ifelse($3,1, {st $1, [in0]})
+
+	xor	local1, local2, $2
+
+	ifelse($3,1, {st $2, [in0+4]})
+
+})
+
+
+! {fp_ip_macro}
+!
+! Does initial permutation for next block mixed with
+! final permutation for current block.
+!
+! parameter 1   original left
+! parameter 2   original right
+! parameter 3   left ip
+! parameter 4   right ip
+! parameter 5   1: load ks1/ks2 to in3/in4, add 120 to in4
+!                2: mov in4 to in3
+!
+! also adds -8 to length in2 and loads loop counter to out4
+
+define(fp_ip_macro, {
+
+! {fp_ip_macro}
+! $1 $2 $3 $4 $5 $6 $7 $8 $9
+
+	define({temp1},{out4})
+	define({temp2},{local3})
+
+	define({ip1},{local1})
+	define({ip2},{local2})
+	define({ip4},{local4})
+	define({ip5},{local5})
+
+	! $1 in local3, local4
+
+	ld	[out2+256], ip1
+	sll	out5, 29, temp1
+	or	local3, local4, $1
+
+	srl	out5, 3, $2
+	ifelse($5,2,{mov in4, in3})
+
+	ld	[out2+272], ip5
+	srl	$4, 4, local0
+	or	$2, temp1, $2
+
+	srl	$2, 1, temp1
+	xor	temp1, $1, temp1
+
+	and	temp1, ip5, temp1
+	xor	local0, $3, local0
+
+	sll	temp1, 1, temp2
+	xor	$1, temp1, $1
+
+	and	local0, ip1, local0
+	add	in2, -8, in2
+
+	sll	local0, 4, local7
+	xor	$3, local0, $3
+
+	ld	[out2+268], ip4
+	srl	$1, 8, temp1
+	xor	$2, temp2, $2
+	ld	[out2+260], ip2
+	srl	$3, 16, local0
+	xor	$4, local7, $4
+	xor	temp1, $2, temp1
+	xor	local0, $4, local0
+	and	temp1, ip4, temp1
+	and	local0, ip2, local0
+	sll	temp1, 8, temp2
+	xor	$2, temp1, $2
+	sll	local0, 16, local7
+	xor	$4, local0, $4
+
+	srl	$2, 2, temp1
+	xor	$1, temp2, $1
+
+	ld	[out2+264], temp2         ! ip3
+	srl	$4, 2, local0
+	xor	$3, local7, $3
+	xor	temp1, $1, temp1
+	xor	local0, $3, local0
+	and	temp1, temp2, temp1
+	and	local0, temp2, local0
+	sll	temp1, 2, temp2
+	xor	$1, temp1, $1
+	sll	local0, 2, local7
+	xor	$3, local0, $3
+
+	srl	$1, 16, temp1
+	xor	$2, temp2, $2
+	srl	$3, 8, local0
+	xor	$4, local7, $4
+	xor	temp1, $2, temp1
+	xor	local0, $4, local0
+	and	temp1, ip2, temp1
+	and	local0, ip4, local0
+	sll	temp1, 16, temp2
+	xor	$2, temp1, local4
+	sll	local0, 8, local7
+	xor	$4, local0, $4
+
+	srl	$4, 1, local0
+	xor	$3, local7, $3
+
+	srl	local4, 4, temp1
+	xor	local0, $3, local0
+
+	xor	$1, temp2, $1
+	and	local0, ip5, local0
+
+	sll	local0, 1, local7
+	xor	temp1, $1, temp1
+
+	xor	$3, local0, $3
+	xor	$4, local7, $4
+
+	sll	$3, 3, local5
+	and	temp1, ip1, temp1
+
+	sll	temp1, 4, temp2
+	xor	$1, temp1, $1
+
+	ifelse($5,1,{LDPTR	KS2, in4})
+	sll	$4, 3, local2
+	xor	local4, temp2, $2
+
+	! reload since used as temporary:
+
+	ld	[out2+280], out4          ! loop counter
+
+	srl	$3, 29, local0
+	ifelse($5,1,{add in4, 120, in4})
+
+	ifelse($5,1,{LDPTR	KS1, in3})
+	srl	$4, 29, local7
+
+	or	local0, local5, $4
+	or	local2, local7, $3
+
+})
+
+
+
+! {load_little_endian}
+!
+! parameter 1  address
+! parameter 2  destination left
+! parameter 3  destination right
+! parameter 4  temporary
+! parameter 5  label
+
+define(load_little_endian, {
+
+! {load_little_endian}
+! $1 $2 $3 $4 $5 $6 $7 $8 $9
+
+	! first in memory to rightmost in register
+
+$5:
+	ldub	[$1+3], $2
+
+	ldub	[$1+2], $4
+	sll	$2, 8, $2
+	or	$2, $4, $2
+
+	ldub	[$1+1], $4
+	sll	$2, 8, $2
+	or	$2, $4, $2
+
+	ldub	[$1+0], $4
+	sll	$2, 8, $2
+	or	$2, $4, $2
+
+
+	ldub	[$1+3+4], $3
+
+	ldub	[$1+2+4], $4
+	sll	$3, 8, $3
+	or	$3, $4, $3
+
+	ldub	[$1+1+4], $4
+	sll	$3, 8, $3
+	or	$3, $4, $3
+
+	ldub	[$1+0+4], $4
+	sll	$3, 8, $3
+	or	$3, $4, $3
+$5a:
+
+})
+
+
+! {load_little_endian_inc}
+!
+! parameter 1  address
+! parameter 2  destination left
+! parameter 3  destination right
+! parameter 4  temporary
+! parameter 4  label
+!
+! adds 8 to address
+
+define(load_little_endian_inc, {
+
+! {load_little_endian_inc}
+! $1 $2 $3 $4 $5 $6 $7 $8 $9
+
+	! first in memory to rightmost in register
+
+$5:
+	ldub	[$1+3], $2
+
+	ldub	[$1+2], $4
+	sll	$2, 8, $2
+	or	$2, $4, $2
+
+	ldub	[$1+1], $4
+	sll	$2, 8, $2
+	or	$2, $4, $2
+
+	ldub	[$1+0], $4
+	sll	$2, 8, $2
+	or	$2, $4, $2
+
+	ldub	[$1+3+4], $3
+	add	$1, 8, $1
+
+	ldub	[$1+2+4-8], $4
+	sll	$3, 8, $3
+	or	$3, $4, $3
+
+	ldub	[$1+1+4-8], $4
+	sll	$3, 8, $3
+	or	$3, $4, $3
+
+	ldub	[$1+0+4-8], $4
+	sll	$3, 8, $3
+	or	$3, $4, $3
+$5a:
+
+})
+
+
+! {load_n_bytes}
+!
+! Loads 1 to 7 bytes little endian
+! Remaining bytes are zeroed.
+!
+! parameter 1  address
+! parameter 2  length
+! parameter 3  destination register left
+! parameter 4  destination register right
+! parameter 5  temp
+! parameter 6  temp2
+! parameter 7  label
+! parameter 8  return label
+
+define(load_n_bytes, {
+
+! {load_n_bytes}
+! $1 $2 $5 $6 $7 $8 $7 $8 $9
+
+$7.0:	call	.+8
+	sll	$2, 2, $6
+
+	add	%o7,$7.jmp.table-$7.0,$5
+
+	add	$5, $6, $5
+	mov	0, $4
+
+	ld	[$5], $5
+
+	jmp	%o7+$5
+	mov	0, $3
+
+$7.7:
+	ldub	[$1+6], $5
+	sll	$5, 16, $5
+	or	$3, $5, $3
+$7.6:
+	ldub	[$1+5], $5
+	sll	$5, 8, $5
+	or	$3, $5, $3
+$7.5:
+	ldub	[$1+4], $5
+	or	$3, $5, $3
+$7.4:
+	ldub	[$1+3], $5
+	sll	$5, 24, $5
+	or	$4, $5, $4
+$7.3:
+	ldub	[$1+2], $5
+	sll	$5, 16, $5
+	or	$4, $5, $4
+$7.2:
+	ldub	[$1+1], $5
+	sll	$5, 8, $5
+	or	$4, $5, $4
+$7.1:
+	ldub	[$1+0], $5
+	ba	$8
+	or	$4, $5, $4
+
+	.align 4
+
+$7.jmp.table:
+	.word	0
+	.word	$7.1-$7.0
+	.word	$7.2-$7.0
+	.word	$7.3-$7.0
+	.word	$7.4-$7.0
+	.word	$7.5-$7.0
+	.word	$7.6-$7.0
+	.word	$7.7-$7.0
+})
+
+
+! {store_little_endian}
+!
+! parameter 1  address
+! parameter 2  source left
+! parameter 3  source right
+! parameter 4  temporary
+
+define(store_little_endian, {
+
+! {store_little_endian}
+! $1 $2 $3 $4 $5 $6 $7 $8 $9
+
+	! rightmost in register to first in memory
+
+$5:
+	and	$2, 255, $4
+	stub	$4, [$1+0]
+
+	srl	$2, 8, $4
+	and	$4, 255, $4
+	stub	$4, [$1+1]
+
+	srl	$2, 16, $4
+	and	$4, 255, $4
+	stub	$4, [$1+2]
+
+	srl	$2, 24, $4
+	stub	$4, [$1+3]
+
+
+	and	$3, 255, $4
+	stub	$4, [$1+0+4]
+
+	srl	$3, 8, $4
+	and	$4, 255, $4
+	stub	$4, [$1+1+4]
+
+	srl	$3, 16, $4
+	and	$4, 255, $4
+	stub	$4, [$1+2+4]
+
+	srl	$3, 24, $4
+	stub	$4, [$1+3+4]
+
+$5a:
+
+})
+
+
+! {store_n_bytes}
+!
+! Stores 1 to 7 bytes little endian
+!
+! parameter 1  address
+! parameter 2  length
+! parameter 3  source register left
+! parameter 4  source register right
+! parameter 5  temp
+! parameter 6  temp2
+! parameter 7  label
+! parameter 8  return label
+
+define(store_n_bytes, {
+
+! {store_n_bytes}
+! $1 $2 $5 $6 $7 $8 $7 $8 $9
+
+$7.0:	call	.+8
+	sll	$2, 2, $6
+
+	add	%o7,$7.jmp.table-$7.0,$5
+
+	add	$5, $6, $5
+
+	ld	[$5], $5
+
+	jmp	%o7+$5
+	nop
+
+$7.7:
+	srl	$3, 16, $5
+	and	$5, 0xff, $5
+	stub	$5, [$1+6]
+$7.6:
+	srl	$3, 8, $5
+	and	$5, 0xff, $5
+	stub	$5, [$1+5]
+$7.5:
+	and	$3, 0xff, $5
+	stub	$5, [$1+4]
+$7.4:
+	srl	$4, 24, $5
+	stub	$5, [$1+3]
+$7.3:
+	srl	$4, 16, $5
+	and	$5, 0xff, $5
+	stub	$5, [$1+2]
+$7.2:
+	srl	$4, 8, $5
+	and	$5, 0xff, $5
+	stub	$5, [$1+1]
+$7.1:
+	and	$4, 0xff, $5
+
+
+	ba	$8
+	stub	$5, [$1]
+
+	.align 4
+
+$7.jmp.table:
+
+	.word	0
+	.word	$7.1-$7.0
+	.word	$7.2-$7.0
+	.word	$7.3-$7.0
+	.word	$7.4-$7.0
+	.word	$7.5-$7.0
+	.word	$7.6-$7.0
+	.word	$7.7-$7.0
+})
+
+
+define(testvalue,{1})
+
+define(register_init, {
+
+! For test purposes:
+
+	sethi	%hi(testvalue), local0
+	or	local0, %lo(testvalue), local0
+
+	ifelse($1,{},{}, {mov	local0, $1})
+	ifelse($2,{},{}, {mov	local0, $2})
+	ifelse($3,{},{}, {mov	local0, $3})
+	ifelse($4,{},{}, {mov	local0, $4})
+	ifelse($5,{},{}, {mov	local0, $5})
+	ifelse($6,{},{}, {mov	local0, $6})
+	ifelse($7,{},{}, {mov	local0, $7})
+	ifelse($8,{},{}, {mov	local0, $8})
+
+	mov	local0, local1
+	mov	local0, local2
+	mov	local0, local3
+	mov	local0, local4
+	mov	local0, local5
+	mov	local0, local7
+	mov	local0, local6
+	mov	local0, out0
+	mov	local0, out1
+	mov	local0, out2
+	mov	local0, out3
+	mov	local0, out4
+	mov	local0, out5
+	mov	local0, global1
+	mov	local0, global2
+	mov	local0, global3
+	mov	local0, global4
+	mov	local0, global5
+
+})
+
+.section	".text"
+
+	.align 32
+
+.des_enc:
+
+	! key address in3
+	! loads key next encryption/decryption first round from [in4]
+
+	rounds_macro(in5, out5, 1, .des_enc.1, in3, in4, retl)
+
+
+	.align 32
+
+.des_dec:
+
+	! implemented with out5 as first parameter to avoid
+	! register exchange in ede modes
+
+	! key address in4
+	! loads key next encryption/decryption first round from [in3]
+
+	rounds_macro(out5, in5, -1, .des_dec.1, in4, in3, retl)
+
+
+
+! void DES_encrypt1(data, ks, enc)
+! *******************************
+
+	.align 32
+	.global DES_encrypt1
+	.type	 DES_encrypt1,#function
+
+DES_encrypt1:
+
+	save	%sp, FRAME, %sp
+
+	sethi	%hi(.PIC.DES_SPtrans-1f),global1
+	or	global1,%lo(.PIC.DES_SPtrans-1f),global1
+1:	call	.+8
+	add	%o7,global1,global1
+	sub	global1,.PIC.DES_SPtrans-.des_and,out2
+
+	ld	[in0], in5                ! left
+	cmp	in2, 0                    ! enc
+
+	be	.encrypt.dec
+	ld	[in0+4], out5             ! right
+
+	! parameter 6  1/2 for include encryption/decryption
+	! parameter 7  1 for move in1 to in3
+	! parameter 8  1 for move in3 to in4, 2 for move in4 to in3
+
+	ip_macro(in5, out5, in5, out5, in3, 0, 1, 1)
+
+	rounds_macro(in5, out5, 1, .des_encrypt1.1, in3, in4) ! in4 not used
+
+	fp_macro(in5, out5, 1)            ! 1 for store to [in0]
+
+	ret
+	restore
+
+.encrypt.dec:
+
+	add	in1, 120, in3             ! use last subkey for first round
+
+	! parameter 6  1/2 for include encryption/decryption
+	! parameter 7  1 for move in1 to in3
+	! parameter 8  1 for move in3 to in4, 2 for move in4 to in3
+
+	ip_macro(in5, out5, out5, in5, in4, 2, 0, 1) ! include dec,  ks in4
+
+	fp_macro(out5, in5, 1)            ! 1 for store to [in0]
+
+	ret
+	restore
+
+.DES_encrypt1.end:
+	.size	 DES_encrypt1,.DES_encrypt1.end-DES_encrypt1
+
+
+! void DES_encrypt2(data, ks, enc)
+!*********************************
+
+	! encrypts/decrypts without initial/final permutation
+
+	.align 32
+	.global DES_encrypt2
+	.type	 DES_encrypt2,#function
+
+DES_encrypt2:
+
+	save	%sp, FRAME, %sp
+
+	sethi	%hi(.PIC.DES_SPtrans-1f),global1
+	or	global1,%lo(.PIC.DES_SPtrans-1f),global1
+1:	call	.+8
+	add	%o7,global1,global1
+	sub	global1,.PIC.DES_SPtrans-.des_and,out2
+
+	! Set sbox address 1 to 6 and rotate halfs 3 left
+	! Errors caught by destest? Yes. Still? *NO*
+
+	!sethi	%hi(DES_SPtrans), global1 ! address sbox 1
+
+	!or	global1, %lo(DES_SPtrans), global1  ! sbox 1
+
+	add	global1, 256, global2     ! sbox 2
+	add	global1, 512, global3     ! sbox 3
+
+	ld	[in0], out5               ! right
+	add	global1, 768, global4     ! sbox 4
+	add	global1, 1024, global5    ! sbox 5
+
+	ld	[in0+4], in5              ! left
+	add	global1, 1280, local6     ! sbox 6
+	add	global1, 1792, out3       ! sbox 8
+
+	! rotate
+
+	sll	in5, 3, local5
+	mov	in1, in3                  ! key address to in3
+
+	sll	out5, 3, local7
+	srl	in5, 29, in5
+
+	srl	out5, 29, out5
+	add	in5, local5, in5
+
+	add	out5, local7, out5
+	cmp	in2, 0
+
+	! we use our own stackframe
+
+	be	.encrypt2.dec
+	STPTR	in0, [%sp+BIAS+ARG0+0*ARGSZ]
+
+	ld	[in3], out0               ! key 7531 first round
+	mov	LOOPS, out4               ! loop counter
+
+	ld	[in3+4], out1             ! key 8642 first round
+	sethi	%hi(0x0000FC00), local5
+
+	call .des_enc
+	mov	in3, in4
+
+	! rotate
+	sll	in5, 29, in0
+	srl	in5, 3, in5
+	sll	out5, 29, in1
+	add	in5, in0, in5
+	srl	out5, 3, out5
+	LDPTR	[%sp+BIAS+ARG0+0*ARGSZ], in0
+	add	out5, in1, out5
+	st	in5, [in0]
+	st	out5, [in0+4]
+
+	ret
+	restore
+
+
+.encrypt2.dec:
+
+	add in3, 120, in4
+
+	ld	[in4], out0               ! key 7531 first round
+	mov	LOOPS, out4               ! loop counter
+
+	ld	[in4+4], out1             ! key 8642 first round
+	sethi	%hi(0x0000FC00), local5
+
+	mov	in5, local1               ! left expected in out5
+	mov	out5, in5
+
+	call .des_dec
+	mov	local1, out5
+
+.encrypt2.finish:
+
+	! rotate
+	sll	in5, 29, in0
+	srl	in5, 3, in5
+	sll	out5, 29, in1
+	add	in5, in0, in5
+	srl	out5, 3, out5
+	LDPTR	[%sp+BIAS+ARG0+0*ARGSZ], in0
+	add	out5, in1, out5
+	st	out5, [in0]
+	st	in5, [in0+4]
+
+	ret
+	restore
+
+.DES_encrypt2.end:
+	.size	 DES_encrypt2, .DES_encrypt2.end-DES_encrypt2
+
+
+! void DES_encrypt3(data, ks1, ks2, ks3)
+! **************************************
+
+	.align 32
+	.global DES_encrypt3
+	.type	 DES_encrypt3,#function
+
+DES_encrypt3:
+
+	save	%sp, FRAME, %sp
+	
+	sethi	%hi(.PIC.DES_SPtrans-1f),global1
+	or	global1,%lo(.PIC.DES_SPtrans-1f),global1
+1:	call	.+8
+	add	%o7,global1,global1
+	sub	global1,.PIC.DES_SPtrans-.des_and,out2
+
+	ld	[in0], in5                ! left
+	add	in2, 120, in4             ! ks2
+
+	ld	[in0+4], out5             ! right
+	mov	in3, in2                  ! save ks3
+
+	! parameter 6  1/2 for include encryption/decryption
+	! parameter 7  1 for mov in1 to in3
+	! parameter 8  1 for mov in3 to in4
+	! parameter 9  1 for load ks3 and ks2 to in4 and in3
+
+	ip_macro(in5, out5, in5, out5, in3, 1, 1, 0, 0)
+
+	call	.des_dec
+	mov	in2, in3                  ! preload ks3
+
+	call	.des_enc
+	nop
+
+	fp_macro(in5, out5, 1)
+
+	ret
+	restore
+
+.DES_encrypt3.end:
+	.size	 DES_encrypt3,.DES_encrypt3.end-DES_encrypt3
+
+
+! void DES_decrypt3(data, ks1, ks2, ks3)
+! **************************************
+
+	.align 32
+	.global DES_decrypt3
+	.type	 DES_decrypt3,#function
+
+DES_decrypt3:
+
+	save	%sp, FRAME, %sp
+	
+	sethi	%hi(.PIC.DES_SPtrans-1f),global1
+	or	global1,%lo(.PIC.DES_SPtrans-1f),global1
+1:	call	.+8
+	add	%o7,global1,global1
+	sub	global1,.PIC.DES_SPtrans-.des_and,out2
+
+	ld	[in0], in5                ! left
+	add	in3, 120, in4             ! ks3
+
+	ld	[in0+4], out5             ! right
+	mov	in2, in3                  ! ks2
+
+	! parameter 6  1/2 for include encryption/decryption
+	! parameter 7  1 for mov in1 to in3
+	! parameter 8  1 for mov in3 to in4
+	! parameter 9  1 for load ks3 and ks2 to in4 and in3
+
+	ip_macro(in5, out5, out5, in5, in4, 2, 0, 0, 0)
+
+	call	.des_enc
+	add	in1, 120, in4             ! preload ks1
+
+	call	.des_dec
+	nop
+
+	fp_macro(out5, in5, 1)
+
+	ret
+	restore
+
+.DES_decrypt3.end:
+	.size	 DES_decrypt3,.DES_decrypt3.end-DES_decrypt3
+
+! void DES_ncbc_encrypt(input, output, length, schedule, ivec, enc)
+! *****************************************************************
+
+
+	.align 32
+	.global DES_ncbc_encrypt
+	.type	 DES_ncbc_encrypt,#function
+
+DES_ncbc_encrypt:
+
+	save	%sp, FRAME, %sp
+	
+	define({INPUT},  { [%sp+BIAS+ARG0+0*ARGSZ] })
+	define({OUTPUT}, { [%sp+BIAS+ARG0+1*ARGSZ] })
+	define({IVEC},   { [%sp+BIAS+ARG0+4*ARGSZ] })
+
+	sethi	%hi(.PIC.DES_SPtrans-1f),global1
+	or	global1,%lo(.PIC.DES_SPtrans-1f),global1
+1:	call	.+8
+	add	%o7,global1,global1
+	sub	global1,.PIC.DES_SPtrans-.des_and,out2
+
+	cmp	in5, 0                    ! enc
+
+	be	.ncbc.dec
+	STPTR	in4, IVEC
+
+	! addr  left  right  temp  label
+	load_little_endian(in4, in5, out5, local3, .LLE1)  ! iv
+
+	addcc	in2, -8, in2              ! bytes missing when first block done
+
+	bl	.ncbc.enc.seven.or.less
+	mov	in3, in4                  ! schedule
+
+.ncbc.enc.next.block:
+
+	load_little_endian(in0, out4, global4, local3, .LLE2)  ! block
+
+.ncbc.enc.next.block_1:
+
+	xor	in5, out4, in5            ! iv xor
+	xor	out5, global4, out5       ! iv xor
+
+	! parameter 8  1 for move in3 to in4, 2 for move in4 to in3
+	ip_macro(in5, out5, in5, out5, in3, 0, 0, 2)
+
+.ncbc.enc.next.block_2:
+
+!//	call .des_enc                     ! compares in2 to 8
+!	rounds inlined for alignment purposes
+
+	add	global1, 768, global4     ! address sbox 4 since register used below
+
+	rounds_macro(in5, out5, 1, .ncbc.enc.1, in3, in4) ! include encryption  ks in3
+
+	bl	.ncbc.enc.next.block_fp
+	add	in0, 8, in0               ! input address
+
+	! If 8 or more bytes are to be encrypted after this block,
+	! we combine final permutation for this block with initial
+	! permutation for next block. Load next block:
+
+	load_little_endian(in0, global3, global4, local5, .LLE12)
+
+	!  parameter 1   original left
+	!  parameter 2   original right
+	!  parameter 3   left ip
+	!  parameter 4   right ip
+	!  parameter 5   1: load ks1/ks2 to in3/in4, add 120 to in4
+	!                2: mov in4 to in3
+	!
+	! also adds -8 to length in2 and loads loop counter to out4
+
+	fp_ip_macro(out0, out1, global3, global4, 2)
+
+	store_little_endian(in1, out0, out1, local3, .SLE10)  ! block
+
+	ld	[in3], out0               ! key 7531 first round next block
+	mov 	in5, local1
+	xor	global3, out5, in5        ! iv xor next block
+
+	ld	[in3+4], out1             ! key 8642
+	add	global1, 512, global3     ! address sbox 3 since register used
+	xor	global4, local1, out5     ! iv xor next block
+
+	ba	.ncbc.enc.next.block_2
+	add	in1, 8, in1               ! output address
+
+.ncbc.enc.next.block_fp:
+
+	fp_macro(in5, out5)
+
+	store_little_endian(in1, in5, out5, local3, .SLE1)  ! block
+
+	addcc   in2, -8, in2              ! bytes missing when next block done
+
+	bpos	.ncbc.enc.next.block
+	add	in1, 8, in1
+
+.ncbc.enc.seven.or.less:
+
+	cmp	in2, -8
+
+	ble	.ncbc.enc.finish
+	nop
+
+	add	in2, 8, local1            ! bytes to load
+
+	! addr, length, dest left, dest right, temp, temp2, label, ret label
+	load_n_bytes(in0, local1, global4, out4, local2, local3, .LNB1, .ncbc.enc.next.block_1)
+
+	! Loads 1 to 7 bytes little endian to global4, out4
+
+
+.ncbc.enc.finish:
+
+	LDPTR	IVEC, local4
+	store_little_endian(local4, in5, out5, local5, .SLE2)  ! ivec
+
+	ret
+	restore
+
+
+.ncbc.dec:
+
+	STPTR	in0, INPUT
+	cmp	in2, 0                    ! length
+	add	in3, 120, in3
+
+	LDPTR	IVEC, local7              ! ivec
+	ble	.ncbc.dec.finish
+	mov	in3, in4                  ! schedule
+
+	STPTR	in1, OUTPUT
+	mov	in0, local5               ! input
+
+	load_little_endian(local7, in0, in1, local3, .LLE3)   ! ivec
+
+.ncbc.dec.next.block:
+
+	load_little_endian(local5, in5, out5, local3, .LLE4)  ! block
+
+	! parameter 6  1/2 for include encryption/decryption
+	! parameter 7  1 for mov in1 to in3
+	! parameter 8  1 for mov in3 to in4
+
+	ip_macro(in5, out5, out5, in5, in4, 2, 0, 1) ! include decryption  ks in4
+
+	fp_macro(out5, in5, 0, 1) ! 1 for input and output address to local5/7
+
+	! in2 is bytes left to be stored
+	! in2 is compared to 8 in the rounds
+
+	xor	out5, in0, out4           ! iv xor
+	bl	.ncbc.dec.seven.or.less
+	xor	in5, in1, global4         ! iv xor
+
+	! Load ivec next block now, since input and output address might be the same.
+
+	load_little_endian_inc(local5, in0, in1, local3, .LLE5)  ! iv
+
+	store_little_endian(local7, out4, global4, local3, .SLE3)
+
+	STPTR	local5, INPUT
+	add	local7, 8, local7
+	addcc   in2, -8, in2
+
+	bg	.ncbc.dec.next.block
+	STPTR	local7, OUTPUT
+
+
+.ncbc.dec.store.iv:
+
+	LDPTR	IVEC, local4              ! ivec
+	store_little_endian(local4, in0, in1, local5, .SLE4)
+
+.ncbc.dec.finish:
+
+	ret
+	restore
+
+.ncbc.dec.seven.or.less:
+
+	load_little_endian_inc(local5, in0, in1, local3, .LLE13)     ! ivec
+
+	store_n_bytes(local7, in2, global4, out4, local3, local4, .SNB1, .ncbc.dec.store.iv)
+
+
+.DES_ncbc_encrypt.end:
+	.size	 DES_ncbc_encrypt, .DES_ncbc_encrypt.end-DES_ncbc_encrypt
+
+
+! void DES_ede3_cbc_encrypt(input, output, length, ks1, ks2, ks3, ivec, enc)
+! **************************************************************************
+
+
+	.align 32
+	.global DES_ede3_cbc_encrypt
+	.type	 DES_ede3_cbc_encrypt,#function
+
+DES_ede3_cbc_encrypt:
+
+	save	%sp, FRAME, %sp
+
+	define({KS1}, { [%sp+BIAS+ARG0+3*ARGSZ] })
+	define({KS2}, { [%sp+BIAS+ARG0+4*ARGSZ] })
+	define({KS3}, { [%sp+BIAS+ARG0+5*ARGSZ] })
+
+	sethi	%hi(.PIC.DES_SPtrans-1f),global1
+	or	global1,%lo(.PIC.DES_SPtrans-1f),global1
+1:	call	.+8
+	add	%o7,global1,global1
+	sub	global1,.PIC.DES_SPtrans-.des_and,out2
+
+	LDPTR	[%fp+BIAS+ARG0+7*ARGSZ], local3          ! enc
+	LDPTR	[%fp+BIAS+ARG0+6*ARGSZ], local4          ! ivec
+	cmp	local3, 0                 ! enc
+
+	be	.ede3.dec
+	STPTR	in4, KS2
+
+	STPTR	in5, KS3
+
+	load_little_endian(local4, in5, out5, local3, .LLE6)  ! ivec
+
+	addcc	in2, -8, in2              ! bytes missing after next block
+
+	bl	.ede3.enc.seven.or.less
+	STPTR	in3, KS1
+
+.ede3.enc.next.block:
+
+	load_little_endian(in0, out4, global4, local3, .LLE7)
+
+.ede3.enc.next.block_1:
+
+	LDPTR	KS2, in4
+	xor	in5, out4, in5            ! iv xor
+	xor	out5, global4, out5       ! iv xor
+
+	LDPTR	KS1, in3
+	add	in4, 120, in4             ! for decryption we use last subkey first
+	nop
+
+	ip_macro(in5, out5, in5, out5, in3)
+
+.ede3.enc.next.block_2:
+
+	call .des_enc                     ! ks1 in3
+	nop
+
+	call .des_dec                     ! ks2 in4
+	LDPTR	KS3, in3
+
+	call .des_enc                     ! ks3 in3  compares in2 to 8
+	nop
+
+	bl	.ede3.enc.next.block_fp
+	add	in0, 8, in0
+
+	! If 8 or more bytes are to be encrypted after this block,
+	! we combine final permutation for this block with initial
+	! permutation for next block. Load next block:
+
+	load_little_endian(in0, global3, global4, local5, .LLE11)
+
+	!  parameter 1   original left
+	!  parameter 2   original right
+	!  parameter 3   left ip
+	!  parameter 4   right ip
+	!  parameter 5   1: load ks1/ks2 to in3/in4, add 120 to in4
+	!                2: mov in4 to in3
+	!
+	! also adds -8 to length in2 and loads loop counter to out4
+
+	fp_ip_macro(out0, out1, global3, global4, 1)
+
+	store_little_endian(in1, out0, out1, local3, .SLE9)  ! block
+
+	mov 	in5, local1
+	xor	global3, out5, in5        ! iv xor next block
+
+	ld	[in3], out0               ! key 7531
+	add	global1, 512, global3     ! address sbox 3
+	xor	global4, local1, out5     ! iv xor next block
+
+	ld	[in3+4], out1             ! key 8642
+	add	global1, 768, global4     ! address sbox 4
+	ba	.ede3.enc.next.block_2
+	add	in1, 8, in1
+
+.ede3.enc.next.block_fp:
+
+	fp_macro(in5, out5)
+
+	store_little_endian(in1, in5, out5, local3, .SLE5)  ! block
+
+	addcc   in2, -8, in2              ! bytes missing when next block done
+
+	bpos	.ede3.enc.next.block
+	add	in1, 8, in1
+
+.ede3.enc.seven.or.less:
+
+	cmp	in2, -8
+
+	ble	.ede3.enc.finish
+	nop
+
+	add	in2, 8, local1            ! bytes to load
+
+	! addr, length, dest left, dest right, temp, temp2, label, ret label
+	load_n_bytes(in0, local1, global4, out4, local2, local3, .LNB2, .ede3.enc.next.block_1)
+
+.ede3.enc.finish:
+
+	LDPTR	[%fp+BIAS+ARG0+6*ARGSZ], local4          ! ivec
+	store_little_endian(local4, in5, out5, local5, .SLE6)  ! ivec
+
+	ret
+	restore
+
+.ede3.dec:
+
+	STPTR	in0, INPUT
+	add	in5, 120, in5
+
+	STPTR	in1, OUTPUT
+	mov	in0, local5
+	add	in3, 120, in3
+
+	STPTR	in3, KS1
+	cmp	in2, 0
+
+	ble	.ede3.dec.finish
+	STPTR	in5, KS3
+
+	LDPTR	[%fp+BIAS+ARG0+6*ARGSZ], local7          ! iv
+	load_little_endian(local7, in0, in1, local3, .LLE8)
+
+.ede3.dec.next.block:
+
+	load_little_endian(local5, in5, out5, local3, .LLE9)
+
+	! parameter 6  1/2 for include encryption/decryption
+	! parameter 7  1 for mov in1 to in3
+	! parameter 8  1 for mov in3 to in4
+	! parameter 9  1 for load ks3 and ks2 to in4 and in3
+
+	ip_macro(in5, out5, out5, in5, in4, 2, 0, 0, 1) ! inc .des_dec ks3 in4
+
+	call .des_enc                     ! ks2 in3
+	LDPTR	KS1, in4
+
+	call .des_dec                     ! ks1 in4
+	nop
+
+	fp_macro(out5, in5, 0, 1)   ! 1 for input and output address local5/7
+
+	! in2 is bytes left to be stored
+	! in2 is compared to 8 in the rounds
+
+	xor	out5, in0, out4
+	bl	.ede3.dec.seven.or.less
+	xor	in5, in1, global4
+
+	load_little_endian_inc(local5, in0, in1, local3, .LLE10)   ! iv next block
+
+	store_little_endian(local7, out4, global4, local3, .SLE7)  ! block
+
+	STPTR	local5, INPUT
+	addcc   in2, -8, in2
+	add	local7, 8, local7
+
+	bg	.ede3.dec.next.block
+	STPTR	local7, OUTPUT
+
+.ede3.dec.store.iv:
+
+	LDPTR	[%fp+BIAS+ARG0+6*ARGSZ], local4          ! ivec
+	store_little_endian(local4, in0, in1, local5, .SLE8)  ! ivec
+
+.ede3.dec.finish:
+
+	ret
+	restore
+
+.ede3.dec.seven.or.less:
+
+	load_little_endian_inc(local5, in0, in1, local3, .LLE14)     ! iv
+
+	store_n_bytes(local7, in2, global4, out4, local3, local4, .SNB2, .ede3.dec.store.iv)
+
+
+.DES_ede3_cbc_encrypt.end:
+	.size	 DES_ede3_cbc_encrypt,.DES_ede3_cbc_encrypt.end-DES_ede3_cbc_encrypt
+
+	.align	256
+	.type	 .des_and,#object
+	.size	 .des_and,284
+
+.des_and:
+
+! This table is used for AND 0xFC when it is known that register
+! bits 8-31 are zero. Makes it possible to do three arithmetic
+! operations in one cycle.
+
+	.byte  0, 0, 0, 0, 4, 4, 4, 4
+	.byte  8, 8, 8, 8, 12, 12, 12, 12
+	.byte  16, 16, 16, 16, 20, 20, 20, 20
+	.byte  24, 24, 24, 24, 28, 28, 28, 28
+	.byte  32, 32, 32, 32, 36, 36, 36, 36
+	.byte  40, 40, 40, 40, 44, 44, 44, 44
+	.byte  48, 48, 48, 48, 52, 52, 52, 52
+	.byte  56, 56, 56, 56, 60, 60, 60, 60
+	.byte  64, 64, 64, 64, 68, 68, 68, 68
+	.byte  72, 72, 72, 72, 76, 76, 76, 76
+	.byte  80, 80, 80, 80, 84, 84, 84, 84
+	.byte  88, 88, 88, 88, 92, 92, 92, 92
+	.byte  96, 96, 96, 96, 100, 100, 100, 100
+	.byte  104, 104, 104, 104, 108, 108, 108, 108
+	.byte  112, 112, 112, 112, 116, 116, 116, 116
+	.byte  120, 120, 120, 120, 124, 124, 124, 124
+	.byte  128, 128, 128, 128, 132, 132, 132, 132
+	.byte  136, 136, 136, 136, 140, 140, 140, 140
+	.byte  144, 144, 144, 144, 148, 148, 148, 148
+	.byte  152, 152, 152, 152, 156, 156, 156, 156
+	.byte  160, 160, 160, 160, 164, 164, 164, 164
+	.byte  168, 168, 168, 168, 172, 172, 172, 172
+	.byte  176, 176, 176, 176, 180, 180, 180, 180
+	.byte  184, 184, 184, 184, 188, 188, 188, 188
+	.byte  192, 192, 192, 192, 196, 196, 196, 196
+	.byte  200, 200, 200, 200, 204, 204, 204, 204
+	.byte  208, 208, 208, 208, 212, 212, 212, 212
+	.byte  216, 216, 216, 216, 220, 220, 220, 220
+	.byte  224, 224, 224, 224, 228, 228, 228, 228
+	.byte  232, 232, 232, 232, 236, 236, 236, 236
+	.byte  240, 240, 240, 240, 244, 244, 244, 244
+	.byte  248, 248, 248, 248, 252, 252, 252, 252
+
+	! 5 numbers for initial/final permutation
+
+	.word   0x0f0f0f0f                ! offset 256
+	.word	0x0000ffff                ! 260
+	.word	0x33333333                ! 264
+	.word	0x00ff00ff                ! 268
+	.word	0x55555555                ! 272
+
+	.word	0                         ! 276
+	.word	LOOPS                     ! 280
+	.word	0x0000FC00                ! 284
+
+	.global	DES_SPtrans
+	.type	DES_SPtrans,#object
+	.size	DES_SPtrans,2048
+.align	64
+DES_SPtrans:
+.PIC.DES_SPtrans:
+	! nibble 0
+	.word	0x02080800, 0x00080000, 0x02000002, 0x02080802
+	.word	0x02000000, 0x00080802, 0x00080002, 0x02000002
+	.word	0x00080802, 0x02080800, 0x02080000, 0x00000802
+	.word	0x02000802, 0x02000000, 0x00000000, 0x00080002
+	.word	0x00080000, 0x00000002, 0x02000800, 0x00080800
+	.word	0x02080802, 0x02080000, 0x00000802, 0x02000800
+	.word	0x00000002, 0x00000800, 0x00080800, 0x02080002
+	.word	0x00000800, 0x02000802, 0x02080002, 0x00000000
+	.word	0x00000000, 0x02080802, 0x02000800, 0x00080002
+	.word	0x02080800, 0x00080000, 0x00000802, 0x02000800
+	.word	0x02080002, 0x00000800, 0x00080800, 0x02000002
+	.word	0x00080802, 0x00000002, 0x02000002, 0x02080000
+	.word	0x02080802, 0x00080800, 0x02080000, 0x02000802
+	.word	0x02000000, 0x00000802, 0x00080002, 0x00000000
+	.word	0x00080000, 0x02000000, 0x02000802, 0x02080800
+	.word	0x00000002, 0x02080002, 0x00000800, 0x00080802
+	! nibble 1
+	.word	0x40108010, 0x00000000, 0x00108000, 0x40100000
+	.word	0x40000010, 0x00008010, 0x40008000, 0x00108000
+	.word	0x00008000, 0x40100010, 0x00000010, 0x40008000
+	.word	0x00100010, 0x40108000, 0x40100000, 0x00000010
+	.word	0x00100000, 0x40008010, 0x40100010, 0x00008000
+	.word	0x00108010, 0x40000000, 0x00000000, 0x00100010
+	.word	0x40008010, 0x00108010, 0x40108000, 0x40000010
+	.word	0x40000000, 0x00100000, 0x00008010, 0x40108010
+	.word	0x00100010, 0x40108000, 0x40008000, 0x00108010
+	.word	0x40108010, 0x00100010, 0x40000010, 0x00000000
+	.word	0x40000000, 0x00008010, 0x00100000, 0x40100010
+	.word	0x00008000, 0x40000000, 0x00108010, 0x40008010
+	.word	0x40108000, 0x00008000, 0x00000000, 0x40000010
+	.word	0x00000010, 0x40108010, 0x00108000, 0x40100000
+	.word	0x40100010, 0x00100000, 0x00008010, 0x40008000
+	.word	0x40008010, 0x00000010, 0x40100000, 0x00108000
+	! nibble 2
+	.word	0x04000001, 0x04040100, 0x00000100, 0x04000101
+	.word	0x00040001, 0x04000000, 0x04000101, 0x00040100
+	.word	0x04000100, 0x00040000, 0x04040000, 0x00000001
+	.word	0x04040101, 0x00000101, 0x00000001, 0x04040001
+	.word	0x00000000, 0x00040001, 0x04040100, 0x00000100
+	.word	0x00000101, 0x04040101, 0x00040000, 0x04000001
+	.word	0x04040001, 0x04000100, 0x00040101, 0x04040000
+	.word	0x00040100, 0x00000000, 0x04000000, 0x00040101
+	.word	0x04040100, 0x00000100, 0x00000001, 0x00040000
+	.word	0x00000101, 0x00040001, 0x04040000, 0x04000101
+	.word	0x00000000, 0x04040100, 0x00040100, 0x04040001
+	.word	0x00040001, 0x04000000, 0x04040101, 0x00000001
+	.word	0x00040101, 0x04000001, 0x04000000, 0x04040101
+	.word	0x00040000, 0x04000100, 0x04000101, 0x00040100
+	.word	0x04000100, 0x00000000, 0x04040001, 0x00000101
+	.word	0x04000001, 0x00040101, 0x00000100, 0x04040000
+	! nibble 3
+	.word	0x00401008, 0x10001000, 0x00000008, 0x10401008
+	.word	0x00000000, 0x10400000, 0x10001008, 0x00400008
+	.word	0x10401000, 0x10000008, 0x10000000, 0x00001008
+	.word	0x10000008, 0x00401008, 0x00400000, 0x10000000
+	.word	0x10400008, 0x00401000, 0x00001000, 0x00000008
+	.word	0x00401000, 0x10001008, 0x10400000, 0x00001000
+	.word	0x00001008, 0x00000000, 0x00400008, 0x10401000
+	.word	0x10001000, 0x10400008, 0x10401008, 0x00400000
+	.word	0x10400008, 0x00001008, 0x00400000, 0x10000008
+	.word	0x00401000, 0x10001000, 0x00000008, 0x10400000
+	.word	0x10001008, 0x00000000, 0x00001000, 0x00400008
+	.word	0x00000000, 0x10400008, 0x10401000, 0x00001000
+	.word	0x10000000, 0x10401008, 0x00401008, 0x00400000
+	.word	0x10401008, 0x00000008, 0x10001000, 0x00401008
+	.word	0x00400008, 0x00401000, 0x10400000, 0x10001008
+	.word	0x00001008, 0x10000000, 0x10000008, 0x10401000
+	! nibble 4
+	.word	0x08000000, 0x00010000, 0x00000400, 0x08010420
+	.word	0x08010020, 0x08000400, 0x00010420, 0x08010000
+	.word	0x00010000, 0x00000020, 0x08000020, 0x00010400
+	.word	0x08000420, 0x08010020, 0x08010400, 0x00000000
+	.word	0x00010400, 0x08000000, 0x00010020, 0x00000420
+	.word	0x08000400, 0x00010420, 0x00000000, 0x08000020
+	.word	0x00000020, 0x08000420, 0x08010420, 0x00010020
+	.word	0x08010000, 0x00000400, 0x00000420, 0x08010400
+	.word	0x08010400, 0x08000420, 0x00010020, 0x08010000
+	.word	0x00010000, 0x00000020, 0x08000020, 0x08000400
+	.word	0x08000000, 0x00010400, 0x08010420, 0x00000000
+	.word	0x00010420, 0x08000000, 0x00000400, 0x00010020
+	.word	0x08000420, 0x00000400, 0x00000000, 0x08010420
+	.word	0x08010020, 0x08010400, 0x00000420, 0x00010000
+	.word	0x00010400, 0x08010020, 0x08000400, 0x00000420
+	.word	0x00000020, 0x00010420, 0x08010000, 0x08000020
+	! nibble 5
+	.word	0x80000040, 0x00200040, 0x00000000, 0x80202000
+	.word	0x00200040, 0x00002000, 0x80002040, 0x00200000
+	.word	0x00002040, 0x80202040, 0x00202000, 0x80000000
+	.word	0x80002000, 0x80000040, 0x80200000, 0x00202040
+	.word	0x00200000, 0x80002040, 0x80200040, 0x00000000
+	.word	0x00002000, 0x00000040, 0x80202000, 0x80200040
+	.word	0x80202040, 0x80200000, 0x80000000, 0x00002040
+	.word	0x00000040, 0x00202000, 0x00202040, 0x80002000
+	.word	0x00002040, 0x80000000, 0x80002000, 0x00202040
+	.word	0x80202000, 0x00200040, 0x00000000, 0x80002000
+	.word	0x80000000, 0x00002000, 0x80200040, 0x00200000
+	.word	0x00200040, 0x80202040, 0x00202000, 0x00000040
+	.word	0x80202040, 0x00202000, 0x00200000, 0x80002040
+	.word	0x80000040, 0x80200000, 0x00202040, 0x00000000
+	.word	0x00002000, 0x80000040, 0x80002040, 0x80202000
+	.word	0x80200000, 0x00002040, 0x00000040, 0x80200040
+	! nibble 6
+	.word	0x00004000, 0x00000200, 0x01000200, 0x01000004
+	.word	0x01004204, 0x00004004, 0x00004200, 0x00000000
+	.word	0x01000000, 0x01000204, 0x00000204, 0x01004000
+	.word	0x00000004, 0x01004200, 0x01004000, 0x00000204
+	.word	0x01000204, 0x00004000, 0x00004004, 0x01004204
+	.word	0x00000000, 0x01000200, 0x01000004, 0x00004200
+	.word	0x01004004, 0x00004204, 0x01004200, 0x00000004
+	.word	0x00004204, 0x01004004, 0x00000200, 0x01000000
+	.word	0x00004204, 0x01004000, 0x01004004, 0x00000204
+	.word	0x00004000, 0x00000200, 0x01000000, 0x01004004
+	.word	0x01000204, 0x00004204, 0x00004200, 0x00000000
+	.word	0x00000200, 0x01000004, 0x00000004, 0x01000200
+	.word	0x00000000, 0x01000204, 0x01000200, 0x00004200
+	.word	0x00000204, 0x00004000, 0x01004204, 0x01000000
+	.word	0x01004200, 0x00000004, 0x00004004, 0x01004204
+	.word	0x01000004, 0x01004200, 0x01004000, 0x00004004
+	! nibble 7
+	.word	0x20800080, 0x20820000, 0x00020080, 0x00000000
+	.word	0x20020000, 0x00800080, 0x20800000, 0x20820080
+	.word	0x00000080, 0x20000000, 0x00820000, 0x00020080
+	.word	0x00820080, 0x20020080, 0x20000080, 0x20800000
+	.word	0x00020000, 0x00820080, 0x00800080, 0x20020000
+	.word	0x20820080, 0x20000080, 0x00000000, 0x00820000
+	.word	0x20000000, 0x00800000, 0x20020080, 0x20800080
+	.word	0x00800000, 0x00020000, 0x20820000, 0x00000080
+	.word	0x00800000, 0x00020000, 0x20000080, 0x20820080
+	.word	0x00020080, 0x20000000, 0x00000000, 0x00820000
+	.word	0x20800080, 0x20020080, 0x20020000, 0x00800080
+	.word	0x20820000, 0x00000080, 0x00800080, 0x20020000
+	.word	0x20820080, 0x00800000, 0x20800000, 0x20000080
+	.word	0x00820000, 0x00020080, 0x20020080, 0x20800000
+	.word	0x00000080, 0x20820000, 0x00820080, 0x00000000
+	.word	0x20000000, 0x20800080, 0x00020000, 0x00820080
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/desboth.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/desboth.pl
new file mode 100644
index 000000000..ef7054e27
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/desboth.pl
@@ -0,0 +1,86 @@
+#! /usr/bin/env perl
+# Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+$L="edi";
+$R="esi";
+
+sub DES_encrypt3
+	{
+	local($name,$enc)=@_;
+
+	&function_begin_B($name,"");
+	&push("ebx");
+	&mov("ebx",&wparam(0));
+
+	&push("ebp");
+	&push("esi");
+
+	&push("edi");
+
+	&comment("");
+	&comment("Load the data words");
+	&mov($L,&DWP(0,"ebx","",0));
+	&mov($R,&DWP(4,"ebx","",0));
+	&stack_push(3);
+
+	&comment("");
+	&comment("IP");
+	&IP_new($L,$R,"edx",0);
+
+	# put them back
+
+	if ($enc)
+		{
+		&mov(&DWP(4,"ebx","",0),$R);
+		 &mov("eax",&wparam(1));
+		&mov(&DWP(0,"ebx","",0),"edx");
+		 &mov("edi",&wparam(2));
+		 &mov("esi",&wparam(3));
+		}
+	else
+		{
+		&mov(&DWP(4,"ebx","",0),$R);
+		 &mov("esi",&wparam(1));
+		&mov(&DWP(0,"ebx","",0),"edx");
+		 &mov("edi",&wparam(2));
+		 &mov("eax",&wparam(3));
+		}
+	&mov(&swtmp(2),	(DWC(($enc)?"1":"0")));
+	&mov(&swtmp(1),	"eax");
+	&mov(&swtmp(0),	"ebx");
+	&call("DES_encrypt2");
+	&mov(&swtmp(2),	(DWC(($enc)?"0":"1")));
+	&mov(&swtmp(1),	"edi");
+	&mov(&swtmp(0),	"ebx");
+	&call("DES_encrypt2");
+	&mov(&swtmp(2),	(DWC(($enc)?"1":"0")));
+	&mov(&swtmp(1),	"esi");
+	&mov(&swtmp(0),	"ebx");
+	&call("DES_encrypt2");
+
+	&stack_pop(3);
+	&mov($L,&DWP(0,"ebx","",0));
+	&mov($R,&DWP(4,"ebx","",0));
+
+	&comment("");
+	&comment("FP");
+	&FP_new($L,$R,"eax",0);
+
+	&mov(&DWP(0,"ebx","",0),"eax");
+	&mov(&DWP(4,"ebx","",0),$R);
+
+	&pop("edi");
+	&pop("esi");
+	&pop("ebp");
+	&pop("ebx");
+	&ret();
+	&function_end_B($name);
+	}
+
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/dest4-sparcv9.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/dest4-sparcv9.pl
new file mode 100644
index 000000000..fe1fdc702
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/asm/dest4-sparcv9.pl
@@ -0,0 +1,627 @@
+#! /usr/bin/env perl
+# Copyright 2013-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by David S. Miller and Andy Polyakov.
+# The module is licensed under 2-clause BSD
+# license. March 2013. All rights reserved.
+# ====================================================================
+
+######################################################################
+# DES for SPARC T4.
+#
+# As with other hardware-assisted ciphers CBC encrypt results [for
+# aligned data] are virtually identical to critical path lengths:
+#
+#		DES		Triple-DES
+# CBC encrypt	4.14/4.15(*)	11.7/11.7
+# CBC decrypt	1.77/4.11(**)	6.42/7.47
+#
+#			 (*)	numbers after slash are for
+#				misaligned data;
+#			 (**)	this is result for largest
+#				block size, unlike all other
+#				cases smaller blocks results
+#				are better[?];
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "sparcv9_modes.pl";
+
+$output=pop;
+open STDOUT,">$output";
+
+$code.=<<___;
+#include "sparc_arch.h"
+
+#ifdef	__arch64__
+.register       %g2,#scratch
+.register       %g3,#scratch
+#endif
+
+.text
+___
+
+{ my ($inp,$out)=("%o0","%o1");
+
+$code.=<<___;
+.align	32
+.globl	des_t4_key_expand
+.type	des_t4_key_expand,#function
+des_t4_key_expand:
+	andcc		$inp, 0x7, %g0
+	alignaddr	$inp, %g0, $inp
+	bz,pt		%icc, 1f
+	ldd		[$inp + 0x00], %f0
+	ldd		[$inp + 0x08], %f2
+	faligndata	%f0, %f2, %f0
+1:	des_kexpand	%f0, 0, %f0
+	des_kexpand	%f0, 1, %f2
+	std		%f0, [$out + 0x00]
+	des_kexpand	%f2, 3, %f6
+	std		%f2, [$out + 0x08]
+	des_kexpand	%f2, 2, %f4
+	des_kexpand	%f6, 3, %f10
+	std		%f6, [$out + 0x18]
+	des_kexpand	%f6, 2, %f8
+	std		%f4, [$out + 0x10]
+	des_kexpand	%f10, 3, %f14
+	std		%f10, [$out + 0x28]
+	des_kexpand	%f10, 2, %f12
+	std		%f8, [$out + 0x20]
+	des_kexpand	%f14, 1, %f16
+	std		%f14, [$out + 0x38]
+	des_kexpand	%f16, 3, %f20
+	std		%f12, [$out + 0x30]
+	des_kexpand	%f16, 2, %f18
+	std		%f16, [$out + 0x40]
+	des_kexpand	%f20, 3, %f24
+	std		%f20, [$out + 0x50]
+	des_kexpand	%f20, 2, %f22
+	std		%f18, [$out + 0x48]
+	des_kexpand	%f24, 3, %f28
+	std		%f24, [$out + 0x60]
+	des_kexpand	%f24, 2, %f26
+	std		%f22, [$out + 0x58]
+	des_kexpand	%f28, 1, %f30
+	std		%f28, [$out + 0x70]
+	std		%f26, [$out + 0x68]
+	retl
+	std		%f30, [$out + 0x78]
+.size	des_t4_key_expand,.-des_t4_key_expand
+___
+}
+{ my ($inp,$out,$len,$key,$ivec) = map("%o$_",(0..4));
+  my ($ileft,$iright,$omask) = map("%g$_",(1..3));
+
+$code.=<<___;
+.globl	des_t4_cbc_encrypt
+.align	32
+des_t4_cbc_encrypt:
+	cmp		$len, 0
+	be,pn		$::size_t_cc, .Lcbc_abort
+	srln		$len, 0, $len		! needed on v8+, "nop" on v9
+	ld		[$ivec + 0], %f0	! load ivec
+	ld		[$ivec + 4], %f1
+
+	and		$inp, 7, $ileft
+	andn		$inp, 7, $inp
+	sll		$ileft, 3, $ileft
+	mov		0xff, $omask
+	prefetch	[$inp], 20
+	prefetch	[$inp + 63], 20
+	sub		%g0, $ileft, $iright
+	and		$out, 7, %g4
+	alignaddrl	$out, %g0, $out
+	srl		$omask, %g4, $omask
+	srlx		$len, 3, $len
+	movrz		%g4, 0, $omask
+	prefetch	[$out], 22
+
+	ldd		[$key + 0x00], %f4	! load key schedule
+	ldd		[$key + 0x08], %f6
+	ldd		[$key + 0x10], %f8
+	ldd		[$key + 0x18], %f10
+	ldd		[$key + 0x20], %f12
+	ldd		[$key + 0x28], %f14
+	ldd		[$key + 0x30], %f16
+	ldd		[$key + 0x38], %f18
+	ldd		[$key + 0x40], %f20
+	ldd		[$key + 0x48], %f22
+	ldd		[$key + 0x50], %f24
+	ldd		[$key + 0x58], %f26
+	ldd		[$key + 0x60], %f28
+	ldd		[$key + 0x68], %f30
+	ldd		[$key + 0x70], %f32
+	ldd		[$key + 0x78], %f34
+
+.Ldes_cbc_enc_loop:
+	ldx		[$inp + 0], %g4
+	brz,pt		$ileft, 4f
+	nop
+
+	ldx		[$inp + 8], %g5
+	sllx		%g4, $ileft, %g4
+	srlx		%g5, $iright, %g5
+	or		%g5, %g4, %g4
+4:
+	movxtod		%g4, %f2
+	prefetch	[$inp + 8+63], 20
+	add		$inp, 8, $inp
+	fxor		%f2, %f0, %f0		! ^= ivec
+	prefetch	[$out + 63], 22
+
+	des_ip		%f0, %f0
+	des_round	%f4, %f6, %f0, %f0
+	des_round	%f8, %f10, %f0, %f0
+	des_round	%f12, %f14, %f0, %f0
+	des_round	%f16, %f18, %f0, %f0
+	des_round	%f20, %f22, %f0, %f0
+	des_round	%f24, %f26, %f0, %f0
+	des_round	%f28, %f30, %f0, %f0
+	des_round	%f32, %f34, %f0, %f0
+	des_iip		%f0, %f0
+
+	brnz,pn		$omask, 2f
+	sub		$len, 1, $len
+
+	std		%f0, [$out + 0]
+	brnz,pt		$len, .Ldes_cbc_enc_loop
+	add		$out, 8, $out
+
+	st		%f0, [$ivec + 0]	! write out ivec
+	retl
+	st		%f1, [$ivec + 4]
+.Lcbc_abort:
+	retl
+	nop
+
+.align	16
+2:	ldxa		[$inp]0x82, %g4		! avoid read-after-write hazard
+						! and ~4x deterioration
+						! in inp==out case
+	faligndata	%f0, %f0, %f2		! handle unaligned output
+
+	stda		%f2, [$out + $omask]0xc0	! partial store
+	add		$out, 8, $out
+	orn		%g0, $omask, $omask
+	stda		%f2, [$out + $omask]0xc0	! partial store
+
+	brnz,pt		$len, .Ldes_cbc_enc_loop+4
+	orn		%g0, $omask, $omask
+
+	st		%f0, [$ivec + 0]	! write out ivec
+	retl
+	st		%f1, [$ivec + 4]
+.type	des_t4_cbc_encrypt,#function
+.size	des_t4_cbc_encrypt,.-des_t4_cbc_encrypt
+
+.globl	des_t4_cbc_decrypt
+.align	32
+des_t4_cbc_decrypt:
+	cmp		$len, 0
+	be,pn		$::size_t_cc, .Lcbc_abort
+	srln		$len, 0, $len		! needed on v8+, "nop" on v9
+	ld		[$ivec + 0], %f2	! load ivec
+	ld		[$ivec + 4], %f3
+
+	and		$inp, 7, $ileft
+	andn		$inp, 7, $inp
+	sll		$ileft, 3, $ileft
+	mov		0xff, $omask
+	prefetch	[$inp], 20
+	prefetch	[$inp + 63], 20
+	sub		%g0, $ileft, $iright
+	and		$out, 7, %g4
+	alignaddrl	$out, %g0, $out
+	srl		$omask, %g4, $omask
+	srlx		$len, 3, $len
+	movrz		%g4, 0, $omask
+	prefetch	[$out], 22
+
+	ldd		[$key + 0x78], %f4	! load key schedule
+	ldd		[$key + 0x70], %f6
+	ldd		[$key + 0x68], %f8
+	ldd		[$key + 0x60], %f10
+	ldd		[$key + 0x58], %f12
+	ldd		[$key + 0x50], %f14
+	ldd		[$key + 0x48], %f16
+	ldd		[$key + 0x40], %f18
+	ldd		[$key + 0x38], %f20
+	ldd		[$key + 0x30], %f22
+	ldd		[$key + 0x28], %f24
+	ldd		[$key + 0x20], %f26
+	ldd		[$key + 0x18], %f28
+	ldd		[$key + 0x10], %f30
+	ldd		[$key + 0x08], %f32
+	ldd		[$key + 0x00], %f34
+
+.Ldes_cbc_dec_loop:
+	ldx		[$inp + 0], %g4
+	brz,pt		$ileft, 4f
+	nop
+
+	ldx		[$inp + 8], %g5
+	sllx		%g4, $ileft, %g4
+	srlx		%g5, $iright, %g5
+	or		%g5, %g4, %g4
+4:
+	movxtod		%g4, %f0
+	prefetch	[$inp + 8+63], 20
+	add		$inp, 8, $inp
+	prefetch	[$out + 63], 22
+
+	des_ip		%f0, %f0
+	des_round	%f4, %f6, %f0, %f0
+	des_round	%f8, %f10, %f0, %f0
+	des_round	%f12, %f14, %f0, %f0
+	des_round	%f16, %f18, %f0, %f0
+	des_round	%f20, %f22, %f0, %f0
+	des_round	%f24, %f26, %f0, %f0
+	des_round	%f28, %f30, %f0, %f0
+	des_round	%f32, %f34, %f0, %f0
+	des_iip		%f0, %f0
+
+	fxor		%f2, %f0, %f0		! ^= ivec
+	movxtod		%g4, %f2
+
+	brnz,pn		$omask, 2f
+	sub		$len, 1, $len
+
+	std		%f0, [$out + 0]
+	brnz,pt		$len, .Ldes_cbc_dec_loop
+	add		$out, 8, $out
+
+	st		%f2, [$ivec + 0]	! write out ivec
+	retl
+	st		%f3, [$ivec + 4]
+
+.align	16
+2:	ldxa		[$inp]0x82, %g4		! avoid read-after-write hazard
+						! and ~4x deterioration
+						! in inp==out case
+	faligndata	%f0, %f0, %f0		! handle unaligned output
+
+	stda		%f0, [$out + $omask]0xc0	! partial store
+	add		$out, 8, $out
+	orn		%g0, $omask, $omask
+	stda		%f0, [$out + $omask]0xc0	! partial store
+
+	brnz,pt		$len, .Ldes_cbc_dec_loop+4
+	orn		%g0, $omask, $omask
+
+	st		%f2, [$ivec + 0]	! write out ivec
+	retl
+	st		%f3, [$ivec + 4]
+.type	des_t4_cbc_decrypt,#function
+.size	des_t4_cbc_decrypt,.-des_t4_cbc_decrypt
+___
+
+# One might wonder why does one have back-to-back des_iip/des_ip
+# pairs between EDE passes. Indeed, aren't they inverse of each other?
+# They almost are. Outcome of the pair is 32-bit words being swapped
+# in target register. Consider pair of des_iip/des_ip as a way to
+# perform the due swap, it's actually fastest way in this case.
+
+$code.=<<___;
+.globl	des_t4_ede3_cbc_encrypt
+.align	32
+des_t4_ede3_cbc_encrypt:
+	cmp		$len, 0
+	be,pn		$::size_t_cc, .Lcbc_abort
+	srln		$len, 0, $len		! needed on v8+, "nop" on v9
+	ld		[$ivec + 0], %f0	! load ivec
+	ld		[$ivec + 4], %f1
+
+	and		$inp, 7, $ileft
+	andn		$inp, 7, $inp
+	sll		$ileft, 3, $ileft
+	mov		0xff, $omask
+	prefetch	[$inp], 20
+	prefetch	[$inp + 63], 20
+	sub		%g0, $ileft, $iright
+	and		$out, 7, %g4
+	alignaddrl	$out, %g0, $out
+	srl		$omask, %g4, $omask
+	srlx		$len, 3, $len
+	movrz		%g4, 0, $omask
+	prefetch	[$out], 22
+
+	ldd		[$key + 0x00], %f4	! load key schedule
+	ldd		[$key + 0x08], %f6
+	ldd		[$key + 0x10], %f8
+	ldd		[$key + 0x18], %f10
+	ldd		[$key + 0x20], %f12
+	ldd		[$key + 0x28], %f14
+	ldd		[$key + 0x30], %f16
+	ldd		[$key + 0x38], %f18
+	ldd		[$key + 0x40], %f20
+	ldd		[$key + 0x48], %f22
+	ldd		[$key + 0x50], %f24
+	ldd		[$key + 0x58], %f26
+	ldd		[$key + 0x60], %f28
+	ldd		[$key + 0x68], %f30
+	ldd		[$key + 0x70], %f32
+	ldd		[$key + 0x78], %f34
+
+.Ldes_ede3_cbc_enc_loop:
+	ldx		[$inp + 0], %g4
+	brz,pt		$ileft, 4f
+	nop
+
+	ldx		[$inp + 8], %g5
+	sllx		%g4, $ileft, %g4
+	srlx		%g5, $iright, %g5
+	or		%g5, %g4, %g4
+4:
+	movxtod		%g4, %f2
+	prefetch	[$inp + 8+63], 20
+	add		$inp, 8, $inp
+	fxor		%f2, %f0, %f0		! ^= ivec
+	prefetch	[$out + 63], 22
+
+	des_ip		%f0, %f0
+	des_round	%f4, %f6, %f0, %f0
+	des_round	%f8, %f10, %f0, %f0
+	des_round	%f12, %f14, %f0, %f0
+	des_round	%f16, %f18, %f0, %f0
+	ldd		[$key + 0x100-0x08], %f36
+	ldd		[$key + 0x100-0x10], %f38
+	des_round	%f20, %f22, %f0, %f0
+	ldd		[$key + 0x100-0x18], %f40
+	ldd		[$key + 0x100-0x20], %f42
+	des_round	%f24, %f26, %f0, %f0
+	ldd		[$key + 0x100-0x28], %f44
+	ldd		[$key + 0x100-0x30], %f46
+	des_round	%f28, %f30, %f0, %f0
+	ldd		[$key + 0x100-0x38], %f48
+	ldd		[$key + 0x100-0x40], %f50
+	des_round	%f32, %f34, %f0, %f0
+	ldd		[$key + 0x100-0x48], %f52
+	ldd		[$key + 0x100-0x50], %f54
+	des_iip		%f0, %f0
+
+	ldd		[$key + 0x100-0x58], %f56
+	ldd		[$key + 0x100-0x60], %f58
+	des_ip		%f0, %f0
+	ldd		[$key + 0x100-0x68], %f60
+	ldd		[$key + 0x100-0x70], %f62
+	des_round	%f36, %f38, %f0, %f0
+	ldd		[$key + 0x100-0x78], %f36
+	ldd		[$key + 0x100-0x80], %f38
+	des_round	%f40, %f42, %f0, %f0
+	des_round	%f44, %f46, %f0, %f0
+	des_round	%f48, %f50, %f0, %f0
+	ldd		[$key + 0x100+0x00], %f40
+	ldd		[$key + 0x100+0x08], %f42
+	des_round	%f52, %f54, %f0, %f0
+	ldd		[$key + 0x100+0x10], %f44
+	ldd		[$key + 0x100+0x18], %f46
+	des_round	%f56, %f58, %f0, %f0
+	ldd		[$key + 0x100+0x20], %f48
+	ldd		[$key + 0x100+0x28], %f50
+	des_round	%f60, %f62, %f0, %f0
+	ldd		[$key + 0x100+0x30], %f52
+	ldd		[$key + 0x100+0x38], %f54
+	des_round	%f36, %f38, %f0, %f0
+	ldd		[$key + 0x100+0x40], %f56
+	ldd		[$key + 0x100+0x48], %f58
+	des_iip		%f0, %f0
+
+	ldd		[$key + 0x100+0x50], %f60
+	ldd		[$key + 0x100+0x58], %f62
+	des_ip		%f0, %f0
+	ldd		[$key + 0x100+0x60], %f36
+	ldd		[$key + 0x100+0x68], %f38
+	des_round	%f40, %f42, %f0, %f0
+	ldd		[$key + 0x100+0x70], %f40
+	ldd		[$key + 0x100+0x78], %f42
+	des_round	%f44, %f46, %f0, %f0
+	des_round	%f48, %f50, %f0, %f0
+	des_round	%f52, %f54, %f0, %f0
+	des_round	%f56, %f58, %f0, %f0
+	des_round	%f60, %f62, %f0, %f0
+	des_round	%f36, %f38, %f0, %f0
+	des_round	%f40, %f42, %f0, %f0
+	des_iip		%f0, %f0
+
+	brnz,pn		$omask, 2f
+	sub		$len, 1, $len
+
+	std		%f0, [$out + 0]
+	brnz,pt		$len, .Ldes_ede3_cbc_enc_loop
+	add		$out, 8, $out
+
+	st		%f0, [$ivec + 0]	! write out ivec
+	retl
+	st		%f1, [$ivec + 4]
+
+.align	16
+2:	ldxa		[$inp]0x82, %g4		! avoid read-after-write hazard
+						! and ~2x deterioration
+						! in inp==out case
+	faligndata	%f0, %f0, %f2		! handle unaligned output
+
+	stda		%f2, [$out + $omask]0xc0	! partial store
+	add		$out, 8, $out
+	orn		%g0, $omask, $omask
+	stda		%f2, [$out + $omask]0xc0	! partial store
+
+	brnz,pt		$len, .Ldes_ede3_cbc_enc_loop+4
+	orn		%g0, $omask, $omask
+
+	st		%f0, [$ivec + 0]	! write out ivec
+	retl
+	st		%f1, [$ivec + 4]
+.type	des_t4_ede3_cbc_encrypt,#function
+.size	des_t4_ede3_cbc_encrypt,.-des_t4_ede3_cbc_encrypt
+
+.globl	des_t4_ede3_cbc_decrypt
+.align	32
+des_t4_ede3_cbc_decrypt:
+	cmp		$len, 0
+	be,pn		$::size_t_cc, .Lcbc_abort
+	srln		$len, 0, $len		! needed on v8+, "nop" on v9
+	ld		[$ivec + 0], %f2	! load ivec
+	ld		[$ivec + 4], %f3
+
+	and		$inp, 7, $ileft
+	andn		$inp, 7, $inp
+	sll		$ileft, 3, $ileft
+	mov		0xff, $omask
+	prefetch	[$inp], 20
+	prefetch	[$inp + 63], 20
+	sub		%g0, $ileft, $iright
+	and		$out, 7, %g4
+	alignaddrl	$out, %g0, $out
+	srl		$omask, %g4, $omask
+	srlx		$len, 3, $len
+	movrz		%g4, 0, $omask
+	prefetch	[$out], 22
+
+	ldd		[$key + 0x100+0x78], %f4	! load key schedule
+	ldd		[$key + 0x100+0x70], %f6
+	ldd		[$key + 0x100+0x68], %f8
+	ldd		[$key + 0x100+0x60], %f10
+	ldd		[$key + 0x100+0x58], %f12
+	ldd		[$key + 0x100+0x50], %f14
+	ldd		[$key + 0x100+0x48], %f16
+	ldd		[$key + 0x100+0x40], %f18
+	ldd		[$key + 0x100+0x38], %f20
+	ldd		[$key + 0x100+0x30], %f22
+	ldd		[$key + 0x100+0x28], %f24
+	ldd		[$key + 0x100+0x20], %f26
+	ldd		[$key + 0x100+0x18], %f28
+	ldd		[$key + 0x100+0x10], %f30
+	ldd		[$key + 0x100+0x08], %f32
+	ldd		[$key + 0x100+0x00], %f34
+
+.Ldes_ede3_cbc_dec_loop:
+	ldx		[$inp + 0], %g4
+	brz,pt		$ileft, 4f
+	nop
+
+	ldx		[$inp + 8], %g5
+	sllx		%g4, $ileft, %g4
+	srlx		%g5, $iright, %g5
+	or		%g5, %g4, %g4
+4:
+	movxtod		%g4, %f0
+	prefetch	[$inp + 8+63], 20
+	add		$inp, 8, $inp
+	prefetch	[$out + 63], 22
+
+	des_ip		%f0, %f0
+	des_round	%f4, %f6, %f0, %f0
+	des_round	%f8, %f10, %f0, %f0
+	des_round	%f12, %f14, %f0, %f0
+	des_round	%f16, %f18, %f0, %f0
+	ldd		[$key + 0x80+0x00], %f36
+	ldd		[$key + 0x80+0x08], %f38
+	des_round	%f20, %f22, %f0, %f0
+	ldd		[$key + 0x80+0x10], %f40
+	ldd		[$key + 0x80+0x18], %f42
+	des_round	%f24, %f26, %f0, %f0
+	ldd		[$key + 0x80+0x20], %f44
+	ldd		[$key + 0x80+0x28], %f46
+	des_round	%f28, %f30, %f0, %f0
+	ldd		[$key + 0x80+0x30], %f48
+	ldd		[$key + 0x80+0x38], %f50
+	des_round	%f32, %f34, %f0, %f0
+	ldd		[$key + 0x80+0x40], %f52
+	ldd		[$key + 0x80+0x48], %f54
+	des_iip		%f0, %f0
+
+	ldd		[$key + 0x80+0x50], %f56
+	ldd		[$key + 0x80+0x58], %f58
+	des_ip		%f0, %f0
+	ldd		[$key + 0x80+0x60], %f60
+	ldd		[$key + 0x80+0x68], %f62
+	des_round	%f36, %f38, %f0, %f0
+	ldd		[$key + 0x80+0x70], %f36
+	ldd		[$key + 0x80+0x78], %f38
+	des_round	%f40, %f42, %f0, %f0
+	des_round	%f44, %f46, %f0, %f0
+	des_round	%f48, %f50, %f0, %f0
+	ldd		[$key + 0x80-0x08], %f40
+	ldd		[$key + 0x80-0x10], %f42
+	des_round	%f52, %f54, %f0, %f0
+	ldd		[$key + 0x80-0x18], %f44
+	ldd		[$key + 0x80-0x20], %f46
+	des_round	%f56, %f58, %f0, %f0
+	ldd		[$key + 0x80-0x28], %f48
+	ldd		[$key + 0x80-0x30], %f50
+	des_round	%f60, %f62, %f0, %f0
+	ldd		[$key + 0x80-0x38], %f52
+	ldd		[$key + 0x80-0x40], %f54
+	des_round	%f36, %f38, %f0, %f0
+	ldd		[$key + 0x80-0x48], %f56
+	ldd		[$key + 0x80-0x50], %f58
+	des_iip		%f0, %f0
+
+	ldd		[$key + 0x80-0x58], %f60
+	ldd		[$key + 0x80-0x60], %f62
+	des_ip		%f0, %f0
+	ldd		[$key + 0x80-0x68], %f36
+	ldd		[$key + 0x80-0x70], %f38
+	des_round	%f40, %f42, %f0, %f0
+	ldd		[$key + 0x80-0x78], %f40
+	ldd		[$key + 0x80-0x80], %f42
+	des_round	%f44, %f46, %f0, %f0
+	des_round	%f48, %f50, %f0, %f0
+	des_round	%f52, %f54, %f0, %f0
+	des_round	%f56, %f58, %f0, %f0
+	des_round	%f60, %f62, %f0, %f0
+	des_round	%f36, %f38, %f0, %f0
+	des_round	%f40, %f42, %f0, %f0
+	des_iip		%f0, %f0
+
+	fxor		%f2, %f0, %f0		! ^= ivec
+	movxtod		%g4, %f2
+
+	brnz,pn		$omask, 2f
+	sub		$len, 1, $len
+
+	std		%f0, [$out + 0]
+	brnz,pt		$len, .Ldes_ede3_cbc_dec_loop
+	add		$out, 8, $out
+
+	st		%f2, [$ivec + 0]	! write out ivec
+	retl
+	st		%f3, [$ivec + 4]
+
+.align	16
+2:	ldxa		[$inp]0x82, %g4		! avoid read-after-write hazard
+						! and ~3x deterioration
+						! in inp==out case
+	faligndata	%f0, %f0, %f0		! handle unaligned output
+
+	stda		%f0, [$out + $omask]0xc0	! partial store
+	add		$out, 8, $out
+	orn		%g0, $omask, $omask
+	stda		%f0, [$out + $omask]0xc0	! partial store
+
+	brnz,pt		$len, .Ldes_ede3_cbc_dec_loop+4
+	orn		%g0, $omask, $omask
+
+	st		%f2, [$ivec + 0]	! write out ivec
+	retl
+	st		%f3, [$ivec + 4]
+.type	des_t4_ede3_cbc_decrypt,#function
+.size	des_t4_ede3_cbc_decrypt,.-des_t4_ede3_cbc_decrypt
+___
+}
+$code.=<<___;
+.asciz  "DES for SPARC T4, David S. Miller, Andy Polyakov"
+.align  4
+___
+
+&emit_assembler();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/des/build.info
new file mode 100644
index 000000000..05cb154cd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/build.info
@@ -0,0 +1,19 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        set_key.c  ecb_enc.c  cbc_enc.c \
+        ecb3_enc.c cfb64enc.c cfb64ede.c cfb_enc.c \
+        ofb64ede.c ofb64enc.c ofb_enc.c \
+        str2key.c  pcbc_enc.c qud_cksm.c rand_key.c \
+        {- $target{des_asm_src} -} \
+        fcrypt.c xcbc_enc.c cbc_cksm.c
+
+GENERATE[des_enc-sparc.S]=asm/des_enc.m4
+GENERATE[dest4-sparcv9.S]=asm/dest4-sparcv9.pl $(PERLASM_SCHEME)
+INCLUDE[dest4-sparcv9.o]=..
+
+GENERATE[des-586.s]=asm/des-586.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS)
+DEPEND[des-586.s]=../perlasm/x86asm.pl ../perlasm/cbc.pl
+GENERATE[crypt586.s]=asm/crypt586.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS)
+DEPEND[crypt586.s]=../perlasm/x86asm.pl ../perlasm/cbc.pl
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/cbc_cksm.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/cbc_cksm.c
new file mode 100644
index 000000000..5a1f72f82
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/cbc_cksm.c
@@ -0,0 +1,53 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "des_locl.h"
+
+DES_LONG DES_cbc_cksum(const unsigned char *in, DES_cblock *output,
+                       long length, DES_key_schedule *schedule,
+                       const_DES_cblock *ivec)
+{
+    register DES_LONG tout0, tout1, tin0, tin1;
+    register long l = length;
+    DES_LONG tin[2];
+    unsigned char *out = &(*output)[0];
+    const unsigned char *iv = &(*ivec)[0];
+
+    c2l(iv, tout0);
+    c2l(iv, tout1);
+    for (; l > 0; l -= 8) {
+        if (l >= 8) {
+            c2l(in, tin0);
+            c2l(in, tin1);
+        } else
+            c2ln(in, tin0, tin1, l);
+
+        tin0 ^= tout0;
+        tin[0] = tin0;
+        tin1 ^= tout1;
+        tin[1] = tin1;
+        DES_encrypt1((DES_LONG *)tin, schedule, DES_ENCRYPT);
+        tout0 = tin[0];
+        tout1 = tin[1];
+    }
+    if (out != NULL) {
+        l2c(tout0, out);
+        l2c(tout1, out);
+    }
+    tout0 = tin0 = tin1 = tin[0] = tin[1] = 0;
+    /*
+     * Transform the data in tout1 so that it will match the return value
+     * that the MIT Kerberos mit_des_cbc_cksum API returns.
+     */
+    tout1 = ((tout1 >> 24L) & 0x000000FF)
+        | ((tout1 >> 8L) & 0x0000FF00)
+        | ((tout1 << 8L) & 0x00FF0000)
+        | ((tout1 << 24L) & 0xFF000000);
+    return tout1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/cbc_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/cbc_enc.c
new file mode 100644
index 000000000..92e773f81
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/cbc_enc.c
@@ -0,0 +1,12 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#define CBC_ENC_C__DONT_UPDATE_IV
+
+#include "ncbc_enc.c"           /* des_cbc_encrypt */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/cfb64ede.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/cfb64ede.c
new file mode 100644
index 000000000..21943f614
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/cfb64ede.c
@@ -0,0 +1,189 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "des_locl.h"
+
+/*
+ * The input and output encrypted as though 64bit cfb mode is being used.
+ * The extra state information to record how much of the 64bit block we have
+ * used is contained in *num;
+ */
+
+void DES_ede3_cfb64_encrypt(const unsigned char *in, unsigned char *out,
+                            long length, DES_key_schedule *ks1,
+                            DES_key_schedule *ks2, DES_key_schedule *ks3,
+                            DES_cblock *ivec, int *num, int enc)
+{
+    register DES_LONG v0, v1;
+    register long l = length;
+    register int n = *num;
+    DES_LONG ti[2];
+    unsigned char *iv, c, cc;
+
+    iv = &(*ivec)[0];
+    if (enc) {
+        while (l--) {
+            if (n == 0) {
+                c2l(iv, v0);
+                c2l(iv, v1);
+
+                ti[0] = v0;
+                ti[1] = v1;
+                DES_encrypt3(ti, ks1, ks2, ks3);
+                v0 = ti[0];
+                v1 = ti[1];
+
+                iv = &(*ivec)[0];
+                l2c(v0, iv);
+                l2c(v1, iv);
+                iv = &(*ivec)[0];
+            }
+            c = *(in++) ^ iv[n];
+            *(out++) = c;
+            iv[n] = c;
+            n = (n + 1) & 0x07;
+        }
+    } else {
+        while (l--) {
+            if (n == 0) {
+                c2l(iv, v0);
+                c2l(iv, v1);
+
+                ti[0] = v0;
+                ti[1] = v1;
+                DES_encrypt3(ti, ks1, ks2, ks3);
+                v0 = ti[0];
+                v1 = ti[1];
+
+                iv = &(*ivec)[0];
+                l2c(v0, iv);
+                l2c(v1, iv);
+                iv = &(*ivec)[0];
+            }
+            cc = *(in++);
+            c = iv[n];
+            iv[n] = cc;
+            *(out++) = c ^ cc;
+            n = (n + 1) & 0x07;
+        }
+    }
+    v0 = v1 = ti[0] = ti[1] = c = cc = 0;
+    *num = n;
+}
+
+/*
+ * This is compatible with the single key CFB-r for DES, even thought that's
+ * not what EVP needs.
+ */
+
+void DES_ede3_cfb_encrypt(const unsigned char *in, unsigned char *out,
+                          int numbits, long length, DES_key_schedule *ks1,
+                          DES_key_schedule *ks2, DES_key_schedule *ks3,
+                          DES_cblock *ivec, int enc)
+{
+    register DES_LONG d0, d1, v0, v1;
+    register unsigned long l = length, n = ((unsigned int)numbits + 7) / 8;
+    register int num = numbits, i;
+    DES_LONG ti[2];
+    unsigned char *iv;
+    unsigned char ovec[16];
+
+    if (num > 64)
+        return;
+    iv = &(*ivec)[0];
+    c2l(iv, v0);
+    c2l(iv, v1);
+    if (enc) {
+        while (l >= n) {
+            l -= n;
+            ti[0] = v0;
+            ti[1] = v1;
+            DES_encrypt3(ti, ks1, ks2, ks3);
+            c2ln(in, d0, d1, n);
+            in += n;
+            d0 ^= ti[0];
+            d1 ^= ti[1];
+            l2cn(d0, d1, out, n);
+            out += n;
+            /*
+             * 30-08-94 - eay - changed because l>>32 and l<<32 are bad under
+             * gcc :-(
+             */
+            if (num == 32) {
+                v0 = v1;
+                v1 = d0;
+            } else if (num == 64) {
+                v0 = d0;
+                v1 = d1;
+            } else {
+                iv = &ovec[0];
+                l2c(v0, iv);
+                l2c(v1, iv);
+                l2c(d0, iv);
+                l2c(d1, iv);
+                /* shift ovec left most of the bits... */
+                memmove(ovec, ovec + num / 8, 8 + (num % 8 ? 1 : 0));
+                /* now the remaining bits */
+                if (num % 8 != 0)
+                    for (i = 0; i < 8; ++i) {
+                        ovec[i] <<= num % 8;
+                        ovec[i] |= ovec[i + 1] >> (8 - num % 8);
+                    }
+                iv = &ovec[0];
+                c2l(iv, v0);
+                c2l(iv, v1);
+            }
+        }
+    } else {
+        while (l >= n) {
+            l -= n;
+            ti[0] = v0;
+            ti[1] = v1;
+            DES_encrypt3(ti, ks1, ks2, ks3);
+            c2ln(in, d0, d1, n);
+            in += n;
+            /*
+             * 30-08-94 - eay - changed because l>>32 and l<<32 are bad under
+             * gcc :-(
+             */
+            if (num == 32) {
+                v0 = v1;
+                v1 = d0;
+            } else if (num == 64) {
+                v0 = d0;
+                v1 = d1;
+            } else {
+                iv = &ovec[0];
+                l2c(v0, iv);
+                l2c(v1, iv);
+                l2c(d0, iv);
+                l2c(d1, iv);
+                /* shift ovec left most of the bits... */
+                memmove(ovec, ovec + num / 8, 8 + (num % 8 ? 1 : 0));
+                /* now the remaining bits */
+                if (num % 8 != 0)
+                    for (i = 0; i < 8; ++i) {
+                        ovec[i] <<= num % 8;
+                        ovec[i] |= ovec[i + 1] >> (8 - num % 8);
+                    }
+                iv = &ovec[0];
+                c2l(iv, v0);
+                c2l(iv, v1);
+            }
+            d0 ^= ti[0];
+            d1 ^= ti[1];
+            l2cn(d0, d1, out, n);
+            out += n;
+        }
+    }
+    iv = &(*ivec)[0];
+    l2c(v0, iv);
+    l2c(v1, iv);
+    v0 = v1 = d0 = d1 = ti[0] = ti[1] = 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/cfb64enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/cfb64enc.c
new file mode 100644
index 000000000..96de51b05
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/cfb64enc.c
@@ -0,0 +1,73 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "des_locl.h"
+
+/*
+ * The input and output encrypted as though 64bit cfb mode is being used.
+ * The extra state information to record how much of the 64bit block we have
+ * used is contained in *num;
+ */
+
+void DES_cfb64_encrypt(const unsigned char *in, unsigned char *out,
+                       long length, DES_key_schedule *schedule,
+                       DES_cblock *ivec, int *num, int enc)
+{
+    register DES_LONG v0, v1;
+    register long l = length;
+    register int n = *num;
+    DES_LONG ti[2];
+    unsigned char *iv, c, cc;
+
+    iv = &(*ivec)[0];
+    if (enc) {
+        while (l--) {
+            if (n == 0) {
+                c2l(iv, v0);
+                ti[0] = v0;
+                c2l(iv, v1);
+                ti[1] = v1;
+                DES_encrypt1(ti, schedule, DES_ENCRYPT);
+                iv = &(*ivec)[0];
+                v0 = ti[0];
+                l2c(v0, iv);
+                v0 = ti[1];
+                l2c(v0, iv);
+                iv = &(*ivec)[0];
+            }
+            c = *(in++) ^ iv[n];
+            *(out++) = c;
+            iv[n] = c;
+            n = (n + 1) & 0x07;
+        }
+    } else {
+        while (l--) {
+            if (n == 0) {
+                c2l(iv, v0);
+                ti[0] = v0;
+                c2l(iv, v1);
+                ti[1] = v1;
+                DES_encrypt1(ti, schedule, DES_ENCRYPT);
+                iv = &(*ivec)[0];
+                v0 = ti[0];
+                l2c(v0, iv);
+                v0 = ti[1];
+                l2c(v0, iv);
+                iv = &(*ivec)[0];
+            }
+            cc = *(in++);
+            c = iv[n];
+            iv[n] = cc;
+            *(out++) = c ^ cc;
+            n = (n + 1) & 0x07;
+        }
+    }
+    v0 = v1 = ti[0] = ti[1] = c = cc = 0;
+    *num = n;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/cfb_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/cfb_enc.c
new file mode 100644
index 000000000..544392e40
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/cfb_enc.c
@@ -0,0 +1,150 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include "des_locl.h"
+#include <assert.h>
+
+/*
+ * The input and output are loaded in multiples of 8 bits. What this means is
+ * that if you hame numbits=12 and length=2 the first 12 bits will be
+ * retrieved from the first byte and half the second.  The second 12 bits
+ * will come from the 3rd and half the 4th byte.
+ */
+/*
+ * Until Aug 1 2003 this function did not correctly implement CFB-r, so it
+ * will not be compatible with any encryption prior to that date. Ben.
+ */
+void DES_cfb_encrypt(const unsigned char *in, unsigned char *out, int numbits,
+                     long length, DES_key_schedule *schedule,
+                     DES_cblock *ivec, int enc)
+{
+    register DES_LONG d0, d1, v0, v1;
+    register unsigned long l = length;
+    register int num = numbits / 8, n = (numbits + 7) / 8, i, rem =
+        numbits % 8;
+    DES_LONG ti[2];
+    unsigned char *iv;
+#ifndef L_ENDIAN
+    unsigned char ovec[16];
+#else
+    unsigned int sh[4];
+    unsigned char *ovec = (unsigned char *)sh;
+
+    /* I kind of count that compiler optimizes away this assertion, */
+    assert(sizeof(sh[0]) == 4); /* as this holds true for all, */
+    /* but 16-bit platforms...      */
+
+#endif
+
+    if (numbits <= 0 || numbits > 64)
+        return;
+    iv = &(*ivec)[0];
+    c2l(iv, v0);
+    c2l(iv, v1);
+    if (enc) {
+        while (l >= (unsigned long)n) {
+            l -= n;
+            ti[0] = v0;
+            ti[1] = v1;
+            DES_encrypt1((DES_LONG *)ti, schedule, DES_ENCRYPT);
+            c2ln(in, d0, d1, n);
+            in += n;
+            d0 ^= ti[0];
+            d1 ^= ti[1];
+            l2cn(d0, d1, out, n);
+            out += n;
+            /*
+             * 30-08-94 - eay - changed because l>>32 and l<<32 are bad under
+             * gcc :-(
+             */
+            if (numbits == 32) {
+                v0 = v1;
+                v1 = d0;
+            } else if (numbits == 64) {
+                v0 = d0;
+                v1 = d1;
+            } else {
+#ifndef L_ENDIAN
+                iv = &ovec[0];
+                l2c(v0, iv);
+                l2c(v1, iv);
+                l2c(d0, iv);
+                l2c(d1, iv);
+#else
+                sh[0] = v0, sh[1] = v1, sh[2] = d0, sh[3] = d1;
+#endif
+                if (rem == 0)
+                    memmove(ovec, ovec + num, 8);
+                else
+                    for (i = 0; i < 8; ++i)
+                        ovec[i] = ovec[i + num] << rem |
+                            ovec[i + num + 1] >> (8 - rem);
+#ifdef L_ENDIAN
+                v0 = sh[0], v1 = sh[1];
+#else
+                iv = &ovec[0];
+                c2l(iv, v0);
+                c2l(iv, v1);
+#endif
+            }
+        }
+    } else {
+        while (l >= (unsigned long)n) {
+            l -= n;
+            ti[0] = v0;
+            ti[1] = v1;
+            DES_encrypt1((DES_LONG *)ti, schedule, DES_ENCRYPT);
+            c2ln(in, d0, d1, n);
+            in += n;
+            /*
+             * 30-08-94 - eay - changed because l>>32 and l<<32 are bad under
+             * gcc :-(
+             */
+            if (numbits == 32) {
+                v0 = v1;
+                v1 = d0;
+            } else if (numbits == 64) {
+                v0 = d0;
+                v1 = d1;
+            } else {
+#ifndef L_ENDIAN
+                iv = &ovec[0];
+                l2c(v0, iv);
+                l2c(v1, iv);
+                l2c(d0, iv);
+                l2c(d1, iv);
+#else
+                sh[0] = v0, sh[1] = v1, sh[2] = d0, sh[3] = d1;
+#endif
+                if (rem == 0)
+                    memmove(ovec, ovec + num, 8);
+                else
+                    for (i = 0; i < 8; ++i)
+                        ovec[i] = ovec[i + num] << rem |
+                            ovec[i + num + 1] >> (8 - rem);
+#ifdef L_ENDIAN
+                v0 = sh[0], v1 = sh[1];
+#else
+                iv = &ovec[0];
+                c2l(iv, v0);
+                c2l(iv, v1);
+#endif
+            }
+            d0 ^= ti[0];
+            d1 ^= ti[1];
+            l2cn(d0, d1, out, n);
+            out += n;
+        }
+    }
+    iv = &(*ivec)[0];
+    l2c(v0, iv);
+    l2c(v1, iv);
+    v0 = v1 = d0 = d1 = ti[0] = ti[1] = 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/des_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/des_enc.c
new file mode 100644
index 000000000..ed134ace8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/des_enc.c
@@ -0,0 +1,299 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/crypto.h>
+#include "des_locl.h"
+#include "spr.h"
+
+void DES_encrypt1(DES_LONG *data, DES_key_schedule *ks, int enc)
+{
+    register DES_LONG l, r, t, u;
+    register DES_LONG *s;
+
+    r = data[0];
+    l = data[1];
+
+    IP(r, l);
+    /*
+     * Things have been modified so that the initial rotate is done outside
+     * the loop.  This required the DES_SPtrans values in sp.h to be rotated
+     * 1 bit to the right. One perl script later and things have a 5% speed
+     * up on a sparc2. Thanks to Richard Outerbridge for pointing this out.
+     */
+    /* clear the top bits on machines with 8byte longs */
+    /* shift left by 2 */
+    r = ROTATE(r, 29) & 0xffffffffL;
+    l = ROTATE(l, 29) & 0xffffffffL;
+
+    s = ks->ks->deslong;
+    /*
+     * I don't know if it is worth the effort of loop unrolling the inner
+     * loop
+     */
+    if (enc) {
+        D_ENCRYPT(l, r, 0);     /* 1 */
+        D_ENCRYPT(r, l, 2);     /* 2 */
+        D_ENCRYPT(l, r, 4);     /* 3 */
+        D_ENCRYPT(r, l, 6);     /* 4 */
+        D_ENCRYPT(l, r, 8);     /* 5 */
+        D_ENCRYPT(r, l, 10);    /* 6 */
+        D_ENCRYPT(l, r, 12);    /* 7 */
+        D_ENCRYPT(r, l, 14);    /* 8 */
+        D_ENCRYPT(l, r, 16);    /* 9 */
+        D_ENCRYPT(r, l, 18);    /* 10 */
+        D_ENCRYPT(l, r, 20);    /* 11 */
+        D_ENCRYPT(r, l, 22);    /* 12 */
+        D_ENCRYPT(l, r, 24);    /* 13 */
+        D_ENCRYPT(r, l, 26);    /* 14 */
+        D_ENCRYPT(l, r, 28);    /* 15 */
+        D_ENCRYPT(r, l, 30);    /* 16 */
+    } else {
+        D_ENCRYPT(l, r, 30);    /* 16 */
+        D_ENCRYPT(r, l, 28);    /* 15 */
+        D_ENCRYPT(l, r, 26);    /* 14 */
+        D_ENCRYPT(r, l, 24);    /* 13 */
+        D_ENCRYPT(l, r, 22);    /* 12 */
+        D_ENCRYPT(r, l, 20);    /* 11 */
+        D_ENCRYPT(l, r, 18);    /* 10 */
+        D_ENCRYPT(r, l, 16);    /* 9 */
+        D_ENCRYPT(l, r, 14);    /* 8 */
+        D_ENCRYPT(r, l, 12);    /* 7 */
+        D_ENCRYPT(l, r, 10);    /* 6 */
+        D_ENCRYPT(r, l, 8);     /* 5 */
+        D_ENCRYPT(l, r, 6);     /* 4 */
+        D_ENCRYPT(r, l, 4);     /* 3 */
+        D_ENCRYPT(l, r, 2);     /* 2 */
+        D_ENCRYPT(r, l, 0);     /* 1 */
+    }
+
+    /* rotate and clear the top bits on machines with 8byte longs */
+    l = ROTATE(l, 3) & 0xffffffffL;
+    r = ROTATE(r, 3) & 0xffffffffL;
+
+    FP(r, l);
+    data[0] = l;
+    data[1] = r;
+    l = r = t = u = 0;
+}
+
+void DES_encrypt2(DES_LONG *data, DES_key_schedule *ks, int enc)
+{
+    register DES_LONG l, r, t, u;
+    register DES_LONG *s;
+
+    r = data[0];
+    l = data[1];
+
+    /*
+     * Things have been modified so that the initial rotate is done outside
+     * the loop.  This required the DES_SPtrans values in sp.h to be rotated
+     * 1 bit to the right. One perl script later and things have a 5% speed
+     * up on a sparc2. Thanks to Richard Outerbridge for pointing this out.
+     */
+    /* clear the top bits on machines with 8byte longs */
+    r = ROTATE(r, 29) & 0xffffffffL;
+    l = ROTATE(l, 29) & 0xffffffffL;
+
+    s = ks->ks->deslong;
+    /*
+     * I don't know if it is worth the effort of loop unrolling the inner
+     * loop
+     */
+    if (enc) {
+        D_ENCRYPT(l, r, 0);     /* 1 */
+        D_ENCRYPT(r, l, 2);     /* 2 */
+        D_ENCRYPT(l, r, 4);     /* 3 */
+        D_ENCRYPT(r, l, 6);     /* 4 */
+        D_ENCRYPT(l, r, 8);     /* 5 */
+        D_ENCRYPT(r, l, 10);    /* 6 */
+        D_ENCRYPT(l, r, 12);    /* 7 */
+        D_ENCRYPT(r, l, 14);    /* 8 */
+        D_ENCRYPT(l, r, 16);    /* 9 */
+        D_ENCRYPT(r, l, 18);    /* 10 */
+        D_ENCRYPT(l, r, 20);    /* 11 */
+        D_ENCRYPT(r, l, 22);    /* 12 */
+        D_ENCRYPT(l, r, 24);    /* 13 */
+        D_ENCRYPT(r, l, 26);    /* 14 */
+        D_ENCRYPT(l, r, 28);    /* 15 */
+        D_ENCRYPT(r, l, 30);    /* 16 */
+    } else {
+        D_ENCRYPT(l, r, 30);    /* 16 */
+        D_ENCRYPT(r, l, 28);    /* 15 */
+        D_ENCRYPT(l, r, 26);    /* 14 */
+        D_ENCRYPT(r, l, 24);    /* 13 */
+        D_ENCRYPT(l, r, 22);    /* 12 */
+        D_ENCRYPT(r, l, 20);    /* 11 */
+        D_ENCRYPT(l, r, 18);    /* 10 */
+        D_ENCRYPT(r, l, 16);    /* 9 */
+        D_ENCRYPT(l, r, 14);    /* 8 */
+        D_ENCRYPT(r, l, 12);    /* 7 */
+        D_ENCRYPT(l, r, 10);    /* 6 */
+        D_ENCRYPT(r, l, 8);     /* 5 */
+        D_ENCRYPT(l, r, 6);     /* 4 */
+        D_ENCRYPT(r, l, 4);     /* 3 */
+        D_ENCRYPT(l, r, 2);     /* 2 */
+        D_ENCRYPT(r, l, 0);     /* 1 */
+    }
+    /* rotate and clear the top bits on machines with 8byte longs */
+    data[0] = ROTATE(l, 3) & 0xffffffffL;
+    data[1] = ROTATE(r, 3) & 0xffffffffL;
+    l = r = t = u = 0;
+}
+
+void DES_encrypt3(DES_LONG *data, DES_key_schedule *ks1,
+                  DES_key_schedule *ks2, DES_key_schedule *ks3)
+{
+    register DES_LONG l, r;
+
+    l = data[0];
+    r = data[1];
+    IP(l, r);
+    data[0] = l;
+    data[1] = r;
+    DES_encrypt2((DES_LONG *)data, ks1, DES_ENCRYPT);
+    DES_encrypt2((DES_LONG *)data, ks2, DES_DECRYPT);
+    DES_encrypt2((DES_LONG *)data, ks3, DES_ENCRYPT);
+    l = data[0];
+    r = data[1];
+    FP(r, l);
+    data[0] = l;
+    data[1] = r;
+}
+
+void DES_decrypt3(DES_LONG *data, DES_key_schedule *ks1,
+                  DES_key_schedule *ks2, DES_key_schedule *ks3)
+{
+    register DES_LONG l, r;
+
+    l = data[0];
+    r = data[1];
+    IP(l, r);
+    data[0] = l;
+    data[1] = r;
+    DES_encrypt2((DES_LONG *)data, ks3, DES_DECRYPT);
+    DES_encrypt2((DES_LONG *)data, ks2, DES_ENCRYPT);
+    DES_encrypt2((DES_LONG *)data, ks1, DES_DECRYPT);
+    l = data[0];
+    r = data[1];
+    FP(r, l);
+    data[0] = l;
+    data[1] = r;
+}
+
+#ifndef DES_DEFAULT_OPTIONS
+
+# undef CBC_ENC_C__DONT_UPDATE_IV
+# include "ncbc_enc.c"          /* DES_ncbc_encrypt */
+
+void DES_ede3_cbc_encrypt(const unsigned char *input, unsigned char *output,
+                          long length, DES_key_schedule *ks1,
+                          DES_key_schedule *ks2, DES_key_schedule *ks3,
+                          DES_cblock *ivec, int enc)
+{
+    register DES_LONG tin0, tin1;
+    register DES_LONG tout0, tout1, xor0, xor1;
+    register const unsigned char *in;
+    unsigned char *out;
+    register long l = length;
+    DES_LONG tin[2];
+    unsigned char *iv;
+
+    in = input;
+    out = output;
+    iv = &(*ivec)[0];
+
+    if (enc) {
+        c2l(iv, tout0);
+        c2l(iv, tout1);
+        for (l -= 8; l >= 0; l -= 8) {
+            c2l(in, tin0);
+            c2l(in, tin1);
+            tin0 ^= tout0;
+            tin1 ^= tout1;
+
+            tin[0] = tin0;
+            tin[1] = tin1;
+            DES_encrypt3((DES_LONG *)tin, ks1, ks2, ks3);
+            tout0 = tin[0];
+            tout1 = tin[1];
+
+            l2c(tout0, out);
+            l2c(tout1, out);
+        }
+        if (l != -8) {
+            c2ln(in, tin0, tin1, l + 8);
+            tin0 ^= tout0;
+            tin1 ^= tout1;
+
+            tin[0] = tin0;
+            tin[1] = tin1;
+            DES_encrypt3((DES_LONG *)tin, ks1, ks2, ks3);
+            tout0 = tin[0];
+            tout1 = tin[1];
+
+            l2c(tout0, out);
+            l2c(tout1, out);
+        }
+        iv = &(*ivec)[0];
+        l2c(tout0, iv);
+        l2c(tout1, iv);
+    } else {
+        register DES_LONG t0, t1;
+
+        c2l(iv, xor0);
+        c2l(iv, xor1);
+        for (l -= 8; l >= 0; l -= 8) {
+            c2l(in, tin0);
+            c2l(in, tin1);
+
+            t0 = tin0;
+            t1 = tin1;
+
+            tin[0] = tin0;
+            tin[1] = tin1;
+            DES_decrypt3((DES_LONG *)tin, ks1, ks2, ks3);
+            tout0 = tin[0];
+            tout1 = tin[1];
+
+            tout0 ^= xor0;
+            tout1 ^= xor1;
+            l2c(tout0, out);
+            l2c(tout1, out);
+            xor0 = t0;
+            xor1 = t1;
+        }
+        if (l != -8) {
+            c2l(in, tin0);
+            c2l(in, tin1);
+
+            t0 = tin0;
+            t1 = tin1;
+
+            tin[0] = tin0;
+            tin[1] = tin1;
+            DES_decrypt3((DES_LONG *)tin, ks1, ks2, ks3);
+            tout0 = tin[0];
+            tout1 = tin[1];
+
+            tout0 ^= xor0;
+            tout1 ^= xor1;
+            l2cn(tout0, tout1, out, l + 8);
+            xor0 = t0;
+            xor1 = t1;
+        }
+
+        iv = &(*ivec)[0];
+        l2c(xor0, iv);
+        l2c(xor1, iv);
+    }
+    tin0 = tin1 = tout0 = tout1 = xor0 = xor1 = 0;
+    tin[0] = tin[1] = 0;
+}
+
+#endif                          /* DES_DEFAULT_OPTIONS */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/des_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/des/des_locl.h
new file mode 100644
index 000000000..f401e6f3e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/des_locl.h
@@ -0,0 +1,226 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_DES_LOCL_H
+# define HEADER_DES_LOCL_H
+
+# include <openssl/e_os2.h>
+
+# include <stdio.h>
+# include <stdlib.h>
+# include <string.h>
+
+# include <openssl/des.h>
+
+# ifdef OPENSSL_BUILD_SHLIBCRYPTO
+#  undef OPENSSL_EXTERN
+#  define OPENSSL_EXTERN OPENSSL_EXPORT
+# endif
+
+# define ITERATIONS 16
+# define HALF_ITERATIONS 8
+
+# define c2l(c,l)        (l =((DES_LONG)(*((c)++)))    , \
+                         l|=((DES_LONG)(*((c)++)))<< 8L, \
+                         l|=((DES_LONG)(*((c)++)))<<16L, \
+                         l|=((DES_LONG)(*((c)++)))<<24L)
+
+/* NOTE - c is not incremented as per c2l */
+# define c2ln(c,l1,l2,n) { \
+                        c+=n; \
+                        l1=l2=0; \
+                        switch (n) { \
+                        case 8: l2 =((DES_LONG)(*(--(c))))<<24L; \
+                        /* fall thru */                          \
+                        case 7: l2|=((DES_LONG)(*(--(c))))<<16L; \
+                        /* fall thru */                          \
+                        case 6: l2|=((DES_LONG)(*(--(c))))<< 8L; \
+                        /* fall thru */                          \
+                        case 5: l2|=((DES_LONG)(*(--(c))));      \
+                        /* fall thru */                          \
+                        case 4: l1 =((DES_LONG)(*(--(c))))<<24L; \
+                        /* fall thru */                          \
+                        case 3: l1|=((DES_LONG)(*(--(c))))<<16L; \
+                        /* fall thru */                          \
+                        case 2: l1|=((DES_LONG)(*(--(c))))<< 8L; \
+                        /* fall thru */                          \
+                        case 1: l1|=((DES_LONG)(*(--(c))));      \
+                                } \
+                        }
+
+# define l2c(l,c)        (*((c)++)=(unsigned char)(((l)     )&0xff), \
+                         *((c)++)=(unsigned char)(((l)>> 8L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>16L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>24L)&0xff))
+
+/*
+ * replacements for htonl and ntohl since I have no idea what to do when
+ * faced with machines with 8 byte longs.
+ */
+
+# define n2l(c,l)        (l =((DES_LONG)(*((c)++)))<<24L, \
+                         l|=((DES_LONG)(*((c)++)))<<16L, \
+                         l|=((DES_LONG)(*((c)++)))<< 8L, \
+                         l|=((DES_LONG)(*((c)++))))
+
+# define l2n(l,c)        (*((c)++)=(unsigned char)(((l)>>24L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>16L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>> 8L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)     )&0xff))
+
+/* NOTE - c is not incremented as per l2c */
+# define l2cn(l1,l2,c,n) { \
+                        c+=n; \
+                        switch (n) { \
+                        case 8: *(--(c))=(unsigned char)(((l2)>>24L)&0xff); \
+                        /* fall thru */                                     \
+                        case 7: *(--(c))=(unsigned char)(((l2)>>16L)&0xff); \
+                        /* fall thru */                                     \
+                        case 6: *(--(c))=(unsigned char)(((l2)>> 8L)&0xff); \
+                        /* fall thru */                                     \
+                        case 5: *(--(c))=(unsigned char)(((l2)     )&0xff); \
+                        /* fall thru */                                     \
+                        case 4: *(--(c))=(unsigned char)(((l1)>>24L)&0xff); \
+                        /* fall thru */                                     \
+                        case 3: *(--(c))=(unsigned char)(((l1)>>16L)&0xff); \
+                        /* fall thru */                                     \
+                        case 2: *(--(c))=(unsigned char)(((l1)>> 8L)&0xff); \
+                        /* fall thru */                                     \
+                        case 1: *(--(c))=(unsigned char)(((l1)     )&0xff); \
+                                } \
+                        }
+
+# if defined(_MSC_VER)
+#  define ROTATE(a,n)     (_lrotr(a,n))
+# elif defined(__ICC)
+#  define ROTATE(a,n)     (_rotr(a,n))
+# elif defined(__GNUC__) && __GNUC__>=2 && !defined(__STRICT_ANSI__) && !defined(OPENSSL_NO_ASM) && !defined(OPENSSL_NO_INLINE_ASM) && !defined(PEDANTIC)
+#  if defined(__i386) || defined(__i386__) || defined(__x86_64) || defined(__x86_64__)
+#   define ROTATE(a,n)   ({ register unsigned int ret;   \
+                                asm ("rorl %1,%0"       \
+                                        : "=r"(ret)     \
+                                        : "I"(n),"0"(a) \
+                                        : "cc");        \
+                           ret;                         \
+                        })
+#  endif
+# endif
+# ifndef ROTATE
+#  define ROTATE(a,n)     (((a)>>(n))+((a)<<(32-(n))))
+# endif
+
+/*
+ * Don't worry about the LOAD_DATA() stuff, that is used by fcrypt() to add
+ * it's little bit to the front
+ */
+
+# ifdef DES_FCRYPT
+
+#  define LOAD_DATA_tmp(R,S,u,t,E0,E1) \
+        { DES_LONG tmp; LOAD_DATA(R,S,u,t,E0,E1,tmp); }
+
+#  define LOAD_DATA(R,S,u,t,E0,E1,tmp) \
+        t=R^(R>>16L); \
+        u=t&E0; t&=E1; \
+        tmp=(u<<16); u^=R^s[S  ]; u^=tmp; \
+        tmp=(t<<16); t^=R^s[S+1]; t^=tmp
+# else
+#  define LOAD_DATA_tmp(a,b,c,d,e,f) LOAD_DATA(a,b,c,d,e,f,g)
+#  define LOAD_DATA(R,S,u,t,E0,E1,tmp) \
+        u=R^s[S  ]; \
+        t=R^s[S+1]
+# endif
+
+/*
+ * It recently occurred to me that 0^0^0^0^0^0^0 == 0, so there is no reason
+ * to not xor all the sub items together.  This potentially saves a register
+ * since things can be xored directly into L
+ */
+
+# define D_ENCRYPT(LL,R,S) { \
+        LOAD_DATA_tmp(R,S,u,t,E0,E1); \
+        t=ROTATE(t,4); \
+        LL^= \
+            DES_SPtrans[0][(u>> 2L)&0x3f]^ \
+            DES_SPtrans[2][(u>>10L)&0x3f]^ \
+            DES_SPtrans[4][(u>>18L)&0x3f]^ \
+            DES_SPtrans[6][(u>>26L)&0x3f]^ \
+            DES_SPtrans[1][(t>> 2L)&0x3f]^ \
+            DES_SPtrans[3][(t>>10L)&0x3f]^ \
+            DES_SPtrans[5][(t>>18L)&0x3f]^ \
+            DES_SPtrans[7][(t>>26L)&0x3f]; }
+
+        /*-
+         * IP and FP
+         * The problem is more of a geometric problem that random bit fiddling.
+         0  1  2  3  4  5  6  7      62 54 46 38 30 22 14  6
+         8  9 10 11 12 13 14 15      60 52 44 36 28 20 12  4
+        16 17 18 19 20 21 22 23      58 50 42 34 26 18 10  2
+        24 25 26 27 28 29 30 31  to  56 48 40 32 24 16  8  0
+
+        32 33 34 35 36 37 38 39      63 55 47 39 31 23 15  7
+        40 41 42 43 44 45 46 47      61 53 45 37 29 21 13  5
+        48 49 50 51 52 53 54 55      59 51 43 35 27 19 11  3
+        56 57 58 59 60 61 62 63      57 49 41 33 25 17  9  1
+
+        The output has been subject to swaps of the form
+        0 1 -> 3 1 but the odd and even bits have been put into
+        2 3    2 0
+        different words.  The main trick is to remember that
+        t=((l>>size)^r)&(mask);
+        r^=t;
+        l^=(t<<size);
+        can be used to swap and move bits between words.
+
+        So l =  0  1  2  3  r = 16 17 18 19
+                4  5  6  7      20 21 22 23
+                8  9 10 11      24 25 26 27
+               12 13 14 15      28 29 30 31
+        becomes (for size == 2 and mask == 0x3333)
+           t =   2^16  3^17 -- --   l =  0  1 16 17  r =  2  3 18 19
+                 6^20  7^21 -- --        4  5 20 21       6  7 22 23
+                10^24 11^25 -- --        8  9 24 25      10 11 24 25
+                14^28 15^29 -- --       12 13 28 29      14 15 28 29
+
+        Thanks for hints from Richard Outerbridge - he told me IP&FP
+        could be done in 15 xor, 10 shifts and 5 ands.
+        When I finally started to think of the problem in 2D
+        I first got ~42 operations without xors.  When I remembered
+        how to use xors :-) I got it to its final state.
+        */
+# define PERM_OP(a,b,t,n,m) ((t)=((((a)>>(n))^(b))&(m)),\
+        (b)^=(t),\
+        (a)^=((t)<<(n)))
+
+# define IP(l,r) \
+        { \
+        register DES_LONG tt; \
+        PERM_OP(r,l,tt, 4,0x0f0f0f0fL); \
+        PERM_OP(l,r,tt,16,0x0000ffffL); \
+        PERM_OP(r,l,tt, 2,0x33333333L); \
+        PERM_OP(l,r,tt, 8,0x00ff00ffL); \
+        PERM_OP(r,l,tt, 1,0x55555555L); \
+        }
+
+# define FP(l,r) \
+        { \
+        register DES_LONG tt; \
+        PERM_OP(l,r,tt, 1,0x55555555L); \
+        PERM_OP(r,l,tt, 8,0x00ff00ffL); \
+        PERM_OP(l,r,tt, 2,0x33333333L); \
+        PERM_OP(r,l,tt,16,0x0000ffffL); \
+        PERM_OP(l,r,tt, 4,0x0f0f0f0fL); \
+        }
+
+extern const DES_LONG DES_SPtrans[8][64];
+
+void fcrypt_body(DES_LONG *out, DES_key_schedule *ks,
+                 DES_LONG Eswap0, DES_LONG Eswap1);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/ecb3_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/ecb3_enc.c
new file mode 100644
index 000000000..6ac89d4e7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/ecb3_enc.c
@@ -0,0 +1,33 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "des_locl.h"
+
+void DES_ecb3_encrypt(const_DES_cblock *input, DES_cblock *output,
+                      DES_key_schedule *ks1, DES_key_schedule *ks2,
+                      DES_key_schedule *ks3, int enc)
+{
+    register DES_LONG l0, l1;
+    DES_LONG ll[2];
+    const unsigned char *in = &(*input)[0];
+    unsigned char *out = &(*output)[0];
+
+    c2l(in, l0);
+    c2l(in, l1);
+    ll[0] = l0;
+    ll[1] = l1;
+    if (enc)
+        DES_encrypt3(ll, ks1, ks2, ks3);
+    else
+        DES_decrypt3(ll, ks1, ks2, ks3);
+    l0 = ll[0];
+    l1 = ll[1];
+    l2c(l0, out);
+    l2c(l1, out);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/ecb_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/ecb_enc.c
new file mode 100644
index 000000000..5ed079d15
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/ecb_enc.c
@@ -0,0 +1,48 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "des_locl.h"
+#include <openssl/opensslv.h>
+#include <openssl/bio.h>
+
+
+const char *DES_options(void)
+{
+    static int init = 1;
+    static char buf[12];
+
+    if (init) {
+        if (sizeof(DES_LONG) != sizeof(long))
+            OPENSSL_strlcpy(buf, "des(int)", sizeof(buf));
+        else
+            OPENSSL_strlcpy(buf, "des(long)", sizeof(buf));
+        init = 0;
+    }
+    return buf;
+}
+
+void DES_ecb_encrypt(const_DES_cblock *input, DES_cblock *output,
+                     DES_key_schedule *ks, int enc)
+{
+    register DES_LONG l;
+    DES_LONG ll[2];
+    const unsigned char *in = &(*input)[0];
+    unsigned char *out = &(*output)[0];
+
+    c2l(in, l);
+    ll[0] = l;
+    c2l(in, l);
+    ll[1] = l;
+    DES_encrypt1(ll, ks, enc);
+    l = ll[0];
+    l2c(l, out);
+    l = ll[1];
+    l2c(l, out);
+    l = ll[0] = ll[1] = 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/fcrypt.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/fcrypt.c
new file mode 100644
index 000000000..aaee4bf23
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/fcrypt.c
@@ -0,0 +1,149 @@
+/*
+ * Copyright 1998-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* NOCW */
+#include <stdio.h>
+#ifdef _OSD_POSIX
+# ifndef CHARSET_EBCDIC
+#  define CHARSET_EBCDIC 1
+# endif
+#endif
+#ifdef CHARSET_EBCDIC
+# include <openssl/ebcdic.h>
+#endif
+
+#include <openssl/crypto.h>
+#include "des_locl.h"
+
+/*
+ * Added more values to handle illegal salt values the way normal crypt()
+ * implementations do.
+ */
+static unsigned const char con_salt[128] = {
+    0xD2, 0xD3, 0xD4, 0xD5, 0xD6, 0xD7, 0xD8, 0xD9,
+    0xDA, 0xDB, 0xDC, 0xDD, 0xDE, 0xDF, 0xE0, 0xE1,
+    0xE2, 0xE3, 0xE4, 0xE5, 0xE6, 0xE7, 0xE8, 0xE9,
+    0xEA, 0xEB, 0xEC, 0xED, 0xEE, 0xEF, 0xF0, 0xF1,
+    0xF2, 0xF3, 0xF4, 0xF5, 0xF6, 0xF7, 0xF8, 0xF9,
+    0xFA, 0xFB, 0xFC, 0xFD, 0xFE, 0xFF, 0x00, 0x01,
+    0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09,
+    0x0A, 0x0B, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0A,
+    0x0B, 0x0C, 0x0D, 0x0E, 0x0F, 0x10, 0x11, 0x12,
+    0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, 0x1A,
+    0x1B, 0x1C, 0x1D, 0x1E, 0x1F, 0x20, 0x21, 0x22,
+    0x23, 0x24, 0x25, 0x20, 0x21, 0x22, 0x23, 0x24,
+    0x25, 0x26, 0x27, 0x28, 0x29, 0x2A, 0x2B, 0x2C,
+    0x2D, 0x2E, 0x2F, 0x30, 0x31, 0x32, 0x33, 0x34,
+    0x35, 0x36, 0x37, 0x38, 0x39, 0x3A, 0x3B, 0x3C,
+    0x3D, 0x3E, 0x3F, 0x40, 0x41, 0x42, 0x43, 0x44,
+};
+
+static unsigned const char cov_2char[64] = {
+    0x2E, 0x2F, 0x30, 0x31, 0x32, 0x33, 0x34, 0x35,
+    0x36, 0x37, 0x38, 0x39, 0x41, 0x42, 0x43, 0x44,
+    0x45, 0x46, 0x47, 0x48, 0x49, 0x4A, 0x4B, 0x4C,
+    0x4D, 0x4E, 0x4F, 0x50, 0x51, 0x52, 0x53, 0x54,
+    0x55, 0x56, 0x57, 0x58, 0x59, 0x5A, 0x61, 0x62,
+    0x63, 0x64, 0x65, 0x66, 0x67, 0x68, 0x69, 0x6A,
+    0x6B, 0x6C, 0x6D, 0x6E, 0x6F, 0x70, 0x71, 0x72,
+    0x73, 0x74, 0x75, 0x76, 0x77, 0x78, 0x79, 0x7A
+};
+
+char *DES_crypt(const char *buf, const char *salt)
+{
+    static char buff[14];
+
+#ifndef CHARSET_EBCDIC
+    return DES_fcrypt(buf, salt, buff);
+#else
+    char e_salt[2 + 1];
+    char e_buf[32 + 1];         /* replace 32 by 8 ? */
+    char *ret;
+
+    if (salt[0] == '\0' || salt[1] == '\0')
+        return NULL;
+
+    /* Copy salt, convert to ASCII. */
+    e_salt[0] = salt[0];
+    e_salt[1] = salt[1];
+    e_salt[2] = '\0';
+    ebcdic2ascii(e_salt, e_salt, sizeof(e_salt));
+
+    /* Convert password to ASCII. */
+    OPENSSL_strlcpy(e_buf, buf, sizeof(e_buf));
+    ebcdic2ascii(e_buf, e_buf, sizeof(e_buf));
+
+    /* Encrypt it (from/to ASCII); if it worked, convert back. */
+    ret = DES_fcrypt(e_buf, e_salt, buff);
+    if (ret != NULL)
+        ascii2ebcdic(ret, ret, strlen(ret));
+
+    return ret;
+#endif
+}
+
+char *DES_fcrypt(const char *buf, const char *salt, char *ret)
+{
+    unsigned int i, j, x, y;
+    DES_LONG Eswap0, Eswap1;
+    DES_LONG out[2], ll;
+    DES_cblock key;
+    DES_key_schedule ks;
+    unsigned char bb[9];
+    unsigned char *b = bb;
+    unsigned char c, u;
+
+    x = ret[0] = salt[0];
+    if (x == 0 || x >= sizeof(con_salt))
+        return NULL;
+    Eswap0 = con_salt[x] << 2;
+    x = ret[1] = salt[1];
+    if (x == 0 || x >= sizeof(con_salt))
+        return NULL;
+    Eswap1 = con_salt[x] << 6;
+
+    /*
+     * EAY r=strlen(buf); r=(r+7)/8;
+     */
+    for (i = 0; i < 8; i++) {
+        c = *(buf++);
+        if (!c)
+            break;
+        key[i] = (c << 1);
+    }
+    for (; i < 8; i++)
+        key[i] = 0;
+
+    DES_set_key_unchecked(&key, &ks);
+    fcrypt_body(&(out[0]), &ks, Eswap0, Eswap1);
+
+    ll = out[0];
+    l2c(ll, b);
+    ll = out[1];
+    l2c(ll, b);
+    y = 0;
+    u = 0x80;
+    bb[8] = 0;
+    for (i = 2; i < 13; i++) {
+        c = 0;
+        for (j = 0; j < 6; j++) {
+            c <<= 1;
+            if (bb[y] & u)
+                c |= 1;
+            u >>= 1;
+            if (!u) {
+                y++;
+                u = 0x80;
+            }
+        }
+        ret[i] = cov_2char[c];
+    }
+    ret[13] = '\0';
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/fcrypt_b.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/fcrypt_b.c
new file mode 100644
index 000000000..fe2369a93
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/fcrypt_b.c
@@ -0,0 +1,72 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+
+#define DES_FCRYPT
+#include "des_locl.h"
+#undef DES_FCRYPT
+
+#undef PERM_OP
+#define PERM_OP(a,b,t,n,m) ((t)=((((a)>>(n))^(b))&(m)),\
+        (b)^=(t),\
+        (a)^=((t)<<(n)))
+
+#undef HPERM_OP
+#define HPERM_OP(a,t,n,m) ((t)=((((a)<<(16-(n)))^(a))&(m)),\
+        (a)=(a)^(t)^(t>>(16-(n))))\
+
+void fcrypt_body(DES_LONG *out, DES_key_schedule *ks, DES_LONG Eswap0,
+                 DES_LONG Eswap1)
+{
+    register DES_LONG l, r, t, u;
+    register DES_LONG *s;
+    register int j;
+    register DES_LONG E0, E1;
+
+    l = 0;
+    r = 0;
+
+    s = (DES_LONG *)ks;
+    E0 = Eswap0;
+    E1 = Eswap1;
+
+    for (j = 0; j < 25; j++) {
+        D_ENCRYPT(l, r, 0);     /* 1 */
+        D_ENCRYPT(r, l, 2);     /* 2 */
+        D_ENCRYPT(l, r, 4);     /* 3 */
+        D_ENCRYPT(r, l, 6);     /* 4 */
+        D_ENCRYPT(l, r, 8);     /* 5 */
+        D_ENCRYPT(r, l, 10);    /* 6 */
+        D_ENCRYPT(l, r, 12);    /* 7 */
+        D_ENCRYPT(r, l, 14);    /* 8 */
+        D_ENCRYPT(l, r, 16);    /* 9 */
+        D_ENCRYPT(r, l, 18);    /* 10 */
+        D_ENCRYPT(l, r, 20);    /* 11 */
+        D_ENCRYPT(r, l, 22);    /* 12 */
+        D_ENCRYPT(l, r, 24);    /* 13 */
+        D_ENCRYPT(r, l, 26);    /* 14 */
+        D_ENCRYPT(l, r, 28);    /* 15 */
+        D_ENCRYPT(r, l, 30);    /* 16 */
+        t = l;
+        l = r;
+        r = t;
+    }
+    l = ROTATE(l, 3) & 0xffffffffL;
+    r = ROTATE(r, 3) & 0xffffffffL;
+
+    PERM_OP(l, r, t,  1, 0x55555555L);
+    PERM_OP(r, l, t,  8, 0x00ff00ffL);
+    PERM_OP(l, r, t,  2, 0x33333333L);
+    PERM_OP(r, l, t, 16, 0x0000ffffL);
+    PERM_OP(l, r, t,  4, 0x0f0f0f0fL);
+
+    out[0] = r;
+    out[1] = l;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/ncbc_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/ncbc_enc.c
new file mode 100644
index 000000000..244f15ca2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/ncbc_enc.c
@@ -0,0 +1,106 @@
+/*
+ * Copyright 1998-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*-
+ * #included by:
+ *    cbc_enc.c  (DES_cbc_encrypt)
+ *    des_enc.c  (DES_ncbc_encrypt)
+ */
+
+#include "des_locl.h"
+
+#ifdef CBC_ENC_C__DONT_UPDATE_IV
+void DES_cbc_encrypt(const unsigned char *in, unsigned char *out, long length,
+                     DES_key_schedule *_schedule, DES_cblock *ivec, int enc)
+#else
+void DES_ncbc_encrypt(const unsigned char *in, unsigned char *out,
+                      long length, DES_key_schedule *_schedule,
+                      DES_cblock *ivec, int enc)
+#endif
+{
+    register DES_LONG tin0, tin1;
+    register DES_LONG tout0, tout1, xor0, xor1;
+    register long l = length;
+    DES_LONG tin[2];
+    unsigned char *iv;
+
+    iv = &(*ivec)[0];
+
+    if (enc) {
+        c2l(iv, tout0);
+        c2l(iv, tout1);
+        for (l -= 8; l >= 0; l -= 8) {
+            c2l(in, tin0);
+            c2l(in, tin1);
+            tin0 ^= tout0;
+            tin[0] = tin0;
+            tin1 ^= tout1;
+            tin[1] = tin1;
+            DES_encrypt1((DES_LONG *)tin, _schedule, DES_ENCRYPT);
+            tout0 = tin[0];
+            l2c(tout0, out);
+            tout1 = tin[1];
+            l2c(tout1, out);
+        }
+        if (l != -8) {
+            c2ln(in, tin0, tin1, l + 8);
+            tin0 ^= tout0;
+            tin[0] = tin0;
+            tin1 ^= tout1;
+            tin[1] = tin1;
+            DES_encrypt1((DES_LONG *)tin, _schedule, DES_ENCRYPT);
+            tout0 = tin[0];
+            l2c(tout0, out);
+            tout1 = tin[1];
+            l2c(tout1, out);
+        }
+#ifndef CBC_ENC_C__DONT_UPDATE_IV
+        iv = &(*ivec)[0];
+        l2c(tout0, iv);
+        l2c(tout1, iv);
+#endif
+    } else {
+        c2l(iv, xor0);
+        c2l(iv, xor1);
+        for (l -= 8; l >= 0; l -= 8) {
+            c2l(in, tin0);
+            tin[0] = tin0;
+            c2l(in, tin1);
+            tin[1] = tin1;
+            DES_encrypt1((DES_LONG *)tin, _schedule, DES_DECRYPT);
+            tout0 = tin[0] ^ xor0;
+            tout1 = tin[1] ^ xor1;
+            l2c(tout0, out);
+            l2c(tout1, out);
+            xor0 = tin0;
+            xor1 = tin1;
+        }
+        if (l != -8) {
+            c2l(in, tin0);
+            tin[0] = tin0;
+            c2l(in, tin1);
+            tin[1] = tin1;
+            DES_encrypt1((DES_LONG *)tin, _schedule, DES_DECRYPT);
+            tout0 = tin[0] ^ xor0;
+            tout1 = tin[1] ^ xor1;
+            l2cn(tout0, tout1, out, l + 8);
+#ifndef CBC_ENC_C__DONT_UPDATE_IV
+            xor0 = tin0;
+            xor1 = tin1;
+#endif
+        }
+#ifndef CBC_ENC_C__DONT_UPDATE_IV
+        iv = &(*ivec)[0];
+        l2c(xor0, iv);
+        l2c(xor1, iv);
+#endif
+    }
+    tin0 = tin1 = tout0 = tout1 = xor0 = xor1 = 0;
+    tin[0] = tin[1] = 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/ofb64ede.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/ofb64ede.c
new file mode 100644
index 000000000..a551a07e0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/ofb64ede.c
@@ -0,0 +1,62 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "des_locl.h"
+
+/*
+ * The input and output encrypted as though 64bit ofb mode is being used.
+ * The extra state information to record how much of the 64bit block we have
+ * used is contained in *num;
+ */
+void DES_ede3_ofb64_encrypt(register const unsigned char *in,
+                            register unsigned char *out, long length,
+                            DES_key_schedule *k1, DES_key_schedule *k2,
+                            DES_key_schedule *k3, DES_cblock *ivec, int *num)
+{
+    register DES_LONG v0, v1;
+    register int n = *num;
+    register long l = length;
+    DES_cblock d;
+    register char *dp;
+    DES_LONG ti[2];
+    unsigned char *iv;
+    int save = 0;
+
+    iv = &(*ivec)[0];
+    c2l(iv, v0);
+    c2l(iv, v1);
+    ti[0] = v0;
+    ti[1] = v1;
+    dp = (char *)d;
+    l2c(v0, dp);
+    l2c(v1, dp);
+    while (l--) {
+        if (n == 0) {
+            /* ti[0]=v0; */
+            /* ti[1]=v1; */
+            DES_encrypt3(ti, k1, k2, k3);
+            v0 = ti[0];
+            v1 = ti[1];
+
+            dp = (char *)d;
+            l2c(v0, dp);
+            l2c(v1, dp);
+            save++;
+        }
+        *(out++) = *(in++) ^ d[n];
+        n = (n + 1) & 0x07;
+    }
+    if (save) {
+        iv = &(*ivec)[0];
+        l2c(v0, iv);
+        l2c(v1, iv);
+    }
+    v0 = v1 = ti[0] = ti[1] = 0;
+    *num = n;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/ofb64enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/ofb64enc.c
new file mode 100644
index 000000000..30976c871
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/ofb64enc.c
@@ -0,0 +1,60 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "des_locl.h"
+
+/*
+ * The input and output encrypted as though 64bit ofb mode is being used.
+ * The extra state information to record how much of the 64bit block we have
+ * used is contained in *num;
+ */
+void DES_ofb64_encrypt(register const unsigned char *in,
+                       register unsigned char *out, long length,
+                       DES_key_schedule *schedule, DES_cblock *ivec, int *num)
+{
+    register DES_LONG v0, v1, t;
+    register int n = *num;
+    register long l = length;
+    DES_cblock d;
+    register unsigned char *dp;
+    DES_LONG ti[2];
+    unsigned char *iv;
+    int save = 0;
+
+    iv = &(*ivec)[0];
+    c2l(iv, v0);
+    c2l(iv, v1);
+    ti[0] = v0;
+    ti[1] = v1;
+    dp = d;
+    l2c(v0, dp);
+    l2c(v1, dp);
+    while (l--) {
+        if (n == 0) {
+            DES_encrypt1(ti, schedule, DES_ENCRYPT);
+            dp = d;
+            t = ti[0];
+            l2c(t, dp);
+            t = ti[1];
+            l2c(t, dp);
+            save++;
+        }
+        *(out++) = *(in++) ^ d[n];
+        n = (n + 1) & 0x07;
+    }
+    if (save) {
+        v0 = ti[0];
+        v1 = ti[1];
+        iv = &(*ivec)[0];
+        l2c(v0, iv);
+        l2c(v1, iv);
+    }
+    t = v0 = v1 = ti[0] = ti[1] = 0;
+    *num = n;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/ofb_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/ofb_enc.c
new file mode 100644
index 000000000..65a9b8604
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/ofb_enc.c
@@ -0,0 +1,82 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "des_locl.h"
+
+/*
+ * The input and output are loaded in multiples of 8 bits. What this means is
+ * that if you have numbits=12 and length=2 the first 12 bits will be
+ * retrieved from the first byte and half the second.  The second 12 bits
+ * will come from the 3rd and half the 4th byte.
+ */
+void DES_ofb_encrypt(const unsigned char *in, unsigned char *out, int numbits,
+                     long length, DES_key_schedule *schedule,
+                     DES_cblock *ivec)
+{
+    register DES_LONG d0, d1, vv0, vv1, v0, v1, n = (numbits + 7) / 8;
+    register DES_LONG mask0, mask1;
+    register long l = length;
+    register int num = numbits;
+    DES_LONG ti[2];
+    unsigned char *iv;
+
+    if (num > 64)
+        return;
+    if (num > 32) {
+        mask0 = 0xffffffffL;
+        if (num >= 64)
+            mask1 = mask0;
+        else
+            mask1 = (1L << (num - 32)) - 1;
+    } else {
+        if (num == 32)
+            mask0 = 0xffffffffL;
+        else
+            mask0 = (1L << num) - 1;
+        mask1 = 0x00000000L;
+    }
+
+    iv = &(*ivec)[0];
+    c2l(iv, v0);
+    c2l(iv, v1);
+    ti[0] = v0;
+    ti[1] = v1;
+    while (l-- > 0) {
+        ti[0] = v0;
+        ti[1] = v1;
+        DES_encrypt1((DES_LONG *)ti, schedule, DES_ENCRYPT);
+        vv0 = ti[0];
+        vv1 = ti[1];
+        c2ln(in, d0, d1, n);
+        in += n;
+        d0 = (d0 ^ vv0) & mask0;
+        d1 = (d1 ^ vv1) & mask1;
+        l2cn(d0, d1, out, n);
+        out += n;
+
+        if (num == 32) {
+            v0 = v1;
+            v1 = vv0;
+        } else if (num == 64) {
+            v0 = vv0;
+            v1 = vv1;
+        } else if (num > 32) {  /* && num != 64 */
+            v0 = ((v1 >> (num - 32)) | (vv0 << (64 - num))) & 0xffffffffL;
+            v1 = ((vv0 >> (num - 32)) | (vv1 << (64 - num))) & 0xffffffffL;
+        } else {                /* num < 32 */
+
+            v0 = ((v0 >> num) | (v1 << (32 - num))) & 0xffffffffL;
+            v1 = ((v1 >> num) | (vv0 << (32 - num))) & 0xffffffffL;
+        }
+    }
+    iv = &(*ivec)[0];
+    l2c(v0, iv);
+    l2c(v1, iv);
+    v0 = v1 = d0 = d1 = ti[0] = ti[1] = vv0 = vv1 = 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/pcbc_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/pcbc_enc.c
new file mode 100644
index 000000000..0fa058f03
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/pcbc_enc.c
@@ -0,0 +1,66 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "des_locl.h"
+
+void DES_pcbc_encrypt(const unsigned char *input, unsigned char *output,
+                      long length, DES_key_schedule *schedule,
+                      DES_cblock *ivec, int enc)
+{
+    register DES_LONG sin0, sin1, xor0, xor1, tout0, tout1;
+    DES_LONG tin[2];
+    const unsigned char *in;
+    unsigned char *out, *iv;
+
+    in = input;
+    out = output;
+    iv = &(*ivec)[0];
+
+    if (enc) {
+        c2l(iv, xor0);
+        c2l(iv, xor1);
+        for (; length > 0; length -= 8) {
+            if (length >= 8) {
+                c2l(in, sin0);
+                c2l(in, sin1);
+            } else
+                c2ln(in, sin0, sin1, length);
+            tin[0] = sin0 ^ xor0;
+            tin[1] = sin1 ^ xor1;
+            DES_encrypt1((DES_LONG *)tin, schedule, DES_ENCRYPT);
+            tout0 = tin[0];
+            tout1 = tin[1];
+            xor0 = sin0 ^ tout0;
+            xor1 = sin1 ^ tout1;
+            l2c(tout0, out);
+            l2c(tout1, out);
+        }
+    } else {
+        c2l(iv, xor0);
+        c2l(iv, xor1);
+        for (; length > 0; length -= 8) {
+            c2l(in, sin0);
+            c2l(in, sin1);
+            tin[0] = sin0;
+            tin[1] = sin1;
+            DES_encrypt1((DES_LONG *)tin, schedule, DES_DECRYPT);
+            tout0 = tin[0] ^ xor0;
+            tout1 = tin[1] ^ xor1;
+            if (length >= 8) {
+                l2c(tout0, out);
+                l2c(tout1, out);
+            } else
+                l2cn(tout0, tout1, out, length);
+            xor0 = tout0 ^ sin0;
+            xor1 = tout1 ^ sin1;
+        }
+    }
+    tin[0] = tin[1] = 0;
+    sin0 = sin1 = xor0 = xor1 = tout0 = tout1 = 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/qud_cksm.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/qud_cksm.c
new file mode 100644
index 000000000..81e6be822
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/qud_cksm.c
@@ -0,0 +1,76 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * From "Message Authentication" R.R. Jueneman, S.M. Matyas, C.H. Meyer IEEE
+ * Communications Magazine Sept 1985 Vol. 23 No. 9 p 29-40 This module in
+ * only based on the code in this paper and is almost definitely not the same
+ * as the MIT implementation.
+ */
+#include "des_locl.h"
+
+#define Q_B0(a) (((DES_LONG)(a)))
+#define Q_B1(a) (((DES_LONG)(a))<<8)
+#define Q_B2(a) (((DES_LONG)(a))<<16)
+#define Q_B3(a) (((DES_LONG)(a))<<24)
+
+/* used to scramble things a bit */
+/* Got the value MIT uses via brute force :-) 2/10/90 eay */
+#define NOISE   ((DES_LONG)83653421L)
+
+DES_LONG DES_quad_cksum(const unsigned char *input, DES_cblock output[],
+                        long length, int out_count, DES_cblock *seed)
+{
+    DES_LONG z0, z1, t0, t1;
+    int i;
+    long l;
+    const unsigned char *cp;
+    DES_LONG *lp;
+
+    if (out_count < 1)
+        out_count = 1;
+    lp = (DES_LONG *)&(output[0])[0];
+
+    z0 = Q_B0((*seed)[0]) | Q_B1((*seed)[1]) | Q_B2((*seed)[2]) |
+        Q_B3((*seed)[3]);
+    z1 = Q_B0((*seed)[4]) | Q_B1((*seed)[5]) | Q_B2((*seed)[6]) |
+        Q_B3((*seed)[7]);
+
+    for (i = 0; ((i < 4) && (i < out_count)); i++) {
+        cp = input;
+        l = length;
+        while (l > 0) {
+            if (l > 1) {
+                t0 = (DES_LONG)(*(cp++));
+                t0 |= (DES_LONG)Q_B1(*(cp++));
+                l--;
+            } else
+                t0 = (DES_LONG)(*(cp++));
+            l--;
+            /* add */
+            t0 += z0;
+            t0 &= 0xffffffffL;
+            t1 = z1;
+            /* square, well sort of square */
+            z0 = ((((t0 * t0) & 0xffffffffL) + ((t1 * t1) & 0xffffffffL))
+                  & 0xffffffffL) % 0x7fffffffL;
+            z1 = ((t0 * ((t1 + NOISE) & 0xffffffffL)) & 0xffffffffL) %
+                0x7fffffffL;
+        }
+        if (lp != NULL) {
+            /*
+             * The MIT library assumes that the checksum is composed of
+             * 2*out_count 32 bit ints
+             */
+            *lp++ = z0;
+            *lp++ = z1;
+        }
+    }
+    return z0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/rand_key.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/rand_key.c
new file mode 100644
index 000000000..fe8aefec3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/rand_key.c
@@ -0,0 +1,21 @@
+/*
+ * Copyright 1998-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/des.h>
+#include <openssl/rand.h>
+
+int DES_random_key(DES_cblock *ret)
+{
+    do {
+        if (RAND_priv_bytes((unsigned char *)ret, sizeof(DES_cblock)) != 1)
+            return 0;
+    } while (DES_is_weak_key(ret));
+    DES_set_odd_parity(ret);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/set_key.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/set_key.c
new file mode 100644
index 000000000..adbad7236
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/set_key.c
@@ -0,0 +1,372 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*-
+ * set_key.c v 1.4 eay 24/9/91
+ * 1.4 Speed up by 400% :-)
+ * 1.3 added register declarations.
+ * 1.2 unrolled make_key_sched a bit more
+ * 1.1 added norm_expand_bits
+ * 1.0 First working version
+ */
+#include <openssl/crypto.h>
+#include "des_locl.h"
+
+/* defaults to false */
+OPENSSL_IMPLEMENT_GLOBAL(int, DES_check_key, 0)
+
+static const unsigned char odd_parity[256] = {
+    1, 1, 2, 2, 4, 4, 7, 7, 8, 8, 11, 11, 13, 13, 14, 14,
+    16, 16, 19, 19, 21, 21, 22, 22, 25, 25, 26, 26, 28, 28, 31, 31,
+    32, 32, 35, 35, 37, 37, 38, 38, 41, 41, 42, 42, 44, 44, 47, 47,
+    49, 49, 50, 50, 52, 52, 55, 55, 56, 56, 59, 59, 61, 61, 62, 62,
+    64, 64, 67, 67, 69, 69, 70, 70, 73, 73, 74, 74, 76, 76, 79, 79,
+    81, 81, 82, 82, 84, 84, 87, 87, 88, 88, 91, 91, 93, 93, 94, 94,
+    97, 97, 98, 98, 100, 100, 103, 103, 104, 104, 107, 107, 109, 109, 110,
+    110,
+    112, 112, 115, 115, 117, 117, 118, 118, 121, 121, 122, 122, 124, 124, 127,
+    127,
+    128, 128, 131, 131, 133, 133, 134, 134, 137, 137, 138, 138, 140, 140, 143,
+    143,
+    145, 145, 146, 146, 148, 148, 151, 151, 152, 152, 155, 155, 157, 157, 158,
+    158,
+    161, 161, 162, 162, 164, 164, 167, 167, 168, 168, 171, 171, 173, 173, 174,
+    174,
+    176, 176, 179, 179, 181, 181, 182, 182, 185, 185, 186, 186, 188, 188, 191,
+    191,
+    193, 193, 194, 194, 196, 196, 199, 199, 200, 200, 203, 203, 205, 205, 206,
+    206,
+    208, 208, 211, 211, 213, 213, 214, 214, 217, 217, 218, 218, 220, 220, 223,
+    223,
+    224, 224, 227, 227, 229, 229, 230, 230, 233, 233, 234, 234, 236, 236, 239,
+    239,
+    241, 241, 242, 242, 244, 244, 247, 247, 248, 248, 251, 251, 253, 253, 254,
+    254
+};
+
+void DES_set_odd_parity(DES_cblock *key)
+{
+    unsigned int i;
+
+    for (i = 0; i < DES_KEY_SZ; i++)
+        (*key)[i] = odd_parity[(*key)[i]];
+}
+
+int DES_check_key_parity(const_DES_cblock *key)
+{
+    unsigned int i;
+
+    for (i = 0; i < DES_KEY_SZ; i++) {
+        if ((*key)[i] != odd_parity[(*key)[i]])
+            return 0;
+    }
+    return 1;
+}
+
+/*-
+ * Weak and semi weak keys as taken from
+ * %A D.W. Davies
+ * %A W.L. Price
+ * %T Security for Computer Networks
+ * %I John Wiley & Sons
+ * %D 1984
+ */
+#define NUM_WEAK_KEY    16
+static const DES_cblock weak_keys[NUM_WEAK_KEY] = {
+    /* weak keys */
+    {0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01},
+    {0xFE, 0xFE, 0xFE, 0xFE, 0xFE, 0xFE, 0xFE, 0xFE},
+    {0x1F, 0x1F, 0x1F, 0x1F, 0x0E, 0x0E, 0x0E, 0x0E},
+    {0xE0, 0xE0, 0xE0, 0xE0, 0xF1, 0xF1, 0xF1, 0xF1},
+    /* semi-weak keys */
+    {0x01, 0xFE, 0x01, 0xFE, 0x01, 0xFE, 0x01, 0xFE},
+    {0xFE, 0x01, 0xFE, 0x01, 0xFE, 0x01, 0xFE, 0x01},
+    {0x1F, 0xE0, 0x1F, 0xE0, 0x0E, 0xF1, 0x0E, 0xF1},
+    {0xE0, 0x1F, 0xE0, 0x1F, 0xF1, 0x0E, 0xF1, 0x0E},
+    {0x01, 0xE0, 0x01, 0xE0, 0x01, 0xF1, 0x01, 0xF1},
+    {0xE0, 0x01, 0xE0, 0x01, 0xF1, 0x01, 0xF1, 0x01},
+    {0x1F, 0xFE, 0x1F, 0xFE, 0x0E, 0xFE, 0x0E, 0xFE},
+    {0xFE, 0x1F, 0xFE, 0x1F, 0xFE, 0x0E, 0xFE, 0x0E},
+    {0x01, 0x1F, 0x01, 0x1F, 0x01, 0x0E, 0x01, 0x0E},
+    {0x1F, 0x01, 0x1F, 0x01, 0x0E, 0x01, 0x0E, 0x01},
+    {0xE0, 0xFE, 0xE0, 0xFE, 0xF1, 0xFE, 0xF1, 0xFE},
+    {0xFE, 0xE0, 0xFE, 0xE0, 0xFE, 0xF1, 0xFE, 0xF1}
+};
+
+int DES_is_weak_key(const_DES_cblock *key)
+{
+    int i;
+
+    for (i = 0; i < NUM_WEAK_KEY; i++)
+        if (memcmp(weak_keys[i], key, sizeof(DES_cblock)) == 0)
+            return 1;
+    return 0;
+}
+
+/*-
+ * NOW DEFINED IN des_local.h
+ * See ecb_encrypt.c for a pseudo description of these macros.
+ * #define PERM_OP(a,b,t,n,m) ((t)=((((a)>>(n))^(b))&(m)),\
+ *      (b)^=(t),\
+ *      (a)=((a)^((t)<<(n))))
+ */
+
+#define HPERM_OP(a,t,n,m) ((t)=((((a)<<(16-(n)))^(a))&(m)),\
+        (a)=(a)^(t)^(t>>(16-(n))))
+
+static const DES_LONG des_skb[8][64] = {
+    {
+     /* for C bits (numbered as per FIPS 46) 1 2 3 4 5 6 */
+     0x00000000L, 0x00000010L, 0x20000000L, 0x20000010L,
+     0x00010000L, 0x00010010L, 0x20010000L, 0x20010010L,
+     0x00000800L, 0x00000810L, 0x20000800L, 0x20000810L,
+     0x00010800L, 0x00010810L, 0x20010800L, 0x20010810L,
+     0x00000020L, 0x00000030L, 0x20000020L, 0x20000030L,
+     0x00010020L, 0x00010030L, 0x20010020L, 0x20010030L,
+     0x00000820L, 0x00000830L, 0x20000820L, 0x20000830L,
+     0x00010820L, 0x00010830L, 0x20010820L, 0x20010830L,
+     0x00080000L, 0x00080010L, 0x20080000L, 0x20080010L,
+     0x00090000L, 0x00090010L, 0x20090000L, 0x20090010L,
+     0x00080800L, 0x00080810L, 0x20080800L, 0x20080810L,
+     0x00090800L, 0x00090810L, 0x20090800L, 0x20090810L,
+     0x00080020L, 0x00080030L, 0x20080020L, 0x20080030L,
+     0x00090020L, 0x00090030L, 0x20090020L, 0x20090030L,
+     0x00080820L, 0x00080830L, 0x20080820L, 0x20080830L,
+     0x00090820L, 0x00090830L, 0x20090820L, 0x20090830L,
+     },
+    {
+     /* for C bits (numbered as per FIPS 46) 7 8 10 11 12 13 */
+     0x00000000L, 0x02000000L, 0x00002000L, 0x02002000L,
+     0x00200000L, 0x02200000L, 0x00202000L, 0x02202000L,
+     0x00000004L, 0x02000004L, 0x00002004L, 0x02002004L,
+     0x00200004L, 0x02200004L, 0x00202004L, 0x02202004L,
+     0x00000400L, 0x02000400L, 0x00002400L, 0x02002400L,
+     0x00200400L, 0x02200400L, 0x00202400L, 0x02202400L,
+     0x00000404L, 0x02000404L, 0x00002404L, 0x02002404L,
+     0x00200404L, 0x02200404L, 0x00202404L, 0x02202404L,
+     0x10000000L, 0x12000000L, 0x10002000L, 0x12002000L,
+     0x10200000L, 0x12200000L, 0x10202000L, 0x12202000L,
+     0x10000004L, 0x12000004L, 0x10002004L, 0x12002004L,
+     0x10200004L, 0x12200004L, 0x10202004L, 0x12202004L,
+     0x10000400L, 0x12000400L, 0x10002400L, 0x12002400L,
+     0x10200400L, 0x12200400L, 0x10202400L, 0x12202400L,
+     0x10000404L, 0x12000404L, 0x10002404L, 0x12002404L,
+     0x10200404L, 0x12200404L, 0x10202404L, 0x12202404L,
+     },
+    {
+     /* for C bits (numbered as per FIPS 46) 14 15 16 17 19 20 */
+     0x00000000L, 0x00000001L, 0x00040000L, 0x00040001L,
+     0x01000000L, 0x01000001L, 0x01040000L, 0x01040001L,
+     0x00000002L, 0x00000003L, 0x00040002L, 0x00040003L,
+     0x01000002L, 0x01000003L, 0x01040002L, 0x01040003L,
+     0x00000200L, 0x00000201L, 0x00040200L, 0x00040201L,
+     0x01000200L, 0x01000201L, 0x01040200L, 0x01040201L,
+     0x00000202L, 0x00000203L, 0x00040202L, 0x00040203L,
+     0x01000202L, 0x01000203L, 0x01040202L, 0x01040203L,
+     0x08000000L, 0x08000001L, 0x08040000L, 0x08040001L,
+     0x09000000L, 0x09000001L, 0x09040000L, 0x09040001L,
+     0x08000002L, 0x08000003L, 0x08040002L, 0x08040003L,
+     0x09000002L, 0x09000003L, 0x09040002L, 0x09040003L,
+     0x08000200L, 0x08000201L, 0x08040200L, 0x08040201L,
+     0x09000200L, 0x09000201L, 0x09040200L, 0x09040201L,
+     0x08000202L, 0x08000203L, 0x08040202L, 0x08040203L,
+     0x09000202L, 0x09000203L, 0x09040202L, 0x09040203L,
+     },
+    {
+     /* for C bits (numbered as per FIPS 46) 21 23 24 26 27 28 */
+     0x00000000L, 0x00100000L, 0x00000100L, 0x00100100L,
+     0x00000008L, 0x00100008L, 0x00000108L, 0x00100108L,
+     0x00001000L, 0x00101000L, 0x00001100L, 0x00101100L,
+     0x00001008L, 0x00101008L, 0x00001108L, 0x00101108L,
+     0x04000000L, 0x04100000L, 0x04000100L, 0x04100100L,
+     0x04000008L, 0x04100008L, 0x04000108L, 0x04100108L,
+     0x04001000L, 0x04101000L, 0x04001100L, 0x04101100L,
+     0x04001008L, 0x04101008L, 0x04001108L, 0x04101108L,
+     0x00020000L, 0x00120000L, 0x00020100L, 0x00120100L,
+     0x00020008L, 0x00120008L, 0x00020108L, 0x00120108L,
+     0x00021000L, 0x00121000L, 0x00021100L, 0x00121100L,
+     0x00021008L, 0x00121008L, 0x00021108L, 0x00121108L,
+     0x04020000L, 0x04120000L, 0x04020100L, 0x04120100L,
+     0x04020008L, 0x04120008L, 0x04020108L, 0x04120108L,
+     0x04021000L, 0x04121000L, 0x04021100L, 0x04121100L,
+     0x04021008L, 0x04121008L, 0x04021108L, 0x04121108L,
+     },
+    {
+     /* for D bits (numbered as per FIPS 46) 1 2 3 4 5 6 */
+     0x00000000L, 0x10000000L, 0x00010000L, 0x10010000L,
+     0x00000004L, 0x10000004L, 0x00010004L, 0x10010004L,
+     0x20000000L, 0x30000000L, 0x20010000L, 0x30010000L,
+     0x20000004L, 0x30000004L, 0x20010004L, 0x30010004L,
+     0x00100000L, 0x10100000L, 0x00110000L, 0x10110000L,
+     0x00100004L, 0x10100004L, 0x00110004L, 0x10110004L,
+     0x20100000L, 0x30100000L, 0x20110000L, 0x30110000L,
+     0x20100004L, 0x30100004L, 0x20110004L, 0x30110004L,
+     0x00001000L, 0x10001000L, 0x00011000L, 0x10011000L,
+     0x00001004L, 0x10001004L, 0x00011004L, 0x10011004L,
+     0x20001000L, 0x30001000L, 0x20011000L, 0x30011000L,
+     0x20001004L, 0x30001004L, 0x20011004L, 0x30011004L,
+     0x00101000L, 0x10101000L, 0x00111000L, 0x10111000L,
+     0x00101004L, 0x10101004L, 0x00111004L, 0x10111004L,
+     0x20101000L, 0x30101000L, 0x20111000L, 0x30111000L,
+     0x20101004L, 0x30101004L, 0x20111004L, 0x30111004L,
+     },
+    {
+     /* for D bits (numbered as per FIPS 46) 8 9 11 12 13 14 */
+     0x00000000L, 0x08000000L, 0x00000008L, 0x08000008L,
+     0x00000400L, 0x08000400L, 0x00000408L, 0x08000408L,
+     0x00020000L, 0x08020000L, 0x00020008L, 0x08020008L,
+     0x00020400L, 0x08020400L, 0x00020408L, 0x08020408L,
+     0x00000001L, 0x08000001L, 0x00000009L, 0x08000009L,
+     0x00000401L, 0x08000401L, 0x00000409L, 0x08000409L,
+     0x00020001L, 0x08020001L, 0x00020009L, 0x08020009L,
+     0x00020401L, 0x08020401L, 0x00020409L, 0x08020409L,
+     0x02000000L, 0x0A000000L, 0x02000008L, 0x0A000008L,
+     0x02000400L, 0x0A000400L, 0x02000408L, 0x0A000408L,
+     0x02020000L, 0x0A020000L, 0x02020008L, 0x0A020008L,
+     0x02020400L, 0x0A020400L, 0x02020408L, 0x0A020408L,
+     0x02000001L, 0x0A000001L, 0x02000009L, 0x0A000009L,
+     0x02000401L, 0x0A000401L, 0x02000409L, 0x0A000409L,
+     0x02020001L, 0x0A020001L, 0x02020009L, 0x0A020009L,
+     0x02020401L, 0x0A020401L, 0x02020409L, 0x0A020409L,
+     },
+    {
+     /* for D bits (numbered as per FIPS 46) 16 17 18 19 20 21 */
+     0x00000000L, 0x00000100L, 0x00080000L, 0x00080100L,
+     0x01000000L, 0x01000100L, 0x01080000L, 0x01080100L,
+     0x00000010L, 0x00000110L, 0x00080010L, 0x00080110L,
+     0x01000010L, 0x01000110L, 0x01080010L, 0x01080110L,
+     0x00200000L, 0x00200100L, 0x00280000L, 0x00280100L,
+     0x01200000L, 0x01200100L, 0x01280000L, 0x01280100L,
+     0x00200010L, 0x00200110L, 0x00280010L, 0x00280110L,
+     0x01200010L, 0x01200110L, 0x01280010L, 0x01280110L,
+     0x00000200L, 0x00000300L, 0x00080200L, 0x00080300L,
+     0x01000200L, 0x01000300L, 0x01080200L, 0x01080300L,
+     0x00000210L, 0x00000310L, 0x00080210L, 0x00080310L,
+     0x01000210L, 0x01000310L, 0x01080210L, 0x01080310L,
+     0x00200200L, 0x00200300L, 0x00280200L, 0x00280300L,
+     0x01200200L, 0x01200300L, 0x01280200L, 0x01280300L,
+     0x00200210L, 0x00200310L, 0x00280210L, 0x00280310L,
+     0x01200210L, 0x01200310L, 0x01280210L, 0x01280310L,
+     },
+    {
+     /* for D bits (numbered as per FIPS 46) 22 23 24 25 27 28 */
+     0x00000000L, 0x04000000L, 0x00040000L, 0x04040000L,
+     0x00000002L, 0x04000002L, 0x00040002L, 0x04040002L,
+     0x00002000L, 0x04002000L, 0x00042000L, 0x04042000L,
+     0x00002002L, 0x04002002L, 0x00042002L, 0x04042002L,
+     0x00000020L, 0x04000020L, 0x00040020L, 0x04040020L,
+     0x00000022L, 0x04000022L, 0x00040022L, 0x04040022L,
+     0x00002020L, 0x04002020L, 0x00042020L, 0x04042020L,
+     0x00002022L, 0x04002022L, 0x00042022L, 0x04042022L,
+     0x00000800L, 0x04000800L, 0x00040800L, 0x04040800L,
+     0x00000802L, 0x04000802L, 0x00040802L, 0x04040802L,
+     0x00002800L, 0x04002800L, 0x00042800L, 0x04042800L,
+     0x00002802L, 0x04002802L, 0x00042802L, 0x04042802L,
+     0x00000820L, 0x04000820L, 0x00040820L, 0x04040820L,
+     0x00000822L, 0x04000822L, 0x00040822L, 0x04040822L,
+     0x00002820L, 0x04002820L, 0x00042820L, 0x04042820L,
+     0x00002822L, 0x04002822L, 0x00042822L, 0x04042822L,
+     }
+};
+
+int DES_set_key(const_DES_cblock *key, DES_key_schedule *schedule)
+{
+    if (DES_check_key) {
+        return DES_set_key_checked(key, schedule);
+    } else {
+        DES_set_key_unchecked(key, schedule);
+        return 0;
+    }
+}
+
+/*-
+ * return 0 if key parity is odd (correct),
+ * return -1 if key parity error,
+ * return -2 if illegal weak key.
+ */
+int DES_set_key_checked(const_DES_cblock *key, DES_key_schedule *schedule)
+{
+    if (!DES_check_key_parity(key))
+        return -1;
+    if (DES_is_weak_key(key))
+        return -2;
+    DES_set_key_unchecked(key, schedule);
+    return 0;
+}
+
+void DES_set_key_unchecked(const_DES_cblock *key, DES_key_schedule *schedule)
+{
+    static const int shifts2[16] =
+        { 0, 0, 1, 1, 1, 1, 1, 1, 0, 1, 1, 1, 1, 1, 1, 0 };
+    register DES_LONG c, d, t, s, t2;
+    register const unsigned char *in;
+    register DES_LONG *k;
+    register int i;
+
+#ifdef OPENBSD_DEV_CRYPTO
+    memcpy(schedule->key, key, sizeof(schedule->key));
+    schedule->session = NULL;
+#endif
+    k = &schedule->ks->deslong[0];
+    in = &(*key)[0];
+
+    c2l(in, c);
+    c2l(in, d);
+
+    /*
+     * do PC1 in 47 simple operations. Thanks to John Fletcher
+     * for the inspiration.
+     */
+    PERM_OP(d, c, t, 4, 0x0f0f0f0fL);
+    HPERM_OP(c, t, -2, 0xcccc0000L);
+    HPERM_OP(d, t, -2, 0xcccc0000L);
+    PERM_OP(d, c, t, 1, 0x55555555L);
+    PERM_OP(c, d, t, 8, 0x00ff00ffL);
+    PERM_OP(d, c, t, 1, 0x55555555L);
+    d = (((d & 0x000000ffL) << 16L) | (d & 0x0000ff00L) |
+         ((d & 0x00ff0000L) >> 16L) | ((c & 0xf0000000L) >> 4L));
+    c &= 0x0fffffffL;
+
+    for (i = 0; i < ITERATIONS; i++) {
+        if (shifts2[i]) {
+            c = ((c >> 2L) | (c << 26L));
+            d = ((d >> 2L) | (d << 26L));
+        } else {
+            c = ((c >> 1L) | (c << 27L));
+            d = ((d >> 1L) | (d << 27L));
+        }
+        c &= 0x0fffffffL;
+        d &= 0x0fffffffL;
+        /*
+         * could be a few less shifts but I am to lazy at this point in time
+         * to investigate
+         */
+        s = des_skb[0][(c) & 0x3f] |
+            des_skb[1][((c >> 6L) & 0x03) | ((c >> 7L) & 0x3c)] |
+            des_skb[2][((c >> 13L) & 0x0f) | ((c >> 14L) & 0x30)] |
+            des_skb[3][((c >> 20L) & 0x01) | ((c >> 21L) & 0x06) |
+                       ((c >> 22L) & 0x38)];
+        t = des_skb[4][(d) & 0x3f] |
+            des_skb[5][((d >> 7L) & 0x03) | ((d >> 8L) & 0x3c)] |
+            des_skb[6][(d >> 15L) & 0x3f] |
+            des_skb[7][((d >> 21L) & 0x0f) | ((d >> 22L) & 0x30)];
+
+        /* table contained 0213 4657 */
+        t2 = ((t << 16L) | (s & 0x0000ffffL)) & 0xffffffffL;
+        *(k++) = ROTATE(t2, 30) & 0xffffffffL;
+
+        t2 = ((s >> 16L) | (t & 0xffff0000L));
+        *(k++) = ROTATE(t2, 26) & 0xffffffffL;
+    }
+}
+
+int DES_key_sched(const_DES_cblock *key, DES_key_schedule *schedule)
+{
+    return DES_set_key(key, schedule);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/spr.h b/trunk/3rdparty/openssl-1.1-fit/crypto/des/spr.h
new file mode 100644
index 000000000..2404e092d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/spr.h
@@ -0,0 +1,163 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+const DES_LONG DES_SPtrans[8][64] = {
+    {
+        /* nibble 0 */
+        0x02080800L, 0x00080000L, 0x02000002L, 0x02080802L,
+        0x02000000L, 0x00080802L, 0x00080002L, 0x02000002L,
+        0x00080802L, 0x02080800L, 0x02080000L, 0x00000802L,
+        0x02000802L, 0x02000000L, 0x00000000L, 0x00080002L,
+        0x00080000L, 0x00000002L, 0x02000800L, 0x00080800L,
+        0x02080802L, 0x02080000L, 0x00000802L, 0x02000800L,
+        0x00000002L, 0x00000800L, 0x00080800L, 0x02080002L,
+        0x00000800L, 0x02000802L, 0x02080002L, 0x00000000L,
+        0x00000000L, 0x02080802L, 0x02000800L, 0x00080002L,
+        0x02080800L, 0x00080000L, 0x00000802L, 0x02000800L,
+        0x02080002L, 0x00000800L, 0x00080800L, 0x02000002L,
+        0x00080802L, 0x00000002L, 0x02000002L, 0x02080000L,
+        0x02080802L, 0x00080800L, 0x02080000L, 0x02000802L,
+        0x02000000L, 0x00000802L, 0x00080002L, 0x00000000L,
+        0x00080000L, 0x02000000L, 0x02000802L, 0x02080800L,
+        0x00000002L, 0x02080002L, 0x00000800L, 0x00080802L,
+    },
+    {
+        /* nibble 1 */
+        0x40108010L, 0x00000000L, 0x00108000L, 0x40100000L,
+        0x40000010L, 0x00008010L, 0x40008000L, 0x00108000L,
+        0x00008000L, 0x40100010L, 0x00000010L, 0x40008000L,
+        0x00100010L, 0x40108000L, 0x40100000L, 0x00000010L,
+        0x00100000L, 0x40008010L, 0x40100010L, 0x00008000L,
+        0x00108010L, 0x40000000L, 0x00000000L, 0x00100010L,
+        0x40008010L, 0x00108010L, 0x40108000L, 0x40000010L,
+        0x40000000L, 0x00100000L, 0x00008010L, 0x40108010L,
+        0x00100010L, 0x40108000L, 0x40008000L, 0x00108010L,
+        0x40108010L, 0x00100010L, 0x40000010L, 0x00000000L,
+        0x40000000L, 0x00008010L, 0x00100000L, 0x40100010L,
+        0x00008000L, 0x40000000L, 0x00108010L, 0x40008010L,
+        0x40108000L, 0x00008000L, 0x00000000L, 0x40000010L,
+        0x00000010L, 0x40108010L, 0x00108000L, 0x40100000L,
+        0x40100010L, 0x00100000L, 0x00008010L, 0x40008000L,
+        0x40008010L, 0x00000010L, 0x40100000L, 0x00108000L,
+    },
+    {
+        /* nibble 2 */
+        0x04000001L, 0x04040100L, 0x00000100L, 0x04000101L,
+        0x00040001L, 0x04000000L, 0x04000101L, 0x00040100L,
+        0x04000100L, 0x00040000L, 0x04040000L, 0x00000001L,
+        0x04040101L, 0x00000101L, 0x00000001L, 0x04040001L,
+        0x00000000L, 0x00040001L, 0x04040100L, 0x00000100L,
+        0x00000101L, 0x04040101L, 0x00040000L, 0x04000001L,
+        0x04040001L, 0x04000100L, 0x00040101L, 0x04040000L,
+        0x00040100L, 0x00000000L, 0x04000000L, 0x00040101L,
+        0x04040100L, 0x00000100L, 0x00000001L, 0x00040000L,
+        0x00000101L, 0x00040001L, 0x04040000L, 0x04000101L,
+        0x00000000L, 0x04040100L, 0x00040100L, 0x04040001L,
+        0x00040001L, 0x04000000L, 0x04040101L, 0x00000001L,
+        0x00040101L, 0x04000001L, 0x04000000L, 0x04040101L,
+        0x00040000L, 0x04000100L, 0x04000101L, 0x00040100L,
+        0x04000100L, 0x00000000L, 0x04040001L, 0x00000101L,
+        0x04000001L, 0x00040101L, 0x00000100L, 0x04040000L,
+    },
+    {
+        /* nibble 3 */
+        0x00401008L, 0x10001000L, 0x00000008L, 0x10401008L,
+        0x00000000L, 0x10400000L, 0x10001008L, 0x00400008L,
+        0x10401000L, 0x10000008L, 0x10000000L, 0x00001008L,
+        0x10000008L, 0x00401008L, 0x00400000L, 0x10000000L,
+        0x10400008L, 0x00401000L, 0x00001000L, 0x00000008L,
+        0x00401000L, 0x10001008L, 0x10400000L, 0x00001000L,
+        0x00001008L, 0x00000000L, 0x00400008L, 0x10401000L,
+        0x10001000L, 0x10400008L, 0x10401008L, 0x00400000L,
+        0x10400008L, 0x00001008L, 0x00400000L, 0x10000008L,
+        0x00401000L, 0x10001000L, 0x00000008L, 0x10400000L,
+        0x10001008L, 0x00000000L, 0x00001000L, 0x00400008L,
+        0x00000000L, 0x10400008L, 0x10401000L, 0x00001000L,
+        0x10000000L, 0x10401008L, 0x00401008L, 0x00400000L,
+        0x10401008L, 0x00000008L, 0x10001000L, 0x00401008L,
+        0x00400008L, 0x00401000L, 0x10400000L, 0x10001008L,
+        0x00001008L, 0x10000000L, 0x10000008L, 0x10401000L,
+    },
+    {
+        /* nibble 4 */
+        0x08000000L, 0x00010000L, 0x00000400L, 0x08010420L,
+        0x08010020L, 0x08000400L, 0x00010420L, 0x08010000L,
+        0x00010000L, 0x00000020L, 0x08000020L, 0x00010400L,
+        0x08000420L, 0x08010020L, 0x08010400L, 0x00000000L,
+        0x00010400L, 0x08000000L, 0x00010020L, 0x00000420L,
+        0x08000400L, 0x00010420L, 0x00000000L, 0x08000020L,
+        0x00000020L, 0x08000420L, 0x08010420L, 0x00010020L,
+        0x08010000L, 0x00000400L, 0x00000420L, 0x08010400L,
+        0x08010400L, 0x08000420L, 0x00010020L, 0x08010000L,
+        0x00010000L, 0x00000020L, 0x08000020L, 0x08000400L,
+        0x08000000L, 0x00010400L, 0x08010420L, 0x00000000L,
+        0x00010420L, 0x08000000L, 0x00000400L, 0x00010020L,
+        0x08000420L, 0x00000400L, 0x00000000L, 0x08010420L,
+        0x08010020L, 0x08010400L, 0x00000420L, 0x00010000L,
+        0x00010400L, 0x08010020L, 0x08000400L, 0x00000420L,
+        0x00000020L, 0x00010420L, 0x08010000L, 0x08000020L,
+    },
+    {
+        /* nibble 5 */
+        0x80000040L, 0x00200040L, 0x00000000L, 0x80202000L,
+        0x00200040L, 0x00002000L, 0x80002040L, 0x00200000L,
+        0x00002040L, 0x80202040L, 0x00202000L, 0x80000000L,
+        0x80002000L, 0x80000040L, 0x80200000L, 0x00202040L,
+        0x00200000L, 0x80002040L, 0x80200040L, 0x00000000L,
+        0x00002000L, 0x00000040L, 0x80202000L, 0x80200040L,
+        0x80202040L, 0x80200000L, 0x80000000L, 0x00002040L,
+        0x00000040L, 0x00202000L, 0x00202040L, 0x80002000L,
+        0x00002040L, 0x80000000L, 0x80002000L, 0x00202040L,
+        0x80202000L, 0x00200040L, 0x00000000L, 0x80002000L,
+        0x80000000L, 0x00002000L, 0x80200040L, 0x00200000L,
+        0x00200040L, 0x80202040L, 0x00202000L, 0x00000040L,
+        0x80202040L, 0x00202000L, 0x00200000L, 0x80002040L,
+        0x80000040L, 0x80200000L, 0x00202040L, 0x00000000L,
+        0x00002000L, 0x80000040L, 0x80002040L, 0x80202000L,
+        0x80200000L, 0x00002040L, 0x00000040L, 0x80200040L,
+    },
+    {
+        /* nibble 6 */
+        0x00004000L, 0x00000200L, 0x01000200L, 0x01000004L,
+        0x01004204L, 0x00004004L, 0x00004200L, 0x00000000L,
+        0x01000000L, 0x01000204L, 0x00000204L, 0x01004000L,
+        0x00000004L, 0x01004200L, 0x01004000L, 0x00000204L,
+        0x01000204L, 0x00004000L, 0x00004004L, 0x01004204L,
+        0x00000000L, 0x01000200L, 0x01000004L, 0x00004200L,
+        0x01004004L, 0x00004204L, 0x01004200L, 0x00000004L,
+        0x00004204L, 0x01004004L, 0x00000200L, 0x01000000L,
+        0x00004204L, 0x01004000L, 0x01004004L, 0x00000204L,
+        0x00004000L, 0x00000200L, 0x01000000L, 0x01004004L,
+        0x01000204L, 0x00004204L, 0x00004200L, 0x00000000L,
+        0x00000200L, 0x01000004L, 0x00000004L, 0x01000200L,
+        0x00000000L, 0x01000204L, 0x01000200L, 0x00004200L,
+        0x00000204L, 0x00004000L, 0x01004204L, 0x01000000L,
+        0x01004200L, 0x00000004L, 0x00004004L, 0x01004204L,
+        0x01000004L, 0x01004200L, 0x01004000L, 0x00004004L,
+    },
+    {
+        /* nibble 7 */
+        0x20800080L, 0x20820000L, 0x00020080L, 0x00000000L,
+        0x20020000L, 0x00800080L, 0x20800000L, 0x20820080L,
+        0x00000080L, 0x20000000L, 0x00820000L, 0x00020080L,
+        0x00820080L, 0x20020080L, 0x20000080L, 0x20800000L,
+        0x00020000L, 0x00820080L, 0x00800080L, 0x20020000L,
+        0x20820080L, 0x20000080L, 0x00000000L, 0x00820000L,
+        0x20000000L, 0x00800000L, 0x20020080L, 0x20800080L,
+        0x00800000L, 0x00020000L, 0x20820000L, 0x00000080L,
+        0x00800000L, 0x00020000L, 0x20000080L, 0x20820080L,
+        0x00020080L, 0x20000000L, 0x00000000L, 0x00820000L,
+        0x20800080L, 0x20020080L, 0x20020000L, 0x00800080L,
+        0x20820000L, 0x00000080L, 0x00800080L, 0x20020000L,
+        0x20820080L, 0x00800000L, 0x20800000L, 0x20000080L,
+        0x00820000L, 0x00020080L, 0x20020080L, 0x20800000L,
+        0x00000080L, 0x20820000L, 0x00820080L, 0x00000000L,
+        0x20000000L, 0x20800080L, 0x00020000L, 0x00820080L,
+    }
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/str2key.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/str2key.c
new file mode 100644
index 000000000..e18d72652
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/str2key.c
@@ -0,0 +1,77 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/crypto.h>
+#include "des_locl.h"
+
+void DES_string_to_key(const char *str, DES_cblock *key)
+{
+    DES_key_schedule ks;
+    int i, length;
+
+    memset(key, 0, 8);
+    length = strlen(str);
+    for (i = 0; i < length; i++) {
+        register unsigned char j = str[i];
+
+        if ((i % 16) < 8)
+            (*key)[i % 8] ^= (j << 1);
+        else {
+            /* Reverse the bit order 05/05/92 eay */
+            j = ((j << 4) & 0xf0) | ((j >> 4) & 0x0f);
+            j = ((j << 2) & 0xcc) | ((j >> 2) & 0x33);
+            j = ((j << 1) & 0xaa) | ((j >> 1) & 0x55);
+            (*key)[7 - (i % 8)] ^= j;
+        }
+    }
+    DES_set_odd_parity(key);
+    DES_set_key_unchecked(key, &ks);
+    DES_cbc_cksum((const unsigned char *)str, key, length, &ks, key);
+    OPENSSL_cleanse(&ks, sizeof(ks));
+    DES_set_odd_parity(key);
+}
+
+void DES_string_to_2keys(const char *str, DES_cblock *key1, DES_cblock *key2)
+{
+    DES_key_schedule ks;
+    int i, length;
+
+    memset(key1, 0, 8);
+    memset(key2, 0, 8);
+    length = strlen(str);
+    for (i = 0; i < length; i++) {
+        register unsigned char j = str[i];
+
+        if ((i % 32) < 16) {
+            if ((i % 16) < 8)
+                (*key1)[i % 8] ^= (j << 1);
+            else
+                (*key2)[i % 8] ^= (j << 1);
+        } else {
+            j = ((j << 4) & 0xf0) | ((j >> 4) & 0x0f);
+            j = ((j << 2) & 0xcc) | ((j >> 2) & 0x33);
+            j = ((j << 1) & 0xaa) | ((j >> 1) & 0x55);
+            if ((i % 16) < 8)
+                (*key1)[7 - (i % 8)] ^= j;
+            else
+                (*key2)[7 - (i % 8)] ^= j;
+        }
+    }
+    if (length <= 8)
+        memcpy(key2, key1, 8);
+    DES_set_odd_parity(key1);
+    DES_set_odd_parity(key2);
+    DES_set_key_unchecked(key1, &ks);
+    DES_cbc_cksum((const unsigned char *)str, key1, length, &ks, key1);
+    DES_set_key_unchecked(key2, &ks);
+    DES_cbc_cksum((const unsigned char *)str, key2, length, &ks, key2);
+    OPENSSL_cleanse(&ks, sizeof(ks));
+    DES_set_odd_parity(key1);
+    DES_set_odd_parity(key2);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/des/xcbc_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/des/xcbc_enc.c
new file mode 100644
index 000000000..c4e455d9b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/des/xcbc_enc.c
@@ -0,0 +1,103 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "des_locl.h"
+
+/* RSA's DESX */
+
+void DES_xcbc_encrypt(const unsigned char *in, unsigned char *out,
+                      long length, DES_key_schedule *schedule,
+                      DES_cblock *ivec, const_DES_cblock *inw,
+                      const_DES_cblock *outw, int enc)
+{
+    register DES_LONG tin0, tin1;
+    register DES_LONG tout0, tout1, xor0, xor1;
+    register DES_LONG inW0, inW1, outW0, outW1;
+    register const unsigned char *in2;
+    register long l = length;
+    DES_LONG tin[2];
+    unsigned char *iv;
+
+    in2 = &(*inw)[0];
+    c2l(in2, inW0);
+    c2l(in2, inW1);
+    in2 = &(*outw)[0];
+    c2l(in2, outW0);
+    c2l(in2, outW1);
+
+    iv = &(*ivec)[0];
+
+    if (enc) {
+        c2l(iv, tout0);
+        c2l(iv, tout1);
+        for (l -= 8; l >= 0; l -= 8) {
+            c2l(in, tin0);
+            c2l(in, tin1);
+            tin0 ^= tout0 ^ inW0;
+            tin[0] = tin0;
+            tin1 ^= tout1 ^ inW1;
+            tin[1] = tin1;
+            DES_encrypt1(tin, schedule, DES_ENCRYPT);
+            tout0 = tin[0] ^ outW0;
+            l2c(tout0, out);
+            tout1 = tin[1] ^ outW1;
+            l2c(tout1, out);
+        }
+        if (l != -8) {
+            c2ln(in, tin0, tin1, l + 8);
+            tin0 ^= tout0 ^ inW0;
+            tin[0] = tin0;
+            tin1 ^= tout1 ^ inW1;
+            tin[1] = tin1;
+            DES_encrypt1(tin, schedule, DES_ENCRYPT);
+            tout0 = tin[0] ^ outW0;
+            l2c(tout0, out);
+            tout1 = tin[1] ^ outW1;
+            l2c(tout1, out);
+        }
+        iv = &(*ivec)[0];
+        l2c(tout0, iv);
+        l2c(tout1, iv);
+    } else {
+        c2l(iv, xor0);
+        c2l(iv, xor1);
+        for (l -= 8; l > 0; l -= 8) {
+            c2l(in, tin0);
+            tin[0] = tin0 ^ outW0;
+            c2l(in, tin1);
+            tin[1] = tin1 ^ outW1;
+            DES_encrypt1(tin, schedule, DES_DECRYPT);
+            tout0 = tin[0] ^ xor0 ^ inW0;
+            tout1 = tin[1] ^ xor1 ^ inW1;
+            l2c(tout0, out);
+            l2c(tout1, out);
+            xor0 = tin0;
+            xor1 = tin1;
+        }
+        if (l != -8) {
+            c2l(in, tin0);
+            tin[0] = tin0 ^ outW0;
+            c2l(in, tin1);
+            tin[1] = tin1 ^ outW1;
+            DES_encrypt1(tin, schedule, DES_DECRYPT);
+            tout0 = tin[0] ^ xor0 ^ inW0;
+            tout1 = tin[1] ^ xor1 ^ inW1;
+            l2cn(tout0, tout1, out, l + 8);
+            xor0 = tin0;
+            xor1 = tin1;
+        }
+
+        iv = &(*ivec)[0];
+        l2c(xor0, iv);
+        l2c(xor1, iv);
+    }
+    tin0 = tin1 = tout0 = tout1 = xor0 = xor1 = 0;
+    inW0 = inW1 = outW0 = outW1 = 0;
+    tin[0] = tin[1] = 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/build.info
new file mode 100644
index 000000000..b19ff6dba
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/build.info
@@ -0,0 +1,5 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        dh_asn1.c dh_gen.c dh_key.c dh_lib.c dh_check.c dh_err.c dh_depr.c \
+        dh_ameth.c dh_pmeth.c dh_prn.c dh_rfc5114.c dh_kdf.c dh_meth.c \
+        dh_rfc7919.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh1024.pem b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh1024.pem
new file mode 100644
index 000000000..81d43f6a3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh1024.pem
@@ -0,0 +1,5 @@
+-----BEGIN DH PARAMETERS-----
+MIGHAoGBAJf2QmHKtQXdKCjhPx1ottPb0PMTBH9A6FbaWMsTuKG/K3g6TG1Z1fkq
+/Gz/PWk/eLI9TzFgqVAuPvr3q14a1aZeVUMTgo2oO5/y2UHe6VaJ+trqCTat3xlx
+/mNbIK9HA2RgPC3gWfVLZQrY+gz3ASHHR5nXWHEyvpuZm7m3h+irAgEC
+-----END DH PARAMETERS-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh192.pem b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh192.pem
new file mode 100644
index 000000000..521c07271
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh192.pem
@@ -0,0 +1,3 @@
+-----BEGIN DH PARAMETERS-----
+MB4CGQDUoLoCULb9LsYm5+/WN992xxbiLQlEuIsCAQM=
+-----END DH PARAMETERS-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh2048.pem b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh2048.pem
new file mode 100644
index 000000000..295460f50
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh2048.pem
@@ -0,0 +1,16 @@
+-----BEGIN DH PARAMETERS-----
+MIIBCAKCAQEA7ZKJNYJFVcs7+6J2WmkEYb8h86tT0s0h2v94GRFS8Q7B4lW9aG9o
+AFO5Imov5Jo0H2XMWTKKvbHbSe3fpxJmw/0hBHAY8H/W91hRGXKCeyKpNBgdL8sh
+z22SrkO2qCnHJ6PLAMXy5fsKpFmFor2tRfCzrfnggTXu2YOzzK7q62bmqVdmufEo
+pT8igNcLpvZxk5uBDvhakObMym9mX3rAEBoe8PwttggMYiiw7NuJKO4MqD1llGkW
+aVM8U2ATsCun1IKHrRxynkE1/MJ86VHeYYX8GZt2YA8z+GuzylIOKcMH6JAWzMwA
+Gbatw6QwizOhr9iMjZ0B26TE3X8LvW84wwIBAg==
+-----END DH PARAMETERS-----
+-----BEGIN DH PARAMETERS-----
+MIIBCAKCAQEArtA3w73zP6Lu3EOQtwogiXt3AXXpuS6yD4BhzNS1pZFyPHk0/an5
+8ydEkPhQZHKDW+BZJxxPLANaTudWo2YT8TgtvUdN6KSgMiEi6McwqDw+SADuvW+F
+SKUYFxG6VFIxyEP6xBdf+vhJxEDbRG2EYsHDRRtJ76gp9cSKTHusf2R+4AAVGqnt
+gRAbNqtcOar/7FSj+Pl8G3v0Bty0LcCSpbqgYlnv6z+rErQmmC6PPvSz97TDMCok
+yKpCE9hFA1zkqK3TH4FmFvGeIaXJUIBZf4mArWuBTjWFW3nmhESRUn1VK3K3x42N
+a5k6c2+EhrMFiLjxuH6JZoqL0/E93FF9SwIBAg==
+-----END DH PARAMETERS-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh4096.pem b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh4096.pem
new file mode 100644
index 000000000..390943a21
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh4096.pem
@@ -0,0 +1,14 @@
+-----BEGIN DH PARAMETERS-----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=
+-----END DH PARAMETERS-----
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh512.pem b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh512.pem
new file mode 100644
index 000000000..0a4d863eb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh512.pem
@@ -0,0 +1,4 @@
+-----BEGIN DH PARAMETERS-----
+MEYCQQDaWDwW2YUiidDkr3VvTMqS3UvlM7gE+w/tlO+cikQD7VdGUNNpmdsp13Yn
+a6LT1BLiGPTdHghM9tgAPnxHdOgzAgEC
+-----END DH PARAMETERS-----
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_ameth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_ameth.c
new file mode 100644
index 000000000..05a1d4227
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_ameth.c
@@ -0,0 +1,907 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/asn1.h>
+#include "dh_locl.h"
+#include <openssl/bn.h>
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+#include <openssl/cms.h>
+
+/*
+ * i2d/d2i like DH parameter functions which use the appropriate routine for
+ * PKCS#3 DH or X9.42 DH.
+ */
+
+static DH *d2i_dhp(const EVP_PKEY *pkey, const unsigned char **pp,
+                   long length)
+{
+    if (pkey->ameth == &dhx_asn1_meth)
+        return d2i_DHxparams(NULL, pp, length);
+    return d2i_DHparams(NULL, pp, length);
+}
+
+static int i2d_dhp(const EVP_PKEY *pkey, const DH *a, unsigned char **pp)
+{
+    if (pkey->ameth == &dhx_asn1_meth)
+        return i2d_DHxparams(a, pp);
+    return i2d_DHparams(a, pp);
+}
+
+static void int_dh_free(EVP_PKEY *pkey)
+{
+    DH_free(pkey->pkey.dh);
+}
+
+static int dh_pub_decode(EVP_PKEY *pkey, X509_PUBKEY *pubkey)
+{
+    const unsigned char *p, *pm;
+    int pklen, pmlen;
+    int ptype;
+    const void *pval;
+    const ASN1_STRING *pstr;
+    X509_ALGOR *palg;
+    ASN1_INTEGER *public_key = NULL;
+
+    DH *dh = NULL;
+
+    if (!X509_PUBKEY_get0_param(NULL, &p, &pklen, &palg, pubkey))
+        return 0;
+    X509_ALGOR_get0(NULL, &ptype, &pval, palg);
+
+    if (ptype != V_ASN1_SEQUENCE) {
+        DHerr(DH_F_DH_PUB_DECODE, DH_R_PARAMETER_ENCODING_ERROR);
+        goto err;
+    }
+
+    pstr = pval;
+    pm = pstr->data;
+    pmlen = pstr->length;
+
+    if ((dh = d2i_dhp(pkey, &pm, pmlen)) == NULL) {
+        DHerr(DH_F_DH_PUB_DECODE, DH_R_DECODE_ERROR);
+        goto err;
+    }
+
+    if ((public_key = d2i_ASN1_INTEGER(NULL, &p, pklen)) == NULL) {
+        DHerr(DH_F_DH_PUB_DECODE, DH_R_DECODE_ERROR);
+        goto err;
+    }
+
+    /* We have parameters now set public key */
+    if ((dh->pub_key = ASN1_INTEGER_to_BN(public_key, NULL)) == NULL) {
+        DHerr(DH_F_DH_PUB_DECODE, DH_R_BN_DECODE_ERROR);
+        goto err;
+    }
+
+    ASN1_INTEGER_free(public_key);
+    EVP_PKEY_assign(pkey, pkey->ameth->pkey_id, dh);
+    return 1;
+
+ err:
+    ASN1_INTEGER_free(public_key);
+    DH_free(dh);
+    return 0;
+
+}
+
+static int dh_pub_encode(X509_PUBKEY *pk, const EVP_PKEY *pkey)
+{
+    DH *dh;
+    int ptype;
+    unsigned char *penc = NULL;
+    int penclen;
+    ASN1_STRING *str;
+    ASN1_INTEGER *pub_key = NULL;
+
+    dh = pkey->pkey.dh;
+
+    str = ASN1_STRING_new();
+    if (str == NULL) {
+        DHerr(DH_F_DH_PUB_ENCODE, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    str->length = i2d_dhp(pkey, dh, &str->data);
+    if (str->length <= 0) {
+        DHerr(DH_F_DH_PUB_ENCODE, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    ptype = V_ASN1_SEQUENCE;
+
+    pub_key = BN_to_ASN1_INTEGER(dh->pub_key, NULL);
+    if (!pub_key)
+        goto err;
+
+    penclen = i2d_ASN1_INTEGER(pub_key, &penc);
+
+    ASN1_INTEGER_free(pub_key);
+
+    if (penclen <= 0) {
+        DHerr(DH_F_DH_PUB_ENCODE, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (X509_PUBKEY_set0_param(pk, OBJ_nid2obj(pkey->ameth->pkey_id),
+                               ptype, str, penc, penclen))
+        return 1;
+
+ err:
+    OPENSSL_free(penc);
+    ASN1_STRING_free(str);
+
+    return 0;
+}
+
+/*
+ * PKCS#8 DH is defined in PKCS#11 of all places. It is similar to DH in that
+ * the AlgorithmIdentifier contains the parameters, the private key is
+ * explicitly included and the pubkey must be recalculated.
+ */
+
+static int dh_priv_decode(EVP_PKEY *pkey, const PKCS8_PRIV_KEY_INFO *p8)
+{
+    const unsigned char *p, *pm;
+    int pklen, pmlen;
+    int ptype;
+    const void *pval;
+    const ASN1_STRING *pstr;
+    const X509_ALGOR *palg;
+    ASN1_INTEGER *privkey = NULL;
+
+    DH *dh = NULL;
+
+    if (!PKCS8_pkey_get0(NULL, &p, &pklen, &palg, p8))
+        return 0;
+
+    X509_ALGOR_get0(NULL, &ptype, &pval, palg);
+
+    if (ptype != V_ASN1_SEQUENCE)
+        goto decerr;
+    if ((privkey = d2i_ASN1_INTEGER(NULL, &p, pklen)) == NULL)
+        goto decerr;
+
+    pstr = pval;
+    pm = pstr->data;
+    pmlen = pstr->length;
+    if ((dh = d2i_dhp(pkey, &pm, pmlen)) == NULL)
+        goto decerr;
+
+    /* We have parameters now set private key */
+    if ((dh->priv_key = BN_secure_new()) == NULL
+        || !ASN1_INTEGER_to_BN(privkey, dh->priv_key)) {
+        DHerr(DH_F_DH_PRIV_DECODE, DH_R_BN_ERROR);
+        goto dherr;
+    }
+    /* Calculate public key */
+    if (!DH_generate_key(dh))
+        goto dherr;
+
+    EVP_PKEY_assign(pkey, pkey->ameth->pkey_id, dh);
+
+    ASN1_STRING_clear_free(privkey);
+
+    return 1;
+
+ decerr:
+    DHerr(DH_F_DH_PRIV_DECODE, EVP_R_DECODE_ERROR);
+ dherr:
+    DH_free(dh);
+    ASN1_STRING_clear_free(privkey);
+    return 0;
+}
+
+static int dh_priv_encode(PKCS8_PRIV_KEY_INFO *p8, const EVP_PKEY *pkey)
+{
+    ASN1_STRING *params = NULL;
+    ASN1_INTEGER *prkey = NULL;
+    unsigned char *dp = NULL;
+    int dplen;
+
+    params = ASN1_STRING_new();
+
+    if (params == NULL) {
+        DHerr(DH_F_DH_PRIV_ENCODE, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    params->length = i2d_dhp(pkey, pkey->pkey.dh, &params->data);
+    if (params->length <= 0) {
+        DHerr(DH_F_DH_PRIV_ENCODE, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    params->type = V_ASN1_SEQUENCE;
+
+    /* Get private key into integer */
+    prkey = BN_to_ASN1_INTEGER(pkey->pkey.dh->priv_key, NULL);
+
+    if (!prkey) {
+        DHerr(DH_F_DH_PRIV_ENCODE, DH_R_BN_ERROR);
+        goto err;
+    }
+
+    dplen = i2d_ASN1_INTEGER(prkey, &dp);
+
+    ASN1_STRING_clear_free(prkey);
+    prkey = NULL;
+
+    if (!PKCS8_pkey_set0(p8, OBJ_nid2obj(pkey->ameth->pkey_id), 0,
+                         V_ASN1_SEQUENCE, params, dp, dplen))
+        goto err;
+
+    return 1;
+
+ err:
+    OPENSSL_free(dp);
+    ASN1_STRING_free(params);
+    ASN1_STRING_clear_free(prkey);
+    return 0;
+}
+
+static int dh_param_decode(EVP_PKEY *pkey,
+                           const unsigned char **pder, int derlen)
+{
+    DH *dh;
+
+    if ((dh = d2i_dhp(pkey, pder, derlen)) == NULL) {
+        DHerr(DH_F_DH_PARAM_DECODE, ERR_R_DH_LIB);
+        return 0;
+    }
+    EVP_PKEY_assign(pkey, pkey->ameth->pkey_id, dh);
+    return 1;
+}
+
+static int dh_param_encode(const EVP_PKEY *pkey, unsigned char **pder)
+{
+    return i2d_dhp(pkey, pkey->pkey.dh, pder);
+}
+
+static int do_dh_print(BIO *bp, const DH *x, int indent, int ptype)
+{
+    int reason = ERR_R_BUF_LIB;
+    const char *ktype = NULL;
+    BIGNUM *priv_key, *pub_key;
+
+    if (ptype == 2)
+        priv_key = x->priv_key;
+    else
+        priv_key = NULL;
+
+    if (ptype > 0)
+        pub_key = x->pub_key;
+    else
+        pub_key = NULL;
+
+    if (x->p == NULL || (ptype == 2 && priv_key == NULL)
+            || (ptype > 0 && pub_key == NULL)) {
+        reason = ERR_R_PASSED_NULL_PARAMETER;
+        goto err;
+    }
+
+    if (ptype == 2)
+        ktype = "DH Private-Key";
+    else if (ptype == 1)
+        ktype = "DH Public-Key";
+    else
+        ktype = "DH Parameters";
+
+    BIO_indent(bp, indent, 128);
+    if (BIO_printf(bp, "%s: (%d bit)\n", ktype, BN_num_bits(x->p)) <= 0)
+        goto err;
+    indent += 4;
+
+    if (!ASN1_bn_print(bp, "private-key:", priv_key, NULL, indent))
+        goto err;
+    if (!ASN1_bn_print(bp, "public-key:", pub_key, NULL, indent))
+        goto err;
+
+    if (!ASN1_bn_print(bp, "prime:", x->p, NULL, indent))
+        goto err;
+    if (!ASN1_bn_print(bp, "generator:", x->g, NULL, indent))
+        goto err;
+    if (x->q && !ASN1_bn_print(bp, "subgroup order:", x->q, NULL, indent))
+        goto err;
+    if (x->j && !ASN1_bn_print(bp, "subgroup factor:", x->j, NULL, indent))
+        goto err;
+    if (x->seed) {
+        int i;
+        BIO_indent(bp, indent, 128);
+        BIO_puts(bp, "seed:");
+        for (i = 0; i < x->seedlen; i++) {
+            if ((i % 15) == 0) {
+                if (BIO_puts(bp, "\n") <= 0
+                    || !BIO_indent(bp, indent + 4, 128))
+                    goto err;
+            }
+            if (BIO_printf(bp, "%02x%s", x->seed[i],
+                           ((i + 1) == x->seedlen) ? "" : ":") <= 0)
+                goto err;
+        }
+        if (BIO_write(bp, "\n", 1) <= 0)
+            return 0;
+    }
+    if (x->counter && !ASN1_bn_print(bp, "counter:", x->counter, NULL, indent))
+        goto err;
+    if (x->length != 0) {
+        BIO_indent(bp, indent, 128);
+        if (BIO_printf(bp, "recommended-private-length: %d bits\n",
+                       (int)x->length) <= 0)
+            goto err;
+    }
+
+    return 1;
+
+ err:
+    DHerr(DH_F_DO_DH_PRINT, reason);
+    return 0;
+}
+
+static int int_dh_size(const EVP_PKEY *pkey)
+{
+    return DH_size(pkey->pkey.dh);
+}
+
+static int dh_bits(const EVP_PKEY *pkey)
+{
+    return BN_num_bits(pkey->pkey.dh->p);
+}
+
+static int dh_security_bits(const EVP_PKEY *pkey)
+{
+    return DH_security_bits(pkey->pkey.dh);
+}
+
+static int dh_cmp_parameters(const EVP_PKEY *a, const EVP_PKEY *b)
+{
+    if (BN_cmp(a->pkey.dh->p, b->pkey.dh->p) ||
+        BN_cmp(a->pkey.dh->g, b->pkey.dh->g))
+        return 0;
+    else if (a->ameth == &dhx_asn1_meth) {
+        if (BN_cmp(a->pkey.dh->q, b->pkey.dh->q))
+            return 0;
+    }
+    return 1;
+}
+
+static int int_dh_bn_cpy(BIGNUM **dst, const BIGNUM *src)
+{
+    BIGNUM *a;
+
+    /*
+     * If source is read only just copy the pointer, so
+     * we don't have to reallocate it.
+     */
+    if (src == NULL)
+        a = NULL;
+    else if (BN_get_flags(src, BN_FLG_STATIC_DATA)
+                && !BN_get_flags(src, BN_FLG_MALLOCED))
+        a = (BIGNUM *)src;
+    else if ((a = BN_dup(src)) == NULL)
+        return 0;
+    BN_clear_free(*dst);
+    *dst = a;
+    return 1;
+}
+
+static int int_dh_param_copy(DH *to, const DH *from, int is_x942)
+{
+    if (is_x942 == -1)
+        is_x942 = ! !from->q;
+    if (!int_dh_bn_cpy(&to->p, from->p))
+        return 0;
+    if (!int_dh_bn_cpy(&to->g, from->g))
+        return 0;
+    if (is_x942) {
+        if (!int_dh_bn_cpy(&to->q, from->q))
+            return 0;
+        if (!int_dh_bn_cpy(&to->j, from->j))
+            return 0;
+        OPENSSL_free(to->seed);
+        to->seed = NULL;
+        to->seedlen = 0;
+        if (from->seed) {
+            to->seed = OPENSSL_memdup(from->seed, from->seedlen);
+            if (!to->seed)
+                return 0;
+            to->seedlen = from->seedlen;
+        }
+    } else
+        to->length = from->length;
+    return 1;
+}
+
+DH *DHparams_dup(DH *dh)
+{
+    DH *ret;
+    ret = DH_new();
+    if (ret == NULL)
+        return NULL;
+    if (!int_dh_param_copy(ret, dh, -1)) {
+        DH_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+static int dh_copy_parameters(EVP_PKEY *to, const EVP_PKEY *from)
+{
+    if (to->pkey.dh == NULL) {
+        to->pkey.dh = DH_new();
+        if (to->pkey.dh == NULL)
+            return 0;
+    }
+    return int_dh_param_copy(to->pkey.dh, from->pkey.dh,
+                             from->ameth == &dhx_asn1_meth);
+}
+
+static int dh_missing_parameters(const EVP_PKEY *a)
+{
+    if (a->pkey.dh == NULL || a->pkey.dh->p == NULL || a->pkey.dh->g == NULL)
+        return 1;
+    return 0;
+}
+
+static int dh_pub_cmp(const EVP_PKEY *a, const EVP_PKEY *b)
+{
+    if (dh_cmp_parameters(a, b) == 0)
+        return 0;
+    if (BN_cmp(b->pkey.dh->pub_key, a->pkey.dh->pub_key) != 0)
+        return 0;
+    else
+        return 1;
+}
+
+static int dh_param_print(BIO *bp, const EVP_PKEY *pkey, int indent,
+                          ASN1_PCTX *ctx)
+{
+    return do_dh_print(bp, pkey->pkey.dh, indent, 0);
+}
+
+static int dh_public_print(BIO *bp, const EVP_PKEY *pkey, int indent,
+                           ASN1_PCTX *ctx)
+{
+    return do_dh_print(bp, pkey->pkey.dh, indent, 1);
+}
+
+static int dh_private_print(BIO *bp, const EVP_PKEY *pkey, int indent,
+                            ASN1_PCTX *ctx)
+{
+    return do_dh_print(bp, pkey->pkey.dh, indent, 2);
+}
+
+int DHparams_print(BIO *bp, const DH *x)
+{
+    return do_dh_print(bp, x, 4, 0);
+}
+
+#ifndef OPENSSL_NO_CMS
+static int dh_cms_decrypt(CMS_RecipientInfo *ri);
+static int dh_cms_encrypt(CMS_RecipientInfo *ri);
+#endif
+
+static int dh_pkey_ctrl(EVP_PKEY *pkey, int op, long arg1, void *arg2)
+{
+    switch (op) {
+#ifndef OPENSSL_NO_CMS
+
+    case ASN1_PKEY_CTRL_CMS_ENVELOPE:
+        if (arg1 == 1)
+            return dh_cms_decrypt(arg2);
+        else if (arg1 == 0)
+            return dh_cms_encrypt(arg2);
+        return -2;
+
+    case ASN1_PKEY_CTRL_CMS_RI_TYPE:
+        *(int *)arg2 = CMS_RECIPINFO_AGREE;
+        return 1;
+#endif
+    default:
+        return -2;
+    }
+
+}
+
+static int dh_pkey_public_check(const EVP_PKEY *pkey)
+{
+    DH *dh = pkey->pkey.dh;
+
+    if (dh->pub_key == NULL) {
+        DHerr(DH_F_DH_PKEY_PUBLIC_CHECK, DH_R_MISSING_PUBKEY);
+        return 0;
+    }
+
+    return DH_check_pub_key_ex(dh, dh->pub_key);
+}
+
+static int dh_pkey_param_check(const EVP_PKEY *pkey)
+{
+    DH *dh = pkey->pkey.dh;
+
+    return DH_check_ex(dh);
+}
+
+const EVP_PKEY_ASN1_METHOD dh_asn1_meth = {
+    EVP_PKEY_DH,
+    EVP_PKEY_DH,
+    0,
+
+    "DH",
+    "OpenSSL PKCS#3 DH method",
+
+    dh_pub_decode,
+    dh_pub_encode,
+    dh_pub_cmp,
+    dh_public_print,
+
+    dh_priv_decode,
+    dh_priv_encode,
+    dh_private_print,
+
+    int_dh_size,
+    dh_bits,
+    dh_security_bits,
+
+    dh_param_decode,
+    dh_param_encode,
+    dh_missing_parameters,
+    dh_copy_parameters,
+    dh_cmp_parameters,
+    dh_param_print,
+    0,
+
+    int_dh_free,
+    0,
+
+    0, 0, 0, 0, 0,
+
+    0,
+    dh_pkey_public_check,
+    dh_pkey_param_check
+};
+
+const EVP_PKEY_ASN1_METHOD dhx_asn1_meth = {
+    EVP_PKEY_DHX,
+    EVP_PKEY_DHX,
+    0,
+
+    "X9.42 DH",
+    "OpenSSL X9.42 DH method",
+
+    dh_pub_decode,
+    dh_pub_encode,
+    dh_pub_cmp,
+    dh_public_print,
+
+    dh_priv_decode,
+    dh_priv_encode,
+    dh_private_print,
+
+    int_dh_size,
+    dh_bits,
+    dh_security_bits,
+
+    dh_param_decode,
+    dh_param_encode,
+    dh_missing_parameters,
+    dh_copy_parameters,
+    dh_cmp_parameters,
+    dh_param_print,
+    0,
+
+    int_dh_free,
+    dh_pkey_ctrl,
+
+    0, 0, 0, 0, 0,
+
+    0,
+    dh_pkey_public_check,
+    dh_pkey_param_check
+};
+
+#ifndef OPENSSL_NO_CMS
+
+static int dh_cms_set_peerkey(EVP_PKEY_CTX *pctx,
+                              X509_ALGOR *alg, ASN1_BIT_STRING *pubkey)
+{
+    const ASN1_OBJECT *aoid;
+    int atype;
+    const void *aval;
+    ASN1_INTEGER *public_key = NULL;
+    int rv = 0;
+    EVP_PKEY *pkpeer = NULL, *pk = NULL;
+    DH *dhpeer = NULL;
+    const unsigned char *p;
+    int plen;
+
+    X509_ALGOR_get0(&aoid, &atype, &aval, alg);
+    if (OBJ_obj2nid(aoid) != NID_dhpublicnumber)
+        goto err;
+    /* Only absent parameters allowed in RFC XXXX */
+    if (atype != V_ASN1_UNDEF && atype == V_ASN1_NULL)
+        goto err;
+
+    pk = EVP_PKEY_CTX_get0_pkey(pctx);
+    if (!pk)
+        goto err;
+    if (pk->type != EVP_PKEY_DHX)
+        goto err;
+    /* Get parameters from parent key */
+    dhpeer = DHparams_dup(pk->pkey.dh);
+    /* We have parameters now set public key */
+    plen = ASN1_STRING_length(pubkey);
+    p = ASN1_STRING_get0_data(pubkey);
+    if (!p || !plen)
+        goto err;
+
+    if ((public_key = d2i_ASN1_INTEGER(NULL, &p, plen)) == NULL) {
+        DHerr(DH_F_DH_CMS_SET_PEERKEY, DH_R_DECODE_ERROR);
+        goto err;
+    }
+
+    /* We have parameters now set public key */
+    if ((dhpeer->pub_key = ASN1_INTEGER_to_BN(public_key, NULL)) == NULL) {
+        DHerr(DH_F_DH_CMS_SET_PEERKEY, DH_R_BN_DECODE_ERROR);
+        goto err;
+    }
+
+    pkpeer = EVP_PKEY_new();
+    if (pkpeer == NULL)
+        goto err;
+    EVP_PKEY_assign(pkpeer, pk->ameth->pkey_id, dhpeer);
+    dhpeer = NULL;
+    if (EVP_PKEY_derive_set_peer(pctx, pkpeer) > 0)
+        rv = 1;
+ err:
+    ASN1_INTEGER_free(public_key);
+    EVP_PKEY_free(pkpeer);
+    DH_free(dhpeer);
+    return rv;
+}
+
+static int dh_cms_set_shared_info(EVP_PKEY_CTX *pctx, CMS_RecipientInfo *ri)
+{
+    int rv = 0;
+
+    X509_ALGOR *alg, *kekalg = NULL;
+    ASN1_OCTET_STRING *ukm;
+    const unsigned char *p;
+    unsigned char *dukm = NULL;
+    size_t dukmlen = 0;
+    int keylen, plen;
+    const EVP_CIPHER *kekcipher;
+    EVP_CIPHER_CTX *kekctx;
+
+    if (!CMS_RecipientInfo_kari_get0_alg(ri, &alg, &ukm))
+        goto err;
+
+    /*
+     * For DH we only have one OID permissible. If ever any more get defined
+     * we will need something cleverer.
+     */
+    if (OBJ_obj2nid(alg->algorithm) != NID_id_smime_alg_ESDH) {
+        DHerr(DH_F_DH_CMS_SET_SHARED_INFO, DH_R_KDF_PARAMETER_ERROR);
+        goto err;
+    }
+
+    if (EVP_PKEY_CTX_set_dh_kdf_type(pctx, EVP_PKEY_DH_KDF_X9_42) <= 0)
+        goto err;
+
+    if (EVP_PKEY_CTX_set_dh_kdf_md(pctx, EVP_sha1()) <= 0)
+        goto err;
+
+    if (alg->parameter->type != V_ASN1_SEQUENCE)
+        goto err;
+
+    p = alg->parameter->value.sequence->data;
+    plen = alg->parameter->value.sequence->length;
+    kekalg = d2i_X509_ALGOR(NULL, &p, plen);
+    if (!kekalg)
+        goto err;
+    kekctx = CMS_RecipientInfo_kari_get0_ctx(ri);
+    if (!kekctx)
+        goto err;
+    kekcipher = EVP_get_cipherbyobj(kekalg->algorithm);
+    if (!kekcipher || EVP_CIPHER_mode(kekcipher) != EVP_CIPH_WRAP_MODE)
+        goto err;
+    if (!EVP_EncryptInit_ex(kekctx, kekcipher, NULL, NULL, NULL))
+        goto err;
+    if (EVP_CIPHER_asn1_to_param(kekctx, kekalg->parameter) <= 0)
+        goto err;
+
+    keylen = EVP_CIPHER_CTX_key_length(kekctx);
+    if (EVP_PKEY_CTX_set_dh_kdf_outlen(pctx, keylen) <= 0)
+        goto err;
+    /* Use OBJ_nid2obj to ensure we use built in OID that isn't freed */
+    if (EVP_PKEY_CTX_set0_dh_kdf_oid(pctx,
+                                     OBJ_nid2obj(EVP_CIPHER_type(kekcipher)))
+        <= 0)
+        goto err;
+
+    if (ukm) {
+        dukmlen = ASN1_STRING_length(ukm);
+        dukm = OPENSSL_memdup(ASN1_STRING_get0_data(ukm), dukmlen);
+        if (!dukm)
+            goto err;
+    }
+
+    if (EVP_PKEY_CTX_set0_dh_kdf_ukm(pctx, dukm, dukmlen) <= 0)
+        goto err;
+    dukm = NULL;
+
+    rv = 1;
+ err:
+    X509_ALGOR_free(kekalg);
+    OPENSSL_free(dukm);
+    return rv;
+}
+
+static int dh_cms_decrypt(CMS_RecipientInfo *ri)
+{
+    EVP_PKEY_CTX *pctx;
+    pctx = CMS_RecipientInfo_get0_pkey_ctx(ri);
+    if (!pctx)
+        return 0;
+    /* See if we need to set peer key */
+    if (!EVP_PKEY_CTX_get0_peerkey(pctx)) {
+        X509_ALGOR *alg;
+        ASN1_BIT_STRING *pubkey;
+        if (!CMS_RecipientInfo_kari_get0_orig_id(ri, &alg, &pubkey,
+                                                 NULL, NULL, NULL))
+            return 0;
+        if (!alg || !pubkey)
+            return 0;
+        if (!dh_cms_set_peerkey(pctx, alg, pubkey)) {
+            DHerr(DH_F_DH_CMS_DECRYPT, DH_R_PEER_KEY_ERROR);
+            return 0;
+        }
+    }
+    /* Set DH derivation parameters and initialise unwrap context */
+    if (!dh_cms_set_shared_info(pctx, ri)) {
+        DHerr(DH_F_DH_CMS_DECRYPT, DH_R_SHARED_INFO_ERROR);
+        return 0;
+    }
+    return 1;
+}
+
+static int dh_cms_encrypt(CMS_RecipientInfo *ri)
+{
+    EVP_PKEY_CTX *pctx;
+    EVP_PKEY *pkey;
+    EVP_CIPHER_CTX *ctx;
+    int keylen;
+    X509_ALGOR *talg, *wrap_alg = NULL;
+    const ASN1_OBJECT *aoid;
+    ASN1_BIT_STRING *pubkey;
+    ASN1_STRING *wrap_str;
+    ASN1_OCTET_STRING *ukm;
+    unsigned char *penc = NULL, *dukm = NULL;
+    int penclen;
+    size_t dukmlen = 0;
+    int rv = 0;
+    int kdf_type, wrap_nid;
+    const EVP_MD *kdf_md;
+    pctx = CMS_RecipientInfo_get0_pkey_ctx(ri);
+    if (!pctx)
+        return 0;
+    /* Get ephemeral key */
+    pkey = EVP_PKEY_CTX_get0_pkey(pctx);
+    if (!CMS_RecipientInfo_kari_get0_orig_id(ri, &talg, &pubkey,
+                                             NULL, NULL, NULL))
+        goto err;
+    X509_ALGOR_get0(&aoid, NULL, NULL, talg);
+    /* Is everything uninitialised? */
+    if (aoid == OBJ_nid2obj(NID_undef)) {
+        ASN1_INTEGER *pubk = BN_to_ASN1_INTEGER(pkey->pkey.dh->pub_key, NULL);
+        if (!pubk)
+            goto err;
+        /* Set the key */
+
+        penclen = i2d_ASN1_INTEGER(pubk, &penc);
+        ASN1_INTEGER_free(pubk);
+        if (penclen <= 0)
+            goto err;
+        ASN1_STRING_set0(pubkey, penc, penclen);
+        pubkey->flags &= ~(ASN1_STRING_FLAG_BITS_LEFT | 0x07);
+        pubkey->flags |= ASN1_STRING_FLAG_BITS_LEFT;
+
+        penc = NULL;
+        X509_ALGOR_set0(talg, OBJ_nid2obj(NID_dhpublicnumber),
+                        V_ASN1_UNDEF, NULL);
+    }
+
+    /* See if custom parameters set */
+    kdf_type = EVP_PKEY_CTX_get_dh_kdf_type(pctx);
+    if (kdf_type <= 0)
+        goto err;
+    if (!EVP_PKEY_CTX_get_dh_kdf_md(pctx, &kdf_md))
+        goto err;
+
+    if (kdf_type == EVP_PKEY_DH_KDF_NONE) {
+        kdf_type = EVP_PKEY_DH_KDF_X9_42;
+        if (EVP_PKEY_CTX_set_dh_kdf_type(pctx, kdf_type) <= 0)
+            goto err;
+    } else if (kdf_type != EVP_PKEY_DH_KDF_X9_42)
+        /* Unknown KDF */
+        goto err;
+    if (kdf_md == NULL) {
+        /* Only SHA1 supported */
+        kdf_md = EVP_sha1();
+        if (EVP_PKEY_CTX_set_dh_kdf_md(pctx, kdf_md) <= 0)
+            goto err;
+    } else if (EVP_MD_type(kdf_md) != NID_sha1)
+        /* Unsupported digest */
+        goto err;
+
+    if (!CMS_RecipientInfo_kari_get0_alg(ri, &talg, &ukm))
+        goto err;
+
+    /* Get wrap NID */
+    ctx = CMS_RecipientInfo_kari_get0_ctx(ri);
+    wrap_nid = EVP_CIPHER_CTX_type(ctx);
+    if (EVP_PKEY_CTX_set0_dh_kdf_oid(pctx, OBJ_nid2obj(wrap_nid)) <= 0)
+        goto err;
+    keylen = EVP_CIPHER_CTX_key_length(ctx);
+
+    /* Package wrap algorithm in an AlgorithmIdentifier */
+
+    wrap_alg = X509_ALGOR_new();
+    if (wrap_alg == NULL)
+        goto err;
+    wrap_alg->algorithm = OBJ_nid2obj(wrap_nid);
+    wrap_alg->parameter = ASN1_TYPE_new();
+    if (wrap_alg->parameter == NULL)
+        goto err;
+    if (EVP_CIPHER_param_to_asn1(ctx, wrap_alg->parameter) <= 0)
+        goto err;
+    if (ASN1_TYPE_get(wrap_alg->parameter) == NID_undef) {
+        ASN1_TYPE_free(wrap_alg->parameter);
+        wrap_alg->parameter = NULL;
+    }
+
+    if (EVP_PKEY_CTX_set_dh_kdf_outlen(pctx, keylen) <= 0)
+        goto err;
+
+    if (ukm) {
+        dukmlen = ASN1_STRING_length(ukm);
+        dukm = OPENSSL_memdup(ASN1_STRING_get0_data(ukm), dukmlen);
+        if (!dukm)
+            goto err;
+    }
+
+    if (EVP_PKEY_CTX_set0_dh_kdf_ukm(pctx, dukm, dukmlen) <= 0)
+        goto err;
+    dukm = NULL;
+
+    /*
+     * Now need to wrap encoding of wrap AlgorithmIdentifier into parameter
+     * of another AlgorithmIdentifier.
+     */
+    penc = NULL;
+    penclen = i2d_X509_ALGOR(wrap_alg, &penc);
+    if (!penc || !penclen)
+        goto err;
+    wrap_str = ASN1_STRING_new();
+    if (wrap_str == NULL)
+        goto err;
+    ASN1_STRING_set0(wrap_str, penc, penclen);
+    penc = NULL;
+    X509_ALGOR_set0(talg, OBJ_nid2obj(NID_id_smime_alg_ESDH),
+                    V_ASN1_SEQUENCE, wrap_str);
+
+    rv = 1;
+
+ err:
+    OPENSSL_free(penc);
+    X509_ALGOR_free(wrap_alg);
+    return rv;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_asn1.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_asn1.c
new file mode 100644
index 000000000..1a40633b4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_asn1.c
@@ -0,0 +1,138 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include "dh_locl.h"
+#include <openssl/objects.h>
+#include <openssl/asn1t.h>
+
+/* Override the default free and new methods */
+static int dh_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                 void *exarg)
+{
+    if (operation == ASN1_OP_NEW_PRE) {
+        *pval = (ASN1_VALUE *)DH_new();
+        if (*pval != NULL)
+            return 2;
+        return 0;
+    } else if (operation == ASN1_OP_FREE_PRE) {
+        DH_free((DH *)*pval);
+        *pval = NULL;
+        return 2;
+    }
+    return 1;
+}
+
+ASN1_SEQUENCE_cb(DHparams, dh_cb) = {
+        ASN1_SIMPLE(DH, p, BIGNUM),
+        ASN1_SIMPLE(DH, g, BIGNUM),
+        ASN1_OPT_EMBED(DH, length, ZINT32),
+} ASN1_SEQUENCE_END_cb(DH, DHparams)
+
+IMPLEMENT_ASN1_ENCODE_FUNCTIONS_const_fname(DH, DHparams, DHparams)
+
+/*
+ * Internal only structures for handling X9.42 DH: this gets translated to or
+ * from a DH structure straight away.
+ */
+
+typedef struct {
+    ASN1_BIT_STRING *seed;
+    BIGNUM *counter;
+} int_dhvparams;
+
+typedef struct {
+    BIGNUM *p;
+    BIGNUM *q;
+    BIGNUM *g;
+    BIGNUM *j;
+    int_dhvparams *vparams;
+} int_dhx942_dh;
+
+ASN1_SEQUENCE(DHvparams) = {
+        ASN1_SIMPLE(int_dhvparams, seed, ASN1_BIT_STRING),
+        ASN1_SIMPLE(int_dhvparams, counter, BIGNUM)
+} static_ASN1_SEQUENCE_END_name(int_dhvparams, DHvparams)
+
+ASN1_SEQUENCE(DHxparams) = {
+        ASN1_SIMPLE(int_dhx942_dh, p, BIGNUM),
+        ASN1_SIMPLE(int_dhx942_dh, g, BIGNUM),
+        ASN1_SIMPLE(int_dhx942_dh, q, BIGNUM),
+        ASN1_OPT(int_dhx942_dh, j, BIGNUM),
+        ASN1_OPT(int_dhx942_dh, vparams, DHvparams),
+} static_ASN1_SEQUENCE_END_name(int_dhx942_dh, DHxparams)
+
+int_dhx942_dh *d2i_int_dhx(int_dhx942_dh **a,
+                           const unsigned char **pp, long length);
+int i2d_int_dhx(const int_dhx942_dh *a, unsigned char **pp);
+
+IMPLEMENT_ASN1_ENCODE_FUNCTIONS_const_fname(int_dhx942_dh, DHxparams, int_dhx)
+
+/* Application public function: read in X9.42 DH parameters into DH structure */
+
+DH *d2i_DHxparams(DH **a, const unsigned char **pp, long length)
+{
+    int_dhx942_dh *dhx = NULL;
+    DH *dh = NULL;
+    dh = DH_new();
+    if (dh == NULL)
+        return NULL;
+    dhx = d2i_int_dhx(NULL, pp, length);
+    if (dhx == NULL) {
+        DH_free(dh);
+        return NULL;
+    }
+
+    if (a) {
+        DH_free(*a);
+        *a = dh;
+    }
+
+    dh->p = dhx->p;
+    dh->q = dhx->q;
+    dh->g = dhx->g;
+    dh->j = dhx->j;
+
+    if (dhx->vparams) {
+        dh->seed = dhx->vparams->seed->data;
+        dh->seedlen = dhx->vparams->seed->length;
+        dh->counter = dhx->vparams->counter;
+        dhx->vparams->seed->data = NULL;
+        ASN1_BIT_STRING_free(dhx->vparams->seed);
+        OPENSSL_free(dhx->vparams);
+        dhx->vparams = NULL;
+    }
+
+    OPENSSL_free(dhx);
+    return dh;
+}
+
+int i2d_DHxparams(const DH *dh, unsigned char **pp)
+{
+    int_dhx942_dh dhx;
+    int_dhvparams dhv;
+    ASN1_BIT_STRING bs;
+    dhx.p = dh->p;
+    dhx.g = dh->g;
+    dhx.q = dh->q;
+    dhx.j = dh->j;
+    if (dh->counter && dh->seed && dh->seedlen > 0) {
+        bs.flags = ASN1_STRING_FLAG_BITS_LEFT;
+        bs.data = dh->seed;
+        bs.length = dh->seedlen;
+        dhv.seed = &bs;
+        dhv.counter = dh->counter;
+        dhx.vparams = &dhv;
+    } else
+        dhx.vparams = NULL;
+
+    return i2d_int_dhx(&dhx, pp);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_check.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_check.c
new file mode 100644
index 000000000..fc4557710
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_check.c
@@ -0,0 +1,233 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include "dh_locl.h"
+
+/*-
+ * Check that p and g are suitable enough
+ *
+ * p is odd
+ * 1 < g < p - 1
+ */
+int DH_check_params_ex(const DH *dh)
+{
+    int errflags = 0;
+
+    (void)DH_check_params(dh, &errflags);
+
+    if ((errflags & DH_CHECK_P_NOT_PRIME) != 0)
+        DHerr(DH_F_DH_CHECK_PARAMS_EX, DH_R_CHECK_P_NOT_PRIME);
+    if ((errflags & DH_NOT_SUITABLE_GENERATOR) != 0)
+        DHerr(DH_F_DH_CHECK_PARAMS_EX, DH_R_NOT_SUITABLE_GENERATOR);
+
+    return errflags == 0;
+}
+
+int DH_check_params(const DH *dh, int *ret)
+{
+    int ok = 0;
+    BIGNUM *tmp = NULL;
+    BN_CTX *ctx = NULL;
+
+    *ret = 0;
+    ctx = BN_CTX_new();
+    if (ctx == NULL)
+        goto err;
+    BN_CTX_start(ctx);
+    tmp = BN_CTX_get(ctx);
+    if (tmp == NULL)
+        goto err;
+
+    if (!BN_is_odd(dh->p))
+        *ret |= DH_CHECK_P_NOT_PRIME;
+    if (BN_is_negative(dh->g) || BN_is_zero(dh->g) || BN_is_one(dh->g))
+        *ret |= DH_NOT_SUITABLE_GENERATOR;
+    if (BN_copy(tmp, dh->p) == NULL || !BN_sub_word(tmp, 1))
+        goto err;
+    if (BN_cmp(dh->g, tmp) >= 0)
+        *ret |= DH_NOT_SUITABLE_GENERATOR;
+
+    ok = 1;
+ err:
+    if (ctx != NULL) {
+        BN_CTX_end(ctx);
+        BN_CTX_free(ctx);
+    }
+    return ok;
+}
+
+/*-
+ * Check that p is a safe prime and
+ * if g is 2, 3 or 5, check that it is a suitable generator
+ * where
+ * for 2, p mod 24 == 11
+ * for 3, p mod 12 == 5
+ * for 5, p mod 10 == 3 or 7
+ * should hold.
+ */
+int DH_check_ex(const DH *dh)
+{
+    int errflags = 0;
+
+    (void)DH_check(dh, &errflags);
+
+    if ((errflags & DH_NOT_SUITABLE_GENERATOR) != 0)
+        DHerr(DH_F_DH_CHECK_EX, DH_R_NOT_SUITABLE_GENERATOR);
+    if ((errflags & DH_CHECK_Q_NOT_PRIME) != 0)
+        DHerr(DH_F_DH_CHECK_EX, DH_R_CHECK_Q_NOT_PRIME);
+    if ((errflags & DH_CHECK_INVALID_Q_VALUE) != 0)
+        DHerr(DH_F_DH_CHECK_EX, DH_R_CHECK_INVALID_Q_VALUE);
+    if ((errflags & DH_CHECK_INVALID_J_VALUE) != 0)
+        DHerr(DH_F_DH_CHECK_EX, DH_R_CHECK_INVALID_J_VALUE);
+    if ((errflags & DH_UNABLE_TO_CHECK_GENERATOR) != 0)
+        DHerr(DH_F_DH_CHECK_EX, DH_R_UNABLE_TO_CHECK_GENERATOR);
+    if ((errflags & DH_CHECK_P_NOT_PRIME) != 0)
+        DHerr(DH_F_DH_CHECK_EX, DH_R_CHECK_P_NOT_PRIME);
+    if ((errflags & DH_CHECK_P_NOT_SAFE_PRIME) != 0)
+        DHerr(DH_F_DH_CHECK_EX, DH_R_CHECK_P_NOT_SAFE_PRIME);
+
+    return errflags == 0;
+}
+
+int DH_check(const DH *dh, int *ret)
+{
+    int ok = 0, r;
+    BN_CTX *ctx = NULL;
+    BN_ULONG l;
+    BIGNUM *t1 = NULL, *t2 = NULL;
+
+    *ret = 0;
+    ctx = BN_CTX_new();
+    if (ctx == NULL)
+        goto err;
+    BN_CTX_start(ctx);
+    t1 = BN_CTX_get(ctx);
+    t2 = BN_CTX_get(ctx);
+    if (t2 == NULL)
+        goto err;
+
+    if (dh->q) {
+        if (BN_cmp(dh->g, BN_value_one()) <= 0)
+            *ret |= DH_NOT_SUITABLE_GENERATOR;
+        else if (BN_cmp(dh->g, dh->p) >= 0)
+            *ret |= DH_NOT_SUITABLE_GENERATOR;
+        else {
+            /* Check g^q == 1 mod p */
+            if (!BN_mod_exp(t1, dh->g, dh->q, dh->p, ctx))
+                goto err;
+            if (!BN_is_one(t1))
+                *ret |= DH_NOT_SUITABLE_GENERATOR;
+        }
+        r = BN_is_prime_ex(dh->q, BN_prime_checks, ctx, NULL);
+        if (r < 0)
+            goto err;
+        if (!r)
+            *ret |= DH_CHECK_Q_NOT_PRIME;
+        /* Check p == 1 mod q  i.e. q divides p - 1 */
+        if (!BN_div(t1, t2, dh->p, dh->q, ctx))
+            goto err;
+        if (!BN_is_one(t2))
+            *ret |= DH_CHECK_INVALID_Q_VALUE;
+        if (dh->j && BN_cmp(dh->j, t1))
+            *ret |= DH_CHECK_INVALID_J_VALUE;
+
+    } else if (BN_is_word(dh->g, DH_GENERATOR_2)) {
+        l = BN_mod_word(dh->p, 24);
+        if (l == (BN_ULONG)-1)
+            goto err;
+        if (l != 11)
+            *ret |= DH_NOT_SUITABLE_GENERATOR;
+    } else if (BN_is_word(dh->g, DH_GENERATOR_5)) {
+        l = BN_mod_word(dh->p, 10);
+        if (l == (BN_ULONG)-1)
+            goto err;
+        if ((l != 3) && (l != 7))
+            *ret |= DH_NOT_SUITABLE_GENERATOR;
+    } else
+        *ret |= DH_UNABLE_TO_CHECK_GENERATOR;
+
+    r = BN_is_prime_ex(dh->p, BN_prime_checks, ctx, NULL);
+    if (r < 0)
+        goto err;
+    if (!r)
+        *ret |= DH_CHECK_P_NOT_PRIME;
+    else if (!dh->q) {
+        if (!BN_rshift1(t1, dh->p))
+            goto err;
+        r = BN_is_prime_ex(t1, BN_prime_checks, ctx, NULL);
+        if (r < 0)
+            goto err;
+        if (!r)
+            *ret |= DH_CHECK_P_NOT_SAFE_PRIME;
+    }
+    ok = 1;
+ err:
+    if (ctx != NULL) {
+        BN_CTX_end(ctx);
+        BN_CTX_free(ctx);
+    }
+    return ok;
+}
+
+int DH_check_pub_key_ex(const DH *dh, const BIGNUM *pub_key)
+{
+    int errflags = 0;
+
+    (void)DH_check(dh, &errflags);
+
+    if ((errflags & DH_CHECK_PUBKEY_TOO_SMALL) != 0)
+        DHerr(DH_F_DH_CHECK_PUB_KEY_EX, DH_R_CHECK_PUBKEY_TOO_SMALL);
+    if ((errflags & DH_CHECK_PUBKEY_TOO_LARGE) != 0)
+        DHerr(DH_F_DH_CHECK_PUB_KEY_EX, DH_R_CHECK_PUBKEY_TOO_LARGE);
+    if ((errflags & DH_CHECK_PUBKEY_INVALID) != 0)
+        DHerr(DH_F_DH_CHECK_PUB_KEY_EX, DH_R_CHECK_PUBKEY_INVALID);
+
+    return errflags == 0;
+}
+
+int DH_check_pub_key(const DH *dh, const BIGNUM *pub_key, int *ret)
+{
+    int ok = 0;
+    BIGNUM *tmp = NULL;
+    BN_CTX *ctx = NULL;
+
+    *ret = 0;
+    ctx = BN_CTX_new();
+    if (ctx == NULL)
+        goto err;
+    BN_CTX_start(ctx);
+    tmp = BN_CTX_get(ctx);
+    if (tmp == NULL || !BN_set_word(tmp, 1))
+        goto err;
+    if (BN_cmp(pub_key, tmp) <= 0)
+        *ret |= DH_CHECK_PUBKEY_TOO_SMALL;
+    if (BN_copy(tmp, dh->p) == NULL || !BN_sub_word(tmp, 1))
+        goto err;
+    if (BN_cmp(pub_key, tmp) >= 0)
+        *ret |= DH_CHECK_PUBKEY_TOO_LARGE;
+
+    if (dh->q != NULL) {
+        /* Check pub_key^q == 1 mod p */
+        if (!BN_mod_exp(tmp, pub_key, dh->q, dh->p, ctx))
+            goto err;
+        if (!BN_is_one(tmp))
+            *ret |= DH_CHECK_PUBKEY_INVALID;
+    }
+
+    ok = 1;
+ err:
+    if (ctx != NULL) {
+        BN_CTX_end(ctx);
+        BN_CTX_free(ctx);
+    }
+    return ok;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_depr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_depr.c
new file mode 100644
index 000000000..f8ed1b746
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_depr.c
@@ -0,0 +1,46 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* This file contains deprecated functions as wrappers to the new ones */
+
+#include <openssl/opensslconf.h>
+#if OPENSSL_API_COMPAT >= 0x00908000L
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <stdio.h>
+# include "internal/cryptlib.h"
+# include <openssl/bn.h>
+# include <openssl/dh.h>
+
+DH *DH_generate_parameters(int prime_len, int generator,
+                           void (*callback) (int, int, void *), void *cb_arg)
+{
+    BN_GENCB *cb;
+    DH *ret = NULL;
+
+    if ((ret = DH_new()) == NULL)
+        return NULL;
+    cb = BN_GENCB_new();
+    if (cb == NULL) {
+        DH_free(ret);
+        return NULL;
+    }
+
+    BN_GENCB_set_old(cb, callback, cb_arg);
+
+    if (DH_generate_parameters_ex(ret, prime_len, generator, cb)) {
+        BN_GENCB_free(cb);
+        return ret;
+    }
+    BN_GENCB_free(cb);
+    DH_free(ret);
+    return NULL;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_err.c
new file mode 100644
index 000000000..7285587b4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_err.c
@@ -0,0 +1,101 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/dherr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA DH_str_functs[] = {
+    {ERR_PACK(ERR_LIB_DH, DH_F_COMPUTE_KEY, 0), "compute_key"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DHPARAMS_PRINT_FP, 0), "DHparams_print_fp"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_BUILTIN_GENPARAMS, 0),
+     "dh_builtin_genparams"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_CHECK_EX, 0), "DH_check_ex"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_CHECK_PARAMS_EX, 0), "DH_check_params_ex"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_CHECK_PUB_KEY_EX, 0), "DH_check_pub_key_ex"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_CMS_DECRYPT, 0), "dh_cms_decrypt"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_CMS_SET_PEERKEY, 0), "dh_cms_set_peerkey"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_CMS_SET_SHARED_INFO, 0),
+     "dh_cms_set_shared_info"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_METH_DUP, 0), "DH_meth_dup"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_METH_NEW, 0), "DH_meth_new"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_METH_SET1_NAME, 0), "DH_meth_set1_name"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_NEW_BY_NID, 0), "DH_new_by_nid"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_NEW_METHOD, 0), "DH_new_method"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_PARAM_DECODE, 0), "dh_param_decode"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_PKEY_PUBLIC_CHECK, 0),
+     "dh_pkey_public_check"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_PRIV_DECODE, 0), "dh_priv_decode"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_PRIV_ENCODE, 0), "dh_priv_encode"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_PUB_DECODE, 0), "dh_pub_decode"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DH_PUB_ENCODE, 0), "dh_pub_encode"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_DO_DH_PRINT, 0), "do_dh_print"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_GENERATE_KEY, 0), "generate_key"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_PKEY_DH_CTRL_STR, 0), "pkey_dh_ctrl_str"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_PKEY_DH_DERIVE, 0), "pkey_dh_derive"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_PKEY_DH_INIT, 0), "pkey_dh_init"},
+    {ERR_PACK(ERR_LIB_DH, DH_F_PKEY_DH_KEYGEN, 0), "pkey_dh_keygen"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA DH_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_BAD_GENERATOR), "bad generator"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_BN_DECODE_ERROR), "bn decode error"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_BN_ERROR), "bn error"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_CHECK_INVALID_J_VALUE),
+    "check invalid j value"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_CHECK_INVALID_Q_VALUE),
+    "check invalid q value"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_CHECK_PUBKEY_INVALID),
+    "check pubkey invalid"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_CHECK_PUBKEY_TOO_LARGE),
+    "check pubkey too large"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_CHECK_PUBKEY_TOO_SMALL),
+    "check pubkey too small"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_CHECK_P_NOT_PRIME), "check p not prime"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_CHECK_P_NOT_SAFE_PRIME),
+    "check p not safe prime"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_CHECK_Q_NOT_PRIME), "check q not prime"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_DECODE_ERROR), "decode error"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_INVALID_PARAMETER_NAME),
+    "invalid parameter name"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_INVALID_PARAMETER_NID),
+    "invalid parameter nid"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_INVALID_PUBKEY), "invalid public key"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_KDF_PARAMETER_ERROR), "kdf parameter error"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_KEYS_NOT_SET), "keys not set"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_MISSING_PUBKEY), "missing pubkey"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_MODULUS_TOO_LARGE), "modulus too large"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_NOT_SUITABLE_GENERATOR),
+    "not suitable generator"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_NO_PARAMETERS_SET), "no parameters set"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_NO_PRIVATE_VALUE), "no private value"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_PARAMETER_ENCODING_ERROR),
+    "parameter encoding error"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_PEER_KEY_ERROR), "peer key error"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_SHARED_INFO_ERROR), "shared info error"},
+    {ERR_PACK(ERR_LIB_DH, 0, DH_R_UNABLE_TO_CHECK_GENERATOR),
+    "unable to check generator"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_DH_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(DH_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(DH_str_functs);
+        ERR_load_strings_const(DH_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_gen.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_gen.c
new file mode 100644
index 000000000..59137e0f0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_gen.c
@@ -0,0 +1,130 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * NB: These functions have been upgraded - the previous prototypes are in
+ * dh_depr.c as wrappers to these ones.  - Geoff
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include "dh_locl.h"
+
+static int dh_builtin_genparams(DH *ret, int prime_len, int generator,
+                                BN_GENCB *cb);
+
+int DH_generate_parameters_ex(DH *ret, int prime_len, int generator,
+                              BN_GENCB *cb)
+{
+    if (ret->meth->generate_params)
+        return ret->meth->generate_params(ret, prime_len, generator, cb);
+    return dh_builtin_genparams(ret, prime_len, generator, cb);
+}
+
+/*-
+ * We generate DH parameters as follows
+ * find a prime q which is prime_len/2 bits long.
+ * p=(2*q)+1 or (p-1)/2 = q
+ * For this case, g is a generator if
+ * g^((p-1)/q) mod p != 1 for values of q which are the factors of p-1.
+ * Since the factors of p-1 are q and 2, we just need to check
+ * g^2 mod p != 1 and g^q mod p != 1.
+ *
+ * Having said all that,
+ * there is another special case method for the generators 2, 3 and 5.
+ * for 2, p mod 24 == 11
+ * for 3, p mod 12 == 5  <<<<< does not work for safe primes.
+ * for 5, p mod 10 == 3 or 7
+ *
+ * Thanks to Phil Karn for the pointers about the
+ * special generators and for answering some of my questions.
+ *
+ * I've implemented the second simple method :-).
+ * Since DH should be using a safe prime (both p and q are prime),
+ * this generator function can take a very very long time to run.
+ */
+/*
+ * Actually there is no reason to insist that 'generator' be a generator.
+ * It's just as OK (and in some sense better) to use a generator of the
+ * order-q subgroup.
+ */
+static int dh_builtin_genparams(DH *ret, int prime_len, int generator,
+                                BN_GENCB *cb)
+{
+    BIGNUM *t1, *t2;
+    int g, ok = -1;
+    BN_CTX *ctx = NULL;
+
+    ctx = BN_CTX_new();
+    if (ctx == NULL)
+        goto err;
+    BN_CTX_start(ctx);
+    t1 = BN_CTX_get(ctx);
+    t2 = BN_CTX_get(ctx);
+    if (t2 == NULL)
+        goto err;
+
+    /* Make sure 'ret' has the necessary elements */
+    if (!ret->p && ((ret->p = BN_new()) == NULL))
+        goto err;
+    if (!ret->g && ((ret->g = BN_new()) == NULL))
+        goto err;
+
+    if (generator <= 1) {
+        DHerr(DH_F_DH_BUILTIN_GENPARAMS, DH_R_BAD_GENERATOR);
+        goto err;
+    }
+    if (generator == DH_GENERATOR_2) {
+        if (!BN_set_word(t1, 24))
+            goto err;
+        if (!BN_set_word(t2, 11))
+            goto err;
+        g = 2;
+    } else if (generator == DH_GENERATOR_5) {
+        if (!BN_set_word(t1, 10))
+            goto err;
+        if (!BN_set_word(t2, 3))
+            goto err;
+        /*
+         * BN_set_word(t3,7); just have to miss out on these ones :-(
+         */
+        g = 5;
+    } else {
+        /*
+         * in the general case, don't worry if 'generator' is a generator or
+         * not: since we are using safe primes, it will generate either an
+         * order-q or an order-2q group, which both is OK
+         */
+        if (!BN_set_word(t1, 2))
+            goto err;
+        if (!BN_set_word(t2, 1))
+            goto err;
+        g = generator;
+    }
+
+    if (!BN_generate_prime_ex(ret->p, prime_len, 1, t1, t2, cb))
+        goto err;
+    if (!BN_GENCB_call(cb, 3, 0))
+        goto err;
+    if (!BN_set_word(ret->g, g))
+        goto err;
+    ok = 1;
+ err:
+    if (ok == -1) {
+        DHerr(DH_F_DH_BUILTIN_GENPARAMS, ERR_R_BN_LIB);
+        ok = 0;
+    }
+
+    if (ctx != NULL) {
+        BN_CTX_end(ctx);
+        BN_CTX_free(ctx);
+    }
+    return ok;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_kdf.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_kdf.c
new file mode 100644
index 000000000..e17122bc8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_kdf.c
@@ -0,0 +1,150 @@
+/*
+ * Copyright 2013-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+
+#ifndef OPENSSL_NO_CMS
+#include <string.h>
+#include <openssl/dh.h>
+#include <openssl/evp.h>
+#include <openssl/asn1.h>
+#include <openssl/cms.h>
+
+
+/* Key derivation from X9.42/RFC2631 */
+/* Uses CMS functions, hence the #ifdef wrapper. */
+
+#define DH_KDF_MAX      (1L << 30)
+
+/* Skip past an ASN1 structure: for OBJECT skip content octets too */
+
+static int skip_asn1(unsigned char **pp, long *plen, int exptag)
+{
+    const unsigned char *q = *pp;
+    int i, tag, xclass;
+    long tmplen;
+    i = ASN1_get_object(&q, &tmplen, &tag, &xclass, *plen);
+    if (i & 0x80)
+        return 0;
+    if (tag != exptag || xclass != V_ASN1_UNIVERSAL)
+        return 0;
+    if (tag == V_ASN1_OBJECT)
+        q += tmplen;
+    *plen -= q - *pp;
+    *pp = (unsigned char *)q;
+    return 1;
+}
+
+/*
+ * Encode the DH shared info structure, return an offset to the counter value
+ * so we can update the structure without reencoding it.
+ */
+
+static int dh_sharedinfo_encode(unsigned char **pder, unsigned char **pctr,
+                                ASN1_OBJECT *key_oid, size_t outlen,
+                                const unsigned char *ukm, size_t ukmlen)
+{
+    unsigned char *p;
+    int derlen;
+    long tlen;
+    /* "magic" value to check offset is sane */
+    static unsigned char ctr[4] = { 0xF3, 0x17, 0x22, 0x53 };
+    X509_ALGOR atmp;
+    ASN1_OCTET_STRING ctr_oct, ukm_oct, *pukm_oct;
+    ASN1_TYPE ctr_atype;
+    if (ukmlen > DH_KDF_MAX || outlen > DH_KDF_MAX)
+        return 0;
+    ctr_oct.data = ctr;
+    ctr_oct.length = 4;
+    ctr_oct.flags = 0;
+    ctr_oct.type = V_ASN1_OCTET_STRING;
+    ctr_atype.type = V_ASN1_OCTET_STRING;
+    ctr_atype.value.octet_string = &ctr_oct;
+    atmp.algorithm = key_oid;
+    atmp.parameter = &ctr_atype;
+    if (ukm) {
+        ukm_oct.type = V_ASN1_OCTET_STRING;
+        ukm_oct.flags = 0;
+        ukm_oct.data = (unsigned char *)ukm;
+        ukm_oct.length = ukmlen;
+        pukm_oct = &ukm_oct;
+    } else
+        pukm_oct = NULL;
+    derlen = CMS_SharedInfo_encode(pder, &atmp, pukm_oct, outlen);
+    if (derlen <= 0)
+        return 0;
+    p = *pder;
+    tlen = derlen;
+    if (!skip_asn1(&p, &tlen, V_ASN1_SEQUENCE))
+        return 0;
+    if (!skip_asn1(&p, &tlen, V_ASN1_SEQUENCE))
+        return 0;
+    if (!skip_asn1(&p, &tlen, V_ASN1_OBJECT))
+        return 0;
+    if (!skip_asn1(&p, &tlen, V_ASN1_OCTET_STRING))
+        return 0;
+    if (CRYPTO_memcmp(p, ctr, 4))
+        return 0;
+    *pctr = p;
+    return derlen;
+}
+
+int DH_KDF_X9_42(unsigned char *out, size_t outlen,
+                 const unsigned char *Z, size_t Zlen,
+                 ASN1_OBJECT *key_oid,
+                 const unsigned char *ukm, size_t ukmlen, const EVP_MD *md)
+{
+    EVP_MD_CTX *mctx = NULL;
+    int rv = 0;
+    unsigned int i;
+    size_t mdlen;
+    unsigned char *der = NULL, *ctr;
+    int derlen;
+    if (Zlen > DH_KDF_MAX)
+        return 0;
+    mctx = EVP_MD_CTX_new();
+    if (mctx == NULL)
+        return 0;
+    mdlen = EVP_MD_size(md);
+    derlen = dh_sharedinfo_encode(&der, &ctr, key_oid, outlen, ukm, ukmlen);
+    if (derlen == 0)
+        goto err;
+    for (i = 1;; i++) {
+        unsigned char mtmp[EVP_MAX_MD_SIZE];
+        if (!EVP_DigestInit_ex(mctx, md, NULL)
+            || !EVP_DigestUpdate(mctx, Z, Zlen))
+            goto err;
+        ctr[3] = i & 0xFF;
+        ctr[2] = (i >> 8) & 0xFF;
+        ctr[1] = (i >> 16) & 0xFF;
+        ctr[0] = (i >> 24) & 0xFF;
+        if (!EVP_DigestUpdate(mctx, der, derlen))
+            goto err;
+        if (outlen >= mdlen) {
+            if (!EVP_DigestFinal(mctx, out, NULL))
+                goto err;
+            outlen -= mdlen;
+            if (outlen == 0)
+                break;
+            out += mdlen;
+        } else {
+            if (!EVP_DigestFinal(mctx, mtmp, NULL))
+                goto err;
+            memcpy(out, mtmp, outlen);
+            OPENSSL_cleanse(mtmp, mdlen);
+            break;
+        }
+    }
+    rv = 1;
+ err:
+    OPENSSL_free(der);
+    EVP_MD_CTX_free(mctx);
+    return rv;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_key.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_key.c
new file mode 100644
index 000000000..4f85be7e4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_key.c
@@ -0,0 +1,232 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "dh_locl.h"
+#include "internal/bn_int.h"
+
+static int generate_key(DH *dh);
+static int compute_key(unsigned char *key, const BIGNUM *pub_key, DH *dh);
+static int dh_bn_mod_exp(const DH *dh, BIGNUM *r,
+                         const BIGNUM *a, const BIGNUM *p,
+                         const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *m_ctx);
+static int dh_init(DH *dh);
+static int dh_finish(DH *dh);
+
+int DH_generate_key(DH *dh)
+{
+    return dh->meth->generate_key(dh);
+}
+
+int DH_compute_key(unsigned char *key, const BIGNUM *pub_key, DH *dh)
+{
+    return dh->meth->compute_key(key, pub_key, dh);
+}
+
+int DH_compute_key_padded(unsigned char *key, const BIGNUM *pub_key, DH *dh)
+{
+    int rv, pad;
+    rv = dh->meth->compute_key(key, pub_key, dh);
+    if (rv <= 0)
+        return rv;
+    pad = BN_num_bytes(dh->p) - rv;
+    if (pad > 0) {
+        memmove(key + pad, key, rv);
+        memset(key, 0, pad);
+    }
+    return rv + pad;
+}
+
+static DH_METHOD dh_ossl = {
+    "OpenSSL DH Method",
+    generate_key,
+    compute_key,
+    dh_bn_mod_exp,
+    dh_init,
+    dh_finish,
+    DH_FLAG_FIPS_METHOD,
+    NULL,
+    NULL
+};
+
+static const DH_METHOD *default_DH_method = &dh_ossl;
+
+const DH_METHOD *DH_OpenSSL(void)
+{
+    return &dh_ossl;
+}
+
+void DH_set_default_method(const DH_METHOD *meth)
+{
+    default_DH_method = meth;
+}
+
+const DH_METHOD *DH_get_default_method(void)
+{
+    return default_DH_method;
+}
+
+static int generate_key(DH *dh)
+{
+    int ok = 0;
+    int generate_new_key = 0;
+    unsigned l;
+    BN_CTX *ctx = NULL;
+    BN_MONT_CTX *mont = NULL;
+    BIGNUM *pub_key = NULL, *priv_key = NULL;
+
+    if (BN_num_bits(dh->p) > OPENSSL_DH_MAX_MODULUS_BITS) {
+        DHerr(DH_F_GENERATE_KEY, DH_R_MODULUS_TOO_LARGE);
+        return 0;
+    }
+
+    ctx = BN_CTX_new();
+    if (ctx == NULL)
+        goto err;
+
+    if (dh->priv_key == NULL) {
+        priv_key = BN_secure_new();
+        if (priv_key == NULL)
+            goto err;
+        generate_new_key = 1;
+    } else
+        priv_key = dh->priv_key;
+
+    if (dh->pub_key == NULL) {
+        pub_key = BN_new();
+        if (pub_key == NULL)
+            goto err;
+    } else
+        pub_key = dh->pub_key;
+
+    if (dh->flags & DH_FLAG_CACHE_MONT_P) {
+        mont = BN_MONT_CTX_set_locked(&dh->method_mont_p,
+                                      dh->lock, dh->p, ctx);
+        if (!mont)
+            goto err;
+    }
+
+    if (generate_new_key) {
+        if (dh->q) {
+            do {
+                if (!BN_priv_rand_range(priv_key, dh->q))
+                    goto err;
+            }
+            while (BN_is_zero(priv_key) || BN_is_one(priv_key));
+        } else {
+            /* secret exponent length */
+            l = dh->length ? dh->length : BN_num_bits(dh->p) - 1;
+            if (!BN_priv_rand(priv_key, l, BN_RAND_TOP_ONE, BN_RAND_BOTTOM_ANY))
+                goto err;
+        }
+    }
+
+    {
+        BIGNUM *prk = BN_new();
+
+        if (prk == NULL)
+            goto err;
+        BN_with_flags(prk, priv_key, BN_FLG_CONSTTIME);
+
+        if (!dh->meth->bn_mod_exp(dh, pub_key, dh->g, prk, dh->p, ctx, mont)) {
+            BN_free(prk);
+            goto err;
+        }
+        /* We MUST free prk before any further use of priv_key */
+        BN_free(prk);
+    }
+
+    dh->pub_key = pub_key;
+    dh->priv_key = priv_key;
+    ok = 1;
+ err:
+    if (ok != 1)
+        DHerr(DH_F_GENERATE_KEY, ERR_R_BN_LIB);
+
+    if (pub_key != dh->pub_key)
+        BN_free(pub_key);
+    if (priv_key != dh->priv_key)
+        BN_free(priv_key);
+    BN_CTX_free(ctx);
+    return ok;
+}
+
+static int compute_key(unsigned char *key, const BIGNUM *pub_key, DH *dh)
+{
+    BN_CTX *ctx = NULL;
+    BN_MONT_CTX *mont = NULL;
+    BIGNUM *tmp;
+    int ret = -1;
+    int check_result;
+
+    if (BN_num_bits(dh->p) > OPENSSL_DH_MAX_MODULUS_BITS) {
+        DHerr(DH_F_COMPUTE_KEY, DH_R_MODULUS_TOO_LARGE);
+        goto err;
+    }
+
+    ctx = BN_CTX_new();
+    if (ctx == NULL)
+        goto err;
+    BN_CTX_start(ctx);
+    tmp = BN_CTX_get(ctx);
+    if (tmp == NULL)
+        goto err;
+
+    if (dh->priv_key == NULL) {
+        DHerr(DH_F_COMPUTE_KEY, DH_R_NO_PRIVATE_VALUE);
+        goto err;
+    }
+
+    if (dh->flags & DH_FLAG_CACHE_MONT_P) {
+        mont = BN_MONT_CTX_set_locked(&dh->method_mont_p,
+                                      dh->lock, dh->p, ctx);
+        BN_set_flags(dh->priv_key, BN_FLG_CONSTTIME);
+        if (!mont)
+            goto err;
+    }
+
+    if (!DH_check_pub_key(dh, pub_key, &check_result) || check_result) {
+        DHerr(DH_F_COMPUTE_KEY, DH_R_INVALID_PUBKEY);
+        goto err;
+    }
+
+    if (!dh->
+        meth->bn_mod_exp(dh, tmp, pub_key, dh->priv_key, dh->p, ctx, mont)) {
+        DHerr(DH_F_COMPUTE_KEY, ERR_R_BN_LIB);
+        goto err;
+    }
+
+    ret = BN_bn2bin(tmp, key);
+ err:
+    if (ctx != NULL) {
+        BN_CTX_end(ctx);
+        BN_CTX_free(ctx);
+    }
+    return ret;
+}
+
+static int dh_bn_mod_exp(const DH *dh, BIGNUM *r,
+                         const BIGNUM *a, const BIGNUM *p,
+                         const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *m_ctx)
+{
+    return BN_mod_exp_mont(r, a, p, m, ctx, m_ctx);
+}
+
+static int dh_init(DH *dh)
+{
+    dh->flags |= DH_FLAG_CACHE_MONT_P;
+    return 1;
+}
+
+static int dh_finish(DH *dh)
+{
+    BN_MONT_CTX_free(dh->method_mont_p);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_lib.c
new file mode 100644
index 000000000..962f864de
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_lib.c
@@ -0,0 +1,291 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "internal/refcount.h"
+#include <openssl/bn.h>
+#include "dh_locl.h"
+#include <openssl/engine.h>
+
+int DH_set_method(DH *dh, const DH_METHOD *meth)
+{
+    /*
+     * NB: The caller is specifically setting a method, so it's not up to us
+     * to deal with which ENGINE it comes from.
+     */
+    const DH_METHOD *mtmp;
+    mtmp = dh->meth;
+    if (mtmp->finish)
+        mtmp->finish(dh);
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_finish(dh->engine);
+    dh->engine = NULL;
+#endif
+    dh->meth = meth;
+    if (meth->init)
+        meth->init(dh);
+    return 1;
+}
+
+DH *DH_new(void)
+{
+    return DH_new_method(NULL);
+}
+
+DH *DH_new_method(ENGINE *engine)
+{
+    DH *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        DHerr(DH_F_DH_NEW_METHOD, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ret->references = 1;
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        DHerr(DH_F_DH_NEW_METHOD, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+
+    ret->meth = DH_get_default_method();
+#ifndef OPENSSL_NO_ENGINE
+    ret->flags = ret->meth->flags;  /* early default init */
+    if (engine) {
+        if (!ENGINE_init(engine)) {
+            DHerr(DH_F_DH_NEW_METHOD, ERR_R_ENGINE_LIB);
+            goto err;
+        }
+        ret->engine = engine;
+    } else
+        ret->engine = ENGINE_get_default_DH();
+    if (ret->engine) {
+        ret->meth = ENGINE_get_DH(ret->engine);
+        if (ret->meth == NULL) {
+            DHerr(DH_F_DH_NEW_METHOD, ERR_R_ENGINE_LIB);
+            goto err;
+        }
+    }
+#endif
+
+    ret->flags = ret->meth->flags;
+
+    if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_DH, ret, &ret->ex_data))
+        goto err;
+
+    if ((ret->meth->init != NULL) && !ret->meth->init(ret)) {
+        DHerr(DH_F_DH_NEW_METHOD, ERR_R_INIT_FAIL);
+        goto err;
+    }
+
+    return ret;
+
+ err:
+    DH_free(ret);
+    return NULL;
+}
+
+void DH_free(DH *r)
+{
+    int i;
+
+    if (r == NULL)
+        return;
+
+    CRYPTO_DOWN_REF(&r->references, &i, r->lock);
+    REF_PRINT_COUNT("DH", r);
+    if (i > 0)
+        return;
+    REF_ASSERT_ISNT(i < 0);
+
+    if (r->meth != NULL && r->meth->finish != NULL)
+        r->meth->finish(r);
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_finish(r->engine);
+#endif
+
+    CRYPTO_free_ex_data(CRYPTO_EX_INDEX_DH, r, &r->ex_data);
+
+    CRYPTO_THREAD_lock_free(r->lock);
+
+    BN_clear_free(r->p);
+    BN_clear_free(r->g);
+    BN_clear_free(r->q);
+    BN_clear_free(r->j);
+    OPENSSL_free(r->seed);
+    BN_clear_free(r->counter);
+    BN_clear_free(r->pub_key);
+    BN_clear_free(r->priv_key);
+    OPENSSL_free(r);
+}
+
+int DH_up_ref(DH *r)
+{
+    int i;
+
+    if (CRYPTO_UP_REF(&r->references, &i, r->lock) <= 0)
+        return 0;
+
+    REF_PRINT_COUNT("DH", r);
+    REF_ASSERT_ISNT(i < 2);
+    return ((i > 1) ? 1 : 0);
+}
+
+int DH_set_ex_data(DH *d, int idx, void *arg)
+{
+    return CRYPTO_set_ex_data(&d->ex_data, idx, arg);
+}
+
+void *DH_get_ex_data(DH *d, int idx)
+{
+    return CRYPTO_get_ex_data(&d->ex_data, idx);
+}
+
+int DH_bits(const DH *dh)
+{
+    return BN_num_bits(dh->p);
+}
+
+int DH_size(const DH *dh)
+{
+    return BN_num_bytes(dh->p);
+}
+
+int DH_security_bits(const DH *dh)
+{
+    int N;
+    if (dh->q)
+        N = BN_num_bits(dh->q);
+    else if (dh->length)
+        N = dh->length;
+    else
+        N = -1;
+    return BN_security_bits(BN_num_bits(dh->p), N);
+}
+
+
+void DH_get0_pqg(const DH *dh,
+                 const BIGNUM **p, const BIGNUM **q, const BIGNUM **g)
+{
+    if (p != NULL)
+        *p = dh->p;
+    if (q != NULL)
+        *q = dh->q;
+    if (g != NULL)
+        *g = dh->g;
+}
+
+int DH_set0_pqg(DH *dh, BIGNUM *p, BIGNUM *q, BIGNUM *g)
+{
+    /* If the fields p and g in d are NULL, the corresponding input
+     * parameters MUST be non-NULL.  q may remain NULL.
+     */
+    if ((dh->p == NULL && p == NULL)
+        || (dh->g == NULL && g == NULL))
+        return 0;
+
+    if (p != NULL) {
+        BN_free(dh->p);
+        dh->p = p;
+    }
+    if (q != NULL) {
+        BN_free(dh->q);
+        dh->q = q;
+    }
+    if (g != NULL) {
+        BN_free(dh->g);
+        dh->g = g;
+    }
+
+    if (q != NULL) {
+        dh->length = BN_num_bits(q);
+    }
+
+    return 1;
+}
+
+long DH_get_length(const DH *dh)
+{
+    return dh->length;
+}
+
+int DH_set_length(DH *dh, long length)
+{
+    dh->length = length;
+    return 1;
+}
+
+void DH_get0_key(const DH *dh, const BIGNUM **pub_key, const BIGNUM **priv_key)
+{
+    if (pub_key != NULL)
+        *pub_key = dh->pub_key;
+    if (priv_key != NULL)
+        *priv_key = dh->priv_key;
+}
+
+int DH_set0_key(DH *dh, BIGNUM *pub_key, BIGNUM *priv_key)
+{
+    if (pub_key != NULL) {
+        BN_free(dh->pub_key);
+        dh->pub_key = pub_key;
+    }
+    if (priv_key != NULL) {
+        BN_free(dh->priv_key);
+        dh->priv_key = priv_key;
+    }
+
+    return 1;
+}
+
+const BIGNUM *DH_get0_p(const DH *dh)
+{
+    return dh->p;
+}
+
+const BIGNUM *DH_get0_q(const DH *dh)
+{
+    return dh->q;
+}
+
+const BIGNUM *DH_get0_g(const DH *dh)
+{
+    return dh->g;
+}
+
+const BIGNUM *DH_get0_priv_key(const DH *dh)
+{
+    return dh->priv_key;
+}
+
+const BIGNUM *DH_get0_pub_key(const DH *dh)
+{
+    return dh->pub_key;
+}
+
+void DH_clear_flags(DH *dh, int flags)
+{
+    dh->flags &= ~flags;
+}
+
+int DH_test_flags(const DH *dh, int flags)
+{
+    return dh->flags & flags;
+}
+
+void DH_set_flags(DH *dh, int flags)
+{
+    dh->flags |= flags;
+}
+
+ENGINE *DH_get0_engine(DH *dh)
+{
+    return dh->engine;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_locl.h
new file mode 100644
index 000000000..0a8391a6c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_locl.h
@@ -0,0 +1,57 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/dh.h>
+#include "internal/refcount.h"
+
+struct dh_st {
+    /*
+     * This first argument is used to pick up errors when a DH is passed
+     * instead of a EVP_PKEY
+     */
+    int pad;
+    int version;
+    BIGNUM *p;
+    BIGNUM *g;
+    int32_t length;             /* optional */
+    BIGNUM *pub_key;            /* g^x % p */
+    BIGNUM *priv_key;           /* x */
+    int flags;
+    BN_MONT_CTX *method_mont_p;
+    /* Place holders if we want to do X9.42 DH */
+    BIGNUM *q;
+    BIGNUM *j;
+    unsigned char *seed;
+    int seedlen;
+    BIGNUM *counter;
+    CRYPTO_REF_COUNT references;
+    CRYPTO_EX_DATA ex_data;
+    const DH_METHOD *meth;
+    ENGINE *engine;
+    CRYPTO_RWLOCK *lock;
+};
+
+struct dh_method {
+    char *name;
+    /* Methods here */
+    int (*generate_key) (DH *dh);
+    int (*compute_key) (unsigned char *key, const BIGNUM *pub_key, DH *dh);
+
+    /* Can be null */
+    int (*bn_mod_exp) (const DH *dh, BIGNUM *r, const BIGNUM *a,
+                       const BIGNUM *p, const BIGNUM *m, BN_CTX *ctx,
+                       BN_MONT_CTX *m_ctx);
+    int (*init) (DH *dh);
+    int (*finish) (DH *dh);
+    int flags;
+    char *app_data;
+    /* If this is non-NULL, it will be used to generate parameters */
+    int (*generate_params) (DH *dh, int prime_len, int generator,
+                            BN_GENCB *cb);
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_meth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_meth.c
new file mode 100644
index 000000000..59c4d7e96
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_meth.c
@@ -0,0 +1,173 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "dh_locl.h"
+#include <string.h>
+#include <openssl/err.h>
+
+DH_METHOD *DH_meth_new(const char *name, int flags)
+{
+    DH_METHOD *dhm = OPENSSL_zalloc(sizeof(*dhm));
+
+    if (dhm != NULL) {
+        dhm->flags = flags;
+
+        dhm->name = OPENSSL_strdup(name);
+        if (dhm->name != NULL)
+            return dhm;
+
+        OPENSSL_free(dhm);
+    }
+
+    DHerr(DH_F_DH_METH_NEW, ERR_R_MALLOC_FAILURE);
+    return NULL;
+}
+
+void DH_meth_free(DH_METHOD *dhm)
+{
+    if (dhm != NULL) {
+        OPENSSL_free(dhm->name);
+        OPENSSL_free(dhm);
+    }
+}
+
+DH_METHOD *DH_meth_dup(const DH_METHOD *dhm)
+{
+    DH_METHOD *ret = OPENSSL_malloc(sizeof(*ret));
+
+    if (ret != NULL) {
+        memcpy(ret, dhm, sizeof(*dhm));
+
+        ret->name = OPENSSL_strdup(dhm->name);
+        if (ret->name != NULL)
+            return ret;
+
+        OPENSSL_free(ret);
+    }
+
+    DHerr(DH_F_DH_METH_DUP, ERR_R_MALLOC_FAILURE);
+    return NULL;
+}
+
+const char *DH_meth_get0_name(const DH_METHOD *dhm)
+{
+    return dhm->name;
+}
+
+int DH_meth_set1_name(DH_METHOD *dhm, const char *name)
+{
+    char *tmpname = OPENSSL_strdup(name);
+
+    if (tmpname == NULL) {
+        DHerr(DH_F_DH_METH_SET1_NAME, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    OPENSSL_free(dhm->name);
+    dhm->name = tmpname;
+
+    return 1;
+}
+
+int DH_meth_get_flags(const DH_METHOD *dhm)
+{
+    return dhm->flags;
+}
+
+int DH_meth_set_flags(DH_METHOD *dhm, int flags)
+{
+    dhm->flags = flags;
+    return 1;
+}
+
+void *DH_meth_get0_app_data(const DH_METHOD *dhm)
+{
+    return dhm->app_data;
+}
+
+int DH_meth_set0_app_data(DH_METHOD *dhm, void *app_data)
+{
+    dhm->app_data = app_data;
+    return 1;
+}
+
+int (*DH_meth_get_generate_key(const DH_METHOD *dhm)) (DH *)
+{
+    return dhm->generate_key;
+}
+
+int DH_meth_set_generate_key(DH_METHOD *dhm, int (*generate_key) (DH *))
+{
+    dhm->generate_key = generate_key;
+    return 1;
+}
+
+int (*DH_meth_get_compute_key(const DH_METHOD *dhm))
+        (unsigned char *key, const BIGNUM *pub_key, DH *dh)
+{
+    return dhm->compute_key;
+}
+
+int DH_meth_set_compute_key(DH_METHOD *dhm,
+        int (*compute_key) (unsigned char *key, const BIGNUM *pub_key, DH *dh))
+{
+    dhm->compute_key = compute_key;
+    return 1;
+}
+
+
+int (*DH_meth_get_bn_mod_exp(const DH_METHOD *dhm))
+    (const DH *, BIGNUM *, const BIGNUM *, const BIGNUM *, const BIGNUM *,
+     BN_CTX *, BN_MONT_CTX *)
+{
+    return dhm->bn_mod_exp;
+}
+
+int DH_meth_set_bn_mod_exp(DH_METHOD *dhm,
+    int (*bn_mod_exp) (const DH *, BIGNUM *, const BIGNUM *, const BIGNUM *,
+                       const BIGNUM *, BN_CTX *, BN_MONT_CTX *))
+{
+    dhm->bn_mod_exp = bn_mod_exp;
+    return 1;
+}
+
+int (*DH_meth_get_init(const DH_METHOD *dhm))(DH *)
+{
+    return dhm->init;
+}
+
+int DH_meth_set_init(DH_METHOD *dhm, int (*init)(DH *))
+{
+    dhm->init = init;
+    return 1;
+}
+
+int (*DH_meth_get_finish(const DH_METHOD *dhm)) (DH *)
+{
+    return dhm->finish;
+}
+
+int DH_meth_set_finish(DH_METHOD *dhm, int (*finish) (DH *))
+{
+    dhm->finish = finish;
+    return 1;
+}
+
+int (*DH_meth_get_generate_params(const DH_METHOD *dhm))
+        (DH *, int, int, BN_GENCB *)
+{
+    return dhm->generate_params;
+}
+
+int DH_meth_set_generate_params(DH_METHOD *dhm,
+        int (*generate_params) (DH *, int, int, BN_GENCB *))
+{
+    dhm->generate_params = generate_params;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_pmeth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_pmeth.c
new file mode 100644
index 000000000..cce2d9e26
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_pmeth.c
@@ -0,0 +1,547 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include <openssl/evp.h>
+#include "dh_locl.h"
+#include <openssl/bn.h>
+#include <openssl/dsa.h>
+#include <openssl/objects.h>
+#include "internal/evp_int.h"
+
+/* DH pkey context structure */
+
+typedef struct {
+    /* Parameter gen parameters */
+    int prime_len;
+    int generator;
+    int use_dsa;
+    int subprime_len;
+    int pad;
+    /* message digest used for parameter generation */
+    const EVP_MD *md;
+    int rfc5114_param;
+    int param_nid;
+    /* Keygen callback info */
+    int gentmp[2];
+    /* KDF (if any) to use for DH */
+    char kdf_type;
+    /* OID to use for KDF */
+    ASN1_OBJECT *kdf_oid;
+    /* Message digest to use for key derivation */
+    const EVP_MD *kdf_md;
+    /* User key material */
+    unsigned char *kdf_ukm;
+    size_t kdf_ukmlen;
+    /* KDF output length */
+    size_t kdf_outlen;
+} DH_PKEY_CTX;
+
+static int pkey_dh_init(EVP_PKEY_CTX *ctx)
+{
+    DH_PKEY_CTX *dctx;
+
+    if ((dctx = OPENSSL_zalloc(sizeof(*dctx))) == NULL) {
+        DHerr(DH_F_PKEY_DH_INIT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    dctx->prime_len = 1024;
+    dctx->subprime_len = -1;
+    dctx->generator = 2;
+    dctx->kdf_type = EVP_PKEY_DH_KDF_NONE;
+
+    ctx->data = dctx;
+    ctx->keygen_info = dctx->gentmp;
+    ctx->keygen_info_count = 2;
+
+    return 1;
+}
+
+static void pkey_dh_cleanup(EVP_PKEY_CTX *ctx)
+{
+    DH_PKEY_CTX *dctx = ctx->data;
+    if (dctx != NULL) {
+        OPENSSL_free(dctx->kdf_ukm);
+        ASN1_OBJECT_free(dctx->kdf_oid);
+        OPENSSL_free(dctx);
+    }
+}
+
+
+static int pkey_dh_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src)
+{
+    DH_PKEY_CTX *dctx, *sctx;
+    if (!pkey_dh_init(dst))
+        return 0;
+    sctx = src->data;
+    dctx = dst->data;
+    dctx->prime_len = sctx->prime_len;
+    dctx->subprime_len = sctx->subprime_len;
+    dctx->generator = sctx->generator;
+    dctx->use_dsa = sctx->use_dsa;
+    dctx->pad = sctx->pad;
+    dctx->md = sctx->md;
+    dctx->rfc5114_param = sctx->rfc5114_param;
+    dctx->param_nid = sctx->param_nid;
+
+    dctx->kdf_type = sctx->kdf_type;
+    dctx->kdf_oid = OBJ_dup(sctx->kdf_oid);
+    if (dctx->kdf_oid == NULL)
+        return 0;
+    dctx->kdf_md = sctx->kdf_md;
+    if (sctx->kdf_ukm != NULL) {
+        dctx->kdf_ukm = OPENSSL_memdup(sctx->kdf_ukm, sctx->kdf_ukmlen);
+        if (dctx->kdf_ukm == NULL)
+          return 0;
+        dctx->kdf_ukmlen = sctx->kdf_ukmlen;
+    }
+    dctx->kdf_outlen = sctx->kdf_outlen;
+    return 1;
+}
+
+static int pkey_dh_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
+{
+    DH_PKEY_CTX *dctx = ctx->data;
+    switch (type) {
+    case EVP_PKEY_CTRL_DH_PARAMGEN_PRIME_LEN:
+        if (p1 < 256)
+            return -2;
+        dctx->prime_len = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_DH_PARAMGEN_SUBPRIME_LEN:
+        if (dctx->use_dsa == 0)
+            return -2;
+        dctx->subprime_len = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_DH_PAD:
+        dctx->pad = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_DH_PARAMGEN_GENERATOR:
+        if (dctx->use_dsa)
+            return -2;
+        dctx->generator = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_DH_PARAMGEN_TYPE:
+#ifdef OPENSSL_NO_DSA
+        if (p1 != 0)
+            return -2;
+#else
+        if (p1 < 0 || p1 > 2)
+            return -2;
+#endif
+        dctx->use_dsa = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_DH_RFC5114:
+        if (p1 < 1 || p1 > 3 || dctx->param_nid != NID_undef)
+            return -2;
+        dctx->rfc5114_param = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_DH_NID:
+        if (p1 <= 0 || dctx->rfc5114_param != 0)
+            return -2;
+        dctx->param_nid = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_PEER_KEY:
+        /* Default behaviour is OK */
+        return 1;
+
+    case EVP_PKEY_CTRL_DH_KDF_TYPE:
+        if (p1 == -2)
+            return dctx->kdf_type;
+#ifdef OPENSSL_NO_CMS
+        if (p1 != EVP_PKEY_DH_KDF_NONE)
+#else
+        if (p1 != EVP_PKEY_DH_KDF_NONE && p1 != EVP_PKEY_DH_KDF_X9_42)
+#endif
+            return -2;
+        dctx->kdf_type = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_DH_KDF_MD:
+        dctx->kdf_md = p2;
+        return 1;
+
+    case EVP_PKEY_CTRL_GET_DH_KDF_MD:
+        *(const EVP_MD **)p2 = dctx->kdf_md;
+        return 1;
+
+    case EVP_PKEY_CTRL_DH_KDF_OUTLEN:
+        if (p1 <= 0)
+            return -2;
+        dctx->kdf_outlen = (size_t)p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_GET_DH_KDF_OUTLEN:
+        *(int *)p2 = dctx->kdf_outlen;
+        return 1;
+
+    case EVP_PKEY_CTRL_DH_KDF_UKM:
+        OPENSSL_free(dctx->kdf_ukm);
+        dctx->kdf_ukm = p2;
+        if (p2)
+            dctx->kdf_ukmlen = p1;
+        else
+            dctx->kdf_ukmlen = 0;
+        return 1;
+
+    case EVP_PKEY_CTRL_GET_DH_KDF_UKM:
+        *(unsigned char **)p2 = dctx->kdf_ukm;
+        return dctx->kdf_ukmlen;
+
+    case EVP_PKEY_CTRL_DH_KDF_OID:
+        ASN1_OBJECT_free(dctx->kdf_oid);
+        dctx->kdf_oid = p2;
+        return 1;
+
+    case EVP_PKEY_CTRL_GET_DH_KDF_OID:
+        *(ASN1_OBJECT **)p2 = dctx->kdf_oid;
+        return 1;
+
+    default:
+        return -2;
+
+    }
+}
+
+static int pkey_dh_ctrl_str(EVP_PKEY_CTX *ctx,
+                            const char *type, const char *value)
+{
+    if (strcmp(type, "dh_paramgen_prime_len") == 0) {
+        int len;
+        len = atoi(value);
+        return EVP_PKEY_CTX_set_dh_paramgen_prime_len(ctx, len);
+    }
+    if (strcmp(type, "dh_rfc5114") == 0) {
+        DH_PKEY_CTX *dctx = ctx->data;
+        int len;
+        len = atoi(value);
+        if (len < 0 || len > 3)
+            return -2;
+        dctx->rfc5114_param = len;
+        return 1;
+    }
+    if (strcmp(type, "dh_param") == 0) {
+        DH_PKEY_CTX *dctx = ctx->data;
+        int nid = OBJ_sn2nid(value);
+
+        if (nid == NID_undef) {
+            DHerr(DH_F_PKEY_DH_CTRL_STR, DH_R_INVALID_PARAMETER_NAME);
+            return -2;
+        }
+        dctx->param_nid = nid;
+        return 1;
+    }
+    if (strcmp(type, "dh_paramgen_generator") == 0) {
+        int len;
+        len = atoi(value);
+        return EVP_PKEY_CTX_set_dh_paramgen_generator(ctx, len);
+    }
+    if (strcmp(type, "dh_paramgen_subprime_len") == 0) {
+        int len;
+        len = atoi(value);
+        return EVP_PKEY_CTX_set_dh_paramgen_subprime_len(ctx, len);
+    }
+    if (strcmp(type, "dh_paramgen_type") == 0) {
+        int typ;
+        typ = atoi(value);
+        return EVP_PKEY_CTX_set_dh_paramgen_type(ctx, typ);
+    }
+    if (strcmp(type, "dh_pad") == 0) {
+        int pad;
+        pad = atoi(value);
+        return EVP_PKEY_CTX_set_dh_pad(ctx, pad);
+    }
+    return -2;
+}
+
+#ifndef OPENSSL_NO_DSA
+
+extern int dsa_builtin_paramgen(DSA *ret, size_t bits, size_t qbits,
+                                const EVP_MD *evpmd,
+                                const unsigned char *seed_in, size_t seed_len,
+                                unsigned char *seed_out, int *counter_ret,
+                                unsigned long *h_ret, BN_GENCB *cb);
+
+extern int dsa_builtin_paramgen2(DSA *ret, size_t L, size_t N,
+                                 const EVP_MD *evpmd,
+                                 const unsigned char *seed_in,
+                                 size_t seed_len, int idx,
+                                 unsigned char *seed_out, int *counter_ret,
+                                 unsigned long *h_ret, BN_GENCB *cb);
+
+static DSA *dsa_dh_generate(DH_PKEY_CTX *dctx, BN_GENCB *pcb)
+{
+    DSA *ret;
+    int rv = 0;
+    int prime_len = dctx->prime_len;
+    int subprime_len = dctx->subprime_len;
+    const EVP_MD *md = dctx->md;
+    if (dctx->use_dsa > 2)
+        return NULL;
+    ret = DSA_new();
+    if (ret == NULL)
+        return NULL;
+    if (subprime_len == -1) {
+        if (prime_len >= 2048)
+            subprime_len = 256;
+        else
+            subprime_len = 160;
+    }
+    if (md == NULL) {
+        if (prime_len >= 2048)
+            md = EVP_sha256();
+        else
+            md = EVP_sha1();
+    }
+    if (dctx->use_dsa == 1)
+        rv = dsa_builtin_paramgen(ret, prime_len, subprime_len, md,
+                                  NULL, 0, NULL, NULL, NULL, pcb);
+    else if (dctx->use_dsa == 2)
+        rv = dsa_builtin_paramgen2(ret, prime_len, subprime_len, md,
+                                   NULL, 0, -1, NULL, NULL, NULL, pcb);
+    if (rv <= 0) {
+        DSA_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+#endif
+
+static int pkey_dh_paramgen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
+{
+    DH *dh = NULL;
+    DH_PKEY_CTX *dctx = ctx->data;
+    BN_GENCB *pcb;
+    int ret;
+    if (dctx->rfc5114_param) {
+        switch (dctx->rfc5114_param) {
+        case 1:
+            dh = DH_get_1024_160();
+            break;
+
+        case 2:
+            dh = DH_get_2048_224();
+            break;
+
+        case 3:
+            dh = DH_get_2048_256();
+            break;
+
+        default:
+            return -2;
+        }
+        EVP_PKEY_assign(pkey, EVP_PKEY_DHX, dh);
+        return 1;
+    }
+
+    if (dctx->param_nid != 0) {
+        if ((dh = DH_new_by_nid(dctx->param_nid)) == NULL)
+            return 0;
+        EVP_PKEY_assign(pkey, EVP_PKEY_DH, dh);
+        return 1;
+    }
+
+    if (ctx->pkey_gencb) {
+        pcb = BN_GENCB_new();
+        if (pcb == NULL)
+            return 0;
+        evp_pkey_set_cb_translate(pcb, ctx);
+    } else
+        pcb = NULL;
+#ifndef OPENSSL_NO_DSA
+    if (dctx->use_dsa) {
+        DSA *dsa_dh;
+        dsa_dh = dsa_dh_generate(dctx, pcb);
+        BN_GENCB_free(pcb);
+        if (dsa_dh == NULL)
+            return 0;
+        dh = DSA_dup_DH(dsa_dh);
+        DSA_free(dsa_dh);
+        if (!dh)
+            return 0;
+        EVP_PKEY_assign(pkey, EVP_PKEY_DHX, dh);
+        return 1;
+    }
+#endif
+    dh = DH_new();
+    if (dh == NULL) {
+        BN_GENCB_free(pcb);
+        return 0;
+    }
+    ret = DH_generate_parameters_ex(dh,
+                                    dctx->prime_len, dctx->generator, pcb);
+    BN_GENCB_free(pcb);
+    if (ret)
+        EVP_PKEY_assign_DH(pkey, dh);
+    else
+        DH_free(dh);
+    return ret;
+}
+
+static int pkey_dh_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
+{
+    DH_PKEY_CTX *dctx = ctx->data;
+    DH *dh = NULL;
+
+    if (ctx->pkey == NULL && dctx->param_nid == 0) {
+        DHerr(DH_F_PKEY_DH_KEYGEN, DH_R_NO_PARAMETERS_SET);
+        return 0;
+    }
+    if (dctx->param_nid != 0)
+        dh = DH_new_by_nid(dctx->param_nid);
+    else
+        dh = DH_new();
+    if (dh == NULL)
+        return 0;
+    EVP_PKEY_assign(pkey, ctx->pmeth->pkey_id, dh);
+    /* Note: if error return, pkey is freed by parent routine */
+    if (ctx->pkey != NULL && !EVP_PKEY_copy_parameters(pkey, ctx->pkey))
+        return 0;
+    return DH_generate_key(pkey->pkey.dh);
+}
+
+static int pkey_dh_derive(EVP_PKEY_CTX *ctx, unsigned char *key,
+                          size_t *keylen)
+{
+    int ret;
+    DH *dh;
+    DH_PKEY_CTX *dctx = ctx->data;
+    BIGNUM *dhpub;
+    if (!ctx->pkey || !ctx->peerkey) {
+        DHerr(DH_F_PKEY_DH_DERIVE, DH_R_KEYS_NOT_SET);
+        return 0;
+    }
+    dh = ctx->pkey->pkey.dh;
+    dhpub = ctx->peerkey->pkey.dh->pub_key;
+    if (dctx->kdf_type == EVP_PKEY_DH_KDF_NONE) {
+        if (key == NULL) {
+            *keylen = DH_size(dh);
+            return 1;
+        }
+        if (dctx->pad)
+            ret = DH_compute_key_padded(key, dhpub, dh);
+        else
+            ret = DH_compute_key(key, dhpub, dh);
+        if (ret < 0)
+            return ret;
+        *keylen = ret;
+        return 1;
+    }
+#ifndef OPENSSL_NO_CMS
+    else if (dctx->kdf_type == EVP_PKEY_DH_KDF_X9_42) {
+
+        unsigned char *Z = NULL;
+        size_t Zlen = 0;
+        if (!dctx->kdf_outlen || !dctx->kdf_oid)
+            return 0;
+        if (key == NULL) {
+            *keylen = dctx->kdf_outlen;
+            return 1;
+        }
+        if (*keylen != dctx->kdf_outlen)
+            return 0;
+        ret = 0;
+        Zlen = DH_size(dh);
+        Z = OPENSSL_malloc(Zlen);
+        if (Z == NULL) {
+            goto err;
+        }
+        if (DH_compute_key_padded(Z, dhpub, dh) <= 0)
+            goto err;
+        if (!DH_KDF_X9_42(key, *keylen, Z, Zlen, dctx->kdf_oid,
+                          dctx->kdf_ukm, dctx->kdf_ukmlen, dctx->kdf_md))
+            goto err;
+        *keylen = dctx->kdf_outlen;
+        ret = 1;
+ err:
+        OPENSSL_clear_free(Z, Zlen);
+        return ret;
+    }
+#endif
+    return 0;
+}
+
+const EVP_PKEY_METHOD dh_pkey_meth = {
+    EVP_PKEY_DH,
+    0,
+    pkey_dh_init,
+    pkey_dh_copy,
+    pkey_dh_cleanup,
+
+    0,
+    pkey_dh_paramgen,
+
+    0,
+    pkey_dh_keygen,
+
+    0,
+    0,
+
+    0,
+    0,
+
+    0, 0,
+
+    0, 0, 0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    0,
+    pkey_dh_derive,
+
+    pkey_dh_ctrl,
+    pkey_dh_ctrl_str
+};
+
+const EVP_PKEY_METHOD dhx_pkey_meth = {
+    EVP_PKEY_DHX,
+    0,
+    pkey_dh_init,
+    pkey_dh_copy,
+    pkey_dh_cleanup,
+
+    0,
+    pkey_dh_paramgen,
+
+    0,
+    pkey_dh_keygen,
+
+    0,
+    0,
+
+    0,
+    0,
+
+    0, 0,
+
+    0, 0, 0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    0,
+    pkey_dh_derive,
+
+    pkey_dh_ctrl,
+    pkey_dh_ctrl_str
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_prn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_prn.c
new file mode 100644
index 000000000..aab1733db
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_prn.c
@@ -0,0 +1,30 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/dh.h>
+
+#ifndef OPENSSL_NO_STDIO
+int DHparams_print_fp(FILE *fp, const DH *x)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        DHerr(DH_F_DHPARAMS_PRINT_FP, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = DHparams_print(b, x);
+    BIO_free(b);
+    return ret;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_rfc5114.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_rfc5114.c
new file mode 100644
index 000000000..c4a219590
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_rfc5114.c
@@ -0,0 +1,41 @@
+/*
+ * Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "dh_locl.h"
+#include <openssl/bn.h>
+#include "internal/bn_dh.h"
+
+/*
+ * Macro to make a DH structure from BIGNUM data. NB: although just copying
+ * the BIGNUM static pointers would be more efficient, we can't do that
+ * because they get wiped using BN_clear_free() when DH_free() is called.
+ */
+
+#define make_dh(x) \
+DH *DH_get_##x(void) \
+{ \
+    DH *dh = DH_new(); \
+\
+    if (dh == NULL) \
+        return NULL; \
+    dh->p = BN_dup(&_bignum_dh##x##_p); \
+    dh->g = BN_dup(&_bignum_dh##x##_g); \
+    dh->q = BN_dup(&_bignum_dh##x##_q); \
+    if (dh->p == NULL || dh->q == NULL || dh->g == NULL) {\
+        DH_free(dh); \
+        return NULL; \
+    } \
+    return dh; \
+}
+
+make_dh(1024_160)
+make_dh(2048_224)
+make_dh(2048_256)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_rfc7919.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_rfc7919.c
new file mode 100644
index 000000000..a54b468e5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dh/dh_rfc7919.c
@@ -0,0 +1,74 @@
+/*
+ * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "dh_locl.h"
+#include <openssl/bn.h>
+#include <openssl/objects.h>
+#include "internal/bn_dh.h"
+
+static DH *dh_param_init(const BIGNUM *p, int32_t nbits)
+{
+    DH *dh = DH_new();
+    if (dh == NULL)
+        return NULL;
+    dh->p = (BIGNUM *)p;
+    dh->g = (BIGNUM *)&_bignum_const_2;
+    dh->length = nbits;
+    return dh;
+}
+
+DH *DH_new_by_nid(int nid)
+{
+    switch (nid) {
+    case NID_ffdhe2048:
+        return dh_param_init(&_bignum_ffdhe2048_p, 225);
+    case NID_ffdhe3072:
+        return dh_param_init(&_bignum_ffdhe3072_p, 275);
+    case NID_ffdhe4096:
+        return dh_param_init(&_bignum_ffdhe4096_p, 325);
+    case NID_ffdhe6144:
+        return dh_param_init(&_bignum_ffdhe6144_p, 375);
+    case NID_ffdhe8192:
+        return dh_param_init(&_bignum_ffdhe8192_p, 400);
+    default:
+        DHerr(DH_F_DH_NEW_BY_NID, DH_R_INVALID_PARAMETER_NID);
+        return NULL;
+    }
+}
+
+int DH_get_nid(const DH *dh)
+{
+    int nid;
+
+    if (BN_get_word(dh->g) != 2)
+        return NID_undef;
+    if (!BN_cmp(dh->p, &_bignum_ffdhe2048_p))
+        nid = NID_ffdhe2048;
+    else if (!BN_cmp(dh->p, &_bignum_ffdhe3072_p))
+        nid = NID_ffdhe3072;
+    else if (!BN_cmp(dh->p, &_bignum_ffdhe4096_p))
+        nid = NID_ffdhe4096;
+    else if (!BN_cmp(dh->p, &_bignum_ffdhe6144_p))
+        nid = NID_ffdhe6144;
+    else if (!BN_cmp(dh->p, &_bignum_ffdhe8192_p))
+        nid = NID_ffdhe8192;
+    else
+        return NID_undef;
+    if (dh->q != NULL) {
+        BIGNUM *q = BN_dup(dh->p);
+
+        /* Check q = p * 2 + 1 we already know q is odd, so just shift right */
+        if (q == NULL || !BN_rshift1(q, q) || !BN_cmp(dh->q, q))
+            nid = NID_undef;
+        BN_free(q);
+    }
+    return nid;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dllmain.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dllmain.c
new file mode 100644
index 000000000..0838c55e4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dllmain.c
@@ -0,0 +1,46 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include "internal/cryptlib_int.h"
+
+#if defined(_WIN32) || defined(__CYGWIN__)
+# ifdef __CYGWIN__
+/* pick DLL_[PROCESS|THREAD]_[ATTACH|DETACH] definitions */
+#  include <windows.h>
+/*
+ * this has side-effect of _WIN32 getting defined, which otherwise is
+ * mutually exclusive with __CYGWIN__...
+ */
+# endif
+
+/*
+ * All we really need to do is remove the 'error' state when a thread
+ * detaches
+ */
+
+BOOL WINAPI DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved);
+BOOL WINAPI DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
+{
+    switch (fdwReason) {
+    case DLL_PROCESS_ATTACH:
+        OPENSSL_cpuid_setup();
+        break;
+    case DLL_THREAD_ATTACH:
+        break;
+    case DLL_THREAD_DETACH:
+        OPENSSL_thread_stop();
+        break;
+    case DLL_PROCESS_DETACH:
+        break;
+    }
+    return TRUE;
+}
+#endif
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/build.info
new file mode 100644
index 000000000..2e759853a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/build.info
@@ -0,0 +1,5 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        dsa_gen.c dsa_key.c dsa_lib.c dsa_asn1.c dsa_vrf.c dsa_sign.c \
+        dsa_err.c dsa_ossl.c dsa_depr.c dsa_ameth.c dsa_pmeth.c dsa_prn.c \
+        dsa_meth.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_ameth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_ameth.c
new file mode 100644
index 000000000..9c5b8aa02
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_ameth.c
@@ -0,0 +1,572 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/asn1.h>
+#include "dsa_locl.h"
+#include <openssl/bn.h>
+#include <openssl/cms.h>
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+
+static int dsa_pub_decode(EVP_PKEY *pkey, X509_PUBKEY *pubkey)
+{
+    const unsigned char *p, *pm;
+    int pklen, pmlen;
+    int ptype;
+    const void *pval;
+    const ASN1_STRING *pstr;
+    X509_ALGOR *palg;
+    ASN1_INTEGER *public_key = NULL;
+
+    DSA *dsa = NULL;
+
+    if (!X509_PUBKEY_get0_param(NULL, &p, &pklen, &palg, pubkey))
+        return 0;
+    X509_ALGOR_get0(NULL, &ptype, &pval, palg);
+
+    if (ptype == V_ASN1_SEQUENCE) {
+        pstr = pval;
+        pm = pstr->data;
+        pmlen = pstr->length;
+
+        if ((dsa = d2i_DSAparams(NULL, &pm, pmlen)) == NULL) {
+            DSAerr(DSA_F_DSA_PUB_DECODE, DSA_R_DECODE_ERROR);
+            goto err;
+        }
+
+    } else if ((ptype == V_ASN1_NULL) || (ptype == V_ASN1_UNDEF)) {
+        if ((dsa = DSA_new()) == NULL) {
+            DSAerr(DSA_F_DSA_PUB_DECODE, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    } else {
+        DSAerr(DSA_F_DSA_PUB_DECODE, DSA_R_PARAMETER_ENCODING_ERROR);
+        goto err;
+    }
+
+    if ((public_key = d2i_ASN1_INTEGER(NULL, &p, pklen)) == NULL) {
+        DSAerr(DSA_F_DSA_PUB_DECODE, DSA_R_DECODE_ERROR);
+        goto err;
+    }
+
+    if ((dsa->pub_key = ASN1_INTEGER_to_BN(public_key, NULL)) == NULL) {
+        DSAerr(DSA_F_DSA_PUB_DECODE, DSA_R_BN_DECODE_ERROR);
+        goto err;
+    }
+
+    ASN1_INTEGER_free(public_key);
+    EVP_PKEY_assign_DSA(pkey, dsa);
+    return 1;
+
+ err:
+    ASN1_INTEGER_free(public_key);
+    DSA_free(dsa);
+    return 0;
+
+}
+
+static int dsa_pub_encode(X509_PUBKEY *pk, const EVP_PKEY *pkey)
+{
+    DSA *dsa;
+    int ptype;
+    unsigned char *penc = NULL;
+    int penclen;
+    ASN1_STRING *str = NULL;
+    ASN1_INTEGER *pubint = NULL;
+    ASN1_OBJECT *aobj;
+
+    dsa = pkey->pkey.dsa;
+    if (pkey->save_parameters && dsa->p && dsa->q && dsa->g) {
+        str = ASN1_STRING_new();
+        if (str == NULL) {
+            DSAerr(DSA_F_DSA_PUB_ENCODE, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        str->length = i2d_DSAparams(dsa, &str->data);
+        if (str->length <= 0) {
+            DSAerr(DSA_F_DSA_PUB_ENCODE, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        ptype = V_ASN1_SEQUENCE;
+    } else
+        ptype = V_ASN1_UNDEF;
+
+    pubint = BN_to_ASN1_INTEGER(dsa->pub_key, NULL);
+
+    if (pubint == NULL) {
+        DSAerr(DSA_F_DSA_PUB_ENCODE, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    penclen = i2d_ASN1_INTEGER(pubint, &penc);
+    ASN1_INTEGER_free(pubint);
+
+    if (penclen <= 0) {
+        DSAerr(DSA_F_DSA_PUB_ENCODE, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    aobj = OBJ_nid2obj(EVP_PKEY_DSA);
+    if (aobj == NULL)
+        goto err;
+
+    if (X509_PUBKEY_set0_param(pk, aobj, ptype, str, penc, penclen))
+        return 1;
+
+ err:
+    OPENSSL_free(penc);
+    ASN1_STRING_free(str);
+
+    return 0;
+}
+
+/*
+ * In PKCS#8 DSA: you just get a private key integer and parameters in the
+ * AlgorithmIdentifier the pubkey must be recalculated.
+ */
+
+static int dsa_priv_decode(EVP_PKEY *pkey, const PKCS8_PRIV_KEY_INFO *p8)
+{
+    const unsigned char *p, *pm;
+    int pklen, pmlen;
+    int ptype;
+    const void *pval;
+    const ASN1_STRING *pstr;
+    const X509_ALGOR *palg;
+    ASN1_INTEGER *privkey = NULL;
+    BN_CTX *ctx = NULL;
+
+    DSA *dsa = NULL;
+
+    int ret = 0;
+
+    if (!PKCS8_pkey_get0(NULL, &p, &pklen, &palg, p8))
+        return 0;
+    X509_ALGOR_get0(NULL, &ptype, &pval, palg);
+
+    if ((privkey = d2i_ASN1_INTEGER(NULL, &p, pklen)) == NULL)
+        goto decerr;
+    if (privkey->type == V_ASN1_NEG_INTEGER || ptype != V_ASN1_SEQUENCE)
+        goto decerr;
+
+    pstr = pval;
+    pm = pstr->data;
+    pmlen = pstr->length;
+    if ((dsa = d2i_DSAparams(NULL, &pm, pmlen)) == NULL)
+        goto decerr;
+    /* We have parameters now set private key */
+    if ((dsa->priv_key = BN_secure_new()) == NULL
+        || !ASN1_INTEGER_to_BN(privkey, dsa->priv_key)) {
+        DSAerr(DSA_F_DSA_PRIV_DECODE, DSA_R_BN_ERROR);
+        goto dsaerr;
+    }
+    /* Calculate public key */
+    if ((dsa->pub_key = BN_new()) == NULL) {
+        DSAerr(DSA_F_DSA_PRIV_DECODE, ERR_R_MALLOC_FAILURE);
+        goto dsaerr;
+    }
+    if ((ctx = BN_CTX_new()) == NULL) {
+        DSAerr(DSA_F_DSA_PRIV_DECODE, ERR_R_MALLOC_FAILURE);
+        goto dsaerr;
+    }
+
+    BN_set_flags(dsa->priv_key, BN_FLG_CONSTTIME);
+    if (!BN_mod_exp(dsa->pub_key, dsa->g, dsa->priv_key, dsa->p, ctx)) {
+        DSAerr(DSA_F_DSA_PRIV_DECODE, DSA_R_BN_ERROR);
+        goto dsaerr;
+    }
+
+    EVP_PKEY_assign_DSA(pkey, dsa);
+
+    ret = 1;
+    goto done;
+
+ decerr:
+    DSAerr(DSA_F_DSA_PRIV_DECODE, DSA_R_DECODE_ERROR);
+ dsaerr:
+    DSA_free(dsa);
+ done:
+    BN_CTX_free(ctx);
+    ASN1_STRING_clear_free(privkey);
+    return ret;
+}
+
+static int dsa_priv_encode(PKCS8_PRIV_KEY_INFO *p8, const EVP_PKEY *pkey)
+{
+    ASN1_STRING *params = NULL;
+    ASN1_INTEGER *prkey = NULL;
+    unsigned char *dp = NULL;
+    int dplen;
+
+    if (!pkey->pkey.dsa || !pkey->pkey.dsa->priv_key) {
+        DSAerr(DSA_F_DSA_PRIV_ENCODE, DSA_R_MISSING_PARAMETERS);
+        goto err;
+    }
+
+    params = ASN1_STRING_new();
+
+    if (params == NULL) {
+        DSAerr(DSA_F_DSA_PRIV_ENCODE, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    params->length = i2d_DSAparams(pkey->pkey.dsa, &params->data);
+    if (params->length <= 0) {
+        DSAerr(DSA_F_DSA_PRIV_ENCODE, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    params->type = V_ASN1_SEQUENCE;
+
+    /* Get private key into integer */
+    prkey = BN_to_ASN1_INTEGER(pkey->pkey.dsa->priv_key, NULL);
+
+    if (!prkey) {
+        DSAerr(DSA_F_DSA_PRIV_ENCODE, DSA_R_BN_ERROR);
+        goto err;
+    }
+
+    dplen = i2d_ASN1_INTEGER(prkey, &dp);
+
+    ASN1_STRING_clear_free(prkey);
+    prkey = NULL;
+
+    if (!PKCS8_pkey_set0(p8, OBJ_nid2obj(NID_dsa), 0,
+                         V_ASN1_SEQUENCE, params, dp, dplen))
+        goto err;
+
+    return 1;
+
+ err:
+    OPENSSL_free(dp);
+    ASN1_STRING_free(params);
+    ASN1_STRING_clear_free(prkey);
+    return 0;
+}
+
+static int int_dsa_size(const EVP_PKEY *pkey)
+{
+    return DSA_size(pkey->pkey.dsa);
+}
+
+static int dsa_bits(const EVP_PKEY *pkey)
+{
+    return DSA_bits(pkey->pkey.dsa);
+}
+
+static int dsa_security_bits(const EVP_PKEY *pkey)
+{
+    return DSA_security_bits(pkey->pkey.dsa);
+}
+
+static int dsa_missing_parameters(const EVP_PKEY *pkey)
+{
+    DSA *dsa;
+    dsa = pkey->pkey.dsa;
+    if (dsa == NULL || dsa->p == NULL || dsa->q == NULL || dsa->g == NULL)
+        return 1;
+    return 0;
+}
+
+static int dsa_copy_parameters(EVP_PKEY *to, const EVP_PKEY *from)
+{
+    BIGNUM *a;
+
+    if (to->pkey.dsa == NULL) {
+        to->pkey.dsa = DSA_new();
+        if (to->pkey.dsa == NULL)
+            return 0;
+    }
+
+    if ((a = BN_dup(from->pkey.dsa->p)) == NULL)
+        return 0;
+    BN_free(to->pkey.dsa->p);
+    to->pkey.dsa->p = a;
+
+    if ((a = BN_dup(from->pkey.dsa->q)) == NULL)
+        return 0;
+    BN_free(to->pkey.dsa->q);
+    to->pkey.dsa->q = a;
+
+    if ((a = BN_dup(from->pkey.dsa->g)) == NULL)
+        return 0;
+    BN_free(to->pkey.dsa->g);
+    to->pkey.dsa->g = a;
+    return 1;
+}
+
+static int dsa_cmp_parameters(const EVP_PKEY *a, const EVP_PKEY *b)
+{
+    if (BN_cmp(a->pkey.dsa->p, b->pkey.dsa->p) ||
+        BN_cmp(a->pkey.dsa->q, b->pkey.dsa->q) ||
+        BN_cmp(a->pkey.dsa->g, b->pkey.dsa->g))
+        return 0;
+    else
+        return 1;
+}
+
+static int dsa_pub_cmp(const EVP_PKEY *a, const EVP_PKEY *b)
+{
+    if (BN_cmp(b->pkey.dsa->pub_key, a->pkey.dsa->pub_key) != 0)
+        return 0;
+    else
+        return 1;
+}
+
+static void int_dsa_free(EVP_PKEY *pkey)
+{
+    DSA_free(pkey->pkey.dsa);
+}
+
+static int do_dsa_print(BIO *bp, const DSA *x, int off, int ptype)
+{
+    int ret = 0;
+    const char *ktype = NULL;
+    const BIGNUM *priv_key, *pub_key;
+
+    if (ptype == 2)
+        priv_key = x->priv_key;
+    else
+        priv_key = NULL;
+
+    if (ptype > 0)
+        pub_key = x->pub_key;
+    else
+        pub_key = NULL;
+
+    if (ptype == 2)
+        ktype = "Private-Key";
+    else if (ptype == 1)
+        ktype = "Public-Key";
+    else
+        ktype = "DSA-Parameters";
+
+    if (priv_key) {
+        if (!BIO_indent(bp, off, 128))
+            goto err;
+        if (BIO_printf(bp, "%s: (%d bit)\n", ktype, BN_num_bits(x->p))
+            <= 0)
+            goto err;
+    }
+
+    if (!ASN1_bn_print(bp, "priv:", priv_key, NULL, off))
+        goto err;
+    if (!ASN1_bn_print(bp, "pub: ", pub_key, NULL, off))
+        goto err;
+    if (!ASN1_bn_print(bp, "P:   ", x->p, NULL, off))
+        goto err;
+    if (!ASN1_bn_print(bp, "Q:   ", x->q, NULL, off))
+        goto err;
+    if (!ASN1_bn_print(bp, "G:   ", x->g, NULL, off))
+        goto err;
+    ret = 1;
+ err:
+    return ret;
+}
+
+static int dsa_param_decode(EVP_PKEY *pkey,
+                            const unsigned char **pder, int derlen)
+{
+    DSA *dsa;
+
+    if ((dsa = d2i_DSAparams(NULL, pder, derlen)) == NULL) {
+        DSAerr(DSA_F_DSA_PARAM_DECODE, ERR_R_DSA_LIB);
+        return 0;
+    }
+    EVP_PKEY_assign_DSA(pkey, dsa);
+    return 1;
+}
+
+static int dsa_param_encode(const EVP_PKEY *pkey, unsigned char **pder)
+{
+    return i2d_DSAparams(pkey->pkey.dsa, pder);
+}
+
+static int dsa_param_print(BIO *bp, const EVP_PKEY *pkey, int indent,
+                           ASN1_PCTX *ctx)
+{
+    return do_dsa_print(bp, pkey->pkey.dsa, indent, 0);
+}
+
+static int dsa_pub_print(BIO *bp, const EVP_PKEY *pkey, int indent,
+                         ASN1_PCTX *ctx)
+{
+    return do_dsa_print(bp, pkey->pkey.dsa, indent, 1);
+}
+
+static int dsa_priv_print(BIO *bp, const EVP_PKEY *pkey, int indent,
+                          ASN1_PCTX *ctx)
+{
+    return do_dsa_print(bp, pkey->pkey.dsa, indent, 2);
+}
+
+static int old_dsa_priv_decode(EVP_PKEY *pkey,
+                               const unsigned char **pder, int derlen)
+{
+    DSA *dsa;
+
+    if ((dsa = d2i_DSAPrivateKey(NULL, pder, derlen)) == NULL) {
+        DSAerr(DSA_F_OLD_DSA_PRIV_DECODE, ERR_R_DSA_LIB);
+        return 0;
+    }
+    EVP_PKEY_assign_DSA(pkey, dsa);
+    return 1;
+}
+
+static int old_dsa_priv_encode(const EVP_PKEY *pkey, unsigned char **pder)
+{
+    return i2d_DSAPrivateKey(pkey->pkey.dsa, pder);
+}
+
+static int dsa_sig_print(BIO *bp, const X509_ALGOR *sigalg,
+                         const ASN1_STRING *sig, int indent, ASN1_PCTX *pctx)
+{
+    DSA_SIG *dsa_sig;
+    const unsigned char *p;
+
+    if (!sig) {
+        if (BIO_puts(bp, "\n") <= 0)
+            return 0;
+        else
+            return 1;
+    }
+    p = sig->data;
+    dsa_sig = d2i_DSA_SIG(NULL, &p, sig->length);
+    if (dsa_sig) {
+        int rv = 0;
+        const BIGNUM *r, *s;
+
+        DSA_SIG_get0(dsa_sig, &r, &s);
+
+        if (BIO_write(bp, "\n", 1) != 1)
+            goto err;
+
+        if (!ASN1_bn_print(bp, "r:   ", r, NULL, indent))
+            goto err;
+        if (!ASN1_bn_print(bp, "s:   ", s, NULL, indent))
+            goto err;
+        rv = 1;
+ err:
+        DSA_SIG_free(dsa_sig);
+        return rv;
+    }
+    return X509_signature_dump(bp, sig, indent);
+}
+
+static int dsa_pkey_ctrl(EVP_PKEY *pkey, int op, long arg1, void *arg2)
+{
+    switch (op) {
+    case ASN1_PKEY_CTRL_PKCS7_SIGN:
+        if (arg1 == 0) {
+            int snid, hnid;
+            X509_ALGOR *alg1, *alg2;
+            PKCS7_SIGNER_INFO_get0_algs(arg2, NULL, &alg1, &alg2);
+            if (alg1 == NULL || alg1->algorithm == NULL)
+                return -1;
+            hnid = OBJ_obj2nid(alg1->algorithm);
+            if (hnid == NID_undef)
+                return -1;
+            if (!OBJ_find_sigid_by_algs(&snid, hnid, EVP_PKEY_id(pkey)))
+                return -1;
+            X509_ALGOR_set0(alg2, OBJ_nid2obj(snid), V_ASN1_UNDEF, 0);
+        }
+        return 1;
+#ifndef OPENSSL_NO_CMS
+    case ASN1_PKEY_CTRL_CMS_SIGN:
+        if (arg1 == 0) {
+            int snid, hnid;
+            X509_ALGOR *alg1, *alg2;
+            CMS_SignerInfo_get0_algs(arg2, NULL, NULL, &alg1, &alg2);
+            if (alg1 == NULL || alg1->algorithm == NULL)
+                return -1;
+            hnid = OBJ_obj2nid(alg1->algorithm);
+            if (hnid == NID_undef)
+                return -1;
+            if (!OBJ_find_sigid_by_algs(&snid, hnid, EVP_PKEY_id(pkey)))
+                return -1;
+            X509_ALGOR_set0(alg2, OBJ_nid2obj(snid), V_ASN1_UNDEF, 0);
+        }
+        return 1;
+
+    case ASN1_PKEY_CTRL_CMS_RI_TYPE:
+        *(int *)arg2 = CMS_RECIPINFO_NONE;
+        return 1;
+#endif
+
+    case ASN1_PKEY_CTRL_DEFAULT_MD_NID:
+        *(int *)arg2 = NID_sha256;
+        return 2;
+
+    default:
+        return -2;
+
+    }
+
+}
+
+/* NB these are sorted in pkey_id order, lowest first */
+
+const EVP_PKEY_ASN1_METHOD dsa_asn1_meths[5] = {
+
+    {
+     EVP_PKEY_DSA2,
+     EVP_PKEY_DSA,
+     ASN1_PKEY_ALIAS},
+
+    {
+     EVP_PKEY_DSA1,
+     EVP_PKEY_DSA,
+     ASN1_PKEY_ALIAS},
+
+    {
+     EVP_PKEY_DSA4,
+     EVP_PKEY_DSA,
+     ASN1_PKEY_ALIAS},
+
+    {
+     EVP_PKEY_DSA3,
+     EVP_PKEY_DSA,
+     ASN1_PKEY_ALIAS},
+
+    {
+     EVP_PKEY_DSA,
+     EVP_PKEY_DSA,
+     0,
+
+     "DSA",
+     "OpenSSL DSA method",
+
+     dsa_pub_decode,
+     dsa_pub_encode,
+     dsa_pub_cmp,
+     dsa_pub_print,
+
+     dsa_priv_decode,
+     dsa_priv_encode,
+     dsa_priv_print,
+
+     int_dsa_size,
+     dsa_bits,
+     dsa_security_bits,
+
+     dsa_param_decode,
+     dsa_param_encode,
+     dsa_missing_parameters,
+     dsa_copy_parameters,
+     dsa_cmp_parameters,
+     dsa_param_print,
+     dsa_sig_print,
+
+     int_dsa_free,
+     dsa_pkey_ctrl,
+     old_dsa_priv_decode,
+     old_dsa_priv_encode}
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_asn1.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_asn1.c
new file mode 100644
index 000000000..6499e87ef
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_asn1.c
@@ -0,0 +1,155 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "dsa_locl.h"
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/rand.h>
+
+ASN1_SEQUENCE(DSA_SIG) = {
+        ASN1_SIMPLE(DSA_SIG, r, CBIGNUM),
+        ASN1_SIMPLE(DSA_SIG, s, CBIGNUM)
+} static_ASN1_SEQUENCE_END(DSA_SIG)
+
+IMPLEMENT_ASN1_ENCODE_FUNCTIONS_const_fname(DSA_SIG, DSA_SIG, DSA_SIG)
+
+DSA_SIG *DSA_SIG_new(void)
+{
+    DSA_SIG *sig = OPENSSL_zalloc(sizeof(*sig));
+    if (sig == NULL)
+        DSAerr(DSA_F_DSA_SIG_NEW, ERR_R_MALLOC_FAILURE);
+    return sig;
+}
+
+void DSA_SIG_free(DSA_SIG *sig)
+{
+    if (sig == NULL)
+        return;
+    BN_clear_free(sig->r);
+    BN_clear_free(sig->s);
+    OPENSSL_free(sig);
+}
+
+void DSA_SIG_get0(const DSA_SIG *sig, const BIGNUM **pr, const BIGNUM **ps)
+{
+    if (pr != NULL)
+        *pr = sig->r;
+    if (ps != NULL)
+        *ps = sig->s;
+}
+
+int DSA_SIG_set0(DSA_SIG *sig, BIGNUM *r, BIGNUM *s)
+{
+    if (r == NULL || s == NULL)
+        return 0;
+    BN_clear_free(sig->r);
+    BN_clear_free(sig->s);
+    sig->r = r;
+    sig->s = s;
+    return 1;
+}
+
+/* Override the default free and new methods */
+static int dsa_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                  void *exarg)
+{
+    if (operation == ASN1_OP_NEW_PRE) {
+        *pval = (ASN1_VALUE *)DSA_new();
+        if (*pval != NULL)
+            return 2;
+        return 0;
+    } else if (operation == ASN1_OP_FREE_PRE) {
+        DSA_free((DSA *)*pval);
+        *pval = NULL;
+        return 2;
+    }
+    return 1;
+}
+
+ASN1_SEQUENCE_cb(DSAPrivateKey, dsa_cb) = {
+        ASN1_EMBED(DSA, version, INT32),
+        ASN1_SIMPLE(DSA, p, BIGNUM),
+        ASN1_SIMPLE(DSA, q, BIGNUM),
+        ASN1_SIMPLE(DSA, g, BIGNUM),
+        ASN1_SIMPLE(DSA, pub_key, BIGNUM),
+        ASN1_SIMPLE(DSA, priv_key, CBIGNUM)
+} static_ASN1_SEQUENCE_END_cb(DSA, DSAPrivateKey)
+
+IMPLEMENT_ASN1_ENCODE_FUNCTIONS_const_fname(DSA, DSAPrivateKey, DSAPrivateKey)
+
+ASN1_SEQUENCE_cb(DSAparams, dsa_cb) = {
+        ASN1_SIMPLE(DSA, p, BIGNUM),
+        ASN1_SIMPLE(DSA, q, BIGNUM),
+        ASN1_SIMPLE(DSA, g, BIGNUM),
+} static_ASN1_SEQUENCE_END_cb(DSA, DSAparams)
+
+IMPLEMENT_ASN1_ENCODE_FUNCTIONS_const_fname(DSA, DSAparams, DSAparams)
+
+ASN1_SEQUENCE_cb(DSAPublicKey, dsa_cb) = {
+        ASN1_SIMPLE(DSA, pub_key, BIGNUM),
+        ASN1_SIMPLE(DSA, p, BIGNUM),
+        ASN1_SIMPLE(DSA, q, BIGNUM),
+        ASN1_SIMPLE(DSA, g, BIGNUM)
+} static_ASN1_SEQUENCE_END_cb(DSA, DSAPublicKey)
+
+IMPLEMENT_ASN1_ENCODE_FUNCTIONS_const_fname(DSA, DSAPublicKey, DSAPublicKey)
+
+DSA *DSAparams_dup(DSA *dsa)
+{
+    return ASN1_item_dup(ASN1_ITEM_rptr(DSAparams), dsa);
+}
+
+int DSA_sign(int type, const unsigned char *dgst, int dlen,
+             unsigned char *sig, unsigned int *siglen, DSA *dsa)
+{
+    DSA_SIG *s;
+
+    s = DSA_do_sign(dgst, dlen, dsa);
+    if (s == NULL) {
+        *siglen = 0;
+        return 0;
+    }
+    *siglen = i2d_DSA_SIG(s, &sig);
+    DSA_SIG_free(s);
+    return 1;
+}
+
+/* data has already been hashed (probably with SHA or SHA-1). */
+/*-
+ * returns
+ *      1: correct signature
+ *      0: incorrect signature
+ *     -1: error
+ */
+int DSA_verify(int type, const unsigned char *dgst, int dgst_len,
+               const unsigned char *sigbuf, int siglen, DSA *dsa)
+{
+    DSA_SIG *s;
+    const unsigned char *p = sigbuf;
+    unsigned char *der = NULL;
+    int derlen = -1;
+    int ret = -1;
+
+    s = DSA_SIG_new();
+    if (s == NULL)
+        return ret;
+    if (d2i_DSA_SIG(&s, &p, siglen) == NULL)
+        goto err;
+    /* Ensure signature uses DER and doesn't have trailing garbage */
+    derlen = i2d_DSA_SIG(s, &der);
+    if (derlen != siglen || memcmp(sigbuf, der, derlen))
+        goto err;
+    ret = DSA_do_verify(dgst, dgst_len, s, dsa);
+ err:
+    OPENSSL_clear_free(der, derlen);
+    DSA_SIG_free(s);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_depr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_depr.c
new file mode 100644
index 000000000..f51aea749
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_depr.c
@@ -0,0 +1,62 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file contains deprecated function(s) that are now wrappers to the new
+ * version(s).
+ */
+
+/*
+ * Parameter generation follows the updated Appendix 2.2 for FIPS PUB 186,
+ * also Appendix 2.2 of FIPS PUB 186-1 (i.e. use SHA as defined in FIPS PUB
+ * 180-1)
+ */
+#define xxxHASH    EVP_sha1()
+
+#include <openssl/opensslconf.h>
+#if OPENSSL_API_COMPAT >= 0x00908000L
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <stdio.h>
+# include <time.h>
+# include "internal/cryptlib.h"
+# include <openssl/evp.h>
+# include <openssl/bn.h>
+# include <openssl/dsa.h>
+# include <openssl/sha.h>
+
+DSA *DSA_generate_parameters(int bits,
+                             unsigned char *seed_in, int seed_len,
+                             int *counter_ret, unsigned long *h_ret,
+                             void (*callback) (int, int, void *),
+                             void *cb_arg)
+{
+    BN_GENCB *cb;
+    DSA *ret;
+
+    if ((ret = DSA_new()) == NULL)
+        return NULL;
+    cb = BN_GENCB_new();
+    if (cb == NULL)
+        goto err;
+
+    BN_GENCB_set_old(cb, callback, cb_arg);
+
+    if (DSA_generate_parameters_ex(ret, bits, seed_in, seed_len,
+                                   counter_ret, h_ret, cb)) {
+        BN_GENCB_free(cb);
+        return ret;
+    }
+    BN_GENCB_free(cb);
+err:
+    DSA_free(ret);
+    return NULL;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_err.c
new file mode 100644
index 000000000..8f97f6f3f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_err.c
@@ -0,0 +1,76 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/dsaerr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA DSA_str_functs[] = {
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSAPARAMS_PRINT, 0), "DSAparams_print"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSAPARAMS_PRINT_FP, 0), "DSAparams_print_fp"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_BUILTIN_PARAMGEN, 0),
+     "dsa_builtin_paramgen"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_BUILTIN_PARAMGEN2, 0),
+     "dsa_builtin_paramgen2"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_DO_SIGN, 0), "DSA_do_sign"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_DO_VERIFY, 0), "DSA_do_verify"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_METH_DUP, 0), "DSA_meth_dup"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_METH_NEW, 0), "DSA_meth_new"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_METH_SET1_NAME, 0), "DSA_meth_set1_name"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_NEW_METHOD, 0), "DSA_new_method"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_PARAM_DECODE, 0), "dsa_param_decode"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_PRINT_FP, 0), "DSA_print_fp"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_PRIV_DECODE, 0), "dsa_priv_decode"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_PRIV_ENCODE, 0), "dsa_priv_encode"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_PUB_DECODE, 0), "dsa_pub_decode"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_PUB_ENCODE, 0), "dsa_pub_encode"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_SIGN, 0), "DSA_sign"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_SIGN_SETUP, 0), "DSA_sign_setup"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_DSA_SIG_NEW, 0), "DSA_SIG_new"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_OLD_DSA_PRIV_DECODE, 0),
+     "old_dsa_priv_decode"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_PKEY_DSA_CTRL, 0), "pkey_dsa_ctrl"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_PKEY_DSA_CTRL_STR, 0), "pkey_dsa_ctrl_str"},
+    {ERR_PACK(ERR_LIB_DSA, DSA_F_PKEY_DSA_KEYGEN, 0), "pkey_dsa_keygen"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA DSA_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_DSA, 0, DSA_R_BAD_Q_VALUE), "bad q value"},
+    {ERR_PACK(ERR_LIB_DSA, 0, DSA_R_BN_DECODE_ERROR), "bn decode error"},
+    {ERR_PACK(ERR_LIB_DSA, 0, DSA_R_BN_ERROR), "bn error"},
+    {ERR_PACK(ERR_LIB_DSA, 0, DSA_R_DECODE_ERROR), "decode error"},
+    {ERR_PACK(ERR_LIB_DSA, 0, DSA_R_INVALID_DIGEST_TYPE),
+    "invalid digest type"},
+    {ERR_PACK(ERR_LIB_DSA, 0, DSA_R_INVALID_PARAMETERS), "invalid parameters"},
+    {ERR_PACK(ERR_LIB_DSA, 0, DSA_R_MISSING_PARAMETERS), "missing parameters"},
+    {ERR_PACK(ERR_LIB_DSA, 0, DSA_R_MODULUS_TOO_LARGE), "modulus too large"},
+    {ERR_PACK(ERR_LIB_DSA, 0, DSA_R_NO_PARAMETERS_SET), "no parameters set"},
+    {ERR_PACK(ERR_LIB_DSA, 0, DSA_R_PARAMETER_ENCODING_ERROR),
+    "parameter encoding error"},
+    {ERR_PACK(ERR_LIB_DSA, 0, DSA_R_Q_NOT_PRIME), "q not prime"},
+    {ERR_PACK(ERR_LIB_DSA, 0, DSA_R_SEED_LEN_SMALL),
+    "seed_len is less than the length of q"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_DSA_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(DSA_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(DSA_str_functs);
+        ERR_load_strings_const(DSA_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_gen.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_gen.c
new file mode 100644
index 000000000..383d853b6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_gen.c
@@ -0,0 +1,616 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Parameter generation follows the updated Appendix 2.2 for FIPS PUB 186,
+ * also Appendix 2.2 of FIPS PUB 186-1 (i.e. use SHA as defined in FIPS PUB
+ * 180-1)
+ */
+#define xxxHASH    EVP_sha1()
+
+#include <openssl/opensslconf.h>
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/bn.h>
+#include <openssl/rand.h>
+#include <openssl/sha.h>
+#include "dsa_locl.h"
+
+int DSA_generate_parameters_ex(DSA *ret, int bits,
+                               const unsigned char *seed_in, int seed_len,
+                               int *counter_ret, unsigned long *h_ret,
+                               BN_GENCB *cb)
+{
+    if (ret->meth->dsa_paramgen)
+        return ret->meth->dsa_paramgen(ret, bits, seed_in, seed_len,
+                                       counter_ret, h_ret, cb);
+    else {
+        const EVP_MD *evpmd = bits >= 2048 ? EVP_sha256() : EVP_sha1();
+        size_t qbits = EVP_MD_size(evpmd) * 8;
+
+        return dsa_builtin_paramgen(ret, bits, qbits, evpmd,
+                                    seed_in, seed_len, NULL, counter_ret,
+                                    h_ret, cb);
+    }
+}
+
+int dsa_builtin_paramgen(DSA *ret, size_t bits, size_t qbits,
+                         const EVP_MD *evpmd, const unsigned char *seed_in,
+                         size_t seed_len, unsigned char *seed_out,
+                         int *counter_ret, unsigned long *h_ret, BN_GENCB *cb)
+{
+    int ok = 0;
+    unsigned char seed[SHA256_DIGEST_LENGTH];
+    unsigned char md[SHA256_DIGEST_LENGTH];
+    unsigned char buf[SHA256_DIGEST_LENGTH], buf2[SHA256_DIGEST_LENGTH];
+    BIGNUM *r0, *W, *X, *c, *test;
+    BIGNUM *g = NULL, *q = NULL, *p = NULL;
+    BN_MONT_CTX *mont = NULL;
+    int i, k, n = 0, m = 0, qsize = qbits >> 3;
+    int counter = 0;
+    int r = 0;
+    BN_CTX *ctx = NULL;
+    unsigned int h = 2;
+
+    if (qsize != SHA_DIGEST_LENGTH && qsize != SHA224_DIGEST_LENGTH &&
+        qsize != SHA256_DIGEST_LENGTH)
+        /* invalid q size */
+        return 0;
+
+    if (evpmd == NULL) {
+        if (qsize == SHA_DIGEST_LENGTH)
+            evpmd = EVP_sha1();
+        else if (qsize == SHA224_DIGEST_LENGTH)
+            evpmd = EVP_sha224();
+        else
+            evpmd = EVP_sha256();
+    } else {
+        qsize = EVP_MD_size(evpmd);
+    }
+
+    if (bits < 512)
+        bits = 512;
+
+    bits = (bits + 63) / 64 * 64;
+
+    if (seed_in != NULL) {
+        if (seed_len < (size_t)qsize) {
+            DSAerr(DSA_F_DSA_BUILTIN_PARAMGEN, DSA_R_SEED_LEN_SMALL);
+            return 0;
+        }
+        if (seed_len > (size_t)qsize) {
+            /* Only consume as much seed as is expected. */
+            seed_len = qsize;
+        }
+        memcpy(seed, seed_in, seed_len);
+    }
+
+    if ((mont = BN_MONT_CTX_new()) == NULL)
+        goto err;
+
+    if ((ctx = BN_CTX_new()) == NULL)
+        goto err;
+
+    BN_CTX_start(ctx);
+
+    r0 = BN_CTX_get(ctx);
+    g = BN_CTX_get(ctx);
+    W = BN_CTX_get(ctx);
+    q = BN_CTX_get(ctx);
+    X = BN_CTX_get(ctx);
+    c = BN_CTX_get(ctx);
+    p = BN_CTX_get(ctx);
+    test = BN_CTX_get(ctx);
+
+    if (test == NULL)
+        goto err;
+
+    if (!BN_lshift(test, BN_value_one(), bits - 1))
+        goto err;
+
+    for (;;) {
+        for (;;) {              /* find q */
+            int use_random_seed = (seed_in == NULL);
+
+            /* step 1 */
+            if (!BN_GENCB_call(cb, 0, m++))
+                goto err;
+
+            if (use_random_seed) {
+                if (RAND_bytes(seed, qsize) <= 0)
+                    goto err;
+            } else {
+                /* If we come back through, use random seed next time. */
+                seed_in = NULL;
+            }
+            memcpy(buf, seed, qsize);
+            memcpy(buf2, seed, qsize);
+            /* precompute "SEED + 1" for step 7: */
+            for (i = qsize - 1; i >= 0; i--) {
+                buf[i]++;
+                if (buf[i] != 0)
+                    break;
+            }
+
+            /* step 2 */
+            if (!EVP_Digest(seed, qsize, md, NULL, evpmd, NULL))
+                goto err;
+            if (!EVP_Digest(buf, qsize, buf2, NULL, evpmd, NULL))
+                goto err;
+            for (i = 0; i < qsize; i++)
+                md[i] ^= buf2[i];
+
+            /* step 3 */
+            md[0] |= 0x80;
+            md[qsize - 1] |= 0x01;
+            if (!BN_bin2bn(md, qsize, q))
+                goto err;
+
+            /* step 4 */
+            r = BN_is_prime_fasttest_ex(q, DSS_prime_checks, ctx,
+                                        use_random_seed, cb);
+            if (r > 0)
+                break;
+            if (r != 0)
+                goto err;
+
+            /* do a callback call */
+            /* step 5 */
+        }
+
+        if (!BN_GENCB_call(cb, 2, 0))
+            goto err;
+        if (!BN_GENCB_call(cb, 3, 0))
+            goto err;
+
+        /* step 6 */
+        counter = 0;
+        /* "offset = 2" */
+
+        n = (bits - 1) / 160;
+
+        for (;;) {
+            if ((counter != 0) && !BN_GENCB_call(cb, 0, counter))
+                goto err;
+
+            /* step 7 */
+            BN_zero(W);
+            /* now 'buf' contains "SEED + offset - 1" */
+            for (k = 0; k <= n; k++) {
+                /*
+                 * obtain "SEED + offset + k" by incrementing:
+                 */
+                for (i = qsize - 1; i >= 0; i--) {
+                    buf[i]++;
+                    if (buf[i] != 0)
+                        break;
+                }
+
+                if (!EVP_Digest(buf, qsize, md, NULL, evpmd, NULL))
+                    goto err;
+
+                /* step 8 */
+                if (!BN_bin2bn(md, qsize, r0))
+                    goto err;
+                if (!BN_lshift(r0, r0, (qsize << 3) * k))
+                    goto err;
+                if (!BN_add(W, W, r0))
+                    goto err;
+            }
+
+            /* more of step 8 */
+            if (!BN_mask_bits(W, bits - 1))
+                goto err;
+            if (!BN_copy(X, W))
+                goto err;
+            if (!BN_add(X, X, test))
+                goto err;
+
+            /* step 9 */
+            if (!BN_lshift1(r0, q))
+                goto err;
+            if (!BN_mod(c, X, r0, ctx))
+                goto err;
+            if (!BN_sub(r0, c, BN_value_one()))
+                goto err;
+            if (!BN_sub(p, X, r0))
+                goto err;
+
+            /* step 10 */
+            if (BN_cmp(p, test) >= 0) {
+                /* step 11 */
+                r = BN_is_prime_fasttest_ex(p, DSS_prime_checks, ctx, 1, cb);
+                if (r > 0)
+                    goto end;   /* found it */
+                if (r != 0)
+                    goto err;
+            }
+
+            /* step 13 */
+            counter++;
+            /* "offset = offset + n + 1" */
+
+            /* step 14 */
+            if (counter >= 4096)
+                break;
+        }
+    }
+ end:
+    if (!BN_GENCB_call(cb, 2, 1))
+        goto err;
+
+    /* We now need to generate g */
+    /* Set r0=(p-1)/q */
+    if (!BN_sub(test, p, BN_value_one()))
+        goto err;
+    if (!BN_div(r0, NULL, test, q, ctx))
+        goto err;
+
+    if (!BN_set_word(test, h))
+        goto err;
+    if (!BN_MONT_CTX_set(mont, p, ctx))
+        goto err;
+
+    for (;;) {
+        /* g=test^r0%p */
+        if (!BN_mod_exp_mont(g, test, r0, p, ctx, mont))
+            goto err;
+        if (!BN_is_one(g))
+            break;
+        if (!BN_add(test, test, BN_value_one()))
+            goto err;
+        h++;
+    }
+
+    if (!BN_GENCB_call(cb, 3, 1))
+        goto err;
+
+    ok = 1;
+ err:
+    if (ok) {
+        BN_free(ret->p);
+        BN_free(ret->q);
+        BN_free(ret->g);
+        ret->p = BN_dup(p);
+        ret->q = BN_dup(q);
+        ret->g = BN_dup(g);
+        if (ret->p == NULL || ret->q == NULL || ret->g == NULL) {
+            ok = 0;
+            goto err;
+        }
+        if (counter_ret != NULL)
+            *counter_ret = counter;
+        if (h_ret != NULL)
+            *h_ret = h;
+        if (seed_out)
+            memcpy(seed_out, seed, qsize);
+    }
+    if (ctx)
+        BN_CTX_end(ctx);
+    BN_CTX_free(ctx);
+    BN_MONT_CTX_free(mont);
+    return ok;
+}
+
+/*
+ * This is a parameter generation algorithm for the DSA2 algorithm as
+ * described in FIPS 186-3.
+ */
+
+int dsa_builtin_paramgen2(DSA *ret, size_t L, size_t N,
+                          const EVP_MD *evpmd, const unsigned char *seed_in,
+                          size_t seed_len, int idx, unsigned char *seed_out,
+                          int *counter_ret, unsigned long *h_ret,
+                          BN_GENCB *cb)
+{
+    int ok = -1;
+    unsigned char *seed = NULL, *seed_tmp = NULL;
+    unsigned char md[EVP_MAX_MD_SIZE];
+    int mdsize;
+    BIGNUM *r0, *W, *X, *c, *test;
+    BIGNUM *g = NULL, *q = NULL, *p = NULL;
+    BN_MONT_CTX *mont = NULL;
+    int i, k, n = 0, m = 0, qsize = N >> 3;
+    int counter = 0;
+    int r = 0;
+    BN_CTX *ctx = NULL;
+    EVP_MD_CTX *mctx = EVP_MD_CTX_new();
+    unsigned int h = 2;
+
+    if (mctx == NULL)
+        goto err;
+
+    /* make sure L > N, otherwise we'll get trapped in an infinite loop */
+    if (L <= N) {
+        DSAerr(DSA_F_DSA_BUILTIN_PARAMGEN2, DSA_R_INVALID_PARAMETERS);
+        goto err;
+    }
+
+    if (evpmd == NULL) {
+        if (N == 160)
+            evpmd = EVP_sha1();
+        else if (N == 224)
+            evpmd = EVP_sha224();
+        else
+            evpmd = EVP_sha256();
+    }
+
+    mdsize = EVP_MD_size(evpmd);
+    /* If unverifiable g generation only don't need seed */
+    if (!ret->p || !ret->q || idx >= 0) {
+        if (seed_len == 0)
+            seed_len = mdsize;
+
+        seed = OPENSSL_malloc(seed_len);
+
+        if (seed_out)
+            seed_tmp = seed_out;
+        else
+            seed_tmp = OPENSSL_malloc(seed_len);
+
+        if (seed == NULL || seed_tmp == NULL)
+            goto err;
+
+        if (seed_in)
+            memcpy(seed, seed_in, seed_len);
+
+    }
+
+    if ((ctx = BN_CTX_new()) == NULL)
+        goto err;
+
+    if ((mont = BN_MONT_CTX_new()) == NULL)
+        goto err;
+
+    BN_CTX_start(ctx);
+    r0 = BN_CTX_get(ctx);
+    g = BN_CTX_get(ctx);
+    W = BN_CTX_get(ctx);
+    X = BN_CTX_get(ctx);
+    c = BN_CTX_get(ctx);
+    test = BN_CTX_get(ctx);
+    if (test == NULL)
+        goto err;
+
+    /* if p, q already supplied generate g only */
+    if (ret->p && ret->q) {
+        p = ret->p;
+        q = ret->q;
+        if (idx >= 0)
+            memcpy(seed_tmp, seed, seed_len);
+        goto g_only;
+    } else {
+        p = BN_CTX_get(ctx);
+        q = BN_CTX_get(ctx);
+        if (q == NULL)
+            goto err;
+    }
+
+    if (!BN_lshift(test, BN_value_one(), L - 1))
+        goto err;
+    for (;;) {
+        for (;;) {              /* find q */
+            unsigned char *pmd;
+            /* step 1 */
+            if (!BN_GENCB_call(cb, 0, m++))
+                goto err;
+
+            if (!seed_in) {
+                if (RAND_bytes(seed, seed_len) <= 0)
+                    goto err;
+            }
+            /* step 2 */
+            if (!EVP_Digest(seed, seed_len, md, NULL, evpmd, NULL))
+                goto err;
+            /* Take least significant bits of md */
+            if (mdsize > qsize)
+                pmd = md + mdsize - qsize;
+            else
+                pmd = md;
+
+            if (mdsize < qsize)
+                memset(md + mdsize, 0, qsize - mdsize);
+
+            /* step 3 */
+            pmd[0] |= 0x80;
+            pmd[qsize - 1] |= 0x01;
+            if (!BN_bin2bn(pmd, qsize, q))
+                goto err;
+
+            /* step 4 */
+            r = BN_is_prime_fasttest_ex(q, DSS_prime_checks, ctx,
+                                        seed_in ? 1 : 0, cb);
+            if (r > 0)
+                break;
+            if (r != 0)
+                goto err;
+            /* Provided seed didn't produce a prime: error */
+            if (seed_in) {
+                ok = 0;
+                DSAerr(DSA_F_DSA_BUILTIN_PARAMGEN2, DSA_R_Q_NOT_PRIME);
+                goto err;
+            }
+
+            /* do a callback call */
+            /* step 5 */
+        }
+        /* Copy seed to seed_out before we mess with it */
+        if (seed_out)
+            memcpy(seed_out, seed, seed_len);
+
+        if (!BN_GENCB_call(cb, 2, 0))
+            goto err;
+        if (!BN_GENCB_call(cb, 3, 0))
+            goto err;
+
+        /* step 6 */
+        counter = 0;
+        /* "offset = 1" */
+
+        n = (L - 1) / (mdsize << 3);
+
+        for (;;) {
+            if ((counter != 0) && !BN_GENCB_call(cb, 0, counter))
+                goto err;
+
+            /* step 7 */
+            BN_zero(W);
+            /* now 'buf' contains "SEED + offset - 1" */
+            for (k = 0; k <= n; k++) {
+                /*
+                 * obtain "SEED + offset + k" by incrementing:
+                 */
+                for (i = seed_len - 1; i >= 0; i--) {
+                    seed[i]++;
+                    if (seed[i] != 0)
+                        break;
+                }
+
+                if (!EVP_Digest(seed, seed_len, md, NULL, evpmd, NULL))
+                    goto err;
+
+                /* step 8 */
+                if (!BN_bin2bn(md, mdsize, r0))
+                    goto err;
+                if (!BN_lshift(r0, r0, (mdsize << 3) * k))
+                    goto err;
+                if (!BN_add(W, W, r0))
+                    goto err;
+            }
+
+            /* more of step 8 */
+            if (!BN_mask_bits(W, L - 1))
+                goto err;
+            if (!BN_copy(X, W))
+                goto err;
+            if (!BN_add(X, X, test))
+                goto err;
+
+            /* step 9 */
+            if (!BN_lshift1(r0, q))
+                goto err;
+            if (!BN_mod(c, X, r0, ctx))
+                goto err;
+            if (!BN_sub(r0, c, BN_value_one()))
+                goto err;
+            if (!BN_sub(p, X, r0))
+                goto err;
+
+            /* step 10 */
+            if (BN_cmp(p, test) >= 0) {
+                /* step 11 */
+                r = BN_is_prime_fasttest_ex(p, DSS_prime_checks, ctx, 1, cb);
+                if (r > 0)
+                    goto end;   /* found it */
+                if (r != 0)
+                    goto err;
+            }
+
+            /* step 13 */
+            counter++;
+            /* "offset = offset + n + 1" */
+
+            /* step 14 */
+            if (counter >= (int)(4 * L))
+                break;
+        }
+        if (seed_in) {
+            ok = 0;
+            DSAerr(DSA_F_DSA_BUILTIN_PARAMGEN2, DSA_R_INVALID_PARAMETERS);
+            goto err;
+        }
+    }
+ end:
+    if (!BN_GENCB_call(cb, 2, 1))
+        goto err;
+
+ g_only:
+
+    /* We now need to generate g */
+    /* Set r0=(p-1)/q */
+    if (!BN_sub(test, p, BN_value_one()))
+        goto err;
+    if (!BN_div(r0, NULL, test, q, ctx))
+        goto err;
+
+    if (idx < 0) {
+        if (!BN_set_word(test, h))
+            goto err;
+    } else
+        h = 1;
+    if (!BN_MONT_CTX_set(mont, p, ctx))
+        goto err;
+
+    for (;;) {
+        static const unsigned char ggen[4] = { 0x67, 0x67, 0x65, 0x6e };
+        if (idx >= 0) {
+            md[0] = idx & 0xff;
+            md[1] = (h >> 8) & 0xff;
+            md[2] = h & 0xff;
+            if (!EVP_DigestInit_ex(mctx, evpmd, NULL))
+                goto err;
+            if (!EVP_DigestUpdate(mctx, seed_tmp, seed_len))
+                goto err;
+            if (!EVP_DigestUpdate(mctx, ggen, sizeof(ggen)))
+                goto err;
+            if (!EVP_DigestUpdate(mctx, md, 3))
+                goto err;
+            if (!EVP_DigestFinal_ex(mctx, md, NULL))
+                goto err;
+            if (!BN_bin2bn(md, mdsize, test))
+                goto err;
+        }
+        /* g=test^r0%p */
+        if (!BN_mod_exp_mont(g, test, r0, p, ctx, mont))
+            goto err;
+        if (!BN_is_one(g))
+            break;
+        if (idx < 0 && !BN_add(test, test, BN_value_one()))
+            goto err;
+        h++;
+        if (idx >= 0 && h > 0xffff)
+            goto err;
+    }
+
+    if (!BN_GENCB_call(cb, 3, 1))
+        goto err;
+
+    ok = 1;
+ err:
+    if (ok == 1) {
+        if (p != ret->p) {
+            BN_free(ret->p);
+            ret->p = BN_dup(p);
+        }
+        if (q != ret->q) {
+            BN_free(ret->q);
+            ret->q = BN_dup(q);
+        }
+        BN_free(ret->g);
+        ret->g = BN_dup(g);
+        if (ret->p == NULL || ret->q == NULL || ret->g == NULL) {
+            ok = -1;
+            goto err;
+        }
+        if (counter_ret != NULL)
+            *counter_ret = counter;
+        if (h_ret != NULL)
+            *h_ret = h;
+    }
+    OPENSSL_free(seed);
+    if (seed_out != seed_tmp)
+        OPENSSL_free(seed_tmp);
+    if (ctx)
+        BN_CTX_end(ctx);
+    BN_CTX_free(ctx);
+    BN_MONT_CTX_free(mont);
+    EVP_MD_CTX_free(mctx);
+    return ok;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_key.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_key.c
new file mode 100644
index 000000000..a48af5849
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_key.c
@@ -0,0 +1,77 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include "dsa_locl.h"
+
+static int dsa_builtin_keygen(DSA *dsa);
+
+int DSA_generate_key(DSA *dsa)
+{
+    if (dsa->meth->dsa_keygen)
+        return dsa->meth->dsa_keygen(dsa);
+    return dsa_builtin_keygen(dsa);
+}
+
+static int dsa_builtin_keygen(DSA *dsa)
+{
+    int ok = 0;
+    BN_CTX *ctx = NULL;
+    BIGNUM *pub_key = NULL, *priv_key = NULL;
+
+    if ((ctx = BN_CTX_new()) == NULL)
+        goto err;
+
+    if (dsa->priv_key == NULL) {
+        if ((priv_key = BN_secure_new()) == NULL)
+            goto err;
+    } else
+        priv_key = dsa->priv_key;
+
+    do
+        if (!BN_priv_rand_range(priv_key, dsa->q))
+            goto err;
+    while (BN_is_zero(priv_key)) ;
+
+    if (dsa->pub_key == NULL) {
+        if ((pub_key = BN_new()) == NULL)
+            goto err;
+    } else
+        pub_key = dsa->pub_key;
+
+    {
+        BIGNUM *prk = BN_new();
+
+        if (prk == NULL)
+            goto err;
+        BN_with_flags(prk, priv_key, BN_FLG_CONSTTIME);
+
+        if (!BN_mod_exp(pub_key, dsa->g, prk, dsa->p, ctx)) {
+            BN_free(prk);
+            goto err;
+        }
+        /* We MUST free prk before any further use of priv_key */
+        BN_free(prk);
+    }
+
+    dsa->priv_key = priv_key;
+    dsa->pub_key = pub_key;
+    ok = 1;
+
+ err:
+    if (pub_key != dsa->pub_key)
+        BN_free(pub_key);
+    if (priv_key != dsa->priv_key)
+        BN_free(priv_key);
+    BN_CTX_free(ctx);
+    return ok;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_lib.c
new file mode 100644
index 000000000..1048601be
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_lib.c
@@ -0,0 +1,358 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "internal/refcount.h"
+#include <openssl/bn.h>
+#include "dsa_locl.h"
+#include <openssl/asn1.h>
+#include <openssl/engine.h>
+#include <openssl/dh.h>
+
+DSA *DSA_new(void)
+{
+    return DSA_new_method(NULL);
+}
+
+int DSA_set_method(DSA *dsa, const DSA_METHOD *meth)
+{
+    /*
+     * NB: The caller is specifically setting a method, so it's not up to us
+     * to deal with which ENGINE it comes from.
+     */
+    const DSA_METHOD *mtmp;
+    mtmp = dsa->meth;
+    if (mtmp->finish)
+        mtmp->finish(dsa);
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_finish(dsa->engine);
+    dsa->engine = NULL;
+#endif
+    dsa->meth = meth;
+    if (meth->init)
+        meth->init(dsa);
+    return 1;
+}
+
+const DSA_METHOD *DSA_get_method(DSA *d)
+{
+    return d->meth;
+}
+
+DSA *DSA_new_method(ENGINE *engine)
+{
+    DSA *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        DSAerr(DSA_F_DSA_NEW_METHOD, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ret->references = 1;
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        DSAerr(DSA_F_DSA_NEW_METHOD, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+
+    ret->meth = DSA_get_default_method();
+#ifndef OPENSSL_NO_ENGINE
+    ret->flags = ret->meth->flags & ~DSA_FLAG_NON_FIPS_ALLOW; /* early default init */
+    if (engine) {
+        if (!ENGINE_init(engine)) {
+            DSAerr(DSA_F_DSA_NEW_METHOD, ERR_R_ENGINE_LIB);
+            goto err;
+        }
+        ret->engine = engine;
+    } else
+        ret->engine = ENGINE_get_default_DSA();
+    if (ret->engine) {
+        ret->meth = ENGINE_get_DSA(ret->engine);
+        if (ret->meth == NULL) {
+            DSAerr(DSA_F_DSA_NEW_METHOD, ERR_R_ENGINE_LIB);
+            goto err;
+        }
+    }
+#endif
+
+    ret->flags = ret->meth->flags & ~DSA_FLAG_NON_FIPS_ALLOW;
+
+    if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_DSA, ret, &ret->ex_data))
+        goto err;
+
+    if ((ret->meth->init != NULL) && !ret->meth->init(ret)) {
+        DSAerr(DSA_F_DSA_NEW_METHOD, ERR_R_INIT_FAIL);
+        goto err;
+    }
+
+    return ret;
+
+ err:
+    DSA_free(ret);
+    return NULL;
+}
+
+void DSA_free(DSA *r)
+{
+    int i;
+
+    if (r == NULL)
+        return;
+
+    CRYPTO_DOWN_REF(&r->references, &i, r->lock);
+    REF_PRINT_COUNT("DSA", r);
+    if (i > 0)
+        return;
+    REF_ASSERT_ISNT(i < 0);
+
+    if (r->meth != NULL && r->meth->finish != NULL)
+        r->meth->finish(r);
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_finish(r->engine);
+#endif
+
+    CRYPTO_free_ex_data(CRYPTO_EX_INDEX_DSA, r, &r->ex_data);
+
+    CRYPTO_THREAD_lock_free(r->lock);
+
+    BN_clear_free(r->p);
+    BN_clear_free(r->q);
+    BN_clear_free(r->g);
+    BN_clear_free(r->pub_key);
+    BN_clear_free(r->priv_key);
+    OPENSSL_free(r);
+}
+
+int DSA_up_ref(DSA *r)
+{
+    int i;
+
+    if (CRYPTO_UP_REF(&r->references, &i, r->lock) <= 0)
+        return 0;
+
+    REF_PRINT_COUNT("DSA", r);
+    REF_ASSERT_ISNT(i < 2);
+    return ((i > 1) ? 1 : 0);
+}
+
+int DSA_size(const DSA *r)
+{
+    int ret, i;
+    ASN1_INTEGER bs;
+    unsigned char buf[4];       /* 4 bytes looks really small. However,
+                                 * i2d_ASN1_INTEGER() will not look beyond
+                                 * the first byte, as long as the second
+                                 * parameter is NULL. */
+
+    i = BN_num_bits(r->q);
+    bs.length = (i + 7) / 8;
+    bs.data = buf;
+    bs.type = V_ASN1_INTEGER;
+    /* If the top bit is set the asn1 encoding is 1 larger. */
+    buf[0] = 0xff;
+
+    i = i2d_ASN1_INTEGER(&bs, NULL);
+    i += i;                     /* r and s */
+    ret = ASN1_object_size(1, i, V_ASN1_SEQUENCE);
+    return ret;
+}
+
+int DSA_set_ex_data(DSA *d, int idx, void *arg)
+{
+    return CRYPTO_set_ex_data(&d->ex_data, idx, arg);
+}
+
+void *DSA_get_ex_data(DSA *d, int idx)
+{
+    return CRYPTO_get_ex_data(&d->ex_data, idx);
+}
+
+int DSA_security_bits(const DSA *d)
+{
+    if (d->p && d->q)
+        return BN_security_bits(BN_num_bits(d->p), BN_num_bits(d->q));
+    return -1;
+}
+
+#ifndef OPENSSL_NO_DH
+DH *DSA_dup_DH(const DSA *r)
+{
+    /*
+     * DSA has p, q, g, optional pub_key, optional priv_key. DH has p,
+     * optional length, g, optional pub_key, optional priv_key, optional q.
+     */
+
+    DH *ret = NULL;
+    BIGNUM *p = NULL, *q = NULL, *g = NULL, *pub_key = NULL, *priv_key = NULL;
+
+    if (r == NULL)
+        goto err;
+    ret = DH_new();
+    if (ret == NULL)
+        goto err;
+    if (r->p != NULL || r->g != NULL || r->q != NULL) {
+        if (r->p == NULL || r->g == NULL || r->q == NULL) {
+            /* Shouldn't happen */
+            goto err;
+        }
+        p = BN_dup(r->p);
+        g = BN_dup(r->g);
+        q = BN_dup(r->q);
+        if (p == NULL || g == NULL || q == NULL || !DH_set0_pqg(ret, p, q, g))
+            goto err;
+        p = g = q = NULL;
+    }
+
+    if (r->pub_key != NULL) {
+        pub_key = BN_dup(r->pub_key);
+        if (pub_key == NULL)
+            goto err;
+        if (r->priv_key != NULL) {
+            priv_key = BN_dup(r->priv_key);
+            if (priv_key == NULL)
+                goto err;
+        }
+        if (!DH_set0_key(ret, pub_key, priv_key))
+            goto err;
+    } else if (r->priv_key != NULL) {
+        /* Shouldn't happen */
+        goto err;
+    }
+
+    return ret;
+
+ err:
+    BN_free(p);
+    BN_free(g);
+    BN_free(q);
+    BN_free(pub_key);
+    BN_free(priv_key);
+    DH_free(ret);
+    return NULL;
+}
+#endif
+
+void DSA_get0_pqg(const DSA *d,
+                  const BIGNUM **p, const BIGNUM **q, const BIGNUM **g)
+{
+    if (p != NULL)
+        *p = d->p;
+    if (q != NULL)
+        *q = d->q;
+    if (g != NULL)
+        *g = d->g;
+}
+
+int DSA_set0_pqg(DSA *d, BIGNUM *p, BIGNUM *q, BIGNUM *g)
+{
+    /* If the fields p, q and g in d are NULL, the corresponding input
+     * parameters MUST be non-NULL.
+     */
+    if ((d->p == NULL && p == NULL)
+        || (d->q == NULL && q == NULL)
+        || (d->g == NULL && g == NULL))
+        return 0;
+
+    if (p != NULL) {
+        BN_free(d->p);
+        d->p = p;
+    }
+    if (q != NULL) {
+        BN_free(d->q);
+        d->q = q;
+    }
+    if (g != NULL) {
+        BN_free(d->g);
+        d->g = g;
+    }
+
+    return 1;
+}
+
+void DSA_get0_key(const DSA *d,
+                  const BIGNUM **pub_key, const BIGNUM **priv_key)
+{
+    if (pub_key != NULL)
+        *pub_key = d->pub_key;
+    if (priv_key != NULL)
+        *priv_key = d->priv_key;
+}
+
+int DSA_set0_key(DSA *d, BIGNUM *pub_key, BIGNUM *priv_key)
+{
+    /* If the field pub_key in d is NULL, the corresponding input
+     * parameters MUST be non-NULL.  The priv_key field may
+     * be left NULL.
+     */
+    if (d->pub_key == NULL && pub_key == NULL)
+        return 0;
+
+    if (pub_key != NULL) {
+        BN_free(d->pub_key);
+        d->pub_key = pub_key;
+    }
+    if (priv_key != NULL) {
+        BN_free(d->priv_key);
+        d->priv_key = priv_key;
+    }
+
+    return 1;
+}
+
+const BIGNUM *DSA_get0_p(const DSA *d)
+{
+    return d->p;
+}
+
+const BIGNUM *DSA_get0_q(const DSA *d)
+{
+    return d->q;
+}
+
+const BIGNUM *DSA_get0_g(const DSA *d)
+{
+    return d->g;
+}
+
+const BIGNUM *DSA_get0_pub_key(const DSA *d)
+{
+    return d->pub_key;
+}
+
+const BIGNUM *DSA_get0_priv_key(const DSA *d)
+{
+    return d->priv_key;
+}
+
+void DSA_clear_flags(DSA *d, int flags)
+{
+    d->flags &= ~flags;
+}
+
+int DSA_test_flags(const DSA *d, int flags)
+{
+    return d->flags & flags;
+}
+
+void DSA_set_flags(DSA *d, int flags)
+{
+    d->flags |= flags;
+}
+
+ENGINE *DSA_get0_engine(DSA *d)
+{
+    return d->engine;
+}
+
+int DSA_bits(const DSA *dsa)
+{
+    return BN_num_bits(dsa->p);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_locl.h
new file mode 100644
index 000000000..a81a4b497
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_locl.h
@@ -0,0 +1,77 @@
+/*
+ * Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/dsa.h>
+#include "internal/refcount.h"
+
+struct dsa_st {
+    /*
+     * This first variable is used to pick up errors where a DSA is passed
+     * instead of of a EVP_PKEY
+     */
+    int pad;
+    int32_t version;
+    BIGNUM *p;
+    BIGNUM *q;                  /* == 20 */
+    BIGNUM *g;
+    BIGNUM *pub_key;            /* y public key */
+    BIGNUM *priv_key;           /* x private key */
+    int flags;
+    /* Normally used to cache montgomery values */
+    BN_MONT_CTX *method_mont_p;
+    CRYPTO_REF_COUNT references;
+    CRYPTO_EX_DATA ex_data;
+    const DSA_METHOD *meth;
+    /* functional reference if 'meth' is ENGINE-provided */
+    ENGINE *engine;
+    CRYPTO_RWLOCK *lock;
+};
+
+struct DSA_SIG_st {
+    BIGNUM *r;
+    BIGNUM *s;
+};
+
+struct dsa_method {
+    char *name;
+    DSA_SIG *(*dsa_do_sign) (const unsigned char *dgst, int dlen, DSA *dsa);
+    int (*dsa_sign_setup) (DSA *dsa, BN_CTX *ctx_in, BIGNUM **kinvp,
+                           BIGNUM **rp);
+    int (*dsa_do_verify) (const unsigned char *dgst, int dgst_len,
+                          DSA_SIG *sig, DSA *dsa);
+    int (*dsa_mod_exp) (DSA *dsa, BIGNUM *rr, const BIGNUM *a1,
+                        const BIGNUM *p1, const BIGNUM *a2, const BIGNUM *p2,
+                        const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *in_mont);
+    /* Can be null */
+    int (*bn_mod_exp) (DSA *dsa, BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
+                       const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *m_ctx);
+    int (*init) (DSA *dsa);
+    int (*finish) (DSA *dsa);
+    int flags;
+    void *app_data;
+    /* If this is non-NULL, it is used to generate DSA parameters */
+    int (*dsa_paramgen) (DSA *dsa, int bits,
+                         const unsigned char *seed, int seed_len,
+                         int *counter_ret, unsigned long *h_ret,
+                         BN_GENCB *cb);
+    /* If this is non-NULL, it is used to generate DSA keys */
+    int (*dsa_keygen) (DSA *dsa);
+};
+
+int dsa_builtin_paramgen(DSA *ret, size_t bits, size_t qbits,
+                         const EVP_MD *evpmd, const unsigned char *seed_in,
+                         size_t seed_len, unsigned char *seed_out,
+                         int *counter_ret, unsigned long *h_ret,
+                         BN_GENCB *cb);
+
+int dsa_builtin_paramgen2(DSA *ret, size_t L, size_t N,
+                          const EVP_MD *evpmd, const unsigned char *seed_in,
+                          size_t seed_len, int idx, unsigned char *seed_out,
+                          int *counter_ret, unsigned long *h_ret,
+                          BN_GENCB *cb);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_meth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_meth.c
new file mode 100644
index 000000000..ff4fae44a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_meth.c
@@ -0,0 +1,224 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+
+#include "dsa_locl.h"
+#include <string.h>
+#include <openssl/err.h>
+
+DSA_METHOD *DSA_meth_new(const char *name, int flags)
+{
+    DSA_METHOD *dsam = OPENSSL_zalloc(sizeof(*dsam));
+
+    if (dsam != NULL) {
+        dsam->flags = flags;
+
+        dsam->name = OPENSSL_strdup(name);
+        if (dsam->name != NULL)
+            return dsam;
+
+        OPENSSL_free(dsam);
+    }
+
+    DSAerr(DSA_F_DSA_METH_NEW, ERR_R_MALLOC_FAILURE);
+    return NULL;
+}
+
+void DSA_meth_free(DSA_METHOD *dsam)
+{
+    if (dsam != NULL) {
+        OPENSSL_free(dsam->name);
+        OPENSSL_free(dsam);
+    }
+}
+
+DSA_METHOD *DSA_meth_dup(const DSA_METHOD *dsam)
+{
+    DSA_METHOD *ret = OPENSSL_malloc(sizeof(*ret));
+
+    if (ret != NULL) {
+        memcpy(ret, dsam, sizeof(*dsam));
+
+        ret->name = OPENSSL_strdup(dsam->name);
+        if (ret->name != NULL)
+            return ret;
+
+        OPENSSL_free(ret);
+    }
+
+    DSAerr(DSA_F_DSA_METH_DUP, ERR_R_MALLOC_FAILURE);
+    return NULL;
+}
+
+const char *DSA_meth_get0_name(const DSA_METHOD *dsam)
+{
+    return dsam->name;
+}
+
+int DSA_meth_set1_name(DSA_METHOD *dsam, const char *name)
+{
+    char *tmpname = OPENSSL_strdup(name);
+
+    if (tmpname == NULL) {
+        DSAerr(DSA_F_DSA_METH_SET1_NAME, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    OPENSSL_free(dsam->name);
+    dsam->name = tmpname;
+
+    return 1;
+}
+
+int DSA_meth_get_flags(const DSA_METHOD *dsam)
+{
+    return dsam->flags;
+}
+
+int DSA_meth_set_flags(DSA_METHOD *dsam, int flags)
+{
+    dsam->flags = flags;
+    return 1;
+}
+
+void *DSA_meth_get0_app_data(const DSA_METHOD *dsam)
+{
+    return dsam->app_data;
+}
+
+int DSA_meth_set0_app_data(DSA_METHOD *dsam, void *app_data)
+{
+    dsam->app_data = app_data;
+    return 1;
+}
+
+DSA_SIG *(*DSA_meth_get_sign(const DSA_METHOD *dsam))
+        (const unsigned char *, int, DSA *)
+{
+    return dsam->dsa_do_sign;
+}
+
+int DSA_meth_set_sign(DSA_METHOD *dsam,
+                       DSA_SIG *(*sign) (const unsigned char *, int, DSA *))
+{
+    dsam->dsa_do_sign = sign;
+    return 1;
+}
+
+int (*DSA_meth_get_sign_setup(const DSA_METHOD *dsam))
+        (DSA *, BN_CTX *, BIGNUM **, BIGNUM **)
+{
+    return dsam->dsa_sign_setup;
+}
+
+int DSA_meth_set_sign_setup(DSA_METHOD *dsam,
+        int (*sign_setup) (DSA *, BN_CTX *, BIGNUM **, BIGNUM **))
+{
+    dsam->dsa_sign_setup = sign_setup;
+    return 1;
+}
+
+int (*DSA_meth_get_verify(const DSA_METHOD *dsam))
+        (const unsigned char *, int, DSA_SIG *, DSA *)
+{
+    return dsam->dsa_do_verify;
+}
+
+int DSA_meth_set_verify(DSA_METHOD *dsam,
+    int (*verify) (const unsigned char *, int, DSA_SIG *, DSA *))
+{
+    dsam->dsa_do_verify = verify;
+    return 1;
+}
+
+int (*DSA_meth_get_mod_exp(const DSA_METHOD *dsam))
+        (DSA *, BIGNUM *, const BIGNUM *, const BIGNUM *, const BIGNUM *,
+         const BIGNUM *, const BIGNUM *, BN_CTX *, BN_MONT_CTX *)
+{
+    return dsam->dsa_mod_exp;
+}
+
+int DSA_meth_set_mod_exp(DSA_METHOD *dsam,
+    int (*mod_exp) (DSA *, BIGNUM *, const BIGNUM *, const BIGNUM *,
+                    const BIGNUM *, const BIGNUM *, const BIGNUM *, BN_CTX *,
+                    BN_MONT_CTX *))
+{
+    dsam->dsa_mod_exp = mod_exp;
+    return 1;
+}
+
+int (*DSA_meth_get_bn_mod_exp(const DSA_METHOD *dsam))
+    (DSA *, BIGNUM *, const BIGNUM *, const BIGNUM *, const BIGNUM *, BN_CTX *,
+     BN_MONT_CTX *)
+{
+    return dsam->bn_mod_exp;
+}
+
+int DSA_meth_set_bn_mod_exp(DSA_METHOD *dsam,
+    int (*bn_mod_exp) (DSA *, BIGNUM *, const BIGNUM *, const BIGNUM *,
+                       const BIGNUM *, BN_CTX *, BN_MONT_CTX *))
+{
+    dsam->bn_mod_exp = bn_mod_exp;
+    return 1;
+}
+
+int (*DSA_meth_get_init(const DSA_METHOD *dsam))(DSA *)
+{
+    return dsam->init;
+}
+
+int DSA_meth_set_init(DSA_METHOD *dsam, int (*init)(DSA *))
+{
+    dsam->init = init;
+    return 1;
+}
+
+int (*DSA_meth_get_finish(const DSA_METHOD *dsam)) (DSA *)
+{
+    return dsam->finish;
+}
+
+int DSA_meth_set_finish(DSA_METHOD *dsam, int (*finish) (DSA *))
+{
+    dsam->finish = finish;
+    return 1;
+}
+
+int (*DSA_meth_get_paramgen(const DSA_METHOD *dsam))
+        (DSA *, int, const unsigned char *, int, int *, unsigned long *,
+         BN_GENCB *)
+{
+    return dsam->dsa_paramgen;
+}
+
+int DSA_meth_set_paramgen(DSA_METHOD *dsam,
+        int (*paramgen) (DSA *, int, const unsigned char *, int, int *,
+                         unsigned long *, BN_GENCB *))
+{
+    dsam->dsa_paramgen = paramgen;
+    return 1;
+}
+
+int (*DSA_meth_get_keygen(const DSA_METHOD *dsam)) (DSA *)
+{
+    return dsam->dsa_keygen;
+}
+
+int DSA_meth_set_keygen(DSA_METHOD *dsam, int (*keygen) (DSA *))
+{
+    dsam->dsa_keygen = keygen;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_ossl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_ossl.c
new file mode 100644
index 000000000..7a0b0874c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_ossl.c
@@ -0,0 +1,428 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "internal/bn_int.h"
+#include <openssl/bn.h>
+#include <openssl/sha.h>
+#include "dsa_locl.h"
+#include <openssl/asn1.h>
+
+static DSA_SIG *dsa_do_sign(const unsigned char *dgst, int dlen, DSA *dsa);
+static int dsa_sign_setup_no_digest(DSA *dsa, BN_CTX *ctx_in, BIGNUM **kinvp,
+                                    BIGNUM **rp);
+static int dsa_sign_setup(DSA *dsa, BN_CTX *ctx_in, BIGNUM **kinvp,
+                          BIGNUM **rp, const unsigned char *dgst, int dlen);
+static int dsa_do_verify(const unsigned char *dgst, int dgst_len,
+                         DSA_SIG *sig, DSA *dsa);
+static int dsa_init(DSA *dsa);
+static int dsa_finish(DSA *dsa);
+static BIGNUM *dsa_mod_inverse_fermat(const BIGNUM *k, const BIGNUM *q,
+                                      BN_CTX *ctx);
+
+static DSA_METHOD openssl_dsa_meth = {
+    "OpenSSL DSA method",
+    dsa_do_sign,
+    dsa_sign_setup_no_digest,
+    dsa_do_verify,
+    NULL,                       /* dsa_mod_exp, */
+    NULL,                       /* dsa_bn_mod_exp, */
+    dsa_init,
+    dsa_finish,
+    DSA_FLAG_FIPS_METHOD,
+    NULL,
+    NULL,
+    NULL
+};
+
+static const DSA_METHOD *default_DSA_method = &openssl_dsa_meth;
+
+void DSA_set_default_method(const DSA_METHOD *meth)
+{
+    default_DSA_method = meth;
+}
+
+const DSA_METHOD *DSA_get_default_method(void)
+{
+    return default_DSA_method;
+}
+
+const DSA_METHOD *DSA_OpenSSL(void)
+{
+    return &openssl_dsa_meth;
+}
+
+static DSA_SIG *dsa_do_sign(const unsigned char *dgst, int dlen, DSA *dsa)
+{
+    BIGNUM *kinv = NULL;
+    BIGNUM *m, *blind, *blindm, *tmp;
+    BN_CTX *ctx = NULL;
+    int reason = ERR_R_BN_LIB;
+    DSA_SIG *ret = NULL;
+    int rv = 0;
+
+    if (dsa->p == NULL || dsa->q == NULL || dsa->g == NULL) {
+        reason = DSA_R_MISSING_PARAMETERS;
+        goto err;
+    }
+
+    ret = DSA_SIG_new();
+    if (ret == NULL)
+        goto err;
+    ret->r = BN_new();
+    ret->s = BN_new();
+    if (ret->r == NULL || ret->s == NULL)
+        goto err;
+
+    ctx = BN_CTX_new();
+    if (ctx == NULL)
+        goto err;
+    m = BN_CTX_get(ctx);
+    blind = BN_CTX_get(ctx);
+    blindm = BN_CTX_get(ctx);
+    tmp = BN_CTX_get(ctx);
+    if (tmp == NULL)
+        goto err;
+
+ redo:
+    if (!dsa_sign_setup(dsa, ctx, &kinv, &ret->r, dgst, dlen))
+        goto err;
+
+    if (dlen > BN_num_bytes(dsa->q))
+        /*
+         * if the digest length is greater than the size of q use the
+         * BN_num_bits(dsa->q) leftmost bits of the digest, see fips 186-3,
+         * 4.2
+         */
+        dlen = BN_num_bytes(dsa->q);
+    if (BN_bin2bn(dgst, dlen, m) == NULL)
+        goto err;
+
+    /*
+     * The normal signature calculation is:
+     *
+     *   s := k^-1 * (m + r * priv_key) mod q
+     *
+     * We will blind this to protect against side channel attacks
+     *
+     *   s := blind^-1 * k^-1 * (blind * m + blind * r * priv_key) mod q
+     */
+
+    /* Generate a blinding value */
+    do {
+        if (!BN_priv_rand(blind, BN_num_bits(dsa->q) - 1,
+                          BN_RAND_TOP_ANY, BN_RAND_BOTTOM_ANY))
+            goto err;
+    } while (BN_is_zero(blind));
+    BN_set_flags(blind, BN_FLG_CONSTTIME);
+    BN_set_flags(blindm, BN_FLG_CONSTTIME);
+    BN_set_flags(tmp, BN_FLG_CONSTTIME);
+
+    /* tmp := blind * priv_key * r mod q */
+    if (!BN_mod_mul(tmp, blind, dsa->priv_key, dsa->q, ctx))
+        goto err;
+    if (!BN_mod_mul(tmp, tmp, ret->r, dsa->q, ctx))
+        goto err;
+
+    /* blindm := blind * m mod q */
+    if (!BN_mod_mul(blindm, blind, m, dsa->q, ctx))
+        goto err;
+
+    /* s : = (blind * priv_key * r) + (blind * m) mod q */
+    if (!BN_mod_add_quick(ret->s, tmp, blindm, dsa->q))
+        goto err;
+
+    /* s := s * k^-1 mod q */
+    if (!BN_mod_mul(ret->s, ret->s, kinv, dsa->q, ctx))
+        goto err;
+
+    /* s:= s * blind^-1 mod q */
+    if (BN_mod_inverse(blind, blind, dsa->q, ctx) == NULL)
+        goto err;
+    if (!BN_mod_mul(ret->s, ret->s, blind, dsa->q, ctx))
+        goto err;
+
+    /*
+     * Redo if r or s is zero as required by FIPS 186-3: this is very
+     * unlikely.
+     */
+    if (BN_is_zero(ret->r) || BN_is_zero(ret->s))
+        goto redo;
+
+    rv = 1;
+
+ err:
+    if (rv == 0) {
+        DSAerr(DSA_F_DSA_DO_SIGN, reason);
+        DSA_SIG_free(ret);
+        ret = NULL;
+    }
+    BN_CTX_free(ctx);
+    BN_clear_free(kinv);
+    return ret;
+}
+
+static int dsa_sign_setup_no_digest(DSA *dsa, BN_CTX *ctx_in,
+                                    BIGNUM **kinvp, BIGNUM **rp)
+{
+    return dsa_sign_setup(dsa, ctx_in, kinvp, rp, NULL, 0);
+}
+
+static int dsa_sign_setup(DSA *dsa, BN_CTX *ctx_in,
+                          BIGNUM **kinvp, BIGNUM **rp,
+                          const unsigned char *dgst, int dlen)
+{
+    BN_CTX *ctx = NULL;
+    BIGNUM *k, *kinv = NULL, *r = *rp;
+    BIGNUM *l;
+    int ret = 0;
+    int q_bits, q_words;
+
+    if (!dsa->p || !dsa->q || !dsa->g) {
+        DSAerr(DSA_F_DSA_SIGN_SETUP, DSA_R_MISSING_PARAMETERS);
+        return 0;
+    }
+
+    k = BN_new();
+    l = BN_new();
+    if (k == NULL || l == NULL)
+        goto err;
+
+    if (ctx_in == NULL) {
+        if ((ctx = BN_CTX_new()) == NULL)
+            goto err;
+    } else
+        ctx = ctx_in;
+
+    /* Preallocate space */
+    q_bits = BN_num_bits(dsa->q);
+    q_words = bn_get_top(dsa->q);
+    if (!bn_wexpand(k, q_words + 2)
+        || !bn_wexpand(l, q_words + 2))
+        goto err;
+
+    /* Get random k */
+    do {
+        if (dgst != NULL) {
+            /*
+             * We calculate k from SHA512(private_key + H(message) + random).
+             * This protects the private key from a weak PRNG.
+             */
+            if (!BN_generate_dsa_nonce(k, dsa->q, dsa->priv_key, dgst,
+                                       dlen, ctx))
+                goto err;
+        } else if (!BN_priv_rand_range(k, dsa->q))
+            goto err;
+    } while (BN_is_zero(k));
+
+    BN_set_flags(k, BN_FLG_CONSTTIME);
+    BN_set_flags(l, BN_FLG_CONSTTIME);
+
+    if (dsa->flags & DSA_FLAG_CACHE_MONT_P) {
+        if (!BN_MONT_CTX_set_locked(&dsa->method_mont_p,
+                                    dsa->lock, dsa->p, ctx))
+            goto err;
+    }
+
+    /* Compute r = (g^k mod p) mod q */
+
+    /*
+     * We do not want timing information to leak the length of k, so we
+     * compute G^k using an equivalent scalar of fixed bit-length.
+     *
+     * We unconditionally perform both of these additions to prevent a
+     * small timing information leakage.  We then choose the sum that is
+     * one bit longer than the modulus.
+     *
+     * There are some concerns about the efficacy of doing this.  More
+     * specificly refer to the discussion starting with:
+     *     https://github.com/openssl/openssl/pull/7486#discussion_r228323705
+     * The fix is to rework BN so these gymnastics aren't required.
+     */
+    if (!BN_add(l, k, dsa->q)
+        || !BN_add(k, l, dsa->q))
+        goto err;
+
+    BN_consttime_swap(BN_is_bit_set(l, q_bits), k, l, q_words + 2);
+
+    if ((dsa)->meth->bn_mod_exp != NULL) {
+            if (!dsa->meth->bn_mod_exp(dsa, r, dsa->g, k, dsa->p, ctx,
+                                       dsa->method_mont_p))
+                goto err;
+    } else {
+            if (!BN_mod_exp_mont(r, dsa->g, k, dsa->p, ctx, dsa->method_mont_p))
+                goto err;
+    }
+
+    if (!BN_mod(r, r, dsa->q, ctx))
+        goto err;
+
+    /* Compute part of 's = inv(k) (m + xr) mod q' */
+    if ((kinv = dsa_mod_inverse_fermat(k, dsa->q, ctx)) == NULL)
+        goto err;
+
+    BN_clear_free(*kinvp);
+    *kinvp = kinv;
+    kinv = NULL;
+    ret = 1;
+ err:
+    if (!ret)
+        DSAerr(DSA_F_DSA_SIGN_SETUP, ERR_R_BN_LIB);
+    if (ctx != ctx_in)
+        BN_CTX_free(ctx);
+    BN_clear_free(k);
+    BN_clear_free(l);
+    return ret;
+}
+
+static int dsa_do_verify(const unsigned char *dgst, int dgst_len,
+                         DSA_SIG *sig, DSA *dsa)
+{
+    BN_CTX *ctx;
+    BIGNUM *u1, *u2, *t1;
+    BN_MONT_CTX *mont = NULL;
+    const BIGNUM *r, *s;
+    int ret = -1, i;
+    if (!dsa->p || !dsa->q || !dsa->g) {
+        DSAerr(DSA_F_DSA_DO_VERIFY, DSA_R_MISSING_PARAMETERS);
+        return -1;
+    }
+
+    i = BN_num_bits(dsa->q);
+    /* fips 186-3 allows only different sizes for q */
+    if (i != 160 && i != 224 && i != 256) {
+        DSAerr(DSA_F_DSA_DO_VERIFY, DSA_R_BAD_Q_VALUE);
+        return -1;
+    }
+
+    if (BN_num_bits(dsa->p) > OPENSSL_DSA_MAX_MODULUS_BITS) {
+        DSAerr(DSA_F_DSA_DO_VERIFY, DSA_R_MODULUS_TOO_LARGE);
+        return -1;
+    }
+    u1 = BN_new();
+    u2 = BN_new();
+    t1 = BN_new();
+    ctx = BN_CTX_new();
+    if (u1 == NULL || u2 == NULL || t1 == NULL || ctx == NULL)
+        goto err;
+
+    DSA_SIG_get0(sig, &r, &s);
+
+    if (BN_is_zero(r) || BN_is_negative(r) ||
+        BN_ucmp(r, dsa->q) >= 0) {
+        ret = 0;
+        goto err;
+    }
+    if (BN_is_zero(s) || BN_is_negative(s) ||
+        BN_ucmp(s, dsa->q) >= 0) {
+        ret = 0;
+        goto err;
+    }
+
+    /*
+     * Calculate W = inv(S) mod Q save W in u2
+     */
+    if ((BN_mod_inverse(u2, s, dsa->q, ctx)) == NULL)
+        goto err;
+
+    /* save M in u1 */
+    if (dgst_len > (i >> 3))
+        /*
+         * if the digest length is greater than the size of q use the
+         * BN_num_bits(dsa->q) leftmost bits of the digest, see fips 186-3,
+         * 4.2
+         */
+        dgst_len = (i >> 3);
+    if (BN_bin2bn(dgst, dgst_len, u1) == NULL)
+        goto err;
+
+    /* u1 = M * w mod q */
+    if (!BN_mod_mul(u1, u1, u2, dsa->q, ctx))
+        goto err;
+
+    /* u2 = r * w mod q */
+    if (!BN_mod_mul(u2, r, u2, dsa->q, ctx))
+        goto err;
+
+    if (dsa->flags & DSA_FLAG_CACHE_MONT_P) {
+        mont = BN_MONT_CTX_set_locked(&dsa->method_mont_p,
+                                      dsa->lock, dsa->p, ctx);
+        if (!mont)
+            goto err;
+    }
+
+    if (dsa->meth->dsa_mod_exp != NULL) {
+        if (!dsa->meth->dsa_mod_exp(dsa, t1, dsa->g, u1, dsa->pub_key, u2,
+                                    dsa->p, ctx, mont))
+            goto err;
+    } else {
+        if (!BN_mod_exp2_mont(t1, dsa->g, u1, dsa->pub_key, u2, dsa->p, ctx,
+                              mont))
+            goto err;
+    }
+
+    /* let u1 = u1 mod q */
+    if (!BN_mod(u1, t1, dsa->q, ctx))
+        goto err;
+
+    /*
+     * V is now in u1.  If the signature is correct, it will be equal to R.
+     */
+    ret = (BN_ucmp(u1, r) == 0);
+
+ err:
+    if (ret < 0)
+        DSAerr(DSA_F_DSA_DO_VERIFY, ERR_R_BN_LIB);
+    BN_CTX_free(ctx);
+    BN_free(u1);
+    BN_free(u2);
+    BN_free(t1);
+    return ret;
+}
+
+static int dsa_init(DSA *dsa)
+{
+    dsa->flags |= DSA_FLAG_CACHE_MONT_P;
+    return 1;
+}
+
+static int dsa_finish(DSA *dsa)
+{
+    BN_MONT_CTX_free(dsa->method_mont_p);
+    return 1;
+}
+
+/*
+ * Compute the inverse of k modulo q.
+ * Since q is prime, Fermat's Little Theorem applies, which reduces this to
+ * mod-exp operation.  Both the exponent and modulus are public information
+ * so a mod-exp that doesn't leak the base is sufficient.  A newly allocated
+ * BIGNUM is returned which the caller must free.
+ */
+static BIGNUM *dsa_mod_inverse_fermat(const BIGNUM *k, const BIGNUM *q,
+                                      BN_CTX *ctx)
+{
+    BIGNUM *res = NULL;
+    BIGNUM *r, *e;
+
+    if ((r = BN_new()) == NULL)
+        return NULL;
+
+    BN_CTX_start(ctx);
+    if ((e = BN_CTX_get(ctx)) != NULL
+            && BN_set_word(r, 2)
+            && BN_sub(e, q, r)
+            && BN_mod_exp_mont(r, k, e, q, ctx, NULL))
+        res = r;
+    else
+        BN_free(r);
+    BN_CTX_end(ctx);
+    return res;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_pmeth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_pmeth.c
new file mode 100644
index 000000000..b4ee5a757
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_pmeth.c
@@ -0,0 +1,273 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include <openssl/evp.h>
+#include <openssl/bn.h>
+#include "internal/evp_int.h"
+#include "dsa_locl.h"
+
+/* DSA pkey context structure */
+
+typedef struct {
+    /* Parameter gen parameters */
+    int nbits;                  /* size of p in bits (default: 1024) */
+    int qbits;                  /* size of q in bits (default: 160) */
+    const EVP_MD *pmd;          /* MD for parameter generation */
+    /* Keygen callback info */
+    int gentmp[2];
+    /* message digest */
+    const EVP_MD *md;           /* MD for the signature */
+} DSA_PKEY_CTX;
+
+static int pkey_dsa_init(EVP_PKEY_CTX *ctx)
+{
+    DSA_PKEY_CTX *dctx = OPENSSL_malloc(sizeof(*dctx));
+
+    if (dctx == NULL)
+        return 0;
+    dctx->nbits = 1024;
+    dctx->qbits = 160;
+    dctx->pmd = NULL;
+    dctx->md = NULL;
+
+    ctx->data = dctx;
+    ctx->keygen_info = dctx->gentmp;
+    ctx->keygen_info_count = 2;
+
+    return 1;
+}
+
+static int pkey_dsa_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src)
+{
+    DSA_PKEY_CTX *dctx, *sctx;
+
+    if (!pkey_dsa_init(dst))
+        return 0;
+    sctx = src->data;
+    dctx = dst->data;
+    dctx->nbits = sctx->nbits;
+    dctx->qbits = sctx->qbits;
+    dctx->pmd = sctx->pmd;
+    dctx->md = sctx->md;
+    return 1;
+}
+
+static void pkey_dsa_cleanup(EVP_PKEY_CTX *ctx)
+{
+    DSA_PKEY_CTX *dctx = ctx->data;
+    OPENSSL_free(dctx);
+}
+
+static int pkey_dsa_sign(EVP_PKEY_CTX *ctx, unsigned char *sig,
+                         size_t *siglen, const unsigned char *tbs,
+                         size_t tbslen)
+{
+    int ret;
+    unsigned int sltmp;
+    DSA_PKEY_CTX *dctx = ctx->data;
+    DSA *dsa = ctx->pkey->pkey.dsa;
+
+    if (dctx->md != NULL && tbslen != (size_t)EVP_MD_size(dctx->md))
+        return 0;
+
+    ret = DSA_sign(0, tbs, tbslen, sig, &sltmp, dsa);
+
+    if (ret <= 0)
+        return ret;
+    *siglen = sltmp;
+    return 1;
+}
+
+static int pkey_dsa_verify(EVP_PKEY_CTX *ctx,
+                           const unsigned char *sig, size_t siglen,
+                           const unsigned char *tbs, size_t tbslen)
+{
+    int ret;
+    DSA_PKEY_CTX *dctx = ctx->data;
+    DSA *dsa = ctx->pkey->pkey.dsa;
+
+    if (dctx->md != NULL && tbslen != (size_t)EVP_MD_size(dctx->md))
+        return 0;
+
+    ret = DSA_verify(0, tbs, tbslen, sig, siglen, dsa);
+
+    return ret;
+}
+
+static int pkey_dsa_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
+{
+    DSA_PKEY_CTX *dctx = ctx->data;
+
+    switch (type) {
+    case EVP_PKEY_CTRL_DSA_PARAMGEN_BITS:
+        if (p1 < 256)
+            return -2;
+        dctx->nbits = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS:
+        if (p1 != 160 && p1 != 224 && p1 && p1 != 256)
+            return -2;
+        dctx->qbits = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_DSA_PARAMGEN_MD:
+        if (EVP_MD_type((const EVP_MD *)p2) != NID_sha1 &&
+            EVP_MD_type((const EVP_MD *)p2) != NID_sha224 &&
+            EVP_MD_type((const EVP_MD *)p2) != NID_sha256) {
+            DSAerr(DSA_F_PKEY_DSA_CTRL, DSA_R_INVALID_DIGEST_TYPE);
+            return 0;
+        }
+        dctx->pmd = p2;
+        return 1;
+
+    case EVP_PKEY_CTRL_MD:
+        if (EVP_MD_type((const EVP_MD *)p2) != NID_sha1 &&
+            EVP_MD_type((const EVP_MD *)p2) != NID_dsa &&
+            EVP_MD_type((const EVP_MD *)p2) != NID_dsaWithSHA &&
+            EVP_MD_type((const EVP_MD *)p2) != NID_sha224 &&
+            EVP_MD_type((const EVP_MD *)p2) != NID_sha256 &&
+            EVP_MD_type((const EVP_MD *)p2) != NID_sha384 &&
+            EVP_MD_type((const EVP_MD *)p2) != NID_sha512) {
+            DSAerr(DSA_F_PKEY_DSA_CTRL, DSA_R_INVALID_DIGEST_TYPE);
+            return 0;
+        }
+        dctx->md = p2;
+        return 1;
+
+    case EVP_PKEY_CTRL_GET_MD:
+        *(const EVP_MD **)p2 = dctx->md;
+        return 1;
+
+    case EVP_PKEY_CTRL_DIGESTINIT:
+    case EVP_PKEY_CTRL_PKCS7_SIGN:
+    case EVP_PKEY_CTRL_CMS_SIGN:
+        return 1;
+
+    case EVP_PKEY_CTRL_PEER_KEY:
+        DSAerr(DSA_F_PKEY_DSA_CTRL,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    default:
+        return -2;
+
+    }
+}
+
+static int pkey_dsa_ctrl_str(EVP_PKEY_CTX *ctx,
+                             const char *type, const char *value)
+{
+    if (strcmp(type, "dsa_paramgen_bits") == 0) {
+        int nbits;
+        nbits = atoi(value);
+        return EVP_PKEY_CTX_set_dsa_paramgen_bits(ctx, nbits);
+    }
+    if (strcmp(type, "dsa_paramgen_q_bits") == 0) {
+        int qbits = atoi(value);
+        return EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DSA, EVP_PKEY_OP_PARAMGEN,
+                                 EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS, qbits,
+                                 NULL);
+    }
+    if (strcmp(type, "dsa_paramgen_md") == 0) {
+        const EVP_MD *md = EVP_get_digestbyname(value);
+
+        if (md == NULL) {
+            DSAerr(DSA_F_PKEY_DSA_CTRL_STR, DSA_R_INVALID_DIGEST_TYPE);
+            return 0;
+        }
+        return EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DSA, EVP_PKEY_OP_PARAMGEN,
+                                 EVP_PKEY_CTRL_DSA_PARAMGEN_MD, 0,
+                                 (void *)md);
+    }
+    return -2;
+}
+
+static int pkey_dsa_paramgen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
+{
+    DSA *dsa = NULL;
+    DSA_PKEY_CTX *dctx = ctx->data;
+    BN_GENCB *pcb;
+    int ret;
+
+    if (ctx->pkey_gencb) {
+        pcb = BN_GENCB_new();
+        if (pcb == NULL)
+            return 0;
+        evp_pkey_set_cb_translate(pcb, ctx);
+    } else
+        pcb = NULL;
+    dsa = DSA_new();
+    if (dsa == NULL) {
+        BN_GENCB_free(pcb);
+        return 0;
+    }
+    ret = dsa_builtin_paramgen(dsa, dctx->nbits, dctx->qbits, dctx->pmd,
+                               NULL, 0, NULL, NULL, NULL, pcb);
+    BN_GENCB_free(pcb);
+    if (ret)
+        EVP_PKEY_assign_DSA(pkey, dsa);
+    else
+        DSA_free(dsa);
+    return ret;
+}
+
+static int pkey_dsa_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
+{
+    DSA *dsa = NULL;
+
+    if (ctx->pkey == NULL) {
+        DSAerr(DSA_F_PKEY_DSA_KEYGEN, DSA_R_NO_PARAMETERS_SET);
+        return 0;
+    }
+    dsa = DSA_new();
+    if (dsa == NULL)
+        return 0;
+    EVP_PKEY_assign_DSA(pkey, dsa);
+    /* Note: if error return, pkey is freed by parent routine */
+    if (!EVP_PKEY_copy_parameters(pkey, ctx->pkey))
+        return 0;
+    return DSA_generate_key(pkey->pkey.dsa);
+}
+
+const EVP_PKEY_METHOD dsa_pkey_meth = {
+    EVP_PKEY_DSA,
+    EVP_PKEY_FLAG_AUTOARGLEN,
+    pkey_dsa_init,
+    pkey_dsa_copy,
+    pkey_dsa_cleanup,
+
+    0,
+    pkey_dsa_paramgen,
+
+    0,
+    pkey_dsa_keygen,
+
+    0,
+    pkey_dsa_sign,
+
+    0,
+    pkey_dsa_verify,
+
+    0, 0,
+
+    0, 0, 0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    pkey_dsa_ctrl,
+    pkey_dsa_ctrl_str
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_prn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_prn.c
new file mode 100644
index 000000000..a4a1fd565
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_prn.c
@@ -0,0 +1,69 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/dsa.h>
+
+#ifndef OPENSSL_NO_STDIO
+int DSA_print_fp(FILE *fp, const DSA *x, int off)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        DSAerr(DSA_F_DSA_PRINT_FP, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = DSA_print(b, x, off);
+    BIO_free(b);
+    return ret;
+}
+
+int DSAparams_print_fp(FILE *fp, const DSA *x)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        DSAerr(DSA_F_DSAPARAMS_PRINT_FP, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = DSAparams_print(b, x);
+    BIO_free(b);
+    return ret;
+}
+#endif
+
+int DSA_print(BIO *bp, const DSA *x, int off)
+{
+    EVP_PKEY *pk;
+    int ret;
+    pk = EVP_PKEY_new();
+    if (pk == NULL || !EVP_PKEY_set1_DSA(pk, (DSA *)x))
+        return 0;
+    ret = EVP_PKEY_print_private(bp, pk, off, NULL);
+    EVP_PKEY_free(pk);
+    return ret;
+}
+
+int DSAparams_print(BIO *bp, const DSA *x)
+{
+    EVP_PKEY *pk;
+    int ret;
+    pk = EVP_PKEY_new();
+    if (pk == NULL || !EVP_PKEY_set1_DSA(pk, (DSA *)x))
+        return 0;
+    ret = EVP_PKEY_print_params(bp, pk, 4, NULL);
+    EVP_PKEY_free(pk);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_sign.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_sign.c
new file mode 100644
index 000000000..e9466b29f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_sign.c
@@ -0,0 +1,24 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "dsa_locl.h"
+#include <openssl/bn.h>
+
+DSA_SIG *DSA_do_sign(const unsigned char *dgst, int dlen, DSA *dsa)
+{
+    return dsa->meth->dsa_do_sign(dgst, dlen, dsa);
+}
+
+#if OPENSSL_API_COMPAT < 0x10200000L
+int DSA_sign_setup(DSA *dsa, BN_CTX *ctx_in, BIGNUM **kinvp, BIGNUM **rp)
+{
+    return dsa->meth->dsa_sign_setup(dsa, ctx_in, kinvp, rp);
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_vrf.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_vrf.c
new file mode 100644
index 000000000..21f98cd94
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dsa/dsa_vrf.c
@@ -0,0 +1,17 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "dsa_locl.h"
+
+int DSA_do_verify(const unsigned char *dgst, int dgst_len, DSA_SIG *sig,
+                  DSA *dsa)
+{
+    return dsa->meth->dsa_do_verify(dgst, dgst_len, sig, dsa);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dso/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/build.info
new file mode 100644
index 000000000..82b592d9a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/build.info
@@ -0,0 +1,4 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        dso_dl.c dso_dlfcn.c dso_err.c dso_lib.c \
+        dso_openssl.c dso_win32.c dso_vms.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_dl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_dl.c
new file mode 100644
index 000000000..290d73cf3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_dl.c
@@ -0,0 +1,279 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "dso_locl.h"
+
+#ifdef DSO_DL
+
+# include <dl.h>
+
+/* Part of the hack in "dl_load" ... */
+# define DSO_MAX_TRANSLATED_SIZE 256
+
+static int dl_load(DSO *dso);
+static int dl_unload(DSO *dso);
+static DSO_FUNC_TYPE dl_bind_func(DSO *dso, const char *symname);
+static char *dl_name_converter(DSO *dso, const char *filename);
+static char *dl_merger(DSO *dso, const char *filespec1,
+                       const char *filespec2);
+static int dl_pathbyaddr(void *addr, char *path, int sz);
+static void *dl_globallookup(const char *name);
+
+static DSO_METHOD dso_meth_dl = {
+    "OpenSSL 'dl' shared library method",
+    dl_load,
+    dl_unload,
+    dl_bind_func,
+    NULL,                       /* ctrl */
+    dl_name_converter,
+    dl_merger,
+    NULL,                       /* init */
+    NULL,                       /* finish */
+    dl_pathbyaddr,
+    dl_globallookup
+};
+
+DSO_METHOD *DSO_METHOD_openssl(void)
+{
+    return &dso_meth_dl;
+}
+
+/*
+ * For this DSO_METHOD, our meth_data STACK will contain; (i) the handle
+ * (shl_t) returned from shl_load(). NB: I checked on HPUX11 and shl_t is
+ * itself a pointer type so the cast is safe.
+ */
+
+static int dl_load(DSO *dso)
+{
+    shl_t ptr = NULL;
+    /*
+     * We don't do any fancy retries or anything, just take the method's (or
+     * DSO's if it has the callback set) best translation of the
+     * platform-independent filename and try once with that.
+     */
+    char *filename = DSO_convert_filename(dso, NULL);
+
+    if (filename == NULL) {
+        DSOerr(DSO_F_DL_LOAD, DSO_R_NO_FILENAME);
+        goto err;
+    }
+    ptr = shl_load(filename, BIND_IMMEDIATE |
+                   (dso->flags & DSO_FLAG_NO_NAME_TRANSLATION ? 0 :
+                    DYNAMIC_PATH), 0L);
+    if (ptr == NULL) {
+        char errbuf[160];
+        DSOerr(DSO_F_DL_LOAD, DSO_R_LOAD_FAILED);
+        if (openssl_strerror_r(errno, errbuf, sizeof(errbuf)))
+            ERR_add_error_data(4, "filename(", filename, "): ", errbuf);
+        goto err;
+    }
+    if (!sk_push(dso->meth_data, (char *)ptr)) {
+        DSOerr(DSO_F_DL_LOAD, DSO_R_STACK_ERROR);
+        goto err;
+    }
+    /*
+     * Success, stick the converted filename we've loaded under into the DSO
+     * (it also serves as the indicator that we are currently loaded).
+     */
+    dso->loaded_filename = filename;
+    return 1;
+ err:
+    /* Cleanup! */
+    OPENSSL_free(filename);
+    if (ptr != NULL)
+        shl_unload(ptr);
+    return 0;
+}
+
+static int dl_unload(DSO *dso)
+{
+    shl_t ptr;
+    if (dso == NULL) {
+        DSOerr(DSO_F_DL_UNLOAD, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    if (sk_num(dso->meth_data) < 1)
+        return 1;
+    /* Is this statement legal? */
+    ptr = (shl_t) sk_pop(dso->meth_data);
+    if (ptr == NULL) {
+        DSOerr(DSO_F_DL_UNLOAD, DSO_R_NULL_HANDLE);
+        /*
+         * Should push the value back onto the stack in case of a retry.
+         */
+        sk_push(dso->meth_data, (char *)ptr);
+        return 0;
+    }
+    shl_unload(ptr);
+    return 1;
+}
+
+static DSO_FUNC_TYPE dl_bind_func(DSO *dso, const char *symname)
+{
+    shl_t ptr;
+    void *sym;
+
+    if ((dso == NULL) || (symname == NULL)) {
+        DSOerr(DSO_F_DL_BIND_FUNC, ERR_R_PASSED_NULL_PARAMETER);
+        return NULL;
+    }
+    if (sk_num(dso->meth_data) < 1) {
+        DSOerr(DSO_F_DL_BIND_FUNC, DSO_R_STACK_ERROR);
+        return NULL;
+    }
+    ptr = (shl_t) sk_value(dso->meth_data, sk_num(dso->meth_data) - 1);
+    if (ptr == NULL) {
+        DSOerr(DSO_F_DL_BIND_FUNC, DSO_R_NULL_HANDLE);
+        return NULL;
+    }
+    if (shl_findsym(&ptr, symname, TYPE_UNDEFINED, &sym) < 0) {
+        char errbuf[160];
+        DSOerr(DSO_F_DL_BIND_FUNC, DSO_R_SYM_FAILURE);
+        if (openssl_strerror_r(errno, errbuf, sizeof(errbuf)))
+            ERR_add_error_data(4, "symname(", symname, "): ", errbuf);
+        return NULL;
+    }
+    return (DSO_FUNC_TYPE)sym;
+}
+
+static char *dl_merger(DSO *dso, const char *filespec1, const char *filespec2)
+{
+    char *merged;
+
+    if (!filespec1 && !filespec2) {
+        DSOerr(DSO_F_DL_MERGER, ERR_R_PASSED_NULL_PARAMETER);
+        return NULL;
+    }
+    /*
+     * If the first file specification is a rooted path, it rules. same goes
+     * if the second file specification is missing.
+     */
+    if (!filespec2 || filespec1[0] == '/') {
+        merged = OPENSSL_strdup(filespec1);
+        if (merged == NULL) {
+            DSOerr(DSO_F_DL_MERGER, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+    }
+    /*
+     * If the first file specification is missing, the second one rules.
+     */
+    else if (!filespec1) {
+        merged = OPENSSL_strdup(filespec2);
+        if (merged == NULL) {
+            DSOerr(DSO_F_DL_MERGER, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+    } else
+        /*
+         * This part isn't as trivial as it looks.  It assumes that the
+         * second file specification really is a directory, and makes no
+         * checks whatsoever.  Therefore, the result becomes the
+         * concatenation of filespec2 followed by a slash followed by
+         * filespec1.
+         */
+    {
+        int spec2len, len;
+
+        spec2len = (filespec2 ? strlen(filespec2) : 0);
+        len = spec2len + (filespec1 ? strlen(filespec1) : 0);
+
+        if (spec2len && filespec2[spec2len - 1] == '/') {
+            spec2len--;
+            len--;
+        }
+        merged = OPENSSL_malloc(len + 2);
+        if (merged == NULL) {
+            DSOerr(DSO_F_DL_MERGER, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+        strcpy(merged, filespec2);
+        merged[spec2len] = '/';
+        strcpy(&merged[spec2len + 1], filespec1);
+    }
+    return merged;
+}
+
+/*
+ * This function is identical to the one in dso_dlfcn.c, but as it is highly
+ * unlikely that both the "dl" *and* "dlfcn" variants are being compiled at
+ * the same time, there's no great duplicating the code. Figuring out an
+ * elegant way to share one copy of the code would be more difficult and
+ * would not leave the implementations independent.
+ */
+static char *dl_name_converter(DSO *dso, const char *filename)
+{
+    char *translated;
+    int len, rsize, transform;
+
+    len = strlen(filename);
+    rsize = len + 1;
+    transform = (strstr(filename, "/") == NULL);
+    {
+        /* We will convert this to "%s.s?" or "lib%s.s?" */
+        rsize += strlen(DSO_EXTENSION); /* The length of ".s?" */
+        if ((DSO_flags(dso) & DSO_FLAG_NAME_TRANSLATION_EXT_ONLY) == 0)
+            rsize += 3;         /* The length of "lib" */
+    }
+    translated = OPENSSL_malloc(rsize);
+    if (translated == NULL) {
+        DSOerr(DSO_F_DL_NAME_CONVERTER, DSO_R_NAME_TRANSLATION_FAILED);
+        return NULL;
+    }
+    if (transform) {
+        if ((DSO_flags(dso) & DSO_FLAG_NAME_TRANSLATION_EXT_ONLY) == 0)
+            sprintf(translated, "lib%s%s", filename, DSO_EXTENSION);
+        else
+            sprintf(translated, "%s%s", filename, DSO_EXTENSION);
+    } else
+        sprintf(translated, "%s", filename);
+    return translated;
+}
+
+static int dl_pathbyaddr(void *addr, char *path, int sz)
+{
+    struct shl_descriptor inf;
+    int i, len;
+
+    if (addr == NULL) {
+        union {
+            int (*f) (void *, char *, int);
+            void *p;
+        } t = {
+            dl_pathbyaddr
+        };
+        addr = t.p;
+    }
+
+    for (i = -1; shl_get_r(i, &inf) == 0; i++) {
+        if (((size_t)addr >= inf.tstart && (size_t)addr < inf.tend) ||
+            ((size_t)addr >= inf.dstart && (size_t)addr < inf.dend)) {
+            len = (int)strlen(inf.filename);
+            if (sz <= 0)
+                return len + 1;
+            if (len >= sz)
+                len = sz - 1;
+            memcpy(path, inf.filename, len);
+            path[len++] = 0;
+            return len;
+        }
+    }
+
+    return -1;
+}
+
+static void *dl_globallookup(const char *name)
+{
+    void *ret;
+    shl_t h = NULL;
+
+    return shl_findsym(&h, name, TYPE_UNDEFINED, &ret) ? NULL : ret;
+}
+#endif                          /* DSO_DL */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_dlfcn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_dlfcn.c
new file mode 100644
index 000000000..4240f5f5e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_dlfcn.c
@@ -0,0 +1,457 @@
+/*
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * We need to do this early, because stdio.h includes the header files that
+ * handle _GNU_SOURCE and other similar macros.  Defining it later is simply
+ * too late, because those headers are protected from re- inclusion.
+ */
+#ifndef _GNU_SOURCE
+# define _GNU_SOURCE            /* make sure dladdr is declared */
+#endif
+
+#include "dso_locl.h"
+#include "e_os.h"
+
+#ifdef DSO_DLFCN
+
+# ifdef HAVE_DLFCN_H
+#  ifdef __osf__
+#   define __EXTENSIONS__
+#  endif
+#  include <dlfcn.h>
+#  define HAVE_DLINFO 1
+#  if defined(__CYGWIN__) || \
+     defined(__SCO_VERSION__) || defined(_SCO_ELF) || \
+     (defined(__osf__) && !defined(RTLD_NEXT))     || \
+     (defined(__OpenBSD__) && !defined(RTLD_SELF)) || \
+        defined(__ANDROID__)
+#   undef HAVE_DLINFO
+#  endif
+# endif
+
+/* Part of the hack in "dlfcn_load" ... */
+# define DSO_MAX_TRANSLATED_SIZE 256
+
+static int dlfcn_load(DSO *dso);
+static int dlfcn_unload(DSO *dso);
+static DSO_FUNC_TYPE dlfcn_bind_func(DSO *dso, const char *symname);
+static char *dlfcn_name_converter(DSO *dso, const char *filename);
+static char *dlfcn_merger(DSO *dso, const char *filespec1,
+                          const char *filespec2);
+static int dlfcn_pathbyaddr(void *addr, char *path, int sz);
+static void *dlfcn_globallookup(const char *name);
+
+static DSO_METHOD dso_meth_dlfcn = {
+    "OpenSSL 'dlfcn' shared library method",
+    dlfcn_load,
+    dlfcn_unload,
+    dlfcn_bind_func,
+    NULL,                       /* ctrl */
+    dlfcn_name_converter,
+    dlfcn_merger,
+    NULL,                       /* init */
+    NULL,                       /* finish */
+    dlfcn_pathbyaddr,
+    dlfcn_globallookup
+};
+
+DSO_METHOD *DSO_METHOD_openssl(void)
+{
+    return &dso_meth_dlfcn;
+}
+
+/*
+ * Prior to using the dlopen() function, we should decide on the flag we
+ * send. There's a few different ways of doing this and it's a messy
+ * venn-diagram to match up which platforms support what. So as we don't have
+ * autoconf yet, I'm implementing a hack that could be hacked further
+ * relatively easily to deal with cases as we find them. Initially this is to
+ * cope with OpenBSD.
+ */
+# if defined(__OpenBSD__) || defined(__NetBSD__)
+#  ifdef DL_LAZY
+#   define DLOPEN_FLAG DL_LAZY
+#  else
+#   ifdef RTLD_NOW
+#    define DLOPEN_FLAG RTLD_NOW
+#   else
+#    define DLOPEN_FLAG 0
+#   endif
+#  endif
+# else
+#  define DLOPEN_FLAG RTLD_NOW  /* Hope this works everywhere else */
+# endif
+
+/*
+ * For this DSO_METHOD, our meth_data STACK will contain; (i) the handle
+ * (void*) returned from dlopen().
+ */
+
+static int dlfcn_load(DSO *dso)
+{
+    void *ptr = NULL;
+    /* See applicable comments in dso_dl.c */
+    char *filename = DSO_convert_filename(dso, NULL);
+    int flags = DLOPEN_FLAG;
+    int saveerrno = get_last_sys_error();
+
+    if (filename == NULL) {
+        DSOerr(DSO_F_DLFCN_LOAD, DSO_R_NO_FILENAME);
+        goto err;
+    }
+# ifdef RTLD_GLOBAL
+    if (dso->flags & DSO_FLAG_GLOBAL_SYMBOLS)
+        flags |= RTLD_GLOBAL;
+# endif
+# ifdef _AIX
+    if (filename[strlen(filename) - 1] == ')')
+        flags |= RTLD_MEMBER;
+# endif
+    ptr = dlopen(filename, flags);
+    if (ptr == NULL) {
+        DSOerr(DSO_F_DLFCN_LOAD, DSO_R_LOAD_FAILED);
+        ERR_add_error_data(4, "filename(", filename, "): ", dlerror());
+        goto err;
+    }
+    /*
+     * Some dlopen() implementations (e.g. solaris) do no preserve errno, even
+     * on a successful call.
+     */
+    set_sys_error(saveerrno);
+    if (!sk_void_push(dso->meth_data, (char *)ptr)) {
+        DSOerr(DSO_F_DLFCN_LOAD, DSO_R_STACK_ERROR);
+        goto err;
+    }
+    /* Success */
+    dso->loaded_filename = filename;
+    return 1;
+ err:
+    /* Cleanup! */
+    OPENSSL_free(filename);
+    if (ptr != NULL)
+        dlclose(ptr);
+    return 0;
+}
+
+static int dlfcn_unload(DSO *dso)
+{
+    void *ptr;
+    if (dso == NULL) {
+        DSOerr(DSO_F_DLFCN_UNLOAD, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    if (sk_void_num(dso->meth_data) < 1)
+        return 1;
+    ptr = sk_void_pop(dso->meth_data);
+    if (ptr == NULL) {
+        DSOerr(DSO_F_DLFCN_UNLOAD, DSO_R_NULL_HANDLE);
+        /*
+         * Should push the value back onto the stack in case of a retry.
+         */
+        sk_void_push(dso->meth_data, ptr);
+        return 0;
+    }
+    /* For now I'm not aware of any errors associated with dlclose() */
+    dlclose(ptr);
+    return 1;
+}
+
+static DSO_FUNC_TYPE dlfcn_bind_func(DSO *dso, const char *symname)
+{
+    void *ptr;
+    union {
+        DSO_FUNC_TYPE sym;
+        void *dlret;
+    } u;
+
+    if ((dso == NULL) || (symname == NULL)) {
+        DSOerr(DSO_F_DLFCN_BIND_FUNC, ERR_R_PASSED_NULL_PARAMETER);
+        return NULL;
+    }
+    if (sk_void_num(dso->meth_data) < 1) {
+        DSOerr(DSO_F_DLFCN_BIND_FUNC, DSO_R_STACK_ERROR);
+        return NULL;
+    }
+    ptr = sk_void_value(dso->meth_data, sk_void_num(dso->meth_data) - 1);
+    if (ptr == NULL) {
+        DSOerr(DSO_F_DLFCN_BIND_FUNC, DSO_R_NULL_HANDLE);
+        return NULL;
+    }
+    u.dlret = dlsym(ptr, symname);
+    if (u.dlret == NULL) {
+        DSOerr(DSO_F_DLFCN_BIND_FUNC, DSO_R_SYM_FAILURE);
+        ERR_add_error_data(4, "symname(", symname, "): ", dlerror());
+        return NULL;
+    }
+    return u.sym;
+}
+
+static char *dlfcn_merger(DSO *dso, const char *filespec1,
+                          const char *filespec2)
+{
+    char *merged;
+
+    if (!filespec1 && !filespec2) {
+        DSOerr(DSO_F_DLFCN_MERGER, ERR_R_PASSED_NULL_PARAMETER);
+        return NULL;
+    }
+    /*
+     * If the first file specification is a rooted path, it rules. same goes
+     * if the second file specification is missing.
+     */
+    if (!filespec2 || (filespec1 != NULL && filespec1[0] == '/')) {
+        merged = OPENSSL_strdup(filespec1);
+        if (merged == NULL) {
+            DSOerr(DSO_F_DLFCN_MERGER, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+    }
+    /*
+     * If the first file specification is missing, the second one rules.
+     */
+    else if (!filespec1) {
+        merged = OPENSSL_strdup(filespec2);
+        if (merged == NULL) {
+            DSOerr(DSO_F_DLFCN_MERGER, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+    } else {
+        /*
+         * This part isn't as trivial as it looks.  It assumes that the
+         * second file specification really is a directory, and makes no
+         * checks whatsoever.  Therefore, the result becomes the
+         * concatenation of filespec2 followed by a slash followed by
+         * filespec1.
+         */
+        int spec2len, len;
+
+        spec2len = strlen(filespec2);
+        len = spec2len + strlen(filespec1);
+
+        if (spec2len && filespec2[spec2len - 1] == '/') {
+            spec2len--;
+            len--;
+        }
+        merged = OPENSSL_malloc(len + 2);
+        if (merged == NULL) {
+            DSOerr(DSO_F_DLFCN_MERGER, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+        strcpy(merged, filespec2);
+        merged[spec2len] = '/';
+        strcpy(&merged[spec2len + 1], filespec1);
+    }
+    return merged;
+}
+
+static char *dlfcn_name_converter(DSO *dso, const char *filename)
+{
+    char *translated;
+    int len, rsize, transform;
+
+    len = strlen(filename);
+    rsize = len + 1;
+    transform = (strstr(filename, "/") == NULL);
+    if (transform) {
+        /* We will convert this to "%s.so" or "lib%s.so" etc */
+        rsize += strlen(DSO_EXTENSION);    /* The length of ".so" */
+        if ((DSO_flags(dso) & DSO_FLAG_NAME_TRANSLATION_EXT_ONLY) == 0)
+            rsize += 3;         /* The length of "lib" */
+    }
+    translated = OPENSSL_malloc(rsize);
+    if (translated == NULL) {
+        DSOerr(DSO_F_DLFCN_NAME_CONVERTER, DSO_R_NAME_TRANSLATION_FAILED);
+        return NULL;
+    }
+    if (transform) {
+        if ((DSO_flags(dso) & DSO_FLAG_NAME_TRANSLATION_EXT_ONLY) == 0)
+            sprintf(translated, "lib%s" DSO_EXTENSION, filename);
+        else
+            sprintf(translated, "%s" DSO_EXTENSION, filename);
+    } else
+        sprintf(translated, "%s", filename);
+    return translated;
+}
+
+# ifdef __sgi
+/*-
+This is a quote from IRIX manual for dladdr(3c):
+
+     <dlfcn.h> does not contain a prototype for dladdr or definition of
+     Dl_info.  The #include <dlfcn.h>  in the SYNOPSIS line is traditional,
+     but contains no dladdr prototype and no IRIX library contains an
+     implementation.  Write your own declaration based on the code below.
+
+     The following code is dependent on internal interfaces that are not
+     part of the IRIX compatibility guarantee; however, there is no future
+     intention to change this interface, so on a practical level, the code
+     below is safe to use on IRIX.
+*/
+#  include <rld_interface.h>
+#  ifndef _RLD_INTERFACE_DLFCN_H_DLADDR
+#   define _RLD_INTERFACE_DLFCN_H_DLADDR
+typedef struct Dl_info {
+    const char *dli_fname;
+    void *dli_fbase;
+    const char *dli_sname;
+    void *dli_saddr;
+    int dli_version;
+    int dli_reserved1;
+    long dli_reserved[4];
+} Dl_info;
+#  else
+typedef struct Dl_info Dl_info;
+#  endif
+#  define _RLD_DLADDR             14
+
+static int dladdr(void *address, Dl_info *dl)
+{
+    void *v;
+    v = _rld_new_interface(_RLD_DLADDR, address, dl);
+    return (int)v;
+}
+# endif                         /* __sgi */
+
+# ifdef _AIX
+/*-
+ * See IBM's AIX Version 7.2, Technical Reference:
+ *  Base Operating System and Extensions, Volume 1 and 2
+ *  https://www.ibm.com/support/knowledgecenter/ssw_aix_72/com.ibm.aix.base/technicalreferences.htm
+ */
+#  include <sys/ldr.h>
+#  include <errno.h>
+/* ~ 64 * (sizeof(struct ld_info) + _XOPEN_PATH_MAX + _XOPEN_NAME_MAX) */
+#  define DLFCN_LDINFO_SIZE 86976
+typedef struct Dl_info {
+    const char *dli_fname;
+} Dl_info;
+/*
+ * This dladdr()-implementation will also find the ptrgl (Pointer Glue) virtual
+ * address of a function, which is just located in the DATA segment instead of
+ * the TEXT segment.
+ */
+static int dladdr(void *ptr, Dl_info *dl)
+{
+    uintptr_t addr = (uintptr_t)ptr;
+    unsigned int found = 0;
+    struct ld_info *ldinfos, *next_ldi, *this_ldi;
+
+    if ((ldinfos = OPENSSL_malloc(DLFCN_LDINFO_SIZE)) == NULL) {
+        errno = ENOMEM;
+        dl->dli_fname = NULL;
+        return 0;
+    }
+
+    if ((loadquery(L_GETINFO, (void *)ldinfos, DLFCN_LDINFO_SIZE)) < 0) {
+        /*-
+         * Error handling is done through errno and dlerror() reading errno:
+         *  ENOMEM (ldinfos buffer is too small),
+         *  EINVAL (invalid flags),
+         *  EFAULT (invalid ldinfos ptr)
+         */
+        OPENSSL_free((void *)ldinfos);
+        dl->dli_fname = NULL;
+        return 0;
+    }
+    next_ldi = ldinfos;
+
+    do {
+        this_ldi = next_ldi;
+        if (((addr >= (uintptr_t)this_ldi->ldinfo_textorg)
+             && (addr < ((uintptr_t)this_ldi->ldinfo_textorg +
+                         this_ldi->ldinfo_textsize)))
+            || ((addr >= (uintptr_t)this_ldi->ldinfo_dataorg)
+                && (addr < ((uintptr_t)this_ldi->ldinfo_dataorg +
+                            this_ldi->ldinfo_datasize)))) {
+            char *buffer, *member;
+            size_t buffer_sz, member_len;
+
+            buffer_sz = strlen(this_ldi->ldinfo_filename) + 1;
+            member = this_ldi->ldinfo_filename + buffer_sz;
+            if ((member_len = strlen(member)) > 0)
+                buffer_sz += 1 + member_len + 1;
+            found = 1;
+            if ((buffer = OPENSSL_malloc(buffer_sz)) != NULL) {
+                OPENSSL_strlcpy(buffer, this_ldi->ldinfo_filename, buffer_sz);
+                if (member_len > 0) {
+                    /*
+                     * Need to respect a possible member name and not just
+                     * returning the path name in this case. See docs:
+                     * sys/ldr.h, loadquery() and dlopen()/RTLD_MEMBER.
+                     */
+                    OPENSSL_strlcat(buffer, "(", buffer_sz);
+                    OPENSSL_strlcat(buffer, member, buffer_sz);
+                    OPENSSL_strlcat(buffer, ")", buffer_sz);
+                }
+                dl->dli_fname = buffer;
+            } else {
+                errno = ENOMEM;
+            }
+        } else {
+            next_ldi = (struct ld_info *)((uintptr_t)this_ldi +
+                                          this_ldi->ldinfo_next);
+        }
+    } while (this_ldi->ldinfo_next && !found);
+    OPENSSL_free((void *)ldinfos);
+    return (found && dl->dli_fname != NULL);
+}
+# endif                         /* _AIX */
+
+static int dlfcn_pathbyaddr(void *addr, char *path, int sz)
+{
+# ifdef HAVE_DLINFO
+    Dl_info dli;
+    int len;
+
+    if (addr == NULL) {
+        union {
+            int (*f) (void *, char *, int);
+            void *p;
+        } t = {
+            dlfcn_pathbyaddr
+        };
+        addr = t.p;
+    }
+
+    if (dladdr(addr, &dli)) {
+        len = (int)strlen(dli.dli_fname);
+        if (sz <= 0) {
+#  ifdef _AIX
+            OPENSSL_free((void *)dli.dli_fname);
+#  endif
+            return len + 1;
+        }
+        if (len >= sz)
+            len = sz - 1;
+        memcpy(path, dli.dli_fname, len);
+        path[len++] = 0;
+#  ifdef _AIX
+        OPENSSL_free((void *)dli.dli_fname);
+#  endif
+        return len;
+    }
+
+    ERR_add_error_data(2, "dlfcn_pathbyaddr(): ", dlerror());
+# endif
+    return -1;
+}
+
+static void *dlfcn_globallookup(const char *name)
+{
+    void *ret = NULL, *handle = dlopen(NULL, RTLD_LAZY);
+
+    if (handle) {
+        ret = dlsym(handle, name);
+        dlclose(handle);
+    }
+
+    return ret;
+}
+#endif                          /* DSO_DLFCN */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_err.c
new file mode 100644
index 000000000..613072a8d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_err.c
@@ -0,0 +1,100 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include "internal/dsoerr.h"
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA DSO_str_functs[] = {
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DLFCN_BIND_FUNC, 0), "dlfcn_bind_func"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DLFCN_LOAD, 0), "dlfcn_load"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DLFCN_MERGER, 0), "dlfcn_merger"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DLFCN_NAME_CONVERTER, 0),
+     "dlfcn_name_converter"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DLFCN_UNLOAD, 0), "dlfcn_unload"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DL_BIND_FUNC, 0), "dl_bind_func"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DL_LOAD, 0), "dl_load"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DL_MERGER, 0), "dl_merger"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DL_NAME_CONVERTER, 0), "dl_name_converter"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DL_UNLOAD, 0), "dl_unload"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DSO_BIND_FUNC, 0), "DSO_bind_func"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DSO_CONVERT_FILENAME, 0),
+     "DSO_convert_filename"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DSO_CTRL, 0), "DSO_ctrl"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DSO_FREE, 0), "DSO_free"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DSO_GET_FILENAME, 0), "DSO_get_filename"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DSO_GLOBAL_LOOKUP, 0), "DSO_global_lookup"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DSO_LOAD, 0), "DSO_load"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DSO_MERGE, 0), "DSO_merge"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DSO_NEW_METHOD, 0), "DSO_new_method"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DSO_PATHBYADDR, 0), "DSO_pathbyaddr"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DSO_SET_FILENAME, 0), "DSO_set_filename"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_DSO_UP_REF, 0), "DSO_up_ref"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_VMS_BIND_SYM, 0), "vms_bind_sym"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_VMS_LOAD, 0), "vms_load"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_VMS_MERGER, 0), "vms_merger"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_VMS_UNLOAD, 0), "vms_unload"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_WIN32_BIND_FUNC, 0), "win32_bind_func"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_WIN32_GLOBALLOOKUP, 0), "win32_globallookup"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_WIN32_JOINER, 0), "win32_joiner"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_WIN32_LOAD, 0), "win32_load"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_WIN32_MERGER, 0), "win32_merger"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_WIN32_NAME_CONVERTER, 0),
+     "win32_name_converter"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_WIN32_PATHBYADDR, 0), ""},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_WIN32_SPLITTER, 0), "win32_splitter"},
+    {ERR_PACK(ERR_LIB_DSO, DSO_F_WIN32_UNLOAD, 0), "win32_unload"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA DSO_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_DSO, 0, DSO_R_CTRL_FAILED), "control command failed"},
+    {ERR_PACK(ERR_LIB_DSO, 0, DSO_R_DSO_ALREADY_LOADED), "dso already loaded"},
+    {ERR_PACK(ERR_LIB_DSO, 0, DSO_R_EMPTY_FILE_STRUCTURE),
+    "empty file structure"},
+    {ERR_PACK(ERR_LIB_DSO, 0, DSO_R_FAILURE), "failure"},
+    {ERR_PACK(ERR_LIB_DSO, 0, DSO_R_FILENAME_TOO_BIG), "filename too big"},
+    {ERR_PACK(ERR_LIB_DSO, 0, DSO_R_FINISH_FAILED),
+    "cleanup method function failed"},
+    {ERR_PACK(ERR_LIB_DSO, 0, DSO_R_INCORRECT_FILE_SYNTAX),
+    "incorrect file syntax"},
+    {ERR_PACK(ERR_LIB_DSO, 0, DSO_R_LOAD_FAILED),
+    "could not load the shared library"},
+    {ERR_PACK(ERR_LIB_DSO, 0, DSO_R_NAME_TRANSLATION_FAILED),
+    "name translation failed"},
+    {ERR_PACK(ERR_LIB_DSO, 0, DSO_R_NO_FILENAME), "no filename"},
+    {ERR_PACK(ERR_LIB_DSO, 0, DSO_R_NULL_HANDLE),
+    "a null shared library handle was used"},
+    {ERR_PACK(ERR_LIB_DSO, 0, DSO_R_SET_FILENAME_FAILED),
+    "set filename failed"},
+    {ERR_PACK(ERR_LIB_DSO, 0, DSO_R_STACK_ERROR),
+    "the meth_data stack is corrupt"},
+    {ERR_PACK(ERR_LIB_DSO, 0, DSO_R_SYM_FAILURE),
+    "could not bind to the requested symbol name"},
+    {ERR_PACK(ERR_LIB_DSO, 0, DSO_R_UNLOAD_FAILED),
+    "could not unload the shared library"},
+    {ERR_PACK(ERR_LIB_DSO, 0, DSO_R_UNSUPPORTED),
+    "functionality not supported"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_DSO_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(DSO_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(DSO_str_functs);
+        ERR_load_strings_const(DSO_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_lib.c
new file mode 100644
index 000000000..2e75021d3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_lib.c
@@ -0,0 +1,350 @@
+/*
+ * Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "dso_locl.h"
+#include "internal/refcount.h"
+
+static DSO_METHOD *default_DSO_meth = NULL;
+
+static DSO *DSO_new_method(DSO_METHOD *meth)
+{
+    DSO *ret;
+
+    if (default_DSO_meth == NULL) {
+        /*
+         * We default to DSO_METH_openssl() which in turn defaults to
+         * stealing the "best available" method. Will fallback to
+         * DSO_METH_null() in the worst case.
+         */
+        default_DSO_meth = DSO_METHOD_openssl();
+    }
+    ret = OPENSSL_zalloc(sizeof(*ret));
+    if (ret == NULL) {
+        DSOerr(DSO_F_DSO_NEW_METHOD, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    ret->meth_data = sk_void_new_null();
+    if (ret->meth_data == NULL) {
+        /* sk_new doesn't generate any errors so we do */
+        DSOerr(DSO_F_DSO_NEW_METHOD, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+    ret->meth = default_DSO_meth;
+    ret->references = 1;
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        DSOerr(DSO_F_DSO_NEW_METHOD, ERR_R_MALLOC_FAILURE);
+        sk_void_free(ret->meth_data);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+
+    if ((ret->meth->init != NULL) && !ret->meth->init(ret)) {
+        DSO_free(ret);
+        ret = NULL;
+    }
+
+    return ret;
+}
+
+DSO *DSO_new(void)
+{
+    return DSO_new_method(NULL);
+}
+
+int DSO_free(DSO *dso)
+{
+    int i;
+
+    if (dso == NULL)
+        return 1;
+
+    if (CRYPTO_DOWN_REF(&dso->references, &i, dso->lock) <= 0)
+        return 0;
+
+    REF_PRINT_COUNT("DSO", dso);
+    if (i > 0)
+        return 1;
+    REF_ASSERT_ISNT(i < 0);
+
+    if ((dso->flags & DSO_FLAG_NO_UNLOAD_ON_FREE) == 0) {
+        if ((dso->meth->dso_unload != NULL) && !dso->meth->dso_unload(dso)) {
+            DSOerr(DSO_F_DSO_FREE, DSO_R_UNLOAD_FAILED);
+            return 0;
+        }
+    }
+
+    if ((dso->meth->finish != NULL) && !dso->meth->finish(dso)) {
+        DSOerr(DSO_F_DSO_FREE, DSO_R_FINISH_FAILED);
+        return 0;
+    }
+
+    sk_void_free(dso->meth_data);
+    OPENSSL_free(dso->filename);
+    OPENSSL_free(dso->loaded_filename);
+    CRYPTO_THREAD_lock_free(dso->lock);
+    OPENSSL_free(dso);
+    return 1;
+}
+
+int DSO_flags(DSO *dso)
+{
+    return ((dso == NULL) ? 0 : dso->flags);
+}
+
+int DSO_up_ref(DSO *dso)
+{
+    int i;
+
+    if (dso == NULL) {
+        DSOerr(DSO_F_DSO_UP_REF, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+
+    if (CRYPTO_UP_REF(&dso->references, &i, dso->lock) <= 0)
+        return 0;
+
+    REF_PRINT_COUNT("DSO", r);
+    REF_ASSERT_ISNT(i < 2);
+    return ((i > 1) ? 1 : 0);
+}
+
+DSO *DSO_load(DSO *dso, const char *filename, DSO_METHOD *meth, int flags)
+{
+    DSO *ret;
+    int allocated = 0;
+
+    if (dso == NULL) {
+        ret = DSO_new_method(meth);
+        if (ret == NULL) {
+            DSOerr(DSO_F_DSO_LOAD, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        allocated = 1;
+        /* Pass the provided flags to the new DSO object */
+        if (DSO_ctrl(ret, DSO_CTRL_SET_FLAGS, flags, NULL) < 0) {
+            DSOerr(DSO_F_DSO_LOAD, DSO_R_CTRL_FAILED);
+            goto err;
+        }
+    } else
+        ret = dso;
+    /* Don't load if we're currently already loaded */
+    if (ret->filename != NULL) {
+        DSOerr(DSO_F_DSO_LOAD, DSO_R_DSO_ALREADY_LOADED);
+        goto err;
+    }
+    /*
+     * filename can only be NULL if we were passed a dso that already has one
+     * set.
+     */
+    if (filename != NULL)
+        if (!DSO_set_filename(ret, filename)) {
+            DSOerr(DSO_F_DSO_LOAD, DSO_R_SET_FILENAME_FAILED);
+            goto err;
+        }
+    filename = ret->filename;
+    if (filename == NULL) {
+        DSOerr(DSO_F_DSO_LOAD, DSO_R_NO_FILENAME);
+        goto err;
+    }
+    if (ret->meth->dso_load == NULL) {
+        DSOerr(DSO_F_DSO_LOAD, DSO_R_UNSUPPORTED);
+        goto err;
+    }
+    if (!ret->meth->dso_load(ret)) {
+        DSOerr(DSO_F_DSO_LOAD, DSO_R_LOAD_FAILED);
+        goto err;
+    }
+    /* Load succeeded */
+    return ret;
+ err:
+    if (allocated)
+        DSO_free(ret);
+    return NULL;
+}
+
+DSO_FUNC_TYPE DSO_bind_func(DSO *dso, const char *symname)
+{
+    DSO_FUNC_TYPE ret = NULL;
+
+    if ((dso == NULL) || (symname == NULL)) {
+        DSOerr(DSO_F_DSO_BIND_FUNC, ERR_R_PASSED_NULL_PARAMETER);
+        return NULL;
+    }
+    if (dso->meth->dso_bind_func == NULL) {
+        DSOerr(DSO_F_DSO_BIND_FUNC, DSO_R_UNSUPPORTED);
+        return NULL;
+    }
+    if ((ret = dso->meth->dso_bind_func(dso, symname)) == NULL) {
+        DSOerr(DSO_F_DSO_BIND_FUNC, DSO_R_SYM_FAILURE);
+        return NULL;
+    }
+    /* Success */
+    return ret;
+}
+
+/*
+ * I don't really like these *_ctrl functions very much to be perfectly
+ * honest. For one thing, I think I have to return a negative value for any
+ * error because possible DSO_ctrl() commands may return values such as
+ * "size"s that can legitimately be zero (making the standard
+ * "if (DSO_cmd(...))" form that works almost everywhere else fail at odd
+ * times. I'd prefer "output" values to be passed by reference and the return
+ * value as success/failure like usual ... but we conform when we must... :-)
+ */
+long DSO_ctrl(DSO *dso, int cmd, long larg, void *parg)
+{
+    if (dso == NULL) {
+        DSOerr(DSO_F_DSO_CTRL, ERR_R_PASSED_NULL_PARAMETER);
+        return -1;
+    }
+    /*
+     * We should intercept certain generic commands and only pass control to
+     * the method-specific ctrl() function if it's something we don't handle.
+     */
+    switch (cmd) {
+    case DSO_CTRL_GET_FLAGS:
+        return dso->flags;
+    case DSO_CTRL_SET_FLAGS:
+        dso->flags = (int)larg;
+        return 0;
+    case DSO_CTRL_OR_FLAGS:
+        dso->flags |= (int)larg;
+        return 0;
+    default:
+        break;
+    }
+    if ((dso->meth == NULL) || (dso->meth->dso_ctrl == NULL)) {
+        DSOerr(DSO_F_DSO_CTRL, DSO_R_UNSUPPORTED);
+        return -1;
+    }
+    return dso->meth->dso_ctrl(dso, cmd, larg, parg);
+}
+
+const char *DSO_get_filename(DSO *dso)
+{
+    if (dso == NULL) {
+        DSOerr(DSO_F_DSO_GET_FILENAME, ERR_R_PASSED_NULL_PARAMETER);
+        return NULL;
+    }
+    return dso->filename;
+}
+
+int DSO_set_filename(DSO *dso, const char *filename)
+{
+    char *copied;
+
+    if ((dso == NULL) || (filename == NULL)) {
+        DSOerr(DSO_F_DSO_SET_FILENAME, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    if (dso->loaded_filename) {
+        DSOerr(DSO_F_DSO_SET_FILENAME, DSO_R_DSO_ALREADY_LOADED);
+        return 0;
+    }
+    /* We'll duplicate filename */
+    copied = OPENSSL_strdup(filename);
+    if (copied == NULL) {
+        DSOerr(DSO_F_DSO_SET_FILENAME, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    OPENSSL_free(dso->filename);
+    dso->filename = copied;
+    return 1;
+}
+
+char *DSO_merge(DSO *dso, const char *filespec1, const char *filespec2)
+{
+    char *result = NULL;
+
+    if (dso == NULL || filespec1 == NULL) {
+        DSOerr(DSO_F_DSO_MERGE, ERR_R_PASSED_NULL_PARAMETER);
+        return NULL;
+    }
+    if ((dso->flags & DSO_FLAG_NO_NAME_TRANSLATION) == 0) {
+        if (dso->merger != NULL)
+            result = dso->merger(dso, filespec1, filespec2);
+        else if (dso->meth->dso_merger != NULL)
+            result = dso->meth->dso_merger(dso, filespec1, filespec2);
+    }
+    return result;
+}
+
+char *DSO_convert_filename(DSO *dso, const char *filename)
+{
+    char *result = NULL;
+
+    if (dso == NULL) {
+        DSOerr(DSO_F_DSO_CONVERT_FILENAME, ERR_R_PASSED_NULL_PARAMETER);
+        return NULL;
+    }
+    if (filename == NULL)
+        filename = dso->filename;
+    if (filename == NULL) {
+        DSOerr(DSO_F_DSO_CONVERT_FILENAME, DSO_R_NO_FILENAME);
+        return NULL;
+    }
+    if ((dso->flags & DSO_FLAG_NO_NAME_TRANSLATION) == 0) {
+        if (dso->name_converter != NULL)
+            result = dso->name_converter(dso, filename);
+        else if (dso->meth->dso_name_converter != NULL)
+            result = dso->meth->dso_name_converter(dso, filename);
+    }
+    if (result == NULL) {
+        result = OPENSSL_strdup(filename);
+        if (result == NULL) {
+            DSOerr(DSO_F_DSO_CONVERT_FILENAME, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+    }
+    return result;
+}
+
+int DSO_pathbyaddr(void *addr, char *path, int sz)
+{
+    DSO_METHOD *meth = default_DSO_meth;
+    if (meth == NULL)
+        meth = DSO_METHOD_openssl();
+    if (meth->pathbyaddr == NULL) {
+        DSOerr(DSO_F_DSO_PATHBYADDR, DSO_R_UNSUPPORTED);
+        return -1;
+    }
+    return (*meth->pathbyaddr) (addr, path, sz);
+}
+
+DSO *DSO_dsobyaddr(void *addr, int flags)
+{
+    DSO *ret = NULL;
+    char *filename = NULL;
+    int len = DSO_pathbyaddr(addr, NULL, 0);
+
+    if (len < 0)
+        return NULL;
+
+    filename = OPENSSL_malloc(len);
+    if (filename != NULL
+            && DSO_pathbyaddr(addr, filename, len) == len)
+        ret = DSO_load(NULL, filename, NULL, flags);
+
+    OPENSSL_free(filename);
+    return ret;
+}
+
+void *DSO_global_lookup(const char *name)
+{
+    DSO_METHOD *meth = default_DSO_meth;
+    if (meth == NULL)
+        meth = DSO_METHOD_openssl();
+    if (meth->globallookup == NULL) {
+        DSOerr(DSO_F_DSO_GLOBAL_LOOKUP, DSO_R_UNSUPPORTED);
+        return NULL;
+    }
+    return (*meth->globallookup) (name);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_locl.h
new file mode 100644
index 000000000..14a0ccb7c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_locl.h
@@ -0,0 +1,107 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "internal/dso.h"
+#include "internal/dso_conf.h"
+#include "internal/refcount.h"
+
+/**********************************************************************/
+/* The low-level handle type used to refer to a loaded shared library */
+
+struct dso_st {
+    DSO_METHOD *meth;
+    /*
+     * Standard dlopen uses a (void *). Win32 uses a HANDLE. VMS doesn't use
+     * anything but will need to cache the filename for use in the dso_bind
+     * handler. All in all, let each method control its own destiny.
+     * "Handles" and such go in a STACK.
+     */
+    STACK_OF(void) *meth_data;
+    CRYPTO_REF_COUNT references;
+    int flags;
+    /*
+     * For use by applications etc ... use this for your bits'n'pieces, don't
+     * touch meth_data!
+     */
+    CRYPTO_EX_DATA ex_data;
+    /*
+     * If this callback function pointer is set to non-NULL, then it will be
+     * used in DSO_load() in place of meth->dso_name_converter. NB: This
+     * should normally set using DSO_set_name_converter().
+     */
+    DSO_NAME_CONVERTER_FUNC name_converter;
+    /*
+     * If this callback function pointer is set to non-NULL, then it will be
+     * used in DSO_load() in place of meth->dso_merger. NB: This should
+     * normally set using DSO_set_merger().
+     */
+    DSO_MERGER_FUNC merger;
+    /*
+     * This is populated with (a copy of) the platform-independent filename
+     * used for this DSO.
+     */
+    char *filename;
+    /*
+     * This is populated with (a copy of) the translated filename by which
+     * the DSO was actually loaded. It is NULL iff the DSO is not currently
+     * loaded. NB: This is here because the filename translation process may
+     * involve a callback being invoked more than once not only to convert to
+     * a platform-specific form, but also to try different filenames in the
+     * process of trying to perform a load. As such, this variable can be
+     * used to indicate (a) whether this DSO structure corresponds to a
+     * loaded library or not, and (b) the filename with which it was actually
+     * loaded.
+     */
+    char *loaded_filename;
+    CRYPTO_RWLOCK *lock;
+};
+
+struct dso_meth_st {
+    const char *name;
+    /*
+     * Loads a shared library, NB: new DSO_METHODs must ensure that a
+     * successful load populates the loaded_filename field, and likewise a
+     * successful unload OPENSSL_frees and NULLs it out.
+     */
+    int (*dso_load) (DSO *dso);
+    /* Unloads a shared library */
+    int (*dso_unload) (DSO *dso);
+    /*
+     * Binds a function - assumes a return type of DSO_FUNC_TYPE. This should
+     * be cast to the real function prototype by the caller. Platforms that
+     * don't have compatible representations for different prototypes (this
+     * is possible within ANSI C) are highly unlikely to have shared
+     * libraries at all, let alone a DSO_METHOD implemented for them.
+     */
+    DSO_FUNC_TYPE (*dso_bind_func) (DSO *dso, const char *symname);
+    /*
+     * The generic (yuck) "ctrl()" function. NB: Negative return values
+     * (rather than zero) indicate errors.
+     */
+    long (*dso_ctrl) (DSO *dso, int cmd, long larg, void *parg);
+    /*
+     * The default DSO_METHOD-specific function for converting filenames to a
+     * canonical native form.
+     */
+    DSO_NAME_CONVERTER_FUNC dso_name_converter;
+    /*
+     * The default DSO_METHOD-specific function for converting filenames to a
+     * canonical native form.
+     */
+    DSO_MERGER_FUNC dso_merger;
+    /* [De]Initialisation handlers. */
+    int (*init) (DSO *dso);
+    int (*finish) (DSO *dso);
+    /* Return pathname of the module containing location */
+    int (*pathbyaddr) (void *addr, char *path, int sz);
+    /* Perform global symbol lookup, i.e. among *all* modules */
+    void *(*globallookup) (const char *symname);
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_openssl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_openssl.c
new file mode 100644
index 000000000..6626331e9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_openssl.c
@@ -0,0 +1,22 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "dso_locl.h"
+
+#if !defined(DSO_VMS) && !defined(DSO_DLCFN) && !defined(DSO_DL) && !defined(DSO_WIN32) && !defined(DSO_DLFCN)
+
+static DSO_METHOD dso_meth_null = {
+    "NULL shared library method"
+};
+
+DSO_METHOD *DSO_METHOD_openssl(void)
+{
+    return &dso_meth_null;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_vms.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_vms.c
new file mode 100644
index 000000000..178e72579
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_vms.c
@@ -0,0 +1,466 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "dso_locl.h"
+
+#ifdef OPENSSL_SYS_VMS
+
+# pragma message disable DOLLARID
+# include <errno.h>
+# include <rms.h>
+# include <lib$routines.h>
+# include <libfisdef.h>
+# include <stsdef.h>
+# include <descrip.h>
+# include <starlet.h>
+# include "../vms_rms.h"
+
+/* Some compiler options may mask the declaration of "_malloc32". */
+# if __INITIAL_POINTER_SIZE && defined _ANSI_C_SOURCE
+#  if __INITIAL_POINTER_SIZE == 64
+#   pragma pointer_size save
+#   pragma pointer_size 32
+void *_malloc32(__size_t);
+#   pragma pointer_size restore
+#  endif                        /* __INITIAL_POINTER_SIZE == 64 */
+# endif                         /* __INITIAL_POINTER_SIZE && defined
+                                 * _ANSI_C_SOURCE */
+
+# pragma message disable DOLLARID
+
+static int vms_load(DSO *dso);
+static int vms_unload(DSO *dso);
+static DSO_FUNC_TYPE vms_bind_func(DSO *dso, const char *symname);
+static char *vms_name_converter(DSO *dso, const char *filename);
+static char *vms_merger(DSO *dso, const char *filespec1,
+                        const char *filespec2);
+
+static DSO_METHOD dso_meth_vms = {
+    "OpenSSL 'VMS' shared library method",
+    vms_load,
+    NULL,                       /* unload */
+    vms_bind_func,
+    NULL,                       /* ctrl */
+    vms_name_converter,
+    vms_merger,
+    NULL,                       /* init */
+    NULL,                       /* finish */
+    NULL,                       /* pathbyaddr */
+    NULL                        /* globallookup */
+};
+
+/*
+ * On VMS, the only "handle" is the file name.  LIB$FIND_IMAGE_SYMBOL depends
+ * on the reference to the file name being the same for all calls regarding
+ * one shared image, so we'll just store it in an instance of the following
+ * structure and put a pointer to that instance in the meth_data stack.
+ */
+typedef struct dso_internal_st {
+    /*
+     * This should contain the name only, no directory, no extension, nothing
+     * but a name.
+     */
+    struct dsc$descriptor_s filename_dsc;
+    char filename[NAMX_MAXRSS + 1];
+    /*
+     * This contains whatever is not in filename, if needed. Normally not
+     * defined.
+     */
+    struct dsc$descriptor_s imagename_dsc;
+    char imagename[NAMX_MAXRSS + 1];
+} DSO_VMS_INTERNAL;
+
+DSO_METHOD *DSO_METHOD_openssl(void)
+{
+    return &dso_meth_vms;
+}
+
+static int vms_load(DSO *dso)
+{
+    void *ptr = NULL;
+    /* See applicable comments in dso_dl.c */
+    char *filename = DSO_convert_filename(dso, NULL);
+
+/* Ensure 32-bit pointer for "p", and appropriate malloc() function. */
+# if __INITIAL_POINTER_SIZE == 64
+#  define DSO_MALLOC _malloc32
+#  pragma pointer_size save
+#  pragma pointer_size 32
+# else                          /* __INITIAL_POINTER_SIZE == 64 */
+#  define DSO_MALLOC OPENSSL_malloc
+# endif                         /* __INITIAL_POINTER_SIZE == 64 [else] */
+
+    DSO_VMS_INTERNAL *p = NULL;
+
+# if __INITIAL_POINTER_SIZE == 64
+#  pragma pointer_size restore
+# endif                         /* __INITIAL_POINTER_SIZE == 64 */
+
+    const char *sp1, *sp2;      /* Search result */
+    const char *ext = NULL;     /* possible extension to add */
+
+    if (filename == NULL) {
+        DSOerr(DSO_F_VMS_LOAD, DSO_R_NO_FILENAME);
+        goto err;
+    }
+
+    /*-
+     * A file specification may look like this:
+     *
+     *      node::dev:[dir-spec]name.type;ver
+     *
+     * or (for compatibility with TOPS-20):
+     *
+     *      node::dev:<dir-spec>name.type;ver
+     *
+     * and the dir-spec uses '.' as separator.  Also, a dir-spec
+     * may consist of several parts, with mixed use of [] and <>:
+     *
+     *      [dir1.]<dir2>
+     *
+     * We need to split the file specification into the name and
+     * the rest (both before and after the name itself).
+     */
+    /*
+     * Start with trying to find the end of a dir-spec, and save the position
+     * of the byte after in sp1
+     */
+    sp1 = strrchr(filename, ']');
+    sp2 = strrchr(filename, '>');
+    if (sp1 == NULL)
+        sp1 = sp2;
+    if (sp2 != NULL && sp2 > sp1)
+        sp1 = sp2;
+    if (sp1 == NULL)
+        sp1 = strrchr(filename, ':');
+    if (sp1 == NULL)
+        sp1 = filename;
+    else
+        sp1++;                  /* The byte after the found character */
+    /* Now, let's see if there's a type, and save the position in sp2 */
+    sp2 = strchr(sp1, '.');
+    /*
+     * If there is a period and the next character is a semi-colon,
+     * we need to add an extension
+     */
+    if (sp2 != NULL && sp2[1] == ';')
+        ext = ".EXE";
+    /*
+     * If we found it, that's where we'll cut.  Otherwise, look for a version
+     * number and save the position in sp2
+     */
+    if (sp2 == NULL) {
+        sp2 = strchr(sp1, ';');
+        ext = ".EXE";
+    }
+    /*
+     * If there was still nothing to find, set sp2 to point at the end of the
+     * string
+     */
+    if (sp2 == NULL)
+        sp2 = sp1 + strlen(sp1);
+
+    /* Check that we won't get buffer overflows */
+    if (sp2 - sp1 > FILENAME_MAX
+        || (sp1 - filename) + strlen(sp2) > FILENAME_MAX) {
+        DSOerr(DSO_F_VMS_LOAD, DSO_R_FILENAME_TOO_BIG);
+        goto err;
+    }
+
+    p = DSO_MALLOC(sizeof(*p));
+    if (p == NULL) {
+        DSOerr(DSO_F_VMS_LOAD, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    strncpy(p->filename, sp1, sp2 - sp1);
+    p->filename[sp2 - sp1] = '\0';
+
+    strncpy(p->imagename, filename, sp1 - filename);
+    p->imagename[sp1 - filename] = '\0';
+    if (ext) {
+        strcat(p->imagename, ext);
+        if (*sp2 == '.')
+            sp2++;
+    }
+    strcat(p->imagename, sp2);
+
+    p->filename_dsc.dsc$w_length = strlen(p->filename);
+    p->filename_dsc.dsc$b_dtype = DSC$K_DTYPE_T;
+    p->filename_dsc.dsc$b_class = DSC$K_CLASS_S;
+    p->filename_dsc.dsc$a_pointer = p->filename;
+    p->imagename_dsc.dsc$w_length = strlen(p->imagename);
+    p->imagename_dsc.dsc$b_dtype = DSC$K_DTYPE_T;
+    p->imagename_dsc.dsc$b_class = DSC$K_CLASS_S;
+    p->imagename_dsc.dsc$a_pointer = p->imagename;
+
+    if (!sk_void_push(dso->meth_data, (char *)p)) {
+        DSOerr(DSO_F_VMS_LOAD, DSO_R_STACK_ERROR);
+        goto err;
+    }
+
+    /* Success (for now, we lie.  We actually do not know...) */
+    dso->loaded_filename = filename;
+    return 1;
+ err:
+    /* Cleanup! */
+    OPENSSL_free(p);
+    OPENSSL_free(filename);
+    return 0;
+}
+
+/*
+ * Note that this doesn't actually unload the shared image, as there is no
+ * such thing in VMS.  Next time it get loaded again, a new copy will
+ * actually be loaded.
+ */
+static int vms_unload(DSO *dso)
+{
+    DSO_VMS_INTERNAL *p;
+    if (dso == NULL) {
+        DSOerr(DSO_F_VMS_UNLOAD, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    if (sk_void_num(dso->meth_data) < 1)
+        return 1;
+    p = (DSO_VMS_INTERNAL *)sk_void_pop(dso->meth_data);
+    if (p == NULL) {
+        DSOerr(DSO_F_VMS_UNLOAD, DSO_R_NULL_HANDLE);
+        return 0;
+    }
+    /* Cleanup */
+    OPENSSL_free(p);
+    return 1;
+}
+
+/*
+ * We must do this in a separate function because of the way the exception
+ * handler works (it makes this function return
+ */
+static int do_find_symbol(DSO_VMS_INTERNAL *ptr,
+                          struct dsc$descriptor_s *symname_dsc, void **sym,
+                          unsigned long flags)
+{
+    /*
+     * Make sure that signals are caught and returned instead of aborting the
+     * program.  The exception handler gets unestablished automatically on
+     * return from this function.
+     */
+    lib$establish(lib$sig_to_ret);
+
+    if (ptr->imagename_dsc.dsc$w_length)
+        return lib$find_image_symbol(&ptr->filename_dsc,
+                                     symname_dsc, sym,
+                                     &ptr->imagename_dsc, flags);
+    else
+        return lib$find_image_symbol(&ptr->filename_dsc,
+                                     symname_dsc, sym, 0, flags);
+}
+
+# ifndef LIB$M_FIS_MIXEDCASE
+#  define LIB$M_FIS_MIXEDCASE (1 << 4);
+# endif
+void vms_bind_sym(DSO *dso, const char *symname, void **sym)
+{
+    DSO_VMS_INTERNAL *ptr;
+    int status = 0;
+    struct dsc$descriptor_s symname_dsc;
+
+/* Arrange 32-bit pointer to (copied) string storage, if needed. */
+# if __INITIAL_POINTER_SIZE == 64
+#  define SYMNAME symname_32p
+#  pragma pointer_size save
+#  pragma pointer_size 32
+    char *symname_32p;
+#  pragma pointer_size restore
+    char symname_32[NAMX_MAXRSS + 1];
+# else                          /* __INITIAL_POINTER_SIZE == 64 */
+#  define SYMNAME ((char *) symname)
+# endif                         /* __INITIAL_POINTER_SIZE == 64 [else] */
+
+    *sym = NULL;
+
+    if ((dso == NULL) || (symname == NULL)) {
+        DSOerr(DSO_F_VMS_BIND_SYM, ERR_R_PASSED_NULL_PARAMETER);
+        return;
+    }
+# if __INITIAL_POINTER_SIZE == 64
+    /* Copy the symbol name to storage with a 32-bit pointer. */
+    symname_32p = symname_32;
+    strcpy(symname_32p, symname);
+# endif                         /* __INITIAL_POINTER_SIZE == 64 [else] */
+
+    symname_dsc.dsc$w_length = strlen(SYMNAME);
+    symname_dsc.dsc$b_dtype = DSC$K_DTYPE_T;
+    symname_dsc.dsc$b_class = DSC$K_CLASS_S;
+    symname_dsc.dsc$a_pointer = SYMNAME;
+
+    if (sk_void_num(dso->meth_data) < 1) {
+        DSOerr(DSO_F_VMS_BIND_SYM, DSO_R_STACK_ERROR);
+        return;
+    }
+    ptr = (DSO_VMS_INTERNAL *)sk_void_value(dso->meth_data,
+                                            sk_void_num(dso->meth_data) - 1);
+    if (ptr == NULL) {
+        DSOerr(DSO_F_VMS_BIND_SYM, DSO_R_NULL_HANDLE);
+        return;
+    }
+
+    status = do_find_symbol(ptr, &symname_dsc, sym, LIB$M_FIS_MIXEDCASE);
+
+    if (!$VMS_STATUS_SUCCESS(status))
+        status = do_find_symbol(ptr, &symname_dsc, sym, 0);
+
+    if (!$VMS_STATUS_SUCCESS(status)) {
+        unsigned short length;
+        char errstring[257];
+        struct dsc$descriptor_s errstring_dsc;
+
+        errstring_dsc.dsc$w_length = sizeof(errstring);
+        errstring_dsc.dsc$b_dtype = DSC$K_DTYPE_T;
+        errstring_dsc.dsc$b_class = DSC$K_CLASS_S;
+        errstring_dsc.dsc$a_pointer = errstring;
+
+        *sym = NULL;
+
+        status = sys$getmsg(status, &length, &errstring_dsc, 1, 0);
+
+        if (!$VMS_STATUS_SUCCESS(status))
+            lib$signal(status); /* This is really bad.  Abort! */
+        else {
+            errstring[length] = '\0';
+
+            DSOerr(DSO_F_VMS_BIND_SYM, DSO_R_SYM_FAILURE);
+            if (ptr->imagename_dsc.dsc$w_length)
+                ERR_add_error_data(9,
+                                   "Symbol ", symname,
+                                   " in ", ptr->filename,
+                                   " (", ptr->imagename, ")",
+                                   ": ", errstring);
+            else
+                ERR_add_error_data(6,
+                                   "Symbol ", symname,
+                                   " in ", ptr->filename, ": ", errstring);
+        }
+        return;
+    }
+    return;
+}
+
+static DSO_FUNC_TYPE vms_bind_func(DSO *dso, const char *symname)
+{
+    DSO_FUNC_TYPE sym = 0;
+    vms_bind_sym(dso, symname, (void **)&sym);
+    return sym;
+}
+
+static char *vms_merger(DSO *dso, const char *filespec1,
+                        const char *filespec2)
+{
+    int status;
+    int filespec1len, filespec2len;
+    struct FAB fab;
+    struct NAMX_STRUCT nam;
+    char esa[NAMX_MAXRSS + 1];
+    char *merged;
+
+/* Arrange 32-bit pointer to (copied) string storage, if needed. */
+# if __INITIAL_POINTER_SIZE == 64
+#  define FILESPEC1 filespec1_32p;
+#  define FILESPEC2 filespec2_32p;
+#  pragma pointer_size save
+#  pragma pointer_size 32
+    char *filespec1_32p;
+    char *filespec2_32p;
+#  pragma pointer_size restore
+    char filespec1_32[NAMX_MAXRSS + 1];
+    char filespec2_32[NAMX_MAXRSS + 1];
+# else                          /* __INITIAL_POINTER_SIZE == 64 */
+#  define FILESPEC1 ((char *) filespec1)
+#  define FILESPEC2 ((char *) filespec2)
+# endif                         /* __INITIAL_POINTER_SIZE == 64 [else] */
+
+    if (!filespec1)
+        filespec1 = "";
+    if (!filespec2)
+        filespec2 = "";
+    filespec1len = strlen(filespec1);
+    filespec2len = strlen(filespec2);
+
+# if __INITIAL_POINTER_SIZE == 64
+    /* Copy the file names to storage with a 32-bit pointer. */
+    filespec1_32p = filespec1_32;
+    filespec2_32p = filespec2_32;
+    strcpy(filespec1_32p, filespec1);
+    strcpy(filespec2_32p, filespec2);
+# endif                         /* __INITIAL_POINTER_SIZE == 64 [else] */
+
+    fab = cc$rms_fab;
+    nam = CC_RMS_NAMX;
+
+    FAB_OR_NAML(fab, nam).FAB_OR_NAML_FNA = FILESPEC1;
+    FAB_OR_NAML(fab, nam).FAB_OR_NAML_FNS = filespec1len;
+    FAB_OR_NAML(fab, nam).FAB_OR_NAML_DNA = FILESPEC2;
+    FAB_OR_NAML(fab, nam).FAB_OR_NAML_DNS = filespec2len;
+    NAMX_DNA_FNA_SET(fab)
+
+        nam.NAMX_ESA = esa;
+    nam.NAMX_ESS = NAMX_MAXRSS;
+    nam.NAMX_NOP = NAM$M_SYNCHK | NAM$M_PWD;
+    SET_NAMX_NO_SHORT_UPCASE(nam);
+
+    fab.FAB_NAMX = &nam;
+
+    status = sys$parse(&fab, 0, 0);
+
+    if (!$VMS_STATUS_SUCCESS(status)) {
+        unsigned short length;
+        char errstring[257];
+        struct dsc$descriptor_s errstring_dsc;
+
+        errstring_dsc.dsc$w_length = sizeof(errstring);
+        errstring_dsc.dsc$b_dtype = DSC$K_DTYPE_T;
+        errstring_dsc.dsc$b_class = DSC$K_CLASS_S;
+        errstring_dsc.dsc$a_pointer = errstring;
+
+        status = sys$getmsg(status, &length, &errstring_dsc, 1, 0);
+
+        if (!$VMS_STATUS_SUCCESS(status))
+            lib$signal(status); /* This is really bad.  Abort! */
+        else {
+            errstring[length] = '\0';
+
+            DSOerr(DSO_F_VMS_MERGER, DSO_R_FAILURE);
+            ERR_add_error_data(7,
+                               "filespec \"", filespec1, "\", ",
+                               "defaults \"", filespec2, "\": ", errstring);
+        }
+        return NULL;
+    }
+
+    merged = OPENSSL_malloc(nam.NAMX_ESL + 1);
+    if (merged == NULL)
+        goto malloc_err;
+    strncpy(merged, nam.NAMX_ESA, nam.NAMX_ESL);
+    merged[nam.NAMX_ESL] = '\0';
+    return merged;
+ malloc_err:
+    DSOerr(DSO_F_VMS_MERGER, ERR_R_MALLOC_FAILURE);
+}
+
+static char *vms_name_converter(DSO *dso, const char *filename)
+{
+    int len = strlen(filename);
+    char *not_translated = OPENSSL_malloc(len + 1);
+    if (not_translated != NULL)
+        strcpy(not_translated, filename);
+    return not_translated;
+}
+
+#endif                          /* OPENSSL_SYS_VMS */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_win32.c b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_win32.c
new file mode 100644
index 000000000..0bbf5b518
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/dso/dso_win32.c
@@ -0,0 +1,566 @@
+/*
+ * Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include "dso_locl.h"
+
+#if defined(DSO_WIN32)
+
+# ifdef _WIN32_WCE
+#  if _WIN32_WCE < 300
+static FARPROC GetProcAddressA(HMODULE hModule, LPCSTR lpProcName)
+{
+    WCHAR lpProcNameW[64];
+    int i;
+
+    for (i = 0; lpProcName[i] && i < 64; i++)
+        lpProcNameW[i] = (WCHAR)lpProcName[i];
+    if (i == 64)
+        return NULL;
+    lpProcNameW[i] = 0;
+
+    return GetProcAddressW(hModule, lpProcNameW);
+}
+#  endif
+#  undef GetProcAddress
+#  define GetProcAddress GetProcAddressA
+
+static HINSTANCE LoadLibraryA(LPCSTR lpLibFileName)
+{
+    WCHAR *fnamw;
+    size_t len_0 = strlen(lpLibFileName) + 1, i;
+
+#  ifdef _MSC_VER
+    fnamw = (WCHAR *)_alloca(len_0 * sizeof(WCHAR));
+#  else
+    fnamw = (WCHAR *)alloca(len_0 * sizeof(WCHAR));
+#  endif
+    if (fnamw == NULL) {
+        SetLastError(ERROR_NOT_ENOUGH_MEMORY);
+        return NULL;
+    }
+#  if defined(_WIN32_WCE) && _WIN32_WCE>=101
+    if (!MultiByteToWideChar(CP_ACP, 0, lpLibFileName, len_0, fnamw, len_0))
+#  endif
+        for (i = 0; i < len_0; i++)
+            fnamw[i] = (WCHAR)lpLibFileName[i];
+
+    return LoadLibraryW(fnamw);
+}
+# endif
+
+/* Part of the hack in "win32_load" ... */
+# define DSO_MAX_TRANSLATED_SIZE 256
+
+static int win32_load(DSO *dso);
+static int win32_unload(DSO *dso);
+static DSO_FUNC_TYPE win32_bind_func(DSO *dso, const char *symname);
+static char *win32_name_converter(DSO *dso, const char *filename);
+static char *win32_merger(DSO *dso, const char *filespec1,
+                          const char *filespec2);
+static void *win32_globallookup(const char *name);
+
+static const char *openssl_strnchr(const char *string, int c, size_t len);
+
+static DSO_METHOD dso_meth_win32 = {
+    "OpenSSL 'win32' shared library method",
+    win32_load,
+    win32_unload,
+    win32_bind_func,
+    NULL,                       /* ctrl */
+    win32_name_converter,
+    win32_merger,
+    NULL,                       /* init */
+    NULL,                       /* finish */
+    NULL,                       /* pathbyaddr */
+    win32_globallookup
+};
+
+DSO_METHOD *DSO_METHOD_openssl(void)
+{
+    return &dso_meth_win32;
+}
+
+/*
+ * For this DSO_METHOD, our meth_data STACK will contain; (i) a pointer to
+ * the handle (HINSTANCE) returned from LoadLibrary(), and copied.
+ */
+
+static int win32_load(DSO *dso)
+{
+    HINSTANCE h = NULL, *p = NULL;
+    /* See applicable comments from dso_dl.c */
+    char *filename = DSO_convert_filename(dso, NULL);
+
+    if (filename == NULL) {
+        DSOerr(DSO_F_WIN32_LOAD, DSO_R_NO_FILENAME);
+        goto err;
+    }
+    h = LoadLibraryA(filename);
+    if (h == NULL) {
+        DSOerr(DSO_F_WIN32_LOAD, DSO_R_LOAD_FAILED);
+        ERR_add_error_data(3, "filename(", filename, ")");
+        goto err;
+    }
+    p = OPENSSL_malloc(sizeof(*p));
+    if (p == NULL) {
+        DSOerr(DSO_F_WIN32_LOAD, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    *p = h;
+    if (!sk_void_push(dso->meth_data, p)) {
+        DSOerr(DSO_F_WIN32_LOAD, DSO_R_STACK_ERROR);
+        goto err;
+    }
+    /* Success */
+    dso->loaded_filename = filename;
+    return 1;
+ err:
+    /* Cleanup ! */
+    OPENSSL_free(filename);
+    OPENSSL_free(p);
+    if (h != NULL)
+        FreeLibrary(h);
+    return 0;
+}
+
+static int win32_unload(DSO *dso)
+{
+    HINSTANCE *p;
+    if (dso == NULL) {
+        DSOerr(DSO_F_WIN32_UNLOAD, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    if (sk_void_num(dso->meth_data) < 1)
+        return 1;
+    p = sk_void_pop(dso->meth_data);
+    if (p == NULL) {
+        DSOerr(DSO_F_WIN32_UNLOAD, DSO_R_NULL_HANDLE);
+        return 0;
+    }
+    if (!FreeLibrary(*p)) {
+        DSOerr(DSO_F_WIN32_UNLOAD, DSO_R_UNLOAD_FAILED);
+        /*
+         * We should push the value back onto the stack in case of a retry.
+         */
+        sk_void_push(dso->meth_data, p);
+        return 0;
+    }
+    /* Cleanup */
+    OPENSSL_free(p);
+    return 1;
+}
+
+static DSO_FUNC_TYPE win32_bind_func(DSO *dso, const char *symname)
+{
+    HINSTANCE *ptr;
+    union {
+        void *p;
+        FARPROC f;
+    } sym;
+
+    if ((dso == NULL) || (symname == NULL)) {
+        DSOerr(DSO_F_WIN32_BIND_FUNC, ERR_R_PASSED_NULL_PARAMETER);
+        return NULL;
+    }
+    if (sk_void_num(dso->meth_data) < 1) {
+        DSOerr(DSO_F_WIN32_BIND_FUNC, DSO_R_STACK_ERROR);
+        return NULL;
+    }
+    ptr = sk_void_value(dso->meth_data, sk_void_num(dso->meth_data) - 1);
+    if (ptr == NULL) {
+        DSOerr(DSO_F_WIN32_BIND_FUNC, DSO_R_NULL_HANDLE);
+        return NULL;
+    }
+    sym.f = GetProcAddress(*ptr, symname);
+    if (sym.p == NULL) {
+        DSOerr(DSO_F_WIN32_BIND_FUNC, DSO_R_SYM_FAILURE);
+        ERR_add_error_data(3, "symname(", symname, ")");
+        return NULL;
+    }
+    return (DSO_FUNC_TYPE)sym.f;
+}
+
+struct file_st {
+    const char *node;
+    int nodelen;
+    const char *device;
+    int devicelen;
+    const char *predir;
+    int predirlen;
+    const char *dir;
+    int dirlen;
+    const char *file;
+    int filelen;
+};
+
+static struct file_st *win32_splitter(DSO *dso, const char *filename,
+                                      int assume_last_is_dir)
+{
+    struct file_st *result = NULL;
+    enum { IN_NODE, IN_DEVICE, IN_FILE } position;
+    const char *start = filename;
+    char last;
+
+    if (!filename) {
+        DSOerr(DSO_F_WIN32_SPLITTER, DSO_R_NO_FILENAME);
+        return NULL;
+    }
+
+    result = OPENSSL_zalloc(sizeof(*result));
+    if (result == NULL) {
+        DSOerr(DSO_F_WIN32_SPLITTER, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    position = IN_DEVICE;
+
+    if ((filename[0] == '\\' && filename[1] == '\\')
+        || (filename[0] == '/' && filename[1] == '/')) {
+        position = IN_NODE;
+        filename += 2;
+        start = filename;
+        result->node = start;
+    }
+
+    do {
+        last = filename[0];
+        switch (last) {
+        case ':':
+            if (position != IN_DEVICE) {
+                DSOerr(DSO_F_WIN32_SPLITTER, DSO_R_INCORRECT_FILE_SYNTAX);
+                OPENSSL_free(result);
+                return NULL;
+            }
+            result->device = start;
+            result->devicelen = (int)(filename - start);
+            position = IN_FILE;
+            start = ++filename;
+            result->dir = start;
+            break;
+        case '\\':
+        case '/':
+            if (position == IN_NODE) {
+                result->nodelen = (int)(filename - start);
+                position = IN_FILE;
+                start = ++filename;
+                result->dir = start;
+            } else if (position == IN_DEVICE) {
+                position = IN_FILE;
+                filename++;
+                result->dir = start;
+                result->dirlen = (int)(filename - start);
+                start = filename;
+            } else {
+                filename++;
+                result->dirlen += (int)(filename - start);
+                start = filename;
+            }
+            break;
+        case '\0':
+            if (position == IN_NODE) {
+                result->nodelen = (int)(filename - start);
+            } else {
+                if (filename - start > 0) {
+                    if (assume_last_is_dir) {
+                        if (position == IN_DEVICE) {
+                            result->dir = start;
+                            result->dirlen = 0;
+                        }
+                        result->dirlen += (int)(filename - start);
+                    } else {
+                        result->file = start;
+                        result->filelen = (int)(filename - start);
+                    }
+                }
+            }
+            break;
+        default:
+            filename++;
+            break;
+        }
+    }
+    while (last);
+
+    if (!result->nodelen)
+        result->node = NULL;
+    if (!result->devicelen)
+        result->device = NULL;
+    if (!result->dirlen)
+        result->dir = NULL;
+    if (!result->filelen)
+        result->file = NULL;
+
+    return result;
+}
+
+static char *win32_joiner(DSO *dso, const struct file_st *file_split)
+{
+    int len = 0, offset = 0;
+    char *result = NULL;
+    const char *start;
+
+    if (!file_split) {
+        DSOerr(DSO_F_WIN32_JOINER, ERR_R_PASSED_NULL_PARAMETER);
+        return NULL;
+    }
+    if (file_split->node) {
+        len += 2 + file_split->nodelen; /* 2 for starting \\ */
+        if (file_split->predir || file_split->dir || file_split->file)
+            len++;              /* 1 for ending \ */
+    } else if (file_split->device) {
+        len += file_split->devicelen + 1; /* 1 for ending : */
+    }
+    len += file_split->predirlen;
+    if (file_split->predir && (file_split->dir || file_split->file)) {
+        len++;                  /* 1 for ending \ */
+    }
+    len += file_split->dirlen;
+    if (file_split->dir && file_split->file) {
+        len++;                  /* 1 for ending \ */
+    }
+    len += file_split->filelen;
+
+    if (!len) {
+        DSOerr(DSO_F_WIN32_JOINER, DSO_R_EMPTY_FILE_STRUCTURE);
+        return NULL;
+    }
+
+    result = OPENSSL_malloc(len + 1);
+    if (result == NULL) {
+        DSOerr(DSO_F_WIN32_JOINER, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if (file_split->node) {
+        strcpy(&result[offset], "\\\\");
+        offset += 2;
+        strncpy(&result[offset], file_split->node, file_split->nodelen);
+        offset += file_split->nodelen;
+        if (file_split->predir || file_split->dir || file_split->file) {
+            result[offset] = '\\';
+            offset++;
+        }
+    } else if (file_split->device) {
+        strncpy(&result[offset], file_split->device, file_split->devicelen);
+        offset += file_split->devicelen;
+        result[offset] = ':';
+        offset++;
+    }
+    start = file_split->predir;
+    while (file_split->predirlen > (start - file_split->predir)) {
+        const char *end = openssl_strnchr(start, '/',
+                                          file_split->predirlen - (start -
+                                                                   file_split->predir));
+        if (!end)
+            end = start
+                + file_split->predirlen - (start - file_split->predir);
+        strncpy(&result[offset], start, end - start);
+        offset += (int)(end - start);
+        result[offset] = '\\';
+        offset++;
+        start = end + 1;
+    }
+    start = file_split->dir;
+    while (file_split->dirlen > (start - file_split->dir)) {
+        const char *end = openssl_strnchr(start, '/',
+                                          file_split->dirlen - (start -
+                                                                file_split->dir));
+        if (!end)
+            end = start + file_split->dirlen - (start - file_split->dir);
+        strncpy(&result[offset], start, end - start);
+        offset += (int)(end - start);
+        result[offset] = '\\';
+        offset++;
+        start = end + 1;
+    }
+    strncpy(&result[offset], file_split->file, file_split->filelen);
+    offset += file_split->filelen;
+    result[offset] = '\0';
+    return result;
+}
+
+static char *win32_merger(DSO *dso, const char *filespec1,
+                          const char *filespec2)
+{
+    char *merged = NULL;
+    struct file_st *filespec1_split = NULL;
+    struct file_st *filespec2_split = NULL;
+
+    if (!filespec1 && !filespec2) {
+        DSOerr(DSO_F_WIN32_MERGER, ERR_R_PASSED_NULL_PARAMETER);
+        return NULL;
+    }
+    if (!filespec2) {
+        merged = OPENSSL_strdup(filespec1);
+        if (merged == NULL) {
+            DSOerr(DSO_F_WIN32_MERGER, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+    } else if (!filespec1) {
+        merged = OPENSSL_strdup(filespec2);
+        if (merged == NULL) {
+            DSOerr(DSO_F_WIN32_MERGER, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+    } else {
+        filespec1_split = win32_splitter(dso, filespec1, 0);
+        if (!filespec1_split) {
+            DSOerr(DSO_F_WIN32_MERGER, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+        filespec2_split = win32_splitter(dso, filespec2, 1);
+        if (!filespec2_split) {
+            DSOerr(DSO_F_WIN32_MERGER, ERR_R_MALLOC_FAILURE);
+            OPENSSL_free(filespec1_split);
+            return NULL;
+        }
+
+        /* Fill in into filespec1_split */
+        if (!filespec1_split->node && !filespec1_split->device) {
+            filespec1_split->node = filespec2_split->node;
+            filespec1_split->nodelen = filespec2_split->nodelen;
+            filespec1_split->device = filespec2_split->device;
+            filespec1_split->devicelen = filespec2_split->devicelen;
+        }
+        if (!filespec1_split->dir) {
+            filespec1_split->dir = filespec2_split->dir;
+            filespec1_split->dirlen = filespec2_split->dirlen;
+        } else if (filespec1_split->dir[0] != '\\'
+                   && filespec1_split->dir[0] != '/') {
+            filespec1_split->predir = filespec2_split->dir;
+            filespec1_split->predirlen = filespec2_split->dirlen;
+        }
+        if (!filespec1_split->file) {
+            filespec1_split->file = filespec2_split->file;
+            filespec1_split->filelen = filespec2_split->filelen;
+        }
+
+        merged = win32_joiner(dso, filespec1_split);
+    }
+    OPENSSL_free(filespec1_split);
+    OPENSSL_free(filespec2_split);
+    return merged;
+}
+
+static char *win32_name_converter(DSO *dso, const char *filename)
+{
+    char *translated;
+    int len, transform;
+
+    len = strlen(filename);
+    transform = ((strstr(filename, "/") == NULL) &&
+                 (strstr(filename, "\\") == NULL) &&
+                 (strstr(filename, ":") == NULL));
+    if (transform)
+        /* We will convert this to "%s.dll" */
+        translated = OPENSSL_malloc(len + 5);
+    else
+        /* We will simply duplicate filename */
+        translated = OPENSSL_malloc(len + 1);
+    if (translated == NULL) {
+        DSOerr(DSO_F_WIN32_NAME_CONVERTER, DSO_R_NAME_TRANSLATION_FAILED);
+        return NULL;
+    }
+    if (transform)
+        sprintf(translated, "%s.dll", filename);
+    else
+        sprintf(translated, "%s", filename);
+    return translated;
+}
+
+static const char *openssl_strnchr(const char *string, int c, size_t len)
+{
+    size_t i;
+    const char *p;
+    for (i = 0, p = string; i < len && *p; i++, p++) {
+        if (*p == c)
+            return p;
+    }
+    return NULL;
+}
+
+# include <tlhelp32.h>
+# ifdef _WIN32_WCE
+#  define DLLNAME "TOOLHELP.DLL"
+# else
+#  ifdef MODULEENTRY32
+#   undef MODULEENTRY32         /* unmask the ASCII version! */
+#  endif
+#  define DLLNAME "KERNEL32.DLL"
+# endif
+
+typedef HANDLE(WINAPI *CREATETOOLHELP32SNAPSHOT) (DWORD, DWORD);
+typedef BOOL(WINAPI *CLOSETOOLHELP32SNAPSHOT) (HANDLE);
+typedef BOOL(WINAPI *MODULE32) (HANDLE, MODULEENTRY32 *);
+
+static void *win32_globallookup(const char *name)
+{
+    HMODULE dll;
+    HANDLE hModuleSnap = INVALID_HANDLE_VALUE;
+    MODULEENTRY32 me32;
+    CREATETOOLHELP32SNAPSHOT create_snap;
+    CLOSETOOLHELP32SNAPSHOT close_snap;
+    MODULE32 module_first, module_next;
+    union {
+        void *p;
+        FARPROC f;
+    } ret = { NULL };
+
+    dll = LoadLibrary(TEXT(DLLNAME));
+    if (dll == NULL) {
+        DSOerr(DSO_F_WIN32_GLOBALLOOKUP, DSO_R_UNSUPPORTED);
+        return NULL;
+    }
+
+    create_snap = (CREATETOOLHELP32SNAPSHOT)
+        GetProcAddress(dll, "CreateToolhelp32Snapshot");
+    if (create_snap == NULL) {
+        FreeLibrary(dll);
+        DSOerr(DSO_F_WIN32_GLOBALLOOKUP, DSO_R_UNSUPPORTED);
+        return NULL;
+    }
+    /* We take the rest for granted... */
+# ifdef _WIN32_WCE
+    close_snap = (CLOSETOOLHELP32SNAPSHOT)
+        GetProcAddress(dll, "CloseToolhelp32Snapshot");
+# else
+    close_snap = (CLOSETOOLHELP32SNAPSHOT) CloseHandle;
+# endif
+    module_first = (MODULE32) GetProcAddress(dll, "Module32First");
+    module_next = (MODULE32) GetProcAddress(dll, "Module32Next");
+
+    hModuleSnap = (*create_snap) (TH32CS_SNAPMODULE, 0);
+    if (hModuleSnap == INVALID_HANDLE_VALUE) {
+        FreeLibrary(dll);
+        DSOerr(DSO_F_WIN32_GLOBALLOOKUP, DSO_R_UNSUPPORTED);
+        return NULL;
+    }
+
+    me32.dwSize = sizeof(me32);
+
+    if (!(*module_first) (hModuleSnap, &me32)) {
+        (*close_snap) (hModuleSnap);
+        FreeLibrary(dll);
+        return NULL;
+    }
+
+    do {
+        if ((ret.f = GetProcAddress(me32.hModule, name))) {
+            (*close_snap) (hModuleSnap);
+            FreeLibrary(dll);
+            return ret.p;
+        }
+    } while ((*module_next) (hModuleSnap, &me32));
+
+    (*close_snap) (hModuleSnap);
+    FreeLibrary(dll);
+    return NULL;
+}
+#endif                          /* DSO_WIN32 */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ebcdic.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ebcdic.c
new file mode 100644
index 000000000..2a8ca6101
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ebcdic.c
@@ -0,0 +1,361 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+# include <openssl/e_os2.h>
+#ifndef CHARSET_EBCDIC
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <openssl/ebcdic.h>
+
+# ifdef CHARSET_EBCDIC_TEST
+/*
+ * Here we're looking to test the EBCDIC code on an ASCII system so we don't do
+ * any translation in these tables at all.
+ */
+
+/* The ebcdic-to-ascii table: */
+const unsigned char os_toascii[256] = {
+    0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+    0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
+    0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
+    0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
+    0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27,
+    0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f,
+    0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
+    0x38, 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f,
+    0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47,
+    0x48, 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f,
+    0x50, 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57,
+    0x58, 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f,
+    0x60, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67,
+    0x68, 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f,
+    0x70, 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77,
+    0x78, 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f,
+    0x80, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87,
+    0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f,
+    0x90, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97,
+    0x98, 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f,
+    0xa0, 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7,
+    0xa8, 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf,
+    0xb0, 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7,
+    0xb8, 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf,
+    0xc0, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7,
+    0xc8, 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf,
+    0xd0, 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7,
+    0xd8, 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf,
+    0xe0, 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7,
+    0xe8, 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef,
+    0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
+    0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff
+};
+
+/* The ascii-to-ebcdic table: */
+const unsigned char os_toebcdic[256] = {
+    0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+    0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
+    0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
+    0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
+    0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27,
+    0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f,
+    0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
+    0x38, 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f,
+    0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47,
+    0x48, 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f,
+    0x50, 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57,
+    0x58, 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f,
+    0x60, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67,
+    0x68, 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f,
+    0x70, 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77,
+    0x78, 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f,
+    0x80, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87,
+    0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f,
+    0x90, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97,
+    0x98, 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f,
+    0xa0, 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7,
+    0xa8, 0xa9, 0xaa, 0xab, 0xac, 0xad, 0xae, 0xaf,
+    0xb0, 0xb1, 0xb2, 0xb3, 0xb4, 0xb5, 0xb6, 0xb7,
+    0xb8, 0xb9, 0xba, 0xbb, 0xbc, 0xbd, 0xbe, 0xbf,
+    0xc0, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7,
+    0xc8, 0xc9, 0xca, 0xcb, 0xcc, 0xcd, 0xce, 0xcf,
+    0xd0, 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7,
+    0xd8, 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf,
+    0xe0, 0xe1, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, 0xe7,
+    0xe8, 0xe9, 0xea, 0xeb, 0xec, 0xed, 0xee, 0xef,
+    0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
+    0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff
+};
+
+# elif defined(_OSD_POSIX)
+/*
+ * "BS2000 OSD" is a POSIX subsystem on a main frame. It is made by Siemens
+ * AG, Germany, for their BS2000 mainframe machines. Within the POSIX
+ * subsystem, the same character set was chosen as in "native BS2000", namely
+ * EBCDIC. (EDF04)
+ *
+ * The name "ASCII" in these routines is misleading: actually, conversion is
+ * not between EBCDIC and ASCII, but EBCDIC(EDF04) and ISO-8859.1; that means
+ * that (western european) national characters are preserved.
+ *
+ * This table is identical to the one used by rsh/rcp/ftp and other POSIX
+ * tools.
+ */
+
+/* Here's the bijective ebcdic-to-ascii table: */
+const unsigned char os_toascii[256] = {
+    /*
+     * 00
+     */ 0x00, 0x01, 0x02, 0x03, 0x85, 0x09, 0x86, 0x7f,
+    0x87, 0x8d, 0x8e, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, /* ................ */
+    /*
+     * 10
+     */ 0x10, 0x11, 0x12, 0x13, 0x8f, 0x0a, 0x08, 0x97,
+    0x18, 0x19, 0x9c, 0x9d, 0x1c, 0x1d, 0x1e, 0x1f, /* ................ */
+    /*
+     * 20
+     */ 0x80, 0x81, 0x82, 0x83, 0x84, 0x92, 0x17, 0x1b,
+    0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x05, 0x06, 0x07, /* ................ */
+    /*
+     * 30
+     */ 0x90, 0x91, 0x16, 0x93, 0x94, 0x95, 0x96, 0x04,
+    0x98, 0x99, 0x9a, 0x9b, 0x14, 0x15, 0x9e, 0x1a, /* ................ */
+    /*
+     * 40
+     */ 0x20, 0xa0, 0xe2, 0xe4, 0xe0, 0xe1, 0xe3, 0xe5,
+    0xe7, 0xf1, 0x60, 0x2e, 0x3c, 0x28, 0x2b, 0x7c, /* .........`.<(+| */
+    /*
+     * 50
+     */ 0x26, 0xe9, 0xea, 0xeb, 0xe8, 0xed, 0xee, 0xef,
+    0xec, 0xdf, 0x21, 0x24, 0x2a, 0x29, 0x3b, 0x9f, /* &.........!$*);. */
+    /*
+     * 60
+     */ 0x2d, 0x2f, 0xc2, 0xc4, 0xc0, 0xc1, 0xc3, 0xc5,
+    0xc7, 0xd1, 0x5e, 0x2c, 0x25, 0x5f, 0x3e, 0x3f,    /*-/........^,%_>?*/
+    /*
+     * 70
+     */ 0xf8, 0xc9, 0xca, 0xcb, 0xc8, 0xcd, 0xce, 0xcf,
+    0xcc, 0xa8, 0x3a, 0x23, 0x40, 0x27, 0x3d, 0x22, /* ..........:#@'=" */
+    /*
+     * 80
+     */ 0xd8, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67,
+    0x68, 0x69, 0xab, 0xbb, 0xf0, 0xfd, 0xfe, 0xb1, /* .abcdefghi...... */
+    /*
+     * 90
+     */ 0xb0, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f, 0x70,
+    0x71, 0x72, 0xaa, 0xba, 0xe6, 0xb8, 0xc6, 0xa4, /* .jklmnopqr...... */
+    /*
+     * a0
+     */ 0xb5, 0xaf, 0x73, 0x74, 0x75, 0x76, 0x77, 0x78,
+    0x79, 0x7a, 0xa1, 0xbf, 0xd0, 0xdd, 0xde, 0xae, /* ..stuvwxyz...... */
+    /*
+     * b0
+     */ 0xa2, 0xa3, 0xa5, 0xb7, 0xa9, 0xa7, 0xb6, 0xbc,
+    0xbd, 0xbe, 0xac, 0x5b, 0x5c, 0x5d, 0xb4, 0xd7, /* ...........[\].. */
+    /*
+     * c0
+     */ 0xf9, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47,
+    0x48, 0x49, 0xad, 0xf4, 0xf6, 0xf2, 0xf3, 0xf5, /* .ABCDEFGHI...... */
+    /*
+     * d0
+     */ 0xa6, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f, 0x50,
+    0x51, 0x52, 0xb9, 0xfb, 0xfc, 0xdb, 0xfa, 0xff, /* .JKLMNOPQR...... */
+    /*
+     * e0
+     */ 0xd9, 0xf7, 0x53, 0x54, 0x55, 0x56, 0x57, 0x58,
+    0x59, 0x5a, 0xb2, 0xd4, 0xd6, 0xd2, 0xd3, 0xd5, /* ..STUVWXYZ...... */
+    /*
+     * f0
+     */ 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37,
+    0x38, 0x39, 0xb3, 0x7b, 0xdc, 0x7d, 0xda, 0x7e /* 0123456789.{.}.~ */
+};
+
+/* The ascii-to-ebcdic table: */
+const unsigned char os_toebcdic[256] = {
+    /*
+     * 00
+     */ 0x00, 0x01, 0x02, 0x03, 0x37, 0x2d, 0x2e, 0x2f,
+    0x16, 0x05, 0x15, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, /* ................ */
+    /*
+     * 10
+     */ 0x10, 0x11, 0x12, 0x13, 0x3c, 0x3d, 0x32, 0x26,
+    0x18, 0x19, 0x3f, 0x27, 0x1c, 0x1d, 0x1e, 0x1f, /* ................ */
+    /*
+     * 20
+     */ 0x40, 0x5a, 0x7f, 0x7b, 0x5b, 0x6c, 0x50, 0x7d,
+    0x4d, 0x5d, 0x5c, 0x4e, 0x6b, 0x60, 0x4b, 0x61, /* !"#$%&'()*+,-./ */
+    /*
+     * 30
+     */ 0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
+    0xf8, 0xf9, 0x7a, 0x5e, 0x4c, 0x7e, 0x6e, 0x6f, /* 0123456789:;<=>? */
+    /*
+     * 40
+     */ 0x7c, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7,
+    0xc8, 0xc9, 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, /* @ABCDEFGHIJKLMNO */
+    /*
+     * 50
+     */ 0xd7, 0xd8, 0xd9, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6,
+    0xe7, 0xe8, 0xe9, 0xbb, 0xbc, 0xbd, 0x6a, 0x6d, /* PQRSTUVWXYZ[\]^_ */
+    /*
+     * 60
+     */ 0x4a, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87,
+    0x88, 0x89, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, /* `abcdefghijklmno */
+    /*
+     * 70
+     */ 0x97, 0x98, 0x99, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6,
+    0xa7, 0xa8, 0xa9, 0xfb, 0x4f, 0xfd, 0xff, 0x07, /* pqrstuvwxyz{|}~. */
+    /*
+     * 80
+     */ 0x20, 0x21, 0x22, 0x23, 0x24, 0x04, 0x06, 0x08,
+    0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x09, 0x0a, 0x14, /* ................ */
+    /*
+     * 90
+     */ 0x30, 0x31, 0x25, 0x33, 0x34, 0x35, 0x36, 0x17,
+    0x38, 0x39, 0x3a, 0x3b, 0x1a, 0x1b, 0x3e, 0x5f, /* ................ */
+    /*
+     * a0
+     */ 0x41, 0xaa, 0xb0, 0xb1, 0x9f, 0xb2, 0xd0, 0xb5,
+    0x79, 0xb4, 0x9a, 0x8a, 0xba, 0xca, 0xaf, 0xa1, /* ................ */
+    /*
+     * b0
+     */ 0x90, 0x8f, 0xea, 0xfa, 0xbe, 0xa0, 0xb6, 0xb3,
+    0x9d, 0xda, 0x9b, 0x8b, 0xb7, 0xb8, 0xb9, 0xab, /* ................ */
+    /*
+     * c0
+     */ 0x64, 0x65, 0x62, 0x66, 0x63, 0x67, 0x9e, 0x68,
+    0x74, 0x71, 0x72, 0x73, 0x78, 0x75, 0x76, 0x77, /* ................ */
+    /*
+     * d0
+     */ 0xac, 0x69, 0xed, 0xee, 0xeb, 0xef, 0xec, 0xbf,
+    0x80, 0xe0, 0xfe, 0xdd, 0xfc, 0xad, 0xae, 0x59, /* ................ */
+    /*
+     * e0
+     */ 0x44, 0x45, 0x42, 0x46, 0x43, 0x47, 0x9c, 0x48,
+    0x54, 0x51, 0x52, 0x53, 0x58, 0x55, 0x56, 0x57, /* ................ */
+    /*
+     * f0
+     */ 0x8c, 0x49, 0xcd, 0xce, 0xcb, 0xcf, 0xcc, 0xe1,
+    0x70, 0xc0, 0xde, 0xdb, 0xdc, 0x8d, 0x8e, 0xdf /* ................ */
+};
+
+# else /*_OSD_POSIX*/
+
+/*
+ * This code does basic character mapping for IBM's TPF and OS/390 operating
+ * systems. It is a modified version of the BS2000 table.
+ *
+ * Bijective EBCDIC (character set IBM-1047) to US-ASCII table: This table is
+ * bijective - there are no ambiguous or duplicate characters.
+ */
+const unsigned char os_toascii[256] = {
+    0x00, 0x01, 0x02, 0x03, 0x85, 0x09, 0x86, 0x7f, /* 00-0f: */
+    0x87, 0x8d, 0x8e, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, /* ................ */
+    0x10, 0x11, 0x12, 0x13, 0x8f, 0x0a, 0x08, 0x97, /* 10-1f: */
+    0x18, 0x19, 0x9c, 0x9d, 0x1c, 0x1d, 0x1e, 0x1f, /* ................ */
+    0x80, 0x81, 0x82, 0x83, 0x84, 0x92, 0x17, 0x1b, /* 20-2f: */
+    0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x05, 0x06, 0x07, /* ................ */
+    0x90, 0x91, 0x16, 0x93, 0x94, 0x95, 0x96, 0x04, /* 30-3f: */
+    0x98, 0x99, 0x9a, 0x9b, 0x14, 0x15, 0x9e, 0x1a, /* ................ */
+    0x20, 0xa0, 0xe2, 0xe4, 0xe0, 0xe1, 0xe3, 0xe5, /* 40-4f: */
+    0xe7, 0xf1, 0xa2, 0x2e, 0x3c, 0x28, 0x2b, 0x7c, /* ...........<(+| */
+    0x26, 0xe9, 0xea, 0xeb, 0xe8, 0xed, 0xee, 0xef, /* 50-5f: */
+    0xec, 0xdf, 0x21, 0x24, 0x2a, 0x29, 0x3b, 0x5e, /* &.........!$*);^ */
+    0x2d, 0x2f, 0xc2, 0xc4, 0xc0, 0xc1, 0xc3, 0xc5, /* 60-6f: */
+    0xc7, 0xd1, 0xa6, 0x2c, 0x25, 0x5f, 0x3e, 0x3f, /* -/.........,%_>? */
+    0xf8, 0xc9, 0xca, 0xcb, 0xc8, 0xcd, 0xce, 0xcf, /* 70-7f: */
+    0xcc, 0x60, 0x3a, 0x23, 0x40, 0x27, 0x3d, 0x22, /* .........`:#@'=" */
+    0xd8, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67, /* 80-8f: */
+    0x68, 0x69, 0xab, 0xbb, 0xf0, 0xfd, 0xfe, 0xb1, /* .abcdefghi...... */
+    0xb0, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f, 0x70, /* 90-9f: */
+    0x71, 0x72, 0xaa, 0xba, 0xe6, 0xb8, 0xc6, 0xa4, /* .jklmnopqr...... */
+    0xb5, 0x7e, 0x73, 0x74, 0x75, 0x76, 0x77, 0x78, /* a0-af: */
+    0x79, 0x7a, 0xa1, 0xbf, 0xd0, 0x5b, 0xde, 0xae, /* .~stuvwxyz...[.. */
+    0xac, 0xa3, 0xa5, 0xb7, 0xa9, 0xa7, 0xb6, 0xbc, /* b0-bf: */
+    0xbd, 0xbe, 0xdd, 0xa8, 0xaf, 0x5d, 0xb4, 0xd7, /* .............].. */
+    0x7b, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, /* c0-cf: */
+    0x48, 0x49, 0xad, 0xf4, 0xf6, 0xf2, 0xf3, 0xf5, /* {ABCDEFGHI...... */
+    0x7d, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f, 0x50, /* d0-df: */
+    0x51, 0x52, 0xb9, 0xfb, 0xfc, 0xf9, 0xfa, 0xff, /* }JKLMNOPQR...... */
+    0x5c, 0xf7, 0x53, 0x54, 0x55, 0x56, 0x57, 0x58, /* e0-ef: */
+    0x59, 0x5a, 0xb2, 0xd4, 0xd6, 0xd2, 0xd3, 0xd5, /* \.STUVWXYZ...... */
+    0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, /* f0-ff: */
+    0x38, 0x39, 0xb3, 0xdb, 0xdc, 0xd9, 0xda, 0x9f /* 0123456789...... */
+};
+
+/*
+ * The US-ASCII to EBCDIC (character set IBM-1047) table: This table is
+ * bijective (no ambiguous or duplicate characters)
+ */
+const unsigned char os_toebcdic[256] = {
+    0x00, 0x01, 0x02, 0x03, 0x37, 0x2d, 0x2e, 0x2f, /* 00-0f: */
+    0x16, 0x05, 0x15, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, /* ................ */
+    0x10, 0x11, 0x12, 0x13, 0x3c, 0x3d, 0x32, 0x26, /* 10-1f: */
+    0x18, 0x19, 0x3f, 0x27, 0x1c, 0x1d, 0x1e, 0x1f, /* ................ */
+    0x40, 0x5a, 0x7f, 0x7b, 0x5b, 0x6c, 0x50, 0x7d, /* 20-2f: */
+    0x4d, 0x5d, 0x5c, 0x4e, 0x6b, 0x60, 0x4b, 0x61, /* !"#$%&'()*+,-./ */
+    0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7, /* 30-3f: */
+    0xf8, 0xf9, 0x7a, 0x5e, 0x4c, 0x7e, 0x6e, 0x6f, /* 0123456789:;<=>? */
+    0x7c, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7, /* 40-4f: */
+    0xc8, 0xc9, 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, /* @ABCDEFGHIJKLMNO */
+    0xd7, 0xd8, 0xd9, 0xe2, 0xe3, 0xe4, 0xe5, 0xe6, /* 50-5f: */
+    0xe7, 0xe8, 0xe9, 0xad, 0xe0, 0xbd, 0x5f, 0x6d, /* PQRSTUVWXYZ[\]^_ */
+    0x79, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87, /* 60-6f: */
+    0x88, 0x89, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, /* `abcdefghijklmno */
+    0x97, 0x98, 0x99, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, /* 70-7f: */
+    0xa7, 0xa8, 0xa9, 0xc0, 0x4f, 0xd0, 0xa1, 0x07, /* pqrstuvwxyz{|}~. */
+    0x20, 0x21, 0x22, 0x23, 0x24, 0x04, 0x06, 0x08, /* 80-8f: */
+    0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x09, 0x0a, 0x14, /* ................ */
+    0x30, 0x31, 0x25, 0x33, 0x34, 0x35, 0x36, 0x17, /* 90-9f: */
+    0x38, 0x39, 0x3a, 0x3b, 0x1a, 0x1b, 0x3e, 0xff, /* ................ */
+    0x41, 0xaa, 0x4a, 0xb1, 0x9f, 0xb2, 0x6a, 0xb5, /* a0-af: */
+    0xbb, 0xb4, 0x9a, 0x8a, 0xb0, 0xca, 0xaf, 0xbc, /* ................ */
+    0x90, 0x8f, 0xea, 0xfa, 0xbe, 0xa0, 0xb6, 0xb3, /* b0-bf: */
+    0x9d, 0xda, 0x9b, 0x8b, 0xb7, 0xb8, 0xb9, 0xab, /* ................ */
+    0x64, 0x65, 0x62, 0x66, 0x63, 0x67, 0x9e, 0x68, /* c0-cf: */
+    0x74, 0x71, 0x72, 0x73, 0x78, 0x75, 0x76, 0x77, /* ................ */
+    0xac, 0x69, 0xed, 0xee, 0xeb, 0xef, 0xec, 0xbf, /* d0-df: */
+    0x80, 0xfd, 0xfe, 0xfb, 0xfc, 0xba, 0xae, 0x59, /* ................ */
+    0x44, 0x45, 0x42, 0x46, 0x43, 0x47, 0x9c, 0x48, /* e0-ef: */
+    0x54, 0x51, 0x52, 0x53, 0x58, 0x55, 0x56, 0x57, /* ................ */
+    0x8c, 0x49, 0xcd, 0xce, 0xcb, 0xcf, 0xcc, 0xe1, /* f0-ff: */
+    0x70, 0xdd, 0xde, 0xdb, 0xdc, 0x8d, 0x8e, 0xdf /* ................ */
+};
+# endif/*_OSD_POSIX*/
+
+/*
+ * Translate a memory block from EBCDIC (host charset) to ASCII (net charset)
+ * dest and srce may be identical, or separate memory blocks, but should not
+ * overlap. These functions intentionally have an interface compatible to
+ * memcpy(3).
+ */
+
+void *ebcdic2ascii(void *dest, const void *srce, size_t count)
+{
+    unsigned char *udest = dest;
+    const unsigned char *usrce = srce;
+
+    while (count-- != 0) {
+        *udest++ = os_toascii[*usrce++];
+    }
+
+    return dest;
+}
+
+void *ascii2ebcdic(void *dest, const void *srce, size_t count)
+{
+    unsigned char *udest = dest;
+    const unsigned char *usrce = srce;
+
+    while (count-- != 0) {
+        *udest++ = os_toebcdic[*usrce++];
+    }
+
+    return dest;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-armv4.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-armv4.pl
new file mode 100755
index 000000000..83abbdd89
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-armv4.pl
@@ -0,0 +1,1865 @@
+#! /usr/bin/env perl
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# ECP_NISTZ256 module for ARMv4.
+#
+# October 2014.
+#
+# Original ECP_NISTZ256 submission targeting x86_64 is detailed in
+# http://eprint.iacr.org/2013/816. In the process of adaptation
+# original .c module was made 32-bit savvy in order to make this
+# implementation possible.
+#
+#			with/without -DECP_NISTZ256_ASM
+# Cortex-A8		+53-170%
+# Cortex-A9		+76-205%
+# Cortex-A15		+100-316%
+# Snapdragon S4		+66-187%
+#
+# Ranges denote minimum and maximum improvement coefficients depending
+# on benchmark. Lower coefficients are for ECDSA sign, server-side
+# operation. Keep in mind that +200% means 3x improvement.
+
+$flavour = shift;
+if ($flavour=~/\w[\w\-]*\.\w+$/) { $output=$flavour; undef $flavour; }
+else { while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {} }
+
+if ($flavour && $flavour ne "void") {
+    $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+    ( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+    ( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+    die "can't locate arm-xlate.pl";
+
+    open STDOUT,"| \"$^X\" $xlate $flavour $output";
+} else {
+    open STDOUT,">$output";
+}
+
+$code.=<<___;
+#include "arm_arch.h"
+
+.text
+#if defined(__thumb2__)
+.syntax	unified
+.thumb
+#else
+.code	32
+#endif
+___
+########################################################################
+# Convert ecp_nistz256_table.c to layout expected by ecp_nistz_gather_w7
+#
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+open TABLE,"<ecp_nistz256_table.c"		or
+open TABLE,"<${dir}../ecp_nistz256_table.c"	or
+die "failed to open ecp_nistz256_table.c:",$!;
+
+use integer;
+
+foreach(<TABLE>) {
+	s/TOBN\(\s*(0x[0-9a-f]+),\s*(0x[0-9a-f]+)\s*\)/push @arr,hex($2),hex($1)/geo;
+}
+close TABLE;
+
+# See ecp_nistz256_table.c for explanation for why it's 64*16*37.
+# 64*16*37-1 is because $#arr returns last valid index or @arr, not
+# amount of elements.
+die "insane number of elements" if ($#arr != 64*16*37-1);
+
+$code.=<<___;
+.globl	ecp_nistz256_precomputed
+.type	ecp_nistz256_precomputed,%object
+.align	12
+ecp_nistz256_precomputed:
+___
+########################################################################
+# this conversion smashes P256_POINT_AFFINE by individual bytes with
+# 64 byte interval, similar to
+#	1111222233334444
+#	1234123412341234
+for(1..37) {
+	@tbl = splice(@arr,0,64*16);
+	for($i=0;$i<64;$i++) {
+		undef @line;
+		for($j=0;$j<64;$j++) {
+			push @line,(@tbl[$j*16+$i/4]>>(($i%4)*8))&0xff;
+		}
+		$code.=".byte\t";
+		$code.=join(',',map { sprintf "0x%02x",$_} @line);
+		$code.="\n";
+	}
+}
+$code.=<<___;
+.size	ecp_nistz256_precomputed,.-ecp_nistz256_precomputed
+.align	5
+.LRR:	@ 2^512 mod P precomputed for NIST P256 polynomial
+.long	0x00000003, 0x00000000, 0xffffffff, 0xfffffffb
+.long	0xfffffffe, 0xffffffff, 0xfffffffd, 0x00000004
+.Lone:
+.long	1,0,0,0,0,0,0,0
+.asciz	"ECP_NISTZ256 for ARMv4, CRYPTOGAMS by <appro\@openssl.org>"
+.align	6
+___
+
+########################################################################
+# common register layout, note that $t2 is link register, so that if
+# internal subroutine uses $t2, then it has to offload lr...
+
+($r_ptr,$a_ptr,$b_ptr,$ff,$a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7,$t1,$t2)=
+		map("r$_",(0..12,14));
+($t0,$t3)=($ff,$a_ptr);
+
+$code.=<<___;
+@ void	ecp_nistz256_to_mont(BN_ULONG r0[8],const BN_ULONG r1[8]);
+.globl	ecp_nistz256_to_mont
+.type	ecp_nistz256_to_mont,%function
+ecp_nistz256_to_mont:
+	adr	$b_ptr,.LRR
+	b	.Lecp_nistz256_mul_mont
+.size	ecp_nistz256_to_mont,.-ecp_nistz256_to_mont
+
+@ void	ecp_nistz256_from_mont(BN_ULONG r0[8],const BN_ULONG r1[8]);
+.globl	ecp_nistz256_from_mont
+.type	ecp_nistz256_from_mont,%function
+ecp_nistz256_from_mont:
+	adr	$b_ptr,.Lone
+	b	.Lecp_nistz256_mul_mont
+.size	ecp_nistz256_from_mont,.-ecp_nistz256_from_mont
+
+@ void	ecp_nistz256_mul_by_2(BN_ULONG r0[8],const BN_ULONG r1[8]);
+.globl	ecp_nistz256_mul_by_2
+.type	ecp_nistz256_mul_by_2,%function
+.align	4
+ecp_nistz256_mul_by_2:
+	stmdb	sp!,{r4-r12,lr}
+	bl	__ecp_nistz256_mul_by_2
+#if __ARM_ARCH__>=5 || !defined(__thumb__)
+	ldmia	sp!,{r4-r12,pc}
+#else
+	ldmia	sp!,{r4-r12,lr}
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	ecp_nistz256_mul_by_2,.-ecp_nistz256_mul_by_2
+
+.type	__ecp_nistz256_mul_by_2,%function
+.align	4
+__ecp_nistz256_mul_by_2:
+	ldr	$a0,[$a_ptr,#0]
+	ldr	$a1,[$a_ptr,#4]
+	ldr	$a2,[$a_ptr,#8]
+	adds	$a0,$a0,$a0		@ a[0:7]+=a[0:7], i.e. add with itself
+	ldr	$a3,[$a_ptr,#12]
+	adcs	$a1,$a1,$a1
+	ldr	$a4,[$a_ptr,#16]
+	adcs	$a2,$a2,$a2
+	ldr	$a5,[$a_ptr,#20]
+	adcs	$a3,$a3,$a3
+	ldr	$a6,[$a_ptr,#24]
+	adcs	$a4,$a4,$a4
+	ldr	$a7,[$a_ptr,#28]
+	adcs	$a5,$a5,$a5
+	adcs	$a6,$a6,$a6
+	mov	$ff,#0
+	adcs	$a7,$a7,$a7
+	adc	$ff,$ff,#0
+
+	b	.Lreduce_by_sub
+.size	__ecp_nistz256_mul_by_2,.-__ecp_nistz256_mul_by_2
+
+@ void	ecp_nistz256_add(BN_ULONG r0[8],const BN_ULONG r1[8],
+@					const BN_ULONG r2[8]);
+.globl	ecp_nistz256_add
+.type	ecp_nistz256_add,%function
+.align	4
+ecp_nistz256_add:
+	stmdb	sp!,{r4-r12,lr}
+	bl	__ecp_nistz256_add
+#if __ARM_ARCH__>=5 || !defined(__thumb__)
+	ldmia	sp!,{r4-r12,pc}
+#else
+	ldmia	sp!,{r4-r12,lr}
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	ecp_nistz256_add,.-ecp_nistz256_add
+
+.type	__ecp_nistz256_add,%function
+.align	4
+__ecp_nistz256_add:
+	str	lr,[sp,#-4]!		@ push lr
+
+	ldr	$a0,[$a_ptr,#0]
+	ldr	$a1,[$a_ptr,#4]
+	ldr	$a2,[$a_ptr,#8]
+	ldr	$a3,[$a_ptr,#12]
+	ldr	$a4,[$a_ptr,#16]
+	 ldr	$t0,[$b_ptr,#0]
+	ldr	$a5,[$a_ptr,#20]
+	 ldr	$t1,[$b_ptr,#4]
+	ldr	$a6,[$a_ptr,#24]
+	 ldr	$t2,[$b_ptr,#8]
+	ldr	$a7,[$a_ptr,#28]
+	 ldr	$t3,[$b_ptr,#12]
+	adds	$a0,$a0,$t0
+	 ldr	$t0,[$b_ptr,#16]
+	adcs	$a1,$a1,$t1
+	 ldr	$t1,[$b_ptr,#20]
+	adcs	$a2,$a2,$t2
+	 ldr	$t2,[$b_ptr,#24]
+	adcs	$a3,$a3,$t3
+	 ldr	$t3,[$b_ptr,#28]
+	adcs	$a4,$a4,$t0
+	adcs	$a5,$a5,$t1
+	adcs	$a6,$a6,$t2
+	mov	$ff,#0
+	adcs	$a7,$a7,$t3
+	adc	$ff,$ff,#0
+	ldr	lr,[sp],#4		@ pop lr
+
+.Lreduce_by_sub:
+
+	@ if a+b >= modulus, subtract modulus.
+	@
+	@ But since comparison implies subtraction, we subtract
+	@ modulus and then add it back if subtraction borrowed.
+
+	subs	$a0,$a0,#-1
+	sbcs	$a1,$a1,#-1
+	sbcs	$a2,$a2,#-1
+	sbcs	$a3,$a3,#0
+	sbcs	$a4,$a4,#0
+	sbcs	$a5,$a5,#0
+	sbcs	$a6,$a6,#1
+	sbcs	$a7,$a7,#-1
+	sbc	$ff,$ff,#0
+
+	@ Note that because mod has special form, i.e. consists of
+	@ 0xffffffff, 1 and 0s, we can conditionally synthesize it by
+	@ using value of borrow as a whole or extracting single bit.
+	@ Follow $ff register...
+
+	adds	$a0,$a0,$ff		@ add synthesized modulus
+	adcs	$a1,$a1,$ff
+	str	$a0,[$r_ptr,#0]
+	adcs	$a2,$a2,$ff
+	str	$a1,[$r_ptr,#4]
+	adcs	$a3,$a3,#0
+	str	$a2,[$r_ptr,#8]
+	adcs	$a4,$a4,#0
+	str	$a3,[$r_ptr,#12]
+	adcs	$a5,$a5,#0
+	str	$a4,[$r_ptr,#16]
+	adcs	$a6,$a6,$ff,lsr#31
+	str	$a5,[$r_ptr,#20]
+	adcs	$a7,$a7,$ff
+	str	$a6,[$r_ptr,#24]
+	str	$a7,[$r_ptr,#28]
+
+	mov	pc,lr
+.size	__ecp_nistz256_add,.-__ecp_nistz256_add
+
+@ void	ecp_nistz256_mul_by_3(BN_ULONG r0[8],const BN_ULONG r1[8]);
+.globl	ecp_nistz256_mul_by_3
+.type	ecp_nistz256_mul_by_3,%function
+.align	4
+ecp_nistz256_mul_by_3:
+	stmdb	sp!,{r4-r12,lr}
+	bl	__ecp_nistz256_mul_by_3
+#if __ARM_ARCH__>=5 || !defined(__thumb__)
+	ldmia	sp!,{r4-r12,pc}
+#else
+	ldmia	sp!,{r4-r12,lr}
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	ecp_nistz256_mul_by_3,.-ecp_nistz256_mul_by_3
+
+.type	__ecp_nistz256_mul_by_3,%function
+.align	4
+__ecp_nistz256_mul_by_3:
+	str	lr,[sp,#-4]!		@ push lr
+
+	@ As multiplication by 3 is performed as 2*n+n, below are inline
+	@ copies of __ecp_nistz256_mul_by_2 and __ecp_nistz256_add, see
+	@ corresponding subroutines for details.
+
+	ldr	$a0,[$a_ptr,#0]
+	ldr	$a1,[$a_ptr,#4]
+	ldr	$a2,[$a_ptr,#8]
+	adds	$a0,$a0,$a0		@ a[0:7]+=a[0:7]
+	ldr	$a3,[$a_ptr,#12]
+	adcs	$a1,$a1,$a1
+	ldr	$a4,[$a_ptr,#16]
+	adcs	$a2,$a2,$a2
+	ldr	$a5,[$a_ptr,#20]
+	adcs	$a3,$a3,$a3
+	ldr	$a6,[$a_ptr,#24]
+	adcs	$a4,$a4,$a4
+	ldr	$a7,[$a_ptr,#28]
+	adcs	$a5,$a5,$a5
+	adcs	$a6,$a6,$a6
+	mov	$ff,#0
+	adcs	$a7,$a7,$a7
+	adc	$ff,$ff,#0
+
+	subs	$a0,$a0,#-1		@ .Lreduce_by_sub but without stores
+	sbcs	$a1,$a1,#-1
+	sbcs	$a2,$a2,#-1
+	sbcs	$a3,$a3,#0
+	sbcs	$a4,$a4,#0
+	sbcs	$a5,$a5,#0
+	sbcs	$a6,$a6,#1
+	sbcs	$a7,$a7,#-1
+	sbc	$ff,$ff,#0
+
+	adds	$a0,$a0,$ff		@ add synthesized modulus
+	adcs	$a1,$a1,$ff
+	adcs	$a2,$a2,$ff
+	adcs	$a3,$a3,#0
+	adcs	$a4,$a4,#0
+	 ldr	$b_ptr,[$a_ptr,#0]
+	adcs	$a5,$a5,#0
+	 ldr	$t1,[$a_ptr,#4]
+	adcs	$a6,$a6,$ff,lsr#31
+	 ldr	$t2,[$a_ptr,#8]
+	adc	$a7,$a7,$ff
+
+	ldr	$t0,[$a_ptr,#12]
+	adds	$a0,$a0,$b_ptr		@ 2*a[0:7]+=a[0:7]
+	ldr	$b_ptr,[$a_ptr,#16]
+	adcs	$a1,$a1,$t1
+	ldr	$t1,[$a_ptr,#20]
+	adcs	$a2,$a2,$t2
+	ldr	$t2,[$a_ptr,#24]
+	adcs	$a3,$a3,$t0
+	ldr	$t3,[$a_ptr,#28]
+	adcs	$a4,$a4,$b_ptr
+	adcs	$a5,$a5,$t1
+	adcs	$a6,$a6,$t2
+	mov	$ff,#0
+	adcs	$a7,$a7,$t3
+	adc	$ff,$ff,#0
+	ldr	lr,[sp],#4		@ pop lr
+
+	b	.Lreduce_by_sub
+.size	ecp_nistz256_mul_by_3,.-ecp_nistz256_mul_by_3
+
+@ void	ecp_nistz256_div_by_2(BN_ULONG r0[8],const BN_ULONG r1[8]);
+.globl	ecp_nistz256_div_by_2
+.type	ecp_nistz256_div_by_2,%function
+.align	4
+ecp_nistz256_div_by_2:
+	stmdb	sp!,{r4-r12,lr}
+	bl	__ecp_nistz256_div_by_2
+#if __ARM_ARCH__>=5 || !defined(__thumb__)
+	ldmia	sp!,{r4-r12,pc}
+#else
+	ldmia	sp!,{r4-r12,lr}
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	ecp_nistz256_div_by_2,.-ecp_nistz256_div_by_2
+
+.type	__ecp_nistz256_div_by_2,%function
+.align	4
+__ecp_nistz256_div_by_2:
+	@ ret = (a is odd ? a+mod : a) >> 1
+
+	ldr	$a0,[$a_ptr,#0]
+	ldr	$a1,[$a_ptr,#4]
+	ldr	$a2,[$a_ptr,#8]
+	mov	$ff,$a0,lsl#31		@ place least significant bit to most
+					@ significant position, now arithmetic
+					@ right shift by 31 will produce -1 or
+					@ 0, while logical right shift 1 or 0,
+					@ this is how modulus is conditionally
+					@ synthesized in this case...
+	ldr	$a3,[$a_ptr,#12]
+	adds	$a0,$a0,$ff,asr#31
+	ldr	$a4,[$a_ptr,#16]
+	adcs	$a1,$a1,$ff,asr#31
+	ldr	$a5,[$a_ptr,#20]
+	adcs	$a2,$a2,$ff,asr#31
+	ldr	$a6,[$a_ptr,#24]
+	adcs	$a3,$a3,#0
+	ldr	$a7,[$a_ptr,#28]
+	adcs	$a4,$a4,#0
+	 mov	$a0,$a0,lsr#1		@ a[0:7]>>=1, we can start early
+					@ because it doesn't affect flags
+	adcs	$a5,$a5,#0
+	 orr	$a0,$a0,$a1,lsl#31
+	adcs	$a6,$a6,$ff,lsr#31
+	mov	$b_ptr,#0
+	adcs	$a7,$a7,$ff,asr#31
+	 mov	$a1,$a1,lsr#1
+	adc	$b_ptr,$b_ptr,#0	@ top-most carry bit from addition
+
+	orr	$a1,$a1,$a2,lsl#31
+	mov	$a2,$a2,lsr#1
+	str	$a0,[$r_ptr,#0]
+	orr	$a2,$a2,$a3,lsl#31
+	mov	$a3,$a3,lsr#1
+	str	$a1,[$r_ptr,#4]
+	orr	$a3,$a3,$a4,lsl#31
+	mov	$a4,$a4,lsr#1
+	str	$a2,[$r_ptr,#8]
+	orr	$a4,$a4,$a5,lsl#31
+	mov	$a5,$a5,lsr#1
+	str	$a3,[$r_ptr,#12]
+	orr	$a5,$a5,$a6,lsl#31
+	mov	$a6,$a6,lsr#1
+	str	$a4,[$r_ptr,#16]
+	orr	$a6,$a6,$a7,lsl#31
+	mov	$a7,$a7,lsr#1
+	str	$a5,[$r_ptr,#20]
+	orr	$a7,$a7,$b_ptr,lsl#31	@ don't forget the top-most carry bit
+	str	$a6,[$r_ptr,#24]
+	str	$a7,[$r_ptr,#28]
+
+	mov	pc,lr
+.size	__ecp_nistz256_div_by_2,.-__ecp_nistz256_div_by_2
+
+@ void	ecp_nistz256_sub(BN_ULONG r0[8],const BN_ULONG r1[8],
+@				        const BN_ULONG r2[8]);
+.globl	ecp_nistz256_sub
+.type	ecp_nistz256_sub,%function
+.align	4
+ecp_nistz256_sub:
+	stmdb	sp!,{r4-r12,lr}
+	bl	__ecp_nistz256_sub
+#if __ARM_ARCH__>=5 || !defined(__thumb__)
+	ldmia	sp!,{r4-r12,pc}
+#else
+	ldmia	sp!,{r4-r12,lr}
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	ecp_nistz256_sub,.-ecp_nistz256_sub
+
+.type	__ecp_nistz256_sub,%function
+.align	4
+__ecp_nistz256_sub:
+	str	lr,[sp,#-4]!		@ push lr
+
+	ldr	$a0,[$a_ptr,#0]
+	ldr	$a1,[$a_ptr,#4]
+	ldr	$a2,[$a_ptr,#8]
+	ldr	$a3,[$a_ptr,#12]
+	ldr	$a4,[$a_ptr,#16]
+	 ldr	$t0,[$b_ptr,#0]
+	ldr	$a5,[$a_ptr,#20]
+	 ldr	$t1,[$b_ptr,#4]
+	ldr	$a6,[$a_ptr,#24]
+	 ldr	$t2,[$b_ptr,#8]
+	ldr	$a7,[$a_ptr,#28]
+	 ldr	$t3,[$b_ptr,#12]
+	subs	$a0,$a0,$t0
+	 ldr	$t0,[$b_ptr,#16]
+	sbcs	$a1,$a1,$t1
+	 ldr	$t1,[$b_ptr,#20]
+	sbcs	$a2,$a2,$t2
+	 ldr	$t2,[$b_ptr,#24]
+	sbcs	$a3,$a3,$t3
+	 ldr	$t3,[$b_ptr,#28]
+	sbcs	$a4,$a4,$t0
+	sbcs	$a5,$a5,$t1
+	sbcs	$a6,$a6,$t2
+	sbcs	$a7,$a7,$t3
+	sbc	$ff,$ff,$ff		@ broadcast borrow bit
+	ldr	lr,[sp],#4		@ pop lr
+
+.Lreduce_by_add:
+
+	@ if a-b borrows, add modulus.
+	@
+	@ Note that because mod has special form, i.e. consists of
+	@ 0xffffffff, 1 and 0s, we can conditionally synthesize it by
+	@ broadcasting borrow bit to a register, $ff, and using it as
+	@ a whole or extracting single bit.
+
+	adds	$a0,$a0,$ff		@ add synthesized modulus
+	adcs	$a1,$a1,$ff
+	str	$a0,[$r_ptr,#0]
+	adcs	$a2,$a2,$ff
+	str	$a1,[$r_ptr,#4]
+	adcs	$a3,$a3,#0
+	str	$a2,[$r_ptr,#8]
+	adcs	$a4,$a4,#0
+	str	$a3,[$r_ptr,#12]
+	adcs	$a5,$a5,#0
+	str	$a4,[$r_ptr,#16]
+	adcs	$a6,$a6,$ff,lsr#31
+	str	$a5,[$r_ptr,#20]
+	adcs	$a7,$a7,$ff
+	str	$a6,[$r_ptr,#24]
+	str	$a7,[$r_ptr,#28]
+
+	mov	pc,lr
+.size	__ecp_nistz256_sub,.-__ecp_nistz256_sub
+
+@ void	ecp_nistz256_neg(BN_ULONG r0[8],const BN_ULONG r1[8]);
+.globl	ecp_nistz256_neg
+.type	ecp_nistz256_neg,%function
+.align	4
+ecp_nistz256_neg:
+	stmdb	sp!,{r4-r12,lr}
+	bl	__ecp_nistz256_neg
+#if __ARM_ARCH__>=5 || !defined(__thumb__)
+	ldmia	sp!,{r4-r12,pc}
+#else
+	ldmia	sp!,{r4-r12,lr}
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	ecp_nistz256_neg,.-ecp_nistz256_neg
+
+.type	__ecp_nistz256_neg,%function
+.align	4
+__ecp_nistz256_neg:
+	ldr	$a0,[$a_ptr,#0]
+	eor	$ff,$ff,$ff
+	ldr	$a1,[$a_ptr,#4]
+	ldr	$a2,[$a_ptr,#8]
+	subs	$a0,$ff,$a0
+	ldr	$a3,[$a_ptr,#12]
+	sbcs	$a1,$ff,$a1
+	ldr	$a4,[$a_ptr,#16]
+	sbcs	$a2,$ff,$a2
+	ldr	$a5,[$a_ptr,#20]
+	sbcs	$a3,$ff,$a3
+	ldr	$a6,[$a_ptr,#24]
+	sbcs	$a4,$ff,$a4
+	ldr	$a7,[$a_ptr,#28]
+	sbcs	$a5,$ff,$a5
+	sbcs	$a6,$ff,$a6
+	sbcs	$a7,$ff,$a7
+	sbc	$ff,$ff,$ff
+
+	b	.Lreduce_by_add
+.size	__ecp_nistz256_neg,.-__ecp_nistz256_neg
+___
+{
+my @acc=map("r$_",(3..11));
+my ($t0,$t1,$bj,$t2,$t3)=map("r$_",(0,1,2,12,14));
+
+$code.=<<___;
+@ void	ecp_nistz256_sqr_mont(BN_ULONG r0[8],const BN_ULONG r1[8]);
+.globl	ecp_nistz256_sqr_mont
+.type	ecp_nistz256_sqr_mont,%function
+.align	4
+ecp_nistz256_sqr_mont:
+	mov	$b_ptr,$a_ptr
+	b	.Lecp_nistz256_mul_mont
+.size	ecp_nistz256_sqr_mont,.-ecp_nistz256_sqr_mont
+
+@ void	ecp_nistz256_mul_mont(BN_ULONG r0[8],const BN_ULONG r1[8],
+@					     const BN_ULONG r2[8]);
+.globl	ecp_nistz256_mul_mont
+.type	ecp_nistz256_mul_mont,%function
+.align	4
+ecp_nistz256_mul_mont:
+.Lecp_nistz256_mul_mont:
+	stmdb	sp!,{r4-r12,lr}
+	bl	__ecp_nistz256_mul_mont
+#if __ARM_ARCH__>=5 || !defined(__thumb__)
+	ldmia	sp!,{r4-r12,pc}
+#else
+	ldmia	sp!,{r4-r12,lr}
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	ecp_nistz256_mul_mont,.-ecp_nistz256_mul_mont
+
+.type	__ecp_nistz256_mul_mont,%function
+.align	4
+__ecp_nistz256_mul_mont:
+	stmdb	sp!,{r0-r2,lr}			@ make a copy of arguments too
+
+	ldr	$bj,[$b_ptr,#0]			@ b[0]
+	ldmia	$a_ptr,{@acc[1]-@acc[8]}
+
+	umull	@acc[0],$t3,@acc[1],$bj		@ r[0]=a[0]*b[0]
+	stmdb	sp!,{$acc[1]-@acc[8]}		@ copy a[0-7] to stack, so
+						@ that it can be addressed
+						@ without spending register
+						@ on address
+	umull	@acc[1],$t0,@acc[2],$bj		@ r[1]=a[1]*b[0]
+	umull	@acc[2],$t1,@acc[3],$bj
+	adds	@acc[1],@acc[1],$t3		@ accumulate high part of mult
+	umull	@acc[3],$t2,@acc[4],$bj
+	adcs	@acc[2],@acc[2],$t0
+	umull	@acc[4],$t3,@acc[5],$bj
+	adcs	@acc[3],@acc[3],$t1
+	umull	@acc[5],$t0,@acc[6],$bj
+	adcs	@acc[4],@acc[4],$t2
+	umull	@acc[6],$t1,@acc[7],$bj
+	adcs	@acc[5],@acc[5],$t3
+	umull	@acc[7],$t2,@acc[8],$bj
+	adcs	@acc[6],@acc[6],$t0
+	adcs	@acc[7],@acc[7],$t1
+	eor	$t3,$t3,$t3			@ first overflow bit is zero
+	adc	@acc[8],$t2,#0
+___
+for(my $i=1;$i<8;$i++) {
+my $t4=@acc[0];
+
+	# Reduction iteration is normally performed by accumulating
+	# result of multiplication of modulus by "magic" digit [and
+	# omitting least significant word, which is guaranteed to
+	# be 0], but thanks to special form of modulus and "magic"
+	# digit being equal to least significant word, it can be
+	# performed with additions and subtractions alone. Indeed:
+	#
+	#        ffff.0001.0000.0000.0000.ffff.ffff.ffff
+	# *                                         abcd
+	# + xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.abcd
+	#
+	# Now observing that ff..ff*x = (2^n-1)*x = 2^n*x-x, we
+	# rewrite above as:
+	#
+	#   xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.abcd
+	# + abcd.0000.abcd.0000.0000.abcd.0000.0000.0000
+	# -      abcd.0000.0000.0000.0000.0000.0000.abcd
+	#
+	# or marking redundant operations:
+	#
+	#   xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.----
+	# + abcd.0000.abcd.0000.0000.abcd.----.----.----
+	# -      abcd.----.----.----.----.----.----.----
+
+$code.=<<___;
+	@ multiplication-less reduction $i
+	adds	@acc[3],@acc[3],@acc[0]		@ r[3]+=r[0]
+	 ldr	$bj,[sp,#40]			@ restore b_ptr
+	adcs	@acc[4],@acc[4],#0		@ r[4]+=0
+	adcs	@acc[5],@acc[5],#0		@ r[5]+=0
+	adcs	@acc[6],@acc[6],@acc[0]		@ r[6]+=r[0]
+	 ldr	$t1,[sp,#0]			@ load a[0]
+	adcs	@acc[7],@acc[7],#0		@ r[7]+=0
+	 ldr	$bj,[$bj,#4*$i]			@ load b[i]
+	adcs	@acc[8],@acc[8],@acc[0]		@ r[8]+=r[0]
+	 eor	$t0,$t0,$t0
+	adc	$t3,$t3,#0			@ overflow bit
+	subs	@acc[7],@acc[7],@acc[0]		@ r[7]-=r[0]
+	 ldr	$t2,[sp,#4]			@ a[1]
+	sbcs	@acc[8],@acc[8],#0		@ r[8]-=0
+	 umlal	@acc[1],$t0,$t1,$bj		@ "r[0]"+=a[0]*b[i]
+	 eor	$t1,$t1,$t1
+	sbc	@acc[0],$t3,#0			@ overflow bit, keep in mind
+						@ that netto result is
+						@ addition of a value which
+						@ makes underflow impossible
+
+	ldr	$t3,[sp,#8]			@ a[2]
+	umlal	@acc[2],$t1,$t2,$bj		@ "r[1]"+=a[1]*b[i]
+	 str	@acc[0],[sp,#36]		@ temporarily offload overflow
+	eor	$t2,$t2,$t2
+	ldr	$t4,[sp,#12]			@ a[3], $t4 is alias @acc[0]
+	umlal	@acc[3],$t2,$t3,$bj		@ "r[2]"+=a[2]*b[i]
+	eor	$t3,$t3,$t3
+	adds	@acc[2],@acc[2],$t0		@ accumulate high part of mult
+	ldr	$t0,[sp,#16]			@ a[4]
+	umlal	@acc[4],$t3,$t4,$bj		@ "r[3]"+=a[3]*b[i]
+	eor	$t4,$t4,$t4
+	adcs	@acc[3],@acc[3],$t1
+	ldr	$t1,[sp,#20]			@ a[5]
+	umlal	@acc[5],$t4,$t0,$bj		@ "r[4]"+=a[4]*b[i]
+	eor	$t0,$t0,$t0
+	adcs	@acc[4],@acc[4],$t2
+	ldr	$t2,[sp,#24]			@ a[6]
+	umlal	@acc[6],$t0,$t1,$bj		@ "r[5]"+=a[5]*b[i]
+	eor	$t1,$t1,$t1
+	adcs	@acc[5],@acc[5],$t3
+	ldr	$t3,[sp,#28]			@ a[7]
+	umlal	@acc[7],$t1,$t2,$bj		@ "r[6]"+=a[6]*b[i]
+	eor	$t2,$t2,$t2
+	adcs	@acc[6],@acc[6],$t4
+	 ldr	@acc[0],[sp,#36]		@ restore overflow bit
+	umlal	@acc[8],$t2,$t3,$bj		@ "r[7]"+=a[7]*b[i]
+	eor	$t3,$t3,$t3
+	adcs	@acc[7],@acc[7],$t0
+	adcs	@acc[8],@acc[8],$t1
+	adcs	@acc[0],$acc[0],$t2
+	adc	$t3,$t3,#0			@ new overflow bit
+___
+	push(@acc,shift(@acc));			# rotate registers, so that
+						# "r[i]" becomes r[i]
+}
+$code.=<<___;
+	@ last multiplication-less reduction
+	adds	@acc[3],@acc[3],@acc[0]
+	ldr	$r_ptr,[sp,#32]			@ restore r_ptr
+	adcs	@acc[4],@acc[4],#0
+	adcs	@acc[5],@acc[5],#0
+	adcs	@acc[6],@acc[6],@acc[0]
+	adcs	@acc[7],@acc[7],#0
+	adcs	@acc[8],@acc[8],@acc[0]
+	adc	$t3,$t3,#0
+	subs	@acc[7],@acc[7],@acc[0]
+	sbcs	@acc[8],@acc[8],#0
+	sbc	@acc[0],$t3,#0			@ overflow bit
+
+	@ Final step is "if result > mod, subtract mod", but we do it
+	@ "other way around", namely subtract modulus from result
+	@ and if it borrowed, add modulus back.
+
+	adds	@acc[1],@acc[1],#1		@ subs	@acc[1],@acc[1],#-1
+	adcs	@acc[2],@acc[2],#0		@ sbcs	@acc[2],@acc[2],#-1
+	adcs	@acc[3],@acc[3],#0		@ sbcs	@acc[3],@acc[3],#-1
+	sbcs	@acc[4],@acc[4],#0
+	sbcs	@acc[5],@acc[5],#0
+	sbcs	@acc[6],@acc[6],#0
+	sbcs	@acc[7],@acc[7],#1
+	adcs	@acc[8],@acc[8],#0		@ sbcs	@acc[8],@acc[8],#-1
+	ldr	lr,[sp,#44]			@ restore lr
+	sbc	@acc[0],@acc[0],#0		@ broadcast borrow bit
+	add	sp,sp,#48
+
+	@ Note that because mod has special form, i.e. consists of
+	@ 0xffffffff, 1 and 0s, we can conditionally synthesize it by
+	@ broadcasting borrow bit to a register, @acc[0], and using it as
+	@ a whole or extracting single bit.
+
+	adds	@acc[1],@acc[1],@acc[0]		@ add modulus or zero
+	adcs	@acc[2],@acc[2],@acc[0]
+	str	@acc[1],[$r_ptr,#0]
+	adcs	@acc[3],@acc[3],@acc[0]
+	str	@acc[2],[$r_ptr,#4]
+	adcs	@acc[4],@acc[4],#0
+	str	@acc[3],[$r_ptr,#8]
+	adcs	@acc[5],@acc[5],#0
+	str	@acc[4],[$r_ptr,#12]
+	adcs	@acc[6],@acc[6],#0
+	str	@acc[5],[$r_ptr,#16]
+	adcs	@acc[7],@acc[7],@acc[0],lsr#31
+	str	@acc[6],[$r_ptr,#20]
+	adc	@acc[8],@acc[8],@acc[0]
+	str	@acc[7],[$r_ptr,#24]
+	str	@acc[8],[$r_ptr,#28]
+
+	mov	pc,lr
+.size	__ecp_nistz256_mul_mont,.-__ecp_nistz256_mul_mont
+___
+}
+
+{
+my ($out,$inp,$index,$mask)=map("r$_",(0..3));
+$code.=<<___;
+@ void	ecp_nistz256_scatter_w5(void *r0,const P256_POINT *r1,
+@					 int r2);
+.globl	ecp_nistz256_scatter_w5
+.type	ecp_nistz256_scatter_w5,%function
+.align	5
+ecp_nistz256_scatter_w5:
+	stmdb	sp!,{r4-r11}
+
+	add	$out,$out,$index,lsl#2
+
+	ldmia	$inp!,{r4-r11}		@ X
+	str	r4,[$out,#64*0-4]
+	str	r5,[$out,#64*1-4]
+	str	r6,[$out,#64*2-4]
+	str	r7,[$out,#64*3-4]
+	str	r8,[$out,#64*4-4]
+	str	r9,[$out,#64*5-4]
+	str	r10,[$out,#64*6-4]
+	str	r11,[$out,#64*7-4]
+	add	$out,$out,#64*8
+
+	ldmia	$inp!,{r4-r11}		@ Y
+	str	r4,[$out,#64*0-4]
+	str	r5,[$out,#64*1-4]
+	str	r6,[$out,#64*2-4]
+	str	r7,[$out,#64*3-4]
+	str	r8,[$out,#64*4-4]
+	str	r9,[$out,#64*5-4]
+	str	r10,[$out,#64*6-4]
+	str	r11,[$out,#64*7-4]
+	add	$out,$out,#64*8
+
+	ldmia	$inp,{r4-r11}		@ Z
+	str	r4,[$out,#64*0-4]
+	str	r5,[$out,#64*1-4]
+	str	r6,[$out,#64*2-4]
+	str	r7,[$out,#64*3-4]
+	str	r8,[$out,#64*4-4]
+	str	r9,[$out,#64*5-4]
+	str	r10,[$out,#64*6-4]
+	str	r11,[$out,#64*7-4]
+
+	ldmia	sp!,{r4-r11}
+#if __ARM_ARCH__>=5 || defined(__thumb__)
+	bx	lr
+#else
+	mov	pc,lr
+#endif
+.size	ecp_nistz256_scatter_w5,.-ecp_nistz256_scatter_w5
+
+@ void	ecp_nistz256_gather_w5(P256_POINT *r0,const void *r1,
+@					      int r2);
+.globl	ecp_nistz256_gather_w5
+.type	ecp_nistz256_gather_w5,%function
+.align	5
+ecp_nistz256_gather_w5:
+	stmdb	sp!,{r4-r11}
+
+	cmp	$index,#0
+	mov	$mask,#0
+#ifdef	__thumb2__
+	itt	ne
+#endif
+	subne	$index,$index,#1
+	movne	$mask,#-1
+	add	$inp,$inp,$index,lsl#2
+
+	ldr	r4,[$inp,#64*0]
+	ldr	r5,[$inp,#64*1]
+	ldr	r6,[$inp,#64*2]
+	and	r4,r4,$mask
+	ldr	r7,[$inp,#64*3]
+	and	r5,r5,$mask
+	ldr	r8,[$inp,#64*4]
+	and	r6,r6,$mask
+	ldr	r9,[$inp,#64*5]
+	and	r7,r7,$mask
+	ldr	r10,[$inp,#64*6]
+	and	r8,r8,$mask
+	ldr	r11,[$inp,#64*7]
+	add	$inp,$inp,#64*8
+	and	r9,r9,$mask
+	and	r10,r10,$mask
+	and	r11,r11,$mask
+	stmia	$out!,{r4-r11}	@ X
+
+	ldr	r4,[$inp,#64*0]
+	ldr	r5,[$inp,#64*1]
+	ldr	r6,[$inp,#64*2]
+	and	r4,r4,$mask
+	ldr	r7,[$inp,#64*3]
+	and	r5,r5,$mask
+	ldr	r8,[$inp,#64*4]
+	and	r6,r6,$mask
+	ldr	r9,[$inp,#64*5]
+	and	r7,r7,$mask
+	ldr	r10,[$inp,#64*6]
+	and	r8,r8,$mask
+	ldr	r11,[$inp,#64*7]
+	add	$inp,$inp,#64*8
+	and	r9,r9,$mask
+	and	r10,r10,$mask
+	and	r11,r11,$mask
+	stmia	$out!,{r4-r11}	@ Y
+
+	ldr	r4,[$inp,#64*0]
+	ldr	r5,[$inp,#64*1]
+	ldr	r6,[$inp,#64*2]
+	and	r4,r4,$mask
+	ldr	r7,[$inp,#64*3]
+	and	r5,r5,$mask
+	ldr	r8,[$inp,#64*4]
+	and	r6,r6,$mask
+	ldr	r9,[$inp,#64*5]
+	and	r7,r7,$mask
+	ldr	r10,[$inp,#64*6]
+	and	r8,r8,$mask
+	ldr	r11,[$inp,#64*7]
+	and	r9,r9,$mask
+	and	r10,r10,$mask
+	and	r11,r11,$mask
+	stmia	$out,{r4-r11}		@ Z
+
+	ldmia	sp!,{r4-r11}
+#if __ARM_ARCH__>=5 || defined(__thumb__)
+	bx	lr
+#else
+	mov	pc,lr
+#endif
+.size	ecp_nistz256_gather_w5,.-ecp_nistz256_gather_w5
+
+@ void	ecp_nistz256_scatter_w7(void *r0,const P256_POINT_AFFINE *r1,
+@					 int r2);
+.globl	ecp_nistz256_scatter_w7
+.type	ecp_nistz256_scatter_w7,%function
+.align	5
+ecp_nistz256_scatter_w7:
+	add	$out,$out,$index
+	mov	$index,#64/4
+.Loop_scatter_w7:
+	ldr	$mask,[$inp],#4
+	subs	$index,$index,#1
+	strb	$mask,[$out,#64*0]
+	mov	$mask,$mask,lsr#8
+	strb	$mask,[$out,#64*1]
+	mov	$mask,$mask,lsr#8
+	strb	$mask,[$out,#64*2]
+	mov	$mask,$mask,lsr#8
+	strb	$mask,[$out,#64*3]
+	add	$out,$out,#64*4
+	bne	.Loop_scatter_w7
+
+#if __ARM_ARCH__>=5 || defined(__thumb__)
+	bx	lr
+#else
+	mov	pc,lr
+#endif
+.size	ecp_nistz256_scatter_w7,.-ecp_nistz256_scatter_w7
+
+@ void	ecp_nistz256_gather_w7(P256_POINT_AFFINE *r0,const void *r1,
+@						     int r2);
+.globl	ecp_nistz256_gather_w7
+.type	ecp_nistz256_gather_w7,%function
+.align	5
+ecp_nistz256_gather_w7:
+	stmdb	sp!,{r4-r7}
+
+	cmp	$index,#0
+	mov	$mask,#0
+#ifdef	__thumb2__
+	itt	ne
+#endif
+	subne	$index,$index,#1
+	movne	$mask,#-1
+	add	$inp,$inp,$index
+	mov	$index,#64/4
+	nop
+.Loop_gather_w7:
+	ldrb	r4,[$inp,#64*0]
+	subs	$index,$index,#1
+	ldrb	r5,[$inp,#64*1]
+	ldrb	r6,[$inp,#64*2]
+	ldrb	r7,[$inp,#64*3]
+	add	$inp,$inp,#64*4
+	orr	r4,r4,r5,lsl#8
+	orr	r4,r4,r6,lsl#16
+	orr	r4,r4,r7,lsl#24
+	and	r4,r4,$mask
+	str	r4,[$out],#4
+	bne	.Loop_gather_w7
+
+	ldmia	sp!,{r4-r7}
+#if __ARM_ARCH__>=5 || defined(__thumb__)
+	bx	lr
+#else
+	mov	pc,lr
+#endif
+.size	ecp_nistz256_gather_w7,.-ecp_nistz256_gather_w7
+___
+}
+if (0) {
+# In comparison to integer-only equivalent of below subroutine:
+#
+# Cortex-A8	+10%
+# Cortex-A9	-10%
+# Snapdragon S4	+5%
+#
+# As not all time is spent in multiplication, overall impact is deemed
+# too low to care about.
+
+my ($A0,$A1,$A2,$A3,$Bi,$zero,$temp)=map("d$_",(0..7));
+my $mask="q4";
+my $mult="q5";
+my @AxB=map("q$_",(8..15));
+
+my ($rptr,$aptr,$bptr,$toutptr)=map("r$_",(0..3));
+
+$code.=<<___;
+#if __ARM_ARCH__>=7
+.fpu	neon
+
+.globl	ecp_nistz256_mul_mont_neon
+.type	ecp_nistz256_mul_mont_neon,%function
+.align	5
+ecp_nistz256_mul_mont_neon:
+	mov	ip,sp
+	stmdb	sp!,{r4-r9}
+	vstmdb	sp!,{q4-q5}		@ ABI specification says so
+
+	sub		$toutptr,sp,#40
+	vld1.32		{${Bi}[0]},[$bptr,:32]!
+	veor		$zero,$zero,$zero
+	vld1.32		{$A0-$A3}, [$aptr]		@ can't specify :32 :-(
+	vzip.16		$Bi,$zero
+	mov		sp,$toutptr			@ alloca
+	vmov.i64	$mask,#0xffff
+
+	vmull.u32	@AxB[0],$Bi,${A0}[0]
+	vmull.u32	@AxB[1],$Bi,${A0}[1]
+	vmull.u32	@AxB[2],$Bi,${A1}[0]
+	vmull.u32	@AxB[3],$Bi,${A1}[1]
+	 vshr.u64	$temp,@AxB[0]#lo,#16
+	vmull.u32	@AxB[4],$Bi,${A2}[0]
+	 vadd.u64	@AxB[0]#hi,@AxB[0]#hi,$temp
+	vmull.u32	@AxB[5],$Bi,${A2}[1]
+	 vshr.u64	$temp,@AxB[0]#hi,#16		@ upper 32 bits of a[0]*b[0]
+	vmull.u32	@AxB[6],$Bi,${A3}[0]
+	 vand.u64	@AxB[0],@AxB[0],$mask		@ lower 32 bits of a[0]*b[0]
+	vmull.u32	@AxB[7],$Bi,${A3}[1]
+___
+for($i=1;$i<8;$i++) {
+$code.=<<___;
+	 vld1.32	{${Bi}[0]},[$bptr,:32]!
+	 veor		$zero,$zero,$zero
+	vadd.u64	@AxB[1]#lo,@AxB[1]#lo,$temp	@ reduction
+	vshl.u64	$mult,@AxB[0],#32
+	vadd.u64	@AxB[3],@AxB[3],@AxB[0]
+	vsub.u64	$mult,$mult,@AxB[0]
+	 vzip.16	$Bi,$zero
+	vadd.u64	@AxB[6],@AxB[6],@AxB[0]
+	vadd.u64	@AxB[7],@AxB[7],$mult
+___
+	push(@AxB,shift(@AxB));
+$code.=<<___;
+	vmlal.u32	@AxB[0],$Bi,${A0}[0]
+	vmlal.u32	@AxB[1],$Bi,${A0}[1]
+	vmlal.u32	@AxB[2],$Bi,${A1}[0]
+	vmlal.u32	@AxB[3],$Bi,${A1}[1]
+	 vshr.u64	$temp,@AxB[0]#lo,#16
+	vmlal.u32	@AxB[4],$Bi,${A2}[0]
+	 vadd.u64	@AxB[0]#hi,@AxB[0]#hi,$temp
+	vmlal.u32	@AxB[5],$Bi,${A2}[1]
+	 vshr.u64	$temp,@AxB[0]#hi,#16		@ upper 33 bits of a[0]*b[i]+t[0]
+	vmlal.u32	@AxB[6],$Bi,${A3}[0]
+	 vand.u64	@AxB[0],@AxB[0],$mask		@ lower 32 bits of a[0]*b[0]
+	vmull.u32	@AxB[7],$Bi,${A3}[1]
+___
+}
+$code.=<<___;
+	vadd.u64	@AxB[1]#lo,@AxB[1]#lo,$temp	@ last reduction
+	vshl.u64	$mult,@AxB[0],#32
+	vadd.u64	@AxB[3],@AxB[3],@AxB[0]
+	vsub.u64	$mult,$mult,@AxB[0]
+	vadd.u64	@AxB[6],@AxB[6],@AxB[0]
+	vadd.u64	@AxB[7],@AxB[7],$mult
+
+	vshr.u64	$temp,@AxB[1]#lo,#16		@ convert
+	vadd.u64	@AxB[1]#hi,@AxB[1]#hi,$temp
+	vshr.u64	$temp,@AxB[1]#hi,#16
+	vzip.16		@AxB[1]#lo,@AxB[1]#hi
+___
+foreach (2..7) {
+$code.=<<___;
+	vadd.u64	@AxB[$_]#lo,@AxB[$_]#lo,$temp
+	vst1.32		{@AxB[$_-1]#lo[0]},[$toutptr,:32]!
+	vshr.u64	$temp,@AxB[$_]#lo,#16
+	vadd.u64	@AxB[$_]#hi,@AxB[$_]#hi,$temp
+	vshr.u64	$temp,@AxB[$_]#hi,#16
+	vzip.16		@AxB[$_]#lo,@AxB[$_]#hi
+___
+}
+$code.=<<___;
+	vst1.32		{@AxB[7]#lo[0]},[$toutptr,:32]!
+	vst1.32		{$temp},[$toutptr]		@ upper 33 bits
+
+	ldr	r1,[sp,#0]
+	ldr	r2,[sp,#4]
+	ldr	r3,[sp,#8]
+	subs	r1,r1,#-1
+	ldr	r4,[sp,#12]
+	sbcs	r2,r2,#-1
+	ldr	r5,[sp,#16]
+	sbcs	r3,r3,#-1
+	ldr	r6,[sp,#20]
+	sbcs	r4,r4,#0
+	ldr	r7,[sp,#24]
+	sbcs	r5,r5,#0
+	ldr	r8,[sp,#28]
+	sbcs	r6,r6,#0
+	ldr	r9,[sp,#32]				@ top-most bit
+	sbcs	r7,r7,#1
+	sub	sp,ip,#40+16
+	sbcs	r8,r8,#-1
+	sbc	r9,r9,#0
+        vldmia  sp!,{q4-q5}
+
+	adds	r1,r1,r9
+	adcs	r2,r2,r9
+	str	r1,[$rptr,#0]
+	adcs	r3,r3,r9
+	str	r2,[$rptr,#4]
+	adcs	r4,r4,#0
+	str	r3,[$rptr,#8]
+	adcs	r5,r5,#0
+	str	r4,[$rptr,#12]
+	adcs	r6,r6,#0
+	str	r5,[$rptr,#16]
+	adcs	r7,r7,r9,lsr#31
+	str	r6,[$rptr,#20]
+	adcs	r8,r8,r9
+	str	r7,[$rptr,#24]
+	str	r8,[$rptr,#28]
+
+        ldmia   sp!,{r4-r9}
+	bx	lr
+.size	ecp_nistz256_mul_mont_neon,.-ecp_nistz256_mul_mont_neon
+#endif
+___
+}
+
+{{{
+########################################################################
+# Below $aN assignment matches order in which 256-bit result appears in
+# register bank at return from __ecp_nistz256_mul_mont, so that we can
+# skip over reloading it from memory. This means that below functions
+# use custom calling sequence accepting 256-bit input in registers,
+# output pointer in r0, $r_ptr, and optional pointer in r2, $b_ptr.
+#
+# See their "normal" counterparts for insights on calculations.
+
+my ($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7,
+    $t0,$t1,$t2,$t3)=map("r$_",(11,3..10,12,14,1));
+my $ff=$b_ptr;
+
+$code.=<<___;
+.type	__ecp_nistz256_sub_from,%function
+.align	5
+__ecp_nistz256_sub_from:
+	str	lr,[sp,#-4]!		@ push lr
+
+	 ldr	$t0,[$b_ptr,#0]
+	 ldr	$t1,[$b_ptr,#4]
+	 ldr	$t2,[$b_ptr,#8]
+	 ldr	$t3,[$b_ptr,#12]
+	subs	$a0,$a0,$t0
+	 ldr	$t0,[$b_ptr,#16]
+	sbcs	$a1,$a1,$t1
+	 ldr	$t1,[$b_ptr,#20]
+	sbcs	$a2,$a2,$t2
+	 ldr	$t2,[$b_ptr,#24]
+	sbcs	$a3,$a3,$t3
+	 ldr	$t3,[$b_ptr,#28]
+	sbcs	$a4,$a4,$t0
+	sbcs	$a5,$a5,$t1
+	sbcs	$a6,$a6,$t2
+	sbcs	$a7,$a7,$t3
+	sbc	$ff,$ff,$ff		@ broadcast borrow bit
+	ldr	lr,[sp],#4		@ pop lr
+
+	adds	$a0,$a0,$ff		@ add synthesized modulus
+	adcs	$a1,$a1,$ff
+	str	$a0,[$r_ptr,#0]
+	adcs	$a2,$a2,$ff
+	str	$a1,[$r_ptr,#4]
+	adcs	$a3,$a3,#0
+	str	$a2,[$r_ptr,#8]
+	adcs	$a4,$a4,#0
+	str	$a3,[$r_ptr,#12]
+	adcs	$a5,$a5,#0
+	str	$a4,[$r_ptr,#16]
+	adcs	$a6,$a6,$ff,lsr#31
+	str	$a5,[$r_ptr,#20]
+	adcs	$a7,$a7,$ff
+	str	$a6,[$r_ptr,#24]
+	str	$a7,[$r_ptr,#28]
+
+	mov	pc,lr
+.size	__ecp_nistz256_sub_from,.-__ecp_nistz256_sub_from
+
+.type	__ecp_nistz256_sub_morf,%function
+.align	5
+__ecp_nistz256_sub_morf:
+	str	lr,[sp,#-4]!		@ push lr
+
+	 ldr	$t0,[$b_ptr,#0]
+	 ldr	$t1,[$b_ptr,#4]
+	 ldr	$t2,[$b_ptr,#8]
+	 ldr	$t3,[$b_ptr,#12]
+	subs	$a0,$t0,$a0
+	 ldr	$t0,[$b_ptr,#16]
+	sbcs	$a1,$t1,$a1
+	 ldr	$t1,[$b_ptr,#20]
+	sbcs	$a2,$t2,$a2
+	 ldr	$t2,[$b_ptr,#24]
+	sbcs	$a3,$t3,$a3
+	 ldr	$t3,[$b_ptr,#28]
+	sbcs	$a4,$t0,$a4
+	sbcs	$a5,$t1,$a5
+	sbcs	$a6,$t2,$a6
+	sbcs	$a7,$t3,$a7
+	sbc	$ff,$ff,$ff		@ broadcast borrow bit
+	ldr	lr,[sp],#4		@ pop lr
+
+	adds	$a0,$a0,$ff		@ add synthesized modulus
+	adcs	$a1,$a1,$ff
+	str	$a0,[$r_ptr,#0]
+	adcs	$a2,$a2,$ff
+	str	$a1,[$r_ptr,#4]
+	adcs	$a3,$a3,#0
+	str	$a2,[$r_ptr,#8]
+	adcs	$a4,$a4,#0
+	str	$a3,[$r_ptr,#12]
+	adcs	$a5,$a5,#0
+	str	$a4,[$r_ptr,#16]
+	adcs	$a6,$a6,$ff,lsr#31
+	str	$a5,[$r_ptr,#20]
+	adcs	$a7,$a7,$ff
+	str	$a6,[$r_ptr,#24]
+	str	$a7,[$r_ptr,#28]
+
+	mov	pc,lr
+.size	__ecp_nistz256_sub_morf,.-__ecp_nistz256_sub_morf
+
+.type	__ecp_nistz256_add_self,%function
+.align	4
+__ecp_nistz256_add_self:
+	adds	$a0,$a0,$a0		@ a[0:7]+=a[0:7]
+	adcs	$a1,$a1,$a1
+	adcs	$a2,$a2,$a2
+	adcs	$a3,$a3,$a3
+	adcs	$a4,$a4,$a4
+	adcs	$a5,$a5,$a5
+	adcs	$a6,$a6,$a6
+	mov	$ff,#0
+	adcs	$a7,$a7,$a7
+	adc	$ff,$ff,#0
+
+	@ if a+b >= modulus, subtract modulus.
+	@
+	@ But since comparison implies subtraction, we subtract
+	@ modulus and then add it back if subtraction borrowed.
+
+	subs	$a0,$a0,#-1
+	sbcs	$a1,$a1,#-1
+	sbcs	$a2,$a2,#-1
+	sbcs	$a3,$a3,#0
+	sbcs	$a4,$a4,#0
+	sbcs	$a5,$a5,#0
+	sbcs	$a6,$a6,#1
+	sbcs	$a7,$a7,#-1
+	sbc	$ff,$ff,#0
+
+	@ Note that because mod has special form, i.e. consists of
+	@ 0xffffffff, 1 and 0s, we can conditionally synthesize it by
+	@ using value of borrow as a whole or extracting single bit.
+	@ Follow $ff register...
+
+	adds	$a0,$a0,$ff		@ add synthesized modulus
+	adcs	$a1,$a1,$ff
+	str	$a0,[$r_ptr,#0]
+	adcs	$a2,$a2,$ff
+	str	$a1,[$r_ptr,#4]
+	adcs	$a3,$a3,#0
+	str	$a2,[$r_ptr,#8]
+	adcs	$a4,$a4,#0
+	str	$a3,[$r_ptr,#12]
+	adcs	$a5,$a5,#0
+	str	$a4,[$r_ptr,#16]
+	adcs	$a6,$a6,$ff,lsr#31
+	str	$a5,[$r_ptr,#20]
+	adcs	$a7,$a7,$ff
+	str	$a6,[$r_ptr,#24]
+	str	$a7,[$r_ptr,#28]
+
+	mov	pc,lr
+.size	__ecp_nistz256_add_self,.-__ecp_nistz256_add_self
+
+___
+
+########################################################################
+# following subroutines are "literal" implementation of those found in
+# ecp_nistz256.c
+#
+########################################################################
+# void ecp_nistz256_point_double(P256_POINT *out,const P256_POINT *inp);
+#
+{
+my ($S,$M,$Zsqr,$in_x,$tmp0)=map(32*$_,(0..4));
+# above map() describes stack layout with 5 temporary
+# 256-bit vectors on top. Then note that we push
+# starting from r0, which means that we have copy of
+# input arguments just below these temporary vectors.
+
+$code.=<<___;
+.globl	ecp_nistz256_point_double
+.type	ecp_nistz256_point_double,%function
+.align	5
+ecp_nistz256_point_double:
+	stmdb	sp!,{r0-r12,lr}		@ push from r0, unusual, but intentional
+	sub	sp,sp,#32*5
+
+.Lpoint_double_shortcut:
+	add	r3,sp,#$in_x
+	ldmia	$a_ptr!,{r4-r11}	@ copy in_x
+	stmia	r3,{r4-r11}
+
+	add	$r_ptr,sp,#$S
+	bl	__ecp_nistz256_mul_by_2	@ p256_mul_by_2(S, in_y);
+
+	add	$b_ptr,$a_ptr,#32
+	add	$a_ptr,$a_ptr,#32
+	add	$r_ptr,sp,#$Zsqr
+	bl	__ecp_nistz256_mul_mont	@ p256_sqr_mont(Zsqr, in_z);
+
+	add	$a_ptr,sp,#$S
+	add	$b_ptr,sp,#$S
+	add	$r_ptr,sp,#$S
+	bl	__ecp_nistz256_mul_mont	@ p256_sqr_mont(S, S);
+
+	ldr	$b_ptr,[sp,#32*5+4]
+	add	$a_ptr,$b_ptr,#32
+	add	$b_ptr,$b_ptr,#64
+	add	$r_ptr,sp,#$tmp0
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(tmp0, in_z, in_y);
+
+	ldr	$r_ptr,[sp,#32*5]
+	add	$r_ptr,$r_ptr,#64
+	bl	__ecp_nistz256_add_self	@ p256_mul_by_2(res_z, tmp0);
+
+	add	$a_ptr,sp,#$in_x
+	add	$b_ptr,sp,#$Zsqr
+	add	$r_ptr,sp,#$M
+	bl	__ecp_nistz256_add	@ p256_add(M, in_x, Zsqr);
+
+	add	$a_ptr,sp,#$in_x
+	add	$b_ptr,sp,#$Zsqr
+	add	$r_ptr,sp,#$Zsqr
+	bl	__ecp_nistz256_sub	@ p256_sub(Zsqr, in_x, Zsqr);
+
+	add	$a_ptr,sp,#$S
+	add	$b_ptr,sp,#$S
+	add	$r_ptr,sp,#$tmp0
+	bl	__ecp_nistz256_mul_mont	@ p256_sqr_mont(tmp0, S);
+
+	add	$a_ptr,sp,#$Zsqr
+	add	$b_ptr,sp,#$M
+	add	$r_ptr,sp,#$M
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(M, M, Zsqr);
+
+	ldr	$r_ptr,[sp,#32*5]
+	add	$a_ptr,sp,#$tmp0
+	add	$r_ptr,$r_ptr,#32
+	bl	__ecp_nistz256_div_by_2	@ p256_div_by_2(res_y, tmp0);
+
+	add	$a_ptr,sp,#$M
+	add	$r_ptr,sp,#$M
+	bl	__ecp_nistz256_mul_by_3	@ p256_mul_by_3(M, M);
+
+	add	$a_ptr,sp,#$in_x
+	add	$b_ptr,sp,#$S
+	add	$r_ptr,sp,#$S
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(S, S, in_x);
+
+	add	$r_ptr,sp,#$tmp0
+	bl	__ecp_nistz256_add_self	@ p256_mul_by_2(tmp0, S);
+
+	ldr	$r_ptr,[sp,#32*5]
+	add	$a_ptr,sp,#$M
+	add	$b_ptr,sp,#$M
+	bl	__ecp_nistz256_mul_mont	@ p256_sqr_mont(res_x, M);
+
+	add	$b_ptr,sp,#$tmp0
+	bl	__ecp_nistz256_sub_from	@ p256_sub(res_x, res_x, tmp0);
+
+	add	$b_ptr,sp,#$S
+	add	$r_ptr,sp,#$S
+	bl	__ecp_nistz256_sub_morf	@ p256_sub(S, S, res_x);
+
+	add	$a_ptr,sp,#$M
+	add	$b_ptr,sp,#$S
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(S, S, M);
+
+	ldr	$r_ptr,[sp,#32*5]
+	add	$b_ptr,$r_ptr,#32
+	add	$r_ptr,$r_ptr,#32
+	bl	__ecp_nistz256_sub_from	@ p256_sub(res_y, S, res_y);
+
+	add	sp,sp,#32*5+16		@ +16 means "skip even over saved r0-r3"
+#if __ARM_ARCH__>=5 || !defined(__thumb__)
+	ldmia	sp!,{r4-r12,pc}
+#else
+	ldmia	sp!,{r4-r12,lr}
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	ecp_nistz256_point_double,.-ecp_nistz256_point_double
+___
+}
+
+########################################################################
+# void ecp_nistz256_point_add(P256_POINT *out,const P256_POINT *in1,
+#			      const P256_POINT *in2);
+{
+my ($res_x,$res_y,$res_z,
+    $in1_x,$in1_y,$in1_z,
+    $in2_x,$in2_y,$in2_z,
+    $H,$Hsqr,$R,$Rsqr,$Hcub,
+    $U1,$U2,$S1,$S2)=map(32*$_,(0..17));
+my ($Z1sqr, $Z2sqr) = ($Hsqr, $Rsqr);
+# above map() describes stack layout with 18 temporary
+# 256-bit vectors on top. Then note that we push
+# starting from r0, which means that we have copy of
+# input arguments just below these temporary vectors.
+# We use three of them for !in1infty, !in2intfy and
+# result of check for zero.
+
+$code.=<<___;
+.globl	ecp_nistz256_point_add
+.type	ecp_nistz256_point_add,%function
+.align	5
+ecp_nistz256_point_add:
+	stmdb	sp!,{r0-r12,lr}		@ push from r0, unusual, but intentional
+	sub	sp,sp,#32*18+16
+
+	ldmia	$b_ptr!,{r4-r11}	@ copy in2_x
+	add	r3,sp,#$in2_x
+	stmia	r3!,{r4-r11}
+	ldmia	$b_ptr!,{r4-r11}	@ copy in2_y
+	stmia	r3!,{r4-r11}
+	ldmia	$b_ptr,{r4-r11}		@ copy in2_z
+	orr	r12,r4,r5
+	orr	r12,r12,r6
+	orr	r12,r12,r7
+	orr	r12,r12,r8
+	orr	r12,r12,r9
+	orr	r12,r12,r10
+	orr	r12,r12,r11
+	cmp	r12,#0
+#ifdef	__thumb2__
+	it	ne
+#endif
+	movne	r12,#-1
+	stmia	r3,{r4-r11}
+	str	r12,[sp,#32*18+8]	@ !in2infty
+
+	ldmia	$a_ptr!,{r4-r11}	@ copy in1_x
+	add	r3,sp,#$in1_x
+	stmia	r3!,{r4-r11}
+	ldmia	$a_ptr!,{r4-r11}	@ copy in1_y
+	stmia	r3!,{r4-r11}
+	ldmia	$a_ptr,{r4-r11}		@ copy in1_z
+	orr	r12,r4,r5
+	orr	r12,r12,r6
+	orr	r12,r12,r7
+	orr	r12,r12,r8
+	orr	r12,r12,r9
+	orr	r12,r12,r10
+	orr	r12,r12,r11
+	cmp	r12,#0
+#ifdef	__thumb2__
+	it	ne
+#endif
+	movne	r12,#-1
+	stmia	r3,{r4-r11}
+	str	r12,[sp,#32*18+4]	@ !in1infty
+
+	add	$a_ptr,sp,#$in2_z
+	add	$b_ptr,sp,#$in2_z
+	add	$r_ptr,sp,#$Z2sqr
+	bl	__ecp_nistz256_mul_mont	@ p256_sqr_mont(Z2sqr, in2_z);
+
+	add	$a_ptr,sp,#$in1_z
+	add	$b_ptr,sp,#$in1_z
+	add	$r_ptr,sp,#$Z1sqr
+	bl	__ecp_nistz256_mul_mont	@ p256_sqr_mont(Z1sqr, in1_z);
+
+	add	$a_ptr,sp,#$in2_z
+	add	$b_ptr,sp,#$Z2sqr
+	add	$r_ptr,sp,#$S1
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(S1, Z2sqr, in2_z);
+
+	add	$a_ptr,sp,#$in1_z
+	add	$b_ptr,sp,#$Z1sqr
+	add	$r_ptr,sp,#$S2
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(S2, Z1sqr, in1_z);
+
+	add	$a_ptr,sp,#$in1_y
+	add	$b_ptr,sp,#$S1
+	add	$r_ptr,sp,#$S1
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(S1, S1, in1_y);
+
+	add	$a_ptr,sp,#$in2_y
+	add	$b_ptr,sp,#$S2
+	add	$r_ptr,sp,#$S2
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(S2, S2, in2_y);
+
+	add	$b_ptr,sp,#$S1
+	add	$r_ptr,sp,#$R
+	bl	__ecp_nistz256_sub_from	@ p256_sub(R, S2, S1);
+
+	orr	$a0,$a0,$a1		@ see if result is zero
+	orr	$a2,$a2,$a3
+	orr	$a4,$a4,$a5
+	orr	$a0,$a0,$a2
+	orr	$a4,$a4,$a6
+	orr	$a0,$a0,$a7
+	 add	$a_ptr,sp,#$in1_x
+	orr	$a0,$a0,$a4
+	 add	$b_ptr,sp,#$Z2sqr
+	str	$a0,[sp,#32*18+12]
+
+	add	$r_ptr,sp,#$U1
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(U1, in1_x, Z2sqr);
+
+	add	$a_ptr,sp,#$in2_x
+	add	$b_ptr,sp,#$Z1sqr
+	add	$r_ptr,sp,#$U2
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(U2, in2_x, Z1sqr);
+
+	add	$b_ptr,sp,#$U1
+	add	$r_ptr,sp,#$H
+	bl	__ecp_nistz256_sub_from	@ p256_sub(H, U2, U1);
+
+	orr	$a0,$a0,$a1		@ see if result is zero
+	orr	$a2,$a2,$a3
+	orr	$a4,$a4,$a5
+	orr	$a0,$a0,$a2
+	orr	$a4,$a4,$a6
+	orr	$a0,$a0,$a7
+	orrs	$a0,$a0,$a4
+
+	bne	.Ladd_proceed		@ is_equal(U1,U2)?
+
+	ldr	$t0,[sp,#32*18+4]
+	ldr	$t1,[sp,#32*18+8]
+	ldr	$t2,[sp,#32*18+12]
+	tst	$t0,$t1
+	beq	.Ladd_proceed		@ (in1infty || in2infty)?
+	tst	$t2,$t2
+	beq	.Ladd_double		@ is_equal(S1,S2)?
+
+	ldr	$r_ptr,[sp,#32*18+16]
+	eor	r4,r4,r4
+	eor	r5,r5,r5
+	eor	r6,r6,r6
+	eor	r7,r7,r7
+	eor	r8,r8,r8
+	eor	r9,r9,r9
+	eor	r10,r10,r10
+	eor	r11,r11,r11
+	stmia	$r_ptr!,{r4-r11}
+	stmia	$r_ptr!,{r4-r11}
+	stmia	$r_ptr!,{r4-r11}
+	b	.Ladd_done
+
+.align	4
+.Ladd_double:
+	ldr	$a_ptr,[sp,#32*18+20]
+	add	sp,sp,#32*(18-5)+16	@ difference in frame sizes
+	b	.Lpoint_double_shortcut
+
+.align	4
+.Ladd_proceed:
+	add	$a_ptr,sp,#$R
+	add	$b_ptr,sp,#$R
+	add	$r_ptr,sp,#$Rsqr
+	bl	__ecp_nistz256_mul_mont	@ p256_sqr_mont(Rsqr, R);
+
+	add	$a_ptr,sp,#$H
+	add	$b_ptr,sp,#$in1_z
+	add	$r_ptr,sp,#$res_z
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(res_z, H, in1_z);
+
+	add	$a_ptr,sp,#$H
+	add	$b_ptr,sp,#$H
+	add	$r_ptr,sp,#$Hsqr
+	bl	__ecp_nistz256_mul_mont	@ p256_sqr_mont(Hsqr, H);
+
+	add	$a_ptr,sp,#$in2_z
+	add	$b_ptr,sp,#$res_z
+	add	$r_ptr,sp,#$res_z
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(res_z, res_z, in2_z);
+
+	add	$a_ptr,sp,#$H
+	add	$b_ptr,sp,#$Hsqr
+	add	$r_ptr,sp,#$Hcub
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(Hcub, Hsqr, H);
+
+	add	$a_ptr,sp,#$Hsqr
+	add	$b_ptr,sp,#$U1
+	add	$r_ptr,sp,#$U2
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(U2, U1, Hsqr);
+
+	add	$r_ptr,sp,#$Hsqr
+	bl	__ecp_nistz256_add_self	@ p256_mul_by_2(Hsqr, U2);
+
+	add	$b_ptr,sp,#$Rsqr
+	add	$r_ptr,sp,#$res_x
+	bl	__ecp_nistz256_sub_morf	@ p256_sub(res_x, Rsqr, Hsqr);
+
+	add	$b_ptr,sp,#$Hcub
+	bl	__ecp_nistz256_sub_from	@  p256_sub(res_x, res_x, Hcub);
+
+	add	$b_ptr,sp,#$U2
+	add	$r_ptr,sp,#$res_y
+	bl	__ecp_nistz256_sub_morf	@ p256_sub(res_y, U2, res_x);
+
+	add	$a_ptr,sp,#$Hcub
+	add	$b_ptr,sp,#$S1
+	add	$r_ptr,sp,#$S2
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(S2, S1, Hcub);
+
+	add	$a_ptr,sp,#$R
+	add	$b_ptr,sp,#$res_y
+	add	$r_ptr,sp,#$res_y
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(res_y, res_y, R);
+
+	add	$b_ptr,sp,#$S2
+	bl	__ecp_nistz256_sub_from	@ p256_sub(res_y, res_y, S2);
+
+	ldr	r11,[sp,#32*18+4]	@ !in1intfy
+	ldr	r12,[sp,#32*18+8]	@ !in2intfy
+	add	r1,sp,#$res_x
+	add	r2,sp,#$in2_x
+	and	r10,r11,r12
+	mvn	r11,r11
+	add	r3,sp,#$in1_x
+	and	r11,r11,r12
+	mvn	r12,r12
+	ldr	$r_ptr,[sp,#32*18+16]
+___
+for($i=0;$i<96;$i+=8) {			# conditional moves
+$code.=<<___;
+	ldmia	r1!,{r4-r5}		@ res_x
+	ldmia	r2!,{r6-r7}		@ in2_x
+	ldmia	r3!,{r8-r9}		@ in1_x
+	and	r4,r4,r10
+	and	r5,r5,r10
+	and	r6,r6,r11
+	and	r7,r7,r11
+	and	r8,r8,r12
+	and	r9,r9,r12
+	orr	r4,r4,r6
+	orr	r5,r5,r7
+	orr	r4,r4,r8
+	orr	r5,r5,r9
+	stmia	$r_ptr!,{r4-r5}
+___
+}
+$code.=<<___;
+.Ladd_done:
+	add	sp,sp,#32*18+16+16	@ +16 means "skip even over saved r0-r3"
+#if __ARM_ARCH__>=5 || !defined(__thumb__)
+	ldmia	sp!,{r4-r12,pc}
+#else
+	ldmia	sp!,{r4-r12,lr}
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	ecp_nistz256_point_add,.-ecp_nistz256_point_add
+___
+}
+
+########################################################################
+# void ecp_nistz256_point_add_affine(P256_POINT *out,const P256_POINT *in1,
+#				     const P256_POINT_AFFINE *in2);
+{
+my ($res_x,$res_y,$res_z,
+    $in1_x,$in1_y,$in1_z,
+    $in2_x,$in2_y,
+    $U2,$S2,$H,$R,$Hsqr,$Hcub,$Rsqr)=map(32*$_,(0..14));
+my $Z1sqr = $S2;
+# above map() describes stack layout with 18 temporary
+# 256-bit vectors on top. Then note that we push
+# starting from r0, which means that we have copy of
+# input arguments just below these temporary vectors.
+# We use two of them for !in1infty, !in2intfy.
+
+my @ONE_mont=(1,0,0,-1,-1,-1,-2,0);
+
+$code.=<<___;
+.globl	ecp_nistz256_point_add_affine
+.type	ecp_nistz256_point_add_affine,%function
+.align	5
+ecp_nistz256_point_add_affine:
+	stmdb	sp!,{r0-r12,lr}		@ push from r0, unusual, but intentional
+	sub	sp,sp,#32*15
+
+	ldmia	$a_ptr!,{r4-r11}	@ copy in1_x
+	add	r3,sp,#$in1_x
+	stmia	r3!,{r4-r11}
+	ldmia	$a_ptr!,{r4-r11}	@ copy in1_y
+	stmia	r3!,{r4-r11}
+	ldmia	$a_ptr,{r4-r11}		@ copy in1_z
+	orr	r12,r4,r5
+	orr	r12,r12,r6
+	orr	r12,r12,r7
+	orr	r12,r12,r8
+	orr	r12,r12,r9
+	orr	r12,r12,r10
+	orr	r12,r12,r11
+	cmp	r12,#0
+#ifdef	__thumb2__
+	it	ne
+#endif
+	movne	r12,#-1
+	stmia	r3,{r4-r11}
+	str	r12,[sp,#32*15+4]	@ !in1infty
+
+	ldmia	$b_ptr!,{r4-r11}	@ copy in2_x
+	add	r3,sp,#$in2_x
+	orr	r12,r4,r5
+	orr	r12,r12,r6
+	orr	r12,r12,r7
+	orr	r12,r12,r8
+	orr	r12,r12,r9
+	orr	r12,r12,r10
+	orr	r12,r12,r11
+	stmia	r3!,{r4-r11}
+	ldmia	$b_ptr!,{r4-r11}	@ copy in2_y
+	orr	r12,r12,r4
+	orr	r12,r12,r5
+	orr	r12,r12,r6
+	orr	r12,r12,r7
+	orr	r12,r12,r8
+	orr	r12,r12,r9
+	orr	r12,r12,r10
+	orr	r12,r12,r11
+	stmia	r3!,{r4-r11}
+	cmp	r12,#0
+#ifdef	__thumb2__
+	it	ne
+#endif
+	movne	r12,#-1
+	str	r12,[sp,#32*15+8]	@ !in2infty
+
+	add	$a_ptr,sp,#$in1_z
+	add	$b_ptr,sp,#$in1_z
+	add	$r_ptr,sp,#$Z1sqr
+	bl	__ecp_nistz256_mul_mont	@ p256_sqr_mont(Z1sqr, in1_z);
+
+	add	$a_ptr,sp,#$Z1sqr
+	add	$b_ptr,sp,#$in2_x
+	add	$r_ptr,sp,#$U2
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(U2, Z1sqr, in2_x);
+
+	add	$b_ptr,sp,#$in1_x
+	add	$r_ptr,sp,#$H
+	bl	__ecp_nistz256_sub_from	@ p256_sub(H, U2, in1_x);
+
+	add	$a_ptr,sp,#$Z1sqr
+	add	$b_ptr,sp,#$in1_z
+	add	$r_ptr,sp,#$S2
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(S2, Z1sqr, in1_z);
+
+	add	$a_ptr,sp,#$H
+	add	$b_ptr,sp,#$in1_z
+	add	$r_ptr,sp,#$res_z
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(res_z, H, in1_z);
+
+	add	$a_ptr,sp,#$in2_y
+	add	$b_ptr,sp,#$S2
+	add	$r_ptr,sp,#$S2
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(S2, S2, in2_y);
+
+	add	$b_ptr,sp,#$in1_y
+	add	$r_ptr,sp,#$R
+	bl	__ecp_nistz256_sub_from	@ p256_sub(R, S2, in1_y);
+
+	add	$a_ptr,sp,#$H
+	add	$b_ptr,sp,#$H
+	add	$r_ptr,sp,#$Hsqr
+	bl	__ecp_nistz256_mul_mont	@ p256_sqr_mont(Hsqr, H);
+
+	add	$a_ptr,sp,#$R
+	add	$b_ptr,sp,#$R
+	add	$r_ptr,sp,#$Rsqr
+	bl	__ecp_nistz256_mul_mont	@ p256_sqr_mont(Rsqr, R);
+
+	add	$a_ptr,sp,#$H
+	add	$b_ptr,sp,#$Hsqr
+	add	$r_ptr,sp,#$Hcub
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(Hcub, Hsqr, H);
+
+	add	$a_ptr,sp,#$Hsqr
+	add	$b_ptr,sp,#$in1_x
+	add	$r_ptr,sp,#$U2
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(U2, in1_x, Hsqr);
+
+	add	$r_ptr,sp,#$Hsqr
+	bl	__ecp_nistz256_add_self	@ p256_mul_by_2(Hsqr, U2);
+
+	add	$b_ptr,sp,#$Rsqr
+	add	$r_ptr,sp,#$res_x
+	bl	__ecp_nistz256_sub_morf	@ p256_sub(res_x, Rsqr, Hsqr);
+
+	add	$b_ptr,sp,#$Hcub
+	bl	__ecp_nistz256_sub_from	@  p256_sub(res_x, res_x, Hcub);
+
+	add	$b_ptr,sp,#$U2
+	add	$r_ptr,sp,#$res_y
+	bl	__ecp_nistz256_sub_morf	@ p256_sub(res_y, U2, res_x);
+
+	add	$a_ptr,sp,#$Hcub
+	add	$b_ptr,sp,#$in1_y
+	add	$r_ptr,sp,#$S2
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(S2, in1_y, Hcub);
+
+	add	$a_ptr,sp,#$R
+	add	$b_ptr,sp,#$res_y
+	add	$r_ptr,sp,#$res_y
+	bl	__ecp_nistz256_mul_mont	@ p256_mul_mont(res_y, res_y, R);
+
+	add	$b_ptr,sp,#$S2
+	bl	__ecp_nistz256_sub_from	@ p256_sub(res_y, res_y, S2);
+
+	ldr	r11,[sp,#32*15+4]	@ !in1intfy
+	ldr	r12,[sp,#32*15+8]	@ !in2intfy
+	add	r1,sp,#$res_x
+	add	r2,sp,#$in2_x
+	and	r10,r11,r12
+	mvn	r11,r11
+	add	r3,sp,#$in1_x
+	and	r11,r11,r12
+	mvn	r12,r12
+	ldr	$r_ptr,[sp,#32*15]
+___
+for($i=0;$i<64;$i+=8) {			# conditional moves
+$code.=<<___;
+	ldmia	r1!,{r4-r5}		@ res_x
+	ldmia	r2!,{r6-r7}		@ in2_x
+	ldmia	r3!,{r8-r9}		@ in1_x
+	and	r4,r4,r10
+	and	r5,r5,r10
+	and	r6,r6,r11
+	and	r7,r7,r11
+	and	r8,r8,r12
+	and	r9,r9,r12
+	orr	r4,r4,r6
+	orr	r5,r5,r7
+	orr	r4,r4,r8
+	orr	r5,r5,r9
+	stmia	$r_ptr!,{r4-r5}
+___
+}
+for(;$i<96;$i+=8) {
+my $j=($i-64)/4;
+$code.=<<___;
+	ldmia	r1!,{r4-r5}		@ res_z
+	ldmia	r3!,{r8-r9}		@ in1_z
+	and	r4,r4,r10
+	and	r5,r5,r10
+	and	r6,r11,#@ONE_mont[$j]
+	and	r7,r11,#@ONE_mont[$j+1]
+	and	r8,r8,r12
+	and	r9,r9,r12
+	orr	r4,r4,r6
+	orr	r5,r5,r7
+	orr	r4,r4,r8
+	orr	r5,r5,r9
+	stmia	$r_ptr!,{r4-r5}
+___
+}
+$code.=<<___;
+	add	sp,sp,#32*15+16		@ +16 means "skip even over saved r0-r3"
+#if __ARM_ARCH__>=5 || !defined(__thumb__)
+	ldmia	sp!,{r4-r12,pc}
+#else
+	ldmia	sp!,{r4-r12,lr}
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	ecp_nistz256_point_add_affine,.-ecp_nistz256_point_add_affine
+___
+}					}}}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/geo;
+
+	s/\bq([0-9]+)#(lo|hi)/sprintf "d%d",2*$1+($2 eq "hi")/geo;
+
+	print $_,"\n";
+}
+close STDOUT;	# enforce flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-armv8.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-armv8.pl
new file mode 100644
index 000000000..887ddfb1e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-armv8.pl
@@ -0,0 +1,1883 @@
+#! /usr/bin/env perl
+# Copyright 2015-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# ECP_NISTZ256 module for ARMv8.
+#
+# February 2015.
+#
+# Original ECP_NISTZ256 submission targeting x86_64 is detailed in
+# http://eprint.iacr.org/2013/816.
+#
+#			with/without -DECP_NISTZ256_ASM
+# Apple A7		+190-360%
+# Cortex-A53		+190-400%
+# Cortex-A57		+190-350%
+# Denver		+230-400%
+#
+# Ranges denote minimum and maximum improvement coefficients depending
+# on benchmark. Lower coefficients are for ECDSA sign, server-side
+# operation. Keep in mind that +400% means 5x improvement.
+
+$flavour = shift;
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+die "can't locate arm-xlate.pl";
+
+open OUT,"| \"$^X\" $xlate $flavour $output";
+*STDOUT=*OUT;
+
+{
+my ($rp,$ap,$bp,$bi,$a0,$a1,$a2,$a3,$t0,$t1,$t2,$t3,$poly1,$poly3,
+    $acc0,$acc1,$acc2,$acc3,$acc4,$acc5) =
+    map("x$_",(0..17,19,20));
+
+my ($acc6,$acc7)=($ap,$bp);	# used in __ecp_nistz256_sqr_mont
+
+$code.=<<___;
+#include "arm_arch.h"
+
+.text
+___
+########################################################################
+# Convert ecp_nistz256_table.c to layout expected by ecp_nistz_gather_w7
+#
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+open TABLE,"<ecp_nistz256_table.c"		or
+open TABLE,"<${dir}../ecp_nistz256_table.c"	or
+die "failed to open ecp_nistz256_table.c:",$!;
+
+use integer;
+
+foreach(<TABLE>) {
+	s/TOBN\(\s*(0x[0-9a-f]+),\s*(0x[0-9a-f]+)\s*\)/push @arr,hex($2),hex($1)/geo;
+}
+close TABLE;
+
+# See ecp_nistz256_table.c for explanation for why it's 64*16*37.
+# 64*16*37-1 is because $#arr returns last valid index or @arr, not
+# amount of elements.
+die "insane number of elements" if ($#arr != 64*16*37-1);
+
+$code.=<<___;
+.globl	ecp_nistz256_precomputed
+.type	ecp_nistz256_precomputed,%object
+.align	12
+ecp_nistz256_precomputed:
+___
+########################################################################
+# this conversion smashes P256_POINT_AFFINE by individual bytes with
+# 64 byte interval, similar to
+#	1111222233334444
+#	1234123412341234
+for(1..37) {
+	@tbl = splice(@arr,0,64*16);
+	for($i=0;$i<64;$i++) {
+		undef @line;
+		for($j=0;$j<64;$j++) {
+			push @line,(@tbl[$j*16+$i/4]>>(($i%4)*8))&0xff;
+		}
+		$code.=".byte\t";
+		$code.=join(',',map { sprintf "0x%02x",$_} @line);
+		$code.="\n";
+	}
+}
+$code.=<<___;
+.size	ecp_nistz256_precomputed,.-ecp_nistz256_precomputed
+.align	5
+.Lpoly:
+.quad	0xffffffffffffffff,0x00000000ffffffff,0x0000000000000000,0xffffffff00000001
+.LRR:	// 2^512 mod P precomputed for NIST P256 polynomial
+.quad	0x0000000000000003,0xfffffffbffffffff,0xfffffffffffffffe,0x00000004fffffffd
+.Lone_mont:
+.quad	0x0000000000000001,0xffffffff00000000,0xffffffffffffffff,0x00000000fffffffe
+.Lone:
+.quad	1,0,0,0
+.Lord:
+.quad	0xf3b9cac2fc632551,0xbce6faada7179e84,0xffffffffffffffff,0xffffffff00000000
+.LordK:
+.quad	0xccd1c8aaee00bc4f
+.asciz	"ECP_NISTZ256 for ARMv8, CRYPTOGAMS by <appro\@openssl.org>"
+
+// void	ecp_nistz256_to_mont(BN_ULONG x0[4],const BN_ULONG x1[4]);
+.globl	ecp_nistz256_to_mont
+.type	ecp_nistz256_to_mont,%function
+.align	6
+ecp_nistz256_to_mont:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-32]!
+	add	x29,sp,#0
+	stp	x19,x20,[sp,#16]
+
+	ldr	$bi,.LRR		// bp[0]
+	ldp	$a0,$a1,[$ap]
+	ldp	$a2,$a3,[$ap,#16]
+	ldr	$poly1,.Lpoly+8
+	ldr	$poly3,.Lpoly+24
+	adr	$bp,.LRR		// &bp[0]
+
+	bl	__ecp_nistz256_mul_mont
+
+	ldp	x19,x20,[sp,#16]
+	ldp	x29,x30,[sp],#32
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	ecp_nistz256_to_mont,.-ecp_nistz256_to_mont
+
+// void	ecp_nistz256_from_mont(BN_ULONG x0[4],const BN_ULONG x1[4]);
+.globl	ecp_nistz256_from_mont
+.type	ecp_nistz256_from_mont,%function
+.align	4
+ecp_nistz256_from_mont:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-32]!
+	add	x29,sp,#0
+	stp	x19,x20,[sp,#16]
+
+	mov	$bi,#1			// bp[0]
+	ldp	$a0,$a1,[$ap]
+	ldp	$a2,$a3,[$ap,#16]
+	ldr	$poly1,.Lpoly+8
+	ldr	$poly3,.Lpoly+24
+	adr	$bp,.Lone		// &bp[0]
+
+	bl	__ecp_nistz256_mul_mont
+
+	ldp	x19,x20,[sp,#16]
+	ldp	x29,x30,[sp],#32
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	ecp_nistz256_from_mont,.-ecp_nistz256_from_mont
+
+// void	ecp_nistz256_mul_mont(BN_ULONG x0[4],const BN_ULONG x1[4],
+//					     const BN_ULONG x2[4]);
+.globl	ecp_nistz256_mul_mont
+.type	ecp_nistz256_mul_mont,%function
+.align	4
+ecp_nistz256_mul_mont:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-32]!
+	add	x29,sp,#0
+	stp	x19,x20,[sp,#16]
+
+	ldr	$bi,[$bp]		// bp[0]
+	ldp	$a0,$a1,[$ap]
+	ldp	$a2,$a3,[$ap,#16]
+	ldr	$poly1,.Lpoly+8
+	ldr	$poly3,.Lpoly+24
+
+	bl	__ecp_nistz256_mul_mont
+
+	ldp	x19,x20,[sp,#16]
+	ldp	x29,x30,[sp],#32
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	ecp_nistz256_mul_mont,.-ecp_nistz256_mul_mont
+
+// void	ecp_nistz256_sqr_mont(BN_ULONG x0[4],const BN_ULONG x1[4]);
+.globl	ecp_nistz256_sqr_mont
+.type	ecp_nistz256_sqr_mont,%function
+.align	4
+ecp_nistz256_sqr_mont:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-32]!
+	add	x29,sp,#0
+	stp	x19,x20,[sp,#16]
+
+	ldp	$a0,$a1,[$ap]
+	ldp	$a2,$a3,[$ap,#16]
+	ldr	$poly1,.Lpoly+8
+	ldr	$poly3,.Lpoly+24
+
+	bl	__ecp_nistz256_sqr_mont
+
+	ldp	x19,x20,[sp,#16]
+	ldp	x29,x30,[sp],#32
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	ecp_nistz256_sqr_mont,.-ecp_nistz256_sqr_mont
+
+// void	ecp_nistz256_add(BN_ULONG x0[4],const BN_ULONG x1[4],
+//					const BN_ULONG x2[4]);
+.globl	ecp_nistz256_add
+.type	ecp_nistz256_add,%function
+.align	4
+ecp_nistz256_add:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+
+	ldp	$acc0,$acc1,[$ap]
+	ldp	$t0,$t1,[$bp]
+	ldp	$acc2,$acc3,[$ap,#16]
+	ldp	$t2,$t3,[$bp,#16]
+	ldr	$poly1,.Lpoly+8
+	ldr	$poly3,.Lpoly+24
+
+	bl	__ecp_nistz256_add
+
+	ldp	x29,x30,[sp],#16
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	ecp_nistz256_add,.-ecp_nistz256_add
+
+// void	ecp_nistz256_div_by_2(BN_ULONG x0[4],const BN_ULONG x1[4]);
+.globl	ecp_nistz256_div_by_2
+.type	ecp_nistz256_div_by_2,%function
+.align	4
+ecp_nistz256_div_by_2:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+
+	ldp	$acc0,$acc1,[$ap]
+	ldp	$acc2,$acc3,[$ap,#16]
+	ldr	$poly1,.Lpoly+8
+	ldr	$poly3,.Lpoly+24
+
+	bl	__ecp_nistz256_div_by_2
+
+	ldp	x29,x30,[sp],#16
+	.inst	0xd50323bf		//  autiasp
+	ret
+.size	ecp_nistz256_div_by_2,.-ecp_nistz256_div_by_2
+
+// void	ecp_nistz256_mul_by_2(BN_ULONG x0[4],const BN_ULONG x1[4]);
+.globl	ecp_nistz256_mul_by_2
+.type	ecp_nistz256_mul_by_2,%function
+.align	4
+ecp_nistz256_mul_by_2:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+
+	ldp	$acc0,$acc1,[$ap]
+	ldp	$acc2,$acc3,[$ap,#16]
+	ldr	$poly1,.Lpoly+8
+	ldr	$poly3,.Lpoly+24
+	mov	$t0,$acc0
+	mov	$t1,$acc1
+	mov	$t2,$acc2
+	mov	$t3,$acc3
+
+	bl	__ecp_nistz256_add	// ret = a+a	// 2*a
+
+	ldp	x29,x30,[sp],#16
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	ecp_nistz256_mul_by_2,.-ecp_nistz256_mul_by_2
+
+// void	ecp_nistz256_mul_by_3(BN_ULONG x0[4],const BN_ULONG x1[4]);
+.globl	ecp_nistz256_mul_by_3
+.type	ecp_nistz256_mul_by_3,%function
+.align	4
+ecp_nistz256_mul_by_3:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+
+	ldp	$acc0,$acc1,[$ap]
+	ldp	$acc2,$acc3,[$ap,#16]
+	ldr	$poly1,.Lpoly+8
+	ldr	$poly3,.Lpoly+24
+	mov	$t0,$acc0
+	mov	$t1,$acc1
+	mov	$t2,$acc2
+	mov	$t3,$acc3
+	mov	$a0,$acc0
+	mov	$a1,$acc1
+	mov	$a2,$acc2
+	mov	$a3,$acc3
+
+	bl	__ecp_nistz256_add	// ret = a+a	// 2*a
+
+	mov	$t0,$a0
+	mov	$t1,$a1
+	mov	$t2,$a2
+	mov	$t3,$a3
+
+	bl	__ecp_nistz256_add	// ret += a	// 2*a+a=3*a
+
+	ldp	x29,x30,[sp],#16
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	ecp_nistz256_mul_by_3,.-ecp_nistz256_mul_by_3
+
+// void	ecp_nistz256_sub(BN_ULONG x0[4],const BN_ULONG x1[4],
+//				        const BN_ULONG x2[4]);
+.globl	ecp_nistz256_sub
+.type	ecp_nistz256_sub,%function
+.align	4
+ecp_nistz256_sub:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+
+	ldp	$acc0,$acc1,[$ap]
+	ldp	$acc2,$acc3,[$ap,#16]
+	ldr	$poly1,.Lpoly+8
+	ldr	$poly3,.Lpoly+24
+
+	bl	__ecp_nistz256_sub_from
+
+	ldp	x29,x30,[sp],#16
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	ecp_nistz256_sub,.-ecp_nistz256_sub
+
+// void	ecp_nistz256_neg(BN_ULONG x0[4],const BN_ULONG x1[4]);
+.globl	ecp_nistz256_neg
+.type	ecp_nistz256_neg,%function
+.align	4
+ecp_nistz256_neg:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+
+	mov	$bp,$ap
+	mov	$acc0,xzr		// a = 0
+	mov	$acc1,xzr
+	mov	$acc2,xzr
+	mov	$acc3,xzr
+	ldr	$poly1,.Lpoly+8
+	ldr	$poly3,.Lpoly+24
+
+	bl	__ecp_nistz256_sub_from
+
+	ldp	x29,x30,[sp],#16
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	ecp_nistz256_neg,.-ecp_nistz256_neg
+
+// note that __ecp_nistz256_mul_mont expects a[0-3] input pre-loaded
+// to $a0-$a3 and b[0] - to $bi
+.type	__ecp_nistz256_mul_mont,%function
+.align	4
+__ecp_nistz256_mul_mont:
+	mul	$acc0,$a0,$bi		// a[0]*b[0]
+	umulh	$t0,$a0,$bi
+
+	mul	$acc1,$a1,$bi		// a[1]*b[0]
+	umulh	$t1,$a1,$bi
+
+	mul	$acc2,$a2,$bi		// a[2]*b[0]
+	umulh	$t2,$a2,$bi
+
+	mul	$acc3,$a3,$bi		// a[3]*b[0]
+	umulh	$t3,$a3,$bi
+	ldr	$bi,[$bp,#8]		// b[1]
+
+	adds	$acc1,$acc1,$t0		// accumulate high parts of multiplication
+	 lsl	$t0,$acc0,#32
+	adcs	$acc2,$acc2,$t1
+	 lsr	$t1,$acc0,#32
+	adcs	$acc3,$acc3,$t2
+	adc	$acc4,xzr,$t3
+	mov	$acc5,xzr
+___
+for($i=1;$i<4;$i++) {
+        # Reduction iteration is normally performed by accumulating
+        # result of multiplication of modulus by "magic" digit [and
+        # omitting least significant word, which is guaranteed to
+        # be 0], but thanks to special form of modulus and "magic"
+        # digit being equal to least significant word, it can be
+        # performed with additions and subtractions alone. Indeed:
+        #
+        #            ffff0001.00000000.0000ffff.ffffffff
+        # *                                     abcdefgh
+        # + xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx.abcdefgh
+        #
+        # Now observing that ff..ff*x = (2^n-1)*x = 2^n*x-x, we
+        # rewrite above as:
+        #
+        #   xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx.abcdefgh
+        # + abcdefgh.abcdefgh.0000abcd.efgh0000.00000000
+        # - 0000abcd.efgh0000.00000000.00000000.abcdefgh
+        #
+        # or marking redundant operations:
+        #
+        #   xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx.--------
+        # + abcdefgh.abcdefgh.0000abcd.efgh0000.--------
+        # - 0000abcd.efgh0000.--------.--------.--------
+
+$code.=<<___;
+	subs	$t2,$acc0,$t0		// "*0xffff0001"
+	sbc	$t3,$acc0,$t1
+	adds	$acc0,$acc1,$t0		// +=acc[0]<<96 and omit acc[0]
+	 mul	$t0,$a0,$bi		// lo(a[0]*b[i])
+	adcs	$acc1,$acc2,$t1
+	 mul	$t1,$a1,$bi		// lo(a[1]*b[i])
+	adcs	$acc2,$acc3,$t2		// +=acc[0]*0xffff0001
+	 mul	$t2,$a2,$bi		// lo(a[2]*b[i])
+	adcs	$acc3,$acc4,$t3
+	 mul	$t3,$a3,$bi		// lo(a[3]*b[i])
+	adc	$acc4,$acc5,xzr
+
+	adds	$acc0,$acc0,$t0		// accumulate low parts of multiplication
+	 umulh	$t0,$a0,$bi		// hi(a[0]*b[i])
+	adcs	$acc1,$acc1,$t1
+	 umulh	$t1,$a1,$bi		// hi(a[1]*b[i])
+	adcs	$acc2,$acc2,$t2
+	 umulh	$t2,$a2,$bi		// hi(a[2]*b[i])
+	adcs	$acc3,$acc3,$t3
+	 umulh	$t3,$a3,$bi		// hi(a[3]*b[i])
+	adc	$acc4,$acc4,xzr
+___
+$code.=<<___	if ($i<3);
+	ldr	$bi,[$bp,#8*($i+1)]	// b[$i+1]
+___
+$code.=<<___;
+	adds	$acc1,$acc1,$t0		// accumulate high parts of multiplication
+	 lsl	$t0,$acc0,#32
+	adcs	$acc2,$acc2,$t1
+	 lsr	$t1,$acc0,#32
+	adcs	$acc3,$acc3,$t2
+	adcs	$acc4,$acc4,$t3
+	adc	$acc5,xzr,xzr
+___
+}
+$code.=<<___;
+	// last reduction
+	subs	$t2,$acc0,$t0		// "*0xffff0001"
+	sbc	$t3,$acc0,$t1
+	adds	$acc0,$acc1,$t0		// +=acc[0]<<96 and omit acc[0]
+	adcs	$acc1,$acc2,$t1
+	adcs	$acc2,$acc3,$t2		// +=acc[0]*0xffff0001
+	adcs	$acc3,$acc4,$t3
+	adc	$acc4,$acc5,xzr
+
+	adds	$t0,$acc0,#1		// subs	$t0,$acc0,#-1 // tmp = ret-modulus
+	sbcs	$t1,$acc1,$poly1
+	sbcs	$t2,$acc2,xzr
+	sbcs	$t3,$acc3,$poly3
+	sbcs	xzr,$acc4,xzr		// did it borrow?
+
+	csel	$acc0,$acc0,$t0,lo	// ret = borrow ? ret : ret-modulus
+	csel	$acc1,$acc1,$t1,lo
+	csel	$acc2,$acc2,$t2,lo
+	stp	$acc0,$acc1,[$rp]
+	csel	$acc3,$acc3,$t3,lo
+	stp	$acc2,$acc3,[$rp,#16]
+
+	ret
+.size	__ecp_nistz256_mul_mont,.-__ecp_nistz256_mul_mont
+
+// note that __ecp_nistz256_sqr_mont expects a[0-3] input pre-loaded
+// to $a0-$a3
+.type	__ecp_nistz256_sqr_mont,%function
+.align	4
+__ecp_nistz256_sqr_mont:
+	//  |  |  |  |  |  |a1*a0|  |
+	//  |  |  |  |  |a2*a0|  |  |
+	//  |  |a3*a2|a3*a0|  |  |  |
+	//  |  |  |  |a2*a1|  |  |  |
+	//  |  |  |a3*a1|  |  |  |  |
+	// *|  |  |  |  |  |  |  | 2|
+	// +|a3*a3|a2*a2|a1*a1|a0*a0|
+	//  |--+--+--+--+--+--+--+--|
+	//  |A7|A6|A5|A4|A3|A2|A1|A0|, where Ax is $accx, i.e. follow $accx
+	//
+	//  "can't overflow" below mark carrying into high part of
+	//  multiplication result, which can't overflow, because it
+	//  can never be all ones.
+
+	mul	$acc1,$a1,$a0		// a[1]*a[0]
+	umulh	$t1,$a1,$a0
+	mul	$acc2,$a2,$a0		// a[2]*a[0]
+	umulh	$t2,$a2,$a0
+	mul	$acc3,$a3,$a0		// a[3]*a[0]
+	umulh	$acc4,$a3,$a0
+
+	adds	$acc2,$acc2,$t1		// accumulate high parts of multiplication
+	 mul	$t0,$a2,$a1		// a[2]*a[1]
+	 umulh	$t1,$a2,$a1
+	adcs	$acc3,$acc3,$t2
+	 mul	$t2,$a3,$a1		// a[3]*a[1]
+	 umulh	$t3,$a3,$a1
+	adc	$acc4,$acc4,xzr		// can't overflow
+
+	mul	$acc5,$a3,$a2		// a[3]*a[2]
+	umulh	$acc6,$a3,$a2
+
+	adds	$t1,$t1,$t2		// accumulate high parts of multiplication
+	 mul	$acc0,$a0,$a0		// a[0]*a[0]
+	adc	$t2,$t3,xzr		// can't overflow
+
+	adds	$acc3,$acc3,$t0		// accumulate low parts of multiplication
+	 umulh	$a0,$a0,$a0
+	adcs	$acc4,$acc4,$t1
+	 mul	$t1,$a1,$a1		// a[1]*a[1]
+	adcs	$acc5,$acc5,$t2
+	 umulh	$a1,$a1,$a1
+	adc	$acc6,$acc6,xzr		// can't overflow
+
+	adds	$acc1,$acc1,$acc1	// acc[1-6]*=2
+	 mul	$t2,$a2,$a2		// a[2]*a[2]
+	adcs	$acc2,$acc2,$acc2
+	 umulh	$a2,$a2,$a2
+	adcs	$acc3,$acc3,$acc3
+	 mul	$t3,$a3,$a3		// a[3]*a[3]
+	adcs	$acc4,$acc4,$acc4
+	 umulh	$a3,$a3,$a3
+	adcs	$acc5,$acc5,$acc5
+	adcs	$acc6,$acc6,$acc6
+	adc	$acc7,xzr,xzr
+
+	adds	$acc1,$acc1,$a0		// +a[i]*a[i]
+	adcs	$acc2,$acc2,$t1
+	adcs	$acc3,$acc3,$a1
+	adcs	$acc4,$acc4,$t2
+	adcs	$acc5,$acc5,$a2
+	 lsl	$t0,$acc0,#32
+	adcs	$acc6,$acc6,$t3
+	 lsr	$t1,$acc0,#32
+	adc	$acc7,$acc7,$a3
+___
+for($i=0;$i<3;$i++) {			# reductions, see commentary in
+					# multiplication for details
+$code.=<<___;
+	subs	$t2,$acc0,$t0		// "*0xffff0001"
+	sbc	$t3,$acc0,$t1
+	adds	$acc0,$acc1,$t0		// +=acc[0]<<96 and omit acc[0]
+	adcs	$acc1,$acc2,$t1
+	 lsl	$t0,$acc0,#32
+	adcs	$acc2,$acc3,$t2		// +=acc[0]*0xffff0001
+	 lsr	$t1,$acc0,#32
+	adc	$acc3,$t3,xzr		// can't overflow
+___
+}
+$code.=<<___;
+	subs	$t2,$acc0,$t0		// "*0xffff0001"
+	sbc	$t3,$acc0,$t1
+	adds	$acc0,$acc1,$t0		// +=acc[0]<<96 and omit acc[0]
+	adcs	$acc1,$acc2,$t1
+	adcs	$acc2,$acc3,$t2		// +=acc[0]*0xffff0001
+	adc	$acc3,$t3,xzr		// can't overflow
+
+	adds	$acc0,$acc0,$acc4	// accumulate upper half
+	adcs	$acc1,$acc1,$acc5
+	adcs	$acc2,$acc2,$acc6
+	adcs	$acc3,$acc3,$acc7
+	adc	$acc4,xzr,xzr
+
+	adds	$t0,$acc0,#1		// subs	$t0,$acc0,#-1 // tmp = ret-modulus
+	sbcs	$t1,$acc1,$poly1
+	sbcs	$t2,$acc2,xzr
+	sbcs	$t3,$acc3,$poly3
+	sbcs	xzr,$acc4,xzr		// did it borrow?
+
+	csel	$acc0,$acc0,$t0,lo	// ret = borrow ? ret : ret-modulus
+	csel	$acc1,$acc1,$t1,lo
+	csel	$acc2,$acc2,$t2,lo
+	stp	$acc0,$acc1,[$rp]
+	csel	$acc3,$acc3,$t3,lo
+	stp	$acc2,$acc3,[$rp,#16]
+
+	ret
+.size	__ecp_nistz256_sqr_mont,.-__ecp_nistz256_sqr_mont
+
+// Note that __ecp_nistz256_add expects both input vectors pre-loaded to
+// $a0-$a3 and $t0-$t3. This is done because it's used in multiple
+// contexts, e.g. in multiplication by 2 and 3...
+.type	__ecp_nistz256_add,%function
+.align	4
+__ecp_nistz256_add:
+	adds	$acc0,$acc0,$t0		// ret = a+b
+	adcs	$acc1,$acc1,$t1
+	adcs	$acc2,$acc2,$t2
+	adcs	$acc3,$acc3,$t3
+	adc	$ap,xzr,xzr		// zap $ap
+
+	adds	$t0,$acc0,#1		// subs	$t0,$a0,#-1 // tmp = ret-modulus
+	sbcs	$t1,$acc1,$poly1
+	sbcs	$t2,$acc2,xzr
+	sbcs	$t3,$acc3,$poly3
+	sbcs	xzr,$ap,xzr		// did subtraction borrow?
+
+	csel	$acc0,$acc0,$t0,lo	// ret = borrow ? ret : ret-modulus
+	csel	$acc1,$acc1,$t1,lo
+	csel	$acc2,$acc2,$t2,lo
+	stp	$acc0,$acc1,[$rp]
+	csel	$acc3,$acc3,$t3,lo
+	stp	$acc2,$acc3,[$rp,#16]
+
+	ret
+.size	__ecp_nistz256_add,.-__ecp_nistz256_add
+
+.type	__ecp_nistz256_sub_from,%function
+.align	4
+__ecp_nistz256_sub_from:
+	ldp	$t0,$t1,[$bp]
+	ldp	$t2,$t3,[$bp,#16]
+	subs	$acc0,$acc0,$t0		// ret = a-b
+	sbcs	$acc1,$acc1,$t1
+	sbcs	$acc2,$acc2,$t2
+	sbcs	$acc3,$acc3,$t3
+	sbc	$ap,xzr,xzr		// zap $ap
+
+	subs	$t0,$acc0,#1		// adds	$t0,$a0,#-1 // tmp = ret+modulus
+	adcs	$t1,$acc1,$poly1
+	adcs	$t2,$acc2,xzr
+	adc	$t3,$acc3,$poly3
+	cmp	$ap,xzr			// did subtraction borrow?
+
+	csel	$acc0,$acc0,$t0,eq	// ret = borrow ? ret+modulus : ret
+	csel	$acc1,$acc1,$t1,eq
+	csel	$acc2,$acc2,$t2,eq
+	stp	$acc0,$acc1,[$rp]
+	csel	$acc3,$acc3,$t3,eq
+	stp	$acc2,$acc3,[$rp,#16]
+
+	ret
+.size	__ecp_nistz256_sub_from,.-__ecp_nistz256_sub_from
+
+.type	__ecp_nistz256_sub_morf,%function
+.align	4
+__ecp_nistz256_sub_morf:
+	ldp	$t0,$t1,[$bp]
+	ldp	$t2,$t3,[$bp,#16]
+	subs	$acc0,$t0,$acc0		// ret = b-a
+	sbcs	$acc1,$t1,$acc1
+	sbcs	$acc2,$t2,$acc2
+	sbcs	$acc3,$t3,$acc3
+	sbc	$ap,xzr,xzr		// zap $ap
+
+	subs	$t0,$acc0,#1		// adds	$t0,$a0,#-1 // tmp = ret+modulus
+	adcs	$t1,$acc1,$poly1
+	adcs	$t2,$acc2,xzr
+	adc	$t3,$acc3,$poly3
+	cmp	$ap,xzr			// did subtraction borrow?
+
+	csel	$acc0,$acc0,$t0,eq	// ret = borrow ? ret+modulus : ret
+	csel	$acc1,$acc1,$t1,eq
+	csel	$acc2,$acc2,$t2,eq
+	stp	$acc0,$acc1,[$rp]
+	csel	$acc3,$acc3,$t3,eq
+	stp	$acc2,$acc3,[$rp,#16]
+
+	ret
+.size	__ecp_nistz256_sub_morf,.-__ecp_nistz256_sub_morf
+
+.type	__ecp_nistz256_div_by_2,%function
+.align	4
+__ecp_nistz256_div_by_2:
+	subs	$t0,$acc0,#1		// adds	$t0,$a0,#-1 // tmp = a+modulus
+	adcs	$t1,$acc1,$poly1
+	adcs	$t2,$acc2,xzr
+	adcs	$t3,$acc3,$poly3
+	adc	$ap,xzr,xzr		// zap $ap
+	tst	$acc0,#1		// is a even?
+
+	csel	$acc0,$acc0,$t0,eq	// ret = even ? a : a+modulus
+	csel	$acc1,$acc1,$t1,eq
+	csel	$acc2,$acc2,$t2,eq
+	csel	$acc3,$acc3,$t3,eq
+	csel	$ap,xzr,$ap,eq
+
+	lsr	$acc0,$acc0,#1		// ret >>= 1
+	orr	$acc0,$acc0,$acc1,lsl#63
+	lsr	$acc1,$acc1,#1
+	orr	$acc1,$acc1,$acc2,lsl#63
+	lsr	$acc2,$acc2,#1
+	orr	$acc2,$acc2,$acc3,lsl#63
+	lsr	$acc3,$acc3,#1
+	stp	$acc0,$acc1,[$rp]
+	orr	$acc3,$acc3,$ap,lsl#63
+	stp	$acc2,$acc3,[$rp,#16]
+
+	ret
+.size	__ecp_nistz256_div_by_2,.-__ecp_nistz256_div_by_2
+___
+########################################################################
+# following subroutines are "literal" implementation of those found in
+# ecp_nistz256.c
+#
+########################################################################
+# void ecp_nistz256_point_double(P256_POINT *out,const P256_POINT *inp);
+#
+{
+my ($S,$M,$Zsqr,$tmp0)=map(32*$_,(0..3));
+# above map() describes stack layout with 4 temporary
+# 256-bit vectors on top.
+my ($rp_real,$ap_real) = map("x$_",(21,22));
+
+$code.=<<___;
+.globl	ecp_nistz256_point_double
+.type	ecp_nistz256_point_double,%function
+.align	5
+ecp_nistz256_point_double:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-80]!
+	add	x29,sp,#0
+	stp	x19,x20,[sp,#16]
+	stp	x21,x22,[sp,#32]
+	sub	sp,sp,#32*4
+
+.Ldouble_shortcut:
+	ldp	$acc0,$acc1,[$ap,#32]
+	 mov	$rp_real,$rp
+	ldp	$acc2,$acc3,[$ap,#48]
+	 mov	$ap_real,$ap
+	 ldr	$poly1,.Lpoly+8
+	mov	$t0,$acc0
+	 ldr	$poly3,.Lpoly+24
+	mov	$t1,$acc1
+	 ldp	$a0,$a1,[$ap_real,#64]	// forward load for p256_sqr_mont
+	mov	$t2,$acc2
+	mov	$t3,$acc3
+	 ldp	$a2,$a3,[$ap_real,#64+16]
+	add	$rp,sp,#$S
+	bl	__ecp_nistz256_add	// p256_mul_by_2(S, in_y);
+
+	add	$rp,sp,#$Zsqr
+	bl	__ecp_nistz256_sqr_mont	// p256_sqr_mont(Zsqr, in_z);
+
+	ldp	$t0,$t1,[$ap_real]
+	ldp	$t2,$t3,[$ap_real,#16]
+	mov	$a0,$acc0		// put Zsqr aside for p256_sub
+	mov	$a1,$acc1
+	mov	$a2,$acc2
+	mov	$a3,$acc3
+	add	$rp,sp,#$M
+	bl	__ecp_nistz256_add	// p256_add(M, Zsqr, in_x);
+
+	add	$bp,$ap_real,#0
+	mov	$acc0,$a0		// restore Zsqr
+	mov	$acc1,$a1
+	 ldp	$a0,$a1,[sp,#$S]	// forward load for p256_sqr_mont
+	mov	$acc2,$a2
+	mov	$acc3,$a3
+	 ldp	$a2,$a3,[sp,#$S+16]
+	add	$rp,sp,#$Zsqr
+	bl	__ecp_nistz256_sub_morf	// p256_sub(Zsqr, in_x, Zsqr);
+
+	add	$rp,sp,#$S
+	bl	__ecp_nistz256_sqr_mont	// p256_sqr_mont(S, S);
+
+	ldr	$bi,[$ap_real,#32]
+	ldp	$a0,$a1,[$ap_real,#64]
+	ldp	$a2,$a3,[$ap_real,#64+16]
+	add	$bp,$ap_real,#32
+	add	$rp,sp,#$tmp0
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(tmp0, in_z, in_y);
+
+	mov	$t0,$acc0
+	mov	$t1,$acc1
+	 ldp	$a0,$a1,[sp,#$S]	// forward load for p256_sqr_mont
+	mov	$t2,$acc2
+	mov	$t3,$acc3
+	 ldp	$a2,$a3,[sp,#$S+16]
+	add	$rp,$rp_real,#64
+	bl	__ecp_nistz256_add	// p256_mul_by_2(res_z, tmp0);
+
+	add	$rp,sp,#$tmp0
+	bl	__ecp_nistz256_sqr_mont	// p256_sqr_mont(tmp0, S);
+
+	 ldr	$bi,[sp,#$Zsqr]		// forward load for p256_mul_mont
+	 ldp	$a0,$a1,[sp,#$M]
+	 ldp	$a2,$a3,[sp,#$M+16]
+	add	$rp,$rp_real,#32
+	bl	__ecp_nistz256_div_by_2	// p256_div_by_2(res_y, tmp0);
+
+	add	$bp,sp,#$Zsqr
+	add	$rp,sp,#$M
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(M, M, Zsqr);
+
+	mov	$t0,$acc0		// duplicate M
+	mov	$t1,$acc1
+	mov	$t2,$acc2
+	mov	$t3,$acc3
+	mov	$a0,$acc0		// put M aside
+	mov	$a1,$acc1
+	mov	$a2,$acc2
+	mov	$a3,$acc3
+	add	$rp,sp,#$M
+	bl	__ecp_nistz256_add
+	mov	$t0,$a0			// restore M
+	mov	$t1,$a1
+	 ldr	$bi,[$ap_real]		// forward load for p256_mul_mont
+	mov	$t2,$a2
+	 ldp	$a0,$a1,[sp,#$S]
+	mov	$t3,$a3
+	 ldp	$a2,$a3,[sp,#$S+16]
+	bl	__ecp_nistz256_add	// p256_mul_by_3(M, M);
+
+	add	$bp,$ap_real,#0
+	add	$rp,sp,#$S
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(S, S, in_x);
+
+	mov	$t0,$acc0
+	mov	$t1,$acc1
+	 ldp	$a0,$a1,[sp,#$M]	// forward load for p256_sqr_mont
+	mov	$t2,$acc2
+	mov	$t3,$acc3
+	 ldp	$a2,$a3,[sp,#$M+16]
+	add	$rp,sp,#$tmp0
+	bl	__ecp_nistz256_add	// p256_mul_by_2(tmp0, S);
+
+	add	$rp,$rp_real,#0
+	bl	__ecp_nistz256_sqr_mont	// p256_sqr_mont(res_x, M);
+
+	add	$bp,sp,#$tmp0
+	bl	__ecp_nistz256_sub_from	// p256_sub(res_x, res_x, tmp0);
+
+	add	$bp,sp,#$S
+	add	$rp,sp,#$S
+	bl	__ecp_nistz256_sub_morf	// p256_sub(S, S, res_x);
+
+	ldr	$bi,[sp,#$M]
+	mov	$a0,$acc0		// copy S
+	mov	$a1,$acc1
+	mov	$a2,$acc2
+	mov	$a3,$acc3
+	add	$bp,sp,#$M
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(S, S, M);
+
+	add	$bp,$rp_real,#32
+	add	$rp,$rp_real,#32
+	bl	__ecp_nistz256_sub_from	// p256_sub(res_y, S, res_y);
+
+	add	sp,x29,#0		// destroy frame
+	ldp	x19,x20,[x29,#16]
+	ldp	x21,x22,[x29,#32]
+	ldp	x29,x30,[sp],#80
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	ecp_nistz256_point_double,.-ecp_nistz256_point_double
+___
+}
+
+########################################################################
+# void ecp_nistz256_point_add(P256_POINT *out,const P256_POINT *in1,
+#			      const P256_POINT *in2);
+{
+my ($res_x,$res_y,$res_z,
+    $H,$Hsqr,$R,$Rsqr,$Hcub,
+    $U1,$U2,$S1,$S2)=map(32*$_,(0..11));
+my ($Z1sqr, $Z2sqr) = ($Hsqr, $Rsqr);
+# above map() describes stack layout with 12 temporary
+# 256-bit vectors on top.
+my ($rp_real,$ap_real,$bp_real,$in1infty,$in2infty,$temp)=map("x$_",(21..26));
+
+$code.=<<___;
+.globl	ecp_nistz256_point_add
+.type	ecp_nistz256_point_add,%function
+.align	5
+ecp_nistz256_point_add:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-80]!
+	add	x29,sp,#0
+	stp	x19,x20,[sp,#16]
+	stp	x21,x22,[sp,#32]
+	stp	x23,x24,[sp,#48]
+	stp	x25,x26,[sp,#64]
+	sub	sp,sp,#32*12
+
+	ldp	$a0,$a1,[$bp,#64]	// in2_z
+	ldp	$a2,$a3,[$bp,#64+16]
+	 mov	$rp_real,$rp
+	 mov	$ap_real,$ap
+	 mov	$bp_real,$bp
+	 ldr	$poly1,.Lpoly+8
+	 ldr	$poly3,.Lpoly+24
+	orr	$t0,$a0,$a1
+	orr	$t2,$a2,$a3
+	orr	$in2infty,$t0,$t2
+	cmp	$in2infty,#0
+	csetm	$in2infty,ne		// !in2infty
+	add	$rp,sp,#$Z2sqr
+	bl	__ecp_nistz256_sqr_mont	// p256_sqr_mont(Z2sqr, in2_z);
+
+	ldp	$a0,$a1,[$ap_real,#64]	// in1_z
+	ldp	$a2,$a3,[$ap_real,#64+16]
+	orr	$t0,$a0,$a1
+	orr	$t2,$a2,$a3
+	orr	$in1infty,$t0,$t2
+	cmp	$in1infty,#0
+	csetm	$in1infty,ne		// !in1infty
+	add	$rp,sp,#$Z1sqr
+	bl	__ecp_nistz256_sqr_mont	// p256_sqr_mont(Z1sqr, in1_z);
+
+	ldr	$bi,[$bp_real,#64]
+	ldp	$a0,$a1,[sp,#$Z2sqr]
+	ldp	$a2,$a3,[sp,#$Z2sqr+16]
+	add	$bp,$bp_real,#64
+	add	$rp,sp,#$S1
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(S1, Z2sqr, in2_z);
+
+	ldr	$bi,[$ap_real,#64]
+	ldp	$a0,$a1,[sp,#$Z1sqr]
+	ldp	$a2,$a3,[sp,#$Z1sqr+16]
+	add	$bp,$ap_real,#64
+	add	$rp,sp,#$S2
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(S2, Z1sqr, in1_z);
+
+	ldr	$bi,[$ap_real,#32]
+	ldp	$a0,$a1,[sp,#$S1]
+	ldp	$a2,$a3,[sp,#$S1+16]
+	add	$bp,$ap_real,#32
+	add	$rp,sp,#$S1
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(S1, S1, in1_y);
+
+	ldr	$bi,[$bp_real,#32]
+	ldp	$a0,$a1,[sp,#$S2]
+	ldp	$a2,$a3,[sp,#$S2+16]
+	add	$bp,$bp_real,#32
+	add	$rp,sp,#$S2
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(S2, S2, in2_y);
+
+	add	$bp,sp,#$S1
+	 ldr	$bi,[sp,#$Z2sqr]	// forward load for p256_mul_mont
+	 ldp	$a0,$a1,[$ap_real]
+	 ldp	$a2,$a3,[$ap_real,#16]
+	add	$rp,sp,#$R
+	bl	__ecp_nistz256_sub_from	// p256_sub(R, S2, S1);
+
+	orr	$acc0,$acc0,$acc1	// see if result is zero
+	orr	$acc2,$acc2,$acc3
+	orr	$temp,$acc0,$acc2
+
+	add	$bp,sp,#$Z2sqr
+	add	$rp,sp,#$U1
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(U1, in1_x, Z2sqr);
+
+	ldr	$bi,[sp,#$Z1sqr]
+	ldp	$a0,$a1,[$bp_real]
+	ldp	$a2,$a3,[$bp_real,#16]
+	add	$bp,sp,#$Z1sqr
+	add	$rp,sp,#$U2
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(U2, in2_x, Z1sqr);
+
+	add	$bp,sp,#$U1
+	 ldp	$a0,$a1,[sp,#$R]	// forward load for p256_sqr_mont
+	 ldp	$a2,$a3,[sp,#$R+16]
+	add	$rp,sp,#$H
+	bl	__ecp_nistz256_sub_from	// p256_sub(H, U2, U1);
+
+	orr	$acc0,$acc0,$acc1	// see if result is zero
+	orr	$acc2,$acc2,$acc3
+	orr	$acc0,$acc0,$acc2
+	tst	$acc0,$acc0
+	b.ne	.Ladd_proceed		// is_equal(U1,U2)?
+
+	tst	$in1infty,$in2infty
+	b.eq	.Ladd_proceed		// (in1infty || in2infty)?
+
+	tst	$temp,$temp
+	b.eq	.Ladd_double		// is_equal(S1,S2)?
+
+	eor	$a0,$a0,$a0
+	eor	$a1,$a1,$a1
+	stp	$a0,$a1,[$rp_real]
+	stp	$a0,$a1,[$rp_real,#16]
+	stp	$a0,$a1,[$rp_real,#32]
+	stp	$a0,$a1,[$rp_real,#48]
+	stp	$a0,$a1,[$rp_real,#64]
+	stp	$a0,$a1,[$rp_real,#80]
+	b	.Ladd_done
+
+.align	4
+.Ladd_double:
+	mov	$ap,$ap_real
+	mov	$rp,$rp_real
+	ldp	x23,x24,[x29,#48]
+	ldp	x25,x26,[x29,#64]
+	add	sp,sp,#32*(12-4)	// difference in stack frames
+	b	.Ldouble_shortcut
+
+.align	4
+.Ladd_proceed:
+	add	$rp,sp,#$Rsqr
+	bl	__ecp_nistz256_sqr_mont	// p256_sqr_mont(Rsqr, R);
+
+	ldr	$bi,[$ap_real,#64]
+	ldp	$a0,$a1,[sp,#$H]
+	ldp	$a2,$a3,[sp,#$H+16]
+	add	$bp,$ap_real,#64
+	add	$rp,sp,#$res_z
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(res_z, H, in1_z);
+
+	ldp	$a0,$a1,[sp,#$H]
+	ldp	$a2,$a3,[sp,#$H+16]
+	add	$rp,sp,#$Hsqr
+	bl	__ecp_nistz256_sqr_mont	// p256_sqr_mont(Hsqr, H);
+
+	ldr	$bi,[$bp_real,#64]
+	ldp	$a0,$a1,[sp,#$res_z]
+	ldp	$a2,$a3,[sp,#$res_z+16]
+	add	$bp,$bp_real,#64
+	add	$rp,sp,#$res_z
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(res_z, res_z, in2_z);
+
+	ldr	$bi,[sp,#$H]
+	ldp	$a0,$a1,[sp,#$Hsqr]
+	ldp	$a2,$a3,[sp,#$Hsqr+16]
+	add	$bp,sp,#$H
+	add	$rp,sp,#$Hcub
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(Hcub, Hsqr, H);
+
+	ldr	$bi,[sp,#$Hsqr]
+	ldp	$a0,$a1,[sp,#$U1]
+	ldp	$a2,$a3,[sp,#$U1+16]
+	add	$bp,sp,#$Hsqr
+	add	$rp,sp,#$U2
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(U2, U1, Hsqr);
+
+	mov	$t0,$acc0
+	mov	$t1,$acc1
+	mov	$t2,$acc2
+	mov	$t3,$acc3
+	add	$rp,sp,#$Hsqr
+	bl	__ecp_nistz256_add	// p256_mul_by_2(Hsqr, U2);
+
+	add	$bp,sp,#$Rsqr
+	add	$rp,sp,#$res_x
+	bl	__ecp_nistz256_sub_morf	// p256_sub(res_x, Rsqr, Hsqr);
+
+	add	$bp,sp,#$Hcub
+	bl	__ecp_nistz256_sub_from	//  p256_sub(res_x, res_x, Hcub);
+
+	add	$bp,sp,#$U2
+	 ldr	$bi,[sp,#$Hcub]		// forward load for p256_mul_mont
+	 ldp	$a0,$a1,[sp,#$S1]
+	 ldp	$a2,$a3,[sp,#$S1+16]
+	add	$rp,sp,#$res_y
+	bl	__ecp_nistz256_sub_morf	// p256_sub(res_y, U2, res_x);
+
+	add	$bp,sp,#$Hcub
+	add	$rp,sp,#$S2
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(S2, S1, Hcub);
+
+	ldr	$bi,[sp,#$R]
+	ldp	$a0,$a1,[sp,#$res_y]
+	ldp	$a2,$a3,[sp,#$res_y+16]
+	add	$bp,sp,#$R
+	add	$rp,sp,#$res_y
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(res_y, res_y, R);
+
+	add	$bp,sp,#$S2
+	bl	__ecp_nistz256_sub_from	// p256_sub(res_y, res_y, S2);
+
+	ldp	$a0,$a1,[sp,#$res_x]		// res
+	ldp	$a2,$a3,[sp,#$res_x+16]
+	ldp	$t0,$t1,[$bp_real]		// in2
+	ldp	$t2,$t3,[$bp_real,#16]
+___
+for($i=0;$i<64;$i+=32) {		# conditional moves
+$code.=<<___;
+	ldp	$acc0,$acc1,[$ap_real,#$i]	// in1
+	cmp	$in1infty,#0			// !$in1intfy, remember?
+	ldp	$acc2,$acc3,[$ap_real,#$i+16]
+	csel	$t0,$a0,$t0,ne
+	csel	$t1,$a1,$t1,ne
+	ldp	$a0,$a1,[sp,#$res_x+$i+32]	// res
+	csel	$t2,$a2,$t2,ne
+	csel	$t3,$a3,$t3,ne
+	cmp	$in2infty,#0			// !$in2intfy, remember?
+	ldp	$a2,$a3,[sp,#$res_x+$i+48]
+	csel	$acc0,$t0,$acc0,ne
+	csel	$acc1,$t1,$acc1,ne
+	ldp	$t0,$t1,[$bp_real,#$i+32]	// in2
+	csel	$acc2,$t2,$acc2,ne
+	csel	$acc3,$t3,$acc3,ne
+	ldp	$t2,$t3,[$bp_real,#$i+48]
+	stp	$acc0,$acc1,[$rp_real,#$i]
+	stp	$acc2,$acc3,[$rp_real,#$i+16]
+___
+}
+$code.=<<___;
+	ldp	$acc0,$acc1,[$ap_real,#$i]	// in1
+	cmp	$in1infty,#0			// !$in1intfy, remember?
+	ldp	$acc2,$acc3,[$ap_real,#$i+16]
+	csel	$t0,$a0,$t0,ne
+	csel	$t1,$a1,$t1,ne
+	csel	$t2,$a2,$t2,ne
+	csel	$t3,$a3,$t3,ne
+	cmp	$in2infty,#0			// !$in2intfy, remember?
+	csel	$acc0,$t0,$acc0,ne
+	csel	$acc1,$t1,$acc1,ne
+	csel	$acc2,$t2,$acc2,ne
+	csel	$acc3,$t3,$acc3,ne
+	stp	$acc0,$acc1,[$rp_real,#$i]
+	stp	$acc2,$acc3,[$rp_real,#$i+16]
+
+.Ladd_done:
+	add	sp,x29,#0		// destroy frame
+	ldp	x19,x20,[x29,#16]
+	ldp	x21,x22,[x29,#32]
+	ldp	x23,x24,[x29,#48]
+	ldp	x25,x26,[x29,#64]
+	ldp	x29,x30,[sp],#80
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	ecp_nistz256_point_add,.-ecp_nistz256_point_add
+___
+}
+
+########################################################################
+# void ecp_nistz256_point_add_affine(P256_POINT *out,const P256_POINT *in1,
+#				     const P256_POINT_AFFINE *in2);
+{
+my ($res_x,$res_y,$res_z,
+    $U2,$S2,$H,$R,$Hsqr,$Hcub,$Rsqr)=map(32*$_,(0..9));
+my $Z1sqr = $S2;
+# above map() describes stack layout with 10 temporary
+# 256-bit vectors on top.
+my ($rp_real,$ap_real,$bp_real,$in1infty,$in2infty,$temp)=map("x$_",(21..26));
+
+$code.=<<___;
+.globl	ecp_nistz256_point_add_affine
+.type	ecp_nistz256_point_add_affine,%function
+.align	5
+ecp_nistz256_point_add_affine:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-80]!
+	add	x29,sp,#0
+	stp	x19,x20,[sp,#16]
+	stp	x21,x22,[sp,#32]
+	stp	x23,x24,[sp,#48]
+	stp	x25,x26,[sp,#64]
+	sub	sp,sp,#32*10
+
+	mov	$rp_real,$rp
+	mov	$ap_real,$ap
+	mov	$bp_real,$bp
+	ldr	$poly1,.Lpoly+8
+	ldr	$poly3,.Lpoly+24
+
+	ldp	$a0,$a1,[$ap,#64]	// in1_z
+	ldp	$a2,$a3,[$ap,#64+16]
+	orr	$t0,$a0,$a1
+	orr	$t2,$a2,$a3
+	orr	$in1infty,$t0,$t2
+	cmp	$in1infty,#0
+	csetm	$in1infty,ne		// !in1infty
+
+	ldp	$acc0,$acc1,[$bp]	// in2_x
+	ldp	$acc2,$acc3,[$bp,#16]
+	ldp	$t0,$t1,[$bp,#32]	// in2_y
+	ldp	$t2,$t3,[$bp,#48]
+	orr	$acc0,$acc0,$acc1
+	orr	$acc2,$acc2,$acc3
+	orr	$t0,$t0,$t1
+	orr	$t2,$t2,$t3
+	orr	$acc0,$acc0,$acc2
+	orr	$t0,$t0,$t2
+	orr	$in2infty,$acc0,$t0
+	cmp	$in2infty,#0
+	csetm	$in2infty,ne		// !in2infty
+
+	add	$rp,sp,#$Z1sqr
+	bl	__ecp_nistz256_sqr_mont	// p256_sqr_mont(Z1sqr, in1_z);
+
+	mov	$a0,$acc0
+	mov	$a1,$acc1
+	mov	$a2,$acc2
+	mov	$a3,$acc3
+	ldr	$bi,[$bp_real]
+	add	$bp,$bp_real,#0
+	add	$rp,sp,#$U2
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(U2, Z1sqr, in2_x);
+
+	add	$bp,$ap_real,#0
+	 ldr	$bi,[$ap_real,#64]	// forward load for p256_mul_mont
+	 ldp	$a0,$a1,[sp,#$Z1sqr]
+	 ldp	$a2,$a3,[sp,#$Z1sqr+16]
+	add	$rp,sp,#$H
+	bl	__ecp_nistz256_sub_from	// p256_sub(H, U2, in1_x);
+
+	add	$bp,$ap_real,#64
+	add	$rp,sp,#$S2
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(S2, Z1sqr, in1_z);
+
+	ldr	$bi,[$ap_real,#64]
+	ldp	$a0,$a1,[sp,#$H]
+	ldp	$a2,$a3,[sp,#$H+16]
+	add	$bp,$ap_real,#64
+	add	$rp,sp,#$res_z
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(res_z, H, in1_z);
+
+	ldr	$bi,[$bp_real,#32]
+	ldp	$a0,$a1,[sp,#$S2]
+	ldp	$a2,$a3,[sp,#$S2+16]
+	add	$bp,$bp_real,#32
+	add	$rp,sp,#$S2
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(S2, S2, in2_y);
+
+	add	$bp,$ap_real,#32
+	 ldp	$a0,$a1,[sp,#$H]	// forward load for p256_sqr_mont
+	 ldp	$a2,$a3,[sp,#$H+16]
+	add	$rp,sp,#$R
+	bl	__ecp_nistz256_sub_from	// p256_sub(R, S2, in1_y);
+
+	add	$rp,sp,#$Hsqr
+	bl	__ecp_nistz256_sqr_mont	// p256_sqr_mont(Hsqr, H);
+
+	ldp	$a0,$a1,[sp,#$R]
+	ldp	$a2,$a3,[sp,#$R+16]
+	add	$rp,sp,#$Rsqr
+	bl	__ecp_nistz256_sqr_mont	// p256_sqr_mont(Rsqr, R);
+
+	ldr	$bi,[sp,#$H]
+	ldp	$a0,$a1,[sp,#$Hsqr]
+	ldp	$a2,$a3,[sp,#$Hsqr+16]
+	add	$bp,sp,#$H
+	add	$rp,sp,#$Hcub
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(Hcub, Hsqr, H);
+
+	ldr	$bi,[$ap_real]
+	ldp	$a0,$a1,[sp,#$Hsqr]
+	ldp	$a2,$a3,[sp,#$Hsqr+16]
+	add	$bp,$ap_real,#0
+	add	$rp,sp,#$U2
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(U2, in1_x, Hsqr);
+
+	mov	$t0,$acc0
+	mov	$t1,$acc1
+	mov	$t2,$acc2
+	mov	$t3,$acc3
+	add	$rp,sp,#$Hsqr
+	bl	__ecp_nistz256_add	// p256_mul_by_2(Hsqr, U2);
+
+	add	$bp,sp,#$Rsqr
+	add	$rp,sp,#$res_x
+	bl	__ecp_nistz256_sub_morf	// p256_sub(res_x, Rsqr, Hsqr);
+
+	add	$bp,sp,#$Hcub
+	bl	__ecp_nistz256_sub_from	//  p256_sub(res_x, res_x, Hcub);
+
+	add	$bp,sp,#$U2
+	 ldr	$bi,[$ap_real,#32]	// forward load for p256_mul_mont
+	 ldp	$a0,$a1,[sp,#$Hcub]
+	 ldp	$a2,$a3,[sp,#$Hcub+16]
+	add	$rp,sp,#$res_y
+	bl	__ecp_nistz256_sub_morf	// p256_sub(res_y, U2, res_x);
+
+	add	$bp,$ap_real,#32
+	add	$rp,sp,#$S2
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(S2, in1_y, Hcub);
+
+	ldr	$bi,[sp,#$R]
+	ldp	$a0,$a1,[sp,#$res_y]
+	ldp	$a2,$a3,[sp,#$res_y+16]
+	add	$bp,sp,#$R
+	add	$rp,sp,#$res_y
+	bl	__ecp_nistz256_mul_mont	// p256_mul_mont(res_y, res_y, R);
+
+	add	$bp,sp,#$S2
+	bl	__ecp_nistz256_sub_from	// p256_sub(res_y, res_y, S2);
+
+	ldp	$a0,$a1,[sp,#$res_x]		// res
+	ldp	$a2,$a3,[sp,#$res_x+16]
+	ldp	$t0,$t1,[$bp_real]		// in2
+	ldp	$t2,$t3,[$bp_real,#16]
+___
+for($i=0;$i<64;$i+=32) {		# conditional moves
+$code.=<<___;
+	ldp	$acc0,$acc1,[$ap_real,#$i]	// in1
+	cmp	$in1infty,#0			// !$in1intfy, remember?
+	ldp	$acc2,$acc3,[$ap_real,#$i+16]
+	csel	$t0,$a0,$t0,ne
+	csel	$t1,$a1,$t1,ne
+	ldp	$a0,$a1,[sp,#$res_x+$i+32]	// res
+	csel	$t2,$a2,$t2,ne
+	csel	$t3,$a3,$t3,ne
+	cmp	$in2infty,#0			// !$in2intfy, remember?
+	ldp	$a2,$a3,[sp,#$res_x+$i+48]
+	csel	$acc0,$t0,$acc0,ne
+	csel	$acc1,$t1,$acc1,ne
+	ldp	$t0,$t1,[$bp_real,#$i+32]	// in2
+	csel	$acc2,$t2,$acc2,ne
+	csel	$acc3,$t3,$acc3,ne
+	ldp	$t2,$t3,[$bp_real,#$i+48]
+	stp	$acc0,$acc1,[$rp_real,#$i]
+	stp	$acc2,$acc3,[$rp_real,#$i+16]
+___
+$code.=<<___	if ($i == 0);
+	adr	$bp_real,.Lone_mont-64
+___
+}
+$code.=<<___;
+	ldp	$acc0,$acc1,[$ap_real,#$i]	// in1
+	cmp	$in1infty,#0			// !$in1intfy, remember?
+	ldp	$acc2,$acc3,[$ap_real,#$i+16]
+	csel	$t0,$a0,$t0,ne
+	csel	$t1,$a1,$t1,ne
+	csel	$t2,$a2,$t2,ne
+	csel	$t3,$a3,$t3,ne
+	cmp	$in2infty,#0			// !$in2intfy, remember?
+	csel	$acc0,$t0,$acc0,ne
+	csel	$acc1,$t1,$acc1,ne
+	csel	$acc2,$t2,$acc2,ne
+	csel	$acc3,$t3,$acc3,ne
+	stp	$acc0,$acc1,[$rp_real,#$i]
+	stp	$acc2,$acc3,[$rp_real,#$i+16]
+
+	add	sp,x29,#0		// destroy frame
+	ldp	x19,x20,[x29,#16]
+	ldp	x21,x22,[x29,#32]
+	ldp	x23,x24,[x29,#48]
+	ldp	x25,x26,[x29,#64]
+	ldp	x29,x30,[sp],#80
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	ecp_nistz256_point_add_affine,.-ecp_nistz256_point_add_affine
+___
+}
+if (1) {
+my ($ord0,$ord1) = ($poly1,$poly3);
+my ($ord2,$ord3,$ordk,$t4) = map("x$_",(21..24));
+my $acc7 = $bi;
+
+$code.=<<___;
+////////////////////////////////////////////////////////////////////////
+// void ecp_nistz256_ord_mul_mont(uint64_t res[4], uint64_t a[4],
+//                                uint64_t b[4]);
+.globl	ecp_nistz256_ord_mul_mont
+.type	ecp_nistz256_ord_mul_mont,%function
+.align	4
+ecp_nistz256_ord_mul_mont:
+	stp	x29,x30,[sp,#-64]!
+	add	x29,sp,#0
+	stp	x19,x20,[sp,#16]
+	stp	x21,x22,[sp,#32]
+	stp	x23,x24,[sp,#48]
+
+	adr	$ordk,.Lord
+	ldr	$bi,[$bp]		// bp[0]
+	ldp	$a0,$a1,[$ap]
+	ldp	$a2,$a3,[$ap,#16]
+
+	ldp	$ord0,$ord1,[$ordk,#0]
+	ldp	$ord2,$ord3,[$ordk,#16]
+	ldr	$ordk,[$ordk,#32]
+
+	mul	$acc0,$a0,$bi		// a[0]*b[0]
+	umulh	$t0,$a0,$bi
+
+	mul	$acc1,$a1,$bi		// a[1]*b[0]
+	umulh	$t1,$a1,$bi
+
+	mul	$acc2,$a2,$bi		// a[2]*b[0]
+	umulh	$t2,$a2,$bi
+
+	mul	$acc3,$a3,$bi		// a[3]*b[0]
+	umulh	$acc4,$a3,$bi
+
+	mul	$t4,$acc0,$ordk
+
+	adds	$acc1,$acc1,$t0		// accumulate high parts of multiplication
+	adcs	$acc2,$acc2,$t1
+	adcs	$acc3,$acc3,$t2
+	adc	$acc4,$acc4,xzr
+	mov	$acc5,xzr
+___
+for ($i=1;$i<4;$i++) {
+	################################################################
+	#            ffff0000.ffffffff.yyyyyyyy.zzzzzzzz
+	# *                                     abcdefgh
+	# + xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx
+	#
+	# Now observing that ff..ff*x = (2^n-1)*x = 2^n*x-x, we
+	# rewrite above as:
+	#
+	#   xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx
+	# - 0000abcd.efgh0000.abcdefgh.00000000.00000000
+	# + abcdefgh.abcdefgh.yzayzbyz.cyzdyzey.zfyzgyzh
+$code.=<<___;
+	ldr	$bi,[$bp,#8*$i]		// b[i]
+
+	lsl	$t0,$t4,#32
+	subs	$acc2,$acc2,$t4
+	lsr	$t1,$t4,#32
+	sbcs	$acc3,$acc3,$t0
+	sbcs	$acc4,$acc4,$t1
+	sbc	$acc5,$acc5,xzr
+
+	subs	xzr,$acc0,#1
+	umulh	$t1,$ord0,$t4
+	mul	$t2,$ord1,$t4
+	umulh	$t3,$ord1,$t4
+
+	adcs	$t2,$t2,$t1
+	 mul	$t0,$a0,$bi
+	adc	$t3,$t3,xzr
+	 mul	$t1,$a1,$bi
+
+	adds	$acc0,$acc1,$t2
+	 mul	$t2,$a2,$bi
+	adcs	$acc1,$acc2,$t3
+	 mul	$t3,$a3,$bi
+	adcs	$acc2,$acc3,$t4
+	adcs	$acc3,$acc4,$t4
+	adc	$acc4,$acc5,xzr
+
+	adds	$acc0,$acc0,$t0		// accumulate low parts
+	umulh	$t0,$a0,$bi
+	adcs	$acc1,$acc1,$t1
+	umulh	$t1,$a1,$bi
+	adcs	$acc2,$acc2,$t2
+	umulh	$t2,$a2,$bi
+	adcs	$acc3,$acc3,$t3
+	umulh	$t3,$a3,$bi
+	adc	$acc4,$acc4,xzr
+	mul	$t4,$acc0,$ordk
+	adds	$acc1,$acc1,$t0		// accumulate high parts
+	adcs	$acc2,$acc2,$t1
+	adcs	$acc3,$acc3,$t2
+	adcs	$acc4,$acc4,$t3
+	adc	$acc5,xzr,xzr
+___
+}
+$code.=<<___;
+	lsl	$t0,$t4,#32		// last reduction
+	subs	$acc2,$acc2,$t4
+	lsr	$t1,$t4,#32
+	sbcs	$acc3,$acc3,$t0
+	sbcs	$acc4,$acc4,$t1
+	sbc	$acc5,$acc5,xzr
+
+	subs	xzr,$acc0,#1
+	umulh	$t1,$ord0,$t4
+	mul	$t2,$ord1,$t4
+	umulh	$t3,$ord1,$t4
+
+	adcs	$t2,$t2,$t1
+	adc	$t3,$t3,xzr
+
+	adds	$acc0,$acc1,$t2
+	adcs	$acc1,$acc2,$t3
+	adcs	$acc2,$acc3,$t4
+	adcs	$acc3,$acc4,$t4
+	adc	$acc4,$acc5,xzr
+
+	subs	$t0,$acc0,$ord0		// ret -= modulus
+	sbcs	$t1,$acc1,$ord1
+	sbcs	$t2,$acc2,$ord2
+	sbcs	$t3,$acc3,$ord3
+	sbcs	xzr,$acc4,xzr
+
+	csel	$acc0,$acc0,$t0,lo	// ret = borrow ? ret : ret-modulus
+	csel	$acc1,$acc1,$t1,lo
+	csel	$acc2,$acc2,$t2,lo
+	stp	$acc0,$acc1,[$rp]
+	csel	$acc3,$acc3,$t3,lo
+	stp	$acc2,$acc3,[$rp,#16]
+
+	ldp	x19,x20,[sp,#16]
+	ldp	x21,x22,[sp,#32]
+	ldp	x23,x24,[sp,#48]
+	ldr	x29,[sp],#64
+	ret
+.size	ecp_nistz256_ord_mul_mont,.-ecp_nistz256_ord_mul_mont
+
+////////////////////////////////////////////////////////////////////////
+// void ecp_nistz256_ord_sqr_mont(uint64_t res[4], uint64_t a[4],
+//                                int rep);
+.globl	ecp_nistz256_ord_sqr_mont
+.type	ecp_nistz256_ord_sqr_mont,%function
+.align	4
+ecp_nistz256_ord_sqr_mont:
+	stp	x29,x30,[sp,#-64]!
+	add	x29,sp,#0
+	stp	x19,x20,[sp,#16]
+	stp	x21,x22,[sp,#32]
+	stp	x23,x24,[sp,#48]
+
+	adr	$ordk,.Lord
+	ldp	$a0,$a1,[$ap]
+	ldp	$a2,$a3,[$ap,#16]
+
+	ldp	$ord0,$ord1,[$ordk,#0]
+	ldp	$ord2,$ord3,[$ordk,#16]
+	ldr	$ordk,[$ordk,#32]
+	b	.Loop_ord_sqr
+
+.align	4
+.Loop_ord_sqr:
+	sub	$bp,$bp,#1
+	////////////////////////////////////////////////////////////////
+	//  |  |  |  |  |  |a1*a0|  |
+	//  |  |  |  |  |a2*a0|  |  |
+	//  |  |a3*a2|a3*a0|  |  |  |
+	//  |  |  |  |a2*a1|  |  |  |
+	//  |  |  |a3*a1|  |  |  |  |
+	// *|  |  |  |  |  |  |  | 2|
+	// +|a3*a3|a2*a2|a1*a1|a0*a0|
+	//  |--+--+--+--+--+--+--+--|
+	//  |A7|A6|A5|A4|A3|A2|A1|A0|, where Ax is $accx, i.e. follow $accx
+	//
+	//  "can't overflow" below mark carrying into high part of
+	//  multiplication result, which can't overflow, because it
+	//  can never be all ones.
+
+	mul	$acc1,$a1,$a0		// a[1]*a[0]
+	umulh	$t1,$a1,$a0
+	mul	$acc2,$a2,$a0		// a[2]*a[0]
+	umulh	$t2,$a2,$a0
+	mul	$acc3,$a3,$a0		// a[3]*a[0]
+	umulh	$acc4,$a3,$a0
+
+	adds	$acc2,$acc2,$t1		// accumulate high parts of multiplication
+	 mul	$t0,$a2,$a1		// a[2]*a[1]
+	 umulh	$t1,$a2,$a1
+	adcs	$acc3,$acc3,$t2
+	 mul	$t2,$a3,$a1		// a[3]*a[1]
+	 umulh	$t3,$a3,$a1
+	adc	$acc4,$acc4,xzr		// can't overflow
+
+	mul	$acc5,$a3,$a2		// a[3]*a[2]
+	umulh	$acc6,$a3,$a2
+
+	adds	$t1,$t1,$t2		// accumulate high parts of multiplication
+	 mul	$acc0,$a0,$a0		// a[0]*a[0]
+	adc	$t2,$t3,xzr		// can't overflow
+
+	adds	$acc3,$acc3,$t0		// accumulate low parts of multiplication
+	 umulh	$a0,$a0,$a0
+	adcs	$acc4,$acc4,$t1
+	 mul	$t1,$a1,$a1		// a[1]*a[1]
+	adcs	$acc5,$acc5,$t2
+	 umulh	$a1,$a1,$a1
+	adc	$acc6,$acc6,xzr		// can't overflow
+
+	adds	$acc1,$acc1,$acc1	// acc[1-6]*=2
+	 mul	$t2,$a2,$a2		// a[2]*a[2]
+	adcs	$acc2,$acc2,$acc2
+	 umulh	$a2,$a2,$a2
+	adcs	$acc3,$acc3,$acc3
+	 mul	$t3,$a3,$a3		// a[3]*a[3]
+	adcs	$acc4,$acc4,$acc4
+	 umulh	$a3,$a3,$a3
+	adcs	$acc5,$acc5,$acc5
+	adcs	$acc6,$acc6,$acc6
+	adc	$acc7,xzr,xzr
+
+	adds	$acc1,$acc1,$a0		// +a[i]*a[i]
+	 mul	$t4,$acc0,$ordk
+	adcs	$acc2,$acc2,$t1
+	adcs	$acc3,$acc3,$a1
+	adcs	$acc4,$acc4,$t2
+	adcs	$acc5,$acc5,$a2
+	adcs	$acc6,$acc6,$t3
+	adc	$acc7,$acc7,$a3
+___
+for($i=0; $i<4; $i++) {			# reductions
+$code.=<<___;
+	subs	xzr,$acc0,#1
+	umulh	$t1,$ord0,$t4
+	mul	$t2,$ord1,$t4
+	umulh	$t3,$ord1,$t4
+
+	adcs	$t2,$t2,$t1
+	adc	$t3,$t3,xzr
+
+	adds	$acc0,$acc1,$t2
+	adcs	$acc1,$acc2,$t3
+	adcs	$acc2,$acc3,$t4
+	adc	$acc3,xzr,$t4		// can't overflow
+___
+$code.=<<___	if ($i<3);
+	mul	$t3,$acc0,$ordk
+___
+$code.=<<___;
+	lsl	$t0,$t4,#32
+	subs	$acc1,$acc1,$t4
+	lsr	$t1,$t4,#32
+	sbcs	$acc2,$acc2,$t0
+	sbc	$acc3,$acc3,$t1		// can't borrow
+___
+	($t3,$t4) = ($t4,$t3);
+}
+$code.=<<___;
+	adds	$acc0,$acc0,$acc4	// accumulate upper half
+	adcs	$acc1,$acc1,$acc5
+	adcs	$acc2,$acc2,$acc6
+	adcs	$acc3,$acc3,$acc7
+	adc	$acc4,xzr,xzr
+
+	subs	$t0,$acc0,$ord0		// ret -= modulus
+	sbcs	$t1,$acc1,$ord1
+	sbcs	$t2,$acc2,$ord2
+	sbcs	$t3,$acc3,$ord3
+	sbcs	xzr,$acc4,xzr
+
+	csel	$a0,$acc0,$t0,lo	// ret = borrow ? ret : ret-modulus
+	csel	$a1,$acc1,$t1,lo
+	csel	$a2,$acc2,$t2,lo
+	csel	$a3,$acc3,$t3,lo
+
+	cbnz	$bp,.Loop_ord_sqr
+
+	stp	$a0,$a1,[$rp]
+	stp	$a2,$a3,[$rp,#16]
+
+	ldp	x19,x20,[sp,#16]
+	ldp	x21,x22,[sp,#32]
+	ldp	x23,x24,[sp,#48]
+	ldr	x29,[sp],#64
+	ret
+.size	ecp_nistz256_ord_sqr_mont,.-ecp_nistz256_ord_sqr_mont
+___
+}	}
+
+########################################################################
+# scatter-gather subroutines
+{
+my ($out,$inp,$index,$mask)=map("x$_",(0..3));
+$code.=<<___;
+// void	ecp_nistz256_scatter_w5(void *x0,const P256_POINT *x1,
+//					 int x2);
+.globl	ecp_nistz256_scatter_w5
+.type	ecp_nistz256_scatter_w5,%function
+.align	4
+ecp_nistz256_scatter_w5:
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+
+	add	$out,$out,$index,lsl#2
+
+	ldp	x4,x5,[$inp]		// X
+	ldp	x6,x7,[$inp,#16]
+	str	w4,[$out,#64*0-4]
+	lsr	x4,x4,#32
+	str	w5,[$out,#64*1-4]
+	lsr	x5,x5,#32
+	str	w6,[$out,#64*2-4]
+	lsr	x6,x6,#32
+	str	w7,[$out,#64*3-4]
+	lsr	x7,x7,#32
+	str	w4,[$out,#64*4-4]
+	str	w5,[$out,#64*5-4]
+	str	w6,[$out,#64*6-4]
+	str	w7,[$out,#64*7-4]
+	add	$out,$out,#64*8
+
+	ldp	x4,x5,[$inp,#32]	// Y
+	ldp	x6,x7,[$inp,#48]
+	str	w4,[$out,#64*0-4]
+	lsr	x4,x4,#32
+	str	w5,[$out,#64*1-4]
+	lsr	x5,x5,#32
+	str	w6,[$out,#64*2-4]
+	lsr	x6,x6,#32
+	str	w7,[$out,#64*3-4]
+	lsr	x7,x7,#32
+	str	w4,[$out,#64*4-4]
+	str	w5,[$out,#64*5-4]
+	str	w6,[$out,#64*6-4]
+	str	w7,[$out,#64*7-4]
+	add	$out,$out,#64*8
+
+	ldp	x4,x5,[$inp,#64]	// Z
+	ldp	x6,x7,[$inp,#80]
+	str	w4,[$out,#64*0-4]
+	lsr	x4,x4,#32
+	str	w5,[$out,#64*1-4]
+	lsr	x5,x5,#32
+	str	w6,[$out,#64*2-4]
+	lsr	x6,x6,#32
+	str	w7,[$out,#64*3-4]
+	lsr	x7,x7,#32
+	str	w4,[$out,#64*4-4]
+	str	w5,[$out,#64*5-4]
+	str	w6,[$out,#64*6-4]
+	str	w7,[$out,#64*7-4]
+
+	ldr	x29,[sp],#16
+	ret
+.size	ecp_nistz256_scatter_w5,.-ecp_nistz256_scatter_w5
+
+// void	ecp_nistz256_gather_w5(P256_POINT *x0,const void *x1,
+//					      int x2);
+.globl	ecp_nistz256_gather_w5
+.type	ecp_nistz256_gather_w5,%function
+.align	4
+ecp_nistz256_gather_w5:
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+
+	cmp	$index,xzr
+	csetm	x3,ne
+	add	$index,$index,x3
+	add	$inp,$inp,$index,lsl#2
+
+	ldr	w4,[$inp,#64*0]
+	ldr	w5,[$inp,#64*1]
+	ldr	w6,[$inp,#64*2]
+	ldr	w7,[$inp,#64*3]
+	ldr	w8,[$inp,#64*4]
+	ldr	w9,[$inp,#64*5]
+	ldr	w10,[$inp,#64*6]
+	ldr	w11,[$inp,#64*7]
+	add	$inp,$inp,#64*8
+	orr	x4,x4,x8,lsl#32
+	orr	x5,x5,x9,lsl#32
+	orr	x6,x6,x10,lsl#32
+	orr	x7,x7,x11,lsl#32
+	csel	x4,x4,xzr,ne
+	csel	x5,x5,xzr,ne
+	csel	x6,x6,xzr,ne
+	csel	x7,x7,xzr,ne
+	stp	x4,x5,[$out]		// X
+	stp	x6,x7,[$out,#16]
+
+	ldr	w4,[$inp,#64*0]
+	ldr	w5,[$inp,#64*1]
+	ldr	w6,[$inp,#64*2]
+	ldr	w7,[$inp,#64*3]
+	ldr	w8,[$inp,#64*4]
+	ldr	w9,[$inp,#64*5]
+	ldr	w10,[$inp,#64*6]
+	ldr	w11,[$inp,#64*7]
+	add	$inp,$inp,#64*8
+	orr	x4,x4,x8,lsl#32
+	orr	x5,x5,x9,lsl#32
+	orr	x6,x6,x10,lsl#32
+	orr	x7,x7,x11,lsl#32
+	csel	x4,x4,xzr,ne
+	csel	x5,x5,xzr,ne
+	csel	x6,x6,xzr,ne
+	csel	x7,x7,xzr,ne
+	stp	x4,x5,[$out,#32]	// Y
+	stp	x6,x7,[$out,#48]
+
+	ldr	w4,[$inp,#64*0]
+	ldr	w5,[$inp,#64*1]
+	ldr	w6,[$inp,#64*2]
+	ldr	w7,[$inp,#64*3]
+	ldr	w8,[$inp,#64*4]
+	ldr	w9,[$inp,#64*5]
+	ldr	w10,[$inp,#64*6]
+	ldr	w11,[$inp,#64*7]
+	orr	x4,x4,x8,lsl#32
+	orr	x5,x5,x9,lsl#32
+	orr	x6,x6,x10,lsl#32
+	orr	x7,x7,x11,lsl#32
+	csel	x4,x4,xzr,ne
+	csel	x5,x5,xzr,ne
+	csel	x6,x6,xzr,ne
+	csel	x7,x7,xzr,ne
+	stp	x4,x5,[$out,#64]	// Z
+	stp	x6,x7,[$out,#80]
+
+	ldr	x29,[sp],#16
+	ret
+.size	ecp_nistz256_gather_w5,.-ecp_nistz256_gather_w5
+
+// void	ecp_nistz256_scatter_w7(void *x0,const P256_POINT_AFFINE *x1,
+//					 int x2);
+.globl	ecp_nistz256_scatter_w7
+.type	ecp_nistz256_scatter_w7,%function
+.align	4
+ecp_nistz256_scatter_w7:
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+
+	add	$out,$out,$index
+	mov	$index,#64/8
+.Loop_scatter_w7:
+	ldr	x3,[$inp],#8
+	subs	$index,$index,#1
+	prfm	pstl1strm,[$out,#4096+64*0]
+	prfm	pstl1strm,[$out,#4096+64*1]
+	prfm	pstl1strm,[$out,#4096+64*2]
+	prfm	pstl1strm,[$out,#4096+64*3]
+	prfm	pstl1strm,[$out,#4096+64*4]
+	prfm	pstl1strm,[$out,#4096+64*5]
+	prfm	pstl1strm,[$out,#4096+64*6]
+	prfm	pstl1strm,[$out,#4096+64*7]
+	strb	w3,[$out,#64*0]
+	lsr	x3,x3,#8
+	strb	w3,[$out,#64*1]
+	lsr	x3,x3,#8
+	strb	w3,[$out,#64*2]
+	lsr	x3,x3,#8
+	strb	w3,[$out,#64*3]
+	lsr	x3,x3,#8
+	strb	w3,[$out,#64*4]
+	lsr	x3,x3,#8
+	strb	w3,[$out,#64*5]
+	lsr	x3,x3,#8
+	strb	w3,[$out,#64*6]
+	lsr	x3,x3,#8
+	strb	w3,[$out,#64*7]
+	add	$out,$out,#64*8
+	b.ne	.Loop_scatter_w7
+
+	ldr	x29,[sp],#16
+	ret
+.size	ecp_nistz256_scatter_w7,.-ecp_nistz256_scatter_w7
+
+// void	ecp_nistz256_gather_w7(P256_POINT_AFFINE *x0,const void *x1,
+//						     int x2);
+.globl	ecp_nistz256_gather_w7
+.type	ecp_nistz256_gather_w7,%function
+.align	4
+ecp_nistz256_gather_w7:
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+
+	cmp	$index,xzr
+	csetm	x3,ne
+	add	$index,$index,x3
+	add	$inp,$inp,$index
+	mov	$index,#64/8
+	nop
+.Loop_gather_w7:
+	ldrb	w4,[$inp,#64*0]
+	prfm	pldl1strm,[$inp,#4096+64*0]
+	subs	$index,$index,#1
+	ldrb	w5,[$inp,#64*1]
+	prfm	pldl1strm,[$inp,#4096+64*1]
+	ldrb	w6,[$inp,#64*2]
+	prfm	pldl1strm,[$inp,#4096+64*2]
+	ldrb	w7,[$inp,#64*3]
+	prfm	pldl1strm,[$inp,#4096+64*3]
+	ldrb	w8,[$inp,#64*4]
+	prfm	pldl1strm,[$inp,#4096+64*4]
+	ldrb	w9,[$inp,#64*5]
+	prfm	pldl1strm,[$inp,#4096+64*5]
+	ldrb	w10,[$inp,#64*6]
+	prfm	pldl1strm,[$inp,#4096+64*6]
+	ldrb	w11,[$inp,#64*7]
+	prfm	pldl1strm,[$inp,#4096+64*7]
+	add	$inp,$inp,#64*8
+	orr	x4,x4,x5,lsl#8
+	orr	x6,x6,x7,lsl#8
+	orr	x8,x8,x9,lsl#8
+	orr	x4,x4,x6,lsl#16
+	orr	x10,x10,x11,lsl#8
+	orr	x4,x4,x8,lsl#32
+	orr	x4,x4,x10,lsl#48
+	and	x4,x4,x3
+	str	x4,[$out],#8
+	b.ne	.Loop_gather_w7
+
+	ldr	x29,[sp],#16
+	ret
+.size	ecp_nistz256_gather_w7,.-ecp_nistz256_gather_w7
+___
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	print $_,"\n";
+}
+close STDOUT;	# enforce flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-avx2.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-avx2.pl
new file mode 100755
index 000000000..794e56a08
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-avx2.pl
@@ -0,0 +1,2080 @@
+#! /usr/bin/env perl
+# Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright (c) 2014, Intel Corporation. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# Originally written by Shay Gueron (1, 2), and Vlad Krasnov (1)
+# (1) Intel Corporation, Israel Development Center, Haifa, Israel
+# (2) University of Haifa, Israel
+#
+# Reference:
+# S.Gueron and V.Krasnov, "Fast Prime Field Elliptic Curve Cryptography with
+#                          256 Bit Primes"
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" $xlate $flavour $output";
+*STDOUT=*OUT;
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.19) + ($1>=2.22);
+	$addx = ($1>=2.23);
+}
+
+if (!$addx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	    `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.09) + ($1>=2.10);
+	$addx = ($1>=2.10);
+}
+
+if (!$addx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	    `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$avx = ($1>=10) + ($1>=11);
+	$addx = ($1>=12);
+}
+
+if (!$addx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|based on LLVM) ([3-9])\.([0-9]+)/) {
+	my $ver = $2 + $3/100.0;	# 3.1->3.01, 3.10->3.10
+	$avx = ($ver>=3.0) + ($ver>=3.01);
+	$addx = ($ver>=3.03);
+}
+
+if ($avx>=2) {{
+$digit_size = "\$29";
+$n_digits = "\$9";
+
+$code.=<<___;
+.text
+
+.align 64
+.LAVX2_AND_MASK:
+.LAVX2_POLY:
+.quad 0x1fffffff, 0x1fffffff, 0x1fffffff, 0x1fffffff
+.quad 0x1fffffff, 0x1fffffff, 0x1fffffff, 0x1fffffff
+.quad 0x1fffffff, 0x1fffffff, 0x1fffffff, 0x1fffffff
+.quad 0x000001ff, 0x000001ff, 0x000001ff, 0x000001ff
+.quad 0x00000000, 0x00000000, 0x00000000, 0x00000000
+.quad 0x00000000, 0x00000000, 0x00000000, 0x00000000
+.quad 0x00040000, 0x00040000, 0x00040000, 0x00040000
+.quad 0x1fe00000, 0x1fe00000, 0x1fe00000, 0x1fe00000
+.quad 0x00ffffff, 0x00ffffff, 0x00ffffff, 0x00ffffff
+
+.LAVX2_POLY_x2:
+.quad 0x7FFFFFFC, 0x7FFFFFFC, 0x7FFFFFFC, 0x7FFFFFFC
+.quad 0x7FFFFFFC, 0x7FFFFFFC, 0x7FFFFFFC, 0x7FFFFFFC
+.quad 0x7FFFFFFC, 0x7FFFFFFC, 0x7FFFFFFC, 0x7FFFFFFC
+.quad 0x400007FC, 0x400007FC, 0x400007FC, 0x400007FC
+.quad 0x3FFFFFFE, 0x3FFFFFFE, 0x3FFFFFFE, 0x3FFFFFFE
+.quad 0x3FFFFFFE, 0x3FFFFFFE, 0x3FFFFFFE, 0x3FFFFFFE
+.quad 0x400FFFFE, 0x400FFFFE, 0x400FFFFE, 0x400FFFFE
+.quad 0x7F7FFFFE, 0x7F7FFFFE, 0x7F7FFFFE, 0x7F7FFFFE
+.quad 0x03FFFFFC, 0x03FFFFFC, 0x03FFFFFC, 0x03FFFFFC
+
+.LAVX2_POLY_x8:
+.quad 0xFFFFFFF8, 0xFFFFFFF8, 0xFFFFFFF8, 0xFFFFFFF8
+.quad 0xFFFFFFF8, 0xFFFFFFF8, 0xFFFFFFF8, 0xFFFFFFF8
+.quad 0xFFFFFFF8, 0xFFFFFFF8, 0xFFFFFFF8, 0xFFFFFFF8
+.quad 0x80000FF8, 0x80000FF8, 0x80000FF8, 0x80000FF8
+.quad 0x7FFFFFFC, 0x7FFFFFFC, 0x7FFFFFFC, 0x7FFFFFFC
+.quad 0x7FFFFFFC, 0x7FFFFFFC, 0x7FFFFFFC, 0x7FFFFFFC
+.quad 0x801FFFFC, 0x801FFFFC, 0x801FFFFC, 0x801FFFFC
+.quad 0xFEFFFFFC, 0xFEFFFFFC, 0xFEFFFFFC, 0xFEFFFFFC
+.quad 0x07FFFFF8, 0x07FFFFF8, 0x07FFFFF8, 0x07FFFFF8
+
+.LONE:
+.quad 0x00000020, 0x00000020, 0x00000020, 0x00000020
+.quad 0x00000000, 0x00000000, 0x00000000, 0x00000000
+.quad 0x00000000, 0x00000000, 0x00000000, 0x00000000
+.quad 0x1fffc000, 0x1fffc000, 0x1fffc000, 0x1fffc000
+.quad 0x1fffffff, 0x1fffffff, 0x1fffffff, 0x1fffffff
+.quad 0x1fffffff, 0x1fffffff, 0x1fffffff, 0x1fffffff
+.quad 0x1f7fffff, 0x1f7fffff, 0x1f7fffff, 0x1f7fffff
+.quad 0x03ffffff, 0x03ffffff, 0x03ffffff, 0x03ffffff
+.quad 0x00000000, 0x00000000, 0x00000000, 0x00000000
+
+# RR = 2^266 mod p in AVX2 format, to transform from the native OpenSSL
+# Montgomery form (*2^256) to our format (*2^261)
+
+.LTO_MONT_AVX2:
+.quad 0x00000400, 0x00000400, 0x00000400, 0x00000400
+.quad 0x00000000, 0x00000000, 0x00000000, 0x00000000
+.quad 0x00000000, 0x00000000, 0x00000000, 0x00000000
+.quad 0x1ff80000, 0x1ff80000, 0x1ff80000, 0x1ff80000
+.quad 0x1fffffff, 0x1fffffff, 0x1fffffff, 0x1fffffff
+.quad 0x1fffffff, 0x1fffffff, 0x1fffffff, 0x1fffffff
+.quad 0x0fffffff, 0x0fffffff, 0x0fffffff, 0x0fffffff
+.quad 0x1fffffff, 0x1fffffff, 0x1fffffff, 0x1fffffff
+.quad 0x00000003, 0x00000003, 0x00000003, 0x00000003
+
+.LFROM_MONT_AVX2:
+.quad 0x00000001, 0x00000001, 0x00000001, 0x00000001
+.quad 0x00000000, 0x00000000, 0x00000000, 0x00000000
+.quad 0x00000000, 0x00000000, 0x00000000, 0x00000000
+.quad 0x1ffffe00, 0x1ffffe00, 0x1ffffe00, 0x1ffffe00
+.quad 0x1fffffff, 0x1fffffff, 0x1fffffff, 0x1fffffff
+.quad 0x1fffffff, 0x1fffffff, 0x1fffffff, 0x1fffffff
+.quad 0x1ffbffff, 0x1ffbffff, 0x1ffbffff, 0x1ffbffff
+.quad 0x001fffff, 0x001fffff, 0x001fffff, 0x001fffff
+.quad 0x00000000, 0x00000000, 0x00000000, 0x00000000
+
+.LIntOne:
+.long 1,1,1,1,1,1,1,1
+___
+
+{
+# This function receives a pointer to an array of four affine points
+# (X, Y, <1>) and rearranges the data for AVX2 execution, while
+# converting it to 2^29 radix redundant form
+
+my ($X0,$X1,$X2,$X3, $Y0,$Y1,$Y2,$Y3,
+    $T0,$T1,$T2,$T3, $T4,$T5,$T6,$T7)=map("%ymm$_",(0..15));
+
+$code.=<<___;
+.globl	ecp_nistz256_avx2_transpose_convert
+.type	ecp_nistz256_avx2_transpose_convert,\@function,2
+.align 64
+ecp_nistz256_avx2_transpose_convert:
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	lea	-8-16*10(%rsp), %rsp
+	vmovaps	%xmm6, -8-16*10(%rax)
+	vmovaps	%xmm7, -8-16*9(%rax)
+	vmovaps	%xmm8, -8-16*8(%rax)
+	vmovaps	%xmm9, -8-16*7(%rax)
+	vmovaps	%xmm10, -8-16*6(%rax)
+	vmovaps	%xmm11, -8-16*5(%rax)
+	vmovaps	%xmm12, -8-16*4(%rax)
+	vmovaps	%xmm13, -8-16*3(%rax)
+	vmovaps	%xmm14, -8-16*2(%rax)
+	vmovaps	%xmm15, -8-16*1(%rax)
+___
+$code.=<<___;
+	# Load the data
+	vmovdqa		32*0(%rsi), $X0
+	lea		112(%rsi), %rax		# size optimization
+	vmovdqa		32*1(%rsi), $Y0
+	lea		.LAVX2_AND_MASK(%rip), %rdx
+	vmovdqa		32*2(%rsi), $X1
+	vmovdqa		32*3(%rsi), $Y1
+	vmovdqa		32*4-112(%rax), $X2
+	vmovdqa		32*5-112(%rax), $Y2
+	vmovdqa		32*6-112(%rax), $X3
+	vmovdqa		32*7-112(%rax), $Y3
+
+	# Transpose X and Y independently
+	vpunpcklqdq	$X1, $X0, $T0		# T0 = [B2 A2 B0 A0]
+	vpunpcklqdq	$X3, $X2, $T1		# T1 = [D2 C2 D0 C0]
+	vpunpckhqdq	$X1, $X0, $T2		# T2 = [B3 A3 B1 A1]
+	vpunpckhqdq	$X3, $X2, $T3		# T3 = [D3 C3 D1 C1]
+
+	vpunpcklqdq	$Y1, $Y0, $T4
+	vpunpcklqdq	$Y3, $Y2, $T5
+	vpunpckhqdq	$Y1, $Y0, $T6
+	vpunpckhqdq	$Y3, $Y2, $T7
+
+	vperm2i128	\$0x20, $T1, $T0, $X0	# X0 = [D0 C0 B0 A0]
+	vperm2i128	\$0x20, $T3, $T2, $X1	# X1 = [D1 C1 B1 A1]
+	vperm2i128	\$0x31, $T1, $T0, $X2	# X2 = [D2 C2 B2 A2]
+	vperm2i128	\$0x31, $T3, $T2, $X3	# X3 = [D3 C3 B3 A3]
+
+	vperm2i128	\$0x20, $T5, $T4, $Y0
+	vperm2i128	\$0x20, $T7, $T6, $Y1
+	vperm2i128	\$0x31, $T5, $T4, $Y2
+	vperm2i128	\$0x31, $T7, $T6, $Y3
+	vmovdqa		(%rdx), $T7
+
+	vpand		(%rdx), $X0, $T0	# out[0] = in[0] & mask;
+	vpsrlq		\$29, $X0, $X0
+	vpand		$T7, $X0, $T1		# out[1] = (in[0] >> shift) & mask;
+	vpsrlq		\$29, $X0, $X0
+	vpsllq		\$6, $X1, $T2
+	vpxor		$X0, $T2, $T2
+	vpand		$T7, $T2, $T2		# out[2] = ((in[0] >> (shift*2)) ^ (in[1] << (64-shift*2))) & mask;
+	vpsrlq		\$23, $X1, $X1
+	vpand		$T7, $X1, $T3		# out[3] = (in[1] >> ((shift*3)%64)) & mask;
+	vpsrlq		\$29, $X1, $X1
+	vpsllq		\$12, $X2, $T4
+	vpxor		$X1, $T4, $T4
+	vpand		$T7, $T4, $T4		# out[4] = ((in[1] >> ((shift*4)%64)) ^ (in[2] << (64*2-shift*4))) & mask;
+	vpsrlq		\$17, $X2, $X2
+	vpand		$T7, $X2, $T5		# out[5] = (in[2] >> ((shift*5)%64)) & mask;
+	vpsrlq		\$29, $X2, $X2
+	vpsllq		\$18, $X3, $T6
+	vpxor		$X2, $T6, $T6
+	vpand		$T7, $T6, $T6		# out[6] = ((in[2] >> ((shift*6)%64)) ^ (in[3] << (64*3-shift*6))) & mask;
+	vpsrlq		\$11, $X3, $X3
+	 vmovdqa	$T0, 32*0(%rdi)
+	 lea		112(%rdi), %rax		# size optimization
+	vpand		$T7, $X3, $T0		# out[7] = (in[3] >> ((shift*7)%64)) & mask;
+	vpsrlq		\$29, $X3, $X3		# out[8] = (in[3] >> ((shift*8)%64)) & mask;
+
+	vmovdqa		$T1, 32*1(%rdi)
+	vmovdqa		$T2, 32*2(%rdi)
+	vmovdqa		$T3, 32*3(%rdi)
+	vmovdqa		$T4, 32*4-112(%rax)
+	vmovdqa		$T5, 32*5-112(%rax)
+	vmovdqa		$T6, 32*6-112(%rax)
+	vmovdqa		$T0, 32*7-112(%rax)
+	vmovdqa		$X3, 32*8-112(%rax)
+	lea		448(%rdi), %rax		# size optimization
+
+	vpand		$T7, $Y0, $T0		# out[0] = in[0] & mask;
+	vpsrlq		\$29, $Y0, $Y0
+	vpand		$T7, $Y0, $T1		# out[1] = (in[0] >> shift) & mask;
+	vpsrlq		\$29, $Y0, $Y0
+	vpsllq		\$6, $Y1, $T2
+	vpxor		$Y0, $T2, $T2
+	vpand		$T7, $T2, $T2		# out[2] = ((in[0] >> (shift*2)) ^ (in[1] << (64-shift*2))) & mask;
+	vpsrlq		\$23, $Y1, $Y1
+	vpand		$T7, $Y1, $T3		# out[3] = (in[1] >> ((shift*3)%64)) & mask;
+	vpsrlq		\$29, $Y1, $Y1
+	vpsllq		\$12, $Y2, $T4
+	vpxor		$Y1, $T4, $T4
+	vpand		$T7, $T4, $T4		# out[4] = ((in[1] >> ((shift*4)%64)) ^ (in[2] << (64*2-shift*4))) & mask;
+	vpsrlq		\$17, $Y2, $Y2
+	vpand		$T7, $Y2, $T5		# out[5] = (in[2] >> ((shift*5)%64)) & mask;
+	vpsrlq		\$29, $Y2, $Y2
+	vpsllq		\$18, $Y3, $T6
+	vpxor		$Y2, $T6, $T6
+	vpand		$T7, $T6, $T6		# out[6] = ((in[2] >> ((shift*6)%64)) ^ (in[3] << (64*3-shift*6))) & mask;
+	vpsrlq		\$11, $Y3, $Y3
+	 vmovdqa	$T0, 32*9-448(%rax)
+	vpand		$T7, $Y3, $T0		# out[7] = (in[3] >> ((shift*7)%64)) & mask;
+	vpsrlq		\$29, $Y3, $Y3		# out[8] = (in[3] >> ((shift*8)%64)) & mask;
+
+	vmovdqa		$T1, 32*10-448(%rax)
+	vmovdqa		$T2, 32*11-448(%rax)
+	vmovdqa		$T3, 32*12-448(%rax)
+	vmovdqa		$T4, 32*13-448(%rax)
+	vmovdqa		$T5, 32*14-448(%rax)
+	vmovdqa		$T6, 32*15-448(%rax)
+	vmovdqa		$T0, 32*16-448(%rax)
+	vmovdqa		$Y3, 32*17-448(%rax)
+
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	movaps	16*0(%rsp), %xmm6
+	movaps	16*1(%rsp), %xmm7
+	movaps	16*2(%rsp), %xmm8
+	movaps	16*3(%rsp), %xmm9
+	movaps	16*4(%rsp), %xmm10
+	movaps	16*5(%rsp), %xmm11
+	movaps	16*6(%rsp), %xmm12
+	movaps	16*7(%rsp), %xmm13
+	movaps	16*8(%rsp), %xmm14
+	movaps	16*9(%rsp), %xmm15
+	lea	8+16*10(%rsp), %rsp
+___
+$code.=<<___;
+	ret
+.size	ecp_nistz256_avx2_transpose_convert,.-ecp_nistz256_avx2_transpose_convert
+___
+}
+{
+################################################################################
+# This function receives a pointer to an array of four AVX2 formatted points
+# (X, Y, Z) convert the data to normal representation, and rearranges the data
+
+my ($D0,$D1,$D2,$D3, $D4,$D5,$D6,$D7, $D8)=map("%ymm$_",(0..8));
+my ($T0,$T1,$T2,$T3, $T4,$T5,$T6)=map("%ymm$_",(9..15));
+
+$code.=<<___;
+
+.globl	ecp_nistz256_avx2_convert_transpose_back
+.type	ecp_nistz256_avx2_convert_transpose_back,\@function,2
+.align	32
+ecp_nistz256_avx2_convert_transpose_back:
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	lea	-8-16*10(%rsp), %rsp
+	vmovaps	%xmm6, -8-16*10(%rax)
+	vmovaps	%xmm7, -8-16*9(%rax)
+	vmovaps	%xmm8, -8-16*8(%rax)
+	vmovaps	%xmm9, -8-16*7(%rax)
+	vmovaps	%xmm10, -8-16*6(%rax)
+	vmovaps	%xmm11, -8-16*5(%rax)
+	vmovaps	%xmm12, -8-16*4(%rax)
+	vmovaps	%xmm13, -8-16*3(%rax)
+	vmovaps	%xmm14, -8-16*2(%rax)
+	vmovaps	%xmm15, -8-16*1(%rax)
+___
+$code.=<<___;
+	mov	\$3, %ecx
+
+.Lconv_loop:
+	vmovdqa		32*0(%rsi), $D0
+	lea		160(%rsi), %rax		# size optimization
+	vmovdqa		32*1(%rsi), $D1
+	vmovdqa		32*2(%rsi), $D2
+	vmovdqa		32*3(%rsi), $D3
+	vmovdqa		32*4-160(%rax), $D4
+	vmovdqa		32*5-160(%rax), $D5
+	vmovdqa		32*6-160(%rax), $D6
+	vmovdqa		32*7-160(%rax), $D7
+	vmovdqa		32*8-160(%rax), $D8
+
+	vpsllq		\$29, $D1, $D1
+	vpsllq		\$58, $D2, $T0
+	vpaddq		$D1, $D0, $D0
+	vpaddq		$T0, $D0, $D0		# out[0] = (in[0]) ^ (in[1] << shift*1) ^ (in[2] << shift*2);
+
+	vpsrlq		\$6, $D2, $D2
+	vpsllq		\$23, $D3, $D3
+	vpsllq		\$52, $D4, $T1
+	vpaddq		$D2, $D3, $D3
+	vpaddq		$D3, $T1, $D1		# out[1] = (in[2] >> (64*1-shift*2)) ^ (in[3] << shift*3%64) ^ (in[4] << shift*4%64);
+
+	vpsrlq		\$12, $D4, $D4
+	vpsllq		\$17, $D5, $D5
+	vpsllq		\$46, $D6, $T2
+	vpaddq		$D4, $D5, $D5
+	vpaddq		$D5, $T2, $D2		# out[2] = (in[4] >> (64*2-shift*4)) ^ (in[5] << shift*5%64) ^ (in[6] << shift*6%64);
+
+	vpsrlq		\$18, $D6, $D6
+	vpsllq		\$11, $D7, $D7
+	vpsllq		\$40, $D8, $T3
+	vpaddq		$D6, $D7, $D7
+	vpaddq		$D7, $T3, $D3		# out[3] = (in[6] >> (64*3-shift*6)) ^ (in[7] << shift*7%64) ^ (in[8] << shift*8%64);
+
+	vpunpcklqdq	$D1, $D0, $T0		# T0 = [B2 A2 B0 A0]
+	vpunpcklqdq	$D3, $D2, $T1		# T1 = [D2 C2 D0 C0]
+	vpunpckhqdq	$D1, $D0, $T2		# T2 = [B3 A3 B1 A1]
+	vpunpckhqdq	$D3, $D2, $T3		# T3 = [D3 C3 D1 C1]
+
+	vperm2i128	\$0x20, $T1, $T0, $D0	# X0 = [D0 C0 B0 A0]
+	vperm2i128	\$0x20, $T3, $T2, $D1	# X1 = [D1 C1 B1 A1]
+	vperm2i128	\$0x31, $T1, $T0, $D2	# X2 = [D2 C2 B2 A2]
+	vperm2i128	\$0x31, $T3, $T2, $D3	# X3 = [D3 C3 B3 A3]
+
+	vmovdqa		$D0, 32*0(%rdi)
+	vmovdqa		$D1, 32*3(%rdi)
+	vmovdqa		$D2, 32*6(%rdi)
+	vmovdqa		$D3, 32*9(%rdi)
+
+	lea		32*9(%rsi), %rsi
+	lea		32*1(%rdi), %rdi
+
+	dec	%ecx
+	jnz	.Lconv_loop
+
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	movaps	16*0(%rsp), %xmm6
+	movaps	16*1(%rsp), %xmm7
+	movaps	16*2(%rsp), %xmm8
+	movaps	16*3(%rsp), %xmm9
+	movaps	16*4(%rsp), %xmm10
+	movaps	16*5(%rsp), %xmm11
+	movaps	16*6(%rsp), %xmm12
+	movaps	16*7(%rsp), %xmm13
+	movaps	16*8(%rsp), %xmm14
+	movaps	16*9(%rsp), %xmm15
+	lea	8+16*10(%rsp), %rsp
+___
+$code.=<<___;
+	ret
+.size	ecp_nistz256_avx2_convert_transpose_back,.-ecp_nistz256_avx2_convert_transpose_back
+___
+}
+{
+my ($r_ptr,$a_ptr,$b_ptr,$itr)=("%rdi","%rsi","%rdx","%ecx");
+my ($ACC0,$ACC1,$ACC2,$ACC3,$ACC4,$ACC5,$ACC6,$ACC7,$ACC8)=map("%ymm$_",(0..8));
+my ($B,$Y,$T0,$AND_MASK,$OVERFLOW)=map("%ymm$_",(9..13));
+
+sub NORMALIZE {
+my $ret=<<___;
+	vpsrlq		$digit_size, $ACC0, $T0
+	vpand		$AND_MASK, $ACC0, $ACC0
+	vpaddq		$T0, $ACC1, $ACC1
+
+	vpsrlq		$digit_size, $ACC1, $T0
+	vpand		$AND_MASK, $ACC1, $ACC1
+	vpaddq		$T0, $ACC2, $ACC2
+
+	vpsrlq		$digit_size, $ACC2, $T0
+	vpand		$AND_MASK, $ACC2, $ACC2
+	vpaddq		$T0, $ACC3, $ACC3
+
+	vpsrlq		$digit_size, $ACC3, $T0
+	vpand		$AND_MASK, $ACC3, $ACC3
+	vpaddq		$T0, $ACC4, $ACC4
+
+	vpsrlq		$digit_size, $ACC4, $T0
+	vpand		$AND_MASK, $ACC4, $ACC4
+	vpaddq		$T0, $ACC5, $ACC5
+
+	vpsrlq		$digit_size, $ACC5, $T0
+	vpand		$AND_MASK, $ACC5, $ACC5
+	vpaddq		$T0, $ACC6, $ACC6
+
+	vpsrlq		$digit_size, $ACC6, $T0
+	vpand		$AND_MASK, $ACC6, $ACC6
+	vpaddq		$T0, $ACC7, $ACC7
+
+	vpsrlq		$digit_size, $ACC7, $T0
+	vpand		$AND_MASK, $ACC7, $ACC7
+	vpaddq		$T0, $ACC8, $ACC8
+	#vpand		$AND_MASK, $ACC8, $ACC8
+___
+    $ret;
+}
+
+sub STORE {
+my $ret=<<___;
+	vmovdqa		$ACC0, 32*0(%rdi)
+	lea		160(%rdi), %rax		# size optimization
+	vmovdqa		$ACC1, 32*1(%rdi)
+	vmovdqa		$ACC2, 32*2(%rdi)
+	vmovdqa		$ACC3, 32*3(%rdi)
+	vmovdqa		$ACC4, 32*4-160(%rax)
+	vmovdqa		$ACC5, 32*5-160(%rax)
+	vmovdqa		$ACC6, 32*6-160(%rax)
+	vmovdqa		$ACC7, 32*7-160(%rax)
+	vmovdqa		$ACC8, 32*8-160(%rax)
+___
+    $ret;
+}
+
+$code.=<<___;
+.type	avx2_normalize,\@abi-omnipotent
+.align	32
+avx2_normalize:
+	vpsrlq		$digit_size, $ACC0, $T0
+	vpand		$AND_MASK, $ACC0, $ACC0
+	vpaddq		$T0, $ACC1, $ACC1
+
+	vpsrlq		$digit_size, $ACC1, $T0
+	vpand		$AND_MASK, $ACC1, $ACC1
+	vpaddq		$T0, $ACC2, $ACC2
+
+	vpsrlq		$digit_size, $ACC2, $T0
+	vpand		$AND_MASK, $ACC2, $ACC2
+	vpaddq		$T0, $ACC3, $ACC3
+
+	vpsrlq		$digit_size, $ACC3, $T0
+	vpand		$AND_MASK, $ACC3, $ACC3
+	vpaddq		$T0, $ACC4, $ACC4
+
+	vpsrlq		$digit_size, $ACC4, $T0
+	vpand		$AND_MASK, $ACC4, $ACC4
+	vpaddq		$T0, $ACC5, $ACC5
+
+	vpsrlq		$digit_size, $ACC5, $T0
+	vpand		$AND_MASK, $ACC5, $ACC5
+	vpaddq		$T0, $ACC6, $ACC6
+
+	vpsrlq		$digit_size, $ACC6, $T0
+	vpand		$AND_MASK, $ACC6, $ACC6
+	vpaddq		$T0, $ACC7, $ACC7
+
+	vpsrlq		$digit_size, $ACC7, $T0
+	vpand		$AND_MASK, $ACC7, $ACC7
+	vpaddq		$T0, $ACC8, $ACC8
+	#vpand		$AND_MASK, $ACC8, $ACC8
+
+	ret
+.size	avx2_normalize,.-avx2_normalize
+
+.type	avx2_normalize_n_store,\@abi-omnipotent
+.align	32
+avx2_normalize_n_store:
+	vpsrlq		$digit_size, $ACC0, $T0
+	vpand		$AND_MASK, $ACC0, $ACC0
+	vpaddq		$T0, $ACC1, $ACC1
+
+	vpsrlq		$digit_size, $ACC1, $T0
+	vpand		$AND_MASK, $ACC1, $ACC1
+	 vmovdqa	$ACC0, 32*0(%rdi)
+	 lea		160(%rdi), %rax		# size optimization
+	vpaddq		$T0, $ACC2, $ACC2
+
+	vpsrlq		$digit_size, $ACC2, $T0
+	vpand		$AND_MASK, $ACC2, $ACC2
+	 vmovdqa	$ACC1, 32*1(%rdi)
+	vpaddq		$T0, $ACC3, $ACC3
+
+	vpsrlq		$digit_size, $ACC3, $T0
+	vpand		$AND_MASK, $ACC3, $ACC3
+	 vmovdqa	$ACC2, 32*2(%rdi)
+	vpaddq		$T0, $ACC4, $ACC4
+
+	vpsrlq		$digit_size, $ACC4, $T0
+	vpand		$AND_MASK, $ACC4, $ACC4
+	 vmovdqa	$ACC3, 32*3(%rdi)
+	vpaddq		$T0, $ACC5, $ACC5
+
+	vpsrlq		$digit_size, $ACC5, $T0
+	vpand		$AND_MASK, $ACC5, $ACC5
+	 vmovdqa	$ACC4, 32*4-160(%rax)
+	vpaddq		$T0, $ACC6, $ACC6
+
+	vpsrlq		$digit_size, $ACC6, $T0
+	vpand		$AND_MASK, $ACC6, $ACC6
+	 vmovdqa	$ACC5, 32*5-160(%rax)
+	vpaddq		$T0, $ACC7, $ACC7
+
+	vpsrlq		$digit_size, $ACC7, $T0
+	vpand		$AND_MASK, $ACC7, $ACC7
+	 vmovdqa	$ACC6, 32*6-160(%rax)
+	vpaddq		$T0, $ACC8, $ACC8
+	#vpand		$AND_MASK, $ACC8, $ACC8
+	 vmovdqa	$ACC7, 32*7-160(%rax)
+	 vmovdqa	$ACC8, 32*8-160(%rax)
+
+	ret
+.size	avx2_normalize_n_store,.-avx2_normalize_n_store
+
+################################################################################
+# void avx2_mul_x4(void* RESULTx4, void *Ax4, void *Bx4);
+.type	avx2_mul_x4,\@abi-omnipotent
+.align	32
+avx2_mul_x4:
+	lea	.LAVX2_POLY(%rip), %rax
+
+	vpxor	$ACC0, $ACC0, $ACC0
+	vpxor	$ACC1, $ACC1, $ACC1
+	vpxor	$ACC2, $ACC2, $ACC2
+	vpxor	$ACC3, $ACC3, $ACC3
+	vpxor	$ACC4, $ACC4, $ACC4
+	vpxor	$ACC5, $ACC5, $ACC5
+	vpxor	$ACC6, $ACC6, $ACC6
+	vpxor	$ACC7, $ACC7, $ACC7
+
+	vmovdqa	32*7(%rax), %ymm14
+	vmovdqa	32*8(%rax), %ymm15
+
+	mov	$n_digits, $itr
+	lea	-512($a_ptr), $a_ptr	# strategic bias to control u-op density
+	jmp	.Lavx2_mul_x4_loop
+
+.align	32
+.Lavx2_mul_x4_loop:
+	vmovdqa		32*0($b_ptr), $B
+	lea		32*1($b_ptr), $b_ptr
+
+	vpmuludq	32*0+512($a_ptr), $B, $T0
+	vpmuludq	32*1+512($a_ptr), $B, $OVERFLOW	# borrow $OVERFLOW
+	vpaddq		$T0, $ACC0, $ACC0
+	vpmuludq	32*2+512($a_ptr), $B, $T0
+	vpaddq		$OVERFLOW, $ACC1, $ACC1
+	 vpand		$AND_MASK, $ACC0, $Y
+	vpmuludq	32*3+512($a_ptr), $B, $OVERFLOW
+	vpaddq		$T0, $ACC2, $ACC2
+	vpmuludq	32*4+512($a_ptr), $B, $T0
+	vpaddq		$OVERFLOW, $ACC3, $ACC3
+	vpmuludq	32*5+512($a_ptr), $B, $OVERFLOW
+	vpaddq		$T0, $ACC4, $ACC4
+	vpmuludq	32*6+512($a_ptr), $B, $T0
+	vpaddq		$OVERFLOW, $ACC5, $ACC5
+	vpmuludq	32*7+512($a_ptr), $B, $OVERFLOW
+	vpaddq		$T0, $ACC6, $ACC6
+
+	# Skip some multiplications, optimizing for the constant poly
+	vpmuludq	$AND_MASK, $Y, $T0
+	 vpaddq		$OVERFLOW, $ACC7, $ACC7
+	 vpmuludq	32*8+512($a_ptr), $B, $ACC8
+	vpaddq		$T0, $ACC0, $OVERFLOW
+	vpaddq		$T0, $ACC1, $ACC0
+	vpsrlq		$digit_size, $OVERFLOW, $OVERFLOW
+	vpaddq		$T0, $ACC2, $ACC1
+	vpmuludq	32*3(%rax), $Y, $T0
+	vpaddq		$OVERFLOW, $ACC0, $ACC0
+	vpaddq		$T0, $ACC3, $ACC2
+	.byte		0x67
+	vmovdqa		$ACC4, $ACC3
+	vpsllq		\$18, $Y, $OVERFLOW
+	.byte		0x67
+	vmovdqa		$ACC5, $ACC4
+	vpmuludq	%ymm14, $Y, $T0
+	vpaddq		$OVERFLOW, $ACC6, $ACC5
+	vpmuludq	%ymm15, $Y, $OVERFLOW
+	vpaddq		$T0, $ACC7, $ACC6
+	vpaddq		$OVERFLOW, $ACC8, $ACC7
+
+	dec	$itr
+	jnz	.Lavx2_mul_x4_loop
+
+	vpxor	$ACC8, $ACC8, $ACC8
+
+	ret
+.size	avx2_mul_x4,.-avx2_mul_x4
+
+# Function optimized for the constant 1
+################################################################################
+# void avx2_mul_by1_x4(void* RESULTx4, void *Ax4);
+.type	avx2_mul_by1_x4,\@abi-omnipotent
+.align	32
+avx2_mul_by1_x4:
+	lea	.LAVX2_POLY(%rip), %rax
+
+	vpxor	$ACC0, $ACC0, $ACC0
+	vpxor	$ACC1, $ACC1, $ACC1
+	vpxor	$ACC2, $ACC2, $ACC2
+	vpxor	$ACC3, $ACC3, $ACC3
+	vpxor	$ACC4, $ACC4, $ACC4
+	vpxor	$ACC5, $ACC5, $ACC5
+	vpxor	$ACC6, $ACC6, $ACC6
+	vpxor	$ACC7, $ACC7, $ACC7
+	vpxor	$ACC8, $ACC8, $ACC8
+
+	vmovdqa	32*3+.LONE(%rip), %ymm14
+	vmovdqa	32*7+.LONE(%rip), %ymm15
+
+	mov	$n_digits, $itr
+	jmp	.Lavx2_mul_by1_x4_loop
+
+.align	32
+.Lavx2_mul_by1_x4_loop:
+	vmovdqa		32*0($a_ptr), $B
+	.byte		0x48,0x8d,0xb6,0x20,0,0,0	# lea	32*1($a_ptr), $a_ptr
+
+	vpsllq		\$5, $B, $OVERFLOW
+	vpmuludq	%ymm14, $B, $T0
+	vpaddq		$OVERFLOW, $ACC0, $ACC0
+	vpaddq		$T0, $ACC3, $ACC3
+	.byte		0x67
+	vpmuludq	$AND_MASK, $B, $T0
+	vpand		$AND_MASK, $ACC0, $Y
+	vpaddq		$T0, $ACC4, $ACC4
+	vpaddq		$T0, $ACC5, $ACC5
+	vpaddq		$T0, $ACC6, $ACC6
+	vpsllq		\$23, $B, $T0
+
+	.byte		0x67,0x67
+	vpmuludq	%ymm15, $B, $OVERFLOW
+	vpsubq		$T0, $ACC6, $ACC6
+
+	vpmuludq	$AND_MASK, $Y, $T0
+	vpaddq		$OVERFLOW, $ACC7, $ACC7
+	vpaddq		$T0, $ACC0, $OVERFLOW
+	vpaddq		$T0, $ACC1, $ACC0
+	.byte		0x67,0x67
+	vpsrlq		$digit_size, $OVERFLOW, $OVERFLOW
+	vpaddq		$T0, $ACC2, $ACC1
+	vpmuludq	32*3(%rax), $Y, $T0
+	vpaddq		$OVERFLOW, $ACC0, $ACC0
+	vpaddq		$T0, $ACC3, $ACC2
+	vmovdqa		$ACC4, $ACC3
+	vpsllq		\$18, $Y, $OVERFLOW
+	vmovdqa		$ACC5, $ACC4
+	vpmuludq	32*7(%rax), $Y, $T0
+	vpaddq		$OVERFLOW, $ACC6, $ACC5
+	vpaddq		$T0, $ACC7, $ACC6
+	vpmuludq	32*8(%rax), $Y, $ACC7
+
+	dec	$itr
+	jnz	.Lavx2_mul_by1_x4_loop
+
+	ret
+.size	avx2_mul_by1_x4,.-avx2_mul_by1_x4
+
+################################################################################
+# void avx2_sqr_x4(void* RESULTx4, void *Ax4, void *Bx4);
+.type	avx2_sqr_x4,\@abi-omnipotent
+.align	32
+avx2_sqr_x4:
+	lea		.LAVX2_POLY(%rip), %rax
+
+	vmovdqa		32*7(%rax), %ymm14
+	vmovdqa		32*8(%rax), %ymm15
+
+	vmovdqa		32*0($a_ptr), $B
+	vmovdqa		32*1($a_ptr), $ACC1
+	vmovdqa		32*2($a_ptr), $ACC2
+	vmovdqa		32*3($a_ptr), $ACC3
+	vmovdqa		32*4($a_ptr), $ACC4
+	vmovdqa		32*5($a_ptr), $ACC5
+	vmovdqa		32*6($a_ptr), $ACC6
+	vmovdqa		32*7($a_ptr), $ACC7
+	vpaddq		$ACC1, $ACC1, $ACC1	# 2*$ACC0..7
+	vmovdqa		32*8($a_ptr), $ACC8
+	vpaddq		$ACC2, $ACC2, $ACC2
+	vmovdqa		$ACC1, 32*0(%rcx)
+	vpaddq		$ACC3, $ACC3, $ACC3
+	vmovdqa		$ACC2, 32*1(%rcx)
+	vpaddq		$ACC4, $ACC4, $ACC4
+	vmovdqa		$ACC3, 32*2(%rcx)
+	vpaddq		$ACC5, $ACC5, $ACC5
+	vmovdqa		$ACC4, 32*3(%rcx)
+	vpaddq		$ACC6, $ACC6, $ACC6
+	vmovdqa		$ACC5, 32*4(%rcx)
+	vpaddq		$ACC7, $ACC7, $ACC7
+	vmovdqa		$ACC6, 32*5(%rcx)
+	vpaddq		$ACC8, $ACC8, $ACC8
+	vmovdqa		$ACC7, 32*6(%rcx)
+	vmovdqa		$ACC8, 32*7(%rcx)
+
+	#itr		1
+	vpmuludq	$B, $B, $ACC0
+	vpmuludq	$B, $ACC1, $ACC1
+	 vpand		$AND_MASK, $ACC0, $Y
+	vpmuludq	$B, $ACC2, $ACC2
+	vpmuludq	$B, $ACC3, $ACC3
+	vpmuludq	$B, $ACC4, $ACC4
+	vpmuludq	$B, $ACC5, $ACC5
+	vpmuludq	$B, $ACC6, $ACC6
+	 vpmuludq	$AND_MASK, $Y, $T0
+	vpmuludq	$B, $ACC7, $ACC7
+	vpmuludq	$B, $ACC8, $ACC8
+	 vmovdqa	32*1($a_ptr), $B
+
+	vpaddq		$T0, $ACC0, $OVERFLOW
+	vpaddq		$T0, $ACC1, $ACC0
+	vpsrlq		$digit_size, $OVERFLOW, $OVERFLOW
+	vpaddq		$T0, $ACC2, $ACC1
+	vpmuludq	32*3(%rax), $Y, $T0
+	vpaddq		$OVERFLOW, $ACC0, $ACC0
+	vpaddq		$T0, $ACC3, $ACC2
+	vmovdqa		$ACC4, $ACC3
+	vpsllq		\$18, $Y, $T0
+	vmovdqa		$ACC5, $ACC4
+	vpmuludq	%ymm14, $Y, $OVERFLOW
+	vpaddq		$T0, $ACC6, $ACC5
+	vpmuludq	%ymm15, $Y, $T0
+	vpaddq		$OVERFLOW, $ACC7, $ACC6
+	vpaddq		$T0, $ACC8, $ACC7
+
+	#itr		2
+	vpmuludq	$B, $B, $OVERFLOW
+	 vpand		$AND_MASK, $ACC0, $Y
+	vpmuludq	32*1(%rcx), $B, $T0
+	vpaddq		$OVERFLOW, $ACC1, $ACC1
+	vpmuludq	32*2(%rcx), $B, $OVERFLOW
+	vpaddq		$T0, $ACC2, $ACC2
+	vpmuludq	32*3(%rcx), $B, $T0
+	vpaddq		$OVERFLOW, $ACC3, $ACC3
+	vpmuludq	32*4(%rcx), $B, $OVERFLOW
+	vpaddq		$T0, $ACC4, $ACC4
+	vpmuludq	32*5(%rcx), $B, $T0
+	vpaddq		$OVERFLOW, $ACC5, $ACC5
+	vpmuludq	32*6(%rcx), $B, $OVERFLOW
+	vpaddq		$T0, $ACC6, $ACC6
+
+	vpmuludq	$AND_MASK, $Y, $T0
+	 vpaddq		$OVERFLOW, $ACC7, $ACC7
+	 vpmuludq	32*7(%rcx), $B, $ACC8
+	 vmovdqa	32*2($a_ptr), $B
+	vpaddq		$T0, $ACC0, $OVERFLOW
+	vpaddq		$T0, $ACC1, $ACC0
+	vpsrlq		$digit_size, $OVERFLOW, $OVERFLOW
+	vpaddq		$T0, $ACC2, $ACC1
+	vpmuludq	32*3(%rax), $Y, $T0
+	vpaddq		$OVERFLOW, $ACC0, $ACC0
+	vpaddq		$T0, $ACC3, $ACC2
+	vmovdqa		$ACC4, $ACC3
+	vpsllq		\$18, $Y, $T0
+	vmovdqa		$ACC5, $ACC4
+	vpmuludq	%ymm14, $Y, $OVERFLOW
+	vpaddq		$T0, $ACC6, $ACC5
+	vpmuludq	%ymm15, $Y, $T0
+	vpaddq		$OVERFLOW, $ACC7, $ACC6
+	vpaddq		$T0, $ACC8, $ACC7
+
+	#itr		3
+	vpmuludq	$B, $B, $T0
+	 vpand		$AND_MASK, $ACC0, $Y
+	vpmuludq	32*2(%rcx), $B, $OVERFLOW
+	vpaddq		$T0, $ACC2, $ACC2
+	vpmuludq	32*3(%rcx), $B, $T0
+	vpaddq		$OVERFLOW, $ACC3, $ACC3
+	vpmuludq	32*4(%rcx), $B, $OVERFLOW
+	vpaddq		$T0, $ACC4, $ACC4
+	vpmuludq	32*5(%rcx), $B, $T0
+	vpaddq		$OVERFLOW, $ACC5, $ACC5
+	vpmuludq	32*6(%rcx), $B, $OVERFLOW
+	vpaddq		$T0, $ACC6, $ACC6
+
+	vpmuludq	$AND_MASK, $Y, $T0
+	 vpaddq		$OVERFLOW, $ACC7, $ACC7
+	 vpmuludq	32*7(%rcx), $B, $ACC8
+	 vmovdqa	32*3($a_ptr), $B
+	vpaddq		$T0, $ACC0, $OVERFLOW
+	vpaddq		$T0, $ACC1, $ACC0
+	vpsrlq		$digit_size, $OVERFLOW, $OVERFLOW
+	vpaddq		$T0, $ACC2, $ACC1
+	vpmuludq	32*3(%rax), $Y, $T0
+	vpaddq		$OVERFLOW, $ACC0, $ACC0
+	vpaddq		$T0, $ACC3, $ACC2
+	vmovdqa		$ACC4, $ACC3
+	vpsllq		\$18, $Y, $T0
+	vmovdqa		$ACC5, $ACC4
+	vpmuludq	%ymm14, $Y, $OVERFLOW
+	vpaddq		$T0, $ACC6, $ACC5
+	vpmuludq	%ymm15, $Y, $T0
+	 vpand		$AND_MASK, $ACC0, $Y
+	vpaddq		$OVERFLOW, $ACC7, $ACC6
+	vpaddq		$T0, $ACC8, $ACC7
+
+	#itr		4
+	vpmuludq	$B, $B, $OVERFLOW
+	vpmuludq	32*3(%rcx), $B, $T0
+	vpaddq		$OVERFLOW, $ACC3, $ACC3
+	vpmuludq	32*4(%rcx), $B, $OVERFLOW
+	vpaddq		$T0, $ACC4, $ACC4
+	vpmuludq	32*5(%rcx), $B, $T0
+	vpaddq		$OVERFLOW, $ACC5, $ACC5
+	vpmuludq	32*6(%rcx), $B, $OVERFLOW
+	vpaddq		$T0, $ACC6, $ACC6
+
+	vpmuludq	$AND_MASK, $Y, $T0
+	 vpaddq		$OVERFLOW, $ACC7, $ACC7
+	 vpmuludq	32*7(%rcx), $B, $ACC8
+	 vmovdqa	32*4($a_ptr), $B
+	vpaddq		$T0, $ACC0, $OVERFLOW
+	vpaddq		$T0, $ACC1, $ACC0
+	vpsrlq		$digit_size, $OVERFLOW, $OVERFLOW
+	vpaddq		$T0, $ACC2, $ACC1
+	vpmuludq	32*3(%rax), $Y, $T0
+	vpaddq		$OVERFLOW, $ACC0, $ACC0
+	vpaddq		$T0, $ACC3, $ACC2
+	vmovdqa		$ACC4, $ACC3
+	vpsllq		\$18, $Y, $T0
+	vmovdqa		$ACC5, $ACC4
+	vpmuludq	%ymm14, $Y, $OVERFLOW
+	vpaddq		$T0, $ACC6, $ACC5
+	vpmuludq	%ymm15, $Y, $T0
+	 vpand		$AND_MASK, $ACC0, $Y
+	vpaddq		$OVERFLOW, $ACC7, $ACC6
+	vpaddq		$T0, $ACC8, $ACC7
+
+	#itr		5
+	vpmuludq	$B, $B, $T0
+	vpmuludq	32*4(%rcx), $B, $OVERFLOW
+	vpaddq		$T0, $ACC4, $ACC4
+	vpmuludq	32*5(%rcx), $B, $T0
+	vpaddq		$OVERFLOW, $ACC5, $ACC5
+	vpmuludq	32*6(%rcx), $B, $OVERFLOW
+	vpaddq		$T0, $ACC6, $ACC6
+
+	vpmuludq	$AND_MASK, $Y, $T0
+	 vpaddq		$OVERFLOW, $ACC7, $ACC7
+	 vpmuludq	32*7(%rcx), $B, $ACC8
+	 vmovdqa	32*5($a_ptr), $B
+	vpaddq		$T0, $ACC0, $OVERFLOW
+	vpsrlq		$digit_size, $OVERFLOW, $OVERFLOW
+	vpaddq		$T0, $ACC1, $ACC0
+	vpaddq		$T0, $ACC2, $ACC1
+	vpmuludq	32*3+.LAVX2_POLY(%rip), $Y, $T0
+	vpaddq		$OVERFLOW, $ACC0, $ACC0
+	vpaddq		$T0, $ACC3, $ACC2
+	vmovdqa		$ACC4, $ACC3
+	vpsllq		\$18, $Y, $T0
+	vmovdqa		$ACC5, $ACC4
+	vpmuludq	%ymm14, $Y, $OVERFLOW
+	vpaddq		$T0, $ACC6, $ACC5
+	vpmuludq	%ymm15, $Y, $T0
+	 vpand		$AND_MASK, $ACC0, $Y
+	vpaddq		$OVERFLOW, $ACC7, $ACC6
+	vpaddq		$T0, $ACC8, $ACC7
+
+	#itr		6
+	vpmuludq	$B, $B, $OVERFLOW
+	vpmuludq	32*5(%rcx), $B, $T0
+	vpaddq		$OVERFLOW, $ACC5, $ACC5
+	vpmuludq	32*6(%rcx), $B, $OVERFLOW
+	vpaddq		$T0, $ACC6, $ACC6
+
+	vpmuludq	$AND_MASK, $Y, $T0
+	 vpaddq		$OVERFLOW, $ACC7, $ACC7
+	 vpmuludq	32*7(%rcx), $B, $ACC8
+	 vmovdqa	32*6($a_ptr), $B
+	vpaddq		$T0, $ACC0, $OVERFLOW
+	vpaddq		$T0, $ACC1, $ACC0
+	vpsrlq		$digit_size, $OVERFLOW, $OVERFLOW
+	vpaddq		$T0, $ACC2, $ACC1
+	vpmuludq	32*3(%rax), $Y, $T0
+	vpaddq		$OVERFLOW, $ACC0, $ACC0
+	vpaddq		$T0, $ACC3, $ACC2
+	vmovdqa		$ACC4, $ACC3
+	vpsllq		\$18, $Y, $T0
+	vmovdqa		$ACC5, $ACC4
+	vpmuludq	%ymm14, $Y, $OVERFLOW
+	vpaddq		$T0, $ACC6, $ACC5
+	vpmuludq	%ymm15, $Y, $T0
+	 vpand		$AND_MASK, $ACC0, $Y
+	vpaddq		$OVERFLOW, $ACC7, $ACC6
+	vpaddq		$T0, $ACC8, $ACC7
+
+	#itr		7
+	vpmuludq	$B, $B, $T0
+	vpmuludq	32*6(%rcx), $B, $OVERFLOW
+	vpaddq		$T0, $ACC6, $ACC6
+
+	vpmuludq	$AND_MASK, $Y, $T0
+	 vpaddq		$OVERFLOW, $ACC7, $ACC7
+	 vpmuludq	32*7(%rcx), $B, $ACC8
+	 vmovdqa	32*7($a_ptr), $B
+	vpaddq		$T0, $ACC0, $OVERFLOW
+	vpsrlq		$digit_size, $OVERFLOW, $OVERFLOW
+	vpaddq		$T0, $ACC1, $ACC0
+	vpaddq		$T0, $ACC2, $ACC1
+	vpmuludq	32*3(%rax), $Y, $T0
+	vpaddq		$OVERFLOW, $ACC0, $ACC0
+	vpaddq		$T0, $ACC3, $ACC2
+	vmovdqa		$ACC4, $ACC3
+	vpsllq		\$18, $Y, $T0
+	vmovdqa		$ACC5, $ACC4
+	vpmuludq	%ymm14, $Y, $OVERFLOW
+	vpaddq		$T0, $ACC6, $ACC5
+	vpmuludq	%ymm15, $Y, $T0
+	 vpand		$AND_MASK, $ACC0, $Y
+	vpaddq		$OVERFLOW, $ACC7, $ACC6
+	vpaddq		$T0, $ACC8, $ACC7
+
+	#itr		8
+	vpmuludq	$B, $B, $OVERFLOW
+
+	vpmuludq	$AND_MASK, $Y, $T0
+	 vpaddq		$OVERFLOW, $ACC7, $ACC7
+	 vpmuludq	32*7(%rcx), $B, $ACC8
+	 vmovdqa	32*8($a_ptr), $B
+	vpaddq		$T0, $ACC0, $OVERFLOW
+	vpsrlq		$digit_size, $OVERFLOW, $OVERFLOW
+	vpaddq		$T0, $ACC1, $ACC0
+	vpaddq		$T0, $ACC2, $ACC1
+	vpmuludq	32*3(%rax), $Y, $T0
+	vpaddq		$OVERFLOW, $ACC0, $ACC0
+	vpaddq		$T0, $ACC3, $ACC2
+	vmovdqa		$ACC4, $ACC3
+	vpsllq		\$18, $Y, $T0
+	vmovdqa		$ACC5, $ACC4
+	vpmuludq	%ymm14, $Y, $OVERFLOW
+	vpaddq		$T0, $ACC6, $ACC5
+	vpmuludq	%ymm15, $Y, $T0
+	 vpand		$AND_MASK, $ACC0, $Y
+	vpaddq		$OVERFLOW, $ACC7, $ACC6
+	vpaddq		$T0, $ACC8, $ACC7
+
+	#itr		9
+	vpmuludq	$B, $B, $ACC8
+
+	vpmuludq	$AND_MASK, $Y, $T0
+	vpaddq		$T0, $ACC0, $OVERFLOW
+	vpsrlq		$digit_size, $OVERFLOW, $OVERFLOW
+	vpaddq		$T0, $ACC1, $ACC0
+	vpaddq		$T0, $ACC2, $ACC1
+	vpmuludq	32*3(%rax), $Y, $T0
+	vpaddq		$OVERFLOW, $ACC0, $ACC0
+	vpaddq		$T0, $ACC3, $ACC2
+	vmovdqa		$ACC4, $ACC3
+	vpsllq		\$18, $Y, $T0
+	vmovdqa		$ACC5, $ACC4
+	vpmuludq	%ymm14, $Y, $OVERFLOW
+	vpaddq		$T0, $ACC6, $ACC5
+	vpmuludq	%ymm15, $Y, $T0
+	vpaddq		$OVERFLOW, $ACC7, $ACC6
+	vpaddq		$T0, $ACC8, $ACC7
+
+	vpxor		$ACC8, $ACC8, $ACC8
+
+	ret
+.size	avx2_sqr_x4,.-avx2_sqr_x4
+
+################################################################################
+# void avx2_sub_x4(void* RESULTx4, void *Ax4, void *Bx4);
+.type	avx2_sub_x4,\@abi-omnipotent
+.align	32
+avx2_sub_x4:
+	vmovdqa	32*0($a_ptr), $ACC0
+	lea	160($a_ptr), $a_ptr
+	lea	.LAVX2_POLY_x8+128(%rip), %rax
+	lea	128($b_ptr), $b_ptr
+	vmovdqa	32*1-160($a_ptr), $ACC1
+	vmovdqa	32*2-160($a_ptr), $ACC2
+	vmovdqa	32*3-160($a_ptr), $ACC3
+	vmovdqa	32*4-160($a_ptr), $ACC4
+	vmovdqa	32*5-160($a_ptr), $ACC5
+	vmovdqa	32*6-160($a_ptr), $ACC6
+	vmovdqa	32*7-160($a_ptr), $ACC7
+	vmovdqa	32*8-160($a_ptr), $ACC8
+
+	vpaddq	32*0-128(%rax), $ACC0, $ACC0
+	vpaddq	32*1-128(%rax), $ACC1, $ACC1
+	vpaddq	32*2-128(%rax), $ACC2, $ACC2
+	vpaddq	32*3-128(%rax), $ACC3, $ACC3
+	vpaddq	32*4-128(%rax), $ACC4, $ACC4
+	vpaddq	32*5-128(%rax), $ACC5, $ACC5
+	vpaddq	32*6-128(%rax), $ACC6, $ACC6
+	vpaddq	32*7-128(%rax), $ACC7, $ACC7
+	vpaddq	32*8-128(%rax), $ACC8, $ACC8
+
+	vpsubq	32*0-128($b_ptr), $ACC0, $ACC0
+	vpsubq	32*1-128($b_ptr), $ACC1, $ACC1
+	vpsubq	32*2-128($b_ptr), $ACC2, $ACC2
+	vpsubq	32*3-128($b_ptr), $ACC3, $ACC3
+	vpsubq	32*4-128($b_ptr), $ACC4, $ACC4
+	vpsubq	32*5-128($b_ptr), $ACC5, $ACC5
+	vpsubq	32*6-128($b_ptr), $ACC6, $ACC6
+	vpsubq	32*7-128($b_ptr), $ACC7, $ACC7
+	vpsubq	32*8-128($b_ptr), $ACC8, $ACC8
+
+	ret
+.size	avx2_sub_x4,.-avx2_sub_x4
+
+.type	avx2_select_n_store,\@abi-omnipotent
+.align	32
+avx2_select_n_store:
+	vmovdqa	`8+32*9*8`(%rsp), $Y
+	vpor	`8+32*9*8+32`(%rsp), $Y, $Y
+
+	vpandn	$ACC0, $Y, $ACC0
+	vpandn	$ACC1, $Y, $ACC1
+	vpandn	$ACC2, $Y, $ACC2
+	vpandn	$ACC3, $Y, $ACC3
+	vpandn	$ACC4, $Y, $ACC4
+	vpandn	$ACC5, $Y, $ACC5
+	vpandn	$ACC6, $Y, $ACC6
+	vmovdqa	`8+32*9*8+32`(%rsp), $B
+	vpandn	$ACC7, $Y, $ACC7
+	vpandn	`8+32*9*8`(%rsp), $B, $B
+	vpandn	$ACC8, $Y, $ACC8
+
+	vpand	32*0(%rsi), $B, $T0
+	lea	160(%rsi), %rax
+	vpand	32*1(%rsi), $B, $Y
+	vpxor	$T0, $ACC0, $ACC0
+	vpand	32*2(%rsi), $B, $T0
+	vpxor	$Y, $ACC1, $ACC1
+	vpand	32*3(%rsi), $B, $Y
+	vpxor	$T0, $ACC2, $ACC2
+	vpand	32*4-160(%rax), $B, $T0
+	vpxor	$Y, $ACC3, $ACC3
+	vpand	32*5-160(%rax), $B, $Y
+	vpxor	$T0, $ACC4, $ACC4
+	vpand	32*6-160(%rax), $B, $T0
+	vpxor	$Y, $ACC5, $ACC5
+	vpand	32*7-160(%rax), $B, $Y
+	vpxor	$T0, $ACC6, $ACC6
+	vpand	32*8-160(%rax), $B, $T0
+	vmovdqa	`8+32*9*8+32`(%rsp), $B
+	vpxor	$Y, $ACC7, $ACC7
+
+	vpand	32*0(%rdx), $B, $Y
+	lea	160(%rdx), %rax
+	vpxor	$T0, $ACC8, $ACC8
+	vpand	32*1(%rdx), $B, $T0
+	vpxor	$Y, $ACC0, $ACC0
+	vpand	32*2(%rdx), $B, $Y
+	vpxor	$T0, $ACC1, $ACC1
+	vpand	32*3(%rdx), $B, $T0
+	vpxor	$Y, $ACC2, $ACC2
+	vpand	32*4-160(%rax), $B, $Y
+	vpxor	$T0, $ACC3, $ACC3
+	vpand	32*5-160(%rax), $B, $T0
+	vpxor	$Y, $ACC4, $ACC4
+	vpand	32*6-160(%rax), $B, $Y
+	vpxor	$T0, $ACC5, $ACC5
+	vpand	32*7-160(%rax), $B, $T0
+	vpxor	$Y, $ACC6, $ACC6
+	vpand	32*8-160(%rax), $B, $Y
+	vpxor	$T0, $ACC7, $ACC7
+	vpxor	$Y, $ACC8, $ACC8
+	`&STORE`
+
+	ret
+.size	avx2_select_n_store,.-avx2_select_n_store
+___
+$code.=<<___	if (0);				# inlined
+################################################################################
+# void avx2_mul_by2_x4(void* RESULTx4, void *Ax4);
+.type	avx2_mul_by2_x4,\@abi-omnipotent
+.align	32
+avx2_mul_by2_x4:
+	vmovdqa	32*0($a_ptr), $ACC0
+	lea	160($a_ptr), %rax
+	vmovdqa	32*1($a_ptr), $ACC1
+	vmovdqa	32*2($a_ptr), $ACC2
+	vmovdqa	32*3($a_ptr), $ACC3
+	vmovdqa	32*4-160(%rax), $ACC4
+	vmovdqa	32*5-160(%rax), $ACC5
+	vmovdqa	32*6-160(%rax), $ACC6
+	vmovdqa	32*7-160(%rax), $ACC7
+	vmovdqa	32*8-160(%rax), $ACC8
+
+	vpaddq	$ACC0, $ACC0, $ACC0
+	vpaddq	$ACC1, $ACC1, $ACC1
+	vpaddq	$ACC2, $ACC2, $ACC2
+	vpaddq	$ACC3, $ACC3, $ACC3
+	vpaddq	$ACC4, $ACC4, $ACC4
+	vpaddq	$ACC5, $ACC5, $ACC5
+	vpaddq	$ACC6, $ACC6, $ACC6
+	vpaddq	$ACC7, $ACC7, $ACC7
+	vpaddq	$ACC8, $ACC8, $ACC8
+
+	ret
+.size	avx2_mul_by2_x4,.-avx2_mul_by2_x4
+___
+my ($r_ptr_in,$a_ptr_in,$b_ptr_in)=("%rdi","%rsi","%rdx");
+my ($r_ptr,$a_ptr,$b_ptr)=("%r8","%r9","%r10");
+
+$code.=<<___;
+################################################################################
+# void ecp_nistz256_avx2_point_add_affine_x4(void* RESULTx4, void *Ax4, void *Bx4);
+.globl	ecp_nistz256_avx2_point_add_affine_x4
+.type	ecp_nistz256_avx2_point_add_affine_x4,\@function,3
+.align	32
+ecp_nistz256_avx2_point_add_affine_x4:
+	mov	%rsp, %rax
+	push    %rbp
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	lea	-16*10(%rsp), %rsp
+	vmovaps	%xmm6, -8-16*10(%rax)
+	vmovaps	%xmm7, -8-16*9(%rax)
+	vmovaps	%xmm8, -8-16*8(%rax)
+	vmovaps	%xmm9, -8-16*7(%rax)
+	vmovaps	%xmm10, -8-16*6(%rax)
+	vmovaps	%xmm11, -8-16*5(%rax)
+	vmovaps	%xmm12, -8-16*4(%rax)
+	vmovaps	%xmm13, -8-16*3(%rax)
+	vmovaps	%xmm14, -8-16*2(%rax)
+	vmovaps	%xmm15, -8-16*1(%rax)
+___
+$code.=<<___;
+	lea	-8(%rax), %rbp
+
+# Result + 32*0 = Result.X
+# Result + 32*9 = Result.Y
+# Result + 32*18 = Result.Z
+
+# A + 32*0 = A.X
+# A + 32*9 = A.Y
+# A + 32*18 = A.Z
+
+# B + 32*0 = B.X
+# B + 32*9 = B.Y
+
+	sub	\$`32*9*8+32*2+32*8`, %rsp
+	and	\$-64, %rsp
+
+	mov	$r_ptr_in, $r_ptr
+	mov	$a_ptr_in, $a_ptr
+	mov	$b_ptr_in, $b_ptr
+
+	vmovdqa	32*0($a_ptr_in), %ymm0
+	vmovdqa	.LAVX2_AND_MASK(%rip), $AND_MASK
+	vpxor	%ymm1, %ymm1, %ymm1
+	lea	256($a_ptr_in), %rax		# size optimization
+	vpor	32*1($a_ptr_in), %ymm0, %ymm0
+	vpor	32*2($a_ptr_in), %ymm0, %ymm0
+	vpor	32*3($a_ptr_in), %ymm0, %ymm0
+	vpor	32*4-256(%rax), %ymm0, %ymm0
+	lea	256(%rax), %rcx			# size optimization
+	vpor	32*5-256(%rax), %ymm0, %ymm0
+	vpor	32*6-256(%rax), %ymm0, %ymm0
+	vpor	32*7-256(%rax), %ymm0, %ymm0
+	vpor	32*8-256(%rax), %ymm0, %ymm0
+	vpor	32*9-256(%rax), %ymm0, %ymm0
+	vpor	32*10-256(%rax), %ymm0, %ymm0
+	vpor	32*11-256(%rax), %ymm0, %ymm0
+	vpor	32*12-512(%rcx), %ymm0, %ymm0
+	vpor	32*13-512(%rcx), %ymm0, %ymm0
+	vpor	32*14-512(%rcx), %ymm0, %ymm0
+	vpor	32*15-512(%rcx), %ymm0, %ymm0
+	vpor	32*16-512(%rcx), %ymm0, %ymm0
+	vpor	32*17-512(%rcx), %ymm0, %ymm0
+	vpcmpeqq %ymm1, %ymm0, %ymm0
+	vmovdqa	%ymm0, `32*9*8`(%rsp)
+
+	vpxor	%ymm1, %ymm1, %ymm1
+	vmovdqa	32*0($b_ptr), %ymm0
+	lea	256($b_ptr), %rax		# size optimization
+	vpor	32*1($b_ptr), %ymm0, %ymm0
+	vpor	32*2($b_ptr), %ymm0, %ymm0
+	vpor	32*3($b_ptr), %ymm0, %ymm0
+	vpor	32*4-256(%rax), %ymm0, %ymm0
+	lea	256(%rax), %rcx			# size optimization
+	vpor	32*5-256(%rax), %ymm0, %ymm0
+	vpor	32*6-256(%rax), %ymm0, %ymm0
+	vpor	32*7-256(%rax), %ymm0, %ymm0
+	vpor	32*8-256(%rax), %ymm0, %ymm0
+	vpor	32*9-256(%rax), %ymm0, %ymm0
+	vpor	32*10-256(%rax), %ymm0, %ymm0
+	vpor	32*11-256(%rax), %ymm0, %ymm0
+	vpor	32*12-512(%rcx), %ymm0, %ymm0
+	vpor	32*13-512(%rcx), %ymm0, %ymm0
+	vpor	32*14-512(%rcx), %ymm0, %ymm0
+	vpor	32*15-512(%rcx), %ymm0, %ymm0
+	vpor	32*16-512(%rcx), %ymm0, %ymm0
+	vpor	32*17-512(%rcx), %ymm0, %ymm0
+	vpcmpeqq %ymm1, %ymm0, %ymm0
+	vmovdqa	%ymm0, `32*9*8+32`(%rsp)
+
+	#	Z1^2 = Z1*Z1
+	lea	`32*9*2`($a_ptr), %rsi
+	lea	`32*9*2`(%rsp), %rdi
+	lea	`32*9*8+32*2`(%rsp), %rcx	# temporary vector
+	call	avx2_sqr_x4
+	call	avx2_normalize_n_store
+
+	#	U2 = X2*Z1^2
+	lea	`32*9*0`($b_ptr), %rsi
+	lea	`32*9*2`(%rsp), %rdx
+	lea	`32*9*0`(%rsp), %rdi
+	call	avx2_mul_x4
+	#call	avx2_normalize
+	`&STORE`
+
+	#	S2 = Z1*Z1^2 = Z1^3
+	lea	`32*9*2`($a_ptr), %rsi
+	lea	`32*9*2`(%rsp), %rdx
+	lea	`32*9*1`(%rsp), %rdi
+	call	avx2_mul_x4
+	call	avx2_normalize_n_store
+
+	#	S2 = S2*Y2 = Y2*Z1^3
+	lea	`32*9*1`($b_ptr), %rsi
+	lea	`32*9*1`(%rsp), %rdx
+	lea	`32*9*1`(%rsp), %rdi
+	call	avx2_mul_x4
+	call	avx2_normalize_n_store
+
+	#	H = U2 - U1 = U2 - X1
+	lea	`32*9*0`(%rsp), %rsi
+	lea	`32*9*0`($a_ptr), %rdx
+	lea	`32*9*3`(%rsp), %rdi
+	call	avx2_sub_x4
+	call	avx2_normalize_n_store
+
+	#	R = S2 - S1 = S2 - Y1
+	lea	`32*9*1`(%rsp), %rsi
+	lea	`32*9*1`($a_ptr), %rdx
+	lea	`32*9*4`(%rsp), %rdi
+	call	avx2_sub_x4
+	call	avx2_normalize_n_store
+
+	#	Z3 = H*Z1*Z2
+	lea	`32*9*3`(%rsp), %rsi
+	lea	`32*9*2`($a_ptr), %rdx
+	lea	`32*9*2`($r_ptr), %rdi
+	call	avx2_mul_x4
+	call	avx2_normalize
+
+	lea	.LONE(%rip), %rsi
+	lea	`32*9*2`($a_ptr), %rdx
+	call	avx2_select_n_store
+
+	#	R^2 = R^2
+	lea	`32*9*4`(%rsp), %rsi
+	lea	`32*9*6`(%rsp), %rdi
+	lea	`32*9*8+32*2`(%rsp), %rcx	# temporary vector
+	call	avx2_sqr_x4
+	call	avx2_normalize_n_store
+
+	#	H^2 = H^2
+	lea	`32*9*3`(%rsp), %rsi
+	lea	`32*9*5`(%rsp), %rdi
+	call	avx2_sqr_x4
+	call	avx2_normalize_n_store
+
+	#	H^3 = H^2*H
+	lea	`32*9*3`(%rsp), %rsi
+	lea	`32*9*5`(%rsp), %rdx
+	lea	`32*9*7`(%rsp), %rdi
+	call	avx2_mul_x4
+	call	avx2_normalize_n_store
+
+	#	U2 = U1*H^2
+	lea	`32*9*0`($a_ptr), %rsi
+	lea	`32*9*5`(%rsp), %rdx
+	lea	`32*9*0`(%rsp), %rdi
+	call	avx2_mul_x4
+	#call	avx2_normalize
+	`&STORE`
+
+	#	Hsqr = U2*2
+	#lea	32*9*0(%rsp), %rsi
+	#lea	32*9*5(%rsp), %rdi
+	#call	avx2_mul_by2_x4
+
+	vpaddq	$ACC0, $ACC0, $ACC0	# inlined avx2_mul_by2_x4
+	lea	`32*9*5`(%rsp), %rdi
+	vpaddq	$ACC1, $ACC1, $ACC1
+	vpaddq	$ACC2, $ACC2, $ACC2
+	vpaddq	$ACC3, $ACC3, $ACC3
+	vpaddq	$ACC4, $ACC4, $ACC4
+	vpaddq	$ACC5, $ACC5, $ACC5
+	vpaddq	$ACC6, $ACC6, $ACC6
+	vpaddq	$ACC7, $ACC7, $ACC7
+	vpaddq	$ACC8, $ACC8, $ACC8
+	call	avx2_normalize_n_store
+
+	#	X3 = R^2 - H^3
+	#lea	32*9*6(%rsp), %rsi
+	#lea	32*9*7(%rsp), %rdx
+	#lea	32*9*5(%rsp), %rcx
+	#lea	32*9*0($r_ptr), %rdi
+	#call	avx2_sub_x4
+	#NORMALIZE
+	#STORE
+
+	#	X3 = X3 - U2*2
+	#lea	32*9*0($r_ptr), %rsi
+	#lea	32*9*0($r_ptr), %rdi
+	#call	avx2_sub_x4
+	#NORMALIZE
+	#STORE
+
+	lea	`32*9*6+128`(%rsp), %rsi
+	lea	.LAVX2_POLY_x2+128(%rip), %rax
+	lea	`32*9*7+128`(%rsp), %rdx
+	lea	`32*9*5+128`(%rsp), %rcx
+	lea	`32*9*0`($r_ptr), %rdi
+
+	vmovdqa	32*0-128(%rsi), $ACC0
+	vmovdqa	32*1-128(%rsi), $ACC1
+	vmovdqa	32*2-128(%rsi), $ACC2
+	vmovdqa	32*3-128(%rsi), $ACC3
+	vmovdqa	32*4-128(%rsi), $ACC4
+	vmovdqa	32*5-128(%rsi), $ACC5
+	vmovdqa	32*6-128(%rsi), $ACC6
+	vmovdqa	32*7-128(%rsi), $ACC7
+	vmovdqa	32*8-128(%rsi), $ACC8
+
+	vpaddq	32*0-128(%rax), $ACC0, $ACC0
+	vpaddq	32*1-128(%rax), $ACC1, $ACC1
+	vpaddq	32*2-128(%rax), $ACC2, $ACC2
+	vpaddq	32*3-128(%rax), $ACC3, $ACC3
+	vpaddq	32*4-128(%rax), $ACC4, $ACC4
+	vpaddq	32*5-128(%rax), $ACC5, $ACC5
+	vpaddq	32*6-128(%rax), $ACC6, $ACC6
+	vpaddq	32*7-128(%rax), $ACC7, $ACC7
+	vpaddq	32*8-128(%rax), $ACC8, $ACC8
+
+	vpsubq	32*0-128(%rdx), $ACC0, $ACC0
+	vpsubq	32*1-128(%rdx), $ACC1, $ACC1
+	vpsubq	32*2-128(%rdx), $ACC2, $ACC2
+	vpsubq	32*3-128(%rdx), $ACC3, $ACC3
+	vpsubq	32*4-128(%rdx), $ACC4, $ACC4
+	vpsubq	32*5-128(%rdx), $ACC5, $ACC5
+	vpsubq	32*6-128(%rdx), $ACC6, $ACC6
+	vpsubq	32*7-128(%rdx), $ACC7, $ACC7
+	vpsubq	32*8-128(%rdx), $ACC8, $ACC8
+
+	vpsubq	32*0-128(%rcx), $ACC0, $ACC0
+	vpsubq	32*1-128(%rcx), $ACC1, $ACC1
+	vpsubq	32*2-128(%rcx), $ACC2, $ACC2
+	vpsubq	32*3-128(%rcx), $ACC3, $ACC3
+	vpsubq	32*4-128(%rcx), $ACC4, $ACC4
+	vpsubq	32*5-128(%rcx), $ACC5, $ACC5
+	vpsubq	32*6-128(%rcx), $ACC6, $ACC6
+	vpsubq	32*7-128(%rcx), $ACC7, $ACC7
+	vpsubq	32*8-128(%rcx), $ACC8, $ACC8
+	call	avx2_normalize
+
+	lea	32*0($b_ptr), %rsi
+	lea	32*0($a_ptr), %rdx
+	call	avx2_select_n_store
+
+	#	H = U2 - X3
+	lea	`32*9*0`(%rsp), %rsi
+	lea	`32*9*0`($r_ptr), %rdx
+	lea	`32*9*3`(%rsp), %rdi
+	call	avx2_sub_x4
+	call	avx2_normalize_n_store
+
+	#
+	lea	`32*9*3`(%rsp), %rsi
+	lea	`32*9*4`(%rsp), %rdx
+	lea	`32*9*3`(%rsp), %rdi
+	call	avx2_mul_x4
+	call	avx2_normalize_n_store
+
+	#
+	lea	`32*9*7`(%rsp), %rsi
+	lea	`32*9*1`($a_ptr), %rdx
+	lea	`32*9*1`(%rsp), %rdi
+	call	avx2_mul_x4
+	call	avx2_normalize_n_store
+
+	#
+	lea	`32*9*3`(%rsp), %rsi
+	lea	`32*9*1`(%rsp), %rdx
+	lea	`32*9*1`($r_ptr), %rdi
+	call	avx2_sub_x4
+	call	avx2_normalize
+
+	lea	32*9($b_ptr), %rsi
+	lea	32*9($a_ptr), %rdx
+	call	avx2_select_n_store
+
+	#lea	32*9*0($r_ptr), %rsi
+	#lea	32*9*0($r_ptr), %rdi
+	#call	avx2_mul_by1_x4
+	#NORMALIZE
+	#STORE
+
+	lea	`32*9*1`($r_ptr), %rsi
+	lea	`32*9*1`($r_ptr), %rdi
+	call	avx2_mul_by1_x4
+	call	avx2_normalize_n_store
+
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	movaps	%xmm6, -16*10(%rbp)
+	movaps	%xmm7, -16*9(%rbp)
+	movaps	%xmm8, -16*8(%rbp)
+	movaps	%xmm9, -16*7(%rbp)
+	movaps	%xmm10, -16*6(%rbp)
+	movaps	%xmm11, -16*5(%rbp)
+	movaps	%xmm12, -16*4(%rbp)
+	movaps	%xmm13, -16*3(%rbp)
+	movaps	%xmm14, -16*2(%rbp)
+	movaps	%xmm15, -16*1(%rbp)
+___
+$code.=<<___;
+	mov	%rbp, %rsp
+	pop	%rbp
+	ret
+.size	ecp_nistz256_avx2_point_add_affine_x4,.-ecp_nistz256_avx2_point_add_affine_x4
+
+################################################################################
+# void ecp_nistz256_avx2_point_add_affines_x4(void* RESULTx4, void *Ax4, void *Bx4);
+.globl	ecp_nistz256_avx2_point_add_affines_x4
+.type	ecp_nistz256_avx2_point_add_affines_x4,\@function,3
+.align	32
+ecp_nistz256_avx2_point_add_affines_x4:
+	mov	%rsp, %rax
+	push    %rbp
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	lea	-16*10(%rsp), %rsp
+	vmovaps	%xmm6, -8-16*10(%rax)
+	vmovaps	%xmm7, -8-16*9(%rax)
+	vmovaps	%xmm8, -8-16*8(%rax)
+	vmovaps	%xmm9, -8-16*7(%rax)
+	vmovaps	%xmm10, -8-16*6(%rax)
+	vmovaps	%xmm11, -8-16*5(%rax)
+	vmovaps	%xmm12, -8-16*4(%rax)
+	vmovaps	%xmm13, -8-16*3(%rax)
+	vmovaps	%xmm14, -8-16*2(%rax)
+	vmovaps	%xmm15, -8-16*1(%rax)
+___
+$code.=<<___;
+	lea	-8(%rax), %rbp
+
+# Result + 32*0 = Result.X
+# Result + 32*9 = Result.Y
+# Result + 32*18 = Result.Z
+
+# A + 32*0 = A.X
+# A + 32*9 = A.Y
+
+# B + 32*0 = B.X
+# B + 32*9 = B.Y
+
+	sub	\$`32*9*8+32*2+32*8`, %rsp
+	and	\$-64, %rsp
+
+	mov	$r_ptr_in, $r_ptr
+	mov	$a_ptr_in, $a_ptr
+	mov	$b_ptr_in, $b_ptr
+
+	vmovdqa	32*0($a_ptr_in), %ymm0
+	vmovdqa	.LAVX2_AND_MASK(%rip), $AND_MASK
+	vpxor	%ymm1, %ymm1, %ymm1
+	lea	256($a_ptr_in), %rax		# size optimization
+	vpor	32*1($a_ptr_in), %ymm0, %ymm0
+	vpor	32*2($a_ptr_in), %ymm0, %ymm0
+	vpor	32*3($a_ptr_in), %ymm0, %ymm0
+	vpor	32*4-256(%rax), %ymm0, %ymm0
+	lea	256(%rax), %rcx			# size optimization
+	vpor	32*5-256(%rax), %ymm0, %ymm0
+	vpor	32*6-256(%rax), %ymm0, %ymm0
+	vpor	32*7-256(%rax), %ymm0, %ymm0
+	vpor	32*8-256(%rax), %ymm0, %ymm0
+	vpor	32*9-256(%rax), %ymm0, %ymm0
+	vpor	32*10-256(%rax), %ymm0, %ymm0
+	vpor	32*11-256(%rax), %ymm0, %ymm0
+	vpor	32*12-512(%rcx), %ymm0, %ymm0
+	vpor	32*13-512(%rcx), %ymm0, %ymm0
+	vpor	32*14-512(%rcx), %ymm0, %ymm0
+	vpor	32*15-512(%rcx), %ymm0, %ymm0
+	vpor	32*16-512(%rcx), %ymm0, %ymm0
+	vpor	32*17-512(%rcx), %ymm0, %ymm0
+	vpcmpeqq %ymm1, %ymm0, %ymm0
+	vmovdqa	%ymm0, `32*9*8`(%rsp)
+
+	vpxor	%ymm1, %ymm1, %ymm1
+	vmovdqa	32*0($b_ptr), %ymm0
+	lea	256($b_ptr), %rax		# size optimization
+	vpor	32*1($b_ptr), %ymm0, %ymm0
+	vpor	32*2($b_ptr), %ymm0, %ymm0
+	vpor	32*3($b_ptr), %ymm0, %ymm0
+	vpor	32*4-256(%rax), %ymm0, %ymm0
+	lea	256(%rax), %rcx			# size optimization
+	vpor	32*5-256(%rax), %ymm0, %ymm0
+	vpor	32*6-256(%rax), %ymm0, %ymm0
+	vpor	32*7-256(%rax), %ymm0, %ymm0
+	vpor	32*8-256(%rax), %ymm0, %ymm0
+	vpor	32*9-256(%rax), %ymm0, %ymm0
+	vpor	32*10-256(%rax), %ymm0, %ymm0
+	vpor	32*11-256(%rax), %ymm0, %ymm0
+	vpor	32*12-512(%rcx), %ymm0, %ymm0
+	vpor	32*13-512(%rcx), %ymm0, %ymm0
+	vpor	32*14-512(%rcx), %ymm0, %ymm0
+	vpor	32*15-512(%rcx), %ymm0, %ymm0
+	vpor	32*16-512(%rcx), %ymm0, %ymm0
+	vpor	32*17-512(%rcx), %ymm0, %ymm0
+	vpcmpeqq %ymm1, %ymm0, %ymm0
+	vmovdqa	%ymm0, `32*9*8+32`(%rsp)
+
+	#	H = U2 - U1 = X2 - X1
+	lea	`32*9*0`($b_ptr), %rsi
+	lea	`32*9*0`($a_ptr), %rdx
+	lea	`32*9*3`(%rsp), %rdi
+	call	avx2_sub_x4
+	call	avx2_normalize_n_store
+
+	#	R = S2 - S1 = Y2 - Y1
+	lea	`32*9*1`($b_ptr), %rsi
+	lea	`32*9*1`($a_ptr), %rdx
+	lea	`32*9*4`(%rsp), %rdi
+	call	avx2_sub_x4
+	call	avx2_normalize_n_store
+
+	#	Z3 = H*Z1*Z2 = H
+	lea	`32*9*3`(%rsp), %rsi
+	lea	`32*9*2`($r_ptr), %rdi
+	call	avx2_mul_by1_x4
+	call	avx2_normalize
+
+	vmovdqa	`32*9*8`(%rsp), $B
+	vpor	`32*9*8+32`(%rsp), $B, $B
+
+	vpandn	$ACC0, $B, $ACC0
+	lea	.LONE+128(%rip), %rax
+	vpandn	$ACC1, $B, $ACC1
+	vpandn	$ACC2, $B, $ACC2
+	vpandn	$ACC3, $B, $ACC3
+	vpandn	$ACC4, $B, $ACC4
+	vpandn	$ACC5, $B, $ACC5
+	vpandn	$ACC6, $B, $ACC6
+	vpandn	$ACC7, $B, $ACC7
+
+	vpand	32*0-128(%rax), $B, $T0
+	 vpandn	$ACC8, $B, $ACC8
+	vpand	32*1-128(%rax), $B, $Y
+	vpxor	$T0, $ACC0, $ACC0
+	vpand	32*2-128(%rax), $B, $T0
+	vpxor	$Y, $ACC1, $ACC1
+	vpand	32*3-128(%rax), $B, $Y
+	vpxor	$T0, $ACC2, $ACC2
+	vpand	32*4-128(%rax), $B, $T0
+	vpxor	$Y, $ACC3, $ACC3
+	vpand	32*5-128(%rax), $B, $Y
+	vpxor	$T0, $ACC4, $ACC4
+	vpand	32*6-128(%rax), $B, $T0
+	vpxor	$Y, $ACC5, $ACC5
+	vpand	32*7-128(%rax), $B, $Y
+	vpxor	$T0, $ACC6, $ACC6
+	vpand	32*8-128(%rax), $B, $T0
+	vpxor	$Y, $ACC7, $ACC7
+	vpxor	$T0, $ACC8, $ACC8
+	`&STORE`
+
+	#	R^2 = R^2
+	lea	`32*9*4`(%rsp), %rsi
+	lea	`32*9*6`(%rsp), %rdi
+	lea	`32*9*8+32*2`(%rsp), %rcx	# temporary vector
+	call	avx2_sqr_x4
+	call	avx2_normalize_n_store
+
+	#	H^2 = H^2
+	lea	`32*9*3`(%rsp), %rsi
+	lea	`32*9*5`(%rsp), %rdi
+	call	avx2_sqr_x4
+	call	avx2_normalize_n_store
+
+	#	H^3 = H^2*H
+	lea	`32*9*3`(%rsp), %rsi
+	lea	`32*9*5`(%rsp), %rdx
+	lea	`32*9*7`(%rsp), %rdi
+	call	avx2_mul_x4
+	call	avx2_normalize_n_store
+
+	#	U2 = U1*H^2
+	lea	`32*9*0`($a_ptr), %rsi
+	lea	`32*9*5`(%rsp), %rdx
+	lea	`32*9*0`(%rsp), %rdi
+	call	avx2_mul_x4
+	#call	avx2_normalize
+	`&STORE`
+
+	#	Hsqr = U2*2
+	#lea	32*9*0(%rsp), %rsi
+	#lea	32*9*5(%rsp), %rdi
+	#call	avx2_mul_by2_x4
+
+	vpaddq	$ACC0, $ACC0, $ACC0	# inlined avx2_mul_by2_x4
+	lea	`32*9*5`(%rsp), %rdi
+	vpaddq	$ACC1, $ACC1, $ACC1
+	vpaddq	$ACC2, $ACC2, $ACC2
+	vpaddq	$ACC3, $ACC3, $ACC3
+	vpaddq	$ACC4, $ACC4, $ACC4
+	vpaddq	$ACC5, $ACC5, $ACC5
+	vpaddq	$ACC6, $ACC6, $ACC6
+	vpaddq	$ACC7, $ACC7, $ACC7
+	vpaddq	$ACC8, $ACC8, $ACC8
+	call	avx2_normalize_n_store
+
+	#	X3 = R^2 - H^3
+	#lea	32*9*6(%rsp), %rsi
+	#lea	32*9*7(%rsp), %rdx
+	#lea	32*9*5(%rsp), %rcx
+	#lea	32*9*0($r_ptr), %rdi
+	#call	avx2_sub_x4
+	#NORMALIZE
+	#STORE
+
+	#	X3 = X3 - U2*2
+	#lea	32*9*0($r_ptr), %rsi
+	#lea	32*9*0($r_ptr), %rdi
+	#call	avx2_sub_x4
+	#NORMALIZE
+	#STORE
+
+	lea	`32*9*6+128`(%rsp), %rsi
+	lea	.LAVX2_POLY_x2+128(%rip), %rax
+	lea	`32*9*7+128`(%rsp), %rdx
+	lea	`32*9*5+128`(%rsp), %rcx
+	lea	`32*9*0`($r_ptr), %rdi
+
+	vmovdqa	32*0-128(%rsi), $ACC0
+	vmovdqa	32*1-128(%rsi), $ACC1
+	vmovdqa	32*2-128(%rsi), $ACC2
+	vmovdqa	32*3-128(%rsi), $ACC3
+	vmovdqa	32*4-128(%rsi), $ACC4
+	vmovdqa	32*5-128(%rsi), $ACC5
+	vmovdqa	32*6-128(%rsi), $ACC6
+	vmovdqa	32*7-128(%rsi), $ACC7
+	vmovdqa	32*8-128(%rsi), $ACC8
+
+	vpaddq	32*0-128(%rax), $ACC0, $ACC0
+	vpaddq	32*1-128(%rax), $ACC1, $ACC1
+	vpaddq	32*2-128(%rax), $ACC2, $ACC2
+	vpaddq	32*3-128(%rax), $ACC3, $ACC3
+	vpaddq	32*4-128(%rax), $ACC4, $ACC4
+	vpaddq	32*5-128(%rax), $ACC5, $ACC5
+	vpaddq	32*6-128(%rax), $ACC6, $ACC6
+	vpaddq	32*7-128(%rax), $ACC7, $ACC7
+	vpaddq	32*8-128(%rax), $ACC8, $ACC8
+
+	vpsubq	32*0-128(%rdx), $ACC0, $ACC0
+	vpsubq	32*1-128(%rdx), $ACC1, $ACC1
+	vpsubq	32*2-128(%rdx), $ACC2, $ACC2
+	vpsubq	32*3-128(%rdx), $ACC3, $ACC3
+	vpsubq	32*4-128(%rdx), $ACC4, $ACC4
+	vpsubq	32*5-128(%rdx), $ACC5, $ACC5
+	vpsubq	32*6-128(%rdx), $ACC6, $ACC6
+	vpsubq	32*7-128(%rdx), $ACC7, $ACC7
+	vpsubq	32*8-128(%rdx), $ACC8, $ACC8
+
+	vpsubq	32*0-128(%rcx), $ACC0, $ACC0
+	vpsubq	32*1-128(%rcx), $ACC1, $ACC1
+	vpsubq	32*2-128(%rcx), $ACC2, $ACC2
+	vpsubq	32*3-128(%rcx), $ACC3, $ACC3
+	vpsubq	32*4-128(%rcx), $ACC4, $ACC4
+	vpsubq	32*5-128(%rcx), $ACC5, $ACC5
+	vpsubq	32*6-128(%rcx), $ACC6, $ACC6
+	vpsubq	32*7-128(%rcx), $ACC7, $ACC7
+	vpsubq	32*8-128(%rcx), $ACC8, $ACC8
+	call	avx2_normalize
+
+	lea	32*0($b_ptr), %rsi
+	lea	32*0($a_ptr), %rdx
+	call	avx2_select_n_store
+
+	#	H = U2 - X3
+	lea	`32*9*0`(%rsp), %rsi
+	lea	`32*9*0`($r_ptr), %rdx
+	lea	`32*9*3`(%rsp), %rdi
+	call	avx2_sub_x4
+	call	avx2_normalize_n_store
+
+	#	H = H*R
+	lea	`32*9*3`(%rsp), %rsi
+	lea	`32*9*4`(%rsp), %rdx
+	lea	`32*9*3`(%rsp), %rdi
+	call	avx2_mul_x4
+	call	avx2_normalize_n_store
+
+	#	S2 = S1 * H^3
+	lea	`32*9*7`(%rsp), %rsi
+	lea	`32*9*1`($a_ptr), %rdx
+	lea	`32*9*1`(%rsp), %rdi
+	call	avx2_mul_x4
+	call	avx2_normalize_n_store
+
+	#
+	lea	`32*9*3`(%rsp), %rsi
+	lea	`32*9*1`(%rsp), %rdx
+	lea	`32*9*1`($r_ptr), %rdi
+	call	avx2_sub_x4
+	call	avx2_normalize
+
+	lea	32*9($b_ptr), %rsi
+	lea	32*9($a_ptr), %rdx
+	call	avx2_select_n_store
+
+	#lea	32*9*0($r_ptr), %rsi
+	#lea	32*9*0($r_ptr), %rdi
+	#call	avx2_mul_by1_x4
+	#NORMALIZE
+	#STORE
+
+	lea	`32*9*1`($r_ptr), %rsi
+	lea	`32*9*1`($r_ptr), %rdi
+	call	avx2_mul_by1_x4
+	call	avx2_normalize_n_store
+
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	movaps	%xmm6, -16*10(%rbp)
+	movaps	%xmm7, -16*9(%rbp)
+	movaps	%xmm8, -16*8(%rbp)
+	movaps	%xmm9, -16*7(%rbp)
+	movaps	%xmm10, -16*6(%rbp)
+	movaps	%xmm11, -16*5(%rbp)
+	movaps	%xmm12, -16*4(%rbp)
+	movaps	%xmm13, -16*3(%rbp)
+	movaps	%xmm14, -16*2(%rbp)
+	movaps	%xmm15, -16*1(%rbp)
+___
+$code.=<<___;
+	mov	%rbp, %rsp
+	pop	%rbp
+	ret
+.size	ecp_nistz256_avx2_point_add_affines_x4,.-ecp_nistz256_avx2_point_add_affines_x4
+
+################################################################################
+# void ecp_nistz256_avx2_to_mont(void* RESULTx4, void *Ax4);
+.globl	ecp_nistz256_avx2_to_mont
+.type	ecp_nistz256_avx2_to_mont,\@function,2
+.align	32
+ecp_nistz256_avx2_to_mont:
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	lea	-8-16*10(%rsp), %rsp
+	vmovaps	%xmm6, -8-16*10(%rax)
+	vmovaps	%xmm7, -8-16*9(%rax)
+	vmovaps	%xmm8, -8-16*8(%rax)
+	vmovaps	%xmm9, -8-16*7(%rax)
+	vmovaps	%xmm10, -8-16*6(%rax)
+	vmovaps	%xmm11, -8-16*5(%rax)
+	vmovaps	%xmm12, -8-16*4(%rax)
+	vmovaps	%xmm13, -8-16*3(%rax)
+	vmovaps	%xmm14, -8-16*2(%rax)
+	vmovaps	%xmm15, -8-16*1(%rax)
+___
+$code.=<<___;
+	vmovdqa	.LAVX2_AND_MASK(%rip), $AND_MASK
+	lea	.LTO_MONT_AVX2(%rip), %rdx
+	call	avx2_mul_x4
+	call	avx2_normalize_n_store
+
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	movaps	16*0(%rsp), %xmm6
+	movaps	16*1(%rsp), %xmm7
+	movaps	16*2(%rsp), %xmm8
+	movaps	16*3(%rsp), %xmm9
+	movaps	16*4(%rsp), %xmm10
+	movaps	16*5(%rsp), %xmm11
+	movaps	16*6(%rsp), %xmm12
+	movaps	16*7(%rsp), %xmm13
+	movaps	16*8(%rsp), %xmm14
+	movaps	16*9(%rsp), %xmm15
+	lea	8+16*10(%rsp), %rsp
+___
+$code.=<<___;
+	ret
+.size	ecp_nistz256_avx2_to_mont,.-ecp_nistz256_avx2_to_mont
+
+################################################################################
+# void ecp_nistz256_avx2_from_mont(void* RESULTx4, void *Ax4);
+.globl	ecp_nistz256_avx2_from_mont
+.type	ecp_nistz256_avx2_from_mont,\@function,2
+.align	32
+ecp_nistz256_avx2_from_mont:
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	lea	-8-16*10(%rsp), %rsp
+	vmovaps	%xmm6, -8-16*10(%rax)
+	vmovaps	%xmm7, -8-16*9(%rax)
+	vmovaps	%xmm8, -8-16*8(%rax)
+	vmovaps	%xmm9, -8-16*7(%rax)
+	vmovaps	%xmm10, -8-16*6(%rax)
+	vmovaps	%xmm11, -8-16*5(%rax)
+	vmovaps	%xmm12, -8-16*4(%rax)
+	vmovaps	%xmm13, -8-16*3(%rax)
+	vmovaps	%xmm14, -8-16*2(%rax)
+	vmovaps	%xmm15, -8-16*1(%rax)
+___
+$code.=<<___;
+	vmovdqa	.LAVX2_AND_MASK(%rip), $AND_MASK
+	lea	.LFROM_MONT_AVX2(%rip), %rdx
+	call	avx2_mul_x4
+	call	avx2_normalize_n_store
+
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	movaps	16*0(%rsp), %xmm6
+	movaps	16*1(%rsp), %xmm7
+	movaps	16*2(%rsp), %xmm8
+	movaps	16*3(%rsp), %xmm9
+	movaps	16*4(%rsp), %xmm10
+	movaps	16*5(%rsp), %xmm11
+	movaps	16*6(%rsp), %xmm12
+	movaps	16*7(%rsp), %xmm13
+	movaps	16*8(%rsp), %xmm14
+	movaps	16*9(%rsp), %xmm15
+	lea	8+16*10(%rsp), %rsp
+___
+$code.=<<___;
+	ret
+.size	ecp_nistz256_avx2_from_mont,.-ecp_nistz256_avx2_from_mont
+
+################################################################################
+# void ecp_nistz256_avx2_set1(void* RESULTx4);
+.globl	ecp_nistz256_avx2_set1
+.type	ecp_nistz256_avx2_set1,\@function,1
+.align	32
+ecp_nistz256_avx2_set1:
+	lea	.LONE+128(%rip), %rax
+	lea	128(%rdi), %rdi
+	vzeroupper
+	vmovdqa	32*0-128(%rax), %ymm0
+	vmovdqa	32*1-128(%rax), %ymm1
+	vmovdqa	32*2-128(%rax), %ymm2
+	vmovdqa	32*3-128(%rax), %ymm3
+	vmovdqa	32*4-128(%rax), %ymm4
+	vmovdqa	32*5-128(%rax), %ymm5
+	vmovdqa	%ymm0, 32*0-128(%rdi)
+	vmovdqa	32*6-128(%rax), %ymm0
+	vmovdqa	%ymm1, 32*1-128(%rdi)
+	vmovdqa	32*7-128(%rax), %ymm1
+	vmovdqa	%ymm2, 32*2-128(%rdi)
+	vmovdqa	32*8-128(%rax), %ymm2
+	vmovdqa	%ymm3, 32*3-128(%rdi)
+	vmovdqa	%ymm4, 32*4-128(%rdi)
+	vmovdqa	%ymm5, 32*5-128(%rdi)
+	vmovdqa	%ymm0, 32*6-128(%rdi)
+	vmovdqa	%ymm1, 32*7-128(%rdi)
+	vmovdqa	%ymm2, 32*8-128(%rdi)
+
+	vzeroupper
+	ret
+.size	ecp_nistz256_avx2_set1,.-ecp_nistz256_avx2_set1
+___
+}
+{
+################################################################################
+# void ecp_nistz256_avx2_multi_gather_w7(void* RESULT, void *in,
+#			    int index0, int index1, int index2, int index3);
+################################################################################
+
+my ($val,$in_t,$index0,$index1,$index2,$index3)=("%rdi","%rsi","%edx","%ecx","%r8d","%r9d");
+my ($INDEX0,$INDEX1,$INDEX2,$INDEX3)=map("%ymm$_",(0..3));
+my ($R0a,$R0b,$R1a,$R1b,$R2a,$R2b,$R3a,$R3b)=map("%ymm$_",(4..11));
+my ($M0,$T0,$T1,$TMP0)=map("%ymm$_",(12..15));
+
+$code.=<<___;
+.globl	ecp_nistz256_avx2_multi_gather_w7
+.type	ecp_nistz256_avx2_multi_gather_w7,\@function,6
+.align	32
+ecp_nistz256_avx2_multi_gather_w7:
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	lea	-8-16*10(%rsp), %rsp
+	vmovaps	%xmm6, -8-16*10(%rax)
+	vmovaps	%xmm7, -8-16*9(%rax)
+	vmovaps	%xmm8, -8-16*8(%rax)
+	vmovaps	%xmm9, -8-16*7(%rax)
+	vmovaps	%xmm10, -8-16*6(%rax)
+	vmovaps	%xmm11, -8-16*5(%rax)
+	vmovaps	%xmm12, -8-16*4(%rax)
+	vmovaps	%xmm13, -8-16*3(%rax)
+	vmovaps	%xmm14, -8-16*2(%rax)
+	vmovaps	%xmm15, -8-16*1(%rax)
+___
+$code.=<<___;
+	lea	.LIntOne(%rip), %rax
+
+	vmovd	$index0, %xmm0
+	vmovd	$index1, %xmm1
+	vmovd	$index2, %xmm2
+	vmovd	$index3, %xmm3
+
+	vpxor	$R0a, $R0a, $R0a
+	vpxor	$R0b, $R0b, $R0b
+	vpxor	$R1a, $R1a, $R1a
+	vpxor	$R1b, $R1b, $R1b
+	vpxor	$R2a, $R2a, $R2a
+	vpxor	$R2b, $R2b, $R2b
+	vpxor	$R3a, $R3a, $R3a
+	vpxor	$R3b, $R3b, $R3b
+	vmovdqa	(%rax), $M0
+
+	vpermd	$INDEX0, $R0a, $INDEX0
+	vpermd	$INDEX1, $R0a, $INDEX1
+	vpermd	$INDEX2, $R0a, $INDEX2
+	vpermd	$INDEX3, $R0a, $INDEX3
+
+	mov	\$64, %ecx
+	lea	112($val), $val		# size optimization
+	jmp	.Lmulti_select_loop_avx2
+
+# INDEX=0, corresponds to the point at infty (0,0)
+.align	32
+.Lmulti_select_loop_avx2:
+	vpcmpeqd	$INDEX0, $M0, $TMP0
+
+	vmovdqa		`32*0+32*64*2*0`($in_t), $T0
+	vmovdqa		`32*1+32*64*2*0`($in_t), $T1
+	vpand		$TMP0, $T0, $T0
+	vpand		$TMP0, $T1, $T1
+	vpxor		$T0, $R0a, $R0a
+	vpxor		$T1, $R0b, $R0b
+
+	vpcmpeqd	$INDEX1, $M0, $TMP0
+
+	vmovdqa		`32*0+32*64*2*1`($in_t), $T0
+	vmovdqa		`32*1+32*64*2*1`($in_t), $T1
+	vpand		$TMP0, $T0, $T0
+	vpand		$TMP0, $T1, $T1
+	vpxor		$T0, $R1a, $R1a
+	vpxor		$T1, $R1b, $R1b
+
+	vpcmpeqd	$INDEX2, $M0, $TMP0
+
+	vmovdqa		`32*0+32*64*2*2`($in_t), $T0
+	vmovdqa		`32*1+32*64*2*2`($in_t), $T1
+	vpand		$TMP0, $T0, $T0
+	vpand		$TMP0, $T1, $T1
+	vpxor		$T0, $R2a, $R2a
+	vpxor		$T1, $R2b, $R2b
+
+	vpcmpeqd	$INDEX3, $M0, $TMP0
+
+	vmovdqa		`32*0+32*64*2*3`($in_t), $T0
+	vmovdqa		`32*1+32*64*2*3`($in_t), $T1
+	vpand		$TMP0, $T0, $T0
+	vpand		$TMP0, $T1, $T1
+	vpxor		$T0, $R3a, $R3a
+	vpxor		$T1, $R3b, $R3b
+
+	vpaddd		(%rax), $M0, $M0	# increment
+	lea		32*2($in_t), $in_t
+
+        dec	%ecx
+	jnz	.Lmulti_select_loop_avx2
+
+	vmovdqu	$R0a, 32*0-112($val)
+	vmovdqu	$R0b, 32*1-112($val)
+	vmovdqu	$R1a, 32*2-112($val)
+	vmovdqu	$R1b, 32*3-112($val)
+	vmovdqu	$R2a, 32*4-112($val)
+	vmovdqu	$R2b, 32*5-112($val)
+	vmovdqu	$R3a, 32*6-112($val)
+	vmovdqu	$R3b, 32*7-112($val)
+
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	movaps	16*0(%rsp), %xmm6
+	movaps	16*1(%rsp), %xmm7
+	movaps	16*2(%rsp), %xmm8
+	movaps	16*3(%rsp), %xmm9
+	movaps	16*4(%rsp), %xmm10
+	movaps	16*5(%rsp), %xmm11
+	movaps	16*6(%rsp), %xmm12
+	movaps	16*7(%rsp), %xmm13
+	movaps	16*8(%rsp), %xmm14
+	movaps	16*9(%rsp), %xmm15
+	lea	8+16*10(%rsp), %rsp
+___
+$code.=<<___;
+	ret
+.size	ecp_nistz256_avx2_multi_gather_w7,.-ecp_nistz256_avx2_multi_gather_w7
+
+.extern	OPENSSL_ia32cap_P
+.globl	ecp_nistz_avx2_eligible
+.type	ecp_nistz_avx2_eligible,\@abi-omnipotent
+.align	32
+ecp_nistz_avx2_eligible:
+	mov	OPENSSL_ia32cap_P+8(%rip),%eax
+	shr	\$5,%eax
+	and	\$1,%eax
+	ret
+.size	ecp_nistz_avx2_eligible,.-ecp_nistz_avx2_eligible
+___
+}
+}} else {{	# assembler is too old
+$code.=<<___;
+.text
+
+.globl	ecp_nistz256_avx2_transpose_convert
+.globl	ecp_nistz256_avx2_convert_transpose_back
+.globl	ecp_nistz256_avx2_point_add_affine_x4
+.globl	ecp_nistz256_avx2_point_add_affines_x4
+.globl	ecp_nistz256_avx2_to_mont
+.globl	ecp_nistz256_avx2_from_mont
+.globl	ecp_nistz256_avx2_set1
+.globl	ecp_nistz256_avx2_multi_gather_w7
+.type	ecp_nistz256_avx2_multi_gather_w7,\@abi-omnipotent
+ecp_nistz256_avx2_transpose_convert:
+ecp_nistz256_avx2_convert_transpose_back:
+ecp_nistz256_avx2_point_add_affine_x4:
+ecp_nistz256_avx2_point_add_affines_x4:
+ecp_nistz256_avx2_to_mont:
+ecp_nistz256_avx2_from_mont:
+ecp_nistz256_avx2_set1:
+ecp_nistz256_avx2_multi_gather_w7:
+	.byte	0x0f,0x0b	# ud2
+	ret
+.size	ecp_nistz256_avx2_multi_gather_w7,.-ecp_nistz256_avx2_multi_gather_w7
+
+.globl	ecp_nistz_avx2_eligible
+.type	ecp_nistz_avx2_eligible,\@abi-omnipotent
+ecp_nistz_avx2_eligible:
+	xor	%eax,%eax
+	ret
+.size	ecp_nistz_avx2_eligible,.-ecp_nistz_avx2_eligible
+___
+}}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval($1)/geo;
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-ppc64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-ppc64.pl
new file mode 100755
index 000000000..984c7f205
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-ppc64.pl
@@ -0,0 +1,2382 @@
+#! /usr/bin/env perl
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# ECP_NISTZ256 module for PPC64.
+#
+# August 2016.
+#
+# Original ECP_NISTZ256 submission targeting x86_64 is detailed in
+# http://eprint.iacr.org/2013/816.
+#
+#			with/without -DECP_NISTZ256_ASM
+# POWER7		+260-530%
+# POWER8		+220-340%
+
+$flavour = shift;
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open OUT,"| \"$^X\" $xlate $flavour $output";
+*STDOUT=*OUT;
+
+my $sp="r1";
+
+{
+my ($rp,$ap,$bp,$bi,$acc0,$acc1,$acc2,$acc3,$poly1,$poly3,
+    $acc4,$acc5,$a0,$a1,$a2,$a3,$t0,$t1,$t2,$t3) =
+    map("r$_",(3..12,22..31));
+
+my ($acc6,$acc7)=($bp,$bi);	# used in __ecp_nistz256_sqr_mont
+
+$code.=<<___;
+.machine	"any"
+.text
+___
+########################################################################
+# Convert ecp_nistz256_table.c to layout expected by ecp_nistz_gather_w7
+#
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+open TABLE,"<ecp_nistz256_table.c"		or
+open TABLE,"<${dir}../ecp_nistz256_table.c"	or
+die "failed to open ecp_nistz256_table.c:",$!;
+
+use integer;
+
+foreach(<TABLE>) {
+	s/TOBN\(\s*(0x[0-9a-f]+),\s*(0x[0-9a-f]+)\s*\)/push @arr,hex($2),hex($1)/geo;
+}
+close TABLE;
+
+# See ecp_nistz256_table.c for explanation for why it's 64*16*37.
+# 64*16*37-1 is because $#arr returns last valid index or @arr, not
+# amount of elements.
+die "insane number of elements" if ($#arr != 64*16*37-1);
+
+$code.=<<___;
+.type	ecp_nistz256_precomputed,\@object
+.globl	ecp_nistz256_precomputed
+.align	12
+ecp_nistz256_precomputed:
+___
+########################################################################
+# this conversion smashes P256_POINT_AFFINE by individual bytes with
+# 64 byte interval, similar to
+#	1111222233334444
+#	1234123412341234
+for(1..37) {
+	@tbl = splice(@arr,0,64*16);
+	for($i=0;$i<64;$i++) {
+		undef @line;
+		for($j=0;$j<64;$j++) {
+			push @line,(@tbl[$j*16+$i/4]>>(($i%4)*8))&0xff;
+		}
+		$code.=".byte\t";
+		$code.=join(',',map { sprintf "0x%02x",$_} @line);
+		$code.="\n";
+	}
+}
+
+$code.=<<___;
+.size	ecp_nistz256_precomputed,.-ecp_nistz256_precomputed
+.asciz	"ECP_NISTZ256 for PPC64, CRYPTOGAMS by <appro\@openssl.org>"
+
+# void	ecp_nistz256_mul_mont(BN_ULONG x0[4],const BN_ULONG x1[4],
+#					     const BN_ULONG x2[4]);
+.globl	ecp_nistz256_mul_mont
+.align	5
+ecp_nistz256_mul_mont:
+	stdu	$sp,-128($sp)
+	mflr	r0
+	std	r22,48($sp)
+	std	r23,56($sp)
+	std	r24,64($sp)
+	std	r25,72($sp)
+	std	r26,80($sp)
+	std	r27,88($sp)
+	std	r28,96($sp)
+	std	r29,104($sp)
+	std	r30,112($sp)
+	std	r31,120($sp)
+
+	ld	$a0,0($ap)
+	ld	$bi,0($bp)
+	ld	$a1,8($ap)
+	ld	$a2,16($ap)
+	ld	$a3,24($ap)
+
+	li	$poly1,-1
+	srdi	$poly1,$poly1,32	# 0x00000000ffffffff
+	li	$poly3,1
+	orc	$poly3,$poly3,$poly1	# 0xffffffff00000001
+
+	bl	__ecp_nistz256_mul_mont
+
+	mtlr	r0
+	ld	r22,48($sp)
+	ld	r23,56($sp)
+	ld	r24,64($sp)
+	ld	r25,72($sp)
+	ld	r26,80($sp)
+	ld	r27,88($sp)
+	ld	r28,96($sp)
+	ld	r29,104($sp)
+	ld	r30,112($sp)
+	ld	r31,120($sp)
+	addi	$sp,$sp,128
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,10,3,0
+	.long	0
+.size	ecp_nistz256_mul_mont,.-ecp_nistz256_mul_mont
+
+# void	ecp_nistz256_sqr_mont(BN_ULONG x0[4],const BN_ULONG x1[4]);
+.globl	ecp_nistz256_sqr_mont
+.align	4
+ecp_nistz256_sqr_mont:
+	stdu	$sp,-128($sp)
+	mflr	r0
+	std	r22,48($sp)
+	std	r23,56($sp)
+	std	r24,64($sp)
+	std	r25,72($sp)
+	std	r26,80($sp)
+	std	r27,88($sp)
+	std	r28,96($sp)
+	std	r29,104($sp)
+	std	r30,112($sp)
+	std	r31,120($sp)
+
+	ld	$a0,0($ap)
+	ld	$a1,8($ap)
+	ld	$a2,16($ap)
+	ld	$a3,24($ap)
+
+	li	$poly1,-1
+	srdi	$poly1,$poly1,32	# 0x00000000ffffffff
+	li	$poly3,1
+	orc	$poly3,$poly3,$poly1	# 0xffffffff00000001
+
+	bl	__ecp_nistz256_sqr_mont
+
+	mtlr	r0
+	ld	r22,48($sp)
+	ld	r23,56($sp)
+	ld	r24,64($sp)
+	ld	r25,72($sp)
+	ld	r26,80($sp)
+	ld	r27,88($sp)
+	ld	r28,96($sp)
+	ld	r29,104($sp)
+	ld	r30,112($sp)
+	ld	r31,120($sp)
+	addi	$sp,$sp,128
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,10,2,0
+	.long	0
+.size	ecp_nistz256_sqr_mont,.-ecp_nistz256_sqr_mont
+
+# void	ecp_nistz256_add(BN_ULONG x0[4],const BN_ULONG x1[4],
+#					const BN_ULONG x2[4]);
+.globl	ecp_nistz256_add
+.align	4
+ecp_nistz256_add:
+	stdu	$sp,-128($sp)
+	mflr	r0
+	std	r28,96($sp)
+	std	r29,104($sp)
+	std	r30,112($sp)
+	std	r31,120($sp)
+
+	ld	$acc0,0($ap)
+	ld	$t0,  0($bp)
+	ld	$acc1,8($ap)
+	ld	$t1,  8($bp)
+	ld	$acc2,16($ap)
+	ld	$t2,  16($bp)
+	ld	$acc3,24($ap)
+	ld	$t3,  24($bp)
+
+	li	$poly1,-1
+	srdi	$poly1,$poly1,32	# 0x00000000ffffffff
+	li	$poly3,1
+	orc	$poly3,$poly3,$poly1	# 0xffffffff00000001
+
+	bl	__ecp_nistz256_add
+
+	mtlr	r0
+	ld	r28,96($sp)
+	ld	r29,104($sp)
+	ld	r30,112($sp)
+	ld	r31,120($sp)
+	addi	$sp,$sp,128
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,4,3,0
+	.long	0
+.size	ecp_nistz256_add,.-ecp_nistz256_add
+
+# void	ecp_nistz256_div_by_2(BN_ULONG x0[4],const BN_ULONG x1[4]);
+.globl	ecp_nistz256_div_by_2
+.align	4
+ecp_nistz256_div_by_2:
+	stdu	$sp,-128($sp)
+	mflr	r0
+	std	r28,96($sp)
+	std	r29,104($sp)
+	std	r30,112($sp)
+	std	r31,120($sp)
+
+	ld	$acc0,0($ap)
+	ld	$acc1,8($ap)
+	ld	$acc2,16($ap)
+	ld	$acc3,24($ap)
+
+	li	$poly1,-1
+	srdi	$poly1,$poly1,32	# 0x00000000ffffffff
+	li	$poly3,1
+	orc	$poly3,$poly3,$poly1	# 0xffffffff00000001
+
+	bl	__ecp_nistz256_div_by_2
+
+	mtlr	r0
+	ld	r28,96($sp)
+	ld	r29,104($sp)
+	ld	r30,112($sp)
+	ld	r31,120($sp)
+	addi	$sp,$sp,128
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,4,2,0
+	.long	0
+.size	ecp_nistz256_div_by_2,.-ecp_nistz256_div_by_2
+
+# void	ecp_nistz256_mul_by_2(BN_ULONG x0[4],const BN_ULONG x1[4]);
+.globl	ecp_nistz256_mul_by_2
+.align	4
+ecp_nistz256_mul_by_2:
+	stdu	$sp,-128($sp)
+	mflr	r0
+	std	r28,96($sp)
+	std	r29,104($sp)
+	std	r30,112($sp)
+	std	r31,120($sp)
+
+	ld	$acc0,0($ap)
+	ld	$acc1,8($ap)
+	ld	$acc2,16($ap)
+	ld	$acc3,24($ap)
+
+	mr	$t0,$acc0
+	mr	$t1,$acc1
+	mr	$t2,$acc2
+	mr	$t3,$acc3
+
+	li	$poly1,-1
+	srdi	$poly1,$poly1,32	# 0x00000000ffffffff
+	li	$poly3,1
+	orc	$poly3,$poly3,$poly1	# 0xffffffff00000001
+
+	bl	__ecp_nistz256_add	# ret = a+a	// 2*a
+
+	mtlr	r0
+	ld	r28,96($sp)
+	ld	r29,104($sp)
+	ld	r30,112($sp)
+	ld	r31,120($sp)
+	addi	$sp,$sp,128
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,4,3,0
+	.long	0
+.size	ecp_nistz256_mul_by_2,.-ecp_nistz256_mul_by_2
+
+# void	ecp_nistz256_mul_by_3(BN_ULONG x0[4],const BN_ULONG x1[4]);
+.globl	ecp_nistz256_mul_by_3
+.align	4
+ecp_nistz256_mul_by_3:
+	stdu	$sp,-128($sp)
+	mflr	r0
+	std	r28,96($sp)
+	std	r29,104($sp)
+	std	r30,112($sp)
+	std	r31,120($sp)
+
+	ld	$acc0,0($ap)
+	ld	$acc1,8($ap)
+	ld	$acc2,16($ap)
+	ld	$acc3,24($ap)
+
+	mr	$t0,$acc0
+	std	$acc0,64($sp)
+	mr	$t1,$acc1
+	std	$acc1,72($sp)
+	mr	$t2,$acc2
+	std	$acc2,80($sp)
+	mr	$t3,$acc3
+	std	$acc3,88($sp)
+
+	li	$poly1,-1
+	srdi	$poly1,$poly1,32	# 0x00000000ffffffff
+	li	$poly3,1
+	orc	$poly3,$poly3,$poly1	# 0xffffffff00000001
+
+	bl	__ecp_nistz256_add	# ret = a+a	// 2*a
+
+	ld	$t0,64($sp)
+	ld	$t1,72($sp)
+	ld	$t2,80($sp)
+	ld	$t3,88($sp)
+
+	bl	__ecp_nistz256_add	# ret += a	// 2*a+a=3*a
+
+	mtlr	r0
+	ld	r28,96($sp)
+	ld	r29,104($sp)
+	ld	r30,112($sp)
+	ld	r31,120($sp)
+	addi	$sp,$sp,128
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,4,2,0
+	.long	0
+.size	ecp_nistz256_mul_by_3,.-ecp_nistz256_mul_by_3
+
+# void	ecp_nistz256_sub(BN_ULONG x0[4],const BN_ULONG x1[4],
+#				        const BN_ULONG x2[4]);
+.globl	ecp_nistz256_sub
+.align	4
+ecp_nistz256_sub:
+	stdu	$sp,-128($sp)
+	mflr	r0
+	std	r28,96($sp)
+	std	r29,104($sp)
+	std	r30,112($sp)
+	std	r31,120($sp)
+
+	ld	$acc0,0($ap)
+	ld	$acc1,8($ap)
+	ld	$acc2,16($ap)
+	ld	$acc3,24($ap)
+
+	li	$poly1,-1
+	srdi	$poly1,$poly1,32	# 0x00000000ffffffff
+	li	$poly3,1
+	orc	$poly3,$poly3,$poly1	# 0xffffffff00000001
+
+	bl	__ecp_nistz256_sub_from
+
+	mtlr	r0
+	ld	r28,96($sp)
+	ld	r29,104($sp)
+	ld	r30,112($sp)
+	ld	r31,120($sp)
+	addi	$sp,$sp,128
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,4,3,0
+	.long	0
+.size	ecp_nistz256_sub,.-ecp_nistz256_sub
+
+# void	ecp_nistz256_neg(BN_ULONG x0[4],const BN_ULONG x1[4]);
+.globl	ecp_nistz256_neg
+.align	4
+ecp_nistz256_neg:
+	stdu	$sp,-128($sp)
+	mflr	r0
+	std	r28,96($sp)
+	std	r29,104($sp)
+	std	r30,112($sp)
+	std	r31,120($sp)
+
+	mr	$bp,$ap
+	li	$acc0,0
+	li	$acc1,0
+	li	$acc2,0
+	li	$acc3,0
+
+	li	$poly1,-1
+	srdi	$poly1,$poly1,32	# 0x00000000ffffffff
+	li	$poly3,1
+	orc	$poly3,$poly3,$poly1	# 0xffffffff00000001
+
+	bl	__ecp_nistz256_sub_from
+
+	mtlr	r0
+	ld	r28,96($sp)
+	ld	r29,104($sp)
+	ld	r30,112($sp)
+	ld	r31,120($sp)
+	addi	$sp,$sp,128
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,4,2,0
+	.long	0
+.size	ecp_nistz256_neg,.-ecp_nistz256_neg
+
+# note that __ecp_nistz256_mul_mont expects a[0-3] input pre-loaded
+# to $a0-$a3 and b[0] - to $bi
+.type	__ecp_nistz256_mul_mont,\@function
+.align	4
+__ecp_nistz256_mul_mont:
+	mulld	$acc0,$a0,$bi		# a[0]*b[0]
+	mulhdu	$t0,$a0,$bi
+
+	mulld	$acc1,$a1,$bi		# a[1]*b[0]
+	mulhdu	$t1,$a1,$bi
+
+	mulld	$acc2,$a2,$bi		# a[2]*b[0]
+	mulhdu	$t2,$a2,$bi
+
+	mulld	$acc3,$a3,$bi		# a[3]*b[0]
+	mulhdu	$t3,$a3,$bi
+	ld	$bi,8($bp)		# b[1]
+
+	addc	$acc1,$acc1,$t0		# accumulate high parts of multiplication
+	 sldi	$t0,$acc0,32
+	adde	$acc2,$acc2,$t1
+	 srdi	$t1,$acc0,32
+	adde	$acc3,$acc3,$t2
+	addze	$acc4,$t3
+	li	$acc5,0
+___
+for($i=1;$i<4;$i++) {
+	################################################################
+	# Reduction iteration is normally performed by accumulating
+	# result of multiplication of modulus by "magic" digit [and
+	# omitting least significant word, which is guaranteed to
+	# be 0], but thanks to special form of modulus and "magic"
+	# digit being equal to least significant word, it can be
+	# performed with additions and subtractions alone. Indeed:
+	#
+	#            ffff0001.00000000.0000ffff.ffffffff
+	# *                                     abcdefgh
+	# + xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx.abcdefgh
+	#
+	# Now observing that ff..ff*x = (2^n-1)*x = 2^n*x-x, we
+	# rewrite above as:
+	#
+	#   xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx.abcdefgh
+	# + abcdefgh.abcdefgh.0000abcd.efgh0000.00000000
+	# - 0000abcd.efgh0000.00000000.00000000.abcdefgh
+	#
+	# or marking redundant operations:
+	#
+	#   xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx.--------
+	# + abcdefgh.abcdefgh.0000abcd.efgh0000.--------
+	# - 0000abcd.efgh0000.--------.--------.--------
+
+$code.=<<___;
+	subfc	$t2,$t0,$acc0		# "*0xffff0001"
+	subfe	$t3,$t1,$acc0
+	addc	$acc0,$acc1,$t0		# +=acc[0]<<96 and omit acc[0]
+	adde	$acc1,$acc2,$t1
+	adde	$acc2,$acc3,$t2		# +=acc[0]*0xffff0001
+	adde	$acc3,$acc4,$t3
+	addze	$acc4,$acc5
+
+	mulld	$t0,$a0,$bi		# lo(a[0]*b[i])
+	mulld	$t1,$a1,$bi		# lo(a[1]*b[i])
+	mulld	$t2,$a2,$bi		# lo(a[2]*b[i])
+	mulld	$t3,$a3,$bi		# lo(a[3]*b[i])
+	addc	$acc0,$acc0,$t0		# accumulate low parts of multiplication
+	 mulhdu	$t0,$a0,$bi		# hi(a[0]*b[i])
+	adde	$acc1,$acc1,$t1
+	 mulhdu	$t1,$a1,$bi		# hi(a[1]*b[i])
+	adde	$acc2,$acc2,$t2
+	 mulhdu	$t2,$a2,$bi		# hi(a[2]*b[i])
+	adde	$acc3,$acc3,$t3
+	 mulhdu	$t3,$a3,$bi		# hi(a[3]*b[i])
+	addze	$acc4,$acc4
+___
+$code.=<<___	if ($i<3);
+	ld	$bi,8*($i+1)($bp)	# b[$i+1]
+___
+$code.=<<___;
+	addc	$acc1,$acc1,$t0		# accumulate high parts of multiplication
+	 sldi	$t0,$acc0,32
+	adde	$acc2,$acc2,$t1
+	 srdi	$t1,$acc0,32
+	adde	$acc3,$acc3,$t2
+	adde	$acc4,$acc4,$t3
+	li	$acc5,0
+	addze	$acc5,$acc5
+___
+}
+$code.=<<___;
+	# last reduction
+	subfc	$t2,$t0,$acc0		# "*0xffff0001"
+	subfe	$t3,$t1,$acc0
+	addc	$acc0,$acc1,$t0		# +=acc[0]<<96 and omit acc[0]
+	adde	$acc1,$acc2,$t1
+	adde	$acc2,$acc3,$t2		# +=acc[0]*0xffff0001
+	adde	$acc3,$acc4,$t3
+	addze	$acc4,$acc5
+
+	li	$t2,0
+	addic	$acc0,$acc0,1		# ret -= modulus
+	subfe	$acc1,$poly1,$acc1
+	subfe	$acc2,$t2,$acc2
+	subfe	$acc3,$poly3,$acc3
+	subfe	$acc4,$t2,$acc4
+
+	addc	$acc0,$acc0,$acc4	# ret += modulus if borrow
+	and	$t1,$poly1,$acc4
+	and	$t3,$poly3,$acc4
+	adde	$acc1,$acc1,$t1
+	addze	$acc2,$acc2
+	adde	$acc3,$acc3,$t3
+
+	std	$acc0,0($rp)
+	std	$acc1,8($rp)
+	std	$acc2,16($rp)
+	std	$acc3,24($rp)
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,1,0
+	.long	0
+.size	__ecp_nistz256_mul_mont,.-__ecp_nistz256_mul_mont
+
+# note that __ecp_nistz256_sqr_mont expects a[0-3] input pre-loaded
+# to $a0-$a3
+.type	__ecp_nistz256_sqr_mont,\@function
+.align	4
+__ecp_nistz256_sqr_mont:
+	################################################################
+	#  |  |  |  |  |  |a1*a0|  |
+	#  |  |  |  |  |a2*a0|  |  |
+	#  |  |a3*a2|a3*a0|  |  |  |
+	#  |  |  |  |a2*a1|  |  |  |
+	#  |  |  |a3*a1|  |  |  |  |
+	# *|  |  |  |  |  |  |  | 2|
+	# +|a3*a3|a2*a2|a1*a1|a0*a0|
+	#  |--+--+--+--+--+--+--+--|
+	#  |A7|A6|A5|A4|A3|A2|A1|A0|, where Ax is $accx, i.e. follow $accx
+	#
+	#  "can't overflow" below mark carrying into high part of
+	#  multiplication result, which can't overflow, because it
+	#  can never be all ones.
+
+	mulld	$acc1,$a1,$a0		# a[1]*a[0]
+	mulhdu	$t1,$a1,$a0
+	mulld	$acc2,$a2,$a0		# a[2]*a[0]
+	mulhdu	$t2,$a2,$a0
+	mulld	$acc3,$a3,$a0		# a[3]*a[0]
+	mulhdu	$acc4,$a3,$a0
+
+	addc	$acc2,$acc2,$t1		# accumulate high parts of multiplication
+	 mulld	$t0,$a2,$a1		# a[2]*a[1]
+	 mulhdu	$t1,$a2,$a1
+	adde	$acc3,$acc3,$t2
+	 mulld	$t2,$a3,$a1		# a[3]*a[1]
+	 mulhdu	$t3,$a3,$a1
+	addze	$acc4,$acc4		# can't overflow
+
+	mulld	$acc5,$a3,$a2		# a[3]*a[2]
+	mulhdu	$acc6,$a3,$a2
+
+	addc	$t1,$t1,$t2		# accumulate high parts of multiplication
+	addze	$t2,$t3			# can't overflow
+
+	addc	$acc3,$acc3,$t0		# accumulate low parts of multiplication
+	adde	$acc4,$acc4,$t1
+	adde	$acc5,$acc5,$t2
+	addze	$acc6,$acc6		# can't overflow
+
+	addc	$acc1,$acc1,$acc1	# acc[1-6]*=2
+	adde	$acc2,$acc2,$acc2
+	adde	$acc3,$acc3,$acc3
+	adde	$acc4,$acc4,$acc4
+	adde	$acc5,$acc5,$acc5
+	adde	$acc6,$acc6,$acc6
+	li	$acc7,0
+	addze	$acc7,$acc7
+
+	mulld	$acc0,$a0,$a0		# a[0]*a[0]
+	mulhdu	$a0,$a0,$a0
+	mulld	$t1,$a1,$a1		# a[1]*a[1]
+	mulhdu	$a1,$a1,$a1
+	mulld	$t2,$a2,$a2		# a[2]*a[2]
+	mulhdu	$a2,$a2,$a2
+	mulld	$t3,$a3,$a3		# a[3]*a[3]
+	mulhdu	$a3,$a3,$a3
+	addc	$acc1,$acc1,$a0		# +a[i]*a[i]
+	 sldi	$t0,$acc0,32
+	adde	$acc2,$acc2,$t1
+	 srdi	$t1,$acc0,32
+	adde	$acc3,$acc3,$a1
+	adde	$acc4,$acc4,$t2
+	adde	$acc5,$acc5,$a2
+	adde	$acc6,$acc6,$t3
+	adde	$acc7,$acc7,$a3
+___
+for($i=0;$i<3;$i++) {			# reductions, see commentary in
+					# multiplication for details
+$code.=<<___;
+	subfc	$t2,$t0,$acc0		# "*0xffff0001"
+	subfe	$t3,$t1,$acc0
+	addc	$acc0,$acc1,$t0		# +=acc[0]<<96 and omit acc[0]
+	 sldi	$t0,$acc0,32
+	adde	$acc1,$acc2,$t1
+	 srdi	$t1,$acc0,32
+	adde	$acc2,$acc3,$t2		# +=acc[0]*0xffff0001
+	addze	$acc3,$t3		# can't overflow
+___
+}
+$code.=<<___;
+	subfc	$t2,$t0,$acc0		# "*0xffff0001"
+	subfe	$t3,$t1,$acc0
+	addc	$acc0,$acc1,$t0		# +=acc[0]<<96 and omit acc[0]
+	adde	$acc1,$acc2,$t1
+	adde	$acc2,$acc3,$t2		# +=acc[0]*0xffff0001
+	addze	$acc3,$t3		# can't overflow
+
+	addc	$acc0,$acc0,$acc4	# accumulate upper half
+	adde	$acc1,$acc1,$acc5
+	adde	$acc2,$acc2,$acc6
+	adde	$acc3,$acc3,$acc7
+	li	$t2,0
+	addze	$acc4,$t2
+
+	addic	$acc0,$acc0,1		# ret -= modulus
+	subfe	$acc1,$poly1,$acc1
+	subfe	$acc2,$t2,$acc2
+	subfe	$acc3,$poly3,$acc3
+	subfe	$acc4,$t2,$acc4
+
+	addc	$acc0,$acc0,$acc4	# ret += modulus if borrow
+	and	$t1,$poly1,$acc4
+	and	$t3,$poly3,$acc4
+	adde	$acc1,$acc1,$t1
+	addze	$acc2,$acc2
+	adde	$acc3,$acc3,$t3
+
+	std	$acc0,0($rp)
+	std	$acc1,8($rp)
+	std	$acc2,16($rp)
+	std	$acc3,24($rp)
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,1,0
+	.long	0
+.size	__ecp_nistz256_sqr_mont,.-__ecp_nistz256_sqr_mont
+
+# Note that __ecp_nistz256_add expects both input vectors pre-loaded to
+# $a0-$a3 and $t0-$t3. This is done because it's used in multiple
+# contexts, e.g. in multiplication by 2 and 3...
+.type	__ecp_nistz256_add,\@function
+.align	4
+__ecp_nistz256_add:
+	addc	$acc0,$acc0,$t0		# ret = a+b
+	adde	$acc1,$acc1,$t1
+	adde	$acc2,$acc2,$t2
+	li	$t2,0
+	adde	$acc3,$acc3,$t3
+	addze	$t0,$t2
+
+	# if a+b >= modulus, subtract modulus
+	#
+	# But since comparison implies subtraction, we subtract
+	# modulus and then add it back if subtraction borrowed.
+
+	subic	$acc0,$acc0,-1
+	subfe	$acc1,$poly1,$acc1
+	subfe	$acc2,$t2,$acc2
+	subfe	$acc3,$poly3,$acc3
+	subfe	$t0,$t2,$t0
+
+	addc	$acc0,$acc0,$t0
+	and	$t1,$poly1,$t0
+	and	$t3,$poly3,$t0
+	adde	$acc1,$acc1,$t1
+	addze	$acc2,$acc2
+	adde	$acc3,$acc3,$t3
+
+	std	$acc0,0($rp)
+	std	$acc1,8($rp)
+	std	$acc2,16($rp)
+	std	$acc3,24($rp)
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+	.long	0
+.size	__ecp_nistz256_add,.-__ecp_nistz256_add
+
+.type	__ecp_nistz256_sub_from,\@function
+.align	4
+__ecp_nistz256_sub_from:
+	ld	$t0,0($bp)
+	ld	$t1,8($bp)
+	ld	$t2,16($bp)
+	ld	$t3,24($bp)
+	subfc	$acc0,$t0,$acc0		# ret = a-b
+	subfe	$acc1,$t1,$acc1
+	subfe	$acc2,$t2,$acc2
+	subfe	$acc3,$t3,$acc3
+	subfe	$t0,$t0,$t0		# t0 = borrow ? -1 : 0
+
+	# if a-b borrowed, add modulus
+
+	addc	$acc0,$acc0,$t0		# ret -= modulus & t0
+	and	$t1,$poly1,$t0
+	and	$t3,$poly3,$t0
+	adde	$acc1,$acc1,$t1
+	addze	$acc2,$acc2
+	adde	$acc3,$acc3,$t3
+
+	std	$acc0,0($rp)
+	std	$acc1,8($rp)
+	std	$acc2,16($rp)
+	std	$acc3,24($rp)
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+	.long	0
+.size	__ecp_nistz256_sub_from,.-__ecp_nistz256_sub_from
+
+.type	__ecp_nistz256_sub_morf,\@function
+.align	4
+__ecp_nistz256_sub_morf:
+	ld	$t0,0($bp)
+	ld	$t1,8($bp)
+	ld	$t2,16($bp)
+	ld	$t3,24($bp)
+	subfc	$acc0,$acc0,$t0 	# ret = b-a
+	subfe	$acc1,$acc1,$t1
+	subfe	$acc2,$acc2,$t2
+	subfe	$acc3,$acc3,$t3
+	subfe	$t0,$t0,$t0		# t0 = borrow ? -1 : 0
+
+	# if b-a borrowed, add modulus
+
+	addc	$acc0,$acc0,$t0		# ret -= modulus & t0
+	and	$t1,$poly1,$t0
+	and	$t3,$poly3,$t0
+	adde	$acc1,$acc1,$t1
+	addze	$acc2,$acc2
+	adde	$acc3,$acc3,$t3
+
+	std	$acc0,0($rp)
+	std	$acc1,8($rp)
+	std	$acc2,16($rp)
+	std	$acc3,24($rp)
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+	.long	0
+.size	__ecp_nistz256_sub_morf,.-__ecp_nistz256_sub_morf
+
+.type	__ecp_nistz256_div_by_2,\@function
+.align	4
+__ecp_nistz256_div_by_2:
+	andi.	$t0,$acc0,1
+	addic	$acc0,$acc0,-1		# a += modulus
+	 neg	$t0,$t0
+	adde	$acc1,$acc1,$poly1
+	 not	$t0,$t0
+	addze	$acc2,$acc2
+	 li	$t2,0
+	adde	$acc3,$acc3,$poly3
+	 and	$t1,$poly1,$t0
+	addze	$ap,$t2			# ap = carry
+	 and	$t3,$poly3,$t0
+
+	subfc	$acc0,$t0,$acc0		# a -= modulus if a was even
+	subfe	$acc1,$t1,$acc1
+	subfe	$acc2,$t2,$acc2
+	subfe	$acc3,$t3,$acc3
+	subfe	$ap,  $t2,$ap
+
+	srdi	$acc0,$acc0,1
+	sldi	$t0,$acc1,63
+	srdi	$acc1,$acc1,1
+	sldi	$t1,$acc2,63
+	srdi	$acc2,$acc2,1
+	sldi	$t2,$acc3,63
+	srdi	$acc3,$acc3,1
+	sldi	$t3,$ap,63
+	or	$acc0,$acc0,$t0
+	or	$acc1,$acc1,$t1
+	or	$acc2,$acc2,$t2
+	or	$acc3,$acc3,$t3
+
+	std	$acc0,0($rp)
+	std	$acc1,8($rp)
+	std	$acc2,16($rp)
+	std	$acc3,24($rp)
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,1,0
+	.long	0
+.size	__ecp_nistz256_div_by_2,.-__ecp_nistz256_div_by_2
+___
+########################################################################
+# following subroutines are "literal" implementation of those found in
+# ecp_nistz256.c
+#
+########################################################################
+# void ecp_nistz256_point_double(P256_POINT *out,const P256_POINT *inp);
+#
+if (1) {
+my $FRAME=64+32*4+12*8;
+my ($S,$M,$Zsqr,$tmp0)=map(64+32*$_,(0..3));
+# above map() describes stack layout with 4 temporary
+# 256-bit vectors on top.
+my ($rp_real,$ap_real) = map("r$_",(20,21));
+
+$code.=<<___;
+.globl	ecp_nistz256_point_double
+.align	5
+ecp_nistz256_point_double:
+	stdu	$sp,-$FRAME($sp)
+	mflr	r0
+	std	r20,$FRAME-8*12($sp)
+	std	r21,$FRAME-8*11($sp)
+	std	r22,$FRAME-8*10($sp)
+	std	r23,$FRAME-8*9($sp)
+	std	r24,$FRAME-8*8($sp)
+	std	r25,$FRAME-8*7($sp)
+	std	r26,$FRAME-8*6($sp)
+	std	r27,$FRAME-8*5($sp)
+	std	r28,$FRAME-8*4($sp)
+	std	r29,$FRAME-8*3($sp)
+	std	r30,$FRAME-8*2($sp)
+	std	r31,$FRAME-8*1($sp)
+
+	li	$poly1,-1
+	srdi	$poly1,$poly1,32	# 0x00000000ffffffff
+	li	$poly3,1
+	orc	$poly3,$poly3,$poly1	# 0xffffffff00000001
+.Ldouble_shortcut:
+	ld	$acc0,32($ap)
+	ld	$acc1,40($ap)
+	ld	$acc2,48($ap)
+	ld	$acc3,56($ap)
+	mr	$t0,$acc0
+	mr	$t1,$acc1
+	mr	$t2,$acc2
+	mr	$t3,$acc3
+	 ld	$a0,64($ap)		# forward load for p256_sqr_mont
+	 ld	$a1,72($ap)
+	 ld	$a2,80($ap)
+	 ld	$a3,88($ap)
+	 mr	$rp_real,$rp
+	 mr	$ap_real,$ap
+	addi	$rp,$sp,$S
+	bl	__ecp_nistz256_add	# p256_mul_by_2(S, in_y);
+
+	addi	$rp,$sp,$Zsqr
+	bl	__ecp_nistz256_sqr_mont	# p256_sqr_mont(Zsqr, in_z);
+
+	ld	$t0,0($ap_real)
+	ld	$t1,8($ap_real)
+	ld	$t2,16($ap_real)
+	ld	$t3,24($ap_real)
+	mr	$a0,$acc0		# put Zsqr aside for p256_sub
+	mr	$a1,$acc1
+	mr	$a2,$acc2
+	mr	$a3,$acc3
+	addi	$rp,$sp,$M
+	bl	__ecp_nistz256_add	# p256_add(M, Zsqr, in_x);
+
+	addi	$bp,$ap_real,0
+	mr	$acc0,$a0		# restore Zsqr
+	mr	$acc1,$a1
+	mr	$acc2,$a2
+	mr	$acc3,$a3
+	 ld	$a0,$S+0($sp)		# forward load for p256_sqr_mont
+	 ld	$a1,$S+8($sp)
+	 ld	$a2,$S+16($sp)
+	 ld	$a3,$S+24($sp)
+	addi	$rp,$sp,$Zsqr
+	bl	__ecp_nistz256_sub_morf	# p256_sub(Zsqr, in_x, Zsqr);
+
+	addi	$rp,$sp,$S
+	bl	__ecp_nistz256_sqr_mont	# p256_sqr_mont(S, S);
+
+	ld	$bi,32($ap_real)
+	ld	$a0,64($ap_real)
+	ld	$a1,72($ap_real)
+	ld	$a2,80($ap_real)
+	ld	$a3,88($ap_real)
+	addi	$bp,$ap_real,32
+	addi	$rp,$sp,$tmp0
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(tmp0, in_z, in_y);
+
+	mr	$t0,$acc0
+	mr	$t1,$acc1
+	mr	$t2,$acc2
+	mr	$t3,$acc3
+	 ld	$a0,$S+0($sp)		# forward load for p256_sqr_mont
+	 ld	$a1,$S+8($sp)
+	 ld	$a2,$S+16($sp)
+	 ld	$a3,$S+24($sp)
+	addi	$rp,$rp_real,64
+	bl	__ecp_nistz256_add	# p256_mul_by_2(res_z, tmp0);
+
+	addi	$rp,$sp,$tmp0
+	bl	__ecp_nistz256_sqr_mont	# p256_sqr_mont(tmp0, S);
+
+	 ld	$bi,$Zsqr($sp)		# forward load for p256_mul_mont
+	 ld	$a0,$M+0($sp)
+	 ld	$a1,$M+8($sp)
+	 ld	$a2,$M+16($sp)
+	 ld	$a3,$M+24($sp)
+	addi	$rp,$rp_real,32
+	bl	__ecp_nistz256_div_by_2	# p256_div_by_2(res_y, tmp0);
+
+	addi	$bp,$sp,$Zsqr
+	addi	$rp,$sp,$M
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(M, M, Zsqr);
+
+	mr	$t0,$acc0		# duplicate M
+	mr	$t1,$acc1
+	mr	$t2,$acc2
+	mr	$t3,$acc3
+	mr	$a0,$acc0		# put M aside
+	mr	$a1,$acc1
+	mr	$a2,$acc2
+	mr	$a3,$acc3
+	addi	$rp,$sp,$M
+	bl	__ecp_nistz256_add
+	mr	$t0,$a0			# restore M
+	mr	$t1,$a1
+	mr	$t2,$a2
+	mr	$t3,$a3
+	 ld	$bi,0($ap_real)		# forward load for p256_mul_mont
+	 ld	$a0,$S+0($sp)
+	 ld	$a1,$S+8($sp)
+	 ld	$a2,$S+16($sp)
+	 ld	$a3,$S+24($sp)
+	bl	__ecp_nistz256_add	# p256_mul_by_3(M, M);
+
+	addi	$bp,$ap_real,0
+	addi	$rp,$sp,$S
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(S, S, in_x);
+
+	mr	$t0,$acc0
+	mr	$t1,$acc1
+	mr	$t2,$acc2
+	mr	$t3,$acc3
+	 ld	$a0,$M+0($sp)		# forward load for p256_sqr_mont
+	 ld	$a1,$M+8($sp)
+	 ld	$a2,$M+16($sp)
+	 ld	$a3,$M+24($sp)
+	addi	$rp,$sp,$tmp0
+	bl	__ecp_nistz256_add	# p256_mul_by_2(tmp0, S);
+
+	addi	$rp,$rp_real,0
+	bl	__ecp_nistz256_sqr_mont	# p256_sqr_mont(res_x, M);
+
+	addi	$bp,$sp,$tmp0
+	bl	__ecp_nistz256_sub_from	# p256_sub(res_x, res_x, tmp0);
+
+	addi	$bp,$sp,$S
+	addi	$rp,$sp,$S
+	bl	__ecp_nistz256_sub_morf	# p256_sub(S, S, res_x);
+
+	ld	$bi,$M($sp)
+	mr	$a0,$acc0		# copy S
+	mr	$a1,$acc1
+	mr	$a2,$acc2
+	mr	$a3,$acc3
+	addi	$bp,$sp,$M
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(S, S, M);
+
+	addi	$bp,$rp_real,32
+	addi	$rp,$rp_real,32
+	bl	__ecp_nistz256_sub_from	# p256_sub(res_y, S, res_y);
+
+	mtlr	r0
+	ld	r20,$FRAME-8*12($sp)
+	ld	r21,$FRAME-8*11($sp)
+	ld	r22,$FRAME-8*10($sp)
+	ld	r23,$FRAME-8*9($sp)
+	ld	r24,$FRAME-8*8($sp)
+	ld	r25,$FRAME-8*7($sp)
+	ld	r26,$FRAME-8*6($sp)
+	ld	r27,$FRAME-8*5($sp)
+	ld	r28,$FRAME-8*4($sp)
+	ld	r29,$FRAME-8*3($sp)
+	ld	r30,$FRAME-8*2($sp)
+	ld	r31,$FRAME-8*1($sp)
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,12,2,0
+	.long	0
+.size	ecp_nistz256_point_double,.-ecp_nistz256_point_double
+___
+}
+
+########################################################################
+# void ecp_nistz256_point_add(P256_POINT *out,const P256_POINT *in1,
+#			      const P256_POINT *in2);
+if (1) {
+my $FRAME = 64 + 32*12 + 16*8;
+my ($res_x,$res_y,$res_z,
+    $H,$Hsqr,$R,$Rsqr,$Hcub,
+    $U1,$U2,$S1,$S2)=map(64+32*$_,(0..11));
+my ($Z1sqr, $Z2sqr) = ($Hsqr, $Rsqr);
+# above map() describes stack layout with 12 temporary
+# 256-bit vectors on top.
+my ($rp_real,$ap_real,$bp_real,$in1infty,$in2infty,$temp)=map("r$_",(16..21));
+
+$code.=<<___;
+.globl	ecp_nistz256_point_add
+.align	5
+ecp_nistz256_point_add:
+	stdu	$sp,-$FRAME($sp)
+	mflr	r0
+	std	r16,$FRAME-8*16($sp)
+	std	r17,$FRAME-8*15($sp)
+	std	r18,$FRAME-8*14($sp)
+	std	r19,$FRAME-8*13($sp)
+	std	r20,$FRAME-8*12($sp)
+	std	r21,$FRAME-8*11($sp)
+	std	r22,$FRAME-8*10($sp)
+	std	r23,$FRAME-8*9($sp)
+	std	r24,$FRAME-8*8($sp)
+	std	r25,$FRAME-8*7($sp)
+	std	r26,$FRAME-8*6($sp)
+	std	r27,$FRAME-8*5($sp)
+	std	r28,$FRAME-8*4($sp)
+	std	r29,$FRAME-8*3($sp)
+	std	r30,$FRAME-8*2($sp)
+	std	r31,$FRAME-8*1($sp)
+
+	li	$poly1,-1
+	srdi	$poly1,$poly1,32	# 0x00000000ffffffff
+	li	$poly3,1
+	orc	$poly3,$poly3,$poly1	# 0xffffffff00000001
+
+	ld	$a0,64($bp)		# in2_z
+	ld	$a1,72($bp)
+	ld	$a2,80($bp)
+	ld	$a3,88($bp)
+	 mr	$rp_real,$rp
+	 mr	$ap_real,$ap
+	 mr	$bp_real,$bp
+	or	$t0,$a0,$a1
+	or	$t2,$a2,$a3
+	or	$in2infty,$t0,$t2
+	neg	$t0,$in2infty
+	or	$in2infty,$in2infty,$t0
+	sradi	$in2infty,$in2infty,63	# !in2infty
+	addi	$rp,$sp,$Z2sqr
+	bl	__ecp_nistz256_sqr_mont	# p256_sqr_mont(Z2sqr, in2_z);
+
+	ld	$a0,64($ap_real)	# in1_z
+	ld	$a1,72($ap_real)
+	ld	$a2,80($ap_real)
+	ld	$a3,88($ap_real)
+	or	$t0,$a0,$a1
+	or	$t2,$a2,$a3
+	or	$in1infty,$t0,$t2
+	neg	$t0,$in1infty
+	or	$in1infty,$in1infty,$t0
+	sradi	$in1infty,$in1infty,63	# !in1infty
+	addi	$rp,$sp,$Z1sqr
+	bl	__ecp_nistz256_sqr_mont	# p256_sqr_mont(Z1sqr, in1_z);
+
+	ld	$bi,64($bp_real)
+	ld	$a0,$Z2sqr+0($sp)
+	ld	$a1,$Z2sqr+8($sp)
+	ld	$a2,$Z2sqr+16($sp)
+	ld	$a3,$Z2sqr+24($sp)
+	addi	$bp,$bp_real,64
+	addi	$rp,$sp,$S1
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(S1, Z2sqr, in2_z);
+
+	ld	$bi,64($ap_real)
+	ld	$a0,$Z1sqr+0($sp)
+	ld	$a1,$Z1sqr+8($sp)
+	ld	$a2,$Z1sqr+16($sp)
+	ld	$a3,$Z1sqr+24($sp)
+	addi	$bp,$ap_real,64
+	addi	$rp,$sp,$S2
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(S2, Z1sqr, in1_z);
+
+	ld	$bi,32($ap_real)
+	ld	$a0,$S1+0($sp)
+	ld	$a1,$S1+8($sp)
+	ld	$a2,$S1+16($sp)
+	ld	$a3,$S1+24($sp)
+	addi	$bp,$ap_real,32
+	addi	$rp,$sp,$S1
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(S1, S1, in1_y);
+
+	ld	$bi,32($bp_real)
+	ld	$a0,$S2+0($sp)
+	ld	$a1,$S2+8($sp)
+	ld	$a2,$S2+16($sp)
+	ld	$a3,$S2+24($sp)
+	addi	$bp,$bp_real,32
+	addi	$rp,$sp,$S2
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(S2, S2, in2_y);
+
+	addi	$bp,$sp,$S1
+	 ld	$bi,$Z2sqr($sp)		# forward load for p256_mul_mont
+	 ld	$a0,0($ap_real)
+	 ld	$a1,8($ap_real)
+	 ld	$a2,16($ap_real)
+	 ld	$a3,24($ap_real)
+	addi	$rp,$sp,$R
+	bl	__ecp_nistz256_sub_from	# p256_sub(R, S2, S1);
+
+	or	$acc0,$acc0,$acc1	# see if result is zero
+	or	$acc2,$acc2,$acc3
+	or	$temp,$acc0,$acc2
+
+	addi	$bp,$sp,$Z2sqr
+	addi	$rp,$sp,$U1
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(U1, in1_x, Z2sqr);
+
+	ld	$bi,$Z1sqr($sp)
+	ld	$a0,0($bp_real)
+	ld	$a1,8($bp_real)
+	ld	$a2,16($bp_real)
+	ld	$a3,24($bp_real)
+	addi	$bp,$sp,$Z1sqr
+	addi	$rp,$sp,$U2
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(U2, in2_x, Z1sqr);
+
+	addi	$bp,$sp,$U1
+	 ld	$a0,$R+0($sp)		# forward load for p256_sqr_mont
+	 ld	$a1,$R+8($sp)
+	 ld	$a2,$R+16($sp)
+	 ld	$a3,$R+24($sp)
+	addi	$rp,$sp,$H
+	bl	__ecp_nistz256_sub_from	# p256_sub(H, U2, U1);
+
+	or	$acc0,$acc0,$acc1	# see if result is zero
+	or	$acc2,$acc2,$acc3
+	or.	$acc0,$acc0,$acc2
+	bne	.Ladd_proceed		# is_equal(U1,U2)?
+
+	and.	$t0,$in1infty,$in2infty
+	beq	.Ladd_proceed		# (in1infty || in2infty)?
+
+	cmpldi	$temp,0
+	beq	.Ladd_double		# is_equal(S1,S2)?
+
+	xor	$a0,$a0,$a0
+	std	$a0,0($rp_real)
+	std	$a0,8($rp_real)
+	std	$a0,16($rp_real)
+	std	$a0,24($rp_real)
+	std	$a0,32($rp_real)
+	std	$a0,40($rp_real)
+	std	$a0,48($rp_real)
+	std	$a0,56($rp_real)
+	std	$a0,64($rp_real)
+	std	$a0,72($rp_real)
+	std	$a0,80($rp_real)
+	std	$a0,88($rp_real)
+	b	.Ladd_done
+
+.align	4
+.Ladd_double:
+	ld	$bp,0($sp)		# back-link
+	mr	$ap,$ap_real
+	mr	$rp,$rp_real
+	ld	r16,$FRAME-8*16($sp)
+	ld	r17,$FRAME-8*15($sp)
+	ld	r18,$FRAME-8*14($sp)
+	ld	r19,$FRAME-8*13($sp)
+	stdu	$bp,$FRAME-288($sp)	# difference in stack frame sizes
+	b	.Ldouble_shortcut
+
+.align	4
+.Ladd_proceed:
+	addi	$rp,$sp,$Rsqr
+	bl	__ecp_nistz256_sqr_mont	# p256_sqr_mont(Rsqr, R);
+
+	ld	$bi,64($ap_real)
+	ld	$a0,$H+0($sp)
+	ld	$a1,$H+8($sp)
+	ld	$a2,$H+16($sp)
+	ld	$a3,$H+24($sp)
+	addi	$bp,$ap_real,64
+	addi	$rp,$sp,$res_z
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(res_z, H, in1_z);
+
+	ld	$a0,$H+0($sp)
+	ld	$a1,$H+8($sp)
+	ld	$a2,$H+16($sp)
+	ld	$a3,$H+24($sp)
+	addi	$rp,$sp,$Hsqr
+	bl	__ecp_nistz256_sqr_mont	# p256_sqr_mont(Hsqr, H);
+
+	ld	$bi,64($bp_real)
+	ld	$a0,$res_z+0($sp)
+	ld	$a1,$res_z+8($sp)
+	ld	$a2,$res_z+16($sp)
+	ld	$a3,$res_z+24($sp)
+	addi	$bp,$bp_real,64
+	addi	$rp,$sp,$res_z
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(res_z, res_z, in2_z);
+
+	ld	$bi,$H($sp)
+	ld	$a0,$Hsqr+0($sp)
+	ld	$a1,$Hsqr+8($sp)
+	ld	$a2,$Hsqr+16($sp)
+	ld	$a3,$Hsqr+24($sp)
+	addi	$bp,$sp,$H
+	addi	$rp,$sp,$Hcub
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(Hcub, Hsqr, H);
+
+	ld	$bi,$Hsqr($sp)
+	ld	$a0,$U1+0($sp)
+	ld	$a1,$U1+8($sp)
+	ld	$a2,$U1+16($sp)
+	ld	$a3,$U1+24($sp)
+	addi	$bp,$sp,$Hsqr
+	addi	$rp,$sp,$U2
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(U2, U1, Hsqr);
+
+	mr	$t0,$acc0
+	mr	$t1,$acc1
+	mr	$t2,$acc2
+	mr	$t3,$acc3
+	addi	$rp,$sp,$Hsqr
+	bl	__ecp_nistz256_add	# p256_mul_by_2(Hsqr, U2);
+
+	addi	$bp,$sp,$Rsqr
+	addi	$rp,$sp,$res_x
+	bl	__ecp_nistz256_sub_morf	# p256_sub(res_x, Rsqr, Hsqr);
+
+	addi	$bp,$sp,$Hcub
+	bl	__ecp_nistz256_sub_from	# p256_sub(res_x, res_x, Hcub);
+
+	addi	$bp,$sp,$U2
+	 ld	$bi,$Hcub($sp)		# forward load for p256_mul_mont
+	 ld	$a0,$S1+0($sp)
+	 ld	$a1,$S1+8($sp)
+	 ld	$a2,$S1+16($sp)
+	 ld	$a3,$S1+24($sp)
+	addi	$rp,$sp,$res_y
+	bl	__ecp_nistz256_sub_morf	# p256_sub(res_y, U2, res_x);
+
+	addi	$bp,$sp,$Hcub
+	addi	$rp,$sp,$S2
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(S2, S1, Hcub);
+
+	ld	$bi,$R($sp)
+	ld	$a0,$res_y+0($sp)
+	ld	$a1,$res_y+8($sp)
+	ld	$a2,$res_y+16($sp)
+	ld	$a3,$res_y+24($sp)
+	addi	$bp,$sp,$R
+	addi	$rp,$sp,$res_y
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(res_y, res_y, R);
+
+	addi	$bp,$sp,$S2
+	bl	__ecp_nistz256_sub_from	# p256_sub(res_y, res_y, S2);
+
+	ld	$t0,0($bp_real)		# in2
+	ld	$t1,8($bp_real)
+	ld	$t2,16($bp_real)
+	ld	$t3,24($bp_real)
+	ld	$a0,$res_x+0($sp)	# res
+	ld	$a1,$res_x+8($sp)
+	ld	$a2,$res_x+16($sp)
+	ld	$a3,$res_x+24($sp)
+___
+for($i=0;$i<64;$i+=32) {		# conditional moves
+$code.=<<___;
+	ld	$acc0,$i+0($ap_real)	# in1
+	ld	$acc1,$i+8($ap_real)
+	ld	$acc2,$i+16($ap_real)
+	ld	$acc3,$i+24($ap_real)
+	andc	$t0,$t0,$in1infty
+	andc	$t1,$t1,$in1infty
+	andc	$t2,$t2,$in1infty
+	andc	$t3,$t3,$in1infty
+	and	$a0,$a0,$in1infty
+	and	$a1,$a1,$in1infty
+	and	$a2,$a2,$in1infty
+	and	$a3,$a3,$in1infty
+	or	$t0,$t0,$a0
+	or	$t1,$t1,$a1
+	or	$t2,$t2,$a2
+	or	$t3,$t3,$a3
+	andc	$acc0,$acc0,$in2infty
+	andc	$acc1,$acc1,$in2infty
+	andc	$acc2,$acc2,$in2infty
+	andc	$acc3,$acc3,$in2infty
+	and	$t0,$t0,$in2infty
+	and	$t1,$t1,$in2infty
+	and	$t2,$t2,$in2infty
+	and	$t3,$t3,$in2infty
+	or	$acc0,$acc0,$t0
+	or	$acc1,$acc1,$t1
+	or	$acc2,$acc2,$t2
+	or	$acc3,$acc3,$t3
+
+	ld	$t0,$i+32($bp_real)	# in2
+	ld	$t1,$i+40($bp_real)
+	ld	$t2,$i+48($bp_real)
+	ld	$t3,$i+56($bp_real)
+	ld	$a0,$res_x+$i+32($sp)
+	ld	$a1,$res_x+$i+40($sp)
+	ld	$a2,$res_x+$i+48($sp)
+	ld	$a3,$res_x+$i+56($sp)
+	std	$acc0,$i+0($rp_real)
+	std	$acc1,$i+8($rp_real)
+	std	$acc2,$i+16($rp_real)
+	std	$acc3,$i+24($rp_real)
+___
+}
+$code.=<<___;
+	ld	$acc0,$i+0($ap_real)	# in1
+	ld	$acc1,$i+8($ap_real)
+	ld	$acc2,$i+16($ap_real)
+	ld	$acc3,$i+24($ap_real)
+	andc	$t0,$t0,$in1infty
+	andc	$t1,$t1,$in1infty
+	andc	$t2,$t2,$in1infty
+	andc	$t3,$t3,$in1infty
+	and	$a0,$a0,$in1infty
+	and	$a1,$a1,$in1infty
+	and	$a2,$a2,$in1infty
+	and	$a3,$a3,$in1infty
+	or	$t0,$t0,$a0
+	or	$t1,$t1,$a1
+	or	$t2,$t2,$a2
+	or	$t3,$t3,$a3
+	andc	$acc0,$acc0,$in2infty
+	andc	$acc1,$acc1,$in2infty
+	andc	$acc2,$acc2,$in2infty
+	andc	$acc3,$acc3,$in2infty
+	and	$t0,$t0,$in2infty
+	and	$t1,$t1,$in2infty
+	and	$t2,$t2,$in2infty
+	and	$t3,$t3,$in2infty
+	or	$acc0,$acc0,$t0
+	or	$acc1,$acc1,$t1
+	or	$acc2,$acc2,$t2
+	or	$acc3,$acc3,$t3
+	std	$acc0,$i+0($rp_real)
+	std	$acc1,$i+8($rp_real)
+	std	$acc2,$i+16($rp_real)
+	std	$acc3,$i+24($rp_real)
+
+.Ladd_done:
+	mtlr	r0
+	ld	r16,$FRAME-8*16($sp)
+	ld	r17,$FRAME-8*15($sp)
+	ld	r18,$FRAME-8*14($sp)
+	ld	r19,$FRAME-8*13($sp)
+	ld	r20,$FRAME-8*12($sp)
+	ld	r21,$FRAME-8*11($sp)
+	ld	r22,$FRAME-8*10($sp)
+	ld	r23,$FRAME-8*9($sp)
+	ld	r24,$FRAME-8*8($sp)
+	ld	r25,$FRAME-8*7($sp)
+	ld	r26,$FRAME-8*6($sp)
+	ld	r27,$FRAME-8*5($sp)
+	ld	r28,$FRAME-8*4($sp)
+	ld	r29,$FRAME-8*3($sp)
+	ld	r30,$FRAME-8*2($sp)
+	ld	r31,$FRAME-8*1($sp)
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,16,3,0
+	.long	0
+.size	ecp_nistz256_point_add,.-ecp_nistz256_point_add
+___
+}
+
+########################################################################
+# void ecp_nistz256_point_add_affine(P256_POINT *out,const P256_POINT *in1,
+#				     const P256_POINT_AFFINE *in2);
+if (1) {
+my $FRAME = 64 + 32*10 + 16*8;
+my ($res_x,$res_y,$res_z,
+    $U2,$S2,$H,$R,$Hsqr,$Hcub,$Rsqr)=map(64+32*$_,(0..9));
+my $Z1sqr = $S2;
+# above map() describes stack layout with 10 temporary
+# 256-bit vectors on top.
+my ($rp_real,$ap_real,$bp_real,$in1infty,$in2infty,$temp)=map("r$_",(16..21));
+
+$code.=<<___;
+.globl	ecp_nistz256_point_add_affine
+.align	5
+ecp_nistz256_point_add_affine:
+	stdu	$sp,-$FRAME($sp)
+	mflr	r0
+	std	r16,$FRAME-8*16($sp)
+	std	r17,$FRAME-8*15($sp)
+	std	r18,$FRAME-8*14($sp)
+	std	r19,$FRAME-8*13($sp)
+	std	r20,$FRAME-8*12($sp)
+	std	r21,$FRAME-8*11($sp)
+	std	r22,$FRAME-8*10($sp)
+	std	r23,$FRAME-8*9($sp)
+	std	r24,$FRAME-8*8($sp)
+	std	r25,$FRAME-8*7($sp)
+	std	r26,$FRAME-8*6($sp)
+	std	r27,$FRAME-8*5($sp)
+	std	r28,$FRAME-8*4($sp)
+	std	r29,$FRAME-8*3($sp)
+	std	r30,$FRAME-8*2($sp)
+	std	r31,$FRAME-8*1($sp)
+
+	li	$poly1,-1
+	srdi	$poly1,$poly1,32	# 0x00000000ffffffff
+	li	$poly3,1
+	orc	$poly3,$poly3,$poly1	# 0xffffffff00000001
+
+	mr	$rp_real,$rp
+	mr	$ap_real,$ap
+	mr	$bp_real,$bp
+
+	ld	$a0,64($ap)		# in1_z
+	ld	$a1,72($ap)
+	ld	$a2,80($ap)
+	ld	$a3,88($ap)
+	or	$t0,$a0,$a1
+	or	$t2,$a2,$a3
+	or	$in1infty,$t0,$t2
+	neg	$t0,$in1infty
+	or	$in1infty,$in1infty,$t0
+	sradi	$in1infty,$in1infty,63	# !in1infty
+
+	ld	$acc0,0($bp)		# in2_x
+	ld	$acc1,8($bp)
+	ld	$acc2,16($bp)
+	ld	$acc3,24($bp)
+	ld	$t0,32($bp)		# in2_y
+	ld	$t1,40($bp)
+	ld	$t2,48($bp)
+	ld	$t3,56($bp)
+	or	$acc0,$acc0,$acc1
+	or	$acc2,$acc2,$acc3
+	or	$acc0,$acc0,$acc2
+	or	$t0,$t0,$t1
+	or	$t2,$t2,$t3
+	or	$t0,$t0,$t2
+	or	$in2infty,$acc0,$t0
+	neg	$t0,$in2infty
+	or	$in2infty,$in2infty,$t0
+	sradi	$in2infty,$in2infty,63	# !in2infty
+
+	addi	$rp,$sp,$Z1sqr
+	bl	__ecp_nistz256_sqr_mont	# p256_sqr_mont(Z1sqr, in1_z);
+
+	mr	$a0,$acc0
+	mr	$a1,$acc1
+	mr	$a2,$acc2
+	mr	$a3,$acc3
+	ld	$bi,0($bp_real)
+	addi	$bp,$bp_real,0
+	addi	$rp,$sp,$U2
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(U2, Z1sqr, in2_x);
+
+	addi	$bp,$ap_real,0
+	 ld	$bi,64($ap_real)	# forward load for p256_mul_mont
+	 ld	$a0,$Z1sqr+0($sp)
+	 ld	$a1,$Z1sqr+8($sp)
+	 ld	$a2,$Z1sqr+16($sp)
+	 ld	$a3,$Z1sqr+24($sp)
+	addi	$rp,$sp,$H
+	bl	__ecp_nistz256_sub_from	# p256_sub(H, U2, in1_x);
+
+	addi	$bp,$ap_real,64
+	addi	$rp,$sp,$S2
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(S2, Z1sqr, in1_z);
+
+	ld	$bi,64($ap_real)
+	ld	$a0,$H+0($sp)
+	ld	$a1,$H+8($sp)
+	ld	$a2,$H+16($sp)
+	ld	$a3,$H+24($sp)
+	addi	$bp,$ap_real,64
+	addi	$rp,$sp,$res_z
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(res_z, H, in1_z);
+
+	ld	$bi,32($bp_real)
+	ld	$a0,$S2+0($sp)
+	ld	$a1,$S2+8($sp)
+	ld	$a2,$S2+16($sp)
+	ld	$a3,$S2+24($sp)
+	addi	$bp,$bp_real,32
+	addi	$rp,$sp,$S2
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(S2, S2, in2_y);
+
+	addi	$bp,$ap_real,32
+	 ld	$a0,$H+0($sp)		# forward load for p256_sqr_mont
+	 ld	$a1,$H+8($sp)
+	 ld	$a2,$H+16($sp)
+	 ld	$a3,$H+24($sp)
+	addi	$rp,$sp,$R
+	bl	__ecp_nistz256_sub_from	# p256_sub(R, S2, in1_y);
+
+	addi	$rp,$sp,$Hsqr
+	bl	__ecp_nistz256_sqr_mont	# p256_sqr_mont(Hsqr, H);
+
+	ld	$a0,$R+0($sp)
+	ld	$a1,$R+8($sp)
+	ld	$a2,$R+16($sp)
+	ld	$a3,$R+24($sp)
+	addi	$rp,$sp,$Rsqr
+	bl	__ecp_nistz256_sqr_mont	# p256_sqr_mont(Rsqr, R);
+
+	ld	$bi,$H($sp)
+	ld	$a0,$Hsqr+0($sp)
+	ld	$a1,$Hsqr+8($sp)
+	ld	$a2,$Hsqr+16($sp)
+	ld	$a3,$Hsqr+24($sp)
+	addi	$bp,$sp,$H
+	addi	$rp,$sp,$Hcub
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(Hcub, Hsqr, H);
+
+	ld	$bi,0($ap_real)
+	ld	$a0,$Hsqr+0($sp)
+	ld	$a1,$Hsqr+8($sp)
+	ld	$a2,$Hsqr+16($sp)
+	ld	$a3,$Hsqr+24($sp)
+	addi	$bp,$ap_real,0
+	addi	$rp,$sp,$U2
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(U2, in1_x, Hsqr);
+
+	mr	$t0,$acc0
+	mr	$t1,$acc1
+	mr	$t2,$acc2
+	mr	$t3,$acc3
+	addi	$rp,$sp,$Hsqr
+	bl	__ecp_nistz256_add	# p256_mul_by_2(Hsqr, U2);
+
+	addi	$bp,$sp,$Rsqr
+	addi	$rp,$sp,$res_x
+	bl	__ecp_nistz256_sub_morf	# p256_sub(res_x, Rsqr, Hsqr);
+
+	addi	$bp,$sp,$Hcub
+	bl	__ecp_nistz256_sub_from	#  p256_sub(res_x, res_x, Hcub);
+
+	addi	$bp,$sp,$U2
+	 ld	$bi,32($ap_real)	# forward load for p256_mul_mont
+	 ld	$a0,$Hcub+0($sp)
+	 ld	$a1,$Hcub+8($sp)
+	 ld	$a2,$Hcub+16($sp)
+	 ld	$a3,$Hcub+24($sp)
+	addi	$rp,$sp,$res_y
+	bl	__ecp_nistz256_sub_morf	# p256_sub(res_y, U2, res_x);
+
+	addi	$bp,$ap_real,32
+	addi	$rp,$sp,$S2
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(S2, in1_y, Hcub);
+
+	ld	$bi,$R($sp)
+	ld	$a0,$res_y+0($sp)
+	ld	$a1,$res_y+8($sp)
+	ld	$a2,$res_y+16($sp)
+	ld	$a3,$res_y+24($sp)
+	addi	$bp,$sp,$R
+	addi	$rp,$sp,$res_y
+	bl	__ecp_nistz256_mul_mont	# p256_mul_mont(res_y, res_y, R);
+
+	addi	$bp,$sp,$S2
+	bl	__ecp_nistz256_sub_from	# p256_sub(res_y, res_y, S2);
+
+	ld	$t0,0($bp_real)		# in2
+	ld	$t1,8($bp_real)
+	ld	$t2,16($bp_real)
+	ld	$t3,24($bp_real)
+	ld	$a0,$res_x+0($sp)	# res
+	ld	$a1,$res_x+8($sp)
+	ld	$a2,$res_x+16($sp)
+	ld	$a3,$res_x+24($sp)
+___
+for($i=0;$i<64;$i+=32) {		# conditional moves
+$code.=<<___;
+	ld	$acc0,$i+0($ap_real)	# in1
+	ld	$acc1,$i+8($ap_real)
+	ld	$acc2,$i+16($ap_real)
+	ld	$acc3,$i+24($ap_real)
+	andc	$t0,$t0,$in1infty
+	andc	$t1,$t1,$in1infty
+	andc	$t2,$t2,$in1infty
+	andc	$t3,$t3,$in1infty
+	and	$a0,$a0,$in1infty
+	and	$a1,$a1,$in1infty
+	and	$a2,$a2,$in1infty
+	and	$a3,$a3,$in1infty
+	or	$t0,$t0,$a0
+	or	$t1,$t1,$a1
+	or	$t2,$t2,$a2
+	or	$t3,$t3,$a3
+	andc	$acc0,$acc0,$in2infty
+	andc	$acc1,$acc1,$in2infty
+	andc	$acc2,$acc2,$in2infty
+	andc	$acc3,$acc3,$in2infty
+	and	$t0,$t0,$in2infty
+	and	$t1,$t1,$in2infty
+	and	$t2,$t2,$in2infty
+	and	$t3,$t3,$in2infty
+	or	$acc0,$acc0,$t0
+	or	$acc1,$acc1,$t1
+	or	$acc2,$acc2,$t2
+	or	$acc3,$acc3,$t3
+___
+$code.=<<___	if ($i==0);
+	ld	$t0,32($bp_real)	# in2
+	ld	$t1,40($bp_real)
+	ld	$t2,48($bp_real)
+	ld	$t3,56($bp_real)
+___
+$code.=<<___	if ($i==32);
+	li	$t0,1			# Lone_mont
+	not	$t1,$poly1
+	li	$t2,-1
+	not	$t3,$poly3
+___
+$code.=<<___;
+	ld	$a0,$res_x+$i+32($sp)
+	ld	$a1,$res_x+$i+40($sp)
+	ld	$a2,$res_x+$i+48($sp)
+	ld	$a3,$res_x+$i+56($sp)
+	std	$acc0,$i+0($rp_real)
+	std	$acc1,$i+8($rp_real)
+	std	$acc2,$i+16($rp_real)
+	std	$acc3,$i+24($rp_real)
+___
+}
+$code.=<<___;
+	ld	$acc0,$i+0($ap_real)	# in1
+	ld	$acc1,$i+8($ap_real)
+	ld	$acc2,$i+16($ap_real)
+	ld	$acc3,$i+24($ap_real)
+	andc	$t0,$t0,$in1infty
+	andc	$t1,$t1,$in1infty
+	andc	$t2,$t2,$in1infty
+	andc	$t3,$t3,$in1infty
+	and	$a0,$a0,$in1infty
+	and	$a1,$a1,$in1infty
+	and	$a2,$a2,$in1infty
+	and	$a3,$a3,$in1infty
+	or	$t0,$t0,$a0
+	or	$t1,$t1,$a1
+	or	$t2,$t2,$a2
+	or	$t3,$t3,$a3
+	andc	$acc0,$acc0,$in2infty
+	andc	$acc1,$acc1,$in2infty
+	andc	$acc2,$acc2,$in2infty
+	andc	$acc3,$acc3,$in2infty
+	and	$t0,$t0,$in2infty
+	and	$t1,$t1,$in2infty
+	and	$t2,$t2,$in2infty
+	and	$t3,$t3,$in2infty
+	or	$acc0,$acc0,$t0
+	or	$acc1,$acc1,$t1
+	or	$acc2,$acc2,$t2
+	or	$acc3,$acc3,$t3
+	std	$acc0,$i+0($rp_real)
+	std	$acc1,$i+8($rp_real)
+	std	$acc2,$i+16($rp_real)
+	std	$acc3,$i+24($rp_real)
+
+	mtlr	r0
+	ld	r16,$FRAME-8*16($sp)
+	ld	r17,$FRAME-8*15($sp)
+	ld	r18,$FRAME-8*14($sp)
+	ld	r19,$FRAME-8*13($sp)
+	ld	r20,$FRAME-8*12($sp)
+	ld	r21,$FRAME-8*11($sp)
+	ld	r22,$FRAME-8*10($sp)
+	ld	r23,$FRAME-8*9($sp)
+	ld	r24,$FRAME-8*8($sp)
+	ld	r25,$FRAME-8*7($sp)
+	ld	r26,$FRAME-8*6($sp)
+	ld	r27,$FRAME-8*5($sp)
+	ld	r28,$FRAME-8*4($sp)
+	ld	r29,$FRAME-8*3($sp)
+	ld	r30,$FRAME-8*2($sp)
+	ld	r31,$FRAME-8*1($sp)
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,16,3,0
+	.long	0
+.size	ecp_nistz256_point_add_affine,.-ecp_nistz256_point_add_affine
+___
+}
+if (1) {
+my ($ordk,$ord0,$ord1,$t4) = map("r$_",(18..21));
+my ($ord2,$ord3,$zr) = ($poly1,$poly3,"r0");
+
+$code.=<<___;
+########################################################################
+# void ecp_nistz256_ord_mul_mont(uint64_t res[4], uint64_t a[4],
+#                                uint64_t b[4]);
+.globl	ecp_nistz256_ord_mul_mont
+.align	5
+ecp_nistz256_ord_mul_mont:
+	stdu	$sp,-160($sp)
+	std	r18,48($sp)
+	std	r19,56($sp)
+	std	r20,64($sp)
+	std	r21,72($sp)
+	std	r22,80($sp)
+	std	r23,88($sp)
+	std	r24,96($sp)
+	std	r25,104($sp)
+	std	r26,112($sp)
+	std	r27,120($sp)
+	std	r28,128($sp)
+	std	r29,136($sp)
+	std	r30,144($sp)
+	std	r31,152($sp)
+
+	ld	$a0,0($ap)
+	ld	$bi,0($bp)
+	ld	$a1,8($ap)
+	ld	$a2,16($ap)
+	ld	$a3,24($ap)
+
+	lis	$ordk,0xccd1
+	lis	$ord0,0xf3b9
+	lis	$ord1,0xbce6
+	ori	$ordk,$ordk,0xc8aa
+	ori	$ord0,$ord0,0xcac2
+	ori	$ord1,$ord1,0xfaad
+	sldi	$ordk,$ordk,32
+	sldi	$ord0,$ord0,32
+	sldi	$ord1,$ord1,32
+	oris	$ordk,$ordk,0xee00
+	oris	$ord0,$ord0,0xfc63
+	oris	$ord1,$ord1,0xa717
+	ori	$ordk,$ordk,0xbc4f	# 0xccd1c8aaee00bc4f
+	ori	$ord0,$ord0,0x2551	# 0xf3b9cac2fc632551
+	ori	$ord1,$ord1,0x9e84	# 0xbce6faada7179e84
+	li	$ord2,-1		# 0xffffffffffffffff
+	sldi	$ord3,$ord2,32		# 0xffffffff00000000
+	li	$zr,0
+
+	mulld	$acc0,$a0,$bi		# a[0]*b[0]
+	mulhdu	$t0,$a0,$bi
+
+	mulld	$acc1,$a1,$bi		# a[1]*b[0]
+	mulhdu	$t1,$a1,$bi
+
+	mulld	$acc2,$a2,$bi		# a[2]*b[0]
+	mulhdu	$t2,$a2,$bi
+
+	mulld	$acc3,$a3,$bi		# a[3]*b[0]
+	mulhdu	$acc4,$a3,$bi
+
+	mulld	$t4,$acc0,$ordk
+
+	addc	$acc1,$acc1,$t0		# accumulate high parts of multiplication
+	adde	$acc2,$acc2,$t1
+	adde	$acc3,$acc3,$t2
+	addze	$acc4,$acc4
+	li	$acc5,0
+___
+for ($i=1;$i<4;$i++) {
+	################################################################
+	#            ffff0000.ffffffff.yyyyyyyy.zzzzzzzz
+	# *                                     abcdefgh
+	# + xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx
+	#
+	# Now observing that ff..ff*x = (2^n-1)*x = 2^n*x-x, we
+	# rewrite above as:
+	#
+	#   xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx
+	# - 0000abcd.efgh0000.abcdefgh.00000000.00000000
+	# + abcdefgh.abcdefgh.yzayzbyz.cyzdyzey.zfyzgyzh
+$code.=<<___;
+	ld	$bi,8*$i($bp)		# b[i]
+
+	sldi	$t0,$t4,32
+	subfc	$acc2,$t4,$acc2
+	srdi	$t1,$t4,32
+	subfe	$acc3,$t0,$acc3
+	subfe	$acc4,$t1,$acc4
+	subfe	$acc5,$zr,$acc5
+
+	addic	$t0,$acc0,-1		# discarded
+	mulhdu	$t1,$ord0,$t4
+	mulld	$t2,$ord1,$t4
+	mulhdu	$t3,$ord1,$t4
+
+	adde	$t2,$t2,$t1
+	 mulld	$t0,$a0,$bi
+	addze	$t3,$t3
+	 mulld	$t1,$a1,$bi
+
+	addc	$acc0,$acc1,$t2
+	 mulld	$t2,$a2,$bi
+	adde	$acc1,$acc2,$t3
+	 mulld	$t3,$a3,$bi
+	adde	$acc2,$acc3,$t4
+	adde	$acc3,$acc4,$t4
+	addze	$acc4,$acc5
+
+	addc	$acc0,$acc0,$t0		# accumulate low parts
+	mulhdu	$t0,$a0,$bi
+	adde	$acc1,$acc1,$t1
+	mulhdu	$t1,$a1,$bi
+	adde	$acc2,$acc2,$t2
+	mulhdu	$t2,$a2,$bi
+	adde	$acc3,$acc3,$t3
+	mulhdu	$t3,$a3,$bi
+	addze	$acc4,$acc4
+	mulld	$t4,$acc0,$ordk
+	addc	$acc1,$acc1,$t0		# accumulate high parts
+	adde	$acc2,$acc2,$t1
+	adde	$acc3,$acc3,$t2
+	adde	$acc4,$acc4,$t3
+	addze	$acc5,$zr
+___
+}
+$code.=<<___;
+	sldi	$t0,$t4,32		# last reduction
+	subfc	$acc2,$t4,$acc2
+	srdi	$t1,$t4,32
+	subfe	$acc3,$t0,$acc3
+	subfe	$acc4,$t1,$acc4
+	subfe	$acc5,$zr,$acc5
+
+	addic	$t0,$acc0,-1		# discarded
+	mulhdu	$t1,$ord0,$t4
+	mulld	$t2,$ord1,$t4
+	mulhdu	$t3,$ord1,$t4
+
+	adde	$t2,$t2,$t1
+	addze	$t3,$t3
+
+	addc	$acc0,$acc1,$t2
+	adde	$acc1,$acc2,$t3
+	adde	$acc2,$acc3,$t4
+	adde	$acc3,$acc4,$t4
+	addze	$acc4,$acc5
+
+	subfc	$acc0,$ord0,$acc0	# ret -= modulus
+	subfe	$acc1,$ord1,$acc1
+	subfe	$acc2,$ord2,$acc2
+	subfe	$acc3,$ord3,$acc3
+	subfe	$acc4,$zr,$acc4
+
+	and	$t0,$ord0,$acc4
+	and	$t1,$ord1,$acc4
+	addc	$acc0,$acc0,$t0		# ret += modulus if borrow
+	and	$t3,$ord3,$acc4
+	adde	$acc1,$acc1,$t1
+	adde	$acc2,$acc2,$acc4
+	adde	$acc3,$acc3,$t3
+
+	std	$acc0,0($rp)
+	std	$acc1,8($rp)
+	std	$acc2,16($rp)
+	std	$acc3,24($rp)
+
+	ld	r18,48($sp)
+	ld	r19,56($sp)
+	ld	r20,64($sp)
+	ld	r21,72($sp)
+	ld	r22,80($sp)
+	ld	r23,88($sp)
+	ld	r24,96($sp)
+	ld	r25,104($sp)
+	ld	r26,112($sp)
+	ld	r27,120($sp)
+	ld	r28,128($sp)
+	ld	r29,136($sp)
+	ld	r30,144($sp)
+	ld	r31,152($sp)
+	addi	$sp,$sp,160
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,14,3,0
+	.long	0
+.size	ecp_nistz256_ord_mul_mont,.-ecp_nistz256_ord_mul_mont
+
+################################################################################
+# void ecp_nistz256_ord_sqr_mont(uint64_t res[4], uint64_t a[4],
+#                                int rep);
+.globl	ecp_nistz256_ord_sqr_mont
+.align	5
+ecp_nistz256_ord_sqr_mont:
+	stdu	$sp,-160($sp)
+	std	r18,48($sp)
+	std	r19,56($sp)
+	std	r20,64($sp)
+	std	r21,72($sp)
+	std	r22,80($sp)
+	std	r23,88($sp)
+	std	r24,96($sp)
+	std	r25,104($sp)
+	std	r26,112($sp)
+	std	r27,120($sp)
+	std	r28,128($sp)
+	std	r29,136($sp)
+	std	r30,144($sp)
+	std	r31,152($sp)
+
+	mtctr	$bp
+
+	ld	$a0,0($ap)
+	ld	$a1,8($ap)
+	ld	$a2,16($ap)
+	ld	$a3,24($ap)
+
+	lis	$ordk,0xccd1
+	lis	$ord0,0xf3b9
+	lis	$ord1,0xbce6
+	ori	$ordk,$ordk,0xc8aa
+	ori	$ord0,$ord0,0xcac2
+	ori	$ord1,$ord1,0xfaad
+	sldi	$ordk,$ordk,32
+	sldi	$ord0,$ord0,32
+	sldi	$ord1,$ord1,32
+	oris	$ordk,$ordk,0xee00
+	oris	$ord0,$ord0,0xfc63
+	oris	$ord1,$ord1,0xa717
+	ori	$ordk,$ordk,0xbc4f	# 0xccd1c8aaee00bc4f
+	ori	$ord0,$ord0,0x2551	# 0xf3b9cac2fc632551
+	ori	$ord1,$ord1,0x9e84	# 0xbce6faada7179e84
+	li	$ord2,-1		# 0xffffffffffffffff
+	sldi	$ord3,$ord2,32		# 0xffffffff00000000
+	li	$zr,0
+	b	.Loop_ord_sqr
+
+.align	5
+.Loop_ord_sqr:
+	################################################################
+	#  |  |  |  |  |  |a1*a0|  |
+	#  |  |  |  |  |a2*a0|  |  |
+	#  |  |a3*a2|a3*a0|  |  |  |
+	#  |  |  |  |a2*a1|  |  |  |
+	#  |  |  |a3*a1|  |  |  |  |
+	# *|  |  |  |  |  |  |  | 2|
+	# +|a3*a3|a2*a2|a1*a1|a0*a0|
+	#  |--+--+--+--+--+--+--+--|
+	#  |A7|A6|A5|A4|A3|A2|A1|A0|, where Ax is $accx, i.e. follow $accx
+	#
+	#  "can't overflow" below mark carrying into high part of
+	#  multiplication result, which can't overflow, because it
+	#  can never be all ones.
+
+	mulld	$acc1,$a1,$a0		# a[1]*a[0]
+	mulhdu	$t1,$a1,$a0
+	mulld	$acc2,$a2,$a0		# a[2]*a[0]
+	mulhdu	$t2,$a2,$a0
+	mulld	$acc3,$a3,$a0		# a[3]*a[0]
+	mulhdu	$acc4,$a3,$a0
+
+	addc	$acc2,$acc2,$t1		# accumulate high parts of multiplication
+	 mulld	$t0,$a2,$a1		# a[2]*a[1]
+	 mulhdu	$t1,$a2,$a1
+	adde	$acc3,$acc3,$t2
+	 mulld	$t2,$a3,$a1		# a[3]*a[1]
+	 mulhdu	$t3,$a3,$a1
+	addze	$acc4,$acc4		# can't overflow
+
+	mulld	$acc5,$a3,$a2		# a[3]*a[2]
+	mulhdu	$acc6,$a3,$a2
+
+	addc	$t1,$t1,$t2		# accumulate high parts of multiplication
+	 mulld	$acc0,$a0,$a0		# a[0]*a[0]
+	addze	$t2,$t3			# can't overflow
+
+	addc	$acc3,$acc3,$t0		# accumulate low parts of multiplication
+	 mulhdu	$a0,$a0,$a0
+	adde	$acc4,$acc4,$t1
+	 mulld	$t1,$a1,$a1		# a[1]*a[1]
+	adde	$acc5,$acc5,$t2
+	 mulhdu	$a1,$a1,$a1
+	addze	$acc6,$acc6		# can't overflow
+
+	addc	$acc1,$acc1,$acc1	# acc[1-6]*=2
+	 mulld	$t2,$a2,$a2		# a[2]*a[2]
+	adde	$acc2,$acc2,$acc2
+	 mulhdu	$a2,$a2,$a2
+	adde	$acc3,$acc3,$acc3
+	 mulld	$t3,$a3,$a3		# a[3]*a[3]
+	adde	$acc4,$acc4,$acc4
+	 mulhdu	$a3,$a3,$a3
+	adde	$acc5,$acc5,$acc5
+	adde	$acc6,$acc6,$acc6
+	addze	$acc7,$zr
+
+	addc	$acc1,$acc1,$a0		# +a[i]*a[i]
+	 mulld	$t4,$acc0,$ordk
+	adde	$acc2,$acc2,$t1
+	adde	$acc3,$acc3,$a1
+	adde	$acc4,$acc4,$t2
+	adde	$acc5,$acc5,$a2
+	adde	$acc6,$acc6,$t3
+	adde	$acc7,$acc7,$a3
+___
+for($i=0; $i<4; $i++) {			# reductions
+$code.=<<___;
+	addic	$t0,$acc0,-1		# discarded
+	mulhdu	$t1,$ord0,$t4
+	mulld	$t2,$ord1,$t4
+	mulhdu	$t3,$ord1,$t4
+
+	adde	$t2,$t2,$t1
+	addze	$t3,$t3
+
+	addc	$acc0,$acc1,$t2
+	adde	$acc1,$acc2,$t3
+	adde	$acc2,$acc3,$t4
+	adde	$acc3,$zr,$t4		# can't overflow
+___
+$code.=<<___	if ($i<3);
+	mulld	$t3,$acc0,$ordk
+___
+$code.=<<___;
+	sldi	$t0,$t4,32
+	subfc	$acc1,$t4,$acc1
+	srdi	$t1,$t4,32
+	subfe	$acc2,$t0,$acc2
+	subfe	$acc3,$t1,$acc3		# can't borrow
+___
+	($t3,$t4) = ($t4,$t3);
+}
+$code.=<<___;
+	addc	$acc0,$acc0,$acc4	# accumulate upper half
+	adde	$acc1,$acc1,$acc5
+	adde	$acc2,$acc2,$acc6
+	adde	$acc3,$acc3,$acc7
+	addze	$acc4,$zr
+
+	subfc	$acc0,$ord0,$acc0	# ret -= modulus
+	subfe	$acc1,$ord1,$acc1
+	subfe	$acc2,$ord2,$acc2
+	subfe	$acc3,$ord3,$acc3
+	subfe	$acc4,$zr,$acc4
+
+	and	$t0,$ord0,$acc4
+	and	$t1,$ord1,$acc4
+	addc	$a0,$acc0,$t0		# ret += modulus if borrow
+	and	$t3,$ord3,$acc4
+	adde	$a1,$acc1,$t1
+	adde	$a2,$acc2,$acc4
+	adde	$a3,$acc3,$t3
+
+	bdnz	.Loop_ord_sqr
+
+	std	$a0,0($rp)
+	std	$a1,8($rp)
+	std	$a2,16($rp)
+	std	$a3,24($rp)
+
+	ld	r18,48($sp)
+	ld	r19,56($sp)
+	ld	r20,64($sp)
+	ld	r21,72($sp)
+	ld	r22,80($sp)
+	ld	r23,88($sp)
+	ld	r24,96($sp)
+	ld	r25,104($sp)
+	ld	r26,112($sp)
+	ld	r27,120($sp)
+	ld	r28,128($sp)
+	ld	r29,136($sp)
+	ld	r30,144($sp)
+	ld	r31,152($sp)
+	addi	$sp,$sp,160
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,14,3,0
+	.long	0
+.size	ecp_nistz256_ord_sqr_mont,.-ecp_nistz256_ord_sqr_mont
+___
+}	}
+
+########################################################################
+# scatter-gather subroutines
+{
+my ($out,$inp,$index,$mask)=map("r$_",(3..7));
+$code.=<<___;
+########################################################################
+# void	ecp_nistz256_scatter_w5(void *out, const P256_POINT *inp,
+#				int index);
+.globl	ecp_nistz256_scatter_w5
+.align	4
+ecp_nistz256_scatter_w5:
+	slwi	$index,$index,2
+	add	$out,$out,$index
+
+	ld	r8, 0($inp)		# X
+	ld	r9, 8($inp)
+	ld	r10,16($inp)
+	ld	r11,24($inp)
+
+	stw	r8, 64*0-4($out)
+	srdi	r8, r8, 32
+	stw	r9, 64*1-4($out)
+	srdi	r9, r9, 32
+	stw	r10,64*2-4($out)
+	srdi	r10,r10,32
+	stw	r11,64*3-4($out)
+	srdi	r11,r11,32
+	stw	r8, 64*4-4($out)
+	stw	r9, 64*5-4($out)
+	stw	r10,64*6-4($out)
+	stw	r11,64*7-4($out)
+	addi	$out,$out,64*8
+
+	ld	r8, 32($inp)		# Y
+	ld	r9, 40($inp)
+	ld	r10,48($inp)
+	ld	r11,56($inp)
+
+	stw	r8, 64*0-4($out)
+	srdi	r8, r8, 32
+	stw	r9, 64*1-4($out)
+	srdi	r9, r9, 32
+	stw	r10,64*2-4($out)
+	srdi	r10,r10,32
+	stw	r11,64*3-4($out)
+	srdi	r11,r11,32
+	stw	r8, 64*4-4($out)
+	stw	r9, 64*5-4($out)
+	stw	r10,64*6-4($out)
+	stw	r11,64*7-4($out)
+	addi	$out,$out,64*8
+
+	ld	r8, 64($inp)		# Z
+	ld	r9, 72($inp)
+	ld	r10,80($inp)
+	ld	r11,88($inp)
+
+	stw	r8, 64*0-4($out)
+	srdi	r8, r8, 32
+	stw	r9, 64*1-4($out)
+	srdi	r9, r9, 32
+	stw	r10,64*2-4($out)
+	srdi	r10,r10,32
+	stw	r11,64*3-4($out)
+	srdi	r11,r11,32
+	stw	r8, 64*4-4($out)
+	stw	r9, 64*5-4($out)
+	stw	r10,64*6-4($out)
+	stw	r11,64*7-4($out)
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+	.long	0
+.size	ecp_nistz256_scatter_w5,.-ecp_nistz256_scatter_w5
+
+########################################################################
+# void	ecp_nistz256_gather_w5(P256_POINT *out, const void *inp,
+#				int index);
+.globl	ecp_nistz256_gather_w5
+.align	4
+ecp_nistz256_gather_w5:
+	neg	r0,$index
+	sradi	r0,r0,63
+
+	add	$index,$index,r0
+	slwi	$index,$index,2
+	add	$inp,$inp,$index
+
+	lwz	r5, 64*0($inp)
+	lwz	r6, 64*1($inp)
+	lwz	r7, 64*2($inp)
+	lwz	r8, 64*3($inp)
+	lwz	r9, 64*4($inp)
+	lwz	r10,64*5($inp)
+	lwz	r11,64*6($inp)
+	lwz	r12,64*7($inp)
+	addi	$inp,$inp,64*8
+	sldi	r9, r9, 32
+	sldi	r10,r10,32
+	sldi	r11,r11,32
+	sldi	r12,r12,32
+	or	r5,r5,r9
+	or	r6,r6,r10
+	or	r7,r7,r11
+	or	r8,r8,r12
+	and	r5,r5,r0
+	and	r6,r6,r0
+	and	r7,r7,r0
+	and	r8,r8,r0
+	std	r5,0($out)		# X
+	std	r6,8($out)
+	std	r7,16($out)
+	std	r8,24($out)
+
+	lwz	r5, 64*0($inp)
+	lwz	r6, 64*1($inp)
+	lwz	r7, 64*2($inp)
+	lwz	r8, 64*3($inp)
+	lwz	r9, 64*4($inp)
+	lwz	r10,64*5($inp)
+	lwz	r11,64*6($inp)
+	lwz	r12,64*7($inp)
+	addi	$inp,$inp,64*8
+	sldi	r9, r9, 32
+	sldi	r10,r10,32
+	sldi	r11,r11,32
+	sldi	r12,r12,32
+	or	r5,r5,r9
+	or	r6,r6,r10
+	or	r7,r7,r11
+	or	r8,r8,r12
+	and	r5,r5,r0
+	and	r6,r6,r0
+	and	r7,r7,r0
+	and	r8,r8,r0
+	std	r5,32($out)		# Y
+	std	r6,40($out)
+	std	r7,48($out)
+	std	r8,56($out)
+
+	lwz	r5, 64*0($inp)
+	lwz	r6, 64*1($inp)
+	lwz	r7, 64*2($inp)
+	lwz	r8, 64*3($inp)
+	lwz	r9, 64*4($inp)
+	lwz	r10,64*5($inp)
+	lwz	r11,64*6($inp)
+	lwz	r12,64*7($inp)
+	sldi	r9, r9, 32
+	sldi	r10,r10,32
+	sldi	r11,r11,32
+	sldi	r12,r12,32
+	or	r5,r5,r9
+	or	r6,r6,r10
+	or	r7,r7,r11
+	or	r8,r8,r12
+	and	r5,r5,r0
+	and	r6,r6,r0
+	and	r7,r7,r0
+	and	r8,r8,r0
+	std	r5,64($out)		# Z
+	std	r6,72($out)
+	std	r7,80($out)
+	std	r8,88($out)
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+	.long	0
+.size	ecp_nistz256_gather_w5,.-ecp_nistz256_gather_w5
+
+########################################################################
+# void	ecp_nistz256_scatter_w7(void *out, const P256_POINT_AFFINE *inp,
+#				int index);
+.globl	ecp_nistz256_scatter_w7
+.align	4
+ecp_nistz256_scatter_w7:
+	li	r0,8
+	mtctr	r0
+	add	$out,$out,$index
+	subi	$inp,$inp,8
+
+.Loop_scatter_w7:
+	ldu	r0,8($inp)
+	stb	r0,64*0($out)
+	srdi	r0,r0,8
+	stb	r0,64*1($out)
+	srdi	r0,r0,8
+	stb	r0,64*2($out)
+	srdi	r0,r0,8
+	stb	r0,64*3($out)
+	srdi	r0,r0,8
+	stb	r0,64*4($out)
+	srdi	r0,r0,8
+	stb	r0,64*5($out)
+	srdi	r0,r0,8
+	stb	r0,64*6($out)
+	srdi	r0,r0,8
+	stb	r0,64*7($out)
+	addi	$out,$out,64*8
+	bdnz	.Loop_scatter_w7
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+	.long	0
+.size	ecp_nistz256_scatter_w7,.-ecp_nistz256_scatter_w7
+
+########################################################################
+# void	ecp_nistz256_gather_w7(P256_POINT_AFFINE *out, const void *inp,
+#				int index);
+.globl	ecp_nistz256_gather_w7
+.align	4
+ecp_nistz256_gather_w7:
+	li	r0,8
+	mtctr	r0
+	neg	r0,$index
+	sradi	r0,r0,63
+
+	add	$index,$index,r0
+	add	$inp,$inp,$index
+	subi	$out,$out,8
+
+.Loop_gather_w7:
+	lbz	r5, 64*0($inp)
+	lbz	r6, 64*1($inp)
+	lbz	r7, 64*2($inp)
+	lbz	r8, 64*3($inp)
+	lbz	r9, 64*4($inp)
+	lbz	r10,64*5($inp)
+	lbz	r11,64*6($inp)
+	lbz	r12,64*7($inp)
+	addi	$inp,$inp,64*8
+
+	sldi	r6, r6, 8
+	sldi	r7, r7, 16
+	sldi	r8, r8, 24
+	sldi	r9, r9, 32
+	sldi	r10,r10,40
+	sldi	r11,r11,48
+	sldi	r12,r12,56
+
+	or	r5,r5,r6
+	or	r7,r7,r8
+	or	r9,r9,r10
+	or	r11,r11,r12
+	or	r5,r5,r7
+	or	r9,r9,r11
+	or	r5,r5,r9
+	and	r5,r5,r0
+	stdu	r5,8($out)
+	bdnz	.Loop_gather_w7
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+	.long	0
+.size	ecp_nistz256_gather_w7,.-ecp_nistz256_gather_w7
+___
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	print $_,"\n";
+}
+close STDOUT;	# enforce flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-sparcv9.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-sparcv9.pl
new file mode 100755
index 000000000..0a4def6e2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-sparcv9.pl
@@ -0,0 +1,3061 @@
+#! /usr/bin/env perl
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# ECP_NISTZ256 module for SPARCv9.
+#
+# February 2015.
+#
+# Original ECP_NISTZ256 submission targeting x86_64 is detailed in
+# http://eprint.iacr.org/2013/816. In the process of adaptation
+# original .c module was made 32-bit savvy in order to make this
+# implementation possible.
+#
+#			with/without -DECP_NISTZ256_ASM
+# UltraSPARC III	+12-18%
+# SPARC T4		+99-550% (+66-150% on 32-bit Solaris)
+#
+# Ranges denote minimum and maximum improvement coefficients depending
+# on benchmark. Lower coefficients are for ECDSA sign, server-side
+# operation. Keep in mind that +200% means 3x improvement.
+
+$output = pop;
+open STDOUT,">$output";
+
+$code.=<<___;
+#include "sparc_arch.h"
+
+#define LOCALS	(STACK_BIAS+STACK_FRAME)
+#ifdef	__arch64__
+.register	%g2,#scratch
+.register	%g3,#scratch
+# define STACK64_FRAME	STACK_FRAME
+# define LOCALS64	LOCALS
+#else
+# define STACK64_FRAME	(2047+192)
+# define LOCALS64	STACK64_FRAME
+#endif
+
+.section	".text",#alloc,#execinstr
+___
+########################################################################
+# Convert ecp_nistz256_table.c to layout expected by ecp_nistz_gather_w7
+#
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+open TABLE,"<ecp_nistz256_table.c"		or
+open TABLE,"<${dir}../ecp_nistz256_table.c"	or
+die "failed to open ecp_nistz256_table.c:",$!;
+
+use integer;
+
+foreach(<TABLE>) {
+	s/TOBN\(\s*(0x[0-9a-f]+),\s*(0x[0-9a-f]+)\s*\)/push @arr,hex($2),hex($1)/geo;
+}
+close TABLE;
+
+# See ecp_nistz256_table.c for explanation for why it's 64*16*37.
+# 64*16*37-1 is because $#arr returns last valid index or @arr, not
+# amount of elements.
+die "insane number of elements" if ($#arr != 64*16*37-1);
+
+$code.=<<___;
+.globl	ecp_nistz256_precomputed
+.align	4096
+ecp_nistz256_precomputed:
+___
+########################################################################
+# this conversion smashes P256_POINT_AFFINE by individual bytes with
+# 64 byte interval, similar to
+#	1111222233334444
+#	1234123412341234
+for(1..37) {
+	@tbl = splice(@arr,0,64*16);
+	for($i=0;$i<64;$i++) {
+		undef @line;
+		for($j=0;$j<64;$j++) {
+			push @line,(@tbl[$j*16+$i/4]>>(($i%4)*8))&0xff;
+		}
+		$code.=".byte\t";
+		$code.=join(',',map { sprintf "0x%02x",$_} @line);
+		$code.="\n";
+	}
+}
+
+{{{
+my ($rp,$ap,$bp)=map("%i$_",(0..2));
+my @acc=map("%l$_",(0..7));
+my ($t0,$t1,$t2,$t3,$t4,$t5,$t6,$t7)=(map("%o$_",(0..5)),"%g4","%g5");
+my ($bi,$a0,$mask,$carry)=(map("%i$_",(3..5)),"%g1");
+my ($rp_real,$ap_real)=("%g2","%g3");
+
+$code.=<<___;
+.type	ecp_nistz256_precomputed,#object
+.size	ecp_nistz256_precomputed,.-ecp_nistz256_precomputed
+.align	64
+.LRR:	! 2^512 mod P precomputed for NIST P256 polynomial
+.long	0x00000003, 0x00000000, 0xffffffff, 0xfffffffb
+.long	0xfffffffe, 0xffffffff, 0xfffffffd, 0x00000004
+.Lone:
+.long	1,0,0,0,0,0,0,0
+.asciz	"ECP_NISTZ256 for SPARCv9, CRYPTOGAMS by <appro\@openssl.org>"
+
+! void	ecp_nistz256_to_mont(BN_ULONG %i0[8],const BN_ULONG %i1[8]);
+.globl	ecp_nistz256_to_mont
+.align	64
+ecp_nistz256_to_mont:
+	save	%sp,-STACK_FRAME,%sp
+	nop
+1:	call	.+8
+	add	%o7,.LRR-1b,$bp
+	call	__ecp_nistz256_mul_mont
+	nop
+	ret
+	restore
+.type	ecp_nistz256_to_mont,#function
+.size	ecp_nistz256_to_mont,.-ecp_nistz256_to_mont
+
+! void	ecp_nistz256_from_mont(BN_ULONG %i0[8],const BN_ULONG %i1[8]);
+.globl	ecp_nistz256_from_mont
+.align	32
+ecp_nistz256_from_mont:
+	save	%sp,-STACK_FRAME,%sp
+	nop
+1:	call	.+8
+	add	%o7,.Lone-1b,$bp
+	call	__ecp_nistz256_mul_mont
+	nop
+	ret
+	restore
+.type	ecp_nistz256_from_mont,#function
+.size	ecp_nistz256_from_mont,.-ecp_nistz256_from_mont
+
+! void	ecp_nistz256_mul_mont(BN_ULONG %i0[8],const BN_ULONG %i1[8],
+!					      const BN_ULONG %i2[8]);
+.globl	ecp_nistz256_mul_mont
+.align	32
+ecp_nistz256_mul_mont:
+	save	%sp,-STACK_FRAME,%sp
+	nop
+	call	__ecp_nistz256_mul_mont
+	nop
+	ret
+	restore
+.type	ecp_nistz256_mul_mont,#function
+.size	ecp_nistz256_mul_mont,.-ecp_nistz256_mul_mont
+
+! void	ecp_nistz256_sqr_mont(BN_ULONG %i0[8],const BN_ULONG %i2[8]);
+.globl	ecp_nistz256_sqr_mont
+.align	32
+ecp_nistz256_sqr_mont:
+	save	%sp,-STACK_FRAME,%sp
+	mov	$ap,$bp
+	call	__ecp_nistz256_mul_mont
+	nop
+	ret
+	restore
+.type	ecp_nistz256_sqr_mont,#function
+.size	ecp_nistz256_sqr_mont,.-ecp_nistz256_sqr_mont
+___
+
+########################################################################
+# Special thing to keep in mind is that $t0-$t7 hold 64-bit values,
+# while all others are meant to keep 32. "Meant to" means that additions
+# to @acc[0-7] do "contaminate" upper bits, but they are cleared before
+# they can affect outcome (follow 'and' with $mask). Also keep in mind
+# that addition with carry is addition with 32-bit carry, even though
+# CPU is 64-bit. [Addition with 64-bit carry was introduced in T3, see
+# below for VIS3 code paths.]
+
+$code.=<<___;
+.align	32
+__ecp_nistz256_mul_mont:
+	ld	[$bp+0],$bi		! b[0]
+	mov	-1,$mask
+	ld	[$ap+0],$a0
+	srl	$mask,0,$mask		! 0xffffffff
+	ld	[$ap+4],$t1
+	ld	[$ap+8],$t2
+	ld	[$ap+12],$t3
+	ld	[$ap+16],$t4
+	ld	[$ap+20],$t5
+	ld	[$ap+24],$t6
+	ld	[$ap+28],$t7
+	mulx	$a0,$bi,$t0		! a[0-7]*b[0], 64-bit results
+	mulx	$t1,$bi,$t1
+	mulx	$t2,$bi,$t2
+	mulx	$t3,$bi,$t3
+	mulx	$t4,$bi,$t4
+	mulx	$t5,$bi,$t5
+	mulx	$t6,$bi,$t6
+	mulx	$t7,$bi,$t7
+	srlx	$t0,32,@acc[1]		! extract high parts
+	srlx	$t1,32,@acc[2]
+	srlx	$t2,32,@acc[3]
+	srlx	$t3,32,@acc[4]
+	srlx	$t4,32,@acc[5]
+	srlx	$t5,32,@acc[6]
+	srlx	$t6,32,@acc[7]
+	srlx	$t7,32,@acc[0]		! "@acc[8]"
+	mov	0,$carry
+___
+for($i=1;$i<8;$i++) {
+$code.=<<___;
+	addcc	@acc[1],$t1,@acc[1]	! accumulate high parts
+	ld	[$bp+4*$i],$bi		! b[$i]
+	ld	[$ap+4],$t1		! re-load a[1-7]
+	addccc	@acc[2],$t2,@acc[2]
+	addccc	@acc[3],$t3,@acc[3]
+	ld	[$ap+8],$t2
+	ld	[$ap+12],$t3
+	addccc	@acc[4],$t4,@acc[4]
+	addccc	@acc[5],$t5,@acc[5]
+	ld	[$ap+16],$t4
+	ld	[$ap+20],$t5
+	addccc	@acc[6],$t6,@acc[6]
+	addccc	@acc[7],$t7,@acc[7]
+	ld	[$ap+24],$t6
+	ld	[$ap+28],$t7
+	addccc	@acc[0],$carry,@acc[0]	! "@acc[8]"
+	addc	%g0,%g0,$carry
+___
+	# Reduction iteration is normally performed by accumulating
+	# result of multiplication of modulus by "magic" digit [and
+	# omitting least significant word, which is guaranteed to
+	# be 0], but thanks to special form of modulus and "magic"
+	# digit being equal to least significant word, it can be
+	# performed with additions and subtractions alone. Indeed:
+	#
+	#        ffff.0001.0000.0000.0000.ffff.ffff.ffff
+	# *                                         abcd
+	# + xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.abcd
+	#
+	# Now observing that ff..ff*x = (2^n-1)*x = 2^n*x-x, we
+	# rewrite above as:
+	#
+	#   xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.abcd
+	# + abcd.0000.abcd.0000.0000.abcd.0000.0000.0000
+	# -      abcd.0000.0000.0000.0000.0000.0000.abcd
+	#
+	# or marking redundant operations:
+	#
+	#   xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.----
+	# + abcd.0000.abcd.0000.0000.abcd.----.----.----
+	# -      abcd.----.----.----.----.----.----.----
+
+$code.=<<___;
+	! multiplication-less reduction
+	addcc	@acc[3],$t0,@acc[3]	! r[3]+=r[0]
+	addccc	@acc[4],%g0,@acc[4]	! r[4]+=0
+	 and	@acc[1],$mask,@acc[1]
+	 and	@acc[2],$mask,@acc[2]
+	addccc	@acc[5],%g0,@acc[5]	! r[5]+=0
+	addccc	@acc[6],$t0,@acc[6]	! r[6]+=r[0]
+	 and	@acc[3],$mask,@acc[3]
+	 and	@acc[4],$mask,@acc[4]
+	addccc	@acc[7],%g0,@acc[7]	! r[7]+=0
+	addccc	@acc[0],$t0,@acc[0]	! r[8]+=r[0]	"@acc[8]"
+	 and	@acc[5],$mask,@acc[5]
+	 and	@acc[6],$mask,@acc[6]
+	addc	$carry,%g0,$carry	! top-most carry
+	subcc	@acc[7],$t0,@acc[7]	! r[7]-=r[0]
+	subccc	@acc[0],%g0,@acc[0]	! r[8]-=0	"@acc[8]"
+	subc	$carry,%g0,$carry	! top-most carry
+	 and	@acc[7],$mask,@acc[7]
+	 and	@acc[0],$mask,@acc[0]	! "@acc[8]"
+___
+	push(@acc,shift(@acc));		# rotate registers to "omit" acc[0]
+$code.=<<___;
+	mulx	$a0,$bi,$t0		! a[0-7]*b[$i], 64-bit results
+	mulx	$t1,$bi,$t1
+	mulx	$t2,$bi,$t2
+	mulx	$t3,$bi,$t3
+	mulx	$t4,$bi,$t4
+	mulx	$t5,$bi,$t5
+	mulx	$t6,$bi,$t6
+	mulx	$t7,$bi,$t7
+	add	@acc[0],$t0,$t0		! accumulate low parts, can't overflow
+	add	@acc[1],$t1,$t1
+	srlx	$t0,32,@acc[1]		! extract high parts
+	add	@acc[2],$t2,$t2
+	srlx	$t1,32,@acc[2]
+	add	@acc[3],$t3,$t3
+	srlx	$t2,32,@acc[3]
+	add	@acc[4],$t4,$t4
+	srlx	$t3,32,@acc[4]
+	add	@acc[5],$t5,$t5
+	srlx	$t4,32,@acc[5]
+	add	@acc[6],$t6,$t6
+	srlx	$t5,32,@acc[6]
+	add	@acc[7],$t7,$t7
+	srlx	$t6,32,@acc[7]
+	srlx	$t7,32,@acc[0]		! "@acc[8]"
+___
+}
+$code.=<<___;
+	addcc	@acc[1],$t1,@acc[1]	! accumulate high parts
+	addccc	@acc[2],$t2,@acc[2]
+	addccc	@acc[3],$t3,@acc[3]
+	addccc	@acc[4],$t4,@acc[4]
+	addccc	@acc[5],$t5,@acc[5]
+	addccc	@acc[6],$t6,@acc[6]
+	addccc	@acc[7],$t7,@acc[7]
+	addccc	@acc[0],$carry,@acc[0]	! "@acc[8]"
+	addc	%g0,%g0,$carry
+
+	addcc	@acc[3],$t0,@acc[3]	! multiplication-less reduction
+	addccc	@acc[4],%g0,@acc[4]
+	addccc	@acc[5],%g0,@acc[5]
+	addccc	@acc[6],$t0,@acc[6]
+	addccc	@acc[7],%g0,@acc[7]
+	addccc	@acc[0],$t0,@acc[0]	! "@acc[8]"
+	addc	$carry,%g0,$carry
+	subcc	@acc[7],$t0,@acc[7]
+	subccc	@acc[0],%g0,@acc[0]	! "@acc[8]"
+	subc	$carry,%g0,$carry	! top-most carry
+___
+	push(@acc,shift(@acc));		# rotate registers to omit acc[0]
+$code.=<<___;
+	! Final step is "if result > mod, subtract mod", but we do it
+	! "other way around", namely subtract modulus from result
+	! and if it borrowed, add modulus back.
+
+	subcc	@acc[0],-1,@acc[0]	! subtract modulus
+	subccc	@acc[1],-1,@acc[1]
+	subccc	@acc[2],-1,@acc[2]
+	subccc	@acc[3],0,@acc[3]
+	subccc	@acc[4],0,@acc[4]
+	subccc	@acc[5],0,@acc[5]
+	subccc	@acc[6],1,@acc[6]
+	subccc	@acc[7],-1,@acc[7]
+	subc	$carry,0,$carry		! broadcast borrow bit
+
+	! Note that because mod has special form, i.e. consists of
+	! 0xffffffff, 1 and 0s, we can conditionally synthesize it by
+	! using value of broadcasted borrow and the borrow bit itself.
+	! To minimize dependency chain we first broadcast and then
+	! extract the bit by negating (follow $bi).
+
+	addcc	@acc[0],$carry,@acc[0]	! add modulus or zero
+	addccc	@acc[1],$carry,@acc[1]
+	neg	$carry,$bi
+	st	@acc[0],[$rp]
+	addccc	@acc[2],$carry,@acc[2]
+	st	@acc[1],[$rp+4]
+	addccc	@acc[3],0,@acc[3]
+	st	@acc[2],[$rp+8]
+	addccc	@acc[4],0,@acc[4]
+	st	@acc[3],[$rp+12]
+	addccc	@acc[5],0,@acc[5]
+	st	@acc[4],[$rp+16]
+	addccc	@acc[6],$bi,@acc[6]
+	st	@acc[5],[$rp+20]
+	addc	@acc[7],$carry,@acc[7]
+	st	@acc[6],[$rp+24]
+	retl
+	st	@acc[7],[$rp+28]
+.type	__ecp_nistz256_mul_mont,#function
+.size	__ecp_nistz256_mul_mont,.-__ecp_nistz256_mul_mont
+
+! void	ecp_nistz256_add(BN_ULONG %i0[8],const BN_ULONG %i1[8],
+!					 const BN_ULONG %i2[8]);
+.globl	ecp_nistz256_add
+.align	32
+ecp_nistz256_add:
+	save	%sp,-STACK_FRAME,%sp
+	ld	[$ap],@acc[0]
+	ld	[$ap+4],@acc[1]
+	ld	[$ap+8],@acc[2]
+	ld	[$ap+12],@acc[3]
+	ld	[$ap+16],@acc[4]
+	ld	[$ap+20],@acc[5]
+	ld	[$ap+24],@acc[6]
+	call	__ecp_nistz256_add
+	ld	[$ap+28],@acc[7]
+	ret
+	restore
+.type	ecp_nistz256_add,#function
+.size	ecp_nistz256_add,.-ecp_nistz256_add
+
+.align	32
+__ecp_nistz256_add:
+	ld	[$bp+0],$t0		! b[0]
+	ld	[$bp+4],$t1
+	ld	[$bp+8],$t2
+	ld	[$bp+12],$t3
+	addcc	@acc[0],$t0,@acc[0]
+	ld	[$bp+16],$t4
+	ld	[$bp+20],$t5
+	addccc	@acc[1],$t1,@acc[1]
+	ld	[$bp+24],$t6
+	ld	[$bp+28],$t7
+	addccc	@acc[2],$t2,@acc[2]
+	addccc	@acc[3],$t3,@acc[3]
+	addccc	@acc[4],$t4,@acc[4]
+	addccc	@acc[5],$t5,@acc[5]
+	addccc	@acc[6],$t6,@acc[6]
+	addccc	@acc[7],$t7,@acc[7]
+	addc	%g0,%g0,$carry
+
+.Lreduce_by_sub:
+
+	! if a+b >= modulus, subtract modulus.
+	!
+	! But since comparison implies subtraction, we subtract
+	! modulus and then add it back if subtraction borrowed.
+
+	subcc	@acc[0],-1,@acc[0]
+	subccc	@acc[1],-1,@acc[1]
+	subccc	@acc[2],-1,@acc[2]
+	subccc	@acc[3], 0,@acc[3]
+	subccc	@acc[4], 0,@acc[4]
+	subccc	@acc[5], 0,@acc[5]
+	subccc	@acc[6], 1,@acc[6]
+	subccc	@acc[7],-1,@acc[7]
+	subc	$carry,0,$carry
+
+	! Note that because mod has special form, i.e. consists of
+	! 0xffffffff, 1 and 0s, we can conditionally synthesize it by
+	! using value of borrow and its negative.
+
+	addcc	@acc[0],$carry,@acc[0]	! add synthesized modulus
+	addccc	@acc[1],$carry,@acc[1]
+	neg	$carry,$bi
+	st	@acc[0],[$rp]
+	addccc	@acc[2],$carry,@acc[2]
+	st	@acc[1],[$rp+4]
+	addccc	@acc[3],0,@acc[3]
+	st	@acc[2],[$rp+8]
+	addccc	@acc[4],0,@acc[4]
+	st	@acc[3],[$rp+12]
+	addccc	@acc[5],0,@acc[5]
+	st	@acc[4],[$rp+16]
+	addccc	@acc[6],$bi,@acc[6]
+	st	@acc[5],[$rp+20]
+	addc	@acc[7],$carry,@acc[7]
+	st	@acc[6],[$rp+24]
+	retl
+	st	@acc[7],[$rp+28]
+.type	__ecp_nistz256_add,#function
+.size	__ecp_nistz256_add,.-__ecp_nistz256_add
+
+! void	ecp_nistz256_mul_by_2(BN_ULONG %i0[8],const BN_ULONG %i1[8]);
+.globl	ecp_nistz256_mul_by_2
+.align	32
+ecp_nistz256_mul_by_2:
+	save	%sp,-STACK_FRAME,%sp
+	ld	[$ap],@acc[0]
+	ld	[$ap+4],@acc[1]
+	ld	[$ap+8],@acc[2]
+	ld	[$ap+12],@acc[3]
+	ld	[$ap+16],@acc[4]
+	ld	[$ap+20],@acc[5]
+	ld	[$ap+24],@acc[6]
+	call	__ecp_nistz256_mul_by_2
+	ld	[$ap+28],@acc[7]
+	ret
+	restore
+.type	ecp_nistz256_mul_by_2,#function
+.size	ecp_nistz256_mul_by_2,.-ecp_nistz256_mul_by_2
+
+.align	32
+__ecp_nistz256_mul_by_2:
+	addcc	@acc[0],@acc[0],@acc[0]	! a+a=2*a
+	addccc	@acc[1],@acc[1],@acc[1]
+	addccc	@acc[2],@acc[2],@acc[2]
+	addccc	@acc[3],@acc[3],@acc[3]
+	addccc	@acc[4],@acc[4],@acc[4]
+	addccc	@acc[5],@acc[5],@acc[5]
+	addccc	@acc[6],@acc[6],@acc[6]
+	addccc	@acc[7],@acc[7],@acc[7]
+	b	.Lreduce_by_sub
+	addc	%g0,%g0,$carry
+.type	__ecp_nistz256_mul_by_2,#function
+.size	__ecp_nistz256_mul_by_2,.-__ecp_nistz256_mul_by_2
+
+! void	ecp_nistz256_mul_by_3(BN_ULONG %i0[8],const BN_ULONG %i1[8]);
+.globl	ecp_nistz256_mul_by_3
+.align	32
+ecp_nistz256_mul_by_3:
+	save	%sp,-STACK_FRAME,%sp
+	ld	[$ap],@acc[0]
+	ld	[$ap+4],@acc[1]
+	ld	[$ap+8],@acc[2]
+	ld	[$ap+12],@acc[3]
+	ld	[$ap+16],@acc[4]
+	ld	[$ap+20],@acc[5]
+	ld	[$ap+24],@acc[6]
+	call	__ecp_nistz256_mul_by_3
+	ld	[$ap+28],@acc[7]
+	ret
+	restore
+.type	ecp_nistz256_mul_by_3,#function
+.size	ecp_nistz256_mul_by_3,.-ecp_nistz256_mul_by_3
+
+.align	32
+__ecp_nistz256_mul_by_3:
+	addcc	@acc[0],@acc[0],$t0	! a+a=2*a
+	addccc	@acc[1],@acc[1],$t1
+	addccc	@acc[2],@acc[2],$t2
+	addccc	@acc[3],@acc[3],$t3
+	addccc	@acc[4],@acc[4],$t4
+	addccc	@acc[5],@acc[5],$t5
+	addccc	@acc[6],@acc[6],$t6
+	addccc	@acc[7],@acc[7],$t7
+	addc	%g0,%g0,$carry
+
+	subcc	$t0,-1,$t0		! .Lreduce_by_sub but without stores
+	subccc	$t1,-1,$t1
+	subccc	$t2,-1,$t2
+	subccc	$t3, 0,$t3
+	subccc	$t4, 0,$t4
+	subccc	$t5, 0,$t5
+	subccc	$t6, 1,$t6
+	subccc	$t7,-1,$t7
+	subc	$carry,0,$carry
+
+	addcc	$t0,$carry,$t0		! add synthesized modulus
+	addccc	$t1,$carry,$t1
+	neg	$carry,$bi
+	addccc	$t2,$carry,$t2
+	addccc	$t3,0,$t3
+	addccc	$t4,0,$t4
+	addccc	$t5,0,$t5
+	addccc	$t6,$bi,$t6
+	addc	$t7,$carry,$t7
+
+	addcc	$t0,@acc[0],@acc[0]	! 2*a+a=3*a
+	addccc	$t1,@acc[1],@acc[1]
+	addccc	$t2,@acc[2],@acc[2]
+	addccc	$t3,@acc[3],@acc[3]
+	addccc	$t4,@acc[4],@acc[4]
+	addccc	$t5,@acc[5],@acc[5]
+	addccc	$t6,@acc[6],@acc[6]
+	addccc	$t7,@acc[7],@acc[7]
+	b	.Lreduce_by_sub
+	addc	%g0,%g0,$carry
+.type	__ecp_nistz256_mul_by_3,#function
+.size	__ecp_nistz256_mul_by_3,.-__ecp_nistz256_mul_by_3
+
+! void	ecp_nistz256_sub(BN_ULONG %i0[8],const BN_ULONG %i1[8],
+!				         const BN_ULONG %i2[8]);
+.globl	ecp_nistz256_sub
+.align	32
+ecp_nistz256_sub:
+	save	%sp,-STACK_FRAME,%sp
+	ld	[$ap],@acc[0]
+	ld	[$ap+4],@acc[1]
+	ld	[$ap+8],@acc[2]
+	ld	[$ap+12],@acc[3]
+	ld	[$ap+16],@acc[4]
+	ld	[$ap+20],@acc[5]
+	ld	[$ap+24],@acc[6]
+	call	__ecp_nistz256_sub_from
+	ld	[$ap+28],@acc[7]
+	ret
+	restore
+.type	ecp_nistz256_sub,#function
+.size	ecp_nistz256_sub,.-ecp_nistz256_sub
+
+! void	ecp_nistz256_neg(BN_ULONG %i0[8],const BN_ULONG %i1[8]);
+.globl	ecp_nistz256_neg
+.align	32
+ecp_nistz256_neg:
+	save	%sp,-STACK_FRAME,%sp
+	mov	$ap,$bp
+	mov	0,@acc[0]
+	mov	0,@acc[1]
+	mov	0,@acc[2]
+	mov	0,@acc[3]
+	mov	0,@acc[4]
+	mov	0,@acc[5]
+	mov	0,@acc[6]
+	call	__ecp_nistz256_sub_from
+	mov	0,@acc[7]
+	ret
+	restore
+.type	ecp_nistz256_neg,#function
+.size	ecp_nistz256_neg,.-ecp_nistz256_neg
+
+.align	32
+__ecp_nistz256_sub_from:
+	ld	[$bp+0],$t0		! b[0]
+	ld	[$bp+4],$t1
+	ld	[$bp+8],$t2
+	ld	[$bp+12],$t3
+	subcc	@acc[0],$t0,@acc[0]
+	ld	[$bp+16],$t4
+	ld	[$bp+20],$t5
+	subccc	@acc[1],$t1,@acc[1]
+	subccc	@acc[2],$t2,@acc[2]
+	ld	[$bp+24],$t6
+	ld	[$bp+28],$t7
+	subccc	@acc[3],$t3,@acc[3]
+	subccc	@acc[4],$t4,@acc[4]
+	subccc	@acc[5],$t5,@acc[5]
+	subccc	@acc[6],$t6,@acc[6]
+	subccc	@acc[7],$t7,@acc[7]
+	subc	%g0,%g0,$carry		! broadcast borrow bit
+
+.Lreduce_by_add:
+
+	! if a-b borrows, add modulus.
+	!
+	! Note that because mod has special form, i.e. consists of
+	! 0xffffffff, 1 and 0s, we can conditionally synthesize it by
+	! using value of broadcasted borrow and the borrow bit itself.
+	! To minimize dependency chain we first broadcast and then
+	! extract the bit by negating (follow $bi).
+
+	addcc	@acc[0],$carry,@acc[0]	! add synthesized modulus
+	addccc	@acc[1],$carry,@acc[1]
+	neg	$carry,$bi
+	st	@acc[0],[$rp]
+	addccc	@acc[2],$carry,@acc[2]
+	st	@acc[1],[$rp+4]
+	addccc	@acc[3],0,@acc[3]
+	st	@acc[2],[$rp+8]
+	addccc	@acc[4],0,@acc[4]
+	st	@acc[3],[$rp+12]
+	addccc	@acc[5],0,@acc[5]
+	st	@acc[4],[$rp+16]
+	addccc	@acc[6],$bi,@acc[6]
+	st	@acc[5],[$rp+20]
+	addc	@acc[7],$carry,@acc[7]
+	st	@acc[6],[$rp+24]
+	retl
+	st	@acc[7],[$rp+28]
+.type	__ecp_nistz256_sub_from,#function
+.size	__ecp_nistz256_sub_from,.-__ecp_nistz256_sub_from
+
+.align	32
+__ecp_nistz256_sub_morf:
+	ld	[$bp+0],$t0		! b[0]
+	ld	[$bp+4],$t1
+	ld	[$bp+8],$t2
+	ld	[$bp+12],$t3
+	subcc	$t0,@acc[0],@acc[0]
+	ld	[$bp+16],$t4
+	ld	[$bp+20],$t5
+	subccc	$t1,@acc[1],@acc[1]
+	subccc	$t2,@acc[2],@acc[2]
+	ld	[$bp+24],$t6
+	ld	[$bp+28],$t7
+	subccc	$t3,@acc[3],@acc[3]
+	subccc	$t4,@acc[4],@acc[4]
+	subccc	$t5,@acc[5],@acc[5]
+	subccc	$t6,@acc[6],@acc[6]
+	subccc	$t7,@acc[7],@acc[7]
+	b	.Lreduce_by_add
+	subc	%g0,%g0,$carry		! broadcast borrow bit
+.type	__ecp_nistz256_sub_morf,#function
+.size	__ecp_nistz256_sub_morf,.-__ecp_nistz256_sub_morf
+
+! void	ecp_nistz256_div_by_2(BN_ULONG %i0[8],const BN_ULONG %i1[8]);
+.globl	ecp_nistz256_div_by_2
+.align	32
+ecp_nistz256_div_by_2:
+	save	%sp,-STACK_FRAME,%sp
+	ld	[$ap],@acc[0]
+	ld	[$ap+4],@acc[1]
+	ld	[$ap+8],@acc[2]
+	ld	[$ap+12],@acc[3]
+	ld	[$ap+16],@acc[4]
+	ld	[$ap+20],@acc[5]
+	ld	[$ap+24],@acc[6]
+	call	__ecp_nistz256_div_by_2
+	ld	[$ap+28],@acc[7]
+	ret
+	restore
+.type	ecp_nistz256_div_by_2,#function
+.size	ecp_nistz256_div_by_2,.-ecp_nistz256_div_by_2
+
+.align	32
+__ecp_nistz256_div_by_2:
+	! ret = (a is odd ? a+mod : a) >> 1
+
+	and	@acc[0],1,$bi
+	neg	$bi,$carry
+	addcc	@acc[0],$carry,@acc[0]
+	addccc	@acc[1],$carry,@acc[1]
+	addccc	@acc[2],$carry,@acc[2]
+	addccc	@acc[3],0,@acc[3]
+	addccc	@acc[4],0,@acc[4]
+	addccc	@acc[5],0,@acc[5]
+	addccc	@acc[6],$bi,@acc[6]
+	addccc	@acc[7],$carry,@acc[7]
+	addc	%g0,%g0,$carry
+
+	! ret >>= 1
+
+	srl	@acc[0],1,@acc[0]
+	sll	@acc[1],31,$t0
+	srl	@acc[1],1,@acc[1]
+	or	@acc[0],$t0,@acc[0]
+	sll	@acc[2],31,$t1
+	srl	@acc[2],1,@acc[2]
+	or	@acc[1],$t1,@acc[1]
+	sll	@acc[3],31,$t2
+	st	@acc[0],[$rp]
+	srl	@acc[3],1,@acc[3]
+	or	@acc[2],$t2,@acc[2]
+	sll	@acc[4],31,$t3
+	st	@acc[1],[$rp+4]
+	srl	@acc[4],1,@acc[4]
+	or	@acc[3],$t3,@acc[3]
+	sll	@acc[5],31,$t4
+	st	@acc[2],[$rp+8]
+	srl	@acc[5],1,@acc[5]
+	or	@acc[4],$t4,@acc[4]
+	sll	@acc[6],31,$t5
+	st	@acc[3],[$rp+12]
+	srl	@acc[6],1,@acc[6]
+	or	@acc[5],$t5,@acc[5]
+	sll	@acc[7],31,$t6
+	st	@acc[4],[$rp+16]
+	srl	@acc[7],1,@acc[7]
+	or	@acc[6],$t6,@acc[6]
+	sll	$carry,31,$t7
+	st	@acc[5],[$rp+20]
+	or	@acc[7],$t7,@acc[7]
+	st	@acc[6],[$rp+24]
+	retl
+	st	@acc[7],[$rp+28]
+.type	__ecp_nistz256_div_by_2,#function
+.size	__ecp_nistz256_div_by_2,.-__ecp_nistz256_div_by_2
+___
+
+########################################################################
+# following subroutines are "literal" implementation of those found in
+# ecp_nistz256.c
+#
+########################################################################
+# void ecp_nistz256_point_double(P256_POINT *out,const P256_POINT *inp);
+#
+{
+my ($S,$M,$Zsqr,$tmp0)=map(32*$_,(0..3));
+# above map() describes stack layout with 4 temporary
+# 256-bit vectors on top.
+
+$code.=<<___;
+#ifdef __PIC__
+SPARC_PIC_THUNK(%g1)
+#endif
+
+.globl	ecp_nistz256_point_double
+.align	32
+ecp_nistz256_point_double:
+	SPARC_LOAD_ADDRESS_LEAF(OPENSSL_sparcv9cap_P,%g1,%g5)
+	ld	[%g1],%g1		! OPENSSL_sparcv9cap_P[0]
+	and	%g1,(SPARCV9_VIS3|SPARCV9_64BIT_STACK),%g1
+	cmp	%g1,(SPARCV9_VIS3|SPARCV9_64BIT_STACK)
+	be	ecp_nistz256_point_double_vis3
+	nop
+
+	save	%sp,-STACK_FRAME-32*4,%sp
+
+	mov	$rp,$rp_real
+	mov	$ap,$ap_real
+
+.Lpoint_double_shortcut:
+	ld	[$ap+32],@acc[0]
+	ld	[$ap+32+4],@acc[1]
+	ld	[$ap+32+8],@acc[2]
+	ld	[$ap+32+12],@acc[3]
+	ld	[$ap+32+16],@acc[4]
+	ld	[$ap+32+20],@acc[5]
+	ld	[$ap+32+24],@acc[6]
+	ld	[$ap+32+28],@acc[7]
+	call	__ecp_nistz256_mul_by_2	! p256_mul_by_2(S, in_y);
+	add	%sp,LOCALS+$S,$rp
+
+	add	$ap_real,64,$bp
+	add	$ap_real,64,$ap
+	call	__ecp_nistz256_mul_mont	! p256_sqr_mont(Zsqr, in_z);
+	add	%sp,LOCALS+$Zsqr,$rp
+
+	add	$ap_real,0,$bp
+	call	__ecp_nistz256_add	! p256_add(M, Zsqr, in_x);
+	add	%sp,LOCALS+$M,$rp
+
+	add	%sp,LOCALS+$S,$bp
+	add	%sp,LOCALS+$S,$ap
+	call	__ecp_nistz256_mul_mont	! p256_sqr_mont(S, S);
+	add	%sp,LOCALS+$S,$rp
+
+	ld	[$ap_real],@acc[0]
+	add	%sp,LOCALS+$Zsqr,$bp
+	ld	[$ap_real+4],@acc[1]
+	ld	[$ap_real+8],@acc[2]
+	ld	[$ap_real+12],@acc[3]
+	ld	[$ap_real+16],@acc[4]
+	ld	[$ap_real+20],@acc[5]
+	ld	[$ap_real+24],@acc[6]
+	ld	[$ap_real+28],@acc[7]
+	call	__ecp_nistz256_sub_from	! p256_sub(Zsqr, in_x, Zsqr);
+	add	%sp,LOCALS+$Zsqr,$rp
+
+	add	$ap_real,32,$bp
+	add	$ap_real,64,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(tmp0, in_z, in_y);
+	add	%sp,LOCALS+$tmp0,$rp
+
+	call	__ecp_nistz256_mul_by_2	! p256_mul_by_2(res_z, tmp0);
+	add	$rp_real,64,$rp
+
+	add	%sp,LOCALS+$Zsqr,$bp
+	add	%sp,LOCALS+$M,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(M, M, Zsqr);
+	add	%sp,LOCALS+$M,$rp
+
+	call	__ecp_nistz256_mul_by_3	! p256_mul_by_3(M, M);
+	add	%sp,LOCALS+$M,$rp
+
+	add	%sp,LOCALS+$S,$bp
+	add	%sp,LOCALS+$S,$ap
+	call	__ecp_nistz256_mul_mont	! p256_sqr_mont(tmp0, S);
+	add	%sp,LOCALS+$tmp0,$rp
+
+	call	__ecp_nistz256_div_by_2	! p256_div_by_2(res_y, tmp0);
+	add	$rp_real,32,$rp
+
+	add	$ap_real,0,$bp
+	add	%sp,LOCALS+$S,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(S, S, in_x);
+	add	%sp,LOCALS+$S,$rp
+
+	call	__ecp_nistz256_mul_by_2	! p256_mul_by_2(tmp0, S);
+	add	%sp,LOCALS+$tmp0,$rp
+
+	add	%sp,LOCALS+$M,$bp
+	add	%sp,LOCALS+$M,$ap
+	call	__ecp_nistz256_mul_mont	! p256_sqr_mont(res_x, M);
+	add	$rp_real,0,$rp
+
+	add	%sp,LOCALS+$tmp0,$bp
+	call	__ecp_nistz256_sub_from	! p256_sub(res_x, res_x, tmp0);
+	add	$rp_real,0,$rp
+
+	add	%sp,LOCALS+$S,$bp
+	call	__ecp_nistz256_sub_morf	! p256_sub(S, S, res_x);
+	add	%sp,LOCALS+$S,$rp
+
+	add	%sp,LOCALS+$M,$bp
+	add	%sp,LOCALS+$S,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(S, S, M);
+	add	%sp,LOCALS+$S,$rp
+
+	add	$rp_real,32,$bp
+	call	__ecp_nistz256_sub_from	! p256_sub(res_y, S, res_y);
+	add	$rp_real,32,$rp
+
+	ret
+	restore
+.type	ecp_nistz256_point_double,#function
+.size	ecp_nistz256_point_double,.-ecp_nistz256_point_double
+___
+}
+
+########################################################################
+# void ecp_nistz256_point_add(P256_POINT *out,const P256_POINT *in1,
+#			      const P256_POINT *in2);
+{
+my ($res_x,$res_y,$res_z,
+    $H,$Hsqr,$R,$Rsqr,$Hcub,
+    $U1,$U2,$S1,$S2)=map(32*$_,(0..11));
+my ($Z1sqr, $Z2sqr) = ($Hsqr, $Rsqr);
+
+# above map() describes stack layout with 12 temporary
+# 256-bit vectors on top. Then we reserve some space for
+# !in1infty, !in2infty, result of check for zero and return pointer.
+
+my $bp_real=$rp_real;
+
+$code.=<<___;
+.globl	ecp_nistz256_point_add
+.align	32
+ecp_nistz256_point_add:
+	SPARC_LOAD_ADDRESS_LEAF(OPENSSL_sparcv9cap_P,%g1,%g5)
+	ld	[%g1],%g1		! OPENSSL_sparcv9cap_P[0]
+	and	%g1,(SPARCV9_VIS3|SPARCV9_64BIT_STACK),%g1
+	cmp	%g1,(SPARCV9_VIS3|SPARCV9_64BIT_STACK)
+	be	ecp_nistz256_point_add_vis3
+	nop
+
+	save	%sp,-STACK_FRAME-32*12-32,%sp
+
+	stx	$rp,[%fp+STACK_BIAS-8]	! off-load $rp
+	mov	$ap,$ap_real
+	mov	$bp,$bp_real
+
+	ld	[$bp+64],$t0		! in2_z
+	ld	[$bp+64+4],$t1
+	ld	[$bp+64+8],$t2
+	ld	[$bp+64+12],$t3
+	ld	[$bp+64+16],$t4
+	ld	[$bp+64+20],$t5
+	ld	[$bp+64+24],$t6
+	ld	[$bp+64+28],$t7
+	or	$t1,$t0,$t0
+	or	$t3,$t2,$t2
+	or	$t5,$t4,$t4
+	or	$t7,$t6,$t6
+	or	$t2,$t0,$t0
+	or	$t6,$t4,$t4
+	or	$t4,$t0,$t0		! !in2infty
+	movrnz	$t0,-1,$t0
+	st	$t0,[%fp+STACK_BIAS-12]
+
+	ld	[$ap+64],$t0		! in1_z
+	ld	[$ap+64+4],$t1
+	ld	[$ap+64+8],$t2
+	ld	[$ap+64+12],$t3
+	ld	[$ap+64+16],$t4
+	ld	[$ap+64+20],$t5
+	ld	[$ap+64+24],$t6
+	ld	[$ap+64+28],$t7
+	or	$t1,$t0,$t0
+	or	$t3,$t2,$t2
+	or	$t5,$t4,$t4
+	or	$t7,$t6,$t6
+	or	$t2,$t0,$t0
+	or	$t6,$t4,$t4
+	or	$t4,$t0,$t0		! !in1infty
+	movrnz	$t0,-1,$t0
+	st	$t0,[%fp+STACK_BIAS-16]
+
+	add	$bp_real,64,$bp
+	add	$bp_real,64,$ap
+	call	__ecp_nistz256_mul_mont	! p256_sqr_mont(Z2sqr, in2_z);
+	add	%sp,LOCALS+$Z2sqr,$rp
+
+	add	$ap_real,64,$bp
+	add	$ap_real,64,$ap
+	call	__ecp_nistz256_mul_mont	! p256_sqr_mont(Z1sqr, in1_z);
+	add	%sp,LOCALS+$Z1sqr,$rp
+
+	add	$bp_real,64,$bp
+	add	%sp,LOCALS+$Z2sqr,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(S1, Z2sqr, in2_z);
+	add	%sp,LOCALS+$S1,$rp
+
+	add	$ap_real,64,$bp
+	add	%sp,LOCALS+$Z1sqr,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(S2, Z1sqr, in1_z);
+	add	%sp,LOCALS+$S2,$rp
+
+	add	$ap_real,32,$bp
+	add	%sp,LOCALS+$S1,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(S1, S1, in1_y);
+	add	%sp,LOCALS+$S1,$rp
+
+	add	$bp_real,32,$bp
+	add	%sp,LOCALS+$S2,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(S2, S2, in2_y);
+	add	%sp,LOCALS+$S2,$rp
+
+	add	%sp,LOCALS+$S1,$bp
+	call	__ecp_nistz256_sub_from	! p256_sub(R, S2, S1);
+	add	%sp,LOCALS+$R,$rp
+
+	or	@acc[1],@acc[0],@acc[0]	! see if result is zero
+	or	@acc[3],@acc[2],@acc[2]
+	or	@acc[5],@acc[4],@acc[4]
+	or	@acc[7],@acc[6],@acc[6]
+	or	@acc[2],@acc[0],@acc[0]
+	or	@acc[6],@acc[4],@acc[4]
+	or	@acc[4],@acc[0],@acc[0]
+	st	@acc[0],[%fp+STACK_BIAS-20]
+
+	add	$ap_real,0,$bp
+	add	%sp,LOCALS+$Z2sqr,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(U1, in1_x, Z2sqr);
+	add	%sp,LOCALS+$U1,$rp
+
+	add	$bp_real,0,$bp
+	add	%sp,LOCALS+$Z1sqr,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(U2, in2_x, Z1sqr);
+	add	%sp,LOCALS+$U2,$rp
+
+	add	%sp,LOCALS+$U1,$bp
+	call	__ecp_nistz256_sub_from	! p256_sub(H, U2, U1);
+	add	%sp,LOCALS+$H,$rp
+
+	or	@acc[1],@acc[0],@acc[0]	! see if result is zero
+	or	@acc[3],@acc[2],@acc[2]
+	or	@acc[5],@acc[4],@acc[4]
+	or	@acc[7],@acc[6],@acc[6]
+	or	@acc[2],@acc[0],@acc[0]
+	or	@acc[6],@acc[4],@acc[4]
+	orcc	@acc[4],@acc[0],@acc[0]
+
+	bne,pt	%icc,.Ladd_proceed	! is_equal(U1,U2)?
+	nop
+
+	ld	[%fp+STACK_BIAS-12],$t0
+	ld	[%fp+STACK_BIAS-16],$t1
+	ld	[%fp+STACK_BIAS-20],$t2
+	andcc	$t0,$t1,%g0
+	be,pt	%icc,.Ladd_proceed	! (in1infty || in2infty)?
+	nop
+	andcc	$t2,$t2,%g0
+	be,pt	%icc,.Ladd_double	! is_equal(S1,S2)?
+	nop
+
+	ldx	[%fp+STACK_BIAS-8],$rp
+	st	%g0,[$rp]
+	st	%g0,[$rp+4]
+	st	%g0,[$rp+8]
+	st	%g0,[$rp+12]
+	st	%g0,[$rp+16]
+	st	%g0,[$rp+20]
+	st	%g0,[$rp+24]
+	st	%g0,[$rp+28]
+	st	%g0,[$rp+32]
+	st	%g0,[$rp+32+4]
+	st	%g0,[$rp+32+8]
+	st	%g0,[$rp+32+12]
+	st	%g0,[$rp+32+16]
+	st	%g0,[$rp+32+20]
+	st	%g0,[$rp+32+24]
+	st	%g0,[$rp+32+28]
+	st	%g0,[$rp+64]
+	st	%g0,[$rp+64+4]
+	st	%g0,[$rp+64+8]
+	st	%g0,[$rp+64+12]
+	st	%g0,[$rp+64+16]
+	st	%g0,[$rp+64+20]
+	st	%g0,[$rp+64+24]
+	st	%g0,[$rp+64+28]
+	b	.Ladd_done
+	nop
+
+.align	16
+.Ladd_double:
+	ldx	[%fp+STACK_BIAS-8],$rp_real
+	mov	$ap_real,$ap
+	b	.Lpoint_double_shortcut
+	add	%sp,32*(12-4)+32,%sp	! difference in frame sizes
+
+.align	16
+.Ladd_proceed:
+	add	%sp,LOCALS+$R,$bp
+	add	%sp,LOCALS+$R,$ap
+	call	__ecp_nistz256_mul_mont	! p256_sqr_mont(Rsqr, R);
+	add	%sp,LOCALS+$Rsqr,$rp
+
+	add	$ap_real,64,$bp
+	add	%sp,LOCALS+$H,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(res_z, H, in1_z);
+	add	%sp,LOCALS+$res_z,$rp
+
+	add	%sp,LOCALS+$H,$bp
+	add	%sp,LOCALS+$H,$ap
+	call	__ecp_nistz256_mul_mont	! p256_sqr_mont(Hsqr, H);
+	add	%sp,LOCALS+$Hsqr,$rp
+
+	add	$bp_real,64,$bp
+	add	%sp,LOCALS+$res_z,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(res_z, res_z, in2_z);
+	add	%sp,LOCALS+$res_z,$rp
+
+	add	%sp,LOCALS+$H,$bp
+	add	%sp,LOCALS+$Hsqr,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(Hcub, Hsqr, H);
+	add	%sp,LOCALS+$Hcub,$rp
+
+	add	%sp,LOCALS+$U1,$bp
+	add	%sp,LOCALS+$Hsqr,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(U2, U1, Hsqr);
+	add	%sp,LOCALS+$U2,$rp
+
+	call	__ecp_nistz256_mul_by_2	! p256_mul_by_2(Hsqr, U2);
+	add	%sp,LOCALS+$Hsqr,$rp
+
+	add	%sp,LOCALS+$Rsqr,$bp
+	call	__ecp_nistz256_sub_morf	! p256_sub(res_x, Rsqr, Hsqr);
+	add	%sp,LOCALS+$res_x,$rp
+
+	add	%sp,LOCALS+$Hcub,$bp
+	call	__ecp_nistz256_sub_from	!  p256_sub(res_x, res_x, Hcub);
+	add	%sp,LOCALS+$res_x,$rp
+
+	add	%sp,LOCALS+$U2,$bp
+	call	__ecp_nistz256_sub_morf	! p256_sub(res_y, U2, res_x);
+	add	%sp,LOCALS+$res_y,$rp
+
+	add	%sp,LOCALS+$Hcub,$bp
+	add	%sp,LOCALS+$S1,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(S2, S1, Hcub);
+	add	%sp,LOCALS+$S2,$rp
+
+	add	%sp,LOCALS+$R,$bp
+	add	%sp,LOCALS+$res_y,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(res_y, res_y, R);
+	add	%sp,LOCALS+$res_y,$rp
+
+	add	%sp,LOCALS+$S2,$bp
+	call	__ecp_nistz256_sub_from	! p256_sub(res_y, res_y, S2);
+	add	%sp,LOCALS+$res_y,$rp
+
+	ld	[%fp+STACK_BIAS-16],$t1	! !in1infty
+	ld	[%fp+STACK_BIAS-12],$t2	! !in2infty
+	ldx	[%fp+STACK_BIAS-8],$rp
+___
+for($i=0;$i<96;$i+=8) {			# conditional moves
+$code.=<<___;
+	ld	[%sp+LOCALS+$i],@acc[0]		! res
+	ld	[%sp+LOCALS+$i+4],@acc[1]
+	ld	[$bp_real+$i],@acc[2]		! in2
+	ld	[$bp_real+$i+4],@acc[3]
+	ld	[$ap_real+$i],@acc[4]		! in1
+	ld	[$ap_real+$i+4],@acc[5]
+	movrz	$t1,@acc[2],@acc[0]
+	movrz	$t1,@acc[3],@acc[1]
+	movrz	$t2,@acc[4],@acc[0]
+	movrz	$t2,@acc[5],@acc[1]
+	st	@acc[0],[$rp+$i]
+	st	@acc[1],[$rp+$i+4]
+___
+}
+$code.=<<___;
+.Ladd_done:
+	ret
+	restore
+.type	ecp_nistz256_point_add,#function
+.size	ecp_nistz256_point_add,.-ecp_nistz256_point_add
+___
+}
+
+########################################################################
+# void ecp_nistz256_point_add_affine(P256_POINT *out,const P256_POINT *in1,
+#				     const P256_POINT_AFFINE *in2);
+{
+my ($res_x,$res_y,$res_z,
+    $U2,$S2,$H,$R,$Hsqr,$Hcub,$Rsqr)=map(32*$_,(0..9));
+my $Z1sqr = $S2;
+# above map() describes stack layout with 10 temporary
+# 256-bit vectors on top. Then we reserve some space for
+# !in1infty, !in2infty, result of check for zero and return pointer.
+
+my @ONE_mont=(1,0,0,-1,-1,-1,-2,0);
+my $bp_real=$rp_real;
+
+$code.=<<___;
+.globl	ecp_nistz256_point_add_affine
+.align	32
+ecp_nistz256_point_add_affine:
+	SPARC_LOAD_ADDRESS_LEAF(OPENSSL_sparcv9cap_P,%g1,%g5)
+	ld	[%g1],%g1		! OPENSSL_sparcv9cap_P[0]
+	and	%g1,(SPARCV9_VIS3|SPARCV9_64BIT_STACK),%g1
+	cmp	%g1,(SPARCV9_VIS3|SPARCV9_64BIT_STACK)
+	be	ecp_nistz256_point_add_affine_vis3
+	nop
+
+	save	%sp,-STACK_FRAME-32*10-32,%sp
+
+	stx	$rp,[%fp+STACK_BIAS-8]	! off-load $rp
+	mov	$ap,$ap_real
+	mov	$bp,$bp_real
+
+	ld	[$ap+64],$t0		! in1_z
+	ld	[$ap+64+4],$t1
+	ld	[$ap+64+8],$t2
+	ld	[$ap+64+12],$t3
+	ld	[$ap+64+16],$t4
+	ld	[$ap+64+20],$t5
+	ld	[$ap+64+24],$t6
+	ld	[$ap+64+28],$t7
+	or	$t1,$t0,$t0
+	or	$t3,$t2,$t2
+	or	$t5,$t4,$t4
+	or	$t7,$t6,$t6
+	or	$t2,$t0,$t0
+	or	$t6,$t4,$t4
+	or	$t4,$t0,$t0		! !in1infty
+	movrnz	$t0,-1,$t0
+	st	$t0,[%fp+STACK_BIAS-16]
+
+	ld	[$bp],@acc[0]		! in2_x
+	ld	[$bp+4],@acc[1]
+	ld	[$bp+8],@acc[2]
+	ld	[$bp+12],@acc[3]
+	ld	[$bp+16],@acc[4]
+	ld	[$bp+20],@acc[5]
+	ld	[$bp+24],@acc[6]
+	ld	[$bp+28],@acc[7]
+	ld	[$bp+32],$t0		! in2_y
+	ld	[$bp+32+4],$t1
+	ld	[$bp+32+8],$t2
+	ld	[$bp+32+12],$t3
+	ld	[$bp+32+16],$t4
+	ld	[$bp+32+20],$t5
+	ld	[$bp+32+24],$t6
+	ld	[$bp+32+28],$t7
+	or	@acc[1],@acc[0],@acc[0]
+	or	@acc[3],@acc[2],@acc[2]
+	or	@acc[5],@acc[4],@acc[4]
+	or	@acc[7],@acc[6],@acc[6]
+	or	@acc[2],@acc[0],@acc[0]
+	or	@acc[6],@acc[4],@acc[4]
+	or	@acc[4],@acc[0],@acc[0]
+	or	$t1,$t0,$t0
+	or	$t3,$t2,$t2
+	or	$t5,$t4,$t4
+	or	$t7,$t6,$t6
+	or	$t2,$t0,$t0
+	or	$t6,$t4,$t4
+	or	$t4,$t0,$t0
+	or	@acc[0],$t0,$t0		! !in2infty
+	movrnz	$t0,-1,$t0
+	st	$t0,[%fp+STACK_BIAS-12]
+
+	add	$ap_real,64,$bp
+	add	$ap_real,64,$ap
+	call	__ecp_nistz256_mul_mont	! p256_sqr_mont(Z1sqr, in1_z);
+	add	%sp,LOCALS+$Z1sqr,$rp
+
+	add	$bp_real,0,$bp
+	add	%sp,LOCALS+$Z1sqr,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(U2, Z1sqr, in2_x);
+	add	%sp,LOCALS+$U2,$rp
+
+	add	$ap_real,0,$bp
+	call	__ecp_nistz256_sub_from	! p256_sub(H, U2, in1_x);
+	add	%sp,LOCALS+$H,$rp
+
+	add	$ap_real,64,$bp
+	add	%sp,LOCALS+$Z1sqr,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(S2, Z1sqr, in1_z);
+	add	%sp,LOCALS+$S2,$rp
+
+	add	$ap_real,64,$bp
+	add	%sp,LOCALS+$H,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(res_z, H, in1_z);
+	add	%sp,LOCALS+$res_z,$rp
+
+	add	$bp_real,32,$bp
+	add	%sp,LOCALS+$S2,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(S2, S2, in2_y);
+	add	%sp,LOCALS+$S2,$rp
+
+	add	$ap_real,32,$bp
+	call	__ecp_nistz256_sub_from	! p256_sub(R, S2, in1_y);
+	add	%sp,LOCALS+$R,$rp
+
+	add	%sp,LOCALS+$H,$bp
+	add	%sp,LOCALS+$H,$ap
+	call	__ecp_nistz256_mul_mont	! p256_sqr_mont(Hsqr, H);
+	add	%sp,LOCALS+$Hsqr,$rp
+
+	add	%sp,LOCALS+$R,$bp
+	add	%sp,LOCALS+$R,$ap
+	call	__ecp_nistz256_mul_mont	! p256_sqr_mont(Rsqr, R);
+	add	%sp,LOCALS+$Rsqr,$rp
+
+	add	%sp,LOCALS+$H,$bp
+	add	%sp,LOCALS+$Hsqr,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(Hcub, Hsqr, H);
+	add	%sp,LOCALS+$Hcub,$rp
+
+	add	$ap_real,0,$bp
+	add	%sp,LOCALS+$Hsqr,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(U2, in1_x, Hsqr);
+	add	%sp,LOCALS+$U2,$rp
+
+	call	__ecp_nistz256_mul_by_2	! p256_mul_by_2(Hsqr, U2);
+	add	%sp,LOCALS+$Hsqr,$rp
+
+	add	%sp,LOCALS+$Rsqr,$bp
+	call	__ecp_nistz256_sub_morf	! p256_sub(res_x, Rsqr, Hsqr);
+	add	%sp,LOCALS+$res_x,$rp
+
+	add	%sp,LOCALS+$Hcub,$bp
+	call	__ecp_nistz256_sub_from	!  p256_sub(res_x, res_x, Hcub);
+	add	%sp,LOCALS+$res_x,$rp
+
+	add	%sp,LOCALS+$U2,$bp
+	call	__ecp_nistz256_sub_morf	! p256_sub(res_y, U2, res_x);
+	add	%sp,LOCALS+$res_y,$rp
+
+	add	$ap_real,32,$bp
+	add	%sp,LOCALS+$Hcub,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(S2, in1_y, Hcub);
+	add	%sp,LOCALS+$S2,$rp
+
+	add	%sp,LOCALS+$R,$bp
+	add	%sp,LOCALS+$res_y,$ap
+	call	__ecp_nistz256_mul_mont	! p256_mul_mont(res_y, res_y, R);
+	add	%sp,LOCALS+$res_y,$rp
+
+	add	%sp,LOCALS+$S2,$bp
+	call	__ecp_nistz256_sub_from	! p256_sub(res_y, res_y, S2);
+	add	%sp,LOCALS+$res_y,$rp
+
+	ld	[%fp+STACK_BIAS-16],$t1	! !in1infty
+	ld	[%fp+STACK_BIAS-12],$t2	! !in2infty
+	ldx	[%fp+STACK_BIAS-8],$rp
+___
+for($i=0;$i<64;$i+=8) {			# conditional moves
+$code.=<<___;
+	ld	[%sp+LOCALS+$i],@acc[0]		! res
+	ld	[%sp+LOCALS+$i+4],@acc[1]
+	ld	[$bp_real+$i],@acc[2]		! in2
+	ld	[$bp_real+$i+4],@acc[3]
+	ld	[$ap_real+$i],@acc[4]		! in1
+	ld	[$ap_real+$i+4],@acc[5]
+	movrz	$t1,@acc[2],@acc[0]
+	movrz	$t1,@acc[3],@acc[1]
+	movrz	$t2,@acc[4],@acc[0]
+	movrz	$t2,@acc[5],@acc[1]
+	st	@acc[0],[$rp+$i]
+	st	@acc[1],[$rp+$i+4]
+___
+}
+for(;$i<96;$i+=8) {
+my $j=($i-64)/4;
+$code.=<<___;
+	ld	[%sp+LOCALS+$i],@acc[0]		! res
+	ld	[%sp+LOCALS+$i+4],@acc[1]
+	ld	[$ap_real+$i],@acc[4]		! in1
+	ld	[$ap_real+$i+4],@acc[5]
+	movrz	$t1,@ONE_mont[$j],@acc[0]
+	movrz	$t1,@ONE_mont[$j+1],@acc[1]
+	movrz	$t2,@acc[4],@acc[0]
+	movrz	$t2,@acc[5],@acc[1]
+	st	@acc[0],[$rp+$i]
+	st	@acc[1],[$rp+$i+4]
+___
+}
+$code.=<<___;
+	ret
+	restore
+.type	ecp_nistz256_point_add_affine,#function
+.size	ecp_nistz256_point_add_affine,.-ecp_nistz256_point_add_affine
+___
+}								}}}
+{{{
+my ($out,$inp,$index)=map("%i$_",(0..2));
+my $mask="%o0";
+
+$code.=<<___;
+! void	ecp_nistz256_scatter_w5(void *%i0,const P256_POINT *%i1,
+!					  int %i2);
+.globl	ecp_nistz256_scatter_w5
+.align	32
+ecp_nistz256_scatter_w5:
+	save	%sp,-STACK_FRAME,%sp
+
+	sll	$index,2,$index
+	add	$out,$index,$out
+
+	ld	[$inp],%l0		! X
+	ld	[$inp+4],%l1
+	ld	[$inp+8],%l2
+	ld	[$inp+12],%l3
+	ld	[$inp+16],%l4
+	ld	[$inp+20],%l5
+	ld	[$inp+24],%l6
+	ld	[$inp+28],%l7
+	add	$inp,32,$inp
+	st	%l0,[$out+64*0-4]
+	st	%l1,[$out+64*1-4]
+	st	%l2,[$out+64*2-4]
+	st	%l3,[$out+64*3-4]
+	st	%l4,[$out+64*4-4]
+	st	%l5,[$out+64*5-4]
+	st	%l6,[$out+64*6-4]
+	st	%l7,[$out+64*7-4]
+	add	$out,64*8,$out
+
+	ld	[$inp],%l0		! Y
+	ld	[$inp+4],%l1
+	ld	[$inp+8],%l2
+	ld	[$inp+12],%l3
+	ld	[$inp+16],%l4
+	ld	[$inp+20],%l5
+	ld	[$inp+24],%l6
+	ld	[$inp+28],%l7
+	add	$inp,32,$inp
+	st	%l0,[$out+64*0-4]
+	st	%l1,[$out+64*1-4]
+	st	%l2,[$out+64*2-4]
+	st	%l3,[$out+64*3-4]
+	st	%l4,[$out+64*4-4]
+	st	%l5,[$out+64*5-4]
+	st	%l6,[$out+64*6-4]
+	st	%l7,[$out+64*7-4]
+	add	$out,64*8,$out
+
+	ld	[$inp],%l0		! Z
+	ld	[$inp+4],%l1
+	ld	[$inp+8],%l2
+	ld	[$inp+12],%l3
+	ld	[$inp+16],%l4
+	ld	[$inp+20],%l5
+	ld	[$inp+24],%l6
+	ld	[$inp+28],%l7
+	st	%l0,[$out+64*0-4]
+	st	%l1,[$out+64*1-4]
+	st	%l2,[$out+64*2-4]
+	st	%l3,[$out+64*3-4]
+	st	%l4,[$out+64*4-4]
+	st	%l5,[$out+64*5-4]
+	st	%l6,[$out+64*6-4]
+	st	%l7,[$out+64*7-4]
+
+	ret
+	restore
+.type	ecp_nistz256_scatter_w5,#function
+.size	ecp_nistz256_scatter_w5,.-ecp_nistz256_scatter_w5
+
+! void	ecp_nistz256_gather_w5(P256_POINT *%i0,const void *%i1,
+!					       int %i2);
+.globl	ecp_nistz256_gather_w5
+.align	32
+ecp_nistz256_gather_w5:
+	save	%sp,-STACK_FRAME,%sp
+
+	neg	$index,$mask
+	srax	$mask,63,$mask
+
+	add	$index,$mask,$index
+	sll	$index,2,$index
+	add	$inp,$index,$inp
+
+	ld	[$inp+64*0],%l0
+	ld	[$inp+64*1],%l1
+	ld	[$inp+64*2],%l2
+	ld	[$inp+64*3],%l3
+	ld	[$inp+64*4],%l4
+	ld	[$inp+64*5],%l5
+	ld	[$inp+64*6],%l6
+	ld	[$inp+64*7],%l7
+	add	$inp,64*8,$inp
+	and	%l0,$mask,%l0
+	and	%l1,$mask,%l1
+	st	%l0,[$out]		! X
+	and	%l2,$mask,%l2
+	st	%l1,[$out+4]
+	and	%l3,$mask,%l3
+	st	%l2,[$out+8]
+	and	%l4,$mask,%l4
+	st	%l3,[$out+12]
+	and	%l5,$mask,%l5
+	st	%l4,[$out+16]
+	and	%l6,$mask,%l6
+	st	%l5,[$out+20]
+	and	%l7,$mask,%l7
+	st	%l6,[$out+24]
+	st	%l7,[$out+28]
+	add	$out,32,$out
+
+	ld	[$inp+64*0],%l0
+	ld	[$inp+64*1],%l1
+	ld	[$inp+64*2],%l2
+	ld	[$inp+64*3],%l3
+	ld	[$inp+64*4],%l4
+	ld	[$inp+64*5],%l5
+	ld	[$inp+64*6],%l6
+	ld	[$inp+64*7],%l7
+	add	$inp,64*8,$inp
+	and	%l0,$mask,%l0
+	and	%l1,$mask,%l1
+	st	%l0,[$out]		! Y
+	and	%l2,$mask,%l2
+	st	%l1,[$out+4]
+	and	%l3,$mask,%l3
+	st	%l2,[$out+8]
+	and	%l4,$mask,%l4
+	st	%l3,[$out+12]
+	and	%l5,$mask,%l5
+	st	%l4,[$out+16]
+	and	%l6,$mask,%l6
+	st	%l5,[$out+20]
+	and	%l7,$mask,%l7
+	st	%l6,[$out+24]
+	st	%l7,[$out+28]
+	add	$out,32,$out
+
+	ld	[$inp+64*0],%l0
+	ld	[$inp+64*1],%l1
+	ld	[$inp+64*2],%l2
+	ld	[$inp+64*3],%l3
+	ld	[$inp+64*4],%l4
+	ld	[$inp+64*5],%l5
+	ld	[$inp+64*6],%l6
+	ld	[$inp+64*7],%l7
+	and	%l0,$mask,%l0
+	and	%l1,$mask,%l1
+	st	%l0,[$out]		! Z
+	and	%l2,$mask,%l2
+	st	%l1,[$out+4]
+	and	%l3,$mask,%l3
+	st	%l2,[$out+8]
+	and	%l4,$mask,%l4
+	st	%l3,[$out+12]
+	and	%l5,$mask,%l5
+	st	%l4,[$out+16]
+	and	%l6,$mask,%l6
+	st	%l5,[$out+20]
+	and	%l7,$mask,%l7
+	st	%l6,[$out+24]
+	st	%l7,[$out+28]
+
+	ret
+	restore
+.type	ecp_nistz256_gather_w5,#function
+.size	ecp_nistz256_gather_w5,.-ecp_nistz256_gather_w5
+
+! void	ecp_nistz256_scatter_w7(void *%i0,const P256_POINT_AFFINE *%i1,
+!					  int %i2);
+.globl	ecp_nistz256_scatter_w7
+.align	32
+ecp_nistz256_scatter_w7:
+	save	%sp,-STACK_FRAME,%sp
+	nop
+	add	$out,$index,$out
+	mov	64/4,$index
+.Loop_scatter_w7:
+	ld	[$inp],%l0
+	add	$inp,4,$inp
+	subcc	$index,1,$index
+	stb	%l0,[$out+64*0]
+	srl	%l0,8,%l1
+	stb	%l1,[$out+64*1]
+	srl	%l0,16,%l2
+	stb	%l2,[$out+64*2]
+	srl	%l0,24,%l3
+	stb	%l3,[$out+64*3]
+	bne	.Loop_scatter_w7
+	add	$out,64*4,$out
+
+	ret
+	restore
+.type	ecp_nistz256_scatter_w7,#function
+.size	ecp_nistz256_scatter_w7,.-ecp_nistz256_scatter_w7
+
+! void	ecp_nistz256_gather_w7(P256_POINT_AFFINE *%i0,const void *%i1,
+!						      int %i2);
+.globl	ecp_nistz256_gather_w7
+.align	32
+ecp_nistz256_gather_w7:
+	save	%sp,-STACK_FRAME,%sp
+
+	neg	$index,$mask
+	srax	$mask,63,$mask
+
+	add	$index,$mask,$index
+	add	$inp,$index,$inp
+	mov	64/4,$index
+
+.Loop_gather_w7:
+	ldub	[$inp+64*0],%l0
+	prefetch [$inp+3840+64*0],1
+	subcc	$index,1,$index
+	ldub	[$inp+64*1],%l1
+	prefetch [$inp+3840+64*1],1
+	ldub	[$inp+64*2],%l2
+	prefetch [$inp+3840+64*2],1
+	ldub	[$inp+64*3],%l3
+	prefetch [$inp+3840+64*3],1
+	add	$inp,64*4,$inp
+	sll	%l1,8,%l1
+	sll	%l2,16,%l2
+	or	%l0,%l1,%l0
+	sll	%l3,24,%l3
+	or	%l0,%l2,%l0
+	or	%l0,%l3,%l0
+	and	%l0,$mask,%l0
+	st	%l0,[$out]
+	bne	.Loop_gather_w7
+	add	$out,4,$out
+
+	ret
+	restore
+.type	ecp_nistz256_gather_w7,#function
+.size	ecp_nistz256_gather_w7,.-ecp_nistz256_gather_w7
+___
+}}}
+{{{
+########################################################################
+# Following subroutines are VIS3 counterparts of those above that
+# implement ones found in ecp_nistz256.c. Key difference is that they
+# use 128-bit multiplication and addition with 64-bit carry, and in order
+# to do that they perform conversion from uin32_t[8] to uint64_t[4] upon
+# entry and vice versa on return.
+#
+my ($rp,$ap,$bp)=map("%i$_",(0..2));
+my ($t0,$t1,$t2,$t3,$a0,$a1,$a2,$a3)=map("%l$_",(0..7));
+my ($acc0,$acc1,$acc2,$acc3,$acc4,$acc5)=map("%o$_",(0..5));
+my ($bi,$poly1,$poly3,$minus1)=(map("%i$_",(3..5)),"%g1");
+my ($rp_real,$ap_real)=("%g2","%g3");
+my ($acc6,$acc7)=($bp,$bi);	# used in squaring
+
+$code.=<<___;
+.align	32
+__ecp_nistz256_mul_by_2_vis3:
+	addcc	$acc0,$acc0,$acc0
+	addxccc	$acc1,$acc1,$acc1
+	addxccc	$acc2,$acc2,$acc2
+	addxccc	$acc3,$acc3,$acc3
+	b	.Lreduce_by_sub_vis3
+	addxc	%g0,%g0,$acc4		! did it carry?
+.type	__ecp_nistz256_mul_by_2_vis3,#function
+.size	__ecp_nistz256_mul_by_2_vis3,.-__ecp_nistz256_mul_by_2_vis3
+
+.align	32
+__ecp_nistz256_add_vis3:
+	ldx	[$bp+0],$t0
+	ldx	[$bp+8],$t1
+	ldx	[$bp+16],$t2
+	ldx	[$bp+24],$t3
+
+__ecp_nistz256_add_noload_vis3:
+
+	addcc	$t0,$acc0,$acc0
+	addxccc	$t1,$acc1,$acc1
+	addxccc	$t2,$acc2,$acc2
+	addxccc	$t3,$acc3,$acc3
+	addxc	%g0,%g0,$acc4		! did it carry?
+
+.Lreduce_by_sub_vis3:
+
+	addcc	$acc0,1,$t0		! add -modulus, i.e. subtract
+	addxccc	$acc1,$poly1,$t1
+	addxccc	$acc2,$minus1,$t2
+	addxccc	$acc3,$poly3,$t3
+	addxc	$acc4,$minus1,$acc4
+
+	movrz	$acc4,$t0,$acc0		! ret = borrow ? ret : ret-modulus
+	movrz	$acc4,$t1,$acc1
+	stx	$acc0,[$rp]
+	movrz	$acc4,$t2,$acc2
+	stx	$acc1,[$rp+8]
+	movrz	$acc4,$t3,$acc3
+	stx	$acc2,[$rp+16]
+	retl
+	stx	$acc3,[$rp+24]
+.type	__ecp_nistz256_add_vis3,#function
+.size	__ecp_nistz256_add_vis3,.-__ecp_nistz256_add_vis3
+
+! Trouble with subtraction is that there is no subtraction with 64-bit
+! borrow, only with 32-bit one. For this reason we "decompose" 64-bit
+! $acc0-$acc3 to 32-bit values and pick b[4] in 32-bit pieces. But
+! recall that SPARC is big-endian, which is why you'll observe that
+! b[4] is accessed as 4-0-12-8-20-16-28-24. And prior reduction we
+! "collect" result back to 64-bit $acc0-$acc3.
+.align	32
+__ecp_nistz256_sub_from_vis3:
+	ld	[$bp+4],$t0
+	ld	[$bp+0],$t1
+	ld	[$bp+12],$t2
+	ld	[$bp+8],$t3
+
+	srlx	$acc0,32,$acc4
+	not	$poly1,$poly1
+	srlx	$acc1,32,$acc5
+	subcc	$acc0,$t0,$acc0
+	ld	[$bp+20],$t0
+	subccc	$acc4,$t1,$acc4
+	ld	[$bp+16],$t1
+	subccc	$acc1,$t2,$acc1
+	ld	[$bp+28],$t2
+	and	$acc0,$poly1,$acc0
+	subccc	$acc5,$t3,$acc5
+	ld	[$bp+24],$t3
+	sllx	$acc4,32,$acc4
+	and	$acc1,$poly1,$acc1
+	sllx	$acc5,32,$acc5
+	or	$acc0,$acc4,$acc0
+	srlx	$acc2,32,$acc4
+	or	$acc1,$acc5,$acc1
+	srlx	$acc3,32,$acc5
+	subccc	$acc2,$t0,$acc2
+	subccc	$acc4,$t1,$acc4
+	subccc	$acc3,$t2,$acc3
+	and	$acc2,$poly1,$acc2
+	subccc	$acc5,$t3,$acc5
+	sllx	$acc4,32,$acc4
+	and	$acc3,$poly1,$acc3
+	sllx	$acc5,32,$acc5
+	or	$acc2,$acc4,$acc2
+	subc	%g0,%g0,$acc4		! did it borrow?
+	b	.Lreduce_by_add_vis3
+	or	$acc3,$acc5,$acc3
+.type	__ecp_nistz256_sub_from_vis3,#function
+.size	__ecp_nistz256_sub_from_vis3,.-__ecp_nistz256_sub_from_vis3
+
+.align	32
+__ecp_nistz256_sub_morf_vis3:
+	ld	[$bp+4],$t0
+	ld	[$bp+0],$t1
+	ld	[$bp+12],$t2
+	ld	[$bp+8],$t3
+
+	srlx	$acc0,32,$acc4
+	not	$poly1,$poly1
+	srlx	$acc1,32,$acc5
+	subcc	$t0,$acc0,$acc0
+	ld	[$bp+20],$t0
+	subccc	$t1,$acc4,$acc4
+	ld	[$bp+16],$t1
+	subccc	$t2,$acc1,$acc1
+	ld	[$bp+28],$t2
+	and	$acc0,$poly1,$acc0
+	subccc	$t3,$acc5,$acc5
+	ld	[$bp+24],$t3
+	sllx	$acc4,32,$acc4
+	and	$acc1,$poly1,$acc1
+	sllx	$acc5,32,$acc5
+	or	$acc0,$acc4,$acc0
+	srlx	$acc2,32,$acc4
+	or	$acc1,$acc5,$acc1
+	srlx	$acc3,32,$acc5
+	subccc	$t0,$acc2,$acc2
+	subccc	$t1,$acc4,$acc4
+	subccc	$t2,$acc3,$acc3
+	and	$acc2,$poly1,$acc2
+	subccc	$t3,$acc5,$acc5
+	sllx	$acc4,32,$acc4
+	and	$acc3,$poly1,$acc3
+	sllx	$acc5,32,$acc5
+	or	$acc2,$acc4,$acc2
+	subc	%g0,%g0,$acc4		! did it borrow?
+	or	$acc3,$acc5,$acc3
+
+.Lreduce_by_add_vis3:
+
+	addcc	$acc0,-1,$t0		! add modulus
+	not	$poly3,$t3
+	addxccc	$acc1,$poly1,$t1
+	not	$poly1,$poly1		! restore $poly1
+	addxccc	$acc2,%g0,$t2
+	addxc	$acc3,$t3,$t3
+
+	movrnz	$acc4,$t0,$acc0		! if a-b borrowed, ret = ret+mod
+	movrnz	$acc4,$t1,$acc1
+	stx	$acc0,[$rp]
+	movrnz	$acc4,$t2,$acc2
+	stx	$acc1,[$rp+8]
+	movrnz	$acc4,$t3,$acc3
+	stx	$acc2,[$rp+16]
+	retl
+	stx	$acc3,[$rp+24]
+.type	__ecp_nistz256_sub_morf_vis3,#function
+.size	__ecp_nistz256_sub_morf_vis3,.-__ecp_nistz256_sub_morf_vis3
+
+.align	32
+__ecp_nistz256_div_by_2_vis3:
+	! ret = (a is odd ? a+mod : a) >> 1
+
+	not	$poly1,$t1
+	not	$poly3,$t3
+	and	$acc0,1,$acc5
+	addcc	$acc0,-1,$t0		! add modulus
+	addxccc	$acc1,$t1,$t1
+	addxccc	$acc2,%g0,$t2
+	addxccc	$acc3,$t3,$t3
+	addxc	%g0,%g0,$acc4		! carry bit
+
+	movrnz	$acc5,$t0,$acc0
+	movrnz	$acc5,$t1,$acc1
+	movrnz	$acc5,$t2,$acc2
+	movrnz	$acc5,$t3,$acc3
+	movrz	$acc5,%g0,$acc4
+
+	! ret >>= 1
+
+	srlx	$acc0,1,$acc0
+	sllx	$acc1,63,$t0
+	srlx	$acc1,1,$acc1
+	or	$acc0,$t0,$acc0
+	sllx	$acc2,63,$t1
+	srlx	$acc2,1,$acc2
+	or	$acc1,$t1,$acc1
+	sllx	$acc3,63,$t2
+	stx	$acc0,[$rp]
+	srlx	$acc3,1,$acc3
+	or	$acc2,$t2,$acc2
+	sllx	$acc4,63,$t3		! don't forget carry bit
+	stx	$acc1,[$rp+8]
+	or	$acc3,$t3,$acc3
+	stx	$acc2,[$rp+16]
+	retl
+	stx	$acc3,[$rp+24]
+.type	__ecp_nistz256_div_by_2_vis3,#function
+.size	__ecp_nistz256_div_by_2_vis3,.-__ecp_nistz256_div_by_2_vis3
+
+! compared to __ecp_nistz256_mul_mont it's almost 4x smaller and
+! 4x faster [on T4]...
+.align	32
+__ecp_nistz256_mul_mont_vis3:
+	mulx	$a0,$bi,$acc0
+	not	$poly3,$poly3		! 0xFFFFFFFF00000001
+	umulxhi	$a0,$bi,$t0
+	mulx	$a1,$bi,$acc1
+	umulxhi	$a1,$bi,$t1
+	mulx	$a2,$bi,$acc2
+	umulxhi	$a2,$bi,$t2
+	mulx	$a3,$bi,$acc3
+	umulxhi	$a3,$bi,$t3
+	ldx	[$bp+8],$bi		! b[1]
+
+	addcc	$acc1,$t0,$acc1		! accumulate high parts of multiplication
+	 sllx	$acc0,32,$t0
+	addxccc	$acc2,$t1,$acc2
+	 srlx	$acc0,32,$t1
+	addxccc	$acc3,$t2,$acc3
+	addxc	%g0,$t3,$acc4
+	mov	0,$acc5
+___
+for($i=1;$i<4;$i++) {
+	# Reduction iteration is normally performed by accumulating
+	# result of multiplication of modulus by "magic" digit [and
+	# omitting least significant word, which is guaranteed to
+	# be 0], but thanks to special form of modulus and "magic"
+	# digit being equal to least significant word, it can be
+	# performed with additions and subtractions alone. Indeed:
+	#
+	#            ffff0001.00000000.0000ffff.ffffffff
+	# *                                     abcdefgh
+	# + xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx.abcdefgh
+	#
+	# Now observing that ff..ff*x = (2^n-1)*x = 2^n*x-x, we
+	# rewrite above as:
+	#
+	#   xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx.abcdefgh
+	# + abcdefgh.abcdefgh.0000abcd.efgh0000.00000000
+	# - 0000abcd.efgh0000.00000000.00000000.abcdefgh
+	#
+	# or marking redundant operations:
+	#
+	#   xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx.--------
+	# + abcdefgh.abcdefgh.0000abcd.efgh0000.--------
+	# - 0000abcd.efgh0000.--------.--------.--------
+	#   ^^^^^^^^ but this word is calculated with umulxhi, because
+	#            there is no subtract with 64-bit borrow:-(
+
+$code.=<<___;
+	sub	$acc0,$t0,$t2		! acc0*0xFFFFFFFF00000001, low part
+	umulxhi	$acc0,$poly3,$t3	! acc0*0xFFFFFFFF00000001, high part
+	addcc	$acc1,$t0,$acc0		! +=acc[0]<<96 and omit acc[0]
+	mulx	$a0,$bi,$t0
+	addxccc	$acc2,$t1,$acc1
+	mulx	$a1,$bi,$t1
+	addxccc	$acc3,$t2,$acc2		! +=acc[0]*0xFFFFFFFF00000001
+	mulx	$a2,$bi,$t2
+	addxccc	$acc4,$t3,$acc3
+	mulx	$a3,$bi,$t3
+	addxc	$acc5,%g0,$acc4
+
+	addcc	$acc0,$t0,$acc0		! accumulate low parts of multiplication
+	umulxhi	$a0,$bi,$t0
+	addxccc	$acc1,$t1,$acc1
+	umulxhi	$a1,$bi,$t1
+	addxccc	$acc2,$t2,$acc2
+	umulxhi	$a2,$bi,$t2
+	addxccc	$acc3,$t3,$acc3
+	umulxhi	$a3,$bi,$t3
+	addxc	$acc4,%g0,$acc4
+___
+$code.=<<___	if ($i<3);
+	ldx	[$bp+8*($i+1)],$bi	! bp[$i+1]
+___
+$code.=<<___;
+	addcc	$acc1,$t0,$acc1		! accumulate high parts of multiplication
+	 sllx	$acc0,32,$t0
+	addxccc	$acc2,$t1,$acc2
+	 srlx	$acc0,32,$t1
+	addxccc	$acc3,$t2,$acc3
+	addxccc	$acc4,$t3,$acc4
+	addxc	%g0,%g0,$acc5
+___
+}
+$code.=<<___;
+	sub	$acc0,$t0,$t2		! acc0*0xFFFFFFFF00000001, low part
+	umulxhi	$acc0,$poly3,$t3	! acc0*0xFFFFFFFF00000001, high part
+	addcc	$acc1,$t0,$acc0		! +=acc[0]<<96 and omit acc[0]
+	addxccc	$acc2,$t1,$acc1
+	addxccc	$acc3,$t2,$acc2		! +=acc[0]*0xFFFFFFFF00000001
+	addxccc	$acc4,$t3,$acc3
+	b	.Lmul_final_vis3	! see below
+	addxc	$acc5,%g0,$acc4
+.type	__ecp_nistz256_mul_mont_vis3,#function
+.size	__ecp_nistz256_mul_mont_vis3,.-__ecp_nistz256_mul_mont_vis3
+
+! compared to above __ecp_nistz256_mul_mont_vis3 it's 21% less
+! instructions, but only 14% faster [on T4]...
+.align	32
+__ecp_nistz256_sqr_mont_vis3:
+	!  |  |  |  |  |  |a1*a0|  |
+	!  |  |  |  |  |a2*a0|  |  |
+	!  |  |a3*a2|a3*a0|  |  |  |
+	!  |  |  |  |a2*a1|  |  |  |
+	!  |  |  |a3*a1|  |  |  |  |
+	! *|  |  |  |  |  |  |  | 2|
+	! +|a3*a3|a2*a2|a1*a1|a0*a0|
+	!  |--+--+--+--+--+--+--+--|
+	!  |A7|A6|A5|A4|A3|A2|A1|A0|, where Ax is $accx, i.e. follow $accx
+	!
+	!  "can't overflow" below mark carrying into high part of
+	!  multiplication result, which can't overflow, because it
+	!  can never be all ones.
+
+	mulx	$a1,$a0,$acc1		! a[1]*a[0]
+	umulxhi	$a1,$a0,$t1
+	mulx	$a2,$a0,$acc2		! a[2]*a[0]
+	umulxhi	$a2,$a0,$t2
+	mulx	$a3,$a0,$acc3		! a[3]*a[0]
+	umulxhi	$a3,$a0,$acc4
+
+	addcc	$acc2,$t1,$acc2		! accumulate high parts of multiplication
+	mulx	$a2,$a1,$t0		! a[2]*a[1]
+	umulxhi	$a2,$a1,$t1
+	addxccc	$acc3,$t2,$acc3
+	mulx	$a3,$a1,$t2		! a[3]*a[1]
+	umulxhi	$a3,$a1,$t3
+	addxc	$acc4,%g0,$acc4		! can't overflow
+
+	mulx	$a3,$a2,$acc5		! a[3]*a[2]
+	not	$poly3,$poly3		! 0xFFFFFFFF00000001
+	umulxhi	$a3,$a2,$acc6
+
+	addcc	$t2,$t1,$t1		! accumulate high parts of multiplication
+	mulx	$a0,$a0,$acc0		! a[0]*a[0]
+	addxc	$t3,%g0,$t2		! can't overflow
+
+	addcc	$acc3,$t0,$acc3		! accumulate low parts of multiplication
+	umulxhi	$a0,$a0,$a0
+	addxccc	$acc4,$t1,$acc4
+	mulx	$a1,$a1,$t1		! a[1]*a[1]
+	addxccc	$acc5,$t2,$acc5
+	umulxhi	$a1,$a1,$a1
+	addxc	$acc6,%g0,$acc6		! can't overflow
+
+	addcc	$acc1,$acc1,$acc1	! acc[1-6]*=2
+	mulx	$a2,$a2,$t2		! a[2]*a[2]
+	addxccc	$acc2,$acc2,$acc2
+	umulxhi	$a2,$a2,$a2
+	addxccc	$acc3,$acc3,$acc3
+	mulx	$a3,$a3,$t3		! a[3]*a[3]
+	addxccc	$acc4,$acc4,$acc4
+	umulxhi	$a3,$a3,$a3
+	addxccc	$acc5,$acc5,$acc5
+	addxccc	$acc6,$acc6,$acc6
+	addxc	%g0,%g0,$acc7
+
+	addcc	$acc1,$a0,$acc1		! +a[i]*a[i]
+	addxccc	$acc2,$t1,$acc2
+	addxccc	$acc3,$a1,$acc3
+	addxccc	$acc4,$t2,$acc4
+	 sllx	$acc0,32,$t0
+	addxccc	$acc5,$a2,$acc5
+	 srlx	$acc0,32,$t1
+	addxccc	$acc6,$t3,$acc6
+	 sub	$acc0,$t0,$t2		! acc0*0xFFFFFFFF00000001, low part
+	addxc	$acc7,$a3,$acc7
+___
+for($i=0;$i<3;$i++) {			# reductions, see commentary
+					# in multiplication for details
+$code.=<<___;
+	umulxhi	$acc0,$poly3,$t3	! acc0*0xFFFFFFFF00000001, high part
+	addcc	$acc1,$t0,$acc0		! +=acc[0]<<96 and omit acc[0]
+	 sllx	$acc0,32,$t0
+	addxccc	$acc2,$t1,$acc1
+	 srlx	$acc0,32,$t1
+	addxccc	$acc3,$t2,$acc2		! +=acc[0]*0xFFFFFFFF00000001
+	 sub	$acc0,$t0,$t2		! acc0*0xFFFFFFFF00000001, low part
+	addxc	%g0,$t3,$acc3		! can't overflow
+___
+}
+$code.=<<___;
+	umulxhi	$acc0,$poly3,$t3	! acc0*0xFFFFFFFF00000001, high part
+	addcc	$acc1,$t0,$acc0		! +=acc[0]<<96 and omit acc[0]
+	addxccc	$acc2,$t1,$acc1
+	addxccc	$acc3,$t2,$acc2		! +=acc[0]*0xFFFFFFFF00000001
+	addxc	%g0,$t3,$acc3		! can't overflow
+
+	addcc	$acc0,$acc4,$acc0	! accumulate upper half
+	addxccc	$acc1,$acc5,$acc1
+	addxccc	$acc2,$acc6,$acc2
+	addxccc	$acc3,$acc7,$acc3
+	addxc	%g0,%g0,$acc4
+
+.Lmul_final_vis3:
+
+	! Final step is "if result > mod, subtract mod", but as comparison
+	! means subtraction, we do the subtraction and then copy outcome
+	! if it didn't borrow. But note that as we [have to] replace
+	! subtraction with addition with negative, carry/borrow logic is
+	! inverse.
+
+	addcc	$acc0,1,$t0		! add -modulus, i.e. subtract
+	not	$poly3,$poly3		! restore 0x00000000FFFFFFFE
+	addxccc	$acc1,$poly1,$t1
+	addxccc	$acc2,$minus1,$t2
+	addxccc	$acc3,$poly3,$t3
+	addxccc	$acc4,$minus1,%g0	! did it carry?
+
+	movcs	%xcc,$t0,$acc0
+	movcs	%xcc,$t1,$acc1
+	stx	$acc0,[$rp]
+	movcs	%xcc,$t2,$acc2
+	stx	$acc1,[$rp+8]
+	movcs	%xcc,$t3,$acc3
+	stx	$acc2,[$rp+16]
+	retl
+	stx	$acc3,[$rp+24]
+.type	__ecp_nistz256_sqr_mont_vis3,#function
+.size	__ecp_nistz256_sqr_mont_vis3,.-__ecp_nistz256_sqr_mont_vis3
+___
+
+########################################################################
+# void ecp_nistz256_point_double(P256_POINT *out,const P256_POINT *inp);
+#
+{
+my ($res_x,$res_y,$res_z,
+    $in_x,$in_y,$in_z,
+    $S,$M,$Zsqr,$tmp0)=map(32*$_,(0..9));
+# above map() describes stack layout with 10 temporary
+# 256-bit vectors on top.
+
+$code.=<<___;
+.align	32
+ecp_nistz256_point_double_vis3:
+	save	%sp,-STACK64_FRAME-32*10,%sp
+
+	mov	$rp,$rp_real
+.Ldouble_shortcut_vis3:
+	mov	-1,$minus1
+	mov	-2,$poly3
+	sllx	$minus1,32,$poly1		! 0xFFFFFFFF00000000
+	srl	$poly3,0,$poly3			! 0x00000000FFFFFFFE
+
+	! convert input to uint64_t[4]
+	ld	[$ap],$a0			! in_x
+	ld	[$ap+4],$t0
+	ld	[$ap+8],$a1
+	ld	[$ap+12],$t1
+	ld	[$ap+16],$a2
+	ld	[$ap+20],$t2
+	ld	[$ap+24],$a3
+	ld	[$ap+28],$t3
+	sllx	$t0,32,$t0
+	sllx	$t1,32,$t1
+	ld	[$ap+32],$acc0			! in_y
+	or	$a0,$t0,$a0
+	ld	[$ap+32+4],$t0
+	sllx	$t2,32,$t2
+	ld	[$ap+32+8],$acc1
+	or	$a1,$t1,$a1
+	ld	[$ap+32+12],$t1
+	sllx	$t3,32,$t3
+	ld	[$ap+32+16],$acc2
+	or	$a2,$t2,$a2
+	ld	[$ap+32+20],$t2
+	or	$a3,$t3,$a3
+	ld	[$ap+32+24],$acc3
+	sllx	$t0,32,$t0
+	ld	[$ap+32+28],$t3
+	sllx	$t1,32,$t1
+	stx	$a0,[%sp+LOCALS64+$in_x]
+	sllx	$t2,32,$t2
+	stx	$a1,[%sp+LOCALS64+$in_x+8]
+	sllx	$t3,32,$t3
+	stx	$a2,[%sp+LOCALS64+$in_x+16]
+	or	$acc0,$t0,$acc0
+	stx	$a3,[%sp+LOCALS64+$in_x+24]
+	or	$acc1,$t1,$acc1
+	stx	$acc0,[%sp+LOCALS64+$in_y]
+	or	$acc2,$t2,$acc2
+	stx	$acc1,[%sp+LOCALS64+$in_y+8]
+	or	$acc3,$t3,$acc3
+	stx	$acc2,[%sp+LOCALS64+$in_y+16]
+	stx	$acc3,[%sp+LOCALS64+$in_y+24]
+
+	ld	[$ap+64],$a0			! in_z
+	ld	[$ap+64+4],$t0
+	ld	[$ap+64+8],$a1
+	ld	[$ap+64+12],$t1
+	ld	[$ap+64+16],$a2
+	ld	[$ap+64+20],$t2
+	ld	[$ap+64+24],$a3
+	ld	[$ap+64+28],$t3
+	sllx	$t0,32,$t0
+	sllx	$t1,32,$t1
+	or	$a0,$t0,$a0
+	sllx	$t2,32,$t2
+	or	$a1,$t1,$a1
+	sllx	$t3,32,$t3
+	or	$a2,$t2,$a2
+	or	$a3,$t3,$a3
+	sllx	$t0,32,$t0
+	sllx	$t1,32,$t1
+	stx	$a0,[%sp+LOCALS64+$in_z]
+	sllx	$t2,32,$t2
+	stx	$a1,[%sp+LOCALS64+$in_z+8]
+	sllx	$t3,32,$t3
+	stx	$a2,[%sp+LOCALS64+$in_z+16]
+	stx	$a3,[%sp+LOCALS64+$in_z+24]
+
+	! in_y is still in $acc0-$acc3
+	call	__ecp_nistz256_mul_by_2_vis3	! p256_mul_by_2(S, in_y);
+	add	%sp,LOCALS64+$S,$rp
+
+	! in_z is still in $a0-$a3
+	call	__ecp_nistz256_sqr_mont_vis3	! p256_sqr_mont(Zsqr, in_z);
+	add	%sp,LOCALS64+$Zsqr,$rp
+
+	mov	$acc0,$a0			! put Zsqr aside
+	mov	$acc1,$a1
+	mov	$acc2,$a2
+	mov	$acc3,$a3
+
+	add	%sp,LOCALS64+$in_x,$bp
+	call	__ecp_nistz256_add_vis3		! p256_add(M, Zsqr, in_x);
+	add	%sp,LOCALS64+$M,$rp
+
+	mov	$a0,$acc0			! restore Zsqr
+	ldx	[%sp+LOCALS64+$S],$a0		! forward load
+	mov	$a1,$acc1
+	ldx	[%sp+LOCALS64+$S+8],$a1
+	mov	$a2,$acc2
+	ldx	[%sp+LOCALS64+$S+16],$a2
+	mov	$a3,$acc3
+	ldx	[%sp+LOCALS64+$S+24],$a3
+
+	add	%sp,LOCALS64+$in_x,$bp
+	call	__ecp_nistz256_sub_morf_vis3	! p256_sub(Zsqr, in_x, Zsqr);
+	add	%sp,LOCALS64+$Zsqr,$rp
+
+	call	__ecp_nistz256_sqr_mont_vis3	! p256_sqr_mont(S, S);
+	add	%sp,LOCALS64+$S,$rp
+
+	ldx	[%sp+LOCALS64+$in_z],$bi
+	ldx	[%sp+LOCALS64+$in_y],$a0
+	ldx	[%sp+LOCALS64+$in_y+8],$a1
+	ldx	[%sp+LOCALS64+$in_y+16],$a2
+	ldx	[%sp+LOCALS64+$in_y+24],$a3
+	add	%sp,LOCALS64+$in_z,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(tmp0, in_z, in_y);
+	add	%sp,LOCALS64+$tmp0,$rp
+
+	ldx	[%sp+LOCALS64+$M],$bi		! forward load
+	ldx	[%sp+LOCALS64+$Zsqr],$a0
+	ldx	[%sp+LOCALS64+$Zsqr+8],$a1
+	ldx	[%sp+LOCALS64+$Zsqr+16],$a2
+	ldx	[%sp+LOCALS64+$Zsqr+24],$a3
+
+	call	__ecp_nistz256_mul_by_2_vis3	! p256_mul_by_2(res_z, tmp0);
+	add	%sp,LOCALS64+$res_z,$rp
+
+	add	%sp,LOCALS64+$M,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(M, M, Zsqr);
+	add	%sp,LOCALS64+$M,$rp
+
+	mov	$acc0,$a0			! put aside M
+	mov	$acc1,$a1
+	mov	$acc2,$a2
+	mov	$acc3,$a3
+	call	__ecp_nistz256_mul_by_2_vis3
+	add	%sp,LOCALS64+$M,$rp
+	mov	$a0,$t0				! copy M
+	ldx	[%sp+LOCALS64+$S],$a0		! forward load
+	mov	$a1,$t1
+	ldx	[%sp+LOCALS64+$S+8],$a1
+	mov	$a2,$t2
+	ldx	[%sp+LOCALS64+$S+16],$a2
+	mov	$a3,$t3
+	ldx	[%sp+LOCALS64+$S+24],$a3
+	call	__ecp_nistz256_add_noload_vis3	! p256_mul_by_3(M, M);
+	add	%sp,LOCALS64+$M,$rp
+
+	call	__ecp_nistz256_sqr_mont_vis3	! p256_sqr_mont(tmp0, S);
+	add	%sp,LOCALS64+$tmp0,$rp
+
+	ldx	[%sp+LOCALS64+$S],$bi		! forward load
+	ldx	[%sp+LOCALS64+$in_x],$a0
+	ldx	[%sp+LOCALS64+$in_x+8],$a1
+	ldx	[%sp+LOCALS64+$in_x+16],$a2
+	ldx	[%sp+LOCALS64+$in_x+24],$a3
+
+	call	__ecp_nistz256_div_by_2_vis3	! p256_div_by_2(res_y, tmp0);
+	add	%sp,LOCALS64+$res_y,$rp
+
+	add	%sp,LOCALS64+$S,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(S, S, in_x);
+	add	%sp,LOCALS64+$S,$rp
+
+	ldx	[%sp+LOCALS64+$M],$a0		! forward load
+	ldx	[%sp+LOCALS64+$M+8],$a1
+	ldx	[%sp+LOCALS64+$M+16],$a2
+	ldx	[%sp+LOCALS64+$M+24],$a3
+
+	call	__ecp_nistz256_mul_by_2_vis3	! p256_mul_by_2(tmp0, S);
+	add	%sp,LOCALS64+$tmp0,$rp
+
+	call	__ecp_nistz256_sqr_mont_vis3	! p256_sqr_mont(res_x, M);
+	add	%sp,LOCALS64+$res_x,$rp
+
+	add	%sp,LOCALS64+$tmp0,$bp
+	call	__ecp_nistz256_sub_from_vis3	! p256_sub(res_x, res_x, tmp0);
+	add	%sp,LOCALS64+$res_x,$rp
+
+	ldx	[%sp+LOCALS64+$M],$a0		! forward load
+	ldx	[%sp+LOCALS64+$M+8],$a1
+	ldx	[%sp+LOCALS64+$M+16],$a2
+	ldx	[%sp+LOCALS64+$M+24],$a3
+
+	add	%sp,LOCALS64+$S,$bp
+	call	__ecp_nistz256_sub_morf_vis3	! p256_sub(S, S, res_x);
+	add	%sp,LOCALS64+$S,$rp
+
+	mov	$acc0,$bi
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(S, S, M);
+	add	%sp,LOCALS64+$S,$rp
+
+	ldx	[%sp+LOCALS64+$res_x],$a0	! forward load
+	ldx	[%sp+LOCALS64+$res_x+8],$a1
+	ldx	[%sp+LOCALS64+$res_x+16],$a2
+	ldx	[%sp+LOCALS64+$res_x+24],$a3
+
+	add	%sp,LOCALS64+$res_y,$bp
+	call	__ecp_nistz256_sub_from_vis3	! p256_sub(res_y, S, res_y);
+	add	%sp,LOCALS64+$res_y,$bp
+
+	! convert output to uint_32[8]
+	srlx	$a0,32,$t0
+	srlx	$a1,32,$t1
+	st	$a0,[$rp_real]			! res_x
+	srlx	$a2,32,$t2
+	st	$t0,[$rp_real+4]
+	srlx	$a3,32,$t3
+	st	$a1,[$rp_real+8]
+	st	$t1,[$rp_real+12]
+	st	$a2,[$rp_real+16]
+	st	$t2,[$rp_real+20]
+	st	$a3,[$rp_real+24]
+	st	$t3,[$rp_real+28]
+
+	ldx	[%sp+LOCALS64+$res_z],$a0	! forward load
+	srlx	$acc0,32,$t0
+	ldx	[%sp+LOCALS64+$res_z+8],$a1
+	srlx	$acc1,32,$t1
+	ldx	[%sp+LOCALS64+$res_z+16],$a2
+	srlx	$acc2,32,$t2
+	ldx	[%sp+LOCALS64+$res_z+24],$a3
+	srlx	$acc3,32,$t3
+	st	$acc0,[$rp_real+32]		! res_y
+	st	$t0,  [$rp_real+32+4]
+	st	$acc1,[$rp_real+32+8]
+	st	$t1,  [$rp_real+32+12]
+	st	$acc2,[$rp_real+32+16]
+	st	$t2,  [$rp_real+32+20]
+	st	$acc3,[$rp_real+32+24]
+	st	$t3,  [$rp_real+32+28]
+
+	srlx	$a0,32,$t0
+	srlx	$a1,32,$t1
+	st	$a0,[$rp_real+64]		! res_z
+	srlx	$a2,32,$t2
+	st	$t0,[$rp_real+64+4]
+	srlx	$a3,32,$t3
+	st	$a1,[$rp_real+64+8]
+	st	$t1,[$rp_real+64+12]
+	st	$a2,[$rp_real+64+16]
+	st	$t2,[$rp_real+64+20]
+	st	$a3,[$rp_real+64+24]
+	st	$t3,[$rp_real+64+28]
+
+	ret
+	restore
+.type	ecp_nistz256_point_double_vis3,#function
+.size	ecp_nistz256_point_double_vis3,.-ecp_nistz256_point_double_vis3
+___
+}
+########################################################################
+# void ecp_nistz256_point_add(P256_POINT *out,const P256_POINT *in1,
+#			      const P256_POINT *in2);
+{
+my ($res_x,$res_y,$res_z,
+    $in1_x,$in1_y,$in1_z,
+    $in2_x,$in2_y,$in2_z,
+    $H,$Hsqr,$R,$Rsqr,$Hcub,
+    $U1,$U2,$S1,$S2)=map(32*$_,(0..17));
+my ($Z1sqr, $Z2sqr) = ($Hsqr, $Rsqr);
+
+# above map() describes stack layout with 18 temporary
+# 256-bit vectors on top. Then we reserve some space for
+# !in1infty, !in2infty and result of check for zero.
+
+$code.=<<___;
+.globl	ecp_nistz256_point_add_vis3
+.align	32
+ecp_nistz256_point_add_vis3:
+	save	%sp,-STACK64_FRAME-32*18-32,%sp
+
+	mov	$rp,$rp_real
+	mov	-1,$minus1
+	mov	-2,$poly3
+	sllx	$minus1,32,$poly1		! 0xFFFFFFFF00000000
+	srl	$poly3,0,$poly3			! 0x00000000FFFFFFFE
+
+	! convert input to uint64_t[4]
+	ld	[$bp],$a0			! in2_x
+	ld	[$bp+4],$t0
+	ld	[$bp+8],$a1
+	ld	[$bp+12],$t1
+	ld	[$bp+16],$a2
+	ld	[$bp+20],$t2
+	ld	[$bp+24],$a3
+	ld	[$bp+28],$t3
+	sllx	$t0,32,$t0
+	sllx	$t1,32,$t1
+	ld	[$bp+32],$acc0			! in2_y
+	or	$a0,$t0,$a0
+	ld	[$bp+32+4],$t0
+	sllx	$t2,32,$t2
+	ld	[$bp+32+8],$acc1
+	or	$a1,$t1,$a1
+	ld	[$bp+32+12],$t1
+	sllx	$t3,32,$t3
+	ld	[$bp+32+16],$acc2
+	or	$a2,$t2,$a2
+	ld	[$bp+32+20],$t2
+	or	$a3,$t3,$a3
+	ld	[$bp+32+24],$acc3
+	sllx	$t0,32,$t0
+	ld	[$bp+32+28],$t3
+	sllx	$t1,32,$t1
+	stx	$a0,[%sp+LOCALS64+$in2_x]
+	sllx	$t2,32,$t2
+	stx	$a1,[%sp+LOCALS64+$in2_x+8]
+	sllx	$t3,32,$t3
+	stx	$a2,[%sp+LOCALS64+$in2_x+16]
+	or	$acc0,$t0,$acc0
+	stx	$a3,[%sp+LOCALS64+$in2_x+24]
+	or	$acc1,$t1,$acc1
+	stx	$acc0,[%sp+LOCALS64+$in2_y]
+	or	$acc2,$t2,$acc2
+	stx	$acc1,[%sp+LOCALS64+$in2_y+8]
+	or	$acc3,$t3,$acc3
+	stx	$acc2,[%sp+LOCALS64+$in2_y+16]
+	stx	$acc3,[%sp+LOCALS64+$in2_y+24]
+
+	ld	[$bp+64],$acc0			! in2_z
+	ld	[$bp+64+4],$t0
+	ld	[$bp+64+8],$acc1
+	ld	[$bp+64+12],$t1
+	ld	[$bp+64+16],$acc2
+	ld	[$bp+64+20],$t2
+	ld	[$bp+64+24],$acc3
+	ld	[$bp+64+28],$t3
+	sllx	$t0,32,$t0
+	sllx	$t1,32,$t1
+	ld	[$ap],$a0			! in1_x
+	or	$acc0,$t0,$acc0
+	ld	[$ap+4],$t0
+	sllx	$t2,32,$t2
+	ld	[$ap+8],$a1
+	or	$acc1,$t1,$acc1
+	ld	[$ap+12],$t1
+	sllx	$t3,32,$t3
+	ld	[$ap+16],$a2
+	or	$acc2,$t2,$acc2
+	ld	[$ap+20],$t2
+	or	$acc3,$t3,$acc3
+	ld	[$ap+24],$a3
+	sllx	$t0,32,$t0
+	ld	[$ap+28],$t3
+	sllx	$t1,32,$t1
+	stx	$acc0,[%sp+LOCALS64+$in2_z]
+	sllx	$t2,32,$t2
+	stx	$acc1,[%sp+LOCALS64+$in2_z+8]
+	sllx	$t3,32,$t3
+	stx	$acc2,[%sp+LOCALS64+$in2_z+16]
+	stx	$acc3,[%sp+LOCALS64+$in2_z+24]
+
+	or	$acc1,$acc0,$acc0
+	or	$acc3,$acc2,$acc2
+	or	$acc2,$acc0,$acc0
+	movrnz	$acc0,-1,$acc0			! !in2infty
+	stx	$acc0,[%fp+STACK_BIAS-8]
+
+	or	$a0,$t0,$a0
+	ld	[$ap+32],$acc0			! in1_y
+	or	$a1,$t1,$a1
+	ld	[$ap+32+4],$t0
+	or	$a2,$t2,$a2
+	ld	[$ap+32+8],$acc1
+	or	$a3,$t3,$a3
+	ld	[$ap+32+12],$t1
+	ld	[$ap+32+16],$acc2
+	ld	[$ap+32+20],$t2
+	ld	[$ap+32+24],$acc3
+	sllx	$t0,32,$t0
+	ld	[$ap+32+28],$t3
+	sllx	$t1,32,$t1
+	stx	$a0,[%sp+LOCALS64+$in1_x]
+	sllx	$t2,32,$t2
+	stx	$a1,[%sp+LOCALS64+$in1_x+8]
+	sllx	$t3,32,$t3
+	stx	$a2,[%sp+LOCALS64+$in1_x+16]
+	or	$acc0,$t0,$acc0
+	stx	$a3,[%sp+LOCALS64+$in1_x+24]
+	or	$acc1,$t1,$acc1
+	stx	$acc0,[%sp+LOCALS64+$in1_y]
+	or	$acc2,$t2,$acc2
+	stx	$acc1,[%sp+LOCALS64+$in1_y+8]
+	or	$acc3,$t3,$acc3
+	stx	$acc2,[%sp+LOCALS64+$in1_y+16]
+	stx	$acc3,[%sp+LOCALS64+$in1_y+24]
+
+	ldx	[%sp+LOCALS64+$in2_z],$a0	! forward load
+	ldx	[%sp+LOCALS64+$in2_z+8],$a1
+	ldx	[%sp+LOCALS64+$in2_z+16],$a2
+	ldx	[%sp+LOCALS64+$in2_z+24],$a3
+
+	ld	[$ap+64],$acc0			! in1_z
+	ld	[$ap+64+4],$t0
+	ld	[$ap+64+8],$acc1
+	ld	[$ap+64+12],$t1
+	ld	[$ap+64+16],$acc2
+	ld	[$ap+64+20],$t2
+	ld	[$ap+64+24],$acc3
+	ld	[$ap+64+28],$t3
+	sllx	$t0,32,$t0
+	sllx	$t1,32,$t1
+	or	$acc0,$t0,$acc0
+	sllx	$t2,32,$t2
+	or	$acc1,$t1,$acc1
+	sllx	$t3,32,$t3
+	stx	$acc0,[%sp+LOCALS64+$in1_z]
+	or	$acc2,$t2,$acc2
+	stx	$acc1,[%sp+LOCALS64+$in1_z+8]
+	or	$acc3,$t3,$acc3
+	stx	$acc2,[%sp+LOCALS64+$in1_z+16]
+	stx	$acc3,[%sp+LOCALS64+$in1_z+24]
+
+	or	$acc1,$acc0,$acc0
+	or	$acc3,$acc2,$acc2
+	or	$acc2,$acc0,$acc0
+	movrnz	$acc0,-1,$acc0			! !in1infty
+	stx	$acc0,[%fp+STACK_BIAS-16]
+
+	call	__ecp_nistz256_sqr_mont_vis3	! p256_sqr_mont(Z2sqr, in2_z);
+	add	%sp,LOCALS64+$Z2sqr,$rp
+
+	ldx	[%sp+LOCALS64+$in1_z],$a0
+	ldx	[%sp+LOCALS64+$in1_z+8],$a1
+	ldx	[%sp+LOCALS64+$in1_z+16],$a2
+	ldx	[%sp+LOCALS64+$in1_z+24],$a3
+	call	__ecp_nistz256_sqr_mont_vis3	! p256_sqr_mont(Z1sqr, in1_z);
+	add	%sp,LOCALS64+$Z1sqr,$rp
+
+	ldx	[%sp+LOCALS64+$Z2sqr],$bi
+	ldx	[%sp+LOCALS64+$in2_z],$a0
+	ldx	[%sp+LOCALS64+$in2_z+8],$a1
+	ldx	[%sp+LOCALS64+$in2_z+16],$a2
+	ldx	[%sp+LOCALS64+$in2_z+24],$a3
+	add	%sp,LOCALS64+$Z2sqr,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(S1, Z2sqr, in2_z);
+	add	%sp,LOCALS64+$S1,$rp
+
+	ldx	[%sp+LOCALS64+$Z1sqr],$bi
+	ldx	[%sp+LOCALS64+$in1_z],$a0
+	ldx	[%sp+LOCALS64+$in1_z+8],$a1
+	ldx	[%sp+LOCALS64+$in1_z+16],$a2
+	ldx	[%sp+LOCALS64+$in1_z+24],$a3
+	add	%sp,LOCALS64+$Z1sqr,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(S2, Z1sqr, in1_z);
+	add	%sp,LOCALS64+$S2,$rp
+
+	ldx	[%sp+LOCALS64+$S1],$bi
+	ldx	[%sp+LOCALS64+$in1_y],$a0
+	ldx	[%sp+LOCALS64+$in1_y+8],$a1
+	ldx	[%sp+LOCALS64+$in1_y+16],$a2
+	ldx	[%sp+LOCALS64+$in1_y+24],$a3
+	add	%sp,LOCALS64+$S1,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(S1, S1, in1_y);
+	add	%sp,LOCALS64+$S1,$rp
+
+	ldx	[%sp+LOCALS64+$S2],$bi
+	ldx	[%sp+LOCALS64+$in2_y],$a0
+	ldx	[%sp+LOCALS64+$in2_y+8],$a1
+	ldx	[%sp+LOCALS64+$in2_y+16],$a2
+	ldx	[%sp+LOCALS64+$in2_y+24],$a3
+	add	%sp,LOCALS64+$S2,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(S2, S2, in2_y);
+	add	%sp,LOCALS64+$S2,$rp
+
+	ldx	[%sp+LOCALS64+$Z2sqr],$bi	! forward load
+	ldx	[%sp+LOCALS64+$in1_x],$a0
+	ldx	[%sp+LOCALS64+$in1_x+8],$a1
+	ldx	[%sp+LOCALS64+$in1_x+16],$a2
+	ldx	[%sp+LOCALS64+$in1_x+24],$a3
+
+	add	%sp,LOCALS64+$S1,$bp
+	call	__ecp_nistz256_sub_from_vis3	! p256_sub(R, S2, S1);
+	add	%sp,LOCALS64+$R,$rp
+
+	or	$acc1,$acc0,$acc0		! see if result is zero
+	or	$acc3,$acc2,$acc2
+	or	$acc2,$acc0,$acc0
+	stx	$acc0,[%fp+STACK_BIAS-24]
+
+	add	%sp,LOCALS64+$Z2sqr,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(U1, in1_x, Z2sqr);
+	add	%sp,LOCALS64+$U1,$rp
+
+	ldx	[%sp+LOCALS64+$Z1sqr],$bi
+	ldx	[%sp+LOCALS64+$in2_x],$a0
+	ldx	[%sp+LOCALS64+$in2_x+8],$a1
+	ldx	[%sp+LOCALS64+$in2_x+16],$a2
+	ldx	[%sp+LOCALS64+$in2_x+24],$a3
+	add	%sp,LOCALS64+$Z1sqr,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(U2, in2_x, Z1sqr);
+	add	%sp,LOCALS64+$U2,$rp
+
+	ldx	[%sp+LOCALS64+$R],$a0		! forward load
+	ldx	[%sp+LOCALS64+$R+8],$a1
+	ldx	[%sp+LOCALS64+$R+16],$a2
+	ldx	[%sp+LOCALS64+$R+24],$a3
+
+	add	%sp,LOCALS64+$U1,$bp
+	call	__ecp_nistz256_sub_from_vis3	! p256_sub(H, U2, U1);
+	add	%sp,LOCALS64+$H,$rp
+
+	or	$acc1,$acc0,$acc0		! see if result is zero
+	or	$acc3,$acc2,$acc2
+	orcc	$acc2,$acc0,$acc0
+
+	bne,pt	%xcc,.Ladd_proceed_vis3		! is_equal(U1,U2)?
+	nop
+
+	ldx	[%fp+STACK_BIAS-8],$t0
+	ldx	[%fp+STACK_BIAS-16],$t1
+	ldx	[%fp+STACK_BIAS-24],$t2
+	andcc	$t0,$t1,%g0
+	be,pt	%xcc,.Ladd_proceed_vis3		! (in1infty || in2infty)?
+	nop
+	andcc	$t2,$t2,%g0
+	be,a,pt	%xcc,.Ldouble_shortcut_vis3	! is_equal(S1,S2)?
+	add	%sp,32*(12-10)+32,%sp		! difference in frame sizes
+
+	st	%g0,[$rp_real]
+	st	%g0,[$rp_real+4]
+	st	%g0,[$rp_real+8]
+	st	%g0,[$rp_real+12]
+	st	%g0,[$rp_real+16]
+	st	%g0,[$rp_real+20]
+	st	%g0,[$rp_real+24]
+	st	%g0,[$rp_real+28]
+	st	%g0,[$rp_real+32]
+	st	%g0,[$rp_real+32+4]
+	st	%g0,[$rp_real+32+8]
+	st	%g0,[$rp_real+32+12]
+	st	%g0,[$rp_real+32+16]
+	st	%g0,[$rp_real+32+20]
+	st	%g0,[$rp_real+32+24]
+	st	%g0,[$rp_real+32+28]
+	st	%g0,[$rp_real+64]
+	st	%g0,[$rp_real+64+4]
+	st	%g0,[$rp_real+64+8]
+	st	%g0,[$rp_real+64+12]
+	st	%g0,[$rp_real+64+16]
+	st	%g0,[$rp_real+64+20]
+	st	%g0,[$rp_real+64+24]
+	st	%g0,[$rp_real+64+28]
+	b	.Ladd_done_vis3
+	nop
+
+.align	16
+.Ladd_proceed_vis3:
+	call	__ecp_nistz256_sqr_mont_vis3	! p256_sqr_mont(Rsqr, R);
+	add	%sp,LOCALS64+$Rsqr,$rp
+
+	ldx	[%sp+LOCALS64+$H],$bi
+	ldx	[%sp+LOCALS64+$in1_z],$a0
+	ldx	[%sp+LOCALS64+$in1_z+8],$a1
+	ldx	[%sp+LOCALS64+$in1_z+16],$a2
+	ldx	[%sp+LOCALS64+$in1_z+24],$a3
+	add	%sp,LOCALS64+$H,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(res_z, H, in1_z);
+	add	%sp,LOCALS64+$res_z,$rp
+
+	ldx	[%sp+LOCALS64+$H],$a0
+	ldx	[%sp+LOCALS64+$H+8],$a1
+	ldx	[%sp+LOCALS64+$H+16],$a2
+	ldx	[%sp+LOCALS64+$H+24],$a3
+	call	__ecp_nistz256_sqr_mont_vis3	! p256_sqr_mont(Hsqr, H);
+	add	%sp,LOCALS64+$Hsqr,$rp
+
+	ldx	[%sp+LOCALS64+$res_z],$bi
+	ldx	[%sp+LOCALS64+$in2_z],$a0
+	ldx	[%sp+LOCALS64+$in2_z+8],$a1
+	ldx	[%sp+LOCALS64+$in2_z+16],$a2
+	ldx	[%sp+LOCALS64+$in2_z+24],$a3
+	add	%sp,LOCALS64+$res_z,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(res_z, res_z, in2_z);
+	add	%sp,LOCALS64+$res_z,$rp
+
+	ldx	[%sp+LOCALS64+$H],$bi
+	ldx	[%sp+LOCALS64+$Hsqr],$a0
+	ldx	[%sp+LOCALS64+$Hsqr+8],$a1
+	ldx	[%sp+LOCALS64+$Hsqr+16],$a2
+	ldx	[%sp+LOCALS64+$Hsqr+24],$a3
+	add	%sp,LOCALS64+$H,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(Hcub, Hsqr, H);
+	add	%sp,LOCALS64+$Hcub,$rp
+
+	ldx	[%sp+LOCALS64+$U1],$bi
+	ldx	[%sp+LOCALS64+$Hsqr],$a0
+	ldx	[%sp+LOCALS64+$Hsqr+8],$a1
+	ldx	[%sp+LOCALS64+$Hsqr+16],$a2
+	ldx	[%sp+LOCALS64+$Hsqr+24],$a3
+	add	%sp,LOCALS64+$U1,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(U2, U1, Hsqr);
+	add	%sp,LOCALS64+$U2,$rp
+
+	call	__ecp_nistz256_mul_by_2_vis3	! p256_mul_by_2(Hsqr, U2);
+	add	%sp,LOCALS64+$Hsqr,$rp
+
+	add	%sp,LOCALS64+$Rsqr,$bp
+	call	__ecp_nistz256_sub_morf_vis3	! p256_sub(res_x, Rsqr, Hsqr);
+	add	%sp,LOCALS64+$res_x,$rp
+
+	add	%sp,LOCALS64+$Hcub,$bp
+	call	__ecp_nistz256_sub_from_vis3	!  p256_sub(res_x, res_x, Hcub);
+	add	%sp,LOCALS64+$res_x,$rp
+
+	ldx	[%sp+LOCALS64+$S1],$bi		! forward load
+	ldx	[%sp+LOCALS64+$Hcub],$a0
+	ldx	[%sp+LOCALS64+$Hcub+8],$a1
+	ldx	[%sp+LOCALS64+$Hcub+16],$a2
+	ldx	[%sp+LOCALS64+$Hcub+24],$a3
+
+	add	%sp,LOCALS64+$U2,$bp
+	call	__ecp_nistz256_sub_morf_vis3	! p256_sub(res_y, U2, res_x);
+	add	%sp,LOCALS64+$res_y,$rp
+
+	add	%sp,LOCALS64+$S1,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(S2, S1, Hcub);
+	add	%sp,LOCALS64+$S2,$rp
+
+	ldx	[%sp+LOCALS64+$R],$bi
+	ldx	[%sp+LOCALS64+$res_y],$a0
+	ldx	[%sp+LOCALS64+$res_y+8],$a1
+	ldx	[%sp+LOCALS64+$res_y+16],$a2
+	ldx	[%sp+LOCALS64+$res_y+24],$a3
+	add	%sp,LOCALS64+$R,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(res_y, res_y, R);
+	add	%sp,LOCALS64+$res_y,$rp
+
+	add	%sp,LOCALS64+$S2,$bp
+	call	__ecp_nistz256_sub_from_vis3	! p256_sub(res_y, res_y, S2);
+	add	%sp,LOCALS64+$res_y,$rp
+
+	ldx	[%fp+STACK_BIAS-16],$t1		! !in1infty
+	ldx	[%fp+STACK_BIAS-8],$t2		! !in2infty
+___
+for($i=0;$i<96;$i+=16) {			# conditional moves
+$code.=<<___;
+	ldx	[%sp+LOCALS64+$res_x+$i],$acc0	! res
+	ldx	[%sp+LOCALS64+$res_x+$i+8],$acc1
+	ldx	[%sp+LOCALS64+$in2_x+$i],$acc2	! in2
+	ldx	[%sp+LOCALS64+$in2_x+$i+8],$acc3
+	ldx	[%sp+LOCALS64+$in1_x+$i],$acc4	! in1
+	ldx	[%sp+LOCALS64+$in1_x+$i+8],$acc5
+	movrz	$t1,$acc2,$acc0
+	movrz	$t1,$acc3,$acc1
+	movrz	$t2,$acc4,$acc0
+	movrz	$t2,$acc5,$acc1
+	srlx	$acc0,32,$acc2
+	srlx	$acc1,32,$acc3
+	st	$acc0,[$rp_real+$i]
+	st	$acc2,[$rp_real+$i+4]
+	st	$acc1,[$rp_real+$i+8]
+	st	$acc3,[$rp_real+$i+12]
+___
+}
+$code.=<<___;
+.Ladd_done_vis3:
+	ret
+	restore
+.type	ecp_nistz256_point_add_vis3,#function
+.size	ecp_nistz256_point_add_vis3,.-ecp_nistz256_point_add_vis3
+___
+}
+########################################################################
+# void ecp_nistz256_point_add_affine(P256_POINT *out,const P256_POINT *in1,
+#				     const P256_POINT_AFFINE *in2);
+{
+my ($res_x,$res_y,$res_z,
+    $in1_x,$in1_y,$in1_z,
+    $in2_x,$in2_y,
+    $U2,$S2,$H,$R,$Hsqr,$Hcub,$Rsqr)=map(32*$_,(0..14));
+my $Z1sqr = $S2;
+# above map() describes stack layout with 15 temporary
+# 256-bit vectors on top. Then we reserve some space for
+# !in1infty and !in2infty.
+
+$code.=<<___;
+.align	32
+ecp_nistz256_point_add_affine_vis3:
+	save	%sp,-STACK64_FRAME-32*15-32,%sp
+
+	mov	$rp,$rp_real
+	mov	-1,$minus1
+	mov	-2,$poly3
+	sllx	$minus1,32,$poly1		! 0xFFFFFFFF00000000
+	srl	$poly3,0,$poly3			! 0x00000000FFFFFFFE
+
+	! convert input to uint64_t[4]
+	ld	[$bp],$a0			! in2_x
+	ld	[$bp+4],$t0
+	ld	[$bp+8],$a1
+	ld	[$bp+12],$t1
+	ld	[$bp+16],$a2
+	ld	[$bp+20],$t2
+	ld	[$bp+24],$a3
+	ld	[$bp+28],$t3
+	sllx	$t0,32,$t0
+	sllx	$t1,32,$t1
+	ld	[$bp+32],$acc0			! in2_y
+	or	$a0,$t0,$a0
+	ld	[$bp+32+4],$t0
+	sllx	$t2,32,$t2
+	ld	[$bp+32+8],$acc1
+	or	$a1,$t1,$a1
+	ld	[$bp+32+12],$t1
+	sllx	$t3,32,$t3
+	ld	[$bp+32+16],$acc2
+	or	$a2,$t2,$a2
+	ld	[$bp+32+20],$t2
+	or	$a3,$t3,$a3
+	ld	[$bp+32+24],$acc3
+	sllx	$t0,32,$t0
+	ld	[$bp+32+28],$t3
+	sllx	$t1,32,$t1
+	stx	$a0,[%sp+LOCALS64+$in2_x]
+	sllx	$t2,32,$t2
+	stx	$a1,[%sp+LOCALS64+$in2_x+8]
+	sllx	$t3,32,$t3
+	stx	$a2,[%sp+LOCALS64+$in2_x+16]
+	or	$acc0,$t0,$acc0
+	stx	$a3,[%sp+LOCALS64+$in2_x+24]
+	or	$acc1,$t1,$acc1
+	stx	$acc0,[%sp+LOCALS64+$in2_y]
+	or	$acc2,$t2,$acc2
+	stx	$acc1,[%sp+LOCALS64+$in2_y+8]
+	or	$acc3,$t3,$acc3
+	stx	$acc2,[%sp+LOCALS64+$in2_y+16]
+	stx	$acc3,[%sp+LOCALS64+$in2_y+24]
+
+	or	$a1,$a0,$a0
+	or	$a3,$a2,$a2
+	or	$acc1,$acc0,$acc0
+	or	$acc3,$acc2,$acc2
+	or	$a2,$a0,$a0
+	or	$acc2,$acc0,$acc0
+	or	$acc0,$a0,$a0
+	movrnz	$a0,-1,$a0			! !in2infty
+	stx	$a0,[%fp+STACK_BIAS-8]
+
+	ld	[$ap],$a0			! in1_x
+	ld	[$ap+4],$t0
+	ld	[$ap+8],$a1
+	ld	[$ap+12],$t1
+	ld	[$ap+16],$a2
+	ld	[$ap+20],$t2
+	ld	[$ap+24],$a3
+	ld	[$ap+28],$t3
+	sllx	$t0,32,$t0
+	sllx	$t1,32,$t1
+	ld	[$ap+32],$acc0			! in1_y
+	or	$a0,$t0,$a0
+	ld	[$ap+32+4],$t0
+	sllx	$t2,32,$t2
+	ld	[$ap+32+8],$acc1
+	or	$a1,$t1,$a1
+	ld	[$ap+32+12],$t1
+	sllx	$t3,32,$t3
+	ld	[$ap+32+16],$acc2
+	or	$a2,$t2,$a2
+	ld	[$ap+32+20],$t2
+	or	$a3,$t3,$a3
+	ld	[$ap+32+24],$acc3
+	sllx	$t0,32,$t0
+	ld	[$ap+32+28],$t3
+	sllx	$t1,32,$t1
+	stx	$a0,[%sp+LOCALS64+$in1_x]
+	sllx	$t2,32,$t2
+	stx	$a1,[%sp+LOCALS64+$in1_x+8]
+	sllx	$t3,32,$t3
+	stx	$a2,[%sp+LOCALS64+$in1_x+16]
+	or	$acc0,$t0,$acc0
+	stx	$a3,[%sp+LOCALS64+$in1_x+24]
+	or	$acc1,$t1,$acc1
+	stx	$acc0,[%sp+LOCALS64+$in1_y]
+	or	$acc2,$t2,$acc2
+	stx	$acc1,[%sp+LOCALS64+$in1_y+8]
+	or	$acc3,$t3,$acc3
+	stx	$acc2,[%sp+LOCALS64+$in1_y+16]
+	stx	$acc3,[%sp+LOCALS64+$in1_y+24]
+
+	ld	[$ap+64],$a0			! in1_z
+	ld	[$ap+64+4],$t0
+	ld	[$ap+64+8],$a1
+	ld	[$ap+64+12],$t1
+	ld	[$ap+64+16],$a2
+	ld	[$ap+64+20],$t2
+	ld	[$ap+64+24],$a3
+	ld	[$ap+64+28],$t3
+	sllx	$t0,32,$t0
+	sllx	$t1,32,$t1
+	or	$a0,$t0,$a0
+	sllx	$t2,32,$t2
+	or	$a1,$t1,$a1
+	sllx	$t3,32,$t3
+	stx	$a0,[%sp+LOCALS64+$in1_z]
+	or	$a2,$t2,$a2
+	stx	$a1,[%sp+LOCALS64+$in1_z+8]
+	or	$a3,$t3,$a3
+	stx	$a2,[%sp+LOCALS64+$in1_z+16]
+	stx	$a3,[%sp+LOCALS64+$in1_z+24]
+
+	or	$a1,$a0,$t0
+	or	$a3,$a2,$t2
+	or	$t2,$t0,$t0
+	movrnz	$t0,-1,$t0			! !in1infty
+	stx	$t0,[%fp+STACK_BIAS-16]
+
+	call	__ecp_nistz256_sqr_mont_vis3	! p256_sqr_mont(Z1sqr, in1_z);
+	add	%sp,LOCALS64+$Z1sqr,$rp
+
+	ldx	[%sp+LOCALS64+$in2_x],$bi
+	mov	$acc0,$a0
+	mov	$acc1,$a1
+	mov	$acc2,$a2
+	mov	$acc3,$a3
+	add	%sp,LOCALS64+$in2_x,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(U2, Z1sqr, in2_x);
+	add	%sp,LOCALS64+$U2,$rp
+
+	ldx	[%sp+LOCALS64+$Z1sqr],$bi	! forward load
+	ldx	[%sp+LOCALS64+$in1_z],$a0
+	ldx	[%sp+LOCALS64+$in1_z+8],$a1
+	ldx	[%sp+LOCALS64+$in1_z+16],$a2
+	ldx	[%sp+LOCALS64+$in1_z+24],$a3
+
+	add	%sp,LOCALS64+$in1_x,$bp
+	call	__ecp_nistz256_sub_from_vis3	! p256_sub(H, U2, in1_x);
+	add	%sp,LOCALS64+$H,$rp
+
+	add	%sp,LOCALS64+$Z1sqr,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(S2, Z1sqr, in1_z);
+	add	%sp,LOCALS64+$S2,$rp
+
+	ldx	[%sp+LOCALS64+$H],$bi
+	ldx	[%sp+LOCALS64+$in1_z],$a0
+	ldx	[%sp+LOCALS64+$in1_z+8],$a1
+	ldx	[%sp+LOCALS64+$in1_z+16],$a2
+	ldx	[%sp+LOCALS64+$in1_z+24],$a3
+	add	%sp,LOCALS64+$H,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(res_z, H, in1_z);
+	add	%sp,LOCALS64+$res_z,$rp
+
+	ldx	[%sp+LOCALS64+$S2],$bi
+	ldx	[%sp+LOCALS64+$in2_y],$a0
+	ldx	[%sp+LOCALS64+$in2_y+8],$a1
+	ldx	[%sp+LOCALS64+$in2_y+16],$a2
+	ldx	[%sp+LOCALS64+$in2_y+24],$a3
+	add	%sp,LOCALS64+$S2,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(S2, S2, in2_y);
+	add	%sp,LOCALS64+$S2,$rp
+
+	ldx	[%sp+LOCALS64+$H],$a0		! forward load
+	ldx	[%sp+LOCALS64+$H+8],$a1
+	ldx	[%sp+LOCALS64+$H+16],$a2
+	ldx	[%sp+LOCALS64+$H+24],$a3
+
+	add	%sp,LOCALS64+$in1_y,$bp
+	call	__ecp_nistz256_sub_from_vis3	! p256_sub(R, S2, in1_y);
+	add	%sp,LOCALS64+$R,$rp
+
+	call	__ecp_nistz256_sqr_mont_vis3	! p256_sqr_mont(Hsqr, H);
+	add	%sp,LOCALS64+$Hsqr,$rp
+
+	ldx	[%sp+LOCALS64+$R],$a0
+	ldx	[%sp+LOCALS64+$R+8],$a1
+	ldx	[%sp+LOCALS64+$R+16],$a2
+	ldx	[%sp+LOCALS64+$R+24],$a3
+	call	__ecp_nistz256_sqr_mont_vis3	! p256_sqr_mont(Rsqr, R);
+	add	%sp,LOCALS64+$Rsqr,$rp
+
+	ldx	[%sp+LOCALS64+$H],$bi
+	ldx	[%sp+LOCALS64+$Hsqr],$a0
+	ldx	[%sp+LOCALS64+$Hsqr+8],$a1
+	ldx	[%sp+LOCALS64+$Hsqr+16],$a2
+	ldx	[%sp+LOCALS64+$Hsqr+24],$a3
+	add	%sp,LOCALS64+$H,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(Hcub, Hsqr, H);
+	add	%sp,LOCALS64+$Hcub,$rp
+
+	ldx	[%sp+LOCALS64+$Hsqr],$bi
+	ldx	[%sp+LOCALS64+$in1_x],$a0
+	ldx	[%sp+LOCALS64+$in1_x+8],$a1
+	ldx	[%sp+LOCALS64+$in1_x+16],$a2
+	ldx	[%sp+LOCALS64+$in1_x+24],$a3
+	add	%sp,LOCALS64+$Hsqr,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(U2, in1_x, Hsqr);
+	add	%sp,LOCALS64+$U2,$rp
+
+	call	__ecp_nistz256_mul_by_2_vis3	! p256_mul_by_2(Hsqr, U2);
+	add	%sp,LOCALS64+$Hsqr,$rp
+
+	add	%sp,LOCALS64+$Rsqr,$bp
+	call	__ecp_nistz256_sub_morf_vis3	! p256_sub(res_x, Rsqr, Hsqr);
+	add	%sp,LOCALS64+$res_x,$rp
+
+	add	%sp,LOCALS64+$Hcub,$bp
+	call	__ecp_nistz256_sub_from_vis3	!  p256_sub(res_x, res_x, Hcub);
+	add	%sp,LOCALS64+$res_x,$rp
+
+	ldx	[%sp+LOCALS64+$Hcub],$bi	! forward load
+	ldx	[%sp+LOCALS64+$in1_y],$a0
+	ldx	[%sp+LOCALS64+$in1_y+8],$a1
+	ldx	[%sp+LOCALS64+$in1_y+16],$a2
+	ldx	[%sp+LOCALS64+$in1_y+24],$a3
+
+	add	%sp,LOCALS64+$U2,$bp
+	call	__ecp_nistz256_sub_morf_vis3	! p256_sub(res_y, U2, res_x);
+	add	%sp,LOCALS64+$res_y,$rp
+
+	add	%sp,LOCALS64+$Hcub,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(S2, in1_y, Hcub);
+	add	%sp,LOCALS64+$S2,$rp
+
+	ldx	[%sp+LOCALS64+$R],$bi
+	ldx	[%sp+LOCALS64+$res_y],$a0
+	ldx	[%sp+LOCALS64+$res_y+8],$a1
+	ldx	[%sp+LOCALS64+$res_y+16],$a2
+	ldx	[%sp+LOCALS64+$res_y+24],$a3
+	add	%sp,LOCALS64+$R,$bp
+	call	__ecp_nistz256_mul_mont_vis3	! p256_mul_mont(res_y, res_y, R);
+	add	%sp,LOCALS64+$res_y,$rp
+
+	add	%sp,LOCALS64+$S2,$bp
+	call	__ecp_nistz256_sub_from_vis3	! p256_sub(res_y, res_y, S2);
+	add	%sp,LOCALS64+$res_y,$rp
+
+	ldx	[%fp+STACK_BIAS-16],$t1		! !in1infty
+	ldx	[%fp+STACK_BIAS-8],$t2		! !in2infty
+1:	call	.+8
+	add	%o7,.Lone_mont_vis3-1b,$bp
+___
+for($i=0;$i<64;$i+=16) {			# conditional moves
+$code.=<<___;
+	ldx	[%sp+LOCALS64+$res_x+$i],$acc0	! res
+	ldx	[%sp+LOCALS64+$res_x+$i+8],$acc1
+	ldx	[%sp+LOCALS64+$in2_x+$i],$acc2	! in2
+	ldx	[%sp+LOCALS64+$in2_x+$i+8],$acc3
+	ldx	[%sp+LOCALS64+$in1_x+$i],$acc4	! in1
+	ldx	[%sp+LOCALS64+$in1_x+$i+8],$acc5
+	movrz	$t1,$acc2,$acc0
+	movrz	$t1,$acc3,$acc1
+	movrz	$t2,$acc4,$acc0
+	movrz	$t2,$acc5,$acc1
+	srlx	$acc0,32,$acc2
+	srlx	$acc1,32,$acc3
+	st	$acc0,[$rp_real+$i]
+	st	$acc2,[$rp_real+$i+4]
+	st	$acc1,[$rp_real+$i+8]
+	st	$acc3,[$rp_real+$i+12]
+___
+}
+for(;$i<96;$i+=16) {
+$code.=<<___;
+	ldx	[%sp+LOCALS64+$res_x+$i],$acc0	! res
+	ldx	[%sp+LOCALS64+$res_x+$i+8],$acc1
+	ldx	[$bp+$i-64],$acc2		! "in2"
+	ldx	[$bp+$i-64+8],$acc3
+	ldx	[%sp+LOCALS64+$in1_x+$i],$acc4	! in1
+	ldx	[%sp+LOCALS64+$in1_x+$i+8],$acc5
+	movrz	$t1,$acc2,$acc0
+	movrz	$t1,$acc3,$acc1
+	movrz	$t2,$acc4,$acc0
+	movrz	$t2,$acc5,$acc1
+	srlx	$acc0,32,$acc2
+	srlx	$acc1,32,$acc3
+	st	$acc0,[$rp_real+$i]
+	st	$acc2,[$rp_real+$i+4]
+	st	$acc1,[$rp_real+$i+8]
+	st	$acc3,[$rp_real+$i+12]
+___
+}
+$code.=<<___;
+	ret
+	restore
+.type	ecp_nistz256_point_add_affine_vis3,#function
+.size	ecp_nistz256_point_add_affine_vis3,.-ecp_nistz256_point_add_affine_vis3
+.align	64
+.Lone_mont_vis3:
+.long	0x00000000,0x00000001, 0xffffffff,0x00000000
+.long	0xffffffff,0xffffffff, 0x00000000,0xfffffffe
+.align	64
+___
+}								}}}
+
+# Purpose of these subroutines is to explicitly encode VIS instructions,
+# so that one can compile the module without having to specify VIS
+# extensions on compiler command line, e.g. -xarch=v9 vs. -xarch=v9a.
+# Idea is to reserve for option to produce "universal" binary and let
+# programmer detect if current CPU is VIS capable at run-time.
+sub unvis3 {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my %bias = ( "g" => 0, "o" => 8, "l" => 16, "i" => 24 );
+my ($ref,$opf);
+my %visopf = (	"addxc"		=> 0x011,
+		"addxccc"	=> 0x013,
+		"umulxhi"	=> 0x016	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rd";
+
+    if ($opf=$visopf{$mnemonic}) {
+	foreach ($rs1,$rs2,$rd) {
+	    return $ref if (!/%([goli])([0-9])/);
+	    $_=$bias{$1}+$2;
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			0x81b00000|$rd<<25|$rs1<<14|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	s/\b(umulxhi|addxc[c]{0,2})\s+(%[goli][0-7]),\s*(%[goli][0-7]),\s*(%[goli][0-7])/
+		&unvis3($1,$2,$3,$4)
+	 /ge;
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-x86.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-x86.pl
new file mode 100755
index 000000000..0c6fc665b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-x86.pl
@@ -0,0 +1,1866 @@
+#! /usr/bin/env perl
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# ECP_NISTZ256 module for x86/SSE2.
+#
+# October 2014.
+#
+# Original ECP_NISTZ256 submission targeting x86_64 is detailed in
+# http://eprint.iacr.org/2013/816. In the process of adaptation
+# original .c module was made 32-bit savvy in order to make this
+# implementation possible.
+#
+#		with/without -DECP_NISTZ256_ASM
+# Pentium	+66-163%
+# PIII		+72-172%
+# P4		+65-132%
+# Core2		+90-215%
+# Sandy Bridge	+105-265% (contemporary i[57]-* are all close to this)
+# Atom		+65-155%
+# Opteron	+54-110%
+# Bulldozer	+99-240%
+# VIA Nano	+93-290%
+#
+# Ranges denote minimum and maximum improvement coefficients depending
+# on benchmark. Lower coefficients are for ECDSA sign, server-side
+# operation. Keep in mind that +200% means 3x improvement.
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output=pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0],$ARGV[$#ARGV] eq "386");
+
+$sse2=0;
+for (@ARGV) { $sse2=1 if (/-DOPENSSL_IA32_SSE2/); }
+
+&external_label("OPENSSL_ia32cap_P") if ($sse2);
+
+
+########################################################################
+# Convert ecp_nistz256_table.c to layout expected by ecp_nistz_gather_w7
+#
+open TABLE,"<ecp_nistz256_table.c"		or
+open TABLE,"<${dir}../ecp_nistz256_table.c"	or
+die "failed to open ecp_nistz256_table.c:",$!;
+
+use integer;
+
+foreach(<TABLE>) {
+	s/TOBN\(\s*(0x[0-9a-f]+),\s*(0x[0-9a-f]+)\s*\)/push @arr,hex($2),hex($1)/geo;
+}
+close TABLE;
+
+# See ecp_nistz256_table.c for explanation for why it's 64*16*37.
+# 64*16*37-1 is because $#arr returns last valid index or @arr, not
+# amount of elements.
+die "insane number of elements" if ($#arr != 64*16*37-1);
+
+&public_label("ecp_nistz256_precomputed");
+&align(4096);
+&set_label("ecp_nistz256_precomputed");
+
+########################################################################
+# this conversion smashes P256_POINT_AFFINE by individual bytes with
+# 64 byte interval, similar to
+#	1111222233334444
+#	1234123412341234
+for(1..37) {
+	@tbl = splice(@arr,0,64*16);
+	for($i=0;$i<64;$i++) {
+		undef @line;
+		for($j=0;$j<64;$j++) {
+			push @line,(@tbl[$j*16+$i/4]>>(($i%4)*8))&0xff;
+		}
+		&data_byte(join(',',map { sprintf "0x%02x",$_} @line));
+	}
+}
+
+########################################################################
+# Keep in mind that constants are stored least to most significant word
+&static_label("RR");
+&set_label("RR",64);
+&data_word(3,0,-1,-5,-2,-1,-3,4);	# 2^512 mod P-256
+
+&static_label("ONE_mont");
+&set_label("ONE_mont");
+&data_word(1,0,0,-1,-1,-1,-2,0);
+
+&static_label("ONE");
+&set_label("ONE");
+&data_word(1,0,0,0,0,0,0,0);
+&asciz("ECP_NISZ256 for x86/SSE2, CRYPTOGAMS by <appro\@openssl.org>");
+&align(64);
+
+########################################################################
+# void ecp_nistz256_mul_by_2(BN_ULONG edi[8],const BN_ULONG esi[8]);
+&function_begin("ecp_nistz256_mul_by_2");
+	&mov	("esi",&wparam(1));
+	&mov	("edi",&wparam(0));
+	&mov	("ebp","esi");
+########################################################################
+# common pattern for internal functions is that %edi is result pointer,
+# %esi and %ebp are input ones, %ebp being optional. %edi is preserved.
+	&call	("_ecp_nistz256_add");
+&function_end("ecp_nistz256_mul_by_2");
+
+########################################################################
+# void ecp_nistz256_mul_by_3(BN_ULONG edi[8],const BN_ULONG esi[8]);
+&function_begin("ecp_nistz256_mul_by_3");
+	&mov	("esi",&wparam(1));
+					# multiplication by 3 is performed
+					# as 2*n+n, but we can't use output
+					# to store 2*n, because if output
+					# pointer equals to input, then
+					# we'll get 2*n+2*n.
+	&stack_push(8);			# therefore we need to allocate
+					# 256-bit intermediate buffer.
+	&mov	("edi","esp");
+	&mov	("ebp","esi");
+	&call	("_ecp_nistz256_add");
+	&lea	("esi",&DWP(0,"edi"));
+	&mov	("ebp",&wparam(1));
+	&mov	("edi",&wparam(0));
+	&call	("_ecp_nistz256_add");
+	&stack_pop(8);
+&function_end("ecp_nistz256_mul_by_3");
+
+########################################################################
+# void ecp_nistz256_div_by_2(BN_ULONG edi[8],const BN_ULONG esi[8]);
+&function_begin("ecp_nistz256_div_by_2");
+	&mov	("esi",&wparam(1));
+	&mov	("edi",&wparam(0));
+	&call	("_ecp_nistz256_div_by_2");
+&function_end("ecp_nistz256_div_by_2");
+
+&function_begin_B("_ecp_nistz256_div_by_2");
+	# tmp = a is odd ? a+mod : a
+	#
+	# note that because mod has special form, i.e. consists of
+	# 0xffffffff, 1 and 0s, we can conditionally synthesize it by
+	# assigning least significant bit of input to one register,
+	# %ebp, and its negative to another, %edx.
+
+	&mov	("ebp",&DWP(0,"esi"));
+	&xor	("edx","edx");
+	&mov	("ebx",&DWP(4,"esi"));
+	&mov	("eax","ebp");
+	&and	("ebp",1);
+	&mov	("ecx",&DWP(8,"esi"));
+	&sub	("edx","ebp");
+
+	&add	("eax","edx");
+	&adc	("ebx","edx");
+	&mov	(&DWP(0,"edi"),"eax");
+	&adc	("ecx","edx");
+	&mov	(&DWP(4,"edi"),"ebx");
+	&mov	(&DWP(8,"edi"),"ecx");
+
+	&mov	("eax",&DWP(12,"esi"));
+	&mov	("ebx",&DWP(16,"esi"));
+	&adc	("eax",0);
+	&mov	("ecx",&DWP(20,"esi"));
+	&adc	("ebx",0);
+	&mov	(&DWP(12,"edi"),"eax");
+	&adc	("ecx",0);
+	&mov	(&DWP(16,"edi"),"ebx");
+	&mov	(&DWP(20,"edi"),"ecx");
+
+	&mov	("eax",&DWP(24,"esi"));
+	&mov	("ebx",&DWP(28,"esi"));
+	&adc	("eax","ebp");
+	&adc	("ebx","edx");
+	&mov	(&DWP(24,"edi"),"eax");
+	&sbb	("esi","esi");			# broadcast carry bit
+	&mov	(&DWP(28,"edi"),"ebx");
+
+	# ret = tmp >> 1
+
+	&mov	("eax",&DWP(0,"edi"));
+	&mov	("ebx",&DWP(4,"edi"));
+	&mov	("ecx",&DWP(8,"edi"));
+	&mov	("edx",&DWP(12,"edi"));
+
+	&shr	("eax",1);
+	&mov	("ebp","ebx");
+	&shl	("ebx",31);
+	&or	("eax","ebx");
+
+	&shr	("ebp",1);
+	&mov	("ebx","ecx");
+	&shl	("ecx",31);
+	&mov	(&DWP(0,"edi"),"eax");
+	&or	("ebp","ecx");
+	&mov	("eax",&DWP(16,"edi"));
+
+	&shr	("ebx",1);
+	&mov	("ecx","edx");
+	&shl	("edx",31);
+	&mov	(&DWP(4,"edi"),"ebp");
+	&or	("ebx","edx");
+	&mov	("ebp",&DWP(20,"edi"));
+
+	&shr	("ecx",1);
+	&mov	("edx","eax");
+	&shl	("eax",31);
+	&mov	(&DWP(8,"edi"),"ebx");
+	&or	("ecx","eax");
+	&mov	("ebx",&DWP(24,"edi"));
+
+	&shr	("edx",1);
+	&mov	("eax","ebp");
+	&shl	("ebp",31);
+	&mov	(&DWP(12,"edi"),"ecx");
+	&or	("edx","ebp");
+	&mov	("ecx",&DWP(28,"edi"));
+
+	&shr	("eax",1);
+	&mov	("ebp","ebx");
+	&shl	("ebx",31);
+	&mov	(&DWP(16,"edi"),"edx");
+	&or	("eax","ebx");
+
+	&shr	("ebp",1);
+	&mov	("ebx","ecx");
+	&shl	("ecx",31);
+	&mov	(&DWP(20,"edi"),"eax");
+	&or	("ebp","ecx");
+
+	&shr	("ebx",1);
+	&shl	("esi",31);
+	&mov	(&DWP(24,"edi"),"ebp");
+	&or	("ebx","esi");			# handle top-most carry bit
+	&mov	(&DWP(28,"edi"),"ebx");
+
+	&ret	();
+&function_end_B("_ecp_nistz256_div_by_2");
+
+########################################################################
+# void ecp_nistz256_add(BN_ULONG edi[8],const BN_ULONG esi[8],
+#					const BN_ULONG ebp[8]);
+&function_begin("ecp_nistz256_add");
+	&mov	("esi",&wparam(1));
+	&mov	("ebp",&wparam(2));
+	&mov	("edi",&wparam(0));
+	&call	("_ecp_nistz256_add");
+&function_end("ecp_nistz256_add");
+
+&function_begin_B("_ecp_nistz256_add");
+	&mov	("eax",&DWP(0,"esi"));
+	&mov	("ebx",&DWP(4,"esi"));
+	&mov	("ecx",&DWP(8,"esi"));
+	&add	("eax",&DWP(0,"ebp"));
+	&mov	("edx",&DWP(12,"esi"));
+	&adc	("ebx",&DWP(4,"ebp"));
+	&mov	(&DWP(0,"edi"),"eax");
+	&adc	("ecx",&DWP(8,"ebp"));
+	&mov	(&DWP(4,"edi"),"ebx");
+	&adc	("edx",&DWP(12,"ebp"));
+	&mov	(&DWP(8,"edi"),"ecx");
+	&mov	(&DWP(12,"edi"),"edx");
+
+	&mov	("eax",&DWP(16,"esi"));
+	&mov	("ebx",&DWP(20,"esi"));
+	&mov	("ecx",&DWP(24,"esi"));
+	&adc	("eax",&DWP(16,"ebp"));
+	&mov	("edx",&DWP(28,"esi"));
+	&adc	("ebx",&DWP(20,"ebp"));
+	&mov	(&DWP(16,"edi"),"eax");
+	&adc	("ecx",&DWP(24,"ebp"));
+	&mov	(&DWP(20,"edi"),"ebx");
+	&mov	("esi",0);
+	&adc	("edx",&DWP(28,"ebp"));
+	&mov	(&DWP(24,"edi"),"ecx");
+	&adc	("esi",0);
+	&mov	(&DWP(28,"edi"),"edx");
+
+	# if a+b >= modulus, subtract modulus.
+	#
+	# But since comparison implies subtraction, we subtract modulus
+	# to see if it borrows, and then subtract it for real if
+	# subtraction didn't borrow.
+
+	&mov	("eax",&DWP(0,"edi"));
+	&mov	("ebx",&DWP(4,"edi"));
+	&mov	("ecx",&DWP(8,"edi"));
+	&sub	("eax",-1);
+	&mov	("edx",&DWP(12,"edi"));
+	&sbb	("ebx",-1);
+	&mov	("eax",&DWP(16,"edi"));
+	&sbb	("ecx",-1);
+	&mov	("ebx",&DWP(20,"edi"));
+	&sbb	("edx",0);
+	&mov	("ecx",&DWP(24,"edi"));
+	&sbb	("eax",0);
+	&mov	("edx",&DWP(28,"edi"));
+	&sbb	("ebx",0);
+	&sbb	("ecx",1);
+	&sbb	("edx",-1);
+	&sbb	("esi",0);
+
+	# Note that because mod has special form, i.e. consists of
+	# 0xffffffff, 1 and 0s, we can conditionally synthesize it by
+	# by using borrow.
+
+	&not	("esi");
+	&mov	("eax",&DWP(0,"edi"));
+	&mov	("ebp","esi");
+	&mov	("ebx",&DWP(4,"edi"));
+	&shr	("ebp",31);
+	&mov	("ecx",&DWP(8,"edi"));
+	&sub	("eax","esi");
+	&mov	("edx",&DWP(12,"edi"));
+	&sbb	("ebx","esi");
+	&mov	(&DWP(0,"edi"),"eax");
+	&sbb	("ecx","esi");
+	&mov	(&DWP(4,"edi"),"ebx");
+	&sbb	("edx",0);
+	&mov	(&DWP(8,"edi"),"ecx");
+	&mov	(&DWP(12,"edi"),"edx");
+
+	&mov	("eax",&DWP(16,"edi"));
+	&mov	("ebx",&DWP(20,"edi"));
+	&mov	("ecx",&DWP(24,"edi"));
+	&sbb	("eax",0);
+	&mov	("edx",&DWP(28,"edi"));
+	&sbb	("ebx",0);
+	&mov	(&DWP(16,"edi"),"eax");
+	&sbb	("ecx","ebp");
+	&mov	(&DWP(20,"edi"),"ebx");
+	&sbb	("edx","esi");
+	&mov	(&DWP(24,"edi"),"ecx");
+	&mov	(&DWP(28,"edi"),"edx");
+
+	&ret	();
+&function_end_B("_ecp_nistz256_add");
+
+########################################################################
+# void ecp_nistz256_sub(BN_ULONG edi[8],const BN_ULONG esi[8],
+#					const BN_ULONG ebp[8]);
+&function_begin("ecp_nistz256_sub");
+	&mov	("esi",&wparam(1));
+	&mov	("ebp",&wparam(2));
+	&mov	("edi",&wparam(0));
+	&call	("_ecp_nistz256_sub");
+&function_end("ecp_nistz256_sub");
+
+&function_begin_B("_ecp_nistz256_sub");
+	&mov	("eax",&DWP(0,"esi"));
+	&mov	("ebx",&DWP(4,"esi"));
+	&mov	("ecx",&DWP(8,"esi"));
+	&sub	("eax",&DWP(0,"ebp"));
+	&mov	("edx",&DWP(12,"esi"));
+	&sbb	("ebx",&DWP(4,"ebp"));
+	&mov	(&DWP(0,"edi"),"eax");
+	&sbb	("ecx",&DWP(8,"ebp"));
+	&mov	(&DWP(4,"edi"),"ebx");
+	&sbb	("edx",&DWP(12,"ebp"));
+	&mov	(&DWP(8,"edi"),"ecx");
+	&mov	(&DWP(12,"edi"),"edx");
+
+	&mov	("eax",&DWP(16,"esi"));
+	&mov	("ebx",&DWP(20,"esi"));
+	&mov	("ecx",&DWP(24,"esi"));
+	&sbb	("eax",&DWP(16,"ebp"));
+	&mov	("edx",&DWP(28,"esi"));
+	&sbb	("ebx",&DWP(20,"ebp"));
+	&sbb	("ecx",&DWP(24,"ebp"));
+	&mov	(&DWP(16,"edi"),"eax");
+	&sbb	("edx",&DWP(28,"ebp"));
+	&mov	(&DWP(20,"edi"),"ebx");
+	&sbb	("esi","esi");			# broadcast borrow bit
+	&mov	(&DWP(24,"edi"),"ecx");
+	&mov	(&DWP(28,"edi"),"edx");
+
+	# if a-b borrows, add modulus.
+	#
+	# Note that because mod has special form, i.e. consists of
+	# 0xffffffff, 1 and 0s, we can conditionally synthesize it by
+	# assigning borrow bit to one register, %ebp, and its negative
+	# to another, %esi. But we started by calculating %esi...
+
+	&mov	("eax",&DWP(0,"edi"));
+	&mov	("ebp","esi");
+	&mov	("ebx",&DWP(4,"edi"));
+	&shr	("ebp",31);
+	&mov	("ecx",&DWP(8,"edi"));
+	&add	("eax","esi");
+	&mov	("edx",&DWP(12,"edi"));
+	&adc	("ebx","esi");
+	&mov	(&DWP(0,"edi"),"eax");
+	&adc	("ecx","esi");
+	&mov	(&DWP(4,"edi"),"ebx");
+	&adc	("edx",0);
+	&mov	(&DWP(8,"edi"),"ecx");
+	&mov	(&DWP(12,"edi"),"edx");
+
+	&mov	("eax",&DWP(16,"edi"));
+	&mov	("ebx",&DWP(20,"edi"));
+	&mov	("ecx",&DWP(24,"edi"));
+	&adc	("eax",0);
+	&mov	("edx",&DWP(28,"edi"));
+	&adc	("ebx",0);
+	&mov	(&DWP(16,"edi"),"eax");
+	&adc	("ecx","ebp");
+	&mov	(&DWP(20,"edi"),"ebx");
+	&adc	("edx","esi");
+	&mov	(&DWP(24,"edi"),"ecx");
+	&mov	(&DWP(28,"edi"),"edx");
+
+	&ret	();
+&function_end_B("_ecp_nistz256_sub");
+
+########################################################################
+# void ecp_nistz256_neg(BN_ULONG edi[8],const BN_ULONG esi[8]);
+&function_begin("ecp_nistz256_neg");
+	&mov	("ebp",&wparam(1));
+	&mov	("edi",&wparam(0));
+
+	&xor	("eax","eax");
+	&stack_push(8);
+	&mov	(&DWP(0,"esp"),"eax");
+	&mov	("esi","esp");
+	&mov	(&DWP(4,"esp"),"eax");
+	&mov	(&DWP(8,"esp"),"eax");
+	&mov	(&DWP(12,"esp"),"eax");
+	&mov	(&DWP(16,"esp"),"eax");
+	&mov	(&DWP(20,"esp"),"eax");
+	&mov	(&DWP(24,"esp"),"eax");
+	&mov	(&DWP(28,"esp"),"eax");
+
+	&call	("_ecp_nistz256_sub");
+
+	&stack_pop(8);
+&function_end("ecp_nistz256_neg");
+
+&function_begin_B("_picup_eax");
+	&mov	("eax",&DWP(0,"esp"));
+	&ret	();
+&function_end_B("_picup_eax");
+
+########################################################################
+# void ecp_nistz256_to_mont(BN_ULONG edi[8],const BN_ULONG esi[8]);
+&function_begin("ecp_nistz256_to_mont");
+	&mov	("esi",&wparam(1));
+	&call	("_picup_eax");
+    &set_label("pic");
+	&lea	("ebp",&DWP(&label("RR")."-".&label("pic"),"eax"));
+						if ($sse2) {
+	&picmeup("eax","OPENSSL_ia32cap_P","eax",&label("pic"));
+	&mov	("eax",&DWP(0,"eax"));		}
+	&mov	("edi",&wparam(0));
+	&call	("_ecp_nistz256_mul_mont");
+&function_end("ecp_nistz256_to_mont");
+
+########################################################################
+# void ecp_nistz256_from_mont(BN_ULONG edi[8],const BN_ULONG esi[8]);
+&function_begin("ecp_nistz256_from_mont");
+	&mov	("esi",&wparam(1));
+	&call	("_picup_eax");
+    &set_label("pic");
+	&lea	("ebp",&DWP(&label("ONE")."-".&label("pic"),"eax"));
+						if ($sse2) {
+	&picmeup("eax","OPENSSL_ia32cap_P","eax",&label("pic"));
+	&mov	("eax",&DWP(0,"eax"));		}
+	&mov	("edi",&wparam(0));
+	&call	("_ecp_nistz256_mul_mont");
+&function_end("ecp_nistz256_from_mont");
+
+########################################################################
+# void ecp_nistz256_mul_mont(BN_ULONG edi[8],const BN_ULONG esi[8],
+#					     const BN_ULONG ebp[8]);
+&function_begin("ecp_nistz256_mul_mont");
+	&mov	("esi",&wparam(1));
+	&mov	("ebp",&wparam(2));
+						if ($sse2) {
+	&call	("_picup_eax");
+    &set_label("pic");
+	&picmeup("eax","OPENSSL_ia32cap_P","eax",&label("pic"));
+	&mov	("eax",&DWP(0,"eax"));		}
+	&mov	("edi",&wparam(0));
+	&call	("_ecp_nistz256_mul_mont");
+&function_end("ecp_nistz256_mul_mont");
+
+########################################################################
+# void ecp_nistz256_sqr_mont(BN_ULONG edi[8],const BN_ULONG esi[8]);
+&function_begin("ecp_nistz256_sqr_mont");
+	&mov	("esi",&wparam(1));
+						if ($sse2) {
+	&call	("_picup_eax");
+    &set_label("pic");
+	&picmeup("eax","OPENSSL_ia32cap_P","eax",&label("pic"));
+	&mov	("eax",&DWP(0,"eax"));		}
+	&mov	("edi",&wparam(0));
+	&mov	("ebp","esi");
+	&call	("_ecp_nistz256_mul_mont");
+&function_end("ecp_nistz256_sqr_mont");
+
+&function_begin_B("_ecp_nistz256_mul_mont");
+						if ($sse2) {
+	&and	("eax",1<<24|1<<26);
+	&cmp	("eax",1<<24|1<<26);		# see if XMM+SSE2 is on
+	&jne	(&label("mul_mont_ialu"));
+
+	########################################
+	# SSE2 code path featuring 32x16-bit
+	# multiplications is ~2x faster than
+	# IALU counterpart (except on Atom)...
+	########################################
+	# stack layout:
+	# +------------------------------------+< %esp
+	# | 7 16-byte temporary XMM words,     |
+	# | "sliding" toward lower address     |
+	# .                                    .
+	# +------------------------------------+
+	# | unused XMM word                    |
+	# +------------------------------------+< +128,%ebx
+	# | 8 16-byte XMM words holding copies |
+	# | of a[i]<<64|a[i]                   |
+	# .                                    .
+	# .                                    .
+	# +------------------------------------+< +256
+	&mov	("edx","esp");
+	&sub	("esp",0x100);
+
+	&movd	("xmm7",&DWP(0,"ebp"));		# b[0] -> 0000.00xy
+	&lea	("ebp",&DWP(4,"ebp"));
+	&pcmpeqd("xmm6","xmm6");
+	&psrlq	("xmm6",48);			# compose 0xffff<<64|0xffff
+
+	&pshuflw("xmm7","xmm7",0b11011100);	# 0000.00xy -> 0000.0x0y
+	&and	("esp",-64);
+	&pshufd	("xmm7","xmm7",0b11011100);	# 0000.0x0y -> 000x.000y
+	&lea	("ebx",&DWP(0x80,"esp"));
+
+	&movd	("xmm0",&DWP(4*0,"esi"));	# a[0] -> 0000.00xy
+	&pshufd	("xmm0","xmm0",0b11001100);	# 0000.00xy -> 00xy.00xy
+	&movd	("xmm1",&DWP(4*1,"esi"));	# a[1] -> ...
+	&movdqa	(&QWP(0x00,"ebx"),"xmm0");	# offload converted a[0]
+	&pmuludq("xmm0","xmm7");		# a[0]*b[0]
+
+	&movd	("xmm2",&DWP(4*2,"esi"));
+	&pshufd	("xmm1","xmm1",0b11001100);
+	&movdqa	(&QWP(0x10,"ebx"),"xmm1");
+	&pmuludq("xmm1","xmm7");		# a[1]*b[0]
+
+	 &movq	("xmm4","xmm0");		# clear upper 64 bits
+	 &pslldq("xmm4",6);
+	 &paddq	("xmm4","xmm0");
+	 &movdqa("xmm5","xmm4");
+	 &psrldq("xmm4",10);			# upper 32 bits of a[0]*b[0]
+	 &pand	("xmm5","xmm6");		# lower 32 bits of a[0]*b[0]
+
+	# Upper half of a[0]*b[i] is carried into next multiplication
+	# iteration, while lower one "participates" in actual reduction.
+	# Normally latter is done by accumulating result of multiplication
+	# of modulus by "magic" digit, but thanks to special form of modulus
+	# and "magic" digit it can be performed only with additions and
+	# subtractions (see note in IALU section below). Note that we are
+	# not bothered with carry bits, they are accumulated in "flatten"
+	# phase after all multiplications and reductions.
+
+	&movd	("xmm3",&DWP(4*3,"esi"));
+	&pshufd	("xmm2","xmm2",0b11001100);
+	&movdqa	(&QWP(0x20,"ebx"),"xmm2");
+	&pmuludq("xmm2","xmm7");		# a[2]*b[0]
+	 &paddq	("xmm1","xmm4");		# a[1]*b[0]+hw(a[0]*b[0]), carry
+	&movdqa	(&QWP(0x00,"esp"),"xmm1");	# t[0]
+
+	&movd	("xmm0",&DWP(4*4,"esi"));
+	&pshufd	("xmm3","xmm3",0b11001100);
+	&movdqa	(&QWP(0x30,"ebx"),"xmm3");
+	&pmuludq("xmm3","xmm7");		# a[3]*b[0]
+	&movdqa	(&QWP(0x10,"esp"),"xmm2");
+
+	&movd	("xmm1",&DWP(4*5,"esi"));
+	&pshufd	("xmm0","xmm0",0b11001100);
+	&movdqa	(&QWP(0x40,"ebx"),"xmm0");
+	&pmuludq("xmm0","xmm7");		# a[4]*b[0]
+	 &paddq	("xmm3","xmm5");		# a[3]*b[0]+lw(a[0]*b[0]), reduction step
+	&movdqa	(&QWP(0x20,"esp"),"xmm3");
+
+	&movd	("xmm2",&DWP(4*6,"esi"));
+	&pshufd	("xmm1","xmm1",0b11001100);
+	&movdqa	(&QWP(0x50,"ebx"),"xmm1");
+	&pmuludq("xmm1","xmm7");		# a[5]*b[0]
+	&movdqa	(&QWP(0x30,"esp"),"xmm0");
+	 &pshufd("xmm4","xmm5",0b10110001);	# xmm4 = xmm5<<32, reduction step
+
+	&movd	("xmm3",&DWP(4*7,"esi"));
+	&pshufd	("xmm2","xmm2",0b11001100);
+	&movdqa	(&QWP(0x60,"ebx"),"xmm2");
+	&pmuludq("xmm2","xmm7");		# a[6]*b[0]
+	&movdqa	(&QWP(0x40,"esp"),"xmm1");
+	 &psubq	("xmm4","xmm5");		# xmm4 = xmm5*0xffffffff, reduction step
+
+	&movd	("xmm0",&DWP(0,"ebp"));		# b[1] -> 0000.00xy
+	&pshufd	("xmm3","xmm3",0b11001100);
+	&movdqa	(&QWP(0x70,"ebx"),"xmm3");
+	&pmuludq("xmm3","xmm7");		# a[7]*b[0]
+
+	&pshuflw("xmm7","xmm0",0b11011100);	# 0000.00xy -> 0000.0x0y
+	&movdqa	("xmm0",&QWP(0x00,"ebx"));	# pre-load converted a[0]
+	&pshufd	("xmm7","xmm7",0b11011100);	# 0000.0x0y -> 000x.000y
+
+	&mov	("ecx",6);
+	&lea	("ebp",&DWP(4,"ebp"));
+	&jmp	(&label("madd_sse2"));
+
+&set_label("madd_sse2",16);
+	 &paddq	("xmm2","xmm5");		# a[6]*b[i-1]+lw(a[0]*b[i-1]), reduction step [modulo-scheduled]
+	 &paddq	("xmm3","xmm4");		# a[7]*b[i-1]+lw(a[0]*b[i-1])*0xffffffff, reduction step [modulo-scheduled]
+	&movdqa	("xmm1",&QWP(0x10,"ebx"));
+	&pmuludq("xmm0","xmm7");		# a[0]*b[i]
+	 &movdqa(&QWP(0x50,"esp"),"xmm2");
+
+	&movdqa	("xmm2",&QWP(0x20,"ebx"));
+	&pmuludq("xmm1","xmm7");		# a[1]*b[i]
+	 &movdqa(&QWP(0x60,"esp"),"xmm3");
+	&paddq	("xmm0",&QWP(0x00,"esp"));
+
+	&movdqa	("xmm3",&QWP(0x30,"ebx"));
+	&pmuludq("xmm2","xmm7");		# a[2]*b[i]
+	 &movq	("xmm4","xmm0");		# clear upper 64 bits
+	 &pslldq("xmm4",6);
+	&paddq	("xmm1",&QWP(0x10,"esp"));
+	 &paddq	("xmm4","xmm0");
+	 &movdqa("xmm5","xmm4");
+	 &psrldq("xmm4",10);			# upper 33 bits of a[0]*b[i]+t[0]
+
+	&movdqa	("xmm0",&QWP(0x40,"ebx"));
+	&pmuludq("xmm3","xmm7");		# a[3]*b[i]
+	 &paddq	("xmm1","xmm4");		# a[1]*b[i]+hw(a[0]*b[i]), carry
+	&paddq	("xmm2",&QWP(0x20,"esp"));
+	&movdqa	(&QWP(0x00,"esp"),"xmm1");
+
+	&movdqa	("xmm1",&QWP(0x50,"ebx"));
+	&pmuludq("xmm0","xmm7");		# a[4]*b[i]
+	&paddq	("xmm3",&QWP(0x30,"esp"));
+	&movdqa	(&QWP(0x10,"esp"),"xmm2");
+	 &pand	("xmm5","xmm6");		# lower 32 bits of a[0]*b[i]
+
+	&movdqa	("xmm2",&QWP(0x60,"ebx"));
+	&pmuludq("xmm1","xmm7");		# a[5]*b[i]
+	 &paddq	("xmm3","xmm5");		# a[3]*b[i]+lw(a[0]*b[i]), reduction step
+	&paddq	("xmm0",&QWP(0x40,"esp"));
+	&movdqa	(&QWP(0x20,"esp"),"xmm3");
+	 &pshufd("xmm4","xmm5",0b10110001);	# xmm4 = xmm5<<32, reduction step
+
+	&movdqa	("xmm3","xmm7");
+	&pmuludq("xmm2","xmm7");		# a[6]*b[i]
+	 &movd	("xmm7",&DWP(0,"ebp"));		# b[i++] -> 0000.00xy
+	 &lea	("ebp",&DWP(4,"ebp"));
+	&paddq	("xmm1",&QWP(0x50,"esp"));
+	 &psubq	("xmm4","xmm5");		# xmm4 = xmm5*0xffffffff, reduction step
+	&movdqa	(&QWP(0x30,"esp"),"xmm0");
+	 &pshuflw("xmm7","xmm7",0b11011100);	# 0000.00xy -> 0000.0x0y
+
+	&pmuludq("xmm3",&QWP(0x70,"ebx"));	# a[7]*b[i]
+	 &pshufd("xmm7","xmm7",0b11011100);	# 0000.0x0y -> 000x.000y
+	 &movdqa("xmm0",&QWP(0x00,"ebx"));	# pre-load converted a[0]
+	&movdqa	(&QWP(0x40,"esp"),"xmm1");
+	&paddq	("xmm2",&QWP(0x60,"esp"));
+
+	&dec	("ecx");
+	&jnz	(&label("madd_sse2"));
+
+	 &paddq	("xmm2","xmm5");		# a[6]*b[6]+lw(a[0]*b[6]), reduction step [modulo-scheduled]
+	 &paddq	("xmm3","xmm4");		# a[7]*b[6]+lw(a[0]*b[6])*0xffffffff, reduction step [modulo-scheduled]
+	&movdqa	("xmm1",&QWP(0x10,"ebx"));
+	&pmuludq("xmm0","xmm7");		# a[0]*b[7]
+	 &movdqa(&QWP(0x50,"esp"),"xmm2");
+
+	&movdqa	("xmm2",&QWP(0x20,"ebx"));
+	&pmuludq("xmm1","xmm7");		# a[1]*b[7]
+	 &movdqa(&QWP(0x60,"esp"),"xmm3");
+	&paddq	("xmm0",&QWP(0x00,"esp"));
+
+	&movdqa	("xmm3",&QWP(0x30,"ebx"));
+	&pmuludq("xmm2","xmm7");		# a[2]*b[7]
+	 &movq	("xmm4","xmm0");		# clear upper 64 bits
+	 &pslldq("xmm4",6);
+	&paddq	("xmm1",&QWP(0x10,"esp"));
+	 &paddq	("xmm4","xmm0");
+	 &movdqa("xmm5","xmm4");
+	 &psrldq("xmm4",10);			# upper 33 bits of a[0]*b[i]+t[0]
+
+	&movdqa	("xmm0",&QWP(0x40,"ebx"));
+	&pmuludq("xmm3","xmm7");		# a[3]*b[7]
+	 &paddq	("xmm1","xmm4");		# a[1]*b[7]+hw(a[0]*b[7]), carry
+	&paddq	("xmm2",&QWP(0x20,"esp"));
+	&movdqa	(&QWP(0x00,"esp"),"xmm1");
+
+	&movdqa	("xmm1",&QWP(0x50,"ebx"));
+	&pmuludq("xmm0","xmm7");		# a[4]*b[7]
+	&paddq	("xmm3",&QWP(0x30,"esp"));
+	&movdqa	(&QWP(0x10,"esp"),"xmm2");
+	 &pand	("xmm5","xmm6");		# lower 32 bits of a[0]*b[i]
+
+	&movdqa	("xmm2",&QWP(0x60,"ebx"));
+	&pmuludq("xmm1","xmm7");		# a[5]*b[7]
+	 &paddq	("xmm3","xmm5");		# reduction step
+	&paddq	("xmm0",&QWP(0x40,"esp"));
+	&movdqa	(&QWP(0x20,"esp"),"xmm3");
+	 &pshufd("xmm4","xmm5",0b10110001);	# xmm4 = xmm5<<32, reduction step
+
+	&movdqa	("xmm3",&QWP(0x70,"ebx"));
+	&pmuludq("xmm2","xmm7");		# a[6]*b[7]
+	&paddq	("xmm1",&QWP(0x50,"esp"));
+	 &psubq	("xmm4","xmm5");		# xmm4 = xmm5*0xffffffff, reduction step
+	&movdqa	(&QWP(0x30,"esp"),"xmm0");
+
+	&pmuludq("xmm3","xmm7");		# a[7]*b[7]
+	&pcmpeqd("xmm7","xmm7");
+	&movdqa	("xmm0",&QWP(0x00,"esp"));
+	&pslldq	("xmm7",8);
+	&movdqa	(&QWP(0x40,"esp"),"xmm1");
+	&paddq	("xmm2",&QWP(0x60,"esp"));
+
+	 &paddq	("xmm2","xmm5");		# a[6]*b[7]+lw(a[0]*b[7]), reduction step
+	 &paddq	("xmm3","xmm4");		# a[6]*b[7]+lw(a[0]*b[7])*0xffffffff, reduction step
+	 &movdqa(&QWP(0x50,"esp"),"xmm2");
+	 &movdqa(&QWP(0x60,"esp"),"xmm3");
+
+	&movdqa	("xmm1",&QWP(0x10,"esp"));
+	&movdqa	("xmm2",&QWP(0x20,"esp"));
+	&movdqa	("xmm3",&QWP(0x30,"esp"));
+
+	&movq	("xmm4","xmm0");		# "flatten"
+	&pand	("xmm0","xmm7");
+	&xor	("ebp","ebp");
+	&pslldq	("xmm4",6);
+	 &movq	("xmm5","xmm1");
+	&paddq	("xmm0","xmm4");
+	 &pand	("xmm1","xmm7");
+	&psrldq	("xmm0",6);
+	&movd	("eax","xmm0");
+	&psrldq	("xmm0",4);
+
+	&paddq	("xmm5","xmm0");
+	&movdqa	("xmm0",&QWP(0x40,"esp"));
+	&sub	("eax",-1);			# start subtracting modulus,
+						# this is used to determine
+						# if result is larger/smaller
+						# than modulus (see below)
+	&pslldq	("xmm5",6);
+	 &movq	("xmm4","xmm2");
+	&paddq	("xmm1","xmm5");
+	 &pand	("xmm2","xmm7");
+	&psrldq	("xmm1",6);
+	&mov	(&DWP(4*0,"edi"),"eax");
+	&movd	("eax","xmm1");
+	&psrldq	("xmm1",4);
+
+	&paddq	("xmm4","xmm1");
+	&movdqa	("xmm1",&QWP(0x50,"esp"));
+	&sbb	("eax",-1);
+	&pslldq	("xmm4",6);
+	 &movq	("xmm5","xmm3");
+	&paddq	("xmm2","xmm4");
+	 &pand	("xmm3","xmm7");
+	&psrldq	("xmm2",6);
+	&mov	(&DWP(4*1,"edi"),"eax");
+	&movd	("eax","xmm2");
+	&psrldq	("xmm2",4);
+
+	&paddq	("xmm5","xmm2");
+	&movdqa	("xmm2",&QWP(0x60,"esp"));
+	&sbb	("eax",-1);
+	&pslldq	("xmm5",6);
+	 &movq	("xmm4","xmm0");
+	&paddq	("xmm3","xmm5");
+	 &pand	("xmm0","xmm7");
+	&psrldq	("xmm3",6);
+	&mov	(&DWP(4*2,"edi"),"eax");
+	&movd	("eax","xmm3");
+	&psrldq	("xmm3",4);
+
+	&paddq	("xmm4","xmm3");
+	&sbb	("eax",0);
+	&pslldq	("xmm4",6);
+	 &movq	("xmm5","xmm1");
+	&paddq	("xmm0","xmm4");
+	 &pand	("xmm1","xmm7");
+	&psrldq	("xmm0",6);
+	&mov	(&DWP(4*3,"edi"),"eax");
+	&movd	("eax","xmm0");
+	&psrldq	("xmm0",4);
+
+	&paddq	("xmm5","xmm0");
+	&sbb	("eax",0);
+	&pslldq	("xmm5",6);
+	 &movq	("xmm4","xmm2");
+	&paddq	("xmm1","xmm5");
+	 &pand	("xmm2","xmm7");
+	&psrldq	("xmm1",6);
+	&movd	("ebx","xmm1");
+	&psrldq	("xmm1",4);
+	&mov	("esp","edx");
+
+	&paddq	("xmm4","xmm1");
+	&pslldq	("xmm4",6);
+	&paddq	("xmm2","xmm4");
+	&psrldq	("xmm2",6);
+	&movd	("ecx","xmm2");
+	&psrldq	("xmm2",4);
+	&sbb	("ebx",0);
+	&movd	("edx","xmm2");
+	&pextrw	("esi","xmm2",2);		# top-most overflow bit
+	&sbb	("ecx",1);
+	&sbb	("edx",-1);
+	&sbb	("esi",0);			# borrow from subtraction
+
+	# Final step is "if result > mod, subtract mod", and at this point
+	# we have result - mod written to output buffer, as well as borrow
+	# bit from this subtraction, and if borrow bit is set, we add
+	# modulus back.
+	#
+	# Note that because mod has special form, i.e. consists of
+	# 0xffffffff, 1 and 0s, we can conditionally synthesize it by
+	# assigning borrow bit to one register, %ebp, and its negative
+	# to another, %esi. But we started by calculating %esi...
+
+	&sub	("ebp","esi");
+	&add	(&DWP(4*0,"edi"),"esi");	# add modulus or zero
+	&adc	(&DWP(4*1,"edi"),"esi");
+	&adc	(&DWP(4*2,"edi"),"esi");
+	&adc	(&DWP(4*3,"edi"),0);
+	&adc	("eax",0);
+	&adc	("ebx",0);
+	&mov	(&DWP(4*4,"edi"),"eax");
+	&adc	("ecx","ebp");
+	&mov	(&DWP(4*5,"edi"),"ebx");
+	&adc	("edx","esi");
+	&mov	(&DWP(4*6,"edi"),"ecx");
+	&mov	(&DWP(4*7,"edi"),"edx");
+
+	&ret	();
+
+&set_label("mul_mont_ialu",16);			}
+
+	########################################
+	# IALU code path suitable for all CPUs.
+	########################################
+	# stack layout:
+	# +------------------------------------+< %esp
+	# | 8 32-bit temporary words, accessed |
+	# | as circular buffer                 |
+	# .                                    .
+	# .                                    .
+	# +------------------------------------+< +32
+	# | offloaded destination pointer      |
+	# +------------------------------------+
+	# | unused                             |
+	# +------------------------------------+< +40
+	&sub	("esp",10*4);
+
+	&mov	("eax",&DWP(0*4,"esi"));		# a[0]
+	&mov	("ebx",&DWP(0*4,"ebp"));		# b[0]
+	&mov	(&DWP(8*4,"esp"),"edi");		# off-load dst ptr
+
+	&mul	("ebx");				# a[0]*b[0]
+	&mov	(&DWP(0*4,"esp"),"eax");		# t[0]
+	&mov	("eax",&DWP(1*4,"esi"));
+	&mov	("ecx","edx")
+
+	&mul	("ebx");				# a[1]*b[0]
+	&add	("ecx","eax");
+	&mov	("eax",&DWP(2*4,"esi"));
+	&adc	("edx",0);
+	&mov	(&DWP(1*4,"esp"),"ecx");		# t[1]
+	&mov	("ecx","edx");
+
+	&mul	("ebx");				# a[2]*b[0]
+	&add	("ecx","eax");
+	&mov	("eax",&DWP(3*4,"esi"));
+	&adc	("edx",0);
+	&mov	(&DWP(2*4,"esp"),"ecx");		# t[2]
+	&mov	("ecx","edx");
+
+	&mul	("ebx");				# a[3]*b[0]
+	&add	("ecx","eax");
+	&mov	("eax",&DWP(4*4,"esi"));
+	&adc	("edx",0);
+	&mov	(&DWP(3*4,"esp"),"ecx");		# t[3]
+	&mov	("ecx","edx");
+
+	&mul	("ebx");				# a[4]*b[0]
+	&add	("ecx","eax");
+	&mov	("eax",&DWP(5*4,"esi"));
+	&adc	("edx",0);
+	&mov	(&DWP(4*4,"esp"),"ecx");		# t[4]
+	&mov	("ecx","edx");
+
+	&mul	("ebx");				# a[5]*b[0]
+	&add	("ecx","eax");
+	&mov	("eax",&DWP(6*4,"esi"));
+	&adc	("edx",0);
+	&mov	(&DWP(5*4,"esp"),"ecx");		# t[5]
+	&mov	("ecx","edx");
+
+	&mul	("ebx");				# a[6]*b[0]
+	&add	("ecx","eax");
+	&mov	("eax",&DWP(7*4,"esi"));
+	&adc	("edx",0);
+	&mov	(&DWP(6*4,"esp"),"ecx");		# t[6]
+	&mov	("ecx","edx");
+
+	&xor	("edi","edi");				# initial top-most carry
+	&mul	("ebx");				# a[7]*b[0]
+	&add	("ecx","eax");				# t[7]
+	&mov	("eax",&DWP(0*4,"esp"));		# t[0]
+	&adc	("edx",0);				# t[8]
+
+for ($i=0;$i<7;$i++) {
+	my $j=$i+1;
+
+	# Reduction iteration is normally performed by accumulating
+	# result of multiplication of modulus by "magic" digit [and
+	# omitting least significant word, which is guaranteed to
+	# be 0], but thanks to special form of modulus and "magic"
+	# digit being equal to least significant word, it can be
+	# performed with additions and subtractions alone. Indeed:
+	#
+	#        ffff.0001.0000.0000.0000.ffff.ffff.ffff
+	# *                                         abcd
+	# + xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.abcd
+	#
+	# Now observing that ff..ff*x = (2^n-1)*x = 2^n*x-x, we
+	# rewrite above as:
+	#
+	#   xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.abcd
+	# + abcd.0000.abcd.0000.0000.abcd.0000.0000.0000
+	# -      abcd.0000.0000.0000.0000.0000.0000.abcd
+	#
+	# or marking redundant operations:
+	#
+	#   xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.xxxx.----
+	# + abcd.0000.abcd.0000.0000.abcd.----.----.----
+	# -      abcd.----.----.----.----.----.----.----
+
+	&add	(&DWP((($i+3)%8)*4,"esp"),"eax");	# t[3]+=t[0]
+	&adc	(&DWP((($i+4)%8)*4,"esp"),0);		# t[4]+=0
+	&adc	(&DWP((($i+5)%8)*4,"esp"),0);		# t[5]+=0
+	&adc	(&DWP((($i+6)%8)*4,"esp"),"eax");	# t[6]+=t[0]
+	&adc	("ecx",0);				# t[7]+=0
+	&adc	("edx","eax");				# t[8]+=t[0]
+	&adc	("edi",0);				# top-most carry
+	 &mov	("ebx",&DWP($j*4,"ebp"));		# b[i]
+	&sub	("ecx","eax");				# t[7]-=t[0]
+	 &mov	("eax",&DWP(0*4,"esi"));		# a[0]
+	&sbb	("edx",0);				# t[8]-=0
+	&mov	(&DWP((($i+7)%8)*4,"esp"),"ecx");
+	&sbb	("edi",0);				# top-most carry,
+							# keep in mind that
+							# netto result is
+							# *addition* of value
+							# with (abcd<<32)-abcd
+							# on top, so that
+							# underflow is
+							# impossible, because
+							# (abcd<<32)-abcd
+							# doesn't underflow
+	&mov	(&DWP((($i+8)%8)*4,"esp"),"edx");
+
+	&mul	("ebx");				# a[0]*b[i]
+	&add	("eax",&DWP((($j+0)%8)*4,"esp"));
+	&adc	("edx",0);
+	&mov	(&DWP((($j+0)%8)*4,"esp"),"eax");
+	&mov	("eax",&DWP(1*4,"esi"));
+	&mov	("ecx","edx")
+
+	&mul	("ebx");				# a[1]*b[i]
+	&add	("ecx",&DWP((($j+1)%8)*4,"esp"));
+	&adc	("edx",0);
+	&add	("ecx","eax");
+	&adc	("edx",0);
+	&mov	("eax",&DWP(2*4,"esi"));
+	&mov	(&DWP((($j+1)%8)*4,"esp"),"ecx");
+	&mov	("ecx","edx");
+
+	&mul	("ebx");				# a[2]*b[i]
+	&add	("ecx",&DWP((($j+2)%8)*4,"esp"));
+	&adc	("edx",0);
+	&add	("ecx","eax");
+	&adc	("edx",0);
+	&mov	("eax",&DWP(3*4,"esi"));
+	&mov	(&DWP((($j+2)%8)*4,"esp"),"ecx");
+	&mov	("ecx","edx");
+
+	&mul	("ebx");				# a[3]*b[i]
+	&add	("ecx",&DWP((($j+3)%8)*4,"esp"));
+	&adc	("edx",0);
+	&add	("ecx","eax");
+	&adc	("edx",0);
+	&mov	("eax",&DWP(4*4,"esi"));
+	&mov	(&DWP((($j+3)%8)*4,"esp"),"ecx");
+	&mov	("ecx","edx");
+
+	&mul	("ebx");				# a[4]*b[i]
+	&add	("ecx",&DWP((($j+4)%8)*4,"esp"));
+	&adc	("edx",0);
+	&add	("ecx","eax");
+	&adc	("edx",0);
+	&mov	("eax",&DWP(5*4,"esi"));
+	&mov	(&DWP((($j+4)%8)*4,"esp"),"ecx");
+	&mov	("ecx","edx");
+
+	&mul	("ebx");				# a[5]*b[i]
+	&add	("ecx",&DWP((($j+5)%8)*4,"esp"));
+	&adc	("edx",0);
+	&add	("ecx","eax");
+	&adc	("edx",0);
+	&mov	("eax",&DWP(6*4,"esi"));
+	&mov	(&DWP((($j+5)%8)*4,"esp"),"ecx");
+	&mov	("ecx","edx");
+
+	&mul	("ebx");				# a[6]*b[i]
+	&add	("ecx",&DWP((($j+6)%8)*4,"esp"));
+	&adc	("edx",0);
+	&add	("ecx","eax");
+	&adc	("edx",0);
+	&mov	("eax",&DWP(7*4,"esi"));
+	&mov	(&DWP((($j+6)%8)*4,"esp"),"ecx");
+	&mov	("ecx","edx");
+
+	&mul	("ebx");				# a[7]*b[i]
+	&add	("ecx",&DWP((($j+7)%8)*4,"esp"));
+	&adc	("edx",0);
+	&add	("ecx","eax");				# t[7]
+	&mov	("eax",&DWP((($j+0)%8)*4,"esp"));	# t[0]
+	&adc	("edx","edi");				# t[8]
+	&mov	("edi",0);
+	&adc	("edi",0);				# top-most carry
+}
+	&mov	("ebp",&DWP(8*4,"esp"));		# restore dst ptr
+	&xor	("esi","esi");
+	my $j=$i+1;
+
+	# last multiplication-less reduction
+	&add	(&DWP((($i+3)%8)*4,"esp"),"eax");	# t[3]+=t[0]
+	&adc	(&DWP((($i+4)%8)*4,"esp"),0);		# t[4]+=0
+	&adc	(&DWP((($i+5)%8)*4,"esp"),0);		# t[5]+=0
+	&adc	(&DWP((($i+6)%8)*4,"esp"),"eax");	# t[6]+=t[0]
+	&adc	("ecx",0);				# t[7]+=0
+	&adc	("edx","eax");				# t[8]+=t[0]
+	&adc	("edi",0);				# top-most carry
+	 &mov	("ebx",&DWP((($j+1)%8)*4,"esp"));
+	&sub	("ecx","eax");				# t[7]-=t[0]
+	 &mov	("eax",&DWP((($j+0)%8)*4,"esp"));
+	&sbb	("edx",0);				# t[8]-=0
+	&mov	(&DWP((($i+7)%8)*4,"esp"),"ecx");
+	&sbb	("edi",0);				# top-most carry
+	&mov	(&DWP((($i+8)%8)*4,"esp"),"edx");
+
+	# Final step is "if result > mod, subtract mod", but we do it
+	# "other way around", namely write result - mod to output buffer
+	# and if subtraction borrowed, add modulus back.
+
+	&mov	("ecx",&DWP((($j+2)%8)*4,"esp"));
+	&sub	("eax",-1);
+	&mov	("edx",&DWP((($j+3)%8)*4,"esp"));
+	&sbb	("ebx",-1);
+	&mov	(&DWP(0*4,"ebp"),"eax");
+	&sbb	("ecx",-1);
+	&mov	(&DWP(1*4,"ebp"),"ebx");
+	&sbb	("edx",0);
+	&mov	(&DWP(2*4,"ebp"),"ecx");
+	&mov	(&DWP(3*4,"ebp"),"edx");
+
+	&mov	("eax",&DWP((($j+4)%8)*4,"esp"));
+	&mov	("ebx",&DWP((($j+5)%8)*4,"esp"));
+	&mov	("ecx",&DWP((($j+6)%8)*4,"esp"));
+	&sbb	("eax",0);
+	&mov	("edx",&DWP((($j+7)%8)*4,"esp"));
+	&sbb	("ebx",0);
+	&sbb	("ecx",1);
+	&sbb	("edx",-1);
+	&sbb	("edi",0);
+
+	# Note that because mod has special form, i.e. consists of
+	# 0xffffffff, 1 and 0s, we can conditionally synthesize it by
+	# assigning borrow bit to one register, %ebp, and its negative
+	# to another, %esi. But we started by calculating %esi...
+
+	&sub	("esi","edi");
+	&add	(&DWP(0*4,"ebp"),"edi");		# add modulus or zero
+	&adc	(&DWP(1*4,"ebp"),"edi");
+	&adc	(&DWP(2*4,"ebp"),"edi");
+	&adc	(&DWP(3*4,"ebp"),0);
+	&adc	("eax",0);
+	&adc	("ebx",0);
+	&mov	(&DWP(4*4,"ebp"),"eax");
+	&adc	("ecx","esi");
+	&mov	(&DWP(5*4,"ebp"),"ebx");
+	&adc	("edx","edi");
+	&mov	(&DWP(6*4,"ebp"),"ecx");
+	&mov	("edi","ebp");				# fulfill contract
+	&mov	(&DWP(7*4,"ebp"),"edx");
+
+	&add	("esp",10*4);
+	&ret	();
+&function_end_B("_ecp_nistz256_mul_mont");
+
+########################################################################
+# void ecp_nistz256_scatter_w5(void *edi,const P256_POINT *esi,
+#					 int ebp);
+&function_begin("ecp_nistz256_scatter_w5");
+	&mov	("edi",&wparam(0));
+	&mov	("esi",&wparam(1));
+	&mov	("ebp",&wparam(2));
+
+	&lea	("edi",&DWP(128-4,"edi","ebp",4));
+	&mov	("ebp",96/16);
+&set_label("scatter_w5_loop");
+	&mov	("eax",&DWP(0,"esi"));
+	&mov	("ebx",&DWP(4,"esi"));
+	&mov	("ecx",&DWP(8,"esi"));
+	&mov	("edx",&DWP(12,"esi"));
+	&lea	("esi",&DWP(16,"esi"));
+	&mov	(&DWP(64*0-128,"edi"),"eax");
+	&mov	(&DWP(64*1-128,"edi"),"ebx");
+	&mov	(&DWP(64*2-128,"edi"),"ecx");
+	&mov	(&DWP(64*3-128,"edi"),"edx");
+	&lea	("edi",&DWP(64*4,"edi"));
+	&dec	("ebp");
+	&jnz	(&label("scatter_w5_loop"));
+&function_end("ecp_nistz256_scatter_w5");
+
+########################################################################
+# void ecp_nistz256_gather_w5(P256_POINT *edi,const void *esi,
+#					      int ebp);
+&function_begin("ecp_nistz256_gather_w5");
+	&mov	("esi",&wparam(1));
+	&mov	("ebp",&wparam(2));
+
+	&lea	("esi",&DWP(0,"esi","ebp",4));
+	&neg	("ebp");
+	&sar	("ebp",31);
+	&mov	("edi",&wparam(0));
+	&lea	("esi",&DWP(0,"esi","ebp",4));
+
+    for($i=0;$i<24;$i+=4) {
+	&mov	("eax",&DWP(64*($i+0),"esi"));
+	&mov	("ebx",&DWP(64*($i+1),"esi"));
+	&mov	("ecx",&DWP(64*($i+2),"esi"));
+	&mov	("edx",&DWP(64*($i+3),"esi"));
+	&and	("eax","ebp");
+	&and	("ebx","ebp");
+	&and	("ecx","ebp");
+	&and	("edx","ebp");
+	&mov	(&DWP(4*($i+0),"edi"),"eax");
+	&mov	(&DWP(4*($i+1),"edi"),"ebx");
+	&mov	(&DWP(4*($i+2),"edi"),"ecx");
+	&mov	(&DWP(4*($i+3),"edi"),"edx");
+    }
+&function_end("ecp_nistz256_gather_w5");
+
+########################################################################
+# void ecp_nistz256_scatter_w7(void *edi,const P256_POINT_AFFINE *esi,
+#					 int ebp);
+&function_begin("ecp_nistz256_scatter_w7");
+	&mov	("edi",&wparam(0));
+	&mov	("esi",&wparam(1));
+	&mov	("ebp",&wparam(2));
+
+	&lea	("edi",&DWP(0,"edi","ebp"));
+	&mov	("ebp",64/4);
+&set_label("scatter_w7_loop");
+	&mov	("eax",&DWP(0,"esi"));
+	&lea	("esi",&DWP(4,"esi"));
+	&mov	(&BP(64*0,"edi"),"al");
+	&mov	(&BP(64*1,"edi"),"ah");
+	&shr	("eax",16);
+	&mov	(&BP(64*2,"edi"),"al");
+	&mov	(&BP(64*3,"edi"),"ah");
+	&lea	("edi",&DWP(64*4,"edi"));
+	&dec	("ebp");
+	&jnz	(&label("scatter_w7_loop"));
+&function_end("ecp_nistz256_scatter_w7");
+
+########################################################################
+# void ecp_nistz256_gather_w7(P256_POINT_AFFINE *edi,const void *esi,
+#						     int ebp);
+&function_begin("ecp_nistz256_gather_w7");
+	&mov	("esi",&wparam(1));
+	&mov	("ebp",&wparam(2));
+
+	&add	("esi","ebp");
+	&neg	("ebp"),
+	&sar	("ebp",31);
+	&mov	("edi",&wparam(0));
+	&lea	("esi",&DWP(0,"esi","ebp"));
+
+    for($i=0;$i<64;$i+=4) {
+	&movz	("eax",&BP(64*($i+0),"esi"));
+	&movz	("ebx",&BP(64*($i+1),"esi"));
+	&movz	("ecx",&BP(64*($i+2),"esi"));
+	&and	("eax","ebp");
+	&movz	("edx",&BP(64*($i+3),"esi"));
+	&and	("ebx","ebp");
+	&mov	(&BP($i+0,"edi"),"al");
+	&and	("ecx","ebp");
+	&mov	(&BP($i+1,"edi"),"bl");
+	&and	("edx","ebp");
+	&mov	(&BP($i+2,"edi"),"cl");
+	&mov	(&BP($i+3,"edi"),"dl");
+    }
+&function_end("ecp_nistz256_gather_w7");
+
+########################################################################
+# following subroutines are "literal" implementation of those found in
+# ecp_nistz256.c
+#
+########################################################################
+# void ecp_nistz256_point_double(P256_POINT *out,const P256_POINT *inp);
+#
+&static_label("point_double_shortcut");
+&function_begin("ecp_nistz256_point_double");
+{   my ($S,$M,$Zsqr,$in_x,$tmp0)=map(32*$_,(0..4));
+
+	&mov	("esi",&wparam(1));
+
+	# above map() describes stack layout with 5 temporary
+	# 256-bit vectors on top, then we take extra word for
+	# OPENSSL_ia32cap_P copy.
+	&stack_push(8*5+1);
+						if ($sse2) {
+	&call	("_picup_eax");
+    &set_label("pic");
+	&picmeup("edx","OPENSSL_ia32cap_P","eax",&label("pic"));
+	&mov	("ebp",&DWP(0,"edx"));		}
+
+&set_label("point_double_shortcut");
+	&mov	("eax",&DWP(0,"esi"));		# copy in_x
+	&mov	("ebx",&DWP(4,"esi"));
+	&mov	("ecx",&DWP(8,"esi"));
+	&mov	("edx",&DWP(12,"esi"));
+	&mov	(&DWP($in_x+0,"esp"),"eax");
+	&mov	(&DWP($in_x+4,"esp"),"ebx");
+	&mov	(&DWP($in_x+8,"esp"),"ecx");
+	&mov	(&DWP($in_x+12,"esp"),"edx");
+	&mov	("eax",&DWP(16,"esi"));
+	&mov	("ebx",&DWP(20,"esi"));
+	&mov	("ecx",&DWP(24,"esi"));
+	&mov	("edx",&DWP(28,"esi"));
+	&mov	(&DWP($in_x+16,"esp"),"eax");
+	&mov	(&DWP($in_x+20,"esp"),"ebx");
+	&mov	(&DWP($in_x+24,"esp"),"ecx");
+	&mov	(&DWP($in_x+28,"esp"),"edx");
+	&mov	(&DWP(32*5,"esp"),"ebp");	# OPENSSL_ia32cap_P copy
+
+	&lea	("ebp",&DWP(32,"esi"));
+	&lea	("esi",&DWP(32,"esi"));
+	&lea	("edi",&DWP($S,"esp"));
+	&call	("_ecp_nistz256_add");		# p256_mul_by_2(S, in_y);
+
+	&mov	("eax",&DWP(32*5,"esp"));	# OPENSSL_ia32cap_P copy
+	&mov	("esi",64);
+	&add	("esi",&wparam(1));
+	&lea	("edi",&DWP($Zsqr,"esp"));
+	&mov	("ebp","esi");
+	&call	("_ecp_nistz256_mul_mont");	# p256_sqr_mont(Zsqr, in_z);
+
+	&mov	("eax",&DWP(32*5,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($S,"esp"));
+	&lea	("ebp",&DWP($S,"esp"));
+	&lea	("edi",&DWP($S,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_sqr_mont(S, S);
+
+	&mov	("eax",&DWP(32*5,"esp"));	# OPENSSL_ia32cap_P copy
+	&mov	("ebp",&wparam(1));
+	&lea	("esi",&DWP(32,"ebp"));
+	&lea	("ebp",&DWP(64,"ebp"));
+	&lea	("edi",&DWP($tmp0,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(tmp0, in_z, in_y);
+
+	&lea	("esi",&DWP($in_x,"esp"));
+	&lea	("ebp",&DWP($Zsqr,"esp"));
+	&lea	("edi",&DWP($M,"esp"));
+	&call	("_ecp_nistz256_add");		# p256_add(M, in_x, Zsqr);
+
+	&mov	("edi",64);
+	&lea	("esi",&DWP($tmp0,"esp"));
+	&lea	("ebp",&DWP($tmp0,"esp"));
+	&add	("edi",&wparam(0));
+	&call	("_ecp_nistz256_add");		# p256_mul_by_2(res_z, tmp0);
+
+	&lea	("esi",&DWP($in_x,"esp"));
+	&lea	("ebp",&DWP($Zsqr,"esp"));
+	&lea	("edi",&DWP($Zsqr,"esp"));
+	&call	("_ecp_nistz256_sub");		# p256_sub(Zsqr, in_x, Zsqr);
+
+	&mov	("eax",&DWP(32*5,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($S,"esp"));
+	&lea	("ebp",&DWP($S,"esp"));
+	&lea	("edi",&DWP($tmp0,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_sqr_mont(tmp0, S);
+
+	&mov	("eax",&DWP(32*5,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($M,"esp"));
+	&lea	("ebp",&DWP($Zsqr,"esp"));
+	&lea	("edi",&DWP($M,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(M, M, Zsqr);
+
+	&mov	("edi",32);
+	&lea	("esi",&DWP($tmp0,"esp"));
+	&add	("edi",&wparam(0));
+	&call	("_ecp_nistz256_div_by_2");	# p256_div_by_2(res_y, tmp0);
+
+	&lea	("esi",&DWP($M,"esp"));
+	&lea	("ebp",&DWP($M,"esp"));
+	&lea	("edi",&DWP($tmp0,"esp"));
+	&call	("_ecp_nistz256_add");		# 1/2 p256_mul_by_3(M, M);
+
+	&mov	("eax",&DWP(32*5,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($in_x,"esp"));
+	&lea	("ebp",&DWP($S,"esp"));
+	&lea	("edi",&DWP($S,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(S, S, in_x);
+
+	&lea	("esi",&DWP($tmp0,"esp"));
+	&lea	("ebp",&DWP($M,"esp"));
+	&lea	("edi",&DWP($M,"esp"));
+	&call	("_ecp_nistz256_add");		# 2/2 p256_mul_by_3(M, M);
+
+	&lea	("esi",&DWP($S,"esp"));
+	&lea	("ebp",&DWP($S,"esp"));
+	&lea	("edi",&DWP($tmp0,"esp"));
+	&call	("_ecp_nistz256_add");		# p256_mul_by_2(tmp0, S);
+
+	&mov	("eax",&DWP(32*5,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($M,"esp"));
+	&lea	("ebp",&DWP($M,"esp"));
+	&mov	("edi",&wparam(0));
+	&call	("_ecp_nistz256_mul_mont");	# p256_sqr_mont(res_x, M);
+
+	&mov	("esi","edi");			# %edi is still res_x here
+	&lea	("ebp",&DWP($tmp0,"esp"));
+	&call	("_ecp_nistz256_sub");		# p256_sub(res_x, res_x, tmp0);
+
+	&lea	("esi",&DWP($S,"esp"));
+	&mov	("ebp","edi");			# %edi is still res_x
+	&lea	("edi",&DWP($S,"esp"));
+	&call	("_ecp_nistz256_sub");		# p256_sub(S, S, res_x);
+
+	&mov	("eax",&DWP(32*5,"esp"));	# OPENSSL_ia32cap_P copy
+	&mov	("esi","edi");			# %edi is still &S
+	&lea	("ebp",&DWP($M,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(S, S, M);
+
+	&mov	("ebp",32);
+	&lea	("esi",&DWP($S,"esp"));
+	&add	("ebp",&wparam(0));
+	&mov	("edi","ebp");
+	&call	("_ecp_nistz256_sub");		# p256_sub(res_y, S, res_y);
+
+	&stack_pop(8*5+1);
+} &function_end("ecp_nistz256_point_double");
+
+########################################################################
+# void ecp_nistz256_point_add(P256_POINT *out,const P256_POINT *in1,
+#					      const P256_POINT *in2);
+&function_begin("ecp_nistz256_point_add");
+{   my ($res_x,$res_y,$res_z,
+	$in1_x,$in1_y,$in1_z,
+	$in2_x,$in2_y,$in2_z,
+	$H,$Hsqr,$R,$Rsqr,$Hcub,
+	$U1,$U2,$S1,$S2)=map(32*$_,(0..17));
+    my ($Z1sqr, $Z2sqr) = ($Hsqr, $Rsqr);
+
+	&mov	("esi",&wparam(2));
+
+	# above map() describes stack layout with 18 temporary
+	# 256-bit vectors on top, then we take extra words for
+	# !in1infty, !in2infty, result of check for zero and
+	# OPENSSL_ia32cap_P copy. [one unused word for padding]
+	&stack_push(8*18+5);
+						if ($sse2) {
+	&call	("_picup_eax");
+    &set_label("pic");
+	&picmeup("edx","OPENSSL_ia32cap_P","eax",&label("pic"));
+	&mov	("ebp",&DWP(0,"edx"));		}
+
+	&lea	("edi",&DWP($in2_x,"esp"));
+    for($i=0;$i<96;$i+=16) {
+	&mov	("eax",&DWP($i+0,"esi"));	# copy in2
+	&mov	("ebx",&DWP($i+4,"esi"));
+	&mov	("ecx",&DWP($i+8,"esi"));
+	&mov	("edx",&DWP($i+12,"esi"));
+	&mov	(&DWP($i+0,"edi"),"eax");
+	&mov	(&DWP(32*18+12,"esp"),"ebp")	if ($i==0);
+	&mov	("ebp","eax")			if ($i==64);
+	&or	("ebp","eax")			if ($i>64);
+	&mov	(&DWP($i+4,"edi"),"ebx");
+	&or	("ebp","ebx")			if ($i>=64);
+	&mov	(&DWP($i+8,"edi"),"ecx");
+	&or	("ebp","ecx")			if ($i>=64);
+	&mov	(&DWP($i+12,"edi"),"edx");
+	&or	("ebp","edx")			if ($i>=64);
+    }
+	&xor	("eax","eax");
+	&mov	("esi",&wparam(1));
+	&sub	("eax","ebp");
+	&or	("ebp","eax");
+	&sar	("ebp",31);
+	&mov	(&DWP(32*18+4,"esp"),"ebp");	# !in2infty
+
+	&lea	("edi",&DWP($in1_x,"esp"));
+    for($i=0;$i<96;$i+=16) {
+	&mov	("eax",&DWP($i+0,"esi"));	# copy in1
+	&mov	("ebx",&DWP($i+4,"esi"));
+	&mov	("ecx",&DWP($i+8,"esi"));
+	&mov	("edx",&DWP($i+12,"esi"));
+	&mov	(&DWP($i+0,"edi"),"eax");
+	&mov	("ebp","eax")			if ($i==64);
+	&or	("ebp","eax")			if ($i>64);
+	&mov	(&DWP($i+4,"edi"),"ebx");
+	&or	("ebp","ebx")			if ($i>=64);
+	&mov	(&DWP($i+8,"edi"),"ecx");
+	&or	("ebp","ecx")			if ($i>=64);
+	&mov	(&DWP($i+12,"edi"),"edx");
+	&or	("ebp","edx")			if ($i>=64);
+    }
+	&xor	("eax","eax");
+	&sub	("eax","ebp");
+	&or	("ebp","eax");
+	&sar	("ebp",31);
+	&mov	(&DWP(32*18+0,"esp"),"ebp");	# !in1infty
+
+	&mov	("eax",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($in2_z,"esp"));
+	&lea	("ebp",&DWP($in2_z,"esp"));
+	&lea	("edi",&DWP($Z2sqr,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_sqr_mont(Z2sqr, in2_z);
+
+	&mov	("eax",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($in1_z,"esp"));
+	&lea	("ebp",&DWP($in1_z,"esp"));
+	&lea	("edi",&DWP($Z1sqr,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_sqr_mont(Z1sqr, in1_z);
+
+	&mov	("eax",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($Z2sqr,"esp"));
+	&lea	("ebp",&DWP($in2_z,"esp"));
+	&lea	("edi",&DWP($S1,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(S1, Z2sqr, in2_z);
+
+	&mov	("eax",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($Z1sqr,"esp"));
+	&lea	("ebp",&DWP($in1_z,"esp"));
+	&lea	("edi",&DWP($S2,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(S2, Z1sqr, in1_z);
+
+	&mov	("eax",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($in1_y,"esp"));
+	&lea	("ebp",&DWP($S1,"esp"));
+	&lea	("edi",&DWP($S1,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(S1, S1, in1_y);
+
+	&mov	("eax",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($in2_y,"esp"));
+	&lea	("ebp",&DWP($S2,"esp"));
+	&lea	("edi",&DWP($S2,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(S2, S2, in2_y);
+
+	&lea	("esi",&DWP($S2,"esp"));
+	&lea	("ebp",&DWP($S1,"esp"));
+	&lea	("edi",&DWP($R,"esp"));
+	&call	("_ecp_nistz256_sub");		# p256_sub(R, S2, S1);
+
+	&or	("ebx","eax");			# see if result is zero
+	&mov	("eax",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&or	("ebx","ecx");
+	&or	("ebx","edx");
+	&or	("ebx",&DWP(0,"edi"));
+	&or	("ebx",&DWP(4,"edi"));
+	 &lea	("esi",&DWP($in1_x,"esp"));
+	&or	("ebx",&DWP(8,"edi"));
+	 &lea	("ebp",&DWP($Z2sqr,"esp"));
+	&or	("ebx",&DWP(12,"edi"));
+	 &lea	("edi",&DWP($U1,"esp"));
+	&mov	(&DWP(32*18+8,"esp"),"ebx");
+
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(U1, in1_x, Z2sqr);
+
+	&mov	("eax",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($in2_x,"esp"));
+	&lea	("ebp",&DWP($Z1sqr,"esp"));
+	&lea	("edi",&DWP($U2,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(U2, in2_x, Z1sqr);
+
+	&lea	("esi",&DWP($U2,"esp"));
+	&lea	("ebp",&DWP($U1,"esp"));
+	&lea	("edi",&DWP($H,"esp"));
+	&call	("_ecp_nistz256_sub");		# p256_sub(H, U2, U1);
+
+	&or	("eax","ebx");			# see if result is zero
+	&or	("eax","ecx");
+	&or	("eax","edx");
+	&or	("eax",&DWP(0,"edi"));
+	&or	("eax",&DWP(4,"edi"));
+	&or	("eax",&DWP(8,"edi"));
+	&or	("eax",&DWP(12,"edi"));
+
+	&data_byte(0x3e);			# predict taken
+	&jnz	(&label("add_proceed"));	# is_equal(U1,U2)?
+
+	&mov	("eax",&DWP(32*18+0,"esp"));
+	&and	("eax",&DWP(32*18+4,"esp"));
+	&mov	("ebx",&DWP(32*18+8,"esp"));
+	&jz	(&label("add_proceed"));	# (in1infty || in2infty)?
+	&test	("ebx","ebx");
+	&jz	(&label("add_double"));		# is_equal(S1,S2)?
+
+	&mov	("edi",&wparam(0));
+	&xor	("eax","eax");
+	&mov	("ecx",96/4);
+	&data_byte(0xfc,0xf3,0xab);		# cld; stosd
+	&jmp	(&label("add_done"));
+
+&set_label("add_double",16);
+	&mov	("esi",&wparam(1));
+	&mov	("ebp",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&add	("esp",4*((8*18+5)-(8*5+1)));	# difference in frame sizes
+	&jmp	(&label("point_double_shortcut"));
+
+&set_label("add_proceed",16);
+	&mov	("eax",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($R,"esp"));
+	&lea	("ebp",&DWP($R,"esp"));
+	&lea	("edi",&DWP($Rsqr,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_sqr_mont(Rsqr, R);
+
+	&mov	("eax",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($H,"esp"));
+	&lea	("ebp",&DWP($in1_z,"esp"));
+	&lea	("edi",&DWP($res_z,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(res_z, H, in1_z);
+
+	&mov	("eax",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($H,"esp"));
+	&lea	("ebp",&DWP($H,"esp"));
+	&lea	("edi",&DWP($Hsqr,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_sqr_mont(Hsqr, H);
+
+	&mov	("eax",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($in2_z,"esp"));
+	&lea	("ebp",&DWP($res_z,"esp"));
+	&lea	("edi",&DWP($res_z,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(res_z, res_z, in2_z);
+
+	&mov	("eax",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($Hsqr,"esp"));
+	&lea	("ebp",&DWP($U1,"esp"));
+	&lea	("edi",&DWP($U2,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(U2, U1, Hsqr);
+
+	&mov	("eax",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($H,"esp"));
+	&lea	("ebp",&DWP($Hsqr,"esp"));
+	&lea	("edi",&DWP($Hcub,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(Hcub, Hsqr, H);
+
+	&lea	("esi",&DWP($U2,"esp"));
+	&lea	("ebp",&DWP($U2,"esp"));
+	&lea	("edi",&DWP($Hsqr,"esp"));
+	&call	("_ecp_nistz256_add");		# p256_mul_by_2(Hsqr, U2);
+
+	&lea	("esi",&DWP($Rsqr,"esp"));
+	&lea	("ebp",&DWP($Hsqr,"esp"));
+	&lea	("edi",&DWP($res_x,"esp"));
+	&call	("_ecp_nistz256_sub");		# p256_sub(res_x, Rsqr, Hsqr);
+
+	&lea	("esi",&DWP($res_x,"esp"));
+	&lea	("ebp",&DWP($Hcub,"esp"));
+	&lea	("edi",&DWP($res_x,"esp"));
+	&call	("_ecp_nistz256_sub");		# p256_sub(res_x, res_x, Hcub);
+
+	&lea	("esi",&DWP($U2,"esp"));
+	&lea	("ebp",&DWP($res_x,"esp"));
+	&lea	("edi",&DWP($res_y,"esp"));
+	&call	("_ecp_nistz256_sub");		# p256_sub(res_y, U2, res_x);
+
+	&mov	("eax",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($Hcub,"esp"));
+	&lea	("ebp",&DWP($S1,"esp"));
+	&lea	("edi",&DWP($S2,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(S2, S1, Hcub);
+
+	&mov	("eax",&DWP(32*18+12,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($R,"esp"));
+	&lea	("ebp",&DWP($res_y,"esp"));
+	&lea	("edi",&DWP($res_y,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(res_y, R, res_y);
+
+	&lea	("esi",&DWP($res_y,"esp"));
+	&lea	("ebp",&DWP($S2,"esp"));
+	&lea	("edi",&DWP($res_y,"esp"));
+	&call	("_ecp_nistz256_sub");		# p256_sub(res_y, res_y, S2);
+
+	&mov	("ebp",&DWP(32*18+0,"esp"));	# !in1infty
+	&mov	("esi",&DWP(32*18+4,"esp"));	# !in2infty
+	&mov	("edi",&wparam(0));
+	&mov	("edx","ebp");
+	&not	("ebp");
+	&and	("edx","esi");
+	&and	("ebp","esi");
+	&not	("esi");
+
+	########################################
+	# conditional moves
+    for($i=64;$i<96;$i+=4) {
+	&mov	("eax","edx");
+	&and	("eax",&DWP($res_x+$i,"esp"));
+	&mov	("ebx","ebp");
+	&and	("ebx",&DWP($in2_x+$i,"esp"));
+	&mov	("ecx","esi");
+	&and	("ecx",&DWP($in1_x+$i,"esp"));
+	&or	("eax","ebx");
+	&or	("eax","ecx");
+	&mov	(&DWP($i,"edi"),"eax");
+    }
+    for($i=0;$i<64;$i+=4) {
+	&mov	("eax","edx");
+	&and	("eax",&DWP($res_x+$i,"esp"));
+	&mov	("ebx","ebp");
+	&and	("ebx",&DWP($in2_x+$i,"esp"));
+	&mov	("ecx","esi");
+	&and	("ecx",&DWP($in1_x+$i,"esp"));
+	&or	("eax","ebx");
+	&or	("eax","ecx");
+	&mov	(&DWP($i,"edi"),"eax");
+    }
+    &set_label("add_done");
+	&stack_pop(8*18+5);
+} &function_end("ecp_nistz256_point_add");
+
+########################################################################
+# void ecp_nistz256_point_add_affine(P256_POINT *out,
+#				     const P256_POINT *in1,
+#				     const P256_POINT_AFFINE *in2);
+&function_begin("ecp_nistz256_point_add_affine");
+{
+    my ($res_x,$res_y,$res_z,
+	$in1_x,$in1_y,$in1_z,
+	$in2_x,$in2_y,
+	$U2,$S2,$H,$R,$Hsqr,$Hcub,$Rsqr)=map(32*$_,(0..14));
+    my $Z1sqr = $S2;
+    my @ONE_mont=(1,0,0,-1,-1,-1,-2,0);
+
+	&mov	("esi",&wparam(1));
+
+	# above map() describes stack layout with 15 temporary
+	# 256-bit vectors on top, then we take extra words for
+	# !in1infty, !in2infty, and OPENSSL_ia32cap_P copy.
+	&stack_push(8*15+3);
+						if ($sse2) {
+	&call	("_picup_eax");
+    &set_label("pic");
+	&picmeup("edx","OPENSSL_ia32cap_P","eax",&label("pic"));
+	&mov	("ebp",&DWP(0,"edx"));		}
+
+	&lea	("edi",&DWP($in1_x,"esp"));
+    for($i=0;$i<96;$i+=16) {
+	&mov	("eax",&DWP($i+0,"esi"));	# copy in1
+	&mov	("ebx",&DWP($i+4,"esi"));
+	&mov	("ecx",&DWP($i+8,"esi"));
+	&mov	("edx",&DWP($i+12,"esi"));
+	&mov	(&DWP($i+0,"edi"),"eax");
+	&mov	(&DWP(32*15+8,"esp"),"ebp")	if ($i==0);
+	&mov	("ebp","eax")			if ($i==64);
+	&or	("ebp","eax")			if ($i>64);
+	&mov	(&DWP($i+4,"edi"),"ebx");
+	&or	("ebp","ebx")			if ($i>=64);
+	&mov	(&DWP($i+8,"edi"),"ecx");
+	&or	("ebp","ecx")			if ($i>=64);
+	&mov	(&DWP($i+12,"edi"),"edx");
+	&or	("ebp","edx")			if ($i>=64);
+    }
+	&xor	("eax","eax");
+	&mov	("esi",&wparam(2));
+	&sub	("eax","ebp");
+	&or	("ebp","eax");
+	&sar	("ebp",31);
+	&mov	(&DWP(32*15+0,"esp"),"ebp");	# !in1infty
+
+	&lea	("edi",&DWP($in2_x,"esp"));
+    for($i=0;$i<64;$i+=16) {
+	&mov	("eax",&DWP($i+0,"esi"));	# copy in2
+	&mov	("ebx",&DWP($i+4,"esi"));
+	&mov	("ecx",&DWP($i+8,"esi"));
+	&mov	("edx",&DWP($i+12,"esi"));
+	&mov	(&DWP($i+0,"edi"),"eax");
+	&mov	("ebp","eax")			if ($i==0);
+	&or	("ebp","eax")			if ($i!=0);
+	&mov	(&DWP($i+4,"edi"),"ebx");
+	&or	("ebp","ebx");
+	&mov	(&DWP($i+8,"edi"),"ecx");
+	&or	("ebp","ecx");
+	&mov	(&DWP($i+12,"edi"),"edx");
+	&or	("ebp","edx");
+    }
+	&xor	("ebx","ebx");
+	&mov	("eax",&DWP(32*15+8,"esp"));	# OPENSSL_ia32cap_P copy
+	&sub	("ebx","ebp");
+	 &lea	("esi",&DWP($in1_z,"esp"));
+	&or	("ebx","ebp");
+	 &lea	("ebp",&DWP($in1_z,"esp"));
+	&sar	("ebx",31);
+	 &lea	("edi",&DWP($Z1sqr,"esp"));
+	&mov	(&DWP(32*15+4,"esp"),"ebx");	# !in2infty
+
+	&call	("_ecp_nistz256_mul_mont");	# p256_sqr_mont(Z1sqr, in1_z);
+
+	&mov	("eax",&DWP(32*15+8,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($in2_x,"esp"));
+	&mov	("ebp","edi");			# %esi is stull &Z1sqr
+	&lea	("edi",&DWP($U2,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(U2, Z1sqr, in2_x);
+
+	&mov	("eax",&DWP(32*15+8,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($in1_z,"esp"));
+	&lea	("ebp",&DWP($Z1sqr,"esp"));
+	&lea	("edi",&DWP($S2,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(S2, Z1sqr, in1_z);
+
+	&lea	("esi",&DWP($U2,"esp"));
+	&lea	("ebp",&DWP($in1_x,"esp"));
+	&lea	("edi",&DWP($H,"esp"));
+	&call	("_ecp_nistz256_sub");		# p256_sub(H, U2, in1_x);
+
+	&mov	("eax",&DWP(32*15+8,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($in2_y,"esp"));
+	&lea	("ebp",&DWP($S2,"esp"));
+	&lea	("edi",&DWP($S2,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(S2, S2, in2_y);
+
+	&mov	("eax",&DWP(32*15+8,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($in1_z,"esp"));
+	&lea	("ebp",&DWP($H,"esp"));
+	&lea	("edi",&DWP($res_z,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(res_z, H, in1_z);
+
+	&lea	("esi",&DWP($S2,"esp"));
+	&lea	("ebp",&DWP($in1_y,"esp"));
+	&lea	("edi",&DWP($R,"esp"));
+	&call	("_ecp_nistz256_sub");		# p256_sub(R, S2, in1_y);
+
+	&mov	("eax",&DWP(32*15+8,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($H,"esp"));
+	&lea	("ebp",&DWP($H,"esp"));
+	&lea	("edi",&DWP($Hsqr,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_sqr_mont(Hsqr, H);
+
+	&mov	("eax",&DWP(32*15+8,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($R,"esp"));
+	&lea	("ebp",&DWP($R,"esp"));
+	&lea	("edi",&DWP($Rsqr,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_sqr_mont(Rsqr, R);
+
+	&mov	("eax",&DWP(32*15+8,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($in1_x,"esp"));
+	&lea	("ebp",&DWP($Hsqr,"esp"));
+	&lea	("edi",&DWP($U2,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(U2, in1_x, Hsqr);
+
+	&mov	("eax",&DWP(32*15+8,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($H,"esp"));
+	&lea	("ebp",&DWP($Hsqr,"esp"));
+	&lea	("edi",&DWP($Hcub,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(Hcub, Hsqr, H);
+
+	&lea	("esi",&DWP($U2,"esp"));
+	&lea	("ebp",&DWP($U2,"esp"));
+	&lea	("edi",&DWP($Hsqr,"esp"));
+	&call	("_ecp_nistz256_add");		# p256_mul_by_2(Hsqr, U2);
+
+	&lea	("esi",&DWP($Rsqr,"esp"));
+	&lea	("ebp",&DWP($Hsqr,"esp"));
+	&lea	("edi",&DWP($res_x,"esp"));
+	&call	("_ecp_nistz256_sub");		# p256_sub(res_x, Rsqr, Hsqr);
+
+	&lea	("esi",&DWP($res_x,"esp"));
+	&lea	("ebp",&DWP($Hcub,"esp"));
+	&lea	("edi",&DWP($res_x,"esp"));
+	&call	("_ecp_nistz256_sub");		# p256_sub(res_x, res_x, Hcub);
+
+	&lea	("esi",&DWP($U2,"esp"));
+	&lea	("ebp",&DWP($res_x,"esp"));
+	&lea	("edi",&DWP($res_y,"esp"));
+	&call	("_ecp_nistz256_sub");		# p256_sub(res_y, U2, res_x);
+
+	&mov	("eax",&DWP(32*15+8,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($Hcub,"esp"));
+	&lea	("ebp",&DWP($in1_y,"esp"));
+	&lea	("edi",&DWP($S2,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(S2, Hcub, in1_y);
+
+	&mov	("eax",&DWP(32*15+8,"esp"));	# OPENSSL_ia32cap_P copy
+	&lea	("esi",&DWP($R,"esp"));
+	&lea	("ebp",&DWP($res_y,"esp"));
+	&lea	("edi",&DWP($res_y,"esp"));
+	&call	("_ecp_nistz256_mul_mont");	# p256_mul_mont(res_y, res_y, R);
+
+	&lea	("esi",&DWP($res_y,"esp"));
+	&lea	("ebp",&DWP($S2,"esp"));
+	&lea	("edi",&DWP($res_y,"esp"));
+	&call	("_ecp_nistz256_sub");		# p256_sub(res_y, res_y, S2);
+
+	&mov	("ebp",&DWP(32*15+0,"esp"));	# !in1infty
+	&mov	("esi",&DWP(32*15+4,"esp"));	# !in2infty
+	&mov	("edi",&wparam(0));
+	&mov	("edx","ebp");
+	&not	("ebp");
+	&and	("edx","esi");
+	&and	("ebp","esi");
+	&not	("esi");
+
+	########################################
+	# conditional moves
+    for($i=64;$i<96;$i+=4) {
+	my $one=@ONE_mont[($i-64)/4];
+
+	&mov	("eax","edx");
+	&and	("eax",&DWP($res_x+$i,"esp"));
+	&mov	("ebx","ebp")			if ($one && $one!=-1);
+	&and	("ebx",$one)			if ($one && $one!=-1);
+	&mov	("ecx","esi");
+	&and	("ecx",&DWP($in1_x+$i,"esp"));
+	&or	("eax",$one==-1?"ebp":"ebx")	if ($one);
+	&or	("eax","ecx");
+	&mov	(&DWP($i,"edi"),"eax");
+    }
+    for($i=0;$i<64;$i+=4) {
+	&mov	("eax","edx");
+	&and	("eax",&DWP($res_x+$i,"esp"));
+	&mov	("ebx","ebp");
+	&and	("ebx",&DWP($in2_x+$i,"esp"));
+	&mov	("ecx","esi");
+	&and	("ecx",&DWP($in1_x+$i,"esp"));
+	&or	("eax","ebx");
+	&or	("eax","ecx");
+	&mov	(&DWP($i,"edi"),"eax");
+    }
+	&stack_pop(8*15+3);
+} &function_end("ecp_nistz256_point_add_affine");
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-x86_64.pl
new file mode 100755
index 000000000..87149e7f6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/ecp_nistz256-x86_64.pl
@@ -0,0 +1,4741 @@
+#! /usr/bin/env perl
+# Copyright 2014-2019 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright (c) 2014, Intel Corporation. All Rights Reserved.
+# Copyright (c) 2015 CloudFlare, Inc.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# Originally written by Shay Gueron (1, 2), and Vlad Krasnov (1, 3)
+# (1) Intel Corporation, Israel Development Center, Haifa, Israel
+# (2) University of Haifa, Israel
+# (3) CloudFlare, Inc.
+#
+# Reference:
+# S.Gueron and V.Krasnov, "Fast Prime Field Elliptic Curve Cryptography with
+#                          256 Bit Primes"
+
+# Further optimization by <appro@openssl.org>:
+#
+#		this/original	with/without -DECP_NISTZ256_ASM(*)
+# Opteron	+15-49%		+150-195%
+# Bulldozer	+18-45%		+175-240%
+# P4		+24-46%		+100-150%
+# Westmere	+18-34%		+87-160%
+# Sandy Bridge	+14-35%		+120-185%
+# Ivy Bridge	+11-35%		+125-180%
+# Haswell	+10-37%		+160-200%
+# Broadwell	+24-58%		+210-270%
+# Atom		+20-50%		+180-240%
+# VIA Nano	+50-160%	+480-480%
+#
+# (*)	"without -DECP_NISTZ256_ASM" refers to build with
+#	"enable-ec_nistp_64_gcc_128";
+#
+# Ranges denote minimum and maximum improvement coefficients depending
+# on benchmark. In "this/original" column lower coefficient is for
+# ECDSA sign, while in "with/without" - for ECDH key agreement, and
+# higher - for ECDSA sign, relatively fastest server-side operation.
+# Keep in mind that +100% means 2x improvement.
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.19) + ($1>=2.22);
+	$addx = ($1>=2.23);
+}
+
+if (!$addx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	    `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.09) + ($1>=2.10);
+	$addx = ($1>=2.10);
+}
+
+if (!$addx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	    `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$avx = ($1>=10) + ($1>=11);
+	$addx = ($1>=12);
+}
+
+if (!$addx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([3-9])\.([0-9]+)/) {
+	my $ver = $2 + $3/100.0;	# 3.1->3.01, 3.10->3.10
+	$avx = ($ver>=3.0) + ($ver>=3.01);
+	$addx = ($ver>=3.03);
+}
+
+$code.=<<___;
+.text
+.extern	OPENSSL_ia32cap_P
+
+# The polynomial
+.align 64
+.Lpoly:
+.quad 0xffffffffffffffff, 0x00000000ffffffff, 0x0000000000000000, 0xffffffff00000001
+
+# 2^512 mod P precomputed for NIST P256 polynomial
+.LRR:
+.quad 0x0000000000000003, 0xfffffffbffffffff, 0xfffffffffffffffe, 0x00000004fffffffd
+
+.LOne:
+.long 1,1,1,1,1,1,1,1
+.LTwo:
+.long 2,2,2,2,2,2,2,2
+.LThree:
+.long 3,3,3,3,3,3,3,3
+.LONE_mont:
+.quad 0x0000000000000001, 0xffffffff00000000, 0xffffffffffffffff, 0x00000000fffffffe
+
+# Constants for computations modulo ord(p256)
+.Lord:
+.quad 0xf3b9cac2fc632551, 0xbce6faada7179e84, 0xffffffffffffffff, 0xffffffff00000000
+.LordK:
+.quad 0xccd1c8aaee00bc4f
+___
+
+{
+################################################################################
+# void ecp_nistz256_mul_by_2(uint64_t res[4], uint64_t a[4]);
+
+my ($a0,$a1,$a2,$a3)=map("%r$_",(8..11));
+my ($t0,$t1,$t2,$t3,$t4)=("%rax","%rdx","%rcx","%r12","%r13");
+my ($r_ptr,$a_ptr,$b_ptr)=("%rdi","%rsi","%rdx");
+
+$code.=<<___;
+
+.globl	ecp_nistz256_mul_by_2
+.type	ecp_nistz256_mul_by_2,\@function,2
+.align	64
+ecp_nistz256_mul_by_2:
+.cfi_startproc
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+.Lmul_by_2_body:
+
+	mov	8*0($a_ptr), $a0
+	xor	$t4,$t4
+	mov	8*1($a_ptr), $a1
+	add	$a0, $a0		# a0:a3+a0:a3
+	mov	8*2($a_ptr), $a2
+	adc	$a1, $a1
+	mov	8*3($a_ptr), $a3
+	lea	.Lpoly(%rip), $a_ptr
+	 mov	$a0, $t0
+	adc	$a2, $a2
+	adc	$a3, $a3
+	 mov	$a1, $t1
+	adc	\$0, $t4
+
+	sub	8*0($a_ptr), $a0
+	 mov	$a2, $t2
+	sbb	8*1($a_ptr), $a1
+	sbb	8*2($a_ptr), $a2
+	 mov	$a3, $t3
+	sbb	8*3($a_ptr), $a3
+	sbb	\$0, $t4
+
+	cmovc	$t0, $a0
+	cmovc	$t1, $a1
+	mov	$a0, 8*0($r_ptr)
+	cmovc	$t2, $a2
+	mov	$a1, 8*1($r_ptr)
+	cmovc	$t3, $a3
+	mov	$a2, 8*2($r_ptr)
+	mov	$a3, 8*3($r_ptr)
+
+	mov	0(%rsp),%r13
+.cfi_restore	%r13
+	mov	8(%rsp),%r12
+.cfi_restore	%r12
+	lea	16(%rsp),%rsp
+.cfi_adjust_cfa_offset	-16
+.Lmul_by_2_epilogue:
+	ret
+.cfi_endproc
+.size	ecp_nistz256_mul_by_2,.-ecp_nistz256_mul_by_2
+
+################################################################################
+# void ecp_nistz256_div_by_2(uint64_t res[4], uint64_t a[4]);
+.globl	ecp_nistz256_div_by_2
+.type	ecp_nistz256_div_by_2,\@function,2
+.align	32
+ecp_nistz256_div_by_2:
+.cfi_startproc
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+.Ldiv_by_2_body:
+
+	mov	8*0($a_ptr), $a0
+	mov	8*1($a_ptr), $a1
+	mov	8*2($a_ptr), $a2
+	 mov	$a0, $t0
+	mov	8*3($a_ptr), $a3
+	lea	.Lpoly(%rip), $a_ptr
+
+	 mov	$a1, $t1
+	xor	$t4, $t4
+	add	8*0($a_ptr), $a0
+	 mov	$a2, $t2
+	adc	8*1($a_ptr), $a1
+	adc	8*2($a_ptr), $a2
+	 mov	$a3, $t3
+	adc	8*3($a_ptr), $a3
+	adc	\$0, $t4
+	xor	$a_ptr, $a_ptr		# borrow $a_ptr
+	test	\$1, $t0
+
+	cmovz	$t0, $a0
+	cmovz	$t1, $a1
+	cmovz	$t2, $a2
+	cmovz	$t3, $a3
+	cmovz	$a_ptr, $t4
+
+	mov	$a1, $t0		# a0:a3>>1
+	shr	\$1, $a0
+	shl	\$63, $t0
+	mov	$a2, $t1
+	shr	\$1, $a1
+	or	$t0, $a0
+	shl	\$63, $t1
+	mov	$a3, $t2
+	shr	\$1, $a2
+	or	$t1, $a1
+	shl	\$63, $t2
+	shr	\$1, $a3
+	shl	\$63, $t4
+	or	$t2, $a2
+	or	$t4, $a3
+
+	mov	$a0, 8*0($r_ptr)
+	mov	$a1, 8*1($r_ptr)
+	mov	$a2, 8*2($r_ptr)
+	mov	$a3, 8*3($r_ptr)
+
+	mov	0(%rsp),%r13
+.cfi_restore	%r13
+	mov	8(%rsp),%r12
+.cfi_restore	%r12
+	lea	16(%rsp),%rsp
+.cfi_adjust_cfa_offset	-16
+.Ldiv_by_2_epilogue:
+	ret
+.cfi_endproc
+.size	ecp_nistz256_div_by_2,.-ecp_nistz256_div_by_2
+
+################################################################################
+# void ecp_nistz256_mul_by_3(uint64_t res[4], uint64_t a[4]);
+.globl	ecp_nistz256_mul_by_3
+.type	ecp_nistz256_mul_by_3,\@function,2
+.align	32
+ecp_nistz256_mul_by_3:
+.cfi_startproc
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+.Lmul_by_3_body:
+
+	mov	8*0($a_ptr), $a0
+	xor	$t4, $t4
+	mov	8*1($a_ptr), $a1
+	add	$a0, $a0		# a0:a3+a0:a3
+	mov	8*2($a_ptr), $a2
+	adc	$a1, $a1
+	mov	8*3($a_ptr), $a3
+	 mov	$a0, $t0
+	adc	$a2, $a2
+	adc	$a3, $a3
+	 mov	$a1, $t1
+	adc	\$0, $t4
+
+	sub	\$-1, $a0
+	 mov	$a2, $t2
+	sbb	.Lpoly+8*1(%rip), $a1
+	sbb	\$0, $a2
+	 mov	$a3, $t3
+	sbb	.Lpoly+8*3(%rip), $a3
+	sbb	\$0, $t4
+
+	cmovc	$t0, $a0
+	cmovc	$t1, $a1
+	cmovc	$t2, $a2
+	cmovc	$t3, $a3
+
+	xor	$t4, $t4
+	add	8*0($a_ptr), $a0	# a0:a3+=a_ptr[0:3]
+	adc	8*1($a_ptr), $a1
+	 mov	$a0, $t0
+	adc	8*2($a_ptr), $a2
+	adc	8*3($a_ptr), $a3
+	 mov	$a1, $t1
+	adc	\$0, $t4
+
+	sub	\$-1, $a0
+	 mov	$a2, $t2
+	sbb	.Lpoly+8*1(%rip), $a1
+	sbb	\$0, $a2
+	 mov	$a3, $t3
+	sbb	.Lpoly+8*3(%rip), $a3
+	sbb	\$0, $t4
+
+	cmovc	$t0, $a0
+	cmovc	$t1, $a1
+	mov	$a0, 8*0($r_ptr)
+	cmovc	$t2, $a2
+	mov	$a1, 8*1($r_ptr)
+	cmovc	$t3, $a3
+	mov	$a2, 8*2($r_ptr)
+	mov	$a3, 8*3($r_ptr)
+
+	mov	0(%rsp),%r13
+.cfi_restore	%r13
+	mov	8(%rsp),%r12
+.cfi_restore	%r12
+	lea	16(%rsp),%rsp
+.cfi_adjust_cfa_offset	-16
+.Lmul_by_3_epilogue:
+	ret
+.cfi_endproc
+.size	ecp_nistz256_mul_by_3,.-ecp_nistz256_mul_by_3
+
+################################################################################
+# void ecp_nistz256_add(uint64_t res[4], uint64_t a[4], uint64_t b[4]);
+.globl	ecp_nistz256_add
+.type	ecp_nistz256_add,\@function,3
+.align	32
+ecp_nistz256_add:
+.cfi_startproc
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+.Ladd_body:
+
+	mov	8*0($a_ptr), $a0
+	xor	$t4, $t4
+	mov	8*1($a_ptr), $a1
+	mov	8*2($a_ptr), $a2
+	mov	8*3($a_ptr), $a3
+	lea	.Lpoly(%rip), $a_ptr
+
+	add	8*0($b_ptr), $a0
+	adc	8*1($b_ptr), $a1
+	 mov	$a0, $t0
+	adc	8*2($b_ptr), $a2
+	adc	8*3($b_ptr), $a3
+	 mov	$a1, $t1
+	adc	\$0, $t4
+
+	sub	8*0($a_ptr), $a0
+	 mov	$a2, $t2
+	sbb	8*1($a_ptr), $a1
+	sbb	8*2($a_ptr), $a2
+	 mov	$a3, $t3
+	sbb	8*3($a_ptr), $a3
+	sbb	\$0, $t4
+
+	cmovc	$t0, $a0
+	cmovc	$t1, $a1
+	mov	$a0, 8*0($r_ptr)
+	cmovc	$t2, $a2
+	mov	$a1, 8*1($r_ptr)
+	cmovc	$t3, $a3
+	mov	$a2, 8*2($r_ptr)
+	mov	$a3, 8*3($r_ptr)
+
+	mov	0(%rsp),%r13
+.cfi_restore	%r13
+	mov	8(%rsp),%r12
+.cfi_restore	%r12
+	lea	16(%rsp),%rsp
+.cfi_adjust_cfa_offset	-16
+.Ladd_epilogue:
+	ret
+.cfi_endproc
+.size	ecp_nistz256_add,.-ecp_nistz256_add
+
+################################################################################
+# void ecp_nistz256_sub(uint64_t res[4], uint64_t a[4], uint64_t b[4]);
+.globl	ecp_nistz256_sub
+.type	ecp_nistz256_sub,\@function,3
+.align	32
+ecp_nistz256_sub:
+.cfi_startproc
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+.Lsub_body:
+
+	mov	8*0($a_ptr), $a0
+	xor	$t4, $t4
+	mov	8*1($a_ptr), $a1
+	mov	8*2($a_ptr), $a2
+	mov	8*3($a_ptr), $a3
+	lea	.Lpoly(%rip), $a_ptr
+
+	sub	8*0($b_ptr), $a0
+	sbb	8*1($b_ptr), $a1
+	 mov	$a0, $t0
+	sbb	8*2($b_ptr), $a2
+	sbb	8*3($b_ptr), $a3
+	 mov	$a1, $t1
+	sbb	\$0, $t4
+
+	add	8*0($a_ptr), $a0
+	 mov	$a2, $t2
+	adc	8*1($a_ptr), $a1
+	adc	8*2($a_ptr), $a2
+	 mov	$a3, $t3
+	adc	8*3($a_ptr), $a3
+	test	$t4, $t4
+
+	cmovz	$t0, $a0
+	cmovz	$t1, $a1
+	mov	$a0, 8*0($r_ptr)
+	cmovz	$t2, $a2
+	mov	$a1, 8*1($r_ptr)
+	cmovz	$t3, $a3
+	mov	$a2, 8*2($r_ptr)
+	mov	$a3, 8*3($r_ptr)
+
+	mov	0(%rsp),%r13
+.cfi_restore	%r13
+	mov	8(%rsp),%r12
+.cfi_restore	%r12
+	lea	16(%rsp),%rsp
+.cfi_adjust_cfa_offset	-16
+.Lsub_epilogue:
+	ret
+.cfi_endproc
+.size	ecp_nistz256_sub,.-ecp_nistz256_sub
+
+################################################################################
+# void ecp_nistz256_neg(uint64_t res[4], uint64_t a[4]);
+.globl	ecp_nistz256_neg
+.type	ecp_nistz256_neg,\@function,2
+.align	32
+ecp_nistz256_neg:
+.cfi_startproc
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+.Lneg_body:
+
+	xor	$a0, $a0
+	xor	$a1, $a1
+	xor	$a2, $a2
+	xor	$a3, $a3
+	xor	$t4, $t4
+
+	sub	8*0($a_ptr), $a0
+	sbb	8*1($a_ptr), $a1
+	sbb	8*2($a_ptr), $a2
+	 mov	$a0, $t0
+	sbb	8*3($a_ptr), $a3
+	lea	.Lpoly(%rip), $a_ptr
+	 mov	$a1, $t1
+	sbb	\$0, $t4
+
+	add	8*0($a_ptr), $a0
+	 mov	$a2, $t2
+	adc	8*1($a_ptr), $a1
+	adc	8*2($a_ptr), $a2
+	 mov	$a3, $t3
+	adc	8*3($a_ptr), $a3
+	test	$t4, $t4
+
+	cmovz	$t0, $a0
+	cmovz	$t1, $a1
+	mov	$a0, 8*0($r_ptr)
+	cmovz	$t2, $a2
+	mov	$a1, 8*1($r_ptr)
+	cmovz	$t3, $a3
+	mov	$a2, 8*2($r_ptr)
+	mov	$a3, 8*3($r_ptr)
+
+	mov	0(%rsp),%r13
+.cfi_restore	%r13
+	mov	8(%rsp),%r12
+.cfi_restore	%r12
+	lea	16(%rsp),%rsp
+.cfi_adjust_cfa_offset	-16
+.Lneg_epilogue:
+	ret
+.cfi_endproc
+.size	ecp_nistz256_neg,.-ecp_nistz256_neg
+___
+}
+{
+my ($r_ptr,$a_ptr,$b_org,$b_ptr)=("%rdi","%rsi","%rdx","%rbx");
+my ($acc0,$acc1,$acc2,$acc3,$acc4,$acc5,$acc6,$acc7)=map("%r$_",(8..15));
+my ($t0,$t1,$t2,$t3,$t4)=("%rcx","%rbp","%rbx","%rdx","%rax");
+my ($poly1,$poly3)=($acc6,$acc7);
+
+$code.=<<___;
+################################################################################
+# void ecp_nistz256_ord_mul_mont(
+#   uint64_t res[4],
+#   uint64_t a[4],
+#   uint64_t b[4]);
+
+.globl	ecp_nistz256_ord_mul_mont
+.type	ecp_nistz256_ord_mul_mont,\@function,3
+.align	32
+ecp_nistz256_ord_mul_mont:
+.cfi_startproc
+___
+$code.=<<___	if ($addx);
+	mov	\$0x80100, %ecx
+	and	OPENSSL_ia32cap_P+8(%rip), %ecx
+	cmp	\$0x80100, %ecx
+	je	.Lecp_nistz256_ord_mul_montx
+___
+$code.=<<___;
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lord_mul_body:
+
+	mov	8*0($b_org), %rax
+	mov	$b_org, $b_ptr
+	lea	.Lord(%rip), %r14
+	mov	.LordK(%rip), %r15
+
+	################################# * b[0]
+	mov	%rax, $t0
+	mulq	8*0($a_ptr)
+	mov	%rax, $acc0
+	mov	$t0, %rax
+	mov	%rdx, $acc1
+
+	mulq	8*1($a_ptr)
+	add	%rax, $acc1
+	mov	$t0, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $acc2
+
+	mulq	8*2($a_ptr)
+	add	%rax, $acc2
+	mov	$t0, %rax
+	adc	\$0, %rdx
+
+	 mov	$acc0, $acc5
+	 imulq	%r15,$acc0
+
+	mov	%rdx, $acc3
+	mulq	8*3($a_ptr)
+	add	%rax, $acc3
+	 mov	$acc0, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $acc4
+
+	################################# First reduction step
+	mulq	8*0(%r14)
+	mov	$acc0, $t1
+	add	%rax, $acc5		# guaranteed to be zero
+	mov	$acc0, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t0
+
+	sub	$acc0, $acc2
+	sbb	\$0, $acc0		# can't borrow
+
+	mulq	8*1(%r14)
+	add	$t0, $acc1
+	adc	\$0, %rdx
+	add	%rax, $acc1
+	mov	$t1, %rax
+	adc	%rdx, $acc2
+	mov	$t1, %rdx
+	adc	\$0, $acc0		# can't overflow
+
+	shl	\$32, %rax
+	shr	\$32, %rdx
+	sub	%rax, $acc3
+	 mov	8*1($b_ptr), %rax
+	sbb	%rdx, $t1		# can't borrow
+
+	add	$acc0, $acc3
+	adc	$t1, $acc4
+	adc	\$0, $acc5
+
+	################################# * b[1]
+	mov	%rax, $t0
+	mulq	8*0($a_ptr)
+	add	%rax, $acc1
+	mov	$t0, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t1
+
+	mulq	8*1($a_ptr)
+	add	$t1, $acc2
+	adc	\$0, %rdx
+	add	%rax, $acc2
+	mov	$t0, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t1
+
+	mulq	8*2($a_ptr)
+	add	$t1, $acc3
+	adc	\$0, %rdx
+	add	%rax, $acc3
+	mov	$t0, %rax
+	adc	\$0, %rdx
+
+	 mov	$acc1, $t0
+	 imulq	%r15, $acc1
+
+	mov	%rdx, $t1
+	mulq	8*3($a_ptr)
+	add	$t1, $acc4
+	adc	\$0, %rdx
+	xor	$acc0, $acc0
+	add	%rax, $acc4
+	 mov	$acc1, %rax
+	adc	%rdx, $acc5
+	adc	\$0, $acc0
+
+	################################# Second reduction step
+	mulq	8*0(%r14)
+	mov	$acc1, $t1
+	add	%rax, $t0		# guaranteed to be zero
+	mov	$acc1, %rax
+	adc	%rdx, $t0
+
+	sub	$acc1, $acc3
+	sbb	\$0, $acc1		# can't borrow
+
+	mulq	8*1(%r14)
+	add	$t0, $acc2
+	adc	\$0, %rdx
+	add	%rax, $acc2
+	mov	$t1, %rax
+	adc	%rdx, $acc3
+	mov	$t1, %rdx
+	adc	\$0, $acc1		# can't overflow
+
+	shl	\$32, %rax
+	shr	\$32, %rdx
+	sub	%rax, $acc4
+	 mov	8*2($b_ptr), %rax
+	sbb	%rdx, $t1		# can't borrow
+
+	add	$acc1, $acc4
+	adc	$t1, $acc5
+	adc	\$0, $acc0
+
+	################################## * b[2]
+	mov	%rax, $t0
+	mulq	8*0($a_ptr)
+	add	%rax, $acc2
+	mov	$t0, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t1
+
+	mulq	8*1($a_ptr)
+	add	$t1, $acc3
+	adc	\$0, %rdx
+	add	%rax, $acc3
+	mov	$t0, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t1
+
+	mulq	8*2($a_ptr)
+	add	$t1, $acc4
+	adc	\$0, %rdx
+	add	%rax, $acc4
+	mov	$t0, %rax
+	adc	\$0, %rdx
+
+	 mov	$acc2, $t0
+	 imulq	%r15, $acc2
+
+	mov	%rdx, $t1
+	mulq	8*3($a_ptr)
+	add	$t1, $acc5
+	adc	\$0, %rdx
+	xor	$acc1, $acc1
+	add	%rax, $acc5
+	 mov	$acc2, %rax
+	adc	%rdx, $acc0
+	adc	\$0, $acc1
+
+	################################# Third reduction step
+	mulq	8*0(%r14)
+	mov	$acc2, $t1
+	add	%rax, $t0		# guaranteed to be zero
+	mov	$acc2, %rax
+	adc	%rdx, $t0
+
+	sub	$acc2, $acc4
+	sbb	\$0, $acc2		# can't borrow
+
+	mulq	8*1(%r14)
+	add	$t0, $acc3
+	adc	\$0, %rdx
+	add	%rax, $acc3
+	mov	$t1, %rax
+	adc	%rdx, $acc4
+	mov	$t1, %rdx
+	adc	\$0, $acc2		# can't overflow
+
+	shl	\$32, %rax
+	shr	\$32, %rdx
+	sub	%rax, $acc5
+	 mov	8*3($b_ptr), %rax
+	sbb	%rdx, $t1		# can't borrow
+
+	add	$acc2, $acc5
+	adc	$t1, $acc0
+	adc	\$0, $acc1
+
+	################################# * b[3]
+	mov	%rax, $t0
+	mulq	8*0($a_ptr)
+	add	%rax, $acc3
+	mov	$t0, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t1
+
+	mulq	8*1($a_ptr)
+	add	$t1, $acc4
+	adc	\$0, %rdx
+	add	%rax, $acc4
+	mov	$t0, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t1
+
+	mulq	8*2($a_ptr)
+	add	$t1, $acc5
+	adc	\$0, %rdx
+	add	%rax, $acc5
+	mov	$t0, %rax
+	adc	\$0, %rdx
+
+	 mov	$acc3, $t0
+	 imulq	%r15, $acc3
+
+	mov	%rdx, $t1
+	mulq	8*3($a_ptr)
+	add	$t1, $acc0
+	adc	\$0, %rdx
+	xor	$acc2, $acc2
+	add	%rax, $acc0
+	 mov	$acc3, %rax
+	adc	%rdx, $acc1
+	adc	\$0, $acc2
+
+	################################# Last reduction step
+	mulq	8*0(%r14)
+	mov	$acc3, $t1
+	add	%rax, $t0		# guaranteed to be zero
+	mov	$acc3, %rax
+	adc	%rdx, $t0
+
+	sub	$acc3, $acc5
+	sbb	\$0, $acc3		# can't borrow
+
+	mulq	8*1(%r14)
+	add	$t0, $acc4
+	adc	\$0, %rdx
+	add	%rax, $acc4
+	mov	$t1, %rax
+	adc	%rdx, $acc5
+	mov	$t1, %rdx
+	adc	\$0, $acc3		# can't overflow
+
+	shl	\$32, %rax
+	shr	\$32, %rdx
+	sub	%rax, $acc0
+	sbb	%rdx, $t1		# can't borrow
+
+	add	$acc3, $acc0
+	adc	$t1, $acc1
+	adc	\$0, $acc2
+
+	################################# Subtract ord
+	 mov	$acc4, $a_ptr
+	sub	8*0(%r14), $acc4
+	 mov	$acc5, $acc3
+	sbb	8*1(%r14), $acc5
+	 mov	$acc0, $t0
+	sbb	8*2(%r14), $acc0
+	 mov	$acc1, $t1
+	sbb	8*3(%r14), $acc1
+	sbb	\$0, $acc2
+
+	cmovc	$a_ptr, $acc4
+	cmovc	$acc3, $acc5
+	cmovc	$t0, $acc0
+	cmovc	$t1, $acc1
+
+	mov	$acc4, 8*0($r_ptr)
+	mov	$acc5, 8*1($r_ptr)
+	mov	$acc0, 8*2($r_ptr)
+	mov	$acc1, 8*3($r_ptr)
+
+	mov	0(%rsp),%r15
+.cfi_restore	%r15
+	mov	8(%rsp),%r14
+.cfi_restore	%r14
+	mov	16(%rsp),%r13
+.cfi_restore	%r13
+	mov	24(%rsp),%r12
+.cfi_restore	%r12
+	mov	32(%rsp),%rbx
+.cfi_restore	%rbx
+	mov	40(%rsp),%rbp
+.cfi_restore	%rbp
+	lea	48(%rsp),%rsp
+.cfi_adjust_cfa_offset	-48
+.Lord_mul_epilogue:
+	ret
+.cfi_endproc
+.size	ecp_nistz256_ord_mul_mont,.-ecp_nistz256_ord_mul_mont
+
+################################################################################
+# void ecp_nistz256_ord_sqr_mont(
+#   uint64_t res[4],
+#   uint64_t a[4],
+#   int rep);
+
+.globl	ecp_nistz256_ord_sqr_mont
+.type	ecp_nistz256_ord_sqr_mont,\@function,3
+.align	32
+ecp_nistz256_ord_sqr_mont:
+.cfi_startproc
+___
+$code.=<<___	if ($addx);
+	mov	\$0x80100, %ecx
+	and	OPENSSL_ia32cap_P+8(%rip), %ecx
+	cmp	\$0x80100, %ecx
+	je	.Lecp_nistz256_ord_sqr_montx
+___
+$code.=<<___;
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lord_sqr_body:
+
+	mov	8*0($a_ptr), $acc0
+	mov	8*1($a_ptr), %rax
+	mov	8*2($a_ptr), $acc6
+	mov	8*3($a_ptr), $acc7
+	lea	.Lord(%rip), $a_ptr	# pointer to modulus
+	mov	$b_org, $b_ptr
+	jmp	.Loop_ord_sqr
+
+.align	32
+.Loop_ord_sqr:
+	################################# a[1:] * a[0]
+	mov	%rax, $t1		# put aside a[1]
+	mul	$acc0			# a[1] * a[0]
+	mov	%rax, $acc1
+	movq	$t1, %xmm1		# offload a[1]
+	mov	$acc6, %rax
+	mov	%rdx, $acc2
+
+	mul	$acc0			# a[2] * a[0]
+	add	%rax, $acc2
+	mov	$acc7, %rax
+	movq	$acc6, %xmm2		# offload a[2]
+	adc	\$0, %rdx
+	mov	%rdx, $acc3
+
+	mul	$acc0			# a[3] * a[0]
+	add	%rax, $acc3
+	mov	$acc7, %rax
+	movq	$acc7, %xmm3		# offload a[3]
+	adc	\$0, %rdx
+	mov	%rdx, $acc4
+
+	################################# a[3] * a[2]
+	mul	$acc6			# a[3] * a[2]
+	mov	%rax, $acc5
+	mov	$acc6, %rax
+	mov	%rdx, $acc6
+
+	################################# a[2:] * a[1]
+	mul	$t1			# a[2] * a[1]
+	add	%rax, $acc3
+	mov	$acc7, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $acc7
+
+	mul	$t1			# a[3] * a[1]
+	add	%rax, $acc4
+	adc	\$0, %rdx
+
+	add	$acc7, $acc4
+	adc	%rdx, $acc5
+	adc	\$0, $acc6		# can't overflow
+
+	################################# *2
+	xor	$acc7, $acc7
+	mov	$acc0, %rax
+	add	$acc1, $acc1
+	adc	$acc2, $acc2
+	adc	$acc3, $acc3
+	adc	$acc4, $acc4
+	adc	$acc5, $acc5
+	adc	$acc6, $acc6
+	adc	\$0, $acc7
+
+	################################# Missing products
+	mul	%rax			# a[0] * a[0]
+	mov	%rax, $acc0
+	movq	%xmm1, %rax
+	mov	%rdx, $t1
+
+	mul	%rax			# a[1] * a[1]
+	add	$t1, $acc1
+	adc	%rax, $acc2
+	movq	%xmm2, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t1
+
+	mul	%rax			# a[2] * a[2]
+	add	$t1, $acc3
+	adc	%rax, $acc4
+	movq	%xmm3, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t1
+
+	 mov	$acc0, $t0
+	 imulq	8*4($a_ptr), $acc0	# *= .LordK
+
+	mul	%rax			# a[3] * a[3]
+	add	$t1, $acc5
+	adc	%rax, $acc6
+	 mov	8*0($a_ptr), %rax	# modulus[0]
+	adc	%rdx, $acc7		# can't overflow
+
+	################################# First reduction step
+	mul	$acc0
+	mov	$acc0, $t1
+	add	%rax, $t0		# guaranteed to be zero
+	mov	8*1($a_ptr), %rax	# modulus[1]
+	adc	%rdx, $t0
+
+	sub	$acc0, $acc2
+	sbb	\$0, $t1		# can't borrow
+
+	mul	$acc0
+	add	$t0, $acc1
+	adc	\$0, %rdx
+	add	%rax, $acc1
+	mov	$acc0, %rax
+	adc	%rdx, $acc2
+	mov	$acc0, %rdx
+	adc	\$0, $t1		# can't overflow
+
+	 mov	$acc1, $t0
+	 imulq	8*4($a_ptr), $acc1	# *= .LordK
+
+	shl	\$32, %rax
+	shr	\$32, %rdx
+	sub	%rax, $acc3
+	 mov	8*0($a_ptr), %rax
+	sbb	%rdx, $acc0		# can't borrow
+
+	add	$t1, $acc3
+	adc	\$0, $acc0		# can't overflow
+
+	################################# Second reduction step
+	mul	$acc1
+	mov	$acc1, $t1
+	add	%rax, $t0		# guaranteed to be zero
+	mov	8*1($a_ptr), %rax
+	adc	%rdx, $t0
+
+	sub	$acc1, $acc3
+	sbb	\$0, $t1		# can't borrow
+
+	mul	$acc1
+	add	$t0, $acc2
+	adc	\$0, %rdx
+	add	%rax, $acc2
+	mov	$acc1, %rax
+	adc	%rdx, $acc3
+	mov	$acc1, %rdx
+	adc	\$0, $t1		# can't overflow
+
+	 mov	$acc2, $t0
+	 imulq	8*4($a_ptr), $acc2	# *= .LordK
+
+	shl	\$32, %rax
+	shr	\$32, %rdx
+	sub	%rax, $acc0
+	 mov	8*0($a_ptr), %rax
+	sbb	%rdx, $acc1		# can't borrow
+
+	add	$t1, $acc0
+	adc	\$0, $acc1		# can't overflow
+
+	################################# Third reduction step
+	mul	$acc2
+	mov	$acc2, $t1
+	add	%rax, $t0		# guaranteed to be zero
+	mov	8*1($a_ptr), %rax
+	adc	%rdx, $t0
+
+	sub	$acc2, $acc0
+	sbb	\$0, $t1		# can't borrow
+
+	mul	$acc2
+	add	$t0, $acc3
+	adc	\$0, %rdx
+	add	%rax, $acc3
+	mov	$acc2, %rax
+	adc	%rdx, $acc0
+	mov	$acc2, %rdx
+	adc	\$0, $t1		# can't overflow
+
+	 mov	$acc3, $t0
+	 imulq	8*4($a_ptr), $acc3	# *= .LordK
+
+	shl	\$32, %rax
+	shr	\$32, %rdx
+	sub	%rax, $acc1
+	 mov	8*0($a_ptr), %rax
+	sbb	%rdx, $acc2		# can't borrow
+
+	add	$t1, $acc1
+	adc	\$0, $acc2		# can't overflow
+
+	################################# Last reduction step
+	mul	$acc3
+	mov	$acc3, $t1
+	add	%rax, $t0		# guaranteed to be zero
+	mov	8*1($a_ptr), %rax
+	adc	%rdx, $t0
+
+	sub	$acc3, $acc1
+	sbb	\$0, $t1		# can't borrow
+
+	mul	$acc3
+	add	$t0, $acc0
+	adc	\$0, %rdx
+	add	%rax, $acc0
+	mov	$acc3, %rax
+	adc	%rdx, $acc1
+	mov	$acc3, %rdx
+	adc	\$0, $t1		# can't overflow
+
+	shl	\$32, %rax
+	shr	\$32, %rdx
+	sub	%rax, $acc2
+	sbb	%rdx, $acc3		# can't borrow
+
+	add	$t1, $acc2
+	adc	\$0, $acc3		# can't overflow
+
+	################################# Add bits [511:256] of the sqr result
+	xor	%rdx, %rdx
+	add	$acc4, $acc0
+	adc	$acc5, $acc1
+	 mov	$acc0, $acc4
+	adc	$acc6, $acc2
+	adc	$acc7, $acc3
+	 mov	$acc1, %rax
+	adc	\$0, %rdx
+
+	################################# Compare to modulus
+	sub	8*0($a_ptr), $acc0
+	 mov	$acc2, $acc6
+	sbb	8*1($a_ptr), $acc1
+	sbb	8*2($a_ptr), $acc2
+	 mov	$acc3, $acc7
+	sbb	8*3($a_ptr), $acc3
+	sbb	\$0, %rdx
+
+	cmovc	$acc4, $acc0
+	cmovnc	$acc1, %rax
+	cmovnc	$acc2, $acc6
+	cmovnc	$acc3, $acc7
+
+	dec	$b_ptr
+	jnz	.Loop_ord_sqr
+
+	mov	$acc0, 8*0($r_ptr)
+	mov	%rax,  8*1($r_ptr)
+	pxor	%xmm1, %xmm1
+	mov	$acc6, 8*2($r_ptr)
+	pxor	%xmm2, %xmm2
+	mov	$acc7, 8*3($r_ptr)
+	pxor	%xmm3, %xmm3
+
+	mov	0(%rsp),%r15
+.cfi_restore	%r15
+	mov	8(%rsp),%r14
+.cfi_restore	%r14
+	mov	16(%rsp),%r13
+.cfi_restore	%r13
+	mov	24(%rsp),%r12
+.cfi_restore	%r12
+	mov	32(%rsp),%rbx
+.cfi_restore	%rbx
+	mov	40(%rsp),%rbp
+.cfi_restore	%rbp
+	lea	48(%rsp),%rsp
+.cfi_adjust_cfa_offset	-48
+.Lord_sqr_epilogue:
+	ret
+.cfi_endproc
+.size	ecp_nistz256_ord_sqr_mont,.-ecp_nistz256_ord_sqr_mont
+___
+
+$code.=<<___	if ($addx);
+################################################################################
+.type	ecp_nistz256_ord_mul_montx,\@function,3
+.align	32
+ecp_nistz256_ord_mul_montx:
+.cfi_startproc
+.Lecp_nistz256_ord_mul_montx:
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lord_mulx_body:
+
+	mov	$b_org, $b_ptr
+	mov	8*0($b_org), %rdx
+	mov	8*0($a_ptr), $acc1
+	mov	8*1($a_ptr), $acc2
+	mov	8*2($a_ptr), $acc3
+	mov	8*3($a_ptr), $acc4
+	lea	-128($a_ptr), $a_ptr	# control u-op density
+	lea	.Lord-128(%rip), %r14
+	mov	.LordK(%rip), %r15
+
+	################################# Multiply by b[0]
+	mulx	$acc1, $acc0, $acc1
+	mulx	$acc2, $t0, $acc2
+	mulx	$acc3, $t1, $acc3
+	add	$t0, $acc1
+	mulx	$acc4, $t0, $acc4
+	 mov	$acc0, %rdx
+	 mulx	%r15, %rdx, %rax
+	adc	$t1, $acc2
+	adc	$t0, $acc3
+	adc	\$0, $acc4
+
+	################################# reduction
+	xor	$acc5, $acc5		# $acc5=0, cf=0, of=0
+	mulx	8*0+128(%r14), $t0, $t1
+	adcx	$t0, $acc0		# guaranteed to be zero
+	adox	$t1, $acc1
+
+	mulx	8*1+128(%r14), $t0, $t1
+	adcx	$t0, $acc1
+	adox	$t1, $acc2
+
+	mulx	8*2+128(%r14), $t0, $t1
+	adcx	$t0, $acc2
+	adox	$t1, $acc3
+
+	mulx	8*3+128(%r14), $t0, $t1
+	 mov	8*1($b_ptr), %rdx
+	adcx	$t0, $acc3
+	adox	$t1, $acc4
+	adcx	$acc0, $acc4
+	adox	$acc0, $acc5
+	adc	\$0, $acc5		# cf=0, of=0
+
+	################################# Multiply by b[1]
+	mulx	8*0+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc1
+	adox	$t1, $acc2
+
+	mulx	8*1+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc2
+	adox	$t1, $acc3
+
+	mulx	8*2+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc3
+	adox	$t1, $acc4
+
+	mulx	8*3+128($a_ptr), $t0, $t1
+	 mov	$acc1, %rdx
+	 mulx	%r15, %rdx, %rax
+	adcx	$t0, $acc4
+	adox	$t1, $acc5
+
+	adcx	$acc0, $acc5
+	adox	$acc0, $acc0
+	adc	\$0, $acc0		# cf=0, of=0
+
+	################################# reduction
+	mulx	8*0+128(%r14), $t0, $t1
+	adcx	$t0, $acc1		# guaranteed to be zero
+	adox	$t1, $acc2
+
+	mulx	8*1+128(%r14), $t0, $t1
+	adcx	$t0, $acc2
+	adox	$t1, $acc3
+
+	mulx	8*2+128(%r14), $t0, $t1
+	adcx	$t0, $acc3
+	adox	$t1, $acc4
+
+	mulx	8*3+128(%r14), $t0, $t1
+	 mov	8*2($b_ptr), %rdx
+	adcx	$t0, $acc4
+	adox	$t1, $acc5
+	adcx	$acc1, $acc5
+	adox	$acc1, $acc0
+	adc	\$0, $acc0		# cf=0, of=0
+
+	################################# Multiply by b[2]
+	mulx	8*0+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc2
+	adox	$t1, $acc3
+
+	mulx	8*1+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc3
+	adox	$t1, $acc4
+
+	mulx	8*2+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc4
+	adox	$t1, $acc5
+
+	mulx	8*3+128($a_ptr), $t0, $t1
+	 mov	$acc2, %rdx
+	 mulx	%r15, %rdx, %rax
+	adcx	$t0, $acc5
+	adox	$t1, $acc0
+
+	adcx	$acc1, $acc0
+	adox	$acc1, $acc1
+	adc	\$0, $acc1		# cf=0, of=0
+
+	################################# reduction
+	mulx	8*0+128(%r14), $t0, $t1
+	adcx	$t0, $acc2		# guaranteed to be zero
+	adox	$t1, $acc3
+
+	mulx	8*1+128(%r14), $t0, $t1
+	adcx	$t0, $acc3
+	adox	$t1, $acc4
+
+	mulx	8*2+128(%r14), $t0, $t1
+	adcx	$t0, $acc4
+	adox	$t1, $acc5
+
+	mulx	8*3+128(%r14), $t0, $t1
+	 mov	8*3($b_ptr), %rdx
+	adcx	$t0, $acc5
+	adox	$t1, $acc0
+	adcx	$acc2, $acc0
+	adox	$acc2, $acc1
+	adc	\$0, $acc1		# cf=0, of=0
+
+	################################# Multiply by b[3]
+	mulx	8*0+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc3
+	adox	$t1, $acc4
+
+	mulx	8*1+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc4
+	adox	$t1, $acc5
+
+	mulx	8*2+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc5
+	adox	$t1, $acc0
+
+	mulx	8*3+128($a_ptr), $t0, $t1
+	 mov	$acc3, %rdx
+	 mulx	%r15, %rdx, %rax
+	adcx	$t0, $acc0
+	adox	$t1, $acc1
+
+	adcx	$acc2, $acc1
+	adox	$acc2, $acc2
+	adc	\$0, $acc2		# cf=0, of=0
+
+	################################# reduction
+	mulx	8*0+128(%r14), $t0, $t1
+	adcx	$t0, $acc3		# guranteed to be zero
+	adox	$t1, $acc4
+
+	mulx	8*1+128(%r14), $t0, $t1
+	adcx	$t0, $acc4
+	adox	$t1, $acc5
+
+	mulx	8*2+128(%r14), $t0, $t1
+	adcx	$t0, $acc5
+	adox	$t1, $acc0
+
+	mulx	8*3+128(%r14), $t0, $t1
+	lea	128(%r14),%r14
+	 mov	$acc4, $t2
+	adcx	$t0, $acc0
+	adox	$t1, $acc1
+	 mov	$acc5, $t3
+	adcx	$acc3, $acc1
+	adox	$acc3, $acc2
+	adc	\$0, $acc2
+
+	#################################
+	# Branch-less conditional subtraction of P
+	 mov	$acc0, $t0
+	sub	8*0(%r14), $acc4
+	sbb	8*1(%r14), $acc5
+	sbb	8*2(%r14), $acc0
+	 mov	$acc1, $t1
+	sbb	8*3(%r14), $acc1
+	sbb	\$0, $acc2
+
+	cmovc	$t2, $acc4
+	cmovc	$t3, $acc5
+	cmovc	$t0, $acc0
+	cmovc	$t1, $acc1
+
+	mov	$acc4, 8*0($r_ptr)
+	mov	$acc5, 8*1($r_ptr)
+	mov	$acc0, 8*2($r_ptr)
+	mov	$acc1, 8*3($r_ptr)
+
+	mov	0(%rsp),%r15
+.cfi_restore	%r15
+	mov	8(%rsp),%r14
+.cfi_restore	%r14
+	mov	16(%rsp),%r13
+.cfi_restore	%r13
+	mov	24(%rsp),%r12
+.cfi_restore	%r12
+	mov	32(%rsp),%rbx
+.cfi_restore	%rbx
+	mov	40(%rsp),%rbp
+.cfi_restore	%rbp
+	lea	48(%rsp),%rsp
+.cfi_adjust_cfa_offset	-48
+.Lord_mulx_epilogue:
+	ret
+.cfi_endproc
+.size	ecp_nistz256_ord_mul_montx,.-ecp_nistz256_ord_mul_montx
+
+.type	ecp_nistz256_ord_sqr_montx,\@function,3
+.align	32
+ecp_nistz256_ord_sqr_montx:
+.cfi_startproc
+.Lecp_nistz256_ord_sqr_montx:
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lord_sqrx_body:
+
+	mov	$b_org, $b_ptr
+	mov	8*0($a_ptr), %rdx
+	mov	8*1($a_ptr), $acc6
+	mov	8*2($a_ptr), $acc7
+	mov	8*3($a_ptr), $acc0
+	lea	.Lord(%rip), $a_ptr
+	jmp	.Loop_ord_sqrx
+
+.align	32
+.Loop_ord_sqrx:
+	mulx	$acc6, $acc1, $acc2	# a[0]*a[1]
+	mulx	$acc7, $t0, $acc3	# a[0]*a[2]
+	 mov	%rdx, %rax		# offload a[0]
+	 movq	$acc6, %xmm1		# offload a[1]
+	mulx	$acc0, $t1, $acc4	# a[0]*a[3]
+	 mov	$acc6, %rdx
+	add	$t0, $acc2
+	 movq	$acc7, %xmm2		# offload a[2]
+	adc	$t1, $acc3
+	adc	\$0, $acc4
+	xor	$acc5, $acc5		# $acc5=0,cf=0,of=0
+	#################################
+	mulx	$acc7, $t0, $t1		# a[1]*a[2]
+	adcx	$t0, $acc3
+	adox	$t1, $acc4
+
+	mulx	$acc0, $t0, $t1		# a[1]*a[3]
+	 mov	$acc7, %rdx
+	adcx	$t0, $acc4
+	adox	$t1, $acc5
+	adc	\$0, $acc5
+	#################################
+	mulx	$acc0, $t0, $acc6	# a[2]*a[3]
+	mov	%rax, %rdx
+	 movq	$acc0, %xmm3		# offload a[3]
+	xor	$acc7, $acc7		# $acc7=0,cf=0,of=0
+	 adcx	$acc1, $acc1		# acc1:6<<1
+	adox	$t0, $acc5
+	 adcx	$acc2, $acc2
+	adox	$acc7, $acc6		# of=0
+
+	################################# a[i]*a[i]
+	mulx	%rdx, $acc0, $t1
+	movq	%xmm1, %rdx
+	 adcx	$acc3, $acc3
+	adox	$t1, $acc1
+	 adcx	$acc4, $acc4
+	mulx	%rdx, $t0, $t4
+	movq	%xmm2, %rdx
+	 adcx	$acc5, $acc5
+	adox	$t0, $acc2
+	 adcx	$acc6, $acc6
+	mulx	%rdx, $t0, $t1
+	.byte	0x67
+	movq	%xmm3, %rdx
+	adox	$t4, $acc3
+	 adcx	$acc7, $acc7
+	adox	$t0, $acc4
+	adox	$t1, $acc5
+	mulx	%rdx, $t0, $t4
+	adox	$t0, $acc6
+	adox	$t4, $acc7
+
+	################################# reduction
+	mov	$acc0, %rdx
+	mulx	8*4($a_ptr), %rdx, $t0
+
+	xor	%rax, %rax		# cf=0, of=0
+	mulx	8*0($a_ptr), $t0, $t1
+	adcx	$t0, $acc0		# guaranteed to be zero
+	adox	$t1, $acc1
+	mulx	8*1($a_ptr), $t0, $t1
+	adcx	$t0, $acc1
+	adox	$t1, $acc2
+	mulx	8*2($a_ptr), $t0, $t1
+	adcx	$t0, $acc2
+	adox	$t1, $acc3
+	mulx	8*3($a_ptr), $t0, $t1
+	adcx	$t0, $acc3
+	adox	$t1, $acc0		# of=0
+	adcx	%rax, $acc0		# cf=0
+
+	#################################
+	mov	$acc1, %rdx
+	mulx	8*4($a_ptr), %rdx, $t0
+
+	mulx	8*0($a_ptr), $t0, $t1
+	adox	$t0, $acc1		# guaranteed to be zero
+	adcx	$t1, $acc2
+	mulx	8*1($a_ptr), $t0, $t1
+	adox	$t0, $acc2
+	adcx	$t1, $acc3
+	mulx	8*2($a_ptr), $t0, $t1
+	adox	$t0, $acc3
+	adcx	$t1, $acc0
+	mulx	8*3($a_ptr), $t0, $t1
+	adox	$t0, $acc0
+	adcx	$t1, $acc1		# cf=0
+	adox	%rax, $acc1		# of=0
+
+	#################################
+	mov	$acc2, %rdx
+	mulx	8*4($a_ptr), %rdx, $t0
+
+	mulx	8*0($a_ptr), $t0, $t1
+	adcx	$t0, $acc2		# guaranteed to be zero
+	adox	$t1, $acc3
+	mulx	8*1($a_ptr), $t0, $t1
+	adcx	$t0, $acc3
+	adox	$t1, $acc0
+	mulx	8*2($a_ptr), $t0, $t1
+	adcx	$t0, $acc0
+	adox	$t1, $acc1
+	mulx	8*3($a_ptr), $t0, $t1
+	adcx	$t0, $acc1
+	adox	$t1, $acc2		# of=0
+	adcx	%rax, $acc2		# cf=0
+
+	#################################
+	mov	$acc3, %rdx
+	mulx	8*4($a_ptr), %rdx, $t0
+
+	mulx	8*0($a_ptr), $t0, $t1
+	adox	$t0, $acc3		# guaranteed to be zero
+	adcx	$t1, $acc0
+	mulx	8*1($a_ptr), $t0, $t1
+	adox	$t0, $acc0
+	adcx	$t1, $acc1
+	mulx	8*2($a_ptr), $t0, $t1
+	adox	$t0, $acc1
+	adcx	$t1, $acc2
+	mulx	8*3($a_ptr), $t0, $t1
+	adox	$t0, $acc2
+	adcx	$t1, $acc3
+	adox	%rax, $acc3
+
+	################################# accumulate upper half
+	add	$acc0, $acc4		# add	$acc4, $acc0
+	adc	$acc5, $acc1
+	 mov	$acc4, %rdx
+	adc	$acc6, $acc2
+	adc	$acc7, $acc3
+	 mov	$acc1, $acc6
+	adc	\$0, %rax
+
+	################################# compare to modulus
+	sub	8*0($a_ptr), $acc4
+	 mov	$acc2, $acc7
+	sbb	8*1($a_ptr), $acc1
+	sbb	8*2($a_ptr), $acc2
+	 mov	$acc3, $acc0
+	sbb	8*3($a_ptr), $acc3
+	sbb	\$0, %rax
+
+	cmovnc	$acc4, %rdx
+	cmovnc	$acc1, $acc6
+	cmovnc	$acc2, $acc7
+	cmovnc	$acc3, $acc0
+
+	dec	$b_ptr
+	jnz	.Loop_ord_sqrx
+
+	mov	%rdx, 8*0($r_ptr)
+	mov	$acc6, 8*1($r_ptr)
+	pxor	%xmm1, %xmm1
+	mov	$acc7, 8*2($r_ptr)
+	pxor	%xmm2, %xmm2
+	mov	$acc0, 8*3($r_ptr)
+	pxor	%xmm3, %xmm3
+
+	mov	0(%rsp),%r15
+.cfi_restore	%r15
+	mov	8(%rsp),%r14
+.cfi_restore	%r14
+	mov	16(%rsp),%r13
+.cfi_restore	%r13
+	mov	24(%rsp),%r12
+.cfi_restore	%r12
+	mov	32(%rsp),%rbx
+.cfi_restore	%rbx
+	mov	40(%rsp),%rbp
+.cfi_restore	%rbp
+	lea	48(%rsp),%rsp
+.cfi_adjust_cfa_offset	-48
+.Lord_sqrx_epilogue:
+	ret
+.cfi_endproc
+.size	ecp_nistz256_ord_sqr_montx,.-ecp_nistz256_ord_sqr_montx
+___
+
+$code.=<<___;
+################################################################################
+# void ecp_nistz256_to_mont(
+#   uint64_t res[4],
+#   uint64_t in[4]);
+.globl	ecp_nistz256_to_mont
+.type	ecp_nistz256_to_mont,\@function,2
+.align	32
+ecp_nistz256_to_mont:
+___
+$code.=<<___	if ($addx);
+	mov	\$0x80100, %ecx
+	and	OPENSSL_ia32cap_P+8(%rip), %ecx
+___
+$code.=<<___;
+	lea	.LRR(%rip), $b_org
+	jmp	.Lmul_mont
+.size	ecp_nistz256_to_mont,.-ecp_nistz256_to_mont
+
+################################################################################
+# void ecp_nistz256_mul_mont(
+#   uint64_t res[4],
+#   uint64_t a[4],
+#   uint64_t b[4]);
+
+.globl	ecp_nistz256_mul_mont
+.type	ecp_nistz256_mul_mont,\@function,3
+.align	32
+ecp_nistz256_mul_mont:
+.cfi_startproc
+___
+$code.=<<___	if ($addx);
+	mov	\$0x80100, %ecx
+	and	OPENSSL_ia32cap_P+8(%rip), %ecx
+___
+$code.=<<___;
+.Lmul_mont:
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lmul_body:
+___
+$code.=<<___	if ($addx);
+	cmp	\$0x80100, %ecx
+	je	.Lmul_montx
+___
+$code.=<<___;
+	mov	$b_org, $b_ptr
+	mov	8*0($b_org), %rax
+	mov	8*0($a_ptr), $acc1
+	mov	8*1($a_ptr), $acc2
+	mov	8*2($a_ptr), $acc3
+	mov	8*3($a_ptr), $acc4
+
+	call	__ecp_nistz256_mul_montq
+___
+$code.=<<___	if ($addx);
+	jmp	.Lmul_mont_done
+
+.align	32
+.Lmul_montx:
+	mov	$b_org, $b_ptr
+	mov	8*0($b_org), %rdx
+	mov	8*0($a_ptr), $acc1
+	mov	8*1($a_ptr), $acc2
+	mov	8*2($a_ptr), $acc3
+	mov	8*3($a_ptr), $acc4
+	lea	-128($a_ptr), $a_ptr	# control u-op density
+
+	call	__ecp_nistz256_mul_montx
+___
+$code.=<<___;
+.Lmul_mont_done:
+	mov	0(%rsp),%r15
+.cfi_restore	%r15
+	mov	8(%rsp),%r14
+.cfi_restore	%r14
+	mov	16(%rsp),%r13
+.cfi_restore	%r13
+	mov	24(%rsp),%r12
+.cfi_restore	%r12
+	mov	32(%rsp),%rbx
+.cfi_restore	%rbx
+	mov	40(%rsp),%rbp
+.cfi_restore	%rbp
+	lea	48(%rsp),%rsp
+.cfi_adjust_cfa_offset	-48
+.Lmul_epilogue:
+	ret
+.cfi_endproc
+.size	ecp_nistz256_mul_mont,.-ecp_nistz256_mul_mont
+
+.type	__ecp_nistz256_mul_montq,\@abi-omnipotent
+.align	32
+__ecp_nistz256_mul_montq:
+.cfi_startproc
+	########################################################################
+	# Multiply a by b[0]
+	mov	%rax, $t1
+	mulq	$acc1
+	mov	.Lpoly+8*1(%rip),$poly1
+	mov	%rax, $acc0
+	mov	$t1, %rax
+	mov	%rdx, $acc1
+
+	mulq	$acc2
+	mov	.Lpoly+8*3(%rip),$poly3
+	add	%rax, $acc1
+	mov	$t1, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $acc2
+
+	mulq	$acc3
+	add	%rax, $acc2
+	mov	$t1, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $acc3
+
+	mulq	$acc4
+	add	%rax, $acc3
+	 mov	$acc0, %rax
+	adc	\$0, %rdx
+	xor	$acc5, $acc5
+	mov	%rdx, $acc4
+
+	########################################################################
+	# First reduction step
+	# Basically now we want to multiply acc[0] by p256,
+	# and add the result to the acc.
+	# Due to the special form of p256 we do some optimizations
+	#
+	# acc[0] x p256[0..1] = acc[0] x 2^96 - acc[0]
+	# then we add acc[0] and get acc[0] x 2^96
+
+	mov	$acc0, $t1
+	shl	\$32, $acc0
+	mulq	$poly3
+	shr	\$32, $t1
+	add	$acc0, $acc1		# +=acc[0]<<96
+	adc	$t1, $acc2
+	adc	%rax, $acc3
+	 mov	8*1($b_ptr), %rax
+	adc	%rdx, $acc4
+	adc	\$0, $acc5
+	xor	$acc0, $acc0
+
+	########################################################################
+	# Multiply by b[1]
+	mov	%rax, $t1
+	mulq	8*0($a_ptr)
+	add	%rax, $acc1
+	mov	$t1, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t0
+
+	mulq	8*1($a_ptr)
+	add	$t0, $acc2
+	adc	\$0, %rdx
+	add	%rax, $acc2
+	mov	$t1, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t0
+
+	mulq	8*2($a_ptr)
+	add	$t0, $acc3
+	adc	\$0, %rdx
+	add	%rax, $acc3
+	mov	$t1, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t0
+
+	mulq	8*3($a_ptr)
+	add	$t0, $acc4
+	adc	\$0, %rdx
+	add	%rax, $acc4
+	 mov	$acc1, %rax
+	adc	%rdx, $acc5
+	adc	\$0, $acc0
+
+	########################################################################
+	# Second reduction step
+	mov	$acc1, $t1
+	shl	\$32, $acc1
+	mulq	$poly3
+	shr	\$32, $t1
+	add	$acc1, $acc2
+	adc	$t1, $acc3
+	adc	%rax, $acc4
+	 mov	8*2($b_ptr), %rax
+	adc	%rdx, $acc5
+	adc	\$0, $acc0
+	xor	$acc1, $acc1
+
+	########################################################################
+	# Multiply by b[2]
+	mov	%rax, $t1
+	mulq	8*0($a_ptr)
+	add	%rax, $acc2
+	mov	$t1, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t0
+
+	mulq	8*1($a_ptr)
+	add	$t0, $acc3
+	adc	\$0, %rdx
+	add	%rax, $acc3
+	mov	$t1, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t0
+
+	mulq	8*2($a_ptr)
+	add	$t0, $acc4
+	adc	\$0, %rdx
+	add	%rax, $acc4
+	mov	$t1, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t0
+
+	mulq	8*3($a_ptr)
+	add	$t0, $acc5
+	adc	\$0, %rdx
+	add	%rax, $acc5
+	 mov	$acc2, %rax
+	adc	%rdx, $acc0
+	adc	\$0, $acc1
+
+	########################################################################
+	# Third reduction step
+	mov	$acc2, $t1
+	shl	\$32, $acc2
+	mulq	$poly3
+	shr	\$32, $t1
+	add	$acc2, $acc3
+	adc	$t1, $acc4
+	adc	%rax, $acc5
+	 mov	8*3($b_ptr), %rax
+	adc	%rdx, $acc0
+	adc	\$0, $acc1
+	xor	$acc2, $acc2
+
+	########################################################################
+	# Multiply by b[3]
+	mov	%rax, $t1
+	mulq	8*0($a_ptr)
+	add	%rax, $acc3
+	mov	$t1, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t0
+
+	mulq	8*1($a_ptr)
+	add	$t0, $acc4
+	adc	\$0, %rdx
+	add	%rax, $acc4
+	mov	$t1, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t0
+
+	mulq	8*2($a_ptr)
+	add	$t0, $acc5
+	adc	\$0, %rdx
+	add	%rax, $acc5
+	mov	$t1, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t0
+
+	mulq	8*3($a_ptr)
+	add	$t0, $acc0
+	adc	\$0, %rdx
+	add	%rax, $acc0
+	 mov	$acc3, %rax
+	adc	%rdx, $acc1
+	adc	\$0, $acc2
+
+	########################################################################
+	# Final reduction step
+	mov	$acc3, $t1
+	shl	\$32, $acc3
+	mulq	$poly3
+	shr	\$32, $t1
+	add	$acc3, $acc4
+	adc	$t1, $acc5
+	 mov	$acc4, $t0
+	adc	%rax, $acc0
+	adc	%rdx, $acc1
+	 mov	$acc5, $t1
+	adc	\$0, $acc2
+
+	########################################################################
+	# Branch-less conditional subtraction of P
+	sub	\$-1, $acc4		# .Lpoly[0]
+	 mov	$acc0, $t2
+	sbb	$poly1, $acc5		# .Lpoly[1]
+	sbb	\$0, $acc0		# .Lpoly[2]
+	 mov	$acc1, $t3
+	sbb	$poly3, $acc1		# .Lpoly[3]
+	sbb	\$0, $acc2
+
+	cmovc	$t0, $acc4
+	cmovc	$t1, $acc5
+	mov	$acc4, 8*0($r_ptr)
+	cmovc	$t2, $acc0
+	mov	$acc5, 8*1($r_ptr)
+	cmovc	$t3, $acc1
+	mov	$acc0, 8*2($r_ptr)
+	mov	$acc1, 8*3($r_ptr)
+
+	ret
+.cfi_endproc
+.size	__ecp_nistz256_mul_montq,.-__ecp_nistz256_mul_montq
+
+################################################################################
+# void ecp_nistz256_sqr_mont(
+#   uint64_t res[4],
+#   uint64_t a[4]);
+
+# we optimize the square according to S.Gueron and V.Krasnov,
+# "Speeding up Big-Number Squaring"
+.globl	ecp_nistz256_sqr_mont
+.type	ecp_nistz256_sqr_mont,\@function,2
+.align	32
+ecp_nistz256_sqr_mont:
+.cfi_startproc
+___
+$code.=<<___	if ($addx);
+	mov	\$0x80100, %ecx
+	and	OPENSSL_ia32cap_P+8(%rip), %ecx
+___
+$code.=<<___;
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lsqr_body:
+___
+$code.=<<___	if ($addx);
+	cmp	\$0x80100, %ecx
+	je	.Lsqr_montx
+___
+$code.=<<___;
+	mov	8*0($a_ptr), %rax
+	mov	8*1($a_ptr), $acc6
+	mov	8*2($a_ptr), $acc7
+	mov	8*3($a_ptr), $acc0
+
+	call	__ecp_nistz256_sqr_montq
+___
+$code.=<<___	if ($addx);
+	jmp	.Lsqr_mont_done
+
+.align	32
+.Lsqr_montx:
+	mov	8*0($a_ptr), %rdx
+	mov	8*1($a_ptr), $acc6
+	mov	8*2($a_ptr), $acc7
+	mov	8*3($a_ptr), $acc0
+	lea	-128($a_ptr), $a_ptr	# control u-op density
+
+	call	__ecp_nistz256_sqr_montx
+___
+$code.=<<___;
+.Lsqr_mont_done:
+	mov	0(%rsp),%r15
+.cfi_restore	%r15
+	mov	8(%rsp),%r14
+.cfi_restore	%r14
+	mov	16(%rsp),%r13
+.cfi_restore	%r13
+	mov	24(%rsp),%r12
+.cfi_restore	%r12
+	mov	32(%rsp),%rbx
+.cfi_restore	%rbx
+	mov	40(%rsp),%rbp
+.cfi_restore	%rbp
+	lea	48(%rsp),%rsp
+.cfi_adjust_cfa_offset	-48
+.Lsqr_epilogue:
+	ret
+.cfi_endproc
+.size	ecp_nistz256_sqr_mont,.-ecp_nistz256_sqr_mont
+
+.type	__ecp_nistz256_sqr_montq,\@abi-omnipotent
+.align	32
+__ecp_nistz256_sqr_montq:
+.cfi_startproc
+	mov	%rax, $acc5
+	mulq	$acc6			# a[1]*a[0]
+	mov	%rax, $acc1
+	mov	$acc7, %rax
+	mov	%rdx, $acc2
+
+	mulq	$acc5			# a[0]*a[2]
+	add	%rax, $acc2
+	mov	$acc0, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $acc3
+
+	mulq	$acc5			# a[0]*a[3]
+	add	%rax, $acc3
+	 mov	$acc7, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $acc4
+
+	#################################
+	mulq	$acc6			# a[1]*a[2]
+	add	%rax, $acc3
+	mov	$acc0, %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t1
+
+	mulq	$acc6			# a[1]*a[3]
+	add	%rax, $acc4
+	 mov	$acc0, %rax
+	adc	\$0, %rdx
+	add	$t1, $acc4
+	mov	%rdx, $acc5
+	adc	\$0, $acc5
+
+	#################################
+	mulq	$acc7			# a[2]*a[3]
+	xor	$acc7, $acc7
+	add	%rax, $acc5
+	 mov	8*0($a_ptr), %rax
+	mov	%rdx, $acc6
+	adc	\$0, $acc6
+
+	add	$acc1, $acc1		# acc1:6<<1
+	adc	$acc2, $acc2
+	adc	$acc3, $acc3
+	adc	$acc4, $acc4
+	adc	$acc5, $acc5
+	adc	$acc6, $acc6
+	adc	\$0, $acc7
+
+	mulq	%rax
+	mov	%rax, $acc0
+	mov	8*1($a_ptr), %rax
+	mov	%rdx, $t0
+
+	mulq	%rax
+	add	$t0, $acc1
+	adc	%rax, $acc2
+	mov	8*2($a_ptr), %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t0
+
+	mulq	%rax
+	add	$t0, $acc3
+	adc	%rax, $acc4
+	mov	8*3($a_ptr), %rax
+	adc	\$0, %rdx
+	mov	%rdx, $t0
+
+	mulq	%rax
+	add	$t0, $acc5
+	adc	%rax, $acc6
+	 mov	$acc0, %rax
+	adc	%rdx, $acc7
+
+	mov	.Lpoly+8*1(%rip), $a_ptr
+	mov	.Lpoly+8*3(%rip), $t1
+
+	##########################################
+	# Now the reduction
+	# First iteration
+	mov	$acc0, $t0
+	shl	\$32, $acc0
+	mulq	$t1
+	shr	\$32, $t0
+	add	$acc0, $acc1		# +=acc[0]<<96
+	adc	$t0, $acc2
+	adc	%rax, $acc3
+	 mov	$acc1, %rax
+	adc	\$0, %rdx
+
+	##########################################
+	# Second iteration
+	mov	$acc1, $t0
+	shl	\$32, $acc1
+	mov	%rdx, $acc0
+	mulq	$t1
+	shr	\$32, $t0
+	add	$acc1, $acc2
+	adc	$t0, $acc3
+	adc	%rax, $acc0
+	 mov	$acc2, %rax
+	adc	\$0, %rdx
+
+	##########################################
+	# Third iteration
+	mov	$acc2, $t0
+	shl	\$32, $acc2
+	mov	%rdx, $acc1
+	mulq	$t1
+	shr	\$32, $t0
+	add	$acc2, $acc3
+	adc	$t0, $acc0
+	adc	%rax, $acc1
+	 mov	$acc3, %rax
+	adc	\$0, %rdx
+
+	###########################################
+	# Last iteration
+	mov	$acc3, $t0
+	shl	\$32, $acc3
+	mov	%rdx, $acc2
+	mulq	$t1
+	shr	\$32, $t0
+	add	$acc3, $acc0
+	adc	$t0, $acc1
+	adc	%rax, $acc2
+	adc	\$0, %rdx
+	xor	$acc3, $acc3
+
+	############################################
+	# Add the rest of the acc
+	add	$acc0, $acc4
+	adc	$acc1, $acc5
+	 mov	$acc4, $acc0
+	adc	$acc2, $acc6
+	adc	%rdx, $acc7
+	 mov	$acc5, $acc1
+	adc	\$0, $acc3
+
+	sub	\$-1, $acc4		# .Lpoly[0]
+	 mov	$acc6, $acc2
+	sbb	$a_ptr, $acc5		# .Lpoly[1]
+	sbb	\$0, $acc6		# .Lpoly[2]
+	 mov	$acc7, $t0
+	sbb	$t1, $acc7		# .Lpoly[3]
+	sbb	\$0, $acc3
+
+	cmovc	$acc0, $acc4
+	cmovc	$acc1, $acc5
+	mov	$acc4, 8*0($r_ptr)
+	cmovc	$acc2, $acc6
+	mov	$acc5, 8*1($r_ptr)
+	cmovc	$t0, $acc7
+	mov	$acc6, 8*2($r_ptr)
+	mov	$acc7, 8*3($r_ptr)
+
+	ret
+.cfi_endproc
+.size	__ecp_nistz256_sqr_montq,.-__ecp_nistz256_sqr_montq
+___
+
+if ($addx) {
+$code.=<<___;
+.type	__ecp_nistz256_mul_montx,\@abi-omnipotent
+.align	32
+__ecp_nistz256_mul_montx:
+.cfi_startproc
+	########################################################################
+	# Multiply by b[0]
+	mulx	$acc1, $acc0, $acc1
+	mulx	$acc2, $t0, $acc2
+	mov	\$32, $poly1
+	xor	$acc5, $acc5		# cf=0
+	mulx	$acc3, $t1, $acc3
+	mov	.Lpoly+8*3(%rip), $poly3
+	adc	$t0, $acc1
+	mulx	$acc4, $t0, $acc4
+	 mov	$acc0, %rdx
+	adc	$t1, $acc2
+	 shlx	$poly1,$acc0,$t1
+	adc	$t0, $acc3
+	 shrx	$poly1,$acc0,$t0
+	adc	\$0, $acc4
+
+	########################################################################
+	# First reduction step
+	add	$t1, $acc1
+	adc	$t0, $acc2
+
+	mulx	$poly3, $t0, $t1
+	 mov	8*1($b_ptr), %rdx
+	adc	$t0, $acc3
+	adc	$t1, $acc4
+	adc	\$0, $acc5
+	xor	$acc0, $acc0		# $acc0=0,cf=0,of=0
+
+	########################################################################
+	# Multiply by b[1]
+	mulx	8*0+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc1
+	adox	$t1, $acc2
+
+	mulx	8*1+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc2
+	adox	$t1, $acc3
+
+	mulx	8*2+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc3
+	adox	$t1, $acc4
+
+	mulx	8*3+128($a_ptr), $t0, $t1
+	 mov	$acc1, %rdx
+	adcx	$t0, $acc4
+	 shlx	$poly1, $acc1, $t0
+	adox	$t1, $acc5
+	 shrx	$poly1, $acc1, $t1
+
+	adcx	$acc0, $acc5
+	adox	$acc0, $acc0
+	adc	\$0, $acc0
+
+	########################################################################
+	# Second reduction step
+	add	$t0, $acc2
+	adc	$t1, $acc3
+
+	mulx	$poly3, $t0, $t1
+	 mov	8*2($b_ptr), %rdx
+	adc	$t0, $acc4
+	adc	$t1, $acc5
+	adc	\$0, $acc0
+	xor	$acc1 ,$acc1		# $acc1=0,cf=0,of=0
+
+	########################################################################
+	# Multiply by b[2]
+	mulx	8*0+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc2
+	adox	$t1, $acc3
+
+	mulx	8*1+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc3
+	adox	$t1, $acc4
+
+	mulx	8*2+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc4
+	adox	$t1, $acc5
+
+	mulx	8*3+128($a_ptr), $t0, $t1
+	 mov	$acc2, %rdx
+	adcx	$t0, $acc5
+	 shlx	$poly1, $acc2, $t0
+	adox	$t1, $acc0
+	 shrx	$poly1, $acc2, $t1
+
+	adcx	$acc1, $acc0
+	adox	$acc1, $acc1
+	adc	\$0, $acc1
+
+	########################################################################
+	# Third reduction step
+	add	$t0, $acc3
+	adc	$t1, $acc4
+
+	mulx	$poly3, $t0, $t1
+	 mov	8*3($b_ptr), %rdx
+	adc	$t0, $acc5
+	adc	$t1, $acc0
+	adc	\$0, $acc1
+	xor	$acc2, $acc2		# $acc2=0,cf=0,of=0
+
+	########################################################################
+	# Multiply by b[3]
+	mulx	8*0+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc3
+	adox	$t1, $acc4
+
+	mulx	8*1+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc4
+	adox	$t1, $acc5
+
+	mulx	8*2+128($a_ptr), $t0, $t1
+	adcx	$t0, $acc5
+	adox	$t1, $acc0
+
+	mulx	8*3+128($a_ptr), $t0, $t1
+	 mov	$acc3, %rdx
+	adcx	$t0, $acc0
+	 shlx	$poly1, $acc3, $t0
+	adox	$t1, $acc1
+	 shrx	$poly1, $acc3, $t1
+
+	adcx	$acc2, $acc1
+	adox	$acc2, $acc2
+	adc	\$0, $acc2
+
+	########################################################################
+	# Fourth reduction step
+	add	$t0, $acc4
+	adc	$t1, $acc5
+
+	mulx	$poly3, $t0, $t1
+	 mov	$acc4, $t2
+	mov	.Lpoly+8*1(%rip), $poly1
+	adc	$t0, $acc0
+	 mov	$acc5, $t3
+	adc	$t1, $acc1
+	adc	\$0, $acc2
+
+	########################################################################
+	# Branch-less conditional subtraction of P
+	xor	%eax, %eax
+	 mov	$acc0, $t0
+	sbb	\$-1, $acc4		# .Lpoly[0]
+	sbb	$poly1, $acc5		# .Lpoly[1]
+	sbb	\$0, $acc0		# .Lpoly[2]
+	 mov	$acc1, $t1
+	sbb	$poly3, $acc1		# .Lpoly[3]
+	sbb	\$0, $acc2
+
+	cmovc	$t2, $acc4
+	cmovc	$t3, $acc5
+	mov	$acc4, 8*0($r_ptr)
+	cmovc	$t0, $acc0
+	mov	$acc5, 8*1($r_ptr)
+	cmovc	$t1, $acc1
+	mov	$acc0, 8*2($r_ptr)
+	mov	$acc1, 8*3($r_ptr)
+
+	ret
+.cfi_endproc
+.size	__ecp_nistz256_mul_montx,.-__ecp_nistz256_mul_montx
+
+.type	__ecp_nistz256_sqr_montx,\@abi-omnipotent
+.align	32
+__ecp_nistz256_sqr_montx:
+.cfi_startproc
+	mulx	$acc6, $acc1, $acc2	# a[0]*a[1]
+	mulx	$acc7, $t0, $acc3	# a[0]*a[2]
+	xor	%eax, %eax
+	adc	$t0, $acc2
+	mulx	$acc0, $t1, $acc4	# a[0]*a[3]
+	 mov	$acc6, %rdx
+	adc	$t1, $acc3
+	adc	\$0, $acc4
+	xor	$acc5, $acc5		# $acc5=0,cf=0,of=0
+
+	#################################
+	mulx	$acc7, $t0, $t1		# a[1]*a[2]
+	adcx	$t0, $acc3
+	adox	$t1, $acc4
+
+	mulx	$acc0, $t0, $t1		# a[1]*a[3]
+	 mov	$acc7, %rdx
+	adcx	$t0, $acc4
+	adox	$t1, $acc5
+	adc	\$0, $acc5
+
+	#################################
+	mulx	$acc0, $t0, $acc6	# a[2]*a[3]
+	 mov	8*0+128($a_ptr), %rdx
+	xor	$acc7, $acc7		# $acc7=0,cf=0,of=0
+	 adcx	$acc1, $acc1		# acc1:6<<1
+	adox	$t0, $acc5
+	 adcx	$acc2, $acc2
+	adox	$acc7, $acc6		# of=0
+
+	mulx	%rdx, $acc0, $t1
+	mov	8*1+128($a_ptr), %rdx
+	 adcx	$acc3, $acc3
+	adox	$t1, $acc1
+	 adcx	$acc4, $acc4
+	mulx	%rdx, $t0, $t4
+	mov	8*2+128($a_ptr), %rdx
+	 adcx	$acc5, $acc5
+	adox	$t0, $acc2
+	 adcx	$acc6, $acc6
+	.byte	0x67
+	mulx	%rdx, $t0, $t1
+	mov	8*3+128($a_ptr), %rdx
+	adox	$t4, $acc3
+	 adcx	$acc7, $acc7
+	adox	$t0, $acc4
+	 mov	\$32, $a_ptr
+	adox	$t1, $acc5
+	.byte	0x67,0x67
+	mulx	%rdx, $t0, $t4
+	 mov	.Lpoly+8*3(%rip), %rdx
+	adox	$t0, $acc6
+	 shlx	$a_ptr, $acc0, $t0
+	adox	$t4, $acc7
+	 shrx	$a_ptr, $acc0, $t4
+	mov	%rdx,$t1
+
+	# reduction step 1
+	add	$t0, $acc1
+	adc	$t4, $acc2
+
+	mulx	$acc0, $t0, $acc0
+	adc	$t0, $acc3
+	 shlx	$a_ptr, $acc1, $t0
+	adc	\$0, $acc0
+	 shrx	$a_ptr, $acc1, $t4
+
+	# reduction step 2
+	add	$t0, $acc2
+	adc	$t4, $acc3
+
+	mulx	$acc1, $t0, $acc1
+	adc	$t0, $acc0
+	 shlx	$a_ptr, $acc2, $t0
+	adc	\$0, $acc1
+	 shrx	$a_ptr, $acc2, $t4
+
+	# reduction step 3
+	add	$t0, $acc3
+	adc	$t4, $acc0
+
+	mulx	$acc2, $t0, $acc2
+	adc	$t0, $acc1
+	 shlx	$a_ptr, $acc3, $t0
+	adc	\$0, $acc2
+	 shrx	$a_ptr, $acc3, $t4
+
+	# reduction step 4
+	add	$t0, $acc0
+	adc	$t4, $acc1
+
+	mulx	$acc3, $t0, $acc3
+	adc	$t0, $acc2
+	adc	\$0, $acc3
+
+	xor	$t3, $t3
+	add	$acc0, $acc4		# accumulate upper half
+	 mov	.Lpoly+8*1(%rip), $a_ptr
+	adc	$acc1, $acc5
+	 mov	$acc4, $acc0
+	adc	$acc2, $acc6
+	adc	$acc3, $acc7
+	 mov	$acc5, $acc1
+	adc	\$0, $t3
+
+	sub	\$-1, $acc4		# .Lpoly[0]
+	 mov	$acc6, $acc2
+	sbb	$a_ptr, $acc5		# .Lpoly[1]
+	sbb	\$0, $acc6		# .Lpoly[2]
+	 mov	$acc7, $acc3
+	sbb	$t1, $acc7		# .Lpoly[3]
+	sbb	\$0, $t3
+
+	cmovc	$acc0, $acc4
+	cmovc	$acc1, $acc5
+	mov	$acc4, 8*0($r_ptr)
+	cmovc	$acc2, $acc6
+	mov	$acc5, 8*1($r_ptr)
+	cmovc	$acc3, $acc7
+	mov	$acc6, 8*2($r_ptr)
+	mov	$acc7, 8*3($r_ptr)
+
+	ret
+.cfi_endproc
+.size	__ecp_nistz256_sqr_montx,.-__ecp_nistz256_sqr_montx
+___
+}
+}
+{
+my ($r_ptr,$in_ptr)=("%rdi","%rsi");
+my ($acc0,$acc1,$acc2,$acc3)=map("%r$_",(8..11));
+my ($t0,$t1,$t2)=("%rcx","%r12","%r13");
+
+$code.=<<___;
+################################################################################
+# void ecp_nistz256_from_mont(
+#   uint64_t res[4],
+#   uint64_t in[4]);
+# This one performs Montgomery multiplication by 1, so we only need the reduction
+
+.globl	ecp_nistz256_from_mont
+.type	ecp_nistz256_from_mont,\@function,2
+.align	32
+ecp_nistz256_from_mont:
+.cfi_startproc
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+.Lfrom_body:
+
+	mov	8*0($in_ptr), %rax
+	mov	.Lpoly+8*3(%rip), $t2
+	mov	8*1($in_ptr), $acc1
+	mov	8*2($in_ptr), $acc2
+	mov	8*3($in_ptr), $acc3
+	mov	%rax, $acc0
+	mov	.Lpoly+8*1(%rip), $t1
+
+	#########################################
+	# First iteration
+	mov	%rax, $t0
+	shl	\$32, $acc0
+	mulq	$t2
+	shr	\$32, $t0
+	add	$acc0, $acc1
+	adc	$t0, $acc2
+	adc	%rax, $acc3
+	 mov	$acc1, %rax
+	adc	\$0, %rdx
+
+	#########################################
+	# Second iteration
+	mov	$acc1, $t0
+	shl	\$32, $acc1
+	mov	%rdx, $acc0
+	mulq	$t2
+	shr	\$32, $t0
+	add	$acc1, $acc2
+	adc	$t0, $acc3
+	adc	%rax, $acc0
+	 mov	$acc2, %rax
+	adc	\$0, %rdx
+
+	##########################################
+	# Third iteration
+	mov	$acc2, $t0
+	shl	\$32, $acc2
+	mov	%rdx, $acc1
+	mulq	$t2
+	shr	\$32, $t0
+	add	$acc2, $acc3
+	adc	$t0, $acc0
+	adc	%rax, $acc1
+	 mov	$acc3, %rax
+	adc	\$0, %rdx
+
+	###########################################
+	# Last iteration
+	mov	$acc3, $t0
+	shl	\$32, $acc3
+	mov	%rdx, $acc2
+	mulq	$t2
+	shr	\$32, $t0
+	add	$acc3, $acc0
+	adc	$t0, $acc1
+	 mov	$acc0, $t0
+	adc	%rax, $acc2
+	 mov	$acc1, $in_ptr
+	adc	\$0, %rdx
+
+	###########################################
+	# Branch-less conditional subtraction
+	sub	\$-1, $acc0
+	 mov	$acc2, %rax
+	sbb	$t1, $acc1
+	sbb	\$0, $acc2
+	 mov	%rdx, $acc3
+	sbb	$t2, %rdx
+	sbb	$t2, $t2
+
+	cmovnz	$t0, $acc0
+	cmovnz	$in_ptr, $acc1
+	mov	$acc0, 8*0($r_ptr)
+	cmovnz	%rax, $acc2
+	mov	$acc1, 8*1($r_ptr)
+	cmovz	%rdx, $acc3
+	mov	$acc2, 8*2($r_ptr)
+	mov	$acc3, 8*3($r_ptr)
+
+	mov	0(%rsp),%r13
+.cfi_restore	%r13
+	mov	8(%rsp),%r12
+.cfi_restore	%r12
+	lea	16(%rsp),%rsp
+.cfi_adjust_cfa_offset	-16
+.Lfrom_epilogue:
+	ret
+.cfi_endproc
+.size	ecp_nistz256_from_mont,.-ecp_nistz256_from_mont
+___
+}
+{
+my ($val,$in_t,$index)=$win64?("%rcx","%rdx","%r8d"):("%rdi","%rsi","%edx");
+my ($ONE,$INDEX,$Ra,$Rb,$Rc,$Rd,$Re,$Rf)=map("%xmm$_",(0..7));
+my ($M0,$T0a,$T0b,$T0c,$T0d,$T0e,$T0f,$TMP0)=map("%xmm$_",(8..15));
+my ($M1,$T2a,$T2b,$TMP2,$M2,$T2a,$T2b,$TMP2)=map("%xmm$_",(8..15));
+
+$code.=<<___;
+################################################################################
+# void ecp_nistz256_scatter_w5(uint64_t *val, uint64_t *in_t, int index);
+.globl	ecp_nistz256_scatter_w5
+.type	ecp_nistz256_scatter_w5,\@abi-omnipotent
+.align	32
+ecp_nistz256_scatter_w5:
+	lea	-3($index,$index,2), $index
+	movdqa	0x00($in_t), %xmm0
+	shl	\$5, $index
+	movdqa	0x10($in_t), %xmm1
+	movdqa	0x20($in_t), %xmm2
+	movdqa	0x30($in_t), %xmm3
+	movdqa	0x40($in_t), %xmm4
+	movdqa	0x50($in_t), %xmm5
+	movdqa	%xmm0, 0x00($val,$index)
+	movdqa	%xmm1, 0x10($val,$index)
+	movdqa	%xmm2, 0x20($val,$index)
+	movdqa	%xmm3, 0x30($val,$index)
+	movdqa	%xmm4, 0x40($val,$index)
+	movdqa	%xmm5, 0x50($val,$index)
+
+	ret
+.size	ecp_nistz256_scatter_w5,.-ecp_nistz256_scatter_w5
+
+################################################################################
+# void ecp_nistz256_gather_w5(uint64_t *val, uint64_t *in_t, int index);
+.globl	ecp_nistz256_gather_w5
+.type	ecp_nistz256_gather_w5,\@abi-omnipotent
+.align	32
+ecp_nistz256_gather_w5:
+.cfi_startproc
+___
+$code.=<<___	if ($avx>1);
+	mov	OPENSSL_ia32cap_P+8(%rip), %eax
+	test	\$`1<<5`, %eax
+	jnz	.Lavx2_gather_w5
+___
+$code.=<<___	if ($win64);
+	lea	-0x88(%rsp), %rax
+.LSEH_begin_ecp_nistz256_gather_w5:
+	.byte	0x48,0x8d,0x60,0xe0		#lea	-0x20(%rax), %rsp
+	.byte	0x0f,0x29,0x70,0xe0		#movaps	%xmm6, -0x20(%rax)
+	.byte	0x0f,0x29,0x78,0xf0		#movaps	%xmm7, -0x10(%rax)
+	.byte	0x44,0x0f,0x29,0x00		#movaps	%xmm8, 0(%rax)
+	.byte	0x44,0x0f,0x29,0x48,0x10	#movaps	%xmm9, 0x10(%rax)
+	.byte	0x44,0x0f,0x29,0x50,0x20	#movaps	%xmm10, 0x20(%rax)
+	.byte	0x44,0x0f,0x29,0x58,0x30	#movaps	%xmm11, 0x30(%rax)
+	.byte	0x44,0x0f,0x29,0x60,0x40	#movaps	%xmm12, 0x40(%rax)
+	.byte	0x44,0x0f,0x29,0x68,0x50	#movaps	%xmm13, 0x50(%rax)
+	.byte	0x44,0x0f,0x29,0x70,0x60	#movaps	%xmm14, 0x60(%rax)
+	.byte	0x44,0x0f,0x29,0x78,0x70	#movaps	%xmm15, 0x70(%rax)
+___
+$code.=<<___;
+	movdqa	.LOne(%rip), $ONE
+	movd	$index, $INDEX
+
+	pxor	$Ra, $Ra
+	pxor	$Rb, $Rb
+	pxor	$Rc, $Rc
+	pxor	$Rd, $Rd
+	pxor	$Re, $Re
+	pxor	$Rf, $Rf
+
+	movdqa	$ONE, $M0
+	pshufd	\$0, $INDEX, $INDEX
+
+	mov	\$16, %rax
+.Lselect_loop_sse_w5:
+
+	movdqa	$M0, $TMP0
+	paddd	$ONE, $M0
+	pcmpeqd $INDEX, $TMP0
+
+	movdqa	16*0($in_t), $T0a
+	movdqa	16*1($in_t), $T0b
+	movdqa	16*2($in_t), $T0c
+	movdqa	16*3($in_t), $T0d
+	movdqa	16*4($in_t), $T0e
+	movdqa	16*5($in_t), $T0f
+	lea 16*6($in_t), $in_t
+
+	pand	$TMP0, $T0a
+	pand	$TMP0, $T0b
+	por	$T0a, $Ra
+	pand	$TMP0, $T0c
+	por	$T0b, $Rb
+	pand	$TMP0, $T0d
+	por	$T0c, $Rc
+	pand	$TMP0, $T0e
+	por	$T0d, $Rd
+	pand	$TMP0, $T0f
+	por	$T0e, $Re
+	por	$T0f, $Rf
+
+	dec	%rax
+	jnz	.Lselect_loop_sse_w5
+
+	movdqu	$Ra, 16*0($val)
+	movdqu	$Rb, 16*1($val)
+	movdqu	$Rc, 16*2($val)
+	movdqu	$Rd, 16*3($val)
+	movdqu	$Re, 16*4($val)
+	movdqu	$Rf, 16*5($val)
+___
+$code.=<<___	if ($win64);
+	movaps	(%rsp), %xmm6
+	movaps	0x10(%rsp), %xmm7
+	movaps	0x20(%rsp), %xmm8
+	movaps	0x30(%rsp), %xmm9
+	movaps	0x40(%rsp), %xmm10
+	movaps	0x50(%rsp), %xmm11
+	movaps	0x60(%rsp), %xmm12
+	movaps	0x70(%rsp), %xmm13
+	movaps	0x80(%rsp), %xmm14
+	movaps	0x90(%rsp), %xmm15
+	lea	0xa8(%rsp), %rsp
+___
+$code.=<<___;
+	ret
+.cfi_endproc
+.LSEH_end_ecp_nistz256_gather_w5:
+.size	ecp_nistz256_gather_w5,.-ecp_nistz256_gather_w5
+
+################################################################################
+# void ecp_nistz256_scatter_w7(uint64_t *val, uint64_t *in_t, int index);
+.globl	ecp_nistz256_scatter_w7
+.type	ecp_nistz256_scatter_w7,\@abi-omnipotent
+.align	32
+ecp_nistz256_scatter_w7:
+	movdqu	0x00($in_t), %xmm0
+	shl	\$6, $index
+	movdqu	0x10($in_t), %xmm1
+	movdqu	0x20($in_t), %xmm2
+	movdqu	0x30($in_t), %xmm3
+	movdqa	%xmm0, 0x00($val,$index)
+	movdqa	%xmm1, 0x10($val,$index)
+	movdqa	%xmm2, 0x20($val,$index)
+	movdqa	%xmm3, 0x30($val,$index)
+
+	ret
+.size	ecp_nistz256_scatter_w7,.-ecp_nistz256_scatter_w7
+
+################################################################################
+# void ecp_nistz256_gather_w7(uint64_t *val, uint64_t *in_t, int index);
+.globl	ecp_nistz256_gather_w7
+.type	ecp_nistz256_gather_w7,\@abi-omnipotent
+.align	32
+ecp_nistz256_gather_w7:
+.cfi_startproc
+___
+$code.=<<___	if ($avx>1);
+	mov	OPENSSL_ia32cap_P+8(%rip), %eax
+	test	\$`1<<5`, %eax
+	jnz	.Lavx2_gather_w7
+___
+$code.=<<___	if ($win64);
+	lea	-0x88(%rsp), %rax
+.LSEH_begin_ecp_nistz256_gather_w7:
+	.byte	0x48,0x8d,0x60,0xe0		#lea	-0x20(%rax), %rsp
+	.byte	0x0f,0x29,0x70,0xe0		#movaps	%xmm6, -0x20(%rax)
+	.byte	0x0f,0x29,0x78,0xf0		#movaps	%xmm7, -0x10(%rax)
+	.byte	0x44,0x0f,0x29,0x00		#movaps	%xmm8, 0(%rax)
+	.byte	0x44,0x0f,0x29,0x48,0x10	#movaps	%xmm9, 0x10(%rax)
+	.byte	0x44,0x0f,0x29,0x50,0x20	#movaps	%xmm10, 0x20(%rax)
+	.byte	0x44,0x0f,0x29,0x58,0x30	#movaps	%xmm11, 0x30(%rax)
+	.byte	0x44,0x0f,0x29,0x60,0x40	#movaps	%xmm12, 0x40(%rax)
+	.byte	0x44,0x0f,0x29,0x68,0x50	#movaps	%xmm13, 0x50(%rax)
+	.byte	0x44,0x0f,0x29,0x70,0x60	#movaps	%xmm14, 0x60(%rax)
+	.byte	0x44,0x0f,0x29,0x78,0x70	#movaps	%xmm15, 0x70(%rax)
+___
+$code.=<<___;
+	movdqa	.LOne(%rip), $M0
+	movd	$index, $INDEX
+
+	pxor	$Ra, $Ra
+	pxor	$Rb, $Rb
+	pxor	$Rc, $Rc
+	pxor	$Rd, $Rd
+
+	movdqa	$M0, $ONE
+	pshufd	\$0, $INDEX, $INDEX
+	mov	\$64, %rax
+
+.Lselect_loop_sse_w7:
+	movdqa	$M0, $TMP0
+	paddd	$ONE, $M0
+	movdqa	16*0($in_t), $T0a
+	movdqa	16*1($in_t), $T0b
+	pcmpeqd	$INDEX, $TMP0
+	movdqa	16*2($in_t), $T0c
+	movdqa	16*3($in_t), $T0d
+	lea	16*4($in_t), $in_t
+
+	pand	$TMP0, $T0a
+	pand	$TMP0, $T0b
+	por	$T0a, $Ra
+	pand	$TMP0, $T0c
+	por	$T0b, $Rb
+	pand	$TMP0, $T0d
+	por	$T0c, $Rc
+	prefetcht0	255($in_t)
+	por	$T0d, $Rd
+
+	dec	%rax
+	jnz	.Lselect_loop_sse_w7
+
+	movdqu	$Ra, 16*0($val)
+	movdqu	$Rb, 16*1($val)
+	movdqu	$Rc, 16*2($val)
+	movdqu	$Rd, 16*3($val)
+___
+$code.=<<___	if ($win64);
+	movaps	(%rsp), %xmm6
+	movaps	0x10(%rsp), %xmm7
+	movaps	0x20(%rsp), %xmm8
+	movaps	0x30(%rsp), %xmm9
+	movaps	0x40(%rsp), %xmm10
+	movaps	0x50(%rsp), %xmm11
+	movaps	0x60(%rsp), %xmm12
+	movaps	0x70(%rsp), %xmm13
+	movaps	0x80(%rsp), %xmm14
+	movaps	0x90(%rsp), %xmm15
+	lea	0xa8(%rsp), %rsp
+___
+$code.=<<___;
+	ret
+.cfi_endproc
+.LSEH_end_ecp_nistz256_gather_w7:
+.size	ecp_nistz256_gather_w7,.-ecp_nistz256_gather_w7
+___
+}
+if ($avx>1) {
+my ($val,$in_t,$index)=$win64?("%rcx","%rdx","%r8d"):("%rdi","%rsi","%edx");
+my ($TWO,$INDEX,$Ra,$Rb,$Rc)=map("%ymm$_",(0..4));
+my ($M0,$T0a,$T0b,$T0c,$TMP0)=map("%ymm$_",(5..9));
+my ($M1,$T1a,$T1b,$T1c,$TMP1)=map("%ymm$_",(10..14));
+
+$code.=<<___;
+################################################################################
+# void ecp_nistz256_avx2_gather_w5(uint64_t *val, uint64_t *in_t, int index);
+.type	ecp_nistz256_avx2_gather_w5,\@abi-omnipotent
+.align	32
+ecp_nistz256_avx2_gather_w5:
+.cfi_startproc
+.Lavx2_gather_w5:
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	lea	-0x88(%rsp), %rax
+	mov	%rsp,%r11
+.LSEH_begin_ecp_nistz256_avx2_gather_w5:
+	.byte	0x48,0x8d,0x60,0xe0		# lea	-0x20(%rax), %rsp
+	.byte	0xc5,0xf8,0x29,0x70,0xe0	# vmovaps %xmm6, -0x20(%rax)
+	.byte	0xc5,0xf8,0x29,0x78,0xf0	# vmovaps %xmm7, -0x10(%rax)
+	.byte	0xc5,0x78,0x29,0x40,0x00	# vmovaps %xmm8, 8(%rax)
+	.byte	0xc5,0x78,0x29,0x48,0x10	# vmovaps %xmm9, 0x10(%rax)
+	.byte	0xc5,0x78,0x29,0x50,0x20	# vmovaps %xmm10, 0x20(%rax)
+	.byte	0xc5,0x78,0x29,0x58,0x30	# vmovaps %xmm11, 0x30(%rax)
+	.byte	0xc5,0x78,0x29,0x60,0x40	# vmovaps %xmm12, 0x40(%rax)
+	.byte	0xc5,0x78,0x29,0x68,0x50	# vmovaps %xmm13, 0x50(%rax)
+	.byte	0xc5,0x78,0x29,0x70,0x60	# vmovaps %xmm14, 0x60(%rax)
+	.byte	0xc5,0x78,0x29,0x78,0x70	# vmovaps %xmm15, 0x70(%rax)
+___
+$code.=<<___;
+	vmovdqa	.LTwo(%rip), $TWO
+
+	vpxor	$Ra, $Ra, $Ra
+	vpxor	$Rb, $Rb, $Rb
+	vpxor	$Rc, $Rc, $Rc
+
+	vmovdqa .LOne(%rip), $M0
+	vmovdqa .LTwo(%rip), $M1
+
+	vmovd	$index, %xmm1
+	vpermd	$INDEX, $Ra, $INDEX
+
+	mov	\$8, %rax
+.Lselect_loop_avx2_w5:
+
+	vmovdqa	32*0($in_t), $T0a
+	vmovdqa	32*1($in_t), $T0b
+	vmovdqa	32*2($in_t), $T0c
+
+	vmovdqa	32*3($in_t), $T1a
+	vmovdqa	32*4($in_t), $T1b
+	vmovdqa	32*5($in_t), $T1c
+
+	vpcmpeqd	$INDEX, $M0, $TMP0
+	vpcmpeqd	$INDEX, $M1, $TMP1
+
+	vpaddd	$TWO, $M0, $M0
+	vpaddd	$TWO, $M1, $M1
+	lea	32*6($in_t), $in_t
+
+	vpand	$TMP0, $T0a, $T0a
+	vpand	$TMP0, $T0b, $T0b
+	vpand	$TMP0, $T0c, $T0c
+	vpand	$TMP1, $T1a, $T1a
+	vpand	$TMP1, $T1b, $T1b
+	vpand	$TMP1, $T1c, $T1c
+
+	vpxor	$T0a, $Ra, $Ra
+	vpxor	$T0b, $Rb, $Rb
+	vpxor	$T0c, $Rc, $Rc
+	vpxor	$T1a, $Ra, $Ra
+	vpxor	$T1b, $Rb, $Rb
+	vpxor	$T1c, $Rc, $Rc
+
+	dec %rax
+	jnz .Lselect_loop_avx2_w5
+
+	vmovdqu $Ra, 32*0($val)
+	vmovdqu $Rb, 32*1($val)
+	vmovdqu $Rc, 32*2($val)
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	movaps	(%rsp), %xmm6
+	movaps	0x10(%rsp), %xmm7
+	movaps	0x20(%rsp), %xmm8
+	movaps	0x30(%rsp), %xmm9
+	movaps	0x40(%rsp), %xmm10
+	movaps	0x50(%rsp), %xmm11
+	movaps	0x60(%rsp), %xmm12
+	movaps	0x70(%rsp), %xmm13
+	movaps	0x80(%rsp), %xmm14
+	movaps	0x90(%rsp), %xmm15
+	lea	(%r11), %rsp
+___
+$code.=<<___;
+	ret
+.cfi_endproc
+.LSEH_end_ecp_nistz256_avx2_gather_w5:
+.size	ecp_nistz256_avx2_gather_w5,.-ecp_nistz256_avx2_gather_w5
+___
+}
+if ($avx>1) {
+my ($val,$in_t,$index)=$win64?("%rcx","%rdx","%r8d"):("%rdi","%rsi","%edx");
+my ($THREE,$INDEX,$Ra,$Rb)=map("%ymm$_",(0..3));
+my ($M0,$T0a,$T0b,$TMP0)=map("%ymm$_",(4..7));
+my ($M1,$T1a,$T1b,$TMP1)=map("%ymm$_",(8..11));
+my ($M2,$T2a,$T2b,$TMP2)=map("%ymm$_",(12..15));
+
+$code.=<<___;
+
+################################################################################
+# void ecp_nistz256_avx2_gather_w7(uint64_t *val, uint64_t *in_t, int index);
+.globl	ecp_nistz256_avx2_gather_w7
+.type	ecp_nistz256_avx2_gather_w7,\@abi-omnipotent
+.align	32
+ecp_nistz256_avx2_gather_w7:
+.cfi_startproc
+.Lavx2_gather_w7:
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	mov	%rsp,%r11
+	lea	-0x88(%rsp), %rax
+.LSEH_begin_ecp_nistz256_avx2_gather_w7:
+	.byte	0x48,0x8d,0x60,0xe0		# lea	-0x20(%rax), %rsp
+	.byte	0xc5,0xf8,0x29,0x70,0xe0	# vmovaps %xmm6, -0x20(%rax)
+	.byte	0xc5,0xf8,0x29,0x78,0xf0	# vmovaps %xmm7, -0x10(%rax)
+	.byte	0xc5,0x78,0x29,0x40,0x00	# vmovaps %xmm8, 8(%rax)
+	.byte	0xc5,0x78,0x29,0x48,0x10	# vmovaps %xmm9, 0x10(%rax)
+	.byte	0xc5,0x78,0x29,0x50,0x20	# vmovaps %xmm10, 0x20(%rax)
+	.byte	0xc5,0x78,0x29,0x58,0x30	# vmovaps %xmm11, 0x30(%rax)
+	.byte	0xc5,0x78,0x29,0x60,0x40	# vmovaps %xmm12, 0x40(%rax)
+	.byte	0xc5,0x78,0x29,0x68,0x50	# vmovaps %xmm13, 0x50(%rax)
+	.byte	0xc5,0x78,0x29,0x70,0x60	# vmovaps %xmm14, 0x60(%rax)
+	.byte	0xc5,0x78,0x29,0x78,0x70	# vmovaps %xmm15, 0x70(%rax)
+___
+$code.=<<___;
+	vmovdqa	.LThree(%rip), $THREE
+
+	vpxor	$Ra, $Ra, $Ra
+	vpxor	$Rb, $Rb, $Rb
+
+	vmovdqa .LOne(%rip), $M0
+	vmovdqa .LTwo(%rip), $M1
+	vmovdqa .LThree(%rip), $M2
+
+	vmovd	$index, %xmm1
+	vpermd	$INDEX, $Ra, $INDEX
+	# Skip index = 0, because it is implicitly the point at infinity
+
+	mov	\$21, %rax
+.Lselect_loop_avx2_w7:
+
+	vmovdqa	32*0($in_t), $T0a
+	vmovdqa	32*1($in_t), $T0b
+
+	vmovdqa	32*2($in_t), $T1a
+	vmovdqa	32*3($in_t), $T1b
+
+	vmovdqa	32*4($in_t), $T2a
+	vmovdqa	32*5($in_t), $T2b
+
+	vpcmpeqd	$INDEX, $M0, $TMP0
+	vpcmpeqd	$INDEX, $M1, $TMP1
+	vpcmpeqd	$INDEX, $M2, $TMP2
+
+	vpaddd	$THREE, $M0, $M0
+	vpaddd	$THREE, $M1, $M1
+	vpaddd	$THREE, $M2, $M2
+	lea	32*6($in_t), $in_t
+
+	vpand	$TMP0, $T0a, $T0a
+	vpand	$TMP0, $T0b, $T0b
+	vpand	$TMP1, $T1a, $T1a
+	vpand	$TMP1, $T1b, $T1b
+	vpand	$TMP2, $T2a, $T2a
+	vpand	$TMP2, $T2b, $T2b
+
+	vpxor	$T0a, $Ra, $Ra
+	vpxor	$T0b, $Rb, $Rb
+	vpxor	$T1a, $Ra, $Ra
+	vpxor	$T1b, $Rb, $Rb
+	vpxor	$T2a, $Ra, $Ra
+	vpxor	$T2b, $Rb, $Rb
+
+	dec %rax
+	jnz .Lselect_loop_avx2_w7
+
+
+	vmovdqa	32*0($in_t), $T0a
+	vmovdqa	32*1($in_t), $T0b
+
+	vpcmpeqd	$INDEX, $M0, $TMP0
+
+	vpand	$TMP0, $T0a, $T0a
+	vpand	$TMP0, $T0b, $T0b
+
+	vpxor	$T0a, $Ra, $Ra
+	vpxor	$T0b, $Rb, $Rb
+
+	vmovdqu $Ra, 32*0($val)
+	vmovdqu $Rb, 32*1($val)
+	vzeroupper
+___
+$code.=<<___	if ($win64);
+	movaps	(%rsp), %xmm6
+	movaps	0x10(%rsp), %xmm7
+	movaps	0x20(%rsp), %xmm8
+	movaps	0x30(%rsp), %xmm9
+	movaps	0x40(%rsp), %xmm10
+	movaps	0x50(%rsp), %xmm11
+	movaps	0x60(%rsp), %xmm12
+	movaps	0x70(%rsp), %xmm13
+	movaps	0x80(%rsp), %xmm14
+	movaps	0x90(%rsp), %xmm15
+	lea	(%r11), %rsp
+___
+$code.=<<___;
+	ret
+.cfi_endproc
+.LSEH_end_ecp_nistz256_avx2_gather_w7:
+.size	ecp_nistz256_avx2_gather_w7,.-ecp_nistz256_avx2_gather_w7
+___
+} else {
+$code.=<<___;
+.globl	ecp_nistz256_avx2_gather_w7
+.type	ecp_nistz256_avx2_gather_w7,\@function,3
+.align	32
+ecp_nistz256_avx2_gather_w7:
+	.byte	0x0f,0x0b	# ud2
+	ret
+.size	ecp_nistz256_avx2_gather_w7,.-ecp_nistz256_avx2_gather_w7
+___
+}
+{{{
+########################################################################
+# This block implements higher level point_double, point_add and
+# point_add_affine. The key to performance in this case is to allow
+# out-of-order execution logic to overlap computations from next step
+# with tail processing from current step. By using tailored calling
+# sequence we minimize inter-step overhead to give processor better
+# shot at overlapping operations...
+#
+# You will notice that input data is copied to stack. Trouble is that
+# there are no registers to spare for holding original pointers and
+# reloading them, pointers, would create undesired dependencies on
+# effective addresses calculation paths. In other words it's too done
+# to favour out-of-order execution logic.
+#						<appro@openssl.org>
+
+my ($r_ptr,$a_ptr,$b_org,$b_ptr)=("%rdi","%rsi","%rdx","%rbx");
+my ($acc0,$acc1,$acc2,$acc3,$acc4,$acc5,$acc6,$acc7)=map("%r$_",(8..15));
+my ($t0,$t1,$t2,$t3,$t4)=("%rax","%rbp","%rcx",$acc4,$acc4);
+my ($poly1,$poly3)=($acc6,$acc7);
+
+sub load_for_mul () {
+my ($a,$b,$src0) = @_;
+my $bias = $src0 eq "%rax" ? 0 : -128;
+
+"	mov	$b, $src0
+	lea	$b, $b_ptr
+	mov	8*0+$a, $acc1
+	mov	8*1+$a, $acc2
+	lea	$bias+$a, $a_ptr
+	mov	8*2+$a, $acc3
+	mov	8*3+$a, $acc4"
+}
+
+sub load_for_sqr () {
+my ($a,$src0) = @_;
+my $bias = $src0 eq "%rax" ? 0 : -128;
+
+"	mov	8*0+$a, $src0
+	mov	8*1+$a, $acc6
+	lea	$bias+$a, $a_ptr
+	mov	8*2+$a, $acc7
+	mov	8*3+$a, $acc0"
+}
+
+									{
+########################################################################
+# operate in 4-5-0-1 "name space" that matches multiplication output
+#
+my ($a0,$a1,$a2,$a3,$t3,$t4)=($acc4,$acc5,$acc0,$acc1,$acc2,$acc3);
+
+$code.=<<___;
+.type	__ecp_nistz256_add_toq,\@abi-omnipotent
+.align	32
+__ecp_nistz256_add_toq:
+.cfi_startproc
+	xor	$t4,$t4
+	add	8*0($b_ptr), $a0
+	adc	8*1($b_ptr), $a1
+	 mov	$a0, $t0
+	adc	8*2($b_ptr), $a2
+	adc	8*3($b_ptr), $a3
+	 mov	$a1, $t1
+	adc	\$0, $t4
+
+	sub	\$-1, $a0
+	 mov	$a2, $t2
+	sbb	$poly1, $a1
+	sbb	\$0, $a2
+	 mov	$a3, $t3
+	sbb	$poly3, $a3
+	sbb	\$0, $t4
+
+	cmovc	$t0, $a0
+	cmovc	$t1, $a1
+	mov	$a0, 8*0($r_ptr)
+	cmovc	$t2, $a2
+	mov	$a1, 8*1($r_ptr)
+	cmovc	$t3, $a3
+	mov	$a2, 8*2($r_ptr)
+	mov	$a3, 8*3($r_ptr)
+
+	ret
+.cfi_endproc
+.size	__ecp_nistz256_add_toq,.-__ecp_nistz256_add_toq
+
+.type	__ecp_nistz256_sub_fromq,\@abi-omnipotent
+.align	32
+__ecp_nistz256_sub_fromq:
+.cfi_startproc
+	sub	8*0($b_ptr), $a0
+	sbb	8*1($b_ptr), $a1
+	 mov	$a0, $t0
+	sbb	8*2($b_ptr), $a2
+	sbb	8*3($b_ptr), $a3
+	 mov	$a1, $t1
+	sbb	$t4, $t4
+
+	add	\$-1, $a0
+	 mov	$a2, $t2
+	adc	$poly1, $a1
+	adc	\$0, $a2
+	 mov	$a3, $t3
+	adc	$poly3, $a3
+	test	$t4, $t4
+
+	cmovz	$t0, $a0
+	cmovz	$t1, $a1
+	mov	$a0, 8*0($r_ptr)
+	cmovz	$t2, $a2
+	mov	$a1, 8*1($r_ptr)
+	cmovz	$t3, $a3
+	mov	$a2, 8*2($r_ptr)
+	mov	$a3, 8*3($r_ptr)
+
+	ret
+.cfi_endproc
+.size	__ecp_nistz256_sub_fromq,.-__ecp_nistz256_sub_fromq
+
+.type	__ecp_nistz256_subq,\@abi-omnipotent
+.align	32
+__ecp_nistz256_subq:
+.cfi_startproc
+	sub	$a0, $t0
+	sbb	$a1, $t1
+	 mov	$t0, $a0
+	sbb	$a2, $t2
+	sbb	$a3, $t3
+	 mov	$t1, $a1
+	sbb	$t4, $t4
+
+	add	\$-1, $t0
+	 mov	$t2, $a2
+	adc	$poly1, $t1
+	adc	\$0, $t2
+	 mov	$t3, $a3
+	adc	$poly3, $t3
+	test	$t4, $t4
+
+	cmovnz	$t0, $a0
+	cmovnz	$t1, $a1
+	cmovnz	$t2, $a2
+	cmovnz	$t3, $a3
+
+	ret
+.cfi_endproc
+.size	__ecp_nistz256_subq,.-__ecp_nistz256_subq
+
+.type	__ecp_nistz256_mul_by_2q,\@abi-omnipotent
+.align	32
+__ecp_nistz256_mul_by_2q:
+.cfi_startproc
+	xor	$t4, $t4
+	add	$a0, $a0		# a0:a3+a0:a3
+	adc	$a1, $a1
+	 mov	$a0, $t0
+	adc	$a2, $a2
+	adc	$a3, $a3
+	 mov	$a1, $t1
+	adc	\$0, $t4
+
+	sub	\$-1, $a0
+	 mov	$a2, $t2
+	sbb	$poly1, $a1
+	sbb	\$0, $a2
+	 mov	$a3, $t3
+	sbb	$poly3, $a3
+	sbb	\$0, $t4
+
+	cmovc	$t0, $a0
+	cmovc	$t1, $a1
+	mov	$a0, 8*0($r_ptr)
+	cmovc	$t2, $a2
+	mov	$a1, 8*1($r_ptr)
+	cmovc	$t3, $a3
+	mov	$a2, 8*2($r_ptr)
+	mov	$a3, 8*3($r_ptr)
+
+	ret
+.cfi_endproc
+.size	__ecp_nistz256_mul_by_2q,.-__ecp_nistz256_mul_by_2q
+___
+									}
+sub gen_double () {
+    my $x = shift;
+    my ($src0,$sfx,$bias);
+    my ($S,$M,$Zsqr,$in_x,$tmp0)=map(32*$_,(0..4));
+
+    if ($x ne "x") {
+	$src0 = "%rax";
+	$sfx  = "";
+	$bias = 0;
+
+$code.=<<___;
+.globl	ecp_nistz256_point_double
+.type	ecp_nistz256_point_double,\@function,2
+.align	32
+ecp_nistz256_point_double:
+.cfi_startproc
+___
+$code.=<<___	if ($addx);
+	mov	\$0x80100, %ecx
+	and	OPENSSL_ia32cap_P+8(%rip), %ecx
+	cmp	\$0x80100, %ecx
+	je	.Lpoint_doublex
+___
+    } else {
+	$src0 = "%rdx";
+	$sfx  = "x";
+	$bias = 128;
+
+$code.=<<___;
+.type	ecp_nistz256_point_doublex,\@function,2
+.align	32
+ecp_nistz256_point_doublex:
+.cfi_startproc
+.Lpoint_doublex:
+___
+    }
+$code.=<<___;
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	sub	\$32*5+8, %rsp
+.cfi_adjust_cfa_offset	32*5+8
+.Lpoint_double${x}_body:
+
+.Lpoint_double_shortcut$x:
+	movdqu	0x00($a_ptr), %xmm0		# copy	*(P256_POINT *)$a_ptr.x
+	mov	$a_ptr, $b_ptr			# backup copy
+	movdqu	0x10($a_ptr), %xmm1
+	 mov	0x20+8*0($a_ptr), $acc4		# load in_y in "5-4-0-1" order
+	 mov	0x20+8*1($a_ptr), $acc5
+	 mov	0x20+8*2($a_ptr), $acc0
+	 mov	0x20+8*3($a_ptr), $acc1
+	 mov	.Lpoly+8*1(%rip), $poly1
+	 mov	.Lpoly+8*3(%rip), $poly3
+	movdqa	%xmm0, $in_x(%rsp)
+	movdqa	%xmm1, $in_x+0x10(%rsp)
+	lea	0x20($r_ptr), $acc2
+	lea	0x40($r_ptr), $acc3
+	movq	$r_ptr, %xmm0
+	movq	$acc2, %xmm1
+	movq	$acc3, %xmm2
+
+	lea	$S(%rsp), $r_ptr
+	call	__ecp_nistz256_mul_by_2$x	# p256_mul_by_2(S, in_y);
+
+	mov	0x40+8*0($a_ptr), $src0
+	mov	0x40+8*1($a_ptr), $acc6
+	mov	0x40+8*2($a_ptr), $acc7
+	mov	0x40+8*3($a_ptr), $acc0
+	lea	0x40-$bias($a_ptr), $a_ptr
+	lea	$Zsqr(%rsp), $r_ptr
+	call	__ecp_nistz256_sqr_mont$x	# p256_sqr_mont(Zsqr, in_z);
+
+	`&load_for_sqr("$S(%rsp)", "$src0")`
+	lea	$S(%rsp), $r_ptr
+	call	__ecp_nistz256_sqr_mont$x	# p256_sqr_mont(S, S);
+
+	mov	0x20($b_ptr), $src0		# $b_ptr is still valid
+	mov	0x40+8*0($b_ptr), $acc1
+	mov	0x40+8*1($b_ptr), $acc2
+	mov	0x40+8*2($b_ptr), $acc3
+	mov	0x40+8*3($b_ptr), $acc4
+	lea	0x40-$bias($b_ptr), $a_ptr
+	lea	0x20($b_ptr), $b_ptr
+	movq	%xmm2, $r_ptr
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(res_z, in_z, in_y);
+	call	__ecp_nistz256_mul_by_2$x	# p256_mul_by_2(res_z, res_z);
+
+	mov	$in_x+8*0(%rsp), $acc4		# "5-4-0-1" order
+	mov	$in_x+8*1(%rsp), $acc5
+	lea	$Zsqr(%rsp), $b_ptr
+	mov	$in_x+8*2(%rsp), $acc0
+	mov	$in_x+8*3(%rsp), $acc1
+	lea	$M(%rsp), $r_ptr
+	call	__ecp_nistz256_add_to$x		# p256_add(M, in_x, Zsqr);
+
+	mov	$in_x+8*0(%rsp), $acc4		# "5-4-0-1" order
+	mov	$in_x+8*1(%rsp), $acc5
+	lea	$Zsqr(%rsp), $b_ptr
+	mov	$in_x+8*2(%rsp), $acc0
+	mov	$in_x+8*3(%rsp), $acc1
+	lea	$Zsqr(%rsp), $r_ptr
+	call	__ecp_nistz256_sub_from$x	# p256_sub(Zsqr, in_x, Zsqr);
+
+	`&load_for_sqr("$S(%rsp)", "$src0")`
+	movq	%xmm1, $r_ptr
+	call	__ecp_nistz256_sqr_mont$x	# p256_sqr_mont(res_y, S);
+___
+{
+######## ecp_nistz256_div_by_2(res_y, res_y); ##########################
+# operate in 4-5-6-7 "name space" that matches squaring output
+#
+my ($poly1,$poly3)=($a_ptr,$t1);
+my ($a0,$a1,$a2,$a3,$t3,$t4,$t1)=($acc4,$acc5,$acc6,$acc7,$acc0,$acc1,$acc2);
+
+$code.=<<___;
+	xor	$t4, $t4
+	mov	$a0, $t0
+	add	\$-1, $a0
+	mov	$a1, $t1
+	adc	$poly1, $a1
+	mov	$a2, $t2
+	adc	\$0, $a2
+	mov	$a3, $t3
+	adc	$poly3, $a3
+	adc	\$0, $t4
+	xor	$a_ptr, $a_ptr		# borrow $a_ptr
+	test	\$1, $t0
+
+	cmovz	$t0, $a0
+	cmovz	$t1, $a1
+	cmovz	$t2, $a2
+	cmovz	$t3, $a3
+	cmovz	$a_ptr, $t4
+
+	mov	$a1, $t0		# a0:a3>>1
+	shr	\$1, $a0
+	shl	\$63, $t0
+	mov	$a2, $t1
+	shr	\$1, $a1
+	or	$t0, $a0
+	shl	\$63, $t1
+	mov	$a3, $t2
+	shr	\$1, $a2
+	or	$t1, $a1
+	shl	\$63, $t2
+	mov	$a0, 8*0($r_ptr)
+	shr	\$1, $a3
+	mov	$a1, 8*1($r_ptr)
+	shl	\$63, $t4
+	or	$t2, $a2
+	or	$t4, $a3
+	mov	$a2, 8*2($r_ptr)
+	mov	$a3, 8*3($r_ptr)
+___
+}
+$code.=<<___;
+	`&load_for_mul("$M(%rsp)", "$Zsqr(%rsp)", "$src0")`
+	lea	$M(%rsp), $r_ptr
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(M, M, Zsqr);
+
+	lea	$tmp0(%rsp), $r_ptr
+	call	__ecp_nistz256_mul_by_2$x
+
+	lea	$M(%rsp), $b_ptr
+	lea	$M(%rsp), $r_ptr
+	call	__ecp_nistz256_add_to$x		# p256_mul_by_3(M, M);
+
+	`&load_for_mul("$S(%rsp)", "$in_x(%rsp)", "$src0")`
+	lea	$S(%rsp), $r_ptr
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(S, S, in_x);
+
+	lea	$tmp0(%rsp), $r_ptr
+	call	__ecp_nistz256_mul_by_2$x	# p256_mul_by_2(tmp0, S);
+
+	`&load_for_sqr("$M(%rsp)", "$src0")`
+	movq	%xmm0, $r_ptr
+	call	__ecp_nistz256_sqr_mont$x	# p256_sqr_mont(res_x, M);
+
+	lea	$tmp0(%rsp), $b_ptr
+	mov	$acc6, $acc0			# harmonize sqr output and sub input
+	mov	$acc7, $acc1
+	mov	$a_ptr, $poly1
+	mov	$t1, $poly3
+	call	__ecp_nistz256_sub_from$x	# p256_sub(res_x, res_x, tmp0);
+
+	mov	$S+8*0(%rsp), $t0
+	mov	$S+8*1(%rsp), $t1
+	mov	$S+8*2(%rsp), $t2
+	mov	$S+8*3(%rsp), $acc2		# "4-5-0-1" order
+	lea	$S(%rsp), $r_ptr
+	call	__ecp_nistz256_sub$x		# p256_sub(S, S, res_x);
+
+	mov	$M(%rsp), $src0
+	lea	$M(%rsp), $b_ptr
+	mov	$acc4, $acc6			# harmonize sub output and mul input
+	xor	%ecx, %ecx
+	mov	$acc4, $S+8*0(%rsp)		# have to save:-(
+	mov	$acc5, $acc2
+	mov	$acc5, $S+8*1(%rsp)
+	cmovz	$acc0, $acc3
+	mov	$acc0, $S+8*2(%rsp)
+	lea	$S-$bias(%rsp), $a_ptr
+	cmovz	$acc1, $acc4
+	mov	$acc1, $S+8*3(%rsp)
+	mov	$acc6, $acc1
+	lea	$S(%rsp), $r_ptr
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(S, S, M);
+
+	movq	%xmm1, $b_ptr
+	movq	%xmm1, $r_ptr
+	call	__ecp_nistz256_sub_from$x	# p256_sub(res_y, S, res_y);
+
+	lea	32*5+56(%rsp), %rsi
+.cfi_def_cfa	%rsi,8
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbx
+.cfi_restore	%rbx
+	mov	-8(%rsi),%rbp
+.cfi_restore	%rbp
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lpoint_double${x}_epilogue:
+	ret
+.cfi_endproc
+.size	ecp_nistz256_point_double$sfx,.-ecp_nistz256_point_double$sfx
+___
+}
+&gen_double("q");
+
+sub gen_add () {
+    my $x = shift;
+    my ($src0,$sfx,$bias);
+    my ($H,$Hsqr,$R,$Rsqr,$Hcub,
+	$U1,$U2,$S1,$S2,
+	$res_x,$res_y,$res_z,
+	$in1_x,$in1_y,$in1_z,
+	$in2_x,$in2_y,$in2_z)=map(32*$_,(0..17));
+    my ($Z1sqr, $Z2sqr) = ($Hsqr, $Rsqr);
+
+    if ($x ne "x") {
+	$src0 = "%rax";
+	$sfx  = "";
+	$bias = 0;
+
+$code.=<<___;
+.globl	ecp_nistz256_point_add
+.type	ecp_nistz256_point_add,\@function,3
+.align	32
+ecp_nistz256_point_add:
+.cfi_startproc
+___
+$code.=<<___	if ($addx);
+	mov	\$0x80100, %ecx
+	and	OPENSSL_ia32cap_P+8(%rip), %ecx
+	cmp	\$0x80100, %ecx
+	je	.Lpoint_addx
+___
+    } else {
+	$src0 = "%rdx";
+	$sfx  = "x";
+	$bias = 128;
+
+$code.=<<___;
+.type	ecp_nistz256_point_addx,\@function,3
+.align	32
+ecp_nistz256_point_addx:
+.cfi_startproc
+.Lpoint_addx:
+___
+    }
+$code.=<<___;
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	sub	\$32*18+8, %rsp
+.cfi_adjust_cfa_offset	32*18+8
+.Lpoint_add${x}_body:
+
+	movdqu	0x00($a_ptr), %xmm0		# copy	*(P256_POINT *)$a_ptr
+	movdqu	0x10($a_ptr), %xmm1
+	movdqu	0x20($a_ptr), %xmm2
+	movdqu	0x30($a_ptr), %xmm3
+	movdqu	0x40($a_ptr), %xmm4
+	movdqu	0x50($a_ptr), %xmm5
+	mov	$a_ptr, $b_ptr			# reassign
+	mov	$b_org, $a_ptr			# reassign
+	movdqa	%xmm0, $in1_x(%rsp)
+	movdqa	%xmm1, $in1_x+0x10(%rsp)
+	movdqa	%xmm2, $in1_y(%rsp)
+	movdqa	%xmm3, $in1_y+0x10(%rsp)
+	movdqa	%xmm4, $in1_z(%rsp)
+	movdqa	%xmm5, $in1_z+0x10(%rsp)
+	por	%xmm4, %xmm5
+
+	movdqu	0x00($a_ptr), %xmm0		# copy	*(P256_POINT *)$b_ptr
+	 pshufd	\$0xb1, %xmm5, %xmm3
+	movdqu	0x10($a_ptr), %xmm1
+	movdqu	0x20($a_ptr), %xmm2
+	 por	%xmm3, %xmm5
+	movdqu	0x30($a_ptr), %xmm3
+	 mov	0x40+8*0($a_ptr), $src0		# load original in2_z
+	 mov	0x40+8*1($a_ptr), $acc6
+	 mov	0x40+8*2($a_ptr), $acc7
+	 mov	0x40+8*3($a_ptr), $acc0
+	movdqa	%xmm0, $in2_x(%rsp)
+	 pshufd	\$0x1e, %xmm5, %xmm4
+	movdqa	%xmm1, $in2_x+0x10(%rsp)
+	movdqu	0x40($a_ptr),%xmm0		# in2_z again
+	movdqu	0x50($a_ptr),%xmm1
+	movdqa	%xmm2, $in2_y(%rsp)
+	movdqa	%xmm3, $in2_y+0x10(%rsp)
+	 por	%xmm4, %xmm5
+	 pxor	%xmm4, %xmm4
+	por	%xmm0, %xmm1
+	 movq	$r_ptr, %xmm0			# save $r_ptr
+
+	lea	0x40-$bias($a_ptr), $a_ptr	# $a_ptr is still valid
+	 mov	$src0, $in2_z+8*0(%rsp)		# make in2_z copy
+	 mov	$acc6, $in2_z+8*1(%rsp)
+	 mov	$acc7, $in2_z+8*2(%rsp)
+	 mov	$acc0, $in2_z+8*3(%rsp)
+	lea	$Z2sqr(%rsp), $r_ptr		# Z2^2
+	call	__ecp_nistz256_sqr_mont$x	# p256_sqr_mont(Z2sqr, in2_z);
+
+	pcmpeqd	%xmm4, %xmm5
+	pshufd	\$0xb1, %xmm1, %xmm4
+	por	%xmm1, %xmm4
+	pshufd	\$0, %xmm5, %xmm5		# in1infty
+	pshufd	\$0x1e, %xmm4, %xmm3
+	por	%xmm3, %xmm4
+	pxor	%xmm3, %xmm3
+	pcmpeqd	%xmm3, %xmm4
+	pshufd	\$0, %xmm4, %xmm4		# in2infty
+	 mov	0x40+8*0($b_ptr), $src0		# load original in1_z
+	 mov	0x40+8*1($b_ptr), $acc6
+	 mov	0x40+8*2($b_ptr), $acc7
+	 mov	0x40+8*3($b_ptr), $acc0
+	movq	$b_ptr, %xmm1
+
+	lea	0x40-$bias($b_ptr), $a_ptr
+	lea	$Z1sqr(%rsp), $r_ptr		# Z1^2
+	call	__ecp_nistz256_sqr_mont$x	# p256_sqr_mont(Z1sqr, in1_z);
+
+	`&load_for_mul("$Z2sqr(%rsp)", "$in2_z(%rsp)", "$src0")`
+	lea	$S1(%rsp), $r_ptr		# S1 = Z2^3
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(S1, Z2sqr, in2_z);
+
+	`&load_for_mul("$Z1sqr(%rsp)", "$in1_z(%rsp)", "$src0")`
+	lea	$S2(%rsp), $r_ptr		# S2 = Z1^3
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(S2, Z1sqr, in1_z);
+
+	`&load_for_mul("$S1(%rsp)", "$in1_y(%rsp)", "$src0")`
+	lea	$S1(%rsp), $r_ptr		# S1 = Y1*Z2^3
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(S1, S1, in1_y);
+
+	`&load_for_mul("$S2(%rsp)", "$in2_y(%rsp)", "$src0")`
+	lea	$S2(%rsp), $r_ptr		# S2 = Y2*Z1^3
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(S2, S2, in2_y);
+
+	lea	$S1(%rsp), $b_ptr
+	lea	$R(%rsp), $r_ptr		# R = S2 - S1
+	call	__ecp_nistz256_sub_from$x	# p256_sub(R, S2, S1);
+
+	or	$acc5, $acc4			# see if result is zero
+	movdqa	%xmm4, %xmm2
+	or	$acc0, $acc4
+	or	$acc1, $acc4
+	por	%xmm5, %xmm2			# in1infty || in2infty
+	movq	$acc4, %xmm3
+
+	`&load_for_mul("$Z2sqr(%rsp)", "$in1_x(%rsp)", "$src0")`
+	lea	$U1(%rsp), $r_ptr		# U1 = X1*Z2^2
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(U1, in1_x, Z2sqr);
+
+	`&load_for_mul("$Z1sqr(%rsp)", "$in2_x(%rsp)", "$src0")`
+	lea	$U2(%rsp), $r_ptr		# U2 = X2*Z1^2
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(U2, in2_x, Z1sqr);
+
+	lea	$U1(%rsp), $b_ptr
+	lea	$H(%rsp), $r_ptr		# H = U2 - U1
+	call	__ecp_nistz256_sub_from$x	# p256_sub(H, U2, U1);
+
+	or	$acc5, $acc4			# see if result is zero
+	or	$acc0, $acc4
+	or	$acc1, $acc4
+
+	.byte	0x3e				# predict taken
+	jnz	.Ladd_proceed$x			# is_equal(U1,U2)?
+	movq	%xmm2, $acc0
+	movq	%xmm3, $acc1
+	test	$acc0, $acc0
+	jnz	.Ladd_proceed$x			# (in1infty || in2infty)?
+	test	$acc1, $acc1
+	jz	.Ladd_double$x			# is_equal(S1,S2)?
+
+	movq	%xmm0, $r_ptr			# restore $r_ptr
+	pxor	%xmm0, %xmm0
+	movdqu	%xmm0, 0x00($r_ptr)
+	movdqu	%xmm0, 0x10($r_ptr)
+	movdqu	%xmm0, 0x20($r_ptr)
+	movdqu	%xmm0, 0x30($r_ptr)
+	movdqu	%xmm0, 0x40($r_ptr)
+	movdqu	%xmm0, 0x50($r_ptr)
+	jmp	.Ladd_done$x
+
+.align	32
+.Ladd_double$x:
+	movq	%xmm1, $a_ptr			# restore $a_ptr
+	movq	%xmm0, $r_ptr			# restore $r_ptr
+	add	\$`32*(18-5)`, %rsp		# difference in frame sizes
+.cfi_adjust_cfa_offset	`-32*(18-5)`
+	jmp	.Lpoint_double_shortcut$x
+.cfi_adjust_cfa_offset	`32*(18-5)`
+
+.align	32
+.Ladd_proceed$x:
+	`&load_for_sqr("$R(%rsp)", "$src0")`
+	lea	$Rsqr(%rsp), $r_ptr		# R^2
+	call	__ecp_nistz256_sqr_mont$x	# p256_sqr_mont(Rsqr, R);
+
+	`&load_for_mul("$H(%rsp)", "$in1_z(%rsp)", "$src0")`
+	lea	$res_z(%rsp), $r_ptr		# Z3 = H*Z1*Z2
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(res_z, H, in1_z);
+
+	`&load_for_sqr("$H(%rsp)", "$src0")`
+	lea	$Hsqr(%rsp), $r_ptr		# H^2
+	call	__ecp_nistz256_sqr_mont$x	# p256_sqr_mont(Hsqr, H);
+
+	`&load_for_mul("$res_z(%rsp)", "$in2_z(%rsp)", "$src0")`
+	lea	$res_z(%rsp), $r_ptr		# Z3 = H*Z1*Z2
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(res_z, res_z, in2_z);
+
+	`&load_for_mul("$Hsqr(%rsp)", "$H(%rsp)", "$src0")`
+	lea	$Hcub(%rsp), $r_ptr		# H^3
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(Hcub, Hsqr, H);
+
+	`&load_for_mul("$Hsqr(%rsp)", "$U1(%rsp)", "$src0")`
+	lea	$U2(%rsp), $r_ptr		# U1*H^2
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(U2, U1, Hsqr);
+___
+{
+#######################################################################
+# operate in 4-5-0-1 "name space" that matches multiplication output
+#
+my ($acc0,$acc1,$acc2,$acc3,$t3,$t4)=($acc4,$acc5,$acc0,$acc1,$acc2,$acc3);
+my ($poly1, $poly3)=($acc6,$acc7);
+
+$code.=<<___;
+	#lea	$U2(%rsp), $a_ptr
+	#lea	$Hsqr(%rsp), $r_ptr	# 2*U1*H^2
+	#call	__ecp_nistz256_mul_by_2	# ecp_nistz256_mul_by_2(Hsqr, U2);
+
+	xor	$t4, $t4
+	add	$acc0, $acc0		# a0:a3+a0:a3
+	lea	$Rsqr(%rsp), $a_ptr
+	adc	$acc1, $acc1
+	 mov	$acc0, $t0
+	adc	$acc2, $acc2
+	adc	$acc3, $acc3
+	 mov	$acc1, $t1
+	adc	\$0, $t4
+
+	sub	\$-1, $acc0
+	 mov	$acc2, $t2
+	sbb	$poly1, $acc1
+	sbb	\$0, $acc2
+	 mov	$acc3, $t3
+	sbb	$poly3, $acc3
+	sbb	\$0, $t4
+
+	cmovc	$t0, $acc0
+	mov	8*0($a_ptr), $t0
+	cmovc	$t1, $acc1
+	mov	8*1($a_ptr), $t1
+	cmovc	$t2, $acc2
+	mov	8*2($a_ptr), $t2
+	cmovc	$t3, $acc3
+	mov	8*3($a_ptr), $t3
+
+	call	__ecp_nistz256_sub$x		# p256_sub(res_x, Rsqr, Hsqr);
+
+	lea	$Hcub(%rsp), $b_ptr
+	lea	$res_x(%rsp), $r_ptr
+	call	__ecp_nistz256_sub_from$x	# p256_sub(res_x, res_x, Hcub);
+
+	mov	$U2+8*0(%rsp), $t0
+	mov	$U2+8*1(%rsp), $t1
+	mov	$U2+8*2(%rsp), $t2
+	mov	$U2+8*3(%rsp), $t3
+	lea	$res_y(%rsp), $r_ptr
+
+	call	__ecp_nistz256_sub$x		# p256_sub(res_y, U2, res_x);
+
+	mov	$acc0, 8*0($r_ptr)		# save the result, as
+	mov	$acc1, 8*1($r_ptr)		# __ecp_nistz256_sub doesn't
+	mov	$acc2, 8*2($r_ptr)
+	mov	$acc3, 8*3($r_ptr)
+___
+}
+$code.=<<___;
+	`&load_for_mul("$S1(%rsp)", "$Hcub(%rsp)", "$src0")`
+	lea	$S2(%rsp), $r_ptr
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(S2, S1, Hcub);
+
+	`&load_for_mul("$R(%rsp)", "$res_y(%rsp)", "$src0")`
+	lea	$res_y(%rsp), $r_ptr
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(res_y, R, res_y);
+
+	lea	$S2(%rsp), $b_ptr
+	lea	$res_y(%rsp), $r_ptr
+	call	__ecp_nistz256_sub_from$x	# p256_sub(res_y, res_y, S2);
+
+	movq	%xmm0, $r_ptr		# restore $r_ptr
+
+	movdqa	%xmm5, %xmm0		# copy_conditional(res_z, in2_z, in1infty);
+	movdqa	%xmm5, %xmm1
+	pandn	$res_z(%rsp), %xmm0
+	movdqa	%xmm5, %xmm2
+	pandn	$res_z+0x10(%rsp), %xmm1
+	movdqa	%xmm5, %xmm3
+	pand	$in2_z(%rsp), %xmm2
+	pand	$in2_z+0x10(%rsp), %xmm3
+	por	%xmm0, %xmm2
+	por	%xmm1, %xmm3
+
+	movdqa	%xmm4, %xmm0		# copy_conditional(res_z, in1_z, in2infty);
+	movdqa	%xmm4, %xmm1
+	pandn	%xmm2, %xmm0
+	movdqa	%xmm4, %xmm2
+	pandn	%xmm3, %xmm1
+	movdqa	%xmm4, %xmm3
+	pand	$in1_z(%rsp), %xmm2
+	pand	$in1_z+0x10(%rsp), %xmm3
+	por	%xmm0, %xmm2
+	por	%xmm1, %xmm3
+	movdqu	%xmm2, 0x40($r_ptr)
+	movdqu	%xmm3, 0x50($r_ptr)
+
+	movdqa	%xmm5, %xmm0		# copy_conditional(res_x, in2_x, in1infty);
+	movdqa	%xmm5, %xmm1
+	pandn	$res_x(%rsp), %xmm0
+	movdqa	%xmm5, %xmm2
+	pandn	$res_x+0x10(%rsp), %xmm1
+	movdqa	%xmm5, %xmm3
+	pand	$in2_x(%rsp), %xmm2
+	pand	$in2_x+0x10(%rsp), %xmm3
+	por	%xmm0, %xmm2
+	por	%xmm1, %xmm3
+
+	movdqa	%xmm4, %xmm0		# copy_conditional(res_x, in1_x, in2infty);
+	movdqa	%xmm4, %xmm1
+	pandn	%xmm2, %xmm0
+	movdqa	%xmm4, %xmm2
+	pandn	%xmm3, %xmm1
+	movdqa	%xmm4, %xmm3
+	pand	$in1_x(%rsp), %xmm2
+	pand	$in1_x+0x10(%rsp), %xmm3
+	por	%xmm0, %xmm2
+	por	%xmm1, %xmm3
+	movdqu	%xmm2, 0x00($r_ptr)
+	movdqu	%xmm3, 0x10($r_ptr)
+
+	movdqa	%xmm5, %xmm0		# copy_conditional(res_y, in2_y, in1infty);
+	movdqa	%xmm5, %xmm1
+	pandn	$res_y(%rsp), %xmm0
+	movdqa	%xmm5, %xmm2
+	pandn	$res_y+0x10(%rsp), %xmm1
+	movdqa	%xmm5, %xmm3
+	pand	$in2_y(%rsp), %xmm2
+	pand	$in2_y+0x10(%rsp), %xmm3
+	por	%xmm0, %xmm2
+	por	%xmm1, %xmm3
+
+	movdqa	%xmm4, %xmm0		# copy_conditional(res_y, in1_y, in2infty);
+	movdqa	%xmm4, %xmm1
+	pandn	%xmm2, %xmm0
+	movdqa	%xmm4, %xmm2
+	pandn	%xmm3, %xmm1
+	movdqa	%xmm4, %xmm3
+	pand	$in1_y(%rsp), %xmm2
+	pand	$in1_y+0x10(%rsp), %xmm3
+	por	%xmm0, %xmm2
+	por	%xmm1, %xmm3
+	movdqu	%xmm2, 0x20($r_ptr)
+	movdqu	%xmm3, 0x30($r_ptr)
+
+.Ladd_done$x:
+	lea	32*18+56(%rsp), %rsi
+.cfi_def_cfa	%rsi,8
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbx
+.cfi_restore	%rbx
+	mov	-8(%rsi),%rbp
+.cfi_restore	%rbp
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lpoint_add${x}_epilogue:
+	ret
+.cfi_endproc
+.size	ecp_nistz256_point_add$sfx,.-ecp_nistz256_point_add$sfx
+___
+}
+&gen_add("q");
+
+sub gen_add_affine () {
+    my $x = shift;
+    my ($src0,$sfx,$bias);
+    my ($U2,$S2,$H,$R,$Hsqr,$Hcub,$Rsqr,
+	$res_x,$res_y,$res_z,
+	$in1_x,$in1_y,$in1_z,
+	$in2_x,$in2_y)=map(32*$_,(0..14));
+    my $Z1sqr = $S2;
+
+    if ($x ne "x") {
+	$src0 = "%rax";
+	$sfx  = "";
+	$bias = 0;
+
+$code.=<<___;
+.globl	ecp_nistz256_point_add_affine
+.type	ecp_nistz256_point_add_affine,\@function,3
+.align	32
+ecp_nistz256_point_add_affine:
+.cfi_startproc
+___
+$code.=<<___	if ($addx);
+	mov	\$0x80100, %ecx
+	and	OPENSSL_ia32cap_P+8(%rip), %ecx
+	cmp	\$0x80100, %ecx
+	je	.Lpoint_add_affinex
+___
+    } else {
+	$src0 = "%rdx";
+	$sfx  = "x";
+	$bias = 128;
+
+$code.=<<___;
+.type	ecp_nistz256_point_add_affinex,\@function,3
+.align	32
+ecp_nistz256_point_add_affinex:
+.cfi_startproc
+.Lpoint_add_affinex:
+___
+    }
+$code.=<<___;
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	sub	\$32*15+8, %rsp
+.cfi_adjust_cfa_offset	32*15+8
+.Ladd_affine${x}_body:
+
+	movdqu	0x00($a_ptr), %xmm0	# copy	*(P256_POINT *)$a_ptr
+	mov	$b_org, $b_ptr		# reassign
+	movdqu	0x10($a_ptr), %xmm1
+	movdqu	0x20($a_ptr), %xmm2
+	movdqu	0x30($a_ptr), %xmm3
+	movdqu	0x40($a_ptr), %xmm4
+	movdqu	0x50($a_ptr), %xmm5
+	 mov	0x40+8*0($a_ptr), $src0	# load original in1_z
+	 mov	0x40+8*1($a_ptr), $acc6
+	 mov	0x40+8*2($a_ptr), $acc7
+	 mov	0x40+8*3($a_ptr), $acc0
+	movdqa	%xmm0, $in1_x(%rsp)
+	movdqa	%xmm1, $in1_x+0x10(%rsp)
+	movdqa	%xmm2, $in1_y(%rsp)
+	movdqa	%xmm3, $in1_y+0x10(%rsp)
+	movdqa	%xmm4, $in1_z(%rsp)
+	movdqa	%xmm5, $in1_z+0x10(%rsp)
+	por	%xmm4, %xmm5
+
+	movdqu	0x00($b_ptr), %xmm0	# copy	*(P256_POINT_AFFINE *)$b_ptr
+	 pshufd	\$0xb1, %xmm5, %xmm3
+	movdqu	0x10($b_ptr), %xmm1
+	movdqu	0x20($b_ptr), %xmm2
+	 por	%xmm3, %xmm5
+	movdqu	0x30($b_ptr), %xmm3
+	movdqa	%xmm0, $in2_x(%rsp)
+	 pshufd	\$0x1e, %xmm5, %xmm4
+	movdqa	%xmm1, $in2_x+0x10(%rsp)
+	por	%xmm0, %xmm1
+	 movq	$r_ptr, %xmm0		# save $r_ptr
+	movdqa	%xmm2, $in2_y(%rsp)
+	movdqa	%xmm3, $in2_y+0x10(%rsp)
+	por	%xmm2, %xmm3
+	 por	%xmm4, %xmm5
+	 pxor	%xmm4, %xmm4
+	por	%xmm1, %xmm3
+
+	lea	0x40-$bias($a_ptr), $a_ptr	# $a_ptr is still valid
+	lea	$Z1sqr(%rsp), $r_ptr		# Z1^2
+	call	__ecp_nistz256_sqr_mont$x	# p256_sqr_mont(Z1sqr, in1_z);
+
+	pcmpeqd	%xmm4, %xmm5
+	pshufd	\$0xb1, %xmm3, %xmm4
+	 mov	0x00($b_ptr), $src0		# $b_ptr is still valid
+	 #lea	0x00($b_ptr), $b_ptr
+	 mov	$acc4, $acc1			# harmonize sqr output and mul input
+	por	%xmm3, %xmm4
+	pshufd	\$0, %xmm5, %xmm5		# in1infty
+	pshufd	\$0x1e, %xmm4, %xmm3
+	 mov	$acc5, $acc2
+	por	%xmm3, %xmm4
+	pxor	%xmm3, %xmm3
+	 mov	$acc6, $acc3
+	pcmpeqd	%xmm3, %xmm4
+	pshufd	\$0, %xmm4, %xmm4		# in2infty
+
+	lea	$Z1sqr-$bias(%rsp), $a_ptr
+	mov	$acc7, $acc4
+	lea	$U2(%rsp), $r_ptr		# U2 = X2*Z1^2
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(U2, Z1sqr, in2_x);
+
+	lea	$in1_x(%rsp), $b_ptr
+	lea	$H(%rsp), $r_ptr		# H = U2 - U1
+	call	__ecp_nistz256_sub_from$x	# p256_sub(H, U2, in1_x);
+
+	`&load_for_mul("$Z1sqr(%rsp)", "$in1_z(%rsp)", "$src0")`
+	lea	$S2(%rsp), $r_ptr		# S2 = Z1^3
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(S2, Z1sqr, in1_z);
+
+	`&load_for_mul("$H(%rsp)", "$in1_z(%rsp)", "$src0")`
+	lea	$res_z(%rsp), $r_ptr		# Z3 = H*Z1*Z2
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(res_z, H, in1_z);
+
+	`&load_for_mul("$S2(%rsp)", "$in2_y(%rsp)", "$src0")`
+	lea	$S2(%rsp), $r_ptr		# S2 = Y2*Z1^3
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(S2, S2, in2_y);
+
+	lea	$in1_y(%rsp), $b_ptr
+	lea	$R(%rsp), $r_ptr		# R = S2 - S1
+	call	__ecp_nistz256_sub_from$x	# p256_sub(R, S2, in1_y);
+
+	`&load_for_sqr("$H(%rsp)", "$src0")`
+	lea	$Hsqr(%rsp), $r_ptr		# H^2
+	call	__ecp_nistz256_sqr_mont$x	# p256_sqr_mont(Hsqr, H);
+
+	`&load_for_sqr("$R(%rsp)", "$src0")`
+	lea	$Rsqr(%rsp), $r_ptr		# R^2
+	call	__ecp_nistz256_sqr_mont$x	# p256_sqr_mont(Rsqr, R);
+
+	`&load_for_mul("$H(%rsp)", "$Hsqr(%rsp)", "$src0")`
+	lea	$Hcub(%rsp), $r_ptr		# H^3
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(Hcub, Hsqr, H);
+
+	`&load_for_mul("$Hsqr(%rsp)", "$in1_x(%rsp)", "$src0")`
+	lea	$U2(%rsp), $r_ptr		# U1*H^2
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(U2, in1_x, Hsqr);
+___
+{
+#######################################################################
+# operate in 4-5-0-1 "name space" that matches multiplication output
+#
+my ($acc0,$acc1,$acc2,$acc3,$t3,$t4)=($acc4,$acc5,$acc0,$acc1,$acc2,$acc3);
+my ($poly1, $poly3)=($acc6,$acc7);
+
+$code.=<<___;
+	#lea	$U2(%rsp), $a_ptr
+	#lea	$Hsqr(%rsp), $r_ptr	# 2*U1*H^2
+	#call	__ecp_nistz256_mul_by_2	# ecp_nistz256_mul_by_2(Hsqr, U2);
+
+	xor	$t4, $t4
+	add	$acc0, $acc0		# a0:a3+a0:a3
+	lea	$Rsqr(%rsp), $a_ptr
+	adc	$acc1, $acc1
+	 mov	$acc0, $t0
+	adc	$acc2, $acc2
+	adc	$acc3, $acc3
+	 mov	$acc1, $t1
+	adc	\$0, $t4
+
+	sub	\$-1, $acc0
+	 mov	$acc2, $t2
+	sbb	$poly1, $acc1
+	sbb	\$0, $acc2
+	 mov	$acc3, $t3
+	sbb	$poly3, $acc3
+	sbb	\$0, $t4
+
+	cmovc	$t0, $acc0
+	mov	8*0($a_ptr), $t0
+	cmovc	$t1, $acc1
+	mov	8*1($a_ptr), $t1
+	cmovc	$t2, $acc2
+	mov	8*2($a_ptr), $t2
+	cmovc	$t3, $acc3
+	mov	8*3($a_ptr), $t3
+
+	call	__ecp_nistz256_sub$x		# p256_sub(res_x, Rsqr, Hsqr);
+
+	lea	$Hcub(%rsp), $b_ptr
+	lea	$res_x(%rsp), $r_ptr
+	call	__ecp_nistz256_sub_from$x	# p256_sub(res_x, res_x, Hcub);
+
+	mov	$U2+8*0(%rsp), $t0
+	mov	$U2+8*1(%rsp), $t1
+	mov	$U2+8*2(%rsp), $t2
+	mov	$U2+8*3(%rsp), $t3
+	lea	$H(%rsp), $r_ptr
+
+	call	__ecp_nistz256_sub$x		# p256_sub(H, U2, res_x);
+
+	mov	$acc0, 8*0($r_ptr)		# save the result, as
+	mov	$acc1, 8*1($r_ptr)		# __ecp_nistz256_sub doesn't
+	mov	$acc2, 8*2($r_ptr)
+	mov	$acc3, 8*3($r_ptr)
+___
+}
+$code.=<<___;
+	`&load_for_mul("$Hcub(%rsp)", "$in1_y(%rsp)", "$src0")`
+	lea	$S2(%rsp), $r_ptr
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(S2, Hcub, in1_y);
+
+	`&load_for_mul("$H(%rsp)", "$R(%rsp)", "$src0")`
+	lea	$H(%rsp), $r_ptr
+	call	__ecp_nistz256_mul_mont$x	# p256_mul_mont(H, H, R);
+
+	lea	$S2(%rsp), $b_ptr
+	lea	$res_y(%rsp), $r_ptr
+	call	__ecp_nistz256_sub_from$x	# p256_sub(res_y, H, S2);
+
+	movq	%xmm0, $r_ptr		# restore $r_ptr
+
+	movdqa	%xmm5, %xmm0		# copy_conditional(res_z, ONE, in1infty);
+	movdqa	%xmm5, %xmm1
+	pandn	$res_z(%rsp), %xmm0
+	movdqa	%xmm5, %xmm2
+	pandn	$res_z+0x10(%rsp), %xmm1
+	movdqa	%xmm5, %xmm3
+	pand	.LONE_mont(%rip), %xmm2
+	pand	.LONE_mont+0x10(%rip), %xmm3
+	por	%xmm0, %xmm2
+	por	%xmm1, %xmm3
+
+	movdqa	%xmm4, %xmm0		# copy_conditional(res_z, in1_z, in2infty);
+	movdqa	%xmm4, %xmm1
+	pandn	%xmm2, %xmm0
+	movdqa	%xmm4, %xmm2
+	pandn	%xmm3, %xmm1
+	movdqa	%xmm4, %xmm3
+	pand	$in1_z(%rsp), %xmm2
+	pand	$in1_z+0x10(%rsp), %xmm3
+	por	%xmm0, %xmm2
+	por	%xmm1, %xmm3
+	movdqu	%xmm2, 0x40($r_ptr)
+	movdqu	%xmm3, 0x50($r_ptr)
+
+	movdqa	%xmm5, %xmm0		# copy_conditional(res_x, in2_x, in1infty);
+	movdqa	%xmm5, %xmm1
+	pandn	$res_x(%rsp), %xmm0
+	movdqa	%xmm5, %xmm2
+	pandn	$res_x+0x10(%rsp), %xmm1
+	movdqa	%xmm5, %xmm3
+	pand	$in2_x(%rsp), %xmm2
+	pand	$in2_x+0x10(%rsp), %xmm3
+	por	%xmm0, %xmm2
+	por	%xmm1, %xmm3
+
+	movdqa	%xmm4, %xmm0		# copy_conditional(res_x, in1_x, in2infty);
+	movdqa	%xmm4, %xmm1
+	pandn	%xmm2, %xmm0
+	movdqa	%xmm4, %xmm2
+	pandn	%xmm3, %xmm1
+	movdqa	%xmm4, %xmm3
+	pand	$in1_x(%rsp), %xmm2
+	pand	$in1_x+0x10(%rsp), %xmm3
+	por	%xmm0, %xmm2
+	por	%xmm1, %xmm3
+	movdqu	%xmm2, 0x00($r_ptr)
+	movdqu	%xmm3, 0x10($r_ptr)
+
+	movdqa	%xmm5, %xmm0		# copy_conditional(res_y, in2_y, in1infty);
+	movdqa	%xmm5, %xmm1
+	pandn	$res_y(%rsp), %xmm0
+	movdqa	%xmm5, %xmm2
+	pandn	$res_y+0x10(%rsp), %xmm1
+	movdqa	%xmm5, %xmm3
+	pand	$in2_y(%rsp), %xmm2
+	pand	$in2_y+0x10(%rsp), %xmm3
+	por	%xmm0, %xmm2
+	por	%xmm1, %xmm3
+
+	movdqa	%xmm4, %xmm0		# copy_conditional(res_y, in1_y, in2infty);
+	movdqa	%xmm4, %xmm1
+	pandn	%xmm2, %xmm0
+	movdqa	%xmm4, %xmm2
+	pandn	%xmm3, %xmm1
+	movdqa	%xmm4, %xmm3
+	pand	$in1_y(%rsp), %xmm2
+	pand	$in1_y+0x10(%rsp), %xmm3
+	por	%xmm0, %xmm2
+	por	%xmm1, %xmm3
+	movdqu	%xmm2, 0x20($r_ptr)
+	movdqu	%xmm3, 0x30($r_ptr)
+
+	lea	32*15+56(%rsp), %rsi
+.cfi_def_cfa	%rsi,8
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbx
+.cfi_restore	%rbx
+	mov	-8(%rsi),%rbp
+.cfi_restore	%rbp
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Ladd_affine${x}_epilogue:
+	ret
+.cfi_endproc
+.size	ecp_nistz256_point_add_affine$sfx,.-ecp_nistz256_point_add_affine$sfx
+___
+}
+&gen_add_affine("q");
+
+########################################################################
+# AD*X magic
+#
+if ($addx) {								{
+########################################################################
+# operate in 4-5-0-1 "name space" that matches multiplication output
+#
+my ($a0,$a1,$a2,$a3,$t3,$t4)=($acc4,$acc5,$acc0,$acc1,$acc2,$acc3);
+
+$code.=<<___;
+.type	__ecp_nistz256_add_tox,\@abi-omnipotent
+.align	32
+__ecp_nistz256_add_tox:
+.cfi_startproc
+	xor	$t4, $t4
+	adc	8*0($b_ptr), $a0
+	adc	8*1($b_ptr), $a1
+	 mov	$a0, $t0
+	adc	8*2($b_ptr), $a2
+	adc	8*3($b_ptr), $a3
+	 mov	$a1, $t1
+	adc	\$0, $t4
+
+	xor	$t3, $t3
+	sbb	\$-1, $a0
+	 mov	$a2, $t2
+	sbb	$poly1, $a1
+	sbb	\$0, $a2
+	 mov	$a3, $t3
+	sbb	$poly3, $a3
+	sbb	\$0, $t4
+
+	cmovc	$t0, $a0
+	cmovc	$t1, $a1
+	mov	$a0, 8*0($r_ptr)
+	cmovc	$t2, $a2
+	mov	$a1, 8*1($r_ptr)
+	cmovc	$t3, $a3
+	mov	$a2, 8*2($r_ptr)
+	mov	$a3, 8*3($r_ptr)
+
+	ret
+.cfi_endproc
+.size	__ecp_nistz256_add_tox,.-__ecp_nistz256_add_tox
+
+.type	__ecp_nistz256_sub_fromx,\@abi-omnipotent
+.align	32
+__ecp_nistz256_sub_fromx:
+.cfi_startproc
+	xor	$t4, $t4
+	sbb	8*0($b_ptr), $a0
+	sbb	8*1($b_ptr), $a1
+	 mov	$a0, $t0
+	sbb	8*2($b_ptr), $a2
+	sbb	8*3($b_ptr), $a3
+	 mov	$a1, $t1
+	sbb	\$0, $t4
+
+	xor	$t3, $t3
+	adc	\$-1, $a0
+	 mov	$a2, $t2
+	adc	$poly1, $a1
+	adc	\$0, $a2
+	 mov	$a3, $t3
+	adc	$poly3, $a3
+
+	bt	\$0, $t4
+	cmovnc	$t0, $a0
+	cmovnc	$t1, $a1
+	mov	$a0, 8*0($r_ptr)
+	cmovnc	$t2, $a2
+	mov	$a1, 8*1($r_ptr)
+	cmovnc	$t3, $a3
+	mov	$a2, 8*2($r_ptr)
+	mov	$a3, 8*3($r_ptr)
+
+	ret
+.cfi_endproc
+.size	__ecp_nistz256_sub_fromx,.-__ecp_nistz256_sub_fromx
+
+.type	__ecp_nistz256_subx,\@abi-omnipotent
+.align	32
+__ecp_nistz256_subx:
+.cfi_startproc
+	xor	$t4, $t4
+	sbb	$a0, $t0
+	sbb	$a1, $t1
+	 mov	$t0, $a0
+	sbb	$a2, $t2
+	sbb	$a3, $t3
+	 mov	$t1, $a1
+	sbb	\$0, $t4
+
+	xor	$a3 ,$a3
+	adc	\$-1, $t0
+	 mov	$t2, $a2
+	adc	$poly1, $t1
+	adc	\$0, $t2
+	 mov	$t3, $a3
+	adc	$poly3, $t3
+
+	bt	\$0, $t4
+	cmovc	$t0, $a0
+	cmovc	$t1, $a1
+	cmovc	$t2, $a2
+	cmovc	$t3, $a3
+
+	ret
+.cfi_endproc
+.size	__ecp_nistz256_subx,.-__ecp_nistz256_subx
+
+.type	__ecp_nistz256_mul_by_2x,\@abi-omnipotent
+.align	32
+__ecp_nistz256_mul_by_2x:
+.cfi_startproc
+	xor	$t4, $t4
+	adc	$a0, $a0		# a0:a3+a0:a3
+	adc	$a1, $a1
+	 mov	$a0, $t0
+	adc	$a2, $a2
+	adc	$a3, $a3
+	 mov	$a1, $t1
+	adc	\$0, $t4
+
+	xor	$t3, $t3
+	sbb	\$-1, $a0
+	 mov	$a2, $t2
+	sbb	$poly1, $a1
+	sbb	\$0, $a2
+	 mov	$a3, $t3
+	sbb	$poly3, $a3
+	sbb	\$0, $t4
+
+	cmovc	$t0, $a0
+	cmovc	$t1, $a1
+	mov	$a0, 8*0($r_ptr)
+	cmovc	$t2, $a2
+	mov	$a1, 8*1($r_ptr)
+	cmovc	$t3, $a3
+	mov	$a2, 8*2($r_ptr)
+	mov	$a3, 8*3($r_ptr)
+
+	ret
+.cfi_endproc
+.size	__ecp_nistz256_mul_by_2x,.-__ecp_nistz256_mul_by_2x
+___
+									}
+&gen_double("x");
+&gen_add("x");
+&gen_add_affine("x");
+}
+}}}
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+
+.type	short_handler,\@abi-omnipotent
+.align	16
+short_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# end of prologue label
+	cmp	%r10,%rbx		# context->Rip<end of prologue label
+	jb	.Lcommon_seh_tail
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lcommon_seh_tail
+
+	lea	16(%rax),%rax
+
+	mov	-8(%rax),%r12
+	mov	-16(%rax),%r13
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+
+	jmp	.Lcommon_seh_tail
+.size	short_handler,.-short_handler
+
+.type	full_handler,\@abi-omnipotent
+.align	16
+full_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# end of prologue label
+	cmp	%r10,%rbx		# context->Rip<end of prologue label
+	jb	.Lcommon_seh_tail
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lcommon_seh_tail
+
+	mov	8(%r11),%r10d		# HandlerData[2]
+	lea	(%rax,%r10),%rax
+
+	mov	-8(%rax),%rbp
+	mov	-16(%rax),%rbx
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+.Lcommon_seh_tail:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	full_handler,.-full_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_ecp_nistz256_mul_by_2
+	.rva	.LSEH_end_ecp_nistz256_mul_by_2
+	.rva	.LSEH_info_ecp_nistz256_mul_by_2
+
+	.rva	.LSEH_begin_ecp_nistz256_div_by_2
+	.rva	.LSEH_end_ecp_nistz256_div_by_2
+	.rva	.LSEH_info_ecp_nistz256_div_by_2
+
+	.rva	.LSEH_begin_ecp_nistz256_mul_by_3
+	.rva	.LSEH_end_ecp_nistz256_mul_by_3
+	.rva	.LSEH_info_ecp_nistz256_mul_by_3
+
+	.rva	.LSEH_begin_ecp_nistz256_add
+	.rva	.LSEH_end_ecp_nistz256_add
+	.rva	.LSEH_info_ecp_nistz256_add
+
+	.rva	.LSEH_begin_ecp_nistz256_sub
+	.rva	.LSEH_end_ecp_nistz256_sub
+	.rva	.LSEH_info_ecp_nistz256_sub
+
+	.rva	.LSEH_begin_ecp_nistz256_neg
+	.rva	.LSEH_end_ecp_nistz256_neg
+	.rva	.LSEH_info_ecp_nistz256_neg
+
+	.rva	.LSEH_begin_ecp_nistz256_ord_mul_mont
+	.rva	.LSEH_end_ecp_nistz256_ord_mul_mont
+	.rva	.LSEH_info_ecp_nistz256_ord_mul_mont
+
+	.rva	.LSEH_begin_ecp_nistz256_ord_sqr_mont
+	.rva	.LSEH_end_ecp_nistz256_ord_sqr_mont
+	.rva	.LSEH_info_ecp_nistz256_ord_sqr_mont
+___
+$code.=<<___	if ($addx);
+	.rva	.LSEH_begin_ecp_nistz256_ord_mul_montx
+	.rva	.LSEH_end_ecp_nistz256_ord_mul_montx
+	.rva	.LSEH_info_ecp_nistz256_ord_mul_montx
+
+	.rva	.LSEH_begin_ecp_nistz256_ord_sqr_montx
+	.rva	.LSEH_end_ecp_nistz256_ord_sqr_montx
+	.rva	.LSEH_info_ecp_nistz256_ord_sqr_montx
+___
+$code.=<<___;
+	.rva	.LSEH_begin_ecp_nistz256_to_mont
+	.rva	.LSEH_end_ecp_nistz256_to_mont
+	.rva	.LSEH_info_ecp_nistz256_to_mont
+
+	.rva	.LSEH_begin_ecp_nistz256_mul_mont
+	.rva	.LSEH_end_ecp_nistz256_mul_mont
+	.rva	.LSEH_info_ecp_nistz256_mul_mont
+
+	.rva	.LSEH_begin_ecp_nistz256_sqr_mont
+	.rva	.LSEH_end_ecp_nistz256_sqr_mont
+	.rva	.LSEH_info_ecp_nistz256_sqr_mont
+
+	.rva	.LSEH_begin_ecp_nistz256_from_mont
+	.rva	.LSEH_end_ecp_nistz256_from_mont
+	.rva	.LSEH_info_ecp_nistz256_from_mont
+
+	.rva	.LSEH_begin_ecp_nistz256_gather_w5
+	.rva	.LSEH_end_ecp_nistz256_gather_w5
+	.rva	.LSEH_info_ecp_nistz256_gather_wX
+
+	.rva	.LSEH_begin_ecp_nistz256_gather_w7
+	.rva	.LSEH_end_ecp_nistz256_gather_w7
+	.rva	.LSEH_info_ecp_nistz256_gather_wX
+___
+$code.=<<___	if ($avx>1);
+	.rva	.LSEH_begin_ecp_nistz256_avx2_gather_w5
+	.rva	.LSEH_end_ecp_nistz256_avx2_gather_w5
+	.rva	.LSEH_info_ecp_nistz256_avx2_gather_wX
+
+	.rva	.LSEH_begin_ecp_nistz256_avx2_gather_w7
+	.rva	.LSEH_end_ecp_nistz256_avx2_gather_w7
+	.rva	.LSEH_info_ecp_nistz256_avx2_gather_wX
+___
+$code.=<<___;
+	.rva	.LSEH_begin_ecp_nistz256_point_double
+	.rva	.LSEH_end_ecp_nistz256_point_double
+	.rva	.LSEH_info_ecp_nistz256_point_double
+
+	.rva	.LSEH_begin_ecp_nistz256_point_add
+	.rva	.LSEH_end_ecp_nistz256_point_add
+	.rva	.LSEH_info_ecp_nistz256_point_add
+
+	.rva	.LSEH_begin_ecp_nistz256_point_add_affine
+	.rva	.LSEH_end_ecp_nistz256_point_add_affine
+	.rva	.LSEH_info_ecp_nistz256_point_add_affine
+___
+$code.=<<___ if ($addx);
+	.rva	.LSEH_begin_ecp_nistz256_point_doublex
+	.rva	.LSEH_end_ecp_nistz256_point_doublex
+	.rva	.LSEH_info_ecp_nistz256_point_doublex
+
+	.rva	.LSEH_begin_ecp_nistz256_point_addx
+	.rva	.LSEH_end_ecp_nistz256_point_addx
+	.rva	.LSEH_info_ecp_nistz256_point_addx
+
+	.rva	.LSEH_begin_ecp_nistz256_point_add_affinex
+	.rva	.LSEH_end_ecp_nistz256_point_add_affinex
+	.rva	.LSEH_info_ecp_nistz256_point_add_affinex
+___
+$code.=<<___;
+
+.section	.xdata
+.align	8
+.LSEH_info_ecp_nistz256_mul_by_2:
+	.byte	9,0,0,0
+	.rva	short_handler
+	.rva	.Lmul_by_2_body,.Lmul_by_2_epilogue	# HandlerData[]
+.LSEH_info_ecp_nistz256_div_by_2:
+	.byte	9,0,0,0
+	.rva	short_handler
+	.rva	.Ldiv_by_2_body,.Ldiv_by_2_epilogue	# HandlerData[]
+.LSEH_info_ecp_nistz256_mul_by_3:
+	.byte	9,0,0,0
+	.rva	short_handler
+	.rva	.Lmul_by_3_body,.Lmul_by_3_epilogue	# HandlerData[]
+.LSEH_info_ecp_nistz256_add:
+	.byte	9,0,0,0
+	.rva	short_handler
+	.rva	.Ladd_body,.Ladd_epilogue		# HandlerData[]
+.LSEH_info_ecp_nistz256_sub:
+	.byte	9,0,0,0
+	.rva	short_handler
+	.rva	.Lsub_body,.Lsub_epilogue		# HandlerData[]
+.LSEH_info_ecp_nistz256_neg:
+	.byte	9,0,0,0
+	.rva	short_handler
+	.rva	.Lneg_body,.Lneg_epilogue		# HandlerData[]
+.LSEH_info_ecp_nistz256_ord_mul_mont:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Lord_mul_body,.Lord_mul_epilogue	# HandlerData[]
+	.long	48,0
+.LSEH_info_ecp_nistz256_ord_sqr_mont:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Lord_sqr_body,.Lord_sqr_epilogue	# HandlerData[]
+	.long	48,0
+___
+$code.=<<___ if ($addx);
+.LSEH_info_ecp_nistz256_ord_mul_montx:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Lord_mulx_body,.Lord_mulx_epilogue	# HandlerData[]
+	.long	48,0
+.LSEH_info_ecp_nistz256_ord_sqr_montx:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Lord_sqrx_body,.Lord_sqrx_epilogue	# HandlerData[]
+	.long	48,0
+___
+$code.=<<___;
+.LSEH_info_ecp_nistz256_to_mont:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Lmul_body,.Lmul_epilogue		# HandlerData[]
+	.long	48,0
+.LSEH_info_ecp_nistz256_mul_mont:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Lmul_body,.Lmul_epilogue		# HandlerData[]
+	.long	48,0
+.LSEH_info_ecp_nistz256_sqr_mont:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Lsqr_body,.Lsqr_epilogue		# HandlerData[]
+	.long	48,0
+.LSEH_info_ecp_nistz256_from_mont:
+	.byte	9,0,0,0
+	.rva	short_handler
+	.rva	.Lfrom_body,.Lfrom_epilogue		# HandlerData[]
+.LSEH_info_ecp_nistz256_gather_wX:
+	.byte	0x01,0x33,0x16,0x00
+	.byte	0x33,0xf8,0x09,0x00	#movaps 0x90(rsp),xmm15
+	.byte	0x2e,0xe8,0x08,0x00	#movaps 0x80(rsp),xmm14
+	.byte	0x29,0xd8,0x07,0x00	#movaps 0x70(rsp),xmm13
+	.byte	0x24,0xc8,0x06,0x00	#movaps 0x60(rsp),xmm12
+	.byte	0x1f,0xb8,0x05,0x00	#movaps 0x50(rsp),xmm11
+	.byte	0x1a,0xa8,0x04,0x00	#movaps 0x40(rsp),xmm10
+	.byte	0x15,0x98,0x03,0x00	#movaps 0x30(rsp),xmm9
+	.byte	0x10,0x88,0x02,0x00	#movaps 0x20(rsp),xmm8
+	.byte	0x0c,0x78,0x01,0x00	#movaps 0x10(rsp),xmm7
+	.byte	0x08,0x68,0x00,0x00	#movaps 0x00(rsp),xmm6
+	.byte	0x04,0x01,0x15,0x00	#sub	rsp,0xa8
+	.align	8
+___
+$code.=<<___	if ($avx>1);
+.LSEH_info_ecp_nistz256_avx2_gather_wX:
+	.byte	0x01,0x36,0x17,0x0b
+	.byte	0x36,0xf8,0x09,0x00	# vmovaps 0x90(rsp),xmm15
+	.byte	0x31,0xe8,0x08,0x00	# vmovaps 0x80(rsp),xmm14
+	.byte	0x2c,0xd8,0x07,0x00	# vmovaps 0x70(rsp),xmm13
+	.byte	0x27,0xc8,0x06,0x00	# vmovaps 0x60(rsp),xmm12
+	.byte	0x22,0xb8,0x05,0x00	# vmovaps 0x50(rsp),xmm11
+	.byte	0x1d,0xa8,0x04,0x00	# vmovaps 0x40(rsp),xmm10
+	.byte	0x18,0x98,0x03,0x00	# vmovaps 0x30(rsp),xmm9
+	.byte	0x13,0x88,0x02,0x00	# vmovaps 0x20(rsp),xmm8
+	.byte	0x0e,0x78,0x01,0x00	# vmovaps 0x10(rsp),xmm7
+	.byte	0x09,0x68,0x00,0x00	# vmovaps 0x00(rsp),xmm6
+	.byte	0x04,0x01,0x15,0x00	# sub	  rsp,0xa8
+	.byte	0x00,0xb3,0x00,0x00	# set_frame r11
+	.align	8
+___
+$code.=<<___;
+.LSEH_info_ecp_nistz256_point_double:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Lpoint_doubleq_body,.Lpoint_doubleq_epilogue	# HandlerData[]
+	.long	32*5+56,0
+.LSEH_info_ecp_nistz256_point_add:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Lpoint_addq_body,.Lpoint_addq_epilogue		# HandlerData[]
+	.long	32*18+56,0
+.LSEH_info_ecp_nistz256_point_add_affine:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Ladd_affineq_body,.Ladd_affineq_epilogue	# HandlerData[]
+	.long	32*15+56,0
+___
+$code.=<<___ if ($addx);
+.align	8
+.LSEH_info_ecp_nistz256_point_doublex:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Lpoint_doublex_body,.Lpoint_doublex_epilogue	# HandlerData[]
+	.long	32*5+56,0
+.LSEH_info_ecp_nistz256_point_addx:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Lpoint_addx_body,.Lpoint_addx_epilogue		# HandlerData[]
+	.long	32*18+56,0
+.LSEH_info_ecp_nistz256_point_add_affinex:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Ladd_affinex_body,.Ladd_affinex_epilogue	# HandlerData[]
+	.long	32*15+56,0
+___
+}
+
+########################################################################
+# Convert ecp_nistz256_table.c to layout expected by ecp_nistz_gather_w7
+#
+open TABLE,"<ecp_nistz256_table.c"		or
+open TABLE,"<${dir}../ecp_nistz256_table.c"	or
+die "failed to open ecp_nistz256_table.c:",$!;
+
+use integer;
+
+foreach(<TABLE>) {
+	s/TOBN\(\s*(0x[0-9a-f]+),\s*(0x[0-9a-f]+)\s*\)/push @arr,hex($2),hex($1)/geo;
+}
+close TABLE;
+
+die "insane number of elements" if ($#arr != 64*16*37-1);
+
+print <<___;
+.text
+.globl	ecp_nistz256_precomputed
+.type	ecp_nistz256_precomputed,\@object
+.align	4096
+ecp_nistz256_precomputed:
+___
+while (@line=splice(@arr,0,16)) {
+	print ".long\t",join(',',map { sprintf "0x%08x",$_} @line),"\n";
+}
+print <<___;
+.size	ecp_nistz256_precomputed,.-ecp_nistz256_precomputed
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/x25519-ppc64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/x25519-ppc64.pl
new file mode 100755
index 000000000..3773cb27c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/x25519-ppc64.pl
@@ -0,0 +1,824 @@
+#! /usr/bin/env perl
+# Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# X25519 lower-level primitives for PPC64.
+#
+# July 2018.
+#
+# Base 2^64 is faster than base 2^51 on pre-POWER8, most notably ~15%
+# faster on PPC970/G5. POWER8 on the other hand seems to trip on own
+# shoelaces when handling longer carry chains. As base 2^51 has just
+# single-carry pairs, it's 25% faster than base 2^64. Since PPC970 is
+# pretty old, base 2^64 implementation is not engaged. Comparison to
+# compiler-generated code is complicated by the fact that not all
+# compilers support 128-bit integers. When compiler doesn't, like xlc,
+# this module delivers more than 2x improvement, and when it does,
+# from 12% to 30% improvement was measured...
+
+$flavour = shift;
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open OUT,"| \"$^X\" $xlate $flavour $output";
+*STDOUT=*OUT;
+
+my $sp = "r1";
+my ($rp,$ap,$bp) = map("r$_",3..5);
+
+####################################################### base 2^64
+if (0) {
+my ($bi,$a0,$a1,$a2,$a3,$t0,$t1, $t2,$t3,
+    $acc0,$acc1,$acc2,$acc3,$acc4,$acc5,$acc6,$acc7) =
+    map("r$_",(6..12,22..31));
+my $zero = "r0";
+my $FRAME = 16*8;
+
+$code.=<<___;
+.text
+
+.globl	x25519_fe64_mul
+.type	x25519_fe64_mul,\@function
+.align	5
+x25519_fe64_mul:
+	stdu	$sp,-$FRAME($sp)
+	std	r22,`$FRAME-8*10`($sp)
+	std	r23,`$FRAME-8*9`($sp)
+	std	r24,`$FRAME-8*8`($sp)
+	std	r25,`$FRAME-8*7`($sp)
+	std	r26,`$FRAME-8*6`($sp)
+	std	r27,`$FRAME-8*5`($sp)
+	std	r28,`$FRAME-8*4`($sp)
+	std	r29,`$FRAME-8*3`($sp)
+	std	r30,`$FRAME-8*2`($sp)
+	std	r31,`$FRAME-8*1`($sp)
+
+	ld	$bi,0($bp)
+	ld	$a0,0($ap)
+	xor	$zero,$zero,$zero
+	ld	$a1,8($ap)
+	ld	$a2,16($ap)
+	ld	$a3,24($ap)
+
+	mulld	$acc0,$a0,$bi		# a[0]*b[0]
+	mulhdu	$t0,$a0,$bi
+	mulld	$acc1,$a1,$bi		# a[1]*b[0]
+	mulhdu	$t1,$a1,$bi
+	mulld	$acc2,$a2,$bi		# a[2]*b[0]
+	mulhdu	$t2,$a2,$bi
+	mulld	$acc3,$a3,$bi		# a[3]*b[0]
+	mulhdu	$t3,$a3,$bi
+___
+for(my @acc=($acc0,$acc1,$acc2,$acc3,$acc4,$acc5,$acc6,$acc7),
+    my $i=1; $i<4; shift(@acc), $i++) {
+my $acc4 = $i==1? $zero : @acc[4];
+
+$code.=<<___;
+	ld	$bi,`8*$i`($bp)
+	addc	@acc[1],@acc[1],$t0	# accumulate high parts
+	mulld	$t0,$a0,$bi
+	adde	@acc[2],@acc[2],$t1
+	mulld	$t1,$a1,$bi
+	adde	@acc[3],@acc[3],$t2
+	mulld	$t2,$a2,$bi
+	adde	@acc[4],$acc4,$t3
+	mulld	$t3,$a3,$bi
+	addc	@acc[1],@acc[1],$t0	# accumulate low parts
+	mulhdu	$t0,$a0,$bi
+	adde	@acc[2],@acc[2],$t1
+	mulhdu	$t1,$a1,$bi
+	adde	@acc[3],@acc[3],$t2
+	mulhdu	$t2,$a2,$bi
+	adde	@acc[4],@acc[4],$t3
+	mulhdu	$t3,$a3,$bi
+	adde	@acc[5],$zero,$zero
+___
+}
+$code.=<<___;
+	li	$bi,38
+	addc	$acc4,$acc4,$t0
+	mulld	$t0,$acc4,$bi
+	adde	$acc5,$acc5,$t1
+	mulld	$t1,$acc5,$bi
+	adde	$acc6,$acc6,$t2
+	mulld	$t2,$acc6,$bi
+	adde	$acc7,$acc7,$t3
+	mulld	$t3,$acc7,$bi
+
+	addc	$acc0,$acc0,$t0
+	mulhdu	$t0,$acc4,$bi
+	adde	$acc1,$acc1,$t1
+	mulhdu	$t1,$acc5,$bi
+	adde	$acc2,$acc2,$t2
+	mulhdu	$t2,$acc6,$bi
+	adde	$acc3,$acc3,$t3
+	mulhdu	$t3,$acc7,$bi
+	adde	$acc4,$zero,$zero
+
+	addc	$acc1,$acc1,$t0
+	adde	$acc2,$acc2,$t1
+	adde	$acc3,$acc3,$t2
+	adde	$acc4,$acc4,$t3
+
+	mulld	$acc4,$acc4,$bi
+
+	addc	$acc0,$acc0,$acc4
+	addze	$acc1,$acc1
+	addze	$acc2,$acc2
+	addze	$acc3,$acc3
+
+	subfe	$acc4,$acc4,$acc4	# carry -> ~mask
+	std	$acc1,8($rp)
+	andc	$acc4,$bi,$acc4
+	std	$acc2,16($rp)
+	add	$acc0,$acc0,$acc4
+	std	$acc3,24($rp)
+	std	$acc0,0($rp)
+
+	ld	r22,`$FRAME-8*10`($sp)
+	ld	r23,`$FRAME-8*9`($sp)
+	ld	r24,`$FRAME-8*8`($sp)
+	ld	r25,`$FRAME-8*7`($sp)
+	ld	r26,`$FRAME-8*6`($sp)
+	ld	r27,`$FRAME-8*5`($sp)
+	ld	r28,`$FRAME-8*4`($sp)
+	ld	r29,`$FRAME-8*3`($sp)
+	ld	r30,`$FRAME-8*2`($sp)
+	ld	r31,`$FRAME-8*1`($sp)
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,10,3,0
+	.long	0
+.size	x25519_fe64_mul,.-x25519_fe64_mul
+
+.globl	x25519_fe64_sqr
+.type	x25519_fe64_sqr,\@function
+.align	5
+x25519_fe64_sqr:
+	stdu	$sp,-$FRAME($sp)
+	std	r22,`$FRAME-8*10`($sp)
+	std	r23,`$FRAME-8*9`($sp)
+	std	r24,`$FRAME-8*8`($sp)
+	std	r25,`$FRAME-8*7`($sp)
+	std	r26,`$FRAME-8*6`($sp)
+	std	r27,`$FRAME-8*5`($sp)
+	std	r28,`$FRAME-8*4`($sp)
+	std	r29,`$FRAME-8*3`($sp)
+	std	r30,`$FRAME-8*2`($sp)
+	std	r31,`$FRAME-8*1`($sp)
+
+	ld	$a0,0($ap)
+	xor	$zero,$zero,$zero
+	ld	$a1,8($ap)
+	ld	$a2,16($ap)
+	ld	$a3,24($ap)
+
+	################################
+	#  |  |  |  |  |  |a1*a0|  |
+	#  |  |  |  |  |a2*a0|  |  |
+	#  |  |a3*a2|a3*a0|  |  |  |
+	#  |  |  |  |a2*a1|  |  |  |
+	#  |  |  |a3*a1|  |  |  |  |
+	# *|  |  |  |  |  |  |  | 2|
+	# +|a3*a3|a2*a2|a1*a1|a0*a0|
+	#  |--+--+--+--+--+--+--+--|
+	#  |A7|A6|A5|A4|A3|A2|A1|A0|, where Ax is $accx, i.e. follow $accx
+	#
+	#  "can't overflow" below mark carrying into high part of
+	#  multiplication result, which can't overflow, because it
+	#  can never be all ones.
+
+	mulld	$acc1,$a1,$a0		# a[1]*a[0]
+	mulhdu	$t1,$a1,$a0
+	mulld	$acc2,$a2,$a0		# a[2]*a[0]
+	mulhdu	$t2,$a2,$a0
+	mulld	$acc3,$a3,$a0		# a[3]*a[0]
+	mulhdu	$acc4,$a3,$a0
+
+	addc	$acc2,$acc2,$t1		# accumulate high parts of multiplication
+	 mulld	$t0,$a2,$a1		# a[2]*a[1]
+	 mulhdu	$t1,$a2,$a1
+	adde	$acc3,$acc3,$t2
+	 mulld	$t2,$a3,$a1		# a[3]*a[1]
+	 mulhdu	$t3,$a3,$a1
+	addze	$acc4,$acc4		# can't overflow
+
+	mulld	$acc5,$a3,$a2		# a[3]*a[2]
+	mulhdu	$acc6,$a3,$a2
+
+	addc	$t1,$t1,$t2		# accumulate high parts of multiplication
+	 mulld	$acc0,$a0,$a0		# a[0]*a[0]
+	addze	$t2,$t3			# can't overflow
+
+	addc	$acc3,$acc3,$t0		# accumulate low parts of multiplication
+	 mulhdu	$a0,$a0,$a0
+	adde	$acc4,$acc4,$t1
+	 mulld	$t1,$a1,$a1		# a[1]*a[1]
+	adde	$acc5,$acc5,$t2
+	 mulhdu	$a1,$a1,$a1
+	addze	$acc6,$acc6		# can't overflow
+
+	addc	$acc1,$acc1,$acc1	# acc[1-6]*=2
+	 mulld	$t2,$a2,$a2		# a[2]*a[2]
+	adde	$acc2,$acc2,$acc2
+	 mulhdu	$a2,$a2,$a2
+	adde	$acc3,$acc3,$acc3
+	 mulld	$t3,$a3,$a3		# a[3]*a[3]
+	adde	$acc4,$acc4,$acc4
+	 mulhdu	$a3,$a3,$a3
+	adde	$acc5,$acc5,$acc5
+	adde	$acc6,$acc6,$acc6
+	addze	$acc7,$zero
+
+	addc	$acc1,$acc1,$a0		# +a[i]*a[i]
+	 li	$bi,38
+	adde	$acc2,$acc2,$t1
+	adde	$acc3,$acc3,$a1
+	adde	$acc4,$acc4,$t2
+	adde	$acc5,$acc5,$a2
+	adde	$acc6,$acc6,$t3
+	adde	$acc7,$acc7,$a3
+
+	mulld	$t0,$acc4,$bi
+	mulld	$t1,$acc5,$bi
+	mulld	$t2,$acc6,$bi
+	mulld	$t3,$acc7,$bi
+
+	addc	$acc0,$acc0,$t0
+	mulhdu	$t0,$acc4,$bi
+	adde	$acc1,$acc1,$t1
+	mulhdu	$t1,$acc5,$bi
+	adde	$acc2,$acc2,$t2
+	mulhdu	$t2,$acc6,$bi
+	adde	$acc3,$acc3,$t3
+	mulhdu	$t3,$acc7,$bi
+	addze	$acc4,$zero
+
+	addc	$acc1,$acc1,$t0
+	adde	$acc2,$acc2,$t1
+	adde	$acc3,$acc3,$t2
+	adde	$acc4,$acc4,$t3
+
+	mulld	$acc4,$acc4,$bi
+
+	addc	$acc0,$acc0,$acc4
+	addze	$acc1,$acc1
+	addze	$acc2,$acc2
+	addze	$acc3,$acc3
+
+	subfe	$acc4,$acc4,$acc4	# carry -> ~mask
+	std	$acc1,8($rp)
+	andc	$acc4,$bi,$acc4
+	std	$acc2,16($rp)
+	add	$acc0,$acc0,$acc4
+	std	$acc3,24($rp)
+	std	$acc0,0($rp)
+
+	ld	r22,`$FRAME-8*10`($sp)
+	ld	r23,`$FRAME-8*9`($sp)
+	ld	r24,`$FRAME-8*8`($sp)
+	ld	r25,`$FRAME-8*7`($sp)
+	ld	r26,`$FRAME-8*6`($sp)
+	ld	r27,`$FRAME-8*5`($sp)
+	ld	r28,`$FRAME-8*4`($sp)
+	ld	r29,`$FRAME-8*3`($sp)
+	ld	r30,`$FRAME-8*2`($sp)
+	ld	r31,`$FRAME-8*1`($sp)
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,10,2,0
+	.long	0
+.size	x25519_fe64_sqr,.-x25519_fe64_sqr
+
+.globl	x25519_fe64_mul121666
+.type	x25519_fe64_mul121666,\@function
+.align	5
+x25519_fe64_mul121666:
+	lis	$bi,`65536>>16`
+	ori	$bi,$bi,`121666-65536`
+
+	ld	$t0,0($ap)
+	ld	$t1,8($ap)
+	ld	$bp,16($ap)
+	ld	$ap,24($ap)
+
+	mulld	$a0,$t0,$bi
+	mulhdu	$t0,$t0,$bi
+	mulld	$a1,$t1,$bi
+	mulhdu	$t1,$t1,$bi
+	mulld	$a2,$bp,$bi
+	mulhdu	$bp,$bp,$bi
+	mulld	$a3,$ap,$bi
+	mulhdu	$ap,$ap,$bi
+
+	addc	$a1,$a1,$t0
+	adde	$a2,$a2,$t1
+	adde	$a3,$a3,$bp
+	addze	$ap,    $ap
+
+	mulli	$ap,$ap,38
+
+	addc	$a0,$a0,$ap
+	addze	$a1,$a1
+	addze	$a2,$a2
+	addze	$a3,$a3
+
+	subfe	$t1,$t1,$t1		# carry -> ~mask
+	std	$a1,8($rp)
+	andc	$t0,$t0,$t1
+	std	$a2,16($rp)
+	add	$a0,$a0,$t0
+	std	$a3,24($rp)
+	std	$a0,0($rp)
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,2,0
+	.long	0
+.size	x25519_fe64_mul121666,.-x25519_fe64_mul121666
+
+.globl	x25519_fe64_add
+.type	x25519_fe64_add,\@function
+.align	5
+x25519_fe64_add:
+	ld	$a0,0($ap)
+	ld	$t0,0($bp)
+	ld	$a1,8($ap)
+	ld	$t1,8($bp)
+	ld	$a2,16($ap)
+	ld	$bi,16($bp)
+	ld	$a3,24($ap)
+	ld	$bp,24($bp)
+
+	addc	$a0,$a0,$t0
+	adde	$a1,$a1,$t1
+	adde	$a2,$a2,$bi
+	adde	$a3,$a3,$bp
+
+	li	$t0,38
+	subfe	$t1,$t1,$t1		# carry -> ~mask
+	andc	$t1,$t0,$t1
+
+	addc	$a0,$a0,$t1
+	addze	$a1,$a1
+	addze	$a2,$a2
+	addze	$a3,$a3
+
+	subfe	$t1,$t1,$t1		# carry -> ~mask
+	std	$a1,8($rp)
+	andc	$t0,$t0,$t1
+	std	$a2,16($rp)
+	add	$a0,$a0,$t0
+	std	$a3,24($rp)
+	std	$a0,0($rp)
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+	.long	0
+.size	x25519_fe64_add,.-x25519_fe64_add
+
+.globl	x25519_fe64_sub
+.type	x25519_fe64_sub,\@function
+.align	5
+x25519_fe64_sub:
+	ld	$a0,0($ap)
+	ld	$t0,0($bp)
+	ld	$a1,8($ap)
+	ld	$t1,8($bp)
+	ld	$a2,16($ap)
+	ld	$bi,16($bp)
+	ld	$a3,24($ap)
+	ld	$bp,24($bp)
+
+	subfc	$a0,$t0,$a0
+	subfe	$a1,$t1,$a1
+	subfe	$a2,$bi,$a2
+	subfe	$a3,$bp,$a3
+
+	li	$t0,38
+	subfe	$t1,$t1,$t1		# borrow -> mask
+	xor	$zero,$zero,$zero
+	and	$t1,$t0,$t1
+
+	subfc	$a0,$t1,$a0
+	subfe	$a1,$zero,$a1
+	subfe	$a2,$zero,$a2
+	subfe	$a3,$zero,$a3
+
+	subfe	$t1,$t1,$t1		# borrow -> mask
+	std	$a1,8($rp)
+	and	$t0,$t0,$t1
+	std	$a2,16($rp)
+	subf	$a0,$t0,$a0
+	std	$a3,24($rp)
+	std	$a0,0($rp)
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+	.long	0
+.size	x25519_fe64_sub,.-x25519_fe64_sub
+
+.globl	x25519_fe64_tobytes
+.type	x25519_fe64_tobytes,\@function
+.align	5
+x25519_fe64_tobytes:
+	ld	$a3,24($ap)
+	ld	$a0,0($ap)
+	ld	$a1,8($ap)
+	ld	$a2,16($ap)
+
+	sradi	$t0,$a3,63		# most significant bit -> mask
+	li	$t1,19
+	and	$t0,$t0,$t1
+	sldi	$a3,$a3,1
+	add	$t0,$t0,$t1		# compare to modulus in the same go
+	srdi	$a3,$a3,1		# most signifcant bit cleared
+
+	addc	$a0,$a0,$t0
+	addze	$a1,$a1
+	addze	$a2,$a2
+	addze	$a3,$a3
+
+	xor	$zero,$zero,$zero
+	sradi	$t0,$a3,63		# most significant bit -> mask
+	sldi	$a3,$a3,1
+	andc	$t0,$t1,$t0
+	srdi	$a3,$a3,1		# most signifcant bit cleared
+
+	subi	$rp,$rp,1
+	subfc	$a0,$t0,$a0
+	subfe	$a1,$zero,$a1
+	subfe	$a2,$zero,$a2
+	subfe	$a3,$zero,$a3
+
+___
+for (my @a=($a0,$a1,$a2,$a3), my $i=0; $i<4; shift(@a), $i++) {
+$code.=<<___;
+	srdi	$t0,@a[0],8
+	stbu	@a[0],1($rp)
+	srdi	@a[0],@a[0],16
+	stbu	$t0,1($rp)
+	srdi	$t0,@a[0],8
+	stbu	@a[0],1($rp)
+	srdi	@a[0],@a[0],16
+	stbu	$t0,1($rp)
+	srdi	$t0,@a[0],8
+	stbu	@a[0],1($rp)
+	srdi	@a[0],@a[0],16
+	stbu	$t0,1($rp)
+	srdi	$t0,@a[0],8
+	stbu	@a[0],1($rp)
+	stbu	$t0,1($rp)
+___
+}
+$code.=<<___;
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,2,0
+	.long	0
+.size	x25519_fe64_tobytes,.-x25519_fe64_tobytes
+___
+}
+####################################################### base 2^51
+{
+my ($bi,$a0,$a1,$a2,$a3,$a4,$t0, $t1,
+    $h0lo,$h0hi,$h1lo,$h1hi,$h2lo,$h2hi,$h3lo,$h3hi,$h4lo,$h4hi) =
+    map("r$_",(6..12,21..31));
+my $mask = "r0";
+my $FRAME = 18*8;
+
+$code.=<<___;
+.text
+
+.globl	x25519_fe51_mul
+.type	x25519_fe51_mul,\@function
+.align	5
+x25519_fe51_mul:
+	stdu	$sp,-$FRAME($sp)
+	std	r21,`$FRAME-8*11`($sp)
+	std	r22,`$FRAME-8*10`($sp)
+	std	r23,`$FRAME-8*9`($sp)
+	std	r24,`$FRAME-8*8`($sp)
+	std	r25,`$FRAME-8*7`($sp)
+	std	r26,`$FRAME-8*6`($sp)
+	std	r27,`$FRAME-8*5`($sp)
+	std	r28,`$FRAME-8*4`($sp)
+	std	r29,`$FRAME-8*3`($sp)
+	std	r30,`$FRAME-8*2`($sp)
+	std	r31,`$FRAME-8*1`($sp)
+
+	ld	$bi,0($bp)
+	ld	$a0,0($ap)
+	ld	$a1,8($ap)
+	ld	$a2,16($ap)
+	ld	$a3,24($ap)
+	ld	$a4,32($ap)
+
+	mulld	$h0lo,$a0,$bi		# a[0]*b[0]
+	mulhdu	$h0hi,$a0,$bi
+
+	mulld	$h1lo,$a1,$bi		# a[1]*b[0]
+	mulhdu	$h1hi,$a1,$bi
+
+	 mulld	$h4lo,$a4,$bi		# a[4]*b[0]
+	 mulhdu	$h4hi,$a4,$bi
+	 ld	$ap,8($bp)
+	 mulli	$a4,$a4,19
+
+	mulld	$h2lo,$a2,$bi		# a[2]*b[0]
+	mulhdu	$h2hi,$a2,$bi
+
+	mulld	$h3lo,$a3,$bi		# a[3]*b[0]
+	mulhdu	$h3hi,$a3,$bi
+___
+for(my @a=($a0,$a1,$a2,$a3,$a4),
+    my $i=1; $i<4; $i++) {
+	($ap,$bi) = ($bi,$ap);
+$code.=<<___;
+	mulld	$t0,@a[4],$bi
+	mulhdu	$t1,@a[4],$bi
+	addc	$h0lo,$h0lo,$t0
+	adde	$h0hi,$h0hi,$t1
+
+	mulld	$t0,@a[0],$bi
+	mulhdu	$t1,@a[0],$bi
+	addc	$h1lo,$h1lo,$t0
+	adde	$h1hi,$h1hi,$t1
+
+	 mulld	$t0,@a[3],$bi
+	 mulhdu	$t1,@a[3],$bi
+	 ld	$ap,`8*($i+1)`($bp)
+	 mulli	@a[3],@a[3],19
+	 addc	$h4lo,$h4lo,$t0
+	 adde	$h4hi,$h4hi,$t1
+
+	mulld	$t0,@a[1],$bi
+	mulhdu	$t1,@a[1],$bi
+	addc	$h2lo,$h2lo,$t0
+	adde	$h2hi,$h2hi,$t1
+
+	mulld	$t0,@a[2],$bi
+	mulhdu	$t1,@a[2],$bi
+	addc	$h3lo,$h3lo,$t0
+	adde	$h3hi,$h3hi,$t1
+___
+	unshift(@a,pop(@a));
+}
+	($ap,$bi) = ($bi,$ap);
+$code.=<<___;
+	mulld	$t0,$a1,$bi
+	mulhdu	$t1,$a1,$bi
+	addc	$h0lo,$h0lo,$t0
+	adde	$h0hi,$h0hi,$t1
+
+	mulld	$t0,$a2,$bi
+	mulhdu	$t1,$a2,$bi
+	addc	$h1lo,$h1lo,$t0
+	adde	$h1hi,$h1hi,$t1
+
+	mulld	$t0,$a3,$bi
+	mulhdu	$t1,$a3,$bi
+	addc	$h2lo,$h2lo,$t0
+	adde	$h2hi,$h2hi,$t1
+
+	mulld	$t0,$a4,$bi
+	mulhdu	$t1,$a4,$bi
+	addc	$h3lo,$h3lo,$t0
+	adde	$h3hi,$h3hi,$t1
+
+	mulld	$t0,$a0,$bi
+	mulhdu	$t1,$a0,$bi
+	addc	$h4lo,$h4lo,$t0
+	adde	$h4hi,$h4hi,$t1
+
+.Lfe51_reduce:
+	li	$mask,-1
+	srdi	$mask,$mask,13		# 0x7ffffffffffff
+
+	srdi	$t0,$h2lo,51
+	and	$a2,$h2lo,$mask
+	insrdi	$t0,$h2hi,51,0		# h2>>51
+	 srdi	$t1,$h0lo,51
+	 and	$a0,$h0lo,$mask
+	 insrdi	$t1,$h0hi,51,0		# h0>>51
+	addc	$h3lo,$h3lo,$t0
+	addze	$h3hi,$h3hi
+	 addc	$h1lo,$h1lo,$t1
+	 addze	$h1hi,$h1hi
+
+	srdi	$t0,$h3lo,51
+	and	$a3,$h3lo,$mask
+	insrdi	$t0,$h3hi,51,0		# h3>>51
+	 srdi	$t1,$h1lo,51
+	 and	$a1,$h1lo,$mask
+	 insrdi	$t1,$h1hi,51,0		# h1>>51
+	addc	$h4lo,$h4lo,$t0
+	addze	$h4hi,$h4hi
+	 add	$a2,$a2,$t1
+
+	srdi	$t0,$h4lo,51
+	and	$a4,$h4lo,$mask
+	insrdi	$t0,$h4hi,51,0
+	mulli	$t0,$t0,19		# (h4 >> 51) * 19
+
+	add	$a0,$a0,$t0
+
+	srdi	$t1,$a2,51
+	and	$a2,$a2,$mask
+	add	$a3,$a3,$t1
+
+	srdi	$t0,$a0,51
+	and	$a0,$a0,$mask
+	add	$a1,$a1,$t0
+
+	std	$a2,16($rp)
+	std	$a3,24($rp)
+	std	$a4,32($rp)
+	std	$a0,0($rp)
+	std	$a1,8($rp)
+
+	ld	r21,`$FRAME-8*11`($sp)
+	ld	r22,`$FRAME-8*10`($sp)
+	ld	r23,`$FRAME-8*9`($sp)
+	ld	r24,`$FRAME-8*8`($sp)
+	ld	r25,`$FRAME-8*7`($sp)
+	ld	r26,`$FRAME-8*6`($sp)
+	ld	r27,`$FRAME-8*5`($sp)
+	ld	r28,`$FRAME-8*4`($sp)
+	ld	r29,`$FRAME-8*3`($sp)
+	ld	r30,`$FRAME-8*2`($sp)
+	ld	r31,`$FRAME-8*1`($sp)
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,4,0,0x80,11,3,0
+	.long	0
+.size	x25519_fe51_mul,.-x25519_fe51_mul
+___
+{
+my ($a0,$a1,$a2,$a3,$a4,$t0,$t1) = ($a0,$a1,$a2,$a3,$a4,$t0,$t1);
+$code.=<<___;
+.globl	x25519_fe51_sqr
+.type	x25519_fe51_sqr,\@function
+.align	5
+x25519_fe51_sqr:
+	stdu	$sp,-$FRAME($sp)
+	std	r21,`$FRAME-8*11`($sp)
+	std	r22,`$FRAME-8*10`($sp)
+	std	r23,`$FRAME-8*9`($sp)
+	std	r24,`$FRAME-8*8`($sp)
+	std	r25,`$FRAME-8*7`($sp)
+	std	r26,`$FRAME-8*6`($sp)
+	std	r27,`$FRAME-8*5`($sp)
+	std	r28,`$FRAME-8*4`($sp)
+	std	r29,`$FRAME-8*3`($sp)
+	std	r30,`$FRAME-8*2`($sp)
+	std	r31,`$FRAME-8*1`($sp)
+
+	ld	$a0,0($ap)
+	ld	$a1,8($ap)
+	ld	$a2,16($ap)
+	ld	$a3,24($ap)
+	ld	$a4,32($ap)
+
+	add	$bi,$a0,$a0		# a[0]*2
+	mulli	$t1,$a4,19		# a[4]*19
+
+	mulld	$h0lo,$a0,$a0
+	mulhdu	$h0hi,$a0,$a0
+	mulld	$h1lo,$a1,$bi
+	mulhdu	$h1hi,$a1,$bi
+	mulld	$h2lo,$a2,$bi
+	mulhdu	$h2hi,$a2,$bi
+	mulld	$h3lo,$a3,$bi
+	mulhdu	$h3hi,$a3,$bi
+	mulld	$h4lo,$a4,$bi
+	mulhdu	$h4hi,$a4,$bi
+	add	$bi,$a1,$a1		# a[1]*2
+___
+	($a4,$t1) = ($t1,$a4);
+$code.=<<___;
+	mulld	$t0,$t1,$a4
+	mulhdu	$t1,$t1,$a4
+	addc	$h3lo,$h3lo,$t0
+	adde	$h3hi,$h3hi,$t1
+
+	mulli	$bp,$a3,19		# a[3]*19
+
+	mulld	$t0,$a1,$a1
+	mulhdu	$t1,$a1,$a1
+	addc	$h2lo,$h2lo,$t0
+	adde	$h2hi,$h2hi,$t1
+	mulld	$t0,$a2,$bi
+	mulhdu	$t1,$a2,$bi
+	addc	$h3lo,$h3lo,$t0
+	adde	$h3hi,$h3hi,$t1
+	mulld	$t0,$a3,$bi
+	mulhdu	$t1,$a3,$bi
+	addc	$h4lo,$h4lo,$t0
+	adde	$h4hi,$h4hi,$t1
+	mulld	$t0,$a4,$bi
+	mulhdu	$t1,$a4,$bi
+	add	$bi,$a3,$a3		# a[3]*2
+	addc	$h0lo,$h0lo,$t0
+	adde	$h0hi,$h0hi,$t1
+___
+	($a3,$t1) = ($bp,$a3);
+$code.=<<___;
+	mulld	$t0,$t1,$a3
+	mulhdu	$t1,$t1,$a3
+	addc	$h1lo,$h1lo,$t0
+	adde	$h1hi,$h1hi,$t1
+	mulld	$t0,$bi,$a4
+	mulhdu	$t1,$bi,$a4
+	add	$bi,$a2,$a2		# a[2]*2
+	addc	$h2lo,$h2lo,$t0
+	adde	$h2hi,$h2hi,$t1
+
+	mulld	$t0,$a2,$a2
+	mulhdu	$t1,$a2,$a2
+	addc	$h4lo,$h4lo,$t0
+	adde	$h4hi,$h4hi,$t1
+	mulld	$t0,$a3,$bi
+	mulhdu	$t1,$a3,$bi
+	addc	$h0lo,$h0lo,$t0
+	adde	$h0hi,$h0hi,$t1
+	mulld	$t0,$a4,$bi
+	mulhdu	$t1,$a4,$bi
+	addc	$h1lo,$h1lo,$t0
+	adde	$h1hi,$h1hi,$t1
+
+	b	.Lfe51_reduce
+	.long	0
+	.byte	0,12,4,0,0x80,11,2,0
+	.long	0
+.size	x25519_fe51_sqr,.-x25519_fe51_sqr
+___
+}
+$code.=<<___;
+.globl	x25519_fe51_mul121666
+.type	x25519_fe51_mul121666,\@function
+.align	5
+x25519_fe51_mul121666:
+	stdu	$sp,-$FRAME($sp)
+	std	r21,`$FRAME-8*11`($sp)
+	std	r22,`$FRAME-8*10`($sp)
+	std	r23,`$FRAME-8*9`($sp)
+	std	r24,`$FRAME-8*8`($sp)
+	std	r25,`$FRAME-8*7`($sp)
+	std	r26,`$FRAME-8*6`($sp)
+	std	r27,`$FRAME-8*5`($sp)
+	std	r28,`$FRAME-8*4`($sp)
+	std	r29,`$FRAME-8*3`($sp)
+	std	r30,`$FRAME-8*2`($sp)
+	std	r31,`$FRAME-8*1`($sp)
+
+	lis	$bi,`65536>>16`
+	ori	$bi,$bi,`121666-65536`
+	ld	$a0,0($ap)
+	ld	$a1,8($ap)
+	ld	$a2,16($ap)
+	ld	$a3,24($ap)
+	ld	$a4,32($ap)
+
+	mulld	$h0lo,$a0,$bi		# a[0]*121666
+	mulhdu	$h0hi,$a0,$bi
+	mulld	$h1lo,$a1,$bi		# a[1]*121666
+	mulhdu	$h1hi,$a1,$bi
+	mulld	$h2lo,$a2,$bi		# a[2]*121666
+	mulhdu	$h2hi,$a2,$bi
+	mulld	$h3lo,$a3,$bi		# a[3]*121666
+	mulhdu	$h3hi,$a3,$bi
+	mulld	$h4lo,$a4,$bi		# a[4]*121666
+	mulhdu	$h4hi,$a4,$bi
+
+	b	.Lfe51_reduce
+	.long	0
+	.byte	0,12,4,0,0x80,11,2,0
+	.long	0
+.size	x25519_fe51_mul121666,.-x25519_fe51_mul121666
+___
+}
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/x25519-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/x25519-x86_64.pl
new file mode 100755
index 000000000..18dc6af9f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/asm/x25519-x86_64.pl
@@ -0,0 +1,1117 @@
+#!/usr/bin/env perl
+# Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# X25519 lower-level primitives for x86_64.
+#
+# February 2018.
+#
+# This module implements radix 2^51 multiplication and squaring, and
+# radix 2^64 multiplication, squaring, addition, subtraction and final
+# reduction. Latter radix is used on ADCX/ADOX-capable processors such
+# as Broadwell. On related note one should mention that there are
+# vector implementations that provide significantly better performance
+# on some processors(*), but they are large and overly complex. Which
+# in combination with them being effectively processor-specific makes
+# the undertaking hard to justify. The goal for this implementation
+# is rather versatility and simplicity [and ultimately formal
+# verification].
+#
+# (*)	For example sandy2x should provide ~30% improvement on Sandy
+#	Bridge, but only nominal ~5% on Haswell [and big loss on
+#	Broadwell and successors].
+#
+######################################################################
+# Improvement coefficients:
+#
+#			amd64-51(*)	gcc-5.x(**)
+#
+# P4			+22%		+40%
+# Sandy Bridge		-3%		+11%
+# Haswell		-1%		+13%
+# Broadwell(***)	+30%		+35%
+# Skylake(***)		+33%		+47%
+# Silvermont		+20%		+26%
+# Goldmont		+40%		+50%
+# Bulldozer		+20%		+9%
+# Ryzen(***)		+43%		+40%
+# VIA			+170%		+120%
+#
+# (*)	amd64-51 is popular assembly implementation with 2^51 radix,
+#	only multiplication and squaring subroutines were linked
+#	for comparison, but not complete ladder step; gain on most
+#	processors is because this module refrains from shld, and
+#	minor regression on others is because this does result in
+#	higher instruction count;
+# (**)	compiler is free to inline functions, in assembly one would
+#	need to implement ladder step to do that, and it will improve
+#	performance by several percent;
+# (***)	ADCX/ADOX result for 2^64 radix, there is no corresponding
+#	C implementation, so that comparison is always against
+#	2^51 radix;
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$addx = ($1>=2.23);
+}
+
+if (!$addx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	    `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$addx = ($1>=2.10);
+}
+
+if (!$addx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	    `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$addx = ($1>=12);
+}
+
+if (!$addx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([3-9])\.([0-9]+)/) {
+	my $ver = $2 + $3/100.0;	# 3.1->3.01, 3.10->3.10
+	$addx = ($ver>=3.03);
+}
+
+$code.=<<___;
+.text
+
+.globl	x25519_fe51_mul
+.type	x25519_fe51_mul,\@function,3
+.align	32
+x25519_fe51_mul:
+.cfi_startproc
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	lea	-8*5(%rsp),%rsp
+.cfi_adjust_cfa_offset	40
+.Lfe51_mul_body:
+
+	mov	8*0(%rsi),%rax		# f[0]
+	mov	8*0(%rdx),%r11		# load g[0-4]
+	mov	8*1(%rdx),%r12
+	mov	8*2(%rdx),%r13
+	mov	8*3(%rdx),%rbp
+	mov	8*4(%rdx),%r14
+
+	mov	%rdi,8*4(%rsp)		# offload 1st argument
+	mov	%rax,%rdi
+	mulq	%r11			# f[0]*g[0]
+	mov	%r11,8*0(%rsp)		# offload g[0]
+	mov	%rax,%rbx		# %rbx:%rcx = h0
+	mov	%rdi,%rax
+	mov	%rdx,%rcx
+	mulq	%r12			# f[0]*g[1]
+	mov	%r12,8*1(%rsp)		# offload g[1]
+	mov	%rax,%r8		# %r8:%r9 = h1
+	mov	%rdi,%rax
+	lea	(%r14,%r14,8),%r15
+	mov	%rdx,%r9
+	mulq	%r13			# f[0]*g[2]
+	mov	%r13,8*2(%rsp)		# offload g[2]
+	mov	%rax,%r10		# %r10:%r11 = h2
+	mov	%rdi,%rax
+	lea	(%r14,%r15,2),%rdi	# g[4]*19
+	mov	%rdx,%r11
+	mulq	%rbp			# f[0]*g[3]
+	mov	%rax,%r12		# %r12:%r13 = h3
+	mov	8*0(%rsi),%rax		# f[0]
+	mov	%rdx,%r13
+	mulq	%r14			# f[0]*g[4]
+	mov	%rax,%r14		# %r14:%r15 = h4
+	mov	8*1(%rsi),%rax		# f[1]
+	mov	%rdx,%r15
+
+	mulq	%rdi			# f[1]*g[4]*19
+	add	%rax,%rbx
+	mov	8*2(%rsi),%rax		# f[2]
+	adc	%rdx,%rcx
+	mulq	%rdi			# f[2]*g[4]*19
+	add	%rax,%r8
+	mov	8*3(%rsi),%rax		# f[3]
+	adc	%rdx,%r9
+	mulq	%rdi			# f[3]*g[4]*19
+	add	%rax,%r10
+	mov	8*4(%rsi),%rax		# f[4]
+	adc	%rdx,%r11
+	mulq	%rdi			# f[4]*g[4]*19
+	imulq	\$19,%rbp,%rdi		# g[3]*19
+	add	%rax,%r12
+	mov	8*1(%rsi),%rax		# f[1]
+	adc	%rdx,%r13
+	mulq	%rbp			# f[1]*g[3]
+	mov	8*2(%rsp),%rbp		# g[2]
+	add	%rax,%r14
+	mov	8*2(%rsi),%rax		# f[2]
+	adc	%rdx,%r15
+
+	mulq	%rdi			# f[2]*g[3]*19
+	add	%rax,%rbx
+	mov	8*3(%rsi),%rax		# f[3]
+	adc	%rdx,%rcx
+	mulq	%rdi			# f[3]*g[3]*19
+	add	%rax,%r8
+	mov	8*4(%rsi),%rax		# f[4]
+	adc	%rdx,%r9
+	mulq	%rdi			# f[4]*g[3]*19
+	imulq	\$19,%rbp,%rdi		# g[2]*19
+	add	%rax,%r10
+	mov	8*1(%rsi),%rax		# f[1]
+	adc	%rdx,%r11
+	mulq	%rbp			# f[1]*g[2]
+	add	%rax,%r12
+	mov	8*2(%rsi),%rax		# f[2]
+	adc	%rdx,%r13
+	mulq	%rbp			# f[2]*g[2]
+	mov	8*1(%rsp),%rbp		# g[1]
+	add	%rax,%r14
+	mov	8*3(%rsi),%rax		# f[3]
+	adc	%rdx,%r15
+
+	mulq	%rdi			# f[3]*g[2]*19
+	add	%rax,%rbx
+	mov	8*4(%rsi),%rax		# f[3]
+	adc	%rdx,%rcx
+	mulq	%rdi			# f[4]*g[2]*19
+	add	%rax,%r8
+	mov	8*1(%rsi),%rax		# f[1]
+	adc	%rdx,%r9
+	mulq	%rbp			# f[1]*g[1]
+	imulq	\$19,%rbp,%rdi
+	add	%rax,%r10
+	mov	8*2(%rsi),%rax		# f[2]
+	adc	%rdx,%r11
+	mulq	%rbp			# f[2]*g[1]
+	add	%rax,%r12
+	mov	8*3(%rsi),%rax		# f[3]
+	adc	%rdx,%r13
+	mulq	%rbp			# f[3]*g[1]
+	mov	8*0(%rsp),%rbp		# g[0]
+	add	%rax,%r14
+	mov	8*4(%rsi),%rax		# f[4]
+	adc	%rdx,%r15
+
+	mulq	%rdi			# f[4]*g[1]*19
+	add	%rax,%rbx
+	mov	8*1(%rsi),%rax		# f[1]
+	adc	%rdx,%rcx
+	mul	%rbp			# f[1]*g[0]
+	add	%rax,%r8
+	mov	8*2(%rsi),%rax		# f[2]
+	adc	%rdx,%r9
+	mul	%rbp			# f[2]*g[0]
+	add	%rax,%r10
+	mov	8*3(%rsi),%rax		# f[3]
+	adc	%rdx,%r11
+	mul	%rbp			# f[3]*g[0]
+	add	%rax,%r12
+	mov	8*4(%rsi),%rax		# f[4]
+	adc	%rdx,%r13
+	mulq	%rbp			# f[4]*g[0]
+	add	%rax,%r14
+	adc	%rdx,%r15
+
+	mov	8*4(%rsp),%rdi		# restore 1st argument
+	jmp	.Lreduce51
+.Lfe51_mul_epilogue:
+.cfi_endproc
+.size	x25519_fe51_mul,.-x25519_fe51_mul
+
+.globl	x25519_fe51_sqr
+.type	x25519_fe51_sqr,\@function,2
+.align	32
+x25519_fe51_sqr:
+.cfi_startproc
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	lea	-8*5(%rsp),%rsp
+.cfi_adjust_cfa_offset	40
+.Lfe51_sqr_body:
+
+	mov	8*0(%rsi),%rax		# g[0]
+	mov	8*2(%rsi),%r15		# g[2]
+	mov	8*4(%rsi),%rbp		# g[4]
+
+	mov	%rdi,8*4(%rsp)		# offload 1st argument
+	lea	(%rax,%rax),%r14
+	mulq	%rax			# g[0]*g[0]
+	mov	%rax,%rbx
+	mov	8*1(%rsi),%rax		# g[1]
+	mov	%rdx,%rcx
+	mulq	%r14			# 2*g[0]*g[1]
+	mov	%rax,%r8
+	mov	%r15,%rax
+	mov	%r15,8*0(%rsp)		# offload g[2]
+	mov	%rdx,%r9
+	mulq	%r14			# 2*g[0]*g[2]
+	mov	%rax,%r10
+	mov	8*3(%rsi),%rax
+	mov	%rdx,%r11
+	imulq	\$19,%rbp,%rdi		# g[4]*19
+	mulq	%r14			# 2*g[0]*g[3]
+	mov	%rax,%r12
+	mov	%rbp,%rax
+	mov	%rdx,%r13
+	mulq	%r14			# 2*g[0]*g[4]
+	mov	%rax,%r14
+	mov	%rbp,%rax
+	mov	%rdx,%r15
+
+	mulq	%rdi			# g[4]*g[4]*19
+	add	%rax,%r12
+	mov	8*1(%rsi),%rax		# g[1]
+	adc	%rdx,%r13
+
+	mov	8*3(%rsi),%rsi		# g[3]
+	lea	(%rax,%rax),%rbp
+	mulq	%rax			# g[1]*g[1]
+	add	%rax,%r10
+	mov	8*0(%rsp),%rax		# g[2]
+	adc	%rdx,%r11
+	mulq	%rbp			# 2*g[1]*g[2]
+	add	%rax,%r12
+	mov	%rbp,%rax
+	adc	%rdx,%r13
+	mulq	%rsi			# 2*g[1]*g[3]
+	add	%rax,%r14
+	mov	%rbp,%rax
+	adc	%rdx,%r15
+	imulq	\$19,%rsi,%rbp		# g[3]*19
+	mulq	%rdi			# 2*g[1]*g[4]*19
+	add	%rax,%rbx
+	lea	(%rsi,%rsi),%rax
+	adc	%rdx,%rcx
+
+	mulq	%rdi			# 2*g[3]*g[4]*19
+	add	%rax,%r10
+	mov	%rsi,%rax
+	adc	%rdx,%r11
+	mulq	%rbp			# g[3]*g[3]*19
+	add	%rax,%r8
+	mov	8*0(%rsp),%rax		# g[2]
+	adc	%rdx,%r9
+
+	lea	(%rax,%rax),%rsi
+	mulq	%rax			# g[2]*g[2]
+	add	%rax,%r14
+	mov	%rbp,%rax
+	adc	%rdx,%r15
+	mulq	%rsi			# 2*g[2]*g[3]*19
+	add	%rax,%rbx
+	mov	%rsi,%rax
+	adc	%rdx,%rcx
+	mulq	%rdi			# 2*g[2]*g[4]*19
+	add	%rax,%r8
+	adc	%rdx,%r9
+
+	mov	8*4(%rsp),%rdi		# restore 1st argument
+	jmp	.Lreduce51
+
+.align	32
+.Lreduce51:
+	mov	\$0x7ffffffffffff,%rbp
+
+	mov	%r10,%rdx
+	shr	\$51,%r10
+	shl	\$13,%r11
+	and	%rbp,%rdx		# %rdx = g2 = h2 & mask
+	or	%r10,%r11		# h2>>51
+	add	%r11,%r12
+	adc	\$0,%r13		# h3 += h2>>51
+
+	mov	%rbx,%rax
+	shr	\$51,%rbx
+	shl	\$13,%rcx
+	and	%rbp,%rax		# %rax = g0 = h0 & mask
+	or	%rbx,%rcx		# h0>>51
+	add	%rcx,%r8		# h1 += h0>>51
+	adc	\$0,%r9
+
+	mov	%r12,%rbx
+	shr	\$51,%r12
+	shl	\$13,%r13
+	and	%rbp,%rbx		# %rbx = g3 = h3 & mask
+	or	%r12,%r13		# h3>>51
+	add	%r13,%r14		# h4 += h3>>51
+	adc	\$0,%r15
+
+	mov	%r8,%rcx
+	shr	\$51,%r8
+	shl	\$13,%r9
+	and	%rbp,%rcx		# %rcx = g1 = h1 & mask
+	or	%r8,%r9
+	add	%r9,%rdx		# g2 += h1>>51
+
+	mov	%r14,%r10
+	shr	\$51,%r14
+	shl	\$13,%r15
+	and	%rbp,%r10		# %r10 = g4 = h0 & mask
+	or	%r14,%r15		# h0>>51
+
+	lea	(%r15,%r15,8),%r14
+	lea	(%r15,%r14,2),%r15
+	add	%r15,%rax		# g0 += (h0>>51)*19
+
+	mov	%rdx,%r8
+	and	%rbp,%rdx		# g2 &= mask
+	shr	\$51,%r8
+	add	%r8,%rbx		# g3 += g2>>51
+
+	mov	%rax,%r9
+	and	%rbp,%rax		# g0 &= mask
+	shr	\$51,%r9
+	add	%r9,%rcx		# g1 += g0>>51
+
+	mov	%rax,8*0(%rdi)		# save the result
+	mov	%rcx,8*1(%rdi)
+	mov	%rdx,8*2(%rdi)
+	mov	%rbx,8*3(%rdi)
+	mov	%r10,8*4(%rdi)
+
+	mov	8*5(%rsp),%r15
+.cfi_restore	%r15
+	mov	8*6(%rsp),%r14
+.cfi_restore	%r14
+	mov	8*7(%rsp),%r13
+.cfi_restore	%r13
+	mov	8*8(%rsp),%r12
+.cfi_restore	%r12
+	mov	8*9(%rsp),%rbx
+.cfi_restore	%rbx
+	mov	8*10(%rsp),%rbp
+.cfi_restore	%rbp
+	lea	8*11(%rsp),%rsp
+.cfi_adjust_cfa_offset	88
+.Lfe51_sqr_epilogue:
+	ret
+.cfi_endproc
+.size	x25519_fe51_sqr,.-x25519_fe51_sqr
+
+.globl	x25519_fe51_mul121666
+.type	x25519_fe51_mul121666,\@function,2
+.align	32
+x25519_fe51_mul121666:
+.cfi_startproc
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	lea	-8*5(%rsp),%rsp
+.cfi_adjust_cfa_offset	40
+.Lfe51_mul121666_body:
+	mov	\$121666,%eax
+
+	mulq	8*0(%rsi)
+	mov	%rax,%rbx		# %rbx:%rcx = h0
+	mov	\$121666,%eax
+	mov	%rdx,%rcx
+	mulq	8*1(%rsi)
+	mov	%rax,%r8		# %r8:%r9 = h1
+	mov	\$121666,%eax
+	mov	%rdx,%r9
+	mulq	8*2(%rsi)
+	mov	%rax,%r10		# %r10:%r11 = h2
+	mov	\$121666,%eax
+	mov	%rdx,%r11
+	mulq	8*3(%rsi)
+	mov	%rax,%r12		# %r12:%r13 = h3
+	mov	\$121666,%eax		# f[0]
+	mov	%rdx,%r13
+	mulq	8*4(%rsi)
+	mov	%rax,%r14		# %r14:%r15 = h4
+	mov	%rdx,%r15
+
+	jmp	.Lreduce51
+.Lfe51_mul121666_epilogue:
+.cfi_endproc
+.size	x25519_fe51_mul121666,.-x25519_fe51_mul121666
+___
+########################################################################
+# Base 2^64 subroutines modulo 2*(2^255-19)
+#
+if ($addx) {
+my ($acc0,$acc1,$acc2,$acc3,$acc4,$acc5,$acc6,$acc7) = map("%r$_",(8..15));
+
+$code.=<<___;
+.extern	OPENSSL_ia32cap_P
+.globl	x25519_fe64_eligible
+.type	x25519_fe64_eligible,\@abi-omnipotent
+.align	32
+x25519_fe64_eligible:
+	mov	OPENSSL_ia32cap_P+8(%rip),%ecx
+	xor	%eax,%eax
+	and	\$0x80100,%ecx
+	cmp	\$0x80100,%ecx
+	cmove	%ecx,%eax
+	ret
+.size	x25519_fe64_eligible,.-x25519_fe64_eligible
+
+.globl	x25519_fe64_mul
+.type	x25519_fe64_mul,\@function,3
+.align	32
+x25519_fe64_mul:
+.cfi_startproc
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	push	%rdi			# offload dst
+.cfi_push	%rdi
+	lea	-8*2(%rsp),%rsp
+.cfi_adjust_cfa_offset	16
+.Lfe64_mul_body:
+
+	mov	%rdx,%rax
+	mov	8*0(%rdx),%rbp		# b[0]
+	mov	8*0(%rsi),%rdx		# a[0]
+	mov	8*1(%rax),%rcx		# b[1]
+	mov	8*2(%rax),$acc6		# b[2]
+	mov	8*3(%rax),$acc7		# b[3]
+
+	mulx	%rbp,$acc0,%rax		# a[0]*b[0]
+	xor	%edi,%edi		# cf=0,of=0
+	mulx	%rcx,$acc1,%rbx		# a[0]*b[1]
+	adcx	%rax,$acc1
+	mulx	$acc6,$acc2,%rax	# a[0]*b[2]
+	adcx	%rbx,$acc2
+	mulx	$acc7,$acc3,$acc4	# a[0]*b[3]
+	 mov	8*1(%rsi),%rdx		# a[1]
+	adcx	%rax,$acc3
+	mov	$acc6,(%rsp)		# offload b[2]
+	adcx	%rdi,$acc4		# cf=0
+
+	mulx	%rbp,%rax,%rbx		# a[1]*b[0]
+	adox	%rax,$acc1
+	adcx	%rbx,$acc2
+	mulx	%rcx,%rax,%rbx		# a[1]*b[1]
+	adox	%rax,$acc2
+	adcx	%rbx,$acc3
+	mulx	$acc6,%rax,%rbx		# a[1]*b[2]
+	adox	%rax,$acc3
+	adcx	%rbx,$acc4
+	mulx	$acc7,%rax,$acc5	# a[1]*b[3]
+	 mov	8*2(%rsi),%rdx		# a[2]
+	adox	%rax,$acc4
+	adcx	%rdi,$acc5		# cf=0
+	adox	%rdi,$acc5		# of=0
+
+	mulx	%rbp,%rax,%rbx		# a[2]*b[0]
+	adcx	%rax,$acc2
+	adox	%rbx,$acc3
+	mulx	%rcx,%rax,%rbx		# a[2]*b[1]
+	adcx	%rax,$acc3
+	adox	%rbx,$acc4
+	mulx	$acc6,%rax,%rbx		# a[2]*b[2]
+	adcx	%rax,$acc4
+	adox	%rbx,$acc5
+	mulx	$acc7,%rax,$acc6	# a[2]*b[3]
+	 mov	8*3(%rsi),%rdx		# a[3]
+	adcx	%rax,$acc5
+	adox	%rdi,$acc6		# of=0
+	adcx	%rdi,$acc6		# cf=0
+
+	mulx	%rbp,%rax,%rbx		# a[3]*b[0]
+	adox	%rax,$acc3
+	adcx	%rbx,$acc4
+	mulx	%rcx,%rax,%rbx		# a[3]*b[1]
+	adox	%rax,$acc4
+	adcx	%rbx,$acc5
+	mulx	(%rsp),%rax,%rbx	# a[3]*b[2]
+	adox	%rax,$acc5
+	adcx	%rbx,$acc6
+	mulx	$acc7,%rax,$acc7	# a[3]*b[3]
+	 mov	\$38,%edx
+	adox	%rax,$acc6
+	adcx	%rdi,$acc7		# cf=0
+	adox	%rdi,$acc7		# of=0
+
+	jmp	.Lreduce64
+.Lfe64_mul_epilogue:
+.cfi_endproc
+.size	x25519_fe64_mul,.-x25519_fe64_mul
+
+.globl	x25519_fe64_sqr
+.type	x25519_fe64_sqr,\@function,2
+.align	32
+x25519_fe64_sqr:
+.cfi_startproc
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	push	%rdi			# offload dst
+.cfi_push	%rdi
+	lea	-8*2(%rsp),%rsp
+.cfi_adjust_cfa_offset	16
+.Lfe64_sqr_body:
+
+	mov	8*0(%rsi),%rdx		# a[0]
+	mov	8*1(%rsi),%rcx		# a[1]
+	mov	8*2(%rsi),%rbp		# a[2]
+	mov	8*3(%rsi),%rsi		# a[3]
+
+	################################################################
+	mulx	%rdx,$acc0,$acc7	# a[0]*a[0]
+	mulx	%rcx,$acc1,%rax		# a[0]*a[1]
+	xor	%edi,%edi		# cf=0,of=0
+	mulx	%rbp,$acc2,%rbx		# a[0]*a[2]
+	adcx	%rax,$acc2
+	mulx	%rsi,$acc3,$acc4	# a[0]*a[3]
+	 mov	%rcx,%rdx		# a[1]
+	adcx	%rbx,$acc3
+	adcx	%rdi,$acc4		# cf=0
+
+	################################################################
+	mulx	%rbp,%rax,%rbx		# a[1]*a[2]
+	adox	%rax,$acc3
+	adcx	%rbx,$acc4
+	mulx	%rsi,%rax,$acc5		# a[1]*a[3]
+	 mov	%rbp,%rdx		# a[2]
+	adox	%rax,$acc4
+	adcx	%rdi,$acc5
+
+	################################################################
+	mulx	%rsi,%rax,$acc6		# a[2]*a[3]
+	 mov	%rcx,%rdx		# a[1]
+	adox	%rax,$acc5
+	adcx	%rdi,$acc6		# cf=0
+	adox	%rdi,$acc6		# of=0
+
+	 adcx	$acc1,$acc1		# acc1:6<<1
+	adox	$acc7,$acc1
+	 adcx	$acc2,$acc2
+	mulx	%rdx,%rax,%rbx		# a[1]*a[1]
+	 mov	%rbp,%rdx		# a[2]
+	 adcx	$acc3,$acc3
+	adox	%rax,$acc2
+	 adcx	$acc4,$acc4
+	adox	%rbx,$acc3
+	mulx	%rdx,%rax,%rbx		# a[2]*a[2]
+	 mov	%rsi,%rdx		# a[3]
+	 adcx	$acc5,$acc5
+	adox	%rax,$acc4
+	 adcx	$acc6,$acc6
+	adox	%rbx,$acc5
+	mulx	%rdx,%rax,$acc7		# a[3]*a[3]
+	 mov	\$38,%edx
+	adox	%rax,$acc6
+	adcx	%rdi,$acc7		# cf=0
+	adox	%rdi,$acc7		# of=0
+	jmp	.Lreduce64
+
+.align	32
+.Lreduce64:
+	mulx	$acc4,%rax,%rbx
+	adcx	%rax,$acc0
+	adox	%rbx,$acc1
+	mulx	$acc5,%rax,%rbx
+	adcx	%rax,$acc1
+	adox	%rbx,$acc2
+	mulx	$acc6,%rax,%rbx
+	adcx	%rax,$acc2
+	adox	%rbx,$acc3
+	mulx	$acc7,%rax,$acc4
+	adcx	%rax,$acc3
+	adox	%rdi,$acc4
+	adcx	%rdi,$acc4
+
+	mov	8*2(%rsp),%rdi		# restore dst
+	imulq	%rdx,$acc4
+
+	add	$acc4,$acc0
+	adc	\$0,$acc1
+	adc	\$0,$acc2
+	adc	\$0,$acc3
+
+	sbb	%rax,%rax		# cf -> mask
+	and	\$38,%rax
+
+	add	%rax,$acc0
+	mov	$acc1,8*1(%rdi)
+	mov	$acc2,8*2(%rdi)
+	mov	$acc3,8*3(%rdi)
+	mov	$acc0,8*0(%rdi)
+
+	mov	8*3(%rsp),%r15
+.cfi_restore	%r15
+	mov	8*4(%rsp),%r14
+.cfi_restore	%r14
+	mov	8*5(%rsp),%r13
+.cfi_restore	%r13
+	mov	8*6(%rsp),%r12
+.cfi_restore	%r12
+	mov	8*7(%rsp),%rbx
+.cfi_restore	%rbx
+	mov	8*8(%rsp),%rbp
+.cfi_restore	%rbp
+	lea	8*9(%rsp),%rsp
+.cfi_adjust_cfa_offset	88
+.Lfe64_sqr_epilogue:
+	ret
+.cfi_endproc
+.size	x25519_fe64_sqr,.-x25519_fe64_sqr
+
+.globl	x25519_fe64_mul121666
+.type	x25519_fe64_mul121666,\@function,2
+.align	32
+x25519_fe64_mul121666:
+.Lfe64_mul121666_body:
+	mov	\$121666,%edx
+	mulx	8*0(%rsi),$acc0,%rcx
+	mulx	8*1(%rsi),$acc1,%rax
+	add	%rcx,$acc1
+	mulx	8*2(%rsi),$acc2,%rcx
+	adc	%rax,$acc2
+	mulx	8*3(%rsi),$acc3,%rax
+	adc	%rcx,$acc3
+	adc	\$0,%rax
+
+	imulq	\$38,%rax,%rax
+
+	add	%rax,$acc0
+	adc	\$0,$acc1
+	adc	\$0,$acc2
+	adc	\$0,$acc3
+
+	sbb	%rax,%rax		# cf -> mask
+	and	\$38,%rax
+
+	add	%rax,$acc0
+	mov	$acc1,8*1(%rdi)
+	mov	$acc2,8*2(%rdi)
+	mov	$acc3,8*3(%rdi)
+	mov	$acc0,8*0(%rdi)
+
+.Lfe64_mul121666_epilogue:
+	ret
+.size	x25519_fe64_mul121666,.-x25519_fe64_mul121666
+
+.globl	x25519_fe64_add
+.type	x25519_fe64_add,\@function,3
+.align	32
+x25519_fe64_add:
+.Lfe64_add_body:
+	mov	8*0(%rsi),$acc0
+	mov	8*1(%rsi),$acc1
+	mov	8*2(%rsi),$acc2
+	mov	8*3(%rsi),$acc3
+
+	add	8*0(%rdx),$acc0
+	adc	8*1(%rdx),$acc1
+	adc	8*2(%rdx),$acc2
+	adc	8*3(%rdx),$acc3
+
+	sbb	%rax,%rax		# cf -> mask
+	and	\$38,%rax
+
+	add	%rax,$acc0
+	adc	\$0,$acc1
+	adc	\$0,$acc2
+	mov	$acc1,8*1(%rdi)
+	adc	\$0,$acc3
+	mov	$acc2,8*2(%rdi)
+	sbb	%rax,%rax		# cf -> mask
+	mov	$acc3,8*3(%rdi)
+	and	\$38,%rax
+
+	add	%rax,$acc0
+	mov	$acc0,8*0(%rdi)
+
+.Lfe64_add_epilogue:
+	ret
+.size	x25519_fe64_add,.-x25519_fe64_add
+
+.globl	x25519_fe64_sub
+.type	x25519_fe64_sub,\@function,3
+.align	32
+x25519_fe64_sub:
+.Lfe64_sub_body:
+	mov	8*0(%rsi),$acc0
+	mov	8*1(%rsi),$acc1
+	mov	8*2(%rsi),$acc2
+	mov	8*3(%rsi),$acc3
+
+	sub	8*0(%rdx),$acc0
+	sbb	8*1(%rdx),$acc1
+	sbb	8*2(%rdx),$acc2
+	sbb	8*3(%rdx),$acc3
+
+	sbb	%rax,%rax		# cf -> mask
+	and	\$38,%rax
+
+	sub	%rax,$acc0
+	sbb	\$0,$acc1
+	sbb	\$0,$acc2
+	mov	$acc1,8*1(%rdi)
+	sbb	\$0,$acc3
+	mov	$acc2,8*2(%rdi)
+	sbb	%rax,%rax		# cf -> mask
+	mov	$acc3,8*3(%rdi)
+	and	\$38,%rax
+
+	sub	%rax,$acc0
+	mov	$acc0,8*0(%rdi)
+
+.Lfe64_sub_epilogue:
+	ret
+.size	x25519_fe64_sub,.-x25519_fe64_sub
+
+.globl	x25519_fe64_tobytes
+.type	x25519_fe64_tobytes,\@function,2
+.align	32
+x25519_fe64_tobytes:
+.Lfe64_to_body:
+	mov	8*0(%rsi),$acc0
+	mov	8*1(%rsi),$acc1
+	mov	8*2(%rsi),$acc2
+	mov	8*3(%rsi),$acc3
+
+	################################# reduction modulo 2^255-19
+	lea	($acc3,$acc3),%rax
+	sar	\$63,$acc3		# most significant bit -> mask
+	shr	\$1,%rax		# most significant bit cleared
+	and	\$19,$acc3
+	add	\$19,$acc3		# compare to modulus in the same go
+
+	add	$acc3,$acc0
+	adc	\$0,$acc1
+	adc	\$0,$acc2
+	adc	\$0,%rax
+
+	lea	(%rax,%rax),$acc3
+	sar	\$63,%rax		# most significant bit -> mask
+	shr	\$1,$acc3		# most significant bit cleared
+	not	%rax
+	and	\$19,%rax
+
+	sub	%rax,$acc0
+	sbb	\$0,$acc1
+	sbb	\$0,$acc2
+	sbb	\$0,$acc3
+
+	mov	$acc0,8*0(%rdi)
+	mov	$acc1,8*1(%rdi)
+	mov	$acc2,8*2(%rdi)
+	mov	$acc3,8*3(%rdi)
+
+.Lfe64_to_epilogue:
+	ret
+.size	x25519_fe64_tobytes,.-x25519_fe64_tobytes
+___
+} else {
+$code.=<<___;
+.globl	x25519_fe64_eligible
+.type	x25519_fe64_eligible,\@abi-omnipotent
+.align	32
+x25519_fe64_eligible:
+	xor	%eax,%eax
+	ret
+.size	x25519_fe64_eligible,.-x25519_fe64_eligible
+
+.globl	x25519_fe64_mul
+.type	x25519_fe64_mul,\@abi-omnipotent
+.globl	x25519_fe64_sqr
+.globl	x25519_fe64_mul121666
+.globl	x25519_fe64_add
+.globl	x25519_fe64_sub
+.globl	x25519_fe64_tobytes
+x25519_fe64_mul:
+x25519_fe64_sqr:
+x25519_fe64_mul121666:
+x25519_fe64_add:
+x25519_fe64_sub:
+x25519_fe64_tobytes:
+	.byte	0x0f,0x0b	# ud2
+	ret
+.size	x25519_fe64_mul,.-x25519_fe64_mul
+___
+}
+$code.=<<___;
+.asciz	"X25519 primitives for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+
+.type	short_handler,\@abi-omnipotent
+.align	16
+short_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# end of prologue label
+	cmp	%r10,%rbx		# context->Rip<end of prologue label
+	jb	.Lcommon_seh_tail
+
+	mov	152($context),%rax	# pull context->Rsp
+	jmp	.Lcommon_seh_tail
+.size	short_handler,.-short_handler
+
+.type	full_handler,\@abi-omnipotent
+.align	16
+full_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# end of prologue label
+	cmp	%r10,%rbx		# context->Rip<end of prologue label
+	jb	.Lcommon_seh_tail
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lcommon_seh_tail
+
+	mov	8(%r11),%r10d		# HandlerData[2]
+	lea	(%rax,%r10),%rax
+
+	mov	-8(%rax),%rbp
+	mov	-16(%rax),%rbx
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+.Lcommon_seh_tail:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	full_handler,.-full_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_x25519_fe51_mul
+	.rva	.LSEH_end_x25519_fe51_mul
+	.rva	.LSEH_info_x25519_fe51_mul
+
+	.rva	.LSEH_begin_x25519_fe51_sqr
+	.rva	.LSEH_end_x25519_fe51_sqr
+	.rva	.LSEH_info_x25519_fe51_sqr
+
+	.rva	.LSEH_begin_x25519_fe51_mul121666
+	.rva	.LSEH_end_x25519_fe51_mul121666
+	.rva	.LSEH_info_x25519_fe51_mul121666
+___
+$code.=<<___	if ($addx);
+	.rva	.LSEH_begin_x25519_fe64_mul
+	.rva	.LSEH_end_x25519_fe64_mul
+	.rva	.LSEH_info_x25519_fe64_mul
+
+	.rva	.LSEH_begin_x25519_fe64_sqr
+	.rva	.LSEH_end_x25519_fe64_sqr
+	.rva	.LSEH_info_x25519_fe64_sqr
+
+	.rva	.LSEH_begin_x25519_fe64_mul121666
+	.rva	.LSEH_end_x25519_fe64_mul121666
+	.rva	.LSEH_info_x25519_fe64_mul121666
+
+	.rva	.LSEH_begin_x25519_fe64_add
+	.rva	.LSEH_end_x25519_fe64_add
+	.rva	.LSEH_info_x25519_fe64_add
+
+	.rva	.LSEH_begin_x25519_fe64_sub
+	.rva	.LSEH_end_x25519_fe64_sub
+	.rva	.LSEH_info_x25519_fe64_sub
+
+	.rva	.LSEH_begin_x25519_fe64_tobytes
+	.rva	.LSEH_end_x25519_fe64_tobytes
+	.rva	.LSEH_info_x25519_fe64_tobytes
+___
+$code.=<<___;
+.section	.xdata
+.align	8
+.LSEH_info_x25519_fe51_mul:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Lfe51_mul_body,.Lfe51_mul_epilogue	# HandlerData[]
+	.long	88,0
+.LSEH_info_x25519_fe51_sqr:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Lfe51_sqr_body,.Lfe51_sqr_epilogue	# HandlerData[]
+	.long	88,0
+.LSEH_info_x25519_fe51_mul121666:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Lfe51_mul121666_body,.Lfe51_mul121666_epilogue	# HandlerData[]
+	.long	88,0
+___
+$code.=<<___	if ($addx);
+.LSEH_info_x25519_fe64_mul:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Lfe64_mul_body,.Lfe64_mul_epilogue	# HandlerData[]
+	.long	72,0
+.LSEH_info_x25519_fe64_sqr:
+	.byte	9,0,0,0
+	.rva	full_handler
+	.rva	.Lfe64_sqr_body,.Lfe64_sqr_epilogue	# HandlerData[]
+	.long	72,0
+.LSEH_info_x25519_fe64_mul121666:
+	.byte	9,0,0,0
+	.rva	short_handler
+	.rva	.Lfe64_mul121666_body,.Lfe64_mul121666_epilogue	# HandlerData[]
+.LSEH_info_x25519_fe64_add:
+	.byte	9,0,0,0
+	.rva	short_handler
+	.rva	.Lfe64_add_body,.Lfe64_add_epilogue	# HandlerData[]
+.LSEH_info_x25519_fe64_sub:
+	.byte	9,0,0,0
+	.rva	short_handler
+	.rva	.Lfe64_sub_body,.Lfe64_sub_epilogue	# HandlerData[]
+.LSEH_info_x25519_fe64_tobytes:
+	.byte	9,0,0,0
+	.rva	short_handler
+	.rva	.Lfe64_to_body,.Lfe64_to_epilogue	# HandlerData[]
+___
+}
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/build.info
new file mode 100644
index 000000000..a1e673e34
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/build.info
@@ -0,0 +1,42 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        ec_lib.c ecp_smpl.c ecp_mont.c ecp_nist.c ec_cvt.c ec_mult.c \
+        ec_err.c ec_curve.c ec_check.c ec_print.c ec_asn1.c ec_key.c \
+        ec2_smpl.c ec_ameth.c ec_pmeth.c eck_prn.c \
+        ecp_nistp224.c ecp_nistp256.c ecp_nistp521.c ecp_nistputil.c \
+        ecp_oct.c ec2_oct.c ec_oct.c ec_kmeth.c ecdh_ossl.c ecdh_kdf.c \
+        ecdsa_ossl.c ecdsa_sign.c ecdsa_vrf.c curve25519.c ecx_meth.c \
+        curve448/arch_32/f_impl.c curve448/f_generic.c curve448/scalar.c \
+        curve448/curve448_tables.c curve448/eddsa.c curve448/curve448.c \
+        {- $target{ec_asm_src} -}
+
+GENERATE[ecp_nistz256-x86.s]=asm/ecp_nistz256-x86.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+
+GENERATE[ecp_nistz256-x86_64.s]=asm/ecp_nistz256-x86_64.pl $(PERLASM_SCHEME)
+
+GENERATE[ecp_nistz256-avx2.s]=asm/ecp_nistz256-avx2.pl $(PERLASM_SCHEME)
+
+GENERATE[ecp_nistz256-sparcv9.S]=asm/ecp_nistz256-sparcv9.pl $(PERLASM_SCHEME)
+INCLUDE[ecp_nistz256-sparcv9.o]=..
+
+GENERATE[ecp_nistz256-armv4.S]=asm/ecp_nistz256-armv4.pl $(PERLASM_SCHEME)
+INCLUDE[ecp_nistz256-armv4.o]=..
+GENERATE[ecp_nistz256-armv8.S]=asm/ecp_nistz256-armv8.pl $(PERLASM_SCHEME)
+INCLUDE[ecp_nistz256-armv8.o]=..
+GENERATE[ecp_nistz256-ppc64.s]=asm/ecp_nistz256-ppc64.pl $(PERLASM_SCHEME)
+
+GENERATE[x25519-x86_64.s]=asm/x25519-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[x25519-ppc64.s]=asm/x25519-ppc64.pl $(PERLASM_SCHEME)
+
+BEGINRAW[Makefile]
+{- $builddir -}/ecp_nistz256-%.S:	{- $sourcedir -}/asm/ecp_nistz256-%.pl
+	CC="$(CC)" $(PERL) $< $(PERLASM_SCHEME) $@
+ENDRAW[Makefile]
+
+INCLUDE[curve448/arch_32/f_impl.o]=curve448/arch_32 curve448
+INCLUDE[curve448/f_generic.o]=curve448/arch_32 curve448
+INCLUDE[curve448/scalar.o]=curve448/arch_32 curve448
+INCLUDE[curve448/curve448_tables.o]=curve448/arch_32 curve448
+INCLUDE[curve448/eddsa.o]=curve448/arch_32 curve448
+INCLUDE[curve448/curve448.o]=curve448/arch_32 curve448
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve25519.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve25519.c
new file mode 100644
index 000000000..aa999cc59
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve25519.c
@@ -0,0 +1,5596 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include "ec_lcl.h"
+#include <openssl/sha.h>
+
+#if defined(X25519_ASM) && (defined(__x86_64) || defined(__x86_64__) || \
+                            defined(_M_AMD64) || defined(_M_X64))
+
+# define BASE_2_64_IMPLEMENTED
+
+typedef uint64_t fe64[4];
+
+int x25519_fe64_eligible(void);
+
+/*
+ * Following subroutines perform corresponding operations modulo
+ * 2^256-38, i.e. double the curve modulus. However, inputs and
+ * outputs are permitted to be partially reduced, i.e. to remain
+ * in [0..2^256) range. It's all tied up in final fe64_tobytes
+ * that performs full reduction modulo 2^255-19.
+ *
+ * There are no reference C implementations for these.
+ */
+void x25519_fe64_mul(fe64 h, const fe64 f, const fe64 g);
+void x25519_fe64_sqr(fe64 h, const fe64 f);
+void x25519_fe64_mul121666(fe64 h, fe64 f);
+void x25519_fe64_add(fe64 h, const fe64 f, const fe64 g);
+void x25519_fe64_sub(fe64 h, const fe64 f, const fe64 g);
+void x25519_fe64_tobytes(uint8_t *s, const fe64 f);
+# define fe64_mul x25519_fe64_mul
+# define fe64_sqr x25519_fe64_sqr
+# define fe64_mul121666 x25519_fe64_mul121666
+# define fe64_add x25519_fe64_add
+# define fe64_sub x25519_fe64_sub
+# define fe64_tobytes x25519_fe64_tobytes
+
+static uint64_t load_8(const uint8_t *in)
+{
+    uint64_t result;
+
+    result = in[0];
+    result |= ((uint64_t)in[1]) << 8;
+    result |= ((uint64_t)in[2]) << 16;
+    result |= ((uint64_t)in[3]) << 24;
+    result |= ((uint64_t)in[4]) << 32;
+    result |= ((uint64_t)in[5]) << 40;
+    result |= ((uint64_t)in[6]) << 48;
+    result |= ((uint64_t)in[7]) << 56;
+
+    return result;
+}
+
+static void fe64_frombytes(fe64 h, const uint8_t *s)
+{
+    h[0] = load_8(s);
+    h[1] = load_8(s + 8);
+    h[2] = load_8(s + 16);
+    h[3] = load_8(s + 24) & 0x7fffffffffffffff;
+}
+
+static void fe64_0(fe64 h)
+{
+    h[0] = 0;
+    h[1] = 0;
+    h[2] = 0;
+    h[3] = 0;
+}
+
+static void fe64_1(fe64 h)
+{
+    h[0] = 1;
+    h[1] = 0;
+    h[2] = 0;
+    h[3] = 0;
+}
+
+static void fe64_copy(fe64 h, const fe64 f)
+{
+    h[0] = f[0];
+    h[1] = f[1];
+    h[2] = f[2];
+    h[3] = f[3];
+}
+
+static void fe64_cswap(fe64 f, fe64 g, unsigned int b)
+{
+    int i;
+    uint64_t mask = 0 - (uint64_t)b;
+
+    for (i = 0; i < 4; i++) {
+        uint64_t x = f[i] ^ g[i];
+        x &= mask;
+        f[i] ^= x;
+        g[i] ^= x;
+    }
+}
+
+static void fe64_invert(fe64 out, const fe64 z)
+{
+    fe64 t0;
+    fe64 t1;
+    fe64 t2;
+    fe64 t3;
+    int i;
+
+    /*
+     * Compute z ** -1 = z ** (2 ** 255 - 19 - 2) with the exponent as
+     * 2 ** 255 - 21 = (2 ** 5) * (2 ** 250 - 1) + 11.
+     */
+
+    /* t0 = z ** 2 */
+    fe64_sqr(t0, z);
+
+    /* t1 = t0 ** (2 ** 2) = z ** 8 */
+    fe64_sqr(t1, t0);
+    fe64_sqr(t1, t1);
+
+    /* t1 = z * t1 = z ** 9 */
+    fe64_mul(t1, z, t1);
+    /* t0 = t0 * t1 = z ** 11 -- stash t0 away for the end. */
+    fe64_mul(t0, t0, t1);
+
+    /* t2 = t0 ** 2 = z ** 22 */
+    fe64_sqr(t2, t0);
+
+    /* t1 = t1 * t2 = z ** (2 ** 5 - 1) */
+    fe64_mul(t1, t1, t2);
+
+    /* t2 = t1 ** (2 ** 5) = z ** ((2 ** 5) * (2 ** 5 - 1)) */
+    fe64_sqr(t2, t1);
+    for (i = 1; i < 5; ++i)
+        fe64_sqr(t2, t2);
+
+    /* t1 = t1 * t2 = z ** ((2 ** 5 + 1) * (2 ** 5 - 1)) = z ** (2 ** 10 - 1) */
+    fe64_mul(t1, t2, t1);
+
+    /* Continuing similarly... */
+
+    /* t2 = z ** (2 ** 20 - 1) */
+    fe64_sqr(t2, t1);
+    for (i = 1; i < 10; ++i)
+        fe64_sqr(t2, t2);
+
+    fe64_mul(t2, t2, t1);
+
+    /* t2 = z ** (2 ** 40 - 1) */
+    fe64_sqr(t3, t2);
+    for (i = 1; i < 20; ++i)
+        fe64_sqr(t3, t3);
+
+    fe64_mul(t2, t3, t2);
+
+    /* t2 = z ** (2 ** 10) * (2 ** 40 - 1) */
+    for (i = 0; i < 10; ++i)
+        fe64_sqr(t2, t2);
+
+    /* t1 = z ** (2 ** 50 - 1) */
+    fe64_mul(t1, t2, t1);
+
+    /* t2 = z ** (2 ** 100 - 1) */
+    fe64_sqr(t2, t1);
+    for (i = 1; i < 50; ++i)
+        fe64_sqr(t2, t2);
+
+    fe64_mul(t2, t2, t1);
+
+    /* t2 = z ** (2 ** 200 - 1) */
+    fe64_sqr(t3, t2);
+    for (i = 1; i < 100; ++i)
+        fe64_sqr(t3, t3);
+
+    fe64_mul(t2, t3, t2);
+
+    /* t2 = z ** ((2 ** 50) * (2 ** 200 - 1) */
+    for (i = 0; i < 50; ++i)
+        fe64_sqr(t2, t2);
+
+    /* t1 = z ** (2 ** 250 - 1) */
+    fe64_mul(t1, t2, t1);
+
+    /* t1 = z ** ((2 ** 5) * (2 ** 250 - 1)) */
+    for (i = 0; i < 5; ++i)
+        fe64_sqr(t1, t1);
+
+    /* Recall t0 = z ** 11; out = z ** (2 ** 255 - 21) */
+    fe64_mul(out, t1, t0);
+}
+
+/*
+ * Duplicate of original x25519_scalar_mult_generic, but using
+ * fe64_* subroutines.
+ */
+static void x25519_scalar_mulx(uint8_t out[32], const uint8_t scalar[32],
+                               const uint8_t point[32])
+{
+    fe64 x1, x2, z2, x3, z3, tmp0, tmp1;
+    uint8_t e[32];
+    unsigned swap = 0;
+    int pos;
+
+    memcpy(e, scalar, 32);
+    e[0]  &= 0xf8;
+    e[31] &= 0x7f;
+    e[31] |= 0x40;
+    fe64_frombytes(x1, point);
+    fe64_1(x2);
+    fe64_0(z2);
+    fe64_copy(x3, x1);
+    fe64_1(z3);
+
+    for (pos = 254; pos >= 0; --pos) {
+        unsigned int b = 1 & (e[pos / 8] >> (pos & 7));
+
+        swap ^= b;
+        fe64_cswap(x2, x3, swap);
+        fe64_cswap(z2, z3, swap);
+        swap = b;
+        fe64_sub(tmp0, x3, z3);
+        fe64_sub(tmp1, x2, z2);
+        fe64_add(x2, x2, z2);
+        fe64_add(z2, x3, z3);
+        fe64_mul(z3, x2, tmp0);
+        fe64_mul(z2, z2, tmp1);
+        fe64_sqr(tmp0, tmp1);
+        fe64_sqr(tmp1, x2);
+        fe64_add(x3, z3, z2);
+        fe64_sub(z2, z3, z2);
+        fe64_mul(x2, tmp1, tmp0);
+        fe64_sub(tmp1, tmp1, tmp0);
+        fe64_sqr(z2, z2);
+        fe64_mul121666(z3, tmp1);
+        fe64_sqr(x3, x3);
+        fe64_add(tmp0, tmp0, z3);
+        fe64_mul(z3, x1, z2);
+        fe64_mul(z2, tmp1, tmp0);
+    }
+
+    fe64_invert(z2, z2);
+    fe64_mul(x2, x2, z2);
+    fe64_tobytes(out, x2);
+
+    OPENSSL_cleanse(e, sizeof(e));
+}
+#endif
+
+#if defined(X25519_ASM) \
+    || ( (defined(__SIZEOF_INT128__) && __SIZEOF_INT128__ == 16) \
+         && !defined(__sparc__) \
+         && !(defined(__ANDROID__) && !defined(__clang__)) )
+/*
+ * Base 2^51 implementation. It's virtually no different from reference
+ * base 2^25.5 implementation in respect to lax boundary conditions for
+ * intermediate values and even individual limbs. So that whatever you
+ * know about the reference, applies even here...
+ */
+# define BASE_2_51_IMPLEMENTED
+
+typedef uint64_t fe51[5];
+
+static const uint64_t MASK51 = 0x7ffffffffffff;
+
+static uint64_t load_7(const uint8_t *in)
+{
+    uint64_t result;
+
+    result = in[0];
+    result |= ((uint64_t)in[1]) << 8;
+    result |= ((uint64_t)in[2]) << 16;
+    result |= ((uint64_t)in[3]) << 24;
+    result |= ((uint64_t)in[4]) << 32;
+    result |= ((uint64_t)in[5]) << 40;
+    result |= ((uint64_t)in[6]) << 48;
+
+    return result;
+}
+
+static uint64_t load_6(const uint8_t *in)
+{
+    uint64_t result;
+
+    result = in[0];
+    result |= ((uint64_t)in[1]) << 8;
+    result |= ((uint64_t)in[2]) << 16;
+    result |= ((uint64_t)in[3]) << 24;
+    result |= ((uint64_t)in[4]) << 32;
+    result |= ((uint64_t)in[5]) << 40;
+
+    return result;
+}
+
+static void fe51_frombytes(fe51 h, const uint8_t *s)
+{
+    uint64_t h0 = load_7(s);                                /* 56 bits */
+    uint64_t h1 = load_6(s + 7) << 5;                       /* 53 bits */
+    uint64_t h2 = load_7(s + 13) << 2;                      /* 58 bits */
+    uint64_t h3 = load_6(s + 20) << 7;                      /* 55 bits */
+    uint64_t h4 = (load_6(s + 26) & 0x7fffffffffff) << 4;   /* 51 bits */
+
+    h1 |= h0 >> 51; h0 &= MASK51;
+    h2 |= h1 >> 51; h1 &= MASK51;
+    h3 |= h2 >> 51; h2 &= MASK51;
+    h4 |= h3 >> 51; h3 &= MASK51;
+
+    h[0] = h0;
+    h[1] = h1;
+    h[2] = h2;
+    h[3] = h3;
+    h[4] = h4;
+}
+
+static void fe51_tobytes(uint8_t *s, const fe51 h)
+{
+    uint64_t h0 = h[0];
+    uint64_t h1 = h[1];
+    uint64_t h2 = h[2];
+    uint64_t h3 = h[3];
+    uint64_t h4 = h[4];
+    uint64_t q;
+
+    /* compare to modulus */
+    q = (h0 + 19) >> 51;
+    q = (h1 + q) >> 51;
+    q = (h2 + q) >> 51;
+    q = (h3 + q) >> 51;
+    q = (h4 + q) >> 51;
+
+    /* full reduce */
+    h0 += 19 * q;
+    h1 += h0 >> 51; h0 &= MASK51;
+    h2 += h1 >> 51; h1 &= MASK51;
+    h3 += h2 >> 51; h2 &= MASK51;
+    h4 += h3 >> 51; h3 &= MASK51;
+                    h4 &= MASK51;
+
+    /* smash */
+    s[0] = (uint8_t)(h0 >> 0);
+    s[1] = (uint8_t)(h0 >> 8);
+    s[2] = (uint8_t)(h0 >> 16);
+    s[3] = (uint8_t)(h0 >> 24);
+    s[4] = (uint8_t)(h0 >> 32);
+    s[5] = (uint8_t)(h0 >> 40);
+    s[6] = (uint8_t)((h0 >> 48) | ((uint32_t)h1 << 3));
+    s[7] = (uint8_t)(h1 >> 5);
+    s[8] = (uint8_t)(h1 >> 13);
+    s[9] = (uint8_t)(h1 >> 21);
+    s[10] = (uint8_t)(h1 >> 29);
+    s[11] = (uint8_t)(h1 >> 37);
+    s[12] = (uint8_t)((h1 >> 45) | ((uint32_t)h2 << 6));
+    s[13] = (uint8_t)(h2 >> 2);
+    s[14] = (uint8_t)(h2 >> 10);
+    s[15] = (uint8_t)(h2 >> 18);
+    s[16] = (uint8_t)(h2 >> 26);
+    s[17] = (uint8_t)(h2 >> 34);
+    s[18] = (uint8_t)(h2 >> 42);
+    s[19] = (uint8_t)((h2 >> 50) | ((uint32_t)h3 << 1));
+    s[20] = (uint8_t)(h3 >> 7);
+    s[21] = (uint8_t)(h3 >> 15);
+    s[22] = (uint8_t)(h3 >> 23);
+    s[23] = (uint8_t)(h3 >> 31);
+    s[24] = (uint8_t)(h3 >> 39);
+    s[25] = (uint8_t)((h3 >> 47) | ((uint32_t)h4 << 4));
+    s[26] = (uint8_t)(h4 >> 4);
+    s[27] = (uint8_t)(h4 >> 12);
+    s[28] = (uint8_t)(h4 >> 20);
+    s[29] = (uint8_t)(h4 >> 28);
+    s[30] = (uint8_t)(h4 >> 36);
+    s[31] = (uint8_t)(h4 >> 44);
+}
+
+# if defined(X25519_ASM)
+void x25519_fe51_mul(fe51 h, const fe51 f, const fe51 g);
+void x25519_fe51_sqr(fe51 h, const fe51 f);
+void x25519_fe51_mul121666(fe51 h, fe51 f);
+#  define fe51_mul x25519_fe51_mul
+#  define fe51_sq  x25519_fe51_sqr
+#  define fe51_mul121666 x25519_fe51_mul121666
+# else
+
+typedef __uint128_t u128;
+
+static void fe51_mul(fe51 h, const fe51 f, const fe51 g)
+{
+    u128 h0, h1, h2, h3, h4;
+    uint64_t f_i, g0, g1, g2, g3, g4;
+
+    f_i = f[0];
+    h0 = (u128)f_i * (g0 = g[0]);
+    h1 = (u128)f_i * (g1 = g[1]);
+    h2 = (u128)f_i * (g2 = g[2]);
+    h3 = (u128)f_i * (g3 = g[3]);
+    h4 = (u128)f_i * (g4 = g[4]);
+
+    f_i = f[1];
+    h0 += (u128)f_i * (g4 *= 19);
+    h1 += (u128)f_i * g0;
+    h2 += (u128)f_i * g1;
+    h3 += (u128)f_i * g2;
+    h4 += (u128)f_i * g3;
+
+    f_i = f[2];
+    h0 += (u128)f_i * (g3 *= 19);
+    h1 += (u128)f_i * g4;
+    h2 += (u128)f_i * g0;
+    h3 += (u128)f_i * g1;
+    h4 += (u128)f_i * g2;
+
+    f_i = f[3];
+    h0 += (u128)f_i * (g2 *= 19);
+    h1 += (u128)f_i * g3;
+    h2 += (u128)f_i * g4;
+    h3 += (u128)f_i * g0;
+    h4 += (u128)f_i * g1;
+
+    f_i = f[4];
+    h0 += (u128)f_i * (g1 *= 19);
+    h1 += (u128)f_i * g2;
+    h2 += (u128)f_i * g3;
+    h3 += (u128)f_i * g4;
+    h4 += (u128)f_i * g0;
+
+    /* partial [lazy] reduction */
+    h3 += (uint64_t)(h2 >> 51); g2 = (uint64_t)h2 & MASK51;
+    h1 += (uint64_t)(h0 >> 51); g0 = (uint64_t)h0 & MASK51;
+
+    h4 += (uint64_t)(h3 >> 51); g3 = (uint64_t)h3 & MASK51;
+    g2 += (uint64_t)(h1 >> 51); g1 = (uint64_t)h1 & MASK51;
+
+    g0 += (uint64_t)(h4 >> 51) * 19; g4 = (uint64_t)h4 & MASK51;
+    g3 += g2 >> 51; g2 &= MASK51;
+    g1 += g0 >> 51; g0 &= MASK51;
+
+    h[0] = g0;
+    h[1] = g1;
+    h[2] = g2;
+    h[3] = g3;
+    h[4] = g4;
+}
+
+static void fe51_sq(fe51 h, const fe51 f)
+{
+#  if defined(OPENSSL_SMALL_FOOTPRINT)
+    fe51_mul(h, f, f);
+#  else
+    /* dedicated squaring gives 16-25% overall improvement */
+    uint64_t g0 = f[0];
+    uint64_t g1 = f[1];
+    uint64_t g2 = f[2];
+    uint64_t g3 = f[3];
+    uint64_t g4 = f[4];
+    u128 h0, h1, h2, h3, h4;
+
+    h0 = (u128)g0 * g0;     g0 *= 2;
+    h1 = (u128)g0 * g1;
+    h2 = (u128)g0 * g2;
+    h3 = (u128)g0 * g3;
+    h4 = (u128)g0 * g4;
+
+    g0 = g4;                /* borrow g0 */
+    h3 += (u128)g0 * (g4 *= 19);
+
+    h2 += (u128)g1 * g1;    g1 *= 2;
+    h3 += (u128)g1 * g2;
+    h4 += (u128)g1 * g3;
+    h0 += (u128)g1 * g4;
+
+    g0 = g3;                /* borrow g0 */
+    h1 += (u128)g0 * (g3 *= 19);
+    h2 += (u128)(g0 * 2) * g4;
+
+    h4 += (u128)g2 * g2;    g2 *= 2;
+    h0 += (u128)g2 * g3;
+    h1 += (u128)g2 * g4;
+
+    /* partial [lazy] reduction */
+    h3 += (uint64_t)(h2 >> 51); g2 = (uint64_t)h2 & MASK51;
+    h1 += (uint64_t)(h0 >> 51); g0 = (uint64_t)h0 & MASK51;
+
+    h4 += (uint64_t)(h3 >> 51); g3 = (uint64_t)h3 & MASK51;
+    g2 += (uint64_t)(h1 >> 51); g1 = (uint64_t)h1 & MASK51;
+
+    g0 += (uint64_t)(h4 >> 51) * 19; g4 = (uint64_t)h4 & MASK51;
+    g3 += g2 >> 51; g2 &= MASK51;
+    g1 += g0 >> 51; g0 &= MASK51;
+
+    h[0] = g0;
+    h[1] = g1;
+    h[2] = g2;
+    h[3] = g3;
+    h[4] = g4;
+#  endif
+}
+
+static void fe51_mul121666(fe51 h, fe51 f)
+{
+    u128 h0 = f[0] * (u128)121666;
+    u128 h1 = f[1] * (u128)121666;
+    u128 h2 = f[2] * (u128)121666;
+    u128 h3 = f[3] * (u128)121666;
+    u128 h4 = f[4] * (u128)121666;
+    uint64_t g0, g1, g2, g3, g4;
+
+    h3 += (uint64_t)(h2 >> 51); g2 = (uint64_t)h2 & MASK51;
+    h1 += (uint64_t)(h0 >> 51); g0 = (uint64_t)h0 & MASK51;
+
+    h4 += (uint64_t)(h3 >> 51); g3 = (uint64_t)h3 & MASK51;
+    g2 += (uint64_t)(h1 >> 51); g1 = (uint64_t)h1 & MASK51;
+
+    g0 += (uint64_t)(h4 >> 51) * 19; g4 = (uint64_t)h4 & MASK51;
+    g3 += g2 >> 51; g2 &= MASK51;
+    g1 += g0 >> 51; g0 &= MASK51;
+
+    h[0] = g0;
+    h[1] = g1;
+    h[2] = g2;
+    h[3] = g3;
+    h[4] = g4;
+}
+# endif
+
+static void fe51_add(fe51 h, const fe51 f, const fe51 g)
+{
+    h[0] = f[0] + g[0];
+    h[1] = f[1] + g[1];
+    h[2] = f[2] + g[2];
+    h[3] = f[3] + g[3];
+    h[4] = f[4] + g[4];
+}
+
+static void fe51_sub(fe51 h, const fe51 f, const fe51 g)
+{
+    /*
+     * Add 2*modulus to ensure that result remains positive
+     * even if subtrahend is partially reduced.
+     */
+    h[0] = (f[0] + 0xfffffffffffda) - g[0];
+    h[1] = (f[1] + 0xffffffffffffe) - g[1];
+    h[2] = (f[2] + 0xffffffffffffe) - g[2];
+    h[3] = (f[3] + 0xffffffffffffe) - g[3];
+    h[4] = (f[4] + 0xffffffffffffe) - g[4];
+}
+
+static void fe51_0(fe51 h)
+{
+    h[0] = 0;
+    h[1] = 0;
+    h[2] = 0;
+    h[3] = 0;
+    h[4] = 0;
+}
+
+static void fe51_1(fe51 h)
+{
+    h[0] = 1;
+    h[1] = 0;
+    h[2] = 0;
+    h[3] = 0;
+    h[4] = 0;
+}
+
+static void fe51_copy(fe51 h, const fe51 f)
+{
+    h[0] = f[0];
+    h[1] = f[1];
+    h[2] = f[2];
+    h[3] = f[3];
+    h[4] = f[4];
+}
+
+static void fe51_cswap(fe51 f, fe51 g, unsigned int b)
+{
+    int i;
+    uint64_t mask = 0 - (uint64_t)b;
+
+    for (i = 0; i < 5; i++) {
+        int64_t x = f[i] ^ g[i];
+        x &= mask;
+        f[i] ^= x;
+        g[i] ^= x;
+    }
+}
+
+static void fe51_invert(fe51 out, const fe51 z)
+{
+    fe51 t0;
+    fe51 t1;
+    fe51 t2;
+    fe51 t3;
+    int i;
+
+    /*
+     * Compute z ** -1 = z ** (2 ** 255 - 19 - 2) with the exponent as
+     * 2 ** 255 - 21 = (2 ** 5) * (2 ** 250 - 1) + 11.
+     */
+
+    /* t0 = z ** 2 */
+    fe51_sq(t0, z);
+
+    /* t1 = t0 ** (2 ** 2) = z ** 8 */
+    fe51_sq(t1, t0);
+    fe51_sq(t1, t1);
+
+    /* t1 = z * t1 = z ** 9 */
+    fe51_mul(t1, z, t1);
+    /* t0 = t0 * t1 = z ** 11 -- stash t0 away for the end. */
+    fe51_mul(t0, t0, t1);
+
+    /* t2 = t0 ** 2 = z ** 22 */
+    fe51_sq(t2, t0);
+
+    /* t1 = t1 * t2 = z ** (2 ** 5 - 1) */
+    fe51_mul(t1, t1, t2);
+
+    /* t2 = t1 ** (2 ** 5) = z ** ((2 ** 5) * (2 ** 5 - 1)) */
+    fe51_sq(t2, t1);
+    for (i = 1; i < 5; ++i)
+        fe51_sq(t2, t2);
+
+    /* t1 = t1 * t2 = z ** ((2 ** 5 + 1) * (2 ** 5 - 1)) = z ** (2 ** 10 - 1) */
+    fe51_mul(t1, t2, t1);
+
+    /* Continuing similarly... */
+
+    /* t2 = z ** (2 ** 20 - 1) */
+    fe51_sq(t2, t1);
+    for (i = 1; i < 10; ++i)
+        fe51_sq(t2, t2);
+
+    fe51_mul(t2, t2, t1);
+
+    /* t2 = z ** (2 ** 40 - 1) */
+    fe51_sq(t3, t2);
+    for (i = 1; i < 20; ++i)
+        fe51_sq(t3, t3);
+
+    fe51_mul(t2, t3, t2);
+
+    /* t2 = z ** (2 ** 10) * (2 ** 40 - 1) */
+    for (i = 0; i < 10; ++i)
+        fe51_sq(t2, t2);
+
+    /* t1 = z ** (2 ** 50 - 1) */
+    fe51_mul(t1, t2, t1);
+
+    /* t2 = z ** (2 ** 100 - 1) */
+    fe51_sq(t2, t1);
+    for (i = 1; i < 50; ++i)
+        fe51_sq(t2, t2);
+
+    fe51_mul(t2, t2, t1);
+
+    /* t2 = z ** (2 ** 200 - 1) */
+    fe51_sq(t3, t2);
+    for (i = 1; i < 100; ++i)
+        fe51_sq(t3, t3);
+
+    fe51_mul(t2, t3, t2);
+
+    /* t2 = z ** ((2 ** 50) * (2 ** 200 - 1) */
+    for (i = 0; i < 50; ++i)
+        fe51_sq(t2, t2);
+
+    /* t1 = z ** (2 ** 250 - 1) */
+    fe51_mul(t1, t2, t1);
+
+    /* t1 = z ** ((2 ** 5) * (2 ** 250 - 1)) */
+    for (i = 0; i < 5; ++i)
+        fe51_sq(t1, t1);
+
+    /* Recall t0 = z ** 11; out = z ** (2 ** 255 - 21) */
+    fe51_mul(out, t1, t0);
+}
+
+/*
+ * Duplicate of original x25519_scalar_mult_generic, but using
+ * fe51_* subroutines.
+ */
+static void x25519_scalar_mult(uint8_t out[32], const uint8_t scalar[32],
+                               const uint8_t point[32])
+{
+    fe51 x1, x2, z2, x3, z3, tmp0, tmp1;
+    uint8_t e[32];
+    unsigned swap = 0;
+    int pos;
+
+# ifdef BASE_2_64_IMPLEMENTED
+    if (x25519_fe64_eligible()) {
+        x25519_scalar_mulx(out, scalar, point);
+        return;
+    }
+# endif
+
+    memcpy(e, scalar, 32);
+    e[0]  &= 0xf8;
+    e[31] &= 0x7f;
+    e[31] |= 0x40;
+    fe51_frombytes(x1, point);
+    fe51_1(x2);
+    fe51_0(z2);
+    fe51_copy(x3, x1);
+    fe51_1(z3);
+
+    for (pos = 254; pos >= 0; --pos) {
+        unsigned int b = 1 & (e[pos / 8] >> (pos & 7));
+
+        swap ^= b;
+        fe51_cswap(x2, x3, swap);
+        fe51_cswap(z2, z3, swap);
+        swap = b;
+        fe51_sub(tmp0, x3, z3);
+        fe51_sub(tmp1, x2, z2);
+        fe51_add(x2, x2, z2);
+        fe51_add(z2, x3, z3);
+        fe51_mul(z3, tmp0, x2);
+        fe51_mul(z2, z2, tmp1);
+        fe51_sq(tmp0, tmp1);
+        fe51_sq(tmp1, x2);
+        fe51_add(x3, z3, z2);
+        fe51_sub(z2, z3, z2);
+        fe51_mul(x2, tmp1, tmp0);
+        fe51_sub(tmp1, tmp1, tmp0);
+        fe51_sq(z2, z2);
+        fe51_mul121666(z3, tmp1);
+        fe51_sq(x3, x3);
+        fe51_add(tmp0, tmp0, z3);
+        fe51_mul(z3, x1, z2);
+        fe51_mul(z2, tmp1, tmp0);
+    }
+
+    fe51_invert(z2, z2);
+    fe51_mul(x2, x2, z2);
+    fe51_tobytes(out, x2);
+
+    OPENSSL_cleanse(e, sizeof(e));
+}
+#endif
+
+/*
+ * Reference base 2^25.5 implementation.
+ *
+ * This code is mostly taken from the ref10 version of Ed25519 in SUPERCOP
+ * 20141124 (http://bench.cr.yp.to/supercop.html).
+ *
+ * The field functions are shared by Ed25519 and X25519 where possible.
+ */
+
+/*
+ * fe means field element. Here the field is \Z/(2^255-19). An element t,
+ * entries t[0]...t[9], represents the integer t[0]+2^26 t[1]+2^51 t[2]+2^77
+ * t[3]+2^102 t[4]+...+2^230 t[9]. Bounds on each t[i] vary depending on
+ * context.
+ */
+typedef int32_t fe[10];
+
+static const int64_t kBottom21Bits =  0x1fffffLL;
+static const int64_t kBottom25Bits = 0x1ffffffLL;
+static const int64_t kBottom26Bits = 0x3ffffffLL;
+static const int64_t kTop39Bits = 0xfffffffffe000000LL;
+static const int64_t kTop38Bits = 0xfffffffffc000000LL;
+
+static uint64_t load_3(const uint8_t *in)
+{
+    uint64_t result;
+
+    result  = ((uint64_t)in[0]);
+    result |= ((uint64_t)in[1]) << 8;
+    result |= ((uint64_t)in[2]) << 16;
+    return result;
+}
+
+static uint64_t load_4(const uint8_t *in)
+{
+    uint64_t result;
+
+    result  = ((uint64_t)in[0]);
+    result |= ((uint64_t)in[1]) << 8;
+    result |= ((uint64_t)in[2]) << 16;
+    result |= ((uint64_t)in[3]) << 24;
+    return result;
+}
+
+static void fe_frombytes(fe h, const uint8_t *s)
+{
+    /* Ignores top bit of h. */
+    int64_t h0 =  load_4(s);
+    int64_t h1 =  load_3(s +  4) << 6;
+    int64_t h2 =  load_3(s +  7) << 5;
+    int64_t h3 =  load_3(s + 10) << 3;
+    int64_t h4 =  load_3(s + 13) << 2;
+    int64_t h5 =  load_4(s + 16);
+    int64_t h6 =  load_3(s + 20) << 7;
+    int64_t h7 =  load_3(s + 23) << 5;
+    int64_t h8 =  load_3(s + 26) << 4;
+    int64_t h9 = (load_3(s + 29) & 0x7fffff) << 2;
+    int64_t carry0;
+    int64_t carry1;
+    int64_t carry2;
+    int64_t carry3;
+    int64_t carry4;
+    int64_t carry5;
+    int64_t carry6;
+    int64_t carry7;
+    int64_t carry8;
+    int64_t carry9;
+
+    carry9 = h9 + (1 << 24); h0 += (carry9 >> 25) * 19; h9 -= carry9 & kTop39Bits;
+    carry1 = h1 + (1 << 24); h2 += carry1 >> 25; h1 -= carry1 & kTop39Bits;
+    carry3 = h3 + (1 << 24); h4 += carry3 >> 25; h3 -= carry3 & kTop39Bits;
+    carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;
+    carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;
+
+    carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits;
+    carry2 = h2 + (1 << 25); h3 += carry2 >> 26; h2 -= carry2 & kTop38Bits;
+    carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;
+    carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;
+    carry8 = h8 + (1 << 25); h9 += carry8 >> 26; h8 -= carry8 & kTop38Bits;
+
+    h[0] = (int32_t)h0;
+    h[1] = (int32_t)h1;
+    h[2] = (int32_t)h2;
+    h[3] = (int32_t)h3;
+    h[4] = (int32_t)h4;
+    h[5] = (int32_t)h5;
+    h[6] = (int32_t)h6;
+    h[7] = (int32_t)h7;
+    h[8] = (int32_t)h8;
+    h[9] = (int32_t)h9;
+}
+
+/*
+ * Preconditions:
+ *   |h| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc.
+ *
+ * Write p=2^255-19; q=floor(h/p).
+ * Basic claim: q = floor(2^(-255)(h + 19 2^(-25)h9 + 2^(-1))).
+ *
+ * Proof:
+ *   Have |h|<=p so |q|<=1 so |19^2 2^(-255) q|<1/4.
+ *   Also have |h-2^230 h9|<2^231 so |19 2^(-255)(h-2^230 h9)|<1/4.
+ *
+ *   Write y=2^(-1)-19^2 2^(-255)q-19 2^(-255)(h-2^230 h9).
+ *   Then 0<y<1.
+ *
+ *   Write r=h-pq.
+ *   Have 0<=r<=p-1=2^255-20.
+ *   Thus 0<=r+19(2^-255)r<r+19(2^-255)2^255<=2^255-1.
+ *
+ *   Write x=r+19(2^-255)r+y.
+ *   Then 0<x<2^255 so floor(2^(-255)x) = 0 so floor(q+2^(-255)x) = q.
+ *
+ *   Have q+2^(-255)x = 2^(-255)(h + 19 2^(-25) h9 + 2^(-1))
+ *   so floor(2^(-255)(h + 19 2^(-25) h9 + 2^(-1))) = q.
+ */
+static void fe_tobytes(uint8_t *s, const fe h)
+{
+    int32_t h0 = h[0];
+    int32_t h1 = h[1];
+    int32_t h2 = h[2];
+    int32_t h3 = h[3];
+    int32_t h4 = h[4];
+    int32_t h5 = h[5];
+    int32_t h6 = h[6];
+    int32_t h7 = h[7];
+    int32_t h8 = h[8];
+    int32_t h9 = h[9];
+    int32_t q;
+
+    q = (19 * h9 + (((int32_t) 1) << 24)) >> 25;
+    q = (h0 + q) >> 26;
+    q = (h1 + q) >> 25;
+    q = (h2 + q) >> 26;
+    q = (h3 + q) >> 25;
+    q = (h4 + q) >> 26;
+    q = (h5 + q) >> 25;
+    q = (h6 + q) >> 26;
+    q = (h7 + q) >> 25;
+    q = (h8 + q) >> 26;
+    q = (h9 + q) >> 25;
+
+    /* Goal: Output h-(2^255-19)q, which is between 0 and 2^255-20. */
+    h0 += 19 * q;
+    /* Goal: Output h-2^255 q, which is between 0 and 2^255-20. */
+
+    h1 += h0 >> 26; h0 &= kBottom26Bits;
+    h2 += h1 >> 25; h1 &= kBottom25Bits;
+    h3 += h2 >> 26; h2 &= kBottom26Bits;
+    h4 += h3 >> 25; h3 &= kBottom25Bits;
+    h5 += h4 >> 26; h4 &= kBottom26Bits;
+    h6 += h5 >> 25; h5 &= kBottom25Bits;
+    h7 += h6 >> 26; h6 &= kBottom26Bits;
+    h8 += h7 >> 25; h7 &= kBottom25Bits;
+    h9 += h8 >> 26; h8 &= kBottom26Bits;
+                    h9 &= kBottom25Bits;
+    /* h10 = carry9 */
+
+    /*
+     * Goal: Output h0+...+2^255 h10-2^255 q, which is between 0 and 2^255-20.
+     * Have h0+...+2^230 h9 between 0 and 2^255-1;
+     * evidently 2^255 h10-2^255 q = 0.
+     * Goal: Output h0+...+2^230 h9.
+     */
+    s[ 0] = (uint8_t) (h0 >>  0);
+    s[ 1] = (uint8_t) (h0 >>  8);
+    s[ 2] = (uint8_t) (h0 >> 16);
+    s[ 3] = (uint8_t)((h0 >> 24) | ((uint32_t)(h1) << 2));
+    s[ 4] = (uint8_t) (h1 >>  6);
+    s[ 5] = (uint8_t) (h1 >> 14);
+    s[ 6] = (uint8_t)((h1 >> 22) | ((uint32_t)(h2) << 3));
+    s[ 7] = (uint8_t) (h2 >>  5);
+    s[ 8] = (uint8_t) (h2 >> 13);
+    s[ 9] = (uint8_t)((h2 >> 21) | ((uint32_t)(h3) << 5));
+    s[10] = (uint8_t) (h3 >>  3);
+    s[11] = (uint8_t) (h3 >> 11);
+    s[12] = (uint8_t)((h3 >> 19) | ((uint32_t)(h4) << 6));
+    s[13] = (uint8_t) (h4 >>  2);
+    s[14] = (uint8_t) (h4 >> 10);
+    s[15] = (uint8_t) (h4 >> 18);
+    s[16] = (uint8_t) (h5 >>  0);
+    s[17] = (uint8_t) (h5 >>  8);
+    s[18] = (uint8_t) (h5 >> 16);
+    s[19] = (uint8_t)((h5 >> 24) | ((uint32_t)(h6) << 1));
+    s[20] = (uint8_t) (h6 >>  7);
+    s[21] = (uint8_t) (h6 >> 15);
+    s[22] = (uint8_t)((h6 >> 23) | ((uint32_t)(h7) << 3));
+    s[23] = (uint8_t) (h7 >>  5);
+    s[24] = (uint8_t) (h7 >> 13);
+    s[25] = (uint8_t)((h7 >> 21) | ((uint32_t)(h8) << 4));
+    s[26] = (uint8_t) (h8 >>  4);
+    s[27] = (uint8_t) (h8 >> 12);
+    s[28] = (uint8_t)((h8 >> 20) | ((uint32_t)(h9) << 6));
+    s[29] = (uint8_t) (h9 >>  2);
+    s[30] = (uint8_t) (h9 >> 10);
+    s[31] = (uint8_t) (h9 >> 18);
+}
+
+/* h = f */
+static void fe_copy(fe h, const fe f)
+{
+    memmove(h, f, sizeof(int32_t) * 10);
+}
+
+/* h = 0 */
+static void fe_0(fe h)
+{
+    memset(h, 0, sizeof(int32_t) * 10);
+}
+
+/* h = 1 */
+static void fe_1(fe h)
+{
+    memset(h, 0, sizeof(int32_t) * 10);
+    h[0] = 1;
+}
+
+/*
+ * h = f + g
+ *
+ * Can overlap h with f or g.
+ *
+ * Preconditions:
+ *    |f| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+ *    |g| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+ *
+ * Postconditions:
+ *    |h| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc.
+ */
+static void fe_add(fe h, const fe f, const fe g)
+{
+    unsigned i;
+
+    for (i = 0; i < 10; i++) {
+        h[i] = f[i] + g[i];
+    }
+}
+
+/*
+ * h = f - g
+ *
+ * Can overlap h with f or g.
+ *
+ * Preconditions:
+ *    |f| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+ *    |g| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+ *
+ * Postconditions:
+ *    |h| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc.
+ */
+static void fe_sub(fe h, const fe f, const fe g)
+{
+    unsigned i;
+
+    for (i = 0; i < 10; i++) {
+        h[i] = f[i] - g[i];
+    }
+}
+
+/*
+ * h = f * g
+ *
+ * Can overlap h with f or g.
+ *
+ * Preconditions:
+ *    |f| bounded by 1.65*2^26,1.65*2^25,1.65*2^26,1.65*2^25,etc.
+ *    |g| bounded by 1.65*2^26,1.65*2^25,1.65*2^26,1.65*2^25,etc.
+ *
+ * Postconditions:
+ *    |h| bounded by 1.01*2^25,1.01*2^24,1.01*2^25,1.01*2^24,etc.
+ *
+ * Notes on implementation strategy:
+ *
+ * Using schoolbook multiplication.
+ * Karatsuba would save a little in some cost models.
+ *
+ * Most multiplications by 2 and 19 are 32-bit precomputations;
+ * cheaper than 64-bit postcomputations.
+ *
+ * There is one remaining multiplication by 19 in the carry chain;
+ * one *19 precomputation can be merged into this,
+ * but the resulting data flow is considerably less clean.
+ *
+ * There are 12 carries below.
+ * 10 of them are 2-way parallelizable and vectorizable.
+ * Can get away with 11 carries, but then data flow is much deeper.
+ *
+ * With tighter constraints on inputs can squeeze carries into int32.
+ */
+static void fe_mul(fe h, const fe f, const fe g)
+{
+    int32_t f0 = f[0];
+    int32_t f1 = f[1];
+    int32_t f2 = f[2];
+    int32_t f3 = f[3];
+    int32_t f4 = f[4];
+    int32_t f5 = f[5];
+    int32_t f6 = f[6];
+    int32_t f7 = f[7];
+    int32_t f8 = f[8];
+    int32_t f9 = f[9];
+    int32_t g0 = g[0];
+    int32_t g1 = g[1];
+    int32_t g2 = g[2];
+    int32_t g3 = g[3];
+    int32_t g4 = g[4];
+    int32_t g5 = g[5];
+    int32_t g6 = g[6];
+    int32_t g7 = g[7];
+    int32_t g8 = g[8];
+    int32_t g9 = g[9];
+    int32_t g1_19 = 19 * g1; /* 1.959375*2^29 */
+    int32_t g2_19 = 19 * g2; /* 1.959375*2^30; still ok */
+    int32_t g3_19 = 19 * g3;
+    int32_t g4_19 = 19 * g4;
+    int32_t g5_19 = 19 * g5;
+    int32_t g6_19 = 19 * g6;
+    int32_t g7_19 = 19 * g7;
+    int32_t g8_19 = 19 * g8;
+    int32_t g9_19 = 19 * g9;
+    int32_t f1_2 = 2 * f1;
+    int32_t f3_2 = 2 * f3;
+    int32_t f5_2 = 2 * f5;
+    int32_t f7_2 = 2 * f7;
+    int32_t f9_2 = 2 * f9;
+    int64_t f0g0    = f0   * (int64_t) g0;
+    int64_t f0g1    = f0   * (int64_t) g1;
+    int64_t f0g2    = f0   * (int64_t) g2;
+    int64_t f0g3    = f0   * (int64_t) g3;
+    int64_t f0g4    = f0   * (int64_t) g4;
+    int64_t f0g5    = f0   * (int64_t) g5;
+    int64_t f0g6    = f0   * (int64_t) g6;
+    int64_t f0g7    = f0   * (int64_t) g7;
+    int64_t f0g8    = f0   * (int64_t) g8;
+    int64_t f0g9    = f0   * (int64_t) g9;
+    int64_t f1g0    = f1   * (int64_t) g0;
+    int64_t f1g1_2  = f1_2 * (int64_t) g1;
+    int64_t f1g2    = f1   * (int64_t) g2;
+    int64_t f1g3_2  = f1_2 * (int64_t) g3;
+    int64_t f1g4    = f1   * (int64_t) g4;
+    int64_t f1g5_2  = f1_2 * (int64_t) g5;
+    int64_t f1g6    = f1   * (int64_t) g6;
+    int64_t f1g7_2  = f1_2 * (int64_t) g7;
+    int64_t f1g8    = f1   * (int64_t) g8;
+    int64_t f1g9_38 = f1_2 * (int64_t) g9_19;
+    int64_t f2g0    = f2   * (int64_t) g0;
+    int64_t f2g1    = f2   * (int64_t) g1;
+    int64_t f2g2    = f2   * (int64_t) g2;
+    int64_t f2g3    = f2   * (int64_t) g3;
+    int64_t f2g4    = f2   * (int64_t) g4;
+    int64_t f2g5    = f2   * (int64_t) g5;
+    int64_t f2g6    = f2   * (int64_t) g6;
+    int64_t f2g7    = f2   * (int64_t) g7;
+    int64_t f2g8_19 = f2   * (int64_t) g8_19;
+    int64_t f2g9_19 = f2   * (int64_t) g9_19;
+    int64_t f3g0    = f3   * (int64_t) g0;
+    int64_t f3g1_2  = f3_2 * (int64_t) g1;
+    int64_t f3g2    = f3   * (int64_t) g2;
+    int64_t f3g3_2  = f3_2 * (int64_t) g3;
+    int64_t f3g4    = f3   * (int64_t) g4;
+    int64_t f3g5_2  = f3_2 * (int64_t) g5;
+    int64_t f3g6    = f3   * (int64_t) g6;
+    int64_t f3g7_38 = f3_2 * (int64_t) g7_19;
+    int64_t f3g8_19 = f3   * (int64_t) g8_19;
+    int64_t f3g9_38 = f3_2 * (int64_t) g9_19;
+    int64_t f4g0    = f4   * (int64_t) g0;
+    int64_t f4g1    = f4   * (int64_t) g1;
+    int64_t f4g2    = f4   * (int64_t) g2;
+    int64_t f4g3    = f4   * (int64_t) g3;
+    int64_t f4g4    = f4   * (int64_t) g4;
+    int64_t f4g5    = f4   * (int64_t) g5;
+    int64_t f4g6_19 = f4   * (int64_t) g6_19;
+    int64_t f4g7_19 = f4   * (int64_t) g7_19;
+    int64_t f4g8_19 = f4   * (int64_t) g8_19;
+    int64_t f4g9_19 = f4   * (int64_t) g9_19;
+    int64_t f5g0    = f5   * (int64_t) g0;
+    int64_t f5g1_2  = f5_2 * (int64_t) g1;
+    int64_t f5g2    = f5   * (int64_t) g2;
+    int64_t f5g3_2  = f5_2 * (int64_t) g3;
+    int64_t f5g4    = f5   * (int64_t) g4;
+    int64_t f5g5_38 = f5_2 * (int64_t) g5_19;
+    int64_t f5g6_19 = f5   * (int64_t) g6_19;
+    int64_t f5g7_38 = f5_2 * (int64_t) g7_19;
+    int64_t f5g8_19 = f5   * (int64_t) g8_19;
+    int64_t f5g9_38 = f5_2 * (int64_t) g9_19;
+    int64_t f6g0    = f6   * (int64_t) g0;
+    int64_t f6g1    = f6   * (int64_t) g1;
+    int64_t f6g2    = f6   * (int64_t) g2;
+    int64_t f6g3    = f6   * (int64_t) g3;
+    int64_t f6g4_19 = f6   * (int64_t) g4_19;
+    int64_t f6g5_19 = f6   * (int64_t) g5_19;
+    int64_t f6g6_19 = f6   * (int64_t) g6_19;
+    int64_t f6g7_19 = f6   * (int64_t) g7_19;
+    int64_t f6g8_19 = f6   * (int64_t) g8_19;
+    int64_t f6g9_19 = f6   * (int64_t) g9_19;
+    int64_t f7g0    = f7   * (int64_t) g0;
+    int64_t f7g1_2  = f7_2 * (int64_t) g1;
+    int64_t f7g2    = f7   * (int64_t) g2;
+    int64_t f7g3_38 = f7_2 * (int64_t) g3_19;
+    int64_t f7g4_19 = f7   * (int64_t) g4_19;
+    int64_t f7g5_38 = f7_2 * (int64_t) g5_19;
+    int64_t f7g6_19 = f7   * (int64_t) g6_19;
+    int64_t f7g7_38 = f7_2 * (int64_t) g7_19;
+    int64_t f7g8_19 = f7   * (int64_t) g8_19;
+    int64_t f7g9_38 = f7_2 * (int64_t) g9_19;
+    int64_t f8g0    = f8   * (int64_t) g0;
+    int64_t f8g1    = f8   * (int64_t) g1;
+    int64_t f8g2_19 = f8   * (int64_t) g2_19;
+    int64_t f8g3_19 = f8   * (int64_t) g3_19;
+    int64_t f8g4_19 = f8   * (int64_t) g4_19;
+    int64_t f8g5_19 = f8   * (int64_t) g5_19;
+    int64_t f8g6_19 = f8   * (int64_t) g6_19;
+    int64_t f8g7_19 = f8   * (int64_t) g7_19;
+    int64_t f8g8_19 = f8   * (int64_t) g8_19;
+    int64_t f8g9_19 = f8   * (int64_t) g9_19;
+    int64_t f9g0    = f9   * (int64_t) g0;
+    int64_t f9g1_38 = f9_2 * (int64_t) g1_19;
+    int64_t f9g2_19 = f9   * (int64_t) g2_19;
+    int64_t f9g3_38 = f9_2 * (int64_t) g3_19;
+    int64_t f9g4_19 = f9   * (int64_t) g4_19;
+    int64_t f9g5_38 = f9_2 * (int64_t) g5_19;
+    int64_t f9g6_19 = f9   * (int64_t) g6_19;
+    int64_t f9g7_38 = f9_2 * (int64_t) g7_19;
+    int64_t f9g8_19 = f9   * (int64_t) g8_19;
+    int64_t f9g9_38 = f9_2 * (int64_t) g9_19;
+    int64_t h0 = f0g0 + f1g9_38 + f2g8_19 + f3g7_38 + f4g6_19 + f5g5_38 + f6g4_19 + f7g3_38 + f8g2_19 + f9g1_38;
+    int64_t h1 = f0g1 + f1g0    + f2g9_19 + f3g8_19 + f4g7_19 + f5g6_19 + f6g5_19 + f7g4_19 + f8g3_19 + f9g2_19;
+    int64_t h2 = f0g2 + f1g1_2  + f2g0    + f3g9_38 + f4g8_19 + f5g7_38 + f6g6_19 + f7g5_38 + f8g4_19 + f9g3_38;
+    int64_t h3 = f0g3 + f1g2    + f2g1    + f3g0    + f4g9_19 + f5g8_19 + f6g7_19 + f7g6_19 + f8g5_19 + f9g4_19;
+    int64_t h4 = f0g4 + f1g3_2  + f2g2    + f3g1_2  + f4g0    + f5g9_38 + f6g8_19 + f7g7_38 + f8g6_19 + f9g5_38;
+    int64_t h5 = f0g5 + f1g4    + f2g3    + f3g2    + f4g1    + f5g0    + f6g9_19 + f7g8_19 + f8g7_19 + f9g6_19;
+    int64_t h6 = f0g6 + f1g5_2  + f2g4    + f3g3_2  + f4g2    + f5g1_2  + f6g0    + f7g9_38 + f8g8_19 + f9g7_38;
+    int64_t h7 = f0g7 + f1g6    + f2g5    + f3g4    + f4g3    + f5g2    + f6g1    + f7g0    + f8g9_19 + f9g8_19;
+    int64_t h8 = f0g8 + f1g7_2  + f2g6    + f3g5_2  + f4g4    + f5g3_2  + f6g2    + f7g1_2  + f8g0    + f9g9_38;
+    int64_t h9 = f0g9 + f1g8    + f2g7    + f3g6    + f4g5    + f5g4    + f6g3    + f7g2    + f8g1    + f9g0   ;
+    int64_t carry0;
+    int64_t carry1;
+    int64_t carry2;
+    int64_t carry3;
+    int64_t carry4;
+    int64_t carry5;
+    int64_t carry6;
+    int64_t carry7;
+    int64_t carry8;
+    int64_t carry9;
+
+    /* |h0| <= (1.65*1.65*2^52*(1+19+19+19+19)+1.65*1.65*2^50*(38+38+38+38+38))
+     *   i.e. |h0| <= 1.4*2^60; narrower ranges for h2, h4, h6, h8
+     * |h1| <= (1.65*1.65*2^51*(1+1+19+19+19+19+19+19+19+19))
+     *   i.e. |h1| <= 1.7*2^59; narrower ranges for h3, h5, h7, h9 */
+
+    carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits;
+    carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;
+    /* |h0| <= 2^25 */
+    /* |h4| <= 2^25 */
+    /* |h1| <= 1.71*2^59 */
+    /* |h5| <= 1.71*2^59 */
+
+    carry1 = h1 + (1 << 24); h2 += carry1 >> 25; h1 -= carry1 & kTop39Bits;
+    carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;
+    /* |h1| <= 2^24; from now on fits into int32 */
+    /* |h5| <= 2^24; from now on fits into int32 */
+    /* |h2| <= 1.41*2^60 */
+    /* |h6| <= 1.41*2^60 */
+
+    carry2 = h2 + (1 << 25); h3 += carry2 >> 26; h2 -= carry2 & kTop38Bits;
+    carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;
+    /* |h2| <= 2^25; from now on fits into int32 unchanged */
+    /* |h6| <= 2^25; from now on fits into int32 unchanged */
+    /* |h3| <= 1.71*2^59 */
+    /* |h7| <= 1.71*2^59 */
+
+    carry3 = h3 + (1 << 24); h4 += carry3 >> 25; h3 -= carry3 & kTop39Bits;
+    carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;
+    /* |h3| <= 2^24; from now on fits into int32 unchanged */
+    /* |h7| <= 2^24; from now on fits into int32 unchanged */
+    /* |h4| <= 1.72*2^34 */
+    /* |h8| <= 1.41*2^60 */
+
+    carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;
+    carry8 = h8 + (1 << 25); h9 += carry8 >> 26; h8 -= carry8 & kTop38Bits;
+    /* |h4| <= 2^25; from now on fits into int32 unchanged */
+    /* |h8| <= 2^25; from now on fits into int32 unchanged */
+    /* |h5| <= 1.01*2^24 */
+    /* |h9| <= 1.71*2^59 */
+
+    carry9 = h9 + (1 << 24); h0 += (carry9 >> 25) * 19; h9 -= carry9 & kTop39Bits;
+    /* |h9| <= 2^24; from now on fits into int32 unchanged */
+    /* |h0| <= 1.1*2^39 */
+
+    carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits;
+    /* |h0| <= 2^25; from now on fits into int32 unchanged */
+    /* |h1| <= 1.01*2^24 */
+
+    h[0] = (int32_t)h0;
+    h[1] = (int32_t)h1;
+    h[2] = (int32_t)h2;
+    h[3] = (int32_t)h3;
+    h[4] = (int32_t)h4;
+    h[5] = (int32_t)h5;
+    h[6] = (int32_t)h6;
+    h[7] = (int32_t)h7;
+    h[8] = (int32_t)h8;
+    h[9] = (int32_t)h9;
+}
+
+/*
+ * h = f * f
+ *
+ * Can overlap h with f.
+ *
+ * Preconditions:
+ *    |f| bounded by 1.65*2^26,1.65*2^25,1.65*2^26,1.65*2^25,etc.
+ *
+ * Postconditions:
+ *    |h| bounded by 1.01*2^25,1.01*2^24,1.01*2^25,1.01*2^24,etc.
+ *
+ * See fe_mul.c for discussion of implementation strategy.
+ */
+static void fe_sq(fe h, const fe f)
+{
+    int32_t f0 = f[0];
+    int32_t f1 = f[1];
+    int32_t f2 = f[2];
+    int32_t f3 = f[3];
+    int32_t f4 = f[4];
+    int32_t f5 = f[5];
+    int32_t f6 = f[6];
+    int32_t f7 = f[7];
+    int32_t f8 = f[8];
+    int32_t f9 = f[9];
+    int32_t f0_2 = 2 * f0;
+    int32_t f1_2 = 2 * f1;
+    int32_t f2_2 = 2 * f2;
+    int32_t f3_2 = 2 * f3;
+    int32_t f4_2 = 2 * f4;
+    int32_t f5_2 = 2 * f5;
+    int32_t f6_2 = 2 * f6;
+    int32_t f7_2 = 2 * f7;
+    int32_t f5_38 = 38 * f5; /* 1.959375*2^30 */
+    int32_t f6_19 = 19 * f6; /* 1.959375*2^30 */
+    int32_t f7_38 = 38 * f7; /* 1.959375*2^30 */
+    int32_t f8_19 = 19 * f8; /* 1.959375*2^30 */
+    int32_t f9_38 = 38 * f9; /* 1.959375*2^30 */
+    int64_t f0f0    = f0   * (int64_t) f0;
+    int64_t f0f1_2  = f0_2 * (int64_t) f1;
+    int64_t f0f2_2  = f0_2 * (int64_t) f2;
+    int64_t f0f3_2  = f0_2 * (int64_t) f3;
+    int64_t f0f4_2  = f0_2 * (int64_t) f4;
+    int64_t f0f5_2  = f0_2 * (int64_t) f5;
+    int64_t f0f6_2  = f0_2 * (int64_t) f6;
+    int64_t f0f7_2  = f0_2 * (int64_t) f7;
+    int64_t f0f8_2  = f0_2 * (int64_t) f8;
+    int64_t f0f9_2  = f0_2 * (int64_t) f9;
+    int64_t f1f1_2  = f1_2 * (int64_t) f1;
+    int64_t f1f2_2  = f1_2 * (int64_t) f2;
+    int64_t f1f3_4  = f1_2 * (int64_t) f3_2;
+    int64_t f1f4_2  = f1_2 * (int64_t) f4;
+    int64_t f1f5_4  = f1_2 * (int64_t) f5_2;
+    int64_t f1f6_2  = f1_2 * (int64_t) f6;
+    int64_t f1f7_4  = f1_2 * (int64_t) f7_2;
+    int64_t f1f8_2  = f1_2 * (int64_t) f8;
+    int64_t f1f9_76 = f1_2 * (int64_t) f9_38;
+    int64_t f2f2    = f2   * (int64_t) f2;
+    int64_t f2f3_2  = f2_2 * (int64_t) f3;
+    int64_t f2f4_2  = f2_2 * (int64_t) f4;
+    int64_t f2f5_2  = f2_2 * (int64_t) f5;
+    int64_t f2f6_2  = f2_2 * (int64_t) f6;
+    int64_t f2f7_2  = f2_2 * (int64_t) f7;
+    int64_t f2f8_38 = f2_2 * (int64_t) f8_19;
+    int64_t f2f9_38 = f2   * (int64_t) f9_38;
+    int64_t f3f3_2  = f3_2 * (int64_t) f3;
+    int64_t f3f4_2  = f3_2 * (int64_t) f4;
+    int64_t f3f5_4  = f3_2 * (int64_t) f5_2;
+    int64_t f3f6_2  = f3_2 * (int64_t) f6;
+    int64_t f3f7_76 = f3_2 * (int64_t) f7_38;
+    int64_t f3f8_38 = f3_2 * (int64_t) f8_19;
+    int64_t f3f9_76 = f3_2 * (int64_t) f9_38;
+    int64_t f4f4    = f4   * (int64_t) f4;
+    int64_t f4f5_2  = f4_2 * (int64_t) f5;
+    int64_t f4f6_38 = f4_2 * (int64_t) f6_19;
+    int64_t f4f7_38 = f4   * (int64_t) f7_38;
+    int64_t f4f8_38 = f4_2 * (int64_t) f8_19;
+    int64_t f4f9_38 = f4   * (int64_t) f9_38;
+    int64_t f5f5_38 = f5   * (int64_t) f5_38;
+    int64_t f5f6_38 = f5_2 * (int64_t) f6_19;
+    int64_t f5f7_76 = f5_2 * (int64_t) f7_38;
+    int64_t f5f8_38 = f5_2 * (int64_t) f8_19;
+    int64_t f5f9_76 = f5_2 * (int64_t) f9_38;
+    int64_t f6f6_19 = f6   * (int64_t) f6_19;
+    int64_t f6f7_38 = f6   * (int64_t) f7_38;
+    int64_t f6f8_38 = f6_2 * (int64_t) f8_19;
+    int64_t f6f9_38 = f6   * (int64_t) f9_38;
+    int64_t f7f7_38 = f7   * (int64_t) f7_38;
+    int64_t f7f8_38 = f7_2 * (int64_t) f8_19;
+    int64_t f7f9_76 = f7_2 * (int64_t) f9_38;
+    int64_t f8f8_19 = f8   * (int64_t) f8_19;
+    int64_t f8f9_38 = f8   * (int64_t) f9_38;
+    int64_t f9f9_38 = f9   * (int64_t) f9_38;
+    int64_t h0 = f0f0   + f1f9_76 + f2f8_38 + f3f7_76 + f4f6_38 + f5f5_38;
+    int64_t h1 = f0f1_2 + f2f9_38 + f3f8_38 + f4f7_38 + f5f6_38;
+    int64_t h2 = f0f2_2 + f1f1_2  + f3f9_76 + f4f8_38 + f5f7_76 + f6f6_19;
+    int64_t h3 = f0f3_2 + f1f2_2  + f4f9_38 + f5f8_38 + f6f7_38;
+    int64_t h4 = f0f4_2 + f1f3_4  + f2f2    + f5f9_76 + f6f8_38 + f7f7_38;
+    int64_t h5 = f0f5_2 + f1f4_2  + f2f3_2  + f6f9_38 + f7f8_38;
+    int64_t h6 = f0f6_2 + f1f5_4  + f2f4_2  + f3f3_2  + f7f9_76 + f8f8_19;
+    int64_t h7 = f0f7_2 + f1f6_2  + f2f5_2  + f3f4_2  + f8f9_38;
+    int64_t h8 = f0f8_2 + f1f7_4  + f2f6_2  + f3f5_4  + f4f4    + f9f9_38;
+    int64_t h9 = f0f9_2 + f1f8_2  + f2f7_2  + f3f6_2  + f4f5_2;
+    int64_t carry0;
+    int64_t carry1;
+    int64_t carry2;
+    int64_t carry3;
+    int64_t carry4;
+    int64_t carry5;
+    int64_t carry6;
+    int64_t carry7;
+    int64_t carry8;
+    int64_t carry9;
+
+    carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits;
+    carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;
+
+    carry1 = h1 + (1 << 24); h2 += carry1 >> 25; h1 -= carry1 & kTop39Bits;
+    carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;
+
+    carry2 = h2 + (1 << 25); h3 += carry2 >> 26; h2 -= carry2 & kTop38Bits;
+    carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;
+
+    carry3 = h3 + (1 << 24); h4 += carry3 >> 25; h3 -= carry3 & kTop39Bits;
+    carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;
+
+    carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;
+    carry8 = h8 + (1 << 25); h9 += carry8 >> 26; h8 -= carry8 & kTop38Bits;
+
+    carry9 = h9 + (1 << 24); h0 += (carry9 >> 25) * 19; h9 -= carry9 & kTop39Bits;
+
+    carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits;
+
+    h[0] = (int32_t)h0;
+    h[1] = (int32_t)h1;
+    h[2] = (int32_t)h2;
+    h[3] = (int32_t)h3;
+    h[4] = (int32_t)h4;
+    h[5] = (int32_t)h5;
+    h[6] = (int32_t)h6;
+    h[7] = (int32_t)h7;
+    h[8] = (int32_t)h8;
+    h[9] = (int32_t)h9;
+}
+
+static void fe_invert(fe out, const fe z)
+{
+    fe t0;
+    fe t1;
+    fe t2;
+    fe t3;
+    int i;
+
+    /*
+     * Compute z ** -1 = z ** (2 ** 255 - 19 - 2) with the exponent as
+     * 2 ** 255 - 21 = (2 ** 5) * (2 ** 250 - 1) + 11.
+     */
+
+    /* t0 = z ** 2 */
+    fe_sq(t0, z);
+
+    /* t1 = t0 ** (2 ** 2) = z ** 8 */
+    fe_sq(t1, t0);
+    fe_sq(t1, t1);
+
+    /* t1 = z * t1 = z ** 9 */
+    fe_mul(t1, z, t1);
+    /* t0 = t0 * t1 = z ** 11 -- stash t0 away for the end. */
+    fe_mul(t0, t0, t1);
+
+    /* t2 = t0 ** 2 = z ** 22 */
+    fe_sq(t2, t0);
+
+    /* t1 = t1 * t2 = z ** (2 ** 5 - 1) */
+    fe_mul(t1, t1, t2);
+
+    /* t2 = t1 ** (2 ** 5) = z ** ((2 ** 5) * (2 ** 5 - 1)) */
+    fe_sq(t2, t1);
+    for (i = 1; i < 5; ++i) {
+        fe_sq(t2, t2);
+    }
+
+    /* t1 = t1 * t2 = z ** ((2 ** 5 + 1) * (2 ** 5 - 1)) = z ** (2 ** 10 - 1) */
+    fe_mul(t1, t2, t1);
+
+    /* Continuing similarly... */
+
+    /* t2 = z ** (2 ** 20 - 1) */
+    fe_sq(t2, t1);
+    for (i = 1; i < 10; ++i) {
+        fe_sq(t2, t2);
+    }
+    fe_mul(t2, t2, t1);
+
+    /* t2 = z ** (2 ** 40 - 1) */
+    fe_sq(t3, t2);
+    for (i = 1; i < 20; ++i) {
+        fe_sq(t3, t3);
+    }
+    fe_mul(t2, t3, t2);
+
+    /* t2 = z ** (2 ** 10) * (2 ** 40 - 1) */
+    for (i = 0; i < 10; ++i) {
+        fe_sq(t2, t2);
+    }
+    /* t1 = z ** (2 ** 50 - 1) */
+    fe_mul(t1, t2, t1);
+
+    /* t2 = z ** (2 ** 100 - 1) */
+    fe_sq(t2, t1);
+    for (i = 1; i < 50; ++i) {
+        fe_sq(t2, t2);
+    }
+    fe_mul(t2, t2, t1);
+
+    /* t2 = z ** (2 ** 200 - 1) */
+    fe_sq(t3, t2);
+    for (i = 1; i < 100; ++i) {
+        fe_sq(t3, t3);
+    }
+    fe_mul(t2, t3, t2);
+
+    /* t2 = z ** ((2 ** 50) * (2 ** 200 - 1) */
+    fe_sq(t2, t2);
+    for (i = 1; i < 50; ++i) {
+        fe_sq(t2, t2);
+    }
+
+    /* t1 = z ** (2 ** 250 - 1) */
+    fe_mul(t1, t2, t1);
+
+    /* t1 = z ** ((2 ** 5) * (2 ** 250 - 1)) */
+    fe_sq(t1, t1);
+    for (i = 1; i < 5; ++i) {
+        fe_sq(t1, t1);
+    }
+
+    /* Recall t0 = z ** 11; out = z ** (2 ** 255 - 21) */
+    fe_mul(out, t1, t0);
+}
+
+/*
+ * h = -f
+ *
+ * Preconditions:
+ *    |f| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+ *
+ * Postconditions:
+ *    |h| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+ */
+static void fe_neg(fe h, const fe f)
+{
+    unsigned i;
+
+    for (i = 0; i < 10; i++) {
+        h[i] = -f[i];
+    }
+}
+
+/*
+ * Replace (f,g) with (g,g) if b == 1;
+ * replace (f,g) with (f,g) if b == 0.
+ *
+ * Preconditions: b in {0,1}.
+ */
+static void fe_cmov(fe f, const fe g, unsigned b)
+{
+    size_t i;
+
+    b = 0-b;
+    for (i = 0; i < 10; i++) {
+        int32_t x = f[i] ^ g[i];
+        x &= b;
+        f[i] ^= x;
+    }
+}
+
+/*
+ * return 0 if f == 0
+ * return 1 if f != 0
+ *
+ * Preconditions:
+ *    |f| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc.
+ */
+static int fe_isnonzero(const fe f)
+{
+    uint8_t s[32];
+    static const uint8_t zero[32] = {0};
+
+    fe_tobytes(s, f);
+
+    return CRYPTO_memcmp(s, zero, sizeof(zero)) != 0;
+}
+
+/*
+ * return 1 if f is in {1,3,5,...,q-2}
+ * return 0 if f is in {0,2,4,...,q-1}
+ *
+ * Preconditions:
+ *    |f| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc.
+ */
+static int fe_isnegative(const fe f)
+{
+    uint8_t s[32];
+
+    fe_tobytes(s, f);
+    return s[0] & 1;
+}
+
+/*
+ * h = 2 * f * f
+ *
+ * Can overlap h with f.
+ *
+ * Preconditions:
+ *    |f| bounded by 1.65*2^26,1.65*2^25,1.65*2^26,1.65*2^25,etc.
+ *
+ * Postconditions:
+ *    |h| bounded by 1.01*2^25,1.01*2^24,1.01*2^25,1.01*2^24,etc.
+ *
+ * See fe_mul.c for discussion of implementation strategy.
+ */
+static void fe_sq2(fe h, const fe f)
+{
+    int32_t f0 = f[0];
+    int32_t f1 = f[1];
+    int32_t f2 = f[2];
+    int32_t f3 = f[3];
+    int32_t f4 = f[4];
+    int32_t f5 = f[5];
+    int32_t f6 = f[6];
+    int32_t f7 = f[7];
+    int32_t f8 = f[8];
+    int32_t f9 = f[9];
+    int32_t f0_2 = 2 * f0;
+    int32_t f1_2 = 2 * f1;
+    int32_t f2_2 = 2 * f2;
+    int32_t f3_2 = 2 * f3;
+    int32_t f4_2 = 2 * f4;
+    int32_t f5_2 = 2 * f5;
+    int32_t f6_2 = 2 * f6;
+    int32_t f7_2 = 2 * f7;
+    int32_t f5_38 = 38 * f5; /* 1.959375*2^30 */
+    int32_t f6_19 = 19 * f6; /* 1.959375*2^30 */
+    int32_t f7_38 = 38 * f7; /* 1.959375*2^30 */
+    int32_t f8_19 = 19 * f8; /* 1.959375*2^30 */
+    int32_t f9_38 = 38 * f9; /* 1.959375*2^30 */
+    int64_t f0f0    = f0   * (int64_t) f0;
+    int64_t f0f1_2  = f0_2 * (int64_t) f1;
+    int64_t f0f2_2  = f0_2 * (int64_t) f2;
+    int64_t f0f3_2  = f0_2 * (int64_t) f3;
+    int64_t f0f4_2  = f0_2 * (int64_t) f4;
+    int64_t f0f5_2  = f0_2 * (int64_t) f5;
+    int64_t f0f6_2  = f0_2 * (int64_t) f6;
+    int64_t f0f7_2  = f0_2 * (int64_t) f7;
+    int64_t f0f8_2  = f0_2 * (int64_t) f8;
+    int64_t f0f9_2  = f0_2 * (int64_t) f9;
+    int64_t f1f1_2  = f1_2 * (int64_t) f1;
+    int64_t f1f2_2  = f1_2 * (int64_t) f2;
+    int64_t f1f3_4  = f1_2 * (int64_t) f3_2;
+    int64_t f1f4_2  = f1_2 * (int64_t) f4;
+    int64_t f1f5_4  = f1_2 * (int64_t) f5_2;
+    int64_t f1f6_2  = f1_2 * (int64_t) f6;
+    int64_t f1f7_4  = f1_2 * (int64_t) f7_2;
+    int64_t f1f8_2  = f1_2 * (int64_t) f8;
+    int64_t f1f9_76 = f1_2 * (int64_t) f9_38;
+    int64_t f2f2    = f2   * (int64_t) f2;
+    int64_t f2f3_2  = f2_2 * (int64_t) f3;
+    int64_t f2f4_2  = f2_2 * (int64_t) f4;
+    int64_t f2f5_2  = f2_2 * (int64_t) f5;
+    int64_t f2f6_2  = f2_2 * (int64_t) f6;
+    int64_t f2f7_2  = f2_2 * (int64_t) f7;
+    int64_t f2f8_38 = f2_2 * (int64_t) f8_19;
+    int64_t f2f9_38 = f2   * (int64_t) f9_38;
+    int64_t f3f3_2  = f3_2 * (int64_t) f3;
+    int64_t f3f4_2  = f3_2 * (int64_t) f4;
+    int64_t f3f5_4  = f3_2 * (int64_t) f5_2;
+    int64_t f3f6_2  = f3_2 * (int64_t) f6;
+    int64_t f3f7_76 = f3_2 * (int64_t) f7_38;
+    int64_t f3f8_38 = f3_2 * (int64_t) f8_19;
+    int64_t f3f9_76 = f3_2 * (int64_t) f9_38;
+    int64_t f4f4    = f4   * (int64_t) f4;
+    int64_t f4f5_2  = f4_2 * (int64_t) f5;
+    int64_t f4f6_38 = f4_2 * (int64_t) f6_19;
+    int64_t f4f7_38 = f4   * (int64_t) f7_38;
+    int64_t f4f8_38 = f4_2 * (int64_t) f8_19;
+    int64_t f4f9_38 = f4   * (int64_t) f9_38;
+    int64_t f5f5_38 = f5   * (int64_t) f5_38;
+    int64_t f5f6_38 = f5_2 * (int64_t) f6_19;
+    int64_t f5f7_76 = f5_2 * (int64_t) f7_38;
+    int64_t f5f8_38 = f5_2 * (int64_t) f8_19;
+    int64_t f5f9_76 = f5_2 * (int64_t) f9_38;
+    int64_t f6f6_19 = f6   * (int64_t) f6_19;
+    int64_t f6f7_38 = f6   * (int64_t) f7_38;
+    int64_t f6f8_38 = f6_2 * (int64_t) f8_19;
+    int64_t f6f9_38 = f6   * (int64_t) f9_38;
+    int64_t f7f7_38 = f7   * (int64_t) f7_38;
+    int64_t f7f8_38 = f7_2 * (int64_t) f8_19;
+    int64_t f7f9_76 = f7_2 * (int64_t) f9_38;
+    int64_t f8f8_19 = f8   * (int64_t) f8_19;
+    int64_t f8f9_38 = f8   * (int64_t) f9_38;
+    int64_t f9f9_38 = f9   * (int64_t) f9_38;
+    int64_t h0 = f0f0   + f1f9_76 + f2f8_38 + f3f7_76 + f4f6_38 + f5f5_38;
+    int64_t h1 = f0f1_2 + f2f9_38 + f3f8_38 + f4f7_38 + f5f6_38;
+    int64_t h2 = f0f2_2 + f1f1_2  + f3f9_76 + f4f8_38 + f5f7_76 + f6f6_19;
+    int64_t h3 = f0f3_2 + f1f2_2  + f4f9_38 + f5f8_38 + f6f7_38;
+    int64_t h4 = f0f4_2 + f1f3_4  + f2f2    + f5f9_76 + f6f8_38 + f7f7_38;
+    int64_t h5 = f0f5_2 + f1f4_2  + f2f3_2  + f6f9_38 + f7f8_38;
+    int64_t h6 = f0f6_2 + f1f5_4  + f2f4_2  + f3f3_2  + f7f9_76 + f8f8_19;
+    int64_t h7 = f0f7_2 + f1f6_2  + f2f5_2  + f3f4_2  + f8f9_38;
+    int64_t h8 = f0f8_2 + f1f7_4  + f2f6_2  + f3f5_4  + f4f4    + f9f9_38;
+    int64_t h9 = f0f9_2 + f1f8_2  + f2f7_2  + f3f6_2  + f4f5_2;
+    int64_t carry0;
+    int64_t carry1;
+    int64_t carry2;
+    int64_t carry3;
+    int64_t carry4;
+    int64_t carry5;
+    int64_t carry6;
+    int64_t carry7;
+    int64_t carry8;
+    int64_t carry9;
+
+    h0 += h0;
+    h1 += h1;
+    h2 += h2;
+    h3 += h3;
+    h4 += h4;
+    h5 += h5;
+    h6 += h6;
+    h7 += h7;
+    h8 += h8;
+    h9 += h9;
+
+    carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits;
+    carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;
+
+    carry1 = h1 + (1 << 24); h2 += carry1 >> 25; h1 -= carry1 & kTop39Bits;
+    carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;
+
+    carry2 = h2 + (1 << 25); h3 += carry2 >> 26; h2 -= carry2 & kTop38Bits;
+    carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;
+
+    carry3 = h3 + (1 << 24); h4 += carry3 >> 25; h3 -= carry3 & kTop39Bits;
+    carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;
+
+    carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;
+    carry8 = h8 + (1 << 25); h9 += carry8 >> 26; h8 -= carry8 & kTop38Bits;
+
+    carry9 = h9 + (1 << 24); h0 += (carry9 >> 25) * 19; h9 -= carry9 & kTop39Bits;
+
+    carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits;
+
+    h[0] = (int32_t)h0;
+    h[1] = (int32_t)h1;
+    h[2] = (int32_t)h2;
+    h[3] = (int32_t)h3;
+    h[4] = (int32_t)h4;
+    h[5] = (int32_t)h5;
+    h[6] = (int32_t)h6;
+    h[7] = (int32_t)h7;
+    h[8] = (int32_t)h8;
+    h[9] = (int32_t)h9;
+}
+
+static void fe_pow22523(fe out, const fe z)
+{
+    fe t0;
+    fe t1;
+    fe t2;
+    int i;
+
+    fe_sq(t0, z);
+    fe_sq(t1, t0);
+    for (i = 1; i < 2; ++i) {
+        fe_sq(t1, t1);
+    }
+    fe_mul(t1, z, t1);
+    fe_mul(t0, t0, t1);
+    fe_sq(t0, t0);
+    fe_mul(t0, t1, t0);
+    fe_sq(t1, t0);
+    for (i = 1; i < 5; ++i) {
+        fe_sq(t1, t1);
+    }
+    fe_mul(t0, t1, t0);
+    fe_sq(t1, t0);
+    for (i = 1; i < 10; ++i) {
+        fe_sq(t1, t1);
+    }
+    fe_mul(t1, t1, t0);
+    fe_sq(t2, t1);
+    for (i = 1; i < 20; ++i) {
+        fe_sq(t2, t2);
+    }
+    fe_mul(t1, t2, t1);
+    fe_sq(t1, t1);
+    for (i = 1; i < 10; ++i) {
+        fe_sq(t1, t1);
+    }
+    fe_mul(t0, t1, t0);
+    fe_sq(t1, t0);
+    for (i = 1; i < 50; ++i) {
+        fe_sq(t1, t1);
+    }
+    fe_mul(t1, t1, t0);
+    fe_sq(t2, t1);
+    for (i = 1; i < 100; ++i) {
+        fe_sq(t2, t2);
+    }
+    fe_mul(t1, t2, t1);
+    fe_sq(t1, t1);
+    for (i = 1; i < 50; ++i) {
+        fe_sq(t1, t1);
+    }
+    fe_mul(t0, t1, t0);
+    fe_sq(t0, t0);
+    for (i = 1; i < 2; ++i) {
+        fe_sq(t0, t0);
+    }
+    fe_mul(out, t0, z);
+}
+
+/*
+ * ge means group element.
+ *
+ * Here the group is the set of pairs (x,y) of field elements (see fe.h)
+ * satisfying -x^2 + y^2 = 1 + d x^2y^2
+ * where d = -121665/121666.
+ *
+ * Representations:
+ *   ge_p2 (projective): (X:Y:Z) satisfying x=X/Z, y=Y/Z
+ *   ge_p3 (extended): (X:Y:Z:T) satisfying x=X/Z, y=Y/Z, XY=ZT
+ *   ge_p1p1 (completed): ((X:Z),(Y:T)) satisfying x=X/Z, y=Y/T
+ *   ge_precomp (Duif): (y+x,y-x,2dxy)
+ */
+typedef struct {
+    fe X;
+    fe Y;
+    fe Z;
+} ge_p2;
+
+typedef struct {
+    fe X;
+    fe Y;
+    fe Z;
+    fe T;
+} ge_p3;
+
+typedef struct {
+    fe X;
+    fe Y;
+    fe Z;
+    fe T;
+} ge_p1p1;
+
+typedef struct {
+    fe yplusx;
+    fe yminusx;
+    fe xy2d;
+} ge_precomp;
+
+typedef struct {
+    fe YplusX;
+    fe YminusX;
+    fe Z;
+    fe T2d;
+} ge_cached;
+
+static void ge_tobytes(uint8_t *s, const ge_p2 *h)
+{
+    fe recip;
+    fe x;
+    fe y;
+
+    fe_invert(recip, h->Z);
+    fe_mul(x, h->X, recip);
+    fe_mul(y, h->Y, recip);
+    fe_tobytes(s, y);
+    s[31] ^= fe_isnegative(x) << 7;
+}
+
+static void ge_p3_tobytes(uint8_t *s, const ge_p3 *h)
+{
+    fe recip;
+    fe x;
+    fe y;
+
+    fe_invert(recip, h->Z);
+    fe_mul(x, h->X, recip);
+    fe_mul(y, h->Y, recip);
+    fe_tobytes(s, y);
+    s[31] ^= fe_isnegative(x) << 7;
+}
+
+static const fe d = {
+    -10913610, 13857413, -15372611, 6949391,   114729,
+    -8787816,  -6275908, -3247719,  -18696448, -12055116
+};
+
+static const fe sqrtm1 = {
+    -32595792, -7943725,  9377950,  3500415, 12389472,
+    -272473,   -25146209, -2005654, 326686,  11406482
+};
+
+static int ge_frombytes_vartime(ge_p3 *h, const uint8_t *s)
+{
+    fe u;
+    fe v;
+    fe v3;
+    fe vxx;
+    fe check;
+
+    fe_frombytes(h->Y, s);
+    fe_1(h->Z);
+    fe_sq(u, h->Y);
+    fe_mul(v, u, d);
+    fe_sub(u, u, h->Z); /* u = y^2-1 */
+    fe_add(v, v, h->Z); /* v = dy^2+1 */
+
+    fe_sq(v3, v);
+    fe_mul(v3, v3, v); /* v3 = v^3 */
+    fe_sq(h->X, v3);
+    fe_mul(h->X, h->X, v);
+    fe_mul(h->X, h->X, u); /* x = uv^7 */
+
+    fe_pow22523(h->X, h->X); /* x = (uv^7)^((q-5)/8) */
+    fe_mul(h->X, h->X, v3);
+    fe_mul(h->X, h->X, u); /* x = uv^3(uv^7)^((q-5)/8) */
+
+    fe_sq(vxx, h->X);
+    fe_mul(vxx, vxx, v);
+    fe_sub(check, vxx, u); /* vx^2-u */
+    if (fe_isnonzero(check)) {
+        fe_add(check, vxx, u); /* vx^2+u */
+        if (fe_isnonzero(check)) {
+            return -1;
+        }
+        fe_mul(h->X, h->X, sqrtm1);
+    }
+
+    if (fe_isnegative(h->X) != (s[31] >> 7)) {
+        fe_neg(h->X, h->X);
+    }
+
+    fe_mul(h->T, h->X, h->Y);
+    return 0;
+}
+
+static void ge_p2_0(ge_p2 *h)
+{
+    fe_0(h->X);
+    fe_1(h->Y);
+    fe_1(h->Z);
+}
+
+static void ge_p3_0(ge_p3 *h)
+{
+    fe_0(h->X);
+    fe_1(h->Y);
+    fe_1(h->Z);
+    fe_0(h->T);
+}
+
+static void ge_precomp_0(ge_precomp *h)
+{
+    fe_1(h->yplusx);
+    fe_1(h->yminusx);
+    fe_0(h->xy2d);
+}
+
+/* r = p */
+static void ge_p3_to_p2(ge_p2 *r, const ge_p3 *p)
+{
+    fe_copy(r->X, p->X);
+    fe_copy(r->Y, p->Y);
+    fe_copy(r->Z, p->Z);
+}
+
+static const fe d2 = {
+    -21827239, -5839606,  -30745221, 13898782, 229458,
+    15978800,  -12551817, -6495438,  29715968, 9444199
+};
+
+/* r = p */
+static void ge_p3_to_cached(ge_cached *r, const ge_p3 *p)
+{
+    fe_add(r->YplusX, p->Y, p->X);
+    fe_sub(r->YminusX, p->Y, p->X);
+    fe_copy(r->Z, p->Z);
+    fe_mul(r->T2d, p->T, d2);
+}
+
+/* r = p */
+static void ge_p1p1_to_p2(ge_p2 *r, const ge_p1p1 *p)
+{
+    fe_mul(r->X, p->X, p->T);
+    fe_mul(r->Y, p->Y, p->Z);
+    fe_mul(r->Z, p->Z, p->T);
+}
+
+/* r = p */
+static void ge_p1p1_to_p3(ge_p3 *r, const ge_p1p1 *p)
+{
+    fe_mul(r->X, p->X, p->T);
+    fe_mul(r->Y, p->Y, p->Z);
+    fe_mul(r->Z, p->Z, p->T);
+    fe_mul(r->T, p->X, p->Y);
+}
+
+/* r = 2 * p */
+static void ge_p2_dbl(ge_p1p1 *r, const ge_p2 *p)
+{
+    fe t0;
+
+    fe_sq(r->X, p->X);
+    fe_sq(r->Z, p->Y);
+    fe_sq2(r->T, p->Z);
+    fe_add(r->Y, p->X, p->Y);
+    fe_sq(t0, r->Y);
+    fe_add(r->Y, r->Z, r->X);
+    fe_sub(r->Z, r->Z, r->X);
+    fe_sub(r->X, t0, r->Y);
+    fe_sub(r->T, r->T, r->Z);
+}
+
+/* r = 2 * p */
+static void ge_p3_dbl(ge_p1p1 *r, const ge_p3 *p)
+{
+    ge_p2 q;
+    ge_p3_to_p2(&q, p);
+    ge_p2_dbl(r, &q);
+}
+
+/* r = p + q */
+static void ge_madd(ge_p1p1 *r, const ge_p3 *p, const ge_precomp *q)
+{
+    fe t0;
+
+    fe_add(r->X, p->Y, p->X);
+    fe_sub(r->Y, p->Y, p->X);
+    fe_mul(r->Z, r->X, q->yplusx);
+    fe_mul(r->Y, r->Y, q->yminusx);
+    fe_mul(r->T, q->xy2d, p->T);
+    fe_add(t0, p->Z, p->Z);
+    fe_sub(r->X, r->Z, r->Y);
+    fe_add(r->Y, r->Z, r->Y);
+    fe_add(r->Z, t0, r->T);
+    fe_sub(r->T, t0, r->T);
+}
+
+/* r = p - q */
+static void ge_msub(ge_p1p1 *r, const ge_p3 *p, const ge_precomp *q)
+{
+    fe t0;
+
+    fe_add(r->X, p->Y, p->X);
+    fe_sub(r->Y, p->Y, p->X);
+    fe_mul(r->Z, r->X, q->yminusx);
+    fe_mul(r->Y, r->Y, q->yplusx);
+    fe_mul(r->T, q->xy2d, p->T);
+    fe_add(t0, p->Z, p->Z);
+    fe_sub(r->X, r->Z, r->Y);
+    fe_add(r->Y, r->Z, r->Y);
+    fe_sub(r->Z, t0, r->T);
+    fe_add(r->T, t0, r->T);
+}
+
+/* r = p + q */
+static void ge_add(ge_p1p1 *r, const ge_p3 *p, const ge_cached *q)
+{
+    fe t0;
+
+    fe_add(r->X, p->Y, p->X);
+    fe_sub(r->Y, p->Y, p->X);
+    fe_mul(r->Z, r->X, q->YplusX);
+    fe_mul(r->Y, r->Y, q->YminusX);
+    fe_mul(r->T, q->T2d, p->T);
+    fe_mul(r->X, p->Z, q->Z);
+    fe_add(t0, r->X, r->X);
+    fe_sub(r->X, r->Z, r->Y);
+    fe_add(r->Y, r->Z, r->Y);
+    fe_add(r->Z, t0, r->T);
+    fe_sub(r->T, t0, r->T);
+}
+
+/* r = p - q */
+static void ge_sub(ge_p1p1 *r, const ge_p3 *p, const ge_cached *q)
+{
+    fe t0;
+
+    fe_add(r->X, p->Y, p->X);
+    fe_sub(r->Y, p->Y, p->X);
+    fe_mul(r->Z, r->X, q->YminusX);
+    fe_mul(r->Y, r->Y, q->YplusX);
+    fe_mul(r->T, q->T2d, p->T);
+    fe_mul(r->X, p->Z, q->Z);
+    fe_add(t0, r->X, r->X);
+    fe_sub(r->X, r->Z, r->Y);
+    fe_add(r->Y, r->Z, r->Y);
+    fe_sub(r->Z, t0, r->T);
+    fe_add(r->T, t0, r->T);
+}
+
+static uint8_t equal(signed char b, signed char c)
+{
+    uint8_t ub = b;
+    uint8_t uc = c;
+    uint8_t x = ub ^ uc; /* 0: yes; 1..255: no */
+    uint32_t y = x;      /* 0: yes; 1..255: no */
+    y -= 1;              /* 4294967295: yes; 0..254: no */
+    y >>= 31;            /* 1: yes; 0: no */
+    return y;
+}
+
+static void cmov(ge_precomp *t, const ge_precomp *u, uint8_t b)
+{
+    fe_cmov(t->yplusx, u->yplusx, b);
+    fe_cmov(t->yminusx, u->yminusx, b);
+    fe_cmov(t->xy2d, u->xy2d, b);
+}
+
+/* k25519Precomp[i][j] = (j+1)*256^i*B */
+static const ge_precomp k25519Precomp[32][8] = {
+    {
+        {
+            {25967493, -14356035, 29566456, 3660896, -12694345, 4014787,
+             27544626, -11754271, -6079156, 2047605},
+            {-12545711, 934262, -2722910, 3049990, -727428, 9406986, 12720692,
+             5043384, 19500929, -15469378},
+            {-8738181, 4489570, 9688441, -14785194, 10184609, -12363380,
+             29287919, 11864899, -24514362, -4438546},
+        },
+        {
+            {-12815894, -12976347, -21581243, 11784320, -25355658, -2750717,
+             -11717903, -3814571, -358445, -10211303},
+            {-21703237, 6903825, 27185491, 6451973, -29577724, -9554005,
+             -15616551, 11189268, -26829678, -5319081},
+            {26966642, 11152617, 32442495, 15396054, 14353839, -12752335,
+             -3128826, -9541118, -15472047, -4166697},
+        },
+        {
+            {15636291, -9688557, 24204773, -7912398, 616977, -16685262,
+             27787600, -14772189, 28944400, -1550024},
+            {16568933, 4717097, -11556148, -1102322, 15682896, -11807043,
+             16354577, -11775962, 7689662, 11199574},
+            {30464156, -5976125, -11779434, -15670865, 23220365, 15915852,
+             7512774, 10017326, -17749093, -9920357},
+        },
+        {
+            {-17036878, 13921892, 10945806, -6033431, 27105052, -16084379,
+             -28926210, 15006023, 3284568, -6276540},
+            {23599295, -8306047, -11193664, -7687416, 13236774, 10506355,
+             7464579, 9656445, 13059162, 10374397},
+            {7798556, 16710257, 3033922, 2874086, 28997861, 2835604, 32406664,
+             -3839045, -641708, -101325},
+        },
+        {
+            {10861363, 11473154, 27284546, 1981175, -30064349, 12577861,
+             32867885, 14515107, -15438304, 10819380},
+            {4708026, 6336745, 20377586, 9066809, -11272109, 6594696, -25653668,
+             12483688, -12668491, 5581306},
+            {19563160, 16186464, -29386857, 4097519, 10237984, -4348115,
+             28542350, 13850243, -23678021, -15815942},
+        },
+        {
+            {-15371964, -12862754, 32573250, 4720197, -26436522, 5875511,
+             -19188627, -15224819, -9818940, -12085777},
+            {-8549212, 109983, 15149363, 2178705, 22900618, 4543417, 3044240,
+             -15689887, 1762328, 14866737},
+            {-18199695, -15951423, -10473290, 1707278, -17185920, 3916101,
+             -28236412, 3959421, 27914454, 4383652},
+        },
+        {
+            {5153746, 9909285, 1723747, -2777874, 30523605, 5516873, 19480852,
+             5230134, -23952439, -15175766},
+            {-30269007, -3463509, 7665486, 10083793, 28475525, 1649722,
+             20654025, 16520125, 30598449, 7715701},
+            {28881845, 14381568, 9657904, 3680757, -20181635, 7843316,
+             -31400660, 1370708, 29794553, -1409300},
+        },
+        {
+            {14499471, -2729599, -33191113, -4254652, 28494862, 14271267,
+             30290735, 10876454, -33154098, 2381726},
+            {-7195431, -2655363, -14730155, 462251, -27724326, 3941372,
+             -6236617, 3696005, -32300832, 15351955},
+            {27431194, 8222322, 16448760, -3907995, -18707002, 11938355,
+             -32961401, -2970515, 29551813, 10109425},
+        },
+    },
+    {
+        {
+            {-13657040, -13155431, -31283750, 11777098, 21447386, 6519384,
+             -2378284, -1627556, 10092783, -4764171},
+            {27939166, 14210322, 4677035, 16277044, -22964462, -12398139,
+             -32508754, 12005538, -17810127, 12803510},
+            {17228999, -15661624, -1233527, 300140, -1224870, -11714777,
+             30364213, -9038194, 18016357, 4397660},
+        },
+        {
+            {-10958843, -7690207, 4776341, -14954238, 27850028, -15602212,
+             -26619106, 14544525, -17477504, 982639},
+            {29253598, 15796703, -2863982, -9908884, 10057023, 3163536, 7332899,
+             -4120128, -21047696, 9934963},
+            {5793303, 16271923, -24131614, -10116404, 29188560, 1206517,
+             -14747930, 4559895, -30123922, -10897950},
+        },
+        {
+            {-27643952, -11493006, 16282657, -11036493, 28414021, -15012264,
+             24191034, 4541697, -13338309, 5500568},
+            {12650548, -1497113, 9052871, 11355358, -17680037, -8400164,
+             -17430592, 12264343, 10874051, 13524335},
+            {25556948, -3045990, 714651, 2510400, 23394682, -10415330, 33119038,
+             5080568, -22528059, 5376628},
+        },
+        {
+            {-26088264, -4011052, -17013699, -3537628, -6726793, 1920897,
+             -22321305, -9447443, 4535768, 1569007},
+            {-2255422, 14606630, -21692440, -8039818, 28430649, 8775819,
+             -30494562, 3044290, 31848280, 12543772},
+            {-22028579, 2943893, -31857513, 6777306, 13784462, -4292203,
+             -27377195, -2062731, 7718482, 14474653},
+        },
+        {
+            {2385315, 2454213, -22631320, 46603, -4437935, -15680415, 656965,
+             -7236665, 24316168, -5253567},
+            {13741529, 10911568, -33233417, -8603737, -20177830, -1033297,
+             33040651, -13424532, -20729456, 8321686},
+            {21060490, -2212744, 15712757, -4336099, 1639040, 10656336,
+             23845965, -11874838, -9984458, 608372},
+        },
+        {
+            {-13672732, -15087586, -10889693, -7557059, -6036909, 11305547,
+             1123968, -6780577, 27229399, 23887},
+            {-23244140, -294205, -11744728, 14712571, -29465699, -2029617,
+             12797024, -6440308, -1633405, 16678954},
+            {-29500620, 4770662, -16054387, 14001338, 7830047, 9564805,
+             -1508144, -4795045, -17169265, 4904953},
+        },
+        {
+            {24059557, 14617003, 19037157, -15039908, 19766093, -14906429,
+             5169211, 16191880, 2128236, -4326833},
+            {-16981152, 4124966, -8540610, -10653797, 30336522, -14105247,
+             -29806336, 916033, -6882542, -2986532},
+            {-22630907, 12419372, -7134229, -7473371, -16478904, 16739175,
+             285431, 2763829, 15736322, 4143876},
+        },
+        {
+            {2379352, 11839345, -4110402, -5988665, 11274298, 794957, 212801,
+             -14594663, 23527084, -16458268},
+            {33431127, -11130478, -17838966, -15626900, 8909499, 8376530,
+             -32625340, 4087881, -15188911, -14416214},
+            {1767683, 7197987, -13205226, -2022635, -13091350, 448826, 5799055,
+             4357868, -4774191, -16323038},
+        },
+    },
+    {
+        {
+            {6721966, 13833823, -23523388, -1551314, 26354293, -11863321,
+             23365147, -3949732, 7390890, 2759800},
+            {4409041, 2052381, 23373853, 10530217, 7676779, -12885954, 21302353,
+             -4264057, 1244380, -12919645},
+            {-4421239, 7169619, 4982368, -2957590, 30256825, -2777540, 14086413,
+             9208236, 15886429, 16489664},
+        },
+        {
+            {1996075, 10375649, 14346367, 13311202, -6874135, -16438411,
+             -13693198, 398369, -30606455, -712933},
+            {-25307465, 9795880, -2777414, 14878809, -33531835, 14780363,
+             13348553, 12076947, -30836462, 5113182},
+            {-17770784, 11797796, 31950843, 13929123, -25888302, 12288344,
+             -30341101, -7336386, 13847711, 5387222},
+        },
+        {
+            {-18582163, -3416217, 17824843, -2340966, 22744343, -10442611,
+             8763061, 3617786, -19600662, 10370991},
+            {20246567, -14369378, 22358229, -543712, 18507283, -10413996,
+             14554437, -8746092, 32232924, 16763880},
+            {9648505, 10094563, 26416693, 14745928, -30374318, -6472621,
+             11094161, 15689506, 3140038, -16510092},
+        },
+        {
+            {-16160072, 5472695, 31895588, 4744994, 8823515, 10365685,
+             -27224800, 9448613, -28774454, 366295},
+            {19153450, 11523972, -11096490, -6503142, -24647631, 5420647,
+             28344573, 8041113, 719605, 11671788},
+            {8678025, 2694440, -6808014, 2517372, 4964326, 11152271, -15432916,
+             -15266516, 27000813, -10195553},
+        },
+        {
+            {-15157904, 7134312, 8639287, -2814877, -7235688, 10421742, 564065,
+             5336097, 6750977, -14521026},
+            {11836410, -3979488, 26297894, 16080799, 23455045, 15735944,
+             1695823, -8819122, 8169720, 16220347},
+            {-18115838, 8653647, 17578566, -6092619, -8025777, -16012763,
+             -11144307, -2627664, -5990708, -14166033},
+        },
+        {
+            {-23308498, -10968312, 15213228, -10081214, -30853605, -11050004,
+             27884329, 2847284, 2655861, 1738395},
+            {-27537433, -14253021, -25336301, -8002780, -9370762, 8129821,
+             21651608, -3239336, -19087449, -11005278},
+            {1533110, 3437855, 23735889, 459276, 29970501, 11335377, 26030092,
+             5821408, 10478196, 8544890},
+        },
+        {
+            {32173121, -16129311, 24896207, 3921497, 22579056, -3410854,
+             19270449, 12217473, 17789017, -3395995},
+            {-30552961, -2228401, -15578829, -10147201, 13243889, 517024,
+             15479401, -3853233, 30460520, 1052596},
+            {-11614875, 13323618, 32618793, 8175907, -15230173, 12596687,
+             27491595, -4612359, 3179268, -9478891},
+        },
+        {
+            {31947069, -14366651, -4640583, -15339921, -15125977, -6039709,
+             -14756777, -16411740, 19072640, -9511060},
+            {11685058, 11822410, 3158003, -13952594, 33402194, -4165066,
+             5977896, -5215017, 473099, 5040608},
+            {-20290863, 8198642, -27410132, 11602123, 1290375, -2799760,
+             28326862, 1721092, -19558642, -3131606},
+        },
+    },
+    {
+        {
+            {7881532, 10687937, 7578723, 7738378, -18951012, -2553952, 21820786,
+             8076149, -27868496, 11538389},
+            {-19935666, 3899861, 18283497, -6801568, -15728660, -11249211,
+             8754525, 7446702, -5676054, 5797016},
+            {-11295600, -3793569, -15782110, -7964573, 12708869, -8456199,
+             2014099, -9050574, -2369172, -5877341},
+        },
+        {
+            {-22472376, -11568741, -27682020, 1146375, 18956691, 16640559,
+             1192730, -3714199, 15123619, 10811505},
+            {14352098, -3419715, -18942044, 10822655, 32750596, 4699007, -70363,
+             15776356, -28886779, -11974553},
+            {-28241164, -8072475, -4978962, -5315317, 29416931, 1847569,
+             -20654173, -16484855, 4714547, -9600655},
+        },
+        {
+            {15200332, 8368572, 19679101, 15970074, -31872674, 1959451,
+             24611599, -4543832, -11745876, 12340220},
+            {12876937, -10480056, 33134381, 6590940, -6307776, 14872440,
+             9613953, 8241152, 15370987, 9608631},
+            {-4143277, -12014408, 8446281, -391603, 4407738, 13629032, -7724868,
+             15866074, -28210621, -8814099},
+        },
+        {
+            {26660628, -15677655, 8393734, 358047, -7401291, 992988, -23904233,
+             858697, 20571223, 8420556},
+            {14620715, 13067227, -15447274, 8264467, 14106269, 15080814,
+             33531827, 12516406, -21574435, -12476749},
+            {236881, 10476226, 57258, -14677024, 6472998, 2466984, 17258519,
+             7256740, 8791136, 15069930},
+        },
+        {
+            {1276410, -9371918, 22949635, -16322807, -23493039, -5702186,
+             14711875, 4874229, -30663140, -2331391},
+            {5855666, 4990204, -13711848, 7294284, -7804282, 1924647, -1423175,
+             -7912378, -33069337, 9234253},
+            {20590503, -9018988, 31529744, -7352666, -2706834, 10650548,
+             31559055, -11609587, 18979186, 13396066},
+        },
+        {
+            {24474287, 4968103, 22267082, 4407354, 24063882, -8325180,
+             -18816887, 13594782, 33514650, 7021958},
+            {-11566906, -6565505, -21365085, 15928892, -26158305, 4315421,
+             -25948728, -3916677, -21480480, 12868082},
+            {-28635013, 13504661, 19988037, -2132761, 21078225, 6443208,
+             -21446107, 2244500, -12455797, -8089383},
+        },
+        {
+            {-30595528, 13793479, -5852820, 319136, -25723172, -6263899,
+             33086546, 8957937, -15233648, 5540521},
+            {-11630176, -11503902, -8119500, -7643073, 2620056, 1022908,
+             -23710744, -1568984, -16128528, -14962807},
+            {23152971, 775386, 27395463, 14006635, -9701118, 4649512, 1689819,
+             892185, -11513277, -15205948},
+        },
+        {
+            {9770129, 9586738, 26496094, 4324120, 1556511, -3550024, 27453819,
+             4763127, -19179614, 5867134},
+            {-32765025, 1927590, 31726409, -4753295, 23962434, -16019500,
+             27846559, 5931263, -29749703, -16108455},
+            {27461885, -2977536, 22380810, 1815854, -23033753, -3031938,
+             7283490, -15148073, -19526700, 7734629},
+        },
+    },
+    {
+        {
+            {-8010264, -9590817, -11120403, 6196038, 29344158, -13430885,
+             7585295, -3176626, 18549497, 15302069},
+            {-32658337, -6171222, -7672793, -11051681, 6258878, 13504381,
+             10458790, -6418461, -8872242, 8424746},
+            {24687205, 8613276, -30667046, -3233545, 1863892, -1830544,
+             19206234, 7134917, -11284482, -828919},
+        },
+        {
+            {11334899, -9218022, 8025293, 12707519, 17523892, -10476071,
+             10243738, -14685461, -5066034, 16498837},
+            {8911542, 6887158, -9584260, -6958590, 11145641, -9543680, 17303925,
+             -14124238, 6536641, 10543906},
+            {-28946384, 15479763, -17466835, 568876, -1497683, 11223454,
+             -2669190, -16625574, -27235709, 8876771},
+        },
+        {
+            {-25742899, -12566864, -15649966, -846607, -33026686, -796288,
+             -33481822, 15824474, -604426, -9039817},
+            {10330056, 70051, 7957388, -9002667, 9764902, 15609756, 27698697,
+             -4890037, 1657394, 3084098},
+            {10477963, -7470260, 12119566, -13250805, 29016247, -5365589,
+             31280319, 14396151, -30233575, 15272409},
+        },
+        {
+            {-12288309, 3169463, 28813183, 16658753, 25116432, -5630466,
+             -25173957, -12636138, -25014757, 1950504},
+            {-26180358, 9489187, 11053416, -14746161, -31053720, 5825630,
+             -8384306, -8767532, 15341279, 8373727},
+            {28685821, 7759505, -14378516, -12002860, -31971820, 4079242,
+             298136, -10232602, -2878207, 15190420},
+        },
+        {
+            {-32932876, 13806336, -14337485, -15794431, -24004620, 10940928,
+             8669718, 2742393, -26033313, -6875003},
+            {-1580388, -11729417, -25979658, -11445023, -17411874, -10912854,
+             9291594, -16247779, -12154742, 6048605},
+            {-30305315, 14843444, 1539301, 11864366, 20201677, 1900163,
+             13934231, 5128323, 11213262, 9168384},
+        },
+        {
+            {-26280513, 11007847, 19408960, -940758, -18592965, -4328580,
+             -5088060, -11105150, 20470157, -16398701},
+            {-23136053, 9282192, 14855179, -15390078, -7362815, -14408560,
+             -22783952, 14461608, 14042978, 5230683},
+            {29969567, -2741594, -16711867, -8552442, 9175486, -2468974,
+             21556951, 3506042, -5933891, -12449708},
+        },
+        {
+            {-3144746, 8744661, 19704003, 4581278, -20430686, 6830683,
+             -21284170, 8971513, -28539189, 15326563},
+            {-19464629, 10110288, -17262528, -3503892, -23500387, 1355669,
+             -15523050, 15300988, -20514118, 9168260},
+            {-5353335, 4488613, -23803248, 16314347, 7780487, -15638939,
+             -28948358, 9601605, 33087103, -9011387},
+        },
+        {
+            {-19443170, -15512900, -20797467, -12445323, -29824447, 10229461,
+             -27444329, -15000531, -5996870, 15664672},
+            {23294591, -16632613, -22650781, -8470978, 27844204, 11461195,
+             13099750, -2460356, 18151676, 13417686},
+            {-24722913, -4176517, -31150679, 5988919, -26858785, 6685065,
+             1661597, -12551441, 15271676, -15452665},
+        },
+    },
+    {
+        {
+            {11433042, -13228665, 8239631, -5279517, -1985436, -725718,
+             -18698764, 2167544, -6921301, -13440182},
+            {-31436171, 15575146, 30436815, 12192228, -22463353, 9395379,
+             -9917708, -8638997, 12215110, 12028277},
+            {14098400, 6555944, 23007258, 5757252, -15427832, -12950502,
+             30123440, 4617780, -16900089, -655628},
+        },
+        {
+            {-4026201, -15240835, 11893168, 13718664, -14809462, 1847385,
+             -15819999, 10154009, 23973261, -12684474},
+            {-26531820, -3695990, -1908898, 2534301, -31870557, -16550355,
+             18341390, -11419951, 32013174, -10103539},
+            {-25479301, 10876443, -11771086, -14625140, -12369567, 1838104,
+             21911214, 6354752, 4425632, -837822},
+        },
+        {
+            {-10433389, -14612966, 22229858, -3091047, -13191166, 776729,
+             -17415375, -12020462, 4725005, 14044970},
+            {19268650, -7304421, 1555349, 8692754, -21474059, -9910664, 6347390,
+             -1411784, -19522291, -16109756},
+            {-24864089, 12986008, -10898878, -5558584, -11312371, -148526,
+             19541418, 8180106, 9282262, 10282508},
+        },
+        {
+            {-26205082, 4428547, -8661196, -13194263, 4098402, -14165257,
+             15522535, 8372215, 5542595, -10702683},
+            {-10562541, 14895633, 26814552, -16673850, -17480754, -2489360,
+             -2781891, 6993761, -18093885, 10114655},
+            {-20107055, -929418, 31422704, 10427861, -7110749, 6150669,
+             -29091755, -11529146, 25953725, -106158},
+        },
+        {
+            {-4234397, -8039292, -9119125, 3046000, 2101609, -12607294,
+             19390020, 6094296, -3315279, 12831125},
+            {-15998678, 7578152, 5310217, 14408357, -33548620, -224739,
+             31575954, 6326196, 7381791, -2421839},
+            {-20902779, 3296811, 24736065, -16328389, 18374254, 7318640,
+             6295303, 8082724, -15362489, 12339664},
+        },
+        {
+            {27724736, 2291157, 6088201, -14184798, 1792727, 5857634, 13848414,
+             15768922, 25091167, 14856294},
+            {-18866652, 8331043, 24373479, 8541013, -701998, -9269457, 12927300,
+             -12695493, -22182473, -9012899},
+            {-11423429, -5421590, 11632845, 3405020, 30536730, -11674039,
+             -27260765, 13866390, 30146206, 9142070},
+        },
+        {
+            {3924129, -15307516, -13817122, -10054960, 12291820, -668366,
+             -27702774, 9326384, -8237858, 4171294},
+            {-15921940, 16037937, 6713787, 16606682, -21612135, 2790944,
+             26396185, 3731949, 345228, -5462949},
+            {-21327538, 13448259, 25284571, 1143661, 20614966, -8849387,
+             2031539, -12391231, -16253183, -13582083},
+        },
+        {
+            {31016211, -16722429, 26371392, -14451233, -5027349, 14854137,
+             17477601, 3842657, 28012650, -16405420},
+            {-5075835, 9368966, -8562079, -4600902, -15249953, 6970560,
+             -9189873, 16292057, -8867157, 3507940},
+            {29439664, 3537914, 23333589, 6997794, -17555561, -11018068,
+             -15209202, -15051267, -9164929, 6580396},
+        },
+    },
+    {
+        {
+            {-12185861, -7679788, 16438269, 10826160, -8696817, -6235611,
+             17860444, -9273846, -2095802, 9304567},
+            {20714564, -4336911, 29088195, 7406487, 11426967, -5095705,
+             14792667, -14608617, 5289421, -477127},
+            {-16665533, -10650790, -6160345, -13305760, 9192020, -1802462,
+             17271490, 12349094, 26939669, -3752294},
+        },
+        {
+            {-12889898, 9373458, 31595848, 16374215, 21471720, 13221525,
+             -27283495, -12348559, -3698806, 117887},
+            {22263325, -6560050, 3984570, -11174646, -15114008, -566785,
+             28311253, 5358056, -23319780, 541964},
+            {16259219, 3261970, 2309254, -15534474, -16885711, -4581916,
+             24134070, -16705829, -13337066, -13552195},
+        },
+        {
+            {9378160, -13140186, -22845982, -12745264, 28198281, -7244098,
+             -2399684, -717351, 690426, 14876244},
+            {24977353, -314384, -8223969, -13465086, 28432343, -1176353,
+             -13068804, -12297348, -22380984, 6618999},
+            {-1538174, 11685646, 12944378, 13682314, -24389511, -14413193,
+             8044829, -13817328, 32239829, -5652762},
+        },
+        {
+            {-18603066, 4762990, -926250, 8885304, -28412480, -3187315, 9781647,
+             -10350059, 32779359, 5095274},
+            {-33008130, -5214506, -32264887, -3685216, 9460461, -9327423,
+             -24601656, 14506724, 21639561, -2630236},
+            {-16400943, -13112215, 25239338, 15531969, 3987758, -4499318,
+             -1289502, -6863535, 17874574, 558605},
+        },
+        {
+            {-13600129, 10240081, 9171883, 16131053, -20869254, 9599700,
+             33499487, 5080151, 2085892, 5119761},
+            {-22205145, -2519528, -16381601, 414691, -25019550, 2170430,
+             30634760, -8363614, -31999993, -5759884},
+            {-6845704, 15791202, 8550074, -1312654, 29928809, -12092256,
+             27534430, -7192145, -22351378, 12961482},
+        },
+        {
+            {-24492060, -9570771, 10368194, 11582341, -23397293, -2245287,
+             16533930, 8206996, -30194652, -5159638},
+            {-11121496, -3382234, 2307366, 6362031, -135455, 8868177, -16835630,
+             7031275, 7589640, 8945490},
+            {-32152748, 8917967, 6661220, -11677616, -1192060, -15793393,
+             7251489, -11182180, 24099109, -14456170},
+        },
+        {
+            {5019558, -7907470, 4244127, -14714356, -26933272, 6453165,
+             -19118182, -13289025, -6231896, -10280736},
+            {10853594, 10721687, 26480089, 5861829, -22995819, 1972175,
+             -1866647, -10557898, -3363451, -6441124},
+            {-17002408, 5906790, 221599, -6563147, 7828208, -13248918, 24362661,
+             -2008168, -13866408, 7421392},
+        },
+        {
+            {8139927, -6546497, 32257646, -5890546, 30375719, 1886181,
+             -21175108, 15441252, 28826358, -4123029},
+            {6267086, 9695052, 7709135, -16603597, -32869068, -1886135,
+             14795160, -7840124, 13746021, -1742048},
+            {28584902, 7787108, -6732942, -15050729, 22846041, -7571236,
+             -3181936, -363524, 4771362, -8419958},
+        },
+    },
+    {
+        {
+            {24949256, 6376279, -27466481, -8174608, -18646154, -9930606,
+             33543569, -12141695, 3569627, 11342593},
+            {26514989, 4740088, 27912651, 3697550, 19331575, -11472339, 6809886,
+             4608608, 7325975, -14801071},
+            {-11618399, -14554430, -24321212, 7655128, -1369274, 5214312,
+             -27400540, 10258390, -17646694, -8186692},
+        },
+        {
+            {11431204, 15823007, 26570245, 14329124, 18029990, 4796082,
+             -31446179, 15580664, 9280358, -3973687},
+            {-160783, -10326257, -22855316, -4304997, -20861367, -13621002,
+             -32810901, -11181622, -15545091, 4387441},
+            {-20799378, 12194512, 3937617, -5805892, -27154820, 9340370,
+             -24513992, 8548137, 20617071, -7482001},
+        },
+        {
+            {-938825, -3930586, -8714311, 16124718, 24603125, -6225393,
+             -13775352, -11875822, 24345683, 10325460},
+            {-19855277, -1568885, -22202708, 8714034, 14007766, 6928528,
+             16318175, -1010689, 4766743, 3552007},
+            {-21751364, -16730916, 1351763, -803421, -4009670, 3950935, 3217514,
+             14481909, 10988822, -3994762},
+        },
+        {
+            {15564307, -14311570, 3101243, 5684148, 30446780, -8051356,
+             12677127, -6505343, -8295852, 13296005},
+            {-9442290, 6624296, -30298964, -11913677, -4670981, -2057379,
+             31521204, 9614054, -30000824, 12074674},
+            {4771191, -135239, 14290749, -13089852, 27992298, 14998318,
+             -1413936, -1556716, 29832613, -16391035},
+        },
+        {
+            {7064884, -7541174, -19161962, -5067537, -18891269, -2912736,
+             25825242, 5293297, -27122660, 13101590},
+            {-2298563, 2439670, -7466610, 1719965, -27267541, -16328445,
+             32512469, -5317593, -30356070, -4190957},
+            {-30006540, 10162316, -33180176, 3981723, -16482138, -13070044,
+             14413974, 9515896, 19568978, 9628812},
+        },
+        {
+            {33053803, 199357, 15894591, 1583059, 27380243, -4580435, -17838894,
+             -6106839, -6291786, 3437740},
+            {-18978877, 3884493, 19469877, 12726490, 15913552, 13614290,
+             -22961733, 70104, 7463304, 4176122},
+            {-27124001, 10659917, 11482427, -16070381, 12771467, -6635117,
+             -32719404, -5322751, 24216882, 5944158},
+        },
+        {
+            {8894125, 7450974, -2664149, -9765752, -28080517, -12389115,
+             19345746, 14680796, 11632993, 5847885},
+            {26942781, -2315317, 9129564, -4906607, 26024105, 11769399,
+             -11518837, 6367194, -9727230, 4782140},
+            {19916461, -4828410, -22910704, -11414391, 25606324, -5972441,
+             33253853, 8220911, 6358847, -1873857},
+        },
+        {
+            {801428, -2081702, 16569428, 11065167, 29875704, 96627, 7908388,
+             -4480480, -13538503, 1387155},
+            {19646058, 5720633, -11416706, 12814209, 11607948, 12749789,
+             14147075, 15156355, -21866831, 11835260},
+            {19299512, 1155910, 28703737, 14890794, 2925026, 7269399, 26121523,
+             15467869, -26560550, 5052483},
+        },
+    },
+    {
+        {
+            {-3017432, 10058206, 1980837, 3964243, 22160966, 12322533, -6431123,
+             -12618185, 12228557, -7003677},
+            {32944382, 14922211, -22844894, 5188528, 21913450, -8719943,
+             4001465, 13238564, -6114803, 8653815},
+            {22865569, -4652735, 27603668, -12545395, 14348958, 8234005,
+             24808405, 5719875, 28483275, 2841751},
+        },
+        {
+            {-16420968, -1113305, -327719, -12107856, 21886282, -15552774,
+             -1887966, -315658, 19932058, -12739203},
+            {-11656086, 10087521, -8864888, -5536143, -19278573, -3055912,
+             3999228, 13239134, -4777469, -13910208},
+            {1382174, -11694719, 17266790, 9194690, -13324356, 9720081,
+             20403944, 11284705, -14013818, 3093230},
+        },
+        {
+            {16650921, -11037932, -1064178, 1570629, -8329746, 7352753, -302424,
+             16271225, -24049421, -6691850},
+            {-21911077, -5927941, -4611316, -5560156, -31744103, -10785293,
+             24123614, 15193618, -21652117, -16739389},
+            {-9935934, -4289447, -25279823, 4372842, 2087473, 10399484,
+             31870908, 14690798, 17361620, 11864968},
+        },
+        {
+            {-11307610, 6210372, 13206574, 5806320, -29017692, -13967200,
+             -12331205, -7486601, -25578460, -16240689},
+            {14668462, -12270235, 26039039, 15305210, 25515617, 4542480,
+             10453892, 6577524, 9145645, -6443880},
+            {5974874, 3053895, -9433049, -10385191, -31865124, 3225009,
+             -7972642, 3936128, -5652273, -3050304},
+        },
+        {
+            {30625386, -4729400, -25555961, -12792866, -20484575, 7695099,
+             17097188, -16303496, -27999779, 1803632},
+            {-3553091, 9865099, -5228566, 4272701, -5673832, -16689700,
+             14911344, 12196514, -21405489, 7047412},
+            {20093277, 9920966, -11138194, -5343857, 13161587, 12044805,
+             -32856851, 4124601, -32343828, -10257566},
+        },
+        {
+            {-20788824, 14084654, -13531713, 7842147, 19119038, -13822605,
+             4752377, -8714640, -21679658, 2288038},
+            {-26819236, -3283715, 29965059, 3039786, -14473765, 2540457,
+             29457502, 14625692, -24819617, 12570232},
+            {-1063558, -11551823, 16920318, 12494842, 1278292, -5869109,
+             -21159943, -3498680, -11974704, 4724943},
+        },
+        {
+            {17960970, -11775534, -4140968, -9702530, -8876562, -1410617,
+             -12907383, -8659932, -29576300, 1903856},
+            {23134274, -14279132, -10681997, -1611936, 20684485, 15770816,
+             -12989750, 3190296, 26955097, 14109738},
+            {15308788, 5320727, -30113809, -14318877, 22902008, 7767164,
+             29425325, -11277562, 31960942, 11934971},
+        },
+        {
+            {-27395711, 8435796, 4109644, 12222639, -24627868, 14818669,
+             20638173, 4875028, 10491392, 1379718},
+            {-13159415, 9197841, 3875503, -8936108, -1383712, -5879801,
+             33518459, 16176658, 21432314, 12180697},
+            {-11787308, 11500838, 13787581, -13832590, -22430679, 10140205,
+             1465425, 12689540, -10301319, -13872883},
+        },
+    },
+    {
+        {
+            {5414091, -15386041, -21007664, 9643570, 12834970, 1186149,
+             -2622916, -1342231, 26128231, 6032912},
+            {-26337395, -13766162, 32496025, -13653919, 17847801, -12669156,
+             3604025, 8316894, -25875034, -10437358},
+            {3296484, 6223048, 24680646, -12246460, -23052020, 5903205,
+             -8862297, -4639164, 12376617, 3188849},
+        },
+        {
+            {29190488, -14659046, 27549113, -1183516, 3520066, -10697301,
+             32049515, -7309113, -16109234, -9852307},
+            {-14744486, -9309156, 735818, -598978, -20407687, -5057904,
+             25246078, -15795669, 18640741, -960977},
+            {-6928835, -16430795, 10361374, 5642961, 4910474, 12345252,
+             -31638386, -494430, 10530747, 1053335},
+        },
+        {
+            {-29265967, -14186805, -13538216, -12117373, -19457059, -10655384,
+             -31462369, -2948985, 24018831, 15026644},
+            {-22592535, -3145277, -2289276, 5953843, -13440189, 9425631,
+             25310643, 13003497, -2314791, -15145616},
+            {-27419985, -603321, -8043984, -1669117, -26092265, 13987819,
+             -27297622, 187899, -23166419, -2531735},
+        },
+        {
+            {-21744398, -13810475, 1844840, 5021428, -10434399, -15911473,
+             9716667, 16266922, -5070217, 726099},
+            {29370922, -6053998, 7334071, -15342259, 9385287, 2247707,
+             -13661962, -4839461, 30007388, -15823341},
+            {-936379, 16086691, 23751945, -543318, -1167538, -5189036, 9137109,
+             730663, 9835848, 4555336},
+        },
+        {
+            {-23376435, 1410446, -22253753, -12899614, 30867635, 15826977,
+             17693930, 544696, -11985298, 12422646},
+            {31117226, -12215734, -13502838, 6561947, -9876867, -12757670,
+             -5118685, -4096706, 29120153, 13924425},
+            {-17400879, -14233209, 19675799, -2734756, -11006962, -5858820,
+             -9383939, -11317700, 7240931, -237388},
+        },
+        {
+            {-31361739, -11346780, -15007447, -5856218, -22453340, -12152771,
+             1222336, 4389483, 3293637, -15551743},
+            {-16684801, -14444245, 11038544, 11054958, -13801175, -3338533,
+             -24319580, 7733547, 12796905, -6335822},
+            {-8759414, -10817836, -25418864, 10783769, -30615557, -9746811,
+             -28253339, 3647836, 3222231, -11160462},
+        },
+        {
+            {18606113, 1693100, -25448386, -15170272, 4112353, 10045021,
+             23603893, -2048234, -7550776, 2484985},
+            {9255317, -3131197, -12156162, -1004256, 13098013, -9214866,
+             16377220, -2102812, -19802075, -3034702},
+            {-22729289, 7496160, -5742199, 11329249, 19991973, -3347502,
+             -31718148, 9936966, -30097688, -10618797},
+        },
+        {
+            {21878590, -5001297, 4338336, 13643897, -3036865, 13160960,
+             19708896, 5415497, -7360503, -4109293},
+            {27736861, 10103576, 12500508, 8502413, -3413016, -9633558,
+             10436918, -1550276, -23659143, -8132100},
+            {19492550, -12104365, -29681976, -852630, -3208171, 12403437,
+             30066266, 8367329, 13243957, 8709688},
+        },
+    },
+    {
+        {
+            {12015105, 2801261, 28198131, 10151021, 24818120, -4743133,
+             -11194191, -5645734, 5150968, 7274186},
+            {2831366, -12492146, 1478975, 6122054, 23825128, -12733586,
+             31097299, 6083058, 31021603, -9793610},
+            {-2529932, -2229646, 445613, 10720828, -13849527, -11505937,
+             -23507731, 16354465, 15067285, -14147707},
+        },
+        {
+            {7840942, 14037873, -33364863, 15934016, -728213, -3642706,
+             21403988, 1057586, -19379462, -12403220},
+            {915865, -16469274, 15608285, -8789130, -24357026, 6060030,
+             -17371319, 8410997, -7220461, 16527025},
+            {32922597, -556987, 20336074, -16184568, 10903705, -5384487,
+             16957574, 52992, 23834301, 6588044},
+        },
+        {
+            {32752030, 11232950, 3381995, -8714866, 22652988, -10744103,
+             17159699, 16689107, -20314580, -1305992},
+            {-4689649, 9166776, -25710296, -10847306, 11576752, 12733943,
+             7924251, -2752281, 1976123, -7249027},
+            {21251222, 16309901, -2983015, -6783122, 30810597, 12967303, 156041,
+             -3371252, 12331345, -8237197},
+        },
+        {
+            {8651614, -4477032, -16085636, -4996994, 13002507, 2950805,
+             29054427, -5106970, 10008136, -4667901},
+            {31486080, 15114593, -14261250, 12951354, 14369431, -7387845,
+             16347321, -13662089, 8684155, -10532952},
+            {19443825, 11385320, 24468943, -9659068, -23919258, 2187569,
+             -26263207, -6086921, 31316348, 14219878},
+        },
+        {
+            {-28594490, 1193785, 32245219, 11392485, 31092169, 15722801,
+             27146014, 6992409, 29126555, 9207390},
+            {32382935, 1110093, 18477781, 11028262, -27411763, -7548111,
+             -4980517, 10843782, -7957600, -14435730},
+            {2814918, 7836403, 27519878, -7868156, -20894015, -11553689,
+             -21494559, 8550130, 28346258, 1994730},
+        },
+        {
+            {-19578299, 8085545, -14000519, -3948622, 2785838, -16231307,
+             -19516951, 7174894, 22628102, 8115180},
+            {-30405132, 955511, -11133838, -15078069, -32447087, -13278079,
+             -25651578, 3317160, -9943017, 930272},
+            {-15303681, -6833769, 28856490, 1357446, 23421993, 1057177,
+             24091212, -1388970, -22765376, -10650715},
+        },
+        {
+            {-22751231, -5303997, -12907607, -12768866, -15811511, -7797053,
+             -14839018, -16554220, -1867018, 8398970},
+            {-31969310, 2106403, -4736360, 1362501, 12813763, 16200670,
+             22981545, -6291273, 18009408, -15772772},
+            {-17220923, -9545221, -27784654, 14166835, 29815394, 7444469,
+             29551787, -3727419, 19288549, 1325865},
+        },
+        {
+            {15100157, -15835752, -23923978, -1005098, -26450192, 15509408,
+             12376730, -3479146, 33166107, -8042750},
+            {20909231, 13023121, -9209752, 16251778, -5778415, -8094914,
+             12412151, 10018715, 2213263, -13878373},
+            {32529814, -11074689, 30361439, -16689753, -9135940, 1513226,
+             22922121, 6382134, -5766928, 8371348},
+        },
+    },
+    {
+        {
+            {9923462, 11271500, 12616794, 3544722, -29998368, -1721626,
+             12891687, -8193132, -26442943, 10486144},
+            {-22597207, -7012665, 8587003, -8257861, 4084309, -12970062, 361726,
+             2610596, -23921530, -11455195},
+            {5408411, -1136691, -4969122, 10561668, 24145918, 14240566,
+             31319731, -4235541, 19985175, -3436086},
+        },
+        {
+            {-13994457, 16616821, 14549246, 3341099, 32155958, 13648976,
+             -17577068, 8849297, 65030, 8370684},
+            {-8320926, -12049626, 31204563, 5839400, -20627288, -1057277,
+             -19442942, 6922164, 12743482, -9800518},
+            {-2361371, 12678785, 28815050, 4759974, -23893047, 4884717,
+             23783145, 11038569, 18800704, 255233},
+        },
+        {
+            {-5269658, -1773886, 13957886, 7990715, 23132995, 728773, 13393847,
+             9066957, 19258688, -14753793},
+            {-2936654, -10827535, -10432089, 14516793, -3640786, 4372541,
+             -31934921, 2209390, -1524053, 2055794},
+            {580882, 16705327, 5468415, -2683018, -30926419, -14696000,
+             -7203346, -8994389, -30021019, 7394435},
+        },
+        {
+            {23838809, 1822728, -15738443, 15242727, 8318092, -3733104,
+             -21672180, -3492205, -4821741, 14799921},
+            {13345610, 9759151, 3371034, -16137791, 16353039, 8577942, 31129804,
+             13496856, -9056018, 7402518},
+            {2286874, -4435931, -20042458, -2008336, -13696227, 5038122,
+             11006906, -15760352, 8205061, 1607563},
+        },
+        {
+            {14414086, -8002132, 3331830, -3208217, 22249151, -5594188,
+             18364661, -2906958, 30019587, -9029278},
+            {-27688051, 1585953, -10775053, 931069, -29120221, -11002319,
+             -14410829, 12029093, 9944378, 8024},
+            {4368715, -3709630, 29874200, -15022983, -20230386, -11410704,
+             -16114594, -999085, -8142388, 5640030},
+        },
+        {
+            {10299610, 13746483, 11661824, 16234854, 7630238, 5998374, 9809887,
+             -16694564, 15219798, -14327783},
+            {27425505, -5719081, 3055006, 10660664, 23458024, 595578, -15398605,
+             -1173195, -18342183, 9742717},
+            {6744077, 2427284, 26042789, 2720740, -847906, 1118974, 32324614,
+             7406442, 12420155, 1994844},
+        },
+        {
+            {14012521, -5024720, -18384453, -9578469, -26485342, -3936439,
+             -13033478, -10909803, 24319929, -6446333},
+            {16412690, -4507367, 10772641, 15929391, -17068788, -4658621,
+             10555945, -10484049, -30102368, -4739048},
+            {22397382, -7767684, -9293161, -12792868, 17166287, -9755136,
+             -27333065, 6199366, 21880021, -12250760},
+        },
+        {
+            {-4283307, 5368523, -31117018, 8163389, -30323063, 3209128,
+             16557151, 8890729, 8840445, 4957760},
+            {-15447727, 709327, -6919446, -10870178, -29777922, 6522332,
+             -21720181, 12130072, -14796503, 5005757},
+            {-2114751, -14308128, 23019042, 15765735, -25269683, 6002752,
+             10183197, -13239326, -16395286, -2176112},
+        },
+    },
+    {
+        {
+            {-19025756, 1632005, 13466291, -7995100, -23640451, 16573537,
+             -32013908, -3057104, 22208662, 2000468},
+            {3065073, -1412761, -25598674, -361432, -17683065, -5703415,
+             -8164212, 11248527, -3691214, -7414184},
+            {10379208, -6045554, 8877319, 1473647, -29291284, -12507580,
+             16690915, 2553332, -3132688, 16400289},
+        },
+        {
+            {15716668, 1254266, -18472690, 7446274, -8448918, 6344164,
+             -22097271, -7285580, 26894937, 9132066},
+            {24158887, 12938817, 11085297, -8177598, -28063478, -4457083,
+             -30576463, 64452, -6817084, -2692882},
+            {13488534, 7794716, 22236231, 5989356, 25426474, -12578208, 2350710,
+             -3418511, -4688006, 2364226},
+        },
+        {
+            {16335052, 9132434, 25640582, 6678888, 1725628, 8517937, -11807024,
+             -11697457, 15445875, -7798101},
+            {29004207, -7867081, 28661402, -640412, -12794003, -7943086,
+             31863255, -4135540, -278050, -15759279},
+            {-6122061, -14866665, -28614905, 14569919, -10857999, -3591829,
+             10343412, -6976290, -29828287, -10815811},
+        },
+        {
+            {27081650, 3463984, 14099042, -4517604, 1616303, -6205604, 29542636,
+             15372179, 17293797, 960709},
+            {20263915, 11434237, -5765435, 11236810, 13505955, -10857102,
+             -16111345, 6493122, -19384511, 7639714},
+            {-2830798, -14839232, 25403038, -8215196, -8317012, -16173699,
+             18006287, -16043750, 29994677, -15808121},
+        },
+        {
+            {9769828, 5202651, -24157398, -13631392, -28051003, -11561624,
+             -24613141, -13860782, -31184575, 709464},
+            {12286395, 13076066, -21775189, -1176622, -25003198, 4057652,
+             -32018128, -8890874, 16102007, 13205847},
+            {13733362, 5599946, 10557076, 3195751, -5557991, 8536970, -25540170,
+             8525972, 10151379, 10394400},
+        },
+        {
+            {4024660, -16137551, 22436262, 12276534, -9099015, -2686099,
+             19698229, 11743039, -33302334, 8934414},
+            {-15879800, -4525240, -8580747, -2934061, 14634845, -698278,
+             -9449077, 3137094, -11536886, 11721158},
+            {17555939, -5013938, 8268606, 2331751, -22738815, 9761013, 9319229,
+             8835153, -9205489, -1280045},
+        },
+        {
+            {-461409, -7830014, 20614118, 16688288, -7514766, -4807119,
+             22300304, 505429, 6108462, -6183415},
+            {-5070281, 12367917, -30663534, 3234473, 32617080, -8422642,
+             29880583, -13483331, -26898490, -7867459},
+            {-31975283, 5726539, 26934134, 10237677, -3173717, -605053,
+             24199304, 3795095, 7592688, -14992079},
+        },
+        {
+            {21594432, -14964228, 17466408, -4077222, 32537084, 2739898,
+             6407723, 12018833, -28256052, 4298412},
+            {-20650503, -11961496, -27236275, 570498, 3767144, -1717540,
+             13891942, -1569194, 13717174, 10805743},
+            {-14676630, -15644296, 15287174, 11927123, 24177847, -8175568,
+             -796431, 14860609, -26938930, -5863836},
+        },
+    },
+    {
+        {
+            {12962541, 5311799, -10060768, 11658280, 18855286, -7954201,
+             13286263, -12808704, -4381056, 9882022},
+            {18512079, 11319350, -20123124, 15090309, 18818594, 5271736,
+             -22727904, 3666879, -23967430, -3299429},
+            {-6789020, -3146043, 16192429, 13241070, 15898607, -14206114,
+             -10084880, -6661110, -2403099, 5276065},
+        },
+        {
+            {30169808, -5317648, 26306206, -11750859, 27814964, 7069267,
+             7152851, 3684982, 1449224, 13082861},
+            {10342826, 3098505, 2119311, 193222, 25702612, 12233820, 23697382,
+             15056736, -21016438, -8202000},
+            {-33150110, 3261608, 22745853, 7948688, 19370557, -15177665,
+             -26171976, 6482814, -10300080, -11060101},
+        },
+        {
+            {32869458, -5408545, 25609743, 15678670, -10687769, -15471071,
+             26112421, 2521008, -22664288, 6904815},
+            {29506923, 4457497, 3377935, -9796444, -30510046, 12935080, 1561737,
+             3841096, -29003639, -6657642},
+            {10340844, -6630377, -18656632, -2278430, 12621151, -13339055,
+             30878497, -11824370, -25584551, 5181966},
+        },
+        {
+            {25940115, -12658025, 17324188, -10307374, -8671468, 15029094,
+             24396252, -16450922, -2322852, -12388574},
+            {-21765684, 9916823, -1300409, 4079498, -1028346, 11909559, 1782390,
+             12641087, 20603771, -6561742},
+            {-18882287, -11673380, 24849422, 11501709, 13161720, -4768874,
+             1925523, 11914390, 4662781, 7820689},
+        },
+        {
+            {12241050, -425982, 8132691, 9393934, 32846760, -1599620, 29749456,
+             12172924, 16136752, 15264020},
+            {-10349955, -14680563, -8211979, 2330220, -17662549, -14545780,
+             10658213, 6671822, 19012087, 3772772},
+            {3753511, -3421066, 10617074, 2028709, 14841030, -6721664, 28718732,
+             -15762884, 20527771, 12988982},
+        },
+        {
+            {-14822485, -5797269, -3707987, 12689773, -898983, -10914866,
+             -24183046, -10564943, 3299665, -12424953},
+            {-16777703, -15253301, -9642417, 4978983, 3308785, 8755439, 6943197,
+             6461331, -25583147, 8991218},
+            {-17226263, 1816362, -1673288, -6086439, 31783888, -8175991,
+             -32948145, 7417950, -30242287, 1507265},
+        },
+        {
+            {29692663, 6829891, -10498800, 4334896, 20945975, -11906496,
+             -28887608, 8209391, 14606362, -10647073},
+            {-3481570, 8707081, 32188102, 5672294, 22096700, 1711240, -33020695,
+             9761487, 4170404, -2085325},
+            {-11587470, 14855945, -4127778, -1531857, -26649089, 15084046,
+             22186522, 16002000, -14276837, -8400798},
+        },
+        {
+            {-4811456, 13761029, -31703877, -2483919, -3312471, 7869047,
+             -7113572, -9620092, 13240845, 10965870},
+            {-7742563, -8256762, -14768334, -13656260, -23232383, 12387166,
+             4498947, 14147411, 29514390, 4302863},
+            {-13413405, -12407859, 20757302, -13801832, 14785143, 8976368,
+             -5061276, -2144373, 17846988, -13971927},
+        },
+    },
+    {
+        {
+            {-2244452, -754728, -4597030, -1066309, -6247172, 1455299,
+             -21647728, -9214789, -5222701, 12650267},
+            {-9906797, -16070310, 21134160, 12198166, -27064575, 708126, 387813,
+             13770293, -19134326, 10958663},
+            {22470984, 12369526, 23446014, -5441109, -21520802, -9698723,
+             -11772496, -11574455, -25083830, 4271862},
+        },
+        {
+            {-25169565, -10053642, -19909332, 15361595, -5984358, 2159192,
+             75375, -4278529, -32526221, 8469673},
+            {15854970, 4148314, -8893890, 7259002, 11666551, 13824734,
+             -30531198, 2697372, 24154791, -9460943},
+            {15446137, -15806644, 29759747, 14019369, 30811221, -9610191,
+             -31582008, 12840104, 24913809, 9815020},
+        },
+        {
+            {-4709286, -5614269, -31841498, -12288893, -14443537, 10799414,
+             -9103676, 13438769, 18735128, 9466238},
+            {11933045, 9281483, 5081055, -5183824, -2628162, -4905629, -7727821,
+             -10896103, -22728655, 16199064},
+            {14576810, 379472, -26786533, -8317236, -29426508, -10812974,
+             -102766, 1876699, 30801119, 2164795},
+        },
+        {
+            {15995086, 3199873, 13672555, 13712240, -19378835, -4647646,
+             -13081610, -15496269, -13492807, 1268052},
+            {-10290614, -3659039, -3286592, 10948818, 23037027, 3794475,
+             -3470338, -12600221, -17055369, 3565904},
+            {29210088, -9419337, -5919792, -4952785, 10834811, -13327726,
+             -16512102, -10820713, -27162222, -14030531},
+        },
+        {
+            {-13161890, 15508588, 16663704, -8156150, -28349942, 9019123,
+             -29183421, -3769423, 2244111, -14001979},
+            {-5152875, -3800936, -9306475, -6071583, 16243069, 14684434,
+             -25673088, -16180800, 13491506, 4641841},
+            {10813417, 643330, -19188515, -728916, 30292062, -16600078,
+             27548447, -7721242, 14476989, -12767431},
+        },
+        {
+            {10292079, 9984945, 6481436, 8279905, -7251514, 7032743, 27282937,
+             -1644259, -27912810, 12651324},
+            {-31185513, -813383, 22271204, 11835308, 10201545, 15351028,
+             17099662, 3988035, 21721536, -3148940},
+            {10202177, -6545839, -31373232, -9574638, -32150642, -8119683,
+             -12906320, 3852694, 13216206, 14842320},
+        },
+        {
+            {-15815640, -10601066, -6538952, -7258995, -6984659, -6581778,
+             -31500847, 13765824, -27434397, 9900184},
+            {14465505, -13833331, -32133984, -14738873, -27443187, 12990492,
+             33046193, 15796406, -7051866, -8040114},
+            {30924417, -8279620, 6359016, -12816335, 16508377, 9071735,
+             -25488601, 15413635, 9524356, -7018878},
+        },
+        {
+            {12274201, -13175547, 32627641, -1785326, 6736625, 13267305,
+             5237659, -5109483, 15663516, 4035784},
+            {-2951309, 8903985, 17349946, 601635, -16432815, -4612556,
+             -13732739, -15889334, -22258478, 4659091},
+            {-16916263, -4952973, -30393711, -15158821, 20774812, 15897498,
+             5736189, 15026997, -2178256, -13455585},
+        },
+    },
+    {
+        {
+            {-8858980, -2219056, 28571666, -10155518, -474467, -10105698,
+             -3801496, 278095, 23440562, -290208},
+            {10226241, -5928702, 15139956, 120818, -14867693, 5218603, 32937275,
+             11551483, -16571960, -7442864},
+            {17932739, -12437276, -24039557, 10749060, 11316803, 7535897,
+             22503767, 5561594, -3646624, 3898661},
+        },
+        {
+            {7749907, -969567, -16339731, -16464, -25018111, 15122143, -1573531,
+             7152530, 21831162, 1245233},
+            {26958459, -14658026, 4314586, 8346991, -5677764, 11960072,
+             -32589295, -620035, -30402091, -16716212},
+            {-12165896, 9166947, 33491384, 13673479, 29787085, 13096535,
+             6280834, 14587357, -22338025, 13987525},
+        },
+        {
+            {-24349909, 7778775, 21116000, 15572597, -4833266, -5357778,
+             -4300898, -5124639, -7469781, -2858068},
+            {9681908, -6737123, -31951644, 13591838, -6883821, 386950, 31622781,
+             6439245, -14581012, 4091397},
+            {-8426427, 1470727, -28109679, -1596990, 3978627, -5123623,
+             -19622683, 12092163, 29077877, -14741988},
+        },
+        {
+            {5269168, -6859726, -13230211, -8020715, 25932563, 1763552,
+             -5606110, -5505881, -20017847, 2357889},
+            {32264008, -15407652, -5387735, -1160093, -2091322, -3946900,
+             23104804, -12869908, 5727338, 189038},
+            {14609123, -8954470, -6000566, -16622781, -14577387, -7743898,
+             -26745169, 10942115, -25888931, -14884697},
+        },
+        {
+            {20513500, 5557931, -15604613, 7829531, 26413943, -2019404,
+             -21378968, 7471781, 13913677, -5137875},
+            {-25574376, 11967826, 29233242, 12948236, -6754465, 4713227,
+             -8940970, 14059180, 12878652, 8511905},
+            {-25656801, 3393631, -2955415, -7075526, -2250709, 9366908,
+             -30223418, 6812974, 5568676, -3127656},
+        },
+        {
+            {11630004, 12144454, 2116339, 13606037, 27378885, 15676917,
+             -17408753, -13504373, -14395196, 8070818},
+            {27117696, -10007378, -31282771, -5570088, 1127282, 12772488,
+             -29845906, 10483306, -11552749, -1028714},
+            {10637467, -5688064, 5674781, 1072708, -26343588, -6982302,
+             -1683975, 9177853, -27493162, 15431203},
+        },
+        {
+            {20525145, 10892566, -12742472, 12779443, -29493034, 16150075,
+             -28240519, 14943142, -15056790, -7935931},
+            {-30024462, 5626926, -551567, -9981087, 753598, 11981191, 25244767,
+             -3239766, -3356550, 9594024},
+            {-23752644, 2636870, -5163910, -10103818, 585134, 7877383, 11345683,
+             -6492290, 13352335, -10977084},
+        },
+        {
+            {-1931799, -5407458, 3304649, -12884869, 17015806, -4877091,
+             -29783850, -7752482, -13215537, -319204},
+            {20239939, 6607058, 6203985, 3483793, -18386976, -779229, -20723742,
+             15077870, -22750759, 14523817},
+            {27406042, -6041657, 27423596, -4497394, 4996214, 10002360,
+             -28842031, -4545494, -30172742, -4805667},
+        },
+    },
+    {
+        {
+            {11374242, 12660715, 17861383, -12540833, 10935568, 1099227,
+             -13886076, -9091740, -27727044, 11358504},
+            {-12730809, 10311867, 1510375, 10778093, -2119455, -9145702,
+             32676003, 11149336, -26123651, 4985768},
+            {-19096303, 341147, -6197485, -239033, 15756973, -8796662, -983043,
+             13794114, -19414307, -15621255},
+        },
+        {
+            {6490081, 11940286, 25495923, -7726360, 8668373, -8751316, 3367603,
+             6970005, -1691065, -9004790},
+            {1656497, 13457317, 15370807, 6364910, 13605745, 8362338, -19174622,
+             -5475723, -16796596, -5031438},
+            {-22273315, -13524424, -64685, -4334223, -18605636, -10921968,
+             -20571065, -7007978, -99853, -10237333},
+        },
+        {
+            {17747465, 10039260, 19368299, -4050591, -20630635, -16041286,
+             31992683, -15857976, -29260363, -5511971},
+            {31932027, -4986141, -19612382, 16366580, 22023614, 88450, 11371999,
+             -3744247, 4882242, -10626905},
+            {29796507, 37186, 19818052, 10115756, -11829032, 3352736, 18551198,
+             3272828, -5190932, -4162409},
+        },
+        {
+            {12501286, 4044383, -8612957, -13392385, -32430052, 5136599,
+             -19230378, -3529697, 330070, -3659409},
+            {6384877, 2899513, 17807477, 7663917, -2358888, 12363165, 25366522,
+             -8573892, -271295, 12071499},
+            {-8365515, -4042521, 25133448, -4517355, -6211027, 2265927,
+             -32769618, 1936675, -5159697, 3829363},
+        },
+        {
+            {28425966, -5835433, -577090, -4697198, -14217555, 6870930, 7921550,
+             -6567787, 26333140, 14267664},
+            {-11067219, 11871231, 27385719, -10559544, -4585914, -11189312,
+             10004786, -8709488, -21761224, 8930324},
+            {-21197785, -16396035, 25654216, -1725397, 12282012, 11008919,
+             1541940, 4757911, -26491501, -16408940},
+        },
+        {
+            {13537262, -7759490, -20604840, 10961927, -5922820, -13218065,
+             -13156584, 6217254, -15943699, 13814990},
+            {-17422573, 15157790, 18705543, 29619, 24409717, -260476, 27361681,
+             9257833, -1956526, -1776914},
+            {-25045300, -10191966, 15366585, 15166509, -13105086, 8423556,
+             -29171540, 12361135, -18685978, 4578290},
+        },
+        {
+            {24579768, 3711570, 1342322, -11180126, -27005135, 14124956,
+             -22544529, 14074919, 21964432, 8235257},
+            {-6528613, -2411497, 9442966, -5925588, 12025640, -1487420,
+             -2981514, -1669206, 13006806, 2355433},
+            {-16304899, -13605259, -6632427, -5142349, 16974359, -10911083,
+             27202044, 1719366, 1141648, -12796236},
+        },
+        {
+            {-12863944, -13219986, -8318266, -11018091, -6810145, -4843894,
+             13475066, -3133972, 32674895, 13715045},
+            {11423335, -5468059, 32344216, 8962751, 24989809, 9241752,
+             -13265253, 16086212, -28740881, -15642093},
+            {-1409668, 12530728, -6368726, 10847387, 19531186, -14132160,
+             -11709148, 7791794, -27245943, 4383347},
+        },
+    },
+    {
+        {
+            {-28970898, 5271447, -1266009, -9736989, -12455236, 16732599,
+             -4862407, -4906449, 27193557, 6245191},
+            {-15193956, 5362278, -1783893, 2695834, 4960227, 12840725, 23061898,
+             3260492, 22510453, 8577507},
+            {-12632451, 11257346, -32692994, 13548177, -721004, 10879011,
+             31168030, 13952092, -29571492, -3635906},
+        },
+        {
+            {3877321, -9572739, 32416692, 5405324, -11004407, -13656635,
+             3759769, 11935320, 5611860, 8164018},
+            {-16275802, 14667797, 15906460, 12155291, -22111149, -9039718,
+             32003002, -8832289, 5773085, -8422109},
+            {-23788118, -8254300, 1950875, 8937633, 18686727, 16459170, -905725,
+             12376320, 31632953, 190926},
+        },
+        {
+            {-24593607, -16138885, -8423991, 13378746, 14162407, 6901328,
+             -8288749, 4508564, -25341555, -3627528},
+            {8884438, -5884009, 6023974, 10104341, -6881569, -4941533, 18722941,
+             -14786005, -1672488, 827625},
+            {-32720583, -16289296, -32503547, 7101210, 13354605, 2659080,
+             -1800575, -14108036, -24878478, 1541286},
+        },
+        {
+            {2901347, -1117687, 3880376, -10059388, -17620940, -3612781,
+             -21802117, -3567481, 20456845, -1885033},
+            {27019610, 12299467, -13658288, -1603234, -12861660, -4861471,
+             -19540150, -5016058, 29439641, 15138866},
+            {21536104, -6626420, -32447818, -10690208, -22408077, 5175814,
+             -5420040, -16361163, 7779328, 109896},
+        },
+        {
+            {30279744, 14648750, -8044871, 6425558, 13639621, -743509, 28698390,
+             12180118, 23177719, -554075},
+            {26572847, 3405927, -31701700, 12890905, -19265668, 5335866,
+             -6493768, 2378492, 4439158, -13279347},
+            {-22716706, 3489070, -9225266, -332753, 18875722, -1140095,
+             14819434, -12731527, -17717757, -5461437},
+        },
+        {
+            {-5056483, 16566551, 15953661, 3767752, -10436499, 15627060,
+             -820954, 2177225, 8550082, -15114165},
+            {-18473302, 16596775, -381660, 15663611, 22860960, 15585581,
+             -27844109, -3582739, -23260460, -8428588},
+            {-32480551, 15707275, -8205912, -5652081, 29464558, 2713815,
+             -22725137, 15860482, -21902570, 1494193},
+        },
+        {
+            {-19562091, -14087393, -25583872, -9299552, 13127842, 759709,
+             21923482, 16529112, 8742704, 12967017},
+            {-28464899, 1553205, 32536856, -10473729, -24691605, -406174,
+             -8914625, -2933896, -29903758, 15553883},
+            {21877909, 3230008, 9881174, 10539357, -4797115, 2841332, 11543572,
+             14513274, 19375923, -12647961},
+        },
+        {
+            {8832269, -14495485, 13253511, 5137575, 5037871, 4078777, 24880818,
+             -6222716, 2862653, 9455043},
+            {29306751, 5123106, 20245049, -14149889, 9592566, 8447059, -2077124,
+             -2990080, 15511449, 4789663},
+            {-20679756, 7004547, 8824831, -9434977, -4045704, -3750736,
+             -5754762, 108893, 23513200, 16652362},
+        },
+    },
+    {
+        {
+            {-33256173, 4144782, -4476029, -6579123, 10770039, -7155542,
+             -6650416, -12936300, -18319198, 10212860},
+            {2756081, 8598110, 7383731, -6859892, 22312759, -1105012, 21179801,
+             2600940, -9988298, -12506466},
+            {-24645692, 13317462, -30449259, -15653928, 21365574, -10869657,
+             11344424, 864440, -2499677, -16710063},
+        },
+        {
+            {-26432803, 6148329, -17184412, -14474154, 18782929, -275997,
+             -22561534, 211300, 2719757, 4940997},
+            {-1323882, 3911313, -6948744, 14759765, -30027150, 7851207,
+             21690126, 8518463, 26699843, 5276295},
+            {-13149873, -6429067, 9396249, 365013, 24703301, -10488939, 1321586,
+             149635, -15452774, 7159369},
+        },
+        {
+            {9987780, -3404759, 17507962, 9505530, 9731535, -2165514, 22356009,
+             8312176, 22477218, -8403385},
+            {18155857, -16504990, 19744716, 9006923, 15154154, -10538976,
+             24256460, -4864995, -22548173, 9334109},
+            {2986088, -4911893, 10776628, -3473844, 10620590, -7083203,
+             -21413845, 14253545, -22587149, 536906},
+        },
+        {
+            {4377756, 8115836, 24567078, 15495314, 11625074, 13064599, 7390551,
+             10589625, 10838060, -15420424},
+            {-19342404, 867880, 9277171, -3218459, -14431572, -1986443,
+             19295826, -15796950, 6378260, 699185},
+            {7895026, 4057113, -7081772, -13077756, -17886831, -323126, -716039,
+             15693155, -5045064, -13373962},
+        },
+        {
+            {-7737563, -5869402, -14566319, -7406919, 11385654, 13201616,
+             31730678, -10962840, -3918636, -9669325},
+            {10188286, -15770834, -7336361, 13427543, 22223443, 14896287,
+             30743455, 7116568, -21786507, 5427593},
+            {696102, 13206899, 27047647, -10632082, 15285305, -9853179,
+             10798490, -4578720, 19236243, 12477404},
+        },
+        {
+            {-11229439, 11243796, -17054270, -8040865, -788228, -8167967,
+             -3897669, 11180504, -23169516, 7733644},
+            {17800790, -14036179, -27000429, -11766671, 23887827, 3149671,
+             23466177, -10538171, 10322027, 15313801},
+            {26246234, 11968874, 32263343, -5468728, 6830755, -13323031,
+             -15794704, -101982, -24449242, 10890804},
+        },
+        {
+            {-31365647, 10271363, -12660625, -6267268, 16690207, -13062544,
+             -14982212, 16484931, 25180797, -5334884},
+            {-586574, 10376444, -32586414, -11286356, 19801893, 10997610,
+             2276632, 9482883, 316878, 13820577},
+            {-9882808, -4510367, -2115506, 16457136, -11100081, 11674996,
+             30756178, -7515054, 30696930, -3712849},
+        },
+        {
+            {32988917, -9603412, 12499366, 7910787, -10617257, -11931514,
+             -7342816, -9985397, -32349517, 7392473},
+            {-8855661, 15927861, 9866406, -3649411, -2396914, -16655781,
+             -30409476, -9134995, 25112947, -2926644},
+            {-2504044, -436966, 25621774, -5678772, 15085042, -5479877,
+             -24884878, -13526194, 5537438, -13914319},
+        },
+    },
+    {
+        {
+            {-11225584, 2320285, -9584280, 10149187, -33444663, 5808648,
+             -14876251, -1729667, 31234590, 6090599},
+            {-9633316, 116426, 26083934, 2897444, -6364437, -2688086, 609721,
+             15878753, -6970405, -9034768},
+            {-27757857, 247744, -15194774, -9002551, 23288161, -10011936,
+             -23869595, 6503646, 20650474, 1804084},
+        },
+        {
+            {-27589786, 15456424, 8972517, 8469608, 15640622, 4439847, 3121995,
+             -10329713, 27842616, -202328},
+            {-15306973, 2839644, 22530074, 10026331, 4602058, 5048462, 28248656,
+             5031932, -11375082, 12714369},
+            {20807691, -7270825, 29286141, 11421711, -27876523, -13868230,
+             -21227475, 1035546, -19733229, 12796920},
+        },
+        {
+            {12076899, -14301286, -8785001, -11848922, -25012791, 16400684,
+             -17591495, -12899438, 3480665, -15182815},
+            {-32361549, 5457597, 28548107, 7833186, 7303070, -11953545,
+             -24363064, -15921875, -33374054, 2771025},
+            {-21389266, 421932, 26597266, 6860826, 22486084, -6737172,
+             -17137485, -4210226, -24552282, 15673397},
+        },
+        {
+            {-20184622, 2338216, 19788685, -9620956, -4001265, -8740893,
+             -20271184, 4733254, 3727144, -12934448},
+            {6120119, 814863, -11794402, -622716, 6812205, -15747771, 2019594,
+             7975683, 31123697, -10958981},
+            {30069250, -11435332, 30434654, 2958439, 18399564, -976289,
+             12296869, 9204260, -16432438, 9648165},
+        },
+        {
+            {32705432, -1550977, 30705658, 7451065, -11805606, 9631813, 3305266,
+             5248604, -26008332, -11377501},
+            {17219865, 2375039, -31570947, -5575615, -19459679, 9219903, 294711,
+             15298639, 2662509, -16297073},
+            {-1172927, -7558695, -4366770, -4287744, -21346413, -8434326,
+             32087529, -1222777, 32247248, -14389861},
+        },
+        {
+            {14312628, 1221556, 17395390, -8700143, -4945741, -8684635,
+             -28197744, -9637817, -16027623, -13378845},
+            {-1428825, -9678990, -9235681, 6549687, -7383069, -468664, 23046502,
+             9803137, 17597934, 2346211},
+            {18510800, 15337574, 26171504, 981392, -22241552, 7827556,
+             -23491134, -11323352, 3059833, -11782870},
+        },
+        {
+            {10141598, 6082907, 17829293, -1947643, 9830092, 13613136,
+             -25556636, -5544586, -33502212, 3592096},
+            {33114168, -15889352, -26525686, -13343397, 33076705, 8716171,
+             1151462, 1521897, -982665, -6837803},
+            {-32939165, -4255815, 23947181, -324178, -33072974, -12305637,
+             -16637686, 3891704, 26353178, 693168},
+        },
+        {
+            {30374239, 1595580, -16884039, 13186931, 4600344, 406904, 9585294,
+             -400668, 31375464, 14369965},
+            {-14370654, -7772529, 1510301, 6434173, -18784789, -6262728,
+             32732230, -13108839, 17901441, 16011505},
+            {18171223, -11934626, -12500402, 15197122, -11038147, -15230035,
+             -19172240, -16046376, 8764035, 12309598},
+        },
+    },
+    {
+        {
+            {5975908, -5243188, -19459362, -9681747, -11541277, 14015782,
+             -23665757, 1228319, 17544096, -10593782},
+            {5811932, -1715293, 3442887, -2269310, -18367348, -8359541,
+             -18044043, -15410127, -5565381, 12348900},
+            {-31399660, 11407555, 25755363, 6891399, -3256938, 14872274,
+             -24849353, 8141295, -10632534, -585479},
+        },
+        {
+            {-12675304, 694026, -5076145, 13300344, 14015258, -14451394,
+             -9698672, -11329050, 30944593, 1130208},
+            {8247766, -6710942, -26562381, -7709309, -14401939, -14648910,
+             4652152, 2488540, 23550156, -271232},
+            {17294316, -3788438, 7026748, 15626851, 22990044, 113481, 2267737,
+             -5908146, -408818, -137719},
+        },
+        {
+            {16091085, -16253926, 18599252, 7340678, 2137637, -1221657,
+             -3364161, 14550936, 3260525, -7166271},
+            {-4910104, -13332887, 18550887, 10864893, -16459325, -7291596,
+             -23028869, -13204905, -12748722, 2701326},
+            {-8574695, 16099415, 4629974, -16340524, -20786213, -6005432,
+             -10018363, 9276971, 11329923, 1862132},
+        },
+        {
+            {14763076, -15903608, -30918270, 3689867, 3511892, 10313526,
+             -21951088, 12219231, -9037963, -940300},
+            {8894987, -3446094, 6150753, 3013931, 301220, 15693451, -31981216,
+             -2909717, -15438168, 11595570},
+            {15214962, 3537601, -26238722, -14058872, 4418657, -15230761,
+             13947276, 10730794, -13489462, -4363670},
+        },
+        {
+            {-2538306, 7682793, 32759013, 263109, -29984731, -7955452,
+             -22332124, -10188635, 977108, 699994},
+            {-12466472, 4195084, -9211532, 550904, -15565337, 12917920,
+             19118110, -439841, -30534533, -14337913},
+            {31788461, -14507657, 4799989, 7372237, 8808585, -14747943, 9408237,
+             -10051775, 12493932, -5409317},
+        },
+        {
+            {-25680606, 5260744, -19235809, -6284470, -3695942, 16566087,
+             27218280, 2607121, 29375955, 6024730},
+            {842132, -2794693, -4763381, -8722815, 26332018, -12405641,
+             11831880, 6985184, -9940361, 2854096},
+            {-4847262, -7969331, 2516242, -5847713, 9695691, -7221186, 16512645,
+             960770, 12121869, 16648078},
+        },
+        {
+            {-15218652, 14667096, -13336229, 2013717, 30598287, -464137,
+             -31504922, -7882064, 20237806, 2838411},
+            {-19288047, 4453152, 15298546, -16178388, 22115043, -15972604,
+             12544294, -13470457, 1068881, -12499905},
+            {-9558883, -16518835, 33238498, 13506958, 30505848, -1114596,
+             -8486907, -2630053, 12521378, 4845654},
+        },
+        {
+            {-28198521, 10744108, -2958380, 10199664, 7759311, -13088600,
+             3409348, -873400, -6482306, -12885870},
+            {-23561822, 6230156, -20382013, 10655314, -24040585, -11621172,
+             10477734, -1240216, -3113227, 13974498},
+            {12966261, 15550616, -32038948, -1615346, 21025980, -629444,
+             5642325, 7188737, 18895762, 12629579},
+        },
+    },
+    {
+        {
+            {14741879, -14946887, 22177208, -11721237, 1279741, 8058600,
+             11758140, 789443, 32195181, 3895677},
+            {10758205, 15755439, -4509950, 9243698, -4879422, 6879879, -2204575,
+             -3566119, -8982069, 4429647},
+            {-2453894, 15725973, -20436342, -10410672, -5803908, -11040220,
+             -7135870, -11642895, 18047436, -15281743},
+        },
+        {
+            {-25173001, -11307165, 29759956, 11776784, -22262383, -15820455,
+             10993114, -12850837, -17620701, -9408468},
+            {21987233, 700364, -24505048, 14972008, -7774265, -5718395,
+             32155026, 2581431, -29958985, 8773375},
+            {-25568350, 454463, -13211935, 16126715, 25240068, 8594567,
+             20656846, 12017935, -7874389, -13920155},
+        },
+        {
+            {6028182, 6263078, -31011806, -11301710, -818919, 2461772,
+             -31841174, -5468042, -1721788, -2776725},
+            {-12278994, 16624277, 987579, -5922598, 32908203, 1248608, 7719845,
+             -4166698, 28408820, 6816612},
+            {-10358094, -8237829, 19549651, -12169222, 22082623, 16147817,
+             20613181, 13982702, -10339570, 5067943},
+        },
+        {
+            {-30505967, -3821767, 12074681, 13582412, -19877972, 2443951,
+             -19719286, 12746132, 5331210, -10105944},
+            {30528811, 3601899, -1957090, 4619785, -27361822, -15436388,
+             24180793, -12570394, 27679908, -1648928},
+            {9402404, -13957065, 32834043, 10838634, -26580150, -13237195,
+             26653274, -8685565, 22611444, -12715406},
+        },
+        {
+            {22190590, 1118029, 22736441, 15130463, -30460692, -5991321,
+             19189625, -4648942, 4854859, 6622139},
+            {-8310738, -2953450, -8262579, -3388049, -10401731, -271929,
+             13424426, -3567227, 26404409, 13001963},
+            {-31241838, -15415700, -2994250, 8939346, 11562230, -12840670,
+             -26064365, -11621720, -15405155, 11020693},
+        },
+        {
+            {1866042, -7949489, -7898649, -10301010, 12483315, 13477547,
+             3175636, -12424163, 28761762, 1406734},
+            {-448555, -1777666, 13018551, 3194501, -9580420, -11161737,
+             24760585, -4347088, 25577411, -13378680},
+            {-24290378, 4759345, -690653, -1852816, 2066747, 10693769,
+             -29595790, 9884936, -9368926, 4745410},
+        },
+        {
+            {-9141284, 6049714, -19531061, -4341411, -31260798, 9944276,
+             -15462008, -11311852, 10931924, -11931931},
+            {-16561513, 14112680, -8012645, 4817318, -8040464, -11414606,
+             -22853429, 10856641, -20470770, 13434654},
+            {22759489, -10073434, -16766264, -1871422, 13637442, -10168091,
+             1765144, -12654326, 28445307, -5364710},
+        },
+        {
+            {29875063, 12493613, 2795536, -3786330, 1710620, 15181182,
+             -10195717, -8788675, 9074234, 1167180},
+            {-26205683, 11014233, -9842651, -2635485, -26908120, 7532294,
+             -18716888, -9535498, 3843903, 9367684},
+            {-10969595, -6403711, 9591134, 9582310, 11349256, 108879, 16235123,
+             8601684, -139197, 4242895},
+        },
+    },
+    {
+        {
+            {22092954, -13191123, -2042793, -11968512, 32186753, -11517388,
+             -6574341, 2470660, -27417366, 16625501},
+            {-11057722, 3042016, 13770083, -9257922, 584236, -544855, -7770857,
+             2602725, -27351616, 14247413},
+            {6314175, -10264892, -32772502, 15957557, -10157730, 168750,
+             -8618807, 14290061, 27108877, -1180880},
+        },
+        {
+            {-8586597, -7170966, 13241782, 10960156, -32991015, -13794596,
+             33547976, -11058889, -27148451, 981874},
+            {22833440, 9293594, -32649448, -13618667, -9136966, 14756819,
+             -22928859, -13970780, -10479804, -16197962},
+            {-7768587, 3326786, -28111797, 10783824, 19178761, 14905060,
+             22680049, 13906969, -15933690, 3797899},
+        },
+        {
+            {21721356, -4212746, -12206123, 9310182, -3882239, -13653110,
+             23740224, -2709232, 20491983, -8042152},
+            {9209270, -15135055, -13256557, -6167798, -731016, 15289673,
+             25947805, 15286587, 30997318, -6703063},
+            {7392032, 16618386, 23946583, -8039892, -13265164, -1533858,
+             -14197445, -2321576, 17649998, -250080},
+        },
+        {
+            {-9301088, -14193827, 30609526, -3049543, -25175069, -1283752,
+             -15241566, -9525724, -2233253, 7662146},
+            {-17558673, 1763594, -33114336, 15908610, -30040870, -12174295,
+             7335080, -8472199, -3174674, 3440183},
+            {-19889700, -5977008, -24111293, -9688870, 10799743, -16571957,
+             40450, -4431835, 4862400, 1133},
+        },
+        {
+            {-32856209, -7873957, -5422389, 14860950, -16319031, 7956142,
+             7258061, 311861, -30594991, -7379421},
+            {-3773428, -1565936, 28985340, 7499440, 24445838, 9325937, 29727763,
+             16527196, 18278453, 15405622},
+            {-4381906, 8508652, -19898366, -3674424, -5984453, 15149970,
+             -13313598, 843523, -21875062, 13626197},
+        },
+        {
+            {2281448, -13487055, -10915418, -2609910, 1879358, 16164207,
+             -10783882, 3953792, 13340839, 15928663},
+            {31727126, -7179855, -18437503, -8283652, 2875793, -16390330,
+             -25269894, -7014826, -23452306, 5964753},
+            {4100420, -5959452, -17179337, 6017714, -18705837, 12227141,
+             -26684835, 11344144, 2538215, -7570755},
+        },
+        {
+            {-9433605, 6123113, 11159803, -2156608, 30016280, 14966241,
+             -20474983, 1485421, -629256, -15958862},
+            {-26804558, 4260919, 11851389, 9658551, -32017107, 16367492,
+             -20205425, -13191288, 11659922, -11115118},
+            {26180396, 10015009, -30844224, -8581293, 5418197, 9480663, 2231568,
+             -10170080, 33100372, -1306171},
+        },
+        {
+            {15121113, -5201871, -10389905, 15427821, -27509937, -15992507,
+             21670947, 4486675, -5931810, -14466380},
+            {16166486, -9483733, -11104130, 6023908, -31926798, -1364923,
+             2340060, -16254968, -10735770, -10039824},
+            {28042865, -3557089, -12126526, 12259706, -3717498, -6945899,
+             6766453, -8689599, 18036436, 5803270},
+        },
+    },
+    {
+        {
+            {-817581, 6763912, 11803561, 1585585, 10958447, -2671165, 23855391,
+             4598332, -6159431, -14117438},
+            {-31031306, -14256194, 17332029, -2383520, 31312682, -5967183,
+             696309, 50292, -20095739, 11763584},
+            {-594563, -2514283, -32234153, 12643980, 12650761, 14811489, 665117,
+             -12613632, -19773211, -10713562},
+        },
+        {
+            {30464590, -11262872, -4127476, -12734478, 19835327, -7105613,
+             -24396175, 2075773, -17020157, 992471},
+            {18357185, -6994433, 7766382, 16342475, -29324918, 411174, 14578841,
+             8080033, -11574335, -10601610},
+            {19598397, 10334610, 12555054, 2555664, 18821899, -10339780,
+             21873263, 16014234, 26224780, 16452269},
+        },
+        {
+            {-30223925, 5145196, 5944548, 16385966, 3976735, 2009897, -11377804,
+             -7618186, -20533829, 3698650},
+            {14187449, 3448569, -10636236, -10810935, -22663880, -3433596,
+             7268410, -10890444, 27394301, 12015369},
+            {19695761, 16087646, 28032085, 12999827, 6817792, 11427614,
+             20244189, -1312777, -13259127, -3402461},
+        },
+        {
+            {30860103, 12735208, -1888245, -4699734, -16974906, 2256940,
+             -8166013, 12298312, -8550524, -10393462},
+            {-5719826, -11245325, -1910649, 15569035, 26642876, -7587760,
+             -5789354, -15118654, -4976164, 12651793},
+            {-2848395, 9953421, 11531313, -5282879, 26895123, -12697089,
+             -13118820, -16517902, 9768698, -2533218},
+        },
+        {
+            {-24719459, 1894651, -287698, -4704085, 15348719, -8156530,
+             32767513, 12765450, 4940095, 10678226},
+            {18860224, 15980149, -18987240, -1562570, -26233012, -11071856,
+             -7843882, 13944024, -24372348, 16582019},
+            {-15504260, 4970268, -29893044, 4175593, -20993212, -2199756,
+             -11704054, 15444560, -11003761, 7989037},
+        },
+        {
+            {31490452, 5568061, -2412803, 2182383, -32336847, 4531686,
+             -32078269, 6200206, -19686113, -14800171},
+            {-17308668, -15879940, -31522777, -2831, -32887382, 16375549,
+             8680158, -16371713, 28550068, -6857132},
+            {-28126887, -5688091, 16837845, -1820458, -6850681, 12700016,
+             -30039981, 4364038, 1155602, 5988841},
+        },
+        {
+            {21890435, -13272907, -12624011, 12154349, -7831873, 15300496,
+             23148983, -4470481, 24618407, 8283181},
+            {-33136107, -10512751, 9975416, 6841041, -31559793, 16356536,
+             3070187, -7025928, 1466169, 10740210},
+            {-1509399, -15488185, -13503385, -10655916, 32799044, 909394,
+             -13938903, -5779719, -32164649, -15327040},
+        },
+        {
+            {3960823, -14267803, -28026090, -15918051, -19404858, 13146868,
+             15567327, 951507, -3260321, -573935},
+            {24740841, 5052253, -30094131, 8961361, 25877428, 6165135,
+             -24368180, 14397372, -7380369, -6144105},
+            {-28888365, 3510803, -28103278, -1158478, -11238128, -10631454,
+             -15441463, -14453128, -1625486, -6494814},
+        },
+    },
+    {
+        {
+            {793299, -9230478, 8836302, -6235707, -27360908, -2369593, 33152843,
+             -4885251, -9906200, -621852},
+            {5666233, 525582, 20782575, -8038419, -24538499, 14657740, 16099374,
+             1468826, -6171428, -15186581},
+            {-4859255, -3779343, -2917758, -6748019, 7778750, 11688288,
+             -30404353, -9871238, -1558923, -9863646},
+        },
+        {
+            {10896332, -7719704, 824275, 472601, -19460308, 3009587, 25248958,
+             14783338, -30581476, -15757844},
+            {10566929, 12612572, -31944212, 11118703, -12633376, 12362879,
+             21752402, 8822496, 24003793, 14264025},
+            {27713862, -7355973, -11008240, 9227530, 27050101, 2504721,
+             23886875, -13117525, 13958495, -5732453},
+        },
+        {
+            {-23481610, 4867226, -27247128, 3900521, 29838369, -8212291,
+             -31889399, -10041781, 7340521, -15410068},
+            {4646514, -8011124, -22766023, -11532654, 23184553, 8566613,
+             31366726, -1381061, -15066784, -10375192},
+            {-17270517, 12723032, -16993061, 14878794, 21619651, -6197576,
+             27584817, 3093888, -8843694, 3849921},
+        },
+        {
+            {-9064912, 2103172, 25561640, -15125738, -5239824, 9582958,
+             32477045, -9017955, 5002294, -15550259},
+            {-12057553, -11177906, 21115585, -13365155, 8808712, -12030708,
+             16489530, 13378448, -25845716, 12741426},
+            {-5946367, 10645103, -30911586, 15390284, -3286982, -7118677,
+             24306472, 15852464, 28834118, -7646072},
+        },
+        {
+            {-17335748, -9107057, -24531279, 9434953, -8472084, -583362,
+             -13090771, 455841, 20461858, 5491305},
+            {13669248, -16095482, -12481974, -10203039, -14569770, -11893198,
+             -24995986, 11293807, -28588204, -9421832},
+            {28497928, 6272777, -33022994, 14470570, 8906179, -1225630,
+             18504674, -14165166, 29867745, -8795943},
+        },
+        {
+            {-16207023, 13517196, -27799630, -13697798, 24009064, -6373891,
+             -6367600, -13175392, 22853429, -4012011},
+            {24191378, 16712145, -13931797, 15217831, 14542237, 1646131,
+             18603514, -11037887, 12876623, -2112447},
+            {17902668, 4518229, -411702, -2829247, 26878217, 5258055, -12860753,
+             608397, 16031844, 3723494},
+        },
+        {
+            {-28632773, 12763728, -20446446, 7577504, 33001348, -13017745,
+             17558842, -7872890, 23896954, -4314245},
+            {-20005381, -12011952, 31520464, 605201, 2543521, 5991821, -2945064,
+             7229064, -9919646, -8826859},
+            {28816045, 298879, -28165016, -15920938, 19000928, -1665890,
+             -12680833, -2949325, -18051778, -2082915},
+        },
+        {
+            {16000882, -344896, 3493092, -11447198, -29504595, -13159789,
+             12577740, 16041268, -19715240, 7847707},
+            {10151868, 10572098, 27312476, 7922682, 14825339, 4723128,
+             -32855931, -6519018, -10020567, 3852848},
+            {-11430470, 15697596, -21121557, -4420647, 5386314, 15063598,
+             16514493, -15932110, 29330899, -15076224},
+        },
+    },
+    {
+        {
+            {-25499735, -4378794, -15222908, -6901211, 16615731, 2051784,
+             3303702, 15490, -27548796, 12314391},
+            {15683520, -6003043, 18109120, -9980648, 15337968, -5997823,
+             -16717435, 15921866, 16103996, -3731215},
+            {-23169824, -10781249, 13588192, -1628807, -3798557, -1074929,
+             -19273607, 5402699, -29815713, -9841101},
+        },
+        {
+            {23190676, 2384583, -32714340, 3462154, -29903655, -1529132,
+             -11266856, 8911517, -25205859, 2739713},
+            {21374101, -3554250, -33524649, 9874411, 15377179, 11831242,
+             -33529904, 6134907, 4931255, 11987849},
+            {-7732, -2978858, -16223486, 7277597, 105524, -322051, -31480539,
+             13861388, -30076310, 10117930},
+        },
+        {
+            {-29501170, -10744872, -26163768, 13051539, -25625564, 5089643,
+             -6325503, 6704079, 12890019, 15728940},
+            {-21972360, -11771379, -951059, -4418840, 14704840, 2695116, 903376,
+             -10428139, 12885167, 8311031},
+            {-17516482, 5352194, 10384213, -13811658, 7506451, 13453191,
+             26423267, 4384730, 1888765, -5435404},
+        },
+        {
+            {-25817338, -3107312, -13494599, -3182506, 30896459, -13921729,
+             -32251644, -12707869, -19464434, -3340243},
+            {-23607977, -2665774, -526091, 4651136, 5765089, 4618330, 6092245,
+             14845197, 17151279, -9854116},
+            {-24830458, -12733720, -15165978, 10367250, -29530908, -265356,
+             22825805, -7087279, -16866484, 16176525},
+        },
+        {
+            {-23583256, 6564961, 20063689, 3798228, -4740178, 7359225, 2006182,
+             -10363426, -28746253, -10197509},
+            {-10626600, -4486402, -13320562, -5125317, 3432136, -6393229,
+             23632037, -1940610, 32808310, 1099883},
+            {15030977, 5768825, -27451236, -2887299, -6427378, -15361371,
+             -15277896, -6809350, 2051441, -15225865},
+        },
+        {
+            {-3362323, -7239372, 7517890, 9824992, 23555850, 295369, 5148398,
+             -14154188, -22686354, 16633660},
+            {4577086, -16752288, 13249841, -15304328, 19958763, -14537274,
+             18559670, -10759549, 8402478, -9864273},
+            {-28406330, -1051581, -26790155, -907698, -17212414, -11030789,
+             9453451, -14980072, 17983010, 9967138},
+        },
+        {
+            {-25762494, 6524722, 26585488, 9969270, 24709298, 1220360, -1677990,
+             7806337, 17507396, 3651560},
+            {-10420457, -4118111, 14584639, 15971087, -15768321, 8861010,
+             26556809, -5574557, -18553322, -11357135},
+            {2839101, 14284142, 4029895, 3472686, 14402957, 12689363, -26642121,
+             8459447, -5605463, -7621941},
+        },
+        {
+            {-4839289, -3535444, 9744961, 2871048, 25113978, 3187018, -25110813,
+             -849066, 17258084, -7977739},
+            {18164541, -10595176, -17154882, -1542417, 19237078, -9745295,
+             23357533, -15217008, 26908270, 12150756},
+            {-30264870, -7647865, 5112249, -7036672, -1499807, -6974257, 43168,
+             -5537701, -32302074, 16215819},
+        },
+    },
+    {
+        {
+            {-6898905, 9824394, -12304779, -4401089, -31397141, -6276835,
+             32574489, 12532905, -7503072, -8675347},
+            {-27343522, -16515468, -27151524, -10722951, 946346, 16291093,
+             254968, 7168080, 21676107, -1943028},
+            {21260961, -8424752, -16831886, -11920822, -23677961, 3968121,
+             -3651949, -6215466, -3556191, -7913075},
+        },
+        {
+            {16544754, 13250366, -16804428, 15546242, -4583003, 12757258,
+             -2462308, -8680336, -18907032, -9662799},
+            {-2415239, -15577728, 18312303, 4964443, -15272530, -12653564,
+             26820651, 16690659, 25459437, -4564609},
+            {-25144690, 11425020, 28423002, -11020557, -6144921, -15826224,
+             9142795, -2391602, -6432418, -1644817},
+        },
+        {
+            {-23104652, 6253476, 16964147, -3768872, -25113972, -12296437,
+             -27457225, -16344658, 6335692, 7249989},
+            {-30333227, 13979675, 7503222, -12368314, -11956721, -4621693,
+             -30272269, 2682242, 25993170, -12478523},
+            {4364628, 5930691, 32304656, -10044554, -8054781, 15091131,
+             22857016, -10598955, 31820368, 15075278},
+        },
+        {
+            {31879134, -8918693, 17258761, 90626, -8041836, -4917709, 24162788,
+             -9650886, -17970238, 12833045},
+            {19073683, 14851414, -24403169, -11860168, 7625278, 11091125,
+             -19619190, 2074449, -9413939, 14905377},
+            {24483667, -11935567, -2518866, -11547418, -1553130, 15355506,
+             -25282080, 9253129, 27628530, -7555480},
+        },
+        {
+            {17597607, 8340603, 19355617, 552187, 26198470, -3176583, 4593324,
+             -9157582, -14110875, 15297016},
+            {510886, 14337390, -31785257, 16638632, 6328095, 2713355, -20217417,
+             -11864220, 8683221, 2921426},
+            {18606791, 11874196, 27155355, -5281482, -24031742, 6265446,
+             -25178240, -1278924, 4674690, 13890525},
+        },
+        {
+            {13609624, 13069022, -27372361, -13055908, 24360586, 9592974,
+             14977157, 9835105, 4389687, 288396},
+            {9922506, -519394, 13613107, 5883594, -18758345, -434263, -12304062,
+             8317628, 23388070, 16052080},
+            {12720016, 11937594, -31970060, -5028689, 26900120, 8561328,
+             -20155687, -11632979, -14754271, -10812892},
+        },
+        {
+            {15961858, 14150409, 26716931, -665832, -22794328, 13603569,
+             11829573, 7467844, -28822128, 929275},
+            {11038231, -11582396, -27310482, -7316562, -10498527, -16307831,
+             -23479533, -9371869, -21393143, 2465074},
+            {20017163, -4323226, 27915242, 1529148, 12396362, 15675764,
+             13817261, -9658066, 2463391, -4622140},
+        },
+        {
+            {-16358878, -12663911, -12065183, 4996454, -1256422, 1073572,
+             9583558, 12851107, 4003896, 12673717},
+            {-1731589, -15155870, -3262930, 16143082, 19294135, 13385325,
+             14741514, -9103726, 7903886, 2348101},
+            {24536016, -16515207, 12715592, -3862155, 1511293, 10047386,
+             -3842346, -7129159, -28377538, 10048127},
+        },
+    },
+    {
+        {
+            {-12622226, -6204820, 30718825, 2591312, -10617028, 12192840,
+             18873298, -7297090, -32297756, 15221632},
+            {-26478122, -11103864, 11546244, -1852483, 9180880, 7656409,
+             -21343950, 2095755, 29769758, 6593415},
+            {-31994208, -2907461, 4176912, 3264766, 12538965, -868111, 26312345,
+             -6118678, 30958054, 8292160},
+        },
+        {
+            {31429822, -13959116, 29173532, 15632448, 12174511, -2760094,
+             32808831, 3977186, 26143136, -3148876},
+            {22648901, 1402143, -22799984, 13746059, 7936347, 365344, -8668633,
+             -1674433, -3758243, -2304625},
+            {-15491917, 8012313, -2514730, -12702462, -23965846, -10254029,
+             -1612713, -1535569, -16664475, 8194478},
+        },
+        {
+            {27338066, -7507420, -7414224, 10140405, -19026427, -6589889,
+             27277191, 8855376, 28572286, 3005164},
+            {26287124, 4821776, 25476601, -4145903, -3764513, -15788984,
+             -18008582, 1182479, -26094821, -13079595},
+            {-7171154, 3178080, 23970071, 6201893, -17195577, -4489192,
+             -21876275, -13982627, 32208683, -1198248},
+        },
+        {
+            {-16657702, 2817643, -10286362, 14811298, 6024667, 13349505,
+             -27315504, -10497842, -27672585, -11539858},
+            {15941029, -9405932, -21367050, 8062055, 31876073, -238629,
+             -15278393, -1444429, 15397331, -4130193},
+            {8934485, -13485467, -23286397, -13423241, -32446090, 14047986,
+             31170398, -1441021, -27505566, 15087184},
+        },
+        {
+            {-18357243, -2156491, 24524913, -16677868, 15520427, -6360776,
+             -15502406, 11461896, 16788528, -5868942},
+            {-1947386, 16013773, 21750665, 3714552, -17401782, -16055433,
+             -3770287, -10323320, 31322514, -11615635},
+            {21426655, -5650218, -13648287, -5347537, -28812189, -4920970,
+             -18275391, -14621414, 13040862, -12112948},
+        },
+        {
+            {11293895, 12478086, -27136401, 15083750, -29307421, 14748872,
+             14555558, -13417103, 1613711, 4896935},
+            {-25894883, 15323294, -8489791, -8057900, 25967126, -13425460,
+             2825960, -4897045, -23971776, -11267415},
+            {-15924766, -5229880, -17443532, 6410664, 3622847, 10243618,
+             20615400, 12405433, -23753030, -8436416},
+        },
+        {
+            {-7091295, 12556208, -20191352, 9025187, -17072479, 4333801,
+             4378436, 2432030, 23097949, -566018},
+            {4565804, -16025654, 20084412, -7842817, 1724999, 189254, 24767264,
+             10103221, -18512313, 2424778},
+            {366633, -11976806, 8173090, -6890119, 30788634, 5745705, -7168678,
+             1344109, -3642553, 12412659},
+        },
+        {
+            {-24001791, 7690286, 14929416, -168257, -32210835, -13412986,
+             24162697, -15326504, -3141501, 11179385},
+            {18289522, -14724954, 8056945, 16430056, -21729724, 7842514,
+             -6001441, -1486897, -18684645, -11443503},
+            {476239, 6601091, -6152790, -9723375, 17503545, -4863900, 27672959,
+             13403813, 11052904, 5219329},
+        },
+    },
+    {
+        {
+            {20678546, -8375738, -32671898, 8849123, -5009758, 14574752,
+             31186971, -3973730, 9014762, -8579056},
+            {-13644050, -10350239, -15962508, 5075808, -1514661, -11534600,
+             -33102500, 9160280, 8473550, -3256838},
+            {24900749, 14435722, 17209120, -15292541, -22592275, 9878983,
+             -7689309, -16335821, -24568481, 11788948},
+        },
+        {
+            {-3118155, -11395194, -13802089, 14797441, 9652448, -6845904,
+             -20037437, 10410733, -24568470, -1458691},
+            {-15659161, 16736706, -22467150, 10215878, -9097177, 7563911,
+             11871841, -12505194, -18513325, 8464118},
+            {-23400612, 8348507, -14585951, -861714, -3950205, -6373419,
+             14325289, 8628612, 33313881, -8370517},
+        },
+        {
+            {-20186973, -4967935, 22367356, 5271547, -1097117, -4788838,
+             -24805667, -10236854, -8940735, -5818269},
+            {-6948785, -1795212, -32625683, -16021179, 32635414, -7374245,
+             15989197, -12838188, 28358192, -4253904},
+            {-23561781, -2799059, -32351682, -1661963, -9147719, 10429267,
+             -16637684, 4072016, -5351664, 5596589},
+        },
+        {
+            {-28236598, -3390048, 12312896, 6213178, 3117142, 16078565,
+             29266239, 2557221, 1768301, 15373193},
+            {-7243358, -3246960, -4593467, -7553353, -127927, -912245, -1090902,
+             -4504991, -24660491, 3442910},
+            {-30210571, 5124043, 14181784, 8197961, 18964734, -11939093,
+             22597931, 7176455, -18585478, 13365930},
+        },
+        {
+            {-7877390, -1499958, 8324673, 4690079, 6261860, 890446, 24538107,
+             -8570186, -9689599, -3031667},
+            {25008904, -10771599, -4305031, -9638010, 16265036, 15721635,
+             683793, -11823784, 15723479, -15163481},
+            {-9660625, 12374379, -27006999, -7026148, -7724114, -12314514,
+             11879682, 5400171, 519526, -1235876},
+        },
+        {
+            {22258397, -16332233, -7869817, 14613016, -22520255, -2950923,
+             -20353881, 7315967, 16648397, 7605640},
+            {-8081308, -8464597, -8223311, 9719710, 19259459, -15348212,
+             23994942, -5281555, -9468848, 4763278},
+            {-21699244, 9220969, -15730624, 1084137, -25476107, -2852390,
+             31088447, -7764523, -11356529, 728112},
+        },
+        {
+            {26047220, -11751471, -6900323, -16521798, 24092068, 9158119,
+             -4273545, -12555558, -29365436, -5498272},
+            {17510331, -322857, 5854289, 8403524, 17133918, -3112612, -28111007,
+             12327945, 10750447, 10014012},
+            {-10312768, 3936952, 9156313, -8897683, 16498692, -994647,
+             -27481051, -666732, 3424691, 7540221},
+        },
+        {
+            {30322361, -6964110, 11361005, -4143317, 7433304, 4989748, -7071422,
+             -16317219, -9244265, 15258046},
+            {13054562, -2779497, 19155474, 469045, -12482797, 4566042, 5631406,
+             2711395, 1062915, -5136345},
+            {-19240248, -11254599, -29509029, -7499965, -5835763, 13005411,
+             -6066489, 12194497, 32960380, 1459310},
+        },
+    },
+    {
+        {
+            {19852034, 7027924, 23669353, 10020366, 8586503, -6657907, 394197,
+             -6101885, 18638003, -11174937},
+            {31395534, 15098109, 26581030, 8030562, -16527914, -5007134,
+             9012486, -7584354, -6643087, -5442636},
+            {-9192165, -2347377, -1997099, 4529534, 25766844, 607986, -13222,
+             9677543, -32294889, -6456008},
+        },
+        {
+            {-2444496, -149937, 29348902, 8186665, 1873760, 12489863, -30934579,
+             -7839692, -7852844, -8138429},
+            {-15236356, -15433509, 7766470, 746860, 26346930, -10221762,
+             -27333451, 10754588, -9431476, 5203576},
+            {31834314, 14135496, -770007, 5159118, 20917671, -16768096,
+             -7467973, -7337524, 31809243, 7347066},
+        },
+        {
+            {-9606723, -11874240, 20414459, 13033986, 13716524, -11691881,
+             19797970, -12211255, 15192876, -2087490},
+            {-12663563, -2181719, 1168162, -3804809, 26747877, -14138091,
+             10609330, 12694420, 33473243, -13382104},
+            {33184999, 11180355, 15832085, -11385430, -1633671, 225884,
+             15089336, -11023903, -6135662, 14480053},
+        },
+        {
+            {31308717, -5619998, 31030840, -1897099, 15674547, -6582883,
+             5496208, 13685227, 27595050, 8737275},
+            {-20318852, -15150239, 10933843, -16178022, 8335352, -7546022,
+             -31008351, -12610604, 26498114, 66511},
+            {22644454, -8761729, -16671776, 4884562, -3105614, -13559366,
+             30540766, -4286747, -13327787, -7515095},
+        },
+        {
+            {-28017847, 9834845, 18617207, -2681312, -3401956, -13307506,
+             8205540, 13585437, -17127465, 15115439},
+            {23711543, -672915, 31206561, -8362711, 6164647, -9709987,
+             -33535882, -1426096, 8236921, 16492939},
+            {-23910559, -13515526, -26299483, -4503841, 25005590, -7687270,
+             19574902, 10071562, 6708380, -6222424},
+        },
+        {
+            {2101391, -4930054, 19702731, 2367575, -15427167, 1047675, 5301017,
+             9328700, 29955601, -11678310},
+            {3096359, 9271816, -21620864, -15521844, -14847996, -7592937,
+             -25892142, -12635595, -9917575, 6216608},
+            {-32615849, 338663, -25195611, 2510422, -29213566, -13820213,
+             24822830, -6146567, -26767480, 7525079},
+        },
+        {
+            {-23066649, -13985623, 16133487, -7896178, -3389565, 778788,
+             -910336, -2782495, -19386633, 11994101},
+            {21691500, -13624626, -641331, -14367021, 3285881, -3483596,
+             -25064666, 9718258, -7477437, 13381418},
+            {18445390, -4202236, 14979846, 11622458, -1727110, -3582980,
+             23111648, -6375247, 28535282, 15779576},
+        },
+        {
+            {30098053, 3089662, -9234387, 16662135, -21306940, 11308411,
+             -14068454, 12021730, 9955285, -16303356},
+            {9734894, -14576830, -7473633, -9138735, 2060392, 11313496,
+             -18426029, 9924399, 20194861, 13380996},
+            {-26378102, -7965207, -22167821, 15789297, -18055342, -6168792,
+             -1984914, 15707771, 26342023, 10146099},
+        },
+    },
+    {
+        {
+            {-26016874, -219943, 21339191, -41388, 19745256, -2878700,
+             -29637280, 2227040, 21612326, -545728},
+            {-13077387, 1184228, 23562814, -5970442, -20351244, -6348714,
+             25764461, 12243797, -20856566, 11649658},
+            {-10031494, 11262626, 27384172, 2271902, 26947504, -15997771, 39944,
+             6114064, 33514190, 2333242},
+        },
+        {
+            {-21433588, -12421821, 8119782, 7219913, -21830522, -9016134,
+             -6679750, -12670638, 24350578, -13450001},
+            {-4116307, -11271533, -23886186, 4843615, -30088339, 690623,
+             -31536088, -10406836, 8317860, 12352766},
+            {18200138, -14475911, -33087759, -2696619, -23702521, -9102511,
+             -23552096, -2287550, 20712163, 6719373},
+        },
+        {
+            {26656208, 6075253, -7858556, 1886072, -28344043, 4262326, 11117530,
+             -3763210, 26224235, -3297458},
+            {-17168938, -14854097, -3395676, -16369877, -19954045, 14050420,
+             21728352, 9493610, 18620611, -16428628},
+            {-13323321, 13325349, 11432106, 5964811, 18609221, 6062965,
+             -5269471, -9725556, -30701573, -16479657},
+        },
+        {
+            {-23860538, -11233159, 26961357, 1640861, -32413112, -16737940,
+             12248509, -5240639, 13735342, 1934062},
+            {25089769, 6742589, 17081145, -13406266, 21909293, -16067981,
+             -15136294, -3765346, -21277997, 5473616},
+            {31883677, -7961101, 1083432, -11572403, 22828471, 13290673,
+             -7125085, 12469656, 29111212, -5451014},
+        },
+        {
+            {24244947, -15050407, -26262976, 2791540, -14997599, 16666678,
+             24367466, 6388839, -10295587, 452383},
+            {-25640782, -3417841, 5217916, 16224624, 19987036, -4082269,
+             -24236251, -5915248, 15766062, 8407814},
+            {-20406999, 13990231, 15495425, 16395525, 5377168, 15166495,
+             -8917023, -4388953, -8067909, 2276718},
+        },
+        {
+            {30157918, 12924066, -17712050, 9245753, 19895028, 3368142,
+             -23827587, 5096219, 22740376, -7303417},
+            {2041139, -14256350, 7783687, 13876377, -25946985, -13352459,
+             24051124, 13742383, -15637599, 13295222},
+            {33338237, -8505733, 12532113, 7977527, 9106186, -1715251,
+             -17720195, -4612972, -4451357, -14669444},
+        },
+        {
+            {-20045281, 5454097, -14346548, 6447146, 28862071, 1883651,
+             -2469266, -4141880, 7770569, 9620597},
+            {23208068, 7979712, 33071466, 8149229, 1758231, -10834995, 30945528,
+             -1694323, -33502340, -14767970},
+            {1439958, -16270480, -1079989, -793782, 4625402, 10647766, -5043801,
+             1220118, 30494170, -11440799},
+        },
+        {
+            {-5037580, -13028295, -2970559, -3061767, 15640974, -6701666,
+             -26739026, 926050, -1684339, -13333647},
+            {13908495, -3549272, 30919928, -6273825, -21521863, 7989039,
+             9021034, 9078865, 3353509, 4033511},
+            {-29663431, -15113610, 32259991, -344482, 24295849, -12912123,
+             23161163, 8839127, 27485041, 7356032},
+        },
+    },
+    {
+        {
+            {9661027, 705443, 11980065, -5370154, -1628543, 14661173, -6346142,
+             2625015, 28431036, -16771834},
+            {-23839233, -8311415, -25945511, 7480958, -17681669, -8354183,
+             -22545972, 14150565, 15970762, 4099461},
+            {29262576, 16756590, 26350592, -8793563, 8529671, -11208050,
+             13617293, -9937143, 11465739, 8317062},
+        },
+        {
+            {-25493081, -6962928, 32500200, -9419051, -23038724, -2302222,
+             14898637, 3848455, 20969334, -5157516},
+            {-20384450, -14347713, -18336405, 13884722, -33039454, 2842114,
+             -21610826, -3649888, 11177095, 14989547},
+            {-24496721, -11716016, 16959896, 2278463, 12066309, 10137771,
+             13515641, 2581286, -28487508, 9930240},
+        },
+        {
+            {-17751622, -2097826, 16544300, -13009300, -15914807, -14949081,
+             18345767, -13403753, 16291481, -5314038},
+            {-33229194, 2553288, 32678213, 9875984, 8534129, 6889387, -9676774,
+             6957617, 4368891, 9788741},
+            {16660756, 7281060, -10830758, 12911820, 20108584, -8101676,
+             -21722536, -8613148, 16250552, -11111103},
+        },
+        {
+            {-19765507, 2390526, -16551031, 14161980, 1905286, 6414907, 4689584,
+             10604807, -30190403, 4782747},
+            {-1354539, 14736941, -7367442, -13292886, 7710542, -14155590,
+             -9981571, 4383045, 22546403, 437323},
+            {31665577, -12180464, -16186830, 1491339, -18368625, 3294682,
+             27343084, 2786261, -30633590, -14097016},
+        },
+        {
+            {-14467279, -683715, -33374107, 7448552, 19294360, 14334329,
+             -19690631, 2355319, -19284671, -6114373},
+            {15121312, -15796162, 6377020, -6031361, -10798111, -12957845,
+             18952177, 15496498, -29380133, 11754228},
+            {-2637277, -13483075, 8488727, -14303896, 12728761, -1622493,
+             7141596, 11724556, 22761615, -10134141},
+        },
+        {
+            {16918416, 11729663, -18083579, 3022987, -31015732, -13339659,
+             -28741185, -12227393, 32851222, 11717399},
+            {11166634, 7338049, -6722523, 4531520, -29468672, -7302055,
+             31474879, 3483633, -1193175, -4030831},
+            {-185635, 9921305, 31456609, -13536438, -12013818, 13348923,
+             33142652, 6546660, -19985279, -3948376},
+        },
+        {
+            {-32460596, 11266712, -11197107, -7899103, 31703694, 3855903,
+             -8537131, -12833048, -30772034, -15486313},
+            {-18006477, 12709068, 3991746, -6479188, -21491523, -10550425,
+             -31135347, -16049879, 10928917, 3011958},
+            {-6957757, -15594337, 31696059, 334240, 29576716, 14796075,
+             -30831056, -12805180, 18008031, 10258577},
+        },
+        {
+            {-22448644, 15655569, 7018479, -4410003, -30314266, -1201591,
+             -1853465, 1367120, 25127874, 6671743},
+            {29701166, -14373934, -10878120, 9279288, -17568, 13127210,
+             21382910, 11042292, 25838796, 4642684},
+            {-20430234, 14955537, -24126347, 8124619, -5369288, -5990470,
+             30468147, -13900640, 18423289, 4177476},
+        },
+    },
+};
+
+static uint8_t negative(signed char b)
+{
+    uint32_t x = b;
+
+    x >>= 31; /* 1: yes; 0: no */
+    return x;
+}
+
+static void table_select(ge_precomp *t, int pos, signed char b)
+{
+    ge_precomp minust;
+    uint8_t bnegative = negative(b);
+    uint8_t babs = b - ((uint8_t)((-bnegative) & b) << 1);
+
+    ge_precomp_0(t);
+    cmov(t, &k25519Precomp[pos][0], equal(babs, 1));
+    cmov(t, &k25519Precomp[pos][1], equal(babs, 2));
+    cmov(t, &k25519Precomp[pos][2], equal(babs, 3));
+    cmov(t, &k25519Precomp[pos][3], equal(babs, 4));
+    cmov(t, &k25519Precomp[pos][4], equal(babs, 5));
+    cmov(t, &k25519Precomp[pos][5], equal(babs, 6));
+    cmov(t, &k25519Precomp[pos][6], equal(babs, 7));
+    cmov(t, &k25519Precomp[pos][7], equal(babs, 8));
+    fe_copy(minust.yplusx, t->yminusx);
+    fe_copy(minust.yminusx, t->yplusx);
+    fe_neg(minust.xy2d, t->xy2d);
+    cmov(t, &minust, bnegative);
+}
+
+/*
+ * h = a * B
+ *
+ * where a = a[0]+256*a[1]+...+256^31 a[31]
+ * B is the Ed25519 base point (x,4/5) with x positive.
+ *
+ * Preconditions:
+ *   a[31] <= 127
+ */
+static void ge_scalarmult_base(ge_p3 *h, const uint8_t *a)
+{
+    signed char e[64];
+    signed char carry;
+    ge_p1p1 r;
+    ge_p2 s;
+    ge_precomp t;
+    int i;
+
+    for (i = 0; i < 32; ++i) {
+        e[2 * i + 0] = (a[i] >> 0) & 15;
+        e[2 * i + 1] = (a[i] >> 4) & 15;
+    }
+    /* each e[i] is between 0 and 15 */
+    /* e[63] is between 0 and 7 */
+
+    carry = 0;
+    for (i = 0; i < 63; ++i) {
+        e[i] += carry;
+        carry = e[i] + 8;
+        carry >>= 4;
+        e[i] -= carry << 4;
+    }
+    e[63] += carry;
+    /* each e[i] is between -8 and 8 */
+
+    ge_p3_0(h);
+    for (i = 1; i < 64; i += 2) {
+        table_select(&t, i / 2, e[i]);
+        ge_madd(&r, h, &t);
+        ge_p1p1_to_p3(h, &r);
+    }
+
+    ge_p3_dbl(&r, h);
+    ge_p1p1_to_p2(&s, &r);
+    ge_p2_dbl(&r, &s);
+    ge_p1p1_to_p2(&s, &r);
+    ge_p2_dbl(&r, &s);
+    ge_p1p1_to_p2(&s, &r);
+    ge_p2_dbl(&r, &s);
+    ge_p1p1_to_p3(h, &r);
+
+    for (i = 0; i < 64; i += 2) {
+        table_select(&t, i / 2, e[i]);
+        ge_madd(&r, h, &t);
+        ge_p1p1_to_p3(h, &r);
+    }
+
+    OPENSSL_cleanse(e, sizeof(e));
+}
+
+#if !defined(BASE_2_51_IMPLEMENTED)
+/*
+ * Replace (f,g) with (g,f) if b == 1;
+ * replace (f,g) with (f,g) if b == 0.
+ *
+ * Preconditions: b in {0,1}.
+ */
+static void fe_cswap(fe f, fe g, unsigned int b)
+{
+    size_t i;
+
+    b = 0-b;
+    for (i = 0; i < 10; i++) {
+        int32_t x = f[i] ^ g[i];
+        x &= b;
+        f[i] ^= x;
+        g[i] ^= x;
+    }
+}
+
+/*
+ * h = f * 121666
+ *
+ * Can overlap h with f.
+ *
+ * Preconditions:
+ *    |f| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc.
+ *
+ * Postconditions:
+ *    |h| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+ */
+static void fe_mul121666(fe h, fe f)
+{
+    int32_t f0 = f[0];
+    int32_t f1 = f[1];
+    int32_t f2 = f[2];
+    int32_t f3 = f[3];
+    int32_t f4 = f[4];
+    int32_t f5 = f[5];
+    int32_t f6 = f[6];
+    int32_t f7 = f[7];
+    int32_t f8 = f[8];
+    int32_t f9 = f[9];
+    int64_t h0 = f0 * (int64_t) 121666;
+    int64_t h1 = f1 * (int64_t) 121666;
+    int64_t h2 = f2 * (int64_t) 121666;
+    int64_t h3 = f3 * (int64_t) 121666;
+    int64_t h4 = f4 * (int64_t) 121666;
+    int64_t h5 = f5 * (int64_t) 121666;
+    int64_t h6 = f6 * (int64_t) 121666;
+    int64_t h7 = f7 * (int64_t) 121666;
+    int64_t h8 = f8 * (int64_t) 121666;
+    int64_t h9 = f9 * (int64_t) 121666;
+    int64_t carry0;
+    int64_t carry1;
+    int64_t carry2;
+    int64_t carry3;
+    int64_t carry4;
+    int64_t carry5;
+    int64_t carry6;
+    int64_t carry7;
+    int64_t carry8;
+    int64_t carry9;
+
+    carry9 = h9 + (1 << 24); h0 += (carry9 >> 25) * 19; h9 -= carry9 & kTop39Bits;
+    carry1 = h1 + (1 << 24); h2 += carry1 >> 25; h1 -= carry1 & kTop39Bits;
+    carry3 = h3 + (1 << 24); h4 += carry3 >> 25; h3 -= carry3 & kTop39Bits;
+    carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;
+    carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;
+
+    carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits;
+    carry2 = h2 + (1 << 25); h3 += carry2 >> 26; h2 -= carry2 & kTop38Bits;
+    carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;
+    carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;
+    carry8 = h8 + (1 << 25); h9 += carry8 >> 26; h8 -= carry8 & kTop38Bits;
+
+    h[0] = (int32_t)h0;
+    h[1] = (int32_t)h1;
+    h[2] = (int32_t)h2;
+    h[3] = (int32_t)h3;
+    h[4] = (int32_t)h4;
+    h[5] = (int32_t)h5;
+    h[6] = (int32_t)h6;
+    h[7] = (int32_t)h7;
+    h[8] = (int32_t)h8;
+    h[9] = (int32_t)h9;
+}
+
+static void x25519_scalar_mult_generic(uint8_t out[32],
+                                       const uint8_t scalar[32],
+                                       const uint8_t point[32]) {
+    fe x1, x2, z2, x3, z3, tmp0, tmp1;
+    uint8_t e[32];
+    unsigned swap = 0;
+    int pos;
+
+    memcpy(e, scalar, 32);
+    e[0] &= 248;
+    e[31] &= 127;
+    e[31] |= 64;
+    fe_frombytes(x1, point);
+    fe_1(x2);
+    fe_0(z2);
+    fe_copy(x3, x1);
+    fe_1(z3);
+
+    for (pos = 254; pos >= 0; --pos) {
+        unsigned b = 1 & (e[pos / 8] >> (pos & 7));
+        swap ^= b;
+        fe_cswap(x2, x3, swap);
+        fe_cswap(z2, z3, swap);
+        swap = b;
+        fe_sub(tmp0, x3, z3);
+        fe_sub(tmp1, x2, z2);
+        fe_add(x2, x2, z2);
+        fe_add(z2, x3, z3);
+        fe_mul(z3, tmp0, x2);
+        fe_mul(z2, z2, tmp1);
+        fe_sq(tmp0, tmp1);
+        fe_sq(tmp1, x2);
+        fe_add(x3, z3, z2);
+        fe_sub(z2, z3, z2);
+        fe_mul(x2, tmp1, tmp0);
+        fe_sub(tmp1, tmp1, tmp0);
+        fe_sq(z2, z2);
+        fe_mul121666(z3, tmp1);
+        fe_sq(x3, x3);
+        fe_add(tmp0, tmp0, z3);
+        fe_mul(z3, x1, z2);
+        fe_mul(z2, tmp1, tmp0);
+    }
+
+    fe_invert(z2, z2);
+    fe_mul(x2, x2, z2);
+    fe_tobytes(out, x2);
+
+    OPENSSL_cleanse(e, sizeof(e));
+}
+
+static void x25519_scalar_mult(uint8_t out[32], const uint8_t scalar[32],
+                               const uint8_t point[32]) {
+    x25519_scalar_mult_generic(out, scalar, point);
+}
+#endif
+
+static void slide(signed char *r, const uint8_t *a)
+{
+    int i;
+    int b;
+    int k;
+
+    for (i = 0; i < 256; ++i) {
+        r[i] = 1 & (a[i >> 3] >> (i & 7));
+    }
+
+    for (i = 0; i < 256; ++i) {
+        if (r[i]) {
+            for (b = 1; b <= 6 && i + b < 256; ++b) {
+                if (r[i + b]) {
+                    if (r[i] + (r[i + b] << b) <= 15) {
+                        r[i] += r[i + b] << b;
+                        r[i + b] = 0;
+                    } else if (r[i] - (r[i + b] << b) >= -15) {
+                        r[i] -= r[i + b] << b;
+                        for (k = i + b; k < 256; ++k) {
+                            if (!r[k]) {
+                                r[k] = 1;
+                                break;
+                            }
+                            r[k] = 0;
+                        }
+                    } else {
+                        break;
+                    }
+                }
+            }
+        }
+    }
+}
+
+static const ge_precomp Bi[8] = {
+    {
+        {25967493, -14356035, 29566456, 3660896, -12694345, 4014787, 27544626,
+         -11754271, -6079156, 2047605},
+        {-12545711, 934262, -2722910, 3049990, -727428, 9406986, 12720692,
+         5043384, 19500929, -15469378},
+        {-8738181, 4489570, 9688441, -14785194, 10184609, -12363380, 29287919,
+         11864899, -24514362, -4438546},
+    },
+    {
+        {15636291, -9688557, 24204773, -7912398, 616977, -16685262, 27787600,
+         -14772189, 28944400, -1550024},
+        {16568933, 4717097, -11556148, -1102322, 15682896, -11807043, 16354577,
+         -11775962, 7689662, 11199574},
+        {30464156, -5976125, -11779434, -15670865, 23220365, 15915852, 7512774,
+         10017326, -17749093, -9920357},
+    },
+    {
+        {10861363, 11473154, 27284546, 1981175, -30064349, 12577861, 32867885,
+         14515107, -15438304, 10819380},
+        {4708026, 6336745, 20377586, 9066809, -11272109, 6594696, -25653668,
+         12483688, -12668491, 5581306},
+        {19563160, 16186464, -29386857, 4097519, 10237984, -4348115, 28542350,
+         13850243, -23678021, -15815942},
+    },
+    {
+        {5153746, 9909285, 1723747, -2777874, 30523605, 5516873, 19480852,
+         5230134, -23952439, -15175766},
+        {-30269007, -3463509, 7665486, 10083793, 28475525, 1649722, 20654025,
+         16520125, 30598449, 7715701},
+        {28881845, 14381568, 9657904, 3680757, -20181635, 7843316, -31400660,
+         1370708, 29794553, -1409300},
+    },
+    {
+        {-22518993, -6692182, 14201702, -8745502, -23510406, 8844726, 18474211,
+         -1361450, -13062696, 13821877},
+        {-6455177, -7839871, 3374702, -4740862, -27098617, -10571707, 31655028,
+         -7212327, 18853322, -14220951},
+        {4566830, -12963868, -28974889, -12240689, -7602672, -2830569, -8514358,
+         -10431137, 2207753, -3209784},
+    },
+    {
+        {-25154831, -4185821, 29681144, 7868801, -6854661, -9423865, -12437364,
+         -663000, -31111463, -16132436},
+        {25576264, -2703214, 7349804, -11814844, 16472782, 9300885, 3844789,
+         15725684, 171356, 6466918},
+        {23103977, 13316479, 9739013, -16149481, 817875, -15038942, 8965339,
+         -14088058, -30714912, 16193877},
+    },
+    {
+        {-33521811, 3180713, -2394130, 14003687, -16903474, -16270840, 17238398,
+         4729455, -18074513, 9256800},
+        {-25182317, -4174131, 32336398, 5036987, -21236817, 11360617, 22616405,
+         9761698, -19827198, 630305},
+        {-13720693, 2639453, -24237460, -7406481, 9494427, -5774029, -6554551,
+         -15960994, -2449256, -14291300},
+    },
+    {
+        {-3151181, -5046075, 9282714, 6866145, -31907062, -863023, -18940575,
+         15033784, 25105118, -7894876},
+        {-24326370, 15950226, -31801215, -14592823, -11662737, -5090925,
+         1573892, -2625887, 2198790, -15804619},
+        {-3099351, 10324967, -2241613, 7453183, -5446979, -2735503, -13812022,
+         -16236442, -32461234, -12290683},
+    },
+};
+
+/*
+ * r = a * A + b * B
+ *
+ * where a = a[0]+256*a[1]+...+256^31 a[31].
+ * and b = b[0]+256*b[1]+...+256^31 b[31].
+ * B is the Ed25519 base point (x,4/5) with x positive.
+ */
+static void ge_double_scalarmult_vartime(ge_p2 *r, const uint8_t *a,
+                                         const ge_p3 *A, const uint8_t *b)
+{
+    signed char aslide[256];
+    signed char bslide[256];
+    ge_cached Ai[8]; /* A,3A,5A,7A,9A,11A,13A,15A */
+    ge_p1p1 t;
+    ge_p3 u;
+    ge_p3 A2;
+    int i;
+
+    slide(aslide, a);
+    slide(bslide, b);
+
+    ge_p3_to_cached(&Ai[0], A);
+    ge_p3_dbl(&t, A);
+    ge_p1p1_to_p3(&A2, &t);
+    ge_add(&t, &A2, &Ai[0]);
+    ge_p1p1_to_p3(&u, &t);
+    ge_p3_to_cached(&Ai[1], &u);
+    ge_add(&t, &A2, &Ai[1]);
+    ge_p1p1_to_p3(&u, &t);
+    ge_p3_to_cached(&Ai[2], &u);
+    ge_add(&t, &A2, &Ai[2]);
+    ge_p1p1_to_p3(&u, &t);
+    ge_p3_to_cached(&Ai[3], &u);
+    ge_add(&t, &A2, &Ai[3]);
+    ge_p1p1_to_p3(&u, &t);
+    ge_p3_to_cached(&Ai[4], &u);
+    ge_add(&t, &A2, &Ai[4]);
+    ge_p1p1_to_p3(&u, &t);
+    ge_p3_to_cached(&Ai[5], &u);
+    ge_add(&t, &A2, &Ai[5]);
+    ge_p1p1_to_p3(&u, &t);
+    ge_p3_to_cached(&Ai[6], &u);
+    ge_add(&t, &A2, &Ai[6]);
+    ge_p1p1_to_p3(&u, &t);
+    ge_p3_to_cached(&Ai[7], &u);
+
+    ge_p2_0(r);
+
+    for (i = 255; i >= 0; --i) {
+        if (aslide[i] || bslide[i]) {
+            break;
+        }
+    }
+
+    for (; i >= 0; --i) {
+        ge_p2_dbl(&t, r);
+
+        if (aslide[i] > 0) {
+            ge_p1p1_to_p3(&u, &t);
+            ge_add(&t, &u, &Ai[aslide[i] / 2]);
+        } else if (aslide[i] < 0) {
+            ge_p1p1_to_p3(&u, &t);
+            ge_sub(&t, &u, &Ai[(-aslide[i]) / 2]);
+        }
+
+        if (bslide[i] > 0) {
+            ge_p1p1_to_p3(&u, &t);
+            ge_madd(&t, &u, &Bi[bslide[i] / 2]);
+        } else if (bslide[i] < 0) {
+            ge_p1p1_to_p3(&u, &t);
+            ge_msub(&t, &u, &Bi[(-bslide[i]) / 2]);
+        }
+
+        ge_p1p1_to_p2(r, &t);
+    }
+}
+
+/*
+ * The set of scalars is \Z/l
+ * where l = 2^252 + 27742317777372353535851937790883648493.
+ *
+ * Input:
+ *   s[0]+256*s[1]+...+256^63*s[63] = s
+ *
+ * Output:
+ *   s[0]+256*s[1]+...+256^31*s[31] = s mod l
+ *   where l = 2^252 + 27742317777372353535851937790883648493.
+ *   Overwrites s in place.
+*/
+static void x25519_sc_reduce(uint8_t *s)
+{
+    int64_t s0  = kBottom21Bits &  load_3(s);
+    int64_t s1  = kBottom21Bits & (load_4(s +  2) >> 5);
+    int64_t s2  = kBottom21Bits & (load_3(s +  5) >> 2);
+    int64_t s3  = kBottom21Bits & (load_4(s +  7) >> 7);
+    int64_t s4  = kBottom21Bits & (load_4(s + 10) >> 4);
+    int64_t s5  = kBottom21Bits & (load_3(s + 13) >> 1);
+    int64_t s6  = kBottom21Bits & (load_4(s + 15) >> 6);
+    int64_t s7  = kBottom21Bits & (load_3(s + 18) >> 3);
+    int64_t s8  = kBottom21Bits &  load_3(s + 21);
+    int64_t s9  = kBottom21Bits & (load_4(s + 23) >> 5);
+    int64_t s10 = kBottom21Bits & (load_3(s + 26) >> 2);
+    int64_t s11 = kBottom21Bits & (load_4(s + 28) >> 7);
+    int64_t s12 = kBottom21Bits & (load_4(s + 31) >> 4);
+    int64_t s13 = kBottom21Bits & (load_3(s + 34) >> 1);
+    int64_t s14 = kBottom21Bits & (load_4(s + 36) >> 6);
+    int64_t s15 = kBottom21Bits & (load_3(s + 39) >> 3);
+    int64_t s16 = kBottom21Bits &  load_3(s + 42);
+    int64_t s17 = kBottom21Bits & (load_4(s + 44) >> 5);
+    int64_t s18 = kBottom21Bits & (load_3(s + 47) >> 2);
+    int64_t s19 = kBottom21Bits & (load_4(s + 49) >> 7);
+    int64_t s20 = kBottom21Bits & (load_4(s + 52) >> 4);
+    int64_t s21 = kBottom21Bits & (load_3(s + 55) >> 1);
+    int64_t s22 = kBottom21Bits & (load_4(s + 57) >> 6);
+    int64_t s23 =                 (load_4(s + 60) >> 3);
+    int64_t carry0;
+    int64_t carry1;
+    int64_t carry2;
+    int64_t carry3;
+    int64_t carry4;
+    int64_t carry5;
+    int64_t carry6;
+    int64_t carry7;
+    int64_t carry8;
+    int64_t carry9;
+    int64_t carry10;
+    int64_t carry11;
+    int64_t carry12;
+    int64_t carry13;
+    int64_t carry14;
+    int64_t carry15;
+    int64_t carry16;
+
+    s11 += s23 * 666643;
+    s12 += s23 * 470296;
+    s13 += s23 * 654183;
+    s14 -= s23 * 997805;
+    s15 += s23 * 136657;
+    s16 -= s23 * 683901;
+    s23  = 0;
+
+    s10 += s22 * 666643;
+    s11 += s22 * 470296;
+    s12 += s22 * 654183;
+    s13 -= s22 * 997805;
+    s14 += s22 * 136657;
+    s15 -= s22 * 683901;
+    s22  = 0;
+
+    s9  += s21 * 666643;
+    s10 += s21 * 470296;
+    s11 += s21 * 654183;
+    s12 -= s21 * 997805;
+    s13 += s21 * 136657;
+    s14 -= s21 * 683901;
+    s21  = 0;
+
+    s8  += s20 * 666643;
+    s9  += s20 * 470296;
+    s10 += s20 * 654183;
+    s11 -= s20 * 997805;
+    s12 += s20 * 136657;
+    s13 -= s20 * 683901;
+    s20  = 0;
+
+    s7  += s19 * 666643;
+    s8  += s19 * 470296;
+    s9  += s19 * 654183;
+    s10 -= s19 * 997805;
+    s11 += s19 * 136657;
+    s12 -= s19 * 683901;
+    s19  = 0;
+
+    s6  += s18 * 666643;
+    s7  += s18 * 470296;
+    s8  += s18 * 654183;
+    s9  -= s18 * 997805;
+    s10 += s18 * 136657;
+    s11 -= s18 * 683901;
+    s18  = 0;
+
+    carry6 = (s6 + (1 << 20)) >> 21;
+    s7  += carry6;
+    s6  -= carry6 * (1 << 21);
+    carry8 = (s8 + (1 << 20)) >> 21;
+    s9  += carry8;
+    s8  -= carry8 * (1 << 21);
+    carry10 = (s10 + (1 << 20)) >> 21;
+    s11 += carry10;
+    s10 -= carry10 * (1 << 21);
+    carry12 = (s12 + (1 << 20)) >> 21;
+    s13 += carry12;
+    s12 -= carry12 * (1 << 21);
+    carry14 = (s14 + (1 << 20)) >> 21;
+    s15 += carry14;
+    s14 -= carry14 * (1 << 21);
+    carry16 = (s16 + (1 << 20)) >> 21;
+    s17 += carry16;
+    s16 -= carry16 * (1 << 21);
+
+    carry7 = (s7 + (1 << 20)) >> 21;
+    s8  += carry7;
+    s7  -= carry7 * (1 << 21);
+    carry9 = (s9 + (1 << 20)) >> 21;
+    s10 += carry9;
+    s9  -= carry9 * (1 << 21);
+    carry11 = (s11 + (1 << 20)) >> 21;
+    s12 += carry11;
+    s11 -= carry11 * (1 << 21);
+    carry13 = (s13 + (1 << 20)) >> 21;
+    s14 += carry13;
+    s13 -= carry13 * (1 << 21);
+    carry15 = (s15 + (1 << 20)) >> 21;
+    s16 += carry15;
+    s15 -= carry15 * (1 << 21);
+
+    s5  += s17 * 666643;
+    s6  += s17 * 470296;
+    s7  += s17 * 654183;
+    s8  -= s17 * 997805;
+    s9  += s17 * 136657;
+    s10 -= s17 * 683901;
+    s17  = 0;
+
+    s4  += s16 * 666643;
+    s5  += s16 * 470296;
+    s6  += s16 * 654183;
+    s7  -= s16 * 997805;
+    s8  += s16 * 136657;
+    s9  -= s16 * 683901;
+    s16  = 0;
+
+    s3  += s15 * 666643;
+    s4  += s15 * 470296;
+    s5  += s15 * 654183;
+    s6  -= s15 * 997805;
+    s7  += s15 * 136657;
+    s8  -= s15 * 683901;
+    s15  = 0;
+
+    s2  += s14 * 666643;
+    s3  += s14 * 470296;
+    s4  += s14 * 654183;
+    s5  -= s14 * 997805;
+    s6  += s14 * 136657;
+    s7  -= s14 * 683901;
+    s14  = 0;
+
+    s1  += s13 * 666643;
+    s2  += s13 * 470296;
+    s3  += s13 * 654183;
+    s4  -= s13 * 997805;
+    s5  += s13 * 136657;
+    s6  -= s13 * 683901;
+    s13  = 0;
+
+    s0  += s12 * 666643;
+    s1  += s12 * 470296;
+    s2  += s12 * 654183;
+    s3  -= s12 * 997805;
+    s4  += s12 * 136657;
+    s5  -= s12 * 683901;
+    s12  = 0;
+
+    carry0 = (s0 + (1 << 20)) >> 21;
+    s1  += carry0;
+    s0  -= carry0 * (1 << 21);
+    carry2 = (s2 + (1 << 20)) >> 21;
+    s3  += carry2;
+    s2  -= carry2 * (1 << 21);
+    carry4 = (s4 + (1 << 20)) >> 21;
+    s5  += carry4;
+    s4  -= carry4 * (1 << 21);
+    carry6 = (s6 + (1 << 20)) >> 21;
+    s7 += carry6;
+    s6 -= carry6 * (1 << 21);
+    carry8 = (s8 + (1 << 20)) >> 21;
+    s9  += carry8;
+    s8  -= carry8 * (1 << 21);
+    carry10 = (s10 + (1 << 20)) >> 21;
+    s11 += carry10;
+    s10 -= carry10 * (1 << 21);
+
+    carry1 = (s1 + (1 << 20)) >> 21;
+    s2  += carry1;
+    s1  -= carry1 * (1 << 21);
+    carry3 = (s3 + (1 << 20)) >> 21;
+    s4  += carry3;
+    s3  -= carry3 * (1 << 21);
+    carry5 = (s5 + (1 << 20)) >> 21;
+    s6  += carry5;
+    s5  -= carry5 * (1 << 21);
+    carry7 = (s7 + (1 << 20)) >> 21;
+    s8  += carry7;
+    s7  -= carry7 * (1 << 21);
+    carry9 = (s9 + (1 << 20)) >> 21;
+    s10 += carry9;
+    s9  -= carry9 * (1 << 21);
+    carry11 = (s11 + (1 << 20)) >> 21;
+    s12 += carry11;
+    s11 -= carry11 * (1 << 21);
+
+    s0  += s12 * 666643;
+    s1  += s12 * 470296;
+    s2  += s12 * 654183;
+    s3  -= s12 * 997805;
+    s4  += s12 * 136657;
+    s5  -= s12 * 683901;
+    s12  = 0;
+
+    carry0 = s0 >> 21;
+    s1  += carry0;
+    s0  -= carry0 * (1 << 21);
+    carry1 = s1 >> 21;
+    s2  += carry1;
+    s1  -= carry1 * (1 << 21);
+    carry2 = s2 >> 21;
+    s3  += carry2;
+    s2  -= carry2 * (1 << 21);
+    carry3 = s3 >> 21;
+    s4  += carry3;
+    s3  -= carry3 * (1 << 21);
+    carry4 = s4 >> 21;
+    s5  += carry4;
+    s4  -= carry4 * (1 << 21);
+    carry5 = s5 >> 21;
+    s6  += carry5;
+    s5  -= carry5 * (1 << 21);
+    carry6 = s6 >> 21;
+    s7  += carry6;
+    s6  -= carry6 * (1 << 21);
+    carry7 = s7 >> 21;
+    s8  += carry7;
+    s7  -= carry7 * (1 << 21);
+    carry8 = s8 >> 21;
+    s9  += carry8;
+    s8  -= carry8 * (1 << 21);
+    carry9 = s9 >> 21;
+    s10 += carry9;
+    s9  -= carry9 * (1 << 21);
+    carry10 = s10 >> 21;
+    s11 += carry10;
+    s10 -= carry10 * (1 << 21);
+    carry11 = s11 >> 21;
+    s12 += carry11;
+    s11 -= carry11 * (1 << 21);
+
+    s0  += s12 * 666643;
+    s1  += s12 * 470296;
+    s2  += s12 * 654183;
+    s3  -= s12 * 997805;
+    s4  += s12 * 136657;
+    s5  -= s12 * 683901;
+    s12  = 0;
+
+    carry0 = s0 >> 21;
+    s1  += carry0;
+    s0  -= carry0 * (1 << 21);
+    carry1 = s1 >> 21;
+    s2  += carry1;
+    s1  -= carry1 * (1 << 21);
+    carry2 = s2 >> 21;
+    s3  += carry2;
+    s2  -= carry2 * (1 << 21);
+    carry3 = s3 >> 21;
+    s4  += carry3;
+    s3  -= carry3 * (1 << 21);
+    carry4 = s4 >> 21;
+    s5  += carry4;
+    s4  -= carry4 * (1 << 21);
+    carry5 = s5 >> 21;
+    s6  += carry5;
+    s5  -= carry5 * (1 << 21);
+    carry6 = s6 >> 21;
+    s7  += carry6;
+    s6  -= carry6 * (1 << 21);
+    carry7 = s7 >> 21;
+    s8  += carry7;
+    s7  -= carry7 * (1 << 21);
+    carry8 = s8 >> 21;
+    s9  += carry8;
+    s8  -= carry8 * (1 << 21);
+    carry9 = s9 >> 21;
+    s10 += carry9;
+    s9  -= carry9 * (1 << 21);
+    carry10 = s10 >> 21;
+    s11 += carry10;
+    s10 -= carry10 * (1 << 21);
+
+    s[ 0] = (uint8_t) (s0  >>  0);
+    s[ 1] = (uint8_t) (s0  >>  8);
+    s[ 2] = (uint8_t)((s0  >> 16) | (s1  <<  5));
+    s[ 3] = (uint8_t) (s1  >>  3);
+    s[ 4] = (uint8_t) (s1  >> 11);
+    s[ 5] = (uint8_t)((s1  >> 19) | (s2  <<  2));
+    s[ 6] = (uint8_t) (s2  >>  6);
+    s[ 7] = (uint8_t)((s2  >> 14) | (s3  <<  7));
+    s[ 8] = (uint8_t) (s3  >>  1);
+    s[ 9] = (uint8_t) (s3  >>  9);
+    s[10] = (uint8_t)((s3  >> 17) | (s4  <<  4));
+    s[11] = (uint8_t) (s4  >>  4);
+    s[12] = (uint8_t) (s4  >> 12);
+    s[13] = (uint8_t)((s4  >> 20) | (s5  <<  1));
+    s[14] = (uint8_t) (s5  >>  7);
+    s[15] = (uint8_t)((s5  >> 15) | (s6  <<  6));
+    s[16] = (uint8_t) (s6  >>  2);
+    s[17] = (uint8_t) (s6  >> 10);
+    s[18] = (uint8_t)((s6  >> 18) | (s7  <<  3));
+    s[19] = (uint8_t) (s7  >>  5);
+    s[20] = (uint8_t) (s7  >> 13);
+    s[21] = (uint8_t) (s8  >>  0);
+    s[22] = (uint8_t) (s8  >>  8);
+    s[23] = (uint8_t)((s8  >> 16) | (s9  <<  5));
+    s[24] = (uint8_t) (s9  >>  3);
+    s[25] = (uint8_t) (s9  >> 11);
+    s[26] = (uint8_t)((s9  >> 19) | (s10 <<  2));
+    s[27] = (uint8_t) (s10 >>  6);
+    s[28] = (uint8_t)((s10 >> 14) | (s11 <<  7));
+    s[29] = (uint8_t) (s11 >>  1);
+    s[30] = (uint8_t) (s11 >>  9);
+    s[31] = (uint8_t) (s11 >> 17);
+}
+
+/*
+ * Input:
+ *   a[0]+256*a[1]+...+256^31*a[31] = a
+ *   b[0]+256*b[1]+...+256^31*b[31] = b
+ *   c[0]+256*c[1]+...+256^31*c[31] = c
+ *
+ * Output:
+ *   s[0]+256*s[1]+...+256^31*s[31] = (ab+c) mod l
+ *   where l = 2^252 + 27742317777372353535851937790883648493.
+ */
+static void sc_muladd(uint8_t *s, const uint8_t *a, const uint8_t *b,
+                      const uint8_t *c)
+{
+    int64_t a0  = kBottom21Bits &  load_3(a);
+    int64_t a1  = kBottom21Bits & (load_4(a +  2) >> 5);
+    int64_t a2  = kBottom21Bits & (load_3(a +  5) >> 2);
+    int64_t a3  = kBottom21Bits & (load_4(a +  7) >> 7);
+    int64_t a4  = kBottom21Bits & (load_4(a + 10) >> 4);
+    int64_t a5  = kBottom21Bits & (load_3(a + 13) >> 1);
+    int64_t a6  = kBottom21Bits & (load_4(a + 15) >> 6);
+    int64_t a7  = kBottom21Bits & (load_3(a + 18) >> 3);
+    int64_t a8  = kBottom21Bits &  load_3(a + 21);
+    int64_t a9  = kBottom21Bits & (load_4(a + 23) >> 5);
+    int64_t a10 = kBottom21Bits & (load_3(a + 26) >> 2);
+    int64_t a11 =                 (load_4(a + 28) >> 7);
+    int64_t b0  = kBottom21Bits &  load_3(b);
+    int64_t b1  = kBottom21Bits & (load_4(b +  2) >> 5);
+    int64_t b2  = kBottom21Bits & (load_3(b +  5) >> 2);
+    int64_t b3  = kBottom21Bits & (load_4(b +  7) >> 7);
+    int64_t b4  = kBottom21Bits & (load_4(b + 10) >> 4);
+    int64_t b5  = kBottom21Bits & (load_3(b + 13) >> 1);
+    int64_t b6  = kBottom21Bits & (load_4(b + 15) >> 6);
+    int64_t b7  = kBottom21Bits & (load_3(b + 18) >> 3);
+    int64_t b8  = kBottom21Bits &  load_3(b + 21);
+    int64_t b9  = kBottom21Bits & (load_4(b + 23) >> 5);
+    int64_t b10 = kBottom21Bits & (load_3(b + 26) >> 2);
+    int64_t b11 =                 (load_4(b + 28) >> 7);
+    int64_t c0  = kBottom21Bits &  load_3(c);
+    int64_t c1  = kBottom21Bits & (load_4(c +  2) >> 5);
+    int64_t c2  = kBottom21Bits & (load_3(c +  5) >> 2);
+    int64_t c3  = kBottom21Bits & (load_4(c +  7) >> 7);
+    int64_t c4  = kBottom21Bits & (load_4(c + 10) >> 4);
+    int64_t c5  = kBottom21Bits & (load_3(c + 13) >> 1);
+    int64_t c6  = kBottom21Bits & (load_4(c + 15) >> 6);
+    int64_t c7  = kBottom21Bits & (load_3(c + 18) >> 3);
+    int64_t c8  = kBottom21Bits &  load_3(c + 21);
+    int64_t c9  = kBottom21Bits & (load_4(c + 23) >> 5);
+    int64_t c10 = kBottom21Bits & (load_3(c + 26) >> 2);
+    int64_t c11 =                 (load_4(c + 28) >> 7);
+    int64_t s0;
+    int64_t s1;
+    int64_t s2;
+    int64_t s3;
+    int64_t s4;
+    int64_t s5;
+    int64_t s6;
+    int64_t s7;
+    int64_t s8;
+    int64_t s9;
+    int64_t s10;
+    int64_t s11;
+    int64_t s12;
+    int64_t s13;
+    int64_t s14;
+    int64_t s15;
+    int64_t s16;
+    int64_t s17;
+    int64_t s18;
+    int64_t s19;
+    int64_t s20;
+    int64_t s21;
+    int64_t s22;
+    int64_t s23;
+    int64_t carry0;
+    int64_t carry1;
+    int64_t carry2;
+    int64_t carry3;
+    int64_t carry4;
+    int64_t carry5;
+    int64_t carry6;
+    int64_t carry7;
+    int64_t carry8;
+    int64_t carry9;
+    int64_t carry10;
+    int64_t carry11;
+    int64_t carry12;
+    int64_t carry13;
+    int64_t carry14;
+    int64_t carry15;
+    int64_t carry16;
+    int64_t carry17;
+    int64_t carry18;
+    int64_t carry19;
+    int64_t carry20;
+    int64_t carry21;
+    int64_t carry22;
+
+    s0  = c0   +   a0 * b0;
+    s1  = c1   +   a0 * b1   +   a1 * b0;
+    s2  = c2   +   a0 * b2   +   a1 * b1   +   a2 * b0;
+    s3  = c3   +   a0 * b3   +   a1 * b2   +   a2 * b1  +   a3 * b0;
+    s4  = c4   +   a0 * b4   +   a1 * b3   +   a2 * b2  +   a3 * b1  +   a4 * b0;
+    s5  = c5   +   a0 * b5   +   a1 * b4   +   a2 * b3  +   a3 * b2  +   a4 * b1  +   a5 * b0;
+    s6  = c6   +   a0 * b6   +   a1 * b5   +   a2 * b4  +   a3 * b3  +   a4 * b2  +   a5 * b1 +   a6 * b0;
+    s7  = c7   +   a0 * b7   +   a1 * b6   +   a2 * b5  +   a3 * b4  +   a4 * b3  +   a5 * b2 +   a6 * b1   +   a7 * b0;
+    s8  = c8   +   a0 * b8   +   a1 * b7   +   a2 * b6  +   a3 * b5  +   a4 * b4  +   a5 * b3 +   a6 * b2   +   a7 * b1   +   a8 * b0;
+    s9  = c9   +   a0 * b9   +   a1 * b8   +   a2 * b7  +   a3 * b6  +   a4 * b5  +   a5 * b4 +   a6 * b3   +   a7 * b2   +   a8 * b1  +   a9 * b0;
+    s10 = c10  +   a0 * b10  +   a1 * b9   +   a2 * b8  +   a3 * b7  +   a4 * b6  +   a5 * b5 +   a6 * b4   +   a7 * b3   +   a8 * b2  +   a9 * b1  +  a10 * b0;
+    s11 = c11  +   a0 * b11  +   a1 * b10  +   a2 * b9  +   a3 * b8  +   a4 * b7  +   a5 * b6 +   a6 * b5   +   a7 * b4   +   a8 * b3  +   a9 * b2  +  a10 * b1  +  a11 * b0;
+    s12 =          a1 * b11  +   a2 * b10  +   a3 * b9  +   a4 * b8  +   a5 * b7  +   a6 * b6 +   a7 * b5   +   a8 * b4   +   a9 * b3  +  a10 * b2  +  a11 * b1;
+    s13 =          a2 * b11  +   a3 * b10  +   a4 * b9  +   a5 * b8  +   a6 * b7  +   a7 * b6 +   a8 * b5   +   a9 * b4   +  a10 * b3  +  a11 * b2;
+    s14 =          a3 * b11  +   a4 * b10  +   a5 * b9  +   a6 * b8  +   a7 * b7  +   a8 * b6 +   a9 * b5   +  a10 * b4   +  a11 * b3;
+    s15 =          a4 * b11  +   a5 * b10  +   a6 * b9  +   a7 * b8  +   a8 * b7  +   a9 * b6 +  a10 * b5   +  a11 * b4;
+    s16 =          a5 * b11  +   a6 * b10  +   a7 * b9  +   a8 * b8  +   a9 * b7  +  a10 * b6 +  a11 * b5;
+    s17 =          a6 * b11  +   a7 * b10  +   a8 * b9  +   a9 * b8  +  a10 * b7  +  a11 * b6;
+    s18 =          a7 * b11  +   a8 * b10  +   a9 * b9  +  a10 * b8  +  a11 * b7;
+    s19 =          a8 * b11  +   a9 * b10  +  a10 * b9  +  a11 * b8;
+    s20 =          a9 * b11  +  a10 * b10  +  a11 * b9;
+    s21 =         a10 * b11  +  a11 * b10;
+    s22 =         a11 * b11;
+    s23 =         0;
+
+    carry0 = (s0 + (1 << 20)) >> 21;
+    s1  += carry0;
+    s0  -= carry0 * (1 << 21);
+    carry2 = (s2 + (1 << 20)) >> 21;
+    s3  += carry2;
+    s2  -= carry2 * (1 << 21);
+    carry4 = (s4 + (1 << 20)) >> 21;
+    s5  += carry4;
+    s4  -= carry4 * (1 << 21);
+    carry6 = (s6 + (1 << 20)) >> 21;
+    s7  += carry6;
+    s6  -= carry6 * (1 << 21);
+    carry8 = (s8 + (1 << 20)) >> 21;
+    s9  += carry8;
+    s8  -= carry8 * (1 << 21);
+    carry10 = (s10 + (1 << 20)) >> 21;
+    s11 += carry10;
+    s10 -= carry10 * (1 << 21);
+    carry12 = (s12 + (1 << 20)) >> 21;
+    s13 += carry12;
+    s12 -= carry12 * (1 << 21);
+    carry14 = (s14 + (1 << 20)) >> 21;
+    s15 += carry14;
+    s14 -= carry14 * (1 << 21);
+    carry16 = (s16 + (1 << 20)) >> 21;
+    s17 += carry16;
+    s16 -= carry16 * (1 << 21);
+    carry18 = (s18 + (1 << 20)) >> 21;
+    s19 += carry18;
+    s18 -= carry18 * (1 << 21);
+    carry20 = (s20 + (1 << 20)) >> 21;
+    s21 += carry20;
+    s20 -= carry20 * (1 << 21);
+    carry22 = (s22 + (1 << 20)) >> 21;
+    s23 += carry22;
+    s22 -= carry22 * (1 << 21);
+
+    carry1 = (s1 + (1 << 20)) >> 21;
+    s2  += carry1;
+    s1  -= carry1 * (1 << 21);
+    carry3 = (s3 + (1 << 20)) >> 21;
+    s4  += carry3;
+    s3  -= carry3 * (1 << 21);
+    carry5 = (s5 + (1 << 20)) >> 21;
+    s6  += carry5;
+    s5  -= carry5 * (1 << 21);
+    carry7 = (s7 + (1 << 20)) >> 21;
+    s8  += carry7;
+    s7  -= carry7 * (1 << 21);
+    carry9 = (s9 + (1 << 20)) >> 21;
+    s10 += carry9;
+    s9  -= carry9 * (1 << 21);
+    carry11 = (s11 + (1 << 20)) >> 21;
+    s12 += carry11;
+    s11 -= carry11 * (1 << 21);
+    carry13 = (s13 + (1 << 20)) >> 21;
+    s14 += carry13;
+    s13 -= carry13 * (1 << 21);
+    carry15 = (s15 + (1 << 20)) >> 21;
+    s16 += carry15;
+    s15 -= carry15 * (1 << 21);
+    carry17 = (s17 + (1 << 20)) >> 21;
+    s18 += carry17;
+    s17 -= carry17 * (1 << 21);
+    carry19 = (s19 + (1 << 20)) >> 21;
+    s20 += carry19;
+    s19 -= carry19 * (1 << 21);
+    carry21 = (s21 + (1 << 20)) >> 21;
+    s22 += carry21;
+    s21 -= carry21 * (1 << 21);
+
+    s11 += s23 * 666643;
+    s12 += s23 * 470296;
+    s13 += s23 * 654183;
+    s14 -= s23 * 997805;
+    s15 += s23 * 136657;
+    s16 -= s23 * 683901;
+    s23  = 0;
+
+    s10 += s22 * 666643;
+    s11 += s22 * 470296;
+    s12 += s22 * 654183;
+    s13 -= s22 * 997805;
+    s14 += s22 * 136657;
+    s15 -= s22 * 683901;
+    s22  = 0;
+
+    s9  += s21 * 666643;
+    s10 += s21 * 470296;
+    s11 += s21 * 654183;
+    s12 -= s21 * 997805;
+    s13 += s21 * 136657;
+    s14 -= s21 * 683901;
+    s21  = 0;
+
+    s8  += s20 * 666643;
+    s9  += s20 * 470296;
+    s10 += s20 * 654183;
+    s11 -= s20 * 997805;
+    s12 += s20 * 136657;
+    s13 -= s20 * 683901;
+    s20  = 0;
+
+    s7  += s19 * 666643;
+    s8  += s19 * 470296;
+    s9  += s19 * 654183;
+    s10 -= s19 * 997805;
+    s11 += s19 * 136657;
+    s12 -= s19 * 683901;
+    s19  = 0;
+
+    s6  += s18 * 666643;
+    s7  += s18 * 470296;
+    s8  += s18 * 654183;
+    s9  -= s18 * 997805;
+    s10 += s18 * 136657;
+    s11 -= s18 * 683901;
+    s18  = 0;
+
+    carry6 = (s6 + (1 << 20)) >> 21;
+    s7  += carry6;
+    s6  -= carry6 * (1 << 21);
+    carry8 = (s8 + (1 << 20)) >> 21;
+    s9  += carry8;
+    s8  -= carry8 * (1 << 21);
+    carry10 = (s10 + (1 << 20)) >> 21;
+    s11 += carry10;
+    s10 -= carry10 * (1 << 21);
+    carry12 = (s12 + (1 << 20)) >> 21;
+    s13 += carry12;
+    s12 -= carry12 * (1 << 21);
+    carry14 = (s14 + (1 << 20)) >> 21;
+    s15 += carry14;
+    s14 -= carry14 * (1 << 21);
+    carry16 = (s16 + (1 << 20)) >> 21;
+    s17 += carry16;
+    s16 -= carry16 * (1 << 21);
+
+    carry7 = (s7 + (1 << 20)) >> 21;
+    s8  += carry7;
+    s7  -= carry7 * (1 << 21);
+    carry9 = (s9 + (1 << 20)) >> 21;
+    s10 += carry9;
+    s9  -= carry9 * (1 << 21);
+    carry11 = (s11 + (1 << 20)) >> 21;
+    s12 += carry11;
+    s11 -= carry11 * (1 << 21);
+    carry13 = (s13 + (1 << 20)) >> 21;
+    s14 += carry13;
+    s13 -= carry13 * (1 << 21);
+    carry15 = (s15 + (1 << 20)) >> 21;
+    s16 += carry15;
+    s15 -= carry15 * (1 << 21);
+
+    s5  += s17 * 666643;
+    s6  += s17 * 470296;
+    s7  += s17 * 654183;
+    s8  -= s17 * 997805;
+    s9  += s17 * 136657;
+    s10 -= s17 * 683901;
+    s17  = 0;
+
+    s4  += s16 * 666643;
+    s5  += s16 * 470296;
+    s6  += s16 * 654183;
+    s7  -= s16 * 997805;
+    s8  += s16 * 136657;
+    s9  -= s16 * 683901;
+    s16  = 0;
+
+    s3  += s15 * 666643;
+    s4  += s15 * 470296;
+    s5  += s15 * 654183;
+    s6  -= s15 * 997805;
+    s7  += s15 * 136657;
+    s8  -= s15 * 683901;
+    s15  = 0;
+
+    s2  += s14 * 666643;
+    s3  += s14 * 470296;
+    s4  += s14 * 654183;
+    s5  -= s14 * 997805;
+    s6  += s14 * 136657;
+    s7  -= s14 * 683901;
+    s14  = 0;
+
+    s1  += s13 * 666643;
+    s2  += s13 * 470296;
+    s3  += s13 * 654183;
+    s4  -= s13 * 997805;
+    s5  += s13 * 136657;
+    s6  -= s13 * 683901;
+    s13  = 0;
+
+    s0  += s12 * 666643;
+    s1  += s12 * 470296;
+    s2  += s12 * 654183;
+    s3  -= s12 * 997805;
+    s4  += s12 * 136657;
+    s5  -= s12 * 683901;
+    s12 = 0;
+
+    carry0 = (s0 + (1 << 20)) >> 21;
+    s1  += carry0;
+    s0  -= carry0 * (1 << 21);
+    carry2 = (s2 + (1 << 20)) >> 21;
+    s3  += carry2;
+    s2  -= carry2 * (1 << 21);
+    carry4 = (s4 + (1 << 20)) >> 21;
+    s5  += carry4;
+    s4  -= carry4 * (1 << 21);
+    carry6 = (s6 + (1 << 20)) >> 21;
+    s7  += carry6;
+    s6  -= carry6 * (1 << 21);
+    carry8 = (s8 + (1 << 20)) >> 21;
+    s9  += carry8;
+    s8  -= carry8 * (1 << 21);
+    carry10 = (s10 + (1 << 20)) >> 21;
+    s11 += carry10;
+    s10 -= carry10 * (1 << 21);
+
+    carry1 = (s1 + (1 << 20)) >> 21;
+    s2  += carry1;
+    s1  -= carry1 * (1 << 21);
+    carry3 = (s3 + (1 << 20)) >> 21;
+    s4  += carry3;
+    s3  -= carry3 * (1 << 21);
+    carry5 = (s5 + (1 << 20)) >> 21;
+    s6  += carry5;
+    s5  -= carry5 * (1 << 21);
+    carry7 = (s7 + (1 << 20)) >> 21;
+    s8  += carry7;
+    s7  -= carry7 * (1 << 21);
+    carry9 = (s9 + (1 << 20)) >> 21;
+    s10 += carry9;
+    s9  -= carry9 * (1 << 21);
+    carry11 = (s11 + (1 << 20)) >> 21;
+    s12 += carry11;
+    s11 -= carry11 * (1 << 21);
+
+    s0  += s12 * 666643;
+    s1  += s12 * 470296;
+    s2  += s12 * 654183;
+    s3  -= s12 * 997805;
+    s4  += s12 * 136657;
+    s5  -= s12 * 683901;
+    s12  = 0;
+
+    carry0 = s0 >> 21;
+    s1  += carry0;
+    s0  -= carry0 * (1 << 21);
+    carry1 = s1 >> 21;
+    s2  += carry1;
+    s1  -= carry1 * (1 << 21);
+    carry2 = s2 >> 21;
+    s3  += carry2;
+    s2  -= carry2 * (1 << 21);
+    carry3 = s3 >> 21;
+    s4  += carry3;
+    s3  -= carry3 * (1 << 21);
+    carry4 = s4 >> 21;
+    s5  += carry4;
+    s4  -= carry4 * (1 << 21);
+    carry5 = s5 >> 21;
+    s6  += carry5;
+    s5  -= carry5 * (1 << 21);
+    carry6 = s6 >> 21;
+    s7  += carry6;
+    s6  -= carry6 * (1 << 21);
+    carry7 = s7 >> 21;
+    s8  += carry7;
+    s7  -= carry7 * (1 << 21);
+    carry8 = s8 >> 21;
+    s9  += carry8;
+    s8  -= carry8 * (1 << 21);
+    carry9 = s9 >> 21;
+    s10 += carry9;
+    s9  -= carry9 * (1 << 21);
+    carry10 = s10 >> 21;
+    s11 += carry10;
+    s10 -= carry10 * (1 << 21);
+    carry11 = s11 >> 21;
+    s12 += carry11;
+    s11 -= carry11 * (1 << 21);
+
+    s0  += s12 * 666643;
+    s1  += s12 * 470296;
+    s2  += s12 * 654183;
+    s3  -= s12 * 997805;
+    s4  += s12 * 136657;
+    s5  -= s12 * 683901;
+    s12  = 0;
+
+    carry0 = s0 >> 21;
+    s1  += carry0;
+    s0  -= carry0 * (1 << 21);
+    carry1 = s1 >> 21;
+    s2  += carry1;
+    s1  -= carry1 * (1 << 21);
+    carry2 = s2 >> 21;
+    s3  += carry2;
+    s2  -= carry2 * (1 << 21);
+    carry3 = s3 >> 21;
+    s4  += carry3;
+    s3  -= carry3 * (1 << 21);
+    carry4 = s4 >> 21;
+    s5  += carry4;
+    s4  -= carry4 * (1 << 21);
+    carry5 = s5 >> 21;
+    s6  += carry5;
+    s5  -= carry5 * (1 << 21);
+    carry6 = s6 >> 21;
+    s7  += carry6;
+    s6  -= carry6 * (1 << 21);
+    carry7 = s7 >> 21;
+    s8  += carry7;
+    s7  -= carry7 * (1 << 21);
+    carry8 = s8 >> 21;
+    s9  += carry8;
+    s8  -= carry8 * (1 << 21);
+    carry9 = s9 >> 21;
+    s10 += carry9;
+    s9  -= carry9 * (1 << 21);
+    carry10 = s10 >> 21;
+    s11 += carry10;
+    s10 -= carry10 * (1 << 21);
+
+    s[ 0] = (uint8_t) (s0  >>  0);
+    s[ 1] = (uint8_t) (s0  >>  8);
+    s[ 2] = (uint8_t)((s0  >> 16) | (s1 << 5));
+    s[ 3] = (uint8_t) (s1  >>  3);
+    s[ 4] = (uint8_t) (s1  >> 11);
+    s[ 5] = (uint8_t)((s1  >> 19) | (s2 << 2));
+    s[ 6] = (uint8_t) (s2  >>  6);
+    s[ 7] = (uint8_t)((s2  >> 14) | (s3 << 7));
+    s[ 8] = (uint8_t) (s3  >>  1);
+    s[ 9] = (uint8_t) (s3  >>  9);
+    s[10] = (uint8_t)((s3  >> 17) | (s4 << 4));
+    s[11] = (uint8_t) (s4  >>  4);
+    s[12] = (uint8_t) (s4  >> 12);
+    s[13] = (uint8_t)((s4  >> 20) | (s5 << 1));
+    s[14] = (uint8_t) (s5  >>  7);
+    s[15] = (uint8_t)((s5  >> 15) | (s6 << 6));
+    s[16] = (uint8_t) (s6  >>  2);
+    s[17] = (uint8_t) (s6  >> 10);
+    s[18] = (uint8_t)((s6  >> 18) | (s7 << 3));
+    s[19] = (uint8_t) (s7  >>  5);
+    s[20] = (uint8_t) (s7  >> 13);
+    s[21] = (uint8_t) (s8  >>  0);
+    s[22] = (uint8_t) (s8  >>  8);
+    s[23] = (uint8_t)((s8  >> 16) | (s9 << 5));
+    s[24] = (uint8_t) (s9  >>  3);
+    s[25] = (uint8_t) (s9  >> 11);
+    s[26] = (uint8_t)((s9  >> 19) | (s10 << 2));
+    s[27] = (uint8_t) (s10 >>  6);
+    s[28] = (uint8_t)((s10 >> 14) | (s11 << 7));
+    s[29] = (uint8_t) (s11 >>  1);
+    s[30] = (uint8_t) (s11 >>  9);
+    s[31] = (uint8_t) (s11 >> 17);
+}
+
+int ED25519_sign(uint8_t *out_sig, const uint8_t *message, size_t message_len,
+                 const uint8_t public_key[32], const uint8_t private_key[32])
+{
+    uint8_t az[SHA512_DIGEST_LENGTH];
+    uint8_t nonce[SHA512_DIGEST_LENGTH];
+    ge_p3 R;
+    uint8_t hram[SHA512_DIGEST_LENGTH];
+    SHA512_CTX hash_ctx;
+
+    SHA512_Init(&hash_ctx);
+    SHA512_Update(&hash_ctx, private_key, 32);
+    SHA512_Final(az, &hash_ctx);
+
+    az[0] &= 248;
+    az[31] &= 63;
+    az[31] |= 64;
+
+    SHA512_Init(&hash_ctx);
+    SHA512_Update(&hash_ctx, az + 32, 32);
+    SHA512_Update(&hash_ctx, message, message_len);
+    SHA512_Final(nonce, &hash_ctx);
+
+    x25519_sc_reduce(nonce);
+    ge_scalarmult_base(&R, nonce);
+    ge_p3_tobytes(out_sig, &R);
+
+    SHA512_Init(&hash_ctx);
+    SHA512_Update(&hash_ctx, out_sig, 32);
+    SHA512_Update(&hash_ctx, public_key, 32);
+    SHA512_Update(&hash_ctx, message, message_len);
+    SHA512_Final(hram, &hash_ctx);
+
+    x25519_sc_reduce(hram);
+    sc_muladd(out_sig + 32, hram, az, nonce);
+
+    OPENSSL_cleanse(&hash_ctx, sizeof(hash_ctx));
+    OPENSSL_cleanse(nonce, sizeof(nonce));
+    OPENSSL_cleanse(az, sizeof(az));
+
+    return 1;
+}
+
+static const char allzeroes[15];
+
+int ED25519_verify(const uint8_t *message, size_t message_len,
+                   const uint8_t signature[64], const uint8_t public_key[32])
+{
+    int i;
+    ge_p3 A;
+    const uint8_t *r, *s;
+    SHA512_CTX hash_ctx;
+    ge_p2 R;
+    uint8_t rcheck[32];
+    uint8_t h[SHA512_DIGEST_LENGTH];
+    /* 27742317777372353535851937790883648493 in little endian format */
+    const uint8_t l_low[16] = {
+        0xED, 0xD3, 0xF5, 0x5C, 0x1A, 0x63, 0x12, 0x58, 0xD6, 0x9C, 0xF7, 0xA2,
+        0xDE, 0xF9, 0xDE, 0x14
+    };
+
+    r = signature;
+    s = signature + 32;
+
+    /*
+     * Check 0 <= s < L where L = 2^252 + 27742317777372353535851937790883648493
+     *
+     * If not the signature is publicly invalid. Since it's public we can do the
+     * check in variable time.
+     *
+     * First check the most significant byte
+     */
+    if (s[31] > 0x10)
+        return 0;
+    if (s[31] == 0x10) {
+        /*
+         * Most significant byte indicates a value close to 2^252 so check the
+         * rest
+         */
+        if (memcmp(s + 16, allzeroes, sizeof(allzeroes)) != 0)
+            return 0;
+        for (i = 15; i >= 0; i--) {
+            if (s[i] < l_low[i])
+                break;
+            if (s[i] > l_low[i])
+                return 0;
+        }
+        if (i < 0)
+            return 0;
+    }
+
+    if (ge_frombytes_vartime(&A, public_key) != 0) {
+        return 0;
+    }
+
+    fe_neg(A.X, A.X);
+    fe_neg(A.T, A.T);
+
+    SHA512_Init(&hash_ctx);
+    SHA512_Update(&hash_ctx, r, 32);
+    SHA512_Update(&hash_ctx, public_key, 32);
+    SHA512_Update(&hash_ctx, message, message_len);
+    SHA512_Final(h, &hash_ctx);
+
+    x25519_sc_reduce(h);
+
+    ge_double_scalarmult_vartime(&R, h, &A, s);
+
+    ge_tobytes(rcheck, &R);
+
+    return CRYPTO_memcmp(rcheck, r, sizeof(rcheck)) == 0;
+}
+
+void ED25519_public_from_private(uint8_t out_public_key[32],
+                                 const uint8_t private_key[32])
+{
+    uint8_t az[SHA512_DIGEST_LENGTH];
+    ge_p3 A;
+
+    SHA512(private_key, 32, az);
+
+    az[0] &= 248;
+    az[31] &= 63;
+    az[31] |= 64;
+
+    ge_scalarmult_base(&A, az);
+    ge_p3_tobytes(out_public_key, &A);
+
+    OPENSSL_cleanse(az, sizeof(az));
+}
+
+int X25519(uint8_t out_shared_key[32], const uint8_t private_key[32],
+           const uint8_t peer_public_value[32])
+{
+    static const uint8_t kZeros[32] = {0};
+    x25519_scalar_mult(out_shared_key, private_key, peer_public_value);
+    /* The all-zero output results when the input is a point of small order. */
+    return CRYPTO_memcmp(kZeros, out_shared_key, 32) != 0;
+}
+
+void X25519_public_from_private(uint8_t out_public_value[32],
+                                const uint8_t private_key[32])
+{
+    uint8_t e[32];
+    ge_p3 A;
+    fe zplusy, zminusy, zminusy_inv;
+
+    memcpy(e, private_key, 32);
+    e[0] &= 248;
+    e[31] &= 127;
+    e[31] |= 64;
+
+    ge_scalarmult_base(&A, e);
+
+    /*
+     * We only need the u-coordinate of the curve25519 point.
+     * The map is u=(y+1)/(1-y). Since y=Y/Z, this gives
+     * u=(Z+Y)/(Z-Y).
+     */
+    fe_add(zplusy, A.Z, A.Y);
+    fe_sub(zminusy, A.Z, A.Y);
+    fe_invert(zminusy_inv, zminusy);
+    fe_mul(zplusy, zplusy, zminusy_inv);
+    fe_tobytes(out_public_value, zplusy);
+
+    OPENSSL_cleanse(e, sizeof(e));
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/arch_32/arch_intrinsics.h b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/arch_32/arch_intrinsics.h
new file mode 100644
index 000000000..48081c771
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/arch_32/arch_intrinsics.h
@@ -0,0 +1,27 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+
+#ifndef HEADER_ARCH_32_ARCH_INTRINSICS_H
+# define HEADER_ARCH_32_ARCH_INTRINSICS_H
+
+#include "internal/constant_time_locl.h"
+
+# define ARCH_WORD_BITS 32
+
+#define word_is_zero(a)     constant_time_is_zero_32(a)
+
+static ossl_inline uint64_t widemul(uint32_t a, uint32_t b)
+{
+    return ((uint64_t)a) * b;
+}
+
+#endif                          /* HEADER_ARCH_32_ARCH_INTRINSICS_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/arch_32/f_impl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/arch_32/f_impl.c
new file mode 100644
index 000000000..8a89d276e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/arch_32/f_impl.c
@@ -0,0 +1,95 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2014 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+
+#include "field.h"
+
+void gf_mul(gf_s * RESTRICT cs, const gf as, const gf bs)
+{
+    const uint32_t *a = as->limb, *b = bs->limb;
+    uint32_t *c = cs->limb;
+    uint64_t accum0 = 0, accum1 = 0, accum2 = 0;
+    uint32_t mask = (1 << 28) - 1;
+    uint32_t aa[8], bb[8];
+    int i, j;
+
+    for (i = 0; i < 8; i++) {
+        aa[i] = a[i] + a[i + 8];
+        bb[i] = b[i] + b[i + 8];
+    }
+
+    for (j = 0; j < 8; j++) {
+        accum2 = 0;
+        for (i = 0; i < j + 1; i++) {
+            accum2 += widemul(a[j - i], b[i]);
+            accum1 += widemul(aa[j - i], bb[i]);
+            accum0 += widemul(a[8 + j - i], b[8 + i]);
+        }
+        accum1 -= accum2;
+        accum0 += accum2;
+        accum2 = 0;
+        for (i = j + 1; i < 8; i++) {
+            accum0 -= widemul(a[8 + j - i], b[i]);
+            accum2 += widemul(aa[8 + j - i], bb[i]);
+            accum1 += widemul(a[16 + j - i], b[8 + i]);
+        }
+        accum1 += accum2;
+        accum0 += accum2;
+        c[j] = ((uint32_t)(accum0)) & mask;
+        c[j + 8] = ((uint32_t)(accum1)) & mask;
+        accum0 >>= 28;
+        accum1 >>= 28;
+    }
+
+    accum0 += accum1;
+    accum0 += c[8];
+    accum1 += c[0];
+    c[8] = ((uint32_t)(accum0)) & mask;
+    c[0] = ((uint32_t)(accum1)) & mask;
+
+    accum0 >>= 28;
+    accum1 >>= 28;
+    c[9] += ((uint32_t)(accum0));
+    c[1] += ((uint32_t)(accum1));
+}
+
+void gf_mulw_unsigned(gf_s * RESTRICT cs, const gf as, uint32_t b)
+{
+    const uint32_t *a = as->limb;
+    uint32_t *c = cs->limb;
+    uint64_t accum0 = 0, accum8 = 0;
+    uint32_t mask = (1 << 28) - 1;
+    int i;
+
+    assert(b <= mask);
+
+    for (i = 0; i < 8; i++) {
+        accum0 += widemul(b, a[i]);
+        accum8 += widemul(b, a[i + 8]);
+        c[i] = accum0 & mask;
+        accum0 >>= 28;
+        c[i + 8] = accum8 & mask;
+        accum8 >>= 28;
+    }
+
+    accum0 += accum8 + c[8];
+    c[8] = ((uint32_t)accum0) & mask;
+    c[9] += (uint32_t)(accum0 >> 28);
+
+    accum8 += c[0];
+    c[0] = ((uint32_t)accum8) & mask;
+    c[1] += (uint32_t)(accum8 >> 28);
+}
+
+void gf_sqr(gf_s * RESTRICT cs, const gf as)
+{
+    gf_mul(cs, as, as);         /* Performs better with a dedicated square */
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/arch_32/f_impl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/arch_32/f_impl.h
new file mode 100644
index 000000000..bbde84a03
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/arch_32/f_impl.h
@@ -0,0 +1,60 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2014-2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+
+#ifndef HEADER_ARCH_32_F_IMPL_H
+# define HEADER_ARCH_32_F_IMPL_H
+
+# define GF_HEADROOM 2
+# define LIMB(x) ((x) & ((1 << 28) - 1)), ((x) >> 28)
+# define FIELD_LITERAL(a, b, c, d, e, f, g, h) \
+    {{LIMB(a), LIMB(b), LIMB(c), LIMB(d), LIMB(e), LIMB(f), LIMB(g), LIMB(h)}}
+
+# define LIMB_PLACE_VALUE(i) 28
+
+void gf_add_RAW(gf out, const gf a, const gf b)
+{
+    unsigned int i;
+
+    for (i = 0; i < NLIMBS; i++)
+        out->limb[i] = a->limb[i] + b->limb[i];
+}
+
+void gf_sub_RAW(gf out, const gf a, const gf b)
+{
+    unsigned int i;
+
+    for (i = 0; i < NLIMBS; i++)
+        out->limb[i] = a->limb[i] - b->limb[i];
+}
+
+void gf_bias(gf a, int amt)
+{
+    unsigned int i;
+    uint32_t co1 = ((1 << 28) - 1) * amt, co2 = co1 - amt;
+
+    for (i = 0; i < NLIMBS; i++)
+        a->limb[i] += (i == NLIMBS / 2) ? co2 : co1;
+}
+
+void gf_weak_reduce(gf a)
+{
+    uint32_t mask = (1 << 28) - 1;
+    uint32_t tmp = a->limb[NLIMBS - 1] >> 28;
+    unsigned int i;
+
+    a->limb[NLIMBS / 2] += tmp;
+    for (i = NLIMBS - 1; i > 0; i--)
+        a->limb[i] = (a->limb[i] & mask) + (a->limb[i - 1] >> 28);
+    a->limb[0] = (a->limb[0] & mask) + tmp;
+}
+
+#endif                  /* HEADER_ARCH_32_F_IMPL_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/curve448.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/curve448.c
new file mode 100644
index 000000000..7dc68c885
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/curve448.c
@@ -0,0 +1,727 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+#include <openssl/crypto.h>
+#include "word.h"
+#include "field.h"
+
+#include "point_448.h"
+#include "ed448.h"
+#include "curve448_lcl.h"
+
+#define COFACTOR 4
+
+#define C448_WNAF_FIXED_TABLE_BITS 5
+#define C448_WNAF_VAR_TABLE_BITS 3
+
+#define EDWARDS_D       (-39081)
+
+static const curve448_scalar_t precomputed_scalarmul_adjustment = {
+    {
+        {
+            SC_LIMB(0xc873d6d54a7bb0cf), SC_LIMB(0xe933d8d723a70aad),
+            SC_LIMB(0xbb124b65129c96fd), SC_LIMB(0x00000008335dc163)
+        }
+    }
+};
+
+#define TWISTED_D (EDWARDS_D - 1)
+
+#define WBITS C448_WORD_BITS   /* NB this may be different from ARCH_WORD_BITS */
+
+/* Inverse. */
+static void gf_invert(gf y, const gf x, int assert_nonzero)
+{
+    mask_t ret;
+    gf t1, t2;
+
+    gf_sqr(t1, x);              /* o^2 */
+    ret = gf_isr(t2, t1);       /* +-1/sqrt(o^2) = +-1/o */
+    (void)ret;
+    if (assert_nonzero)
+        assert(ret);
+    gf_sqr(t1, t2);
+    gf_mul(t2, t1, x);          /* not direct to y in case of alias. */
+    gf_copy(y, t2);
+}
+
+/** identity = (0,1) */
+const curve448_point_t curve448_point_identity =
+    { {{{{0}}}, {{{1}}}, {{{1}}}, {{{0}}}} };
+
+static void point_double_internal(curve448_point_t p, const curve448_point_t q,
+                                  int before_double)
+{
+    gf a, b, c, d;
+
+    gf_sqr(c, q->x);
+    gf_sqr(a, q->y);
+    gf_add_nr(d, c, a);         /* 2+e */
+    gf_add_nr(p->t, q->y, q->x); /* 2+e */
+    gf_sqr(b, p->t);
+    gf_subx_nr(b, b, d, 3);     /* 4+e */
+    gf_sub_nr(p->t, a, c);      /* 3+e */
+    gf_sqr(p->x, q->z);
+    gf_add_nr(p->z, p->x, p->x); /* 2+e */
+    gf_subx_nr(a, p->z, p->t, 4); /* 6+e */
+    if (GF_HEADROOM == 5)
+        gf_weak_reduce(a);      /* or 1+e */
+    gf_mul(p->x, a, b);
+    gf_mul(p->z, p->t, a);
+    gf_mul(p->y, p->t, d);
+    if (!before_double)
+        gf_mul(p->t, b, d);
+}
+
+void curve448_point_double(curve448_point_t p, const curve448_point_t q)
+{
+    point_double_internal(p, q, 0);
+}
+
+/* Operations on [p]niels */
+static ossl_inline void cond_neg_niels(niels_t n, mask_t neg)
+{
+    gf_cond_swap(n->a, n->b, neg);
+    gf_cond_neg(n->c, neg);
+}
+
+static void pt_to_pniels(pniels_t b, const curve448_point_t a)
+{
+    gf_sub(b->n->a, a->y, a->x);
+    gf_add(b->n->b, a->x, a->y);
+    gf_mulw(b->n->c, a->t, 2 * TWISTED_D);
+    gf_add(b->z, a->z, a->z);
+}
+
+static void pniels_to_pt(curve448_point_t e, const pniels_t d)
+{
+    gf eu;
+
+    gf_add(eu, d->n->b, d->n->a);
+    gf_sub(e->y, d->n->b, d->n->a);
+    gf_mul(e->t, e->y, eu);
+    gf_mul(e->x, d->z, e->y);
+    gf_mul(e->y, d->z, eu);
+    gf_sqr(e->z, d->z);
+}
+
+static void niels_to_pt(curve448_point_t e, const niels_t n)
+{
+    gf_add(e->y, n->b, n->a);
+    gf_sub(e->x, n->b, n->a);
+    gf_mul(e->t, e->y, e->x);
+    gf_copy(e->z, ONE);
+}
+
+static void add_niels_to_pt(curve448_point_t d, const niels_t e,
+                            int before_double)
+{
+    gf a, b, c;
+
+    gf_sub_nr(b, d->y, d->x);   /* 3+e */
+    gf_mul(a, e->a, b);
+    gf_add_nr(b, d->x, d->y);   /* 2+e */
+    gf_mul(d->y, e->b, b);
+    gf_mul(d->x, e->c, d->t);
+    gf_add_nr(c, a, d->y);      /* 2+e */
+    gf_sub_nr(b, d->y, a);      /* 3+e */
+    gf_sub_nr(d->y, d->z, d->x); /* 3+e */
+    gf_add_nr(a, d->x, d->z);   /* 2+e */
+    gf_mul(d->z, a, d->y);
+    gf_mul(d->x, d->y, b);
+    gf_mul(d->y, a, c);
+    if (!before_double)
+        gf_mul(d->t, b, c);
+}
+
+static void sub_niels_from_pt(curve448_point_t d, const niels_t e,
+                              int before_double)
+{
+    gf a, b, c;
+
+    gf_sub_nr(b, d->y, d->x);   /* 3+e */
+    gf_mul(a, e->b, b);
+    gf_add_nr(b, d->x, d->y);   /* 2+e */
+    gf_mul(d->y, e->a, b);
+    gf_mul(d->x, e->c, d->t);
+    gf_add_nr(c, a, d->y);      /* 2+e */
+    gf_sub_nr(b, d->y, a);      /* 3+e */
+    gf_add_nr(d->y, d->z, d->x); /* 2+e */
+    gf_sub_nr(a, d->z, d->x);   /* 3+e */
+    gf_mul(d->z, a, d->y);
+    gf_mul(d->x, d->y, b);
+    gf_mul(d->y, a, c);
+    if (!before_double)
+        gf_mul(d->t, b, c);
+}
+
+static void add_pniels_to_pt(curve448_point_t p, const pniels_t pn,
+                             int before_double)
+{
+    gf L0;
+
+    gf_mul(L0, p->z, pn->z);
+    gf_copy(p->z, L0);
+    add_niels_to_pt(p, pn->n, before_double);
+}
+
+static void sub_pniels_from_pt(curve448_point_t p, const pniels_t pn,
+                               int before_double)
+{
+    gf L0;
+
+    gf_mul(L0, p->z, pn->z);
+    gf_copy(p->z, L0);
+    sub_niels_from_pt(p, pn->n, before_double);
+}
+
+c448_bool_t curve448_point_eq(const curve448_point_t p,
+                              const curve448_point_t q)
+{
+    mask_t succ;
+    gf a, b;
+
+    /* equality mod 2-torsion compares x/y */
+    gf_mul(a, p->y, q->x);
+    gf_mul(b, q->y, p->x);
+    succ = gf_eq(a, b);
+
+    return mask_to_bool(succ);
+}
+
+c448_bool_t curve448_point_valid(const curve448_point_t p)
+{
+    mask_t out;
+    gf a, b, c;
+
+    gf_mul(a, p->x, p->y);
+    gf_mul(b, p->z, p->t);
+    out = gf_eq(a, b);
+    gf_sqr(a, p->x);
+    gf_sqr(b, p->y);
+    gf_sub(a, b, a);
+    gf_sqr(b, p->t);
+    gf_mulw(c, b, TWISTED_D);
+    gf_sqr(b, p->z);
+    gf_add(b, b, c);
+    out &= gf_eq(a, b);
+    out &= ~gf_eq(p->z, ZERO);
+    return mask_to_bool(out);
+}
+
+static ossl_inline void constant_time_lookup_niels(niels_s * RESTRICT ni,
+                                                   const niels_t * table,
+                                                   int nelts, int idx)
+{
+    constant_time_lookup(ni, table, sizeof(niels_s), nelts, idx);
+}
+
+void curve448_precomputed_scalarmul(curve448_point_t out,
+                                    const curve448_precomputed_s * table,
+                                    const curve448_scalar_t scalar)
+{
+    unsigned int i, j, k;
+    const unsigned int n = COMBS_N, t = COMBS_T, s = COMBS_S;
+    niels_t ni;
+    curve448_scalar_t scalar1x;
+
+    curve448_scalar_add(scalar1x, scalar, precomputed_scalarmul_adjustment);
+    curve448_scalar_halve(scalar1x, scalar1x);
+
+    for (i = s; i > 0; i--) {
+        if (i != s)
+            point_double_internal(out, out, 0);
+
+        for (j = 0; j < n; j++) {
+            int tab = 0;
+            mask_t invert;
+
+            for (k = 0; k < t; k++) {
+                unsigned int bit = (i - 1) + s * (k + j * t);
+
+                if (bit < C448_SCALAR_BITS)
+                    tab |=
+                        (scalar1x->limb[bit / WBITS] >> (bit % WBITS) & 1) << k;
+            }
+
+            invert = (tab >> (t - 1)) - 1;
+            tab ^= invert;
+            tab &= (1 << (t - 1)) - 1;
+
+            constant_time_lookup_niels(ni, &table->table[j << (t - 1)],
+                                       1 << (t - 1), tab);
+
+            cond_neg_niels(ni, invert);
+            if ((i != s) || j != 0)
+                add_niels_to_pt(out, ni, j == n - 1 && i != 1);
+            else
+                niels_to_pt(out, ni);
+        }
+    }
+
+    OPENSSL_cleanse(ni, sizeof(ni));
+    OPENSSL_cleanse(scalar1x, sizeof(scalar1x));
+}
+
+void curve448_point_mul_by_ratio_and_encode_like_eddsa(
+                                    uint8_t enc[EDDSA_448_PUBLIC_BYTES],
+                                    const curve448_point_t p)
+{
+    gf x, y, z, t;
+    curve448_point_t q;
+
+    /* The point is now on the twisted curve.  Move it to untwisted. */
+    curve448_point_copy(q, p);
+
+    {
+        /* 4-isogeny: 2xy/(y^+x^2), (y^2-x^2)/(2z^2-y^2+x^2) */
+        gf u;
+
+        gf_sqr(x, q->x);
+        gf_sqr(t, q->y);
+        gf_add(u, x, t);
+        gf_add(z, q->y, q->x);
+        gf_sqr(y, z);
+        gf_sub(y, y, u);
+        gf_sub(z, t, x);
+        gf_sqr(x, q->z);
+        gf_add(t, x, x);
+        gf_sub(t, t, z);
+        gf_mul(x, t, y);
+        gf_mul(y, z, u);
+        gf_mul(z, u, t);
+        OPENSSL_cleanse(u, sizeof(u));
+    }
+
+    /* Affinize */
+    gf_invert(z, z, 1);
+    gf_mul(t, x, z);
+    gf_mul(x, y, z);
+
+    /* Encode */
+    enc[EDDSA_448_PRIVATE_BYTES - 1] = 0;
+    gf_serialize(enc, x, 1);
+    enc[EDDSA_448_PRIVATE_BYTES - 1] |= 0x80 & gf_lobit(t);
+
+    OPENSSL_cleanse(x, sizeof(x));
+    OPENSSL_cleanse(y, sizeof(y));
+    OPENSSL_cleanse(z, sizeof(z));
+    OPENSSL_cleanse(t, sizeof(t));
+    curve448_point_destroy(q);
+}
+
+c448_error_t curve448_point_decode_like_eddsa_and_mul_by_ratio(
+                                curve448_point_t p,
+                                const uint8_t enc[EDDSA_448_PUBLIC_BYTES])
+{
+    uint8_t enc2[EDDSA_448_PUBLIC_BYTES];
+    mask_t low;
+    mask_t succ;
+
+    memcpy(enc2, enc, sizeof(enc2));
+
+    low = ~word_is_zero(enc2[EDDSA_448_PRIVATE_BYTES - 1] & 0x80);
+    enc2[EDDSA_448_PRIVATE_BYTES - 1] &= ~0x80;
+
+    succ = gf_deserialize(p->y, enc2, 1, 0);
+    succ &= word_is_zero(enc2[EDDSA_448_PRIVATE_BYTES - 1]);
+
+    gf_sqr(p->x, p->y);
+    gf_sub(p->z, ONE, p->x);    /* num = 1-y^2 */
+    gf_mulw(p->t, p->x, EDWARDS_D); /* dy^2 */
+    gf_sub(p->t, ONE, p->t);    /* denom = 1-dy^2 or 1-d + dy^2 */
+
+    gf_mul(p->x, p->z, p->t);
+    succ &= gf_isr(p->t, p->x); /* 1/sqrt(num * denom) */
+
+    gf_mul(p->x, p->t, p->z);   /* sqrt(num / denom) */
+    gf_cond_neg(p->x, gf_lobit(p->x) ^ low);
+    gf_copy(p->z, ONE);
+
+    {
+        gf a, b, c, d;
+
+        /* 4-isogeny 2xy/(y^2-ax^2), (y^2+ax^2)/(2-y^2-ax^2) */
+        gf_sqr(c, p->x);
+        gf_sqr(a, p->y);
+        gf_add(d, c, a);
+        gf_add(p->t, p->y, p->x);
+        gf_sqr(b, p->t);
+        gf_sub(b, b, d);
+        gf_sub(p->t, a, c);
+        gf_sqr(p->x, p->z);
+        gf_add(p->z, p->x, p->x);
+        gf_sub(a, p->z, d);
+        gf_mul(p->x, a, b);
+        gf_mul(p->z, p->t, a);
+        gf_mul(p->y, p->t, d);
+        gf_mul(p->t, b, d);
+        OPENSSL_cleanse(a, sizeof(a));
+        OPENSSL_cleanse(b, sizeof(b));
+        OPENSSL_cleanse(c, sizeof(c));
+        OPENSSL_cleanse(d, sizeof(d));
+    }
+
+    OPENSSL_cleanse(enc2, sizeof(enc2));
+    assert(curve448_point_valid(p) || ~succ);
+
+    return c448_succeed_if(mask_to_bool(succ));
+}
+
+c448_error_t x448_int(uint8_t out[X_PUBLIC_BYTES],
+                      const uint8_t base[X_PUBLIC_BYTES],
+                      const uint8_t scalar[X_PRIVATE_BYTES])
+{
+    gf x1, x2, z2, x3, z3, t1, t2;
+    int t;
+    mask_t swap = 0;
+    mask_t nz;
+
+    (void)gf_deserialize(x1, base, 1, 0);
+    gf_copy(x2, ONE);
+    gf_copy(z2, ZERO);
+    gf_copy(x3, x1);
+    gf_copy(z3, ONE);
+
+    for (t = X_PRIVATE_BITS - 1; t >= 0; t--) {
+        uint8_t sb = scalar[t / 8];
+        mask_t k_t;
+
+        /* Scalar conditioning */
+        if (t / 8 == 0)
+            sb &= -(uint8_t)COFACTOR;
+        else if (t == X_PRIVATE_BITS - 1)
+            sb = -1;
+
+        k_t = (sb >> (t % 8)) & 1;
+        k_t = 0 - k_t;             /* set to all 0s or all 1s */
+
+        swap ^= k_t;
+        gf_cond_swap(x2, x3, swap);
+        gf_cond_swap(z2, z3, swap);
+        swap = k_t;
+
+        /*
+         * The "_nr" below skips coefficient reduction. In the following
+         * comments, "2+e" is saying that the coefficients are at most 2+epsilon
+         * times the reduction limit.
+         */
+        gf_add_nr(t1, x2, z2);  /* A = x2 + z2 */ /* 2+e */
+        gf_sub_nr(t2, x2, z2);  /* B = x2 - z2 */ /* 3+e */
+        gf_sub_nr(z2, x3, z3);  /* D = x3 - z3 */ /* 3+e */
+        gf_mul(x2, t1, z2);     /* DA */
+        gf_add_nr(z2, z3, x3);  /* C = x3 + z3 */ /* 2+e */
+        gf_mul(x3, t2, z2);     /* CB */
+        gf_sub_nr(z3, x2, x3);  /* DA-CB */ /* 3+e */
+        gf_sqr(z2, z3);         /* (DA-CB)^2 */
+        gf_mul(z3, x1, z2);     /* z3 = x1(DA-CB)^2 */
+        gf_add_nr(z2, x2, x3);  /* (DA+CB) */ /* 2+e */
+        gf_sqr(x3, z2);         /* x3 = (DA+CB)^2 */
+
+        gf_sqr(z2, t1);         /* AA = A^2 */
+        gf_sqr(t1, t2);         /* BB = B^2 */
+        gf_mul(x2, z2, t1);     /* x2 = AA*BB */
+        gf_sub_nr(t2, z2, t1);  /* E = AA-BB */ /* 3+e */
+
+        gf_mulw(t1, t2, -EDWARDS_D); /* E*-d = a24*E */
+        gf_add_nr(t1, t1, z2);  /* AA + a24*E */ /* 2+e */
+        gf_mul(z2, t2, t1);     /* z2 = E(AA+a24*E) */
+    }
+
+    /* Finish */
+    gf_cond_swap(x2, x3, swap);
+    gf_cond_swap(z2, z3, swap);
+    gf_invert(z2, z2, 0);
+    gf_mul(x1, x2, z2);
+    gf_serialize(out, x1, 1);
+    nz = ~gf_eq(x1, ZERO);
+
+    OPENSSL_cleanse(x1, sizeof(x1));
+    OPENSSL_cleanse(x2, sizeof(x2));
+    OPENSSL_cleanse(z2, sizeof(z2));
+    OPENSSL_cleanse(x3, sizeof(x3));
+    OPENSSL_cleanse(z3, sizeof(z3));
+    OPENSSL_cleanse(t1, sizeof(t1));
+    OPENSSL_cleanse(t2, sizeof(t2));
+
+    return c448_succeed_if(mask_to_bool(nz));
+}
+
+void curve448_point_mul_by_ratio_and_encode_like_x448(uint8_t
+                                                      out[X_PUBLIC_BYTES],
+                                                      const curve448_point_t p)
+{
+    curve448_point_t q;
+
+    curve448_point_copy(q, p);
+    gf_invert(q->t, q->x, 0);   /* 1/x */
+    gf_mul(q->z, q->t, q->y);   /* y/x */
+    gf_sqr(q->y, q->z);         /* (y/x)^2 */
+    gf_serialize(out, q->y, 1);
+    curve448_point_destroy(q);
+}
+
+void x448_derive_public_key(uint8_t out[X_PUBLIC_BYTES],
+                            const uint8_t scalar[X_PRIVATE_BYTES])
+{
+    /* Scalar conditioning */
+    uint8_t scalar2[X_PRIVATE_BYTES];
+    curve448_scalar_t the_scalar;
+    curve448_point_t p;
+    unsigned int i;
+
+    memcpy(scalar2, scalar, sizeof(scalar2));
+    scalar2[0] &= -(uint8_t)COFACTOR;
+
+    scalar2[X_PRIVATE_BYTES - 1] &= ~((0u - 1u) << ((X_PRIVATE_BITS + 7) % 8));
+    scalar2[X_PRIVATE_BYTES - 1] |= 1 << ((X_PRIVATE_BITS + 7) % 8);
+
+    curve448_scalar_decode_long(the_scalar, scalar2, sizeof(scalar2));
+
+    /* Compensate for the encoding ratio */
+    for (i = 1; i < X448_ENCODE_RATIO; i <<= 1)
+        curve448_scalar_halve(the_scalar, the_scalar);
+
+    curve448_precomputed_scalarmul(p, curve448_precomputed_base, the_scalar);
+    curve448_point_mul_by_ratio_and_encode_like_x448(out, p);
+    curve448_point_destroy(p);
+}
+
+/* Control for variable-time scalar multiply algorithms. */
+struct smvt_control {
+    int power, addend;
+};
+
+#if defined(__GNUC__) && (__GNUC__ > 3 || (__GNUC__ == 3 && __GNUC_MINOR__ > 3))
+# define NUMTRAILINGZEROS	__builtin_ctz
+#else
+# define NUMTRAILINGZEROS	numtrailingzeros
+static uint32_t numtrailingzeros(uint32_t i)
+{
+    uint32_t tmp;
+    uint32_t num = 31;
+
+    if (i == 0)
+        return 32;
+
+    tmp = i << 16;
+    if (tmp != 0) {
+        i = tmp;
+        num -= 16;
+    }
+    tmp = i << 8;
+    if (tmp != 0) {
+        i = tmp;
+        num -= 8;
+    }
+    tmp = i << 4;
+    if (tmp != 0) {
+        i = tmp;
+        num -= 4;
+    }
+    tmp = i << 2;
+    if (tmp != 0) {
+        i = tmp;
+        num -= 2;
+    }
+    tmp = i << 1;
+    if (tmp != 0)
+        num--;
+
+    return num;
+}
+#endif
+
+static int recode_wnaf(struct smvt_control *control,
+                       /* [nbits/(table_bits + 1) + 3] */
+                       const curve448_scalar_t scalar,
+                       unsigned int table_bits)
+{
+    unsigned int table_size = C448_SCALAR_BITS / (table_bits + 1) + 3;
+    int position = table_size - 1; /* at the end */
+    uint64_t current = scalar->limb[0] & 0xFFFF;
+    uint32_t mask = (1 << (table_bits + 1)) - 1;
+    unsigned int w;
+    const unsigned int B_OVER_16 = sizeof(scalar->limb[0]) / 2;
+    unsigned int n, i;
+
+    /* place the end marker */
+    control[position].power = -1;
+    control[position].addend = 0;
+    position--;
+
+    /*
+     * PERF: Could negate scalar if it's large.  But then would need more cases
+     * in the actual code that uses it, all for an expected reduction of like
+     * 1/5 op. Probably not worth it.
+     */
+
+    for (w = 1; w < (C448_SCALAR_BITS - 1) / 16 + 3; w++) {
+        if (w < (C448_SCALAR_BITS - 1) / 16 + 1) {
+            /* Refill the 16 high bits of current */
+            current += (uint32_t)((scalar->limb[w / B_OVER_16]
+                       >> (16 * (w % B_OVER_16))) << 16);
+        }
+
+        while (current & 0xFFFF) {
+            uint32_t pos = NUMTRAILINGZEROS((uint32_t)current);
+            uint32_t odd = (uint32_t)current >> pos;
+            int32_t delta = odd & mask;
+
+            assert(position >= 0);
+            if (odd & (1 << (table_bits + 1)))
+                delta -= (1 << (table_bits + 1));
+            current -= delta * (1 << pos);
+            control[position].power = pos + 16 * (w - 1);
+            control[position].addend = delta;
+            position--;
+        }
+        current >>= 16;
+    }
+    assert(current == 0);
+
+    position++;
+    n = table_size - position;
+    for (i = 0; i < n; i++)
+        control[i] = control[i + position];
+
+    return n - 1;
+}
+
+static void prepare_wnaf_table(pniels_t * output,
+                               const curve448_point_t working,
+                               unsigned int tbits)
+{
+    curve448_point_t tmp;
+    int i;
+    pniels_t twop;
+
+    pt_to_pniels(output[0], working);
+
+    if (tbits == 0)
+        return;
+
+    curve448_point_double(tmp, working);
+    pt_to_pniels(twop, tmp);
+
+    add_pniels_to_pt(tmp, output[0], 0);
+    pt_to_pniels(output[1], tmp);
+
+    for (i = 2; i < 1 << tbits; i++) {
+        add_pniels_to_pt(tmp, twop, 0);
+        pt_to_pniels(output[i], tmp);
+    }
+
+    curve448_point_destroy(tmp);
+    OPENSSL_cleanse(twop, sizeof(twop));
+}
+
+void curve448_base_double_scalarmul_non_secret(curve448_point_t combo,
+                                               const curve448_scalar_t scalar1,
+                                               const curve448_point_t base2,
+                                               const curve448_scalar_t scalar2)
+{
+    const int table_bits_var = C448_WNAF_VAR_TABLE_BITS;
+    const int table_bits_pre = C448_WNAF_FIXED_TABLE_BITS;
+    struct smvt_control control_var[C448_SCALAR_BITS /
+                                    (C448_WNAF_VAR_TABLE_BITS + 1) + 3];
+    struct smvt_control control_pre[C448_SCALAR_BITS /
+                                    (C448_WNAF_FIXED_TABLE_BITS + 1) + 3];
+    int ncb_pre = recode_wnaf(control_pre, scalar1, table_bits_pre);
+    int ncb_var = recode_wnaf(control_var, scalar2, table_bits_var);
+    pniels_t precmp_var[1 << C448_WNAF_VAR_TABLE_BITS];
+    int contp = 0, contv = 0, i;
+
+    prepare_wnaf_table(precmp_var, base2, table_bits_var);
+    i = control_var[0].power;
+
+    if (i < 0) {
+        curve448_point_copy(combo, curve448_point_identity);
+        return;
+    }
+    if (i > control_pre[0].power) {
+        pniels_to_pt(combo, precmp_var[control_var[0].addend >> 1]);
+        contv++;
+    } else if (i == control_pre[0].power && i >= 0) {
+        pniels_to_pt(combo, precmp_var[control_var[0].addend >> 1]);
+        add_niels_to_pt(combo, curve448_wnaf_base[control_pre[0].addend >> 1],
+                        i);
+        contv++;
+        contp++;
+    } else {
+        i = control_pre[0].power;
+        niels_to_pt(combo, curve448_wnaf_base[control_pre[0].addend >> 1]);
+        contp++;
+    }
+
+    for (i--; i >= 0; i--) {
+        int cv = (i == control_var[contv].power);
+        int cp = (i == control_pre[contp].power);
+
+        point_double_internal(combo, combo, i && !(cv || cp));
+
+        if (cv) {
+            assert(control_var[contv].addend);
+
+            if (control_var[contv].addend > 0)
+                add_pniels_to_pt(combo,
+                                 precmp_var[control_var[contv].addend >> 1],
+                                 i && !cp);
+            else
+                sub_pniels_from_pt(combo,
+                                   precmp_var[(-control_var[contv].addend)
+                                              >> 1], i && !cp);
+            contv++;
+        }
+
+        if (cp) {
+            assert(control_pre[contp].addend);
+
+            if (control_pre[contp].addend > 0)
+                add_niels_to_pt(combo,
+                                curve448_wnaf_base[control_pre[contp].addend
+                                                   >> 1], i);
+            else
+                sub_niels_from_pt(combo,
+                                  curve448_wnaf_base[(-control_pre
+                                                      [contp].addend) >> 1], i);
+            contp++;
+        }
+    }
+
+    /* This function is non-secret, but whatever this is cheap. */
+    OPENSSL_cleanse(control_var, sizeof(control_var));
+    OPENSSL_cleanse(control_pre, sizeof(control_pre));
+    OPENSSL_cleanse(precmp_var, sizeof(precmp_var));
+
+    assert(contv == ncb_var);
+    (void)ncb_var;
+    assert(contp == ncb_pre);
+    (void)ncb_pre;
+}
+
+void curve448_point_destroy(curve448_point_t point)
+{
+    OPENSSL_cleanse(point, sizeof(curve448_point_t));
+}
+
+int X448(uint8_t out_shared_key[56], const uint8_t private_key[56],
+         const uint8_t peer_public_value[56])
+{
+    return x448_int(out_shared_key, peer_public_value, private_key)
+           == C448_SUCCESS;
+}
+
+void X448_public_from_private(uint8_t out_public_value[56],
+                              const uint8_t private_key[56])
+{
+    x448_derive_public_key(out_public_value, private_key);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/curve448_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/curve448_lcl.h
new file mode 100644
index 000000000..2bc3bd84c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/curve448_lcl.h
@@ -0,0 +1,38 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+#ifndef HEADER_CURVE448_LCL_H
+# define HEADER_CURVE448_LCL_H
+# include "curve448utils.h"
+
+int X448(uint8_t out_shared_key[56], const uint8_t private_key[56],
+         const uint8_t peer_public_value[56]);
+
+void X448_public_from_private(uint8_t out_public_value[56],
+                              const uint8_t private_key[56]);
+
+int ED448_sign(uint8_t *out_sig, const uint8_t *message, size_t message_len,
+               const uint8_t public_key[57], const uint8_t private_key[57],
+               const uint8_t *context, size_t context_len);
+
+int ED448_verify(const uint8_t *message, size_t message_len,
+                 const uint8_t signature[114], const uint8_t public_key[57],
+                 const uint8_t *context, size_t context_len);
+
+int ED448ph_sign(uint8_t *out_sig, const uint8_t hash[64],
+                 const uint8_t public_key[57], const uint8_t private_key[57],
+                 const uint8_t *context, size_t context_len);
+
+int ED448ph_verify(const uint8_t hash[64], const uint8_t signature[114],
+                   const uint8_t public_key[57], const uint8_t *context,
+                   size_t context_len);
+
+int ED448_public_from_private(uint8_t out_public_key[57],
+                              const uint8_t private_key[57]);
+
+#endif              /* HEADER_CURVE448_LCL_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/curve448_tables.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/curve448_tables.c
new file mode 100644
index 000000000..a1185b1ee
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/curve448_tables.c
@@ -0,0 +1,475 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+#include "field.h"
+
+#include "point_448.h"
+
+static const curve448_precomputed_s curve448_precomputed_base_table = {
+    {
+        {{
+            {FIELD_LITERAL(0x00cc3b062366f4cc,0x003d6e34e314aa3c,0x00d51c0a7521774d,0x0094e060eec6ab8b,0x00d21291b4d80082,0x00befed12b55ef1e,0x00c3dd2df5c94518,0x00e0a7b112b8d4e6)},
+            {FIELD_LITERAL(0x0019eb5608d8723a,0x00d1bab52fb3aedb,0x00270a7311ebc90c,0x0037c12b91be7f13,0x005be16cd8b5c704,0x003e181acda888e1,0x00bc1f00fc3fc6d0,0x00d3839bfa319e20)},
+            {FIELD_LITERAL(0x003caeb88611909f,0x00ea8b378c4df3d4,0x00b3295b95a5a19a,0x00a65f97514bdfb5,0x00b39efba743cab1,0x0016ba98b862fd2d,0x0001508812ee71d7,0x000a75740eea114a)},
+        }}, {{
+            {FIELD_LITERAL(0x00ebcf0eb649f823,0x00166d332e98ea03,0x0059ddf64f5cd5f6,0x0047763123d9471b,0x00a64065c53ef62f,0x00978e44c480153d,0x000b5b2a0265f194,0x0046a24b9f32965a)},
+            {FIELD_LITERAL(0x00b9eef787034df0,0x0020bc24de3390cd,0x000022160bae99bb,0x00ae66e886e97946,0x0048d4bbe02cbb8b,0x0072ba97b34e38d4,0x00eae7ec8f03e85a,0x005ba92ecf808b2c)},
+            {FIELD_LITERAL(0x00c9cfbbe74258fd,0x00843a979ea9eaa7,0x000cbb4371cfbe90,0x0059bac8f7f0a628,0x004b3dff882ff530,0x0011869df4d90733,0x00595aa71f4abfc2,0x0070e2d38990c2e6)},
+        }}, {{
+            {FIELD_LITERAL(0x00de2010c0a01733,0x00c739a612e24297,0x00a7212643141d7c,0x00f88444f6b67c11,0x00484b7b16ec28f2,0x009c1b8856af9c68,0x00ff4669591fe9d6,0x0054974be08a32c8)},
+            {FIELD_LITERAL(0x0010de3fd682ceed,0x008c07642d83ca4e,0x0013bb064e00a1cc,0x009411ae27870e11,0x00ea8e5b4d531223,0x0032fe7d2aaece2e,0x00d989e243e7bb41,0x000fe79a508e9b8b)},
+            {FIELD_LITERAL(0x005e0426b9bfc5b1,0x0041a5b1d29ee4fa,0x0015b0def7774391,0x00bc164f1f51af01,0x00d543b0942797b9,0x003c129b6398099c,0x002b114c6e5adf18,0x00b4e630e4018a7b)},
+        }}, {{
+            {FIELD_LITERAL(0x00d490afc95f8420,0x00b096bf50c1d9b9,0x00799fd707679866,0x007c74d9334afbea,0x00efaa8be80ff4ed,0x0075c4943bb81694,0x00c21c2fca161f36,0x00e77035d492bfee)},
+            {FIELD_LITERAL(0x006658a190dd6661,0x00e0e9bab38609a6,0x0028895c802237ed,0x006a0229c494f587,0x002dcde96c9916b7,0x00d158822de16218,0x00173b917a06856f,0x00ca78a79ae07326)},
+            {FIELD_LITERAL(0x00e35bfc79caced4,0x0087238a3e1fe3bb,0x00bcbf0ff4ceff5b,0x00a19c1c94099b91,0x0071e102b49db976,0x0059e3d004eada1e,0x008da78afa58a47e,0x00579c8ebf269187)},
+        }}, {{
+            {FIELD_LITERAL(0x00a16c2905eee75f,0x009d4bcaea2c7e1d,0x00d3bd79bfad19df,0x0050da745193342c,0x006abdb8f6b29ab1,0x00a24fe0a4fef7ef,0x0063730da1057dfb,0x00a08c312c8eb108)},
+            {FIELD_LITERAL(0x00b583be005375be,0x00a40c8f8a4e3df4,0x003fac4a8f5bdbf7,0x00d4481d872cd718,0x004dc8749cdbaefe,0x00cce740d5e5c975,0x000b1c1f4241fd21,0x00a76de1b4e1cd07)},
+            {FIELD_LITERAL(0x007a076500d30b62,0x000a6e117b7f090f,0x00c8712ae7eebd9a,0x000fbd6c1d5f6ff7,0x003a7977246ebf11,0x00166ed969c6600e,0x00aa42e469c98bec,0x00dc58f307cf0666)},
+        }}, {{
+            {FIELD_LITERAL(0x004b491f65a9a28b,0x006a10309e8a55b7,0x00b67210185187ef,0x00cf6497b12d9b8f,0x0085778c56e2b1ba,0x0015b4c07a814d85,0x00686479e62da561,0x008de5d88f114916)},
+            {FIELD_LITERAL(0x00e37c88d6bba7b1,0x003e4577e1b8d433,0x0050d8ea5f510ec0,0x0042fc9f2da9ef59,0x003bd074c1141420,0x00561b8b7b68774e,0x00232e5e5d1013a3,0x006b7f2cb3d7e73f)},
+            {FIELD_LITERAL(0x004bdd0f0b41e6a0,0x001773057c405d24,0x006029f99915bd97,0x006a5ba70a17fe2f,0x0046111977df7e08,0x004d8124c89fb6b7,0x00580983b2bb2724,0x00207bf330d6f3fe)},
+        }}, {{
+            {FIELD_LITERAL(0x007efdc93972a48b,0x002f5e50e78d5fee,0x0080dc11d61c7fe5,0x0065aa598707245b,0x009abba2300641be,0x000c68787656543a,0x00ffe0fef2dc0a17,0x00007ffbd6cb4f3a)},
+            {FIELD_LITERAL(0x0036012f2b836efc,0x00458c126d6b5fbc,0x00a34436d719ad1e,0x0097be6167117dea,0x0009c219c879cff3,0x0065564493e60755,0x00993ac94a8cdec0,0x002d4885a4d0dbaf)},
+            {FIELD_LITERAL(0x00598b60b4c068ba,0x00c547a0be7f1afd,0x009582164acf12af,0x00af4acac4fbbe40,0x005f6ca7c539121a,0x003b6e752ebf9d66,0x00f08a30d5cac5d4,0x00e399bb5f97c5a9)},
+        }}, {{
+            {FIELD_LITERAL(0x007445a0409c0a66,0x00a65c369f3829c0,0x0031d248a4f74826,0x006817f34defbe8e,0x00649741d95ebf2e,0x00d46466ab16b397,0x00fdc35703bee414,0x00343b43334525f8)},
+            {FIELD_LITERAL(0x001796bea93f6401,0x00090c5a42e85269,0x00672412ba1252ed,0x001201d47b6de7de,0x006877bccfe66497,0x00b554fd97a4c161,0x009753f42dbac3cf,0x00e983e3e378270a)},
+            {FIELD_LITERAL(0x00ac3eff18849872,0x00f0eea3bff05690,0x00a6d72c21dd505d,0x001b832642424169,0x00a6813017b540e5,0x00a744bd71b385cd,0x0022a7d089130a7b,0x004edeec9a133486)},
+        }}, {{
+            {FIELD_LITERAL(0x00b2d6729196e8a9,0x0088a9bb2031cef4,0x00579e7787dc1567,0x0030f49feb059190,0x00a0b1d69c7f7d8f,0x0040bdcc6d9d806f,0x00d76c4037edd095,0x00bbf24376415dd7)},
+            {FIELD_LITERAL(0x00240465ff5a7197,0x00bb97e76caf27d0,0x004b4edbf8116d39,0x001d8586f708cbaa,0x000f8ee8ff8e4a50,0x00dde5a1945dd622,0x00e6fc1c0957e07c,0x0041c9cdabfd88a0)},
+            {FIELD_LITERAL(0x005344b0bf5b548c,0x002957d0b705cc99,0x00f586a70390553d,0x0075b3229f583cc3,0x00a1aa78227490e4,0x001bf09cf7957717,0x00cf6bf344325f52,0x0065bd1c23ca3ecf)},
+        }}, {{
+            {FIELD_LITERAL(0x009bff3b3239363c,0x00e17368796ef7c0,0x00528b0fe0971f3a,0x0008014fc8d4a095,0x00d09f2e8a521ec4,0x006713ab5dde5987,0x0003015758e0dbb1,0x00215999f1ba212d)},
+            {FIELD_LITERAL(0x002c88e93527da0e,0x0077c78f3456aad5,0x0071087a0a389d1c,0x00934dac1fb96dbd,0x008470e801162697,0x005bc2196cd4ad49,0x00e535601d5087c3,0x00769888700f497f)},
+            {FIELD_LITERAL(0x00da7a4b557298ad,0x0019d2589ea5df76,0x00ef3e38be0c6497,0x00a9644e1312609a,0x004592f61b2558da,0x0082c1df510d7e46,0x0042809a535c0023,0x00215bcb5afd7757)},
+        }}, {{
+            {FIELD_LITERAL(0x002b9df55a1a4213,0x00dcfc3b464a26be,0x00c4f9e07a8144d5,0x00c8e0617a92b602,0x008e3c93accafae0,0x00bf1bcb95b2ca60,0x004ce2426a613bf3,0x00266cac58e40921)},
+            {FIELD_LITERAL(0x008456d5db76e8f0,0x0032ca9cab2ce163,0x0059f2b8bf91abcf,0x0063c2a021712788,0x00f86155af22f72d,0x00db98b2a6c005a0,0x00ac6e416a693ac4,0x007a93572af53226)},
+            {FIELD_LITERAL(0x0087767520f0de22,0x0091f64012279fb5,0x001050f1f0644999,0x004f097a2477ad3c,0x006b37913a9947bd,0x001a3d78645af241,0x0057832bbb3008a7,0x002c1d902b80dc20)},
+        }}, {{
+            {FIELD_LITERAL(0x001a6002bf178877,0x009bce168aa5af50,0x005fc318ff04a7f5,0x0052818f55c36461,0x008768f5d4b24afb,0x0037ffbae7b69c85,0x0018195a4b61edc0,0x001e12ea088434b2)},
+            {FIELD_LITERAL(0x0047d3f804e7ab07,0x00a809ab5f905260,0x00b3ffc7cdaf306d,0x00746e8ec2d6e509,0x00d0dade8887a645,0x00acceeebde0dd37,0x009bc2579054686b,0x0023804f97f1c2bf)},
+            {FIELD_LITERAL(0x0043e2e2e50b80d7,0x00143aafe4427e0f,0x005594aaecab855b,0x008b12ccaaecbc01,0x002deeb091082bc3,0x009cca4be2ae7514,0x00142b96e696d047,0x00ad2a2b1c05256a)},
+        }}, {{
+            {FIELD_LITERAL(0x003914f2f144b78b,0x007a95dd8bee6f68,0x00c7f4384d61c8e6,0x004e51eb60f1bdb2,0x00f64be7aa4621d8,0x006797bfec2f0ac0,0x007d17aab3c75900,0x001893e73cac8bc5)},
+            {FIELD_LITERAL(0x00140360b768665b,0x00b68aca4967f977,0x0001089b66195ae4,0x00fe71122185e725,0x000bca2618d49637,0x00a54f0557d7e98a,0x00cdcd2f91d6f417,0x00ab8c13741fd793)},
+            {FIELD_LITERAL(0x00725ee6b1e549e0,0x007124a0769777fa,0x000b68fdad07ae42,0x0085b909cd4952df,0x0092d2e3c81606f4,0x009f22f6cac099a0,0x00f59da57f2799a8,0x00f06c090122f777)},
+        }}, {{
+            {FIELD_LITERAL(0x00ce0bed0a3532bc,0x001a5048a22df16b,0x00e31db4cbad8bf1,0x00e89292120cf00e,0x007d1dd1a9b00034,0x00e2a9041ff8f680,0x006a4c837ae596e7,0x00713af1068070b3)},
+            {FIELD_LITERAL(0x00c4fe64ce66d04b,0x00b095d52e09b3d7,0x00758bbecb1a3a8e,0x00f35cce8d0650c0,0x002b878aa5984473,0x0062e0a3b7544ddc,0x00b25b290ed116fe,0x007b0f6abe0bebf2)},
+            {FIELD_LITERAL(0x0081d4e3addae0a8,0x003410c836c7ffcc,0x00c8129ad89e4314,0x000e3d5a23922dcd,0x00d91e46f29c31f3,0x006c728cde8c5947,0x002bc655ba2566c0,0x002ca94721533108)},
+        }}, {{
+            {FIELD_LITERAL(0x0051e4b3f764d8a9,0x0019792d46e904a0,0x00853bc13dbc8227,0x000840208179f12d,0x0068243474879235,0x0013856fbfe374d0,0x00bda12fe8676424,0x00bbb43635926eb2)},
+            {FIELD_LITERAL(0x0012cdc880a93982,0x003c495b21cd1b58,0x00b7e5c93f22a26e,0x0044aa82dfb99458,0x009ba092cdffe9c0,0x00a14b3ab2083b73,0x000271c2f70e1c4b,0x00eea9cac0f66eb8)},
+            {FIELD_LITERAL(0x001a1847c4ac5480,0x00b1b412935bb03a,0x00f74285983bf2b2,0x00624138b5b5d0f1,0x008820c0b03d38bf,0x00b94e50a18c1572,0x0060f6934841798f,0x00c52f5d66d6ebe2)},
+        }}, {{
+            {FIELD_LITERAL(0x00da23d59f9bcea6,0x00e0f27007a06a4b,0x00128b5b43a6758c,0x000cf50190fa8b56,0x00fc877aba2b2d72,0x00623bef52edf53f,0x00e6af6b819669e2,0x00e314dc34fcaa4f)},
+            {FIELD_LITERAL(0x0066e5eddd164d1e,0x00418a7c6fe28238,0x0002e2f37e962c25,0x00f01f56b5975306,0x0048842fa503875c,0x0057b0e968078143,0x00ff683024f3d134,0x0082ae28fcad12e4)},
+            {FIELD_LITERAL(0x0011ddfd21260e42,0x00d05b0319a76892,0x00183ea4368e9b8f,0x00b0815662affc96,0x00b466a5e7ce7c88,0x00db93b07506e6ee,0x0033885f82f62401,0x0086f9090ec9b419)},
+        }}, {{
+            {FIELD_LITERAL(0x00d95d1c5fcb435a,0x0016d1ed6b5086f9,0x00792aa0b7e54d71,0x0067b65715f1925d,0x00a219755ec6176b,0x00bc3f026b12c28f,0x00700c897ffeb93e,0x0089b83f6ec50b46)},
+            {FIELD_LITERAL(0x003c97e6384da36e,0x00423d53eac81a09,0x00b70d68f3cdce35,0x00ee7959b354b92c,0x00f4e9718819c8ca,0x009349f12acbffe9,0x005aee7b62cb7da6,0x00d97764154ffc86)},
+            {FIELD_LITERAL(0x00526324babb46dc,0x002ee99b38d7bf9e,0x007ea51794706ef4,0x00abeb04da6e3c39,0x006b457c1d281060,0x00fe243e9a66c793,0x00378de0fb6c6ee4,0x003e4194b9c3cb93)},
+        }}, {{
+            {FIELD_LITERAL(0x00fed3cd80ca2292,0x0015b043a73ca613,0x000a9fd7bf9be227,0x003b5e03de2db983,0x005af72d46904ef7,0x00c0f1b5c49faa99,0x00dc86fc3bd305e1,0x00c92f08c1cb1797)},
+            {FIELD_LITERAL(0x0079680ce111ed3b,0x001a1ed82806122c,0x000c2e7466d15df3,0x002c407f6f7150fd,0x00c5e7c96b1b0ce3,0x009aa44626863ff9,0x00887b8b5b80be42,0x00b6023cec964825)},
+            {FIELD_LITERAL(0x00e4a8e1048970c8,0x0062887b7830a302,0x00bcf1c8cd81402b,0x0056dbb81a68f5be,0x0014eced83f12452,0x00139e1a510150df,0x00bb81140a82d1a3,0x000febcc1aaf1aa7)},
+        }}, {{
+            {FIELD_LITERAL(0x00a7527958238159,0x0013ec9537a84cd6,0x001d7fee7d562525,0x00b9eefa6191d5e5,0x00dbc97db70bcb8a,0x00481affc7a4d395,0x006f73d3e70c31bb,0x00183f324ed96a61)},
+            {FIELD_LITERAL(0x0039dd7ce7fc6860,0x00d64f6425653da1,0x003e037c7f57d0af,0x0063477a06e2bcf2,0x001727dbb7ac67e6,0x0049589f5efafe2e,0x00fc0fef2e813d54,0x008baa5d087fb50d)},
+            {FIELD_LITERAL(0x0024fb59d9b457c7,0x00a7d4e060223e4c,0x00c118d1b555fd80,0x0082e216c732f22a,0x00cd2a2993089504,0x003638e836a3e13d,0x000d855ee89b4729,0x008ec5b7d4810c91)},
+        }}, {{
+            {FIELD_LITERAL(0x001bf51f7d65cdfd,0x00d14cdafa16a97d,0x002c38e60fcd10e7,0x00a27446e393efbd,0x000b5d8946a71fdd,0x0063df2cde128f2f,0x006c8679569b1888,0x0059ffc4925d732d)},
+            {FIELD_LITERAL(0x00ece96f95f2b66f,0x00ece7952813a27b,0x0026fc36592e489e,0x007157d1a2de0f66,0x00759dc111d86ddf,0x0012881e5780bb0f,0x00c8ccc83ad29496,0x0012b9bd1929eb71)},
+            {FIELD_LITERAL(0x000fa15a20da5df0,0x00349ddb1a46cd31,0x002c512ad1d8e726,0x00047611f669318d,0x009e68fba591e17e,0x004320dffa803906,0x00a640874951a3d3,0x00b6353478baa24f)},
+        }}, {{
+            {FIELD_LITERAL(0x009696510000d333,0x00ec2f788bc04826,0x000e4d02b1f67ba5,0x00659aa8dace08b6,0x00d7a38a3a3ae533,0x008856defa8c746b,0x004d7a4402d3da1a,0x00ea82e06229260f)},
+            {FIELD_LITERAL(0x006a15bb20f75c0c,0x0079a144027a5d0c,0x00d19116ce0b4d70,0x0059b83bcb0b268e,0x005f58f63f16c127,0x0079958318ee2c37,0x00defbb063d07f82,0x00f1f0b931d2d446)},
+            {FIELD_LITERAL(0x00cb5e4c3c35d422,0x008df885ca43577f,0x00fa50b16ca3e471,0x005a0e58e17488c8,0x00b2ceccd6d34d19,0x00f01d5d235e36e9,0x00db2e7e4be6ca44,0x00260ab77f35fccd)},
+        }}, {{
+            {FIELD_LITERAL(0x006f6fd9baac61d5,0x002a7710a020a895,0x009de0db7fc03d4d,0x00cdedcb1875f40b,0x00050caf9b6b1e22,0x005e3a6654456ab0,0x00775fdf8c4423d4,0x0028701ea5738b5d)},
+            {FIELD_LITERAL(0x009ffd90abfeae96,0x00cba3c2b624a516,0x005ef08bcee46c91,0x00e6fde30afb6185,0x00f0b4db4f818ce4,0x006c54f45d2127f5,0x00040125035854c7,0x00372658a3287e13)},
+            {FIELD_LITERAL(0x00d7070fb1beb2ab,0x0078fc845a93896b,0x006894a4b2f224a6,0x005bdd8192b9dbde,0x00b38839874b3a9e,0x00f93618b04b7a57,0x003e3ec75fd2c67e,0x00bf5e6bfc29494a)},
+        }}, {{
+            {FIELD_LITERAL(0x00f19224ebba2aa5,0x0074f89d358e694d,0x00eea486597135ad,0x0081579a4555c7e1,0x0010b9b872930a9d,0x00f002e87a30ecc0,0x009b9d66b6de56e2,0x00a3c4f45e8004eb)},
+            {FIELD_LITERAL(0x0045e8dda9400888,0x002ff12e5fc05db7,0x00a7098d54afe69c,0x00cdbe846a500585,0x00879c1593ca1882,0x003f7a7fea76c8b0,0x002cd73dd0c8e0a1,0x00645d6ce96f51fe)},
+            {FIELD_LITERAL(0x002b7e83e123d6d6,0x00398346f7419c80,0x0042922e55940163,0x005e7fc5601886a3,0x00e88f2cee1d3103,0x00e7fab135f2e377,0x00b059984dbf0ded,0x0009ce080faa5bb8)},
+        }}, {{
+            {FIELD_LITERAL(0x0085e78af7758979,0x00275a4ee1631a3a,0x00d26bc0ed78b683,0x004f8355ea21064f,0x00d618e1a32696e5,0x008d8d7b150e5680,0x00a74cd854b278d2,0x001dd62702203ea0)},
+            {FIELD_LITERAL(0x00f89335c2a59286,0x00a0f5c905d55141,0x00b41fb836ee9382,0x00e235d51730ca43,0x00a5cb37b5c0a69a,0x009b966ffe136c45,0x00cb2ea10bf80ed1,0x00fb2b370b40dc35)},
+            {FIELD_LITERAL(0x00d687d16d4ee8ba,0x0071520bdd069dff,0x00de85c60d32355d,0x0087d2e3565102f4,0x00cde391b8dfc9aa,0x00e18d69efdfefe5,0x004a9d0591954e91,0x00fa36dd8b50eee5)},
+        }}, {{
+            {FIELD_LITERAL(0x002e788749a865f7,0x006e4dc3116861ea,0x009f1428c37276e6,0x00e7d2e0fc1e1226,0x003aeebc6b6c45f6,0x0071a8073bf500c9,0x004b22ad986b530c,0x00f439e63c0d79d4)},
+            {FIELD_LITERAL(0x006bc3d53011f470,0x00032d6e692b83e8,0x00059722f497cd0b,0x0009b4e6f0c497cc,0x0058a804b7cce6c0,0x002b71d3302bbd5d,0x00e2f82a36765fce,0x008dded99524c703)},
+            {FIELD_LITERAL(0x004d058953747d64,0x00701940fe79aa6f,0x00a620ac71c760bf,0x009532b611158b75,0x00547ed7f466f300,0x003cb5ab53a8401a,0x00c7763168ce3120,0x007e48e33e4b9ab2)},
+        }}, {{
+            {FIELD_LITERAL(0x001b2fc57bf3c738,0x006a3f918993fb80,0x0026f7a14fdec288,0x0075a2cdccef08db,0x00d3ecbc9eecdbf1,0x0048c40f06e5bf7f,0x00d63e423009896b,0x000598bc99c056a8)},
+            {FIELD_LITERAL(0x002f194eaafa46dc,0x008e38f57fe87613,0x00dc8e5ae25f4ab2,0x000a17809575e6bd,0x00d3ec7923ba366a,0x003a7e72e0ad75e3,0x0010024b88436e0a,0x00ed3c5444b64051)},
+            {FIELD_LITERAL(0x00831fc1340af342,0x00c9645669466d35,0x007692b4cc5a080f,0x009fd4a47ac9259f,0x001eeddf7d45928b,0x003c0446fc45f28b,0x002c0713aa3e2507,0x0095706935f0f41e)},
+        }}, {{
+            {FIELD_LITERAL(0x00766ae4190ec6d8,0x0065768cabc71380,0x00b902598416cdc2,0x00380021ad38df52,0x008f0b89d6551134,0x004254d4cc62c5a5,0x000d79f4484b9b94,0x00b516732ae3c50e)},
+            {FIELD_LITERAL(0x001fb73475c45509,0x00d2b2e5ea43345a,0x00cb3c3842077bd1,0x0029f90ad820946e,0x007c11b2380778aa,0x009e54ece62c1704,0x004bc60c41ca01c3,0x004525679a5a0b03)},
+            {FIELD_LITERAL(0x00c64fbddbed87b3,0x0040601d11731faa,0x009c22475b6f9d67,0x0024b79dae875f15,0x00616fed3f02c3b0,0x0000cf39f6af2d3b,0x00c46bac0aa9a688,0x00ab23e2800da204)},
+        }}, {{
+            {FIELD_LITERAL(0x000b3a37617632b0,0x00597199fe1cfb6c,0x0042a7ccdfeafdd6,0x004cc9f15ebcea17,0x00f436e596a6b4a4,0x00168861142df0d8,0x000753edfec26af5,0x000c495d7e388116)},
+            {FIELD_LITERAL(0x0017085f4a346148,0x00c7cf7a37f62272,0x001776e129bc5c30,0x009955134c9eef2a,0x001ba5bdf1df07be,0x00ec39497103a55c,0x006578354fda6cfb,0x005f02719d4f15ee)},
+            {FIELD_LITERAL(0x0052b9d9b5d9655d,0x00d4ec7ba1b461c3,0x00f95df4974f280b,0x003d8e5ca11aeb51,0x00d4981eb5a70b26,0x000af9a4f6659f29,0x004598c846faeb43,0x0049d9a183a47670)},
+        }}, {{
+            {FIELD_LITERAL(0x000a72d23dcb3f1f,0x00a3737f84011727,0x00f870c0fbbf4a47,0x00a7aadd04b5c9ca,0x000c7715c67bd072,0x00015a136afcd74e,0x0080d5caea499634,0x0026b448ec7514b7)},
+            {FIELD_LITERAL(0x00b60167d9e7d065,0x00e60ba0d07381e8,0x003a4f17b725c2d4,0x006c19fe176b64fa,0x003b57b31af86ccb,0x0021047c286180fd,0x00bdc8fb00c6dbb6,0x00fe4a9f4bab4f3f)},
+            {FIELD_LITERAL(0x0088ffc3a16111f7,0x009155e4245d0bc8,0x00851d68220572d5,0x00557ace1e514d29,0x0031d7c339d91022,0x00101d0ae2eaceea,0x00246ab3f837b66a,0x00d5216d381ff530)},
+        }}, {{
+            {FIELD_LITERAL(0x0057e7ea35f36dae,0x00f47d7ad15de22e,0x00d757ea4b105115,0x008311457d579d7e,0x00b49b75b1edd4eb,0x0081c7ff742fd63a,0x00ddda3187433df6,0x00475727d55f9c66)},
+            {FIELD_LITERAL(0x00a6295218dc136a,0x00563b3af0e9c012,0x00d3753b0145db1b,0x004550389c043dc1,0x00ea94ae27401bdf,0x002b0b949f2b7956,0x00c63f780ad8e23c,0x00e591c47d6bab15)},
+            {FIELD_LITERAL(0x00416c582b058eb6,0x004107da5b2cc695,0x00b3cd2556aeec64,0x00c0b418267e57a1,0x001799293579bd2e,0x0046ed44590e4d07,0x001d7459b3630a1e,0x00c6afba8b6696aa)},
+        }}, {{
+            {FIELD_LITERAL(0x008d6009b26da3f8,0x00898e88ca06b1ca,0x00edb22b2ed7fe62,0x00fbc93516aabe80,0x008b4b470c42ce0d,0x00e0032ba7d0dcbb,0x00d76da3a956ecc8,0x007f20fe74e3852a)},
+            {FIELD_LITERAL(0x002419222c607674,0x00a7f23af89188b3,0x00ad127284e73d1c,0x008bba582fae1c51,0x00fc6aa7ca9ecab1,0x003df5319eb6c2ba,0x002a05af8a8b199a,0x004bf8354558407c)},
+            {FIELD_LITERAL(0x00ce7d4a30f0fcbf,0x00d02c272629f03d,0x0048c001f7400bc2,0x002c21368011958d,0x0098a550391e96b5,0x002d80b66390f379,0x001fa878760cc785,0x001adfce54b613d5)},
+        }}, {{
+            {FIELD_LITERAL(0x001ed4dc71fa2523,0x005d0bff19bf9b5c,0x00c3801cee065a64,0x001ed0b504323fbf,0x0003ab9fdcbbc593,0x00df82070178b8d2,0x00a2bcaa9c251f85,0x00c628a3674bd02e)},
+            {FIELD_LITERAL(0x006b7a0674f9f8de,0x00a742414e5c7cff,0x0041cbf3c6e13221,0x00e3a64fd207af24,0x0087c05f15fbe8d1,0x004c50936d9e8a33,0x001306ec21042b6d,0x00a4f4137d1141c2)},
+            {FIELD_LITERAL(0x0009e6fb921568b0,0x00b3c60120219118,0x002a6c3460dd503a,0x009db1ef11654b54,0x0063e4bf0be79601,0x00670d34bb2592b9,0x00dcee2f6c4130ce,0x00b2682e88e77f54)},
+        }}, {{
+            {FIELD_LITERAL(0x000d5b4b3da135ab,0x00838f3e5064d81d,0x00d44eb50f6d94ed,0x0008931ab502ac6d,0x00debe01ca3d3586,0x0025c206775f0641,0x005ad4b6ae912763,0x007e2c318ad8f247)},
+            {FIELD_LITERAL(0x00ddbe0750dd1add,0x004b3c7b885844b8,0x00363e7ecf12f1ae,0x0062e953e6438f9d,0x0023cc73b076afe9,0x00b09fa083b4da32,0x00c7c3d2456c541d,0x005b591ec6b694d4)},
+            {FIELD_LITERAL(0x0028656e19d62fcf,0x0052a4af03df148d,0x00122765ddd14e42,0x00f2252904f67157,0x004741965b636f3a,0x006441d296132cb9,0x005e2106f956a5b7,0x00247029592d335c)},
+        }}, {{
+            {FIELD_LITERAL(0x003fe038eb92f894,0x000e6da1b72e8e32,0x003a1411bfcbe0fa,0x00b55d473164a9e4,0x00b9a775ac2df48d,0x0002ddf350659e21,0x00a279a69eb19cb3,0x00f844eab25cba44)},
+            {FIELD_LITERAL(0x00c41d1f9c1f1ac1,0x007b2df4e9f19146,0x00b469355fd5ba7a,0x00b5e1965afc852a,0x00388d5f1e2d8217,0x0022079e4c09ae93,0x0014268acd4ef518,0x00c1dd8d9640464c)},
+            {FIELD_LITERAL(0x0038526adeed0c55,0x00dd68c607e3fe85,0x00f746ddd48a5d57,0x0042f2952b963b7c,0x001cbbd6876d5ec2,0x005e341470bca5c2,0x00871d41e085f413,0x00e53ab098f45732)},
+        }}, {{
+            {FIELD_LITERAL(0x004d51124797c831,0x008f5ae3750347ad,0x0070ced94c1a0c8e,0x00f6db2043898e64,0x000d00c9a5750cd0,0x000741ec59bad712,0x003c9d11aab37b7f,0x00a67ba169807714)},
+            {FIELD_LITERAL(0x00adb2c1566e8b8f,0x0096c68a35771a9a,0x00869933356f334a,0x00ba9c93459f5962,0x009ec73fb6e8ca4b,0x003c3802c27202e1,0x0031f5b733e0c008,0x00f9058c19611fa9)},
+            {FIELD_LITERAL(0x00238f01814a3421,0x00c325a44b6cce28,0x002136f97aeb0e73,0x000cac8268a4afe2,0x0022fd218da471b3,0x009dcd8dfff8def9,0x00cb9f8181d999bb,0x00143ae56edea349)},
+        }}, {{
+            {FIELD_LITERAL(0x0000623bf87622c5,0x00a1966fdd069496,0x00c315b7b812f9fc,0x00bdf5efcd128b97,0x001d464f532e3e16,0x003cd94f081bfd7e,0x00ed9dae12ce4009,0x002756f5736eee70)},
+            {FIELD_LITERAL(0x00a5187e6ee7341b,0x00e6d52e82d83b6e,0x00df3c41323094a7,0x00b3324f444e9de9,0x00689eb21a35bfe5,0x00f16363becd548d,0x00e187cc98e7f60f,0x00127d9062f0ccab)},
+            {FIELD_LITERAL(0x004ad71b31c29e40,0x00a5fcace12fae29,0x004425b5597280ed,0x00e7ef5d716c3346,0x0010b53ada410ac8,0x0092310226060c9b,0x0091c26128729c7e,0x0088b42900f8ec3b)},
+        }}, {{
+            {FIELD_LITERAL(0x00f1e26e9762d4a8,0x00d9d74082183414,0x00ffec9bd57a0282,0x000919e128fd497a,0x00ab7ae7d00fe5f8,0x0054dc442851ff68,0x00c9ebeb3b861687,0x00507f7cab8b698f)},
+            {FIELD_LITERAL(0x00c13c5aae3ae341,0x009c6c9ed98373e7,0x00098f26864577a8,0x0015b886e9488b45,0x0037692c42aadba5,0x00b83170b8e7791c,0x001670952ece1b44,0x00fd932a39276da2)},
+            {FIELD_LITERAL(0x0081a3259bef3398,0x005480fff416107b,0x00ce4f607d21be98,0x003ffc084b41df9b,0x0043d0bb100502d1,0x00ec35f575ba3261,0x00ca18f677300ef3,0x00e8bb0a827d8548)},
+        }}, {{
+            {FIELD_LITERAL(0x00df76b3328ada72,0x002e20621604a7c2,0x00f910638a105b09,0x00ef4724d96ef2cd,0x00377d83d6b8a2f7,0x00b4f48805ade324,0x001cd5da8b152018,0x0045af671a20ca7f)},
+            {FIELD_LITERAL(0x009ae3b93a56c404,0x004a410b7a456699,0x00023a619355e6b2,0x009cdc7297387257,0x0055b94d4ae70d04,0x002cbd607f65b005,0x003208b489697166,0x00ea2aa058867370)},
+            {FIELD_LITERAL(0x00f29d2598ee3f32,0x00b4ac5385d82adc,0x007633eaf04df19b,0x00aa2d3d77ceab01,0x004a2302fcbb778a,0x00927f225d5afa34,0x004a8e9d5047f237,0x008224ae9dbce530)},
+        }}, {{
+            {FIELD_LITERAL(0x001cf640859b02f8,0x00758d1d5d5ce427,0x00763c784ef4604c,0x005fa81aee205270,0x00ac537bfdfc44cb,0x004b919bd342d670,0x00238508d9bf4b7a,0x00154888795644f3)},
+            {FIELD_LITERAL(0x00c845923c084294,0x00072419a201bc25,0x0045f408b5f8e669,0x00e9d6a186b74dfe,0x00e19108c68fa075,0x0017b91d874177b7,0x002f0ca2c7912c5a,0x009400aa385a90a2)},
+            {FIELD_LITERAL(0x0071110b01482184,0x00cfed0044f2bef8,0x0034f2901cf4662e,0x003b4ae2a67f9834,0x00cca9b96fe94810,0x00522507ae77abd0,0x00bac7422721e73e,0x0066622b0f3a62b0)},
+        }}, {{
+            {FIELD_LITERAL(0x00f8ac5cf4705b6a,0x00867d82dcb457e3,0x007e13ab2ccc2ce9,0x009ee9a018d3930e,0x008370f8ecb42df8,0x002d9f019add263e,0x003302385b92d196,0x00a15654536e2c0c)},
+            {FIELD_LITERAL(0x0026ef1614e160af,0x00c023f9edfc9c76,0x00cff090da5f57ba,0x0076db7a66643ae9,0x0019462f8c646999,0x008fec00b3854b22,0x00d55041692a0a1c,0x0065db894215ca00)},
+            {FIELD_LITERAL(0x00a925036e0a451c,0x002a0390c36b6cc1,0x00f27020d90894f4,0x008d90d52cbd3d7f,0x00e1d0137392f3b8,0x00f017c158b51a8f,0x00cac313d3ed7dbc,0x00b99a81e3eb42d3)},
+        }}, {{
+            {FIELD_LITERAL(0x00b54850275fe626,0x0053a3fd1ec71140,0x00e3d2d7dbe096fa,0x00e4ac7b595cce4c,0x0077bad449c0a494,0x00b7c98814afd5b3,0x0057226f58486cf9,0x00b1557154f0cc57)},
+            {FIELD_LITERAL(0x008cc9cd236315c0,0x0031d9c5b39fda54,0x00a5713ef37e1171,0x00293d5ae2886325,0x00c4aba3e05015e1,0x0003f35ef78e4fc6,0x0039d6bd3ac1527b,0x0019d7c3afb77106)},
+            {FIELD_LITERAL(0x007b162931a985af,0x00ad40a2e0daa713,0x006df27c4009f118,0x00503e9f4e2e8bec,0x00751a77c82c182d,0x000298937769245b,0x00ffb1e8fabf9ee5,0x0008334706e09abe)},
+        }}, {{
+            {FIELD_LITERAL(0x00dbca4e98a7dcd9,0x00ee29cfc78bde99,0x00e4a3b6995f52e9,0x0045d70189ae8096,0x00fd2a8a3b9b0d1b,0x00af1793b107d8e1,0x00dbf92cbe4afa20,0x00da60f798e3681d)},
+            {FIELD_LITERAL(0x004246bfcecc627a,0x004ba431246c03a4,0x00bd1d101872d497,0x003b73d3f185ee16,0x001feb2e2678c0e3,0x00ff13c5a89dec76,0x00ed06042e771d8f,0x00a4fd2a897a83dd)},
+            {FIELD_LITERAL(0x009a4a3be50d6597,0x00de3165fc5a1096,0x004f3f56e345b0c7,0x00f7bf721d5ab8bc,0x004313e47b098c50,0x00e4c7d5c0e1adbb,0x002e3e3db365051e,0x00a480c2cd6a96fb)},
+        }}, {{
+            {FIELD_LITERAL(0x00417fa30a7119ed,0x00af257758419751,0x00d358a487b463d4,0x0089703cc720b00d,0x00ce56314ff7f271,0x0064db171ade62c1,0x00640b36d4a22fed,0x00424eb88696d23f)},
+            {FIELD_LITERAL(0x004ede34af2813f3,0x00d4a8e11c9e8216,0x004796d5041de8a5,0x00c4c6b4d21cc987,0x00e8a433ee07fa1e,0x0055720b5abcc5a1,0x008873ea9c74b080,0x005b3fec1ab65d48)},
+            {FIELD_LITERAL(0x0047e5277db70ec5,0x000a096c66db7d6b,0x00b4164cc1730159,0x004a9f783fe720fe,0x00a8177b94449dbc,0x0095a24ff49a599f,0x0069c1c578250cbc,0x00452019213debf4)},
+        }}, {{
+            {FIELD_LITERAL(0x0021ce99e09ebda3,0x00fcbd9f91875ad0,0x009bbf6b7b7a0b5f,0x00388886a69b1940,0x00926a56d0f81f12,0x00e12903c3358d46,0x005dfce4e8e1ce9d,0x0044cfa94e2f7e23)},
+            {FIELD_LITERAL(0x001bd59c09e982ea,0x00f72daeb937b289,0x0018b76dca908e0e,0x00edb498512384ad,0x00ce0243b6cc9538,0x00f96ff690cb4e70,0x007c77bf9f673c8d,0x005bf704c088a528)},
+            {FIELD_LITERAL(0x0093d4628dcb33be,0x0095263d51d42582,0x0049b3222458fe06,0x00e7fce73b653a7f,0x003ca2ebce60b369,0x00c5de239a32bea4,0x0063b8b3d71fb6bf,0x0039aeeb78a1a839)},
+        }}, {{
+            {FIELD_LITERAL(0x007dc52da400336c,0x001fded1e15b9457,0x00902e00f5568e3a,0x00219bef40456d2d,0x005684161fb3dbc9,0x004a4e9be49a76ea,0x006e685ae88b78ff,0x0021c42f13042d3c)},
+            {FIELD_LITERAL(0x00fb22bb5fd3ce50,0x0017b48aada7ae54,0x00fd5c44ad19a536,0x000ccc4e4e55e45c,0x00fd637d45b4c3f5,0x0038914e023c37cf,0x00ac1881d6a8d898,0x00611ed8d3d943a8)},
+            {FIELD_LITERAL(0x0056e2259d113d2b,0x00594819b284ec16,0x00c7bf794bb36696,0x00721ee75097cdc6,0x00f71be9047a2892,0x00df6ba142564edf,0x0069580b7a184e8d,0x00f056e38fca0fee)},
+        }}, {{
+            {FIELD_LITERAL(0x009df98566a18c6d,0x00cf3a200968f219,0x0044ba60da6d9086,0x00dbc9c0e344da03,0x000f9401c4466855,0x00d46a57c5b0a8d1,0x00875a635d7ac7c6,0x00ef4a933b7e0ae6)},
+            {FIELD_LITERAL(0x005e8694077a1535,0x008bef75f71c8f1d,0x000a7c1316423511,0x00906e1d70604320,0x003fc46c1a2ffbd6,0x00d1d5022e68f360,0x002515fba37bbf46,0x00ca16234e023b44)},
+            {FIELD_LITERAL(0x00787c99561f4690,0x00a857a8c1561f27,0x00a10df9223c09fe,0x00b98a9562e3b154,0x004330b8744c3ed2,0x00e06812807ec5c4,0x00e4cf6a7db9f1e3,0x00d95b089f132a34)},
+        }}, {{
+            {FIELD_LITERAL(0x002922b39ca33eec,0x0090d12a5f3ab194,0x00ab60c02fb5f8ed,0x00188d292abba1cf,0x00e10edec9698f6e,0x0069a4d9934133c8,0x0024aac40e6d3d06,0x001702c2177661b0)},
+            {FIELD_LITERAL(0x00139078397030bd,0x000e3c447e859a00,0x0064a5b334c82393,0x00b8aabeb7358093,0x00020778bb9ae73b,0x0032ee94c7892a18,0x008215253cb41bda,0x005e2797593517ae)},
+            {FIELD_LITERAL(0x0083765a5f855d4a,0x0051b6d1351b8ee2,0x00116de548b0f7bb,0x0087bd88703affa0,0x0095b2cc34d7fdd2,0x0084cd81b53f0bc8,0x008562fc995350ed,0x00a39abb193651e3)},
+        }}, {{
+            {FIELD_LITERAL(0x0019e23f0474b114,0x00eb94c2ad3b437e,0x006ddb34683b75ac,0x00391f9209b564c6,0x00083b3bb3bff7aa,0x00eedcd0f6dceefc,0x00b50817f794fe01,0x0036474deaaa75c9)},
+            {FIELD_LITERAL(0x0091868594265aa2,0x00797accae98ca6d,0x0008d8c5f0f8a184,0x00d1f4f1c2b2fe6e,0x0036783dfb48a006,0x008c165120503527,0x0025fd780058ce9b,0x0068beb007be7d27)},
+            {FIELD_LITERAL(0x00d0ff88aa7c90c2,0x00b2c60dacf53394,0x0094a7284d9666d6,0x00bed9022ce7a19d,0x00c51553f0cd7682,0x00c3fb870b124992,0x008d0bc539956c9b,0x00fc8cf258bb8885)},
+        }}, {{
+            {FIELD_LITERAL(0x003667bf998406f8,0x0000115c43a12975,0x001e662f3b20e8fd,0x0019ffa534cb24eb,0x00016be0dc8efb45,0x00ff76a8b26243f5,0x00ae20d241a541e3,0x0069bd6af13cd430)},
+            {FIELD_LITERAL(0x0045fdc16487cda3,0x00b2d8e844cf2ed7,0x00612c50e88c1607,0x00a08aabc66c1672,0x006031fdcbb24d97,0x001b639525744b93,0x004409d62639ab17,0x00a1853d0347ab1d)},
+            {FIELD_LITERAL(0x0075a1a56ebf5c21,0x00a3e72be9ac53ed,0x00efcde1629170c2,0x0004225fe91ef535,0x0088049fc73dfda7,0x004abc74857e1288,0x0024e2434657317c,0x00d98cb3d3e5543c)},
+        }}, {{
+            {FIELD_LITERAL(0x00b4b53eab6bdb19,0x009b22d8b43711d0,0x00d948b9d961785d,0x00cb167b6f279ead,0x00191de3a678e1c9,0x00d9dd9511095c2e,0x00f284324cd43067,0x00ed74fa535151dd)},
+            {FIELD_LITERAL(0x007e32c049b5c477,0x009d2bfdbd9bcfd8,0x00636e93045938c6,0x007fde4af7687298,0x0046a5184fafa5d3,0x0079b1e7f13a359b,0x00875adf1fb927d6,0x00333e21c61bcad2)},
+            {FIELD_LITERAL(0x00048014f73d8b8d,0x0075684aa0966388,0x0092be7df06dc47c,0x0097cebcd0f5568a,0x005a7004d9c4c6a9,0x00b0ecbb659924c7,0x00d90332dd492a7c,0x0057fc14df11493d)},
+        }}, {{
+            {FIELD_LITERAL(0x0008ed8ea0ad95be,0x0041d324b9709645,0x00e25412257a19b4,0x0058df9f3423d8d2,0x00a9ab20def71304,0x009ae0dbf8ac4a81,0x00c9565977e4392a,0x003c9269444baf55)},
+            {FIELD_LITERAL(0x007df6cbb926830b,0x00d336058ae37865,0x007af47dac696423,0x0048d3011ec64ac8,0x006b87666e40049f,0x0036a2e0e51303d7,0x00ba319bd79dbc55,0x003e2737ecc94f53)},
+            {FIELD_LITERAL(0x00d296ff726272d9,0x00f6d097928fcf57,0x00e0e616a55d7013,0x00deaf454ed9eac7,0x0073a56bedef4d92,0x006ccfdf6fc92e19,0x009d1ee1371a7218,0x00ee3c2ee4462d80)},
+        }}, {{
+            {FIELD_LITERAL(0x00437bce9bccdf9d,0x00e0c8e2f85dc0a3,0x00c91a7073995a19,0x00856ec9fe294559,0x009e4b33394b156e,0x00e245b0dc497e5c,0x006a54e687eeaeff,0x00f1cd1cd00fdb7c)},
+            {FIELD_LITERAL(0x008132ae5c5d8cd1,0x00121d68324a1d9f,0x00d6be9dafcb8c76,0x00684d9070edf745,0x00519fbc96d7448e,0x00388182fdc1f27e,0x000235baed41f158,0x00bf6cf6f1a1796a)},
+            {FIELD_LITERAL(0x002adc4b4d148219,0x003084ada0d3a90a,0x0046de8aab0f2e4e,0x00452d342a67b5fd,0x00d4b50f01d4de21,0x00db6d9fc0cefb79,0x008c184c86a462cd,0x00e17c83764d42da)},
+        }}, {{
+            {FIELD_LITERAL(0x007b2743b9a1e01a,0x007847ffd42688c4,0x006c7844d610a316,0x00f0cb8b250aa4b0,0x00a19060143b3ae6,0x0014eb10b77cfd80,0x000170905729dd06,0x00063b5b9cd72477)},
+            {FIELD_LITERAL(0x00ce382dc7993d92,0x00021153e938b4c8,0x00096f7567f48f51,0x0058f81ddfe4b0d5,0x00cc379a56b355c7,0x002c760770d3e819,0x00ee22d1d26e5a40,0x00de6d93d5b082d7)},
+            {FIELD_LITERAL(0x000a91a42c52e056,0x00185f6b77fce7ea,0x000803c51962f6b5,0x0022528582ba563d,0x0043f8040e9856d6,0x0085a29ec81fb860,0x005f9a611549f5ff,0x00c1f974ecbd4b06)},
+        }}, {{
+            {FIELD_LITERAL(0x005b64c6fd65ec97,0x00c1fdd7f877bc7f,0x000d9cc6c89f841c,0x005c97b7f1aff9ad,0x0075e3c61475d47e,0x001ecb1ba8153011,0x00fe7f1c8d71d40d,0x003fa9757a229832)},
+            {FIELD_LITERAL(0x00ffc5c89d2b0cba,0x00d363d42e3e6fc3,0x0019a1a0118e2e8a,0x00f7baeff48882e1,0x001bd5af28c6b514,0x0055476ca2253cb2,0x00d8eb1977e2ddf3,0x00b173b1adb228a1)},
+            {FIELD_LITERAL(0x00f2cb99dd0ad707,0x00e1e08b6859ddd8,0x000008f2d0650bcc,0x00d7ed392f8615c3,0x00976750a94da27f,0x003e83bb0ecb69ba,0x00df8e8d15c14ac6,0x00f9f7174295d9c2)},
+        }}, {{
+            {FIELD_LITERAL(0x00f11cc8e0e70bcb,0x00e5dc689974e7dd,0x0014e409f9ee5870,0x00826e6689acbd63,0x008a6f4e3d895d88,0x00b26a8da41fd4ad,0x000fb7723f83efd7,0x009c749db0a5f6c3)},
+            {FIELD_LITERAL(0x002389319450f9ba,0x003677f31aa1250a,0x0092c3db642f38cb,0x00f8b64c0dfc9773,0x00cd49fe3505b795,0x0068105a4090a510,0x00df0ba2072a8bb6,0x00eb396143afd8be)},
+            {FIELD_LITERAL(0x00a0d4ecfb24cdff,0x00ddaf8008ba6479,0x00f0b3e36d4b0f44,0x003734bd3af1f146,0x00b87e2efc75527e,0x00d230df55ddab50,0x002613257ae56c1d,0x00bc0946d135934d)},
+        }}, {{
+            {FIELD_LITERAL(0x00468711bd994651,0x0033108fa67561bf,0x0089d760192a54b4,0x00adc433de9f1871,0x000467d05f36e050,0x007847e0f0579f7f,0x00a2314ad320052d,0x00b3a93649f0b243)},
+            {FIELD_LITERAL(0x0067f8f0c4fe26c9,0x0079c4a3cc8f67b9,0x0082b1e62f23550d,0x00f2d409caefd7f5,0x0080e67dcdb26e81,0x0087ae993ea1f98a,0x00aa108becf61d03,0x001acf11efb608a3)},
+            {FIELD_LITERAL(0x008225febbab50d9,0x00f3b605e4dd2083,0x00a32b28189e23d2,0x00d507e5e5eb4c97,0x005a1a84e302821f,0x0006f54c1c5f08c7,0x00a347c8cb2843f0,0x0009f73e9544bfa5)},
+        }}, {{
+            {FIELD_LITERAL(0x006c59c9ae744185,0x009fc32f1b4282cd,0x004d6348ca59b1ac,0x00105376881be067,0x00af4096013147dc,0x004abfb5a5cb3124,0x000d2a7f8626c354,0x009c6ed568e07431)},
+            {FIELD_LITERAL(0x00e828333c297f8b,0x009ef3cf8c3f7e1f,0x00ab45f8fff31cb9,0x00c8b4178cb0b013,0x00d0c50dd3260a3f,0x0097126ac257f5bc,0x0042376cc90c705a,0x001d96fdb4a1071e)},
+            {FIELD_LITERAL(0x00542d44d89ee1a8,0x00306642e0442d98,0x0090853872b87338,0x002362cbf22dc044,0x002c222adff663b8,0x0067c924495fcb79,0x000e621d983c977c,0x00df77a9eccb66fb)},
+        }}, {{
+            {FIELD_LITERAL(0x002809e4bbf1814a,0x00b9e854f9fafb32,0x00d35e67c10f7a67,0x008f1bcb76e748cf,0x004224d9515687d2,0x005ba0b774e620c4,0x00b5e57db5d54119,0x00e15babe5683282)},
+            {FIELD_LITERAL(0x00832d02369b482c,0x00cba52ff0d93450,0x003fa9c908d554db,0x008d1e357b54122f,0x00abd91c2dc950c6,0x007eff1df4c0ec69,0x003f6aeb13fb2d31,0x00002d6179fc5b2c)},
+            {FIELD_LITERAL(0x0046c9eda81c9c89,0x00b60cb71c8f62fc,0x0022f5a683baa558,0x00f87319fccdf997,0x009ca09b51ce6a22,0x005b12baf4af7d77,0x008a46524a1e33e2,0x00035a77e988be0d)},
+        }}, {{
+            {FIELD_LITERAL(0x00a7efe46a7dbe2f,0x002f66fd55014fe7,0x006a428afa1ff026,0x0056caaa9604ab72,0x0033f3bcd7fac8ae,0x00ccb1aa01c86764,0x00158d1edf13bf40,0x009848ee76fcf3b4)},
+            {FIELD_LITERAL(0x00a9e7730a819691,0x00d9cc73c4992b70,0x00e299bde067de5a,0x008c314eb705192a,0x00e7226f17e8a3cc,0x0029dfd956e65a47,0x0053a8e839073b12,0x006f942b2ab1597e)},
+            {FIELD_LITERAL(0x001c3d780ecd5e39,0x0094f247fbdcc5fe,0x00d5c786fd527764,0x00b6f4da74f0db2a,0x0080f1f8badcd5fc,0x00f36a373ad2e23b,0x00f804f9f4343bf2,0x00d1af40ec623982)},
+        }}, {{
+            {FIELD_LITERAL(0x0082aeace5f1b144,0x00f68b3108cf4dd3,0x00634af01dde3020,0x000beab5df5c2355,0x00e8b790d1b49b0b,0x00e48d15854e36f4,0x0040ab2d95f3db9f,0x002711c4ed9e899a)},
+            {FIELD_LITERAL(0x0039343746531ebe,0x00c8509d835d429d,0x00e79eceff6b0018,0x004abfd31e8efce5,0x007bbfaaa1e20210,0x00e3be89c193e179,0x001c420f4c31d585,0x00f414a315bef5ae)},
+            {FIELD_LITERAL(0x007c296a24990df8,0x00d5d07525a75588,0x00dd8e113e94b7e7,0x007bbc58febe0cc8,0x0029f51af9bfcad3,0x007e9311ec7ab6f3,0x009a884de1676343,0x0050d5f2dce84be9)},
+        }}, {{
+            {FIELD_LITERAL(0x005fa020cca2450a,0x00491c29db6416d8,0x0037cefe3f9f9a85,0x003d405230647066,0x0049e835f0fdbe89,0x00feb78ac1a0815c,0x00828e4b32dc9724,0x00db84f2dc8d6fd4)},
+            {FIELD_LITERAL(0x0098cddc8b39549a,0x006da37e3b05d22c,0x00ce633cfd4eb3cb,0x00fda288ef526acd,0x0025338878c5d30a,0x00f34438c4e5a1b4,0x00584efea7c310f1,0x0041a551f1b660ad)},
+            {FIELD_LITERAL(0x00d7f7a8fbd6437a,0x0062872413bf3753,0x00ad4bbcb43c584b,0x007fe49be601d7e3,0x0077c659789babf4,0x00eb45fcb06a741b,0x005ce244913f9708,0x0088426401736326)},
+        }}, {{
+            {FIELD_LITERAL(0x007bf562ca768d7c,0x006c1f3a174e387c,0x00f024b447fee939,0x007e7af75f01143f,0x003adb70b4eed89d,0x00e43544021ad79a,0x0091f7f7042011f6,0x0093c1a1ee3a0ddc)},
+            {FIELD_LITERAL(0x00a0b68ec1eb72d2,0x002c03235c0d45a0,0x00553627323fe8c5,0x006186e94b17af94,0x00a9906196e29f14,0x0025b3aee6567733,0x007e0dd840080517,0x0018eb5801a4ba93)},
+            {FIELD_LITERAL(0x00d7fe7017bf6a40,0x006e3f0624be0c42,0x00ffbba205358245,0x00f9fc2cf8194239,0x008d93b37bf15b4e,0x006ddf2e38be8e95,0x002b6e79bf5fcff9,0x00ab355da425e2de)},
+        }}, {{
+            {FIELD_LITERAL(0x00938f97e20be973,0x0099141a36aaf306,0x0057b0ca29e545a1,0x0085db571f9fbc13,0x008b333c554b4693,0x0043ab6ef3e241cb,0x0054fb20aa1e5c70,0x00be0ff852760adf)},
+            {FIELD_LITERAL(0x003973d8938971d6,0x002aca26fa80c1f5,0x00108af1faa6b513,0x00daae275d7924e6,0x0053634ced721308,0x00d2355fe0bbd443,0x00357612b2d22095,0x00f9bb9dd4136cf3)},
+            {FIELD_LITERAL(0x002bff12cf5e03a5,0x001bdb1fa8a19cf8,0x00c91c6793f84d39,0x00f869f1b2eba9af,0x0059bc547dc3236b,0x00d91611d6d38689,0x00e062daaa2c0214,0x00ed3c047cc2bc82)},
+        }}, {{
+            {FIELD_LITERAL(0x000050d70c32b31a,0x001939d576d437b3,0x00d709e598bf9fe6,0x00a885b34bd2ee9e,0x00dd4b5c08ab1a50,0x0091bebd50b55639,0x00cf79ff64acdbc6,0x006067a39d826336)},
+            {FIELD_LITERAL(0x0062dd0fb31be374,0x00fcc96b84c8e727,0x003f64f1375e6ae3,0x0057d9b6dd1af004,0x00d6a167b1103c7b,0x00dd28f3180fb537,0x004ff27ad7167128,0x008934c33461f2ac)},
+            {FIELD_LITERAL(0x0065b472b7900043,0x00ba7efd2ff1064b,0x000b67d6c4c3020f,0x0012d28469f4e46d,0x0031c32939703ec7,0x00b49f0bce133066,0x00f7e10416181d47,0x005c90f51867eecc)},
+        }}, {{
+            {FIELD_LITERAL(0x0051207abd179101,0x00fc2a5c20d9c5da,0x00fb9d5f2701b6df,0x002dd040fdea82b8,0x00f163b0738442ff,0x00d9736bd68855b8,0x00e0d8e93005e61c,0x00df5a40b3988570)},
+            {FIELD_LITERAL(0x0006918f5dfce6dc,0x00d4bf1c793c57fb,0x0069a3f649435364,0x00e89a50e5b0cd6e,0x00b9f6a237e973af,0x006d4ed8b104e41d,0x00498946a3924cd2,0x00c136ec5ac9d4f7)},
+            {FIELD_LITERAL(0x0011a9c290ac5336,0x002b9a2d4a6a6533,0x009a8a68c445d937,0x00361b27b07e5e5c,0x003c043b1755b974,0x00b7eb66cf1155ee,0x0077af5909eefff2,0x0098f609877cc806)},
+        }}, {{
+            {FIELD_LITERAL(0x00ab13af436bf8f4,0x000bcf0a0dac8574,0x00d50c864f705045,0x00c40e611debc842,0x0085010489bd5caa,0x007c5050acec026f,0x00f67d943c8da6d1,0x00de1da0278074c6)},
+            {FIELD_LITERAL(0x00b373076597455f,0x00e83f1af53ac0f5,0x0041f63c01dc6840,0x0097dea19b0c6f4b,0x007f9d63b4c1572c,0x00e692d492d0f5f0,0x00cbcb392e83b4ad,0x0069c0f39ed9b1a8)},
+            {FIELD_LITERAL(0x00861030012707c9,0x009fbbdc7fd4aafb,0x008f591d6b554822,0x00df08a41ea18ade,0x009d7d83e642abea,0x0098c71bda3b78ff,0x0022c89e7021f005,0x0044d29a3fe1e3c4)},
+        }}, {{
+            {FIELD_LITERAL(0x00e748cd7b5c52f2,0x00ea9df883f89cc3,0x0018970df156b6c7,0x00c5a46c2a33a847,0x00cbde395e32aa09,0x0072474ebb423140,0x00fb00053086a23d,0x001dafcfe22d4e1f)},
+            {FIELD_LITERAL(0x00c903ee6d825540,0x00add6c4cf98473e,0x007636efed4227f1,0x00905124ae55e772,0x00e6b38fab12ed53,0x0045e132b863fe55,0x003974662edb366a,0x00b1787052be8208)},
+            {FIELD_LITERAL(0x00a614b00d775c7c,0x00d7c78941cc7754,0x00422dd68b5dabc4,0x00a6110f0167d28b,0x00685a309c252886,0x00b439ffd5143660,0x003656e29ee7396f,0x00c7c9b9ed5ad854)},
+        }}, {{
+            {FIELD_LITERAL(0x0040f7e7c5b37bf2,0x0064e4dc81181bba,0x00a8767ae2a366b6,0x001496b4f90546f2,0x002a28493f860441,0x0021f59513049a3a,0x00852d369a8b7ee3,0x00dd2e7d8b7d30a9)},
+            {FIELD_LITERAL(0x00006e34a35d9fbc,0x00eee4e48b2f019a,0x006b344743003a5f,0x00541d514f04a7e3,0x00e81f9ee7647455,0x005e2b916c438f81,0x00116f8137b7eff0,0x009bd3decc7039d1)},
+            {FIELD_LITERAL(0x0005d226f434110d,0x00af8288b8ef21d5,0x004a7a52ef181c8c,0x00be0b781b4b06de,0x00e6e3627ded07e1,0x00e43aa342272b8b,0x00e86ab424577d84,0x00fb292c566e35bb)},
+        }}, {{
+            {FIELD_LITERAL(0x00334f5303ea1222,0x00dfb3dbeb0a5d3e,0x002940d9592335c1,0x00706a7a63e8938a,0x005a533558bc4caf,0x00558e33192022a9,0x00970d9faf74c133,0x002979fcb63493ca)},
+            {FIELD_LITERAL(0x00e38abece3c82ab,0x005a51f18a2c7a86,0x009dafa2e86d592e,0x00495a62eb688678,0x00b79df74c0eb212,0x0023e8cc78b75982,0x005998cb91075e13,0x00735aa9ba61bc76)},
+            {FIELD_LITERAL(0x00d9f7a82ddbe628,0x00a1fc782889ae0f,0x0071ffda12d14b66,0x0037cf4eca7fb3d5,0x00c80bc242c58808,0x0075bf8c2d08c863,0x008d41f31afc52a7,0x00197962ecf38741)},
+        }}, {{
+            {FIELD_LITERAL(0x006e9f475cccf2ee,0x00454b9cd506430c,0x00224a4fb79ee479,0x0062e3347ef0b5e2,0x0034fd2a3512232a,0x00b8b3cb0f457046,0x00eb20165daa38ec,0x00128eebc2d9c0f7)},
+            {FIELD_LITERAL(0x00bfc5fa1e4ea21f,0x00c21d7b6bb892e6,0x00cf043f3acf0291,0x00c13f2f849b3c90,0x00d1a97ebef10891,0x0061e130a445e7fe,0x0019513fdedbf22b,0x001d60c813bff841)},
+            {FIELD_LITERAL(0x0019561c7fcf0213,0x00e3dca6843ebd77,0x0068ea95b9ca920e,0x009bdfb70f253595,0x00c68f59186aa02a,0x005aee1cca1c3039,0x00ab79a8a937a1ce,0x00b9a0e549959e6f)},
+        }}, {{
+            {FIELD_LITERAL(0x00c79e0b6d97dfbd,0x00917c71fd2bc6e8,0x00db7529ccfb63d8,0x00be5be957f17866,0x00a9e11fdc2cdac1,0x007b91a8e1f44443,0x00a3065e4057d80f,0x004825f5b8d5f6d4)},
+            {FIELD_LITERAL(0x003e4964fa8a8fc8,0x00f6a1cdbcf41689,0x00943cb18fe7fda7,0x00606dafbf34440a,0x005d37a86399c789,0x00e79a2a69417403,0x00fe34f7e68b8866,0x0011f448ed2df10e)},
+            {FIELD_LITERAL(0x00f1f57efcc1fcc4,0x00513679117de154,0x002e5b5b7c86d8c3,0x009f6486561f9cfb,0x00169e74b0170cf7,0x00900205af4af696,0x006acfddb77853f3,0x00df184c90f31068)},
+        }}, {{
+            {FIELD_LITERAL(0x00b37396c3320791,0x00fc7b67175c5783,0x00c36d2cd73ecc38,0x0080ebcc0b328fc5,0x0043a5b22b35d35d,0x00466c9f1713c9da,0x0026ad346dcaa8da,0x007c684e701183a6)},
+            {FIELD_LITERAL(0x00fd579ffb691713,0x00b76af4f81c412d,0x00f239de96110f82,0x00e965fb437f0306,0x00ca7e9436900921,0x00e487f1325fa24a,0x00633907de476380,0x00721c62ac5b8ea0)},
+            {FIELD_LITERAL(0x00c0d54e542eb4f9,0x004ed657171c8dcf,0x00b743a4f7c2a39b,0x00fd9f93ed6cc567,0x00307fae3113e58b,0x0058aa577c93c319,0x00d254556f35b346,0x00491aada2203f0d)},
+        }}, {{
+            {FIELD_LITERAL(0x00dff3103786ff34,0x000144553b1f20c3,0x0095613baeb930e4,0x00098058275ea5d4,0x007cd1402b046756,0x0074d74e4d58aee3,0x005f93fc343ff69b,0x00873df17296b3b0)},
+            {FIELD_LITERAL(0x00c4a1fb48635413,0x00b5dd54423ad59f,0x009ff5d53fd24a88,0x003c98d267fc06a7,0x002db7cb20013641,0x00bd1d6716e191f2,0x006dbc8b29094241,0x0044bbf233dafa2c)},
+            {FIELD_LITERAL(0x0055838d41f531e6,0x00bf6a2dd03c81b2,0x005827a061c4839e,0x0000de2cbb36aac3,0x002efa29d9717478,0x00f9e928cc8a77ba,0x00c134b458def9ef,0x00958a182223fc48)},
+        }}, {{
+            {FIELD_LITERAL(0x000a9ee23c06881f,0x002c727d3d871945,0x00f47d971512d24a,0x00671e816f9ef31a,0x00883af2cfaad673,0x00601f98583d6c9a,0x00b435f5adc79655,0x00ad87b71c04bff2)},
+            {FIELD_LITERAL(0x007860d99db787cf,0x00fda8983018f4a8,0x008c8866bac4743c,0x00ef471f84c82a3f,0x00abea5976d3b8e7,0x00714882896cd015,0x00b49fae584ddac5,0x008e33a1a0b69c81)},
+            {FIELD_LITERAL(0x007b6ee2c9e8a9ec,0x002455dbbd89d622,0x006490cf4eaab038,0x00d925f6c3081561,0x00153b3047de7382,0x003b421f8bdceb6f,0x00761a4a5049da78,0x00980348c5202433)},
+        }}, {{
+            {FIELD_LITERAL(0x007f8a43da97dd5c,0x00058539c800fc7b,0x0040f3cf5a28414a,0x00d68dd0d95283d6,0x004adce9da90146e,0x00befa41c7d4f908,0x007603bc2e3c3060,0x00bdf360ab3545db)},
+            {FIELD_LITERAL(0x00eebfd4e2312cc3,0x00474b2564e4fc8c,0x003303ef14b1da9b,0x003c93e0e66beb1d,0x0013619b0566925a,0x008817c24d901bf3,0x00b62bd8898d218b,0x0075a7716f1e88a2)},
+            {FIELD_LITERAL(0x0009218da1e6890f,0x0026907f5fd02575,0x004dabed5f19d605,0x003abf181870249d,0x00b52fd048cc92c4,0x00b6dd51e415a5c5,0x00d9eb82bd2b4014,0x002c865a43b46b43)},
+        }}, {{
+            {FIELD_LITERAL(0x0070047189452f4c,0x00f7ad12e1ce78d5,0x00af1ba51ec44a8b,0x005f39f63e667cd6,0x00058eac4648425e,0x00d7fdab42bea03b,0x0028576a5688de15,0x00af973209e77c10)},
+            {FIELD_LITERAL(0x00c338b915d8fef0,0x00a893292045c39a,0x0028ab4f2eba6887,0x0060743cb519fd61,0x0006213964093ac0,0x007c0b7a43f6266d,0x008e3557c4fa5bda,0x002da976de7b8d9d)},
+            {FIELD_LITERAL(0x0048729f8a8b6dcd,0x00fe23b85cc4d323,0x00e7384d16e4db0e,0x004a423970678942,0x00ec0b763345d4ba,0x00c477b9f99ed721,0x00c29dad3777b230,0x001c517b466f7df6)},
+        }}, {{
+            {FIELD_LITERAL(0x006366c380f7b574,0x001c7d1f09ff0438,0x003e20a7301f5b22,0x00d3efb1916d28f6,0x0049f4f81060ce83,0x00c69d91ea43ced1,0x002b6f3e5cd269ed,0x005b0fb22ce9ec65)},
+            {FIELD_LITERAL(0x00aa2261022d883f,0x00ebcca4548010ac,0x002528512e28a437,0x0070ca7676b66082,0x0084bda170f7c6d3,0x00581b4747c9b8bb,0x005c96a01061c7e2,0x00fb7c4a362b5273)},
+            {FIELD_LITERAL(0x00c30020eb512d02,0x0060f288283a4d26,0x00b7ed13becde260,0x0075ebb74220f6e9,0x00701079fcfe8a1f,0x001c28fcdff58938,0x002e4544b8f4df6b,0x0060c5bc4f1a7d73)},
+        }}, {{
+            {FIELD_LITERAL(0x00ae307cf069f701,0x005859f222dd618b,0x00212d6c46ec0b0d,0x00a0fe4642afb62d,0x00420d8e4a0a8903,0x00a80ff639bdf7b0,0x0019bee1490b5d8e,0x007439e4b9c27a86)},
+            {FIELD_LITERAL(0x00a94700032a093f,0x0076e96c225216e7,0x00a63a4316e45f91,0x007d8bbb4645d3b2,0x00340a6ff22793eb,0x006f935d4572aeb7,0x00b1fb69f00afa28,0x009e8f3423161ed3)},
+            {FIELD_LITERAL(0x009ef49c6b5ced17,0x00a555e6269e9f0a,0x007e6f1d79ec73b5,0x009ac78695a32ac4,0x0001d77fbbcd5682,0x008cea1fee0aaeed,0x00f42bea82a53462,0x002e46ab96cafcc9)},
+        }}, {{
+            {FIELD_LITERAL(0x0051cfcc5885377a,0x00dce566cb1803ca,0x00430c7643f2c7d4,0x00dce1a1337bdcc0,0x0010d5bd7283c128,0x003b1b547f9b46fe,0x000f245e37e770ab,0x007b72511f022b37)},
+            {FIELD_LITERAL(0x0060db815bc4786c,0x006fab25beedc434,0x00c610d06084797c,0x000c48f08537bec0,0x0031aba51c5b93da,0x007968fa6e01f347,0x0030070da52840c6,0x00c043c225a4837f)},
+            {FIELD_LITERAL(0x001bcfd00649ee93,0x006dceb47e2a0fd5,0x00f2cebda0cf8fd0,0x00b6b9d9d1fbdec3,0x00815262e6490611,0x00ef7f5ce3176760,0x00e49cd0c998d58b,0x005fc6cc269ba57c)},
+        }}, {{
+            {FIELD_LITERAL(0x008940211aa0d633,0x00addae28136571d,0x00d68fdbba20d673,0x003bc6129bc9e21a,0x000346cf184ebe9a,0x0068774d741ebc7f,0x0019d5e9e6966557,0x0003cbd7f981b651)},
+            {FIELD_LITERAL(0x004a2902926f8d3f,0x00ad79b42637ab75,0x0088f60b90f2d4e8,0x0030f54ef0e398c4,0x00021dc9bf99681e,0x007ebf66fde74ee3,0x004ade654386e9a4,0x00e7485066be4c27)},
+            {FIELD_LITERAL(0x00445f1263983be0,0x004cf371dda45e6a,0x00744a89d5a310e7,0x001f20ce4f904833,0x00e746edebe66e29,0x000912ab1f6c153d,0x00f61d77d9b2444c,0x0001499cd6647610)},
+        }}
+    }
+};
+const struct curve448_precomputed_s *curve448_precomputed_base
+    = &curve448_precomputed_base_table;
+
+static const niels_t curve448_wnaf_base_table[32] = {
+    {{
+        {FIELD_LITERAL(0x00303cda6feea532,0x00860f1d5a3850e4,0x00226b9fa4728ccd,0x00e822938a0a0c0c,0x00263a61c9ea9216,0x001204029321b828,0x006a468360983c65,0x0002846f0a782143)},
+        {FIELD_LITERAL(0x00303cda6feea532,0x00860f1d5a3850e4,0x00226b9fa4728ccd,0x006822938a0a0c0c,0x00263a61c9ea9215,0x001204029321b828,0x006a468360983c65,0x0082846f0a782143)},
+        {FIELD_LITERAL(0x00ef8e22b275198d,0x00b0eb141a0b0e8b,0x001f6789da3cb38c,0x006d2ff8ed39073e,0x00610bdb69a167f3,0x00571f306c9689b4,0x00f557e6f84b2df8,0x002affd38b2c86db)},
+    }}, {{
+        {FIELD_LITERAL(0x00cea0fc8d2e88b5,0x00821612d69f1862,0x0074c283b3e67522,0x005a195ba05a876d,0x000cddfe557feea4,0x008046c795bcc5e5,0x00540969f4d6e119,0x00d27f96d6b143d5)},
+        {FIELD_LITERAL(0x000c3b1019d474e8,0x00e19533e4952284,0x00cc9810ba7c920a,0x00f103d2785945ac,0x00bfa5696cc69b34,0x00a8d3d51e9ca839,0x005623cb459586b9,0x00eae7ce1cd52e9e)},
+        {FIELD_LITERAL(0x0005a178751dd7d8,0x002cc3844c69c42f,0x00acbfe5efe10539,0x009c20f43431a65a,0x008435d96374a7b3,0x009ee57566877bd3,0x0044691725ed4757,0x001e87bb2fe2c6b2)},
+    }}, {{
+        {FIELD_LITERAL(0x000cedc4debf7a04,0x002ffa45000470ac,0x002e9f9678201915,0x0017da1208c4fe72,0x007d558cc7d656cb,0x0037a827287cf289,0x00142472d3441819,0x009c21f166cf8dd1)},
+        {FIELD_LITERAL(0x003ef83af164b2f2,0x000949a5a0525d0d,0x00f4498186cac051,0x00e77ac09ef126d2,0x0073ae0b2c9296e9,0x001c163f6922e3ed,0x0062946159321bea,0x00cfb79b22990b39)},
+        {FIELD_LITERAL(0x00b001431ca9e654,0x002d7e5eabcc9a3a,0x0052e8114c2f6747,0x0079ac4f94487f92,0x00bffd919b5d749c,0x00261f92ad15e620,0x00718397b7a97895,0x00c1443e6ebbc0c4)},
+    }}, {{
+        {FIELD_LITERAL(0x00eacd90c1e0a049,0x008977935b149fbe,0x0004cb9ba11c93dc,0x009fbd5b3470844d,0x004bc18c9bfc22cf,0x0057679a991839f3,0x00ef15b76fb4092e,0x0074a5173a225041)},
+        {FIELD_LITERAL(0x003f5f9d7ec4777b,0x00ab2e733c919c94,0x001bb6c035245ae5,0x00a325a49a883630,0x0033e9a9ea3cea2f,0x00e442a1eaa0e844,0x00b2116d5b0e71b8,0x00c16abed6d64047)},
+        {FIELD_LITERAL(0x00c560b5ed051165,0x001945adc5d65094,0x00e221865710f910,0x00cc12bc9e9b8ceb,0x004faa9518914e35,0x0017476d89d42f6d,0x00b8f637c8fa1c8b,0x0088c7d2790864b8)},
+    }}, {{
+        {FIELD_LITERAL(0x00ef7eafc1c69be6,0x0085d3855778fbea,0x002c8d5b450cb6f5,0x004e77de5e1e7fec,0x0047c057893abded,0x001b430b85d51e16,0x00965c7b45640c3c,0x00487b2bb1162b97)},
+        {FIELD_LITERAL(0x0099c73a311beec2,0x00a3eff38d8912ad,0x002efa9d1d7e8972,0x00f717ae1e14d126,0x002833f795850c8b,0x0066c12ad71486bd,0x00ae9889da4820eb,0x00d6044309555c08)},
+        {FIELD_LITERAL(0x004b1c5283d15e41,0x00669d8ea308ff75,0x0004390233f762a1,0x00e1d67b83cb6cec,0x003eebaa964c78b1,0x006b0aff965eb664,0x00b313d4470bdc37,0x008814ffcb3cb9d8)},
+    }}, {{
+        {FIELD_LITERAL(0x009724b8ce68db70,0x007678b5ed006f3d,0x00bdf4b89c0abd73,0x00299748e04c7c6d,0x00ddd86492c3c977,0x00c5a7febfa30a99,0x00ed84715b4b02bb,0x00319568adf70486)},
+        {FIELD_LITERAL(0x0070ff2d864de5bb,0x005a37eeb637ee95,0x0033741c258de160,0x00e6ca5cb1988f46,0x001ceabd92a24661,0x0030957bd500fe40,0x001c3362afe912c5,0x005187889f678bd2)},
+        {FIELD_LITERAL(0x0086835fc62bbdc7,0x009c3516ca4910a1,0x00956c71f8d00783,0x0095c78fcf63235f,0x00fc7ff6ba05c222,0x00cdd8b3f8d74a52,0x00ac5ae16de8256e,0x00e9d4be8ed48624)},
+    }}, {{
+        {FIELD_LITERAL(0x00c0ce11405df2d8,0x004e3f37b293d7b6,0x002410172e1ac6db,0x00b8dbff4bf8143d,0x003a7b409d56eb66,0x003e0f6a0dfef9af,0x0081c4e4d3645be1,0x00ce76076b127623)},
+        {FIELD_LITERAL(0x00f6ee0f98974239,0x0042d89af07d3a4f,0x00846b7fe84346b5,0x006a21fc6a8d39a1,0x00ac8bc2541ff2d9,0x006d4e2a77732732,0x009a39b694cc3f2f,0x0085c0aa2a404c8f)},
+        {FIELD_LITERAL(0x00b261101a218548,0x00c1cae96424277b,0x00869da0a77dd268,0x00bc0b09f8ec83ea,0x00d61027f8e82ba9,0x00aa4c85999dce67,0x00eac3132b9f3fe1,0x00fb9b0cf1c695d2)},
+    }}, {{
+        {FIELD_LITERAL(0x0043079295512f0d,0x0046a009861758e0,0x003ee2842a807378,0x0034cc9d1298e4fa,0x009744eb4d31b3ee,0x00afacec96650cd0,0x00ac891b313761ae,0x00e864d6d26e708a)},
+        {FIELD_LITERAL(0x00a84d7c8a23b491,0x0088e19aa868b27f,0x0005986d43e78ce9,0x00f28012f0606d28,0x0017ded7e10249b3,0x005ed4084b23af9b,0x00b9b0a940564472,0x00ad9056cceeb1f4)},
+        {FIELD_LITERAL(0x00db91b357fe755e,0x00a1aa544b15359c,0x00af4931a0195574,0x007686124fe11aef,0x00d1ead3c7b9ef7e,0x00aaf5fc580f8c15,0x00e727be147ee1ec,0x003c61c1e1577b86)},
+    }}, {{
+        {FIELD_LITERAL(0x009d3fca983220cf,0x00cd11acbc853dc4,0x0017590409d27f1d,0x00d2176698082802,0x00fa01251b2838c8,0x00dd297a0d9b51c6,0x00d76c92c045820a,0x00534bc7c46c9033)},
+        {FIELD_LITERAL(0x0080ed9bc9b07338,0x00fceac7745d2652,0x008a9d55f5f2cc69,0x0096ce72df301ac5,0x00f53232e7974d87,0x0071728c7ae73947,0x0090507602570778,0x00cb81cfd883b1b2)},
+        {FIELD_LITERAL(0x005011aadea373da,0x003a8578ec896034,0x00f20a6535fa6d71,0x005152d31e5a87cf,0x002bac1c8e68ca31,0x00b0e323db4c1381,0x00f1d596b7d5ae25,0x00eae458097cb4e0)},
+    }}, {{
+        {FIELD_LITERAL(0x00920ac80f9b0d21,0x00f80f7f73401246,0x0086d37849b557d6,0x0002bd4b317b752e,0x00b26463993a42bb,0x002070422a73b129,0x00341acaa0380cb3,0x00541914dd66a1b2)},
+        {FIELD_LITERAL(0x00c1513cd66abe8c,0x000139e01118944d,0x0064abbcb8080bbb,0x00b3b08202473142,0x00c629ef25da2403,0x00f0aec3310d9b7f,0x0050b2227472d8cd,0x00f6c8a922d41fb4)},
+        {FIELD_LITERAL(0x001075ccf26b7b1f,0x00bb6bb213170433,0x00e9491ad262da79,0x009ef4f48d2d384c,0x008992770766f09d,0x001584396b6b1101,0x00af3f8676c9feef,0x0024603c40269118)},
+    }}, {{
+        {FIELD_LITERAL(0x009dd7b31319527c,0x001e7ac948d873a9,0x00fa54b46ef9673a,0x0066efb8d5b02fe6,0x00754b1d3928aeae,0x0004262ac72a6f6b,0x0079b7d49a6eb026,0x003126a753540102)},
+        {FIELD_LITERAL(0x009666e24f693947,0x00f714311269d45f,0x0010ffac1d0c851c,0x0066e80c37363497,0x00f1f4ad010c60b0,0x0015c87408470ff7,0x00651d5e9c7766a4,0x008138819d7116de)},
+        {FIELD_LITERAL(0x003934b11c57253b,0x00ef308edf21f46e,0x00e54e99c7a16198,0x0080d57135764e63,0x00751c27b946bc24,0x00dd389ce4e9e129,0x00a1a2bfd1cd84dc,0x002fae73e5149b32)},
+    }}, {{
+        {FIELD_LITERAL(0x00911657dffb4cdd,0x00c100b7cc553d06,0x00449d075ec467cc,0x007062100bc64e70,0x0043cf86f7bd21e7,0x00f401dc4b797dea,0x005224afb2f62e65,0x00d1ede3fb5a42be)},
+        {FIELD_LITERAL(0x00f2ba36a41aa144,0x00a0c22d946ee18f,0x008aae8ef9a14f99,0x00eef4d79b19bb36,0x008e75ce3d27b1fc,0x00a65daa03b29a27,0x00d9cc83684eb145,0x009e1ed80cc2ed74)},
+        {FIELD_LITERAL(0x00bed953d1997988,0x00b93ed175a24128,0x00871c5963fb6365,0x00ca2df20014a787,0x00f5d9c1d0b34322,0x00f6f5942818db0a,0x004cc091f49c9906,0x00e8a188a60bff9f)},
+    }}, {{
+        {FIELD_LITERAL(0x0032c7762032fae8,0x00e4087232e0bc21,0x00f767344b6e8d85,0x00bbf369b76c2aa2,0x008a1f46c6e1570c,0x001368cd9780369f,0x007359a39d079430,0x0003646512921434)},
+        {FIELD_LITERAL(0x007c4b47ca7c73e7,0x005396221039734b,0x008b64ddf0e45d7e,0x00bfad5af285e6c2,0x008ec711c5b1a1a8,0x00cf663301237f98,0x00917ee3f1655126,0x004152f337efedd8)},
+        {FIELD_LITERAL(0x0007c7edc9305daa,0x000a6664f273701c,0x00f6e78795e200b1,0x005d05b9ecd2473e,0x0014f5f17c865786,0x00c7fd2d166fa995,0x004939a2d8eb80e0,0x002244ba0942c199)},
+    }}, {{
+        {FIELD_LITERAL(0x00321e767f0262cf,0x002e57d776caf68e,0x00bf2c94814f0437,0x00c339196acd622f,0x001db4cce71e2770,0x001ded5ddba6eee2,0x0078608ab1554c8d,0x00067fe0ab76365b)},
+        {FIELD_LITERAL(0x00f09758e11e3985,0x00169efdbd64fad3,0x00e8889b7d6dacd6,0x0035cdd58ea88209,0x00bcda47586d7f49,0x003cdddcb2879088,0x0016da70187e954b,0x009556ea2e92aacd)},
+        {FIELD_LITERAL(0x008cab16bd1ff897,0x00b389972cdf753f,0x00ea8ed1e46dfdc0,0x004fe7ef94c589f4,0x002b8ae9b805ecf3,0x0025c08d892874a5,0x0023938e98d44c4c,0x00f759134cabf69c)},
+    }}, {{
+        {FIELD_LITERAL(0x006c2a84678e4b3b,0x007a194aacd1868f,0x00ed0225af424761,0x00da0a6f293c64b8,0x001062ac5c6a7a18,0x0030f5775a8aeef4,0x0002acaad76b7af0,0x00410b8fd63a579f)},
+        {FIELD_LITERAL(0x001ec59db3d9590e,0x001e9e3f1c3f182d,0x0045a9c3ec2cab14,0x0008198572aeb673,0x00773b74068bd167,0x0012535eaa395434,0x0044dba9e3bbb74a,0x002fba4d3c74bd0e)},
+        {FIELD_LITERAL(0x0042bf08fe66922c,0x003318b8fbb49e8c,0x00d75946004aa14c,0x00f601586b42bf1c,0x00c74cf1d912fe66,0x00abcb36974b30ad,0x007eb78720c9d2b8,0x009f54ab7bd4df85)},
+    }}, {{
+        {FIELD_LITERAL(0x00db9fc948f73826,0x00fa8b3746ed8ee9,0x00132cb65aafbeb2,0x00c36ff3fe7925b8,0x00837daed353d2fe,0x00ec661be0667cf4,0x005beb8ed2e90204,0x00d77dd69e564967)},
+        {FIELD_LITERAL(0x0042e6268b861751,0x0008dd0469500c16,0x00b51b57c338a3fd,0x00cc4497d85cff6b,0x002f13d6b57c34a4,0x0083652eaf301105,0x00cc344294cc93a8,0x0060f4d02810e270)},
+        {FIELD_LITERAL(0x00a8954363cd518b,0x00ad171124bccb7b,0x0065f46a4adaae00,0x001b1a5b2a96e500,0x0043fe24f8233285,0x0066996d8ae1f2c3,0x00c530f3264169f9,0x00c0f92d07cf6a57)},
+    }}, {{
+        {FIELD_LITERAL(0x0036a55c6815d943,0x008c8d1def993db3,0x002e0e1e8ff7318f,0x00d883a4b92db00a,0x002f5e781ae33906,0x001a72adb235c06d,0x00f2e59e736e9caa,0x001a4b58e3031914)},
+        {FIELD_LITERAL(0x00d73bfae5e00844,0x00bf459766fb5f52,0x0061b4f5a5313cde,0x004392d4c3b95514,0x000d3551b1077523,0x0000998840ee5d71,0x006de6e340448b7b,0x00251aa504875d6e)},
+        {FIELD_LITERAL(0x003bf343427ac342,0x00adc0a78642b8c5,0x0003b893175a8314,0x0061a34ade5703bc,0x00ea3ea8bb71d632,0x00be0df9a1f198c2,0x0046dd8e7c1635fb,0x00f1523fdd25d5e5)},
+    }}, {{
+        {FIELD_LITERAL(0x00633f63fc9dd406,0x00e713ff80e04a43,0x0060c6e970f2d621,0x00a57cd7f0df1891,0x00f2406a550650bb,0x00b064290efdc684,0x001eab0144d17916,0x00cd15f863c293ab)},
+        {FIELD_LITERAL(0x0029cec55273f70d,0x007044ee275c6340,0x0040f637a93015e2,0x00338bb78db5aae9,0x001491b2a6132147,0x00a125d6cfe6bde3,0x005f7ac561ba8669,0x001d5eaea3fbaacf)},
+        {FIELD_LITERAL(0x00054e9635e3be31,0x000e43f31e2872be,0x00d05b1c9e339841,0x006fac50bd81fd98,0x00cdc7852eaebb09,0x004ff519b061991b,0x009099e8107d4c85,0x00273e24c36a4a61)},
+    }}, {{
+        {FIELD_LITERAL(0x00070b4441ef2c46,0x00efa5b02801a109,0x00bf0b8c3ee64adf,0x008a67e0b3452e98,0x001916b1f2fa7a74,0x00d781a78ff6cdc3,0x008682ce57e5c919,0x00cc1109dd210da3)},
+        {FIELD_LITERAL(0x00cae8aaff388663,0x005e983a35dda1c7,0x007ab1030d8e37f4,0x00e48940f5d032fe,0x006a36f9ef30b331,0x009be6f03958c757,0x0086231ceba91400,0x008bd0f7b823e7aa)},
+        {FIELD_LITERAL(0x00cf881ebef5a45a,0x004ebea78e7c6f2c,0x0090da9209cf26a0,0x00de2b2e4c775b84,0x0071d6031c3c15ae,0x00d9e927ef177d70,0x00894ee8c23896fd,0x00e3b3b401e41aad)},
+    }}, {{
+        {FIELD_LITERAL(0x00204fef26864170,0x00819269c5dee0f8,0x00bfb4713ec97966,0x0026339a6f34df78,0x001f26e64c761dc2,0x00effe3af313cb60,0x00e17b70138f601b,0x00f16e1ccd9ede5e)},
+        {FIELD_LITERAL(0x005d9a8353fdb2db,0x0055cc2048c698f0,0x00f6c4ac89657218,0x00525034d73faeb2,0x00435776fbda3c7d,0x0070ea5312323cbc,0x007a105d44d069fb,0x006dbc8d6dc786aa)},
+        {FIELD_LITERAL(0x0017cff19cd394ec,0x00fef7b810922587,0x00e6483970dff548,0x00ddf36ad6874264,0x00e61778523fcce2,0x0093a66c0c93b24a,0x00fd367114db7f86,0x007652d7ddce26dd)},
+    }}, {{
+        {FIELD_LITERAL(0x00d92ced7ba12843,0x00aea9c7771e86e7,0x0046639693354f7b,0x00a628dbb6a80c47,0x003a0b0507372953,0x00421113ab45c0d9,0x00e545f08362ab7a,0x0028ce087b4d6d96)},
+        {FIELD_LITERAL(0x00a67ee7cf9f99eb,0x005713b275f2ff68,0x00f1d536a841513d,0x00823b59b024712e,0x009c46b9d0d38cec,0x00cdb1595aa2d7d4,0x008375b3423d9af8,0x000ab0b516d978f7)},
+        {FIELD_LITERAL(0x00428dcb3c510b0f,0x00585607ea24bb4e,0x003736bf1603687a,0x00c47e568c4fe3c7,0x003cd00282848605,0x0043a487c3b91939,0x004ffc04e1095a06,0x00a4c989a3d4b918)},
+    }}, {{
+        {FIELD_LITERAL(0x00a8778d0e429f7a,0x004c02b059105a68,0x0016653b609da3ff,0x00d5107bd1a12d27,0x00b4708f9a771cab,0x00bb63b662033f69,0x0072f322240e7215,0x0019445b59c69222)},
+        {FIELD_LITERAL(0x00cf4f6069a658e6,0x0053ca52859436a6,0x0064b994d7e3e117,0x00cb469b9a07f534,0x00cfb68f399e9d47,0x00f0dcb8dac1c6e7,0x00f2ab67f538b3a5,0x0055544f178ab975)},
+        {FIELD_LITERAL(0x0099b7a2685d538c,0x00e2f1897b7c0018,0x003adac8ce48dae3,0x00089276d5c50c0c,0x00172fca07ad6717,0x00cb1a72f54069e5,0x004ee42f133545b3,0x00785f8651362f16)},
+    }}, {{
+        {FIELD_LITERAL(0x0049cbac38509e11,0x0015234505d42cdf,0x00794fb0b5840f1c,0x00496437344045a5,0x0031b6d944e4f9b0,0x00b207318ac1f5d8,0x0000c840da7f5c5d,0x00526f373a5c8814)},
+        {FIELD_LITERAL(0x002c7b7742d1dfd9,0x002cabeb18623c01,0x00055f5e3e044446,0x006c20f3b4ef54ba,0x00c600141ec6b35f,0x00354f437f1a32a3,0x00bac4624a3520f9,0x00c483f734a90691)},
+        {FIELD_LITERAL(0x0053a737d422918d,0x00f7fca1d8758625,0x00c360336dadb04c,0x00f38e3d9158a1b8,0x0069ce3b418e84c6,0x005d1697eca16ead,0x00f8bd6a35ece13d,0x007885dfc2b5afea)},
+    }}, {{
+        {FIELD_LITERAL(0x00c3617ae260776c,0x00b20dc3e96922d7,0x00a1a7802246706a,0x00ca6505a5240244,0x002246b62d919782,0x001439102d7aa9b3,0x00e8af1139e6422c,0x00c888d1b52f2b05)},
+        {FIELD_LITERAL(0x005b67690ffd41d9,0x005294f28df516f9,0x00a879272412fcb9,0x00098b629a6d1c8d,0x00fabd3c8050865a,0x00cd7e5b0a3879c5,0x00153238210f3423,0x00357cac101e9f42)},
+        {FIELD_LITERAL(0x008917b454444fb7,0x00f59247c97e441b,0x00a6200a6815152d,0x0009a4228601d254,0x001c0360559bd374,0x007563362039cb36,0x00bd75b48d74e32b,0x0017f515ac3499e8)},
+    }}, {{
+        {FIELD_LITERAL(0x001532a7ffe41c5a,0x00eb1edce358d6bf,0x00ddbacc7b678a7b,0x008a7b70f3c841a3,0x00f1923bf27d3f4c,0x000b2713ed8f7873,0x00aaf67e29047902,0x0044994a70b3976d)},
+        {FIELD_LITERAL(0x00d54e802082d42c,0x00a55aa0dce7cc6c,0x006477b96073f146,0x0082efe4ceb43594,0x00a922bcba026845,0x0077f19d1ab75182,0x00c2bb2737846e59,0x0004d7eec791dd33)},
+        {FIELD_LITERAL(0x0044588d1a81d680,0x00b0a9097208e4f8,0x00212605350dc57e,0x0028717cd2871123,0x00fb083c100fd979,0x0045a056ce063fdf,0x00a5d604b4dd6a41,0x001dabc08ba4e236)},
+    }}, {{
+        {FIELD_LITERAL(0x00c4887198d7a7fa,0x00244f98fb45784a,0x0045911e15a15d01,0x001d323d374c0966,0x00967c3915196562,0x0039373abd2f3c67,0x000d2c5614312423,0x0041cf2215442ce3)},
+        {FIELD_LITERAL(0x008ede889ada7f06,0x001611e91de2e135,0x00fdb9a458a471b9,0x00563484e03710d1,0x0031cc81925e3070,0x0062c97b3af80005,0x00fa733eea28edeb,0x00e82457e1ebbc88)},
+        {FIELD_LITERAL(0x006a0df5fe9b6f59,0x00a0d4ff46040d92,0x004a7cedb6f93250,0x00d1df8855b8c357,0x00e73a46086fd058,0x0048fb0add6dfe59,0x001e03a28f1b4e3d,0x00a871c993308d76)},
+    }}, {{
+        {FIELD_LITERAL(0x0030dbb2d1766ec8,0x00586c0ad138555e,0x00d1a34f9e91c77c,0x0063408ad0e89014,0x00d61231b05f6f5b,0x0009abf569f5fd8a,0x00aec67a110f1c43,0x0031d1a790938dd7)},
+        {FIELD_LITERAL(0x006cded841e2a862,0x00198d60af0ab6fb,0x0018f09db809e750,0x004e6ac676016263,0x00eafcd1620969cb,0x002c9784ca34917d,0x0054f00079796de7,0x00d9fab5c5972204)},
+        {FIELD_LITERAL(0x004bd0fee2438a83,0x00b571e62b0f83bd,0x0059287d7ce74800,0x00fb3631b645c3f0,0x00a018e977f78494,0x0091e27065c27b12,0x007696c1817165e0,0x008c40be7c45ba3a)},
+    }}, {{
+        {FIELD_LITERAL(0x00a0f326327cb684,0x001c7d0f672680ff,0x008c1c81ffb112d1,0x00f8f801674eddc8,0x00e926d5d48c2a9d,0x005bd6d954c6fe9a,0x004c6b24b4e33703,0x00d05eb5c09105cc)},
+        {FIELD_LITERAL(0x00d61731caacf2cf,0x002df0c7609e01c5,0x00306172208b1e2b,0x00b413fe4fb2b686,0x00826d360902a221,0x003f8d056e67e7f7,0x0065025b0175e989,0x00369add117865eb)},
+        {FIELD_LITERAL(0x00aaf895aec2fa11,0x000f892bc313eb52,0x005b1c794dad050b,0x003f8ec4864cec14,0x00af81058d0b90e5,0x00ebe43e183997bb,0x00a9d610f9f3e615,0x007acd8eec2e88d3)},
+    }}, {{
+        {FIELD_LITERAL(0x0049b2fab13812a3,0x00846db32cd60431,0x000177fa578c8d6c,0x00047d0e2ad4bc51,0x00b158ba38d1e588,0x006a45daad79e3f3,0x000997b93cab887b,0x00c47ea42fa23dc3)},
+        {FIELD_LITERAL(0x0012b6fef7aeb1ca,0x009412768194b6a7,0x00ff0d351f23ab93,0x007e8a14c1aff71b,0x006c1c0170c512bc,0x0016243ea02ab2e5,0x007bb6865b303f3e,0x0015ce6b29b159f4)},
+        {FIELD_LITERAL(0x009961cd02e68108,0x00e2035d3a1d0836,0x005d51f69b5e1a1d,0x004bccb4ea36edcd,0x0069be6a7aeef268,0x0063f4dd9de8d5a7,0x006283783092ca35,0x0075a31af2c35409)},
+    }}, {{
+        {FIELD_LITERAL(0x00c412365162e8cf,0x00012283fb34388a,0x003e6543babf39e2,0x00eead6b3a804978,0x0099c0314e8b326f,0x00e98e0a8d477a4f,0x00d2eb96b127a687,0x00ed8d7df87571bb)},
+        {FIELD_LITERAL(0x00777463e308cacf,0x00c8acb93950132d,0x00ebddbf4ca48b2c,0x0026ad7ca0795a0a,0x00f99a3d9a715064,0x000d60bcf9d4dfcc,0x005e65a73a437a06,0x0019d536a8db56c8)},
+        {FIELD_LITERAL(0x00192d7dd558d135,0x0027cd6a8323ffa7,0x00239f1a412dc1e7,0x0046b4b3be74fc5c,0x0020c47a2bef5bce,0x00aa17e48f43862b,0x00f7e26c96342e5f,0x0008011c530f39a9)},
+    }}, {{
+        {FIELD_LITERAL(0x00aad4ac569bf0f1,0x00a67adc90b27740,0x0048551369a5751a,0x0031252584a3306a,0x0084e15df770e6fc,0x00d7bba1c74b5805,0x00a80ef223af1012,0x0089c85ceb843a34)},
+        {FIELD_LITERAL(0x00c4545be4a54004,0x0099e11f60357e6c,0x001f3936d19515a6,0x007793df84341a6e,0x0051061886717ffa,0x00e9b0a660b28f85,0x0044ea685892de0d,0x000257d2a1fda9d9)},
+        {FIELD_LITERAL(0x007e8b01b24ac8a8,0x006cf3b0b5ca1337,0x00f1607d3e36a570,0x0039b7fab82991a1,0x00231777065840c5,0x00998e5afdd346f9,0x00b7dc3e64acc85f,0x00baacc748013ad6)},
+    }}, {{
+        {FIELD_LITERAL(0x008ea6a4177580bf,0x005fa1953e3f0378,0x005fe409ac74d614,0x00452327f477e047,0x00a4018507fb6073,0x007b6e71951caac8,0x0012b42ab8a6ce91,0x0080eca677294ab7)},
+        {FIELD_LITERAL(0x00a53edc023ba69b,0x00c6afa83ddde2e8,0x00c3f638b307b14e,0x004a357a64414062,0x00e4d94d8b582dc9,0x001739caf71695b7,0x0012431b2ae28de1,0x003b6bc98682907c)},
+        {FIELD_LITERAL(0x008a9a93be1f99d6,0x0079fa627cc699c8,0x00b0cfb134ba84c8,0x001c4b778249419a,0x00df4ab3d9c44f40,0x009f596e6c1a9e3c,0x001979c0df237316,0x00501e953a919b87)},
+    }}
+};
+const niels_t *curve448_wnaf_base = curve448_wnaf_base_table;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/curve448utils.h b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/curve448utils.h
new file mode 100644
index 000000000..9bf837993
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/curve448utils.h
@@ -0,0 +1,78 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+
+#ifndef HEADER_CURVE448UTILS_H
+# define HEADER_CURVE448UTILS_H
+
+# include <openssl/e_os2.h>
+
+/*
+ * Internal word types. Somewhat tricky.  This could be decided separately per
+ * platform.  However, the structs do need to be all the same size and
+ * alignment on a given platform to support dynamic linking, since even if you
+ * header was built with eg arch_neon, you might end up linking a library built
+ * with arch_arm32.
+ */
+# ifndef C448_WORD_BITS
+#  if (defined(__SIZEOF_INT128__) && (__SIZEOF_INT128__ == 16)) \
+      && !defined(__sparc__)
+#   define C448_WORD_BITS 64      /* The number of bits in a word */
+#  else
+#   define C448_WORD_BITS 32      /* The number of bits in a word */
+#  endif
+# endif
+
+# if C448_WORD_BITS == 64
+/* Word size for internal computations */
+typedef uint64_t c448_word_t;
+/* Signed word size for internal computations */
+typedef int64_t c448_sword_t;
+/* "Boolean" type, will be set to all-zero or all-one (i.e. -1u) */
+typedef uint64_t c448_bool_t;
+/* Double-word size for internal computations */
+typedef __uint128_t c448_dword_t;
+/* Signed double-word size for internal computations */
+typedef __int128_t c448_dsword_t;
+# elif C448_WORD_BITS == 32
+/* Word size for internal computations */
+typedef uint32_t c448_word_t;
+/* Signed word size for internal computations */
+typedef int32_t c448_sword_t;
+/* "Boolean" type, will be set to all-zero or all-one (i.e. -1u) */
+typedef uint32_t c448_bool_t;
+/* Double-word size for internal computations */
+typedef uint64_t c448_dword_t;
+/* Signed double-word size for internal computations */
+typedef int64_t c448_dsword_t;
+# else
+#  error "Only supporting C448_WORD_BITS = 32 or 64 for now"
+# endif
+
+/* C448_TRUE = -1 so that C448_TRUE & x = x */
+# define C448_TRUE      (0 - (c448_bool_t)1)
+
+/* C448_FALSE = 0 so that C448_FALSE & x = 0 */
+# define C448_FALSE     0
+
+/* Another boolean type used to indicate success or failure. */
+typedef enum {
+    C448_SUCCESS = -1, /**< The operation succeeded. */
+    C448_FAILURE = 0   /**< The operation failed. */
+} c448_error_t;
+
+/* Return success if x is true */
+static ossl_inline c448_error_t c448_succeed_if(c448_bool_t x)
+{
+    return (c448_error_t) x;
+}
+
+#endif                          /* __C448_COMMON_H__ */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/ed448.h b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/ed448.h
new file mode 100644
index 000000000..5fe939e8e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/ed448.h
@@ -0,0 +1,195 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+
+#ifndef HEADER_ED448_H
+# define HEADER_ED448_H
+
+# include "point_448.h"
+
+/* Number of bytes in an EdDSA public key. */
+# define EDDSA_448_PUBLIC_BYTES 57
+
+/* Number of bytes in an EdDSA private key. */
+# define EDDSA_448_PRIVATE_BYTES EDDSA_448_PUBLIC_BYTES
+
+/* Number of bytes in an EdDSA private key. */
+# define EDDSA_448_SIGNATURE_BYTES (EDDSA_448_PUBLIC_BYTES + \
+                                    EDDSA_448_PRIVATE_BYTES)
+
+/* EdDSA encoding ratio. */
+# define C448_EDDSA_ENCODE_RATIO 4
+
+/* EdDSA decoding ratio. */
+# define C448_EDDSA_DECODE_RATIO (4 / 4)
+
+/*
+ * EdDSA key generation.  This function uses a different (non-Decaf) encoding.
+ *
+ * pubkey (out): The public key.
+ * privkey (in): The private key.
+ */
+c448_error_t c448_ed448_derive_public_key(
+                        uint8_t pubkey [EDDSA_448_PUBLIC_BYTES],
+                        const uint8_t privkey [EDDSA_448_PRIVATE_BYTES]);
+
+/*
+ * EdDSA signing.
+ *
+ * signature (out): The signature.
+ * privkey (in): The private key.
+ * pubkey (in):  The public key.
+ * message (in):  The message to sign.
+ * message_len (in):  The length of the message.
+ * prehashed (in):  Nonzero if the message is actually the hash of something
+ *                  you want to sign.
+ * context (in):  A "context" for this signature of up to 255 bytes.
+ * context_len (in):  Length of the context.
+ *
+ * For Ed25519, it is unsafe to use the same key for both prehashed and
+ * non-prehashed messages, at least without some very careful protocol-level
+ * disambiguation.  For Ed448 it is safe.
+ */
+c448_error_t c448_ed448_sign(
+                        uint8_t signature[EDDSA_448_SIGNATURE_BYTES],
+                        const uint8_t privkey[EDDSA_448_PRIVATE_BYTES],
+                        const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],
+                        const uint8_t *message, size_t message_len,
+                        uint8_t prehashed, const uint8_t *context,
+                        size_t context_len);
+
+/*
+ * EdDSA signing with prehash.
+ *
+ * signature (out): The signature.
+ * privkey (in): The private key.
+ * pubkey (in): The public key.
+ * hash (in): The hash of the message.  This object will not be modified by the
+ *            call.
+ * context (in): A "context" for this signature of up to 255 bytes.  Must be the
+ *               same as what was used for the prehash.
+ * context_len (in): Length of the context.
+ *
+ * For Ed25519, it is unsafe to use the same key for both prehashed and
+ * non-prehashed messages, at least without some very careful protocol-level
+ * disambiguation.  For Ed448 it is safe.
+ */
+c448_error_t c448_ed448_sign_prehash(
+                        uint8_t signature[EDDSA_448_SIGNATURE_BYTES],
+                        const uint8_t privkey[EDDSA_448_PRIVATE_BYTES],
+                        const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],
+                        const uint8_t hash[64],
+                        const uint8_t *context,
+                        size_t context_len);
+
+/*
+ * EdDSA signature verification.
+ *
+ * Uses the standard (i.e. less-strict) verification formula.
+ *
+ * signature (in): The signature.
+ * pubkey (in): The public key.
+ * message (in): The message to verify.
+ * message_len (in): The length of the message.
+ * prehashed (in): Nonzero if the message is actually the hash of something you
+ *                 want to verify.
+ * context (in): A "context" for this signature of up to 255 bytes.
+ * context_len (in): Length of the context.
+ *
+ * For Ed25519, it is unsafe to use the same key for both prehashed and
+ * non-prehashed messages, at least without some very careful protocol-level
+ * disambiguation.  For Ed448 it is safe.
+ */
+c448_error_t c448_ed448_verify(const uint8_t
+                                 signature[EDDSA_448_SIGNATURE_BYTES],
+                                 const uint8_t
+                                 pubkey[EDDSA_448_PUBLIC_BYTES],
+                                 const uint8_t *message, size_t message_len,
+                                 uint8_t prehashed, const uint8_t *context,
+                                 uint8_t context_len);
+
+/*
+ * EdDSA signature verification.
+ *
+ * Uses the standard (i.e. less-strict) verification formula.
+ *
+ * signature (in): The signature.
+ * pubkey (in): The public key.
+ * hash (in): The hash of the message.  This object will not be modified by the
+ *            call.
+ * context (in): A "context" for this signature of up to 255 bytes.  Must be the
+ *               same as what was used for the prehash.
+ * context_len (in): Length of the context.
+ *
+ * For Ed25519, it is unsafe to use the same key for both prehashed and
+ * non-prehashed messages, at least without some very careful protocol-level
+ * disambiguation.  For Ed448 it is safe.
+ */
+c448_error_t c448_ed448_verify_prehash(
+                    const uint8_t signature[EDDSA_448_SIGNATURE_BYTES],
+                    const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],
+                    const uint8_t hash[64],
+                    const uint8_t *context,
+                    uint8_t context_len);
+
+/*
+ * EdDSA point encoding.  Used internally, exposed externally.
+ * Multiplies by C448_EDDSA_ENCODE_RATIO first.
+ *
+ * The multiplication is required because the EdDSA encoding represents
+ * the cofactor information, but the Decaf encoding ignores it (which
+ * is the whole point).  So if you decode from EdDSA and re-encode to
+ * EdDSA, the cofactor info must get cleared, because the intermediate
+ * representation doesn't track it.
+ *
+ * The way we handle this is to multiply by C448_EDDSA_DECODE_RATIO when
+ * decoding, and by C448_EDDSA_ENCODE_RATIO when encoding.  The product of
+ * these ratios is always exactly the cofactor 4, so the cofactor ends up
+ * cleared one way or another.  But exactly how that shakes out depends on the
+ * base points specified in RFC 8032.
+ *
+ * The upshot is that if you pass the Decaf/Ristretto base point to
+ * this function, you will get C448_EDDSA_ENCODE_RATIO times the
+ * EdDSA base point.
+ *
+ * enc (out): The encoded point.
+ * p (in): The point.
+ */
+void curve448_point_mul_by_ratio_and_encode_like_eddsa(
+                                    uint8_t enc [EDDSA_448_PUBLIC_BYTES],
+                                    const curve448_point_t p);
+
+/*
+ * EdDSA point decoding.  Multiplies by C448_EDDSA_DECODE_RATIO, and
+ * ignores cofactor information.
+ *
+ * See notes on curve448_point_mul_by_ratio_and_encode_like_eddsa
+ *
+ * enc (out): The encoded point.
+ * p (in): The point.
+ */
+c448_error_t curve448_point_decode_like_eddsa_and_mul_by_ratio(
+                            curve448_point_t p,
+                            const uint8_t enc[EDDSA_448_PUBLIC_BYTES]);
+
+/*
+ * EdDSA to ECDH private key conversion
+ * Using the appropriate hash function, hash the EdDSA private key
+ * and keep only the lower bytes to get the ECDH private key
+ *
+ * x (out): The ECDH private key as in RFC7748
+ * ed (in): The EdDSA private key
+ */
+c448_error_t c448_ed448_convert_private_key_to_x448(
+                            uint8_t x[X448_PRIVATE_BYTES],
+                            const uint8_t ed[EDDSA_448_PRIVATE_BYTES]);
+
+#endif                          /* HEADER_ED448_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/eddsa.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/eddsa.c
new file mode 100644
index 000000000..b28f7dff9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/eddsa.c
@@ -0,0 +1,372 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+#include <string.h>
+#include <openssl/crypto.h>
+#include <openssl/evp.h>
+#include "curve448_lcl.h"
+#include "word.h"
+#include "ed448.h"
+#include "internal/numbers.h"
+
+#define COFACTOR 4
+
+static c448_error_t oneshot_hash(uint8_t *out, size_t outlen,
+                                 const uint8_t *in, size_t inlen)
+{
+    EVP_MD_CTX *hashctx = EVP_MD_CTX_new();
+
+    if (hashctx == NULL)
+        return C448_FAILURE;
+
+    if (!EVP_DigestInit_ex(hashctx, EVP_shake256(), NULL)
+            || !EVP_DigestUpdate(hashctx, in, inlen)
+            || !EVP_DigestFinalXOF(hashctx, out, outlen)) {
+        EVP_MD_CTX_free(hashctx);
+        return C448_FAILURE;
+    }
+
+    EVP_MD_CTX_free(hashctx);
+    return C448_SUCCESS;
+}
+
+static void clamp(uint8_t secret_scalar_ser[EDDSA_448_PRIVATE_BYTES])
+{
+    secret_scalar_ser[0] &= -COFACTOR;
+    secret_scalar_ser[EDDSA_448_PRIVATE_BYTES - 1] = 0;
+    secret_scalar_ser[EDDSA_448_PRIVATE_BYTES - 2] |= 0x80;
+}
+
+static c448_error_t hash_init_with_dom(EVP_MD_CTX *hashctx, uint8_t prehashed,
+                                       uint8_t for_prehash,
+                                       const uint8_t *context,
+                                       size_t context_len)
+{
+    const char *dom_s = "SigEd448";
+    uint8_t dom[2];
+
+    if (context_len > UINT8_MAX)
+        return C448_FAILURE;
+
+    dom[0] = (uint8_t)(2 - (prehashed == 0 ? 1 : 0)
+                       - (for_prehash == 0 ? 1 : 0));
+    dom[1] = (uint8_t)context_len;
+
+    if (!EVP_DigestInit_ex(hashctx, EVP_shake256(), NULL)
+            || !EVP_DigestUpdate(hashctx, dom_s, strlen(dom_s))
+            || !EVP_DigestUpdate(hashctx, dom, sizeof(dom))
+            || !EVP_DigestUpdate(hashctx, context, context_len))
+        return C448_FAILURE;
+
+    return C448_SUCCESS;
+}
+
+/* In this file because it uses the hash */
+c448_error_t c448_ed448_convert_private_key_to_x448(
+                            uint8_t x[X448_PRIVATE_BYTES],
+                            const uint8_t ed [EDDSA_448_PRIVATE_BYTES])
+{
+    /* pass the private key through oneshot_hash function */
+    /* and keep the first X448_PRIVATE_BYTES bytes */
+    return oneshot_hash(x, X448_PRIVATE_BYTES, ed,
+                        EDDSA_448_PRIVATE_BYTES);
+}
+
+c448_error_t c448_ed448_derive_public_key(
+                        uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],
+                        const uint8_t privkey[EDDSA_448_PRIVATE_BYTES])
+{
+    /* only this much used for keygen */
+    uint8_t secret_scalar_ser[EDDSA_448_PRIVATE_BYTES];
+    curve448_scalar_t secret_scalar;
+    unsigned int c;
+    curve448_point_t p;
+
+    if (!oneshot_hash(secret_scalar_ser, sizeof(secret_scalar_ser), privkey,
+                      EDDSA_448_PRIVATE_BYTES))
+        return C448_FAILURE;
+
+    clamp(secret_scalar_ser);
+
+    curve448_scalar_decode_long(secret_scalar, secret_scalar_ser,
+                                sizeof(secret_scalar_ser));
+
+    /*
+     * Since we are going to mul_by_cofactor during encoding, divide by it
+     * here. However, the EdDSA base point is not the same as the decaf base
+     * point if the sigma isogeny is in use: the EdDSA base point is on
+     * Etwist_d/(1-d) and the decaf base point is on Etwist_d, and when
+     * converted it effectively picks up a factor of 2 from the isogenies.  So
+     * we might start at 2 instead of 1.
+     */
+    for (c = 1; c < C448_EDDSA_ENCODE_RATIO; c <<= 1)
+        curve448_scalar_halve(secret_scalar, secret_scalar);
+
+    curve448_precomputed_scalarmul(p, curve448_precomputed_base, secret_scalar);
+
+    curve448_point_mul_by_ratio_and_encode_like_eddsa(pubkey, p);
+
+    /* Cleanup */
+    curve448_scalar_destroy(secret_scalar);
+    curve448_point_destroy(p);
+    OPENSSL_cleanse(secret_scalar_ser, sizeof(secret_scalar_ser));
+
+    return C448_SUCCESS;
+}
+
+c448_error_t c448_ed448_sign(
+                        uint8_t signature[EDDSA_448_SIGNATURE_BYTES],
+                        const uint8_t privkey[EDDSA_448_PRIVATE_BYTES],
+                        const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],
+                        const uint8_t *message, size_t message_len,
+                        uint8_t prehashed, const uint8_t *context,
+                        size_t context_len)
+{
+    curve448_scalar_t secret_scalar;
+    EVP_MD_CTX *hashctx = EVP_MD_CTX_new();
+    c448_error_t ret = C448_FAILURE;
+    curve448_scalar_t nonce_scalar;
+    uint8_t nonce_point[EDDSA_448_PUBLIC_BYTES] = { 0 };
+    unsigned int c;
+    curve448_scalar_t challenge_scalar;
+
+    if (hashctx == NULL)
+        return C448_FAILURE;
+
+    {
+        /*
+         * Schedule the secret key, First EDDSA_448_PRIVATE_BYTES is serialised
+         * secret scalar,next EDDSA_448_PRIVATE_BYTES bytes is the seed.
+         */
+        uint8_t expanded[EDDSA_448_PRIVATE_BYTES * 2];
+
+        if (!oneshot_hash(expanded, sizeof(expanded), privkey,
+                          EDDSA_448_PRIVATE_BYTES))
+            goto err;
+        clamp(expanded);
+        curve448_scalar_decode_long(secret_scalar, expanded,
+                                    EDDSA_448_PRIVATE_BYTES);
+
+        /* Hash to create the nonce */
+        if (!hash_init_with_dom(hashctx, prehashed, 0, context, context_len)
+                || !EVP_DigestUpdate(hashctx,
+                                     expanded + EDDSA_448_PRIVATE_BYTES,
+                                     EDDSA_448_PRIVATE_BYTES)
+                || !EVP_DigestUpdate(hashctx, message, message_len)) {
+            OPENSSL_cleanse(expanded, sizeof(expanded));
+            goto err;
+        }
+        OPENSSL_cleanse(expanded, sizeof(expanded));
+    }
+
+    /* Decode the nonce */
+    {
+        uint8_t nonce[2 * EDDSA_448_PRIVATE_BYTES];
+
+        if (!EVP_DigestFinalXOF(hashctx, nonce, sizeof(nonce)))
+            goto err;
+        curve448_scalar_decode_long(nonce_scalar, nonce, sizeof(nonce));
+        OPENSSL_cleanse(nonce, sizeof(nonce));
+    }
+
+    {
+        /* Scalarmul to create the nonce-point */
+        curve448_scalar_t nonce_scalar_2;
+        curve448_point_t p;
+
+        curve448_scalar_halve(nonce_scalar_2, nonce_scalar);
+        for (c = 2; c < C448_EDDSA_ENCODE_RATIO; c <<= 1)
+            curve448_scalar_halve(nonce_scalar_2, nonce_scalar_2);
+
+        curve448_precomputed_scalarmul(p, curve448_precomputed_base,
+                                       nonce_scalar_2);
+        curve448_point_mul_by_ratio_and_encode_like_eddsa(nonce_point, p);
+        curve448_point_destroy(p);
+        curve448_scalar_destroy(nonce_scalar_2);
+    }
+
+    {
+        uint8_t challenge[2 * EDDSA_448_PRIVATE_BYTES];
+
+        /* Compute the challenge */
+        if (!hash_init_with_dom(hashctx, prehashed, 0, context, context_len)
+                || !EVP_DigestUpdate(hashctx, nonce_point, sizeof(nonce_point))
+                || !EVP_DigestUpdate(hashctx, pubkey, EDDSA_448_PUBLIC_BYTES)
+                || !EVP_DigestUpdate(hashctx, message, message_len)
+                || !EVP_DigestFinalXOF(hashctx, challenge, sizeof(challenge)))
+            goto err;
+
+        curve448_scalar_decode_long(challenge_scalar, challenge,
+                                    sizeof(challenge));
+        OPENSSL_cleanse(challenge, sizeof(challenge));
+    }
+
+    curve448_scalar_mul(challenge_scalar, challenge_scalar, secret_scalar);
+    curve448_scalar_add(challenge_scalar, challenge_scalar, nonce_scalar);
+
+    OPENSSL_cleanse(signature, EDDSA_448_SIGNATURE_BYTES);
+    memcpy(signature, nonce_point, sizeof(nonce_point));
+    curve448_scalar_encode(&signature[EDDSA_448_PUBLIC_BYTES],
+                           challenge_scalar);
+
+    curve448_scalar_destroy(secret_scalar);
+    curve448_scalar_destroy(nonce_scalar);
+    curve448_scalar_destroy(challenge_scalar);
+
+    ret = C448_SUCCESS;
+ err:
+    EVP_MD_CTX_free(hashctx);
+    return ret;
+}
+
+c448_error_t c448_ed448_sign_prehash(
+                        uint8_t signature[EDDSA_448_SIGNATURE_BYTES],
+                        const uint8_t privkey[EDDSA_448_PRIVATE_BYTES],
+                        const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],
+                        const uint8_t hash[64], const uint8_t *context,
+                        size_t context_len)
+{
+    return c448_ed448_sign(signature, privkey, pubkey, hash, 64, 1, context,
+                           context_len);
+}
+
+c448_error_t c448_ed448_verify(
+                    const uint8_t signature[EDDSA_448_SIGNATURE_BYTES],
+                    const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],
+                    const uint8_t *message, size_t message_len,
+                    uint8_t prehashed, const uint8_t *context,
+                    uint8_t context_len)
+{
+    curve448_point_t pk_point, r_point;
+    c448_error_t error;
+    curve448_scalar_t challenge_scalar;
+    curve448_scalar_t response_scalar;
+    /* Order in little endian format */
+    static const uint8_t order[] = {
+        0xF3, 0x44, 0x58, 0xAB, 0x92, 0xC2, 0x78, 0x23, 0x55, 0x8F, 0xC5, 0x8D,
+        0x72, 0xC2, 0x6C, 0x21, 0x90, 0x36, 0xD6, 0xAE, 0x49, 0xDB, 0x4E, 0xC4,
+        0xE9, 0x23, 0xCA, 0x7C, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0x3F, 0x00
+    };
+    int i;
+
+    /*
+     * Check that s (second 57 bytes of the sig) is less than the order. Both
+     * s and the order are in little-endian format. This can be done in
+     * variable time, since if this is not the case the signature if publicly
+     * invalid.
+     */
+    for (i = EDDSA_448_PUBLIC_BYTES - 1; i >= 0; i--) {
+        if (signature[i + EDDSA_448_PUBLIC_BYTES] > order[i])
+            return C448_FAILURE;
+        if (signature[i + EDDSA_448_PUBLIC_BYTES] < order[i])
+            break;
+    }
+    if (i < 0)
+        return C448_FAILURE;
+
+    error =
+        curve448_point_decode_like_eddsa_and_mul_by_ratio(pk_point, pubkey);
+
+    if (C448_SUCCESS != error)
+        return error;
+
+    error =
+        curve448_point_decode_like_eddsa_and_mul_by_ratio(r_point, signature);
+    if (C448_SUCCESS != error)
+        return error;
+
+    {
+        /* Compute the challenge */
+        EVP_MD_CTX *hashctx = EVP_MD_CTX_new();
+        uint8_t challenge[2 * EDDSA_448_PRIVATE_BYTES];
+
+        if (hashctx == NULL
+                || !hash_init_with_dom(hashctx, prehashed, 0, context,
+                                       context_len)
+                || !EVP_DigestUpdate(hashctx, signature, EDDSA_448_PUBLIC_BYTES)
+                || !EVP_DigestUpdate(hashctx, pubkey, EDDSA_448_PUBLIC_BYTES)
+                || !EVP_DigestUpdate(hashctx, message, message_len)
+                || !EVP_DigestFinalXOF(hashctx, challenge, sizeof(challenge))) {
+            EVP_MD_CTX_free(hashctx);
+            return C448_FAILURE;
+        }
+
+        EVP_MD_CTX_free(hashctx);
+        curve448_scalar_decode_long(challenge_scalar, challenge,
+                                    sizeof(challenge));
+        OPENSSL_cleanse(challenge, sizeof(challenge));
+    }
+    curve448_scalar_sub(challenge_scalar, curve448_scalar_zero,
+                        challenge_scalar);
+
+    curve448_scalar_decode_long(response_scalar,
+                                &signature[EDDSA_448_PUBLIC_BYTES],
+                                EDDSA_448_PRIVATE_BYTES);
+
+    /* pk_point = -c(x(P)) + (cx + k)G = kG */
+    curve448_base_double_scalarmul_non_secret(pk_point,
+                                              response_scalar,
+                                              pk_point, challenge_scalar);
+    return c448_succeed_if(curve448_point_eq(pk_point, r_point));
+}
+
+c448_error_t c448_ed448_verify_prehash(
+                    const uint8_t signature[EDDSA_448_SIGNATURE_BYTES],
+                    const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],
+                    const uint8_t hash[64], const uint8_t *context,
+                    uint8_t context_len)
+{
+    return c448_ed448_verify(signature, pubkey, hash, 64, 1, context,
+                             context_len);
+}
+
+int ED448_sign(uint8_t *out_sig, const uint8_t *message, size_t message_len,
+               const uint8_t public_key[57], const uint8_t private_key[57],
+               const uint8_t *context, size_t context_len)
+{
+    return c448_ed448_sign(out_sig, private_key, public_key, message,
+                           message_len, 0, context, context_len)
+        == C448_SUCCESS;
+}
+
+int ED448_verify(const uint8_t *message, size_t message_len,
+                 const uint8_t signature[114], const uint8_t public_key[57],
+                 const uint8_t *context, size_t context_len)
+{
+    return c448_ed448_verify(signature, public_key, message, message_len, 0,
+                             context, (uint8_t)context_len) == C448_SUCCESS;
+}
+
+int ED448ph_sign(uint8_t *out_sig, const uint8_t hash[64],
+                 const uint8_t public_key[57], const uint8_t private_key[57],
+                 const uint8_t *context, size_t context_len)
+{
+    return c448_ed448_sign_prehash(out_sig, private_key, public_key, hash,
+                                   context, context_len) == C448_SUCCESS;
+
+}
+
+int ED448ph_verify(const uint8_t hash[64], const uint8_t signature[114],
+                   const uint8_t public_key[57], const uint8_t *context,
+                   size_t context_len)
+{
+    return c448_ed448_verify_prehash(signature, public_key, hash, context,
+                                     (uint8_t)context_len) == C448_SUCCESS;
+}
+
+int ED448_public_from_private(uint8_t out_public_key[57],
+                              const uint8_t private_key[57])
+{
+    return c448_ed448_derive_public_key(out_public_key, private_key)
+        == C448_SUCCESS;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/f_generic.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/f_generic.c
new file mode 100644
index 000000000..ed8f36d86
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/f_generic.c
@@ -0,0 +1,204 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+#include "field.h"
+
+static const gf MODULUS = {
+    FIELD_LITERAL(0xffffffffffffff, 0xffffffffffffff, 0xffffffffffffff,
+                  0xffffffffffffff, 0xfffffffffffffe, 0xffffffffffffff,
+                  0xffffffffffffff, 0xffffffffffffff)
+};
+
+/* Serialize to wire format. */
+void gf_serialize(uint8_t serial[SER_BYTES], const gf x, int with_hibit)
+{
+    unsigned int j = 0, fill = 0;
+    dword_t buffer = 0;
+    int i;
+    gf red;
+
+    gf_copy(red, x);
+    gf_strong_reduce(red);
+    if (!with_hibit)
+        assert(gf_hibit(red) == 0);
+
+    for (i = 0; i < (with_hibit ? X_SER_BYTES : SER_BYTES); i++) {
+        if (fill < 8 && j < NLIMBS) {
+            buffer |= ((dword_t) red->limb[LIMBPERM(j)]) << fill;
+            fill += LIMB_PLACE_VALUE(LIMBPERM(j));
+            j++;
+        }
+        serial[i] = (uint8_t)buffer;
+        fill -= 8;
+        buffer >>= 8;
+    }
+}
+
+/* Return high bit of x = low bit of 2x mod p */
+mask_t gf_hibit(const gf x)
+{
+    gf y;
+
+    gf_add(y, x, x);
+    gf_strong_reduce(y);
+    return 0 - (y->limb[0] & 1);
+}
+
+/* Return high bit of x = low bit of 2x mod p */
+mask_t gf_lobit(const gf x)
+{
+    gf y;
+
+    gf_copy(y, x);
+    gf_strong_reduce(y);
+    return 0 - (y->limb[0] & 1);
+}
+
+/* Deserialize from wire format; return -1 on success and 0 on failure. */
+mask_t gf_deserialize(gf x, const uint8_t serial[SER_BYTES], int with_hibit,
+                      uint8_t hi_nmask)
+{
+    unsigned int j = 0, fill = 0;
+    dword_t buffer = 0;
+    dsword_t scarry = 0;
+    const unsigned nbytes = with_hibit ? X_SER_BYTES : SER_BYTES;
+    unsigned int i;
+    mask_t succ;
+
+    for (i = 0; i < NLIMBS; i++) {
+        while (fill < LIMB_PLACE_VALUE(LIMBPERM(i)) && j < nbytes) {
+            uint8_t sj;
+
+            sj = serial[j];
+            if (j == nbytes - 1)
+                sj &= ~hi_nmask;
+            buffer |= ((dword_t) sj) << fill;
+            fill += 8;
+            j++;
+        }
+        x->limb[LIMBPERM(i)] = (word_t)
+            ((i < NLIMBS - 1) ? buffer & LIMB_MASK(LIMBPERM(i)) : buffer);
+        fill -= LIMB_PLACE_VALUE(LIMBPERM(i));
+        buffer >>= LIMB_PLACE_VALUE(LIMBPERM(i));
+        scarry =
+            (scarry + x->limb[LIMBPERM(i)] -
+             MODULUS->limb[LIMBPERM(i)]) >> (8 * sizeof(word_t));
+    }
+    succ = with_hibit ? 0 - (mask_t) 1 : ~gf_hibit(x);
+    return succ & word_is_zero((word_t)buffer) & ~word_is_zero((word_t)scarry);
+}
+
+/* Reduce to canonical form. */
+void gf_strong_reduce(gf a)
+{
+    dsword_t scarry;
+    word_t scarry_0;
+    dword_t carry = 0;
+    unsigned int i;
+
+    /* first, clear high */
+    gf_weak_reduce(a);          /* Determined to have negligible perf impact. */
+
+    /* now the total is less than 2p */
+
+    /* compute total_value - p.  No need to reduce mod p. */
+    scarry = 0;
+    for (i = 0; i < NLIMBS; i++) {
+        scarry = scarry + a->limb[LIMBPERM(i)] - MODULUS->limb[LIMBPERM(i)];
+        a->limb[LIMBPERM(i)] = scarry & LIMB_MASK(LIMBPERM(i));
+        scarry >>= LIMB_PLACE_VALUE(LIMBPERM(i));
+    }
+
+    /*
+     * uncommon case: it was >= p, so now scarry = 0 and this = x common case:
+     * it was < p, so now scarry = -1 and this = x - p + 2^255 so let's add
+     * back in p.  will carry back off the top for 2^255.
+     */
+    assert(scarry == 0 || scarry == -1);
+
+    scarry_0 = (word_t)scarry;
+
+    /* add it back */
+    for (i = 0; i < NLIMBS; i++) {
+        carry =
+            carry + a->limb[LIMBPERM(i)] +
+            (scarry_0 & MODULUS->limb[LIMBPERM(i)]);
+        a->limb[LIMBPERM(i)] = carry & LIMB_MASK(LIMBPERM(i));
+        carry >>= LIMB_PLACE_VALUE(LIMBPERM(i));
+    }
+
+    assert(carry < 2 && ((word_t)carry + scarry_0) == 0);
+}
+
+/* Subtract two gf elements d=a-b */
+void gf_sub(gf d, const gf a, const gf b)
+{
+    gf_sub_RAW(d, a, b);
+    gf_bias(d, 2);
+    gf_weak_reduce(d);
+}
+
+/* Add two field elements d = a+b */
+void gf_add(gf d, const gf a, const gf b)
+{
+    gf_add_RAW(d, a, b);
+    gf_weak_reduce(d);
+}
+
+/* Compare a==b */
+mask_t gf_eq(const gf a, const gf b)
+{
+    gf c;
+    mask_t ret = 0;
+    unsigned int i;
+
+    gf_sub(c, a, b);
+    gf_strong_reduce(c);
+
+    for (i = 0; i < NLIMBS; i++)
+        ret |= c->limb[LIMBPERM(i)];
+
+    return word_is_zero(ret);
+}
+
+mask_t gf_isr(gf a, const gf x)
+{
+    gf L0, L1, L2;
+
+    gf_sqr(L1, x);
+    gf_mul(L2, x, L1);
+    gf_sqr(L1, L2);
+    gf_mul(L2, x, L1);
+    gf_sqrn(L1, L2, 3);
+    gf_mul(L0, L2, L1);
+    gf_sqrn(L1, L0, 3);
+    gf_mul(L0, L2, L1);
+    gf_sqrn(L2, L0, 9);
+    gf_mul(L1, L0, L2);
+    gf_sqr(L0, L1);
+    gf_mul(L2, x, L0);
+    gf_sqrn(L0, L2, 18);
+    gf_mul(L2, L1, L0);
+    gf_sqrn(L0, L2, 37);
+    gf_mul(L1, L2, L0);
+    gf_sqrn(L0, L1, 37);
+    gf_mul(L1, L2, L0);
+    gf_sqrn(L0, L1, 111);
+    gf_mul(L2, L1, L0);
+    gf_sqr(L0, L2);
+    gf_mul(L1, x, L0);
+    gf_sqrn(L0, L1, 223);
+    gf_mul(L1, L2, L0);
+    gf_sqr(L2, L1);
+    gf_mul(L0, L2, x);
+    gf_copy(a, L1);
+    return gf_eq(L0, ONE);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/field.h b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/field.h
new file mode 100644
index 000000000..d96d4c023
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/field.h
@@ -0,0 +1,168 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2014 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+
+#ifndef HEADER_FIELD_H
+# define HEADER_FIELD_H
+
+# include "internal/constant_time_locl.h"
+# include <string.h>
+# include <assert.h>
+# include "word.h"
+
+# define NLIMBS (64/sizeof(word_t))
+# define X_SER_BYTES 56
+# define SER_BYTES 56
+
+# if defined(__GNUC__) || defined(__clang__)
+#  define INLINE_UNUSED __inline__ __attribute__((__unused__,__always_inline__))
+#  define RESTRICT __restrict__
+#  define ALIGNED __attribute__((__aligned__(16)))
+# else
+#  define INLINE_UNUSED ossl_inline
+#  define RESTRICT
+#  define ALIGNED
+# endif
+
+typedef struct gf_s {
+    word_t limb[NLIMBS];
+} ALIGNED gf_s, gf[1];
+
+/* RFC 7748 support */
+# define X_PUBLIC_BYTES  X_SER_BYTES
+# define X_PRIVATE_BYTES X_PUBLIC_BYTES
+# define X_PRIVATE_BITS  448
+
+static INLINE_UNUSED void gf_copy(gf out, const gf a)
+{
+    *out = *a;
+}
+
+static INLINE_UNUSED void gf_add_RAW(gf out, const gf a, const gf b);
+static INLINE_UNUSED void gf_sub_RAW(gf out, const gf a, const gf b);
+static INLINE_UNUSED void gf_bias(gf inout, int amount);
+static INLINE_UNUSED void gf_weak_reduce(gf inout);
+
+void gf_strong_reduce(gf inout);
+void gf_add(gf out, const gf a, const gf b);
+void gf_sub(gf out, const gf a, const gf b);
+void gf_mul(gf_s * RESTRICT out, const gf a, const gf b);
+void gf_mulw_unsigned(gf_s * RESTRICT out, const gf a, uint32_t b);
+void gf_sqr(gf_s * RESTRICT out, const gf a);
+mask_t gf_isr(gf a, const gf x); /** a^2 x = 1, QNR, or 0 if x=0.  Return true if successful */
+mask_t gf_eq(const gf x, const gf y);
+mask_t gf_lobit(const gf x);
+mask_t gf_hibit(const gf x);
+
+void gf_serialize(uint8_t *serial, const gf x, int with_highbit);
+mask_t gf_deserialize(gf x, const uint8_t serial[SER_BYTES], int with_hibit,
+                      uint8_t hi_nmask);
+
+# include "f_impl.h"            /* Bring in the inline implementations */
+
+# define LIMBPERM(i) (i)
+# define LIMB_MASK(i) (((1)<<LIMB_PLACE_VALUE(i))-1)
+
+static const gf ZERO = {{{0}}}, ONE = {{{1}}};
+
+/* Square x, n times. */
+static ossl_inline void gf_sqrn(gf_s * RESTRICT y, const gf x, int n)
+{
+    gf tmp;
+
+    assert(n > 0);
+    if (n & 1) {
+        gf_sqr(y, x);
+        n--;
+    } else {
+        gf_sqr(tmp, x);
+        gf_sqr(y, tmp);
+        n -= 2;
+    }
+    for (; n; n -= 2) {
+        gf_sqr(tmp, y);
+        gf_sqr(y, tmp);
+    }
+}
+
+# define gf_add_nr gf_add_RAW
+
+/* Subtract mod p.  Bias by 2 and don't reduce  */
+static ossl_inline void gf_sub_nr(gf c, const gf a, const gf b)
+{
+    gf_sub_RAW(c, a, b);
+    gf_bias(c, 2);
+    if (GF_HEADROOM < 3)
+        gf_weak_reduce(c);
+}
+
+/* Subtract mod p. Bias by amt but don't reduce.  */
+static ossl_inline void gf_subx_nr(gf c, const gf a, const gf b, int amt)
+{
+    gf_sub_RAW(c, a, b);
+    gf_bias(c, amt);
+    if (GF_HEADROOM < amt + 1)
+        gf_weak_reduce(c);
+}
+
+/* Mul by signed int.  Not constant-time WRT the sign of that int. */
+static ossl_inline void gf_mulw(gf c, const gf a, int32_t w)
+{
+    if (w > 0) {
+        gf_mulw_unsigned(c, a, w);
+    } else {
+        gf_mulw_unsigned(c, a, -w);
+        gf_sub(c, ZERO, c);
+    }
+}
+
+/* Constant time, x = is_z ? z : y */
+static ossl_inline void gf_cond_sel(gf x, const gf y, const gf z, mask_t is_z)
+{
+    size_t i;
+
+    for (i = 0; i < NLIMBS; i++) {
+#if ARCH_WORD_BITS == 32
+        x[0].limb[i] = constant_time_select_32(is_z, z[0].limb[i],
+                                               y[0].limb[i]);
+#else
+        /* Must be 64 bit */
+        x[0].limb[i] = constant_time_select_64(is_z, z[0].limb[i],
+                                               y[0].limb[i]);
+#endif
+    }
+}
+
+/* Constant time, if (neg) x=-x; */
+static ossl_inline void gf_cond_neg(gf x, mask_t neg)
+{
+    gf y;
+
+    gf_sub(y, ZERO, x);
+    gf_cond_sel(x, x, y, neg);
+}
+
+/* Constant time, if (swap) (x,y) = (y,x); */
+static ossl_inline void gf_cond_swap(gf x, gf_s * RESTRICT y, mask_t swap)
+{
+    size_t i;
+
+    for (i = 0; i < NLIMBS; i++) {
+#if ARCH_WORD_BITS == 32
+        constant_time_cond_swap_32(swap, &(x[0].limb[i]), &(y->limb[i]));
+#else
+        /* Must be 64 bit */
+        constant_time_cond_swap_64(swap, &(x[0].limb[i]), &(y->limb[i]));
+#endif
+    }
+}
+
+#endif                          /* HEADER_FIELD_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/point_448.h b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/point_448.h
new file mode 100644
index 000000000..399f91b9a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/point_448.h
@@ -0,0 +1,301 @@
+/*
+ * Copyright 2017-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+
+#ifndef HEADER_POINT_448_H
+# define HEADER_POINT_448_H
+
+# include "curve448utils.h"
+# include "field.h"
+
+/* Comb config: number of combs, n, t, s. */
+#define COMBS_N 5
+#define COMBS_T 5
+#define COMBS_S 18
+
+/* Projective Niels coordinates */
+typedef struct {
+    gf a, b, c;
+} niels_s, niels_t[1];
+typedef struct {
+    niels_t n;
+    gf z;
+} pniels_t[1];
+
+/* Precomputed base */
+struct curve448_precomputed_s {
+    niels_t table[COMBS_N << (COMBS_T - 1)];
+};
+
+# define C448_SCALAR_LIMBS ((446-1)/C448_WORD_BITS+1)
+
+/* The number of bits in a scalar */
+# define C448_SCALAR_BITS 446
+
+/* Number of bytes in a serialized scalar. */
+# define C448_SCALAR_BYTES 56
+
+/* X448 encoding ratio. */
+# define X448_ENCODE_RATIO 2
+
+/* Number of bytes in an x448 public key */
+# define X448_PUBLIC_BYTES 56
+
+/* Number of bytes in an x448 private key */
+# define X448_PRIVATE_BYTES 56
+
+/* Twisted Edwards extended homogeneous coordinates */
+typedef struct curve448_point_s {
+    gf x, y, z, t;
+} curve448_point_t[1];
+
+/* Precomputed table based on a point.  Can be trivial implementation. */
+struct curve448_precomputed_s;
+
+/* Precomputed table based on a point.  Can be trivial implementation. */
+typedef struct curve448_precomputed_s curve448_precomputed_s;
+
+/* Scalar is stored packed, because we don't need the speed. */
+typedef struct curve448_scalar_s {
+    c448_word_t limb[C448_SCALAR_LIMBS];
+} curve448_scalar_t[1];
+
+/* A scalar equal to 1. */
+extern const curve448_scalar_t curve448_scalar_one;
+
+/* A scalar equal to 0. */
+extern const curve448_scalar_t curve448_scalar_zero;
+
+/* The identity point on the curve. */
+extern const curve448_point_t curve448_point_identity;
+
+/* Precomputed table for the base point on the curve. */
+extern const struct curve448_precomputed_s *curve448_precomputed_base;
+extern const niels_t *curve448_wnaf_base;
+
+/*
+ * Read a scalar from wire format or from bytes.
+ *
+ * ser (in): Serialized form of a scalar.
+ * out (out): Deserialized form.
+ *
+ * Returns:
+ * C448_SUCCESS: The scalar was correctly encoded.
+ * C448_FAILURE: The scalar was greater than the modulus, and has been reduced
+ * modulo that modulus.
+ */
+c448_error_t curve448_scalar_decode(curve448_scalar_t out,
+                                    const unsigned char ser[C448_SCALAR_BYTES]);
+
+/*
+ * Read a scalar from wire format or from bytes.  Reduces mod scalar prime.
+ *
+ * ser (in): Serialized form of a scalar.
+ * ser_len (in): Length of serialized form.
+ * out (out): Deserialized form.
+ */
+void curve448_scalar_decode_long(curve448_scalar_t out,
+                                 const unsigned char *ser, size_t ser_len);
+
+/*
+ * Serialize a scalar to wire format.
+ *
+ * ser (out): Serialized form of a scalar.
+ * s (in): Deserialized scalar.
+ */
+void curve448_scalar_encode(unsigned char ser[C448_SCALAR_BYTES],
+                            const curve448_scalar_t s);
+
+/*
+ * Add two scalars. |a|, |b| and |out| may alias each other.
+ *
+ * a (in): One scalar.
+ * b (in): Another scalar.
+ * out (out): a+b.
+ */
+void curve448_scalar_add(curve448_scalar_t out,
+                         const curve448_scalar_t a, const curve448_scalar_t b);
+
+/*
+ * Subtract two scalars.  |a|, |b| and |out| may alias each other.
+ * a (in): One scalar.
+ * b (in): Another scalar.
+ * out (out): a-b.
+ */
+void curve448_scalar_sub(curve448_scalar_t out,
+                         const curve448_scalar_t a, const curve448_scalar_t b);
+
+/*
+ * Multiply two scalars. |a|, |b| and |out| may alias each other.
+ *
+ * a (in): One scalar.
+ * b (in): Another scalar.
+ * out (out): a*b.
+ */
+void curve448_scalar_mul(curve448_scalar_t out,
+                         const curve448_scalar_t a, const curve448_scalar_t b);
+
+/*
+* Halve a scalar.  |a| and |out| may alias each other.
+*
+* a (in): A scalar.
+* out (out): a/2.
+*/
+void curve448_scalar_halve(curve448_scalar_t out, const curve448_scalar_t a);
+
+/*
+ * Copy a scalar.  The scalars may alias each other, in which case this
+ * function does nothing.
+ *
+ * a (in): A scalar.
+ * out (out): Will become a copy of a.
+ */
+static ossl_inline void curve448_scalar_copy(curve448_scalar_t out,
+                                             const curve448_scalar_t a)
+{
+    *out = *a;
+}
+
+/*
+ * Copy a point.  The input and output may alias, in which case this function
+ * does nothing.
+ *
+ * a (out): A copy of the point.
+ * b (in): Any point.
+ */
+static ossl_inline void curve448_point_copy(curve448_point_t a,
+                                            const curve448_point_t b)
+{
+    *a = *b;
+}
+
+/*
+ * Test whether two points are equal.  If yes, return C448_TRUE, else return
+ * C448_FALSE.
+ *
+ * a (in): A point.
+ * b (in): Another point.
+ *
+ * Returns:
+ * C448_TRUE: The points are equal.
+ * C448_FALSE: The points are not equal.
+ */
+__owur c448_bool_t curve448_point_eq(const curve448_point_t a,
+                                     const curve448_point_t b);
+
+/*
+ * Double a point. Equivalent to curve448_point_add(two_a,a,a), but potentially
+ * faster.
+ *
+ * two_a (out): The sum a+a.
+ * a (in): A point.
+ */
+void curve448_point_double(curve448_point_t two_a, const curve448_point_t a);
+
+/*
+ * RFC 7748 Diffie-Hellman scalarmul.  This function uses a different
+ * (non-Decaf) encoding.
+ *
+ * out (out): The scaled point base*scalar
+ * base (in): The point to be scaled.
+ * scalar (in): The scalar to multiply by.
+ *
+ * Returns:
+ * C448_SUCCESS: The scalarmul succeeded.
+ * C448_FAILURE: The scalarmul didn't succeed, because the base point is in a
+ * small subgroup.
+ */
+__owur c448_error_t x448_int(uint8_t out[X448_PUBLIC_BYTES],
+                             const uint8_t base[X448_PUBLIC_BYTES],
+                             const uint8_t scalar[X448_PRIVATE_BYTES]);
+
+/*
+ * Multiply a point by X448_ENCODE_RATIO, then encode it like RFC 7748.
+ *
+ * This function is mainly used internally, but is exported in case
+ * it will be useful.
+ *
+ * The ratio is necessary because the internal representation doesn't
+ * track the cofactor information, so on output we must clear the cofactor.
+ * This would multiply by the cofactor, but in fact internally points are always
+ * even, so it multiplies by half the cofactor instead.
+ *
+ * As it happens, this aligns with the base point definitions; that is,
+ * if you pass the Decaf/Ristretto base point to this function, the result
+ * will be X448_ENCODE_RATIO times the X448
+ * base point.
+ *
+ * out (out): The scaled and encoded point.
+ * p (in): The point to be scaled and encoded.
+ */
+void curve448_point_mul_by_ratio_and_encode_like_x448(
+                                        uint8_t out[X448_PUBLIC_BYTES],
+                                        const curve448_point_t p);
+
+/*
+ * RFC 7748 Diffie-Hellman base point scalarmul.  This function uses a different
+ * (non-Decaf) encoding.
+ *
+ * out (out): The scaled point base*scalar
+ * scalar (in): The scalar to multiply by.
+ */
+void x448_derive_public_key(uint8_t out[X448_PUBLIC_BYTES],
+                            const uint8_t scalar[X448_PRIVATE_BYTES]);
+
+/*
+ * Multiply a precomputed base point by a scalar: out = scalar*base.
+ *
+ * scaled (out): The scaled point base*scalar
+ * base (in): The point to be scaled.
+ * scalar (in): The scalar to multiply by.
+ */
+void curve448_precomputed_scalarmul(curve448_point_t scaled,
+                                    const curve448_precomputed_s * base,
+                                    const curve448_scalar_t scalar);
+
+/*
+ * Multiply two base points by two scalars:
+ * combo = scalar1*curve448_point_base + scalar2*base2.
+ *
+ * Otherwise equivalent to curve448_point_double_scalarmul, but may be
+ * faster at the expense of being variable time.
+ *
+ * combo (out): The linear combination scalar1*base + scalar2*base2.
+ * scalar1 (in): A first scalar to multiply by.
+ * base2 (in): A second point to be scaled.
+ * scalar2 (in) A second scalar to multiply by.
+ *
+ * Warning: This function takes variable time, and may leak the scalars used.
+ * It is designed for signature verification.
+ */
+void curve448_base_double_scalarmul_non_secret(curve448_point_t combo,
+                                               const curve448_scalar_t scalar1,
+                                               const curve448_point_t base2,
+                                               const curve448_scalar_t scalar2);
+
+/*
+ * Test that a point is valid, for debugging purposes.
+ *
+ * to_test (in): The point to test.
+ *
+ * Returns:
+ * C448_TRUE The point is valid.
+ * C448_FALSE The point is invalid.
+ */
+__owur c448_bool_t curve448_point_valid(const curve448_point_t to_test);
+
+/* Overwrite scalar with zeros. */
+void curve448_scalar_destroy(curve448_scalar_t scalar);
+
+/* Overwrite point with zeros. */
+void curve448_point_destroy(curve448_point_t point);
+
+#endif                          /* HEADER_POINT_448_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/scalar.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/scalar.c
new file mode 100644
index 000000000..b5702c025
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/scalar.c
@@ -0,0 +1,235 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+#include <openssl/crypto.h>
+
+#include "word.h"
+#include "point_448.h"
+
+static const c448_word_t MONTGOMERY_FACTOR = (c448_word_t) 0x3bd440fae918bc5;
+static const curve448_scalar_t sc_p = {
+    {
+        {
+            SC_LIMB(0x2378c292ab5844f3), SC_LIMB(0x216cc2728dc58f55),
+            SC_LIMB(0xc44edb49aed63690), SC_LIMB(0xffffffff7cca23e9),
+            SC_LIMB(0xffffffffffffffff), SC_LIMB(0xffffffffffffffff),
+            SC_LIMB(0x3fffffffffffffff)
+        }
+    }
+}, sc_r2 = {
+    {
+        {
+
+            SC_LIMB(0xe3539257049b9b60), SC_LIMB(0x7af32c4bc1b195d9),
+            SC_LIMB(0x0d66de2388ea1859), SC_LIMB(0xae17cf725ee4d838),
+            SC_LIMB(0x1a9cc14ba3c47c44), SC_LIMB(0x2052bcb7e4d070af),
+            SC_LIMB(0x3402a939f823b729)
+        }
+    }
+};
+
+#define WBITS C448_WORD_BITS   /* NB this may be different from ARCH_WORD_BITS */
+
+const curve448_scalar_t curve448_scalar_one = {{{1}}};
+const curve448_scalar_t curve448_scalar_zero = {{{0}}};
+
+/*
+ * {extra,accum} - sub +? p
+ * Must have extra <= 1
+ */
+static void sc_subx(curve448_scalar_t out,
+                    const c448_word_t accum[C448_SCALAR_LIMBS],
+                    const curve448_scalar_t sub,
+                    const curve448_scalar_t p, c448_word_t extra)
+{
+    c448_dsword_t chain = 0;
+    unsigned int i;
+    c448_word_t borrow;
+
+    for (i = 0; i < C448_SCALAR_LIMBS; i++) {
+        chain = (chain + accum[i]) - sub->limb[i];
+        out->limb[i] = (c448_word_t)chain;
+        chain >>= WBITS;
+    }
+    borrow = (c448_word_t)chain + extra;     /* = 0 or -1 */
+
+    chain = 0;
+    for (i = 0; i < C448_SCALAR_LIMBS; i++) {
+        chain = (chain + out->limb[i]) + (p->limb[i] & borrow);
+        out->limb[i] = (c448_word_t)chain;
+        chain >>= WBITS;
+    }
+}
+
+static void sc_montmul(curve448_scalar_t out, const curve448_scalar_t a,
+                       const curve448_scalar_t b)
+{
+    unsigned int i, j;
+    c448_word_t accum[C448_SCALAR_LIMBS + 1] = { 0 };
+    c448_word_t hi_carry = 0;
+
+    for (i = 0; i < C448_SCALAR_LIMBS; i++) {
+        c448_word_t mand = a->limb[i];
+        const c448_word_t *mier = b->limb;
+
+        c448_dword_t chain = 0;
+        for (j = 0; j < C448_SCALAR_LIMBS; j++) {
+            chain += ((c448_dword_t) mand) * mier[j] + accum[j];
+            accum[j] = (c448_word_t)chain;
+            chain >>= WBITS;
+        }
+        accum[j] = (c448_word_t)chain;
+
+        mand = accum[0] * MONTGOMERY_FACTOR;
+        chain = 0;
+        mier = sc_p->limb;
+        for (j = 0; j < C448_SCALAR_LIMBS; j++) {
+            chain += (c448_dword_t) mand *mier[j] + accum[j];
+            if (j)
+                accum[j - 1] = (c448_word_t)chain;
+            chain >>= WBITS;
+        }
+        chain += accum[j];
+        chain += hi_carry;
+        accum[j - 1] = (c448_word_t)chain;
+        hi_carry = chain >> WBITS;
+    }
+
+    sc_subx(out, accum, sc_p, sc_p, hi_carry);
+}
+
+void curve448_scalar_mul(curve448_scalar_t out, const curve448_scalar_t a,
+                         const curve448_scalar_t b)
+{
+    sc_montmul(out, a, b);
+    sc_montmul(out, out, sc_r2);
+}
+
+void curve448_scalar_sub(curve448_scalar_t out, const curve448_scalar_t a,
+                         const curve448_scalar_t b)
+{
+    sc_subx(out, a->limb, b, sc_p, 0);
+}
+
+void curve448_scalar_add(curve448_scalar_t out, const curve448_scalar_t a,
+                         const curve448_scalar_t b)
+{
+    c448_dword_t chain = 0;
+    unsigned int i;
+
+    for (i = 0; i < C448_SCALAR_LIMBS; i++) {
+        chain = (chain + a->limb[i]) + b->limb[i];
+        out->limb[i] = (c448_word_t)chain;
+        chain >>= WBITS;
+    }
+    sc_subx(out, out->limb, sc_p, sc_p, (c448_word_t)chain);
+}
+
+static ossl_inline void scalar_decode_short(curve448_scalar_t s,
+                                            const unsigned char *ser,
+                                            size_t nbytes)
+{
+    size_t i, j, k = 0;
+
+    for (i = 0; i < C448_SCALAR_LIMBS; i++) {
+        c448_word_t out = 0;
+
+        for (j = 0; j < sizeof(c448_word_t) && k < nbytes; j++, k++)
+            out |= ((c448_word_t) ser[k]) << (8 * j);
+        s->limb[i] = out;
+    }
+}
+
+c448_error_t curve448_scalar_decode(
+                                curve448_scalar_t s,
+                                const unsigned char ser[C448_SCALAR_BYTES])
+{
+    unsigned int i;
+    c448_dsword_t accum = 0;
+
+    scalar_decode_short(s, ser, C448_SCALAR_BYTES);
+    for (i = 0; i < C448_SCALAR_LIMBS; i++)
+        accum = (accum + s->limb[i] - sc_p->limb[i]) >> WBITS;
+    /* Here accum == 0 or -1 */
+
+    curve448_scalar_mul(s, s, curve448_scalar_one); /* ham-handed reduce */
+
+    return c448_succeed_if(~word_is_zero((uint32_t)accum));
+}
+
+void curve448_scalar_destroy(curve448_scalar_t scalar)
+{
+    OPENSSL_cleanse(scalar, sizeof(curve448_scalar_t));
+}
+
+void curve448_scalar_decode_long(curve448_scalar_t s,
+                                 const unsigned char *ser, size_t ser_len)
+{
+    size_t i;
+    curve448_scalar_t t1, t2;
+
+    if (ser_len == 0) {
+        curve448_scalar_copy(s, curve448_scalar_zero);
+        return;
+    }
+
+    i = ser_len - (ser_len % C448_SCALAR_BYTES);
+    if (i == ser_len)
+        i -= C448_SCALAR_BYTES;
+
+    scalar_decode_short(t1, &ser[i], ser_len - i);
+
+    if (ser_len == sizeof(curve448_scalar_t)) {
+        assert(i == 0);
+        /* ham-handed reduce */
+        curve448_scalar_mul(s, t1, curve448_scalar_one);
+        curve448_scalar_destroy(t1);
+        return;
+    }
+
+    while (i) {
+        i -= C448_SCALAR_BYTES;
+        sc_montmul(t1, t1, sc_r2);
+        (void)curve448_scalar_decode(t2, ser + i);
+        curve448_scalar_add(t1, t1, t2);
+    }
+
+    curve448_scalar_copy(s, t1);
+    curve448_scalar_destroy(t1);
+    curve448_scalar_destroy(t2);
+}
+
+void curve448_scalar_encode(unsigned char ser[C448_SCALAR_BYTES],
+                            const curve448_scalar_t s)
+{
+    unsigned int i, j, k = 0;
+
+    for (i = 0; i < C448_SCALAR_LIMBS; i++) {
+        for (j = 0; j < sizeof(c448_word_t); j++, k++)
+            ser[k] = s->limb[i] >> (8 * j);
+    }
+}
+
+void curve448_scalar_halve(curve448_scalar_t out, const curve448_scalar_t a)
+{
+    c448_word_t mask = 0 - (a->limb[0] & 1);
+    c448_dword_t chain = 0;
+    unsigned int i;
+
+    for (i = 0; i < C448_SCALAR_LIMBS; i++) {
+        chain = (chain + a->limb[i]) + (sc_p->limb[i] & mask);
+        out->limb[i] = (c448_word_t)chain;
+        chain >>= C448_WORD_BITS;
+    }
+    for (i = 0; i < C448_SCALAR_LIMBS - 1; i++)
+        out->limb[i] = out->limb[i] >> 1 | out->limb[i + 1] << (WBITS - 1);
+    out->limb[i] = out->limb[i] >> 1 | (c448_word_t)(chain << (WBITS - 1));
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/word.h b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/word.h
new file mode 100644
index 000000000..a48b9e053
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/curve448/word.h
@@ -0,0 +1,81 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2014 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+
+#ifndef HEADER_WORD_H
+# define HEADER_WORD_H
+
+# include <string.h>
+# include <assert.h>
+# include <stdlib.h>
+# include <openssl/e_os2.h>
+# include "arch_intrinsics.h"
+# include "curve448utils.h"
+
+# if (ARCH_WORD_BITS == 64)
+typedef uint64_t word_t, mask_t;
+typedef __uint128_t dword_t;
+typedef int32_t hsword_t;
+typedef int64_t sword_t;
+typedef __int128_t dsword_t;
+# elif (ARCH_WORD_BITS == 32)
+typedef uint32_t word_t, mask_t;
+typedef uint64_t dword_t;
+typedef int16_t hsword_t;
+typedef int32_t sword_t;
+typedef int64_t dsword_t;
+# else
+#  error "For now, we only support 32- and 64-bit architectures."
+# endif
+
+/*
+ * Scalar limbs are keyed off of the API word size instead of the arch word
+ * size.
+ */
+# if C448_WORD_BITS == 64
+#  define SC_LIMB(x) (x)
+# elif C448_WORD_BITS == 32
+#  define SC_LIMB(x) ((uint32_t)(x)),((x) >> 32)
+# else
+#  error "For now we only support 32- and 64-bit architectures."
+# endif
+
+/*
+ * The plan on booleans: The external interface uses c448_bool_t, but this
+ * might be a different size than our particular arch's word_t (and thus
+ * mask_t).  Also, the caller isn't guaranteed to pass it as nonzero.  So
+ * bool_to_mask converts word sizes and checks nonzero. On the flip side,
+ * mask_t is always -1 or 0, but it might be a different size than
+ * c448_bool_t. On the third hand, we have success vs boolean types, but
+ * that's handled in common.h: it converts between c448_bool_t and
+ * c448_error_t.
+ */
+static ossl_inline c448_bool_t mask_to_bool(mask_t m)
+{
+    return (c448_sword_t)(sword_t)m;
+}
+
+static ossl_inline mask_t bool_to_mask(c448_bool_t m)
+{
+    /* On most arches this will be optimized to a simple cast. */
+    mask_t ret = 0;
+    unsigned int i;
+    unsigned int limit = sizeof(c448_bool_t) / sizeof(mask_t);
+
+    if (limit < 1)
+        limit = 1;
+    for (i = 0; i < limit; i++)
+        ret |= ~word_is_zero(m >> (i * 8 * sizeof(word_t)));
+
+    return ret;
+}
+
+#endif                          /* HEADER_WORD_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec2_oct.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec2_oct.c
new file mode 100644
index 000000000..0867f994e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec2_oct.c
@@ -0,0 +1,337 @@
+/*
+ * Copyright 2011-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+
+#include "ec_lcl.h"
+
+#ifndef OPENSSL_NO_EC2M
+
+/*-
+ * Calculates and sets the affine coordinates of an EC_POINT from the given
+ * compressed coordinates.  Uses algorithm 2.3.4 of SEC 1.
+ * Note that the simple implementation only uses affine coordinates.
+ *
+ * The method is from the following publication:
+ *
+ *     Harper, Menezes, Vanstone:
+ *     "Public-Key Cryptosystems with Very Small Key Lengths",
+ *     EUROCRYPT '92, Springer-Verlag LNCS 658,
+ *     published February 1993
+ *
+ * US Patents 6,141,420 and 6,618,483 (Vanstone, Mullin, Agnew) describe
+ * the same method, but claim no priority date earlier than July 29, 1994
+ * (and additionally fail to cite the EUROCRYPT '92 publication as prior art).
+ */
+int ec_GF2m_simple_set_compressed_coordinates(const EC_GROUP *group,
+                                              EC_POINT *point,
+                                              const BIGNUM *x_, int y_bit,
+                                              BN_CTX *ctx)
+{
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *tmp, *x, *y, *z;
+    int ret = 0, z0;
+
+    /* clear error queue */
+    ERR_clear_error();
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return 0;
+    }
+
+    y_bit = (y_bit != 0) ? 1 : 0;
+
+    BN_CTX_start(ctx);
+    tmp = BN_CTX_get(ctx);
+    x = BN_CTX_get(ctx);
+    y = BN_CTX_get(ctx);
+    z = BN_CTX_get(ctx);
+    if (z == NULL)
+        goto err;
+
+    if (!BN_GF2m_mod_arr(x, x_, group->poly))
+        goto err;
+    if (BN_is_zero(x)) {
+        if (!BN_GF2m_mod_sqrt_arr(y, group->b, group->poly, ctx))
+            goto err;
+    } else {
+        if (!group->meth->field_sqr(group, tmp, x, ctx))
+            goto err;
+        if (!group->meth->field_div(group, tmp, group->b, tmp, ctx))
+            goto err;
+        if (!BN_GF2m_add(tmp, group->a, tmp))
+            goto err;
+        if (!BN_GF2m_add(tmp, x, tmp))
+            goto err;
+        if (!BN_GF2m_mod_solve_quad_arr(z, tmp, group->poly, ctx)) {
+            unsigned long err = ERR_peek_last_error();
+
+            if (ERR_GET_LIB(err) == ERR_LIB_BN
+                && ERR_GET_REASON(err) == BN_R_NO_SOLUTION) {
+                ERR_clear_error();
+                ECerr(EC_F_EC_GF2M_SIMPLE_SET_COMPRESSED_COORDINATES,
+                      EC_R_INVALID_COMPRESSED_POINT);
+            } else
+                ECerr(EC_F_EC_GF2M_SIMPLE_SET_COMPRESSED_COORDINATES,
+                      ERR_R_BN_LIB);
+            goto err;
+        }
+        z0 = (BN_is_odd(z)) ? 1 : 0;
+        if (!group->meth->field_mul(group, y, x, z, ctx))
+            goto err;
+        if (z0 != y_bit) {
+            if (!BN_GF2m_add(y, y, x))
+                goto err;
+        }
+    }
+
+    if (!EC_POINT_set_affine_coordinates(group, point, x, y, ctx))
+        goto err;
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+/*
+ * Converts an EC_POINT to an octet string. If buf is NULL, the encoded
+ * length will be returned. If the length len of buf is smaller than required
+ * an error will be returned.
+ */
+size_t ec_GF2m_simple_point2oct(const EC_GROUP *group, const EC_POINT *point,
+                                point_conversion_form_t form,
+                                unsigned char *buf, size_t len, BN_CTX *ctx)
+{
+    size_t ret;
+    BN_CTX *new_ctx = NULL;
+    int used_ctx = 0;
+    BIGNUM *x, *y, *yxi;
+    size_t field_len, i, skip;
+
+    if ((form != POINT_CONVERSION_COMPRESSED)
+        && (form != POINT_CONVERSION_UNCOMPRESSED)
+        && (form != POINT_CONVERSION_HYBRID)) {
+        ECerr(EC_F_EC_GF2M_SIMPLE_POINT2OCT, EC_R_INVALID_FORM);
+        goto err;
+    }
+
+    if (EC_POINT_is_at_infinity(group, point)) {
+        /* encodes to a single 0 octet */
+        if (buf != NULL) {
+            if (len < 1) {
+                ECerr(EC_F_EC_GF2M_SIMPLE_POINT2OCT, EC_R_BUFFER_TOO_SMALL);
+                return 0;
+            }
+            buf[0] = 0;
+        }
+        return 1;
+    }
+
+    /* ret := required output buffer length */
+    field_len = (EC_GROUP_get_degree(group) + 7) / 8;
+    ret =
+        (form ==
+         POINT_CONVERSION_COMPRESSED) ? 1 + field_len : 1 + 2 * field_len;
+
+    /* if 'buf' is NULL, just return required length */
+    if (buf != NULL) {
+        if (len < ret) {
+            ECerr(EC_F_EC_GF2M_SIMPLE_POINT2OCT, EC_R_BUFFER_TOO_SMALL);
+            goto err;
+        }
+
+        if (ctx == NULL) {
+            ctx = new_ctx = BN_CTX_new();
+            if (ctx == NULL)
+                return 0;
+        }
+
+        BN_CTX_start(ctx);
+        used_ctx = 1;
+        x = BN_CTX_get(ctx);
+        y = BN_CTX_get(ctx);
+        yxi = BN_CTX_get(ctx);
+        if (yxi == NULL)
+            goto err;
+
+        if (!EC_POINT_get_affine_coordinates(group, point, x, y, ctx))
+            goto err;
+
+        buf[0] = form;
+        if ((form != POINT_CONVERSION_UNCOMPRESSED) && !BN_is_zero(x)) {
+            if (!group->meth->field_div(group, yxi, y, x, ctx))
+                goto err;
+            if (BN_is_odd(yxi))
+                buf[0]++;
+        }
+
+        i = 1;
+
+        skip = field_len - BN_num_bytes(x);
+        if (skip > field_len) {
+            ECerr(EC_F_EC_GF2M_SIMPLE_POINT2OCT, ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        while (skip > 0) {
+            buf[i++] = 0;
+            skip--;
+        }
+        skip = BN_bn2bin(x, buf + i);
+        i += skip;
+        if (i != 1 + field_len) {
+            ECerr(EC_F_EC_GF2M_SIMPLE_POINT2OCT, ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        if (form == POINT_CONVERSION_UNCOMPRESSED
+            || form == POINT_CONVERSION_HYBRID) {
+            skip = field_len - BN_num_bytes(y);
+            if (skip > field_len) {
+                ECerr(EC_F_EC_GF2M_SIMPLE_POINT2OCT, ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+            while (skip > 0) {
+                buf[i++] = 0;
+                skip--;
+            }
+            skip = BN_bn2bin(y, buf + i);
+            i += skip;
+        }
+
+        if (i != ret) {
+            ECerr(EC_F_EC_GF2M_SIMPLE_POINT2OCT, ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+    }
+
+    if (used_ctx)
+        BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+
+ err:
+    if (used_ctx)
+        BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return 0;
+}
+
+/*
+ * Converts an octet string representation to an EC_POINT. Note that the
+ * simple implementation only uses affine coordinates.
+ */
+int ec_GF2m_simple_oct2point(const EC_GROUP *group, EC_POINT *point,
+                             const unsigned char *buf, size_t len,
+                             BN_CTX *ctx)
+{
+    point_conversion_form_t form;
+    int y_bit;
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *x, *y, *yxi;
+    size_t field_len, enc_len;
+    int ret = 0;
+
+    if (len == 0) {
+        ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_BUFFER_TOO_SMALL);
+        return 0;
+    }
+    form = buf[0];
+    y_bit = form & 1;
+    form = form & ~1U;
+    if ((form != 0) && (form != POINT_CONVERSION_COMPRESSED)
+        && (form != POINT_CONVERSION_UNCOMPRESSED)
+        && (form != POINT_CONVERSION_HYBRID)) {
+        ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING);
+        return 0;
+    }
+    if ((form == 0 || form == POINT_CONVERSION_UNCOMPRESSED) && y_bit) {
+        ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING);
+        return 0;
+    }
+
+    if (form == 0) {
+        if (len != 1) {
+            ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING);
+            return 0;
+        }
+
+        return EC_POINT_set_to_infinity(group, point);
+    }
+
+    field_len = (EC_GROUP_get_degree(group) + 7) / 8;
+    enc_len =
+        (form ==
+         POINT_CONVERSION_COMPRESSED) ? 1 + field_len : 1 + 2 * field_len;
+
+    if (len != enc_len) {
+        ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING);
+        return 0;
+    }
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return 0;
+    }
+
+    BN_CTX_start(ctx);
+    x = BN_CTX_get(ctx);
+    y = BN_CTX_get(ctx);
+    yxi = BN_CTX_get(ctx);
+    if (yxi == NULL)
+        goto err;
+
+    if (!BN_bin2bn(buf + 1, field_len, x))
+        goto err;
+    if (BN_ucmp(x, group->field) >= 0) {
+        ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING);
+        goto err;
+    }
+
+    if (form == POINT_CONVERSION_COMPRESSED) {
+        if (!EC_POINT_set_compressed_coordinates(group, point, x, y_bit, ctx))
+            goto err;
+    } else {
+        if (!BN_bin2bn(buf + 1 + field_len, field_len, y))
+            goto err;
+        if (BN_ucmp(y, group->field) >= 0) {
+            ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING);
+            goto err;
+        }
+        if (form == POINT_CONVERSION_HYBRID) {
+            if (!group->meth->field_div(group, yxi, y, x, ctx))
+                goto err;
+            if (y_bit != BN_is_odd(yxi)) {
+                ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING);
+                goto err;
+            }
+        }
+
+        /*
+         * EC_POINT_set_affine_coordinates is responsible for checking that
+         * the point is on the curve.
+         */
+        if (!EC_POINT_set_affine_coordinates(group, point, x, y, ctx))
+            goto err;
+    }
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec2_smpl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec2_smpl.c
new file mode 100644
index 000000000..0a05a7aee
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec2_smpl.c
@@ -0,0 +1,970 @@
+/*
+ * Copyright 2002-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+
+#include "internal/bn_int.h"
+#include "ec_lcl.h"
+
+#ifndef OPENSSL_NO_EC2M
+
+/*
+ * Initialize a GF(2^m)-based EC_GROUP structure. Note that all other members
+ * are handled by EC_GROUP_new.
+ */
+int ec_GF2m_simple_group_init(EC_GROUP *group)
+{
+    group->field = BN_new();
+    group->a = BN_new();
+    group->b = BN_new();
+
+    if (group->field == NULL || group->a == NULL || group->b == NULL) {
+        BN_free(group->field);
+        BN_free(group->a);
+        BN_free(group->b);
+        return 0;
+    }
+    return 1;
+}
+
+/*
+ * Free a GF(2^m)-based EC_GROUP structure. Note that all other members are
+ * handled by EC_GROUP_free.
+ */
+void ec_GF2m_simple_group_finish(EC_GROUP *group)
+{
+    BN_free(group->field);
+    BN_free(group->a);
+    BN_free(group->b);
+}
+
+/*
+ * Clear and free a GF(2^m)-based EC_GROUP structure. Note that all other
+ * members are handled by EC_GROUP_clear_free.
+ */
+void ec_GF2m_simple_group_clear_finish(EC_GROUP *group)
+{
+    BN_clear_free(group->field);
+    BN_clear_free(group->a);
+    BN_clear_free(group->b);
+    group->poly[0] = 0;
+    group->poly[1] = 0;
+    group->poly[2] = 0;
+    group->poly[3] = 0;
+    group->poly[4] = 0;
+    group->poly[5] = -1;
+}
+
+/*
+ * Copy a GF(2^m)-based EC_GROUP structure. Note that all other members are
+ * handled by EC_GROUP_copy.
+ */
+int ec_GF2m_simple_group_copy(EC_GROUP *dest, const EC_GROUP *src)
+{
+    if (!BN_copy(dest->field, src->field))
+        return 0;
+    if (!BN_copy(dest->a, src->a))
+        return 0;
+    if (!BN_copy(dest->b, src->b))
+        return 0;
+    dest->poly[0] = src->poly[0];
+    dest->poly[1] = src->poly[1];
+    dest->poly[2] = src->poly[2];
+    dest->poly[3] = src->poly[3];
+    dest->poly[4] = src->poly[4];
+    dest->poly[5] = src->poly[5];
+    if (bn_wexpand(dest->a, (int)(dest->poly[0] + BN_BITS2 - 1) / BN_BITS2) ==
+        NULL)
+        return 0;
+    if (bn_wexpand(dest->b, (int)(dest->poly[0] + BN_BITS2 - 1) / BN_BITS2) ==
+        NULL)
+        return 0;
+    bn_set_all_zero(dest->a);
+    bn_set_all_zero(dest->b);
+    return 1;
+}
+
+/* Set the curve parameters of an EC_GROUP structure. */
+int ec_GF2m_simple_group_set_curve(EC_GROUP *group,
+                                   const BIGNUM *p, const BIGNUM *a,
+                                   const BIGNUM *b, BN_CTX *ctx)
+{
+    int ret = 0, i;
+
+    /* group->field */
+    if (!BN_copy(group->field, p))
+        goto err;
+    i = BN_GF2m_poly2arr(group->field, group->poly, 6) - 1;
+    if ((i != 5) && (i != 3)) {
+        ECerr(EC_F_EC_GF2M_SIMPLE_GROUP_SET_CURVE, EC_R_UNSUPPORTED_FIELD);
+        goto err;
+    }
+
+    /* group->a */
+    if (!BN_GF2m_mod_arr(group->a, a, group->poly))
+        goto err;
+    if (bn_wexpand(group->a, (int)(group->poly[0] + BN_BITS2 - 1) / BN_BITS2)
+        == NULL)
+        goto err;
+    bn_set_all_zero(group->a);
+
+    /* group->b */
+    if (!BN_GF2m_mod_arr(group->b, b, group->poly))
+        goto err;
+    if (bn_wexpand(group->b, (int)(group->poly[0] + BN_BITS2 - 1) / BN_BITS2)
+        == NULL)
+        goto err;
+    bn_set_all_zero(group->b);
+
+    ret = 1;
+ err:
+    return ret;
+}
+
+/*
+ * Get the curve parameters of an EC_GROUP structure. If p, a, or b are NULL
+ * then there values will not be set but the method will return with success.
+ */
+int ec_GF2m_simple_group_get_curve(const EC_GROUP *group, BIGNUM *p,
+                                   BIGNUM *a, BIGNUM *b, BN_CTX *ctx)
+{
+    int ret = 0;
+
+    if (p != NULL) {
+        if (!BN_copy(p, group->field))
+            return 0;
+    }
+
+    if (a != NULL) {
+        if (!BN_copy(a, group->a))
+            goto err;
+    }
+
+    if (b != NULL) {
+        if (!BN_copy(b, group->b))
+            goto err;
+    }
+
+    ret = 1;
+
+ err:
+    return ret;
+}
+
+/*
+ * Gets the degree of the field.  For a curve over GF(2^m) this is the value
+ * m.
+ */
+int ec_GF2m_simple_group_get_degree(const EC_GROUP *group)
+{
+    return BN_num_bits(group->field) - 1;
+}
+
+/*
+ * Checks the discriminant of the curve. y^2 + x*y = x^3 + a*x^2 + b is an
+ * elliptic curve <=> b != 0 (mod p)
+ */
+int ec_GF2m_simple_group_check_discriminant(const EC_GROUP *group,
+                                            BN_CTX *ctx)
+{
+    int ret = 0;
+    BIGNUM *b;
+    BN_CTX *new_ctx = NULL;
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL) {
+            ECerr(EC_F_EC_GF2M_SIMPLE_GROUP_CHECK_DISCRIMINANT,
+                  ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+    BN_CTX_start(ctx);
+    b = BN_CTX_get(ctx);
+    if (b == NULL)
+        goto err;
+
+    if (!BN_GF2m_mod_arr(b, group->b, group->poly))
+        goto err;
+
+    /*
+     * check the discriminant: y^2 + x*y = x^3 + a*x^2 + b is an elliptic
+     * curve <=> b != 0 (mod p)
+     */
+    if (BN_is_zero(b))
+        goto err;
+
+    ret = 1;
+
+ err:
+    if (ctx != NULL)
+        BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+/* Initializes an EC_POINT. */
+int ec_GF2m_simple_point_init(EC_POINT *point)
+{
+    point->X = BN_new();
+    point->Y = BN_new();
+    point->Z = BN_new();
+
+    if (point->X == NULL || point->Y == NULL || point->Z == NULL) {
+        BN_free(point->X);
+        BN_free(point->Y);
+        BN_free(point->Z);
+        return 0;
+    }
+    return 1;
+}
+
+/* Frees an EC_POINT. */
+void ec_GF2m_simple_point_finish(EC_POINT *point)
+{
+    BN_free(point->X);
+    BN_free(point->Y);
+    BN_free(point->Z);
+}
+
+/* Clears and frees an EC_POINT. */
+void ec_GF2m_simple_point_clear_finish(EC_POINT *point)
+{
+    BN_clear_free(point->X);
+    BN_clear_free(point->Y);
+    BN_clear_free(point->Z);
+    point->Z_is_one = 0;
+}
+
+/*
+ * Copy the contents of one EC_POINT into another.  Assumes dest is
+ * initialized.
+ */
+int ec_GF2m_simple_point_copy(EC_POINT *dest, const EC_POINT *src)
+{
+    if (!BN_copy(dest->X, src->X))
+        return 0;
+    if (!BN_copy(dest->Y, src->Y))
+        return 0;
+    if (!BN_copy(dest->Z, src->Z))
+        return 0;
+    dest->Z_is_one = src->Z_is_one;
+    dest->curve_name = src->curve_name;
+
+    return 1;
+}
+
+/*
+ * Set an EC_POINT to the point at infinity. A point at infinity is
+ * represented by having Z=0.
+ */
+int ec_GF2m_simple_point_set_to_infinity(const EC_GROUP *group,
+                                         EC_POINT *point)
+{
+    point->Z_is_one = 0;
+    BN_zero(point->Z);
+    return 1;
+}
+
+/*
+ * Set the coordinates of an EC_POINT using affine coordinates. Note that
+ * the simple implementation only uses affine coordinates.
+ */
+int ec_GF2m_simple_point_set_affine_coordinates(const EC_GROUP *group,
+                                                EC_POINT *point,
+                                                const BIGNUM *x,
+                                                const BIGNUM *y, BN_CTX *ctx)
+{
+    int ret = 0;
+    if (x == NULL || y == NULL) {
+        ECerr(EC_F_EC_GF2M_SIMPLE_POINT_SET_AFFINE_COORDINATES,
+              ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+
+    if (!BN_copy(point->X, x))
+        goto err;
+    BN_set_negative(point->X, 0);
+    if (!BN_copy(point->Y, y))
+        goto err;
+    BN_set_negative(point->Y, 0);
+    if (!BN_copy(point->Z, BN_value_one()))
+        goto err;
+    BN_set_negative(point->Z, 0);
+    point->Z_is_one = 1;
+    ret = 1;
+
+ err:
+    return ret;
+}
+
+/*
+ * Gets the affine coordinates of an EC_POINT. Note that the simple
+ * implementation only uses affine coordinates.
+ */
+int ec_GF2m_simple_point_get_affine_coordinates(const EC_GROUP *group,
+                                                const EC_POINT *point,
+                                                BIGNUM *x, BIGNUM *y,
+                                                BN_CTX *ctx)
+{
+    int ret = 0;
+
+    if (EC_POINT_is_at_infinity(group, point)) {
+        ECerr(EC_F_EC_GF2M_SIMPLE_POINT_GET_AFFINE_COORDINATES,
+              EC_R_POINT_AT_INFINITY);
+        return 0;
+    }
+
+    if (BN_cmp(point->Z, BN_value_one())) {
+        ECerr(EC_F_EC_GF2M_SIMPLE_POINT_GET_AFFINE_COORDINATES,
+              ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (x != NULL) {
+        if (!BN_copy(x, point->X))
+            goto err;
+        BN_set_negative(x, 0);
+    }
+    if (y != NULL) {
+        if (!BN_copy(y, point->Y))
+            goto err;
+        BN_set_negative(y, 0);
+    }
+    ret = 1;
+
+ err:
+    return ret;
+}
+
+/*
+ * Computes a + b and stores the result in r.  r could be a or b, a could be
+ * b. Uses algorithm A.10.2 of IEEE P1363.
+ */
+int ec_GF2m_simple_add(const EC_GROUP *group, EC_POINT *r, const EC_POINT *a,
+                       const EC_POINT *b, BN_CTX *ctx)
+{
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *x0, *y0, *x1, *y1, *x2, *y2, *s, *t;
+    int ret = 0;
+
+    if (EC_POINT_is_at_infinity(group, a)) {
+        if (!EC_POINT_copy(r, b))
+            return 0;
+        return 1;
+    }
+
+    if (EC_POINT_is_at_infinity(group, b)) {
+        if (!EC_POINT_copy(r, a))
+            return 0;
+        return 1;
+    }
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return 0;
+    }
+
+    BN_CTX_start(ctx);
+    x0 = BN_CTX_get(ctx);
+    y0 = BN_CTX_get(ctx);
+    x1 = BN_CTX_get(ctx);
+    y1 = BN_CTX_get(ctx);
+    x2 = BN_CTX_get(ctx);
+    y2 = BN_CTX_get(ctx);
+    s = BN_CTX_get(ctx);
+    t = BN_CTX_get(ctx);
+    if (t == NULL)
+        goto err;
+
+    if (a->Z_is_one) {
+        if (!BN_copy(x0, a->X))
+            goto err;
+        if (!BN_copy(y0, a->Y))
+            goto err;
+    } else {
+        if (!EC_POINT_get_affine_coordinates(group, a, x0, y0, ctx))
+            goto err;
+    }
+    if (b->Z_is_one) {
+        if (!BN_copy(x1, b->X))
+            goto err;
+        if (!BN_copy(y1, b->Y))
+            goto err;
+    } else {
+        if (!EC_POINT_get_affine_coordinates(group, b, x1, y1, ctx))
+            goto err;
+    }
+
+    if (BN_GF2m_cmp(x0, x1)) {
+        if (!BN_GF2m_add(t, x0, x1))
+            goto err;
+        if (!BN_GF2m_add(s, y0, y1))
+            goto err;
+        if (!group->meth->field_div(group, s, s, t, ctx))
+            goto err;
+        if (!group->meth->field_sqr(group, x2, s, ctx))
+            goto err;
+        if (!BN_GF2m_add(x2, x2, group->a))
+            goto err;
+        if (!BN_GF2m_add(x2, x2, s))
+            goto err;
+        if (!BN_GF2m_add(x2, x2, t))
+            goto err;
+    } else {
+        if (BN_GF2m_cmp(y0, y1) || BN_is_zero(x1)) {
+            if (!EC_POINT_set_to_infinity(group, r))
+                goto err;
+            ret = 1;
+            goto err;
+        }
+        if (!group->meth->field_div(group, s, y1, x1, ctx))
+            goto err;
+        if (!BN_GF2m_add(s, s, x1))
+            goto err;
+
+        if (!group->meth->field_sqr(group, x2, s, ctx))
+            goto err;
+        if (!BN_GF2m_add(x2, x2, s))
+            goto err;
+        if (!BN_GF2m_add(x2, x2, group->a))
+            goto err;
+    }
+
+    if (!BN_GF2m_add(y2, x1, x2))
+        goto err;
+    if (!group->meth->field_mul(group, y2, y2, s, ctx))
+        goto err;
+    if (!BN_GF2m_add(y2, y2, x2))
+        goto err;
+    if (!BN_GF2m_add(y2, y2, y1))
+        goto err;
+
+    if (!EC_POINT_set_affine_coordinates(group, r, x2, y2, ctx))
+        goto err;
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+/*
+ * Computes 2 * a and stores the result in r.  r could be a. Uses algorithm
+ * A.10.2 of IEEE P1363.
+ */
+int ec_GF2m_simple_dbl(const EC_GROUP *group, EC_POINT *r, const EC_POINT *a,
+                       BN_CTX *ctx)
+{
+    return ec_GF2m_simple_add(group, r, a, a, ctx);
+}
+
+int ec_GF2m_simple_invert(const EC_GROUP *group, EC_POINT *point, BN_CTX *ctx)
+{
+    if (EC_POINT_is_at_infinity(group, point) || BN_is_zero(point->Y))
+        /* point is its own inverse */
+        return 1;
+
+    if (!EC_POINT_make_affine(group, point, ctx))
+        return 0;
+    return BN_GF2m_add(point->Y, point->X, point->Y);
+}
+
+/* Indicates whether the given point is the point at infinity. */
+int ec_GF2m_simple_is_at_infinity(const EC_GROUP *group,
+                                  const EC_POINT *point)
+{
+    return BN_is_zero(point->Z);
+}
+
+/*-
+ * Determines whether the given EC_POINT is an actual point on the curve defined
+ * in the EC_GROUP.  A point is valid if it satisfies the Weierstrass equation:
+ *      y^2 + x*y = x^3 + a*x^2 + b.
+ */
+int ec_GF2m_simple_is_on_curve(const EC_GROUP *group, const EC_POINT *point,
+                               BN_CTX *ctx)
+{
+    int ret = -1;
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *lh, *y2;
+    int (*field_mul) (const EC_GROUP *, BIGNUM *, const BIGNUM *,
+                      const BIGNUM *, BN_CTX *);
+    int (*field_sqr) (const EC_GROUP *, BIGNUM *, const BIGNUM *, BN_CTX *);
+
+    if (EC_POINT_is_at_infinity(group, point))
+        return 1;
+
+    field_mul = group->meth->field_mul;
+    field_sqr = group->meth->field_sqr;
+
+    /* only support affine coordinates */
+    if (!point->Z_is_one)
+        return -1;
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return -1;
+    }
+
+    BN_CTX_start(ctx);
+    y2 = BN_CTX_get(ctx);
+    lh = BN_CTX_get(ctx);
+    if (lh == NULL)
+        goto err;
+
+    /*-
+     * We have a curve defined by a Weierstrass equation
+     *      y^2 + x*y = x^3 + a*x^2 + b.
+     *  <=> x^3 + a*x^2 + x*y + b + y^2 = 0
+     *  <=> ((x + a) * x + y ) * x + b + y^2 = 0
+     */
+    if (!BN_GF2m_add(lh, point->X, group->a))
+        goto err;
+    if (!field_mul(group, lh, lh, point->X, ctx))
+        goto err;
+    if (!BN_GF2m_add(lh, lh, point->Y))
+        goto err;
+    if (!field_mul(group, lh, lh, point->X, ctx))
+        goto err;
+    if (!BN_GF2m_add(lh, lh, group->b))
+        goto err;
+    if (!field_sqr(group, y2, point->Y, ctx))
+        goto err;
+    if (!BN_GF2m_add(lh, lh, y2))
+        goto err;
+    ret = BN_is_zero(lh);
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+/*-
+ * Indicates whether two points are equal.
+ * Return values:
+ *  -1   error
+ *   0   equal (in affine coordinates)
+ *   1   not equal
+ */
+int ec_GF2m_simple_cmp(const EC_GROUP *group, const EC_POINT *a,
+                       const EC_POINT *b, BN_CTX *ctx)
+{
+    BIGNUM *aX, *aY, *bX, *bY;
+    BN_CTX *new_ctx = NULL;
+    int ret = -1;
+
+    if (EC_POINT_is_at_infinity(group, a)) {
+        return EC_POINT_is_at_infinity(group, b) ? 0 : 1;
+    }
+
+    if (EC_POINT_is_at_infinity(group, b))
+        return 1;
+
+    if (a->Z_is_one && b->Z_is_one) {
+        return ((BN_cmp(a->X, b->X) == 0) && BN_cmp(a->Y, b->Y) == 0) ? 0 : 1;
+    }
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return -1;
+    }
+
+    BN_CTX_start(ctx);
+    aX = BN_CTX_get(ctx);
+    aY = BN_CTX_get(ctx);
+    bX = BN_CTX_get(ctx);
+    bY = BN_CTX_get(ctx);
+    if (bY == NULL)
+        goto err;
+
+    if (!EC_POINT_get_affine_coordinates(group, a, aX, aY, ctx))
+        goto err;
+    if (!EC_POINT_get_affine_coordinates(group, b, bX, bY, ctx))
+        goto err;
+    ret = ((BN_cmp(aX, bX) == 0) && BN_cmp(aY, bY) == 0) ? 0 : 1;
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+/* Forces the given EC_POINT to internally use affine coordinates. */
+int ec_GF2m_simple_make_affine(const EC_GROUP *group, EC_POINT *point,
+                               BN_CTX *ctx)
+{
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *x, *y;
+    int ret = 0;
+
+    if (point->Z_is_one || EC_POINT_is_at_infinity(group, point))
+        return 1;
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return 0;
+    }
+
+    BN_CTX_start(ctx);
+    x = BN_CTX_get(ctx);
+    y = BN_CTX_get(ctx);
+    if (y == NULL)
+        goto err;
+
+    if (!EC_POINT_get_affine_coordinates(group, point, x, y, ctx))
+        goto err;
+    if (!BN_copy(point->X, x))
+        goto err;
+    if (!BN_copy(point->Y, y))
+        goto err;
+    if (!BN_one(point->Z))
+        goto err;
+    point->Z_is_one = 1;
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+/*
+ * Forces each of the EC_POINTs in the given array to use affine coordinates.
+ */
+int ec_GF2m_simple_points_make_affine(const EC_GROUP *group, size_t num,
+                                      EC_POINT *points[], BN_CTX *ctx)
+{
+    size_t i;
+
+    for (i = 0; i < num; i++) {
+        if (!group->meth->make_affine(group, points[i], ctx))
+            return 0;
+    }
+
+    return 1;
+}
+
+/* Wrapper to simple binary polynomial field multiplication implementation. */
+int ec_GF2m_simple_field_mul(const EC_GROUP *group, BIGNUM *r,
+                             const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx)
+{
+    return BN_GF2m_mod_mul_arr(r, a, b, group->poly, ctx);
+}
+
+/* Wrapper to simple binary polynomial field squaring implementation. */
+int ec_GF2m_simple_field_sqr(const EC_GROUP *group, BIGNUM *r,
+                             const BIGNUM *a, BN_CTX *ctx)
+{
+    return BN_GF2m_mod_sqr_arr(r, a, group->poly, ctx);
+}
+
+/* Wrapper to simple binary polynomial field division implementation. */
+int ec_GF2m_simple_field_div(const EC_GROUP *group, BIGNUM *r,
+                             const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx)
+{
+    return BN_GF2m_mod_div(r, a, b, group->field, ctx);
+}
+
+/*-
+ * Lopez-Dahab ladder, pre step.
+ * See e.g. "Guide to ECC" Alg 3.40.
+ * Modified to blind s and r independently.
+ * s:= p, r := 2p
+ */
+static
+int ec_GF2m_simple_ladder_pre(const EC_GROUP *group,
+                              EC_POINT *r, EC_POINT *s,
+                              EC_POINT *p, BN_CTX *ctx)
+{
+    /* if p is not affine, something is wrong */
+    if (p->Z_is_one == 0)
+        return 0;
+
+    /* s blinding: make sure lambda (s->Z here) is not zero */
+    do {
+        if (!BN_priv_rand(s->Z, BN_num_bits(group->field) - 1,
+                          BN_RAND_TOP_ANY, BN_RAND_BOTTOM_ANY)) {
+            ECerr(EC_F_EC_GF2M_SIMPLE_LADDER_PRE, ERR_R_BN_LIB);
+            return 0;
+        }
+    } while (BN_is_zero(s->Z));
+
+    /* if field_encode defined convert between representations */
+    if ((group->meth->field_encode != NULL
+         && !group->meth->field_encode(group, s->Z, s->Z, ctx))
+        || !group->meth->field_mul(group, s->X, p->X, s->Z, ctx))
+        return 0;
+
+    /* r blinding: make sure lambda (r->Y here for storage) is not zero */
+    do {
+        if (!BN_priv_rand(r->Y, BN_num_bits(group->field) - 1,
+                          BN_RAND_TOP_ANY, BN_RAND_BOTTOM_ANY)) {
+            ECerr(EC_F_EC_GF2M_SIMPLE_LADDER_PRE, ERR_R_BN_LIB);
+            return 0;
+        }
+    } while (BN_is_zero(r->Y));
+
+    if ((group->meth->field_encode != NULL
+         && !group->meth->field_encode(group, r->Y, r->Y, ctx))
+        || !group->meth->field_sqr(group, r->Z, p->X, ctx)
+        || !group->meth->field_sqr(group, r->X, r->Z, ctx)
+        || !BN_GF2m_add(r->X, r->X, group->b)
+        || !group->meth->field_mul(group, r->Z, r->Z, r->Y, ctx)
+        || !group->meth->field_mul(group, r->X, r->X, r->Y, ctx))
+        return 0;
+
+    s->Z_is_one = 0;
+    r->Z_is_one = 0;
+
+    return 1;
+}
+
+/*-
+ * Ladder step: differential addition-and-doubling, mixed Lopez-Dahab coords.
+ * http://www.hyperelliptic.org/EFD/g12o/auto-code/shortw/xz/ladder/mladd-2003-s.op3
+ * s := r + s, r := 2r
+ */
+static
+int ec_GF2m_simple_ladder_step(const EC_GROUP *group,
+                               EC_POINT *r, EC_POINT *s,
+                               EC_POINT *p, BN_CTX *ctx)
+{
+    if (!group->meth->field_mul(group, r->Y, r->Z, s->X, ctx)
+        || !group->meth->field_mul(group, s->X, r->X, s->Z, ctx)
+        || !group->meth->field_sqr(group, s->Y, r->Z, ctx)
+        || !group->meth->field_sqr(group, r->Z, r->X, ctx)
+        || !BN_GF2m_add(s->Z, r->Y, s->X)
+        || !group->meth->field_sqr(group, s->Z, s->Z, ctx)
+        || !group->meth->field_mul(group, s->X, r->Y, s->X, ctx)
+        || !group->meth->field_mul(group, r->Y, s->Z, p->X, ctx)
+        || !BN_GF2m_add(s->X, s->X, r->Y)
+        || !group->meth->field_sqr(group, r->Y, r->Z, ctx)
+        || !group->meth->field_mul(group, r->Z, r->Z, s->Y, ctx)
+        || !group->meth->field_sqr(group, s->Y, s->Y, ctx)
+        || !group->meth->field_mul(group, s->Y, s->Y, group->b, ctx)
+        || !BN_GF2m_add(r->X, r->Y, s->Y))
+        return 0;
+
+    return 1;
+}
+
+/*-
+ * Recover affine (x,y) result from Lopez-Dahab r and s, affine p.
+ * See e.g. "Fast Multiplication on Elliptic Curves over GF(2**m)
+ * without Precomputation" (Lopez and Dahab, CHES 1999),
+ * Appendix Alg Mxy.
+ */
+static
+int ec_GF2m_simple_ladder_post(const EC_GROUP *group,
+                               EC_POINT *r, EC_POINT *s,
+                               EC_POINT *p, BN_CTX *ctx)
+{
+    int ret = 0;
+    BIGNUM *t0, *t1, *t2 = NULL;
+
+    if (BN_is_zero(r->Z))
+        return EC_POINT_set_to_infinity(group, r);
+
+    if (BN_is_zero(s->Z)) {
+        if (!EC_POINT_copy(r, p)
+            || !EC_POINT_invert(group, r, ctx)) {
+            ECerr(EC_F_EC_GF2M_SIMPLE_LADDER_POST, ERR_R_EC_LIB);
+            return 0;
+        }
+        return 1;
+    }
+
+    BN_CTX_start(ctx);
+    t0 = BN_CTX_get(ctx);
+    t1 = BN_CTX_get(ctx);
+    t2 = BN_CTX_get(ctx);
+    if (t2 == NULL) {
+        ECerr(EC_F_EC_GF2M_SIMPLE_LADDER_POST, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (!group->meth->field_mul(group, t0, r->Z, s->Z, ctx)
+        || !group->meth->field_mul(group, t1, p->X, r->Z, ctx)
+        || !BN_GF2m_add(t1, r->X, t1)
+        || !group->meth->field_mul(group, t2, p->X, s->Z, ctx)
+        || !group->meth->field_mul(group, r->Z, r->X, t2, ctx)
+        || !BN_GF2m_add(t2, t2, s->X)
+        || !group->meth->field_mul(group, t1, t1, t2, ctx)
+        || !group->meth->field_sqr(group, t2, p->X, ctx)
+        || !BN_GF2m_add(t2, p->Y, t2)
+        || !group->meth->field_mul(group, t2, t2, t0, ctx)
+        || !BN_GF2m_add(t1, t2, t1)
+        || !group->meth->field_mul(group, t2, p->X, t0, ctx)
+        || !group->meth->field_inv(group, t2, t2, ctx)
+        || !group->meth->field_mul(group, t1, t1, t2, ctx)
+        || !group->meth->field_mul(group, r->X, r->Z, t2, ctx)
+        || !BN_GF2m_add(t2, p->X, r->X)
+        || !group->meth->field_mul(group, t2, t2, t1, ctx)
+        || !BN_GF2m_add(r->Y, p->Y, t2)
+        || !BN_one(r->Z))
+        goto err;
+
+    r->Z_is_one = 1;
+
+    /* GF(2^m) field elements should always have BIGNUM::neg = 0 */
+    BN_set_negative(r->X, 0);
+    BN_set_negative(r->Y, 0);
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+static
+int ec_GF2m_simple_points_mul(const EC_GROUP *group, EC_POINT *r,
+                              const BIGNUM *scalar, size_t num,
+                              const EC_POINT *points[],
+                              const BIGNUM *scalars[],
+                              BN_CTX *ctx)
+{
+    int ret = 0;
+    EC_POINT *t = NULL;
+
+    /*-
+     * We limit use of the ladder only to the following cases:
+     * - r := scalar * G
+     *   Fixed point mul: scalar != NULL && num == 0;
+     * - r := scalars[0] * points[0]
+     *   Variable point mul: scalar == NULL && num == 1;
+     * - r := scalar * G + scalars[0] * points[0]
+     *   used, e.g., in ECDSA verification: scalar != NULL && num == 1
+     *
+     * In any other case (num > 1) we use the default wNAF implementation.
+     *
+     * We also let the default implementation handle degenerate cases like group
+     * order or cofactor set to 0.
+     */
+    if (num > 1 || BN_is_zero(group->order) || BN_is_zero(group->cofactor))
+        return ec_wNAF_mul(group, r, scalar, num, points, scalars, ctx);
+
+    if (scalar != NULL && num == 0)
+        /* Fixed point multiplication */
+        return ec_scalar_mul_ladder(group, r, scalar, NULL, ctx);
+
+    if (scalar == NULL && num == 1)
+        /* Variable point multiplication */
+        return ec_scalar_mul_ladder(group, r, scalars[0], points[0], ctx);
+
+    /*-
+     * Double point multiplication:
+     *  r := scalar * G + scalars[0] * points[0]
+     */
+
+    if ((t = EC_POINT_new(group)) == NULL) {
+        ECerr(EC_F_EC_GF2M_SIMPLE_POINTS_MUL, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    if (!ec_scalar_mul_ladder(group, t, scalar, NULL, ctx)
+        || !ec_scalar_mul_ladder(group, r, scalars[0], points[0], ctx)
+        || !EC_POINT_add(group, r, t, r, ctx))
+        goto err;
+
+    ret = 1;
+
+ err:
+    EC_POINT_free(t);
+    return ret;
+}
+
+/*-
+ * Computes the multiplicative inverse of a in GF(2^m), storing the result in r.
+ * If a is zero (or equivalent), you'll get a EC_R_CANNOT_INVERT error.
+ * SCA hardening is with blinding: BN_GF2m_mod_inv does that.
+ */
+static int ec_GF2m_simple_field_inv(const EC_GROUP *group, BIGNUM *r,
+                                    const BIGNUM *a, BN_CTX *ctx)
+{
+    int ret;
+
+    if (!(ret = BN_GF2m_mod_inv(r, a, group->field, ctx)))
+        ECerr(EC_F_EC_GF2M_SIMPLE_FIELD_INV, EC_R_CANNOT_INVERT);
+    return ret;
+}
+
+const EC_METHOD *EC_GF2m_simple_method(void)
+{
+    static const EC_METHOD ret = {
+        EC_FLAGS_DEFAULT_OCT,
+        NID_X9_62_characteristic_two_field,
+        ec_GF2m_simple_group_init,
+        ec_GF2m_simple_group_finish,
+        ec_GF2m_simple_group_clear_finish,
+        ec_GF2m_simple_group_copy,
+        ec_GF2m_simple_group_set_curve,
+        ec_GF2m_simple_group_get_curve,
+        ec_GF2m_simple_group_get_degree,
+        ec_group_simple_order_bits,
+        ec_GF2m_simple_group_check_discriminant,
+        ec_GF2m_simple_point_init,
+        ec_GF2m_simple_point_finish,
+        ec_GF2m_simple_point_clear_finish,
+        ec_GF2m_simple_point_copy,
+        ec_GF2m_simple_point_set_to_infinity,
+        0, /* set_Jprojective_coordinates_GFp */
+        0, /* get_Jprojective_coordinates_GFp */
+        ec_GF2m_simple_point_set_affine_coordinates,
+        ec_GF2m_simple_point_get_affine_coordinates,
+        0, /* point_set_compressed_coordinates */
+        0, /* point2oct */
+        0, /* oct2point */
+        ec_GF2m_simple_add,
+        ec_GF2m_simple_dbl,
+        ec_GF2m_simple_invert,
+        ec_GF2m_simple_is_at_infinity,
+        ec_GF2m_simple_is_on_curve,
+        ec_GF2m_simple_cmp,
+        ec_GF2m_simple_make_affine,
+        ec_GF2m_simple_points_make_affine,
+        ec_GF2m_simple_points_mul,
+        0, /* precompute_mult */
+        0, /* have_precompute_mult */
+        ec_GF2m_simple_field_mul,
+        ec_GF2m_simple_field_sqr,
+        ec_GF2m_simple_field_div,
+        ec_GF2m_simple_field_inv,
+        0, /* field_encode */
+        0, /* field_decode */
+        0, /* field_set_to_one */
+        ec_key_simple_priv2oct,
+        ec_key_simple_oct2priv,
+        0, /* set private */
+        ec_key_simple_generate_key,
+        ec_key_simple_check_key,
+        ec_key_simple_generate_public_key,
+        0, /* keycopy */
+        0, /* keyfinish */
+        ecdh_simple_compute_key,
+        0, /* field_inverse_mod_ord */
+        0, /* blind_coordinates */
+        ec_GF2m_simple_ladder_pre,
+        ec_GF2m_simple_ladder_step,
+        ec_GF2m_simple_ladder_post
+    };
+
+    return &ret;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_ameth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_ameth.c
new file mode 100644
index 000000000..8b363e096
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_ameth.c
@@ -0,0 +1,942 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/ec.h>
+#include <openssl/bn.h>
+#include <openssl/cms.h>
+#include <openssl/asn1t.h>
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+#include "ec_lcl.h"
+
+#ifndef OPENSSL_NO_CMS
+static int ecdh_cms_decrypt(CMS_RecipientInfo *ri);
+static int ecdh_cms_encrypt(CMS_RecipientInfo *ri);
+#endif
+
+static int eckey_param2type(int *pptype, void **ppval, EC_KEY *ec_key)
+{
+    const EC_GROUP *group;
+    int nid;
+    if (ec_key == NULL || (group = EC_KEY_get0_group(ec_key)) == NULL) {
+        ECerr(EC_F_ECKEY_PARAM2TYPE, EC_R_MISSING_PARAMETERS);
+        return 0;
+    }
+    if (EC_GROUP_get_asn1_flag(group)
+        && (nid = EC_GROUP_get_curve_name(group)))
+        /* we have a 'named curve' => just set the OID */
+    {
+        *ppval = OBJ_nid2obj(nid);
+        *pptype = V_ASN1_OBJECT;
+    } else {                    /* explicit parameters */
+
+        ASN1_STRING *pstr = NULL;
+        pstr = ASN1_STRING_new();
+        if (pstr == NULL)
+            return 0;
+        pstr->length = i2d_ECParameters(ec_key, &pstr->data);
+        if (pstr->length <= 0) {
+            ASN1_STRING_free(pstr);
+            ECerr(EC_F_ECKEY_PARAM2TYPE, ERR_R_EC_LIB);
+            return 0;
+        }
+        *ppval = pstr;
+        *pptype = V_ASN1_SEQUENCE;
+    }
+    return 1;
+}
+
+static int eckey_pub_encode(X509_PUBKEY *pk, const EVP_PKEY *pkey)
+{
+    EC_KEY *ec_key = pkey->pkey.ec;
+    void *pval = NULL;
+    int ptype;
+    unsigned char *penc = NULL, *p;
+    int penclen;
+
+    if (!eckey_param2type(&ptype, &pval, ec_key)) {
+        ECerr(EC_F_ECKEY_PUB_ENCODE, ERR_R_EC_LIB);
+        return 0;
+    }
+    penclen = i2o_ECPublicKey(ec_key, NULL);
+    if (penclen <= 0)
+        goto err;
+    penc = OPENSSL_malloc(penclen);
+    if (penc == NULL)
+        goto err;
+    p = penc;
+    penclen = i2o_ECPublicKey(ec_key, &p);
+    if (penclen <= 0)
+        goto err;
+    if (X509_PUBKEY_set0_param(pk, OBJ_nid2obj(EVP_PKEY_EC),
+                               ptype, pval, penc, penclen))
+        return 1;
+ err:
+    if (ptype == V_ASN1_OBJECT)
+        ASN1_OBJECT_free(pval);
+    else
+        ASN1_STRING_free(pval);
+    OPENSSL_free(penc);
+    return 0;
+}
+
+static EC_KEY *eckey_type2param(int ptype, const void *pval)
+{
+    EC_KEY *eckey = NULL;
+    EC_GROUP *group = NULL;
+
+    if (ptype == V_ASN1_SEQUENCE) {
+        const ASN1_STRING *pstr = pval;
+        const unsigned char *pm = pstr->data;
+        int pmlen = pstr->length;
+
+        if ((eckey = d2i_ECParameters(NULL, &pm, pmlen)) == NULL) {
+            ECerr(EC_F_ECKEY_TYPE2PARAM, EC_R_DECODE_ERROR);
+            goto ecerr;
+        }
+    } else if (ptype == V_ASN1_OBJECT) {
+        const ASN1_OBJECT *poid = pval;
+
+        /*
+         * type == V_ASN1_OBJECT => the parameters are given by an asn1 OID
+         */
+        if ((eckey = EC_KEY_new()) == NULL) {
+            ECerr(EC_F_ECKEY_TYPE2PARAM, ERR_R_MALLOC_FAILURE);
+            goto ecerr;
+        }
+        group = EC_GROUP_new_by_curve_name(OBJ_obj2nid(poid));
+        if (group == NULL)
+            goto ecerr;
+        EC_GROUP_set_asn1_flag(group, OPENSSL_EC_NAMED_CURVE);
+        if (EC_KEY_set_group(eckey, group) == 0)
+            goto ecerr;
+        EC_GROUP_free(group);
+    } else {
+        ECerr(EC_F_ECKEY_TYPE2PARAM, EC_R_DECODE_ERROR);
+        goto ecerr;
+    }
+
+    return eckey;
+
+ ecerr:
+    EC_KEY_free(eckey);
+    EC_GROUP_free(group);
+    return NULL;
+}
+
+static int eckey_pub_decode(EVP_PKEY *pkey, X509_PUBKEY *pubkey)
+{
+    const unsigned char *p = NULL;
+    const void *pval;
+    int ptype, pklen;
+    EC_KEY *eckey = NULL;
+    X509_ALGOR *palg;
+
+    if (!X509_PUBKEY_get0_param(NULL, &p, &pklen, &palg, pubkey))
+        return 0;
+    X509_ALGOR_get0(NULL, &ptype, &pval, palg);
+
+    eckey = eckey_type2param(ptype, pval);
+
+    if (!eckey) {
+        ECerr(EC_F_ECKEY_PUB_DECODE, ERR_R_EC_LIB);
+        return 0;
+    }
+
+    /* We have parameters now set public key */
+    if (!o2i_ECPublicKey(&eckey, &p, pklen)) {
+        ECerr(EC_F_ECKEY_PUB_DECODE, EC_R_DECODE_ERROR);
+        goto ecerr;
+    }
+
+    EVP_PKEY_assign_EC_KEY(pkey, eckey);
+    return 1;
+
+ ecerr:
+    EC_KEY_free(eckey);
+    return 0;
+}
+
+static int eckey_pub_cmp(const EVP_PKEY *a, const EVP_PKEY *b)
+{
+    int r;
+    const EC_GROUP *group = EC_KEY_get0_group(b->pkey.ec);
+    const EC_POINT *pa = EC_KEY_get0_public_key(a->pkey.ec),
+        *pb = EC_KEY_get0_public_key(b->pkey.ec);
+    if (group == NULL || pa == NULL || pb == NULL)
+        return -2;
+    r = EC_POINT_cmp(group, pa, pb, NULL);
+    if (r == 0)
+        return 1;
+    if (r == 1)
+        return 0;
+    return -2;
+}
+
+static int eckey_priv_decode(EVP_PKEY *pkey, const PKCS8_PRIV_KEY_INFO *p8)
+{
+    const unsigned char *p = NULL;
+    const void *pval;
+    int ptype, pklen;
+    EC_KEY *eckey = NULL;
+    const X509_ALGOR *palg;
+
+    if (!PKCS8_pkey_get0(NULL, &p, &pklen, &palg, p8))
+        return 0;
+    X509_ALGOR_get0(NULL, &ptype, &pval, palg);
+
+    eckey = eckey_type2param(ptype, pval);
+
+    if (!eckey)
+        goto ecliberr;
+
+    /* We have parameters now set private key */
+    if (!d2i_ECPrivateKey(&eckey, &p, pklen)) {
+        ECerr(EC_F_ECKEY_PRIV_DECODE, EC_R_DECODE_ERROR);
+        goto ecerr;
+    }
+
+    EVP_PKEY_assign_EC_KEY(pkey, eckey);
+    return 1;
+
+ ecliberr:
+    ECerr(EC_F_ECKEY_PRIV_DECODE, ERR_R_EC_LIB);
+ ecerr:
+    EC_KEY_free(eckey);
+    return 0;
+}
+
+static int eckey_priv_encode(PKCS8_PRIV_KEY_INFO *p8, const EVP_PKEY *pkey)
+{
+    EC_KEY ec_key = *(pkey->pkey.ec);
+    unsigned char *ep, *p;
+    int eplen, ptype;
+    void *pval;
+    unsigned int old_flags;
+
+    if (!eckey_param2type(&ptype, &pval, &ec_key)) {
+        ECerr(EC_F_ECKEY_PRIV_ENCODE, EC_R_DECODE_ERROR);
+        return 0;
+    }
+
+    /* set the private key */
+
+    /*
+     * do not include the parameters in the SEC1 private key see PKCS#11
+     * 12.11
+     */
+    old_flags = EC_KEY_get_enc_flags(&ec_key);
+    EC_KEY_set_enc_flags(&ec_key, old_flags | EC_PKEY_NO_PARAMETERS);
+
+    eplen = i2d_ECPrivateKey(&ec_key, NULL);
+    if (!eplen) {
+        ECerr(EC_F_ECKEY_PRIV_ENCODE, ERR_R_EC_LIB);
+        return 0;
+    }
+    ep = OPENSSL_malloc(eplen);
+    if (ep == NULL) {
+        ECerr(EC_F_ECKEY_PRIV_ENCODE, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    p = ep;
+    if (!i2d_ECPrivateKey(&ec_key, &p)) {
+        OPENSSL_free(ep);
+        ECerr(EC_F_ECKEY_PRIV_ENCODE, ERR_R_EC_LIB);
+        return 0;
+    }
+
+    if (!PKCS8_pkey_set0(p8, OBJ_nid2obj(NID_X9_62_id_ecPublicKey), 0,
+                         ptype, pval, ep, eplen)) {
+        OPENSSL_free(ep);
+        return 0;
+    }
+
+    return 1;
+}
+
+static int int_ec_size(const EVP_PKEY *pkey)
+{
+    return ECDSA_size(pkey->pkey.ec);
+}
+
+static int ec_bits(const EVP_PKEY *pkey)
+{
+    return EC_GROUP_order_bits(EC_KEY_get0_group(pkey->pkey.ec));
+}
+
+static int ec_security_bits(const EVP_PKEY *pkey)
+{
+    int ecbits = ec_bits(pkey);
+    if (ecbits >= 512)
+        return 256;
+    if (ecbits >= 384)
+        return 192;
+    if (ecbits >= 256)
+        return 128;
+    if (ecbits >= 224)
+        return 112;
+    if (ecbits >= 160)
+        return 80;
+    return ecbits / 2;
+}
+
+static int ec_missing_parameters(const EVP_PKEY *pkey)
+{
+    if (pkey->pkey.ec == NULL || EC_KEY_get0_group(pkey->pkey.ec) == NULL)
+        return 1;
+    return 0;
+}
+
+static int ec_copy_parameters(EVP_PKEY *to, const EVP_PKEY *from)
+{
+    EC_GROUP *group = EC_GROUP_dup(EC_KEY_get0_group(from->pkey.ec));
+
+    if (group == NULL)
+        return 0;
+    if (to->pkey.ec == NULL) {
+        to->pkey.ec = EC_KEY_new();
+        if (to->pkey.ec == NULL)
+            goto err;
+    }
+    if (EC_KEY_set_group(to->pkey.ec, group) == 0)
+        goto err;
+    EC_GROUP_free(group);
+    return 1;
+ err:
+    EC_GROUP_free(group);
+    return 0;
+}
+
+static int ec_cmp_parameters(const EVP_PKEY *a, const EVP_PKEY *b)
+{
+    const EC_GROUP *group_a = EC_KEY_get0_group(a->pkey.ec),
+        *group_b = EC_KEY_get0_group(b->pkey.ec);
+    if (group_a == NULL || group_b == NULL)
+        return -2;
+    if (EC_GROUP_cmp(group_a, group_b, NULL))
+        return 0;
+    else
+        return 1;
+}
+
+static void int_ec_free(EVP_PKEY *pkey)
+{
+    EC_KEY_free(pkey->pkey.ec);
+}
+
+typedef enum {
+    EC_KEY_PRINT_PRIVATE,
+    EC_KEY_PRINT_PUBLIC,
+    EC_KEY_PRINT_PARAM
+} ec_print_t;
+
+static int do_EC_KEY_print(BIO *bp, const EC_KEY *x, int off, ec_print_t ktype)
+{
+    const char *ecstr;
+    unsigned char *priv = NULL, *pub = NULL;
+    size_t privlen = 0, publen = 0;
+    int ret = 0;
+    const EC_GROUP *group;
+
+    if (x == NULL || (group = EC_KEY_get0_group(x)) == NULL) {
+        ECerr(EC_F_DO_EC_KEY_PRINT, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+
+    if (ktype != EC_KEY_PRINT_PARAM && EC_KEY_get0_public_key(x) != NULL) {
+        publen = EC_KEY_key2buf(x, EC_KEY_get_conv_form(x), &pub, NULL);
+        if (publen == 0)
+            goto err;
+    }
+
+    if (ktype == EC_KEY_PRINT_PRIVATE && EC_KEY_get0_private_key(x) != NULL) {
+        privlen = EC_KEY_priv2buf(x, &priv);
+        if (privlen == 0)
+            goto err;
+    }
+
+    if (ktype == EC_KEY_PRINT_PRIVATE)
+        ecstr = "Private-Key";
+    else if (ktype == EC_KEY_PRINT_PUBLIC)
+        ecstr = "Public-Key";
+    else
+        ecstr = "ECDSA-Parameters";
+
+    if (!BIO_indent(bp, off, 128))
+        goto err;
+    if (BIO_printf(bp, "%s: (%d bit)\n", ecstr,
+                   EC_GROUP_order_bits(group)) <= 0)
+        goto err;
+
+    if (privlen != 0) {
+        if (BIO_printf(bp, "%*spriv:\n", off, "") <= 0)
+            goto err;
+        if (ASN1_buf_print(bp, priv, privlen, off + 4) == 0)
+            goto err;
+    }
+
+    if (publen != 0) {
+        if (BIO_printf(bp, "%*spub:\n", off, "") <= 0)
+            goto err;
+        if (ASN1_buf_print(bp, pub, publen, off + 4) == 0)
+            goto err;
+    }
+
+    if (!ECPKParameters_print(bp, group, off))
+        goto err;
+    ret = 1;
+ err:
+    if (!ret)
+        ECerr(EC_F_DO_EC_KEY_PRINT, ERR_R_EC_LIB);
+    OPENSSL_clear_free(priv, privlen);
+    OPENSSL_free(pub);
+    return ret;
+}
+
+static int eckey_param_decode(EVP_PKEY *pkey,
+                              const unsigned char **pder, int derlen)
+{
+    EC_KEY *eckey;
+
+    if ((eckey = d2i_ECParameters(NULL, pder, derlen)) == NULL) {
+        ECerr(EC_F_ECKEY_PARAM_DECODE, ERR_R_EC_LIB);
+        return 0;
+    }
+    EVP_PKEY_assign_EC_KEY(pkey, eckey);
+    return 1;
+}
+
+static int eckey_param_encode(const EVP_PKEY *pkey, unsigned char **pder)
+{
+    return i2d_ECParameters(pkey->pkey.ec, pder);
+}
+
+static int eckey_param_print(BIO *bp, const EVP_PKEY *pkey, int indent,
+                             ASN1_PCTX *ctx)
+{
+    return do_EC_KEY_print(bp, pkey->pkey.ec, indent, EC_KEY_PRINT_PARAM);
+}
+
+static int eckey_pub_print(BIO *bp, const EVP_PKEY *pkey, int indent,
+                           ASN1_PCTX *ctx)
+{
+    return do_EC_KEY_print(bp, pkey->pkey.ec, indent, EC_KEY_PRINT_PUBLIC);
+}
+
+static int eckey_priv_print(BIO *bp, const EVP_PKEY *pkey, int indent,
+                            ASN1_PCTX *ctx)
+{
+    return do_EC_KEY_print(bp, pkey->pkey.ec, indent, EC_KEY_PRINT_PRIVATE);
+}
+
+static int old_ec_priv_decode(EVP_PKEY *pkey,
+                              const unsigned char **pder, int derlen)
+{
+    EC_KEY *ec;
+
+    if ((ec = d2i_ECPrivateKey(NULL, pder, derlen)) == NULL) {
+        ECerr(EC_F_OLD_EC_PRIV_DECODE, EC_R_DECODE_ERROR);
+        return 0;
+    }
+    EVP_PKEY_assign_EC_KEY(pkey, ec);
+    return 1;
+}
+
+static int old_ec_priv_encode(const EVP_PKEY *pkey, unsigned char **pder)
+{
+    return i2d_ECPrivateKey(pkey->pkey.ec, pder);
+}
+
+static int ec_pkey_ctrl(EVP_PKEY *pkey, int op, long arg1, void *arg2)
+{
+    switch (op) {
+    case ASN1_PKEY_CTRL_PKCS7_SIGN:
+        if (arg1 == 0) {
+            int snid, hnid;
+            X509_ALGOR *alg1, *alg2;
+            PKCS7_SIGNER_INFO_get0_algs(arg2, NULL, &alg1, &alg2);
+            if (alg1 == NULL || alg1->algorithm == NULL)
+                return -1;
+            hnid = OBJ_obj2nid(alg1->algorithm);
+            if (hnid == NID_undef)
+                return -1;
+            if (!OBJ_find_sigid_by_algs(&snid, hnid, EVP_PKEY_id(pkey)))
+                return -1;
+            X509_ALGOR_set0(alg2, OBJ_nid2obj(snid), V_ASN1_UNDEF, 0);
+        }
+        return 1;
+#ifndef OPENSSL_NO_CMS
+    case ASN1_PKEY_CTRL_CMS_SIGN:
+        if (arg1 == 0) {
+            int snid, hnid;
+            X509_ALGOR *alg1, *alg2;
+            CMS_SignerInfo_get0_algs(arg2, NULL, NULL, &alg1, &alg2);
+            if (alg1 == NULL || alg1->algorithm == NULL)
+                return -1;
+            hnid = OBJ_obj2nid(alg1->algorithm);
+            if (hnid == NID_undef)
+                return -1;
+            if (!OBJ_find_sigid_by_algs(&snid, hnid, EVP_PKEY_id(pkey)))
+                return -1;
+            X509_ALGOR_set0(alg2, OBJ_nid2obj(snid), V_ASN1_UNDEF, 0);
+        }
+        return 1;
+
+    case ASN1_PKEY_CTRL_CMS_ENVELOPE:
+        if (arg1 == 1)
+            return ecdh_cms_decrypt(arg2);
+        else if (arg1 == 0)
+            return ecdh_cms_encrypt(arg2);
+        return -2;
+
+    case ASN1_PKEY_CTRL_CMS_RI_TYPE:
+        *(int *)arg2 = CMS_RECIPINFO_AGREE;
+        return 1;
+#endif
+
+    case ASN1_PKEY_CTRL_DEFAULT_MD_NID:
+        *(int *)arg2 = NID_sha256;
+        return 1;
+
+    case ASN1_PKEY_CTRL_SET1_TLS_ENCPT:
+        return EC_KEY_oct2key(EVP_PKEY_get0_EC_KEY(pkey), arg2, arg1, NULL);
+
+    case ASN1_PKEY_CTRL_GET1_TLS_ENCPT:
+        return EC_KEY_key2buf(EVP_PKEY_get0_EC_KEY(pkey),
+                              POINT_CONVERSION_UNCOMPRESSED, arg2, NULL);
+
+    default:
+        return -2;
+
+    }
+
+}
+
+static int ec_pkey_check(const EVP_PKEY *pkey)
+{
+    EC_KEY *eckey = pkey->pkey.ec;
+
+    /* stay consistent to what EVP_PKEY_check demands */
+    if (eckey->priv_key == NULL) {
+        ECerr(EC_F_EC_PKEY_CHECK, EC_R_MISSING_PRIVATE_KEY);
+        return 0;
+    }
+
+    return EC_KEY_check_key(eckey);
+}
+
+static int ec_pkey_public_check(const EVP_PKEY *pkey)
+{
+    EC_KEY *eckey = pkey->pkey.ec;
+
+    /*
+     * Note: it unnecessary to check eckey->pub_key here since
+     * it will be checked in EC_KEY_check_key(). In fact, the
+     * EC_KEY_check_key() mainly checks the public key, and checks
+     * the private key optionally (only if there is one). So if
+     * someone passes a whole EC key (public + private), this
+     * will also work...
+     */
+
+    return EC_KEY_check_key(eckey);
+}
+
+static int ec_pkey_param_check(const EVP_PKEY *pkey)
+{
+    EC_KEY *eckey = pkey->pkey.ec;
+
+    /* stay consistent to what EVP_PKEY_check demands */
+    if (eckey->group == NULL) {
+        ECerr(EC_F_EC_PKEY_PARAM_CHECK, EC_R_MISSING_PARAMETERS);
+        return 0;
+    }
+
+    return EC_GROUP_check(eckey->group, NULL);
+}
+
+const EVP_PKEY_ASN1_METHOD eckey_asn1_meth = {
+    EVP_PKEY_EC,
+    EVP_PKEY_EC,
+    0,
+    "EC",
+    "OpenSSL EC algorithm",
+
+    eckey_pub_decode,
+    eckey_pub_encode,
+    eckey_pub_cmp,
+    eckey_pub_print,
+
+    eckey_priv_decode,
+    eckey_priv_encode,
+    eckey_priv_print,
+
+    int_ec_size,
+    ec_bits,
+    ec_security_bits,
+
+    eckey_param_decode,
+    eckey_param_encode,
+    ec_missing_parameters,
+    ec_copy_parameters,
+    ec_cmp_parameters,
+    eckey_param_print,
+    0,
+
+    int_ec_free,
+    ec_pkey_ctrl,
+    old_ec_priv_decode,
+    old_ec_priv_encode,
+
+    0, 0, 0,
+
+    ec_pkey_check,
+    ec_pkey_public_check,
+    ec_pkey_param_check
+};
+
+#if !defined(OPENSSL_NO_SM2)
+const EVP_PKEY_ASN1_METHOD sm2_asn1_meth = {
+   EVP_PKEY_SM2,
+   EVP_PKEY_EC,
+   ASN1_PKEY_ALIAS
+};
+#endif
+
+int EC_KEY_print(BIO *bp, const EC_KEY *x, int off)
+{
+    int private = EC_KEY_get0_private_key(x) != NULL;
+
+    return do_EC_KEY_print(bp, x, off,
+                private ? EC_KEY_PRINT_PRIVATE : EC_KEY_PRINT_PUBLIC);
+}
+
+int ECParameters_print(BIO *bp, const EC_KEY *x)
+{
+    return do_EC_KEY_print(bp, x, 4, EC_KEY_PRINT_PARAM);
+}
+
+#ifndef OPENSSL_NO_CMS
+
+static int ecdh_cms_set_peerkey(EVP_PKEY_CTX *pctx,
+                                X509_ALGOR *alg, ASN1_BIT_STRING *pubkey)
+{
+    const ASN1_OBJECT *aoid;
+    int atype;
+    const void *aval;
+    int rv = 0;
+    EVP_PKEY *pkpeer = NULL;
+    EC_KEY *ecpeer = NULL;
+    const unsigned char *p;
+    int plen;
+    X509_ALGOR_get0(&aoid, &atype, &aval, alg);
+    if (OBJ_obj2nid(aoid) != NID_X9_62_id_ecPublicKey)
+        goto err;
+    /* If absent parameters get group from main key */
+    if (atype == V_ASN1_UNDEF || atype == V_ASN1_NULL) {
+        const EC_GROUP *grp;
+        EVP_PKEY *pk;
+        pk = EVP_PKEY_CTX_get0_pkey(pctx);
+        if (!pk)
+            goto err;
+        grp = EC_KEY_get0_group(pk->pkey.ec);
+        ecpeer = EC_KEY_new();
+        if (ecpeer == NULL)
+            goto err;
+        if (!EC_KEY_set_group(ecpeer, grp))
+            goto err;
+    } else {
+        ecpeer = eckey_type2param(atype, aval);
+        if (!ecpeer)
+            goto err;
+    }
+    /* We have parameters now set public key */
+    plen = ASN1_STRING_length(pubkey);
+    p = ASN1_STRING_get0_data(pubkey);
+    if (!p || !plen)
+        goto err;
+    if (!o2i_ECPublicKey(&ecpeer, &p, plen))
+        goto err;
+    pkpeer = EVP_PKEY_new();
+    if (pkpeer == NULL)
+        goto err;
+    EVP_PKEY_set1_EC_KEY(pkpeer, ecpeer);
+    if (EVP_PKEY_derive_set_peer(pctx, pkpeer) > 0)
+        rv = 1;
+ err:
+    EC_KEY_free(ecpeer);
+    EVP_PKEY_free(pkpeer);
+    return rv;
+}
+
+/* Set KDF parameters based on KDF NID */
+static int ecdh_cms_set_kdf_param(EVP_PKEY_CTX *pctx, int eckdf_nid)
+{
+    int kdf_nid, kdfmd_nid, cofactor;
+    const EVP_MD *kdf_md;
+    if (eckdf_nid == NID_undef)
+        return 0;
+
+    /* Lookup KDF type, cofactor mode and digest */
+    if (!OBJ_find_sigid_algs(eckdf_nid, &kdfmd_nid, &kdf_nid))
+        return 0;
+
+    if (kdf_nid == NID_dh_std_kdf)
+        cofactor = 0;
+    else if (kdf_nid == NID_dh_cofactor_kdf)
+        cofactor = 1;
+    else
+        return 0;
+
+    if (EVP_PKEY_CTX_set_ecdh_cofactor_mode(pctx, cofactor) <= 0)
+        return 0;
+
+    if (EVP_PKEY_CTX_set_ecdh_kdf_type(pctx, EVP_PKEY_ECDH_KDF_X9_63) <= 0)
+        return 0;
+
+    kdf_md = EVP_get_digestbynid(kdfmd_nid);
+    if (!kdf_md)
+        return 0;
+
+    if (EVP_PKEY_CTX_set_ecdh_kdf_md(pctx, kdf_md) <= 0)
+        return 0;
+    return 1;
+}
+
+static int ecdh_cms_set_shared_info(EVP_PKEY_CTX *pctx, CMS_RecipientInfo *ri)
+{
+    int rv = 0;
+
+    X509_ALGOR *alg, *kekalg = NULL;
+    ASN1_OCTET_STRING *ukm;
+    const unsigned char *p;
+    unsigned char *der = NULL;
+    int plen, keylen;
+    const EVP_CIPHER *kekcipher;
+    EVP_CIPHER_CTX *kekctx;
+
+    if (!CMS_RecipientInfo_kari_get0_alg(ri, &alg, &ukm))
+        return 0;
+
+    if (!ecdh_cms_set_kdf_param(pctx, OBJ_obj2nid(alg->algorithm))) {
+        ECerr(EC_F_ECDH_CMS_SET_SHARED_INFO, EC_R_KDF_PARAMETER_ERROR);
+        return 0;
+    }
+
+    if (alg->parameter->type != V_ASN1_SEQUENCE)
+        return 0;
+
+    p = alg->parameter->value.sequence->data;
+    plen = alg->parameter->value.sequence->length;
+    kekalg = d2i_X509_ALGOR(NULL, &p, plen);
+    if (!kekalg)
+        goto err;
+    kekctx = CMS_RecipientInfo_kari_get0_ctx(ri);
+    if (!kekctx)
+        goto err;
+    kekcipher = EVP_get_cipherbyobj(kekalg->algorithm);
+    if (!kekcipher || EVP_CIPHER_mode(kekcipher) != EVP_CIPH_WRAP_MODE)
+        goto err;
+    if (!EVP_EncryptInit_ex(kekctx, kekcipher, NULL, NULL, NULL))
+        goto err;
+    if (EVP_CIPHER_asn1_to_param(kekctx, kekalg->parameter) <= 0)
+        goto err;
+
+    keylen = EVP_CIPHER_CTX_key_length(kekctx);
+    if (EVP_PKEY_CTX_set_ecdh_kdf_outlen(pctx, keylen) <= 0)
+        goto err;
+
+    plen = CMS_SharedInfo_encode(&der, kekalg, ukm, keylen);
+
+    if (!plen)
+        goto err;
+
+    if (EVP_PKEY_CTX_set0_ecdh_kdf_ukm(pctx, der, plen) <= 0)
+        goto err;
+    der = NULL;
+
+    rv = 1;
+ err:
+    X509_ALGOR_free(kekalg);
+    OPENSSL_free(der);
+    return rv;
+}
+
+static int ecdh_cms_decrypt(CMS_RecipientInfo *ri)
+{
+    EVP_PKEY_CTX *pctx;
+    pctx = CMS_RecipientInfo_get0_pkey_ctx(ri);
+    if (!pctx)
+        return 0;
+    /* See if we need to set peer key */
+    if (!EVP_PKEY_CTX_get0_peerkey(pctx)) {
+        X509_ALGOR *alg;
+        ASN1_BIT_STRING *pubkey;
+        if (!CMS_RecipientInfo_kari_get0_orig_id(ri, &alg, &pubkey,
+                                                 NULL, NULL, NULL))
+            return 0;
+        if (!alg || !pubkey)
+            return 0;
+        if (!ecdh_cms_set_peerkey(pctx, alg, pubkey)) {
+            ECerr(EC_F_ECDH_CMS_DECRYPT, EC_R_PEER_KEY_ERROR);
+            return 0;
+        }
+    }
+    /* Set ECDH derivation parameters and initialise unwrap context */
+    if (!ecdh_cms_set_shared_info(pctx, ri)) {
+        ECerr(EC_F_ECDH_CMS_DECRYPT, EC_R_SHARED_INFO_ERROR);
+        return 0;
+    }
+    return 1;
+}
+
+static int ecdh_cms_encrypt(CMS_RecipientInfo *ri)
+{
+    EVP_PKEY_CTX *pctx;
+    EVP_PKEY *pkey;
+    EVP_CIPHER_CTX *ctx;
+    int keylen;
+    X509_ALGOR *talg, *wrap_alg = NULL;
+    const ASN1_OBJECT *aoid;
+    ASN1_BIT_STRING *pubkey;
+    ASN1_STRING *wrap_str;
+    ASN1_OCTET_STRING *ukm;
+    unsigned char *penc = NULL;
+    int penclen;
+    int rv = 0;
+    int ecdh_nid, kdf_type, kdf_nid, wrap_nid;
+    const EVP_MD *kdf_md;
+    pctx = CMS_RecipientInfo_get0_pkey_ctx(ri);
+    if (!pctx)
+        return 0;
+    /* Get ephemeral key */
+    pkey = EVP_PKEY_CTX_get0_pkey(pctx);
+    if (!CMS_RecipientInfo_kari_get0_orig_id(ri, &talg, &pubkey,
+                                             NULL, NULL, NULL))
+        goto err;
+    X509_ALGOR_get0(&aoid, NULL, NULL, talg);
+    /* Is everything uninitialised? */
+    if (aoid == OBJ_nid2obj(NID_undef)) {
+
+        EC_KEY *eckey = pkey->pkey.ec;
+        /* Set the key */
+        unsigned char *p;
+
+        penclen = i2o_ECPublicKey(eckey, NULL);
+        if (penclen <= 0)
+            goto err;
+        penc = OPENSSL_malloc(penclen);
+        if (penc == NULL)
+            goto err;
+        p = penc;
+        penclen = i2o_ECPublicKey(eckey, &p);
+        if (penclen <= 0)
+            goto err;
+        ASN1_STRING_set0(pubkey, penc, penclen);
+        pubkey->flags &= ~(ASN1_STRING_FLAG_BITS_LEFT | 0x07);
+        pubkey->flags |= ASN1_STRING_FLAG_BITS_LEFT;
+
+        penc = NULL;
+        X509_ALGOR_set0(talg, OBJ_nid2obj(NID_X9_62_id_ecPublicKey),
+                        V_ASN1_UNDEF, NULL);
+    }
+
+    /* See if custom parameters set */
+    kdf_type = EVP_PKEY_CTX_get_ecdh_kdf_type(pctx);
+    if (kdf_type <= 0)
+        goto err;
+    if (!EVP_PKEY_CTX_get_ecdh_kdf_md(pctx, &kdf_md))
+        goto err;
+    ecdh_nid = EVP_PKEY_CTX_get_ecdh_cofactor_mode(pctx);
+    if (ecdh_nid < 0)
+        goto err;
+    else if (ecdh_nid == 0)
+        ecdh_nid = NID_dh_std_kdf;
+    else if (ecdh_nid == 1)
+        ecdh_nid = NID_dh_cofactor_kdf;
+
+    if (kdf_type == EVP_PKEY_ECDH_KDF_NONE) {
+        kdf_type = EVP_PKEY_ECDH_KDF_X9_63;
+        if (EVP_PKEY_CTX_set_ecdh_kdf_type(pctx, kdf_type) <= 0)
+            goto err;
+    } else
+        /* Unknown KDF */
+        goto err;
+    if (kdf_md == NULL) {
+        /* Fixme later for better MD */
+        kdf_md = EVP_sha1();
+        if (EVP_PKEY_CTX_set_ecdh_kdf_md(pctx, kdf_md) <= 0)
+            goto err;
+    }
+
+    if (!CMS_RecipientInfo_kari_get0_alg(ri, &talg, &ukm))
+        goto err;
+
+    /* Lookup NID for KDF+cofactor+digest */
+
+    if (!OBJ_find_sigid_by_algs(&kdf_nid, EVP_MD_type(kdf_md), ecdh_nid))
+        goto err;
+    /* Get wrap NID */
+    ctx = CMS_RecipientInfo_kari_get0_ctx(ri);
+    wrap_nid = EVP_CIPHER_CTX_type(ctx);
+    keylen = EVP_CIPHER_CTX_key_length(ctx);
+
+    /* Package wrap algorithm in an AlgorithmIdentifier */
+
+    wrap_alg = X509_ALGOR_new();
+    if (wrap_alg == NULL)
+        goto err;
+    wrap_alg->algorithm = OBJ_nid2obj(wrap_nid);
+    wrap_alg->parameter = ASN1_TYPE_new();
+    if (wrap_alg->parameter == NULL)
+        goto err;
+    if (EVP_CIPHER_param_to_asn1(ctx, wrap_alg->parameter) <= 0)
+        goto err;
+    if (ASN1_TYPE_get(wrap_alg->parameter) == NID_undef) {
+        ASN1_TYPE_free(wrap_alg->parameter);
+        wrap_alg->parameter = NULL;
+    }
+
+    if (EVP_PKEY_CTX_set_ecdh_kdf_outlen(pctx, keylen) <= 0)
+        goto err;
+
+    penclen = CMS_SharedInfo_encode(&penc, wrap_alg, ukm, keylen);
+
+    if (!penclen)
+        goto err;
+
+    if (EVP_PKEY_CTX_set0_ecdh_kdf_ukm(pctx, penc, penclen) <= 0)
+        goto err;
+    penc = NULL;
+
+    /*
+     * Now need to wrap encoding of wrap AlgorithmIdentifier into parameter
+     * of another AlgorithmIdentifier.
+     */
+    penclen = i2d_X509_ALGOR(wrap_alg, &penc);
+    if (!penc || !penclen)
+        goto err;
+    wrap_str = ASN1_STRING_new();
+    if (wrap_str == NULL)
+        goto err;
+    ASN1_STRING_set0(wrap_str, penc, penclen);
+    penc = NULL;
+    X509_ALGOR_set0(talg, OBJ_nid2obj(kdf_nid), V_ASN1_SEQUENCE, wrap_str);
+
+    rv = 1;
+
+ err:
+    OPENSSL_free(penc);
+    X509_ALGOR_free(wrap_alg);
+    return rv;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_asn1.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_asn1.c
new file mode 100644
index 000000000..13c56a621
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_asn1.c
@@ -0,0 +1,1221 @@
+/*
+ * Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include "ec_lcl.h"
+#include <openssl/err.h>
+#include <openssl/asn1t.h>
+#include <openssl/objects.h>
+#include "internal/nelem.h"
+
+int EC_GROUP_get_basis_type(const EC_GROUP *group)
+{
+    int i;
+
+    if (EC_METHOD_get_field_type(EC_GROUP_method_of(group)) !=
+        NID_X9_62_characteristic_two_field)
+        /* everything else is currently not supported */
+        return 0;
+
+    /* Find the last non-zero element of group->poly[] */
+    for (i = 0;
+         i < (int)OSSL_NELEM(group->poly) && group->poly[i] != 0;
+         i++)
+        continue;
+
+    if (i == 4)
+        return NID_X9_62_ppBasis;
+    else if (i == 2)
+        return NID_X9_62_tpBasis;
+    else
+        /* everything else is currently not supported */
+        return 0;
+}
+
+#ifndef OPENSSL_NO_EC2M
+int EC_GROUP_get_trinomial_basis(const EC_GROUP *group, unsigned int *k)
+{
+    if (group == NULL)
+        return 0;
+
+    if (EC_METHOD_get_field_type(EC_GROUP_method_of(group)) !=
+        NID_X9_62_characteristic_two_field
+        || !((group->poly[0] != 0) && (group->poly[1] != 0)
+             && (group->poly[2] == 0))) {
+        ECerr(EC_F_EC_GROUP_GET_TRINOMIAL_BASIS,
+              ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+
+    if (k)
+        *k = group->poly[1];
+
+    return 1;
+}
+
+int EC_GROUP_get_pentanomial_basis(const EC_GROUP *group, unsigned int *k1,
+                                   unsigned int *k2, unsigned int *k3)
+{
+    if (group == NULL)
+        return 0;
+
+    if (EC_METHOD_get_field_type(EC_GROUP_method_of(group)) !=
+        NID_X9_62_characteristic_two_field
+        || !((group->poly[0] != 0) && (group->poly[1] != 0)
+             && (group->poly[2] != 0) && (group->poly[3] != 0)
+             && (group->poly[4] == 0))) {
+        ECerr(EC_F_EC_GROUP_GET_PENTANOMIAL_BASIS,
+              ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+
+    if (k1)
+        *k1 = group->poly[3];
+    if (k2)
+        *k2 = group->poly[2];
+    if (k3)
+        *k3 = group->poly[1];
+
+    return 1;
+}
+#endif
+
+/* some structures needed for the asn1 encoding */
+typedef struct x9_62_pentanomial_st {
+    int32_t k1;
+    int32_t k2;
+    int32_t k3;
+} X9_62_PENTANOMIAL;
+
+typedef struct x9_62_characteristic_two_st {
+    int32_t m;
+    ASN1_OBJECT *type;
+    union {
+        char *ptr;
+        /* NID_X9_62_onBasis */
+        ASN1_NULL *onBasis;
+        /* NID_X9_62_tpBasis */
+        ASN1_INTEGER *tpBasis;
+        /* NID_X9_62_ppBasis */
+        X9_62_PENTANOMIAL *ppBasis;
+        /* anything else */
+        ASN1_TYPE *other;
+    } p;
+} X9_62_CHARACTERISTIC_TWO;
+
+typedef struct x9_62_fieldid_st {
+    ASN1_OBJECT *fieldType;
+    union {
+        char *ptr;
+        /* NID_X9_62_prime_field */
+        ASN1_INTEGER *prime;
+        /* NID_X9_62_characteristic_two_field */
+        X9_62_CHARACTERISTIC_TWO *char_two;
+        /* anything else */
+        ASN1_TYPE *other;
+    } p;
+} X9_62_FIELDID;
+
+typedef struct x9_62_curve_st {
+    ASN1_OCTET_STRING *a;
+    ASN1_OCTET_STRING *b;
+    ASN1_BIT_STRING *seed;
+} X9_62_CURVE;
+
+struct ec_parameters_st {
+    int32_t version;
+    X9_62_FIELDID *fieldID;
+    X9_62_CURVE *curve;
+    ASN1_OCTET_STRING *base;
+    ASN1_INTEGER *order;
+    ASN1_INTEGER *cofactor;
+} /* ECPARAMETERS */ ;
+
+struct ecpk_parameters_st {
+    int type;
+    union {
+        ASN1_OBJECT *named_curve;
+        ECPARAMETERS *parameters;
+        ASN1_NULL *implicitlyCA;
+    } value;
+} /* ECPKPARAMETERS */ ;
+
+/* SEC1 ECPrivateKey */
+typedef struct ec_privatekey_st {
+    int32_t version;
+    ASN1_OCTET_STRING *privateKey;
+    ECPKPARAMETERS *parameters;
+    ASN1_BIT_STRING *publicKey;
+} EC_PRIVATEKEY;
+
+/* the OpenSSL ASN.1 definitions */
+ASN1_SEQUENCE(X9_62_PENTANOMIAL) = {
+        ASN1_EMBED(X9_62_PENTANOMIAL, k1, INT32),
+        ASN1_EMBED(X9_62_PENTANOMIAL, k2, INT32),
+        ASN1_EMBED(X9_62_PENTANOMIAL, k3, INT32)
+} static_ASN1_SEQUENCE_END(X9_62_PENTANOMIAL)
+
+DECLARE_ASN1_ALLOC_FUNCTIONS(X9_62_PENTANOMIAL)
+IMPLEMENT_ASN1_ALLOC_FUNCTIONS(X9_62_PENTANOMIAL)
+
+ASN1_ADB_TEMPLATE(char_two_def) = ASN1_SIMPLE(X9_62_CHARACTERISTIC_TWO, p.other, ASN1_ANY);
+
+ASN1_ADB(X9_62_CHARACTERISTIC_TWO) = {
+        ADB_ENTRY(NID_X9_62_onBasis, ASN1_SIMPLE(X9_62_CHARACTERISTIC_TWO, p.onBasis, ASN1_NULL)),
+        ADB_ENTRY(NID_X9_62_tpBasis, ASN1_SIMPLE(X9_62_CHARACTERISTIC_TWO, p.tpBasis, ASN1_INTEGER)),
+        ADB_ENTRY(NID_X9_62_ppBasis, ASN1_SIMPLE(X9_62_CHARACTERISTIC_TWO, p.ppBasis, X9_62_PENTANOMIAL))
+} ASN1_ADB_END(X9_62_CHARACTERISTIC_TWO, 0, type, 0, &char_two_def_tt, NULL);
+
+ASN1_SEQUENCE(X9_62_CHARACTERISTIC_TWO) = {
+        ASN1_EMBED(X9_62_CHARACTERISTIC_TWO, m, INT32),
+        ASN1_SIMPLE(X9_62_CHARACTERISTIC_TWO, type, ASN1_OBJECT),
+        ASN1_ADB_OBJECT(X9_62_CHARACTERISTIC_TWO)
+} static_ASN1_SEQUENCE_END(X9_62_CHARACTERISTIC_TWO)
+
+DECLARE_ASN1_ALLOC_FUNCTIONS(X9_62_CHARACTERISTIC_TWO)
+IMPLEMENT_ASN1_ALLOC_FUNCTIONS(X9_62_CHARACTERISTIC_TWO)
+
+ASN1_ADB_TEMPLATE(fieldID_def) = ASN1_SIMPLE(X9_62_FIELDID, p.other, ASN1_ANY);
+
+ASN1_ADB(X9_62_FIELDID) = {
+        ADB_ENTRY(NID_X9_62_prime_field, ASN1_SIMPLE(X9_62_FIELDID, p.prime, ASN1_INTEGER)),
+        ADB_ENTRY(NID_X9_62_characteristic_two_field, ASN1_SIMPLE(X9_62_FIELDID, p.char_two, X9_62_CHARACTERISTIC_TWO))
+} ASN1_ADB_END(X9_62_FIELDID, 0, fieldType, 0, &fieldID_def_tt, NULL);
+
+ASN1_SEQUENCE(X9_62_FIELDID) = {
+        ASN1_SIMPLE(X9_62_FIELDID, fieldType, ASN1_OBJECT),
+        ASN1_ADB_OBJECT(X9_62_FIELDID)
+} static_ASN1_SEQUENCE_END(X9_62_FIELDID)
+
+ASN1_SEQUENCE(X9_62_CURVE) = {
+        ASN1_SIMPLE(X9_62_CURVE, a, ASN1_OCTET_STRING),
+        ASN1_SIMPLE(X9_62_CURVE, b, ASN1_OCTET_STRING),
+        ASN1_OPT(X9_62_CURVE, seed, ASN1_BIT_STRING)
+} static_ASN1_SEQUENCE_END(X9_62_CURVE)
+
+ASN1_SEQUENCE(ECPARAMETERS) = {
+        ASN1_EMBED(ECPARAMETERS, version, INT32),
+        ASN1_SIMPLE(ECPARAMETERS, fieldID, X9_62_FIELDID),
+        ASN1_SIMPLE(ECPARAMETERS, curve, X9_62_CURVE),
+        ASN1_SIMPLE(ECPARAMETERS, base, ASN1_OCTET_STRING),
+        ASN1_SIMPLE(ECPARAMETERS, order, ASN1_INTEGER),
+        ASN1_OPT(ECPARAMETERS, cofactor, ASN1_INTEGER)
+} ASN1_SEQUENCE_END(ECPARAMETERS)
+
+DECLARE_ASN1_ALLOC_FUNCTIONS(ECPARAMETERS)
+IMPLEMENT_ASN1_ALLOC_FUNCTIONS(ECPARAMETERS)
+
+ASN1_CHOICE(ECPKPARAMETERS) = {
+        ASN1_SIMPLE(ECPKPARAMETERS, value.named_curve, ASN1_OBJECT),
+        ASN1_SIMPLE(ECPKPARAMETERS, value.parameters, ECPARAMETERS),
+        ASN1_SIMPLE(ECPKPARAMETERS, value.implicitlyCA, ASN1_NULL)
+} ASN1_CHOICE_END(ECPKPARAMETERS)
+
+DECLARE_ASN1_FUNCTIONS_const(ECPKPARAMETERS)
+DECLARE_ASN1_ENCODE_FUNCTIONS_const(ECPKPARAMETERS, ECPKPARAMETERS)
+IMPLEMENT_ASN1_FUNCTIONS_const(ECPKPARAMETERS)
+
+ASN1_SEQUENCE(EC_PRIVATEKEY) = {
+        ASN1_EMBED(EC_PRIVATEKEY, version, INT32),
+        ASN1_SIMPLE(EC_PRIVATEKEY, privateKey, ASN1_OCTET_STRING),
+        ASN1_EXP_OPT(EC_PRIVATEKEY, parameters, ECPKPARAMETERS, 0),
+        ASN1_EXP_OPT(EC_PRIVATEKEY, publicKey, ASN1_BIT_STRING, 1)
+} static_ASN1_SEQUENCE_END(EC_PRIVATEKEY)
+
+DECLARE_ASN1_FUNCTIONS_const(EC_PRIVATEKEY)
+DECLARE_ASN1_ENCODE_FUNCTIONS_const(EC_PRIVATEKEY, EC_PRIVATEKEY)
+IMPLEMENT_ASN1_FUNCTIONS_const(EC_PRIVATEKEY)
+
+/* some declarations of internal function */
+
+/* ec_asn1_group2field() sets the values in a X9_62_FIELDID object */
+static int ec_asn1_group2fieldid(const EC_GROUP *, X9_62_FIELDID *);
+/* ec_asn1_group2curve() sets the values in a X9_62_CURVE object */
+static int ec_asn1_group2curve(const EC_GROUP *, X9_62_CURVE *);
+
+/* the function definitions */
+
+static int ec_asn1_group2fieldid(const EC_GROUP *group, X9_62_FIELDID *field)
+{
+    int ok = 0, nid;
+    BIGNUM *tmp = NULL;
+
+    if (group == NULL || field == NULL)
+        return 0;
+
+    /* clear the old values (if necessary) */
+    ASN1_OBJECT_free(field->fieldType);
+    ASN1_TYPE_free(field->p.other);
+
+    nid = EC_METHOD_get_field_type(EC_GROUP_method_of(group));
+    /* set OID for the field */
+    if ((field->fieldType = OBJ_nid2obj(nid)) == NULL) {
+        ECerr(EC_F_EC_ASN1_GROUP2FIELDID, ERR_R_OBJ_LIB);
+        goto err;
+    }
+
+    if (nid == NID_X9_62_prime_field) {
+        if ((tmp = BN_new()) == NULL) {
+            ECerr(EC_F_EC_ASN1_GROUP2FIELDID, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        /* the parameters are specified by the prime number p */
+        if (!EC_GROUP_get_curve(group, tmp, NULL, NULL, NULL)) {
+            ECerr(EC_F_EC_ASN1_GROUP2FIELDID, ERR_R_EC_LIB);
+            goto err;
+        }
+        /* set the prime number */
+        field->p.prime = BN_to_ASN1_INTEGER(tmp, NULL);
+        if (field->p.prime == NULL) {
+            ECerr(EC_F_EC_ASN1_GROUP2FIELDID, ERR_R_ASN1_LIB);
+            goto err;
+        }
+    } else if (nid == NID_X9_62_characteristic_two_field)
+#ifdef OPENSSL_NO_EC2M
+    {
+        ECerr(EC_F_EC_ASN1_GROUP2FIELDID, EC_R_GF2M_NOT_SUPPORTED);
+        goto err;
+    }
+#else
+    {
+        int field_type;
+        X9_62_CHARACTERISTIC_TWO *char_two;
+
+        field->p.char_two = X9_62_CHARACTERISTIC_TWO_new();
+        char_two = field->p.char_two;
+
+        if (char_two == NULL) {
+            ECerr(EC_F_EC_ASN1_GROUP2FIELDID, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+
+        char_two->m = (long)EC_GROUP_get_degree(group);
+
+        field_type = EC_GROUP_get_basis_type(group);
+
+        if (field_type == 0) {
+            ECerr(EC_F_EC_ASN1_GROUP2FIELDID, ERR_R_EC_LIB);
+            goto err;
+        }
+        /* set base type OID */
+        if ((char_two->type = OBJ_nid2obj(field_type)) == NULL) {
+            ECerr(EC_F_EC_ASN1_GROUP2FIELDID, ERR_R_OBJ_LIB);
+            goto err;
+        }
+
+        if (field_type == NID_X9_62_tpBasis) {
+            unsigned int k;
+
+            if (!EC_GROUP_get_trinomial_basis(group, &k))
+                goto err;
+
+            char_two->p.tpBasis = ASN1_INTEGER_new();
+            if (char_two->p.tpBasis == NULL) {
+                ECerr(EC_F_EC_ASN1_GROUP2FIELDID, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            if (!ASN1_INTEGER_set(char_two->p.tpBasis, (long)k)) {
+                ECerr(EC_F_EC_ASN1_GROUP2FIELDID, ERR_R_ASN1_LIB);
+                goto err;
+            }
+        } else if (field_type == NID_X9_62_ppBasis) {
+            unsigned int k1, k2, k3;
+
+            if (!EC_GROUP_get_pentanomial_basis(group, &k1, &k2, &k3))
+                goto err;
+
+            char_two->p.ppBasis = X9_62_PENTANOMIAL_new();
+            if (char_two->p.ppBasis == NULL) {
+                ECerr(EC_F_EC_ASN1_GROUP2FIELDID, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+
+            /* set k? values */
+            char_two->p.ppBasis->k1 = (long)k1;
+            char_two->p.ppBasis->k2 = (long)k2;
+            char_two->p.ppBasis->k3 = (long)k3;
+        } else {                /* field_type == NID_X9_62_onBasis */
+
+            /* for ONB the parameters are (asn1) NULL */
+            char_two->p.onBasis = ASN1_NULL_new();
+            if (char_two->p.onBasis == NULL) {
+                ECerr(EC_F_EC_ASN1_GROUP2FIELDID, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+        }
+    }
+#endif
+    else {
+        ECerr(EC_F_EC_ASN1_GROUP2FIELDID, EC_R_UNSUPPORTED_FIELD);
+        goto err;
+    }
+
+    ok = 1;
+
+ err:
+    BN_free(tmp);
+    return ok;
+}
+
+static int ec_asn1_group2curve(const EC_GROUP *group, X9_62_CURVE *curve)
+{
+    int ok = 0;
+    BIGNUM *tmp_1 = NULL, *tmp_2 = NULL;
+    unsigned char *a_buf = NULL, *b_buf = NULL;
+    size_t len;
+
+    if (!group || !curve || !curve->a || !curve->b)
+        return 0;
+
+    if ((tmp_1 = BN_new()) == NULL || (tmp_2 = BN_new()) == NULL) {
+        ECerr(EC_F_EC_ASN1_GROUP2CURVE, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    /* get a and b */
+    if (!EC_GROUP_get_curve(group, NULL, tmp_1, tmp_2, NULL)) {
+        ECerr(EC_F_EC_ASN1_GROUP2CURVE, ERR_R_EC_LIB);
+        goto err;
+    }
+
+    /*
+     * Per SEC 1, the curve coefficients must be padded up to size. See C.2's
+     * definition of Curve, C.1's definition of FieldElement, and 2.3.5's
+     * definition of how to encode the field elements.
+     */
+    len = ((size_t)EC_GROUP_get_degree(group) + 7) / 8;
+    if ((a_buf = OPENSSL_malloc(len)) == NULL
+        || (b_buf = OPENSSL_malloc(len)) == NULL) {
+        ECerr(EC_F_EC_ASN1_GROUP2CURVE, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if (BN_bn2binpad(tmp_1, a_buf, len) < 0
+        || BN_bn2binpad(tmp_2, b_buf, len) < 0) {
+        ECerr(EC_F_EC_ASN1_GROUP2CURVE, ERR_R_BN_LIB);
+        goto err;
+    }
+
+    /* set a and b */
+    if (!ASN1_OCTET_STRING_set(curve->a, a_buf, len)
+        || !ASN1_OCTET_STRING_set(curve->b, b_buf, len)) {
+        ECerr(EC_F_EC_ASN1_GROUP2CURVE, ERR_R_ASN1_LIB);
+        goto err;
+    }
+
+    /* set the seed (optional) */
+    if (group->seed) {
+        if (!curve->seed)
+            if ((curve->seed = ASN1_BIT_STRING_new()) == NULL) {
+                ECerr(EC_F_EC_ASN1_GROUP2CURVE, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+        curve->seed->flags &= ~(ASN1_STRING_FLAG_BITS_LEFT | 0x07);
+        curve->seed->flags |= ASN1_STRING_FLAG_BITS_LEFT;
+        if (!ASN1_BIT_STRING_set(curve->seed, group->seed,
+                                 (int)group->seed_len)) {
+            ECerr(EC_F_EC_ASN1_GROUP2CURVE, ERR_R_ASN1_LIB);
+            goto err;
+        }
+    } else {
+        ASN1_BIT_STRING_free(curve->seed);
+        curve->seed = NULL;
+    }
+
+    ok = 1;
+
+ err:
+    OPENSSL_free(a_buf);
+    OPENSSL_free(b_buf);
+    BN_free(tmp_1);
+    BN_free(tmp_2);
+    return ok;
+}
+
+ECPARAMETERS *EC_GROUP_get_ecparameters(const EC_GROUP *group,
+                                               ECPARAMETERS *params)
+{
+    size_t len = 0;
+    ECPARAMETERS *ret = NULL;
+    const BIGNUM *tmp;
+    unsigned char *buffer = NULL;
+    const EC_POINT *point = NULL;
+    point_conversion_form_t form;
+
+    if (params == NULL) {
+        if ((ret = ECPARAMETERS_new()) == NULL) {
+            ECerr(EC_F_EC_GROUP_GET_ECPARAMETERS, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    } else
+        ret = params;
+
+    /* set the version (always one) */
+    ret->version = (long)0x1;
+
+    /* set the fieldID */
+    if (!ec_asn1_group2fieldid(group, ret->fieldID)) {
+        ECerr(EC_F_EC_GROUP_GET_ECPARAMETERS, ERR_R_EC_LIB);
+        goto err;
+    }
+
+    /* set the curve */
+    if (!ec_asn1_group2curve(group, ret->curve)) {
+        ECerr(EC_F_EC_GROUP_GET_ECPARAMETERS, ERR_R_EC_LIB);
+        goto err;
+    }
+
+    /* set the base point */
+    if ((point = EC_GROUP_get0_generator(group)) == NULL) {
+        ECerr(EC_F_EC_GROUP_GET_ECPARAMETERS, EC_R_UNDEFINED_GENERATOR);
+        goto err;
+    }
+
+    form = EC_GROUP_get_point_conversion_form(group);
+
+    len = EC_POINT_point2buf(group, point, form, &buffer, NULL);
+    if (len == 0) {
+        ECerr(EC_F_EC_GROUP_GET_ECPARAMETERS, ERR_R_EC_LIB);
+        goto err;
+    }
+    if (ret->base == NULL && (ret->base = ASN1_OCTET_STRING_new()) == NULL) {
+        OPENSSL_free(buffer);
+        ECerr(EC_F_EC_GROUP_GET_ECPARAMETERS, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    ASN1_STRING_set0(ret->base, buffer, len);
+
+    /* set the order */
+    tmp = EC_GROUP_get0_order(group);
+    if (tmp == NULL) {
+        ECerr(EC_F_EC_GROUP_GET_ECPARAMETERS, ERR_R_EC_LIB);
+        goto err;
+    }
+    ret->order = BN_to_ASN1_INTEGER(tmp, ret->order);
+    if (ret->order == NULL) {
+        ECerr(EC_F_EC_GROUP_GET_ECPARAMETERS, ERR_R_ASN1_LIB);
+        goto err;
+    }
+
+    /* set the cofactor (optional) */
+    tmp = EC_GROUP_get0_cofactor(group);
+    if (tmp != NULL) {
+        ret->cofactor = BN_to_ASN1_INTEGER(tmp, ret->cofactor);
+        if (ret->cofactor == NULL) {
+            ECerr(EC_F_EC_GROUP_GET_ECPARAMETERS, ERR_R_ASN1_LIB);
+            goto err;
+        }
+    }
+
+    return ret;
+
+ err:
+    if (params == NULL)
+        ECPARAMETERS_free(ret);
+    return NULL;
+}
+
+ECPKPARAMETERS *EC_GROUP_get_ecpkparameters(const EC_GROUP *group,
+                                            ECPKPARAMETERS *params)
+{
+    int ok = 1, tmp;
+    ECPKPARAMETERS *ret = params;
+
+    if (ret == NULL) {
+        if ((ret = ECPKPARAMETERS_new()) == NULL) {
+            ECerr(EC_F_EC_GROUP_GET_ECPKPARAMETERS, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+    } else {
+        if (ret->type == 0)
+            ASN1_OBJECT_free(ret->value.named_curve);
+        else if (ret->type == 1 && ret->value.parameters)
+            ECPARAMETERS_free(ret->value.parameters);
+    }
+
+    if (EC_GROUP_get_asn1_flag(group)) {
+        /*
+         * use the asn1 OID to describe the elliptic curve parameters
+         */
+        tmp = EC_GROUP_get_curve_name(group);
+        if (tmp) {
+            ret->type = 0;
+            if ((ret->value.named_curve = OBJ_nid2obj(tmp)) == NULL)
+                ok = 0;
+        } else
+            /* we don't know the nid => ERROR */
+            ok = 0;
+    } else {
+        /* use the ECPARAMETERS structure */
+        ret->type = 1;
+        if ((ret->value.parameters =
+             EC_GROUP_get_ecparameters(group, NULL)) == NULL)
+            ok = 0;
+    }
+
+    if (!ok) {
+        ECPKPARAMETERS_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+EC_GROUP *EC_GROUP_new_from_ecparameters(const ECPARAMETERS *params)
+{
+    int ok = 0, tmp;
+    EC_GROUP *ret = NULL;
+    BIGNUM *p = NULL, *a = NULL, *b = NULL;
+    EC_POINT *point = NULL;
+    long field_bits;
+
+    if (!params->fieldID || !params->fieldID->fieldType ||
+        !params->fieldID->p.ptr) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, EC_R_ASN1_ERROR);
+        goto err;
+    }
+
+    /*
+     * Now extract the curve parameters a and b. Note that, although SEC 1
+     * specifies the length of their encodings, historical versions of OpenSSL
+     * encoded them incorrectly, so we must accept any length for backwards
+     * compatibility.
+     */
+    if (!params->curve || !params->curve->a ||
+        !params->curve->a->data || !params->curve->b ||
+        !params->curve->b->data) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, EC_R_ASN1_ERROR);
+        goto err;
+    }
+    a = BN_bin2bn(params->curve->a->data, params->curve->a->length, NULL);
+    if (a == NULL) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, ERR_R_BN_LIB);
+        goto err;
+    }
+    b = BN_bin2bn(params->curve->b->data, params->curve->b->length, NULL);
+    if (b == NULL) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, ERR_R_BN_LIB);
+        goto err;
+    }
+
+    /* get the field parameters */
+    tmp = OBJ_obj2nid(params->fieldID->fieldType);
+    if (tmp == NID_X9_62_characteristic_two_field)
+#ifdef OPENSSL_NO_EC2M
+    {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, EC_R_GF2M_NOT_SUPPORTED);
+        goto err;
+    }
+#else
+    {
+        X9_62_CHARACTERISTIC_TWO *char_two;
+
+        char_two = params->fieldID->p.char_two;
+
+        field_bits = char_two->m;
+        if (field_bits > OPENSSL_ECC_MAX_FIELD_BITS) {
+            ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, EC_R_FIELD_TOO_LARGE);
+            goto err;
+        }
+
+        if ((p = BN_new()) == NULL) {
+            ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+
+        /* get the base type */
+        tmp = OBJ_obj2nid(char_two->type);
+
+        if (tmp == NID_X9_62_tpBasis) {
+            long tmp_long;
+
+            if (!char_two->p.tpBasis) {
+                ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, EC_R_ASN1_ERROR);
+                goto err;
+            }
+
+            tmp_long = ASN1_INTEGER_get(char_two->p.tpBasis);
+
+            if (!(char_two->m > tmp_long && tmp_long > 0)) {
+                ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS,
+                      EC_R_INVALID_TRINOMIAL_BASIS);
+                goto err;
+            }
+
+            /* create the polynomial */
+            if (!BN_set_bit(p, (int)char_two->m))
+                goto err;
+            if (!BN_set_bit(p, (int)tmp_long))
+                goto err;
+            if (!BN_set_bit(p, 0))
+                goto err;
+        } else if (tmp == NID_X9_62_ppBasis) {
+            X9_62_PENTANOMIAL *penta;
+
+            penta = char_two->p.ppBasis;
+            if (!penta) {
+                ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, EC_R_ASN1_ERROR);
+                goto err;
+            }
+
+            if (!
+                (char_two->m > penta->k3 && penta->k3 > penta->k2
+                 && penta->k2 > penta->k1 && penta->k1 > 0)) {
+                ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS,
+                      EC_R_INVALID_PENTANOMIAL_BASIS);
+                goto err;
+            }
+
+            /* create the polynomial */
+            if (!BN_set_bit(p, (int)char_two->m))
+                goto err;
+            if (!BN_set_bit(p, (int)penta->k1))
+                goto err;
+            if (!BN_set_bit(p, (int)penta->k2))
+                goto err;
+            if (!BN_set_bit(p, (int)penta->k3))
+                goto err;
+            if (!BN_set_bit(p, 0))
+                goto err;
+        } else if (tmp == NID_X9_62_onBasis) {
+            ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, EC_R_NOT_IMPLEMENTED);
+            goto err;
+        } else {                /* error */
+
+            ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, EC_R_ASN1_ERROR);
+            goto err;
+        }
+
+        /* create the EC_GROUP structure */
+        ret = EC_GROUP_new_curve_GF2m(p, a, b, NULL);
+    }
+#endif
+    else if (tmp == NID_X9_62_prime_field) {
+        /* we have a curve over a prime field */
+        /* extract the prime number */
+        if (!params->fieldID->p.prime) {
+            ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, EC_R_ASN1_ERROR);
+            goto err;
+        }
+        p = ASN1_INTEGER_to_BN(params->fieldID->p.prime, NULL);
+        if (p == NULL) {
+            ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, ERR_R_ASN1_LIB);
+            goto err;
+        }
+
+        if (BN_is_negative(p) || BN_is_zero(p)) {
+            ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, EC_R_INVALID_FIELD);
+            goto err;
+        }
+
+        field_bits = BN_num_bits(p);
+        if (field_bits > OPENSSL_ECC_MAX_FIELD_BITS) {
+            ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, EC_R_FIELD_TOO_LARGE);
+            goto err;
+        }
+
+        /* create the EC_GROUP structure */
+        ret = EC_GROUP_new_curve_GFp(p, a, b, NULL);
+    } else {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, EC_R_INVALID_FIELD);
+        goto err;
+    }
+
+    if (ret == NULL) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, ERR_R_EC_LIB);
+        goto err;
+    }
+
+    /* extract seed (optional) */
+    if (params->curve->seed != NULL) {
+        OPENSSL_free(ret->seed);
+        if ((ret->seed = OPENSSL_malloc(params->curve->seed->length)) == NULL) {
+            ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        memcpy(ret->seed, params->curve->seed->data,
+               params->curve->seed->length);
+        ret->seed_len = params->curve->seed->length;
+    }
+
+    if (!params->order || !params->base || !params->base->data) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, EC_R_ASN1_ERROR);
+        goto err;
+    }
+
+    if ((point = EC_POINT_new(ret)) == NULL)
+        goto err;
+
+    /* set the point conversion form */
+    EC_GROUP_set_point_conversion_form(ret, (point_conversion_form_t)
+                                       (params->base->data[0] & ~0x01));
+
+    /* extract the ec point */
+    if (!EC_POINT_oct2point(ret, point, params->base->data,
+                            params->base->length, NULL)) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, ERR_R_EC_LIB);
+        goto err;
+    }
+
+    /* extract the order */
+    if ((a = ASN1_INTEGER_to_BN(params->order, a)) == NULL) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, ERR_R_ASN1_LIB);
+        goto err;
+    }
+    if (BN_is_negative(a) || BN_is_zero(a)) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, EC_R_INVALID_GROUP_ORDER);
+        goto err;
+    }
+    if (BN_num_bits(a) > (int)field_bits + 1) { /* Hasse bound */
+        ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, EC_R_INVALID_GROUP_ORDER);
+        goto err;
+    }
+
+    /* extract the cofactor (optional) */
+    if (params->cofactor == NULL) {
+        BN_free(b);
+        b = NULL;
+    } else if ((b = ASN1_INTEGER_to_BN(params->cofactor, b)) == NULL) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, ERR_R_ASN1_LIB);
+        goto err;
+    }
+    /* set the generator, order and cofactor (if present) */
+    if (!EC_GROUP_set_generator(ret, point, a, b)) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, ERR_R_EC_LIB);
+        goto err;
+    }
+
+    ok = 1;
+
+ err:
+    if (!ok) {
+        EC_GROUP_clear_free(ret);
+        ret = NULL;
+    }
+
+    BN_free(p);
+    BN_free(a);
+    BN_free(b);
+    EC_POINT_free(point);
+    return ret;
+}
+
+EC_GROUP *EC_GROUP_new_from_ecpkparameters(const ECPKPARAMETERS *params)
+{
+    EC_GROUP *ret = NULL;
+    int tmp = 0;
+
+    if (params == NULL) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_ECPKPARAMETERS, EC_R_MISSING_PARAMETERS);
+        return NULL;
+    }
+
+    if (params->type == 0) {    /* the curve is given by an OID */
+        tmp = OBJ_obj2nid(params->value.named_curve);
+        if ((ret = EC_GROUP_new_by_curve_name(tmp)) == NULL) {
+            ECerr(EC_F_EC_GROUP_NEW_FROM_ECPKPARAMETERS,
+                  EC_R_EC_GROUP_NEW_BY_NAME_FAILURE);
+            return NULL;
+        }
+        EC_GROUP_set_asn1_flag(ret, OPENSSL_EC_NAMED_CURVE);
+    } else if (params->type == 1) { /* the parameters are given by a
+                                     * ECPARAMETERS structure */
+        ret = EC_GROUP_new_from_ecparameters(params->value.parameters);
+        if (!ret) {
+            ECerr(EC_F_EC_GROUP_NEW_FROM_ECPKPARAMETERS, ERR_R_EC_LIB);
+            return NULL;
+        }
+        EC_GROUP_set_asn1_flag(ret, OPENSSL_EC_EXPLICIT_CURVE);
+    } else if (params->type == 2) { /* implicitlyCA */
+        return NULL;
+    } else {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_ECPKPARAMETERS, EC_R_ASN1_ERROR);
+        return NULL;
+    }
+
+    return ret;
+}
+
+/* EC_GROUP <-> DER encoding of ECPKPARAMETERS */
+
+EC_GROUP *d2i_ECPKParameters(EC_GROUP **a, const unsigned char **in, long len)
+{
+    EC_GROUP *group = NULL;
+    ECPKPARAMETERS *params = NULL;
+    const unsigned char *p = *in;
+
+    if ((params = d2i_ECPKPARAMETERS(NULL, &p, len)) == NULL) {
+        ECerr(EC_F_D2I_ECPKPARAMETERS, EC_R_D2I_ECPKPARAMETERS_FAILURE);
+        ECPKPARAMETERS_free(params);
+        return NULL;
+    }
+
+    if ((group = EC_GROUP_new_from_ecpkparameters(params)) == NULL) {
+        ECerr(EC_F_D2I_ECPKPARAMETERS, EC_R_PKPARAMETERS2GROUP_FAILURE);
+        ECPKPARAMETERS_free(params);
+        return NULL;
+    }
+
+    if (a) {
+        EC_GROUP_clear_free(*a);
+        *a = group;
+    }
+
+    ECPKPARAMETERS_free(params);
+    *in = p;
+    return group;
+}
+
+int i2d_ECPKParameters(const EC_GROUP *a, unsigned char **out)
+{
+    int ret = 0;
+    ECPKPARAMETERS *tmp = EC_GROUP_get_ecpkparameters(a, NULL);
+    if (tmp == NULL) {
+        ECerr(EC_F_I2D_ECPKPARAMETERS, EC_R_GROUP2PKPARAMETERS_FAILURE);
+        return 0;
+    }
+    if ((ret = i2d_ECPKPARAMETERS(tmp, out)) == 0) {
+        ECerr(EC_F_I2D_ECPKPARAMETERS, EC_R_I2D_ECPKPARAMETERS_FAILURE);
+        ECPKPARAMETERS_free(tmp);
+        return 0;
+    }
+    ECPKPARAMETERS_free(tmp);
+    return ret;
+}
+
+/* some EC_KEY functions */
+
+EC_KEY *d2i_ECPrivateKey(EC_KEY **a, const unsigned char **in, long len)
+{
+    EC_KEY *ret = NULL;
+    EC_PRIVATEKEY *priv_key = NULL;
+    const unsigned char *p = *in;
+
+    if ((priv_key = d2i_EC_PRIVATEKEY(NULL, &p, len)) == NULL) {
+        ECerr(EC_F_D2I_ECPRIVATEKEY, ERR_R_EC_LIB);
+        return NULL;
+    }
+
+    if (a == NULL || *a == NULL) {
+        if ((ret = EC_KEY_new()) == NULL) {
+            ECerr(EC_F_D2I_ECPRIVATEKEY, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    } else
+        ret = *a;
+
+    if (priv_key->parameters) {
+        EC_GROUP_clear_free(ret->group);
+        ret->group = EC_GROUP_new_from_ecpkparameters(priv_key->parameters);
+    }
+
+    if (ret->group == NULL) {
+        ECerr(EC_F_D2I_ECPRIVATEKEY, ERR_R_EC_LIB);
+        goto err;
+    }
+
+    ret->version = priv_key->version;
+
+    if (priv_key->privateKey) {
+        ASN1_OCTET_STRING *pkey = priv_key->privateKey;
+        if (EC_KEY_oct2priv(ret, ASN1_STRING_get0_data(pkey),
+                            ASN1_STRING_length(pkey)) == 0)
+            goto err;
+    } else {
+        ECerr(EC_F_D2I_ECPRIVATEKEY, EC_R_MISSING_PRIVATE_KEY);
+        goto err;
+    }
+
+    EC_POINT_clear_free(ret->pub_key);
+    ret->pub_key = EC_POINT_new(ret->group);
+    if (ret->pub_key == NULL) {
+        ECerr(EC_F_D2I_ECPRIVATEKEY, ERR_R_EC_LIB);
+        goto err;
+    }
+
+    if (priv_key->publicKey) {
+        const unsigned char *pub_oct;
+        int pub_oct_len;
+
+        pub_oct = ASN1_STRING_get0_data(priv_key->publicKey);
+        pub_oct_len = ASN1_STRING_length(priv_key->publicKey);
+        if (!EC_KEY_oct2key(ret, pub_oct, pub_oct_len, NULL)) {
+            ECerr(EC_F_D2I_ECPRIVATEKEY, ERR_R_EC_LIB);
+            goto err;
+        }
+    } else {
+        if (ret->group->meth->keygenpub == NULL
+            || ret->group->meth->keygenpub(ret) == 0)
+                goto err;
+        /* Remember the original private-key-only encoding. */
+        ret->enc_flag |= EC_PKEY_NO_PUBKEY;
+    }
+
+    if (a)
+        *a = ret;
+    EC_PRIVATEKEY_free(priv_key);
+    *in = p;
+    return ret;
+
+ err:
+    if (a == NULL || *a != ret)
+        EC_KEY_free(ret);
+    EC_PRIVATEKEY_free(priv_key);
+    return NULL;
+}
+
+int i2d_ECPrivateKey(EC_KEY *a, unsigned char **out)
+{
+    int ret = 0, ok = 0;
+    unsigned char *priv= NULL, *pub= NULL;
+    size_t privlen = 0, publen = 0;
+
+    EC_PRIVATEKEY *priv_key = NULL;
+
+    if (a == NULL || a->group == NULL ||
+        (!(a->enc_flag & EC_PKEY_NO_PUBKEY) && a->pub_key == NULL)) {
+        ECerr(EC_F_I2D_ECPRIVATEKEY, ERR_R_PASSED_NULL_PARAMETER);
+        goto err;
+    }
+
+    if ((priv_key = EC_PRIVATEKEY_new()) == NULL) {
+        ECerr(EC_F_I2D_ECPRIVATEKEY, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    priv_key->version = a->version;
+
+    privlen = EC_KEY_priv2buf(a, &priv);
+
+    if (privlen == 0) {
+        ECerr(EC_F_I2D_ECPRIVATEKEY, ERR_R_EC_LIB);
+        goto err;
+    }
+
+    ASN1_STRING_set0(priv_key->privateKey, priv, privlen);
+    priv = NULL;
+
+    if (!(a->enc_flag & EC_PKEY_NO_PARAMETERS)) {
+        if ((priv_key->parameters =
+             EC_GROUP_get_ecpkparameters(a->group,
+                                        priv_key->parameters)) == NULL) {
+            ECerr(EC_F_I2D_ECPRIVATEKEY, ERR_R_EC_LIB);
+            goto err;
+        }
+    }
+
+    if (!(a->enc_flag & EC_PKEY_NO_PUBKEY)) {
+        priv_key->publicKey = ASN1_BIT_STRING_new();
+        if (priv_key->publicKey == NULL) {
+            ECerr(EC_F_I2D_ECPRIVATEKEY, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+
+        publen = EC_KEY_key2buf(a, a->conv_form, &pub, NULL);
+
+        if (publen == 0) {
+            ECerr(EC_F_I2D_ECPRIVATEKEY, ERR_R_EC_LIB);
+            goto err;
+        }
+
+        priv_key->publicKey->flags &= ~(ASN1_STRING_FLAG_BITS_LEFT | 0x07);
+        priv_key->publicKey->flags |= ASN1_STRING_FLAG_BITS_LEFT;
+        ASN1_STRING_set0(priv_key->publicKey, pub, publen);
+        pub = NULL;
+    }
+
+    if ((ret = i2d_EC_PRIVATEKEY(priv_key, out)) == 0) {
+        ECerr(EC_F_I2D_ECPRIVATEKEY, ERR_R_EC_LIB);
+        goto err;
+    }
+    ok = 1;
+ err:
+    OPENSSL_clear_free(priv, privlen);
+    OPENSSL_free(pub);
+    EC_PRIVATEKEY_free(priv_key);
+    return (ok ? ret : 0);
+}
+
+int i2d_ECParameters(EC_KEY *a, unsigned char **out)
+{
+    if (a == NULL) {
+        ECerr(EC_F_I2D_ECPARAMETERS, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    return i2d_ECPKParameters(a->group, out);
+}
+
+EC_KEY *d2i_ECParameters(EC_KEY **a, const unsigned char **in, long len)
+{
+    EC_KEY *ret;
+
+    if (in == NULL || *in == NULL) {
+        ECerr(EC_F_D2I_ECPARAMETERS, ERR_R_PASSED_NULL_PARAMETER);
+        return NULL;
+    }
+
+    if (a == NULL || *a == NULL) {
+        if ((ret = EC_KEY_new()) == NULL) {
+            ECerr(EC_F_D2I_ECPARAMETERS, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+    } else
+        ret = *a;
+
+    if (!d2i_ECPKParameters(&ret->group, in, len)) {
+        ECerr(EC_F_D2I_ECPARAMETERS, ERR_R_EC_LIB);
+        if (a == NULL || *a != ret)
+             EC_KEY_free(ret);
+        return NULL;
+    }
+
+    if (a)
+        *a = ret;
+
+    return ret;
+}
+
+EC_KEY *o2i_ECPublicKey(EC_KEY **a, const unsigned char **in, long len)
+{
+    EC_KEY *ret = NULL;
+
+    if (a == NULL || (*a) == NULL || (*a)->group == NULL) {
+        /*
+         * sorry, but a EC_GROUP-structure is necessary to set the public key
+         */
+        ECerr(EC_F_O2I_ECPUBLICKEY, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    ret = *a;
+    if (!EC_KEY_oct2key(ret, *in, len, NULL)) {
+        ECerr(EC_F_O2I_ECPUBLICKEY, ERR_R_EC_LIB);
+        return 0;
+    }
+    *in += len;
+    return ret;
+}
+
+int i2o_ECPublicKey(const EC_KEY *a, unsigned char **out)
+{
+    size_t buf_len = 0;
+    int new_buffer = 0;
+
+    if (a == NULL) {
+        ECerr(EC_F_I2O_ECPUBLICKEY, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+
+    buf_len = EC_POINT_point2oct(a->group, a->pub_key,
+                                 a->conv_form, NULL, 0, NULL);
+
+    if (out == NULL || buf_len == 0)
+        /* out == NULL => just return the length of the octet string */
+        return buf_len;
+
+    if (*out == NULL) {
+        if ((*out = OPENSSL_malloc(buf_len)) == NULL) {
+            ECerr(EC_F_I2O_ECPUBLICKEY, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        new_buffer = 1;
+    }
+    if (!EC_POINT_point2oct(a->group, a->pub_key, a->conv_form,
+                            *out, buf_len, NULL)) {
+        ECerr(EC_F_I2O_ECPUBLICKEY, ERR_R_EC_LIB);
+        if (new_buffer) {
+            OPENSSL_free(*out);
+            *out = NULL;
+        }
+        return 0;
+    }
+    if (!new_buffer)
+        *out += buf_len;
+    return buf_len;
+}
+
+ASN1_SEQUENCE(ECDSA_SIG) = {
+        ASN1_SIMPLE(ECDSA_SIG, r, CBIGNUM),
+        ASN1_SIMPLE(ECDSA_SIG, s, CBIGNUM)
+} static_ASN1_SEQUENCE_END(ECDSA_SIG)
+
+DECLARE_ASN1_FUNCTIONS_const(ECDSA_SIG)
+DECLARE_ASN1_ENCODE_FUNCTIONS_const(ECDSA_SIG, ECDSA_SIG)
+IMPLEMENT_ASN1_ENCODE_FUNCTIONS_const_fname(ECDSA_SIG, ECDSA_SIG, ECDSA_SIG)
+
+ECDSA_SIG *ECDSA_SIG_new(void)
+{
+    ECDSA_SIG *sig = OPENSSL_zalloc(sizeof(*sig));
+    if (sig == NULL)
+        ECerr(EC_F_ECDSA_SIG_NEW, ERR_R_MALLOC_FAILURE);
+    return sig;
+}
+
+void ECDSA_SIG_free(ECDSA_SIG *sig)
+{
+    if (sig == NULL)
+        return;
+    BN_clear_free(sig->r);
+    BN_clear_free(sig->s);
+    OPENSSL_free(sig);
+}
+
+void ECDSA_SIG_get0(const ECDSA_SIG *sig, const BIGNUM **pr, const BIGNUM **ps)
+{
+    if (pr != NULL)
+        *pr = sig->r;
+    if (ps != NULL)
+        *ps = sig->s;
+}
+
+const BIGNUM *ECDSA_SIG_get0_r(const ECDSA_SIG *sig)
+{
+    return sig->r;
+}
+
+const BIGNUM *ECDSA_SIG_get0_s(const ECDSA_SIG *sig)
+{
+    return sig->s;
+}
+
+int ECDSA_SIG_set0(ECDSA_SIG *sig, BIGNUM *r, BIGNUM *s)
+{
+    if (r == NULL || s == NULL)
+        return 0;
+    BN_clear_free(sig->r);
+    BN_clear_free(sig->s);
+    sig->r = r;
+    sig->s = s;
+    return 1;
+}
+
+int ECDSA_size(const EC_KEY *r)
+{
+    int ret, i;
+    ASN1_INTEGER bs;
+    unsigned char buf[4];
+    const EC_GROUP *group;
+
+    if (r == NULL)
+        return 0;
+    group = EC_KEY_get0_group(r);
+    if (group == NULL)
+        return 0;
+
+    i = EC_GROUP_order_bits(group);
+    if (i == 0)
+        return 0;
+    bs.length = (i + 7) / 8;
+    bs.data = buf;
+    bs.type = V_ASN1_INTEGER;
+    /* If the top bit is set the asn1 encoding is 1 larger. */
+    buf[0] = 0xff;
+
+    i = i2d_ASN1_INTEGER(&bs, NULL);
+    i += i;                     /* r and s */
+    ret = ASN1_object_size(1, i, V_ASN1_SEQUENCE);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_check.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_check.c
new file mode 100644
index 000000000..eeb06ec1c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_check.c
@@ -0,0 +1,72 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "ec_lcl.h"
+#include <openssl/err.h>
+
+int EC_GROUP_check(const EC_GROUP *group, BN_CTX *ctx)
+{
+    int ret = 0;
+    const BIGNUM *order;
+    BN_CTX *new_ctx = NULL;
+    EC_POINT *point = NULL;
+
+    /* Custom curves assumed to be correct */
+    if ((group->meth->flags & EC_FLAGS_CUSTOM_CURVE) != 0)
+        return 1;
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL) {
+            ECerr(EC_F_EC_GROUP_CHECK, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+
+    /* check the discriminant */
+    if (!EC_GROUP_check_discriminant(group, ctx)) {
+        ECerr(EC_F_EC_GROUP_CHECK, EC_R_DISCRIMINANT_IS_ZERO);
+        goto err;
+    }
+
+    /* check the generator */
+    if (group->generator == NULL) {
+        ECerr(EC_F_EC_GROUP_CHECK, EC_R_UNDEFINED_GENERATOR);
+        goto err;
+    }
+    if (EC_POINT_is_on_curve(group, group->generator, ctx) <= 0) {
+        ECerr(EC_F_EC_GROUP_CHECK, EC_R_POINT_IS_NOT_ON_CURVE);
+        goto err;
+    }
+
+    /* check the order of the generator */
+    if ((point = EC_POINT_new(group)) == NULL)
+        goto err;
+    order = EC_GROUP_get0_order(group);
+    if (order == NULL)
+        goto err;
+    if (BN_is_zero(order)) {
+        ECerr(EC_F_EC_GROUP_CHECK, EC_R_UNDEFINED_ORDER);
+        goto err;
+    }
+
+    if (!EC_POINT_mul(group, point, order, NULL, NULL, ctx))
+        goto err;
+    if (!EC_POINT_is_at_infinity(group, point)) {
+        ECerr(EC_F_EC_GROUP_CHECK, EC_R_INVALID_GROUP_ORDER);
+        goto err;
+    }
+
+    ret = 1;
+
+ err:
+    BN_CTX_free(new_ctx);
+    EC_POINT_free(point);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_curve.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_curve.c
new file mode 100644
index 000000000..bb1ce196d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_curve.c
@@ -0,0 +1,3199 @@
+/*
+ * Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include "ec_lcl.h"
+#include <openssl/err.h>
+#include <openssl/obj_mac.h>
+#include <openssl/opensslconf.h>
+#include "internal/nelem.h"
+
+typedef struct {
+    int field_type,             /* either NID_X9_62_prime_field or
+                                 * NID_X9_62_characteristic_two_field */
+     seed_len, param_len;
+    unsigned int cofactor;      /* promoted to BN_ULONG */
+} EC_CURVE_DATA;
+
+/* the nist prime curves */
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 24 * 6];
+} _EC_NIST_PRIME_192 = {
+    {
+        NID_X9_62_prime_field, 20, 24, 1
+    },
+    {
+        /* seed */
+        0x30, 0x45, 0xAE, 0x6F, 0xC8, 0x42, 0x2F, 0x64, 0xED, 0x57, 0x95, 0x28,
+        0xD3, 0x81, 0x20, 0xEA, 0xE1, 0x21, 0x96, 0xD5,
+        /* p */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        /* a */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFC,
+        /* b */
+        0x64, 0x21, 0x05, 0x19, 0xE5, 0x9C, 0x80, 0xE7, 0x0F, 0xA7, 0xE9, 0xAB,
+        0x72, 0x24, 0x30, 0x49, 0xFE, 0xB8, 0xDE, 0xEC, 0xC1, 0x46, 0xB9, 0xB1,
+        /* x */
+        0x18, 0x8D, 0xA8, 0x0E, 0xB0, 0x30, 0x90, 0xF6, 0x7C, 0xBF, 0x20, 0xEB,
+        0x43, 0xA1, 0x88, 0x00, 0xF4, 0xFF, 0x0A, 0xFD, 0x82, 0xFF, 0x10, 0x12,
+        /* y */
+        0x07, 0x19, 0x2b, 0x95, 0xff, 0xc8, 0xda, 0x78, 0x63, 0x10, 0x11, 0xed,
+        0x6b, 0x24, 0xcd, 0xd5, 0x73, 0xf9, 0x77, 0xa1, 0x1e, 0x79, 0x48, 0x11,
+        /* order */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0x99, 0xDE, 0xF8, 0x36, 0x14, 0x6B, 0xC9, 0xB1, 0xB4, 0xD2, 0x28, 0x31
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 28 * 6];
+} _EC_NIST_PRIME_224 = {
+    {
+        NID_X9_62_prime_field, 20, 28, 1
+    },
+    {
+        /* seed */
+        0xBD, 0x71, 0x34, 0x47, 0x99, 0xD5, 0xC7, 0xFC, 0xDC, 0x45, 0xB5, 0x9F,
+        0xA3, 0xB9, 0xAB, 0x8F, 0x6A, 0x94, 0x8B, 0xC5,
+        /* p */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x01,
+        /* a */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFE,
+        /* b */
+        0xB4, 0x05, 0x0A, 0x85, 0x0C, 0x04, 0xB3, 0xAB, 0xF5, 0x41, 0x32, 0x56,
+        0x50, 0x44, 0xB0, 0xB7, 0xD7, 0xBF, 0xD8, 0xBA, 0x27, 0x0B, 0x39, 0x43,
+        0x23, 0x55, 0xFF, 0xB4,
+        /* x */
+        0xB7, 0x0E, 0x0C, 0xBD, 0x6B, 0xB4, 0xBF, 0x7F, 0x32, 0x13, 0x90, 0xB9,
+        0x4A, 0x03, 0xC1, 0xD3, 0x56, 0xC2, 0x11, 0x22, 0x34, 0x32, 0x80, 0xD6,
+        0x11, 0x5C, 0x1D, 0x21,
+        /* y */
+        0xbd, 0x37, 0x63, 0x88, 0xb5, 0xf7, 0x23, 0xfb, 0x4c, 0x22, 0xdf, 0xe6,
+        0xcd, 0x43, 0x75, 0xa0, 0x5a, 0x07, 0x47, 0x64, 0x44, 0xd5, 0x81, 0x99,
+        0x85, 0x00, 0x7e, 0x34,
+        /* order */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0x16, 0xA2, 0xE0, 0xB8, 0xF0, 0x3E, 0x13, 0xDD, 0x29, 0x45,
+        0x5C, 0x5C, 0x2A, 0x3D
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 48 * 6];
+} _EC_NIST_PRIME_384 = {
+    {
+        NID_X9_62_prime_field, 20, 48, 1
+    },
+    {
+        /* seed */
+        0xA3, 0x35, 0x92, 0x6A, 0xA3, 0x19, 0xA2, 0x7A, 0x1D, 0x00, 0x89, 0x6A,
+        0x67, 0x73, 0xA4, 0x82, 0x7A, 0xCD, 0xAC, 0x73,
+        /* p */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xFF, 0xFF,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xFF, 0xFF, 0xFF, 0xFF,
+        /* a */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xFF, 0xFF,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xFF, 0xFF, 0xFF, 0xFC,
+        /* b */
+        0xB3, 0x31, 0x2F, 0xA7, 0xE2, 0x3E, 0xE7, 0xE4, 0x98, 0x8E, 0x05, 0x6B,
+        0xE3, 0xF8, 0x2D, 0x19, 0x18, 0x1D, 0x9C, 0x6E, 0xFE, 0x81, 0x41, 0x12,
+        0x03, 0x14, 0x08, 0x8F, 0x50, 0x13, 0x87, 0x5A, 0xC6, 0x56, 0x39, 0x8D,
+        0x8A, 0x2E, 0xD1, 0x9D, 0x2A, 0x85, 0xC8, 0xED, 0xD3, 0xEC, 0x2A, 0xEF,
+        /* x */
+        0xAA, 0x87, 0xCA, 0x22, 0xBE, 0x8B, 0x05, 0x37, 0x8E, 0xB1, 0xC7, 0x1E,
+        0xF3, 0x20, 0xAD, 0x74, 0x6E, 0x1D, 0x3B, 0x62, 0x8B, 0xA7, 0x9B, 0x98,
+        0x59, 0xF7, 0x41, 0xE0, 0x82, 0x54, 0x2A, 0x38, 0x55, 0x02, 0xF2, 0x5D,
+        0xBF, 0x55, 0x29, 0x6C, 0x3A, 0x54, 0x5E, 0x38, 0x72, 0x76, 0x0A, 0xB7,
+        /* y */
+        0x36, 0x17, 0xde, 0x4a, 0x96, 0x26, 0x2c, 0x6f, 0x5d, 0x9e, 0x98, 0xbf,
+        0x92, 0x92, 0xdc, 0x29, 0xf8, 0xf4, 0x1d, 0xbd, 0x28, 0x9a, 0x14, 0x7c,
+        0xe9, 0xda, 0x31, 0x13, 0xb5, 0xf0, 0xb8, 0xc0, 0x0a, 0x60, 0xb1, 0xce,
+        0x1d, 0x7e, 0x81, 0x9d, 0x7a, 0x43, 0x1d, 0x7c, 0x90, 0xea, 0x0e, 0x5f,
+        /* order */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xC7, 0x63, 0x4D, 0x81, 0xF4, 0x37, 0x2D, 0xDF, 0x58, 0x1A, 0x0D, 0xB2,
+        0x48, 0xB0, 0xA7, 0x7A, 0xEC, 0xEC, 0x19, 0x6A, 0xCC, 0xC5, 0x29, 0x73
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 66 * 6];
+} _EC_NIST_PRIME_521 = {
+    {
+        NID_X9_62_prime_field, 20, 66, 1
+    },
+    {
+        /* seed */
+        0xD0, 0x9E, 0x88, 0x00, 0x29, 0x1C, 0xB8, 0x53, 0x96, 0xCC, 0x67, 0x17,
+        0x39, 0x32, 0x84, 0xAA, 0xA0, 0xDA, 0x64, 0xBA,
+        /* p */
+        0x01, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        /* a */
+        0x01, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFC,
+        /* b */
+        0x00, 0x51, 0x95, 0x3E, 0xB9, 0x61, 0x8E, 0x1C, 0x9A, 0x1F, 0x92, 0x9A,
+        0x21, 0xA0, 0xB6, 0x85, 0x40, 0xEE, 0xA2, 0xDA, 0x72, 0x5B, 0x99, 0xB3,
+        0x15, 0xF3, 0xB8, 0xB4, 0x89, 0x91, 0x8E, 0xF1, 0x09, 0xE1, 0x56, 0x19,
+        0x39, 0x51, 0xEC, 0x7E, 0x93, 0x7B, 0x16, 0x52, 0xC0, 0xBD, 0x3B, 0xB1,
+        0xBF, 0x07, 0x35, 0x73, 0xDF, 0x88, 0x3D, 0x2C, 0x34, 0xF1, 0xEF, 0x45,
+        0x1F, 0xD4, 0x6B, 0x50, 0x3F, 0x00,
+        /* x */
+        0x00, 0xC6, 0x85, 0x8E, 0x06, 0xB7, 0x04, 0x04, 0xE9, 0xCD, 0x9E, 0x3E,
+        0xCB, 0x66, 0x23, 0x95, 0xB4, 0x42, 0x9C, 0x64, 0x81, 0x39, 0x05, 0x3F,
+        0xB5, 0x21, 0xF8, 0x28, 0xAF, 0x60, 0x6B, 0x4D, 0x3D, 0xBA, 0xA1, 0x4B,
+        0x5E, 0x77, 0xEF, 0xE7, 0x59, 0x28, 0xFE, 0x1D, 0xC1, 0x27, 0xA2, 0xFF,
+        0xA8, 0xDE, 0x33, 0x48, 0xB3, 0xC1, 0x85, 0x6A, 0x42, 0x9B, 0xF9, 0x7E,
+        0x7E, 0x31, 0xC2, 0xE5, 0xBD, 0x66,
+        /* y */
+        0x01, 0x18, 0x39, 0x29, 0x6a, 0x78, 0x9a, 0x3b, 0xc0, 0x04, 0x5c, 0x8a,
+        0x5f, 0xb4, 0x2c, 0x7d, 0x1b, 0xd9, 0x98, 0xf5, 0x44, 0x49, 0x57, 0x9b,
+        0x44, 0x68, 0x17, 0xaf, 0xbd, 0x17, 0x27, 0x3e, 0x66, 0x2c, 0x97, 0xee,
+        0x72, 0x99, 0x5e, 0xf4, 0x26, 0x40, 0xc5, 0x50, 0xb9, 0x01, 0x3f, 0xad,
+        0x07, 0x61, 0x35, 0x3c, 0x70, 0x86, 0xa2, 0x72, 0xc2, 0x40, 0x88, 0xbe,
+        0x94, 0x76, 0x9f, 0xd1, 0x66, 0x50,
+        /* order */
+        0x01, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFA, 0x51, 0x86,
+        0x87, 0x83, 0xBF, 0x2F, 0x96, 0x6B, 0x7F, 0xCC, 0x01, 0x48, 0xF7, 0x09,
+        0xA5, 0xD0, 0x3B, 0xB5, 0xC9, 0xB8, 0x89, 0x9C, 0x47, 0xAE, 0xBB, 0x6F,
+        0xB7, 0x1E, 0x91, 0x38, 0x64, 0x09
+    }
+};
+
+/* the x9.62 prime curves (minus the nist prime curves) */
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 24 * 6];
+} _EC_X9_62_PRIME_192V2 = {
+    {
+        NID_X9_62_prime_field, 20, 24, 1
+    },
+    {
+        /* seed */
+        0x31, 0xA9, 0x2E, 0xE2, 0x02, 0x9F, 0xD1, 0x0D, 0x90, 0x1B, 0x11, 0x3E,
+        0x99, 0x07, 0x10, 0xF0, 0xD2, 0x1A, 0xC6, 0xB6,
+        /* p */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        /* a */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFC,
+        /* b */
+        0xCC, 0x22, 0xD6, 0xDF, 0xB9, 0x5C, 0x6B, 0x25, 0xE4, 0x9C, 0x0D, 0x63,
+        0x64, 0xA4, 0xE5, 0x98, 0x0C, 0x39, 0x3A, 0xA2, 0x16, 0x68, 0xD9, 0x53,
+        /* x */
+        0xEE, 0xA2, 0xBA, 0xE7, 0xE1, 0x49, 0x78, 0x42, 0xF2, 0xDE, 0x77, 0x69,
+        0xCF, 0xE9, 0xC9, 0x89, 0xC0, 0x72, 0xAD, 0x69, 0x6F, 0x48, 0x03, 0x4A,
+        /* y */
+        0x65, 0x74, 0xd1, 0x1d, 0x69, 0xb6, 0xec, 0x7a, 0x67, 0x2b, 0xb8, 0x2a,
+        0x08, 0x3d, 0xf2, 0xf2, 0xb0, 0x84, 0x7d, 0xe9, 0x70, 0xb2, 0xde, 0x15,
+        /* order */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFE,
+        0x5F, 0xB1, 0xA7, 0x24, 0xDC, 0x80, 0x41, 0x86, 0x48, 0xD8, 0xDD, 0x31
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 24 * 6];
+} _EC_X9_62_PRIME_192V3 = {
+    {
+        NID_X9_62_prime_field, 20, 24, 1
+    },
+    {
+        /* seed */
+        0xC4, 0x69, 0x68, 0x44, 0x35, 0xDE, 0xB3, 0x78, 0xC4, 0xB6, 0x5C, 0xA9,
+        0x59, 0x1E, 0x2A, 0x57, 0x63, 0x05, 0x9A, 0x2E,
+        /* p */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        /* a */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFC,
+        /* b */
+        0x22, 0x12, 0x3D, 0xC2, 0x39, 0x5A, 0x05, 0xCA, 0xA7, 0x42, 0x3D, 0xAE,
+        0xCC, 0xC9, 0x47, 0x60, 0xA7, 0xD4, 0x62, 0x25, 0x6B, 0xD5, 0x69, 0x16,
+        /* x */
+        0x7D, 0x29, 0x77, 0x81, 0x00, 0xC6, 0x5A, 0x1D, 0xA1, 0x78, 0x37, 0x16,
+        0x58, 0x8D, 0xCE, 0x2B, 0x8B, 0x4A, 0xEE, 0x8E, 0x22, 0x8F, 0x18, 0x96,
+        /* y */
+        0x38, 0xa9, 0x0f, 0x22, 0x63, 0x73, 0x37, 0x33, 0x4b, 0x49, 0xdc, 0xb6,
+        0x6a, 0x6d, 0xc8, 0xf9, 0x97, 0x8a, 0xca, 0x76, 0x48, 0xa9, 0x43, 0xb0,
+        /* order */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0x7A, 0x62, 0xD0, 0x31, 0xC8, 0x3F, 0x42, 0x94, 0xF6, 0x40, 0xEC, 0x13
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 30 * 6];
+} _EC_X9_62_PRIME_239V1 = {
+    {
+        NID_X9_62_prime_field, 20, 30, 1
+    },
+    {
+        /* seed */
+        0xE4, 0x3B, 0xB4, 0x60, 0xF0, 0xB8, 0x0C, 0xC0, 0xC0, 0xB0, 0x75, 0x79,
+        0x8E, 0x94, 0x80, 0x60, 0xF8, 0x32, 0x1B, 0x7D,
+        /* p */
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0x80, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        /* a */
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0x80, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFC,
+        /* b */
+        0x6B, 0x01, 0x6C, 0x3B, 0xDC, 0xF1, 0x89, 0x41, 0xD0, 0xD6, 0x54, 0x92,
+        0x14, 0x75, 0xCA, 0x71, 0xA9, 0xDB, 0x2F, 0xB2, 0x7D, 0x1D, 0x37, 0x79,
+        0x61, 0x85, 0xC2, 0x94, 0x2C, 0x0A,
+        /* x */
+        0x0F, 0xFA, 0x96, 0x3C, 0xDC, 0xA8, 0x81, 0x6C, 0xCC, 0x33, 0xB8, 0x64,
+        0x2B, 0xED, 0xF9, 0x05, 0xC3, 0xD3, 0x58, 0x57, 0x3D, 0x3F, 0x27, 0xFB,
+        0xBD, 0x3B, 0x3C, 0xB9, 0xAA, 0xAF,
+        /* y */
+        0x7d, 0xeb, 0xe8, 0xe4, 0xe9, 0x0a, 0x5d, 0xae, 0x6e, 0x40, 0x54, 0xca,
+        0x53, 0x0b, 0xa0, 0x46, 0x54, 0xb3, 0x68, 0x18, 0xce, 0x22, 0x6b, 0x39,
+        0xfc, 0xcb, 0x7b, 0x02, 0xf1, 0xae,
+        /* order */
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0x7F, 0xFF, 0xFF, 0x9E, 0x5E, 0x9A, 0x9F, 0x5D, 0x90, 0x71, 0xFB, 0xD1,
+        0x52, 0x26, 0x88, 0x90, 0x9D, 0x0B
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 30 * 6];
+} _EC_X9_62_PRIME_239V2 = {
+    {
+        NID_X9_62_prime_field, 20, 30, 1
+    },
+    {
+        /* seed */
+        0xE8, 0xB4, 0x01, 0x16, 0x04, 0x09, 0x53, 0x03, 0xCA, 0x3B, 0x80, 0x99,
+        0x98, 0x2B, 0xE0, 0x9F, 0xCB, 0x9A, 0xE6, 0x16,
+        /* p */
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0x80, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        /* a */
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0x80, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFC,
+        /* b */
+        0x61, 0x7F, 0xAB, 0x68, 0x32, 0x57, 0x6C, 0xBB, 0xFE, 0xD5, 0x0D, 0x99,
+        0xF0, 0x24, 0x9C, 0x3F, 0xEE, 0x58, 0xB9, 0x4B, 0xA0, 0x03, 0x8C, 0x7A,
+        0xE8, 0x4C, 0x8C, 0x83, 0x2F, 0x2C,
+        /* x */
+        0x38, 0xAF, 0x09, 0xD9, 0x87, 0x27, 0x70, 0x51, 0x20, 0xC9, 0x21, 0xBB,
+        0x5E, 0x9E, 0x26, 0x29, 0x6A, 0x3C, 0xDC, 0xF2, 0xF3, 0x57, 0x57, 0xA0,
+        0xEA, 0xFD, 0x87, 0xB8, 0x30, 0xE7,
+        /* y */
+        0x5b, 0x01, 0x25, 0xe4, 0xdb, 0xea, 0x0e, 0xc7, 0x20, 0x6d, 0xa0, 0xfc,
+        0x01, 0xd9, 0xb0, 0x81, 0x32, 0x9f, 0xb5, 0x55, 0xde, 0x6e, 0xf4, 0x60,
+        0x23, 0x7d, 0xff, 0x8b, 0xe4, 0xba,
+        /* order */
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0x80, 0x00, 0x00, 0xCF, 0xA7, 0xE8, 0x59, 0x43, 0x77, 0xD4, 0x14, 0xC0,
+        0x38, 0x21, 0xBC, 0x58, 0x20, 0x63
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 30 * 6];
+} _EC_X9_62_PRIME_239V3 = {
+    {
+        NID_X9_62_prime_field, 20, 30, 1
+    },
+    {
+        /* seed */
+        0x7D, 0x73, 0x74, 0x16, 0x8F, 0xFE, 0x34, 0x71, 0xB6, 0x0A, 0x85, 0x76,
+        0x86, 0xA1, 0x94, 0x75, 0xD3, 0xBF, 0xA2, 0xFF,
+        /* p */
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0x80, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        /* a */
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0x80, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFC,
+        /* b */
+        0x25, 0x57, 0x05, 0xFA, 0x2A, 0x30, 0x66, 0x54, 0xB1, 0xF4, 0xCB, 0x03,
+        0xD6, 0xA7, 0x50, 0xA3, 0x0C, 0x25, 0x01, 0x02, 0xD4, 0x98, 0x87, 0x17,
+        0xD9, 0xBA, 0x15, 0xAB, 0x6D, 0x3E,
+        /* x */
+        0x67, 0x68, 0xAE, 0x8E, 0x18, 0xBB, 0x92, 0xCF, 0xCF, 0x00, 0x5C, 0x94,
+        0x9A, 0xA2, 0xC6, 0xD9, 0x48, 0x53, 0xD0, 0xE6, 0x60, 0xBB, 0xF8, 0x54,
+        0xB1, 0xC9, 0x50, 0x5F, 0xE9, 0x5A,
+        /* y */
+        0x16, 0x07, 0xe6, 0x89, 0x8f, 0x39, 0x0c, 0x06, 0xbc, 0x1d, 0x55, 0x2b,
+        0xad, 0x22, 0x6f, 0x3b, 0x6f, 0xcf, 0xe4, 0x8b, 0x6e, 0x81, 0x84, 0x99,
+        0xaf, 0x18, 0xe3, 0xed, 0x6c, 0xf3,
+        /* order */
+        0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0x7F, 0xFF, 0xFF, 0x97, 0x5D, 0xEB, 0x41, 0xB3, 0xA6, 0x05, 0x7C, 0x3C,
+        0x43, 0x21, 0x46, 0x52, 0x65, 0x51
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 32 * 6];
+} _EC_X9_62_PRIME_256V1 = {
+    {
+        NID_X9_62_prime_field, 20, 32, 1
+    },
+    {
+        /* seed */
+        0xC4, 0x9D, 0x36, 0x08, 0x86, 0xE7, 0x04, 0x93, 0x6A, 0x66, 0x78, 0xE1,
+        0x13, 0x9D, 0x26, 0xB7, 0x81, 0x9F, 0x7E, 0x90,
+        /* p */
+        0xFF, 0xFF, 0xFF, 0xFF, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        /* a */
+        0xFF, 0xFF, 0xFF, 0xFF, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFC,
+        /* b */
+        0x5A, 0xC6, 0x35, 0xD8, 0xAA, 0x3A, 0x93, 0xE7, 0xB3, 0xEB, 0xBD, 0x55,
+        0x76, 0x98, 0x86, 0xBC, 0x65, 0x1D, 0x06, 0xB0, 0xCC, 0x53, 0xB0, 0xF6,
+        0x3B, 0xCE, 0x3C, 0x3E, 0x27, 0xD2, 0x60, 0x4B,
+        /* x */
+        0x6B, 0x17, 0xD1, 0xF2, 0xE1, 0x2C, 0x42, 0x47, 0xF8, 0xBC, 0xE6, 0xE5,
+        0x63, 0xA4, 0x40, 0xF2, 0x77, 0x03, 0x7D, 0x81, 0x2D, 0xEB, 0x33, 0xA0,
+        0xF4, 0xA1, 0x39, 0x45, 0xD8, 0x98, 0xC2, 0x96,
+        /* y */
+        0x4f, 0xe3, 0x42, 0xe2, 0xfe, 0x1a, 0x7f, 0x9b, 0x8e, 0xe7, 0xeb, 0x4a,
+        0x7c, 0x0f, 0x9e, 0x16, 0x2b, 0xce, 0x33, 0x57, 0x6b, 0x31, 0x5e, 0xce,
+        0xcb, 0xb6, 0x40, 0x68, 0x37, 0xbf, 0x51, 0xf5,
+        /* order */
+        0xFF, 0xFF, 0xFF, 0xFF, 0x00, 0x00, 0x00, 0x00, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xBC, 0xE6, 0xFA, 0xAD, 0xA7, 0x17, 0x9E, 0x84,
+        0xF3, 0xB9, 0xCA, 0xC2, 0xFC, 0x63, 0x25, 0x51
+    }
+};
+
+/* the secg prime curves (minus the nist and x9.62 prime curves) */
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 14 * 6];
+} _EC_SECG_PRIME_112R1 = {
+    {
+        NID_X9_62_prime_field, 20, 14, 1
+    },
+    {
+        /* seed */
+        0x00, 0xF5, 0x0B, 0x02, 0x8E, 0x4D, 0x69, 0x6E, 0x67, 0x68, 0x75, 0x61,
+        0x51, 0x75, 0x29, 0x04, 0x72, 0x78, 0x3F, 0xB1,
+        /* p */
+        0xDB, 0x7C, 0x2A, 0xBF, 0x62, 0xE3, 0x5E, 0x66, 0x80, 0x76, 0xBE, 0xAD,
+        0x20, 0x8B,
+        /* a */
+        0xDB, 0x7C, 0x2A, 0xBF, 0x62, 0xE3, 0x5E, 0x66, 0x80, 0x76, 0xBE, 0xAD,
+        0x20, 0x88,
+        /* b */
+        0x65, 0x9E, 0xF8, 0xBA, 0x04, 0x39, 0x16, 0xEE, 0xDE, 0x89, 0x11, 0x70,
+        0x2B, 0x22,
+        /* x */
+        0x09, 0x48, 0x72, 0x39, 0x99, 0x5A, 0x5E, 0xE7, 0x6B, 0x55, 0xF9, 0xC2,
+        0xF0, 0x98,
+        /* y */
+        0xa8, 0x9c, 0xe5, 0xaf, 0x87, 0x24, 0xc0, 0xa2, 0x3e, 0x0e, 0x0f, 0xf7,
+        0x75, 0x00,
+        /* order */
+        0xDB, 0x7C, 0x2A, 0xBF, 0x62, 0xE3, 0x5E, 0x76, 0x28, 0xDF, 0xAC, 0x65,
+        0x61, 0xC5
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 14 * 6];
+} _EC_SECG_PRIME_112R2 = {
+    {
+        NID_X9_62_prime_field, 20, 14, 4
+    },
+    {
+        /* seed */
+        0x00, 0x27, 0x57, 0xA1, 0x11, 0x4D, 0x69, 0x6E, 0x67, 0x68, 0x75, 0x61,
+        0x51, 0x75, 0x53, 0x16, 0xC0, 0x5E, 0x0B, 0xD4,
+        /* p */
+        0xDB, 0x7C, 0x2A, 0xBF, 0x62, 0xE3, 0x5E, 0x66, 0x80, 0x76, 0xBE, 0xAD,
+        0x20, 0x8B,
+        /* a */
+        0x61, 0x27, 0xC2, 0x4C, 0x05, 0xF3, 0x8A, 0x0A, 0xAA, 0xF6, 0x5C, 0x0E,
+        0xF0, 0x2C,
+        /* b */
+        0x51, 0xDE, 0xF1, 0x81, 0x5D, 0xB5, 0xED, 0x74, 0xFC, 0xC3, 0x4C, 0x85,
+        0xD7, 0x09,
+        /* x */
+        0x4B, 0xA3, 0x0A, 0xB5, 0xE8, 0x92, 0xB4, 0xE1, 0x64, 0x9D, 0xD0, 0x92,
+        0x86, 0x43,
+        /* y */
+        0xad, 0xcd, 0x46, 0xf5, 0x88, 0x2e, 0x37, 0x47, 0xde, 0xf3, 0x6e, 0x95,
+        0x6e, 0x97,
+        /* order */
+        0x36, 0xDF, 0x0A, 0xAF, 0xD8, 0xB8, 0xD7, 0x59, 0x7C, 0xA1, 0x05, 0x20,
+        0xD0, 0x4B
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 16 * 6];
+} _EC_SECG_PRIME_128R1 = {
+    {
+        NID_X9_62_prime_field, 20, 16, 1
+    },
+    {
+        /* seed */
+        0x00, 0x0E, 0x0D, 0x4D, 0x69, 0x6E, 0x67, 0x68, 0x75, 0x61, 0x51, 0x75,
+        0x0C, 0xC0, 0x3A, 0x44, 0x73, 0xD0, 0x36, 0x79,
+        /* p */
+        0xFF, 0xFF, 0xFF, 0xFD, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF,
+        /* a */
+        0xFF, 0xFF, 0xFF, 0xFD, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFC,
+        /* b */
+        0xE8, 0x75, 0x79, 0xC1, 0x10, 0x79, 0xF4, 0x3D, 0xD8, 0x24, 0x99, 0x3C,
+        0x2C, 0xEE, 0x5E, 0xD3,
+        /* x */
+        0x16, 0x1F, 0xF7, 0x52, 0x8B, 0x89, 0x9B, 0x2D, 0x0C, 0x28, 0x60, 0x7C,
+        0xA5, 0x2C, 0x5B, 0x86,
+        /* y */
+        0xcf, 0x5a, 0xc8, 0x39, 0x5b, 0xaf, 0xeb, 0x13, 0xc0, 0x2d, 0xa2, 0x92,
+        0xdd, 0xed, 0x7a, 0x83,
+        /* order */
+        0xFF, 0xFF, 0xFF, 0xFE, 0x00, 0x00, 0x00, 0x00, 0x75, 0xA3, 0x0D, 0x1B,
+        0x90, 0x38, 0xA1, 0x15
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 16 * 6];
+} _EC_SECG_PRIME_128R2 = {
+    {
+        NID_X9_62_prime_field, 20, 16, 4
+    },
+    {
+        /* seed */
+        0x00, 0x4D, 0x69, 0x6E, 0x67, 0x68, 0x75, 0x61, 0x51, 0x75, 0x12, 0xD8,
+        0xF0, 0x34, 0x31, 0xFC, 0xE6, 0x3B, 0x88, 0xF4,
+        /* p */
+        0xFF, 0xFF, 0xFF, 0xFD, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF,
+        /* a */
+        0xD6, 0x03, 0x19, 0x98, 0xD1, 0xB3, 0xBB, 0xFE, 0xBF, 0x59, 0xCC, 0x9B,
+        0xBF, 0xF9, 0xAE, 0xE1,
+        /* b */
+        0x5E, 0xEE, 0xFC, 0xA3, 0x80, 0xD0, 0x29, 0x19, 0xDC, 0x2C, 0x65, 0x58,
+        0xBB, 0x6D, 0x8A, 0x5D,
+        /* x */
+        0x7B, 0x6A, 0xA5, 0xD8, 0x5E, 0x57, 0x29, 0x83, 0xE6, 0xFB, 0x32, 0xA7,
+        0xCD, 0xEB, 0xC1, 0x40,
+        /* y */
+        0x27, 0xb6, 0x91, 0x6a, 0x89, 0x4d, 0x3a, 0xee, 0x71, 0x06, 0xfe, 0x80,
+        0x5f, 0xc3, 0x4b, 0x44,
+        /* order */
+        0x3F, 0xFF, 0xFF, 0xFF, 0x7F, 0xFF, 0xFF, 0xFF, 0xBE, 0x00, 0x24, 0x72,
+        0x06, 0x13, 0xB5, 0xA3
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 21 * 6];
+} _EC_SECG_PRIME_160K1 = {
+    {
+        NID_X9_62_prime_field, 0, 21, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0x00, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xAC, 0x73,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        /* b */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x07,
+        /* x */
+        0x00, 0x3B, 0x4C, 0x38, 0x2C, 0xE3, 0x7A, 0xA1, 0x92, 0xA4, 0x01, 0x9E,
+        0x76, 0x30, 0x36, 0xF4, 0xF5, 0xDD, 0x4D, 0x7E, 0xBB,
+        /* y */
+        0x00, 0x93, 0x8c, 0xf9, 0x35, 0x31, 0x8f, 0xdc, 0xed, 0x6b, 0xc2, 0x82,
+        0x86, 0x53, 0x17, 0x33, 0xc3, 0xf0, 0x3c, 0x4f, 0xee,
+        /* order */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0xB8,
+        0xFA, 0x16, 0xDF, 0xAB, 0x9A, 0xCA, 0x16, 0xB6, 0xB3
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 21 * 6];
+} _EC_SECG_PRIME_160R1 = {
+    {
+        NID_X9_62_prime_field, 20, 21, 1
+    },
+    {
+        /* seed */
+        0x10, 0x53, 0xCD, 0xE4, 0x2C, 0x14, 0xD6, 0x96, 0xE6, 0x76, 0x87, 0x56,
+        0x15, 0x17, 0x53, 0x3B, 0xF3, 0xF8, 0x33, 0x45,
+        /* p */
+        0x00, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0x7F, 0xFF, 0xFF, 0xFF,
+        /* a */
+        0x00, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0x7F, 0xFF, 0xFF, 0xFC,
+        /* b */
+        0x00, 0x1C, 0x97, 0xBE, 0xFC, 0x54, 0xBD, 0x7A, 0x8B, 0x65, 0xAC, 0xF8,
+        0x9F, 0x81, 0xD4, 0xD4, 0xAD, 0xC5, 0x65, 0xFA, 0x45,
+        /* x */
+        0x00, 0x4A, 0x96, 0xB5, 0x68, 0x8E, 0xF5, 0x73, 0x28, 0x46, 0x64, 0x69,
+        0x89, 0x68, 0xC3, 0x8B, 0xB9, 0x13, 0xCB, 0xFC, 0x82,
+        /* y */
+        0x00, 0x23, 0xa6, 0x28, 0x55, 0x31, 0x68, 0x94, 0x7d, 0x59, 0xdc, 0xc9,
+        0x12, 0x04, 0x23, 0x51, 0x37, 0x7a, 0xc5, 0xfb, 0x32,
+        /* order */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0xF4,
+        0xC8, 0xF9, 0x27, 0xAE, 0xD3, 0xCA, 0x75, 0x22, 0x57
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 21 * 6];
+} _EC_SECG_PRIME_160R2 = {
+    {
+        NID_X9_62_prime_field, 20, 21, 1
+    },
+    {
+        /* seed */
+        0xB9, 0x9B, 0x99, 0xB0, 0x99, 0xB3, 0x23, 0xE0, 0x27, 0x09, 0xA4, 0xD6,
+        0x96, 0xE6, 0x76, 0x87, 0x56, 0x15, 0x17, 0x51,
+        /* p */
+        0x00, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xAC, 0x73,
+        /* a */
+        0x00, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xAC, 0x70,
+        /* b */
+        0x00, 0xB4, 0xE1, 0x34, 0xD3, 0xFB, 0x59, 0xEB, 0x8B, 0xAB, 0x57, 0x27,
+        0x49, 0x04, 0x66, 0x4D, 0x5A, 0xF5, 0x03, 0x88, 0xBA,
+        /* x */
+        0x00, 0x52, 0xDC, 0xB0, 0x34, 0x29, 0x3A, 0x11, 0x7E, 0x1F, 0x4F, 0xF1,
+        0x1B, 0x30, 0xF7, 0x19, 0x9D, 0x31, 0x44, 0xCE, 0x6D,
+        /* y */
+        0x00, 0xfe, 0xaf, 0xfe, 0xf2, 0xe3, 0x31, 0xf2, 0x96, 0xe0, 0x71, 0xfa,
+        0x0d, 0xf9, 0x98, 0x2c, 0xfe, 0xa7, 0xd4, 0x3f, 0x2e,
+        /* order */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x35,
+        0x1E, 0xE7, 0x86, 0xA8, 0x18, 0xF3, 0xA1, 0xA1, 0x6B
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 24 * 6];
+} _EC_SECG_PRIME_192K1 = {
+    {
+        NID_X9_62_prime_field, 0, 24, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xEE, 0x37,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        /* b */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x03,
+        /* x */
+        0xDB, 0x4F, 0xF1, 0x0E, 0xC0, 0x57, 0xE9, 0xAE, 0x26, 0xB0, 0x7D, 0x02,
+        0x80, 0xB7, 0xF4, 0x34, 0x1D, 0xA5, 0xD1, 0xB1, 0xEA, 0xE0, 0x6C, 0x7D,
+        /* y */
+        0x9b, 0x2f, 0x2f, 0x6d, 0x9c, 0x56, 0x28, 0xa7, 0x84, 0x41, 0x63, 0xd0,
+        0x15, 0xbe, 0x86, 0x34, 0x40, 0x82, 0xaa, 0x88, 0xd9, 0x5e, 0x2f, 0x9d,
+        /* order */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFE,
+        0x26, 0xF2, 0xFC, 0x17, 0x0F, 0x69, 0x46, 0x6A, 0x74, 0xDE, 0xFD, 0x8D
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 29 * 6];
+} _EC_SECG_PRIME_224K1 = {
+    {
+        NID_X9_62_prime_field, 0, 29, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0x00, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFE, 0xFF, 0xFF, 0xE5, 0x6D,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00,
+        /* b */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x05,
+        /* x */
+        0x00, 0xA1, 0x45, 0x5B, 0x33, 0x4D, 0xF0, 0x99, 0xDF, 0x30, 0xFC, 0x28,
+        0xA1, 0x69, 0xA4, 0x67, 0xE9, 0xE4, 0x70, 0x75, 0xA9, 0x0F, 0x7E, 0x65,
+        0x0E, 0xB6, 0xB7, 0xA4, 0x5C,
+        /* y */
+        0x00, 0x7e, 0x08, 0x9f, 0xed, 0x7f, 0xba, 0x34, 0x42, 0x82, 0xca, 0xfb,
+        0xd6, 0xf7, 0xe3, 0x19, 0xf7, 0xc0, 0xb0, 0xbd, 0x59, 0xe2, 0xca, 0x4b,
+        0xdb, 0x55, 0x6d, 0x61, 0xa5,
+        /* order */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x01, 0xDC, 0xE8, 0xD2, 0xEC, 0x61, 0x84, 0xCA, 0xF0, 0xA9,
+        0x71, 0x76, 0x9F, 0xB1, 0xF7
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 32 * 6];
+} _EC_SECG_PRIME_256K1 = {
+    {
+        NID_X9_62_prime_field, 0, 32, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xFC, 0x2F,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        /* b */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x07,
+        /* x */
+        0x79, 0xBE, 0x66, 0x7E, 0xF9, 0xDC, 0xBB, 0xAC, 0x55, 0xA0, 0x62, 0x95,
+        0xCE, 0x87, 0x0B, 0x07, 0x02, 0x9B, 0xFC, 0xDB, 0x2D, 0xCE, 0x28, 0xD9,
+        0x59, 0xF2, 0x81, 0x5B, 0x16, 0xF8, 0x17, 0x98,
+        /* y */
+        0x48, 0x3a, 0xda, 0x77, 0x26, 0xa3, 0xc4, 0x65, 0x5d, 0xa4, 0xfb, 0xfc,
+        0x0e, 0x11, 0x08, 0xa8, 0xfd, 0x17, 0xb4, 0x48, 0xa6, 0x85, 0x54, 0x19,
+        0x9c, 0x47, 0xd0, 0x8f, 0xfb, 0x10, 0xd4, 0xb8,
+        /* order */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFE, 0xBA, 0xAE, 0xDC, 0xE6, 0xAF, 0x48, 0xA0, 0x3B,
+        0xBF, 0xD2, 0x5E, 0x8C, 0xD0, 0x36, 0x41, 0x41
+    }
+};
+
+/* some wap/wtls curves */
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 15 * 6];
+} _EC_WTLS_8 = {
+    {
+        NID_X9_62_prime_field, 0, 15, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0x00, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFD, 0xE7,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00,
+        /* b */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x03,
+        /* x */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x01,
+        /* y */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x02,
+        /* order */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0xEC, 0xEA, 0x55, 0x1A,
+        0xD8, 0x37, 0xE9
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 21 * 6];
+} _EC_WTLS_9 = {
+    {
+        NID_X9_62_prime_field, 0, 21, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0x00, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFC, 0x80, 0x8F,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        /* b */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x03,
+        /* x */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* y */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02,
+        /* order */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0xCD,
+        0xC9, 0x8A, 0xE0, 0xE2, 0xDE, 0x57, 0x4A, 0xBF, 0x33
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 28 * 6];
+} _EC_WTLS_12 = {
+    {
+        NID_X9_62_prime_field, 0, 28, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x01,
+        /* a */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFE,
+        /* b */
+        0xB4, 0x05, 0x0A, 0x85, 0x0C, 0x04, 0xB3, 0xAB, 0xF5, 0x41, 0x32, 0x56,
+        0x50, 0x44, 0xB0, 0xB7, 0xD7, 0xBF, 0xD8, 0xBA, 0x27, 0x0B, 0x39, 0x43,
+        0x23, 0x55, 0xFF, 0xB4,
+        /* x */
+        0xB7, 0x0E, 0x0C, 0xBD, 0x6B, 0xB4, 0xBF, 0x7F, 0x32, 0x13, 0x90, 0xB9,
+        0x4A, 0x03, 0xC1, 0xD3, 0x56, 0xC2, 0x11, 0x22, 0x34, 0x32, 0x80, 0xD6,
+        0x11, 0x5C, 0x1D, 0x21,
+        /* y */
+        0xbd, 0x37, 0x63, 0x88, 0xb5, 0xf7, 0x23, 0xfb, 0x4c, 0x22, 0xdf, 0xe6,
+        0xcd, 0x43, 0x75, 0xa0, 0x5a, 0x07, 0x47, 0x64, 0x44, 0xd5, 0x81, 0x99,
+        0x85, 0x00, 0x7e, 0x34,
+        /* order */
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0x16, 0xA2, 0xE0, 0xB8, 0xF0, 0x3E, 0x13, 0xDD, 0x29, 0x45,
+        0x5C, 0x5C, 0x2A, 0x3D
+    }
+};
+
+#ifndef OPENSSL_NO_EC2M
+
+/* characteristic two curves */
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 15 * 6];
+} _EC_SECG_CHAR2_113R1 = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 15, 2
+    },
+    {
+        /* seed */
+        0x10, 0xE7, 0x23, 0xAB, 0x14, 0xD6, 0x96, 0xE6, 0x76, 0x87, 0x56, 0x15,
+        0x17, 0x56, 0xFE, 0xBF, 0x8F, 0xCB, 0x49, 0xA9,
+        /* p */
+        0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x02, 0x01,
+        /* a */
+        0x00, 0x30, 0x88, 0x25, 0x0C, 0xA6, 0xE7, 0xC7, 0xFE, 0x64, 0x9C, 0xE8,
+        0x58, 0x20, 0xF7,
+        /* b */
+        0x00, 0xE8, 0xBE, 0xE4, 0xD3, 0xE2, 0x26, 0x07, 0x44, 0x18, 0x8B, 0xE0,
+        0xE9, 0xC7, 0x23,
+        /* x */
+        0x00, 0x9D, 0x73, 0x61, 0x6F, 0x35, 0xF4, 0xAB, 0x14, 0x07, 0xD7, 0x35,
+        0x62, 0xC1, 0x0F,
+        /* y */
+        0x00, 0xA5, 0x28, 0x30, 0x27, 0x79, 0x58, 0xEE, 0x84, 0xD1, 0x31, 0x5E,
+        0xD3, 0x18, 0x86,
+        /* order */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xD9, 0xCC, 0xEC, 0x8A,
+        0x39, 0xE5, 0x6F
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 15 * 6];
+} _EC_SECG_CHAR2_113R2 = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 15, 2
+    },
+    {
+        /* seed */
+        0x10, 0xC0, 0xFB, 0x15, 0x76, 0x08, 0x60, 0xDE, 0xF1, 0xEE, 0xF4, 0xD6,
+        0x96, 0xE6, 0x76, 0x87, 0x56, 0x15, 0x17, 0x5D,
+        /* p */
+        0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x02, 0x01,
+        /* a */
+        0x00, 0x68, 0x99, 0x18, 0xDB, 0xEC, 0x7E, 0x5A, 0x0D, 0xD6, 0xDF, 0xC0,
+        0xAA, 0x55, 0xC7,
+        /* b */
+        0x00, 0x95, 0xE9, 0xA9, 0xEC, 0x9B, 0x29, 0x7B, 0xD4, 0xBF, 0x36, 0xE0,
+        0x59, 0x18, 0x4F,
+        /* x */
+        0x01, 0xA5, 0x7A, 0x6A, 0x7B, 0x26, 0xCA, 0x5E, 0xF5, 0x2F, 0xCD, 0xB8,
+        0x16, 0x47, 0x97,
+        /* y */
+        0x00, 0xB3, 0xAD, 0xC9, 0x4E, 0xD1, 0xFE, 0x67, 0x4C, 0x06, 0xE6, 0x95,
+        0xBA, 0xBA, 0x1D,
+        /* order */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x08, 0x78, 0x9B, 0x24,
+        0x96, 0xAF, 0x93
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 17 * 6];
+} _EC_SECG_CHAR2_131R1 = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 17, 2
+    },
+    {
+        /* seed */
+        0x4D, 0x69, 0x6E, 0x67, 0x68, 0x75, 0x61, 0x51, 0x75, 0x98, 0x5B, 0xD3,
+        0xAD, 0xBA, 0xDA, 0x21, 0xB4, 0x3A, 0x97, 0xE2,
+        /* p */
+        0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x01, 0x0D,
+        /* a */
+        0x07, 0xA1, 0x1B, 0x09, 0xA7, 0x6B, 0x56, 0x21, 0x44, 0x41, 0x8F, 0xF3,
+        0xFF, 0x8C, 0x25, 0x70, 0xB8,
+        /* b */
+        0x02, 0x17, 0xC0, 0x56, 0x10, 0x88, 0x4B, 0x63, 0xB9, 0xC6, 0xC7, 0x29,
+        0x16, 0x78, 0xF9, 0xD3, 0x41,
+        /* x */
+        0x00, 0x81, 0xBA, 0xF9, 0x1F, 0xDF, 0x98, 0x33, 0xC4, 0x0F, 0x9C, 0x18,
+        0x13, 0x43, 0x63, 0x83, 0x99,
+        /* y */
+        0x07, 0x8C, 0x6E, 0x7E, 0xA3, 0x8C, 0x00, 0x1F, 0x73, 0xC8, 0x13, 0x4B,
+        0x1B, 0x4E, 0xF9, 0xE1, 0x50,
+        /* order */
+        0x04, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x31, 0x23, 0x95,
+        0x3A, 0x94, 0x64, 0xB5, 0x4D
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 17 * 6];
+} _EC_SECG_CHAR2_131R2 = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 17, 2
+    },
+    {
+        /* seed */
+        0x98, 0x5B, 0xD3, 0xAD, 0xBA, 0xD4, 0xD6, 0x96, 0xE6, 0x76, 0x87, 0x56,
+        0x15, 0x17, 0x5A, 0x21, 0xB4, 0x3A, 0x97, 0xE3,
+        /* p */
+        0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x01, 0x0D,
+        /* a */
+        0x03, 0xE5, 0xA8, 0x89, 0x19, 0xD7, 0xCA, 0xFC, 0xBF, 0x41, 0x5F, 0x07,
+        0xC2, 0x17, 0x65, 0x73, 0xB2,
+        /* b */
+        0x04, 0xB8, 0x26, 0x6A, 0x46, 0xC5, 0x56, 0x57, 0xAC, 0x73, 0x4C, 0xE3,
+        0x8F, 0x01, 0x8F, 0x21, 0x92,
+        /* x */
+        0x03, 0x56, 0xDC, 0xD8, 0xF2, 0xF9, 0x50, 0x31, 0xAD, 0x65, 0x2D, 0x23,
+        0x95, 0x1B, 0xB3, 0x66, 0xA8,
+        /* y */
+        0x06, 0x48, 0xF0, 0x6D, 0x86, 0x79, 0x40, 0xA5, 0x36, 0x6D, 0x9E, 0x26,
+        0x5D, 0xE9, 0xEB, 0x24, 0x0F,
+        /* order */
+        0x04, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x69, 0x54, 0xA2,
+        0x33, 0x04, 0x9B, 0xA9, 0x8F
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 21 * 6];
+} _EC_NIST_CHAR2_163K = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 21, 2
+    },
+    {
+        /* no seed */
+        /* p */
+        0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xC9,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* b */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* x */
+        0x02, 0xFE, 0x13, 0xC0, 0x53, 0x7B, 0xBC, 0x11, 0xAC, 0xAA, 0x07, 0xD7,
+        0x93, 0xDE, 0x4E, 0x6D, 0x5E, 0x5C, 0x94, 0xEE, 0xE8,
+        /* y */
+        0x02, 0x89, 0x07, 0x0F, 0xB0, 0x5D, 0x38, 0xFF, 0x58, 0x32, 0x1F, 0x2E,
+        0x80, 0x05, 0x36, 0xD5, 0x38, 0xCC, 0xDA, 0xA3, 0xD9,
+        /* order */
+        0x04, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x01,
+        0x08, 0xA2, 0xE0, 0xCC, 0x0D, 0x99, 0xF8, 0xA5, 0xEF
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 21 * 6];
+} _EC_SECG_CHAR2_163R1 = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 21, 2
+    },
+    {
+        /* p */
+        0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xC9,
+        /* a */
+        0x07, 0xB6, 0x88, 0x2C, 0xAA, 0xEF, 0xA8, 0x4F, 0x95, 0x54, 0xFF, 0x84,
+        0x28, 0xBD, 0x88, 0xE2, 0x46, 0xD2, 0x78, 0x2A, 0xE2,
+        /* b */
+        0x07, 0x13, 0x61, 0x2D, 0xCD, 0xDC, 0xB4, 0x0A, 0xAB, 0x94, 0x6B, 0xDA,
+        0x29, 0xCA, 0x91, 0xF7, 0x3A, 0xF9, 0x58, 0xAF, 0xD9,
+        /* x */
+        0x03, 0x69, 0x97, 0x96, 0x97, 0xAB, 0x43, 0x89, 0x77, 0x89, 0x56, 0x67,
+        0x89, 0x56, 0x7F, 0x78, 0x7A, 0x78, 0x76, 0xA6, 0x54,
+        /* y */
+        0x00, 0x43, 0x5E, 0xDB, 0x42, 0xEF, 0xAF, 0xB2, 0x98, 0x9D, 0x51, 0xFE,
+        0xFC, 0xE3, 0xC8, 0x09, 0x88, 0xF4, 0x1F, 0xF8, 0x83,
+        /* order */
+        0x03, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0x48,
+        0xAA, 0xB6, 0x89, 0xC2, 0x9C, 0xA7, 0x10, 0x27, 0x9B
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 21 * 6];
+} _EC_NIST_CHAR2_163B = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 21, 2
+    },
+    {
+        /* p */
+        0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xC9,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* b */
+        0x02, 0x0A, 0x60, 0x19, 0x07, 0xB8, 0xC9, 0x53, 0xCA, 0x14, 0x81, 0xEB,
+        0x10, 0x51, 0x2F, 0x78, 0x74, 0x4A, 0x32, 0x05, 0xFD,
+        /* x */
+        0x03, 0xF0, 0xEB, 0xA1, 0x62, 0x86, 0xA2, 0xD5, 0x7E, 0xA0, 0x99, 0x11,
+        0x68, 0xD4, 0x99, 0x46, 0x37, 0xE8, 0x34, 0x3E, 0x36,
+        /* y */
+        0x00, 0xD5, 0x1F, 0xBC, 0x6C, 0x71, 0xA0, 0x09, 0x4F, 0xA2, 0xCD, 0xD5,
+        0x45, 0xB1, 0x1C, 0x5C, 0x0C, 0x79, 0x73, 0x24, 0xF1,
+        /* order */
+        0x04, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x92,
+        0xFE, 0x77, 0xE7, 0x0C, 0x12, 0xA4, 0x23, 0x4C, 0x33
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 25 * 6];
+} _EC_SECG_CHAR2_193R1 = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 25, 2
+    },
+    {
+        /* seed */
+        0x10, 0x3F, 0xAE, 0xC7, 0x4D, 0x69, 0x6E, 0x67, 0x68, 0x75, 0x61, 0x51,
+        0x75, 0x77, 0x7F, 0xC5, 0xB1, 0x91, 0xEF, 0x30,
+        /* p */
+        0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80,
+        0x01,
+        /* a */
+        0x00, 0x17, 0x85, 0x8F, 0xEB, 0x7A, 0x98, 0x97, 0x51, 0x69, 0xE1, 0x71,
+        0xF7, 0x7B, 0x40, 0x87, 0xDE, 0x09, 0x8A, 0xC8, 0xA9, 0x11, 0xDF, 0x7B,
+        0x01,
+        /* b */
+        0x00, 0xFD, 0xFB, 0x49, 0xBF, 0xE6, 0xC3, 0xA8, 0x9F, 0xAC, 0xAD, 0xAA,
+        0x7A, 0x1E, 0x5B, 0xBC, 0x7C, 0xC1, 0xC2, 0xE5, 0xD8, 0x31, 0x47, 0x88,
+        0x14,
+        /* x */
+        0x01, 0xF4, 0x81, 0xBC, 0x5F, 0x0F, 0xF8, 0x4A, 0x74, 0xAD, 0x6C, 0xDF,
+        0x6F, 0xDE, 0xF4, 0xBF, 0x61, 0x79, 0x62, 0x53, 0x72, 0xD8, 0xC0, 0xC5,
+        0xE1,
+        /* y */
+        0x00, 0x25, 0xE3, 0x99, 0xF2, 0x90, 0x37, 0x12, 0xCC, 0xF3, 0xEA, 0x9E,
+        0x3A, 0x1A, 0xD1, 0x7F, 0xB0, 0xB3, 0x20, 0x1B, 0x6A, 0xF7, 0xCE, 0x1B,
+        0x05,
+        /* order */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0xC7, 0xF3, 0x4A, 0x77, 0x8F, 0x44, 0x3A, 0xCC, 0x92, 0x0E, 0xBA,
+        0x49
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 25 * 6];
+} _EC_SECG_CHAR2_193R2 = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 25, 2
+    },
+    {
+        /* seed */
+        0x10, 0xB7, 0xB4, 0xD6, 0x96, 0xE6, 0x76, 0x87, 0x56, 0x15, 0x17, 0x51,
+        0x37, 0xC8, 0xA1, 0x6F, 0xD0, 0xDA, 0x22, 0x11,
+        /* p */
+        0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80,
+        0x01,
+        /* a */
+        0x01, 0x63, 0xF3, 0x5A, 0x51, 0x37, 0xC2, 0xCE, 0x3E, 0xA6, 0xED, 0x86,
+        0x67, 0x19, 0x0B, 0x0B, 0xC4, 0x3E, 0xCD, 0x69, 0x97, 0x77, 0x02, 0x70,
+        0x9B,
+        /* b */
+        0x00, 0xC9, 0xBB, 0x9E, 0x89, 0x27, 0xD4, 0xD6, 0x4C, 0x37, 0x7E, 0x2A,
+        0xB2, 0x85, 0x6A, 0x5B, 0x16, 0xE3, 0xEF, 0xB7, 0xF6, 0x1D, 0x43, 0x16,
+        0xAE,
+        /* x */
+        0x00, 0xD9, 0xB6, 0x7D, 0x19, 0x2E, 0x03, 0x67, 0xC8, 0x03, 0xF3, 0x9E,
+        0x1A, 0x7E, 0x82, 0xCA, 0x14, 0xA6, 0x51, 0x35, 0x0A, 0xAE, 0x61, 0x7E,
+        0x8F,
+        /* y */
+        0x01, 0xCE, 0x94, 0x33, 0x56, 0x07, 0xC3, 0x04, 0xAC, 0x29, 0xE7, 0xDE,
+        0xFB, 0xD9, 0xCA, 0x01, 0xF5, 0x96, 0xF9, 0x27, 0x22, 0x4C, 0xDE, 0xCF,
+        0x6C,
+        /* order */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x01, 0x5A, 0xAB, 0x56, 0x1B, 0x00, 0x54, 0x13, 0xCC, 0xD4, 0xEE, 0x99,
+        0xD5
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 30 * 6];
+} _EC_NIST_CHAR2_233K = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 30, 4
+    },
+    {
+        /* no seed */
+        0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x04, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        /* b */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* x */
+        0x01, 0x72, 0x32, 0xBA, 0x85, 0x3A, 0x7E, 0x73, 0x1A, 0xF1, 0x29, 0xF2,
+        0x2F, 0xF4, 0x14, 0x95, 0x63, 0xA4, 0x19, 0xC2, 0x6B, 0xF5, 0x0A, 0x4C,
+        0x9D, 0x6E, 0xEF, 0xAD, 0x61, 0x26,
+        /* y */
+        0x01, 0xDB, 0x53, 0x7D, 0xEC, 0xE8, 0x19, 0xB7, 0xF7, 0x0F, 0x55, 0x5A,
+        0x67, 0xC4, 0x27, 0xA8, 0xCD, 0x9B, 0xF1, 0x8A, 0xEB, 0x9B, 0x56, 0xE0,
+        0xC1, 0x10, 0x56, 0xFA, 0xE6, 0xA3,
+        /* order */
+        0x00, 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x06, 0x9D, 0x5B, 0xB9, 0x15, 0xBC, 0xD4, 0x6E, 0xFB,
+        0x1A, 0xD5, 0xF1, 0x73, 0xAB, 0xDF
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 30 * 6];
+} _EC_NIST_CHAR2_233B = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 30, 2
+    },
+    {
+        /* seed */
+        0x74, 0xD5, 0x9F, 0xF0, 0x7F, 0x6B, 0x41, 0x3D, 0x0E, 0xA1, 0x4B, 0x34,
+        0x4B, 0x20, 0xA2, 0xDB, 0x04, 0x9B, 0x50, 0xC3,
+        /* p */
+        0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x04, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* b */
+        0x00, 0x66, 0x64, 0x7E, 0xDE, 0x6C, 0x33, 0x2C, 0x7F, 0x8C, 0x09, 0x23,
+        0xBB, 0x58, 0x21, 0x3B, 0x33, 0x3B, 0x20, 0xE9, 0xCE, 0x42, 0x81, 0xFE,
+        0x11, 0x5F, 0x7D, 0x8F, 0x90, 0xAD,
+        /* x */
+        0x00, 0xFA, 0xC9, 0xDF, 0xCB, 0xAC, 0x83, 0x13, 0xBB, 0x21, 0x39, 0xF1,
+        0xBB, 0x75, 0x5F, 0xEF, 0x65, 0xBC, 0x39, 0x1F, 0x8B, 0x36, 0xF8, 0xF8,
+        0xEB, 0x73, 0x71, 0xFD, 0x55, 0x8B,
+        /* y */
+        0x01, 0x00, 0x6A, 0x08, 0xA4, 0x19, 0x03, 0x35, 0x06, 0x78, 0xE5, 0x85,
+        0x28, 0xBE, 0xBF, 0x8A, 0x0B, 0xEF, 0xF8, 0x67, 0xA7, 0xCA, 0x36, 0x71,
+        0x6F, 0x7E, 0x01, 0xF8, 0x10, 0x52,
+        /* order */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x13, 0xE9, 0x74, 0xE7, 0x2F, 0x8A, 0x69, 0x22, 0x03,
+        0x1D, 0x26, 0x03, 0xCF, 0xE0, 0xD7
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 30 * 6];
+} _EC_SECG_CHAR2_239K1 = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 30, 4
+    },
+    {
+        /* no seed */
+        0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x40, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        /* b */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* x */
+        0x29, 0xA0, 0xB6, 0xA8, 0x87, 0xA9, 0x83, 0xE9, 0x73, 0x09, 0x88, 0xA6,
+        0x87, 0x27, 0xA8, 0xB2, 0xD1, 0x26, 0xC4, 0x4C, 0xC2, 0xCC, 0x7B, 0x2A,
+        0x65, 0x55, 0x19, 0x30, 0x35, 0xDC,
+        /* y */
+        0x76, 0x31, 0x08, 0x04, 0xF1, 0x2E, 0x54, 0x9B, 0xDB, 0x01, 0x1C, 0x10,
+        0x30, 0x89, 0xE7, 0x35, 0x10, 0xAC, 0xB2, 0x75, 0xFC, 0x31, 0x2A, 0x5D,
+        0xC6, 0xB7, 0x65, 0x53, 0xF0, 0xCA,
+        /* order */
+        0x20, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x5A, 0x79, 0xFE, 0xC6, 0x7C, 0xB6, 0xE9, 0x1F, 0x1C,
+        0x1D, 0xA8, 0x00, 0xE4, 0x78, 0xA5
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 36 * 6];
+} _EC_NIST_CHAR2_283K = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 36, 4
+    },
+    {
+        /* no seed */
+        0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x10, 0xA1,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        /* b */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* x */
+        0x05, 0x03, 0x21, 0x3F, 0x78, 0xCA, 0x44, 0x88, 0x3F, 0x1A, 0x3B, 0x81,
+        0x62, 0xF1, 0x88, 0xE5, 0x53, 0xCD, 0x26, 0x5F, 0x23, 0xC1, 0x56, 0x7A,
+        0x16, 0x87, 0x69, 0x13, 0xB0, 0xC2, 0xAC, 0x24, 0x58, 0x49, 0x28, 0x36,
+        /* y */
+        0x01, 0xCC, 0xDA, 0x38, 0x0F, 0x1C, 0x9E, 0x31, 0x8D, 0x90, 0xF9, 0x5D,
+        0x07, 0xE5, 0x42, 0x6F, 0xE8, 0x7E, 0x45, 0xC0, 0xE8, 0x18, 0x46, 0x98,
+        0xE4, 0x59, 0x62, 0x36, 0x4E, 0x34, 0x11, 0x61, 0x77, 0xDD, 0x22, 0x59,
+        /* order */
+        0x01, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xE9, 0xAE, 0x2E, 0xD0, 0x75, 0x77,
+        0x26, 0x5D, 0xFF, 0x7F, 0x94, 0x45, 0x1E, 0x06, 0x1E, 0x16, 0x3C, 0x61
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 36 * 6];
+} _EC_NIST_CHAR2_283B = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 36, 2
+    },
+    {
+        /* no seed */
+        0x77, 0xE2, 0xB0, 0x73, 0x70, 0xEB, 0x0F, 0x83, 0x2A, 0x6D, 0xD5, 0xB6,
+        0x2D, 0xFC, 0x88, 0xCD, 0x06, 0xBB, 0x84, 0xBE,
+        /* p */
+        0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x10, 0xA1,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* b */
+        0x02, 0x7B, 0x68, 0x0A, 0xC8, 0xB8, 0x59, 0x6D, 0xA5, 0xA4, 0xAF, 0x8A,
+        0x19, 0xA0, 0x30, 0x3F, 0xCA, 0x97, 0xFD, 0x76, 0x45, 0x30, 0x9F, 0xA2,
+        0xA5, 0x81, 0x48, 0x5A, 0xF6, 0x26, 0x3E, 0x31, 0x3B, 0x79, 0xA2, 0xF5,
+        /* x */
+        0x05, 0xF9, 0x39, 0x25, 0x8D, 0xB7, 0xDD, 0x90, 0xE1, 0x93, 0x4F, 0x8C,
+        0x70, 0xB0, 0xDF, 0xEC, 0x2E, 0xED, 0x25, 0xB8, 0x55, 0x7E, 0xAC, 0x9C,
+        0x80, 0xE2, 0xE1, 0x98, 0xF8, 0xCD, 0xBE, 0xCD, 0x86, 0xB1, 0x20, 0x53,
+        /* y */
+        0x03, 0x67, 0x68, 0x54, 0xFE, 0x24, 0x14, 0x1C, 0xB9, 0x8F, 0xE6, 0xD4,
+        0xB2, 0x0D, 0x02, 0xB4, 0x51, 0x6F, 0xF7, 0x02, 0x35, 0x0E, 0xDD, 0xB0,
+        0x82, 0x67, 0x79, 0xC8, 0x13, 0xF0, 0xDF, 0x45, 0xBE, 0x81, 0x12, 0xF4,
+        /* order */
+        0x03, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xEF, 0x90, 0x39, 0x96, 0x60, 0xFC,
+        0x93, 0x8A, 0x90, 0x16, 0x5B, 0x04, 0x2A, 0x7C, 0xEF, 0xAD, 0xB3, 0x07
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 52 * 6];
+} _EC_NIST_CHAR2_409K = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 52, 4
+    },
+    {
+        /* no seed */
+        /* p */
+        0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x01,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00,
+        /* b */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x01,
+        /* x */
+        0x00, 0x60, 0xF0, 0x5F, 0x65, 0x8F, 0x49, 0xC1, 0xAD, 0x3A, 0xB1, 0x89,
+        0x0F, 0x71, 0x84, 0x21, 0x0E, 0xFD, 0x09, 0x87, 0xE3, 0x07, 0xC8, 0x4C,
+        0x27, 0xAC, 0xCF, 0xB8, 0xF9, 0xF6, 0x7C, 0xC2, 0xC4, 0x60, 0x18, 0x9E,
+        0xB5, 0xAA, 0xAA, 0x62, 0xEE, 0x22, 0x2E, 0xB1, 0xB3, 0x55, 0x40, 0xCF,
+        0xE9, 0x02, 0x37, 0x46,
+        /* y */
+        0x01, 0xE3, 0x69, 0x05, 0x0B, 0x7C, 0x4E, 0x42, 0xAC, 0xBA, 0x1D, 0xAC,
+        0xBF, 0x04, 0x29, 0x9C, 0x34, 0x60, 0x78, 0x2F, 0x91, 0x8E, 0xA4, 0x27,
+        0xE6, 0x32, 0x51, 0x65, 0xE9, 0xEA, 0x10, 0xE3, 0xDA, 0x5F, 0x6C, 0x42,
+        0xE9, 0xC5, 0x52, 0x15, 0xAA, 0x9C, 0xA2, 0x7A, 0x58, 0x63, 0xEC, 0x48,
+        0xD8, 0xE0, 0x28, 0x6B,
+        /* order */
+        0x00, 0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFE, 0x5F, 0x83, 0xB2, 0xD4, 0xEA, 0x20, 0x40, 0x0E, 0xC4,
+        0x55, 0x7D, 0x5E, 0xD3, 0xE3, 0xE7, 0xCA, 0x5B, 0x4B, 0x5C, 0x83, 0xB8,
+        0xE0, 0x1E, 0x5F, 0xCF
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 52 * 6];
+} _EC_NIST_CHAR2_409B = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 52, 2
+    },
+    {
+        /* seed */
+        0x40, 0x99, 0xB5, 0xA4, 0x57, 0xF9, 0xD6, 0x9F, 0x79, 0x21, 0x3D, 0x09,
+        0x4C, 0x4B, 0xCD, 0x4D, 0x42, 0x62, 0x21, 0x0B,
+        /* p */
+        0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x01,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x01,
+        /* b */
+        0x00, 0x21, 0xA5, 0xC2, 0xC8, 0xEE, 0x9F, 0xEB, 0x5C, 0x4B, 0x9A, 0x75,
+        0x3B, 0x7B, 0x47, 0x6B, 0x7F, 0xD6, 0x42, 0x2E, 0xF1, 0xF3, 0xDD, 0x67,
+        0x47, 0x61, 0xFA, 0x99, 0xD6, 0xAC, 0x27, 0xC8, 0xA9, 0xA1, 0x97, 0xB2,
+        0x72, 0x82, 0x2F, 0x6C, 0xD5, 0x7A, 0x55, 0xAA, 0x4F, 0x50, 0xAE, 0x31,
+        0x7B, 0x13, 0x54, 0x5F,
+        /* x */
+        0x01, 0x5D, 0x48, 0x60, 0xD0, 0x88, 0xDD, 0xB3, 0x49, 0x6B, 0x0C, 0x60,
+        0x64, 0x75, 0x62, 0x60, 0x44, 0x1C, 0xDE, 0x4A, 0xF1, 0x77, 0x1D, 0x4D,
+        0xB0, 0x1F, 0xFE, 0x5B, 0x34, 0xE5, 0x97, 0x03, 0xDC, 0x25, 0x5A, 0x86,
+        0x8A, 0x11, 0x80, 0x51, 0x56, 0x03, 0xAE, 0xAB, 0x60, 0x79, 0x4E, 0x54,
+        0xBB, 0x79, 0x96, 0xA7,
+        /* y */
+        0x00, 0x61, 0xB1, 0xCF, 0xAB, 0x6B, 0xE5, 0xF3, 0x2B, 0xBF, 0xA7, 0x83,
+        0x24, 0xED, 0x10, 0x6A, 0x76, 0x36, 0xB9, 0xC5, 0xA7, 0xBD, 0x19, 0x8D,
+        0x01, 0x58, 0xAA, 0x4F, 0x54, 0x88, 0xD0, 0x8F, 0x38, 0x51, 0x4F, 0x1F,
+        0xDF, 0x4B, 0x4F, 0x40, 0xD2, 0x18, 0x1B, 0x36, 0x81, 0xC3, 0x64, 0xBA,
+        0x02, 0x73, 0xC7, 0x06,
+        /* order */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x01, 0xE2, 0xAA, 0xD6, 0xA6, 0x12, 0xF3, 0x33, 0x07, 0xBE,
+        0x5F, 0xA4, 0x7C, 0x3C, 0x9E, 0x05, 0x2F, 0x83, 0x81, 0x64, 0xCD, 0x37,
+        0xD9, 0xA2, 0x11, 0x73
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 72 * 6];
+} _EC_NIST_CHAR2_571K = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 72, 4
+    },
+    {
+        /* no seed */
+        /* p */
+        0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x04, 0x25,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        /* b */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* x */
+        0x02, 0x6E, 0xB7, 0xA8, 0x59, 0x92, 0x3F, 0xBC, 0x82, 0x18, 0x96, 0x31,
+        0xF8, 0x10, 0x3F, 0xE4, 0xAC, 0x9C, 0xA2, 0x97, 0x00, 0x12, 0xD5, 0xD4,
+        0x60, 0x24, 0x80, 0x48, 0x01, 0x84, 0x1C, 0xA4, 0x43, 0x70, 0x95, 0x84,
+        0x93, 0xB2, 0x05, 0xE6, 0x47, 0xDA, 0x30, 0x4D, 0xB4, 0xCE, 0xB0, 0x8C,
+        0xBB, 0xD1, 0xBA, 0x39, 0x49, 0x47, 0x76, 0xFB, 0x98, 0x8B, 0x47, 0x17,
+        0x4D, 0xCA, 0x88, 0xC7, 0xE2, 0x94, 0x52, 0x83, 0xA0, 0x1C, 0x89, 0x72,
+        /* y */
+        0x03, 0x49, 0xDC, 0x80, 0x7F, 0x4F, 0xBF, 0x37, 0x4F, 0x4A, 0xEA, 0xDE,
+        0x3B, 0xCA, 0x95, 0x31, 0x4D, 0xD5, 0x8C, 0xEC, 0x9F, 0x30, 0x7A, 0x54,
+        0xFF, 0xC6, 0x1E, 0xFC, 0x00, 0x6D, 0x8A, 0x2C, 0x9D, 0x49, 0x79, 0xC0,
+        0xAC, 0x44, 0xAE, 0xA7, 0x4F, 0xBE, 0xBB, 0xB9, 0xF7, 0x72, 0xAE, 0xDC,
+        0xB6, 0x20, 0xB0, 0x1A, 0x7B, 0xA7, 0xAF, 0x1B, 0x32, 0x04, 0x30, 0xC8,
+        0x59, 0x19, 0x84, 0xF6, 0x01, 0xCD, 0x4C, 0x14, 0x3E, 0xF1, 0xC7, 0xA3,
+        /* order */
+        0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x13, 0x18, 0x50, 0xE1, 0xF1, 0x9A, 0x63, 0xE4, 0xB3, 0x91, 0xA8, 0xDB,
+        0x91, 0x7F, 0x41, 0x38, 0xB6, 0x30, 0xD8, 0x4B, 0xE5, 0xD6, 0x39, 0x38,
+        0x1E, 0x91, 0xDE, 0xB4, 0x5C, 0xFE, 0x77, 0x8F, 0x63, 0x7C, 0x10, 0x01
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 72 * 6];
+} _EC_NIST_CHAR2_571B = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 72, 2
+    },
+    {
+        /* seed */
+        0x2A, 0xA0, 0x58, 0xF7, 0x3A, 0x0E, 0x33, 0xAB, 0x48, 0x6B, 0x0F, 0x61,
+        0x04, 0x10, 0xC5, 0x3A, 0x7F, 0x13, 0x23, 0x10,
+        /* p */
+        0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x04, 0x25,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* b */
+        0x02, 0xF4, 0x0E, 0x7E, 0x22, 0x21, 0xF2, 0x95, 0xDE, 0x29, 0x71, 0x17,
+        0xB7, 0xF3, 0xD6, 0x2F, 0x5C, 0x6A, 0x97, 0xFF, 0xCB, 0x8C, 0xEF, 0xF1,
+        0xCD, 0x6B, 0xA8, 0xCE, 0x4A, 0x9A, 0x18, 0xAD, 0x84, 0xFF, 0xAB, 0xBD,
+        0x8E, 0xFA, 0x59, 0x33, 0x2B, 0xE7, 0xAD, 0x67, 0x56, 0xA6, 0x6E, 0x29,
+        0x4A, 0xFD, 0x18, 0x5A, 0x78, 0xFF, 0x12, 0xAA, 0x52, 0x0E, 0x4D, 0xE7,
+        0x39, 0xBA, 0xCA, 0x0C, 0x7F, 0xFE, 0xFF, 0x7F, 0x29, 0x55, 0x72, 0x7A,
+        /* x */
+        0x03, 0x03, 0x00, 0x1D, 0x34, 0xB8, 0x56, 0x29, 0x6C, 0x16, 0xC0, 0xD4,
+        0x0D, 0x3C, 0xD7, 0x75, 0x0A, 0x93, 0xD1, 0xD2, 0x95, 0x5F, 0xA8, 0x0A,
+        0xA5, 0xF4, 0x0F, 0xC8, 0xDB, 0x7B, 0x2A, 0xBD, 0xBD, 0xE5, 0x39, 0x50,
+        0xF4, 0xC0, 0xD2, 0x93, 0xCD, 0xD7, 0x11, 0xA3, 0x5B, 0x67, 0xFB, 0x14,
+        0x99, 0xAE, 0x60, 0x03, 0x86, 0x14, 0xF1, 0x39, 0x4A, 0xBF, 0xA3, 0xB4,
+        0xC8, 0x50, 0xD9, 0x27, 0xE1, 0xE7, 0x76, 0x9C, 0x8E, 0xEC, 0x2D, 0x19,
+        /* y */
+        0x03, 0x7B, 0xF2, 0x73, 0x42, 0xDA, 0x63, 0x9B, 0x6D, 0xCC, 0xFF, 0xFE,
+        0xB7, 0x3D, 0x69, 0xD7, 0x8C, 0x6C, 0x27, 0xA6, 0x00, 0x9C, 0xBB, 0xCA,
+        0x19, 0x80, 0xF8, 0x53, 0x39, 0x21, 0xE8, 0xA6, 0x84, 0x42, 0x3E, 0x43,
+        0xBA, 0xB0, 0x8A, 0x57, 0x62, 0x91, 0xAF, 0x8F, 0x46, 0x1B, 0xB2, 0xA8,
+        0xB3, 0x53, 0x1D, 0x2F, 0x04, 0x85, 0xC1, 0x9B, 0x16, 0xE2, 0xF1, 0x51,
+        0x6E, 0x23, 0xDD, 0x3C, 0x1A, 0x48, 0x27, 0xAF, 0x1B, 0x8A, 0xC1, 0x5B,
+        /* order */
+        0x03, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xE6, 0x61, 0xCE, 0x18, 0xFF, 0x55, 0x98, 0x73, 0x08, 0x05, 0x9B, 0x18,
+        0x68, 0x23, 0x85, 0x1E, 0xC7, 0xDD, 0x9C, 0xA1, 0x16, 0x1D, 0xE9, 0x3D,
+        0x51, 0x74, 0xD6, 0x6E, 0x83, 0x82, 0xE9, 0xBB, 0x2F, 0xE8, 0x4E, 0x47
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 21 * 6];
+} _EC_X9_62_CHAR2_163V1 = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 21, 2
+    },
+    {
+        /* seed */
+        0xD2, 0xC0, 0xFB, 0x15, 0x76, 0x08, 0x60, 0xDE, 0xF1, 0xEE, 0xF4, 0xD6,
+        0x96, 0xE6, 0x76, 0x87, 0x56, 0x15, 0x17, 0x54,
+        /* p */
+        0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x07,
+        /* a */
+        0x07, 0x25, 0x46, 0xB5, 0x43, 0x52, 0x34, 0xA4, 0x22, 0xE0, 0x78, 0x96,
+        0x75, 0xF4, 0x32, 0xC8, 0x94, 0x35, 0xDE, 0x52, 0x42,
+        /* b */
+        0x00, 0xC9, 0x51, 0x7D, 0x06, 0xD5, 0x24, 0x0D, 0x3C, 0xFF, 0x38, 0xC7,
+        0x4B, 0x20, 0xB6, 0xCD, 0x4D, 0x6F, 0x9D, 0xD4, 0xD9,
+        /* x */
+        0x07, 0xAF, 0x69, 0x98, 0x95, 0x46, 0x10, 0x3D, 0x79, 0x32, 0x9F, 0xCC,
+        0x3D, 0x74, 0x88, 0x0F, 0x33, 0xBB, 0xE8, 0x03, 0xCB,
+        /* y */
+        0x01, 0xEC, 0x23, 0x21, 0x1B, 0x59, 0x66, 0xAD, 0xEA, 0x1D, 0x3F, 0x87,
+        0xF7, 0xEA, 0x58, 0x48, 0xAE, 0xF0, 0xB7, 0xCA, 0x9F,
+        /* order */
+        0x04, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0xE6,
+        0x0F, 0xC8, 0x82, 0x1C, 0xC7, 0x4D, 0xAE, 0xAF, 0xC1
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 21 * 6];
+} _EC_X9_62_CHAR2_163V2 = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 21, 2
+    },
+    {
+        /* seed */
+        0x53, 0x81, 0x4C, 0x05, 0x0D, 0x44, 0xD6, 0x96, 0xE6, 0x76, 0x87, 0x56,
+        0x15, 0x17, 0x58, 0x0C, 0xA4, 0xE2, 0x9F, 0xFD,
+        /* p */
+        0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x07,
+        /* a */
+        0x01, 0x08, 0xB3, 0x9E, 0x77, 0xC4, 0xB1, 0x08, 0xBE, 0xD9, 0x81, 0xED,
+        0x0E, 0x89, 0x0E, 0x11, 0x7C, 0x51, 0x1C, 0xF0, 0x72,
+        /* b */
+        0x06, 0x67, 0xAC, 0xEB, 0x38, 0xAF, 0x4E, 0x48, 0x8C, 0x40, 0x74, 0x33,
+        0xFF, 0xAE, 0x4F, 0x1C, 0x81, 0x16, 0x38, 0xDF, 0x20,
+        /* x */
+        0x00, 0x24, 0x26, 0x6E, 0x4E, 0xB5, 0x10, 0x6D, 0x0A, 0x96, 0x4D, 0x92,
+        0xC4, 0x86, 0x0E, 0x26, 0x71, 0xDB, 0x9B, 0x6C, 0xC5,
+        /* y */
+        0x07, 0x9F, 0x68, 0x4D, 0xDF, 0x66, 0x84, 0xC5, 0xCD, 0x25, 0x8B, 0x38,
+        0x90, 0x02, 0x1B, 0x23, 0x86, 0xDF, 0xD1, 0x9F, 0xC5,
+        /* order */
+        0x03, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFD, 0xF6,
+        0x4D, 0xE1, 0x15, 0x1A, 0xDB, 0xB7, 0x8F, 0x10, 0xA7
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 21 * 6];
+} _EC_X9_62_CHAR2_163V3 = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 21, 2
+    },
+    {
+        /* seed */
+        0x50, 0xCB, 0xF1, 0xD9, 0x5C, 0xA9, 0x4D, 0x69, 0x6E, 0x67, 0x68, 0x75,
+        0x61, 0x51, 0x75, 0xF1, 0x6A, 0x36, 0xA3, 0xB8,
+        /* p */
+        0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x07,
+        /* a */
+        0x07, 0xA5, 0x26, 0xC6, 0x3D, 0x3E, 0x25, 0xA2, 0x56, 0xA0, 0x07, 0x69,
+        0x9F, 0x54, 0x47, 0xE3, 0x2A, 0xE4, 0x56, 0xB5, 0x0E,
+        /* b */
+        0x03, 0xF7, 0x06, 0x17, 0x98, 0xEB, 0x99, 0xE2, 0x38, 0xFD, 0x6F, 0x1B,
+        0xF9, 0x5B, 0x48, 0xFE, 0xEB, 0x48, 0x54, 0x25, 0x2B,
+        /* x */
+        0x02, 0xF9, 0xF8, 0x7B, 0x7C, 0x57, 0x4D, 0x0B, 0xDE, 0xCF, 0x8A, 0x22,
+        0xE6, 0x52, 0x47, 0x75, 0xF9, 0x8C, 0xDE, 0xBD, 0xCB,
+        /* y */
+        0x05, 0xB9, 0x35, 0x59, 0x0C, 0x15, 0x5E, 0x17, 0xEA, 0x48, 0xEB, 0x3F,
+        0xF3, 0x71, 0x8B, 0x89, 0x3D, 0xF5, 0x9A, 0x05, 0xD0,
+        /* order */
+        0x03, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFE, 0x1A,
+        0xEE, 0x14, 0x0F, 0x11, 0x0A, 0xFF, 0x96, 0x13, 0x09
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 23 * 6];
+} _EC_X9_62_CHAR2_176V1 = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 23, 0xFF6E
+    },
+    {
+        /* no seed */
+        /* p */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x08, 0x00, 0x00, 0x00, 0x00, 0x07,
+        /* a */
+        0x00, 0xE4, 0xE6, 0xDB, 0x29, 0x95, 0x06, 0x5C, 0x40, 0x7D, 0x9D, 0x39,
+        0xB8, 0xD0, 0x96, 0x7B, 0x96, 0x70, 0x4B, 0xA8, 0xE9, 0xC9, 0x0B,
+        /* b */
+        0x00, 0x5D, 0xDA, 0x47, 0x0A, 0xBE, 0x64, 0x14, 0xDE, 0x8E, 0xC1, 0x33,
+        0xAE, 0x28, 0xE9, 0xBB, 0xD7, 0xFC, 0xEC, 0x0A, 0xE0, 0xFF, 0xF2,
+        /* x */
+        0x00, 0x8D, 0x16, 0xC2, 0x86, 0x67, 0x98, 0xB6, 0x00, 0xF9, 0xF0, 0x8B,
+        0xB4, 0xA8, 0xE8, 0x60, 0xF3, 0x29, 0x8C, 0xE0, 0x4A, 0x57, 0x98,
+        /* y */
+        0x00, 0x6F, 0xA4, 0x53, 0x9C, 0x2D, 0xAD, 0xDD, 0xD6, 0xBA, 0xB5, 0x16,
+        0x7D, 0x61, 0xB4, 0x36, 0xE1, 0xD9, 0x2B, 0xB1, 0x6A, 0x56, 0x2C,
+        /* order */
+        0x00, 0x00, 0x01, 0x00, 0x92, 0x53, 0x73, 0x97, 0xEC, 0xA4, 0xF6, 0x14,
+        0x57, 0x99, 0xD6, 0x2B, 0x0A, 0x19, 0xCE, 0x06, 0xFE, 0x26, 0xAD
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 24 * 6];
+} _EC_X9_62_CHAR2_191V1 = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 24, 2
+    },
+    {
+        /* seed */
+        0x4E, 0x13, 0xCA, 0x54, 0x27, 0x44, 0xD6, 0x96, 0xE6, 0x76, 0x87, 0x56,
+        0x15, 0x17, 0x55, 0x2F, 0x27, 0x9A, 0x8C, 0x84,
+        /* p */
+        0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x01,
+        /* a */
+        0x28, 0x66, 0x53, 0x7B, 0x67, 0x67, 0x52, 0x63, 0x6A, 0x68, 0xF5, 0x65,
+        0x54, 0xE1, 0x26, 0x40, 0x27, 0x6B, 0x64, 0x9E, 0xF7, 0x52, 0x62, 0x67,
+        /* b */
+        0x2E, 0x45, 0xEF, 0x57, 0x1F, 0x00, 0x78, 0x6F, 0x67, 0xB0, 0x08, 0x1B,
+        0x94, 0x95, 0xA3, 0xD9, 0x54, 0x62, 0xF5, 0xDE, 0x0A, 0xA1, 0x85, 0xEC,
+        /* x */
+        0x36, 0xB3, 0xDA, 0xF8, 0xA2, 0x32, 0x06, 0xF9, 0xC4, 0xF2, 0x99, 0xD7,
+        0xB2, 0x1A, 0x9C, 0x36, 0x91, 0x37, 0xF2, 0xC8, 0x4A, 0xE1, 0xAA, 0x0D,
+        /* y */
+        0x76, 0x5B, 0xE7, 0x34, 0x33, 0xB3, 0xF9, 0x5E, 0x33, 0x29, 0x32, 0xE7,
+        0x0E, 0xA2, 0x45, 0xCA, 0x24, 0x18, 0xEA, 0x0E, 0xF9, 0x80, 0x18, 0xFB,
+        /* order */
+        0x40, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x04, 0xA2, 0x0E, 0x90, 0xC3, 0x90, 0x67, 0xC8, 0x93, 0xBB, 0xB9, 0xA5
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 24 * 6];
+} _EC_X9_62_CHAR2_191V2 = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 24, 4
+    },
+    {
+        /* seed */
+        0x08, 0x71, 0xEF, 0x2F, 0xEF, 0x24, 0xD6, 0x96, 0xE6, 0x76, 0x87, 0x56,
+        0x15, 0x17, 0x58, 0xBE, 0xE0, 0xD9, 0x5C, 0x15,
+        /* p */
+        0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x01,
+        /* a */
+        0x40, 0x10, 0x28, 0x77, 0x4D, 0x77, 0x77, 0xC7, 0xB7, 0x66, 0x6D, 0x13,
+        0x66, 0xEA, 0x43, 0x20, 0x71, 0x27, 0x4F, 0x89, 0xFF, 0x01, 0xE7, 0x18,
+        /* b */
+        0x06, 0x20, 0x04, 0x8D, 0x28, 0xBC, 0xBD, 0x03, 0xB6, 0x24, 0x9C, 0x99,
+        0x18, 0x2B, 0x7C, 0x8C, 0xD1, 0x97, 0x00, 0xC3, 0x62, 0xC4, 0x6A, 0x01,
+        /* x */
+        0x38, 0x09, 0xB2, 0xB7, 0xCC, 0x1B, 0x28, 0xCC, 0x5A, 0x87, 0x92, 0x6A,
+        0xAD, 0x83, 0xFD, 0x28, 0x78, 0x9E, 0x81, 0xE2, 0xC9, 0xE3, 0xBF, 0x10,
+        /* y */
+        0x17, 0x43, 0x43, 0x86, 0x62, 0x6D, 0x14, 0xF3, 0xDB, 0xF0, 0x17, 0x60,
+        0xD9, 0x21, 0x3A, 0x3E, 0x1C, 0xF3, 0x7A, 0xEC, 0x43, 0x7D, 0x66, 0x8A,
+        /* order */
+        0x20, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x50, 0x50, 0x8C, 0xB8, 0x9F, 0x65, 0x28, 0x24, 0xE0, 0x6B, 0x81, 0x73
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 24 * 6];
+} _EC_X9_62_CHAR2_191V3 = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 24, 6
+    },
+    {
+        /* seed */
+        0xE0, 0x53, 0x51, 0x2D, 0xC6, 0x84, 0xD6, 0x96, 0xE6, 0x76, 0x87, 0x56,
+        0x15, 0x17, 0x50, 0x67, 0xAE, 0x78, 0x6D, 0x1F,
+        /* p */
+        0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x01,
+        /* a */
+        0x6C, 0x01, 0x07, 0x47, 0x56, 0x09, 0x91, 0x22, 0x22, 0x10, 0x56, 0x91,
+        0x1C, 0x77, 0xD7, 0x7E, 0x77, 0xA7, 0x77, 0xE7, 0xE7, 0xE7, 0x7F, 0xCB,
+        /* b */
+        0x71, 0xFE, 0x1A, 0xF9, 0x26, 0xCF, 0x84, 0x79, 0x89, 0xEF, 0xEF, 0x8D,
+        0xB4, 0x59, 0xF6, 0x63, 0x94, 0xD9, 0x0F, 0x32, 0xAD, 0x3F, 0x15, 0xE8,
+        /* x */
+        0x37, 0x5D, 0x4C, 0xE2, 0x4F, 0xDE, 0x43, 0x44, 0x89, 0xDE, 0x87, 0x46,
+        0xE7, 0x17, 0x86, 0x01, 0x50, 0x09, 0xE6, 0x6E, 0x38, 0xA9, 0x26, 0xDD,
+        /* y */
+        0x54, 0x5A, 0x39, 0x17, 0x61, 0x96, 0x57, 0x5D, 0x98, 0x59, 0x99, 0x36,
+        0x6E, 0x6A, 0xD3, 0x4C, 0xE0, 0xA7, 0x7C, 0xD7, 0x12, 0x7B, 0x06, 0xBE,
+        /* order */
+        0x15, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55,
+        0x61, 0x0C, 0x0B, 0x19, 0x68, 0x12, 0xBF, 0xB6, 0x28, 0x8A, 0x3E, 0xA3
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 27 * 6];
+} _EC_X9_62_CHAR2_208W1 = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 27, 0xFE48
+    },
+    {
+        /* no seed */
+        /* p */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x07,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00,
+        /* b */
+        0x00, 0xC8, 0x61, 0x9E, 0xD4, 0x5A, 0x62, 0xE6, 0x21, 0x2E, 0x11, 0x60,
+        0x34, 0x9E, 0x2B, 0xFA, 0x84, 0x44, 0x39, 0xFA, 0xFC, 0x2A, 0x3F, 0xD1,
+        0x63, 0x8F, 0x9E,
+        /* x */
+        0x00, 0x89, 0xFD, 0xFB, 0xE4, 0xAB, 0xE1, 0x93, 0xDF, 0x95, 0x59, 0xEC,
+        0xF0, 0x7A, 0xC0, 0xCE, 0x78, 0x55, 0x4E, 0x27, 0x84, 0xEB, 0x8C, 0x1E,
+        0xD1, 0xA5, 0x7A,
+        /* y */
+        0x00, 0x0F, 0x55, 0xB5, 0x1A, 0x06, 0xE7, 0x8E, 0x9A, 0xC3, 0x8A, 0x03,
+        0x5F, 0xF5, 0x20, 0xD8, 0xB0, 0x17, 0x81, 0xBE, 0xB1, 0xA6, 0xBB, 0x08,
+        0x61, 0x7D, 0xE3,
+        /* order */
+        0x00, 0x00, 0x01, 0x01, 0xBA, 0xF9, 0x5C, 0x97, 0x23, 0xC5, 0x7B, 0x6C,
+        0x21, 0xDA, 0x2E, 0xFF, 0x2D, 0x5E, 0xD5, 0x88, 0xBD, 0xD5, 0x71, 0x7E,
+        0x21, 0x2F, 0x9D
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 30 * 6];
+} _EC_X9_62_CHAR2_239V1 = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 30, 4
+    },
+    {
+        /* seed */
+        0xD3, 0x4B, 0x9A, 0x4D, 0x69, 0x6E, 0x67, 0x68, 0x75, 0x61, 0x51, 0x75,
+        0xCA, 0x71, 0xB9, 0x20, 0xBF, 0xEF, 0xB0, 0x5D,
+        /* p */
+        0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x10, 0x00, 0x00, 0x00, 0x01,
+        /* a */
+        0x32, 0x01, 0x08, 0x57, 0x07, 0x7C, 0x54, 0x31, 0x12, 0x3A, 0x46, 0xB8,
+        0x08, 0x90, 0x67, 0x56, 0xF5, 0x43, 0x42, 0x3E, 0x8D, 0x27, 0x87, 0x75,
+        0x78, 0x12, 0x57, 0x78, 0xAC, 0x76,
+        /* b */
+        0x79, 0x04, 0x08, 0xF2, 0xEE, 0xDA, 0xF3, 0x92, 0xB0, 0x12, 0xED, 0xEF,
+        0xB3, 0x39, 0x2F, 0x30, 0xF4, 0x32, 0x7C, 0x0C, 0xA3, 0xF3, 0x1F, 0xC3,
+        0x83, 0xC4, 0x22, 0xAA, 0x8C, 0x16,
+        /* x */
+        0x57, 0x92, 0x70, 0x98, 0xFA, 0x93, 0x2E, 0x7C, 0x0A, 0x96, 0xD3, 0xFD,
+        0x5B, 0x70, 0x6E, 0xF7, 0xE5, 0xF5, 0xC1, 0x56, 0xE1, 0x6B, 0x7E, 0x7C,
+        0x86, 0x03, 0x85, 0x52, 0xE9, 0x1D,
+        /* y */
+        0x61, 0xD8, 0xEE, 0x50, 0x77, 0xC3, 0x3F, 0xEC, 0xF6, 0xF1, 0xA1, 0x6B,
+        0x26, 0x8D, 0xE4, 0x69, 0xC3, 0xC7, 0x74, 0x4E, 0xA9, 0xA9, 0x71, 0x64,
+        0x9F, 0xC7, 0xA9, 0x61, 0x63, 0x05,
+        /* order */
+        0x20, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x0F, 0x4D, 0x42, 0xFF, 0xE1, 0x49, 0x2A, 0x49, 0x93,
+        0xF1, 0xCA, 0xD6, 0x66, 0xE4, 0x47
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 30 * 6];
+} _EC_X9_62_CHAR2_239V2 = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 30, 6
+    },
+    {
+        /* seed */
+        0x2A, 0xA6, 0x98, 0x2F, 0xDF, 0xA4, 0xD6, 0x96, 0xE6, 0x76, 0x87, 0x56,
+        0x15, 0x17, 0x5D, 0x26, 0x67, 0x27, 0x27, 0x7D,
+        /* p */
+        0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x10, 0x00, 0x00, 0x00, 0x01,
+        /* a */
+        0x42, 0x30, 0x01, 0x77, 0x57, 0xA7, 0x67, 0xFA, 0xE4, 0x23, 0x98, 0x56,
+        0x9B, 0x74, 0x63, 0x25, 0xD4, 0x53, 0x13, 0xAF, 0x07, 0x66, 0x26, 0x64,
+        0x79, 0xB7, 0x56, 0x54, 0xE6, 0x5F,
+        /* b */
+        0x50, 0x37, 0xEA, 0x65, 0x41, 0x96, 0xCF, 0xF0, 0xCD, 0x82, 0xB2, 0xC1,
+        0x4A, 0x2F, 0xCF, 0x2E, 0x3F, 0xF8, 0x77, 0x52, 0x85, 0xB5, 0x45, 0x72,
+        0x2F, 0x03, 0xEA, 0xCD, 0xB7, 0x4B,
+        /* x */
+        0x28, 0xF9, 0xD0, 0x4E, 0x90, 0x00, 0x69, 0xC8, 0xDC, 0x47, 0xA0, 0x85,
+        0x34, 0xFE, 0x76, 0xD2, 0xB9, 0x00, 0xB7, 0xD7, 0xEF, 0x31, 0xF5, 0x70,
+        0x9F, 0x20, 0x0C, 0x4C, 0xA2, 0x05,
+        /* y */
+        0x56, 0x67, 0x33, 0x4C, 0x45, 0xAF, 0xF3, 0xB5, 0xA0, 0x3B, 0xAD, 0x9D,
+        0xD7, 0x5E, 0x2C, 0x71, 0xA9, 0x93, 0x62, 0x56, 0x7D, 0x54, 0x53, 0xF7,
+        0xFA, 0x6E, 0x22, 0x7E, 0xC8, 0x33,
+        /* order */
+        0x15, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55, 0x55,
+        0x55, 0x55, 0x55, 0x3C, 0x6F, 0x28, 0x85, 0x25, 0x9C, 0x31, 0xE3, 0xFC,
+        0xDF, 0x15, 0x46, 0x24, 0x52, 0x2D
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 30 * 6];
+} _EC_X9_62_CHAR2_239V3 = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 30, 0xA
+    },
+    {
+        /* seed */
+        0x9E, 0x07, 0x6F, 0x4D, 0x69, 0x6E, 0x67, 0x68, 0x75, 0x61, 0x51, 0x75,
+        0xE1, 0x1E, 0x9F, 0xDD, 0x77, 0xF9, 0x20, 0x41,
+        /* p */
+        0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x10, 0x00, 0x00, 0x00, 0x01,
+        /* a */
+        0x01, 0x23, 0x87, 0x74, 0x66, 0x6A, 0x67, 0x76, 0x6D, 0x66, 0x76, 0xF7,
+        0x78, 0xE6, 0x76, 0xB6, 0x69, 0x99, 0x17, 0x66, 0x66, 0xE6, 0x87, 0x66,
+        0x6D, 0x87, 0x66, 0xC6, 0x6A, 0x9F,
+        /* b */
+        0x6A, 0x94, 0x19, 0x77, 0xBA, 0x9F, 0x6A, 0x43, 0x51, 0x99, 0xAC, 0xFC,
+        0x51, 0x06, 0x7E, 0xD5, 0x87, 0xF5, 0x19, 0xC5, 0xEC, 0xB5, 0x41, 0xB8,
+        0xE4, 0x41, 0x11, 0xDE, 0x1D, 0x40,
+        /* x */
+        0x70, 0xF6, 0xE9, 0xD0, 0x4D, 0x28, 0x9C, 0x4E, 0x89, 0x91, 0x3C, 0xE3,
+        0x53, 0x0B, 0xFD, 0xE9, 0x03, 0x97, 0x7D, 0x42, 0xB1, 0x46, 0xD5, 0x39,
+        0xBF, 0x1B, 0xDE, 0x4E, 0x9C, 0x92,
+        /* y */
+        0x2E, 0x5A, 0x0E, 0xAF, 0x6E, 0x5E, 0x13, 0x05, 0xB9, 0x00, 0x4D, 0xCE,
+        0x5C, 0x0E, 0xD7, 0xFE, 0x59, 0xA3, 0x56, 0x08, 0xF3, 0x38, 0x37, 0xC8,
+        0x16, 0xD8, 0x0B, 0x79, 0xF4, 0x61,
+        /* order */
+        0x0C, 0xCC, 0xCC, 0xCC, 0xCC, 0xCC, 0xCC, 0xCC, 0xCC, 0xCC, 0xCC, 0xCC,
+        0xCC, 0xCC, 0xCC, 0xAC, 0x49, 0x12, 0xD2, 0xD9, 0xDF, 0x90, 0x3E, 0xF9,
+        0x88, 0x8B, 0x8A, 0x0E, 0x4C, 0xFF
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 35 * 6];
+} _EC_X9_62_CHAR2_272W1 = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 35, 0xFF06
+    },
+    {
+        /* no seed */
+        /* p */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x0B,
+        /* a */
+        0x00, 0x91, 0xA0, 0x91, 0xF0, 0x3B, 0x5F, 0xBA, 0x4A, 0xB2, 0xCC, 0xF4,
+        0x9C, 0x4E, 0xDD, 0x22, 0x0F, 0xB0, 0x28, 0x71, 0x2D, 0x42, 0xBE, 0x75,
+        0x2B, 0x2C, 0x40, 0x09, 0x4D, 0xBA, 0xCD, 0xB5, 0x86, 0xFB, 0x20,
+        /* b */
+        0x00, 0x71, 0x67, 0xEF, 0xC9, 0x2B, 0xB2, 0xE3, 0xCE, 0x7C, 0x8A, 0xAA,
+        0xFF, 0x34, 0xE1, 0x2A, 0x9C, 0x55, 0x70, 0x03, 0xD7, 0xC7, 0x3A, 0x6F,
+        0xAF, 0x00, 0x3F, 0x99, 0xF6, 0xCC, 0x84, 0x82, 0xE5, 0x40, 0xF7,
+        /* x */
+        0x00, 0x61, 0x08, 0xBA, 0xBB, 0x2C, 0xEE, 0xBC, 0xF7, 0x87, 0x05, 0x8A,
+        0x05, 0x6C, 0xBE, 0x0C, 0xFE, 0x62, 0x2D, 0x77, 0x23, 0xA2, 0x89, 0xE0,
+        0x8A, 0x07, 0xAE, 0x13, 0xEF, 0x0D, 0x10, 0xD1, 0x71, 0xDD, 0x8D,
+        /* y */
+        0x00, 0x10, 0xC7, 0x69, 0x57, 0x16, 0x85, 0x1E, 0xEF, 0x6B, 0xA7, 0xF6,
+        0x87, 0x2E, 0x61, 0x42, 0xFB, 0xD2, 0x41, 0xB8, 0x30, 0xFF, 0x5E, 0xFC,
+        0xAC, 0xEC, 0xCA, 0xB0, 0x5E, 0x02, 0x00, 0x5D, 0xDE, 0x9D, 0x23,
+        /* order */
+        0x00, 0x00, 0x01, 0x00, 0xFA, 0xF5, 0x13, 0x54, 0xE0, 0xE3, 0x9E, 0x48,
+        0x92, 0xDF, 0x6E, 0x31, 0x9C, 0x72, 0xC8, 0x16, 0x16, 0x03, 0xFA, 0x45,
+        0xAA, 0x7B, 0x99, 0x8A, 0x16, 0x7B, 0x8F, 0x1E, 0x62, 0x95, 0x21
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 39 * 6];
+} _EC_X9_62_CHAR2_304W1 = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 39, 0xFE2E
+    },
+    {
+        /* no seed */
+        /* p */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x08, 0x07,
+        /* a */
+        0x00, 0xFD, 0x0D, 0x69, 0x31, 0x49, 0xA1, 0x18, 0xF6, 0x51, 0xE6, 0xDC,
+        0xE6, 0x80, 0x20, 0x85, 0x37, 0x7E, 0x5F, 0x88, 0x2D, 0x1B, 0x51, 0x0B,
+        0x44, 0x16, 0x00, 0x74, 0xC1, 0x28, 0x80, 0x78, 0x36, 0x5A, 0x03, 0x96,
+        0xC8, 0xE6, 0x81,
+        /* b */
+        0x00, 0xBD, 0xDB, 0x97, 0xE5, 0x55, 0xA5, 0x0A, 0x90, 0x8E, 0x43, 0xB0,
+        0x1C, 0x79, 0x8E, 0xA5, 0xDA, 0xA6, 0x78, 0x8F, 0x1E, 0xA2, 0x79, 0x4E,
+        0xFC, 0xF5, 0x71, 0x66, 0xB8, 0xC1, 0x40, 0x39, 0x60, 0x1E, 0x55, 0x82,
+        0x73, 0x40, 0xBE,
+        /* x */
+        0x00, 0x19, 0x7B, 0x07, 0x84, 0x5E, 0x9B, 0xE2, 0xD9, 0x6A, 0xDB, 0x0F,
+        0x5F, 0x3C, 0x7F, 0x2C, 0xFF, 0xBD, 0x7A, 0x3E, 0xB8, 0xB6, 0xFE, 0xC3,
+        0x5C, 0x7F, 0xD6, 0x7F, 0x26, 0xDD, 0xF6, 0x28, 0x5A, 0x64, 0x4F, 0x74,
+        0x0A, 0x26, 0x14,
+        /* y */
+        0x00, 0xE1, 0x9F, 0xBE, 0xB7, 0x6E, 0x0D, 0xA1, 0x71, 0x51, 0x7E, 0xCF,
+        0x40, 0x1B, 0x50, 0x28, 0x9B, 0xF0, 0x14, 0x10, 0x32, 0x88, 0x52, 0x7A,
+        0x9B, 0x41, 0x6A, 0x10, 0x5E, 0x80, 0x26, 0x0B, 0x54, 0x9F, 0xDC, 0x1B,
+        0x92, 0xC0, 0x3B,
+        /* order */
+        0x00, 0x00, 0x01, 0x01, 0xD5, 0x56, 0x57, 0x2A, 0xAB, 0xAC, 0x80, 0x01,
+        0x01, 0xD5, 0x56, 0x57, 0x2A, 0xAB, 0xAC, 0x80, 0x01, 0x02, 0x2D, 0x5C,
+        0x91, 0xDD, 0x17, 0x3F, 0x8F, 0xB5, 0x61, 0xDA, 0x68, 0x99, 0x16, 0x44,
+        0x43, 0x05, 0x1D
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[20 + 45 * 6];
+} _EC_X9_62_CHAR2_359V1 = {
+    {
+        NID_X9_62_characteristic_two_field, 20, 45, 0x4C
+    },
+    {
+        /* seed */
+        0x2B, 0x35, 0x49, 0x20, 0xB7, 0x24, 0xD6, 0x96, 0xE6, 0x76, 0x87, 0x56,
+        0x15, 0x17, 0x58, 0x5B, 0xA1, 0x33, 0x2D, 0xC6,
+        /* p */
+        0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x10, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* a */
+        0x56, 0x67, 0x67, 0x6A, 0x65, 0x4B, 0x20, 0x75, 0x4F, 0x35, 0x6E, 0xA9,
+        0x20, 0x17, 0xD9, 0x46, 0x56, 0x7C, 0x46, 0x67, 0x55, 0x56, 0xF1, 0x95,
+        0x56, 0xA0, 0x46, 0x16, 0xB5, 0x67, 0xD2, 0x23, 0xA5, 0xE0, 0x56, 0x56,
+        0xFB, 0x54, 0x90, 0x16, 0xA9, 0x66, 0x56, 0xA5, 0x57,
+        /* b */
+        0x24, 0x72, 0xE2, 0xD0, 0x19, 0x7C, 0x49, 0x36, 0x3F, 0x1F, 0xE7, 0xF5,
+        0xB6, 0xDB, 0x07, 0x5D, 0x52, 0xB6, 0x94, 0x7D, 0x13, 0x5D, 0x8C, 0xA4,
+        0x45, 0x80, 0x5D, 0x39, 0xBC, 0x34, 0x56, 0x26, 0x08, 0x96, 0x87, 0x74,
+        0x2B, 0x63, 0x29, 0xE7, 0x06, 0x80, 0x23, 0x19, 0x88,
+        /* x */
+        0x3C, 0x25, 0x8E, 0xF3, 0x04, 0x77, 0x67, 0xE7, 0xED, 0xE0, 0xF1, 0xFD,
+        0xAA, 0x79, 0xDA, 0xEE, 0x38, 0x41, 0x36, 0x6A, 0x13, 0x2E, 0x16, 0x3A,
+        0xCE, 0xD4, 0xED, 0x24, 0x01, 0xDF, 0x9C, 0x6B, 0xDC, 0xDE, 0x98, 0xE8,
+        0xE7, 0x07, 0xC0, 0x7A, 0x22, 0x39, 0xB1, 0xB0, 0x97,
+        /* y */
+        0x53, 0xD7, 0xE0, 0x85, 0x29, 0x54, 0x70, 0x48, 0x12, 0x1E, 0x9C, 0x95,
+        0xF3, 0x79, 0x1D, 0xD8, 0x04, 0x96, 0x39, 0x48, 0xF3, 0x4F, 0xAE, 0x7B,
+        0xF4, 0x4E, 0xA8, 0x23, 0x65, 0xDC, 0x78, 0x68, 0xFE, 0x57, 0xE4, 0xAE,
+        0x2D, 0xE2, 0x11, 0x30, 0x5A, 0x40, 0x71, 0x04, 0xBD,
+        /* order */
+        0x01, 0xAF, 0x28, 0x6B, 0xCA, 0x1A, 0xF2, 0x86, 0xBC, 0xA1, 0xAF, 0x28,
+        0x6B, 0xCA, 0x1A, 0xF2, 0x86, 0xBC, 0xA1, 0xAF, 0x28, 0x6B, 0xC9, 0xFB,
+        0x8F, 0x6B, 0x85, 0xC5, 0x56, 0x89, 0x2C, 0x20, 0xA7, 0xEB, 0x96, 0x4F,
+        0xE7, 0x71, 0x9E, 0x74, 0xF4, 0x90, 0x75, 0x8D, 0x3B
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 47 * 6];
+} _EC_X9_62_CHAR2_368W1 = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 47, 0xFF70
+    },
+    {
+        /* no seed */
+        /* p */
+        0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x20, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x07,
+        /* a */
+        0x00, 0xE0, 0xD2, 0xEE, 0x25, 0x09, 0x52, 0x06, 0xF5, 0xE2, 0xA4, 0xF9,
+        0xED, 0x22, 0x9F, 0x1F, 0x25, 0x6E, 0x79, 0xA0, 0xE2, 0xB4, 0x55, 0x97,
+        0x0D, 0x8D, 0x0D, 0x86, 0x5B, 0xD9, 0x47, 0x78, 0xC5, 0x76, 0xD6, 0x2F,
+        0x0A, 0xB7, 0x51, 0x9C, 0xCD, 0x2A, 0x1A, 0x90, 0x6A, 0xE3, 0x0D,
+        /* b */
+        0x00, 0xFC, 0x12, 0x17, 0xD4, 0x32, 0x0A, 0x90, 0x45, 0x2C, 0x76, 0x0A,
+        0x58, 0xED, 0xCD, 0x30, 0xC8, 0xDD, 0x06, 0x9B, 0x3C, 0x34, 0x45, 0x38,
+        0x37, 0xA3, 0x4E, 0xD5, 0x0C, 0xB5, 0x49, 0x17, 0xE1, 0xC2, 0x11, 0x2D,
+        0x84, 0xD1, 0x64, 0xF4, 0x44, 0xF8, 0xF7, 0x47, 0x86, 0x04, 0x6A,
+        /* x */
+        0x00, 0x10, 0x85, 0xE2, 0x75, 0x53, 0x81, 0xDC, 0xCC, 0xE3, 0xC1, 0x55,
+        0x7A, 0xFA, 0x10, 0xC2, 0xF0, 0xC0, 0xC2, 0x82, 0x56, 0x46, 0xC5, 0xB3,
+        0x4A, 0x39, 0x4C, 0xBC, 0xFA, 0x8B, 0xC1, 0x6B, 0x22, 0xE7, 0xE7, 0x89,
+        0xE9, 0x27, 0xBE, 0x21, 0x6F, 0x02, 0xE1, 0xFB, 0x13, 0x6A, 0x5F,
+        /* y */
+        0x00, 0x7B, 0x3E, 0xB1, 0xBD, 0xDC, 0xBA, 0x62, 0xD5, 0xD8, 0xB2, 0x05,
+        0x9B, 0x52, 0x57, 0x97, 0xFC, 0x73, 0x82, 0x2C, 0x59, 0x05, 0x9C, 0x62,
+        0x3A, 0x45, 0xFF, 0x38, 0x43, 0xCE, 0xE8, 0xF8, 0x7C, 0xD1, 0x85, 0x5A,
+        0xDA, 0xA8, 0x1E, 0x2A, 0x07, 0x50, 0xB8, 0x0F, 0xDA, 0x23, 0x10,
+        /* order */
+        0x00, 0x00, 0x01, 0x00, 0x90, 0x51, 0x2D, 0xA9, 0xAF, 0x72, 0xB0, 0x83,
+        0x49, 0xD9, 0x8A, 0x5D, 0xD4, 0xC7, 0xB0, 0x53, 0x2E, 0xCA, 0x51, 0xCE,
+        0x03, 0xE2, 0xD1, 0x0F, 0x3B, 0x7A, 0xC5, 0x79, 0xBD, 0x87, 0xE9, 0x09,
+        0xAE, 0x40, 0xA6, 0xF1, 0x31, 0xE9, 0xCF, 0xCE, 0x5B, 0xD9, 0x67
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 54 * 6];
+} _EC_X9_62_CHAR2_431R1 = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 54, 0x2760
+    },
+    {
+        /* no seed */
+        /* p */
+        0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* a */
+        0x1A, 0x82, 0x7E, 0xF0, 0x0D, 0xD6, 0xFC, 0x0E, 0x23, 0x4C, 0xAF, 0x04,
+        0x6C, 0x6A, 0x5D, 0x8A, 0x85, 0x39, 0x5B, 0x23, 0x6C, 0xC4, 0xAD, 0x2C,
+        0xF3, 0x2A, 0x0C, 0xAD, 0xBD, 0xC9, 0xDD, 0xF6, 0x20, 0xB0, 0xEB, 0x99,
+        0x06, 0xD0, 0x95, 0x7F, 0x6C, 0x6F, 0xEA, 0xCD, 0x61, 0x54, 0x68, 0xDF,
+        0x10, 0x4D, 0xE2, 0x96, 0xCD, 0x8F,
+        /* b */
+        0x10, 0xD9, 0xB4, 0xA3, 0xD9, 0x04, 0x7D, 0x8B, 0x15, 0x43, 0x59, 0xAB,
+        0xFB, 0x1B, 0x7F, 0x54, 0x85, 0xB0, 0x4C, 0xEB, 0x86, 0x82, 0x37, 0xDD,
+        0xC9, 0xDE, 0xDA, 0x98, 0x2A, 0x67, 0x9A, 0x5A, 0x91, 0x9B, 0x62, 0x6D,
+        0x4E, 0x50, 0xA8, 0xDD, 0x73, 0x1B, 0x10, 0x7A, 0x99, 0x62, 0x38, 0x1F,
+        0xB5, 0xD8, 0x07, 0xBF, 0x26, 0x18,
+        /* x */
+        0x12, 0x0F, 0xC0, 0x5D, 0x3C, 0x67, 0xA9, 0x9D, 0xE1, 0x61, 0xD2, 0xF4,
+        0x09, 0x26, 0x22, 0xFE, 0xCA, 0x70, 0x1B, 0xE4, 0xF5, 0x0F, 0x47, 0x58,
+        0x71, 0x4E, 0x8A, 0x87, 0xBB, 0xF2, 0xA6, 0x58, 0xEF, 0x8C, 0x21, 0xE7,
+        0xC5, 0xEF, 0xE9, 0x65, 0x36, 0x1F, 0x6C, 0x29, 0x99, 0xC0, 0xC2, 0x47,
+        0xB0, 0xDB, 0xD7, 0x0C, 0xE6, 0xB7,
+        /* y */
+        0x20, 0xD0, 0xAF, 0x89, 0x03, 0xA9, 0x6F, 0x8D, 0x5F, 0xA2, 0xC2, 0x55,
+        0x74, 0x5D, 0x3C, 0x45, 0x1B, 0x30, 0x2C, 0x93, 0x46, 0xD9, 0xB7, 0xE4,
+        0x85, 0xE7, 0xBC, 0xE4, 0x1F, 0x6B, 0x59, 0x1F, 0x3E, 0x8F, 0x6A, 0xDD,
+        0xCB, 0xB0, 0xBC, 0x4C, 0x2F, 0x94, 0x7A, 0x7D, 0xE1, 0xA8, 0x9B, 0x62,
+        0x5D, 0x6A, 0x59, 0x8B, 0x37, 0x60,
+        /* order */
+        0x00, 0x03, 0x40, 0x34, 0x03, 0x40, 0x34, 0x03, 0x40, 0x34, 0x03, 0x40,
+        0x34, 0x03, 0x40, 0x34, 0x03, 0x40, 0x34, 0x03, 0x40, 0x34, 0x03, 0x40,
+        0x34, 0x03, 0x40, 0x34, 0x03, 0x23, 0xC3, 0x13, 0xFA, 0xB5, 0x05, 0x89,
+        0x70, 0x3B, 0x5E, 0xC6, 0x8D, 0x35, 0x87, 0xFE, 0xC6, 0x0D, 0x16, 0x1C,
+        0xC1, 0x49, 0xC1, 0xAD, 0x4A, 0x91
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 15 * 6];
+} _EC_WTLS_1 = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 15, 2
+    },
+    {
+        /* no seed */
+        /* p */
+        0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x02, 0x01,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x01,
+        /* b */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x01,
+        /* x */
+        0x01, 0x66, 0x79, 0x79, 0xA4, 0x0B, 0xA4, 0x97, 0xE5, 0xD5, 0xC2, 0x70,
+        0x78, 0x06, 0x17,
+        /* y */
+        0x00, 0xF4, 0x4B, 0x4A, 0xF1, 0xEC, 0xC2, 0x63, 0x0E, 0x08, 0x78, 0x5C,
+        0xEB, 0xCC, 0x15,
+        /* order */
+        0x00, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFD, 0xBF, 0x91, 0xAF,
+        0x6D, 0xEA, 0x73
+    }
+};
+
+/* IPSec curves */
+/*
+ * NOTE: The of curves over a extension field of non prime degree is not
+ * recommended (Weil-descent). As the group order is not a prime this curve
+ * is not suitable for ECDSA.
+ */
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 20 * 6];
+} _EC_IPSEC_155_ID3 = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 20, 3
+    },
+    {
+        /* no seed */
+        /* p */
+        0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x40, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        /* b */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x07, 0x33, 0x8f,
+        /* x */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x7b,
+        /* y */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0xc8,
+        /* order */
+        0x02, 0xAA, 0xAA, 0xAA, 0xAA, 0xAA, 0xAA, 0xAA, 0xAA, 0xAA, 0xC7, 0xF3,
+        0xC7, 0x88, 0x1B, 0xD0, 0x86, 0x8F, 0xA8, 0x6C
+    }
+};
+
+/*
+ * NOTE: The of curves over a extension field of non prime degree is not
+ * recommended (Weil-descent). As the group order is not a prime this curve
+ * is not suitable for ECDSA.
+ */
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 24 * 6];
+} _EC_IPSEC_185_ID4 = {
+    {
+        NID_X9_62_characteristic_two_field, 0, 24, 2
+    },
+    {
+        /* no seed */
+        /* p */
+        0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x20, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
+        /* a */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        /* b */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x1e, 0xe9,
+        /* x */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x18,
+        /* y */
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x0d,
+        /* order */
+        0x00, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+        0xED, 0xF9, 0x7C, 0x44, 0xDB, 0x9F, 0x24, 0x20, 0xBA, 0xFC, 0xA7, 0x5E
+    }
+};
+
+#endif
+
+/*
+ * These curves were added by Annie Yousar.
+ * For the definition of RFC 5639 curves see
+ * http://www.ietf.org/rfc/rfc5639.txt These curves are generated verifiable
+ * at random, nevertheless the seed is omitted as parameter because the
+ * generation mechanism is different from those defined in ANSI X9.62.
+ */
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 20 * 6];
+} _EC_brainpoolP160r1 = {
+    {
+        NID_X9_62_prime_field, 0, 20, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0xE9, 0x5E, 0x4A, 0x5F, 0x73, 0x70, 0x59, 0xDC, 0x60, 0xDF, 0xC7, 0xAD,
+        0x95, 0xB3, 0xD8, 0x13, 0x95, 0x15, 0x62, 0x0F,
+        /* a */
+        0x34, 0x0E, 0x7B, 0xE2, 0xA2, 0x80, 0xEB, 0x74, 0xE2, 0xBE, 0x61, 0xBA,
+        0xDA, 0x74, 0x5D, 0x97, 0xE8, 0xF7, 0xC3, 0x00,
+        /* b */
+        0x1E, 0x58, 0x9A, 0x85, 0x95, 0x42, 0x34, 0x12, 0x13, 0x4F, 0xAA, 0x2D,
+        0xBD, 0xEC, 0x95, 0xC8, 0xD8, 0x67, 0x5E, 0x58,
+        /* x */
+        0xBE, 0xD5, 0xAF, 0x16, 0xEA, 0x3F, 0x6A, 0x4F, 0x62, 0x93, 0x8C, 0x46,
+        0x31, 0xEB, 0x5A, 0xF7, 0xBD, 0xBC, 0xDB, 0xC3,
+        /* y */
+        0x16, 0x67, 0xCB, 0x47, 0x7A, 0x1A, 0x8E, 0xC3, 0x38, 0xF9, 0x47, 0x41,
+        0x66, 0x9C, 0x97, 0x63, 0x16, 0xDA, 0x63, 0x21,
+        /* order */
+        0xE9, 0x5E, 0x4A, 0x5F, 0x73, 0x70, 0x59, 0xDC, 0x60, 0xDF, 0x59, 0x91,
+        0xD4, 0x50, 0x29, 0x40, 0x9E, 0x60, 0xFC, 0x09
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 20 * 6];
+} _EC_brainpoolP160t1 = {
+    {
+        NID_X9_62_prime_field, 0, 20, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0xE9, 0x5E, 0x4A, 0x5F, 0x73, 0x70, 0x59, 0xDC, 0x60, 0xDF, 0xC7, 0xAD,
+        0x95, 0xB3, 0xD8, 0x13, 0x95, 0x15, 0x62, 0x0F,
+        /* a */
+        0xE9, 0x5E, 0x4A, 0x5F, 0x73, 0x70, 0x59, 0xDC, 0x60, 0xDF, 0xC7, 0xAD,
+        0x95, 0xB3, 0xD8, 0x13, 0x95, 0x15, 0x62, 0x0C,
+        /* b */
+        0x7A, 0x55, 0x6B, 0x6D, 0xAE, 0x53, 0x5B, 0x7B, 0x51, 0xED, 0x2C, 0x4D,
+        0x7D, 0xAA, 0x7A, 0x0B, 0x5C, 0x55, 0xF3, 0x80,
+        /* x */
+        0xB1, 0x99, 0xB1, 0x3B, 0x9B, 0x34, 0xEF, 0xC1, 0x39, 0x7E, 0x64, 0xBA,
+        0xEB, 0x05, 0xAC, 0xC2, 0x65, 0xFF, 0x23, 0x78,
+        /* y */
+        0xAD, 0xD6, 0x71, 0x8B, 0x7C, 0x7C, 0x19, 0x61, 0xF0, 0x99, 0x1B, 0x84,
+        0x24, 0x43, 0x77, 0x21, 0x52, 0xC9, 0xE0, 0xAD,
+        /* order */
+        0xE9, 0x5E, 0x4A, 0x5F, 0x73, 0x70, 0x59, 0xDC, 0x60, 0xDF, 0x59, 0x91,
+        0xD4, 0x50, 0x29, 0x40, 0x9E, 0x60, 0xFC, 0x09
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 24 * 6];
+} _EC_brainpoolP192r1 = {
+    {
+        NID_X9_62_prime_field, 0, 24, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0xC3, 0x02, 0xF4, 0x1D, 0x93, 0x2A, 0x36, 0xCD, 0xA7, 0xA3, 0x46, 0x30,
+        0x93, 0xD1, 0x8D, 0xB7, 0x8F, 0xCE, 0x47, 0x6D, 0xE1, 0xA8, 0x62, 0x97,
+        /* a */
+        0x6A, 0x91, 0x17, 0x40, 0x76, 0xB1, 0xE0, 0xE1, 0x9C, 0x39, 0xC0, 0x31,
+        0xFE, 0x86, 0x85, 0xC1, 0xCA, 0xE0, 0x40, 0xE5, 0xC6, 0x9A, 0x28, 0xEF,
+        /* b */
+        0x46, 0x9A, 0x28, 0xEF, 0x7C, 0x28, 0xCC, 0xA3, 0xDC, 0x72, 0x1D, 0x04,
+        0x4F, 0x44, 0x96, 0xBC, 0xCA, 0x7E, 0xF4, 0x14, 0x6F, 0xBF, 0x25, 0xC9,
+        /* x */
+        0xC0, 0xA0, 0x64, 0x7E, 0xAA, 0xB6, 0xA4, 0x87, 0x53, 0xB0, 0x33, 0xC5,
+        0x6C, 0xB0, 0xF0, 0x90, 0x0A, 0x2F, 0x5C, 0x48, 0x53, 0x37, 0x5F, 0xD6,
+        /* y */
+        0x14, 0xB6, 0x90, 0x86, 0x6A, 0xBD, 0x5B, 0xB8, 0x8B, 0x5F, 0x48, 0x28,
+        0xC1, 0x49, 0x00, 0x02, 0xE6, 0x77, 0x3F, 0xA2, 0xFA, 0x29, 0x9B, 0x8F,
+        /* order */
+        0xC3, 0x02, 0xF4, 0x1D, 0x93, 0x2A, 0x36, 0xCD, 0xA7, 0xA3, 0x46, 0x2F,
+        0x9E, 0x9E, 0x91, 0x6B, 0x5B, 0xE8, 0xF1, 0x02, 0x9A, 0xC4, 0xAC, 0xC1
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 24 * 6];
+} _EC_brainpoolP192t1 = {
+    {
+        NID_X9_62_prime_field, 0, 24, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0xC3, 0x02, 0xF4, 0x1D, 0x93, 0x2A, 0x36, 0xCD, 0xA7, 0xA3, 0x46, 0x30,
+        0x93, 0xD1, 0x8D, 0xB7, 0x8F, 0xCE, 0x47, 0x6D, 0xE1, 0xA8, 0x62, 0x97,
+        /* a */
+        0xC3, 0x02, 0xF4, 0x1D, 0x93, 0x2A, 0x36, 0xCD, 0xA7, 0xA3, 0x46, 0x30,
+        0x93, 0xD1, 0x8D, 0xB7, 0x8F, 0xCE, 0x47, 0x6D, 0xE1, 0xA8, 0x62, 0x94,
+        /* b */
+        0x13, 0xD5, 0x6F, 0xFA, 0xEC, 0x78, 0x68, 0x1E, 0x68, 0xF9, 0xDE, 0xB4,
+        0x3B, 0x35, 0xBE, 0xC2, 0xFB, 0x68, 0x54, 0x2E, 0x27, 0x89, 0x7B, 0x79,
+        /* x */
+        0x3A, 0xE9, 0xE5, 0x8C, 0x82, 0xF6, 0x3C, 0x30, 0x28, 0x2E, 0x1F, 0xE7,
+        0xBB, 0xF4, 0x3F, 0xA7, 0x2C, 0x44, 0x6A, 0xF6, 0xF4, 0x61, 0x81, 0x29,
+        /* y */
+        0x09, 0x7E, 0x2C, 0x56, 0x67, 0xC2, 0x22, 0x3A, 0x90, 0x2A, 0xB5, 0xCA,
+        0x44, 0x9D, 0x00, 0x84, 0xB7, 0xE5, 0xB3, 0xDE, 0x7C, 0xCC, 0x01, 0xC9,
+        /* order */
+        0xC3, 0x02, 0xF4, 0x1D, 0x93, 0x2A, 0x36, 0xCD, 0xA7, 0xA3, 0x46, 0x2F,
+        0x9E, 0x9E, 0x91, 0x6B, 0x5B, 0xE8, 0xF1, 0x02, 0x9A, 0xC4, 0xAC, 0xC1
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 28 * 6];
+} _EC_brainpoolP224r1 = {
+    {
+        NID_X9_62_prime_field, 0, 28, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0xD7, 0xC1, 0x34, 0xAA, 0x26, 0x43, 0x66, 0x86, 0x2A, 0x18, 0x30, 0x25,
+        0x75, 0xD1, 0xD7, 0x87, 0xB0, 0x9F, 0x07, 0x57, 0x97, 0xDA, 0x89, 0xF5,
+        0x7E, 0xC8, 0xC0, 0xFF,
+        /* a */
+        0x68, 0xA5, 0xE6, 0x2C, 0xA9, 0xCE, 0x6C, 0x1C, 0x29, 0x98, 0x03, 0xA6,
+        0xC1, 0x53, 0x0B, 0x51, 0x4E, 0x18, 0x2A, 0xD8, 0xB0, 0x04, 0x2A, 0x59,
+        0xCA, 0xD2, 0x9F, 0x43,
+        /* b */
+        0x25, 0x80, 0xF6, 0x3C, 0xCF, 0xE4, 0x41, 0x38, 0x87, 0x07, 0x13, 0xB1,
+        0xA9, 0x23, 0x69, 0xE3, 0x3E, 0x21, 0x35, 0xD2, 0x66, 0xDB, 0xB3, 0x72,
+        0x38, 0x6C, 0x40, 0x0B,
+        /* x */
+        0x0D, 0x90, 0x29, 0xAD, 0x2C, 0x7E, 0x5C, 0xF4, 0x34, 0x08, 0x23, 0xB2,
+        0xA8, 0x7D, 0xC6, 0x8C, 0x9E, 0x4C, 0xE3, 0x17, 0x4C, 0x1E, 0x6E, 0xFD,
+        0xEE, 0x12, 0xC0, 0x7D,
+        /* y */
+        0x58, 0xAA, 0x56, 0xF7, 0x72, 0xC0, 0x72, 0x6F, 0x24, 0xC6, 0xB8, 0x9E,
+        0x4E, 0xCD, 0xAC, 0x24, 0x35, 0x4B, 0x9E, 0x99, 0xCA, 0xA3, 0xF6, 0xD3,
+        0x76, 0x14, 0x02, 0xCD,
+        /* order */
+        0xD7, 0xC1, 0x34, 0xAA, 0x26, 0x43, 0x66, 0x86, 0x2A, 0x18, 0x30, 0x25,
+        0x75, 0xD0, 0xFB, 0x98, 0xD1, 0x16, 0xBC, 0x4B, 0x6D, 0xDE, 0xBC, 0xA3,
+        0xA5, 0xA7, 0x93, 0x9F
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 28 * 6];
+} _EC_brainpoolP224t1 = {
+    {
+        NID_X9_62_prime_field, 0, 28, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0xD7, 0xC1, 0x34, 0xAA, 0x26, 0x43, 0x66, 0x86, 0x2A, 0x18, 0x30, 0x25,
+        0x75, 0xD1, 0xD7, 0x87, 0xB0, 0x9F, 0x07, 0x57, 0x97, 0xDA, 0x89, 0xF5,
+        0x7E, 0xC8, 0xC0, 0xFF,
+        /* a */
+        0xD7, 0xC1, 0x34, 0xAA, 0x26, 0x43, 0x66, 0x86, 0x2A, 0x18, 0x30, 0x25,
+        0x75, 0xD1, 0xD7, 0x87, 0xB0, 0x9F, 0x07, 0x57, 0x97, 0xDA, 0x89, 0xF5,
+        0x7E, 0xC8, 0xC0, 0xFC,
+        /* b */
+        0x4B, 0x33, 0x7D, 0x93, 0x41, 0x04, 0xCD, 0x7B, 0xEF, 0x27, 0x1B, 0xF6,
+        0x0C, 0xED, 0x1E, 0xD2, 0x0D, 0xA1, 0x4C, 0x08, 0xB3, 0xBB, 0x64, 0xF1,
+        0x8A, 0x60, 0x88, 0x8D,
+        /* x */
+        0x6A, 0xB1, 0xE3, 0x44, 0xCE, 0x25, 0xFF, 0x38, 0x96, 0x42, 0x4E, 0x7F,
+        0xFE, 0x14, 0x76, 0x2E, 0xCB, 0x49, 0xF8, 0x92, 0x8A, 0xC0, 0xC7, 0x60,
+        0x29, 0xB4, 0xD5, 0x80,
+        /* y */
+        0x03, 0x74, 0xE9, 0xF5, 0x14, 0x3E, 0x56, 0x8C, 0xD2, 0x3F, 0x3F, 0x4D,
+        0x7C, 0x0D, 0x4B, 0x1E, 0x41, 0xC8, 0xCC, 0x0D, 0x1C, 0x6A, 0xBD, 0x5F,
+        0x1A, 0x46, 0xDB, 0x4C,
+        /* order */
+        0xD7, 0xC1, 0x34, 0xAA, 0x26, 0x43, 0x66, 0x86, 0x2A, 0x18, 0x30, 0x25,
+        0x75, 0xD0, 0xFB, 0x98, 0xD1, 0x16, 0xBC, 0x4B, 0x6D, 0xDE, 0xBC, 0xA3,
+        0xA5, 0xA7, 0x93, 0x9F
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 32 * 6];
+} _EC_brainpoolP256r1 = {
+    {
+        NID_X9_62_prime_field, 0, 32, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0xA9, 0xFB, 0x57, 0xDB, 0xA1, 0xEE, 0xA9, 0xBC, 0x3E, 0x66, 0x0A, 0x90,
+        0x9D, 0x83, 0x8D, 0x72, 0x6E, 0x3B, 0xF6, 0x23, 0xD5, 0x26, 0x20, 0x28,
+        0x20, 0x13, 0x48, 0x1D, 0x1F, 0x6E, 0x53, 0x77,
+        /* a */
+        0x7D, 0x5A, 0x09, 0x75, 0xFC, 0x2C, 0x30, 0x57, 0xEE, 0xF6, 0x75, 0x30,
+        0x41, 0x7A, 0xFF, 0xE7, 0xFB, 0x80, 0x55, 0xC1, 0x26, 0xDC, 0x5C, 0x6C,
+        0xE9, 0x4A, 0x4B, 0x44, 0xF3, 0x30, 0xB5, 0xD9,
+        /* b */
+        0x26, 0xDC, 0x5C, 0x6C, 0xE9, 0x4A, 0x4B, 0x44, 0xF3, 0x30, 0xB5, 0xD9,
+        0xBB, 0xD7, 0x7C, 0xBF, 0x95, 0x84, 0x16, 0x29, 0x5C, 0xF7, 0xE1, 0xCE,
+        0x6B, 0xCC, 0xDC, 0x18, 0xFF, 0x8C, 0x07, 0xB6,
+        /* x */
+        0x8B, 0xD2, 0xAE, 0xB9, 0xCB, 0x7E, 0x57, 0xCB, 0x2C, 0x4B, 0x48, 0x2F,
+        0xFC, 0x81, 0xB7, 0xAF, 0xB9, 0xDE, 0x27, 0xE1, 0xE3, 0xBD, 0x23, 0xC2,
+        0x3A, 0x44, 0x53, 0xBD, 0x9A, 0xCE, 0x32, 0x62,
+        /* y */
+        0x54, 0x7E, 0xF8, 0x35, 0xC3, 0xDA, 0xC4, 0xFD, 0x97, 0xF8, 0x46, 0x1A,
+        0x14, 0x61, 0x1D, 0xC9, 0xC2, 0x77, 0x45, 0x13, 0x2D, 0xED, 0x8E, 0x54,
+        0x5C, 0x1D, 0x54, 0xC7, 0x2F, 0x04, 0x69, 0x97,
+        /* order */
+        0xA9, 0xFB, 0x57, 0xDB, 0xA1, 0xEE, 0xA9, 0xBC, 0x3E, 0x66, 0x0A, 0x90,
+        0x9D, 0x83, 0x8D, 0x71, 0x8C, 0x39, 0x7A, 0xA3, 0xB5, 0x61, 0xA6, 0xF7,
+        0x90, 0x1E, 0x0E, 0x82, 0x97, 0x48, 0x56, 0xA7
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 32 * 6];
+} _EC_brainpoolP256t1 = {
+    {
+        NID_X9_62_prime_field, 0, 32, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0xA9, 0xFB, 0x57, 0xDB, 0xA1, 0xEE, 0xA9, 0xBC, 0x3E, 0x66, 0x0A, 0x90,
+        0x9D, 0x83, 0x8D, 0x72, 0x6E, 0x3B, 0xF6, 0x23, 0xD5, 0x26, 0x20, 0x28,
+        0x20, 0x13, 0x48, 0x1D, 0x1F, 0x6E, 0x53, 0x77,
+        /* a */
+        0xA9, 0xFB, 0x57, 0xDB, 0xA1, 0xEE, 0xA9, 0xBC, 0x3E, 0x66, 0x0A, 0x90,
+        0x9D, 0x83, 0x8D, 0x72, 0x6E, 0x3B, 0xF6, 0x23, 0xD5, 0x26, 0x20, 0x28,
+        0x20, 0x13, 0x48, 0x1D, 0x1F, 0x6E, 0x53, 0x74,
+        /* b */
+        0x66, 0x2C, 0x61, 0xC4, 0x30, 0xD8, 0x4E, 0xA4, 0xFE, 0x66, 0xA7, 0x73,
+        0x3D, 0x0B, 0x76, 0xB7, 0xBF, 0x93, 0xEB, 0xC4, 0xAF, 0x2F, 0x49, 0x25,
+        0x6A, 0xE5, 0x81, 0x01, 0xFE, 0xE9, 0x2B, 0x04,
+        /* x */
+        0xA3, 0xE8, 0xEB, 0x3C, 0xC1, 0xCF, 0xE7, 0xB7, 0x73, 0x22, 0x13, 0xB2,
+        0x3A, 0x65, 0x61, 0x49, 0xAF, 0xA1, 0x42, 0xC4, 0x7A, 0xAF, 0xBC, 0x2B,
+        0x79, 0xA1, 0x91, 0x56, 0x2E, 0x13, 0x05, 0xF4,
+        /* y */
+        0x2D, 0x99, 0x6C, 0x82, 0x34, 0x39, 0xC5, 0x6D, 0x7F, 0x7B, 0x22, 0xE1,
+        0x46, 0x44, 0x41, 0x7E, 0x69, 0xBC, 0xB6, 0xDE, 0x39, 0xD0, 0x27, 0x00,
+        0x1D, 0xAB, 0xE8, 0xF3, 0x5B, 0x25, 0xC9, 0xBE,
+        /* order */
+        0xA9, 0xFB, 0x57, 0xDB, 0xA1, 0xEE, 0xA9, 0xBC, 0x3E, 0x66, 0x0A, 0x90,
+        0x9D, 0x83, 0x8D, 0x71, 0x8C, 0x39, 0x7A, 0xA3, 0xB5, 0x61, 0xA6, 0xF7,
+        0x90, 0x1E, 0x0E, 0x82, 0x97, 0x48, 0x56, 0xA7
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 40 * 6];
+} _EC_brainpoolP320r1 = {
+    {
+        NID_X9_62_prime_field, 0, 40, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0xD3, 0x5E, 0x47, 0x20, 0x36, 0xBC, 0x4F, 0xB7, 0xE1, 0x3C, 0x78, 0x5E,
+        0xD2, 0x01, 0xE0, 0x65, 0xF9, 0x8F, 0xCF, 0xA6, 0xF6, 0xF4, 0x0D, 0xEF,
+        0x4F, 0x92, 0xB9, 0xEC, 0x78, 0x93, 0xEC, 0x28, 0xFC, 0xD4, 0x12, 0xB1,
+        0xF1, 0xB3, 0x2E, 0x27,
+        /* a */
+        0x3E, 0xE3, 0x0B, 0x56, 0x8F, 0xBA, 0xB0, 0xF8, 0x83, 0xCC, 0xEB, 0xD4,
+        0x6D, 0x3F, 0x3B, 0xB8, 0xA2, 0xA7, 0x35, 0x13, 0xF5, 0xEB, 0x79, 0xDA,
+        0x66, 0x19, 0x0E, 0xB0, 0x85, 0xFF, 0xA9, 0xF4, 0x92, 0xF3, 0x75, 0xA9,
+        0x7D, 0x86, 0x0E, 0xB4,
+        /* b */
+        0x52, 0x08, 0x83, 0x94, 0x9D, 0xFD, 0xBC, 0x42, 0xD3, 0xAD, 0x19, 0x86,
+        0x40, 0x68, 0x8A, 0x6F, 0xE1, 0x3F, 0x41, 0x34, 0x95, 0x54, 0xB4, 0x9A,
+        0xCC, 0x31, 0xDC, 0xCD, 0x88, 0x45, 0x39, 0x81, 0x6F, 0x5E, 0xB4, 0xAC,
+        0x8F, 0xB1, 0xF1, 0xA6,
+        /* x */
+        0x43, 0xBD, 0x7E, 0x9A, 0xFB, 0x53, 0xD8, 0xB8, 0x52, 0x89, 0xBC, 0xC4,
+        0x8E, 0xE5, 0xBF, 0xE6, 0xF2, 0x01, 0x37, 0xD1, 0x0A, 0x08, 0x7E, 0xB6,
+        0xE7, 0x87, 0x1E, 0x2A, 0x10, 0xA5, 0x99, 0xC7, 0x10, 0xAF, 0x8D, 0x0D,
+        0x39, 0xE2, 0x06, 0x11,
+        /* y */
+        0x14, 0xFD, 0xD0, 0x55, 0x45, 0xEC, 0x1C, 0xC8, 0xAB, 0x40, 0x93, 0x24,
+        0x7F, 0x77, 0x27, 0x5E, 0x07, 0x43, 0xFF, 0xED, 0x11, 0x71, 0x82, 0xEA,
+        0xA9, 0xC7, 0x78, 0x77, 0xAA, 0xAC, 0x6A, 0xC7, 0xD3, 0x52, 0x45, 0xD1,
+        0x69, 0x2E, 0x8E, 0xE1,
+        /* order */
+        0xD3, 0x5E, 0x47, 0x20, 0x36, 0xBC, 0x4F, 0xB7, 0xE1, 0x3C, 0x78, 0x5E,
+        0xD2, 0x01, 0xE0, 0x65, 0xF9, 0x8F, 0xCF, 0xA5, 0xB6, 0x8F, 0x12, 0xA3,
+        0x2D, 0x48, 0x2E, 0xC7, 0xEE, 0x86, 0x58, 0xE9, 0x86, 0x91, 0x55, 0x5B,
+        0x44, 0xC5, 0x93, 0x11
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 40 * 6];
+} _EC_brainpoolP320t1 = {
+    {
+        NID_X9_62_prime_field, 0, 40, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0xD3, 0x5E, 0x47, 0x20, 0x36, 0xBC, 0x4F, 0xB7, 0xE1, 0x3C, 0x78, 0x5E,
+        0xD2, 0x01, 0xE0, 0x65, 0xF9, 0x8F, 0xCF, 0xA6, 0xF6, 0xF4, 0x0D, 0xEF,
+        0x4F, 0x92, 0xB9, 0xEC, 0x78, 0x93, 0xEC, 0x28, 0xFC, 0xD4, 0x12, 0xB1,
+        0xF1, 0xB3, 0x2E, 0x27,
+        /* a */
+        0xD3, 0x5E, 0x47, 0x20, 0x36, 0xBC, 0x4F, 0xB7, 0xE1, 0x3C, 0x78, 0x5E,
+        0xD2, 0x01, 0xE0, 0x65, 0xF9, 0x8F, 0xCF, 0xA6, 0xF6, 0xF4, 0x0D, 0xEF,
+        0x4F, 0x92, 0xB9, 0xEC, 0x78, 0x93, 0xEC, 0x28, 0xFC, 0xD4, 0x12, 0xB1,
+        0xF1, 0xB3, 0x2E, 0x24,
+        /* b */
+        0xA7, 0xF5, 0x61, 0xE0, 0x38, 0xEB, 0x1E, 0xD5, 0x60, 0xB3, 0xD1, 0x47,
+        0xDB, 0x78, 0x20, 0x13, 0x06, 0x4C, 0x19, 0xF2, 0x7E, 0xD2, 0x7C, 0x67,
+        0x80, 0xAA, 0xF7, 0x7F, 0xB8, 0xA5, 0x47, 0xCE, 0xB5, 0xB4, 0xFE, 0xF4,
+        0x22, 0x34, 0x03, 0x53,
+        /* x */
+        0x92, 0x5B, 0xE9, 0xFB, 0x01, 0xAF, 0xC6, 0xFB, 0x4D, 0x3E, 0x7D, 0x49,
+        0x90, 0x01, 0x0F, 0x81, 0x34, 0x08, 0xAB, 0x10, 0x6C, 0x4F, 0x09, 0xCB,
+        0x7E, 0xE0, 0x78, 0x68, 0xCC, 0x13, 0x6F, 0xFF, 0x33, 0x57, 0xF6, 0x24,
+        0xA2, 0x1B, 0xED, 0x52,
+        /* y */
+        0x63, 0xBA, 0x3A, 0x7A, 0x27, 0x48, 0x3E, 0xBF, 0x66, 0x71, 0xDB, 0xEF,
+        0x7A, 0xBB, 0x30, 0xEB, 0xEE, 0x08, 0x4E, 0x58, 0xA0, 0xB0, 0x77, 0xAD,
+        0x42, 0xA5, 0xA0, 0x98, 0x9D, 0x1E, 0xE7, 0x1B, 0x1B, 0x9B, 0xC0, 0x45,
+        0x5F, 0xB0, 0xD2, 0xC3,
+        /* order */
+        0xD3, 0x5E, 0x47, 0x20, 0x36, 0xBC, 0x4F, 0xB7, 0xE1, 0x3C, 0x78, 0x5E,
+        0xD2, 0x01, 0xE0, 0x65, 0xF9, 0x8F, 0xCF, 0xA5, 0xB6, 0x8F, 0x12, 0xA3,
+        0x2D, 0x48, 0x2E, 0xC7, 0xEE, 0x86, 0x58, 0xE9, 0x86, 0x91, 0x55, 0x5B,
+        0x44, 0xC5, 0x93, 0x11
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 48 * 6];
+} _EC_brainpoolP384r1 = {
+    {
+        NID_X9_62_prime_field, 0, 48, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0x8C, 0xB9, 0x1E, 0x82, 0xA3, 0x38, 0x6D, 0x28, 0x0F, 0x5D, 0x6F, 0x7E,
+        0x50, 0xE6, 0x41, 0xDF, 0x15, 0x2F, 0x71, 0x09, 0xED, 0x54, 0x56, 0xB4,
+        0x12, 0xB1, 0xDA, 0x19, 0x7F, 0xB7, 0x11, 0x23, 0xAC, 0xD3, 0xA7, 0x29,
+        0x90, 0x1D, 0x1A, 0x71, 0x87, 0x47, 0x00, 0x13, 0x31, 0x07, 0xEC, 0x53,
+        /* a */
+        0x7B, 0xC3, 0x82, 0xC6, 0x3D, 0x8C, 0x15, 0x0C, 0x3C, 0x72, 0x08, 0x0A,
+        0xCE, 0x05, 0xAF, 0xA0, 0xC2, 0xBE, 0xA2, 0x8E, 0x4F, 0xB2, 0x27, 0x87,
+        0x13, 0x91, 0x65, 0xEF, 0xBA, 0x91, 0xF9, 0x0F, 0x8A, 0xA5, 0x81, 0x4A,
+        0x50, 0x3A, 0xD4, 0xEB, 0x04, 0xA8, 0xC7, 0xDD, 0x22, 0xCE, 0x28, 0x26,
+        /* b */
+        0x04, 0xA8, 0xC7, 0xDD, 0x22, 0xCE, 0x28, 0x26, 0x8B, 0x39, 0xB5, 0x54,
+        0x16, 0xF0, 0x44, 0x7C, 0x2F, 0xB7, 0x7D, 0xE1, 0x07, 0xDC, 0xD2, 0xA6,
+        0x2E, 0x88, 0x0E, 0xA5, 0x3E, 0xEB, 0x62, 0xD5, 0x7C, 0xB4, 0x39, 0x02,
+        0x95, 0xDB, 0xC9, 0x94, 0x3A, 0xB7, 0x86, 0x96, 0xFA, 0x50, 0x4C, 0x11,
+        /* x */
+        0x1D, 0x1C, 0x64, 0xF0, 0x68, 0xCF, 0x45, 0xFF, 0xA2, 0xA6, 0x3A, 0x81,
+        0xB7, 0xC1, 0x3F, 0x6B, 0x88, 0x47, 0xA3, 0xE7, 0x7E, 0xF1, 0x4F, 0xE3,
+        0xDB, 0x7F, 0xCA, 0xFE, 0x0C, 0xBD, 0x10, 0xE8, 0xE8, 0x26, 0xE0, 0x34,
+        0x36, 0xD6, 0x46, 0xAA, 0xEF, 0x87, 0xB2, 0xE2, 0x47, 0xD4, 0xAF, 0x1E,
+        /* y */
+        0x8A, 0xBE, 0x1D, 0x75, 0x20, 0xF9, 0xC2, 0xA4, 0x5C, 0xB1, 0xEB, 0x8E,
+        0x95, 0xCF, 0xD5, 0x52, 0x62, 0xB7, 0x0B, 0x29, 0xFE, 0xEC, 0x58, 0x64,
+        0xE1, 0x9C, 0x05, 0x4F, 0xF9, 0x91, 0x29, 0x28, 0x0E, 0x46, 0x46, 0x21,
+        0x77, 0x91, 0x81, 0x11, 0x42, 0x82, 0x03, 0x41, 0x26, 0x3C, 0x53, 0x15,
+        /* order */
+        0x8C, 0xB9, 0x1E, 0x82, 0xA3, 0x38, 0x6D, 0x28, 0x0F, 0x5D, 0x6F, 0x7E,
+        0x50, 0xE6, 0x41, 0xDF, 0x15, 0x2F, 0x71, 0x09, 0xED, 0x54, 0x56, 0xB3,
+        0x1F, 0x16, 0x6E, 0x6C, 0xAC, 0x04, 0x25, 0xA7, 0xCF, 0x3A, 0xB6, 0xAF,
+        0x6B, 0x7F, 0xC3, 0x10, 0x3B, 0x88, 0x32, 0x02, 0xE9, 0x04, 0x65, 0x65
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 48 * 6];
+} _EC_brainpoolP384t1 = {
+    {
+        NID_X9_62_prime_field, 0, 48, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0x8C, 0xB9, 0x1E, 0x82, 0xA3, 0x38, 0x6D, 0x28, 0x0F, 0x5D, 0x6F, 0x7E,
+        0x50, 0xE6, 0x41, 0xDF, 0x15, 0x2F, 0x71, 0x09, 0xED, 0x54, 0x56, 0xB4,
+        0x12, 0xB1, 0xDA, 0x19, 0x7F, 0xB7, 0x11, 0x23, 0xAC, 0xD3, 0xA7, 0x29,
+        0x90, 0x1D, 0x1A, 0x71, 0x87, 0x47, 0x00, 0x13, 0x31, 0x07, 0xEC, 0x53,
+        /* a */
+        0x8C, 0xB9, 0x1E, 0x82, 0xA3, 0x38, 0x6D, 0x28, 0x0F, 0x5D, 0x6F, 0x7E,
+        0x50, 0xE6, 0x41, 0xDF, 0x15, 0x2F, 0x71, 0x09, 0xED, 0x54, 0x56, 0xB4,
+        0x12, 0xB1, 0xDA, 0x19, 0x7F, 0xB7, 0x11, 0x23, 0xAC, 0xD3, 0xA7, 0x29,
+        0x90, 0x1D, 0x1A, 0x71, 0x87, 0x47, 0x00, 0x13, 0x31, 0x07, 0xEC, 0x50,
+        /* b */
+        0x7F, 0x51, 0x9E, 0xAD, 0xA7, 0xBD, 0xA8, 0x1B, 0xD8, 0x26, 0xDB, 0xA6,
+        0x47, 0x91, 0x0F, 0x8C, 0x4B, 0x93, 0x46, 0xED, 0x8C, 0xCD, 0xC6, 0x4E,
+        0x4B, 0x1A, 0xBD, 0x11, 0x75, 0x6D, 0xCE, 0x1D, 0x20, 0x74, 0xAA, 0x26,
+        0x3B, 0x88, 0x80, 0x5C, 0xED, 0x70, 0x35, 0x5A, 0x33, 0xB4, 0x71, 0xEE,
+        /* x */
+        0x18, 0xDE, 0x98, 0xB0, 0x2D, 0xB9, 0xA3, 0x06, 0xF2, 0xAF, 0xCD, 0x72,
+        0x35, 0xF7, 0x2A, 0x81, 0x9B, 0x80, 0xAB, 0x12, 0xEB, 0xD6, 0x53, 0x17,
+        0x24, 0x76, 0xFE, 0xCD, 0x46, 0x2A, 0xAB, 0xFF, 0xC4, 0xFF, 0x19, 0x1B,
+        0x94, 0x6A, 0x5F, 0x54, 0xD8, 0xD0, 0xAA, 0x2F, 0x41, 0x88, 0x08, 0xCC,
+        /* y */
+        0x25, 0xAB, 0x05, 0x69, 0x62, 0xD3, 0x06, 0x51, 0xA1, 0x14, 0xAF, 0xD2,
+        0x75, 0x5A, 0xD3, 0x36, 0x74, 0x7F, 0x93, 0x47, 0x5B, 0x7A, 0x1F, 0xCA,
+        0x3B, 0x88, 0xF2, 0xB6, 0xA2, 0x08, 0xCC, 0xFE, 0x46, 0x94, 0x08, 0x58,
+        0x4D, 0xC2, 0xB2, 0x91, 0x26, 0x75, 0xBF, 0x5B, 0x9E, 0x58, 0x29, 0x28,
+        /* order */
+        0x8C, 0xB9, 0x1E, 0x82, 0xA3, 0x38, 0x6D, 0x28, 0x0F, 0x5D, 0x6F, 0x7E,
+        0x50, 0xE6, 0x41, 0xDF, 0x15, 0x2F, 0x71, 0x09, 0xED, 0x54, 0x56, 0xB3,
+        0x1F, 0x16, 0x6E, 0x6C, 0xAC, 0x04, 0x25, 0xA7, 0xCF, 0x3A, 0xB6, 0xAF,
+        0x6B, 0x7F, 0xC3, 0x10, 0x3B, 0x88, 0x32, 0x02, 0xE9, 0x04, 0x65, 0x65
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 64 * 6];
+} _EC_brainpoolP512r1 = {
+    {
+        NID_X9_62_prime_field, 0, 64, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0xAA, 0xDD, 0x9D, 0xB8, 0xDB, 0xE9, 0xC4, 0x8B, 0x3F, 0xD4, 0xE6, 0xAE,
+        0x33, 0xC9, 0xFC, 0x07, 0xCB, 0x30, 0x8D, 0xB3, 0xB3, 0xC9, 0xD2, 0x0E,
+        0xD6, 0x63, 0x9C, 0xCA, 0x70, 0x33, 0x08, 0x71, 0x7D, 0x4D, 0x9B, 0x00,
+        0x9B, 0xC6, 0x68, 0x42, 0xAE, 0xCD, 0xA1, 0x2A, 0xE6, 0xA3, 0x80, 0xE6,
+        0x28, 0x81, 0xFF, 0x2F, 0x2D, 0x82, 0xC6, 0x85, 0x28, 0xAA, 0x60, 0x56,
+        0x58, 0x3A, 0x48, 0xF3,
+        /* a */
+        0x78, 0x30, 0xA3, 0x31, 0x8B, 0x60, 0x3B, 0x89, 0xE2, 0x32, 0x71, 0x45,
+        0xAC, 0x23, 0x4C, 0xC5, 0x94, 0xCB, 0xDD, 0x8D, 0x3D, 0xF9, 0x16, 0x10,
+        0xA8, 0x34, 0x41, 0xCA, 0xEA, 0x98, 0x63, 0xBC, 0x2D, 0xED, 0x5D, 0x5A,
+        0xA8, 0x25, 0x3A, 0xA1, 0x0A, 0x2E, 0xF1, 0xC9, 0x8B, 0x9A, 0xC8, 0xB5,
+        0x7F, 0x11, 0x17, 0xA7, 0x2B, 0xF2, 0xC7, 0xB9, 0xE7, 0xC1, 0xAC, 0x4D,
+        0x77, 0xFC, 0x94, 0xCA,
+        /* b */
+        0x3D, 0xF9, 0x16, 0x10, 0xA8, 0x34, 0x41, 0xCA, 0xEA, 0x98, 0x63, 0xBC,
+        0x2D, 0xED, 0x5D, 0x5A, 0xA8, 0x25, 0x3A, 0xA1, 0x0A, 0x2E, 0xF1, 0xC9,
+        0x8B, 0x9A, 0xC8, 0xB5, 0x7F, 0x11, 0x17, 0xA7, 0x2B, 0xF2, 0xC7, 0xB9,
+        0xE7, 0xC1, 0xAC, 0x4D, 0x77, 0xFC, 0x94, 0xCA, 0xDC, 0x08, 0x3E, 0x67,
+        0x98, 0x40, 0x50, 0xB7, 0x5E, 0xBA, 0xE5, 0xDD, 0x28, 0x09, 0xBD, 0x63,
+        0x80, 0x16, 0xF7, 0x23,
+        /* x */
+        0x81, 0xAE, 0xE4, 0xBD, 0xD8, 0x2E, 0xD9, 0x64, 0x5A, 0x21, 0x32, 0x2E,
+        0x9C, 0x4C, 0x6A, 0x93, 0x85, 0xED, 0x9F, 0x70, 0xB5, 0xD9, 0x16, 0xC1,
+        0xB4, 0x3B, 0x62, 0xEE, 0xF4, 0xD0, 0x09, 0x8E, 0xFF, 0x3B, 0x1F, 0x78,
+        0xE2, 0xD0, 0xD4, 0x8D, 0x50, 0xD1, 0x68, 0x7B, 0x93, 0xB9, 0x7D, 0x5F,
+        0x7C, 0x6D, 0x50, 0x47, 0x40, 0x6A, 0x5E, 0x68, 0x8B, 0x35, 0x22, 0x09,
+        0xBC, 0xB9, 0xF8, 0x22,
+        /* y */
+        0x7D, 0xDE, 0x38, 0x5D, 0x56, 0x63, 0x32, 0xEC, 0xC0, 0xEA, 0xBF, 0xA9,
+        0xCF, 0x78, 0x22, 0xFD, 0xF2, 0x09, 0xF7, 0x00, 0x24, 0xA5, 0x7B, 0x1A,
+        0xA0, 0x00, 0xC5, 0x5B, 0x88, 0x1F, 0x81, 0x11, 0xB2, 0xDC, 0xDE, 0x49,
+        0x4A, 0x5F, 0x48, 0x5E, 0x5B, 0xCA, 0x4B, 0xD8, 0x8A, 0x27, 0x63, 0xAE,
+        0xD1, 0xCA, 0x2B, 0x2F, 0xA8, 0xF0, 0x54, 0x06, 0x78, 0xCD, 0x1E, 0x0F,
+        0x3A, 0xD8, 0x08, 0x92,
+        /* order */
+        0xAA, 0xDD, 0x9D, 0xB8, 0xDB, 0xE9, 0xC4, 0x8B, 0x3F, 0xD4, 0xE6, 0xAE,
+        0x33, 0xC9, 0xFC, 0x07, 0xCB, 0x30, 0x8D, 0xB3, 0xB3, 0xC9, 0xD2, 0x0E,
+        0xD6, 0x63, 0x9C, 0xCA, 0x70, 0x33, 0x08, 0x70, 0x55, 0x3E, 0x5C, 0x41,
+        0x4C, 0xA9, 0x26, 0x19, 0x41, 0x86, 0x61, 0x19, 0x7F, 0xAC, 0x10, 0x47,
+        0x1D, 0xB1, 0xD3, 0x81, 0x08, 0x5D, 0xDA, 0xDD, 0xB5, 0x87, 0x96, 0x82,
+        0x9C, 0xA9, 0x00, 0x69
+    }
+};
+
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 64 * 6];
+} _EC_brainpoolP512t1 = {
+    {
+        NID_X9_62_prime_field, 0, 64, 1
+    },
+    {
+        /* no seed */
+        /* p */
+        0xAA, 0xDD, 0x9D, 0xB8, 0xDB, 0xE9, 0xC4, 0x8B, 0x3F, 0xD4, 0xE6, 0xAE,
+        0x33, 0xC9, 0xFC, 0x07, 0xCB, 0x30, 0x8D, 0xB3, 0xB3, 0xC9, 0xD2, 0x0E,
+        0xD6, 0x63, 0x9C, 0xCA, 0x70, 0x33, 0x08, 0x71, 0x7D, 0x4D, 0x9B, 0x00,
+        0x9B, 0xC6, 0x68, 0x42, 0xAE, 0xCD, 0xA1, 0x2A, 0xE6, 0xA3, 0x80, 0xE6,
+        0x28, 0x81, 0xFF, 0x2F, 0x2D, 0x82, 0xC6, 0x85, 0x28, 0xAA, 0x60, 0x56,
+        0x58, 0x3A, 0x48, 0xF3,
+        /* a */
+        0xAA, 0xDD, 0x9D, 0xB8, 0xDB, 0xE9, 0xC4, 0x8B, 0x3F, 0xD4, 0xE6, 0xAE,
+        0x33, 0xC9, 0xFC, 0x07, 0xCB, 0x30, 0x8D, 0xB3, 0xB3, 0xC9, 0xD2, 0x0E,
+        0xD6, 0x63, 0x9C, 0xCA, 0x70, 0x33, 0x08, 0x71, 0x7D, 0x4D, 0x9B, 0x00,
+        0x9B, 0xC6, 0x68, 0x42, 0xAE, 0xCD, 0xA1, 0x2A, 0xE6, 0xA3, 0x80, 0xE6,
+        0x28, 0x81, 0xFF, 0x2F, 0x2D, 0x82, 0xC6, 0x85, 0x28, 0xAA, 0x60, 0x56,
+        0x58, 0x3A, 0x48, 0xF0,
+        /* b */
+        0x7C, 0xBB, 0xBC, 0xF9, 0x44, 0x1C, 0xFA, 0xB7, 0x6E, 0x18, 0x90, 0xE4,
+        0x68, 0x84, 0xEA, 0xE3, 0x21, 0xF7, 0x0C, 0x0B, 0xCB, 0x49, 0x81, 0x52,
+        0x78, 0x97, 0x50, 0x4B, 0xEC, 0x3E, 0x36, 0xA6, 0x2B, 0xCD, 0xFA, 0x23,
+        0x04, 0x97, 0x65, 0x40, 0xF6, 0x45, 0x00, 0x85, 0xF2, 0xDA, 0xE1, 0x45,
+        0xC2, 0x25, 0x53, 0xB4, 0x65, 0x76, 0x36, 0x89, 0x18, 0x0E, 0xA2, 0x57,
+        0x18, 0x67, 0x42, 0x3E,
+        /* x */
+        0x64, 0x0E, 0xCE, 0x5C, 0x12, 0x78, 0x87, 0x17, 0xB9, 0xC1, 0xBA, 0x06,
+        0xCB, 0xC2, 0xA6, 0xFE, 0xBA, 0x85, 0x84, 0x24, 0x58, 0xC5, 0x6D, 0xDE,
+        0x9D, 0xB1, 0x75, 0x8D, 0x39, 0xC0, 0x31, 0x3D, 0x82, 0xBA, 0x51, 0x73,
+        0x5C, 0xDB, 0x3E, 0xA4, 0x99, 0xAA, 0x77, 0xA7, 0xD6, 0x94, 0x3A, 0x64,
+        0xF7, 0xA3, 0xF2, 0x5F, 0xE2, 0x6F, 0x06, 0xB5, 0x1B, 0xAA, 0x26, 0x96,
+        0xFA, 0x90, 0x35, 0xDA,
+        /* y */
+        0x5B, 0x53, 0x4B, 0xD5, 0x95, 0xF5, 0xAF, 0x0F, 0xA2, 0xC8, 0x92, 0x37,
+        0x6C, 0x84, 0xAC, 0xE1, 0xBB, 0x4E, 0x30, 0x19, 0xB7, 0x16, 0x34, 0xC0,
+        0x11, 0x31, 0x15, 0x9C, 0xAE, 0x03, 0xCE, 0xE9, 0xD9, 0x93, 0x21, 0x84,
+        0xBE, 0xEF, 0x21, 0x6B, 0xD7, 0x1D, 0xF2, 0xDA, 0xDF, 0x86, 0xA6, 0x27,
+        0x30, 0x6E, 0xCF, 0xF9, 0x6D, 0xBB, 0x8B, 0xAC, 0xE1, 0x98, 0xB6, 0x1E,
+        0x00, 0xF8, 0xB3, 0x32,
+        /* order */
+        0xAA, 0xDD, 0x9D, 0xB8, 0xDB, 0xE9, 0xC4, 0x8B, 0x3F, 0xD4, 0xE6, 0xAE,
+        0x33, 0xC9, 0xFC, 0x07, 0xCB, 0x30, 0x8D, 0xB3, 0xB3, 0xC9, 0xD2, 0x0E,
+        0xD6, 0x63, 0x9C, 0xCA, 0x70, 0x33, 0x08, 0x70, 0x55, 0x3E, 0x5C, 0x41,
+        0x4C, 0xA9, 0x26, 0x19, 0x41, 0x86, 0x61, 0x19, 0x7F, 0xAC, 0x10, 0x47,
+        0x1D, 0xB1, 0xD3, 0x81, 0x08, 0x5D, 0xDA, 0xDD, 0xB5, 0x87, 0x96, 0x82,
+        0x9C, 0xA9, 0x00, 0x69
+    }
+};
+
+#ifndef OPENSSL_NO_SM2
+static const struct {
+    EC_CURVE_DATA h;
+    unsigned char data[0 + 32 * 6];
+} _EC_sm2p256v1 = {
+    {
+       NID_X9_62_prime_field, 0, 32, 1
+    },
+    {
+        /* no seed */
+
+        /* p */
+        0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+        0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00,
+        0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+        /* a */
+        0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+        0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00,
+        0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfc,
+        /* b */
+        0x28, 0xe9, 0xfa, 0x9e, 0x9d, 0x9f, 0x5e, 0x34, 0x4d, 0x5a, 0x9e, 0x4b,
+        0xcf, 0x65, 0x09, 0xa7, 0xf3, 0x97, 0x89, 0xf5, 0x15, 0xab, 0x8f, 0x92,
+        0xdd, 0xbc, 0xbd, 0x41, 0x4d, 0x94, 0x0e, 0x93,
+        /* x */
+        0x32, 0xc4, 0xae, 0x2c, 0x1f, 0x19, 0x81, 0x19, 0x5f, 0x99, 0x04, 0x46,
+        0x6a, 0x39, 0xc9, 0x94, 0x8f, 0xe3, 0x0b, 0xbf, 0xf2, 0x66, 0x0b, 0xe1,
+        0x71, 0x5a, 0x45, 0x89, 0x33, 0x4c, 0x74, 0xc7,
+        /* y */
+        0xbc, 0x37, 0x36, 0xa2, 0xf4, 0xf6, 0x77, 0x9c, 0x59, 0xbd, 0xce, 0xe3,
+        0x6b, 0x69, 0x21, 0x53, 0xd0, 0xa9, 0x87, 0x7c, 0xc6, 0x2a, 0x47, 0x40,
+        0x02, 0xdf, 0x32, 0xe5, 0x21, 0x39, 0xf0, 0xa0,
+        /* order */
+        0xff, 0xff, 0xff, 0xfe, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+        0xff, 0xff, 0xff, 0xff, 0x72, 0x03, 0xdf, 0x6b, 0x21, 0xc6, 0x05, 0x2b,
+        0x53, 0xbb, 0xf4, 0x09, 0x39, 0xd5, 0x41, 0x23,
+    }
+};
+#endif /* OPENSSL_NO_SM2 */
+
+typedef struct _ec_list_element_st {
+    int nid;
+    const EC_CURVE_DATA *data;
+    const EC_METHOD *(*meth) (void);
+    const char *comment;
+} ec_list_element;
+
+static const ec_list_element curve_list[] = {
+    /* prime field curves */
+    /* secg curves */
+    {NID_secp112r1, &_EC_SECG_PRIME_112R1.h, 0,
+     "SECG/WTLS curve over a 112 bit prime field"},
+    {NID_secp112r2, &_EC_SECG_PRIME_112R2.h, 0,
+     "SECG curve over a 112 bit prime field"},
+    {NID_secp128r1, &_EC_SECG_PRIME_128R1.h, 0,
+     "SECG curve over a 128 bit prime field"},
+    {NID_secp128r2, &_EC_SECG_PRIME_128R2.h, 0,
+     "SECG curve over a 128 bit prime field"},
+    {NID_secp160k1, &_EC_SECG_PRIME_160K1.h, 0,
+     "SECG curve over a 160 bit prime field"},
+    {NID_secp160r1, &_EC_SECG_PRIME_160R1.h, 0,
+     "SECG curve over a 160 bit prime field"},
+    {NID_secp160r2, &_EC_SECG_PRIME_160R2.h, 0,
+     "SECG/WTLS curve over a 160 bit prime field"},
+    /* SECG secp192r1 is the same as X9.62 prime192v1 and hence omitted */
+    {NID_secp192k1, &_EC_SECG_PRIME_192K1.h, 0,
+     "SECG curve over a 192 bit prime field"},
+    {NID_secp224k1, &_EC_SECG_PRIME_224K1.h, 0,
+     "SECG curve over a 224 bit prime field"},
+#ifndef OPENSSL_NO_EC_NISTP_64_GCC_128
+    {NID_secp224r1, &_EC_NIST_PRIME_224.h, EC_GFp_nistp224_method,
+     "NIST/SECG curve over a 224 bit prime field"},
+#else
+    {NID_secp224r1, &_EC_NIST_PRIME_224.h, 0,
+     "NIST/SECG curve over a 224 bit prime field"},
+#endif
+    {NID_secp256k1, &_EC_SECG_PRIME_256K1.h, 0,
+     "SECG curve over a 256 bit prime field"},
+    /* SECG secp256r1 is the same as X9.62 prime256v1 and hence omitted */
+    {NID_secp384r1, &_EC_NIST_PRIME_384.h, 0,
+     "NIST/SECG curve over a 384 bit prime field"},
+#ifndef OPENSSL_NO_EC_NISTP_64_GCC_128
+    {NID_secp521r1, &_EC_NIST_PRIME_521.h, EC_GFp_nistp521_method,
+     "NIST/SECG curve over a 521 bit prime field"},
+#else
+    {NID_secp521r1, &_EC_NIST_PRIME_521.h, 0,
+     "NIST/SECG curve over a 521 bit prime field"},
+#endif
+    /* X9.62 curves */
+    {NID_X9_62_prime192v1, &_EC_NIST_PRIME_192.h, 0,
+     "NIST/X9.62/SECG curve over a 192 bit prime field"},
+    {NID_X9_62_prime192v2, &_EC_X9_62_PRIME_192V2.h, 0,
+     "X9.62 curve over a 192 bit prime field"},
+    {NID_X9_62_prime192v3, &_EC_X9_62_PRIME_192V3.h, 0,
+     "X9.62 curve over a 192 bit prime field"},
+    {NID_X9_62_prime239v1, &_EC_X9_62_PRIME_239V1.h, 0,
+     "X9.62 curve over a 239 bit prime field"},
+    {NID_X9_62_prime239v2, &_EC_X9_62_PRIME_239V2.h, 0,
+     "X9.62 curve over a 239 bit prime field"},
+    {NID_X9_62_prime239v3, &_EC_X9_62_PRIME_239V3.h, 0,
+     "X9.62 curve over a 239 bit prime field"},
+    {NID_X9_62_prime256v1, &_EC_X9_62_PRIME_256V1.h,
+#if defined(ECP_NISTZ256_ASM)
+     EC_GFp_nistz256_method,
+#elif !defined(OPENSSL_NO_EC_NISTP_64_GCC_128)
+     EC_GFp_nistp256_method,
+#else
+     0,
+#endif
+     "X9.62/SECG curve over a 256 bit prime field"},
+#ifndef OPENSSL_NO_EC2M
+    /* characteristic two field curves */
+    /* NIST/SECG curves */
+    {NID_sect113r1, &_EC_SECG_CHAR2_113R1.h, 0,
+     "SECG curve over a 113 bit binary field"},
+    {NID_sect113r2, &_EC_SECG_CHAR2_113R2.h, 0,
+     "SECG curve over a 113 bit binary field"},
+    {NID_sect131r1, &_EC_SECG_CHAR2_131R1.h, 0,
+     "SECG/WTLS curve over a 131 bit binary field"},
+    {NID_sect131r2, &_EC_SECG_CHAR2_131R2.h, 0,
+     "SECG curve over a 131 bit binary field"},
+    {NID_sect163k1, &_EC_NIST_CHAR2_163K.h, 0,
+     "NIST/SECG/WTLS curve over a 163 bit binary field"},
+    {NID_sect163r1, &_EC_SECG_CHAR2_163R1.h, 0,
+     "SECG curve over a 163 bit binary field"},
+    {NID_sect163r2, &_EC_NIST_CHAR2_163B.h, 0,
+     "NIST/SECG curve over a 163 bit binary field"},
+    {NID_sect193r1, &_EC_SECG_CHAR2_193R1.h, 0,
+     "SECG curve over a 193 bit binary field"},
+    {NID_sect193r2, &_EC_SECG_CHAR2_193R2.h, 0,
+     "SECG curve over a 193 bit binary field"},
+    {NID_sect233k1, &_EC_NIST_CHAR2_233K.h, 0,
+     "NIST/SECG/WTLS curve over a 233 bit binary field"},
+    {NID_sect233r1, &_EC_NIST_CHAR2_233B.h, 0,
+     "NIST/SECG/WTLS curve over a 233 bit binary field"},
+    {NID_sect239k1, &_EC_SECG_CHAR2_239K1.h, 0,
+     "SECG curve over a 239 bit binary field"},
+    {NID_sect283k1, &_EC_NIST_CHAR2_283K.h, 0,
+     "NIST/SECG curve over a 283 bit binary field"},
+    {NID_sect283r1, &_EC_NIST_CHAR2_283B.h, 0,
+     "NIST/SECG curve over a 283 bit binary field"},
+    {NID_sect409k1, &_EC_NIST_CHAR2_409K.h, 0,
+     "NIST/SECG curve over a 409 bit binary field"},
+    {NID_sect409r1, &_EC_NIST_CHAR2_409B.h, 0,
+     "NIST/SECG curve over a 409 bit binary field"},
+    {NID_sect571k1, &_EC_NIST_CHAR2_571K.h, 0,
+     "NIST/SECG curve over a 571 bit binary field"},
+    {NID_sect571r1, &_EC_NIST_CHAR2_571B.h, 0,
+     "NIST/SECG curve over a 571 bit binary field"},
+    /* X9.62 curves */
+    {NID_X9_62_c2pnb163v1, &_EC_X9_62_CHAR2_163V1.h, 0,
+     "X9.62 curve over a 163 bit binary field"},
+    {NID_X9_62_c2pnb163v2, &_EC_X9_62_CHAR2_163V2.h, 0,
+     "X9.62 curve over a 163 bit binary field"},
+    {NID_X9_62_c2pnb163v3, &_EC_X9_62_CHAR2_163V3.h, 0,
+     "X9.62 curve over a 163 bit binary field"},
+    {NID_X9_62_c2pnb176v1, &_EC_X9_62_CHAR2_176V1.h, 0,
+     "X9.62 curve over a 176 bit binary field"},
+    {NID_X9_62_c2tnb191v1, &_EC_X9_62_CHAR2_191V1.h, 0,
+     "X9.62 curve over a 191 bit binary field"},
+    {NID_X9_62_c2tnb191v2, &_EC_X9_62_CHAR2_191V2.h, 0,
+     "X9.62 curve over a 191 bit binary field"},
+    {NID_X9_62_c2tnb191v3, &_EC_X9_62_CHAR2_191V3.h, 0,
+     "X9.62 curve over a 191 bit binary field"},
+    {NID_X9_62_c2pnb208w1, &_EC_X9_62_CHAR2_208W1.h, 0,
+     "X9.62 curve over a 208 bit binary field"},
+    {NID_X9_62_c2tnb239v1, &_EC_X9_62_CHAR2_239V1.h, 0,
+     "X9.62 curve over a 239 bit binary field"},
+    {NID_X9_62_c2tnb239v2, &_EC_X9_62_CHAR2_239V2.h, 0,
+     "X9.62 curve over a 239 bit binary field"},
+    {NID_X9_62_c2tnb239v3, &_EC_X9_62_CHAR2_239V3.h, 0,
+     "X9.62 curve over a 239 bit binary field"},
+    {NID_X9_62_c2pnb272w1, &_EC_X9_62_CHAR2_272W1.h, 0,
+     "X9.62 curve over a 272 bit binary field"},
+    {NID_X9_62_c2pnb304w1, &_EC_X9_62_CHAR2_304W1.h, 0,
+     "X9.62 curve over a 304 bit binary field"},
+    {NID_X9_62_c2tnb359v1, &_EC_X9_62_CHAR2_359V1.h, 0,
+     "X9.62 curve over a 359 bit binary field"},
+    {NID_X9_62_c2pnb368w1, &_EC_X9_62_CHAR2_368W1.h, 0,
+     "X9.62 curve over a 368 bit binary field"},
+    {NID_X9_62_c2tnb431r1, &_EC_X9_62_CHAR2_431R1.h, 0,
+     "X9.62 curve over a 431 bit binary field"},
+    /*
+     * the WAP/WTLS curves [unlike SECG, spec has its own OIDs for curves
+     * from X9.62]
+     */
+    {NID_wap_wsg_idm_ecid_wtls1, &_EC_WTLS_1.h, 0,
+     "WTLS curve over a 113 bit binary field"},
+    {NID_wap_wsg_idm_ecid_wtls3, &_EC_NIST_CHAR2_163K.h, 0,
+     "NIST/SECG/WTLS curve over a 163 bit binary field"},
+    {NID_wap_wsg_idm_ecid_wtls4, &_EC_SECG_CHAR2_113R1.h, 0,
+     "SECG curve over a 113 bit binary field"},
+    {NID_wap_wsg_idm_ecid_wtls5, &_EC_X9_62_CHAR2_163V1.h, 0,
+     "X9.62 curve over a 163 bit binary field"},
+#endif
+    {NID_wap_wsg_idm_ecid_wtls6, &_EC_SECG_PRIME_112R1.h, 0,
+     "SECG/WTLS curve over a 112 bit prime field"},
+    {NID_wap_wsg_idm_ecid_wtls7, &_EC_SECG_PRIME_160R2.h, 0,
+     "SECG/WTLS curve over a 160 bit prime field"},
+    {NID_wap_wsg_idm_ecid_wtls8, &_EC_WTLS_8.h, 0,
+     "WTLS curve over a 112 bit prime field"},
+    {NID_wap_wsg_idm_ecid_wtls9, &_EC_WTLS_9.h, 0,
+     "WTLS curve over a 160 bit prime field"},
+#ifndef OPENSSL_NO_EC2M
+    {NID_wap_wsg_idm_ecid_wtls10, &_EC_NIST_CHAR2_233K.h, 0,
+     "NIST/SECG/WTLS curve over a 233 bit binary field"},
+    {NID_wap_wsg_idm_ecid_wtls11, &_EC_NIST_CHAR2_233B.h, 0,
+     "NIST/SECG/WTLS curve over a 233 bit binary field"},
+#endif
+    {NID_wap_wsg_idm_ecid_wtls12, &_EC_WTLS_12.h, 0,
+     "WTLS curve over a 224 bit prime field"},
+#ifndef OPENSSL_NO_EC2M
+    /* IPSec curves */
+    {NID_ipsec3, &_EC_IPSEC_155_ID3.h, 0,
+     "\n\tIPSec/IKE/Oakley curve #3 over a 155 bit binary field.\n"
+     "\tNot suitable for ECDSA.\n\tQuestionable extension field!"},
+    {NID_ipsec4, &_EC_IPSEC_185_ID4.h, 0,
+     "\n\tIPSec/IKE/Oakley curve #4 over a 185 bit binary field.\n"
+     "\tNot suitable for ECDSA.\n\tQuestionable extension field!"},
+#endif
+    /* brainpool curves */
+    {NID_brainpoolP160r1, &_EC_brainpoolP160r1.h, 0,
+     "RFC 5639 curve over a 160 bit prime field"},
+    {NID_brainpoolP160t1, &_EC_brainpoolP160t1.h, 0,
+     "RFC 5639 curve over a 160 bit prime field"},
+    {NID_brainpoolP192r1, &_EC_brainpoolP192r1.h, 0,
+     "RFC 5639 curve over a 192 bit prime field"},
+    {NID_brainpoolP192t1, &_EC_brainpoolP192t1.h, 0,
+     "RFC 5639 curve over a 192 bit prime field"},
+    {NID_brainpoolP224r1, &_EC_brainpoolP224r1.h, 0,
+     "RFC 5639 curve over a 224 bit prime field"},
+    {NID_brainpoolP224t1, &_EC_brainpoolP224t1.h, 0,
+     "RFC 5639 curve over a 224 bit prime field"},
+    {NID_brainpoolP256r1, &_EC_brainpoolP256r1.h, 0,
+     "RFC 5639 curve over a 256 bit prime field"},
+    {NID_brainpoolP256t1, &_EC_brainpoolP256t1.h, 0,
+     "RFC 5639 curve over a 256 bit prime field"},
+    {NID_brainpoolP320r1, &_EC_brainpoolP320r1.h, 0,
+     "RFC 5639 curve over a 320 bit prime field"},
+    {NID_brainpoolP320t1, &_EC_brainpoolP320t1.h, 0,
+     "RFC 5639 curve over a 320 bit prime field"},
+    {NID_brainpoolP384r1, &_EC_brainpoolP384r1.h, 0,
+     "RFC 5639 curve over a 384 bit prime field"},
+    {NID_brainpoolP384t1, &_EC_brainpoolP384t1.h, 0,
+     "RFC 5639 curve over a 384 bit prime field"},
+    {NID_brainpoolP512r1, &_EC_brainpoolP512r1.h, 0,
+     "RFC 5639 curve over a 512 bit prime field"},
+    {NID_brainpoolP512t1, &_EC_brainpoolP512t1.h, 0,
+     "RFC 5639 curve over a 512 bit prime field"},
+#ifndef OPENSSL_NO_SM2
+    {NID_sm2, &_EC_sm2p256v1.h, 0,
+     "SM2 curve over a 256 bit prime field"},
+#endif
+};
+
+#define curve_list_length OSSL_NELEM(curve_list)
+
+static EC_GROUP *ec_group_new_from_data(const ec_list_element curve)
+{
+    EC_GROUP *group = NULL;
+    EC_POINT *P = NULL;
+    BN_CTX *ctx = NULL;
+    BIGNUM *p = NULL, *a = NULL, *b = NULL, *x = NULL, *y = NULL, *order =
+        NULL;
+    int ok = 0;
+    int seed_len, param_len;
+    const EC_METHOD *meth;
+    const EC_CURVE_DATA *data;
+    const unsigned char *params;
+
+    /* If no curve data curve method must handle everything */
+    if (curve.data == NULL)
+        return EC_GROUP_new(curve.meth != NULL ? curve.meth() : NULL);
+
+    if ((ctx = BN_CTX_new()) == NULL) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    data = curve.data;
+    seed_len = data->seed_len;
+    param_len = data->param_len;
+    params = (const unsigned char *)(data + 1); /* skip header */
+    params += seed_len;         /* skip seed */
+
+    if ((p = BN_bin2bn(params + 0 * param_len, param_len, NULL)) == NULL
+        || (a = BN_bin2bn(params + 1 * param_len, param_len, NULL)) == NULL
+        || (b = BN_bin2bn(params + 2 * param_len, param_len, NULL)) == NULL) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_BN_LIB);
+        goto err;
+    }
+
+    if (curve.meth != 0) {
+        meth = curve.meth();
+        if (((group = EC_GROUP_new(meth)) == NULL) ||
+            (!(group->meth->group_set_curve(group, p, a, b, ctx)))) {
+            ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB);
+            goto err;
+        }
+    } else if (data->field_type == NID_X9_62_prime_field) {
+        if ((group = EC_GROUP_new_curve_GFp(p, a, b, ctx)) == NULL) {
+            ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB);
+            goto err;
+        }
+    }
+#ifndef OPENSSL_NO_EC2M
+    else {                      /* field_type ==
+                                 * NID_X9_62_characteristic_two_field */
+
+        if ((group = EC_GROUP_new_curve_GF2m(p, a, b, ctx)) == NULL) {
+            ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB);
+            goto err;
+        }
+    }
+#endif
+
+    EC_GROUP_set_curve_name(group, curve.nid);
+
+    if ((P = EC_POINT_new(group)) == NULL) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB);
+        goto err;
+    }
+
+    if ((x = BN_bin2bn(params + 3 * param_len, param_len, NULL)) == NULL
+        || (y = BN_bin2bn(params + 4 * param_len, param_len, NULL)) == NULL) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_BN_LIB);
+        goto err;
+    }
+    if (!EC_POINT_set_affine_coordinates(group, P, x, y, ctx)) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB);
+        goto err;
+    }
+    if ((order = BN_bin2bn(params + 5 * param_len, param_len, NULL)) == NULL
+        || !BN_set_word(x, (BN_ULONG)data->cofactor)) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_BN_LIB);
+        goto err;
+    }
+    if (!EC_GROUP_set_generator(group, P, order, x)) {
+        ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB);
+        goto err;
+    }
+    if (seed_len) {
+        if (!EC_GROUP_set_seed(group, params - seed_len, seed_len)) {
+            ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB);
+            goto err;
+        }
+    }
+    ok = 1;
+ err:
+    if (!ok) {
+        EC_GROUP_free(group);
+        group = NULL;
+    }
+    EC_POINT_free(P);
+    BN_CTX_free(ctx);
+    BN_free(p);
+    BN_free(a);
+    BN_free(b);
+    BN_free(order);
+    BN_free(x);
+    BN_free(y);
+    return group;
+}
+
+EC_GROUP *EC_GROUP_new_by_curve_name(int nid)
+{
+    size_t i;
+    EC_GROUP *ret = NULL;
+
+    if (nid <= 0)
+        return NULL;
+
+    for (i = 0; i < curve_list_length; i++)
+        if (curve_list[i].nid == nid) {
+            ret = ec_group_new_from_data(curve_list[i]);
+            break;
+        }
+
+    if (ret == NULL) {
+        ECerr(EC_F_EC_GROUP_NEW_BY_CURVE_NAME, EC_R_UNKNOWN_GROUP);
+        return NULL;
+    }
+
+    return ret;
+}
+
+size_t EC_get_builtin_curves(EC_builtin_curve *r, size_t nitems)
+{
+    size_t i, min;
+
+    if (r == NULL || nitems == 0)
+        return curve_list_length;
+
+    min = nitems < curve_list_length ? nitems : curve_list_length;
+
+    for (i = 0; i < min; i++) {
+        r[i].nid = curve_list[i].nid;
+        r[i].comment = curve_list[i].comment;
+    }
+
+    return curve_list_length;
+}
+
+/* Functions to translate between common NIST curve names and NIDs */
+
+typedef struct {
+    const char *name;           /* NIST Name of curve */
+    int nid;                    /* Curve NID */
+} EC_NIST_NAME;
+
+static EC_NIST_NAME nist_curves[] = {
+    {"B-163", NID_sect163r2},
+    {"B-233", NID_sect233r1},
+    {"B-283", NID_sect283r1},
+    {"B-409", NID_sect409r1},
+    {"B-571", NID_sect571r1},
+    {"K-163", NID_sect163k1},
+    {"K-233", NID_sect233k1},
+    {"K-283", NID_sect283k1},
+    {"K-409", NID_sect409k1},
+    {"K-571", NID_sect571k1},
+    {"P-192", NID_X9_62_prime192v1},
+    {"P-224", NID_secp224r1},
+    {"P-256", NID_X9_62_prime256v1},
+    {"P-384", NID_secp384r1},
+    {"P-521", NID_secp521r1}
+};
+
+const char *EC_curve_nid2nist(int nid)
+{
+    size_t i;
+    for (i = 0; i < OSSL_NELEM(nist_curves); i++) {
+        if (nist_curves[i].nid == nid)
+            return nist_curves[i].name;
+    }
+    return NULL;
+}
+
+int EC_curve_nist2nid(const char *name)
+{
+    size_t i;
+    for (i = 0; i < OSSL_NELEM(nist_curves); i++) {
+        if (strcmp(nist_curves[i].name, name) == 0)
+            return nist_curves[i].nid;
+    }
+    return NID_undef;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_cvt.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_cvt.c
new file mode 100644
index 000000000..0ec346c12
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_cvt.c
@@ -0,0 +1,82 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include "ec_lcl.h"
+
+EC_GROUP *EC_GROUP_new_curve_GFp(const BIGNUM *p, const BIGNUM *a,
+                                 const BIGNUM *b, BN_CTX *ctx)
+{
+    const EC_METHOD *meth;
+    EC_GROUP *ret;
+
+#if defined(OPENSSL_BN_ASM_MONT)
+    /*
+     * This might appear controversial, but the fact is that generic
+     * prime method was observed to deliver better performance even
+     * for NIST primes on a range of platforms, e.g.: 60%-15%
+     * improvement on IA-64, ~25% on ARM, 30%-90% on P4, 20%-25%
+     * in 32-bit build and 35%--12% in 64-bit build on Core2...
+     * Coefficients are relative to optimized bn_nist.c for most
+     * intensive ECDSA verify and ECDH operations for 192- and 521-
+     * bit keys respectively. Choice of these boundary values is
+     * arguable, because the dependency of improvement coefficient
+     * from key length is not a "monotone" curve. For example while
+     * 571-bit result is 23% on ARM, 384-bit one is -1%. But it's
+     * generally faster, sometimes "respectfully" faster, sometimes
+     * "tolerably" slower... What effectively happens is that loop
+     * with bn_mul_add_words is put against bn_mul_mont, and the
+     * latter "wins" on short vectors. Correct solution should be
+     * implementing dedicated NxN multiplication subroutines for
+     * small N. But till it materializes, let's stick to generic
+     * prime method...
+     *                                              <appro>
+     */
+    meth = EC_GFp_mont_method();
+#else
+    if (BN_nist_mod_func(p))
+        meth = EC_GFp_nist_method();
+    else
+        meth = EC_GFp_mont_method();
+#endif
+
+    ret = EC_GROUP_new(meth);
+    if (ret == NULL)
+        return NULL;
+
+    if (!EC_GROUP_set_curve(ret, p, a, b, ctx)) {
+        EC_GROUP_clear_free(ret);
+        return NULL;
+    }
+
+    return ret;
+}
+
+#ifndef OPENSSL_NO_EC2M
+EC_GROUP *EC_GROUP_new_curve_GF2m(const BIGNUM *p, const BIGNUM *a,
+                                  const BIGNUM *b, BN_CTX *ctx)
+{
+    const EC_METHOD *meth;
+    EC_GROUP *ret;
+
+    meth = EC_GF2m_simple_method();
+
+    ret = EC_GROUP_new(meth);
+    if (ret == NULL)
+        return NULL;
+
+    if (!EC_GROUP_set_curve(ret, p, a, b, ctx)) {
+        EC_GROUP_clear_free(ret);
+        return NULL;
+    }
+
+    return ret;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_err.c
new file mode 100644
index 000000000..ce3493823
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_err.c
@@ -0,0 +1,394 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/ecerr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA EC_str_functs[] = {
+    {ERR_PACK(ERR_LIB_EC, EC_F_BN_TO_FELEM, 0), "BN_to_felem"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_D2I_ECPARAMETERS, 0), "d2i_ECParameters"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_D2I_ECPKPARAMETERS, 0), "d2i_ECPKParameters"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_D2I_ECPRIVATEKEY, 0), "d2i_ECPrivateKey"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_DO_EC_KEY_PRINT, 0), "do_EC_KEY_print"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECDH_CMS_DECRYPT, 0), "ecdh_cms_decrypt"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECDH_CMS_SET_SHARED_INFO, 0),
+     "ecdh_cms_set_shared_info"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECDH_COMPUTE_KEY, 0), "ECDH_compute_key"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECDH_SIMPLE_COMPUTE_KEY, 0),
+     "ecdh_simple_compute_key"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECDSA_DO_SIGN_EX, 0), "ECDSA_do_sign_ex"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECDSA_DO_VERIFY, 0), "ECDSA_do_verify"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECDSA_SIGN_EX, 0), "ECDSA_sign_ex"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECDSA_SIGN_SETUP, 0), "ECDSA_sign_setup"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECDSA_SIG_NEW, 0), "ECDSA_SIG_new"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECDSA_VERIFY, 0), "ECDSA_verify"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECD_ITEM_VERIFY, 0), "ecd_item_verify"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECKEY_PARAM2TYPE, 0), "eckey_param2type"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECKEY_PARAM_DECODE, 0), "eckey_param_decode"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECKEY_PRIV_DECODE, 0), "eckey_priv_decode"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECKEY_PRIV_ENCODE, 0), "eckey_priv_encode"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECKEY_PUB_DECODE, 0), "eckey_pub_decode"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECKEY_PUB_ENCODE, 0), "eckey_pub_encode"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECKEY_TYPE2PARAM, 0), "eckey_type2param"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECPARAMETERS_PRINT, 0), "ECParameters_print"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECPARAMETERS_PRINT_FP, 0),
+     "ECParameters_print_fp"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECPKPARAMETERS_PRINT, 0),
+     "ECPKParameters_print"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECPKPARAMETERS_PRINT_FP, 0),
+     "ECPKParameters_print_fp"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECP_NISTZ256_GET_AFFINE, 0),
+     "ecp_nistz256_get_affine"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECP_NISTZ256_INV_MOD_ORD, 0),
+     "ecp_nistz256_inv_mod_ord"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECP_NISTZ256_MULT_PRECOMPUTE, 0),
+     "ecp_nistz256_mult_precompute"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECP_NISTZ256_POINTS_MUL, 0),
+     "ecp_nistz256_points_mul"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECP_NISTZ256_PRE_COMP_NEW, 0),
+     "ecp_nistz256_pre_comp_new"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECP_NISTZ256_WINDOWED_MUL, 0),
+     "ecp_nistz256_windowed_mul"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECX_KEY_OP, 0), "ecx_key_op"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECX_PRIV_ENCODE, 0), "ecx_priv_encode"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_ECX_PUB_ENCODE, 0), "ecx_pub_encode"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_ASN1_GROUP2CURVE, 0), "ec_asn1_group2curve"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_ASN1_GROUP2FIELDID, 0),
+     "ec_asn1_group2fieldid"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GF2M_MONTGOMERY_POINT_MULTIPLY, 0),
+     "ec_GF2m_montgomery_point_multiply"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GF2M_SIMPLE_FIELD_INV, 0),
+     "ec_GF2m_simple_field_inv"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GF2M_SIMPLE_GROUP_CHECK_DISCRIMINANT, 0),
+     "ec_GF2m_simple_group_check_discriminant"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GF2M_SIMPLE_GROUP_SET_CURVE, 0),
+     "ec_GF2m_simple_group_set_curve"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GF2M_SIMPLE_LADDER_POST, 0),
+     "ec_GF2m_simple_ladder_post"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GF2M_SIMPLE_LADDER_PRE, 0),
+     "ec_GF2m_simple_ladder_pre"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GF2M_SIMPLE_OCT2POINT, 0),
+     "ec_GF2m_simple_oct2point"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GF2M_SIMPLE_POINT2OCT, 0),
+     "ec_GF2m_simple_point2oct"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GF2M_SIMPLE_POINTS_MUL, 0),
+     "ec_GF2m_simple_points_mul"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GF2M_SIMPLE_POINT_GET_AFFINE_COORDINATES, 0),
+     "ec_GF2m_simple_point_get_affine_coordinates"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GF2M_SIMPLE_POINT_SET_AFFINE_COORDINATES, 0),
+     "ec_GF2m_simple_point_set_affine_coordinates"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GF2M_SIMPLE_SET_COMPRESSED_COORDINATES, 0),
+     "ec_GF2m_simple_set_compressed_coordinates"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_MONT_FIELD_DECODE, 0),
+     "ec_GFp_mont_field_decode"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_MONT_FIELD_ENCODE, 0),
+     "ec_GFp_mont_field_encode"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_MONT_FIELD_INV, 0),
+     "ec_GFp_mont_field_inv"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_MONT_FIELD_MUL, 0),
+     "ec_GFp_mont_field_mul"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_MONT_FIELD_SET_TO_ONE, 0),
+     "ec_GFp_mont_field_set_to_one"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_MONT_FIELD_SQR, 0),
+     "ec_GFp_mont_field_sqr"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_MONT_GROUP_SET_CURVE, 0),
+     "ec_GFp_mont_group_set_curve"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_NISTP224_GROUP_SET_CURVE, 0),
+     "ec_GFp_nistp224_group_set_curve"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_NISTP224_POINTS_MUL, 0),
+     "ec_GFp_nistp224_points_mul"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_NISTP224_POINT_GET_AFFINE_COORDINATES, 0),
+     "ec_GFp_nistp224_point_get_affine_coordinates"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_NISTP256_GROUP_SET_CURVE, 0),
+     "ec_GFp_nistp256_group_set_curve"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_NISTP256_POINTS_MUL, 0),
+     "ec_GFp_nistp256_points_mul"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_NISTP256_POINT_GET_AFFINE_COORDINATES, 0),
+     "ec_GFp_nistp256_point_get_affine_coordinates"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_NISTP521_GROUP_SET_CURVE, 0),
+     "ec_GFp_nistp521_group_set_curve"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_NISTP521_POINTS_MUL, 0),
+     "ec_GFp_nistp521_points_mul"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_NISTP521_POINT_GET_AFFINE_COORDINATES, 0),
+     "ec_GFp_nistp521_point_get_affine_coordinates"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_NIST_FIELD_MUL, 0),
+     "ec_GFp_nist_field_mul"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_NIST_FIELD_SQR, 0),
+     "ec_GFp_nist_field_sqr"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_NIST_GROUP_SET_CURVE, 0),
+     "ec_GFp_nist_group_set_curve"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_SIMPLE_BLIND_COORDINATES, 0),
+     "ec_GFp_simple_blind_coordinates"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_SIMPLE_FIELD_INV, 0),
+     "ec_GFp_simple_field_inv"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_SIMPLE_GROUP_CHECK_DISCRIMINANT, 0),
+     "ec_GFp_simple_group_check_discriminant"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_SIMPLE_GROUP_SET_CURVE, 0),
+     "ec_GFp_simple_group_set_curve"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_SIMPLE_MAKE_AFFINE, 0),
+     "ec_GFp_simple_make_affine"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_SIMPLE_OCT2POINT, 0),
+     "ec_GFp_simple_oct2point"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_SIMPLE_POINT2OCT, 0),
+     "ec_GFp_simple_point2oct"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_SIMPLE_POINTS_MAKE_AFFINE, 0),
+     "ec_GFp_simple_points_make_affine"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_SIMPLE_POINT_GET_AFFINE_COORDINATES, 0),
+     "ec_GFp_simple_point_get_affine_coordinates"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_SIMPLE_POINT_SET_AFFINE_COORDINATES, 0),
+     "ec_GFp_simple_point_set_affine_coordinates"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GFP_SIMPLE_SET_COMPRESSED_COORDINATES, 0),
+     "ec_GFp_simple_set_compressed_coordinates"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_CHECK, 0), "EC_GROUP_check"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_CHECK_DISCRIMINANT, 0),
+     "EC_GROUP_check_discriminant"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_COPY, 0), "EC_GROUP_copy"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_GET_CURVE, 0), "EC_GROUP_get_curve"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_GET_CURVE_GF2M, 0),
+     "EC_GROUP_get_curve_GF2m"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_GET_CURVE_GFP, 0),
+     "EC_GROUP_get_curve_GFp"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_GET_DEGREE, 0), "EC_GROUP_get_degree"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_GET_ECPARAMETERS, 0),
+     "EC_GROUP_get_ecparameters"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_GET_ECPKPARAMETERS, 0),
+     "EC_GROUP_get_ecpkparameters"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_GET_PENTANOMIAL_BASIS, 0),
+     "EC_GROUP_get_pentanomial_basis"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_GET_TRINOMIAL_BASIS, 0),
+     "EC_GROUP_get_trinomial_basis"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_NEW, 0), "EC_GROUP_new"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_NEW_BY_CURVE_NAME, 0),
+     "EC_GROUP_new_by_curve_name"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_NEW_FROM_DATA, 0),
+     "ec_group_new_from_data"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, 0),
+     "EC_GROUP_new_from_ecparameters"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_NEW_FROM_ECPKPARAMETERS, 0),
+     "EC_GROUP_new_from_ecpkparameters"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_SET_CURVE, 0), "EC_GROUP_set_curve"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_SET_CURVE_GF2M, 0),
+     "EC_GROUP_set_curve_GF2m"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_SET_CURVE_GFP, 0),
+     "EC_GROUP_set_curve_GFp"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_SET_GENERATOR, 0),
+     "EC_GROUP_set_generator"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_GROUP_SET_SEED, 0), "EC_GROUP_set_seed"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_KEY_CHECK_KEY, 0), "EC_KEY_check_key"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_KEY_COPY, 0), "EC_KEY_copy"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_KEY_GENERATE_KEY, 0), "EC_KEY_generate_key"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_KEY_NEW, 0), "EC_KEY_new"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_KEY_NEW_METHOD, 0), "EC_KEY_new_method"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_KEY_OCT2PRIV, 0), "EC_KEY_oct2priv"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_KEY_PRINT, 0), "EC_KEY_print"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_KEY_PRINT_FP, 0), "EC_KEY_print_fp"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_KEY_PRIV2BUF, 0), "EC_KEY_priv2buf"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_KEY_PRIV2OCT, 0), "EC_KEY_priv2oct"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_KEY_SET_PUBLIC_KEY_AFFINE_COORDINATES, 0),
+     "EC_KEY_set_public_key_affine_coordinates"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_KEY_SIMPLE_CHECK_KEY, 0),
+     "ec_key_simple_check_key"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_KEY_SIMPLE_OCT2PRIV, 0),
+     "ec_key_simple_oct2priv"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_KEY_SIMPLE_PRIV2OCT, 0),
+     "ec_key_simple_priv2oct"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_PKEY_CHECK, 0), "ec_pkey_check"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_PKEY_PARAM_CHECK, 0), "ec_pkey_param_check"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINTS_MAKE_AFFINE, 0),
+     "EC_POINTs_make_affine"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINTS_MUL, 0), "EC_POINTs_mul"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_ADD, 0), "EC_POINT_add"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_BN2POINT, 0), "EC_POINT_bn2point"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_CMP, 0), "EC_POINT_cmp"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_COPY, 0), "EC_POINT_copy"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_DBL, 0), "EC_POINT_dbl"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_GET_AFFINE_COORDINATES, 0),
+     "EC_POINT_get_affine_coordinates"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_GET_AFFINE_COORDINATES_GF2M, 0),
+     "EC_POINT_get_affine_coordinates_GF2m"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_GET_AFFINE_COORDINATES_GFP, 0),
+     "EC_POINT_get_affine_coordinates_GFp"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_GET_JPROJECTIVE_COORDINATES_GFP, 0),
+     "EC_POINT_get_Jprojective_coordinates_GFp"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_INVERT, 0), "EC_POINT_invert"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_IS_AT_INFINITY, 0),
+     "EC_POINT_is_at_infinity"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_IS_ON_CURVE, 0),
+     "EC_POINT_is_on_curve"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_MAKE_AFFINE, 0),
+     "EC_POINT_make_affine"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_NEW, 0), "EC_POINT_new"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_OCT2POINT, 0), "EC_POINT_oct2point"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_POINT2BUF, 0), "EC_POINT_point2buf"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_POINT2OCT, 0), "EC_POINT_point2oct"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_SET_AFFINE_COORDINATES, 0),
+     "EC_POINT_set_affine_coordinates"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_SET_AFFINE_COORDINATES_GF2M, 0),
+     "EC_POINT_set_affine_coordinates_GF2m"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_SET_AFFINE_COORDINATES_GFP, 0),
+     "EC_POINT_set_affine_coordinates_GFp"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_SET_COMPRESSED_COORDINATES, 0),
+     "EC_POINT_set_compressed_coordinates"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GF2M, 0),
+     "EC_POINT_set_compressed_coordinates_GF2m"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GFP, 0),
+     "EC_POINT_set_compressed_coordinates_GFp"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_SET_JPROJECTIVE_COORDINATES_GFP, 0),
+     "EC_POINT_set_Jprojective_coordinates_GFp"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_POINT_SET_TO_INFINITY, 0),
+     "EC_POINT_set_to_infinity"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_PRE_COMP_NEW, 0), "ec_pre_comp_new"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_SCALAR_MUL_LADDER, 0),
+     "ec_scalar_mul_ladder"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_WNAF_MUL, 0), "ec_wNAF_mul"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_EC_WNAF_PRECOMPUTE_MULT, 0),
+     "ec_wNAF_precompute_mult"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_I2D_ECPARAMETERS, 0), "i2d_ECParameters"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_I2D_ECPKPARAMETERS, 0), "i2d_ECPKParameters"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_I2D_ECPRIVATEKEY, 0), "i2d_ECPrivateKey"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_I2O_ECPUBLICKEY, 0), "i2o_ECPublicKey"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_NISTP224_PRE_COMP_NEW, 0),
+     "nistp224_pre_comp_new"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_NISTP256_PRE_COMP_NEW, 0),
+     "nistp256_pre_comp_new"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_NISTP521_PRE_COMP_NEW, 0),
+     "nistp521_pre_comp_new"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_O2I_ECPUBLICKEY, 0), "o2i_ECPublicKey"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_OLD_EC_PRIV_DECODE, 0), "old_ec_priv_decode"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_OSSL_ECDH_COMPUTE_KEY, 0),
+     "ossl_ecdh_compute_key"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_OSSL_ECDSA_SIGN_SIG, 0), "ossl_ecdsa_sign_sig"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_OSSL_ECDSA_VERIFY_SIG, 0),
+     "ossl_ecdsa_verify_sig"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_PKEY_ECD_CTRL, 0), "pkey_ecd_ctrl"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_PKEY_ECD_DIGESTSIGN, 0), "pkey_ecd_digestsign"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_PKEY_ECD_DIGESTSIGN25519, 0),
+     "pkey_ecd_digestsign25519"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_PKEY_ECD_DIGESTSIGN448, 0),
+     "pkey_ecd_digestsign448"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_PKEY_ECX_DERIVE, 0), "pkey_ecx_derive"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_PKEY_EC_CTRL, 0), "pkey_ec_ctrl"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_PKEY_EC_CTRL_STR, 0), "pkey_ec_ctrl_str"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_PKEY_EC_DERIVE, 0), "pkey_ec_derive"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_PKEY_EC_INIT, 0), "pkey_ec_init"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_PKEY_EC_KDF_DERIVE, 0), "pkey_ec_kdf_derive"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_PKEY_EC_KEYGEN, 0), "pkey_ec_keygen"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_PKEY_EC_PARAMGEN, 0), "pkey_ec_paramgen"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_PKEY_EC_SIGN, 0), "pkey_ec_sign"},
+    {ERR_PACK(ERR_LIB_EC, EC_F_VALIDATE_ECX_DERIVE, 0), "validate_ecx_derive"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA EC_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_ASN1_ERROR), "asn1 error"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_BAD_SIGNATURE), "bad signature"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_BIGNUM_OUT_OF_RANGE), "bignum out of range"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_BUFFER_TOO_SMALL), "buffer too small"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_CANNOT_INVERT), "cannot invert"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_COORDINATES_OUT_OF_RANGE),
+    "coordinates out of range"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_CURVE_DOES_NOT_SUPPORT_ECDH),
+    "curve does not support ecdh"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_CURVE_DOES_NOT_SUPPORT_SIGNING),
+    "curve does not support signing"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_D2I_ECPKPARAMETERS_FAILURE),
+    "d2i ecpkparameters failure"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_DECODE_ERROR), "decode error"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_DISCRIMINANT_IS_ZERO),
+    "discriminant is zero"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_EC_GROUP_NEW_BY_NAME_FAILURE),
+    "ec group new by name failure"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_FIELD_TOO_LARGE), "field too large"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_GF2M_NOT_SUPPORTED), "gf2m not supported"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_GROUP2PKPARAMETERS_FAILURE),
+    "group2pkparameters failure"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_I2D_ECPKPARAMETERS_FAILURE),
+    "i2d ecpkparameters failure"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INCOMPATIBLE_OBJECTS),
+    "incompatible objects"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INVALID_ARGUMENT), "invalid argument"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INVALID_COMPRESSED_POINT),
+    "invalid compressed point"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INVALID_COMPRESSION_BIT),
+    "invalid compression bit"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INVALID_CURVE), "invalid curve"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INVALID_DIGEST), "invalid digest"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INVALID_DIGEST_TYPE), "invalid digest type"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INVALID_ENCODING), "invalid encoding"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INVALID_FIELD), "invalid field"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INVALID_FORM), "invalid form"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INVALID_GROUP_ORDER), "invalid group order"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INVALID_KEY), "invalid key"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INVALID_OUTPUT_LENGTH),
+    "invalid output length"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INVALID_PEER_KEY), "invalid peer key"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INVALID_PENTANOMIAL_BASIS),
+    "invalid pentanomial basis"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INVALID_PRIVATE_KEY), "invalid private key"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_INVALID_TRINOMIAL_BASIS),
+    "invalid trinomial basis"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_KDF_PARAMETER_ERROR), "kdf parameter error"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_KEYS_NOT_SET), "keys not set"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_LADDER_POST_FAILURE), "ladder post failure"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_LADDER_PRE_FAILURE), "ladder pre failure"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_LADDER_STEP_FAILURE), "ladder step failure"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_MISSING_PARAMETERS), "missing parameters"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_MISSING_PRIVATE_KEY), "missing private key"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_NEED_NEW_SETUP_VALUES),
+    "need new setup values"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_NOT_A_NIST_PRIME), "not a NIST prime"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_NOT_IMPLEMENTED), "not implemented"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_NOT_INITIALIZED), "not initialized"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_NO_PARAMETERS_SET), "no parameters set"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_NO_PRIVATE_VALUE), "no private value"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_OPERATION_NOT_SUPPORTED),
+    "operation not supported"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_PASSED_NULL_PARAMETER),
+    "passed null parameter"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_PEER_KEY_ERROR), "peer key error"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_PKPARAMETERS2GROUP_FAILURE),
+    "pkparameters2group failure"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_POINT_ARITHMETIC_FAILURE),
+    "point arithmetic failure"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_POINT_AT_INFINITY), "point at infinity"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_POINT_COORDINATES_BLIND_FAILURE),
+    "point coordinates blind failure"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_POINT_IS_NOT_ON_CURVE),
+    "point is not on curve"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_RANDOM_NUMBER_GENERATION_FAILED),
+    "random number generation failed"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_SHARED_INFO_ERROR), "shared info error"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_SLOT_FULL), "slot full"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_UNDEFINED_GENERATOR), "undefined generator"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_UNDEFINED_ORDER), "undefined order"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_UNKNOWN_COFACTOR), "unknown cofactor"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_UNKNOWN_GROUP), "unknown group"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_UNKNOWN_ORDER), "unknown order"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_UNSUPPORTED_FIELD), "unsupported field"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_WRONG_CURVE_PARAMETERS),
+    "wrong curve parameters"},
+    {ERR_PACK(ERR_LIB_EC, 0, EC_R_WRONG_ORDER), "wrong order"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_EC_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(EC_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(EC_str_functs);
+        ERR_load_strings_const(EC_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_key.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_key.c
new file mode 100644
index 000000000..9349abf03
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_key.c
@@ -0,0 +1,618 @@
+/*
+ * Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <string.h>
+#include "ec_lcl.h"
+#include "internal/refcount.h"
+#include <openssl/err.h>
+#include <openssl/engine.h>
+
+EC_KEY *EC_KEY_new(void)
+{
+    return EC_KEY_new_method(NULL);
+}
+
+EC_KEY *EC_KEY_new_by_curve_name(int nid)
+{
+    EC_KEY *ret = EC_KEY_new();
+    if (ret == NULL)
+        return NULL;
+    ret->group = EC_GROUP_new_by_curve_name(nid);
+    if (ret->group == NULL) {
+        EC_KEY_free(ret);
+        return NULL;
+    }
+    if (ret->meth->set_group != NULL
+        && ret->meth->set_group(ret, ret->group) == 0) {
+        EC_KEY_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+void EC_KEY_free(EC_KEY *r)
+{
+    int i;
+
+    if (r == NULL)
+        return;
+
+    CRYPTO_DOWN_REF(&r->references, &i, r->lock);
+    REF_PRINT_COUNT("EC_KEY", r);
+    if (i > 0)
+        return;
+    REF_ASSERT_ISNT(i < 0);
+
+    if (r->meth != NULL && r->meth->finish != NULL)
+        r->meth->finish(r);
+
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_finish(r->engine);
+#endif
+
+    if (r->group && r->group->meth->keyfinish)
+        r->group->meth->keyfinish(r);
+
+    CRYPTO_free_ex_data(CRYPTO_EX_INDEX_EC_KEY, r, &r->ex_data);
+    CRYPTO_THREAD_lock_free(r->lock);
+    EC_GROUP_free(r->group);
+    EC_POINT_free(r->pub_key);
+    BN_clear_free(r->priv_key);
+
+    OPENSSL_clear_free((void *)r, sizeof(EC_KEY));
+}
+
+EC_KEY *EC_KEY_copy(EC_KEY *dest, const EC_KEY *src)
+{
+    if (dest == NULL || src == NULL) {
+        ECerr(EC_F_EC_KEY_COPY, ERR_R_PASSED_NULL_PARAMETER);
+        return NULL;
+    }
+    if (src->meth != dest->meth) {
+        if (dest->meth->finish != NULL)
+            dest->meth->finish(dest);
+        if (dest->group && dest->group->meth->keyfinish)
+            dest->group->meth->keyfinish(dest);
+#ifndef OPENSSL_NO_ENGINE
+        if (ENGINE_finish(dest->engine) == 0)
+            return 0;
+        dest->engine = NULL;
+#endif
+    }
+    /* copy the parameters */
+    if (src->group != NULL) {
+        const EC_METHOD *meth = EC_GROUP_method_of(src->group);
+        /* clear the old group */
+        EC_GROUP_free(dest->group);
+        dest->group = EC_GROUP_new(meth);
+        if (dest->group == NULL)
+            return NULL;
+        if (!EC_GROUP_copy(dest->group, src->group))
+            return NULL;
+
+        /*  copy the public key */
+        if (src->pub_key != NULL) {
+            EC_POINT_free(dest->pub_key);
+            dest->pub_key = EC_POINT_new(src->group);
+            if (dest->pub_key == NULL)
+                return NULL;
+            if (!EC_POINT_copy(dest->pub_key, src->pub_key))
+                return NULL;
+        }
+        /* copy the private key */
+        if (src->priv_key != NULL) {
+            if (dest->priv_key == NULL) {
+                dest->priv_key = BN_new();
+                if (dest->priv_key == NULL)
+                    return NULL;
+            }
+            if (!BN_copy(dest->priv_key, src->priv_key))
+                return NULL;
+            if (src->group->meth->keycopy
+                && src->group->meth->keycopy(dest, src) == 0)
+                return NULL;
+        }
+    }
+
+
+    /* copy the rest */
+    dest->enc_flag = src->enc_flag;
+    dest->conv_form = src->conv_form;
+    dest->version = src->version;
+    dest->flags = src->flags;
+    if (!CRYPTO_dup_ex_data(CRYPTO_EX_INDEX_EC_KEY,
+                            &dest->ex_data, &src->ex_data))
+        return NULL;
+
+    if (src->meth != dest->meth) {
+#ifndef OPENSSL_NO_ENGINE
+        if (src->engine != NULL && ENGINE_init(src->engine) == 0)
+            return NULL;
+        dest->engine = src->engine;
+#endif
+        dest->meth = src->meth;
+    }
+
+    if (src->meth->copy != NULL && src->meth->copy(dest, src) == 0)
+        return NULL;
+
+    return dest;
+}
+
+EC_KEY *EC_KEY_dup(const EC_KEY *ec_key)
+{
+    EC_KEY *ret = EC_KEY_new_method(ec_key->engine);
+
+    if (ret == NULL)
+        return NULL;
+
+    if (EC_KEY_copy(ret, ec_key) == NULL) {
+        EC_KEY_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+int EC_KEY_up_ref(EC_KEY *r)
+{
+    int i;
+
+    if (CRYPTO_UP_REF(&r->references, &i, r->lock) <= 0)
+        return 0;
+
+    REF_PRINT_COUNT("EC_KEY", r);
+    REF_ASSERT_ISNT(i < 2);
+    return ((i > 1) ? 1 : 0);
+}
+
+ENGINE *EC_KEY_get0_engine(const EC_KEY *eckey)
+{
+    return eckey->engine;
+}
+
+int EC_KEY_generate_key(EC_KEY *eckey)
+{
+    if (eckey == NULL || eckey->group == NULL) {
+        ECerr(EC_F_EC_KEY_GENERATE_KEY, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    if (eckey->meth->keygen != NULL)
+        return eckey->meth->keygen(eckey);
+    ECerr(EC_F_EC_KEY_GENERATE_KEY, EC_R_OPERATION_NOT_SUPPORTED);
+    return 0;
+}
+
+int ossl_ec_key_gen(EC_KEY *eckey)
+{
+    return eckey->group->meth->keygen(eckey);
+}
+
+int ec_key_simple_generate_key(EC_KEY *eckey)
+{
+    int ok = 0;
+    BN_CTX *ctx = NULL;
+    BIGNUM *priv_key = NULL;
+    const BIGNUM *order = NULL;
+    EC_POINT *pub_key = NULL;
+
+    if ((ctx = BN_CTX_new()) == NULL)
+        goto err;
+
+    if (eckey->priv_key == NULL) {
+        priv_key = BN_new();
+        if (priv_key == NULL)
+            goto err;
+    } else
+        priv_key = eckey->priv_key;
+
+    order = EC_GROUP_get0_order(eckey->group);
+    if (order == NULL)
+        goto err;
+
+    do
+        if (!BN_priv_rand_range(priv_key, order))
+            goto err;
+    while (BN_is_zero(priv_key)) ;
+
+    if (eckey->pub_key == NULL) {
+        pub_key = EC_POINT_new(eckey->group);
+        if (pub_key == NULL)
+            goto err;
+    } else
+        pub_key = eckey->pub_key;
+
+    if (!EC_POINT_mul(eckey->group, pub_key, priv_key, NULL, NULL, ctx))
+        goto err;
+
+    eckey->priv_key = priv_key;
+    eckey->pub_key = pub_key;
+
+    ok = 1;
+
+ err:
+    if (eckey->pub_key == NULL)
+        EC_POINT_free(pub_key);
+    if (eckey->priv_key != priv_key)
+        BN_free(priv_key);
+    BN_CTX_free(ctx);
+    return ok;
+}
+
+int ec_key_simple_generate_public_key(EC_KEY *eckey)
+{
+    return EC_POINT_mul(eckey->group, eckey->pub_key, eckey->priv_key, NULL,
+                        NULL, NULL);
+}
+
+int EC_KEY_check_key(const EC_KEY *eckey)
+{
+    if (eckey == NULL || eckey->group == NULL || eckey->pub_key == NULL) {
+        ECerr(EC_F_EC_KEY_CHECK_KEY, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+
+    if (eckey->group->meth->keycheck == NULL) {
+        ECerr(EC_F_EC_KEY_CHECK_KEY, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+
+    return eckey->group->meth->keycheck(eckey);
+}
+
+int ec_key_simple_check_key(const EC_KEY *eckey)
+{
+    int ok = 0;
+    BN_CTX *ctx = NULL;
+    const BIGNUM *order = NULL;
+    EC_POINT *point = NULL;
+
+    if (eckey == NULL || eckey->group == NULL || eckey->pub_key == NULL) {
+        ECerr(EC_F_EC_KEY_SIMPLE_CHECK_KEY, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+
+    if (EC_POINT_is_at_infinity(eckey->group, eckey->pub_key)) {
+        ECerr(EC_F_EC_KEY_SIMPLE_CHECK_KEY, EC_R_POINT_AT_INFINITY);
+        goto err;
+    }
+
+    if ((ctx = BN_CTX_new()) == NULL)
+        goto err;
+    if ((point = EC_POINT_new(eckey->group)) == NULL)
+        goto err;
+
+    /* testing whether the pub_key is on the elliptic curve */
+    if (EC_POINT_is_on_curve(eckey->group, eckey->pub_key, ctx) <= 0) {
+        ECerr(EC_F_EC_KEY_SIMPLE_CHECK_KEY, EC_R_POINT_IS_NOT_ON_CURVE);
+        goto err;
+    }
+    /* testing whether pub_key * order is the point at infinity */
+    order = eckey->group->order;
+    if (BN_is_zero(order)) {
+        ECerr(EC_F_EC_KEY_SIMPLE_CHECK_KEY, EC_R_INVALID_GROUP_ORDER);
+        goto err;
+    }
+    if (!EC_POINT_mul(eckey->group, point, NULL, eckey->pub_key, order, ctx)) {
+        ECerr(EC_F_EC_KEY_SIMPLE_CHECK_KEY, ERR_R_EC_LIB);
+        goto err;
+    }
+    if (!EC_POINT_is_at_infinity(eckey->group, point)) {
+        ECerr(EC_F_EC_KEY_SIMPLE_CHECK_KEY, EC_R_WRONG_ORDER);
+        goto err;
+    }
+    /*
+     * in case the priv_key is present : check if generator * priv_key ==
+     * pub_key
+     */
+    if (eckey->priv_key != NULL) {
+        if (BN_cmp(eckey->priv_key, order) >= 0) {
+            ECerr(EC_F_EC_KEY_SIMPLE_CHECK_KEY, EC_R_WRONG_ORDER);
+            goto err;
+        }
+        if (!EC_POINT_mul(eckey->group, point, eckey->priv_key,
+                          NULL, NULL, ctx)) {
+            ECerr(EC_F_EC_KEY_SIMPLE_CHECK_KEY, ERR_R_EC_LIB);
+            goto err;
+        }
+        if (EC_POINT_cmp(eckey->group, point, eckey->pub_key, ctx) != 0) {
+            ECerr(EC_F_EC_KEY_SIMPLE_CHECK_KEY, EC_R_INVALID_PRIVATE_KEY);
+            goto err;
+        }
+    }
+    ok = 1;
+ err:
+    BN_CTX_free(ctx);
+    EC_POINT_free(point);
+    return ok;
+}
+
+int EC_KEY_set_public_key_affine_coordinates(EC_KEY *key, BIGNUM *x,
+                                             BIGNUM *y)
+{
+    BN_CTX *ctx = NULL;
+    BIGNUM *tx, *ty;
+    EC_POINT *point = NULL;
+    int ok = 0;
+
+    if (key == NULL || key->group == NULL || x == NULL || y == NULL) {
+        ECerr(EC_F_EC_KEY_SET_PUBLIC_KEY_AFFINE_COORDINATES,
+              ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    ctx = BN_CTX_new();
+    if (ctx == NULL)
+        return 0;
+
+    BN_CTX_start(ctx);
+    point = EC_POINT_new(key->group);
+
+    if (point == NULL)
+        goto err;
+
+    tx = BN_CTX_get(ctx);
+    ty = BN_CTX_get(ctx);
+    if (ty == NULL)
+        goto err;
+
+    if (!EC_POINT_set_affine_coordinates(key->group, point, x, y, ctx))
+        goto err;
+    if (!EC_POINT_get_affine_coordinates(key->group, point, tx, ty, ctx))
+        goto err;
+
+    /*
+     * Check if retrieved coordinates match originals and are less than field
+     * order: if not values are out of range.
+     */
+    if (BN_cmp(x, tx) || BN_cmp(y, ty)
+        || (BN_cmp(x, key->group->field) >= 0)
+        || (BN_cmp(y, key->group->field) >= 0)) {
+        ECerr(EC_F_EC_KEY_SET_PUBLIC_KEY_AFFINE_COORDINATES,
+              EC_R_COORDINATES_OUT_OF_RANGE);
+        goto err;
+    }
+
+    if (!EC_KEY_set_public_key(key, point))
+        goto err;
+
+    if (EC_KEY_check_key(key) == 0)
+        goto err;
+
+    ok = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(ctx);
+    EC_POINT_free(point);
+    return ok;
+
+}
+
+const EC_GROUP *EC_KEY_get0_group(const EC_KEY *key)
+{
+    return key->group;
+}
+
+int EC_KEY_set_group(EC_KEY *key, const EC_GROUP *group)
+{
+    if (key->meth->set_group != NULL && key->meth->set_group(key, group) == 0)
+        return 0;
+    EC_GROUP_free(key->group);
+    key->group = EC_GROUP_dup(group);
+    return (key->group == NULL) ? 0 : 1;
+}
+
+const BIGNUM *EC_KEY_get0_private_key(const EC_KEY *key)
+{
+    return key->priv_key;
+}
+
+int EC_KEY_set_private_key(EC_KEY *key, const BIGNUM *priv_key)
+{
+    if (key->group == NULL || key->group->meth == NULL)
+        return 0;
+    if (key->group->meth->set_private != NULL
+        && key->group->meth->set_private(key, priv_key) == 0)
+        return 0;
+    if (key->meth->set_private != NULL
+        && key->meth->set_private(key, priv_key) == 0)
+        return 0;
+    BN_clear_free(key->priv_key);
+    key->priv_key = BN_dup(priv_key);
+    return (key->priv_key == NULL) ? 0 : 1;
+}
+
+const EC_POINT *EC_KEY_get0_public_key(const EC_KEY *key)
+{
+    return key->pub_key;
+}
+
+int EC_KEY_set_public_key(EC_KEY *key, const EC_POINT *pub_key)
+{
+    if (key->meth->set_public != NULL
+        && key->meth->set_public(key, pub_key) == 0)
+        return 0;
+    EC_POINT_free(key->pub_key);
+    key->pub_key = EC_POINT_dup(pub_key, key->group);
+    return (key->pub_key == NULL) ? 0 : 1;
+}
+
+unsigned int EC_KEY_get_enc_flags(const EC_KEY *key)
+{
+    return key->enc_flag;
+}
+
+void EC_KEY_set_enc_flags(EC_KEY *key, unsigned int flags)
+{
+    key->enc_flag = flags;
+}
+
+point_conversion_form_t EC_KEY_get_conv_form(const EC_KEY *key)
+{
+    return key->conv_form;
+}
+
+void EC_KEY_set_conv_form(EC_KEY *key, point_conversion_form_t cform)
+{
+    key->conv_form = cform;
+    if (key->group != NULL)
+        EC_GROUP_set_point_conversion_form(key->group, cform);
+}
+
+void EC_KEY_set_asn1_flag(EC_KEY *key, int flag)
+{
+    if (key->group != NULL)
+        EC_GROUP_set_asn1_flag(key->group, flag);
+}
+
+int EC_KEY_precompute_mult(EC_KEY *key, BN_CTX *ctx)
+{
+    if (key->group == NULL)
+        return 0;
+    return EC_GROUP_precompute_mult(key->group, ctx);
+}
+
+int EC_KEY_get_flags(const EC_KEY *key)
+{
+    return key->flags;
+}
+
+void EC_KEY_set_flags(EC_KEY *key, int flags)
+{
+    key->flags |= flags;
+}
+
+void EC_KEY_clear_flags(EC_KEY *key, int flags)
+{
+    key->flags &= ~flags;
+}
+
+size_t EC_KEY_key2buf(const EC_KEY *key, point_conversion_form_t form,
+                        unsigned char **pbuf, BN_CTX *ctx)
+{
+    if (key == NULL || key->pub_key == NULL || key->group == NULL)
+        return 0;
+    return EC_POINT_point2buf(key->group, key->pub_key, form, pbuf, ctx);
+}
+
+int EC_KEY_oct2key(EC_KEY *key, const unsigned char *buf, size_t len,
+                   BN_CTX *ctx)
+{
+    if (key == NULL || key->group == NULL)
+        return 0;
+    if (key->pub_key == NULL)
+        key->pub_key = EC_POINT_new(key->group);
+    if (key->pub_key == NULL)
+        return 0;
+    if (EC_POINT_oct2point(key->group, key->pub_key, buf, len, ctx) == 0)
+        return 0;
+    /*
+     * Save the point conversion form.
+     * For non-custom curves the first octet of the buffer (excluding
+     * the last significant bit) contains the point conversion form.
+     * EC_POINT_oct2point() has already performed sanity checking of
+     * the buffer so we know it is valid.
+     */
+    if ((key->group->meth->flags & EC_FLAGS_CUSTOM_CURVE) == 0)
+        key->conv_form = (point_conversion_form_t)(buf[0] & ~0x01);
+    return 1;
+}
+
+size_t EC_KEY_priv2oct(const EC_KEY *eckey,
+                       unsigned char *buf, size_t len)
+{
+    if (eckey->group == NULL || eckey->group->meth == NULL)
+        return 0;
+    if (eckey->group->meth->priv2oct == NULL) {
+        ECerr(EC_F_EC_KEY_PRIV2OCT, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+
+    return eckey->group->meth->priv2oct(eckey, buf, len);
+}
+
+size_t ec_key_simple_priv2oct(const EC_KEY *eckey,
+                              unsigned char *buf, size_t len)
+{
+    size_t buf_len;
+
+    buf_len = (EC_GROUP_order_bits(eckey->group) + 7) / 8;
+    if (eckey->priv_key == NULL)
+        return 0;
+    if (buf == NULL)
+        return buf_len;
+    else if (len < buf_len)
+        return 0;
+
+    /* Octetstring may need leading zeros if BN is to short */
+
+    if (BN_bn2binpad(eckey->priv_key, buf, buf_len) == -1) {
+        ECerr(EC_F_EC_KEY_SIMPLE_PRIV2OCT, EC_R_BUFFER_TOO_SMALL);
+        return 0;
+    }
+
+    return buf_len;
+}
+
+int EC_KEY_oct2priv(EC_KEY *eckey, const unsigned char *buf, size_t len)
+{
+    if (eckey->group == NULL || eckey->group->meth == NULL)
+        return 0;
+    if (eckey->group->meth->oct2priv == NULL) {
+        ECerr(EC_F_EC_KEY_OCT2PRIV, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    return eckey->group->meth->oct2priv(eckey, buf, len);
+}
+
+int ec_key_simple_oct2priv(EC_KEY *eckey, const unsigned char *buf, size_t len)
+{
+    if (eckey->priv_key == NULL)
+        eckey->priv_key = BN_secure_new();
+    if (eckey->priv_key == NULL) {
+        ECerr(EC_F_EC_KEY_SIMPLE_OCT2PRIV, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    eckey->priv_key = BN_bin2bn(buf, len, eckey->priv_key);
+    if (eckey->priv_key == NULL) {
+        ECerr(EC_F_EC_KEY_SIMPLE_OCT2PRIV, ERR_R_BN_LIB);
+        return 0;
+    }
+    return 1;
+}
+
+size_t EC_KEY_priv2buf(const EC_KEY *eckey, unsigned char **pbuf)
+{
+    size_t len;
+    unsigned char *buf;
+
+    len = EC_KEY_priv2oct(eckey, NULL, 0);
+    if (len == 0)
+        return 0;
+    if ((buf = OPENSSL_malloc(len)) == NULL) {
+        ECerr(EC_F_EC_KEY_PRIV2BUF, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    len = EC_KEY_priv2oct(eckey, buf, len);
+    if (len == 0) {
+        OPENSSL_free(buf);
+        return 0;
+    }
+    *pbuf = buf;
+    return len;
+}
+
+int EC_KEY_can_sign(const EC_KEY *eckey)
+{
+    if (eckey->group == NULL || eckey->group->meth == NULL
+        || (eckey->group->meth->flags & EC_FLAGS_NO_SIGN))
+        return 0;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_kmeth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_kmeth.c
new file mode 100644
index 000000000..64a5d2087
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_kmeth.c
@@ -0,0 +1,317 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include <openssl/ec.h>
+#include <openssl/engine.h>
+#include <openssl/err.h>
+#include "ec_lcl.h"
+
+
+static const EC_KEY_METHOD openssl_ec_key_method = {
+    "OpenSSL EC_KEY method",
+    0,
+    0,0,0,0,0,0,
+    ossl_ec_key_gen,
+    ossl_ecdh_compute_key,
+    ossl_ecdsa_sign,
+    ossl_ecdsa_sign_setup,
+    ossl_ecdsa_sign_sig,
+    ossl_ecdsa_verify,
+    ossl_ecdsa_verify_sig
+};
+
+static const EC_KEY_METHOD *default_ec_key_meth = &openssl_ec_key_method;
+
+const EC_KEY_METHOD *EC_KEY_OpenSSL(void)
+{
+    return &openssl_ec_key_method;
+}
+
+const EC_KEY_METHOD *EC_KEY_get_default_method(void)
+{
+    return default_ec_key_meth;
+}
+
+void EC_KEY_set_default_method(const EC_KEY_METHOD *meth)
+{
+    if (meth == NULL)
+        default_ec_key_meth = &openssl_ec_key_method;
+    else
+        default_ec_key_meth = meth;
+}
+
+const EC_KEY_METHOD *EC_KEY_get_method(const EC_KEY *key)
+{
+    return key->meth;
+}
+
+int EC_KEY_set_method(EC_KEY *key, const EC_KEY_METHOD *meth)
+{
+    void (*finish)(EC_KEY *key) = key->meth->finish;
+
+    if (finish != NULL)
+        finish(key);
+
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_finish(key->engine);
+    key->engine = NULL;
+#endif
+
+    key->meth = meth;
+    if (meth->init != NULL)
+        return meth->init(key);
+    return 1;
+}
+
+EC_KEY *EC_KEY_new_method(ENGINE *engine)
+{
+    EC_KEY *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        ECerr(EC_F_EC_KEY_NEW_METHOD, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ret->references = 1;
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        ECerr(EC_F_EC_KEY_NEW_METHOD, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+
+    ret->meth = EC_KEY_get_default_method();
+#ifndef OPENSSL_NO_ENGINE
+    if (engine != NULL) {
+        if (!ENGINE_init(engine)) {
+            ECerr(EC_F_EC_KEY_NEW_METHOD, ERR_R_ENGINE_LIB);
+            goto err;
+        }
+        ret->engine = engine;
+    } else
+        ret->engine = ENGINE_get_default_EC();
+    if (ret->engine != NULL) {
+        ret->meth = ENGINE_get_EC(ret->engine);
+        if (ret->meth == NULL) {
+            ECerr(EC_F_EC_KEY_NEW_METHOD, ERR_R_ENGINE_LIB);
+            goto err;
+        }
+    }
+#endif
+
+    ret->version = 1;
+    ret->conv_form = POINT_CONVERSION_UNCOMPRESSED;
+
+    if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_EC_KEY, ret, &ret->ex_data)) {
+        goto err;
+    }
+
+    if (ret->meth->init != NULL && ret->meth->init(ret) == 0) {
+        ECerr(EC_F_EC_KEY_NEW_METHOD, ERR_R_INIT_FAIL);
+        goto err;
+    }
+    return ret;
+
+ err:
+    EC_KEY_free(ret);
+    return NULL;
+}
+
+int ECDH_compute_key(void *out, size_t outlen, const EC_POINT *pub_key,
+                     const EC_KEY *eckey,
+                     void *(*KDF) (const void *in, size_t inlen, void *out,
+                                   size_t *outlen))
+{
+    unsigned char *sec = NULL;
+    size_t seclen;
+    if (eckey->meth->compute_key == NULL) {
+        ECerr(EC_F_ECDH_COMPUTE_KEY, EC_R_OPERATION_NOT_SUPPORTED);
+        return 0;
+    }
+    if (outlen > INT_MAX) {
+        ECerr(EC_F_ECDH_COMPUTE_KEY, EC_R_INVALID_OUTPUT_LENGTH);
+        return 0;
+    }
+    if (!eckey->meth->compute_key(&sec, &seclen, pub_key, eckey))
+        return 0;
+    if (KDF != NULL) {
+        KDF(sec, seclen, out, &outlen);
+    } else {
+        if (outlen > seclen)
+            outlen = seclen;
+        memcpy(out, sec, outlen);
+    }
+    OPENSSL_clear_free(sec, seclen);
+    return outlen;
+}
+
+EC_KEY_METHOD *EC_KEY_METHOD_new(const EC_KEY_METHOD *meth)
+{
+    EC_KEY_METHOD *ret = OPENSSL_zalloc(sizeof(*meth));
+
+    if (ret == NULL)
+        return NULL;
+    if (meth != NULL)
+        *ret = *meth;
+    ret->flags |= EC_KEY_METHOD_DYNAMIC;
+    return ret;
+}
+
+void EC_KEY_METHOD_free(EC_KEY_METHOD *meth)
+{
+    if (meth->flags & EC_KEY_METHOD_DYNAMIC)
+        OPENSSL_free(meth);
+}
+
+void EC_KEY_METHOD_set_init(EC_KEY_METHOD *meth,
+                            int (*init)(EC_KEY *key),
+                            void (*finish)(EC_KEY *key),
+                            int (*copy)(EC_KEY *dest, const EC_KEY *src),
+                            int (*set_group)(EC_KEY *key, const EC_GROUP *grp),
+                            int (*set_private)(EC_KEY *key,
+                                               const BIGNUM *priv_key),
+                            int (*set_public)(EC_KEY *key,
+                                              const EC_POINT *pub_key))
+{
+    meth->init = init;
+    meth->finish = finish;
+    meth->copy = copy;
+    meth->set_group = set_group;
+    meth->set_private = set_private;
+    meth->set_public = set_public;
+}
+
+void EC_KEY_METHOD_set_keygen(EC_KEY_METHOD *meth,
+                              int (*keygen)(EC_KEY *key))
+{
+    meth->keygen = keygen;
+}
+
+void EC_KEY_METHOD_set_compute_key(EC_KEY_METHOD *meth,
+                                   int (*ckey)(unsigned char **psec,
+                                               size_t *pseclen,
+                                               const EC_POINT *pub_key,
+                                               const EC_KEY *ecdh))
+{
+    meth->compute_key = ckey;
+}
+
+void EC_KEY_METHOD_set_sign(EC_KEY_METHOD *meth,
+                            int (*sign)(int type, const unsigned char *dgst,
+                                        int dlen, unsigned char *sig,
+                                        unsigned int *siglen,
+                                        const BIGNUM *kinv, const BIGNUM *r,
+                                        EC_KEY *eckey),
+                            int (*sign_setup)(EC_KEY *eckey, BN_CTX *ctx_in,
+                                              BIGNUM **kinvp, BIGNUM **rp),
+                            ECDSA_SIG *(*sign_sig)(const unsigned char *dgst,
+                                                   int dgst_len,
+                                                   const BIGNUM *in_kinv,
+                                                   const BIGNUM *in_r,
+                                                   EC_KEY *eckey))
+{
+    meth->sign = sign;
+    meth->sign_setup = sign_setup;
+    meth->sign_sig = sign_sig;
+}
+
+void EC_KEY_METHOD_set_verify(EC_KEY_METHOD *meth,
+                              int (*verify)(int type, const unsigned
+                                            char *dgst, int dgst_len,
+                                            const unsigned char *sigbuf,
+                                            int sig_len, EC_KEY *eckey),
+                              int (*verify_sig)(const unsigned char *dgst,
+                                                int dgst_len,
+                                                const ECDSA_SIG *sig,
+                                                EC_KEY *eckey))
+{
+    meth->verify = verify;
+    meth->verify_sig = verify_sig;
+}
+
+void EC_KEY_METHOD_get_init(const EC_KEY_METHOD *meth,
+                            int (**pinit)(EC_KEY *key),
+                            void (**pfinish)(EC_KEY *key),
+                            int (**pcopy)(EC_KEY *dest, const EC_KEY *src),
+                            int (**pset_group)(EC_KEY *key,
+                                               const EC_GROUP *grp),
+                            int (**pset_private)(EC_KEY *key,
+                                                 const BIGNUM *priv_key),
+                            int (**pset_public)(EC_KEY *key,
+                                                const EC_POINT *pub_key))
+{
+    if (pinit != NULL)
+        *pinit = meth->init;
+    if (pfinish != NULL)
+        *pfinish = meth->finish;
+    if (pcopy != NULL)
+        *pcopy = meth->copy;
+    if (pset_group != NULL)
+        *pset_group = meth->set_group;
+    if (pset_private != NULL)
+        *pset_private = meth->set_private;
+    if (pset_public != NULL)
+        *pset_public = meth->set_public;
+}
+
+void EC_KEY_METHOD_get_keygen(const EC_KEY_METHOD *meth,
+                              int (**pkeygen)(EC_KEY *key))
+{
+    if (pkeygen != NULL)
+        *pkeygen = meth->keygen;
+}
+
+void EC_KEY_METHOD_get_compute_key(const EC_KEY_METHOD *meth,
+                                   int (**pck)(unsigned char **pout,
+                                               size_t *poutlen,
+                                               const EC_POINT *pub_key,
+                                               const EC_KEY *ecdh))
+{
+    if (pck != NULL)
+        *pck = meth->compute_key;
+}
+
+void EC_KEY_METHOD_get_sign(const EC_KEY_METHOD *meth,
+                            int (**psign)(int type, const unsigned char *dgst,
+                                          int dlen, unsigned char *sig,
+                                          unsigned int *siglen,
+                                          const BIGNUM *kinv, const BIGNUM *r,
+                                          EC_KEY *eckey),
+                            int (**psign_setup)(EC_KEY *eckey, BN_CTX *ctx_in,
+                                                BIGNUM **kinvp, BIGNUM **rp),
+                            ECDSA_SIG *(**psign_sig)(const unsigned char *dgst,
+                                                     int dgst_len,
+                                                     const BIGNUM *in_kinv,
+                                                     const BIGNUM *in_r,
+                                                     EC_KEY *eckey))
+{
+    if (psign != NULL)
+        *psign = meth->sign;
+    if (psign_setup != NULL)
+        *psign_setup = meth->sign_setup;
+    if (psign_sig != NULL)
+        *psign_sig = meth->sign_sig;
+}
+
+void EC_KEY_METHOD_get_verify(const EC_KEY_METHOD *meth,
+                              int (**pverify)(int type, const unsigned
+                                              char *dgst, int dgst_len,
+                                              const unsigned char *sigbuf,
+                                              int sig_len, EC_KEY *eckey),
+                              int (**pverify_sig)(const unsigned char *dgst,
+                                                  int dgst_len,
+                                                  const ECDSA_SIG *sig,
+                                                  EC_KEY *eckey))
+{
+    if (pverify != NULL)
+        *pverify = meth->verify;
+    if (pverify_sig != NULL)
+        *pverify_sig = meth->verify_sig;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_lcl.h
new file mode 100644
index 000000000..119255f1d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_lcl.h
@@ -0,0 +1,737 @@
+/*
+ * Copyright 2001-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdlib.h>
+
+#include <openssl/obj_mac.h>
+#include <openssl/ec.h>
+#include <openssl/bn.h>
+#include "internal/refcount.h"
+#include "internal/ec_int.h"
+
+#if defined(__SUNPRO_C)
+# if __SUNPRO_C >= 0x520
+#  pragma error_messages (off,E_ARRAY_OF_INCOMPLETE_NONAME,E_ARRAY_OF_INCOMPLETE)
+# endif
+#endif
+
+/* Use default functions for poin2oct, oct2point and compressed coordinates */
+#define EC_FLAGS_DEFAULT_OCT    0x1
+
+/* Use custom formats for EC_GROUP, EC_POINT and EC_KEY */
+#define EC_FLAGS_CUSTOM_CURVE   0x2
+
+/* Curve does not support signing operations */
+#define EC_FLAGS_NO_SIGN        0x4
+
+/*
+ * Structure details are not part of the exported interface, so all this may
+ * change in future versions.
+ */
+
+struct ec_method_st {
+    /* Various method flags */
+    int flags;
+    /* used by EC_METHOD_get_field_type: */
+    int field_type;             /* a NID */
+    /*
+     * used by EC_GROUP_new, EC_GROUP_free, EC_GROUP_clear_free,
+     * EC_GROUP_copy:
+     */
+    int (*group_init) (EC_GROUP *);
+    void (*group_finish) (EC_GROUP *);
+    void (*group_clear_finish) (EC_GROUP *);
+    int (*group_copy) (EC_GROUP *, const EC_GROUP *);
+    /* used by EC_GROUP_set_curve, EC_GROUP_get_curve: */
+    int (*group_set_curve) (EC_GROUP *, const BIGNUM *p, const BIGNUM *a,
+                            const BIGNUM *b, BN_CTX *);
+    int (*group_get_curve) (const EC_GROUP *, BIGNUM *p, BIGNUM *a, BIGNUM *b,
+                            BN_CTX *);
+    /* used by EC_GROUP_get_degree: */
+    int (*group_get_degree) (const EC_GROUP *);
+    int (*group_order_bits) (const EC_GROUP *);
+    /* used by EC_GROUP_check: */
+    int (*group_check_discriminant) (const EC_GROUP *, BN_CTX *);
+    /*
+     * used by EC_POINT_new, EC_POINT_free, EC_POINT_clear_free,
+     * EC_POINT_copy:
+     */
+    int (*point_init) (EC_POINT *);
+    void (*point_finish) (EC_POINT *);
+    void (*point_clear_finish) (EC_POINT *);
+    int (*point_copy) (EC_POINT *, const EC_POINT *);
+    /*-
+     * used by EC_POINT_set_to_infinity,
+     * EC_POINT_set_Jprojective_coordinates_GFp,
+     * EC_POINT_get_Jprojective_coordinates_GFp,
+     * EC_POINT_set_affine_coordinates,
+     * EC_POINT_get_affine_coordinates,
+     * EC_POINT_set_compressed_coordinates:
+     */
+    int (*point_set_to_infinity) (const EC_GROUP *, EC_POINT *);
+    int (*point_set_Jprojective_coordinates_GFp) (const EC_GROUP *,
+                                                  EC_POINT *, const BIGNUM *x,
+                                                  const BIGNUM *y,
+                                                  const BIGNUM *z, BN_CTX *);
+    int (*point_get_Jprojective_coordinates_GFp) (const EC_GROUP *,
+                                                  const EC_POINT *, BIGNUM *x,
+                                                  BIGNUM *y, BIGNUM *z,
+                                                  BN_CTX *);
+    int (*point_set_affine_coordinates) (const EC_GROUP *, EC_POINT *,
+                                         const BIGNUM *x, const BIGNUM *y,
+                                         BN_CTX *);
+    int (*point_get_affine_coordinates) (const EC_GROUP *, const EC_POINT *,
+                                         BIGNUM *x, BIGNUM *y, BN_CTX *);
+    int (*point_set_compressed_coordinates) (const EC_GROUP *, EC_POINT *,
+                                             const BIGNUM *x, int y_bit,
+                                             BN_CTX *);
+    /* used by EC_POINT_point2oct, EC_POINT_oct2point: */
+    size_t (*point2oct) (const EC_GROUP *, const EC_POINT *,
+                         point_conversion_form_t form, unsigned char *buf,
+                         size_t len, BN_CTX *);
+    int (*oct2point) (const EC_GROUP *, EC_POINT *, const unsigned char *buf,
+                      size_t len, BN_CTX *);
+    /* used by EC_POINT_add, EC_POINT_dbl, ECP_POINT_invert: */
+    int (*add) (const EC_GROUP *, EC_POINT *r, const EC_POINT *a,
+                const EC_POINT *b, BN_CTX *);
+    int (*dbl) (const EC_GROUP *, EC_POINT *r, const EC_POINT *a, BN_CTX *);
+    int (*invert) (const EC_GROUP *, EC_POINT *, BN_CTX *);
+    /*
+     * used by EC_POINT_is_at_infinity, EC_POINT_is_on_curve, EC_POINT_cmp:
+     */
+    int (*is_at_infinity) (const EC_GROUP *, const EC_POINT *);
+    int (*is_on_curve) (const EC_GROUP *, const EC_POINT *, BN_CTX *);
+    int (*point_cmp) (const EC_GROUP *, const EC_POINT *a, const EC_POINT *b,
+                      BN_CTX *);
+    /* used by EC_POINT_make_affine, EC_POINTs_make_affine: */
+    int (*make_affine) (const EC_GROUP *, EC_POINT *, BN_CTX *);
+    int (*points_make_affine) (const EC_GROUP *, size_t num, EC_POINT *[],
+                               BN_CTX *);
+    /*
+     * used by EC_POINTs_mul, EC_POINT_mul, EC_POINT_precompute_mult,
+     * EC_POINT_have_precompute_mult (default implementations are used if the
+     * 'mul' pointer is 0):
+     */
+    /*-
+     * mul() calculates the value
+     *
+     *   r := generator * scalar
+     *        + points[0] * scalars[0]
+     *        + ...
+     *        + points[num-1] * scalars[num-1].
+     *
+     * For a fixed point multiplication (scalar != NULL, num == 0)
+     * or a variable point multiplication (scalar == NULL, num == 1),
+     * mul() must use a constant time algorithm: in both cases callers
+     * should provide an input scalar (either scalar or scalars[0])
+     * in the range [0, ec_group_order); for robustness, implementers
+     * should handle the case when the scalar has not been reduced, but
+     * may treat it as an unusual input, without any constant-timeness
+     * guarantee.
+     */
+    int (*mul) (const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
+                size_t num, const EC_POINT *points[], const BIGNUM *scalars[],
+                BN_CTX *);
+    int (*precompute_mult) (EC_GROUP *group, BN_CTX *);
+    int (*have_precompute_mult) (const EC_GROUP *group);
+    /* internal functions */
+    /*
+     * 'field_mul', 'field_sqr', and 'field_div' can be used by 'add' and
+     * 'dbl' so that the same implementations of point operations can be used
+     * with different optimized implementations of expensive field
+     * operations:
+     */
+    int (*field_mul) (const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                      const BIGNUM *b, BN_CTX *);
+    int (*field_sqr) (const EC_GROUP *, BIGNUM *r, const BIGNUM *a, BN_CTX *);
+    int (*field_div) (const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                      const BIGNUM *b, BN_CTX *);
+    /*-
+     * 'field_inv' computes the multipicative inverse of a in the field,
+     * storing the result in r.
+     *
+     * If 'a' is zero (or equivalent), you'll get an EC_R_CANNOT_INVERT error.
+     */
+    int (*field_inv) (const EC_GROUP *, BIGNUM *r, const BIGNUM *a, BN_CTX *);
+    /* e.g. to Montgomery */
+    int (*field_encode) (const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                         BN_CTX *);
+    /* e.g. from Montgomery */
+    int (*field_decode) (const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                         BN_CTX *);
+    int (*field_set_to_one) (const EC_GROUP *, BIGNUM *r, BN_CTX *);
+    /* private key operations */
+    size_t (*priv2oct)(const EC_KEY *eckey, unsigned char *buf, size_t len);
+    int (*oct2priv)(EC_KEY *eckey, const unsigned char *buf, size_t len);
+    int (*set_private)(EC_KEY *eckey, const BIGNUM *priv_key);
+    int (*keygen)(EC_KEY *eckey);
+    int (*keycheck)(const EC_KEY *eckey);
+    int (*keygenpub)(EC_KEY *eckey);
+    int (*keycopy)(EC_KEY *dst, const EC_KEY *src);
+    void (*keyfinish)(EC_KEY *eckey);
+    /* custom ECDH operation */
+    int (*ecdh_compute_key)(unsigned char **pout, size_t *poutlen,
+                            const EC_POINT *pub_key, const EC_KEY *ecdh);
+    /* Inverse modulo order */
+    int (*field_inverse_mod_ord)(const EC_GROUP *, BIGNUM *r,
+                                 const BIGNUM *x, BN_CTX *);
+    int (*blind_coordinates)(const EC_GROUP *group, EC_POINT *p, BN_CTX *ctx);
+    int (*ladder_pre)(const EC_GROUP *group,
+                      EC_POINT *r, EC_POINT *s,
+                      EC_POINT *p, BN_CTX *ctx);
+    int (*ladder_step)(const EC_GROUP *group,
+                       EC_POINT *r, EC_POINT *s,
+                       EC_POINT *p, BN_CTX *ctx);
+    int (*ladder_post)(const EC_GROUP *group,
+                       EC_POINT *r, EC_POINT *s,
+                       EC_POINT *p, BN_CTX *ctx);
+};
+
+/*
+ * Types and functions to manipulate pre-computed values.
+ */
+typedef struct nistp224_pre_comp_st NISTP224_PRE_COMP;
+typedef struct nistp256_pre_comp_st NISTP256_PRE_COMP;
+typedef struct nistp521_pre_comp_st NISTP521_PRE_COMP;
+typedef struct nistz256_pre_comp_st NISTZ256_PRE_COMP;
+typedef struct ec_pre_comp_st EC_PRE_COMP;
+
+struct ec_group_st {
+    const EC_METHOD *meth;
+    EC_POINT *generator;        /* optional */
+    BIGNUM *order, *cofactor;
+    int curve_name;             /* optional NID for named curve */
+    int asn1_flag;              /* flag to control the asn1 encoding */
+    point_conversion_form_t asn1_form;
+    unsigned char *seed;        /* optional seed for parameters (appears in
+                                 * ASN1) */
+    size_t seed_len;
+    /*
+     * The following members are handled by the method functions, even if
+     * they appear generic
+     */
+    /*
+     * Field specification. For curves over GF(p), this is the modulus; for
+     * curves over GF(2^m), this is the irreducible polynomial defining the
+     * field.
+     */
+    BIGNUM *field;
+    /*
+     * Field specification for curves over GF(2^m). The irreducible f(t) is
+     * then of the form: t^poly[0] + t^poly[1] + ... + t^poly[k] where m =
+     * poly[0] > poly[1] > ... > poly[k] = 0. The array is terminated with
+     * poly[k+1]=-1. All elliptic curve irreducibles have at most 5 non-zero
+     * terms.
+     */
+    int poly[6];
+    /*
+     * Curve coefficients. (Here the assumption is that BIGNUMs can be used
+     * or abused for all kinds of fields, not just GF(p).) For characteristic
+     * > 3, the curve is defined by a Weierstrass equation of the form y^2 =
+     * x^3 + a*x + b. For characteristic 2, the curve is defined by an
+     * equation of the form y^2 + x*y = x^3 + a*x^2 + b.
+     */
+    BIGNUM *a, *b;
+    /* enable optimized point arithmetics for special case */
+    int a_is_minus3;
+    /* method-specific (e.g., Montgomery structure) */
+    void *field_data1;
+    /* method-specific */
+    void *field_data2;
+    /* method-specific */
+    int (*field_mod_func) (BIGNUM *, const BIGNUM *, const BIGNUM *,
+                           BN_CTX *);
+    /* data for ECDSA inverse */
+    BN_MONT_CTX *mont_data;
+
+    /*
+     * Precomputed values for speed. The PCT_xxx names match the
+     * pre_comp.xxx union names; see the SETPRECOMP and HAVEPRECOMP
+     * macros, below.
+     */
+    enum {
+        PCT_none,
+        PCT_nistp224, PCT_nistp256, PCT_nistp521, PCT_nistz256,
+        PCT_ec
+    } pre_comp_type;
+    union {
+        NISTP224_PRE_COMP *nistp224;
+        NISTP256_PRE_COMP *nistp256;
+        NISTP521_PRE_COMP *nistp521;
+        NISTZ256_PRE_COMP *nistz256;
+        EC_PRE_COMP *ec;
+    } pre_comp;
+};
+
+#define SETPRECOMP(g, type, pre) \
+    g->pre_comp_type = PCT_##type, g->pre_comp.type = pre
+#define HAVEPRECOMP(g, type) \
+    g->pre_comp_type == PCT_##type && g->pre_comp.type != NULL
+
+struct ec_key_st {
+    const EC_KEY_METHOD *meth;
+    ENGINE *engine;
+    int version;
+    EC_GROUP *group;
+    EC_POINT *pub_key;
+    BIGNUM *priv_key;
+    unsigned int enc_flag;
+    point_conversion_form_t conv_form;
+    CRYPTO_REF_COUNT references;
+    int flags;
+    CRYPTO_EX_DATA ex_data;
+    CRYPTO_RWLOCK *lock;
+};
+
+struct ec_point_st {
+    const EC_METHOD *meth;
+    /* NID for the curve if known */
+    int curve_name;
+    /*
+     * All members except 'meth' are handled by the method functions, even if
+     * they appear generic
+     */
+    BIGNUM *X;
+    BIGNUM *Y;
+    BIGNUM *Z;                  /* Jacobian projective coordinates: * (X, Y,
+                                 * Z) represents (X/Z^2, Y/Z^3) if Z != 0 */
+    int Z_is_one;               /* enable optimized point arithmetics for
+                                 * special case */
+};
+
+static ossl_inline int ec_point_is_compat(const EC_POINT *point,
+                                          const EC_GROUP *group)
+{
+    if (group->meth != point->meth
+        || (group->curve_name != 0
+            && point->curve_name != 0
+            && group->curve_name != point->curve_name))
+        return 0;
+
+    return 1;
+}
+
+NISTP224_PRE_COMP *EC_nistp224_pre_comp_dup(NISTP224_PRE_COMP *);
+NISTP256_PRE_COMP *EC_nistp256_pre_comp_dup(NISTP256_PRE_COMP *);
+NISTP521_PRE_COMP *EC_nistp521_pre_comp_dup(NISTP521_PRE_COMP *);
+NISTZ256_PRE_COMP *EC_nistz256_pre_comp_dup(NISTZ256_PRE_COMP *);
+NISTP256_PRE_COMP *EC_nistp256_pre_comp_dup(NISTP256_PRE_COMP *);
+EC_PRE_COMP *EC_ec_pre_comp_dup(EC_PRE_COMP *);
+
+void EC_pre_comp_free(EC_GROUP *group);
+void EC_nistp224_pre_comp_free(NISTP224_PRE_COMP *);
+void EC_nistp256_pre_comp_free(NISTP256_PRE_COMP *);
+void EC_nistp521_pre_comp_free(NISTP521_PRE_COMP *);
+void EC_nistz256_pre_comp_free(NISTZ256_PRE_COMP *);
+void EC_ec_pre_comp_free(EC_PRE_COMP *);
+
+/*
+ * method functions in ec_mult.c (ec_lib.c uses these as defaults if
+ * group->method->mul is 0)
+ */
+int ec_wNAF_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
+                size_t num, const EC_POINT *points[], const BIGNUM *scalars[],
+                BN_CTX *);
+int ec_wNAF_precompute_mult(EC_GROUP *group, BN_CTX *);
+int ec_wNAF_have_precompute_mult(const EC_GROUP *group);
+
+/* method functions in ecp_smpl.c */
+int ec_GFp_simple_group_init(EC_GROUP *);
+void ec_GFp_simple_group_finish(EC_GROUP *);
+void ec_GFp_simple_group_clear_finish(EC_GROUP *);
+int ec_GFp_simple_group_copy(EC_GROUP *, const EC_GROUP *);
+int ec_GFp_simple_group_set_curve(EC_GROUP *, const BIGNUM *p,
+                                  const BIGNUM *a, const BIGNUM *b, BN_CTX *);
+int ec_GFp_simple_group_get_curve(const EC_GROUP *, BIGNUM *p, BIGNUM *a,
+                                  BIGNUM *b, BN_CTX *);
+int ec_GFp_simple_group_get_degree(const EC_GROUP *);
+int ec_GFp_simple_group_check_discriminant(const EC_GROUP *, BN_CTX *);
+int ec_GFp_simple_point_init(EC_POINT *);
+void ec_GFp_simple_point_finish(EC_POINT *);
+void ec_GFp_simple_point_clear_finish(EC_POINT *);
+int ec_GFp_simple_point_copy(EC_POINT *, const EC_POINT *);
+int ec_GFp_simple_point_set_to_infinity(const EC_GROUP *, EC_POINT *);
+int ec_GFp_simple_set_Jprojective_coordinates_GFp(const EC_GROUP *,
+                                                  EC_POINT *, const BIGNUM *x,
+                                                  const BIGNUM *y,
+                                                  const BIGNUM *z, BN_CTX *);
+int ec_GFp_simple_get_Jprojective_coordinates_GFp(const EC_GROUP *,
+                                                  const EC_POINT *, BIGNUM *x,
+                                                  BIGNUM *y, BIGNUM *z,
+                                                  BN_CTX *);
+int ec_GFp_simple_point_set_affine_coordinates(const EC_GROUP *, EC_POINT *,
+                                               const BIGNUM *x,
+                                               const BIGNUM *y, BN_CTX *);
+int ec_GFp_simple_point_get_affine_coordinates(const EC_GROUP *,
+                                               const EC_POINT *, BIGNUM *x,
+                                               BIGNUM *y, BN_CTX *);
+int ec_GFp_simple_set_compressed_coordinates(const EC_GROUP *, EC_POINT *,
+                                             const BIGNUM *x, int y_bit,
+                                             BN_CTX *);
+size_t ec_GFp_simple_point2oct(const EC_GROUP *, const EC_POINT *,
+                               point_conversion_form_t form,
+                               unsigned char *buf, size_t len, BN_CTX *);
+int ec_GFp_simple_oct2point(const EC_GROUP *, EC_POINT *,
+                            const unsigned char *buf, size_t len, BN_CTX *);
+int ec_GFp_simple_add(const EC_GROUP *, EC_POINT *r, const EC_POINT *a,
+                      const EC_POINT *b, BN_CTX *);
+int ec_GFp_simple_dbl(const EC_GROUP *, EC_POINT *r, const EC_POINT *a,
+                      BN_CTX *);
+int ec_GFp_simple_invert(const EC_GROUP *, EC_POINT *, BN_CTX *);
+int ec_GFp_simple_is_at_infinity(const EC_GROUP *, const EC_POINT *);
+int ec_GFp_simple_is_on_curve(const EC_GROUP *, const EC_POINT *, BN_CTX *);
+int ec_GFp_simple_cmp(const EC_GROUP *, const EC_POINT *a, const EC_POINT *b,
+                      BN_CTX *);
+int ec_GFp_simple_make_affine(const EC_GROUP *, EC_POINT *, BN_CTX *);
+int ec_GFp_simple_points_make_affine(const EC_GROUP *, size_t num,
+                                     EC_POINT *[], BN_CTX *);
+int ec_GFp_simple_field_mul(const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                            const BIGNUM *b, BN_CTX *);
+int ec_GFp_simple_field_sqr(const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                            BN_CTX *);
+int ec_GFp_simple_field_inv(const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                            BN_CTX *);
+int ec_GFp_simple_blind_coordinates(const EC_GROUP *group, EC_POINT *p,
+                                    BN_CTX *ctx);
+int ec_GFp_simple_ladder_pre(const EC_GROUP *group,
+                             EC_POINT *r, EC_POINT *s,
+                             EC_POINT *p, BN_CTX *ctx);
+int ec_GFp_simple_ladder_step(const EC_GROUP *group,
+                              EC_POINT *r, EC_POINT *s,
+                              EC_POINT *p, BN_CTX *ctx);
+int ec_GFp_simple_ladder_post(const EC_GROUP *group,
+                              EC_POINT *r, EC_POINT *s,
+                              EC_POINT *p, BN_CTX *ctx);
+
+/* method functions in ecp_mont.c */
+int ec_GFp_mont_group_init(EC_GROUP *);
+int ec_GFp_mont_group_set_curve(EC_GROUP *, const BIGNUM *p, const BIGNUM *a,
+                                const BIGNUM *b, BN_CTX *);
+void ec_GFp_mont_group_finish(EC_GROUP *);
+void ec_GFp_mont_group_clear_finish(EC_GROUP *);
+int ec_GFp_mont_group_copy(EC_GROUP *, const EC_GROUP *);
+int ec_GFp_mont_field_mul(const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                          const BIGNUM *b, BN_CTX *);
+int ec_GFp_mont_field_sqr(const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                          BN_CTX *);
+int ec_GFp_mont_field_inv(const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                          BN_CTX *);
+int ec_GFp_mont_field_encode(const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                             BN_CTX *);
+int ec_GFp_mont_field_decode(const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                             BN_CTX *);
+int ec_GFp_mont_field_set_to_one(const EC_GROUP *, BIGNUM *r, BN_CTX *);
+
+/* method functions in ecp_nist.c */
+int ec_GFp_nist_group_copy(EC_GROUP *dest, const EC_GROUP *src);
+int ec_GFp_nist_group_set_curve(EC_GROUP *, const BIGNUM *p, const BIGNUM *a,
+                                const BIGNUM *b, BN_CTX *);
+int ec_GFp_nist_field_mul(const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                          const BIGNUM *b, BN_CTX *);
+int ec_GFp_nist_field_sqr(const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                          BN_CTX *);
+
+/* method functions in ec2_smpl.c */
+int ec_GF2m_simple_group_init(EC_GROUP *);
+void ec_GF2m_simple_group_finish(EC_GROUP *);
+void ec_GF2m_simple_group_clear_finish(EC_GROUP *);
+int ec_GF2m_simple_group_copy(EC_GROUP *, const EC_GROUP *);
+int ec_GF2m_simple_group_set_curve(EC_GROUP *, const BIGNUM *p,
+                                   const BIGNUM *a, const BIGNUM *b,
+                                   BN_CTX *);
+int ec_GF2m_simple_group_get_curve(const EC_GROUP *, BIGNUM *p, BIGNUM *a,
+                                   BIGNUM *b, BN_CTX *);
+int ec_GF2m_simple_group_get_degree(const EC_GROUP *);
+int ec_GF2m_simple_group_check_discriminant(const EC_GROUP *, BN_CTX *);
+int ec_GF2m_simple_point_init(EC_POINT *);
+void ec_GF2m_simple_point_finish(EC_POINT *);
+void ec_GF2m_simple_point_clear_finish(EC_POINT *);
+int ec_GF2m_simple_point_copy(EC_POINT *, const EC_POINT *);
+int ec_GF2m_simple_point_set_to_infinity(const EC_GROUP *, EC_POINT *);
+int ec_GF2m_simple_point_set_affine_coordinates(const EC_GROUP *, EC_POINT *,
+                                                const BIGNUM *x,
+                                                const BIGNUM *y, BN_CTX *);
+int ec_GF2m_simple_point_get_affine_coordinates(const EC_GROUP *,
+                                                const EC_POINT *, BIGNUM *x,
+                                                BIGNUM *y, BN_CTX *);
+int ec_GF2m_simple_set_compressed_coordinates(const EC_GROUP *, EC_POINT *,
+                                              const BIGNUM *x, int y_bit,
+                                              BN_CTX *);
+size_t ec_GF2m_simple_point2oct(const EC_GROUP *, const EC_POINT *,
+                                point_conversion_form_t form,
+                                unsigned char *buf, size_t len, BN_CTX *);
+int ec_GF2m_simple_oct2point(const EC_GROUP *, EC_POINT *,
+                             const unsigned char *buf, size_t len, BN_CTX *);
+int ec_GF2m_simple_add(const EC_GROUP *, EC_POINT *r, const EC_POINT *a,
+                       const EC_POINT *b, BN_CTX *);
+int ec_GF2m_simple_dbl(const EC_GROUP *, EC_POINT *r, const EC_POINT *a,
+                       BN_CTX *);
+int ec_GF2m_simple_invert(const EC_GROUP *, EC_POINT *, BN_CTX *);
+int ec_GF2m_simple_is_at_infinity(const EC_GROUP *, const EC_POINT *);
+int ec_GF2m_simple_is_on_curve(const EC_GROUP *, const EC_POINT *, BN_CTX *);
+int ec_GF2m_simple_cmp(const EC_GROUP *, const EC_POINT *a, const EC_POINT *b,
+                       BN_CTX *);
+int ec_GF2m_simple_make_affine(const EC_GROUP *, EC_POINT *, BN_CTX *);
+int ec_GF2m_simple_points_make_affine(const EC_GROUP *, size_t num,
+                                      EC_POINT *[], BN_CTX *);
+int ec_GF2m_simple_field_mul(const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                             const BIGNUM *b, BN_CTX *);
+int ec_GF2m_simple_field_sqr(const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                             BN_CTX *);
+int ec_GF2m_simple_field_div(const EC_GROUP *, BIGNUM *r, const BIGNUM *a,
+                             const BIGNUM *b, BN_CTX *);
+
+#ifndef OPENSSL_NO_EC_NISTP_64_GCC_128
+/* method functions in ecp_nistp224.c */
+int ec_GFp_nistp224_group_init(EC_GROUP *group);
+int ec_GFp_nistp224_group_set_curve(EC_GROUP *group, const BIGNUM *p,
+                                    const BIGNUM *a, const BIGNUM *n,
+                                    BN_CTX *);
+int ec_GFp_nistp224_point_get_affine_coordinates(const EC_GROUP *group,
+                                                 const EC_POINT *point,
+                                                 BIGNUM *x, BIGNUM *y,
+                                                 BN_CTX *ctx);
+int ec_GFp_nistp224_mul(const EC_GROUP *group, EC_POINT *r,
+                        const BIGNUM *scalar, size_t num,
+                        const EC_POINT *points[], const BIGNUM *scalars[],
+                        BN_CTX *);
+int ec_GFp_nistp224_points_mul(const EC_GROUP *group, EC_POINT *r,
+                               const BIGNUM *scalar, size_t num,
+                               const EC_POINT *points[],
+                               const BIGNUM *scalars[], BN_CTX *ctx);
+int ec_GFp_nistp224_precompute_mult(EC_GROUP *group, BN_CTX *ctx);
+int ec_GFp_nistp224_have_precompute_mult(const EC_GROUP *group);
+
+/* method functions in ecp_nistp256.c */
+int ec_GFp_nistp256_group_init(EC_GROUP *group);
+int ec_GFp_nistp256_group_set_curve(EC_GROUP *group, const BIGNUM *p,
+                                    const BIGNUM *a, const BIGNUM *n,
+                                    BN_CTX *);
+int ec_GFp_nistp256_point_get_affine_coordinates(const EC_GROUP *group,
+                                                 const EC_POINT *point,
+                                                 BIGNUM *x, BIGNUM *y,
+                                                 BN_CTX *ctx);
+int ec_GFp_nistp256_mul(const EC_GROUP *group, EC_POINT *r,
+                        const BIGNUM *scalar, size_t num,
+                        const EC_POINT *points[], const BIGNUM *scalars[],
+                        BN_CTX *);
+int ec_GFp_nistp256_points_mul(const EC_GROUP *group, EC_POINT *r,
+                               const BIGNUM *scalar, size_t num,
+                               const EC_POINT *points[],
+                               const BIGNUM *scalars[], BN_CTX *ctx);
+int ec_GFp_nistp256_precompute_mult(EC_GROUP *group, BN_CTX *ctx);
+int ec_GFp_nistp256_have_precompute_mult(const EC_GROUP *group);
+
+/* method functions in ecp_nistp521.c */
+int ec_GFp_nistp521_group_init(EC_GROUP *group);
+int ec_GFp_nistp521_group_set_curve(EC_GROUP *group, const BIGNUM *p,
+                                    const BIGNUM *a, const BIGNUM *n,
+                                    BN_CTX *);
+int ec_GFp_nistp521_point_get_affine_coordinates(const EC_GROUP *group,
+                                                 const EC_POINT *point,
+                                                 BIGNUM *x, BIGNUM *y,
+                                                 BN_CTX *ctx);
+int ec_GFp_nistp521_mul(const EC_GROUP *group, EC_POINT *r,
+                        const BIGNUM *scalar, size_t num,
+                        const EC_POINT *points[], const BIGNUM *scalars[],
+                        BN_CTX *);
+int ec_GFp_nistp521_points_mul(const EC_GROUP *group, EC_POINT *r,
+                               const BIGNUM *scalar, size_t num,
+                               const EC_POINT *points[],
+                               const BIGNUM *scalars[], BN_CTX *ctx);
+int ec_GFp_nistp521_precompute_mult(EC_GROUP *group, BN_CTX *ctx);
+int ec_GFp_nistp521_have_precompute_mult(const EC_GROUP *group);
+
+/* utility functions in ecp_nistputil.c */
+void ec_GFp_nistp_points_make_affine_internal(size_t num, void *point_array,
+                                              size_t felem_size,
+                                              void *tmp_felems,
+                                              void (*felem_one) (void *out),
+                                              int (*felem_is_zero) (const void
+                                                                    *in),
+                                              void (*felem_assign) (void *out,
+                                                                    const void
+                                                                    *in),
+                                              void (*felem_square) (void *out,
+                                                                    const void
+                                                                    *in),
+                                              void (*felem_mul) (void *out,
+                                                                 const void
+                                                                 *in1,
+                                                                 const void
+                                                                 *in2),
+                                              void (*felem_inv) (void *out,
+                                                                 const void
+                                                                 *in),
+                                              void (*felem_contract) (void
+                                                                      *out,
+                                                                      const
+                                                                      void
+                                                                      *in));
+void ec_GFp_nistp_recode_scalar_bits(unsigned char *sign,
+                                     unsigned char *digit, unsigned char in);
+#endif
+int ec_group_simple_order_bits(const EC_GROUP *group);
+
+#ifdef ECP_NISTZ256_ASM
+/** Returns GFp methods using montgomery multiplication, with x86-64 optimized
+ * P256. See http://eprint.iacr.org/2013/816.
+ *  \return  EC_METHOD object
+ */
+const EC_METHOD *EC_GFp_nistz256_method(void);
+#endif
+
+size_t ec_key_simple_priv2oct(const EC_KEY *eckey,
+                              unsigned char *buf, size_t len);
+int ec_key_simple_oct2priv(EC_KEY *eckey, const unsigned char *buf, size_t len);
+int ec_key_simple_generate_key(EC_KEY *eckey);
+int ec_key_simple_generate_public_key(EC_KEY *eckey);
+int ec_key_simple_check_key(const EC_KEY *eckey);
+
+/* EC_METHOD definitions */
+
+struct ec_key_method_st {
+    const char *name;
+    int32_t flags;
+    int (*init)(EC_KEY *key);
+    void (*finish)(EC_KEY *key);
+    int (*copy)(EC_KEY *dest, const EC_KEY *src);
+    int (*set_group)(EC_KEY *key, const EC_GROUP *grp);
+    int (*set_private)(EC_KEY *key, const BIGNUM *priv_key);
+    int (*set_public)(EC_KEY *key, const EC_POINT *pub_key);
+    int (*keygen)(EC_KEY *key);
+    int (*compute_key)(unsigned char **pout, size_t *poutlen,
+                       const EC_POINT *pub_key, const EC_KEY *ecdh);
+    int (*sign)(int type, const unsigned char *dgst, int dlen, unsigned char
+                *sig, unsigned int *siglen, const BIGNUM *kinv,
+                const BIGNUM *r, EC_KEY *eckey);
+    int (*sign_setup)(EC_KEY *eckey, BN_CTX *ctx_in, BIGNUM **kinvp,
+                      BIGNUM **rp);
+    ECDSA_SIG *(*sign_sig)(const unsigned char *dgst, int dgst_len,
+                           const BIGNUM *in_kinv, const BIGNUM *in_r,
+                           EC_KEY *eckey);
+
+    int (*verify)(int type, const unsigned char *dgst, int dgst_len,
+                  const unsigned char *sigbuf, int sig_len, EC_KEY *eckey);
+    int (*verify_sig)(const unsigned char *dgst, int dgst_len,
+                      const ECDSA_SIG *sig, EC_KEY *eckey);
+};
+
+#define EC_KEY_METHOD_DYNAMIC   1
+
+int ossl_ec_key_gen(EC_KEY *eckey);
+int ossl_ecdh_compute_key(unsigned char **pout, size_t *poutlen,
+                          const EC_POINT *pub_key, const EC_KEY *ecdh);
+int ecdh_simple_compute_key(unsigned char **pout, size_t *poutlen,
+                            const EC_POINT *pub_key, const EC_KEY *ecdh);
+
+struct ECDSA_SIG_st {
+    BIGNUM *r;
+    BIGNUM *s;
+};
+
+int ossl_ecdsa_sign_setup(EC_KEY *eckey, BN_CTX *ctx_in, BIGNUM **kinvp,
+                          BIGNUM **rp);
+int ossl_ecdsa_sign(int type, const unsigned char *dgst, int dlen,
+                    unsigned char *sig, unsigned int *siglen,
+                    const BIGNUM *kinv, const BIGNUM *r, EC_KEY *eckey);
+ECDSA_SIG *ossl_ecdsa_sign_sig(const unsigned char *dgst, int dgst_len,
+                               const BIGNUM *in_kinv, const BIGNUM *in_r,
+                               EC_KEY *eckey);
+int ossl_ecdsa_verify(int type, const unsigned char *dgst, int dgst_len,
+                      const unsigned char *sigbuf, int sig_len, EC_KEY *eckey);
+int ossl_ecdsa_verify_sig(const unsigned char *dgst, int dgst_len,
+                          const ECDSA_SIG *sig, EC_KEY *eckey);
+
+int ED25519_sign(uint8_t *out_sig, const uint8_t *message, size_t message_len,
+                 const uint8_t public_key[32], const uint8_t private_key[32]);
+int ED25519_verify(const uint8_t *message, size_t message_len,
+                   const uint8_t signature[64], const uint8_t public_key[32]);
+void ED25519_public_from_private(uint8_t out_public_key[32],
+                                 const uint8_t private_key[32]);
+
+int X25519(uint8_t out_shared_key[32], const uint8_t private_key[32],
+           const uint8_t peer_public_value[32]);
+void X25519_public_from_private(uint8_t out_public_value[32],
+                                const uint8_t private_key[32]);
+
+/*-
+ * This functions computes a single point multiplication over the EC group,
+ * using, at a high level, a Montgomery ladder with conditional swaps, with
+ * various timing attack defenses.
+ *
+ * It performs either a fixed point multiplication
+ *          (scalar * generator)
+ * when point is NULL, or a variable point multiplication
+ *          (scalar * point)
+ * when point is not NULL.
+ *
+ * `scalar` cannot be NULL and should be in the range [0,n) otherwise all
+ * constant time bets are off (where n is the cardinality of the EC group).
+ *
+ * This function expects `group->order` and `group->cardinality` to be well
+ * defined and non-zero: it fails with an error code otherwise.
+ *
+ * NB: This says nothing about the constant-timeness of the ladder step
+ * implementation (i.e., the default implementation is based on EC_POINT_add and
+ * EC_POINT_dbl, which of course are not constant time themselves) or the
+ * underlying multiprecision arithmetic.
+ *
+ * The product is stored in `r`.
+ *
+ * This is an internal function: callers are in charge of ensuring that the
+ * input parameters `group`, `r`, `scalar` and `ctx` are not NULL.
+ *
+ * Returns 1 on success, 0 otherwise.
+ */
+int ec_scalar_mul_ladder(const EC_GROUP *group, EC_POINT *r,
+                         const BIGNUM *scalar, const EC_POINT *point,
+                         BN_CTX *ctx);
+
+int ec_point_blind_coordinates(const EC_GROUP *group, EC_POINT *p, BN_CTX *ctx);
+
+static ossl_inline int ec_point_ladder_pre(const EC_GROUP *group,
+                                           EC_POINT *r, EC_POINT *s,
+                                           EC_POINT *p, BN_CTX *ctx)
+{
+    if (group->meth->ladder_pre != NULL)
+        return group->meth->ladder_pre(group, r, s, p, ctx);
+
+    if (!EC_POINT_copy(s, p)
+        || !EC_POINT_dbl(group, r, s, ctx))
+        return 0;
+
+    return 1;
+}
+
+static ossl_inline int ec_point_ladder_step(const EC_GROUP *group,
+                                            EC_POINT *r, EC_POINT *s,
+                                            EC_POINT *p, BN_CTX *ctx)
+{
+    if (group->meth->ladder_step != NULL)
+        return group->meth->ladder_step(group, r, s, p, ctx);
+
+    if (!EC_POINT_add(group, s, r, s, ctx)
+        || !EC_POINT_dbl(group, r, r, ctx))
+        return 0;
+
+    return 1;
+
+}
+
+static ossl_inline int ec_point_ladder_post(const EC_GROUP *group,
+                                            EC_POINT *r, EC_POINT *s,
+                                            EC_POINT *p, BN_CTX *ctx)
+{
+    if (group->meth->ladder_post != NULL)
+        return group->meth->ladder_post(group, r, s, p, ctx);
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_lib.c
new file mode 100644
index 000000000..b89e3979d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_lib.c
@@ -0,0 +1,1121 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+
+#include <openssl/err.h>
+#include <openssl/opensslv.h>
+
+#include "ec_lcl.h"
+
+/* functions for EC_GROUP objects */
+
+EC_GROUP *EC_GROUP_new(const EC_METHOD *meth)
+{
+    EC_GROUP *ret;
+
+    if (meth == NULL) {
+        ECerr(EC_F_EC_GROUP_NEW, EC_R_SLOT_FULL);
+        return NULL;
+    }
+    if (meth->group_init == 0) {
+        ECerr(EC_F_EC_GROUP_NEW, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return NULL;
+    }
+
+    ret = OPENSSL_zalloc(sizeof(*ret));
+    if (ret == NULL) {
+        ECerr(EC_F_EC_GROUP_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ret->meth = meth;
+    if ((ret->meth->flags & EC_FLAGS_CUSTOM_CURVE) == 0) {
+        ret->order = BN_new();
+        if (ret->order == NULL)
+            goto err;
+        ret->cofactor = BN_new();
+        if (ret->cofactor == NULL)
+            goto err;
+    }
+    ret->asn1_flag = OPENSSL_EC_NAMED_CURVE;
+    ret->asn1_form = POINT_CONVERSION_UNCOMPRESSED;
+    if (!meth->group_init(ret))
+        goto err;
+    return ret;
+
+ err:
+    BN_free(ret->order);
+    BN_free(ret->cofactor);
+    OPENSSL_free(ret);
+    return NULL;
+}
+
+void EC_pre_comp_free(EC_GROUP *group)
+{
+    switch (group->pre_comp_type) {
+    case PCT_none:
+        break;
+    case PCT_nistz256:
+#ifdef ECP_NISTZ256_ASM
+        EC_nistz256_pre_comp_free(group->pre_comp.nistz256);
+#endif
+        break;
+#ifndef OPENSSL_NO_EC_NISTP_64_GCC_128
+    case PCT_nistp224:
+        EC_nistp224_pre_comp_free(group->pre_comp.nistp224);
+        break;
+    case PCT_nistp256:
+        EC_nistp256_pre_comp_free(group->pre_comp.nistp256);
+        break;
+    case PCT_nistp521:
+        EC_nistp521_pre_comp_free(group->pre_comp.nistp521);
+        break;
+#else
+    case PCT_nistp224:
+    case PCT_nistp256:
+    case PCT_nistp521:
+        break;
+#endif
+    case PCT_ec:
+        EC_ec_pre_comp_free(group->pre_comp.ec);
+        break;
+    }
+    group->pre_comp.ec = NULL;
+}
+
+void EC_GROUP_free(EC_GROUP *group)
+{
+    if (!group)
+        return;
+
+    if (group->meth->group_finish != 0)
+        group->meth->group_finish(group);
+
+    EC_pre_comp_free(group);
+    BN_MONT_CTX_free(group->mont_data);
+    EC_POINT_free(group->generator);
+    BN_free(group->order);
+    BN_free(group->cofactor);
+    OPENSSL_free(group->seed);
+    OPENSSL_free(group);
+}
+
+void EC_GROUP_clear_free(EC_GROUP *group)
+{
+    if (!group)
+        return;
+
+    if (group->meth->group_clear_finish != 0)
+        group->meth->group_clear_finish(group);
+    else if (group->meth->group_finish != 0)
+        group->meth->group_finish(group);
+
+    EC_pre_comp_free(group);
+    BN_MONT_CTX_free(group->mont_data);
+    EC_POINT_clear_free(group->generator);
+    BN_clear_free(group->order);
+    BN_clear_free(group->cofactor);
+    OPENSSL_clear_free(group->seed, group->seed_len);
+    OPENSSL_clear_free(group, sizeof(*group));
+}
+
+int EC_GROUP_copy(EC_GROUP *dest, const EC_GROUP *src)
+{
+    if (dest->meth->group_copy == 0) {
+        ECerr(EC_F_EC_GROUP_COPY, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (dest->meth != src->meth) {
+        ECerr(EC_F_EC_GROUP_COPY, EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    if (dest == src)
+        return 1;
+
+    dest->curve_name = src->curve_name;
+
+    /* Copy precomputed */
+    dest->pre_comp_type = src->pre_comp_type;
+    switch (src->pre_comp_type) {
+    case PCT_none:
+        dest->pre_comp.ec = NULL;
+        break;
+    case PCT_nistz256:
+#ifdef ECP_NISTZ256_ASM
+        dest->pre_comp.nistz256 = EC_nistz256_pre_comp_dup(src->pre_comp.nistz256);
+#endif
+        break;
+#ifndef OPENSSL_NO_EC_NISTP_64_GCC_128
+    case PCT_nistp224:
+        dest->pre_comp.nistp224 = EC_nistp224_pre_comp_dup(src->pre_comp.nistp224);
+        break;
+    case PCT_nistp256:
+        dest->pre_comp.nistp256 = EC_nistp256_pre_comp_dup(src->pre_comp.nistp256);
+        break;
+    case PCT_nistp521:
+        dest->pre_comp.nistp521 = EC_nistp521_pre_comp_dup(src->pre_comp.nistp521);
+        break;
+#else
+    case PCT_nistp224:
+    case PCT_nistp256:
+    case PCT_nistp521:
+        break;
+#endif
+    case PCT_ec:
+        dest->pre_comp.ec = EC_ec_pre_comp_dup(src->pre_comp.ec);
+        break;
+    }
+
+    if (src->mont_data != NULL) {
+        if (dest->mont_data == NULL) {
+            dest->mont_data = BN_MONT_CTX_new();
+            if (dest->mont_data == NULL)
+                return 0;
+        }
+        if (!BN_MONT_CTX_copy(dest->mont_data, src->mont_data))
+            return 0;
+    } else {
+        /* src->generator == NULL */
+        BN_MONT_CTX_free(dest->mont_data);
+        dest->mont_data = NULL;
+    }
+
+    if (src->generator != NULL) {
+        if (dest->generator == NULL) {
+            dest->generator = EC_POINT_new(dest);
+            if (dest->generator == NULL)
+                return 0;
+        }
+        if (!EC_POINT_copy(dest->generator, src->generator))
+            return 0;
+    } else {
+        /* src->generator == NULL */
+        EC_POINT_clear_free(dest->generator);
+        dest->generator = NULL;
+    }
+
+    if ((src->meth->flags & EC_FLAGS_CUSTOM_CURVE) == 0) {
+        if (!BN_copy(dest->order, src->order))
+            return 0;
+        if (!BN_copy(dest->cofactor, src->cofactor))
+            return 0;
+    }
+
+    dest->asn1_flag = src->asn1_flag;
+    dest->asn1_form = src->asn1_form;
+
+    if (src->seed) {
+        OPENSSL_free(dest->seed);
+        if ((dest->seed = OPENSSL_malloc(src->seed_len)) == NULL) {
+            ECerr(EC_F_EC_GROUP_COPY, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        if (!memcpy(dest->seed, src->seed, src->seed_len))
+            return 0;
+        dest->seed_len = src->seed_len;
+    } else {
+        OPENSSL_free(dest->seed);
+        dest->seed = NULL;
+        dest->seed_len = 0;
+    }
+
+    return dest->meth->group_copy(dest, src);
+}
+
+EC_GROUP *EC_GROUP_dup(const EC_GROUP *a)
+{
+    EC_GROUP *t = NULL;
+    int ok = 0;
+
+    if (a == NULL)
+        return NULL;
+
+    if ((t = EC_GROUP_new(a->meth)) == NULL)
+        return NULL;
+    if (!EC_GROUP_copy(t, a))
+        goto err;
+
+    ok = 1;
+
+ err:
+    if (!ok) {
+        EC_GROUP_free(t);
+        return NULL;
+    }
+        return t;
+}
+
+const EC_METHOD *EC_GROUP_method_of(const EC_GROUP *group)
+{
+    return group->meth;
+}
+
+int EC_METHOD_get_field_type(const EC_METHOD *meth)
+{
+    return meth->field_type;
+}
+
+static int ec_precompute_mont_data(EC_GROUP *);
+
+int EC_GROUP_set_generator(EC_GROUP *group, const EC_POINT *generator,
+                           const BIGNUM *order, const BIGNUM *cofactor)
+{
+    if (generator == NULL) {
+        ECerr(EC_F_EC_GROUP_SET_GENERATOR, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+
+    if (group->generator == NULL) {
+        group->generator = EC_POINT_new(group);
+        if (group->generator == NULL)
+            return 0;
+    }
+    if (!EC_POINT_copy(group->generator, generator))
+        return 0;
+
+    if (order != NULL) {
+        if (!BN_copy(group->order, order))
+            return 0;
+    } else
+        BN_zero(group->order);
+
+    if (cofactor != NULL) {
+        if (!BN_copy(group->cofactor, cofactor))
+            return 0;
+    } else
+        BN_zero(group->cofactor);
+
+    /*
+     * Some groups have an order with
+     * factors of two, which makes the Montgomery setup fail.
+     * |group->mont_data| will be NULL in this case.
+     */
+    if (BN_is_odd(group->order)) {
+        return ec_precompute_mont_data(group);
+    }
+
+    BN_MONT_CTX_free(group->mont_data);
+    group->mont_data = NULL;
+    return 1;
+}
+
+const EC_POINT *EC_GROUP_get0_generator(const EC_GROUP *group)
+{
+    return group->generator;
+}
+
+BN_MONT_CTX *EC_GROUP_get_mont_data(const EC_GROUP *group)
+{
+    return group->mont_data;
+}
+
+int EC_GROUP_get_order(const EC_GROUP *group, BIGNUM *order, BN_CTX *ctx)
+{
+    if (group->order == NULL)
+        return 0;
+    if (!BN_copy(order, group->order))
+        return 0;
+
+    return !BN_is_zero(order);
+}
+
+const BIGNUM *EC_GROUP_get0_order(const EC_GROUP *group)
+{
+    return group->order;
+}
+
+int EC_GROUP_order_bits(const EC_GROUP *group)
+{
+    return group->meth->group_order_bits(group);
+}
+
+int EC_GROUP_get_cofactor(const EC_GROUP *group, BIGNUM *cofactor,
+                          BN_CTX *ctx)
+{
+
+    if (group->cofactor == NULL)
+        return 0;
+    if (!BN_copy(cofactor, group->cofactor))
+        return 0;
+
+    return !BN_is_zero(group->cofactor);
+}
+
+const BIGNUM *EC_GROUP_get0_cofactor(const EC_GROUP *group)
+{
+    return group->cofactor;
+}
+
+void EC_GROUP_set_curve_name(EC_GROUP *group, int nid)
+{
+    group->curve_name = nid;
+}
+
+int EC_GROUP_get_curve_name(const EC_GROUP *group)
+{
+    return group->curve_name;
+}
+
+void EC_GROUP_set_asn1_flag(EC_GROUP *group, int flag)
+{
+    group->asn1_flag = flag;
+}
+
+int EC_GROUP_get_asn1_flag(const EC_GROUP *group)
+{
+    return group->asn1_flag;
+}
+
+void EC_GROUP_set_point_conversion_form(EC_GROUP *group,
+                                        point_conversion_form_t form)
+{
+    group->asn1_form = form;
+}
+
+point_conversion_form_t EC_GROUP_get_point_conversion_form(const EC_GROUP
+                                                           *group)
+{
+    return group->asn1_form;
+}
+
+size_t EC_GROUP_set_seed(EC_GROUP *group, const unsigned char *p, size_t len)
+{
+    OPENSSL_free(group->seed);
+    group->seed = NULL;
+    group->seed_len = 0;
+
+    if (!len || !p)
+        return 1;
+
+    if ((group->seed = OPENSSL_malloc(len)) == NULL) {
+        ECerr(EC_F_EC_GROUP_SET_SEED, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    memcpy(group->seed, p, len);
+    group->seed_len = len;
+
+    return len;
+}
+
+unsigned char *EC_GROUP_get0_seed(const EC_GROUP *group)
+{
+    return group->seed;
+}
+
+size_t EC_GROUP_get_seed_len(const EC_GROUP *group)
+{
+    return group->seed_len;
+}
+
+int EC_GROUP_set_curve(EC_GROUP *group, const BIGNUM *p, const BIGNUM *a,
+                       const BIGNUM *b, BN_CTX *ctx)
+{
+    if (group->meth->group_set_curve == 0) {
+        ECerr(EC_F_EC_GROUP_SET_CURVE, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    return group->meth->group_set_curve(group, p, a, b, ctx);
+}
+
+int EC_GROUP_get_curve(const EC_GROUP *group, BIGNUM *p, BIGNUM *a, BIGNUM *b,
+                       BN_CTX *ctx)
+{
+    if (group->meth->group_get_curve == NULL) {
+        ECerr(EC_F_EC_GROUP_GET_CURVE, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    return group->meth->group_get_curve(group, p, a, b, ctx);
+}
+
+#if OPENSSL_API_COMPAT < 0x10200000L
+int EC_GROUP_set_curve_GFp(EC_GROUP *group, const BIGNUM *p, const BIGNUM *a,
+                           const BIGNUM *b, BN_CTX *ctx)
+{
+    return EC_GROUP_set_curve(group, p, a, b, ctx);
+}
+
+int EC_GROUP_get_curve_GFp(const EC_GROUP *group, BIGNUM *p, BIGNUM *a,
+                           BIGNUM *b, BN_CTX *ctx)
+{
+    return EC_GROUP_get_curve(group, p, a, b, ctx);
+}
+
+# ifndef OPENSSL_NO_EC2M
+int EC_GROUP_set_curve_GF2m(EC_GROUP *group, const BIGNUM *p, const BIGNUM *a,
+                            const BIGNUM *b, BN_CTX *ctx)
+{
+    return EC_GROUP_set_curve(group, p, a, b, ctx);
+}
+
+int EC_GROUP_get_curve_GF2m(const EC_GROUP *group, BIGNUM *p, BIGNUM *a,
+                            BIGNUM *b, BN_CTX *ctx)
+{
+    return EC_GROUP_get_curve(group, p, a, b, ctx);
+}
+# endif
+#endif
+
+int EC_GROUP_get_degree(const EC_GROUP *group)
+{
+    if (group->meth->group_get_degree == 0) {
+        ECerr(EC_F_EC_GROUP_GET_DEGREE, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    return group->meth->group_get_degree(group);
+}
+
+int EC_GROUP_check_discriminant(const EC_GROUP *group, BN_CTX *ctx)
+{
+    if (group->meth->group_check_discriminant == 0) {
+        ECerr(EC_F_EC_GROUP_CHECK_DISCRIMINANT,
+              ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    return group->meth->group_check_discriminant(group, ctx);
+}
+
+int EC_GROUP_cmp(const EC_GROUP *a, const EC_GROUP *b, BN_CTX *ctx)
+{
+    int r = 0;
+    BIGNUM *a1, *a2, *a3, *b1, *b2, *b3;
+    BN_CTX *ctx_new = NULL;
+
+    /* compare the field types */
+    if (EC_METHOD_get_field_type(EC_GROUP_method_of(a)) !=
+        EC_METHOD_get_field_type(EC_GROUP_method_of(b)))
+        return 1;
+    /* compare the curve name (if present in both) */
+    if (EC_GROUP_get_curve_name(a) && EC_GROUP_get_curve_name(b) &&
+        EC_GROUP_get_curve_name(a) != EC_GROUP_get_curve_name(b))
+        return 1;
+    if (a->meth->flags & EC_FLAGS_CUSTOM_CURVE)
+        return 0;
+
+    if (ctx == NULL)
+        ctx_new = ctx = BN_CTX_new();
+    if (ctx == NULL)
+        return -1;
+
+    BN_CTX_start(ctx);
+    a1 = BN_CTX_get(ctx);
+    a2 = BN_CTX_get(ctx);
+    a3 = BN_CTX_get(ctx);
+    b1 = BN_CTX_get(ctx);
+    b2 = BN_CTX_get(ctx);
+    b3 = BN_CTX_get(ctx);
+    if (b3 == NULL) {
+        BN_CTX_end(ctx);
+        BN_CTX_free(ctx_new);
+        return -1;
+    }
+
+    /*
+     * XXX This approach assumes that the external representation of curves
+     * over the same field type is the same.
+     */
+    if (!a->meth->group_get_curve(a, a1, a2, a3, ctx) ||
+        !b->meth->group_get_curve(b, b1, b2, b3, ctx))
+        r = 1;
+
+    if (r || BN_cmp(a1, b1) || BN_cmp(a2, b2) || BN_cmp(a3, b3))
+        r = 1;
+
+    /* XXX EC_POINT_cmp() assumes that the methods are equal */
+    if (r || EC_POINT_cmp(a, EC_GROUP_get0_generator(a),
+                          EC_GROUP_get0_generator(b), ctx))
+        r = 1;
+
+    if (!r) {
+        const BIGNUM *ao, *bo, *ac, *bc;
+        /* compare the order and cofactor */
+        ao = EC_GROUP_get0_order(a);
+        bo = EC_GROUP_get0_order(b);
+        ac = EC_GROUP_get0_cofactor(a);
+        bc = EC_GROUP_get0_cofactor(b);
+        if (ao == NULL || bo == NULL) {
+            BN_CTX_end(ctx);
+            BN_CTX_free(ctx_new);
+            return -1;
+        }
+        if (BN_cmp(ao, bo) || BN_cmp(ac, bc))
+            r = 1;
+    }
+
+    BN_CTX_end(ctx);
+    BN_CTX_free(ctx_new);
+
+    return r;
+}
+
+/* functions for EC_POINT objects */
+
+EC_POINT *EC_POINT_new(const EC_GROUP *group)
+{
+    EC_POINT *ret;
+
+    if (group == NULL) {
+        ECerr(EC_F_EC_POINT_NEW, ERR_R_PASSED_NULL_PARAMETER);
+        return NULL;
+    }
+    if (group->meth->point_init == NULL) {
+        ECerr(EC_F_EC_POINT_NEW, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return NULL;
+    }
+
+    ret = OPENSSL_zalloc(sizeof(*ret));
+    if (ret == NULL) {
+        ECerr(EC_F_EC_POINT_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ret->meth = group->meth;
+    ret->curve_name = group->curve_name;
+
+    if (!ret->meth->point_init(ret)) {
+        OPENSSL_free(ret);
+        return NULL;
+    }
+
+    return ret;
+}
+
+void EC_POINT_free(EC_POINT *point)
+{
+    if (!point)
+        return;
+
+    if (point->meth->point_finish != 0)
+        point->meth->point_finish(point);
+    OPENSSL_free(point);
+}
+
+void EC_POINT_clear_free(EC_POINT *point)
+{
+    if (!point)
+        return;
+
+    if (point->meth->point_clear_finish != 0)
+        point->meth->point_clear_finish(point);
+    else if (point->meth->point_finish != 0)
+        point->meth->point_finish(point);
+    OPENSSL_clear_free(point, sizeof(*point));
+}
+
+int EC_POINT_copy(EC_POINT *dest, const EC_POINT *src)
+{
+    if (dest->meth->point_copy == 0) {
+        ECerr(EC_F_EC_POINT_COPY, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (dest->meth != src->meth
+            || (dest->curve_name != src->curve_name
+                && dest->curve_name != 0
+                && src->curve_name != 0)) {
+        ECerr(EC_F_EC_POINT_COPY, EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    if (dest == src)
+        return 1;
+    return dest->meth->point_copy(dest, src);
+}
+
+EC_POINT *EC_POINT_dup(const EC_POINT *a, const EC_GROUP *group)
+{
+    EC_POINT *t;
+    int r;
+
+    if (a == NULL)
+        return NULL;
+
+    t = EC_POINT_new(group);
+    if (t == NULL)
+        return NULL;
+    r = EC_POINT_copy(t, a);
+    if (!r) {
+        EC_POINT_free(t);
+        return NULL;
+    }
+    return t;
+}
+
+const EC_METHOD *EC_POINT_method_of(const EC_POINT *point)
+{
+    return point->meth;
+}
+
+int EC_POINT_set_to_infinity(const EC_GROUP *group, EC_POINT *point)
+{
+    if (group->meth->point_set_to_infinity == 0) {
+        ECerr(EC_F_EC_POINT_SET_TO_INFINITY,
+              ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (group->meth != point->meth) {
+        ECerr(EC_F_EC_POINT_SET_TO_INFINITY, EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    return group->meth->point_set_to_infinity(group, point);
+}
+
+int EC_POINT_set_Jprojective_coordinates_GFp(const EC_GROUP *group,
+                                             EC_POINT *point, const BIGNUM *x,
+                                             const BIGNUM *y, const BIGNUM *z,
+                                             BN_CTX *ctx)
+{
+    if (group->meth->point_set_Jprojective_coordinates_GFp == 0) {
+        ECerr(EC_F_EC_POINT_SET_JPROJECTIVE_COORDINATES_GFP,
+              ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (!ec_point_is_compat(point, group)) {
+        ECerr(EC_F_EC_POINT_SET_JPROJECTIVE_COORDINATES_GFP,
+              EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    return group->meth->point_set_Jprojective_coordinates_GFp(group, point, x,
+                                                              y, z, ctx);
+}
+
+int EC_POINT_get_Jprojective_coordinates_GFp(const EC_GROUP *group,
+                                             const EC_POINT *point, BIGNUM *x,
+                                             BIGNUM *y, BIGNUM *z,
+                                             BN_CTX *ctx)
+{
+    if (group->meth->point_get_Jprojective_coordinates_GFp == 0) {
+        ECerr(EC_F_EC_POINT_GET_JPROJECTIVE_COORDINATES_GFP,
+              ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (!ec_point_is_compat(point, group)) {
+        ECerr(EC_F_EC_POINT_GET_JPROJECTIVE_COORDINATES_GFP,
+              EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    return group->meth->point_get_Jprojective_coordinates_GFp(group, point, x,
+                                                              y, z, ctx);
+}
+
+int EC_POINT_set_affine_coordinates(const EC_GROUP *group, EC_POINT *point,
+                                    const BIGNUM *x, const BIGNUM *y,
+                                    BN_CTX *ctx)
+{
+    if (group->meth->point_set_affine_coordinates == NULL) {
+        ECerr(EC_F_EC_POINT_SET_AFFINE_COORDINATES,
+              ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (!ec_point_is_compat(point, group)) {
+        ECerr(EC_F_EC_POINT_SET_AFFINE_COORDINATES, EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    if (!group->meth->point_set_affine_coordinates(group, point, x, y, ctx))
+        return 0;
+
+    if (EC_POINT_is_on_curve(group, point, ctx) <= 0) {
+        ECerr(EC_F_EC_POINT_SET_AFFINE_COORDINATES, EC_R_POINT_IS_NOT_ON_CURVE);
+        return 0;
+    }
+    return 1;
+}
+
+#if OPENSSL_API_COMPAT < 0x10200000L
+int EC_POINT_set_affine_coordinates_GFp(const EC_GROUP *group,
+                                        EC_POINT *point, const BIGNUM *x,
+                                        const BIGNUM *y, BN_CTX *ctx)
+{
+    return EC_POINT_set_affine_coordinates(group, point, x, y, ctx);
+}
+
+# ifndef OPENSSL_NO_EC2M
+int EC_POINT_set_affine_coordinates_GF2m(const EC_GROUP *group,
+                                         EC_POINT *point, const BIGNUM *x,
+                                         const BIGNUM *y, BN_CTX *ctx)
+{
+    return EC_POINT_set_affine_coordinates(group, point, x, y, ctx);
+}
+# endif
+#endif
+
+int EC_POINT_get_affine_coordinates(const EC_GROUP *group,
+                                    const EC_POINT *point, BIGNUM *x, BIGNUM *y,
+                                    BN_CTX *ctx)
+{
+    if (group->meth->point_get_affine_coordinates == NULL) {
+        ECerr(EC_F_EC_POINT_GET_AFFINE_COORDINATES,
+              ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (!ec_point_is_compat(point, group)) {
+        ECerr(EC_F_EC_POINT_GET_AFFINE_COORDINATES, EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    if (EC_POINT_is_at_infinity(group, point)) {
+        ECerr(EC_F_EC_POINT_GET_AFFINE_COORDINATES, EC_R_POINT_AT_INFINITY);
+        return 0;
+    }
+    return group->meth->point_get_affine_coordinates(group, point, x, y, ctx);
+}
+
+#if OPENSSL_API_COMPAT < 0x10200000L
+int EC_POINT_get_affine_coordinates_GFp(const EC_GROUP *group,
+                                        const EC_POINT *point, BIGNUM *x,
+                                        BIGNUM *y, BN_CTX *ctx)
+{
+    return EC_POINT_get_affine_coordinates(group, point, x, y, ctx);
+}
+
+# ifndef OPENSSL_NO_EC2M
+int EC_POINT_get_affine_coordinates_GF2m(const EC_GROUP *group,
+                                         const EC_POINT *point, BIGNUM *x,
+                                         BIGNUM *y, BN_CTX *ctx)
+{
+    return EC_POINT_get_affine_coordinates(group, point, x, y, ctx);
+}
+# endif
+#endif
+
+int EC_POINT_add(const EC_GROUP *group, EC_POINT *r, const EC_POINT *a,
+                 const EC_POINT *b, BN_CTX *ctx)
+{
+    if (group->meth->add == 0) {
+        ECerr(EC_F_EC_POINT_ADD, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (!ec_point_is_compat(r, group) || !ec_point_is_compat(a, group)
+        || !ec_point_is_compat(b, group)) {
+        ECerr(EC_F_EC_POINT_ADD, EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    return group->meth->add(group, r, a, b, ctx);
+}
+
+int EC_POINT_dbl(const EC_GROUP *group, EC_POINT *r, const EC_POINT *a,
+                 BN_CTX *ctx)
+{
+    if (group->meth->dbl == 0) {
+        ECerr(EC_F_EC_POINT_DBL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (!ec_point_is_compat(r, group) || !ec_point_is_compat(a, group)) {
+        ECerr(EC_F_EC_POINT_DBL, EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    return group->meth->dbl(group, r, a, ctx);
+}
+
+int EC_POINT_invert(const EC_GROUP *group, EC_POINT *a, BN_CTX *ctx)
+{
+    if (group->meth->invert == 0) {
+        ECerr(EC_F_EC_POINT_INVERT, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (!ec_point_is_compat(a, group)) {
+        ECerr(EC_F_EC_POINT_INVERT, EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    return group->meth->invert(group, a, ctx);
+}
+
+int EC_POINT_is_at_infinity(const EC_GROUP *group, const EC_POINT *point)
+{
+    if (group->meth->is_at_infinity == 0) {
+        ECerr(EC_F_EC_POINT_IS_AT_INFINITY,
+              ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (!ec_point_is_compat(point, group)) {
+        ECerr(EC_F_EC_POINT_IS_AT_INFINITY, EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    return group->meth->is_at_infinity(group, point);
+}
+
+/*
+ * Check whether an EC_POINT is on the curve or not. Note that the return
+ * value for this function should NOT be treated as a boolean. Return values:
+ *  1: The point is on the curve
+ *  0: The point is not on the curve
+ * -1: An error occurred
+ */
+int EC_POINT_is_on_curve(const EC_GROUP *group, const EC_POINT *point,
+                         BN_CTX *ctx)
+{
+    if (group->meth->is_on_curve == 0) {
+        ECerr(EC_F_EC_POINT_IS_ON_CURVE, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (!ec_point_is_compat(point, group)) {
+        ECerr(EC_F_EC_POINT_IS_ON_CURVE, EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    return group->meth->is_on_curve(group, point, ctx);
+}
+
+int EC_POINT_cmp(const EC_GROUP *group, const EC_POINT *a, const EC_POINT *b,
+                 BN_CTX *ctx)
+{
+    if (group->meth->point_cmp == 0) {
+        ECerr(EC_F_EC_POINT_CMP, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return -1;
+    }
+    if (!ec_point_is_compat(a, group) || !ec_point_is_compat(b, group)) {
+        ECerr(EC_F_EC_POINT_CMP, EC_R_INCOMPATIBLE_OBJECTS);
+        return -1;
+    }
+    return group->meth->point_cmp(group, a, b, ctx);
+}
+
+int EC_POINT_make_affine(const EC_GROUP *group, EC_POINT *point, BN_CTX *ctx)
+{
+    if (group->meth->make_affine == 0) {
+        ECerr(EC_F_EC_POINT_MAKE_AFFINE, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (!ec_point_is_compat(point, group)) {
+        ECerr(EC_F_EC_POINT_MAKE_AFFINE, EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    return group->meth->make_affine(group, point, ctx);
+}
+
+int EC_POINTs_make_affine(const EC_GROUP *group, size_t num,
+                          EC_POINT *points[], BN_CTX *ctx)
+{
+    size_t i;
+
+    if (group->meth->points_make_affine == 0) {
+        ECerr(EC_F_EC_POINTS_MAKE_AFFINE, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    for (i = 0; i < num; i++) {
+        if (!ec_point_is_compat(points[i], group)) {
+            ECerr(EC_F_EC_POINTS_MAKE_AFFINE, EC_R_INCOMPATIBLE_OBJECTS);
+            return 0;
+        }
+    }
+    return group->meth->points_make_affine(group, num, points, ctx);
+}
+
+/*
+ * Functions for point multiplication. If group->meth->mul is 0, we use the
+ * wNAF-based implementations in ec_mult.c; otherwise we dispatch through
+ * methods.
+ */
+
+int EC_POINTs_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
+                  size_t num, const EC_POINT *points[],
+                  const BIGNUM *scalars[], BN_CTX *ctx)
+{
+    int ret = 0;
+    size_t i = 0;
+    BN_CTX *new_ctx = NULL;
+
+    if ((scalar == NULL) && (num == 0)) {
+        return EC_POINT_set_to_infinity(group, r);
+    }
+
+    if (!ec_point_is_compat(r, group)) {
+        ECerr(EC_F_EC_POINTS_MUL, EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    for (i = 0; i < num; i++) {
+        if (!ec_point_is_compat(points[i], group)) {
+            ECerr(EC_F_EC_POINTS_MUL, EC_R_INCOMPATIBLE_OBJECTS);
+            return 0;
+        }
+    }
+
+    if (ctx == NULL && (ctx = new_ctx = BN_CTX_secure_new()) == NULL) {
+        ECerr(EC_F_EC_POINTS_MUL, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (group->meth->mul != NULL)
+        ret = group->meth->mul(group, r, scalar, num, points, scalars, ctx);
+    else
+        /* use default */
+        ret = ec_wNAF_mul(group, r, scalar, num, points, scalars, ctx);
+
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+int EC_POINT_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *g_scalar,
+                 const EC_POINT *point, const BIGNUM *p_scalar, BN_CTX *ctx)
+{
+    /* just a convenient interface to EC_POINTs_mul() */
+
+    const EC_POINT *points[1];
+    const BIGNUM *scalars[1];
+
+    points[0] = point;
+    scalars[0] = p_scalar;
+
+    return EC_POINTs_mul(group, r, g_scalar,
+                         (point != NULL
+                          && p_scalar != NULL), points, scalars, ctx);
+}
+
+int EC_GROUP_precompute_mult(EC_GROUP *group, BN_CTX *ctx)
+{
+    if (group->meth->mul == 0)
+        /* use default */
+        return ec_wNAF_precompute_mult(group, ctx);
+
+    if (group->meth->precompute_mult != 0)
+        return group->meth->precompute_mult(group, ctx);
+    else
+        return 1;               /* nothing to do, so report success */
+}
+
+int EC_GROUP_have_precompute_mult(const EC_GROUP *group)
+{
+    if (group->meth->mul == 0)
+        /* use default */
+        return ec_wNAF_have_precompute_mult(group);
+
+    if (group->meth->have_precompute_mult != 0)
+        return group->meth->have_precompute_mult(group);
+    else
+        return 0;               /* cannot tell whether precomputation has
+                                 * been performed */
+}
+
+/*
+ * ec_precompute_mont_data sets |group->mont_data| from |group->order| and
+ * returns one on success. On error it returns zero.
+ */
+static int ec_precompute_mont_data(EC_GROUP *group)
+{
+    BN_CTX *ctx = BN_CTX_new();
+    int ret = 0;
+
+    BN_MONT_CTX_free(group->mont_data);
+    group->mont_data = NULL;
+
+    if (ctx == NULL)
+        goto err;
+
+    group->mont_data = BN_MONT_CTX_new();
+    if (group->mont_data == NULL)
+        goto err;
+
+    if (!BN_MONT_CTX_set(group->mont_data, group->order, ctx)) {
+        BN_MONT_CTX_free(group->mont_data);
+        group->mont_data = NULL;
+        goto err;
+    }
+
+    ret = 1;
+
+ err:
+
+    BN_CTX_free(ctx);
+    return ret;
+}
+
+int EC_KEY_set_ex_data(EC_KEY *key, int idx, void *arg)
+{
+    return CRYPTO_set_ex_data(&key->ex_data, idx, arg);
+}
+
+void *EC_KEY_get_ex_data(const EC_KEY *key, int idx)
+{
+    return CRYPTO_get_ex_data(&key->ex_data, idx);
+}
+
+int ec_group_simple_order_bits(const EC_GROUP *group)
+{
+    if (group->order == NULL)
+        return 0;
+    return BN_num_bits(group->order);
+}
+
+static int ec_field_inverse_mod_ord(const EC_GROUP *group, BIGNUM *r,
+                                    const BIGNUM *x, BN_CTX *ctx)
+{
+    BIGNUM *e = NULL;
+    BN_CTX *new_ctx = NULL;
+    int ret = 0;
+
+    if (group->mont_data == NULL)
+        return 0;
+
+    if (ctx == NULL && (ctx = new_ctx = BN_CTX_secure_new()) == NULL)
+        return 0;
+
+    BN_CTX_start(ctx);
+    if ((e = BN_CTX_get(ctx)) == NULL)
+        goto err;
+
+    /*-
+     * We want inverse in constant time, therefore we utilize the fact
+     * order must be prime and use Fermats Little Theorem instead.
+     */
+    if (!BN_set_word(e, 2))
+        goto err;
+    if (!BN_sub(e, group->order, e))
+        goto err;
+    /*-
+     * Exponent e is public.
+     * No need for scatter-gather or BN_FLG_CONSTTIME.
+     */
+    if (!BN_mod_exp_mont(r, x, e, group->order, ctx, group->mont_data))
+        goto err;
+
+    ret = 1;
+
+ err:
+    if (ctx != NULL)
+        BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+/*-
+ * Default behavior, if group->meth->field_inverse_mod_ord is NULL:
+ * - When group->order is even, this function returns an error.
+ * - When group->order is otherwise composite, the correctness
+ *   of the output is not guaranteed.
+ * - When x is outside the range [1, group->order), the correctness
+ *   of the output is not guaranteed.
+ * - Otherwise, this function returns the multiplicative inverse in the
+ *   range [1, group->order).
+ *
+ * EC_METHODs must implement their own field_inverse_mod_ord for
+ * other functionality.
+ */
+int ec_group_do_inverse_ord(const EC_GROUP *group, BIGNUM *res,
+                            const BIGNUM *x, BN_CTX *ctx)
+{
+    if (group->meth->field_inverse_mod_ord != NULL)
+        return group->meth->field_inverse_mod_ord(group, res, x, ctx);
+    else
+        return ec_field_inverse_mod_ord(group, res, x, ctx);
+}
+
+/*-
+ * Coordinate blinding for EC_POINT.
+ *
+ * The underlying EC_METHOD can optionally implement this function:
+ * underlying implementations should return 0 on errors, or 1 on
+ * success.
+ *
+ * This wrapper returns 1 in case the underlying EC_METHOD does not
+ * support coordinate blinding.
+ */
+int ec_point_blind_coordinates(const EC_GROUP *group, EC_POINT *p, BN_CTX *ctx)
+{
+    if (group->meth->blind_coordinates == NULL)
+        return 1; /* ignore if not implemented */
+
+    return group->meth->blind_coordinates(group, p, ctx);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_mult.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_mult.c
new file mode 100644
index 000000000..0e0a5e139
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_mult.c
@@ -0,0 +1,970 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include <openssl/err.h>
+
+#include "internal/cryptlib.h"
+#include "internal/bn_int.h"
+#include "ec_lcl.h"
+#include "internal/refcount.h"
+
+/*
+ * This file implements the wNAF-based interleaving multi-exponentiation method
+ * Formerly at:
+ *   http://www.informatik.tu-darmstadt.de/TI/Mitarbeiter/moeller.html#multiexp
+ * You might now find it here:
+ *   http://link.springer.com/chapter/10.1007%2F3-540-45537-X_13
+ *   http://www.bmoeller.de/pdf/TI-01-08.multiexp.pdf
+ * For multiplication with precomputation, we use wNAF splitting, formerly at:
+ *   http://www.informatik.tu-darmstadt.de/TI/Mitarbeiter/moeller.html#fastexp
+ */
+
+/* structure for precomputed multiples of the generator */
+struct ec_pre_comp_st {
+    const EC_GROUP *group;      /* parent EC_GROUP object */
+    size_t blocksize;           /* block size for wNAF splitting */
+    size_t numblocks;           /* max. number of blocks for which we have
+                                 * precomputation */
+    size_t w;                   /* window size */
+    EC_POINT **points;          /* array with pre-calculated multiples of
+                                 * generator: 'num' pointers to EC_POINT
+                                 * objects followed by a NULL */
+    size_t num;                 /* numblocks * 2^(w-1) */
+    CRYPTO_REF_COUNT references;
+    CRYPTO_RWLOCK *lock;
+};
+
+static EC_PRE_COMP *ec_pre_comp_new(const EC_GROUP *group)
+{
+    EC_PRE_COMP *ret = NULL;
+
+    if (!group)
+        return NULL;
+
+    ret = OPENSSL_zalloc(sizeof(*ret));
+    if (ret == NULL) {
+        ECerr(EC_F_EC_PRE_COMP_NEW, ERR_R_MALLOC_FAILURE);
+        return ret;
+    }
+
+    ret->group = group;
+    ret->blocksize = 8;         /* default */
+    ret->w = 4;                 /* default */
+    ret->references = 1;
+
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        ECerr(EC_F_EC_PRE_COMP_NEW, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+EC_PRE_COMP *EC_ec_pre_comp_dup(EC_PRE_COMP *pre)
+{
+    int i;
+    if (pre != NULL)
+        CRYPTO_UP_REF(&pre->references, &i, pre->lock);
+    return pre;
+}
+
+void EC_ec_pre_comp_free(EC_PRE_COMP *pre)
+{
+    int i;
+
+    if (pre == NULL)
+        return;
+
+    CRYPTO_DOWN_REF(&pre->references, &i, pre->lock);
+    REF_PRINT_COUNT("EC_ec", pre);
+    if (i > 0)
+        return;
+    REF_ASSERT_ISNT(i < 0);
+
+    if (pre->points != NULL) {
+        EC_POINT **pts;
+
+        for (pts = pre->points; *pts != NULL; pts++)
+            EC_POINT_free(*pts);
+        OPENSSL_free(pre->points);
+    }
+    CRYPTO_THREAD_lock_free(pre->lock);
+    OPENSSL_free(pre);
+}
+
+#define EC_POINT_BN_set_flags(P, flags) do { \
+    BN_set_flags((P)->X, (flags)); \
+    BN_set_flags((P)->Y, (flags)); \
+    BN_set_flags((P)->Z, (flags)); \
+} while(0)
+
+/*-
+ * This functions computes a single point multiplication over the EC group,
+ * using, at a high level, a Montgomery ladder with conditional swaps, with
+ * various timing attack defenses.
+ *
+ * It performs either a fixed point multiplication
+ *          (scalar * generator)
+ * when point is NULL, or a variable point multiplication
+ *          (scalar * point)
+ * when point is not NULL.
+ *
+ * `scalar` cannot be NULL and should be in the range [0,n) otherwise all
+ * constant time bets are off (where n is the cardinality of the EC group).
+ *
+ * This function expects `group->order` and `group->cardinality` to be well
+ * defined and non-zero: it fails with an error code otherwise.
+ *
+ * NB: This says nothing about the constant-timeness of the ladder step
+ * implementation (i.e., the default implementation is based on EC_POINT_add and
+ * EC_POINT_dbl, which of course are not constant time themselves) or the
+ * underlying multiprecision arithmetic.
+ *
+ * The product is stored in `r`.
+ *
+ * This is an internal function: callers are in charge of ensuring that the
+ * input parameters `group`, `r`, `scalar` and `ctx` are not NULL.
+ *
+ * Returns 1 on success, 0 otherwise.
+ */
+int ec_scalar_mul_ladder(const EC_GROUP *group, EC_POINT *r,
+                         const BIGNUM *scalar, const EC_POINT *point,
+                         BN_CTX *ctx)
+{
+    int i, cardinality_bits, group_top, kbit, pbit, Z_is_one;
+    EC_POINT *p = NULL;
+    EC_POINT *s = NULL;
+    BIGNUM *k = NULL;
+    BIGNUM *lambda = NULL;
+    BIGNUM *cardinality = NULL;
+    int ret = 0;
+
+    /* early exit if the input point is the point at infinity */
+    if (point != NULL && EC_POINT_is_at_infinity(group, point))
+        return EC_POINT_set_to_infinity(group, r);
+
+    if (BN_is_zero(group->order)) {
+        ECerr(EC_F_EC_SCALAR_MUL_LADDER, EC_R_UNKNOWN_ORDER);
+        return 0;
+    }
+    if (BN_is_zero(group->cofactor)) {
+        ECerr(EC_F_EC_SCALAR_MUL_LADDER, EC_R_UNKNOWN_COFACTOR);
+        return 0;
+    }
+
+    BN_CTX_start(ctx);
+
+    if (((p = EC_POINT_new(group)) == NULL)
+        || ((s = EC_POINT_new(group)) == NULL)) {
+        ECerr(EC_F_EC_SCALAR_MUL_LADDER, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (point == NULL) {
+        if (!EC_POINT_copy(p, group->generator)) {
+            ECerr(EC_F_EC_SCALAR_MUL_LADDER, ERR_R_EC_LIB);
+            goto err;
+        }
+    } else {
+        if (!EC_POINT_copy(p, point)) {
+            ECerr(EC_F_EC_SCALAR_MUL_LADDER, ERR_R_EC_LIB);
+            goto err;
+        }
+    }
+
+    EC_POINT_BN_set_flags(p, BN_FLG_CONSTTIME);
+    EC_POINT_BN_set_flags(r, BN_FLG_CONSTTIME);
+    EC_POINT_BN_set_flags(s, BN_FLG_CONSTTIME);
+
+    cardinality = BN_CTX_get(ctx);
+    lambda = BN_CTX_get(ctx);
+    k = BN_CTX_get(ctx);
+    if (k == NULL) {
+        ECerr(EC_F_EC_SCALAR_MUL_LADDER, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (!BN_mul(cardinality, group->order, group->cofactor, ctx)) {
+        ECerr(EC_F_EC_SCALAR_MUL_LADDER, ERR_R_BN_LIB);
+        goto err;
+    }
+
+    /*
+     * Group cardinalities are often on a word boundary.
+     * So when we pad the scalar, some timing diff might
+     * pop if it needs to be expanded due to carries.
+     * So expand ahead of time.
+     */
+    cardinality_bits = BN_num_bits(cardinality);
+    group_top = bn_get_top(cardinality);
+    if ((bn_wexpand(k, group_top + 2) == NULL)
+        || (bn_wexpand(lambda, group_top + 2) == NULL)) {
+        ECerr(EC_F_EC_SCALAR_MUL_LADDER, ERR_R_BN_LIB);
+        goto err;
+    }
+
+    if (!BN_copy(k, scalar)) {
+        ECerr(EC_F_EC_SCALAR_MUL_LADDER, ERR_R_BN_LIB);
+        goto err;
+    }
+
+    BN_set_flags(k, BN_FLG_CONSTTIME);
+
+    if ((BN_num_bits(k) > cardinality_bits) || (BN_is_negative(k))) {
+        /*-
+         * this is an unusual input, and we don't guarantee
+         * constant-timeness
+         */
+        if (!BN_nnmod(k, k, cardinality, ctx)) {
+            ECerr(EC_F_EC_SCALAR_MUL_LADDER, ERR_R_BN_LIB);
+            goto err;
+        }
+    }
+
+    if (!BN_add(lambda, k, cardinality)) {
+        ECerr(EC_F_EC_SCALAR_MUL_LADDER, ERR_R_BN_LIB);
+        goto err;
+    }
+    BN_set_flags(lambda, BN_FLG_CONSTTIME);
+    if (!BN_add(k, lambda, cardinality)) {
+        ECerr(EC_F_EC_SCALAR_MUL_LADDER, ERR_R_BN_LIB);
+        goto err;
+    }
+    /*
+     * lambda := scalar + cardinality
+     * k := scalar + 2*cardinality
+     */
+    kbit = BN_is_bit_set(lambda, cardinality_bits);
+    BN_consttime_swap(kbit, k, lambda, group_top + 2);
+
+    group_top = bn_get_top(group->field);
+    if ((bn_wexpand(s->X, group_top) == NULL)
+        || (bn_wexpand(s->Y, group_top) == NULL)
+        || (bn_wexpand(s->Z, group_top) == NULL)
+        || (bn_wexpand(r->X, group_top) == NULL)
+        || (bn_wexpand(r->Y, group_top) == NULL)
+        || (bn_wexpand(r->Z, group_top) == NULL)
+        || (bn_wexpand(p->X, group_top) == NULL)
+        || (bn_wexpand(p->Y, group_top) == NULL)
+        || (bn_wexpand(p->Z, group_top) == NULL)) {
+        ECerr(EC_F_EC_SCALAR_MUL_LADDER, ERR_R_BN_LIB);
+        goto err;
+    }
+
+    /*-
+     * Apply coordinate blinding for EC_POINT.
+     *
+     * The underlying EC_METHOD can optionally implement this function:
+     * ec_point_blind_coordinates() returns 0 in case of errors or 1 on
+     * success or if coordinate blinding is not implemented for this
+     * group.
+     */
+    if (!ec_point_blind_coordinates(group, p, ctx)) {
+        ECerr(EC_F_EC_SCALAR_MUL_LADDER, EC_R_POINT_COORDINATES_BLIND_FAILURE);
+        goto err;
+    }
+
+    /* Initialize the Montgomery ladder */
+    if (!ec_point_ladder_pre(group, r, s, p, ctx)) {
+        ECerr(EC_F_EC_SCALAR_MUL_LADDER, EC_R_LADDER_PRE_FAILURE);
+        goto err;
+    }
+
+    /* top bit is a 1, in a fixed pos */
+    pbit = 1;
+
+#define EC_POINT_CSWAP(c, a, b, w, t) do {         \
+        BN_consttime_swap(c, (a)->X, (b)->X, w);   \
+        BN_consttime_swap(c, (a)->Y, (b)->Y, w);   \
+        BN_consttime_swap(c, (a)->Z, (b)->Z, w);   \
+        t = ((a)->Z_is_one ^ (b)->Z_is_one) & (c); \
+        (a)->Z_is_one ^= (t);                      \
+        (b)->Z_is_one ^= (t);                      \
+} while(0)
+
+    /*-
+     * The ladder step, with branches, is
+     *
+     * k[i] == 0: S = add(R, S), R = dbl(R)
+     * k[i] == 1: R = add(S, R), S = dbl(S)
+     *
+     * Swapping R, S conditionally on k[i] leaves you with state
+     *
+     * k[i] == 0: T, U = R, S
+     * k[i] == 1: T, U = S, R
+     *
+     * Then perform the ECC ops.
+     *
+     * U = add(T, U)
+     * T = dbl(T)
+     *
+     * Which leaves you with state
+     *
+     * k[i] == 0: U = add(R, S), T = dbl(R)
+     * k[i] == 1: U = add(S, R), T = dbl(S)
+     *
+     * Swapping T, U conditionally on k[i] leaves you with state
+     *
+     * k[i] == 0: R, S = T, U
+     * k[i] == 1: R, S = U, T
+     *
+     * Which leaves you with state
+     *
+     * k[i] == 0: S = add(R, S), R = dbl(R)
+     * k[i] == 1: R = add(S, R), S = dbl(S)
+     *
+     * So we get the same logic, but instead of a branch it's a
+     * conditional swap, followed by ECC ops, then another conditional swap.
+     *
+     * Optimization: The end of iteration i and start of i-1 looks like
+     *
+     * ...
+     * CSWAP(k[i], R, S)
+     * ECC
+     * CSWAP(k[i], R, S)
+     * (next iteration)
+     * CSWAP(k[i-1], R, S)
+     * ECC
+     * CSWAP(k[i-1], R, S)
+     * ...
+     *
+     * So instead of two contiguous swaps, you can merge the condition
+     * bits and do a single swap.
+     *
+     * k[i]   k[i-1]    Outcome
+     * 0      0         No Swap
+     * 0      1         Swap
+     * 1      0         Swap
+     * 1      1         No Swap
+     *
+     * This is XOR. pbit tracks the previous bit of k.
+     */
+
+    for (i = cardinality_bits - 1; i >= 0; i--) {
+        kbit = BN_is_bit_set(k, i) ^ pbit;
+        EC_POINT_CSWAP(kbit, r, s, group_top, Z_is_one);
+
+        /* Perform a single step of the Montgomery ladder */
+        if (!ec_point_ladder_step(group, r, s, p, ctx)) {
+            ECerr(EC_F_EC_SCALAR_MUL_LADDER, EC_R_LADDER_STEP_FAILURE);
+            goto err;
+        }
+        /*
+         * pbit logic merges this cswap with that of the
+         * next iteration
+         */
+        pbit ^= kbit;
+    }
+    /* one final cswap to move the right value into r */
+    EC_POINT_CSWAP(pbit, r, s, group_top, Z_is_one);
+#undef EC_POINT_CSWAP
+
+    /* Finalize ladder (and recover full point coordinates) */
+    if (!ec_point_ladder_post(group, r, s, p, ctx)) {
+        ECerr(EC_F_EC_SCALAR_MUL_LADDER, EC_R_LADDER_POST_FAILURE);
+        goto err;
+    }
+
+    ret = 1;
+
+ err:
+    EC_POINT_free(p);
+    EC_POINT_free(s);
+    BN_CTX_end(ctx);
+
+    return ret;
+}
+
+#undef EC_POINT_BN_set_flags
+
+/*
+ * TODO: table should be optimised for the wNAF-based implementation,
+ * sometimes smaller windows will give better performance (thus the
+ * boundaries should be increased)
+ */
+#define EC_window_bits_for_scalar_size(b) \
+                ((size_t) \
+                 ((b) >= 2000 ? 6 : \
+                  (b) >=  800 ? 5 : \
+                  (b) >=  300 ? 4 : \
+                  (b) >=   70 ? 3 : \
+                  (b) >=   20 ? 2 : \
+                  1))
+
+/*-
+ * Compute
+ *      \sum scalars[i]*points[i],
+ * also including
+ *      scalar*generator
+ * in the addition if scalar != NULL
+ */
+int ec_wNAF_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
+                size_t num, const EC_POINT *points[], const BIGNUM *scalars[],
+                BN_CTX *ctx)
+{
+    const EC_POINT *generator = NULL;
+    EC_POINT *tmp = NULL;
+    size_t totalnum;
+    size_t blocksize = 0, numblocks = 0; /* for wNAF splitting */
+    size_t pre_points_per_block = 0;
+    size_t i, j;
+    int k;
+    int r_is_inverted = 0;
+    int r_is_at_infinity = 1;
+    size_t *wsize = NULL;       /* individual window sizes */
+    signed char **wNAF = NULL;  /* individual wNAFs */
+    size_t *wNAF_len = NULL;
+    size_t max_len = 0;
+    size_t num_val;
+    EC_POINT **val = NULL;      /* precomputation */
+    EC_POINT **v;
+    EC_POINT ***val_sub = NULL; /* pointers to sub-arrays of 'val' or
+                                 * 'pre_comp->points' */
+    const EC_PRE_COMP *pre_comp = NULL;
+    int num_scalar = 0;         /* flag: will be set to 1 if 'scalar' must be
+                                 * treated like other scalars, i.e.
+                                 * precomputation is not available */
+    int ret = 0;
+
+    if (!BN_is_zero(group->order) && !BN_is_zero(group->cofactor)) {
+        /*-
+         * Handle the common cases where the scalar is secret, enforcing a
+         * scalar multiplication implementation based on a Montgomery ladder,
+         * with various timing attack defenses.
+         */
+        if ((scalar != NULL) && (num == 0)) {
+            /*-
+             * In this case we want to compute scalar * GeneratorPoint: this
+             * codepath is reached most prominently by (ephemeral) key
+             * generation of EC cryptosystems (i.e. ECDSA keygen and sign setup,
+             * ECDH keygen/first half), where the scalar is always secret. This
+             * is why we ignore if BN_FLG_CONSTTIME is actually set and we
+             * always call the ladder version.
+             */
+            return ec_scalar_mul_ladder(group, r, scalar, NULL, ctx);
+        }
+        if ((scalar == NULL) && (num == 1)) {
+            /*-
+             * In this case we want to compute scalar * VariablePoint: this
+             * codepath is reached most prominently by the second half of ECDH,
+             * where the secret scalar is multiplied by the peer's public point.
+             * To protect the secret scalar, we ignore if BN_FLG_CONSTTIME is
+             * actually set and we always call the ladder version.
+             */
+            return ec_scalar_mul_ladder(group, r, scalars[0], points[0], ctx);
+        }
+    }
+
+    if (scalar != NULL) {
+        generator = EC_GROUP_get0_generator(group);
+        if (generator == NULL) {
+            ECerr(EC_F_EC_WNAF_MUL, EC_R_UNDEFINED_GENERATOR);
+            goto err;
+        }
+
+        /* look if we can use precomputed multiples of generator */
+
+        pre_comp = group->pre_comp.ec;
+        if (pre_comp && pre_comp->numblocks
+            && (EC_POINT_cmp(group, generator, pre_comp->points[0], ctx) ==
+                0)) {
+            blocksize = pre_comp->blocksize;
+
+            /*
+             * determine maximum number of blocks that wNAF splitting may
+             * yield (NB: maximum wNAF length is bit length plus one)
+             */
+            numblocks = (BN_num_bits(scalar) / blocksize) + 1;
+
+            /*
+             * we cannot use more blocks than we have precomputation for
+             */
+            if (numblocks > pre_comp->numblocks)
+                numblocks = pre_comp->numblocks;
+
+            pre_points_per_block = (size_t)1 << (pre_comp->w - 1);
+
+            /* check that pre_comp looks sane */
+            if (pre_comp->num != (pre_comp->numblocks * pre_points_per_block)) {
+                ECerr(EC_F_EC_WNAF_MUL, ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+        } else {
+            /* can't use precomputation */
+            pre_comp = NULL;
+            numblocks = 1;
+            num_scalar = 1;     /* treat 'scalar' like 'num'-th element of
+                                 * 'scalars' */
+        }
+    }
+
+    totalnum = num + numblocks;
+
+    wsize = OPENSSL_malloc(totalnum * sizeof(wsize[0]));
+    wNAF_len = OPENSSL_malloc(totalnum * sizeof(wNAF_len[0]));
+    /* include space for pivot */
+    wNAF = OPENSSL_malloc((totalnum + 1) * sizeof(wNAF[0]));
+    val_sub = OPENSSL_malloc(totalnum * sizeof(val_sub[0]));
+
+    /* Ensure wNAF is initialised in case we end up going to err */
+    if (wNAF != NULL)
+        wNAF[0] = NULL;         /* preliminary pivot */
+
+    if (wsize == NULL || wNAF_len == NULL || wNAF == NULL || val_sub == NULL) {
+        ECerr(EC_F_EC_WNAF_MUL, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    /*
+     * num_val will be the total number of temporarily precomputed points
+     */
+    num_val = 0;
+
+    for (i = 0; i < num + num_scalar; i++) {
+        size_t bits;
+
+        bits = i < num ? BN_num_bits(scalars[i]) : BN_num_bits(scalar);
+        wsize[i] = EC_window_bits_for_scalar_size(bits);
+        num_val += (size_t)1 << (wsize[i] - 1);
+        wNAF[i + 1] = NULL;     /* make sure we always have a pivot */
+        wNAF[i] =
+            bn_compute_wNAF((i < num ? scalars[i] : scalar), wsize[i],
+                            &wNAF_len[i]);
+        if (wNAF[i] == NULL)
+            goto err;
+        if (wNAF_len[i] > max_len)
+            max_len = wNAF_len[i];
+    }
+
+    if (numblocks) {
+        /* we go here iff scalar != NULL */
+
+        if (pre_comp == NULL) {
+            if (num_scalar != 1) {
+                ECerr(EC_F_EC_WNAF_MUL, ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+            /* we have already generated a wNAF for 'scalar' */
+        } else {
+            signed char *tmp_wNAF = NULL;
+            size_t tmp_len = 0;
+
+            if (num_scalar != 0) {
+                ECerr(EC_F_EC_WNAF_MUL, ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+
+            /*
+             * use the window size for which we have precomputation
+             */
+            wsize[num] = pre_comp->w;
+            tmp_wNAF = bn_compute_wNAF(scalar, wsize[num], &tmp_len);
+            if (!tmp_wNAF)
+                goto err;
+
+            if (tmp_len <= max_len) {
+                /*
+                 * One of the other wNAFs is at least as long as the wNAF
+                 * belonging to the generator, so wNAF splitting will not buy
+                 * us anything.
+                 */
+
+                numblocks = 1;
+                totalnum = num + 1; /* don't use wNAF splitting */
+                wNAF[num] = tmp_wNAF;
+                wNAF[num + 1] = NULL;
+                wNAF_len[num] = tmp_len;
+                /*
+                 * pre_comp->points starts with the points that we need here:
+                 */
+                val_sub[num] = pre_comp->points;
+            } else {
+                /*
+                 * don't include tmp_wNAF directly into wNAF array - use wNAF
+                 * splitting and include the blocks
+                 */
+
+                signed char *pp;
+                EC_POINT **tmp_points;
+
+                if (tmp_len < numblocks * blocksize) {
+                    /*
+                     * possibly we can do with fewer blocks than estimated
+                     */
+                    numblocks = (tmp_len + blocksize - 1) / blocksize;
+                    if (numblocks > pre_comp->numblocks) {
+                        ECerr(EC_F_EC_WNAF_MUL, ERR_R_INTERNAL_ERROR);
+                        OPENSSL_free(tmp_wNAF);
+                        goto err;
+                    }
+                    totalnum = num + numblocks;
+                }
+
+                /* split wNAF in 'numblocks' parts */
+                pp = tmp_wNAF;
+                tmp_points = pre_comp->points;
+
+                for (i = num; i < totalnum; i++) {
+                    if (i < totalnum - 1) {
+                        wNAF_len[i] = blocksize;
+                        if (tmp_len < blocksize) {
+                            ECerr(EC_F_EC_WNAF_MUL, ERR_R_INTERNAL_ERROR);
+                            OPENSSL_free(tmp_wNAF);
+                            goto err;
+                        }
+                        tmp_len -= blocksize;
+                    } else
+                        /*
+                         * last block gets whatever is left (this could be
+                         * more or less than 'blocksize'!)
+                         */
+                        wNAF_len[i] = tmp_len;
+
+                    wNAF[i + 1] = NULL;
+                    wNAF[i] = OPENSSL_malloc(wNAF_len[i]);
+                    if (wNAF[i] == NULL) {
+                        ECerr(EC_F_EC_WNAF_MUL, ERR_R_MALLOC_FAILURE);
+                        OPENSSL_free(tmp_wNAF);
+                        goto err;
+                    }
+                    memcpy(wNAF[i], pp, wNAF_len[i]);
+                    if (wNAF_len[i] > max_len)
+                        max_len = wNAF_len[i];
+
+                    if (*tmp_points == NULL) {
+                        ECerr(EC_F_EC_WNAF_MUL, ERR_R_INTERNAL_ERROR);
+                        OPENSSL_free(tmp_wNAF);
+                        goto err;
+                    }
+                    val_sub[i] = tmp_points;
+                    tmp_points += pre_points_per_block;
+                    pp += blocksize;
+                }
+                OPENSSL_free(tmp_wNAF);
+            }
+        }
+    }
+
+    /*
+     * All points we precompute now go into a single array 'val'.
+     * 'val_sub[i]' is a pointer to the subarray for the i-th point, or to a
+     * subarray of 'pre_comp->points' if we already have precomputation.
+     */
+    val = OPENSSL_malloc((num_val + 1) * sizeof(val[0]));
+    if (val == NULL) {
+        ECerr(EC_F_EC_WNAF_MUL, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    val[num_val] = NULL;        /* pivot element */
+
+    /* allocate points for precomputation */
+    v = val;
+    for (i = 0; i < num + num_scalar; i++) {
+        val_sub[i] = v;
+        for (j = 0; j < ((size_t)1 << (wsize[i] - 1)); j++) {
+            *v = EC_POINT_new(group);
+            if (*v == NULL)
+                goto err;
+            v++;
+        }
+    }
+    if (!(v == val + num_val)) {
+        ECerr(EC_F_EC_WNAF_MUL, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    if ((tmp = EC_POINT_new(group)) == NULL)
+        goto err;
+
+    /*-
+     * prepare precomputed values:
+     *    val_sub[i][0] :=     points[i]
+     *    val_sub[i][1] := 3 * points[i]
+     *    val_sub[i][2] := 5 * points[i]
+     *    ...
+     */
+    for (i = 0; i < num + num_scalar; i++) {
+        if (i < num) {
+            if (!EC_POINT_copy(val_sub[i][0], points[i]))
+                goto err;
+        } else {
+            if (!EC_POINT_copy(val_sub[i][0], generator))
+                goto err;
+        }
+
+        if (wsize[i] > 1) {
+            if (!EC_POINT_dbl(group, tmp, val_sub[i][0], ctx))
+                goto err;
+            for (j = 1; j < ((size_t)1 << (wsize[i] - 1)); j++) {
+                if (!EC_POINT_add
+                    (group, val_sub[i][j], val_sub[i][j - 1], tmp, ctx))
+                    goto err;
+            }
+        }
+    }
+
+    if (!EC_POINTs_make_affine(group, num_val, val, ctx))
+        goto err;
+
+    r_is_at_infinity = 1;
+
+    for (k = max_len - 1; k >= 0; k--) {
+        if (!r_is_at_infinity) {
+            if (!EC_POINT_dbl(group, r, r, ctx))
+                goto err;
+        }
+
+        for (i = 0; i < totalnum; i++) {
+            if (wNAF_len[i] > (size_t)k) {
+                int digit = wNAF[i][k];
+                int is_neg;
+
+                if (digit) {
+                    is_neg = digit < 0;
+
+                    if (is_neg)
+                        digit = -digit;
+
+                    if (is_neg != r_is_inverted) {
+                        if (!r_is_at_infinity) {
+                            if (!EC_POINT_invert(group, r, ctx))
+                                goto err;
+                        }
+                        r_is_inverted = !r_is_inverted;
+                    }
+
+                    /* digit > 0 */
+
+                    if (r_is_at_infinity) {
+                        if (!EC_POINT_copy(r, val_sub[i][digit >> 1]))
+                            goto err;
+                        r_is_at_infinity = 0;
+                    } else {
+                        if (!EC_POINT_add
+                            (group, r, r, val_sub[i][digit >> 1], ctx))
+                            goto err;
+                    }
+                }
+            }
+        }
+    }
+
+    if (r_is_at_infinity) {
+        if (!EC_POINT_set_to_infinity(group, r))
+            goto err;
+    } else {
+        if (r_is_inverted)
+            if (!EC_POINT_invert(group, r, ctx))
+                goto err;
+    }
+
+    ret = 1;
+
+ err:
+    EC_POINT_free(tmp);
+    OPENSSL_free(wsize);
+    OPENSSL_free(wNAF_len);
+    if (wNAF != NULL) {
+        signed char **w;
+
+        for (w = wNAF; *w != NULL; w++)
+            OPENSSL_free(*w);
+
+        OPENSSL_free(wNAF);
+    }
+    if (val != NULL) {
+        for (v = val; *v != NULL; v++)
+            EC_POINT_clear_free(*v);
+
+        OPENSSL_free(val);
+    }
+    OPENSSL_free(val_sub);
+    return ret;
+}
+
+/*-
+ * ec_wNAF_precompute_mult()
+ * creates an EC_PRE_COMP object with preprecomputed multiples of the generator
+ * for use with wNAF splitting as implemented in ec_wNAF_mul().
+ *
+ * 'pre_comp->points' is an array of multiples of the generator
+ * of the following form:
+ * points[0] =     generator;
+ * points[1] = 3 * generator;
+ * ...
+ * points[2^(w-1)-1] =     (2^(w-1)-1) * generator;
+ * points[2^(w-1)]   =     2^blocksize * generator;
+ * points[2^(w-1)+1] = 3 * 2^blocksize * generator;
+ * ...
+ * points[2^(w-1)*(numblocks-1)-1] = (2^(w-1)) *  2^(blocksize*(numblocks-2)) * generator
+ * points[2^(w-1)*(numblocks-1)]   =              2^(blocksize*(numblocks-1)) * generator
+ * ...
+ * points[2^(w-1)*numblocks-1]     = (2^(w-1)) *  2^(blocksize*(numblocks-1)) * generator
+ * points[2^(w-1)*numblocks]       = NULL
+ */
+int ec_wNAF_precompute_mult(EC_GROUP *group, BN_CTX *ctx)
+{
+    const EC_POINT *generator;
+    EC_POINT *tmp_point = NULL, *base = NULL, **var;
+    BN_CTX *new_ctx = NULL;
+    const BIGNUM *order;
+    size_t i, bits, w, pre_points_per_block, blocksize, numblocks, num;
+    EC_POINT **points = NULL;
+    EC_PRE_COMP *pre_comp;
+    int ret = 0;
+
+    /* if there is an old EC_PRE_COMP object, throw it away */
+    EC_pre_comp_free(group);
+    if ((pre_comp = ec_pre_comp_new(group)) == NULL)
+        return 0;
+
+    generator = EC_GROUP_get0_generator(group);
+    if (generator == NULL) {
+        ECerr(EC_F_EC_WNAF_PRECOMPUTE_MULT, EC_R_UNDEFINED_GENERATOR);
+        goto err;
+    }
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            goto err;
+    }
+
+    BN_CTX_start(ctx);
+
+    order = EC_GROUP_get0_order(group);
+    if (order == NULL)
+        goto err;
+    if (BN_is_zero(order)) {
+        ECerr(EC_F_EC_WNAF_PRECOMPUTE_MULT, EC_R_UNKNOWN_ORDER);
+        goto err;
+    }
+
+    bits = BN_num_bits(order);
+    /*
+     * The following parameters mean we precompute (approximately) one point
+     * per bit. TBD: The combination 8, 4 is perfect for 160 bits; for other
+     * bit lengths, other parameter combinations might provide better
+     * efficiency.
+     */
+    blocksize = 8;
+    w = 4;
+    if (EC_window_bits_for_scalar_size(bits) > w) {
+        /* let's not make the window too small ... */
+        w = EC_window_bits_for_scalar_size(bits);
+    }
+
+    numblocks = (bits + blocksize - 1) / blocksize; /* max. number of blocks
+                                                     * to use for wNAF
+                                                     * splitting */
+
+    pre_points_per_block = (size_t)1 << (w - 1);
+    num = pre_points_per_block * numblocks; /* number of points to compute
+                                             * and store */
+
+    points = OPENSSL_malloc(sizeof(*points) * (num + 1));
+    if (points == NULL) {
+        ECerr(EC_F_EC_WNAF_PRECOMPUTE_MULT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    var = points;
+    var[num] = NULL;            /* pivot */
+    for (i = 0; i < num; i++) {
+        if ((var[i] = EC_POINT_new(group)) == NULL) {
+            ECerr(EC_F_EC_WNAF_PRECOMPUTE_MULT, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+
+    if ((tmp_point = EC_POINT_new(group)) == NULL
+        || (base = EC_POINT_new(group)) == NULL) {
+        ECerr(EC_F_EC_WNAF_PRECOMPUTE_MULT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (!EC_POINT_copy(base, generator))
+        goto err;
+
+    /* do the precomputation */
+    for (i = 0; i < numblocks; i++) {
+        size_t j;
+
+        if (!EC_POINT_dbl(group, tmp_point, base, ctx))
+            goto err;
+
+        if (!EC_POINT_copy(*var++, base))
+            goto err;
+
+        for (j = 1; j < pre_points_per_block; j++, var++) {
+            /*
+             * calculate odd multiples of the current base point
+             */
+            if (!EC_POINT_add(group, *var, tmp_point, *(var - 1), ctx))
+                goto err;
+        }
+
+        if (i < numblocks - 1) {
+            /*
+             * get the next base (multiply current one by 2^blocksize)
+             */
+            size_t k;
+
+            if (blocksize <= 2) {
+                ECerr(EC_F_EC_WNAF_PRECOMPUTE_MULT, ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+
+            if (!EC_POINT_dbl(group, base, tmp_point, ctx))
+                goto err;
+            for (k = 2; k < blocksize; k++) {
+                if (!EC_POINT_dbl(group, base, base, ctx))
+                    goto err;
+            }
+        }
+    }
+
+    if (!EC_POINTs_make_affine(group, num, points, ctx))
+        goto err;
+
+    pre_comp->group = group;
+    pre_comp->blocksize = blocksize;
+    pre_comp->numblocks = numblocks;
+    pre_comp->w = w;
+    pre_comp->points = points;
+    points = NULL;
+    pre_comp->num = num;
+    SETPRECOMP(group, ec, pre_comp);
+    pre_comp = NULL;
+    ret = 1;
+
+ err:
+    if (ctx != NULL)
+        BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    EC_ec_pre_comp_free(pre_comp);
+    if (points) {
+        EC_POINT **p;
+
+        for (p = points; *p != NULL; p++)
+            EC_POINT_free(*p);
+        OPENSSL_free(points);
+    }
+    EC_POINT_free(tmp_point);
+    EC_POINT_free(base);
+    return ret;
+}
+
+int ec_wNAF_have_precompute_mult(const EC_GROUP *group)
+{
+    return HAVEPRECOMP(group, ec);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_oct.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_oct.c
new file mode 100644
index 000000000..522f79e67
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_oct.c
@@ -0,0 +1,150 @@
+/*
+ * Copyright 2011-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+
+#include <openssl/err.h>
+#include <openssl/opensslv.h>
+
+#include "ec_lcl.h"
+
+int EC_POINT_set_compressed_coordinates(const EC_GROUP *group, EC_POINT *point,
+                                        const BIGNUM *x, int y_bit, BN_CTX *ctx)
+{
+    if (group->meth->point_set_compressed_coordinates == NULL
+        && !(group->meth->flags & EC_FLAGS_DEFAULT_OCT)) {
+        ECerr(EC_F_EC_POINT_SET_COMPRESSED_COORDINATES,
+              ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (!ec_point_is_compat(point, group)) {
+        ECerr(EC_F_EC_POINT_SET_COMPRESSED_COORDINATES,
+              EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    if (group->meth->flags & EC_FLAGS_DEFAULT_OCT) {
+        if (group->meth->field_type == NID_X9_62_prime_field)
+            return ec_GFp_simple_set_compressed_coordinates(group, point, x,
+                                                            y_bit, ctx);
+        else
+#ifdef OPENSSL_NO_EC2M
+        {
+            ECerr(EC_F_EC_POINT_SET_COMPRESSED_COORDINATES,
+                  EC_R_GF2M_NOT_SUPPORTED);
+            return 0;
+        }
+#else
+            return ec_GF2m_simple_set_compressed_coordinates(group, point, x,
+                                                             y_bit, ctx);
+#endif
+    }
+    return group->meth->point_set_compressed_coordinates(group, point, x,
+                                                         y_bit, ctx);
+}
+
+#if OPENSSL_API_COMPAT < 0x10200000L
+int EC_POINT_set_compressed_coordinates_GFp(const EC_GROUP *group,
+                                            EC_POINT *point, const BIGNUM *x,
+                                            int y_bit, BN_CTX *ctx)
+{
+    return EC_POINT_set_compressed_coordinates(group, point, x, y_bit, ctx);
+}
+
+# ifndef OPENSSL_NO_EC2M
+int EC_POINT_set_compressed_coordinates_GF2m(const EC_GROUP *group,
+                                             EC_POINT *point, const BIGNUM *x,
+                                             int y_bit, BN_CTX *ctx)
+{
+    return EC_POINT_set_compressed_coordinates(group, point, x, y_bit, ctx);
+}
+# endif
+#endif
+
+size_t EC_POINT_point2oct(const EC_GROUP *group, const EC_POINT *point,
+                          point_conversion_form_t form, unsigned char *buf,
+                          size_t len, BN_CTX *ctx)
+{
+    if (group->meth->point2oct == 0
+        && !(group->meth->flags & EC_FLAGS_DEFAULT_OCT)) {
+        ECerr(EC_F_EC_POINT_POINT2OCT, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (!ec_point_is_compat(point, group)) {
+        ECerr(EC_F_EC_POINT_POINT2OCT, EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    if (group->meth->flags & EC_FLAGS_DEFAULT_OCT) {
+        if (group->meth->field_type == NID_X9_62_prime_field)
+            return ec_GFp_simple_point2oct(group, point, form, buf, len, ctx);
+        else
+#ifdef OPENSSL_NO_EC2M
+        {
+            ECerr(EC_F_EC_POINT_POINT2OCT, EC_R_GF2M_NOT_SUPPORTED);
+            return 0;
+        }
+#else
+            return ec_GF2m_simple_point2oct(group, point,
+                                            form, buf, len, ctx);
+#endif
+    }
+
+    return group->meth->point2oct(group, point, form, buf, len, ctx);
+}
+
+int EC_POINT_oct2point(const EC_GROUP *group, EC_POINT *point,
+                       const unsigned char *buf, size_t len, BN_CTX *ctx)
+{
+    if (group->meth->oct2point == 0
+        && !(group->meth->flags & EC_FLAGS_DEFAULT_OCT)) {
+        ECerr(EC_F_EC_POINT_OCT2POINT, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    if (!ec_point_is_compat(point, group)) {
+        ECerr(EC_F_EC_POINT_OCT2POINT, EC_R_INCOMPATIBLE_OBJECTS);
+        return 0;
+    }
+    if (group->meth->flags & EC_FLAGS_DEFAULT_OCT) {
+        if (group->meth->field_type == NID_X9_62_prime_field)
+            return ec_GFp_simple_oct2point(group, point, buf, len, ctx);
+        else
+#ifdef OPENSSL_NO_EC2M
+        {
+            ECerr(EC_F_EC_POINT_OCT2POINT, EC_R_GF2M_NOT_SUPPORTED);
+            return 0;
+        }
+#else
+            return ec_GF2m_simple_oct2point(group, point, buf, len, ctx);
+#endif
+    }
+    return group->meth->oct2point(group, point, buf, len, ctx);
+}
+
+size_t EC_POINT_point2buf(const EC_GROUP *group, const EC_POINT *point,
+                          point_conversion_form_t form,
+                          unsigned char **pbuf, BN_CTX *ctx)
+{
+    size_t len;
+    unsigned char *buf;
+
+    len = EC_POINT_point2oct(group, point, form, NULL, 0, NULL);
+    if (len == 0)
+        return 0;
+    if ((buf = OPENSSL_malloc(len)) == NULL) {
+        ECerr(EC_F_EC_POINT_POINT2BUF, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    len = EC_POINT_point2oct(group, point, form, buf, len, ctx);
+    if (len == 0) {
+        OPENSSL_free(buf);
+        return 0;
+    }
+    *pbuf = buf;
+    return len;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_pmeth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_pmeth.c
new file mode 100644
index 000000000..f4ad0749e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_pmeth.c
@@ -0,0 +1,472 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include <openssl/ec.h>
+#include "ec_lcl.h"
+#include <openssl/evp.h>
+#include "internal/evp_int.h"
+
+/* EC pkey context structure */
+
+typedef struct {
+    /* Key and paramgen group */
+    EC_GROUP *gen_group;
+    /* message digest */
+    const EVP_MD *md;
+    /* Duplicate key if custom cofactor needed */
+    EC_KEY *co_key;
+    /* Cofactor mode */
+    signed char cofactor_mode;
+    /* KDF (if any) to use for ECDH */
+    char kdf_type;
+    /* Message digest to use for key derivation */
+    const EVP_MD *kdf_md;
+    /* User key material */
+    unsigned char *kdf_ukm;
+    size_t kdf_ukmlen;
+    /* KDF output length */
+    size_t kdf_outlen;
+} EC_PKEY_CTX;
+
+static int pkey_ec_init(EVP_PKEY_CTX *ctx)
+{
+    EC_PKEY_CTX *dctx;
+
+    if ((dctx = OPENSSL_zalloc(sizeof(*dctx))) == NULL) {
+        ECerr(EC_F_PKEY_EC_INIT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    dctx->cofactor_mode = -1;
+    dctx->kdf_type = EVP_PKEY_ECDH_KDF_NONE;
+    ctx->data = dctx;
+    return 1;
+}
+
+static int pkey_ec_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src)
+{
+    EC_PKEY_CTX *dctx, *sctx;
+    if (!pkey_ec_init(dst))
+        return 0;
+    sctx = src->data;
+    dctx = dst->data;
+    if (sctx->gen_group) {
+        dctx->gen_group = EC_GROUP_dup(sctx->gen_group);
+        if (!dctx->gen_group)
+            return 0;
+    }
+    dctx->md = sctx->md;
+
+    if (sctx->co_key) {
+        dctx->co_key = EC_KEY_dup(sctx->co_key);
+        if (!dctx->co_key)
+            return 0;
+    }
+    dctx->kdf_type = sctx->kdf_type;
+    dctx->kdf_md = sctx->kdf_md;
+    dctx->kdf_outlen = sctx->kdf_outlen;
+    if (sctx->kdf_ukm) {
+        dctx->kdf_ukm = OPENSSL_memdup(sctx->kdf_ukm, sctx->kdf_ukmlen);
+        if (!dctx->kdf_ukm)
+            return 0;
+    } else
+        dctx->kdf_ukm = NULL;
+    dctx->kdf_ukmlen = sctx->kdf_ukmlen;
+    return 1;
+}
+
+static void pkey_ec_cleanup(EVP_PKEY_CTX *ctx)
+{
+    EC_PKEY_CTX *dctx = ctx->data;
+    if (dctx != NULL) {
+        EC_GROUP_free(dctx->gen_group);
+        EC_KEY_free(dctx->co_key);
+        OPENSSL_free(dctx->kdf_ukm);
+        OPENSSL_free(dctx);
+        ctx->data = NULL;
+    }
+}
+
+static int pkey_ec_sign(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
+                        const unsigned char *tbs, size_t tbslen)
+{
+    int ret, type;
+    unsigned int sltmp;
+    EC_PKEY_CTX *dctx = ctx->data;
+    EC_KEY *ec = ctx->pkey->pkey.ec;
+    const int sig_sz = ECDSA_size(ec);
+
+    /* ensure cast to size_t is safe */
+    if (!ossl_assert(sig_sz > 0))
+        return 0;
+
+    if (sig == NULL) {
+        *siglen = (size_t)sig_sz;
+        return 1;
+    }
+
+    if (*siglen < (size_t)sig_sz) {
+        ECerr(EC_F_PKEY_EC_SIGN, EC_R_BUFFER_TOO_SMALL);
+        return 0;
+    }
+
+    type = (dctx->md != NULL) ? EVP_MD_type(dctx->md) : NID_sha1;
+
+    ret = ECDSA_sign(type, tbs, tbslen, sig, &sltmp, ec);
+
+    if (ret <= 0)
+        return ret;
+    *siglen = (size_t)sltmp;
+    return 1;
+}
+
+static int pkey_ec_verify(EVP_PKEY_CTX *ctx,
+                          const unsigned char *sig, size_t siglen,
+                          const unsigned char *tbs, size_t tbslen)
+{
+    int ret, type;
+    EC_PKEY_CTX *dctx = ctx->data;
+    EC_KEY *ec = ctx->pkey->pkey.ec;
+
+    if (dctx->md)
+        type = EVP_MD_type(dctx->md);
+    else
+        type = NID_sha1;
+
+    ret = ECDSA_verify(type, tbs, tbslen, sig, siglen, ec);
+
+    return ret;
+}
+
+#ifndef OPENSSL_NO_EC
+static int pkey_ec_derive(EVP_PKEY_CTX *ctx, unsigned char *key, size_t *keylen)
+{
+    int ret;
+    size_t outlen;
+    const EC_POINT *pubkey = NULL;
+    EC_KEY *eckey;
+    EC_PKEY_CTX *dctx = ctx->data;
+    if (!ctx->pkey || !ctx->peerkey) {
+        ECerr(EC_F_PKEY_EC_DERIVE, EC_R_KEYS_NOT_SET);
+        return 0;
+    }
+
+    eckey = dctx->co_key ? dctx->co_key : ctx->pkey->pkey.ec;
+
+    if (!key) {
+        const EC_GROUP *group;
+        group = EC_KEY_get0_group(eckey);
+        *keylen = (EC_GROUP_get_degree(group) + 7) / 8;
+        return 1;
+    }
+    pubkey = EC_KEY_get0_public_key(ctx->peerkey->pkey.ec);
+
+    /*
+     * NB: unlike PKCS#3 DH, if *outlen is less than maximum size this is not
+     * an error, the result is truncated.
+     */
+
+    outlen = *keylen;
+
+    ret = ECDH_compute_key(key, outlen, pubkey, eckey, 0);
+    if (ret <= 0)
+        return 0;
+    *keylen = ret;
+    return 1;
+}
+
+static int pkey_ec_kdf_derive(EVP_PKEY_CTX *ctx,
+                              unsigned char *key, size_t *keylen)
+{
+    EC_PKEY_CTX *dctx = ctx->data;
+    unsigned char *ktmp = NULL;
+    size_t ktmplen;
+    int rv = 0;
+    if (dctx->kdf_type == EVP_PKEY_ECDH_KDF_NONE)
+        return pkey_ec_derive(ctx, key, keylen);
+    if (!key) {
+        *keylen = dctx->kdf_outlen;
+        return 1;
+    }
+    if (*keylen != dctx->kdf_outlen)
+        return 0;
+    if (!pkey_ec_derive(ctx, NULL, &ktmplen))
+        return 0;
+    if ((ktmp = OPENSSL_malloc(ktmplen)) == NULL) {
+        ECerr(EC_F_PKEY_EC_KDF_DERIVE, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    if (!pkey_ec_derive(ctx, ktmp, &ktmplen))
+        goto err;
+    /* Do KDF stuff */
+    if (!ecdh_KDF_X9_63(key, *keylen, ktmp, ktmplen,
+                        dctx->kdf_ukm, dctx->kdf_ukmlen, dctx->kdf_md))
+        goto err;
+    rv = 1;
+
+ err:
+    OPENSSL_clear_free(ktmp, ktmplen);
+    return rv;
+}
+#endif
+
+static int pkey_ec_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
+{
+    EC_PKEY_CTX *dctx = ctx->data;
+    EC_GROUP *group;
+    switch (type) {
+    case EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID:
+        group = EC_GROUP_new_by_curve_name(p1);
+        if (group == NULL) {
+            ECerr(EC_F_PKEY_EC_CTRL, EC_R_INVALID_CURVE);
+            return 0;
+        }
+        EC_GROUP_free(dctx->gen_group);
+        dctx->gen_group = group;
+        return 1;
+
+    case EVP_PKEY_CTRL_EC_PARAM_ENC:
+        if (!dctx->gen_group) {
+            ECerr(EC_F_PKEY_EC_CTRL, EC_R_NO_PARAMETERS_SET);
+            return 0;
+        }
+        EC_GROUP_set_asn1_flag(dctx->gen_group, p1);
+        return 1;
+
+#ifndef OPENSSL_NO_EC
+    case EVP_PKEY_CTRL_EC_ECDH_COFACTOR:
+        if (p1 == -2) {
+            if (dctx->cofactor_mode != -1)
+                return dctx->cofactor_mode;
+            else {
+                EC_KEY *ec_key = ctx->pkey->pkey.ec;
+                return EC_KEY_get_flags(ec_key) & EC_FLAG_COFACTOR_ECDH ? 1 : 0;
+            }
+        } else if (p1 < -1 || p1 > 1)
+            return -2;
+        dctx->cofactor_mode = p1;
+        if (p1 != -1) {
+            EC_KEY *ec_key = ctx->pkey->pkey.ec;
+            if (!ec_key->group)
+                return -2;
+            /* If cofactor is 1 cofactor mode does nothing */
+            if (BN_is_one(ec_key->group->cofactor))
+                return 1;
+            if (!dctx->co_key) {
+                dctx->co_key = EC_KEY_dup(ec_key);
+                if (!dctx->co_key)
+                    return 0;
+            }
+            if (p1)
+                EC_KEY_set_flags(dctx->co_key, EC_FLAG_COFACTOR_ECDH);
+            else
+                EC_KEY_clear_flags(dctx->co_key, EC_FLAG_COFACTOR_ECDH);
+        } else {
+            EC_KEY_free(dctx->co_key);
+            dctx->co_key = NULL;
+        }
+        return 1;
+#endif
+
+    case EVP_PKEY_CTRL_EC_KDF_TYPE:
+        if (p1 == -2)
+            return dctx->kdf_type;
+        if (p1 != EVP_PKEY_ECDH_KDF_NONE && p1 != EVP_PKEY_ECDH_KDF_X9_63)
+            return -2;
+        dctx->kdf_type = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_EC_KDF_MD:
+        dctx->kdf_md = p2;
+        return 1;
+
+    case EVP_PKEY_CTRL_GET_EC_KDF_MD:
+        *(const EVP_MD **)p2 = dctx->kdf_md;
+        return 1;
+
+    case EVP_PKEY_CTRL_EC_KDF_OUTLEN:
+        if (p1 <= 0)
+            return -2;
+        dctx->kdf_outlen = (size_t)p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_GET_EC_KDF_OUTLEN:
+        *(int *)p2 = dctx->kdf_outlen;
+        return 1;
+
+    case EVP_PKEY_CTRL_EC_KDF_UKM:
+        OPENSSL_free(dctx->kdf_ukm);
+        dctx->kdf_ukm = p2;
+        if (p2)
+            dctx->kdf_ukmlen = p1;
+        else
+            dctx->kdf_ukmlen = 0;
+        return 1;
+
+    case EVP_PKEY_CTRL_GET_EC_KDF_UKM:
+        *(unsigned char **)p2 = dctx->kdf_ukm;
+        return dctx->kdf_ukmlen;
+
+    case EVP_PKEY_CTRL_MD:
+        if (EVP_MD_type((const EVP_MD *)p2) != NID_sha1 &&
+            EVP_MD_type((const EVP_MD *)p2) != NID_ecdsa_with_SHA1 &&
+            EVP_MD_type((const EVP_MD *)p2) != NID_sha224 &&
+            EVP_MD_type((const EVP_MD *)p2) != NID_sha256 &&
+            EVP_MD_type((const EVP_MD *)p2) != NID_sha384 &&
+            EVP_MD_type((const EVP_MD *)p2) != NID_sha512) {
+            ECerr(EC_F_PKEY_EC_CTRL, EC_R_INVALID_DIGEST_TYPE);
+            return 0;
+        }
+        dctx->md = p2;
+        return 1;
+
+    case EVP_PKEY_CTRL_GET_MD:
+        *(const EVP_MD **)p2 = dctx->md;
+        return 1;
+
+    case EVP_PKEY_CTRL_PEER_KEY:
+        /* Default behaviour is OK */
+    case EVP_PKEY_CTRL_DIGESTINIT:
+    case EVP_PKEY_CTRL_PKCS7_SIGN:
+    case EVP_PKEY_CTRL_CMS_SIGN:
+        return 1;
+
+    default:
+        return -2;
+
+    }
+}
+
+static int pkey_ec_ctrl_str(EVP_PKEY_CTX *ctx,
+                            const char *type, const char *value)
+{
+    if (strcmp(type, "ec_paramgen_curve") == 0) {
+        int nid;
+        nid = EC_curve_nist2nid(value);
+        if (nid == NID_undef)
+            nid = OBJ_sn2nid(value);
+        if (nid == NID_undef)
+            nid = OBJ_ln2nid(value);
+        if (nid == NID_undef) {
+            ECerr(EC_F_PKEY_EC_CTRL_STR, EC_R_INVALID_CURVE);
+            return 0;
+        }
+        return EVP_PKEY_CTX_set_ec_paramgen_curve_nid(ctx, nid);
+    } else if (strcmp(type, "ec_param_enc") == 0) {
+        int param_enc;
+        if (strcmp(value, "explicit") == 0)
+            param_enc = 0;
+        else if (strcmp(value, "named_curve") == 0)
+            param_enc = OPENSSL_EC_NAMED_CURVE;
+        else
+            return -2;
+        return EVP_PKEY_CTX_set_ec_param_enc(ctx, param_enc);
+    } else if (strcmp(type, "ecdh_kdf_md") == 0) {
+        const EVP_MD *md;
+        if ((md = EVP_get_digestbyname(value)) == NULL) {
+            ECerr(EC_F_PKEY_EC_CTRL_STR, EC_R_INVALID_DIGEST);
+            return 0;
+        }
+        return EVP_PKEY_CTX_set_ecdh_kdf_md(ctx, md);
+    } else if (strcmp(type, "ecdh_cofactor_mode") == 0) {
+        int co_mode;
+        co_mode = atoi(value);
+        return EVP_PKEY_CTX_set_ecdh_cofactor_mode(ctx, co_mode);
+    }
+
+    return -2;
+}
+
+static int pkey_ec_paramgen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
+{
+    EC_KEY *ec = NULL;
+    EC_PKEY_CTX *dctx = ctx->data;
+    int ret;
+
+    if (dctx->gen_group == NULL) {
+        ECerr(EC_F_PKEY_EC_PARAMGEN, EC_R_NO_PARAMETERS_SET);
+        return 0;
+    }
+    ec = EC_KEY_new();
+    if (ec == NULL)
+        return 0;
+    if (!(ret = EC_KEY_set_group(ec, dctx->gen_group))
+        || !ossl_assert(ret = EVP_PKEY_assign_EC_KEY(pkey, ec)))
+        EC_KEY_free(ec);
+    return ret;
+}
+
+static int pkey_ec_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
+{
+    EC_KEY *ec = NULL;
+    EC_PKEY_CTX *dctx = ctx->data;
+    int ret;
+
+    if (ctx->pkey == NULL && dctx->gen_group == NULL) {
+        ECerr(EC_F_PKEY_EC_KEYGEN, EC_R_NO_PARAMETERS_SET);
+        return 0;
+    }
+    ec = EC_KEY_new();
+    if (ec == NULL)
+        return 0;
+    if (!ossl_assert(EVP_PKEY_assign_EC_KEY(pkey, ec))) {
+        EC_KEY_free(ec);
+        return 0;
+    }
+    /* Note: if error is returned, we count on caller to free pkey->pkey.ec */
+    if (ctx->pkey != NULL)
+        ret = EVP_PKEY_copy_parameters(pkey, ctx->pkey);
+    else
+        ret = EC_KEY_set_group(ec, dctx->gen_group);
+
+    return ret ? EC_KEY_generate_key(ec) : 0;
+}
+
+const EVP_PKEY_METHOD ec_pkey_meth = {
+    EVP_PKEY_EC,
+    0,
+    pkey_ec_init,
+    pkey_ec_copy,
+    pkey_ec_cleanup,
+
+    0,
+    pkey_ec_paramgen,
+
+    0,
+    pkey_ec_keygen,
+
+    0,
+    pkey_ec_sign,
+
+    0,
+    pkey_ec_verify,
+
+    0, 0,
+
+    0, 0, 0, 0,
+
+    0,
+    0,
+
+    0,
+    0,
+
+    0,
+#ifndef OPENSSL_NO_EC
+    pkey_ec_kdf_derive,
+#else
+    0,
+#endif
+    pkey_ec_ctrl,
+    pkey_ec_ctrl_str
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_print.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_print.c
new file mode 100644
index 000000000..027a51928
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ec_print.c
@@ -0,0 +1,121 @@
+/*
+ * Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/crypto.h>
+#include <openssl/err.h>
+#include "ec_lcl.h"
+
+BIGNUM *EC_POINT_point2bn(const EC_GROUP *group,
+                          const EC_POINT *point,
+                          point_conversion_form_t form,
+                          BIGNUM *ret, BN_CTX *ctx)
+{
+    size_t buf_len = 0;
+    unsigned char *buf;
+
+    buf_len = EC_POINT_point2buf(group, point, form, &buf, ctx);
+
+    if (buf_len == 0)
+        return NULL;
+
+    ret = BN_bin2bn(buf, buf_len, ret);
+
+    OPENSSL_free(buf);
+
+    return ret;
+}
+
+EC_POINT *EC_POINT_bn2point(const EC_GROUP *group,
+                            const BIGNUM *bn, EC_POINT *point, BN_CTX *ctx)
+{
+    size_t buf_len = 0;
+    unsigned char *buf;
+    EC_POINT *ret;
+
+    if ((buf_len = BN_num_bytes(bn)) == 0)
+        return NULL;
+    if ((buf = OPENSSL_malloc(buf_len)) == NULL) {
+        ECerr(EC_F_EC_POINT_BN2POINT, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if (!BN_bn2bin(bn, buf)) {
+        OPENSSL_free(buf);
+        return NULL;
+    }
+
+    if (point == NULL) {
+        if ((ret = EC_POINT_new(group)) == NULL) {
+            OPENSSL_free(buf);
+            return NULL;
+        }
+    } else
+        ret = point;
+
+    if (!EC_POINT_oct2point(group, ret, buf, buf_len, ctx)) {
+        if (ret != point)
+            EC_POINT_clear_free(ret);
+        OPENSSL_free(buf);
+        return NULL;
+    }
+
+    OPENSSL_free(buf);
+    return ret;
+}
+
+static const char *HEX_DIGITS = "0123456789ABCDEF";
+
+/* the return value must be freed (using OPENSSL_free()) */
+char *EC_POINT_point2hex(const EC_GROUP *group,
+                         const EC_POINT *point,
+                         point_conversion_form_t form, BN_CTX *ctx)
+{
+    char *ret, *p;
+    size_t buf_len = 0, i;
+    unsigned char *buf = NULL, *pbuf;
+
+    buf_len = EC_POINT_point2buf(group, point, form, &buf, ctx);
+
+    if (buf_len == 0)
+        return NULL;
+
+    ret = OPENSSL_malloc(buf_len * 2 + 2);
+    if (ret == NULL) {
+        OPENSSL_free(buf);
+        return NULL;
+    }
+    p = ret;
+    pbuf = buf;
+    for (i = buf_len; i > 0; i--) {
+        int v = (int)*(pbuf++);
+        *(p++) = HEX_DIGITS[v >> 4];
+        *(p++) = HEX_DIGITS[v & 0x0F];
+    }
+    *p = '\0';
+
+    OPENSSL_free(buf);
+
+    return ret;
+}
+
+EC_POINT *EC_POINT_hex2point(const EC_GROUP *group,
+                             const char *buf, EC_POINT *point, BN_CTX *ctx)
+{
+    EC_POINT *ret = NULL;
+    BIGNUM *tmp_bn = NULL;
+
+    if (!BN_hex2bn(&tmp_bn, buf))
+        return NULL;
+
+    ret = EC_POINT_bn2point(group, tmp_bn, point, ctx);
+
+    BN_clear_free(tmp_bn);
+
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdh_kdf.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdh_kdf.c
new file mode 100644
index 000000000..d686f9d89
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdh_kdf.c
@@ -0,0 +1,81 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include <openssl/ec.h>
+#include <openssl/evp.h>
+#include "ec_lcl.h"
+
+/* Key derivation function from X9.63/SECG */
+/* Way more than we will ever need */
+#define ECDH_KDF_MAX    (1 << 30)
+
+int ecdh_KDF_X9_63(unsigned char *out, size_t outlen,
+                   const unsigned char *Z, size_t Zlen,
+                   const unsigned char *sinfo, size_t sinfolen,
+                   const EVP_MD *md)
+{
+    EVP_MD_CTX *mctx = NULL;
+    int rv = 0;
+    unsigned int i;
+    size_t mdlen;
+    unsigned char ctr[4];
+    if (sinfolen > ECDH_KDF_MAX || outlen > ECDH_KDF_MAX
+        || Zlen > ECDH_KDF_MAX)
+        return 0;
+    mctx = EVP_MD_CTX_new();
+    if (mctx == NULL)
+        return 0;
+    mdlen = EVP_MD_size(md);
+    for (i = 1;; i++) {
+        unsigned char mtmp[EVP_MAX_MD_SIZE];
+        if (!EVP_DigestInit_ex(mctx, md, NULL))
+            goto err;
+        ctr[3] = i & 0xFF;
+        ctr[2] = (i >> 8) & 0xFF;
+        ctr[1] = (i >> 16) & 0xFF;
+        ctr[0] = (i >> 24) & 0xFF;
+        if (!EVP_DigestUpdate(mctx, Z, Zlen))
+            goto err;
+        if (!EVP_DigestUpdate(mctx, ctr, sizeof(ctr)))
+            goto err;
+        if (!EVP_DigestUpdate(mctx, sinfo, sinfolen))
+            goto err;
+        if (outlen >= mdlen) {
+            if (!EVP_DigestFinal(mctx, out, NULL))
+                goto err;
+            outlen -= mdlen;
+            if (outlen == 0)
+                break;
+            out += mdlen;
+        } else {
+            if (!EVP_DigestFinal(mctx, mtmp, NULL))
+                goto err;
+            memcpy(out, mtmp, outlen);
+            OPENSSL_cleanse(mtmp, mdlen);
+            break;
+        }
+    }
+    rv = 1;
+ err:
+    EVP_MD_CTX_free(mctx);
+    return rv;
+}
+
+/*-
+ * The old name for ecdh_KDF_X9_63
+ * Retained for ABI compatibility
+ */
+int ECDH_KDF_X9_62(unsigned char *out, size_t outlen,
+                   const unsigned char *Z, size_t Zlen,
+                   const unsigned char *sinfo, size_t sinfolen,
+                   const EVP_MD *md)
+{
+    return ecdh_KDF_X9_63(out, outlen, Z, Zlen, sinfo, sinfolen, md);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdh_ossl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdh_ossl.c
new file mode 100644
index 000000000..bd93793a1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdh_ossl.c
@@ -0,0 +1,121 @@
+/*
+ * Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include <limits.h>
+
+#include "internal/cryptlib.h"
+
+#include <openssl/err.h>
+#include <openssl/bn.h>
+#include <openssl/objects.h>
+#include <openssl/ec.h>
+#include "ec_lcl.h"
+
+int ossl_ecdh_compute_key(unsigned char **psec, size_t *pseclen,
+                          const EC_POINT *pub_key, const EC_KEY *ecdh)
+{
+    if (ecdh->group->meth->ecdh_compute_key == NULL) {
+        ECerr(EC_F_OSSL_ECDH_COMPUTE_KEY, EC_R_CURVE_DOES_NOT_SUPPORT_ECDH);
+        return 0;
+    }
+
+    return ecdh->group->meth->ecdh_compute_key(psec, pseclen, pub_key, ecdh);
+}
+
+/*-
+ * This implementation is based on the following primitives in the IEEE 1363 standard:
+ *  - ECKAS-DH1
+ *  - ECSVDP-DH
+ */
+int ecdh_simple_compute_key(unsigned char **pout, size_t *poutlen,
+                            const EC_POINT *pub_key, const EC_KEY *ecdh)
+{
+    BN_CTX *ctx;
+    EC_POINT *tmp = NULL;
+    BIGNUM *x = NULL;
+    const BIGNUM *priv_key;
+    const EC_GROUP *group;
+    int ret = 0;
+    size_t buflen, len;
+    unsigned char *buf = NULL;
+
+    if ((ctx = BN_CTX_new()) == NULL)
+        goto err;
+    BN_CTX_start(ctx);
+    x = BN_CTX_get(ctx);
+    if (x == NULL) {
+        ECerr(EC_F_ECDH_SIMPLE_COMPUTE_KEY, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    priv_key = EC_KEY_get0_private_key(ecdh);
+    if (priv_key == NULL) {
+        ECerr(EC_F_ECDH_SIMPLE_COMPUTE_KEY, EC_R_NO_PRIVATE_VALUE);
+        goto err;
+    }
+
+    group = EC_KEY_get0_group(ecdh);
+
+    if (EC_KEY_get_flags(ecdh) & EC_FLAG_COFACTOR_ECDH) {
+        if (!EC_GROUP_get_cofactor(group, x, NULL) ||
+            !BN_mul(x, x, priv_key, ctx)) {
+            ECerr(EC_F_ECDH_SIMPLE_COMPUTE_KEY, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        priv_key = x;
+    }
+
+    if ((tmp = EC_POINT_new(group)) == NULL) {
+        ECerr(EC_F_ECDH_SIMPLE_COMPUTE_KEY, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (!EC_POINT_mul(group, tmp, NULL, pub_key, priv_key, ctx)) {
+        ECerr(EC_F_ECDH_SIMPLE_COMPUTE_KEY, EC_R_POINT_ARITHMETIC_FAILURE);
+        goto err;
+    }
+
+    if (!EC_POINT_get_affine_coordinates(group, tmp, x, NULL, ctx)) {
+        ECerr(EC_F_ECDH_SIMPLE_COMPUTE_KEY, EC_R_POINT_ARITHMETIC_FAILURE);
+        goto err;
+    }
+
+    buflen = (EC_GROUP_get_degree(group) + 7) / 8;
+    len = BN_num_bytes(x);
+    if (len > buflen) {
+        ECerr(EC_F_ECDH_SIMPLE_COMPUTE_KEY, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    if ((buf = OPENSSL_malloc(buflen)) == NULL) {
+        ECerr(EC_F_ECDH_SIMPLE_COMPUTE_KEY, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    memset(buf, 0, buflen - len);
+    if (len != (size_t)BN_bn2bin(x, buf + buflen - len)) {
+        ECerr(EC_F_ECDH_SIMPLE_COMPUTE_KEY, ERR_R_BN_LIB);
+        goto err;
+    }
+
+    *pout = buf;
+    *poutlen = buflen;
+    buf = NULL;
+
+    ret = 1;
+
+ err:
+    EC_POINT_free(tmp);
+    if (ctx)
+        BN_CTX_end(ctx);
+    BN_CTX_free(ctx);
+    OPENSSL_free(buf);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdsa_ossl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdsa_ossl.c
new file mode 100644
index 000000000..e35c7600d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdsa_ossl.c
@@ -0,0 +1,417 @@
+/*
+ * Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include <openssl/err.h>
+#include <openssl/obj_mac.h>
+#include <openssl/rand.h>
+#include "internal/bn_int.h"
+#include "ec_lcl.h"
+
+int ossl_ecdsa_sign(int type, const unsigned char *dgst, int dlen,
+                    unsigned char *sig, unsigned int *siglen,
+                    const BIGNUM *kinv, const BIGNUM *r, EC_KEY *eckey)
+{
+    ECDSA_SIG *s;
+
+    s = ECDSA_do_sign_ex(dgst, dlen, kinv, r, eckey);
+    if (s == NULL) {
+        *siglen = 0;
+        return 0;
+    }
+    *siglen = i2d_ECDSA_SIG(s, &sig);
+    ECDSA_SIG_free(s);
+    return 1;
+}
+
+static int ecdsa_sign_setup(EC_KEY *eckey, BN_CTX *ctx_in,
+                            BIGNUM **kinvp, BIGNUM **rp,
+                            const unsigned char *dgst, int dlen)
+{
+    BN_CTX *ctx = NULL;
+    BIGNUM *k = NULL, *r = NULL, *X = NULL;
+    const BIGNUM *order;
+    EC_POINT *tmp_point = NULL;
+    const EC_GROUP *group;
+    int ret = 0;
+    int order_bits;
+
+    if (eckey == NULL || (group = EC_KEY_get0_group(eckey)) == NULL) {
+        ECerr(EC_F_ECDSA_SIGN_SETUP, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+
+    if (!EC_KEY_can_sign(eckey)) {
+        ECerr(EC_F_ECDSA_SIGN_SETUP, EC_R_CURVE_DOES_NOT_SUPPORT_SIGNING);
+        return 0;
+    }
+
+    if ((ctx = ctx_in) == NULL) {
+        if ((ctx = BN_CTX_new()) == NULL) {
+            ECerr(EC_F_ECDSA_SIGN_SETUP, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+    }
+
+    k = BN_new();               /* this value is later returned in *kinvp */
+    r = BN_new();               /* this value is later returned in *rp */
+    X = BN_new();
+    if (k == NULL || r == NULL || X == NULL) {
+        ECerr(EC_F_ECDSA_SIGN_SETUP, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if ((tmp_point = EC_POINT_new(group)) == NULL) {
+        ECerr(EC_F_ECDSA_SIGN_SETUP, ERR_R_EC_LIB);
+        goto err;
+    }
+    order = EC_GROUP_get0_order(group);
+
+    /* Preallocate space */
+    order_bits = BN_num_bits(order);
+    if (!BN_set_bit(k, order_bits)
+        || !BN_set_bit(r, order_bits)
+        || !BN_set_bit(X, order_bits))
+        goto err;
+
+    do {
+        /* get random k */
+        do {
+            if (dgst != NULL) {
+                if (!BN_generate_dsa_nonce(k, order,
+                                           EC_KEY_get0_private_key(eckey),
+                                           dgst, dlen, ctx)) {
+                    ECerr(EC_F_ECDSA_SIGN_SETUP,
+                          EC_R_RANDOM_NUMBER_GENERATION_FAILED);
+                    goto err;
+                }
+            } else {
+                if (!BN_priv_rand_range(k, order)) {
+                    ECerr(EC_F_ECDSA_SIGN_SETUP,
+                          EC_R_RANDOM_NUMBER_GENERATION_FAILED);
+                    goto err;
+                }
+            }
+        } while (BN_is_zero(k));
+
+        /* compute r the x-coordinate of generator * k */
+        if (!EC_POINT_mul(group, tmp_point, k, NULL, NULL, ctx)) {
+            ECerr(EC_F_ECDSA_SIGN_SETUP, ERR_R_EC_LIB);
+            goto err;
+        }
+
+        if (!EC_POINT_get_affine_coordinates(group, tmp_point, X, NULL, ctx)) {
+            ECerr(EC_F_ECDSA_SIGN_SETUP, ERR_R_EC_LIB);
+            goto err;
+        }
+
+        if (!BN_nnmod(r, X, order, ctx)) {
+            ECerr(EC_F_ECDSA_SIGN_SETUP, ERR_R_BN_LIB);
+            goto err;
+        }
+    } while (BN_is_zero(r));
+
+    /* compute the inverse of k */
+    if (!ec_group_do_inverse_ord(group, k, k, ctx)) {
+        ECerr(EC_F_ECDSA_SIGN_SETUP, ERR_R_BN_LIB);
+        goto err;
+    }
+
+    /* clear old values if necessary */
+    BN_clear_free(*rp);
+    BN_clear_free(*kinvp);
+    /* save the pre-computed values  */
+    *rp = r;
+    *kinvp = k;
+    ret = 1;
+ err:
+    if (!ret) {
+        BN_clear_free(k);
+        BN_clear_free(r);
+    }
+    if (ctx != ctx_in)
+        BN_CTX_free(ctx);
+    EC_POINT_free(tmp_point);
+    BN_clear_free(X);
+    return ret;
+}
+
+int ossl_ecdsa_sign_setup(EC_KEY *eckey, BN_CTX *ctx_in, BIGNUM **kinvp,
+                          BIGNUM **rp)
+{
+    return ecdsa_sign_setup(eckey, ctx_in, kinvp, rp, NULL, 0);
+}
+
+ECDSA_SIG *ossl_ecdsa_sign_sig(const unsigned char *dgst, int dgst_len,
+                               const BIGNUM *in_kinv, const BIGNUM *in_r,
+                               EC_KEY *eckey)
+{
+    int ok = 0, i;
+    BIGNUM *kinv = NULL, *s, *m = NULL;
+    const BIGNUM *order, *ckinv;
+    BN_CTX *ctx = NULL;
+    const EC_GROUP *group;
+    ECDSA_SIG *ret;
+    const BIGNUM *priv_key;
+
+    group = EC_KEY_get0_group(eckey);
+    priv_key = EC_KEY_get0_private_key(eckey);
+
+    if (group == NULL || priv_key == NULL) {
+        ECerr(EC_F_OSSL_ECDSA_SIGN_SIG, ERR_R_PASSED_NULL_PARAMETER);
+        return NULL;
+    }
+
+    if (!EC_KEY_can_sign(eckey)) {
+        ECerr(EC_F_OSSL_ECDSA_SIGN_SIG, EC_R_CURVE_DOES_NOT_SUPPORT_SIGNING);
+        return NULL;
+    }
+
+    ret = ECDSA_SIG_new();
+    if (ret == NULL) {
+        ECerr(EC_F_OSSL_ECDSA_SIGN_SIG, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    ret->r = BN_new();
+    ret->s = BN_new();
+    if (ret->r == NULL || ret->s == NULL) {
+        ECerr(EC_F_OSSL_ECDSA_SIGN_SIG, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    s = ret->s;
+
+    if ((ctx = BN_CTX_new()) == NULL
+        || (m = BN_new()) == NULL) {
+        ECerr(EC_F_OSSL_ECDSA_SIGN_SIG, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    order = EC_GROUP_get0_order(group);
+    i = BN_num_bits(order);
+    /*
+     * Need to truncate digest if it is too long: first truncate whole bytes.
+     */
+    if (8 * dgst_len > i)
+        dgst_len = (i + 7) / 8;
+    if (!BN_bin2bn(dgst, dgst_len, m)) {
+        ECerr(EC_F_OSSL_ECDSA_SIGN_SIG, ERR_R_BN_LIB);
+        goto err;
+    }
+    /* If still too long, truncate remaining bits with a shift */
+    if ((8 * dgst_len > i) && !BN_rshift(m, m, 8 - (i & 0x7))) {
+        ECerr(EC_F_OSSL_ECDSA_SIGN_SIG, ERR_R_BN_LIB);
+        goto err;
+    }
+    do {
+        if (in_kinv == NULL || in_r == NULL) {
+            if (!ecdsa_sign_setup(eckey, ctx, &kinv, &ret->r, dgst, dgst_len)) {
+                ECerr(EC_F_OSSL_ECDSA_SIGN_SIG, ERR_R_ECDSA_LIB);
+                goto err;
+            }
+            ckinv = kinv;
+        } else {
+            ckinv = in_kinv;
+            if (BN_copy(ret->r, in_r) == NULL) {
+                ECerr(EC_F_OSSL_ECDSA_SIGN_SIG, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+        }
+
+        /*
+         * With only one multiplicant being in Montgomery domain
+         * multiplication yields real result without post-conversion.
+         * Also note that all operations but last are performed with
+         * zero-padded vectors. Last operation, BN_mod_mul_montgomery
+         * below, returns user-visible value with removed zero padding.
+         */
+        if (!bn_to_mont_fixed_top(s, ret->r, group->mont_data, ctx)
+            || !bn_mul_mont_fixed_top(s, s, priv_key, group->mont_data, ctx)) {
+            ECerr(EC_F_OSSL_ECDSA_SIGN_SIG, ERR_R_BN_LIB);
+            goto err;
+        }
+        if (!bn_mod_add_fixed_top(s, s, m, order)) {
+            ECerr(EC_F_OSSL_ECDSA_SIGN_SIG, ERR_R_BN_LIB);
+            goto err;
+        }
+        /*
+         * |s| can still be larger than modulus, because |m| can be. In
+         * such case we count on Montgomery reduction to tie it up.
+         */
+        if (!bn_to_mont_fixed_top(s, s, group->mont_data, ctx)
+            || !BN_mod_mul_montgomery(s, s, ckinv, group->mont_data, ctx)) {
+            ECerr(EC_F_OSSL_ECDSA_SIGN_SIG, ERR_R_BN_LIB);
+            goto err;
+        }
+
+        if (BN_is_zero(s)) {
+            /*
+             * if kinv and r have been supplied by the caller, don't
+             * generate new kinv and r values
+             */
+            if (in_kinv != NULL && in_r != NULL) {
+                ECerr(EC_F_OSSL_ECDSA_SIGN_SIG, EC_R_NEED_NEW_SETUP_VALUES);
+                goto err;
+            }
+        } else {
+            /* s != 0 => we have a valid signature */
+            break;
+        }
+    } while (1);
+
+    ok = 1;
+ err:
+    if (!ok) {
+        ECDSA_SIG_free(ret);
+        ret = NULL;
+    }
+    BN_CTX_free(ctx);
+    BN_clear_free(m);
+    BN_clear_free(kinv);
+    return ret;
+}
+
+/*-
+ * returns
+ *      1: correct signature
+ *      0: incorrect signature
+ *     -1: error
+ */
+int ossl_ecdsa_verify(int type, const unsigned char *dgst, int dgst_len,
+                      const unsigned char *sigbuf, int sig_len, EC_KEY *eckey)
+{
+    ECDSA_SIG *s;
+    const unsigned char *p = sigbuf;
+    unsigned char *der = NULL;
+    int derlen = -1;
+    int ret = -1;
+
+    s = ECDSA_SIG_new();
+    if (s == NULL)
+        return ret;
+    if (d2i_ECDSA_SIG(&s, &p, sig_len) == NULL)
+        goto err;
+    /* Ensure signature uses DER and doesn't have trailing garbage */
+    derlen = i2d_ECDSA_SIG(s, &der);
+    if (derlen != sig_len || memcmp(sigbuf, der, derlen) != 0)
+        goto err;
+    ret = ECDSA_do_verify(dgst, dgst_len, s, eckey);
+ err:
+    OPENSSL_clear_free(der, derlen);
+    ECDSA_SIG_free(s);
+    return ret;
+}
+
+int ossl_ecdsa_verify_sig(const unsigned char *dgst, int dgst_len,
+                          const ECDSA_SIG *sig, EC_KEY *eckey)
+{
+    int ret = -1, i;
+    BN_CTX *ctx;
+    const BIGNUM *order;
+    BIGNUM *u1, *u2, *m, *X;
+    EC_POINT *point = NULL;
+    const EC_GROUP *group;
+    const EC_POINT *pub_key;
+
+    /* check input values */
+    if (eckey == NULL || (group = EC_KEY_get0_group(eckey)) == NULL ||
+        (pub_key = EC_KEY_get0_public_key(eckey)) == NULL || sig == NULL) {
+        ECerr(EC_F_OSSL_ECDSA_VERIFY_SIG, EC_R_MISSING_PARAMETERS);
+        return -1;
+    }
+
+    if (!EC_KEY_can_sign(eckey)) {
+        ECerr(EC_F_OSSL_ECDSA_VERIFY_SIG, EC_R_CURVE_DOES_NOT_SUPPORT_SIGNING);
+        return -1;
+    }
+
+    ctx = BN_CTX_new();
+    if (ctx == NULL) {
+        ECerr(EC_F_OSSL_ECDSA_VERIFY_SIG, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+    BN_CTX_start(ctx);
+    u1 = BN_CTX_get(ctx);
+    u2 = BN_CTX_get(ctx);
+    m = BN_CTX_get(ctx);
+    X = BN_CTX_get(ctx);
+    if (X == NULL) {
+        ECerr(EC_F_OSSL_ECDSA_VERIFY_SIG, ERR_R_BN_LIB);
+        goto err;
+    }
+
+    order = EC_GROUP_get0_order(group);
+    if (order == NULL) {
+        ECerr(EC_F_OSSL_ECDSA_VERIFY_SIG, ERR_R_EC_LIB);
+        goto err;
+    }
+
+    if (BN_is_zero(sig->r) || BN_is_negative(sig->r) ||
+        BN_ucmp(sig->r, order) >= 0 || BN_is_zero(sig->s) ||
+        BN_is_negative(sig->s) || BN_ucmp(sig->s, order) >= 0) {
+        ECerr(EC_F_OSSL_ECDSA_VERIFY_SIG, EC_R_BAD_SIGNATURE);
+        ret = 0;                /* signature is invalid */
+        goto err;
+    }
+    /* calculate tmp1 = inv(S) mod order */
+    if (!ec_group_do_inverse_ord(group, u2, sig->s, ctx)) {
+        ECerr(EC_F_OSSL_ECDSA_VERIFY_SIG, ERR_R_BN_LIB);
+        goto err;
+    }
+    /* digest -> m */
+    i = BN_num_bits(order);
+    /*
+     * Need to truncate digest if it is too long: first truncate whole bytes.
+     */
+    if (8 * dgst_len > i)
+        dgst_len = (i + 7) / 8;
+    if (!BN_bin2bn(dgst, dgst_len, m)) {
+        ECerr(EC_F_OSSL_ECDSA_VERIFY_SIG, ERR_R_BN_LIB);
+        goto err;
+    }
+    /* If still too long truncate remaining bits with a shift */
+    if ((8 * dgst_len > i) && !BN_rshift(m, m, 8 - (i & 0x7))) {
+        ECerr(EC_F_OSSL_ECDSA_VERIFY_SIG, ERR_R_BN_LIB);
+        goto err;
+    }
+    /* u1 = m * tmp mod order */
+    if (!BN_mod_mul(u1, m, u2, order, ctx)) {
+        ECerr(EC_F_OSSL_ECDSA_VERIFY_SIG, ERR_R_BN_LIB);
+        goto err;
+    }
+    /* u2 = r * w mod q */
+    if (!BN_mod_mul(u2, sig->r, u2, order, ctx)) {
+        ECerr(EC_F_OSSL_ECDSA_VERIFY_SIG, ERR_R_BN_LIB);
+        goto err;
+    }
+
+    if ((point = EC_POINT_new(group)) == NULL) {
+        ECerr(EC_F_OSSL_ECDSA_VERIFY_SIG, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if (!EC_POINT_mul(group, point, u1, pub_key, u2, ctx)) {
+        ECerr(EC_F_OSSL_ECDSA_VERIFY_SIG, ERR_R_EC_LIB);
+        goto err;
+    }
+
+    if (!EC_POINT_get_affine_coordinates(group, point, X, NULL, ctx)) {
+        ECerr(EC_F_OSSL_ECDSA_VERIFY_SIG, ERR_R_EC_LIB);
+        goto err;
+    }
+
+    if (!BN_nnmod(u1, X, order, ctx)) {
+        ECerr(EC_F_OSSL_ECDSA_VERIFY_SIG, ERR_R_BN_LIB);
+        goto err;
+    }
+    /*  if the signature is correct u1 is equal to sig->r */
+    ret = (BN_ucmp(u1, sig->r) == 0);
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(ctx);
+    EC_POINT_free(point);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdsa_sign.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdsa_sign.c
new file mode 100644
index 000000000..aee06e991
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdsa_sign.c
@@ -0,0 +1,52 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/ec.h>
+#include "ec_lcl.h"
+#include <openssl/err.h>
+
+ECDSA_SIG *ECDSA_do_sign(const unsigned char *dgst, int dlen, EC_KEY *eckey)
+{
+    return ECDSA_do_sign_ex(dgst, dlen, NULL, NULL, eckey);
+}
+
+ECDSA_SIG *ECDSA_do_sign_ex(const unsigned char *dgst, int dlen,
+                            const BIGNUM *kinv, const BIGNUM *rp,
+                            EC_KEY *eckey)
+{
+    if (eckey->meth->sign_sig != NULL)
+        return eckey->meth->sign_sig(dgst, dlen, kinv, rp, eckey);
+    ECerr(EC_F_ECDSA_DO_SIGN_EX, EC_R_OPERATION_NOT_SUPPORTED);
+    return NULL;
+}
+
+int ECDSA_sign(int type, const unsigned char *dgst, int dlen, unsigned char
+               *sig, unsigned int *siglen, EC_KEY *eckey)
+{
+    return ECDSA_sign_ex(type, dgst, dlen, sig, siglen, NULL, NULL, eckey);
+}
+
+int ECDSA_sign_ex(int type, const unsigned char *dgst, int dlen,
+                  unsigned char *sig, unsigned int *siglen, const BIGNUM *kinv,
+                  const BIGNUM *r, EC_KEY *eckey)
+{
+    if (eckey->meth->sign != NULL)
+        return eckey->meth->sign(type, dgst, dlen, sig, siglen, kinv, r, eckey);
+    ECerr(EC_F_ECDSA_SIGN_EX, EC_R_OPERATION_NOT_SUPPORTED);
+    return 0;
+}
+
+int ECDSA_sign_setup(EC_KEY *eckey, BN_CTX *ctx_in, BIGNUM **kinvp,
+                     BIGNUM **rp)
+{
+    if (eckey->meth->sign_setup != NULL)
+        return eckey->meth->sign_setup(eckey, ctx_in, kinvp, rp);
+    ECerr(EC_F_ECDSA_SIGN_SETUP, EC_R_OPERATION_NOT_SUPPORTED);
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdsa_vrf.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdsa_vrf.c
new file mode 100644
index 000000000..f61a20063
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecdsa_vrf.c
@@ -0,0 +1,43 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/ec.h>
+#include "ec_lcl.h"
+#include <openssl/err.h>
+
+/*-
+ * returns
+ *      1: correct signature
+ *      0: incorrect signature
+ *     -1: error
+ */
+int ECDSA_do_verify(const unsigned char *dgst, int dgst_len,
+                    const ECDSA_SIG *sig, EC_KEY *eckey)
+{
+    if (eckey->meth->verify_sig != NULL)
+        return eckey->meth->verify_sig(dgst, dgst_len, sig, eckey);
+    ECerr(EC_F_ECDSA_DO_VERIFY, EC_R_OPERATION_NOT_SUPPORTED);
+    return 0;
+}
+
+/*-
+ * returns
+ *      1: correct signature
+ *      0: incorrect signature
+ *     -1: error
+ */
+int ECDSA_verify(int type, const unsigned char *dgst, int dgst_len,
+                 const unsigned char *sigbuf, int sig_len, EC_KEY *eckey)
+{
+    if (eckey->meth->verify != NULL)
+        return eckey->meth->verify(type, dgst, dgst_len, sigbuf, sig_len,
+                                   eckey);
+    ECerr(EC_F_ECDSA_VERIFY, EC_R_OPERATION_NOT_SUPPORTED);
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/eck_prn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/eck_prn.c
new file mode 100644
index 000000000..b538fadcb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/eck_prn.c
@@ -0,0 +1,259 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/ec.h>
+#include <openssl/bn.h>
+
+#ifndef OPENSSL_NO_STDIO
+int ECPKParameters_print_fp(FILE *fp, const EC_GROUP *x, int off)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        ECerr(EC_F_ECPKPARAMETERS_PRINT_FP, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = ECPKParameters_print(b, x, off);
+    BIO_free(b);
+    return ret;
+}
+
+int EC_KEY_print_fp(FILE *fp, const EC_KEY *x, int off)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        ECerr(EC_F_EC_KEY_PRINT_FP, ERR_R_BIO_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = EC_KEY_print(b, x, off);
+    BIO_free(b);
+    return ret;
+}
+
+int ECParameters_print_fp(FILE *fp, const EC_KEY *x)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        ECerr(EC_F_ECPARAMETERS_PRINT_FP, ERR_R_BIO_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = ECParameters_print(b, x);
+    BIO_free(b);
+    return ret;
+}
+#endif
+
+static int print_bin(BIO *fp, const char *str, const unsigned char *num,
+                     size_t len, int off);
+
+int ECPKParameters_print(BIO *bp, const EC_GROUP *x, int off)
+{
+    int ret = 0, reason = ERR_R_BIO_LIB;
+    BN_CTX *ctx = NULL;
+    const EC_POINT *point = NULL;
+    BIGNUM *p = NULL, *a = NULL, *b = NULL, *gen = NULL;
+    const BIGNUM *order = NULL, *cofactor = NULL;
+    const unsigned char *seed;
+    size_t seed_len = 0;
+
+    static const char *gen_compressed = "Generator (compressed):";
+    static const char *gen_uncompressed = "Generator (uncompressed):";
+    static const char *gen_hybrid = "Generator (hybrid):";
+
+    if (!x) {
+        reason = ERR_R_PASSED_NULL_PARAMETER;
+        goto err;
+    }
+
+    ctx = BN_CTX_new();
+    if (ctx == NULL) {
+        reason = ERR_R_MALLOC_FAILURE;
+        goto err;
+    }
+
+    if (EC_GROUP_get_asn1_flag(x)) {
+        /* the curve parameter are given by an asn1 OID */
+        int nid;
+        const char *nname;
+
+        if (!BIO_indent(bp, off, 128))
+            goto err;
+
+        nid = EC_GROUP_get_curve_name(x);
+        if (nid == 0)
+            goto err;
+        if (BIO_printf(bp, "ASN1 OID: %s", OBJ_nid2sn(nid)) <= 0)
+            goto err;
+        if (BIO_printf(bp, "\n") <= 0)
+            goto err;
+        nname = EC_curve_nid2nist(nid);
+        if (nname) {
+            if (!BIO_indent(bp, off, 128))
+                goto err;
+            if (BIO_printf(bp, "NIST CURVE: %s\n", nname) <= 0)
+                goto err;
+        }
+    } else {
+        /* explicit parameters */
+        int is_char_two = 0;
+        point_conversion_form_t form;
+        int tmp_nid = EC_METHOD_get_field_type(EC_GROUP_method_of(x));
+
+        if (tmp_nid == NID_X9_62_characteristic_two_field)
+            is_char_two = 1;
+
+        if ((p = BN_new()) == NULL || (a = BN_new()) == NULL ||
+            (b = BN_new()) == NULL) {
+            reason = ERR_R_MALLOC_FAILURE;
+            goto err;
+        }
+
+        if (!EC_GROUP_get_curve(x, p, a, b, ctx)) {
+            reason = ERR_R_EC_LIB;
+            goto err;
+        }
+
+        if ((point = EC_GROUP_get0_generator(x)) == NULL) {
+            reason = ERR_R_EC_LIB;
+            goto err;
+        }
+        order = EC_GROUP_get0_order(x);
+        cofactor = EC_GROUP_get0_cofactor(x);
+        if (order == NULL) {
+            reason = ERR_R_EC_LIB;
+            goto err;
+        }
+
+        form = EC_GROUP_get_point_conversion_form(x);
+
+        if ((gen = EC_POINT_point2bn(x, point, form, NULL, ctx)) == NULL) {
+            reason = ERR_R_EC_LIB;
+            goto err;
+        }
+
+        if ((seed = EC_GROUP_get0_seed(x)) != NULL)
+            seed_len = EC_GROUP_get_seed_len(x);
+
+        if (!BIO_indent(bp, off, 128))
+            goto err;
+
+        /* print the 'short name' of the field type */
+        if (BIO_printf(bp, "Field Type: %s\n", OBJ_nid2sn(tmp_nid))
+            <= 0)
+            goto err;
+
+        if (is_char_two) {
+            /* print the 'short name' of the base type OID */
+            int basis_type = EC_GROUP_get_basis_type(x);
+            if (basis_type == 0)
+                goto err;
+
+            if (!BIO_indent(bp, off, 128))
+                goto err;
+
+            if (BIO_printf(bp, "Basis Type: %s\n",
+                           OBJ_nid2sn(basis_type)) <= 0)
+                goto err;
+
+            /* print the polynomial */
+            if ((p != NULL) && !ASN1_bn_print(bp, "Polynomial:", p, NULL,
+                                              off))
+                goto err;
+        } else {
+            if ((p != NULL) && !ASN1_bn_print(bp, "Prime:", p, NULL, off))
+                goto err;
+        }
+        if ((a != NULL) && !ASN1_bn_print(bp, "A:   ", a, NULL, off))
+            goto err;
+        if ((b != NULL) && !ASN1_bn_print(bp, "B:   ", b, NULL, off))
+            goto err;
+        if (form == POINT_CONVERSION_COMPRESSED) {
+            if ((gen != NULL) && !ASN1_bn_print(bp, gen_compressed, gen,
+                                                NULL, off))
+                goto err;
+        } else if (form == POINT_CONVERSION_UNCOMPRESSED) {
+            if ((gen != NULL) && !ASN1_bn_print(bp, gen_uncompressed, gen,
+                                                NULL, off))
+                goto err;
+        } else {                /* form == POINT_CONVERSION_HYBRID */
+
+            if ((gen != NULL) && !ASN1_bn_print(bp, gen_hybrid, gen,
+                                                NULL, off))
+                goto err;
+        }
+        if ((order != NULL) && !ASN1_bn_print(bp, "Order: ", order,
+                                              NULL, off))
+            goto err;
+        if ((cofactor != NULL) && !ASN1_bn_print(bp, "Cofactor: ", cofactor,
+                                                 NULL, off))
+            goto err;
+        if (seed && !print_bin(bp, "Seed:", seed, seed_len, off))
+            goto err;
+    }
+    ret = 1;
+ err:
+    if (!ret)
+        ECerr(EC_F_ECPKPARAMETERS_PRINT, reason);
+    BN_free(p);
+    BN_free(a);
+    BN_free(b);
+    BN_free(gen);
+    BN_CTX_free(ctx);
+    return ret;
+}
+
+static int print_bin(BIO *fp, const char *name, const unsigned char *buf,
+                     size_t len, int off)
+{
+    size_t i;
+    char str[128 + 1 + 4];
+
+    if (buf == NULL)
+        return 1;
+    if (off > 0) {
+        if (off > 128)
+            off = 128;
+        memset(str, ' ', off);
+        if (BIO_write(fp, str, off) <= 0)
+            return 0;
+    } else {
+        off = 0;
+    }
+
+    if (BIO_printf(fp, "%s", name) <= 0)
+        return 0;
+
+    for (i = 0; i < len; i++) {
+        if ((i % 15) == 0) {
+            str[0] = '\n';
+            memset(&(str[1]), ' ', off + 4);
+            if (BIO_write(fp, str, off + 1 + 4) <= 0)
+                return 0;
+        }
+        if (BIO_printf(fp, "%02x%s", buf[i], ((i + 1) == len) ? "" : ":") <=
+            0)
+            return 0;
+    }
+    if (BIO_write(fp, "\n", 1) <= 0)
+        return 0;
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_mont.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_mont.c
new file mode 100644
index 000000000..252e66ef3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_mont.c
@@ -0,0 +1,291 @@
+/*
+ * Copyright 2001-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+
+#include "ec_lcl.h"
+
+const EC_METHOD *EC_GFp_mont_method(void)
+{
+    static const EC_METHOD ret = {
+        EC_FLAGS_DEFAULT_OCT,
+        NID_X9_62_prime_field,
+        ec_GFp_mont_group_init,
+        ec_GFp_mont_group_finish,
+        ec_GFp_mont_group_clear_finish,
+        ec_GFp_mont_group_copy,
+        ec_GFp_mont_group_set_curve,
+        ec_GFp_simple_group_get_curve,
+        ec_GFp_simple_group_get_degree,
+        ec_group_simple_order_bits,
+        ec_GFp_simple_group_check_discriminant,
+        ec_GFp_simple_point_init,
+        ec_GFp_simple_point_finish,
+        ec_GFp_simple_point_clear_finish,
+        ec_GFp_simple_point_copy,
+        ec_GFp_simple_point_set_to_infinity,
+        ec_GFp_simple_set_Jprojective_coordinates_GFp,
+        ec_GFp_simple_get_Jprojective_coordinates_GFp,
+        ec_GFp_simple_point_set_affine_coordinates,
+        ec_GFp_simple_point_get_affine_coordinates,
+        0, 0, 0,
+        ec_GFp_simple_add,
+        ec_GFp_simple_dbl,
+        ec_GFp_simple_invert,
+        ec_GFp_simple_is_at_infinity,
+        ec_GFp_simple_is_on_curve,
+        ec_GFp_simple_cmp,
+        ec_GFp_simple_make_affine,
+        ec_GFp_simple_points_make_affine,
+        0 /* mul */ ,
+        0 /* precompute_mult */ ,
+        0 /* have_precompute_mult */ ,
+        ec_GFp_mont_field_mul,
+        ec_GFp_mont_field_sqr,
+        0 /* field_div */ ,
+        ec_GFp_mont_field_inv,
+        ec_GFp_mont_field_encode,
+        ec_GFp_mont_field_decode,
+        ec_GFp_mont_field_set_to_one,
+        ec_key_simple_priv2oct,
+        ec_key_simple_oct2priv,
+        0, /* set private */
+        ec_key_simple_generate_key,
+        ec_key_simple_check_key,
+        ec_key_simple_generate_public_key,
+        0, /* keycopy */
+        0, /* keyfinish */
+        ecdh_simple_compute_key,
+        0, /* field_inverse_mod_ord */
+        ec_GFp_simple_blind_coordinates,
+        ec_GFp_simple_ladder_pre,
+        ec_GFp_simple_ladder_step,
+        ec_GFp_simple_ladder_post
+    };
+
+    return &ret;
+}
+
+int ec_GFp_mont_group_init(EC_GROUP *group)
+{
+    int ok;
+
+    ok = ec_GFp_simple_group_init(group);
+    group->field_data1 = NULL;
+    group->field_data2 = NULL;
+    return ok;
+}
+
+void ec_GFp_mont_group_finish(EC_GROUP *group)
+{
+    BN_MONT_CTX_free(group->field_data1);
+    group->field_data1 = NULL;
+    BN_free(group->field_data2);
+    group->field_data2 = NULL;
+    ec_GFp_simple_group_finish(group);
+}
+
+void ec_GFp_mont_group_clear_finish(EC_GROUP *group)
+{
+    BN_MONT_CTX_free(group->field_data1);
+    group->field_data1 = NULL;
+    BN_clear_free(group->field_data2);
+    group->field_data2 = NULL;
+    ec_GFp_simple_group_clear_finish(group);
+}
+
+int ec_GFp_mont_group_copy(EC_GROUP *dest, const EC_GROUP *src)
+{
+    BN_MONT_CTX_free(dest->field_data1);
+    dest->field_data1 = NULL;
+    BN_clear_free(dest->field_data2);
+    dest->field_data2 = NULL;
+
+    if (!ec_GFp_simple_group_copy(dest, src))
+        return 0;
+
+    if (src->field_data1 != NULL) {
+        dest->field_data1 = BN_MONT_CTX_new();
+        if (dest->field_data1 == NULL)
+            return 0;
+        if (!BN_MONT_CTX_copy(dest->field_data1, src->field_data1))
+            goto err;
+    }
+    if (src->field_data2 != NULL) {
+        dest->field_data2 = BN_dup(src->field_data2);
+        if (dest->field_data2 == NULL)
+            goto err;
+    }
+
+    return 1;
+
+ err:
+    BN_MONT_CTX_free(dest->field_data1);
+    dest->field_data1 = NULL;
+    return 0;
+}
+
+int ec_GFp_mont_group_set_curve(EC_GROUP *group, const BIGNUM *p,
+                                const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx)
+{
+    BN_CTX *new_ctx = NULL;
+    BN_MONT_CTX *mont = NULL;
+    BIGNUM *one = NULL;
+    int ret = 0;
+
+    BN_MONT_CTX_free(group->field_data1);
+    group->field_data1 = NULL;
+    BN_free(group->field_data2);
+    group->field_data2 = NULL;
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return 0;
+    }
+
+    mont = BN_MONT_CTX_new();
+    if (mont == NULL)
+        goto err;
+    if (!BN_MONT_CTX_set(mont, p, ctx)) {
+        ECerr(EC_F_EC_GFP_MONT_GROUP_SET_CURVE, ERR_R_BN_LIB);
+        goto err;
+    }
+    one = BN_new();
+    if (one == NULL)
+        goto err;
+    if (!BN_to_montgomery(one, BN_value_one(), mont, ctx))
+        goto err;
+
+    group->field_data1 = mont;
+    mont = NULL;
+    group->field_data2 = one;
+    one = NULL;
+
+    ret = ec_GFp_simple_group_set_curve(group, p, a, b, ctx);
+
+    if (!ret) {
+        BN_MONT_CTX_free(group->field_data1);
+        group->field_data1 = NULL;
+        BN_free(group->field_data2);
+        group->field_data2 = NULL;
+    }
+
+ err:
+    BN_free(one);
+    BN_CTX_free(new_ctx);
+    BN_MONT_CTX_free(mont);
+    return ret;
+}
+
+int ec_GFp_mont_field_mul(const EC_GROUP *group, BIGNUM *r, const BIGNUM *a,
+                          const BIGNUM *b, BN_CTX *ctx)
+{
+    if (group->field_data1 == NULL) {
+        ECerr(EC_F_EC_GFP_MONT_FIELD_MUL, EC_R_NOT_INITIALIZED);
+        return 0;
+    }
+
+    return BN_mod_mul_montgomery(r, a, b, group->field_data1, ctx);
+}
+
+int ec_GFp_mont_field_sqr(const EC_GROUP *group, BIGNUM *r, const BIGNUM *a,
+                          BN_CTX *ctx)
+{
+    if (group->field_data1 == NULL) {
+        ECerr(EC_F_EC_GFP_MONT_FIELD_SQR, EC_R_NOT_INITIALIZED);
+        return 0;
+    }
+
+    return BN_mod_mul_montgomery(r, a, a, group->field_data1, ctx);
+}
+
+/*-
+ * Computes the multiplicative inverse of a in GF(p), storing the result in r.
+ * If a is zero (or equivalent), you'll get a EC_R_CANNOT_INVERT error.
+ * We have a Mont structure, so SCA hardening is FLT inversion.
+ */
+int ec_GFp_mont_field_inv(const EC_GROUP *group, BIGNUM *r, const BIGNUM *a,
+                            BN_CTX *ctx)
+{
+    BIGNUM *e = NULL;
+    BN_CTX *new_ctx = NULL;
+    int ret = 0;
+
+    if (group->field_data1 == NULL)
+        return 0;
+
+    if (ctx == NULL && (ctx = new_ctx = BN_CTX_secure_new()) == NULL)
+        return 0;
+
+    BN_CTX_start(ctx);
+    if ((e = BN_CTX_get(ctx)) == NULL)
+        goto err;
+
+    /* Inverse in constant time with Fermats Little Theorem */
+    if (!BN_set_word(e, 2))
+        goto err;
+    if (!BN_sub(e, group->field, e))
+        goto err;
+    /*-
+     * Exponent e is public.
+     * No need for scatter-gather or BN_FLG_CONSTTIME.
+     */
+    if (!BN_mod_exp_mont(r, a, e, group->field, ctx, group->field_data1))
+        goto err;
+
+    /* throw an error on zero */
+    if (BN_is_zero(r)) {
+        ECerr(EC_F_EC_GFP_MONT_FIELD_INV, EC_R_CANNOT_INVERT);
+        goto err;
+    }
+
+    ret = 1;
+
+  err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+int ec_GFp_mont_field_encode(const EC_GROUP *group, BIGNUM *r,
+                             const BIGNUM *a, BN_CTX *ctx)
+{
+    if (group->field_data1 == NULL) {
+        ECerr(EC_F_EC_GFP_MONT_FIELD_ENCODE, EC_R_NOT_INITIALIZED);
+        return 0;
+    }
+
+    return BN_to_montgomery(r, a, (BN_MONT_CTX *)group->field_data1, ctx);
+}
+
+int ec_GFp_mont_field_decode(const EC_GROUP *group, BIGNUM *r,
+                             const BIGNUM *a, BN_CTX *ctx)
+{
+    if (group->field_data1 == NULL) {
+        ECerr(EC_F_EC_GFP_MONT_FIELD_DECODE, EC_R_NOT_INITIALIZED);
+        return 0;
+    }
+
+    return BN_from_montgomery(r, a, group->field_data1, ctx);
+}
+
+int ec_GFp_mont_field_set_to_one(const EC_GROUP *group, BIGNUM *r,
+                                 BN_CTX *ctx)
+{
+    if (group->field_data2 == NULL) {
+        ECerr(EC_F_EC_GFP_MONT_FIELD_SET_TO_ONE, EC_R_NOT_INITIALIZED);
+        return 0;
+    }
+
+    if (!BN_copy(r, group->field_data2))
+        return 0;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nist.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nist.c
new file mode 100644
index 000000000..5eaa99d84
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nist.c
@@ -0,0 +1,168 @@
+/*
+ * Copyright 2001-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <limits.h>
+
+#include <openssl/err.h>
+#include <openssl/obj_mac.h>
+#include "ec_lcl.h"
+
+const EC_METHOD *EC_GFp_nist_method(void)
+{
+    static const EC_METHOD ret = {
+        EC_FLAGS_DEFAULT_OCT,
+        NID_X9_62_prime_field,
+        ec_GFp_simple_group_init,
+        ec_GFp_simple_group_finish,
+        ec_GFp_simple_group_clear_finish,
+        ec_GFp_nist_group_copy,
+        ec_GFp_nist_group_set_curve,
+        ec_GFp_simple_group_get_curve,
+        ec_GFp_simple_group_get_degree,
+        ec_group_simple_order_bits,
+        ec_GFp_simple_group_check_discriminant,
+        ec_GFp_simple_point_init,
+        ec_GFp_simple_point_finish,
+        ec_GFp_simple_point_clear_finish,
+        ec_GFp_simple_point_copy,
+        ec_GFp_simple_point_set_to_infinity,
+        ec_GFp_simple_set_Jprojective_coordinates_GFp,
+        ec_GFp_simple_get_Jprojective_coordinates_GFp,
+        ec_GFp_simple_point_set_affine_coordinates,
+        ec_GFp_simple_point_get_affine_coordinates,
+        0, 0, 0,
+        ec_GFp_simple_add,
+        ec_GFp_simple_dbl,
+        ec_GFp_simple_invert,
+        ec_GFp_simple_is_at_infinity,
+        ec_GFp_simple_is_on_curve,
+        ec_GFp_simple_cmp,
+        ec_GFp_simple_make_affine,
+        ec_GFp_simple_points_make_affine,
+        0 /* mul */ ,
+        0 /* precompute_mult */ ,
+        0 /* have_precompute_mult */ ,
+        ec_GFp_nist_field_mul,
+        ec_GFp_nist_field_sqr,
+        0 /* field_div */ ,
+        ec_GFp_simple_field_inv,
+        0 /* field_encode */ ,
+        0 /* field_decode */ ,
+        0,                      /* field_set_to_one */
+        ec_key_simple_priv2oct,
+        ec_key_simple_oct2priv,
+        0, /* set private */
+        ec_key_simple_generate_key,
+        ec_key_simple_check_key,
+        ec_key_simple_generate_public_key,
+        0, /* keycopy */
+        0, /* keyfinish */
+        ecdh_simple_compute_key,
+        0, /* field_inverse_mod_ord */
+        ec_GFp_simple_blind_coordinates,
+        ec_GFp_simple_ladder_pre,
+        ec_GFp_simple_ladder_step,
+        ec_GFp_simple_ladder_post
+    };
+
+    return &ret;
+}
+
+int ec_GFp_nist_group_copy(EC_GROUP *dest, const EC_GROUP *src)
+{
+    dest->field_mod_func = src->field_mod_func;
+
+    return ec_GFp_simple_group_copy(dest, src);
+}
+
+int ec_GFp_nist_group_set_curve(EC_GROUP *group, const BIGNUM *p,
+                                const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx)
+{
+    int ret = 0;
+    BN_CTX *new_ctx = NULL;
+
+    if (ctx == NULL)
+        if ((ctx = new_ctx = BN_CTX_new()) == NULL)
+            return 0;
+
+    BN_CTX_start(ctx);
+
+    if (BN_ucmp(BN_get0_nist_prime_192(), p) == 0)
+        group->field_mod_func = BN_nist_mod_192;
+    else if (BN_ucmp(BN_get0_nist_prime_224(), p) == 0)
+        group->field_mod_func = BN_nist_mod_224;
+    else if (BN_ucmp(BN_get0_nist_prime_256(), p) == 0)
+        group->field_mod_func = BN_nist_mod_256;
+    else if (BN_ucmp(BN_get0_nist_prime_384(), p) == 0)
+        group->field_mod_func = BN_nist_mod_384;
+    else if (BN_ucmp(BN_get0_nist_prime_521(), p) == 0)
+        group->field_mod_func = BN_nist_mod_521;
+    else {
+        ECerr(EC_F_EC_GFP_NIST_GROUP_SET_CURVE, EC_R_NOT_A_NIST_PRIME);
+        goto err;
+    }
+
+    ret = ec_GFp_simple_group_set_curve(group, p, a, b, ctx);
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+int ec_GFp_nist_field_mul(const EC_GROUP *group, BIGNUM *r, const BIGNUM *a,
+                          const BIGNUM *b, BN_CTX *ctx)
+{
+    int ret = 0;
+    BN_CTX *ctx_new = NULL;
+
+    if (!group || !r || !a || !b) {
+        ECerr(EC_F_EC_GFP_NIST_FIELD_MUL, ERR_R_PASSED_NULL_PARAMETER);
+        goto err;
+    }
+    if (!ctx)
+        if ((ctx_new = ctx = BN_CTX_new()) == NULL)
+            goto err;
+
+    if (!BN_mul(r, a, b, ctx))
+        goto err;
+    if (!group->field_mod_func(r, r, group->field, ctx))
+        goto err;
+
+    ret = 1;
+ err:
+    BN_CTX_free(ctx_new);
+    return ret;
+}
+
+int ec_GFp_nist_field_sqr(const EC_GROUP *group, BIGNUM *r, const BIGNUM *a,
+                          BN_CTX *ctx)
+{
+    int ret = 0;
+    BN_CTX *ctx_new = NULL;
+
+    if (!group || !r || !a) {
+        ECerr(EC_F_EC_GFP_NIST_FIELD_SQR, EC_R_PASSED_NULL_PARAMETER);
+        goto err;
+    }
+    if (!ctx)
+        if ((ctx_new = ctx = BN_CTX_new()) == NULL)
+            goto err;
+
+    if (!BN_sqr(r, a, ctx))
+        goto err;
+    if (!group->field_mod_func(r, r, group->field, ctx))
+        goto err;
+
+    ret = 1;
+ err:
+    BN_CTX_free(ctx_new);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistp224.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistp224.c
new file mode 100644
index 000000000..025273a14
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistp224.c
@@ -0,0 +1,1716 @@
+/*
+ * Copyright 2010-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* Copyright 2011 Google Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ *
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ */
+
+/*
+ * A 64-bit implementation of the NIST P-224 elliptic curve point multiplication
+ *
+ * Inspired by Daniel J. Bernstein's public domain nistp224 implementation
+ * and Adam Langley's public domain 64-bit C implementation of curve25519
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_EC_NISTP_64_GCC_128
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <stdint.h>
+# include <string.h>
+# include <openssl/err.h>
+# include "ec_lcl.h"
+
+# if defined(__SIZEOF_INT128__) && __SIZEOF_INT128__==16
+  /* even with gcc, the typedef won't work for 32-bit platforms */
+typedef __uint128_t uint128_t;  /* nonstandard; implemented by gcc on 64-bit
+                                 * platforms */
+# else
+#  error "Your compiler doesn't appear to support 128-bit integer types"
+# endif
+
+typedef uint8_t u8;
+typedef uint64_t u64;
+
+/******************************************************************************/
+/*-
+ * INTERNAL REPRESENTATION OF FIELD ELEMENTS
+ *
+ * Field elements are represented as a_0 + 2^56*a_1 + 2^112*a_2 + 2^168*a_3
+ * using 64-bit coefficients called 'limbs',
+ * and sometimes (for multiplication results) as
+ * b_0 + 2^56*b_1 + 2^112*b_2 + 2^168*b_3 + 2^224*b_4 + 2^280*b_5 + 2^336*b_6
+ * using 128-bit coefficients called 'widelimbs'.
+ * A 4-limb representation is an 'felem';
+ * a 7-widelimb representation is a 'widefelem'.
+ * Even within felems, bits of adjacent limbs overlap, and we don't always
+ * reduce the representations: we ensure that inputs to each felem
+ * multiplication satisfy a_i < 2^60, so outputs satisfy b_i < 4*2^60*2^60,
+ * and fit into a 128-bit word without overflow. The coefficients are then
+ * again partially reduced to obtain an felem satisfying a_i < 2^57.
+ * We only reduce to the unique minimal representation at the end of the
+ * computation.
+ */
+
+typedef uint64_t limb;
+typedef uint128_t widelimb;
+
+typedef limb felem[4];
+typedef widelimb widefelem[7];
+
+/*
+ * Field element represented as a byte array. 28*8 = 224 bits is also the
+ * group order size for the elliptic curve, and we also use this type for
+ * scalars for point multiplication.
+ */
+typedef u8 felem_bytearray[28];
+
+static const felem_bytearray nistp224_curve_params[5] = {
+    {0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, /* p */
+     0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0x00, 0x00, 0x00, 0x00,
+     0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01},
+    {0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, /* a */
+     0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xFF, 0xFF,
+     0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFE},
+    {0xB4, 0x05, 0x0A, 0x85, 0x0C, 0x04, 0xB3, 0xAB, 0xF5, 0x41, /* b */
+     0x32, 0x56, 0x50, 0x44, 0xB0, 0xB7, 0xD7, 0xBF, 0xD8, 0xBA,
+     0x27, 0x0B, 0x39, 0x43, 0x23, 0x55, 0xFF, 0xB4},
+    {0xB7, 0x0E, 0x0C, 0xBD, 0x6B, 0xB4, 0xBF, 0x7F, 0x32, 0x13, /* x */
+     0x90, 0xB9, 0x4A, 0x03, 0xC1, 0xD3, 0x56, 0xC2, 0x11, 0x22,
+     0x34, 0x32, 0x80, 0xD6, 0x11, 0x5C, 0x1D, 0x21},
+    {0xbd, 0x37, 0x63, 0x88, 0xb5, 0xf7, 0x23, 0xfb, 0x4c, 0x22, /* y */
+     0xdf, 0xe6, 0xcd, 0x43, 0x75, 0xa0, 0x5a, 0x07, 0x47, 0x64,
+     0x44, 0xd5, 0x81, 0x99, 0x85, 0x00, 0x7e, 0x34}
+};
+
+/*-
+ * Precomputed multiples of the standard generator
+ * Points are given in coordinates (X, Y, Z) where Z normally is 1
+ * (0 for the point at infinity).
+ * For each field element, slice a_0 is word 0, etc.
+ *
+ * The table has 2 * 16 elements, starting with the following:
+ * index | bits    | point
+ * ------+---------+------------------------------
+ *     0 | 0 0 0 0 | 0G
+ *     1 | 0 0 0 1 | 1G
+ *     2 | 0 0 1 0 | 2^56G
+ *     3 | 0 0 1 1 | (2^56 + 1)G
+ *     4 | 0 1 0 0 | 2^112G
+ *     5 | 0 1 0 1 | (2^112 + 1)G
+ *     6 | 0 1 1 0 | (2^112 + 2^56)G
+ *     7 | 0 1 1 1 | (2^112 + 2^56 + 1)G
+ *     8 | 1 0 0 0 | 2^168G
+ *     9 | 1 0 0 1 | (2^168 + 1)G
+ *    10 | 1 0 1 0 | (2^168 + 2^56)G
+ *    11 | 1 0 1 1 | (2^168 + 2^56 + 1)G
+ *    12 | 1 1 0 0 | (2^168 + 2^112)G
+ *    13 | 1 1 0 1 | (2^168 + 2^112 + 1)G
+ *    14 | 1 1 1 0 | (2^168 + 2^112 + 2^56)G
+ *    15 | 1 1 1 1 | (2^168 + 2^112 + 2^56 + 1)G
+ * followed by a copy of this with each element multiplied by 2^28.
+ *
+ * The reason for this is so that we can clock bits into four different
+ * locations when doing simple scalar multiplies against the base point,
+ * and then another four locations using the second 16 elements.
+ */
+static const felem gmul[2][16][3] = {
+{{{0, 0, 0, 0},
+  {0, 0, 0, 0},
+  {0, 0, 0, 0}},
+ {{0x3280d6115c1d21, 0xc1d356c2112234, 0x7f321390b94a03, 0xb70e0cbd6bb4bf},
+  {0xd5819985007e34, 0x75a05a07476444, 0xfb4c22dfe6cd43, 0xbd376388b5f723},
+  {1, 0, 0, 0}},
+ {{0xfd9675666ebbe9, 0xbca7664d40ce5e, 0x2242df8d8a2a43, 0x1f49bbb0f99bc5},
+  {0x29e0b892dc9c43, 0xece8608436e662, 0xdc858f185310d0, 0x9812dd4eb8d321},
+  {1, 0, 0, 0}},
+ {{0x6d3e678d5d8eb8, 0x559eed1cb362f1, 0x16e9a3bbce8a3f, 0xeedcccd8c2a748},
+  {0xf19f90ed50266d, 0xabf2b4bf65f9df, 0x313865468fafec, 0x5cb379ba910a17},
+  {1, 0, 0, 0}},
+ {{0x0641966cab26e3, 0x91fb2991fab0a0, 0xefec27a4e13a0b, 0x0499aa8a5f8ebe},
+  {0x7510407766af5d, 0x84d929610d5450, 0x81d77aae82f706, 0x6916f6d4338c5b},
+  {1, 0, 0, 0}},
+ {{0xea95ac3b1f15c6, 0x086000905e82d4, 0xdd323ae4d1c8b1, 0x932b56be7685a3},
+  {0x9ef93dea25dbbf, 0x41665960f390f0, 0xfdec76dbe2a8a7, 0x523e80f019062a},
+  {1, 0, 0, 0}},
+ {{0x822fdd26732c73, 0xa01c83531b5d0f, 0x363f37347c1ba4, 0xc391b45c84725c},
+  {0xbbd5e1b2d6ad24, 0xddfbcde19dfaec, 0xc393da7e222a7f, 0x1efb7890ede244},
+  {1, 0, 0, 0}},
+ {{0x4c9e90ca217da1, 0xd11beca79159bb, 0xff8d33c2c98b7c, 0x2610b39409f849},
+  {0x44d1352ac64da0, 0xcdbb7b2c46b4fb, 0x966c079b753c89, 0xfe67e4e820b112},
+  {1, 0, 0, 0}},
+ {{0xe28cae2df5312d, 0xc71b61d16f5c6e, 0x79b7619a3e7c4c, 0x05c73240899b47},
+  {0x9f7f6382c73e3a, 0x18615165c56bda, 0x641fab2116fd56, 0x72855882b08394},
+  {1, 0, 0, 0}},
+ {{0x0469182f161c09, 0x74a98ca8d00fb5, 0xb89da93489a3e0, 0x41c98768fb0c1d},
+  {0xe5ea05fb32da81, 0x3dce9ffbca6855, 0x1cfe2d3fbf59e6, 0x0e5e03408738a7},
+  {1, 0, 0, 0}},
+ {{0xdab22b2333e87f, 0x4430137a5dd2f6, 0xe03ab9f738beb8, 0xcb0c5d0dc34f24},
+  {0x764a7df0c8fda5, 0x185ba5c3fa2044, 0x9281d688bcbe50, 0xc40331df893881},
+  {1, 0, 0, 0}},
+ {{0xb89530796f0f60, 0xade92bd26909a3, 0x1a0c83fb4884da, 0x1765bf22a5a984},
+  {0x772a9ee75db09e, 0x23bc6c67cec16f, 0x4c1edba8b14e2f, 0xe2a215d9611369},
+  {1, 0, 0, 0}},
+ {{0x571e509fb5efb3, 0xade88696410552, 0xc8ae85fada74fe, 0x6c7e4be83bbde3},
+  {0xff9f51160f4652, 0xb47ce2495a6539, 0xa2946c53b582f4, 0x286d2db3ee9a60},
+  {1, 0, 0, 0}},
+ {{0x40bbd5081a44af, 0x0995183b13926c, 0xbcefba6f47f6d0, 0x215619e9cc0057},
+  {0x8bc94d3b0df45e, 0xf11c54a3694f6f, 0x8631b93cdfe8b5, 0xe7e3f4b0982db9},
+  {1, 0, 0, 0}},
+ {{0xb17048ab3e1c7b, 0xac38f36ff8a1d8, 0x1c29819435d2c6, 0xc813132f4c07e9},
+  {0x2891425503b11f, 0x08781030579fea, 0xf5426ba5cc9674, 0x1e28ebf18562bc},
+  {1, 0, 0, 0}},
+ {{0x9f31997cc864eb, 0x06cd91d28b5e4c, 0xff17036691a973, 0xf1aef351497c58},
+  {0xdd1f2d600564ff, 0xdead073b1402db, 0x74a684435bd693, 0xeea7471f962558},
+  {1, 0, 0, 0}}},
+{{{0, 0, 0, 0},
+  {0, 0, 0, 0},
+  {0, 0, 0, 0}},
+ {{0x9665266dddf554, 0x9613d78b60ef2d, 0xce27a34cdba417, 0xd35ab74d6afc31},
+  {0x85ccdd22deb15e, 0x2137e5783a6aab, 0xa141cffd8c93c6, 0x355a1830e90f2d},
+  {1, 0, 0, 0}},
+ {{0x1a494eadaade65, 0xd6da4da77fe53c, 0xe7992996abec86, 0x65c3553c6090e3},
+  {0xfa610b1fb09346, 0xf1c6540b8a4aaf, 0xc51a13ccd3cbab, 0x02995b1b18c28a},
+  {1, 0, 0, 0}},
+ {{0x7874568e7295ef, 0x86b419fbe38d04, 0xdc0690a7550d9a, 0xd3966a44beac33},
+  {0x2b7280ec29132f, 0xbeaa3b6a032df3, 0xdc7dd88ae41200, 0xd25e2513e3a100},
+  {1, 0, 0, 0}},
+ {{0x924857eb2efafd, 0xac2bce41223190, 0x8edaa1445553fc, 0x825800fd3562d5},
+  {0x8d79148ea96621, 0x23a01c3dd9ed8d, 0xaf8b219f9416b5, 0xd8db0cc277daea},
+  {1, 0, 0, 0}},
+ {{0x76a9c3b1a700f0, 0xe9acd29bc7e691, 0x69212d1a6b0327, 0x6322e97fe154be},
+  {0x469fc5465d62aa, 0x8d41ed18883b05, 0x1f8eae66c52b88, 0xe4fcbe9325be51},
+  {1, 0, 0, 0}},
+ {{0x825fdf583cac16, 0x020b857c7b023a, 0x683c17744b0165, 0x14ffd0a2daf2f1},
+  {0x323b36184218f9, 0x4944ec4e3b47d4, 0xc15b3080841acf, 0x0bced4b01a28bb},
+  {1, 0, 0, 0}},
+ {{0x92ac22230df5c4, 0x52f33b4063eda8, 0xcb3f19870c0c93, 0x40064f2ba65233},
+  {0xfe16f0924f8992, 0x012da25af5b517, 0x1a57bb24f723a6, 0x06f8bc76760def},
+  {1, 0, 0, 0}},
+ {{0x4a7084f7817cb9, 0xbcab0738ee9a78, 0x3ec11e11d9c326, 0xdc0fe90e0f1aae},
+  {0xcf639ea5f98390, 0x5c350aa22ffb74, 0x9afae98a4047b7, 0x956ec2d617fc45},
+  {1, 0, 0, 0}},
+ {{0x4306d648c1be6a, 0x9247cd8bc9a462, 0xf5595e377d2f2e, 0xbd1c3caff1a52e},
+  {0x045e14472409d0, 0x29f3e17078f773, 0x745a602b2d4f7d, 0x191837685cdfbb},
+  {1, 0, 0, 0}},
+ {{0x5b6ee254a8cb79, 0x4953433f5e7026, 0xe21faeb1d1def4, 0xc4c225785c09de},
+  {0x307ce7bba1e518, 0x31b125b1036db8, 0x47e91868839e8f, 0xc765866e33b9f3},
+  {1, 0, 0, 0}},
+ {{0x3bfece24f96906, 0x4794da641e5093, 0xde5df64f95db26, 0x297ecd89714b05},
+  {0x701bd3ebb2c3aa, 0x7073b4f53cb1d5, 0x13c5665658af16, 0x9895089d66fe58},
+  {1, 0, 0, 0}},
+ {{0x0fef05f78c4790, 0x2d773633b05d2e, 0x94229c3a951c94, 0xbbbd70df4911bb},
+  {0xb2c6963d2c1168, 0x105f47a72b0d73, 0x9fdf6111614080, 0x7b7e94b39e67b0},
+  {1, 0, 0, 0}},
+ {{0xad1a7d6efbe2b3, 0xf012482c0da69d, 0x6b3bdf12438345, 0x40d7558d7aa4d9},
+  {0x8a09fffb5c6d3d, 0x9a356e5d9ffd38, 0x5973f15f4f9b1c, 0xdcd5f59f63c3ea},
+  {1, 0, 0, 0}},
+ {{0xacf39f4c5ca7ab, 0x4c8071cc5fd737, 0xc64e3602cd1184, 0x0acd4644c9abba},
+  {0x6c011a36d8bf6e, 0xfecd87ba24e32a, 0x19f6f56574fad8, 0x050b204ced9405},
+  {1, 0, 0, 0}},
+ {{0xed4f1cae7d9a96, 0x5ceef7ad94c40a, 0x778e4a3bf3ef9b, 0x7405783dc3b55e},
+  {0x32477c61b6e8c6, 0xb46a97570f018b, 0x91176d0a7e95d1, 0x3df90fbc4c7d0e},
+  {1, 0, 0, 0}}}
+};
+
+/* Precomputation for the group generator. */
+struct nistp224_pre_comp_st {
+    felem g_pre_comp[2][16][3];
+    CRYPTO_REF_COUNT references;
+    CRYPTO_RWLOCK *lock;
+};
+
+const EC_METHOD *EC_GFp_nistp224_method(void)
+{
+    static const EC_METHOD ret = {
+        EC_FLAGS_DEFAULT_OCT,
+        NID_X9_62_prime_field,
+        ec_GFp_nistp224_group_init,
+        ec_GFp_simple_group_finish,
+        ec_GFp_simple_group_clear_finish,
+        ec_GFp_nist_group_copy,
+        ec_GFp_nistp224_group_set_curve,
+        ec_GFp_simple_group_get_curve,
+        ec_GFp_simple_group_get_degree,
+        ec_group_simple_order_bits,
+        ec_GFp_simple_group_check_discriminant,
+        ec_GFp_simple_point_init,
+        ec_GFp_simple_point_finish,
+        ec_GFp_simple_point_clear_finish,
+        ec_GFp_simple_point_copy,
+        ec_GFp_simple_point_set_to_infinity,
+        ec_GFp_simple_set_Jprojective_coordinates_GFp,
+        ec_GFp_simple_get_Jprojective_coordinates_GFp,
+        ec_GFp_simple_point_set_affine_coordinates,
+        ec_GFp_nistp224_point_get_affine_coordinates,
+        0 /* point_set_compressed_coordinates */ ,
+        0 /* point2oct */ ,
+        0 /* oct2point */ ,
+        ec_GFp_simple_add,
+        ec_GFp_simple_dbl,
+        ec_GFp_simple_invert,
+        ec_GFp_simple_is_at_infinity,
+        ec_GFp_simple_is_on_curve,
+        ec_GFp_simple_cmp,
+        ec_GFp_simple_make_affine,
+        ec_GFp_simple_points_make_affine,
+        ec_GFp_nistp224_points_mul,
+        ec_GFp_nistp224_precompute_mult,
+        ec_GFp_nistp224_have_precompute_mult,
+        ec_GFp_nist_field_mul,
+        ec_GFp_nist_field_sqr,
+        0 /* field_div */ ,
+        ec_GFp_simple_field_inv,
+        0 /* field_encode */ ,
+        0 /* field_decode */ ,
+        0,                      /* field_set_to_one */
+        ec_key_simple_priv2oct,
+        ec_key_simple_oct2priv,
+        0, /* set private */
+        ec_key_simple_generate_key,
+        ec_key_simple_check_key,
+        ec_key_simple_generate_public_key,
+        0, /* keycopy */
+        0, /* keyfinish */
+        ecdh_simple_compute_key,
+        0, /* field_inverse_mod_ord */
+        0, /* blind_coordinates */
+        0, /* ladder_pre */
+        0, /* ladder_step */
+        0  /* ladder_post */
+    };
+
+    return &ret;
+}
+
+/*
+ * Helper functions to convert field elements to/from internal representation
+ */
+static void bin28_to_felem(felem out, const u8 in[28])
+{
+    out[0] = *((const uint64_t *)(in)) & 0x00ffffffffffffff;
+    out[1] = (*((const uint64_t *)(in + 7))) & 0x00ffffffffffffff;
+    out[2] = (*((const uint64_t *)(in + 14))) & 0x00ffffffffffffff;
+    out[3] = (*((const uint64_t *)(in+20))) >> 8;
+}
+
+static void felem_to_bin28(u8 out[28], const felem in)
+{
+    unsigned i;
+    for (i = 0; i < 7; ++i) {
+        out[i] = in[0] >> (8 * i);
+        out[i + 7] = in[1] >> (8 * i);
+        out[i + 14] = in[2] >> (8 * i);
+        out[i + 21] = in[3] >> (8 * i);
+    }
+}
+
+/* To preserve endianness when using BN_bn2bin and BN_bin2bn */
+static void flip_endian(u8 *out, const u8 *in, unsigned len)
+{
+    unsigned i;
+    for (i = 0; i < len; ++i)
+        out[i] = in[len - 1 - i];
+}
+
+/* From OpenSSL BIGNUM to internal representation */
+static int BN_to_felem(felem out, const BIGNUM *bn)
+{
+    felem_bytearray b_in;
+    felem_bytearray b_out;
+    unsigned num_bytes;
+
+    /* BN_bn2bin eats leading zeroes */
+    memset(b_out, 0, sizeof(b_out));
+    num_bytes = BN_num_bytes(bn);
+    if (num_bytes > sizeof(b_out)) {
+        ECerr(EC_F_BN_TO_FELEM, EC_R_BIGNUM_OUT_OF_RANGE);
+        return 0;
+    }
+    if (BN_is_negative(bn)) {
+        ECerr(EC_F_BN_TO_FELEM, EC_R_BIGNUM_OUT_OF_RANGE);
+        return 0;
+    }
+    num_bytes = BN_bn2bin(bn, b_in);
+    flip_endian(b_out, b_in, num_bytes);
+    bin28_to_felem(out, b_out);
+    return 1;
+}
+
+/* From internal representation to OpenSSL BIGNUM */
+static BIGNUM *felem_to_BN(BIGNUM *out, const felem in)
+{
+    felem_bytearray b_in, b_out;
+    felem_to_bin28(b_in, in);
+    flip_endian(b_out, b_in, sizeof(b_out));
+    return BN_bin2bn(b_out, sizeof(b_out), out);
+}
+
+/******************************************************************************/
+/*-
+ *                              FIELD OPERATIONS
+ *
+ * Field operations, using the internal representation of field elements.
+ * NB! These operations are specific to our point multiplication and cannot be
+ * expected to be correct in general - e.g., multiplication with a large scalar
+ * will cause an overflow.
+ *
+ */
+
+static void felem_one(felem out)
+{
+    out[0] = 1;
+    out[1] = 0;
+    out[2] = 0;
+    out[3] = 0;
+}
+
+static void felem_assign(felem out, const felem in)
+{
+    out[0] = in[0];
+    out[1] = in[1];
+    out[2] = in[2];
+    out[3] = in[3];
+}
+
+/* Sum two field elements: out += in */
+static void felem_sum(felem out, const felem in)
+{
+    out[0] += in[0];
+    out[1] += in[1];
+    out[2] += in[2];
+    out[3] += in[3];
+}
+
+/* Subtract field elements: out -= in */
+/* Assumes in[i] < 2^57 */
+static void felem_diff(felem out, const felem in)
+{
+    static const limb two58p2 = (((limb) 1) << 58) + (((limb) 1) << 2);
+    static const limb two58m2 = (((limb) 1) << 58) - (((limb) 1) << 2);
+    static const limb two58m42m2 = (((limb) 1) << 58) -
+        (((limb) 1) << 42) - (((limb) 1) << 2);
+
+    /* Add 0 mod 2^224-2^96+1 to ensure out > in */
+    out[0] += two58p2;
+    out[1] += two58m42m2;
+    out[2] += two58m2;
+    out[3] += two58m2;
+
+    out[0] -= in[0];
+    out[1] -= in[1];
+    out[2] -= in[2];
+    out[3] -= in[3];
+}
+
+/* Subtract in unreduced 128-bit mode: out -= in */
+/* Assumes in[i] < 2^119 */
+static void widefelem_diff(widefelem out, const widefelem in)
+{
+    static const widelimb two120 = ((widelimb) 1) << 120;
+    static const widelimb two120m64 = (((widelimb) 1) << 120) -
+        (((widelimb) 1) << 64);
+    static const widelimb two120m104m64 = (((widelimb) 1) << 120) -
+        (((widelimb) 1) << 104) - (((widelimb) 1) << 64);
+
+    /* Add 0 mod 2^224-2^96+1 to ensure out > in */
+    out[0] += two120;
+    out[1] += two120m64;
+    out[2] += two120m64;
+    out[3] += two120;
+    out[4] += two120m104m64;
+    out[5] += two120m64;
+    out[6] += two120m64;
+
+    out[0] -= in[0];
+    out[1] -= in[1];
+    out[2] -= in[2];
+    out[3] -= in[3];
+    out[4] -= in[4];
+    out[5] -= in[5];
+    out[6] -= in[6];
+}
+
+/* Subtract in mixed mode: out128 -= in64 */
+/* in[i] < 2^63 */
+static void felem_diff_128_64(widefelem out, const felem in)
+{
+    static const widelimb two64p8 = (((widelimb) 1) << 64) +
+        (((widelimb) 1) << 8);
+    static const widelimb two64m8 = (((widelimb) 1) << 64) -
+        (((widelimb) 1) << 8);
+    static const widelimb two64m48m8 = (((widelimb) 1) << 64) -
+        (((widelimb) 1) << 48) - (((widelimb) 1) << 8);
+
+    /* Add 0 mod 2^224-2^96+1 to ensure out > in */
+    out[0] += two64p8;
+    out[1] += two64m48m8;
+    out[2] += two64m8;
+    out[3] += two64m8;
+
+    out[0] -= in[0];
+    out[1] -= in[1];
+    out[2] -= in[2];
+    out[3] -= in[3];
+}
+
+/*
+ * Multiply a field element by a scalar: out = out * scalar The scalars we
+ * actually use are small, so results fit without overflow
+ */
+static void felem_scalar(felem out, const limb scalar)
+{
+    out[0] *= scalar;
+    out[1] *= scalar;
+    out[2] *= scalar;
+    out[3] *= scalar;
+}
+
+/*
+ * Multiply an unreduced field element by a scalar: out = out * scalar The
+ * scalars we actually use are small, so results fit without overflow
+ */
+static void widefelem_scalar(widefelem out, const widelimb scalar)
+{
+    out[0] *= scalar;
+    out[1] *= scalar;
+    out[2] *= scalar;
+    out[3] *= scalar;
+    out[4] *= scalar;
+    out[5] *= scalar;
+    out[6] *= scalar;
+}
+
+/* Square a field element: out = in^2 */
+static void felem_square(widefelem out, const felem in)
+{
+    limb tmp0, tmp1, tmp2;
+    tmp0 = 2 * in[0];
+    tmp1 = 2 * in[1];
+    tmp2 = 2 * in[2];
+    out[0] = ((widelimb) in[0]) * in[0];
+    out[1] = ((widelimb) in[0]) * tmp1;
+    out[2] = ((widelimb) in[0]) * tmp2 + ((widelimb) in[1]) * in[1];
+    out[3] = ((widelimb) in[3]) * tmp0 + ((widelimb) in[1]) * tmp2;
+    out[4] = ((widelimb) in[3]) * tmp1 + ((widelimb) in[2]) * in[2];
+    out[5] = ((widelimb) in[3]) * tmp2;
+    out[6] = ((widelimb) in[3]) * in[3];
+}
+
+/* Multiply two field elements: out = in1 * in2 */
+static void felem_mul(widefelem out, const felem in1, const felem in2)
+{
+    out[0] = ((widelimb) in1[0]) * in2[0];
+    out[1] = ((widelimb) in1[0]) * in2[1] + ((widelimb) in1[1]) * in2[0];
+    out[2] = ((widelimb) in1[0]) * in2[2] + ((widelimb) in1[1]) * in2[1] +
+             ((widelimb) in1[2]) * in2[0];
+    out[3] = ((widelimb) in1[0]) * in2[3] + ((widelimb) in1[1]) * in2[2] +
+             ((widelimb) in1[2]) * in2[1] + ((widelimb) in1[3]) * in2[0];
+    out[4] = ((widelimb) in1[1]) * in2[3] + ((widelimb) in1[2]) * in2[2] +
+             ((widelimb) in1[3]) * in2[1];
+    out[5] = ((widelimb) in1[2]) * in2[3] + ((widelimb) in1[3]) * in2[2];
+    out[6] = ((widelimb) in1[3]) * in2[3];
+}
+
+/*-
+ * Reduce seven 128-bit coefficients to four 64-bit coefficients.
+ * Requires in[i] < 2^126,
+ * ensures out[0] < 2^56, out[1] < 2^56, out[2] < 2^56, out[3] <= 2^56 + 2^16 */
+static void felem_reduce(felem out, const widefelem in)
+{
+    static const widelimb two127p15 = (((widelimb) 1) << 127) +
+        (((widelimb) 1) << 15);
+    static const widelimb two127m71 = (((widelimb) 1) << 127) -
+        (((widelimb) 1) << 71);
+    static const widelimb two127m71m55 = (((widelimb) 1) << 127) -
+        (((widelimb) 1) << 71) - (((widelimb) 1) << 55);
+    widelimb output[5];
+
+    /* Add 0 mod 2^224-2^96+1 to ensure all differences are positive */
+    output[0] = in[0] + two127p15;
+    output[1] = in[1] + two127m71m55;
+    output[2] = in[2] + two127m71;
+    output[3] = in[3];
+    output[4] = in[4];
+
+    /* Eliminate in[4], in[5], in[6] */
+    output[4] += in[6] >> 16;
+    output[3] += (in[6] & 0xffff) << 40;
+    output[2] -= in[6];
+
+    output[3] += in[5] >> 16;
+    output[2] += (in[5] & 0xffff) << 40;
+    output[1] -= in[5];
+
+    output[2] += output[4] >> 16;
+    output[1] += (output[4] & 0xffff) << 40;
+    output[0] -= output[4];
+
+    /* Carry 2 -> 3 -> 4 */
+    output[3] += output[2] >> 56;
+    output[2] &= 0x00ffffffffffffff;
+
+    output[4] = output[3] >> 56;
+    output[3] &= 0x00ffffffffffffff;
+
+    /* Now output[2] < 2^56, output[3] < 2^56, output[4] < 2^72 */
+
+    /* Eliminate output[4] */
+    output[2] += output[4] >> 16;
+    /* output[2] < 2^56 + 2^56 = 2^57 */
+    output[1] += (output[4] & 0xffff) << 40;
+    output[0] -= output[4];
+
+    /* Carry 0 -> 1 -> 2 -> 3 */
+    output[1] += output[0] >> 56;
+    out[0] = output[0] & 0x00ffffffffffffff;
+
+    output[2] += output[1] >> 56;
+    /* output[2] < 2^57 + 2^72 */
+    out[1] = output[1] & 0x00ffffffffffffff;
+    output[3] += output[2] >> 56;
+    /* output[3] <= 2^56 + 2^16 */
+    out[2] = output[2] & 0x00ffffffffffffff;
+
+    /*-
+     * out[0] < 2^56, out[1] < 2^56, out[2] < 2^56,
+     * out[3] <= 2^56 + 2^16 (due to final carry),
+     * so out < 2*p
+     */
+    out[3] = output[3];
+}
+
+static void felem_square_reduce(felem out, const felem in)
+{
+    widefelem tmp;
+    felem_square(tmp, in);
+    felem_reduce(out, tmp);
+}
+
+static void felem_mul_reduce(felem out, const felem in1, const felem in2)
+{
+    widefelem tmp;
+    felem_mul(tmp, in1, in2);
+    felem_reduce(out, tmp);
+}
+
+/*
+ * Reduce to unique minimal representation. Requires 0 <= in < 2*p (always
+ * call felem_reduce first)
+ */
+static void felem_contract(felem out, const felem in)
+{
+    static const int64_t two56 = ((limb) 1) << 56;
+    /* 0 <= in < 2*p, p = 2^224 - 2^96 + 1 */
+    /* if in > p , reduce in = in - 2^224 + 2^96 - 1 */
+    int64_t tmp[4], a;
+    tmp[0] = in[0];
+    tmp[1] = in[1];
+    tmp[2] = in[2];
+    tmp[3] = in[3];
+    /* Case 1: a = 1 iff in >= 2^224 */
+    a = (in[3] >> 56);
+    tmp[0] -= a;
+    tmp[1] += a << 40;
+    tmp[3] &= 0x00ffffffffffffff;
+    /*
+     * Case 2: a = 0 iff p <= in < 2^224, i.e., the high 128 bits are all 1
+     * and the lower part is non-zero
+     */
+    a = ((in[3] & in[2] & (in[1] | 0x000000ffffffffff)) + 1) |
+        (((int64_t) (in[0] + (in[1] & 0x000000ffffffffff)) - 1) >> 63);
+    a &= 0x00ffffffffffffff;
+    /* turn a into an all-one mask (if a = 0) or an all-zero mask */
+    a = (a - 1) >> 63;
+    /* subtract 2^224 - 2^96 + 1 if a is all-one */
+    tmp[3] &= a ^ 0xffffffffffffffff;
+    tmp[2] &= a ^ 0xffffffffffffffff;
+    tmp[1] &= (a ^ 0xffffffffffffffff) | 0x000000ffffffffff;
+    tmp[0] -= 1 & a;
+
+    /*
+     * eliminate negative coefficients: if tmp[0] is negative, tmp[1] must be
+     * non-zero, so we only need one step
+     */
+    a = tmp[0] >> 63;
+    tmp[0] += two56 & a;
+    tmp[1] -= 1 & a;
+
+    /* carry 1 -> 2 -> 3 */
+    tmp[2] += tmp[1] >> 56;
+    tmp[1] &= 0x00ffffffffffffff;
+
+    tmp[3] += tmp[2] >> 56;
+    tmp[2] &= 0x00ffffffffffffff;
+
+    /* Now 0 <= out < p */
+    out[0] = tmp[0];
+    out[1] = tmp[1];
+    out[2] = tmp[2];
+    out[3] = tmp[3];
+}
+
+/*
+ * Get negative value: out = -in
+ * Requires in[i] < 2^63,
+ * ensures out[0] < 2^56, out[1] < 2^56, out[2] < 2^56, out[3] <= 2^56 + 2^16
+ */
+static void felem_neg(felem out, const felem in)
+{
+    widefelem tmp = {0};
+    felem_diff_128_64(tmp, in);
+    felem_reduce(out, tmp);
+}
+
+/*
+ * Zero-check: returns 1 if input is 0, and 0 otherwise. We know that field
+ * elements are reduced to in < 2^225, so we only need to check three cases:
+ * 0, 2^224 - 2^96 + 1, and 2^225 - 2^97 + 2
+ */
+static limb felem_is_zero(const felem in)
+{
+    limb zero, two224m96p1, two225m97p2;
+
+    zero = in[0] | in[1] | in[2] | in[3];
+    zero = (((int64_t) (zero) - 1) >> 63) & 1;
+    two224m96p1 = (in[0] ^ 1) | (in[1] ^ 0x00ffff0000000000)
+        | (in[2] ^ 0x00ffffffffffffff) | (in[3] ^ 0x00ffffffffffffff);
+    two224m96p1 = (((int64_t) (two224m96p1) - 1) >> 63) & 1;
+    two225m97p2 = (in[0] ^ 2) | (in[1] ^ 0x00fffe0000000000)
+        | (in[2] ^ 0x00ffffffffffffff) | (in[3] ^ 0x01ffffffffffffff);
+    two225m97p2 = (((int64_t) (two225m97p2) - 1) >> 63) & 1;
+    return (zero | two224m96p1 | two225m97p2);
+}
+
+static int felem_is_zero_int(const void *in)
+{
+    return (int)(felem_is_zero(in) & ((limb) 1));
+}
+
+/* Invert a field element */
+/* Computation chain copied from djb's code */
+static void felem_inv(felem out, const felem in)
+{
+    felem ftmp, ftmp2, ftmp3, ftmp4;
+    widefelem tmp;
+    unsigned i;
+
+    felem_square(tmp, in);
+    felem_reduce(ftmp, tmp);    /* 2 */
+    felem_mul(tmp, in, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^2 - 1 */
+    felem_square(tmp, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^3 - 2 */
+    felem_mul(tmp, in, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^3 - 1 */
+    felem_square(tmp, ftmp);
+    felem_reduce(ftmp2, tmp);   /* 2^4 - 2 */
+    felem_square(tmp, ftmp2);
+    felem_reduce(ftmp2, tmp);   /* 2^5 - 4 */
+    felem_square(tmp, ftmp2);
+    felem_reduce(ftmp2, tmp);   /* 2^6 - 8 */
+    felem_mul(tmp, ftmp2, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^6 - 1 */
+    felem_square(tmp, ftmp);
+    felem_reduce(ftmp2, tmp);   /* 2^7 - 2 */
+    for (i = 0; i < 5; ++i) {   /* 2^12 - 2^6 */
+        felem_square(tmp, ftmp2);
+        felem_reduce(ftmp2, tmp);
+    }
+    felem_mul(tmp, ftmp2, ftmp);
+    felem_reduce(ftmp2, tmp);   /* 2^12 - 1 */
+    felem_square(tmp, ftmp2);
+    felem_reduce(ftmp3, tmp);   /* 2^13 - 2 */
+    for (i = 0; i < 11; ++i) {  /* 2^24 - 2^12 */
+        felem_square(tmp, ftmp3);
+        felem_reduce(ftmp3, tmp);
+    }
+    felem_mul(tmp, ftmp3, ftmp2);
+    felem_reduce(ftmp2, tmp);   /* 2^24 - 1 */
+    felem_square(tmp, ftmp2);
+    felem_reduce(ftmp3, tmp);   /* 2^25 - 2 */
+    for (i = 0; i < 23; ++i) {  /* 2^48 - 2^24 */
+        felem_square(tmp, ftmp3);
+        felem_reduce(ftmp3, tmp);
+    }
+    felem_mul(tmp, ftmp3, ftmp2);
+    felem_reduce(ftmp3, tmp);   /* 2^48 - 1 */
+    felem_square(tmp, ftmp3);
+    felem_reduce(ftmp4, tmp);   /* 2^49 - 2 */
+    for (i = 0; i < 47; ++i) {  /* 2^96 - 2^48 */
+        felem_square(tmp, ftmp4);
+        felem_reduce(ftmp4, tmp);
+    }
+    felem_mul(tmp, ftmp3, ftmp4);
+    felem_reduce(ftmp3, tmp);   /* 2^96 - 1 */
+    felem_square(tmp, ftmp3);
+    felem_reduce(ftmp4, tmp);   /* 2^97 - 2 */
+    for (i = 0; i < 23; ++i) {  /* 2^120 - 2^24 */
+        felem_square(tmp, ftmp4);
+        felem_reduce(ftmp4, tmp);
+    }
+    felem_mul(tmp, ftmp2, ftmp4);
+    felem_reduce(ftmp2, tmp);   /* 2^120 - 1 */
+    for (i = 0; i < 6; ++i) {   /* 2^126 - 2^6 */
+        felem_square(tmp, ftmp2);
+        felem_reduce(ftmp2, tmp);
+    }
+    felem_mul(tmp, ftmp2, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^126 - 1 */
+    felem_square(tmp, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^127 - 2 */
+    felem_mul(tmp, ftmp, in);
+    felem_reduce(ftmp, tmp);    /* 2^127 - 1 */
+    for (i = 0; i < 97; ++i) {  /* 2^224 - 2^97 */
+        felem_square(tmp, ftmp);
+        felem_reduce(ftmp, tmp);
+    }
+    felem_mul(tmp, ftmp, ftmp3);
+    felem_reduce(out, tmp);     /* 2^224 - 2^96 - 1 */
+}
+
+/*
+ * Copy in constant time: if icopy == 1, copy in to out, if icopy == 0, copy
+ * out to itself.
+ */
+static void copy_conditional(felem out, const felem in, limb icopy)
+{
+    unsigned i;
+    /*
+     * icopy is a (64-bit) 0 or 1, so copy is either all-zero or all-one
+     */
+    const limb copy = -icopy;
+    for (i = 0; i < 4; ++i) {
+        const limb tmp = copy & (in[i] ^ out[i]);
+        out[i] ^= tmp;
+    }
+}
+
+/******************************************************************************/
+/*-
+ *                       ELLIPTIC CURVE POINT OPERATIONS
+ *
+ * Points are represented in Jacobian projective coordinates:
+ * (X, Y, Z) corresponds to the affine point (X/Z^2, Y/Z^3),
+ * or to the point at infinity if Z == 0.
+ *
+ */
+
+/*-
+ * Double an elliptic curve point:
+ * (X', Y', Z') = 2 * (X, Y, Z), where
+ * X' = (3 * (X - Z^2) * (X + Z^2))^2 - 8 * X * Y^2
+ * Y' = 3 * (X - Z^2) * (X + Z^2) * (4 * X * Y^2 - X') - 8 * Y^4
+ * Z' = (Y + Z)^2 - Y^2 - Z^2 = 2 * Y * Z
+ * Outputs can equal corresponding inputs, i.e., x_out == x_in is allowed,
+ * while x_out == y_in is not (maybe this works, but it's not tested).
+ */
+static void
+point_double(felem x_out, felem y_out, felem z_out,
+             const felem x_in, const felem y_in, const felem z_in)
+{
+    widefelem tmp, tmp2;
+    felem delta, gamma, beta, alpha, ftmp, ftmp2;
+
+    felem_assign(ftmp, x_in);
+    felem_assign(ftmp2, x_in);
+
+    /* delta = z^2 */
+    felem_square(tmp, z_in);
+    felem_reduce(delta, tmp);
+
+    /* gamma = y^2 */
+    felem_square(tmp, y_in);
+    felem_reduce(gamma, tmp);
+
+    /* beta = x*gamma */
+    felem_mul(tmp, x_in, gamma);
+    felem_reduce(beta, tmp);
+
+    /* alpha = 3*(x-delta)*(x+delta) */
+    felem_diff(ftmp, delta);
+    /* ftmp[i] < 2^57 + 2^58 + 2 < 2^59 */
+    felem_sum(ftmp2, delta);
+    /* ftmp2[i] < 2^57 + 2^57 = 2^58 */
+    felem_scalar(ftmp2, 3);
+    /* ftmp2[i] < 3 * 2^58 < 2^60 */
+    felem_mul(tmp, ftmp, ftmp2);
+    /* tmp[i] < 2^60 * 2^59 * 4 = 2^121 */
+    felem_reduce(alpha, tmp);
+
+    /* x' = alpha^2 - 8*beta */
+    felem_square(tmp, alpha);
+    /* tmp[i] < 4 * 2^57 * 2^57 = 2^116 */
+    felem_assign(ftmp, beta);
+    felem_scalar(ftmp, 8);
+    /* ftmp[i] < 8 * 2^57 = 2^60 */
+    felem_diff_128_64(tmp, ftmp);
+    /* tmp[i] < 2^116 + 2^64 + 8 < 2^117 */
+    felem_reduce(x_out, tmp);
+
+    /* z' = (y + z)^2 - gamma - delta */
+    felem_sum(delta, gamma);
+    /* delta[i] < 2^57 + 2^57 = 2^58 */
+    felem_assign(ftmp, y_in);
+    felem_sum(ftmp, z_in);
+    /* ftmp[i] < 2^57 + 2^57 = 2^58 */
+    felem_square(tmp, ftmp);
+    /* tmp[i] < 4 * 2^58 * 2^58 = 2^118 */
+    felem_diff_128_64(tmp, delta);
+    /* tmp[i] < 2^118 + 2^64 + 8 < 2^119 */
+    felem_reduce(z_out, tmp);
+
+    /* y' = alpha*(4*beta - x') - 8*gamma^2 */
+    felem_scalar(beta, 4);
+    /* beta[i] < 4 * 2^57 = 2^59 */
+    felem_diff(beta, x_out);
+    /* beta[i] < 2^59 + 2^58 + 2 < 2^60 */
+    felem_mul(tmp, alpha, beta);
+    /* tmp[i] < 4 * 2^57 * 2^60 = 2^119 */
+    felem_square(tmp2, gamma);
+    /* tmp2[i] < 4 * 2^57 * 2^57 = 2^116 */
+    widefelem_scalar(tmp2, 8);
+    /* tmp2[i] < 8 * 2^116 = 2^119 */
+    widefelem_diff(tmp, tmp2);
+    /* tmp[i] < 2^119 + 2^120 < 2^121 */
+    felem_reduce(y_out, tmp);
+}
+
+/*-
+ * Add two elliptic curve points:
+ * (X_1, Y_1, Z_1) + (X_2, Y_2, Z_2) = (X_3, Y_3, Z_3), where
+ * X_3 = (Z_1^3 * Y_2 - Z_2^3 * Y_1)^2 - (Z_1^2 * X_2 - Z_2^2 * X_1)^3 -
+ * 2 * Z_2^2 * X_1 * (Z_1^2 * X_2 - Z_2^2 * X_1)^2
+ * Y_3 = (Z_1^3 * Y_2 - Z_2^3 * Y_1) * (Z_2^2 * X_1 * (Z_1^2 * X_2 - Z_2^2 * X_1)^2 - X_3) -
+ *        Z_2^3 * Y_1 * (Z_1^2 * X_2 - Z_2^2 * X_1)^3
+ * Z_3 = (Z_1^2 * X_2 - Z_2^2 * X_1) * (Z_1 * Z_2)
+ *
+ * This runs faster if 'mixed' is set, which requires Z_2 = 1 or Z_2 = 0.
+ */
+
+/*
+ * This function is not entirely constant-time: it includes a branch for
+ * checking whether the two input points are equal, (while not equal to the
+ * point at infinity). This case never happens during single point
+ * multiplication, so there is no timing leak for ECDH or ECDSA signing.
+ */
+static void point_add(felem x3, felem y3, felem z3,
+                      const felem x1, const felem y1, const felem z1,
+                      const int mixed, const felem x2, const felem y2,
+                      const felem z2)
+{
+    felem ftmp, ftmp2, ftmp3, ftmp4, ftmp5, x_out, y_out, z_out;
+    widefelem tmp, tmp2;
+    limb z1_is_zero, z2_is_zero, x_equal, y_equal;
+
+    if (!mixed) {
+        /* ftmp2 = z2^2 */
+        felem_square(tmp, z2);
+        felem_reduce(ftmp2, tmp);
+
+        /* ftmp4 = z2^3 */
+        felem_mul(tmp, ftmp2, z2);
+        felem_reduce(ftmp4, tmp);
+
+        /* ftmp4 = z2^3*y1 */
+        felem_mul(tmp2, ftmp4, y1);
+        felem_reduce(ftmp4, tmp2);
+
+        /* ftmp2 = z2^2*x1 */
+        felem_mul(tmp2, ftmp2, x1);
+        felem_reduce(ftmp2, tmp2);
+    } else {
+        /*
+         * We'll assume z2 = 1 (special case z2 = 0 is handled later)
+         */
+
+        /* ftmp4 = z2^3*y1 */
+        felem_assign(ftmp4, y1);
+
+        /* ftmp2 = z2^2*x1 */
+        felem_assign(ftmp2, x1);
+    }
+
+    /* ftmp = z1^2 */
+    felem_square(tmp, z1);
+    felem_reduce(ftmp, tmp);
+
+    /* ftmp3 = z1^3 */
+    felem_mul(tmp, ftmp, z1);
+    felem_reduce(ftmp3, tmp);
+
+    /* tmp = z1^3*y2 */
+    felem_mul(tmp, ftmp3, y2);
+    /* tmp[i] < 4 * 2^57 * 2^57 = 2^116 */
+
+    /* ftmp3 = z1^3*y2 - z2^3*y1 */
+    felem_diff_128_64(tmp, ftmp4);
+    /* tmp[i] < 2^116 + 2^64 + 8 < 2^117 */
+    felem_reduce(ftmp3, tmp);
+
+    /* tmp = z1^2*x2 */
+    felem_mul(tmp, ftmp, x2);
+    /* tmp[i] < 4 * 2^57 * 2^57 = 2^116 */
+
+    /* ftmp = z1^2*x2 - z2^2*x1 */
+    felem_diff_128_64(tmp, ftmp2);
+    /* tmp[i] < 2^116 + 2^64 + 8 < 2^117 */
+    felem_reduce(ftmp, tmp);
+
+    /*
+     * the formulae are incorrect if the points are equal so we check for
+     * this and do doubling if this happens
+     */
+    x_equal = felem_is_zero(ftmp);
+    y_equal = felem_is_zero(ftmp3);
+    z1_is_zero = felem_is_zero(z1);
+    z2_is_zero = felem_is_zero(z2);
+    /* In affine coordinates, (X_1, Y_1) == (X_2, Y_2) */
+    if (x_equal && y_equal && !z1_is_zero && !z2_is_zero) {
+        point_double(x3, y3, z3, x1, y1, z1);
+        return;
+    }
+
+    /* ftmp5 = z1*z2 */
+    if (!mixed) {
+        felem_mul(tmp, z1, z2);
+        felem_reduce(ftmp5, tmp);
+    } else {
+        /* special case z2 = 0 is handled later */
+        felem_assign(ftmp5, z1);
+    }
+
+    /* z_out = (z1^2*x2 - z2^2*x1)*(z1*z2) */
+    felem_mul(tmp, ftmp, ftmp5);
+    felem_reduce(z_out, tmp);
+
+    /* ftmp = (z1^2*x2 - z2^2*x1)^2 */
+    felem_assign(ftmp5, ftmp);
+    felem_square(tmp, ftmp);
+    felem_reduce(ftmp, tmp);
+
+    /* ftmp5 = (z1^2*x2 - z2^2*x1)^3 */
+    felem_mul(tmp, ftmp, ftmp5);
+    felem_reduce(ftmp5, tmp);
+
+    /* ftmp2 = z2^2*x1*(z1^2*x2 - z2^2*x1)^2 */
+    felem_mul(tmp, ftmp2, ftmp);
+    felem_reduce(ftmp2, tmp);
+
+    /* tmp = z2^3*y1*(z1^2*x2 - z2^2*x1)^3 */
+    felem_mul(tmp, ftmp4, ftmp5);
+    /* tmp[i] < 4 * 2^57 * 2^57 = 2^116 */
+
+    /* tmp2 = (z1^3*y2 - z2^3*y1)^2 */
+    felem_square(tmp2, ftmp3);
+    /* tmp2[i] < 4 * 2^57 * 2^57 < 2^116 */
+
+    /* tmp2 = (z1^3*y2 - z2^3*y1)^2 - (z1^2*x2 - z2^2*x1)^3 */
+    felem_diff_128_64(tmp2, ftmp5);
+    /* tmp2[i] < 2^116 + 2^64 + 8 < 2^117 */
+
+    /* ftmp5 = 2*z2^2*x1*(z1^2*x2 - z2^2*x1)^2 */
+    felem_assign(ftmp5, ftmp2);
+    felem_scalar(ftmp5, 2);
+    /* ftmp5[i] < 2 * 2^57 = 2^58 */
+
+    /*-
+     * x_out = (z1^3*y2 - z2^3*y1)^2 - (z1^2*x2 - z2^2*x1)^3 -
+     *  2*z2^2*x1*(z1^2*x2 - z2^2*x1)^2
+     */
+    felem_diff_128_64(tmp2, ftmp5);
+    /* tmp2[i] < 2^117 + 2^64 + 8 < 2^118 */
+    felem_reduce(x_out, tmp2);
+
+    /* ftmp2 = z2^2*x1*(z1^2*x2 - z2^2*x1)^2 - x_out */
+    felem_diff(ftmp2, x_out);
+    /* ftmp2[i] < 2^57 + 2^58 + 2 < 2^59 */
+
+    /*
+     * tmp2 = (z1^3*y2 - z2^3*y1)*(z2^2*x1*(z1^2*x2 - z2^2*x1)^2 - x_out)
+     */
+    felem_mul(tmp2, ftmp3, ftmp2);
+    /* tmp2[i] < 4 * 2^57 * 2^59 = 2^118 */
+
+    /*-
+     * y_out = (z1^3*y2 - z2^3*y1)*(z2^2*x1*(z1^2*x2 - z2^2*x1)^2 - x_out) -
+     *  z2^3*y1*(z1^2*x2 - z2^2*x1)^3
+     */
+    widefelem_diff(tmp2, tmp);
+    /* tmp2[i] < 2^118 + 2^120 < 2^121 */
+    felem_reduce(y_out, tmp2);
+
+    /*
+     * the result (x_out, y_out, z_out) is incorrect if one of the inputs is
+     * the point at infinity, so we need to check for this separately
+     */
+
+    /*
+     * if point 1 is at infinity, copy point 2 to output, and vice versa
+     */
+    copy_conditional(x_out, x2, z1_is_zero);
+    copy_conditional(x_out, x1, z2_is_zero);
+    copy_conditional(y_out, y2, z1_is_zero);
+    copy_conditional(y_out, y1, z2_is_zero);
+    copy_conditional(z_out, z2, z1_is_zero);
+    copy_conditional(z_out, z1, z2_is_zero);
+    felem_assign(x3, x_out);
+    felem_assign(y3, y_out);
+    felem_assign(z3, z_out);
+}
+
+/*
+ * select_point selects the |idx|th point from a precomputation table and
+ * copies it to out.
+ * The pre_comp array argument should be size of |size| argument
+ */
+static void select_point(const u64 idx, unsigned int size,
+                         const felem pre_comp[][3], felem out[3])
+{
+    unsigned i, j;
+    limb *outlimbs = &out[0][0];
+
+    memset(out, 0, sizeof(*out) * 3);
+    for (i = 0; i < size; i++) {
+        const limb *inlimbs = &pre_comp[i][0][0];
+        u64 mask = i ^ idx;
+        mask |= mask >> 4;
+        mask |= mask >> 2;
+        mask |= mask >> 1;
+        mask &= 1;
+        mask--;
+        for (j = 0; j < 4 * 3; j++)
+            outlimbs[j] |= inlimbs[j] & mask;
+    }
+}
+
+/* get_bit returns the |i|th bit in |in| */
+static char get_bit(const felem_bytearray in, unsigned i)
+{
+    if (i >= 224)
+        return 0;
+    return (in[i >> 3] >> (i & 7)) & 1;
+}
+
+/*
+ * Interleaved point multiplication using precomputed point multiples: The
+ * small point multiples 0*P, 1*P, ..., 16*P are in pre_comp[], the scalars
+ * in scalars[]. If g_scalar is non-NULL, we also add this multiple of the
+ * generator, using certain (large) precomputed multiples in g_pre_comp.
+ * Output point (X, Y, Z) is stored in x_out, y_out, z_out
+ */
+static void batch_mul(felem x_out, felem y_out, felem z_out,
+                      const felem_bytearray scalars[],
+                      const unsigned num_points, const u8 *g_scalar,
+                      const int mixed, const felem pre_comp[][17][3],
+                      const felem g_pre_comp[2][16][3])
+{
+    int i, skip;
+    unsigned num;
+    unsigned gen_mul = (g_scalar != NULL);
+    felem nq[3], tmp[4];
+    u64 bits;
+    u8 sign, digit;
+
+    /* set nq to the point at infinity */
+    memset(nq, 0, sizeof(nq));
+
+    /*
+     * Loop over all scalars msb-to-lsb, interleaving additions of multiples
+     * of the generator (two in each of the last 28 rounds) and additions of
+     * other points multiples (every 5th round).
+     */
+    skip = 1;                   /* save two point operations in the first
+                                 * round */
+    for (i = (num_points ? 220 : 27); i >= 0; --i) {
+        /* double */
+        if (!skip)
+            point_double(nq[0], nq[1], nq[2], nq[0], nq[1], nq[2]);
+
+        /* add multiples of the generator */
+        if (gen_mul && (i <= 27)) {
+            /* first, look 28 bits upwards */
+            bits = get_bit(g_scalar, i + 196) << 3;
+            bits |= get_bit(g_scalar, i + 140) << 2;
+            bits |= get_bit(g_scalar, i + 84) << 1;
+            bits |= get_bit(g_scalar, i + 28);
+            /* select the point to add, in constant time */
+            select_point(bits, 16, g_pre_comp[1], tmp);
+
+            if (!skip) {
+                /* value 1 below is argument for "mixed" */
+                point_add(nq[0], nq[1], nq[2],
+                          nq[0], nq[1], nq[2], 1, tmp[0], tmp[1], tmp[2]);
+            } else {
+                memcpy(nq, tmp, 3 * sizeof(felem));
+                skip = 0;
+            }
+
+            /* second, look at the current position */
+            bits = get_bit(g_scalar, i + 168) << 3;
+            bits |= get_bit(g_scalar, i + 112) << 2;
+            bits |= get_bit(g_scalar, i + 56) << 1;
+            bits |= get_bit(g_scalar, i);
+            /* select the point to add, in constant time */
+            select_point(bits, 16, g_pre_comp[0], tmp);
+            point_add(nq[0], nq[1], nq[2],
+                      nq[0], nq[1], nq[2],
+                      1 /* mixed */ , tmp[0], tmp[1], tmp[2]);
+        }
+
+        /* do other additions every 5 doublings */
+        if (num_points && (i % 5 == 0)) {
+            /* loop over all scalars */
+            for (num = 0; num < num_points; ++num) {
+                bits = get_bit(scalars[num], i + 4) << 5;
+                bits |= get_bit(scalars[num], i + 3) << 4;
+                bits |= get_bit(scalars[num], i + 2) << 3;
+                bits |= get_bit(scalars[num], i + 1) << 2;
+                bits |= get_bit(scalars[num], i) << 1;
+                bits |= get_bit(scalars[num], i - 1);
+                ec_GFp_nistp_recode_scalar_bits(&sign, &digit, bits);
+
+                /* select the point to add or subtract */
+                select_point(digit, 17, pre_comp[num], tmp);
+                felem_neg(tmp[3], tmp[1]); /* (X, -Y, Z) is the negative
+                                            * point */
+                copy_conditional(tmp[1], tmp[3], sign);
+
+                if (!skip) {
+                    point_add(nq[0], nq[1], nq[2],
+                              nq[0], nq[1], nq[2],
+                              mixed, tmp[0], tmp[1], tmp[2]);
+                } else {
+                    memcpy(nq, tmp, 3 * sizeof(felem));
+                    skip = 0;
+                }
+            }
+        }
+    }
+    felem_assign(x_out, nq[0]);
+    felem_assign(y_out, nq[1]);
+    felem_assign(z_out, nq[2]);
+}
+
+/******************************************************************************/
+/*
+ * FUNCTIONS TO MANAGE PRECOMPUTATION
+ */
+
+static NISTP224_PRE_COMP *nistp224_pre_comp_new(void)
+{
+    NISTP224_PRE_COMP *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (!ret) {
+        ECerr(EC_F_NISTP224_PRE_COMP_NEW, ERR_R_MALLOC_FAILURE);
+        return ret;
+    }
+
+    ret->references = 1;
+
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        ECerr(EC_F_NISTP224_PRE_COMP_NEW, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+NISTP224_PRE_COMP *EC_nistp224_pre_comp_dup(NISTP224_PRE_COMP *p)
+{
+    int i;
+    if (p != NULL)
+        CRYPTO_UP_REF(&p->references, &i, p->lock);
+    return p;
+}
+
+void EC_nistp224_pre_comp_free(NISTP224_PRE_COMP *p)
+{
+    int i;
+
+    if (p == NULL)
+        return;
+
+    CRYPTO_DOWN_REF(&p->references, &i, p->lock);
+    REF_PRINT_COUNT("EC_nistp224", x);
+    if (i > 0)
+        return;
+    REF_ASSERT_ISNT(i < 0);
+
+    CRYPTO_THREAD_lock_free(p->lock);
+    OPENSSL_free(p);
+}
+
+/******************************************************************************/
+/*
+ * OPENSSL EC_METHOD FUNCTIONS
+ */
+
+int ec_GFp_nistp224_group_init(EC_GROUP *group)
+{
+    int ret;
+    ret = ec_GFp_simple_group_init(group);
+    group->a_is_minus3 = 1;
+    return ret;
+}
+
+int ec_GFp_nistp224_group_set_curve(EC_GROUP *group, const BIGNUM *p,
+                                    const BIGNUM *a, const BIGNUM *b,
+                                    BN_CTX *ctx)
+{
+    int ret = 0;
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *curve_p, *curve_a, *curve_b;
+
+    if (ctx == NULL)
+        if ((ctx = new_ctx = BN_CTX_new()) == NULL)
+            return 0;
+    BN_CTX_start(ctx);
+    curve_p = BN_CTX_get(ctx);
+    curve_a = BN_CTX_get(ctx);
+    curve_b = BN_CTX_get(ctx);
+    if (curve_b == NULL)
+        goto err;
+    BN_bin2bn(nistp224_curve_params[0], sizeof(felem_bytearray), curve_p);
+    BN_bin2bn(nistp224_curve_params[1], sizeof(felem_bytearray), curve_a);
+    BN_bin2bn(nistp224_curve_params[2], sizeof(felem_bytearray), curve_b);
+    if ((BN_cmp(curve_p, p)) || (BN_cmp(curve_a, a)) || (BN_cmp(curve_b, b))) {
+        ECerr(EC_F_EC_GFP_NISTP224_GROUP_SET_CURVE,
+              EC_R_WRONG_CURVE_PARAMETERS);
+        goto err;
+    }
+    group->field_mod_func = BN_nist_mod_224;
+    ret = ec_GFp_simple_group_set_curve(group, p, a, b, ctx);
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+/*
+ * Takes the Jacobian coordinates (X, Y, Z) of a point and returns (X', Y') =
+ * (X/Z^2, Y/Z^3)
+ */
+int ec_GFp_nistp224_point_get_affine_coordinates(const EC_GROUP *group,
+                                                 const EC_POINT *point,
+                                                 BIGNUM *x, BIGNUM *y,
+                                                 BN_CTX *ctx)
+{
+    felem z1, z2, x_in, y_in, x_out, y_out;
+    widefelem tmp;
+
+    if (EC_POINT_is_at_infinity(group, point)) {
+        ECerr(EC_F_EC_GFP_NISTP224_POINT_GET_AFFINE_COORDINATES,
+              EC_R_POINT_AT_INFINITY);
+        return 0;
+    }
+    if ((!BN_to_felem(x_in, point->X)) || (!BN_to_felem(y_in, point->Y)) ||
+        (!BN_to_felem(z1, point->Z)))
+        return 0;
+    felem_inv(z2, z1);
+    felem_square(tmp, z2);
+    felem_reduce(z1, tmp);
+    felem_mul(tmp, x_in, z1);
+    felem_reduce(x_in, tmp);
+    felem_contract(x_out, x_in);
+    if (x != NULL) {
+        if (!felem_to_BN(x, x_out)) {
+            ECerr(EC_F_EC_GFP_NISTP224_POINT_GET_AFFINE_COORDINATES,
+                  ERR_R_BN_LIB);
+            return 0;
+        }
+    }
+    felem_mul(tmp, z1, z2);
+    felem_reduce(z1, tmp);
+    felem_mul(tmp, y_in, z1);
+    felem_reduce(y_in, tmp);
+    felem_contract(y_out, y_in);
+    if (y != NULL) {
+        if (!felem_to_BN(y, y_out)) {
+            ECerr(EC_F_EC_GFP_NISTP224_POINT_GET_AFFINE_COORDINATES,
+                  ERR_R_BN_LIB);
+            return 0;
+        }
+    }
+    return 1;
+}
+
+static void make_points_affine(size_t num, felem points[ /* num */ ][3],
+                               felem tmp_felems[ /* num+1 */ ])
+{
+    /*
+     * Runs in constant time, unless an input is the point at infinity (which
+     * normally shouldn't happen).
+     */
+    ec_GFp_nistp_points_make_affine_internal(num,
+                                             points,
+                                             sizeof(felem),
+                                             tmp_felems,
+                                             (void (*)(void *))felem_one,
+                                             felem_is_zero_int,
+                                             (void (*)(void *, const void *))
+                                             felem_assign,
+                                             (void (*)(void *, const void *))
+                                             felem_square_reduce, (void (*)
+                                                                   (void *,
+                                                                    const void
+                                                                    *,
+                                                                    const void
+                                                                    *))
+                                             felem_mul_reduce,
+                                             (void (*)(void *, const void *))
+                                             felem_inv,
+                                             (void (*)(void *, const void *))
+                                             felem_contract);
+}
+
+/*
+ * Computes scalar*generator + \sum scalars[i]*points[i], ignoring NULL
+ * values Result is stored in r (r can equal one of the inputs).
+ */
+int ec_GFp_nistp224_points_mul(const EC_GROUP *group, EC_POINT *r,
+                               const BIGNUM *scalar, size_t num,
+                               const EC_POINT *points[],
+                               const BIGNUM *scalars[], BN_CTX *ctx)
+{
+    int ret = 0;
+    int j;
+    unsigned i;
+    int mixed = 0;
+    BIGNUM *x, *y, *z, *tmp_scalar;
+    felem_bytearray g_secret;
+    felem_bytearray *secrets = NULL;
+    felem (*pre_comp)[17][3] = NULL;
+    felem *tmp_felems = NULL;
+    felem_bytearray tmp;
+    unsigned num_bytes;
+    int have_pre_comp = 0;
+    size_t num_points = num;
+    felem x_in, y_in, z_in, x_out, y_out, z_out;
+    NISTP224_PRE_COMP *pre = NULL;
+    const felem(*g_pre_comp)[16][3] = NULL;
+    EC_POINT *generator = NULL;
+    const EC_POINT *p = NULL;
+    const BIGNUM *p_scalar = NULL;
+
+    BN_CTX_start(ctx);
+    x = BN_CTX_get(ctx);
+    y = BN_CTX_get(ctx);
+    z = BN_CTX_get(ctx);
+    tmp_scalar = BN_CTX_get(ctx);
+    if (tmp_scalar == NULL)
+        goto err;
+
+    if (scalar != NULL) {
+        pre = group->pre_comp.nistp224;
+        if (pre)
+            /* we have precomputation, try to use it */
+            g_pre_comp = (const felem(*)[16][3])pre->g_pre_comp;
+        else
+            /* try to use the standard precomputation */
+            g_pre_comp = &gmul[0];
+        generator = EC_POINT_new(group);
+        if (generator == NULL)
+            goto err;
+        /* get the generator from precomputation */
+        if (!felem_to_BN(x, g_pre_comp[0][1][0]) ||
+            !felem_to_BN(y, g_pre_comp[0][1][1]) ||
+            !felem_to_BN(z, g_pre_comp[0][1][2])) {
+            ECerr(EC_F_EC_GFP_NISTP224_POINTS_MUL, ERR_R_BN_LIB);
+            goto err;
+        }
+        if (!EC_POINT_set_Jprojective_coordinates_GFp(group,
+                                                      generator, x, y, z,
+                                                      ctx))
+            goto err;
+        if (0 == EC_POINT_cmp(group, generator, group->generator, ctx))
+            /* precomputation matches generator */
+            have_pre_comp = 1;
+        else
+            /*
+             * we don't have valid precomputation: treat the generator as a
+             * random point
+             */
+            num_points = num_points + 1;
+    }
+
+    if (num_points > 0) {
+        if (num_points >= 3) {
+            /*
+             * unless we precompute multiples for just one or two points,
+             * converting those into affine form is time well spent
+             */
+            mixed = 1;
+        }
+        secrets = OPENSSL_zalloc(sizeof(*secrets) * num_points);
+        pre_comp = OPENSSL_zalloc(sizeof(*pre_comp) * num_points);
+        if (mixed)
+            tmp_felems =
+                OPENSSL_malloc(sizeof(felem) * (num_points * 17 + 1));
+        if ((secrets == NULL) || (pre_comp == NULL)
+            || (mixed && (tmp_felems == NULL))) {
+            ECerr(EC_F_EC_GFP_NISTP224_POINTS_MUL, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+
+        /*
+         * we treat NULL scalars as 0, and NULL points as points at infinity,
+         * i.e., they contribute nothing to the linear combination
+         */
+        for (i = 0; i < num_points; ++i) {
+            if (i == num)
+                /* the generator */
+            {
+                p = EC_GROUP_get0_generator(group);
+                p_scalar = scalar;
+            } else
+                /* the i^th point */
+            {
+                p = points[i];
+                p_scalar = scalars[i];
+            }
+            if ((p_scalar != NULL) && (p != NULL)) {
+                /* reduce scalar to 0 <= scalar < 2^224 */
+                if ((BN_num_bits(p_scalar) > 224)
+                    || (BN_is_negative(p_scalar))) {
+                    /*
+                     * this is an unusual input, and we don't guarantee
+                     * constant-timeness
+                     */
+                    if (!BN_nnmod(tmp_scalar, p_scalar, group->order, ctx)) {
+                        ECerr(EC_F_EC_GFP_NISTP224_POINTS_MUL, ERR_R_BN_LIB);
+                        goto err;
+                    }
+                    num_bytes = BN_bn2bin(tmp_scalar, tmp);
+                } else
+                    num_bytes = BN_bn2bin(p_scalar, tmp);
+                flip_endian(secrets[i], tmp, num_bytes);
+                /* precompute multiples */
+                if ((!BN_to_felem(x_out, p->X)) ||
+                    (!BN_to_felem(y_out, p->Y)) ||
+                    (!BN_to_felem(z_out, p->Z)))
+                    goto err;
+                felem_assign(pre_comp[i][1][0], x_out);
+                felem_assign(pre_comp[i][1][1], y_out);
+                felem_assign(pre_comp[i][1][2], z_out);
+                for (j = 2; j <= 16; ++j) {
+                    if (j & 1) {
+                        point_add(pre_comp[i][j][0], pre_comp[i][j][1],
+                                  pre_comp[i][j][2], pre_comp[i][1][0],
+                                  pre_comp[i][1][1], pre_comp[i][1][2], 0,
+                                  pre_comp[i][j - 1][0],
+                                  pre_comp[i][j - 1][1],
+                                  pre_comp[i][j - 1][2]);
+                    } else {
+                        point_double(pre_comp[i][j][0], pre_comp[i][j][1],
+                                     pre_comp[i][j][2], pre_comp[i][j / 2][0],
+                                     pre_comp[i][j / 2][1],
+                                     pre_comp[i][j / 2][2]);
+                    }
+                }
+            }
+        }
+        if (mixed)
+            make_points_affine(num_points * 17, pre_comp[0], tmp_felems);
+    }
+
+    /* the scalar for the generator */
+    if ((scalar != NULL) && (have_pre_comp)) {
+        memset(g_secret, 0, sizeof(g_secret));
+        /* reduce scalar to 0 <= scalar < 2^224 */
+        if ((BN_num_bits(scalar) > 224) || (BN_is_negative(scalar))) {
+            /*
+             * this is an unusual input, and we don't guarantee
+             * constant-timeness
+             */
+            if (!BN_nnmod(tmp_scalar, scalar, group->order, ctx)) {
+                ECerr(EC_F_EC_GFP_NISTP224_POINTS_MUL, ERR_R_BN_LIB);
+                goto err;
+            }
+            num_bytes = BN_bn2bin(tmp_scalar, tmp);
+        } else
+            num_bytes = BN_bn2bin(scalar, tmp);
+        flip_endian(g_secret, tmp, num_bytes);
+        /* do the multiplication with generator precomputation */
+        batch_mul(x_out, y_out, z_out,
+                  (const felem_bytearray(*))secrets, num_points,
+                  g_secret,
+                  mixed, (const felem(*)[17][3])pre_comp, g_pre_comp);
+    } else
+        /* do the multiplication without generator precomputation */
+        batch_mul(x_out, y_out, z_out,
+                  (const felem_bytearray(*))secrets, num_points,
+                  NULL, mixed, (const felem(*)[17][3])pre_comp, NULL);
+    /* reduce the output to its unique minimal representation */
+    felem_contract(x_in, x_out);
+    felem_contract(y_in, y_out);
+    felem_contract(z_in, z_out);
+    if ((!felem_to_BN(x, x_in)) || (!felem_to_BN(y, y_in)) ||
+        (!felem_to_BN(z, z_in))) {
+        ECerr(EC_F_EC_GFP_NISTP224_POINTS_MUL, ERR_R_BN_LIB);
+        goto err;
+    }
+    ret = EC_POINT_set_Jprojective_coordinates_GFp(group, r, x, y, z, ctx);
+
+ err:
+    BN_CTX_end(ctx);
+    EC_POINT_free(generator);
+    OPENSSL_free(secrets);
+    OPENSSL_free(pre_comp);
+    OPENSSL_free(tmp_felems);
+    return ret;
+}
+
+int ec_GFp_nistp224_precompute_mult(EC_GROUP *group, BN_CTX *ctx)
+{
+    int ret = 0;
+    NISTP224_PRE_COMP *pre = NULL;
+    int i, j;
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *x, *y;
+    EC_POINT *generator = NULL;
+    felem tmp_felems[32];
+
+    /* throw away old precomputation */
+    EC_pre_comp_free(group);
+    if (ctx == NULL)
+        if ((ctx = new_ctx = BN_CTX_new()) == NULL)
+            return 0;
+    BN_CTX_start(ctx);
+    x = BN_CTX_get(ctx);
+    y = BN_CTX_get(ctx);
+    if (y == NULL)
+        goto err;
+    /* get the generator */
+    if (group->generator == NULL)
+        goto err;
+    generator = EC_POINT_new(group);
+    if (generator == NULL)
+        goto err;
+    BN_bin2bn(nistp224_curve_params[3], sizeof(felem_bytearray), x);
+    BN_bin2bn(nistp224_curve_params[4], sizeof(felem_bytearray), y);
+    if (!EC_POINT_set_affine_coordinates(group, generator, x, y, ctx))
+        goto err;
+    if ((pre = nistp224_pre_comp_new()) == NULL)
+        goto err;
+    /*
+     * if the generator is the standard one, use built-in precomputation
+     */
+    if (0 == EC_POINT_cmp(group, generator, group->generator, ctx)) {
+        memcpy(pre->g_pre_comp, gmul, sizeof(pre->g_pre_comp));
+        goto done;
+    }
+    if ((!BN_to_felem(pre->g_pre_comp[0][1][0], group->generator->X)) ||
+        (!BN_to_felem(pre->g_pre_comp[0][1][1], group->generator->Y)) ||
+        (!BN_to_felem(pre->g_pre_comp[0][1][2], group->generator->Z)))
+        goto err;
+    /*
+     * compute 2^56*G, 2^112*G, 2^168*G for the first table, 2^28*G, 2^84*G,
+     * 2^140*G, 2^196*G for the second one
+     */
+    for (i = 1; i <= 8; i <<= 1) {
+        point_double(pre->g_pre_comp[1][i][0], pre->g_pre_comp[1][i][1],
+                     pre->g_pre_comp[1][i][2], pre->g_pre_comp[0][i][0],
+                     pre->g_pre_comp[0][i][1], pre->g_pre_comp[0][i][2]);
+        for (j = 0; j < 27; ++j) {
+            point_double(pre->g_pre_comp[1][i][0], pre->g_pre_comp[1][i][1],
+                         pre->g_pre_comp[1][i][2], pre->g_pre_comp[1][i][0],
+                         pre->g_pre_comp[1][i][1], pre->g_pre_comp[1][i][2]);
+        }
+        if (i == 8)
+            break;
+        point_double(pre->g_pre_comp[0][2 * i][0],
+                     pre->g_pre_comp[0][2 * i][1],
+                     pre->g_pre_comp[0][2 * i][2], pre->g_pre_comp[1][i][0],
+                     pre->g_pre_comp[1][i][1], pre->g_pre_comp[1][i][2]);
+        for (j = 0; j < 27; ++j) {
+            point_double(pre->g_pre_comp[0][2 * i][0],
+                         pre->g_pre_comp[0][2 * i][1],
+                         pre->g_pre_comp[0][2 * i][2],
+                         pre->g_pre_comp[0][2 * i][0],
+                         pre->g_pre_comp[0][2 * i][1],
+                         pre->g_pre_comp[0][2 * i][2]);
+        }
+    }
+    for (i = 0; i < 2; i++) {
+        /* g_pre_comp[i][0] is the point at infinity */
+        memset(pre->g_pre_comp[i][0], 0, sizeof(pre->g_pre_comp[i][0]));
+        /* the remaining multiples */
+        /* 2^56*G + 2^112*G resp. 2^84*G + 2^140*G */
+        point_add(pre->g_pre_comp[i][6][0], pre->g_pre_comp[i][6][1],
+                  pre->g_pre_comp[i][6][2], pre->g_pre_comp[i][4][0],
+                  pre->g_pre_comp[i][4][1], pre->g_pre_comp[i][4][2],
+                  0, pre->g_pre_comp[i][2][0], pre->g_pre_comp[i][2][1],
+                  pre->g_pre_comp[i][2][2]);
+        /* 2^56*G + 2^168*G resp. 2^84*G + 2^196*G */
+        point_add(pre->g_pre_comp[i][10][0], pre->g_pre_comp[i][10][1],
+                  pre->g_pre_comp[i][10][2], pre->g_pre_comp[i][8][0],
+                  pre->g_pre_comp[i][8][1], pre->g_pre_comp[i][8][2],
+                  0, pre->g_pre_comp[i][2][0], pre->g_pre_comp[i][2][1],
+                  pre->g_pre_comp[i][2][2]);
+        /* 2^112*G + 2^168*G resp. 2^140*G + 2^196*G */
+        point_add(pre->g_pre_comp[i][12][0], pre->g_pre_comp[i][12][1],
+                  pre->g_pre_comp[i][12][2], pre->g_pre_comp[i][8][0],
+                  pre->g_pre_comp[i][8][1], pre->g_pre_comp[i][8][2],
+                  0, pre->g_pre_comp[i][4][0], pre->g_pre_comp[i][4][1],
+                  pre->g_pre_comp[i][4][2]);
+        /*
+         * 2^56*G + 2^112*G + 2^168*G resp. 2^84*G + 2^140*G + 2^196*G
+         */
+        point_add(pre->g_pre_comp[i][14][0], pre->g_pre_comp[i][14][1],
+                  pre->g_pre_comp[i][14][2], pre->g_pre_comp[i][12][0],
+                  pre->g_pre_comp[i][12][1], pre->g_pre_comp[i][12][2],
+                  0, pre->g_pre_comp[i][2][0], pre->g_pre_comp[i][2][1],
+                  pre->g_pre_comp[i][2][2]);
+        for (j = 1; j < 8; ++j) {
+            /* odd multiples: add G resp. 2^28*G */
+            point_add(pre->g_pre_comp[i][2 * j + 1][0],
+                      pre->g_pre_comp[i][2 * j + 1][1],
+                      pre->g_pre_comp[i][2 * j + 1][2],
+                      pre->g_pre_comp[i][2 * j][0],
+                      pre->g_pre_comp[i][2 * j][1],
+                      pre->g_pre_comp[i][2 * j][2], 0,
+                      pre->g_pre_comp[i][1][0], pre->g_pre_comp[i][1][1],
+                      pre->g_pre_comp[i][1][2]);
+        }
+    }
+    make_points_affine(31, &(pre->g_pre_comp[0][1]), tmp_felems);
+
+ done:
+    SETPRECOMP(group, nistp224, pre);
+    pre = NULL;
+    ret = 1;
+ err:
+    BN_CTX_end(ctx);
+    EC_POINT_free(generator);
+    BN_CTX_free(new_ctx);
+    EC_nistp224_pre_comp_free(pre);
+    return ret;
+}
+
+int ec_GFp_nistp224_have_precompute_mult(const EC_GROUP *group)
+{
+    return HAVEPRECOMP(group, nistp224);
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistp256.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistp256.c
new file mode 100644
index 000000000..a21e5f78f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistp256.c
@@ -0,0 +1,2355 @@
+/*
+ * Copyright 2011-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* Copyright 2011 Google Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ *
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ */
+
+/*
+ * A 64-bit implementation of the NIST P-256 elliptic curve point multiplication
+ *
+ * OpenSSL integration was taken from Emilia Kasper's work in ecp_nistp224.c.
+ * Otherwise based on Emilia's P224 work, which was inspired by my curve25519
+ * work which got its smarts from Daniel J. Bernstein's work on the same.
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_EC_NISTP_64_GCC_128
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <stdint.h>
+# include <string.h>
+# include <openssl/err.h>
+# include "ec_lcl.h"
+
+# if defined(__SIZEOF_INT128__) && __SIZEOF_INT128__==16
+  /* even with gcc, the typedef won't work for 32-bit platforms */
+typedef __uint128_t uint128_t;  /* nonstandard; implemented by gcc on 64-bit
+                                 * platforms */
+typedef __int128_t int128_t;
+# else
+#  error "Your compiler doesn't appear to support 128-bit integer types"
+# endif
+
+typedef uint8_t u8;
+typedef uint32_t u32;
+typedef uint64_t u64;
+
+/*
+ * The underlying field. P256 operates over GF(2^256-2^224+2^192+2^96-1). We
+ * can serialise an element of this field into 32 bytes. We call this an
+ * felem_bytearray.
+ */
+
+typedef u8 felem_bytearray[32];
+
+/*
+ * These are the parameters of P256, taken from FIPS 186-3, page 86. These
+ * values are big-endian.
+ */
+static const felem_bytearray nistp256_curve_params[5] = {
+    {0xff, 0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x01, /* p */
+     0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+     0x00, 0x00, 0x00, 0x00, 0xff, 0xff, 0xff, 0xff,
+     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff},
+    {0xff, 0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x01, /* a = -3 */
+     0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+     0x00, 0x00, 0x00, 0x00, 0xff, 0xff, 0xff, 0xff,
+     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xfc}, /* b */
+    {0x5a, 0xc6, 0x35, 0xd8, 0xaa, 0x3a, 0x93, 0xe7,
+     0xb3, 0xeb, 0xbd, 0x55, 0x76, 0x98, 0x86, 0xbc,
+     0x65, 0x1d, 0x06, 0xb0, 0xcc, 0x53, 0xb0, 0xf6,
+     0x3b, 0xce, 0x3c, 0x3e, 0x27, 0xd2, 0x60, 0x4b},
+    {0x6b, 0x17, 0xd1, 0xf2, 0xe1, 0x2c, 0x42, 0x47, /* x */
+     0xf8, 0xbc, 0xe6, 0xe5, 0x63, 0xa4, 0x40, 0xf2,
+     0x77, 0x03, 0x7d, 0x81, 0x2d, 0xeb, 0x33, 0xa0,
+     0xf4, 0xa1, 0x39, 0x45, 0xd8, 0x98, 0xc2, 0x96},
+    {0x4f, 0xe3, 0x42, 0xe2, 0xfe, 0x1a, 0x7f, 0x9b, /* y */
+     0x8e, 0xe7, 0xeb, 0x4a, 0x7c, 0x0f, 0x9e, 0x16,
+     0x2b, 0xce, 0x33, 0x57, 0x6b, 0x31, 0x5e, 0xce,
+     0xcb, 0xb6, 0x40, 0x68, 0x37, 0xbf, 0x51, 0xf5}
+};
+
+/*-
+ * The representation of field elements.
+ * ------------------------------------
+ *
+ * We represent field elements with either four 128-bit values, eight 128-bit
+ * values, or four 64-bit values. The field element represented is:
+ *   v[0]*2^0 + v[1]*2^64 + v[2]*2^128 + v[3]*2^192  (mod p)
+ * or:
+ *   v[0]*2^0 + v[1]*2^64 + v[2]*2^128 + ... + v[8]*2^512  (mod p)
+ *
+ * 128-bit values are called 'limbs'. Since the limbs are spaced only 64 bits
+ * apart, but are 128-bits wide, the most significant bits of each limb overlap
+ * with the least significant bits of the next.
+ *
+ * A field element with four limbs is an 'felem'. One with eight limbs is a
+ * 'longfelem'
+ *
+ * A field element with four, 64-bit values is called a 'smallfelem'. Small
+ * values are used as intermediate values before multiplication.
+ */
+
+# define NLIMBS 4
+
+typedef uint128_t limb;
+typedef limb felem[NLIMBS];
+typedef limb longfelem[NLIMBS * 2];
+typedef u64 smallfelem[NLIMBS];
+
+/* This is the value of the prime as four 64-bit words, little-endian. */
+static const u64 kPrime[4] =
+    { 0xfffffffffffffffful, 0xffffffff, 0, 0xffffffff00000001ul };
+static const u64 bottom63bits = 0x7ffffffffffffffful;
+
+/*
+ * bin32_to_felem takes a little-endian byte array and converts it into felem
+ * form. This assumes that the CPU is little-endian.
+ */
+static void bin32_to_felem(felem out, const u8 in[32])
+{
+    out[0] = *((u64 *)&in[0]);
+    out[1] = *((u64 *)&in[8]);
+    out[2] = *((u64 *)&in[16]);
+    out[3] = *((u64 *)&in[24]);
+}
+
+/*
+ * smallfelem_to_bin32 takes a smallfelem and serialises into a little
+ * endian, 32 byte array. This assumes that the CPU is little-endian.
+ */
+static void smallfelem_to_bin32(u8 out[32], const smallfelem in)
+{
+    *((u64 *)&out[0]) = in[0];
+    *((u64 *)&out[8]) = in[1];
+    *((u64 *)&out[16]) = in[2];
+    *((u64 *)&out[24]) = in[3];
+}
+
+/* To preserve endianness when using BN_bn2bin and BN_bin2bn */
+static void flip_endian(u8 *out, const u8 *in, unsigned len)
+{
+    unsigned i;
+    for (i = 0; i < len; ++i)
+        out[i] = in[len - 1 - i];
+}
+
+/* BN_to_felem converts an OpenSSL BIGNUM into an felem */
+static int BN_to_felem(felem out, const BIGNUM *bn)
+{
+    felem_bytearray b_in;
+    felem_bytearray b_out;
+    unsigned num_bytes;
+
+    /* BN_bn2bin eats leading zeroes */
+    memset(b_out, 0, sizeof(b_out));
+    num_bytes = BN_num_bytes(bn);
+    if (num_bytes > sizeof(b_out)) {
+        ECerr(EC_F_BN_TO_FELEM, EC_R_BIGNUM_OUT_OF_RANGE);
+        return 0;
+    }
+    if (BN_is_negative(bn)) {
+        ECerr(EC_F_BN_TO_FELEM, EC_R_BIGNUM_OUT_OF_RANGE);
+        return 0;
+    }
+    num_bytes = BN_bn2bin(bn, b_in);
+    flip_endian(b_out, b_in, num_bytes);
+    bin32_to_felem(out, b_out);
+    return 1;
+}
+
+/* felem_to_BN converts an felem into an OpenSSL BIGNUM */
+static BIGNUM *smallfelem_to_BN(BIGNUM *out, const smallfelem in)
+{
+    felem_bytearray b_in, b_out;
+    smallfelem_to_bin32(b_in, in);
+    flip_endian(b_out, b_in, sizeof(b_out));
+    return BN_bin2bn(b_out, sizeof(b_out), out);
+}
+
+/*-
+ * Field operations
+ * ----------------
+ */
+
+static void smallfelem_one(smallfelem out)
+{
+    out[0] = 1;
+    out[1] = 0;
+    out[2] = 0;
+    out[3] = 0;
+}
+
+static void smallfelem_assign(smallfelem out, const smallfelem in)
+{
+    out[0] = in[0];
+    out[1] = in[1];
+    out[2] = in[2];
+    out[3] = in[3];
+}
+
+static void felem_assign(felem out, const felem in)
+{
+    out[0] = in[0];
+    out[1] = in[1];
+    out[2] = in[2];
+    out[3] = in[3];
+}
+
+/* felem_sum sets out = out + in. */
+static void felem_sum(felem out, const felem in)
+{
+    out[0] += in[0];
+    out[1] += in[1];
+    out[2] += in[2];
+    out[3] += in[3];
+}
+
+/* felem_small_sum sets out = out + in. */
+static void felem_small_sum(felem out, const smallfelem in)
+{
+    out[0] += in[0];
+    out[1] += in[1];
+    out[2] += in[2];
+    out[3] += in[3];
+}
+
+/* felem_scalar sets out = out * scalar */
+static void felem_scalar(felem out, const u64 scalar)
+{
+    out[0] *= scalar;
+    out[1] *= scalar;
+    out[2] *= scalar;
+    out[3] *= scalar;
+}
+
+/* longfelem_scalar sets out = out * scalar */
+static void longfelem_scalar(longfelem out, const u64 scalar)
+{
+    out[0] *= scalar;
+    out[1] *= scalar;
+    out[2] *= scalar;
+    out[3] *= scalar;
+    out[4] *= scalar;
+    out[5] *= scalar;
+    out[6] *= scalar;
+    out[7] *= scalar;
+}
+
+# define two105m41m9 (((limb)1) << 105) - (((limb)1) << 41) - (((limb)1) << 9)
+# define two105 (((limb)1) << 105)
+# define two105m41p9 (((limb)1) << 105) - (((limb)1) << 41) + (((limb)1) << 9)
+
+/* zero105 is 0 mod p */
+static const felem zero105 =
+    { two105m41m9, two105, two105m41p9, two105m41p9 };
+
+/*-
+ * smallfelem_neg sets |out| to |-small|
+ * On exit:
+ *   out[i] < out[i] + 2^105
+ */
+static void smallfelem_neg(felem out, const smallfelem small)
+{
+    /* In order to prevent underflow, we subtract from 0 mod p. */
+    out[0] = zero105[0] - small[0];
+    out[1] = zero105[1] - small[1];
+    out[2] = zero105[2] - small[2];
+    out[3] = zero105[3] - small[3];
+}
+
+/*-
+ * felem_diff subtracts |in| from |out|
+ * On entry:
+ *   in[i] < 2^104
+ * On exit:
+ *   out[i] < out[i] + 2^105
+ */
+static void felem_diff(felem out, const felem in)
+{
+    /*
+     * In order to prevent underflow, we add 0 mod p before subtracting.
+     */
+    out[0] += zero105[0];
+    out[1] += zero105[1];
+    out[2] += zero105[2];
+    out[3] += zero105[3];
+
+    out[0] -= in[0];
+    out[1] -= in[1];
+    out[2] -= in[2];
+    out[3] -= in[3];
+}
+
+# define two107m43m11 (((limb)1) << 107) - (((limb)1) << 43) - (((limb)1) << 11)
+# define two107 (((limb)1) << 107)
+# define two107m43p11 (((limb)1) << 107) - (((limb)1) << 43) + (((limb)1) << 11)
+
+/* zero107 is 0 mod p */
+static const felem zero107 =
+    { two107m43m11, two107, two107m43p11, two107m43p11 };
+
+/*-
+ * An alternative felem_diff for larger inputs |in|
+ * felem_diff_zero107 subtracts |in| from |out|
+ * On entry:
+ *   in[i] < 2^106
+ * On exit:
+ *   out[i] < out[i] + 2^107
+ */
+static void felem_diff_zero107(felem out, const felem in)
+{
+    /*
+     * In order to prevent underflow, we add 0 mod p before subtracting.
+     */
+    out[0] += zero107[0];
+    out[1] += zero107[1];
+    out[2] += zero107[2];
+    out[3] += zero107[3];
+
+    out[0] -= in[0];
+    out[1] -= in[1];
+    out[2] -= in[2];
+    out[3] -= in[3];
+}
+
+/*-
+ * longfelem_diff subtracts |in| from |out|
+ * On entry:
+ *   in[i] < 7*2^67
+ * On exit:
+ *   out[i] < out[i] + 2^70 + 2^40
+ */
+static void longfelem_diff(longfelem out, const longfelem in)
+{
+    static const limb two70m8p6 =
+        (((limb) 1) << 70) - (((limb) 1) << 8) + (((limb) 1) << 6);
+    static const limb two70p40 = (((limb) 1) << 70) + (((limb) 1) << 40);
+    static const limb two70 = (((limb) 1) << 70);
+    static const limb two70m40m38p6 =
+        (((limb) 1) << 70) - (((limb) 1) << 40) - (((limb) 1) << 38) +
+        (((limb) 1) << 6);
+    static const limb two70m6 = (((limb) 1) << 70) - (((limb) 1) << 6);
+
+    /* add 0 mod p to avoid underflow */
+    out[0] += two70m8p6;
+    out[1] += two70p40;
+    out[2] += two70;
+    out[3] += two70m40m38p6;
+    out[4] += two70m6;
+    out[5] += two70m6;
+    out[6] += two70m6;
+    out[7] += two70m6;
+
+    /* in[i] < 7*2^67 < 2^70 - 2^40 - 2^38 + 2^6 */
+    out[0] -= in[0];
+    out[1] -= in[1];
+    out[2] -= in[2];
+    out[3] -= in[3];
+    out[4] -= in[4];
+    out[5] -= in[5];
+    out[6] -= in[6];
+    out[7] -= in[7];
+}
+
+# define two64m0 (((limb)1) << 64) - 1
+# define two110p32m0 (((limb)1) << 110) + (((limb)1) << 32) - 1
+# define two64m46 (((limb)1) << 64) - (((limb)1) << 46)
+# define two64m32 (((limb)1) << 64) - (((limb)1) << 32)
+
+/* zero110 is 0 mod p */
+static const felem zero110 = { two64m0, two110p32m0, two64m46, two64m32 };
+
+/*-
+ * felem_shrink converts an felem into a smallfelem. The result isn't quite
+ * minimal as the value may be greater than p.
+ *
+ * On entry:
+ *   in[i] < 2^109
+ * On exit:
+ *   out[i] < 2^64
+ */
+static void felem_shrink(smallfelem out, const felem in)
+{
+    felem tmp;
+    u64 a, b, mask;
+    u64 high, low;
+    static const u64 kPrime3Test = 0x7fffffff00000001ul; /* 2^63 - 2^32 + 1 */
+
+    /* Carry 2->3 */
+    tmp[3] = zero110[3] + in[3] + ((u64)(in[2] >> 64));
+    /* tmp[3] < 2^110 */
+
+    tmp[2] = zero110[2] + (u64)in[2];
+    tmp[0] = zero110[0] + in[0];
+    tmp[1] = zero110[1] + in[1];
+    /* tmp[0] < 2**110, tmp[1] < 2^111, tmp[2] < 2**65 */
+
+    /*
+     * We perform two partial reductions where we eliminate the high-word of
+     * tmp[3]. We don't update the other words till the end.
+     */
+    a = tmp[3] >> 64;           /* a < 2^46 */
+    tmp[3] = (u64)tmp[3];
+    tmp[3] -= a;
+    tmp[3] += ((limb) a) << 32;
+    /* tmp[3] < 2^79 */
+
+    b = a;
+    a = tmp[3] >> 64;           /* a < 2^15 */
+    b += a;                     /* b < 2^46 + 2^15 < 2^47 */
+    tmp[3] = (u64)tmp[3];
+    tmp[3] -= a;
+    tmp[3] += ((limb) a) << 32;
+    /* tmp[3] < 2^64 + 2^47 */
+
+    /*
+     * This adjusts the other two words to complete the two partial
+     * reductions.
+     */
+    tmp[0] += b;
+    tmp[1] -= (((limb) b) << 32);
+
+    /*
+     * In order to make space in tmp[3] for the carry from 2 -> 3, we
+     * conditionally subtract kPrime if tmp[3] is large enough.
+     */
+    high = (u64)(tmp[3] >> 64);
+    /* As tmp[3] < 2^65, high is either 1 or 0 */
+    high = 0 - high;
+    /*-
+     * high is:
+     *   all ones   if the high word of tmp[3] is 1
+     *   all zeros  if the high word of tmp[3] if 0
+     */
+    low = (u64)tmp[3];
+    mask = 0 - (low >> 63);
+    /*-
+     * mask is:
+     *   all ones   if the MSB of low is 1
+     *   all zeros  if the MSB of low if 0
+     */
+    low &= bottom63bits;
+    low -= kPrime3Test;
+    /* if low was greater than kPrime3Test then the MSB is zero */
+    low = ~low;
+    low = 0 - (low >> 63);
+    /*-
+     * low is:
+     *   all ones   if low was > kPrime3Test
+     *   all zeros  if low was <= kPrime3Test
+     */
+    mask = (mask & low) | high;
+    tmp[0] -= mask & kPrime[0];
+    tmp[1] -= mask & kPrime[1];
+    /* kPrime[2] is zero, so omitted */
+    tmp[3] -= mask & kPrime[3];
+    /* tmp[3] < 2**64 - 2**32 + 1 */
+
+    tmp[1] += ((u64)(tmp[0] >> 64));
+    tmp[0] = (u64)tmp[0];
+    tmp[2] += ((u64)(tmp[1] >> 64));
+    tmp[1] = (u64)tmp[1];
+    tmp[3] += ((u64)(tmp[2] >> 64));
+    tmp[2] = (u64)tmp[2];
+    /* tmp[i] < 2^64 */
+
+    out[0] = tmp[0];
+    out[1] = tmp[1];
+    out[2] = tmp[2];
+    out[3] = tmp[3];
+}
+
+/* smallfelem_expand converts a smallfelem to an felem */
+static void smallfelem_expand(felem out, const smallfelem in)
+{
+    out[0] = in[0];
+    out[1] = in[1];
+    out[2] = in[2];
+    out[3] = in[3];
+}
+
+/*-
+ * smallfelem_square sets |out| = |small|^2
+ * On entry:
+ *   small[i] < 2^64
+ * On exit:
+ *   out[i] < 7 * 2^64 < 2^67
+ */
+static void smallfelem_square(longfelem out, const smallfelem small)
+{
+    limb a;
+    u64 high, low;
+
+    a = ((uint128_t) small[0]) * small[0];
+    low = a;
+    high = a >> 64;
+    out[0] = low;
+    out[1] = high;
+
+    a = ((uint128_t) small[0]) * small[1];
+    low = a;
+    high = a >> 64;
+    out[1] += low;
+    out[1] += low;
+    out[2] = high;
+
+    a = ((uint128_t) small[0]) * small[2];
+    low = a;
+    high = a >> 64;
+    out[2] += low;
+    out[2] *= 2;
+    out[3] = high;
+
+    a = ((uint128_t) small[0]) * small[3];
+    low = a;
+    high = a >> 64;
+    out[3] += low;
+    out[4] = high;
+
+    a = ((uint128_t) small[1]) * small[2];
+    low = a;
+    high = a >> 64;
+    out[3] += low;
+    out[3] *= 2;
+    out[4] += high;
+
+    a = ((uint128_t) small[1]) * small[1];
+    low = a;
+    high = a >> 64;
+    out[2] += low;
+    out[3] += high;
+
+    a = ((uint128_t) small[1]) * small[3];
+    low = a;
+    high = a >> 64;
+    out[4] += low;
+    out[4] *= 2;
+    out[5] = high;
+
+    a = ((uint128_t) small[2]) * small[3];
+    low = a;
+    high = a >> 64;
+    out[5] += low;
+    out[5] *= 2;
+    out[6] = high;
+    out[6] += high;
+
+    a = ((uint128_t) small[2]) * small[2];
+    low = a;
+    high = a >> 64;
+    out[4] += low;
+    out[5] += high;
+
+    a = ((uint128_t) small[3]) * small[3];
+    low = a;
+    high = a >> 64;
+    out[6] += low;
+    out[7] = high;
+}
+
+/*-
+ * felem_square sets |out| = |in|^2
+ * On entry:
+ *   in[i] < 2^109
+ * On exit:
+ *   out[i] < 7 * 2^64 < 2^67
+ */
+static void felem_square(longfelem out, const felem in)
+{
+    u64 small[4];
+    felem_shrink(small, in);
+    smallfelem_square(out, small);
+}
+
+/*-
+ * smallfelem_mul sets |out| = |small1| * |small2|
+ * On entry:
+ *   small1[i] < 2^64
+ *   small2[i] < 2^64
+ * On exit:
+ *   out[i] < 7 * 2^64 < 2^67
+ */
+static void smallfelem_mul(longfelem out, const smallfelem small1,
+                           const smallfelem small2)
+{
+    limb a;
+    u64 high, low;
+
+    a = ((uint128_t) small1[0]) * small2[0];
+    low = a;
+    high = a >> 64;
+    out[0] = low;
+    out[1] = high;
+
+    a = ((uint128_t) small1[0]) * small2[1];
+    low = a;
+    high = a >> 64;
+    out[1] += low;
+    out[2] = high;
+
+    a = ((uint128_t) small1[1]) * small2[0];
+    low = a;
+    high = a >> 64;
+    out[1] += low;
+    out[2] += high;
+
+    a = ((uint128_t) small1[0]) * small2[2];
+    low = a;
+    high = a >> 64;
+    out[2] += low;
+    out[3] = high;
+
+    a = ((uint128_t) small1[1]) * small2[1];
+    low = a;
+    high = a >> 64;
+    out[2] += low;
+    out[3] += high;
+
+    a = ((uint128_t) small1[2]) * small2[0];
+    low = a;
+    high = a >> 64;
+    out[2] += low;
+    out[3] += high;
+
+    a = ((uint128_t) small1[0]) * small2[3];
+    low = a;
+    high = a >> 64;
+    out[3] += low;
+    out[4] = high;
+
+    a = ((uint128_t) small1[1]) * small2[2];
+    low = a;
+    high = a >> 64;
+    out[3] += low;
+    out[4] += high;
+
+    a = ((uint128_t) small1[2]) * small2[1];
+    low = a;
+    high = a >> 64;
+    out[3] += low;
+    out[4] += high;
+
+    a = ((uint128_t) small1[3]) * small2[0];
+    low = a;
+    high = a >> 64;
+    out[3] += low;
+    out[4] += high;
+
+    a = ((uint128_t) small1[1]) * small2[3];
+    low = a;
+    high = a >> 64;
+    out[4] += low;
+    out[5] = high;
+
+    a = ((uint128_t) small1[2]) * small2[2];
+    low = a;
+    high = a >> 64;
+    out[4] += low;
+    out[5] += high;
+
+    a = ((uint128_t) small1[3]) * small2[1];
+    low = a;
+    high = a >> 64;
+    out[4] += low;
+    out[5] += high;
+
+    a = ((uint128_t) small1[2]) * small2[3];
+    low = a;
+    high = a >> 64;
+    out[5] += low;
+    out[6] = high;
+
+    a = ((uint128_t) small1[3]) * small2[2];
+    low = a;
+    high = a >> 64;
+    out[5] += low;
+    out[6] += high;
+
+    a = ((uint128_t) small1[3]) * small2[3];
+    low = a;
+    high = a >> 64;
+    out[6] += low;
+    out[7] = high;
+}
+
+/*-
+ * felem_mul sets |out| = |in1| * |in2|
+ * On entry:
+ *   in1[i] < 2^109
+ *   in2[i] < 2^109
+ * On exit:
+ *   out[i] < 7 * 2^64 < 2^67
+ */
+static void felem_mul(longfelem out, const felem in1, const felem in2)
+{
+    smallfelem small1, small2;
+    felem_shrink(small1, in1);
+    felem_shrink(small2, in2);
+    smallfelem_mul(out, small1, small2);
+}
+
+/*-
+ * felem_small_mul sets |out| = |small1| * |in2|
+ * On entry:
+ *   small1[i] < 2^64
+ *   in2[i] < 2^109
+ * On exit:
+ *   out[i] < 7 * 2^64 < 2^67
+ */
+static void felem_small_mul(longfelem out, const smallfelem small1,
+                            const felem in2)
+{
+    smallfelem small2;
+    felem_shrink(small2, in2);
+    smallfelem_mul(out, small1, small2);
+}
+
+# define two100m36m4 (((limb)1) << 100) - (((limb)1) << 36) - (((limb)1) << 4)
+# define two100 (((limb)1) << 100)
+# define two100m36p4 (((limb)1) << 100) - (((limb)1) << 36) + (((limb)1) << 4)
+/* zero100 is 0 mod p */
+static const felem zero100 =
+    { two100m36m4, two100, two100m36p4, two100m36p4 };
+
+/*-
+ * Internal function for the different flavours of felem_reduce.
+ * felem_reduce_ reduces the higher coefficients in[4]-in[7].
+ * On entry:
+ *   out[0] >= in[6] + 2^32*in[6] + in[7] + 2^32*in[7]
+ *   out[1] >= in[7] + 2^32*in[4]
+ *   out[2] >= in[5] + 2^32*in[5]
+ *   out[3] >= in[4] + 2^32*in[5] + 2^32*in[6]
+ * On exit:
+ *   out[0] <= out[0] + in[4] + 2^32*in[5]
+ *   out[1] <= out[1] + in[5] + 2^33*in[6]
+ *   out[2] <= out[2] + in[7] + 2*in[6] + 2^33*in[7]
+ *   out[3] <= out[3] + 2^32*in[4] + 3*in[7]
+ */
+static void felem_reduce_(felem out, const longfelem in)
+{
+    int128_t c;
+    /* combine common terms from below */
+    c = in[4] + (in[5] << 32);
+    out[0] += c;
+    out[3] -= c;
+
+    c = in[5] - in[7];
+    out[1] += c;
+    out[2] -= c;
+
+    /* the remaining terms */
+    /* 256: [(0,1),(96,-1),(192,-1),(224,1)] */
+    out[1] -= (in[4] << 32);
+    out[3] += (in[4] << 32);
+
+    /* 320: [(32,1),(64,1),(128,-1),(160,-1),(224,-1)] */
+    out[2] -= (in[5] << 32);
+
+    /* 384: [(0,-1),(32,-1),(96,2),(128,2),(224,-1)] */
+    out[0] -= in[6];
+    out[0] -= (in[6] << 32);
+    out[1] += (in[6] << 33);
+    out[2] += (in[6] * 2);
+    out[3] -= (in[6] << 32);
+
+    /* 448: [(0,-1),(32,-1),(64,-1),(128,1),(160,2),(192,3)] */
+    out[0] -= in[7];
+    out[0] -= (in[7] << 32);
+    out[2] += (in[7] << 33);
+    out[3] += (in[7] * 3);
+}
+
+/*-
+ * felem_reduce converts a longfelem into an felem.
+ * To be called directly after felem_square or felem_mul.
+ * On entry:
+ *   in[0] < 2^64, in[1] < 3*2^64, in[2] < 5*2^64, in[3] < 7*2^64
+ *   in[4] < 7*2^64, in[5] < 5*2^64, in[6] < 3*2^64, in[7] < 2*64
+ * On exit:
+ *   out[i] < 2^101
+ */
+static void felem_reduce(felem out, const longfelem in)
+{
+    out[0] = zero100[0] + in[0];
+    out[1] = zero100[1] + in[1];
+    out[2] = zero100[2] + in[2];
+    out[3] = zero100[3] + in[3];
+
+    felem_reduce_(out, in);
+
+    /*-
+     * out[0] > 2^100 - 2^36 - 2^4 - 3*2^64 - 3*2^96 - 2^64 - 2^96 > 0
+     * out[1] > 2^100 - 2^64 - 7*2^96 > 0
+     * out[2] > 2^100 - 2^36 + 2^4 - 5*2^64 - 5*2^96 > 0
+     * out[3] > 2^100 - 2^36 + 2^4 - 7*2^64 - 5*2^96 - 3*2^96 > 0
+     *
+     * out[0] < 2^100 + 2^64 + 7*2^64 + 5*2^96 < 2^101
+     * out[1] < 2^100 + 3*2^64 + 5*2^64 + 3*2^97 < 2^101
+     * out[2] < 2^100 + 5*2^64 + 2^64 + 3*2^65 + 2^97 < 2^101
+     * out[3] < 2^100 + 7*2^64 + 7*2^96 + 3*2^64 < 2^101
+     */
+}
+
+/*-
+ * felem_reduce_zero105 converts a larger longfelem into an felem.
+ * On entry:
+ *   in[0] < 2^71
+ * On exit:
+ *   out[i] < 2^106
+ */
+static void felem_reduce_zero105(felem out, const longfelem in)
+{
+    out[0] = zero105[0] + in[0];
+    out[1] = zero105[1] + in[1];
+    out[2] = zero105[2] + in[2];
+    out[3] = zero105[3] + in[3];
+
+    felem_reduce_(out, in);
+
+    /*-
+     * out[0] > 2^105 - 2^41 - 2^9 - 2^71 - 2^103 - 2^71 - 2^103 > 0
+     * out[1] > 2^105 - 2^71 - 2^103 > 0
+     * out[2] > 2^105 - 2^41 + 2^9 - 2^71 - 2^103 > 0
+     * out[3] > 2^105 - 2^41 + 2^9 - 2^71 - 2^103 - 2^103 > 0
+     *
+     * out[0] < 2^105 + 2^71 + 2^71 + 2^103 < 2^106
+     * out[1] < 2^105 + 2^71 + 2^71 + 2^103 < 2^106
+     * out[2] < 2^105 + 2^71 + 2^71 + 2^71 + 2^103 < 2^106
+     * out[3] < 2^105 + 2^71 + 2^103 + 2^71 < 2^106
+     */
+}
+
+/*
+ * subtract_u64 sets *result = *result - v and *carry to one if the
+ * subtraction underflowed.
+ */
+static void subtract_u64(u64 *result, u64 *carry, u64 v)
+{
+    uint128_t r = *result;
+    r -= v;
+    *carry = (r >> 64) & 1;
+    *result = (u64)r;
+}
+
+/*
+ * felem_contract converts |in| to its unique, minimal representation. On
+ * entry: in[i] < 2^109
+ */
+static void felem_contract(smallfelem out, const felem in)
+{
+    unsigned i;
+    u64 all_equal_so_far = 0, result = 0, carry;
+
+    felem_shrink(out, in);
+    /* small is minimal except that the value might be > p */
+
+    all_equal_so_far--;
+    /*
+     * We are doing a constant time test if out >= kPrime. We need to compare
+     * each u64, from most-significant to least significant. For each one, if
+     * all words so far have been equal (m is all ones) then a non-equal
+     * result is the answer. Otherwise we continue.
+     */
+    for (i = 3; i < 4; i--) {
+        u64 equal;
+        uint128_t a = ((uint128_t) kPrime[i]) - out[i];
+        /*
+         * if out[i] > kPrime[i] then a will underflow and the high 64-bits
+         * will all be set.
+         */
+        result |= all_equal_so_far & ((u64)(a >> 64));
+
+        /*
+         * if kPrime[i] == out[i] then |equal| will be all zeros and the
+         * decrement will make it all ones.
+         */
+        equal = kPrime[i] ^ out[i];
+        equal--;
+        equal &= equal << 32;
+        equal &= equal << 16;
+        equal &= equal << 8;
+        equal &= equal << 4;
+        equal &= equal << 2;
+        equal &= equal << 1;
+        equal = 0 - (equal >> 63);
+
+        all_equal_so_far &= equal;
+    }
+
+    /*
+     * if all_equal_so_far is still all ones then the two values are equal
+     * and so out >= kPrime is true.
+     */
+    result |= all_equal_so_far;
+
+    /* if out >= kPrime then we subtract kPrime. */
+    subtract_u64(&out[0], &carry, result & kPrime[0]);
+    subtract_u64(&out[1], &carry, carry);
+    subtract_u64(&out[2], &carry, carry);
+    subtract_u64(&out[3], &carry, carry);
+
+    subtract_u64(&out[1], &carry, result & kPrime[1]);
+    subtract_u64(&out[2], &carry, carry);
+    subtract_u64(&out[3], &carry, carry);
+
+    subtract_u64(&out[2], &carry, result & kPrime[2]);
+    subtract_u64(&out[3], &carry, carry);
+
+    subtract_u64(&out[3], &carry, result & kPrime[3]);
+}
+
+static void smallfelem_square_contract(smallfelem out, const smallfelem in)
+{
+    longfelem longtmp;
+    felem tmp;
+
+    smallfelem_square(longtmp, in);
+    felem_reduce(tmp, longtmp);
+    felem_contract(out, tmp);
+}
+
+static void smallfelem_mul_contract(smallfelem out, const smallfelem in1,
+                                    const smallfelem in2)
+{
+    longfelem longtmp;
+    felem tmp;
+
+    smallfelem_mul(longtmp, in1, in2);
+    felem_reduce(tmp, longtmp);
+    felem_contract(out, tmp);
+}
+
+/*-
+ * felem_is_zero returns a limb with all bits set if |in| == 0 (mod p) and 0
+ * otherwise.
+ * On entry:
+ *   small[i] < 2^64
+ */
+static limb smallfelem_is_zero(const smallfelem small)
+{
+    limb result;
+    u64 is_p;
+
+    u64 is_zero = small[0] | small[1] | small[2] | small[3];
+    is_zero--;
+    is_zero &= is_zero << 32;
+    is_zero &= is_zero << 16;
+    is_zero &= is_zero << 8;
+    is_zero &= is_zero << 4;
+    is_zero &= is_zero << 2;
+    is_zero &= is_zero << 1;
+    is_zero = 0 - (is_zero >> 63);
+
+    is_p = (small[0] ^ kPrime[0]) |
+        (small[1] ^ kPrime[1]) |
+        (small[2] ^ kPrime[2]) | (small[3] ^ kPrime[3]);
+    is_p--;
+    is_p &= is_p << 32;
+    is_p &= is_p << 16;
+    is_p &= is_p << 8;
+    is_p &= is_p << 4;
+    is_p &= is_p << 2;
+    is_p &= is_p << 1;
+    is_p = 0 - (is_p >> 63);
+
+    is_zero |= is_p;
+
+    result = is_zero;
+    result |= ((limb) is_zero) << 64;
+    return result;
+}
+
+static int smallfelem_is_zero_int(const void *small)
+{
+    return (int)(smallfelem_is_zero(small) & ((limb) 1));
+}
+
+/*-
+ * felem_inv calculates |out| = |in|^{-1}
+ *
+ * Based on Fermat's Little Theorem:
+ *   a^p = a (mod p)
+ *   a^{p-1} = 1 (mod p)
+ *   a^{p-2} = a^{-1} (mod p)
+ */
+static void felem_inv(felem out, const felem in)
+{
+    felem ftmp, ftmp2;
+    /* each e_I will hold |in|^{2^I - 1} */
+    felem e2, e4, e8, e16, e32, e64;
+    longfelem tmp;
+    unsigned i;
+
+    felem_square(tmp, in);
+    felem_reduce(ftmp, tmp);    /* 2^1 */
+    felem_mul(tmp, in, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^2 - 2^0 */
+    felem_assign(e2, ftmp);
+    felem_square(tmp, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^3 - 2^1 */
+    felem_square(tmp, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^4 - 2^2 */
+    felem_mul(tmp, ftmp, e2);
+    felem_reduce(ftmp, tmp);    /* 2^4 - 2^0 */
+    felem_assign(e4, ftmp);
+    felem_square(tmp, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^5 - 2^1 */
+    felem_square(tmp, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^6 - 2^2 */
+    felem_square(tmp, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^7 - 2^3 */
+    felem_square(tmp, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^8 - 2^4 */
+    felem_mul(tmp, ftmp, e4);
+    felem_reduce(ftmp, tmp);    /* 2^8 - 2^0 */
+    felem_assign(e8, ftmp);
+    for (i = 0; i < 8; i++) {
+        felem_square(tmp, ftmp);
+        felem_reduce(ftmp, tmp);
+    }                           /* 2^16 - 2^8 */
+    felem_mul(tmp, ftmp, e8);
+    felem_reduce(ftmp, tmp);    /* 2^16 - 2^0 */
+    felem_assign(e16, ftmp);
+    for (i = 0; i < 16; i++) {
+        felem_square(tmp, ftmp);
+        felem_reduce(ftmp, tmp);
+    }                           /* 2^32 - 2^16 */
+    felem_mul(tmp, ftmp, e16);
+    felem_reduce(ftmp, tmp);    /* 2^32 - 2^0 */
+    felem_assign(e32, ftmp);
+    for (i = 0; i < 32; i++) {
+        felem_square(tmp, ftmp);
+        felem_reduce(ftmp, tmp);
+    }                           /* 2^64 - 2^32 */
+    felem_assign(e64, ftmp);
+    felem_mul(tmp, ftmp, in);
+    felem_reduce(ftmp, tmp);    /* 2^64 - 2^32 + 2^0 */
+    for (i = 0; i < 192; i++) {
+        felem_square(tmp, ftmp);
+        felem_reduce(ftmp, tmp);
+    }                           /* 2^256 - 2^224 + 2^192 */
+
+    felem_mul(tmp, e64, e32);
+    felem_reduce(ftmp2, tmp);   /* 2^64 - 2^0 */
+    for (i = 0; i < 16; i++) {
+        felem_square(tmp, ftmp2);
+        felem_reduce(ftmp2, tmp);
+    }                           /* 2^80 - 2^16 */
+    felem_mul(tmp, ftmp2, e16);
+    felem_reduce(ftmp2, tmp);   /* 2^80 - 2^0 */
+    for (i = 0; i < 8; i++) {
+        felem_square(tmp, ftmp2);
+        felem_reduce(ftmp2, tmp);
+    }                           /* 2^88 - 2^8 */
+    felem_mul(tmp, ftmp2, e8);
+    felem_reduce(ftmp2, tmp);   /* 2^88 - 2^0 */
+    for (i = 0; i < 4; i++) {
+        felem_square(tmp, ftmp2);
+        felem_reduce(ftmp2, tmp);
+    }                           /* 2^92 - 2^4 */
+    felem_mul(tmp, ftmp2, e4);
+    felem_reduce(ftmp2, tmp);   /* 2^92 - 2^0 */
+    felem_square(tmp, ftmp2);
+    felem_reduce(ftmp2, tmp);   /* 2^93 - 2^1 */
+    felem_square(tmp, ftmp2);
+    felem_reduce(ftmp2, tmp);   /* 2^94 - 2^2 */
+    felem_mul(tmp, ftmp2, e2);
+    felem_reduce(ftmp2, tmp);   /* 2^94 - 2^0 */
+    felem_square(tmp, ftmp2);
+    felem_reduce(ftmp2, tmp);   /* 2^95 - 2^1 */
+    felem_square(tmp, ftmp2);
+    felem_reduce(ftmp2, tmp);   /* 2^96 - 2^2 */
+    felem_mul(tmp, ftmp2, in);
+    felem_reduce(ftmp2, tmp);   /* 2^96 - 3 */
+
+    felem_mul(tmp, ftmp2, ftmp);
+    felem_reduce(out, tmp);     /* 2^256 - 2^224 + 2^192 + 2^96 - 3 */
+}
+
+static void smallfelem_inv_contract(smallfelem out, const smallfelem in)
+{
+    felem tmp;
+
+    smallfelem_expand(tmp, in);
+    felem_inv(tmp, tmp);
+    felem_contract(out, tmp);
+}
+
+/*-
+ * Group operations
+ * ----------------
+ *
+ * Building on top of the field operations we have the operations on the
+ * elliptic curve group itself. Points on the curve are represented in Jacobian
+ * coordinates
+ */
+
+/*-
+ * point_double calculates 2*(x_in, y_in, z_in)
+ *
+ * The method is taken from:
+ *   http://hyperelliptic.org/EFD/g1p/auto-shortw-jacobian-3.html#doubling-dbl-2001-b
+ *
+ * Outputs can equal corresponding inputs, i.e., x_out == x_in is allowed.
+ * while x_out == y_in is not (maybe this works, but it's not tested).
+ */
+static void
+point_double(felem x_out, felem y_out, felem z_out,
+             const felem x_in, const felem y_in, const felem z_in)
+{
+    longfelem tmp, tmp2;
+    felem delta, gamma, beta, alpha, ftmp, ftmp2;
+    smallfelem small1, small2;
+
+    felem_assign(ftmp, x_in);
+    /* ftmp[i] < 2^106 */
+    felem_assign(ftmp2, x_in);
+    /* ftmp2[i] < 2^106 */
+
+    /* delta = z^2 */
+    felem_square(tmp, z_in);
+    felem_reduce(delta, tmp);
+    /* delta[i] < 2^101 */
+
+    /* gamma = y^2 */
+    felem_square(tmp, y_in);
+    felem_reduce(gamma, tmp);
+    /* gamma[i] < 2^101 */
+    felem_shrink(small1, gamma);
+
+    /* beta = x*gamma */
+    felem_small_mul(tmp, small1, x_in);
+    felem_reduce(beta, tmp);
+    /* beta[i] < 2^101 */
+
+    /* alpha = 3*(x-delta)*(x+delta) */
+    felem_diff(ftmp, delta);
+    /* ftmp[i] < 2^105 + 2^106 < 2^107 */
+    felem_sum(ftmp2, delta);
+    /* ftmp2[i] < 2^105 + 2^106 < 2^107 */
+    felem_scalar(ftmp2, 3);
+    /* ftmp2[i] < 3 * 2^107 < 2^109 */
+    felem_mul(tmp, ftmp, ftmp2);
+    felem_reduce(alpha, tmp);
+    /* alpha[i] < 2^101 */
+    felem_shrink(small2, alpha);
+
+    /* x' = alpha^2 - 8*beta */
+    smallfelem_square(tmp, small2);
+    felem_reduce(x_out, tmp);
+    felem_assign(ftmp, beta);
+    felem_scalar(ftmp, 8);
+    /* ftmp[i] < 8 * 2^101 = 2^104 */
+    felem_diff(x_out, ftmp);
+    /* x_out[i] < 2^105 + 2^101 < 2^106 */
+
+    /* z' = (y + z)^2 - gamma - delta */
+    felem_sum(delta, gamma);
+    /* delta[i] < 2^101 + 2^101 = 2^102 */
+    felem_assign(ftmp, y_in);
+    felem_sum(ftmp, z_in);
+    /* ftmp[i] < 2^106 + 2^106 = 2^107 */
+    felem_square(tmp, ftmp);
+    felem_reduce(z_out, tmp);
+    felem_diff(z_out, delta);
+    /* z_out[i] < 2^105 + 2^101 < 2^106 */
+
+    /* y' = alpha*(4*beta - x') - 8*gamma^2 */
+    felem_scalar(beta, 4);
+    /* beta[i] < 4 * 2^101 = 2^103 */
+    felem_diff_zero107(beta, x_out);
+    /* beta[i] < 2^107 + 2^103 < 2^108 */
+    felem_small_mul(tmp, small2, beta);
+    /* tmp[i] < 7 * 2^64 < 2^67 */
+    smallfelem_square(tmp2, small1);
+    /* tmp2[i] < 7 * 2^64 */
+    longfelem_scalar(tmp2, 8);
+    /* tmp2[i] < 8 * 7 * 2^64 = 7 * 2^67 */
+    longfelem_diff(tmp, tmp2);
+    /* tmp[i] < 2^67 + 2^70 + 2^40 < 2^71 */
+    felem_reduce_zero105(y_out, tmp);
+    /* y_out[i] < 2^106 */
+}
+
+/*
+ * point_double_small is the same as point_double, except that it operates on
+ * smallfelems
+ */
+static void
+point_double_small(smallfelem x_out, smallfelem y_out, smallfelem z_out,
+                   const smallfelem x_in, const smallfelem y_in,
+                   const smallfelem z_in)
+{
+    felem felem_x_out, felem_y_out, felem_z_out;
+    felem felem_x_in, felem_y_in, felem_z_in;
+
+    smallfelem_expand(felem_x_in, x_in);
+    smallfelem_expand(felem_y_in, y_in);
+    smallfelem_expand(felem_z_in, z_in);
+    point_double(felem_x_out, felem_y_out, felem_z_out,
+                 felem_x_in, felem_y_in, felem_z_in);
+    felem_shrink(x_out, felem_x_out);
+    felem_shrink(y_out, felem_y_out);
+    felem_shrink(z_out, felem_z_out);
+}
+
+/* copy_conditional copies in to out iff mask is all ones. */
+static void copy_conditional(felem out, const felem in, limb mask)
+{
+    unsigned i;
+    for (i = 0; i < NLIMBS; ++i) {
+        const limb tmp = mask & (in[i] ^ out[i]);
+        out[i] ^= tmp;
+    }
+}
+
+/* copy_small_conditional copies in to out iff mask is all ones. */
+static void copy_small_conditional(felem out, const smallfelem in, limb mask)
+{
+    unsigned i;
+    const u64 mask64 = mask;
+    for (i = 0; i < NLIMBS; ++i) {
+        out[i] = ((limb) (in[i] & mask64)) | (out[i] & ~mask);
+    }
+}
+
+/*-
+ * point_add calculates (x1, y1, z1) + (x2, y2, z2)
+ *
+ * The method is taken from:
+ *   http://hyperelliptic.org/EFD/g1p/auto-shortw-jacobian-3.html#addition-add-2007-bl,
+ * adapted for mixed addition (z2 = 1, or z2 = 0 for the point at infinity).
+ *
+ * This function includes a branch for checking whether the two input points
+ * are equal, (while not equal to the point at infinity). This case never
+ * happens during single point multiplication, so there is no timing leak for
+ * ECDH or ECDSA signing.
+ */
+static void point_add(felem x3, felem y3, felem z3,
+                      const felem x1, const felem y1, const felem z1,
+                      const int mixed, const smallfelem x2,
+                      const smallfelem y2, const smallfelem z2)
+{
+    felem ftmp, ftmp2, ftmp3, ftmp4, ftmp5, ftmp6, x_out, y_out, z_out;
+    longfelem tmp, tmp2;
+    smallfelem small1, small2, small3, small4, small5;
+    limb x_equal, y_equal, z1_is_zero, z2_is_zero;
+
+    felem_shrink(small3, z1);
+
+    z1_is_zero = smallfelem_is_zero(small3);
+    z2_is_zero = smallfelem_is_zero(z2);
+
+    /* ftmp = z1z1 = z1**2 */
+    smallfelem_square(tmp, small3);
+    felem_reduce(ftmp, tmp);
+    /* ftmp[i] < 2^101 */
+    felem_shrink(small1, ftmp);
+
+    if (!mixed) {
+        /* ftmp2 = z2z2 = z2**2 */
+        smallfelem_square(tmp, z2);
+        felem_reduce(ftmp2, tmp);
+        /* ftmp2[i] < 2^101 */
+        felem_shrink(small2, ftmp2);
+
+        felem_shrink(small5, x1);
+
+        /* u1 = ftmp3 = x1*z2z2 */
+        smallfelem_mul(tmp, small5, small2);
+        felem_reduce(ftmp3, tmp);
+        /* ftmp3[i] < 2^101 */
+
+        /* ftmp5 = z1 + z2 */
+        felem_assign(ftmp5, z1);
+        felem_small_sum(ftmp5, z2);
+        /* ftmp5[i] < 2^107 */
+
+        /* ftmp5 = (z1 + z2)**2 - (z1z1 + z2z2) = 2z1z2 */
+        felem_square(tmp, ftmp5);
+        felem_reduce(ftmp5, tmp);
+        /* ftmp2 = z2z2 + z1z1 */
+        felem_sum(ftmp2, ftmp);
+        /* ftmp2[i] < 2^101 + 2^101 = 2^102 */
+        felem_diff(ftmp5, ftmp2);
+        /* ftmp5[i] < 2^105 + 2^101 < 2^106 */
+
+        /* ftmp2 = z2 * z2z2 */
+        smallfelem_mul(tmp, small2, z2);
+        felem_reduce(ftmp2, tmp);
+
+        /* s1 = ftmp2 = y1 * z2**3 */
+        felem_mul(tmp, y1, ftmp2);
+        felem_reduce(ftmp6, tmp);
+        /* ftmp6[i] < 2^101 */
+    } else {
+        /*
+         * We'll assume z2 = 1 (special case z2 = 0 is handled later)
+         */
+
+        /* u1 = ftmp3 = x1*z2z2 */
+        felem_assign(ftmp3, x1);
+        /* ftmp3[i] < 2^106 */
+
+        /* ftmp5 = 2z1z2 */
+        felem_assign(ftmp5, z1);
+        felem_scalar(ftmp5, 2);
+        /* ftmp5[i] < 2*2^106 = 2^107 */
+
+        /* s1 = ftmp2 = y1 * z2**3 */
+        felem_assign(ftmp6, y1);
+        /* ftmp6[i] < 2^106 */
+    }
+
+    /* u2 = x2*z1z1 */
+    smallfelem_mul(tmp, x2, small1);
+    felem_reduce(ftmp4, tmp);
+
+    /* h = ftmp4 = u2 - u1 */
+    felem_diff_zero107(ftmp4, ftmp3);
+    /* ftmp4[i] < 2^107 + 2^101 < 2^108 */
+    felem_shrink(small4, ftmp4);
+
+    x_equal = smallfelem_is_zero(small4);
+
+    /* z_out = ftmp5 * h */
+    felem_small_mul(tmp, small4, ftmp5);
+    felem_reduce(z_out, tmp);
+    /* z_out[i] < 2^101 */
+
+    /* ftmp = z1 * z1z1 */
+    smallfelem_mul(tmp, small1, small3);
+    felem_reduce(ftmp, tmp);
+
+    /* s2 = tmp = y2 * z1**3 */
+    felem_small_mul(tmp, y2, ftmp);
+    felem_reduce(ftmp5, tmp);
+
+    /* r = ftmp5 = (s2 - s1)*2 */
+    felem_diff_zero107(ftmp5, ftmp6);
+    /* ftmp5[i] < 2^107 + 2^107 = 2^108 */
+    felem_scalar(ftmp5, 2);
+    /* ftmp5[i] < 2^109 */
+    felem_shrink(small1, ftmp5);
+    y_equal = smallfelem_is_zero(small1);
+
+    if (x_equal && y_equal && !z1_is_zero && !z2_is_zero) {
+        point_double(x3, y3, z3, x1, y1, z1);
+        return;
+    }
+
+    /* I = ftmp = (2h)**2 */
+    felem_assign(ftmp, ftmp4);
+    felem_scalar(ftmp, 2);
+    /* ftmp[i] < 2*2^108 = 2^109 */
+    felem_square(tmp, ftmp);
+    felem_reduce(ftmp, tmp);
+
+    /* J = ftmp2 = h * I */
+    felem_mul(tmp, ftmp4, ftmp);
+    felem_reduce(ftmp2, tmp);
+
+    /* V = ftmp4 = U1 * I */
+    felem_mul(tmp, ftmp3, ftmp);
+    felem_reduce(ftmp4, tmp);
+
+    /* x_out = r**2 - J - 2V */
+    smallfelem_square(tmp, small1);
+    felem_reduce(x_out, tmp);
+    felem_assign(ftmp3, ftmp4);
+    felem_scalar(ftmp4, 2);
+    felem_sum(ftmp4, ftmp2);
+    /* ftmp4[i] < 2*2^101 + 2^101 < 2^103 */
+    felem_diff(x_out, ftmp4);
+    /* x_out[i] < 2^105 + 2^101 */
+
+    /* y_out = r(V-x_out) - 2 * s1 * J */
+    felem_diff_zero107(ftmp3, x_out);
+    /* ftmp3[i] < 2^107 + 2^101 < 2^108 */
+    felem_small_mul(tmp, small1, ftmp3);
+    felem_mul(tmp2, ftmp6, ftmp2);
+    longfelem_scalar(tmp2, 2);
+    /* tmp2[i] < 2*2^67 = 2^68 */
+    longfelem_diff(tmp, tmp2);
+    /* tmp[i] < 2^67 + 2^70 + 2^40 < 2^71 */
+    felem_reduce_zero105(y_out, tmp);
+    /* y_out[i] < 2^106 */
+
+    copy_small_conditional(x_out, x2, z1_is_zero);
+    copy_conditional(x_out, x1, z2_is_zero);
+    copy_small_conditional(y_out, y2, z1_is_zero);
+    copy_conditional(y_out, y1, z2_is_zero);
+    copy_small_conditional(z_out, z2, z1_is_zero);
+    copy_conditional(z_out, z1, z2_is_zero);
+    felem_assign(x3, x_out);
+    felem_assign(y3, y_out);
+    felem_assign(z3, z_out);
+}
+
+/*
+ * point_add_small is the same as point_add, except that it operates on
+ * smallfelems
+ */
+static void point_add_small(smallfelem x3, smallfelem y3, smallfelem z3,
+                            smallfelem x1, smallfelem y1, smallfelem z1,
+                            smallfelem x2, smallfelem y2, smallfelem z2)
+{
+    felem felem_x3, felem_y3, felem_z3;
+    felem felem_x1, felem_y1, felem_z1;
+    smallfelem_expand(felem_x1, x1);
+    smallfelem_expand(felem_y1, y1);
+    smallfelem_expand(felem_z1, z1);
+    point_add(felem_x3, felem_y3, felem_z3, felem_x1, felem_y1, felem_z1, 0,
+              x2, y2, z2);
+    felem_shrink(x3, felem_x3);
+    felem_shrink(y3, felem_y3);
+    felem_shrink(z3, felem_z3);
+}
+
+/*-
+ * Base point pre computation
+ * --------------------------
+ *
+ * Two different sorts of precomputed tables are used in the following code.
+ * Each contain various points on the curve, where each point is three field
+ * elements (x, y, z).
+ *
+ * For the base point table, z is usually 1 (0 for the point at infinity).
+ * This table has 2 * 16 elements, starting with the following:
+ * index | bits    | point
+ * ------+---------+------------------------------
+ *     0 | 0 0 0 0 | 0G
+ *     1 | 0 0 0 1 | 1G
+ *     2 | 0 0 1 0 | 2^64G
+ *     3 | 0 0 1 1 | (2^64 + 1)G
+ *     4 | 0 1 0 0 | 2^128G
+ *     5 | 0 1 0 1 | (2^128 + 1)G
+ *     6 | 0 1 1 0 | (2^128 + 2^64)G
+ *     7 | 0 1 1 1 | (2^128 + 2^64 + 1)G
+ *     8 | 1 0 0 0 | 2^192G
+ *     9 | 1 0 0 1 | (2^192 + 1)G
+ *    10 | 1 0 1 0 | (2^192 + 2^64)G
+ *    11 | 1 0 1 1 | (2^192 + 2^64 + 1)G
+ *    12 | 1 1 0 0 | (2^192 + 2^128)G
+ *    13 | 1 1 0 1 | (2^192 + 2^128 + 1)G
+ *    14 | 1 1 1 0 | (2^192 + 2^128 + 2^64)G
+ *    15 | 1 1 1 1 | (2^192 + 2^128 + 2^64 + 1)G
+ * followed by a copy of this with each element multiplied by 2^32.
+ *
+ * The reason for this is so that we can clock bits into four different
+ * locations when doing simple scalar multiplies against the base point,
+ * and then another four locations using the second 16 elements.
+ *
+ * Tables for other points have table[i] = iG for i in 0 .. 16. */
+
+/* gmul is the table of precomputed base points */
+static const smallfelem gmul[2][16][3] = {
+    {{{0, 0, 0, 0},
+      {0, 0, 0, 0},
+      {0, 0, 0, 0}},
+     {{0xf4a13945d898c296, 0x77037d812deb33a0, 0xf8bce6e563a440f2,
+       0x6b17d1f2e12c4247},
+      {0xcbb6406837bf51f5, 0x2bce33576b315ece, 0x8ee7eb4a7c0f9e16,
+       0x4fe342e2fe1a7f9b},
+      {1, 0, 0, 0}},
+     {{0x90e75cb48e14db63, 0x29493baaad651f7e, 0x8492592e326e25de,
+       0x0fa822bc2811aaa5},
+      {0xe41124545f462ee7, 0x34b1a65050fe82f5, 0x6f4ad4bcb3df188b,
+       0xbff44ae8f5dba80d},
+      {1, 0, 0, 0}},
+     {{0x93391ce2097992af, 0xe96c98fd0d35f1fa, 0xb257c0de95e02789,
+       0x300a4bbc89d6726f},
+      {0xaa54a291c08127a0, 0x5bb1eeada9d806a5, 0x7f1ddb25ff1e3c6f,
+       0x72aac7e0d09b4644},
+      {1, 0, 0, 0}},
+     {{0x57c84fc9d789bd85, 0xfc35ff7dc297eac3, 0xfb982fd588c6766e,
+       0x447d739beedb5e67},
+      {0x0c7e33c972e25b32, 0x3d349b95a7fae500, 0xe12e9d953a4aaff7,
+       0x2d4825ab834131ee},
+      {1, 0, 0, 0}},
+     {{0x13949c932a1d367f, 0xef7fbd2b1a0a11b7, 0xddc6068bb91dfc60,
+       0xef9519328a9c72ff},
+      {0x196035a77376d8a8, 0x23183b0895ca1740, 0xc1ee9807022c219c,
+       0x611e9fc37dbb2c9b},
+      {1, 0, 0, 0}},
+     {{0xcae2b1920b57f4bc, 0x2936df5ec6c9bc36, 0x7dea6482e11238bf,
+       0x550663797b51f5d8},
+      {0x44ffe216348a964c, 0x9fb3d576dbdefbe1, 0x0afa40018d9d50e5,
+       0x157164848aecb851},
+      {1, 0, 0, 0}},
+     {{0xe48ecafffc5cde01, 0x7ccd84e70d715f26, 0xa2e8f483f43e4391,
+       0xeb5d7745b21141ea},
+      {0xcac917e2731a3479, 0x85f22cfe2844b645, 0x0990e6a158006cee,
+       0xeafd72ebdbecc17b},
+      {1, 0, 0, 0}},
+     {{0x6cf20ffb313728be, 0x96439591a3c6b94a, 0x2736ff8344315fc5,
+       0xa6d39677a7849276},
+      {0xf2bab833c357f5f4, 0x824a920c2284059b, 0x66b8babd2d27ecdf,
+       0x674f84749b0b8816},
+      {1, 0, 0, 0}},
+     {{0x2df48c04677c8a3e, 0x74e02f080203a56b, 0x31855f7db8c7fedb,
+       0x4e769e7672c9ddad},
+      {0xa4c36165b824bbb0, 0xfb9ae16f3b9122a5, 0x1ec0057206947281,
+       0x42b99082de830663},
+      {1, 0, 0, 0}},
+     {{0x6ef95150dda868b9, 0xd1f89e799c0ce131, 0x7fdc1ca008a1c478,
+       0x78878ef61c6ce04d},
+      {0x9c62b9121fe0d976, 0x6ace570ebde08d4f, 0xde53142c12309def,
+       0xb6cb3f5d7b72c321},
+      {1, 0, 0, 0}},
+     {{0x7f991ed2c31a3573, 0x5b82dd5bd54fb496, 0x595c5220812ffcae,
+       0x0c88bc4d716b1287},
+      {0x3a57bf635f48aca8, 0x7c8181f4df2564f3, 0x18d1b5b39c04e6aa,
+       0xdd5ddea3f3901dc6},
+      {1, 0, 0, 0}},
+     {{0xe96a79fb3e72ad0c, 0x43a0a28c42ba792f, 0xefe0a423083e49f3,
+       0x68f344af6b317466},
+      {0xcdfe17db3fb24d4a, 0x668bfc2271f5c626, 0x604ed93c24d67ff3,
+       0x31b9c405f8540a20},
+      {1, 0, 0, 0}},
+     {{0xd36b4789a2582e7f, 0x0d1a10144ec39c28, 0x663c62c3edbad7a0,
+       0x4052bf4b6f461db9},
+      {0x235a27c3188d25eb, 0xe724f33999bfcc5b, 0x862be6bd71d70cc8,
+       0xfecf4d5190b0fc61},
+      {1, 0, 0, 0}},
+     {{0x74346c10a1d4cfac, 0xafdf5cc08526a7a4, 0x123202a8f62bff7a,
+       0x1eddbae2c802e41a},
+      {0x8fa0af2dd603f844, 0x36e06b7e4c701917, 0x0c45f45273db33a0,
+       0x43104d86560ebcfc},
+      {1, 0, 0, 0}},
+     {{0x9615b5110d1d78e5, 0x66b0de3225c4744b, 0x0a4a46fb6aaf363a,
+       0xb48e26b484f7a21c},
+      {0x06ebb0f621a01b2d, 0xc004e4048b7b0f98, 0x64131bcdfed6f668,
+       0xfac015404d4d3dab},
+      {1, 0, 0, 0}}},
+    {{{0, 0, 0, 0},
+      {0, 0, 0, 0},
+      {0, 0, 0, 0}},
+     {{0x3a5a9e22185a5943, 0x1ab919365c65dfb6, 0x21656b32262c71da,
+       0x7fe36b40af22af89},
+      {0xd50d152c699ca101, 0x74b3d5867b8af212, 0x9f09f40407dca6f1,
+       0xe697d45825b63624},
+      {1, 0, 0, 0}},
+     {{0xa84aa9397512218e, 0xe9a521b074ca0141, 0x57880b3a18a2e902,
+       0x4a5b506612a677a6},
+      {0x0beada7a4c4f3840, 0x626db15419e26d9d, 0xc42604fbe1627d40,
+       0xeb13461ceac089f1},
+      {1, 0, 0, 0}},
+     {{0xf9faed0927a43281, 0x5e52c4144103ecbc, 0xc342967aa815c857,
+       0x0781b8291c6a220a},
+      {0x5a8343ceeac55f80, 0x88f80eeee54a05e3, 0x97b2a14f12916434,
+       0x690cde8df0151593},
+      {1, 0, 0, 0}},
+     {{0xaee9c75df7f82f2a, 0x9e4c35874afdf43a, 0xf5622df437371326,
+       0x8a535f566ec73617},
+      {0xc5f9a0ac223094b7, 0xcde533864c8c7669, 0x37e02819085a92bf,
+       0x0455c08468b08bd7},
+      {1, 0, 0, 0}},
+     {{0x0c0a6e2c9477b5d9, 0xf9a4bf62876dc444, 0x5050a949b6cdc279,
+       0x06bada7ab77f8276},
+      {0xc8b4aed1ea48dac9, 0xdebd8a4b7ea1070f, 0x427d49101366eb70,
+       0x5b476dfd0e6cb18a},
+      {1, 0, 0, 0}},
+     {{0x7c5c3e44278c340a, 0x4d54606812d66f3b, 0x29a751b1ae23c5d8,
+       0x3e29864e8a2ec908},
+      {0x142d2a6626dbb850, 0xad1744c4765bd780, 0x1f150e68e322d1ed,
+       0x239b90ea3dc31e7e},
+      {1, 0, 0, 0}},
+     {{0x78c416527a53322a, 0x305dde6709776f8e, 0xdbcab759f8862ed4,
+       0x820f4dd949f72ff7},
+      {0x6cc544a62b5debd4, 0x75be5d937b4e8cc4, 0x1b481b1b215c14d3,
+       0x140406ec783a05ec},
+      {1, 0, 0, 0}},
+     {{0x6a703f10e895df07, 0xfd75f3fa01876bd8, 0xeb5b06e70ce08ffe,
+       0x68f6b8542783dfee},
+      {0x90c76f8a78712655, 0xcf5293d2f310bf7f, 0xfbc8044dfda45028,
+       0xcbe1feba92e40ce6},
+      {1, 0, 0, 0}},
+     {{0xe998ceea4396e4c1, 0xfc82ef0b6acea274, 0x230f729f2250e927,
+       0xd0b2f94d2f420109},
+      {0x4305adddb38d4966, 0x10b838f8624c3b45, 0x7db2636658954e7a,
+       0x971459828b0719e5},
+      {1, 0, 0, 0}},
+     {{0x4bd6b72623369fc9, 0x57f2929e53d0b876, 0xc2d5cba4f2340687,
+       0x961610004a866aba},
+      {0x49997bcd2e407a5e, 0x69ab197d92ddcb24, 0x2cf1f2438fe5131c,
+       0x7acb9fadcee75e44},
+      {1, 0, 0, 0}},
+     {{0x254e839423d2d4c0, 0xf57f0c917aea685b, 0xa60d880f6f75aaea,
+       0x24eb9acca333bf5b},
+      {0xe3de4ccb1cda5dea, 0xfeef9341c51a6b4f, 0x743125f88bac4c4d,
+       0x69f891c5acd079cc},
+      {1, 0, 0, 0}},
+     {{0xeee44b35702476b5, 0x7ed031a0e45c2258, 0xb422d1e7bd6f8514,
+       0xe51f547c5972a107},
+      {0xa25bcd6fc9cf343d, 0x8ca922ee097c184e, 0xa62f98b3a9fe9a06,
+       0x1c309a2b25bb1387},
+      {1, 0, 0, 0}},
+     {{0x9295dbeb1967c459, 0xb00148833472c98e, 0xc504977708011828,
+       0x20b87b8aa2c4e503},
+      {0x3063175de057c277, 0x1bd539338fe582dd, 0x0d11adef5f69a044,
+       0xf5c6fa49919776be},
+      {1, 0, 0, 0}},
+     {{0x8c944e760fd59e11, 0x3876cba1102fad5f, 0xa454c3fad83faa56,
+       0x1ed7d1b9332010b9},
+      {0xa1011a270024b889, 0x05e4d0dcac0cd344, 0x52b520f0eb6a2a24,
+       0x3a2b03f03217257a},
+      {1, 0, 0, 0}},
+     {{0xf20fc2afdf1d043d, 0xf330240db58d5a62, 0xfc7d229ca0058c3b,
+       0x15fee545c78dd9f6},
+      {0x501e82885bc98cda, 0x41ef80e5d046ac04, 0x557d9f49461210fb,
+       0x4ab5b6b2b8753f81},
+      {1, 0, 0, 0}}}
+};
+
+/*
+ * select_point selects the |idx|th point from a precomputation table and
+ * copies it to out.
+ */
+static void select_point(const u64 idx, unsigned int size,
+                         const smallfelem pre_comp[16][3], smallfelem out[3])
+{
+    unsigned i, j;
+    u64 *outlimbs = &out[0][0];
+
+    memset(out, 0, sizeof(*out) * 3);
+
+    for (i = 0; i < size; i++) {
+        const u64 *inlimbs = (u64 *)&pre_comp[i][0][0];
+        u64 mask = i ^ idx;
+        mask |= mask >> 4;
+        mask |= mask >> 2;
+        mask |= mask >> 1;
+        mask &= 1;
+        mask--;
+        for (j = 0; j < NLIMBS * 3; j++)
+            outlimbs[j] |= inlimbs[j] & mask;
+    }
+}
+
+/* get_bit returns the |i|th bit in |in| */
+static char get_bit(const felem_bytearray in, int i)
+{
+    if ((i < 0) || (i >= 256))
+        return 0;
+    return (in[i >> 3] >> (i & 7)) & 1;
+}
+
+/*
+ * Interleaved point multiplication using precomputed point multiples: The
+ * small point multiples 0*P, 1*P, ..., 17*P are in pre_comp[], the scalars
+ * in scalars[]. If g_scalar is non-NULL, we also add this multiple of the
+ * generator, using certain (large) precomputed multiples in g_pre_comp.
+ * Output point (X, Y, Z) is stored in x_out, y_out, z_out
+ */
+static void batch_mul(felem x_out, felem y_out, felem z_out,
+                      const felem_bytearray scalars[],
+                      const unsigned num_points, const u8 *g_scalar,
+                      const int mixed, const smallfelem pre_comp[][17][3],
+                      const smallfelem g_pre_comp[2][16][3])
+{
+    int i, skip;
+    unsigned num, gen_mul = (g_scalar != NULL);
+    felem nq[3], ftmp;
+    smallfelem tmp[3];
+    u64 bits;
+    u8 sign, digit;
+
+    /* set nq to the point at infinity */
+    memset(nq, 0, sizeof(nq));
+
+    /*
+     * Loop over all scalars msb-to-lsb, interleaving additions of multiples
+     * of the generator (two in each of the last 32 rounds) and additions of
+     * other points multiples (every 5th round).
+     */
+    skip = 1;                   /* save two point operations in the first
+                                 * round */
+    for (i = (num_points ? 255 : 31); i >= 0; --i) {
+        /* double */
+        if (!skip)
+            point_double(nq[0], nq[1], nq[2], nq[0], nq[1], nq[2]);
+
+        /* add multiples of the generator */
+        if (gen_mul && (i <= 31)) {
+            /* first, look 32 bits upwards */
+            bits = get_bit(g_scalar, i + 224) << 3;
+            bits |= get_bit(g_scalar, i + 160) << 2;
+            bits |= get_bit(g_scalar, i + 96) << 1;
+            bits |= get_bit(g_scalar, i + 32);
+            /* select the point to add, in constant time */
+            select_point(bits, 16, g_pre_comp[1], tmp);
+
+            if (!skip) {
+                /* Arg 1 below is for "mixed" */
+                point_add(nq[0], nq[1], nq[2],
+                          nq[0], nq[1], nq[2], 1, tmp[0], tmp[1], tmp[2]);
+            } else {
+                smallfelem_expand(nq[0], tmp[0]);
+                smallfelem_expand(nq[1], tmp[1]);
+                smallfelem_expand(nq[2], tmp[2]);
+                skip = 0;
+            }
+
+            /* second, look at the current position */
+            bits = get_bit(g_scalar, i + 192) << 3;
+            bits |= get_bit(g_scalar, i + 128) << 2;
+            bits |= get_bit(g_scalar, i + 64) << 1;
+            bits |= get_bit(g_scalar, i);
+            /* select the point to add, in constant time */
+            select_point(bits, 16, g_pre_comp[0], tmp);
+            /* Arg 1 below is for "mixed" */
+            point_add(nq[0], nq[1], nq[2],
+                      nq[0], nq[1], nq[2], 1, tmp[0], tmp[1], tmp[2]);
+        }
+
+        /* do other additions every 5 doublings */
+        if (num_points && (i % 5 == 0)) {
+            /* loop over all scalars */
+            for (num = 0; num < num_points; ++num) {
+                bits = get_bit(scalars[num], i + 4) << 5;
+                bits |= get_bit(scalars[num], i + 3) << 4;
+                bits |= get_bit(scalars[num], i + 2) << 3;
+                bits |= get_bit(scalars[num], i + 1) << 2;
+                bits |= get_bit(scalars[num], i) << 1;
+                bits |= get_bit(scalars[num], i - 1);
+                ec_GFp_nistp_recode_scalar_bits(&sign, &digit, bits);
+
+                /*
+                 * select the point to add or subtract, in constant time
+                 */
+                select_point(digit, 17, pre_comp[num], tmp);
+                smallfelem_neg(ftmp, tmp[1]); /* (X, -Y, Z) is the negative
+                                               * point */
+                copy_small_conditional(ftmp, tmp[1], (((limb) sign) - 1));
+                felem_contract(tmp[1], ftmp);
+
+                if (!skip) {
+                    point_add(nq[0], nq[1], nq[2],
+                              nq[0], nq[1], nq[2],
+                              mixed, tmp[0], tmp[1], tmp[2]);
+                } else {
+                    smallfelem_expand(nq[0], tmp[0]);
+                    smallfelem_expand(nq[1], tmp[1]);
+                    smallfelem_expand(nq[2], tmp[2]);
+                    skip = 0;
+                }
+            }
+        }
+    }
+    felem_assign(x_out, nq[0]);
+    felem_assign(y_out, nq[1]);
+    felem_assign(z_out, nq[2]);
+}
+
+/* Precomputation for the group generator. */
+struct nistp256_pre_comp_st {
+    smallfelem g_pre_comp[2][16][3];
+    CRYPTO_REF_COUNT references;
+    CRYPTO_RWLOCK *lock;
+};
+
+const EC_METHOD *EC_GFp_nistp256_method(void)
+{
+    static const EC_METHOD ret = {
+        EC_FLAGS_DEFAULT_OCT,
+        NID_X9_62_prime_field,
+        ec_GFp_nistp256_group_init,
+        ec_GFp_simple_group_finish,
+        ec_GFp_simple_group_clear_finish,
+        ec_GFp_nist_group_copy,
+        ec_GFp_nistp256_group_set_curve,
+        ec_GFp_simple_group_get_curve,
+        ec_GFp_simple_group_get_degree,
+        ec_group_simple_order_bits,
+        ec_GFp_simple_group_check_discriminant,
+        ec_GFp_simple_point_init,
+        ec_GFp_simple_point_finish,
+        ec_GFp_simple_point_clear_finish,
+        ec_GFp_simple_point_copy,
+        ec_GFp_simple_point_set_to_infinity,
+        ec_GFp_simple_set_Jprojective_coordinates_GFp,
+        ec_GFp_simple_get_Jprojective_coordinates_GFp,
+        ec_GFp_simple_point_set_affine_coordinates,
+        ec_GFp_nistp256_point_get_affine_coordinates,
+        0 /* point_set_compressed_coordinates */ ,
+        0 /* point2oct */ ,
+        0 /* oct2point */ ,
+        ec_GFp_simple_add,
+        ec_GFp_simple_dbl,
+        ec_GFp_simple_invert,
+        ec_GFp_simple_is_at_infinity,
+        ec_GFp_simple_is_on_curve,
+        ec_GFp_simple_cmp,
+        ec_GFp_simple_make_affine,
+        ec_GFp_simple_points_make_affine,
+        ec_GFp_nistp256_points_mul,
+        ec_GFp_nistp256_precompute_mult,
+        ec_GFp_nistp256_have_precompute_mult,
+        ec_GFp_nist_field_mul,
+        ec_GFp_nist_field_sqr,
+        0 /* field_div */ ,
+        ec_GFp_simple_field_inv,
+        0 /* field_encode */ ,
+        0 /* field_decode */ ,
+        0,                      /* field_set_to_one */
+        ec_key_simple_priv2oct,
+        ec_key_simple_oct2priv,
+        0, /* set private */
+        ec_key_simple_generate_key,
+        ec_key_simple_check_key,
+        ec_key_simple_generate_public_key,
+        0, /* keycopy */
+        0, /* keyfinish */
+        ecdh_simple_compute_key,
+        0, /* field_inverse_mod_ord */
+        0, /* blind_coordinates */
+        0, /* ladder_pre */
+        0, /* ladder_step */
+        0  /* ladder_post */
+    };
+
+    return &ret;
+}
+
+/******************************************************************************/
+/*
+ * FUNCTIONS TO MANAGE PRECOMPUTATION
+ */
+
+static NISTP256_PRE_COMP *nistp256_pre_comp_new(void)
+{
+    NISTP256_PRE_COMP *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        ECerr(EC_F_NISTP256_PRE_COMP_NEW, ERR_R_MALLOC_FAILURE);
+        return ret;
+    }
+
+    ret->references = 1;
+
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        ECerr(EC_F_NISTP256_PRE_COMP_NEW, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+NISTP256_PRE_COMP *EC_nistp256_pre_comp_dup(NISTP256_PRE_COMP *p)
+{
+    int i;
+    if (p != NULL)
+        CRYPTO_UP_REF(&p->references, &i, p->lock);
+    return p;
+}
+
+void EC_nistp256_pre_comp_free(NISTP256_PRE_COMP *pre)
+{
+    int i;
+
+    if (pre == NULL)
+        return;
+
+    CRYPTO_DOWN_REF(&pre->references, &i, pre->lock);
+    REF_PRINT_COUNT("EC_nistp256", x);
+    if (i > 0)
+        return;
+    REF_ASSERT_ISNT(i < 0);
+
+    CRYPTO_THREAD_lock_free(pre->lock);
+    OPENSSL_free(pre);
+}
+
+/******************************************************************************/
+/*
+ * OPENSSL EC_METHOD FUNCTIONS
+ */
+
+int ec_GFp_nistp256_group_init(EC_GROUP *group)
+{
+    int ret;
+    ret = ec_GFp_simple_group_init(group);
+    group->a_is_minus3 = 1;
+    return ret;
+}
+
+int ec_GFp_nistp256_group_set_curve(EC_GROUP *group, const BIGNUM *p,
+                                    const BIGNUM *a, const BIGNUM *b,
+                                    BN_CTX *ctx)
+{
+    int ret = 0;
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *curve_p, *curve_a, *curve_b;
+
+    if (ctx == NULL)
+        if ((ctx = new_ctx = BN_CTX_new()) == NULL)
+            return 0;
+    BN_CTX_start(ctx);
+    curve_p = BN_CTX_get(ctx);
+    curve_a = BN_CTX_get(ctx);
+    curve_b = BN_CTX_get(ctx);
+    if (curve_b == NULL)
+        goto err;
+    BN_bin2bn(nistp256_curve_params[0], sizeof(felem_bytearray), curve_p);
+    BN_bin2bn(nistp256_curve_params[1], sizeof(felem_bytearray), curve_a);
+    BN_bin2bn(nistp256_curve_params[2], sizeof(felem_bytearray), curve_b);
+    if ((BN_cmp(curve_p, p)) || (BN_cmp(curve_a, a)) || (BN_cmp(curve_b, b))) {
+        ECerr(EC_F_EC_GFP_NISTP256_GROUP_SET_CURVE,
+              EC_R_WRONG_CURVE_PARAMETERS);
+        goto err;
+    }
+    group->field_mod_func = BN_nist_mod_256;
+    ret = ec_GFp_simple_group_set_curve(group, p, a, b, ctx);
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+/*
+ * Takes the Jacobian coordinates (X, Y, Z) of a point and returns (X', Y') =
+ * (X/Z^2, Y/Z^3)
+ */
+int ec_GFp_nistp256_point_get_affine_coordinates(const EC_GROUP *group,
+                                                 const EC_POINT *point,
+                                                 BIGNUM *x, BIGNUM *y,
+                                                 BN_CTX *ctx)
+{
+    felem z1, z2, x_in, y_in;
+    smallfelem x_out, y_out;
+    longfelem tmp;
+
+    if (EC_POINT_is_at_infinity(group, point)) {
+        ECerr(EC_F_EC_GFP_NISTP256_POINT_GET_AFFINE_COORDINATES,
+              EC_R_POINT_AT_INFINITY);
+        return 0;
+    }
+    if ((!BN_to_felem(x_in, point->X)) || (!BN_to_felem(y_in, point->Y)) ||
+        (!BN_to_felem(z1, point->Z)))
+        return 0;
+    felem_inv(z2, z1);
+    felem_square(tmp, z2);
+    felem_reduce(z1, tmp);
+    felem_mul(tmp, x_in, z1);
+    felem_reduce(x_in, tmp);
+    felem_contract(x_out, x_in);
+    if (x != NULL) {
+        if (!smallfelem_to_BN(x, x_out)) {
+            ECerr(EC_F_EC_GFP_NISTP256_POINT_GET_AFFINE_COORDINATES,
+                  ERR_R_BN_LIB);
+            return 0;
+        }
+    }
+    felem_mul(tmp, z1, z2);
+    felem_reduce(z1, tmp);
+    felem_mul(tmp, y_in, z1);
+    felem_reduce(y_in, tmp);
+    felem_contract(y_out, y_in);
+    if (y != NULL) {
+        if (!smallfelem_to_BN(y, y_out)) {
+            ECerr(EC_F_EC_GFP_NISTP256_POINT_GET_AFFINE_COORDINATES,
+                  ERR_R_BN_LIB);
+            return 0;
+        }
+    }
+    return 1;
+}
+
+/* points below is of size |num|, and tmp_smallfelems is of size |num+1| */
+static void make_points_affine(size_t num, smallfelem points[][3],
+                               smallfelem tmp_smallfelems[])
+{
+    /*
+     * Runs in constant time, unless an input is the point at infinity (which
+     * normally shouldn't happen).
+     */
+    ec_GFp_nistp_points_make_affine_internal(num,
+                                             points,
+                                             sizeof(smallfelem),
+                                             tmp_smallfelems,
+                                             (void (*)(void *))smallfelem_one,
+                                             smallfelem_is_zero_int,
+                                             (void (*)(void *, const void *))
+                                             smallfelem_assign,
+                                             (void (*)(void *, const void *))
+                                             smallfelem_square_contract,
+                                             (void (*)
+                                              (void *, const void *,
+                                               const void *))
+                                             smallfelem_mul_contract,
+                                             (void (*)(void *, const void *))
+                                             smallfelem_inv_contract,
+                                             /* nothing to contract */
+                                             (void (*)(void *, const void *))
+                                             smallfelem_assign);
+}
+
+/*
+ * Computes scalar*generator + \sum scalars[i]*points[i], ignoring NULL
+ * values Result is stored in r (r can equal one of the inputs).
+ */
+int ec_GFp_nistp256_points_mul(const EC_GROUP *group, EC_POINT *r,
+                               const BIGNUM *scalar, size_t num,
+                               const EC_POINT *points[],
+                               const BIGNUM *scalars[], BN_CTX *ctx)
+{
+    int ret = 0;
+    int j;
+    int mixed = 0;
+    BIGNUM *x, *y, *z, *tmp_scalar;
+    felem_bytearray g_secret;
+    felem_bytearray *secrets = NULL;
+    smallfelem (*pre_comp)[17][3] = NULL;
+    smallfelem *tmp_smallfelems = NULL;
+    felem_bytearray tmp;
+    unsigned i, num_bytes;
+    int have_pre_comp = 0;
+    size_t num_points = num;
+    smallfelem x_in, y_in, z_in;
+    felem x_out, y_out, z_out;
+    NISTP256_PRE_COMP *pre = NULL;
+    const smallfelem(*g_pre_comp)[16][3] = NULL;
+    EC_POINT *generator = NULL;
+    const EC_POINT *p = NULL;
+    const BIGNUM *p_scalar = NULL;
+
+    BN_CTX_start(ctx);
+    x = BN_CTX_get(ctx);
+    y = BN_CTX_get(ctx);
+    z = BN_CTX_get(ctx);
+    tmp_scalar = BN_CTX_get(ctx);
+    if (tmp_scalar == NULL)
+        goto err;
+
+    if (scalar != NULL) {
+        pre = group->pre_comp.nistp256;
+        if (pre)
+            /* we have precomputation, try to use it */
+            g_pre_comp = (const smallfelem(*)[16][3])pre->g_pre_comp;
+        else
+            /* try to use the standard precomputation */
+            g_pre_comp = &gmul[0];
+        generator = EC_POINT_new(group);
+        if (generator == NULL)
+            goto err;
+        /* get the generator from precomputation */
+        if (!smallfelem_to_BN(x, g_pre_comp[0][1][0]) ||
+            !smallfelem_to_BN(y, g_pre_comp[0][1][1]) ||
+            !smallfelem_to_BN(z, g_pre_comp[0][1][2])) {
+            ECerr(EC_F_EC_GFP_NISTP256_POINTS_MUL, ERR_R_BN_LIB);
+            goto err;
+        }
+        if (!EC_POINT_set_Jprojective_coordinates_GFp(group,
+                                                      generator, x, y, z,
+                                                      ctx))
+            goto err;
+        if (0 == EC_POINT_cmp(group, generator, group->generator, ctx))
+            /* precomputation matches generator */
+            have_pre_comp = 1;
+        else
+            /*
+             * we don't have valid precomputation: treat the generator as a
+             * random point
+             */
+            num_points++;
+    }
+    if (num_points > 0) {
+        if (num_points >= 3) {
+            /*
+             * unless we precompute multiples for just one or two points,
+             * converting those into affine form is time well spent
+             */
+            mixed = 1;
+        }
+        secrets = OPENSSL_malloc(sizeof(*secrets) * num_points);
+        pre_comp = OPENSSL_malloc(sizeof(*pre_comp) * num_points);
+        if (mixed)
+            tmp_smallfelems =
+              OPENSSL_malloc(sizeof(*tmp_smallfelems) * (num_points * 17 + 1));
+        if ((secrets == NULL) || (pre_comp == NULL)
+            || (mixed && (tmp_smallfelems == NULL))) {
+            ECerr(EC_F_EC_GFP_NISTP256_POINTS_MUL, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+
+        /*
+         * we treat NULL scalars as 0, and NULL points as points at infinity,
+         * i.e., they contribute nothing to the linear combination
+         */
+        memset(secrets, 0, sizeof(*secrets) * num_points);
+        memset(pre_comp, 0, sizeof(*pre_comp) * num_points);
+        for (i = 0; i < num_points; ++i) {
+            if (i == num)
+                /*
+                 * we didn't have a valid precomputation, so we pick the
+                 * generator
+                 */
+            {
+                p = EC_GROUP_get0_generator(group);
+                p_scalar = scalar;
+            } else
+                /* the i^th point */
+            {
+                p = points[i];
+                p_scalar = scalars[i];
+            }
+            if ((p_scalar != NULL) && (p != NULL)) {
+                /* reduce scalar to 0 <= scalar < 2^256 */
+                if ((BN_num_bits(p_scalar) > 256)
+                    || (BN_is_negative(p_scalar))) {
+                    /*
+                     * this is an unusual input, and we don't guarantee
+                     * constant-timeness
+                     */
+                    if (!BN_nnmod(tmp_scalar, p_scalar, group->order, ctx)) {
+                        ECerr(EC_F_EC_GFP_NISTP256_POINTS_MUL, ERR_R_BN_LIB);
+                        goto err;
+                    }
+                    num_bytes = BN_bn2bin(tmp_scalar, tmp);
+                } else
+                    num_bytes = BN_bn2bin(p_scalar, tmp);
+                flip_endian(secrets[i], tmp, num_bytes);
+                /* precompute multiples */
+                if ((!BN_to_felem(x_out, p->X)) ||
+                    (!BN_to_felem(y_out, p->Y)) ||
+                    (!BN_to_felem(z_out, p->Z)))
+                    goto err;
+                felem_shrink(pre_comp[i][1][0], x_out);
+                felem_shrink(pre_comp[i][1][1], y_out);
+                felem_shrink(pre_comp[i][1][2], z_out);
+                for (j = 2; j <= 16; ++j) {
+                    if (j & 1) {
+                        point_add_small(pre_comp[i][j][0], pre_comp[i][j][1],
+                                        pre_comp[i][j][2], pre_comp[i][1][0],
+                                        pre_comp[i][1][1], pre_comp[i][1][2],
+                                        pre_comp[i][j - 1][0],
+                                        pre_comp[i][j - 1][1],
+                                        pre_comp[i][j - 1][2]);
+                    } else {
+                        point_double_small(pre_comp[i][j][0],
+                                           pre_comp[i][j][1],
+                                           pre_comp[i][j][2],
+                                           pre_comp[i][j / 2][0],
+                                           pre_comp[i][j / 2][1],
+                                           pre_comp[i][j / 2][2]);
+                    }
+                }
+            }
+        }
+        if (mixed)
+            make_points_affine(num_points * 17, pre_comp[0], tmp_smallfelems);
+    }
+
+    /* the scalar for the generator */
+    if ((scalar != NULL) && (have_pre_comp)) {
+        memset(g_secret, 0, sizeof(g_secret));
+        /* reduce scalar to 0 <= scalar < 2^256 */
+        if ((BN_num_bits(scalar) > 256) || (BN_is_negative(scalar))) {
+            /*
+             * this is an unusual input, and we don't guarantee
+             * constant-timeness
+             */
+            if (!BN_nnmod(tmp_scalar, scalar, group->order, ctx)) {
+                ECerr(EC_F_EC_GFP_NISTP256_POINTS_MUL, ERR_R_BN_LIB);
+                goto err;
+            }
+            num_bytes = BN_bn2bin(tmp_scalar, tmp);
+        } else
+            num_bytes = BN_bn2bin(scalar, tmp);
+        flip_endian(g_secret, tmp, num_bytes);
+        /* do the multiplication with generator precomputation */
+        batch_mul(x_out, y_out, z_out,
+                  (const felem_bytearray(*))secrets, num_points,
+                  g_secret,
+                  mixed, (const smallfelem(*)[17][3])pre_comp, g_pre_comp);
+    } else
+        /* do the multiplication without generator precomputation */
+        batch_mul(x_out, y_out, z_out,
+                  (const felem_bytearray(*))secrets, num_points,
+                  NULL, mixed, (const smallfelem(*)[17][3])pre_comp, NULL);
+    /* reduce the output to its unique minimal representation */
+    felem_contract(x_in, x_out);
+    felem_contract(y_in, y_out);
+    felem_contract(z_in, z_out);
+    if ((!smallfelem_to_BN(x, x_in)) || (!smallfelem_to_BN(y, y_in)) ||
+        (!smallfelem_to_BN(z, z_in))) {
+        ECerr(EC_F_EC_GFP_NISTP256_POINTS_MUL, ERR_R_BN_LIB);
+        goto err;
+    }
+    ret = EC_POINT_set_Jprojective_coordinates_GFp(group, r, x, y, z, ctx);
+
+ err:
+    BN_CTX_end(ctx);
+    EC_POINT_free(generator);
+    OPENSSL_free(secrets);
+    OPENSSL_free(pre_comp);
+    OPENSSL_free(tmp_smallfelems);
+    return ret;
+}
+
+int ec_GFp_nistp256_precompute_mult(EC_GROUP *group, BN_CTX *ctx)
+{
+    int ret = 0;
+    NISTP256_PRE_COMP *pre = NULL;
+    int i, j;
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *x, *y;
+    EC_POINT *generator = NULL;
+    smallfelem tmp_smallfelems[32];
+    felem x_tmp, y_tmp, z_tmp;
+
+    /* throw away old precomputation */
+    EC_pre_comp_free(group);
+    if (ctx == NULL)
+        if ((ctx = new_ctx = BN_CTX_new()) == NULL)
+            return 0;
+    BN_CTX_start(ctx);
+    x = BN_CTX_get(ctx);
+    y = BN_CTX_get(ctx);
+    if (y == NULL)
+        goto err;
+    /* get the generator */
+    if (group->generator == NULL)
+        goto err;
+    generator = EC_POINT_new(group);
+    if (generator == NULL)
+        goto err;
+    BN_bin2bn(nistp256_curve_params[3], sizeof(felem_bytearray), x);
+    BN_bin2bn(nistp256_curve_params[4], sizeof(felem_bytearray), y);
+    if (!EC_POINT_set_affine_coordinates(group, generator, x, y, ctx))
+        goto err;
+    if ((pre = nistp256_pre_comp_new()) == NULL)
+        goto err;
+    /*
+     * if the generator is the standard one, use built-in precomputation
+     */
+    if (0 == EC_POINT_cmp(group, generator, group->generator, ctx)) {
+        memcpy(pre->g_pre_comp, gmul, sizeof(pre->g_pre_comp));
+        goto done;
+    }
+    if ((!BN_to_felem(x_tmp, group->generator->X)) ||
+        (!BN_to_felem(y_tmp, group->generator->Y)) ||
+        (!BN_to_felem(z_tmp, group->generator->Z)))
+        goto err;
+    felem_shrink(pre->g_pre_comp[0][1][0], x_tmp);
+    felem_shrink(pre->g_pre_comp[0][1][1], y_tmp);
+    felem_shrink(pre->g_pre_comp[0][1][2], z_tmp);
+    /*
+     * compute 2^64*G, 2^128*G, 2^192*G for the first table, 2^32*G, 2^96*G,
+     * 2^160*G, 2^224*G for the second one
+     */
+    for (i = 1; i <= 8; i <<= 1) {
+        point_double_small(pre->g_pre_comp[1][i][0], pre->g_pre_comp[1][i][1],
+                           pre->g_pre_comp[1][i][2], pre->g_pre_comp[0][i][0],
+                           pre->g_pre_comp[0][i][1],
+                           pre->g_pre_comp[0][i][2]);
+        for (j = 0; j < 31; ++j) {
+            point_double_small(pre->g_pre_comp[1][i][0],
+                               pre->g_pre_comp[1][i][1],
+                               pre->g_pre_comp[1][i][2],
+                               pre->g_pre_comp[1][i][0],
+                               pre->g_pre_comp[1][i][1],
+                               pre->g_pre_comp[1][i][2]);
+        }
+        if (i == 8)
+            break;
+        point_double_small(pre->g_pre_comp[0][2 * i][0],
+                           pre->g_pre_comp[0][2 * i][1],
+                           pre->g_pre_comp[0][2 * i][2],
+                           pre->g_pre_comp[1][i][0], pre->g_pre_comp[1][i][1],
+                           pre->g_pre_comp[1][i][2]);
+        for (j = 0; j < 31; ++j) {
+            point_double_small(pre->g_pre_comp[0][2 * i][0],
+                               pre->g_pre_comp[0][2 * i][1],
+                               pre->g_pre_comp[0][2 * i][2],
+                               pre->g_pre_comp[0][2 * i][0],
+                               pre->g_pre_comp[0][2 * i][1],
+                               pre->g_pre_comp[0][2 * i][2]);
+        }
+    }
+    for (i = 0; i < 2; i++) {
+        /* g_pre_comp[i][0] is the point at infinity */
+        memset(pre->g_pre_comp[i][0], 0, sizeof(pre->g_pre_comp[i][0]));
+        /* the remaining multiples */
+        /* 2^64*G + 2^128*G resp. 2^96*G + 2^160*G */
+        point_add_small(pre->g_pre_comp[i][6][0], pre->g_pre_comp[i][6][1],
+                        pre->g_pre_comp[i][6][2], pre->g_pre_comp[i][4][0],
+                        pre->g_pre_comp[i][4][1], pre->g_pre_comp[i][4][2],
+                        pre->g_pre_comp[i][2][0], pre->g_pre_comp[i][2][1],
+                        pre->g_pre_comp[i][2][2]);
+        /* 2^64*G + 2^192*G resp. 2^96*G + 2^224*G */
+        point_add_small(pre->g_pre_comp[i][10][0], pre->g_pre_comp[i][10][1],
+                        pre->g_pre_comp[i][10][2], pre->g_pre_comp[i][8][0],
+                        pre->g_pre_comp[i][8][1], pre->g_pre_comp[i][8][2],
+                        pre->g_pre_comp[i][2][0], pre->g_pre_comp[i][2][1],
+                        pre->g_pre_comp[i][2][2]);
+        /* 2^128*G + 2^192*G resp. 2^160*G + 2^224*G */
+        point_add_small(pre->g_pre_comp[i][12][0], pre->g_pre_comp[i][12][1],
+                        pre->g_pre_comp[i][12][2], pre->g_pre_comp[i][8][0],
+                        pre->g_pre_comp[i][8][1], pre->g_pre_comp[i][8][2],
+                        pre->g_pre_comp[i][4][0], pre->g_pre_comp[i][4][1],
+                        pre->g_pre_comp[i][4][2]);
+        /*
+         * 2^64*G + 2^128*G + 2^192*G resp. 2^96*G + 2^160*G + 2^224*G
+         */
+        point_add_small(pre->g_pre_comp[i][14][0], pre->g_pre_comp[i][14][1],
+                        pre->g_pre_comp[i][14][2], pre->g_pre_comp[i][12][0],
+                        pre->g_pre_comp[i][12][1], pre->g_pre_comp[i][12][2],
+                        pre->g_pre_comp[i][2][0], pre->g_pre_comp[i][2][1],
+                        pre->g_pre_comp[i][2][2]);
+        for (j = 1; j < 8; ++j) {
+            /* odd multiples: add G resp. 2^32*G */
+            point_add_small(pre->g_pre_comp[i][2 * j + 1][0],
+                            pre->g_pre_comp[i][2 * j + 1][1],
+                            pre->g_pre_comp[i][2 * j + 1][2],
+                            pre->g_pre_comp[i][2 * j][0],
+                            pre->g_pre_comp[i][2 * j][1],
+                            pre->g_pre_comp[i][2 * j][2],
+                            pre->g_pre_comp[i][1][0],
+                            pre->g_pre_comp[i][1][1],
+                            pre->g_pre_comp[i][1][2]);
+        }
+    }
+    make_points_affine(31, &(pre->g_pre_comp[0][1]), tmp_smallfelems);
+
+ done:
+    SETPRECOMP(group, nistp256, pre);
+    pre = NULL;
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    EC_POINT_free(generator);
+    BN_CTX_free(new_ctx);
+    EC_nistp256_pre_comp_free(pre);
+    return ret;
+}
+
+int ec_GFp_nistp256_have_precompute_mult(const EC_GROUP *group)
+{
+    return HAVEPRECOMP(group, nistp256);
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistp521.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistp521.c
new file mode 100644
index 000000000..2f47772a3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistp521.c
@@ -0,0 +1,2159 @@
+/*
+ * Copyright 2011-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* Copyright 2011 Google Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ *
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ */
+
+/*
+ * A 64-bit implementation of the NIST P-521 elliptic curve point multiplication
+ *
+ * OpenSSL integration was taken from Emilia Kasper's work in ecp_nistp224.c.
+ * Otherwise based on Emilia's P224 work, which was inspired by my curve25519
+ * work which got its smarts from Daniel J. Bernstein's work on the same.
+ */
+
+#include <openssl/e_os2.h>
+#ifdef OPENSSL_NO_EC_NISTP_64_GCC_128
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <string.h>
+# include <openssl/err.h>
+# include "ec_lcl.h"
+
+# if defined(__SIZEOF_INT128__) && __SIZEOF_INT128__==16
+  /* even with gcc, the typedef won't work for 32-bit platforms */
+typedef __uint128_t uint128_t;  /* nonstandard; implemented by gcc on 64-bit
+                                 * platforms */
+# else
+#  error "Your compiler doesn't appear to support 128-bit integer types"
+# endif
+
+typedef uint8_t u8;
+typedef uint64_t u64;
+
+/*
+ * The underlying field. P521 operates over GF(2^521-1). We can serialise an
+ * element of this field into 66 bytes where the most significant byte
+ * contains only a single bit. We call this an felem_bytearray.
+ */
+
+typedef u8 felem_bytearray[66];
+
+/*
+ * These are the parameters of P521, taken from FIPS 186-3, section D.1.2.5.
+ * These values are big-endian.
+ */
+static const felem_bytearray nistp521_curve_params[5] = {
+    {0x01, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, /* p */
+     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+     0xff, 0xff},
+    {0x01, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, /* a = -3 */
+     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+     0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
+     0xff, 0xfc},
+    {0x00, 0x51, 0x95, 0x3e, 0xb9, 0x61, 0x8e, 0x1c, /* b */
+     0x9a, 0x1f, 0x92, 0x9a, 0x21, 0xa0, 0xb6, 0x85,
+     0x40, 0xee, 0xa2, 0xda, 0x72, 0x5b, 0x99, 0xb3,
+     0x15, 0xf3, 0xb8, 0xb4, 0x89, 0x91, 0x8e, 0xf1,
+     0x09, 0xe1, 0x56, 0x19, 0x39, 0x51, 0xec, 0x7e,
+     0x93, 0x7b, 0x16, 0x52, 0xc0, 0xbd, 0x3b, 0xb1,
+     0xbf, 0x07, 0x35, 0x73, 0xdf, 0x88, 0x3d, 0x2c,
+     0x34, 0xf1, 0xef, 0x45, 0x1f, 0xd4, 0x6b, 0x50,
+     0x3f, 0x00},
+    {0x00, 0xc6, 0x85, 0x8e, 0x06, 0xb7, 0x04, 0x04, /* x */
+     0xe9, 0xcd, 0x9e, 0x3e, 0xcb, 0x66, 0x23, 0x95,
+     0xb4, 0x42, 0x9c, 0x64, 0x81, 0x39, 0x05, 0x3f,
+     0xb5, 0x21, 0xf8, 0x28, 0xaf, 0x60, 0x6b, 0x4d,
+     0x3d, 0xba, 0xa1, 0x4b, 0x5e, 0x77, 0xef, 0xe7,
+     0x59, 0x28, 0xfe, 0x1d, 0xc1, 0x27, 0xa2, 0xff,
+     0xa8, 0xde, 0x33, 0x48, 0xb3, 0xc1, 0x85, 0x6a,
+     0x42, 0x9b, 0xf9, 0x7e, 0x7e, 0x31, 0xc2, 0xe5,
+     0xbd, 0x66},
+    {0x01, 0x18, 0x39, 0x29, 0x6a, 0x78, 0x9a, 0x3b, /* y */
+     0xc0, 0x04, 0x5c, 0x8a, 0x5f, 0xb4, 0x2c, 0x7d,
+     0x1b, 0xd9, 0x98, 0xf5, 0x44, 0x49, 0x57, 0x9b,
+     0x44, 0x68, 0x17, 0xaf, 0xbd, 0x17, 0x27, 0x3e,
+     0x66, 0x2c, 0x97, 0xee, 0x72, 0x99, 0x5e, 0xf4,
+     0x26, 0x40, 0xc5, 0x50, 0xb9, 0x01, 0x3f, 0xad,
+     0x07, 0x61, 0x35, 0x3c, 0x70, 0x86, 0xa2, 0x72,
+     0xc2, 0x40, 0x88, 0xbe, 0x94, 0x76, 0x9f, 0xd1,
+     0x66, 0x50}
+};
+
+/*-
+ * The representation of field elements.
+ * ------------------------------------
+ *
+ * We represent field elements with nine values. These values are either 64 or
+ * 128 bits and the field element represented is:
+ *   v[0]*2^0 + v[1]*2^58 + v[2]*2^116 + ... + v[8]*2^464  (mod p)
+ * Each of the nine values is called a 'limb'. Since the limbs are spaced only
+ * 58 bits apart, but are greater than 58 bits in length, the most significant
+ * bits of each limb overlap with the least significant bits of the next.
+ *
+ * A field element with 64-bit limbs is an 'felem'. One with 128-bit limbs is a
+ * 'largefelem' */
+
+# define NLIMBS 9
+
+typedef uint64_t limb;
+typedef limb felem[NLIMBS];
+typedef uint128_t largefelem[NLIMBS];
+
+static const limb bottom57bits = 0x1ffffffffffffff;
+static const limb bottom58bits = 0x3ffffffffffffff;
+
+/*
+ * bin66_to_felem takes a little-endian byte array and converts it into felem
+ * form. This assumes that the CPU is little-endian.
+ */
+static void bin66_to_felem(felem out, const u8 in[66])
+{
+    out[0] = (*((limb *) & in[0])) & bottom58bits;
+    out[1] = (*((limb *) & in[7]) >> 2) & bottom58bits;
+    out[2] = (*((limb *) & in[14]) >> 4) & bottom58bits;
+    out[3] = (*((limb *) & in[21]) >> 6) & bottom58bits;
+    out[4] = (*((limb *) & in[29])) & bottom58bits;
+    out[5] = (*((limb *) & in[36]) >> 2) & bottom58bits;
+    out[6] = (*((limb *) & in[43]) >> 4) & bottom58bits;
+    out[7] = (*((limb *) & in[50]) >> 6) & bottom58bits;
+    out[8] = (*((limb *) & in[58])) & bottom57bits;
+}
+
+/*
+ * felem_to_bin66 takes an felem and serialises into a little endian, 66 byte
+ * array. This assumes that the CPU is little-endian.
+ */
+static void felem_to_bin66(u8 out[66], const felem in)
+{
+    memset(out, 0, 66);
+    (*((limb *) & out[0])) = in[0];
+    (*((limb *) & out[7])) |= in[1] << 2;
+    (*((limb *) & out[14])) |= in[2] << 4;
+    (*((limb *) & out[21])) |= in[3] << 6;
+    (*((limb *) & out[29])) = in[4];
+    (*((limb *) & out[36])) |= in[5] << 2;
+    (*((limb *) & out[43])) |= in[6] << 4;
+    (*((limb *) & out[50])) |= in[7] << 6;
+    (*((limb *) & out[58])) = in[8];
+}
+
+/* To preserve endianness when using BN_bn2bin and BN_bin2bn */
+static void flip_endian(u8 *out, const u8 *in, unsigned len)
+{
+    unsigned i;
+    for (i = 0; i < len; ++i)
+        out[i] = in[len - 1 - i];
+}
+
+/* BN_to_felem converts an OpenSSL BIGNUM into an felem */
+static int BN_to_felem(felem out, const BIGNUM *bn)
+{
+    felem_bytearray b_in;
+    felem_bytearray b_out;
+    unsigned num_bytes;
+
+    /* BN_bn2bin eats leading zeroes */
+    memset(b_out, 0, sizeof(b_out));
+    num_bytes = BN_num_bytes(bn);
+    if (num_bytes > sizeof(b_out)) {
+        ECerr(EC_F_BN_TO_FELEM, EC_R_BIGNUM_OUT_OF_RANGE);
+        return 0;
+    }
+    if (BN_is_negative(bn)) {
+        ECerr(EC_F_BN_TO_FELEM, EC_R_BIGNUM_OUT_OF_RANGE);
+        return 0;
+    }
+    num_bytes = BN_bn2bin(bn, b_in);
+    flip_endian(b_out, b_in, num_bytes);
+    bin66_to_felem(out, b_out);
+    return 1;
+}
+
+/* felem_to_BN converts an felem into an OpenSSL BIGNUM */
+static BIGNUM *felem_to_BN(BIGNUM *out, const felem in)
+{
+    felem_bytearray b_in, b_out;
+    felem_to_bin66(b_in, in);
+    flip_endian(b_out, b_in, sizeof(b_out));
+    return BN_bin2bn(b_out, sizeof(b_out), out);
+}
+
+/*-
+ * Field operations
+ * ----------------
+ */
+
+static void felem_one(felem out)
+{
+    out[0] = 1;
+    out[1] = 0;
+    out[2] = 0;
+    out[3] = 0;
+    out[4] = 0;
+    out[5] = 0;
+    out[6] = 0;
+    out[7] = 0;
+    out[8] = 0;
+}
+
+static void felem_assign(felem out, const felem in)
+{
+    out[0] = in[0];
+    out[1] = in[1];
+    out[2] = in[2];
+    out[3] = in[3];
+    out[4] = in[4];
+    out[5] = in[5];
+    out[6] = in[6];
+    out[7] = in[7];
+    out[8] = in[8];
+}
+
+/* felem_sum64 sets out = out + in. */
+static void felem_sum64(felem out, const felem in)
+{
+    out[0] += in[0];
+    out[1] += in[1];
+    out[2] += in[2];
+    out[3] += in[3];
+    out[4] += in[4];
+    out[5] += in[5];
+    out[6] += in[6];
+    out[7] += in[7];
+    out[8] += in[8];
+}
+
+/* felem_scalar sets out = in * scalar */
+static void felem_scalar(felem out, const felem in, limb scalar)
+{
+    out[0] = in[0] * scalar;
+    out[1] = in[1] * scalar;
+    out[2] = in[2] * scalar;
+    out[3] = in[3] * scalar;
+    out[4] = in[4] * scalar;
+    out[5] = in[5] * scalar;
+    out[6] = in[6] * scalar;
+    out[7] = in[7] * scalar;
+    out[8] = in[8] * scalar;
+}
+
+/* felem_scalar64 sets out = out * scalar */
+static void felem_scalar64(felem out, limb scalar)
+{
+    out[0] *= scalar;
+    out[1] *= scalar;
+    out[2] *= scalar;
+    out[3] *= scalar;
+    out[4] *= scalar;
+    out[5] *= scalar;
+    out[6] *= scalar;
+    out[7] *= scalar;
+    out[8] *= scalar;
+}
+
+/* felem_scalar128 sets out = out * scalar */
+static void felem_scalar128(largefelem out, limb scalar)
+{
+    out[0] *= scalar;
+    out[1] *= scalar;
+    out[2] *= scalar;
+    out[3] *= scalar;
+    out[4] *= scalar;
+    out[5] *= scalar;
+    out[6] *= scalar;
+    out[7] *= scalar;
+    out[8] *= scalar;
+}
+
+/*-
+ * felem_neg sets |out| to |-in|
+ * On entry:
+ *   in[i] < 2^59 + 2^14
+ * On exit:
+ *   out[i] < 2^62
+ */
+static void felem_neg(felem out, const felem in)
+{
+    /* In order to prevent underflow, we subtract from 0 mod p. */
+    static const limb two62m3 = (((limb) 1) << 62) - (((limb) 1) << 5);
+    static const limb two62m2 = (((limb) 1) << 62) - (((limb) 1) << 4);
+
+    out[0] = two62m3 - in[0];
+    out[1] = two62m2 - in[1];
+    out[2] = two62m2 - in[2];
+    out[3] = two62m2 - in[3];
+    out[4] = two62m2 - in[4];
+    out[5] = two62m2 - in[5];
+    out[6] = two62m2 - in[6];
+    out[7] = two62m2 - in[7];
+    out[8] = two62m2 - in[8];
+}
+
+/*-
+ * felem_diff64 subtracts |in| from |out|
+ * On entry:
+ *   in[i] < 2^59 + 2^14
+ * On exit:
+ *   out[i] < out[i] + 2^62
+ */
+static void felem_diff64(felem out, const felem in)
+{
+    /*
+     * In order to prevent underflow, we add 0 mod p before subtracting.
+     */
+    static const limb two62m3 = (((limb) 1) << 62) - (((limb) 1) << 5);
+    static const limb two62m2 = (((limb) 1) << 62) - (((limb) 1) << 4);
+
+    out[0] += two62m3 - in[0];
+    out[1] += two62m2 - in[1];
+    out[2] += two62m2 - in[2];
+    out[3] += two62m2 - in[3];
+    out[4] += two62m2 - in[4];
+    out[5] += two62m2 - in[5];
+    out[6] += two62m2 - in[6];
+    out[7] += two62m2 - in[7];
+    out[8] += two62m2 - in[8];
+}
+
+/*-
+ * felem_diff_128_64 subtracts |in| from |out|
+ * On entry:
+ *   in[i] < 2^62 + 2^17
+ * On exit:
+ *   out[i] < out[i] + 2^63
+ */
+static void felem_diff_128_64(largefelem out, const felem in)
+{
+    /*
+     * In order to prevent underflow, we add 0 mod p before subtracting.
+     */
+    static const limb two63m6 = (((limb) 1) << 62) - (((limb) 1) << 5);
+    static const limb two63m5 = (((limb) 1) << 62) - (((limb) 1) << 4);
+
+    out[0] += two63m6 - in[0];
+    out[1] += two63m5 - in[1];
+    out[2] += two63m5 - in[2];
+    out[3] += two63m5 - in[3];
+    out[4] += two63m5 - in[4];
+    out[5] += two63m5 - in[5];
+    out[6] += two63m5 - in[6];
+    out[7] += two63m5 - in[7];
+    out[8] += two63m5 - in[8];
+}
+
+/*-
+ * felem_diff_128_64 subtracts |in| from |out|
+ * On entry:
+ *   in[i] < 2^126
+ * On exit:
+ *   out[i] < out[i] + 2^127 - 2^69
+ */
+static void felem_diff128(largefelem out, const largefelem in)
+{
+    /*
+     * In order to prevent underflow, we add 0 mod p before subtracting.
+     */
+    static const uint128_t two127m70 =
+        (((uint128_t) 1) << 127) - (((uint128_t) 1) << 70);
+    static const uint128_t two127m69 =
+        (((uint128_t) 1) << 127) - (((uint128_t) 1) << 69);
+
+    out[0] += (two127m70 - in[0]);
+    out[1] += (two127m69 - in[1]);
+    out[2] += (two127m69 - in[2]);
+    out[3] += (two127m69 - in[3]);
+    out[4] += (two127m69 - in[4]);
+    out[5] += (two127m69 - in[5]);
+    out[6] += (two127m69 - in[6]);
+    out[7] += (two127m69 - in[7]);
+    out[8] += (two127m69 - in[8]);
+}
+
+/*-
+ * felem_square sets |out| = |in|^2
+ * On entry:
+ *   in[i] < 2^62
+ * On exit:
+ *   out[i] < 17 * max(in[i]) * max(in[i])
+ */
+static void felem_square(largefelem out, const felem in)
+{
+    felem inx2, inx4;
+    felem_scalar(inx2, in, 2);
+    felem_scalar(inx4, in, 4);
+
+    /*-
+     * We have many cases were we want to do
+     *   in[x] * in[y] +
+     *   in[y] * in[x]
+     * This is obviously just
+     *   2 * in[x] * in[y]
+     * However, rather than do the doubling on the 128 bit result, we
+     * double one of the inputs to the multiplication by reading from
+     * |inx2|
+     */
+
+    out[0] = ((uint128_t) in[0]) * in[0];
+    out[1] = ((uint128_t) in[0]) * inx2[1];
+    out[2] = ((uint128_t) in[0]) * inx2[2] + ((uint128_t) in[1]) * in[1];
+    out[3] = ((uint128_t) in[0]) * inx2[3] + ((uint128_t) in[1]) * inx2[2];
+    out[4] = ((uint128_t) in[0]) * inx2[4] +
+             ((uint128_t) in[1]) * inx2[3] + ((uint128_t) in[2]) * in[2];
+    out[5] = ((uint128_t) in[0]) * inx2[5] +
+             ((uint128_t) in[1]) * inx2[4] + ((uint128_t) in[2]) * inx2[3];
+    out[6] = ((uint128_t) in[0]) * inx2[6] +
+             ((uint128_t) in[1]) * inx2[5] +
+             ((uint128_t) in[2]) * inx2[4] + ((uint128_t) in[3]) * in[3];
+    out[7] = ((uint128_t) in[0]) * inx2[7] +
+             ((uint128_t) in[1]) * inx2[6] +
+             ((uint128_t) in[2]) * inx2[5] + ((uint128_t) in[3]) * inx2[4];
+    out[8] = ((uint128_t) in[0]) * inx2[8] +
+             ((uint128_t) in[1]) * inx2[7] +
+             ((uint128_t) in[2]) * inx2[6] +
+             ((uint128_t) in[3]) * inx2[5] + ((uint128_t) in[4]) * in[4];
+
+    /*
+     * The remaining limbs fall above 2^521, with the first falling at 2^522.
+     * They correspond to locations one bit up from the limbs produced above
+     * so we would have to multiply by two to align them. Again, rather than
+     * operate on the 128-bit result, we double one of the inputs to the
+     * multiplication. If we want to double for both this reason, and the
+     * reason above, then we end up multiplying by four.
+     */
+
+    /* 9 */
+    out[0] += ((uint128_t) in[1]) * inx4[8] +
+              ((uint128_t) in[2]) * inx4[7] +
+              ((uint128_t) in[3]) * inx4[6] + ((uint128_t) in[4]) * inx4[5];
+
+    /* 10 */
+    out[1] += ((uint128_t) in[2]) * inx4[8] +
+              ((uint128_t) in[3]) * inx4[7] +
+              ((uint128_t) in[4]) * inx4[6] + ((uint128_t) in[5]) * inx2[5];
+
+    /* 11 */
+    out[2] += ((uint128_t) in[3]) * inx4[8] +
+              ((uint128_t) in[4]) * inx4[7] + ((uint128_t) in[5]) * inx4[6];
+
+    /* 12 */
+    out[3] += ((uint128_t) in[4]) * inx4[8] +
+              ((uint128_t) in[5]) * inx4[7] + ((uint128_t) in[6]) * inx2[6];
+
+    /* 13 */
+    out[4] += ((uint128_t) in[5]) * inx4[8] + ((uint128_t) in[6]) * inx4[7];
+
+    /* 14 */
+    out[5] += ((uint128_t) in[6]) * inx4[8] + ((uint128_t) in[7]) * inx2[7];
+
+    /* 15 */
+    out[6] += ((uint128_t) in[7]) * inx4[8];
+
+    /* 16 */
+    out[7] += ((uint128_t) in[8]) * inx2[8];
+}
+
+/*-
+ * felem_mul sets |out| = |in1| * |in2|
+ * On entry:
+ *   in1[i] < 2^64
+ *   in2[i] < 2^63
+ * On exit:
+ *   out[i] < 17 * max(in1[i]) * max(in2[i])
+ */
+static void felem_mul(largefelem out, const felem in1, const felem in2)
+{
+    felem in2x2;
+    felem_scalar(in2x2, in2, 2);
+
+    out[0] = ((uint128_t) in1[0]) * in2[0];
+
+    out[1] = ((uint128_t) in1[0]) * in2[1] +
+             ((uint128_t) in1[1]) * in2[0];
+
+    out[2] = ((uint128_t) in1[0]) * in2[2] +
+             ((uint128_t) in1[1]) * in2[1] +
+             ((uint128_t) in1[2]) * in2[0];
+
+    out[3] = ((uint128_t) in1[0]) * in2[3] +
+             ((uint128_t) in1[1]) * in2[2] +
+             ((uint128_t) in1[2]) * in2[1] +
+             ((uint128_t) in1[3]) * in2[0];
+
+    out[4] = ((uint128_t) in1[0]) * in2[4] +
+             ((uint128_t) in1[1]) * in2[3] +
+             ((uint128_t) in1[2]) * in2[2] +
+             ((uint128_t) in1[3]) * in2[1] +
+             ((uint128_t) in1[4]) * in2[0];
+
+    out[5] = ((uint128_t) in1[0]) * in2[5] +
+             ((uint128_t) in1[1]) * in2[4] +
+             ((uint128_t) in1[2]) * in2[3] +
+             ((uint128_t) in1[3]) * in2[2] +
+             ((uint128_t) in1[4]) * in2[1] +
+             ((uint128_t) in1[5]) * in2[0];
+
+    out[6] = ((uint128_t) in1[0]) * in2[6] +
+             ((uint128_t) in1[1]) * in2[5] +
+             ((uint128_t) in1[2]) * in2[4] +
+             ((uint128_t) in1[3]) * in2[3] +
+             ((uint128_t) in1[4]) * in2[2] +
+             ((uint128_t) in1[5]) * in2[1] +
+             ((uint128_t) in1[6]) * in2[0];
+
+    out[7] = ((uint128_t) in1[0]) * in2[7] +
+             ((uint128_t) in1[1]) * in2[6] +
+             ((uint128_t) in1[2]) * in2[5] +
+             ((uint128_t) in1[3]) * in2[4] +
+             ((uint128_t) in1[4]) * in2[3] +
+             ((uint128_t) in1[5]) * in2[2] +
+             ((uint128_t) in1[6]) * in2[1] +
+             ((uint128_t) in1[7]) * in2[0];
+
+    out[8] = ((uint128_t) in1[0]) * in2[8] +
+             ((uint128_t) in1[1]) * in2[7] +
+             ((uint128_t) in1[2]) * in2[6] +
+             ((uint128_t) in1[3]) * in2[5] +
+             ((uint128_t) in1[4]) * in2[4] +
+             ((uint128_t) in1[5]) * in2[3] +
+             ((uint128_t) in1[6]) * in2[2] +
+             ((uint128_t) in1[7]) * in2[1] +
+             ((uint128_t) in1[8]) * in2[0];
+
+    /* See comment in felem_square about the use of in2x2 here */
+
+    out[0] += ((uint128_t) in1[1]) * in2x2[8] +
+              ((uint128_t) in1[2]) * in2x2[7] +
+              ((uint128_t) in1[3]) * in2x2[6] +
+              ((uint128_t) in1[4]) * in2x2[5] +
+              ((uint128_t) in1[5]) * in2x2[4] +
+              ((uint128_t) in1[6]) * in2x2[3] +
+              ((uint128_t) in1[7]) * in2x2[2] +
+              ((uint128_t) in1[8]) * in2x2[1];
+
+    out[1] += ((uint128_t) in1[2]) * in2x2[8] +
+              ((uint128_t) in1[3]) * in2x2[7] +
+              ((uint128_t) in1[4]) * in2x2[6] +
+              ((uint128_t) in1[5]) * in2x2[5] +
+              ((uint128_t) in1[6]) * in2x2[4] +
+              ((uint128_t) in1[7]) * in2x2[3] +
+              ((uint128_t) in1[8]) * in2x2[2];
+
+    out[2] += ((uint128_t) in1[3]) * in2x2[8] +
+              ((uint128_t) in1[4]) * in2x2[7] +
+              ((uint128_t) in1[5]) * in2x2[6] +
+              ((uint128_t) in1[6]) * in2x2[5] +
+              ((uint128_t) in1[7]) * in2x2[4] +
+              ((uint128_t) in1[8]) * in2x2[3];
+
+    out[3] += ((uint128_t) in1[4]) * in2x2[8] +
+              ((uint128_t) in1[5]) * in2x2[7] +
+              ((uint128_t) in1[6]) * in2x2[6] +
+              ((uint128_t) in1[7]) * in2x2[5] +
+              ((uint128_t) in1[8]) * in2x2[4];
+
+    out[4] += ((uint128_t) in1[5]) * in2x2[8] +
+              ((uint128_t) in1[6]) * in2x2[7] +
+              ((uint128_t) in1[7]) * in2x2[6] +
+              ((uint128_t) in1[8]) * in2x2[5];
+
+    out[5] += ((uint128_t) in1[6]) * in2x2[8] +
+              ((uint128_t) in1[7]) * in2x2[7] +
+              ((uint128_t) in1[8]) * in2x2[6];
+
+    out[6] += ((uint128_t) in1[7]) * in2x2[8] +
+              ((uint128_t) in1[8]) * in2x2[7];
+
+    out[7] += ((uint128_t) in1[8]) * in2x2[8];
+}
+
+static const limb bottom52bits = 0xfffffffffffff;
+
+/*-
+ * felem_reduce converts a largefelem to an felem.
+ * On entry:
+ *   in[i] < 2^128
+ * On exit:
+ *   out[i] < 2^59 + 2^14
+ */
+static void felem_reduce(felem out, const largefelem in)
+{
+    u64 overflow1, overflow2;
+
+    out[0] = ((limb) in[0]) & bottom58bits;
+    out[1] = ((limb) in[1]) & bottom58bits;
+    out[2] = ((limb) in[2]) & bottom58bits;
+    out[3] = ((limb) in[3]) & bottom58bits;
+    out[4] = ((limb) in[4]) & bottom58bits;
+    out[5] = ((limb) in[5]) & bottom58bits;
+    out[6] = ((limb) in[6]) & bottom58bits;
+    out[7] = ((limb) in[7]) & bottom58bits;
+    out[8] = ((limb) in[8]) & bottom58bits;
+
+    /* out[i] < 2^58 */
+
+    out[1] += ((limb) in[0]) >> 58;
+    out[1] += (((limb) (in[0] >> 64)) & bottom52bits) << 6;
+    /*-
+     * out[1] < 2^58 + 2^6 + 2^58
+     *        = 2^59 + 2^6
+     */
+    out[2] += ((limb) (in[0] >> 64)) >> 52;
+
+    out[2] += ((limb) in[1]) >> 58;
+    out[2] += (((limb) (in[1] >> 64)) & bottom52bits) << 6;
+    out[3] += ((limb) (in[1] >> 64)) >> 52;
+
+    out[3] += ((limb) in[2]) >> 58;
+    out[3] += (((limb) (in[2] >> 64)) & bottom52bits) << 6;
+    out[4] += ((limb) (in[2] >> 64)) >> 52;
+
+    out[4] += ((limb) in[3]) >> 58;
+    out[4] += (((limb) (in[3] >> 64)) & bottom52bits) << 6;
+    out[5] += ((limb) (in[3] >> 64)) >> 52;
+
+    out[5] += ((limb) in[4]) >> 58;
+    out[5] += (((limb) (in[4] >> 64)) & bottom52bits) << 6;
+    out[6] += ((limb) (in[4] >> 64)) >> 52;
+
+    out[6] += ((limb) in[5]) >> 58;
+    out[6] += (((limb) (in[5] >> 64)) & bottom52bits) << 6;
+    out[7] += ((limb) (in[5] >> 64)) >> 52;
+
+    out[7] += ((limb) in[6]) >> 58;
+    out[7] += (((limb) (in[6] >> 64)) & bottom52bits) << 6;
+    out[8] += ((limb) (in[6] >> 64)) >> 52;
+
+    out[8] += ((limb) in[7]) >> 58;
+    out[8] += (((limb) (in[7] >> 64)) & bottom52bits) << 6;
+    /*-
+     * out[x > 1] < 2^58 + 2^6 + 2^58 + 2^12
+     *            < 2^59 + 2^13
+     */
+    overflow1 = ((limb) (in[7] >> 64)) >> 52;
+
+    overflow1 += ((limb) in[8]) >> 58;
+    overflow1 += (((limb) (in[8] >> 64)) & bottom52bits) << 6;
+    overflow2 = ((limb) (in[8] >> 64)) >> 52;
+
+    overflow1 <<= 1;            /* overflow1 < 2^13 + 2^7 + 2^59 */
+    overflow2 <<= 1;            /* overflow2 < 2^13 */
+
+    out[0] += overflow1;        /* out[0] < 2^60 */
+    out[1] += overflow2;        /* out[1] < 2^59 + 2^6 + 2^13 */
+
+    out[1] += out[0] >> 58;
+    out[0] &= bottom58bits;
+    /*-
+     * out[0] < 2^58
+     * out[1] < 2^59 + 2^6 + 2^13 + 2^2
+     *        < 2^59 + 2^14
+     */
+}
+
+static void felem_square_reduce(felem out, const felem in)
+{
+    largefelem tmp;
+    felem_square(tmp, in);
+    felem_reduce(out, tmp);
+}
+
+static void felem_mul_reduce(felem out, const felem in1, const felem in2)
+{
+    largefelem tmp;
+    felem_mul(tmp, in1, in2);
+    felem_reduce(out, tmp);
+}
+
+/*-
+ * felem_inv calculates |out| = |in|^{-1}
+ *
+ * Based on Fermat's Little Theorem:
+ *   a^p = a (mod p)
+ *   a^{p-1} = 1 (mod p)
+ *   a^{p-2} = a^{-1} (mod p)
+ */
+static void felem_inv(felem out, const felem in)
+{
+    felem ftmp, ftmp2, ftmp3, ftmp4;
+    largefelem tmp;
+    unsigned i;
+
+    felem_square(tmp, in);
+    felem_reduce(ftmp, tmp);    /* 2^1 */
+    felem_mul(tmp, in, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^2 - 2^0 */
+    felem_assign(ftmp2, ftmp);
+    felem_square(tmp, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^3 - 2^1 */
+    felem_mul(tmp, in, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^3 - 2^0 */
+    felem_square(tmp, ftmp);
+    felem_reduce(ftmp, tmp);    /* 2^4 - 2^1 */
+
+    felem_square(tmp, ftmp2);
+    felem_reduce(ftmp3, tmp);   /* 2^3 - 2^1 */
+    felem_square(tmp, ftmp3);
+    felem_reduce(ftmp3, tmp);   /* 2^4 - 2^2 */
+    felem_mul(tmp, ftmp3, ftmp2);
+    felem_reduce(ftmp3, tmp);   /* 2^4 - 2^0 */
+
+    felem_assign(ftmp2, ftmp3);
+    felem_square(tmp, ftmp3);
+    felem_reduce(ftmp3, tmp);   /* 2^5 - 2^1 */
+    felem_square(tmp, ftmp3);
+    felem_reduce(ftmp3, tmp);   /* 2^6 - 2^2 */
+    felem_square(tmp, ftmp3);
+    felem_reduce(ftmp3, tmp);   /* 2^7 - 2^3 */
+    felem_square(tmp, ftmp3);
+    felem_reduce(ftmp3, tmp);   /* 2^8 - 2^4 */
+    felem_assign(ftmp4, ftmp3);
+    felem_mul(tmp, ftmp3, ftmp);
+    felem_reduce(ftmp4, tmp);   /* 2^8 - 2^1 */
+    felem_square(tmp, ftmp4);
+    felem_reduce(ftmp4, tmp);   /* 2^9 - 2^2 */
+    felem_mul(tmp, ftmp3, ftmp2);
+    felem_reduce(ftmp3, tmp);   /* 2^8 - 2^0 */
+    felem_assign(ftmp2, ftmp3);
+
+    for (i = 0; i < 8; i++) {
+        felem_square(tmp, ftmp3);
+        felem_reduce(ftmp3, tmp); /* 2^16 - 2^8 */
+    }
+    felem_mul(tmp, ftmp3, ftmp2);
+    felem_reduce(ftmp3, tmp);   /* 2^16 - 2^0 */
+    felem_assign(ftmp2, ftmp3);
+
+    for (i = 0; i < 16; i++) {
+        felem_square(tmp, ftmp3);
+        felem_reduce(ftmp3, tmp); /* 2^32 - 2^16 */
+    }
+    felem_mul(tmp, ftmp3, ftmp2);
+    felem_reduce(ftmp3, tmp);   /* 2^32 - 2^0 */
+    felem_assign(ftmp2, ftmp3);
+
+    for (i = 0; i < 32; i++) {
+        felem_square(tmp, ftmp3);
+        felem_reduce(ftmp3, tmp); /* 2^64 - 2^32 */
+    }
+    felem_mul(tmp, ftmp3, ftmp2);
+    felem_reduce(ftmp3, tmp);   /* 2^64 - 2^0 */
+    felem_assign(ftmp2, ftmp3);
+
+    for (i = 0; i < 64; i++) {
+        felem_square(tmp, ftmp3);
+        felem_reduce(ftmp3, tmp); /* 2^128 - 2^64 */
+    }
+    felem_mul(tmp, ftmp3, ftmp2);
+    felem_reduce(ftmp3, tmp);   /* 2^128 - 2^0 */
+    felem_assign(ftmp2, ftmp3);
+
+    for (i = 0; i < 128; i++) {
+        felem_square(tmp, ftmp3);
+        felem_reduce(ftmp3, tmp); /* 2^256 - 2^128 */
+    }
+    felem_mul(tmp, ftmp3, ftmp2);
+    felem_reduce(ftmp3, tmp);   /* 2^256 - 2^0 */
+    felem_assign(ftmp2, ftmp3);
+
+    for (i = 0; i < 256; i++) {
+        felem_square(tmp, ftmp3);
+        felem_reduce(ftmp3, tmp); /* 2^512 - 2^256 */
+    }
+    felem_mul(tmp, ftmp3, ftmp2);
+    felem_reduce(ftmp3, tmp);   /* 2^512 - 2^0 */
+
+    for (i = 0; i < 9; i++) {
+        felem_square(tmp, ftmp3);
+        felem_reduce(ftmp3, tmp); /* 2^521 - 2^9 */
+    }
+    felem_mul(tmp, ftmp3, ftmp4);
+    felem_reduce(ftmp3, tmp);   /* 2^512 - 2^2 */
+    felem_mul(tmp, ftmp3, in);
+    felem_reduce(out, tmp);     /* 2^512 - 3 */
+}
+
+/* This is 2^521-1, expressed as an felem */
+static const felem kPrime = {
+    0x03ffffffffffffff, 0x03ffffffffffffff, 0x03ffffffffffffff,
+    0x03ffffffffffffff, 0x03ffffffffffffff, 0x03ffffffffffffff,
+    0x03ffffffffffffff, 0x03ffffffffffffff, 0x01ffffffffffffff
+};
+
+/*-
+ * felem_is_zero returns a limb with all bits set if |in| == 0 (mod p) and 0
+ * otherwise.
+ * On entry:
+ *   in[i] < 2^59 + 2^14
+ */
+static limb felem_is_zero(const felem in)
+{
+    felem ftmp;
+    limb is_zero, is_p;
+    felem_assign(ftmp, in);
+
+    ftmp[0] += ftmp[8] >> 57;
+    ftmp[8] &= bottom57bits;
+    /* ftmp[8] < 2^57 */
+    ftmp[1] += ftmp[0] >> 58;
+    ftmp[0] &= bottom58bits;
+    ftmp[2] += ftmp[1] >> 58;
+    ftmp[1] &= bottom58bits;
+    ftmp[3] += ftmp[2] >> 58;
+    ftmp[2] &= bottom58bits;
+    ftmp[4] += ftmp[3] >> 58;
+    ftmp[3] &= bottom58bits;
+    ftmp[5] += ftmp[4] >> 58;
+    ftmp[4] &= bottom58bits;
+    ftmp[6] += ftmp[5] >> 58;
+    ftmp[5] &= bottom58bits;
+    ftmp[7] += ftmp[6] >> 58;
+    ftmp[6] &= bottom58bits;
+    ftmp[8] += ftmp[7] >> 58;
+    ftmp[7] &= bottom58bits;
+    /* ftmp[8] < 2^57 + 4 */
+
+    /*
+     * The ninth limb of 2*(2^521-1) is 0x03ffffffffffffff, which is greater
+     * than our bound for ftmp[8]. Therefore we only have to check if the
+     * zero is zero or 2^521-1.
+     */
+
+    is_zero = 0;
+    is_zero |= ftmp[0];
+    is_zero |= ftmp[1];
+    is_zero |= ftmp[2];
+    is_zero |= ftmp[3];
+    is_zero |= ftmp[4];
+    is_zero |= ftmp[5];
+    is_zero |= ftmp[6];
+    is_zero |= ftmp[7];
+    is_zero |= ftmp[8];
+
+    is_zero--;
+    /*
+     * We know that ftmp[i] < 2^63, therefore the only way that the top bit
+     * can be set is if is_zero was 0 before the decrement.
+     */
+    is_zero = 0 - (is_zero >> 63);
+
+    is_p = ftmp[0] ^ kPrime[0];
+    is_p |= ftmp[1] ^ kPrime[1];
+    is_p |= ftmp[2] ^ kPrime[2];
+    is_p |= ftmp[3] ^ kPrime[3];
+    is_p |= ftmp[4] ^ kPrime[4];
+    is_p |= ftmp[5] ^ kPrime[5];
+    is_p |= ftmp[6] ^ kPrime[6];
+    is_p |= ftmp[7] ^ kPrime[7];
+    is_p |= ftmp[8] ^ kPrime[8];
+
+    is_p--;
+    is_p = 0 - (is_p >> 63);
+
+    is_zero |= is_p;
+    return is_zero;
+}
+
+static int felem_is_zero_int(const void *in)
+{
+    return (int)(felem_is_zero(in) & ((limb) 1));
+}
+
+/*-
+ * felem_contract converts |in| to its unique, minimal representation.
+ * On entry:
+ *   in[i] < 2^59 + 2^14
+ */
+static void felem_contract(felem out, const felem in)
+{
+    limb is_p, is_greater, sign;
+    static const limb two58 = ((limb) 1) << 58;
+
+    felem_assign(out, in);
+
+    out[0] += out[8] >> 57;
+    out[8] &= bottom57bits;
+    /* out[8] < 2^57 */
+    out[1] += out[0] >> 58;
+    out[0] &= bottom58bits;
+    out[2] += out[1] >> 58;
+    out[1] &= bottom58bits;
+    out[3] += out[2] >> 58;
+    out[2] &= bottom58bits;
+    out[4] += out[3] >> 58;
+    out[3] &= bottom58bits;
+    out[5] += out[4] >> 58;
+    out[4] &= bottom58bits;
+    out[6] += out[5] >> 58;
+    out[5] &= bottom58bits;
+    out[7] += out[6] >> 58;
+    out[6] &= bottom58bits;
+    out[8] += out[7] >> 58;
+    out[7] &= bottom58bits;
+    /* out[8] < 2^57 + 4 */
+
+    /*
+     * If the value is greater than 2^521-1 then we have to subtract 2^521-1
+     * out. See the comments in felem_is_zero regarding why we don't test for
+     * other multiples of the prime.
+     */
+
+    /*
+     * First, if |out| is equal to 2^521-1, we subtract it out to get zero.
+     */
+
+    is_p = out[0] ^ kPrime[0];
+    is_p |= out[1] ^ kPrime[1];
+    is_p |= out[2] ^ kPrime[2];
+    is_p |= out[3] ^ kPrime[3];
+    is_p |= out[4] ^ kPrime[4];
+    is_p |= out[5] ^ kPrime[5];
+    is_p |= out[6] ^ kPrime[6];
+    is_p |= out[7] ^ kPrime[7];
+    is_p |= out[8] ^ kPrime[8];
+
+    is_p--;
+    is_p &= is_p << 32;
+    is_p &= is_p << 16;
+    is_p &= is_p << 8;
+    is_p &= is_p << 4;
+    is_p &= is_p << 2;
+    is_p &= is_p << 1;
+    is_p = 0 - (is_p >> 63);
+    is_p = ~is_p;
+
+    /* is_p is 0 iff |out| == 2^521-1 and all ones otherwise */
+
+    out[0] &= is_p;
+    out[1] &= is_p;
+    out[2] &= is_p;
+    out[3] &= is_p;
+    out[4] &= is_p;
+    out[5] &= is_p;
+    out[6] &= is_p;
+    out[7] &= is_p;
+    out[8] &= is_p;
+
+    /*
+     * In order to test that |out| >= 2^521-1 we need only test if out[8] >>
+     * 57 is greater than zero as (2^521-1) + x >= 2^522
+     */
+    is_greater = out[8] >> 57;
+    is_greater |= is_greater << 32;
+    is_greater |= is_greater << 16;
+    is_greater |= is_greater << 8;
+    is_greater |= is_greater << 4;
+    is_greater |= is_greater << 2;
+    is_greater |= is_greater << 1;
+    is_greater = 0 - (is_greater >> 63);
+
+    out[0] -= kPrime[0] & is_greater;
+    out[1] -= kPrime[1] & is_greater;
+    out[2] -= kPrime[2] & is_greater;
+    out[3] -= kPrime[3] & is_greater;
+    out[4] -= kPrime[4] & is_greater;
+    out[5] -= kPrime[5] & is_greater;
+    out[6] -= kPrime[6] & is_greater;
+    out[7] -= kPrime[7] & is_greater;
+    out[8] -= kPrime[8] & is_greater;
+
+    /* Eliminate negative coefficients */
+    sign = -(out[0] >> 63);
+    out[0] += (two58 & sign);
+    out[1] -= (1 & sign);
+    sign = -(out[1] >> 63);
+    out[1] += (two58 & sign);
+    out[2] -= (1 & sign);
+    sign = -(out[2] >> 63);
+    out[2] += (two58 & sign);
+    out[3] -= (1 & sign);
+    sign = -(out[3] >> 63);
+    out[3] += (two58 & sign);
+    out[4] -= (1 & sign);
+    sign = -(out[4] >> 63);
+    out[4] += (two58 & sign);
+    out[5] -= (1 & sign);
+    sign = -(out[0] >> 63);
+    out[5] += (two58 & sign);
+    out[6] -= (1 & sign);
+    sign = -(out[6] >> 63);
+    out[6] += (two58 & sign);
+    out[7] -= (1 & sign);
+    sign = -(out[7] >> 63);
+    out[7] += (two58 & sign);
+    out[8] -= (1 & sign);
+    sign = -(out[5] >> 63);
+    out[5] += (two58 & sign);
+    out[6] -= (1 & sign);
+    sign = -(out[6] >> 63);
+    out[6] += (two58 & sign);
+    out[7] -= (1 & sign);
+    sign = -(out[7] >> 63);
+    out[7] += (two58 & sign);
+    out[8] -= (1 & sign);
+}
+
+/*-
+ * Group operations
+ * ----------------
+ *
+ * Building on top of the field operations we have the operations on the
+ * elliptic curve group itself. Points on the curve are represented in Jacobian
+ * coordinates */
+
+/*-
+ * point_double calculates 2*(x_in, y_in, z_in)
+ *
+ * The method is taken from:
+ *   http://hyperelliptic.org/EFD/g1p/auto-shortw-jacobian-3.html#doubling-dbl-2001-b
+ *
+ * Outputs can equal corresponding inputs, i.e., x_out == x_in is allowed.
+ * while x_out == y_in is not (maybe this works, but it's not tested). */
+static void
+point_double(felem x_out, felem y_out, felem z_out,
+             const felem x_in, const felem y_in, const felem z_in)
+{
+    largefelem tmp, tmp2;
+    felem delta, gamma, beta, alpha, ftmp, ftmp2;
+
+    felem_assign(ftmp, x_in);
+    felem_assign(ftmp2, x_in);
+
+    /* delta = z^2 */
+    felem_square(tmp, z_in);
+    felem_reduce(delta, tmp);   /* delta[i] < 2^59 + 2^14 */
+
+    /* gamma = y^2 */
+    felem_square(tmp, y_in);
+    felem_reduce(gamma, tmp);   /* gamma[i] < 2^59 + 2^14 */
+
+    /* beta = x*gamma */
+    felem_mul(tmp, x_in, gamma);
+    felem_reduce(beta, tmp);    /* beta[i] < 2^59 + 2^14 */
+
+    /* alpha = 3*(x-delta)*(x+delta) */
+    felem_diff64(ftmp, delta);
+    /* ftmp[i] < 2^61 */
+    felem_sum64(ftmp2, delta);
+    /* ftmp2[i] < 2^60 + 2^15 */
+    felem_scalar64(ftmp2, 3);
+    /* ftmp2[i] < 3*2^60 + 3*2^15 */
+    felem_mul(tmp, ftmp, ftmp2);
+    /*-
+     * tmp[i] < 17(3*2^121 + 3*2^76)
+     *        = 61*2^121 + 61*2^76
+     *        < 64*2^121 + 64*2^76
+     *        = 2^127 + 2^82
+     *        < 2^128
+     */
+    felem_reduce(alpha, tmp);
+
+    /* x' = alpha^2 - 8*beta */
+    felem_square(tmp, alpha);
+    /*
+     * tmp[i] < 17*2^120 < 2^125
+     */
+    felem_assign(ftmp, beta);
+    felem_scalar64(ftmp, 8);
+    /* ftmp[i] < 2^62 + 2^17 */
+    felem_diff_128_64(tmp, ftmp);
+    /* tmp[i] < 2^125 + 2^63 + 2^62 + 2^17 */
+    felem_reduce(x_out, tmp);
+
+    /* z' = (y + z)^2 - gamma - delta */
+    felem_sum64(delta, gamma);
+    /* delta[i] < 2^60 + 2^15 */
+    felem_assign(ftmp, y_in);
+    felem_sum64(ftmp, z_in);
+    /* ftmp[i] < 2^60 + 2^15 */
+    felem_square(tmp, ftmp);
+    /*
+     * tmp[i] < 17(2^122) < 2^127
+     */
+    felem_diff_128_64(tmp, delta);
+    /* tmp[i] < 2^127 + 2^63 */
+    felem_reduce(z_out, tmp);
+
+    /* y' = alpha*(4*beta - x') - 8*gamma^2 */
+    felem_scalar64(beta, 4);
+    /* beta[i] < 2^61 + 2^16 */
+    felem_diff64(beta, x_out);
+    /* beta[i] < 2^61 + 2^60 + 2^16 */
+    felem_mul(tmp, alpha, beta);
+    /*-
+     * tmp[i] < 17*((2^59 + 2^14)(2^61 + 2^60 + 2^16))
+     *        = 17*(2^120 + 2^75 + 2^119 + 2^74 + 2^75 + 2^30)
+     *        = 17*(2^120 + 2^119 + 2^76 + 2^74 + 2^30)
+     *        < 2^128
+     */
+    felem_square(tmp2, gamma);
+    /*-
+     * tmp2[i] < 17*(2^59 + 2^14)^2
+     *         = 17*(2^118 + 2^74 + 2^28)
+     */
+    felem_scalar128(tmp2, 8);
+    /*-
+     * tmp2[i] < 8*17*(2^118 + 2^74 + 2^28)
+     *         = 2^125 + 2^121 + 2^81 + 2^77 + 2^35 + 2^31
+     *         < 2^126
+     */
+    felem_diff128(tmp, tmp2);
+    /*-
+     * tmp[i] < 2^127 - 2^69 + 17(2^120 + 2^119 + 2^76 + 2^74 + 2^30)
+     *        = 2^127 + 2^124 + 2^122 + 2^120 + 2^118 + 2^80 + 2^78 + 2^76 +
+     *          2^74 + 2^69 + 2^34 + 2^30
+     *        < 2^128
+     */
+    felem_reduce(y_out, tmp);
+}
+
+/* copy_conditional copies in to out iff mask is all ones. */
+static void copy_conditional(felem out, const felem in, limb mask)
+{
+    unsigned i;
+    for (i = 0; i < NLIMBS; ++i) {
+        const limb tmp = mask & (in[i] ^ out[i]);
+        out[i] ^= tmp;
+    }
+}
+
+/*-
+ * point_add calculates (x1, y1, z1) + (x2, y2, z2)
+ *
+ * The method is taken from
+ *   http://hyperelliptic.org/EFD/g1p/auto-shortw-jacobian-3.html#addition-add-2007-bl,
+ * adapted for mixed addition (z2 = 1, or z2 = 0 for the point at infinity).
+ *
+ * This function includes a branch for checking whether the two input points
+ * are equal (while not equal to the point at infinity). See comment below
+ * on constant-time.
+ */
+static void point_add(felem x3, felem y3, felem z3,
+                      const felem x1, const felem y1, const felem z1,
+                      const int mixed, const felem x2, const felem y2,
+                      const felem z2)
+{
+    felem ftmp, ftmp2, ftmp3, ftmp4, ftmp5, ftmp6, x_out, y_out, z_out;
+    largefelem tmp, tmp2;
+    limb x_equal, y_equal, z1_is_zero, z2_is_zero;
+
+    z1_is_zero = felem_is_zero(z1);
+    z2_is_zero = felem_is_zero(z2);
+
+    /* ftmp = z1z1 = z1**2 */
+    felem_square(tmp, z1);
+    felem_reduce(ftmp, tmp);
+
+    if (!mixed) {
+        /* ftmp2 = z2z2 = z2**2 */
+        felem_square(tmp, z2);
+        felem_reduce(ftmp2, tmp);
+
+        /* u1 = ftmp3 = x1*z2z2 */
+        felem_mul(tmp, x1, ftmp2);
+        felem_reduce(ftmp3, tmp);
+
+        /* ftmp5 = z1 + z2 */
+        felem_assign(ftmp5, z1);
+        felem_sum64(ftmp5, z2);
+        /* ftmp5[i] < 2^61 */
+
+        /* ftmp5 = (z1 + z2)**2 - z1z1 - z2z2 = 2*z1z2 */
+        felem_square(tmp, ftmp5);
+        /* tmp[i] < 17*2^122 */
+        felem_diff_128_64(tmp, ftmp);
+        /* tmp[i] < 17*2^122 + 2^63 */
+        felem_diff_128_64(tmp, ftmp2);
+        /* tmp[i] < 17*2^122 + 2^64 */
+        felem_reduce(ftmp5, tmp);
+
+        /* ftmp2 = z2 * z2z2 */
+        felem_mul(tmp, ftmp2, z2);
+        felem_reduce(ftmp2, tmp);
+
+        /* s1 = ftmp6 = y1 * z2**3 */
+        felem_mul(tmp, y1, ftmp2);
+        felem_reduce(ftmp6, tmp);
+    } else {
+        /*
+         * We'll assume z2 = 1 (special case z2 = 0 is handled later)
+         */
+
+        /* u1 = ftmp3 = x1*z2z2 */
+        felem_assign(ftmp3, x1);
+
+        /* ftmp5 = 2*z1z2 */
+        felem_scalar(ftmp5, z1, 2);
+
+        /* s1 = ftmp6 = y1 * z2**3 */
+        felem_assign(ftmp6, y1);
+    }
+
+    /* u2 = x2*z1z1 */
+    felem_mul(tmp, x2, ftmp);
+    /* tmp[i] < 17*2^120 */
+
+    /* h = ftmp4 = u2 - u1 */
+    felem_diff_128_64(tmp, ftmp3);
+    /* tmp[i] < 17*2^120 + 2^63 */
+    felem_reduce(ftmp4, tmp);
+
+    x_equal = felem_is_zero(ftmp4);
+
+    /* z_out = ftmp5 * h */
+    felem_mul(tmp, ftmp5, ftmp4);
+    felem_reduce(z_out, tmp);
+
+    /* ftmp = z1 * z1z1 */
+    felem_mul(tmp, ftmp, z1);
+    felem_reduce(ftmp, tmp);
+
+    /* s2 = tmp = y2 * z1**3 */
+    felem_mul(tmp, y2, ftmp);
+    /* tmp[i] < 17*2^120 */
+
+    /* r = ftmp5 = (s2 - s1)*2 */
+    felem_diff_128_64(tmp, ftmp6);
+    /* tmp[i] < 17*2^120 + 2^63 */
+    felem_reduce(ftmp5, tmp);
+    y_equal = felem_is_zero(ftmp5);
+    felem_scalar64(ftmp5, 2);
+    /* ftmp5[i] < 2^61 */
+
+    if (x_equal && y_equal && !z1_is_zero && !z2_is_zero) {
+        /*
+         * This is obviously not constant-time but it will almost-never happen
+         * for ECDH / ECDSA. The case where it can happen is during scalar-mult
+         * where the intermediate value gets very close to the group order.
+         * Since |ec_GFp_nistp_recode_scalar_bits| produces signed digits for
+         * the scalar, it's possible for the intermediate value to be a small
+         * negative multiple of the base point, and for the final signed digit
+         * to be the same value. We believe that this only occurs for the scalar
+         * 1fffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
+         * ffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb
+         * 71e913863f7, in that case the penultimate intermediate is -9G and
+         * the final digit is also -9G. Since this only happens for a single
+         * scalar, the timing leak is irrelevent. (Any attacker who wanted to
+         * check whether a secret scalar was that exact value, can already do
+         * so.)
+         */
+        point_double(x3, y3, z3, x1, y1, z1);
+        return;
+    }
+
+    /* I = ftmp = (2h)**2 */
+    felem_assign(ftmp, ftmp4);
+    felem_scalar64(ftmp, 2);
+    /* ftmp[i] < 2^61 */
+    felem_square(tmp, ftmp);
+    /* tmp[i] < 17*2^122 */
+    felem_reduce(ftmp, tmp);
+
+    /* J = ftmp2 = h * I */
+    felem_mul(tmp, ftmp4, ftmp);
+    felem_reduce(ftmp2, tmp);
+
+    /* V = ftmp4 = U1 * I */
+    felem_mul(tmp, ftmp3, ftmp);
+    felem_reduce(ftmp4, tmp);
+
+    /* x_out = r**2 - J - 2V */
+    felem_square(tmp, ftmp5);
+    /* tmp[i] < 17*2^122 */
+    felem_diff_128_64(tmp, ftmp2);
+    /* tmp[i] < 17*2^122 + 2^63 */
+    felem_assign(ftmp3, ftmp4);
+    felem_scalar64(ftmp4, 2);
+    /* ftmp4[i] < 2^61 */
+    felem_diff_128_64(tmp, ftmp4);
+    /* tmp[i] < 17*2^122 + 2^64 */
+    felem_reduce(x_out, tmp);
+
+    /* y_out = r(V-x_out) - 2 * s1 * J */
+    felem_diff64(ftmp3, x_out);
+    /*
+     * ftmp3[i] < 2^60 + 2^60 = 2^61
+     */
+    felem_mul(tmp, ftmp5, ftmp3);
+    /* tmp[i] < 17*2^122 */
+    felem_mul(tmp2, ftmp6, ftmp2);
+    /* tmp2[i] < 17*2^120 */
+    felem_scalar128(tmp2, 2);
+    /* tmp2[i] < 17*2^121 */
+    felem_diff128(tmp, tmp2);
+        /*-
+         * tmp[i] < 2^127 - 2^69 + 17*2^122
+         *        = 2^126 - 2^122 - 2^6 - 2^2 - 1
+         *        < 2^127
+         */
+    felem_reduce(y_out, tmp);
+
+    copy_conditional(x_out, x2, z1_is_zero);
+    copy_conditional(x_out, x1, z2_is_zero);
+    copy_conditional(y_out, y2, z1_is_zero);
+    copy_conditional(y_out, y1, z2_is_zero);
+    copy_conditional(z_out, z2, z1_is_zero);
+    copy_conditional(z_out, z1, z2_is_zero);
+    felem_assign(x3, x_out);
+    felem_assign(y3, y_out);
+    felem_assign(z3, z_out);
+}
+
+/*-
+ * Base point pre computation
+ * --------------------------
+ *
+ * Two different sorts of precomputed tables are used in the following code.
+ * Each contain various points on the curve, where each point is three field
+ * elements (x, y, z).
+ *
+ * For the base point table, z is usually 1 (0 for the point at infinity).
+ * This table has 16 elements:
+ * index | bits    | point
+ * ------+---------+------------------------------
+ *     0 | 0 0 0 0 | 0G
+ *     1 | 0 0 0 1 | 1G
+ *     2 | 0 0 1 0 | 2^130G
+ *     3 | 0 0 1 1 | (2^130 + 1)G
+ *     4 | 0 1 0 0 | 2^260G
+ *     5 | 0 1 0 1 | (2^260 + 1)G
+ *     6 | 0 1 1 0 | (2^260 + 2^130)G
+ *     7 | 0 1 1 1 | (2^260 + 2^130 + 1)G
+ *     8 | 1 0 0 0 | 2^390G
+ *     9 | 1 0 0 1 | (2^390 + 1)G
+ *    10 | 1 0 1 0 | (2^390 + 2^130)G
+ *    11 | 1 0 1 1 | (2^390 + 2^130 + 1)G
+ *    12 | 1 1 0 0 | (2^390 + 2^260)G
+ *    13 | 1 1 0 1 | (2^390 + 2^260 + 1)G
+ *    14 | 1 1 1 0 | (2^390 + 2^260 + 2^130)G
+ *    15 | 1 1 1 1 | (2^390 + 2^260 + 2^130 + 1)G
+ *
+ * The reason for this is so that we can clock bits into four different
+ * locations when doing simple scalar multiplies against the base point.
+ *
+ * Tables for other points have table[i] = iG for i in 0 .. 16. */
+
+/* gmul is the table of precomputed base points */
+static const felem gmul[16][3] = {
+{{0, 0, 0, 0, 0, 0, 0, 0, 0},
+ {0, 0, 0, 0, 0, 0, 0, 0, 0},
+ {0, 0, 0, 0, 0, 0, 0, 0, 0}},
+{{0x017e7e31c2e5bd66, 0x022cf0615a90a6fe, 0x00127a2ffa8de334,
+  0x01dfbf9d64a3f877, 0x006b4d3dbaa14b5e, 0x014fed487e0a2bd8,
+  0x015b4429c6481390, 0x03a73678fb2d988e, 0x00c6858e06b70404},
+ {0x00be94769fd16650, 0x031c21a89cb09022, 0x039013fad0761353,
+  0x02657bd099031542, 0x03273e662c97ee72, 0x01e6d11a05ebef45,
+  0x03d1bd998f544495, 0x03001172297ed0b1, 0x011839296a789a3b},
+ {1, 0, 0, 0, 0, 0, 0, 0, 0}},
+{{0x0373faacbc875bae, 0x00f325023721c671, 0x00f666fd3dbde5ad,
+  0x01a6932363f88ea7, 0x01fc6d9e13f9c47b, 0x03bcbffc2bbf734e,
+  0x013ee3c3647f3a92, 0x029409fefe75d07d, 0x00ef9199963d85e5},
+ {0x011173743ad5b178, 0x02499c7c21bf7d46, 0x035beaeabb8b1a58,
+  0x00f989c4752ea0a3, 0x0101e1de48a9c1a3, 0x01a20076be28ba6c,
+  0x02f8052e5eb2de95, 0x01bfe8f82dea117c, 0x0160074d3c36ddb7},
+ {1, 0, 0, 0, 0, 0, 0, 0, 0}},
+{{0x012f3fc373393b3b, 0x03d3d6172f1419fa, 0x02adc943c0b86873,
+  0x00d475584177952b, 0x012a4d1673750ee2, 0x00512517a0f13b0c,
+  0x02b184671a7b1734, 0x0315b84236f1a50a, 0x00a4afc472edbdb9},
+ {0x00152a7077f385c4, 0x03044007d8d1c2ee, 0x0065829d61d52b52,
+  0x00494ff6b6631d0d, 0x00a11d94d5f06bcf, 0x02d2f89474d9282e,
+  0x0241c5727c06eeb9, 0x0386928710fbdb9d, 0x01f883f727b0dfbe},
+ {1, 0, 0, 0, 0, 0, 0, 0, 0}},
+{{0x019b0c3c9185544d, 0x006243a37c9d97db, 0x02ee3cbe030a2ad2,
+  0x00cfdd946bb51e0d, 0x0271c00932606b91, 0x03f817d1ec68c561,
+  0x03f37009806a369c, 0x03c1f30baf184fd5, 0x01091022d6d2f065},
+ {0x0292c583514c45ed, 0x0316fca51f9a286c, 0x00300af507c1489a,
+  0x0295f69008298cf1, 0x02c0ed8274943d7b, 0x016509b9b47a431e,
+  0x02bc9de9634868ce, 0x005b34929bffcb09, 0x000c1a0121681524},
+ {1, 0, 0, 0, 0, 0, 0, 0, 0}},
+{{0x0286abc0292fb9f2, 0x02665eee9805b3f7, 0x01ed7455f17f26d6,
+  0x0346355b83175d13, 0x006284944cd0a097, 0x0191895bcdec5e51,
+  0x02e288370afda7d9, 0x03b22312bfefa67a, 0x01d104d3fc0613fe},
+ {0x0092421a12f7e47f, 0x0077a83fa373c501, 0x03bd25c5f696bd0d,
+  0x035c41e4d5459761, 0x01ca0d1742b24f53, 0x00aaab27863a509c,
+  0x018b6de47df73917, 0x025c0b771705cd01, 0x01fd51d566d760a7},
+ {1, 0, 0, 0, 0, 0, 0, 0, 0}},
+{{0x01dd92ff6b0d1dbd, 0x039c5e2e8f8afa69, 0x0261ed13242c3b27,
+  0x0382c6e67026e6a0, 0x01d60b10be2089f9, 0x03c15f3dce86723f,
+  0x03c764a32d2a062d, 0x017307eac0fad056, 0x018207c0b96c5256},
+ {0x0196a16d60e13154, 0x03e6ce74c0267030, 0x00ddbf2b4e52a5aa,
+  0x012738241bbf31c8, 0x00ebe8dc04685a28, 0x024c2ad6d380d4a2,
+  0x035ee062a6e62d0e, 0x0029ed74af7d3a0f, 0x00eef32aec142ebd},
+ {1, 0, 0, 0, 0, 0, 0, 0, 0}},
+{{0x00c31ec398993b39, 0x03a9f45bcda68253, 0x00ac733c24c70890,
+  0x00872b111401ff01, 0x01d178c23195eafb, 0x03bca2c816b87f74,
+  0x0261a9af46fbad7a, 0x0324b2a8dd3d28f9, 0x00918121d8f24e23},
+ {0x032bc8c1ca983cd7, 0x00d869dfb08fc8c6, 0x01693cb61fce1516,
+  0x012a5ea68f4e88a8, 0x010869cab88d7ae3, 0x009081ad277ceee1,
+  0x033a77166d064cdc, 0x03955235a1fb3a95, 0x01251a4a9b25b65e},
+ {1, 0, 0, 0, 0, 0, 0, 0, 0}},
+{{0x00148a3a1b27f40b, 0x0123186df1b31fdc, 0x00026e7beaad34ce,
+  0x01db446ac1d3dbba, 0x0299c1a33437eaec, 0x024540610183cbb7,
+  0x0173bb0e9ce92e46, 0x02b937e43921214b, 0x01ab0436a9bf01b5},
+ {0x0383381640d46948, 0x008dacbf0e7f330f, 0x03602122bcc3f318,
+  0x01ee596b200620d6, 0x03bd0585fda430b3, 0x014aed77fd123a83,
+  0x005ace749e52f742, 0x0390fe041da2b842, 0x0189a8ceb3299242},
+ {1, 0, 0, 0, 0, 0, 0, 0, 0}},
+{{0x012a19d6b3282473, 0x00c0915918b423ce, 0x023a954eb94405ae,
+  0x00529f692be26158, 0x0289fa1b6fa4b2aa, 0x0198ae4ceea346ef,
+  0x0047d8cdfbdedd49, 0x00cc8c8953f0f6b8, 0x001424abbff49203},
+ {0x0256732a1115a03a, 0x0351bc38665c6733, 0x03f7b950fb4a6447,
+  0x000afffa94c22155, 0x025763d0a4dab540, 0x000511e92d4fc283,
+  0x030a7e9eda0ee96c, 0x004c3cd93a28bf0a, 0x017edb3a8719217f},
+ {1, 0, 0, 0, 0, 0, 0, 0, 0}},
+{{0x011de5675a88e673, 0x031d7d0f5e567fbe, 0x0016b2062c970ae5,
+  0x03f4a2be49d90aa7, 0x03cef0bd13822866, 0x03f0923dcf774a6c,
+  0x0284bebc4f322f72, 0x016ab2645302bb2c, 0x01793f95dace0e2a},
+ {0x010646e13527a28f, 0x01ca1babd59dc5e7, 0x01afedfd9a5595df,
+  0x01f15785212ea6b1, 0x0324e5d64f6ae3f4, 0x02d680f526d00645,
+  0x0127920fadf627a7, 0x03b383f75df4f684, 0x0089e0057e783b0a},
+ {1, 0, 0, 0, 0, 0, 0, 0, 0}},
+{{0x00f334b9eb3c26c6, 0x0298fdaa98568dce, 0x01c2d24843a82292,
+  0x020bcb24fa1b0711, 0x02cbdb3d2b1875e6, 0x0014907598f89422,
+  0x03abe3aa43b26664, 0x02cbf47f720bc168, 0x0133b5e73014b79b},
+ {0x034aab5dab05779d, 0x00cdc5d71fee9abb, 0x0399f16bd4bd9d30,
+  0x03582fa592d82647, 0x02be1cdfb775b0e9, 0x0034f7cea32e94cb,
+  0x0335a7f08f56f286, 0x03b707e9565d1c8b, 0x0015c946ea5b614f},
+ {1, 0, 0, 0, 0, 0, 0, 0, 0}},
+{{0x024676f6cff72255, 0x00d14625cac96378, 0x00532b6008bc3767,
+  0x01fc16721b985322, 0x023355ea1b091668, 0x029de7afdc0317c3,
+  0x02fc8a7ca2da037c, 0x02de1217d74a6f30, 0x013f7173175b73bf},
+ {0x0344913f441490b5, 0x0200f9e272b61eca, 0x0258a246b1dd55d2,
+  0x03753db9ea496f36, 0x025e02937a09c5ef, 0x030cbd3d14012692,
+  0x01793a67e70dc72a, 0x03ec1d37048a662e, 0x006550f700c32a8d},
+ {1, 0, 0, 0, 0, 0, 0, 0, 0}},
+{{0x00d3f48a347eba27, 0x008e636649b61bd8, 0x00d3b93716778fb3,
+  0x004d1915757bd209, 0x019d5311a3da44e0, 0x016d1afcbbe6aade,
+  0x0241bf5f73265616, 0x0384672e5d50d39b, 0x005009fee522b684},
+ {0x029b4fab064435fe, 0x018868ee095bbb07, 0x01ea3d6936cc92b8,
+  0x000608b00f78a2f3, 0x02db911073d1c20f, 0x018205938470100a,
+  0x01f1e4964cbe6ff2, 0x021a19a29eed4663, 0x01414485f42afa81},
+ {1, 0, 0, 0, 0, 0, 0, 0, 0}},
+{{0x01612b3a17f63e34, 0x03813992885428e6, 0x022b3c215b5a9608,
+  0x029b4057e19f2fcb, 0x0384059a587af7e6, 0x02d6400ace6fe610,
+  0x029354d896e8e331, 0x00c047ee6dfba65e, 0x0037720542e9d49d},
+ {0x02ce9eed7c5e9278, 0x0374ed703e79643b, 0x01316c54c4072006,
+  0x005aaa09054b2ee8, 0x002824000c840d57, 0x03d4eba24771ed86,
+  0x0189c50aabc3bdae, 0x0338c01541e15510, 0x00466d56e38eed42},
+ {1, 0, 0, 0, 0, 0, 0, 0, 0}},
+{{0x007efd8330ad8bd6, 0x02465ed48047710b, 0x0034c6606b215e0c,
+  0x016ae30c53cbf839, 0x01fa17bd37161216, 0x018ead4e61ce8ab9,
+  0x005482ed5f5dee46, 0x037543755bba1d7f, 0x005e5ac7e70a9d0f},
+ {0x0117e1bb2fdcb2a2, 0x03deea36249f40c4, 0x028d09b4a6246cb7,
+  0x03524b8855bcf756, 0x023d7d109d5ceb58, 0x0178e43e3223ef9c,
+  0x0154536a0c6e966a, 0x037964d1286ee9fe, 0x0199bcd90e125055},
+ {1, 0, 0, 0, 0, 0, 0, 0, 0}}
+};
+
+/*
+ * select_point selects the |idx|th point from a precomputation table and
+ * copies it to out.
+ */
+ /* pre_comp below is of the size provided in |size| */
+static void select_point(const limb idx, unsigned int size,
+                         const felem pre_comp[][3], felem out[3])
+{
+    unsigned i, j;
+    limb *outlimbs = &out[0][0];
+
+    memset(out, 0, sizeof(*out) * 3);
+
+    for (i = 0; i < size; i++) {
+        const limb *inlimbs = &pre_comp[i][0][0];
+        limb mask = i ^ idx;
+        mask |= mask >> 4;
+        mask |= mask >> 2;
+        mask |= mask >> 1;
+        mask &= 1;
+        mask--;
+        for (j = 0; j < NLIMBS * 3; j++)
+            outlimbs[j] |= inlimbs[j] & mask;
+    }
+}
+
+/* get_bit returns the |i|th bit in |in| */
+static char get_bit(const felem_bytearray in, int i)
+{
+    if (i < 0)
+        return 0;
+    return (in[i >> 3] >> (i & 7)) & 1;
+}
+
+/*
+ * Interleaved point multiplication using precomputed point multiples: The
+ * small point multiples 0*P, 1*P, ..., 16*P are in pre_comp[], the scalars
+ * in scalars[]. If g_scalar is non-NULL, we also add this multiple of the
+ * generator, using certain (large) precomputed multiples in g_pre_comp.
+ * Output point (X, Y, Z) is stored in x_out, y_out, z_out
+ */
+static void batch_mul(felem x_out, felem y_out, felem z_out,
+                      const felem_bytearray scalars[],
+                      const unsigned num_points, const u8 *g_scalar,
+                      const int mixed, const felem pre_comp[][17][3],
+                      const felem g_pre_comp[16][3])
+{
+    int i, skip;
+    unsigned num, gen_mul = (g_scalar != NULL);
+    felem nq[3], tmp[4];
+    limb bits;
+    u8 sign, digit;
+
+    /* set nq to the point at infinity */
+    memset(nq, 0, sizeof(nq));
+
+    /*
+     * Loop over all scalars msb-to-lsb, interleaving additions of multiples
+     * of the generator (last quarter of rounds) and additions of other
+     * points multiples (every 5th round).
+     */
+    skip = 1;                   /* save two point operations in the first
+                                 * round */
+    for (i = (num_points ? 520 : 130); i >= 0; --i) {
+        /* double */
+        if (!skip)
+            point_double(nq[0], nq[1], nq[2], nq[0], nq[1], nq[2]);
+
+        /* add multiples of the generator */
+        if (gen_mul && (i <= 130)) {
+            bits = get_bit(g_scalar, i + 390) << 3;
+            if (i < 130) {
+                bits |= get_bit(g_scalar, i + 260) << 2;
+                bits |= get_bit(g_scalar, i + 130) << 1;
+                bits |= get_bit(g_scalar, i);
+            }
+            /* select the point to add, in constant time */
+            select_point(bits, 16, g_pre_comp, tmp);
+            if (!skip) {
+                /* The 1 argument below is for "mixed" */
+                point_add(nq[0], nq[1], nq[2],
+                          nq[0], nq[1], nq[2], 1, tmp[0], tmp[1], tmp[2]);
+            } else {
+                memcpy(nq, tmp, 3 * sizeof(felem));
+                skip = 0;
+            }
+        }
+
+        /* do other additions every 5 doublings */
+        if (num_points && (i % 5 == 0)) {
+            /* loop over all scalars */
+            for (num = 0; num < num_points; ++num) {
+                bits = get_bit(scalars[num], i + 4) << 5;
+                bits |= get_bit(scalars[num], i + 3) << 4;
+                bits |= get_bit(scalars[num], i + 2) << 3;
+                bits |= get_bit(scalars[num], i + 1) << 2;
+                bits |= get_bit(scalars[num], i) << 1;
+                bits |= get_bit(scalars[num], i - 1);
+                ec_GFp_nistp_recode_scalar_bits(&sign, &digit, bits);
+
+                /*
+                 * select the point to add or subtract, in constant time
+                 */
+                select_point(digit, 17, pre_comp[num], tmp);
+                felem_neg(tmp[3], tmp[1]); /* (X, -Y, Z) is the negative
+                                            * point */
+                copy_conditional(tmp[1], tmp[3], (-(limb) sign));
+
+                if (!skip) {
+                    point_add(nq[0], nq[1], nq[2],
+                              nq[0], nq[1], nq[2],
+                              mixed, tmp[0], tmp[1], tmp[2]);
+                } else {
+                    memcpy(nq, tmp, 3 * sizeof(felem));
+                    skip = 0;
+                }
+            }
+        }
+    }
+    felem_assign(x_out, nq[0]);
+    felem_assign(y_out, nq[1]);
+    felem_assign(z_out, nq[2]);
+}
+
+/* Precomputation for the group generator. */
+struct nistp521_pre_comp_st {
+    felem g_pre_comp[16][3];
+    CRYPTO_REF_COUNT references;
+    CRYPTO_RWLOCK *lock;
+};
+
+const EC_METHOD *EC_GFp_nistp521_method(void)
+{
+    static const EC_METHOD ret = {
+        EC_FLAGS_DEFAULT_OCT,
+        NID_X9_62_prime_field,
+        ec_GFp_nistp521_group_init,
+        ec_GFp_simple_group_finish,
+        ec_GFp_simple_group_clear_finish,
+        ec_GFp_nist_group_copy,
+        ec_GFp_nistp521_group_set_curve,
+        ec_GFp_simple_group_get_curve,
+        ec_GFp_simple_group_get_degree,
+        ec_group_simple_order_bits,
+        ec_GFp_simple_group_check_discriminant,
+        ec_GFp_simple_point_init,
+        ec_GFp_simple_point_finish,
+        ec_GFp_simple_point_clear_finish,
+        ec_GFp_simple_point_copy,
+        ec_GFp_simple_point_set_to_infinity,
+        ec_GFp_simple_set_Jprojective_coordinates_GFp,
+        ec_GFp_simple_get_Jprojective_coordinates_GFp,
+        ec_GFp_simple_point_set_affine_coordinates,
+        ec_GFp_nistp521_point_get_affine_coordinates,
+        0 /* point_set_compressed_coordinates */ ,
+        0 /* point2oct */ ,
+        0 /* oct2point */ ,
+        ec_GFp_simple_add,
+        ec_GFp_simple_dbl,
+        ec_GFp_simple_invert,
+        ec_GFp_simple_is_at_infinity,
+        ec_GFp_simple_is_on_curve,
+        ec_GFp_simple_cmp,
+        ec_GFp_simple_make_affine,
+        ec_GFp_simple_points_make_affine,
+        ec_GFp_nistp521_points_mul,
+        ec_GFp_nistp521_precompute_mult,
+        ec_GFp_nistp521_have_precompute_mult,
+        ec_GFp_nist_field_mul,
+        ec_GFp_nist_field_sqr,
+        0 /* field_div */ ,
+        ec_GFp_simple_field_inv,
+        0 /* field_encode */ ,
+        0 /* field_decode */ ,
+        0,                      /* field_set_to_one */
+        ec_key_simple_priv2oct,
+        ec_key_simple_oct2priv,
+        0, /* set private */
+        ec_key_simple_generate_key,
+        ec_key_simple_check_key,
+        ec_key_simple_generate_public_key,
+        0, /* keycopy */
+        0, /* keyfinish */
+        ecdh_simple_compute_key,
+        0, /* field_inverse_mod_ord */
+        0, /* blind_coordinates */
+        0, /* ladder_pre */
+        0, /* ladder_step */
+        0  /* ladder_post */
+    };
+
+    return &ret;
+}
+
+/******************************************************************************/
+/*
+ * FUNCTIONS TO MANAGE PRECOMPUTATION
+ */
+
+static NISTP521_PRE_COMP *nistp521_pre_comp_new(void)
+{
+    NISTP521_PRE_COMP *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        ECerr(EC_F_NISTP521_PRE_COMP_NEW, ERR_R_MALLOC_FAILURE);
+        return ret;
+    }
+
+    ret->references = 1;
+
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        ECerr(EC_F_NISTP521_PRE_COMP_NEW, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+NISTP521_PRE_COMP *EC_nistp521_pre_comp_dup(NISTP521_PRE_COMP *p)
+{
+    int i;
+    if (p != NULL)
+        CRYPTO_UP_REF(&p->references, &i, p->lock);
+    return p;
+}
+
+void EC_nistp521_pre_comp_free(NISTP521_PRE_COMP *p)
+{
+    int i;
+
+    if (p == NULL)
+        return;
+
+    CRYPTO_DOWN_REF(&p->references, &i, p->lock);
+    REF_PRINT_COUNT("EC_nistp521", x);
+    if (i > 0)
+        return;
+    REF_ASSERT_ISNT(i < 0);
+
+    CRYPTO_THREAD_lock_free(p->lock);
+    OPENSSL_free(p);
+}
+
+/******************************************************************************/
+/*
+ * OPENSSL EC_METHOD FUNCTIONS
+ */
+
+int ec_GFp_nistp521_group_init(EC_GROUP *group)
+{
+    int ret;
+    ret = ec_GFp_simple_group_init(group);
+    group->a_is_minus3 = 1;
+    return ret;
+}
+
+int ec_GFp_nistp521_group_set_curve(EC_GROUP *group, const BIGNUM *p,
+                                    const BIGNUM *a, const BIGNUM *b,
+                                    BN_CTX *ctx)
+{
+    int ret = 0;
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *curve_p, *curve_a, *curve_b;
+
+    if (ctx == NULL)
+        if ((ctx = new_ctx = BN_CTX_new()) == NULL)
+            return 0;
+    BN_CTX_start(ctx);
+    curve_p = BN_CTX_get(ctx);
+    curve_a = BN_CTX_get(ctx);
+    curve_b = BN_CTX_get(ctx);
+    if (curve_b == NULL)
+        goto err;
+    BN_bin2bn(nistp521_curve_params[0], sizeof(felem_bytearray), curve_p);
+    BN_bin2bn(nistp521_curve_params[1], sizeof(felem_bytearray), curve_a);
+    BN_bin2bn(nistp521_curve_params[2], sizeof(felem_bytearray), curve_b);
+    if ((BN_cmp(curve_p, p)) || (BN_cmp(curve_a, a)) || (BN_cmp(curve_b, b))) {
+        ECerr(EC_F_EC_GFP_NISTP521_GROUP_SET_CURVE,
+              EC_R_WRONG_CURVE_PARAMETERS);
+        goto err;
+    }
+    group->field_mod_func = BN_nist_mod_521;
+    ret = ec_GFp_simple_group_set_curve(group, p, a, b, ctx);
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+/*
+ * Takes the Jacobian coordinates (X, Y, Z) of a point and returns (X', Y') =
+ * (X/Z^2, Y/Z^3)
+ */
+int ec_GFp_nistp521_point_get_affine_coordinates(const EC_GROUP *group,
+                                                 const EC_POINT *point,
+                                                 BIGNUM *x, BIGNUM *y,
+                                                 BN_CTX *ctx)
+{
+    felem z1, z2, x_in, y_in, x_out, y_out;
+    largefelem tmp;
+
+    if (EC_POINT_is_at_infinity(group, point)) {
+        ECerr(EC_F_EC_GFP_NISTP521_POINT_GET_AFFINE_COORDINATES,
+              EC_R_POINT_AT_INFINITY);
+        return 0;
+    }
+    if ((!BN_to_felem(x_in, point->X)) || (!BN_to_felem(y_in, point->Y)) ||
+        (!BN_to_felem(z1, point->Z)))
+        return 0;
+    felem_inv(z2, z1);
+    felem_square(tmp, z2);
+    felem_reduce(z1, tmp);
+    felem_mul(tmp, x_in, z1);
+    felem_reduce(x_in, tmp);
+    felem_contract(x_out, x_in);
+    if (x != NULL) {
+        if (!felem_to_BN(x, x_out)) {
+            ECerr(EC_F_EC_GFP_NISTP521_POINT_GET_AFFINE_COORDINATES,
+                  ERR_R_BN_LIB);
+            return 0;
+        }
+    }
+    felem_mul(tmp, z1, z2);
+    felem_reduce(z1, tmp);
+    felem_mul(tmp, y_in, z1);
+    felem_reduce(y_in, tmp);
+    felem_contract(y_out, y_in);
+    if (y != NULL) {
+        if (!felem_to_BN(y, y_out)) {
+            ECerr(EC_F_EC_GFP_NISTP521_POINT_GET_AFFINE_COORDINATES,
+                  ERR_R_BN_LIB);
+            return 0;
+        }
+    }
+    return 1;
+}
+
+/* points below is of size |num|, and tmp_felems is of size |num+1/ */
+static void make_points_affine(size_t num, felem points[][3],
+                               felem tmp_felems[])
+{
+    /*
+     * Runs in constant time, unless an input is the point at infinity (which
+     * normally shouldn't happen).
+     */
+    ec_GFp_nistp_points_make_affine_internal(num,
+                                             points,
+                                             sizeof(felem),
+                                             tmp_felems,
+                                             (void (*)(void *))felem_one,
+                                             felem_is_zero_int,
+                                             (void (*)(void *, const void *))
+                                             felem_assign,
+                                             (void (*)(void *, const void *))
+                                             felem_square_reduce, (void (*)
+                                                                   (void *,
+                                                                    const void
+                                                                    *,
+                                                                    const void
+                                                                    *))
+                                             felem_mul_reduce,
+                                             (void (*)(void *, const void *))
+                                             felem_inv,
+                                             (void (*)(void *, const void *))
+                                             felem_contract);
+}
+
+/*
+ * Computes scalar*generator + \sum scalars[i]*points[i], ignoring NULL
+ * values Result is stored in r (r can equal one of the inputs).
+ */
+int ec_GFp_nistp521_points_mul(const EC_GROUP *group, EC_POINT *r,
+                               const BIGNUM *scalar, size_t num,
+                               const EC_POINT *points[],
+                               const BIGNUM *scalars[], BN_CTX *ctx)
+{
+    int ret = 0;
+    int j;
+    int mixed = 0;
+    BIGNUM *x, *y, *z, *tmp_scalar;
+    felem_bytearray g_secret;
+    felem_bytearray *secrets = NULL;
+    felem (*pre_comp)[17][3] = NULL;
+    felem *tmp_felems = NULL;
+    felem_bytearray tmp;
+    unsigned i, num_bytes;
+    int have_pre_comp = 0;
+    size_t num_points = num;
+    felem x_in, y_in, z_in, x_out, y_out, z_out;
+    NISTP521_PRE_COMP *pre = NULL;
+    felem(*g_pre_comp)[3] = NULL;
+    EC_POINT *generator = NULL;
+    const EC_POINT *p = NULL;
+    const BIGNUM *p_scalar = NULL;
+
+    BN_CTX_start(ctx);
+    x = BN_CTX_get(ctx);
+    y = BN_CTX_get(ctx);
+    z = BN_CTX_get(ctx);
+    tmp_scalar = BN_CTX_get(ctx);
+    if (tmp_scalar == NULL)
+        goto err;
+
+    if (scalar != NULL) {
+        pre = group->pre_comp.nistp521;
+        if (pre)
+            /* we have precomputation, try to use it */
+            g_pre_comp = &pre->g_pre_comp[0];
+        else
+            /* try to use the standard precomputation */
+            g_pre_comp = (felem(*)[3]) gmul;
+        generator = EC_POINT_new(group);
+        if (generator == NULL)
+            goto err;
+        /* get the generator from precomputation */
+        if (!felem_to_BN(x, g_pre_comp[1][0]) ||
+            !felem_to_BN(y, g_pre_comp[1][1]) ||
+            !felem_to_BN(z, g_pre_comp[1][2])) {
+            ECerr(EC_F_EC_GFP_NISTP521_POINTS_MUL, ERR_R_BN_LIB);
+            goto err;
+        }
+        if (!EC_POINT_set_Jprojective_coordinates_GFp(group,
+                                                      generator, x, y, z,
+                                                      ctx))
+            goto err;
+        if (0 == EC_POINT_cmp(group, generator, group->generator, ctx))
+            /* precomputation matches generator */
+            have_pre_comp = 1;
+        else
+            /*
+             * we don't have valid precomputation: treat the generator as a
+             * random point
+             */
+            num_points++;
+    }
+
+    if (num_points > 0) {
+        if (num_points >= 2) {
+            /*
+             * unless we precompute multiples for just one point, converting
+             * those into affine form is time well spent
+             */
+            mixed = 1;
+        }
+        secrets = OPENSSL_zalloc(sizeof(*secrets) * num_points);
+        pre_comp = OPENSSL_zalloc(sizeof(*pre_comp) * num_points);
+        if (mixed)
+            tmp_felems =
+                OPENSSL_malloc(sizeof(*tmp_felems) * (num_points * 17 + 1));
+        if ((secrets == NULL) || (pre_comp == NULL)
+            || (mixed && (tmp_felems == NULL))) {
+            ECerr(EC_F_EC_GFP_NISTP521_POINTS_MUL, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+
+        /*
+         * we treat NULL scalars as 0, and NULL points as points at infinity,
+         * i.e., they contribute nothing to the linear combination
+         */
+        for (i = 0; i < num_points; ++i) {
+            if (i == num)
+                /*
+                 * we didn't have a valid precomputation, so we pick the
+                 * generator
+                 */
+            {
+                p = EC_GROUP_get0_generator(group);
+                p_scalar = scalar;
+            } else
+                /* the i^th point */
+            {
+                p = points[i];
+                p_scalar = scalars[i];
+            }
+            if ((p_scalar != NULL) && (p != NULL)) {
+                /* reduce scalar to 0 <= scalar < 2^521 */
+                if ((BN_num_bits(p_scalar) > 521)
+                    || (BN_is_negative(p_scalar))) {
+                    /*
+                     * this is an unusual input, and we don't guarantee
+                     * constant-timeness
+                     */
+                    if (!BN_nnmod(tmp_scalar, p_scalar, group->order, ctx)) {
+                        ECerr(EC_F_EC_GFP_NISTP521_POINTS_MUL, ERR_R_BN_LIB);
+                        goto err;
+                    }
+                    num_bytes = BN_bn2bin(tmp_scalar, tmp);
+                } else
+                    num_bytes = BN_bn2bin(p_scalar, tmp);
+                flip_endian(secrets[i], tmp, num_bytes);
+                /* precompute multiples */
+                if ((!BN_to_felem(x_out, p->X)) ||
+                    (!BN_to_felem(y_out, p->Y)) ||
+                    (!BN_to_felem(z_out, p->Z)))
+                    goto err;
+                memcpy(pre_comp[i][1][0], x_out, sizeof(felem));
+                memcpy(pre_comp[i][1][1], y_out, sizeof(felem));
+                memcpy(pre_comp[i][1][2], z_out, sizeof(felem));
+                for (j = 2; j <= 16; ++j) {
+                    if (j & 1) {
+                        point_add(pre_comp[i][j][0], pre_comp[i][j][1],
+                                  pre_comp[i][j][2], pre_comp[i][1][0],
+                                  pre_comp[i][1][1], pre_comp[i][1][2], 0,
+                                  pre_comp[i][j - 1][0],
+                                  pre_comp[i][j - 1][1],
+                                  pre_comp[i][j - 1][2]);
+                    } else {
+                        point_double(pre_comp[i][j][0], pre_comp[i][j][1],
+                                     pre_comp[i][j][2], pre_comp[i][j / 2][0],
+                                     pre_comp[i][j / 2][1],
+                                     pre_comp[i][j / 2][2]);
+                    }
+                }
+            }
+        }
+        if (mixed)
+            make_points_affine(num_points * 17, pre_comp[0], tmp_felems);
+    }
+
+    /* the scalar for the generator */
+    if ((scalar != NULL) && (have_pre_comp)) {
+        memset(g_secret, 0, sizeof(g_secret));
+        /* reduce scalar to 0 <= scalar < 2^521 */
+        if ((BN_num_bits(scalar) > 521) || (BN_is_negative(scalar))) {
+            /*
+             * this is an unusual input, and we don't guarantee
+             * constant-timeness
+             */
+            if (!BN_nnmod(tmp_scalar, scalar, group->order, ctx)) {
+                ECerr(EC_F_EC_GFP_NISTP521_POINTS_MUL, ERR_R_BN_LIB);
+                goto err;
+            }
+            num_bytes = BN_bn2bin(tmp_scalar, tmp);
+        } else
+            num_bytes = BN_bn2bin(scalar, tmp);
+        flip_endian(g_secret, tmp, num_bytes);
+        /* do the multiplication with generator precomputation */
+        batch_mul(x_out, y_out, z_out,
+                  (const felem_bytearray(*))secrets, num_points,
+                  g_secret,
+                  mixed, (const felem(*)[17][3])pre_comp,
+                  (const felem(*)[3])g_pre_comp);
+    } else
+        /* do the multiplication without generator precomputation */
+        batch_mul(x_out, y_out, z_out,
+                  (const felem_bytearray(*))secrets, num_points,
+                  NULL, mixed, (const felem(*)[17][3])pre_comp, NULL);
+    /* reduce the output to its unique minimal representation */
+    felem_contract(x_in, x_out);
+    felem_contract(y_in, y_out);
+    felem_contract(z_in, z_out);
+    if ((!felem_to_BN(x, x_in)) || (!felem_to_BN(y, y_in)) ||
+        (!felem_to_BN(z, z_in))) {
+        ECerr(EC_F_EC_GFP_NISTP521_POINTS_MUL, ERR_R_BN_LIB);
+        goto err;
+    }
+    ret = EC_POINT_set_Jprojective_coordinates_GFp(group, r, x, y, z, ctx);
+
+ err:
+    BN_CTX_end(ctx);
+    EC_POINT_free(generator);
+    OPENSSL_free(secrets);
+    OPENSSL_free(pre_comp);
+    OPENSSL_free(tmp_felems);
+    return ret;
+}
+
+int ec_GFp_nistp521_precompute_mult(EC_GROUP *group, BN_CTX *ctx)
+{
+    int ret = 0;
+    NISTP521_PRE_COMP *pre = NULL;
+    int i, j;
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *x, *y;
+    EC_POINT *generator = NULL;
+    felem tmp_felems[16];
+
+    /* throw away old precomputation */
+    EC_pre_comp_free(group);
+    if (ctx == NULL)
+        if ((ctx = new_ctx = BN_CTX_new()) == NULL)
+            return 0;
+    BN_CTX_start(ctx);
+    x = BN_CTX_get(ctx);
+    y = BN_CTX_get(ctx);
+    if (y == NULL)
+        goto err;
+    /* get the generator */
+    if (group->generator == NULL)
+        goto err;
+    generator = EC_POINT_new(group);
+    if (generator == NULL)
+        goto err;
+    BN_bin2bn(nistp521_curve_params[3], sizeof(felem_bytearray), x);
+    BN_bin2bn(nistp521_curve_params[4], sizeof(felem_bytearray), y);
+    if (!EC_POINT_set_affine_coordinates(group, generator, x, y, ctx))
+        goto err;
+    if ((pre = nistp521_pre_comp_new()) == NULL)
+        goto err;
+    /*
+     * if the generator is the standard one, use built-in precomputation
+     */
+    if (0 == EC_POINT_cmp(group, generator, group->generator, ctx)) {
+        memcpy(pre->g_pre_comp, gmul, sizeof(pre->g_pre_comp));
+        goto done;
+    }
+    if ((!BN_to_felem(pre->g_pre_comp[1][0], group->generator->X)) ||
+        (!BN_to_felem(pre->g_pre_comp[1][1], group->generator->Y)) ||
+        (!BN_to_felem(pre->g_pre_comp[1][2], group->generator->Z)))
+        goto err;
+    /* compute 2^130*G, 2^260*G, 2^390*G */
+    for (i = 1; i <= 4; i <<= 1) {
+        point_double(pre->g_pre_comp[2 * i][0], pre->g_pre_comp[2 * i][1],
+                     pre->g_pre_comp[2 * i][2], pre->g_pre_comp[i][0],
+                     pre->g_pre_comp[i][1], pre->g_pre_comp[i][2]);
+        for (j = 0; j < 129; ++j) {
+            point_double(pre->g_pre_comp[2 * i][0],
+                         pre->g_pre_comp[2 * i][1],
+                         pre->g_pre_comp[2 * i][2],
+                         pre->g_pre_comp[2 * i][0],
+                         pre->g_pre_comp[2 * i][1],
+                         pre->g_pre_comp[2 * i][2]);
+        }
+    }
+    /* g_pre_comp[0] is the point at infinity */
+    memset(pre->g_pre_comp[0], 0, sizeof(pre->g_pre_comp[0]));
+    /* the remaining multiples */
+    /* 2^130*G + 2^260*G */
+    point_add(pre->g_pre_comp[6][0], pre->g_pre_comp[6][1],
+              pre->g_pre_comp[6][2], pre->g_pre_comp[4][0],
+              pre->g_pre_comp[4][1], pre->g_pre_comp[4][2],
+              0, pre->g_pre_comp[2][0], pre->g_pre_comp[2][1],
+              pre->g_pre_comp[2][2]);
+    /* 2^130*G + 2^390*G */
+    point_add(pre->g_pre_comp[10][0], pre->g_pre_comp[10][1],
+              pre->g_pre_comp[10][2], pre->g_pre_comp[8][0],
+              pre->g_pre_comp[8][1], pre->g_pre_comp[8][2],
+              0, pre->g_pre_comp[2][0], pre->g_pre_comp[2][1],
+              pre->g_pre_comp[2][2]);
+    /* 2^260*G + 2^390*G */
+    point_add(pre->g_pre_comp[12][0], pre->g_pre_comp[12][1],
+              pre->g_pre_comp[12][2], pre->g_pre_comp[8][0],
+              pre->g_pre_comp[8][1], pre->g_pre_comp[8][2],
+              0, pre->g_pre_comp[4][0], pre->g_pre_comp[4][1],
+              pre->g_pre_comp[4][2]);
+    /* 2^130*G + 2^260*G + 2^390*G */
+    point_add(pre->g_pre_comp[14][0], pre->g_pre_comp[14][1],
+              pre->g_pre_comp[14][2], pre->g_pre_comp[12][0],
+              pre->g_pre_comp[12][1], pre->g_pre_comp[12][2],
+              0, pre->g_pre_comp[2][0], pre->g_pre_comp[2][1],
+              pre->g_pre_comp[2][2]);
+    for (i = 1; i < 8; ++i) {
+        /* odd multiples: add G */
+        point_add(pre->g_pre_comp[2 * i + 1][0],
+                  pre->g_pre_comp[2 * i + 1][1],
+                  pre->g_pre_comp[2 * i + 1][2], pre->g_pre_comp[2 * i][0],
+                  pre->g_pre_comp[2 * i][1], pre->g_pre_comp[2 * i][2], 0,
+                  pre->g_pre_comp[1][0], pre->g_pre_comp[1][1],
+                  pre->g_pre_comp[1][2]);
+    }
+    make_points_affine(15, &(pre->g_pre_comp[1]), tmp_felems);
+
+ done:
+    SETPRECOMP(group, nistp521, pre);
+    ret = 1;
+    pre = NULL;
+ err:
+    BN_CTX_end(ctx);
+    EC_POINT_free(generator);
+    BN_CTX_free(new_ctx);
+    EC_nistp521_pre_comp_free(pre);
+    return ret;
+}
+
+int ec_GFp_nistp521_have_precompute_mult(const EC_GROUP *group)
+{
+    return HAVEPRECOMP(group, nistp521);
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistputil.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistputil.c
new file mode 100644
index 000000000..97fb63100
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistputil.c
@@ -0,0 +1,223 @@
+/*
+ * Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* Copyright 2011 Google Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ *
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_EC_NISTP_64_GCC_128
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+/*
+ * Common utility functions for ecp_nistp224.c, ecp_nistp256.c, ecp_nistp521.c.
+ */
+
+# include <stddef.h>
+# include "ec_lcl.h"
+
+/*
+ * Convert an array of points into affine coordinates. (If the point at
+ * infinity is found (Z = 0), it remains unchanged.) This function is
+ * essentially an equivalent to EC_POINTs_make_affine(), but works with the
+ * internal representation of points as used by ecp_nistp###.c rather than
+ * with (BIGNUM-based) EC_POINT data structures. point_array is the
+ * input/output buffer ('num' points in projective form, i.e. three
+ * coordinates each), based on an internal representation of field elements
+ * of size 'felem_size'. tmp_felems needs to point to a temporary array of
+ * 'num'+1 field elements for storage of intermediate values.
+ */
+void ec_GFp_nistp_points_make_affine_internal(size_t num, void *point_array,
+                                              size_t felem_size,
+                                              void *tmp_felems,
+                                              void (*felem_one) (void *out),
+                                              int (*felem_is_zero) (const void
+                                                                    *in),
+                                              void (*felem_assign) (void *out,
+                                                                    const void
+                                                                    *in),
+                                              void (*felem_square) (void *out,
+                                                                    const void
+                                                                    *in),
+                                              void (*felem_mul) (void *out,
+                                                                 const void
+                                                                 *in1,
+                                                                 const void
+                                                                 *in2),
+                                              void (*felem_inv) (void *out,
+                                                                 const void
+                                                                 *in),
+                                              void (*felem_contract) (void
+                                                                      *out,
+                                                                      const
+                                                                      void
+                                                                      *in))
+{
+    int i = 0;
+
+# define tmp_felem(I) (&((char *)tmp_felems)[(I) * felem_size])
+# define X(I) (&((char *)point_array)[3*(I) * felem_size])
+# define Y(I) (&((char *)point_array)[(3*(I) + 1) * felem_size])
+# define Z(I) (&((char *)point_array)[(3*(I) + 2) * felem_size])
+
+    if (!felem_is_zero(Z(0)))
+        felem_assign(tmp_felem(0), Z(0));
+    else
+        felem_one(tmp_felem(0));
+    for (i = 1; i < (int)num; i++) {
+        if (!felem_is_zero(Z(i)))
+            felem_mul(tmp_felem(i), tmp_felem(i - 1), Z(i));
+        else
+            felem_assign(tmp_felem(i), tmp_felem(i - 1));
+    }
+    /*
+     * Now each tmp_felem(i) is the product of Z(0) .. Z(i), skipping any
+     * zero-valued factors: if Z(i) = 0, we essentially pretend that Z(i) = 1
+     */
+
+    felem_inv(tmp_felem(num - 1), tmp_felem(num - 1));
+    for (i = num - 1; i >= 0; i--) {
+        if (i > 0)
+            /*
+             * tmp_felem(i-1) is the product of Z(0) .. Z(i-1), tmp_felem(i)
+             * is the inverse of the product of Z(0) .. Z(i)
+             */
+            /* 1/Z(i) */
+            felem_mul(tmp_felem(num), tmp_felem(i - 1), tmp_felem(i));
+        else
+            felem_assign(tmp_felem(num), tmp_felem(0)); /* 1/Z(0) */
+
+        if (!felem_is_zero(Z(i))) {
+            if (i > 0)
+                /*
+                 * For next iteration, replace tmp_felem(i-1) by its inverse
+                 */
+                felem_mul(tmp_felem(i - 1), tmp_felem(i), Z(i));
+
+            /*
+             * Convert point (X, Y, Z) into affine form (X/(Z^2), Y/(Z^3), 1)
+             */
+            felem_square(Z(i), tmp_felem(num)); /* 1/(Z^2) */
+            felem_mul(X(i), X(i), Z(i)); /* X/(Z^2) */
+            felem_mul(Z(i), Z(i), tmp_felem(num)); /* 1/(Z^3) */
+            felem_mul(Y(i), Y(i), Z(i)); /* Y/(Z^3) */
+            felem_contract(X(i), X(i));
+            felem_contract(Y(i), Y(i));
+            felem_one(Z(i));
+        } else {
+            if (i > 0)
+                /*
+                 * For next iteration, replace tmp_felem(i-1) by its inverse
+                 */
+                felem_assign(tmp_felem(i - 1), tmp_felem(i));
+        }
+    }
+}
+
+/*-
+ * This function looks at 5+1 scalar bits (5 current, 1 adjacent less
+ * significant bit), and recodes them into a signed digit for use in fast point
+ * multiplication: the use of signed rather than unsigned digits means that
+ * fewer points need to be precomputed, given that point inversion is easy
+ * (a precomputed point dP makes -dP available as well).
+ *
+ * BACKGROUND:
+ *
+ * Signed digits for multiplication were introduced by Booth ("A signed binary
+ * multiplication technique", Quart. Journ. Mech. and Applied Math., vol. IV,
+ * pt. 2 (1951), pp. 236-240), in that case for multiplication of integers.
+ * Booth's original encoding did not generally improve the density of nonzero
+ * digits over the binary representation, and was merely meant to simplify the
+ * handling of signed factors given in two's complement; but it has since been
+ * shown to be the basis of various signed-digit representations that do have
+ * further advantages, including the wNAF, using the following general approach:
+ *
+ * (1) Given a binary representation
+ *
+ *       b_k  ...  b_2  b_1  b_0,
+ *
+ *     of a nonnegative integer (b_k in {0, 1}), rewrite it in digits 0, 1, -1
+ *     by using bit-wise subtraction as follows:
+ *
+ *        b_k b_(k-1)  ...  b_2  b_1  b_0
+ *      -     b_k      ...  b_3  b_2  b_1  b_0
+ *       -------------------------------------
+ *        s_k b_(k-1)  ...  s_3  s_2  s_1  s_0
+ *
+ *     A left-shift followed by subtraction of the original value yields a new
+ *     representation of the same value, using signed bits s_i = b_(i+1) - b_i.
+ *     This representation from Booth's paper has since appeared in the
+ *     literature under a variety of different names including "reversed binary
+ *     form", "alternating greedy expansion", "mutual opposite form", and
+ *     "sign-alternating {+-1}-representation".
+ *
+ *     An interesting property is that among the nonzero bits, values 1 and -1
+ *     strictly alternate.
+ *
+ * (2) Various window schemes can be applied to the Booth representation of
+ *     integers: for example, right-to-left sliding windows yield the wNAF
+ *     (a signed-digit encoding independently discovered by various researchers
+ *     in the 1990s), and left-to-right sliding windows yield a left-to-right
+ *     equivalent of the wNAF (independently discovered by various researchers
+ *     around 2004).
+ *
+ * To prevent leaking information through side channels in point multiplication,
+ * we need to recode the given integer into a regular pattern: sliding windows
+ * as in wNAFs won't do, we need their fixed-window equivalent -- which is a few
+ * decades older: we'll be using the so-called "modified Booth encoding" due to
+ * MacSorley ("High-speed arithmetic in binary computers", Proc. IRE, vol. 49
+ * (1961), pp. 67-91), in a radix-2^5 setting.  That is, we always combine five
+ * signed bits into a signed digit:
+ *
+ *       s_(4j + 4) s_(4j + 3) s_(4j + 2) s_(4j + 1) s_(4j)
+ *
+ * The sign-alternating property implies that the resulting digit values are
+ * integers from -16 to 16.
+ *
+ * Of course, we don't actually need to compute the signed digits s_i as an
+ * intermediate step (that's just a nice way to see how this scheme relates
+ * to the wNAF): a direct computation obtains the recoded digit from the
+ * six bits b_(4j + 4) ... b_(4j - 1).
+ *
+ * This function takes those five bits as an integer (0 .. 63), writing the
+ * recoded digit to *sign (0 for positive, 1 for negative) and *digit (absolute
+ * value, in the range 0 .. 8).  Note that this integer essentially provides the
+ * input bits "shifted to the left" by one position: for example, the input to
+ * compute the least significant recoded digit, given that there's no bit b_-1,
+ * has to be b_4 b_3 b_2 b_1 b_0 0.
+ *
+ */
+void ec_GFp_nistp_recode_scalar_bits(unsigned char *sign,
+                                     unsigned char *digit, unsigned char in)
+{
+    unsigned char s, d;
+
+    s = ~((in >> 5) - 1);       /* sets all bits to MSB(in), 'in' seen as
+                                 * 6-bit value */
+    d = (1 << 6) - in - 1;
+    d = (d & s) | (in & ~s);
+    d = (d >> 1) + (d & 1);
+
+    *sign = s & 1;
+    *digit = d;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistz256.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistz256.c
new file mode 100644
index 000000000..aea639416
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistz256.c
@@ -0,0 +1,1701 @@
+/*
+ * Copyright 2014-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2014, Intel Corporation. All Rights Reserved.
+ * Copyright (c) 2015, CloudFlare, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Shay Gueron (1, 2), and Vlad Krasnov (1, 3)
+ * (1) Intel Corporation, Israel Development Center, Haifa, Israel
+ * (2) University of Haifa, Israel
+ * (3) CloudFlare, Inc.
+ *
+ * Reference:
+ * S.Gueron and V.Krasnov, "Fast Prime Field Elliptic Curve Cryptography with
+ *                          256 Bit Primes"
+ */
+
+#include <string.h>
+
+#include "internal/cryptlib.h"
+#include "internal/bn_int.h"
+#include "ec_lcl.h"
+#include "internal/refcount.h"
+
+#if BN_BITS2 != 64
+# define TOBN(hi,lo)    lo,hi
+#else
+# define TOBN(hi,lo)    ((BN_ULONG)hi<<32|lo)
+#endif
+
+#if defined(__GNUC__)
+# define ALIGN32        __attribute((aligned(32)))
+#elif defined(_MSC_VER)
+# define ALIGN32        __declspec(align(32))
+#else
+# define ALIGN32
+#endif
+
+#define ALIGNPTR(p,N)   ((unsigned char *)p+N-(size_t)p%N)
+#define P256_LIMBS      (256/BN_BITS2)
+
+typedef unsigned short u16;
+
+typedef struct {
+    BN_ULONG X[P256_LIMBS];
+    BN_ULONG Y[P256_LIMBS];
+    BN_ULONG Z[P256_LIMBS];
+} P256_POINT;
+
+typedef struct {
+    BN_ULONG X[P256_LIMBS];
+    BN_ULONG Y[P256_LIMBS];
+} P256_POINT_AFFINE;
+
+typedef P256_POINT_AFFINE PRECOMP256_ROW[64];
+
+/* structure for precomputed multiples of the generator */
+struct nistz256_pre_comp_st {
+    const EC_GROUP *group;      /* Parent EC_GROUP object */
+    size_t w;                   /* Window size */
+    /*
+     * Constant time access to the X and Y coordinates of the pre-computed,
+     * generator multiplies, in the Montgomery domain. Pre-calculated
+     * multiplies are stored in affine form.
+     */
+    PRECOMP256_ROW *precomp;
+    void *precomp_storage;
+    CRYPTO_REF_COUNT references;
+    CRYPTO_RWLOCK *lock;
+};
+
+/* Functions implemented in assembly */
+/*
+ * Most of below mentioned functions *preserve* the property of inputs
+ * being fully reduced, i.e. being in [0, modulus) range. Simply put if
+ * inputs are fully reduced, then output is too. Note that reverse is
+ * not true, in sense that given partially reduced inputs output can be
+ * either, not unlikely reduced. And "most" in first sentence refers to
+ * the fact that given the calculations flow one can tolerate that
+ * addition, 1st function below, produces partially reduced result *if*
+ * multiplications by 2 and 3, which customarily use addition, fully
+ * reduce it. This effectively gives two options: a) addition produces
+ * fully reduced result [as long as inputs are, just like remaining
+ * functions]; b) addition is allowed to produce partially reduced
+ * result, but multiplications by 2 and 3 perform additional reduction
+ * step. Choice between the two can be platform-specific, but it was a)
+ * in all cases so far...
+ */
+/* Modular add: res = a+b mod P   */
+void ecp_nistz256_add(BN_ULONG res[P256_LIMBS],
+                      const BN_ULONG a[P256_LIMBS],
+                      const BN_ULONG b[P256_LIMBS]);
+/* Modular mul by 2: res = 2*a mod P */
+void ecp_nistz256_mul_by_2(BN_ULONG res[P256_LIMBS],
+                           const BN_ULONG a[P256_LIMBS]);
+/* Modular mul by 3: res = 3*a mod P */
+void ecp_nistz256_mul_by_3(BN_ULONG res[P256_LIMBS],
+                           const BN_ULONG a[P256_LIMBS]);
+
+/* Modular div by 2: res = a/2 mod P */
+void ecp_nistz256_div_by_2(BN_ULONG res[P256_LIMBS],
+                           const BN_ULONG a[P256_LIMBS]);
+/* Modular sub: res = a-b mod P   */
+void ecp_nistz256_sub(BN_ULONG res[P256_LIMBS],
+                      const BN_ULONG a[P256_LIMBS],
+                      const BN_ULONG b[P256_LIMBS]);
+/* Modular neg: res = -a mod P    */
+void ecp_nistz256_neg(BN_ULONG res[P256_LIMBS], const BN_ULONG a[P256_LIMBS]);
+/* Montgomery mul: res = a*b*2^-256 mod P */
+void ecp_nistz256_mul_mont(BN_ULONG res[P256_LIMBS],
+                           const BN_ULONG a[P256_LIMBS],
+                           const BN_ULONG b[P256_LIMBS]);
+/* Montgomery sqr: res = a*a*2^-256 mod P */
+void ecp_nistz256_sqr_mont(BN_ULONG res[P256_LIMBS],
+                           const BN_ULONG a[P256_LIMBS]);
+/* Convert a number from Montgomery domain, by multiplying with 1 */
+void ecp_nistz256_from_mont(BN_ULONG res[P256_LIMBS],
+                            const BN_ULONG in[P256_LIMBS]);
+/* Convert a number to Montgomery domain, by multiplying with 2^512 mod P*/
+void ecp_nistz256_to_mont(BN_ULONG res[P256_LIMBS],
+                          const BN_ULONG in[P256_LIMBS]);
+/* Functions that perform constant time access to the precomputed tables */
+void ecp_nistz256_scatter_w5(P256_POINT *val,
+                             const P256_POINT *in_t, int idx);
+void ecp_nistz256_gather_w5(P256_POINT *val,
+                            const P256_POINT *in_t, int idx);
+void ecp_nistz256_scatter_w7(P256_POINT_AFFINE *val,
+                             const P256_POINT_AFFINE *in_t, int idx);
+void ecp_nistz256_gather_w7(P256_POINT_AFFINE *val,
+                            const P256_POINT_AFFINE *in_t, int idx);
+
+/* One converted into the Montgomery domain */
+static const BN_ULONG ONE[P256_LIMBS] = {
+    TOBN(0x00000000, 0x00000001), TOBN(0xffffffff, 0x00000000),
+    TOBN(0xffffffff, 0xffffffff), TOBN(0x00000000, 0xfffffffe)
+};
+
+static NISTZ256_PRE_COMP *ecp_nistz256_pre_comp_new(const EC_GROUP *group);
+
+/* Precomputed tables for the default generator */
+extern const PRECOMP256_ROW ecp_nistz256_precomputed[37];
+
+/* Recode window to a signed digit, see ecp_nistputil.c for details */
+static unsigned int _booth_recode_w5(unsigned int in)
+{
+    unsigned int s, d;
+
+    s = ~((in >> 5) - 1);
+    d = (1 << 6) - in - 1;
+    d = (d & s) | (in & ~s);
+    d = (d >> 1) + (d & 1);
+
+    return (d << 1) + (s & 1);
+}
+
+static unsigned int _booth_recode_w7(unsigned int in)
+{
+    unsigned int s, d;
+
+    s = ~((in >> 7) - 1);
+    d = (1 << 8) - in - 1;
+    d = (d & s) | (in & ~s);
+    d = (d >> 1) + (d & 1);
+
+    return (d << 1) + (s & 1);
+}
+
+static void copy_conditional(BN_ULONG dst[P256_LIMBS],
+                             const BN_ULONG src[P256_LIMBS], BN_ULONG move)
+{
+    BN_ULONG mask1 = 0-move;
+    BN_ULONG mask2 = ~mask1;
+
+    dst[0] = (src[0] & mask1) ^ (dst[0] & mask2);
+    dst[1] = (src[1] & mask1) ^ (dst[1] & mask2);
+    dst[2] = (src[2] & mask1) ^ (dst[2] & mask2);
+    dst[3] = (src[3] & mask1) ^ (dst[3] & mask2);
+    if (P256_LIMBS == 8) {
+        dst[4] = (src[4] & mask1) ^ (dst[4] & mask2);
+        dst[5] = (src[5] & mask1) ^ (dst[5] & mask2);
+        dst[6] = (src[6] & mask1) ^ (dst[6] & mask2);
+        dst[7] = (src[7] & mask1) ^ (dst[7] & mask2);
+    }
+}
+
+static BN_ULONG is_zero(BN_ULONG in)
+{
+    in |= (0 - in);
+    in = ~in;
+    in >>= BN_BITS2 - 1;
+    return in;
+}
+
+static BN_ULONG is_equal(const BN_ULONG a[P256_LIMBS],
+                         const BN_ULONG b[P256_LIMBS])
+{
+    BN_ULONG res;
+
+    res = a[0] ^ b[0];
+    res |= a[1] ^ b[1];
+    res |= a[2] ^ b[2];
+    res |= a[3] ^ b[3];
+    if (P256_LIMBS == 8) {
+        res |= a[4] ^ b[4];
+        res |= a[5] ^ b[5];
+        res |= a[6] ^ b[6];
+        res |= a[7] ^ b[7];
+    }
+
+    return is_zero(res);
+}
+
+static BN_ULONG is_one(const BIGNUM *z)
+{
+    BN_ULONG res = 0;
+    BN_ULONG *a = bn_get_words(z);
+
+    if (bn_get_top(z) == (P256_LIMBS - P256_LIMBS / 8)) {
+        res = a[0] ^ ONE[0];
+        res |= a[1] ^ ONE[1];
+        res |= a[2] ^ ONE[2];
+        res |= a[3] ^ ONE[3];
+        if (P256_LIMBS == 8) {
+            res |= a[4] ^ ONE[4];
+            res |= a[5] ^ ONE[5];
+            res |= a[6] ^ ONE[6];
+            /*
+             * no check for a[7] (being zero) on 32-bit platforms,
+             * because value of "one" takes only 7 limbs.
+             */
+        }
+        res = is_zero(res);
+    }
+
+    return res;
+}
+
+/*
+ * For reference, this macro is used only when new ecp_nistz256 assembly
+ * module is being developed.  For example, configure with
+ * -DECP_NISTZ256_REFERENCE_IMPLEMENTATION and implement only functions
+ * performing simplest arithmetic operations on 256-bit vectors. Then
+ * work on implementation of higher-level functions performing point
+ * operations. Then remove ECP_NISTZ256_REFERENCE_IMPLEMENTATION
+ * and never define it again. (The correct macro denoting presence of
+ * ecp_nistz256 module is ECP_NISTZ256_ASM.)
+ */
+#ifndef ECP_NISTZ256_REFERENCE_IMPLEMENTATION
+void ecp_nistz256_point_double(P256_POINT *r, const P256_POINT *a);
+void ecp_nistz256_point_add(P256_POINT *r,
+                            const P256_POINT *a, const P256_POINT *b);
+void ecp_nistz256_point_add_affine(P256_POINT *r,
+                                   const P256_POINT *a,
+                                   const P256_POINT_AFFINE *b);
+#else
+/* Point double: r = 2*a */
+static void ecp_nistz256_point_double(P256_POINT *r, const P256_POINT *a)
+{
+    BN_ULONG S[P256_LIMBS];
+    BN_ULONG M[P256_LIMBS];
+    BN_ULONG Zsqr[P256_LIMBS];
+    BN_ULONG tmp0[P256_LIMBS];
+
+    const BN_ULONG *in_x = a->X;
+    const BN_ULONG *in_y = a->Y;
+    const BN_ULONG *in_z = a->Z;
+
+    BN_ULONG *res_x = r->X;
+    BN_ULONG *res_y = r->Y;
+    BN_ULONG *res_z = r->Z;
+
+    ecp_nistz256_mul_by_2(S, in_y);
+
+    ecp_nistz256_sqr_mont(Zsqr, in_z);
+
+    ecp_nistz256_sqr_mont(S, S);
+
+    ecp_nistz256_mul_mont(res_z, in_z, in_y);
+    ecp_nistz256_mul_by_2(res_z, res_z);
+
+    ecp_nistz256_add(M, in_x, Zsqr);
+    ecp_nistz256_sub(Zsqr, in_x, Zsqr);
+
+    ecp_nistz256_sqr_mont(res_y, S);
+    ecp_nistz256_div_by_2(res_y, res_y);
+
+    ecp_nistz256_mul_mont(M, M, Zsqr);
+    ecp_nistz256_mul_by_3(M, M);
+
+    ecp_nistz256_mul_mont(S, S, in_x);
+    ecp_nistz256_mul_by_2(tmp0, S);
+
+    ecp_nistz256_sqr_mont(res_x, M);
+
+    ecp_nistz256_sub(res_x, res_x, tmp0);
+    ecp_nistz256_sub(S, S, res_x);
+
+    ecp_nistz256_mul_mont(S, S, M);
+    ecp_nistz256_sub(res_y, S, res_y);
+}
+
+/* Point addition: r = a+b */
+static void ecp_nistz256_point_add(P256_POINT *r,
+                                   const P256_POINT *a, const P256_POINT *b)
+{
+    BN_ULONG U2[P256_LIMBS], S2[P256_LIMBS];
+    BN_ULONG U1[P256_LIMBS], S1[P256_LIMBS];
+    BN_ULONG Z1sqr[P256_LIMBS];
+    BN_ULONG Z2sqr[P256_LIMBS];
+    BN_ULONG H[P256_LIMBS], R[P256_LIMBS];
+    BN_ULONG Hsqr[P256_LIMBS];
+    BN_ULONG Rsqr[P256_LIMBS];
+    BN_ULONG Hcub[P256_LIMBS];
+
+    BN_ULONG res_x[P256_LIMBS];
+    BN_ULONG res_y[P256_LIMBS];
+    BN_ULONG res_z[P256_LIMBS];
+
+    BN_ULONG in1infty, in2infty;
+
+    const BN_ULONG *in1_x = a->X;
+    const BN_ULONG *in1_y = a->Y;
+    const BN_ULONG *in1_z = a->Z;
+
+    const BN_ULONG *in2_x = b->X;
+    const BN_ULONG *in2_y = b->Y;
+    const BN_ULONG *in2_z = b->Z;
+
+    /*
+     * Infinity in encoded as (,,0)
+     */
+    in1infty = (in1_z[0] | in1_z[1] | in1_z[2] | in1_z[3]);
+    if (P256_LIMBS == 8)
+        in1infty |= (in1_z[4] | in1_z[5] | in1_z[6] | in1_z[7]);
+
+    in2infty = (in2_z[0] | in2_z[1] | in2_z[2] | in2_z[3]);
+    if (P256_LIMBS == 8)
+        in2infty |= (in2_z[4] | in2_z[5] | in2_z[6] | in2_z[7]);
+
+    in1infty = is_zero(in1infty);
+    in2infty = is_zero(in2infty);
+
+    ecp_nistz256_sqr_mont(Z2sqr, in2_z);        /* Z2^2 */
+    ecp_nistz256_sqr_mont(Z1sqr, in1_z);        /* Z1^2 */
+
+    ecp_nistz256_mul_mont(S1, Z2sqr, in2_z);    /* S1 = Z2^3 */
+    ecp_nistz256_mul_mont(S2, Z1sqr, in1_z);    /* S2 = Z1^3 */
+
+    ecp_nistz256_mul_mont(S1, S1, in1_y);       /* S1 = Y1*Z2^3 */
+    ecp_nistz256_mul_mont(S2, S2, in2_y);       /* S2 = Y2*Z1^3 */
+    ecp_nistz256_sub(R, S2, S1);                /* R = S2 - S1 */
+
+    ecp_nistz256_mul_mont(U1, in1_x, Z2sqr);    /* U1 = X1*Z2^2 */
+    ecp_nistz256_mul_mont(U2, in2_x, Z1sqr);    /* U2 = X2*Z1^2 */
+    ecp_nistz256_sub(H, U2, U1);                /* H = U2 - U1 */
+
+    /*
+     * This should not happen during sign/ecdh, so no constant time violation
+     */
+    if (is_equal(U1, U2) && !in1infty && !in2infty) {
+        if (is_equal(S1, S2)) {
+            ecp_nistz256_point_double(r, a);
+            return;
+        } else {
+            memset(r, 0, sizeof(*r));
+            return;
+        }
+    }
+
+    ecp_nistz256_sqr_mont(Rsqr, R);             /* R^2 */
+    ecp_nistz256_mul_mont(res_z, H, in1_z);     /* Z3 = H*Z1*Z2 */
+    ecp_nistz256_sqr_mont(Hsqr, H);             /* H^2 */
+    ecp_nistz256_mul_mont(res_z, res_z, in2_z); /* Z3 = H*Z1*Z2 */
+    ecp_nistz256_mul_mont(Hcub, Hsqr, H);       /* H^3 */
+
+    ecp_nistz256_mul_mont(U2, U1, Hsqr);        /* U1*H^2 */
+    ecp_nistz256_mul_by_2(Hsqr, U2);            /* 2*U1*H^2 */
+
+    ecp_nistz256_sub(res_x, Rsqr, Hsqr);
+    ecp_nistz256_sub(res_x, res_x, Hcub);
+
+    ecp_nistz256_sub(res_y, U2, res_x);
+
+    ecp_nistz256_mul_mont(S2, S1, Hcub);
+    ecp_nistz256_mul_mont(res_y, R, res_y);
+    ecp_nistz256_sub(res_y, res_y, S2);
+
+    copy_conditional(res_x, in2_x, in1infty);
+    copy_conditional(res_y, in2_y, in1infty);
+    copy_conditional(res_z, in2_z, in1infty);
+
+    copy_conditional(res_x, in1_x, in2infty);
+    copy_conditional(res_y, in1_y, in2infty);
+    copy_conditional(res_z, in1_z, in2infty);
+
+    memcpy(r->X, res_x, sizeof(res_x));
+    memcpy(r->Y, res_y, sizeof(res_y));
+    memcpy(r->Z, res_z, sizeof(res_z));
+}
+
+/* Point addition when b is known to be affine: r = a+b */
+static void ecp_nistz256_point_add_affine(P256_POINT *r,
+                                          const P256_POINT *a,
+                                          const P256_POINT_AFFINE *b)
+{
+    BN_ULONG U2[P256_LIMBS], S2[P256_LIMBS];
+    BN_ULONG Z1sqr[P256_LIMBS];
+    BN_ULONG H[P256_LIMBS], R[P256_LIMBS];
+    BN_ULONG Hsqr[P256_LIMBS];
+    BN_ULONG Rsqr[P256_LIMBS];
+    BN_ULONG Hcub[P256_LIMBS];
+
+    BN_ULONG res_x[P256_LIMBS];
+    BN_ULONG res_y[P256_LIMBS];
+    BN_ULONG res_z[P256_LIMBS];
+
+    BN_ULONG in1infty, in2infty;
+
+    const BN_ULONG *in1_x = a->X;
+    const BN_ULONG *in1_y = a->Y;
+    const BN_ULONG *in1_z = a->Z;
+
+    const BN_ULONG *in2_x = b->X;
+    const BN_ULONG *in2_y = b->Y;
+
+    /*
+     * Infinity in encoded as (,,0)
+     */
+    in1infty = (in1_z[0] | in1_z[1] | in1_z[2] | in1_z[3]);
+    if (P256_LIMBS == 8)
+        in1infty |= (in1_z[4] | in1_z[5] | in1_z[6] | in1_z[7]);
+
+    /*
+     * In affine representation we encode infinity as (0,0), which is
+     * not on the curve, so it is OK
+     */
+    in2infty = (in2_x[0] | in2_x[1] | in2_x[2] | in2_x[3] |
+                in2_y[0] | in2_y[1] | in2_y[2] | in2_y[3]);
+    if (P256_LIMBS == 8)
+        in2infty |= (in2_x[4] | in2_x[5] | in2_x[6] | in2_x[7] |
+                     in2_y[4] | in2_y[5] | in2_y[6] | in2_y[7]);
+
+    in1infty = is_zero(in1infty);
+    in2infty = is_zero(in2infty);
+
+    ecp_nistz256_sqr_mont(Z1sqr, in1_z);        /* Z1^2 */
+
+    ecp_nistz256_mul_mont(U2, in2_x, Z1sqr);    /* U2 = X2*Z1^2 */
+    ecp_nistz256_sub(H, U2, in1_x);             /* H = U2 - U1 */
+
+    ecp_nistz256_mul_mont(S2, Z1sqr, in1_z);    /* S2 = Z1^3 */
+
+    ecp_nistz256_mul_mont(res_z, H, in1_z);     /* Z3 = H*Z1*Z2 */
+
+    ecp_nistz256_mul_mont(S2, S2, in2_y);       /* S2 = Y2*Z1^3 */
+    ecp_nistz256_sub(R, S2, in1_y);             /* R = S2 - S1 */
+
+    ecp_nistz256_sqr_mont(Hsqr, H);             /* H^2 */
+    ecp_nistz256_sqr_mont(Rsqr, R);             /* R^2 */
+    ecp_nistz256_mul_mont(Hcub, Hsqr, H);       /* H^3 */
+
+    ecp_nistz256_mul_mont(U2, in1_x, Hsqr);     /* U1*H^2 */
+    ecp_nistz256_mul_by_2(Hsqr, U2);            /* 2*U1*H^2 */
+
+    ecp_nistz256_sub(res_x, Rsqr, Hsqr);
+    ecp_nistz256_sub(res_x, res_x, Hcub);
+    ecp_nistz256_sub(H, U2, res_x);
+
+    ecp_nistz256_mul_mont(S2, in1_y, Hcub);
+    ecp_nistz256_mul_mont(H, H, R);
+    ecp_nistz256_sub(res_y, H, S2);
+
+    copy_conditional(res_x, in2_x, in1infty);
+    copy_conditional(res_x, in1_x, in2infty);
+
+    copy_conditional(res_y, in2_y, in1infty);
+    copy_conditional(res_y, in1_y, in2infty);
+
+    copy_conditional(res_z, ONE, in1infty);
+    copy_conditional(res_z, in1_z, in2infty);
+
+    memcpy(r->X, res_x, sizeof(res_x));
+    memcpy(r->Y, res_y, sizeof(res_y));
+    memcpy(r->Z, res_z, sizeof(res_z));
+}
+#endif
+
+/* r = in^-1 mod p */
+static void ecp_nistz256_mod_inverse(BN_ULONG r[P256_LIMBS],
+                                     const BN_ULONG in[P256_LIMBS])
+{
+    /*
+     * The poly is ffffffff 00000001 00000000 00000000 00000000 ffffffff
+     * ffffffff ffffffff We use FLT and used poly-2 as exponent
+     */
+    BN_ULONG p2[P256_LIMBS];
+    BN_ULONG p4[P256_LIMBS];
+    BN_ULONG p8[P256_LIMBS];
+    BN_ULONG p16[P256_LIMBS];
+    BN_ULONG p32[P256_LIMBS];
+    BN_ULONG res[P256_LIMBS];
+    int i;
+
+    ecp_nistz256_sqr_mont(res, in);
+    ecp_nistz256_mul_mont(p2, res, in);         /* 3*p */
+
+    ecp_nistz256_sqr_mont(res, p2);
+    ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_mul_mont(p4, res, p2);         /* f*p */
+
+    ecp_nistz256_sqr_mont(res, p4);
+    ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_mul_mont(p8, res, p4);         /* ff*p */
+
+    ecp_nistz256_sqr_mont(res, p8);
+    for (i = 0; i < 7; i++)
+        ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_mul_mont(p16, res, p8);        /* ffff*p */
+
+    ecp_nistz256_sqr_mont(res, p16);
+    for (i = 0; i < 15; i++)
+        ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_mul_mont(p32, res, p16);       /* ffffffff*p */
+
+    ecp_nistz256_sqr_mont(res, p32);
+    for (i = 0; i < 31; i++)
+        ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_mul_mont(res, res, in);
+
+    for (i = 0; i < 32 * 4; i++)
+        ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_mul_mont(res, res, p32);
+
+    for (i = 0; i < 32; i++)
+        ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_mul_mont(res, res, p32);
+
+    for (i = 0; i < 16; i++)
+        ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_mul_mont(res, res, p16);
+
+    for (i = 0; i < 8; i++)
+        ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_mul_mont(res, res, p8);
+
+    ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_mul_mont(res, res, p4);
+
+    ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_mul_mont(res, res, p2);
+
+    ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_sqr_mont(res, res);
+    ecp_nistz256_mul_mont(res, res, in);
+
+    memcpy(r, res, sizeof(res));
+}
+
+/*
+ * ecp_nistz256_bignum_to_field_elem copies the contents of |in| to |out| and
+ * returns one if it fits. Otherwise it returns zero.
+ */
+__owur static int ecp_nistz256_bignum_to_field_elem(BN_ULONG out[P256_LIMBS],
+                                                    const BIGNUM *in)
+{
+    return bn_copy_words(out, in, P256_LIMBS);
+}
+
+/* r = sum(scalar[i]*point[i]) */
+__owur static int ecp_nistz256_windowed_mul(const EC_GROUP *group,
+                                            P256_POINT *r,
+                                            const BIGNUM **scalar,
+                                            const EC_POINT **point,
+                                            size_t num, BN_CTX *ctx)
+{
+    size_t i;
+    int j, ret = 0;
+    unsigned int idx;
+    unsigned char (*p_str)[33] = NULL;
+    const unsigned int window_size = 5;
+    const unsigned int mask = (1 << (window_size + 1)) - 1;
+    unsigned int wvalue;
+    P256_POINT *temp;           /* place for 5 temporary points */
+    const BIGNUM **scalars = NULL;
+    P256_POINT (*table)[16] = NULL;
+    void *table_storage = NULL;
+
+    if ((num * 16 + 6) > OPENSSL_MALLOC_MAX_NELEMS(P256_POINT)
+        || (table_storage =
+            OPENSSL_malloc((num * 16 + 5) * sizeof(P256_POINT) + 64)) == NULL
+        || (p_str =
+            OPENSSL_malloc(num * 33 * sizeof(unsigned char))) == NULL
+        || (scalars = OPENSSL_malloc(num * sizeof(BIGNUM *))) == NULL) {
+        ECerr(EC_F_ECP_NISTZ256_WINDOWED_MUL, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    table = (void *)ALIGNPTR(table_storage, 64);
+    temp = (P256_POINT *)(table + num);
+
+    for (i = 0; i < num; i++) {
+        P256_POINT *row = table[i];
+
+        /* This is an unusual input, we don't guarantee constant-timeness. */
+        if ((BN_num_bits(scalar[i]) > 256) || BN_is_negative(scalar[i])) {
+            BIGNUM *mod;
+
+            if ((mod = BN_CTX_get(ctx)) == NULL)
+                goto err;
+            if (!BN_nnmod(mod, scalar[i], group->order, ctx)) {
+                ECerr(EC_F_ECP_NISTZ256_WINDOWED_MUL, ERR_R_BN_LIB);
+                goto err;
+            }
+            scalars[i] = mod;
+        } else
+            scalars[i] = scalar[i];
+
+        for (j = 0; j < bn_get_top(scalars[i]) * BN_BYTES; j += BN_BYTES) {
+            BN_ULONG d = bn_get_words(scalars[i])[j / BN_BYTES];
+
+            p_str[i][j + 0] = (unsigned char)d;
+            p_str[i][j + 1] = (unsigned char)(d >> 8);
+            p_str[i][j + 2] = (unsigned char)(d >> 16);
+            p_str[i][j + 3] = (unsigned char)(d >>= 24);
+            if (BN_BYTES == 8) {
+                d >>= 8;
+                p_str[i][j + 4] = (unsigned char)d;
+                p_str[i][j + 5] = (unsigned char)(d >> 8);
+                p_str[i][j + 6] = (unsigned char)(d >> 16);
+                p_str[i][j + 7] = (unsigned char)(d >> 24);
+            }
+        }
+        for (; j < 33; j++)
+            p_str[i][j] = 0;
+
+        if (!ecp_nistz256_bignum_to_field_elem(temp[0].X, point[i]->X)
+            || !ecp_nistz256_bignum_to_field_elem(temp[0].Y, point[i]->Y)
+            || !ecp_nistz256_bignum_to_field_elem(temp[0].Z, point[i]->Z)) {
+            ECerr(EC_F_ECP_NISTZ256_WINDOWED_MUL,
+                  EC_R_COORDINATES_OUT_OF_RANGE);
+            goto err;
+        }
+
+        /*
+         * row[0] is implicitly (0,0,0) (the point at infinity), therefore it
+         * is not stored. All other values are actually stored with an offset
+         * of -1 in table.
+         */
+
+        ecp_nistz256_scatter_w5  (row, &temp[0], 1);
+        ecp_nistz256_point_double(&temp[1], &temp[0]);              /*1+1=2  */
+        ecp_nistz256_scatter_w5  (row, &temp[1], 2);
+        ecp_nistz256_point_add   (&temp[2], &temp[1], &temp[0]);    /*2+1=3  */
+        ecp_nistz256_scatter_w5  (row, &temp[2], 3);
+        ecp_nistz256_point_double(&temp[1], &temp[1]);              /*2*2=4  */
+        ecp_nistz256_scatter_w5  (row, &temp[1], 4);
+        ecp_nistz256_point_double(&temp[2], &temp[2]);              /*2*3=6  */
+        ecp_nistz256_scatter_w5  (row, &temp[2], 6);
+        ecp_nistz256_point_add   (&temp[3], &temp[1], &temp[0]);    /*4+1=5  */
+        ecp_nistz256_scatter_w5  (row, &temp[3], 5);
+        ecp_nistz256_point_add   (&temp[4], &temp[2], &temp[0]);    /*6+1=7  */
+        ecp_nistz256_scatter_w5  (row, &temp[4], 7);
+        ecp_nistz256_point_double(&temp[1], &temp[1]);              /*2*4=8  */
+        ecp_nistz256_scatter_w5  (row, &temp[1], 8);
+        ecp_nistz256_point_double(&temp[2], &temp[2]);              /*2*6=12 */
+        ecp_nistz256_scatter_w5  (row, &temp[2], 12);
+        ecp_nistz256_point_double(&temp[3], &temp[3]);              /*2*5=10 */
+        ecp_nistz256_scatter_w5  (row, &temp[3], 10);
+        ecp_nistz256_point_double(&temp[4], &temp[4]);              /*2*7=14 */
+        ecp_nistz256_scatter_w5  (row, &temp[4], 14);
+        ecp_nistz256_point_add   (&temp[2], &temp[2], &temp[0]);    /*12+1=13*/
+        ecp_nistz256_scatter_w5  (row, &temp[2], 13);
+        ecp_nistz256_point_add   (&temp[3], &temp[3], &temp[0]);    /*10+1=11*/
+        ecp_nistz256_scatter_w5  (row, &temp[3], 11);
+        ecp_nistz256_point_add   (&temp[4], &temp[4], &temp[0]);    /*14+1=15*/
+        ecp_nistz256_scatter_w5  (row, &temp[4], 15);
+        ecp_nistz256_point_add   (&temp[2], &temp[1], &temp[0]);    /*8+1=9  */
+        ecp_nistz256_scatter_w5  (row, &temp[2], 9);
+        ecp_nistz256_point_double(&temp[1], &temp[1]);              /*2*8=16 */
+        ecp_nistz256_scatter_w5  (row, &temp[1], 16);
+    }
+
+    idx = 255;
+
+    wvalue = p_str[0][(idx - 1) / 8];
+    wvalue = (wvalue >> ((idx - 1) % 8)) & mask;
+
+    /*
+     * We gather to temp[0], because we know it's position relative
+     * to table
+     */
+    ecp_nistz256_gather_w5(&temp[0], table[0], _booth_recode_w5(wvalue) >> 1);
+    memcpy(r, &temp[0], sizeof(temp[0]));
+
+    while (idx >= 5) {
+        for (i = (idx == 255 ? 1 : 0); i < num; i++) {
+            unsigned int off = (idx - 1) / 8;
+
+            wvalue = p_str[i][off] | p_str[i][off + 1] << 8;
+            wvalue = (wvalue >> ((idx - 1) % 8)) & mask;
+
+            wvalue = _booth_recode_w5(wvalue);
+
+            ecp_nistz256_gather_w5(&temp[0], table[i], wvalue >> 1);
+
+            ecp_nistz256_neg(temp[1].Y, temp[0].Y);
+            copy_conditional(temp[0].Y, temp[1].Y, (wvalue & 1));
+
+            ecp_nistz256_point_add(r, r, &temp[0]);
+        }
+
+        idx -= window_size;
+
+        ecp_nistz256_point_double(r, r);
+        ecp_nistz256_point_double(r, r);
+        ecp_nistz256_point_double(r, r);
+        ecp_nistz256_point_double(r, r);
+        ecp_nistz256_point_double(r, r);
+    }
+
+    /* Final window */
+    for (i = 0; i < num; i++) {
+        wvalue = p_str[i][0];
+        wvalue = (wvalue << 1) & mask;
+
+        wvalue = _booth_recode_w5(wvalue);
+
+        ecp_nistz256_gather_w5(&temp[0], table[i], wvalue >> 1);
+
+        ecp_nistz256_neg(temp[1].Y, temp[0].Y);
+        copy_conditional(temp[0].Y, temp[1].Y, wvalue & 1);
+
+        ecp_nistz256_point_add(r, r, &temp[0]);
+    }
+
+    ret = 1;
+ err:
+    OPENSSL_free(table_storage);
+    OPENSSL_free(p_str);
+    OPENSSL_free(scalars);
+    return ret;
+}
+
+/* Coordinates of G, for which we have precomputed tables */
+static const BN_ULONG def_xG[P256_LIMBS] = {
+    TOBN(0x79e730d4, 0x18a9143c), TOBN(0x75ba95fc, 0x5fedb601),
+    TOBN(0x79fb732b, 0x77622510), TOBN(0x18905f76, 0xa53755c6)
+};
+
+static const BN_ULONG def_yG[P256_LIMBS] = {
+    TOBN(0xddf25357, 0xce95560a), TOBN(0x8b4ab8e4, 0xba19e45c),
+    TOBN(0xd2e88688, 0xdd21f325), TOBN(0x8571ff18, 0x25885d85)
+};
+
+/*
+ * ecp_nistz256_is_affine_G returns one if |generator| is the standard, P-256
+ * generator.
+ */
+static int ecp_nistz256_is_affine_G(const EC_POINT *generator)
+{
+    return (bn_get_top(generator->X) == P256_LIMBS) &&
+        (bn_get_top(generator->Y) == P256_LIMBS) &&
+        is_equal(bn_get_words(generator->X), def_xG) &&
+        is_equal(bn_get_words(generator->Y), def_yG) &&
+        is_one(generator->Z);
+}
+
+__owur static int ecp_nistz256_mult_precompute(EC_GROUP *group, BN_CTX *ctx)
+{
+    /*
+     * We precompute a table for a Booth encoded exponent (wNAF) based
+     * computation. Each table holds 64 values for safe access, with an
+     * implicit value of infinity at index zero. We use window of size 7, and
+     * therefore require ceil(256/7) = 37 tables.
+     */
+    const BIGNUM *order;
+    EC_POINT *P = NULL, *T = NULL;
+    const EC_POINT *generator;
+    NISTZ256_PRE_COMP *pre_comp;
+    BN_CTX *new_ctx = NULL;
+    int i, j, k, ret = 0;
+    size_t w;
+
+    PRECOMP256_ROW *preComputedTable = NULL;
+    unsigned char *precomp_storage = NULL;
+
+    /* if there is an old NISTZ256_PRE_COMP object, throw it away */
+    EC_pre_comp_free(group);
+    generator = EC_GROUP_get0_generator(group);
+    if (generator == NULL) {
+        ECerr(EC_F_ECP_NISTZ256_MULT_PRECOMPUTE, EC_R_UNDEFINED_GENERATOR);
+        return 0;
+    }
+
+    if (ecp_nistz256_is_affine_G(generator)) {
+        /*
+         * No need to calculate tables for the standard generator because we
+         * have them statically.
+         */
+        return 1;
+    }
+
+    if ((pre_comp = ecp_nistz256_pre_comp_new(group)) == NULL)
+        return 0;
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            goto err;
+    }
+
+    BN_CTX_start(ctx);
+
+    order = EC_GROUP_get0_order(group);
+    if (order == NULL)
+        goto err;
+
+    if (BN_is_zero(order)) {
+        ECerr(EC_F_ECP_NISTZ256_MULT_PRECOMPUTE, EC_R_UNKNOWN_ORDER);
+        goto err;
+    }
+
+    w = 7;
+
+    if ((precomp_storage =
+         OPENSSL_malloc(37 * 64 * sizeof(P256_POINT_AFFINE) + 64)) == NULL) {
+        ECerr(EC_F_ECP_NISTZ256_MULT_PRECOMPUTE, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    preComputedTable = (void *)ALIGNPTR(precomp_storage, 64);
+
+    P = EC_POINT_new(group);
+    T = EC_POINT_new(group);
+    if (P == NULL || T == NULL)
+        goto err;
+
+    /*
+     * The zero entry is implicitly infinity, and we skip it, storing other
+     * values with -1 offset.
+     */
+    if (!EC_POINT_copy(T, generator))
+        goto err;
+
+    for (k = 0; k < 64; k++) {
+        if (!EC_POINT_copy(P, T))
+            goto err;
+        for (j = 0; j < 37; j++) {
+            P256_POINT_AFFINE temp;
+            /*
+             * It would be faster to use EC_POINTs_make_affine and
+             * make multiple points affine at the same time.
+             */
+            if (!EC_POINT_make_affine(group, P, ctx))
+                goto err;
+            if (!ecp_nistz256_bignum_to_field_elem(temp.X, P->X) ||
+                !ecp_nistz256_bignum_to_field_elem(temp.Y, P->Y)) {
+                ECerr(EC_F_ECP_NISTZ256_MULT_PRECOMPUTE,
+                      EC_R_COORDINATES_OUT_OF_RANGE);
+                goto err;
+            }
+            ecp_nistz256_scatter_w7(preComputedTable[j], &temp, k);
+            for (i = 0; i < 7; i++) {
+                if (!EC_POINT_dbl(group, P, P, ctx))
+                    goto err;
+            }
+        }
+        if (!EC_POINT_add(group, T, T, generator, ctx))
+            goto err;
+    }
+
+    pre_comp->group = group;
+    pre_comp->w = w;
+    pre_comp->precomp = preComputedTable;
+    pre_comp->precomp_storage = precomp_storage;
+    precomp_storage = NULL;
+    SETPRECOMP(group, nistz256, pre_comp);
+    pre_comp = NULL;
+    ret = 1;
+
+ err:
+    if (ctx != NULL)
+        BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+
+    EC_nistz256_pre_comp_free(pre_comp);
+    OPENSSL_free(precomp_storage);
+    EC_POINT_free(P);
+    EC_POINT_free(T);
+    return ret;
+}
+
+/*
+ * Note that by default ECP_NISTZ256_AVX2 is undefined. While it's great
+ * code processing 4 points in parallel, corresponding serial operation
+ * is several times slower, because it uses 29x29=58-bit multiplication
+ * as opposite to 64x64=128-bit in integer-only scalar case. As result
+ * it doesn't provide *significant* performance improvement. Note that
+ * just defining ECP_NISTZ256_AVX2 is not sufficient to make it work,
+ * you'd need to compile even asm/ecp_nistz256-avx.pl module.
+ */
+#if defined(ECP_NISTZ256_AVX2)
+# if !(defined(__x86_64) || defined(__x86_64__) || \
+       defined(_M_AMD64) || defined(_M_X64)) || \
+     !(defined(__GNUC__) || defined(_MSC_VER)) /* this is for ALIGN32 */
+#  undef ECP_NISTZ256_AVX2
+# else
+/* Constant time access, loading four values, from four consecutive tables */
+void ecp_nistz256_avx2_multi_gather_w7(void *result, const void *in,
+                                       int index0, int index1, int index2,
+                                       int index3);
+void ecp_nistz256_avx2_transpose_convert(void *RESULTx4, const void *in);
+void ecp_nistz256_avx2_convert_transpose_back(void *result, const void *Ax4);
+void ecp_nistz256_avx2_point_add_affine_x4(void *RESULTx4, const void *Ax4,
+                                           const void *Bx4);
+void ecp_nistz256_avx2_point_add_affines_x4(void *RESULTx4, const void *Ax4,
+                                            const void *Bx4);
+void ecp_nistz256_avx2_to_mont(void *RESULTx4, const void *Ax4);
+void ecp_nistz256_avx2_from_mont(void *RESULTx4, const void *Ax4);
+void ecp_nistz256_avx2_set1(void *RESULTx4);
+int ecp_nistz_avx2_eligible(void);
+
+static void booth_recode_w7(unsigned char *sign,
+                            unsigned char *digit, unsigned char in)
+{
+    unsigned char s, d;
+
+    s = ~((in >> 7) - 1);
+    d = (1 << 8) - in - 1;
+    d = (d & s) | (in & ~s);
+    d = (d >> 1) + (d & 1);
+
+    *sign = s & 1;
+    *digit = d;
+}
+
+/*
+ * ecp_nistz256_avx2_mul_g performs multiplication by G, using only the
+ * precomputed table. It does 4 affine point additions in parallel,
+ * significantly speeding up point multiplication for a fixed value.
+ */
+static void ecp_nistz256_avx2_mul_g(P256_POINT *r,
+                                    unsigned char p_str[33],
+                                    const P256_POINT_AFFINE(*preComputedTable)[64])
+{
+    const unsigned int window_size = 7;
+    const unsigned int mask = (1 << (window_size + 1)) - 1;
+    unsigned int wvalue;
+    /* Using 4 windows at a time */
+    unsigned char sign0, digit0;
+    unsigned char sign1, digit1;
+    unsigned char sign2, digit2;
+    unsigned char sign3, digit3;
+    unsigned int idx = 0;
+    BN_ULONG tmp[P256_LIMBS];
+    int i;
+
+    ALIGN32 BN_ULONG aX4[4 * 9 * 3] = { 0 };
+    ALIGN32 BN_ULONG bX4[4 * 9 * 2] = { 0 };
+    ALIGN32 P256_POINT_AFFINE point_arr[4];
+    ALIGN32 P256_POINT res_point_arr[4];
+
+    /* Initial four windows */
+    wvalue = *((u16 *) & p_str[0]);
+    wvalue = (wvalue << 1) & mask;
+    idx += window_size;
+    booth_recode_w7(&sign0, &digit0, wvalue);
+    wvalue = *((u16 *) & p_str[(idx - 1) / 8]);
+    wvalue = (wvalue >> ((idx - 1) % 8)) & mask;
+    idx += window_size;
+    booth_recode_w7(&sign1, &digit1, wvalue);
+    wvalue = *((u16 *) & p_str[(idx - 1) / 8]);
+    wvalue = (wvalue >> ((idx - 1) % 8)) & mask;
+    idx += window_size;
+    booth_recode_w7(&sign2, &digit2, wvalue);
+    wvalue = *((u16 *) & p_str[(idx - 1) / 8]);
+    wvalue = (wvalue >> ((idx - 1) % 8)) & mask;
+    idx += window_size;
+    booth_recode_w7(&sign3, &digit3, wvalue);
+
+    ecp_nistz256_avx2_multi_gather_w7(point_arr, preComputedTable[0],
+                                      digit0, digit1, digit2, digit3);
+
+    ecp_nistz256_neg(tmp, point_arr[0].Y);
+    copy_conditional(point_arr[0].Y, tmp, sign0);
+    ecp_nistz256_neg(tmp, point_arr[1].Y);
+    copy_conditional(point_arr[1].Y, tmp, sign1);
+    ecp_nistz256_neg(tmp, point_arr[2].Y);
+    copy_conditional(point_arr[2].Y, tmp, sign2);
+    ecp_nistz256_neg(tmp, point_arr[3].Y);
+    copy_conditional(point_arr[3].Y, tmp, sign3);
+
+    ecp_nistz256_avx2_transpose_convert(aX4, point_arr);
+    ecp_nistz256_avx2_to_mont(aX4, aX4);
+    ecp_nistz256_avx2_to_mont(&aX4[4 * 9], &aX4[4 * 9]);
+    ecp_nistz256_avx2_set1(&aX4[4 * 9 * 2]);
+
+    wvalue = *((u16 *) & p_str[(idx - 1) / 8]);
+    wvalue = (wvalue >> ((idx - 1) % 8)) & mask;
+    idx += window_size;
+    booth_recode_w7(&sign0, &digit0, wvalue);
+    wvalue = *((u16 *) & p_str[(idx - 1) / 8]);
+    wvalue = (wvalue >> ((idx - 1) % 8)) & mask;
+    idx += window_size;
+    booth_recode_w7(&sign1, &digit1, wvalue);
+    wvalue = *((u16 *) & p_str[(idx - 1) / 8]);
+    wvalue = (wvalue >> ((idx - 1) % 8)) & mask;
+    idx += window_size;
+    booth_recode_w7(&sign2, &digit2, wvalue);
+    wvalue = *((u16 *) & p_str[(idx - 1) / 8]);
+    wvalue = (wvalue >> ((idx - 1) % 8)) & mask;
+    idx += window_size;
+    booth_recode_w7(&sign3, &digit3, wvalue);
+
+    ecp_nistz256_avx2_multi_gather_w7(point_arr, preComputedTable[4 * 1],
+                                      digit0, digit1, digit2, digit3);
+
+    ecp_nistz256_neg(tmp, point_arr[0].Y);
+    copy_conditional(point_arr[0].Y, tmp, sign0);
+    ecp_nistz256_neg(tmp, point_arr[1].Y);
+    copy_conditional(point_arr[1].Y, tmp, sign1);
+    ecp_nistz256_neg(tmp, point_arr[2].Y);
+    copy_conditional(point_arr[2].Y, tmp, sign2);
+    ecp_nistz256_neg(tmp, point_arr[3].Y);
+    copy_conditional(point_arr[3].Y, tmp, sign3);
+
+    ecp_nistz256_avx2_transpose_convert(bX4, point_arr);
+    ecp_nistz256_avx2_to_mont(bX4, bX4);
+    ecp_nistz256_avx2_to_mont(&bX4[4 * 9], &bX4[4 * 9]);
+    /* Optimized when both inputs are affine */
+    ecp_nistz256_avx2_point_add_affines_x4(aX4, aX4, bX4);
+
+    for (i = 2; i < 9; i++) {
+        wvalue = *((u16 *) & p_str[(idx - 1) / 8]);
+        wvalue = (wvalue >> ((idx - 1) % 8)) & mask;
+        idx += window_size;
+        booth_recode_w7(&sign0, &digit0, wvalue);
+        wvalue = *((u16 *) & p_str[(idx - 1) / 8]);
+        wvalue = (wvalue >> ((idx - 1) % 8)) & mask;
+        idx += window_size;
+        booth_recode_w7(&sign1, &digit1, wvalue);
+        wvalue = *((u16 *) & p_str[(idx - 1) / 8]);
+        wvalue = (wvalue >> ((idx - 1) % 8)) & mask;
+        idx += window_size;
+        booth_recode_w7(&sign2, &digit2, wvalue);
+        wvalue = *((u16 *) & p_str[(idx - 1) / 8]);
+        wvalue = (wvalue >> ((idx - 1) % 8)) & mask;
+        idx += window_size;
+        booth_recode_w7(&sign3, &digit3, wvalue);
+
+        ecp_nistz256_avx2_multi_gather_w7(point_arr,
+                                          preComputedTable[4 * i],
+                                          digit0, digit1, digit2, digit3);
+
+        ecp_nistz256_neg(tmp, point_arr[0].Y);
+        copy_conditional(point_arr[0].Y, tmp, sign0);
+        ecp_nistz256_neg(tmp, point_arr[1].Y);
+        copy_conditional(point_arr[1].Y, tmp, sign1);
+        ecp_nistz256_neg(tmp, point_arr[2].Y);
+        copy_conditional(point_arr[2].Y, tmp, sign2);
+        ecp_nistz256_neg(tmp, point_arr[3].Y);
+        copy_conditional(point_arr[3].Y, tmp, sign3);
+
+        ecp_nistz256_avx2_transpose_convert(bX4, point_arr);
+        ecp_nistz256_avx2_to_mont(bX4, bX4);
+        ecp_nistz256_avx2_to_mont(&bX4[4 * 9], &bX4[4 * 9]);
+
+        ecp_nistz256_avx2_point_add_affine_x4(aX4, aX4, bX4);
+    }
+
+    ecp_nistz256_avx2_from_mont(&aX4[4 * 9 * 0], &aX4[4 * 9 * 0]);
+    ecp_nistz256_avx2_from_mont(&aX4[4 * 9 * 1], &aX4[4 * 9 * 1]);
+    ecp_nistz256_avx2_from_mont(&aX4[4 * 9 * 2], &aX4[4 * 9 * 2]);
+
+    ecp_nistz256_avx2_convert_transpose_back(res_point_arr, aX4);
+    /* Last window is performed serially */
+    wvalue = *((u16 *) & p_str[(idx - 1) / 8]);
+    wvalue = (wvalue >> ((idx - 1) % 8)) & mask;
+    booth_recode_w7(&sign0, &digit0, wvalue);
+    ecp_nistz256_gather_w7((P256_POINT_AFFINE *)r,
+                           preComputedTable[36], digit0);
+    ecp_nistz256_neg(tmp, r->Y);
+    copy_conditional(r->Y, tmp, sign0);
+    memcpy(r->Z, ONE, sizeof(ONE));
+    /* Sum the four windows */
+    ecp_nistz256_point_add(r, r, &res_point_arr[0]);
+    ecp_nistz256_point_add(r, r, &res_point_arr[1]);
+    ecp_nistz256_point_add(r, r, &res_point_arr[2]);
+    ecp_nistz256_point_add(r, r, &res_point_arr[3]);
+}
+# endif
+#endif
+
+__owur static int ecp_nistz256_set_from_affine(EC_POINT *out, const EC_GROUP *group,
+                                               const P256_POINT_AFFINE *in,
+                                               BN_CTX *ctx)
+{
+    int ret = 0;
+
+    if ((ret = bn_set_words(out->X, in->X, P256_LIMBS))
+        && (ret = bn_set_words(out->Y, in->Y, P256_LIMBS))
+        && (ret = bn_set_words(out->Z, ONE, P256_LIMBS)))
+        out->Z_is_one = 1;
+
+    return ret;
+}
+
+/* r = scalar*G + sum(scalars[i]*points[i]) */
+__owur static int ecp_nistz256_points_mul(const EC_GROUP *group,
+                                          EC_POINT *r,
+                                          const BIGNUM *scalar,
+                                          size_t num,
+                                          const EC_POINT *points[],
+                                          const BIGNUM *scalars[], BN_CTX *ctx)
+{
+    int i = 0, ret = 0, no_precomp_for_generator = 0, p_is_infinity = 0;
+    unsigned char p_str[33] = { 0 };
+    const PRECOMP256_ROW *preComputedTable = NULL;
+    const NISTZ256_PRE_COMP *pre_comp = NULL;
+    const EC_POINT *generator = NULL;
+    const BIGNUM **new_scalars = NULL;
+    const EC_POINT **new_points = NULL;
+    unsigned int idx = 0;
+    const unsigned int window_size = 7;
+    const unsigned int mask = (1 << (window_size + 1)) - 1;
+    unsigned int wvalue;
+    ALIGN32 union {
+        P256_POINT p;
+        P256_POINT_AFFINE a;
+    } t, p;
+    BIGNUM *tmp_scalar;
+
+    if ((num + 1) == 0 || (num + 1) > OPENSSL_MALLOC_MAX_NELEMS(void *)) {
+        ECerr(EC_F_ECP_NISTZ256_POINTS_MUL, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    BN_CTX_start(ctx);
+
+    if (scalar) {
+        generator = EC_GROUP_get0_generator(group);
+        if (generator == NULL) {
+            ECerr(EC_F_ECP_NISTZ256_POINTS_MUL, EC_R_UNDEFINED_GENERATOR);
+            goto err;
+        }
+
+        /* look if we can use precomputed multiples of generator */
+        pre_comp = group->pre_comp.nistz256;
+
+        if (pre_comp) {
+            /*
+             * If there is a precomputed table for the generator, check that
+             * it was generated with the same generator.
+             */
+            EC_POINT *pre_comp_generator = EC_POINT_new(group);
+            if (pre_comp_generator == NULL)
+                goto err;
+
+            ecp_nistz256_gather_w7(&p.a, pre_comp->precomp[0], 1);
+            if (!ecp_nistz256_set_from_affine(pre_comp_generator,
+                                              group, &p.a, ctx)) {
+                EC_POINT_free(pre_comp_generator);
+                goto err;
+            }
+
+            if (0 == EC_POINT_cmp(group, generator, pre_comp_generator, ctx))
+                preComputedTable = (const PRECOMP256_ROW *)pre_comp->precomp;
+
+            EC_POINT_free(pre_comp_generator);
+        }
+
+        if (preComputedTable == NULL && ecp_nistz256_is_affine_G(generator)) {
+            /*
+             * If there is no precomputed data, but the generator is the
+             * default, a hardcoded table of precomputed data is used. This
+             * is because applications, such as Apache, do not use
+             * EC_KEY_precompute_mult.
+             */
+            preComputedTable = ecp_nistz256_precomputed;
+        }
+
+        if (preComputedTable) {
+            if ((BN_num_bits(scalar) > 256)
+                || BN_is_negative(scalar)) {
+                if ((tmp_scalar = BN_CTX_get(ctx)) == NULL)
+                    goto err;
+
+                if (!BN_nnmod(tmp_scalar, scalar, group->order, ctx)) {
+                    ECerr(EC_F_ECP_NISTZ256_POINTS_MUL, ERR_R_BN_LIB);
+                    goto err;
+                }
+                scalar = tmp_scalar;
+            }
+
+            for (i = 0; i < bn_get_top(scalar) * BN_BYTES; i += BN_BYTES) {
+                BN_ULONG d = bn_get_words(scalar)[i / BN_BYTES];
+
+                p_str[i + 0] = (unsigned char)d;
+                p_str[i + 1] = (unsigned char)(d >> 8);
+                p_str[i + 2] = (unsigned char)(d >> 16);
+                p_str[i + 3] = (unsigned char)(d >>= 24);
+                if (BN_BYTES == 8) {
+                    d >>= 8;
+                    p_str[i + 4] = (unsigned char)d;
+                    p_str[i + 5] = (unsigned char)(d >> 8);
+                    p_str[i + 6] = (unsigned char)(d >> 16);
+                    p_str[i + 7] = (unsigned char)(d >> 24);
+                }
+            }
+
+            for (; i < 33; i++)
+                p_str[i] = 0;
+
+#if defined(ECP_NISTZ256_AVX2)
+            if (ecp_nistz_avx2_eligible()) {
+                ecp_nistz256_avx2_mul_g(&p.p, p_str, preComputedTable);
+            } else
+#endif
+            {
+                BN_ULONG infty;
+
+                /* First window */
+                wvalue = (p_str[0] << 1) & mask;
+                idx += window_size;
+
+                wvalue = _booth_recode_w7(wvalue);
+
+                ecp_nistz256_gather_w7(&p.a, preComputedTable[0],
+                                       wvalue >> 1);
+
+                ecp_nistz256_neg(p.p.Z, p.p.Y);
+                copy_conditional(p.p.Y, p.p.Z, wvalue & 1);
+
+                /*
+                 * Since affine infinity is encoded as (0,0) and
+                 * Jacobian ias (,,0), we need to harmonize them
+                 * by assigning "one" or zero to Z.
+                 */
+                infty = (p.p.X[0] | p.p.X[1] | p.p.X[2] | p.p.X[3] |
+                         p.p.Y[0] | p.p.Y[1] | p.p.Y[2] | p.p.Y[3]);
+                if (P256_LIMBS == 8)
+                    infty |= (p.p.X[4] | p.p.X[5] | p.p.X[6] | p.p.X[7] |
+                              p.p.Y[4] | p.p.Y[5] | p.p.Y[6] | p.p.Y[7]);
+
+                infty = 0 - is_zero(infty);
+                infty = ~infty;
+
+                p.p.Z[0] = ONE[0] & infty;
+                p.p.Z[1] = ONE[1] & infty;
+                p.p.Z[2] = ONE[2] & infty;
+                p.p.Z[3] = ONE[3] & infty;
+                if (P256_LIMBS == 8) {
+                    p.p.Z[4] = ONE[4] & infty;
+                    p.p.Z[5] = ONE[5] & infty;
+                    p.p.Z[6] = ONE[6] & infty;
+                    p.p.Z[7] = ONE[7] & infty;
+                }
+
+                for (i = 1; i < 37; i++) {
+                    unsigned int off = (idx - 1) / 8;
+                    wvalue = p_str[off] | p_str[off + 1] << 8;
+                    wvalue = (wvalue >> ((idx - 1) % 8)) & mask;
+                    idx += window_size;
+
+                    wvalue = _booth_recode_w7(wvalue);
+
+                    ecp_nistz256_gather_w7(&t.a,
+                                           preComputedTable[i], wvalue >> 1);
+
+                    ecp_nistz256_neg(t.p.Z, t.a.Y);
+                    copy_conditional(t.a.Y, t.p.Z, wvalue & 1);
+
+                    ecp_nistz256_point_add_affine(&p.p, &p.p, &t.a);
+                }
+            }
+        } else {
+            p_is_infinity = 1;
+            no_precomp_for_generator = 1;
+        }
+    } else
+        p_is_infinity = 1;
+
+    if (no_precomp_for_generator) {
+        /*
+         * Without a precomputed table for the generator, it has to be
+         * handled like a normal point.
+         */
+        new_scalars = OPENSSL_malloc((num + 1) * sizeof(BIGNUM *));
+        if (new_scalars == NULL) {
+            ECerr(EC_F_ECP_NISTZ256_POINTS_MUL, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+
+        new_points = OPENSSL_malloc((num + 1) * sizeof(EC_POINT *));
+        if (new_points == NULL) {
+            ECerr(EC_F_ECP_NISTZ256_POINTS_MUL, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+
+        memcpy(new_scalars, scalars, num * sizeof(BIGNUM *));
+        new_scalars[num] = scalar;
+        memcpy(new_points, points, num * sizeof(EC_POINT *));
+        new_points[num] = generator;
+
+        scalars = new_scalars;
+        points = new_points;
+        num++;
+    }
+
+    if (num) {
+        P256_POINT *out = &t.p;
+        if (p_is_infinity)
+            out = &p.p;
+
+        if (!ecp_nistz256_windowed_mul(group, out, scalars, points, num, ctx))
+            goto err;
+
+        if (!p_is_infinity)
+            ecp_nistz256_point_add(&p.p, &p.p, out);
+    }
+
+    /* Not constant-time, but we're only operating on the public output. */
+    if (!bn_set_words(r->X, p.p.X, P256_LIMBS) ||
+        !bn_set_words(r->Y, p.p.Y, P256_LIMBS) ||
+        !bn_set_words(r->Z, p.p.Z, P256_LIMBS)) {
+        goto err;
+    }
+    r->Z_is_one = is_one(r->Z) & 1;
+
+    ret = 1;
+
+err:
+    BN_CTX_end(ctx);
+    OPENSSL_free(new_points);
+    OPENSSL_free(new_scalars);
+    return ret;
+}
+
+__owur static int ecp_nistz256_get_affine(const EC_GROUP *group,
+                                          const EC_POINT *point,
+                                          BIGNUM *x, BIGNUM *y, BN_CTX *ctx)
+{
+    BN_ULONG z_inv2[P256_LIMBS];
+    BN_ULONG z_inv3[P256_LIMBS];
+    BN_ULONG x_aff[P256_LIMBS];
+    BN_ULONG y_aff[P256_LIMBS];
+    BN_ULONG point_x[P256_LIMBS], point_y[P256_LIMBS], point_z[P256_LIMBS];
+    BN_ULONG x_ret[P256_LIMBS], y_ret[P256_LIMBS];
+
+    if (EC_POINT_is_at_infinity(group, point)) {
+        ECerr(EC_F_ECP_NISTZ256_GET_AFFINE, EC_R_POINT_AT_INFINITY);
+        return 0;
+    }
+
+    if (!ecp_nistz256_bignum_to_field_elem(point_x, point->X) ||
+        !ecp_nistz256_bignum_to_field_elem(point_y, point->Y) ||
+        !ecp_nistz256_bignum_to_field_elem(point_z, point->Z)) {
+        ECerr(EC_F_ECP_NISTZ256_GET_AFFINE, EC_R_COORDINATES_OUT_OF_RANGE);
+        return 0;
+    }
+
+    ecp_nistz256_mod_inverse(z_inv3, point_z);
+    ecp_nistz256_sqr_mont(z_inv2, z_inv3);
+    ecp_nistz256_mul_mont(x_aff, z_inv2, point_x);
+
+    if (x != NULL) {
+        ecp_nistz256_from_mont(x_ret, x_aff);
+        if (!bn_set_words(x, x_ret, P256_LIMBS))
+            return 0;
+    }
+
+    if (y != NULL) {
+        ecp_nistz256_mul_mont(z_inv3, z_inv3, z_inv2);
+        ecp_nistz256_mul_mont(y_aff, z_inv3, point_y);
+        ecp_nistz256_from_mont(y_ret, y_aff);
+        if (!bn_set_words(y, y_ret, P256_LIMBS))
+            return 0;
+    }
+
+    return 1;
+}
+
+static NISTZ256_PRE_COMP *ecp_nistz256_pre_comp_new(const EC_GROUP *group)
+{
+    NISTZ256_PRE_COMP *ret = NULL;
+
+    if (!group)
+        return NULL;
+
+    ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        ECerr(EC_F_ECP_NISTZ256_PRE_COMP_NEW, ERR_R_MALLOC_FAILURE);
+        return ret;
+    }
+
+    ret->group = group;
+    ret->w = 6;                 /* default */
+    ret->references = 1;
+
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        ECerr(EC_F_ECP_NISTZ256_PRE_COMP_NEW, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+NISTZ256_PRE_COMP *EC_nistz256_pre_comp_dup(NISTZ256_PRE_COMP *p)
+{
+    int i;
+    if (p != NULL)
+        CRYPTO_UP_REF(&p->references, &i, p->lock);
+    return p;
+}
+
+void EC_nistz256_pre_comp_free(NISTZ256_PRE_COMP *pre)
+{
+    int i;
+
+    if (pre == NULL)
+        return;
+
+    CRYPTO_DOWN_REF(&pre->references, &i, pre->lock);
+    REF_PRINT_COUNT("EC_nistz256", x);
+    if (i > 0)
+        return;
+    REF_ASSERT_ISNT(i < 0);
+
+    OPENSSL_free(pre->precomp_storage);
+    CRYPTO_THREAD_lock_free(pre->lock);
+    OPENSSL_free(pre);
+}
+
+
+static int ecp_nistz256_window_have_precompute_mult(const EC_GROUP *group)
+{
+    /* There is a hard-coded table for the default generator. */
+    const EC_POINT *generator = EC_GROUP_get0_generator(group);
+
+    if (generator != NULL && ecp_nistz256_is_affine_G(generator)) {
+        /* There is a hard-coded table for the default generator. */
+        return 1;
+    }
+
+    return HAVEPRECOMP(group, nistz256);
+}
+
+#if defined(__x86_64) || defined(__x86_64__) || \
+    defined(_M_AMD64) || defined(_M_X64) || \
+    defined(__powerpc64__) || defined(_ARCH_PP64) || \
+    defined(__aarch64__)
+/*
+ * Montgomery mul modulo Order(P): res = a*b*2^-256 mod Order(P)
+ */
+void ecp_nistz256_ord_mul_mont(BN_ULONG res[P256_LIMBS],
+                               const BN_ULONG a[P256_LIMBS],
+                               const BN_ULONG b[P256_LIMBS]);
+void ecp_nistz256_ord_sqr_mont(BN_ULONG res[P256_LIMBS],
+                               const BN_ULONG a[P256_LIMBS],
+                               int rep);
+
+static int ecp_nistz256_inv_mod_ord(const EC_GROUP *group, BIGNUM *r,
+                                    const BIGNUM *x, BN_CTX *ctx)
+{
+    /* RR = 2^512 mod ord(p256) */
+    static const BN_ULONG RR[P256_LIMBS]  = {
+        TOBN(0x83244c95,0xbe79eea2), TOBN(0x4699799c,0x49bd6fa6),
+        TOBN(0x2845b239,0x2b6bec59), TOBN(0x66e12d94,0xf3d95620)
+    };
+    /* The constant 1 (unlike ONE that is one in Montgomery representation) */
+    static const BN_ULONG one[P256_LIMBS] = {
+        TOBN(0,1), TOBN(0,0), TOBN(0,0), TOBN(0,0)
+    };
+    /*
+     * We don't use entry 0 in the table, so we omit it and address
+     * with -1 offset.
+     */
+    BN_ULONG table[15][P256_LIMBS];
+    BN_ULONG out[P256_LIMBS], t[P256_LIMBS];
+    int i, ret = 0;
+    enum {
+        i_1 = 0, i_10,     i_11,     i_101, i_111, i_1010, i_1111,
+        i_10101, i_101010, i_101111, i_x6,  i_x8,  i_x16,  i_x32
+    };
+
+    /*
+     * Catch allocation failure early.
+     */
+    if (bn_wexpand(r, P256_LIMBS) == NULL) {
+        ECerr(EC_F_ECP_NISTZ256_INV_MOD_ORD, ERR_R_BN_LIB);
+        goto err;
+    }
+
+    if ((BN_num_bits(x) > 256) || BN_is_negative(x)) {
+        BIGNUM *tmp;
+
+        if ((tmp = BN_CTX_get(ctx)) == NULL
+            || !BN_nnmod(tmp, x, group->order, ctx)) {
+            ECerr(EC_F_ECP_NISTZ256_INV_MOD_ORD, ERR_R_BN_LIB);
+            goto err;
+        }
+        x = tmp;
+    }
+
+    if (!ecp_nistz256_bignum_to_field_elem(t, x)) {
+        ECerr(EC_F_ECP_NISTZ256_INV_MOD_ORD, EC_R_COORDINATES_OUT_OF_RANGE);
+        goto err;
+    }
+
+    ecp_nistz256_ord_mul_mont(table[0], t, RR);
+#if 0
+    /*
+     * Original sparse-then-fixed-window algorithm, retained for reference.
+     */
+    for (i = 2; i < 16; i += 2) {
+        ecp_nistz256_ord_sqr_mont(table[i-1], table[i/2-1], 1);
+        ecp_nistz256_ord_mul_mont(table[i], table[i-1], table[0]);
+    }
+
+    /*
+     * The top 128bit of the exponent are highly redudndant, so we
+     * perform an optimized flow
+     */
+    ecp_nistz256_ord_sqr_mont(t, table[15-1], 4);   /* f0 */
+    ecp_nistz256_ord_mul_mont(t, t, table[15-1]);   /* ff */
+
+    ecp_nistz256_ord_sqr_mont(out, t, 8);           /* ff00 */
+    ecp_nistz256_ord_mul_mont(out, out, t);         /* ffff */
+
+    ecp_nistz256_ord_sqr_mont(t, out, 16);          /* ffff0000 */
+    ecp_nistz256_ord_mul_mont(t, t, out);           /* ffffffff */
+
+    ecp_nistz256_ord_sqr_mont(out, t, 64);          /* ffffffff0000000000000000 */
+    ecp_nistz256_ord_mul_mont(out, out, t);         /* ffffffff00000000ffffffff */
+
+    ecp_nistz256_ord_sqr_mont(out, out, 32);        /* ffffffff00000000ffffffff00000000 */
+    ecp_nistz256_ord_mul_mont(out, out, t);         /* ffffffff00000000ffffffffffffffff */
+
+    /*
+     * The bottom 128 bit of the exponent are processed with fixed 4-bit window
+     */
+    for(i = 0; i < 32; i++) {
+        /* expLo - the low 128 bits of the exponent we use (ord(p256) - 2),
+         * split into nibbles */
+        static const unsigned char expLo[32]  = {
+            0xb,0xc,0xe,0x6,0xf,0xa,0xa,0xd,0xa,0x7,0x1,0x7,0x9,0xe,0x8,0x4,
+            0xf,0x3,0xb,0x9,0xc,0xa,0xc,0x2,0xf,0xc,0x6,0x3,0x2,0x5,0x4,0xf
+        };
+
+        ecp_nistz256_ord_sqr_mont(out, out, 4);
+        /* The exponent is public, no need in constant-time access */
+        ecp_nistz256_ord_mul_mont(out, out, table[expLo[i]-1]);
+    }
+#else
+    /*
+     * https://briansmith.org/ecc-inversion-addition-chains-01#p256_scalar_inversion
+     *
+     * Even though this code path spares 12 squarings, 4.5%, and 13
+     * multiplications, 25%, on grand scale sign operation is not that
+     * much faster, not more that 2%...
+     */
+
+    /* pre-calculate powers */
+    ecp_nistz256_ord_sqr_mont(table[i_10], table[i_1], 1);
+
+    ecp_nistz256_ord_mul_mont(table[i_11], table[i_1], table[i_10]);
+
+    ecp_nistz256_ord_mul_mont(table[i_101], table[i_11], table[i_10]);
+
+    ecp_nistz256_ord_mul_mont(table[i_111], table[i_101], table[i_10]);
+
+    ecp_nistz256_ord_sqr_mont(table[i_1010], table[i_101], 1);
+
+    ecp_nistz256_ord_mul_mont(table[i_1111], table[i_1010], table[i_101]);
+
+    ecp_nistz256_ord_sqr_mont(table[i_10101], table[i_1010], 1);
+    ecp_nistz256_ord_mul_mont(table[i_10101], table[i_10101], table[i_1]);
+
+    ecp_nistz256_ord_sqr_mont(table[i_101010], table[i_10101], 1);
+
+    ecp_nistz256_ord_mul_mont(table[i_101111], table[i_101010], table[i_101]);
+
+    ecp_nistz256_ord_mul_mont(table[i_x6], table[i_101010], table[i_10101]);
+
+    ecp_nistz256_ord_sqr_mont(table[i_x8], table[i_x6], 2);
+    ecp_nistz256_ord_mul_mont(table[i_x8], table[i_x8], table[i_11]);
+
+    ecp_nistz256_ord_sqr_mont(table[i_x16], table[i_x8], 8);
+    ecp_nistz256_ord_mul_mont(table[i_x16], table[i_x16], table[i_x8]);
+
+    ecp_nistz256_ord_sqr_mont(table[i_x32], table[i_x16], 16);
+    ecp_nistz256_ord_mul_mont(table[i_x32], table[i_x32], table[i_x16]);
+
+    /* calculations */
+    ecp_nistz256_ord_sqr_mont(out, table[i_x32], 64);
+    ecp_nistz256_ord_mul_mont(out, out, table[i_x32]);
+
+    for (i = 0; i < 27; i++) {
+        static const struct { unsigned char p, i; } chain[27] = {
+            { 32, i_x32 }, { 6,  i_101111 }, { 5,  i_111    },
+            { 4,  i_11  }, { 5,  i_1111   }, { 5,  i_10101  },
+            { 4,  i_101 }, { 3,  i_101    }, { 3,  i_101    },
+            { 5,  i_111 }, { 9,  i_101111 }, { 6,  i_1111   },
+            { 2,  i_1   }, { 5,  i_1      }, { 6,  i_1111   },
+            { 5,  i_111 }, { 4,  i_111    }, { 5,  i_111    },
+            { 5,  i_101 }, { 3,  i_11     }, { 10, i_101111 },
+            { 2,  i_11  }, { 5,  i_11     }, { 5,  i_11     },
+            { 3,  i_1   }, { 7,  i_10101  }, { 6,  i_1111   }
+        };
+
+        ecp_nistz256_ord_sqr_mont(out, out, chain[i].p);
+        ecp_nistz256_ord_mul_mont(out, out, table[chain[i].i]);
+    }
+#endif
+    ecp_nistz256_ord_mul_mont(out, out, one);
+
+    /*
+     * Can't fail, but check return code to be consistent anyway.
+     */
+    if (!bn_set_words(r, out, P256_LIMBS))
+        goto err;
+
+    ret = 1;
+err:
+    return ret;
+}
+#else
+# define ecp_nistz256_inv_mod_ord NULL
+#endif
+
+const EC_METHOD *EC_GFp_nistz256_method(void)
+{
+    static const EC_METHOD ret = {
+        EC_FLAGS_DEFAULT_OCT,
+        NID_X9_62_prime_field,
+        ec_GFp_mont_group_init,
+        ec_GFp_mont_group_finish,
+        ec_GFp_mont_group_clear_finish,
+        ec_GFp_mont_group_copy,
+        ec_GFp_mont_group_set_curve,
+        ec_GFp_simple_group_get_curve,
+        ec_GFp_simple_group_get_degree,
+        ec_group_simple_order_bits,
+        ec_GFp_simple_group_check_discriminant,
+        ec_GFp_simple_point_init,
+        ec_GFp_simple_point_finish,
+        ec_GFp_simple_point_clear_finish,
+        ec_GFp_simple_point_copy,
+        ec_GFp_simple_point_set_to_infinity,
+        ec_GFp_simple_set_Jprojective_coordinates_GFp,
+        ec_GFp_simple_get_Jprojective_coordinates_GFp,
+        ec_GFp_simple_point_set_affine_coordinates,
+        ecp_nistz256_get_affine,
+        0, 0, 0,
+        ec_GFp_simple_add,
+        ec_GFp_simple_dbl,
+        ec_GFp_simple_invert,
+        ec_GFp_simple_is_at_infinity,
+        ec_GFp_simple_is_on_curve,
+        ec_GFp_simple_cmp,
+        ec_GFp_simple_make_affine,
+        ec_GFp_simple_points_make_affine,
+        ecp_nistz256_points_mul,                    /* mul */
+        ecp_nistz256_mult_precompute,               /* precompute_mult */
+        ecp_nistz256_window_have_precompute_mult,   /* have_precompute_mult */
+        ec_GFp_mont_field_mul,
+        ec_GFp_mont_field_sqr,
+        0,                                          /* field_div */
+        ec_GFp_mont_field_inv,
+        ec_GFp_mont_field_encode,
+        ec_GFp_mont_field_decode,
+        ec_GFp_mont_field_set_to_one,
+        ec_key_simple_priv2oct,
+        ec_key_simple_oct2priv,
+        0, /* set private */
+        ec_key_simple_generate_key,
+        ec_key_simple_check_key,
+        ec_key_simple_generate_public_key,
+        0, /* keycopy */
+        0, /* keyfinish */
+        ecdh_simple_compute_key,
+        ecp_nistz256_inv_mod_ord,                   /* can be #define-d NULL */
+        0,                                          /* blind_coordinates */
+        0,                                          /* ladder_pre */
+        0,                                          /* ladder_step */
+        0                                           /* ladder_post */
+    };
+
+    return &ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistz256_table.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistz256_table.c
new file mode 100644
index 000000000..3f5625c6c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_nistz256_table.c
@@ -0,0 +1,9542 @@
+/*
+ * Copyright 2014-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This is the precomputed constant time access table for the code in
+ * ecp_montp256.c, for the default generator. The table consists of 37
+ * subtables, each subtable contains 64 affine points. The affine points are
+ * encoded as eight uint64's, four for the x coordinate and four for the y.
+ * Both values are in little-endian order. There are 37 tables because a
+ * signed, 6-bit wNAF form of the scalar is used and ceil(256/(6 + 1)) = 37.
+ * Within each table there are 64 values because the 6-bit wNAF value can
+ * take 64 values, ignoring the sign bit, which is implemented by performing
+ * a negation of the affine point when required. We would like to align it
+ * to 2MB in order to increase the chances of using a large page but that
+ * appears to lead to invalid ELF files being produced.
+ */
+
+#if defined(__GNUC__)
+__attribute((aligned(4096)))
+#elif defined(_MSC_VER)
+__declspec(align(4096))
+#elif defined(__SUNPRO_C)
+# pragma align 4096(ecp_nistz256_precomputed)
+#endif
+static const BN_ULONG ecp_nistz256_precomputed[37][64 *
+                                                   sizeof(P256_POINT_AFFINE) /
+                                                   sizeof(BN_ULONG)] = {
+    {TOBN(0x79e730d4, 0x18a9143c), TOBN(0x75ba95fc, 0x5fedb601),
+     TOBN(0x79fb732b, 0x77622510), TOBN(0x18905f76, 0xa53755c6),
+     TOBN(0xddf25357, 0xce95560a), TOBN(0x8b4ab8e4, 0xba19e45c),
+     TOBN(0xd2e88688, 0xdd21f325), TOBN(0x8571ff18, 0x25885d85),
+     TOBN(0x850046d4, 0x10ddd64d), TOBN(0xaa6ae3c1, 0xa433827d),
+     TOBN(0x73220503, 0x8d1490d9), TOBN(0xf6bb32e4, 0x3dcf3a3b),
+     TOBN(0x2f3648d3, 0x61bee1a5), TOBN(0x152cd7cb, 0xeb236ff8),
+     TOBN(0x19a8fb0e, 0x92042dbe), TOBN(0x78c57751, 0x0a5b8a3b),
+     TOBN(0xffac3f90, 0x4eebc127), TOBN(0xb027f84a, 0x087d81fb),
+     TOBN(0x66ad77dd, 0x87cbbc98), TOBN(0x26936a3f, 0xb6ff747e),
+     TOBN(0xb04c5c1f, 0xc983a7eb), TOBN(0x583e47ad, 0x0861fe1a),
+     TOBN(0x78820831, 0x1a2ee98e), TOBN(0xd5f06a29, 0xe587cc07),
+     TOBN(0x74b0b50d, 0x46918dcc), TOBN(0x4650a6ed, 0xc623c173),
+     TOBN(0x0cdaacac, 0xe8100af2), TOBN(0x577362f5, 0x41b0176b),
+     TOBN(0x2d96f24c, 0xe4cbaba6), TOBN(0x17628471, 0xfad6f447),
+     TOBN(0x6b6c36de, 0xe5ddd22e), TOBN(0x84b14c39, 0x4c5ab863),
+     TOBN(0xbe1b8aae, 0xc45c61f5), TOBN(0x90ec649a, 0x94b9537d),
+     TOBN(0x941cb5aa, 0xd076c20c), TOBN(0xc9079605, 0x890523c8),
+     TOBN(0xeb309b4a, 0xe7ba4f10), TOBN(0x73c568ef, 0xe5eb882b),
+     TOBN(0x3540a987, 0x7e7a1f68), TOBN(0x73a076bb, 0x2dd1e916),
+     TOBN(0x40394737, 0x3e77664a), TOBN(0x55ae744f, 0x346cee3e),
+     TOBN(0xd50a961a, 0x5b17a3ad), TOBN(0x13074b59, 0x54213673),
+     TOBN(0x93d36220, 0xd377e44b), TOBN(0x299c2b53, 0xadff14b5),
+     TOBN(0xf424d44c, 0xef639f11), TOBN(0xa4c9916d, 0x4a07f75f),
+     TOBN(0x0746354e, 0xa0173b4f), TOBN(0x2bd20213, 0xd23c00f7),
+     TOBN(0xf43eaab5, 0x0c23bb08), TOBN(0x13ba5119, 0xc3123e03),
+     TOBN(0x2847d030, 0x3f5b9d4d), TOBN(0x6742f2f2, 0x5da67bdd),
+     TOBN(0xef933bdc, 0x77c94195), TOBN(0xeaedd915, 0x6e240867),
+     TOBN(0x27f14cd1, 0x9499a78f), TOBN(0x462ab5c5, 0x6f9b3455),
+     TOBN(0x8f90f02a, 0xf02cfc6b), TOBN(0xb763891e, 0xb265230d),
+     TOBN(0xf59da3a9, 0x532d4977), TOBN(0x21e3327d, 0xcf9eba15),
+     TOBN(0x123c7b84, 0xbe60bbf0), TOBN(0x56ec12f2, 0x7706df76),
+     TOBN(0x75c96e8f, 0x264e20e8), TOBN(0xabe6bfed, 0x59a7a841),
+     TOBN(0x2cc09c04, 0x44c8eb00), TOBN(0xe05b3080, 0xf0c4e16b),
+     TOBN(0x1eb7777a, 0xa45f3314), TOBN(0x56af7bed, 0xce5d45e3),
+     TOBN(0x2b6e019a, 0x88b12f1a), TOBN(0x086659cd, 0xfd835f9b),
+     TOBN(0x2c18dbd1, 0x9dc21ec8), TOBN(0x98f9868a, 0x0fcf8139),
+     TOBN(0x737d2cd6, 0x48250b49), TOBN(0xcc61c947, 0x24b3428f),
+     TOBN(0x0c2b4078, 0x80dd9e76), TOBN(0xc43a8991, 0x383fbe08),
+     TOBN(0x5f7d2d65, 0x779be5d2), TOBN(0x78719a54, 0xeb3b4ab5),
+     TOBN(0xea7d260a, 0x6245e404), TOBN(0x9de40795, 0x6e7fdfe0),
+     TOBN(0x1ff3a415, 0x8dac1ab5), TOBN(0x3e7090f1, 0x649c9073),
+     TOBN(0x1a768561, 0x2b944e88), TOBN(0x250f939e, 0xe57f61c8),
+     TOBN(0x0c0daa89, 0x1ead643d), TOBN(0x68930023, 0xe125b88e),
+     TOBN(0x04b71aa7, 0xd2697768), TOBN(0xabdedef5, 0xca345a33),
+     TOBN(0x2409d29d, 0xee37385e), TOBN(0x4ee1df77, 0xcb83e156),
+     TOBN(0x0cac12d9, 0x1cbb5b43), TOBN(0x170ed2f6, 0xca895637),
+     TOBN(0x28228cfa, 0x8ade6d66), TOBN(0x7ff57c95, 0x53238aca),
+     TOBN(0xccc42563, 0x4b2ed709), TOBN(0x0e356769, 0x856fd30d),
+     TOBN(0xbcbcd43f, 0x559e9811), TOBN(0x738477ac, 0x5395b759),
+     TOBN(0x35752b90, 0xc00ee17f), TOBN(0x68748390, 0x742ed2e3),
+     TOBN(0x7cd06422, 0xbd1f5bc1), TOBN(0xfbc08769, 0xc9e7b797),
+     TOBN(0xa242a35b, 0xb0cf664a), TOBN(0x126e48f7, 0x7f9707e3),
+     TOBN(0x1717bf54, 0xc6832660), TOBN(0xfaae7332, 0xfd12c72e),
+     TOBN(0x27b52db7, 0x995d586b), TOBN(0xbe29569e, 0x832237c2),
+     TOBN(0xe8e4193e, 0x2a65e7db), TOBN(0x152706dc, 0x2eaa1bbb),
+     TOBN(0x72bcd8b7, 0xbc60055b), TOBN(0x03cc23ee, 0x56e27e4b),
+     TOBN(0xee337424, 0xe4819370), TOBN(0xe2aa0e43, 0x0ad3da09),
+     TOBN(0x40b8524f, 0x6383c45d), TOBN(0xd7663554, 0x42a41b25),
+     TOBN(0x64efa6de, 0x778a4797), TOBN(0x2042170a, 0x7079adf4),
+     TOBN(0x808b0b65, 0x0bc6fb80), TOBN(0x5882e075, 0x3ffe2e6b),
+     TOBN(0xd5ef2f7c, 0x2c83f549), TOBN(0x54d63c80, 0x9103b723),
+     TOBN(0xf2f11bd6, 0x52a23f9b), TOBN(0x3670c319, 0x4b0b6587),
+     TOBN(0x55c4623b, 0xb1580e9e), TOBN(0x64edf7b2, 0x01efe220),
+     TOBN(0x97091dcb, 0xd53c5c9d), TOBN(0xf17624b6, 0xac0a177b),
+     TOBN(0xb0f13975, 0x2cfe2dff), TOBN(0xc1a35c0a, 0x6c7a574e),
+     TOBN(0x227d3146, 0x93e79987), TOBN(0x0575bf30, 0xe89cb80e),
+     TOBN(0x2f4e247f, 0x0d1883bb), TOBN(0xebd51226, 0x3274c3d0),
+     TOBN(0x5f3e51c8, 0x56ada97a), TOBN(0x4afc964d, 0x8f8b403e),
+     TOBN(0xa6f247ab, 0x412e2979), TOBN(0x675abd1b, 0x6f80ebda),
+     TOBN(0x66a2bd72, 0x5e485a1d), TOBN(0x4b2a5caf, 0x8f4f0b3c),
+     TOBN(0x2626927f, 0x1b847bba), TOBN(0x6c6fc7d9, 0x0502394d),
+     TOBN(0xfea912ba, 0xa5659ae8), TOBN(0x68363aba, 0x25e1a16e),
+     TOBN(0xb8842277, 0x752c41ac), TOBN(0xfe545c28, 0x2897c3fc),
+     TOBN(0x2d36e9e7, 0xdc4c696b), TOBN(0x5806244a, 0xfba977c5),
+     TOBN(0x85665e9b, 0xe39508c1), TOBN(0xf720ee25, 0x6d12597b),
+     TOBN(0x8a979129, 0xd2337a31), TOBN(0x5916868f, 0x0f862bdc),
+     TOBN(0x048099d9, 0x5dd283ba), TOBN(0xe2d1eeb6, 0xfe5bfb4e),
+     TOBN(0x82ef1c41, 0x7884005d), TOBN(0xa2d4ec17, 0xffffcbae),
+     TOBN(0x9161c53f, 0x8aa95e66), TOBN(0x5ee104e1, 0xc5fee0d0),
+     TOBN(0x562e4cec, 0xc135b208), TOBN(0x74e1b265, 0x4783f47d),
+     TOBN(0x6d2a506c, 0x5a3f3b30), TOBN(0xecead9f4, 0xc16762fc),
+     TOBN(0xf29dd4b2, 0xe286e5b9), TOBN(0x1b0fadc0, 0x83bb3c61),
+     TOBN(0x7a75023e, 0x7fac29a4), TOBN(0xc086d5f1, 0xc9477fa3),
+     TOBN(0x0fc61135, 0x2f6f3076), TOBN(0xc99ffa23, 0xe3912a9a),
+     TOBN(0x6a0b0685, 0xd2f8ba3d), TOBN(0xfdc777e8, 0xe93358a4),
+     TOBN(0x94a787bb, 0x35415f04), TOBN(0x640c2d6a, 0x4d23fea4),
+     TOBN(0x9de917da, 0x153a35b5), TOBN(0x793e8d07, 0x5d5cd074),
+     TOBN(0xf4f87653, 0x2de45068), TOBN(0x37c7a7e8, 0x9e2e1f6e),
+     TOBN(0xd0825fa2, 0xa3584069), TOBN(0xaf2cea7c, 0x1727bf42),
+     TOBN(0x0360a4fb, 0x9e4785a9), TOBN(0xe5fda49c, 0x27299f4a),
+     TOBN(0x48068e13, 0x71ac2f71), TOBN(0x83d0687b, 0x9077666f),
+     TOBN(0x6d3883b2, 0x15d02819), TOBN(0x6d0d7550, 0x40dd9a35),
+     TOBN(0x61d7cbf9, 0x1d2b469f), TOBN(0xf97b232f, 0x2efc3115),
+     TOBN(0xa551d750, 0xb24bcbc7), TOBN(0x11ea4949, 0x88a1e356),
+     TOBN(0x7669f031, 0x93cb7501), TOBN(0x595dc55e, 0xca737b8a),
+     TOBN(0xa4a319ac, 0xd837879f), TOBN(0x6fc1b49e, 0xed6b67b0),
+     TOBN(0xe3959933, 0x32f1f3af), TOBN(0x966742eb, 0x65432a2e),
+     TOBN(0x4b8dc9fe, 0xb4966228), TOBN(0x96cc6312, 0x43f43950),
+     TOBN(0x12068859, 0xc9b731ee), TOBN(0x7b948dc3, 0x56f79968),
+     TOBN(0x61e4ad32, 0xed1f8008), TOBN(0xe6c9267a, 0xd8b17538),
+     TOBN(0x1ac7c5eb, 0x857ff6fb), TOBN(0x994baaa8, 0x55f2fb10),
+     TOBN(0x84cf14e1, 0x1d248018), TOBN(0x5a39898b, 0x628ac508),
+     TOBN(0x14fde97b, 0x5fa944f5), TOBN(0xed178030, 0xd12e5ac7),
+     TOBN(0x042c2af4, 0x97e2feb4), TOBN(0xd36a42d7, 0xaebf7313),
+     TOBN(0x49d2c9eb, 0x084ffdd7), TOBN(0x9f8aa54b, 0x2ef7c76a),
+     TOBN(0x9200b7ba, 0x09895e70), TOBN(0x3bd0c66f, 0xddb7fb58),
+     TOBN(0x2d97d108, 0x78eb4cbb), TOBN(0x2d431068, 0xd84bde31),
+     TOBN(0x4b523eb7, 0x172ccd1f), TOBN(0x7323cb28, 0x30a6a892),
+     TOBN(0x97082ec0, 0xcfe153eb), TOBN(0xe97f6b6a, 0xf2aadb97),
+     TOBN(0x1d3d393e, 0xd1a83da1), TOBN(0xa6a7f9c7, 0x804b2a68),
+     TOBN(0x4a688b48, 0x2d0cb71e), TOBN(0xa9b4cc5f, 0x40585278),
+     TOBN(0x5e5db46a, 0xcb66e132), TOBN(0xf1be963a, 0x0d925880),
+     TOBN(0x944a7027, 0x0317b9e2), TOBN(0xe266f959, 0x48603d48),
+     TOBN(0x98db6673, 0x5c208899), TOBN(0x90472447, 0xa2fb18a3),
+     TOBN(0x8a966939, 0x777c619f), TOBN(0x3798142a, 0x2a3be21b),
+     TOBN(0xb4241cb1, 0x3298b343), TOBN(0xa3a14e49, 0xb44f65a1),
+     TOBN(0xc5f4d6cd, 0x3ac77acd), TOBN(0xd0288cb5, 0x52b6fc3c),
+     TOBN(0xd5cc8c2f, 0x1c040abc), TOBN(0xb675511e, 0x06bf9b4a),
+     TOBN(0xd667da37, 0x9b3aa441), TOBN(0x460d45ce, 0x51601f72),
+     TOBN(0xe2f73c69, 0x6755ff89), TOBN(0xdd3cf7e7, 0x473017e6),
+     TOBN(0x8ef5689d, 0x3cf7600d), TOBN(0x948dc4f8, 0xb1fc87b4),
+     TOBN(0xd9e9fe81, 0x4ea53299), TOBN(0x2d921ca2, 0x98eb6028),
+     TOBN(0xfaecedfd, 0x0c9803fc), TOBN(0xf38ae891, 0x4d7b4745),
+     TOBN(0xd8c5fccf, 0xc5e3a3d8), TOBN(0xbefd904c, 0x4079dfbf),
+     TOBN(0xbc6d6a58, 0xfead0197), TOBN(0x39227077, 0x695532a4),
+     TOBN(0x09e23e6d, 0xdbef42f5), TOBN(0x7e449b64, 0x480a9908),
+     TOBN(0x7b969c1a, 0xad9a2e40), TOBN(0x6231d792, 0x9591c2a4),
+     TOBN(0x87151456, 0x0f664534), TOBN(0x85ceae7c, 0x4b68f103),
+     TOBN(0xac09c4ae, 0x65578ab9), TOBN(0x33ec6868, 0xf044b10c),
+     TOBN(0x6ac4832b, 0x3a8ec1f1), TOBN(0x5509d128, 0x5847d5ef),
+     TOBN(0xf909604f, 0x763f1574), TOBN(0xb16c4303, 0xc32f63c4),
+     TOBN(0xb6ab2014, 0x7ca23cd3), TOBN(0xcaa7a5c6, 0xa391849d),
+     TOBN(0x5b0673a3, 0x75678d94), TOBN(0xc982ddd4, 0xdd303e64),
+     TOBN(0xfd7b000b, 0x5db6f971), TOBN(0xbba2cb1f, 0x6f876f92),
+     TOBN(0xc77332a3, 0x3c569426), TOBN(0xa159100c, 0x570d74f8),
+     TOBN(0xfd16847f, 0xdec67ef5), TOBN(0x742ee464, 0x233e76b7),
+     TOBN(0x0b8e4134, 0xefc2b4c8), TOBN(0xca640b86, 0x42a3e521),
+     TOBN(0x653a0190, 0x8ceb6aa9), TOBN(0x313c300c, 0x547852d5),
+     TOBN(0x24e4ab12, 0x6b237af7), TOBN(0x2ba90162, 0x8bb47af8),
+     TOBN(0x3d5e58d6, 0xa8219bb7), TOBN(0xc691d0bd, 0x1b06c57f),
+     TOBN(0x0ae4cb10, 0xd257576e), TOBN(0x3569656c, 0xd54a3dc3),
+     TOBN(0xe5ebaebd, 0x94cda03a), TOBN(0x934e82d3, 0x162bfe13),
+     TOBN(0x450ac0ba, 0xe251a0c6), TOBN(0x480b9e11, 0xdd6da526),
+     TOBN(0x00467bc5, 0x8cce08b5), TOBN(0xb636458c, 0x7f178d55),
+     TOBN(0xc5748bae, 0xa677d806), TOBN(0x2763a387, 0xdfa394eb),
+     TOBN(0xa12b448a, 0x7d3cebb6), TOBN(0xe7adda3e, 0x6f20d850),
+     TOBN(0xf63ebce5, 0x1558462c), TOBN(0x58b36143, 0x620088a8),
+     TOBN(0x8a2cc3ca, 0x4d63c0ee), TOBN(0x51233117, 0x0fe948ce),
+     TOBN(0x7463fd85, 0x222ef33b), TOBN(0xadf0c7dc, 0x7c603d6c),
+     TOBN(0x0ec32d3b, 0xfe7765e5), TOBN(0xccaab359, 0xbf380409),
+     TOBN(0xbdaa84d6, 0x8e59319c), TOBN(0xd9a4c280, 0x9c80c34d),
+     TOBN(0xa9d89488, 0xa059c142), TOBN(0x6f5ae714, 0xff0b9346),
+     TOBN(0x068f237d, 0x16fb3664), TOBN(0x5853e4c4, 0x363186ac),
+     TOBN(0xe2d87d23, 0x63c52f98), TOBN(0x2ec4a766, 0x81828876),
+     TOBN(0x47b864fa, 0xe14e7b1c), TOBN(0x0c0bc0e5, 0x69192408),
+     TOBN(0xe4d7681d, 0xb82e9f3e), TOBN(0x83200f0b, 0xdf25e13c),
+     TOBN(0x8909984c, 0x66f27280), TOBN(0x462d7b00, 0x75f73227),
+     TOBN(0xd90ba188, 0xf2651798), TOBN(0x74c6e18c, 0x36ab1c34),
+     TOBN(0xab256ea3, 0x5ef54359), TOBN(0x03466612, 0xd1aa702f),
+     TOBN(0x624d6049, 0x2ed22e91), TOBN(0x6fdfe0b5, 0x6f072822),
+     TOBN(0xeeca1115, 0x39ce2271), TOBN(0x98100a4f, 0xdb01614f),
+     TOBN(0xb6b0daa2, 0xa35c628f), TOBN(0xb6f94d2e, 0xc87e9a47),
+     TOBN(0xc6773259, 0x1d57d9ce), TOBN(0xf70bfeec, 0x03884a7b),
+     TOBN(0x5fb35ccf, 0xed2bad01), TOBN(0xa155cbe3, 0x1da6a5c7),
+     TOBN(0xc2e2594c, 0x30a92f8f), TOBN(0x649c89ce, 0x5bfafe43),
+     TOBN(0xd158667d, 0xe9ff257a), TOBN(0x9b359611, 0xf32c50ae),
+     TOBN(0x4b00b20b, 0x906014cf), TOBN(0xf3a8cfe3, 0x89bc7d3d),
+     TOBN(0x4ff23ffd, 0x248a7d06), TOBN(0x80c5bfb4, 0x878873fa),
+     TOBN(0xb7d9ad90, 0x05745981), TOBN(0x179c85db, 0x3db01994),
+     TOBN(0xba41b062, 0x61a6966c), TOBN(0x4d82d052, 0xeadce5a8),
+     TOBN(0x9e91cd3b, 0xa5e6a318), TOBN(0x47795f4f, 0x95b2dda0),
+     TOBN(0xecfd7c1f, 0xd55a897c), TOBN(0x009194ab, 0xb29110fb),
+     TOBN(0x5f0e2046, 0xe381d3b0), TOBN(0x5f3425f6, 0xa98dd291),
+     TOBN(0xbfa06687, 0x730d50da), TOBN(0x0423446c, 0x4b083b7f),
+     TOBN(0x397a247d, 0xd69d3417), TOBN(0xeb629f90, 0x387ba42a),
+     TOBN(0x1ee426cc, 0xd5cd79bf), TOBN(0x0032940b, 0x946c6e18),
+     TOBN(0x1b1e8ae0, 0x57477f58), TOBN(0xe94f7d34, 0x6d823278),
+     TOBN(0xc747cb96, 0x782ba21a), TOBN(0xc5254469, 0xf72b33a5),
+     TOBN(0x772ef6de, 0xc7f80c81), TOBN(0xd73acbfe, 0x2cd9e6b5),
+     TOBN(0x4075b5b1, 0x49ee90d9), TOBN(0x785c339a, 0xa06e9eba),
+     TOBN(0xa1030d5b, 0xabf825e0), TOBN(0xcec684c3, 0xa42931dc),
+     TOBN(0x42ab62c9, 0xc1586e63), TOBN(0x45431d66, 0x5ab43f2b),
+     TOBN(0x57c8b2c0, 0x55f7835d), TOBN(0x033da338, 0xc1b7f865),
+     TOBN(0x283c7513, 0xcaa76097), TOBN(0x0a624fa9, 0x36c83906),
+     TOBN(0x6b20afec, 0x715af2c7), TOBN(0x4b969974, 0xeba78bfd),
+     TOBN(0x220755cc, 0xd921d60e), TOBN(0x9b944e10, 0x7baeca13),
+     TOBN(0x04819d51, 0x5ded93d4), TOBN(0x9bbff86e, 0x6dddfd27),
+     TOBN(0x6b344130, 0x77adc612), TOBN(0xa7496529, 0xbbd803a0),
+     TOBN(0x1a1baaa7, 0x6d8805bd), TOBN(0xc8403902, 0x470343ad),
+     TOBN(0x39f59f66, 0x175adff1), TOBN(0x0b26d7fb, 0xb7d8c5b7),
+     TOBN(0xa875f5ce, 0x529d75e3), TOBN(0x85efc7e9, 0x41325cc2),
+     TOBN(0x21950b42, 0x1ff6acd3), TOBN(0xffe70484, 0x53dc6909),
+     TOBN(0xff4cd0b2, 0x28766127), TOBN(0xabdbe608, 0x4fb7db2b),
+     TOBN(0x837c9228, 0x5e1109e8), TOBN(0x26147d27, 0xf4645b5a),
+     TOBN(0x4d78f592, 0xf7818ed8), TOBN(0xd394077e, 0xf247fa36),
+     TOBN(0x0fb9c2d0, 0x488c171a), TOBN(0xa78bfbaa, 0x13685278),
+     TOBN(0xedfbe268, 0xd5b1fa6a), TOBN(0x0dceb8db, 0x2b7eaba7),
+     TOBN(0xbf9e8089, 0x9ae2b710), TOBN(0xefde7ae6, 0xa4449c96),
+     TOBN(0x43b7716b, 0xcc143a46), TOBN(0xd7d34194, 0xc3628c13),
+     TOBN(0x508cec1c, 0x3b3f64c9), TOBN(0xe20bc0ba, 0x1e5edf3f),
+     TOBN(0xda1deb85, 0x2f4318d4), TOBN(0xd20ebe0d, 0x5c3fa443),
+     TOBN(0x370b4ea7, 0x73241ea3), TOBN(0x61f1511c, 0x5e1a5f65),
+     TOBN(0x99a5e23d, 0x82681c62), TOBN(0xd731e383, 0xa2f54c2d),
+     TOBN(0x2692f36e, 0x83445904), TOBN(0x2e0ec469, 0xaf45f9c0),
+     TOBN(0x905a3201, 0xc67528b7), TOBN(0x88f77f34, 0xd0e5e542),
+     TOBN(0xf67a8d29, 0x5864687c), TOBN(0x23b92eae, 0x22df3562),
+     TOBN(0x5c27014b, 0x9bbec39e), TOBN(0x7ef2f226, 0x9c0f0f8d),
+     TOBN(0x97359638, 0x546c4d8d), TOBN(0x5f9c3fc4, 0x92f24679),
+     TOBN(0x912e8bed, 0xa8c8acd9), TOBN(0xec3a318d, 0x306634b0),
+     TOBN(0x80167f41, 0xc31cb264), TOBN(0x3db82f6f, 0x522113f2),
+     TOBN(0xb155bcd2, 0xdcafe197), TOBN(0xfba1da59, 0x43465283),
+     TOBN(0xa0425b8e, 0xb212cf53), TOBN(0x4f2e512e, 0xf8557c5f),
+     TOBN(0xc1286ff9, 0x25c4d56c), TOBN(0xbb8a0fea, 0xee26c851),
+     TOBN(0xc28f70d2, 0xe7d6107e), TOBN(0x7ee0c444, 0xe76265aa),
+     TOBN(0x3df277a4, 0x1d1936b1), TOBN(0x1a556e3f, 0xea9595eb),
+     TOBN(0x258bbbf9, 0xe7305683), TOBN(0x31eea5bf, 0x07ef5be6),
+     TOBN(0x0deb0e4a, 0x46c814c1), TOBN(0x5cee8449, 0xa7b730dd),
+     TOBN(0xeab495c5, 0xa0182bde), TOBN(0xee759f87, 0x9e27a6b4),
+     TOBN(0xc2cf6a68, 0x80e518ca), TOBN(0x25e8013f, 0xf14cf3f4),
+     TOBN(0x8fc44140, 0x7e8d7a14), TOBN(0xbb1ff3ca, 0x9556f36a),
+     TOBN(0x6a844385, 0x14600044), TOBN(0xba3f0c4a, 0x7451ae63),
+     TOBN(0xdfcac25b, 0x1f9af32a), TOBN(0x01e0db86, 0xb1f2214b),
+     TOBN(0x4e9a5bc2, 0xa4b596ac), TOBN(0x83927681, 0x026c2c08),
+     TOBN(0x3ec832e7, 0x7acaca28), TOBN(0x1bfeea57, 0xc7385b29),
+     TOBN(0x068212e3, 0xfd1eaf38), TOBN(0xc1329830, 0x6acf8ccc),
+     TOBN(0xb909f2db, 0x2aac9e59), TOBN(0x5748060d, 0xb661782a),
+     TOBN(0xc5ab2632, 0xc79b7a01), TOBN(0xda44c6c6, 0x00017626),
+     TOBN(0xf26c00e8, 0xa7ea82f0), TOBN(0x99cac80d, 0xe4299aaf),
+     TOBN(0xd66fe3b6, 0x7ed78be1), TOBN(0x305f725f, 0x648d02cd),
+     TOBN(0x33ed1bc4, 0x623fb21b), TOBN(0xfa70533e, 0x7a6319ad),
+     TOBN(0x17ab562d, 0xbe5ffb3e), TOBN(0x06374994, 0x56674741),
+     TOBN(0x69d44ed6, 0x5c46aa8e), TOBN(0x2100d5d3, 0xa8d063d1),
+     TOBN(0xcb9727ea, 0xa2d17c36), TOBN(0x4c2bab1b, 0x8add53b7),
+     TOBN(0xa084e90c, 0x15426704), TOBN(0x778afcd3, 0xa837ebea),
+     TOBN(0x6651f701, 0x7ce477f8), TOBN(0xa0624998, 0x46fb7a8b),
+     TOBN(0xdc1e6828, 0xed8a6e19), TOBN(0x33fc2336, 0x4189d9c7),
+     TOBN(0x026f8fe2, 0x671c39bc), TOBN(0xd40c4ccd, 0xbc6f9915),
+     TOBN(0xafa135bb, 0xf80e75ca), TOBN(0x12c651a0, 0x22adff2c),
+     TOBN(0xc40a04bd, 0x4f51ad96), TOBN(0x04820109, 0xbbe4e832),
+     TOBN(0x3667eb1a, 0x7f4c04cc), TOBN(0x59556621, 0xa9404f84),
+     TOBN(0x71cdf653, 0x7eceb50a), TOBN(0x994a44a6, 0x9b8335fa),
+     TOBN(0xd7faf819, 0xdbeb9b69), TOBN(0x473c5680, 0xeed4350d),
+     TOBN(0xb6658466, 0xda44bba2), TOBN(0x0d1bc780, 0x872bdbf3),
+     TOBN(0xe535f175, 0xa1962f91), TOBN(0x6ed7e061, 0xed58f5a7),
+     TOBN(0x177aa4c0, 0x2089a233), TOBN(0x0dbcb03a, 0xe539b413),
+     TOBN(0xe3dc424e, 0xbb32e38e), TOBN(0x6472e5ef, 0x6806701e),
+     TOBN(0xdd47ff98, 0x814be9ee), TOBN(0x6b60cfff, 0x35ace009),
+     TOBN(0xb8d3d931, 0x9ff91fe5), TOBN(0x039c4800, 0xf0518eed),
+     TOBN(0x95c37632, 0x9182cb26), TOBN(0x0763a434, 0x82fc568d),
+     TOBN(0x707c04d5, 0x383e76ba), TOBN(0xac98b930, 0x824e8197),
+     TOBN(0x92bf7c8f, 0x91230de0), TOBN(0x90876a01, 0x40959b70),
+     TOBN(0xdb6d96f3, 0x05968b80), TOBN(0x380a0913, 0x089f73b9),
+     TOBN(0x7da70b83, 0xc2c61e01), TOBN(0x95fb8394, 0x569b38c7),
+     TOBN(0x9a3c6512, 0x80edfe2f), TOBN(0x8f726bb9, 0x8faeaf82),
+     TOBN(0x8010a4a0, 0x78424bf8), TOBN(0x29672044, 0x0e844970)}
+    ,
+    {TOBN(0x63c5cb81, 0x7a2ad62a), TOBN(0x7ef2b6b9, 0xac62ff54),
+     TOBN(0x3749bba4, 0xb3ad9db5), TOBN(0xad311f2c, 0x46d5a617),
+     TOBN(0xb77a8087, 0xc2ff3b6d), TOBN(0xb46feaf3, 0x367834ff),
+     TOBN(0xf8aa266d, 0x75d6b138), TOBN(0xfa38d320, 0xec008188),
+     TOBN(0x486d8ffa, 0x696946fc), TOBN(0x50fbc6d8, 0xb9cba56d),
+     TOBN(0x7e3d423e, 0x90f35a15), TOBN(0x7c3da195, 0xc0dd962c),
+     TOBN(0xe673fdb0, 0x3cfd5d8b), TOBN(0x0704b7c2, 0x889dfca5),
+     TOBN(0xf6ce581f, 0xf52305aa), TOBN(0x399d49eb, 0x914d5e53),
+     TOBN(0x380a496d, 0x6ec293cd), TOBN(0x733dbda7, 0x8e7051f5),
+     TOBN(0x037e388d, 0xb849140a), TOBN(0xee4b32b0, 0x5946dbf6),
+     TOBN(0xb1c4fda9, 0xcae368d1), TOBN(0x5001a7b0, 0xfdb0b2f3),
+     TOBN(0x6df59374, 0x2e3ac46e), TOBN(0x4af675f2, 0x39b3e656),
+     TOBN(0x44e38110, 0x39949296), TOBN(0x5b63827b, 0x361db1b5),
+     TOBN(0x3e5323ed, 0x206eaff5), TOBN(0x942370d2, 0xc21f4290),
+     TOBN(0xf2caaf2e, 0xe0d985a1), TOBN(0x192cc64b, 0x7239846d),
+     TOBN(0x7c0b8f47, 0xae6312f8), TOBN(0x7dc61f91, 0x96620108),
+     TOBN(0xb830fb5b, 0xc2da7de9), TOBN(0xd0e643df, 0x0ff8d3be),
+     TOBN(0x31ee77ba, 0x188a9641), TOBN(0x4e8aa3aa, 0xbcf6d502),
+     TOBN(0xf9fb6532, 0x9a49110f), TOBN(0xd18317f6, 0x2dd6b220),
+     TOBN(0x7e3ced41, 0x52c3ea5a), TOBN(0x0d296a14, 0x7d579c4a),
+     TOBN(0x35d6a53e, 0xed4c3717), TOBN(0x9f8240cf, 0x3d0ed2a3),
+     TOBN(0x8c0d4d05, 0xe5543aa5), TOBN(0x45d5bbfb, 0xdd33b4b4),
+     TOBN(0xfa04cc73, 0x137fd28e), TOBN(0x862ac6ef, 0xc73b3ffd),
+     TOBN(0x403ff9f5, 0x31f51ef2), TOBN(0x34d5e0fc, 0xbc73f5a2),
+     TOBN(0xf2526820, 0x08913f4f), TOBN(0xea20ed61, 0xeac93d95),
+     TOBN(0x51ed38b4, 0x6ca6b26c), TOBN(0x8662dcbc, 0xea4327b0),
+     TOBN(0x6daf295c, 0x725d2aaa), TOBN(0xbad2752f, 0x8e52dcda),
+     TOBN(0x2210e721, 0x0b17dacc), TOBN(0xa37f7912, 0xd51e8232),
+     TOBN(0x4f7081e1, 0x44cc3add), TOBN(0xd5ffa1d6, 0x87be82cf),
+     TOBN(0x89890b6c, 0x0edd6472), TOBN(0xada26e1a, 0x3ed17863),
+     TOBN(0x276f2715, 0x63483caa), TOBN(0xe6924cd9, 0x2f6077fd),
+     TOBN(0x05a7fe98, 0x0a466e3c), TOBN(0xf1c794b0, 0xb1902d1f),
+     TOBN(0xe5213688, 0x82a8042c), TOBN(0xd931cfaf, 0xcd278298),
+     TOBN(0x069a0ae0, 0xf597a740), TOBN(0x0adbb3f3, 0xeb59107c),
+     TOBN(0x983e951e, 0x5eaa8eb8), TOBN(0xe663a8b5, 0x11b48e78),
+     TOBN(0x1631cc0d, 0x8a03f2c5), TOBN(0x7577c11e, 0x11e271e2),
+     TOBN(0x33b2385c, 0x08369a90), TOBN(0x2990c59b, 0x190eb4f8),
+     TOBN(0x819a6145, 0xc68eac80), TOBN(0x7a786d62, 0x2ec4a014),
+     TOBN(0x33faadbe, 0x20ac3a8d), TOBN(0x31a21781, 0x5aba2d30),
+     TOBN(0x209d2742, 0xdba4f565), TOBN(0xdb2ce9e3, 0x55aa0fbb),
+     TOBN(0x8cef334b, 0x168984df), TOBN(0xe81dce17, 0x33879638),
+     TOBN(0xf6e6949c, 0x263720f0), TOBN(0x5c56feaf, 0xf593cbec),
+     TOBN(0x8bff5601, 0xfde58c84), TOBN(0x74e24117, 0x2eccb314),
+     TOBN(0xbcf01b61, 0x4c9a8a78), TOBN(0xa233e35e, 0x544c9868),
+     TOBN(0xb3156bf3, 0x8bd7aff1), TOBN(0x1b5ee4cb, 0x1d81b146),
+     TOBN(0x7ba1ac41, 0xd628a915), TOBN(0x8f3a8f9c, 0xfd89699e),
+     TOBN(0x7329b9c9, 0xa0748be7), TOBN(0x1d391c95, 0xa92e621f),
+     TOBN(0xe51e6b21, 0x4d10a837), TOBN(0xd255f53a, 0x4947b435),
+     TOBN(0x07669e04, 0xf1788ee3), TOBN(0xc14f27af, 0xa86938a2),
+     TOBN(0x8b47a334, 0xe93a01c0), TOBN(0xff627438, 0xd9366808),
+     TOBN(0x7a0985d8, 0xca2a5965), TOBN(0x3d9a5542, 0xd6e9b9b3),
+     TOBN(0xc23eb80b, 0x4cf972e8), TOBN(0x5c1c33bb, 0x4fdf72fd),
+     TOBN(0x0c4a58d4, 0x74a86108), TOBN(0xf8048a8f, 0xee4c5d90),
+     TOBN(0xe3c7c924, 0xe86d4c80), TOBN(0x28c889de, 0x056a1e60),
+     TOBN(0x57e2662e, 0xb214a040), TOBN(0xe8c48e98, 0x37e10347),
+     TOBN(0x87742862, 0x80ac748a), TOBN(0xf1c24022, 0x186b06f2),
+     TOBN(0xac2dd4c3, 0x5f74040a), TOBN(0x409aeb71, 0xfceac957),
+     TOBN(0x4fbad782, 0x55c4ec23), TOBN(0xb359ed61, 0x8a7b76ec),
+     TOBN(0x12744926, 0xed6f4a60), TOBN(0xe21e8d7f, 0x4b912de3),
+     TOBN(0xe2575a59, 0xfc705a59), TOBN(0x72f1d4de, 0xed2dbc0e),
+     TOBN(0x3d2b24b9, 0xeb7926b8), TOBN(0xbff88cb3, 0xcdbe5509),
+     TOBN(0xd0f399af, 0xe4dd640b), TOBN(0x3c5fe130, 0x2f76ed45),
+     TOBN(0x6f3562f4, 0x3764fb3d), TOBN(0x7b5af318, 0x3151b62d),
+     TOBN(0xd5bd0bc7, 0xd79ce5f3), TOBN(0xfdaf6b20, 0xec66890f),
+     TOBN(0x735c67ec, 0x6063540c), TOBN(0x50b259c2, 0xe5f9cb8f),
+     TOBN(0xb8734f9a, 0x3f99c6ab), TOBN(0xf8cc13d5, 0xa3a7bc85),
+     TOBN(0x80c1b305, 0xc5217659), TOBN(0xfe5364d4, 0x4ec12a54),
+     TOBN(0xbd87045e, 0x681345fe), TOBN(0x7f8efeb1, 0x582f897f),
+     TOBN(0xe8cbf1e5, 0xd5923359), TOBN(0xdb0cea9d, 0x539b9fb0),
+     TOBN(0x0c5b34cf, 0x49859b98), TOBN(0x5e583c56, 0xa4403cc6),
+     TOBN(0x11fc1a2d, 0xd48185b7), TOBN(0xc93fbc7e, 0x6e521787),
+     TOBN(0x47e7a058, 0x05105b8b), TOBN(0x7b4d4d58, 0xdb8260c8),
+     TOBN(0xe33930b0, 0x46eb842a), TOBN(0x8e844a9a, 0x7bdae56d),
+     TOBN(0x34ef3a9e, 0x13f7fdfc), TOBN(0xb3768f82, 0x636ca176),
+     TOBN(0x2821f4e0, 0x4e09e61c), TOBN(0x414dc3a1, 0xa0c7cddc),
+     TOBN(0xd5379437, 0x54945fcd), TOBN(0x151b6eef, 0xb3555ff1),
+     TOBN(0xb31bd613, 0x6339c083), TOBN(0x39ff8155, 0xdfb64701),
+     TOBN(0x7c3388d2, 0xe29604ab), TOBN(0x1e19084b, 0xa6b10442),
+     TOBN(0x17cf54c0, 0xeccd47ef), TOBN(0x89693385, 0x4a5dfb30),
+     TOBN(0x69d023fb, 0x47daf9f6), TOBN(0x9222840b, 0x7d91d959),
+     TOBN(0x439108f5, 0x803bac62), TOBN(0x0b7dd91d, 0x379bd45f),
+     TOBN(0xd651e827, 0xca63c581), TOBN(0x5c5d75f6, 0x509c104f),
+     TOBN(0x7d5fc738, 0x1f2dc308), TOBN(0x20faa7bf, 0xd98454be),
+     TOBN(0x95374bee, 0xa517b031), TOBN(0xf036b9b1, 0x642692ac),
+     TOBN(0xc5106109, 0x39842194), TOBN(0xb7e2353e, 0x49d05295),
+     TOBN(0xfc8c1d5c, 0xefb42ee0), TOBN(0xe04884eb, 0x08ce811c),
+     TOBN(0xf1f75d81, 0x7419f40e), TOBN(0x5b0ac162, 0xa995c241),
+     TOBN(0x120921bb, 0xc4c55646), TOBN(0x713520c2, 0x8d33cf97),
+     TOBN(0xb4a65a5c, 0xe98c5100), TOBN(0x6cec871d, 0x2ddd0f5a),
+     TOBN(0x251f0b7f, 0x9ba2e78b), TOBN(0x224a8434, 0xce3a2a5f),
+     TOBN(0x26827f61, 0x25f5c46f), TOBN(0x6a22bedc, 0x48545ec0),
+     TOBN(0x25ae5fa0, 0xb1bb5cdc), TOBN(0xd693682f, 0xfcb9b98f),
+     TOBN(0x32027fe8, 0x91e5d7d3), TOBN(0xf14b7d17, 0x73a07678),
+     TOBN(0xf88497b3, 0xc0dfdd61), TOBN(0xf7c2eec0, 0x2a8c4f48),
+     TOBN(0xaa5573f4, 0x3756e621), TOBN(0xc013a240, 0x1825b948),
+     TOBN(0x1c03b345, 0x63878572), TOBN(0xa0472bea, 0x653a4184),
+     TOBN(0xf4222e27, 0x0ac69a80), TOBN(0x34096d25, 0xf51e54f6),
+     TOBN(0x00a648cb, 0x8fffa591), TOBN(0x4e87acdc, 0x69b6527f),
+     TOBN(0x0575e037, 0xe285ccb4), TOBN(0x188089e4, 0x50ddcf52),
+     TOBN(0xaa96c9a8, 0x870ff719), TOBN(0x74a56cd8, 0x1fc7e369),
+     TOBN(0x41d04ee2, 0x1726931a), TOBN(0x0bbbb2c8, 0x3660ecfd),
+     TOBN(0xa6ef6de5, 0x24818e18), TOBN(0xe421cc51, 0xe7d57887),
+     TOBN(0xf127d208, 0xbea87be6), TOBN(0x16a475d3, 0xb1cdd682),
+     TOBN(0x9db1b684, 0x439b63f7), TOBN(0x5359b3db, 0xf0f113b6),
+     TOBN(0xdfccf1de, 0x8bf06e31), TOBN(0x1fdf8f44, 0xdd383901),
+     TOBN(0x10775cad, 0x5017e7d2), TOBN(0xdfc3a597, 0x58d11eef),
+     TOBN(0x6ec9c8a0, 0xb1ecff10), TOBN(0xee6ed6cc, 0x28400549),
+     TOBN(0xb5ad7bae, 0x1b4f8d73), TOBN(0x61b4f11d, 0xe00aaab9),
+     TOBN(0x7b32d69b, 0xd4eff2d7), TOBN(0x88ae6771, 0x4288b60f),
+     TOBN(0x159461b4, 0x37a1e723), TOBN(0x1f3d4789, 0x570aae8c),
+     TOBN(0x869118c0, 0x7f9871da), TOBN(0x35fbda78, 0xf635e278),
+     TOBN(0x738f3641, 0xe1541dac), TOBN(0x6794b13a, 0xc0dae45f),
+     TOBN(0x065064ac, 0x09cc0917), TOBN(0x27c53729, 0xc68540fd),
+     TOBN(0x0d2d4c8e, 0xef227671), TOBN(0xd23a9f80, 0xa1785a04),
+     TOBN(0x98c59528, 0x52650359), TOBN(0xfa09ad01, 0x74a1acad),
+     TOBN(0x082d5a29, 0x0b55bf5c), TOBN(0xa40f1c67, 0x419b8084),
+     TOBN(0x3a5c752e, 0xdcc18770), TOBN(0x4baf1f2f, 0x8825c3a5),
+     TOBN(0xebd63f74, 0x21b153ed), TOBN(0xa2383e47, 0xb2f64723),
+     TOBN(0xe7bf620a, 0x2646d19a), TOBN(0x56cb44ec, 0x03c83ffd),
+     TOBN(0xaf7267c9, 0x4f6be9f1), TOBN(0x8b2dfd7b, 0xc06bb5e9),
+     TOBN(0xb87072f2, 0xa672c5c7), TOBN(0xeacb11c8, 0x0d53c5e2),
+     TOBN(0x22dac29d, 0xff435932), TOBN(0x37bdb99d, 0x4408693c),
+     TOBN(0xf6e62fb6, 0x2899c20f), TOBN(0x3535d512, 0x447ece24),
+     TOBN(0xfbdc6b88, 0xff577ce3), TOBN(0x726693bd, 0x190575f2),
+     TOBN(0x6772b0e5, 0xab4b35a2), TOBN(0x1d8b6001, 0xf5eeaacf),
+     TOBN(0x728f7ce4, 0x795b9580), TOBN(0x4a20ed2a, 0x41fb81da),
+     TOBN(0x9f685cd4, 0x4fec01e6), TOBN(0x3ed7ddcc, 0xa7ff50ad),
+     TOBN(0x460fd264, 0x0c2d97fd), TOBN(0x3a241426, 0xeb82f4f9),
+     TOBN(0x17d1df2c, 0x6a8ea820), TOBN(0xb2b50d3b, 0xf22cc254),
+     TOBN(0x03856cba, 0xb7291426), TOBN(0x87fd26ae, 0x04f5ee39),
+     TOBN(0x9cb696cc, 0x02bee4ba), TOBN(0x53121804, 0x06820fd6),
+     TOBN(0xa5dfc269, 0x0212e985), TOBN(0x666f7ffa, 0x160f9a09),
+     TOBN(0xc503cd33, 0xbccd9617), TOBN(0x365dede4, 0xba7730a3),
+     TOBN(0x798c6355, 0x5ddb0786), TOBN(0xa6c3200e, 0xfc9cd3bc),
+     TOBN(0x060ffb2c, 0xe5e35efd), TOBN(0x99a4e25b, 0x5555a1c1),
+     TOBN(0x11d95375, 0xf70b3751), TOBN(0x0a57354a, 0x160e1bf6),
+     TOBN(0xecb3ae4b, 0xf8e4b065), TOBN(0x07a834c4, 0x2e53022b),
+     TOBN(0x1cd300b3, 0x8692ed96), TOBN(0x16a6f792, 0x61ee14ec),
+     TOBN(0x8f1063c6, 0x6a8649ed), TOBN(0xfbcdfcfe, 0x869f3e14),
+     TOBN(0x2cfb97c1, 0x00a7b3ec), TOBN(0xcea49b3c, 0x7130c2f1),
+     TOBN(0x462d044f, 0xe9d96488), TOBN(0x4b53d52e, 0x8182a0c1),
+     TOBN(0x84b6ddd3, 0x0391e9e9), TOBN(0x80ab7b48, 0xb1741a09),
+     TOBN(0xec0e15d4, 0x27d3317f), TOBN(0x8dfc1ddb, 0x1a64671e),
+     TOBN(0x93cc5d5f, 0xd49c5b92), TOBN(0xc995d53d, 0x3674a331),
+     TOBN(0x302e41ec, 0x090090ae), TOBN(0x2278a0cc, 0xedb06830),
+     TOBN(0x1d025932, 0xfbc99690), TOBN(0x0c32fbd2, 0xb80d68da),
+     TOBN(0xd79146da, 0xf341a6c1), TOBN(0xae0ba139, 0x1bef68a0),
+     TOBN(0xc6b8a563, 0x8d774b3a), TOBN(0x1cf307bd, 0x880ba4d7),
+     TOBN(0xc033bdc7, 0x19803511), TOBN(0xa9f97b3b, 0x8888c3be),
+     TOBN(0x3d68aebc, 0x85c6d05e), TOBN(0xc3b88a9d, 0x193919eb),
+     TOBN(0x2d300748, 0xc48b0ee3), TOBN(0x7506bc7c, 0x07a746c1),
+     TOBN(0xfc48437c, 0x6e6d57f3), TOBN(0x5bd71587, 0xcfeaa91a),
+     TOBN(0xa4ed0408, 0xc1bc5225), TOBN(0xd0b946db, 0x2719226d),
+     TOBN(0x109ecd62, 0x758d2d43), TOBN(0x75c8485a, 0x2751759b),
+     TOBN(0xb0b75f49, 0x9ce4177a), TOBN(0x4fa61a1e, 0x79c10c3d),
+     TOBN(0xc062d300, 0xa167fcd7), TOBN(0x4df3874c, 0x750f0fa8),
+     TOBN(0x29ae2cf9, 0x83dfedc9), TOBN(0xf8437134, 0x8d87631a),
+     TOBN(0xaf571711, 0x7429c8d2), TOBN(0x18d15867, 0x146d9272),
+     TOBN(0x83053ecf, 0x69769bb7), TOBN(0xc55eb856, 0xc479ab82),
+     TOBN(0x5ef7791c, 0x21b0f4b2), TOBN(0xaa5956ba, 0x3d491525),
+     TOBN(0x407a96c2, 0x9fe20eba), TOBN(0xf27168bb, 0xe52a5ad3),
+     TOBN(0x43b60ab3, 0xbf1d9d89), TOBN(0xe45c51ef, 0x710e727a),
+     TOBN(0xdfca5276, 0x099b4221), TOBN(0x8dc6407c, 0x2557a159),
+     TOBN(0x0ead8335, 0x91035895), TOBN(0x0a9db957, 0x9c55dc32),
+     TOBN(0xe40736d3, 0xdf61bc76), TOBN(0x13a619c0, 0x3f778cdb),
+     TOBN(0x6dd921a4, 0xc56ea28f), TOBN(0x76a52433, 0x2fa647b4),
+     TOBN(0x23591891, 0xac5bdc5d), TOBN(0xff4a1a72, 0xbac7dc01),
+     TOBN(0x9905e261, 0x62df8453), TOBN(0x3ac045df, 0xe63b265f),
+     TOBN(0x8a3f341b, 0xad53dba7), TOBN(0x8ec269cc, 0x837b625a),
+     TOBN(0xd71a2782, 0x3ae31189), TOBN(0x8fb4f9a3, 0x55e96120),
+     TOBN(0x804af823, 0xff9875cf), TOBN(0x23224f57, 0x5d442a9b),
+     TOBN(0x1c4d3b9e, 0xecc62679), TOBN(0x91da22fb, 0xa0e7ddb1),
+     TOBN(0xa370324d, 0x6c04a661), TOBN(0x9710d3b6, 0x5e376d17),
+     TOBN(0xed8c98f0, 0x3044e357), TOBN(0xc364ebbe, 0x6422701c),
+     TOBN(0x347f5d51, 0x7733d61c), TOBN(0xd55644b9, 0xcea826c3),
+     TOBN(0x80c6e0ad, 0x55a25548), TOBN(0x0aa7641d, 0x844220a7),
+     TOBN(0x1438ec81, 0x31810660), TOBN(0x9dfa6507, 0xde4b4043),
+     TOBN(0x10b515d8, 0xcc3e0273), TOBN(0x1b6066dd, 0x28d8cfb2),
+     TOBN(0xd3b04591, 0x9c9efebd), TOBN(0x425d4bdf, 0xa21c1ff4),
+     TOBN(0x5fe5af19, 0xd57607d3), TOBN(0xbbf773f7, 0x54481084),
+     TOBN(0x8435bd69, 0x94b03ed1), TOBN(0xd9ad1de3, 0x634cc546),
+     TOBN(0x2cf423fc, 0x00e420ca), TOBN(0xeed26d80, 0xa03096dd),
+     TOBN(0xd7f60be7, 0xa4db09d2), TOBN(0xf47f569d, 0x960622f7),
+     TOBN(0xe5925fd7, 0x7296c729), TOBN(0xeff2db26, 0x26ca2715),
+     TOBN(0xa6fcd014, 0xb913e759), TOBN(0x53da4786, 0x8ff4de93),
+     TOBN(0x14616d79, 0xc32068e1), TOBN(0xb187d664, 0xccdf352e),
+     TOBN(0xf7afb650, 0x1dc90b59), TOBN(0x8170e943, 0x7daa1b26),
+     TOBN(0xc8e3bdd8, 0x700c0a84), TOBN(0x6e8d345f, 0x6482bdfa),
+     TOBN(0x84cfbfa1, 0xc5c5ea50), TOBN(0xd3baf14c, 0x67960681),
+     TOBN(0x26398403, 0x0dd50942), TOBN(0xe4b7839c, 0x4716a663),
+     TOBN(0xd5f1f794, 0xe7de6dc0), TOBN(0x5cd0f4d4, 0x622aa7ce),
+     TOBN(0x5295f3f1, 0x59acfeec), TOBN(0x8d933552, 0x953e0607),
+     TOBN(0xc7db8ec5, 0x776c5722), TOBN(0xdc467e62, 0x2b5f290c),
+     TOBN(0xd4297e70, 0x4ff425a9), TOBN(0x4be924c1, 0x0cf7bb72),
+     TOBN(0x0d5dc5ae, 0xa1892131), TOBN(0x8bf8a8e3, 0xa705c992),
+     TOBN(0x73a0b064, 0x7a305ac5), TOBN(0x00c9ca4e, 0x9a8c77a8),
+     TOBN(0x5dfee80f, 0x83774bdd), TOBN(0x63131602, 0x85734485),
+     TOBN(0xa1b524ae, 0x914a69a9), TOBN(0xebc2ffaf, 0xd4e300d7),
+     TOBN(0x52c93db7, 0x7cfa46a5), TOBN(0x71e6161f, 0x21653b50),
+     TOBN(0x3574fc57, 0xa4bc580a), TOBN(0xc09015dd, 0xe1bc1253),
+     TOBN(0x4b7b47b2, 0xd174d7aa), TOBN(0x4072d8e8, 0xf3a15d04),
+     TOBN(0xeeb7d47f, 0xd6fa07ed), TOBN(0x6f2b9ff9, 0xedbdafb1),
+     TOBN(0x18c51615, 0x3760fe8a), TOBN(0x7a96e6bf, 0xf06c6c13),
+     TOBN(0x4d7a0410, 0x0ea2d071), TOBN(0xa1914e9b, 0x0be2a5ce),
+     TOBN(0x5726e357, 0xd8a3c5cf), TOBN(0x1197ecc3, 0x2abb2b13),
+     TOBN(0x6c0d7f7f, 0x31ae88dd), TOBN(0x15b20d1a, 0xfdbb3efe),
+     TOBN(0xcd06aa26, 0x70584039), TOBN(0x2277c969, 0xa7dc9747),
+     TOBN(0xbca69587, 0x7855d815), TOBN(0x899ea238, 0x5188b32a),
+     TOBN(0x37d9228b, 0x760c1c9d), TOBN(0xc7efbb11, 0x9b5c18da),
+     TOBN(0x7f0d1bc8, 0x19f6dbc5), TOBN(0x4875384b, 0x07e6905b),
+     TOBN(0xc7c50baa, 0x3ba8cd86), TOBN(0xb0ce40fb, 0xc2905de0),
+     TOBN(0x70840673, 0x7a231952), TOBN(0xa912a262, 0xcf43de26),
+     TOBN(0x9c38ddcc, 0xeb5b76c1), TOBN(0x746f5285, 0x26fc0ab4),
+     TOBN(0x52a63a50, 0xd62c269f), TOBN(0x60049c55, 0x99458621),
+     TOBN(0xe7f48f82, 0x3c2f7c9e), TOBN(0x6bd99043, 0x917d5cf3),
+     TOBN(0xeb1317a8, 0x8701f469), TOBN(0xbd3fe2ed, 0x9a449fe0),
+     TOBN(0x421e79ca, 0x12ef3d36), TOBN(0x9ee3c36c, 0x3e7ea5de),
+     TOBN(0xe48198b5, 0xcdff36f7), TOBN(0xaff4f967, 0xc6b82228),
+     TOBN(0x15e19dd0, 0xc47adb7e), TOBN(0x45699b23, 0x032e7dfa),
+     TOBN(0x40680c8b, 0x1fae026a), TOBN(0x5a347a48, 0x550dbf4d),
+     TOBN(0xe652533b, 0x3cef0d7d), TOBN(0xd94f7b18, 0x2bbb4381),
+     TOBN(0x838752be, 0x0e80f500), TOBN(0x8e6e2488, 0x9e9c9bfb),
+     TOBN(0xc9751697, 0x16caca6a), TOBN(0x866c49d8, 0x38531ad9),
+     TOBN(0xc917e239, 0x7151ade1), TOBN(0x2d016ec1, 0x6037c407),
+     TOBN(0xa407ccc9, 0x00eac3f9), TOBN(0x835f6280, 0xe2ed4748),
+     TOBN(0xcc54c347, 0x1cc98e0d), TOBN(0x0e969937, 0xdcb572eb),
+     TOBN(0x1b16c8e8, 0x8f30c9cb), TOBN(0xa606ae75, 0x373c4661),
+     TOBN(0x47aa689b, 0x35502cab), TOBN(0xf89014ae, 0x4d9bb64f),
+     TOBN(0x202f6a9c, 0x31c71f7b), TOBN(0x01f95aa3, 0x296ffe5c),
+     TOBN(0x5fc06014, 0x53cec3a3), TOBN(0xeb991237, 0x5f498a45),
+     TOBN(0xae9a935e, 0x5d91ba87), TOBN(0xc6ac6281, 0x0b564a19),
+     TOBN(0x8a8fe81c, 0x3bd44e69), TOBN(0x7c8b467f, 0x9dd11d45),
+     TOBN(0xf772251f, 0xea5b8e69), TOBN(0xaeecb3bd, 0xc5b75fbc),
+     TOBN(0x1aca3331, 0x887ff0e5), TOBN(0xbe5d49ff, 0x19f0a131),
+     TOBN(0x582c13aa, 0xe5c8646f), TOBN(0xdbaa12e8, 0x20e19980),
+     TOBN(0x8f40f31a, 0xf7abbd94), TOBN(0x1f13f5a8, 0x1dfc7663),
+     TOBN(0x5d81f1ee, 0xaceb4fc0), TOBN(0x36256002, 0x5e6f0f42),
+     TOBN(0x4b67d6d7, 0x751370c8), TOBN(0x2608b698, 0x03e80589),
+     TOBN(0xcfc0d2fc, 0x05268301), TOBN(0xa6943d39, 0x40309212),
+     TOBN(0x192a90c2, 0x1fd0e1c2), TOBN(0xb209f113, 0x37f1dc76),
+     TOBN(0xefcc5e06, 0x97bf1298), TOBN(0xcbdb6730, 0x219d639e),
+     TOBN(0xd009c116, 0xb81e8c6f), TOBN(0xa3ffdde3, 0x1a7ce2e5),
+     TOBN(0xc53fbaaa, 0xa914d3ba), TOBN(0x836d500f, 0x88df85ee),
+     TOBN(0xd98dc71b, 0x66ee0751), TOBN(0x5a3d7005, 0x714516fd),
+     TOBN(0x21d3634d, 0x39eedbba), TOBN(0x35cd2e68, 0x0455a46d),
+     TOBN(0xc8cafe65, 0xf9d7eb0c), TOBN(0xbda3ce9e, 0x00cefb3e),
+     TOBN(0xddc17a60, 0x2c9cf7a4), TOBN(0x01572ee4, 0x7bcb8773),
+     TOBN(0xa92b2b01, 0x8c7548df), TOBN(0x732fd309, 0xa84600e3),
+     TOBN(0xe22109c7, 0x16543a40), TOBN(0x9acafd36, 0xfede3c6c),
+     TOBN(0xfb206852, 0x6824e614), TOBN(0x2a4544a9, 0xda25dca0),
+     TOBN(0x25985262, 0x91d60b06), TOBN(0x281b7be9, 0x28753545),
+     TOBN(0xec667b1a, 0x90f13b27), TOBN(0x33a83aff, 0x940e2eb4),
+     TOBN(0x80009862, 0xd5d721d5), TOBN(0x0c3357a3, 0x5bd3a182),
+     TOBN(0x27f3a83b, 0x7aa2cda4), TOBN(0xb58ae74e, 0xf6f83085),
+     TOBN(0x2a911a81, 0x2e6dad6b), TOBN(0xde286051, 0xf43d6c5b),
+     TOBN(0x4bdccc41, 0xf996c4d8), TOBN(0xe7312ec0, 0x0ae1e24e)}
+    ,
+    {TOBN(0xf8d112e7, 0x6e6485b3), TOBN(0x4d3e24db, 0x771c52f8),
+     TOBN(0x48e3ee41, 0x684a2f6d), TOBN(0x7161957d, 0x21d95551),
+     TOBN(0x19631283, 0xcdb12a6c), TOBN(0xbf3fa882, 0x2e50e164),
+     TOBN(0xf6254b63, 0x3166cc73), TOBN(0x3aefa7ae, 0xaee8cc38),
+     TOBN(0x79b0fe62, 0x3b36f9fd), TOBN(0x26543b23, 0xfde19fc0),
+     TOBN(0x136e64a0, 0x958482ef), TOBN(0x23f63771, 0x9b095825),
+     TOBN(0x14cfd596, 0xb6a1142e), TOBN(0x5ea6aac6, 0x335aac0b),
+     TOBN(0x86a0e8bd, 0xf3081dd5), TOBN(0x5fb89d79, 0x003dc12a),
+     TOBN(0xf615c33a, 0xf72e34d4), TOBN(0x0bd9ea40, 0x110eec35),
+     TOBN(0x1c12bc5b, 0xc1dea34e), TOBN(0x686584c9, 0x49ae4699),
+     TOBN(0x13ad95d3, 0x8c97b942), TOBN(0x4609561a, 0x4e5c7562),
+     TOBN(0x9e94a4ae, 0xf2737f89), TOBN(0xf57594c6, 0x371c78b6),
+     TOBN(0x0f0165fc, 0xe3779ee3), TOBN(0xe00e7f9d, 0xbd495d9e),
+     TOBN(0x1fa4efa2, 0x20284e7a), TOBN(0x4564bade, 0x47ac6219),
+     TOBN(0x90e6312a, 0xc4708e8e), TOBN(0x4f5725fb, 0xa71e9adf),
+     TOBN(0xe95f55ae, 0x3d684b9f), TOBN(0x47f7ccb1, 0x1e94b415),
+     TOBN(0x7322851b, 0x8d946581), TOBN(0xf0d13133, 0xbdf4a012),
+     TOBN(0xa3510f69, 0x6584dae0), TOBN(0x03a7c171, 0x3c9f6c6d),
+     TOBN(0x5be97f38, 0xe475381a), TOBN(0xca1ba422, 0x85823334),
+     TOBN(0xf83cc5c7, 0x0be17dda), TOBN(0x158b1494, 0x0b918c0f),
+     TOBN(0xda3a77e5, 0x522e6b69), TOBN(0x69c908c3, 0xbbcd6c18),
+     TOBN(0x1f1b9e48, 0xd924fd56), TOBN(0x37c64e36, 0xaa4bb3f7),
+     TOBN(0x5a4fdbdf, 0xee478d7d), TOBN(0xba75c8bc, 0x0193f7a0),
+     TOBN(0x84bc1e84, 0x56cd16df), TOBN(0x1fb08f08, 0x46fad151),
+     TOBN(0x8a7cabf9, 0x842e9f30), TOBN(0xa331d4bf, 0x5eab83af),
+     TOBN(0xd272cfba, 0x017f2a6a), TOBN(0x27560abc, 0x83aba0e3),
+     TOBN(0x94b83387, 0x0e3a6b75), TOBN(0x25c6aea2, 0x6b9f50f5),
+     TOBN(0x803d691d, 0xb5fdf6d0), TOBN(0x03b77509, 0xe6333514),
+     TOBN(0x36178903, 0x61a341c1), TOBN(0x3604dc60, 0x0cfd6142),
+     TOBN(0x022295eb, 0x8533316c), TOBN(0x3dbde4ac, 0x44af2922),
+     TOBN(0x898afc5d, 0x1c7eef69), TOBN(0x58896805, 0xd14f4fa1),
+     TOBN(0x05002160, 0x203c21ca), TOBN(0x6f0d1f30, 0x40ef730b),
+     TOBN(0x8e8c44d4, 0x196224f8), TOBN(0x75a4ab95, 0x374d079d),
+     TOBN(0x79085ecc, 0x7d48f123), TOBN(0x56f04d31, 0x1bf65ad8),
+     TOBN(0xe220bf1c, 0xbda602b2), TOBN(0x73ee1742, 0xf9612c69),
+     TOBN(0x76008fc8, 0x084fd06b), TOBN(0x4000ef9f, 0xf11380d1),
+     TOBN(0x48201b4b, 0x12cfe297), TOBN(0x3eee129c, 0x292f74e5),
+     TOBN(0xe1fe114e, 0xc9e874e8), TOBN(0x899b055c, 0x92c5fc41),
+     TOBN(0x4e477a64, 0x3a39c8cf), TOBN(0x82f09efe, 0x78963cc9),
+     TOBN(0x6fd3fd8f, 0xd333f863), TOBN(0x85132b2a, 0xdc949c63),
+     TOBN(0x7e06a3ab, 0x516eb17b), TOBN(0x73bec06f, 0xd2c7372b),
+     TOBN(0xe4f74f55, 0xba896da6), TOBN(0xbb4afef8, 0x8e9eb40f),
+     TOBN(0x2d75bec8, 0xe61d66b0), TOBN(0x02bda4b4, 0xef29300b),
+     TOBN(0x8bbaa8de, 0x026baa5a), TOBN(0xff54befd, 0xa07f4440),
+     TOBN(0xbd9b8b1d, 0xbe7a2af3), TOBN(0xec51caa9, 0x4fb74a72),
+     TOBN(0xb9937a4b, 0x63879697), TOBN(0x7c9a9d20, 0xec2687d5),
+     TOBN(0x1773e44f, 0x6ef5f014), TOBN(0x8abcf412, 0xe90c6900),
+     TOBN(0x387bd022, 0x8142161e), TOBN(0x50393755, 0xfcb6ff2a),
+     TOBN(0x9813fd56, 0xed6def63), TOBN(0x53cf6482, 0x7d53106c),
+     TOBN(0x991a35bd, 0x431f7ac1), TOBN(0xf1e274dd, 0x63e65faf),
+     TOBN(0xf63ffa3c, 0x44cc7880), TOBN(0x411a426b, 0x7c256981),
+     TOBN(0xb698b9fd, 0x93a420e0), TOBN(0x89fdddc0, 0xae53f8fe),
+     TOBN(0x766e0722, 0x32398baa), TOBN(0x205fee42, 0x5cfca031),
+     TOBN(0xa49f5341, 0x7a029cf2), TOBN(0xa88c68b8, 0x4023890d),
+     TOBN(0xbc275041, 0x7337aaa8), TOBN(0x9ed364ad, 0x0eb384f4),
+     TOBN(0xe0816f85, 0x29aba92f), TOBN(0x2e9e1941, 0x04e38a88),
+     TOBN(0x57eef44a, 0x3dafd2d5), TOBN(0x35d1fae5, 0x97ed98d8),
+     TOBN(0x50628c09, 0x2307f9b1), TOBN(0x09d84aae, 0xd6cba5c6),
+     TOBN(0x67071bc7, 0x88aaa691), TOBN(0x2dea57a9, 0xafe6cb03),
+     TOBN(0xdfe11bb4, 0x3d78ac01), TOBN(0x7286418c, 0x7fd7aa51),
+     TOBN(0xfabf7709, 0x77f7195a), TOBN(0x8ec86167, 0xadeb838f),
+     TOBN(0xea1285a8, 0xbb4f012d), TOBN(0xd6883503, 0x9a3eab3f),
+     TOBN(0xee5d24f8, 0x309004c2), TOBN(0xa96e4b76, 0x13ffe95e),
+     TOBN(0x0cdffe12, 0xbd223ea4), TOBN(0x8f5c2ee5, 0xb6739a53),
+     TOBN(0x5cb4aaa5, 0xdd968198), TOBN(0xfa131c52, 0x72413a6c),
+     TOBN(0x53d46a90, 0x9536d903), TOBN(0xb270f0d3, 0x48606d8e),
+     TOBN(0x518c7564, 0xa053a3bc), TOBN(0x088254b7, 0x1a86caef),
+     TOBN(0xb3ba8cb4, 0x0ab5efd0), TOBN(0x5c59900e, 0x4605945d),
+     TOBN(0xecace1dd, 0xa1887395), TOBN(0x40960f36, 0x932a65de),
+     TOBN(0x9611ff5c, 0x3aa95529), TOBN(0xc58215b0, 0x7c1e5a36),
+     TOBN(0xd48c9b58, 0xf0e1a524), TOBN(0xb406856b, 0xf590dfb8),
+     TOBN(0xc7605e04, 0x9cd95662), TOBN(0x0dd036ee, 0xa33ecf82),
+     TOBN(0xa50171ac, 0xc33156b3), TOBN(0xf09d24ea, 0x4a80172e),
+     TOBN(0x4e1f72c6, 0x76dc8eef), TOBN(0xe60caadc, 0x5e3d44ee),
+     TOBN(0x006ef8a6, 0x979b1d8f), TOBN(0x60908a1c, 0x97788d26),
+     TOBN(0x6e08f95b, 0x266feec0), TOBN(0x618427c2, 0x22e8c94e),
+     TOBN(0x3d613339, 0x59145a65), TOBN(0xcd9bc368, 0xfa406337),
+     TOBN(0x82d11be3, 0x2d8a52a0), TOBN(0xf6877b27, 0x97a1c590),
+     TOBN(0x837a819b, 0xf5cbdb25), TOBN(0x2a4fd1d8, 0xde090249),
+     TOBN(0x622a7de7, 0x74990e5f), TOBN(0x840fa5a0, 0x7945511b),
+     TOBN(0x30b974be, 0x6558842d), TOBN(0x70df8c64, 0x17f3d0a6),
+     TOBN(0x7c803520, 0x7542e46d), TOBN(0x7251fe7f, 0xe4ecc823),
+     TOBN(0xe59134cb, 0x5e9aac9a), TOBN(0x11bb0934, 0xf0045d71),
+     TOBN(0x53e5d9b5, 0xdbcb1d4e), TOBN(0x8d97a905, 0x92defc91),
+     TOBN(0xfe289327, 0x7946d3f9), TOBN(0xe132bd24, 0x07472273),
+     TOBN(0xeeeb510c, 0x1eb6ae86), TOBN(0x777708c5, 0xf0595067),
+     TOBN(0x18e2c8cd, 0x1297029e), TOBN(0x2c61095c, 0xbbf9305e),
+     TOBN(0xe466c258, 0x6b85d6d9), TOBN(0x8ac06c36, 0xda1ea530),
+     TOBN(0xa365dc39, 0xa1304668), TOBN(0xe4a9c885, 0x07f89606),
+     TOBN(0x65a4898f, 0xacc7228d), TOBN(0x3e2347ff, 0x84ca8303),
+     TOBN(0xa5f6fb77, 0xea7d23a3), TOBN(0x2fac257d, 0x672a71cd),
+     TOBN(0x6908bef8, 0x7e6a44d3), TOBN(0x8ff87566, 0x891d3d7a),
+     TOBN(0xe58e90b3, 0x6b0cf82e), TOBN(0x6438d246, 0x2615b5e7),
+     TOBN(0x07b1f8fc, 0x669c145a), TOBN(0xb0d8b2da, 0x36f1e1cb),
+     TOBN(0x54d5dadb, 0xd9184c4d), TOBN(0x3dbb18d5, 0xf93d9976),
+     TOBN(0x0a3e0f56, 0xd1147d47), TOBN(0x2afa8c8d, 0xa0a48609),
+     TOBN(0x275353e8, 0xbc36742c), TOBN(0x898f427e, 0xeea0ed90),
+     TOBN(0x26f4947e, 0x3e477b00), TOBN(0x8ad8848a, 0x308741e3),
+     TOBN(0x6c703c38, 0xd74a2a46), TOBN(0x5e3e05a9, 0x9ba17ba2),
+     TOBN(0xc1fa6f66, 0x4ab9a9e4), TOBN(0x474a2d9a, 0x3841d6ec),
+     TOBN(0x871239ad, 0x653ae326), TOBN(0x14bcf72a, 0xa74cbb43),
+     TOBN(0x8737650e, 0x20d4c083), TOBN(0x3df86536, 0x110ed4af),
+     TOBN(0xd2d86fe7, 0xb53ca555), TOBN(0x688cb00d, 0xabd5d538),
+     TOBN(0xcf81bda3, 0x1ad38468), TOBN(0x7ccfe3cc, 0xf01167b6),
+     TOBN(0xcf4f47e0, 0x6c4c1fe6), TOBN(0x557e1f1a, 0x298bbb79),
+     TOBN(0xf93b974f, 0x30d45a14), TOBN(0x174a1d2d, 0x0baf97c4),
+     TOBN(0x7a003b30, 0xc51fbf53), TOBN(0xd8940991, 0xee68b225),
+     TOBN(0x5b0aa7b7, 0x1c0f4173), TOBN(0x975797c9, 0xa20a7153),
+     TOBN(0x26e08c07, 0xe3533d77), TOBN(0xd7222e6a, 0x2e341c99),
+     TOBN(0x9d60ec3d, 0x8d2dc4ed), TOBN(0xbdfe0d8f, 0x7c476cf8),
+     TOBN(0x1fe59ab6, 0x1d056605), TOBN(0xa9ea9df6, 0x86a8551f),
+     TOBN(0x8489941e, 0x47fb8d8c), TOBN(0xfeb874eb, 0x4a7f1b10),
+     TOBN(0xfe5fea86, 0x7ee0d98f), TOBN(0x201ad34b, 0xdbf61864),
+     TOBN(0x45d8fe47, 0x37c031d4), TOBN(0xd5f49fae, 0x795f0822),
+     TOBN(0xdb0fb291, 0xc7f4a40c), TOBN(0x2e69d9c1, 0x730ddd92),
+     TOBN(0x754e1054, 0x49d76987), TOBN(0x8a24911d, 0x7662db87),
+     TOBN(0x61fc1810, 0x60a71676), TOBN(0xe852d1a8, 0xf66a8ad1),
+     TOBN(0x172bbd65, 0x6417231e), TOBN(0x0d6de7bd, 0x3babb11f),
+     TOBN(0x6fde6f88, 0xc8e347f8), TOBN(0x1c587547, 0x9bd99cc3),
+     TOBN(0x78e54ed0, 0x34076950), TOBN(0x97f0f334, 0x796e83ba),
+     TOBN(0xe4dbe1ce, 0x4924867a), TOBN(0xbd5f51b0, 0x60b84917),
+     TOBN(0x37530040, 0x3cb09a79), TOBN(0xdb3fe0f8, 0xff1743d8),
+     TOBN(0xed7894d8, 0x556fa9db), TOBN(0xfa262169, 0x23412fbf),
+     TOBN(0x563be0db, 0xba7b9291), TOBN(0x6ca8b8c0, 0x0c9fb234),
+     TOBN(0xed406aa9, 0xbd763802), TOBN(0xc21486a0, 0x65303da1),
+     TOBN(0x61ae291e, 0xc7e62ec4), TOBN(0x622a0492, 0xdf99333e),
+     TOBN(0x7fd80c9d, 0xbb7a8ee0), TOBN(0xdc2ed3bc, 0x6c01aedb),
+     TOBN(0x35c35a12, 0x08be74ec), TOBN(0xd540cb1a, 0x469f671f),
+     TOBN(0xd16ced4e, 0xcf84f6c7), TOBN(0x8561fb9c, 0x2d090f43),
+     TOBN(0x7e693d79, 0x6f239db4), TOBN(0xa736f928, 0x77bd0d94),
+     TOBN(0x07b4d929, 0x2c1950ee), TOBN(0xda177543, 0x56dc11b3),
+     TOBN(0xa5dfbbaa, 0x7a6a878e), TOBN(0x1c70cb29, 0x4decb08a),
+     TOBN(0xfba28c8b, 0x6f0f7c50), TOBN(0xa8eba2b8, 0x854dcc6d),
+     TOBN(0x5ff8e89a, 0x36b78642), TOBN(0x070c1c8e, 0xf6873adf),
+     TOBN(0xbbd3c371, 0x6484d2e4), TOBN(0xfb78318f, 0x0d414129),
+     TOBN(0x2621a39c, 0x6ad93b0b), TOBN(0x979d74c2, 0xa9e917f7),
+     TOBN(0xfc195647, 0x61fb0428), TOBN(0x4d78954a, 0xbee624d4),
+     TOBN(0xb94896e0, 0xb8ae86fd), TOBN(0x6667ac0c, 0xc91c8b13),
+     TOBN(0x9f180512, 0x43bcf832), TOBN(0xfbadf8b7, 0xa0010137),
+     TOBN(0xc69b4089, 0xb3ba8aa7), TOBN(0xfac4bacd, 0xe687ce85),
+     TOBN(0x9164088d, 0x977eab40), TOBN(0x51f4c5b6, 0x2760b390),
+     TOBN(0xd238238f, 0x340dd553), TOBN(0x358566c3, 0xdb1d31c9),
+     TOBN(0x3a5ad69e, 0x5068f5ff), TOBN(0xf31435fc, 0xdaff6b06),
+     TOBN(0xae549a5b, 0xd6debff0), TOBN(0x59e5f0b7, 0x75e01331),
+     TOBN(0x5d492fb8, 0x98559acf), TOBN(0x96018c2e, 0x4db79b50),
+     TOBN(0x55f4a48f, 0x609f66aa), TOBN(0x1943b3af, 0x4900a14f),
+     TOBN(0xc22496df, 0x15a40d39), TOBN(0xb2a44684, 0x4c20f7c5),
+     TOBN(0x76a35afa, 0x3b98404c), TOBN(0xbec75725, 0xff5d1b77),
+     TOBN(0xb67aa163, 0xbea06444), TOBN(0x27e95bb2, 0xf724b6f2),
+     TOBN(0x3c20e3e9, 0xd238c8ab), TOBN(0x1213754e, 0xddd6ae17),
+     TOBN(0x8c431020, 0x716e0f74), TOBN(0x6679c82e, 0xffc095c2),
+     TOBN(0x2eb3adf4, 0xd0ac2932), TOBN(0x2cc970d3, 0x01bb7a76),
+     TOBN(0x70c71f2f, 0x740f0e66), TOBN(0x545c616b, 0x2b6b23cc),
+     TOBN(0x4528cfcb, 0xb40a8bd7), TOBN(0xff839633, 0x2ab27722),
+     TOBN(0x049127d9, 0x025ac99a), TOBN(0xd314d4a0, 0x2b63e33b),
+     TOBN(0xc8c310e7, 0x28d84519), TOBN(0x0fcb8983, 0xb3bc84ba),
+     TOBN(0x2cc52261, 0x38634818), TOBN(0x501814f4, 0xb44c2e0b),
+     TOBN(0xf7e181aa, 0x54dfdba3), TOBN(0xcfd58ff0, 0xe759718c),
+     TOBN(0xf90cdb14, 0xd3b507a8), TOBN(0x57bd478e, 0xc50bdad8),
+     TOBN(0x29c197e2, 0x50e5f9aa), TOBN(0x4db6eef8, 0xe40bc855),
+     TOBN(0x2cc8f21a, 0xd1fc0654), TOBN(0xc71cc963, 0x81269d73),
+     TOBN(0xecfbb204, 0x077f49f9), TOBN(0xdde92571, 0xca56b793),
+     TOBN(0x9abed6a3, 0xf97ad8f7), TOBN(0xe6c19d3f, 0x924de3bd),
+     TOBN(0x8dce92f4, 0xa140a800), TOBN(0x85f44d1e, 0x1337af07),
+     TOBN(0x5953c08b, 0x09d64c52), TOBN(0xa1b5e49f, 0xf5df9749),
+     TOBN(0x336a8fb8, 0x52735f7d), TOBN(0xb332b6db, 0x9add676b),
+     TOBN(0x558b88a0, 0xb4511aa4), TOBN(0x09788752, 0xdbd5cc55),
+     TOBN(0x16b43b9c, 0xd8cd52bd), TOBN(0x7f0bc5a0, 0xc2a2696b),
+     TOBN(0x146e12d4, 0xc11f61ef), TOBN(0x9ce10754, 0x3a83e79e),
+     TOBN(0x08ec73d9, 0x6cbfca15), TOBN(0x09ff29ad, 0x5b49653f),
+     TOBN(0xe31b72bd, 0xe7da946e), TOBN(0xebf9eb3b, 0xee80a4f2),
+     TOBN(0xd1aabd08, 0x17598ce4), TOBN(0x18b5fef4, 0x53f37e80),
+     TOBN(0xd5d5cdd3, 0x5958cd79), TOBN(0x3580a1b5, 0x1d373114),
+     TOBN(0xa36e4c91, 0xfa935726), TOBN(0xa38c534d, 0xef20d760),
+     TOBN(0x7088e40a, 0x2ff5845b), TOBN(0xe5bb40bd, 0xbd78177f),
+     TOBN(0x4f06a7a8, 0x857f9920), TOBN(0xe3cc3e50, 0xe968f05d),
+     TOBN(0x1d68b7fe, 0xe5682d26), TOBN(0x5206f76f, 0xaec7f87c),
+     TOBN(0x41110530, 0x041951ab), TOBN(0x58ec52c1, 0xd4b5a71a),
+     TOBN(0xf3488f99, 0x0f75cf9a), TOBN(0xf411951f, 0xba82d0d5),
+     TOBN(0x27ee75be, 0x618895ab), TOBN(0xeae060d4, 0x6d8aab14),
+     TOBN(0x9ae1df73, 0x7fb54dc2), TOBN(0x1f3e391b, 0x25963649),
+     TOBN(0x242ec32a, 0xfe055081), TOBN(0x5bd450ef, 0x8491c9bd),
+     TOBN(0x367efc67, 0x981eb389), TOBN(0xed7e1928, 0x3a0550d5),
+     TOBN(0x362e776b, 0xab3ce75c), TOBN(0xe890e308, 0x1f24c523),
+     TOBN(0xb961b682, 0xfeccef76), TOBN(0x8b8e11f5, 0x8bba6d92),
+     TOBN(0x8f2ccc4c, 0x2b2375c4), TOBN(0x0d7f7a52, 0xe2f86cfa),
+     TOBN(0xfd94d30a, 0x9efe5633), TOBN(0x2d8d246b, 0x5451f934),
+     TOBN(0x2234c6e3, 0x244e6a00), TOBN(0xde2b5b0d, 0xddec8c50),
+     TOBN(0x2ce53c5a, 0xbf776f5b), TOBN(0x6f724071, 0x60357b05),
+     TOBN(0xb2593717, 0x71bf3f7a), TOBN(0x87d2501c, 0x440c4a9f),
+     TOBN(0x440552e1, 0x87b05340), TOBN(0xb7bf7cc8, 0x21624c32),
+     TOBN(0x4155a6ce, 0x22facddb), TOBN(0x5a4228cb, 0x889837ef),
+     TOBN(0xef87d6d6, 0xfd4fd671), TOBN(0xa233687e, 0xc2daa10e),
+     TOBN(0x75622244, 0x03c0eb96), TOBN(0x7632d184, 0x8bf19be6),
+     TOBN(0x05d0f8e9, 0x40735ff4), TOBN(0x3a3e6e13, 0xc00931f1),
+     TOBN(0x31ccde6a, 0xdafe3f18), TOBN(0xf381366a, 0xcfe51207),
+     TOBN(0x24c222a9, 0x60167d92), TOBN(0x62f9d6f8, 0x7529f18c),
+     TOBN(0x412397c0, 0x0353b114), TOBN(0x334d89dc, 0xef808043),
+     TOBN(0xd9ec63ba, 0x2a4383ce), TOBN(0xcec8e937, 0x5cf92ba0),
+     TOBN(0xfb8b4288, 0xc8be74c0), TOBN(0x67d6912f, 0x105d4391),
+     TOBN(0x7b996c46, 0x1b913149), TOBN(0x36aae2ef, 0x3a4e02da),
+     TOBN(0xb68aa003, 0x972de594), TOBN(0x284ec70d, 0x4ec6d545),
+     TOBN(0xf3d2b2d0, 0x61391d54), TOBN(0x69c5d5d6, 0xfe114e92),
+     TOBN(0xbe0f00b5, 0xb4482dff), TOBN(0xe1596fa5, 0xf5bf33c5),
+     TOBN(0x10595b56, 0x96a71cba), TOBN(0x944938b2, 0xfdcadeb7),
+     TOBN(0xa282da4c, 0xfccd8471), TOBN(0x98ec05f3, 0x0d37bfe1),
+     TOBN(0xe171ce1b, 0x0698304a), TOBN(0x2d691444, 0x21bdf79b),
+     TOBN(0xd0cd3b74, 0x1b21dec1), TOBN(0x712ecd8b, 0x16a15f71),
+     TOBN(0x8d4c00a7, 0x00fd56e1), TOBN(0x02ec9692, 0xf9527c18),
+     TOBN(0x21c44937, 0x4a3e42e1), TOBN(0x9176fbab, 0x1392ae0a),
+     TOBN(0x8726f1ba, 0x44b7b618), TOBN(0xb4d7aae9, 0xf1de491c),
+     TOBN(0xf91df7b9, 0x07b582c0), TOBN(0x7e116c30, 0xef60aa3a),
+     TOBN(0x99270f81, 0x466265d7), TOBN(0xb15b6fe2, 0x4df7adf0),
+     TOBN(0xfe33b2d3, 0xf9738f7f), TOBN(0x48553ab9, 0xd6d70f95),
+     TOBN(0x2cc72ac8, 0xc21e94db), TOBN(0x795ac38d, 0xbdc0bbee),
+     TOBN(0x0a1be449, 0x2e40478f), TOBN(0x81bd3394, 0x052bde55),
+     TOBN(0x63c8dbe9, 0x56b3c4f2), TOBN(0x017a99cf, 0x904177cc),
+     TOBN(0x947bbddb, 0x4d010fc1), TOBN(0xacf9b00b, 0xbb2c9b21),
+     TOBN(0x2970bc8d, 0x47173611), TOBN(0x1a4cbe08, 0xac7d756f),
+     TOBN(0x06d9f4aa, 0x67d541a2), TOBN(0xa3e8b689, 0x59c2cf44),
+     TOBN(0xaad066da, 0x4d88f1dd), TOBN(0xc604f165, 0x7ad35dea),
+     TOBN(0x7edc0720, 0x4478ca67), TOBN(0xa10dfae0, 0xba02ce06),
+     TOBN(0xeceb1c76, 0xaf36f4e4), TOBN(0x994b2292, 0xaf3f8f48),
+     TOBN(0xbf9ed77b, 0x77c8a68c), TOBN(0x74f544ea, 0x51744c9d),
+     TOBN(0x82d05bb9, 0x8113a757), TOBN(0x4ef2d2b4, 0x8a9885e4),
+     TOBN(0x1e332be5, 0x1aa7865f), TOBN(0x22b76b18, 0x290d1a52),
+     TOBN(0x308a2310, 0x44351683), TOBN(0x9d861896, 0xa3f22840),
+     TOBN(0x5959ddcd, 0x841ed947), TOBN(0x0def0c94, 0x154b73bf),
+     TOBN(0xf0105417, 0x4c7c15e0), TOBN(0x539bfb02, 0x3a277c32),
+     TOBN(0xe699268e, 0xf9dccf5f), TOBN(0x9f5796a5, 0x0247a3bd),
+     TOBN(0x8b839de8, 0x4f157269), TOBN(0xc825c1e5, 0x7a30196b),
+     TOBN(0x6ef0aabc, 0xdc8a5a91), TOBN(0xf4a8ce6c, 0x498b7fe6),
+     TOBN(0x1cce35a7, 0x70cbac78), TOBN(0x83488e9b, 0xf6b23958),
+     TOBN(0x0341a070, 0xd76cb011), TOBN(0xda6c9d06, 0xae1b2658),
+     TOBN(0xb701fb30, 0xdd648c52), TOBN(0x994ca02c, 0x52fb9fd1),
+     TOBN(0x06933117, 0x6f563086), TOBN(0x3d2b8100, 0x17856bab),
+     TOBN(0xe89f48c8, 0x5963a46e), TOBN(0x658ab875, 0xa99e61c7),
+     TOBN(0x6e296f87, 0x4b8517b4), TOBN(0x36c4fcdc, 0xfc1bc656),
+     TOBN(0xde5227a1, 0xa3906def), TOBN(0x9fe95f57, 0x62418945),
+     TOBN(0x20c91e81, 0xfdd96cde), TOBN(0x5adbe47e, 0xda4480de),
+     TOBN(0xa009370f, 0x396de2b6), TOBN(0x98583d4b, 0xf0ecc7bd),
+     TOBN(0xf44f6b57, 0xe51d0672), TOBN(0x03d6b078, 0x556b1984),
+     TOBN(0x27dbdd93, 0xb0b64912), TOBN(0x9b3a3434, 0x15687b09),
+     TOBN(0x0dba6461, 0x51ec20a9), TOBN(0xec93db7f, 0xff28187c),
+     TOBN(0x00ff8c24, 0x66e48bdd), TOBN(0x2514f2f9, 0x11ccd78e),
+     TOBN(0xeba11f4f, 0xe1250603), TOBN(0x8a22cd41, 0x243fa156),
+     TOBN(0xa4e58df4, 0xb283e4c6), TOBN(0x78c29859, 0x8b39783f),
+     TOBN(0x5235aee2, 0xa5259809), TOBN(0xc16284b5, 0x0e0227dd),
+     TOBN(0xa5f57916, 0x1338830d), TOBN(0x6d4b8a6b, 0xd2123fca),
+     TOBN(0x236ea68a, 0xf9c546f8), TOBN(0xc1d36873, 0xfa608d36),
+     TOBN(0xcd76e495, 0x8d436d13), TOBN(0xd4d9c221, 0x8fb080af),
+     TOBN(0x665c1728, 0xe8ad3fb5), TOBN(0xcf1ebe4d, 0xb3d572e0),
+     TOBN(0xa7a8746a, 0x584c5e20), TOBN(0x267e4ea1, 0xb9dc7035),
+     TOBN(0x593a15cf, 0xb9548c9b), TOBN(0x5e6e2135, 0x4bd012f3),
+     TOBN(0xdf31cc6a, 0x8c8f936e), TOBN(0x8af84d04, 0xb5c241dc),
+     TOBN(0x63990a6f, 0x345efb86), TOBN(0x6fef4e61, 0xb9b962cb)}
+    ,
+    {TOBN(0xf6368f09, 0x25722608), TOBN(0x131260db, 0x131cf5c6),
+     TOBN(0x40eb353b, 0xfab4f7ac), TOBN(0x85c78880, 0x37eee829),
+     TOBN(0x4c1581ff, 0xc3bdf24e), TOBN(0x5bff75cb, 0xf5c3c5a8),
+     TOBN(0x35e8c83f, 0xa14e6f40), TOBN(0xb81d1c0f, 0x0295e0ca),
+     TOBN(0xfcde7cc8, 0xf43a730f), TOBN(0xe89b6f3c, 0x33ab590e),
+     TOBN(0xc823f529, 0xad03240b), TOBN(0x82b79afe, 0x98bea5db),
+     TOBN(0x568f2856, 0x962fe5de), TOBN(0x0c590adb, 0x60c591f3),
+     TOBN(0x1fc74a14, 0x4a28a858), TOBN(0x3b662498, 0xb3203f4c),
+     TOBN(0x91e3cf0d, 0x6c39765a), TOBN(0xa2db3acd, 0xac3cca0b),
+     TOBN(0x288f2f08, 0xcb953b50), TOBN(0x2414582c, 0xcf43cf1a),
+     TOBN(0x8dec8bbc, 0x60eee9a8), TOBN(0x54c79f02, 0x729aa042),
+     TOBN(0xd81cd5ec, 0x6532f5d5), TOBN(0xa672303a, 0xcf82e15f),
+     TOBN(0x376aafa8, 0x719c0563), TOBN(0xcd8ad2dc, 0xbc5fc79f),
+     TOBN(0x303fdb9f, 0xcb750cd3), TOBN(0x14ff052f, 0x4418b08e),
+     TOBN(0xf75084cf, 0x3e2d6520), TOBN(0x7ebdf0f8, 0x144ed509),
+     TOBN(0xf43bf0f2, 0xd3f25b98), TOBN(0x86ad71cf, 0xa354d837),
+     TOBN(0xb827fe92, 0x26f43572), TOBN(0xdfd3ab5b, 0x5d824758),
+     TOBN(0x315dd23a, 0x539094c1), TOBN(0x85c0e37a, 0x66623d68),
+     TOBN(0x575c7972, 0x7be19ae0), TOBN(0x616a3396, 0xdf0d36b5),
+     TOBN(0xa1ebb3c8, 0x26b1ff7e), TOBN(0x635b9485, 0x140ad453),
+     TOBN(0x92bf3cda, 0xda430c0b), TOBN(0x4702850e, 0x3a96dac6),
+     TOBN(0xc91cf0a5, 0x15ac326a), TOBN(0x95de4f49, 0xab8c25e4),
+     TOBN(0xb01bad09, 0xe265c17c), TOBN(0x24e45464, 0x087b3881),
+     TOBN(0xd43e583c, 0xe1fac5ca), TOBN(0xe17cb318, 0x6ead97a6),
+     TOBN(0x6cc39243, 0x74dcec46), TOBN(0x33cfc02d, 0x54c2b73f),
+     TOBN(0x82917844, 0xf26cd99c), TOBN(0x8819dd95, 0xd1773f89),
+     TOBN(0x09572aa6, 0x0871f427), TOBN(0x8e0cf365, 0xf6f01c34),
+     TOBN(0x7fa52988, 0xbff1f5af), TOBN(0x4eb357ea, 0xe75e8e50),
+     TOBN(0xd9d0c8c4, 0x868af75d), TOBN(0xd7325cff, 0x45c8c7ea),
+     TOBN(0xab471996, 0xcc81ecb0), TOBN(0xff5d55f3, 0x611824ed),
+     TOBN(0xbe314541, 0x1977a0ee), TOBN(0x5085c4c5, 0x722038c6),
+     TOBN(0x2d5335bf, 0xf94bb495), TOBN(0x894ad8a6, 0xc8e2a082),
+     TOBN(0x5c3e2341, 0xada35438), TOBN(0xf4a9fc89, 0x049b8c4e),
+     TOBN(0xbeeb355a, 0x9f17cf34), TOBN(0x3f311e0e, 0x6c91fe10),
+     TOBN(0xc2d20038, 0x92ab9891), TOBN(0x257bdcc1, 0x3e8ce9a9),
+     TOBN(0x1b2d9789, 0x88c53bee), TOBN(0x927ce89a, 0xcdba143a),
+     TOBN(0xb0a32cca, 0x523db280), TOBN(0x5c889f8a, 0x50d43783),
+     TOBN(0x503e04b3, 0x4897d16f), TOBN(0x8cdb6e78, 0x08f5f2e8),
+     TOBN(0x6ab91cf0, 0x179c8e74), TOBN(0xd8874e52, 0x48211d60),
+     TOBN(0xf948d4d5, 0xea851200), TOBN(0x4076d41e, 0xe6f9840a),
+     TOBN(0xc20e263c, 0x47b517ea), TOBN(0x79a448fd, 0x30685e5e),
+     TOBN(0xe55f6f78, 0xf90631a0), TOBN(0x88a790b1, 0xa79e6346),
+     TOBN(0x62160c7d, 0x80969fe8), TOBN(0x54f92fd4, 0x41491bb9),
+     TOBN(0xa6645c23, 0x5c957526), TOBN(0xf44cc5ae, 0xbea3ce7b),
+     TOBN(0xf7628327, 0x8b1e68b7), TOBN(0xc731ad7a, 0x303f29d3),
+     TOBN(0xfe5a9ca9, 0x57d03ecb), TOBN(0x96c0d50c, 0x41bc97a7),
+     TOBN(0xc4669fe7, 0x9b4f7f24), TOBN(0xfdd781d8, 0x3d9967ef),
+     TOBN(0x7892c7c3, 0x5d2c208d), TOBN(0x8bf64f7c, 0xae545cb3),
+     TOBN(0xc01f862c, 0x467be912), TOBN(0xf4c85ee9, 0xc73d30cc),
+     TOBN(0x1fa6f4be, 0x6ab83ec7), TOBN(0xa07a3c1c, 0x4e3e3cf9),
+     TOBN(0x87f8ef45, 0x0c00beb3), TOBN(0x30e2c2b3, 0x000d4c3e),
+     TOBN(0x1aa00b94, 0xfe08bf5b), TOBN(0x32c133aa, 0x9224ef52),
+     TOBN(0x38df16bb, 0x32e5685d), TOBN(0x68a9e069, 0x58e6f544),
+     TOBN(0x495aaff7, 0xcdc5ebc6), TOBN(0xf894a645, 0x378b135f),
+     TOBN(0xf316350a, 0x09e27ecf), TOBN(0xeced201e, 0x58f7179d),
+     TOBN(0x2eec273c, 0xe97861ba), TOBN(0x47ec2cae, 0xd693be2e),
+     TOBN(0xfa4c97c4, 0xf68367ce), TOBN(0xe4f47d0b, 0xbe5a5755),
+     TOBN(0x17de815d, 0xb298a979), TOBN(0xd7eca659, 0xc177dc7d),
+     TOBN(0x20fdbb71, 0x49ded0a3), TOBN(0x4cb2aad4, 0xfb34d3c5),
+     TOBN(0x2cf31d28, 0x60858a33), TOBN(0x3b6873ef, 0xa24aa40f),
+     TOBN(0x540234b2, 0x2c11bb37), TOBN(0x2d0366dd, 0xed4c74a3),
+     TOBN(0xf9a968da, 0xeec5f25d), TOBN(0x36601068, 0x67b63142),
+     TOBN(0x07cd6d2c, 0x68d7b6d4), TOBN(0xa8f74f09, 0x0c842942),
+     TOBN(0xe2751404, 0x7768b1ee), TOBN(0x4b5f7e89, 0xfe62aee4),
+     TOBN(0xc6a77177, 0x89070d26), TOBN(0xa1f28e4e, 0xdd1c8bc7),
+     TOBN(0xea5f4f06, 0x469e1f17), TOBN(0x78fc242a, 0xfbdb78e0),
+     TOBN(0xc9c7c592, 0x8b0588f1), TOBN(0xb6b7a0fd, 0x1535921e),
+     TOBN(0xcc5bdb91, 0xbde5ae35), TOBN(0xb42c485e, 0x12ff1864),
+     TOBN(0xa1113e13, 0xdbab98aa), TOBN(0xde9d469b, 0xa17b1024),
+     TOBN(0x23f48b37, 0xc0462d3a), TOBN(0x3752e537, 0x7c5c078d),
+     TOBN(0xe3a86add, 0x15544eb9), TOBN(0xf013aea7, 0x80fba279),
+     TOBN(0x8b5bb76c, 0xf22001b5), TOBN(0xe617ba14, 0xf02891ab),
+     TOBN(0xd39182a6, 0x936219d3), TOBN(0x5ce1f194, 0xae51cb19),
+     TOBN(0xc78f8598, 0xbf07a74c), TOBN(0x6d7158f2, 0x22cbf1bc),
+     TOBN(0x3b846b21, 0xe300ce18), TOBN(0x35fba630, 0x2d11275d),
+     TOBN(0x5fe25c36, 0xa0239b9b), TOBN(0xd8beb35d, 0xdf05d940),
+     TOBN(0x4db02bb0, 0x1f7e320d), TOBN(0x0641c364, 0x6da320ea),
+     TOBN(0x6d95fa5d, 0x821389a3), TOBN(0x92699748, 0x8fcd8e3d),
+     TOBN(0x316fef17, 0xceb6c143), TOBN(0x67fcb841, 0xd933762b),
+     TOBN(0xbb837e35, 0x118b17f8), TOBN(0x4b92552f, 0x9fd24821),
+     TOBN(0xae6bc70e, 0x46aca793), TOBN(0x1cf0b0e4, 0xe579311b),
+     TOBN(0x8dc631be, 0x5802f716), TOBN(0x099bdc6f, 0xbddbee4d),
+     TOBN(0xcc352bb2, 0x0caf8b05), TOBN(0xf74d505a, 0x72d63df2),
+     TOBN(0xb9876d4b, 0x91c4f408), TOBN(0x1ce18473, 0x9e229b2d),
+     TOBN(0x49507597, 0x83abdb4a), TOBN(0x850fbcb6, 0xdee84b18),
+     TOBN(0x6325236e, 0x609e67dc), TOBN(0x04d831d9, 0x9336c6d8),
+     TOBN(0x8deaae3b, 0xfa12d45d), TOBN(0xe425f8ce, 0x4746e246),
+     TOBN(0x8004c175, 0x24f5f31e), TOBN(0xaca16d8f, 0xad62c3b7),
+     TOBN(0x0dc15a6a, 0x9152f934), TOBN(0xf1235e5d, 0xed0e12c1),
+     TOBN(0xc33c06ec, 0xda477dac), TOBN(0x76be8732, 0xb2ea0006),
+     TOBN(0xcf3f7831, 0x0c0cd313), TOBN(0x3c524553, 0xa614260d),
+     TOBN(0x31a756f8, 0xcab22d15), TOBN(0x03ee10d1, 0x77827a20),
+     TOBN(0xd1e059b2, 0x1994ef20), TOBN(0x2a653b69, 0x638ae318),
+     TOBN(0x70d5eb58, 0x2f699010), TOBN(0x279739f7, 0x09f5f84a),
+     TOBN(0x5da4663c, 0x8b799336), TOBN(0xfdfdf14d, 0x203c37eb),
+     TOBN(0x32d8a9dc, 0xa1dbfb2d), TOBN(0xab40cff0, 0x77d48f9b),
+     TOBN(0xc018b383, 0xd20b42d5), TOBN(0xf9a810ef, 0x9f78845f),
+     TOBN(0x40af3753, 0xbdba9df0), TOBN(0xb90bdcfc, 0x131dfdf9),
+     TOBN(0x18720591, 0xf01ab782), TOBN(0xc823f211, 0x6af12a88),
+     TOBN(0xa51b80f3, 0x0dc14401), TOBN(0xde248f77, 0xfb2dfbe3),
+     TOBN(0xef5a44e5, 0x0cafe751), TOBN(0x73997c9c, 0xd4dcd221),
+     TOBN(0x32fd86d1, 0xde854024), TOBN(0xd5b53adc, 0xa09b84bb),
+     TOBN(0x008d7a11, 0xdcedd8d1), TOBN(0x406bd1c8, 0x74b32c84),
+     TOBN(0x5d4472ff, 0x05dde8b1), TOBN(0x2e25f2cd, 0xfce2b32f),
+     TOBN(0xbec0dd5e, 0x29dfc254), TOBN(0x4455fcf6, 0x2b98b267),
+     TOBN(0x0b4d43a5, 0xc72df2ad), TOBN(0xea70e6be, 0x48a75397),
+     TOBN(0x2aad6169, 0x5820f3bf), TOBN(0xf410d2dd, 0x9e37f68f),
+     TOBN(0x70fb7dba, 0x7be5ac83), TOBN(0x636bb645, 0x36ec3eec),
+     TOBN(0x27104ea3, 0x9754e21c), TOBN(0xbc87a3e6, 0x8d63c373),
+     TOBN(0x483351d7, 0x4109db9a), TOBN(0x0fa724e3, 0x60134da7),
+     TOBN(0x9ff44c29, 0xb0720b16), TOBN(0x2dd0cf13, 0x06aceead),
+     TOBN(0x5942758c, 0xe26929a6), TOBN(0x96c5db92, 0xb766a92b),
+     TOBN(0xcec7d4c0, 0x5f18395e), TOBN(0xd3f22744, 0x1f80d032),
+     TOBN(0x7a68b37a, 0xcb86075b), TOBN(0x074764dd, 0xafef92db),
+     TOBN(0xded1e950, 0x7bc7f389), TOBN(0xc580c850, 0xb9756460),
+     TOBN(0xaeeec2a4, 0x7da48157), TOBN(0x3f0b4e7f, 0x82c587b3),
+     TOBN(0x231c6de8, 0xa9f19c53), TOBN(0x5717bd73, 0x6974e34e),
+     TOBN(0xd9e1d216, 0xf1508fa9), TOBN(0x9f112361, 0xdadaa124),
+     TOBN(0x80145e31, 0x823b7348), TOBN(0x4dd8f0d5, 0xac634069),
+     TOBN(0xe3d82fc7, 0x2297c258), TOBN(0x276fcfee, 0x9cee7431),
+     TOBN(0x8eb61b5e, 0x2bc0aea9), TOBN(0x4f668fd5, 0xde329431),
+     TOBN(0x03a32ab1, 0x38e4b87e), TOBN(0xe1374517, 0x73d0ef0b),
+     TOBN(0x1a46f7e6, 0x853ac983), TOBN(0xc3bdf42e, 0x68e78a57),
+     TOBN(0xacf20785, 0x2ea96dd1), TOBN(0xa10649b9, 0xf1638460),
+     TOBN(0xf2369f0b, 0x879fbbed), TOBN(0x0ff0ae86, 0xda9d1869),
+     TOBN(0x5251d759, 0x56766f45), TOBN(0x4984d8c0, 0x2be8d0fc),
+     TOBN(0x7ecc95a6, 0xd21008f0), TOBN(0x29bd54a0, 0x3a1a1c49),
+     TOBN(0xab9828c5, 0xd26c50f3), TOBN(0x32c0087c, 0x51d0d251),
+     TOBN(0x9bac3ce6, 0x0c1cdb26), TOBN(0xcd94d947, 0x557ca205),
+     TOBN(0x1b1bd598, 0x9db1fdcd), TOBN(0x0eda0108, 0xa3d8b149),
+     TOBN(0x95066610, 0x56152fcc), TOBN(0xc2f037e6, 0xe7192b33),
+     TOBN(0xdeffb41a, 0xc92e05a4), TOBN(0x1105f6c2, 0xc2f6c62e),
+     TOBN(0x68e73500, 0x8733913c), TOBN(0xcce86163, 0x3f3adc40),
+     TOBN(0xf407a942, 0x38a278e9), TOBN(0xd13c1b9d, 0x2ab21292),
+     TOBN(0x93ed7ec7, 0x1c74cf5c), TOBN(0x8887dc48, 0xf1a4c1b4),
+     TOBN(0x3830ff30, 0x4b3a11f1), TOBN(0x358c5a3c, 0x58937cb6),
+     TOBN(0x027dc404, 0x89022829), TOBN(0x40e93977, 0x3b798f79),
+     TOBN(0x90ad3337, 0x38be6ead), TOBN(0x9c23f6bc, 0xf34c0a5d),
+     TOBN(0xd1711a35, 0xfbffd8bb), TOBN(0x60fcfb49, 0x1949d3dd),
+     TOBN(0x09c8ef4b, 0x7825d93a), TOBN(0x24233cff, 0xa0a8c968),
+     TOBN(0x67ade46c, 0xe6d982af), TOBN(0xebb6bf3e, 0xe7544d7c),
+     TOBN(0xd6b9ba76, 0x3d8bd087), TOBN(0x46fe382d, 0x4dc61280),
+     TOBN(0xbd39a7e8, 0xb5bdbd75), TOBN(0xab381331, 0xb8f228fe),
+     TOBN(0x0709a77c, 0xce1c4300), TOBN(0x6a247e56, 0xf337ceac),
+     TOBN(0x8f34f21b, 0x636288be), TOBN(0x9dfdca74, 0xc8a7c305),
+     TOBN(0x6decfd1b, 0xea919e04), TOBN(0xcdf2688d, 0x8e1991f8),
+     TOBN(0xe607df44, 0xd0f8a67e), TOBN(0xd985df4b, 0x0b58d010),
+     TOBN(0x57f834c5, 0x0c24f8f4), TOBN(0xe976ef56, 0xa0bf01ae),
+     TOBN(0x536395ac, 0xa1c32373), TOBN(0x351027aa, 0x734c0a13),
+     TOBN(0xd2f1b5d6, 0x5e6bd5bc), TOBN(0x2b539e24, 0x223debed),
+     TOBN(0xd4994cec, 0x0eaa1d71), TOBN(0x2a83381d, 0x661dcf65),
+     TOBN(0x5f1aed2f, 0x7b54c740), TOBN(0x0bea3fa5, 0xd6dda5ee),
+     TOBN(0x9d4fb684, 0x36cc6134), TOBN(0x8eb9bbf3, 0xc0a443dd),
+     TOBN(0xfc500e2e, 0x383b7d2a), TOBN(0x7aad621c, 0x5b775257),
+     TOBN(0x69284d74, 0x0a8f7cc0), TOBN(0xe820c2ce, 0x07562d65),
+     TOBN(0xbf9531b9, 0x499758ee), TOBN(0x73e95ca5, 0x6ee0cc2d),
+     TOBN(0xf61790ab, 0xfbaf50a5), TOBN(0xdf55e76b, 0x684e0750),
+     TOBN(0xec516da7, 0xf176b005), TOBN(0x575553bb, 0x7a2dddc7),
+     TOBN(0x37c87ca3, 0x553afa73), TOBN(0x315f3ffc, 0x4d55c251),
+     TOBN(0xe846442a, 0xaf3e5d35), TOBN(0x61b91149, 0x6495ff28),
+     TOBN(0x23cc95d3, 0xfa326dc3), TOBN(0x1df4da1f, 0x18fc2cea),
+     TOBN(0x24bf9adc, 0xd0a37d59), TOBN(0xb6710053, 0x320d6e1e),
+     TOBN(0x96f9667e, 0x618344d1), TOBN(0xcc7ce042, 0xa06445af),
+     TOBN(0xa02d8514, 0xd68dbc3a), TOBN(0x4ea109e4, 0x280b5a5b),
+     TOBN(0x5741a7ac, 0xb40961bf), TOBN(0x4ada5937, 0x6aa56bfa),
+     TOBN(0x7feb9145, 0x02b765d1), TOBN(0x561e97be, 0xe6ad1582),
+     TOBN(0xbbc4a5b6, 0xda3982f5), TOBN(0x0c2659ed, 0xb546f468),
+     TOBN(0xb8e7e6aa, 0x59612d20), TOBN(0xd83dfe20, 0xac19e8e0),
+     TOBN(0x8530c45f, 0xb835398c), TOBN(0x6106a8bf, 0xb38a41c2),
+     TOBN(0x21e8f9a6, 0x35f5dcdb), TOBN(0x39707137, 0xcae498ed),
+     TOBN(0x70c23834, 0xd8249f00), TOBN(0x9f14b58f, 0xab2537a0),
+     TOBN(0xd043c365, 0x5f61c0c2), TOBN(0xdc5926d6, 0x09a194a7),
+     TOBN(0xddec0339, 0x8e77738a), TOBN(0xd07a63ef, 0xfba46426),
+     TOBN(0x2e58e79c, 0xee7f6e86), TOBN(0xe59b0459, 0xff32d241),
+     TOBN(0xc5ec84e5, 0x20fa0338), TOBN(0x97939ac8, 0xeaff5ace),
+     TOBN(0x0310a4e3, 0xb4a38313), TOBN(0x9115fba2, 0x8f9d9885),
+     TOBN(0x8dd710c2, 0x5fadf8c3), TOBN(0x66be38a2, 0xce19c0e2),
+     TOBN(0xd42a279c, 0x4cfe5022), TOBN(0x597bb530, 0x0e24e1b8),
+     TOBN(0x3cde86b7, 0xc153ca7f), TOBN(0xa8d30fb3, 0x707d63bd),
+     TOBN(0xac905f92, 0xbd60d21e), TOBN(0x98e7ffb6, 0x7b9a54ab),
+     TOBN(0xd7147df8, 0xe9726a30), TOBN(0xb5e216ff, 0xafce3533),
+     TOBN(0xb550b799, 0x2ff1ec40), TOBN(0x6b613b87, 0xa1e953fd),
+     TOBN(0x87b88dba, 0x792d5610), TOBN(0x2ee1270a, 0xa190fbe1),
+     TOBN(0x02f4e2dc, 0x2ef581da), TOBN(0x016530e4, 0xeff82a95),
+     TOBN(0xcbb93dfd, 0x8fd6ee89), TOBN(0x16d3d986, 0x46848fff),
+     TOBN(0x600eff24, 0x1da47adf), TOBN(0x1b9754a0, 0x0ad47a71),
+     TOBN(0x8f9266df, 0x70c33b98), TOBN(0xaadc87ae, 0xdf34186e),
+     TOBN(0x0d2ce8e1, 0x4ad24132), TOBN(0x8a47cbfc, 0x19946eba),
+     TOBN(0x47feeb66, 0x62b5f3af), TOBN(0xcefab561, 0x0abb3734),
+     TOBN(0x449de60e, 0x19f35cb1), TOBN(0x39f8db14, 0x157f0eb9),
+     TOBN(0xffaecc5b, 0x3c61bfd6), TOBN(0xa5a4d41d, 0x41216703),
+     TOBN(0x7f8fabed, 0x224e1cc2), TOBN(0x0d5a8186, 0x871ad953),
+     TOBN(0xf10774f7, 0xd22da9a9), TOBN(0x45b8a678, 0xcc8a9b0d),
+     TOBN(0xd9c2e722, 0xbdc32cff), TOBN(0xbf71b5f5, 0x337202a5),
+     TOBN(0x95c57f2f, 0x69fc4db9), TOBN(0xb6dad34c, 0x765d01e1),
+     TOBN(0x7e0bd13f, 0xcb904635), TOBN(0x61751253, 0x763a588c),
+     TOBN(0xd85c2997, 0x81af2c2d), TOBN(0xc0f7d9c4, 0x81b9d7da),
+     TOBN(0x838a34ae, 0x08533e8d), TOBN(0x15c4cb08, 0x311d8311),
+     TOBN(0x97f83285, 0x8e121e14), TOBN(0xeea7dc1e, 0x85000a5f),
+     TOBN(0x0c6059b6, 0x5d256274), TOBN(0xec9beace, 0xb95075c0),
+     TOBN(0x173daad7, 0x1df97828), TOBN(0xbf851cb5, 0xa8937877),
+     TOBN(0xb083c594, 0x01646f3c), TOBN(0x3bad30cf, 0x50c6d352),
+     TOBN(0xfeb2b202, 0x496bbcea), TOBN(0x3cf9fd4f, 0x18a1e8ba),
+     TOBN(0xd26de7ff, 0x1c066029), TOBN(0x39c81e9e, 0x4e9ed4f8),
+     TOBN(0xd8be0cb9, 0x7b390d35), TOBN(0x01df2bbd, 0x964aab27),
+     TOBN(0x3e8c1a65, 0xc3ef64f8), TOBN(0x567291d1, 0x716ed1dd),
+     TOBN(0x95499c6c, 0x5f5406d3), TOBN(0x71fdda39, 0x5ba8e23f),
+     TOBN(0xcfeb320e, 0xd5096ece), TOBN(0xbe7ba92b, 0xca66dd16),
+     TOBN(0x4608d36b, 0xc6fb5a7d), TOBN(0xe3eea15a, 0x6d2dd0e0),
+     TOBN(0x75b0a3eb, 0x8f97a36a), TOBN(0xf59814cc, 0x1c83de1e),
+     TOBN(0x56c9c5b0, 0x1c33c23f), TOBN(0xa96c1da4, 0x6faa4136),
+     TOBN(0x46bf2074, 0xde316551), TOBN(0x3b866e7b, 0x1f756c8f),
+     TOBN(0x727727d8, 0x1495ed6b), TOBN(0xb2394243, 0xb682dce7),
+     TOBN(0x8ab8454e, 0x758610f3), TOBN(0xc243ce84, 0x857d72a4),
+     TOBN(0x7b320d71, 0xdbbf370f), TOBN(0xff9afa37, 0x78e0f7ca),
+     TOBN(0x0119d1e0, 0xea7b523f), TOBN(0xb997f8cb, 0x058c7d42),
+     TOBN(0x285bcd2a, 0x37bbb184), TOBN(0x51dcec49, 0xa45d1fa6),
+     TOBN(0x6ade3b64, 0xe29634cb), TOBN(0x080c94a7, 0x26b86ef1),
+     TOBN(0xba583db1, 0x2283fbe3), TOBN(0x902bddc8, 0x5a9315ed),
+     TOBN(0x07c1ccb3, 0x86964bec), TOBN(0x78f4eacf, 0xb6258301),
+     TOBN(0x4bdf3a49, 0x56f90823), TOBN(0xba0f5080, 0x741d777b),
+     TOBN(0x091d71c3, 0xf38bf760), TOBN(0x9633d50f, 0x9b625b02),
+     TOBN(0x03ecb743, 0xb8c9de61), TOBN(0xb4751254, 0x5de74720),
+     TOBN(0x9f9defc9, 0x74ce1cb2), TOBN(0x774a4f6a, 0x00bd32ef),
+     TOBN(0xaca385f7, 0x73848f22), TOBN(0x53dad716, 0xf3f8558e),
+     TOBN(0xab7b34b0, 0x93c471f9), TOBN(0xf530e069, 0x19644bc7),
+     TOBN(0x3d9fb1ff, 0xdd59d31a), TOBN(0x4382e0df, 0x08daa795),
+     TOBN(0x165c6f4b, 0xd5cc88d7), TOBN(0xeaa392d5, 0x4a18c900),
+     TOBN(0x94203c67, 0x648024ee), TOBN(0x188763f2, 0x8c2fabcd),
+     TOBN(0xa80f87ac, 0xbbaec835), TOBN(0x632c96e0, 0xf29d8d54),
+     TOBN(0x29b0a60e, 0x4c00a95e), TOBN(0x2ef17f40, 0xe011e9fa),
+     TOBN(0xf6c0e1d1, 0x15b77223), TOBN(0xaaec2c62, 0x14b04e32),
+     TOBN(0xd35688d8, 0x3d84e58c), TOBN(0x2af5094c, 0x958571db),
+     TOBN(0x4fff7e19, 0x760682a6), TOBN(0x4cb27077, 0xe39a407c),
+     TOBN(0x0f59c547, 0x4ff0e321), TOBN(0x169f34a6, 0x1b34c8ff),
+     TOBN(0x2bff1096, 0x52bc1ba7), TOBN(0xa25423b7, 0x83583544),
+     TOBN(0x5d55d5d5, 0x0ac8b782), TOBN(0xff6622ec, 0x2db3c892),
+     TOBN(0x48fce741, 0x6b8bb642), TOBN(0x31d6998c, 0x69d7e3dc),
+     TOBN(0xdbaf8004, 0xcadcaed0), TOBN(0x801b0142, 0xd81d053c),
+     TOBN(0x94b189fc, 0x59630ec6), TOBN(0x120e9934, 0xaf762c8e),
+     TOBN(0x53a29aa4, 0xfdc6a404), TOBN(0x19d8e01e, 0xa1909948),
+     TOBN(0x3cfcabf1, 0xd7e89681), TOBN(0x3321a50d, 0x4e132d37),
+     TOBN(0xd0496863, 0xe9a86111), TOBN(0x8c0cde61, 0x06a3bc65),
+     TOBN(0xaf866c49, 0xfc9f8eef), TOBN(0x2066350e, 0xff7f5141),
+     TOBN(0x4f8a4689, 0xe56ddfbd), TOBN(0xea1b0c07, 0xfe32983a),
+     TOBN(0x2b317462, 0x873cb8cb), TOBN(0x658deddc, 0x2d93229f),
+     TOBN(0x65efaf4d, 0x0f64ef58), TOBN(0xfe43287d, 0x730cc7a8),
+     TOBN(0xaebc0c72, 0x3d047d70), TOBN(0x92efa539, 0xd92d26c9),
+     TOBN(0x06e78457, 0x94b56526), TOBN(0x415cb80f, 0x0961002d),
+     TOBN(0x89e5c565, 0x76dcb10f), TOBN(0x8bbb6982, 0xff9259fe),
+     TOBN(0x4fe8795b, 0x9abc2668), TOBN(0xb5d4f534, 0x1e678fb1),
+     TOBN(0x6601f3be, 0x7b7da2b9), TOBN(0x98da59e2, 0xa13d6805),
+     TOBN(0x190d8ea6, 0x01799a52), TOBN(0xa20cec41, 0xb86d2952),
+     TOBN(0x3062ffb2, 0x7fff2a7c), TOBN(0x741b32e5, 0x79f19d37),
+     TOBN(0xf80d8181, 0x4eb57d47), TOBN(0x7a2d0ed4, 0x16aef06b),
+     TOBN(0x09735fb0, 0x1cecb588), TOBN(0x1641caaa, 0xc6061f5b)}
+    ,
+    {TOBN(0x7f99824f, 0x20151427), TOBN(0x206828b6, 0x92430206),
+     TOBN(0xaa9097d7, 0xe1112357), TOBN(0xacf9a2f2, 0x09e414ec),
+     TOBN(0xdbdac9da, 0x27915356), TOBN(0x7e0734b7, 0x001efee3),
+     TOBN(0x54fab5bb, 0xd2b288e2), TOBN(0x4c630fc4, 0xf62dd09c),
+     TOBN(0x8537107a, 0x1ac2703b), TOBN(0xb49258d8, 0x6bc857b5),
+     TOBN(0x57df14de, 0xbcdaccd1), TOBN(0x24ab68d7, 0xc4ae8529),
+     TOBN(0x7ed8b5d4, 0x734e59d0), TOBN(0x5f8740c8, 0xc495cc80),
+     TOBN(0x84aedd5a, 0x291db9b3), TOBN(0x80b360f8, 0x4fb995be),
+     TOBN(0xae915f5d, 0x5fa067d1), TOBN(0x4134b57f, 0x9668960c),
+     TOBN(0xbd3656d6, 0xa48edaac), TOBN(0xdac1e3e4, 0xfc1d7436),
+     TOBN(0x674ff869, 0xd81fbb26), TOBN(0x449ed3ec, 0xb26c33d4),
+     TOBN(0x85138705, 0xd94203e8), TOBN(0xccde538b, 0xbeeb6f4a),
+     TOBN(0x55d5c68d, 0xa61a76fa), TOBN(0x598b441d, 0xca1554dc),
+     TOBN(0xd39923b9, 0x773b279c), TOBN(0x33331d3c, 0x36bf9efc),
+     TOBN(0x2d4c848e, 0x298de399), TOBN(0xcfdb8e77, 0xa1a27f56),
+     TOBN(0x94c855ea, 0x57b8ab70), TOBN(0xdcdb9dae, 0x6f7879ba),
+     TOBN(0x7bdff8c2, 0x019f2a59), TOBN(0xb3ce5bb3, 0xcb4fbc74),
+     TOBN(0xea907f68, 0x8a9173dd), TOBN(0x6cd3d0d3, 0x95a75439),
+     TOBN(0x92ecc4d6, 0xefed021c), TOBN(0x09a9f9b0, 0x6a77339a),
+     TOBN(0x87ca6b15, 0x7188c64a), TOBN(0x10c29968, 0x44899158),
+     TOBN(0x5859a229, 0xed6e82ef), TOBN(0x16f338e3, 0x65ebaf4e),
+     TOBN(0x0cd31387, 0x5ead67ae), TOBN(0x1c73d228, 0x54ef0bb4),
+     TOBN(0x4cb55131, 0x74a5c8c7), TOBN(0x01cd2970, 0x7f69ad6a),
+     TOBN(0xa04d00dd, 0xe966f87e), TOBN(0xd96fe447, 0x0b7b0321),
+     TOBN(0x342ac06e, 0x88fbd381), TOBN(0x02cd4a84, 0x5c35a493),
+     TOBN(0xe8fa89de, 0x54f1bbcd), TOBN(0x341d6367, 0x2575ed4c),
+     TOBN(0xebe357fb, 0xd238202b), TOBN(0x600b4d1a, 0xa984ead9),
+     TOBN(0xc35c9f44, 0x52436ea0), TOBN(0x96fe0a39, 0xa370751b),
+     TOBN(0x4c4f0736, 0x7f636a38), TOBN(0x9f943fb7, 0x0e76d5cb),
+     TOBN(0xb03510ba, 0xa8b68b8b), TOBN(0xc246780a, 0x9ed07a1f),
+     TOBN(0x3c051415, 0x6d549fc2), TOBN(0xc2953f31, 0x607781ca),
+     TOBN(0x955e2c69, 0xd8d95413), TOBN(0xb300fadc, 0x7bd282e3),
+     TOBN(0x81fe7b50, 0x87e9189f), TOBN(0xdb17375c, 0xf42dda27),
+     TOBN(0x22f7d896, 0xcf0a5904), TOBN(0xa0e57c5a, 0xebe348e6),
+     TOBN(0xa61011d3, 0xf40e3c80), TOBN(0xb1189321, 0x8db705c5),
+     TOBN(0x4ed9309e, 0x50fedec3), TOBN(0xdcf14a10, 0x4d6d5c1d),
+     TOBN(0x056c265b, 0x55691342), TOBN(0xe8e08504, 0x91049dc7),
+     TOBN(0x131329f5, 0xc9bae20a), TOBN(0x96c8b3e8, 0xd9dccdb4),
+     TOBN(0x8c5ff838, 0xfb4ee6b4), TOBN(0xfc5a9aeb, 0x41e8ccf0),
+     TOBN(0x7417b764, 0xfae050c6), TOBN(0x0953c3d7, 0x00452080),
+     TOBN(0x21372682, 0x38dfe7e8), TOBN(0xea417e15, 0x2bb79d4b),
+     TOBN(0x59641f1c, 0x76e7cf2d), TOBN(0x271e3059, 0xea0bcfcc),
+     TOBN(0x624c7dfd, 0x7253ecbd), TOBN(0x2f552e25, 0x4fca6186),
+     TOBN(0xcbf84ecd, 0x4d866e9c), TOBN(0x73967709, 0xf68d4610),
+     TOBN(0xa14b1163, 0xc27901b4), TOBN(0xfd9236e0, 0x899b8bf3),
+     TOBN(0x42b091ec, 0xcbc6da0a), TOBN(0xbb1dac6f, 0x5ad1d297),
+     TOBN(0x80e61d53, 0xa91cf76e), TOBN(0x4110a412, 0xd31f1ee7),
+     TOBN(0x2d87c3ba, 0x13efcf77), TOBN(0x1f374bb4, 0xdf450d76),
+     TOBN(0x5e78e2f2, 0x0d188dab), TOBN(0xe3968ed0, 0xf4b885ef),
+     TOBN(0x46c0568e, 0x7314570f), TOBN(0x31616338, 0x01170521),
+     TOBN(0x18e1e7e2, 0x4f0c8afe), TOBN(0x4caa75ff, 0xdeea78da),
+     TOBN(0x82db67f2, 0x7c5d8a51), TOBN(0x36a44d86, 0x6f505370),
+     TOBN(0xd72c5bda, 0x0333974f), TOBN(0x5db516ae, 0x27a70146),
+     TOBN(0x34705281, 0x210ef921), TOBN(0xbff17a8f, 0x0c9c38e5),
+     TOBN(0x78f4814e, 0x12476da1), TOBN(0xc1e16613, 0x33c16980),
+     TOBN(0x9e5b386f, 0x424d4bca), TOBN(0x4c274e87, 0xc85740de),
+     TOBN(0xb6a9b88d, 0x6c2f5226), TOBN(0x14d1b944, 0x550d7ca8),
+     TOBN(0x580c85fc, 0x1fc41709), TOBN(0xc1da368b, 0x54c6d519),
+     TOBN(0x2b0785ce, 0xd5113cf7), TOBN(0x0670f633, 0x5a34708f),
+     TOBN(0x46e23767, 0x15cc3f88), TOBN(0x1b480cfa, 0x50c72c8f),
+     TOBN(0x20288602, 0x4147519a), TOBN(0xd0981eac, 0x26b372f0),
+     TOBN(0xa9d4a7ca, 0xa785ebc8), TOBN(0xd953c50d, 0xdbdf58e9),
+     TOBN(0x9d6361cc, 0xfd590f8f), TOBN(0x72e9626b, 0x44e6c917),
+     TOBN(0x7fd96110, 0x22eb64cf), TOBN(0x863ebb7e, 0x9eb288f3),
+     TOBN(0x6e6ab761, 0x6aca8ee7), TOBN(0x97d10b39, 0xd7b40358),
+     TOBN(0x1687d377, 0x1e5feb0d), TOBN(0xc83e50e4, 0x8265a27a),
+     TOBN(0x8f75a9fe, 0xc954b313), TOBN(0xcc2e8f47, 0x310d1f61),
+     TOBN(0xf5ba81c5, 0x6557d0e0), TOBN(0x25f9680c, 0x3eaf6207),
+     TOBN(0xf95c6609, 0x4354080b), TOBN(0x5225bfa5, 0x7bf2fe1c),
+     TOBN(0xc5c004e2, 0x5c7d98fa), TOBN(0x3561bf1c, 0x019aaf60),
+     TOBN(0x5e6f9f17, 0xba151474), TOBN(0xdec2f934, 0xb04f6eca),
+     TOBN(0x64e368a1, 0x269acb1e), TOBN(0x1332d9e4, 0x0cdda493),
+     TOBN(0x60d6cf69, 0xdf23de05), TOBN(0x66d17da2, 0x009339a0),
+     TOBN(0x9fcac985, 0x0a693923), TOBN(0xbcf057fc, 0xed7c6a6d),
+     TOBN(0xc3c5c8c5, 0xf0b5662c), TOBN(0x25318dd8, 0xdcba4f24),
+     TOBN(0x60e8cb75, 0x082b69ff), TOBN(0x7c23b3ee, 0x1e728c01),
+     TOBN(0x15e10a0a, 0x097e4403), TOBN(0xcb3d0a86, 0x19854665),
+     TOBN(0x88d8e211, 0xd67d4826), TOBN(0xb39af66e, 0x0b9d2839),
+     TOBN(0xa5f94588, 0xbd475ca8), TOBN(0xe06b7966, 0xc077b80b),
+     TOBN(0xfedb1485, 0xda27c26c), TOBN(0xd290d33a, 0xfe0fd5e0),
+     TOBN(0xa40bcc47, 0xf34fb0fa), TOBN(0xb4760cc8, 0x1fb1ab09),
+     TOBN(0x8fca0993, 0xa273bfe3), TOBN(0x13e4fe07, 0xf70b213c),
+     TOBN(0x3bcdb992, 0xfdb05163), TOBN(0x8c484b11, 0x0c2b19b6),
+     TOBN(0x1acb815f, 0xaaf2e3e2), TOBN(0xc6905935, 0xb89ff1b4),
+     TOBN(0xb2ad6f9d, 0x586e74e1), TOBN(0x488883ad, 0x67b80484),
+     TOBN(0x758aa2c7, 0x369c3ddb), TOBN(0x8ab74e69, 0x9f9afd31),
+     TOBN(0x10fc2d28, 0x5e21beb1), TOBN(0x3484518a, 0x318c42f9),
+     TOBN(0x377427dc, 0x53cf40c3), TOBN(0x9de0781a, 0x391bc1d9),
+     TOBN(0x8faee858, 0x693807e1), TOBN(0xa3865327, 0x4e81ccc7),
+     TOBN(0x02c30ff2, 0x6f835b84), TOBN(0xb604437b, 0x0d3d38d4),
+     TOBN(0xb3fc8a98, 0x5ca1823d), TOBN(0xb82f7ec9, 0x03be0324),
+     TOBN(0xee36d761, 0xcf684a33), TOBN(0x5a01df0e, 0x9f29bf7d),
+     TOBN(0x686202f3, 0x1306583d), TOBN(0x05b10da0, 0x437c622e),
+     TOBN(0xbf9aaa0f, 0x076a7bc8), TOBN(0x25e94efb, 0x8f8f4e43),
+     TOBN(0x8a35c9b7, 0xfa3dc26d), TOBN(0xe0e5fb93, 0x96ff03c5),
+     TOBN(0xa77e3843, 0xebc394ce), TOBN(0xcede6595, 0x8361de60),
+     TOBN(0xd27c22f6, 0xa1993545), TOBN(0xab01cc36, 0x24d671ba),
+     TOBN(0x63fa2877, 0xa169c28e), TOBN(0x925ef904, 0x2eb08376),
+     TOBN(0x3b2fa3cf, 0x53aa0b32), TOBN(0xb27beb5b, 0x71c49d7a),
+     TOBN(0xb60e1834, 0xd105e27f), TOBN(0xd6089788, 0x4f68570d),
+     TOBN(0x23094ce0, 0xd6fbc2ac), TOBN(0x738037a1, 0x815ff551),
+     TOBN(0xda73b1bb, 0x6bef119c), TOBN(0xdcf6c430, 0xeef506ba),
+     TOBN(0x00e4fe7b, 0xe3ef104a), TOBN(0xebdd9a2c, 0x0a065628),
+     TOBN(0x853a81c3, 0x8792043e), TOBN(0x22ad6ece, 0xb3b59108),
+     TOBN(0x9fb813c0, 0x39cd297d), TOBN(0x8ec7e16e, 0x05bda5d9),
+     TOBN(0x2834797c, 0x0d104b96), TOBN(0xcc11a2e7, 0x7c511510),
+     TOBN(0x96ca5a53, 0x96ee6380), TOBN(0x054c8655, 0xcea38742),
+     TOBN(0xb5946852, 0xd54dfa7d), TOBN(0x97c422e7, 0x1f4ab207),
+     TOBN(0xbf907509, 0x0c22b540), TOBN(0x2cde42aa, 0xb7c267d4),
+     TOBN(0xba18f9ed, 0x5ab0d693), TOBN(0x3ba62aa6, 0x6e4660d9),
+     TOBN(0xb24bf97b, 0xab9ea96a), TOBN(0x5d039642, 0xe3b60e32),
+     TOBN(0x4e6a4506, 0x7c4d9bd5), TOBN(0x666c5b9e, 0x7ed4a6a4),
+     TOBN(0xfa3fdcd9, 0x8edbd7cc), TOBN(0x4660bb87, 0xc6ccd753),
+     TOBN(0x9ae90820, 0x21e6b64f), TOBN(0x8a56a713, 0xb36bfb3f),
+     TOBN(0xabfce096, 0x5726d47f), TOBN(0x9eed01b2, 0x0b1a9a7f),
+     TOBN(0x30e9cad4, 0x4eb74a37), TOBN(0x7b2524cc, 0x53e9666d),
+     TOBN(0x6a29683b, 0x8f4b002f), TOBN(0xc2200d7a, 0x41f4fc20),
+     TOBN(0xcf3af47a, 0x3a338acc), TOBN(0x6539a4fb, 0xe7128975),
+     TOBN(0xcec31c14, 0xc33c7fcf), TOBN(0x7eb6799b, 0xc7be322b),
+     TOBN(0x119ef4e9, 0x6646f623), TOBN(0x7b7a26a5, 0x54d7299b),
+     TOBN(0xcb37f08d, 0x403f46f2), TOBN(0x94b8fc43, 0x1a0ec0c7),
+     TOBN(0xbb8514e3, 0xc332142f), TOBN(0xf3ed2c33, 0xe80d2a7a),
+     TOBN(0x8d2080af, 0xb639126c), TOBN(0xf7b6be60, 0xe3553ade),
+     TOBN(0x3950aa9f, 0x1c7e2b09), TOBN(0x847ff958, 0x6410f02b),
+     TOBN(0x877b7cf5, 0x678a31b0), TOBN(0xd50301ae, 0x3998b620),
+     TOBN(0x734257c5, 0xc00fb396), TOBN(0xf9fb18a0, 0x04e672a6),
+     TOBN(0xff8bd8eb, 0xe8758851), TOBN(0x1e64e4c6, 0x5d99ba44),
+     TOBN(0x4b8eaedf, 0x7dfd93b7), TOBN(0xba2f2a98, 0x04e76b8c),
+     TOBN(0x7d790cba, 0xe8053433), TOBN(0xc8e725a0, 0x3d2c9585),
+     TOBN(0x58c5c476, 0xcdd8f5ed), TOBN(0xd106b952, 0xefa9fe1d),
+     TOBN(0x3c5c775b, 0x0eff13a9), TOBN(0x242442ba, 0xe057b930),
+     TOBN(0xe9f458d4, 0xc9b70cbd), TOBN(0x69b71448, 0xa3cdb89a),
+     TOBN(0x41ee46f6, 0x0e2ed742), TOBN(0x573f1045, 0x40067493),
+     TOBN(0xb1e154ff, 0x9d54c304), TOBN(0x2ad0436a, 0x8d3a7502),
+     TOBN(0xee4aaa2d, 0x431a8121), TOBN(0xcd38b3ab, 0x886f11ed),
+     TOBN(0x57d49ea6, 0x034a0eb7), TOBN(0xd2b773bd, 0xf7e85e58),
+     TOBN(0x4a559ac4, 0x9b5c1f14), TOBN(0xc444be1a, 0x3e54df2b),
+     TOBN(0x13aad704, 0xeda41891), TOBN(0xcd927bec, 0x5eb5c788),
+     TOBN(0xeb3c8516, 0xe48c8a34), TOBN(0x1b7ac812, 0x4b546669),
+     TOBN(0x1815f896, 0x594df8ec), TOBN(0x87c6a79c, 0x79227865),
+     TOBN(0xae02a2f0, 0x9b56ddbd), TOBN(0x1339b5ac, 0x8a2f1cf3),
+     TOBN(0xf2b569c7, 0x839dff0d), TOBN(0xb0b9e864, 0xfee9a43d),
+     TOBN(0x4ff8ca41, 0x77bb064e), TOBN(0x145a2812, 0xfd249f63),
+     TOBN(0x3ab7beac, 0xf86f689a), TOBN(0x9bafec27, 0x01d35f5e),
+     TOBN(0x28054c65, 0x4265aa91), TOBN(0xa4b18304, 0x035efe42),
+     TOBN(0x6887b0e6, 0x9639dec7), TOBN(0xf4b8f6ad, 0x3d52aea5),
+     TOBN(0xfb9293cc, 0x971a8a13), TOBN(0x3f159e5d, 0x4c934d07),
+     TOBN(0x2c50e9b1, 0x09acbc29), TOBN(0x08eb65e6, 0x7154d129),
+     TOBN(0x4feff589, 0x30b75c3e), TOBN(0x0bb82fe2, 0x94491c93),
+     TOBN(0xd8ac377a, 0x89af62bb), TOBN(0xd7b51490, 0x9685e49f),
+     TOBN(0xabca9a7b, 0x04497f19), TOBN(0x1b35ed0a, 0x1a7ad13f),
+     TOBN(0x6b601e21, 0x3ec86ed6), TOBN(0xda91fcb9, 0xce0c76f1),
+     TOBN(0x9e28507b, 0xd7ab27e1), TOBN(0x7c19a555, 0x63945b7b),
+     TOBN(0x6b43f0a1, 0xaafc9827), TOBN(0x443b4fbd, 0x3aa55b91),
+     TOBN(0x962b2e65, 0x6962c88f), TOBN(0x139da8d4, 0xce0db0ca),
+     TOBN(0xb93f05dd, 0x1b8d6c4f), TOBN(0x779cdff7, 0x180b9824),
+     TOBN(0xbba23fdd, 0xae57c7b7), TOBN(0x345342f2, 0x1b932522),
+     TOBN(0xfd9c80fe, 0x556d4aa3), TOBN(0xa03907ba, 0x6525bb61),
+     TOBN(0x38b010e1, 0xff218933), TOBN(0xc066b654, 0xaa52117b),
+     TOBN(0x8e141920, 0x94f2e6ea), TOBN(0x66a27dca, 0x0d32f2b2),
+     TOBN(0x69c7f993, 0x048b3717), TOBN(0xbf5a989a, 0xb178ae1c),
+     TOBN(0x49fa9058, 0x564f1d6b), TOBN(0x27ec6e15, 0xd31fde4e),
+     TOBN(0x4cce0373, 0x7276e7fc), TOBN(0x64086d79, 0x89d6bf02),
+     TOBN(0x5a72f046, 0x4ccdd979), TOBN(0x909c3566, 0x47775631),
+     TOBN(0x1c07bc6b, 0x75dd7125), TOBN(0xb4c6bc97, 0x87a0428d),
+     TOBN(0x507ece52, 0xfdeb6b9d), TOBN(0xfca56512, 0xb2c95432),
+     TOBN(0x15d97181, 0xd0e8bd06), TOBN(0x384dd317, 0xc6bb46ea),
+     TOBN(0x5441ea20, 0x3952b624), TOBN(0xbcf70dee, 0x4e7dc2fb),
+     TOBN(0x372b016e, 0x6628e8c3), TOBN(0x07a0d667, 0xb60a7522),
+     TOBN(0xcf05751b, 0x0a344ee2), TOBN(0x0ec09a48, 0x118bdeec),
+     TOBN(0x6e4b3d4e, 0xd83dce46), TOBN(0x43a6316d, 0x99d2fc6e),
+     TOBN(0xa99d8989, 0x56cf044c), TOBN(0x7c7f4454, 0xae3e5fb7),
+     TOBN(0xb2e6b121, 0xfbabbe92), TOBN(0x281850fb, 0xe1330076),
+     TOBN(0x093581ec, 0x97890015), TOBN(0x69b1dded, 0x75ff77f5),
+     TOBN(0x7cf0b18f, 0xab105105), TOBN(0x953ced31, 0xa89ccfef),
+     TOBN(0x3151f85f, 0xeb914009), TOBN(0x3c9f1b87, 0x88ed48ad),
+     TOBN(0xc9aba1a1, 0x4a7eadcb), TOBN(0x928e7501, 0x522e71cf),
+     TOBN(0xeaede727, 0x3a2e4f83), TOBN(0x467e10d1, 0x1ce3bbd3),
+     TOBN(0xf3442ac3, 0xb955dcf0), TOBN(0xba96307d, 0xd3d5e527),
+     TOBN(0xf763a10e, 0xfd77f474), TOBN(0x5d744bd0, 0x6a6e1ff0),
+     TOBN(0xd287282a, 0xa777899e), TOBN(0xe20eda8f, 0xd03f3cde),
+     TOBN(0x6a7e75bb, 0x50b07d31), TOBN(0x0b7e2a94, 0x6f379de4),
+     TOBN(0x31cb64ad, 0x19f593cf), TOBN(0x7b1a9e4f, 0x1e76ef1d),
+     TOBN(0xe18c9c9d, 0xb62d609c), TOBN(0x439bad6d, 0xe779a650),
+     TOBN(0x219d9066, 0xe032f144), TOBN(0x1db632b8, 0xe8b2ec6a),
+     TOBN(0xff0d0fd4, 0xfda12f78), TOBN(0x56fb4c2d, 0x2a25d265),
+     TOBN(0x5f4e2ee1, 0x255a03f1), TOBN(0x61cd6af2, 0xe96af176),
+     TOBN(0xe0317ba8, 0xd068bc97), TOBN(0x927d6bab, 0x264b988e),
+     TOBN(0xa18f07e0, 0xe90fb21e), TOBN(0x00fd2b80, 0xbba7fca1),
+     TOBN(0x20387f27, 0x95cd67b5), TOBN(0x5b89a4e7, 0xd39707f7),
+     TOBN(0x8f83ad3f, 0x894407ce), TOBN(0xa0025b94, 0x6c226132),
+     TOBN(0xc79563c7, 0xf906c13b), TOBN(0x5f548f31, 0x4e7bb025),
+     TOBN(0x2b4c6b8f, 0xeac6d113), TOBN(0xa67e3f9c, 0x0e813c76),
+     TOBN(0x3982717c, 0x3fe1f4b9), TOBN(0x58865819, 0x26d8050e),
+     TOBN(0x99f3640c, 0xf7f06f20), TOBN(0xdc610216, 0x2a66ebc2),
+     TOBN(0x52f2c175, 0x767a1e08), TOBN(0x05660e1a, 0x5999871b),
+     TOBN(0x6b0f1762, 0x6d3c4693), TOBN(0xf0e7d627, 0x37ed7bea),
+     TOBN(0xc51758c7, 0xb75b226d), TOBN(0x40a88628, 0x1f91613b),
+     TOBN(0x889dbaa7, 0xbbb38ce0), TOBN(0xe0404b65, 0xbddcad81),
+     TOBN(0xfebccd3a, 0x8bc9671f), TOBN(0xfbf9a357, 0xee1f5375),
+     TOBN(0x5dc169b0, 0x28f33398), TOBN(0xb07ec11d, 0x72e90f65),
+     TOBN(0xae7f3b4a, 0xfaab1eb1), TOBN(0xd970195e, 0x5f17538a),
+     TOBN(0x52b05cbe, 0x0181e640), TOBN(0xf5debd62, 0x2643313d),
+     TOBN(0x76148154, 0x5df31f82), TOBN(0x23e03b33, 0x3a9e13c5),
+     TOBN(0xff758949, 0x4fde0c1f), TOBN(0xbf8a1abe, 0xe5b6ec20),
+     TOBN(0x702278fb, 0x87e1db6c), TOBN(0xc447ad7a, 0x35ed658f),
+     TOBN(0x48d4aa38, 0x03d0ccf2), TOBN(0x80acb338, 0x819a7c03),
+     TOBN(0x9bc7c89e, 0x6e17cecc), TOBN(0x46736b8b, 0x03be1d82),
+     TOBN(0xd65d7b60, 0xc0432f96), TOBN(0xddebe7a3, 0xdeb5442f),
+     TOBN(0x79a25307, 0x7dff69a2), TOBN(0x37a56d94, 0x02cf3122),
+     TOBN(0x8bab8aed, 0xf2350d0a), TOBN(0x13c3f276, 0x037b0d9a),
+     TOBN(0xc664957c, 0x44c65cae), TOBN(0x88b44089, 0xc2e71a88),
+     TOBN(0xdb88e5a3, 0x5cb02664), TOBN(0x5d4c0bf1, 0x8686c72e),
+     TOBN(0xea3d9b62, 0xa682d53e), TOBN(0x9b605ef4, 0x0b2ad431),
+     TOBN(0x71bac202, 0xc69645d0), TOBN(0xa115f03a, 0x6a1b66e7),
+     TOBN(0xfe2c563a, 0x158f4dc4), TOBN(0xf715b3a0, 0x4d12a78c),
+     TOBN(0x8f7f0a48, 0xd413213a), TOBN(0x2035806d, 0xc04becdb),
+     TOBN(0xecd34a99, 0x5d8587f5), TOBN(0x4d8c3079, 0x9f6d3a71),
+     TOBN(0x1b2a2a67, 0x8d95a8f6), TOBN(0xc58c9d7d, 0xf2110d0d),
+     TOBN(0xdeee81d5, 0xcf8fba3f), TOBN(0xa42be3c0, 0x0c7cdf68),
+     TOBN(0x2126f742, 0xd43b5eaa), TOBN(0x054a0766, 0xdfa59b85),
+     TOBN(0x9d0d5e36, 0x126bfd45), TOBN(0xa1f8fbd7, 0x384f8a8f),
+     TOBN(0x317680f5, 0xd563fccc), TOBN(0x48ca5055, 0xf280a928),
+     TOBN(0xe00b81b2, 0x27b578cf), TOBN(0x10aad918, 0x2994a514),
+     TOBN(0xd9e07b62, 0xb7bdc953), TOBN(0x9f0f6ff2, 0x5bc086dd),
+     TOBN(0x09d1ccff, 0x655eee77), TOBN(0x45475f79, 0x5bef7df1),
+     TOBN(0x3faa28fa, 0x86f702cc), TOBN(0x92e60905, 0x0f021f07),
+     TOBN(0xe9e62968, 0x7f8fa8c6), TOBN(0xbd71419a, 0xf036ea2c),
+     TOBN(0x171ee1cc, 0x6028da9a), TOBN(0x5352fe1a, 0xc251f573),
+     TOBN(0xf8ff236e, 0x3fa997f4), TOBN(0xd831b6c9, 0xa5749d5f),
+     TOBN(0x7c872e1d, 0xe350e2c2), TOBN(0xc56240d9, 0x1e0ce403),
+     TOBN(0xf9deb077, 0x6974f5cb), TOBN(0x7d50ba87, 0x961c3728),
+     TOBN(0xd6f89426, 0x5a3a2518), TOBN(0xcf817799, 0xc6303d43),
+     TOBN(0x510a0471, 0x619e5696), TOBN(0xab049ff6, 0x3a5e307b),
+     TOBN(0xe4cdf9b0, 0xfeb13ec7), TOBN(0xd5e97117, 0x9d8ff90c),
+     TOBN(0xf6f64d06, 0x9afa96af), TOBN(0x00d0bf5e, 0x9d2012a2),
+     TOBN(0xe63f301f, 0x358bcdc0), TOBN(0x07689e99, 0x0a9d47f8),
+     TOBN(0x1f689e2f, 0x4f43d43a), TOBN(0x4d542a16, 0x90920904),
+     TOBN(0xaea293d5, 0x9ca0a707), TOBN(0xd061fe45, 0x8ac68065),
+     TOBN(0x1033bf1b, 0x0090008c), TOBN(0x29749558, 0xc08a6db6),
+     TOBN(0x74b5fc59, 0xc1d5d034), TOBN(0xf712e9f6, 0x67e215e0),
+     TOBN(0xfd520cbd, 0x860200e6), TOBN(0x0229acb4, 0x3ea22588),
+     TOBN(0x9cd1e14c, 0xfff0c82e), TOBN(0x87684b62, 0x59c69e73),
+     TOBN(0xda85e61c, 0x96ccb989), TOBN(0x2d5dbb02, 0xa3d06493),
+     TOBN(0xf22ad33a, 0xe86b173c), TOBN(0xe8e41ea5, 0xa79ff0e3),
+     TOBN(0x01d2d725, 0xdd0d0c10), TOBN(0x31f39088, 0x032d28f9),
+     TOBN(0x7b3f71e1, 0x7829839e), TOBN(0x0cf691b4, 0x4502ae58),
+     TOBN(0xef658dbd, 0xbefc6115), TOBN(0xa5cd6ee5, 0xb3ab5314),
+     TOBN(0x206c8d7b, 0x5f1d2347), TOBN(0x794645ba, 0x4cc2253a),
+     TOBN(0xd517d8ff, 0x58389e08), TOBN(0x4fa20dee, 0x9f847288),
+     TOBN(0xeba072d8, 0xd797770a), TOBN(0x7360c91d, 0xbf429e26),
+     TOBN(0x7200a3b3, 0x80af8279), TOBN(0x6a1c9150, 0x82dadce3),
+     TOBN(0x0ee6d3a7, 0xc35d8794), TOBN(0x042e6558, 0x0356bae5),
+     TOBN(0x9f59698d, 0x643322fd), TOBN(0x9379ae15, 0x50a61967),
+     TOBN(0x64b9ae62, 0xfcc9981e), TOBN(0xaed3d631, 0x6d2934c6),
+     TOBN(0x2454b302, 0x5e4e65eb), TOBN(0xab09f647, 0xf9950428)}
+    ,
+    {TOBN(0xb2083a12, 0x22248acc), TOBN(0x1f6ec0ef, 0x3264e366),
+     TOBN(0x5659b704, 0x5afdee28), TOBN(0x7a823a40, 0xe6430bb5),
+     TOBN(0x24592a04, 0xe1900a79), TOBN(0xcde09d4a, 0xc9ee6576),
+     TOBN(0x52b6463f, 0x4b5ea54a), TOBN(0x1efe9ed3, 0xd3ca65a7),
+     TOBN(0xe27a6dbe, 0x305406dd), TOBN(0x8eb7dc7f, 0xdd5d1957),
+     TOBN(0xf54a6876, 0x387d4d8f), TOBN(0x9c479409, 0xc7762de4),
+     TOBN(0xbe4d5b5d, 0x99b30778), TOBN(0x25380c56, 0x6e793682),
+     TOBN(0x602d37f3, 0xdac740e3), TOBN(0x140deabe, 0x1566e4ae),
+     TOBN(0x4481d067, 0xafd32acf), TOBN(0xd8f0fcca, 0xe1f71ccf),
+     TOBN(0xd208dd0c, 0xb596f2da), TOBN(0xd049d730, 0x9aad93f9),
+     TOBN(0xc79f263d, 0x42ab580e), TOBN(0x09411bb1, 0x23f707b4),
+     TOBN(0x8cfde1ff, 0x835e0eda), TOBN(0x72707490, 0x90f03402),
+     TOBN(0xeaee6126, 0xc49a861e), TOBN(0x024f3b65, 0xe14f0d06),
+     TOBN(0x51a3f1e8, 0xc69bfc17), TOBN(0xc3c3a8e9, 0xa7686381),
+     TOBN(0x3400752c, 0xb103d4c8), TOBN(0x02bc4613, 0x9218b36b),
+     TOBN(0xc67f75eb, 0x7651504a), TOBN(0xd6848b56, 0xd02aebfa),
+     TOBN(0xbd9802e6, 0xc30fa92b), TOBN(0x5a70d96d, 0x9a552784),
+     TOBN(0x9085c4ea, 0x3f83169b), TOBN(0xfa9423bb, 0x06908228),
+     TOBN(0x2ffebe12, 0xfe97a5b9), TOBN(0x85da6049, 0x71b99118),
+     TOBN(0x9cbc2f7f, 0x63178846), TOBN(0xfd96bc70, 0x9153218e),
+     TOBN(0x958381db, 0x1782269b), TOBN(0xae34bf79, 0x2597e550),
+     TOBN(0xbb5c6064, 0x5f385153), TOBN(0x6f0e96af, 0xe3088048),
+     TOBN(0xbf6a0215, 0x77884456), TOBN(0xb3b5688c, 0x69310ea7),
+     TOBN(0x17c94295, 0x04fad2de), TOBN(0xe020f0e5, 0x17896d4d),
+     TOBN(0x730ba0ab, 0x0976505f), TOBN(0x567f6813, 0x095e2ec5),
+     TOBN(0x47062010, 0x6331ab71), TOBN(0x72cfa977, 0x41d22b9f),
+     TOBN(0x33e55ead, 0x8a2373da), TOBN(0xa8d0d5f4, 0x7ba45a68),
+     TOBN(0xba1d8f9c, 0x03029d15), TOBN(0x8f34f1cc, 0xfc55b9f3),
+     TOBN(0xcca4428d, 0xbbe5a1a9), TOBN(0x8187fd5f, 0x3126bd67),
+     TOBN(0x0036973a, 0x48105826), TOBN(0xa39b6663, 0xb8bd61a0),
+     TOBN(0x6d42deef, 0x2d65a808), TOBN(0x4969044f, 0x94636b19),
+     TOBN(0xf611ee47, 0xdd5d564c), TOBN(0x7b2f3a49, 0xd2873077),
+     TOBN(0x94157d45, 0x300eb294), TOBN(0x2b2a656e, 0x169c1494),
+     TOBN(0xc000dd76, 0xd3a47aa9), TOBN(0xa2864e4f, 0xa6243ea4),
+     TOBN(0x82716c47, 0xdb89842e), TOBN(0x12dfd7d7, 0x61479fb7),
+     TOBN(0x3b9a2c56, 0xe0b2f6dc), TOBN(0x46be862a, 0xd7f85d67),
+     TOBN(0x03b0d8dd, 0x0f82b214), TOBN(0x460c34f9, 0xf103cbc6),
+     TOBN(0xf32e5c03, 0x18d79e19), TOBN(0x8b8888ba, 0xa84117f8),
+     TOBN(0x8f3c37dc, 0xc0722677), TOBN(0x10d21be9, 0x1c1c0f27),
+     TOBN(0xd47c8468, 0xe0f7a0c6), TOBN(0x9bf02213, 0xadecc0e0),
+     TOBN(0x0baa7d12, 0x42b48b99), TOBN(0x1bcb665d, 0x48424096),
+     TOBN(0x8b847cd6, 0xebfb5cfb), TOBN(0x87c2ae56, 0x9ad4d10d),
+     TOBN(0xf1cbb122, 0x0de36726), TOBN(0xe7043c68, 0x3fdfbd21),
+     TOBN(0x4bd0826a, 0x4e79d460), TOBN(0x11f5e598, 0x4bd1a2cb),
+     TOBN(0x97554160, 0xb7fe7b6e), TOBN(0x7d16189a, 0x400a3fb2),
+     TOBN(0xd73e9bea, 0xe328ca1e), TOBN(0x0dd04b97, 0xe793d8cc),
+     TOBN(0xa9c83c9b, 0x506db8cc), TOBN(0x5cd47aae, 0xcf38814c),
+     TOBN(0x26fc430d, 0xb64b45e6), TOBN(0x079b5499, 0xd818ea84),
+     TOBN(0xebb01102, 0xc1c24a3b), TOBN(0xca24e568, 0x1c161c1a),
+     TOBN(0x103eea69, 0x36f00a4a), TOBN(0x9ad76ee8, 0x76176c7b),
+     TOBN(0x97451fc2, 0x538e0ff7), TOBN(0x94f89809, 0x6604b3b0),
+     TOBN(0x6311436e, 0x3249cfd7), TOBN(0x27b4a7bd, 0x41224f69),
+     TOBN(0x03b5d21a, 0xe0ac2941), TOBN(0x279b0254, 0xc2d31937),
+     TOBN(0x3307c052, 0xcac992d0), TOBN(0x6aa7cb92, 0xefa8b1f3),
+     TOBN(0x5a182580, 0x0d37c7a5), TOBN(0x13380c37, 0x342d5422),
+     TOBN(0x92ac2d66, 0xd5d2ef92), TOBN(0x035a70c9, 0x030c63c6),
+     TOBN(0xc16025dd, 0x4ce4f152), TOBN(0x1f419a71, 0xf9df7c06),
+     TOBN(0x6d5b2214, 0x91e4bb14), TOBN(0xfc43c6cc, 0x839fb4ce),
+     TOBN(0x49f06591, 0x925d6b2d), TOBN(0x4b37d9d3, 0x62186598),
+     TOBN(0x8c54a971, 0xd01b1629), TOBN(0xe1a9c29f, 0x51d50e05),
+     TOBN(0x5109b785, 0x71ba1861), TOBN(0x48b22d5c, 0xd0c8f93d),
+     TOBN(0xe8fa84a7, 0x8633bb93), TOBN(0x53fba6ba, 0x5aebbd08),
+     TOBN(0x7ff27df3, 0xe5eea7d8), TOBN(0x521c8796, 0x68ca7158),
+     TOBN(0xb9d5133b, 0xce6f1a05), TOBN(0x2d50cd53, 0xfd0ebee4),
+     TOBN(0xc82115d6, 0xc5a3ef16), TOBN(0x993eff9d, 0xba079221),
+     TOBN(0xe4da2c5e, 0x4b5da81c), TOBN(0x9a89dbdb, 0x8033fd85),
+     TOBN(0x60819ebf, 0x2b892891), TOBN(0x53902b21, 0x5d14a4d5),
+     TOBN(0x6ac35051, 0xd7fda421), TOBN(0xcc6ab885, 0x61c83284),
+     TOBN(0x14eba133, 0xf74cff17), TOBN(0x240aaa03, 0xecb813f2),
+     TOBN(0xcfbb6540, 0x6f665bee), TOBN(0x084b1fe4, 0xa425ad73),
+     TOBN(0x009d5d16, 0xd081f6a6), TOBN(0x35304fe8, 0xeef82c90),
+     TOBN(0xf20346d5, 0xaa9eaa22), TOBN(0x0ada9f07, 0xac1c91e3),
+     TOBN(0xa6e21678, 0x968a6144), TOBN(0x54c1f77c, 0x07b31a1e),
+     TOBN(0xd6bb787e, 0x5781fbe1), TOBN(0x61bd2ee0, 0xe31f1c4a),
+     TOBN(0xf25aa1e9, 0x781105fc), TOBN(0x9cf2971f, 0x7b2f8e80),
+     TOBN(0x26d15412, 0xcdff919b), TOBN(0x01db4ebe, 0x34bc896e),
+     TOBN(0x7d9b3e23, 0xb40df1cf), TOBN(0x59337373, 0x94e971b4),
+     TOBN(0xbf57bd14, 0x669cf921), TOBN(0x865daedf, 0x0c1a1064),
+     TOBN(0x3eb70bd3, 0x83279125), TOBN(0xbc3d5b9f, 0x34ecdaab),
+     TOBN(0x91e3ed7e, 0x5f755caf), TOBN(0x49699f54, 0xd41e6f02),
+     TOBN(0x185770e1, 0xd4a7a15b), TOBN(0x08f3587a, 0xeaac87e7),
+     TOBN(0x352018db, 0x473133ea), TOBN(0x674ce719, 0x04fd30fc),
+     TOBN(0x7b8d9835, 0x088b3e0e), TOBN(0x7a0356a9, 0x5d0d47a1),
+     TOBN(0x9d9e7659, 0x6474a3c4), TOBN(0x61ea48a7, 0xff66966c),
+     TOBN(0x30417758, 0x0f3e4834), TOBN(0xfdbb21c2, 0x17a9afcb),
+     TOBN(0x756fa17f, 0x2f9a67b3), TOBN(0x2a6b2421, 0xa245c1a8),
+     TOBN(0x64be2794, 0x4af02291), TOBN(0xade465c6, 0x2a5804fe),
+     TOBN(0x8dffbd39, 0xa6f08fd7), TOBN(0xc4efa84c, 0xaa14403b),
+     TOBN(0xa1b91b2a, 0x442b0f5c), TOBN(0xb748e317, 0xcf997736),
+     TOBN(0x8d1b62bf, 0xcee90e16), TOBN(0x907ae271, 0x0b2078c0),
+     TOBN(0xdf31534b, 0x0c9bcddd), TOBN(0x043fb054, 0x39adce83),
+     TOBN(0x99031043, 0xd826846a), TOBN(0x61a9c0d6, 0xb144f393),
+     TOBN(0xdab48046, 0x47718427), TOBN(0xdf17ff9b, 0x6e830f8b),
+     TOBN(0x408d7ee8, 0xe49a1347), TOBN(0x6ac71e23, 0x91c1d4ae),
+     TOBN(0xc8cbb9fd, 0x1defd73c), TOBN(0x19840657, 0xbbbbfec5),
+     TOBN(0x39db1cb5, 0x9e7ef8ea), TOBN(0x78aa8296, 0x64105f30),
+     TOBN(0xa3d9b7f0, 0xa3738c29), TOBN(0x0a2f235a, 0xbc3250a3),
+     TOBN(0x55e506f6, 0x445e4caf), TOBN(0x0974f73d, 0x33475f7a),
+     TOBN(0xd37dbba3, 0x5ba2f5a8), TOBN(0x542c6e63, 0x6af40066),
+     TOBN(0x26d99b53, 0xc5d73e2c), TOBN(0x06060d7d, 0x6c3ca33e),
+     TOBN(0xcdbef1c2, 0x065fef4a), TOBN(0x77e60f7d, 0xfd5b92e3),
+     TOBN(0xd7c549f0, 0x26708350), TOBN(0x201b3ad0, 0x34f121bf),
+     TOBN(0x5fcac2a1, 0x0334fc14), TOBN(0x8a9a9e09, 0x344552f6),
+     TOBN(0x7dd8a1d3, 0x97653082), TOBN(0x5fc0738f, 0x79d4f289),
+     TOBN(0x787d244d, 0x17d2d8c3), TOBN(0xeffc6345, 0x70830684),
+     TOBN(0x5ddb96dd, 0xe4f73ae5), TOBN(0x8efb14b1, 0x172549a5),
+     TOBN(0x6eb73eee, 0x2245ae7a), TOBN(0xbca4061e, 0xea11f13e),
+     TOBN(0xb577421d, 0x30b01f5d), TOBN(0xaa688b24, 0x782e152c),
+     TOBN(0x67608e71, 0xbd3502ba), TOBN(0x4ef41f24, 0xb4de75a0),
+     TOBN(0xb08dde5e, 0xfd6125e5), TOBN(0xde484825, 0xa409543f),
+     TOBN(0x1f198d98, 0x65cc2295), TOBN(0x428a3771, 0x6e0edfa2),
+     TOBN(0x4f9697a2, 0xadf35fc7), TOBN(0x01a43c79, 0xf7cac3c7),
+     TOBN(0xb05d7059, 0x0fd3659a), TOBN(0x8927f30c, 0xbb7f2d9a),
+     TOBN(0x4023d1ac, 0x8cf984d3), TOBN(0x32125ed3, 0x02897a45),
+     TOBN(0xfb572dad, 0x3d414205), TOBN(0x73000ef2, 0xe3fa82a9),
+     TOBN(0x4c0868e9, 0xf10a5581), TOBN(0x5b61fc67, 0x6b0b3ca5),
+     TOBN(0xc1258d5b, 0x7cae440c), TOBN(0x21c08b41, 0x402b7531),
+     TOBN(0xf61a8955, 0xde932321), TOBN(0x3568faf8, 0x2d1408af),
+     TOBN(0x71b15e99, 0x9ecf965b), TOBN(0xf14ed248, 0xe917276f),
+     TOBN(0xc6f4caa1, 0x820cf9e2), TOBN(0x681b20b2, 0x18d83c7e),
+     TOBN(0x6cde738d, 0xc6c01120), TOBN(0x71db0813, 0xae70e0db),
+     TOBN(0x95fc0644, 0x74afe18c), TOBN(0x34619053, 0x129e2be7),
+     TOBN(0x80615cea, 0xdb2a3b15), TOBN(0x0a49a19e, 0xdb4c7073),
+     TOBN(0x0e1b84c8, 0x8fd2d367), TOBN(0xd74bf462, 0x033fb8aa),
+     TOBN(0x889f6d65, 0x533ef217), TOBN(0x7158c7e4, 0xc3ca2e87),
+     TOBN(0xfb670dfb, 0xdc2b4167), TOBN(0x75910a01, 0x844c257f),
+     TOBN(0xf336bf07, 0xcf88577d), TOBN(0x22245250, 0xe45e2ace),
+     TOBN(0x2ed92e8d, 0x7ca23d85), TOBN(0x29f8be4c, 0x2b812f58),
+     TOBN(0xdd9ebaa7, 0x076fe12b), TOBN(0x3f2400cb, 0xae1537f9),
+     TOBN(0x1aa93528, 0x17bdfb46), TOBN(0xc0f98430, 0x67883b41),
+     TOBN(0x5590ede1, 0x0170911d), TOBN(0x7562f5bb, 0x34d4b17f),
+     TOBN(0xe1fa1df2, 0x1826b8d2), TOBN(0xb40b796a, 0x6bd80d59),
+     TOBN(0xd65bf197, 0x3467ba92), TOBN(0x8c9b46db, 0xf70954b0),
+     TOBN(0x97c8a0f3, 0x0e78f15d), TOBN(0xa8f3a69a, 0x85a4c961),
+     TOBN(0x4242660f, 0x61e4ce9b), TOBN(0xbf06aab3, 0x6ea6790c),
+     TOBN(0xc6706f8e, 0xec986416), TOBN(0x9e56dec1, 0x9a9fc225),
+     TOBN(0x527c46f4, 0x9a9898d9), TOBN(0xd799e77b, 0x5633cdef),
+     TOBN(0x24eacc16, 0x7d9e4297), TOBN(0xabb61cea, 0x6b1cb734),
+     TOBN(0xbee2e8a7, 0xf778443c), TOBN(0x3bb42bf1, 0x29de2fe6),
+     TOBN(0xcbed86a1, 0x3003bb6f), TOBN(0xd3918e6c, 0xd781cdf6),
+     TOBN(0x4bee3271, 0x9a5103f1), TOBN(0x5243efc6, 0xf50eac06),
+     TOBN(0xb8e122cb, 0x6adcc119), TOBN(0x1b7faa84, 0xc0b80a08),
+     TOBN(0x32c3d1bd, 0x6dfcd08c), TOBN(0x129dec4e, 0x0be427de),
+     TOBN(0x98ab679c, 0x1d263c83), TOBN(0xafc83cb7, 0xcef64eff),
+     TOBN(0x85eb6088, 0x2fa6be76), TOBN(0x892585fb, 0x1328cbfe),
+     TOBN(0xc154d3ed, 0xcf618dda), TOBN(0xc44f601b, 0x3abaf26e),
+     TOBN(0x7bf57d0b, 0x2be1fdfd), TOBN(0xa833bd2d, 0x21137fee),
+     TOBN(0x9353af36, 0x2db591a8), TOBN(0xc76f26dc, 0x5562a056),
+     TOBN(0x1d87e47d, 0x3fdf5a51), TOBN(0x7afb5f93, 0x55c9cab0),
+     TOBN(0x91bbf58f, 0x89e0586e), TOBN(0x7c72c018, 0x0d843709),
+     TOBN(0xa9a5aafb, 0x99b5c3dc), TOBN(0xa48a0f1d, 0x3844aeb0),
+     TOBN(0x7178b7dd, 0xb667e482), TOBN(0x453985e9, 0x6e23a59a),
+     TOBN(0x4a54c860, 0x01b25dd8), TOBN(0x0dd37f48, 0xfb897c8a),
+     TOBN(0x5f8aa610, 0x0ea90cd9), TOBN(0xc8892c68, 0x16d5830d),
+     TOBN(0xeb4befc0, 0xef514ca5), TOBN(0x478eb679, 0xe72c9ee6),
+     TOBN(0x9bca20da, 0xdbc40d5f), TOBN(0xf015de21, 0xdde4f64a),
+     TOBN(0xaa6a4de0, 0xeaf4b8a5), TOBN(0x68cfd9ca, 0x4bc60e32),
+     TOBN(0x668a4b01, 0x7fd15e70), TOBN(0xd9f0694a, 0xf27dc09d),
+     TOBN(0xf6c3cad5, 0xba708bcd), TOBN(0x5cd2ba69, 0x5bb95c2a),
+     TOBN(0xaa28c1d3, 0x33c0a58f), TOBN(0x23e274e3, 0xabc77870),
+     TOBN(0x44c3692d, 0xdfd20a4a), TOBN(0x091c5fd3, 0x81a66653),
+     TOBN(0x6c0bb691, 0x09a0757d), TOBN(0x9072e8b9, 0x667343ea),
+     TOBN(0x31d40eb0, 0x80848bec), TOBN(0x95bd480a, 0x79fd36cc),
+     TOBN(0x01a77c61, 0x65ed43f5), TOBN(0xafccd127, 0x2e0d40bf),
+     TOBN(0xeccfc82d, 0x1cc1884b), TOBN(0xc85ac201, 0x5d4753b4),
+     TOBN(0xc7a6caac, 0x658e099f), TOBN(0xcf46369e, 0x04b27390),
+     TOBN(0xe2e7d049, 0x506467ea), TOBN(0x481b63a2, 0x37cdeccc),
+     TOBN(0x4029abd8, 0xed80143a), TOBN(0x28bfe3c7, 0xbcb00b88),
+     TOBN(0x3bec1009, 0x0643d84a), TOBN(0x885f3668, 0xabd11041),
+     TOBN(0xdb02432c, 0xf83a34d6), TOBN(0x32f7b360, 0x719ceebe),
+     TOBN(0xf06c7837, 0xdad1fe7a), TOBN(0x60a157a9, 0x5441a0b0),
+     TOBN(0x704970e9, 0xe2d47550), TOBN(0xcd2bd553, 0x271b9020),
+     TOBN(0xff57f82f, 0x33e24a0b), TOBN(0x9cbee23f, 0xf2565079),
+     TOBN(0x16353427, 0xeb5f5825), TOBN(0x276feec4, 0xe948d662),
+     TOBN(0xd1b62bc6, 0xda10032b), TOBN(0x718351dd, 0xf0e72a53),
+     TOBN(0x93452076, 0x2420e7ba), TOBN(0x96368fff, 0x3a00118d),
+     TOBN(0x00ce2d26, 0x150a49e4), TOBN(0x0c28b636, 0x3f04706b),
+     TOBN(0xbad65a46, 0x58b196d0), TOBN(0x6c8455fc, 0xec9f8b7c),
+     TOBN(0xe90c895f, 0x2d71867e), TOBN(0x5c0be31b, 0xedf9f38c),
+     TOBN(0x2a37a15e, 0xd8f6ec04), TOBN(0x239639e7, 0x8cd85251),
+     TOBN(0xd8975315, 0x9c7c4c6b), TOBN(0x603aa3c0, 0xd7409af7),
+     TOBN(0xb8d53d0c, 0x007132fb), TOBN(0x68d12af7, 0xa6849238),
+     TOBN(0xbe0607e7, 0xbf5d9279), TOBN(0x9aa50055, 0xaada74ce),
+     TOBN(0xe81079cb, 0xba7e8ccb), TOBN(0x610c71d1, 0xa5f4ff5e),
+     TOBN(0x9e2ee1a7, 0x5aa07093), TOBN(0xca84004b, 0xa75da47c),
+     TOBN(0x074d3951, 0x3de75401), TOBN(0xf938f756, 0xbb311592),
+     TOBN(0x96197618, 0x00a43421), TOBN(0x39a25362, 0x07bc78c8),
+     TOBN(0x278f710a, 0x0a171276), TOBN(0xb28446ea, 0x8d1a8f08),
+     TOBN(0x184781bf, 0xe3b6a661), TOBN(0x7751cb1d, 0xe6d279f7),
+     TOBN(0xf8ff95d6, 0xc59eb662), TOBN(0x186d90b7, 0x58d3dea7),
+     TOBN(0x0e4bb6c1, 0xdfb4f754), TOBN(0x5c5cf56b, 0x2b2801dc),
+     TOBN(0xc561e452, 0x1f54564d), TOBN(0xb4fb8c60, 0xf0dd7f13),
+     TOBN(0xf8849630, 0x33ff98c7), TOBN(0x9619fffa, 0xcf17769c),
+     TOBN(0xf8090bf6, 0x1bfdd80a), TOBN(0x14d9a149, 0x422cfe63),
+     TOBN(0xb354c360, 0x6f6df9ea), TOBN(0xdbcf770d, 0x218f17ea),
+     TOBN(0x207db7c8, 0x79eb3480), TOBN(0x213dbda8, 0x559b6a26),
+     TOBN(0xac4c200b, 0x29fc81b3), TOBN(0xebc3e09f, 0x171d87c1),
+     TOBN(0x91799530, 0x1481aa9e), TOBN(0x051b92e1, 0x92e114fa),
+     TOBN(0xdf8f92e9, 0xecb5537f), TOBN(0x44b1b2cc, 0x290c7483),
+     TOBN(0xa711455a, 0x2adeb016), TOBN(0x964b6856, 0x81a10c2c),
+     TOBN(0x4f159d99, 0xcec03623), TOBN(0x05532225, 0xef3271ea),
+     TOBN(0xb231bea3, 0xc5ee4849), TOBN(0x57a54f50, 0x7094f103),
+     TOBN(0x3e2d421d, 0x9598b352), TOBN(0xe865a49c, 0x67412ab4),
+     TOBN(0xd2998a25, 0x1cc3a912), TOBN(0x5d092808, 0x0c74d65d),
+     TOBN(0x73f45908, 0x4088567a), TOBN(0xeb6b280e, 0x1f214a61),
+     TOBN(0x8c9adc34, 0xcaf0c13d), TOBN(0x39d12938, 0xf561fb80),
+     TOBN(0xb2dc3a5e, 0xbc6edfb4), TOBN(0x7485b1b1, 0xfe4d210e),
+     TOBN(0x062e0400, 0xe186ae72), TOBN(0x91e32d5c, 0x6eeb3b88),
+     TOBN(0x6df574d7, 0x4be59224), TOBN(0xebc88ccc, 0x716d55f3),
+     TOBN(0x26c2e6d0, 0xcad6ed33), TOBN(0xc6e21e7d, 0x0d3e8b10),
+     TOBN(0x2cc5840e, 0x5bcc36bb), TOBN(0x9292445e, 0x7da74f69),
+     TOBN(0x8be8d321, 0x4e5193a8), TOBN(0x3ec23629, 0x8df06413),
+     TOBN(0xc7e9ae85, 0xb134defa), TOBN(0x6073b1d0, 0x1bb2d475),
+     TOBN(0xb9ad615e, 0x2863c00d), TOBN(0x9e29493d, 0x525f4ac4),
+     TOBN(0xc32b1dea, 0x4e9acf4f), TOBN(0x3e1f01c8, 0xa50db88d),
+     TOBN(0xb05d70ea, 0x04da916c), TOBN(0x714b0d0a, 0xd865803e),
+     TOBN(0x4bd493fc, 0x9920cb5e), TOBN(0x5b44b1f7, 0x92c7a3ac),
+     TOBN(0xa2a77293, 0xbcec9235), TOBN(0x5ee06e87, 0xcd378553),
+     TOBN(0xceff8173, 0xda621607), TOBN(0x2bb03e4c, 0x99f5d290),
+     TOBN(0x2945106a, 0xa6f734ac), TOBN(0xb5056604, 0xd25c4732),
+     TOBN(0x5945920c, 0xe079afee), TOBN(0x686e17a0, 0x6789831f),
+     TOBN(0x5966bee8, 0xb74a5ae5), TOBN(0x38a673a2, 0x1e258d46),
+     TOBN(0xbd1cc1f2, 0x83141c95), TOBN(0x3b2ecf4f, 0x0e96e486),
+     TOBN(0xcd3aa896, 0x74e5fc78), TOBN(0x415ec10c, 0x2482fa7a),
+     TOBN(0x15234419, 0x80503380), TOBN(0x513d917a, 0xd314b392),
+     TOBN(0xb0b52f4e, 0x63caecae), TOBN(0x07bf22ad, 0x2dc7780b),
+     TOBN(0xe761e8a1, 0xe4306839), TOBN(0x1b3be962, 0x5dd7feaa),
+     TOBN(0x4fe728de, 0x74c778f1), TOBN(0xf1fa0bda, 0x5e0070f6),
+     TOBN(0x85205a31, 0x6ec3f510), TOBN(0x2c7e4a14, 0xd2980475),
+     TOBN(0xde3c19c0, 0x6f30ebfd), TOBN(0xdb1c1f38, 0xd4b7e644),
+     TOBN(0xfe291a75, 0x5dce364a), TOBN(0xb7b22a3c, 0x058f5be3),
+     TOBN(0x2cd2c302, 0x37fea38c), TOBN(0x2930967a, 0x2e17be17),
+     TOBN(0x87f009de, 0x0c061c65), TOBN(0xcb014aac, 0xedc6ed44),
+     TOBN(0x49bd1cb4, 0x3bafb1eb), TOBN(0x81bd8b5c, 0x282d3688),
+     TOBN(0x1cdab87e, 0xf01a17af), TOBN(0x21f37ac4, 0xe710063b),
+     TOBN(0x5a6c5676, 0x42fc8193), TOBN(0xf4753e70, 0x56a6015c),
+     TOBN(0x020f795e, 0xa15b0a44), TOBN(0x8f37c8d7, 0x8958a958),
+     TOBN(0x63b7e89b, 0xa4b675b5), TOBN(0xb4fb0c0c, 0x0fc31aea),
+     TOBN(0xed95e639, 0xa7ff1f2e), TOBN(0x9880f5a3, 0x619614fb),
+     TOBN(0xdeb6ff02, 0x947151ab), TOBN(0x5bc5118c, 0xa868dcdb),
+     TOBN(0xd8da2055, 0x4c20cea5), TOBN(0xcac2776e, 0x14c4d69a),
+     TOBN(0xcccb22c1, 0x622d599b), TOBN(0xa4ddb653, 0x68a9bb50),
+     TOBN(0x2c4ff151, 0x1b4941b4), TOBN(0xe1ff19b4, 0x6efba588),
+     TOBN(0x35034363, 0xc48345e0), TOBN(0x45542e3d, 0x1e29dfc4),
+     TOBN(0xf197cb91, 0x349f7aed), TOBN(0x3b2b5a00, 0x8fca8420),
+     TOBN(0x7c175ee8, 0x23aaf6d8), TOBN(0x54dcf421, 0x35af32b6),
+     TOBN(0x0ba14307, 0x27d6561e), TOBN(0x879d5ee4, 0xd175b1e2),
+     TOBN(0xc7c43673, 0x99807db5), TOBN(0x77a54455, 0x9cd55bcd),
+     TOBN(0xe6c2ff13, 0x0105c072), TOBN(0x18f7a99f, 0x8dda7da4),
+     TOBN(0x4c301820, 0x0e2d35c1), TOBN(0x06a53ca0, 0xd9cc6c82),
+     TOBN(0xaa21cc1e, 0xf1aa1d9e), TOBN(0x32414334, 0x4a75b1e8),
+     TOBN(0x2a6d1328, 0x0ebe9fdc), TOBN(0x16bd173f, 0x98a4755a),
+     TOBN(0xfbb9b245, 0x2133ffd9), TOBN(0x39a8b2f1, 0x830f1a20),
+     TOBN(0x484bc97d, 0xd5a1f52a), TOBN(0xd6aebf56, 0xa40eddf8),
+     TOBN(0x32257acb, 0x76ccdac6), TOBN(0xaf4d36ec, 0x1586ff27),
+     TOBN(0x8eaa8863, 0xf8de7dd1), TOBN(0x0045d5cf, 0x88647c16)}
+    ,
+    {TOBN(0xa6f3d574, 0xc005979d), TOBN(0xc2072b42, 0x6a40e350),
+     TOBN(0xfca5c156, 0x8de2ecf9), TOBN(0xa8c8bf5b, 0xa515344e),
+     TOBN(0x97aee555, 0x114df14a), TOBN(0xd4374a4d, 0xfdc5ec6b),
+     TOBN(0x754cc28f, 0x2ca85418), TOBN(0x71cb9e27, 0xd3c41f78),
+     TOBN(0x89105079, 0x03605c39), TOBN(0xf0843d9e, 0xa142c96c),
+     TOBN(0xf3744934, 0x16923684), TOBN(0x732caa2f, 0xfa0a2893),
+     TOBN(0xb2e8c270, 0x61160170), TOBN(0xc32788cc, 0x437fbaa3),
+     TOBN(0x39cd818e, 0xa6eda3ac), TOBN(0xe2e94239, 0x9e2b2e07),
+     TOBN(0x6967d39b, 0x0260e52a), TOBN(0xd42585cc, 0x90653325),
+     TOBN(0x0d9bd605, 0x21ca7954), TOBN(0x4fa20877, 0x81ed57b3),
+     TOBN(0x60c1eff8, 0xe34a0bbe), TOBN(0x56b0040c, 0x84f6ef64),
+     TOBN(0x28be2b24, 0xb1af8483), TOBN(0xb2278163, 0xf5531614),
+     TOBN(0x8df27545, 0x5922ac1c), TOBN(0xa7b3ef5c, 0xa52b3f63),
+     TOBN(0x8e77b214, 0x71de57c4), TOBN(0x31682c10, 0x834c008b),
+     TOBN(0xc76824f0, 0x4bd55d31), TOBN(0xb6d1c086, 0x17b61c71),
+     TOBN(0x31db0903, 0xc2a5089d), TOBN(0x9c092172, 0x184e5d3f),
+     TOBN(0xdd7ced5b, 0xc00cc638), TOBN(0x1a2015eb, 0x61278fc2),
+     TOBN(0x2e8e5288, 0x6a37f8d6), TOBN(0xc457786f, 0xe79933ad),
+     TOBN(0xb3fe4cce, 0x2c51211a), TOBN(0xad9b10b2, 0x24c20498),
+     TOBN(0x90d87a4f, 0xd28db5e5), TOBN(0x698cd105, 0x3aca2fc3),
+     TOBN(0x4f112d07, 0xe91b536d), TOBN(0xceb982f2, 0x9eba09d6),
+     TOBN(0x3c157b2c, 0x197c396f), TOBN(0xe23c2d41, 0x7b66eb24),
+     TOBN(0x480c57d9, 0x3f330d37), TOBN(0xb3a4c8a1, 0x79108deb),
+     TOBN(0x702388de, 0xcb199ce5), TOBN(0x0b019211, 0xb944a8d4),
+     TOBN(0x24f2a692, 0x840bb336), TOBN(0x7c353bdc, 0xa669fa7b),
+     TOBN(0xda20d6fc, 0xdec9c300), TOBN(0x625fbe2f, 0xa13a4f17),
+     TOBN(0xa2b1b61a, 0xdbc17328), TOBN(0x008965bf, 0xa9515621),
+     TOBN(0x49690939, 0xc620ff46), TOBN(0x182dd27d, 0x8717e91c),
+     TOBN(0x5ace5035, 0xea6c3997), TOBN(0x54259aaa, 0xc2610bef),
+     TOBN(0xef18bb3f, 0x3c80dd39), TOBN(0x6910b95b, 0x5fc3fa39),
+     TOBN(0xfce2f510, 0x43e09aee), TOBN(0xced56c9f, 0xa7675665),
+     TOBN(0x10e265ac, 0xd872db61), TOBN(0x6982812e, 0xae9fce69),
+     TOBN(0x29be11c6, 0xce800998), TOBN(0x72bb1752, 0xb90360d9),
+     TOBN(0x2c193197, 0x5a4ad590), TOBN(0x2ba2f548, 0x9fc1dbc0),
+     TOBN(0x7fe4eebb, 0xe490ebe0), TOBN(0x12a0a4cd, 0x7fae11c0),
+     TOBN(0x7197cf81, 0xe903ba37), TOBN(0xcf7d4aa8, 0xde1c6dd8),
+     TOBN(0x92af6bf4, 0x3fd5684c), TOBN(0x2b26eecf, 0x80360aa1),
+     TOBN(0xbd960f30, 0x00546a82), TOBN(0x407b3c43, 0xf59ad8fe),
+     TOBN(0x86cae5fe, 0x249c82ba), TOBN(0x9e0faec7, 0x2463744c),
+     TOBN(0x87f551e8, 0x94916272), TOBN(0x033f9344, 0x6ceb0615),
+     TOBN(0x1e5eb0d1, 0x8be82e84), TOBN(0x89967f0e, 0x7a582fef),
+     TOBN(0xbcf687d5, 0xa6e921fa), TOBN(0xdfee4cf3, 0xd37a09ba),
+     TOBN(0x94f06965, 0xb493c465), TOBN(0x638b9a1c, 0x7635c030),
+     TOBN(0x76667864, 0x66f05e9f), TOBN(0xccaf6808, 0xc04da725),
+     TOBN(0xca2eb690, 0x768fccfc), TOBN(0xf402d37d, 0xb835b362),
+     TOBN(0x0efac0d0, 0xe2fdfcce), TOBN(0xefc9cdef, 0xb638d990),
+     TOBN(0x2af12b72, 0xd1669a8b), TOBN(0x33c536bc, 0x5774ccbd),
+     TOBN(0x30b21909, 0xfb34870e), TOBN(0xc38fa2f7, 0x7df25aca),
+     TOBN(0x74c5f02b, 0xbf81f3f5), TOBN(0x0525a5ae, 0xaf7e4581),
+     TOBN(0x88d2aaba, 0x433c54ae), TOBN(0xed9775db, 0x806a56c5),
+     TOBN(0xd320738a, 0xc0edb37d), TOBN(0x25fdb6ee, 0x66cc1f51),
+     TOBN(0xac661d17, 0x10600d76), TOBN(0x931ec1f3, 0xbdd1ed76),
+     TOBN(0x65c11d62, 0x19ee43f1), TOBN(0x5cd57c3e, 0x60829d97),
+     TOBN(0xd26c91a3, 0x984be6e8), TOBN(0xf08d9309, 0x8b0c53bd),
+     TOBN(0x94bc9e5b, 0xc016e4ea), TOBN(0xd3916839, 0x11d43d2b),
+     TOBN(0x886c5ad7, 0x73701155), TOBN(0xe0377626, 0x20b00715),
+     TOBN(0x7f01c9ec, 0xaa80ba59), TOBN(0x3083411a, 0x68538e51),
+     TOBN(0x970370f1, 0xe88128af), TOBN(0x625cc3db, 0x91dec14b),
+     TOBN(0xfef9666c, 0x01ac3107), TOBN(0xb2a8d577, 0xd5057ac3),
+     TOBN(0xb0f26299, 0x92be5df7), TOBN(0xf579c8e5, 0x00353924),
+     TOBN(0xb8fa3d93, 0x1341ed7a), TOBN(0x4223272c, 0xa7b59d49),
+     TOBN(0x3dcb1947, 0x83b8c4a4), TOBN(0x4e413c01, 0xed1302e4),
+     TOBN(0x6d999127, 0xe17e44ce), TOBN(0xee86bf75, 0x33b3adfb),
+     TOBN(0xf6902fe6, 0x25aa96ca), TOBN(0xb73540e4, 0xe5aae47d),
+     TOBN(0x32801d7b, 0x1b4a158c), TOBN(0xe571c99e, 0x27e2a369),
+     TOBN(0x40cb76c0, 0x10d9f197), TOBN(0xc308c289, 0x3167c0ae),
+     TOBN(0xa6ef9dd3, 0xeb7958f2), TOBN(0xa7226dfc, 0x300879b1),
+     TOBN(0x6cd0b362, 0x7edf0636), TOBN(0x4efbce6c, 0x7bc37eed),
+     TOBN(0x75f92a05, 0x8d699021), TOBN(0x586d4c79, 0x772566e3),
+     TOBN(0x378ca5f1, 0x761ad23a), TOBN(0x650d86fc, 0x1465a8ac),
+     TOBN(0x7a4ed457, 0x842ba251), TOBN(0x6b65e3e6, 0x42234933),
+     TOBN(0xaf1543b7, 0x31aad657), TOBN(0xa4cefe98, 0xcbfec369),
+     TOBN(0xb587da90, 0x9f47befb), TOBN(0x6562e9fb, 0x41312d13),
+     TOBN(0xa691ea59, 0xeff1cefe), TOBN(0xcc30477a, 0x05fc4cf6),
+     TOBN(0xa1632461, 0x0b0ffd3d), TOBN(0xa1f16f3b, 0x5b355956),
+     TOBN(0x5b148d53, 0x4224ec24), TOBN(0xdc834e7b, 0xf977012a),
+     TOBN(0x7bfc5e75, 0xb2c69dbc), TOBN(0x3aa77a29, 0x03c3da6c),
+     TOBN(0xde0df03c, 0xca910271), TOBN(0xcbd5ca4a, 0x7806dc55),
+     TOBN(0xe1ca5807, 0x6db476cb), TOBN(0xfde15d62, 0x5f37a31e),
+     TOBN(0xf49af520, 0xf41af416), TOBN(0x96c5c5b1, 0x7d342db5),
+     TOBN(0x155c43b7, 0xeb4ceb9b), TOBN(0x2e993010, 0x4e77371a),
+     TOBN(0x1d2987da, 0x675d43af), TOBN(0xef2bc1c0, 0x8599fd72),
+     TOBN(0x96894b7b, 0x9342f6b2), TOBN(0x201eadf2, 0x7c8e71f0),
+     TOBN(0xf3479d9f, 0x4a1f3efc), TOBN(0xe0f8a742, 0x702a9704),
+     TOBN(0xeafd44b6, 0xb3eba40c), TOBN(0xf9739f29, 0xc1c1e0d0),
+     TOBN(0x0091471a, 0x619d505e), TOBN(0xc15f9c96, 0x9d7c263e),
+     TOBN(0x5be47285, 0x83afbe33), TOBN(0xa3b6d6af, 0x04f1e092),
+     TOBN(0xe76526b9, 0x751a9d11), TOBN(0x2ec5b26d, 0x9a4ae4d2),
+     TOBN(0xeb66f4d9, 0x02f6fb8d), TOBN(0x4063c561, 0x96912164),
+     TOBN(0xeb7050c1, 0x80ef3000), TOBN(0x288d1c33, 0xeaa5b3f0),
+     TOBN(0xe87c68d6, 0x07806fd8), TOBN(0xb2f7f9d5, 0x4bbbf50f),
+     TOBN(0x25972f3a, 0xac8d6627), TOBN(0xf8547774, 0x10e8c13b),
+     TOBN(0xcc50ef6c, 0x872b4a60), TOBN(0xab2a34a4, 0x4613521b),
+     TOBN(0x39c5c190, 0x983e15d1), TOBN(0x61dde5df, 0x59905512),
+     TOBN(0xe417f621, 0x9f2275f3), TOBN(0x0750c8b6, 0x451d894b),
+     TOBN(0x75b04ab9, 0x78b0bdaa), TOBN(0x3bfd9fd4, 0x458589bd),
+     TOBN(0xf1013e30, 0xee9120b6), TOBN(0x2b51af93, 0x23a4743e),
+     TOBN(0xea96ffae, 0x48d14d9e), TOBN(0x71dc0dbe, 0x698a1d32),
+     TOBN(0x914962d2, 0x0180cca4), TOBN(0x1ae60677, 0xc3568963),
+     TOBN(0x8cf227b1, 0x437bc444), TOBN(0xc650c83b, 0xc9962c7a),
+     TOBN(0x23c2c7dd, 0xfe7ccfc4), TOBN(0xf925c89d, 0x1b929d48),
+     TOBN(0x4460f74b, 0x06783c33), TOBN(0xac2c8d49, 0xa590475a),
+     TOBN(0xfb40b407, 0xb807bba0), TOBN(0x9d1e362d, 0x69ff8f3a),
+     TOBN(0xa33e9681, 0xcbef64a4), TOBN(0x67ece5fa, 0x332fb4b2),
+     TOBN(0x6900a99b, 0x739f10e3), TOBN(0xc3341ca9, 0xff525925),
+     TOBN(0xee18a626, 0xa9e2d041), TOBN(0xa5a83685, 0x29580ddd),
+     TOBN(0xf3470c81, 0x9d7de3cd), TOBN(0xedf02586, 0x2062cf9c),
+     TOBN(0xf43522fa, 0xc010edb0), TOBN(0x30314135, 0x13a4b1ae),
+     TOBN(0xc792e02a, 0xdb22b94b), TOBN(0x993d8ae9, 0xa1eaa45b),
+     TOBN(0x8aad6cd3, 0xcd1e1c63), TOBN(0x89529ca7, 0xc5ce688a),
+     TOBN(0x2ccee3aa, 0xe572a253), TOBN(0xe02b6438, 0x02a21efb),
+     TOBN(0xa7091b6e, 0xc9430358), TOBN(0x06d1b1fa, 0x9d7db504),
+     TOBN(0x58846d32, 0xc4744733), TOBN(0x40517c71, 0x379f9e34),
+     TOBN(0x2f65655f, 0x130ef6ca), TOBN(0x526e4488, 0xf1f3503f),
+     TOBN(0x8467bd17, 0x7ee4a976), TOBN(0x1d9dc913, 0x921363d1),
+     TOBN(0xd8d24c33, 0xb069e041), TOBN(0x5eb5da0a, 0x2cdf7f51),
+     TOBN(0x1c0f3cb1, 0x197b994f), TOBN(0x3c95a6c5, 0x2843eae9),
+     TOBN(0x7766ffc9, 0xa6097ea5), TOBN(0x7bea4093, 0xd723b867),
+     TOBN(0xb48e1f73, 0x4db378f9), TOBN(0x70025b00, 0xe37b77ac),
+     TOBN(0x943dc8e7, 0xaf24ad46), TOBN(0xb98a15ac, 0x16d00a85),
+     TOBN(0x3adc38ba, 0x2743b004), TOBN(0xb1c7f4f7, 0x334415ee),
+     TOBN(0xea43df8f, 0x1e62d05a), TOBN(0x32618905, 0x9d76a3b6),
+     TOBN(0x2fbd0bb5, 0xa23a0f46), TOBN(0x5bc971db, 0x6a01918c),
+     TOBN(0x7801d94a, 0xb4743f94), TOBN(0xb94df65e, 0x676ae22b),
+     TOBN(0xaafcbfab, 0xaf95894c), TOBN(0x7b9bdc07, 0x276b2241),
+     TOBN(0xeaf98362, 0x5bdda48b), TOBN(0x5977faf2, 0xa3fcb4df),
+     TOBN(0xbed042ef, 0x052c4b5b), TOBN(0x9fe87f71, 0x067591f0),
+     TOBN(0xc89c73ca, 0x22f24ec7), TOBN(0x7d37fa9e, 0xe64a9f1b),
+     TOBN(0x2710841a, 0x15562627), TOBN(0x2c01a613, 0xc243b034),
+     TOBN(0x1d135c56, 0x2bc68609), TOBN(0xc2ca1715, 0x8b03f1f6),
+     TOBN(0xc9966c2d, 0x3eb81d82), TOBN(0xc02abf4a, 0x8f6df13e),
+     TOBN(0x77b34bd7, 0x8f72b43b), TOBN(0xaff6218f, 0x360c82b0),
+     TOBN(0x0aa5726c, 0x8d55b9d2), TOBN(0xdc0adbe9, 0x99e9bffb),
+     TOBN(0x9097549c, 0xefb9e72a), TOBN(0x16755712, 0x9dfb3111),
+     TOBN(0xdd8bf984, 0xf26847f9), TOBN(0xbcb8e387, 0xdfb30cb7),
+     TOBN(0xc1fd32a7, 0x5171ef9c), TOBN(0x977f3fc7, 0x389b363f),
+     TOBN(0x116eaf2b, 0xf4babda0), TOBN(0xfeab68bd, 0xf7113c8e),
+     TOBN(0xd1e3f064, 0xb7def526), TOBN(0x1ac30885, 0xe0b3fa02),
+     TOBN(0x1c5a6e7b, 0x40142d9d), TOBN(0x839b5603, 0x30921c0b),
+     TOBN(0x48f301fa, 0x36a116a3), TOBN(0x380e1107, 0xcfd9ee6d),
+     TOBN(0x7945ead8, 0x58854be1), TOBN(0x4111c12e, 0xcbd4d49d),
+     TOBN(0xece3b1ec, 0x3a29c2ef), TOBN(0x6356d404, 0x8d3616f5),
+     TOBN(0x9f0d6a8f, 0x594d320e), TOBN(0x0989316d, 0xf651ccd2),
+     TOBN(0x6c32117a, 0x0f8fdde4), TOBN(0x9abe5cc5, 0xa26a9bbc),
+     TOBN(0xcff560fb, 0x9723f671), TOBN(0x21b2a12d, 0x7f3d593c),
+     TOBN(0xe4cb18da, 0x24ba0696), TOBN(0x186e2220, 0xc3543384),
+     TOBN(0x722f64e0, 0x88312c29), TOBN(0x94282a99, 0x17dc7752),
+     TOBN(0x62467bbf, 0x5a85ee89), TOBN(0xf435c650, 0xf10076a0),
+     TOBN(0xc9ff1539, 0x43b3a50b), TOBN(0x7132130c, 0x1a53efbc),
+     TOBN(0x31bfe063, 0xf7b0c5b7), TOBN(0xb0179a7d, 0x4ea994cc),
+     TOBN(0x12d064b3, 0xc85f455b), TOBN(0x47259328, 0x8f6e0062),
+     TOBN(0xf64e590b, 0xb875d6d9), TOBN(0x22dd6225, 0xad92bcc7),
+     TOBN(0xb658038e, 0xb9c3bd6d), TOBN(0x00cdb0d6, 0xfbba27c8),
+     TOBN(0x0c681337, 0x1062c45d), TOBN(0xd8515b8c, 0x2d33407d),
+     TOBN(0xcb8f699e, 0x8cbb5ecf), TOBN(0x8c4347f8, 0xc608d7d8),
+     TOBN(0x2c11850a, 0xbb3e00db), TOBN(0x20a8dafd, 0xecb49d19),
+     TOBN(0xbd781480, 0x45ee2f40), TOBN(0x75e354af, 0x416b60cf),
+     TOBN(0xde0b58a1, 0x8d49a8c4), TOBN(0xe40e94e2, 0xfa359536),
+     TOBN(0xbd4fa59f, 0x62accd76), TOBN(0x05cf466a, 0x8c762837),
+     TOBN(0xb5abda99, 0x448c277b), TOBN(0x5a9e01bf, 0x48b13740),
+     TOBN(0x9d457798, 0x326aad8d), TOBN(0xbdef4954, 0xc396f7e7),
+     TOBN(0x6fb274a2, 0xc253e292), TOBN(0x2800bf0a, 0x1cfe53e7),
+     TOBN(0x22426d31, 0x44438fd4), TOBN(0xef233923, 0x5e259f9a),
+     TOBN(0x4188503c, 0x03f66264), TOBN(0x9e5e7f13, 0x7f9fdfab),
+     TOBN(0x565eb76c, 0x5fcc1aba), TOBN(0xea632548, 0x59b5bff8),
+     TOBN(0x5587c087, 0xaab6d3fa), TOBN(0x92b639ea, 0x6ce39c1b),
+     TOBN(0x0706e782, 0x953b135c), TOBN(0x7308912e, 0x425268ef),
+     TOBN(0x599e92c7, 0x090e7469), TOBN(0x83b90f52, 0x9bc35e75),
+     TOBN(0x4750b3d0, 0x244975b3), TOBN(0xf3a44358, 0x11965d72),
+     TOBN(0x179c6774, 0x9c8dc751), TOBN(0xff18cdfe, 0xd23d9ff0),
+     TOBN(0xc4013833, 0x2028e247), TOBN(0x96e280e2, 0xf3bfbc79),
+     TOBN(0xf60417bd, 0xd0880a84), TOBN(0x263c9f3d, 0x2a568151),
+     TOBN(0x36be15b3, 0x2d2ce811), TOBN(0x846dc0c2, 0xf8291d21),
+     TOBN(0x5cfa0ecb, 0x789fcfdb), TOBN(0x45a0beed, 0xd7535b9a),
+     TOBN(0xec8e9f07, 0x96d69af1), TOBN(0x31a7c5b8, 0x599ab6dc),
+     TOBN(0xd36d45ef, 0xf9e2e09f), TOBN(0x3cf49ef1, 0xdcee954b),
+     TOBN(0x6be34cf3, 0x086cff9b), TOBN(0x88dbd491, 0x39a3360f),
+     TOBN(0x1e96b8cc, 0x0dbfbd1d), TOBN(0xc1e5f7bf, 0xcb7e2552),
+     TOBN(0x0547b214, 0x28819d98), TOBN(0xc770dd9c, 0x7aea9dcb),
+     TOBN(0xaef0d4c7, 0x041d68c8), TOBN(0xcc2b9818, 0x13cb9ba8),
+     TOBN(0x7fc7bc76, 0xfe86c607), TOBN(0x6b7b9337, 0x502a9a95),
+     TOBN(0x1948dc27, 0xd14dab63), TOBN(0x249dd198, 0xdae047be),
+     TOBN(0xe8356584, 0xa981a202), TOBN(0x3531dd18, 0x3a893387),
+     TOBN(0x1be11f90, 0xc85c7209), TOBN(0x93d2fe1e, 0xe2a52b5a),
+     TOBN(0x8225bfe2, 0xec6d6b97), TOBN(0x9cf6d6f4, 0xbd0aa5de),
+     TOBN(0x911459cb, 0x54779f5f), TOBN(0x5649cddb, 0x86aeb1f3),
+     TOBN(0x32133579, 0x3f26ce5a), TOBN(0xc289a102, 0x550f431e),
+     TOBN(0x559dcfda, 0x73b84c6f), TOBN(0x84973819, 0xee3ac4d7),
+     TOBN(0xb51e55e6, 0xf2606a82), TOBN(0xe25f7061, 0x90f2fb57),
+     TOBN(0xacef6c2a, 0xb1a4e37c), TOBN(0x864e359d, 0x5dcf2706),
+     TOBN(0x479e6b18, 0x7ce57316), TOBN(0x2cab2500, 0x3a96b23d),
+     TOBN(0xed489862, 0x8ef16df7), TOBN(0x2056538c, 0xef3758b5),
+     TOBN(0xa7df865e, 0xf15d3101), TOBN(0x80c5533a, 0x61b553d7),
+     TOBN(0x366e1997, 0x4ed14294), TOBN(0x6620741f, 0xb3c0bcd6),
+     TOBN(0x21d1d9c4, 0xedc45418), TOBN(0x005b859e, 0xc1cc4a9d),
+     TOBN(0xdf01f630, 0xa1c462f0), TOBN(0x15d06cf3, 0xf26820c7),
+     TOBN(0x9f7f24ee, 0x3484be47), TOBN(0x2ff33e96, 0x4a0c902f),
+     TOBN(0x00bdf457, 0x5a0bc453), TOBN(0x2378dfaf, 0x1aa238db),
+     TOBN(0x272420ec, 0x856720f2), TOBN(0x2ad9d95b, 0x96797291),
+     TOBN(0xd1242cc6, 0x768a1558), TOBN(0x2e287f8b, 0x5cc86aa8),
+     TOBN(0x796873d0, 0x990cecaa), TOBN(0xade55f81, 0x675d4080),
+     TOBN(0x2645eea3, 0x21f0cd84), TOBN(0x7a1efa0f, 0xb4e17d02),
+     TOBN(0xf6858420, 0x037cc061), TOBN(0x682e05f0, 0xd5d43e12),
+     TOBN(0x59c36994, 0x27218710), TOBN(0x85cbba4d, 0x3f7cd2fc),
+     TOBN(0x726f9729, 0x7a3cd22a), TOBN(0x9f8cd5dc, 0x4a628397),
+     TOBN(0x17b93ab9, 0xc23165ed), TOBN(0xff5f5dbf, 0x122823d4),
+     TOBN(0xc1e4e4b5, 0x654a446d), TOBN(0xd1a9496f, 0x677257ba),
+     TOBN(0x6387ba94, 0xde766a56), TOBN(0x23608bc8, 0x521ec74a),
+     TOBN(0x16a522d7, 0x6688c4d4), TOBN(0x9d6b4282, 0x07373abd),
+     TOBN(0xa62f07ac, 0xb42efaa3), TOBN(0xf73e00f7, 0xe3b90180),
+     TOBN(0x36175fec, 0x49421c3e), TOBN(0xc4e44f9b, 0x3dcf2678),
+     TOBN(0x76df436b, 0x7220f09f), TOBN(0x172755fb, 0x3aa8b6cf),
+     TOBN(0xbab89d57, 0x446139cc), TOBN(0x0a0a6e02, 0x5fe0208f),
+     TOBN(0xcdbb63e2, 0x11e5d399), TOBN(0x33ecaa12, 0xa8977f0b),
+     TOBN(0x59598b21, 0xf7c42664), TOBN(0xb3e91b32, 0xab65d08a),
+     TOBN(0x035822ee, 0xf4502526), TOBN(0x1dcf0176, 0x720a82a9),
+     TOBN(0x50f8598f, 0x3d589e02), TOBN(0xdf0478ff, 0xb1d63d2c),
+     TOBN(0x8b8068bd, 0x1571cd07), TOBN(0x30c3aa4f, 0xd79670cd),
+     TOBN(0x25e8fd4b, 0x941ade7f), TOBN(0x3d1debdc, 0x32790011),
+     TOBN(0x65b6dcbd, 0x3a3f9ff0), TOBN(0x282736a4, 0x793de69c),
+     TOBN(0xef69a0c3, 0xd41d3bd3), TOBN(0xb533b8c9, 0x07a26bde),
+     TOBN(0xe2801d97, 0xdb2edf9f), TOBN(0xdc4a8269, 0xe1877af0),
+     TOBN(0x6c1c5851, 0x3d590dbe), TOBN(0x84632f6b, 0xee4e9357),
+     TOBN(0xd36d36b7, 0x79b33374), TOBN(0xb46833e3, 0x9bbca2e6),
+     TOBN(0x37893913, 0xf7fc0586), TOBN(0x385315f7, 0x66bf4719),
+     TOBN(0x72c56293, 0xb31855dc), TOBN(0xd1416d4e, 0x849061fe),
+     TOBN(0xbeb3ab78, 0x51047213), TOBN(0x447f6e61, 0xf040c996),
+     TOBN(0xd06d310d, 0x638b1d0c), TOBN(0xe28a413f, 0xbad1522e),
+     TOBN(0x685a76cb, 0x82003f86), TOBN(0x610d07f7, 0x0bcdbca3),
+     TOBN(0x6ff66021, 0x9ca4c455), TOBN(0x7df39b87, 0xcea10eec),
+     TOBN(0xb9255f96, 0xe22db218), TOBN(0x8cc6d9eb, 0x08a34c44),
+     TOBN(0xcd4ffb86, 0x859f9276), TOBN(0x8fa15eb2, 0x50d07335),
+     TOBN(0xdf553845, 0xcf2c24b5), TOBN(0x89f66a9f, 0x52f9c3ba),
+     TOBN(0x8f22b5b9, 0xe4a7ceb3), TOBN(0xaffef809, 0x0e134686),
+     TOBN(0x3e53e1c6, 0x8eb8fac2), TOBN(0x93c1e4eb, 0x28aec98e),
+     TOBN(0xb6b91ec5, 0x32a43bcb), TOBN(0x2dbfa947, 0xb2d74a51),
+     TOBN(0xe065d190, 0xca84bad7), TOBN(0xfb13919f, 0xad58e65c),
+     TOBN(0x3c41718b, 0xf1cb6e31), TOBN(0x688969f0, 0x06d05c3f),
+     TOBN(0xd4f94ce7, 0x21264d45), TOBN(0xfdfb65e9, 0x7367532b),
+     TOBN(0x5b1be8b1, 0x0945a39d), TOBN(0x229f789c, 0x2b8baf3b),
+     TOBN(0xd8f41f3e, 0x6f49f15d), TOBN(0x678ce828, 0x907f0792),
+     TOBN(0xc69ace82, 0xfca6e867), TOBN(0x106451ae, 0xd01dcc89),
+     TOBN(0x1bb4f7f0, 0x19fc32d2), TOBN(0x64633dfc, 0xb00c52d2),
+     TOBN(0x8f13549a, 0xad9ea445), TOBN(0x99a3bf50, 0xfb323705),
+     TOBN(0x0c9625a2, 0x534d4dbc), TOBN(0x45b8f1d1, 0xc2a2fea3),
+     TOBN(0x76ec21a1, 0xa530fc1a), TOBN(0x4bac9c2a, 0x9e5bd734),
+     TOBN(0x5996d76a, 0x7b4e3587), TOBN(0x0045cdee, 0x1182d9e3),
+     TOBN(0x1aee24b9, 0x1207f13d), TOBN(0x66452e97, 0x97345a41),
+     TOBN(0x16e5b054, 0x9f950cd0), TOBN(0x9cc72fb1, 0xd7fdd075),
+     TOBN(0x6edd61e7, 0x66249663), TOBN(0xde4caa4d, 0xf043cccb),
+     TOBN(0x11b1f57a, 0x55c7ac17), TOBN(0x779cbd44, 0x1a85e24d),
+     TOBN(0x78030f86, 0xe46081e7), TOBN(0xfd4a6032, 0x8e20f643),
+     TOBN(0xcc7a6488, 0x0a750c0f), TOBN(0x39bacfe3, 0x4e548e83),
+     TOBN(0x3d418c76, 0x0c110f05), TOBN(0x3e4daa4c, 0xb1f11588),
+     TOBN(0x2733e7b5, 0x5ffc69ff), TOBN(0x46f147bc, 0x92053127),
+     TOBN(0x885b2434, 0xd722df94), TOBN(0x6a444f65, 0xe6fc6b7c)}
+    ,
+    {TOBN(0x7a1a465a, 0xc3f16ea8), TOBN(0x115a461d, 0xb2f1d11c),
+     TOBN(0x4767dd95, 0x6c68a172), TOBN(0x3392f2eb, 0xd13a4698),
+     TOBN(0xc7a99ccd, 0xe526cdc7), TOBN(0x8e537fdc, 0x22292b81),
+     TOBN(0x76d8cf69, 0xa6d39198), TOBN(0xffc5ff43, 0x2446852d),
+     TOBN(0x97b14f7e, 0xa90567e6), TOBN(0x513257b7, 0xb6ae5cb7),
+     TOBN(0x85454a3c, 0x9f10903d), TOBN(0xd8d2c9ad, 0x69bc3724),
+     TOBN(0x38da9324, 0x6b29cb44), TOBN(0xb540a21d, 0x77c8cbac),
+     TOBN(0x9bbfe435, 0x01918e42), TOBN(0xfffa707a, 0x56c3614e),
+     TOBN(0x0ce4e3f1, 0xd4e353b7), TOBN(0x062d8a14, 0xef46b0a0),
+     TOBN(0x6408d5ab, 0x574b73fd), TOBN(0xbc41d1c9, 0xd3273ffd),
+     TOBN(0x3538e1e7, 0x6be77800), TOBN(0x71fe8b37, 0xc5655031),
+     TOBN(0x1cd91621, 0x6b9b331a), TOBN(0xad825d0b, 0xbb388f73),
+     TOBN(0x56c2e05b, 0x1cb76219), TOBN(0x0ec0bf91, 0x71567e7e),
+     TOBN(0xe7076f86, 0x61c4c910), TOBN(0xd67b085b, 0xbabc04d9),
+     TOBN(0x9fb90459, 0x5e93a96a), TOBN(0x7526c1ea, 0xfbdc249a),
+     TOBN(0x0d44d367, 0xecdd0bb7), TOBN(0x95399917, 0x9dc0d695),
+     TOBN(0x61360ee9, 0x9e240d18), TOBN(0x057cdcac, 0xb4b94466),
+     TOBN(0xe7667cd1, 0x2fe5325c), TOBN(0x1fa297b5, 0x21974e3b),
+     TOBN(0xfa4081e7, 0xdb083d76), TOBN(0x31993be6, 0xf206bd15),
+     TOBN(0x8949269b, 0x14c19f8c), TOBN(0x21468d72, 0xa9d92357),
+     TOBN(0x2ccbc583, 0xa4c506ec), TOBN(0x957ed188, 0xd1acfe97),
+     TOBN(0x8baed833, 0x12f1aea2), TOBN(0xef2a6cb4, 0x8325362d),
+     TOBN(0x130dde42, 0x8e195c43), TOBN(0xc842025a, 0x0e6050c6),
+     TOBN(0x2da972a7, 0x08686a5d), TOBN(0xb52999a1, 0xe508b4a8),
+     TOBN(0xd9f090b9, 0x10a5a8bd), TOBN(0xca91d249, 0x096864da),
+     TOBN(0x8e6a93be, 0x3f67dbc1), TOBN(0xacae6fba, 0xf5f4764c),
+     TOBN(0x1563c6e0, 0xd21411a0), TOBN(0x28fa787f, 0xda0a4ad8),
+     TOBN(0xd524491c, 0x908c8030), TOBN(0x1257ba0e, 0x4c795f07),
+     TOBN(0x83f49167, 0xceca9754), TOBN(0x426d2cf6, 0x4b7939a0),
+     TOBN(0x2555e355, 0x723fd0bf), TOBN(0xa96e6d06, 0xc4f144e2),
+     TOBN(0x4768a8dd, 0x87880e61), TOBN(0x15543815, 0xe508e4d5),
+     TOBN(0x09d7e772, 0xb1b65e15), TOBN(0x63439dd6, 0xac302fa0),
+     TOBN(0xb93f802f, 0xc14e35c2), TOBN(0x71735b7c, 0x4341333c),
+     TOBN(0x03a25104, 0x16d4f362), TOBN(0x3f4d069b, 0xbf433c8e),
+     TOBN(0x0d83ae01, 0xf78f5a7c), TOBN(0x50a8ffbe, 0x7c4eed07),
+     TOBN(0xc74f8906, 0x76e10f83), TOBN(0x7d080966, 0x9ddaf8e1),
+     TOBN(0xb11df8e1, 0x698e04cc), TOBN(0x877be203, 0x169005c8),
+     TOBN(0x32749e8c, 0x4f3c6179), TOBN(0x2dbc9d0a, 0x7853fc05),
+     TOBN(0x187d4f93, 0x9454d937), TOBN(0xe682ce9d, 0xb4800e1b),
+     TOBN(0xa9129ad8, 0x165e68e8), TOBN(0x0fe29735, 0xbe7f785b),
+     TOBN(0x5303f40c, 0x5b9e02b7), TOBN(0xa37c9692, 0x35ee04e8),
+     TOBN(0x5f46cc20, 0x34d6632b), TOBN(0x55ef72b2, 0x96ac545b),
+     TOBN(0xabec5c1f, 0x7b91b062), TOBN(0x0a79e1c7, 0xbb33e821),
+     TOBN(0xbb04b428, 0x3a9f4117), TOBN(0x0de1f28f, 0xfd2a475a),
+     TOBN(0x31019ccf, 0x3a4434b4), TOBN(0xa3458111, 0x1a7954dc),
+     TOBN(0xa9dac80d, 0xe34972a7), TOBN(0xb043d054, 0x74f6b8dd),
+     TOBN(0x021c319e, 0x11137b1a), TOBN(0x00a754ce, 0xed5cc03f),
+     TOBN(0x0aa2c794, 0xcbea5ad4), TOBN(0x093e67f4, 0x70c015b6),
+     TOBN(0x72cdfee9, 0xc97e3f6b), TOBN(0xc10bcab4, 0xb6da7461),
+     TOBN(0x3b02d2fc, 0xb59806b9), TOBN(0x85185e89, 0xa1de6f47),
+     TOBN(0x39e6931f, 0x0eb6c4d4), TOBN(0x4d4440bd, 0xd4fa5b04),
+     TOBN(0x5418786e, 0x34be7eb8), TOBN(0x6380e521, 0x9d7259bc),
+     TOBN(0x20ac0351, 0xd598d710), TOBN(0x272c4166, 0xcb3a4da4),
+     TOBN(0xdb82fe1a, 0xca71de1f), TOBN(0x746e79f2, 0xd8f54b0f),
+     TOBN(0x6e7fc736, 0x4b573e9b), TOBN(0x75d03f46, 0xfd4b5040),
+     TOBN(0x5c1cc36d, 0x0b98d87b), TOBN(0x513ba3f1, 0x1f472da1),
+     TOBN(0x79d0af26, 0xabb177dd), TOBN(0xf82ab568, 0x7891d564),
+     TOBN(0x2b6768a9, 0x72232173), TOBN(0xefbb3bb0, 0x8c1f6619),
+     TOBN(0xb29c11db, 0xa6d18358), TOBN(0x519e2797, 0xb0916d3a),
+     TOBN(0xd4dc18f0, 0x9188e290), TOBN(0x648e86e3, 0x98b0ca7f),
+     TOBN(0x859d3145, 0x983c38b5), TOBN(0xb14f176c, 0x637abc8b),
+     TOBN(0x2793fb9d, 0xcaff7be6), TOBN(0xebe5a55f, 0x35a66a5a),
+     TOBN(0x7cec1dcd, 0x9f87dc59), TOBN(0x7c595cd3, 0xfbdbf560),
+     TOBN(0x5b543b22, 0x26eb3257), TOBN(0x69080646, 0xc4c935fd),
+     TOBN(0x7f2e4403, 0x81e9ede3), TOBN(0x243c3894, 0xcaf6df0a),
+     TOBN(0x7c605bb1, 0x1c073b11), TOBN(0xcd06a541, 0xba6a4a62),
+     TOBN(0x29168949, 0x49d4e2e5), TOBN(0x33649d07, 0x4af66880),
+     TOBN(0xbfc0c885, 0xe9a85035), TOBN(0xb4e52113, 0xfc410f4b),
+     TOBN(0xdca3b706, 0x78a6513b), TOBN(0x92ea4a2a, 0x9edb1943),
+     TOBN(0x02642216, 0xdb6e2dd8), TOBN(0x9b45d0b4, 0x9fd57894),
+     TOBN(0x114e70db, 0xc69d11ae), TOBN(0x1477dd19, 0x4c57595f),
+     TOBN(0xbc2208b4, 0xec77c272), TOBN(0x95c5b4d7, 0xdb68f59c),
+     TOBN(0xb8c4fc63, 0x42e532b7), TOBN(0x386ba422, 0x9ae35290),
+     TOBN(0xfb5dda42, 0xd201ecbc), TOBN(0x2353dc8b, 0xa0e38fd6),
+     TOBN(0x9a0b85ea, 0x68f7e978), TOBN(0x96ec5682, 0x2ad6d11f),
+     TOBN(0x5e279d6c, 0xe5f6886d), TOBN(0xd3fe03cd, 0x3cb1914d),
+     TOBN(0xfe541fa4, 0x7ea67c77), TOBN(0x952bd2af, 0xe3ea810c),
+     TOBN(0x791fef56, 0x8d01d374), TOBN(0xa3a1c621, 0x0f11336e),
+     TOBN(0x5ad0d5a9, 0xc7ec6d79), TOBN(0xff7038af, 0x3225c342),
+     TOBN(0x003c6689, 0xbc69601b), TOBN(0x25059bc7, 0x45e8747d),
+     TOBN(0xfa4965b2, 0xf2086fbf), TOBN(0xf6840ea6, 0x86916078),
+     TOBN(0xd7ac7620, 0x70081d6c), TOBN(0xe600da31, 0xb5328645),
+     TOBN(0x01916f63, 0x529b8a80), TOBN(0xe80e4858, 0x2d7d6f3e),
+     TOBN(0x29eb0fe8, 0xd664ca7c), TOBN(0xf017637b, 0xe7b43b0c),
+     TOBN(0x9a75c806, 0x76cb2566), TOBN(0x8f76acb1, 0xb24892d9),
+     TOBN(0x7ae7b9cc, 0x1f08fe45), TOBN(0x19ef7329, 0x6a4907d8),
+     TOBN(0x2db4ab71, 0x5f228bf0), TOBN(0xf3cdea39, 0x817032d7),
+     TOBN(0x0b1f482e, 0xdcabe3c0), TOBN(0x3baf76b4, 0xbb86325c),
+     TOBN(0xd49065e0, 0x10089465), TOBN(0x3bab5d29, 0x8e77c596),
+     TOBN(0x7636c3a6, 0x193dbd95), TOBN(0xdef5d294, 0xb246e499),
+     TOBN(0xb22c58b9, 0x286b2475), TOBN(0xa0b93939, 0xcd80862b),
+     TOBN(0x3002c83a, 0xf0992388), TOBN(0x6de01f9b, 0xeacbe14c),
+     TOBN(0x6aac688e, 0xadd70482), TOBN(0x708de92a, 0x7b4a4e8a),
+     TOBN(0x75b6dd73, 0x758a6eef), TOBN(0xea4bf352, 0x725b3c43),
+     TOBN(0x10041f2c, 0x87912868), TOBN(0xb1b1be95, 0xef09297a),
+     TOBN(0x19ae23c5, 0xa9f3860a), TOBN(0xc4f0f839, 0x515dcf4b),
+     TOBN(0x3c7ecca3, 0x97f6306a), TOBN(0x744c44ae, 0x68a3a4b0),
+     TOBN(0x69cd13a0, 0xb3a1d8a2), TOBN(0x7cad0a1e, 0x5256b578),
+     TOBN(0xea653fcd, 0x33791d9e), TOBN(0x9cc2a05d, 0x74b2e05f),
+     TOBN(0x73b391dc, 0xfd7affa2), TOBN(0xddb7091e, 0xb6b05442),
+     TOBN(0xc71e27bf, 0x8538a5c6), TOBN(0x195c63dd, 0x89abff17),
+     TOBN(0xfd315285, 0x1b71e3da), TOBN(0x9cbdfda7, 0xfa680fa0),
+     TOBN(0x9db876ca, 0x849d7eab), TOBN(0xebe2764b, 0x3c273271),
+     TOBN(0x663357e3, 0xf208dcea), TOBN(0x8c5bd833, 0x565b1b70),
+     TOBN(0xccc3b4f5, 0x9837fc0d), TOBN(0x9b641ba8, 0xa79cf00f),
+     TOBN(0x7428243d, 0xdfdf3990), TOBN(0x83a594c4, 0x020786b1),
+     TOBN(0xb712451a, 0x526c4502), TOBN(0x9d39438e, 0x6adb3f93),
+     TOBN(0xfdb261e3, 0xe9ff0ccd), TOBN(0x80344e3c, 0xe07af4c3),
+     TOBN(0x75900d7c, 0x2fa4f126), TOBN(0x08a3b865, 0x5c99a232),
+     TOBN(0x2478b6bf, 0xdb25e0c3), TOBN(0x482cc2c2, 0x71db2edf),
+     TOBN(0x37df7e64, 0x5f321bb8), TOBN(0x8a93821b, 0x9a8005b4),
+     TOBN(0x3fa2f10c, 0xcc8c1958), TOBN(0x0d332218, 0x2c269d0a),
+     TOBN(0x20ab8119, 0xe246b0e6), TOBN(0xb39781e4, 0xd349fd17),
+     TOBN(0xd293231e, 0xb31aa100), TOBN(0x4b779c97, 0xbb032168),
+     TOBN(0x4b3f19e1, 0xc8470500), TOBN(0x45b7efe9, 0x0c4c869d),
+     TOBN(0xdb84f38a, 0xa1a6bbcc), TOBN(0x3b59cb15, 0xb2fddbc1),
+     TOBN(0xba5514df, 0x3fd165e8), TOBN(0x499fd6a9, 0x061f8811),
+     TOBN(0x72cd1fe0, 0xbfef9f00), TOBN(0x120a4bb9, 0x79ad7e8a),
+     TOBN(0xf2ffd095, 0x5f4a5ac5), TOBN(0xcfd174f1, 0x95a7a2f0),
+     TOBN(0xd42301ba, 0x9d17baf1), TOBN(0xd2fa487a, 0x77f22089),
+     TOBN(0x9cb09efe, 0xb1dc77e1), TOBN(0xe9566939, 0x21c99682),
+     TOBN(0x8c546901, 0x6c6067bb), TOBN(0xfd378574, 0x61c24456),
+     TOBN(0x2b6a6cbe, 0x81796b33), TOBN(0x62d550f6, 0x58e87f8b),
+     TOBN(0x1b763e1c, 0x7f1b01b4), TOBN(0x4b93cfea, 0x1b1b5e12),
+     TOBN(0xb9345238, 0x1d531696), TOBN(0x57201c00, 0x88cdde69),
+     TOBN(0xdde92251, 0x9a86afc7), TOBN(0xe3043895, 0xbd35cea8),
+     TOBN(0x7608c1e1, 0x8555970d), TOBN(0x8267dfa9, 0x2535935e),
+     TOBN(0xd4c60a57, 0x322ea38b), TOBN(0xe0bf7977, 0x804ef8b5),
+     TOBN(0x1a0dab28, 0xc06fece4), TOBN(0xd405991e, 0x94e7b49d),
+     TOBN(0xc542b6d2, 0x706dab28), TOBN(0xcb228da3, 0xa91618fb),
+     TOBN(0x224e4164, 0x107d1cea), TOBN(0xeb9fdab3, 0xd0f5d8f1),
+     TOBN(0xc02ba386, 0x0d6e41cd), TOBN(0x676a72c5, 0x9b1f7146),
+     TOBN(0xffd6dd98, 0x4d6cb00b), TOBN(0xcef9c5ca, 0xde2e8d7c),
+     TOBN(0xa1bbf5d7, 0x641c7936), TOBN(0x1b95b230, 0xee8f772e),
+     TOBN(0xf765a92e, 0xe8ac25b1), TOBN(0xceb04cfc, 0x3a18b7c6),
+     TOBN(0x27944cef, 0x0acc8966), TOBN(0xcbb3c957, 0x434c1004),
+     TOBN(0x9c9971a1, 0xa43ff93c), TOBN(0x5bc2db17, 0xa1e358a9),
+     TOBN(0x45b4862e, 0xa8d9bc82), TOBN(0x70ebfbfb, 0x2201e052),
+     TOBN(0xafdf64c7, 0x92871591), TOBN(0xea5bcae6, 0xb42d0219),
+     TOBN(0xde536c55, 0x2ad8f03c), TOBN(0xcd6c3f4d, 0xa76aa33c),
+     TOBN(0xbeb5f623, 0x0bca6de3), TOBN(0xdd20dd99, 0xb1e706fd),
+     TOBN(0x90b3ff9d, 0xac9059d4), TOBN(0x2d7b2902, 0x7ccccc4e),
+     TOBN(0x8a090a59, 0xce98840f), TOBN(0xa5d947e0, 0x8410680a),
+     TOBN(0x49ae346a, 0x923379a5), TOBN(0x7dbc84f9, 0xb28a3156),
+     TOBN(0xfd40d916, 0x54a1aff2), TOBN(0xabf318ba, 0x3a78fb9b),
+     TOBN(0x50152ed8, 0x3029f95e), TOBN(0x9fc1dd77, 0xc58ad7fa),
+     TOBN(0x5fa57915, 0x13595c17), TOBN(0xb9504668, 0x8f62b3a9),
+     TOBN(0x907b5b24, 0xff3055b0), TOBN(0x2e995e35, 0x9a84f125),
+     TOBN(0x87dacf69, 0x7e9bbcfb), TOBN(0x95d0c1d6, 0xe86d96e3),
+     TOBN(0x65726e3c, 0x2d95a75c), TOBN(0x2c3c9001, 0xacd27f21),
+     TOBN(0x1deab561, 0x6c973f57), TOBN(0x108b7e2c, 0xa5221643),
+     TOBN(0x5fee9859, 0xc4ef79d4), TOBN(0xbd62b88a, 0x40d4b8c6),
+     TOBN(0xb4dd29c4, 0x197c75d6), TOBN(0x266a6df2, 0xb7076feb),
+     TOBN(0x9512d0ea, 0x4bf2df11), TOBN(0x1320c24f, 0x6b0cc9ec),
+     TOBN(0x6bb1e0e1, 0x01a59596), TOBN(0x8317c5bb, 0xeff9aaac),
+     TOBN(0x65bb405e, 0x385aa6c9), TOBN(0x613439c1, 0x8f07988f),
+     TOBN(0xd730049f, 0x16a66e91), TOBN(0xe97f2820, 0xfa1b0e0d),
+     TOBN(0x4131e003, 0x304c28ea), TOBN(0x820ab732, 0x526bac62),
+     TOBN(0xb2ac9ef9, 0x28714423), TOBN(0x54ecfffa, 0xadb10cb2),
+     TOBN(0x8781476e, 0xf886a4cc), TOBN(0x4b2c87b5, 0xdb2f8d49),
+     TOBN(0xe857cd20, 0x0a44295d), TOBN(0x707d7d21, 0x58c6b044),
+     TOBN(0xae8521f9, 0xf596757c), TOBN(0x87448f03, 0x67b2b714),
+     TOBN(0x13a9bc45, 0x5ebcd58d), TOBN(0x79bcced9, 0x9122d3c1),
+     TOBN(0x3c644247, 0x9e076642), TOBN(0x0cf22778, 0x2df4767d),
+     TOBN(0x5e61aee4, 0x71d444b6), TOBN(0x211236bf, 0xc5084a1d),
+     TOBN(0x7e15bc9a, 0x4fd3eaf6), TOBN(0x68df2c34, 0xab622bf5),
+     TOBN(0x9e674f0f, 0x59bf4f36), TOBN(0xf883669b, 0xd7f34d73),
+     TOBN(0xc48ac1b8, 0x31497b1d), TOBN(0x323b925d, 0x5106703b),
+     TOBN(0x22156f42, 0x74082008), TOBN(0xeffc521a, 0xc8482bcb),
+     TOBN(0x5c6831bf, 0x12173479), TOBN(0xcaa2528f, 0xc4739490),
+     TOBN(0x84d2102a, 0x8f1b3c4d), TOBN(0xcf64dfc1, 0x2d9bec0d),
+     TOBN(0x433febad, 0x78a546ef), TOBN(0x1f621ec3, 0x7b73cef1),
+     TOBN(0x6aecd627, 0x37338615), TOBN(0x162082ab, 0x01d8edf6),
+     TOBN(0x833a8119, 0x19e86b66), TOBN(0x6023a251, 0xd299b5db),
+     TOBN(0xf5bb0c3a, 0xbbf04b89), TOBN(0x6735eb69, 0xae749a44),
+     TOBN(0xd0e058c5, 0x4713de3b), TOBN(0xfdf2593e, 0x2c3d4ccd),
+     TOBN(0x1b8f414e, 0xfdd23667), TOBN(0xdd52aaca, 0xfa2015ee),
+     TOBN(0x3e31b517, 0xbd9625ff), TOBN(0x5ec9322d, 0x8db5918c),
+     TOBN(0xbc73ac85, 0xa96f5294), TOBN(0x82aa5bf3, 0x61a0666a),
+     TOBN(0x49755810, 0xbf08ac42), TOBN(0xd21cdfd5, 0x891cedfc),
+     TOBN(0x918cb57b, 0x67f8be10), TOBN(0x365d1a7c, 0x56ffa726),
+     TOBN(0x2435c504, 0x6532de93), TOBN(0xc0fc5e10, 0x2674cd02),
+     TOBN(0x6e51fcf8, 0x9cbbb142), TOBN(0x1d436e5a, 0xafc50692),
+     TOBN(0x766bffff, 0x3fbcae22), TOBN(0x3148c2fd, 0xfd55d3b8),
+     TOBN(0x52c7fdc9, 0x233222fa), TOBN(0x89ff1092, 0xe419fb6b),
+     TOBN(0x3cd6db99, 0x25254977), TOBN(0x2e85a161, 0x1cf12ca7),
+     TOBN(0xadd2547c, 0xdc810bc9), TOBN(0xea3f458f, 0x9d257c22),
+     TOBN(0x642c1fbe, 0x27d6b19b), TOBN(0xed07e6b5, 0x140481a6),
+     TOBN(0x6ada1d42, 0x86d2e0f8), TOBN(0xe5920122, 0x0e8a9fd5),
+     TOBN(0x02c936af, 0x708c1b49), TOBN(0x60f30fee, 0x2b4bfaff),
+     TOBN(0x6637ad06, 0x858e6a61), TOBN(0xce4c7767, 0x3fd374d0),
+     TOBN(0x39d54b2d, 0x7188defb), TOBN(0xa8c9d250, 0xf56a6b66),
+     TOBN(0x58fc0f5e, 0xb24fe1dc), TOBN(0x9eaf9dee, 0x6b73f24c),
+     TOBN(0xa90d588b, 0x33650705), TOBN(0xde5b62c5, 0xaf2ec729),
+     TOBN(0x5c72cfae, 0xd3c2b36e), TOBN(0x868c19d5, 0x034435da),
+     TOBN(0x88605f93, 0xe17ee145), TOBN(0xaa60c4ee, 0x77a5d5b1),
+     TOBN(0xbcf5bfd2, 0x3b60c472), TOBN(0xaf4ef13c, 0xeb1d3049),
+     TOBN(0x373f44fc, 0xe13895c9), TOBN(0xf29b382f, 0x0cbc9822),
+     TOBN(0x1bfcb853, 0x73efaef6), TOBN(0xcf56ac9c, 0xa8c96f40),
+     TOBN(0xd7adf109, 0x7a191e24), TOBN(0x98035f44, 0xbf8a8dc2),
+     TOBN(0xf40a71b9, 0x1e750c84), TOBN(0xc57f7b0c, 0x5dc6c469),
+     TOBN(0x49a0e79c, 0x6fbc19c1), TOBN(0x6b0f5889, 0xa48ebdb8),
+     TOBN(0x5d3fd084, 0xa07c4e9f), TOBN(0xc3830111, 0xab27de14),
+     TOBN(0x0e4929fe, 0x33e08dcc), TOBN(0xf4a5ad24, 0x40bb73a3),
+     TOBN(0xde86c2bf, 0x490f97ca), TOBN(0x288f09c6, 0x67a1ce18),
+     TOBN(0x364bb886, 0x1844478d), TOBN(0x7840fa42, 0xceedb040),
+     TOBN(0x1269fdd2, 0x5a631b37), TOBN(0x94761f1e, 0xa47c8b7d),
+     TOBN(0xfc0c2e17, 0x481c6266), TOBN(0x85e16ea2, 0x3daa5fa7),
+     TOBN(0xccd86033, 0x92491048), TOBN(0x0c2f6963, 0xf4d402d7),
+     TOBN(0x6336f7df, 0xdf6a865c), TOBN(0x0a2a463c, 0xb5c02a87),
+     TOBN(0xb0e29be7, 0xbf2f12ee), TOBN(0xf0a22002, 0x66bad988),
+     TOBN(0x27f87e03, 0x9123c1d7), TOBN(0x21669c55, 0x328a8c98),
+     TOBN(0x186b9803, 0x92f14529), TOBN(0xd3d056cc, 0x63954df3),
+     TOBN(0x2f03fd58, 0x175a46f6), TOBN(0x63e34ebe, 0x11558558),
+     TOBN(0xe13fedee, 0x5b80cfa5), TOBN(0xe872a120, 0xd401dbd1),
+     TOBN(0x52657616, 0xe8a9d667), TOBN(0xbc8da4b6, 0xe08d6693),
+     TOBN(0x370fb9bb, 0x1b703e75), TOBN(0x6773b186, 0xd4338363),
+     TOBN(0x18dad378, 0xecef7bff), TOBN(0xaac787ed, 0x995677da),
+     TOBN(0x4801ea8b, 0x0437164b), TOBN(0xf430ad20, 0x73fe795e),
+     TOBN(0xb164154d, 0x8ee5eb73), TOBN(0x0884ecd8, 0x108f7c0e),
+     TOBN(0x0e6ec096, 0x5f520698), TOBN(0x640631fe, 0x44f7b8d9),
+     TOBN(0x92fd34fc, 0xa35a68b9), TOBN(0x9c5a4b66, 0x4d40cf4e),
+     TOBN(0x949454bf, 0x80b6783d), TOBN(0x80e701fe, 0x3a320a10),
+     TOBN(0x8d1a564a, 0x1a0a39b2), TOBN(0x1436d53d, 0x320587db),
+     TOBN(0xf5096e6d, 0x6556c362), TOBN(0xbc23a3c0, 0xe2455d7e),
+     TOBN(0x3a7aee54, 0x807230f9), TOBN(0x9ba1cfa6, 0x22ae82fd),
+     TOBN(0x833a057a, 0x99c5d706), TOBN(0x8be85f4b, 0x842315c9),
+     TOBN(0xd083179a, 0x66a72f12), TOBN(0x2fc77d5d, 0xcdcc73cd),
+     TOBN(0x22b88a80, 0x5616ee30), TOBN(0xfb09548f, 0xe7ab1083),
+     TOBN(0x8ad6ab0d, 0x511270cd), TOBN(0x61f6c57a, 0x6924d9ab),
+     TOBN(0xa0f7bf72, 0x90aecb08), TOBN(0x849f87c9, 0x0df784a4),
+     TOBN(0x27c79c15, 0xcfaf1d03), TOBN(0xbbf9f675, 0xc463face),
+     TOBN(0x91502c65, 0x765ba543), TOBN(0x18ce3cac, 0x42ea60dd),
+     TOBN(0xe5cee6ac, 0x6e43ecb3), TOBN(0x63e4e910, 0x68f2aeeb),
+     TOBN(0x26234fa3, 0xc85932ee), TOBN(0x96883e8b, 0x4c90c44d),
+     TOBN(0x29b9e738, 0xa18a50f6), TOBN(0xbfc62b2a, 0x3f0420df),
+     TOBN(0xd22a7d90, 0x6d3e1fa9), TOBN(0x17115618, 0xfe05b8a3),
+     TOBN(0x2a0c9926, 0xbb2b9c01), TOBN(0xc739fcc6, 0xe07e76a2),
+     TOBN(0x540e9157, 0x165e439a), TOBN(0x06353a62, 0x6a9063d8),
+     TOBN(0x84d95594, 0x61e927a3), TOBN(0x013b9b26, 0xe2e0be7f),
+     TOBN(0x4feaec3b, 0x973497f1), TOBN(0x15c0f94e, 0x093ebc2d),
+     TOBN(0x6af5f227, 0x33af0583), TOBN(0x0c2af206, 0xc61f3340),
+     TOBN(0xd25dbdf1, 0x4457397c), TOBN(0x2e8ed017, 0xcabcbae0),
+     TOBN(0xe3010938, 0xc2815306), TOBN(0xbaa99337, 0xe8c6cd68),
+     TOBN(0x08513182, 0x3b0ec7de), TOBN(0x1e1b822b, 0x58df05df),
+     TOBN(0x5c14842f, 0xa5c3b683), TOBN(0x98fe977e, 0x3eba34ce),
+     TOBN(0xfd2316c2, 0x0d5e8873), TOBN(0xe48d839a, 0xbd0d427d),
+     TOBN(0x495b2218, 0x623fc961), TOBN(0x24ee56e7, 0xb46fba5e),
+     TOBN(0x9184a55b, 0x91e4de58), TOBN(0xa7488ca5, 0xdfdea288),
+     TOBN(0xa723862e, 0xa8dcc943), TOBN(0x92d762b2, 0x849dc0fc),
+     TOBN(0x3c444a12, 0x091ff4a9), TOBN(0x581113fa, 0x0cada274),
+     TOBN(0xb9de0a45, 0x30d8eae2), TOBN(0x5e0fcd85, 0xdf6b41ea),
+     TOBN(0x6233ea68, 0xc094dbb5), TOBN(0xb77d062e, 0xd968d410),
+     TOBN(0x3e719bbc, 0x58b3002d), TOBN(0x68e7dd3d, 0x3dc49d58),
+     TOBN(0x8d825740, 0x013a5e58), TOBN(0x21311747, 0x3c9e3c1b),
+     TOBN(0x0cb0a2a7, 0x7c99b6ab), TOBN(0x5c48a3b3, 0xc2f888f2)}
+    ,
+    {TOBN(0xc7913e91, 0x991724f3), TOBN(0x5eda799c, 0x39cbd686),
+     TOBN(0xddb595c7, 0x63d4fc1e), TOBN(0x6b63b80b, 0xac4fed54),
+     TOBN(0x6ea0fc69, 0x7e5fb516), TOBN(0x737708ba, 0xd0f1c964),
+     TOBN(0x9628745f, 0x11a92ca5), TOBN(0x61f37958, 0x9a86967a),
+     TOBN(0x9af39b2c, 0xaa665072), TOBN(0x78322fa4, 0xefd324ef),
+     TOBN(0x3d153394, 0xc327bd31), TOBN(0x81d5f271, 0x3129dab0),
+     TOBN(0xc72e0c42, 0xf48027f5), TOBN(0xaa40cdbc, 0x8536e717),
+     TOBN(0xf45a657a, 0x2d369d0f), TOBN(0xb03bbfc4, 0xea7f74e6),
+     TOBN(0x46a8c418, 0x0d738ded), TOBN(0x6f1a5bb0, 0xe0de5729),
+     TOBN(0xf10230b9, 0x8ba81675), TOBN(0x32c6f30c, 0x112b33d4),
+     TOBN(0x7559129d, 0xd8fffb62), TOBN(0x6a281b47, 0xb459bf05),
+     TOBN(0x77c1bd3a, 0xfa3b6776), TOBN(0x0709b380, 0x7829973a),
+     TOBN(0x8c26b232, 0xa3326505), TOBN(0x38d69272, 0xee1d41bf),
+     TOBN(0x0459453e, 0xffe32afa), TOBN(0xce8143ad, 0x7cb3ea87),
+     TOBN(0x932ec1fa, 0x7e6ab666), TOBN(0x6cd2d230, 0x22286264),
+     TOBN(0x459a46fe, 0x6736f8ed), TOBN(0x50bf0d00, 0x9eca85bb),
+     TOBN(0x0b825852, 0x877a21ec), TOBN(0x300414a7, 0x0f537a94),
+     TOBN(0x3f1cba40, 0x21a9a6a2), TOBN(0x50824eee, 0x76943c00),
+     TOBN(0xa0dbfcec, 0xf83cba5d), TOBN(0xf9538148, 0x93b4f3c0),
+     TOBN(0x61744162, 0x48f24dd7), TOBN(0x5322d64d, 0xe4fb09dd),
+     TOBN(0x57447384, 0x3d9325f3), TOBN(0xa9bef2d0, 0xf371cb84),
+     TOBN(0x77d2188b, 0xa61e36c5), TOBN(0xbbd6a7d7, 0xc602df72),
+     TOBN(0xba3aa902, 0x8f61bc0b), TOBN(0xf49085ed, 0x6ed0b6a1),
+     TOBN(0x8bc625d6, 0xae6e8298), TOBN(0x832b0b1d, 0xa2e9c01d),
+     TOBN(0xa337c447, 0xf1f0ced1), TOBN(0x800cc793, 0x9492dd2b),
+     TOBN(0x4b93151d, 0xbea08efa), TOBN(0x820cf3f8, 0xde0a741e),
+     TOBN(0xff1982dc, 0x1c0f7d13), TOBN(0xef921960, 0x84dde6ca),
+     TOBN(0x1ad7d972, 0x45f96ee3), TOBN(0x319c8dbe, 0x29dea0c7),
+     TOBN(0xd3ea3871, 0x7b82b99b), TOBN(0x75922d4d, 0x470eb624),
+     TOBN(0x8f66ec54, 0x3b95d466), TOBN(0x66e673cc, 0xbee1e346),
+     TOBN(0x6afe67c4, 0xb5f2b89a), TOBN(0x3de9c1e6, 0x290e5cd3),
+     TOBN(0x8c278bb6, 0x310a2ada), TOBN(0x420fa384, 0x0bdb323b),
+     TOBN(0x0ae1d63b, 0x0eb919b0), TOBN(0xd74ee51d, 0xa74b9620),
+     TOBN(0x395458d0, 0xa674290c), TOBN(0x324c930f, 0x4620a510),
+     TOBN(0x2d1f4d19, 0xfbac27d4), TOBN(0x4086e8ca, 0x9bedeeac),
+     TOBN(0x0cdd211b, 0x9b679ab8), TOBN(0x5970167d, 0x7090fec4),
+     TOBN(0x3420f2c9, 0xfaf1fc63), TOBN(0x616d333a, 0x328c8bb4),
+     TOBN(0x7d65364c, 0x57f1fe4a), TOBN(0x9343e877, 0x55e5c73a),
+     TOBN(0x5795176b, 0xe970e78c), TOBN(0xa36ccebf, 0x60533627),
+     TOBN(0xfc7c7380, 0x09cdfc1b), TOBN(0xb39a2afe, 0xb3fec326),
+     TOBN(0xb7ff1ba1, 0x6224408a), TOBN(0xcc856e92, 0x247cfc5e),
+     TOBN(0x01f102e7, 0xc18bc493), TOBN(0x4613ab74, 0x2091c727),
+     TOBN(0xaa25e89c, 0xc420bf2b), TOBN(0x00a53176, 0x90337ec2),
+     TOBN(0xd2be9f43, 0x7d025fc7), TOBN(0x3316fb85, 0x6e6fe3dc),
+     TOBN(0x27520af5, 0x9ac50814), TOBN(0xfdf95e78, 0x9a8e4223),
+     TOBN(0xb7e7df2a, 0x56bec5a0), TOBN(0xf7022f7d, 0xdf159e5d),
+     TOBN(0x93eeeab1, 0xcac1fe8f), TOBN(0x8040188c, 0x37451168),
+     TOBN(0x7ee8aa8a, 0xd967dce6), TOBN(0xfa0e79e7, 0x3abc9299),
+     TOBN(0x67332cfc, 0x2064cfd1), TOBN(0x339c31de, 0xb0651934),
+     TOBN(0x719b28d5, 0x2a3bcbea), TOBN(0xee74c82b, 0x9d6ae5c6),
+     TOBN(0x0927d05e, 0xbaf28ee6), TOBN(0x82cecf2c, 0x9d719028),
+     TOBN(0x0b0d353e, 0xddb30289), TOBN(0xfe4bb977, 0xfddb2e29),
+     TOBN(0xbb5bb990, 0x640bfd9e), TOBN(0xd226e277, 0x82f62108),
+     TOBN(0x4bf00985, 0x02ffdd56), TOBN(0x7756758a, 0x2ca1b1b5),
+     TOBN(0xc32b62a3, 0x5285fe91), TOBN(0xedbc546a, 0x8c9cd140),
+     TOBN(0x1e47a013, 0xaf5cb008), TOBN(0xbca7e720, 0x073ce8f2),
+     TOBN(0xe10b2ab8, 0x17a91cae), TOBN(0xb89aab65, 0x08e27f63),
+     TOBN(0x7b3074a7, 0xdba3ddf9), TOBN(0x1c20ce09, 0x330c2972),
+     TOBN(0x6b9917b4, 0x5fcf7e33), TOBN(0xe6793743, 0x945ceb42),
+     TOBN(0x18fc2215, 0x5c633d19), TOBN(0xad1adb3c, 0xc7485474),
+     TOBN(0x646f9679, 0x6424c49b), TOBN(0xf888dfe8, 0x67c241c9),
+     TOBN(0xe12d4b93, 0x24f68b49), TOBN(0x9a6b62d8, 0xa571df20),
+     TOBN(0x81b4b26d, 0x179483cb), TOBN(0x666f9632, 0x9511fae2),
+     TOBN(0xd281b3e4, 0xd53aa51f), TOBN(0x7f96a765, 0x7f3dbd16),
+     TOBN(0xa7f8b5bf, 0x074a30ce), TOBN(0xd7f52107, 0x005a32e6),
+     TOBN(0x6f9e0907, 0x50237ed4), TOBN(0x2f21da47, 0x8096fa2b),
+     TOBN(0xf3e19cb4, 0xeec863a0), TOBN(0xd18f77fd, 0x9527620a),
+     TOBN(0x9505c81c, 0x407c1cf8), TOBN(0x9998db4e, 0x1b6ec284),
+     TOBN(0x7e3389e5, 0xc247d44d), TOBN(0x12507141, 0x3f4f3d80),
+     TOBN(0xd4ba0110, 0x4a78a6c7), TOBN(0x312874a0, 0x767720be),
+     TOBN(0xded059a6, 0x75944370), TOBN(0xd6123d90, 0x3b2c0bdd),
+     TOBN(0xa56b717b, 0x51c108e3), TOBN(0x9bb7940e, 0x070623e9),
+     TOBN(0x794e2d59, 0x84ac066c), TOBN(0xf5954a92, 0xe68c69a0),
+     TOBN(0x28c52458, 0x4fd99dcc), TOBN(0x60e639fc, 0xb1012517),
+     TOBN(0xc2e60125, 0x7de79248), TOBN(0xe9ef6404, 0xf12fc6d7),
+     TOBN(0x4c4f2808, 0x2a3b5d32), TOBN(0x865ad32e, 0xc768eb8a),
+     TOBN(0xac02331b, 0x13fb70b6), TOBN(0x037b44c1, 0x95599b27),
+     TOBN(0x1a860fc4, 0x60bd082c), TOBN(0xa2e25745, 0xc980cd01),
+     TOBN(0xee3387a8, 0x1da0263e), TOBN(0x931bfb95, 0x2d10f3d6),
+     TOBN(0x5b687270, 0xa1f24a32), TOBN(0xf140e65d, 0xca494b86),
+     TOBN(0x4f4ddf91, 0xb2f1ac7a), TOBN(0xf99eaabb, 0x760fee27),
+     TOBN(0x57f4008a, 0x49c228e5), TOBN(0x090be440, 0x1cf713bb),
+     TOBN(0xac91fbe4, 0x5004f022), TOBN(0xd838c2c2, 0x569e1af6),
+     TOBN(0xd6c7d20b, 0x0f1daaa5), TOBN(0xaa063ac1, 0x1bbb02c0),
+     TOBN(0x0938a422, 0x59558a78), TOBN(0x5343c669, 0x8435da2f),
+     TOBN(0x96f67b18, 0x034410dc), TOBN(0x7cc1e424, 0x84510804),
+     TOBN(0x86a1543f, 0x16dfbb7d), TOBN(0x921fa942, 0x5b5bd592),
+     TOBN(0x9dcccb6e, 0xb33dd03c), TOBN(0x8581ddd9, 0xb843f51e),
+     TOBN(0x54935fcb, 0x81d73c9e), TOBN(0x6d07e979, 0x0a5e97ab),
+     TOBN(0x4dc7b30a, 0xcf3a6bab), TOBN(0x147ab1f3, 0x170bee11),
+     TOBN(0x0aaf8e3d, 0x9fafdee4), TOBN(0xfab3dbcb, 0x538a8b95),
+     TOBN(0x405df4b3, 0x6ef13871), TOBN(0xf1f4e9cb, 0x088d5a49),
+     TOBN(0x9bcd24d3, 0x66b33f1d), TOBN(0x3b97b820, 0x5ce445c0),
+     TOBN(0xe2926549, 0xba93ff61), TOBN(0xd9c341ce, 0x4dafe616),
+     TOBN(0xfb30a76e, 0x16efb6f3), TOBN(0xdf24b8ca, 0x605b953c),
+     TOBN(0x8bd52afe, 0xc2fffb9f), TOBN(0xbbac5ff7, 0xe19d0b96),
+     TOBN(0x43c01b87, 0x459afccd), TOBN(0x6bd45143, 0xb7432652),
+     TOBN(0x84734530, 0x55b5d78e), TOBN(0x81088fdb, 0x1554ba7d),
+     TOBN(0xada0a52c, 0x1e269375), TOBN(0xf9f037c4, 0x2dc5ec10),
+     TOBN(0xc0660607, 0x94bfbc11), TOBN(0xc0a630bb, 0xc9c40d2f),
+     TOBN(0x5efc797e, 0xab64c31e), TOBN(0xffdb1dab, 0x74507144),
+     TOBN(0xf6124287, 0x1ca6790c), TOBN(0xe9609d81, 0xe69bf1bf),
+     TOBN(0xdb898595, 0x00d24fc9), TOBN(0x9c750333, 0xe51fb417),
+     TOBN(0x51830a91, 0xfef7bbde), TOBN(0x0ce67dc8, 0x945f585c),
+     TOBN(0x9a730ed4, 0x4763eb50), TOBN(0x24a0e221, 0xc1ab0d66),
+     TOBN(0x643b6393, 0x648748f3), TOBN(0x1982daa1, 0x6d3c6291),
+     TOBN(0x6f00a9f7, 0x8bbc5549), TOBN(0x7a1783e1, 0x7f36384e),
+     TOBN(0xe8346323, 0xde977f50), TOBN(0x91ab688d, 0xb245502a),
+     TOBN(0x331ab6b5, 0x6d0bdd66), TOBN(0x0a6ef32e, 0x64b71229),
+     TOBN(0x1028150e, 0xfe7c352f), TOBN(0x27e04350, 0xce7b39d3),
+     TOBN(0x2a3c8acd, 0xc1070c82), TOBN(0xfb2034d3, 0x80c9feef),
+     TOBN(0x2d729621, 0x709f3729), TOBN(0x8df290bf, 0x62cb4549),
+     TOBN(0x02f99f33, 0xfc2e4326), TOBN(0x3b30076d, 0x5eddf032),
+     TOBN(0xbb21f8cf, 0x0c652fb5), TOBN(0x314fb49e, 0xed91cf7b),
+     TOBN(0xa013eca5, 0x2f700750), TOBN(0x2b9e3c23, 0x712a4575),
+     TOBN(0xe5355557, 0xaf30fbb0), TOBN(0x1ada3516, 0x7c77e771),
+     TOBN(0x45f6ecb2, 0x7b135670), TOBN(0xe85d19df, 0x7cfc202e),
+     TOBN(0x0f1b50c7, 0x58d1be9f), TOBN(0x5ebf2c0a, 0xead2e344),
+     TOBN(0x1531fe4e, 0xabc199c9), TOBN(0xc7032592, 0x56bab0ae),
+     TOBN(0x16ab2e48, 0x6c1fec54), TOBN(0x0f87fda8, 0x04280188),
+     TOBN(0xdc9f46fc, 0x609e4a74), TOBN(0x2a44a143, 0xba667f91),
+     TOBN(0xbc3d8b95, 0xb4d83436), TOBN(0xa01e4bd0, 0xc7bd2958),
+     TOBN(0x7b182932, 0x73483c90), TOBN(0xa79c6aa1, 0xa7c7b598),
+     TOBN(0xbf3983c6, 0xeaaac07e), TOBN(0x8f18181e, 0x96e0d4e6),
+     TOBN(0x8553d37c, 0x051af62b), TOBN(0xe9a998eb, 0x0bf94496),
+     TOBN(0xe0844f9f, 0xb0d59aa1), TOBN(0x983fd558, 0xe6afb813),
+     TOBN(0x9670c0ca, 0x65d69804), TOBN(0x732b22de, 0x6ea5ff2d),
+     TOBN(0xd7640ba9, 0x5fd8623b), TOBN(0x9f619163, 0xa6351782),
+     TOBN(0x0bfc27ee, 0xacee5043), TOBN(0xae419e73, 0x2eb10f02),
+     TOBN(0x19c028d1, 0x8943fb05), TOBN(0x71f01cf7, 0xff13aa2a),
+     TOBN(0x7790737e, 0x8887a132), TOBN(0x67513309, 0x66318410),
+     TOBN(0x9819e8a3, 0x7ddb795e), TOBN(0xfecb8ef5, 0xdad100b2),
+     TOBN(0x59f74a22, 0x3021926a), TOBN(0xb7c28a49, 0x6f9b4c1c),
+     TOBN(0xed1a733f, 0x912ad0ab), TOBN(0x42a910af, 0x01a5659c),
+     TOBN(0x3842c6e0, 0x7bd68cab), TOBN(0x2b57fa38, 0x76d70ac8),
+     TOBN(0x8a6707a8, 0x3c53aaeb), TOBN(0x62c1c510, 0x65b4db18),
+     TOBN(0x8de2c1fb, 0xb2d09dc7), TOBN(0xc3dfed12, 0x266bd23b),
+     TOBN(0x927d039b, 0xd5b27db6), TOBN(0x2fb2f0f1, 0x103243da),
+     TOBN(0xf855a07b, 0x80be7399), TOBN(0xed9327ce, 0x1f9f27a8),
+     TOBN(0xa0bd99c7, 0x729bdef7), TOBN(0x2b67125e, 0x28250d88),
+     TOBN(0x784b26e8, 0x8670ced7), TOBN(0xe3dfe41f, 0xc31bd3b4),
+     TOBN(0x9e353a06, 0xbcc85cbc), TOBN(0x302e2909, 0x60178a9d),
+     TOBN(0x860abf11, 0xa6eac16e), TOBN(0x76447000, 0xaa2b3aac),
+     TOBN(0x46ff9d19, 0x850afdab), TOBN(0x35bdd6a5, 0xfdb2d4c1),
+     TOBN(0xe82594b0, 0x7e5c9ce9), TOBN(0x0f379e53, 0x20af346e),
+     TOBN(0x608b31e3, 0xbc65ad4a), TOBN(0x710c6b12, 0x267c4826),
+     TOBN(0x51c966f9, 0x71954cf1), TOBN(0xb1cec793, 0x0d0aa215),
+     TOBN(0x1f155989, 0x86bd23a8), TOBN(0xae2ff99c, 0xf9452e86),
+     TOBN(0xd8dd953c, 0x340ceaa2), TOBN(0x26355275, 0x2e2e9333),
+     TOBN(0x15d4e5f9, 0x8586f06d), TOBN(0xd6bf94a8, 0xf7cab546),
+     TOBN(0x33c59a0a, 0xb76a9af0), TOBN(0x52740ab3, 0xba095af7),
+     TOBN(0xc444de8a, 0x24389ca0), TOBN(0xcc6f9863, 0x706da0cb),
+     TOBN(0xb5a741a7, 0x6b2515cf), TOBN(0x71c41601, 0x9585c749),
+     TOBN(0x78350d4f, 0xe683de97), TOBN(0x31d61524, 0x63d0b5f5),
+     TOBN(0x7a0cc5e1, 0xfbce090b), TOBN(0xaac927ed, 0xfbcb2a5b),
+     TOBN(0xe920de49, 0x20d84c35), TOBN(0x8c06a0b6, 0x22b4de26),
+     TOBN(0xd34dd58b, 0xafe7ddf3), TOBN(0x55851fed, 0xc1e6e55b),
+     TOBN(0xd1395616, 0x960696e7), TOBN(0x940304b2, 0x5f22705f),
+     TOBN(0x6f43f861, 0xb0a2a860), TOBN(0xcf121282, 0x0e7cc981),
+     TOBN(0x12186212, 0x0ab64a96), TOBN(0x09215b9a, 0xb789383c),
+     TOBN(0x311eb305, 0x37387c09), TOBN(0xc5832fce, 0xf03ee760),
+     TOBN(0x30358f58, 0x32f7ea19), TOBN(0xe01d3c34, 0x91d53551),
+     TOBN(0x1ca5ee41, 0xda48ea80), TOBN(0x34e71e8e, 0xcf4fa4c1),
+     TOBN(0x312abd25, 0x7af1e1c7), TOBN(0xe3afcdeb, 0x2153f4a5),
+     TOBN(0x9d5c84d7, 0x00235e9a), TOBN(0x0308d3f4, 0x8c4c836f),
+     TOBN(0xc0a66b04, 0x89332de5), TOBN(0x610dd399, 0x89e566ef),
+     TOBN(0xf8eea460, 0xd1ac1635), TOBN(0x84cbb3fb, 0x20a2c0df),
+     TOBN(0x40afb488, 0xe74a48c5), TOBN(0x29738198, 0xd326b150),
+     TOBN(0x2a17747f, 0xa6d74081), TOBN(0x60ea4c05, 0x55a26214),
+     TOBN(0x53514bb4, 0x1f88c5fe), TOBN(0xedd64567, 0x7e83426c),
+     TOBN(0xd5d6cbec, 0x96460b25), TOBN(0xa12fd0ce, 0x68dc115e),
+     TOBN(0xc5bc3ed2, 0x697840ea), TOBN(0x969876a8, 0xa6331e31),
+     TOBN(0x60c36217, 0x472ff580), TOBN(0xf4229705, 0x4ad41393),
+     TOBN(0x4bd99ef0, 0xa03b8b92), TOBN(0x501c7317, 0xc144f4f6),
+     TOBN(0x159009b3, 0x18464945), TOBN(0x6d5e594c, 0x74c5c6be),
+     TOBN(0x2d587011, 0x321a3660), TOBN(0xd1e184b1, 0x3898d022),
+     TOBN(0x5ba04752, 0x4c6a7e04), TOBN(0x47fa1e2b, 0x45550b65),
+     TOBN(0x9419daf0, 0x48c0a9a5), TOBN(0x66362953, 0x7c243236),
+     TOBN(0xcd0744b1, 0x5cb12a88), TOBN(0x561b6f9a, 0x2b646188),
+     TOBN(0x599415a5, 0x66c2c0c0), TOBN(0xbe3f0859, 0x0f83f09a),
+     TOBN(0x9141c5be, 0xb92041b8), TOBN(0x01ae38c7, 0x26477d0d),
+     TOBN(0xca8b71f3, 0xd12c7a94), TOBN(0xfab5b31f, 0x765c70db),
+     TOBN(0x76ae7492, 0x487443e9), TOBN(0x8595a310, 0x990d1349),
+     TOBN(0xf8dbeda8, 0x7d460a37), TOBN(0x7f7ad082, 0x1e45a38f),
+     TOBN(0xed1d4db6, 0x1059705a), TOBN(0xa3dd492a, 0xe6b9c697),
+     TOBN(0x4b92ee3a, 0x6eb38bd5), TOBN(0xbab2609d, 0x67cc0bb7),
+     TOBN(0x7fc4fe89, 0x6e70ee82), TOBN(0xeff2c56e, 0x13e6b7e3),
+     TOBN(0x9b18959e, 0x34d26fca), TOBN(0x2517ab66, 0x889d6b45),
+     TOBN(0xf167b4e0, 0xbdefdd4f), TOBN(0x69958465, 0xf366e401),
+     TOBN(0x5aa368ab, 0xa73bbec0), TOBN(0x12148709, 0x7b240c21),
+     TOBN(0x378c3233, 0x18969006), TOBN(0xcb4d73ce, 0xe1fe53d1),
+     TOBN(0x5f50a80e, 0x130c4361), TOBN(0xd67f5951, 0x7ef5212b),
+     TOBN(0xf145e21e, 0x9e70c72e), TOBN(0xb2e52e29, 0x5566d2fb),
+     TOBN(0x44eaba4a, 0x032397f5), TOBN(0x5e56937b, 0x7e31a7de),
+     TOBN(0x68dcf517, 0x456c61e1), TOBN(0xbc2e954a, 0xa8b0a388),
+     TOBN(0xe3552fa7, 0x60a8b755), TOBN(0x03442dae, 0x73ad0cde),
+     TOBN(0x37ffe747, 0xceb26210), TOBN(0x983545e8, 0x787baef9),
+     TOBN(0x8b8c8535, 0x86a3de31), TOBN(0xc621dbcb, 0xfacd46db),
+     TOBN(0x82e442e9, 0x59266fbb), TOBN(0xa3514c37, 0x339d471c),
+     TOBN(0x3a11b771, 0x62cdad96), TOBN(0xf0cb3b3c, 0xecf9bdf0),
+     TOBN(0x3fcbdbce, 0x478e2135), TOBN(0x7547b5cf, 0xbda35342),
+     TOBN(0xa97e81f1, 0x8a677af6), TOBN(0xc8c2bf83, 0x28817987),
+     TOBN(0xdf07eaaf, 0x45580985), TOBN(0xc68d1f05, 0xc93b45cb),
+     TOBN(0x106aa2fe, 0xc77b4cac), TOBN(0x4c1d8afc, 0x04a7ae86),
+     TOBN(0xdb41c3fd, 0x9eb45ab2), TOBN(0x5b234b5b, 0xd4b22e74),
+     TOBN(0xda253dec, 0xf215958a), TOBN(0x67e0606e, 0xa04edfa0),
+     TOBN(0xabbbf070, 0xef751b11), TOBN(0xf352f175, 0xf6f06dce),
+     TOBN(0xdfc4b6af, 0x6839f6b4), TOBN(0x53ddf9a8, 0x9959848e),
+     TOBN(0xda49c379, 0xc21520b0), TOBN(0x90864ff0, 0xdbd5d1b6),
+     TOBN(0x2f055d23, 0x5f49c7f7), TOBN(0xe51e4e6a, 0xa796b2d8),
+     TOBN(0xc361a67f, 0x5c9dc340), TOBN(0x5ad53c37, 0xbca7c620),
+     TOBN(0xda1d6588, 0x32c756d0), TOBN(0xad60d911, 0x8bb67e13),
+     TOBN(0xd6c47bdf, 0x0eeec8c6), TOBN(0x4a27fec1, 0x078a1821),
+     TOBN(0x081f7415, 0xc3099524), TOBN(0x8effdf0b, 0x82cd8060),
+     TOBN(0xdb70ec1c, 0x65842df8), TOBN(0x8821b358, 0xd319a901),
+     TOBN(0x72ee56ee, 0xde42b529), TOBN(0x5bb39592, 0x236e4286),
+     TOBN(0xd1183316, 0xfd6f7140), TOBN(0xf9fadb5b, 0xbd8e81f7),
+     TOBN(0x701d5e0c, 0x5a02d962), TOBN(0xfdee4dbf, 0x1b601324),
+     TOBN(0xbed17407, 0x35d7620e), TOBN(0x04e3c2c3, 0xf48c0012),
+     TOBN(0x9ee29da7, 0x3455449a), TOBN(0x562cdef4, 0x91a836c4),
+     TOBN(0x8f682a5f, 0x47701097), TOBN(0x617125d8, 0xff88d0c2),
+     TOBN(0x948fda24, 0x57bb86dd), TOBN(0x348abb8f, 0x289f7286),
+     TOBN(0xeb10eab5, 0x99d94bbd), TOBN(0xd51ba28e, 0x4684d160),
+     TOBN(0xabe0e51c, 0x30c8f41a), TOBN(0x66588b45, 0x13254f4a),
+     TOBN(0x147ebf01, 0xfad097a5), TOBN(0x49883ea8, 0x610e815d),
+     TOBN(0xe44d60ba, 0x8a11de56), TOBN(0xa970de6e, 0x827a7a6d),
+     TOBN(0x2be41424, 0x5e17fc19), TOBN(0xd833c657, 0x01214057),
+     TOBN(0x1375813b, 0x363e723f), TOBN(0x6820bb88, 0xe6a52e9b),
+     TOBN(0x7e7f6970, 0xd875d56a), TOBN(0xd6a0a9ac, 0x51fbf6bf),
+     TOBN(0x54ba8790, 0xa3083c12), TOBN(0xebaeb23d, 0x6ae7eb64),
+     TOBN(0xa8685c3a, 0xb99a907a), TOBN(0xf1e74550, 0x026bf40b),
+     TOBN(0x7b73a027, 0xc802cd9e), TOBN(0x9a8a927c, 0x4fef4635),
+     TOBN(0xe1b6f60c, 0x08191224), TOBN(0xc4126ebb, 0xde4ec091),
+     TOBN(0xe1dff4dc, 0x4ae38d84), TOBN(0xde3f57db, 0x4f2ef985),
+     TOBN(0x34964337, 0xd446a1dd), TOBN(0x7bf217a0, 0x859e77f6),
+     TOBN(0x8ff10527, 0x8e1d13f5), TOBN(0xa304ef03, 0x74eeae27),
+     TOBN(0xfc6f5e47, 0xd19dfa5a), TOBN(0xdb007de3, 0x7fad982b),
+     TOBN(0x28205ad1, 0x613715f5), TOBN(0x251e6729, 0x7889529e),
+     TOBN(0x72705184, 0x1ae98e78), TOBN(0xf818537d, 0x271cac32),
+     TOBN(0xc8a15b7e, 0xb7f410f5), TOBN(0xc474356f, 0x81f62393),
+     TOBN(0x92dbdc5a, 0xc242316b), TOBN(0xabe060ac, 0xdbf4aff5),
+     TOBN(0x6e8c38fe, 0x909a8ec6), TOBN(0x43e514e5, 0x6116cb94),
+     TOBN(0x2078fa38, 0x07d784f9), TOBN(0x1161a880, 0xf4b5b357),
+     TOBN(0x5283ce79, 0x13adea3d), TOBN(0x0756c3e6, 0xcc6a910b),
+     TOBN(0x60bcfe01, 0xaaa79697), TOBN(0x04a73b29, 0x56391db1),
+     TOBN(0xdd8dad47, 0x189b45a0), TOBN(0xbfac0dd0, 0x48d5b8d9),
+     TOBN(0x34ab3af5, 0x7d3d2ec2), TOBN(0x6fa2fc2d, 0x207bd3af),
+     TOBN(0x9ff40092, 0x66550ded), TOBN(0x719b3e87, 0x1fd5b913),
+     TOBN(0xa573a496, 0x6d17fbc7), TOBN(0x0cd1a70a, 0x73d2b24e),
+     TOBN(0x34e2c5ca, 0xb2676937), TOBN(0xe7050b06, 0xbf669f21),
+     TOBN(0xfbe948b6, 0x1ede9046), TOBN(0xa0530051, 0x97662659),
+     TOBN(0x58cbd4ed, 0xf10124c5), TOBN(0xde2646e4, 0xdd6c06c8),
+     TOBN(0x332f8108, 0x8cad38c0), TOBN(0x471b7e90, 0x6bd68ae2),
+     TOBN(0x56ac3fb2, 0x0d8e27a3), TOBN(0xb54660db, 0x136b4b0d),
+     TOBN(0x123a1e11, 0xa6fd8de4), TOBN(0x44dbffea, 0xa37799ef),
+     TOBN(0x4540b977, 0xce6ac17c), TOBN(0x495173a8, 0xaf60acef)}
+    ,
+    {TOBN(0x9ebb284d, 0x391c2a82), TOBN(0xbcdd4863, 0x158308e8),
+     TOBN(0x006f16ec, 0x83f1edca), TOBN(0xa13e2c37, 0x695dc6c8),
+     TOBN(0x2ab756f0, 0x4a057a87), TOBN(0xa8765500, 0xa6b48f98),
+     TOBN(0x4252face, 0x68651c44), TOBN(0xa52b540b, 0xe1765e02),
+     TOBN(0x4f922fc5, 0x16a0d2bb), TOBN(0x0d5cc16c, 0x1a623499),
+     TOBN(0x9241cf3a, 0x57c62c8b), TOBN(0x2f5e6961, 0xfd1b667f),
+     TOBN(0x5c15c70b, 0xf5a01797), TOBN(0x3d20b44d, 0x60956192),
+     TOBN(0x04911b37, 0x071fdb52), TOBN(0xf648f916, 0x8d6f0f7b),
+     TOBN(0x6dc1acaf, 0xe60b7cf7), TOBN(0x25860a50, 0x84a9d869),
+     TOBN(0x56fc6f09, 0xe7ba8ac4), TOBN(0x828c5bd0, 0x6148d29e),
+     TOBN(0xac6b435e, 0xdc55ae5f), TOBN(0xa527f56c, 0xc0117411),
+     TOBN(0x94d5045e, 0xfd24342c), TOBN(0x2c4c0a35, 0x70b67c0d),
+     TOBN(0x027cc8b8, 0xfac61d9a), TOBN(0x7d25e062, 0xe3c6fe8a),
+     TOBN(0xe08805bf, 0xe5bff503), TOBN(0x13271e6c, 0x6ff632f7),
+     TOBN(0x55dca6c0, 0x232f76a5), TOBN(0x8957c32d, 0x701ef426),
+     TOBN(0xee728bcb, 0xa10a5178), TOBN(0x5ea60411, 0xb62c5173),
+     TOBN(0xfc4e964e, 0xd0b8892b), TOBN(0x9ea17683, 0x9301bb74),
+     TOBN(0x6265c5ae, 0xfcc48626), TOBN(0xe60cf82e, 0xbb3e9102),
+     TOBN(0x57adf797, 0xd4df5531), TOBN(0x235b59a1, 0x8deeefe2),
+     TOBN(0x60adcf58, 0x3f306eb1), TOBN(0x105c2753, 0x3d09492d),
+     TOBN(0x4090914b, 0xb5def996), TOBN(0x1cb69c83, 0x233dd1e7),
+     TOBN(0xc1e9c1d3, 0x9b3d5e76), TOBN(0x1f3338ed, 0xfccf6012),
+     TOBN(0xb1e95d0d, 0x2f5378a8), TOBN(0xacf4c2c7, 0x2f00cd21),
+     TOBN(0x6e984240, 0xeb5fe290), TOBN(0xd66c038d, 0x248088ae),
+     TOBN(0x804d264a, 0xf94d70cf), TOBN(0xbdb802ef, 0x7314bf7e),
+     TOBN(0x8fb54de2, 0x4333ed02), TOBN(0x740461e0, 0x285635d9),
+     TOBN(0x4113b2c8, 0x365e9383), TOBN(0xea762c83, 0x3fdef652),
+     TOBN(0x4eec6e2e, 0x47b956c1), TOBN(0xa3d814be, 0x65620fa4),
+     TOBN(0x9ad5462b, 0xb4d8bc50), TOBN(0x181c0b16, 0xa9195770),
+     TOBN(0xebd4fe1c, 0x78412a68), TOBN(0xae0341bc, 0xc0dff48c),
+     TOBN(0xb6bc45cf, 0x7003e866), TOBN(0xf11a6dea, 0x8a24a41b),
+     TOBN(0x5407151a, 0xd04c24c2), TOBN(0x62c9d27d, 0xda5b7b68),
+     TOBN(0x2e964235, 0x88cceff6), TOBN(0x8594c54f, 0x8b07ed69),
+     TOBN(0x1578e73c, 0xc84d0d0d), TOBN(0x7b4e1055, 0xff532868),
+     TOBN(0xa348c0d5, 0xb5ec995a), TOBN(0xbf4b9d55, 0x14289a54),
+     TOBN(0x9ba155a6, 0x58fbd777), TOBN(0x186ed7a8, 0x1a84491d),
+     TOBN(0xd4992b30, 0x614c0900), TOBN(0xda98d121, 0xbd00c24b),
+     TOBN(0x7f534dc8, 0x7ec4bfa1), TOBN(0x4a5ff674, 0x37dc34bc),
+     TOBN(0x68c196b8, 0x1d7ea1d7), TOBN(0x38cf2893, 0x80a6d208),
+     TOBN(0xfd56cd09, 0xe3cbbd6e), TOBN(0xec72e27e, 0x4205a5b6),
+     TOBN(0x15ea68f5, 0xa44f77f7), TOBN(0x7aa5f9fd, 0xb43c52bc),
+     TOBN(0x86ff676f, 0x94f0e609), TOBN(0xa4cde963, 0x2e2d432b),
+     TOBN(0x8cafa0c0, 0xeee470af), TOBN(0x84137d0e, 0x8a3f5ec8),
+     TOBN(0xebb40411, 0xfaa31231), TOBN(0xa239c13f, 0x6f7f7ccf),
+     TOBN(0x32865719, 0xa8afd30b), TOBN(0x86798328, 0x8a826dce),
+     TOBN(0xdf04e891, 0xc4a8fbe0), TOBN(0xbb6b6e1b, 0xebf56ad3),
+     TOBN(0x0a695b11, 0x471f1ff0), TOBN(0xd76c3389, 0xbe15baf0),
+     TOBN(0x018edb95, 0xbe96c43e), TOBN(0xf2beaaf4, 0x90794158),
+     TOBN(0x152db09e, 0xc3076a27), TOBN(0x5e82908e, 0xe416545d),
+     TOBN(0xa2c41272, 0x356d6f2e), TOBN(0xdc9c9642, 0x31fd74e1),
+     TOBN(0x66ceb88d, 0x519bf615), TOBN(0xe29ecd76, 0x05a2274e),
+     TOBN(0x3a0473c4, 0xbf5e2fa0), TOBN(0x6b6eb671, 0x64284e67),
+     TOBN(0xe8b97932, 0xb88756dd), TOBN(0xed4e8652, 0xf17e3e61),
+     TOBN(0xc2dd1499, 0x3ee1c4a4), TOBN(0xc0aaee17, 0x597f8c0e),
+     TOBN(0x15c4edb9, 0x6c168af3), TOBN(0x6563c7bf, 0xb39ae875),
+     TOBN(0xadfadb6f, 0x20adb436), TOBN(0xad55e8c9, 0x9a042ac0),
+     TOBN(0x975a1ed8, 0xb76da1f5), TOBN(0x10dfa466, 0xa58acb94),
+     TOBN(0x8dd7f7e3, 0xac060282), TOBN(0x6813e66a, 0x572a051e),
+     TOBN(0xb4ccae1e, 0x350cb901), TOBN(0xb653d656, 0x50cb7822),
+     TOBN(0x42484710, 0xdfab3b87), TOBN(0xcd7ee537, 0x9b670fd0),
+     TOBN(0x0a50b12e, 0x523b8bf6), TOBN(0x8009eb5b, 0x8f910c1b),
+     TOBN(0xf535af82, 0x4a167588), TOBN(0x0f835f9c, 0xfb2a2abd),
+     TOBN(0xf59b2931, 0x2afceb62), TOBN(0xc797df2a, 0x169d383f),
+     TOBN(0xeb3f5fb0, 0x66ac02b0), TOBN(0x029d4c6f, 0xdaa2d0ca),
+     TOBN(0xd4059bc1, 0xafab4bc5), TOBN(0x833f5c6f, 0x56783247),
+     TOBN(0xb5346630, 0x8d2d3605), TOBN(0x83387891, 0xd34d8433),
+     TOBN(0xd973b30f, 0xadd9419a), TOBN(0xbcca1099, 0xafe3fce8),
+     TOBN(0x08178315, 0x0809aac6), TOBN(0x01b7f21a, 0x540f0f11),
+     TOBN(0x65c29219, 0x909523c8), TOBN(0xa62f648f, 0xa3a1c741),
+     TOBN(0x88598d4f, 0x60c9e55a), TOBN(0xbce9141b, 0x0e4f347a),
+     TOBN(0x9af97d84, 0x35f9b988), TOBN(0x0210da62, 0x320475b6),
+     TOBN(0x3c076e22, 0x9191476c), TOBN(0x7520dbd9, 0x44fc7834),
+     TOBN(0x6a6b2cfe, 0xc1ab1bbd), TOBN(0xef8a65be, 0xdc650938),
+     TOBN(0x72855540, 0x805d7bc4), TOBN(0xda389396, 0xed11fdfd),
+     TOBN(0xa9d5bd36, 0x74660876), TOBN(0x11d67c54, 0xb45dff35),
+     TOBN(0x6af7d148, 0xa4f5da94), TOBN(0xbb8d4c3f, 0xc0bbeb31),
+     TOBN(0x87a7ebd1, 0xe0a1b12a), TOBN(0x1e4ef88d, 0x770ba95f),
+     TOBN(0x8c33345c, 0xdc2ae9cb), TOBN(0xcecf1276, 0x01cc8403),
+     TOBN(0x687c012e, 0x1b39b80f), TOBN(0xfd90d0ad, 0x35c33ba4),
+     TOBN(0xa3ef5a67, 0x5c9661c2), TOBN(0x368fc88e, 0xe017429e),
+     TOBN(0xd30c6761, 0x196a2fa2), TOBN(0x931b9817, 0xbd5b312e),
+     TOBN(0xba01000c, 0x72f54a31), TOBN(0xa203d2c8, 0x66eaa541),
+     TOBN(0xf2abdee0, 0x98939db3), TOBN(0xe37d6c2c, 0x3e606c02),
+     TOBN(0xf2921574, 0x521ff643), TOBN(0x2781b3c4, 0xd7e2fca3),
+     TOBN(0x664300b0, 0x7850ec06), TOBN(0xac5a38b9, 0x7d3a10cf),
+     TOBN(0x9233188d, 0xe34ab39d), TOBN(0xe77057e4, 0x5072cbb9),
+     TOBN(0xbcf0c042, 0xb59e78df), TOBN(0x4cfc91e8, 0x1d97de52),
+     TOBN(0x4661a26c, 0x3ee0ca4a), TOBN(0x5620a4c1, 0xfb8507bc),
+     TOBN(0x4b44d4aa, 0x049f842c), TOBN(0xceabc5d5, 0x1540e82b),
+     TOBN(0x306710fd, 0x15c6f156), TOBN(0xbe5ae52b, 0x63db1d72),
+     TOBN(0x06f1e7e6, 0x334957f1), TOBN(0x57e388f0, 0x31144a70),
+     TOBN(0xfb69bb2f, 0xdf96447b), TOBN(0x0f78ebd3, 0x73e38a12),
+     TOBN(0xb8222605, 0x2b7ce542), TOBN(0xe6d4ce99, 0x7472bde1),
+     TOBN(0x53e16ebe, 0x09d2f4da), TOBN(0x180ff42e, 0x53b92b2e),
+     TOBN(0xc59bcc02, 0x2c34a1c6), TOBN(0x3803d6f9, 0x422c46c2),
+     TOBN(0x18aff74f, 0x5c14a8a2), TOBN(0x55aebf80, 0x10a08b28),
+     TOBN(0x66097d58, 0x7135593f), TOBN(0x32e6eff7, 0x2be570cd),
+     TOBN(0x584e6a10, 0x2a8c860d), TOBN(0xcd185890, 0xa2eb4163),
+     TOBN(0x7ceae99d, 0x6d97e134), TOBN(0xd42c6b70, 0xdd8447ce),
+     TOBN(0x59ddbb4a, 0xb8c50273), TOBN(0x03c612df, 0x3cf34e1e),
+     TOBN(0x84b9ca15, 0x04b6c5a0), TOBN(0x35216f39, 0x18f0e3a3),
+     TOBN(0x3ec2d2bc, 0xbd986c00), TOBN(0x8bf546d9, 0xd19228fe),
+     TOBN(0xd1c655a4, 0x4cd623c3), TOBN(0x366ce718, 0x502b8e5a),
+     TOBN(0x2cfc84b4, 0xeea0bfe7), TOBN(0xe01d5cee, 0xcf443e8e),
+     TOBN(0x8ec045d9, 0x036520f8), TOBN(0xdfb3c3d1, 0x92d40e98),
+     TOBN(0x0bac4cce, 0xcc559a04), TOBN(0x35eccae5, 0x240ea6b1),
+     TOBN(0x180b32db, 0xf8a5a0ac), TOBN(0x547972a5, 0xeb699700),
+     TOBN(0xa3765801, 0xca26bca0), TOBN(0x57e09d0e, 0xa647f25a),
+     TOBN(0xb956970e, 0x2fdd23cc), TOBN(0xb80288bc, 0x5682e971),
+     TOBN(0xe6e6d91e, 0x9ae86ebc), TOBN(0x0564c83f, 0x8c9f1939),
+     TOBN(0x551932a2, 0x39560368), TOBN(0xe893752b, 0x049c28e2),
+     TOBN(0x0b03cee5, 0xa6a158c3), TOBN(0xe12d656b, 0x04964263),
+     TOBN(0x4b47554e, 0x63e3bc1d), TOBN(0xc719b6a2, 0x45044ff7),
+     TOBN(0x4f24d30a, 0xe48daa07), TOBN(0xa3f37556, 0xc8c1edc3),
+     TOBN(0x9a47bf76, 0x0700d360), TOBN(0xbb1a1824, 0x822ae4e2),
+     TOBN(0x22e275a3, 0x89f1fb4c), TOBN(0x72b1aa23, 0x9968c5f5),
+     TOBN(0xa75feaca, 0xbe063f64), TOBN(0x9b392f43, 0xbce47a09),
+     TOBN(0xd4241509, 0x1ad07aca), TOBN(0x4b0c591b, 0x8d26cd0f),
+     TOBN(0x2d42ddfd, 0x92f1169a), TOBN(0x63aeb1ac, 0x4cbf2392),
+     TOBN(0x1de9e877, 0x0691a2af), TOBN(0xebe79af7, 0xd98021da),
+     TOBN(0xcfdf2a4e, 0x40e50acf), TOBN(0xf0a98ad7, 0xaf01d665),
+     TOBN(0xefb640bf, 0x1831be1f), TOBN(0x6fe8bd2f, 0x80e9ada0),
+     TOBN(0x94c103a1, 0x6cafbc91), TOBN(0x170f8759, 0x8308e08c),
+     TOBN(0x5de2d2ab, 0x9780ff4f), TOBN(0x666466bc, 0x45b201f2),
+     TOBN(0x58af2010, 0xf5b343bc), TOBN(0x0f2e400a, 0xf2f142fe),
+     TOBN(0x3483bfde, 0xa85f4bdf), TOBN(0xf0b1d093, 0x03bfeaa9),
+     TOBN(0x2ea01b95, 0xc7081603), TOBN(0xe943e4c9, 0x3dba1097),
+     TOBN(0x47be92ad, 0xb438f3a6), TOBN(0x00bb7742, 0xe5bf6636),
+     TOBN(0x136b7083, 0x824297b4), TOBN(0x9d0e5580, 0x5584455f),
+     TOBN(0xab48cedc, 0xf1c7d69e), TOBN(0x53a9e481, 0x2a256e76),
+     TOBN(0x0402b0e0, 0x65eb2413), TOBN(0xdadbbb84, 0x8fc407a7),
+     TOBN(0xa65cd5a4, 0x8d7f5492), TOBN(0x21d44293, 0x74bae294),
+     TOBN(0x66917ce6, 0x3b5f1cc4), TOBN(0x37ae52ea, 0xce872e62),
+     TOBN(0xbb087b72, 0x2905f244), TOBN(0x12077086, 0x1e6af74f),
+     TOBN(0x4b644e49, 0x1058edea), TOBN(0x827510e3, 0xb638ca1d),
+     TOBN(0x8cf2b704, 0x6038591c), TOBN(0xffc8b47a, 0xfe635063),
+     TOBN(0x3ae220e6, 0x1b4d5e63), TOBN(0xbd864742, 0x9d961b4b),
+     TOBN(0x610c107e, 0x9bd16bed), TOBN(0x4270352a, 0x1127147b),
+     TOBN(0x7d17ffe6, 0x64cfc50e), TOBN(0x50dee01a, 0x1e36cb42),
+     TOBN(0x068a7622, 0x35dc5f9a), TOBN(0x9a08d536, 0xdf53f62c),
+     TOBN(0x4ed71457, 0x6be5f7de), TOBN(0xd93006f8, 0xc2263c9e),
+     TOBN(0xe073694c, 0xcacacb36), TOBN(0x2ff7a5b4, 0x3ae118ab),
+     TOBN(0x3cce53f1, 0xcd871236), TOBN(0xf156a39d, 0xc2aa6d52),
+     TOBN(0x9cc5f271, 0xb198d76d), TOBN(0xbc615b6f, 0x81383d39),
+     TOBN(0xa54538e8, 0xde3eee6b), TOBN(0x58c77538, 0xab910d91),
+     TOBN(0x31e5bdbc, 0x58d278bd), TOBN(0x3cde4adf, 0xb963acae),
+     TOBN(0xb1881fd2, 0x5302169c), TOBN(0x8ca60fa0, 0xa989ed8b),
+     TOBN(0xa1999458, 0xff96a0ee), TOBN(0xc1141f03, 0xac6c283d),
+     TOBN(0x7677408d, 0x6dfafed3), TOBN(0x33a01653, 0x39661588),
+     TOBN(0x3c9c15ec, 0x0b726fa0), TOBN(0x090cfd93, 0x6c9b56da),
+     TOBN(0xe34f4bae, 0xa3c40af5), TOBN(0x3469eadb, 0xd21129f1),
+     TOBN(0xcc51674a, 0x1e207ce8), TOBN(0x1e293b24, 0xc83b1ef9),
+     TOBN(0x17173d13, 0x1e6c0bb4), TOBN(0x19004695, 0x90776d35),
+     TOBN(0xe7980e34, 0x6de6f922), TOBN(0x873554cb, 0xf4dd9a22),
+     TOBN(0x0316c627, 0xcbf18a51), TOBN(0x4d93651b, 0x3032c081),
+     TOBN(0x207f2771, 0x3946834d), TOBN(0x2c08d7b4, 0x30cdbf80),
+     TOBN(0x137a4fb4, 0x86df2a61), TOBN(0xa1ed9c07, 0xecf7b4a2),
+     TOBN(0xb2e460e2, 0x7bd042ff), TOBN(0xb7f5e2fa, 0x5f62f5ec),
+     TOBN(0x7aa6ec6b, 0xcc2423b7), TOBN(0x75ce0a7f, 0xba63eea7),
+     TOBN(0x67a45fb1, 0xf250a6e1), TOBN(0x93bc919c, 0xe53cdc9f),
+     TOBN(0x9271f56f, 0x871942df), TOBN(0x2372ff6f, 0x7859ad66),
+     TOBN(0x5f4c2b96, 0x33cb1a78), TOBN(0xe3e29101, 0x5838aa83),
+     TOBN(0xa7ed1611, 0xe4e8110c), TOBN(0x2a2d70d5, 0x330198ce),
+     TOBN(0xbdf132e8, 0x6720efe0), TOBN(0xe61a8962, 0x66a471bf),
+     TOBN(0x796d3a85, 0x825808bd), TOBN(0x51dc3cb7, 0x3fd6e902),
+     TOBN(0x643c768a, 0x916219d1), TOBN(0x36cd7685, 0xa2ad7d32),
+     TOBN(0xe3db9d05, 0xb22922a4), TOBN(0x6494c87e, 0xdba29660),
+     TOBN(0xf0ac91df, 0xbcd2ebc7), TOBN(0x4deb57a0, 0x45107f8d),
+     TOBN(0x42271f59, 0xc3d12a73), TOBN(0x5f71687c, 0xa5c2c51d),
+     TOBN(0xcb1f50c6, 0x05797bcb), TOBN(0x29ed0ed9, 0xd6d34eb0),
+     TOBN(0xe5fe5b47, 0x4683c2eb), TOBN(0x4956eeb5, 0x97447c46),
+     TOBN(0x5b163a43, 0x71207167), TOBN(0x93fa2fed, 0x0248c5ef),
+     TOBN(0x67930af2, 0x31f63950), TOBN(0xa77797c1, 0x14caa2c9),
+     TOBN(0x526e80ee, 0x27ac7e62), TOBN(0xe1e6e626, 0x58b28aec),
+     TOBN(0x636178b0, 0xb3c9fef0), TOBN(0xaf7752e0, 0x6d5f90be),
+     TOBN(0x94ecaf18, 0xeece51cf), TOBN(0x2864d0ed, 0xca806e1f),
+     TOBN(0x6de2e383, 0x97c69134), TOBN(0x5a42c316, 0xeb291293),
+     TOBN(0xc7779219, 0x6a60bae0), TOBN(0xa24de346, 0x6b7599d1),
+     TOBN(0x49d374aa, 0xb75d4941), TOBN(0x98900586, 0x2d501ff0),
+     TOBN(0x9f16d40e, 0xeb7974cf), TOBN(0x1033860b, 0xcdd8c115),
+     TOBN(0xb6c69ac8, 0x2094cec3), TOBN(0x9976fb88, 0x403b770c),
+     TOBN(0x1dea026c, 0x4859590d), TOBN(0xb6acbb46, 0x8562d1fd),
+     TOBN(0x7cd6c461, 0x44569d85), TOBN(0xc3190a36, 0x97f0891d),
+     TOBN(0xc6f53195, 0x48d5a17d), TOBN(0x7d919966, 0xd749abc8),
+     TOBN(0x65104837, 0xdd1c8a20), TOBN(0x7e5410c8, 0x2f683419),
+     TOBN(0x958c3ca8, 0xbe94022e), TOBN(0x605c3197, 0x6145dac2),
+     TOBN(0x3fc07501, 0x01683d54), TOBN(0x1d7127c5, 0x595b1234),
+     TOBN(0x10b8f87c, 0x9481277f), TOBN(0x677db2a8, 0xe65a1adb),
+     TOBN(0xec2fccaa, 0xddce3345), TOBN(0x2a6811b7, 0x012a4350),
+     TOBN(0x96760ff1, 0xac598bdc), TOBN(0x054d652a, 0xd1bf4128),
+     TOBN(0x0a1151d4, 0x92a21005), TOBN(0xad7f3971, 0x33110fdf),
+     TOBN(0x8c95928c, 0x1960100f), TOBN(0x6c91c825, 0x7bf03362),
+     TOBN(0xc8c8b2a2, 0xce309f06), TOBN(0xfdb27b59, 0xca27204b),
+     TOBN(0xd223eaa5, 0x0848e32e), TOBN(0xb93e4b2e, 0xe7bfaf1e),
+     TOBN(0xc5308ae6, 0x44aa3ded), TOBN(0x317a666a, 0xc015d573),
+     TOBN(0xc888ce23, 0x1a979707), TOBN(0xf141c1e6, 0x0d5c4958),
+     TOBN(0xb53b7de5, 0x61906373), TOBN(0x858dbade, 0xeb999595),
+     TOBN(0x8cbb47b2, 0xa59e5c36), TOBN(0x660318b3, 0xdcf4e842),
+     TOBN(0xbd161ccd, 0x12ba4b7a), TOBN(0xf399daab, 0xf8c8282a),
+     TOBN(0x1587633a, 0xeeb2130d), TOBN(0xa465311a, 0xda38dd7d),
+     TOBN(0x5f75eec8, 0x64d3779b), TOBN(0x3c5d0476, 0xad64c171),
+     TOBN(0x87410371, 0x2a914428), TOBN(0x8096a891, 0x90e2fc29),
+     TOBN(0xd3d2ae9d, 0x23b3ebc2), TOBN(0x90bdd6db, 0xa580cfd6),
+     TOBN(0x52dbb7f3, 0xc5b01f6c), TOBN(0xe68eded4, 0xe102a2dc),
+     TOBN(0x17785b77, 0x99eb6df0), TOBN(0x26c3cc51, 0x7386b779),
+     TOBN(0x345ed988, 0x6417a48e), TOBN(0xe990b4e4, 0x07d6ef31),
+     TOBN(0x0f456b7e, 0x2586abba), TOBN(0x239ca6a5, 0x59c96e9a),
+     TOBN(0xe327459c, 0xe2eb4206), TOBN(0x3a4c3313, 0xa002b90a),
+     TOBN(0x2a114806, 0xf6a3f6fb), TOBN(0xad5cad2f, 0x85c251dd),
+     TOBN(0x92c1f613, 0xf5a784d3), TOBN(0xec7bfacf, 0x349766d5),
+     TOBN(0x04b3cd33, 0x3e23cb3b), TOBN(0x3979fe84, 0xc5a64b2d),
+     TOBN(0x192e2720, 0x7e589106), TOBN(0xa60c43d1, 0xa15b527f),
+     TOBN(0x2dae9082, 0xbe7cf3a6), TOBN(0xcc86ba92, 0xbc967274),
+     TOBN(0xf28a2ce8, 0xaea0a8a9), TOBN(0x404ca6d9, 0x6ee988b3),
+     TOBN(0xfd7e9c5d, 0x005921b8), TOBN(0xf56297f1, 0x44e79bf9),
+     TOBN(0xa163b460, 0x0d75ddc2), TOBN(0x30b23616, 0xa1f2be87),
+     TOBN(0x4b070d21, 0xbfe50e2b), TOBN(0x7ef8cfd0, 0xe1bfede1),
+     TOBN(0xadba0011, 0x2aac4ae0), TOBN(0x2a3e7d01, 0xb9ebd033),
+     TOBN(0x995277ec, 0xe38d9d1c), TOBN(0xb500249e, 0x9c5d2de3),
+     TOBN(0x8912b820, 0xf13ca8c9), TOBN(0xc8798114, 0x877793af),
+     TOBN(0x19e6125d, 0xec3f1dec), TOBN(0x07b1f040, 0x911178da),
+     TOBN(0xd93ededa, 0x904a6738), TOBN(0x55187a5a, 0x0bebedcd),
+     TOBN(0xf7d04722, 0xeb329d41), TOBN(0xf449099e, 0xf170b391),
+     TOBN(0xfd317a69, 0xca99f828), TOBN(0x50c3db2b, 0x34a4976d),
+     TOBN(0xe9ba7784, 0x3757b392), TOBN(0x326caefd, 0xaa3ca05a),
+     TOBN(0x78e5293b, 0xf1e593d4), TOBN(0x7842a937, 0x0d98fd13),
+     TOBN(0xe694bf96, 0x5f96b10d), TOBN(0x373a9df6, 0x06a8cd05),
+     TOBN(0x997d1e51, 0xe8f0c7fc), TOBN(0x1d019790, 0x63fd972e),
+     TOBN(0x0064d858, 0x5499fb32), TOBN(0x7b67bad9, 0x77a8aeb7),
+     TOBN(0x1d3eb977, 0x2d08eec5), TOBN(0x5fc047a6, 0xcbabae1d),
+     TOBN(0x0577d159, 0xe54a64bb), TOBN(0x8862201b, 0xc43497e4),
+     TOBN(0xad6b4e28, 0x2ce0608d), TOBN(0x8b687b7d, 0x0b167aac),
+     TOBN(0x6ed4d367, 0x8b2ecfa9), TOBN(0x24dfe62d, 0xa90c3c38),
+     TOBN(0xa1862e10, 0x3fe5c42b), TOBN(0x1ca73dca, 0xd5732a9f),
+     TOBN(0x35f038b7, 0x76bb87ad), TOBN(0x674976ab, 0xf242b81f),
+     TOBN(0x4f2bde7e, 0xb0fd90cd), TOBN(0x6efc172e, 0xa7fdf092),
+     TOBN(0x3806b69b, 0x92222f1f), TOBN(0x5a2459ca, 0x6cf7ae70),
+     TOBN(0x6789f69c, 0xa85217ee), TOBN(0x5f232b5e, 0xe3dc85ac),
+     TOBN(0x660e3ec5, 0x48e9e516), TOBN(0x124b4e47, 0x3197eb31),
+     TOBN(0x10a0cb13, 0xaafcca23), TOBN(0x7bd63ba4, 0x8213224f),
+     TOBN(0xaffad7cc, 0x290a7f4f), TOBN(0x6b409c9e, 0x0286b461),
+     TOBN(0x58ab809f, 0xffa407af), TOBN(0xc3122eed, 0xc68ac073),
+     TOBN(0x17bf9e50, 0x4ef24d7e), TOBN(0x5d929794, 0x3e2a5811),
+     TOBN(0x519bc867, 0x02902e01), TOBN(0x76bba5da, 0x39c8a851),
+     TOBN(0xe9f9669c, 0xda94951e), TOBN(0x4b6af58d, 0x66b8d418),
+     TOBN(0xfa321074, 0x17d426a4), TOBN(0xc78e66a9, 0x9dde6027),
+     TOBN(0x0516c083, 0x4a53b964), TOBN(0xfc659d38, 0xff602330),
+     TOBN(0x0ab55e5c, 0x58c5c897), TOBN(0x985099b2, 0x838bc5df),
+     TOBN(0x061d9efc, 0xc52fc238), TOBN(0x712b2728, 0x6ac1da3f),
+     TOBN(0xfb658149, 0x9283fe08), TOBN(0x4954ac94, 0xb8aaa2f7),
+     TOBN(0x85c0ada4, 0x7fb2e74f), TOBN(0xee8ba98e, 0xb89926b0),
+     TOBN(0xe4f9d37d, 0x23d1af5b), TOBN(0x14ccdbf9, 0xba9b015e),
+     TOBN(0xb674481b, 0x7bfe7178), TOBN(0x4e1debae, 0x65405868),
+     TOBN(0x061b2821, 0xc48c867d), TOBN(0x69c15b35, 0x513b30ea),
+     TOBN(0x3b4a1666, 0x36871088), TOBN(0xe5e29f5d, 0x1220b1ff),
+     TOBN(0x4b82bb35, 0x233d9f4d), TOBN(0x4e076333, 0x18cdc675)}
+    ,
+    {TOBN(0x0d53f5c7, 0xa3e6fced), TOBN(0xe8cbbdd5, 0xf45fbdeb),
+     TOBN(0xf85c01df, 0x13339a70), TOBN(0x0ff71880, 0x142ceb81),
+     TOBN(0x4c4e8774, 0xbd70437a), TOBN(0x5fb32891, 0xba0bda6a),
+     TOBN(0x1cdbebd2, 0xf18bd26e), TOBN(0x2f9526f1, 0x03a9d522),
+     TOBN(0x40ce3051, 0x92c4d684), TOBN(0x8b04d725, 0x7612efcd),
+     TOBN(0xb9dcda36, 0x6f9cae20), TOBN(0x0edc4d24, 0xf058856c),
+     TOBN(0x64f2e6bf, 0x85427900), TOBN(0x3de81295, 0xdc09dfea),
+     TOBN(0xd41b4487, 0x379bf26c), TOBN(0x50b62c6d, 0x6df135a9),
+     TOBN(0xd4f8e3b4, 0xc72dfe67), TOBN(0xc416b0f6, 0x90e19fdf),
+     TOBN(0x18b9098d, 0x4c13bd35), TOBN(0xac11118a, 0x15b8cb9e),
+     TOBN(0xf598a318, 0xf0062841), TOBN(0xbfe0602f, 0x89f356f4),
+     TOBN(0x7ae3637e, 0x30177a0c), TOBN(0x34097747, 0x61136537),
+     TOBN(0x0db2fb5e, 0xd005832a), TOBN(0x5f5efd3b, 0x91042e4f),
+     TOBN(0x8c4ffdc6, 0xed70f8ca), TOBN(0xe4645d0b, 0xb52da9cc),
+     TOBN(0x9596f58b, 0xc9001d1f), TOBN(0x52c8f0bc, 0x4e117205),
+     TOBN(0xfd4aa0d2, 0xe398a084), TOBN(0x815bfe3a, 0x104f49de),
+     TOBN(0x97e5443f, 0x23885e5f), TOBN(0xf72f8f99, 0xe8433aab),
+     TOBN(0xbd00b154, 0xe4d4e604), TOBN(0xd0b35e6a, 0xe5e173ff),
+     TOBN(0x57b2a048, 0x9164722d), TOBN(0x3e3c665b, 0x88761ec8),
+     TOBN(0x6bdd1397, 0x3da83832), TOBN(0x3c8b1a1e, 0x73dafe3b),
+     TOBN(0x4497ace6, 0x54317cac), TOBN(0xbe600ab9, 0x521771b3),
+     TOBN(0xb42e409e, 0xb0dfe8b8), TOBN(0x386a67d7, 0x3942310f),
+     TOBN(0x25548d8d, 0x4431cc28), TOBN(0xa7cff142, 0x985dc524),
+     TOBN(0x4d60f5a1, 0x93c4be32), TOBN(0x83ebd5c8, 0xd071c6e1),
+     TOBN(0xba3a80a7, 0xb1fd2b0b), TOBN(0x9b3ad396, 0x5bec33e8),
+     TOBN(0xb3868d61, 0x79743fb3), TOBN(0xcfd169fc, 0xfdb462fa),
+     TOBN(0xd3b499d7, 0x9ce0a6af), TOBN(0x55dc1cf1, 0xe42d3ff8),
+     TOBN(0x04fb9e6c, 0xc6c3e1b2), TOBN(0x47e6961d, 0x6f69a474),
+     TOBN(0x54eb3acc, 0xe548b37b), TOBN(0xb38e7542, 0x84d40549),
+     TOBN(0x8c3daa51, 0x7b341b4f), TOBN(0x2f6928ec, 0x690bf7fa),
+     TOBN(0x0496b323, 0x86ce6c41), TOBN(0x01be1c55, 0x10adadcd),
+     TOBN(0xc04e67e7, 0x4bb5faf9), TOBN(0x3cbaf678, 0xe15c9985),
+     TOBN(0x8cd12145, 0x50ca4247), TOBN(0xba1aa47a, 0xe7dd30aa),
+     TOBN(0x2f81ddf1, 0xe58fee24), TOBN(0x03452936, 0xeec9b0e8),
+     TOBN(0x8bdc3b81, 0x243aea96), TOBN(0x9a2919af, 0x15c3d0e5),
+     TOBN(0x9ea640ec, 0x10948361), TOBN(0x5ac86d5b, 0x6e0bcccf),
+     TOBN(0xf892d918, 0xc36cf440), TOBN(0xaed3e837, 0xc939719c),
+     TOBN(0xb07b08d2, 0xc0218b64), TOBN(0x6f1bcbba, 0xce9790dd),
+     TOBN(0x4a84d6ed, 0x60919b8e), TOBN(0xd8900791, 0x8ac1f9eb),
+     TOBN(0xf84941aa, 0x0dd5daef), TOBN(0xb22fe40a, 0x67fd62c5),
+     TOBN(0x97e15ba2, 0x157f2db3), TOBN(0xbda2fc8f, 0x8e28ca9c),
+     TOBN(0x5d050da4, 0x37b9f454), TOBN(0x3d57eb57, 0x2379d72e),
+     TOBN(0xe9b5eba2, 0xfb5ee997), TOBN(0x01648ca2, 0xe11538ca),
+     TOBN(0x32bb76f6, 0xf6327974), TOBN(0x338f14b8, 0xff3f4bb7),
+     TOBN(0x524d226a, 0xd7ab9a2d), TOBN(0x9c00090d, 0x7dfae958),
+     TOBN(0x0ba5f539, 0x8751d8c2), TOBN(0x8afcbcdd, 0x3ab8262d),
+     TOBN(0x57392729, 0xe99d043b), TOBN(0xef51263b, 0xaebc943a),
+     TOBN(0x9feace93, 0x20862935), TOBN(0x639efc03, 0xb06c817b),
+     TOBN(0x1fe054b3, 0x66b4be7a), TOBN(0x3f25a9de, 0x84a37a1e),
+     TOBN(0xf39ef1ad, 0x78d75cd9), TOBN(0xd7b58f49, 0x5062c1b5),
+     TOBN(0x6f74f9a9, 0xff563436), TOBN(0xf718ff29, 0xe8af51e7),
+     TOBN(0x5234d313, 0x15e97fec), TOBN(0xb6a8e2b1, 0x292f1c0a),
+     TOBN(0xa7f53aa8, 0x327720c1), TOBN(0x956ca322, 0xba092cc8),
+     TOBN(0x8f03d64a, 0x28746c4d), TOBN(0x51fe1782, 0x66d0d392),
+     TOBN(0xd19b34db, 0x3c832c80), TOBN(0x60dccc5c, 0x6da2e3b4),
+     TOBN(0x245dd62e, 0x0a104ccc), TOBN(0xa7ab1de1, 0x620b21fd),
+     TOBN(0xb293ae0b, 0x3893d123), TOBN(0xf7b75783, 0xb15ee71c),
+     TOBN(0x5aa3c614, 0x42a9468b), TOBN(0xd686123c, 0xdb15d744),
+     TOBN(0x8c616891, 0xa7ab4116), TOBN(0x6fcd72c8, 0xa4e6a459),
+     TOBN(0xac219110, 0x77e5fad7), TOBN(0xfb6a20e7, 0x704fa46b),
+     TOBN(0xe839be7d, 0x341d81dc), TOBN(0xcddb6889, 0x32148379),
+     TOBN(0xda6211a1, 0xf7026ead), TOBN(0xf3b2575f, 0xf4d1cc5e),
+     TOBN(0x40cfc8f6, 0xa7a73ae6), TOBN(0x83879a5e, 0x61d5b483),
+     TOBN(0xc5acb1ed, 0x41a50ebc), TOBN(0x59a60cc8, 0x3c07d8fa),
+     TOBN(0x1b73bdce, 0xb1876262), TOBN(0x2b0d79f0, 0x12af4ee9),
+     TOBN(0x8bcf3b0b, 0xd46e1d07), TOBN(0x17d6af9d, 0xe45d152f),
+     TOBN(0x73520461, 0x6d736451), TOBN(0x43cbbd97, 0x56b0bf5a),
+     TOBN(0xb0833a5b, 0xd5999b9d), TOBN(0x702614f0, 0xeb72e398),
+     TOBN(0x0aadf01a, 0x59c3e9f8), TOBN(0x40200e77, 0xce6b3d16),
+     TOBN(0xda22bdd3, 0xdeddafad), TOBN(0x76dedaf4, 0x310d72e1),
+     TOBN(0x49ef807c, 0x4bc2e88f), TOBN(0x6ba81291, 0x146dd5a5),
+     TOBN(0xa1a4077a, 0x7d8d59e9), TOBN(0x87b6a2e7, 0x802db349),
+     TOBN(0xd5679997, 0x1b4e598e), TOBN(0xf499ef1f, 0x06fe4b1d),
+     TOBN(0x3978d3ae, 0xfcb267c5), TOBN(0xb582b557, 0x235786d0),
+     TOBN(0x32b3b2ca, 0x1715cb07), TOBN(0x4c3de6a2, 0x8480241d),
+     TOBN(0x63b5ffed, 0xcb571ecd), TOBN(0xeaf53900, 0xed2fe9a9),
+     TOBN(0xdec98d4a, 0xc3b81990), TOBN(0x1cb83722, 0x9e0cc8fe),
+     TOBN(0xfe0b0491, 0xd2b427b9), TOBN(0x0f2386ac, 0xe983a66c),
+     TOBN(0x930c4d1e, 0xb3291213), TOBN(0xa2f82b2e, 0x59a62ae4),
+     TOBN(0x77233853, 0xf93e89e3), TOBN(0x7f8063ac, 0x11777c7f),
+     TOBN(0xff0eb567, 0x59ad2877), TOBN(0x6f454642, 0x9865c754),
+     TOBN(0xe6fe701a, 0x236e9a84), TOBN(0xc586ef16, 0x06e40fc3),
+     TOBN(0x3f62b6e0, 0x24bafad9), TOBN(0xc8b42bd2, 0x64da906a),
+     TOBN(0xc98e1eb4, 0xda3276a0), TOBN(0x30d0e5fc, 0x06cbf852),
+     TOBN(0x1b6b2ae1, 0xe8b4dfd4), TOBN(0xd754d5c7, 0x8301cbac),
+     TOBN(0x66097629, 0x112a39ac), TOBN(0xf86b5999, 0x93ba4ab9),
+     TOBN(0x26c9dea7, 0x99f9d581), TOBN(0x0473b1a8, 0xc2fafeaa),
+     TOBN(0x1469af55, 0x3b2505a5), TOBN(0x227d16d7, 0xd6a43323),
+     TOBN(0x3316f73c, 0xad3d97f9), TOBN(0x52bf3bb5, 0x1f137455),
+     TOBN(0x953eafeb, 0x09954e7c), TOBN(0xa721dfed, 0xdd732411),
+     TOBN(0xb4929821, 0x141d4579), TOBN(0x3411321c, 0xaa3bd435),
+     TOBN(0xafb355aa, 0x17fa6015), TOBN(0xb4e7ef4a, 0x18e42f0e),
+     TOBN(0x604ac97c, 0x59371000), TOBN(0xe1c48c70, 0x7f759c18),
+     TOBN(0x3f62ecc5, 0xa5db6b65), TOBN(0x0a78b173, 0x38a21495),
+     TOBN(0x6be1819d, 0xbcc8ad94), TOBN(0x70dc04f6, 0xd89c3400),
+     TOBN(0x462557b4, 0xa6b4840a), TOBN(0x544c6ade, 0x60bd21c0),
+     TOBN(0x6a00f24e, 0x907a544b), TOBN(0xa7520dcb, 0x313da210),
+     TOBN(0xfe939b75, 0x11e4994b), TOBN(0x918b6ba6, 0xbc275d70),
+     TOBN(0xd3e5e0fc, 0x644be892), TOBN(0x707a9816, 0xfdaf6c42),
+     TOBN(0x60145567, 0xf15c13fe), TOBN(0x4818ebaa, 0xe130a54a),
+     TOBN(0x28aad3ad, 0x58d2f767), TOBN(0xdc5267fd, 0xd7e7c773),
+     TOBN(0x4919cc88, 0xc3afcc98), TOBN(0xaa2e6ab0, 0x2db8cd4b),
+     TOBN(0xd46fec04, 0xd0c63eaa), TOBN(0xa1cb92c5, 0x19ffa832),
+     TOBN(0x678dd178, 0xe43a631f), TOBN(0xfb5ae1cd, 0x3dc788b3),
+     TOBN(0x68b4fb90, 0x6e77de04), TOBN(0x7992bcf0, 0xf06dbb97),
+     TOBN(0x896e6a13, 0xc417c01d), TOBN(0x8d96332c, 0xb956be01),
+     TOBN(0x902fc93a, 0x413aa2b9), TOBN(0x99a4d915, 0xfc98c8a5),
+     TOBN(0x52c29407, 0x565f1137), TOBN(0x4072690f, 0x21e4f281),
+     TOBN(0x36e607cf, 0x02ff6072), TOBN(0xa47d2ca9, 0x8ad98cdc),
+     TOBN(0xbf471d1e, 0xf5f56609), TOBN(0xbcf86623, 0xf264ada0),
+     TOBN(0xb70c0687, 0xaa9e5cb6), TOBN(0xc98124f2, 0x17401c6c),
+     TOBN(0x8189635f, 0xd4a61435), TOBN(0xd28fb8af, 0xa9d98ea6),
+     TOBN(0xb9a67c2a, 0x40c251f8), TOBN(0x88cd5d87, 0xa2da44be),
+     TOBN(0x437deb96, 0xe09b5423), TOBN(0x150467db, 0x64287dc1),
+     TOBN(0xe161debb, 0xcdabb839), TOBN(0xa79e9742, 0xf1839a3e),
+     TOBN(0xbb8dd3c2, 0x652d202b), TOBN(0x7b3e67f7, 0xe9f97d96),
+     TOBN(0x5aa5d78f, 0xb1cb6ac9), TOBN(0xffa13e8e, 0xca1d0d45),
+     TOBN(0x369295dd, 0x2ba5bf95), TOBN(0xd68bd1f8, 0x39aff05e),
+     TOBN(0xaf0d86f9, 0x26d783f2), TOBN(0x543a59b3, 0xfc3aafc1),
+     TOBN(0x3fcf81d2, 0x7b7da97c), TOBN(0xc990a056, 0xd25dee46),
+     TOBN(0x3e6775b8, 0x519cce2c), TOBN(0xfc9af71f, 0xae13d863),
+     TOBN(0x774a4a6f, 0x47c1605c), TOBN(0x46ba4245, 0x2fd205e8),
+     TOBN(0xa06feea4, 0xd3fd524d), TOBN(0x1e724641, 0x6de1acc2),
+     TOBN(0xf53816f1, 0x334e2b42), TOBN(0x49e5918e, 0x922f0024),
+     TOBN(0x439530b6, 0x65c7322d), TOBN(0xcf12cc01, 0xb3c1b3fb),
+     TOBN(0xc70b0186, 0x0172f685), TOBN(0xb915ee22, 0x1b58391d),
+     TOBN(0x9afdf03b, 0xa317db24), TOBN(0x87dec659, 0x17b8ffc4),
+     TOBN(0x7f46597b, 0xe4d3d050), TOBN(0x80a1c1ed, 0x006500e7),
+     TOBN(0x84902a96, 0x78bf030e), TOBN(0xfb5e9c9a, 0x50560148),
+     TOBN(0x6dae0a92, 0x63362426), TOBN(0xdcaeecf4, 0xa9e30c40),
+     TOBN(0xc0d887bb, 0x518d0c6b), TOBN(0x99181152, 0xcb985b9d),
+     TOBN(0xad186898, 0xef7bc381), TOBN(0x18168ffb, 0x9ee46201),
+     TOBN(0x9a04cdaa, 0x2502753c), TOBN(0xbb279e26, 0x51407c41),
+     TOBN(0xeacb03aa, 0xf23564e5), TOBN(0x18336582, 0x71e61016),
+     TOBN(0x8684b8c4, 0xeb809877), TOBN(0xb336e18d, 0xea0e672e),
+     TOBN(0xefb601f0, 0x34ee5867), TOBN(0x2733edbe, 0x1341cfd1),
+     TOBN(0xb15e809a, 0x26025c3c), TOBN(0xe6e981a6, 0x9350df88),
+     TOBN(0x92376237, 0x8502fd8e), TOBN(0x4791f216, 0x0c12be9b),
+     TOBN(0xb7256789, 0x25f02425), TOBN(0xec863194, 0x7a974443),
+     TOBN(0x7c0ce882, 0xfb41cc52), TOBN(0xc266ff7e, 0xf25c07f2),
+     TOBN(0x3d4da8c3, 0x017025f3), TOBN(0xefcf628c, 0xfb9579b4),
+     TOBN(0x5c4d0016, 0x1f3716ec), TOBN(0x9c27ebc4, 0x6801116e),
+     TOBN(0x5eba0ea1, 0x1da1767e), TOBN(0xfe151452, 0x47004c57),
+     TOBN(0x3ace6df6, 0x8c2373b7), TOBN(0x75c3dffe, 0x5dbc37ac),
+     TOBN(0x3dc32a73, 0xddc925fc), TOBN(0xb679c841, 0x2f65ee0b),
+     TOBN(0x715a3295, 0x451cbfeb), TOBN(0xd9889768, 0xf76e9a29),
+     TOBN(0xec20ce7f, 0xb28ad247), TOBN(0xe99146c4, 0x00894d79),
+     TOBN(0x71457d7c, 0x9f5e3ea7), TOBN(0x097b2662, 0x38030031),
+     TOBN(0xdb7f6ae6, 0xcf9f82a8), TOBN(0x319decb9, 0x438f473a),
+     TOBN(0xa63ab386, 0x283856c3), TOBN(0x13e3172f, 0xb06a361b),
+     TOBN(0x2959f8dc, 0x7d5a006c), TOBN(0x2dbc27c6, 0x75fba752),
+     TOBN(0xc1227ab2, 0x87c22c9e), TOBN(0x06f61f75, 0x71a268b2),
+     TOBN(0x1b6bb971, 0x04779ce2), TOBN(0xaca83812, 0x0aadcb1d),
+     TOBN(0x297ae0bc, 0xaeaab2d5), TOBN(0xa5c14ee7, 0x5bfb9f13),
+     TOBN(0xaa00c583, 0xf17a62c7), TOBN(0x39eb962c, 0x173759f6),
+     TOBN(0x1eeba1d4, 0x86c9a88f), TOBN(0x0ab6c37a, 0xdf016c5e),
+     TOBN(0xa2a147db, 0xa28a0749), TOBN(0x246c20d6, 0xee519165),
+     TOBN(0x5068d1b1, 0xd3810715), TOBN(0xb1e7018c, 0x748160b9),
+     TOBN(0x03f5b1fa, 0xf380ff62), TOBN(0xef7fb1dd, 0xf3cb2c1e),
+     TOBN(0xeab539a8, 0xfc91a7da), TOBN(0x83ddb707, 0xf3f9b561),
+     TOBN(0xc550e211, 0xfe7df7a4), TOBN(0xa7cd07f2, 0x063f6f40),
+     TOBN(0xb0de3635, 0x2976879c), TOBN(0xb5f83f85, 0xe55741da),
+     TOBN(0x4ea9d25e, 0xf3d8ac3d), TOBN(0x6fe2066f, 0x62819f02),
+     TOBN(0x4ab2b9c2, 0xcef4a564), TOBN(0x1e155d96, 0x5ffa2de3),
+     TOBN(0x0eb0a19b, 0xc3a72d00), TOBN(0x4037665b, 0x8513c31b),
+     TOBN(0x2fb2b6bf, 0x04c64637), TOBN(0x45c34d6e, 0x08cdc639),
+     TOBN(0x56f1e10f, 0xf01fd796), TOBN(0x4dfb8101, 0xfe3667b8),
+     TOBN(0xe0eda253, 0x9021d0c0), TOBN(0x7a94e9ff, 0x8a06c6ab),
+     TOBN(0x2d3bb0d9, 0xbb9aa882), TOBN(0xea20e4e5, 0xec05fd10),
+     TOBN(0xed7eeb5f, 0x1a1ca64e), TOBN(0x2fa6b43c, 0xc6327cbd),
+     TOBN(0xb577e3cf, 0x3aa91121), TOBN(0x8c6bd5ea, 0x3a34079b),
+     TOBN(0xd7e5ba39, 0x60e02fc0), TOBN(0xf16dd2c3, 0x90141bf8),
+     TOBN(0xb57276d9, 0x80101b98), TOBN(0x760883fd, 0xb82f0f66),
+     TOBN(0x89d7de75, 0x4bc3eff3), TOBN(0x03b60643, 0x5dc2ab40),
+     TOBN(0xcd6e53df, 0xe05beeac), TOBN(0xf2f1e862, 0xbc3325cd),
+     TOBN(0xdd0f7921, 0x774f03c3), TOBN(0x97ca7221, 0x4552cc1b),
+     TOBN(0x5a0d6afe, 0x1cd19f72), TOBN(0xa20915dc, 0xf183fbeb),
+     TOBN(0x9fda4b40, 0x832c403c), TOBN(0x32738edd, 0xbe425442),
+     TOBN(0x469a1df6, 0xb5eccf1a), TOBN(0x4b5aff42, 0x28bbe1f0),
+     TOBN(0x31359d7f, 0x570dfc93), TOBN(0xa18be235, 0xf0088628),
+     TOBN(0xa5b30fba, 0xb00ed3a9), TOBN(0x34c61374, 0x73cdf8be),
+     TOBN(0x2c5c5f46, 0xabc56797), TOBN(0x5cecf93d, 0xb82a8ae2),
+     TOBN(0x7d3dbe41, 0xa968fbf0), TOBN(0xd23d4583, 0x1a5c7f3d),
+     TOBN(0xf28f69a0, 0xc087a9c7), TOBN(0xc2d75471, 0x474471ca),
+     TOBN(0x36ec9f4a, 0x4eb732ec), TOBN(0x6c943bbd, 0xb1ca6bed),
+     TOBN(0xd64535e1, 0xf2457892), TOBN(0x8b84a8ea, 0xf7e2ac06),
+     TOBN(0xe0936cd3, 0x2499dd5f), TOBN(0x12053d7e, 0x0ed04e57),
+     TOBN(0x4bdd0076, 0xe4305d9d), TOBN(0x34a527b9, 0x1f67f0a2),
+     TOBN(0xe79a4af0, 0x9cec46ea), TOBN(0xb15347a1, 0x658b9bc7),
+     TOBN(0x6bd2796f, 0x35af2f75), TOBN(0xac957990, 0x4051c435),
+     TOBN(0x2669dda3, 0xc33a655d), TOBN(0x5d503c2e, 0x88514aa3),
+     TOBN(0xdfa11337, 0x3753dd41), TOBN(0x3f054673, 0x0b754f78),
+     TOBN(0xbf185677, 0x496125bd), TOBN(0xfb0023c8, 0x3775006c),
+     TOBN(0xfa0f072f, 0x3a037899), TOBN(0x4222b6eb, 0x0e4aea57),
+     TOBN(0x3dde5e76, 0x7866d25a), TOBN(0xb6eb04f8, 0x4837aa6f),
+     TOBN(0x5315591a, 0x2cf1cdb8), TOBN(0x6dfb4f41, 0x2d4e683c),
+     TOBN(0x7e923ea4, 0x48ee1f3a), TOBN(0x9604d9f7, 0x05a2afd5),
+     TOBN(0xbe1d4a33, 0x40ea4948), TOBN(0x5b45f1f4, 0xb44cbd2f),
+     TOBN(0x5faf8376, 0x4acc757e), TOBN(0xa7cf9ab8, 0x63d68ff7),
+     TOBN(0x8ad62f69, 0xdf0e404b), TOBN(0xd65f33c2, 0x12bdafdf),
+     TOBN(0xc365de15, 0xa377b14e), TOBN(0x6bf5463b, 0x8e39f60c),
+     TOBN(0x62030d2d, 0x2ce68148), TOBN(0xd95867ef, 0xe6f843a8),
+     TOBN(0xd39a0244, 0xef5ab017), TOBN(0x0bd2d8c1, 0x4ab55d12),
+     TOBN(0xc9503db3, 0x41639169), TOBN(0x2d4e25b0, 0xf7660c8a),
+     TOBN(0x760cb3b5, 0xe224c5d7), TOBN(0xfa3baf8c, 0x68616919),
+     TOBN(0x9fbca113, 0x8d142552), TOBN(0x1ab18bf1, 0x7669ebf5),
+     TOBN(0x55e6f53e, 0x9bdf25dd), TOBN(0x04cc0bf3, 0xcb6cd154),
+     TOBN(0x595bef49, 0x95e89080), TOBN(0xfe9459a8, 0x104a9ac1),
+     TOBN(0xad2d89ca, 0xcce9bb32), TOBN(0xddea65e1, 0xf7de8285),
+     TOBN(0x62ed8c35, 0xb351bd4b), TOBN(0x4150ff36, 0x0c0e19a7),
+     TOBN(0x86e3c801, 0x345f4e47), TOBN(0x3bf21f71, 0x203a266c),
+     TOBN(0x7ae110d4, 0x855b1f13), TOBN(0x5d6aaf6a, 0x07262517),
+     TOBN(0x1e0f12e1, 0x813d28f1), TOBN(0x6000e11d, 0x7ad7a523),
+     TOBN(0xc7d8deef, 0xc744a17b), TOBN(0x1e990b48, 0x14c05a00),
+     TOBN(0x68fddaee, 0x93e976d5), TOBN(0x696241d1, 0x46610d63),
+     TOBN(0xb204e7c3, 0x893dda88), TOBN(0x8bccfa65, 0x6a3a6946),
+     TOBN(0xb59425b4, 0xc5cd1411), TOBN(0x701b4042, 0xff3658b1),
+     TOBN(0xe3e56bca, 0x4784cf93), TOBN(0x27de5f15, 0x8fe68d60),
+     TOBN(0x4ab9cfce, 0xf8d53f19), TOBN(0xddb10311, 0xa40a730d),
+     TOBN(0x6fa73cd1, 0x4eee0a8a), TOBN(0xfd548748, 0x5249719d),
+     TOBN(0x49d66316, 0xa8123ef0), TOBN(0x73c32db4, 0xe7f95438),
+     TOBN(0x2e2ed209, 0x0d9e7854), TOBN(0xf98a9329, 0x9d9f0507),
+     TOBN(0xc5d33cf6, 0x0c6aa20a), TOBN(0x9a32ba14, 0x75279bb2),
+     TOBN(0x7e3202cb, 0x774a7307), TOBN(0x64ed4bc4, 0xe8c42dbd),
+     TOBN(0xc20f1a06, 0xd4caed0d), TOBN(0xb8021407, 0x171d22b3),
+     TOBN(0xd426ca04, 0xd13268d7), TOBN(0x92377007, 0x25f4d126),
+     TOBN(0x4204cbc3, 0x71f21a85), TOBN(0x18461b7a, 0xf82369ba),
+     TOBN(0xc0c07d31, 0x3fc858f9), TOBN(0x5deb5a50, 0xe2bab569),
+     TOBN(0xd5959d46, 0xd5eea89e), TOBN(0xfdff8424, 0x08437f4b),
+     TOBN(0xf21071e4, 0x3cfe254f), TOBN(0x72417696, 0x95468321),
+     TOBN(0x5d8288b9, 0x102cae3e), TOBN(0x2d143e3d, 0xf1965dff),
+     TOBN(0x00c9a376, 0xa078d847), TOBN(0x6fc0da31, 0x26028731),
+     TOBN(0xa2baeadf, 0xe45083a2), TOBN(0x66bc7218, 0x5e5b4bcd),
+     TOBN(0x2c826442, 0xd04b8e7f), TOBN(0xc19f5451, 0x6c4b586b),
+     TOBN(0x60182c49, 0x5b7eeed5), TOBN(0xd9954ecd, 0x7aa9dfa1),
+     TOBN(0xa403a8ec, 0xc73884ad), TOBN(0x7fb17de2, 0x9bb39041),
+     TOBN(0x694b64c5, 0xabb020e8), TOBN(0x3d18c184, 0x19c4eec7),
+     TOBN(0x9c4673ef, 0x1c4793e5), TOBN(0xc7b8aeb5, 0x056092e6),
+     TOBN(0x3aa1ca43, 0xf0f8c16b), TOBN(0x224ed5ec, 0xd679b2f6),
+     TOBN(0x0d56eeaf, 0x55a205c9), TOBN(0xbfe115ba, 0x4b8e028b),
+     TOBN(0x97e60849, 0x3927f4fe), TOBN(0xf91fbf94, 0x759aa7c5),
+     TOBN(0x985af769, 0x6be90a51), TOBN(0xc1277b78, 0x78ccb823),
+     TOBN(0x395b656e, 0xe7a75952), TOBN(0x00df7de0, 0x928da5f5),
+     TOBN(0x09c23175, 0x4ca4454f), TOBN(0x4ec971f4, 0x7aa2d3c1),
+     TOBN(0x45c3c507, 0xe75d9ccc), TOBN(0x63b7be8a, 0x3dc90306),
+     TOBN(0x37e09c66, 0x5db44bdc), TOBN(0x50d60da1, 0x6841c6a2),
+     TOBN(0x6f9b65ee, 0x08df1b12), TOBN(0x38734879, 0x7ff089df),
+     TOBN(0x9c331a66, 0x3fe8013d), TOBN(0x017f5de9, 0x5f42fcc8),
+     TOBN(0x43077866, 0xe8e57567), TOBN(0xc9f781ce, 0xf9fcdb18),
+     TOBN(0x38131dda, 0x9b12e174), TOBN(0x25d84aa3, 0x8a03752a),
+     TOBN(0x45e09e09, 0x4d0c0ce2), TOBN(0x1564008b, 0x92bebba5),
+     TOBN(0xf7e8ad31, 0xa87284c7), TOBN(0xb7c4b46c, 0x97e7bbaa),
+     TOBN(0x3e22a7b3, 0x97acf4ec), TOBN(0x0426c400, 0x5ea8b640),
+     TOBN(0x5e3295a6, 0x4e969285), TOBN(0x22aabc59, 0xa6a45670),
+     TOBN(0xb929714c, 0x5f5942bc), TOBN(0x9a6168bd, 0xfa3182ed),
+     TOBN(0x2216a665, 0x104152ba), TOBN(0x46908d03, 0xb6926368)}
+    ,
+    {TOBN(0xa9f5d874, 0x5a1251fb), TOBN(0x967747a8, 0xc72725c7),
+     TOBN(0x195c33e5, 0x31ffe89e), TOBN(0x609d210f, 0xe964935e),
+     TOBN(0xcafd6ca8, 0x2fe12227), TOBN(0xaf9b5b96, 0x0426469d),
+     TOBN(0x2e9ee04c, 0x5693183c), TOBN(0x1084a333, 0xc8146fef),
+     TOBN(0x96649933, 0xaed1d1f7), TOBN(0x566eaff3, 0x50563090),
+     TOBN(0x345057f0, 0xad2e39cf), TOBN(0x148ff65b, 0x1f832124),
+     TOBN(0x042e89d4, 0xcf94cf0d), TOBN(0x319bec84, 0x520c58b3),
+     TOBN(0x2a267626, 0x5361aa0d), TOBN(0xc86fa302, 0x8fbc87ad),
+     TOBN(0xfc83d2ab, 0x5c8b06d5), TOBN(0xb1a785a2, 0xfe4eac46),
+     TOBN(0xb99315bc, 0x846f7779), TOBN(0xcf31d816, 0xef9ea505),
+     TOBN(0x2391fe6a, 0x15d7dc85), TOBN(0x2f132b04, 0xb4016b33),
+     TOBN(0x29547fe3, 0x181cb4c7), TOBN(0xdb66d8a6, 0x650155a1),
+     TOBN(0x6b66d7e1, 0xadc1696f), TOBN(0x98ebe593, 0x0acd72d0),
+     TOBN(0x65f24550, 0xcc1b7435), TOBN(0xce231393, 0xb4b9a5ec),
+     TOBN(0x234a22d4, 0xdb067df9), TOBN(0x98dda095, 0xcaff9b00),
+     TOBN(0x1bbc75a0, 0x6100c9c1), TOBN(0x1560a9c8, 0x939cf695),
+     TOBN(0xcf006d3e, 0x99e0925f), TOBN(0x2dd74a96, 0x6322375a),
+     TOBN(0xc58b446a, 0xb56af5ba), TOBN(0x50292683, 0xe0b9b4f1),
+     TOBN(0xe2c34cb4, 0x1aeaffa3), TOBN(0x8b17203f, 0x9b9587c1),
+     TOBN(0x6d559207, 0xead1350c), TOBN(0x2b66a215, 0xfb7f9604),
+     TOBN(0x0850325e, 0xfe51bf74), TOBN(0x9c4f579e, 0x5e460094),
+     TOBN(0x5c87b92a, 0x76da2f25), TOBN(0x889de4e0, 0x6febef33),
+     TOBN(0x6900ec06, 0x646083ce), TOBN(0xbe2a0335, 0xbfe12773),
+     TOBN(0xadd1da35, 0xc5344110), TOBN(0x757568b7, 0xb802cd20),
+     TOBN(0x75559779, 0x00f7e6c8), TOBN(0x38e8b94f, 0x0facd2f0),
+     TOBN(0xfea1f3af, 0x03fde375), TOBN(0x5e11a1d8, 0x75881dfc),
+     TOBN(0xb3a6b02e, 0xc1e2f2ef), TOBN(0x193d2bbb, 0xc605a6c5),
+     TOBN(0x325ffeee, 0x339a0b2d), TOBN(0x27b6a724, 0x9e0c8846),
+     TOBN(0xe4050f1c, 0xf1c367ca), TOBN(0x9bc85a9b, 0xc90fbc7d),
+     TOBN(0xa373c4a2, 0xe1a11032), TOBN(0xb64232b7, 0xad0393a9),
+     TOBN(0xf5577eb0, 0x167dad29), TOBN(0x1604f301, 0x94b78ab2),
+     TOBN(0x0baa94af, 0xe829348b), TOBN(0x77fbd8dd, 0x41654342),
+     TOBN(0xdab50ea5, 0xb964e39a), TOBN(0xd4c29e3c, 0xd0d3c76e),
+     TOBN(0x80dae67c, 0x56d11964), TOBN(0x7307a8bf, 0xe5ffcc2f),
+     TOBN(0x65bbc1aa, 0x91708c3b), TOBN(0xa151e62c, 0x28bf0eeb),
+     TOBN(0x6cb53381, 0x6fa34db7), TOBN(0x5139e05c, 0xa29403a8),
+     TOBN(0x6ff651b4, 0x94a7cd2e), TOBN(0x5671ffd1, 0x0699336c),
+     TOBN(0x6f5fd2cc, 0x979a896a), TOBN(0x11e893a8, 0xd8148cef),
+     TOBN(0x988906a1, 0x65cf7b10), TOBN(0x81b67178, 0xc50d8485),
+     TOBN(0x7c0deb35, 0x8a35b3de), TOBN(0x423ac855, 0xc1d29799),
+     TOBN(0xaf580d87, 0xdac50b74), TOBN(0x28b2b89f, 0x5869734c),
+     TOBN(0x99a3b936, 0x874e28fb), TOBN(0xbb2c9190, 0x25f3f73a),
+     TOBN(0x199f6918, 0x84a9d5b7), TOBN(0x7ebe2325, 0x7e770374),
+     TOBN(0xf442e107, 0x0738efe2), TOBN(0xcf9f3f56, 0xcf9082d2),
+     TOBN(0x719f69e1, 0x09618708), TOBN(0xcc9e8364, 0xc183f9b1),
+     TOBN(0xec203a95, 0x366a21af), TOBN(0x6aec5d6d, 0x068b141f),
+     TOBN(0xee2df78a, 0x994f04e9), TOBN(0xb39ccae8, 0x271245b0),
+     TOBN(0xb875a4a9, 0x97e43f4f), TOBN(0x507dfe11, 0xdb2cea98),
+     TOBN(0x4fbf81cb, 0x489b03e9), TOBN(0xdb86ec5b, 0x6ec414fa),
+     TOBN(0xfad444f9, 0xf51b3ae5), TOBN(0xca7d33d6, 0x1914e3fe),
+     TOBN(0xa9c32f5c, 0x0ae6c4d0), TOBN(0xa9ca1d1e, 0x73969568),
+     TOBN(0x98043c31, 0x1aa7467e), TOBN(0xe832e75c, 0xe21b5ac6),
+     TOBN(0x314b7aea, 0x5232123d), TOBN(0x08307c8c, 0x65ae86db),
+     TOBN(0x06e7165c, 0xaa4668ed), TOBN(0xb170458b, 0xb4d3ec39),
+     TOBN(0x4d2e3ec6, 0xc19bb986), TOBN(0xc5f34846, 0xae0304ed),
+     TOBN(0x917695a0, 0x6c9f9722), TOBN(0x6c7f7317, 0x4cab1c0a),
+     TOBN(0x6295940e, 0x9d6d2e8b), TOBN(0xd318b8c1, 0x549f7c97),
+     TOBN(0x22453204, 0x97713885), TOBN(0x468d834b, 0xa8a440fe),
+     TOBN(0xd81fe5b2, 0xbfba796e), TOBN(0x152364db, 0x6d71f116),
+     TOBN(0xbb8c7c59, 0xb5b66e53), TOBN(0x0b12c61b, 0x2641a192),
+     TOBN(0x31f14802, 0xfcf0a7fd), TOBN(0x42fd0789, 0x5488b01e),
+     TOBN(0x71d78d6d, 0x9952b498), TOBN(0x8eb572d9, 0x07ac5201),
+     TOBN(0xe0a2a44c, 0x4d194a88), TOBN(0xd2b63fd9, 0xba017e66),
+     TOBN(0x78efc6c8, 0xf888aefc), TOBN(0xb76f6bda, 0x4a881a11),
+     TOBN(0x187f314b, 0xb46c2397), TOBN(0x004cf566, 0x5ded2819),
+     TOBN(0xa9ea5704, 0x38764d34), TOBN(0xbba45217, 0x78084709),
+     TOBN(0x06474571, 0x1171121e), TOBN(0xad7b7eb1, 0xe7c9b671),
+     TOBN(0xdacfbc40, 0x730f7507), TOBN(0x178cd8c6, 0xc7ad7bd1),
+     TOBN(0xbf0be101, 0xb2a67238), TOBN(0x3556d367, 0xaf9c14f2),
+     TOBN(0x104b7831, 0xa5662075), TOBN(0x58ca59bb, 0x79d9e60a),
+     TOBN(0x4bc45392, 0xa569a73b), TOBN(0x517a52e8, 0x5698f6c9),
+     TOBN(0x85643da5, 0xaeadd755), TOBN(0x1aed0cd5, 0x2a581b84),
+     TOBN(0xb9b4ff84, 0x80af1372), TOBN(0x244c3113, 0xf1ba5d1f),
+     TOBN(0x2a5dacbe, 0xf5f98d31), TOBN(0x2c3323e8, 0x4375bc2a),
+     TOBN(0x17a3ab4a, 0x5594b1dd), TOBN(0xa1928bfb, 0xceb4797e),
+     TOBN(0xe83af245, 0xe4886a19), TOBN(0x8979d546, 0x72b5a74a),
+     TOBN(0xa0f726bc, 0x19f9e967), TOBN(0xd9d03152, 0xe8fbbf4e),
+     TOBN(0xcfd6f51d, 0xb7707d40), TOBN(0x633084d9, 0x63f6e6e0),
+     TOBN(0xedcd9cdc, 0x55667eaf), TOBN(0x73b7f92b, 0x2e44d56f),
+     TOBN(0xfb2e39b6, 0x4e962b14), TOBN(0x7d408f6e, 0xf671fcbf),
+     TOBN(0xcc634ddc, 0x164a89bb), TOBN(0x74a42bb2, 0x3ef3bd05),
+     TOBN(0x1280dbb2, 0x428decbb), TOBN(0x6103f6bb, 0x402c8596),
+     TOBN(0xfa2bf581, 0x355a5752), TOBN(0x562f96a8, 0x00946674),
+     TOBN(0x4e4ca16d, 0x6da0223b), TOBN(0xfe47819f, 0x28d3aa25),
+     TOBN(0x9eea3075, 0xf8dfcf8a), TOBN(0xa284f0aa, 0x95669825),
+     TOBN(0xb3fca250, 0x867d3fd8), TOBN(0x20757b5f, 0x269d691e),
+     TOBN(0xf2c24020, 0x93b8a5de), TOBN(0xd3f93359, 0xebc06da6),
+     TOBN(0x1178293e, 0xb2739c33), TOBN(0xd2a3e770, 0xbcd686e5),
+     TOBN(0xa76f49f4, 0xcd941534), TOBN(0x0d37406b, 0xe3c71c0e),
+     TOBN(0x172d9397, 0x3b97f7e3), TOBN(0xec17e239, 0xbd7fd0de),
+     TOBN(0xe3290551, 0x6f496ba2), TOBN(0x6a693172, 0x36ad50e7),
+     TOBN(0xc4e539a2, 0x83e7eff5), TOBN(0x752737e7, 0x18e1b4cf),
+     TOBN(0xa2f7932c, 0x68af43ee), TOBN(0x5502468e, 0x703d00bd),
+     TOBN(0xe5dc978f, 0x2fb061f5), TOBN(0xc9a1904a, 0x28c815ad),
+     TOBN(0xd3af538d, 0x470c56a4), TOBN(0x159abc5f, 0x193d8ced),
+     TOBN(0x2a37245f, 0x20108ef3), TOBN(0xfa17081e, 0x223f7178),
+     TOBN(0x27b0fb2b, 0x10c8c0f5), TOBN(0x2102c3ea, 0x40650547),
+     TOBN(0x594564df, 0x8ac3bfa7), TOBN(0x98102033, 0x509dad96),
+     TOBN(0x6989643f, 0xf1d18a13), TOBN(0x35eebd91, 0xd7fc5af0),
+     TOBN(0x078d096a, 0xfaeaafd8), TOBN(0xb7a89341, 0xdef3de98),
+     TOBN(0x2a206e8d, 0xecf2a73a), TOBN(0x066a6397, 0x8e551994),
+     TOBN(0x3a6a088a, 0xb98d53a2), TOBN(0x0ce7c67c, 0x2d1124aa),
+     TOBN(0x48cec671, 0x759a113c), TOBN(0xe3b373d3, 0x4f6f67fa),
+     TOBN(0x5455d479, 0xfd36727b), TOBN(0xe5a428ee, 0xa13c0d81),
+     TOBN(0xb853dbc8, 0x1c86682b), TOBN(0xb78d2727, 0xb8d02b2a),
+     TOBN(0xaaf69bed, 0x8ebc329a), TOBN(0xdb6b40b3, 0x293b2148),
+     TOBN(0xe42ea77d, 0xb8c4961f), TOBN(0xb1a12f7c, 0x20e5e0ab),
+     TOBN(0xa0ec5274, 0x79e8b05e), TOBN(0x68027391, 0xfab60a80),
+     TOBN(0x6bfeea5f, 0x16b1bd5e), TOBN(0xf957e420, 0x4de30ad3),
+     TOBN(0xcbaf664e, 0x6a353b9e), TOBN(0x5c873312, 0x26d14feb),
+     TOBN(0x4e87f98c, 0xb65f57cb), TOBN(0xdb60a621, 0x5e0cdd41),
+     TOBN(0x67c16865, 0xa6881440), TOBN(0x1093ef1a, 0x46ab52aa),
+     TOBN(0xc095afb5, 0x3f4ece64), TOBN(0x6a6bb02e, 0x7604551a),
+     TOBN(0x55d44b4e, 0x0b26b8cd), TOBN(0xe5f9a999, 0xf971268a),
+     TOBN(0xc08ec425, 0x11a7de84), TOBN(0x83568095, 0xfda469dd),
+     TOBN(0x737bfba1, 0x6c6c90a2), TOBN(0x1cb9c4a0, 0xbe229831),
+     TOBN(0x93bccbba, 0xbb2eec64), TOBN(0xa0c23b64, 0xda03adbe),
+     TOBN(0x5f7aa00a, 0xe0e86ac4), TOBN(0x470b941e, 0xfc1401e6),
+     TOBN(0x5ad8d679, 0x9df43574), TOBN(0x4ccfb8a9, 0x0f65d810),
+     TOBN(0x1bce80e3, 0xaa7fbd81), TOBN(0x273291ad, 0x9508d20a),
+     TOBN(0xf5c4b46b, 0x42a92806), TOBN(0x810684ec, 0xa86ab44a),
+     TOBN(0x4591640b, 0xca0bc9f8), TOBN(0xb5efcdfc, 0x5c4b6054),
+     TOBN(0x16fc8907, 0x6e9edd12), TOBN(0xe29d0b50, 0xd4d792f9),
+     TOBN(0xa45fd01c, 0x9b03116d), TOBN(0x85035235, 0xc81765a4),
+     TOBN(0x1fe2a9b2, 0xb4b4b67c), TOBN(0xc1d10df0, 0xe8020604),
+     TOBN(0x9d64abfc, 0xbc8058d8), TOBN(0x8943b9b2, 0x712a0fbb),
+     TOBN(0x90eed914, 0x3b3def04), TOBN(0x85ab3aa2, 0x4ce775ff),
+     TOBN(0x605fd4ca, 0x7bbc9040), TOBN(0x8b34a564, 0xe2c75dfb),
+     TOBN(0x41ffc94a, 0x10358560), TOBN(0x2d8a5072, 0x9e5c28aa),
+     TOBN(0xe915a0fc, 0x4cc7eb15), TOBN(0xe9efab05, 0x8f6d0f5d),
+     TOBN(0xdbab47a9, 0xd19e9b91), TOBN(0x8cfed745, 0x0276154c),
+     TOBN(0x154357ae, 0x2cfede0d), TOBN(0x520630df, 0x19f5a4ef),
+     TOBN(0x25759f7c, 0xe382360f), TOBN(0xb6db05c9, 0x88bf5857),
+     TOBN(0x2917d61d, 0x6c58d46c), TOBN(0x14f8e491, 0xfd20cb7a),
+     TOBN(0xb68a727a, 0x11c20340), TOBN(0x0386f86f, 0xaf7ccbb6),
+     TOBN(0x5c8bc6cc, 0xfee09a20), TOBN(0x7d76ff4a, 0xbb7eea35),
+     TOBN(0xa7bdebe7, 0xdb15be7a), TOBN(0x67a08054, 0xd89f0302),
+     TOBN(0x56bf0ea9, 0xc1193364), TOBN(0xc8244467, 0x62837ebe),
+     TOBN(0x32bd8e8b, 0x20d841b8), TOBN(0x127a0548, 0xdbb8a54f),
+     TOBN(0x83dd4ca6, 0x63b20236), TOBN(0x87714718, 0x203491fa),
+     TOBN(0x4dabcaaa, 0xaa8a5288), TOBN(0x91cc0c8a, 0xaf23a1c9),
+     TOBN(0x34c72c6a, 0x3f220e0c), TOBN(0xbcc20bdf, 0x1232144a),
+     TOBN(0x6e2f42da, 0xa20ede1b), TOBN(0xc441f00c, 0x74a00515),
+     TOBN(0xbf46a5b6, 0x734b8c4b), TOBN(0x57409503, 0x7b56c9a4),
+     TOBN(0x9f735261, 0xe4585d45), TOBN(0x9231faed, 0x6734e642),
+     TOBN(0x1158a176, 0xbe70ee6c), TOBN(0x35f1068d, 0x7c3501bf),
+     TOBN(0x6beef900, 0xa2d26115), TOBN(0x649406f2, 0xef0afee3),
+     TOBN(0x3f43a60a, 0xbc2420a1), TOBN(0x509002a7, 0xd5aee4ac),
+     TOBN(0xb46836a5, 0x3ff3571b), TOBN(0x24f98b78, 0x837927c1),
+     TOBN(0x6254256a, 0x4533c716), TOBN(0xf27abb0b, 0xd07ee196),
+     TOBN(0xd7cf64fc, 0x5c6d5bfd), TOBN(0x6915c751, 0xf0cd7a77),
+     TOBN(0xd9f59012, 0x8798f534), TOBN(0x772b0da8, 0xf81d8b5f),
+     TOBN(0x1244260c, 0x2e03fa69), TOBN(0x36cf0e3a, 0x3be1a374),
+     TOBN(0x6e7c1633, 0xef06b960), TOBN(0xa71a4c55, 0x671f90f6),
+     TOBN(0x7a941251, 0x33c673db), TOBN(0xc0bea510, 0x73e8c131),
+     TOBN(0x61a8a699, 0xd4f6c734), TOBN(0x25e78c88, 0x341ed001),
+     TOBN(0x5c18acf8, 0x8e2f7d90), TOBN(0xfdbf33d7, 0x77be32cd),
+     TOBN(0x0a085cd7, 0xd2eb5ee9), TOBN(0x2d702cfb, 0xb3201115),
+     TOBN(0xb6e0ebdb, 0x85c88ce8), TOBN(0x23a3ce3c, 0x1e01d617),
+     TOBN(0x3041618e, 0x567333ac), TOBN(0x9dd0fd8f, 0x157edb6b),
+     TOBN(0x27f74702, 0xb57872b8), TOBN(0x2ef26b4f, 0x657d5fe1),
+     TOBN(0x95426f0a, 0x57cf3d40), TOBN(0x847e2ad1, 0x65a6067a),
+     TOBN(0xd474d9a0, 0x09996a74), TOBN(0x16a56acd, 0x2a26115c),
+     TOBN(0x02a615c3, 0xd16f4d43), TOBN(0xcc3fc965, 0xaadb85b7),
+     TOBN(0x386bda73, 0xce07d1b0), TOBN(0xd82910c2, 0x58ad4178),
+     TOBN(0x124f82cf, 0xcd2617f4), TOBN(0xcc2f5e8d, 0xef691770),
+     TOBN(0x82702550, 0xb8c30ccc), TOBN(0x7b856aea, 0x1a8e575a),
+     TOBN(0xbb822fef, 0xb1ab9459), TOBN(0x085928bc, 0xec24e38e),
+     TOBN(0x5d0402ec, 0xba8f4b4d), TOBN(0xc07cd4ba, 0x00b4d58b),
+     TOBN(0x5d8dffd5, 0x29227e7a), TOBN(0x61d44d0c, 0x31bf386f),
+     TOBN(0xe486dc2b, 0x135e6f4d), TOBN(0x680962eb, 0xe79410ef),
+     TOBN(0xa61bd343, 0xf10088b5), TOBN(0x6aa76076, 0xe2e28686),
+     TOBN(0x80463d11, 0x8fb98871), TOBN(0xcb26f5c3, 0xbbc76aff),
+     TOBN(0xd4ab8edd, 0xfbe03614), TOBN(0xc8eb579b, 0xc0cf2dee),
+     TOBN(0xcc004c15, 0xc93bae41), TOBN(0x46fbae5d, 0x3aeca3b2),
+     TOBN(0x671235cf, 0x0f1e9ab1), TOBN(0xadfba934, 0x9ec285c1),
+     TOBN(0x88ded013, 0xf216c980), TOBN(0xc8ac4fb8, 0xf79e0bc1),
+     TOBN(0xa29b89c6, 0xfb97a237), TOBN(0xb697b780, 0x9922d8e7),
+     TOBN(0x3142c639, 0xddb945b5), TOBN(0x447b06c7, 0xe094c3a9),
+     TOBN(0xcdcb3642, 0x72266c90), TOBN(0x633aad08, 0xa9385046),
+     TOBN(0xa36c936b, 0xb57c6477), TOBN(0x871f8b64, 0xe94dbcc6),
+     TOBN(0x28d0fb62, 0xa591a67b), TOBN(0x9d40e081, 0xc1d926f5),
+     TOBN(0x3111eaf6, 0xf2d84b5a), TOBN(0x228993f9, 0xa565b644),
+     TOBN(0x0ccbf592, 0x2c83188b), TOBN(0xf87b30ab, 0x3df3e197),
+     TOBN(0xb8658b31, 0x7642bca8), TOBN(0x1a032d7f, 0x52800f17),
+     TOBN(0x051dcae5, 0x79bf9445), TOBN(0xeba6b8ee, 0x54a2e253),
+     TOBN(0x5c8b9cad, 0xd4485692), TOBN(0x84bda40e, 0x8986e9be),
+     TOBN(0xd16d16a4, 0x2f0db448), TOBN(0x8ec80050, 0xa14d4188),
+     TOBN(0xb2b26107, 0x98fa7aaa), TOBN(0x41209ee4, 0xf073aa4e),
+     TOBN(0xf1570359, 0xf2d6b19b), TOBN(0xcbe6868c, 0xfc577caf),
+     TOBN(0x186c4bdc, 0x32c04dd3), TOBN(0xa6c35fae, 0xcfeee397),
+     TOBN(0xb4a1b312, 0xf086c0cf), TOBN(0xe0a5ccc6, 0xd9461fe2),
+     TOBN(0xc32278aa, 0x1536189f), TOBN(0x1126c55f, 0xba6df571),
+     TOBN(0x0f71a602, 0xb194560e), TOBN(0x8b2d7405, 0x324bd6e1),
+     TOBN(0x8481939e, 0x3738be71), TOBN(0xb5090b1a, 0x1a4d97a9),
+     TOBN(0x116c65a3, 0xf05ba915), TOBN(0x21863ad3, 0xaae448aa),
+     TOBN(0xd24e2679, 0xa7aae5d3), TOBN(0x7076013d, 0x0de5c1c4),
+     TOBN(0x2d50f8ba, 0xbb05b629), TOBN(0x73c1abe2, 0x6e66efbb),
+     TOBN(0xefd4b422, 0xf2488af7), TOBN(0xe4105d02, 0x663ba575),
+     TOBN(0x7eb60a8b, 0x53a69457), TOBN(0x62210008, 0xc945973b),
+     TOBN(0xfb255478, 0x77a50ec6), TOBN(0xbf0392f7, 0x0a37a72c),
+     TOBN(0xa0a7a19c, 0x4be18e7a), TOBN(0x90d8ea16, 0x25b1e0af),
+     TOBN(0x7582a293, 0xef953f57), TOBN(0x90a64d05, 0xbdc5465a),
+     TOBN(0xca79c497, 0xe2510717), TOBN(0x560dbb7c, 0x18cb641f),
+     TOBN(0x1d8e3286, 0x4b66abfb), TOBN(0xd26f52e5, 0x59030900),
+     TOBN(0x1ee3f643, 0x5584941a), TOBN(0x6d3b3730, 0x569f5958),
+     TOBN(0x9ff2a62f, 0x4789dba5), TOBN(0x91fcb815, 0x72b5c9b7),
+     TOBN(0xf446cb7d, 0x6c8f9a0e), TOBN(0x48f625c1, 0x39b7ecb5),
+     TOBN(0xbabae801, 0x1c6219b8), TOBN(0xe7a562d9, 0x28ac2f23),
+     TOBN(0xe1b48732, 0x26e20588), TOBN(0x06ee1cad, 0x775af051),
+     TOBN(0xda29ae43, 0xfaff79f7), TOBN(0xc141a412, 0x652ee9e0),
+     TOBN(0x1e127f6f, 0x195f4bd0), TOBN(0x29c6ab4f, 0x072f34f8),
+     TOBN(0x7b7c1477, 0x30448112), TOBN(0x82b51af1, 0xe4a38656),
+     TOBN(0x2bf2028a, 0x2f315010), TOBN(0xc9a4a01f, 0x6ea88cd4),
+     TOBN(0xf63e95d8, 0x257e5818), TOBN(0xdd8efa10, 0xb4519b16),
+     TOBN(0xed8973e0, 0x0da910bf), TOBN(0xed49d077, 0x5c0fe4a9),
+     TOBN(0xac3aac5e, 0xb7caee1e), TOBN(0x1033898d, 0xa7f4da57),
+     TOBN(0x42145c0e, 0x5c6669b9), TOBN(0x42daa688, 0xc1aa2aa0),
+     TOBN(0x629cc15c, 0x1a1d885a), TOBN(0x25572ec0, 0xf4b76817),
+     TOBN(0x8312e435, 0x9c8f8f28), TOBN(0x8107f8cd, 0x81965490),
+     TOBN(0x516ff3a3, 0x6fa6110c), TOBN(0x74fb1eb1, 0xfb93561f),
+     TOBN(0x6c0c9047, 0x8457522b), TOBN(0xcfd32104, 0x6bb8bdc6),
+     TOBN(0x2d6884a2, 0xcc80ad57), TOBN(0x7c27fc35, 0x86a9b637),
+     TOBN(0x3461baed, 0xadf4e8cd), TOBN(0x1d56251a, 0x617242f0),
+     TOBN(0x0b80d209, 0xc955bef4), TOBN(0xdf02cad2, 0x06adb047),
+     TOBN(0xf0d7cb91, 0x5ec74fee), TOBN(0xd2503375, 0x1111ba44),
+     TOBN(0x9671755e, 0xdf53cb36), TOBN(0x54dcb612, 0x3368551b),
+     TOBN(0x66d69aac, 0xc8a025a4), TOBN(0x6be946c6, 0xe77ef445),
+     TOBN(0x719946d1, 0xa995e094), TOBN(0x65e848f6, 0xe51e04d8),
+     TOBN(0xe62f3300, 0x6a1e3113), TOBN(0x1541c7c1, 0x501de503),
+     TOBN(0x4daac9fa, 0xf4acfade), TOBN(0x0e585897, 0x44cd0b71),
+     TOBN(0x544fd869, 0x0a51cd77), TOBN(0x60fc20ed, 0x0031016d),
+     TOBN(0x58b404ec, 0xa4276867), TOBN(0x46f6c3cc, 0x34f34993),
+     TOBN(0x477ca007, 0xc636e5bd), TOBN(0x8018f5e5, 0x7c458b47),
+     TOBN(0xa1202270, 0xe47b668f), TOBN(0xcef48ccd, 0xee14f203),
+     TOBN(0x23f98bae, 0x62ff9b4d), TOBN(0x55acc035, 0xc589eddd),
+     TOBN(0x3fe712af, 0x64db4444), TOBN(0x19e9d634, 0xbecdd480),
+     TOBN(0xe08bc047, 0xa930978a), TOBN(0x2dbf24ec, 0xa1280733),
+     TOBN(0x3c0ae38c, 0x2cd706b2), TOBN(0x5b012a5b, 0x359017b9),
+     TOBN(0x3943c38c, 0x72e0f5ae), TOBN(0x786167ea, 0x57176fa3),
+     TOBN(0xe5f9897d, 0x594881dc), TOBN(0x6b5efad8, 0xcfb820c1),
+     TOBN(0xb2179093, 0xd55018de), TOBN(0x39ad7d32, 0x0bac56ce),
+     TOBN(0xb55122e0, 0x2cfc0e81), TOBN(0x117c4661, 0xf6d89daa),
+     TOBN(0x362d01e1, 0xcb64fa09), TOBN(0x6a309b4e, 0x3e9c4ddd),
+     TOBN(0xfa979fb7, 0xabea49b1), TOBN(0xb4b1d27d, 0x10e2c6c5),
+     TOBN(0xbd61c2c4, 0x23afde7a), TOBN(0xeb6614f8, 0x9786d358),
+     TOBN(0x4a5d816b, 0x7f6f7459), TOBN(0xe431a44f, 0x09360e7b),
+     TOBN(0x8c27a032, 0xc309914c), TOBN(0xcea5d68a, 0xcaede3d8),
+     TOBN(0x3668f665, 0x3a0a3f95), TOBN(0x89369416, 0x7ceba27b),
+     TOBN(0x89981fad, 0xe4728fe9), TOBN(0x7102c8a0, 0x8a093562),
+     TOBN(0xbb80310e, 0x235d21c8), TOBN(0x505e55d1, 0xbefb7f7b),
+     TOBN(0xa0a90811, 0x12958a67), TOBN(0xd67e106a, 0x4d851fef),
+     TOBN(0xb84011a9, 0x431dd80e), TOBN(0xeb7c7cca, 0x73306cd9),
+     TOBN(0x20fadd29, 0xd1b3b730), TOBN(0x83858b5b, 0xfe37b3d3),
+     TOBN(0xbf4cd193, 0xb6251d5c), TOBN(0x1cca1fd3, 0x1352d952),
+     TOBN(0xc66157a4, 0x90fbc051), TOBN(0x7990a638, 0x89b98636),}
+    ,
+    {TOBN(0xe5aa692a, 0x87dec0e1), TOBN(0x010ded8d, 0xf7b39d00),
+     TOBN(0x7b1b80c8, 0x54cfa0b5), TOBN(0x66beb876, 0xa0f8ea28),
+     TOBN(0x50d7f531, 0x3476cd0e), TOBN(0xa63d0e65, 0xb08d3949),
+     TOBN(0x1a09eea9, 0x53479fc6), TOBN(0x82ae9891, 0xf499e742),
+     TOBN(0xab58b910, 0x5ca7d866), TOBN(0x582967e2, 0x3adb3b34),
+     TOBN(0x89ae4447, 0xcceac0bc), TOBN(0x919c667c, 0x7bf56af5),
+     TOBN(0x9aec17b1, 0x60f5dcd7), TOBN(0xec697b9f, 0xddcaadbc),
+     TOBN(0x0b98f341, 0x463467f5), TOBN(0xb187f1f7, 0xa967132f),
+     TOBN(0x90fe7a1d, 0x214aeb18), TOBN(0x1506af3c, 0x741432f7),
+     TOBN(0xbb5565f9, 0xe591a0c4), TOBN(0x10d41a77, 0xb44f1bc3),
+     TOBN(0xa09d65e4, 0xa84bde96), TOBN(0x42f060d8, 0xf20a6a1c),
+     TOBN(0x652a3bfd, 0xf27f9ce7), TOBN(0xb6bdb65c, 0x3b3d739f),
+     TOBN(0xeb5ddcb6, 0xec7fae9f), TOBN(0x995f2714, 0xefb66e5a),
+     TOBN(0xdee95d8e, 0x69445d52), TOBN(0x1b6c2d46, 0x09e27620),
+     TOBN(0x32621c31, 0x8129d716), TOBN(0xb03909f1, 0x0958c1aa),
+     TOBN(0x8c468ef9, 0x1af4af63), TOBN(0x162c429f, 0xfba5cdf6),
+     TOBN(0x2f682343, 0x753b9371), TOBN(0x29cab45a, 0x5f1f9cd7),
+     TOBN(0x571623ab, 0xb245db96), TOBN(0xc507db09, 0x3fd79999),
+     TOBN(0x4e2ef652, 0xaf036c32), TOBN(0x86f0cc78, 0x05018e5c),
+     TOBN(0xc10a73d4, 0xab8be350), TOBN(0x6519b397, 0x7e826327),
+     TOBN(0xe8cb5eef, 0x9c053df7), TOBN(0x8de25b37, 0xb300ea6f),
+     TOBN(0xdb03fa92, 0xc849cffb), TOBN(0x242e43a7, 0xe84169bb),
+     TOBN(0xe4fa51f4, 0xdd6f958e), TOBN(0x6925a77f, 0xf4445a8d),
+     TOBN(0xe6e72a50, 0xe90d8949), TOBN(0xc66648e3, 0x2b1f6390),
+     TOBN(0xb2ab1957, 0x173e460c), TOBN(0x1bbbce75, 0x30704590),
+     TOBN(0xc0a90dbd, 0xdb1c7162), TOBN(0x505e399e, 0x15cdd65d),
+     TOBN(0x68434dcb, 0x57797ab7), TOBN(0x60ad35ba, 0x6a2ca8e8),
+     TOBN(0x4bfdb1e0, 0xde3336c1), TOBN(0xbbef99eb, 0xd8b39015),
+     TOBN(0x6c3b96f3, 0x1711ebec), TOBN(0x2da40f1f, 0xce98fdc4),
+     TOBN(0xb99774d3, 0x57b4411f), TOBN(0x87c8bdf4, 0x15b65bb6),
+     TOBN(0xda3a89e3, 0xc2eef12d), TOBN(0xde95bb9b, 0x3c7471f3),
+     TOBN(0x600f225b, 0xd812c594), TOBN(0x54907c5d, 0x2b75a56b),
+     TOBN(0xa93cc5f0, 0x8db60e35), TOBN(0x743e3cd6, 0xfa833319),
+     TOBN(0x7dad5c41, 0xf81683c9), TOBN(0x70c1e7d9, 0x9c34107e),
+     TOBN(0x0edc4a39, 0xa6be0907), TOBN(0x36d47035, 0x86d0b7d3),
+     TOBN(0x8c76da03, 0x272bfa60), TOBN(0x0b4a07ea, 0x0f08a414),
+     TOBN(0x699e4d29, 0x45c1dd53), TOBN(0xcadc5898, 0x231debb5),
+     TOBN(0xdf49fcc7, 0xa77f00e0), TOBN(0x93057bbf, 0xa73e5a0e),
+     TOBN(0x2f8b7ecd, 0x027a4cd1), TOBN(0x114734b3, 0xc614011a),
+     TOBN(0xe7a01db7, 0x67677c68), TOBN(0x89d9be5e, 0x7e273f4f),
+     TOBN(0xd225cb2e, 0x089808ef), TOBN(0xf1f7a27d, 0xd59e4107),
+     TOBN(0x53afc761, 0x8211b9c9), TOBN(0x0361bc67, 0xe6819159),
+     TOBN(0x2a865d0b, 0x7f071426), TOBN(0x6a3c1810, 0xe7072567),
+     TOBN(0x3e3bca1e, 0x0d6bcabd), TOBN(0xa1b02bc1, 0x408591bc),
+     TOBN(0xe0deee59, 0x31fba239), TOBN(0xf47424d3, 0x98bd91d1),
+     TOBN(0x0f8886f4, 0x071a3c1d), TOBN(0x3f7d41e8, 0xa819233b),
+     TOBN(0x708623c2, 0xcf6eb998), TOBN(0x86bb49af, 0x609a287f),
+     TOBN(0x942bb249, 0x63c90762), TOBN(0x0ef6eea5, 0x55a9654b),
+     TOBN(0x5f6d2d72, 0x36f5defe), TOBN(0xfa9922dc, 0x56f99176),
+     TOBN(0x6c8c5ece, 0xf78ce0c7), TOBN(0x7b44589d, 0xbe09b55e),
+     TOBN(0xe11b3bca, 0x9ea83770), TOBN(0xd7fa2c7f, 0x2ab71547),
+     TOBN(0x2a3dd6fa, 0x2a1ddcc0), TOBN(0x09acb430, 0x5a7b7707),
+     TOBN(0x4add4a2e, 0x649d4e57), TOBN(0xcd53a2b0, 0x1917526e),
+     TOBN(0xc5262330, 0x20b44ac4), TOBN(0x4028746a, 0xbaa2c31d),
+     TOBN(0x51318390, 0x64291d4c), TOBN(0xbf48f151, 0xee5ad909),
+     TOBN(0xcce57f59, 0x7b185681), TOBN(0x7c3ac1b0, 0x4854d442),
+     TOBN(0x65587dc3, 0xc093c171), TOBN(0xae7acb24, 0x24f42b65),
+     TOBN(0x5a338adb, 0x955996cb), TOBN(0xc8e65675, 0x6051f91b),
+     TOBN(0x66711fba, 0x28b8d0b1), TOBN(0x15d74137, 0xb6c10a90),
+     TOBN(0x70cdd7eb, 0x3a232a80), TOBN(0xc9e2f07f, 0x6191ed24),
+     TOBN(0xa80d1db6, 0xf79588c0), TOBN(0xfa52fc69, 0xb55768cc),
+     TOBN(0x0b4df1ae, 0x7f54438a), TOBN(0x0cadd1a7, 0xf9b46a4f),
+     TOBN(0xb40ea6b3, 0x1803dd6f), TOBN(0x488e4fa5, 0x55eaae35),
+     TOBN(0x9f047d55, 0x382e4e16), TOBN(0xc9b5b7e0, 0x2f6e0c98),
+     TOBN(0x6b1bd2d3, 0x95762649), TOBN(0xa9604ee7, 0xc7aea3f6),
+     TOBN(0x3646ff27, 0x6dc6f896), TOBN(0x9bf0e7f5, 0x2860bad1),
+     TOBN(0x2d92c821, 0x7cb44b92), TOBN(0xa2f5ce63, 0xaea9c182),
+     TOBN(0xd0a2afb1, 0x9154a5fd), TOBN(0x482e474c, 0x95801da6),
+     TOBN(0xc19972d0, 0xb611c24b), TOBN(0x1d468e65, 0x60a8f351),
+     TOBN(0xeb758069, 0x7bcf6421), TOBN(0xec9dd0ee, 0x88fbc491),
+     TOBN(0x5b59d2bf, 0x956c2e32), TOBN(0x73dc6864, 0xdcddf94e),
+     TOBN(0xfd5e2321, 0xbcee7665), TOBN(0xa7b4f8ef, 0x5e9a06c4),
+     TOBN(0xfba918dd, 0x7280f855), TOBN(0xbbaac260, 0x8baec688),
+     TOBN(0xa3b3f00f, 0x33400f42), TOBN(0x3d2dba29, 0x66f2e6e4),
+     TOBN(0xb6f71a94, 0x98509375), TOBN(0x8f33031f, 0xcea423cc),
+     TOBN(0x009b8dd0, 0x4807e6fb), TOBN(0x5163cfe5, 0x5cdb954c),
+     TOBN(0x03cc8f17, 0xcf41c6e8), TOBN(0xf1f03c2a, 0x037b925c),
+     TOBN(0xc39c19cc, 0x66d2427c), TOBN(0x823d24ba, 0x7b6c18e4),
+     TOBN(0x32ef9013, 0x901f0b4f), TOBN(0x684360f1, 0xf8941c2e),
+     TOBN(0x0ebaff52, 0x2c28092e), TOBN(0x7891e4e3, 0x256c932f),
+     TOBN(0x51264319, 0xac445e3d), TOBN(0x553432e7, 0x8ea74381),
+     TOBN(0xe6eeaa69, 0x67e9c50a), TOBN(0x27ced284, 0x62e628c7),
+     TOBN(0x3f96d375, 0x7a4afa57), TOBN(0xde0a14c3, 0xe484c150),
+     TOBN(0x364a24eb, 0x38bd9923), TOBN(0x1df18da0, 0xe5177422),
+     TOBN(0x174e8f82, 0xd8d38a9b), TOBN(0x2e97c600, 0xe7de1391),
+     TOBN(0xc5709850, 0xa1c175dd), TOBN(0x969041a0, 0x32ae5035),
+     TOBN(0xcbfd533b, 0x76a2086b), TOBN(0xd6bba71b, 0xd7c2e8fe),
+     TOBN(0xb2d58ee6, 0x099dfb67), TOBN(0x3a8b342d, 0x064a85d9),
+     TOBN(0x3bc07649, 0x522f9be3), TOBN(0x690c075b, 0xdf1f49a8),
+     TOBN(0x80e1aee8, 0x3854ec42), TOBN(0x2a7dbf44, 0x17689dc7),
+     TOBN(0xc004fc0e, 0x3faf4078), TOBN(0xb2f02e9e, 0xdf11862c),
+     TOBN(0xf10a5e0f, 0xa0a1b7b3), TOBN(0x30aca623, 0x8936ec80),
+     TOBN(0xf83cbf05, 0x02f40d9a), TOBN(0x4681c468, 0x2c318a4d),
+     TOBN(0x98575618, 0x0e9c2674), TOBN(0xbe79d046, 0x1847092e),
+     TOBN(0xaf1e480a, 0x78bd01e0), TOBN(0x6dd359e4, 0x72a51db9),
+     TOBN(0x62ce3821, 0xe3afbab6), TOBN(0xc5cee5b6, 0x17733199),
+     TOBN(0xe08b30d4, 0x6ffd9fbb), TOBN(0x6e5bc699, 0x36c610b7),
+     TOBN(0xf343cff2, 0x9ce262cf), TOBN(0xca2e4e35, 0x68b914c1),
+     TOBN(0x011d64c0, 0x16de36c5), TOBN(0xe0b10fdd, 0x42e2b829),
+     TOBN(0x78942981, 0x6685aaf8), TOBN(0xe7511708, 0x230ede97),
+     TOBN(0x671ed8fc, 0x3b922bf8), TOBN(0xe4d8c0a0, 0x4c29b133),
+     TOBN(0x87eb1239, 0x3b6e99c4), TOBN(0xaff3974c, 0x8793beba),
+     TOBN(0x03749405, 0x2c18df9b), TOBN(0xc5c3a293, 0x91007139),
+     TOBN(0x6a77234f, 0xe37a0b95), TOBN(0x02c29a21, 0xb661c96b),
+     TOBN(0xc3aaf1d6, 0x141ecf61), TOBN(0x9195509e, 0x3bb22f53),
+     TOBN(0x29597404, 0x22d51357), TOBN(0x1b083822, 0x537bed60),
+     TOBN(0xcd7d6e35, 0xe07289f0), TOBN(0x1f94c48c, 0x6dd86eff),
+     TOBN(0xc8bb1f82, 0xeb0f9cfa), TOBN(0x9ee0b7e6, 0x1b2eb97d),
+     TOBN(0x5a52fe2e, 0x34d74e31), TOBN(0xa352c310, 0x3bf79ab6),
+     TOBN(0x97ff6c5a, 0xabfeeb8f), TOBN(0xbfbe8fef, 0xf5c97305),
+     TOBN(0xd6081ce6, 0xa7904608), TOBN(0x1f812f3a, 0xc4fca249),
+     TOBN(0x9b24bc9a, 0xb9e5e200), TOBN(0x91022c67, 0x38012ee8),
+     TOBN(0xe83d9c5d, 0x30a713a1), TOBN(0x4876e3f0, 0x84ef0f93),
+     TOBN(0xc9777029, 0xc1fbf928), TOBN(0xef7a6bb3, 0xbce7d2a4),
+     TOBN(0xb8067228, 0xdfa2a659), TOBN(0xd5cd3398, 0xd877a48f),
+     TOBN(0xbea4fd8f, 0x025d0f3f), TOBN(0xd67d2e35, 0x2eae7c2b),
+     TOBN(0x184de7d7, 0xcc5f4394), TOBN(0xb5551b5c, 0x4536e142),
+     TOBN(0x2e89b212, 0xd34aa60a), TOBN(0x14a96fea, 0xf50051d5),
+     TOBN(0x4e21ef74, 0x0d12bb0b), TOBN(0xc522f020, 0x60b9677e),
+     TOBN(0x8b12e467, 0x2df7731d), TOBN(0x39f80382, 0x7b326d31),
+     TOBN(0xdfb8630c, 0x39024a94), TOBN(0xaacb96a8, 0x97319452),
+     TOBN(0xd68a3961, 0xeda3867c), TOBN(0x0c58e2b0, 0x77c4ffca),
+     TOBN(0x3d545d63, 0x4da919fa), TOBN(0xef79b69a, 0xf15e2289),
+     TOBN(0x54bc3d3d, 0x808bab10), TOBN(0xc8ab3007, 0x45f82c37),
+     TOBN(0xc12738b6, 0x7c4a658a), TOBN(0xb3c47639, 0x40e72182),
+     TOBN(0x3b77be46, 0x8798e44f), TOBN(0xdc047df2, 0x17a7f85f),
+     TOBN(0x2439d4c5, 0x5e59d92d), TOBN(0xcedca475, 0xe8e64d8d),
+     TOBN(0xa724cd0d, 0x87ca9b16), TOBN(0x35e4fd59, 0xa5540dfe),
+     TOBN(0xf8c1ff18, 0xe4bcf6b1), TOBN(0x856d6285, 0x295018fa),
+     TOBN(0x433f665c, 0x3263c949), TOBN(0xa6a76dd6, 0xa1f21409),
+     TOBN(0x17d32334, 0xcc7b4f79), TOBN(0xa1d03122, 0x06720e4a),
+     TOBN(0xadb6661d, 0x81d9bed5), TOBN(0xf0d6fb02, 0x11db15d1),
+     TOBN(0x7fd11ad5, 0x1fb747d2), TOBN(0xab50f959, 0x3033762b),
+     TOBN(0x2a7e711b, 0xfbefaf5a), TOBN(0xc7393278, 0x3fef2bbf),
+     TOBN(0xe29fa244, 0x0df6f9be), TOBN(0x9092757b, 0x71efd215),
+     TOBN(0xee60e311, 0x4f3d6fd9), TOBN(0x338542d4, 0x0acfb78b),
+     TOBN(0x44a23f08, 0x38961a0f), TOBN(0x1426eade, 0x986987ca),
+     TOBN(0x36e6ee2e, 0x4a863cc6), TOBN(0x48059420, 0x628b8b79),
+     TOBN(0x30303ad8, 0x7396e1de), TOBN(0x5c8bdc48, 0x38c5aad1),
+     TOBN(0x3e40e11f, 0x5c8f5066), TOBN(0xabd6e768, 0x8d246bbd),
+     TOBN(0x68aa40bb, 0x23330a01), TOBN(0xd23f5ee4, 0xc34eafa0),
+     TOBN(0x3bbee315, 0x5de02c21), TOBN(0x18dd4397, 0xd1d8dd06),
+     TOBN(0x3ba1939a, 0x122d7b44), TOBN(0xe6d3b40a, 0xa33870d6),
+     TOBN(0x8e620f70, 0x1c4fe3f8), TOBN(0xf6bba1a5, 0xd3a50cbf),
+     TOBN(0x4a78bde5, 0xcfc0aee0), TOBN(0x847edc46, 0xc08c50bd),
+     TOBN(0xbaa2439c, 0xad63c9b2), TOBN(0xceb4a728, 0x10fc2acb),
+     TOBN(0xa419e40e, 0x26da033d), TOBN(0x6cc3889d, 0x03e02683),
+     TOBN(0x1cd28559, 0xfdccf725), TOBN(0x0fd7e0f1, 0x8d13d208),
+     TOBN(0x01b9733b, 0x1f0df9d4), TOBN(0x8cc2c5f3, 0xa2b5e4f3),
+     TOBN(0x43053bfa, 0x3a304fd4), TOBN(0x8e87665c, 0x0a9f1aa7),
+     TOBN(0x087f29ec, 0xd73dc965), TOBN(0x15ace455, 0x3e9023db),
+     TOBN(0x2370e309, 0x2bce28b4), TOBN(0xf9723442, 0xb6b1e84a),
+     TOBN(0xbeee662e, 0xb72d9f26), TOBN(0xb19396de, 0xf0e47109),
+     TOBN(0x85b1fa73, 0xe13289d0), TOBN(0x436cf77e, 0x54e58e32),
+     TOBN(0x0ec833b3, 0xe990ef77), TOBN(0x7373e3ed, 0x1b11fc25),
+     TOBN(0xbe0eda87, 0x0fc332ce), TOBN(0xced04970, 0x8d7ea856),
+     TOBN(0xf85ff785, 0x7e977ca0), TOBN(0xb66ee8da, 0xdfdd5d2b),
+     TOBN(0xf5e37950, 0x905af461), TOBN(0x587b9090, 0x966d487c),
+     TOBN(0x6a198a1b, 0x32ba0127), TOBN(0xa7720e07, 0x141615ac),
+     TOBN(0xa23f3499, 0x996ef2f2), TOBN(0xef5f64b4, 0x470bcb3d),
+     TOBN(0xa526a962, 0x92b8c559), TOBN(0x0c14aac0, 0x69740a0f),
+     TOBN(0x0d41a9e3, 0xa6bdc0a5), TOBN(0x97d52106, 0x9c48aef4),
+     TOBN(0xcf16bd30, 0x3e7c253b), TOBN(0xcc834b1a, 0x47fdedc1),
+     TOBN(0x7362c6e5, 0x373aab2e), TOBN(0x264ed85e, 0xc5f590ff),
+     TOBN(0x7a46d9c0, 0x66d41870), TOBN(0xa50c20b1, 0x4787ba09),
+     TOBN(0x185e7e51, 0xe3d44635), TOBN(0xb3b3e080, 0x31e2d8dc),
+     TOBN(0xbed1e558, 0xa179e9d9), TOBN(0x2daa3f79, 0x74a76781),
+     TOBN(0x4372baf2, 0x3a40864f), TOBN(0x46900c54, 0x4fe75cb5),
+     TOBN(0xb95f171e, 0xf76765d0), TOBN(0x4ad726d2, 0x95c87502),
+     TOBN(0x2ec769da, 0x4d7c99bd), TOBN(0x5e2ddd19, 0xc36cdfa8),
+     TOBN(0xc22117fc, 0xa93e6dea), TOBN(0xe8a2583b, 0x93771123),
+     TOBN(0xbe2f6089, 0xfa08a3a2), TOBN(0x4809d5ed, 0x8f0e1112),
+     TOBN(0x3b414aa3, 0xda7a095e), TOBN(0x9049acf1, 0x26f5aadd),
+     TOBN(0x78d46a4d, 0x6be8b84a), TOBN(0xd66b1963, 0xb732b9b3),
+     TOBN(0x5c2ac2a0, 0xde6e9555), TOBN(0xcf52d098, 0xb5bd8770),
+     TOBN(0x15a15fa6, 0x0fd28921), TOBN(0x56ccb81e, 0x8b27536d),
+     TOBN(0x0f0d8ab8, 0x9f4ccbb8), TOBN(0xed5f44d2, 0xdb221729),
+     TOBN(0x43141988, 0x00bed10c), TOBN(0xc94348a4, 0x1d735b8b),
+     TOBN(0x79f3e9c4, 0x29ef8479), TOBN(0x4c13a4e3, 0x614c693f),
+     TOBN(0x32c9af56, 0x8e143a14), TOBN(0xbc517799, 0xe29ac5c4),
+     TOBN(0x05e17992, 0x2774856f), TOBN(0x6e52fb05, 0x6c1bf55f),
+     TOBN(0xaeda4225, 0xe4f19e16), TOBN(0x70f4728a, 0xaf5ccb26),
+     TOBN(0x5d2118d1, 0xb2947f22), TOBN(0xc827ea16, 0x281d6fb9),
+     TOBN(0x8412328d, 0x8cf0eabd), TOBN(0x45ee9fb2, 0x03ef9dcf),
+     TOBN(0x8e700421, 0xbb937d63), TOBN(0xdf8ff2d5, 0xcc4b37a6),
+     TOBN(0xa4c0d5b2, 0x5ced7b68), TOBN(0x6537c1ef, 0xc7308f59),
+     TOBN(0x25ce6a26, 0x3b37f8e8), TOBN(0x170e9a9b, 0xdeebc6ce),
+     TOBN(0xdd037952, 0x8728d72c), TOBN(0x445b0e55, 0x850154bc),
+     TOBN(0x4b7d0e06, 0x83a7337b), TOBN(0x1e3416d4, 0xffecf249),
+     TOBN(0x24840eff, 0x66a2b71f), TOBN(0xd0d9a50a, 0xb37cc26d),
+     TOBN(0xe2198150, 0x6fe28ef7), TOBN(0x3cc5ef16, 0x23324c7f),
+     TOBN(0x220f3455, 0x769b5263), TOBN(0xe2ade2f1, 0xa10bf475),
+     TOBN(0x28cd20fa, 0x458d3671), TOBN(0x1549722c, 0x2dc4847b),
+     TOBN(0x6dd01e55, 0x591941e3), TOBN(0x0e6fbcea, 0x27128ccb),
+     TOBN(0xae1a1e6b, 0x3bef0262), TOBN(0xfa8c472c, 0x8f54e103),
+     TOBN(0x7539c0a8, 0x72c052ec), TOBN(0xd7b27369, 0x5a3490e9),
+     TOBN(0x143fe1f1, 0x71684349), TOBN(0x36b4722e, 0x32e19b97),
+     TOBN(0xdc059227, 0x90980aff), TOBN(0x175c9c88, 0x9e13d674),
+     TOBN(0xa7de5b22, 0x6e6bfdb1), TOBN(0x5ea5b7b2, 0xbedb4b46),
+     TOBN(0xd5570191, 0xd34a6e44), TOBN(0xfcf60d2e, 0xa24ff7e6),
+     TOBN(0x614a392d, 0x677819e1), TOBN(0x7be74c7e, 0xaa5a29e8),
+     TOBN(0xab50fece, 0x63c85f3f), TOBN(0xaca2e2a9, 0x46cab337),
+     TOBN(0x7f700388, 0x122a6fe3), TOBN(0xdb69f703, 0x882a04a8),
+     TOBN(0x9a77935d, 0xcf7aed57), TOBN(0xdf16207c, 0x8d91c86f),
+     TOBN(0x2fca49ab, 0x63ed9998), TOBN(0xa3125c44, 0xa77ddf96),
+     TOBN(0x05dd8a86, 0x24344072), TOBN(0xa023dda2, 0xfec3fb56),
+     TOBN(0x421b41fc, 0x0c743032), TOBN(0x4f2120c1, 0x5e438639),
+     TOBN(0xfb7cae51, 0xc83c1b07), TOBN(0xb2370caa, 0xcac2171a),
+     TOBN(0x2eb2d962, 0x6cc820fb), TOBN(0x59feee5c, 0xb85a44bf),
+     TOBN(0x94620fca, 0x5b6598f0), TOBN(0x6b922cae, 0x7e314051),
+     TOBN(0xff8745ad, 0x106bed4e), TOBN(0x546e71f5, 0xdfa1e9ab),
+     TOBN(0x935c1e48, 0x1ec29487), TOBN(0x9509216c, 0x4d936530),
+     TOBN(0xc7ca3067, 0x85c9a2db), TOBN(0xd6ae5152, 0x6be8606f),
+     TOBN(0x09dbcae6, 0xe14c651d), TOBN(0xc9536e23, 0x9bc32f96),
+     TOBN(0xa90535a9, 0x34521b03), TOBN(0xf39c526c, 0x878756ff),
+     TOBN(0x383172ec, 0x8aedf03c), TOBN(0x20a8075e, 0xefe0c034),
+     TOBN(0xf22f9c62, 0x64026422), TOBN(0x8dd10780, 0x24b9d076),
+     TOBN(0x944c742a, 0x3bef2950), TOBN(0x55b9502e, 0x88a2b00b),
+     TOBN(0xa59e14b4, 0x86a09817), TOBN(0xa39dd3ac, 0x47bb4071),
+     TOBN(0x55137f66, 0x3be0592f), TOBN(0x07fcafd4, 0xc9e63f5b),
+     TOBN(0x963652ee, 0x346eb226), TOBN(0x7dfab085, 0xec2facb7),
+     TOBN(0x273bf2b8, 0x691add26), TOBN(0x30d74540, 0xf2b46c44),
+     TOBN(0x05e8e73e, 0xf2c2d065), TOBN(0xff9b8a00, 0xd42eeac9),
+     TOBN(0x2fcbd205, 0x97209d22), TOBN(0xeb740ffa, 0xde14ea2c),
+     TOBN(0xc71ff913, 0xa8aef518), TOBN(0x7bfc74bb, 0xfff4cfa2),
+     TOBN(0x1716680c, 0xb6b36048), TOBN(0x121b2cce, 0x9ef79af1),
+     TOBN(0xbff3c836, 0xa01eb3d3), TOBN(0x50eb1c6a, 0x5f79077b),
+     TOBN(0xa48c32d6, 0xa004bbcf), TOBN(0x47a59316, 0x7d64f61d),
+     TOBN(0x6068147f, 0x93102016), TOBN(0x12c5f654, 0x94d12576),
+     TOBN(0xefb071a7, 0xc9bc6b91), TOBN(0x7c2da0c5, 0x6e23ea95),
+     TOBN(0xf4fd45b6, 0xd4a1dd5d), TOBN(0x3e7ad9b6, 0x9122b13c),
+     TOBN(0x342ca118, 0xe6f57a48), TOBN(0x1c2e94a7, 0x06f8288f),
+     TOBN(0x99e68f07, 0x5a97d231), TOBN(0x7c80de97, 0x4d838758),
+     TOBN(0xbce0f5d0, 0x05872727), TOBN(0xbe5d95c2, 0x19c4d016),
+     TOBN(0x921d5cb1, 0x9c2492ee), TOBN(0x42192dc1, 0x404d6fb3),
+     TOBN(0x4c84dcd1, 0x32f988d3), TOBN(0xde26d61f, 0xa17b8e85),
+     TOBN(0xc466dcb6, 0x137c7408), TOBN(0x9a38d7b6, 0x36a266da),
+     TOBN(0x7ef5cb06, 0x83bebf1b), TOBN(0xe5cdcbbf, 0x0fd014e3),
+     TOBN(0x30aa376d, 0xf65965a0), TOBN(0x60fe88c2, 0xebb3e95e),
+     TOBN(0x33fd0b61, 0x66ee6f20), TOBN(0x8827dcdb, 0x3f41f0a0),
+     TOBN(0xbf8a9d24, 0x0c56c690), TOBN(0x40265dad, 0xddb7641d),
+     TOBN(0x522b05bf, 0x3a6b662b), TOBN(0x466d1dfe, 0xb1478c9b),
+     TOBN(0xaa616962, 0x1484469b), TOBN(0x0db60549, 0x02df8f9f),
+     TOBN(0xc37bca02, 0x3cb8bf51), TOBN(0x5effe346, 0x21371ce8),
+     TOBN(0xe8f65264, 0xff112c32), TOBN(0x8a9c736d, 0x7b971fb2),
+     TOBN(0xa4f19470, 0x7b75080d), TOBN(0xfc3f2c5a, 0x8839c59b),
+     TOBN(0x1d6c777e, 0x5aeb49c2), TOBN(0xf3db034d, 0xda1addfe),
+     TOBN(0xd76fee5a, 0x5535affc), TOBN(0x0853ac70, 0xb92251fd),
+     TOBN(0x37e3d594, 0x8b2a29d5), TOBN(0x28f1f457, 0x4de00ddb),
+     TOBN(0x8083c1b5, 0xf42c328b), TOBN(0xd8ef1d8f, 0xe493c73b),
+     TOBN(0x96fb6260, 0x41dc61bd), TOBN(0xf74e8a9d, 0x27ee2f8a),
+     TOBN(0x7c605a80, 0x2c946a5d), TOBN(0xeed48d65, 0x3839ccfd),
+     TOBN(0x9894344f, 0x3a29467a), TOBN(0xde81e949, 0xc51eba6d),
+     TOBN(0xdaea066b, 0xa5e5c2f2), TOBN(0x3fc8a614, 0x08c8c7b3),
+     TOBN(0x7adff88f, 0x06d0de9f), TOBN(0xbbc11cf5, 0x3b75ce0a),
+     TOBN(0x9fbb7acc, 0xfbbc87d5), TOBN(0xa1458e26, 0x7badfde2)}
+    ,
+    {TOBN(0x1cb43668, 0xe039c256), TOBN(0x5f26fb8b, 0x7c17fd5d),
+     TOBN(0xeee426af, 0x79aa062b), TOBN(0x072002d0, 0xd78fbf04),
+     TOBN(0x4c9ca237, 0xe84fb7e3), TOBN(0xb401d8a1, 0x0c82133d),
+     TOBN(0xaaa52592, 0x6d7e4181), TOBN(0xe9430833, 0x73dbb152),
+     TOBN(0xf92dda31, 0xbe24319a), TOBN(0x03f7d28b, 0xe095a8e7),
+     TOBN(0xa52fe840, 0x98782185), TOBN(0x276ddafe, 0x29c24dbc),
+     TOBN(0x80cd5496, 0x1d7a64eb), TOBN(0xe4360889, 0x7f1dbe42),
+     TOBN(0x2f81a877, 0x8438d2d5), TOBN(0x7e4d52a8, 0x85169036),
+     TOBN(0x19e3d5b1, 0x1d59715d), TOBN(0xc7eaa762, 0xd788983e),
+     TOBN(0xe5a730b0, 0xabf1f248), TOBN(0xfbab8084, 0xfae3fd83),
+     TOBN(0x65e50d21, 0x53765b2f), TOBN(0xbdd4e083, 0xfa127f3d),
+     TOBN(0x9cf3c074, 0x397b1b10), TOBN(0x59f8090c, 0xb1b59fd3),
+     TOBN(0x7b15fd9d, 0x615faa8f), TOBN(0x8fa1eb40, 0x968554ed),
+     TOBN(0x7bb4447e, 0x7aa44882), TOBN(0x2bb2d0d1, 0x029fff32),
+     TOBN(0x075e2a64, 0x6caa6d2f), TOBN(0x8eb879de, 0x22e7351b),
+     TOBN(0xbcd5624e, 0x9a506c62), TOBN(0x218eaef0, 0xa87e24dc),
+     TOBN(0x37e56847, 0x44ddfa35), TOBN(0x9ccfc5c5, 0xdab3f747),
+     TOBN(0x9ac1df3f, 0x1ee96cf4), TOBN(0x0c0571a1, 0x3b480b8f),
+     TOBN(0x2fbeb3d5, 0x4b3a7b3c), TOBN(0x35c03669, 0x5dcdbb99),
+     TOBN(0x52a0f5dc, 0xb2415b3a), TOBN(0xd57759b4, 0x4413ed9a),
+     TOBN(0x1fe647d8, 0x3d30a2c5), TOBN(0x0857f77e, 0xf78a81dc),
+     TOBN(0x11d5a334, 0x131a4a9b), TOBN(0xc0a94af9, 0x29d393f5),
+     TOBN(0xbc3a5c0b, 0xdaa6ec1a), TOBN(0xba9fe493, 0x88d2d7ed),
+     TOBN(0xbb4335b4, 0xbb614797), TOBN(0x991c4d68, 0x72f83533),
+     TOBN(0x53258c28, 0xd2f01cb3), TOBN(0x93d6eaa3, 0xd75db0b1),
+     TOBN(0x419a2b0d, 0xe87d0db4), TOBN(0xa1e48f03, 0xd8fe8493),
+     TOBN(0xf747faf6, 0xc508b23a), TOBN(0xf137571a, 0x35d53549),
+     TOBN(0x9f5e58e2, 0xfcf9b838), TOBN(0xc7186cee, 0xa7fd3cf5),
+     TOBN(0x77b868ce, 0xe978a1d3), TOBN(0xe3a68b33, 0x7ab92d04),
+     TOBN(0x51029794, 0x87a5b862), TOBN(0x5f0606c3, 0x3a61d41d),
+     TOBN(0x2814be27, 0x6f9326f1), TOBN(0x2f521c14, 0xc6fe3c2e),
+     TOBN(0x17464d7d, 0xacdf7351), TOBN(0x10f5f9d3, 0x777f7e44),
+     TOBN(0xce8e616b, 0x269fb37d), TOBN(0xaaf73804, 0x7de62de5),
+     TOBN(0xaba11175, 0x4fdd4153), TOBN(0x515759ba, 0x3770b49b),
+     TOBN(0x8b09ebf8, 0xaa423a61), TOBN(0x592245a1, 0xcd41fb92),
+     TOBN(0x1cba8ec1, 0x9b4c8936), TOBN(0xa87e91e3, 0xaf36710e),
+     TOBN(0x1fd84ce4, 0x3d34a2e3), TOBN(0xee3759ce, 0xb43b5d61),
+     TOBN(0x895bc78c, 0x619186c7), TOBN(0xf19c3809, 0xcbb9725a),
+     TOBN(0xc0be21aa, 0xde744b1f), TOBN(0xa7d222b0, 0x60f8056b),
+     TOBN(0x74be6157, 0xb23efe11), TOBN(0x6fab2b4f, 0x0cd68253),
+     TOBN(0xad33ea5f, 0x4bf1d725), TOBN(0x9c1d8ee2, 0x4f6c950f),
+     TOBN(0x544ee78a, 0xa377af06), TOBN(0x54f489bb, 0x94a113e1),
+     TOBN(0x8f11d634, 0x992fb7e8), TOBN(0x0169a7aa, 0xa2a44347),
+     TOBN(0x1d49d4af, 0x95020e00), TOBN(0x95945722, 0xe08e120b),
+     TOBN(0xb6e33878, 0xa4d32282), TOBN(0xe36e029d, 0x48020ae7),
+     TOBN(0xe05847fb, 0x37a9b750), TOBN(0xf876812c, 0xb29e3819),
+     TOBN(0x84ad138e, 0xd23a17f0), TOBN(0x6d7b4480, 0xf0b3950e),
+     TOBN(0xdfa8aef4, 0x2fd67ae0), TOBN(0x8d3eea24, 0x52333af6),
+     TOBN(0x0d052075, 0xb15d5acc), TOBN(0xc6d9c79f, 0xbd815bc4),
+     TOBN(0x8dcafd88, 0xdfa36cf2), TOBN(0x908ccbe2, 0x38aa9070),
+     TOBN(0x638722c4, 0xba35afce), TOBN(0x5a3da8b0, 0xfd6abf0b),
+     TOBN(0x2dce252c, 0xc9c335c1), TOBN(0x84e7f0de, 0x65aa799b),
+     TOBN(0x2101a522, 0xb99a72cb), TOBN(0x06de6e67, 0x87618016),
+     TOBN(0x5ff8c7cd, 0xe6f3653e), TOBN(0x0a821ab5, 0xc7a6754a),
+     TOBN(0x7e3fa52b, 0x7cb0b5a2), TOBN(0xa7fb121c, 0xc9048790),
+     TOBN(0x1a725020, 0x06ce053a), TOBN(0xb490a31f, 0x04e929b0),
+     TOBN(0xe17be47d, 0x62dd61ad), TOBN(0x781a961c, 0x6be01371),
+     TOBN(0x1063bfd3, 0xdae3cbba), TOBN(0x35647406, 0x7f73c9ba),
+     TOBN(0xf50e957b, 0x2736a129), TOBN(0xa6313702, 0xed13f256),
+     TOBN(0x9436ee65, 0x3a19fcc5), TOBN(0xcf2bdb29, 0xe7a4c8b6),
+     TOBN(0xb06b1244, 0xc5f95cd8), TOBN(0xda8c8af0, 0xf4ab95f4),
+     TOBN(0x1bae59c2, 0xb9e5836d), TOBN(0x07d51e7e, 0x3acffffc),
+     TOBN(0x01e15e6a, 0xc2ccbcda), TOBN(0x3bc1923f, 0x8528c3e0),
+     TOBN(0x43324577, 0xa49fead4), TOBN(0x61a1b884, 0x2aa7a711),
+     TOBN(0xf9a86e08, 0x700230ef), TOBN(0x0af585a1, 0xbd19adf8),
+     TOBN(0x7645f361, 0xf55ad8f2), TOBN(0x6e676223, 0x46c3614c),
+     TOBN(0x23cb257c, 0x4e774d3f), TOBN(0x82a38513, 0xac102d1b),
+     TOBN(0x9bcddd88, 0x7b126aa5), TOBN(0xe716998b, 0xeefd3ee4),
+     TOBN(0x4239d571, 0xfb167583), TOBN(0xdd011c78, 0xd16c8f8a),
+     TOBN(0x271c2895, 0x69a27519), TOBN(0x9ce0a3b7, 0xd2d64b6a),
+     TOBN(0x8c977289, 0xd5ec6738), TOBN(0xa3b49f9a, 0x8840ef6b),
+     TOBN(0x808c14c9, 0x9a453419), TOBN(0x5c00295b, 0x0cf0a2d5),
+     TOBN(0x524414fb, 0x1d4bcc76), TOBN(0xb07691d2, 0x459a88f1),
+     TOBN(0x77f43263, 0xf70d110f), TOBN(0x64ada5e0, 0xb7abf9f3),
+     TOBN(0xafd0f94e, 0x5b544cf5), TOBN(0xb4a13a15, 0xfd2713fe),
+     TOBN(0xb99b7d6e, 0x250c74f4), TOBN(0x097f2f73, 0x20324e45),
+     TOBN(0x994b37d8, 0xaffa8208), TOBN(0xc3c31b0b, 0xdc29aafc),
+     TOBN(0x3da74651, 0x7a3a607f), TOBN(0xd8e1b8c1, 0xfe6955d6),
+     TOBN(0x716e1815, 0xc8418682), TOBN(0x541d487f, 0x7dc91d97),
+     TOBN(0x48a04669, 0xc6996982), TOBN(0xf39cab15, 0x83a6502e),
+     TOBN(0x025801a0, 0xe68db055), TOBN(0xf3569758, 0xba3338d5),
+     TOBN(0xb0c8c0aa, 0xee2afa84), TOBN(0x4f6985d3, 0xfb6562d1),
+     TOBN(0x351f1f15, 0x132ed17a), TOBN(0x510ed0b4, 0xc04365fe),
+     TOBN(0xa3f98138, 0xe5b1f066), TOBN(0xbc9d95d6, 0x32df03dc),
+     TOBN(0xa83ccf6e, 0x19abd09e), TOBN(0x0b4097c1, 0x4ff17edb),
+     TOBN(0x58a5c478, 0xd64a06ce), TOBN(0x2ddcc3fd, 0x544a58fd),
+     TOBN(0xd449503d, 0x9e8153b8), TOBN(0x3324fd02, 0x7774179b),
+     TOBN(0xaf5d47c8, 0xdbd9120c), TOBN(0xeb860162, 0x34fa94db),
+     TOBN(0x5817bdd1, 0x972f07f4), TOBN(0xe5579e2e, 0xd27bbceb),
+     TOBN(0x86847a1f, 0x5f11e5a6), TOBN(0xb39ed255, 0x7c3cf048),
+     TOBN(0xe1076417, 0xa2f62e55), TOBN(0x6b9ab38f, 0x1bcf82a2),
+     TOBN(0x4bb7c319, 0x7aeb29f9), TOBN(0xf6d17da3, 0x17227a46),
+     TOBN(0xab53ddbd, 0x0f968c00), TOBN(0xa03da7ec, 0x000c880b),
+     TOBN(0x7b239624, 0x6a9ad24d), TOBN(0x612c0401, 0x01ec60d0),
+     TOBN(0x70d10493, 0x109f5df1), TOBN(0xfbda4030, 0x80af7550),
+     TOBN(0x30b93f95, 0xc6b9a9b3), TOBN(0x0c74ec71, 0x007d9418),
+     TOBN(0x94175564, 0x6edb951f), TOBN(0x5f4a9d78, 0x7f22c282),
+     TOBN(0xb7870895, 0xb38d1196), TOBN(0xbc593df3, 0xa228ce7c),
+     TOBN(0xc78c5bd4, 0x6af3641a), TOBN(0x7802200b, 0x3d9b3dcc),
+     TOBN(0x0dc73f32, 0x8be33304), TOBN(0x847ed87d, 0x61ffb79a),
+     TOBN(0xf85c974e, 0x6d671192), TOBN(0x1e14100a, 0xde16f60f),
+     TOBN(0x45cb0d5a, 0x95c38797), TOBN(0x18923bba, 0x9b022da4),
+     TOBN(0xef2be899, 0xbbe7e86e), TOBN(0x4a1510ee, 0x216067bf),
+     TOBN(0xd98c8154, 0x84d5ce3e), TOBN(0x1af777f0, 0xf92a2b90),
+     TOBN(0x9fbcb400, 0x4ef65724), TOBN(0x3e04a4c9, 0x3c0ca6fe),
+     TOBN(0xfb3e2cb5, 0x55002994), TOBN(0x1f3a93c5, 0x5363ecab),
+     TOBN(0x1fe00efe, 0x3923555b), TOBN(0x744bedd9, 0x1e1751ea),
+     TOBN(0x3fb2db59, 0x6ab69357), TOBN(0x8dbd7365, 0xf5e6618b),
+     TOBN(0x99d53099, 0xdf1ea40e), TOBN(0xb3f24a0b, 0x57d61e64),
+     TOBN(0xd088a198, 0x596eb812), TOBN(0x22c8361b, 0x5762940b),
+     TOBN(0x66f01f97, 0xf9c0d95c), TOBN(0x88461172, 0x8e43cdae),
+     TOBN(0x11599a7f, 0xb72b15c3), TOBN(0x135a7536, 0x420d95cc),
+     TOBN(0x2dcdf0f7, 0x5f7ae2f6), TOBN(0x15fc6e1d, 0xd7fa6da2),
+     TOBN(0x81ca829a, 0xd1d441b6), TOBN(0x84c10cf8, 0x04a106b6),
+     TOBN(0xa9b26c95, 0xa73fbbd0), TOBN(0x7f24e0cb, 0x4d8f6ee8),
+     TOBN(0x48b45937, 0x1e25a043), TOBN(0xf8a74fca, 0x036f3dfe),
+     TOBN(0x1ed46585, 0xc9f84296), TOBN(0x7fbaa8fb, 0x3bc278b0),
+     TOBN(0xa8e96cd4, 0x6c4fcbd0), TOBN(0x940a1202, 0x73b60a5f),
+     TOBN(0x34aae120, 0x55a4aec8), TOBN(0x550e9a74, 0xdbd742f0),
+     TOBN(0x794456d7, 0x228c68ab), TOBN(0x492f8868, 0xa4e25ec6),
+     TOBN(0x682915ad, 0xb2d8f398), TOBN(0xf13b51cc, 0x5b84c953),
+     TOBN(0xcda90ab8, 0x5bb917d6), TOBN(0x4b615560, 0x4ea3dee1),
+     TOBN(0x578b4e85, 0x0a52c1c8), TOBN(0xeab1a695, 0x20b75fc4),
+     TOBN(0x60c14f3c, 0xaa0bb3c6), TOBN(0x220f448a, 0xb8216094),
+     TOBN(0x4fe7ee31, 0xb0e63d34), TOBN(0xf4600572, 0xa9e54fab),
+     TOBN(0xc0493334, 0xd5e7b5a4), TOBN(0x8589fb92, 0x06d54831),
+     TOBN(0xaa70f5cc, 0x6583553a), TOBN(0x0879094a, 0xe25649e5),
+     TOBN(0xcc904507, 0x10044652), TOBN(0xebb0696d, 0x02541c4f),
+     TOBN(0x5a171fde, 0xb9718710), TOBN(0x38f1bed8, 0xf374a9f5),
+     TOBN(0xc8c582e1, 0xba39bdc1), TOBN(0xfc457b0a, 0x908cc0ce),
+     TOBN(0x9a187fd4, 0x883841e2), TOBN(0x8ec25b39, 0x38725381),
+     TOBN(0x2553ed05, 0x96f84395), TOBN(0x095c7661, 0x6f6c6897),
+     TOBN(0x917ac85c, 0x4bdc5610), TOBN(0xb2885fe4, 0x179eb301),
+     TOBN(0x5fc65547, 0x8b78bdcc), TOBN(0x4a9fc893, 0xe59e4699),
+     TOBN(0xbb7ff0cd, 0x3ce299af), TOBN(0x195be9b3, 0xadf38b20),
+     TOBN(0x6a929c87, 0xd38ddb8f), TOBN(0x55fcc99c, 0xb21a51b9),
+     TOBN(0x2b695b4c, 0x721a4593), TOBN(0xed1e9a15, 0x768eaac2),
+     TOBN(0xfb63d71c, 0x7489f914), TOBN(0xf98ba31c, 0x78118910),
+     TOBN(0x80291373, 0x9b128eb4), TOBN(0x7801214e, 0xd448af4a),
+     TOBN(0xdbd2e22b, 0x55418dd3), TOBN(0xeffb3c0d, 0xd3998242),
+     TOBN(0xdfa6077c, 0xc7bf3827), TOBN(0xf2165bcb, 0x47f8238f),
+     TOBN(0xfe37cf68, 0x8564d554), TOBN(0xe5f825c4, 0x0a81fb98),
+     TOBN(0x43cc4f67, 0xffed4d6f), TOBN(0xbc609578, 0xb50a34b0),
+     TOBN(0x8aa8fcf9, 0x5041faf1), TOBN(0x5659f053, 0x651773b6),
+     TOBN(0xe87582c3, 0x6044d63b), TOBN(0xa6089409, 0x0cdb0ca0),
+     TOBN(0x8c993e0f, 0xbfb2bcf6), TOBN(0xfc64a719, 0x45985cfc),
+     TOBN(0x15c4da80, 0x83dbedba), TOBN(0x804ae112, 0x2be67df7),
+     TOBN(0xda4c9658, 0xa23defde), TOBN(0x12002ddd, 0x5156e0d3),
+     TOBN(0xe68eae89, 0x5dd21b96), TOBN(0x8b99f28b, 0xcf44624d),
+     TOBN(0x0ae00808, 0x1ec8897a), TOBN(0xdd0a9303, 0x6712f76e),
+     TOBN(0x96237522, 0x4e233de4), TOBN(0x192445b1, 0x2b36a8a5),
+     TOBN(0xabf9ff74, 0x023993d9), TOBN(0x21f37bf4, 0x2aad4a8f),
+     TOBN(0x340a4349, 0xf8bd2bbd), TOBN(0x1d902cd9, 0x4868195d),
+     TOBN(0x3d27bbf1, 0xe5fdb6f1), TOBN(0x7a5ab088, 0x124f9f1c),
+     TOBN(0xc466ab06, 0xf7a09e03), TOBN(0x2f8a1977, 0x31f2c123),
+     TOBN(0xda355dc7, 0x041b6657), TOBN(0xcb840d12, 0x8ece2a7c),
+     TOBN(0xb600ad9f, 0x7db32675), TOBN(0x78fea133, 0x07a06f1b),
+     TOBN(0x5d032269, 0xb31f6094), TOBN(0x07753ef5, 0x83ec37aa),
+     TOBN(0x03485aed, 0x9c0bea78), TOBN(0x41bb3989, 0xbc3f4524),
+     TOBN(0x09403761, 0x697f726d), TOBN(0x6109beb3, 0xdf394820),
+     TOBN(0x804111ea, 0x3b6d1145), TOBN(0xb6271ea9, 0xa8582654),
+     TOBN(0x619615e6, 0x24e66562), TOBN(0xa2554945, 0xd7b6ad9c),
+     TOBN(0xd9c4985e, 0x99bfe35f), TOBN(0x9770ccc0, 0x7b51cdf6),
+     TOBN(0x7c327013, 0x92881832), TOBN(0x8777d45f, 0x286b26d1),
+     TOBN(0x9bbeda22, 0xd847999d), TOBN(0x03aa33b6, 0xc3525d32),
+     TOBN(0x4b7b96d4, 0x28a959a1), TOBN(0xbb3786e5, 0x31e5d234),
+     TOBN(0xaeb5d3ce, 0x6961f247), TOBN(0x20aa85af, 0x02f93d3f),
+     TOBN(0x9cd1ad3d, 0xd7a7ae4f), TOBN(0xbf6688f0, 0x781adaa8),
+     TOBN(0xb1b40e86, 0x7469cead), TOBN(0x1904c524, 0x309fca48),
+     TOBN(0x9b7312af, 0x4b54bbc7), TOBN(0xbe24bf8f, 0x593affa2),
+     TOBN(0xbe5e0790, 0xbd98764b), TOBN(0xa0f45f17, 0xa26e299e),
+     TOBN(0x4af0d2c2, 0x6b8fe4c7), TOBN(0xef170db1, 0x8ae8a3e6),
+     TOBN(0x0e8d61a0, 0x29e0ccc1), TOBN(0xcd53e87e, 0x60ad36ca),
+     TOBN(0x328c6623, 0xc8173822), TOBN(0x7ee1767d, 0xa496be55),
+     TOBN(0x89f13259, 0x648945af), TOBN(0x9e45a5fd, 0x25c8009c),
+     TOBN(0xaf2febd9, 0x1f61ab8c), TOBN(0x43f6bc86, 0x8a275385),
+     TOBN(0x87792348, 0xf2142e79), TOBN(0x17d89259, 0xc6e6238a),
+     TOBN(0x7536d2f6, 0x4a839d9b), TOBN(0x1f428fce, 0x76a1fbdc),
+     TOBN(0x1c109601, 0x0db06dfe), TOBN(0xbfc16bc1, 0x50a3a3cc),
+     TOBN(0xf9cbd9ec, 0x9b30f41b), TOBN(0x5b5da0d6, 0x00138cce),
+     TOBN(0xec1d0a48, 0x56ef96a7), TOBN(0xb47eb848, 0x982bf842),
+     TOBN(0x66deae32, 0xec3f700d), TOBN(0x4e43c42c, 0xaa1181e0),
+     TOBN(0xa1d72a31, 0xd1a4aa2a), TOBN(0x440d4668, 0xc004f3ce),
+     TOBN(0x0d6a2d3b, 0x45fe8a7a), TOBN(0x820e52e2, 0xfb128365),
+     TOBN(0x29ac5fcf, 0x25e51b09), TOBN(0x180cd2bf, 0x2023d159),
+     TOBN(0xa9892171, 0xa1ebf90e), TOBN(0xf97c4c87, 0x7c132181),
+     TOBN(0x9f1dc724, 0xc03dbb7e), TOBN(0xae043765, 0x018cbbe4),
+     TOBN(0xfb0b2a36, 0x0767d153), TOBN(0xa8e2f4d6, 0x249cbaeb),
+     TOBN(0x172a5247, 0xd95ea168), TOBN(0x1758fada, 0x2970764a),
+     TOBN(0xac803a51, 0x1d978169), TOBN(0x299cfe2e, 0xde77e01b),
+     TOBN(0x652a1e17, 0xb0a98927), TOBN(0x2e26e1d1, 0x20014495),
+     TOBN(0x7ae0af9f, 0x7175b56a), TOBN(0xc2e22a80, 0xd64b9f95),
+     TOBN(0x4d0ff9fb, 0xd90a060a), TOBN(0x496a27db, 0xbaf38085),
+     TOBN(0x32305401, 0xda776bcf), TOBN(0xb8cdcef6, 0x725f209e),
+     TOBN(0x61ba0f37, 0x436a0bba), TOBN(0x263fa108, 0x76860049),
+     TOBN(0x92beb98e, 0xda3542cf), TOBN(0xa2d4d14a, 0xd5849538),
+     TOBN(0x989b9d68, 0x12e9a1bc), TOBN(0x61d9075c, 0x5f6e3268),
+     TOBN(0x352c6aa9, 0x99ace638), TOBN(0xde4e4a55, 0x920f43ff),
+     TOBN(0xe5e4144a, 0xd673c017), TOBN(0x667417ae, 0x6f6e05ea),
+     TOBN(0x613416ae, 0xdcd1bd56), TOBN(0x5eb36201, 0x86693711),
+     TOBN(0x2d7bc504, 0x3a1aa914), TOBN(0x175a1299, 0x76dc5975),
+     TOBN(0xe900e0f2, 0x3fc8125c), TOBN(0x569ef68c, 0x11198875),
+     TOBN(0x9012db63, 0x63a113b4), TOBN(0xe3bd3f56, 0x98835766),
+     TOBN(0xa5c94a52, 0x76412dea), TOBN(0xad9e2a09, 0xaa735e5c),
+     TOBN(0x405a984c, 0x508b65e9), TOBN(0xbde4a1d1, 0x6df1a0d1),
+     TOBN(0x1a9433a1, 0xdfba80da), TOBN(0xe9192ff9, 0x9440ad2e),
+     TOBN(0x9f649696, 0x5099fe92), TOBN(0x25ddb65c, 0x0b27a54a),
+     TOBN(0x178279dd, 0xc590da61), TOBN(0x5479a999, 0xfbde681a),
+     TOBN(0xd0e84e05, 0x013fe162), TOBN(0xbe11dc92, 0x632d471b),
+     TOBN(0xdf0b0c45, 0xfc0e089f), TOBN(0x04fb15b0, 0x4c144025),
+     TOBN(0xa61d5fc2, 0x13c99927), TOBN(0xa033e9e0, 0x3de2eb35),
+     TOBN(0xf8185d5c, 0xb8dacbb4), TOBN(0x9a88e265, 0x8644549d),
+     TOBN(0xf717af62, 0x54671ff6), TOBN(0x4bd4241b, 0x5fa58603),
+     TOBN(0x06fba40b, 0xe67773c0), TOBN(0xc1d933d2, 0x6a2847e9),
+     TOBN(0xf4f5acf3, 0x689e2c70), TOBN(0x92aab0e7, 0x46bafd31),
+     TOBN(0x798d76aa, 0x3473f6e5), TOBN(0xcc6641db, 0x93141934),
+     TOBN(0xcae27757, 0xd31e535e), TOBN(0x04cc43b6, 0x87c2ee11),
+     TOBN(0x8d1f9675, 0x2e029ffa), TOBN(0xc2150672, 0xe4cc7a2c),
+     TOBN(0x3b03c1e0, 0x8d68b013), TOBN(0xa9d6816f, 0xedf298f3),
+     TOBN(0x1bfbb529, 0xa2804464), TOBN(0x95a52fae, 0x5db22125),
+     TOBN(0x55b32160, 0x0e1cb64e), TOBN(0x004828f6, 0x7e7fc9fe),
+     TOBN(0x13394b82, 0x1bb0fb93), TOBN(0xb6293a2d, 0x35f1a920),
+     TOBN(0xde35ef21, 0xd145d2d9), TOBN(0xbe6225b3, 0xbb8fa603),
+     TOBN(0x00fc8f6b, 0x32cf252d), TOBN(0xa28e52e6, 0x117cf8c2),
+     TOBN(0x9d1dc89b, 0x4c371e6d), TOBN(0xcebe0675, 0x36ef0f28),
+     TOBN(0x5de05d09, 0xa4292f81), TOBN(0xa8303593, 0x353e3083),
+     TOBN(0xa1715b0a, 0x7e37a9bb), TOBN(0x8c56f61e, 0x2b8faec3),
+     TOBN(0x52507431, 0x33c9b102), TOBN(0x0130cefc, 0xa44431f0),
+     TOBN(0x56039fa0, 0xbd865cfb), TOBN(0x4b03e578, 0xbc5f1dd7),
+     TOBN(0x40edf2e4, 0xbabe7224), TOBN(0xc752496d, 0x3a1988f6),
+     TOBN(0xd1572d3b, 0x564beb6b), TOBN(0x0db1d110, 0x39a1c608),
+     TOBN(0x568d1934, 0x16f60126), TOBN(0x05ae9668, 0xf354af33),
+     TOBN(0x19de6d37, 0xc92544f2), TOBN(0xcc084353, 0xa35837d5),
+     TOBN(0xcbb6869c, 0x1a514ece), TOBN(0xb633e728, 0x2e1d1066),
+     TOBN(0xf15dd69f, 0x936c581c), TOBN(0x96e7b8ce, 0x7439c4f9),
+     TOBN(0x5e676f48, 0x2e448a5b), TOBN(0xb2ca7d5b, 0xfd916bbb),
+     TOBN(0xd55a2541, 0xf5024025), TOBN(0x47bc5769, 0xe4c2d937),
+     TOBN(0x7d31b92a, 0x0362189f), TOBN(0x83f3086e, 0xef7816f9),
+     TOBN(0xf9f46d94, 0xb587579a), TOBN(0xec2d22d8, 0x30e76c5f),
+     TOBN(0x27d57461, 0xb000ffcf), TOBN(0xbb7e65f9, 0x364ffc2c),
+     TOBN(0x7c7c9477, 0x6652a220), TOBN(0x61618f89, 0xd696c981),
+     TOBN(0x5021701d, 0x89effff3), TOBN(0xf2c8ff8e, 0x7c314163),
+     TOBN(0x2da413ad, 0x8efb4d3e), TOBN(0x937b5adf, 0xce176d95),
+     TOBN(0x22867d34, 0x2a67d51c), TOBN(0x262b9b10, 0x18eb3ac9),
+     TOBN(0x4e314fe4, 0xc43ff28b), TOBN(0x76476627, 0x6a664e7a),
+     TOBN(0x3e90e40b, 0xb7a565c2), TOBN(0x8588993a, 0xc1acf831),
+     TOBN(0xd7b501d6, 0x8f938829), TOBN(0x996627ee, 0x3edd7d4c),
+     TOBN(0x37d44a62, 0x90cd34c7), TOBN(0xa8327499, 0xf3833e8d),
+     TOBN(0x2e18917d, 0x4bf50353), TOBN(0x85dd726b, 0x556765fb),
+     TOBN(0x54fe65d6, 0x93d5ab66), TOBN(0x3ddbaced, 0x915c25fe),
+     TOBN(0xa799d9a4, 0x12f22e85), TOBN(0xe2a24867, 0x6d06f6bc),
+     TOBN(0xf4f1ee56, 0x43ca1637), TOBN(0xfda2828b, 0x61ece30a),
+     TOBN(0x758c1a3e, 0xa2dee7a6), TOBN(0xdcde2f3c, 0x734b2284),
+     TOBN(0xaba445d2, 0x4eaba6ad), TOBN(0x35aaf668, 0x76cee0a7),
+     TOBN(0x7e0b04a9, 0xe5aa049a), TOBN(0xe74083ad, 0x91103e84),
+     TOBN(0xbeb183ce, 0x40afecc3), TOBN(0x6b89de9f, 0xea043f7a),}
+    ,
+    {TOBN(0x0e299d23, 0xfe67ba66), TOBN(0x91450760, 0x93cf2f34),
+     TOBN(0xf45b5ea9, 0x97fcf913), TOBN(0x5be00843, 0x8bd7ddda),
+     TOBN(0x358c3e05, 0xd53ff04d), TOBN(0xbf7ccdc3, 0x5de91ef7),
+     TOBN(0xad684dbf, 0xb69ec1a0), TOBN(0x367e7cf2, 0x801fd997),
+     TOBN(0x0ca1f3b7, 0xb0dc8595), TOBN(0x27de4608, 0x9f1d9f2e),
+     TOBN(0x1af3bf39, 0xbadd82a7), TOBN(0x79356a79, 0x65862448),
+     TOBN(0xc0602345, 0xf5f9a052), TOBN(0x1a8b0f89, 0x139a42f9),
+     TOBN(0xb53eee42, 0x844d40fc), TOBN(0x93b0bfe5, 0x4e5b6368),
+     TOBN(0x5434dd02, 0xc024789c), TOBN(0x90dca9ea, 0x41b57bfc),
+     TOBN(0x8aa898e2, 0x243398df), TOBN(0xf607c834, 0x894a94bb),
+     TOBN(0xbb07be97, 0xc2c99b76), TOBN(0x6576ba67, 0x18c29302),
+     TOBN(0x3d79efcc, 0xe703a88c), TOBN(0xf259ced7, 0xb6a0d106),
+     TOBN(0x0f893a5d, 0xc8de610b), TOBN(0xe8c515fb, 0x67e223ce),
+     TOBN(0x7774bfa6, 0x4ead6dc5), TOBN(0x89d20f95, 0x925c728f),
+     TOBN(0x7a1e0966, 0x098583ce), TOBN(0xa2eedb94, 0x93f2a7d7),
+     TOBN(0x1b282097, 0x4c304d4a), TOBN(0x0842e3da, 0xc077282d),
+     TOBN(0xe4d972a3, 0x3b9e2d7b), TOBN(0x7cc60b27, 0xc48218ff),
+     TOBN(0x8fc70838, 0x84149d91), TOBN(0x5c04346f, 0x2f461ecc),
+     TOBN(0xebe9fdf2, 0x614650a9), TOBN(0x5e35b537, 0xc1f666ac),
+     TOBN(0x645613d1, 0x88babc83), TOBN(0x88cace3a, 0xc5e1c93e),
+     TOBN(0x209ca375, 0x3de92e23), TOBN(0xccb03cc8, 0x5fbbb6e3),
+     TOBN(0xccb90f03, 0xd7b1487e), TOBN(0xfa9c2a38, 0xc710941f),
+     TOBN(0x756c3823, 0x6724ceed), TOBN(0x3a902258, 0x192d0323),
+     TOBN(0xb150e519, 0xea5e038e), TOBN(0xdcba2865, 0xc7427591),
+     TOBN(0xe549237f, 0x78890732), TOBN(0xc443bef9, 0x53fcb4d9),
+     TOBN(0x9884d8a6, 0xeb3480d6), TOBN(0x8a35b6a1, 0x3048b186),
+     TOBN(0xb4e44716, 0x65e9a90a), TOBN(0x45bf380d, 0x653006c0),
+     TOBN(0x8f3f820d, 0x4fe9ae3b), TOBN(0x244a35a0, 0x979a3b71),
+     TOBN(0xa1010e9d, 0x74cd06ff), TOBN(0x9c17c7df, 0xaca3eeac),
+     TOBN(0x74c86cd3, 0x8063aa2b), TOBN(0x8595c4b3, 0x734614ff),
+     TOBN(0xa3de00ca, 0x990f62cc), TOBN(0xd9bed213, 0xca0c3be5),
+     TOBN(0x7886078a, 0xdf8ce9f5), TOBN(0xddb27ce3, 0x5cd44444),
+     TOBN(0xed374a66, 0x58926ddd), TOBN(0x138b2d49, 0x908015b8),
+     TOBN(0x886c6579, 0xde1f7ab8), TOBN(0x888b9aa0, 0xc3020b7a),
+     TOBN(0xd3ec034e, 0x3a96e355), TOBN(0xba65b0b8, 0xf30fbe9a),
+     TOBN(0x064c8e50, 0xff21367a), TOBN(0x1f508ea4, 0x0b04b46e),
+     TOBN(0x98561a49, 0x747c866c), TOBN(0xbbb1e5fe, 0x0518a062),
+     TOBN(0x20ff4e8b, 0xecdc3608), TOBN(0x7f55cded, 0x20184027),
+     TOBN(0x8d73ec95, 0xf38c85f0), TOBN(0x5b589fdf, 0x8bc3b8c3),
+     TOBN(0xbe95dd98, 0x0f12b66f), TOBN(0xf5bd1a09, 0x0e338e01),
+     TOBN(0x65163ae5, 0x5e915918), TOBN(0x6158d6d9, 0x86f8a46b),
+     TOBN(0x8466b538, 0xeeebf99c), TOBN(0xca8761f6, 0xbca477ef),
+     TOBN(0xaf3449c2, 0x9ebbc601), TOBN(0xef3b0f41, 0xe0c3ae2f),
+     TOBN(0xaa6c577d, 0x5de63752), TOBN(0xe9166601, 0x64682a51),
+     TOBN(0x5a3097be, 0xfc15aa1e), TOBN(0x40d12548, 0xb54b0745),
+     TOBN(0x5bad4706, 0x519a5f12), TOBN(0xed03f717, 0xa439dee6),
+     TOBN(0x0794bb6c, 0x4a02c499), TOBN(0xf725083d, 0xcffe71d2),
+     TOBN(0x2cad7519, 0x0f3adcaf), TOBN(0x7f68ea1c, 0x43729310),
+     TOBN(0xe747c8c7, 0xb7ffd977), TOBN(0xec104c35, 0x80761a22),
+     TOBN(0x8395ebaf, 0x5a3ffb83), TOBN(0xfb3261f4, 0xe4b63db7),
+     TOBN(0x53544960, 0xd883e544), TOBN(0x13520d70, 0x8cc2eeb8),
+     TOBN(0x08f6337b, 0xd3d65f99), TOBN(0x83997db2, 0x781cf95b),
+     TOBN(0xce6ff106, 0x0dbd2c01), TOBN(0x4f8eea6b, 0x1f9ce934),
+     TOBN(0x546f7c4b, 0x0e993921), TOBN(0x6236a324, 0x5e753fc7),
+     TOBN(0x65a41f84, 0xa16022e9), TOBN(0x0c18d878, 0x43d1dbb2),
+     TOBN(0x73c55640, 0x2d4cef9c), TOBN(0xa0428108, 0x70444c74),
+     TOBN(0x68e4f15e, 0x9afdfb3c), TOBN(0x49a56143, 0x5bdfb6df),
+     TOBN(0xa9bc1bd4, 0x5f823d97), TOBN(0xbceb5970, 0xea111c2a),
+     TOBN(0x366b455f, 0xb269bbc4), TOBN(0x7cd85e1e, 0xe9bc5d62),
+     TOBN(0xc743c41c, 0x4f18b086), TOBN(0xa4b40990, 0x95294fb9),
+     TOBN(0x9c7c581d, 0x26ee8382), TOBN(0xcf17dcc5, 0x359d638e),
+     TOBN(0xee8273ab, 0xb728ae3d), TOBN(0x1d112926, 0xf821f047),
+     TOBN(0x11498477, 0x50491a74), TOBN(0x687fa761, 0xfde0dfb9),
+     TOBN(0x2c258022, 0x7ea435ab), TOBN(0x6b8bdb94, 0x91ce7e3f),
+     TOBN(0x4c5b5dc9, 0x3bf834aa), TOBN(0x04371819, 0x4f6c7e4b),
+     TOBN(0xc284e00a, 0x3736bcad), TOBN(0x0d881118, 0x21ae8f8d),
+     TOBN(0xf9cf0f82, 0xf48c8e33), TOBN(0xa11fd075, 0xa1bf40db),
+     TOBN(0xdceab0de, 0xdc2733e5), TOBN(0xc560a8b5, 0x8e986bd7),
+     TOBN(0x48dd1fe2, 0x3929d097), TOBN(0x3885b290, 0x92f188f1),
+     TOBN(0x0f2ae613, 0xda6fcdac), TOBN(0x9054303e, 0xb662a46c),
+     TOBN(0xb6871e44, 0x0738042a), TOBN(0x98e6a977, 0xbdaf6449),
+     TOBN(0xd8bc0650, 0xd1c9df1b), TOBN(0xef3d6451, 0x36e098f9),
+     TOBN(0x03fbae82, 0xb6d72d28), TOBN(0x77ca9db1, 0xf5d84080),
+     TOBN(0x8a112cff, 0xa58efc1c), TOBN(0x518d761c, 0xc564cb4a),
+     TOBN(0x69b5740e, 0xf0d1b5ce), TOBN(0x717039cc, 0xe9eb1785),
+     TOBN(0x3fe29f90, 0x22f53382), TOBN(0x8e54ba56, 0x6bc7c95c),
+     TOBN(0x9c806d8a, 0xf7f91d0f), TOBN(0x3b61b0f1, 0xa82a5728),
+     TOBN(0x4640032d, 0x94d76754), TOBN(0x273eb5de, 0x47d834c6),
+     TOBN(0x2988abf7, 0x7b4e4d53), TOBN(0xb7ce66bf, 0xde401777),
+     TOBN(0x9fba6b32, 0x715071b3), TOBN(0x82413c24, 0xad3a1a98),
+     TOBN(0x5b7fc8c4, 0xe0e8ad93), TOBN(0xb5679aee, 0x5fab868d),
+     TOBN(0xb1f9d2fa, 0x2b3946f3), TOBN(0x458897dc, 0x5685b50a),
+     TOBN(0x1e98c930, 0x89d0caf3), TOBN(0x39564c5f, 0x78642e92),
+     TOBN(0x1b77729a, 0x0dbdaf18), TOBN(0xf9170722, 0x579e82e6),
+     TOBN(0x680c0317, 0xe4515fa5), TOBN(0xf85cff84, 0xfb0c790f),
+     TOBN(0xc7a82aab, 0x6d2e0765), TOBN(0x7446bca9, 0x35c82b32),
+     TOBN(0x5de607aa, 0x6d63184f), TOBN(0x7c1a46a8, 0x262803a6),
+     TOBN(0xd218313d, 0xaebe8035), TOBN(0x92113ffd, 0xc73c51f8),
+     TOBN(0x4b38e083, 0x12e7e46c), TOBN(0x69d0a37a, 0x56126bd5),
+     TOBN(0xfb3f324b, 0x73c07e04), TOBN(0xa0c22f67, 0x8fda7267),
+     TOBN(0x8f2c0051, 0x4d2c7d8f), TOBN(0xbc45ced3, 0xcbe2cae5),
+     TOBN(0xe1c6cf07, 0xa8f0f277), TOBN(0xbc392312, 0x1eb99a98),
+     TOBN(0x75537b7e, 0x3cc8ac85), TOBN(0x8d725f57, 0xdd02753b),
+     TOBN(0xfd05ff64, 0xb737df2f), TOBN(0x55fe8712, 0xf6d2531d),
+     TOBN(0x57ce04a9, 0x6ab6b01c), TOBN(0x69a02a89, 0x7cd93724),
+     TOBN(0x4f82ac35, 0xcf86699b), TOBN(0x8242d3ad, 0x9cb4b232),
+     TOBN(0x713d0f65, 0xd62105e5), TOBN(0xbb222bfa, 0x2d29be61),
+     TOBN(0xf2f9a79e, 0x6cfbef09), TOBN(0xfc24d8d3, 0xd5d6782f),
+     TOBN(0x5db77085, 0xd4129967), TOBN(0xdb81c3cc, 0xdc3c2a43),
+     TOBN(0x9d655fc0, 0x05d8d9a3), TOBN(0x3f5d057a, 0x54298026),
+     TOBN(0x1157f56d, 0x88c54694), TOBN(0xb26baba5, 0x9b09573e),
+     TOBN(0x2cab03b0, 0x22adffd1), TOBN(0x60a412c8, 0xdd69f383),
+     TOBN(0xed76e98b, 0x54b25039), TOBN(0xd4ee67d3, 0x687e714d),
+     TOBN(0x87739648, 0x7b00b594), TOBN(0xce419775, 0xc9ef709b),
+     TOBN(0x40f76f85, 0x1c203a40), TOBN(0x30d352d6, 0xeafd8f91),
+     TOBN(0xaf196d3d, 0x95578dd2), TOBN(0xea4bb3d7, 0x77cc3f3d),
+     TOBN(0x42a5bd03, 0xb98e782b), TOBN(0xac958c40, 0x0624920d),
+     TOBN(0xb838134c, 0xfc56fcc8), TOBN(0x86ec4ccf, 0x89572e5e),
+     TOBN(0x69c43526, 0x9be47be0), TOBN(0x323b7dd8, 0xcb28fea1),
+     TOBN(0xfa5538ba, 0x3a6c67e5), TOBN(0xef921d70, 0x1d378e46),
+     TOBN(0xf92961fc, 0x3c4b880e), TOBN(0x3f6f914e, 0x98940a67),
+     TOBN(0xa990eb0a, 0xfef0ff39), TOBN(0xa6c2920f, 0xf0eeff9c),
+     TOBN(0xca804166, 0x51b8d9a3), TOBN(0x42531bc9, 0x0ffb0db1),
+     TOBN(0x72ce4718, 0xaa82e7ce), TOBN(0x6e199913, 0xdf574741),
+     TOBN(0xd5f1b13d, 0xd5d36946), TOBN(0x8255dc65, 0xf68f0194),
+     TOBN(0xdc9df4cd, 0x8710d230), TOBN(0x3453c20f, 0x138c1988),
+     TOBN(0x9af98dc0, 0x89a6ef01), TOBN(0x4dbcc3f0, 0x9857df85),
+     TOBN(0x34805601, 0x5c1ad924), TOBN(0x40448da5, 0xd0493046),
+     TOBN(0xf629926d, 0x4ee343e2), TOBN(0x6343f1bd, 0x90e8a301),
+     TOBN(0xefc93491, 0x40815b3f), TOBN(0xf882a423, 0xde8f66fb),
+     TOBN(0x3a12d5f4, 0xe7db9f57), TOBN(0x7dfba38a, 0x3c384c27),
+     TOBN(0x7a904bfd, 0x6fc660b1), TOBN(0xeb6c5db3, 0x2773b21c),
+     TOBN(0xc350ee66, 0x1cdfe049), TOBN(0x9baac0ce, 0x44540f29),
+     TOBN(0xbc57b6ab, 0xa5ec6aad), TOBN(0x167ce8c3, 0x0a7c1baa),
+     TOBN(0xb23a03a5, 0x53fb2b56), TOBN(0x6ce141e7, 0x4e057f78),
+     TOBN(0x796525c3, 0x89e490d9), TOBN(0x0bc95725, 0xa31a7e75),
+     TOBN(0x1ec56791, 0x1220fd06), TOBN(0x716e3a3c, 0x408b0bd6),
+     TOBN(0x31cd6bf7, 0xe8ebeba9), TOBN(0xa7326ca6, 0xbee6b670),
+     TOBN(0x3d9f851c, 0xcd090c43), TOBN(0x561e8f13, 0xf12c3988),
+     TOBN(0x50490b6a, 0x904b7be4), TOBN(0x61690ce1, 0x0410737b),
+     TOBN(0x299e9a37, 0x0f009052), TOBN(0x258758f0, 0xf026092e),
+     TOBN(0x9fa255f3, 0xfdfcdc0f), TOBN(0xdbc9fb1f, 0xc0e1bcd2),
+     TOBN(0x35f9dd6e, 0x24651840), TOBN(0xdca45a84, 0xa5c59abc),
+     TOBN(0x103d396f, 0xecca4938), TOBN(0x4532da0a, 0xb97b3f29),
+     TOBN(0xc4135ea5, 0x1999a6bf), TOBN(0x3aa9505a, 0x5e6bf2ee),
+     TOBN(0xf77cef06, 0x3f5be093), TOBN(0x97d1a0f8, 0xa943152e),
+     TOBN(0x2cb0ebba, 0x2e1c21dd), TOBN(0xf41b29fc, 0x2c6797c4),
+     TOBN(0xc6e17321, 0xb300101f), TOBN(0x4422b0e9, 0xd0d79a89),
+     TOBN(0x49e4901c, 0x92f1bfc4), TOBN(0x06ab1f8f, 0xe1e10ed9),
+     TOBN(0x84d35577, 0xdb2926b8), TOBN(0xca349d39, 0x356e8ec2),
+     TOBN(0x70b63d32, 0x343bf1a9), TOBN(0x8fd3bd28, 0x37d1a6b1),
+     TOBN(0x0454879c, 0x316865b4), TOBN(0xee959ff6, 0xc458efa2),
+     TOBN(0x0461dcf8, 0x9706dc3f), TOBN(0x737db0e2, 0x164e4b2e),
+     TOBN(0x09262680, 0x2f8843c8), TOBN(0x54498bbc, 0x7745e6f6),
+     TOBN(0x359473fa, 0xa29e24af), TOBN(0xfcc3c454, 0x70aa87a1),
+     TOBN(0xfd2c4bf5, 0x00573ace), TOBN(0xb65b514e, 0x28dd1965),
+     TOBN(0xe46ae7cf, 0x2193e393), TOBN(0x60e9a4e1, 0xf5444d97),
+     TOBN(0xe7594e96, 0x00ff38ed), TOBN(0x43d84d2f, 0x0a0e0f02),
+     TOBN(0x8b6db141, 0xee398a21), TOBN(0xb88a56ae, 0xe3bcc5be),
+     TOBN(0x0a1aa52f, 0x373460ea), TOBN(0x20da1a56, 0x160bb19b),
+     TOBN(0xfb54999d, 0x65bf0384), TOBN(0x71a14d24, 0x5d5a180e),
+     TOBN(0xbc44db7b, 0x21737b04), TOBN(0xd84fcb18, 0x01dd8e92),
+     TOBN(0x80de937b, 0xfa44b479), TOBN(0x53505499, 0x5c98fd4f),
+     TOBN(0x1edb12ab, 0x28f08727), TOBN(0x4c58b582, 0xa5f3ef53),
+     TOBN(0xbfb236d8, 0x8327f246), TOBN(0xc3a3bfaa, 0x4d7df320),
+     TOBN(0xecd96c59, 0xb96024f2), TOBN(0xfc293a53, 0x7f4e0433),
+     TOBN(0x5341352b, 0x5acf6e10), TOBN(0xc50343fd, 0xafe652c3),
+     TOBN(0x4af3792d, 0x18577a7f), TOBN(0xe1a4c617, 0xaf16823d),
+     TOBN(0x9b26d0cd, 0x33425d0a), TOBN(0x306399ed, 0x9b7bc47f),
+     TOBN(0x2a792f33, 0x706bb20b), TOBN(0x31219614, 0x98111055),
+     TOBN(0x864ec064, 0x87f5d28b), TOBN(0x11392d91, 0x962277fd),
+     TOBN(0xb5aa7942, 0xbb6aed5f), TOBN(0x080094dc, 0x47e799d9),
+     TOBN(0x4afa588c, 0x208ba19b), TOBN(0xd3e7570f, 0x8512f284),
+     TOBN(0xcbae64e6, 0x02f5799a), TOBN(0xdeebe7ef, 0x514b9492),
+     TOBN(0x30300f98, 0xe5c298ff), TOBN(0x17f561be, 0x3678361f),
+     TOBN(0xf52ff312, 0x98cb9a16), TOBN(0x6233c3bc, 0x5562d490),
+     TOBN(0x7bfa15a1, 0x92e3a2cb), TOBN(0x961bcfd1, 0xe6365119),
+     TOBN(0x3bdd29bf, 0x2c8c53b1), TOBN(0x739704df, 0x822844ba),
+     TOBN(0x7dacfb58, 0x7e7b754b), TOBN(0x23360791, 0xa806c9b9),
+     TOBN(0xe7eb88c9, 0x23504452), TOBN(0x2983e996, 0x852c1783),
+     TOBN(0xdd4ae529, 0x958d881d), TOBN(0x026bae03, 0x262c7b3c),
+     TOBN(0x3a6f9193, 0x960b52d1), TOBN(0xd0980f90, 0x92696cfb),
+     TOBN(0x4c1f428c, 0xd5f30851), TOBN(0x94dfed27, 0x2a4f6630),
+     TOBN(0x4df53772, 0xfc5d48a4), TOBN(0xdd2d5a2f, 0x933260ce),
+     TOBN(0x574115bd, 0xd44cc7a5), TOBN(0x4ba6b20d, 0xbd12533a),
+     TOBN(0x30e93cb8, 0x243057c9), TOBN(0x794c486a, 0x14de320e),
+     TOBN(0xe925d4ce, 0xf21496e4), TOBN(0xf951d198, 0xec696331),
+     TOBN(0x9810e2de, 0x3e8d812f), TOBN(0xd0a47259, 0x389294ab),
+     TOBN(0x513ba2b5, 0x0e3bab66), TOBN(0x462caff5, 0xabad306f),
+     TOBN(0xe2dc6d59, 0xaf04c49e), TOBN(0x1aeb8750, 0xe0b84b0b),
+     TOBN(0xc034f12f, 0x2f7d0ca2), TOBN(0x6d2e8128, 0xe06acf2f),
+     TOBN(0x801f4f83, 0x21facc2f), TOBN(0xa1170c03, 0xf40ef607),
+     TOBN(0xfe0a1d4f, 0x7805a99c), TOBN(0xbde56a36, 0xcc26aba5),
+     TOBN(0x5b1629d0, 0x35531f40), TOBN(0xac212c2b, 0x9afa6108),
+     TOBN(0x30a06bf3, 0x15697be5), TOBN(0x6f0545dc, 0x2c63c7c1),
+     TOBN(0x5d8cb842, 0x7ccdadaf), TOBN(0xd52e379b, 0xac7015bb),
+     TOBN(0xc4f56147, 0xf462c23e), TOBN(0xd44a4298, 0x46bc24b0),
+     TOBN(0xbc73d23a, 0xe2856d4f), TOBN(0x61cedd8c, 0x0832bcdf),
+     TOBN(0x60953556, 0x99f241d7), TOBN(0xee4adbd7, 0x001a349d),
+     TOBN(0x0b35bf6a, 0xaa89e491), TOBN(0x7f0076f4, 0x136f7546),
+     TOBN(0xd19a18ba, 0x9264da3d), TOBN(0x6eb2d2cd, 0x62a7a28b),
+     TOBN(0xcdba941f, 0x8761c971), TOBN(0x1550518b, 0xa3be4a5d),
+     TOBN(0xd0e8e2f0, 0x57d0b70c), TOBN(0xeea8612e, 0xcd133ba3),
+     TOBN(0x814670f0, 0x44416aec), TOBN(0x424db6c3, 0x30775061),
+     TOBN(0xd96039d1, 0x16213fd1), TOBN(0xc61e7fa5, 0x18a3478f),
+     TOBN(0xa805bdcc, 0xcb0c5021), TOBN(0xbdd6f3a8, 0x0cc616dd),
+     TOBN(0x06009667, 0x5d97f7e2), TOBN(0x31db0fc1, 0xaf0bf4b6),
+     TOBN(0x23680ed4, 0x5491627a), TOBN(0xb99a3c66, 0x7d741fb1),
+     TOBN(0xe9bb5f55, 0x36b1ff92), TOBN(0x29738577, 0x512b388d),
+     TOBN(0xdb8a2ce7, 0x50fcf263), TOBN(0x385346d4, 0x6c4f7b47),
+     TOBN(0xbe86c5ef, 0x31631f9e), TOBN(0xbf91da21, 0x03a57a29),
+     TOBN(0xc3b1f796, 0x7b23f821), TOBN(0x0f7d00d2, 0x770db354),
+     TOBN(0x8ffc6c3b, 0xd8fe79da), TOBN(0xcc5e8c40, 0xd525c996),
+     TOBN(0x4640991d, 0xcfff632a), TOBN(0x64d97e8c, 0x67112528),
+     TOBN(0xc232d973, 0x02f1cd1e), TOBN(0xce87eacb, 0x1dd212a4),
+     TOBN(0x6e4c8c73, 0xe69802f7), TOBN(0x12ef0290, 0x1fffddbd),
+     TOBN(0x941ec74e, 0x1bcea6e2), TOBN(0xd0b54024, 0x3cb92cbb),
+     TOBN(0x809fb9d4, 0x7e8f9d05), TOBN(0x3bf16159, 0xf2992aae),
+     TOBN(0xad40f279, 0xf8a7a838), TOBN(0x11aea631, 0x05615660),
+     TOBN(0xbf52e6f1, 0xa01f6fa1), TOBN(0xef046995, 0x3dc2aec9),
+     TOBN(0x785dbec9, 0xd8080711), TOBN(0xe1aec60a, 0x9fdedf76),
+     TOBN(0xece797b5, 0xfa21c126), TOBN(0xc66e898f, 0x05e52732),
+     TOBN(0x39bb69c4, 0x08811fdb), TOBN(0x8bfe1ef8, 0x2fc7f082),
+     TOBN(0xc8e7a393, 0x174f4138), TOBN(0xfba8ad1d, 0xd58d1f98),
+     TOBN(0xbc21d0ce, 0xbfd2fd5b), TOBN(0x0b839a82, 0x6ee60d61),
+     TOBN(0xaacf7658, 0xafd22253), TOBN(0xb526bed8, 0xaae396b3),
+     TOBN(0xccc1bbc2, 0x38564464), TOBN(0x9e3ff947, 0x8c45bc73),
+     TOBN(0xcde9bca3, 0x58188a78), TOBN(0x138b8ee0, 0xd73bf8f7),
+     TOBN(0x5c7e234c, 0x4123c489), TOBN(0x66e69368, 0xfa643297),
+     TOBN(0x0629eeee, 0x39a15fa3), TOBN(0x95fab881, 0xa9e2a927),
+     TOBN(0xb2497007, 0xeafbb1e1), TOBN(0xd75c9ce6, 0xe75b7a93),
+     TOBN(0x3558352d, 0xefb68d78), TOBN(0xa2f26699, 0x223f6396),
+     TOBN(0xeb911ecf, 0xe469b17a), TOBN(0x62545779, 0xe72d3ec2),
+     TOBN(0x8ea47de7, 0x82cb113f), TOBN(0xebe4b086, 0x4e1fa98d),
+     TOBN(0xec2d5ed7, 0x8cdfedb1), TOBN(0xa535c077, 0xfe211a74),
+     TOBN(0x9678109b, 0x11d244c5), TOBN(0xf17c8bfb, 0xbe299a76),
+     TOBN(0xb651412e, 0xfb11fbc4), TOBN(0xea0b5482, 0x94ab3f65),
+     TOBN(0xd8dffd95, 0x0cf78243), TOBN(0x2e719e57, 0xce0361d4),
+     TOBN(0x9007f085, 0x304ddc5b), TOBN(0x095e8c6d, 0x4daba2ea),
+     TOBN(0x5a33cdb4, 0x3f9d28a9), TOBN(0x85b95cd8, 0xe2283003),
+     TOBN(0xbcd6c819, 0xb9744733), TOBN(0x29c5f538, 0xfc7f5783),
+     TOBN(0x6c49b2fa, 0xd59038e4), TOBN(0x68349cc1, 0x3bbe1018),
+     TOBN(0xcc490c1d, 0x21830ee5), TOBN(0x36f9c4ee, 0xe9bfa297),
+     TOBN(0x58fd7294, 0x48de1a94), TOBN(0xaadb13a8, 0x4e8f2cdc),
+     TOBN(0x515eaaa0, 0x81313dba), TOBN(0xc76bb468, 0xc2152dd8),
+     TOBN(0x357f8d75, 0xa653dbf8), TOBN(0xe4d8c4d1, 0xb14ac143),
+     TOBN(0xbdb8e675, 0xb055cb40), TOBN(0x898f8e7b, 0x977b5167),
+     TOBN(0xecc65651, 0xb82fb863), TOBN(0x56544814, 0x6d88f01f),
+     TOBN(0xb0928e95, 0x263a75a9), TOBN(0xcfb6836f, 0x1a22fcda),
+     TOBN(0x651d14db, 0x3f3bd37c), TOBN(0x1d3837fb, 0xb6ad4664),
+     TOBN(0x7c5fb538, 0xff4f94ab), TOBN(0x7243c712, 0x6d7fb8f2),
+     TOBN(0xef13d60c, 0xa85c5287), TOBN(0x18cfb7c7, 0x4bb8dd1b),
+     TOBN(0x82f9bfe6, 0x72908219), TOBN(0x35c4592b, 0x9d5144ab),
+     TOBN(0x52734f37, 0x9cf4b42f), TOBN(0x6bac55e7, 0x8c60ddc4),
+     TOBN(0xb5cd811e, 0x94dea0f6), TOBN(0x259ecae4, 0xe18cc1a3),
+     TOBN(0x6a0e836e, 0x15e660f8), TOBN(0x6c639ea6, 0x0e02bff2),
+     TOBN(0x8721b8cb, 0x7e1026fd), TOBN(0x9e73b50b, 0x63261942),
+     TOBN(0xb8c70974, 0x77f01da3), TOBN(0x1839e6a6, 0x8268f57f),
+     TOBN(0x571b9415, 0x5150b805), TOBN(0x1892389e, 0xf92c7097),
+     TOBN(0x8d69c18e, 0x4a084b95), TOBN(0x7014c512, 0xbe5b495c),
+     TOBN(0x4780db36, 0x1b07523c), TOBN(0x2f6219ce, 0x2c1c64fa),
+     TOBN(0xc38b81b0, 0x602c105a), TOBN(0xab4f4f20, 0x5dc8e360),
+     TOBN(0x20d3c982, 0xcf7d62d2), TOBN(0x1f36e29d, 0x23ba8150),
+     TOBN(0x48ae0bf0, 0x92763f9e), TOBN(0x7a527e6b, 0x1d3a7007),
+     TOBN(0xb4a89097, 0x581a85e3), TOBN(0x1f1a520f, 0xdc158be5),
+     TOBN(0xf98db37d, 0x167d726e), TOBN(0x8802786e, 0x1113e862)}
+    ,
+    {TOBN(0xefb2149e, 0x36f09ab0), TOBN(0x03f163ca, 0x4a10bb5b),
+     TOBN(0xd0297045, 0x06e20998), TOBN(0x56f0af00, 0x1b5a3bab),
+     TOBN(0x7af4cfec, 0x70880e0d), TOBN(0x7332a66f, 0xbe3d913f),
+     TOBN(0x32e6c84a, 0x7eceb4bd), TOBN(0xedc4a79a, 0x9c228f55),
+     TOBN(0xc37c7dd0, 0xc55c4496), TOBN(0xa6a96357, 0x25bbabd2),
+     TOBN(0x5b7e63f2, 0xadd7f363), TOBN(0x9dce3782, 0x2e73f1df),
+     TOBN(0xe1e5a16a, 0xb2b91f71), TOBN(0xe4489823, 0x5ba0163c),
+     TOBN(0xf2759c32, 0xf6e515ad), TOBN(0xa5e2f1f8, 0x8615eecf),
+     TOBN(0x74519be7, 0xabded551), TOBN(0x03d358b8, 0xc8b74410),
+     TOBN(0x4d00b10b, 0x0e10d9a9), TOBN(0x6392b0b1, 0x28da52b7),
+     TOBN(0x6744a298, 0x0b75c904), TOBN(0xc305b0ae, 0xa8f7f96c),
+     TOBN(0x042e421d, 0x182cf932), TOBN(0xf6fc5d50, 0x9e4636ca),
+     TOBN(0x795847c9, 0xd64cc78c), TOBN(0x6c50621b, 0x9b6cb27b),
+     TOBN(0x07099bf8, 0xdf8022ab), TOBN(0x48f862eb, 0xc04eda1d),
+     TOBN(0xd12732ed, 0xe1603c16), TOBN(0x19a80e0f, 0x5c9a9450),
+     TOBN(0xe2257f54, 0xb429b4fc), TOBN(0x66d3b2c6, 0x45460515),
+     TOBN(0x6ca4f87e, 0x822e37be), TOBN(0x73f237b4, 0x253bda4e),
+     TOBN(0xf747f3a2, 0x41190aeb), TOBN(0xf06fa36f, 0x804cf284),
+     TOBN(0x0a6bbb6e, 0xfc621c12), TOBN(0x5d624b64, 0x40b80ec6),
+     TOBN(0x4b072425, 0x7ba556f3), TOBN(0x7fa0c354, 0x3e2d20a8),
+     TOBN(0xe921fa31, 0xe3229d41), TOBN(0xa929c652, 0x94531bd4),
+     TOBN(0x84156027, 0xa6d38209), TOBN(0xf3d69f73, 0x6bdb97bd),
+     TOBN(0x8906d19a, 0x16833631), TOBN(0x68a34c2e, 0x03d51be3),
+     TOBN(0xcb59583b, 0x0e511cd8), TOBN(0x99ce6bfd, 0xfdc132a8),
+     TOBN(0x3facdaaa, 0xffcdb463), TOBN(0x658bbc1a, 0x34a38b08),
+     TOBN(0x12a801f8, 0xf1a9078d), TOBN(0x1567bcf9, 0x6ab855de),
+     TOBN(0xe08498e0, 0x3572359b), TOBN(0xcf0353e5, 0x8659e68b),
+     TOBN(0xbb86e9c8, 0x7d23807c), TOBN(0xbc08728d, 0x2198e8a2),
+     TOBN(0x8de2b7bc, 0x453cadd6), TOBN(0x203900a7, 0xbc0bc1f8),
+     TOBN(0xbcd86e47, 0xa6abd3af), TOBN(0x911cac12, 0x8502effb),
+     TOBN(0x2d550242, 0xec965469), TOBN(0x0e9f7692, 0x29e0017e),
+     TOBN(0x633f078f, 0x65979885), TOBN(0xfb87d449, 0x4cf751ef),
+     TOBN(0xe1790e4b, 0xfc25419a), TOBN(0x36467203, 0x4bff3cfd),
+     TOBN(0xc8db6386, 0x25b6e83f), TOBN(0x6cc69f23, 0x6cad6fd2),
+     TOBN(0x0219e45a, 0x6bc68bb9), TOBN(0xe43d79b6, 0x297f7334),
+     TOBN(0x7d445368, 0x465dc97c), TOBN(0x4b9eea32, 0x2a0b949a),
+     TOBN(0x1b96c6ba, 0x6102d021), TOBN(0xeaafac78, 0x2f4461ea),
+     TOBN(0xd4b85c41, 0xc49f19a8), TOBN(0x275c28e4, 0xcf538875),
+     TOBN(0x35451a9d, 0xdd2e54e0), TOBN(0x6991adb5, 0x0605618b),
+     TOBN(0x5b8b4bcd, 0x7b36cd24), TOBN(0x372a4f8c, 0x56f37216),
+     TOBN(0xc890bd73, 0xa6a5da60), TOBN(0x6f083da0, 0xdc4c9ff0),
+     TOBN(0xf4e14d94, 0xf0536e57), TOBN(0xf9ee1eda, 0xaaec8243),
+     TOBN(0x571241ec, 0x8bdcf8e7), TOBN(0xa5db8271, 0x0b041e26),
+     TOBN(0x9a0b9a99, 0xe3fff040), TOBN(0xcaaf21dd, 0x7c271202),
+     TOBN(0xb4e2b2e1, 0x4f0dd2e8), TOBN(0xe77e7c4f, 0x0a377ac7),
+     TOBN(0x69202c3f, 0x0d7a2198), TOBN(0xf759b7ff, 0x28200eb8),
+     TOBN(0xc87526ed, 0xdcfe314e), TOBN(0xeb84c524, 0x53d5cf99),
+     TOBN(0xb1b52ace, 0x515138b6), TOBN(0x5aa7ff8c, 0x23fca3f4),
+     TOBN(0xff0b13c3, 0xb9791a26), TOBN(0x960022da, 0xcdd58b16),
+     TOBN(0xdbd55c92, 0x57aad2de), TOBN(0x3baaaaa3, 0xf30fe619),
+     TOBN(0x9a4b2346, 0x0d881efd), TOBN(0x506416c0, 0x46325e2a),
+     TOBN(0x91381e76, 0x035c18d4), TOBN(0xb3bb68be, 0xf27817b0),
+     TOBN(0x15bfb8bf, 0x5116f937), TOBN(0x7c64a586, 0xc1268943),
+     TOBN(0x71e25cc3, 0x8419a2c8), TOBN(0x9fd6b0c4, 0x8335f463),
+     TOBN(0x4bf0ba3c, 0xe8ee0e0e), TOBN(0x6f6fba60, 0x298c21fa),
+     TOBN(0x57d57b39, 0xae66bee0), TOBN(0x292d5130, 0x22672544),
+     TOBN(0xf451105d, 0xbab093b3), TOBN(0x012f59b9, 0x02839986),
+     TOBN(0x8a915802, 0x3474a89c), TOBN(0x048c919c, 0x2de03e97),
+     TOBN(0xc476a2b5, 0x91071cd5), TOBN(0x791ed89a, 0x034970a5),
+     TOBN(0x89bd9042, 0xe1b7994b), TOBN(0x8eaf5179, 0xa1057ffd),
+     TOBN(0x6066e2a2, 0xd551ee10), TOBN(0x87a8f1d8, 0x727e09a6),
+     TOBN(0x00d08bab, 0x2c01148d), TOBN(0x6da8e4f1, 0x424f33fe),
+     TOBN(0x466d17f0, 0xcf9a4e71), TOBN(0xff502010, 0x3bf5cb19),
+     TOBN(0xdccf97d8, 0xd062ecc0), TOBN(0x80c0d9af, 0x81d80ac4),
+     TOBN(0xe87771d8, 0x033f2876), TOBN(0xb0186ec6, 0x7d5cc3db),
+     TOBN(0x58e8bb80, 0x3bc9bc1d), TOBN(0x4d1395cc, 0x6f6ef60e),
+     TOBN(0xa73c62d6, 0x186244a0), TOBN(0x918e5f23, 0x110a5b53),
+     TOBN(0xed4878ca, 0x741b7eab), TOBN(0x3038d71a, 0xdbe03e51),
+     TOBN(0x840204b7, 0xa93c3246), TOBN(0x21ab6069, 0xa0b9b4cd),
+     TOBN(0xf5fa6e2b, 0xb1d64218), TOBN(0x1de6ad0e, 0xf3d56191),
+     TOBN(0x570aaa88, 0xff1929c7), TOBN(0xc6df4c6b, 0x640e87b5),
+     TOBN(0xde8a74f2, 0xc65f0ccc), TOBN(0x8b972fd5, 0xe6f6cc01),
+     TOBN(0x3fff36b6, 0x0b846531), TOBN(0xba7e45e6, 0x10a5e475),
+     TOBN(0x84a1d10e, 0x4145b6c5), TOBN(0xf1f7f91a, 0x5e046d9d),
+     TOBN(0x0317a692, 0x44de90d7), TOBN(0x951a1d4a, 0xf199c15e),
+     TOBN(0x91f78046, 0xc9d73deb), TOBN(0x74c82828, 0xfab8224f),
+     TOBN(0xaa6778fc, 0xe7560b90), TOBN(0xb4073e61, 0xa7e824ce),
+     TOBN(0xff0d693c, 0xd642eba8), TOBN(0x7ce2e57a, 0x5dccef38),
+     TOBN(0x89c2c789, 0x1df1ad46), TOBN(0x83a06922, 0x098346fd),
+     TOBN(0x2d715d72, 0xda2fc177), TOBN(0x7b6dd71d, 0x85b6cf1d),
+     TOBN(0xc60a6d0a, 0x73fa9cb0), TOBN(0xedd3992e, 0x328bf5a9),
+     TOBN(0xc380ddd0, 0x832c8c82), TOBN(0xd182d410, 0xa2a0bf50),
+     TOBN(0x7d9d7438, 0xd9a528db), TOBN(0xe8b1a0e9, 0xcaf53994),
+     TOBN(0xddd6e5fe, 0x0e19987c), TOBN(0xacb8df03, 0x190b059d),
+     TOBN(0x53703a32, 0x8300129f), TOBN(0x1f637662, 0x68c43bfd),
+     TOBN(0xbcbd1913, 0x00e54051), TOBN(0x812fcc62, 0x7bf5a8c5),
+     TOBN(0x3f969d5f, 0x29fb85da), TOBN(0x72f4e00a, 0x694759e8),
+     TOBN(0x426b6e52, 0x790726b7), TOBN(0x617bbc87, 0x3bdbb209),
+     TOBN(0x511f8bb9, 0x97aee317), TOBN(0x812a4096, 0xe81536a8),
+     TOBN(0x137dfe59, 0x3ac09b9b), TOBN(0x0682238f, 0xba8c9a7a),
+     TOBN(0x7072ead6, 0xaeccb4bd), TOBN(0x6a34e9aa, 0x692ba633),
+     TOBN(0xc82eaec2, 0x6fff9d33), TOBN(0xfb753512, 0x1d4d2b62),
+     TOBN(0x1a0445ff, 0x1d7aadab), TOBN(0x65d38260, 0xd5f6a67c),
+     TOBN(0x6e62fb08, 0x91cfb26f), TOBN(0xef1e0fa5, 0x5c7d91d6),
+     TOBN(0x47e7c7ba, 0x33db72cd), TOBN(0x017cbc09, 0xfa7c74b2),
+     TOBN(0x3c931590, 0xf50a503c), TOBN(0xcac54f60, 0x616baa42),
+     TOBN(0x9b6cd380, 0xb2369f0f), TOBN(0x97d3a70d, 0x23c76151),
+     TOBN(0x5f9dd6fc, 0x9862a9c6), TOBN(0x044c4ab2, 0x12312f51),
+     TOBN(0x035ea0fd, 0x834a2ddc), TOBN(0x49e6b862, 0xcc7b826d),
+     TOBN(0xb03d6883, 0x62fce490), TOBN(0x62f2497a, 0xb37e36e9),
+     TOBN(0x04b005b6, 0xc6458293), TOBN(0x36bb5276, 0xe8d10af7),
+     TOBN(0xacf2dc13, 0x8ee617b8), TOBN(0x470d2d35, 0xb004b3d4),
+     TOBN(0x06790832, 0xfeeb1b77), TOBN(0x2bb75c39, 0x85657f9c),
+     TOBN(0xd70bd4ed, 0xc0f60004), TOBN(0xfe797ecc, 0x219b018b),
+     TOBN(0x9b5bec2a, 0x753aebcc), TOBN(0xdaf9f3dc, 0xc939eca5),
+     TOBN(0xd6bc6833, 0xd095ad09), TOBN(0x98abdd51, 0xdaa4d2fc),
+     TOBN(0xd9840a31, 0x8d168be5), TOBN(0xcf7c10e0, 0x2325a23c),
+     TOBN(0xa5c02aa0, 0x7e6ecfaf), TOBN(0x2462e7e6, 0xb5bfdf18),
+     TOBN(0xab2d8a8b, 0xa0cc3f12), TOBN(0x68dd485d, 0xbc672a29),
+     TOBN(0x72039752, 0x596f2cd3), TOBN(0x5d3eea67, 0xa0cf3d8d),
+     TOBN(0x810a1a81, 0xe6602671), TOBN(0x8f144a40, 0x14026c0c),
+     TOBN(0xbc753a6d, 0x76b50f85), TOBN(0xc4dc21e8, 0x645cd4a4),
+     TOBN(0xc5262dea, 0x521d0378), TOBN(0x802b8e0e, 0x05011c6f),
+     TOBN(0x1ba19cbb, 0x0b4c19ea), TOBN(0x21db64b5, 0xebf0aaec),
+     TOBN(0x1f394ee9, 0x70342f9d), TOBN(0x93a10aee, 0x1bc44a14),
+     TOBN(0xa7eed31b, 0x3efd0baa), TOBN(0x6e7c824e, 0x1d154e65),
+     TOBN(0xee23fa81, 0x9966e7ee), TOBN(0x64ec4aa8, 0x05b7920d),
+     TOBN(0x2d44462d, 0x2d90aad4), TOBN(0xf44dd195, 0xdf277ad5),
+     TOBN(0x8d6471f1, 0xbb46b6a1), TOBN(0x1e65d313, 0xfd885090),
+     TOBN(0x33a800f5, 0x13a977b4), TOBN(0xaca9d721, 0x0797e1ef),
+     TOBN(0x9a5a85a0, 0xfcff6a17), TOBN(0x9970a3f3, 0x1eca7cee),
+     TOBN(0xbb9f0d6b, 0xc9504be3), TOBN(0xe0c504be, 0xadd24ee2),
+     TOBN(0x7e09d956, 0x77fcc2f4), TOBN(0xef1a5227, 0x65bb5fc4),
+     TOBN(0x145d4fb1, 0x8b9286aa), TOBN(0x66fd0c5d, 0x6649028b),
+     TOBN(0x98857ceb, 0x1bf4581c), TOBN(0xe635e186, 0xaca7b166),
+     TOBN(0x278ddd22, 0x659722ac), TOBN(0xa0903c4c, 0x1db68007),
+     TOBN(0x366e4589, 0x48f21402), TOBN(0x31b49c14, 0xb96abda2),
+     TOBN(0x329c4b09, 0xe0403190), TOBN(0x97197ca3, 0xd29f43fe),
+     TOBN(0x8073dd1e, 0x274983d8), TOBN(0xda1a3bde, 0x55717c8f),
+     TOBN(0xfd3d4da2, 0x0361f9d1), TOBN(0x1332d081, 0x4c7de1ce),
+     TOBN(0x9b7ef7a3, 0xaa6d0e10), TOBN(0x17db2e73, 0xf54f1c4a),
+     TOBN(0xaf3dffae, 0x4cd35567), TOBN(0xaaa2f406, 0xe56f4e71),
+     TOBN(0x8966759e, 0x7ace3fc7), TOBN(0x9594eacf, 0x45a8d8c6),
+     TOBN(0x8de3bd8b, 0x91834e0e), TOBN(0xafe4ca53, 0x548c0421),
+     TOBN(0xfdd7e856, 0xe6ee81c6), TOBN(0x8f671beb, 0x6b891a3a),
+     TOBN(0xf7a58f2b, 0xfae63829), TOBN(0x9ab186fb, 0x9c11ac9f),
+     TOBN(0x8d6eb369, 0x10b5be76), TOBN(0x046b7739, 0xfb040bcd),
+     TOBN(0xccb4529f, 0xcb73de88), TOBN(0x1df0fefc, 0xcf26be03),
+     TOBN(0xad7757a6, 0xbcfcd027), TOBN(0xa8786c75, 0xbb3165ca),
+     TOBN(0xe9db1e34, 0x7e99a4d9), TOBN(0x99ee86df, 0xb06c504b),
+     TOBN(0x5b7c2ddd, 0xc15c9f0a), TOBN(0xdf87a734, 0x4295989e),
+     TOBN(0x59ece47c, 0x03d08fda), TOBN(0xb074d3dd, 0xad5fc702),
+     TOBN(0x20407903, 0x51a03776), TOBN(0x2bb1f77b, 0x2a608007),
+     TOBN(0x25c58f4f, 0xe1153185), TOBN(0xe6df62f6, 0x766e6447),
+     TOBN(0xefb3d1be, 0xed51275a), TOBN(0x5de47dc7, 0x2f0f483f),
+     TOBN(0x7932d98e, 0x97c2bedf), TOBN(0xd5c11927, 0x0219f8a1),
+     TOBN(0x9d751200, 0xa73a294e), TOBN(0x5f88434a, 0x9dc20172),
+     TOBN(0xd28d9fd3, 0xa26f506a), TOBN(0xa890cd31, 0x9d1dcd48),
+     TOBN(0x0aebaec1, 0x70f4d3b4), TOBN(0xfd1a1369, 0x0ffc8d00),
+     TOBN(0xb9d9c240, 0x57d57838), TOBN(0x45929d26, 0x68bac361),
+     TOBN(0x5a2cd060, 0x25b15ca6), TOBN(0x4b3c83e1, 0x6e474446),
+     TOBN(0x1aac7578, 0xee1e5134), TOBN(0xa418f5d6, 0xc91e2f41),
+     TOBN(0x6936fc8a, 0x213ed68b), TOBN(0x860ae7ed, 0x510a5224),
+     TOBN(0x63660335, 0xdef09b53), TOBN(0x641b2897, 0xcd79c98d),
+     TOBN(0x29bd38e1, 0x01110f35), TOBN(0x79c26f42, 0x648b1937),
+     TOBN(0x64dae519, 0x9d9164f4), TOBN(0xd85a2310, 0x0265c273),
+     TOBN(0x7173dd5d, 0x4b07e2b1), TOBN(0xd144c4cb, 0x8d9ea221),
+     TOBN(0xe8b04ea4, 0x1105ab14), TOBN(0x92dda542, 0xfe80d8f1),
+     TOBN(0xe9982fa8, 0xcf03dce6), TOBN(0x8b5ea965, 0x1a22cffc),
+     TOBN(0xf7f4ea7f, 0x3fad88c4), TOBN(0x62db773e, 0x6a5ba95c),
+     TOBN(0xd20f02fb, 0x93f24567), TOBN(0xfd46c69a, 0x315257ca),
+     TOBN(0x0ac74cc7, 0x8bcab987), TOBN(0x46f31c01, 0x5ceca2f5),
+     TOBN(0x40aedb59, 0x888b219e), TOBN(0xe50ecc37, 0xe1fccd02),
+     TOBN(0x1bcd9dad, 0x911f816c), TOBN(0x583cc1ec, 0x8db9b00c),
+     TOBN(0xf3cd2e66, 0xa483bf11), TOBN(0xfa08a6f5, 0xb1b2c169),
+     TOBN(0xf375e245, 0x4be9fa28), TOBN(0x99a7ffec, 0x5b6d011f),
+     TOBN(0x6a3ebddb, 0xc4ae62da), TOBN(0x6cea00ae, 0x374aef5d),
+     TOBN(0xab5fb98d, 0x9d4d05bc), TOBN(0x7cba1423, 0xd560f252),
+     TOBN(0x49b2cc21, 0x208490de), TOBN(0x1ca66ec3, 0xbcfb2879),
+     TOBN(0x7f1166b7, 0x1b6fb16f), TOBN(0xfff63e08, 0x65fe5db3),
+     TOBN(0xb8345abe, 0x8b2610be), TOBN(0xb732ed80, 0x39de3df4),
+     TOBN(0x0e24ed50, 0x211c32b4), TOBN(0xd10d8a69, 0x848ff27d),
+     TOBN(0xc1074398, 0xed4de248), TOBN(0xd7cedace, 0x10488927),
+     TOBN(0xa4aa6bf8, 0x85673e13), TOBN(0xb46bae91, 0x6daf30af),
+     TOBN(0x07088472, 0xfcef7ad8), TOBN(0x61151608, 0xd4b35e97),
+     TOBN(0xbcfe8f26, 0xdde29986), TOBN(0xeb84c4c7, 0xd5a34c79),
+     TOBN(0xc1eec55c, 0x164e1214), TOBN(0x891be86d, 0xa147bb03),
+     TOBN(0x9fab4d10, 0x0ba96835), TOBN(0xbf01e9b8, 0xa5c1ae9f),
+     TOBN(0x6b4de139, 0xb186ebc0), TOBN(0xd5c74c26, 0x85b91bca),
+     TOBN(0x5086a99c, 0xc2d93854), TOBN(0xeed62a7b, 0xa7a9dfbc),
+     TOBN(0x8778ed6f, 0x76b7618a), TOBN(0xbff750a5, 0x03b66062),
+     TOBN(0x4cb7be22, 0xb65186db), TOBN(0x369dfbf0, 0xcc3a6d13),
+     TOBN(0xc7dab26c, 0x7191a321), TOBN(0x9edac3f9, 0x40ed718e),
+     TOBN(0xbc142b36, 0xd0cfd183), TOBN(0xc8af82f6, 0x7c991693),
+     TOBN(0xb3d1e4d8, 0x97ce0b2a), TOBN(0xe6d7c87f, 0xc3a55cdf),
+     TOBN(0x35846b95, 0x68b81afe), TOBN(0x018d12af, 0xd3c239d8),
+     TOBN(0x2b2c6208, 0x01206e15), TOBN(0xe0e42453, 0xa3b882c6),
+     TOBN(0x854470a3, 0xa50162d5), TOBN(0x08157478, 0x7017a62a),
+     TOBN(0x18bd3fb4, 0x820357c7), TOBN(0x992039ae, 0x6f1458ad),
+     TOBN(0x9a1df3c5, 0x25b44aa1), TOBN(0x2d780357, 0xed3d5281),
+     TOBN(0x58cf7e4d, 0xc77ad4d4), TOBN(0xd49a7998, 0xf9df4fc4),
+     TOBN(0x4465a8b5, 0x1d71205e), TOBN(0xa0ee0ea6, 0x649254aa),
+     TOBN(0x4b5eeecf, 0xab7bd771), TOBN(0x6c873073, 0x35c262b9),
+     TOBN(0xdc5bd648, 0x3c9d61e7), TOBN(0x233d6d54, 0x321460d2),
+     TOBN(0xd20c5626, 0xfc195bcc), TOBN(0x25445958, 0x04d78b63),
+     TOBN(0xe03fcb3d, 0x17ec8ef3), TOBN(0x54b690d1, 0x46b8f781),
+     TOBN(0x82fa2c8a, 0x21230646), TOBN(0xf51aabb9, 0x084f418c),
+     TOBN(0xff4fbec1, 0x1a30ba43), TOBN(0x6a5acf73, 0x743c9df7),
+     TOBN(0x1da2b357, 0xd635b4d5), TOBN(0xc3de68dd, 0xecd5c1da),
+     TOBN(0xa689080b, 0xd61af0dd), TOBN(0xdea5938a, 0xd665bf99),
+     TOBN(0x0231d71a, 0xfe637294), TOBN(0x01968aa6, 0xa5a81cd8),
+     TOBN(0x11252d50, 0x048e63b5), TOBN(0xc446bc52, 0x6ca007e9),
+     TOBN(0xef8c50a6, 0x96d6134b), TOBN(0x9361fbf5, 0x9e09a05c),
+     TOBN(0xf17f85a6, 0xdca3291a), TOBN(0xb178d548, 0xff251a21),
+     TOBN(0x87f6374b, 0xa4df3915), TOBN(0x566ce1bf, 0x2fd5d608),
+     TOBN(0x425cba4d, 0x7de35102), TOBN(0x6b745f8f, 0x58c5d5e2),
+     TOBN(0x88402af6, 0x63122edf), TOBN(0x3190f9ed, 0x3b989a89),
+     TOBN(0x4ad3d387, 0xebba3156), TOBN(0xef385ad9, 0xc7c469a5),
+     TOBN(0xb08281de, 0x3f642c29), TOBN(0x20be0888, 0x910ffb88),
+     TOBN(0xf353dd4a, 0xd5292546), TOBN(0x3f1627de, 0x8377a262),
+     TOBN(0xa5faa013, 0xeefcd638), TOBN(0x8f3bf626, 0x74cc77c3),
+     TOBN(0x32618f65, 0xa348f55e), TOBN(0x5787c0dc, 0x9fefeb9e),
+     TOBN(0xf1673aa2, 0xd9a23e44), TOBN(0x88dfa993, 0x4e10690d),
+     TOBN(0x1ced1b36, 0x2bf91108), TOBN(0x9193ceca, 0x3af48649),
+     TOBN(0xfb34327d, 0x2d738fc5), TOBN(0x6697b037, 0x975fee6c),
+     TOBN(0x2f485da0, 0xc04079a5), TOBN(0x2cdf5735, 0x2feaa1ac),
+     TOBN(0x76944420, 0xbd55659e), TOBN(0x7973e32b, 0x4376090c),
+     TOBN(0x86bb4fe1, 0x163b591a), TOBN(0x10441aed, 0xc196f0ca),
+     TOBN(0x3b431f4a, 0x045ad915), TOBN(0x6c11b437, 0xa4afacb1),
+     TOBN(0x30b0c7db, 0x71fdbbd8), TOBN(0xb642931f, 0xeda65acd),
+     TOBN(0x4baae6e8, 0x9c92b235), TOBN(0xa73bbd0e, 0x6b3993a1),
+     TOBN(0xd06d60ec, 0x693dd031), TOBN(0x03cab91b, 0x7156881c),
+     TOBN(0xd615862f, 0x1db3574b), TOBN(0x485b0185, 0x64bb061a),
+     TOBN(0x27434988, 0xa0181e06), TOBN(0x2cd61ad4, 0xc1c0c757),
+     TOBN(0x3effed5a, 0x2ff9f403), TOBN(0x8dc98d8b, 0x62239029),
+     TOBN(0x2206021e, 0x1f17b70d), TOBN(0xafbec0ca, 0xbf510015),
+     TOBN(0x9fed7164, 0x80130dfa), TOBN(0x306dc2b5, 0x8a02dcf5),
+     TOBN(0x48f06620, 0xfeb10fc0), TOBN(0x78d1e1d5, 0x5a57cf51),
+     TOBN(0xadef8c5a, 0x192ef710), TOBN(0x88afbd4b, 0x3b7431f9),
+     TOBN(0x7e1f7407, 0x64250c9e), TOBN(0x6e31318d, 0xb58bec07),
+     TOBN(0xfd4fc4b8, 0x24f89b4e), TOBN(0x65a5dd88, 0x48c36a2a),
+     TOBN(0x4f1eccff, 0xf024baa7), TOBN(0x22a21cf2, 0xcba94650),
+     TOBN(0x95d29dee, 0x42a554f7), TOBN(0x828983a5, 0x002ec4ba),
+     TOBN(0x8112a1f7, 0x8badb73d), TOBN(0x79ea8897, 0xa27c1839),
+     TOBN(0x8969a5a7, 0xd065fd83), TOBN(0xf49af791, 0xb262a0bc),
+     TOBN(0xfcdea8b6, 0xaf2b5127), TOBN(0x10e913e1, 0x564c2dbc),
+     TOBN(0x51239d14, 0xbc21ef51), TOBN(0xe51c3ceb, 0x4ce57292),
+     TOBN(0x795ff068, 0x47bbcc3b), TOBN(0x86b46e1e, 0xbd7e11e6),
+     TOBN(0x0ea6ba23, 0x80041ef4), TOBN(0xd72fe505, 0x6262342e),
+     TOBN(0x8abc6dfd, 0x31d294d4), TOBN(0xbbe017a2, 0x1278c2c9),
+     TOBN(0xb1fcfa09, 0xb389328a), TOBN(0x322fbc62, 0xd01771b5),
+     TOBN(0x04c0d063, 0x60b045bf), TOBN(0xdb652edc, 0x10e52d01),
+     TOBN(0x50ef932c, 0x03ec6627), TOBN(0xde1b3b2d, 0xc1ee50e3),
+     TOBN(0x5ab7bdc5, 0xdc37a90d), TOBN(0xfea67213, 0x31e33a96),
+     TOBN(0x6482b5cb, 0x4f2999aa), TOBN(0x38476cc6, 0xb8cbf0dd),
+     TOBN(0x93ebfacb, 0x173405bb), TOBN(0x15cdafe7, 0xe52369ec),
+     TOBN(0xd42d5ba4, 0xd935b7db), TOBN(0x648b6004, 0x1c99a4cd),
+     TOBN(0x785101bd, 0xa3b5545b), TOBN(0x4bf2c38a, 0x9dd67faf),
+     TOBN(0xb1aadc63, 0x4442449c), TOBN(0xe0e9921a, 0x33ad4fb8),
+     TOBN(0x5c552313, 0xaa686d82), TOBN(0xdee635fa, 0x465d866c),
+     TOBN(0xbc3c224a, 0x18ee6e8a), TOBN(0xeed748a6, 0xed42e02f),
+     TOBN(0xe70f930a, 0xd474cd08), TOBN(0x774ea6ec, 0xfff24adf),
+     TOBN(0x03e2de1c, 0xf3480d4a), TOBN(0xf0d8edc7, 0xbc8acf1a),
+     TOBN(0xf23e3303, 0x68295a9c), TOBN(0xfadd5f68, 0xc546a97d),
+     TOBN(0x895597ad, 0x96f8acb1), TOBN(0xbddd49d5, 0x671bdae2),
+     TOBN(0x16fcd528, 0x21dd43f4), TOBN(0xa5a45412, 0x6619141a)}
+    ,
+    {TOBN(0x8ce9b6bf, 0xc360e25a), TOBN(0xe6425195, 0x075a1a78),
+     TOBN(0x9dc756a8, 0x481732f4), TOBN(0x83c0440f, 0x5432b57a),
+     TOBN(0xc670b3f1, 0xd720281f), TOBN(0x2205910e, 0xd135e051),
+     TOBN(0xded14b0e, 0xdb052be7), TOBN(0x697b3d27, 0xc568ea39),
+     TOBN(0x2e599b9a, 0xfb3ff9ed), TOBN(0x28c2e0ab, 0x17f6515c),
+     TOBN(0x1cbee4fd, 0x474da449), TOBN(0x071279a4, 0x4f364452),
+     TOBN(0x97abff66, 0x01fbe855), TOBN(0x3ee394e8, 0x5fda51c4),
+     TOBN(0x190385f6, 0x67597c0b), TOBN(0x6e9fccc6, 0xa27ee34b),
+     TOBN(0x0b89de93, 0x14092ebb), TOBN(0xf17256bd, 0x428e240c),
+     TOBN(0xcf89a7f3, 0x93d2f064), TOBN(0x4f57841e, 0xe1ed3b14),
+     TOBN(0x4ee14405, 0xe708d855), TOBN(0x856aae72, 0x03f1c3d0),
+     TOBN(0xc8e5424f, 0xbdd7eed5), TOBN(0x3333e4ef, 0x73ab4270),
+     TOBN(0x3bc77ade, 0xdda492f8), TOBN(0xc11a3aea, 0x78297205),
+     TOBN(0x5e89a3e7, 0x34931b4c), TOBN(0x17512e2e, 0x9f5694bb),
+     TOBN(0x5dc349f3, 0x177bf8b6), TOBN(0x232ea4ba, 0x08c7ff3e),
+     TOBN(0x9c4f9d16, 0xf511145d), TOBN(0xccf109a3, 0x33b379c3),
+     TOBN(0xe75e7a88, 0xa1f25897), TOBN(0x7ac6961f, 0xa1b5d4d8),
+     TOBN(0xe3e10773, 0x08f3ed5c), TOBN(0x208a54ec, 0x0a892dfb),
+     TOBN(0xbe826e19, 0x78660710), TOBN(0x0cf70a97, 0x237df2c8),
+     TOBN(0x418a7340, 0xed704da5), TOBN(0xa3eeb9a9, 0x08ca33fd),
+     TOBN(0x49d96233, 0x169bca96), TOBN(0x04d286d4, 0x2da6aafb),
+     TOBN(0xc09606ec, 0xa0c2fa94), TOBN(0x8869d0d5, 0x23ff0fb3),
+     TOBN(0xa99937e5, 0xd0150d65), TOBN(0xa92e2503, 0x240c14c9),
+     TOBN(0x656bf945, 0x108e2d49), TOBN(0x152a733a, 0xa2f59e2b),
+     TOBN(0xb4323d58, 0x8434a920), TOBN(0xc0af8e93, 0x622103c5),
+     TOBN(0x667518ef, 0x938dbf9a), TOBN(0xa1843073, 0x83a9cdf2),
+     TOBN(0x350a94aa, 0x5447ab80), TOBN(0xe5e5a325, 0xc75a3d61),
+     TOBN(0x74ba507f, 0x68411a9e), TOBN(0x10581fc1, 0x594f70c5),
+     TOBN(0x60e28570, 0x80eb24a9), TOBN(0x7bedfb4d, 0x488e0cfd),
+     TOBN(0x721ebbd7, 0xc259cdb8), TOBN(0x0b0da855, 0xbc6390a9),
+     TOBN(0x2b4d04db, 0xde314c70), TOBN(0xcdbf1fbc, 0x6c32e846),
+     TOBN(0x33833eab, 0xb162fc9e), TOBN(0x9939b48b, 0xb0dd3ab7),
+     TOBN(0x5aaa98a7, 0xcb0c9c8c), TOBN(0x75105f30, 0x81c4375c),
+     TOBN(0xceee5057, 0x5ef1c90f), TOBN(0xb31e065f, 0xc23a17bf),
+     TOBN(0x5364d275, 0xd4b6d45a), TOBN(0xd363f3ad, 0x62ec8996),
+     TOBN(0xb5d21239, 0x4391c65b), TOBN(0x84564765, 0xebb41b47),
+     TOBN(0x20d18ecc, 0x37107c78), TOBN(0xacff3b6b, 0x570c2a66),
+     TOBN(0x22f975d9, 0x9bd0d845), TOBN(0xef0a0c46, 0xba178fa0),
+     TOBN(0x1a419651, 0x76b6028e), TOBN(0xc49ec674, 0x248612d4),
+     TOBN(0x5b6ac4f2, 0x7338af55), TOBN(0x06145e62, 0x7bee5a36),
+     TOBN(0x33e95d07, 0xe75746b5), TOBN(0x1c1e1f6d, 0xc40c78be),
+     TOBN(0x967833ef, 0x222ff8e2), TOBN(0x4bedcf6a, 0xb49180ad),
+     TOBN(0x6b37e9c1, 0x3d7a4c8a), TOBN(0x2748887c, 0x6ddfe760),
+     TOBN(0xf7055123, 0xaa3a5bbc), TOBN(0x954ff225, 0x7bbb8e74),
+     TOBN(0xc42b8ab1, 0x97c3dfb9), TOBN(0x55a549b0, 0xcf168154),
+     TOBN(0xad6748e7, 0xc1b50692), TOBN(0x2775780f, 0x6fc5cbcb),
+     TOBN(0x4eab80b8, 0xe1c9d7c8), TOBN(0x8c69dae1, 0x3fdbcd56),
+     TOBN(0x47e6b4fb, 0x9969eace), TOBN(0x002f1085, 0xa705cb5a),
+     TOBN(0x4e23ca44, 0x6d3fea55), TOBN(0xb4ae9c86, 0xf4810568),
+     TOBN(0x47bfb91b, 0x2a62f27d), TOBN(0x60deb4c9, 0xd9bac28c),
+     TOBN(0xa892d894, 0x7de6c34c), TOBN(0x4ee68259, 0x4494587d),
+     TOBN(0x914ee14e, 0x1a3f8a5b), TOBN(0xbb113eaa, 0x28700385),
+     TOBN(0x81ca03b9, 0x2115b4c9), TOBN(0x7c163d38, 0x8908cad1),
+     TOBN(0xc912a118, 0xaa18179a), TOBN(0xe09ed750, 0x886e3081),
+     TOBN(0xa676e3fa, 0x26f516ca), TOBN(0x753cacf7, 0x8e732f91),
+     TOBN(0x51592aea, 0x833da8b4), TOBN(0xc626f42f, 0x4cbea8aa),
+     TOBN(0xef9dc899, 0xa7b56eaf), TOBN(0x00c0e52c, 0x34ef7316),
+     TOBN(0x5b1e4e24, 0xfe818a86), TOBN(0x9d31e20d, 0xc538be47),
+     TOBN(0x22eb932d, 0x3ed68974), TOBN(0xe44bbc08, 0x7c4e87c4),
+     TOBN(0x4121086e, 0x0dde9aef), TOBN(0x8e6b9cff, 0x134f4345),
+     TOBN(0x96892c1f, 0x711b0eb9), TOBN(0xb905f2c8, 0x780ab954),
+     TOBN(0xace26309, 0xa20792db), TOBN(0xec8ac9b3, 0x0684e126),
+     TOBN(0x486ad8b6, 0xb40a2447), TOBN(0x60121fc1, 0x9fe3fb24),
+     TOBN(0x5626fccf, 0x1a8e3b3f), TOBN(0x4e568622, 0x6ad1f394),
+     TOBN(0xda7aae0d, 0x196aa5a1), TOBN(0xe0df8c77, 0x1041b5fb),
+     TOBN(0x451465d9, 0x26b318b7), TOBN(0xc29b6e55, 0x7ab136e9),
+     TOBN(0x2c2ab48b, 0x71148463), TOBN(0xb5738de3, 0x64454a76),
+     TOBN(0x54ccf9a0, 0x5a03abe4), TOBN(0x377c0296, 0x0427d58e),
+     TOBN(0x73f5f0b9, 0x2bb39c1f), TOBN(0x14373f2c, 0xe608d8c5),
+     TOBN(0xdcbfd314, 0x00fbb805), TOBN(0xdf18fb20, 0x83afdcfb),
+     TOBN(0x81a57f42, 0x42b3523f), TOBN(0xe958532d, 0x87f650fb),
+     TOBN(0xaa8dc8b6, 0x8b0a7d7c), TOBN(0x1b75dfb7, 0x150166be),
+     TOBN(0x90e4f7c9, 0x2d7d1413), TOBN(0x67e2d6b5, 0x9834f597),
+     TOBN(0x4fd4f4f9, 0xa808c3e8), TOBN(0xaf8237e0, 0xd5281ec1),
+     TOBN(0x25ab5fdc, 0x84687cee), TOBN(0xc5ded6b1, 0xa5b26c09),
+     TOBN(0x8e4a5aec, 0xc8ea7650), TOBN(0x23b73e5c, 0x14cc417f),
+     TOBN(0x2bfb4318, 0x3037bf52), TOBN(0xb61e6db5, 0x78c725d7),
+     TOBN(0x8efd4060, 0xbbb3e5d7), TOBN(0x2e014701, 0xdbac488e),
+     TOBN(0xac75cf9a, 0x360aa449), TOBN(0xb70cfd05, 0x79634d08),
+     TOBN(0xa591536d, 0xfffb15ef), TOBN(0xb2c37582, 0xd07c106c),
+     TOBN(0xb4293fdc, 0xf50225f9), TOBN(0xc52e175c, 0xb0e12b03),
+     TOBN(0xf649c3ba, 0xd0a8bf64), TOBN(0x745a8fef, 0xeb8ae3c6),
+     TOBN(0x30d7e5a3, 0x58321bc3), TOBN(0xb1732be7, 0x0bc4df48),
+     TOBN(0x1f217993, 0xe9ea5058), TOBN(0xf7a71cde, 0x3e4fd745),
+     TOBN(0x86cc533e, 0x894c5bbb), TOBN(0x6915c7d9, 0x69d83082),
+     TOBN(0xa6aa2d05, 0x5815c244), TOBN(0xaeeee592, 0x49b22ce5),
+     TOBN(0x89e39d13, 0x78135486), TOBN(0x3a275c1f, 0x16b76f2f),
+     TOBN(0xdb6bcc1b, 0xe036e8f5), TOBN(0x4df69b21, 0x5e4709f5),
+     TOBN(0xa188b250, 0x2d0f39aa), TOBN(0x622118bb, 0x15a85947),
+     TOBN(0x2ebf520f, 0xfde0f4fa), TOBN(0xa40e9f29, 0x4860e539),
+     TOBN(0x7b6a51eb, 0x22b57f0f), TOBN(0x849a33b9, 0x7e80644a),
+     TOBN(0x50e5d16f, 0x1cf095fe), TOBN(0xd754b54e, 0xec55f002),
+     TOBN(0x5cfbbb22, 0x236f4a98), TOBN(0x0b0c59e9, 0x066800bb),
+     TOBN(0x4ac69a8f, 0x5a9a7774), TOBN(0x2b33f804, 0xd6bec948),
+     TOBN(0xb3729295, 0x32e6c466), TOBN(0x68956d0f, 0x4e599c73),
+     TOBN(0xa47a249f, 0x155c31cc), TOBN(0x24d80f0d, 0xe1ce284e),
+     TOBN(0xcd821dfb, 0x988baf01), TOBN(0xe6331a7d, 0xdbb16647),
+     TOBN(0x1eb8ad33, 0x094cb960), TOBN(0x593cca38, 0xc91bbca5),
+     TOBN(0x384aac8d, 0x26567456), TOBN(0x40fa0309, 0xc04b6490),
+     TOBN(0x97834cd6, 0xdab6c8f6), TOBN(0x68a7318d, 0x3f91e55f),
+     TOBN(0xa00fd04e, 0xfc4d3157), TOBN(0xb56f8ab2, 0x2bf3bdea),
+     TOBN(0x014f5648, 0x4fa57172), TOBN(0x948c5860, 0x450abdb3),
+     TOBN(0x342b5df0, 0x0ebd4f08), TOBN(0x3e5168cd, 0x0e82938e),
+     TOBN(0x7aedc1ce, 0xb0df5dd0), TOBN(0x6bbbc6d9, 0xe5732516),
+     TOBN(0xc7bfd486, 0x605daaa6), TOBN(0x46fd72b7, 0xbb9a6c9e),
+     TOBN(0xe4847fb1, 0xa124fb89), TOBN(0x75959cbd, 0xa2d8ffbc),
+     TOBN(0x42579f65, 0xc8a588ee), TOBN(0x368c92e6, 0xb80b499d),
+     TOBN(0xea4ef6cd, 0x999a5df1), TOBN(0xaa73bb7f, 0x936fe604),
+     TOBN(0xf347a70d, 0x6457d188), TOBN(0x86eda86b, 0x8b7a388b),
+     TOBN(0xb7cdff06, 0x0ccd6013), TOBN(0xbeb1b6c7, 0xd0053fb2),
+     TOBN(0x0b022387, 0x99240a9f), TOBN(0x1bbb384f, 0x776189b2),
+     TOBN(0x8695e71e, 0x9066193a), TOBN(0x2eb50097, 0x06ffac7e),
+     TOBN(0x0654a9c0, 0x4a7d2caa), TOBN(0x6f3fb3d1, 0xa5aaa290),
+     TOBN(0x835db041, 0xff476e8f), TOBN(0x540b8b0b, 0xc42295e4),
+     TOBN(0xa5c73ac9, 0x05e214f5), TOBN(0x9a74075a, 0x56a0b638),
+     TOBN(0x2e4b1090, 0xce9e680b), TOBN(0x57a5b479, 0x6b8d9afa),
+     TOBN(0x0dca48e7, 0x26bfe65c), TOBN(0x097e391c, 0x7290c307),
+     TOBN(0x683c462e, 0x6669e72e), TOBN(0xf505be1e, 0x062559ac),
+     TOBN(0x5fbe3ea1, 0xe3a3035a), TOBN(0x6431ebf6, 0x9cd50da8),
+     TOBN(0xfd169d5c, 0x1f6407f2), TOBN(0x8d838a95, 0x60fce6b8),
+     TOBN(0x2a2bfa7f, 0x650006f0), TOBN(0xdfd7dad3, 0x50c0fbb2),
+     TOBN(0x92452495, 0xccf9ad96), TOBN(0x183bf494, 0xd95635f9),
+     TOBN(0x02d5df43, 0x4a7bd989), TOBN(0x505385cc, 0xa5431095),
+     TOBN(0xdd98e67d, 0xfd43f53e), TOBN(0xd61e1a6c, 0x500c34a9),
+     TOBN(0x5a4b46c6, 0x4a8a3d62), TOBN(0x8469c4d0, 0x247743d2),
+     TOBN(0x2bb3a13d, 0x88f7e433), TOBN(0x62b23a10, 0x01be5849),
+     TOBN(0xe83596b4, 0xa63d1a4c), TOBN(0x454e7fea, 0x7d183f3e),
+     TOBN(0x643fce61, 0x17afb01c), TOBN(0x4e65e5e6, 0x1c4c3638),
+     TOBN(0x41d85ea1, 0xef74c45b), TOBN(0x2cfbfa66, 0xae328506),
+     TOBN(0x98b078f5, 0x3ada7da9), TOBN(0xd985fe37, 0xec752fbb),
+     TOBN(0xeece68fe, 0x5a0148b4), TOBN(0x6f9a55c7, 0x2d78136d),
+     TOBN(0x232dccc4, 0xd2b729ce), TOBN(0xa27e0dfd, 0x90aafbc4),
+     TOBN(0x96474452, 0x12b4603e), TOBN(0xa876c551, 0x6b706d14),
+     TOBN(0xdf145fcf, 0x69a9d412), TOBN(0xe2ab75b7, 0x2d479c34),
+     TOBN(0x12df9a76, 0x1a23ff97), TOBN(0xc6138992, 0x5d359d10),
+     TOBN(0x6e51c7ae, 0xfa835f22), TOBN(0x69a79cb1, 0xc0fcc4d9),
+     TOBN(0xf57f350d, 0x594cc7e1), TOBN(0x3079ca63, 0x3350ab79),
+     TOBN(0x226fb614, 0x9aff594a), TOBN(0x35afec02, 0x6d59a62b),
+     TOBN(0x9bee46f4, 0x06ed2c6e), TOBN(0x58da1735, 0x7d939a57),
+     TOBN(0x44c50402, 0x8fd1797e), TOBN(0xd8853e7c, 0x5ccea6ca),
+     TOBN(0x4065508d, 0xa35fcd5f), TOBN(0x8965df8c, 0x495ccaeb),
+     TOBN(0x0f2da850, 0x12e1a962), TOBN(0xee471b94, 0xc1cf1cc4),
+     TOBN(0xcef19bc8, 0x0a08fb75), TOBN(0x704958f5, 0x81de3591),
+     TOBN(0x2867f8b2, 0x3aef4f88), TOBN(0x8d749384, 0xea9f9a5f),
+     TOBN(0x1b385537, 0x8c9049f4), TOBN(0x5be948f3, 0x7b92d8b6),
+     TOBN(0xd96f725d, 0xb6e2bd6b), TOBN(0x37a222bc, 0x958c454d),
+     TOBN(0xe7c61abb, 0x8809bf61), TOBN(0x46f07fbc, 0x1346f18d),
+     TOBN(0xfb567a7a, 0xe87c0d1c), TOBN(0x84a461c8, 0x7ef3d07a),
+     TOBN(0x0a5adce6, 0xd9278d98), TOBN(0x24d94813, 0x9dfc73e1),
+     TOBN(0x4f3528b6, 0x054321c3), TOBN(0x2e03fdde, 0x692ea706),
+     TOBN(0x10e60619, 0x47b533c0), TOBN(0x1a8bc73f, 0x2ca3c055),
+     TOBN(0xae58d4b2, 0x1bb62b8f), TOBN(0xb2045a73, 0x584a24e3),
+     TOBN(0x3ab3d5af, 0xbd76e195), TOBN(0x478dd1ad, 0x6938a810),
+     TOBN(0x6ffab393, 0x6ee3d5cb), TOBN(0xdfb693db, 0x22b361e4),
+     TOBN(0xf9694496, 0x51dbf1a7), TOBN(0xcab4b4ef, 0x08a2e762),
+     TOBN(0xe8c92f25, 0xd39bba9a), TOBN(0x850e61bc, 0xf1464d96),
+     TOBN(0xb7e830e3, 0xdc09508b), TOBN(0xfaf6d2cf, 0x74317655),
+     TOBN(0x72606ceb, 0xdf690355), TOBN(0x48bb92b3, 0xd0c3ded6),
+     TOBN(0x65b75484, 0x5c7cf892), TOBN(0xf6cd7ac9, 0xd5d5f01f),
+     TOBN(0xc2c30a59, 0x96401d69), TOBN(0x91268650, 0xed921878),
+     TOBN(0x380bf913, 0xb78c558f), TOBN(0x43c0baeb, 0xc8afdaa9),
+     TOBN(0x377f61d5, 0x54f169d3), TOBN(0xf8da07e3, 0xae5ff20b),
+     TOBN(0xb676c49d, 0xa8a90ea8), TOBN(0x81c1ff2b, 0x83a29b21),
+     TOBN(0x383297ac, 0x2ad8d276), TOBN(0x3001122f, 0xba89f982),
+     TOBN(0xe1d794be, 0x6718e448), TOBN(0x246c1482, 0x7c3e6e13),
+     TOBN(0x56646ef8, 0x5d26b5ef), TOBN(0x80f5091e, 0x88069cdd),
+     TOBN(0xc5992e2f, 0x724bdd38), TOBN(0x02e915b4, 0x8471e8c7),
+     TOBN(0x96ff320a, 0x0d0ff2a9), TOBN(0xbf886487, 0x4384d1a0),
+     TOBN(0xbbe1e6a6, 0xc93f72d6), TOBN(0xd5f75d12, 0xcad800ea),
+     TOBN(0xfa40a09f, 0xe7acf117), TOBN(0x32c8cdd5, 0x7581a355),
+     TOBN(0x74221992, 0x7023c499), TOBN(0xa8afe5d7, 0x38ec3901),
+     TOBN(0x5691afcb, 0xa90e83f0), TOBN(0x41bcaa03, 0x0b8f8eac),
+     TOBN(0xe38b5ff9, 0x8d2668d5), TOBN(0x0715281a, 0x7ad81965),
+     TOBN(0x1bc8fc7c, 0x03c6ce11), TOBN(0xcbbee6e2, 0x8b650436),
+     TOBN(0x06b00fe8, 0x0cdb9808), TOBN(0x17d6e066, 0xfe3ed315),
+     TOBN(0x2e9d38c6, 0x4d0b5018), TOBN(0xab8bfd56, 0x844dcaef),
+     TOBN(0x42894a59, 0x513aed8b), TOBN(0xf77f3b6d, 0x314bd07a),
+     TOBN(0xbbdecb8f, 0x8e42b582), TOBN(0xf10e2fa8, 0xd2390fe6),
+     TOBN(0xefb95022, 0x62a2f201), TOBN(0x4d59ea50, 0x50ee32b0),
+     TOBN(0xd87f7728, 0x6da789a8), TOBN(0xcf98a2cf, 0xf79492c4),
+     TOBN(0xf9577239, 0x720943c2), TOBN(0xba044cf5, 0x3990b9d0),
+     TOBN(0x5aa8e823, 0x95f2884a), TOBN(0x834de6ed, 0x0278a0af),
+     TOBN(0xc8e1ee9a, 0x5f25bd12), TOBN(0x9259ceaa, 0x6f7ab271),
+     TOBN(0x7e6d97a2, 0x77d00b76), TOBN(0x5c0c6eea, 0xa437832a),
+     TOBN(0x5232c20f, 0x5606b81d), TOBN(0xabd7b375, 0x0d991ee5),
+     TOBN(0x4d2bfe35, 0x8632d951), TOBN(0x78f85146, 0x98ed9364),
+     TOBN(0x951873f0, 0xf30c3282), TOBN(0x0da8ac80, 0xa789230b),
+     TOBN(0x3ac7789c, 0x5398967f), TOBN(0xa69b8f7f, 0xbdda0fb5),
+     TOBN(0xe5db7717, 0x6add8545), TOBN(0x1b71cb66, 0x72c49b66),
+     TOBN(0xd8560739, 0x68421d77), TOBN(0x03840fe8, 0x83e3afea),
+     TOBN(0xb391dad5, 0x1ec69977), TOBN(0xae243fb9, 0x307f6726),
+     TOBN(0xc88ac87b, 0xe8ca160c), TOBN(0x5174cced, 0x4ce355f4),
+     TOBN(0x98a35966, 0xe58ba37d), TOBN(0xfdcc8da2, 0x7817335d),
+     TOBN(0x5b752830, 0x83fbc7bf), TOBN(0x68e419d4, 0xd9c96984),
+     TOBN(0x409a39f4, 0x02a40380), TOBN(0x88940faf, 0x1fe977bc),
+     TOBN(0xc640a94b, 0x8f8edea6), TOBN(0x1e22cd17, 0xed11547d),
+     TOBN(0xe28568ce, 0x59ffc3e2), TOBN(0x60aa1b55, 0xc1dee4e7),
+     TOBN(0xc67497c8, 0x837cb363), TOBN(0x06fb438a, 0x105a2bf2),
+     TOBN(0x30357ec4, 0x500d8e20), TOBN(0x1ad9095d, 0x0670db10),
+     TOBN(0x7f589a05, 0xc73b7cfd), TOBN(0xf544607d, 0x880d6d28),
+     TOBN(0x17ba93b1, 0xa20ef103), TOBN(0xad859130, 0x6ba6577b),
+     TOBN(0x65c91cf6, 0x6fa214a0), TOBN(0xd7d49c6c, 0x27990da5),
+     TOBN(0xecd9ec8d, 0x20bb569d), TOBN(0xbd4b2502, 0xeeffbc33),
+     TOBN(0x2056ca5a, 0x6bed0467), TOBN(0x7916a1f7, 0x5b63728c),
+     TOBN(0xd4f9497d, 0x53a4f566), TOBN(0x89734664, 0x97b56810),
+     TOBN(0xf8e1da74, 0x0494a621), TOBN(0x82546a93, 0x8d011c68),
+     TOBN(0x1f3acb19, 0xc61ac162), TOBN(0x52f8fa9c, 0xabad0d3e),
+     TOBN(0x15356523, 0xb4b7ea43), TOBN(0x5a16ad61, 0xae608125),
+     TOBN(0xb0bcb87f, 0x4faed184), TOBN(0x5f236b1d, 0x5029f45f),
+     TOBN(0xd42c7607, 0x0bc6b1fc), TOBN(0xc644324e, 0x68aefce3),
+     TOBN(0x8e191d59, 0x5c5d8446), TOBN(0xc0208077, 0x13ae1979),
+     TOBN(0xadcaee55, 0x3ba59cc7), TOBN(0x20ed6d6b, 0xa2cb81ba),
+     TOBN(0x0952ba19, 0xb6efcffc), TOBN(0x60f12d68, 0x97c0b87c),
+     TOBN(0x4ee2c7c4, 0x9caa30bc), TOBN(0x767238b7, 0x97fbff4e),
+     TOBN(0xebc73921, 0x501b5d92), TOBN(0x3279e3df, 0xc2a37737),
+     TOBN(0x9fc12bc8, 0x6d197543), TOBN(0xfa94dc6f, 0x0a40db4e),
+     TOBN(0x7392b41a, 0x530ccbbd), TOBN(0x87c82146, 0xea823525),
+     TOBN(0xa52f984c, 0x05d98d0c), TOBN(0x2ae57d73, 0x5ef6974c),
+     TOBN(0x9377f7bf, 0x3042a6dd), TOBN(0xb1a007c0, 0x19647a64),
+     TOBN(0xfaa9079a, 0x0cca9767), TOBN(0x3d81a25b, 0xf68f72d5),
+     TOBN(0x752067f8, 0xff81578e), TOBN(0x78622150, 0x9045447d),
+     TOBN(0xc0c22fcf, 0x0505aa6f), TOBN(0x1030f0a6, 0x6bed1c77),
+     TOBN(0x31f29f15, 0x1f0bd739), TOBN(0x2d7989c7, 0xe6debe85),
+     TOBN(0x5c070e72, 0x8e677e98), TOBN(0x0a817bd3, 0x06e81fd5),
+     TOBN(0xc110d830, 0xb0f2ac95), TOBN(0x48d0995a, 0xab20e64e),
+     TOBN(0x0f3e00e1, 0x7729cd9a), TOBN(0x2a570c20, 0xdd556946),
+     TOBN(0x912dbcfd, 0x4e86214d), TOBN(0x2d014ee2, 0xcf615498),
+     TOBN(0x55e2b1e6, 0x3530d76e), TOBN(0xc5135ae4, 0xfd0fd6d1),
+     TOBN(0x0066273a, 0xd4f3049f), TOBN(0xbb8e9893, 0xe7087477),
+     TOBN(0x2dba1ddb, 0x14c6e5fd), TOBN(0xdba37886, 0x51f57e6c),
+     TOBN(0x5aaee0a6, 0x5a72f2cf), TOBN(0x1208bfbf, 0x7bea5642),
+     TOBN(0xf5c6aa3b, 0x67872c37), TOBN(0xd726e083, 0x43f93224),
+     TOBN(0x1854daa5, 0x061f1658), TOBN(0xc0016df1, 0xdf0cd2b3),
+     TOBN(0xc2a3f23e, 0x833d50de), TOBN(0x73b681d2, 0xbbbd3017),
+     TOBN(0x2f046dc4, 0x3ac343c0), TOBN(0x9c847e7d, 0x85716421),
+     TOBN(0xe1e13c91, 0x0917eed4), TOBN(0x3fc9eebd, 0x63a1b9c6),
+     TOBN(0x0f816a72, 0x7fe02299), TOBN(0x6335ccc2, 0x294f3319),
+     TOBN(0x3820179f, 0x4745c5be), TOBN(0xe647b782, 0x922f066e),
+     TOBN(0xc22e49de, 0x02cafb8a), TOBN(0x299bc2ff, 0xfcc2eccc),
+     TOBN(0x9a8feea2, 0x6e0e8282), TOBN(0xa627278b, 0xfe893205),
+     TOBN(0xa7e19733, 0x7933e47b), TOBN(0xf4ff6b13, 0x2e766402),
+     TOBN(0xa4d8be0a, 0x98440d9f), TOBN(0x658f5c2f, 0x38938808),
+     TOBN(0x90b75677, 0xc95b3b3e), TOBN(0xfa044269, 0x3137b6ff),
+     TOBN(0x077b039b, 0x43c47c29), TOBN(0xcca95dd3, 0x8a6445b2),
+     TOBN(0x0b498ba4, 0x2333fc4c), TOBN(0x274f8e68, 0xf736a1b1),
+     TOBN(0x6ca348fd, 0x5f1d4b2e), TOBN(0x24d3be78, 0xa8f10199),
+     TOBN(0x8535f858, 0xca14f530), TOBN(0xa6e7f163, 0x5b982e51),
+     TOBN(0x847c8512, 0x36e1bf62), TOBN(0xf6a7c58e, 0x03448418),
+     TOBN(0x583f3703, 0xf9374ab6), TOBN(0x864f9195, 0x6e564145),
+     TOBN(0x33bc3f48, 0x22526d50), TOBN(0x9f323c80, 0x1262a496),
+     TOBN(0xaa97a7ae, 0x3f046a9a), TOBN(0x70da183e, 0xdf8a039a),
+     TOBN(0x5b68f71c, 0x52aa0ba6), TOBN(0x9be0fe51, 0x21459c2d),
+     TOBN(0xc1e17eb6, 0xcbc613e5), TOBN(0x33131d55, 0x497ea61c),
+     TOBN(0x2f69d39e, 0xaf7eded5), TOBN(0x73c2f434, 0xde6af11b),
+     TOBN(0x4ca52493, 0xa4a375fa), TOBN(0x5f06787c, 0xb833c5c2),
+     TOBN(0x814e091f, 0x3e6e71cf), TOBN(0x76451f57, 0x8b746666)}
+    ,
+    {TOBN(0x80f9bdef, 0x694db7e0), TOBN(0xedca8787, 0xb9fcddc6),
+     TOBN(0x51981c34, 0x03b8dce1), TOBN(0x4274dcf1, 0x70e10ba1),
+     TOBN(0xf72743b8, 0x6def6d1a), TOBN(0xd25b1670, 0xebdb1866),
+     TOBN(0xc4491e8c, 0x050c6f58), TOBN(0x2be2b2ab, 0x87fbd7f5),
+     TOBN(0x3e0e5c9d, 0xd111f8ec), TOBN(0xbcc33f8d, 0xb7c4e760),
+     TOBN(0x702f9a91, 0xbd392a51), TOBN(0x7da4a795, 0xc132e92d),
+     TOBN(0x1a0b0ae3, 0x0bb1151b), TOBN(0x54febac8, 0x02e32251),
+     TOBN(0xea3a5082, 0x694e9e78), TOBN(0xe58ffec1, 0xe4fe40b8),
+     TOBN(0xf85592fc, 0xd1e0cf9e), TOBN(0xdea75f0d, 0xc0e7b2e8),
+     TOBN(0xc04215cf, 0xc135584e), TOBN(0x174fc727, 0x2f57092a),
+     TOBN(0xe7277877, 0xeb930bea), TOBN(0x504caccb, 0x5eb02a5a),
+     TOBN(0xf9fe08f7, 0xf5241b9b), TOBN(0xe7fb62f4, 0x8d5ca954),
+     TOBN(0xfbb8349d, 0x29c4120b), TOBN(0x9f94391f, 0xc0d0d915),
+     TOBN(0xc4074fa7, 0x5410ba51), TOBN(0xa66adbf6, 0x150a5911),
+     TOBN(0xc164543c, 0x34bfca38), TOBN(0xe0f27560, 0xb9e1ccfc),
+     TOBN(0x99da0f53, 0xe820219c), TOBN(0xe8234498, 0xc6b4997a),
+     TOBN(0xcfb88b76, 0x9d4c5423), TOBN(0x9e56eb10, 0xb0521c49),
+     TOBN(0x418e0b5e, 0xbe8700a1), TOBN(0x00cbaad6, 0xf93cb58a),
+     TOBN(0xe923fbde, 0xd92a5e67), TOBN(0xca4979ac, 0x1f347f11),
+     TOBN(0x89162d85, 0x6bc0585b), TOBN(0xdd6254af, 0xac3c70e3),
+     TOBN(0x7b23c513, 0x516e19e4), TOBN(0x56e2e847, 0xc5c4d593),
+     TOBN(0x9f727d73, 0x5ce71ef6), TOBN(0x5b6304a6, 0xf79a44c5),
+     TOBN(0x6638a736, 0x3ab7e433), TOBN(0x1adea470, 0xfe742f83),
+     TOBN(0xe054b854, 0x5b7fc19f), TOBN(0xf935381a, 0xba1d0698),
+     TOBN(0x546eab2d, 0x799e9a74), TOBN(0x96239e0e, 0xa949f729),
+     TOBN(0xca274c6b, 0x7090055a), TOBN(0x835142c3, 0x9020c9b0),
+     TOBN(0xa405667a, 0xa2e8807f), TOBN(0x29f2c085, 0x1aa3d39e),
+     TOBN(0xcc555d64, 0x42fc72f5), TOBN(0xe856e0e7, 0xfbeacb3c),
+     TOBN(0xb5504f9d, 0x918e4936), TOBN(0x65035ef6, 0xb2513982),
+     TOBN(0x0553a0c2, 0x6f4d9cb9), TOBN(0x6cb10d56, 0xbea85509),
+     TOBN(0x48d957b7, 0xa242da11), TOBN(0x16a4d3dd, 0x672b7268),
+     TOBN(0x3d7e637c, 0x8502a96b), TOBN(0x27c7032b, 0x730d463b),
+     TOBN(0xbdc02b18, 0xe4136a14), TOBN(0xbacf969d, 0x678e32bf),
+     TOBN(0xc98d89a3, 0xdd9c3c03), TOBN(0x7b92420a, 0x23becc4f),
+     TOBN(0xd4b41f78, 0xc64d565c), TOBN(0x9f969d00, 0x10f28295),
+     TOBN(0xec7f7f76, 0xb13d051a), TOBN(0x08945e1e, 0xa92da585),
+     TOBN(0x55366b7d, 0x5846426f), TOBN(0xe7d09e89, 0x247d441d),
+     TOBN(0x510b404d, 0x736fbf48), TOBN(0x7fa003d0, 0xe784bd7d),
+     TOBN(0x25f7614f, 0x17fd9596), TOBN(0x49e0e0a1, 0x35cb98db),
+     TOBN(0x2c65957b, 0x2e83a76a), TOBN(0x5d40da8d, 0xcddbe0f8),
+     TOBN(0xf2b8c405, 0x050bad24), TOBN(0x8918426d, 0xc2aa4823),
+     TOBN(0x2aeab3dd, 0xa38365a7), TOBN(0x72031717, 0x7c91b690),
+     TOBN(0x8b00d699, 0x60a94120), TOBN(0x478a255d, 0xe99eaeec),
+     TOBN(0xbf656a5f, 0x6f60aafd), TOBN(0xdfd7cb75, 0x5dee77b3),
+     TOBN(0x37f68bb4, 0xa595939d), TOBN(0x03556479, 0x28740217),
+     TOBN(0x8e740e7c, 0x84ad7612), TOBN(0xd89bc843, 0x9044695f),
+     TOBN(0xf7f3da5d, 0x85a9184d), TOBN(0x562563bb, 0x9fc0b074),
+     TOBN(0x06d2e6aa, 0xf88a888e), TOBN(0x612d8643, 0x161fbe7c),
+     TOBN(0x465edba7, 0xf64085e7), TOBN(0xb230f304, 0x29aa8511),
+     TOBN(0x53388426, 0xcda2d188), TOBN(0x90885735, 0x4b666649),
+     TOBN(0x6f02ff9a, 0x652f54f6), TOBN(0x65c82294, 0x5fae2bf0),
+     TOBN(0x7816ade0, 0x62f5eee3), TOBN(0xdcdbdf43, 0xfcc56d70),
+     TOBN(0x9fb3bba3, 0x54530bb2), TOBN(0xbde3ef77, 0xcb0869ea),
+     TOBN(0x89bc9046, 0x0b431163), TOBN(0x4d03d7d2, 0xe4819a35),
+     TOBN(0x33ae4f9e, 0x43b6a782), TOBN(0x216db307, 0x9c88a686),
+     TOBN(0x91dd88e0, 0x00ffedd9), TOBN(0xb280da9f, 0x12bd4840),
+     TOBN(0x32a7cb8a, 0x1635e741), TOBN(0xfe14008a, 0x78be02a7),
+     TOBN(0x3fafb334, 0x1b7ae030), TOBN(0x7fd508e7, 0x5add0ce9),
+     TOBN(0x72c83219, 0xd607ad51), TOBN(0x0f229c0a, 0x8d40964a),
+     TOBN(0x1be2c336, 0x1c878da2), TOBN(0xe0c96742, 0xeab2ab86),
+     TOBN(0x458f8691, 0x3e538cd7), TOBN(0xa7001f6c, 0x8e08ad53),
+     TOBN(0x52b8c6e6, 0xbf5d15ff), TOBN(0x548234a4, 0x011215dd),
+     TOBN(0xff5a9d2d, 0x3d5b4045), TOBN(0xb0ffeeb6, 0x4a904190),
+     TOBN(0x55a3aca4, 0x48607f8b), TOBN(0x8cbd665c, 0x30a0672a),
+     TOBN(0x87f834e0, 0x42583068), TOBN(0x02da2aeb, 0xf3f6e683),
+     TOBN(0x6b763e5d, 0x05c12248), TOBN(0x7230378f, 0x65a8aefc),
+     TOBN(0x93bd80b5, 0x71e8e5ca), TOBN(0x53ab041c, 0xb3b62524),
+     TOBN(0x1b860513, 0x6c9c552e), TOBN(0xe84d402c, 0xd5524e66),
+     TOBN(0xa37f3573, 0xf37f5937), TOBN(0xeb0f6c7d, 0xd1e4fca5),
+     TOBN(0x2965a554, 0xac8ab0fc), TOBN(0x17fbf56c, 0x274676ac),
+     TOBN(0x2e2f6bd9, 0xacf7d720), TOBN(0x41fc8f88, 0x10224766),
+     TOBN(0x517a14b3, 0x85d53bef), TOBN(0xdae327a5, 0x7d76a7d1),
+     TOBN(0x6ad0a065, 0xc4818267), TOBN(0x33aa189b, 0x37c1bbc1),
+     TOBN(0x64970b52, 0x27392a92), TOBN(0x21699a1c, 0x2d1535ea),
+     TOBN(0xcd20779c, 0xc2d7a7fd), TOBN(0xe3186059, 0x99c83cf2),
+     TOBN(0x9b69440b, 0x72c0b8c7), TOBN(0xa81497d7, 0x7b9e0e4d),
+     TOBN(0x515d5c89, 0x1f5f82dc), TOBN(0x9a7f67d7, 0x6361079e),
+     TOBN(0xa8da81e3, 0x11a35330), TOBN(0xe44990c4, 0x4b18be1b),
+     TOBN(0xc7d5ed95, 0xaf103e59), TOBN(0xece8aba7, 0x8dac9261),
+     TOBN(0xbe82b099, 0x9394b8d3), TOBN(0x6830f09a, 0x16adfe83),
+     TOBN(0x250a29b4, 0x88172d01), TOBN(0x8b20bd65, 0xcaff9e02),
+     TOBN(0xb8a7661e, 0xe8a6329a), TOBN(0x4520304d, 0xd3fce920),
+     TOBN(0xae45da1f, 0x2b47f7ef), TOBN(0xe07f5288, 0x5bffc540),
+     TOBN(0xf7997009, 0x3464f874), TOBN(0x2244c2cd, 0xa6fa1f38),
+     TOBN(0x43c41ac1, 0x94d7d9b1), TOBN(0x5bafdd82, 0xc82e7f17),
+     TOBN(0xdf0614c1, 0x5fda0fca), TOBN(0x74b043a7, 0xa8ae37ad),
+     TOBN(0x3ba6afa1, 0x9e71734c), TOBN(0x15d5437e, 0x9c450f2e),
+     TOBN(0x4a5883fe, 0x67e242b1), TOBN(0x5143bdc2, 0x2c1953c2),
+     TOBN(0x542b8b53, 0xfc5e8920), TOBN(0x363bf9a8, 0x9a9cee08),
+     TOBN(0x02375f10, 0xc3486e08), TOBN(0x2037543b, 0x8c5e70d2),
+     TOBN(0x7109bccc, 0x625640b4), TOBN(0xcbc1051e, 0x8bc62c3b),
+     TOBN(0xf8455fed, 0x803f26ea), TOBN(0x6badceab, 0xeb372424),
+     TOBN(0xa2a9ce7c, 0x6b53f5f9), TOBN(0x64246595, 0x1b176d99),
+     TOBN(0xb1298d36, 0xb95c081b), TOBN(0x53505bb8, 0x1d9a9ee6),
+     TOBN(0x3f6f9e61, 0xf2ba70b0), TOBN(0xd07e16c9, 0x8afad453),
+     TOBN(0x9f1694bb, 0xe7eb4a6a), TOBN(0xdfebced9, 0x3cb0bc8e),
+     TOBN(0x92d3dcdc, 0x53868c8b), TOBN(0x174311a2, 0x386107a6),
+     TOBN(0x4109e07c, 0x689b4e64), TOBN(0x30e4587f, 0x2df3dcb6),
+     TOBN(0x841aea31, 0x0811b3b2), TOBN(0x6144d41d, 0x0cce43ea),
+     TOBN(0x464c4581, 0x2a9a7803), TOBN(0xd03d371f, 0x3e158930),
+     TOBN(0xc676d7f2, 0xb1f3390b), TOBN(0x9f7a1b8c, 0xa5b61272),
+     TOBN(0x4ebebfc9, 0xc2e127a9), TOBN(0x4602500c, 0x5dd997bf),
+     TOBN(0x7f09771c, 0x4711230f), TOBN(0x058eb37c, 0x020f09c1),
+     TOBN(0xab693d4b, 0xfee5e38b), TOBN(0x9289eb1f, 0x4653cbc0),
+     TOBN(0xbecf46ab, 0xd51b9cf5), TOBN(0xd2aa9c02, 0x9f0121af),
+     TOBN(0x36aaf7d2, 0xe90dc274), TOBN(0x909e4ea0, 0x48b95a3c),
+     TOBN(0xe6b70496, 0x6f32dbdb), TOBN(0x672188a0, 0x8b030b3e),
+     TOBN(0xeeffe5b3, 0xcfb617e2), TOBN(0x87e947de, 0x7c82709e),
+     TOBN(0xa44d2b39, 0x1770f5a7), TOBN(0xe4d4d791, 0x0e44eb82),
+     TOBN(0x42e69d1e, 0x3f69712a), TOBN(0xbf11c4d6, 0xac6a820e),
+     TOBN(0xb5e7f3e5, 0x42c4224c), TOBN(0xd6b4e81c, 0x449d941c),
+     TOBN(0x5d72bd16, 0x5450e878), TOBN(0x6a61e28a, 0xee25ac54),
+     TOBN(0x33272094, 0xe6f1cd95), TOBN(0x7512f30d, 0x0d18673f),
+     TOBN(0x32f7a4ca, 0x5afc1464), TOBN(0x2f095656, 0x6bbb977b),
+     TOBN(0x586f47ca, 0xa8226200), TOBN(0x02c868ad, 0x1ac07369),
+     TOBN(0x4ef2b845, 0xc613acbe), TOBN(0x43d7563e, 0x0386054c),
+     TOBN(0x54da9dc7, 0xab952578), TOBN(0xb5423df2, 0x26e84d0b),
+     TOBN(0xa8b64eeb, 0x9b872042), TOBN(0xac205782, 0x5990f6df),
+     TOBN(0x4ff696eb, 0x21f4c77a), TOBN(0x1a79c3e4, 0xaab273af),
+     TOBN(0x29bc922e, 0x9436b3f1), TOBN(0xff807ef8, 0xd6d9a27a),
+     TOBN(0x82acea3d, 0x778f22a0), TOBN(0xfb10b2e8, 0x5b5e7469),
+     TOBN(0xc0b16980, 0x2818ee7d), TOBN(0x011afff4, 0xc91c1a2f),
+     TOBN(0x95a6d126, 0xad124418), TOBN(0x31c081a5, 0xe72e295f),
+     TOBN(0x36bb283a, 0xf2f4db75), TOBN(0xd115540f, 0x7acef462),
+     TOBN(0xc7f3a8f8, 0x33f6746c), TOBN(0x21e46f65, 0xfea990ca),
+     TOBN(0x915fd5c5, 0xcaddb0a9), TOBN(0xbd41f016, 0x78614555),
+     TOBN(0x346f4434, 0x426ffb58), TOBN(0x80559436, 0x14dbc204),
+     TOBN(0xf3dd20fe, 0x5a969b7f), TOBN(0x9d59e956, 0xe899a39a),
+     TOBN(0xf1b0971c, 0x8ad4cf4b), TOBN(0x03448860, 0x2ffb8fb8),
+     TOBN(0xf071ac3c, 0x65340ba4), TOBN(0x408d0596, 0xb27fd758),
+     TOBN(0xe7c78ea4, 0x98c364b0), TOBN(0xa4aac4a5, 0x051e8ab5),
+     TOBN(0xb9e1d560, 0x485d9002), TOBN(0x9acd518a, 0x88844455),
+     TOBN(0xe4ca688f, 0xd06f56c0), TOBN(0xa48af70d, 0xdf027972),
+     TOBN(0x691f0f04, 0x5e9a609d), TOBN(0xa9dd82cd, 0xee61270e),
+     TOBN(0x8903ca63, 0xa0ef18d3), TOBN(0x9fb7ee35, 0x3d6ca3bd),
+     TOBN(0xa7b4a09c, 0xabf47d03), TOBN(0x4cdada01, 0x1c67de8e),
+     TOBN(0x52003749, 0x9355a244), TOBN(0xe77fd2b6, 0x4f2151a9),
+     TOBN(0x695d6cf6, 0x66b4efcb), TOBN(0xc5a0cacf, 0xda2cfe25),
+     TOBN(0x104efe5c, 0xef811865), TOBN(0xf52813e8, 0x9ea5cc3d),
+     TOBN(0x855683dc, 0x40b58dbc), TOBN(0x0338ecde, 0x175fcb11),
+     TOBN(0xf9a05637, 0x74921592), TOBN(0xb4f1261d, 0xb9bb9d31),
+     TOBN(0x551429b7, 0x4e9c5459), TOBN(0xbe182e6f, 0x6ea71f53),
+     TOBN(0xd3a3b07c, 0xdfc50573), TOBN(0x9ba1afda, 0x62be8d44),
+     TOBN(0x9bcfd2cb, 0x52ab65d3), TOBN(0xdf11d547, 0xa9571802),
+     TOBN(0x099403ee, 0x02a2404a), TOBN(0x497406f4, 0x21088a71),
+     TOBN(0x99479409, 0x5004ae71), TOBN(0xbdb42078, 0xa812c362),
+     TOBN(0x2b72a30f, 0xd8828442), TOBN(0x283add27, 0xfcb5ed1c),
+     TOBN(0xf7c0e200, 0x66a40015), TOBN(0x3e3be641, 0x08b295ef),
+     TOBN(0xac127dc1, 0xe038a675), TOBN(0x729deff3, 0x8c5c6320),
+     TOBN(0xb7df8fd4, 0xa90d2c53), TOBN(0x9b74b0ec, 0x681e7cd3),
+     TOBN(0x5cb5a623, 0xdab407e5), TOBN(0xcdbd3615, 0x76b340c6),
+     TOBN(0xa184415a, 0x7d28392c), TOBN(0xc184c1d8, 0xe96f7830),
+     TOBN(0xc3204f19, 0x81d3a80f), TOBN(0xfde0c841, 0xc8e02432),
+     TOBN(0x78203b3e, 0x8149e0c1), TOBN(0x5904bdbb, 0x08053a73),
+     TOBN(0x30fc1dd1, 0x101b6805), TOBN(0x43c223bc, 0x49aa6d49),
+     TOBN(0x9ed67141, 0x7a174087), TOBN(0x311469a0, 0xd5997008),
+     TOBN(0xb189b684, 0x5e43fc61), TOBN(0xf3282375, 0xe0d3ab57),
+     TOBN(0x4fa34b67, 0xb1181da8), TOBN(0x621ed0b2, 0x99ee52b8),
+     TOBN(0x9b178de1, 0xad990676), TOBN(0xd51de67b, 0x56d54065),
+     TOBN(0x2a2c27c4, 0x7538c201), TOBN(0x33856ec8, 0x38a40f5c),
+     TOBN(0x2522fc15, 0xbe6cdcde), TOBN(0x1e603f33, 0x9f0c6f89),
+     TOBN(0x7994edc3, 0x103e30a6), TOBN(0x033a00db, 0x220c853e),
+     TOBN(0xd3cfa409, 0xf7bb7fd7), TOBN(0x70f8781e, 0x462d18f6),
+     TOBN(0xbbd82980, 0x687fe295), TOBN(0x6eef4c32, 0x595669f3),
+     TOBN(0x86a9303b, 0x2f7e85c3), TOBN(0x5fce4621, 0x71988f9b),
+     TOBN(0x5b935bf6, 0xc138acb5), TOBN(0x30ea7d67, 0x25661212),
+     TOBN(0xef1eb5f4, 0xe51ab9a2), TOBN(0x0587c98a, 0xae067c78),
+     TOBN(0xb3ce1b3c, 0x77ca9ca6), TOBN(0x2a553d4d, 0x54b5f057),
+     TOBN(0xc7898236, 0x4da29ec2), TOBN(0xdbdd5d13, 0xb9c57316),
+     TOBN(0xc57d6e6b, 0x2cd80d47), TOBN(0x80b460cf, 0xfe9e7391),
+     TOBN(0x98648cab, 0xf963c31e), TOBN(0x67f9f633, 0xcc4d32fd),
+     TOBN(0x0af42a9d, 0xfdf7c687), TOBN(0x55f292a3, 0x0b015ea7),
+     TOBN(0x89e468b2, 0xcd21ab3d), TOBN(0xe504f022, 0xc393d392),
+     TOBN(0xab21e1d4, 0xa5013af9), TOBN(0xe3283f78, 0xc2c28acb),
+     TOBN(0xf38b35f6, 0x226bf99f), TOBN(0xe8354274, 0x0e291e69),
+     TOBN(0x61673a15, 0xb20c162d), TOBN(0xc101dc75, 0xb04fbdbe),
+     TOBN(0x8323b4c2, 0x255bd617), TOBN(0x6c969693, 0x6c2a9154),
+     TOBN(0xc6e65860, 0x62679387), TOBN(0x8e01db0c, 0xb8c88e23),
+     TOBN(0x33c42873, 0x893a5559), TOBN(0x7630f04b, 0x47a3e149),
+     TOBN(0xb5d80805, 0xddcf35f8), TOBN(0x582ca080, 0x77dfe732),
+     TOBN(0x2c7156e1, 0x0b1894a0), TOBN(0x92034001, 0xd81c68c0),
+     TOBN(0xed225d00, 0xc8b115b5), TOBN(0x237f9c22, 0x83b907f2),
+     TOBN(0x0ea2f32f, 0x4470e2c0), TOBN(0xb725f7c1, 0x58be4e95),
+     TOBN(0x0f1dcafa, 0xb1ae5463), TOBN(0x59ed5187, 0x1ba2fc04),
+     TOBN(0xf6e0f316, 0xd0115d4d), TOBN(0x5180b12f, 0xd3691599),
+     TOBN(0x157e32c9, 0x527f0a41), TOBN(0x7b0b081d, 0xa8e0ecc0),
+     TOBN(0x6dbaaa8a, 0xbf4f0dd0), TOBN(0x99b289c7, 0x4d252696),
+     TOBN(0x79b7755e, 0xdbf864fe), TOBN(0x6974e2b1, 0x76cad3ab),
+     TOBN(0x35dbbee2, 0x06ddd657), TOBN(0xe7cbdd11, 0x2ff3a96d),
+     TOBN(0x88381968, 0x076be758), TOBN(0x2d737e72, 0x08c91f5d),
+     TOBN(0x5f83ab62, 0x86ec3776), TOBN(0x98aa649d, 0x945fa7a1),
+     TOBN(0xf477ec37, 0x72ef0933), TOBN(0x66f52b1e, 0x098c17b1),
+     TOBN(0x9eec58fb, 0xd803738b), TOBN(0x91aaade7, 0xe4e86aa4),
+     TOBN(0x6b1ae617, 0xa5b51492), TOBN(0x63272121, 0xbbc45974),
+     TOBN(0x7e0e28f0, 0x862c5129), TOBN(0x0a8f79a9, 0x3321a4a0),
+     TOBN(0xe26d1664, 0x5041c88f), TOBN(0x0571b805, 0x53233e3a),
+     TOBN(0xd1b0ccde, 0xc9520711), TOBN(0x55a9e4ed, 0x3c8b84bf),
+     TOBN(0x9426bd39, 0xa1fef314), TOBN(0x4f5f638e, 0x6eb93f2b),
+     TOBN(0xba2a1ed3, 0x2bf9341b), TOBN(0xd63c1321, 0x4d42d5a9),
+     TOBN(0xd2964a89, 0x316dc7c5), TOBN(0xd1759606, 0xca511851),
+     TOBN(0xd8a9201f, 0xf9e6ed35), TOBN(0xb7b5ee45, 0x6736925a),
+     TOBN(0x0a83fbbc, 0x99581af7), TOBN(0x3076bc40, 0x64eeb051),
+     TOBN(0x5511c98c, 0x02dec312), TOBN(0x270de898, 0x238dcb78),
+     TOBN(0x2cf4cf9c, 0x539c08c9), TOBN(0xa70cb65e, 0x38d3b06e),
+     TOBN(0xb12ec10e, 0xcfe57bbd), TOBN(0x82c7b656, 0x35a0c2b5),
+     TOBN(0xddc7d5cd, 0x161c67bd), TOBN(0xe32e8985, 0xae3a32cc),
+     TOBN(0x7aba9444, 0xd11a5529), TOBN(0xe964ed02, 0x2427fa1a),
+     TOBN(0x1528392d, 0x24a1770a), TOBN(0xa152ce2c, 0x12c72fcd),
+     TOBN(0x714553a4, 0x8ec07649), TOBN(0x18b4c290, 0x459dd453),
+     TOBN(0xea32b714, 0x7b64b110), TOBN(0xb871bfa5, 0x2e6f07a2),
+     TOBN(0xb67112e5, 0x9e2e3c9b), TOBN(0xfbf250e5, 0x44aa90f6),
+     TOBN(0xf77aedb8, 0xbd539006), TOBN(0x3b0cdf9a, 0xd172a66f),
+     TOBN(0xedf69fea, 0xf8c51187), TOBN(0x05bb67ec, 0x741e4da7),
+     TOBN(0x47df0f32, 0x08114345), TOBN(0x56facb07, 0xbb9792b1),
+     TOBN(0xf3e007e9, 0x8f6229e4), TOBN(0x62d103f4, 0x526fba0f),
+     TOBN(0x4f33bef7, 0xb0339d79), TOBN(0x9841357b, 0xb59bfec1),
+     TOBN(0xfa8dbb59, 0xc34e6705), TOBN(0xc3c7180b, 0x7fdaa84c),
+     TOBN(0xf95872fc, 0xa4108537), TOBN(0x8750cc3b, 0x932a3e5a),
+     TOBN(0xb61cc69d, 0xb7275d7d), TOBN(0xffa0168b, 0x2e59b2e9),
+     TOBN(0xca032abc, 0x6ecbb493), TOBN(0x1d86dbd3, 0x2c9082d8),
+     TOBN(0xae1e0b67, 0xe28ef5ba), TOBN(0x2c9a4699, 0xcb18e169),
+     TOBN(0x0ecd0e33, 0x1e6bbd20), TOBN(0x571b360e, 0xaf5e81d2),
+     TOBN(0xcd9fea58, 0x101c1d45), TOBN(0x6651788e, 0x18880452),
+     TOBN(0xa9972635, 0x1f8dd446), TOBN(0x44bed022, 0xe37281d0),
+     TOBN(0x094b2b2d, 0x33da525d), TOBN(0xf193678e, 0x13144fd8),
+     TOBN(0xb8ab5ba4, 0xf4c1061d), TOBN(0x4343b5fa, 0xdccbe0f4),
+     TOBN(0xa8702371, 0x63812713), TOBN(0x47bf6d2d, 0xf7611d93),
+     TOBN(0x46729b8c, 0xbd21e1d7), TOBN(0x7484d4e0, 0xd629e77d),
+     TOBN(0x830e6eea, 0x60dbac1f), TOBN(0x23d8c484, 0xda06a2f7),
+     TOBN(0x896714b0, 0x50ca535b), TOBN(0xdc8d3644, 0xebd97a9b),
+     TOBN(0x106ef9fa, 0xb12177b4), TOBN(0xf79bf464, 0x534d5d9c),
+     TOBN(0x2537a349, 0xa6ab360b), TOBN(0xc7c54253, 0xa00c744f),
+     TOBN(0xb3c7a047, 0xe5911a76), TOBN(0x61ffa5c8, 0x647f1ee7),
+     TOBN(0x15aed36f, 0x8f56ab42), TOBN(0x6a0d41b0, 0xa3ff9ac9),
+     TOBN(0x68f469f5, 0xcc30d357), TOBN(0xbe9adf81, 0x6b72be96),
+     TOBN(0x1cd926fe, 0x903ad461), TOBN(0x7e89e38f, 0xcaca441b),
+     TOBN(0xf0f82de5, 0xfacf69d4), TOBN(0x363b7e76, 0x4775344c),
+     TOBN(0x6894f312, 0xb2e36d04), TOBN(0x3c6cb4fe, 0x11d1c9a5),
+     TOBN(0x85d9c339, 0x4008e1f2), TOBN(0x5e9a85ea, 0x249f326c),
+     TOBN(0xdc35c60a, 0x678c5e06), TOBN(0xc08b944f, 0x9f86fba9),
+     TOBN(0xde40c02c, 0x89f71f0f), TOBN(0xad8f3e31, 0xff3da3c0),
+     TOBN(0x3ea5096b, 0x42125ded), TOBN(0x13879cbf, 0xa7379183),
+     TOBN(0x6f4714a5, 0x6b306a0b), TOBN(0x359c2ea6, 0x67646c5e),
+     TOBN(0xfacf8943, 0x07726368), TOBN(0x07a58935, 0x65ff431e),
+     TOBN(0x24d661d1, 0x68754ab0), TOBN(0x801fce1d, 0x6f429a76),
+     TOBN(0xc068a85f, 0xa58ce769), TOBN(0xedc35c54, 0x5d5eca2b),
+     TOBN(0xea31276f, 0xa3f660d1), TOBN(0xa0184ebe, 0xb8fc7167),
+     TOBN(0x0f20f21a, 0x1d8db0ae), TOBN(0xd96d095f, 0x56c35e12),
+     TOBN(0xedf402b5, 0xf8c2a25b), TOBN(0x1bb772b9, 0x059204b6),
+     TOBN(0x50cbeae2, 0x19b4e34c), TOBN(0x93109d80, 0x3fa0845a),
+     TOBN(0x54f7ccf7, 0x8ef59fb5), TOBN(0x3b438fe2, 0x88070963),
+     TOBN(0x9e28c659, 0x31f3ba9b), TOBN(0x9cc31b46, 0xead9da92),
+     TOBN(0x3c2f0ba9, 0xb733aa5f), TOBN(0xdece47cb, 0xf05af235),
+     TOBN(0xf8e3f715, 0xa2ac82a5), TOBN(0xc97ba641, 0x2203f18a),
+     TOBN(0xc3af5504, 0x09c11060), TOBN(0x56ea2c05, 0x46af512d),
+     TOBN(0xfac28daf, 0xf3f28146), TOBN(0x87fab43a, 0x959ef494),}
+    ,
+    {TOBN(0x09891641, 0xd4c5105f), TOBN(0x1ae80f8e, 0x6d7fbd65),
+     TOBN(0x9d67225f, 0xbee6bdb0), TOBN(0x3b433b59, 0x7fc4d860),
+     TOBN(0x44e66db6, 0x93e85638), TOBN(0xf7b59252, 0xe3e9862f),
+     TOBN(0xdb785157, 0x665c32ec), TOBN(0x702fefd7, 0xae362f50),
+     TOBN(0x3754475d, 0x0fefb0c3), TOBN(0xd48fb56b, 0x46d7c35d),
+     TOBN(0xa070b633, 0x363798a4), TOBN(0xae89f3d2, 0x8fdb98e6),
+     TOBN(0x970b89c8, 0x6363d14c), TOBN(0x89817521, 0x67abd27d),
+     TOBN(0x9bf7d474, 0x44d5a021), TOBN(0xb3083baf, 0xcac72aee),
+     TOBN(0x389741de, 0xbe949a44), TOBN(0x638e9388, 0x546a4fa5),
+     TOBN(0x3fe6419c, 0xa0047bdc), TOBN(0x7047f648, 0xaaea57ca),
+     TOBN(0x54e48a90, 0x41fbab17), TOBN(0xda8e0b28, 0x576bdba2),
+     TOBN(0xe807eebc, 0xc72afddc), TOBN(0x07d3336d, 0xf42577bf),
+     TOBN(0x62a8c244, 0xbfe20925), TOBN(0x91c19ac3, 0x8fdce867),
+     TOBN(0x5a96a5d5, 0xdd387063), TOBN(0x61d587d4, 0x21d324f6),
+     TOBN(0xe87673a2, 0xa37173ea), TOBN(0x23848008, 0x53778b65),
+     TOBN(0x10f8441e, 0x05bab43e), TOBN(0xfa11fe12, 0x4621efbe),
+     TOBN(0x047b772e, 0x81685d7b), TOBN(0x23f27d81, 0xbf34a976),
+     TOBN(0xc27608e2, 0x915f48ef), TOBN(0x3b0b43fa, 0xa521d5c3),
+     TOBN(0x7613fb26, 0x63ca7284), TOBN(0x7f5729b4, 0x1d4db837),
+     TOBN(0x87b14898, 0x583b526b), TOBN(0x00b732a6, 0xbbadd3d1),
+     TOBN(0x8e02f426, 0x2048e396), TOBN(0x436b50b6, 0x383d9de4),
+     TOBN(0xf78d3481, 0x471e85ad), TOBN(0x8b01ea6a, 0xd005c8d6),
+     TOBN(0xd3c7afee, 0x97015c07), TOBN(0x46cdf1a9, 0x4e3ba2ae),
+     TOBN(0x7a42e501, 0x83d3a1d2), TOBN(0xd54b5268, 0xb541dff4),
+     TOBN(0x3f24cf30, 0x4e23e9bc), TOBN(0x4387f816, 0x126e3624),
+     TOBN(0x26a46a03, 0x3b0b6d61), TOBN(0xaf1bc845, 0x8b2d777c),
+     TOBN(0x25c401ba, 0x527de79c), TOBN(0x0e1346d4, 0x4261bbb6),
+     TOBN(0x4b96c44b, 0x287b4bc7), TOBN(0x658493c7, 0x5254562f),
+     TOBN(0x23f949fe, 0xb8a24a20), TOBN(0x17ebfed1, 0xf52ca53f),
+     TOBN(0x9b691bbe, 0xbcfb4853), TOBN(0x5617ff6b, 0x6278a05d),
+     TOBN(0x241b34c5, 0xe3c99ebd), TOBN(0xfc64242e, 0x1784156a),
+     TOBN(0x4206482f, 0x695d67df), TOBN(0xb967ce0e, 0xee27c011),
+     TOBN(0x65db3751, 0x21c80b5d), TOBN(0x2e7a563c, 0xa31ecca0),
+     TOBN(0xe56ffc4e, 0x5238a07e), TOBN(0x3d6c2966, 0x32ced854),
+     TOBN(0xe99d7d1a, 0xaf70b885), TOBN(0xafc3bad9, 0x2d686459),
+     TOBN(0x9c78bf46, 0x0cc8ba5b), TOBN(0x5a439519, 0x18955aa3),
+     TOBN(0xf8b517a8, 0x5fe4e314), TOBN(0xe60234d0, 0xfcb8906f),
+     TOBN(0xffe542ac, 0xf2061b23), TOBN(0x287e191f, 0x6b4cb59c),
+     TOBN(0x21857ddc, 0x09d877d8), TOBN(0x1c23478c, 0x14678941),
+     TOBN(0xbbf0c056, 0xb6e05ea4), TOBN(0x82da4b53, 0xb01594fe),
+     TOBN(0xf7526791, 0xfadb8608), TOBN(0x049e832d, 0x7b74cdf6),
+     TOBN(0xa43581cc, 0xc2b90a34), TOBN(0x73639eb8, 0x9360b10c),
+     TOBN(0x4fba331f, 0xe1e4a71b), TOBN(0x6ffd6b93, 0x8072f919),
+     TOBN(0x6e53271c, 0x65679032), TOBN(0x67206444, 0xf14272ce),
+     TOBN(0xc0f734a3, 0xb2335834), TOBN(0x9526205a, 0x90ef6860),
+     TOBN(0xcb8be717, 0x04e2bb0d), TOBN(0x2418871e, 0x02f383fa),
+     TOBN(0xd7177681, 0x4082c157), TOBN(0xcc914ad0, 0x29c20073),
+     TOBN(0xf186c1eb, 0xe587e728), TOBN(0x6fdb3c22, 0x61bcd5fd),
+     TOBN(0x30d014a6, 0xf2f9f8e9), TOBN(0x963ece23, 0x4fec49d2),
+     TOBN(0x862025c5, 0x9605a8d9), TOBN(0x39874445, 0x19f8929a),
+     TOBN(0x01b6ff65, 0x12bf476a), TOBN(0x598a64d8, 0x09cf7d91),
+     TOBN(0xd7ec7749, 0x93be56ca), TOBN(0x10899785, 0xcbb33615),
+     TOBN(0xb8a092fd, 0x02eee3ad), TOBN(0xa86b3d35, 0x30145270),
+     TOBN(0x323d98c6, 0x8512b675), TOBN(0x4b8bc785, 0x62ebb40f),
+     TOBN(0x7d301f54, 0x413f9cde), TOBN(0xa5e4fb4f, 0x2bab5664),
+     TOBN(0x1d2b252d, 0x1cbfec23), TOBN(0xfcd576bb, 0xe177120d),
+     TOBN(0x04427d3e, 0x83731a34), TOBN(0x2bb9028e, 0xed836e8e),
+     TOBN(0xb36acff8, 0xb612ca7c), TOBN(0xb88fe5ef, 0xd3d9c73a),
+     TOBN(0xbe2a6bc6, 0xedea4eb3), TOBN(0x43b93133, 0x488eec77),
+     TOBN(0xf41ff566, 0xb17106e1), TOBN(0x469e9172, 0x654efa32),
+     TOBN(0xb4480f04, 0x41c23fa3), TOBN(0xb4712eb0, 0xc1989a2e),
+     TOBN(0x3ccbba0f, 0x93a29ca7), TOBN(0x6e205c14, 0xd619428c),
+     TOBN(0x90db7957, 0xb3641686), TOBN(0x0432691d, 0x45ac8b4e),
+     TOBN(0x07a759ac, 0xf64e0350), TOBN(0x0514d89c, 0x9c972517),
+     TOBN(0x1701147f, 0xa8e67fc3), TOBN(0x9e2e0b8b, 0xab2085be),
+     TOBN(0xd5651824, 0xac284e57), TOBN(0x890d4325, 0x74893664),
+     TOBN(0x8a7c5e6e, 0xc55e68a3), TOBN(0xbf12e90b, 0x4339c85a),
+     TOBN(0x31846b85, 0xf922b655), TOBN(0x9a54ce4d, 0x0bf4d700),
+     TOBN(0xd7f4e83a, 0xf1a14295), TOBN(0x916f955c, 0xb285d4f9),
+     TOBN(0xe57bb0e0, 0x99ffdaba), TOBN(0x28a43034, 0xeab0d152),
+     TOBN(0x0a36ffa2, 0xb8a9cef8), TOBN(0x5517407e, 0xb9ec051a),
+     TOBN(0x9c796096, 0xea68e672), TOBN(0x853db5fb, 0xfb3c77fb),
+     TOBN(0x21474ba9, 0xe864a51a), TOBN(0x6c267699, 0x6e8a1b8b),
+     TOBN(0x7c823626, 0x94120a28), TOBN(0xe61e9a48, 0x8383a5db),
+     TOBN(0x7dd75003, 0x9f84216d), TOBN(0xab020d07, 0xad43cd85),
+     TOBN(0x9437ae48, 0xda12c659), TOBN(0x6449c2eb, 0xe65452ad),
+     TOBN(0xcc7c4c1c, 0x2cf9d7c1), TOBN(0x1320886a, 0xee95e5ab),
+     TOBN(0xbb7b9056, 0xbeae170c), TOBN(0xc8a5b250, 0xdbc0d662),
+     TOBN(0x4ed81432, 0xc11d2303), TOBN(0x7da66912, 0x1f03769f),
+     TOBN(0x3ac7a5fd, 0x84539828), TOBN(0x14dada94, 0x3bccdd02),
+     TOBN(0x8b84c321, 0x7ef6b0d1), TOBN(0x52a9477a, 0x7c933f22),
+     TOBN(0x5ef6728a, 0xfd440b82), TOBN(0x5c3bd859, 0x6ce4bd5e),
+     TOBN(0x918b80f5, 0xf22c2d3e), TOBN(0x368d5040, 0xb7bb6cc5),
+     TOBN(0xb66142a1, 0x2695a11c), TOBN(0x60ac583a, 0xeb19ea70),
+     TOBN(0x317cbb98, 0x0eab2437), TOBN(0x8cc08c55, 0x5e2654c8),
+     TOBN(0xfe2d6520, 0xe6d8307f), TOBN(0xe9f147f3, 0x57428993),
+     TOBN(0x5f9c7d14, 0xd2fd6cf1), TOBN(0xa3ecd064, 0x2d4fcbb0),
+     TOBN(0xad83fef0, 0x8e7341f7), TOBN(0x643f23a0, 0x3a63115c),
+     TOBN(0xd38a78ab, 0xe65ab743), TOBN(0xbf7c75b1, 0x35edc89c),
+     TOBN(0x3dd8752e, 0x530df568), TOBN(0xf85c4a76, 0xe308c682),
+     TOBN(0x4c9955b2, 0xe68acf37), TOBN(0xa544df3d, 0xab32af85),
+     TOBN(0x4b8ec3f5, 0xa25cf493), TOBN(0x4d8f2764, 0x1a622feb),
+     TOBN(0x7bb4f7aa, 0xf0dcbc49), TOBN(0x7de551f9, 0x70bbb45b),
+     TOBN(0xcfd0f3e4, 0x9f2ca2e5), TOBN(0xece58709, 0x1f5c76ef),
+     TOBN(0x32920edd, 0x167d79ae), TOBN(0x039df8a2, 0xfa7d7ec1),
+     TOBN(0xf46206c0, 0xbb30af91), TOBN(0x1ff5e2f5, 0x22676b59),
+     TOBN(0x11f4a039, 0x6ea51d66), TOBN(0x506c1445, 0x807d7a26),
+     TOBN(0x60da5705, 0x755a9b24), TOBN(0x8fc8cc32, 0x1f1a319e),
+     TOBN(0x83642d4d, 0x9433d67d), TOBN(0x7fa5cb8f, 0x6a7dd296),
+     TOBN(0x576591db, 0x9b7bde07), TOBN(0x13173d25, 0x419716fb),
+     TOBN(0xea30599d, 0xd5b340ff), TOBN(0xfc6b5297, 0xb0fe76c5),
+     TOBN(0x1c6968c8, 0xab8f5adc), TOBN(0xf723c7f5, 0x901c928d),
+     TOBN(0x4203c321, 0x9773d402), TOBN(0xdf7c6aa3, 0x1b51dd47),
+     TOBN(0x3d49e37a, 0x552be23c), TOBN(0x57febee8, 0x0b5a6e87),
+     TOBN(0xc5ecbee4, 0x7bd8e739), TOBN(0x79d44994, 0xae63bf75),
+     TOBN(0x168bd00f, 0x38fb8923), TOBN(0x75d48ee4, 0xd0533130),
+     TOBN(0x554f77aa, 0xdb5cdf33), TOBN(0x3396e896, 0x3c696769),
+     TOBN(0x2fdddbf2, 0xd3fd674e), TOBN(0xbbb8f6ee, 0x99d0e3e5),
+     TOBN(0x51b90651, 0xcbae2f70), TOBN(0xefc4bc05, 0x93aaa8eb),
+     TOBN(0x8ecd8689, 0xdd1df499), TOBN(0x1aee99a8, 0x22f367a5),
+     TOBN(0x95d485b9, 0xae8274c5), TOBN(0x6c14d445, 0x7d30b39c),
+     TOBN(0xbafea90b, 0xbcc1ef81), TOBN(0x7c5f317a, 0xa459a2ed),
+     TOBN(0x01211075, 0x4ef44227), TOBN(0xa17bed6e, 0xdc20f496),
+     TOBN(0x0cdfe424, 0x819853cd), TOBN(0x13793298, 0xf71e2ce7),
+     TOBN(0x3c1f3078, 0xdbbe307b), TOBN(0x6dd1c20e, 0x76ee9936),
+     TOBN(0x23ee4b57, 0x423caa20), TOBN(0x4ac3793b, 0x8efb840e),
+     TOBN(0x934438eb, 0xed1f8ca0), TOBN(0x3e546658, 0x4ebb25a2),
+     TOBN(0xc415af0e, 0xc069896f), TOBN(0xc13eddb0, 0x9a5aa43d),
+     TOBN(0x7a04204f, 0xd49eb8f6), TOBN(0xd0d5bdfc, 0xd74f1670),
+     TOBN(0x3697e286, 0x56fc0558), TOBN(0x10207371, 0x01cebade),
+     TOBN(0x5f87e690, 0x0647a82b), TOBN(0x908e0ed4, 0x8f40054f),
+     TOBN(0xa9f633d4, 0x79853803), TOBN(0x8ed13c9a, 0x4a28b252),
+     TOBN(0x3e2ef676, 0x1f460f64), TOBN(0x53930b9b, 0x36d06336),
+     TOBN(0x347073ac, 0x8fc4979b), TOBN(0x84380e0e, 0x5ecd5597),
+     TOBN(0xe3b22c6b, 0xc4fe3c39), TOBN(0xba4a8153, 0x6c7bebdf),
+     TOBN(0xf23ab6b7, 0x25693459), TOBN(0x53bc3770, 0x14922b11),
+     TOBN(0x4645c8ab, 0x5afc60db), TOBN(0xaa022355, 0x20b9f2a3),
+     TOBN(0x52a2954c, 0xce0fc507), TOBN(0x8c2731bb, 0x7ce1c2e7),
+     TOBN(0xf39608ab, 0x18a0339d), TOBN(0xac7a658d, 0x3735436c),
+     TOBN(0xb22c2b07, 0xcd992b4f), TOBN(0x4e83daec, 0xf40dcfd4),
+     TOBN(0x8a34c7be, 0x2f39ea3e), TOBN(0xef0c005f, 0xb0a56d2e),
+     TOBN(0x62731f6a, 0x6edd8038), TOBN(0x5721d740, 0x4e3cb075),
+     TOBN(0x1ea41511, 0xfbeeee1b), TOBN(0xd1ef5e73, 0xef1d0c05),
+     TOBN(0x42feefd1, 0x73c07d35), TOBN(0xe530a00a, 0x8a329493),
+     TOBN(0x5d55b7fe, 0xf15ebfb0), TOBN(0x549de03c, 0xd322491a),
+     TOBN(0xf7b5f602, 0x745b3237), TOBN(0x3632a3a2, 0x1ab6e2b6),
+     TOBN(0x0d3bba89, 0x0ef59f78), TOBN(0x0dfc6443, 0xc9e52b9a),
+     TOBN(0x1dc79699, 0x72631447), TOBN(0xef033917, 0xb3be20b1),
+     TOBN(0x0c92735d, 0xb1383948), TOBN(0xc1fc29a2, 0xc0dd7d7d),
+     TOBN(0x6485b697, 0x403ed068), TOBN(0x13bfaab3, 0xaac93bdc),
+     TOBN(0x410dc6a9, 0x0deeaf52), TOBN(0xb003fb02, 0x4c641c15),
+     TOBN(0x1384978c, 0x5bc504c4), TOBN(0x37640487, 0x864a6a77),
+     TOBN(0x05991bc6, 0x222a77da), TOBN(0x62260a57, 0x5e47eb11),
+     TOBN(0xc7af6613, 0xf21b432c), TOBN(0x22f3acc9, 0xab4953e9),
+     TOBN(0x52934922, 0x8e41d155), TOBN(0x4d024568, 0x3ac059ef),
+     TOBN(0xb0201755, 0x4d884411), TOBN(0xce8055cf, 0xa59a178f),
+     TOBN(0xcd77d1af, 0xf6204549), TOBN(0xa0a00a3e, 0xc7066759),
+     TOBN(0x471071ef, 0x0272c229), TOBN(0x009bcf6b, 0xd3c4b6b0),
+     TOBN(0x2a2638a8, 0x22305177), TOBN(0xd51d59df, 0x41645bbf),
+     TOBN(0xa81142fd, 0xc0a7a3c0), TOBN(0xa17eca6d, 0x4c7063ee),
+     TOBN(0x0bb887ed, 0x60d9dcec), TOBN(0xd6d28e51, 0x20ad2455),
+     TOBN(0xebed6308, 0xa67102ba), TOBN(0x042c3114, 0x8bffa408),
+     TOBN(0xfd099ac5, 0x8aa68e30), TOBN(0x7a6a3d7c, 0x1483513e),
+     TOBN(0xffcc6b75, 0xba2d8f0c), TOBN(0x54dacf96, 0x1e78b954),
+     TOBN(0xf645696f, 0xa4a9af89), TOBN(0x3a411940, 0x06ac98ec),
+     TOBN(0x41b8b3f6, 0x22a67a20), TOBN(0x2d0b1e0f, 0x99dec626),
+     TOBN(0x27c89192, 0x40be34e8), TOBN(0xc7162b37, 0x91907f35),
+     TOBN(0x90188ec1, 0xa956702b), TOBN(0xca132f7d, 0xdf93769c),
+     TOBN(0x3ece44f9, 0x0e2025b4), TOBN(0x67aaec69, 0x0c62f14c),
+     TOBN(0xad741418, 0x22e3cc11), TOBN(0xcf9b75c3, 0x7ff9a50e),
+     TOBN(0x02fa2b16, 0x4d348272), TOBN(0xbd99d61a, 0x9959d56d),
+     TOBN(0xbc4f19db, 0x18762916), TOBN(0xcc7cce50, 0x49c1ac80),
+     TOBN(0x4d59ebaa, 0xd846bd83), TOBN(0x8775a9dc, 0xa9202849),
+     TOBN(0x07ec4ae1, 0x6e1f4ca9), TOBN(0x27eb5875, 0xba893f11),
+     TOBN(0x00284d51, 0x662cc565), TOBN(0x82353a6b, 0x0db4138d),
+     TOBN(0xd9c7aaaa, 0xaa32a594), TOBN(0xf5528b5e, 0xa5669c47),
+     TOBN(0xf3220231, 0x2f23c5ff), TOBN(0xe3e8147a, 0x6affa3a1),
+     TOBN(0xfb423d5c, 0x202ddda0), TOBN(0x3d6414ac, 0x6b871bd4),
+     TOBN(0x586f82e1, 0xa51a168a), TOBN(0xb712c671, 0x48ae5448),
+     TOBN(0x9a2e4bd1, 0x76233eb8), TOBN(0x0188223a, 0x78811ca9),
+     TOBN(0x553c5e21, 0xf7c18de1), TOBN(0x7682e451, 0xb27bb286),
+     TOBN(0x3ed036b3, 0x0e51e929), TOBN(0xf487211b, 0xec9cb34f),
+     TOBN(0x0d094277, 0x0c24efc8), TOBN(0x0349fd04, 0xbef737a4),
+     TOBN(0x6d1c9dd2, 0x514cdd28), TOBN(0x29c135ff, 0x30da9521),
+     TOBN(0xea6e4508, 0xf78b0b6f), TOBN(0x176f5dd2, 0x678c143c),
+     TOBN(0x08148418, 0x4be21e65), TOBN(0x27f7525c, 0xe7df38c4),
+     TOBN(0x1fb70e09, 0x748ab1a4), TOBN(0x9cba50a0, 0x5efe4433),
+     TOBN(0x7846c7a6, 0x15f75af2), TOBN(0x2a7c2c57, 0x5ee73ea8),
+     TOBN(0x42e566a4, 0x3f0a449a), TOBN(0x45474c3b, 0xad90fc3d),
+     TOBN(0x7447be3d, 0x8b61d057), TOBN(0x3e9d1cf1, 0x3a4ec092),
+     TOBN(0x1603e453, 0xf380a6e6), TOBN(0x0b86e431, 0x9b1437c2),
+     TOBN(0x7a4173f2, 0xef29610a), TOBN(0x8fa729a7, 0xf03d57f7),
+     TOBN(0x3e186f6e, 0x6c9c217e), TOBN(0xbe1d3079, 0x91919524),
+     TOBN(0x92a62a70, 0x153d4fb1), TOBN(0x32ed3e34, 0xd68c2f71),
+     TOBN(0xd785027f, 0x9eb1a8b7), TOBN(0xbc37eb77, 0xc5b22fe8),
+     TOBN(0x466b34f0, 0xb9d6a191), TOBN(0x008a89af, 0x9a05f816),
+     TOBN(0x19b028fb, 0x7d42c10a), TOBN(0x7fe8c92f, 0x49b3f6b8),
+     TOBN(0x58907cc0, 0xa5a0ade3), TOBN(0xb3154f51, 0x559d1a7c),
+     TOBN(0x5066efb6, 0xd9790ed6), TOBN(0xa77a0cbc, 0xa6aa793b),
+     TOBN(0x1a915f3c, 0x223e042e), TOBN(0x1c5def04, 0x69c5874b),
+     TOBN(0x0e830078, 0x73b6c1da), TOBN(0x55cf85d2, 0xfcd8557a),
+     TOBN(0x0f7c7c76, 0x0460f3b1), TOBN(0x87052acb, 0x46e58063),
+     TOBN(0x09212b80, 0x907eae66), TOBN(0x3cb068e0, 0x4d721c89),
+     TOBN(0xa87941ae, 0xdd45ac1c), TOBN(0xde8d5c0d, 0x0daa0dbb),
+     TOBN(0xda421fdc, 0xe3502e6e), TOBN(0xc8944201, 0x4d89a084),
+     TOBN(0x7307ba5e, 0xf0c24bfb), TOBN(0xda212beb, 0x20bde0ef),
+     TOBN(0xea2da24b, 0xf82ce682), TOBN(0x058d3816, 0x07f71fe4),
+     TOBN(0x35a02462, 0x5ffad8de), TOBN(0xcd7b05dc, 0xaadcefab),
+     TOBN(0xd442f8ed, 0x1d9f54ec), TOBN(0x8be3d618, 0xb2d3b5ca),
+     TOBN(0xe2220ed0, 0xe06b2ce2), TOBN(0x82699a5f, 0x1b0da4c0),
+     TOBN(0x3ff106f5, 0x71c0c3a7), TOBN(0x8f580f5a, 0x0d34180c),
+     TOBN(0x4ebb120e, 0x22d7d375), TOBN(0x5e5782cc, 0xe9513675),
+     TOBN(0x2275580c, 0x99c82a70), TOBN(0xe8359fbf, 0x15ea8c4c),
+     TOBN(0x53b48db8, 0x7b415e70), TOBN(0xaacf2240, 0x100c6014),
+     TOBN(0x9faaccf5, 0xe4652f1d), TOBN(0xbd6fdd2a, 0xd56157b2),
+     TOBN(0xa4f4fb1f, 0x6261ec50), TOBN(0x244e55ad, 0x476bcd52),
+     TOBN(0x881c9305, 0x047d320b), TOBN(0x1ca983d5, 0x6181263f),
+     TOBN(0x354e9a44, 0x278fb8ee), TOBN(0xad2dbc0f, 0x396e4964),
+     TOBN(0x723f3aa2, 0x9268b3de), TOBN(0x0d1ca29a, 0xe6e0609a),
+     TOBN(0x794866aa, 0x6cf44252), TOBN(0x0b59f3e3, 0x01af87ed),
+     TOBN(0xe234e5ff, 0x7f4a6c51), TOBN(0xa8768fd2, 0x61dc2f7e),
+     TOBN(0xdafc7332, 0x0a94d81f), TOBN(0xd7f84282, 0x06938ce1),
+     TOBN(0xae0b3c0e, 0x0546063e), TOBN(0x7fbadcb2, 0x5d61abc6),
+     TOBN(0xd5d7a2c9, 0x369ac400), TOBN(0xa5978d09, 0xae67d10c),
+     TOBN(0x290f211e, 0x4f85eaac), TOBN(0xe61e2ad1, 0xfacac681),
+     TOBN(0xae125225, 0x388384cd), TOBN(0xa7fb68e9, 0xccfde30f),
+     TOBN(0x7a59b936, 0x3daed4c2), TOBN(0x80a9aa40, 0x2606f789),
+     TOBN(0xb40c1ea5, 0xf6a6d90a), TOBN(0x948364d3, 0x514d5885),
+     TOBN(0x062ebc60, 0x70985182), TOBN(0xa6db5b0e, 0x33310895),
+     TOBN(0x64a12175, 0xe329c2f5), TOBN(0xc5f25bd2, 0x90ea237e),
+     TOBN(0x7915c524, 0x2d0a4c23), TOBN(0xeb5d26e4, 0x6bb3cc52),
+     TOBN(0x369a9116, 0xc09e2c92), TOBN(0x0c527f92, 0xcf182cf8),
+     TOBN(0x9e591938, 0x2aede0ac), TOBN(0xb2922208, 0x6cc34939),
+     TOBN(0x3c9d8962, 0x99a34361), TOBN(0x3c81836d, 0xc1905fe6),
+     TOBN(0x4bfeb57f, 0xa001ec5a), TOBN(0xe993f5bb, 0xa0dc5dba),
+     TOBN(0x47884109, 0x724a1380), TOBN(0x8a0369ab, 0x32fe9a04),
+     TOBN(0xea068d60, 0x8c927db8), TOBN(0xbf5f37cf, 0x94655741),
+     TOBN(0x47d402a2, 0x04b6c7ea), TOBN(0x4551c295, 0x6af259cb),
+     TOBN(0x698b71e7, 0xed77ee8b), TOBN(0xbddf7bd0, 0xf309d5c7),
+     TOBN(0x6201c22c, 0x34e780ca), TOBN(0xab04f7d8, 0x4c295ef4),
+     TOBN(0x1c947294, 0x4313a8ce), TOBN(0xe532e4ac, 0x92ca4cfe),
+     TOBN(0x89738f80, 0xd0a7a97a), TOBN(0xec088c88, 0xa580fd5b),
+     TOBN(0x612b1ecc, 0x42ce9e51), TOBN(0x8f9840fd, 0xb25fdd2a),
+     TOBN(0x3cda78c0, 0x01e7f839), TOBN(0x546b3d3a, 0xece05480),
+     TOBN(0x271719a9, 0x80d30916), TOBN(0x45497107, 0x584c20c4),
+     TOBN(0xaf8f9478, 0x5bc78608), TOBN(0x28c7d484, 0x277e2a4c),
+     TOBN(0xfce01767, 0x88a2ffe4), TOBN(0xdc506a35, 0x28e169a5),
+     TOBN(0x0ea10861, 0x7af9c93a), TOBN(0x1ed24361, 0x03fa0e08),
+     TOBN(0x96eaaa92, 0xa3d694e7), TOBN(0xc0f43b4d, 0xef50bc74),
+     TOBN(0xce6aa58c, 0x64114db4), TOBN(0x8218e8ea, 0x7c000fd4),
+     TOBN(0xac815dfb, 0x185f8844), TOBN(0xcd7e90cb, 0x1557abfb),
+     TOBN(0x23d16655, 0xafbfecdf), TOBN(0x80f3271f, 0x085cac4a),
+     TOBN(0x7fc39aa7, 0xd0e62f47), TOBN(0x88d519d1, 0x460a48e5),
+     TOBN(0x59559ac4, 0xd28f101e), TOBN(0x7981d9e9, 0xca9ae816),
+     TOBN(0x5c38652c, 0x9ac38203), TOBN(0x86eaf87f, 0x57657fe5),
+     TOBN(0x568fc472, 0xe21f5416), TOBN(0x2afff39c, 0xe7e597b5),
+     TOBN(0x3adbbb07, 0x256d4eab), TOBN(0x22598692, 0x8285ab89),
+     TOBN(0x35f8112a, 0x041caefe), TOBN(0x95df02e3, 0xa5064c8b),
+     TOBN(0x4d63356e, 0xc7004bf3), TOBN(0x230a08f4, 0xdb83c7de),
+     TOBN(0xca27b270, 0x8709a7b7), TOBN(0x0d1c4cc4, 0xcb9abd2d),
+     TOBN(0x8a0bc66e, 0x7550fee8), TOBN(0x369cd4c7, 0x9cf7247e),
+     TOBN(0x75562e84, 0x92b5b7e7), TOBN(0x8fed0da0, 0x5802af7b),
+     TOBN(0x6a7091c2, 0xe48fb889), TOBN(0x26882c13, 0x7b8a9d06),
+     TOBN(0xa2498663, 0x1b82a0e2), TOBN(0x844ed736, 0x3518152d),
+     TOBN(0x282f476f, 0xd86e27c7), TOBN(0xa04edaca, 0x04afefdc),
+     TOBN(0x8b256ebc, 0x6119e34d), TOBN(0x56a413e9, 0x0787d78b),}
+    ,
+    {TOBN(0x82ee061d, 0x5a74be50), TOBN(0xe41781c4, 0xdea16ff5),
+     TOBN(0xe0b0c81e, 0x99bfc8a2), TOBN(0x624f4d69, 0x0b547e2d),
+     TOBN(0x3a83545d, 0xbdcc9ae4), TOBN(0x2573dbb6, 0x409b1e8e),
+     TOBN(0x482960c4, 0xa6c93539), TOBN(0xf01059ad, 0x5ae18798),
+     TOBN(0x715c9f97, 0x3112795f), TOBN(0xe8244437, 0x984e6ee1),
+     TOBN(0x55cb4858, 0xecb66bcd), TOBN(0x7c136735, 0xabaffbee),
+     TOBN(0x54661595, 0x5dbec38e), TOBN(0x51c0782c, 0x388ad153),
+     TOBN(0x9ba4c53a, 0xc6e0952f), TOBN(0x27e6782a, 0x1b21dfa8),
+     TOBN(0x682f903d, 0x4ed2dbc2), TOBN(0x0eba59c8, 0x7c3b2d83),
+     TOBN(0x8e9dc84d, 0x9c7e9335), TOBN(0x5f9b21b0, 0x0eb226d7),
+     TOBN(0xe33bd394, 0xaf267bae), TOBN(0xaa86cc25, 0xbe2e15ae),
+     TOBN(0x4f0bf67d, 0x6a8ec500), TOBN(0x5846aa44, 0xf9630658),
+     TOBN(0xfeb09740, 0xe2c2bf15), TOBN(0x627a2205, 0xa9e99704),
+     TOBN(0xec8d73d0, 0xc2fbc565), TOBN(0x223eed8f, 0xc20c8de8),
+     TOBN(0x1ee32583, 0xa8363b49), TOBN(0x1a0b6cb9, 0xc9c2b0a6),
+     TOBN(0x49f7c3d2, 0x90dbc85c), TOBN(0xa8dfbb97, 0x1ef4c1ac),
+     TOBN(0xafb34d4c, 0x65c7c2ab), TOBN(0x1d4610e7, 0xe2c5ea84),
+     TOBN(0x893f6d1b, 0x973c4ab5), TOBN(0xa3cdd7e9, 0x945ba5c4),
+     TOBN(0x60514983, 0x064417ee), TOBN(0x1459b23c, 0xad6bdf2b),
+     TOBN(0x23b2c341, 0x5cf726c3), TOBN(0x3a829635, 0x32d6354a),
+     TOBN(0x294f901f, 0xab192c18), TOBN(0xec5fcbfe, 0x7030164f),
+     TOBN(0xe2e2fcb7, 0xe2246ba6), TOBN(0x1e7c88b3, 0x221a1a0c),
+     TOBN(0x72c7dd93, 0xc92d88c5), TOBN(0x41c2148e, 0x1106fb59),
+     TOBN(0x547dd4f5, 0xa0f60f14), TOBN(0xed9b52b2, 0x63960f31),
+     TOBN(0x6c8349eb, 0xb0a5b358), TOBN(0xb154c5c2, 0x9e7e2ed6),
+     TOBN(0xcad5eccf, 0xeda462db), TOBN(0xf2d6dbe4, 0x2de66b69),
+     TOBN(0x426aedf3, 0x8665e5b2), TOBN(0x488a8513, 0x7b7f5723),
+     TOBN(0x15cc43b3, 0x8bcbb386), TOBN(0x27ad0af3, 0xd791d879),
+     TOBN(0xc16c236e, 0x846e364f), TOBN(0x7f33527c, 0xdea50ca0),
+     TOBN(0xc4810775, 0x0926b86d), TOBN(0x6c2a3609, 0x0598e70c),
+     TOBN(0xa6755e52, 0xf024e924), TOBN(0xe0fa07a4, 0x9db4afca),
+     TOBN(0x15c3ce7d, 0x66831790), TOBN(0x5b4ef350, 0xa6cbb0d6),
+     TOBN(0x2c4aafc4, 0xb6205969), TOBN(0x42563f02, 0xf6c7854f),
+     TOBN(0x016aced5, 0x1d983b48), TOBN(0xfeb356d8, 0x99949755),
+     TOBN(0x8c2a2c81, 0xd1a39bd7), TOBN(0x8f44340f, 0xe6934ae9),
+     TOBN(0x148cf91c, 0x447904da), TOBN(0x7340185f, 0x0f51a926),
+     TOBN(0x2f8f00fb, 0x7409ab46), TOBN(0x057e78e6, 0x80e289b2),
+     TOBN(0x03e5022c, 0xa888e5d1), TOBN(0x3c87111a, 0x9dede4e2),
+     TOBN(0x5b9b0e1c, 0x7809460b), TOBN(0xe751c852, 0x71c9abc7),
+     TOBN(0x8b944e28, 0xc7cc1dc9), TOBN(0x4f201ffa, 0x1d3cfa08),
+     TOBN(0x02fc905c, 0x3e6721ce), TOBN(0xd52d70da, 0xd0b3674c),
+     TOBN(0x5dc2e5ca, 0x18810da4), TOBN(0xa984b273, 0x5c69dd99),
+     TOBN(0x63b92527, 0x84de5ca4), TOBN(0x2f1c9872, 0xc852dec4),
+     TOBN(0x18b03593, 0xc2e3de09), TOBN(0x19d70b01, 0x9813dc2f),
+     TOBN(0x42806b2d, 0xa6dc1d29), TOBN(0xd3030009, 0xf871e144),
+     TOBN(0xa1feb333, 0xaaf49276), TOBN(0xb5583b9e, 0xc70bc04b),
+     TOBN(0x1db0be78, 0x95695f20), TOBN(0xfc841811, 0x89d012b5),
+     TOBN(0x6409f272, 0x05f61643), TOBN(0x40d34174, 0xd5883128),
+     TOBN(0xd79196f5, 0x67419833), TOBN(0x6059e252, 0x863b7b08),
+     TOBN(0x84da1817, 0x1c56700c), TOBN(0x5758ee56, 0xb28d3ec4),
+     TOBN(0x7da2771d, 0x013b0ea6), TOBN(0xfddf524b, 0x54c5e9b9),
+     TOBN(0x7df4faf8, 0x24305d80), TOBN(0x58f5c1bf, 0x3a97763f),
+     TOBN(0xa5af37f1, 0x7c696042), TOBN(0xd4cba22c, 0x4a2538de),
+     TOBN(0x211cb995, 0x9ea42600), TOBN(0xcd105f41, 0x7b069889),
+     TOBN(0xb1e1cf19, 0xddb81e74), TOBN(0x472f2d89, 0x5157b8ca),
+     TOBN(0x086fb008, 0xee9db885), TOBN(0x365cd570, 0x0f26d131),
+     TOBN(0x284b02bb, 0xa2be7053), TOBN(0xdcbbf7c6, 0x7ab9a6d6),
+     TOBN(0x4425559c, 0x20f7a530), TOBN(0x961f2dfa, 0x188767c8),
+     TOBN(0xe2fd9435, 0x70dc80c4), TOBN(0x104d6b63, 0xf0784120),
+     TOBN(0x7f592bc1, 0x53567122), TOBN(0xf6bc1246, 0xf688ad77),
+     TOBN(0x05214c05, 0x0f15dde9), TOBN(0xa47a76a8, 0x0d5f2b82),
+     TOBN(0xbb254d30, 0x62e82b62), TOBN(0x11a05fe0, 0x3ec955ee),
+     TOBN(0x7eaff46e, 0x9d529b36), TOBN(0x55ab1301, 0x8f9e3df6),
+     TOBN(0xc463e371, 0x99317698), TOBN(0xfd251438, 0xccda47ad),
+     TOBN(0xca9c3547, 0x23d695ea), TOBN(0x48ce626e, 0x16e589b5),
+     TOBN(0x6b5b64c7, 0xb187d086), TOBN(0xd02e1794, 0xb2207948),
+     TOBN(0x8b58e98f, 0x7198111d), TOBN(0x90ca6305, 0xdcf9c3cc),
+     TOBN(0x5691fe72, 0xf34089b0), TOBN(0x60941af1, 0xfc7c80ff),
+     TOBN(0xa09bc0a2, 0x22eb51e5), TOBN(0xc0bb7244, 0xaa9cf09a),
+     TOBN(0x36a8077f, 0x80159f06), TOBN(0x8b5c989e, 0xdddc560e),
+     TOBN(0x19d2f316, 0x512e1f43), TOBN(0x02eac554, 0xad08ff62),
+     TOBN(0x012ab84c, 0x07d20b4e), TOBN(0x37d1e115, 0xd6d4e4e1),
+     TOBN(0xb6443e1a, 0xab7b19a8), TOBN(0xf08d067e, 0xdef8cd45),
+     TOBN(0x63adf3e9, 0x685e03da), TOBN(0xcf15a10e, 0x4792b916),
+     TOBN(0xf44bcce5, 0xb738a425), TOBN(0xebe131d5, 0x9636b2fd),
+     TOBN(0x94068841, 0x7850d605), TOBN(0x09684eaa, 0xb40d749d),
+     TOBN(0x8c3c669c, 0x72ba075b), TOBN(0x89f78b55, 0xba469015),
+     TOBN(0x5706aade, 0x3e9f8ba8), TOBN(0x6d8bd565, 0xb32d7ed7),
+     TOBN(0x25f4e63b, 0x805f08d6), TOBN(0x7f48200d, 0xc3bcc1b5),
+     TOBN(0x4e801968, 0xb025d847), TOBN(0x74afac04, 0x87cbe0a8),
+     TOBN(0x43ed2c2b, 0x7e63d690), TOBN(0xefb6bbf0, 0x0223cdb8),
+     TOBN(0x4fec3cae, 0x2884d3fe), TOBN(0x065ecce6, 0xd75e25a4),
+     TOBN(0x6c2294ce, 0x69f79071), TOBN(0x0d9a8e5f, 0x044b8666),
+     TOBN(0x5009f238, 0x17b69d8f), TOBN(0x3c29f8fe, 0xc5dfdaf7),
+     TOBN(0x9067528f, 0xebae68c4), TOBN(0x5b385632, 0x30c5ba21),
+     TOBN(0x540df119, 0x1fdd1aec), TOBN(0xcf37825b, 0xcfba4c78),
+     TOBN(0x77eff980, 0xbeb11454), TOBN(0x40a1a991, 0x60c1b066),
+     TOBN(0xe8018980, 0xf889a1c7), TOBN(0xb9c52ae9, 0x76c24be0),
+     TOBN(0x05fbbcce, 0x45650ef4), TOBN(0xae000f10, 0x8aa29ac7),
+     TOBN(0x884b7172, 0x4f04c470), TOBN(0x7cd4fde2, 0x19bb5c25),
+     TOBN(0x6477b22a, 0xe8840869), TOBN(0xa8868859, 0x5fbd0686),
+     TOBN(0xf23cc02e, 0x1116dfba), TOBN(0x76cd563f, 0xd87d7776),
+     TOBN(0xe2a37598, 0xa9d82abf), TOBN(0x5f188ccb, 0xe6c170f5),
+     TOBN(0x81682200, 0x5066b087), TOBN(0xda22c212, 0xc7155ada),
+     TOBN(0x151e5d3a, 0xfbddb479), TOBN(0x4b606b84, 0x6d715b99),
+     TOBN(0x4a73b54b, 0xf997cb2e), TOBN(0x9a1bfe43, 0x3ecd8b66),
+     TOBN(0x1c312809, 0x2a67d48a), TOBN(0xcd6a671e, 0x031fa9e2),
+     TOBN(0xbec3312a, 0x0e43a34a), TOBN(0x1d935639, 0x55ef47d3),
+     TOBN(0x5ea02489, 0x8fea73ea), TOBN(0x8247b364, 0xa035afb2),
+     TOBN(0xb58300a6, 0x5265b54c), TOBN(0x3286662f, 0x722c7148),
+     TOBN(0xb77fd76b, 0xb4ec4c20), TOBN(0xf0a12fa7, 0x0f3fe3fd),
+     TOBN(0xf845bbf5, 0x41d8c7e8), TOBN(0xe4d969ca, 0x5ec10aa8),
+     TOBN(0x4c0053b7, 0x43e232a3), TOBN(0xdc7a3fac, 0x37f8a45a),
+     TOBN(0x3c4261c5, 0x20d81c8f), TOBN(0xfd4b3453, 0xb00eab00),
+     TOBN(0x76d48f86, 0xd36e3062), TOBN(0x626c5277, 0xa143ff02),
+     TOBN(0x538174de, 0xaf76f42e), TOBN(0x2267aa86, 0x6407ceac),
+     TOBN(0xfad76351, 0x72e572d5), TOBN(0xab861af7, 0xba7330eb),
+     TOBN(0xa0a1c8c7, 0x418d8657), TOBN(0x988821cb, 0x20289a52),
+     TOBN(0x79732522, 0xcccc18ad), TOBN(0xaadf3f8d, 0xf1a6e027),
+     TOBN(0xf7382c93, 0x17c2354d), TOBN(0x5ce1680c, 0xd818b689),
+     TOBN(0x359ebbfc, 0xd9ecbee9), TOBN(0x4330689c, 0x1cae62ac),
+     TOBN(0xb55ce5b4, 0xc51ac38a), TOBN(0x7921dfea, 0xfe238ee8),
+     TOBN(0x3972bef8, 0x271d1ca5), TOBN(0x3e423bc7, 0xe8aabd18),
+     TOBN(0x57b09f3f, 0x44a3e5e3), TOBN(0x5da886ae, 0x7b444d66),
+     TOBN(0x68206634, 0xa9964375), TOBN(0x356a2fa3, 0x699cd0ff),
+     TOBN(0xaf0faa24, 0xdba515e9), TOBN(0x536e1f5c, 0xb321d79a),
+     TOBN(0xd3b9913a, 0x5c04e4ea), TOBN(0xd549dcfe, 0xd6f11513),
+     TOBN(0xee227bf5, 0x79fd1d94), TOBN(0x9f35afee, 0xb43f2c67),
+     TOBN(0xd2638d24, 0xf1314f53), TOBN(0x62baf948, 0xcabcd822),
+     TOBN(0x5542de29, 0x4ef48db0), TOBN(0xb3eb6a04, 0xfc5f6bb2),
+     TOBN(0x23c110ae, 0x1208e16a), TOBN(0x1a4d15b5, 0xf8363e24),
+     TOBN(0x30716844, 0x164be00b), TOBN(0xa8e24824, 0xf6f4690d),
+     TOBN(0x548773a2, 0x90b170cf), TOBN(0xa1bef331, 0x42f191f4),
+     TOBN(0x70f418d0, 0x9247aa97), TOBN(0xea06028e, 0x48be9147),
+     TOBN(0xe13122f3, 0xdbfb894e), TOBN(0xbe9b79f6, 0xce274b18),
+     TOBN(0x85a49de5, 0xca58aadf), TOBN(0x24957758, 0x11487351),
+     TOBN(0x111def61, 0xbb939099), TOBN(0x1d6a974a, 0x26d13694),
+     TOBN(0x4474b4ce, 0xd3fc253b), TOBN(0x3a1485e6, 0x4c5db15e),
+     TOBN(0xe79667b4, 0x147c15b4), TOBN(0xe34f553b, 0x7bc61301),
+     TOBN(0x032b80f8, 0x17094381), TOBN(0x55d8bafd, 0x723eaa21),
+     TOBN(0x5a987995, 0xf1c0e74e), TOBN(0x5a9b292e, 0xebba289c),
+     TOBN(0x413cd4b2, 0xeb4c8251), TOBN(0x98b5d243, 0xd162db0a),
+     TOBN(0xbb47bf66, 0x68342520), TOBN(0x08d68949, 0xbaa862d1),
+     TOBN(0x11f349c7, 0xe906abcd), TOBN(0x454ce985, 0xed7bf00e),
+     TOBN(0xacab5c9e, 0xb55b803b), TOBN(0xb03468ea, 0x31e3c16d),
+     TOBN(0x5c24213d, 0xd273bf12), TOBN(0x211538eb, 0x71587887),
+     TOBN(0x198e4a2f, 0x731dea2d), TOBN(0xd5856cf2, 0x74ed7b2a),
+     TOBN(0x86a632eb, 0x13a664fe), TOBN(0x932cd909, 0xbda41291),
+     TOBN(0x850e95d4, 0xc0c4ddc0), TOBN(0xc0f422f8, 0x347fc2c9),
+     TOBN(0xe68cbec4, 0x86076bcb), TOBN(0xf9e7c0c0, 0xcd6cd286),
+     TOBN(0x65994ddb, 0x0f5f27ca), TOBN(0xe85461fb, 0xa80d59ff),
+     TOBN(0xff05481a, 0x66601023), TOBN(0xc665427a, 0xfc9ebbfb),
+     TOBN(0xb0571a69, 0x7587fd52), TOBN(0x935289f8, 0x8d49efce),
+     TOBN(0x61becc60, 0xea420688), TOBN(0xb22639d9, 0x13a786af),
+     TOBN(0x1a8e6220, 0x361ecf90), TOBN(0x001f23e0, 0x25506463),
+     TOBN(0xe4ae9b5d, 0x0a5c2b79), TOBN(0xebc9cdad, 0xd8149db5),
+     TOBN(0xb33164a1, 0x934aa728), TOBN(0x750eb00e, 0xae9b60f3),
+     TOBN(0x5a91615b, 0x9b9cfbfd), TOBN(0x97015cbf, 0xef45f7f6),
+     TOBN(0xb462c4a5, 0xbf5151df), TOBN(0x21adcc41, 0xb07118f2),
+     TOBN(0xd60c545b, 0x043fa42c), TOBN(0xfc21aa54, 0xe96be1ab),
+     TOBN(0xe84bc32f, 0x4e51ea80), TOBN(0x3dae45f0, 0x259b5d8d),
+     TOBN(0xbb73c7eb, 0xc38f1b5e), TOBN(0xe405a74a, 0xe8ae617d),
+     TOBN(0xbb1ae9c6, 0x9f1c56bd), TOBN(0x8c176b98, 0x49f196a4),
+     TOBN(0xc448f311, 0x6875092b), TOBN(0xb5afe3de, 0x9f976033),
+     TOBN(0xa8dafd49, 0x145813e5), TOBN(0x687fc4d9, 0xe2b34226),
+     TOBN(0xf2dfc92d, 0x4c7ff57f), TOBN(0x004e3fc1, 0x401f1b46),
+     TOBN(0x5afddab6, 0x1430c9ab), TOBN(0x0bdd41d3, 0x2238e997),
+     TOBN(0xf0947430, 0x418042ae), TOBN(0x71f9adda, 0xcdddc4cb),
+     TOBN(0x7090c016, 0xc52dd907), TOBN(0xd9bdf44d, 0x29e2047f),
+     TOBN(0xe6f1fe80, 0x1b1011a6), TOBN(0xb63accbc, 0xd9acdc78),
+     TOBN(0xcfc7e235, 0x1272a95b), TOBN(0x0c667717, 0xa6276ac8),
+     TOBN(0x3c0d3709, 0xe2d7eef7), TOBN(0x5add2b06, 0x9a685b3e),
+     TOBN(0x363ad32d, 0x14ea5d65), TOBN(0xf8e01f06, 0x8d7dd506),
+     TOBN(0xc9ea2213, 0x75b4aac6), TOBN(0xed2a2bf9, 0x0d353466),
+     TOBN(0x439d79b5, 0xe9d3a7c3), TOBN(0x8e0ee5a6, 0x81b7f34b),
+     TOBN(0xcf3dacf5, 0x1dc4ba75), TOBN(0x1d3d1773, 0xeb3310c7),
+     TOBN(0xa8e67112, 0x7747ae83), TOBN(0x31f43160, 0x197d6b40),
+     TOBN(0x0521ccee, 0xcd961400), TOBN(0x67246f11, 0xf6535768),
+     TOBN(0x702fcc5a, 0xef0c3133), TOBN(0x247cc45d, 0x7e16693b),
+     TOBN(0xfd484e49, 0xc729b749), TOBN(0x522cef7d, 0xb218320f),
+     TOBN(0xe56ef405, 0x59ab93b3), TOBN(0x225fba11, 0x9f181071),
+     TOBN(0x33bd6595, 0x15330ed0), TOBN(0xc4be69d5, 0x1ddb32f7),
+     TOBN(0x264c7668, 0x0448087c), TOBN(0xac30903f, 0x71432dae),
+     TOBN(0x3851b266, 0x00f9bf47), TOBN(0x400ed311, 0x6cdd6d03),
+     TOBN(0x045e79fe, 0xf8fd2424), TOBN(0xfdfd974a, 0xfa6da98b),
+     TOBN(0x45c9f641, 0x0c1e673a), TOBN(0x76f2e733, 0x5b2c5168),
+     TOBN(0x1adaebb5, 0x2a601753), TOBN(0xb286514c, 0xc57c2d49),
+     TOBN(0xd8769670, 0x1e0bfd24), TOBN(0x950c547e, 0x04478922),
+     TOBN(0xd1d41969, 0xe5d32bfe), TOBN(0x30bc1472, 0x750d6c3e),
+     TOBN(0x8f3679fe, 0xe0e27f3a), TOBN(0x8f64a7dc, 0xa4a6ee0c),
+     TOBN(0x2fe59937, 0x633dfb1f), TOBN(0xea82c395, 0x977f2547),
+     TOBN(0xcbdfdf1a, 0x661ea646), TOBN(0xc7ccc591, 0xb9085451),
+     TOBN(0x82177962, 0x81761e13), TOBN(0xda57596f, 0x9196885c),
+     TOBN(0xbc17e849, 0x28ffbd70), TOBN(0x1e6e0a41, 0x2671d36f),
+     TOBN(0x61ae872c, 0x4152fcf5), TOBN(0x441c87b0, 0x9e77e754),
+     TOBN(0xd0799dd5, 0xa34dff09), TOBN(0x766b4e44, 0x88a6b171),
+     TOBN(0xdc06a512, 0x11f1c792), TOBN(0xea02ae93, 0x4be35c3e),
+     TOBN(0xe5ca4d6d, 0xe90c469e), TOBN(0x4df4368e, 0x56e4ff5c),
+     TOBN(0x7817acab, 0x4baef62e), TOBN(0x9f5a2202, 0xa85b91e8),
+     TOBN(0x9666ebe6, 0x6ce57610), TOBN(0x32ad31f3, 0xf73bfe03),
+     TOBN(0x628330a4, 0x25bcf4d6), TOBN(0xea950593, 0x515056e6),
+     TOBN(0x59811c89, 0xe1332156), TOBN(0xc89cf1fe, 0x8c11b2d7),
+     TOBN(0x75b63913, 0x04e60cc0), TOBN(0xce811e8d, 0x4625d375),
+     TOBN(0x030e43fc, 0x2d26e562), TOBN(0xfbb30b4b, 0x608d36a0),
+     TOBN(0x634ff82c, 0x48528118), TOBN(0x7c6fe085, 0xcd285911),
+     TOBN(0x7f2830c0, 0x99358f28), TOBN(0x2e60a95e, 0x665e6c09),
+     TOBN(0x08407d3d, 0x9b785dbf), TOBN(0x530889ab, 0xa759bce7),
+     TOBN(0xf228e0e6, 0x52f61239), TOBN(0x2b6d1461, 0x6879be3c),
+     TOBN(0xe6902c04, 0x51a7bbf7), TOBN(0x30ad99f0, 0x76f24a64),
+     TOBN(0x66d9317a, 0x98bc6da0), TOBN(0xf4f877f3, 0xcb596ac0),
+     TOBN(0xb05ff62d, 0x4c44f119), TOBN(0x4555f536, 0xe9b77416),
+     TOBN(0xc7c0d059, 0x8caed63b), TOBN(0x0cd2b7ce, 0xc358b2a9),
+     TOBN(0x3f33287b, 0x46945fa3), TOBN(0xf8785b20, 0xd67c8791),
+     TOBN(0xc54a7a61, 0x9637bd08), TOBN(0x54d4598c, 0x18be79d7),
+     TOBN(0x889e5acb, 0xc46d7ce1), TOBN(0x9a515bb7, 0x8b085877),
+     TOBN(0xfac1a03d, 0x0b7a5050), TOBN(0x7d3e738a, 0xf2926035),
+     TOBN(0x861cc2ce, 0x2a6cb0eb), TOBN(0x6f2e2955, 0x8f7adc79),
+     TOBN(0x61c4d451, 0x33016376), TOBN(0xd9fd2c80, 0x5ad59090),
+     TOBN(0xe5a83738, 0xb2b836a1), TOBN(0x855b41a0, 0x7c0d6622),
+     TOBN(0x186fe317, 0x7cc19af1), TOBN(0x6465c1ff, 0xfdd99acb),
+     TOBN(0x46e5c23f, 0x6974b99e), TOBN(0x75a7cf8b, 0xa2717cbe),
+     TOBN(0x4d2ebc3f, 0x062be658), TOBN(0x094b4447, 0x5f209c98),
+     TOBN(0x4af285ed, 0xb940cb5a), TOBN(0x6706d792, 0x7cc82f10),
+     TOBN(0xc8c8776c, 0x030526fa), TOBN(0xfa8e6f76, 0xa0da9140),
+     TOBN(0x77ea9d34, 0x591ee4f0), TOBN(0x5f46e337, 0x40274166),
+     TOBN(0x1bdf98bb, 0xea671457), TOBN(0xd7c08b46, 0x862a1fe2),
+     TOBN(0x46cc303c, 0x1c08ad63), TOBN(0x99543440, 0x4c845e7b),
+     TOBN(0x1b8fbdb5, 0x48f36bf7), TOBN(0x5b82c392, 0x8c8273a7),
+     TOBN(0x08f712c4, 0x928435d5), TOBN(0x071cf0f1, 0x79330380),
+     TOBN(0xc74c2d24, 0xa8da054a), TOBN(0xcb0e7201, 0x43c46b5c),
+     TOBN(0x0ad7337a, 0xc0b7eff3), TOBN(0x8552225e, 0xc5e48b3c),
+     TOBN(0xe6f78b0c, 0x73f13a5f), TOBN(0x5e70062e, 0x82349cbe),
+     TOBN(0x6b8d5048, 0xe7073969), TOBN(0x392d2a29, 0xc33cb3d2),
+     TOBN(0xee4f727c, 0x4ecaa20f), TOBN(0xa068c99e, 0x2ccde707),
+     TOBN(0xfcd5651f, 0xb87a2913), TOBN(0xea3e3c15, 0x3cc252f0),
+     TOBN(0x777d92df, 0x3b6cd3e4), TOBN(0x7a414143, 0xc5a732e7),
+     TOBN(0xa895951a, 0xa71ff493), TOBN(0xfe980c92, 0xbbd37cf6),
+     TOBN(0x45bd5e64, 0xdecfeeff), TOBN(0x910dc2a9, 0xa44c43e9),
+     TOBN(0xcb403f26, 0xcca9f54d), TOBN(0x928bbdfb, 0x9303f6db),
+     TOBN(0x3c37951e, 0xa9eee67c), TOBN(0x3bd61a52, 0xf79961c3),
+     TOBN(0x09a238e6, 0x395c9a79), TOBN(0x6940ca2d, 0x61eb352d),
+     TOBN(0x7d1e5c5e, 0xc1875631), TOBN(0x1e19742c, 0x1e1b20d1),
+     TOBN(0x4633d908, 0x23fc2e6e), TOBN(0xa76e29a9, 0x08959149),
+     TOBN(0x61069d9c, 0x84ed7da5), TOBN(0x0baa11cf, 0x5dbcad51),
+     TOBN(0xd01eec64, 0x961849da), TOBN(0x93b75f1f, 0xaf3d8c28),
+     TOBN(0x57bc4f9f, 0x1ca2ee44), TOBN(0x5a26322d, 0x00e00558),
+     TOBN(0x1888d658, 0x61a023ef), TOBN(0x1d72aab4, 0xb9e5246e),
+     TOBN(0xa9a26348, 0xe5563ec0), TOBN(0xa0971963, 0xc3439a43),
+     TOBN(0x567dd54b, 0xadb9b5b7), TOBN(0x73fac1a1, 0xc45a524b),
+     TOBN(0x8fe97ef7, 0xfe38e608), TOBN(0x608748d2, 0x3f384f48),
+     TOBN(0xb0571794, 0xc486094f), TOBN(0x869254a3, 0x8bf3a8d6),
+     TOBN(0x148a8dd1, 0x310b0e25), TOBN(0x99ab9f3f, 0x9aa3f7d8),
+     TOBN(0x0927c68a, 0x6706c02e), TOBN(0x22b5e76c, 0x69790e6c),
+     TOBN(0x6c325260, 0x6c71376c), TOBN(0x53a57690, 0x09ef6657),
+     TOBN(0x8d63f852, 0xedffcf3a), TOBN(0xb4d2ed04, 0x3c0a6f55),
+     TOBN(0xdb3aa8de, 0x12519b9e), TOBN(0x5d38e9c4, 0x1e0a569a),
+     TOBN(0x871528bf, 0x303747e2), TOBN(0xa208e77c, 0xf5b5c18d),
+     TOBN(0x9d129c88, 0xca6bf923), TOBN(0xbcbf197f, 0xbf02839f),
+     TOBN(0x9b9bf030, 0x27323194), TOBN(0x3b055a8b, 0x339ca59d),
+     TOBN(0xb46b2312, 0x0f669520), TOBN(0x19789f1f, 0x497e5f24),
+     TOBN(0x9c499468, 0xaaf01801), TOBN(0x72ee1190, 0x8b69d59c),
+     TOBN(0x8bd39595, 0xacf4c079), TOBN(0x3ee11ece, 0x8e0cd048),
+     TOBN(0xebde86ec, 0x1ed66f18), TOBN(0x225d906b, 0xd61fce43),
+     TOBN(0x5cab07d6, 0xe8bed74d), TOBN(0x16e4617f, 0x27855ab7),
+     TOBN(0x6568aadd, 0xb2fbc3dd), TOBN(0xedb5484f, 0x8aeddf5b),
+     TOBN(0x878f20e8, 0x6dcf2fad), TOBN(0x3516497c, 0x615f5699),}
+    ,
+    {TOBN(0xef0a3fec, 0xfa181e69), TOBN(0x9ea02f81, 0x30d69a98),
+     TOBN(0xb2e9cf8e, 0x66eab95d), TOBN(0x520f2beb, 0x24720021),
+     TOBN(0x621c540a, 0x1df84361), TOBN(0x12037721, 0x71fa6d5d),
+     TOBN(0x6e3c7b51, 0x0ff5f6ff), TOBN(0x817a069b, 0xabb2bef3),
+     TOBN(0x83572fb6, 0xb294cda6), TOBN(0x6ce9bf75, 0xb9039f34),
+     TOBN(0x20e012f0, 0x095cbb21), TOBN(0xa0aecc1b, 0xd063f0da),
+     TOBN(0x57c21c3a, 0xf02909e5), TOBN(0xc7d59ecf, 0x48ce9cdc),
+     TOBN(0x2732b844, 0x8ae336f8), TOBN(0x056e3723, 0x3f4f85f4),
+     TOBN(0x8a10b531, 0x89e800ca), TOBN(0x50fe0c17, 0x145208fd),
+     TOBN(0x9e43c0d3, 0xb714ba37), TOBN(0x427d200e, 0x34189acc),
+     TOBN(0x05dee24f, 0xe616e2c0), TOBN(0x9c25f4c8, 0xee1854c1),
+     TOBN(0x4d3222a5, 0x8f342a73), TOBN(0x0807804f, 0xa027c952),
+     TOBN(0xc222653a, 0x4f0d56f3), TOBN(0x961e4047, 0xca28b805),
+     TOBN(0x2c03f8b0, 0x4a73434b), TOBN(0x4c966787, 0xab712a19),
+     TOBN(0xcc196c42, 0x864fee42), TOBN(0xc1be93da, 0x5b0ece5c),
+     TOBN(0xa87d9f22, 0xc131c159), TOBN(0x2bb6d593, 0xdce45655),
+     TOBN(0x22c49ec9, 0xb809b7ce), TOBN(0x8a41486b, 0xe2c72c2c),
+     TOBN(0x813b9420, 0xfea0bf36), TOBN(0xb3d36ee9, 0xa66dac69),
+     TOBN(0x6fddc08a, 0x328cc987), TOBN(0x0a3bcd2c, 0x3a326461),
+     TOBN(0x7103c49d, 0xd810dbba), TOBN(0xf9d81a28, 0x4b78a4c4),
+     TOBN(0x3de865ad, 0xe4d55941), TOBN(0xdedafa5e, 0x30384087),
+     TOBN(0x6f414abb, 0x4ef18b9b), TOBN(0x9ee9ea42, 0xfaee5268),
+     TOBN(0x260faa16, 0x37a55a4a), TOBN(0xeb19a514, 0x015f93b9),
+     TOBN(0x51d7ebd2, 0x9e9c3598), TOBN(0x523fc56d, 0x1932178e),
+     TOBN(0x501d070c, 0xb98fe684), TOBN(0xd60fbe9a, 0x124a1458),
+     TOBN(0xa45761c8, 0x92bc6b3f), TOBN(0xf5384858, 0xfe6f27cb),
+     TOBN(0x4b0271f7, 0xb59e763b), TOBN(0x3d4606a9, 0x5b5a8e5e),
+     TOBN(0x1eda5d9b, 0x05a48292), TOBN(0xda7731d0, 0xe6fec446),
+     TOBN(0xa3e33693, 0x90d45871), TOBN(0xe9764040, 0x06166d8d),
+     TOBN(0xb5c33682, 0x89a90403), TOBN(0x4bd17983, 0x72f1d637),
+     TOBN(0xa616679e, 0xd5d2c53a), TOBN(0x5ec4bcd8, 0xfdcf3b87),
+     TOBN(0xae6d7613, 0xb66a694e), TOBN(0x7460fc76, 0xe3fc27e5),
+     TOBN(0x70469b82, 0x95caabee), TOBN(0xde024ca5, 0x889501e3),
+     TOBN(0x6bdadc06, 0x076ed265), TOBN(0x0cb1236b, 0x5a0ef8b2),
+     TOBN(0x4065ddbf, 0x0972ebf9), TOBN(0xf1dd3875, 0x22aca432),
+     TOBN(0xa88b97cf, 0x744aff76), TOBN(0xd1359afd, 0xfe8e3d24),
+     TOBN(0x52a3ba2b, 0x91502cf3), TOBN(0x2c3832a8, 0x084db75d),
+     TOBN(0x04a12ddd, 0xde30b1c9), TOBN(0x7802eabc, 0xe31fd60c),
+     TOBN(0x33707327, 0xa37fddab), TOBN(0x65d6f2ab, 0xfaafa973),
+     TOBN(0x3525c5b8, 0x11e6f91a), TOBN(0x76aeb0c9, 0x5f46530b),
+     TOBN(0xe8815ff6, 0x2f93a675), TOBN(0xa6ec9684, 0x05f48679),
+     TOBN(0x6dcbb556, 0x358ae884), TOBN(0x0af61472, 0xe19e3873),
+     TOBN(0x72334372, 0xa5f696be), TOBN(0xc65e57ea, 0x6f22fb70),
+     TOBN(0x268da30c, 0x946cea90), TOBN(0x136a8a87, 0x65681b2a),
+     TOBN(0xad5e81dc, 0x0f9f44d4), TOBN(0xf09a6960, 0x2c46585a),
+     TOBN(0xd1649164, 0xc447d1b1), TOBN(0x3b4b36c8, 0x879dc8b1),
+     TOBN(0x20d4177b, 0x3b6b234c), TOBN(0x096a2505, 0x1730d9d0),
+     TOBN(0x0611b9b8, 0xef80531d), TOBN(0xba904b3b, 0x64bb495d),
+     TOBN(0x1192d9d4, 0x93a3147a), TOBN(0x9f30a5dc, 0x9a565545),
+     TOBN(0x90b1f9cb, 0x6ef07212), TOBN(0x29958546, 0x0d87fc13),
+     TOBN(0xd3323eff, 0xc17db9ba), TOBN(0xcb18548c, 0xcb1644a8),
+     TOBN(0x18a306d4, 0x4f49ffbc), TOBN(0x28d658f1, 0x4c2e8684),
+     TOBN(0x44ba60cd, 0xa99f8c71), TOBN(0x67b7abdb, 0x4bf742ff),
+     TOBN(0x66310f9c, 0x914b3f99), TOBN(0xae430a32, 0xf412c161),
+     TOBN(0x1e6776d3, 0x88ace52f), TOBN(0x4bc0fa24, 0x52d7067d),
+     TOBN(0x03c286aa, 0x8f07cd1b), TOBN(0x4cb8f38c, 0xa985b2c1),
+     TOBN(0x83ccbe80, 0x8c3bff36), TOBN(0x005a0bd2, 0x5263e575),
+     TOBN(0x460d7dda, 0x259bdcd1), TOBN(0x4a1c5642, 0xfa5cab6b),
+     TOBN(0x2b7bdbb9, 0x9fe4fc88), TOBN(0x09418e28, 0xcc97bbb5),
+     TOBN(0xd8274fb4, 0xa12321ae), TOBN(0xb137007d, 0x5c87b64e),
+     TOBN(0x80531fe1, 0xc63c4962), TOBN(0x50541e89, 0x981fdb25),
+     TOBN(0xdc1291a1, 0xfd4c2b6b), TOBN(0xc0693a17, 0xa6df4fca),
+     TOBN(0xb2c4604e, 0x0117f203), TOBN(0x245f1963, 0x0a99b8d0),
+     TOBN(0xaedc20aa, 0xc6212c44), TOBN(0xb1ed4e56, 0x520f52a8),
+     TOBN(0xfe48f575, 0xf8547be3), TOBN(0x0a7033cd, 0xa9e45f98),
+     TOBN(0x4b45d3a9, 0x18c50100), TOBN(0xb2a6cd6a, 0xa61d41da),
+     TOBN(0x60bbb4f5, 0x57933c6b), TOBN(0xa7538ebd, 0x2b0d7ffc),
+     TOBN(0x9ea3ab8d, 0x8cd626b6), TOBN(0x8273a484, 0x3601625a),
+     TOBN(0x88859845, 0x0168e508), TOBN(0x8cbc9bb2, 0x99a94abd),
+     TOBN(0x713ac792, 0xfab0a671), TOBN(0xa3995b19, 0x6c9ebffc),
+     TOBN(0xe711668e, 0x1239e152), TOBN(0x56892558, 0xbbb8dff4),
+     TOBN(0x8bfc7dab, 0xdbf17963), TOBN(0x5b59fe5a, 0xb3de1253),
+     TOBN(0x7e3320eb, 0x34a9f7ae), TOBN(0xe5e8cf72, 0xd751efe4),
+     TOBN(0x7ea003bc, 0xd9be2f37), TOBN(0xc0f551a0, 0xb6c08ef7),
+     TOBN(0x56606268, 0x038f6725), TOBN(0x1dd38e35, 0x6d92d3b6),
+     TOBN(0x07dfce7c, 0xc3cbd686), TOBN(0x4e549e04, 0x651c5da8),
+     TOBN(0x4058f93b, 0x08b19340), TOBN(0xc2fae6f4, 0xcac6d89d),
+     TOBN(0x4bad8a8c, 0x8f159cc7), TOBN(0x0ddba4b3, 0xcb0b601c),
+     TOBN(0xda4fc7b5, 0x1dd95f8c), TOBN(0x1d163cd7, 0xcea5c255),
+     TOBN(0x30707d06, 0x274a8c4c), TOBN(0x79d9e008, 0x2802e9ce),
+     TOBN(0x02a29ebf, 0xe6ddd505), TOBN(0x37064e74, 0xb50bed1a),
+     TOBN(0x3f6bae65, 0xa7327d57), TOBN(0x3846f5f1, 0xf83920bc),
+     TOBN(0x87c37491, 0x60df1b9b), TOBN(0x4cfb2895, 0x2d1da29f),
+     TOBN(0x10a478ca, 0x4ed1743c), TOBN(0x390c6030, 0x3edd47c6),
+     TOBN(0x8f3e5312, 0x8c0a78de), TOBN(0xccd02bda, 0x1e85df70),
+     TOBN(0xd6c75c03, 0xa61b6582), TOBN(0x0762921c, 0xfc0eebd1),
+     TOBN(0xd34d0823, 0xd85010c0), TOBN(0xd73aaacb, 0x0044cf1f),
+     TOBN(0xfb4159bb, 0xa3b5e78a), TOBN(0x2287c7f7, 0xe5826f3f),
+     TOBN(0x4aeaf742, 0x580b1a01), TOBN(0xf080415d, 0x60423b79),
+     TOBN(0xe12622cd, 0xa7dea144), TOBN(0x49ea4996, 0x59d62472),
+     TOBN(0xb42991ef, 0x571f3913), TOBN(0x0610f214, 0xf5b25a8a),
+     TOBN(0x47adc585, 0x30b79e8f), TOBN(0xf90e3df6, 0x07a065a2),
+     TOBN(0x5d0a5deb, 0x43e2e034), TOBN(0x53fb5a34, 0x444024aa),
+     TOBN(0xa8628c68, 0x6b0c9f7f), TOBN(0x9c69c29c, 0xac563656),
+     TOBN(0x5a231feb, 0xbace47b6), TOBN(0xbdce0289, 0x9ea5a2ec),
+     TOBN(0x05da1fac, 0x9463853e), TOBN(0x96812c52, 0x509e78aa),
+     TOBN(0xd3fb5771, 0x57151692), TOBN(0xeb2721f8, 0xd98e1c44),
+     TOBN(0xc0506087, 0x32399be1), TOBN(0xda5a5511, 0xd979d8b8),
+     TOBN(0x737ed55d, 0xc6f56780), TOBN(0xe20d3004, 0x0dc7a7f4),
+     TOBN(0x02ce7301, 0xf5941a03), TOBN(0x91ef5215, 0xed30f83a),
+     TOBN(0x28727fc1, 0x4092d85f), TOBN(0x72d223c6, 0x5c49e41a),
+     TOBN(0xa7cf30a2, 0xba6a4d81), TOBN(0x7c086209, 0xb030d87d),
+     TOBN(0x04844c7d, 0xfc588b09), TOBN(0x728cd499, 0x5874bbb0),
+     TOBN(0xcc1281ee, 0xe84c0495), TOBN(0x0769b5ba, 0xec31958f),
+     TOBN(0x665c228b, 0xf99c2471), TOBN(0xf2d8a11b, 0x191eb110),
+     TOBN(0x4594f494, 0xd36d7024), TOBN(0x482ded8b, 0xcdcb25a1),
+     TOBN(0xc958a9d8, 0xdadd4885), TOBN(0x7004477e, 0xf1d2b547),
+     TOBN(0x0a45f6ef, 0x2a0af550), TOBN(0x4fc739d6, 0x2f8d6351),
+     TOBN(0x75cdaf27, 0x786f08a9), TOBN(0x8700bb26, 0x42c2737f),
+     TOBN(0x855a7141, 0x1c4e2670), TOBN(0x810188c1, 0x15076fef),
+     TOBN(0xc251d0c9, 0xabcd3297), TOBN(0xae4c8967, 0xf48108eb),
+     TOBN(0xbd146de7, 0x18ceed30), TOBN(0xf9d4f07a, 0xc986bced),
+     TOBN(0x5ad98ed5, 0x83fa1e08), TOBN(0x7780d33e, 0xbeabd1fb),
+     TOBN(0xe330513c, 0x903b1196), TOBN(0xba11de9e, 0xa47bc8c4),
+     TOBN(0x684334da, 0x02c2d064), TOBN(0x7ecf360d, 0xa48de23b),
+     TOBN(0x57a1b474, 0x0a9089d8), TOBN(0xf28fa439, 0xff36734c),
+     TOBN(0xf2a482cb, 0xea4570b3), TOBN(0xee65d68b, 0xa5ebcee9),
+     TOBN(0x988d0036, 0xb9694cd5), TOBN(0x53edd0e9, 0x37885d32),
+     TOBN(0xe37e3307, 0xbeb9bc6d), TOBN(0xe9abb907, 0x9f5c6768),
+     TOBN(0x4396ccd5, 0x51f2160f), TOBN(0x2500888c, 0x47336da6),
+     TOBN(0x383f9ed9, 0x926fce43), TOBN(0x809dd1c7, 0x04da2930),
+     TOBN(0x30f6f596, 0x8a4cb227), TOBN(0x0d700c7f, 0x73a56b38),
+     TOBN(0x1825ea33, 0xab64a065), TOBN(0xaab9b735, 0x1338df80),
+     TOBN(0x1516100d, 0x9b63f57f), TOBN(0x2574395a, 0x27a6a634),
+     TOBN(0xb5560fb6, 0x700a1acd), TOBN(0xe823fd73, 0xfd999681),
+     TOBN(0xda915d1f, 0x6cb4e1ba), TOBN(0x0d030118, 0x6ebe00a3),
+     TOBN(0x744fb0c9, 0x89fca8cd), TOBN(0x970d01db, 0xf9da0e0b),
+     TOBN(0x0ad8c564, 0x7931d76f), TOBN(0xb15737bf, 0xf659b96a),
+     TOBN(0xdc9933e8, 0xa8b484e7), TOBN(0xb2fdbdf9, 0x7a26dec7),
+     TOBN(0x2349e9a4, 0x9f1f0136), TOBN(0x7860368e, 0x70fddddb),
+     TOBN(0xd93d2c1c, 0xf9ad3e18), TOBN(0x6d6c5f17, 0x689f4e79),
+     TOBN(0x7a544d91, 0xb24ff1b6), TOBN(0x3e12a5eb, 0xfe16cd8c),
+     TOBN(0x543574e9, 0xa56b872f), TOBN(0xa1ad550c, 0xfcf68ea2),
+     TOBN(0x689e37d2, 0x3f560ef7), TOBN(0x8c54b9ca, 0xc9d47a8b),
+     TOBN(0x46d40a4a, 0x088ac342), TOBN(0xec450c7c, 0x1576c6d0),
+     TOBN(0xb589e31c, 0x1f9689e9), TOBN(0xdacf2602, 0xb8781718),
+     TOBN(0xa89237c6, 0xc8cb6b42), TOBN(0x1326fc93, 0xb96ef381),
+     TOBN(0x55d56c6d, 0xb5f07825), TOBN(0xacba2eea, 0x7449e22d),
+     TOBN(0x74e0887a, 0x633c3000), TOBN(0xcb6cd172, 0xd7cbcf71),
+     TOBN(0x309e81de, 0xc36cf1be), TOBN(0x07a18a6d, 0x60ae399b),
+     TOBN(0xb36c2679, 0x9edce57e), TOBN(0x52b892f4, 0xdf001d41),
+     TOBN(0xd884ae5d, 0x16a1f2c6), TOBN(0x9b329424, 0xefcc370a),
+     TOBN(0x3120daf2, 0xbd2e21df), TOBN(0x55298d2d, 0x02470a99),
+     TOBN(0x0b78af6c, 0xa05db32e), TOBN(0x5c76a331, 0x601f5636),
+     TOBN(0xaae861ff, 0xf8a4f29c), TOBN(0x70dc9240, 0xd68f8d49),
+     TOBN(0x960e649f, 0x81b1321c), TOBN(0x3d2c801b, 0x8792e4ce),
+     TOBN(0xf479f772, 0x42521876), TOBN(0x0bed93bc, 0x416c79b1),
+     TOBN(0xa67fbc05, 0x263e5bc9), TOBN(0x01e8e630, 0x521db049),
+     TOBN(0x76f26738, 0xc6f3431e), TOBN(0xe609cb02, 0xe3267541),
+     TOBN(0xb10cff2d, 0x818c877c), TOBN(0x1f0e75ce, 0x786a13cb),
+     TOBN(0xf4fdca64, 0x1158544d), TOBN(0x5d777e89, 0x6cb71ed0),
+     TOBN(0x3c233737, 0xa9aa4755), TOBN(0x7b453192, 0xe527ab40),
+     TOBN(0xdb59f688, 0x39f05ffe), TOBN(0x8f4f4be0, 0x6d82574e),
+     TOBN(0xcce3450c, 0xee292d1b), TOBN(0xaa448a12, 0x61ccd086),
+     TOBN(0xabce91b3, 0xf7914967), TOBN(0x4537f09b, 0x1908a5ed),
+     TOBN(0xa812421e, 0xf51042e7), TOBN(0xfaf5cebc, 0xec0b3a34),
+     TOBN(0x730ffd87, 0x4ca6b39a), TOBN(0x70fb72ed, 0x02efd342),
+     TOBN(0xeb4735f9, 0xd75c8edb), TOBN(0xc11f2157, 0xc278aa51),
+     TOBN(0xc459f635, 0xbf3bfebf), TOBN(0x3a1ff0b4, 0x6bd9601f),
+     TOBN(0xc9d12823, 0xc420cb73), TOBN(0x3e9af3e2, 0x3c2915a3),
+     TOBN(0xe0c82c72, 0xb41c3440), TOBN(0x175239e5, 0xe3039a5f),
+     TOBN(0xe1084b8a, 0x558795a3), TOBN(0x328d0a1d, 0xd01e5c60),
+     TOBN(0x0a495f2e, 0xd3788a04), TOBN(0x25d8ff16, 0x66c11a9f),
+     TOBN(0xf5155f05, 0x9ed692d6), TOBN(0x954fa107, 0x4f425fe4),
+     TOBN(0xd16aabf2, 0xe98aaa99), TOBN(0x90cd8ba0, 0x96b0f88a),
+     TOBN(0x957f4782, 0xc154026a), TOBN(0x54ee0734, 0x52af56d2),
+     TOBN(0xbcf89e54, 0x45b4147a), TOBN(0x3d102f21, 0x9a52816c),
+     TOBN(0x6808517e, 0x39b62e77), TOBN(0x92e25421, 0x69169ad8),
+     TOBN(0xd721d871, 0xbb608558), TOBN(0x60e4ebae, 0xf6d4ff9b),
+     TOBN(0x0ba10819, 0x41f2763e), TOBN(0xca2e45be, 0x51ee3247),
+     TOBN(0x66d172ec, 0x2bfd7a5f), TOBN(0x528a8f2f, 0x74d0b12d),
+     TOBN(0xe17f1e38, 0xdabe70dc), TOBN(0x1d5d7316, 0x9f93983c),
+     TOBN(0x51b2184a, 0xdf423e31), TOBN(0xcb417291, 0xaedb1a10),
+     TOBN(0x2054ca93, 0x625bcab9), TOBN(0x54396860, 0xa98998f0),
+     TOBN(0x4e53f6c4, 0xa54ae57e), TOBN(0x0ffeb590, 0xee648e9d),
+     TOBN(0xfbbdaadc, 0x6afaf6bc), TOBN(0xf88ae796, 0xaa3bfb8a),
+     TOBN(0x209f1d44, 0xd2359ed9), TOBN(0xac68dd03, 0xf3544ce2),
+     TOBN(0xf378da47, 0xfd51e569), TOBN(0xe1abd860, 0x2cc80097),
+     TOBN(0x23ca18d9, 0x343b6e3a), TOBN(0x480797e8, 0xb40a1bae),
+     TOBN(0xd1f0c717, 0x533f3e67), TOBN(0x44896970, 0x06e6cdfc),
+     TOBN(0x8ca21055, 0x52a82e8d), TOBN(0xb2caf785, 0x78460cdc),
+     TOBN(0x4c1b7b62, 0xe9037178), TOBN(0xefc09d2c, 0xdb514b58),
+     TOBN(0x5f2df9ee, 0x9113be5c), TOBN(0x2fbda78f, 0xb3f9271c),
+     TOBN(0xe09a81af, 0x8f83fc54), TOBN(0x06b13866, 0x8afb5141),
+     TOBN(0x38f6480f, 0x43e3865d), TOBN(0x72dd77a8, 0x1ddf47d9),
+     TOBN(0xf2a8e971, 0x4c205ff7), TOBN(0x46d449d8, 0x9d088ad8),
+     TOBN(0x926619ea, 0x185d706f), TOBN(0xe47e02eb, 0xc7dd7f62),
+     TOBN(0xe7f120a7, 0x8cbc2031), TOBN(0xc18bef00, 0x998d4ac9),
+     TOBN(0x18f37a9c, 0x6bdf22da), TOBN(0xefbc432f, 0x90dc82df),
+     TOBN(0xc52cef8e, 0x5d703651), TOBN(0x82887ba0, 0xd99881a5),
+     TOBN(0x7cec9dda, 0xb920ec1d), TOBN(0xd0d7e8c3, 0xec3e8d3b),
+     TOBN(0x445bc395, 0x4ca88747), TOBN(0xedeaa2e0, 0x9fd53535),
+     TOBN(0x461b1d93, 0x6cc87475), TOBN(0xd92a52e2, 0x6d2383bd),
+     TOBN(0xfabccb59, 0xd7903546), TOBN(0x6111a761, 0x3d14b112),
+     TOBN(0x0ae584fe, 0xb3d5f612), TOBN(0x5ea69b8d, 0x60e828ec),
+     TOBN(0x6c078985, 0x54087030), TOBN(0x649cab04, 0xac4821fe),
+     TOBN(0x25ecedcf, 0x8bdce214), TOBN(0xb5622f72, 0x86af7361),
+     TOBN(0x0e1227aa, 0x7038b9e2), TOBN(0xd0efb273, 0xac20fa77),
+     TOBN(0x817ff88b, 0x79df975b), TOBN(0x856bf286, 0x1999503e),
+     TOBN(0xb4d5351f, 0x5038ec46), TOBN(0x740a52c5, 0xfc42af6e),
+     TOBN(0x2e38bb15, 0x2cbb1a3f), TOBN(0xc3eb99fe, 0x17a83429),
+     TOBN(0xca4fcbf1, 0xdd66bb74), TOBN(0x880784d6, 0xcde5e8fc),
+     TOBN(0xddc84c1c, 0xb4e7a0be), TOBN(0x8780510d, 0xbd15a72f),
+     TOBN(0x44bcf1af, 0x81ec30e1), TOBN(0x141e50a8, 0x0a61073e),
+     TOBN(0x0d955718, 0x47be87ae), TOBN(0x68a61417, 0xf76a4372),
+     TOBN(0xf57e7e87, 0xc607c3d3), TOBN(0x043afaf8, 0x5252f332),
+     TOBN(0xcc14e121, 0x1552a4d2), TOBN(0xb6dee692, 0xbb4d4ab4),
+     TOBN(0xb6ab74c8, 0xa03816a4), TOBN(0x84001ae4, 0x6f394a29),
+     TOBN(0x5bed8344, 0xd795fb45), TOBN(0x57326e7d, 0xb79f55a5),
+     TOBN(0xc9533ce0, 0x4accdffc), TOBN(0x53473caf, 0x3993fa04),
+     TOBN(0x7906eb93, 0xa13df4c8), TOBN(0xa73e51f6, 0x97cbe46f),
+     TOBN(0xd1ab3ae1, 0x0ae4ccf8), TOBN(0x25614508, 0x8a5b3dbc),
+     TOBN(0x61eff962, 0x11a71b27), TOBN(0xdf71412b, 0x6bb7fa39),
+     TOBN(0xb31ba6b8, 0x2bd7f3ef), TOBN(0xb0b9c415, 0x69180d29),
+     TOBN(0xeec14552, 0x014cdde5), TOBN(0x702c624b, 0x227b4bbb),
+     TOBN(0x2b15e8c2, 0xd3e988f3), TOBN(0xee3bcc6d, 0xa4f7fd04),
+     TOBN(0x9d00822a, 0x42ac6c85), TOBN(0x2db0cea6, 0x1df9f2b7),
+     TOBN(0xd7cad2ab, 0x42de1e58), TOBN(0x346ed526, 0x2d6fbb61),
+     TOBN(0xb3962995, 0x1a2faf09), TOBN(0x2fa8a580, 0x7c25612e),
+     TOBN(0x30ae04da, 0x7cf56490), TOBN(0x75662908, 0x0eea3961),
+     TOBN(0x3609f5c5, 0x3d080847), TOBN(0xcb081d39, 0x5241d4f6),
+     TOBN(0xb4fb3810, 0x77961a63), TOBN(0xc20c5984, 0x2abb66fc),
+     TOBN(0x3d40aa7c, 0xf902f245), TOBN(0x9cb12736, 0x4e536b1e),
+     TOBN(0x5eda24da, 0x99b3134f), TOBN(0xafbd9c69, 0x5cd011af),
+     TOBN(0x9a16e30a, 0xc7088c7d), TOBN(0x5ab65710, 0x3207389f),
+     TOBN(0x1b09547f, 0xe7407a53), TOBN(0x2322f9d7, 0x4fdc6eab),
+     TOBN(0xc0f2f22d, 0x7430de4d), TOBN(0x19382696, 0xe68ca9a9),
+     TOBN(0x17f1eff1, 0x918e5868), TOBN(0xe3b5b635, 0x586f4204),
+     TOBN(0x146ef980, 0x3fbc4341), TOBN(0x359f2c80, 0x5b5eed4e),
+     TOBN(0x9f35744e, 0x7482e41d), TOBN(0x9a9ac3ec, 0xf3b224c2),
+     TOBN(0x9161a6fe, 0x91fc50ae), TOBN(0x89ccc66b, 0xc613fa7c),
+     TOBN(0x89268b14, 0xc732f15a), TOBN(0x7cd6f4e2, 0xb467ed03),
+     TOBN(0xfbf79869, 0xce56b40e), TOBN(0xf93e094c, 0xc02dde98),
+     TOBN(0xefe0c3a8, 0xedee2cd7), TOBN(0x90f3ffc0, 0xb268fd42),
+     TOBN(0x81a7fd56, 0x08241aed), TOBN(0x95ab7ad8, 0x00b1afe8),
+     TOBN(0x40127056, 0x3e310d52), TOBN(0xd3ffdeb1, 0x09d9fc43),
+     TOBN(0xc8f85c91, 0xd11a8594), TOBN(0x2e74d258, 0x31cf6db8),
+     TOBN(0x829c7ca3, 0x02b5dfd0), TOBN(0xe389cfbe, 0x69143c86),
+     TOBN(0xd01b6405, 0x941768d8), TOBN(0x45103995, 0x03bf825d),
+     TOBN(0xcc4ee166, 0x56cd17e2), TOBN(0xbea3c283, 0xba037e79),
+     TOBN(0x4e1ac06e, 0xd9a47520), TOBN(0xfbfe18aa, 0xaf852404),
+     TOBN(0x5615f8e2, 0x8087648a), TOBN(0x7301e47e, 0xb9d150d9),
+     TOBN(0x79f9f9dd, 0xb299b977), TOBN(0x76697a7b, 0xa5b78314),
+     TOBN(0x10d67468, 0x7d7c90e7), TOBN(0x7afffe03, 0x937210b5),
+     TOBN(0x5aef3e4b, 0x28c22cee), TOBN(0xefb0ecd8, 0x09fd55ae),
+     TOBN(0x4cea7132, 0x0d2a5d6a), TOBN(0x9cfb5fa1, 0x01db6357),
+     TOBN(0x395e0b57, 0xf36e1ac5), TOBN(0x008fa9ad, 0x36cafb7d),
+     TOBN(0x8f6cdf70, 0x5308c4db), TOBN(0x51527a37, 0x95ed2477),
+     TOBN(0xba0dee30, 0x5bd21311), TOBN(0x6ed41b22, 0x909c90d7),
+     TOBN(0xc5f6b758, 0x7c8696d3), TOBN(0x0db8eaa8, 0x3ce83a80),
+     TOBN(0xd297fe37, 0xb24b4b6f), TOBN(0xfe58afe8, 0x522d1f0d),
+     TOBN(0x97358736, 0x8c98dbd9), TOBN(0x6bc226ca, 0x9454a527),
+     TOBN(0xa12b384e, 0xce53c2d0), TOBN(0x779d897d, 0x5e4606da),
+     TOBN(0xa53e47b0, 0x73ec12b0), TOBN(0x462dbbba, 0x5756f1ad),
+     TOBN(0x69fe09f2, 0xcafe37b6), TOBN(0x273d1ebf, 0xecce2e17),
+     TOBN(0x8ac1d538, 0x3cf607fd), TOBN(0x8035f7ff, 0x12e10c25),}
+    ,
+    {TOBN(0x854d34c7, 0x7e6c5520), TOBN(0xc27df9ef, 0xdcb9ea58),
+     TOBN(0x405f2369, 0xd686666d), TOBN(0x29d1febf, 0x0417aa85),
+     TOBN(0x9846819e, 0x93470afe), TOBN(0x3e6a9669, 0xe2a27f9e),
+     TOBN(0x24d008a2, 0xe31e6504), TOBN(0xdba7cecf, 0x9cb7680a),
+     TOBN(0xecaff541, 0x338d6e43), TOBN(0x56f7dd73, 0x4541d5cc),
+     TOBN(0xb5d426de, 0x96bc88ca), TOBN(0x48d94f6b, 0x9ed3a2c3),
+     TOBN(0x6354a3bb, 0x2ef8279c), TOBN(0xd575465b, 0x0b1867f2),
+     TOBN(0xef99b0ff, 0x95225151), TOBN(0xf3e19d88, 0xf94500d8),
+     TOBN(0x92a83268, 0xe32dd620), TOBN(0x913ec99f, 0x627849a2),
+     TOBN(0xedd8fdfa, 0x2c378882), TOBN(0xaf96f33e, 0xee6f8cfe),
+     TOBN(0xc06737e5, 0xdc3fa8a5), TOBN(0x236bb531, 0xb0b03a1d),
+     TOBN(0x33e59f29, 0x89f037b0), TOBN(0x13f9b5a7, 0xd9a12a53),
+     TOBN(0x0d0df6ce, 0x51efb310), TOBN(0xcb5b2eb4, 0x958df5be),
+     TOBN(0xd6459e29, 0x36158e59), TOBN(0x82aae2b9, 0x1466e336),
+     TOBN(0xfb658a39, 0x411aa636), TOBN(0x7152ecc5, 0xd4c0a933),
+     TOBN(0xf10c758a, 0x49f026b7), TOBN(0xf4837f97, 0xcb09311f),
+     TOBN(0xddfb02c4, 0xc753c45f), TOBN(0x18ca81b6, 0xf9c840fe),
+     TOBN(0x846fd09a, 0xb0f8a3e6), TOBN(0xb1162add, 0xe7733dbc),
+     TOBN(0x7070ad20, 0x236e3ab6), TOBN(0xf88cdaf5, 0xb2a56326),
+     TOBN(0x05fc8719, 0x997cbc7a), TOBN(0x442cd452, 0x4b665272),
+     TOBN(0x7807f364, 0xb71698f5), TOBN(0x6ba418d2, 0x9f7b605e),
+     TOBN(0xfd20b00f, 0xa03b2cbb), TOBN(0x883eca37, 0xda54386f),
+     TOBN(0xff0be43f, 0xf3437f24), TOBN(0xe910b432, 0xa48bb33c),
+     TOBN(0x4963a128, 0x329df765), TOBN(0xac1dd556, 0xbe2fe6f7),
+     TOBN(0x557610f9, 0x24a0a3fc), TOBN(0x38e17bf4, 0xe881c3f9),
+     TOBN(0x6ba84faf, 0xed0dac99), TOBN(0xd4a222c3, 0x59eeb918),
+     TOBN(0xc79c1dbe, 0x13f542b6), TOBN(0x1fc65e0d, 0xe425d457),
+     TOBN(0xeffb754f, 0x1debb779), TOBN(0x638d8fd0, 0x9e08af60),
+     TOBN(0x994f523a, 0x626332d5), TOBN(0x7bc38833, 0x5561bb44),
+     TOBN(0x005ed4b0, 0x3d845ea2), TOBN(0xd39d3ee1, 0xc2a1f08a),
+     TOBN(0x6561fdd3, 0xe7676b0d), TOBN(0x620e35ff, 0xfb706017),
+     TOBN(0x36ce424f, 0xf264f9a8), TOBN(0xc4c3419f, 0xda2681f7),
+     TOBN(0xfb6afd2f, 0x69beb6e8), TOBN(0x3a50b993, 0x6d700d03),
+     TOBN(0xc840b2ad, 0x0c83a14f), TOBN(0x573207be, 0x54085bef),
+     TOBN(0x5af882e3, 0x09fe7e5b), TOBN(0x957678a4, 0x3b40a7e1),
+     TOBN(0x172d4bdd, 0x543056e2), TOBN(0x9c1b26b4, 0x0df13c0a),
+     TOBN(0x1c30861c, 0xf405ff06), TOBN(0xebac86bd, 0x486e828b),
+     TOBN(0xe791a971, 0x636933fc), TOBN(0x50e7c2be, 0x7aeee947),
+     TOBN(0xc3d4a095, 0xfa90d767), TOBN(0xae60eb7b, 0xe670ab7b),
+     TOBN(0x17633a64, 0x397b056d), TOBN(0x93a21f33, 0x105012aa),
+     TOBN(0x663c370b, 0xabb88643), TOBN(0x91df36d7, 0x22e21599),
+     TOBN(0x183ba835, 0x8b761671), TOBN(0x381eea1d, 0x728f3bf1),
+     TOBN(0xb9b2f1ba, 0x39966e6c), TOBN(0x7c464a28, 0xe7295492),
+     TOBN(0x0fd5f70a, 0x09b26b7f), TOBN(0xa9aba1f9, 0xfbe009df),
+     TOBN(0x857c1f22, 0x369b87ad), TOBN(0x3c00e5d9, 0x32fca556),
+     TOBN(0x1ad74cab, 0x90b06466), TOBN(0xa7112386, 0x550faaf2),
+     TOBN(0x7435e198, 0x6d9bd5f5), TOBN(0x2dcc7e38, 0x59c3463f),
+     TOBN(0xdc7df748, 0xca7bd4b2), TOBN(0x13cd4c08, 0x9dec2f31),
+     TOBN(0x0d3b5df8, 0xe3237710), TOBN(0x0dadb26e, 0xcbd2f7b0),
+     TOBN(0x9f5966ab, 0xe4aa082b), TOBN(0x666ec8de, 0x350e966e),
+     TOBN(0x1bfd1ed5, 0xee524216), TOBN(0xcd93c59b, 0x41dab0b6),
+     TOBN(0x658a8435, 0xd186d6ba), TOBN(0x1b7d34d2, 0x159d1195),
+     TOBN(0x5936e460, 0x22caf46b), TOBN(0x6a45dd8f, 0x9a96fe4f),
+     TOBN(0xf7925434, 0xb98f474e), TOBN(0x41410412, 0x0053ef15),
+     TOBN(0x71cf8d12, 0x41de97bf), TOBN(0xb8547b61, 0xbd80bef4),
+     TOBN(0xb47d3970, 0xc4db0037), TOBN(0xf1bcd328, 0xfef20dff),
+     TOBN(0x31a92e09, 0x10caad67), TOBN(0x1f591960, 0x5531a1e1),
+     TOBN(0x3bb852e0, 0x5f4fc840), TOBN(0x63e297ca, 0x93a72c6c),
+     TOBN(0x3c2b0b2e, 0x49abad67), TOBN(0x6ec405fc, 0xed3db0d9),
+     TOBN(0xdc14a530, 0x7fef1d40), TOBN(0xccd19846, 0x280896fc),
+     TOBN(0x00f83176, 0x9bb81648), TOBN(0xd69eb485, 0x653120d0),
+     TOBN(0xd17d75f4, 0x4ccabc62), TOBN(0x34a07f82, 0xb749fcb1),
+     TOBN(0x2c3af787, 0xbbfb5554), TOBN(0xb06ed4d0, 0x62e283f8),
+     TOBN(0x5722889f, 0xa19213a0), TOBN(0x162b085e, 0xdcf3c7b4),
+     TOBN(0xbcaecb31, 0xe0dd3eca), TOBN(0xc6237fbc, 0xe52f13a5),
+     TOBN(0xcc2b6b03, 0x27bac297), TOBN(0x2ae1cac5, 0xb917f54a),
+     TOBN(0x474807d4, 0x7845ae4f), TOBN(0xfec7dd92, 0xce5972e0),
+     TOBN(0xc3bd2541, 0x1d7915bb), TOBN(0x66f85dc4, 0xd94907ca),
+     TOBN(0xd981b888, 0xbdbcf0ca), TOBN(0xd75f5da6, 0xdf279e9f),
+     TOBN(0x128bbf24, 0x7054e934), TOBN(0x3c6ff6e5, 0x81db134b),
+     TOBN(0x795b7cf4, 0x047d26e4), TOBN(0xf370f7b8, 0x5049ec37),
+     TOBN(0xc6712d4d, 0xced945af), TOBN(0xdf30b5ec, 0x095642bc),
+     TOBN(0x9b034c62, 0x4896246e), TOBN(0x5652c016, 0xee90bbd1),
+     TOBN(0xeb38636f, 0x87fedb73), TOBN(0x5e32f847, 0x0135a613),
+     TOBN(0x0703b312, 0xcf933c83), TOBN(0xd05bb76e, 0x1a7f47e6),
+     TOBN(0x825e4f0c, 0x949c2415), TOBN(0x569e5622, 0x7250d6f8),
+     TOBN(0xbbe9eb3a, 0x6568013e), TOBN(0x8dbd203f, 0x22f243fc),
+     TOBN(0x9dbd7694, 0xb342734a), TOBN(0x8f6d12f8, 0x46afa984),
+     TOBN(0xb98610a2, 0xc9eade29), TOBN(0xbab4f323, 0x47dd0f18),
+     TOBN(0x5779737b, 0x671c0d46), TOBN(0x10b6a7c6, 0xd3e0a42a),
+     TOBN(0xfb19ddf3, 0x3035b41c), TOBN(0xd336343f, 0x99c45895),
+     TOBN(0x61fe4938, 0x54c857e5), TOBN(0xc4d506be, 0xae4e57d5),
+     TOBN(0x3cd8c8cb, 0xbbc33f75), TOBN(0x7281f08a, 0x9262c77d),
+     TOBN(0x083f4ea6, 0xf11a2823), TOBN(0x8895041e, 0x9fba2e33),
+     TOBN(0xfcdfea49, 0x9c438edf), TOBN(0x7678dcc3, 0x91edba44),
+     TOBN(0xf07b3b87, 0xe2ba50f0), TOBN(0xc13888ef, 0x43948c1b),
+     TOBN(0xc2135ad4, 0x1140af42), TOBN(0x8e5104f3, 0x926ed1a7),
+     TOBN(0xf24430cb, 0x88f6695f), TOBN(0x0ce0637b, 0x6d73c120),
+     TOBN(0xb2db01e6, 0xfe631e8f), TOBN(0x1c5563d7, 0xd7bdd24b),
+     TOBN(0x8daea3ba, 0x369ad44f), TOBN(0x000c81b6, 0x8187a9f9),
+     TOBN(0x5f48a951, 0xaae1fd9a), TOBN(0xe35626c7, 0x8d5aed8a),
+     TOBN(0x20952763, 0x0498c622), TOBN(0x76d17634, 0x773aa504),
+     TOBN(0x36d90dda, 0xeb300f7a), TOBN(0x9dcf7dfc, 0xedb5e801),
+     TOBN(0x645cb268, 0x74d5244c), TOBN(0xa127ee79, 0x348e3aa2),
+     TOBN(0x488acc53, 0x575f1dbb), TOBN(0x95037e85, 0x80e6161e),
+     TOBN(0x57e59283, 0x292650d0), TOBN(0xabe67d99, 0x14938216),
+     TOBN(0x3c7f944b, 0x3f8e1065), TOBN(0xed908cb6, 0x330e8924),
+     TOBN(0x08ee8fd5, 0x6f530136), TOBN(0x2227b7d5, 0xd7ffc169),
+     TOBN(0x4f55c893, 0xb5cd6dd5), TOBN(0x82225e11, 0xa62796e8),
+     TOBN(0x5c6cead1, 0xcb18e12c), TOBN(0x4381ae0c, 0x84f5a51a),
+     TOBN(0x345913d3, 0x7fafa4c8), TOBN(0x3d918082, 0x0491aac0),
+     TOBN(0x9347871f, 0x3e69264c), TOBN(0xbea9dd3c, 0xb4f4f0cd),
+     TOBN(0xbda5d067, 0x3eadd3e7), TOBN(0x0033c1b8, 0x0573bcd8),
+     TOBN(0x25589379, 0x5da2486c), TOBN(0xcb89ee5b, 0x86abbee7),
+     TOBN(0x8fe0a8f3, 0x22532e5d), TOBN(0xb6410ff0, 0x727dfc4c),
+     TOBN(0x619b9d58, 0x226726db), TOBN(0x5ec25669, 0x7a2b2dc7),
+     TOBN(0xaf4d2e06, 0x4c3beb01), TOBN(0x852123d0, 0x7acea556),
+     TOBN(0x0e9470fa, 0xf783487a), TOBN(0x75a7ea04, 0x5664b3eb),
+     TOBN(0x4ad78f35, 0x6798e4ba), TOBN(0x9214e6e5, 0xc7d0e091),
+     TOBN(0xc420b488, 0xb1290403), TOBN(0x64049e0a, 0xfc295749),
+     TOBN(0x03ef5af1, 0x3ae9841f), TOBN(0xdbe4ca19, 0xb0b662a6),
+     TOBN(0x46845c5f, 0xfa453458), TOBN(0xf8dabf19, 0x10b66722),
+     TOBN(0xb650f0aa, 0xcce2793b), TOBN(0x71db851e, 0xc5ec47c1),
+     TOBN(0x3eb78f3e, 0x3b234fa9), TOBN(0xb0c60f35, 0xfc0106ce),
+     TOBN(0x05427121, 0x774eadbd), TOBN(0x25367faf, 0xce323863),
+     TOBN(0x7541b5c9, 0xcd086976), TOBN(0x4ff069e2, 0xdc507ad1),
+     TOBN(0x74145256, 0x8776e667), TOBN(0x6e76142c, 0xb23c6bb5),
+     TOBN(0xdbf30712, 0x1b3a8a87), TOBN(0x60e7363e, 0x98450836),
+     TOBN(0x5741450e, 0xb7366d80), TOBN(0xe4ee14ca, 0x4837dbdf),
+     TOBN(0xa765eb9b, 0x69d4316f), TOBN(0x04548dca, 0x8ef43825),
+     TOBN(0x9c9f4e4c, 0x5ae888eb), TOBN(0x733abb51, 0x56e9ac99),
+     TOBN(0xdaad3c20, 0xba6ac029), TOBN(0x9b8dd3d3, 0x2ba3e38e),
+     TOBN(0xa9bb4c92, 0x0bc5d11a), TOBN(0xf20127a7, 0x9c5f88a3),
+     TOBN(0x4f52b06e, 0x161d3cb8), TOBN(0x26c1ff09, 0x6afaf0a6),
+     TOBN(0x32670d2f, 0x7189e71f), TOBN(0xc6438748, 0x5ecf91e7),
+     TOBN(0x15758e57, 0xdb757a21), TOBN(0x427d09f8, 0x290a9ce5),
+     TOBN(0x846a308f, 0x38384a7a), TOBN(0xaac3acb4, 0xb0732b99),
+     TOBN(0x9e941009, 0x17845819), TOBN(0x95cba111, 0xa7ce5e03),
+     TOBN(0x6f3d4f7f, 0xb00009c4), TOBN(0xb8396c27, 0x8ff28b5f),
+     TOBN(0xb1a9ae43, 0x1c97975d), TOBN(0x9d7ba8af, 0xe5d9fed5),
+     TOBN(0x338cf09f, 0x34f485b6), TOBN(0xbc0ddacc, 0x64122516),
+     TOBN(0xa450da12, 0x05d471fe), TOBN(0x4c3a6250, 0x628dd8c9),
+     TOBN(0x69c7d103, 0xd1295837), TOBN(0xa2893e50, 0x3807eb2f),
+     TOBN(0xd6e1e1de, 0xbdb41491), TOBN(0xc630745b, 0x5e138235),
+     TOBN(0xc892109e, 0x48661ae1), TOBN(0x8d17e7eb, 0xea2b2674),
+     TOBN(0x00ec0f87, 0xc328d6b5), TOBN(0x6d858645, 0xf079ff9e),
+     TOBN(0x6cdf243e, 0x19115ead), TOBN(0x1ce1393e, 0x4bac4fcf),
+     TOBN(0x2c960ed0, 0x9c29f25b), TOBN(0x59be4d8e, 0x9d388a05),
+     TOBN(0x0d46e06c, 0xd0def72b), TOBN(0xb923db5d, 0xe0342748),
+     TOBN(0xf7d3aacd, 0x936d4a3d), TOBN(0x558519cc, 0x0b0b099e),
+     TOBN(0x3ea8ebf8, 0x827097ef), TOBN(0x259353db, 0xd054f55d),
+     TOBN(0x84c89abc, 0x6d2ed089), TOBN(0x5c548b69, 0x8e096a7c),
+     TOBN(0xd587f616, 0x994b995d), TOBN(0x4d1531f6, 0xa5845601),
+     TOBN(0x792ab31e, 0x451fd9f0), TOBN(0xc8b57bb2, 0x65adf6ca),
+     TOBN(0x68440fcb, 0x1cd5ad73), TOBN(0xb9c860e6, 0x6144da4f),
+     TOBN(0x2ab286aa, 0x8462beb8), TOBN(0xcc6b8fff, 0xef46797f),
+     TOBN(0xac820da4, 0x20c8a471), TOBN(0x69ae05a1, 0x77ff7faf),
+     TOBN(0xb9163f39, 0xbfb5da77), TOBN(0xbd03e590, 0x2c73ab7a),
+     TOBN(0x7e862b5e, 0xb2940d9e), TOBN(0x3c663d86, 0x4b9af564),
+     TOBN(0xd8309031, 0xbde3033d), TOBN(0x298231b2, 0xd42c5bc6),
+     TOBN(0x42090d2c, 0x552ad093), TOBN(0xa4799d1c, 0xff854695),
+     TOBN(0x0a88b5d6, 0xd31f0d00), TOBN(0xf8b40825, 0xa2f26b46),
+     TOBN(0xec29b1ed, 0xf1bd7218), TOBN(0xd491c53b, 0x4b24c86e),
+     TOBN(0xd2fe588f, 0x3395ea65), TOBN(0x6f3764f7, 0x4456ef15),
+     TOBN(0xdb43116d, 0xcdc34800), TOBN(0xcdbcd456, 0xc1e33955),
+     TOBN(0xefdb5540, 0x74ab286b), TOBN(0x948c7a51, 0xd18c5d7c),
+     TOBN(0xeb81aa37, 0x7378058e), TOBN(0x41c746a1, 0x04411154),
+     TOBN(0xa10c73bc, 0xfb828ac7), TOBN(0x6439be91, 0x9d972b29),
+     TOBN(0x4bf3b4b0, 0x43a2fbad), TOBN(0x39e6dadf, 0x82b5e840),
+     TOBN(0x4f716408, 0x6397bd4c), TOBN(0x0f7de568, 0x7f1eeccb),
+     TOBN(0x5865c5a1, 0xd2ffbfc1), TOBN(0xf74211fa, 0x4ccb6451),
+     TOBN(0x66368a88, 0xc0b32558), TOBN(0x5b539dc2, 0x9ad7812e),
+     TOBN(0x579483d0, 0x2f3af6f6), TOBN(0x52132078, 0x99934ece),
+     TOBN(0x50b9650f, 0xdcc9e983), TOBN(0xca989ec9, 0xaee42b8a),
+     TOBN(0x6a44c829, 0xd6f62f99), TOBN(0x8f06a309, 0x4c2a7c0c),
+     TOBN(0x4ea2b3a0, 0x98a0cb0a), TOBN(0x5c547b70, 0xbeee8364),
+     TOBN(0x461d40e1, 0x682afe11), TOBN(0x9e0fc77a, 0x7b41c0a8),
+     TOBN(0x79e4aefd, 0xe20d5d36), TOBN(0x2916e520, 0x32dd9f63),
+     TOBN(0xf59e52e8, 0x3f883faf), TOBN(0x396f9639, 0x2b868d35),
+     TOBN(0xc902a9df, 0x4ca19881), TOBN(0x0fc96822, 0xdb2401a6),
+     TOBN(0x41237587, 0x66f1c68d), TOBN(0x10fc6de3, 0xfb476c0d),
+     TOBN(0xf8b6b579, 0x841f5d90), TOBN(0x2ba8446c, 0xfa24f44a),
+     TOBN(0xa237b920, 0xef4a9975), TOBN(0x60bb6004, 0x2330435f),
+     TOBN(0xd6f4ab5a, 0xcfb7e7b5), TOBN(0xb2ac5097, 0x83435391),
+     TOBN(0xf036ee2f, 0xb0d1ea67), TOBN(0xae779a6a, 0x74c56230),
+     TOBN(0x59bff8c8, 0xab838ae6), TOBN(0xcd83ca99, 0x9b38e6f0),
+     TOBN(0xbb27bef5, 0xe33deed3), TOBN(0xe6356f6f, 0x001892a8),
+     TOBN(0xbf3be6cc, 0x7adfbd3e), TOBN(0xaecbc81c, 0x33d1ac9d),
+     TOBN(0xe4feb909, 0xe6e861dc), TOBN(0x90a247a4, 0x53f5f801),
+     TOBN(0x01c50acb, 0x27346e57), TOBN(0xce29242e, 0x461acc1b),
+     TOBN(0x04dd214a, 0x2f998a91), TOBN(0x271ee9b1, 0xd4baf27b),
+     TOBN(0x7e3027d1, 0xe8c26722), TOBN(0x21d1645c, 0x1820dce5),
+     TOBN(0x086f242c, 0x7501779c), TOBN(0xf0061407, 0xfa0e8009),
+     TOBN(0xf23ce477, 0x60187129), TOBN(0x05bbdedb, 0x0fde9bd0),
+     TOBN(0x682f4832, 0x25d98473), TOBN(0xf207fe85, 0x5c658427),
+     TOBN(0xb6fdd7ba, 0x4166ffa1), TOBN(0x0c314056, 0x9eed799d),
+     TOBN(0x0db8048f, 0x4107e28f), TOBN(0x74ed3871, 0x41216840),
+     TOBN(0x74489f8f, 0x56a3c06e), TOBN(0x1e1c005b, 0x12777134),
+     TOBN(0xdb332a73, 0xf37ec3c3), TOBN(0xc65259bd, 0xdd59eba0),
+     TOBN(0x2291709c, 0xdb4d3257), TOBN(0x9a793b25, 0xbd389390),
+     TOBN(0xf39fe34b, 0xe43756f0), TOBN(0x2f76bdce, 0x9afb56c9),
+     TOBN(0x9f37867a, 0x61208b27), TOBN(0xea1d4307, 0x089972c3),
+     TOBN(0x8c595330, 0x8bdf623a), TOBN(0x5f5accda, 0x8441fb7d),
+     TOBN(0xfafa9418, 0x32ddfd95), TOBN(0x6ad40c5a, 0x0fde9be7),
+     TOBN(0x43faba89, 0xaeca8709), TOBN(0xc64a7cf1, 0x2c248a9d),
+     TOBN(0x16620252, 0x72637a76), TOBN(0xaee1c791, 0x22b8d1bb),
+     TOBN(0xf0f798fd, 0x21a843b2), TOBN(0x56e4ed4d, 0x8d005cb1),
+     TOBN(0x355f7780, 0x1f0d8abe), TOBN(0x197b04cf, 0x34522326),
+     TOBN(0x41f9b31f, 0xfd42c13f), TOBN(0x5ef7feb2, 0xb40f933d),
+     TOBN(0x27326f42, 0x5d60bad4), TOBN(0x027ecdb2, 0x8c92cf89),
+     TOBN(0x04aae4d1, 0x4e3352fe), TOBN(0x08414d2f, 0x73591b90),
+     TOBN(0x5ed6124e, 0xb7da7d60), TOBN(0xb985b931, 0x4d13d4ec),
+     TOBN(0xa592d3ab, 0x96bf36f9), TOBN(0x012dbed5, 0xbbdf51df),
+     TOBN(0xa57963c0, 0xdf6c177d), TOBN(0x010ec869, 0x87ca29cf),
+     TOBN(0xba1700f6, 0xbf926dff), TOBN(0x7c9fdbd1, 0xf4bf6bc2),
+     TOBN(0xdc18dc8f, 0x64da11f5), TOBN(0xa6074b7a, 0xd938ae75),
+     TOBN(0x14270066, 0xe84f44a4), TOBN(0x99998d38, 0xd27b954e),
+     TOBN(0xc1be8ab2, 0xb4f38e9a), TOBN(0x8bb55bbf, 0x15c01016),
+     TOBN(0xf73472b4, 0x0ea2ab30), TOBN(0xd365a340, 0xf73d68dd),
+     TOBN(0xc01a7168, 0x19c2e1eb), TOBN(0x32f49e37, 0x34061719),
+     TOBN(0xb73c57f1, 0x01d8b4d6), TOBN(0x03c8423c, 0x26b47700),
+     TOBN(0x321d0bc8, 0xa4d8826a), TOBN(0x6004213c, 0x4bc0e638),
+     TOBN(0xf78c64a1, 0xc1c06681), TOBN(0x16e0a16f, 0xef018e50),
+     TOBN(0x31cbdf91, 0xdb42b2b3), TOBN(0xf8f4ffce, 0xe0d36f58),
+     TOBN(0xcdcc71cd, 0x4cc5e3e0), TOBN(0xd55c7cfa, 0xa129e3e0),
+     TOBN(0xccdb6ba0, 0x0fb2cbf1), TOBN(0x6aba0005, 0xc4bce3cb),
+     TOBN(0x501cdb30, 0xd232cfc4), TOBN(0x9ddcf12e, 0xd58a3cef),
+     TOBN(0x02d2cf9c, 0x87e09149), TOBN(0xdc5d7ec7, 0x2c976257),
+     TOBN(0x6447986e, 0x0b50d7dd), TOBN(0x88fdbaf7, 0x807f112a),
+     TOBN(0x58c9822a, 0xb00ae9f6), TOBN(0x6abfb950, 0x6d3d27e0),
+     TOBN(0xd0a74487, 0x8a429f4f), TOBN(0x0649712b, 0xdb516609),
+     TOBN(0xb826ba57, 0xe769b5df), TOBN(0x82335df2, 0x1fc7aaf2),
+     TOBN(0x2389f067, 0x5c93d995), TOBN(0x59ac367a, 0x68677be6),
+     TOBN(0xa77985ff, 0x21d9951b), TOBN(0x038956fb, 0x85011cce),
+     TOBN(0x608e48cb, 0xbb734e37), TOBN(0xc08c0bf2, 0x2be5b26f),
+     TOBN(0x17bbdd3b, 0xf9b1a0d9), TOBN(0xeac7d898, 0x10483319),
+     TOBN(0xc95c4baf, 0xbc1a6dea), TOBN(0xfdd0e2bf, 0x172aafdb),
+     TOBN(0x40373cbc, 0x8235c41a), TOBN(0x14303f21, 0xfb6f41d5),
+     TOBN(0xba063621, 0x0408f237), TOBN(0xcad3b09a, 0xecd2d1ed),
+     TOBN(0x4667855a, 0x52abb6a2), TOBN(0xba9157dc, 0xaa8b417b),
+     TOBN(0xfe7f3507, 0x4f013efb), TOBN(0x1b112c4b, 0xaa38c4a2),
+     TOBN(0xa1406a60, 0x9ba64345), TOBN(0xe53cba33, 0x6993c80b),
+     TOBN(0x45466063, 0xded40d23), TOBN(0x3d5f1f4d, 0x54908e25),
+     TOBN(0x9ebefe62, 0x403c3c31), TOBN(0x274ea0b5, 0x0672a624),
+     TOBN(0xff818d99, 0x451d1b71), TOBN(0x80e82643, 0x8f79cf79),
+     TOBN(0xa165df13, 0x73ce37f5), TOBN(0xa744ef4f, 0xfe3a21fd),
+     TOBN(0x73f1e7f5, 0xcf551396), TOBN(0xc616898e, 0x868c676b),
+     TOBN(0x671c28c7, 0x8c442c36), TOBN(0xcfe5e558, 0x5e0a317d),
+     TOBN(0x1242d818, 0x7051f476), TOBN(0x56fad2a6, 0x14f03442),
+     TOBN(0x262068bc, 0x0a44d0f6), TOBN(0xdfa2cd6e, 0xce6edf4e),
+     TOBN(0x0f43813a, 0xd15d1517), TOBN(0x61214cb2, 0x377d44f5),
+     TOBN(0xd399aa29, 0xc639b35f), TOBN(0x42136d71, 0x54c51c19),
+     TOBN(0x9774711b, 0x08417221), TOBN(0x0a5546b3, 0x52545a57),
+     TOBN(0x80624c41, 0x1150582d), TOBN(0x9ec5c418, 0xfbc555bc),
+     TOBN(0x2c87dcad, 0x771849f1), TOBN(0xb0c932c5, 0x01d7bf6f),
+     TOBN(0x6aa5cd3e, 0x89116eb2), TOBN(0xd378c25a, 0x51ca7bd3),
+     TOBN(0xc612a0da, 0x9e6e3e31), TOBN(0x0417a54d, 0xb68ad5d0),
+     TOBN(0x00451e4a, 0x22c6edb8), TOBN(0x9fbfe019, 0xb42827ce),
+     TOBN(0x2fa92505, 0xba9384a2), TOBN(0x21b8596e, 0x64ad69c1),
+     TOBN(0x8f4fcc49, 0x983b35a6), TOBN(0xde093760, 0x72754672),
+     TOBN(0x2f14ccc8, 0xf7bffe6d), TOBN(0x27566bff, 0x5d94263d),
+     TOBN(0xb5b4e9c6, 0x2df3ec30), TOBN(0x94f1d7d5, 0x3e6ea6ba),
+     TOBN(0x97b7851a, 0xaaca5e9b), TOBN(0x518aa521, 0x56713b97),
+     TOBN(0x3357e8c7, 0x150a61f6), TOBN(0x7842e7e2, 0xec2c2b69),
+     TOBN(0x8dffaf65, 0x6868a548), TOBN(0xd963bd82, 0xe068fc81),
+     TOBN(0x64da5c8b, 0x65917733), TOBN(0x927090ff, 0x7b247328),}
+    ,
+    {TOBN(0x214bc9a7, 0xd298c241), TOBN(0xe3b697ba, 0x56807cfd),
+     TOBN(0xef1c7802, 0x4564eadb), TOBN(0xdde8cdcf, 0xb48149c5),
+     TOBN(0x946bf0a7, 0x5a4d2604), TOBN(0x27154d7f, 0x6c1538af),
+     TOBN(0x95cc9230, 0xde5b1fcc), TOBN(0xd88519e9, 0x66864f82),
+     TOBN(0xb828dd1a, 0x7cb1282c), TOBN(0xa08d7626, 0xbe46973a),
+     TOBN(0x6baf8d40, 0xe708d6b2), TOBN(0x72571fa1, 0x4daeb3f3),
+     TOBN(0x85b1732f, 0xf22dfd98), TOBN(0x87ab01a7, 0x0087108d),
+     TOBN(0xaaaafea8, 0x5988207a), TOBN(0xccc832f8, 0x69f00755),
+     TOBN(0x964d950e, 0x36ff3bf0), TOBN(0x8ad20f6f, 0xf0b34638),
+     TOBN(0x4d9177b3, 0xb5d7585f), TOBN(0xcf839760, 0xef3f019f),
+     TOBN(0x582fc5b3, 0x8288c545), TOBN(0x2f8e4e9b, 0x13116bd1),
+     TOBN(0xf91e1b2f, 0x332120ef), TOBN(0xcf568724, 0x2a17dd23),
+     TOBN(0x488f1185, 0xca8d9d1a), TOBN(0xadf2c77d, 0xd987ded2),
+     TOBN(0x5f3039f0, 0x60c46124), TOBN(0xe5d70b75, 0x71e095f4),
+     TOBN(0x82d58650, 0x6260e70f), TOBN(0x39d75ea7, 0xf750d105),
+     TOBN(0x8cf3d0b1, 0x75bac364), TOBN(0xf3a7564d, 0x21d01329),
+     TOBN(0x182f04cd, 0x2f52d2a7), TOBN(0x4fde149a, 0xe2df565a),
+     TOBN(0xb80c5eec, 0xa79fb2f7), TOBN(0xab491d7b, 0x22ddc897),
+     TOBN(0x99d76c18, 0xc6312c7f), TOBN(0xca0d5f3d, 0x6aa41a57),
+     TOBN(0x71207325, 0xd15363a0), TOBN(0xe82aa265, 0xbeb252c2),
+     TOBN(0x94ab4700, 0xec3128c2), TOBN(0x6c76d862, 0x8e383f49),
+     TOBN(0xdc36b150, 0xc03024eb), TOBN(0xfb439477, 0x53daac69),
+     TOBN(0xfc68764a, 0x8dc79623), TOBN(0x5b86995d, 0xb440fbb2),
+     TOBN(0xd66879bf, 0xccc5ee0d), TOBN(0x05228942, 0x95aa8bd3),
+     TOBN(0xb51a40a5, 0x1e6a75c1), TOBN(0x24327c76, 0x0ea7d817),
+     TOBN(0x06630182, 0x07774597), TOBN(0xd6fdbec3, 0x97fa7164),
+     TOBN(0x20c99dfb, 0x13c90f48), TOBN(0xd6ac5273, 0x686ef263),
+     TOBN(0xc6a50bdc, 0xfef64eeb), TOBN(0xcd87b281, 0x86fdfc32),
+     TOBN(0xb24aa43e, 0x3fcd3efc), TOBN(0xdd26c034, 0xb8088e9a),
+     TOBN(0xa5ef4dc9, 0xbd3d46ea), TOBN(0xa2f99d58, 0x8a4c6a6f),
+     TOBN(0xddabd355, 0x2f1da46c), TOBN(0x72c3f8ce, 0x1afacdd1),
+     TOBN(0xd90c4eee, 0x92d40578), TOBN(0xd28bb41f, 0xca623b94),
+     TOBN(0x50fc0711, 0x745edc11), TOBN(0x9dd9ad7d, 0x3dc87558),
+     TOBN(0xce6931fb, 0xb49d1e64), TOBN(0x6c77a0a2, 0xc98bd0f9),
+     TOBN(0x62b9a629, 0x6baf7cb1), TOBN(0xcf065f91, 0xccf72d22),
+     TOBN(0x7203cce9, 0x79639071), TOBN(0x09ae4885, 0xf9cb732f),
+     TOBN(0x5e7c3bec, 0xee8314f3), TOBN(0x1c068aed, 0xdbea298f),
+     TOBN(0x08d381f1, 0x7c80acec), TOBN(0x03b56be8, 0xe330495b),
+     TOBN(0xaeffb8f2, 0x9222882d), TOBN(0x95ff38f6, 0xc4af8bf7),
+     TOBN(0x50e32d35, 0x1fc57d8c), TOBN(0x6635be52, 0x17b444f0),
+     TOBN(0x04d15276, 0xa5177900), TOBN(0x4e1dbb47, 0xf6858752),
+     TOBN(0x5b475622, 0xc615796c), TOBN(0xa6fa0387, 0x691867bf),
+     TOBN(0xed7f5d56, 0x2844c6d0), TOBN(0xc633cf9b, 0x03a2477d),
+     TOBN(0xf6be5c40, 0x2d3721d6), TOBN(0xaf312eb7, 0xe9fd68e6),
+     TOBN(0x242792d2, 0xe7417ce1), TOBN(0xff42bc71, 0x970ee7f5),
+     TOBN(0x1ff4dc6d, 0x5c67a41e), TOBN(0x77709b7b, 0x20882a58),
+     TOBN(0x3554731d, 0xbe217f2c), TOBN(0x2af2a8cd, 0x5bb72177),
+     TOBN(0x58eee769, 0x591dd059), TOBN(0xbb2930c9, 0x4bba6477),
+     TOBN(0x863ee047, 0x7d930cfc), TOBN(0x4c262ad1, 0x396fd1f4),
+     TOBN(0xf4765bc8, 0x039af7e1), TOBN(0x2519834b, 0x5ba104f6),
+     TOBN(0x7cd61b4c, 0xd105f961), TOBN(0xa5415da5, 0xd63bca54),
+     TOBN(0x778280a0, 0x88a1f17c), TOBN(0xc4968949, 0x2329512c),
+     TOBN(0x174a9126, 0xcecdaa7a), TOBN(0xfc8c7e0e, 0x0b13247b),
+     TOBN(0x29c110d2, 0x3484c1c4), TOBN(0xf8eb8757, 0x831dfc3b),
+     TOBN(0x022f0212, 0xc0067452), TOBN(0x3f6f69ee, 0x7b9b926c),
+     TOBN(0x09032da0, 0xef42daf4), TOBN(0x79f00ade, 0x83f80de4),
+     TOBN(0x6210db71, 0x81236c97), TOBN(0x74f7685b, 0x3ee0781f),
+     TOBN(0x4df7da7b, 0xa3e41372), TOBN(0x2aae38b1, 0xb1a1553e),
+     TOBN(0x1688e222, 0xf6dd9d1b), TOBN(0x57695448, 0x5b8b6487),
+     TOBN(0x478d2127, 0x4b2edeaa), TOBN(0xb2818fa5, 0x1e85956a),
+     TOBN(0x1e6addda, 0xf176f2c0), TOBN(0x01ca4604, 0xe2572658),
+     TOBN(0x0a404ded, 0x85342ffb), TOBN(0x8cf60f96, 0x441838d6),
+     TOBN(0x9bbc691c, 0xc9071c4a), TOBN(0xfd588744, 0x34442803),
+     TOBN(0x97101c85, 0x809c0d81), TOBN(0xa7fb754c, 0x8c456f7f),
+     TOBN(0xc95f3c5c, 0xd51805e1), TOBN(0xab4ccd39, 0xb299dca8),
+     TOBN(0x3e03d20b, 0x47eaf500), TOBN(0xfa3165c1, 0xd7b80893),
+     TOBN(0x005e8b54, 0xe160e552), TOBN(0xdc4972ba, 0x9019d11f),
+     TOBN(0x21a6972e, 0x0c9a4a7a), TOBN(0xa52c258f, 0x37840fd7),
+     TOBN(0xf8559ff4, 0xc1e99d81), TOBN(0x08e1a7d6, 0xa3c617c0),
+     TOBN(0xb398fd43, 0x248c6ba7), TOBN(0x6ffedd91, 0xd1283794),
+     TOBN(0x8a6a59d2, 0xd629d208), TOBN(0xa9d141d5, 0x3490530e),
+     TOBN(0x42f6fc18, 0x38505989), TOBN(0x09bf250d, 0x479d94ee),
+     TOBN(0x223ad3b1, 0xb3822790), TOBN(0x6c5926c0, 0x93b8971c),
+     TOBN(0x609efc7e, 0x75f7fa62), TOBN(0x45d66a6d, 0x1ec2d989),
+     TOBN(0x4422d663, 0x987d2792), TOBN(0x4a73caad, 0x3eb31d2b),
+     TOBN(0xf06c2ac1, 0xa32cb9e6), TOBN(0xd9445c5f, 0x91aeba84),
+     TOBN(0x6af7a1d5, 0xaf71013f), TOBN(0xe68216e5, 0x0bedc946),
+     TOBN(0xf4cba30b, 0xd27370a0), TOBN(0x7981afbf, 0x870421cc),
+     TOBN(0x02496a67, 0x9449f0e1), TOBN(0x86cfc4be, 0x0a47edae),
+     TOBN(0x3073c936, 0xb1feca22), TOBN(0xf5694612, 0x03f8f8fb),
+     TOBN(0xd063b723, 0x901515ea), TOBN(0x4c6c77a5, 0x749cf038),
+     TOBN(0x6361e360, 0xab9e5059), TOBN(0x596cf171, 0xa76a37c0),
+     TOBN(0x800f53fa, 0x6530ae7a), TOBN(0x0f5e631e, 0x0792a7a6),
+     TOBN(0x5cc29c24, 0xefdb81c9), TOBN(0xa269e868, 0x3f9c40ba),
+     TOBN(0xec14f9e1, 0x2cb7191e), TOBN(0x78ea1bd8, 0xe5b08ea6),
+     TOBN(0x3c65aa9b, 0x46332bb9), TOBN(0x84cc22b3, 0xbf80ce25),
+     TOBN(0x0098e9e9, 0xd49d5bf1), TOBN(0xcd4ec1c6, 0x19087da4),
+     TOBN(0x3c9d07c5, 0xaef6e357), TOBN(0x839a0268, 0x9f8f64b8),
+     TOBN(0xc5e9eb62, 0xc6d8607f), TOBN(0x759689f5, 0x6aa995e4),
+     TOBN(0x70464669, 0xbbb48317), TOBN(0x921474bf, 0xe402417d),
+     TOBN(0xcabe135b, 0x2a354c8c), TOBN(0xd51e52d2, 0x812fa4b5),
+     TOBN(0xec741096, 0x53311fe8), TOBN(0x4f774535, 0xb864514b),
+     TOBN(0xbcadd671, 0x5bde48f8), TOBN(0xc9703873, 0x2189bc7d),
+     TOBN(0x5d45299e, 0xc709ee8a), TOBN(0xd1287ee2, 0x845aaff8),
+     TOBN(0x7d1f8874, 0xdb1dbf1f), TOBN(0xea46588b, 0x990c88d6),
+     TOBN(0x60ba649a, 0x84368313), TOBN(0xd5fdcbce, 0x60d543ae),
+     TOBN(0x90b46d43, 0x810d5ab0), TOBN(0x6739d8f9, 0x04d7e5cc),
+     TOBN(0x021c1a58, 0x0d337c33), TOBN(0x00a61162, 0x68e67c40),
+     TOBN(0x95ef413b, 0x379f0a1f), TOBN(0xfe126605, 0xe9e2ab95),
+     TOBN(0x67578b85, 0x2f5f199c), TOBN(0xf5c00329, 0x2cb84913),
+     TOBN(0xf7956430, 0x37577dd8), TOBN(0x83b82af4, 0x29c5fe88),
+     TOBN(0x9c1bea26, 0xcdbdc132), TOBN(0x589fa086, 0x9c04339e),
+     TOBN(0x033e9538, 0xb13799df), TOBN(0x85fa8b21, 0xd295d034),
+     TOBN(0xdf17f73f, 0xbd9ddcca), TOBN(0xf32bd122, 0xddb66334),
+     TOBN(0x55ef88a7, 0x858b044c), TOBN(0x1f0d69c2, 0x5aa9e397),
+     TOBN(0x55fd9cc3, 0x40d85559), TOBN(0xc774df72, 0x7785ddb2),
+     TOBN(0x5dcce9f6, 0xd3bd2e1c), TOBN(0xeb30da20, 0xa85dfed0),
+     TOBN(0x5ed7f5bb, 0xd3ed09c4), TOBN(0x7d42a35c, 0x82a9c1bd),
+     TOBN(0xcf3de995, 0x9890272d), TOBN(0x75f3432a, 0x3e713a10),
+     TOBN(0x5e13479f, 0xe28227b8), TOBN(0xb8561ea9, 0xfefacdc8),
+     TOBN(0xa6a297a0, 0x8332aafd), TOBN(0x9b0d8bb5, 0x73809b62),
+     TOBN(0xd2fa1cfd, 0x0c63036f), TOBN(0x7a16eb55, 0xbd64bda8),
+     TOBN(0x3f5cf5f6, 0x78e62ddc), TOBN(0x2267c454, 0x07fd752b),
+     TOBN(0x5e361b6b, 0x5e437bbe), TOBN(0x95c59501, 0x8354e075),
+     TOBN(0xec725f85, 0xf2b254d9), TOBN(0x844b617d, 0x2cb52b4e),
+     TOBN(0xed8554f5, 0xcf425fb5), TOBN(0xab67703e, 0x2af9f312),
+     TOBN(0x4cc34ec1, 0x3cf48283), TOBN(0xb09daa25, 0x9c8a705e),
+     TOBN(0xd1e9d0d0, 0x5b7d4f84), TOBN(0x4df6ef64, 0xdb38929d),
+     TOBN(0xe16b0763, 0xaa21ba46), TOBN(0xc6b1d178, 0xa293f8fb),
+     TOBN(0x0ff5b602, 0xd520aabf), TOBN(0x94d671bd, 0xc339397a),
+     TOBN(0x7c7d98cf, 0x4f5792fa), TOBN(0x7c5e0d67, 0x11215261),
+     TOBN(0x9b19a631, 0xa7c5a6d4), TOBN(0xc8511a62, 0x7a45274d),
+     TOBN(0x0c16621c, 0xa5a60d99), TOBN(0xf7fbab88, 0xcf5e48cb),
+     TOBN(0xab1e6ca2, 0xf7ddee08), TOBN(0x83bd08ce, 0xe7867f3c),
+     TOBN(0xf7e48e8a, 0x2ac13e27), TOBN(0x4494f6df, 0x4eb1a9f5),
+     TOBN(0xedbf84eb, 0x981f0a62), TOBN(0x49badc32, 0x536438f0),
+     TOBN(0x50bea541, 0x004f7571), TOBN(0xbac67d10, 0xdf1c94ee),
+     TOBN(0x253d73a1, 0xb727bc31), TOBN(0xb3d01cf2, 0x30686e28),
+     TOBN(0x51b77b1b, 0x55fd0b8b), TOBN(0xa099d183, 0xfeec3173),
+     TOBN(0x202b1fb7, 0x670e72b7), TOBN(0xadc88b33, 0xa8e1635f),
+     TOBN(0x34e8216a, 0xf989d905), TOBN(0xc2e68d20, 0x29b58d01),
+     TOBN(0x11f81c92, 0x6fe55a93), TOBN(0x15f1462a, 0x8f296f40),
+     TOBN(0x1915d375, 0xea3d62f2), TOBN(0xa17765a3, 0x01c8977d),
+     TOBN(0x7559710a, 0xe47b26f6), TOBN(0xe0bd29c8, 0x535077a5),
+     TOBN(0x615f976d, 0x08d84858), TOBN(0x370dfe85, 0x69ced5c1),
+     TOBN(0xbbc7503c, 0xa734fa56), TOBN(0xfbb9f1ec, 0x91ac4574),
+     TOBN(0x95d7ec53, 0x060dd7ef), TOBN(0xeef2dacd, 0x6e657979),
+     TOBN(0x54511af3, 0xe2a08235), TOBN(0x1e324aa4, 0x1f4aea3d),
+     TOBN(0x550e7e71, 0xe6e67671), TOBN(0xbccd5190, 0xbf52faf7),
+     TOBN(0xf880d316, 0x223cc62a), TOBN(0x0d402c7e, 0x2b32eb5d),
+     TOBN(0xa40bc039, 0x306a5a3b), TOBN(0x4e0a41fd, 0x96783a1b),
+     TOBN(0xa1e8d39a, 0x0253cdd4), TOBN(0x6480be26, 0xc7388638),
+     TOBN(0xee365e1d, 0x2285f382), TOBN(0x188d8d8f, 0xec0b5c36),
+     TOBN(0x34ef1a48, 0x1f0f4d82), TOBN(0x1a8f43e1, 0xa487d29a),
+     TOBN(0x8168226d, 0x77aefb3a), TOBN(0xf69a751e, 0x1e72c253),
+     TOBN(0x8e04359a, 0xe9594df1), TOBN(0x475ffd7d, 0xd14c0467),
+     TOBN(0xb5a2c2b1, 0x3844e95c), TOBN(0x85caf647, 0xdd12ef94),
+     TOBN(0x1ecd2a9f, 0xf1063d00), TOBN(0x1dd2e229, 0x23843311),
+     TOBN(0x38f0e09d, 0x73d17244), TOBN(0x3ede7746, 0x8fc653f1),
+     TOBN(0xae4459f5, 0xdc20e21c), TOBN(0x00db2ffa, 0x6a8599ea),
+     TOBN(0x11682c39, 0x30cfd905), TOBN(0x4934d074, 0xa5c112a6),
+     TOBN(0xbdf063c5, 0x568bfe95), TOBN(0x779a440a, 0x016c441a),
+     TOBN(0x0c23f218, 0x97d6fbdc), TOBN(0xd3a5cd87, 0xe0776aac),
+     TOBN(0xcee37f72, 0xd712e8db), TOBN(0xfb28c70d, 0x26f74e8d),
+     TOBN(0xffe0c728, 0xb61301a0), TOBN(0xa6282168, 0xd3724354),
+     TOBN(0x7ff4cb00, 0x768ffedc), TOBN(0xc51b3088, 0x03b02de9),
+     TOBN(0xa5a8147c, 0x3902dda5), TOBN(0x35d2f706, 0xfe6973b4),
+     TOBN(0x5ac2efcf, 0xc257457e), TOBN(0x933f48d4, 0x8700611b),
+     TOBN(0xc365af88, 0x4912beb2), TOBN(0x7f5a4de6, 0x162edf94),
+     TOBN(0xc646ba7c, 0x0c32f34b), TOBN(0x632c6af3, 0xb2091074),
+     TOBN(0x58d4f2e3, 0x753e43a9), TOBN(0x70e1d217, 0x24d4e23f),
+     TOBN(0xb24bf729, 0xafede6a6), TOBN(0x7f4a94d8, 0x710c8b60),
+     TOBN(0xaad90a96, 0x8d4faa6a), TOBN(0xd9ed0b32, 0xb066b690),
+     TOBN(0x52fcd37b, 0x78b6dbfd), TOBN(0x0b64615e, 0x8bd2b431),
+     TOBN(0x228e2048, 0xcfb9fad5), TOBN(0xbeaa386d, 0x240b76bd),
+     TOBN(0x2d6681c8, 0x90dad7bc), TOBN(0x3e553fc3, 0x06d38f5e),
+     TOBN(0xf27cdb9b, 0x9d5f9750), TOBN(0x3e85c52a, 0xd28c5b0e),
+     TOBN(0x190795af, 0x5247c39b), TOBN(0x547831eb, 0xbddd6828),
+     TOBN(0xf327a227, 0x4a82f424), TOBN(0x36919c78, 0x7e47f89d),
+     TOBN(0xe4783919, 0x43c7392c), TOBN(0xf101b9aa, 0x2316fefe),
+     TOBN(0xbcdc9e9c, 0x1c5009d2), TOBN(0xfb55ea13, 0x9cd18345),
+     TOBN(0xf5b5e231, 0xa3ce77c7), TOBN(0xde6b4527, 0xd2f2cb3d),
+     TOBN(0x10f6a333, 0x9bb26f5f), TOBN(0x1e85db8e, 0x044d85b6),
+     TOBN(0xc3697a08, 0x94197e54), TOBN(0x65e18cc0, 0xa7cb4ea8),
+     TOBN(0xa38c4f50, 0xa471fe6e), TOBN(0xf031747a, 0x2f13439c),
+     TOBN(0x53c4a6ba, 0xc007318b), TOBN(0xa8da3ee5, 0x1deccb3d),
+     TOBN(0x0555b31c, 0x558216b1), TOBN(0x90c7810c, 0x2f79e6c2),
+     TOBN(0x9b669f4d, 0xfe8eed3c), TOBN(0x70398ec8, 0xe0fac126),
+     TOBN(0xa96a449e, 0xf701b235), TOBN(0x0ceecdb3, 0xeb94f395),
+     TOBN(0x285fc368, 0xd0cb7431), TOBN(0x0d37bb52, 0x16a18c64),
+     TOBN(0x05110d38, 0xb880d2dd), TOBN(0xa60f177b, 0x65930d57),
+     TOBN(0x7da34a67, 0xf36235f5), TOBN(0x47f5e17c, 0x183816b9),
+     TOBN(0xc7664b57, 0xdb394af4), TOBN(0x39ba215d, 0x7036f789),
+     TOBN(0x46d2ca0e, 0x2f27b472), TOBN(0xc42647ee, 0xf73a84b7),
+     TOBN(0x44bc7545, 0x64488f1d), TOBN(0xaa922708, 0xf4cf85d5),
+     TOBN(0x721a01d5, 0x53e4df63), TOBN(0x649c0c51, 0x5db46ced),
+     TOBN(0x6bf0d64e, 0x3cffcb6c), TOBN(0xe3bf93fe, 0x50f71d96),
+     TOBN(0x75044558, 0xbcc194a0), TOBN(0x16ae3372, 0x6afdc554),
+     TOBN(0xbfc01adf, 0x5ca48f3f), TOBN(0x64352f06, 0xe22a9b84),
+     TOBN(0xcee54da1, 0xc1099e4a), TOBN(0xbbda54e8, 0xfa1b89c0),
+     TOBN(0x166a3df5, 0x6f6e55fb), TOBN(0x1ca44a24, 0x20176f88),
+     TOBN(0x936afd88, 0xdfb7b5ff), TOBN(0xe34c2437, 0x8611d4a0),
+     TOBN(0x7effbb75, 0x86142103), TOBN(0x6704ba1b, 0x1f34fc4d),
+     TOBN(0x7c2a468f, 0x10c1b122), TOBN(0x36b3a610, 0x8c6aace9),
+     TOBN(0xabfcc0a7, 0x75a0d050), TOBN(0x066f9197, 0x3ce33e32),
+     TOBN(0xce905ef4, 0x29fe09be), TOBN(0x89ee25ba, 0xa8376351),
+     TOBN(0x2a3ede22, 0xfd29dc76), TOBN(0x7fd32ed9, 0x36f17260),
+     TOBN(0x0cadcf68, 0x284b4126), TOBN(0x63422f08, 0xa7951fc8),
+     TOBN(0x562b24f4, 0x0807e199), TOBN(0xfe9ce5d1, 0x22ad4490),
+     TOBN(0xc2f51b10, 0x0db2b1b4), TOBN(0xeb3613ff, 0xe4541d0d),
+     TOBN(0xbd2c4a05, 0x2680813b), TOBN(0x527aa55d, 0x561b08d6),
+     TOBN(0xa9f8a40e, 0xa7205558), TOBN(0xe3eea56f, 0x243d0bec),
+     TOBN(0x7b853817, 0xa0ff58b3), TOBN(0xb67d3f65, 0x1a69e627),
+     TOBN(0x0b76bbb9, 0xa869b5d6), TOBN(0xa3afeb82, 0x546723ed),
+     TOBN(0x5f24416d, 0x3e554892), TOBN(0x8413b53d, 0x430e2a45),
+     TOBN(0x99c56aee, 0x9032a2a0), TOBN(0x09432bf6, 0xeec367b1),
+     TOBN(0x552850c6, 0xdaf0ecc1), TOBN(0x49ebce55, 0x5bc92048),
+     TOBN(0xdfb66ba6, 0x54811307), TOBN(0x1b84f797, 0x6f298597),
+     TOBN(0x79590481, 0x8d1d7a0d), TOBN(0xd9fabe03, 0x3a6fa556),
+     TOBN(0xa40f9c59, 0xba9e5d35), TOBN(0xcb1771c1, 0xf6247577),
+     TOBN(0x542a47ca, 0xe9a6312b), TOBN(0xa34b3560, 0x552dd8c5),
+     TOBN(0xfdf94de0, 0x0d794716), TOBN(0xd46124a9, 0x9c623094),
+     TOBN(0x56b7435d, 0x68afe8b4), TOBN(0x27f20540, 0x6c0d8ea1),
+     TOBN(0x12b77e14, 0x73186898), TOBN(0xdbc3dd46, 0x7479490f),
+     TOBN(0x951a9842, 0xc03b0c05), TOBN(0x8b1b3bb3, 0x7921bc96),
+     TOBN(0xa573b346, 0x2b202e0a), TOBN(0x77e4665d, 0x47254d56),
+     TOBN(0x08b70dfc, 0xd23e3984), TOBN(0xab86e8bc, 0xebd14236),
+     TOBN(0xaa3e07f8, 0x57114ba7), TOBN(0x5ac71689, 0xab0ef4f2),
+     TOBN(0x88fca384, 0x0139d9af), TOBN(0x72733f88, 0x76644af0),
+     TOBN(0xf122f72a, 0x65d74f4a), TOBN(0x13931577, 0xa5626c7a),
+     TOBN(0xd5b5d9eb, 0x70f8d5a4), TOBN(0x375adde7, 0xd7bbb228),
+     TOBN(0x31e88b86, 0x0c1c0b32), TOBN(0xd1f568c4, 0x173edbaa),
+     TOBN(0x1592fc83, 0x5459df02), TOBN(0x2beac0fb, 0x0fcd9a7e),
+     TOBN(0xb0a6fdb8, 0x1b473b0a), TOBN(0xe3224c6f, 0x0fe8fc48),
+     TOBN(0x680bd00e, 0xe87edf5b), TOBN(0x30385f02, 0x20e77cf5),
+     TOBN(0xe9ab98c0, 0x4d42d1b2), TOBN(0x72d191d2, 0xd3816d77),
+     TOBN(0x1564daca, 0x0917d9e5), TOBN(0x394eab59, 0x1f8fed7f),
+     TOBN(0xa209aa8d, 0x7fbb3896), TOBN(0x5564f3b9, 0xbe6ac98e),
+     TOBN(0xead21d05, 0xd73654ef), TOBN(0x68d1a9c4, 0x13d78d74),
+     TOBN(0x61e01708, 0x6d4973a0), TOBN(0x83da3500, 0x46e6d32a),
+     TOBN(0x6a3dfca4, 0x68ae0118), TOBN(0xa1b9a4c9, 0xd02da069),
+     TOBN(0x0b2ff9c7, 0xebab8302), TOBN(0x98af07c3, 0x944ba436),
+     TOBN(0x85997326, 0x995f0f9f), TOBN(0x467fade0, 0x71b58bc6),
+     TOBN(0x47e4495a, 0xbd625a2b), TOBN(0xfdd2d01d, 0x33c3b8cd),
+     TOBN(0x2c38ae28, 0xc693f9fa), TOBN(0x48622329, 0x348f7999),
+     TOBN(0x97bf738e, 0x2161f583), TOBN(0x15ee2fa7, 0x565e8cc9),
+     TOBN(0xa1a5c845, 0x5777e189), TOBN(0xcc10bee0, 0x456f2829),
+     TOBN(0x8ad95c56, 0xda762bd5), TOBN(0x152e2214, 0xe9d91da8),
+     TOBN(0x975b0e72, 0x7cb23c74), TOBN(0xfd5d7670, 0xa90c66df),
+     TOBN(0xb5b5b8ad, 0x225ffc53), TOBN(0xab6dff73, 0xfaded2ae),
+     TOBN(0xebd56781, 0x6f4cbe9d), TOBN(0x0ed8b249, 0x6a574bd7),
+     TOBN(0x41c246fe, 0x81a881fa), TOBN(0x91564805, 0xc3db9c70),
+     TOBN(0xd7c12b08, 0x5b862809), TOBN(0x1facd1f1, 0x55858d7b),
+     TOBN(0x7693747c, 0xaf09e92a), TOBN(0x3b69dcba, 0x189a425f),
+     TOBN(0x0be28e9f, 0x967365ef), TOBN(0x57300eb2, 0xe801f5c9),
+     TOBN(0x93b8ac6a, 0xd583352f), TOBN(0xa2cf1f89, 0xcd05b2b7),
+     TOBN(0x7c0c9b74, 0x4dcc40cc), TOBN(0xfee38c45, 0xada523fb),
+     TOBN(0xb49a4dec, 0x1099cc4d), TOBN(0x325c377f, 0x69f069c6),
+     TOBN(0xe12458ce, 0x476cc9ff), TOBN(0x580e0b6c, 0xc6d4cb63),
+     TOBN(0xd561c8b7, 0x9072289b), TOBN(0x0377f264, 0xa619e6da),
+     TOBN(0x26685362, 0x88e591a5), TOBN(0xa453a7bd, 0x7523ca2b),
+     TOBN(0x8a9536d2, 0xc1df4533), TOBN(0xc8e50f2f, 0xbe972f79),
+     TOBN(0xd433e50f, 0x6d3549cf), TOBN(0x6f33696f, 0xfacd665e),
+     TOBN(0x695bfdac, 0xce11fcb4), TOBN(0x810ee252, 0xaf7c9860),
+     TOBN(0x65450fe1, 0x7159bb2c), TOBN(0xf7dfbebe, 0x758b357b),
+     TOBN(0x2b057e74, 0xd69fea72), TOBN(0xd485717a, 0x92731745),}
+    ,
+    {TOBN(0x896c42e8, 0xee36860c), TOBN(0xdaf04dfd, 0x4113c22d),
+     TOBN(0x1adbb7b7, 0x44104213), TOBN(0xe5fd5fa1, 0x1fd394ea),
+     TOBN(0x68235d94, 0x1a4e0551), TOBN(0x6772cfbe, 0x18d10151),
+     TOBN(0x276071e3, 0x09984523), TOBN(0xe4e879de, 0x5a56ba98),
+     TOBN(0xaaafafb0, 0x285b9491), TOBN(0x01a0be88, 0x1e4c705e),
+     TOBN(0xff1d4f5d, 0x2ad9caab), TOBN(0x6e349a4a, 0xc37a233f),
+     TOBN(0xcf1c1246, 0x4a1c6a16), TOBN(0xd99e6b66, 0x29383260),
+     TOBN(0xea3d4366, 0x5f6d5471), TOBN(0x36974d04, 0xff8cc89b),
+     TOBN(0xc26c49a1, 0xcfe89d80), TOBN(0xb42c026d, 0xda9c8371),
+     TOBN(0xca6c013a, 0xdad066d2), TOBN(0xfb8f7228, 0x56a4f3ee),
+     TOBN(0x08b579ec, 0xd850935b), TOBN(0x34c1a74c, 0xd631e1b3),
+     TOBN(0xcb5fe596, 0xac198534), TOBN(0x39ff21f6, 0xe1f24f25),
+     TOBN(0x27f29e14, 0x8f929057), TOBN(0x7a64ae06, 0xc0c853df),
+     TOBN(0x256cd183, 0x58e9c5ce), TOBN(0x9d9cce82, 0xded092a5),
+     TOBN(0xcc6e5979, 0x6e93b7c7), TOBN(0xe1e47092, 0x31bb9e27),
+     TOBN(0xb70b3083, 0xaa9e29a0), TOBN(0xbf181a75, 0x3785e644),
+     TOBN(0xf53f2c65, 0x8ead09f7), TOBN(0x1335e1d5, 0x9780d14d),
+     TOBN(0x69cc20e0, 0xcd1b66bc), TOBN(0x9b670a37, 0xbbe0bfc8),
+     TOBN(0xce53dc81, 0x28efbeed), TOBN(0x0c74e77c, 0x8326a6e5),
+     TOBN(0x3604e0d2, 0xb88e9a63), TOBN(0xbab38fca, 0x13dc2248),
+     TOBN(0x8ed6e8c8, 0x5c0a3f1e), TOBN(0xbcad2492, 0x7c87c37f),
+     TOBN(0xfdfb62bb, 0x9ee3b78d), TOBN(0xeba8e477, 0xcbceba46),
+     TOBN(0x37d38cb0, 0xeeaede4b), TOBN(0x0bc498e8, 0x7976deb6),
+     TOBN(0xb2944c04, 0x6b6147fb), TOBN(0x8b123f35, 0xf71f9609),
+     TOBN(0xa155dcc7, 0xde79dc24), TOBN(0xf1168a32, 0x558f69cd),
+     TOBN(0xbac21595, 0x0d1850df), TOBN(0x15c8295b, 0xb204c848),
+     TOBN(0xf661aa36, 0x7d8184ff), TOBN(0xc396228e, 0x30447bdb),
+     TOBN(0x11cd5143, 0xbde4a59e), TOBN(0xe3a26e3b, 0x6beab5e6),
+     TOBN(0xd3b3a13f, 0x1402b9d0), TOBN(0x573441c3, 0x2c7bc863),
+     TOBN(0x4b301ec4, 0x578c3e6e), TOBN(0xc26fc9c4, 0x0adaf57e),
+     TOBN(0x96e71bfd, 0x7493cea3), TOBN(0xd05d4b3f, 0x1af81456),
+     TOBN(0xdaca2a8a, 0x6a8c608f), TOBN(0x53ef07f6, 0x0725b276),
+     TOBN(0x07a5fbd2, 0x7824fc56), TOBN(0x34675218, 0x13289077),
+     TOBN(0x5bf69fd5, 0xe0c48349), TOBN(0xa613ddd3, 0xb6aa7875),
+     TOBN(0x7f78c19c, 0x5450d866), TOBN(0x46f4409c, 0x8f84a481),
+     TOBN(0x9f1d1928, 0x90fce239), TOBN(0x016c4168, 0xb2ce44b9),
+     TOBN(0xbae023f0, 0xc7435978), TOBN(0xb152c888, 0x20e30e19),
+     TOBN(0x9c241645, 0xe3fa6faf), TOBN(0x735d95c1, 0x84823e60),
+     TOBN(0x03197573, 0x03955317), TOBN(0x0b4b02a9, 0xf03b4995),
+     TOBN(0x076bf559, 0x70274600), TOBN(0x32c5cc53, 0xaaf57508),
+     TOBN(0xe8af6d1f, 0x60624129), TOBN(0xb7bc5d64, 0x9a5e2b5e),
+     TOBN(0x3814b048, 0x5f082d72), TOBN(0x76f267f2, 0xce19677a),
+     TOBN(0x626c630f, 0xb36eed93), TOBN(0x55230cd7, 0x3bf56803),
+     TOBN(0x78837949, 0xce2736a0), TOBN(0x0d792d60, 0xaa6c55f1),
+     TOBN(0x0318dbfd, 0xd5c7c5d2), TOBN(0xb38f8da7, 0x072b342d),
+     TOBN(0x3569bddc, 0x7b8de38a), TOBN(0xf25b5887, 0xa1c94842),
+     TOBN(0xb2d5b284, 0x2946ad60), TOBN(0x854f29ad, 0xe9d1707e),
+     TOBN(0xaa5159dc, 0x2c6a4509), TOBN(0x899f94c0, 0x57189837),
+     TOBN(0xcf6adc51, 0xf4a55b03), TOBN(0x261762de, 0x35e3b2d5),
+     TOBN(0x4cc43012, 0x04827b51), TOBN(0xcd22a113, 0xc6021442),
+     TOBN(0xce2fd61a, 0x247c9569), TOBN(0x59a50973, 0xd152beca),
+     TOBN(0x6c835a11, 0x63a716d4), TOBN(0xc26455ed, 0x187dedcf),
+     TOBN(0x27f536e0, 0x49ce89e7), TOBN(0x18908539, 0xcc890cb5),
+     TOBN(0x308909ab, 0xd83c2aa1), TOBN(0xecd3142b, 0x1ab73bd3),
+     TOBN(0x6a85bf59, 0xb3f5ab84), TOBN(0x3c320a68, 0xf2bea4c6),
+     TOBN(0xad8dc538, 0x6da4541f), TOBN(0xeaf34eb0, 0xb7c41186),
+     TOBN(0x1c780129, 0x977c97c4), TOBN(0x5ff9beeb, 0xc57eb9fa),
+     TOBN(0xa24d0524, 0xc822c478), TOBN(0xfd8eec2a, 0x461cd415),
+     TOBN(0xfbde194e, 0xf027458c), TOBN(0xb4ff5319, 0x1d1be115),
+     TOBN(0x63f874d9, 0x4866d6f4), TOBN(0x35c75015, 0xb21ad0c9),
+     TOBN(0xa6b5c9d6, 0x46ac49d2), TOBN(0x42c77c0b, 0x83137aa9),
+     TOBN(0x24d000fc, 0x68225a38), TOBN(0x0f63cfc8, 0x2fe1e907),
+     TOBN(0x22d1b01b, 0xc6441f95), TOBN(0x7d38f719, 0xec8e448f),
+     TOBN(0x9b33fa5f, 0x787fb1ba), TOBN(0x94dcfda1, 0x190158df),
+     TOBN(0xc47cb339, 0x5f6d4a09), TOBN(0x6b4f355c, 0xee52b826),
+     TOBN(0x3d100f5d, 0xf51b930a), TOBN(0xf4512fac, 0x9f668f69),
+     TOBN(0x546781d5, 0x206c4c74), TOBN(0xd021d4d4, 0xcb4d2e48),
+     TOBN(0x494a54c2, 0xca085c2d), TOBN(0xf1dbaca4, 0x520850a8),
+     TOBN(0x63c79326, 0x490a1aca), TOBN(0xcb64dd9c, 0x41526b02),
+     TOBN(0xbb772591, 0xa2979258), TOBN(0x3f582970, 0x48d97846),
+     TOBN(0xd66b70d1, 0x7c213ba7), TOBN(0xc28febb5, 0xe8a0ced4),
+     TOBN(0x6b911831, 0xc10338c1), TOBN(0x0d54e389, 0xbf0126f3),
+     TOBN(0x7048d460, 0x4af206ee), TOBN(0x786c88f6, 0x77e97cb9),
+     TOBN(0xd4375ae1, 0xac64802e), TOBN(0x469bcfe1, 0xd53ec11c),
+     TOBN(0xfc9b340d, 0x47062230), TOBN(0xe743bb57, 0xc5b4a3ac),
+     TOBN(0xfe00b4aa, 0x59ef45ac), TOBN(0x29a4ef23, 0x59edf188),
+     TOBN(0x40242efe, 0xb483689b), TOBN(0x2575d3f6, 0x513ac262),
+     TOBN(0xf30037c8, 0x0ca6db72), TOBN(0xc9fcce82, 0x98864be2),
+     TOBN(0x84a112ff, 0x0149362d), TOBN(0x95e57582, 0x1c4ae971),
+     TOBN(0x1fa4b1a8, 0x945cf86c), TOBN(0x4525a734, 0x0b024a2f),
+     TOBN(0xe76c8b62, 0x8f338360), TOBN(0x483ff593, 0x28edf32b),
+     TOBN(0x67e8e90a, 0x298b1aec), TOBN(0x9caab338, 0x736d9a21),
+     TOBN(0x5c09d2fd, 0x66892709), TOBN(0x2496b4dc, 0xb55a1d41),
+     TOBN(0x93f5fb1a, 0xe24a4394), TOBN(0x08c75049, 0x6fa8f6c1),
+     TOBN(0xcaead1c2, 0xc905d85f), TOBN(0xe9d7f790, 0x0733ae57),
+     TOBN(0x24c9a65c, 0xf07cdd94), TOBN(0x7389359c, 0xa4b55931),
+     TOBN(0xf58709b7, 0x367e45f7), TOBN(0x1f203067, 0xcb7e7adc),
+     TOBN(0x82444bff, 0xc7b72818), TOBN(0x07303b35, 0xbaac8033),
+     TOBN(0x1e1ee4e4, 0xd13b7ea1), TOBN(0xe6489b24, 0xe0e74180),
+     TOBN(0xa5f2c610, 0x7e70ef70), TOBN(0xa1655412, 0xbdd10894),
+     TOBN(0x555ebefb, 0x7af4194e), TOBN(0x533c1c3c, 0x8e89bd9c),
+     TOBN(0x735b9b57, 0x89895856), TOBN(0x15fb3cd2, 0x567f5c15),
+     TOBN(0x057fed45, 0x526f09fd), TOBN(0xe8a4f10c, 0x8128240a),
+     TOBN(0x9332efc4, 0xff2bfd8d), TOBN(0x214e77a0, 0xbd35aa31),
+     TOBN(0x32896d73, 0x14faa40e), TOBN(0x767867ec, 0x01e5f186),
+     TOBN(0xc9adf8f1, 0x17a1813e), TOBN(0xcb6cda78, 0x54741795),
+     TOBN(0xb7521b6d, 0x349d51aa), TOBN(0xf56b5a9e, 0xe3c7b8e9),
+     TOBN(0xc6f1e5c9, 0x32a096df), TOBN(0x083667c4, 0xa3635024),
+     TOBN(0x365ea135, 0x18087f2f), TOBN(0xf1b8eaac, 0xd136e45d),
+     TOBN(0xc8a0e484, 0x73aec989), TOBN(0xd75a324b, 0x142c9259),
+     TOBN(0xb7b4d001, 0x01dae185), TOBN(0x45434e0b, 0x9b7a94bc),
+     TOBN(0xf54339af, 0xfbd8cb0b), TOBN(0xdcc4569e, 0xe98ef49e),
+     TOBN(0x7789318a, 0x09a51299), TOBN(0x81b4d206, 0xb2b025d8),
+     TOBN(0xf64aa418, 0xfae85792), TOBN(0x3e50258f, 0xacd7baf7),
+     TOBN(0xdce84cdb, 0x2996864b), TOBN(0xa2e67089, 0x1f485fa4),
+     TOBN(0xb28b2bb6, 0x534c6a5a), TOBN(0x31a7ec6b, 0xc94b9d39),
+     TOBN(0x1d217766, 0xd6bc20da), TOBN(0x4acdb5ec, 0x86761190),
+     TOBN(0x68726328, 0x73701063), TOBN(0x4d24ee7c, 0x2128c29b),
+     TOBN(0xc072ebd3, 0xa19fd868), TOBN(0x612e481c, 0xdb8ddd3b),
+     TOBN(0xb4e1d754, 0x1a64d852), TOBN(0x00ef95ac, 0xc4c6c4ab),
+     TOBN(0x1536d2ed, 0xaa0a6c46), TOBN(0x61294086, 0x43774790),
+     TOBN(0x54af25e8, 0x343fda10), TOBN(0x9ff9d98d, 0xfd25d6f2),
+     TOBN(0x0746af7c, 0x468b8835), TOBN(0x977a31cb, 0x730ecea7),
+     TOBN(0xa5096b80, 0xc2cf4a81), TOBN(0xaa986833, 0x6458c37a),
+     TOBN(0x6af29bf3, 0xa6bd9d34), TOBN(0x6a62fe9b, 0x33c5d854),
+     TOBN(0x50e6c304, 0xb7133b5e), TOBN(0x04b60159, 0x7d6e6848),
+     TOBN(0x4cd296df, 0x5579bea4), TOBN(0x10e35ac8, 0x5ceedaf1),
+     TOBN(0x04c4c5fd, 0xe3bcc5b1), TOBN(0x95f9ee8a, 0x89412cf9),
+     TOBN(0x2c9459ee, 0x82b6eb0f), TOBN(0x2e845765, 0x95c2aadd),
+     TOBN(0x774a84ae, 0xd327fcfe), TOBN(0xd8c93722, 0x0368d476),
+     TOBN(0x0dbd5748, 0xf83e8a3b), TOBN(0xa579aa96, 0x8d2495f3),
+     TOBN(0x535996a0, 0xae496e9b), TOBN(0x07afbfe9, 0xb7f9bcc2),
+     TOBN(0x3ac1dc6d, 0x5b7bd293), TOBN(0x3b592cff, 0x7022323d),
+     TOBN(0xba0deb98, 0x9c0a3e76), TOBN(0x18e78e9f, 0x4b197acb),
+     TOBN(0x211cde10, 0x296c36ef), TOBN(0x7ee89672, 0x82c4da77),
+     TOBN(0xb617d270, 0xa57836da), TOBN(0xf0cd9c31, 0x9cb7560b),
+     TOBN(0x01fdcbf7, 0xe455fe90), TOBN(0x3fb53cbb, 0x7e7334f3),
+     TOBN(0x781e2ea4, 0x4e7de4ec), TOBN(0x8adab3ad, 0x0b384fd0),
+     TOBN(0x129eee2f, 0x53d64829), TOBN(0x7a471e17, 0xa261492b),
+     TOBN(0xe4f9adb9, 0xe4cb4a2c), TOBN(0x3d359f6f, 0x97ba2c2d),
+     TOBN(0x346c6786, 0x0aacd697), TOBN(0x92b444c3, 0x75c2f8a8),
+     TOBN(0xc79fa117, 0xd85df44e), TOBN(0x56782372, 0x398ddf31),
+     TOBN(0x60e690f2, 0xbbbab3b8), TOBN(0x4851f8ae, 0x8b04816b),
+     TOBN(0xc72046ab, 0x9c92e4d2), TOBN(0x518c74a1, 0x7cf3136b),
+     TOBN(0xff4eb50a, 0xf9877d4c), TOBN(0x14578d90, 0xa919cabb),
+     TOBN(0x8218f8c4, 0xac5eb2b6), TOBN(0xa3ccc547, 0x542016e4),
+     TOBN(0x025bf48e, 0x327f8349), TOBN(0xf3e97346, 0xf43cb641),
+     TOBN(0xdc2bafdf, 0x500f1085), TOBN(0x57167876, 0x2f063055),
+     TOBN(0x5bd914b9, 0x411925a6), TOBN(0x7c078d48, 0xa1123de5),
+     TOBN(0xee6bf835, 0x182b165d), TOBN(0xb11b5e5b, 0xba519727),
+     TOBN(0xe33ea76c, 0x1eea7b85), TOBN(0x2352b461, 0x92d4f85e),
+     TOBN(0xf101d334, 0xafe115bb), TOBN(0xfabc1294, 0x889175a3),
+     TOBN(0x7f6bcdc0, 0x5233f925), TOBN(0xe0a802db, 0xe77fec55),
+     TOBN(0xbdb47b75, 0x8069b659), TOBN(0x1c5e12de, 0xf98fbd74),
+     TOBN(0x869c58c6, 0x4b8457ee), TOBN(0xa5360f69, 0x4f7ea9f7),
+     TOBN(0xe576c09f, 0xf460b38f), TOBN(0x6b70d548, 0x22b7fb36),
+     TOBN(0x3fd237f1, 0x3bfae315), TOBN(0x33797852, 0xcbdff369),
+     TOBN(0x97df25f5, 0x25b516f9), TOBN(0x46f388f2, 0xba38ad2d),
+     TOBN(0x656c4658, 0x89d8ddbb), TOBN(0x8830b26e, 0x70f38ee8),
+     TOBN(0x4320fd5c, 0xde1212b0), TOBN(0xc34f30cf, 0xe4a2edb2),
+     TOBN(0xabb131a3, 0x56ab64b8), TOBN(0x7f77f0cc, 0xd99c5d26),
+     TOBN(0x66856a37, 0xbf981d94), TOBN(0x19e76d09, 0x738bd76e),
+     TOBN(0xe76c8ac3, 0x96238f39), TOBN(0xc0a482be, 0xa830b366),
+     TOBN(0xb7b8eaff, 0x0b4eb499), TOBN(0x8ecd83bc, 0x4bfb4865),
+     TOBN(0x971b2cb7, 0xa2f3776f), TOBN(0xb42176a4, 0xf4b88adf),
+     TOBN(0xb9617df5, 0xbe1fa446), TOBN(0x8b32d508, 0xcd031bd2),
+     TOBN(0x1c6bd47d, 0x53b618c0), TOBN(0xc424f46c, 0x6a227923),
+     TOBN(0x7303ffde, 0xdd92d964), TOBN(0xe9712878, 0x71b5abf2),
+     TOBN(0x8f48a632, 0xf815561d), TOBN(0x85f48ff5, 0xd3c055d1),
+     TOBN(0x222a1427, 0x7525684f), TOBN(0xd0d841a0, 0x67360cc3),
+     TOBN(0x4245a926, 0x0b9267c6), TOBN(0xc78913f1, 0xcf07f863),
+     TOBN(0xaa844c8e, 0x4d0d9e24), TOBN(0xa42ad522, 0x3d5f9017),
+     TOBN(0xbd371749, 0xa2c989d5), TOBN(0x928292df, 0xe1f5e78e),
+     TOBN(0x493b383e, 0x0a1ea6da), TOBN(0x5136fd8d, 0x13aee529),
+     TOBN(0x860c44b1, 0xf2c34a99), TOBN(0x3b00aca4, 0xbf5855ac),
+     TOBN(0xabf6aaa0, 0xfaaf37be), TOBN(0x65f43682, 0x2a53ec08),
+     TOBN(0x1d9a5801, 0xa11b12e1), TOBN(0x78a7ab2c, 0xe20ed475),
+     TOBN(0x0de1067e, 0x9a41e0d5), TOBN(0x30473f5f, 0x305023ea),
+     TOBN(0xdd3ae09d, 0x169c7d97), TOBN(0x5cd5baa4, 0xcfaef9cd),
+     TOBN(0x5cd7440b, 0x65a44803), TOBN(0xdc13966a, 0x47f364de),
+     TOBN(0x077b2be8, 0x2b8357c1), TOBN(0x0cb1b4c5, 0xe9d57c2a),
+     TOBN(0x7a4ceb32, 0x05ff363e), TOBN(0xf310fa4d, 0xca35a9ef),
+     TOBN(0xdbb7b352, 0xf97f68c6), TOBN(0x0c773b50, 0x0b02cf58),
+     TOBN(0xea2e4821, 0x3c1f96d9), TOBN(0xffb357b0, 0xeee01815),
+     TOBN(0xb9c924cd, 0xe0f28039), TOBN(0x0b36c95a, 0x46a3fbe4),
+     TOBN(0x1faaaea4, 0x5e46db6c), TOBN(0xcae575c3, 0x1928aaff),
+     TOBN(0x7f671302, 0xa70dab86), TOBN(0xfcbd12a9, 0x71c58cfc),
+     TOBN(0xcbef9acf, 0xbee0cb92), TOBN(0x573da0b9, 0xf8c1b583),
+     TOBN(0x4752fcfe, 0x0d41d550), TOBN(0xe7eec0e3, 0x2155cffe),
+     TOBN(0x0fc39fcb, 0x545ae248), TOBN(0x522cb8d1, 0x8065f44e),
+     TOBN(0x263c962a, 0x70cbb96c), TOBN(0xe034362a, 0xbcd124a9),
+     TOBN(0xf120db28, 0x3c2ae58d), TOBN(0xb9a38d49, 0xfef6d507),
+     TOBN(0xb1fd2a82, 0x1ff140fd), TOBN(0xbd162f30, 0x20aee7e0),
+     TOBN(0x4e17a5d4, 0xcb251949), TOBN(0x2aebcb83, 0x4f7e1c3d),
+     TOBN(0x608eb25f, 0x937b0527), TOBN(0xf42e1e47, 0xeb7d9997),
+     TOBN(0xeba699c4, 0xb8a53a29), TOBN(0x1f921c71, 0xe091b536),
+     TOBN(0xcce29e7b, 0x5b26bbd5), TOBN(0x7a8ef5ed, 0x3b61a680),
+     TOBN(0xe5ef8043, 0xba1f1c7e), TOBN(0x16ea8217, 0x18158dda),
+     TOBN(0x01778a2b, 0x599ff0f9), TOBN(0x68a923d7, 0x8104fc6b),
+     TOBN(0x5bfa44df, 0xda694ff3), TOBN(0x4f7199db, 0xf7667f12),
+     TOBN(0xc06d8ff6, 0xe46f2a79), TOBN(0x08b5dead, 0xe9f8131d),
+     TOBN(0x02519a59, 0xabb4ce7c), TOBN(0xc4f710bc, 0xb42aec3e),
+     TOBN(0x3d77b057, 0x78bde41a), TOBN(0x6474bf80, 0xb4186b5a),
+     TOBN(0x048b3f67, 0x88c65741), TOBN(0xc64519de, 0x03c7c154),
+     TOBN(0xdf073846, 0x0edfcc4f), TOBN(0x319aa737, 0x48f1aa6b),
+     TOBN(0x8b9f8a02, 0xca909f77), TOBN(0x90258139, 0x7580bfef),
+     TOBN(0xd8bfd3ca, 0xc0c22719), TOBN(0xc60209e4, 0xc9ca151e),
+     TOBN(0x7a744ab5, 0xd9a1a69c), TOBN(0x6de5048b, 0x14937f8f),
+     TOBN(0x171938d8, 0xe115ac04), TOBN(0x7df70940, 0x1c6b16d2),
+     TOBN(0xa6aeb663, 0x7f8e94e7), TOBN(0xc130388e, 0x2a2cf094),
+     TOBN(0x1850be84, 0x77f54e6e), TOBN(0x9f258a72, 0x65d60fe5),
+     TOBN(0xff7ff0c0, 0x6c9146d6), TOBN(0x039aaf90, 0xe63a830b),
+     TOBN(0x38f27a73, 0x9460342f), TOBN(0x4703148c, 0x3f795f8a),
+     TOBN(0x1bb5467b, 0x9681a97e), TOBN(0x00931ba5, 0xecaeb594),
+     TOBN(0xcdb6719d, 0x786f337c), TOBN(0xd9c01cd2, 0xe704397d),
+     TOBN(0x0f4a3f20, 0x555c2fef), TOBN(0x00452509, 0x7c0af223),
+     TOBN(0x54a58047, 0x84db8e76), TOBN(0x3bacf1aa, 0x93c8aa06),
+     TOBN(0x11ca957c, 0xf7919422), TOBN(0x50641053, 0x78cdaa40),
+     TOBN(0x7a303874, 0x9f7144ae), TOBN(0x170c963f, 0x43d4acfd),
+     TOBN(0x5e148149, 0x58ddd3ef), TOBN(0xa7bde582, 0x9e72dba8),
+     TOBN(0x0769da8b, 0x6fa68750), TOBN(0xfa64e532, 0x572e0249),
+     TOBN(0xfcaadf9d, 0x2619ad31), TOBN(0x87882daa, 0xa7b349cd),
+     TOBN(0x9f6eb731, 0x6c67a775), TOBN(0xcb10471a, 0xefc5d0b1),
+     TOBN(0xb433750c, 0xe1b806b2), TOBN(0x19c5714d, 0x57b1ae7e),
+     TOBN(0xc0dc8b7b, 0xed03fd3f), TOBN(0xdd03344f, 0x31bc194e),
+     TOBN(0xa66c52a7, 0x8c6320b5), TOBN(0x8bc82ce3, 0xd0b6fd93),
+     TOBN(0xf8e13501, 0xb35f1341), TOBN(0xe53156dd, 0x25a43e42),
+     TOBN(0xd3adf27e, 0x4daeb85c), TOBN(0xb81d8379, 0xbbeddeb5),
+     TOBN(0x1b0b546e, 0x2e435867), TOBN(0x9020eb94, 0xeba5dd60),
+     TOBN(0x37d91161, 0x8210cb9d), TOBN(0x4c596b31, 0x5c91f1cf),
+     TOBN(0xb228a90f, 0x0e0b040d), TOBN(0xbaf02d82, 0x45ff897f),
+     TOBN(0x2aac79e6, 0x00fa6122), TOBN(0x24828817, 0x8e36f557),
+     TOBN(0xb9521d31, 0x113ec356), TOBN(0x9e48861e, 0x15eff1f8),
+     TOBN(0x2aa1d412, 0xe0d41715), TOBN(0x71f86203, 0x53f131b8),
+     TOBN(0xf60da8da, 0x3fd19408), TOBN(0x4aa716dc, 0x278d9d99),
+     TOBN(0x394531f7, 0xa8c51c90), TOBN(0xb560b0e8, 0xf59db51c),
+     TOBN(0xa28fc992, 0xfa34bdad), TOBN(0xf024fa14, 0x9cd4f8bd),
+     TOBN(0x5cf530f7, 0x23a9d0d3), TOBN(0x615ca193, 0xe28c9b56),
+     TOBN(0x6d2a483d, 0x6f73c51e), TOBN(0xa4cb2412, 0xea0dc2dd),
+     TOBN(0x50663c41, 0x1eb917ff), TOBN(0x3d3a74cf, 0xeade299e),
+     TOBN(0x29b3990f, 0x4a7a9202), TOBN(0xa9bccf59, 0xa7b15c3d),
+     TOBN(0x66a3ccdc, 0xa5df9208), TOBN(0x48027c14, 0x43f2f929),
+     TOBN(0xd385377c, 0x40b557f0), TOBN(0xe001c366, 0xcd684660),
+     TOBN(0x1b18ed6b, 0xe2183a27), TOBN(0x879738d8, 0x63210329),
+     TOBN(0xa687c74b, 0xbda94882), TOBN(0xd1bbcc48, 0xa684b299),
+     TOBN(0xaf6f1112, 0x863b3724), TOBN(0x6943d1b4, 0x2c8ce9f8),
+     TOBN(0xe044a3bb, 0x098cafb4), TOBN(0x27ed2310, 0x60d48caf),
+     TOBN(0x542b5675, 0x3a31b84d), TOBN(0xcbf3dd50, 0xfcddbed7),
+     TOBN(0x25031f16, 0x41b1d830), TOBN(0xa7ec851d, 0xcb0c1e27),
+     TOBN(0xac1c8fe0, 0xb5ae75db), TOBN(0xb24c7557, 0x08c52120),
+     TOBN(0x57f811dc, 0x1d4636c3), TOBN(0xf8436526, 0x681a9939),
+     TOBN(0x1f6bc6d9, 0x9c81adb3), TOBN(0x840f8ac3, 0x5b7d80d4),
+     TOBN(0x731a9811, 0xf4387f1a), TOBN(0x7c501cd3, 0xb5156880),
+     TOBN(0xa5ca4a07, 0xdfe68867), TOBN(0xf123d8f0, 0x5fcea120),
+     TOBN(0x1fbb0e71, 0xd607039e), TOBN(0x2b70e215, 0xcd3a4546),
+     TOBN(0x32d2f01d, 0x53324091), TOBN(0xb796ff08, 0x180ab19b),
+     TOBN(0x32d87a86, 0x3c57c4aa), TOBN(0x2aed9caf, 0xb7c49a27),
+     TOBN(0x9fb35eac, 0x31630d98), TOBN(0x338e8cdf, 0x5c3e20a3),
+     TOBN(0x80f16182, 0x66cde8db), TOBN(0x4e159980, 0x2d72fd36),
+     TOBN(0xd7b8f13b, 0x9b6e5072), TOBN(0xf5213907, 0x3b7b5dc1),
+     TOBN(0x4d431f1d, 0x8ce4396e), TOBN(0x37a1a680, 0xa7ed2142),
+     TOBN(0xbf375696, 0xd01aaf6b), TOBN(0xaa1c0c54, 0xe63aab66),
+     TOBN(0x3014368b, 0x4ed80940), TOBN(0x67e6d056, 0x7a6fcedd),
+     TOBN(0x7c208c49, 0xca97579f), TOBN(0xfe3d7a81, 0xa23597f6),
+     TOBN(0x5e203202, 0x7e096ae2), TOBN(0xb1f3e1e7, 0x24b39366),
+     TOBN(0x26da26f3, 0x2fdcdffc), TOBN(0x79422f1d, 0x6097be83),}
+    ,
+    {TOBN(0x263a2cfb, 0x9db3b381), TOBN(0x9c3a2dee, 0xd4df0a4b),
+     TOBN(0x728d06e9, 0x7d04e61f), TOBN(0x8b1adfbc, 0x42449325),
+     TOBN(0x6ec1d939, 0x7e053a1b), TOBN(0xee2be5c7, 0x66daf707),
+     TOBN(0x80ba1e14, 0x810ac7ab), TOBN(0xdd2ae778, 0xf530f174),
+     TOBN(0x0435d97a, 0x205b9d8b), TOBN(0x6eb8f064, 0x056756d4),
+     TOBN(0xd5e88a8b, 0xb6f8210e), TOBN(0x070ef12d, 0xec9fd9ea),
+     TOBN(0x4d849505, 0x3bcc876a), TOBN(0x12a75338, 0xa7404ce3),
+     TOBN(0xd22b49e1, 0xb8a1db5e), TOBN(0xec1f2051, 0x14bfa5ad),
+     TOBN(0xadbaeb79, 0xb6828f36), TOBN(0x9d7a0258, 0x01bd5b9e),
+     TOBN(0xeda01e0d, 0x1e844b0c), TOBN(0x4b625175, 0x887edfc9),
+     TOBN(0x14109fdd, 0x9669b621), TOBN(0x88a2ca56, 0xf6f87b98),
+     TOBN(0xfe2eb788, 0x170df6bc), TOBN(0x0cea06f4, 0xffa473f9),
+     TOBN(0x43ed81b5, 0xc4e83d33), TOBN(0xd9f35879, 0x5efd488b),
+     TOBN(0x164a620f, 0x9deb4d0f), TOBN(0xc6927bdb, 0xac6a7394),
+     TOBN(0x45c28df7, 0x9f9e0f03), TOBN(0x2868661e, 0xfcd7e1a9),
+     TOBN(0x7cf4e8d0, 0xffa348f1), TOBN(0x6bd4c284, 0x398538e0),
+     TOBN(0x2618a091, 0x289a8619), TOBN(0xef796e60, 0x6671b173),
+     TOBN(0x664e46e5, 0x9090c632), TOBN(0xa38062d4, 0x1e66f8fb),
+     TOBN(0x6c744a20, 0x0573274e), TOBN(0xd07b67e4, 0xa9271394),
+     TOBN(0x391223b2, 0x6bdc0e20), TOBN(0xbe2d93f1, 0xeb0a05a7),
+     TOBN(0xf23e2e53, 0x3f36d141), TOBN(0xe84bb3d4, 0x4dfca442),
+     TOBN(0xb804a48d, 0x6b7c023a), TOBN(0x1e16a8fa, 0x76431c3b),
+     TOBN(0x1b5452ad, 0xddd472e0), TOBN(0x7d405ee7, 0x0d1ee127),
+     TOBN(0x50fc6f1d, 0xffa27599), TOBN(0x351ac53c, 0xbf391b35),
+     TOBN(0x7efa14b8, 0x4444896b), TOBN(0x64974d2f, 0xf94027fb),
+     TOBN(0xefdcd0e8, 0xde84487d), TOBN(0x8c45b260, 0x2b48989b),
+     TOBN(0xa8fcbbc2, 0xd8463487), TOBN(0xd1b2b3f7, 0x3fbc476c),
+     TOBN(0x21d005b7, 0xc8f443c0), TOBN(0x518f2e67, 0x40c0139c),
+     TOBN(0x56036e8c, 0x06d75fc1), TOBN(0x2dcf7bb7, 0x3249a89f),
+     TOBN(0x81dd1d3d, 0xe245e7dd), TOBN(0xf578dc4b, 0xebd6e2a7),
+     TOBN(0x4c028903, 0xdf2ce7a0), TOBN(0xaee36288, 0x9c39afac),
+     TOBN(0xdc847c31, 0x146404ab), TOBN(0x6304c0d8, 0xa4e97818),
+     TOBN(0xae51dca2, 0xa91f6791), TOBN(0x2abe4190, 0x9baa9efc),
+     TOBN(0xd9d2e2f4, 0x559c7ac1), TOBN(0xe82f4b51, 0xfc9f773a),
+     TOBN(0xa7713027, 0x4073e81c), TOBN(0xc0276fac, 0xfbb596fc),
+     TOBN(0x1d819fc9, 0xa684f70c), TOBN(0x29b47fdd, 0xc9f7b1e0),
+     TOBN(0x358de103, 0x459b1940), TOBN(0xec881c59, 0x5b013e93),
+     TOBN(0x51574c93, 0x49532ad3), TOBN(0x2db1d445, 0xb37b46de),
+     TOBN(0xc6445b87, 0xdf239fd8), TOBN(0xc718af75, 0x151d24ee),
+     TOBN(0xaea1c4a4, 0xf43c6259), TOBN(0x40c0e5d7, 0x70be02f7),
+     TOBN(0x6a4590f4, 0x721b33f2), TOBN(0x2124f1fb, 0xfedf04ea),
+     TOBN(0xf8e53cde, 0x9745efe7), TOBN(0xe7e10432, 0x65f046d9),
+     TOBN(0xc3fca28e, 0xe4d0c7e6), TOBN(0x847e339a, 0x87253b1b),
+     TOBN(0x9b595348, 0x3743e643), TOBN(0xcb6a0a0b, 0x4fd12fc5),
+     TOBN(0xfb6836c3, 0x27d02dcc), TOBN(0x5ad00982, 0x7a68bcc2),
+     TOBN(0x1b24b44c, 0x005e912d), TOBN(0xcc83d20f, 0x811fdcfe),
+     TOBN(0x36527ec1, 0x666fba0c), TOBN(0x69948197, 0x14754635),
+     TOBN(0xfcdcb1a8, 0x556da9c2), TOBN(0xa5934267, 0x81a732b2),
+     TOBN(0xec1214ed, 0xa714181d), TOBN(0x609ac13b, 0x6067b341),
+     TOBN(0xff4b4c97, 0xa545df1f), TOBN(0xa1240501, 0x34d2076b),
+     TOBN(0x6efa0c23, 0x1409ca97), TOBN(0x254cc1a8, 0x20638c43),
+     TOBN(0xd4e363af, 0xdcfb46cd), TOBN(0x62c2adc3, 0x03942a27),
+     TOBN(0xc67b9df0, 0x56e46483), TOBN(0xa55abb20, 0x63736356),
+     TOBN(0xab93c098, 0xc551bc52), TOBN(0x382b49f9, 0xb15fe64b),
+     TOBN(0x9ec221ad, 0x4dff8d47), TOBN(0x79caf615, 0x437df4d6),
+     TOBN(0x5f13dc64, 0xbb456509), TOBN(0xe4c589d9, 0x191f0714),
+     TOBN(0x27b6a8ab, 0x3fd40e09), TOBN(0xe455842e, 0x77313ea9),
+     TOBN(0x8b51d1e2, 0x1f55988b), TOBN(0x5716dd73, 0x062bbbfc),
+     TOBN(0x633c11e5, 0x4e8bf3de), TOBN(0x9a0e77b6, 0x1b85be3b),
+     TOBN(0x56510729, 0x0911cca6), TOBN(0x27e76495, 0xefa6590f),
+     TOBN(0xe4ac8b33, 0x070d3aab), TOBN(0x2643672b, 0x9a2cd5e5),
+     TOBN(0x52eff79b, 0x1cfc9173), TOBN(0x665ca49b, 0x90a7c13f),
+     TOBN(0x5a8dda59, 0xb3efb998), TOBN(0x8a5b922d, 0x052f1341),
+     TOBN(0xae9ebbab, 0x3cf9a530), TOBN(0x35986e7b, 0xf56da4d7),
+     TOBN(0x3a636b5c, 0xff3513cc), TOBN(0xbb0cf8ba, 0x3198f7dd),
+     TOBN(0xb8d40522, 0x41f16f86), TOBN(0x760575d8, 0xde13a7bf),
+     TOBN(0x36f74e16, 0x9f7aa181), TOBN(0x163a3ecf, 0xf509ed1c),
+     TOBN(0x6aead61f, 0x3c40a491), TOBN(0x158c95fc, 0xdfe8fcaa),
+     TOBN(0xa3991b6e, 0x13cda46f), TOBN(0x79482415, 0x342faed0),
+     TOBN(0xf3ba5bde, 0x666b5970), TOBN(0x1d52e6bc, 0xb26ab6dd),
+     TOBN(0x768ba1e7, 0x8608dd3d), TOBN(0x4930db2a, 0xea076586),
+     TOBN(0xd9575714, 0xe7dc1afa), TOBN(0x1fc7bf7d, 0xf7c58817),
+     TOBN(0x6b47accd, 0xd9eee96c), TOBN(0x0ca277fb, 0xe58cec37),
+     TOBN(0x113fe413, 0xe702c42a), TOBN(0xdd1764ee, 0xc47cbe51),
+     TOBN(0x041e7cde, 0x7b3ed739), TOBN(0x50cb7459, 0x5ce9e1c0),
+     TOBN(0x35568513, 0x2925b212), TOBN(0x7cff95c4, 0x001b081c),
+     TOBN(0x63ee4cbd, 0x8088b454), TOBN(0xdb7f32f7, 0x9a9e0c8a),
+     TOBN(0xb377d418, 0x6b2447cb), TOBN(0xe3e982aa, 0xd370219b),
+     TOBN(0x06ccc1e4, 0xc2a2a593), TOBN(0x72c36865, 0x0773f24f),
+     TOBN(0xa13b4da7, 0x95859423), TOBN(0x8bbf1d33, 0x75040c8f),
+     TOBN(0x726f0973, 0xda50c991), TOBN(0x48afcd5b, 0x822d6ee2),
+     TOBN(0xe5fc718b, 0x20fd7771), TOBN(0xb9e8e77d, 0xfd0807a1),
+     TOBN(0x7f5e0f44, 0x99a7703d), TOBN(0x6972930e, 0x618e36f3),
+     TOBN(0x2b7c77b8, 0x23807bbe), TOBN(0xe5b82405, 0xcb27ff50),
+     TOBN(0xba8b8be3, 0xbd379062), TOBN(0xd64b7a1d, 0x2dce4a92),
+     TOBN(0x040a73c5, 0xb2952e37), TOBN(0x0a9e252e, 0xd438aeca),
+     TOBN(0xdd43956b, 0xc39d3bcb), TOBN(0x1a31ca00, 0xb32b2d63),
+     TOBN(0xd67133b8, 0x5c417a18), TOBN(0xd08e4790, 0x2ef442c8),
+     TOBN(0x98cb1ae9, 0x255c0980), TOBN(0x4bd86381, 0x2b4a739f),
+     TOBN(0x5a5c31e1, 0x1e4a45a1), TOBN(0x1e5d55fe, 0x9cb0db2f),
+     TOBN(0x74661b06, 0x8ff5cc29), TOBN(0x026b389f, 0x0eb8a4f4),
+     TOBN(0x536b21a4, 0x58848c24), TOBN(0x2e5bf8ec, 0x81dc72b0),
+     TOBN(0x03c187d0, 0xad886aac), TOBN(0x5c16878a, 0xb771b645),
+     TOBN(0xb07dfc6f, 0xc74045ab), TOBN(0x2c6360bf, 0x7800caed),
+     TOBN(0x24295bb5, 0xb9c972a3), TOBN(0xc9e6f88e, 0x7c9a6dba),
+     TOBN(0x90ffbf24, 0x92a79aa6), TOBN(0xde29d50a, 0x41c26ac2),
+     TOBN(0x9f0af483, 0xd309cbe6), TOBN(0x5b020d8a, 0xe0bced4f),
+     TOBN(0x606e986d, 0xb38023e3), TOBN(0xad8f2c9d, 0x1abc6933),
+     TOBN(0x19292e1d, 0xe7400e93), TOBN(0xfe3e18a9, 0x52be5e4d),
+     TOBN(0xe8e9771d, 0x2e0680bf), TOBN(0x8c5bec98, 0xc54db063),
+     TOBN(0x2af9662a, 0x74a55d1f), TOBN(0xe3fbf28f, 0x046f66d8),
+     TOBN(0xa3a72ab4, 0xd4dc4794), TOBN(0x09779f45, 0x5c7c2dd8),
+     TOBN(0xd893bdaf, 0xc3d19d8d), TOBN(0xd5a75094, 0x57d6a6df),
+     TOBN(0x8cf8fef9, 0x952e6255), TOBN(0x3da67cfb, 0xda9a8aff),
+     TOBN(0x4c23f62a, 0x2c160dcd), TOBN(0x34e6c5e3, 0x8f90eaef),
+     TOBN(0x35865519, 0xa9a65d5a), TOBN(0x07c48aae, 0x8fd38a3d),
+     TOBN(0xb7e7aeda, 0x50068527), TOBN(0x2c09ef23, 0x1c90936a),
+     TOBN(0x31ecfeb6, 0xe879324c), TOBN(0xa0871f6b, 0xfb0ec938),
+     TOBN(0xb1f0fb68, 0xd84d835d), TOBN(0xc90caf39, 0x861dc1e6),
+     TOBN(0x12e5b046, 0x7594f8d7), TOBN(0x26897ae2, 0x65012b92),
+     TOBN(0xbcf68a08, 0xa4d6755d), TOBN(0x403ee41c, 0x0991fbda),
+     TOBN(0x733e343e, 0x3bbf17e8), TOBN(0xd2c7980d, 0x679b3d65),
+     TOBN(0x33056232, 0xd2e11305), TOBN(0x966be492, 0xf3c07a6f),
+     TOBN(0x6a8878ff, 0xbb15509d), TOBN(0xff221101, 0x0a9b59a4),
+     TOBN(0x6c9f564a, 0xabe30129), TOBN(0xc6f2c940, 0x336e64cf),
+     TOBN(0x0fe75262, 0x8b0c8022), TOBN(0xbe0267e9, 0x6ae8db87),
+     TOBN(0x22e192f1, 0x93bc042b), TOBN(0xf085b534, 0xb237c458),
+     TOBN(0xa0d192bd, 0x832c4168), TOBN(0x7a76e9e3, 0xbdf6271d),
+     TOBN(0x52a882fa, 0xb88911b5), TOBN(0xc85345e4, 0xb4db0eb5),
+     TOBN(0xa3be02a6, 0x81a7c3ff), TOBN(0x51889c8c, 0xf0ec0469),
+     TOBN(0x9d031369, 0xa5e829e5), TOBN(0xcbb4c6fc, 0x1607aa41),
+     TOBN(0x75ac59a6, 0x241d84c1), TOBN(0xc043f2bf, 0x8829e0ee),
+     TOBN(0x82a38f75, 0x8ea5e185), TOBN(0x8bda40b9, 0xd87cbd9f),
+     TOBN(0x9e65e75e, 0x2d8fc601), TOBN(0x3d515f74, 0xa35690b3),
+     TOBN(0x534acf4f, 0xda79e5ac), TOBN(0x68b83b3a, 0x8630215f),
+     TOBN(0x5c748b2e, 0xd085756e), TOBN(0xb0317258, 0xe5d37cb2),
+     TOBN(0x6735841a, 0xc5ccc2c4), TOBN(0x7d7dc96b, 0x3d9d5069),
+     TOBN(0xa147e410, 0xfd1754bd), TOBN(0x65296e94, 0xd399ddd5),
+     TOBN(0xf6b5b2d0, 0xbc8fa5bc), TOBN(0x8a5ead67, 0x500c277b),
+     TOBN(0x214625e6, 0xdfa08a5d), TOBN(0x51fdfedc, 0x959cf047),
+     TOBN(0x6bc9430b, 0x289fca32), TOBN(0xe36ff0cf, 0x9d9bdc3f),
+     TOBN(0x2fe187cb, 0x58ea0ede), TOBN(0xed66af20, 0x5a900b3f),
+     TOBN(0x00e0968b, 0x5fa9f4d6), TOBN(0x2d4066ce, 0x37a362e7),
+     TOBN(0xa99a9748, 0xbd07e772), TOBN(0x710989c0, 0x06a4f1d0),
+     TOBN(0xd5dedf35, 0xce40cbd8), TOBN(0xab55c5f0, 0x1743293d),
+     TOBN(0x766f1144, 0x8aa24e2c), TOBN(0x94d874f8, 0x605fbcb4),
+     TOBN(0xa365f0e8, 0xa518001b), TOBN(0xee605eb6, 0x9d04ef0f),
+     TOBN(0x5a3915cd, 0xba8d4d25), TOBN(0x44c0e1b8, 0xb5113472),
+     TOBN(0xcbb024e8, 0x8b6740dc), TOBN(0x89087a53, 0xee1d4f0c),
+     TOBN(0xa88fa05c, 0x1fc4e372), TOBN(0x8bf395cb, 0xaf8b3af2),
+     TOBN(0x1e71c9a1, 0xdeb8568b), TOBN(0xa35daea0, 0x80fb3d32),
+     TOBN(0xe8b6f266, 0x2cf8fb81), TOBN(0x6d51afe8, 0x9490696a),
+     TOBN(0x81beac6e, 0x51803a19), TOBN(0xe3d24b7f, 0x86219080),
+     TOBN(0x727cfd9d, 0xdf6f463c), TOBN(0x8c6865ca, 0x72284ee8),
+     TOBN(0x32c88b7d, 0xb743f4ef), TOBN(0x3793909b, 0xe7d11dce),
+     TOBN(0xd398f922, 0x2ff2ebe8), TOBN(0x2c70ca44, 0xe5e49796),
+     TOBN(0xdf4d9929, 0xcb1131b1), TOBN(0x7826f298, 0x25888e79),
+     TOBN(0x4d3a112c, 0xf1d8740a), TOBN(0x00384cb6, 0x270afa8b),
+     TOBN(0xcb64125b, 0x3ab48095), TOBN(0x3451c256, 0x62d05106),
+     TOBN(0xd73d577d, 0xa4955845), TOBN(0x39570c16, 0xbf9f4433),
+     TOBN(0xd7dfaad3, 0xadecf263), TOBN(0xf1c3d8d1, 0xdc76e102),
+     TOBN(0x5e774a58, 0x54c6a836), TOBN(0xdad4b672, 0x3e92d47b),
+     TOBN(0xbe7e990f, 0xf0d796a0), TOBN(0x5fc62478, 0xdf0e8b02),
+     TOBN(0x8aae8bf4, 0x030c00ad), TOBN(0x3d2db93b, 0x9004ba0f),
+     TOBN(0xe48c8a79, 0xd85d5ddc), TOBN(0xe907caa7, 0x6bb07f34),
+     TOBN(0x58db343a, 0xa39eaed5), TOBN(0x0ea6e007, 0xadaf5724),
+     TOBN(0xe00df169, 0xd23233f3), TOBN(0x3e322796, 0x77cb637f),
+     TOBN(0x1f897c0e, 0x1da0cf6c), TOBN(0xa651f5d8, 0x31d6bbdd),
+     TOBN(0xdd61af19, 0x1a230c76), TOBN(0xbd527272, 0xcdaa5e4a),
+     TOBN(0xca753636, 0xd0abcd7e), TOBN(0x78bdd37c, 0x370bd8dc),
+     TOBN(0xc23916c2, 0x17cd93fe), TOBN(0x65b97a4d, 0xdadce6e2),
+     TOBN(0xe04ed4eb, 0x174e42f8), TOBN(0x1491ccaa, 0xbb21480a),
+     TOBN(0x145a8280, 0x23196332), TOBN(0x3c3862d7, 0x587b479a),
+     TOBN(0x9f4a88a3, 0x01dcd0ed), TOBN(0x4da2b7ef, 0x3ea12f1f),
+     TOBN(0xf8e7ae33, 0xb126e48e), TOBN(0x404a0b32, 0xf494e237),
+     TOBN(0x9beac474, 0xc55acadb), TOBN(0x4ee5cf3b, 0xcbec9fd9),
+     TOBN(0x336b33b9, 0x7df3c8c3), TOBN(0xbd905fe3, 0xb76808fd),
+     TOBN(0x8f436981, 0xaa45c16a), TOBN(0x255c5bfa, 0x3dd27b62),
+     TOBN(0x71965cbf, 0xc3dd9b4d), TOBN(0xce23edbf, 0xfc068a87),
+     TOBN(0xb78d4725, 0x745b029b), TOBN(0x74610713, 0xcefdd9bd),
+     TOBN(0x7116f75f, 0x1266bf52), TOBN(0x02046722, 0x18e49bb6),
+     TOBN(0xdf43df9f, 0x3d6f19e3), TOBN(0xef1bc7d0, 0xe685cb2f),
+     TOBN(0xcddb27c1, 0x7078c432), TOBN(0xe1961b9c, 0xb77fedb7),
+     TOBN(0x1edc2f5c, 0xc2290570), TOBN(0x2c3fefca, 0x19cbd886),
+     TOBN(0xcf880a36, 0xc2af389a), TOBN(0x96c610fd, 0xbda71cea),
+     TOBN(0xf03977a9, 0x32aa8463), TOBN(0x8eb7763f, 0x8586d90a),
+     TOBN(0x3f342454, 0x2a296e77), TOBN(0xc8718683, 0x42837a35),
+     TOBN(0x7dc71090, 0x6a09c731), TOBN(0x54778ffb, 0x51b816db),
+     TOBN(0x6b33bfec, 0xaf06defd), TOBN(0xfe3c105f, 0x8592b70b),
+     TOBN(0xf937fda4, 0x61da6114), TOBN(0x3c13e651, 0x4c266ad7),
+     TOBN(0xe363a829, 0x855938e8), TOBN(0x2eeb5d9e, 0x9de54b72),
+     TOBN(0xbeb93b0e, 0x20ccfab9), TOBN(0x3dffbb5f, 0x25e61a25),
+     TOBN(0x7f655e43, 0x1acc093d), TOBN(0x0cb6cc3d, 0x3964ce61),
+     TOBN(0x6ab283a1, 0xe5e9b460), TOBN(0x55d787c5, 0xa1c7e72d),
+     TOBN(0x4d2efd47, 0xdeadbf02), TOBN(0x11e80219, 0xac459068),
+     TOBN(0x810c7626, 0x71f311f0), TOBN(0xfa17ef8d, 0x4ab6ef53),
+     TOBN(0xaf47fd25, 0x93e43bff), TOBN(0x5cb5ff3f, 0x0be40632),
+     TOBN(0x54687106, 0x8ee61da3), TOBN(0x7764196e, 0xb08afd0f),
+     TOBN(0x831ab3ed, 0xf0290a8f), TOBN(0xcae81966, 0xcb47c387),
+     TOBN(0xaad7dece, 0x184efb4f), TOBN(0xdcfc53b3, 0x4749110e),
+     TOBN(0x6698f23c, 0x4cb632f9), TOBN(0xc42a1ad6, 0xb91f8067),
+     TOBN(0xb116a81d, 0x6284180a), TOBN(0xebedf5f8, 0xe901326f),
+     TOBN(0xf2274c9f, 0x97e3e044), TOBN(0x42018520, 0x11d09fc9),
+     TOBN(0x56a65f17, 0xd18e6e23), TOBN(0x2ea61e2a, 0x352b683c),
+     TOBN(0x27d291bc, 0x575eaa94), TOBN(0x9e7bc721, 0xb8ff522d),
+     TOBN(0x5f7268bf, 0xa7f04d6f), TOBN(0x5868c73f, 0xaba41748),
+     TOBN(0x9f85c2db, 0x7be0eead), TOBN(0x511e7842, 0xff719135),
+     TOBN(0x5a06b1e9, 0xc5ea90d7), TOBN(0x0c19e283, 0x26fab631),
+     TOBN(0x8af8f0cf, 0xe9206c55), TOBN(0x89389cb4, 0x3553c06a),
+     TOBN(0x39dbed97, 0xf65f8004), TOBN(0x0621b037, 0xc508991d),
+     TOBN(0x1c52e635, 0x96e78cc4), TOBN(0x5385c8b2, 0x0c06b4a8),
+     TOBN(0xd84ddfdb, 0xb0e87d03), TOBN(0xc49dfb66, 0x934bafad),
+     TOBN(0x7071e170, 0x59f70772), TOBN(0x3a073a84, 0x3a1db56b),
+     TOBN(0x03494903, 0x3b8af190), TOBN(0x7d882de3, 0xd32920f0),
+     TOBN(0x91633f0a, 0xb2cf8940), TOBN(0x72b0b178, 0x6f948f51),
+     TOBN(0x2d28dc30, 0x782653c8), TOBN(0x88829849, 0xdb903a05),
+     TOBN(0xb8095d0c, 0x6a19d2bb), TOBN(0x4b9e7f0c, 0x86f782cb),
+     TOBN(0x7af73988, 0x2d907064), TOBN(0xd12be0fe, 0x8b32643c),
+     TOBN(0x358ed23d, 0x0e165dc3), TOBN(0x3d47ce62, 0x4e2378ce),
+     TOBN(0x7e2bb0b9, 0xfeb8a087), TOBN(0x3246e8ae, 0xe29e10b9),
+     TOBN(0x459f4ec7, 0x03ce2b4d), TOBN(0xe9b4ca1b, 0xbbc077cf),
+     TOBN(0x2613b4f2, 0x0e9940c1), TOBN(0xfc598bb9, 0x047d1eb1),
+     TOBN(0x9744c62b, 0x45036099), TOBN(0xa9dee742, 0x167c65d8),
+     TOBN(0x0c511525, 0xdabe1943), TOBN(0xda110554, 0x93c6c624),
+     TOBN(0xae00a52c, 0x651a3be2), TOBN(0xcda5111d, 0x884449a6),
+     TOBN(0x063c06f4, 0xff33bed1), TOBN(0x73baaf9a, 0x0d3d76b4),
+     TOBN(0x52fb0c9d, 0x7fc63668), TOBN(0x6886c9dd, 0x0c039cde),
+     TOBN(0x602bd599, 0x55b22351), TOBN(0xb00cab02, 0x360c7c13),
+     TOBN(0x8cb616bc, 0x81b69442), TOBN(0x41486700, 0xb55c3cee),
+     TOBN(0x71093281, 0xf49ba278), TOBN(0xad956d9c, 0x64a50710),
+     TOBN(0x9561f28b, 0x638a7e81), TOBN(0x54155cdf, 0x5980ddc3),
+     TOBN(0xb2db4a96, 0xd26f247a), TOBN(0x9d774e4e, 0x4787d100),
+     TOBN(0x1a9e6e2e, 0x078637d2), TOBN(0x1c363e2d, 0x5e0ae06a),
+     TOBN(0x7493483e, 0xe9cfa354), TOBN(0x76843cb3, 0x7f74b98d),
+     TOBN(0xbaca6591, 0xd4b66947), TOBN(0xb452ce98, 0x04460a8c),
+     TOBN(0x6830d246, 0x43768f55), TOBN(0xf4197ed8, 0x7dff12df),
+     TOBN(0x6521b472, 0x400dd0f7), TOBN(0x59f5ca8f, 0x4b1e7093),
+     TOBN(0x6feff11b, 0x080338ae), TOBN(0x0ada31f6, 0xa29ca3c6),
+     TOBN(0x24794eb6, 0x94a2c215), TOBN(0xd83a43ab, 0x05a57ab4),
+     TOBN(0x264a543a, 0x2a6f89fe), TOBN(0x2c2a3868, 0xdd5ec7c2),
+     TOBN(0xd3373940, 0x8439d9b2), TOBN(0x715ea672, 0x0acd1f11),
+     TOBN(0x42c1d235, 0xe7e6cc19), TOBN(0x81ce6e96, 0xb990585c),
+     TOBN(0x04e5dfe0, 0xd809c7bd), TOBN(0xd7b2580c, 0x8f1050ab),
+     TOBN(0x6d91ad78, 0xd8a4176f), TOBN(0x0af556ee, 0x4e2e897c),
+     TOBN(0x162a8b73, 0x921de0ac), TOBN(0x52ac9c22, 0x7ea78400),
+     TOBN(0xee2a4eea, 0xefce2174), TOBN(0xbe61844e, 0x6d637f79),
+     TOBN(0x0491f1bc, 0x789a283b), TOBN(0x72d3ac3d, 0x880836f4),
+     TOBN(0xaa1c5ea3, 0x88e5402d), TOBN(0x1b192421, 0xd5cc473d),
+     TOBN(0x5c0b9998, 0x9dc84cac), TOBN(0xb0a8482d, 0x9c6e75b8),
+     TOBN(0x639961d0, 0x3a191ce2), TOBN(0xda3bc865, 0x6d837930),
+     TOBN(0xca990653, 0x056e6f8f), TOBN(0x84861c41, 0x64d133a7),
+     TOBN(0x8b403276, 0x746abe40), TOBN(0xb7b4d51a, 0xebf8e303),
+     TOBN(0x05b43211, 0x220a255d), TOBN(0xc997152c, 0x02419e6e),
+     TOBN(0x76ff47b6, 0x630c2fea), TOBN(0x50518677, 0x281fdade),
+     TOBN(0x3283b8ba, 0xcf902b0b), TOBN(0x8d4b4eb5, 0x37db303b),
+     TOBN(0xcc89f42d, 0x755011bc), TOBN(0xb43d74bb, 0xdd09d19b),
+     TOBN(0x65746bc9, 0x8adba350), TOBN(0x364eaf8c, 0xb51c1927),
+     TOBN(0x13c76596, 0x10ad72ec), TOBN(0x30045121, 0xf8d40c20),
+     TOBN(0x6d2d99b7, 0xea7b979b), TOBN(0xcd78cd74, 0xe6fb3bcd),
+     TOBN(0x11e45a9e, 0x86cffbfe), TOBN(0x78a61cf4, 0x637024f6),
+     TOBN(0xd06bc872, 0x3d502295), TOBN(0xf1376854, 0x458cb288),
+     TOBN(0xb9db26a1, 0x342f8586), TOBN(0xf33effcf, 0x4beee09e),
+     TOBN(0xd7e0c4cd, 0xb30cfb3a), TOBN(0x6d09b8c1, 0x6c9db4c8),
+     TOBN(0x40ba1a42, 0x07c8d9df), TOBN(0x6fd495f7, 0x1c52c66d),
+     TOBN(0xfb0e169f, 0x275264da), TOBN(0x80c2b746, 0xe57d8362),
+     TOBN(0xedd987f7, 0x49ad7222), TOBN(0xfdc229af, 0x4398ec7b),}
+    ,
+    {TOBN(0xb0d1ed84, 0x52666a58), TOBN(0x4bcb6e00, 0xe6a9c3c2),
+     TOBN(0x3c57411c, 0x26906408), TOBN(0xcfc20755, 0x13556400),
+     TOBN(0xa08b1c50, 0x5294dba3), TOBN(0xa30ba286, 0x8b7dd31e),
+     TOBN(0xd70ba90e, 0x991eca74), TOBN(0x094e142c, 0xe762c2b9),
+     TOBN(0xb81d783e, 0x979f3925), TOBN(0x1efd130a, 0xaf4c89a7),
+     TOBN(0x525c2144, 0xfd1bf7fa), TOBN(0x4b296904, 0x1b265a9e),
+     TOBN(0xed8e9634, 0xb9db65b6), TOBN(0x35c82e32, 0x03599d8a),
+     TOBN(0xdaa7a54f, 0x403563f3), TOBN(0x9df088ad, 0x022c38ab),
+     TOBN(0xe5cfb066, 0xbb3fd30a), TOBN(0x429169da, 0xeff0354e),
+     TOBN(0x809cf852, 0x3524e36c), TOBN(0x136f4fb3, 0x0155be1d),
+     TOBN(0x4826af01, 0x1fbba712), TOBN(0x6ef0f0b4, 0x506ba1a1),
+     TOBN(0xd9928b31, 0x77aea73e), TOBN(0xe2bf6af2, 0x5eaa244e),
+     TOBN(0x8d084f12, 0x4237b64b), TOBN(0x688ebe99, 0xe3ecfd07),
+     TOBN(0x57b8a70c, 0xf6845dd8), TOBN(0x808fc59c, 0x5da4a325),
+     TOBN(0xa9032b2b, 0xa3585862), TOBN(0xb66825d5, 0xedf29386),
+     TOBN(0xb5a5a8db, 0x431ec29b), TOBN(0xbb143a98, 0x3a1e8dc8),
+     TOBN(0x35ee94ce, 0x12ae381b), TOBN(0x3a7f176c, 0x86ccda90),
+     TOBN(0xc63a657e, 0x4606eaca), TOBN(0x9ae5a380, 0x43cd04df),
+     TOBN(0x9bec8d15, 0xed251b46), TOBN(0x1f5d6d30, 0xcaca5e64),
+     TOBN(0x347b3b35, 0x9ff20f07), TOBN(0x4d65f034, 0xf7e4b286),
+     TOBN(0x9e93ba24, 0xf111661e), TOBN(0xedced484, 0xb105eb04),
+     TOBN(0x96dc9ba1, 0xf424b578), TOBN(0xbf8f66b7, 0xe83e9069),
+     TOBN(0x872d4df4, 0xd7ed8216), TOBN(0xbf07f377, 0x8e2cbecf),
+     TOBN(0x4281d899, 0x98e73754), TOBN(0xfec85fbb, 0x8aab8708),
+     TOBN(0x9a3c0dee, 0xa5ba5b0b), TOBN(0xe6a116ce, 0x42d05299),
+     TOBN(0xae9775fe, 0xe9b02d42), TOBN(0x72b05200, 0xa1545cb6),
+     TOBN(0xbc506f7d, 0x31a3b4ea), TOBN(0xe5893078, 0x8bbd9b32),
+     TOBN(0xc8bc5f37, 0xe4b12a97), TOBN(0x6b000c06, 0x4a73b671),
+     TOBN(0x13b5bf22, 0x765fa7d0), TOBN(0x59805bf0, 0x1d6a5370),
+     TOBN(0x67a5e29d, 0x4280db98), TOBN(0x4f53916f, 0x776b1ce3),
+     TOBN(0x714ff61f, 0x33ddf626), TOBN(0x4206238e, 0xa085d103),
+     TOBN(0x1c50d4b7, 0xe5809ee3), TOBN(0x999f450d, 0x85f8eb1d),
+     TOBN(0x658a6051, 0xe4c79e9b), TOBN(0x1394cb73, 0xc66a9fea),
+     TOBN(0x27f31ed5, 0xc6be7b23), TOBN(0xf4c88f36, 0x5aa6f8fe),
+     TOBN(0x0fb0721f, 0x4aaa499e), TOBN(0x68b3a7d5, 0xe3fb2a6b),
+     TOBN(0xa788097d, 0x3a92851d), TOBN(0x060e7f8a, 0xe96f4913),
+     TOBN(0x82eebe73, 0x1a3a93bc), TOBN(0x42bbf465, 0xa21adc1a),
+     TOBN(0xc10b6fa4, 0xef030efd), TOBN(0x247aa4c7, 0x87b097bb),
+     TOBN(0x8b8dc632, 0xf60c77da), TOBN(0x6ffbc26a, 0xc223523e),
+     TOBN(0xa4f6ff11, 0x344579cf), TOBN(0x5825653c, 0x980250f6),
+     TOBN(0xb2dd097e, 0xbc1aa2b9), TOBN(0x07889393, 0x37a0333a),
+     TOBN(0x1cf55e71, 0x37a0db38), TOBN(0x2648487f, 0x792c1613),
+     TOBN(0xdad01336, 0x3fcef261), TOBN(0x6239c81d, 0x0eabf129),
+     TOBN(0x8ee761de, 0x9d276be2), TOBN(0x406a7a34, 0x1eda6ad3),
+     TOBN(0x4bf367ba, 0x4a493b31), TOBN(0x54f20a52, 0x9bf7f026),
+     TOBN(0xb696e062, 0x9795914b), TOBN(0xcddab96d, 0x8bf236ac),
+     TOBN(0x4ff2c70a, 0xed25ea13), TOBN(0xfa1d09eb, 0x81cbbbe7),
+     TOBN(0x88fc8c87, 0x468544c5), TOBN(0x847a670d, 0x696b3317),
+     TOBN(0xf133421e, 0x64bcb626), TOBN(0xaea638c8, 0x26dee0b5),
+     TOBN(0xd6e7680b, 0xb310346c), TOBN(0xe06f4097, 0xd5d4ced3),
+     TOBN(0x09961452, 0x7512a30b), TOBN(0xf3d867fd, 0xe589a59a),
+     TOBN(0x2e73254f, 0x52d0c180), TOBN(0x9063d8a3, 0x333c74ac),
+     TOBN(0xeda6c595, 0xd314e7bc), TOBN(0x2ee7464b, 0x467899ed),
+     TOBN(0x1cef423c, 0x0a1ed5d3), TOBN(0x217e76ea, 0x69cc7613),
+     TOBN(0x27ccce1f, 0xe7cda917), TOBN(0x12d8016b, 0x8a893f16),
+     TOBN(0xbcd6de84, 0x9fc74f6b), TOBN(0xfa5817e2, 0xf3144e61),
+     TOBN(0x1f354164, 0x0821ee4c), TOBN(0x1583eab4, 0x0bc61992),
+     TOBN(0x7490caf6, 0x1d72879f), TOBN(0x998ad9f3, 0xf76ae7b2),
+     TOBN(0x1e181950, 0xa41157f7), TOBN(0xa9d7e1e6, 0xe8da3a7e),
+     TOBN(0x963784eb, 0x8426b95f), TOBN(0x0ee4ed6e, 0x542e2a10),
+     TOBN(0xb79d4cc5, 0xac751e7b), TOBN(0x93f96472, 0xfd4211bd),
+     TOBN(0x8c72d3d2, 0xc8de4fc6), TOBN(0x7b69cbf5, 0xdf44f064),
+     TOBN(0x3da90ca2, 0xf4bf94e1), TOBN(0x1a5325f8, 0xf12894e2),
+     TOBN(0x0a437f6c, 0x7917d60b), TOBN(0x9be70486, 0x96c9cb5d),
+     TOBN(0xb4d880bf, 0xe1dc5c05), TOBN(0xd738adda, 0xeebeeb57),
+     TOBN(0x6f0119d3, 0xdf0fe6a3), TOBN(0x5c686e55, 0x66eaaf5a),
+     TOBN(0x9cb10b50, 0xdfd0b7ec), TOBN(0xbdd0264b, 0x6a497c21),
+     TOBN(0xfc093514, 0x8c546c96), TOBN(0x58a947fa, 0x79dbf42a),
+     TOBN(0xc0b48d4e, 0x49ccd6d7), TOBN(0xff8fb02c, 0x88bd5580),
+     TOBN(0xc75235e9, 0x07d473b2), TOBN(0x4fab1ac5, 0xa2188af3),
+     TOBN(0x030fa3bc, 0x97576ec0), TOBN(0xe8c946e8, 0x0b7e7d2f),
+     TOBN(0x40a5c9cc, 0x70305600), TOBN(0x6d8260a9, 0xc8b013b4),
+     TOBN(0x0368304f, 0x70bba85c), TOBN(0xad090da1, 0xa4a0d311),
+     TOBN(0x7170e870, 0x2415eec1), TOBN(0xbfba35fe, 0x8461ea47),
+     TOBN(0x6279019a, 0xc1e91938), TOBN(0xa47638f3, 0x1afc415f),
+     TOBN(0x36c65cbb, 0xbcba0e0f), TOBN(0x02160efb, 0x034e2c48),
+     TOBN(0xe6c51073, 0x615cd9e4), TOBN(0x498ec047, 0xf1243c06),
+     TOBN(0x3e5a8809, 0xb17b3d8c), TOBN(0x5cd99e61, 0x0cc565f1),
+     TOBN(0x81e312df, 0x7851dafe), TOBN(0xf156f5ba, 0xa79061e2),
+     TOBN(0x80d62b71, 0x880c590e), TOBN(0xbec9746f, 0x0a39faa1),
+     TOBN(0x1d98a9c1, 0xc8ed1f7a), TOBN(0x09e43bb5, 0xa81d5ff2),
+     TOBN(0xd5f00f68, 0x0da0794a), TOBN(0x412050d9, 0x661aa836),
+     TOBN(0xa89f7c4e, 0x90747e40), TOBN(0x6dc05ebb, 0xb62a3686),
+     TOBN(0xdf4de847, 0x308e3353), TOBN(0x53868fbb, 0x9fb53bb9),
+     TOBN(0x2b09d2c3, 0xcfdcf7dd), TOBN(0x41a9fce3, 0x723fcab4),
+     TOBN(0x73d905f7, 0x07f57ca3), TOBN(0x080f9fb1, 0xac8e1555),
+     TOBN(0x7c088e84, 0x9ba7a531), TOBN(0x07d35586, 0xed9a147f),
+     TOBN(0x602846ab, 0xaf48c336), TOBN(0x7320fd32, 0x0ccf0e79),
+     TOBN(0xaa780798, 0xb18bd1ff), TOBN(0x52c2e300, 0xafdd2905),
+     TOBN(0xf27ea3d6, 0x434267cd), TOBN(0x8b96d16d, 0x15605b5f),
+     TOBN(0x7bb31049, 0x4b45706b), TOBN(0xe7f58b8e, 0x743d25f8),
+     TOBN(0xe9b5e45b, 0x87f30076), TOBN(0xd19448d6, 0x5d053d5a),
+     TOBN(0x1ecc8cb9, 0xd3210a04), TOBN(0x6bc7d463, 0xdafb5269),
+     TOBN(0x3e59b10a, 0x67c3489f), TOBN(0x1769788c, 0x65641e1b),
+     TOBN(0x8a53b82d, 0xbd6cb838), TOBN(0x7066d6e6, 0x236d5f22),
+     TOBN(0x03aa1c61, 0x6908536e), TOBN(0xc971da0d, 0x66ae9809),
+     TOBN(0x01b3a86b, 0xc49a2fac), TOBN(0x3b8420c0, 0x3092e77a),
+     TOBN(0x02057300, 0x7d6fb556), TOBN(0x6941b2a1, 0xbff40a87),
+     TOBN(0x140b6308, 0x0658ff2a), TOBN(0x87804363, 0x3424ab36),
+     TOBN(0x0253bd51, 0x5751e299), TOBN(0xc75bcd76, 0x449c3e3a),
+     TOBN(0x92eb4090, 0x7f8f875d), TOBN(0x9c9d754e, 0x56c26bbf),
+     TOBN(0x158cea61, 0x8110bbe7), TOBN(0x62a6b802, 0x745f91ea),
+     TOBN(0xa79c41aa, 0xc6e7394b), TOBN(0x445b6a83, 0xad57ef10),
+     TOBN(0x0c5277eb, 0x6ea6f40c), TOBN(0x319fe96b, 0x88633365),
+     TOBN(0x0b0fc61f, 0x385f63cb), TOBN(0x41250c84, 0x22bdd127),
+     TOBN(0x67d153f1, 0x09e942c2), TOBN(0x60920d08, 0xc021ad5d),
+     TOBN(0x229f5746, 0x724d81a5), TOBN(0xb7ffb892, 0x5bba3299),
+     TOBN(0x518c51a1, 0xde413032), TOBN(0x2a9bfe77, 0x3c2fd94c),
+     TOBN(0xcbcde239, 0x3191f4fd), TOBN(0x43093e16, 0xd3d6ada1),
+     TOBN(0x184579f3, 0x58769606), TOBN(0x2c94a8b3, 0xd236625c),
+     TOBN(0x6922b9c0, 0x5c437d8e), TOBN(0x3d4ae423, 0xd8d9f3c8),
+     TOBN(0xf72c31c1, 0x2e7090a2), TOBN(0x4ac3f5f3, 0xd76a55bd),
+     TOBN(0x342508fc, 0x6b6af991), TOBN(0x0d527100, 0x1b5cebbd),
+     TOBN(0xb84740d0, 0xdd440dd7), TOBN(0x748ef841, 0x780162fd),
+     TOBN(0xa8dbfe0e, 0xdfc6fafb), TOBN(0xeadfdf05, 0xf7300f27),
+     TOBN(0x7d06555f, 0xfeba4ec9), TOBN(0x12c56f83, 0x9e25fa97),
+     TOBN(0x77f84203, 0xd39b8c34), TOBN(0xed8b1be6, 0x3125eddb),
+     TOBN(0x5bbf2441, 0xf6e39dc5), TOBN(0xb00f6ee6, 0x6a5d678a),
+     TOBN(0xba456ecf, 0x57d0ea99), TOBN(0xdcae0f58, 0x17e06c43),
+     TOBN(0x01643de4, 0x0f5b4baa), TOBN(0x2c324341, 0xd161b9be),
+     TOBN(0x80177f55, 0xe126d468), TOBN(0xed325f1f, 0x76748e09),
+     TOBN(0x6116004a, 0xcfa9bdc2), TOBN(0x2d8607e6, 0x3a9fb468),
+     TOBN(0x0e573e27, 0x6009d660), TOBN(0x3a525d2e, 0x8d10c5a1),
+     TOBN(0xd26cb45c, 0x3b9009a0), TOBN(0xb6b0cdc0, 0xde9d7448),
+     TOBN(0x949c9976, 0xe1337c26), TOBN(0x6faadebd, 0xd73d68e5),
+     TOBN(0x9e158614, 0xf1b768d9), TOBN(0x22dfa557, 0x9cc4f069),
+     TOBN(0xccd6da17, 0xbe93c6d6), TOBN(0x24866c61, 0xa504f5b9),
+     TOBN(0x2121353c, 0x8d694da1), TOBN(0x1c6ca580, 0x0140b8c6),
+     TOBN(0xc245ad8c, 0xe964021e), TOBN(0xb83bffba, 0x032b82b3),
+     TOBN(0xfaa220c6, 0x47ef9898), TOBN(0x7e8d3ac6, 0x982c948a),
+     TOBN(0x1faa2091, 0xbc2d124a), TOBN(0xbd54c3dd, 0x05b15ff4),
+     TOBN(0x386bf3ab, 0xc87c6fb7), TOBN(0xfb2b0563, 0xfdeb6f66),
+     TOBN(0x4e77c557, 0x5b45afb4), TOBN(0xe9ded649, 0xefb8912d),
+     TOBN(0x7ec9bbf5, 0x42f6e557), TOBN(0x2570dfff, 0x62671f00),
+     TOBN(0x2b3bfb78, 0x88e084bd), TOBN(0xa024b238, 0xf37fe5b4),
+     TOBN(0x44e7dc04, 0x95649aee), TOBN(0x498ca255, 0x5e7ec1d8),
+     TOBN(0x3bc766ea, 0xaaa07e86), TOBN(0x0db6facb, 0xf3608586),
+     TOBN(0xbadd2549, 0xbdc259c8), TOBN(0x95af3c6e, 0x041c649f),
+     TOBN(0xb36a928c, 0x02e30afb), TOBN(0x9b5356ad, 0x008a88b8),
+     TOBN(0x4b67a5f1, 0xcf1d9e9d), TOBN(0xc6542e47, 0xa5d8d8ce),
+     TOBN(0x73061fe8, 0x7adfb6cc), TOBN(0xcc826fd3, 0x98678141),
+     TOBN(0x00e758b1, 0x3c80515a), TOBN(0x6afe3247, 0x41485083),
+     TOBN(0x0fcb08b9, 0xb6ae8a75), TOBN(0xb8cf388d, 0x4acf51e1),
+     TOBN(0x344a5560, 0x6961b9d6), TOBN(0x1a6778b8, 0x6a97fd0c),
+     TOBN(0xd840fdc1, 0xecc4c7e3), TOBN(0xde9fe47d, 0x16db68cc),
+     TOBN(0xe95f89de, 0xa3e216aa), TOBN(0x84f1a6a4, 0x9594a8be),
+     TOBN(0x7ddc7d72, 0x5a7b162b), TOBN(0xc5cfda19, 0xadc817a3),
+     TOBN(0x80a5d350, 0x78b58d46), TOBN(0x93365b13, 0x82978f19),
+     TOBN(0x2e44d225, 0x26a1fc90), TOBN(0x0d6d10d2, 0x4d70705d),
+     TOBN(0xd94b6b10, 0xd70c45f4), TOBN(0x0f201022, 0xb216c079),
+     TOBN(0xcec966c5, 0x658fde41), TOBN(0xa8d2bc7d, 0x7e27601d),
+     TOBN(0xbfcce3e1, 0xff230be7), TOBN(0x3394ff6b, 0x0033ffb5),
+     TOBN(0xd890c509, 0x8132c9af), TOBN(0xaac4b0eb, 0x361e7868),
+     TOBN(0x5194ded3, 0xe82d15aa), TOBN(0x4550bd2e, 0x23ae6b7d),
+     TOBN(0x3fda318e, 0xea5399d4), TOBN(0xd989bffa, 0x91638b80),
+     TOBN(0x5ea124d0, 0xa14aa12d), TOBN(0x1fb1b899, 0x3667b944),
+     TOBN(0x95ec7969, 0x44c44d6a), TOBN(0x91df144a, 0x57e86137),
+     TOBN(0x915fd620, 0x73adac44), TOBN(0x8f01732d, 0x59a83801),
+     TOBN(0xec579d25, 0x3aa0a633), TOBN(0x06de5e7c, 0xc9d6d59c),
+     TOBN(0xc132f958, 0xb1ef8010), TOBN(0x29476f96, 0xe65c1a02),
+     TOBN(0x336a77c0, 0xd34c3565), TOBN(0xef1105b2, 0x1b9f1e9e),
+     TOBN(0x63e6d08b, 0xf9e08002), TOBN(0x9aff2f21, 0xc613809e),
+     TOBN(0xb5754f85, 0x3a80e75d), TOBN(0xde71853e, 0x6bbda681),
+     TOBN(0x86f041df, 0x8197fd7a), TOBN(0x8b332e08, 0x127817fa),
+     TOBN(0x05d99be8, 0xb9c20cda), TOBN(0x89f7aad5, 0xd5cd0c98),
+     TOBN(0x7ef936fe, 0x5bb94183), TOBN(0x92ca0753, 0xb05cd7f2),
+     TOBN(0x9d65db11, 0x74a1e035), TOBN(0x02628cc8, 0x13eaea92),
+     TOBN(0xf2d9e242, 0x49e4fbf2), TOBN(0x94fdfd9b, 0xe384f8b7),
+     TOBN(0x65f56054, 0x63428c6b), TOBN(0x2f7205b2, 0x90b409a5),
+     TOBN(0xf778bb78, 0xff45ae11), TOBN(0xa13045be, 0xc5ee53b2),
+     TOBN(0xe00a14ff, 0x03ef77fe), TOBN(0x689cd59f, 0xffef8bef),
+     TOBN(0x3578f0ed, 0x1e9ade22), TOBN(0xe99f3ec0, 0x6268b6a8),
+     TOBN(0xa2057d91, 0xea1b3c3e), TOBN(0x2d1a7053, 0xb8823a4a),
+     TOBN(0xabbb336a, 0x2cca451e), TOBN(0xcd2466e3, 0x2218bb5d),
+     TOBN(0x3ac1f42f, 0xc8cb762d), TOBN(0x7e312aae, 0x7690211f),
+     TOBN(0xebb9bd73, 0x45d07450), TOBN(0x207c4b82, 0x46c2213f),
+     TOBN(0x99d425c1, 0x375913ec), TOBN(0x94e45e96, 0x67908220),
+     TOBN(0xc08f3087, 0xcd67dbf6), TOBN(0xa5670fbe, 0xc0887056),
+     TOBN(0x6717b64a, 0x66f5b8fc), TOBN(0xd5a56aea, 0x786fec28),
+     TOBN(0xa8c3f55f, 0xc0ff4952), TOBN(0xa77fefae, 0x457ac49b),
+     TOBN(0x29882d7c, 0x98379d44), TOBN(0xd000bdfb, 0x509edc8a),
+     TOBN(0xc6f95979, 0xe66fe464), TOBN(0x504a6115, 0xfa61bde0),
+     TOBN(0x56b3b871, 0xeffea31a), TOBN(0x2d3de26d, 0xf0c21a54),
+     TOBN(0x21dbff31, 0x834753bf), TOBN(0xe67ecf49, 0x69269d86),
+     TOBN(0x7a176952, 0x151fe690), TOBN(0x03515804, 0x7f2adb5f),
+     TOBN(0xee794b15, 0xd1b62a8d), TOBN(0xf004ceec, 0xaae454e6),
+     TOBN(0x0897ea7c, 0xf0386fac), TOBN(0x3b62ff12, 0xd1fca751),
+     TOBN(0x154181df, 0x1b7a04ec), TOBN(0x2008e04a, 0xfb5847ec),
+     TOBN(0xd147148e, 0x41dbd772), TOBN(0x2b419f73, 0x22942654),
+     TOBN(0x669f30d3, 0xe9c544f7), TOBN(0x52a2c223, 0xc8540149),
+     TOBN(0x5da9ee14, 0x634dfb02), TOBN(0x5f074ff0, 0xf47869f3),
+     TOBN(0x74ee878d, 0xa3933acc), TOBN(0xe6510651, 0x4fe35ed1),
+     TOBN(0xb3eb9482, 0xf1012e7a), TOBN(0x51013cc0, 0xa8a566ae),
+     TOBN(0xdd5e9243, 0x47c00d3b), TOBN(0x7fde089d, 0x946bb0e5),
+     TOBN(0x030754fe, 0xc731b4b3), TOBN(0x12a136a4, 0x99fda062),
+     TOBN(0x7c1064b8, 0x5a1a35bc), TOBN(0xbf1f5763, 0x446c84ef),
+     TOBN(0xed29a56d, 0xa16d4b34), TOBN(0x7fba9d09, 0xdca21c4f),
+     TOBN(0x66d7ac00, 0x6d8de486), TOBN(0x60061987, 0x73a2a5e1),
+     TOBN(0x8b400f86, 0x9da28ff0), TOBN(0x3133f708, 0x43c4599c),
+     TOBN(0x9911c9b8, 0xee28cb0d), TOBN(0xcd7e2874, 0x8e0af61d),
+     TOBN(0x5a85f0f2, 0x72ed91fc), TOBN(0x85214f31, 0x9cd4a373),
+     TOBN(0x881fe5be, 0x1925253c), TOBN(0xd8dc98e0, 0x91e8bc76),
+     TOBN(0x7120affe, 0x585cc3a2), TOBN(0x724952ed, 0x735bf97a),
+     TOBN(0x5581e7dc, 0x3eb34581), TOBN(0x5cbff4f2, 0xe52ee57d),
+     TOBN(0x8d320a0e, 0x87d8cc7b), TOBN(0x9beaa7f3, 0xf1d280d0),
+     TOBN(0x7a0b9571, 0x9beec704), TOBN(0x9126332e, 0x5b7f0057),
+     TOBN(0x01fbc1b4, 0x8ed3bd6d), TOBN(0x35bb2c12, 0xd945eb24),
+     TOBN(0x6404694e, 0x9a8ae255), TOBN(0xb6092eec, 0x8d6abfb3),
+     TOBN(0x4d76143f, 0xcc058865), TOBN(0x7b0a5af2, 0x6e249922),
+     TOBN(0x8aef9440, 0x6a50d353), TOBN(0xe11e4bcc, 0x64f0e07a),
+     TOBN(0x4472993a, 0xa14a90fa), TOBN(0x7706e20c, 0xba0c51d4),
+     TOBN(0xf403292f, 0x1532672d), TOBN(0x52573bfa, 0x21829382),
+     TOBN(0x6a7bb6a9, 0x3b5bdb83), TOBN(0x08da65c0, 0xa4a72318),
+     TOBN(0xc58d22aa, 0x63eb065f), TOBN(0x1717596c, 0x1b15d685),
+     TOBN(0x112df0d0, 0xb266d88b), TOBN(0xf688ae97, 0x5941945a),
+     TOBN(0x487386e3, 0x7c292cac), TOBN(0x42f3b50d, 0x57d6985c),
+     TOBN(0x6da4f998, 0x6a90fc34), TOBN(0xc8f257d3, 0x65ca8a8d),
+     TOBN(0xc2feabca, 0x6951f762), TOBN(0xe1bc81d0, 0x74c323ac),
+     TOBN(0x1bc68f67, 0x251a2a12), TOBN(0x10d86587, 0xbe8a70dc),
+     TOBN(0xd648af7f, 0xf0f84d2e), TOBN(0xf0aa9ebc, 0x6a43ac92),
+     TOBN(0x69e3be04, 0x27596893), TOBN(0xb6bb02a6, 0x45bf452b),
+     TOBN(0x0875c11a, 0xf4c698c8), TOBN(0x6652b5c7, 0xbece3794),
+     TOBN(0x7b3755fd, 0x4f5c0499), TOBN(0x6ea16558, 0xb5532b38),
+     TOBN(0xd1c69889, 0xa2e96ef7), TOBN(0x9c773c3a, 0x61ed8f48),
+     TOBN(0x2b653a40, 0x9b323abc), TOBN(0xe26605e1, 0xf0e1d791),
+     TOBN(0x45d41064, 0x4a87157a), TOBN(0x8f9a78b7, 0xcbbce616),
+     TOBN(0xcf1e44aa, 0xc407eddd), TOBN(0x81ddd1d8, 0xa35b964f),
+     TOBN(0x473e339e, 0xfd083999), TOBN(0x6c94bdde, 0x8e796802),
+     TOBN(0x5a304ada, 0x8545d185), TOBN(0x82ae44ea, 0x738bb8cb),
+     TOBN(0x628a35e3, 0xdf87e10e), TOBN(0xd3624f3d, 0xa15b9fe3),
+     TOBN(0xcc44209b, 0x14be4254), TOBN(0x7d0efcbc, 0xbdbc2ea5),
+     TOBN(0x1f603362, 0x04c37bbe), TOBN(0x21f363f5, 0x56a5852c),
+     TOBN(0xa1503d1c, 0xa8501550), TOBN(0x2251e0e1, 0xd8ab10bb),
+     TOBN(0xde129c96, 0x6961c51c), TOBN(0x1f7246a4, 0x81910f68),
+     TOBN(0x2eb744ee, 0x5f2591f2), TOBN(0x3c47d33f, 0x5e627157),
+     TOBN(0x4d6d62c9, 0x22f3bd68), TOBN(0x6120a64b, 0xcb8df856),
+     TOBN(0x3a9ac6c0, 0x7b5d07df), TOBN(0xa92b9558, 0x7ef39783),
+     TOBN(0xe128a134, 0xab3a9b4f), TOBN(0x41c18807, 0xb1252f05),
+     TOBN(0xfc7ed089, 0x80ba9b1c), TOBN(0xac8dc6de, 0xc532a9dd),
+     TOBN(0xbf829cef, 0x55246809), TOBN(0x101b784f, 0x5b4ee80f),
+     TOBN(0xc09945bb, 0xb6f11603), TOBN(0x57b09dbe, 0x41d2801e),
+     TOBN(0xfba5202f, 0xa97534a8), TOBN(0x7fd8ae5f, 0xc17b9614),
+     TOBN(0xa50ba666, 0x78308435), TOBN(0x9572f77c, 0xd3868c4d),
+     TOBN(0x0cef7bfd, 0x2dd7aab0), TOBN(0xe7958e08, 0x2c7c79ff),
+     TOBN(0x81262e42, 0x25346689), TOBN(0x716da290, 0xb07c7004),
+     TOBN(0x35f911ea, 0xb7950ee3), TOBN(0x6fd72969, 0x261d21b5),
+     TOBN(0x52389803, 0x08b640d3), TOBN(0x5b0026ee, 0x887f12a1),
+     TOBN(0x20e21660, 0x742e9311), TOBN(0x0ef6d541, 0x5ff77ff7),
+     TOBN(0x969127f0, 0xf9c41135), TOBN(0xf21d60c9, 0x68a64993),
+     TOBN(0x656e5d0c, 0xe541875c), TOBN(0xf1e0f84e, 0xa1d3c233),
+     TOBN(0x9bcca359, 0x06002d60), TOBN(0xbe2da60c, 0x06191552),
+     TOBN(0x5da8bbae, 0x61181ec3), TOBN(0x9f04b823, 0x65806f19),
+     TOBN(0xf1604a7d, 0xd4b79bb8), TOBN(0xaee806fb, 0x52c878c8),
+     TOBN(0x34144f11, 0x8d47b8e8), TOBN(0x72edf52b, 0x949f9054),
+     TOBN(0xebfca84e, 0x2127015a), TOBN(0x9051d0c0, 0x9cb7cef3),
+     TOBN(0x86e8fe58, 0x296deec8), TOBN(0x33b28188, 0x41010d74),}
+    ,
+    {TOBN(0x01079383, 0x171b445f), TOBN(0x9bcf21e3, 0x8131ad4c),
+     TOBN(0x8cdfe205, 0xc93987e8), TOBN(0xe63f4152, 0xc92e8c8f),
+     TOBN(0x729462a9, 0x30add43d), TOBN(0x62ebb143, 0xc980f05a),
+     TOBN(0x4f3954e5, 0x3b06e968), TOBN(0xfe1d75ad, 0x242cf6b1),
+     TOBN(0x5f95c6c7, 0xaf8685c8), TOBN(0xd4c1c8ce, 0x2f8f01aa),
+     TOBN(0xc44bbe32, 0x2574692a), TOBN(0xb8003478, 0xd4a4a068),
+     TOBN(0x7c8fc6e5, 0x2eca3cdb), TOBN(0xea1db16b, 0xec04d399),
+     TOBN(0xb05bc82e, 0x8f2bc5cf), TOBN(0x763d517f, 0xf44793d2),
+     TOBN(0x4451c1b8, 0x08bd98d0), TOBN(0x644b1cd4, 0x6575f240),
+     TOBN(0x6907eb33, 0x7375d270), TOBN(0x56c8bebd, 0xfa2286bd),
+     TOBN(0xc713d2ac, 0xc4632b46), TOBN(0x17da427a, 0xafd60242),
+     TOBN(0x313065b7, 0xc95c7546), TOBN(0xf8239898, 0xbf17a3de),
+     TOBN(0xf3b7963f, 0x4c830320), TOBN(0x842c7aa0, 0x903203e3),
+     TOBN(0xaf22ca0a, 0xe7327afb), TOBN(0x38e13092, 0x967609b6),
+     TOBN(0x73b8fb62, 0x757558f1), TOBN(0x3cc3e831, 0xf7eca8c1),
+     TOBN(0xe4174474, 0xf6331627), TOBN(0xa77989ca, 0xc3c40234),
+     TOBN(0xe5fd17a1, 0x44a081e0), TOBN(0xd797fb7d, 0xb70e296a),
+     TOBN(0x2b472b30, 0x481f719c), TOBN(0x0e632a98, 0xfe6f8c52),
+     TOBN(0x89ccd116, 0xc5f0c284), TOBN(0xf51088af, 0x2d987c62),
+     TOBN(0x2a2bccda, 0x4c2de6cf), TOBN(0x810f9efe, 0xf679f0f9),
+     TOBN(0xb0f394b9, 0x7ffe4b3e), TOBN(0x0b691d21, 0xe5fa5d21),
+     TOBN(0xb0bd7747, 0x9dfbbc75), TOBN(0xd2830fda, 0xfaf78b00),
+     TOBN(0xf78c249c, 0x52434f57), TOBN(0x4b1f7545, 0x98096dab),
+     TOBN(0x73bf6f94, 0x8ff8c0b3), TOBN(0x34aef03d, 0x454e134c),
+     TOBN(0xf8d151f4, 0xb7ac7ec5), TOBN(0xd6ceb95a, 0xe50da7d5),
+     TOBN(0xa1b492b0, 0xdc3a0eb8), TOBN(0x75157b69, 0xb3dd2863),
+     TOBN(0xe2c4c74e, 0xc5413d62), TOBN(0xbe329ff7, 0xbc5fc4c7),
+     TOBN(0x835a2aea, 0x60fa9dda), TOBN(0xf117f5ad, 0x7445cb87),
+     TOBN(0xae8317f4, 0xb0166f7a), TOBN(0xfbd3e3f7, 0xceec74e6),
+     TOBN(0xfdb516ac, 0xe0874bfd), TOBN(0x3d846019, 0xc681f3a3),
+     TOBN(0x0b12ee5c, 0x7c1620b0), TOBN(0xba68b4dd, 0x2b63c501),
+     TOBN(0xac03cd32, 0x6668c51e), TOBN(0x2a6279f7, 0x4e0bcb5b),
+     TOBN(0x17bd69b0, 0x6ae85c10), TOBN(0x72946979, 0x1dfdd3a6),
+     TOBN(0xd9a03268, 0x2c078bec), TOBN(0x41c6a658, 0xbfd68a52),
+     TOBN(0xcdea1024, 0x0e023900), TOBN(0xbaeec121, 0xb10d144d),
+     TOBN(0x5a600e74, 0x058ab8dc), TOBN(0x1333af21, 0xbb89ccdd),
+     TOBN(0xdf25eae0, 0x3aaba1f1), TOBN(0x2cada16e, 0x3b7144cf),
+     TOBN(0x657ee27d, 0x71ab98bc), TOBN(0x99088b4c, 0x7a6fc96e),
+     TOBN(0x05d5c0a0, 0x3549dbd4), TOBN(0x42cbdf8f, 0xf158c3ac),
+     TOBN(0x3fb6b3b0, 0x87edd685), TOBN(0x22071cf6, 0x86f064d0),
+     TOBN(0xd2d6721f, 0xff2811e5), TOBN(0xdb81b703, 0xfe7fae8c),
+     TOBN(0x3cfb74ef, 0xd3f1f7bb), TOBN(0x0cdbcd76, 0x16cdeb5d),
+     TOBN(0x4f39642a, 0x566a808c), TOBN(0x02b74454, 0x340064d6),
+     TOBN(0xfabbadca, 0x0528fa6f), TOBN(0xe4c3074c, 0xd3fc0bb6),
+     TOBN(0xb32cb8b0, 0xb796d219), TOBN(0xc3e95f4f, 0x34741dd9),
+     TOBN(0x87212125, 0x68edf6f5), TOBN(0x7a03aee4, 0xa2b9cb8e),
+     TOBN(0x0cd3c376, 0xf53a89aa), TOBN(0x0d8af9b1, 0x948a28dc),
+     TOBN(0xcf86a3f4, 0x902ab04f), TOBN(0x8aacb62a, 0x7f42002d),
+     TOBN(0x106985eb, 0xf62ffd52), TOBN(0xe670b54e, 0x5797bf10),
+     TOBN(0x4b405209, 0xc5e30aef), TOBN(0x12c97a20, 0x4365b5e9),
+     TOBN(0x104646ce, 0x1fe32093), TOBN(0x13cb4ff6, 0x3907a8c9),
+     TOBN(0x8b9f30d1, 0xd46e726b), TOBN(0xe1985e21, 0xaba0f499),
+     TOBN(0xc573dea9, 0x10a230cd), TOBN(0x24f46a93, 0xcd30f947),
+     TOBN(0xf2623fcf, 0xabe2010a), TOBN(0x3f278cb2, 0x73f00e4f),
+     TOBN(0xed55c67d, 0x50b920eb), TOBN(0xf1cb9a2d, 0x8e760571),
+     TOBN(0x7c50d109, 0x0895b709), TOBN(0x4207cf07, 0x190d4369),
+     TOBN(0x3b027e81, 0xc4127fe1), TOBN(0xa9f8b9ad, 0x3ae9c566),
+     TOBN(0x5ab10851, 0xacbfbba5), TOBN(0xa747d648, 0x569556f5),
+     TOBN(0xcc172b5c, 0x2ba97bf7), TOBN(0x15e0f77d, 0xbcfa3324),
+     TOBN(0xa345b797, 0x7686279d), TOBN(0x5a723480, 0xe38003d3),
+     TOBN(0xfd8e139f, 0x8f5fcda8), TOBN(0xf3e558c4, 0xbdee5bfd),
+     TOBN(0xd76cbaf4, 0xe33f9f77), TOBN(0x3a4c97a4, 0x71771969),
+     TOBN(0xda27e84b, 0xf6dce6a7), TOBN(0xff373d96, 0x13e6c2d1),
+     TOBN(0xf115193c, 0xd759a6e9), TOBN(0x3f9b7025, 0x63d2262c),
+     TOBN(0xd9764a31, 0x317cd062), TOBN(0x30779d8e, 0x199f8332),
+     TOBN(0xd8074106, 0x16b11b0b), TOBN(0x7917ab9f, 0x78aeaed8),
+     TOBN(0xb67a9cbe, 0x28fb1d8e), TOBN(0x2e313563, 0x136eda33),
+     TOBN(0x010b7069, 0xa371a86c), TOBN(0x44d90fa2, 0x6744e6b7),
+     TOBN(0x68190867, 0xd6b3e243), TOBN(0x9fe6cd9d, 0x59048c48),
+     TOBN(0xb900b028, 0x95731538), TOBN(0xa012062f, 0x32cae04f),
+     TOBN(0x8107c8bc, 0x9399d082), TOBN(0x47e8c54a, 0x41df12e2),
+     TOBN(0x14ba5117, 0xb6ef3f73), TOBN(0x22260bea, 0x81362f0b),
+     TOBN(0x90ea261e, 0x1a18cc20), TOBN(0x2192999f, 0x2321d636),
+     TOBN(0xef64d314, 0xe311b6a0), TOBN(0xd7401e4c, 0x3b54a1f5),
+     TOBN(0x19019983, 0x6fbca2ba), TOBN(0x46ad3293, 0x8fbffc4b),
+     TOBN(0xa142d3f6, 0x3786bf40), TOBN(0xeb5cbc26, 0xb67039fc),
+     TOBN(0x9cb0ae6c, 0x252bd479), TOBN(0x05e0f88a, 0x12b5848f),
+     TOBN(0x78f6d2b2, 0xa5c97663), TOBN(0x6f6e149b, 0xc162225c),
+     TOBN(0xe602235c, 0xde601a89), TOBN(0xd17bbe98, 0xf373be1f),
+     TOBN(0xcaf49a5b, 0xa8471827), TOBN(0x7e1a0a85, 0x18aaa116),
+     TOBN(0x6c833196, 0x270580c3), TOBN(0x1e233839, 0xf1c98a14),
+     TOBN(0x67b2f7b4, 0xae34e0a5), TOBN(0x47ac8745, 0xd8ce7289),
+     TOBN(0x2b74779a, 0x100dd467), TOBN(0x274a4337, 0x4ee50d09),
+     TOBN(0x603dcf13, 0x83608bc9), TOBN(0xcd9da6c3, 0xc89e8388),
+     TOBN(0x2660199f, 0x355116ac), TOBN(0xcc38bb59, 0xb6d18eed),
+     TOBN(0x3075f31f, 0x2f4bc071), TOBN(0x9774457f, 0x265dc57e),
+     TOBN(0x06a6a9c8, 0xc6db88bb), TOBN(0x6429d07f, 0x4ec98e04),
+     TOBN(0x8d05e57b, 0x05ecaa8b), TOBN(0x20f140b1, 0x7872ea7b),
+     TOBN(0xdf8c0f09, 0xca494693), TOBN(0x48d3a020, 0xf252e909),
+     TOBN(0x4c5c29af, 0x57b14b12), TOBN(0x7e6fa37d, 0xbf47ad1c),
+     TOBN(0x66e7b506, 0x49a0c938), TOBN(0xb72c0d48, 0x6be5f41f),
+     TOBN(0x6a6242b8, 0xb2359412), TOBN(0xcd35c774, 0x8e859480),
+     TOBN(0x12536fea, 0x87baa627), TOBN(0x58c1fec1, 0xf72aa680),
+     TOBN(0x6c29b637, 0x601e5dc9), TOBN(0x9e3c3c1c, 0xde9e01b9),
+     TOBN(0xefc8127b, 0x2bcfe0b0), TOBN(0x35107102, 0x2a12f50d),
+     TOBN(0x6ccd6cb1, 0x4879b397), TOBN(0xf792f804, 0xf8a82f21),
+     TOBN(0x509d4804, 0xa9b46402), TOBN(0xedddf85d, 0xc10f0850),
+     TOBN(0x928410dc, 0x4b6208aa), TOBN(0xf6229c46, 0x391012dc),
+     TOBN(0xc5a7c41e, 0x7727b9b6), TOBN(0x289e4e4b, 0xaa444842),
+     TOBN(0x049ba1d9, 0xe9a947ea), TOBN(0x44f9e47f, 0x83c8debc),
+     TOBN(0xfa77a1fe, 0x611f8b8e), TOBN(0xfd2e416a, 0xf518f427),
+     TOBN(0xc5fffa70, 0x114ebac3), TOBN(0xfe57c4e9, 0x5d89697b),
+     TOBN(0xfdd053ac, 0xb1aaf613), TOBN(0x31df210f, 0xea585a45),
+     TOBN(0x318cc10e, 0x24985034), TOBN(0x1a38efd1, 0x5f1d6130),
+     TOBN(0xbf86f237, 0x0b1e9e21), TOBN(0xb258514d, 0x1dbe88aa),
+     TOBN(0x1e38a588, 0x90c1baf9), TOBN(0x2936a01e, 0xbdb9b692),
+     TOBN(0xd576de98, 0x6dd5b20c), TOBN(0xb586bf71, 0x70f98ecf),
+     TOBN(0xcccf0f12, 0xc42d2fd7), TOBN(0x8717e61c, 0xfb35bd7b),
+     TOBN(0x8b1e5722, 0x35e6fc06), TOBN(0x3477728f, 0x0b3e13d5),
+     TOBN(0x150c294d, 0xaa8a7372), TOBN(0xc0291d43, 0x3bfa528a),
+     TOBN(0xc6c8bc67, 0xcec5a196), TOBN(0xdeeb31e4, 0x5c2e8a7c),
+     TOBN(0xba93e244, 0xfb6e1c51), TOBN(0xb9f8b71b, 0x2e28e156),
+     TOBN(0xce65a287, 0x968a2ab9), TOBN(0xe3c5ce69, 0x46bbcb1f),
+     TOBN(0xf8c835b9, 0xe7ae3f30), TOBN(0x16bbee26, 0xff72b82b),
+     TOBN(0x665e2017, 0xfd42cd22), TOBN(0x1e139970, 0xf8b1d2a0),
+     TOBN(0x125cda29, 0x79204932), TOBN(0x7aee94a5, 0x49c3bee5),
+     TOBN(0x68c70160, 0x89821a66), TOBN(0xf7c37678, 0x8f981669),
+     TOBN(0xd90829fc, 0x48cc3645), TOBN(0x346af049, 0xd70addfc),
+     TOBN(0x2057b232, 0x370bf29c), TOBN(0xf90c73ce, 0x42e650ee),
+     TOBN(0xe03386ea, 0xa126ab90), TOBN(0x0e266e7e, 0x975a087b),
+     TOBN(0x80578eb9, 0x0fca65d9), TOBN(0x7e2989ea, 0x16af45b8),
+     TOBN(0x7438212d, 0xcac75a4e), TOBN(0x38c7ca39, 0x4fef36b8),
+     TOBN(0x8650c494, 0xd402676a), TOBN(0x26ab5a66, 0xf72c7c48),
+     TOBN(0x4e6cb426, 0xce3a464e), TOBN(0xf8f99896, 0x2b72f841),
+     TOBN(0x8c318491, 0x1a335cc8), TOBN(0x563459ba, 0x6a5913e4),
+     TOBN(0x1b920d61, 0xc7b32919), TOBN(0x805ab8b6, 0xa02425ad),
+     TOBN(0x2ac512da, 0x8d006086), TOBN(0x6ca4846a, 0xbcf5c0fd),
+     TOBN(0xafea51d8, 0xac2138d7), TOBN(0xcb647545, 0x344cd443),
+     TOBN(0x0429ee8f, 0xbd7d9040), TOBN(0xee66a2de, 0x819b9c96),
+     TOBN(0x54f9ec25, 0xdea7d744), TOBN(0x2ffea642, 0x671721bb),
+     TOBN(0x4f19dbd1, 0x114344ea), TOBN(0x04304536, 0xfd0dbc8b),
+     TOBN(0x014b50aa, 0x29ec7f91), TOBN(0xb5fc22fe, 0xbb06014d),
+     TOBN(0x60d963a9, 0x1ee682e0), TOBN(0xdf48abc0, 0xfe85c727),
+     TOBN(0x0cadba13, 0x2e707c2d), TOBN(0xde608d3a, 0xa645aeff),
+     TOBN(0x05f1c28b, 0xedafd883), TOBN(0x3c362ede, 0xbd94de1f),
+     TOBN(0x8dd0629d, 0x13593e41), TOBN(0x0a5e736f, 0x766d6eaf),
+     TOBN(0xbfa92311, 0xf68cf9d1), TOBN(0xa4f9ef87, 0xc1797556),
+     TOBN(0x10d75a1f, 0x5601c209), TOBN(0x651c374c, 0x09b07361),
+     TOBN(0x49950b58, 0x88b5cead), TOBN(0x0ef00058, 0x6fa9dbaa),
+     TOBN(0xf51ddc26, 0x4e15f33a), TOBN(0x1f8b5ca6, 0x2ef46140),
+     TOBN(0x343ac0a3, 0xee9523f0), TOBN(0xbb75eab2, 0x975ea978),
+     TOBN(0x1bccf332, 0x107387f4), TOBN(0x790f9259, 0x9ab0062e),
+     TOBN(0xf1a363ad, 0x1e4f6a5f), TOBN(0x06e08b84, 0x62519a50),
+     TOBN(0x60915187, 0x7265f1ee), TOBN(0x6a80ca34, 0x93ae985e),
+     TOBN(0x81b29768, 0xaaba4864), TOBN(0xb13cabf2, 0x8d52a7d6),
+     TOBN(0xb5c36348, 0x8ead03f1), TOBN(0xc932ad95, 0x81c7c1c0),
+     TOBN(0x5452708e, 0xcae1e27b), TOBN(0x9dac4269, 0x1b0df648),
+     TOBN(0x233e3f0c, 0xdfcdb8bc), TOBN(0xe6ceccdf, 0xec540174),
+     TOBN(0xbd0d845e, 0x95081181), TOBN(0xcc8a7920, 0x699355d5),
+     TOBN(0x111c0f6d, 0xc3b375a8), TOBN(0xfd95bc6b, 0xfd51e0dc),
+     TOBN(0x4a106a26, 0x6888523a), TOBN(0x4d142bd6, 0xcb01a06d),
+     TOBN(0x79bfd289, 0xadb9b397), TOBN(0x0bdbfb94, 0xe9863914),
+     TOBN(0x29d8a229, 0x1660f6a6), TOBN(0x7f6abcd6, 0x551c042d),
+     TOBN(0x13039deb, 0x0ac3ffe8), TOBN(0xa01be628, 0xec8523fb),
+     TOBN(0x6ea34103, 0x0ca1c328), TOBN(0xc74114bd, 0xb903928e),
+     TOBN(0x8aa4ff4e, 0x9e9144b0), TOBN(0x7064091f, 0x7f9a4b17),
+     TOBN(0xa3f4f521, 0xe447f2c4), TOBN(0x81b8da7a, 0x604291f0),
+     TOBN(0xd680bc46, 0x7d5926de), TOBN(0x84f21fd5, 0x34a1202f),
+     TOBN(0x1d1e3181, 0x4e9df3d8), TOBN(0x1ca4861a, 0x39ab8d34),
+     TOBN(0x809ddeec, 0x5b19aa4a), TOBN(0x59f72f7e, 0x4d329366),
+     TOBN(0xa2f93f41, 0x386d5087), TOBN(0x40bf739c, 0xdd67d64f),
+     TOBN(0xb4494205, 0x66702158), TOBN(0xc33c65be, 0x73b1e178),
+     TOBN(0xcdcd657c, 0x38ca6153), TOBN(0x97f4519a, 0xdc791976),
+     TOBN(0xcc7c7f29, 0xcd6e1f39), TOBN(0x38de9cfb, 0x7e3c3932),
+     TOBN(0xe448eba3, 0x7b793f85), TOBN(0xe9f8dbf9, 0xf067e914),
+     TOBN(0xc0390266, 0xf114ae87), TOBN(0x39ed75a7, 0xcd6a8e2a),
+     TOBN(0xadb14848, 0x7ffba390), TOBN(0x67f8cb8b, 0x6af9bc09),
+     TOBN(0x322c3848, 0x9c7476db), TOBN(0xa320fecf, 0x52a538d6),
+     TOBN(0xe0493002, 0xb2aced2b), TOBN(0xdfba1809, 0x616bd430),
+     TOBN(0x531c4644, 0xc331be70), TOBN(0xbc04d32e, 0x90d2e450),
+     TOBN(0x1805a0d1, 0x0f9f142d), TOBN(0x2c44a0c5, 0x47ee5a23),
+     TOBN(0x31875a43, 0x3989b4e3), TOBN(0x6b1949fd, 0x0c063481),
+     TOBN(0x2dfb9e08, 0xbe0f4492), TOBN(0x3ff0da03, 0xe9d5e517),
+     TOBN(0x03dbe9a1, 0xf79466a8), TOBN(0x0b87bcd0, 0x15ea9932),
+     TOBN(0xeb64fc83, 0xab1f58ab), TOBN(0x6d9598da, 0x817edc8a),
+     TOBN(0x699cff66, 0x1d3b67e5), TOBN(0x645c0f29, 0x92635853),
+     TOBN(0x253cdd82, 0xeabaf21c), TOBN(0x82b9602a, 0x2241659e),
+     TOBN(0x2cae07ec, 0x2d9f7091), TOBN(0xbe4c720c, 0x8b48cd9b),
+     TOBN(0x6ce5bc03, 0x6f08d6c9), TOBN(0x36e8a997, 0xaf10bf40),
+     TOBN(0x83422d21, 0x3e10ff12), TOBN(0x7b26d3eb, 0xbcc12494),
+     TOBN(0xb240d2d0, 0xc9469ad6), TOBN(0xc4a11b4d, 0x30afa05b),
+     TOBN(0x4b604ace, 0xdd6ba286), TOBN(0x18486600, 0x3ee2864c),
+     TOBN(0x5869d6ba, 0x8d9ce5be), TOBN(0x0d8f68c5, 0xff4bfb0d),
+     TOBN(0xb69f210b, 0x5700cf73), TOBN(0x61f6653a, 0x6d37c135),
+     TOBN(0xff3d432b, 0x5aff5a48), TOBN(0x0d81c4b9, 0x72ba3a69),
+     TOBN(0xee879ae9, 0xfa1899ef), TOBN(0xbac7e2a0, 0x2d6acafd),
+     TOBN(0xd6d93f6c, 0x1c664399), TOBN(0x4c288de1, 0x5bcb135d),
+     TOBN(0x83031dab, 0x9dab7cbf), TOBN(0xfe23feb0, 0x3abbf5f0),
+     TOBN(0x9f1b2466, 0xcdedca85), TOBN(0x140bb710, 0x1a09538c),
+     TOBN(0xac8ae851, 0x5e11115d), TOBN(0x0d63ff67, 0x6f03f59e),
+     TOBN(0x755e5551, 0x7d234afb), TOBN(0x61c2db4e, 0x7e208fc1),
+     TOBN(0xaa9859ce, 0xf28a4b5d), TOBN(0xbdd6d4fc, 0x34af030f),
+     TOBN(0xd1c4a26d, 0x3be01cb1), TOBN(0x9ba14ffc, 0x243aa07c),
+     TOBN(0xf95cd3a9, 0xb2503502), TOBN(0xe379bc06, 0x7d2a93ab),
+     TOBN(0x3efc18e9, 0xd4ca8d68), TOBN(0x083558ec, 0x80bb412a),
+     TOBN(0xd903b940, 0x9645a968), TOBN(0xa499f0b6, 0x9ba6054f),
+     TOBN(0x208b573c, 0xb8349abe), TOBN(0x3baab3e5, 0x30b4fc1c),
+     TOBN(0x87e978ba, 0xcb524990), TOBN(0x3524194e, 0xccdf0e80),
+     TOBN(0x62711725, 0x7d4bcc42), TOBN(0xe90a3d9b, 0xb90109ba),
+     TOBN(0x3b1bdd57, 0x1323e1e0), TOBN(0xb78e9bd5, 0x5eae1599),
+     TOBN(0x0794b746, 0x9e03d278), TOBN(0x80178605, 0xd70e6297),
+     TOBN(0x171792f8, 0x99c97855), TOBN(0x11b393ee, 0xf5a86b5c),
+     TOBN(0x48ef6582, 0xd8884f27), TOBN(0xbd44737a, 0xbf19ba5f),
+     TOBN(0x8698de4c, 0xa42062c6), TOBN(0x8975eb80, 0x61ce9c54),
+     TOBN(0xd50e57c7, 0xd7fe71f3), TOBN(0x15342190, 0xbc97ce38),
+     TOBN(0x51bda2de, 0x4df07b63), TOBN(0xba12aeae, 0x200eb87d),
+     TOBN(0xabe135d2, 0xa9b4f8f6), TOBN(0x04619d65, 0xfad6d99c),
+     TOBN(0x4a6683a7, 0x7994937c), TOBN(0x7a778c8b, 0x6f94f09a),
+     TOBN(0x8c508623, 0x20a71b89), TOBN(0x241a2aed, 0x1c229165),
+     TOBN(0x352be595, 0xaaf83a99), TOBN(0x9fbfee7f, 0x1562bac8),
+     TOBN(0xeaf658b9, 0x5c4017e3), TOBN(0x1dc7f9e0, 0x15120b86),
+     TOBN(0xd84f13dd, 0x4c034d6f), TOBN(0x283dd737, 0xeaea3038),
+     TOBN(0x197f2609, 0xcd85d6a2), TOBN(0x6ebbc345, 0xfae60177),
+     TOBN(0xb80f031b, 0x4e12fede), TOBN(0xde55d0c2, 0x07a2186b),
+     TOBN(0x1fb3e37f, 0x24dcdd5a), TOBN(0x8d602da5, 0x7ed191fb),
+     TOBN(0x108fb056, 0x76023e0d), TOBN(0x70178c71, 0x459c20c0),
+     TOBN(0xfad5a386, 0x3fe54cf0), TOBN(0xa4a3ec4f, 0x02bbb475),
+     TOBN(0x1aa5ec20, 0x919d94d7), TOBN(0x5d3b63b5, 0xa81e4ab3),
+     TOBN(0x7fa733d8, 0x5ad3d2af), TOBN(0xfbc586dd, 0xd1ac7a37),
+     TOBN(0x282925de, 0x40779614), TOBN(0xfe0ffffb, 0xe74a242a),
+     TOBN(0x3f39e67f, 0x906151e5), TOBN(0xcea27f5f, 0x55e10649),
+     TOBN(0xdca1d4e1, 0xc17cf7b7), TOBN(0x0c326d12, 0x2fe2362d),
+     TOBN(0x05f7ac33, 0x7dd35df3), TOBN(0x0c3b7639, 0xc396dbdf),
+     TOBN(0x0912f5ac, 0x03b7db1c), TOBN(0x9dea4b70, 0x5c9ed4a9),
+     TOBN(0x475e6e53, 0xaae3f639), TOBN(0xfaba0e7c, 0xfc278bac),
+     TOBN(0x16f9e221, 0x9490375f), TOBN(0xaebf9746, 0xa5a7ed0a),
+     TOBN(0x45f9af3f, 0xf41ad5d6), TOBN(0x03c4623c, 0xb2e99224),
+     TOBN(0x82c5bb5c, 0xb3cf56aa), TOBN(0x64311819, 0x34567ed3),
+     TOBN(0xec57f211, 0x8be489ac), TOBN(0x2821895d, 0xb9a1104b),
+     TOBN(0x610dc875, 0x6064e007), TOBN(0x8e526f3f, 0x5b20d0fe),
+     TOBN(0x6e71ca77, 0x5b645aee), TOBN(0x3d1dcb9f, 0x800e10ff),
+     TOBN(0x36b51162, 0x189cf6de), TOBN(0x2c5a3e30, 0x6bb17353),
+     TOBN(0xc186cd3e, 0x2a6c6fbf), TOBN(0xa74516fa, 0x4bf97906),
+     TOBN(0x5b4b8f4b, 0x279d6901), TOBN(0x0c4e57b4, 0x2b573743),
+     TOBN(0x75fdb229, 0xb6e386b6), TOBN(0xb46793fd, 0x99deac27),
+     TOBN(0xeeec47ea, 0xcf712629), TOBN(0xe965f3c4, 0xcbc3b2dd),
+     TOBN(0x8dd1fb83, 0x425c6559), TOBN(0x7fc00ee6, 0x0af06fda),
+     TOBN(0xe98c9225, 0x33d956df), TOBN(0x0f1ef335, 0x4fbdc8a2),
+     TOBN(0x2abb5145, 0xb79b8ea2), TOBN(0x40fd2945, 0xbdbff288),
+     TOBN(0x6a814ac4, 0xd7185db7), TOBN(0xc4329d6f, 0xc084609a),
+     TOBN(0xc9ba7b52, 0xed1be45d), TOBN(0x891dd20d, 0xe4cd2c74),
+     TOBN(0x5a4d4a7f, 0x824139b1), TOBN(0x66c17716, 0xb873c710),
+     TOBN(0x5e5bc141, 0x2843c4e0), TOBN(0xd5ac4817, 0xb97eb5bf),
+     TOBN(0xc0f8af54, 0x450c95c7), TOBN(0xc91b3fa0, 0x318406c5),
+     TOBN(0x360c340a, 0xab9d97f8), TOBN(0xfb57bd07, 0x90a2d611),
+     TOBN(0x4339ae3c, 0xa6a6f7e5), TOBN(0x9c1fcd2a, 0x2feb8a10),
+     TOBN(0x972bcca9, 0xc7ea7432), TOBN(0x1b0b924c, 0x308076f6),
+     TOBN(0x80b2814a, 0x2a5b4ca5), TOBN(0x2f78f55b, 0x61ef3b29),
+     TOBN(0xf838744a, 0xc18a414f), TOBN(0xc611eaae, 0x903d0a86),
+     TOBN(0x94dabc16, 0x2a453f55), TOBN(0xe6f2e3da, 0x14efb279),
+     TOBN(0x5b7a6017, 0x9320dc3c), TOBN(0x692e382f, 0x8df6b5a4),
+     TOBN(0x3f5e15e0, 0x2d40fa90), TOBN(0xc87883ae, 0x643dd318),
+     TOBN(0x511053e4, 0x53544774), TOBN(0x834d0ecc, 0x3adba2bc),
+     TOBN(0x4215d7f7, 0xbae371f5), TOBN(0xfcfd57bf, 0x6c8663bc),
+     TOBN(0xded2383d, 0xd6901b1d), TOBN(0x3b49fbb4, 0xb5587dc3),
+     TOBN(0xfd44a08d, 0x07625f62), TOBN(0x3ee4d65b, 0x9de9b762),}
+    ,
+    {TOBN(0x64e5137d, 0x0d63d1fa), TOBN(0x658fc052, 0x02a9d89f),
+     TOBN(0x48894874, 0x50436309), TOBN(0xe9ae30f8, 0xd598da61),
+     TOBN(0x2ed710d1, 0x818baf91), TOBN(0xe27e9e06, 0x8b6a0c20),
+     TOBN(0x1e28dcfb, 0x1c1a6b44), TOBN(0x883acb64, 0xd6ac57dc),
+     TOBN(0x8735728d, 0xc2c6ff70), TOBN(0x79d6122f, 0xc5dc2235),
+     TOBN(0x23f5d003, 0x19e277f9), TOBN(0x7ee84e25, 0xdded8cc7),
+     TOBN(0x91a8afb0, 0x63cd880a), TOBN(0x3f3ea7c6, 0x3574af60),
+     TOBN(0x0cfcdc84, 0x02de7f42), TOBN(0x62d0792f, 0xb31aa152),
+     TOBN(0x8e1b4e43, 0x8a5807ce), TOBN(0xad283893, 0xe4109a7e),
+     TOBN(0xc30cc9cb, 0xafd59dda), TOBN(0xf65f36c6, 0x3d8d8093),
+     TOBN(0xdf31469e, 0xa60d32b2), TOBN(0xee93df4b, 0x3e8191c8),
+     TOBN(0x9c1017c5, 0x355bdeb5), TOBN(0xd2623185, 0x8616aa28),
+     TOBN(0xb02c83f9, 0xdec31a21), TOBN(0x988c8b23, 0x6ad9d573),
+     TOBN(0x53e983ae, 0xa57be365), TOBN(0xe968734d, 0x646f834e),
+     TOBN(0x9137ea8f, 0x5da6309b), TOBN(0x10f3a624, 0xc1f1ce16),
+     TOBN(0x782a9ea2, 0xca440921), TOBN(0xdf94739e, 0x5b46f1b5),
+     TOBN(0x9f9be006, 0xcce85c9b), TOBN(0x360e70d6, 0xa4c7c2d3),
+     TOBN(0x2cd5beea, 0xaefa1e60), TOBN(0x64cf63c0, 0x8c3d2b6d),
+     TOBN(0xfb107fa3, 0xe1cf6f90), TOBN(0xb7e937c6, 0xd5e044e6),
+     TOBN(0x74e8ca78, 0xce34db9f), TOBN(0x4f8b36c1, 0x3e210bd0),
+     TOBN(0x1df165a4, 0x34a35ea8), TOBN(0x3418e0f7, 0x4d4412f6),
+     TOBN(0x5af1f8af, 0x518836c3), TOBN(0x42ceef4d, 0x130e1965),
+     TOBN(0x5560ca0b, 0x543a1957), TOBN(0xc33761e5, 0x886cb123),
+     TOBN(0x66624b1f, 0xfe98ed30), TOBN(0xf772f4bf, 0x1090997d),
+     TOBN(0xf4e540bb, 0x4885d410), TOBN(0x7287f810, 0x9ba5f8d7),
+     TOBN(0x22d0d865, 0xde98dfb1), TOBN(0x49ff51a1, 0xbcfbb8a3),
+     TOBN(0xb6b6fa53, 0x6bc3012e), TOBN(0x3d31fd72, 0x170d541d),
+     TOBN(0x8018724f, 0x4b0f4966), TOBN(0x79e7399f, 0x87dbde07),
+     TOBN(0x56f8410e, 0xf4f8b16a), TOBN(0x97241afe, 0xc47b266a),
+     TOBN(0x0a406b8e, 0x6d9c87c1), TOBN(0x803f3e02, 0xcd42ab1b),
+     TOBN(0x7f0309a8, 0x04dbec69), TOBN(0xa83b85f7, 0x3bbad05f),
+     TOBN(0xc6097273, 0xad8e197f), TOBN(0xc097440e, 0x5067adc1),
+     TOBN(0x730eafb6, 0x3524ff16), TOBN(0xd7f9b51e, 0x823fc6ce),
+     TOBN(0x27bd0d32, 0x443e4ac0), TOBN(0x40c59ad9, 0x4d66f217),
+     TOBN(0x6c33136f, 0x17c387a4), TOBN(0x5043b8d5, 0xeb86804d),
+     TOBN(0x74970312, 0x675a73c9), TOBN(0x838fdb31, 0xf16669b6),
+     TOBN(0xc507b6dd, 0x418e7ddd), TOBN(0x39888d93, 0x472f19d6),
+     TOBN(0x7eae26be, 0x0c27eb4d), TOBN(0x17b53ed3, 0xfbabb884),
+     TOBN(0xfc27021b, 0x2b01ae4f), TOBN(0x88462e87, 0xcf488682),
+     TOBN(0xbee096ec, 0x215e2d87), TOBN(0xeb2fea9a, 0xd242e29b),
+     TOBN(0x5d985b5f, 0xb821fc28), TOBN(0x89d2e197, 0xdc1e2ad2),
+     TOBN(0x55b566b8, 0x9030ba62), TOBN(0xe3fd41b5, 0x4f41b1c6),
+     TOBN(0xb738ac2e, 0xb9a96d61), TOBN(0x7f8567ca, 0x369443f4),
+     TOBN(0x8698622d, 0xf803a440), TOBN(0x2b586236, 0x8fe2f4dc),
+     TOBN(0xbbcc00c7, 0x56b95bce), TOBN(0x5ec03906, 0x616da680),
+     TOBN(0x79162ee6, 0x72214252), TOBN(0x43132b63, 0x86a892d2),
+     TOBN(0x4bdd3ff2, 0x2f3263bf), TOBN(0xd5b3733c, 0x9cd0a142),
+     TOBN(0x592eaa82, 0x44415ccb), TOBN(0x663e8924, 0x8d5474ea),
+     TOBN(0x8058a25e, 0x5236344e), TOBN(0x82e8df9d, 0xbda76ee6),
+     TOBN(0xdcf6efd8, 0x11cc3d22), TOBN(0x00089cda, 0x3b4ab529),
+     TOBN(0x91d3a071, 0xbd38a3db), TOBN(0x4ea97fc0, 0xef72b925),
+     TOBN(0x0c9fc15b, 0xea3edf75), TOBN(0x5a6297cd, 0xa4348ed3),
+     TOBN(0x0d38ab35, 0xce7c42d4), TOBN(0x9fd493ef, 0x82feab10),
+     TOBN(0x46056b6d, 0x82111b45), TOBN(0xda11dae1, 0x73efc5c3),
+     TOBN(0xdc740278, 0x5545a7fb), TOBN(0xbdb2601c, 0x40d507e6),
+     TOBN(0x121dfeeb, 0x7066fa58), TOBN(0x214369a8, 0x39ae8c2a),
+     TOBN(0x195709cb, 0x06e0956c), TOBN(0x4c9d254f, 0x010cd34b),
+     TOBN(0xf51e13f7, 0x0471a532), TOBN(0xe19d6791, 0x1e73054d),
+     TOBN(0xf702a628, 0xdb5c7be3), TOBN(0xc7141218, 0xb24dde05),
+     TOBN(0xdc18233c, 0xf29b2e2e), TOBN(0x3a6bd1e8, 0x85342dba),
+     TOBN(0x3f747fa0, 0xb311898c), TOBN(0xe2a272e4, 0xcd0eac65),
+     TOBN(0x4bba5851, 0xf914d0bc), TOBN(0x7a1a9660, 0xc4a43ee3),
+     TOBN(0xe5a367ce, 0xa1c8cde9), TOBN(0x9d958ba9, 0x7271abe3),
+     TOBN(0xf3ff7eb6, 0x3d1615cd), TOBN(0xa2280dce, 0xf5ae20b0),
+     TOBN(0x56dba5c1, 0xcf640147), TOBN(0xea5a2e3d, 0x5e83d118),
+     TOBN(0x04cd6b6d, 0xda24c511), TOBN(0x1c0f4671, 0xe854d214),
+     TOBN(0x91a6b7a9, 0x69565381), TOBN(0xdc966240, 0xdecf1f5b),
+     TOBN(0x1b22d21c, 0xfcf5d009), TOBN(0x2a05f641, 0x9021dbd5),
+     TOBN(0x8c0ed566, 0xd4312483), TOBN(0x5179a95d, 0x643e216f),
+     TOBN(0xcc185fec, 0x17044493), TOBN(0xb3063339, 0x54991a21),
+     TOBN(0xd801ecdb, 0x0081a726), TOBN(0x0149b0c6, 0x4fa89bbb),
+     TOBN(0xafe9065a, 0x4391b6b9), TOBN(0xedc92786, 0xd633f3a3),
+     TOBN(0xe408c24a, 0xae6a8e13), TOBN(0x85833fde, 0x9f3897ab),
+     TOBN(0x43800e7e, 0xd81a0715), TOBN(0xde08e346, 0xb44ffc5f),
+     TOBN(0x7094184c, 0xcdeff2e0), TOBN(0x49f9387b, 0x165eaed1),
+     TOBN(0x635d6129, 0x777c468a), TOBN(0x8c0dcfd1, 0x538c2dd8),
+     TOBN(0xd6d9d9e3, 0x7a6a308b), TOBN(0x62375830, 0x4c2767d3),
+     TOBN(0x874a8bc6, 0xf38cbeb6), TOBN(0xd94d3f1a, 0xccb6fd9e),
+     TOBN(0x92a9735b, 0xba21f248), TOBN(0x272ad0e5, 0x6cd1efb0),
+     TOBN(0x7437b69c, 0x05b03284), TOBN(0xe7f04702, 0x6948c225),
+     TOBN(0x8a56c04a, 0xcba2ecec), TOBN(0x0c181270, 0xe3a73e41),
+     TOBN(0x6cb34e9d, 0x03e93725), TOBN(0xf77c8713, 0x496521a9),
+     TOBN(0x94569183, 0xfa7f9f90), TOBN(0xf2e7aa4c, 0x8c9707ad),
+     TOBN(0xced2c9ba, 0x26c1c9a3), TOBN(0x9109fe96, 0x40197507),
+     TOBN(0x9ae868a9, 0xe9adfe1c), TOBN(0x3984403d, 0x314e39bb),
+     TOBN(0xb5875720, 0xf2fe378f), TOBN(0x33f901e0, 0xba44a628),
+     TOBN(0xea1125fe, 0x3652438c), TOBN(0xae9ec4e6, 0x9dd1f20b),
+     TOBN(0x1e740d9e, 0xbebf7fbd), TOBN(0x6dbd3ddc, 0x42dbe79c),
+     TOBN(0x62082aec, 0xedd36776), TOBN(0xf612c478, 0xe9859039),
+     TOBN(0xa493b201, 0x032f7065), TOBN(0xebd4d8f2, 0x4ff9b211),
+     TOBN(0x3f23a0aa, 0xaac4cb32), TOBN(0xea3aadb7, 0x15ed4005),
+     TOBN(0xacf17ea4, 0xafa27e63), TOBN(0x56125c1a, 0xc11fd66c),
+     TOBN(0x266344a4, 0x3794f8dc), TOBN(0xdcca923a, 0x483c5c36),
+     TOBN(0x2d6b6bbf, 0x3f9d10a0), TOBN(0xb320c5ca, 0x81d9bdf3),
+     TOBN(0x620e28ff, 0x47b50a95), TOBN(0x933e3b01, 0xcef03371),
+     TOBN(0xf081bf85, 0x99100153), TOBN(0x183be9a0, 0xc3a8c8d6),
+     TOBN(0x4e3ddc5a, 0xd6bbe24d), TOBN(0xc6c74630, 0x53843795),
+     TOBN(0x78193dd7, 0x65ec2d4c), TOBN(0xb8df26cc, 0xcd3c89b2),
+     TOBN(0x98dbe399, 0x5a483f8d), TOBN(0x72d8a957, 0x7dd3313a),
+     TOBN(0x65087294, 0xab0bd375), TOBN(0xfcd89248, 0x7c259d16),
+     TOBN(0x8a9443d7, 0x7613aa81), TOBN(0x80100800, 0x85fe6584),
+     TOBN(0x70fc4dbc, 0x7fb10288), TOBN(0xf58280d3, 0xe86beee8),
+     TOBN(0x14fdd82f, 0x7c978c38), TOBN(0xdf1204c1, 0x0de44d7b),
+     TOBN(0xa08a1c84, 0x4160252f), TOBN(0x591554ca, 0xc17646a5),
+     TOBN(0x214a37d6, 0xa05bd525), TOBN(0x48d5f09b, 0x07957b3c),
+     TOBN(0x0247cdcb, 0xd7109bc9), TOBN(0x40f9e4bb, 0x30599ce7),
+     TOBN(0xc325fa03, 0xf46ad2ec), TOBN(0x00f766cf, 0xc3e3f9ee),
+     TOBN(0xab556668, 0xd43a4577), TOBN(0x68d30a61, 0x3ee03b93),
+     TOBN(0x7ddc81ea, 0x77b46a08), TOBN(0xcf5a6477, 0xc7480699),
+     TOBN(0x43a8cb34, 0x6633f683), TOBN(0x1b867e6b, 0x92363c60),
+     TOBN(0x43921114, 0x1f60558e), TOBN(0xcdbcdd63, 0x2f41450e),
+     TOBN(0x7fc04601, 0xcc630e8b), TOBN(0xea7c66d5, 0x97038b43),
+     TOBN(0x7259b8a5, 0x04e99fd8), TOBN(0x98a8dd12, 0x4785549a),
+     TOBN(0x0e459a7c, 0x840552e1), TOBN(0xcdfcf4d0, 0x4bb0909e),
+     TOBN(0x34a86db2, 0x53758da7), TOBN(0xe643bb83, 0xeac997e1),
+     TOBN(0x96400bd7, 0x530c5b7e), TOBN(0x9f97af87, 0xb41c8b52),
+     TOBN(0x34fc8820, 0xfbeee3f9), TOBN(0x93e53490, 0x49091afd),
+     TOBN(0x764b9be5, 0x9a31f35c), TOBN(0x71f37864, 0x57e3d924),
+     TOBN(0x02fb34e0, 0x943aa75e), TOBN(0xa18c9c58, 0xab8ff6e4),
+     TOBN(0x080f31b1, 0x33cf0d19), TOBN(0x5c9682db, 0x083518a7),
+     TOBN(0x873d4ca6, 0xb709c3de), TOBN(0x64a84262, 0x3575b8f0),
+     TOBN(0x6275da1f, 0x020154bb), TOBN(0x97678caa, 0xd17cf1ab),
+     TOBN(0x8779795f, 0x951a95c3), TOBN(0xdd35b163, 0x50fccc08),
+     TOBN(0x32709627, 0x33d8f031), TOBN(0x3c5ab10a, 0x498dd85c),
+     TOBN(0xb6c185c3, 0x41dca566), TOBN(0x7de7feda, 0xd8622aa3),
+     TOBN(0x99e84d92, 0x901b6dfb), TOBN(0x30a02b0e, 0x7c4ad288),
+     TOBN(0xc7c81daa, 0x2fd3cf36), TOBN(0xd1319547, 0xdf89e59f),
+     TOBN(0xb2be8184, 0xcd496733), TOBN(0xd5f449eb, 0x93d3412b),
+     TOBN(0x7ea41b1b, 0x25fe531d), TOBN(0xf9797432, 0x6a1d5646),
+     TOBN(0x86067f72, 0x2bde501a), TOBN(0xf91481c0, 0x0c85e89c),
+     TOBN(0xca8ee465, 0xf8b05bc6), TOBN(0x1844e1cf, 0x02e83cda),
+     TOBN(0xca82114a, 0xb4dbe33b), TOBN(0x0f9f8769, 0x4eabfde2),
+     TOBN(0x4936b1c0, 0x38b27fe2), TOBN(0x63b6359b, 0xaba402df),
+     TOBN(0x40c0ea2f, 0x656bdbab), TOBN(0x9c992a89, 0x6580c39c),
+     TOBN(0x600e8f15, 0x2a60aed1), TOBN(0xeb089ca4, 0xe0bf49df),
+     TOBN(0x9c233d7d, 0x2d42d99a), TOBN(0x648d3f95, 0x4c6bc2fa),
+     TOBN(0xdcc383a8, 0xe1add3f3), TOBN(0xf42c0c6a, 0x4f64a348),
+     TOBN(0x2abd176f, 0x0030dbdb), TOBN(0x4de501a3, 0x7d6c215e),
+     TOBN(0x4a107c1f, 0x4b9a64bc), TOBN(0xa77f0ad3, 0x2496cd59),
+     TOBN(0xfb78ac62, 0x7688dffb), TOBN(0x7025a2ca, 0x67937d8e),
+     TOBN(0xfde8b2d1, 0xd1a8f4e7), TOBN(0xf5b3da47, 0x7354927c),
+     TOBN(0xe48606a3, 0xd9205735), TOBN(0xac477cc6, 0xe177b917),
+     TOBN(0xfb1f73d2, 0xa883239a), TOBN(0xe12572f6, 0xcc8b8357),
+     TOBN(0x9d355e9c, 0xfb1f4f86), TOBN(0x89b795f8, 0xd9f3ec6e),
+     TOBN(0x27be56f1, 0xb54398dc), TOBN(0x1890efd7, 0x3fedeed5),
+     TOBN(0x62f77f1f, 0x9c6d0140), TOBN(0x7ef0e314, 0x596f0ee4),
+     TOBN(0x50ca6631, 0xcc61dab3), TOBN(0x4a39801d, 0xf4866e4f),
+     TOBN(0x66c8d032, 0xae363b39), TOBN(0x22c591e5, 0x2ead66aa),
+     TOBN(0x954ba308, 0xde02a53e), TOBN(0x2a6c060f, 0xd389f357),
+     TOBN(0xe6cfcde8, 0xfbf40b66), TOBN(0x8e02fc56, 0xc6340ce1),
+     TOBN(0xe4957795, 0x73adb4ba), TOBN(0x7b86122c, 0xa7b03805),
+     TOBN(0x63f83512, 0x0c8e6fa6), TOBN(0x83660ea0, 0x057d7804),
+     TOBN(0xbad79105, 0x21ba473c), TOBN(0xb6c50bee, 0xded5389d),
+     TOBN(0xee2caf4d, 0xaa7c9bc0), TOBN(0xd97b8de4, 0x8c4e98a7),
+     TOBN(0xa9f63e70, 0xab3bbddb), TOBN(0x3898aabf, 0x2597815a),
+     TOBN(0x7659af89, 0xac15b3d9), TOBN(0xedf7725b, 0x703ce784),
+     TOBN(0x25470fab, 0xe085116b), TOBN(0x04a43375, 0x87285310),
+     TOBN(0x4e39187e, 0xe2bfd52f), TOBN(0x36166b44, 0x7d9ebc74),
+     TOBN(0x92ad433c, 0xfd4b322c), TOBN(0x726aa817, 0xba79ab51),
+     TOBN(0xf96eacd8, 0xc1db15eb), TOBN(0xfaf71e91, 0x0476be63),
+     TOBN(0xdd69a640, 0x641fad98), TOBN(0xb7995918, 0x29622559),
+     TOBN(0x03c6daa5, 0xde4199dc), TOBN(0x92cadc97, 0xad545eb4),
+     TOBN(0x1028238b, 0x256534e4), TOBN(0x73e80ce6, 0x8595409a),
+     TOBN(0x690d4c66, 0xd05dc59b), TOBN(0xc95f7b8f, 0x981dee80),
+     TOBN(0xf4337014, 0xd856ac25), TOBN(0x441bd9dd, 0xac524dca),
+     TOBN(0x640b3d85, 0x5f0499f5), TOBN(0x39cf84a9, 0xd5fda182),
+     TOBN(0x04e7b055, 0xb2aa95a0), TOBN(0x29e33f0a, 0x0ddf1860),
+     TOBN(0x082e74b5, 0x423f6b43), TOBN(0x217edeb9, 0x0aaa2b0f),
+     TOBN(0x58b83f35, 0x83cbea55), TOBN(0xc485ee4d, 0xbc185d70),
+     TOBN(0x833ff03b, 0x1e5f6992), TOBN(0xb5b9b9cc, 0xcf0c0dd5),
+     TOBN(0x7caaee8e, 0x4e9e8a50), TOBN(0x462e907b, 0x6269dafd),
+     TOBN(0x6ed5cee9, 0xfbe791c6), TOBN(0x68ca3259, 0xed430790),
+     TOBN(0x2b72bdf2, 0x13b5ba88), TOBN(0x60294c8a, 0x35ef0ac4),
+     TOBN(0x9c3230ed, 0x19b99b08), TOBN(0x560fff17, 0x6c2589aa),
+     TOBN(0x552b8487, 0xd6770374), TOBN(0xa373202d, 0x9a56f685),
+     TOBN(0xd3e7f907, 0x45f175d9), TOBN(0x3c2f315f, 0xd080d810),
+     TOBN(0x1130e9dd, 0x7b9520e8), TOBN(0xc078f9e2, 0x0af037b5),
+     TOBN(0x38cd2ec7, 0x1e9c104c), TOBN(0x0f684368, 0xc472fe92),
+     TOBN(0xd3f1b5ed, 0x6247e7ef), TOBN(0xb32d33a9, 0x396dfe21),
+     TOBN(0x46f59cf4, 0x4a9aa2c2), TOBN(0x69cd5168, 0xff0f7e41),
+     TOBN(0x3f59da0f, 0x4b3234da), TOBN(0xcf0b0235, 0xb4579ebe),
+     TOBN(0x6d1cbb25, 0x6d2476c7), TOBN(0x4f0837e6, 0x9dc30f08),
+     TOBN(0x9a4075bb, 0x906f6e98), TOBN(0x253bb434, 0xc761e7d1),
+     TOBN(0xde2e645f, 0x6e73af10), TOBN(0xb89a4060, 0x0c5f131c),
+     TOBN(0xd12840c5, 0xb8cc037f), TOBN(0x3d093a5b, 0x7405bb47),
+     TOBN(0x6202c253, 0x206348b8), TOBN(0xbf5d57fc, 0xc55a3ca7),
+     TOBN(0x89f6c90c, 0x8c3bef48), TOBN(0x23ac7623, 0x5a0a960a),
+     TOBN(0xdfbd3d6b, 0x552b42ab), TOBN(0x3ef22458, 0x132061f6),
+     TOBN(0xd74e9bda, 0xc97e6516), TOBN(0x88779360, 0xc230f49e),
+     TOBN(0xa6ec1de3, 0x1e74ea49), TOBN(0x581dcee5, 0x3fb645a2),
+     TOBN(0xbaef2391, 0x8f483f14), TOBN(0x6d2dddfc, 0xd137d13b),
+     TOBN(0x54cde50e, 0xd2743a42), TOBN(0x89a34fc5, 0xe4d97e67),
+     TOBN(0x13f1f5b3, 0x12e08ce5), TOBN(0xa80540b8, 0xa7f0b2ca),
+     TOBN(0x854bcf77, 0x01982805), TOBN(0xb8653ffd, 0x233bea04),
+     TOBN(0x8e7b8787, 0x02b0b4c9), TOBN(0x2675261f, 0x9acb170a),
+     TOBN(0x061a9d90, 0x930c14e5), TOBN(0xb59b30e0, 0xdef0abea),
+     TOBN(0x1dc19ea6, 0x0200ec7d), TOBN(0xb6f4a3f9, 0x0bce132b),
+     TOBN(0xb8d5de90, 0xf13e27e0), TOBN(0xbaee5ef0, 0x1fade16f),
+     TOBN(0x6f406aaa, 0xe4c6cf38), TOBN(0xab4cfe06, 0xd1369815),
+     TOBN(0x0dcffe87, 0xefd550c6), TOBN(0x9d4f59c7, 0x75ff7d39),
+     TOBN(0xb02553b1, 0x51deb6ad), TOBN(0x812399a4, 0xb1877749),
+     TOBN(0xce90f71f, 0xca6006e1), TOBN(0xc32363a6, 0xb02b6e77),
+     TOBN(0x02284fbe, 0xdc36c64d), TOBN(0x86c81e31, 0xa7e1ae61),
+     TOBN(0x2576c7e5, 0xb909d94a), TOBN(0x8b6f7d02, 0x818b2bb0),
+     TOBN(0xeca3ed07, 0x56faa38a), TOBN(0xa3790e6c, 0x9305bb54),
+     TOBN(0xd784eeda, 0x7bc73061), TOBN(0xbd56d369, 0x6dd50614),
+     TOBN(0xd6575949, 0x229a8aa9), TOBN(0xdcca8f47, 0x4595ec28),
+     TOBN(0x814305c1, 0x06ab4fe6), TOBN(0xc8c39768, 0x24f43f16),
+     TOBN(0xe2a45f36, 0x523f2b36), TOBN(0x995c6493, 0x920d93bb),
+     TOBN(0xf8afdab7, 0x90f1632b), TOBN(0x79ebbecd, 0x1c295954),
+     TOBN(0xc7bb3ddb, 0x79592f48), TOBN(0x67216a7b, 0x5f88e998),
+     TOBN(0xd91f098b, 0xbc01193e), TOBN(0xf7d928a5, 0xb1db83fc),
+     TOBN(0x55e38417, 0xe991f600), TOBN(0x2a91113e, 0x2981a934),
+     TOBN(0xcbc9d648, 0x06b13bde), TOBN(0xb011b6ac, 0x0755ff44),
+     TOBN(0x6f4cb518, 0x045ec613), TOBN(0x522d2d31, 0xc2f5930a),
+     TOBN(0x5acae1af, 0x382e65de), TOBN(0x57643067, 0x27bc966f),
+     TOBN(0x5e12705d, 0x1c7193f0), TOBN(0xf0f32f47, 0x3be8858e),
+     TOBN(0x785c3d7d, 0x96c6dfc7), TOBN(0xd75b4a20, 0xbf31795d),
+     TOBN(0x91acf17b, 0x342659d4), TOBN(0xe596ea34, 0x44f0378f),
+     TOBN(0x4515708f, 0xce52129d), TOBN(0x17387e1e, 0x79f2f585),
+     TOBN(0x72cfd2e9, 0x49dee168), TOBN(0x1ae05223, 0x3e2af239),
+     TOBN(0x009e75be, 0x1d94066a), TOBN(0x6cca31c7, 0x38abf413),
+     TOBN(0xb50bd61d, 0x9bc49908), TOBN(0x4a9b4a8c, 0xf5e2bc1e),
+     TOBN(0xeb6cc5f7, 0x946f83ac), TOBN(0x27da93fc, 0xebffab28),
+     TOBN(0xea314c96, 0x4821c8c5), TOBN(0x8de49ded, 0xa83c15f4),
+     TOBN(0x7a64cf20, 0x7af33004), TOBN(0x45f1bfeb, 0xc9627e10),
+     TOBN(0x878b0626, 0x54b9df60), TOBN(0x5e4fdc3c, 0xa95c0b33),
+     TOBN(0xe54a37ca, 0xc2035d8e), TOBN(0x9087cda9, 0x80f20b8c),
+     TOBN(0x36f61c23, 0x8319ade4), TOBN(0x766f287a, 0xde8cfdf8),
+     TOBN(0x48821948, 0x346f3705), TOBN(0x49a7b853, 0x16e4f4a2),
+     TOBN(0xb9b3f8a7, 0x5cedadfd), TOBN(0x8f562815, 0x8db2a815),
+     TOBN(0xc0b7d554, 0x01f68f95), TOBN(0x12971e27, 0x688a208e),
+     TOBN(0xc9f8b696, 0xd0ff34fc), TOBN(0x20824de2, 0x1222718c),
+     TOBN(0x7213cf9f, 0x0c95284d), TOBN(0xe2ad741b, 0xdc158240),
+     TOBN(0x0ee3a6df, 0x54043ccf), TOBN(0x16ff479b, 0xd84412b3),
+     TOBN(0xf6c74ee0, 0xdfc98af0), TOBN(0xa78a169f, 0x52fcd2fb),
+     TOBN(0xd8ae8746, 0x99c930e9), TOBN(0x1d33e858, 0x49e117a5),
+     TOBN(0x7581fcb4, 0x6624759f), TOBN(0xde50644f, 0x5bedc01d),
+     TOBN(0xbeec5d00, 0xcaf3155e), TOBN(0x672d66ac, 0xbc73e75f),
+     TOBN(0x86b9d8c6, 0x270b01db), TOBN(0xd249ef83, 0x50f55b79),
+     TOBN(0x6131d6d4, 0x73978fe3), TOBN(0xcc4e4542, 0x754b00a1),
+     TOBN(0x4e05df05, 0x57dfcfe9), TOBN(0x94b29cdd, 0x51ef6bf0),
+     TOBN(0xe4530cff, 0x9bc7edf2), TOBN(0x8ac236fd, 0xd3da65f3),
+     TOBN(0x0faf7d5f, 0xc8eb0b48), TOBN(0x4d2de14c, 0x660eb039),
+     TOBN(0xc006bba7, 0x60430e54), TOBN(0x10a2d0d6, 0xda3289ab),
+     TOBN(0x9c037a5d, 0xd7979c59), TOBN(0x04d1f3d3, 0xa116d944),
+     TOBN(0x9ff22473, 0x8a0983cd), TOBN(0x28e25b38, 0xc883cabb),
+     TOBN(0xe968dba5, 0x47a58995), TOBN(0x2c80b505, 0x774eebdf),
+     TOBN(0xee763b71, 0x4a953beb), TOBN(0x502e223f, 0x1642e7f6),
+     TOBN(0x6fe4b641, 0x61d5e722), TOBN(0x9d37c5b0, 0xdbef5316),
+     TOBN(0x0115ed70, 0xf8330bc7), TOBN(0x139850e6, 0x75a72789),
+     TOBN(0x27d7faec, 0xffceccc2), TOBN(0x3016a860, 0x4fd9f7f6),
+     TOBN(0xc492ec64, 0x4cd8f64c), TOBN(0x58a2d790, 0x279d7b51),
+     TOBN(0x0ced1fc5, 0x1fc75256), TOBN(0x3e658aed, 0x8f433017),
+     TOBN(0x0b61942e, 0x05da59eb), TOBN(0xba3d60a3, 0x0ddc3722),
+     TOBN(0x7c311cd1, 0x742e7f87), TOBN(0x6473ffee, 0xf6b01b6e),}
+    ,
+    {TOBN(0x8303604f, 0x692ac542), TOBN(0xf079ffe1, 0x227b91d3),
+     TOBN(0x19f63e63, 0x15aaf9bd), TOBN(0xf99ee565, 0xf1f344fb),
+     TOBN(0x8a1d661f, 0xd6219199), TOBN(0x8c883bc6, 0xd48ce41c),
+     TOBN(0x1065118f, 0x3c74d904), TOBN(0x713889ee, 0x0faf8b1b),
+     TOBN(0x972b3f8f, 0x81a1b3be), TOBN(0x4f3ce145, 0xce2764a0),
+     TOBN(0xe2d0f1cc, 0x28c4f5f7), TOBN(0xdeee0c0d, 0xc7f3985b),
+     TOBN(0x7df4adc0, 0xd39e25c3), TOBN(0x40619820, 0xc467a080),
+     TOBN(0x440ebc93, 0x61cf5a58), TOBN(0x527729a6, 0x422ad600),
+     TOBN(0xca6c0937, 0xb1b76ba6), TOBN(0x1a2eab85, 0x4d2026dc),
+     TOBN(0xb1715e15, 0x19d9ae0a), TOBN(0xf1ad9199, 0xbac4a026),
+     TOBN(0x35b3dfb8, 0x07ea7b0e), TOBN(0xedf5496f, 0x3ed9eb89),
+     TOBN(0x8932e5ff, 0x2d6d08ab), TOBN(0xf314874e, 0x25bd2731),
+     TOBN(0xefb26a75, 0x3f73f449), TOBN(0x1d1c94f8, 0x8d44fc79),
+     TOBN(0x49f0fbc5, 0x3bc0dc4d), TOBN(0xb747ea0b, 0x3698a0d0),
+     TOBN(0x5218c3fe, 0x228d291e), TOBN(0x35b804b5, 0x43c129d6),
+     TOBN(0xfac859b8, 0xd1acc516), TOBN(0x6c10697d, 0x95d6e668),
+     TOBN(0xc38e438f, 0x0876fd4e), TOBN(0x45f0c307, 0x83d2f383),
+     TOBN(0x203cc2ec, 0xb10934cb), TOBN(0x6a8f2439, 0x2c9d46ee),
+     TOBN(0xf16b431b, 0x65ccde7b), TOBN(0x41e2cd18, 0x27e76a6f),
+     TOBN(0xb9c8cf8f, 0x4e3484d7), TOBN(0x64426efd, 0x8315244a),
+     TOBN(0x1c0a8e44, 0xfc94dea3), TOBN(0x34c8cdbf, 0xdad6a0b0),
+     TOBN(0x919c3840, 0x04113cef), TOBN(0xfd32fba4, 0x15490ffa),
+     TOBN(0x58d190f6, 0x795dcfb7), TOBN(0xfef01b03, 0x83588baf),
+     TOBN(0x9e6d1d63, 0xca1fc1c0), TOBN(0x53173f96, 0xf0a41ac9),
+     TOBN(0x2b1d402a, 0xba16f73b), TOBN(0x2fb31014, 0x8cf9b9fc),
+     TOBN(0x2d51e60e, 0x446ef7bf), TOBN(0xc731021b, 0xb91e1745),
+     TOBN(0x9d3b4724, 0x4fee99d4), TOBN(0x4bca48b6, 0xfac5c1ea),
+     TOBN(0x70f5f514, 0xbbea9af7), TOBN(0x751f55a5, 0x974c283a),
+     TOBN(0x6e30251a, 0xcb452fdb), TOBN(0x31ee6965, 0x50f30650),
+     TOBN(0xb0b3e508, 0x933548d9), TOBN(0xb8949a4f, 0xf4b0ef5b),
+     TOBN(0x208b8326, 0x3c88f3bd), TOBN(0xab147c30, 0xdb1d9989),
+     TOBN(0xed6515fd, 0x44d4df03), TOBN(0x17a12f75, 0xe72eb0c5),
+     TOBN(0x3b59796d, 0x36cf69db), TOBN(0x1219eee9, 0x56670c18),
+     TOBN(0xfe3341f7, 0x7a070d8e), TOBN(0x9b70130b, 0xa327f90c),
+     TOBN(0x36a32462, 0x0ae18e0e), TOBN(0x2021a623, 0x46c0a638),
+     TOBN(0x251b5817, 0xc62eb0d4), TOBN(0x87bfbcdf, 0x4c762293),
+     TOBN(0xf78ab505, 0xcdd61d64), TOBN(0x8c7a53fc, 0xc8c18857),
+     TOBN(0xa653ce6f, 0x16147515), TOBN(0x9c923aa5, 0xea7d52d5),
+     TOBN(0xc24709cb, 0x5c18871f), TOBN(0x7d53bec8, 0x73b3cc74),
+     TOBN(0x59264aff, 0xfdd1d4c4), TOBN(0x5555917e, 0x240da582),
+     TOBN(0xcae8bbda, 0x548f5a0e), TOBN(0x1910eaba, 0x3bbfbbe1),
+     TOBN(0xae579685, 0x7677afc3), TOBN(0x49ea61f1, 0x73ff0b5c),
+     TOBN(0x78655478, 0x4f7c3922), TOBN(0x95d337cd, 0x20c68eef),
+     TOBN(0x68f1e1e5, 0xdf779ab9), TOBN(0x14b491b0, 0xb5cf69a8),
+     TOBN(0x7a6cbbe0, 0x28e3fe89), TOBN(0xe7e1fee4, 0xc5aac0eb),
+     TOBN(0x7f47eda5, 0x697e5140), TOBN(0x4f450137, 0xb454921f),
+     TOBN(0xdb625f84, 0x95cd8185), TOBN(0x74be0ba1, 0xcdb2e583),
+     TOBN(0xaee4fd7c, 0xdd5e6de4), TOBN(0x4251437d, 0xe8101739),
+     TOBN(0x686d72a0, 0xac620366), TOBN(0x4be3fb9c, 0xb6d59344),
+     TOBN(0x6e8b44e7, 0xa1eb75b9), TOBN(0x84e39da3, 0x91a5c10c),
+     TOBN(0x37cc1490, 0xb38f0409), TOBN(0x02951943, 0x2c2ade82),
+     TOBN(0x9b688783, 0x1190a2d8), TOBN(0x25627d14, 0x231182ba),
+     TOBN(0x6eb550aa, 0x658a6d87), TOBN(0x1405aaa7, 0xcf9c7325),
+     TOBN(0xd147142e, 0x5c8748c9), TOBN(0x7f637e4f, 0x53ede0e0),
+     TOBN(0xf8ca2776, 0x14ffad2c), TOBN(0xe58fb1bd, 0xbafb6791),
+     TOBN(0x17158c23, 0xbf8f93fc), TOBN(0x7f15b373, 0x0a4a4655),
+     TOBN(0x39d4add2, 0xd842ca72), TOBN(0xa71e4391, 0x3ed96305),
+     TOBN(0x5bb09cbe, 0x6700be14), TOBN(0x68d69d54, 0xd8befcf6),
+     TOBN(0xa45f5367, 0x37183bcf), TOBN(0x7152b7bb, 0x3370dff7),
+     TOBN(0xcf887baa, 0xbf12525b), TOBN(0xe7ac7bdd, 0xd6d1e3cd),
+     TOBN(0x25914f78, 0x81fdad90), TOBN(0xcf638f56, 0x0d2cf6ab),
+     TOBN(0xb90bc03f, 0xcc054de5), TOBN(0x932811a7, 0x18b06350),
+     TOBN(0x2f00b330, 0x9bbd11ff), TOBN(0x76108a6f, 0xb4044974),
+     TOBN(0x801bb9e0, 0xa851d266), TOBN(0x0dd099be, 0xbf8990c1),
+     TOBN(0x58c5aaaa, 0xabe32986), TOBN(0x0fe9dd2a, 0x50d59c27),
+     TOBN(0x84951ff4, 0x8d307305), TOBN(0x6c23f829, 0x86529b78),
+     TOBN(0x50bb2218, 0x0b136a79), TOBN(0x7e2174de, 0x77a20996),
+     TOBN(0x6f00a4b9, 0xc0bb4da6), TOBN(0x89a25a17, 0xefdde8da),
+     TOBN(0xf728a27e, 0xc11ee01d), TOBN(0xf900553a, 0xe5f10dfb),
+     TOBN(0x189a83c8, 0x02ec893c), TOBN(0x3ca5bdc1, 0x23f66d77),
+     TOBN(0x98781537, 0x97eada9f), TOBN(0x59c50ab3, 0x10256230),
+     TOBN(0x346042d9, 0x323c69b3), TOBN(0x1b715a6d, 0x2c460449),
+     TOBN(0xa41dd476, 0x6ae06e0b), TOBN(0xcdd7888e, 0x9d42e25f),
+     TOBN(0x0f395f74, 0x56b25a20), TOBN(0xeadfe0ae, 0x8700e27e),
+     TOBN(0xb09d52a9, 0x69950093), TOBN(0x3525d9cb, 0x327f8d40),
+     TOBN(0xb8235a94, 0x67df886a), TOBN(0x77e4b0dd, 0x035faec2),
+     TOBN(0x115eb20a, 0x517d7061), TOBN(0x77fe3433, 0x6c2df683),
+     TOBN(0x6870ddc7, 0xcdc6fc67), TOBN(0xb1610588, 0x0b87de83),
+     TOBN(0x343584ca, 0xd9c4ddbe), TOBN(0xb3164f1c, 0x3d754be2),
+     TOBN(0x0731ed3a, 0xc1e6c894), TOBN(0x26327dec, 0x4f6b904c),
+     TOBN(0x9d49c6de, 0x97b5cd32), TOBN(0x40835dae, 0xb5eceecd),
+     TOBN(0xc66350ed, 0xd9ded7fe), TOBN(0x8aeebb5c, 0x7a678804),
+     TOBN(0x51d42fb7, 0x5b8ee9ec), TOBN(0xd7a17bdd, 0x8e3ca118),
+     TOBN(0x40d7511a, 0x2ef4400e), TOBN(0xc48990ac, 0x875a66f4),
+     TOBN(0x8de07d2a, 0x2199e347), TOBN(0xbee75556, 0x2a39e051),
+     TOBN(0x56918786, 0x916e51dc), TOBN(0xeb191313, 0x4a2d89ec),
+     TOBN(0x6679610d, 0x37d341ed), TOBN(0x434fbb41, 0x56d51c2b),
+     TOBN(0xe54b7ee7, 0xd7492dba), TOBN(0xaa33a79a, 0x59021493),
+     TOBN(0x49fc5054, 0xe4bd6d3d), TOBN(0x09540f04, 0x5ab551d0),
+     TOBN(0x8acc9085, 0x4942d3a6), TOBN(0x231af02f, 0x2d28323b),
+     TOBN(0x93458cac, 0x0992c163), TOBN(0x1fef8e71, 0x888e3bb4),
+     TOBN(0x27578da5, 0xbe8c268c), TOBN(0xcc8be792, 0xe805ec00),
+     TOBN(0x29267bae, 0xc61c3855), TOBN(0xebff429d, 0x58c1fd3b),
+     TOBN(0x22d886c0, 0x8c0b93b8), TOBN(0xca5e00b2, 0x2ddb8953),
+     TOBN(0xcf330117, 0xc3fed8b7), TOBN(0xd49ac6fa, 0x819c01f6),
+     TOBN(0x6ddaa6bd, 0x3c0fbd54), TOBN(0x91743068, 0x8049a2cf),
+     TOBN(0xd67f981e, 0xaff2ef81), TOBN(0xc3654d35, 0x2818ae80),
+     TOBN(0x81d05044, 0x1b2aa892), TOBN(0x2db067bf, 0x3d099328),
+     TOBN(0xe7c79e86, 0x703dcc97), TOBN(0xe66f9b37, 0xe133e215),
+     TOBN(0xcdf119a6, 0xe39a7a5c), TOBN(0x47c60de3, 0x876f1b61),
+     TOBN(0x6e405939, 0xd860f1b2), TOBN(0x3e9a1dbc, 0xf5ed4d4a),
+     TOBN(0x3f23619e, 0xc9b6bcbd), TOBN(0x5ee790cf, 0x734e4497),
+     TOBN(0xf0a834b1, 0x5bdaf9bb), TOBN(0x02cedda7, 0x4ca295f0),
+     TOBN(0x4619aa2b, 0xcb8e378c), TOBN(0xe5613244, 0xcc987ea4),
+     TOBN(0x0bc022cc, 0x76b23a50), TOBN(0x4a2793ad, 0x0a6c21ce),
+     TOBN(0x38328780, 0x89cac3f5), TOBN(0x29176f1b, 0xcba26d56),
+     TOBN(0x06296187, 0x4f6f59eb), TOBN(0x86e9bca9, 0x8bdc658e),
+     TOBN(0x2ca9c4d3, 0x57e30402), TOBN(0x5438b216, 0x516a09bb),
+     TOBN(0x0a6a063c, 0x7672765a), TOBN(0x37a3ce64, 0x0547b9bf),
+     TOBN(0x42c099c8, 0x98b1a633), TOBN(0xb5ab800d, 0x05ee6961),
+     TOBN(0xf1963f59, 0x11a5acd6), TOBN(0xbaee6157, 0x46201063),
+     TOBN(0x36d9a649, 0xa596210a), TOBN(0xaed04363, 0x1ba7138c),
+     TOBN(0xcf817d1c, 0xa4a82b76), TOBN(0x5586960e, 0xf3806be9),
+     TOBN(0x7ab67c89, 0x09dc6bb5), TOBN(0x52ace7a0, 0x114fe7eb),
+     TOBN(0xcd987618, 0xcbbc9b70), TOBN(0x4f06fd5a, 0x604ca5e1),
+     TOBN(0x90af14ca, 0x6dbde133), TOBN(0x1afe4322, 0x948a3264),
+     TOBN(0xa70d2ca6, 0xc44b2c6c), TOBN(0xab726799, 0x0ef87dfe),
+     TOBN(0x310f64dc, 0x2e696377), TOBN(0x49b42e68, 0x4c8126a0),
+     TOBN(0x0ea444c3, 0xcea0b176), TOBN(0x53a8ddf7, 0xcb269182),
+     TOBN(0xf3e674eb, 0xbbba9dcb), TOBN(0x0d2878a8, 0xd8669d33),
+     TOBN(0x04b935d5, 0xd019b6a3), TOBN(0xbb5cf88e, 0x406f1e46),
+     TOBN(0xa1912d16, 0x5b57c111), TOBN(0x9803fc21, 0x19ebfd78),
+     TOBN(0x4f231c9e, 0xc07764a9), TOBN(0xd93286ee, 0xb75bd055),
+     TOBN(0x83a9457d, 0x8ee6c9de), TOBN(0x04695915, 0x6087ec90),
+     TOBN(0x14c6dd8a, 0x58d6cd46), TOBN(0x9cb633b5, 0x8e6634d2),
+     TOBN(0xc1305047, 0xf81bc328), TOBN(0x12ede0e2, 0x26a177e5),
+     TOBN(0x332cca62, 0x065a6f4f), TOBN(0xc3a47ecd, 0x67be487b),
+     TOBN(0x741eb187, 0x0f47ed1c), TOBN(0x99e66e58, 0xe7598b14),
+     TOBN(0x6f0544ca, 0x63d0ff12), TOBN(0xe5efc784, 0xb610a05f),
+     TOBN(0xf72917b1, 0x7cad7b47), TOBN(0x3ff6ea20, 0xf2cac0c0),
+     TOBN(0xcc23791b, 0xf21db8b7), TOBN(0x7dac70b1, 0xd7d93565),
+     TOBN(0x682cda1d, 0x694bdaad), TOBN(0xeb88bb8c, 0x1023516d),
+     TOBN(0xc4c634b4, 0xdfdbeb1b), TOBN(0x22f5ca72, 0xb4ee4dea),
+     TOBN(0x1045a368, 0xe6524821), TOBN(0xed9e8a3f, 0x052b18b2),
+     TOBN(0x9b7f2cb1, 0xb961f49a), TOBN(0x7fee2ec1, 0x7b009670),
+     TOBN(0x350d8754, 0x22507a6d), TOBN(0x561bd711, 0x4db55f1d),
+     TOBN(0x4c189ccc, 0x320bbcaf), TOBN(0x568434cf, 0xdf1de48c),
+     TOBN(0x6af1b00e, 0x0fa8f128), TOBN(0xf0ba9d02, 0x8907583c),
+     TOBN(0x735a4004, 0x32ff9f60), TOBN(0x3dd8e4b6, 0xc25dcf33),
+     TOBN(0xf2230f16, 0x42c74cef), TOBN(0xd8117623, 0x013fa8ad),
+     TOBN(0x36822876, 0xf51fe76e), TOBN(0x8a6811cc, 0x11d62589),
+     TOBN(0xc3fc7e65, 0x46225718), TOBN(0xb7df2c9f, 0xc82fdbcd),
+     TOBN(0x3b1d4e52, 0xdd7b205b), TOBN(0xb6959478, 0x47a2e414),
+     TOBN(0x05e4d793, 0xefa91148), TOBN(0xb47ed446, 0xfd2e9675),
+     TOBN(0x1a7098b9, 0x04c9d9bf), TOBN(0x661e2881, 0x1b793048),
+     TOBN(0xb1a16966, 0xb01ee461), TOBN(0xbc521308, 0x2954746f),
+     TOBN(0xc909a0fc, 0x2477de50), TOBN(0xd80bb41c, 0x7dbd51ef),
+     TOBN(0xa85be7ec, 0x53294905), TOBN(0x6d465b18, 0x83958f97),
+     TOBN(0x16f6f330, 0xfb6840fd), TOBN(0xfaaeb214, 0x3401e6c8),
+     TOBN(0xaf83d30f, 0xccb5b4f8), TOBN(0x22885739, 0x266dec4b),
+     TOBN(0x51b4367c, 0x7bc467df), TOBN(0x926562e3, 0xd842d27a),
+     TOBN(0xdfcb6614, 0x0fea14a6), TOBN(0xeb394dae, 0xf2734cd9),
+     TOBN(0x3eeae5d2, 0x11c0be98), TOBN(0xb1e6ed11, 0x814e8165),
+     TOBN(0x191086bc, 0xe52bce1c), TOBN(0x14b74cc6, 0xa75a04da),
+     TOBN(0x63cf1186, 0x8c060985), TOBN(0x071047de, 0x2dbd7f7c),
+     TOBN(0x4e433b8b, 0xce0942ca), TOBN(0xecbac447, 0xd8fec61d),
+     TOBN(0x8f0ed0e2, 0xebf3232f), TOBN(0xfff80f9e, 0xc52a2edd),
+     TOBN(0xad9ab433, 0x75b55fdb), TOBN(0x73ca7820, 0xe42e0c11),
+     TOBN(0x6dace0a0, 0xe6251b46), TOBN(0x89bc6b5c, 0x4c0d932d),
+     TOBN(0x3438cd77, 0x095da19a), TOBN(0x2f24a939, 0x8d48bdfb),
+     TOBN(0x99b47e46, 0x766561b7), TOBN(0x736600e6, 0x0ed0322a),
+     TOBN(0x06a47cb1, 0x638e1865), TOBN(0x927c1c2d, 0xcb136000),
+     TOBN(0x29542337, 0x0cc5df69), TOBN(0x99b37c02, 0x09d649a9),
+     TOBN(0xc5f0043c, 0x6aefdb27), TOBN(0x6cdd9987, 0x1be95c27),
+     TOBN(0x69850931, 0x390420d2), TOBN(0x299c40ac, 0x0983efa4),
+     TOBN(0x3a05e778, 0xaf39aead), TOBN(0x84274408, 0x43a45193),
+     TOBN(0x6bcd0fb9, 0x91a711a0), TOBN(0x461592c8, 0x9f52ab17),
+     TOBN(0xb49302b4, 0xda3c6ed6), TOBN(0xc51fddc7, 0x330d7067),
+     TOBN(0x94babeb6, 0xda50d531), TOBN(0x521b840d, 0xa6a7b9da),
+     TOBN(0x5305151e, 0x404bdc89), TOBN(0x1bcde201, 0xd0d07449),
+     TOBN(0xf427a78b, 0x3b76a59a), TOBN(0xf84841ce, 0x07791a1b),
+     TOBN(0xebd314be, 0xbf91ed1c), TOBN(0x8e61d34c, 0xbf172943),
+     TOBN(0x1d5dc451, 0x5541b892), TOBN(0xb186ee41, 0xfc9d9e54),
+     TOBN(0x9d9f345e, 0xd5bf610d), TOBN(0x3e7ba65d, 0xf6acca9f),
+     TOBN(0x9dda787a, 0xa8369486), TOBN(0x09f9dab7, 0x8eb5ba53),
+     TOBN(0x5afb2033, 0xd6481bc3), TOBN(0x76f4ce30, 0xafa62104),
+     TOBN(0xa8fa00cf, 0xf4f066b5), TOBN(0x89ab5143, 0x461dafc2),
+     TOBN(0x44339ed7, 0xa3389998), TOBN(0x2ff862f1, 0xbc214903),
+     TOBN(0x2c88f985, 0xb05556e3), TOBN(0xcd96058e, 0x3467081e),
+     TOBN(0x7d6a4176, 0xedc637ea), TOBN(0xe1743d09, 0x36a5acdc),
+     TOBN(0x66fd72e2, 0x7eb37726), TOBN(0xf7fa264e, 0x1481a037),
+     TOBN(0x9fbd3bde, 0x45f4aa79), TOBN(0xed1e0147, 0x767c3e22),
+     TOBN(0x7621f979, 0x82e7abe2), TOBN(0x19eedc72, 0x45f633f8),
+     TOBN(0xe69b155e, 0x6137bf3a), TOBN(0xa0ad13ce, 0x414ee94e),
+     TOBN(0x93e3d524, 0x1c0e651a), TOBN(0xab1a6e2a, 0x02ce227e),
+     TOBN(0xe7af1797, 0x4ab27eca), TOBN(0x245446de, 0xbd444f39),
+     TOBN(0x59e22a21, 0x56c07613), TOBN(0x43deafce, 0xf4275498),
+     TOBN(0x10834ccb, 0x67fd0946), TOBN(0xa75841e5, 0x47406edf),
+     TOBN(0xebd6a677, 0x7b0ac93d), TOBN(0xa6e37b0d, 0x78f5e0d7),
+     TOBN(0x2516c096, 0x76f5492b), TOBN(0x1e4bf888, 0x9ac05f3a),
+     TOBN(0xcdb42ce0, 0x4df0ba2b), TOBN(0x935d5cfd, 0x5062341b),
+     TOBN(0x8a303333, 0x82acac20), TOBN(0x429438c4, 0x5198b00e),
+     TOBN(0x1d083bc9, 0x049d33fa), TOBN(0x58b82dda, 0x946f67ff),
+     TOBN(0xac3e2db8, 0x67a1d6a3), TOBN(0x62e6bead, 0x1798aac8),
+     TOBN(0xfc85980f, 0xde46c58c), TOBN(0xa7f69379, 0x69c8d7be),
+     TOBN(0x23557927, 0x837b35ec), TOBN(0x06a933d8, 0xe0790c0c),
+     TOBN(0x827c0e9b, 0x077ff55d), TOBN(0x53977798, 0xbb26e680),
+     TOBN(0x59530874, 0x1d9cb54f), TOBN(0xcca3f449, 0x4aac53ef),
+     TOBN(0x11dc5c87, 0xa07eda0f), TOBN(0xc138bccf, 0xfd6400c8),
+     TOBN(0x549680d3, 0x13e5da72), TOBN(0xc93eed82, 0x4540617e),
+     TOBN(0xfd3db157, 0x4d0b75c0), TOBN(0x9716eb42, 0x6386075b),
+     TOBN(0x0639605c, 0x817b2c16), TOBN(0x09915109, 0xf1e4f201),
+     TOBN(0x35c9a928, 0x5cca6c3b), TOBN(0xb25f7d1a, 0x3505c900),
+     TOBN(0xeb9f7d20, 0x630480c4), TOBN(0xc3c7b8c6, 0x2a1a501c),
+     TOBN(0x3f99183c, 0x5a1f8e24), TOBN(0xfdb118fa, 0x9dd255f0),
+     TOBN(0xb9b18b90, 0xc27f62a6), TOBN(0xe8f732f7, 0x396ec191),
+     TOBN(0x524a2d91, 0x0be786ab), TOBN(0x5d32adef, 0x0ac5a0f5),
+     TOBN(0x9b53d4d6, 0x9725f694), TOBN(0x032a76c6, 0x0510ba89),
+     TOBN(0x840391a3, 0xebeb1544), TOBN(0x44b7b88c, 0x3ed73ac3),
+     TOBN(0xd24bae7a, 0x256cb8b3), TOBN(0x7ceb151a, 0xe394cb12),
+     TOBN(0xbd6b66d0, 0x5bc1e6a8), TOBN(0xec70cecb, 0x090f07bf),
+     TOBN(0x270644ed, 0x7d937589), TOBN(0xee9e1a3d, 0x5f1dccfe),
+     TOBN(0xb0d40a84, 0x745b98d2), TOBN(0xda429a21, 0x2556ed40),
+     TOBN(0xf676eced, 0x85148cb9), TOBN(0x5a22d40c, 0xded18936),
+     TOBN(0x3bc4b9e5, 0x70e8a4ce), TOBN(0xbfd1445b, 0x9eae0379),
+     TOBN(0xf23f2c0c, 0x1a0bd47e), TOBN(0xa9c0bb31, 0xe1845531),
+     TOBN(0x9ddc4d60, 0x0a4c3f6b), TOBN(0xbdfaad79, 0x2c15ef44),
+     TOBN(0xce55a236, 0x7f484acc), TOBN(0x08653ca7, 0x055b1f15),
+     TOBN(0x2efa8724, 0x538873a3), TOBN(0x09299e5d, 0xace1c7e7),
+     TOBN(0x07afab66, 0xade332ba), TOBN(0x9be1fdf6, 0x92dd71b7),
+     TOBN(0xa49b5d59, 0x5758b11c), TOBN(0x0b852893, 0xc8654f40),
+     TOBN(0xb63ef6f4, 0x52379447), TOBN(0xd4957d29, 0x105e690c),
+     TOBN(0x7d484363, 0x646559b0), TOBN(0xf4a8273c, 0x49788a8e),
+     TOBN(0xee406cb8, 0x34ce54a9), TOBN(0x1e1c260f, 0xf86fda9b),
+     TOBN(0xe150e228, 0xcf6a4a81), TOBN(0x1fa3b6a3, 0x1b488772),
+     TOBN(0x1e6ff110, 0xc5a9c15b), TOBN(0xc6133b91, 0x8ad6aa47),
+     TOBN(0x8ac5d55c, 0x9dffa978), TOBN(0xba1d1c1d, 0x5f3965f2),
+     TOBN(0xf969f4e0, 0x7732b52f), TOBN(0xfceecdb5, 0xa5172a07),
+     TOBN(0xb0120a5f, 0x10f2b8f5), TOBN(0xc83a6cdf, 0x5c4c2f63),
+     TOBN(0x4d47a491, 0xf8f9c213), TOBN(0xd9e1cce5, 0xd3f1bbd5),
+     TOBN(0x0d91bc7c, 0xaba7e372), TOBN(0xfcdc74c8, 0xdfd1a2db),
+     TOBN(0x05efa800, 0x374618e5), TOBN(0x11216969, 0x15a7925e),
+     TOBN(0xd4c89823, 0xf6021c5d), TOBN(0x880d5e84, 0xeff14423),
+     TOBN(0x6523bc5a, 0x6dcd1396), TOBN(0xd1acfdfc, 0x113c978b),
+     TOBN(0xb0c164e8, 0xbbb66840), TOBN(0xf7f4301e, 0x72b58459),
+     TOBN(0xc29ad4a6, 0xa638e8ec), TOBN(0xf5ab8961, 0x46b78699),
+     TOBN(0x9dbd7974, 0x0e954750), TOBN(0x0121de88, 0x64f9d2c6),
+     TOBN(0x2e597b42, 0xd985232e), TOBN(0x55b6c3c5, 0x53451777),
+     TOBN(0xbb53e547, 0x519cb9fb), TOBN(0xf134019f, 0x8428600d),
+     TOBN(0x5a473176, 0xe081791a), TOBN(0x2f3e2263, 0x35fb0c08),
+     TOBN(0xb28c3017, 0x73d273b0), TOBN(0xccd21076, 0x7721ef9a),
+     TOBN(0x054cc292, 0xb650dc39), TOBN(0x662246de, 0x6188045e),
+     TOBN(0x904b52fa, 0x6b83c0d1), TOBN(0xa72df267, 0x97e9cd46),
+     TOBN(0x886b43cd, 0x899725e4), TOBN(0x2b651688, 0xd849ff22),
+     TOBN(0x60479b79, 0x02f34533), TOBN(0x5e354c14, 0x0c77c148),
+     TOBN(0xb4bb7581, 0xa8537c78), TOBN(0x188043d7, 0xefe1495f),
+     TOBN(0x9ba12f42, 0x8c1d5026), TOBN(0x2e0c8a26, 0x93d4aaab),
+     TOBN(0xbdba7b8b, 0xaa57c450), TOBN(0x140c9ad6, 0x9bbdafef),
+     TOBN(0x2067aa42, 0x25ac0f18), TOBN(0xf7b1295b, 0x04d1fbf3),
+     TOBN(0x14829111, 0xa4b04824), TOBN(0x2ce3f192, 0x33bd5e91),
+     TOBN(0x9c7a1d55, 0x8f2e1b72), TOBN(0xfe932286, 0x302aa243),
+     TOBN(0x497ca7b4, 0xd4be9554), TOBN(0xb8e821b8, 0xe0547a6e),
+     TOBN(0xfb2838be, 0x67e573e0), TOBN(0x05891db9, 0x4084c44b),
+     TOBN(0x91311373, 0x96c1c2c5), TOBN(0x6aebfa3f, 0xd958444b),
+     TOBN(0xac9cdce9, 0xe56e55c1), TOBN(0x7148ced3, 0x2caa46d0),
+     TOBN(0x2e10c7ef, 0xb61fe8eb), TOBN(0x9fd835da, 0xff97cf4d),}
+    ,
+    {TOBN(0xa36da109, 0x081e9387), TOBN(0xfb9780d7, 0x8c935828),
+     TOBN(0xd5940332, 0xe540b015), TOBN(0xc9d7b51b, 0xe0f466fa),
+     TOBN(0xfaadcd41, 0xd6d9f671), TOBN(0xba6c1e28, 0xb1a2ac17),
+     TOBN(0x066a7833, 0xed201e5f), TOBN(0x19d99719, 0xf90f462b),
+     TOBN(0xf431f462, 0x060b5f61), TOBN(0xa56f46b4, 0x7bd057c2),
+     TOBN(0x348dca6c, 0x47e1bf65), TOBN(0x9a38783e, 0x41bcf1ff),
+     TOBN(0x7a5d33a9, 0xda710718), TOBN(0x5a779987, 0x2e0aeaf6),
+     TOBN(0xca87314d, 0x2d29d187), TOBN(0xfa0edc3e, 0xc687d733),
+     TOBN(0x9df33621, 0x6a31e09b), TOBN(0xde89e44d, 0xc1350e35),
+     TOBN(0x29214871, 0x4ca0cf52), TOBN(0xdf379672, 0x0b88a538),
+     TOBN(0xc92a510a, 0x2591d61b), TOBN(0x79aa87d7, 0x585b447b),
+     TOBN(0xf67db604, 0xe5287f77), TOBN(0x1697c8bf, 0x5efe7a80),
+     TOBN(0x1c894849, 0xcb198ac7), TOBN(0xa884a93d, 0x0f264665),
+     TOBN(0x2da964ef, 0x9b200678), TOBN(0x3c351b87, 0x009834e6),
+     TOBN(0xafb2ef9f, 0xe2c4b44b), TOBN(0x580f6c47, 0x3326790c),
+     TOBN(0xb8480521, 0x0b02264a), TOBN(0x8ba6f9e2, 0x42a194e2),
+     TOBN(0xfc87975f, 0x8fb54738), TOBN(0x35160788, 0x27c3ead3),
+     TOBN(0x834116d2, 0xb74a085a), TOBN(0x53c99a73, 0xa62fe996),
+     TOBN(0x87585be0, 0x5b81c51b), TOBN(0x925bafa8, 0xbe0852b7),
+     TOBN(0x76a4fafd, 0xa84d19a7), TOBN(0x39a45982, 0x585206d4),
+     TOBN(0x499b6ab6, 0x5eb03c0e), TOBN(0xf19b7954, 0x72bc3fde),
+     TOBN(0xa86b5b9c, 0x6e3a80d2), TOBN(0xe4377508, 0x6d42819f),
+     TOBN(0xc1663650, 0xbb3ee8a3), TOBN(0x75eb14fc, 0xb132075f),
+     TOBN(0xa8ccc906, 0x7ad834f6), TOBN(0xea6a2474, 0xe6e92ffd),
+     TOBN(0x9d72fd95, 0x0f8d6758), TOBN(0xcb84e101, 0x408c07dd),
+     TOBN(0xb9114bfd, 0xa5e23221), TOBN(0x358b5fe2, 0xe94e742c),
+     TOBN(0x1c0577ec, 0x95f40e75), TOBN(0xf0155451, 0x3d73f3d6),
+     TOBN(0x9d55cd67, 0xbd1b9b66), TOBN(0x63e86e78, 0xaf8d63c7),
+     TOBN(0x39d934ab, 0xd3c095f1), TOBN(0x04b261be, 0xe4b76d71),
+     TOBN(0x1d2e6970, 0xe73e6984), TOBN(0x879fb23b, 0x5e5fcb11),
+     TOBN(0x11506c72, 0xdfd75490), TOBN(0x3a97d085, 0x61bcf1c1),
+     TOBN(0x43201d82, 0xbf5e7007), TOBN(0x7f0ac52f, 0x798232a7),
+     TOBN(0x2715cbc4, 0x6eb564d4), TOBN(0x8d6c752c, 0x9e570e29),
+     TOBN(0xf80247c8, 0x9ef5fd5d), TOBN(0xc3c66b46, 0xd53eb514),
+     TOBN(0x9666b401, 0x0f87de56), TOBN(0xce62c06f, 0xc6c603b5),
+     TOBN(0xae7b4c60, 0x7e4fc942), TOBN(0x38ac0b77, 0x663a9c19),
+     TOBN(0xcb4d20ee, 0x4b049136), TOBN(0x8b63bf12, 0x356a4613),
+     TOBN(0x1221aef6, 0x70e08128), TOBN(0xe62d8c51, 0x4acb6b16),
+     TOBN(0x71f64a67, 0x379e7896), TOBN(0xb25237a2, 0xcafd7fa5),
+     TOBN(0xf077bd98, 0x3841ba6a), TOBN(0xc4ac0244, 0x3cd16e7e),
+     TOBN(0x548ba869, 0x21fea4ca), TOBN(0xd36d0817, 0xf3dfdac1),
+     TOBN(0x09d8d71f, 0xf4685faf), TOBN(0x8eff66be, 0xc52c459a),
+     TOBN(0x182faee7, 0x0b57235e), TOBN(0xee3c39b1, 0x0106712b),
+     TOBN(0x5107331f, 0xc0fcdcb0), TOBN(0x669fb9dc, 0xa51054ba),
+     TOBN(0xb25101fb, 0x319d7682), TOBN(0xb0293129, 0x0a982fee),
+     TOBN(0x51c1c9b9, 0x0261b344), TOBN(0x0e008c5b, 0xbfd371fa),
+     TOBN(0xd866dd1c, 0x0278ca33), TOBN(0x666f76a6, 0xe5aa53b1),
+     TOBN(0xe5cfb779, 0x6013a2cf), TOBN(0x1d3a1aad, 0xa3521836),
+     TOBN(0xcedd2531, 0x73faa485), TOBN(0xc8ee6c4f, 0xc0a76878),
+     TOBN(0xddbccfc9, 0x2a11667d), TOBN(0x1a418ea9, 0x1c2f695a),
+     TOBN(0xdb11bd92, 0x51f73971), TOBN(0x3e4b3c82, 0xda2ed89f),
+     TOBN(0x9a44f3f4, 0xe73e0319), TOBN(0xd1e3de0f, 0x303431af),
+     TOBN(0x3c5604ff, 0x50f75f9c), TOBN(0x1d8eddf3, 0x7e752b22),
+     TOBN(0x0ef074dd, 0x3c9a1118), TOBN(0xd0ffc172, 0xccb86d7b),
+     TOBN(0xabd1ece3, 0x037d90f2), TOBN(0xe3f307d6, 0x6055856c),
+     TOBN(0x422f9328, 0x7e4c6daf), TOBN(0x902aac66, 0x334879a0),
+     TOBN(0xb6a1e7bf, 0x94cdfade), TOBN(0x6c97e1ed, 0x7fc6d634),
+     TOBN(0x662ad24d, 0xa2fb63f8), TOBN(0xf81be1b9, 0xa5928405),
+     TOBN(0x86d765e4, 0xd14b4206), TOBN(0xbecc2e0e, 0x8fa0db65),
+     TOBN(0xa28838e0, 0xb17fc76c), TOBN(0xe49a602a, 0xe37cf24e),
+     TOBN(0x76b4131a, 0x567193ec), TOBN(0xaf3c305a, 0xe5f6e70b),
+     TOBN(0x9587bd39, 0x031eebdd), TOBN(0x5709def8, 0x71bbe831),
+     TOBN(0x57059983, 0x0eb2b669), TOBN(0x4d80ce1b, 0x875b7029),
+     TOBN(0x838a7da8, 0x0364ac16), TOBN(0x2f431d23, 0xbe1c83ab),
+     TOBN(0xe56812a6, 0xf9294dd3), TOBN(0xb448d01f, 0x9b4b0d77),
+     TOBN(0xf3ae6061, 0x04e8305c), TOBN(0x2bead645, 0x94d8c63e),
+     TOBN(0x0a85434d, 0x84fd8b07), TOBN(0x537b983f, 0xf7a9dee5),
+     TOBN(0xedcc5f18, 0xef55bd85), TOBN(0x2041af62, 0x21c6cf8b),
+     TOBN(0x8e52874c, 0xb940c71e), TOBN(0x211935a9, 0xdb5f4b3a),
+     TOBN(0x94350492, 0x301b1dc3), TOBN(0x33d2646d, 0x29958620),
+     TOBN(0x16b0d64b, 0xef911404), TOBN(0x9d1f25ea, 0x9a3c5ef4),
+     TOBN(0x20f200eb, 0x4a352c78), TOBN(0x43929f2c, 0x4bd0b428),
+     TOBN(0xa5656667, 0xc7196e29), TOBN(0x7992c2f0, 0x9391be48),
+     TOBN(0xaaa97cbd, 0x9ee0cd6e), TOBN(0x51b0310c, 0x3dc8c9bf),
+     TOBN(0x237f8acf, 0xdd9f22cb), TOBN(0xbb1d81a1, 0xb585d584),
+     TOBN(0x8d5d85f5, 0x8c416388), TOBN(0x0d6e5a5a, 0x42fe474f),
+     TOBN(0xe7812766, 0x38235d4e), TOBN(0x1c62bd67, 0x496e3298),
+     TOBN(0x8378660c, 0x3f175bc8), TOBN(0x4d04e189, 0x17afdd4d),
+     TOBN(0x32a81601, 0x85a8068c), TOBN(0xdb58e4e1, 0x92b29a85),
+     TOBN(0xe8a65b86, 0xc70d8a3b), TOBN(0x5f0e6f4e, 0x98a0403b),
+     TOBN(0x08129684, 0x69ed2370), TOBN(0x34dc30bd, 0x0871ee26),
+     TOBN(0x3a5ce948, 0x7c9c5b05), TOBN(0x7d487b80, 0x43a90c87),
+     TOBN(0x4089ba37, 0xdd0e7179), TOBN(0x45f80191, 0xb4041811),
+     TOBN(0x1c3e1058, 0x98747ba5), TOBN(0x98c4e13a, 0x6e1ae592),
+     TOBN(0xd44636e6, 0xe82c9f9e), TOBN(0x711db87c, 0xc33a1043),
+     TOBN(0x6f431263, 0xaa8aec05), TOBN(0x43ff120d, 0x2744a4aa),
+     TOBN(0xd3bd892f, 0xae77779b), TOBN(0xf0fe0cc9, 0x8cdc9f82),
+     TOBN(0xca5f7fe6, 0xf1c5b1bc), TOBN(0xcc63a682, 0x44929a72),
+     TOBN(0xc7eaba0c, 0x09dbe19a), TOBN(0x2f3585ad, 0x6b5c73c2),
+     TOBN(0x8ab8924b, 0x0ae50c30), TOBN(0x17fcd27a, 0x638b30ba),
+     TOBN(0xaf414d34, 0x10b3d5a5), TOBN(0x09c107d2, 0x2a9accf1),
+     TOBN(0x15dac49f, 0x946a6242), TOBN(0xaec3df2a, 0xd707d642),
+     TOBN(0x2c2492b7, 0x3f894ae0), TOBN(0xf59df3e5, 0xb75f18ce),
+     TOBN(0x7cb740d2, 0x8f53cad0), TOBN(0x3eb585fb, 0xc4f01294),
+     TOBN(0x17da0c86, 0x32c7f717), TOBN(0xeb8c795b, 0xaf943f4c),
+     TOBN(0x4ee23fb5, 0xf67c51d2), TOBN(0xef187575, 0x68889949),
+     TOBN(0xa6b4bdb2, 0x0389168b), TOBN(0xc4ecd258, 0xea577d03),
+     TOBN(0x3a63782b, 0x55743082), TOBN(0x6f678f4c, 0xc72f08cd),
+     TOBN(0x553511cf, 0x65e58dd8), TOBN(0xd53b4e3e, 0xd402c0cd),
+     TOBN(0x37de3e29, 0xa037c14c), TOBN(0x86b6c516, 0xc05712aa),
+     TOBN(0x2834da3e, 0xb38dff6f), TOBN(0xbe012c52, 0xea636be8),
+     TOBN(0x292d238c, 0x61dd37f8), TOBN(0x0e54523f, 0x8f8142db),
+     TOBN(0xe31eb436, 0x036a05d8), TOBN(0x83e3cdff, 0x1e93c0ff),
+     TOBN(0x3fd2fe0f, 0x50821ddf), TOBN(0xc8e19b0d, 0xff9eb33b),
+     TOBN(0xc8cc943f, 0xb569a5fe), TOBN(0xad0090d4, 0xd4342d75),
+     TOBN(0x82090b4b, 0xcaeca000), TOBN(0xca39687f, 0x1bd410eb),
+     TOBN(0xe7bb0df7, 0x65959d77), TOBN(0x39d78218, 0x9c964999),
+     TOBN(0xd87f62e8, 0xb2415451), TOBN(0xe5efb774, 0xbed76108),
+     TOBN(0x3ea011a4, 0xe822f0d0), TOBN(0xbc647ad1, 0x5a8704f8),
+     TOBN(0xbb315b35, 0x50c6820f), TOBN(0x863dec3d, 0xb7e76bec),
+     TOBN(0x01ff5d3a, 0xf017bfc7), TOBN(0x20054439, 0x976b8229),
+     TOBN(0x067fca37, 0x0bbd0d3b), TOBN(0xf63dde64, 0x7f5e3d0f),
+     TOBN(0x22dbefb3, 0x2a4c94e9), TOBN(0xafbff0fe, 0x96f8278a),
+     TOBN(0x80aea0b1, 0x3503793d), TOBN(0xb2238029, 0x5f06cd29),
+     TOBN(0x65703e57, 0x8ec3feca), TOBN(0x06c38314, 0x393e7053),
+     TOBN(0xa0b751eb, 0x7c6734c4), TOBN(0xd2e8a435, 0xc59f0f1e),
+     TOBN(0x147d9052, 0x5e9ca895), TOBN(0x2f4dd31e, 0x972072df),
+     TOBN(0xa16fda8e, 0xe6c6755c), TOBN(0xc66826ff, 0xcf196558),
+     TOBN(0x1f1a76a3, 0x0cf43895), TOBN(0xa9d604e0, 0x83c3097b),
+     TOBN(0xe1908309, 0x66390e0e), TOBN(0xa50bf753, 0xb3c85eff),
+     TOBN(0x0696bdde, 0xf6a70251), TOBN(0x548b801b, 0x3c6ab16a),
+     TOBN(0x37fcf704, 0xa4d08762), TOBN(0x090b3def, 0xdff76c4e),
+     TOBN(0x87e8cb89, 0x69cb9158), TOBN(0x44a90744, 0x995ece43),
+     TOBN(0xf85395f4, 0x0ad9fbf5), TOBN(0x49b0f6c5, 0x4fb0c82d),
+     TOBN(0x75d9bc15, 0xadf7cccf), TOBN(0x81a3e5d6, 0xdfa1e1b0),
+     TOBN(0x8c39e444, 0x249bc17e), TOBN(0xf37dccb2, 0x8ea7fd43),
+     TOBN(0xda654873, 0x907fba12), TOBN(0x35daa6da, 0x4a372904),
+     TOBN(0x0564cfc6, 0x6283a6c5), TOBN(0xd09fa4f6, 0x4a9395bf),
+     TOBN(0x688e9ec9, 0xaeb19a36), TOBN(0xd913f1ce, 0xc7bfbfb4),
+     TOBN(0x797b9a3c, 0x61c2faa6), TOBN(0x2f979bec, 0x6a0a9c12),
+     TOBN(0xb5969d0f, 0x359679ec), TOBN(0xebcf523d, 0x079b0460),
+     TOBN(0xfd6b0008, 0x10fab870), TOBN(0x3f2edcda, 0x9373a39c),
+     TOBN(0x0d64f9a7, 0x6f568431), TOBN(0xf848c27c, 0x02f8898c),
+     TOBN(0xf418ade1, 0x260b5bd5), TOBN(0xc1f3e323, 0x6973dee8),
+     TOBN(0x46e9319c, 0x26c185dd), TOBN(0x6d85b7d8, 0x546f0ac4),
+     TOBN(0x427965f2, 0x247f9d57), TOBN(0xb519b636, 0xb0035f48),
+     TOBN(0x6b6163a9, 0xab87d59c), TOBN(0xff9f58c3, 0x39caaa11),
+     TOBN(0x4ac39cde, 0x3177387b), TOBN(0x5f6557c2, 0x873e77f9),
+     TOBN(0x67504006, 0x36a83041), TOBN(0x9b1c96ca, 0x75ef196c),
+     TOBN(0xf34283de, 0xb08c7940), TOBN(0x7ea09644, 0x1128c316),
+     TOBN(0xb510b3b5, 0x6aa39dff), TOBN(0x59b43da2, 0x9f8e4d8c),
+     TOBN(0xa8ce31fd, 0x9e4c4b9f), TOBN(0x0e20be26, 0xc1303c01),
+     TOBN(0x18187182, 0xe8ee47c9), TOBN(0xd9687cdb, 0x7db98101),
+     TOBN(0x7a520e4d, 0xa1e14ff6), TOBN(0x429808ba, 0x8836d572),
+     TOBN(0xa37ca60d, 0x4944b663), TOBN(0xf901f7a9, 0xa3f91ae5),
+     TOBN(0xe4e3e76e, 0x9e36e3b1), TOBN(0x9aa219cf, 0x29d93250),
+     TOBN(0x347fe275, 0x056a2512), TOBN(0xa4d643d9, 0xde65d95c),
+     TOBN(0x9669d396, 0x699fc3ed), TOBN(0xb598dee2, 0xcf8c6bbe),
+     TOBN(0x682ac1e5, 0xdda9e5c6), TOBN(0x4e0d3c72, 0xcaa9fc95),
+     TOBN(0x17faaade, 0x772bea44), TOBN(0x5ef8428c, 0xab0009c8),
+     TOBN(0xcc4ce47a, 0x460ff016), TOBN(0xda6d12bf, 0x725281cb),
+     TOBN(0x44c67848, 0x0223aad2), TOBN(0x6e342afa, 0x36256e28),
+     TOBN(0x1400bb0b, 0x93a37c04), TOBN(0x62b1bc9b, 0xdd10bd96),
+     TOBN(0x7251adeb, 0x0dac46b7), TOBN(0x7d33b92e, 0x7be4ef51),
+     TOBN(0x28b2a94b, 0xe61fa29a), TOBN(0x4b2be13f, 0x06422233),
+     TOBN(0x36d6d062, 0x330d8d37), TOBN(0x5ef80e1e, 0xb28ca005),
+     TOBN(0x174d4699, 0x6d16768e), TOBN(0x9fc4ff6a, 0x628bf217),
+     TOBN(0x77705a94, 0x154e490d), TOBN(0x9d96dd28, 0x8d2d997a),
+     TOBN(0x77e2d9d8, 0xce5d72c4), TOBN(0x9d06c5a4, 0xc11c714f),
+     TOBN(0x02aa5136, 0x79e4a03e), TOBN(0x1386b3c2, 0x030ff28b),
+     TOBN(0xfe82e8a6, 0xfb283f61), TOBN(0x7df203e5, 0xf3abc3fb),
+     TOBN(0xeec7c351, 0x3a4d3622), TOBN(0xf7d17dbf, 0xdf762761),
+     TOBN(0xc3956e44, 0x522055f0), TOBN(0xde3012db, 0x8fa748db),
+     TOBN(0xca9fcb63, 0xbf1dcc14), TOBN(0xa56d9dcf, 0xbe4e2f3a),
+     TOBN(0xb86186b6, 0x8bcec9c2), TOBN(0x7cf24df9, 0x680b9f06),
+     TOBN(0xc46b45ea, 0xc0d29281), TOBN(0xfff42bc5, 0x07b10e12),
+     TOBN(0x12263c40, 0x4d289427), TOBN(0x3d5f1899, 0xb4848ec4),
+     TOBN(0x11f97010, 0xd040800c), TOBN(0xb4c5f529, 0x300feb20),
+     TOBN(0xcc543f8f, 0xde94fdcb), TOBN(0xe96af739, 0xc7c2f05e),
+     TOBN(0xaa5e0036, 0x882692e1), TOBN(0x09c75b68, 0x950d4ae9),
+     TOBN(0x62f63df2, 0xb5932a7a), TOBN(0x2658252e, 0xde0979ad),
+     TOBN(0x2a19343f, 0xb5e69631), TOBN(0x718c7501, 0x525b666b),
+     TOBN(0x26a42d69, 0xea40dc3a), TOBN(0xdc84ad22, 0xaecc018f),
+     TOBN(0x25c36c7b, 0x3270f04a), TOBN(0x46ba6d47, 0x50fa72ed),
+     TOBN(0x6c37d1c5, 0x93e58a8e), TOBN(0xa2394731, 0x120c088c),
+     TOBN(0xc3be4263, 0xcb6e86da), TOBN(0x2c417d36, 0x7126d038),
+     TOBN(0x5b70f9c5, 0x8b6f8efa), TOBN(0x671a2faa, 0x37718536),
+     TOBN(0xd3ced3c6, 0xb539c92b), TOBN(0xe56f1bd9, 0xa31203c2),
+     TOBN(0x8b096ec4, 0x9ff3c8eb), TOBN(0x2deae432, 0x43491cea),
+     TOBN(0x2465c6eb, 0x17943794), TOBN(0x5d267e66, 0x20586843),
+     TOBN(0x9d3d116d, 0xb07159d0), TOBN(0xae07a67f, 0xc1896210),
+     TOBN(0x8fc84d87, 0xbb961579), TOBN(0x30009e49, 0x1c1f8dd6),
+     TOBN(0x8a8caf22, 0xe3132819), TOBN(0xcffa197c, 0xf23ab4ff),
+     TOBN(0x58103a44, 0x205dd687), TOBN(0x57b796c3, 0x0ded67a2),
+     TOBN(0x0b9c3a6c, 0xa1779ad7), TOBN(0xa33cfe2e, 0x357c09c5),
+     TOBN(0x2ea29315, 0x3db4a57e), TOBN(0x91959695, 0x8ebeb52e),
+     TOBN(0x118db9a6, 0xe546c879), TOBN(0x8e996df4, 0x6295c8d6),
+     TOBN(0xdd990484, 0x55ec806b), TOBN(0x24f291ca, 0x165c1035),
+     TOBN(0xcca523bb, 0x440e2229), TOBN(0x324673a2, 0x73ef4d04),
+     TOBN(0xaf3adf34, 0x3e11ec39), TOBN(0x6136d7f1, 0xdc5968d3),
+     TOBN(0x7a7b2899, 0xb053a927), TOBN(0x3eaa2661, 0xae067ecd),
+     TOBN(0x8549b9c8, 0x02779cd9), TOBN(0x061d7940, 0xc53385ea),
+     TOBN(0x3e0ba883, 0xf06d18bd), TOBN(0x4ba6de53, 0xb2700843),
+     TOBN(0xb966b668, 0x591a9e4d), TOBN(0x93f67567, 0x7f4fa0ed),
+     TOBN(0x5a02711b, 0x4347237b), TOBN(0xbc041e2f, 0xe794608e),
+     TOBN(0x55af10f5, 0x70f73d8c), TOBN(0xd2d4d4f7, 0xbb7564f7),
+     TOBN(0xd7d27a89, 0xb3e93ce7), TOBN(0xf7b5a875, 0x5d3a2c1b),
+     TOBN(0xb29e68a0, 0x255b218a), TOBN(0xb533837e, 0x8af76754),
+     TOBN(0xd1b05a73, 0x579fab2e), TOBN(0xb41055a1, 0xecd74385),
+     TOBN(0xb2369274, 0x445e9115), TOBN(0x2972a7c4, 0xf520274e),
+     TOBN(0x6c08334e, 0xf678e68a), TOBN(0x4e4160f0, 0x99b057ed),
+     TOBN(0x3cfe11b8, 0x52ccb69a), TOBN(0x2fd1823a, 0x21c8f772),
+     TOBN(0xdf7f072f, 0x3298f055), TOBN(0x8c0566f9, 0xfec74a6e),
+     TOBN(0xe549e019, 0x5bb4d041), TOBN(0x7c3930ba, 0x9208d850),
+     TOBN(0xe07141fc, 0xaaa2902b), TOBN(0x539ad799, 0xe4f69ad3),
+     TOBN(0xa6453f94, 0x813f9ffd), TOBN(0xc58d3c48, 0x375bc2f7),
+     TOBN(0xb3326fad, 0x5dc64e96), TOBN(0x3aafcaa9, 0xb240e354),
+     TOBN(0x1d1b0903, 0xaca1e7a9), TOBN(0x4ceb9767, 0x1211b8a0),
+     TOBN(0xeca83e49, 0xe32a858e), TOBN(0x4c32892e, 0xae907bad),
+     TOBN(0xd5b42ab6, 0x2eb9b494), TOBN(0x7fde3ee2, 0x1eabae1b),
+     TOBN(0x13b5ab09, 0xcaf54957), TOBN(0xbfb028be, 0xe5f5d5d5),
+     TOBN(0x928a0650, 0x2003e2c0), TOBN(0x90793aac, 0x67476843),
+     TOBN(0x5e942e79, 0xc81710a0), TOBN(0x557e4a36, 0x27ccadd4),
+     TOBN(0x72a2bc56, 0x4bcf6d0c), TOBN(0x09ee5f43, 0x26d7b80c),
+     TOBN(0x6b70dbe9, 0xd4292f19), TOBN(0x56f74c26, 0x63f16b18),
+     TOBN(0xc23db0f7, 0x35fbb42a), TOBN(0xb606bdf6, 0x6ae10040),
+     TOBN(0x1eb15d4d, 0x044573ac), TOBN(0x7dc3cf86, 0x556b0ba4),
+     TOBN(0x97af9a33, 0xc60df6f7), TOBN(0x0b1ef85c, 0xa716ce8c),
+     TOBN(0x2922f884, 0xc96958be), TOBN(0x7c32fa94, 0x35690963),
+     TOBN(0x2d7f667c, 0xeaa00061), TOBN(0xeaaf7c17, 0x3547365c),
+     TOBN(0x1eb4de46, 0x87032d58), TOBN(0xc54f3d83, 0x5e2c79e0),
+     TOBN(0x07818df4, 0x5d04ef23), TOBN(0x55faa9c8, 0x673d41b4),
+     TOBN(0xced64f6f, 0x89b95355), TOBN(0x4860d2ea, 0xb7415c84),
+     TOBN(0x5fdb9bd2, 0x050ebad3), TOBN(0xdb53e0cc, 0x6685a5bf),
+     TOBN(0xb830c031, 0x9feb6593), TOBN(0xdd87f310, 0x6accff17),
+     TOBN(0x2303ebab, 0x9f555c10), TOBN(0x94603695, 0x287e7065),
+     TOBN(0xf88311c3, 0x2e83358c), TOBN(0x508dd9b4, 0xeefb0178),
+     TOBN(0x7ca23706, 0x2dba8652), TOBN(0x62aac5a3, 0x0047abe5),
+     TOBN(0x9a61d2a0, 0x8b1ea7b3), TOBN(0xd495ab63, 0xae8b1485),
+     TOBN(0x38740f84, 0x87052f99), TOBN(0x178ebe5b, 0xb2974eea),
+     TOBN(0x030bbcca, 0x5b36d17f), TOBN(0xb5e4cce3, 0xaaf86eea),
+     TOBN(0xb51a0220, 0x68f8e9e0), TOBN(0xa4348796, 0x09eb3e75),
+     TOBN(0xbe592309, 0xeef1a752), TOBN(0x5d7162d7, 0x6f2aa1ed),
+     TOBN(0xaebfb5ed, 0x0f007dd2), TOBN(0x255e14b2, 0xc89edd22),
+     TOBN(0xba85e072, 0x0303b697), TOBN(0xc5d17e25, 0xf05720ff),
+     TOBN(0x02b58d6e, 0x5128ebb6), TOBN(0x2c80242d, 0xd754e113),
+     TOBN(0x919fca5f, 0xabfae1ca), TOBN(0x937afaac, 0x1a21459b),
+     TOBN(0x9e0ca91c, 0x1f66a4d2), TOBN(0x194cc7f3, 0x23ec1331),
+     TOBN(0xad25143a, 0x8aa11690), TOBN(0xbe40ad8d, 0x09b59e08),
+     TOBN(0x37d60d9b, 0xe750860a), TOBN(0x6c53b008, 0xc6bf434c),
+     TOBN(0xb572415d, 0x1356eb80), TOBN(0xb8bf9da3, 0x9578ded8),
+     TOBN(0x22658e36, 0x5e8fb38b), TOBN(0x9b70ce22, 0x5af8cb22),
+     TOBN(0x7c00018a, 0x829a8180), TOBN(0x84329f93, 0xb81ed295),
+     TOBN(0x7c343ea2, 0x5f3cea83), TOBN(0x38f8655f, 0x67586536),
+     TOBN(0xa661a0d0, 0x1d3ec517), TOBN(0x98744652, 0x512321ae),
+     TOBN(0x084ca591, 0xeca92598), TOBN(0xa9bb9dc9, 0x1dcb3feb),
+     TOBN(0x14c54355, 0x78b4c240), TOBN(0x5ed62a3b, 0x610cafdc),
+     TOBN(0x07512f37, 0x1b38846b), TOBN(0x571bb70a, 0xb0e38161),
+     TOBN(0xb556b95b, 0x2da705d2), TOBN(0x3ef8ada6, 0xb1a08f98),
+     TOBN(0x85302ca7, 0xddecfbe5), TOBN(0x0e530573, 0x943105cd),
+     TOBN(0x60554d55, 0x21a9255d), TOBN(0x63a32fa1, 0xf2f3802a),
+     TOBN(0x35c8c5b0, 0xcd477875), TOBN(0x97f458ea, 0x6ad42da1),
+     TOBN(0x832d7080, 0xeb6b242d), TOBN(0xd30bd023, 0x3b71e246),
+     TOBN(0x7027991b, 0xbe31139d), TOBN(0x68797e91, 0x462e4e53),
+     TOBN(0x423fe20a, 0x6b4e185a), TOBN(0x82f2c67e, 0x42d9b707),
+     TOBN(0x25c81768, 0x4cf7811b), TOBN(0xbd53005e, 0x045bb95d),}
+    ,
+    {TOBN(0xe5f649be, 0x9d8e68fd), TOBN(0xdb0f0533, 0x1b044320),
+     TOBN(0xf6fde9b3, 0xe0c33398), TOBN(0x92f4209b, 0x66c8cfae),
+     TOBN(0xe9d1afcc, 0x1a739d4b), TOBN(0x09aea75f, 0xa28ab8de),
+     TOBN(0x14375fb5, 0xeac6f1d0), TOBN(0x6420b560, 0x708f7aa5),
+     TOBN(0x9eae499c, 0x6254dc41), TOBN(0x7e293924, 0x7a837e7e),
+     TOBN(0x74aec08c, 0x090524a7), TOBN(0xf82b9219, 0x8d6f55f2),
+     TOBN(0x493c962e, 0x1402cec5), TOBN(0x9f17ca17, 0xfa2f30e7),
+     TOBN(0xbcd783e8, 0xe9b879cb), TOBN(0xea3d8c14, 0x5a6f145f),
+     TOBN(0xdede15e7, 0x5e0dee6e), TOBN(0x74f24872, 0xdc628aa2),
+     TOBN(0xd3e9c4fe, 0x7861bb93), TOBN(0x56d4822a, 0x6187b2e0),
+     TOBN(0xb66417cf, 0xc59826f9), TOBN(0xca260969, 0x2408169e),
+     TOBN(0xedf69d06, 0xc79ef885), TOBN(0x00031f8a, 0xdc7d138f),
+     TOBN(0x103c46e6, 0x0ebcf726), TOBN(0x4482b831, 0x6231470e),
+     TOBN(0x6f6dfaca, 0x487c2109), TOBN(0x2e0ace97, 0x62e666ef),
+     TOBN(0x3246a9d3, 0x1f8d1f42), TOBN(0x1b1e83f1, 0x574944d2),
+     TOBN(0x13dfa63a, 0xa57f334b), TOBN(0x0cf8daed, 0x9f025d81),
+     TOBN(0x30d78ea8, 0x00ee11c1), TOBN(0xeb053cd4, 0xb5e3dd75),
+     TOBN(0x9b65b13e, 0xd58c43c5), TOBN(0xc3ad49bd, 0xbd151663),
+     TOBN(0x99fd8e41, 0xb6427990), TOBN(0x12cf15bd, 0x707eae1e),
+     TOBN(0x29ad4f1b, 0x1aabb71e), TOBN(0x5143e74d, 0x07545d0e),
+     TOBN(0x30266336, 0xc88bdee1), TOBN(0x25f29306, 0x5876767c),
+     TOBN(0x9c078571, 0xc6731996), TOBN(0xc88690b2, 0xed552951),
+     TOBN(0x274f2c2d, 0x852705b4), TOBN(0xb0bf8d44, 0x4e09552d),
+     TOBN(0x7628beeb, 0x986575d1), TOBN(0x407be238, 0x7f864651),
+     TOBN(0x0e5e3049, 0xa639fc6b), TOBN(0xe75c35d9, 0x86003625),
+     TOBN(0x0cf35bd8, 0x5dcc1646), TOBN(0x8bcaced2, 0x6c26273a),
+     TOBN(0xe22ecf1d, 0xb5536742), TOBN(0x013dd897, 0x1a9e068b),
+     TOBN(0x17f411cb, 0x8a7909c5), TOBN(0x5757ac98, 0x861dd506),
+     TOBN(0x85de1f0d, 0x1e935abb), TOBN(0xdefd10b4, 0x154de37a),
+     TOBN(0xb8d9e392, 0x369cebb5), TOBN(0x54d5ef9b, 0x761324be),
+     TOBN(0x4d6341ba, 0x74f17e26), TOBN(0xc0a0e3c8, 0x78c1dde4),
+     TOBN(0xa6d77581, 0x87d918fd), TOBN(0x66876015, 0x02ca3a13),
+     TOBN(0xc7313e9c, 0xf36658f0), TOBN(0xc433ef1c, 0x71f8057e),
+     TOBN(0x85326246, 0x1b6a835a), TOBN(0xc8f05398, 0x7c86394c),
+     TOBN(0xff398cdf, 0xe983c4a1), TOBN(0xbf5e8162, 0x03b7b931),
+     TOBN(0x93193c46, 0xb7b9045b), TOBN(0x1e4ebf5d, 0xa4a6e46b),
+     TOBN(0xf9942a60, 0x43a24fe7), TOBN(0x29c1191e, 0xffb3492b),
+     TOBN(0x9f662449, 0x902fde05), TOBN(0xc792a7ac, 0x6713c32d),
+     TOBN(0x2fd88ad8, 0xb737982c), TOBN(0x7e3a0319, 0xa21e60e3),
+     TOBN(0x09b0de44, 0x7383591a), TOBN(0x6df141ee, 0x8310a456),
+     TOBN(0xaec1a039, 0xe6d6f471), TOBN(0x14b2ba0f, 0x1198d12e),
+     TOBN(0xebc1a160, 0x3aeee5ac), TOBN(0x401f4836, 0xe0b964ce),
+     TOBN(0x2ee43796, 0x4fd03f66), TOBN(0x3fdb4e49, 0xdd8f3f12),
+     TOBN(0x6ef267f6, 0x29380f18), TOBN(0x3e8e9670, 0x8da64d16),
+     TOBN(0xbc19180c, 0x207674f1), TOBN(0x112e09a7, 0x33ae8fdb),
+     TOBN(0x99667554, 0x6aaeb71e), TOBN(0x79432af1, 0xe101b1c7),
+     TOBN(0xd5eb558f, 0xde2ddec6), TOBN(0x81392d1f, 0x5357753f),
+     TOBN(0xa7a76b97, 0x3ae1158a), TOBN(0x416fbbff, 0x4a899991),
+     TOBN(0x9e65fdfd, 0x0d4a9dcf), TOBN(0x7bc29e48, 0x944ddf12),
+     TOBN(0xbc1a92d9, 0x3c856866), TOBN(0x273c6905, 0x6e98dfe2),
+     TOBN(0x69fce418, 0xcdfaa6b8), TOBN(0x606bd823, 0x5061c69f),
+     TOBN(0x42d495a0, 0x6af75e27), TOBN(0x8ed3d505, 0x6d873a1f),
+     TOBN(0xaf552841, 0x6ab25b6a), TOBN(0xc6c0ffc7, 0x2b1a4523),
+     TOBN(0xab18827b, 0x21c99e03), TOBN(0x060e8648, 0x9034691b),
+     TOBN(0x5207f90f, 0x93c7f398), TOBN(0x9f4a96cb, 0x82f8d10b),
+     TOBN(0xdd71cd79, 0x3ad0f9e3), TOBN(0x84f435d2, 0xfc3a54f5),
+     TOBN(0x4b03c55b, 0x8e33787f), TOBN(0xef42f975, 0xa6384673),
+     TOBN(0xff7304f7, 0x5051b9f0), TOBN(0x18aca1dc, 0x741c87c2),
+     TOBN(0x56f120a7, 0x2d4bfe80), TOBN(0xfd823b3d, 0x053e732c),
+     TOBN(0x11bccfe4, 0x7537ca16), TOBN(0xdf6c9c74, 0x1b5a996b),
+     TOBN(0xee7332c7, 0x904fc3fa), TOBN(0x14a23f45, 0xc7e3636a),
+     TOBN(0xc38659c3, 0xf091d9aa), TOBN(0x4a995e5d, 0xb12d8540),
+     TOBN(0x20a53bec, 0xf3a5598a), TOBN(0x56534b17, 0xb1eaa995),
+     TOBN(0x9ed3dca4, 0xbf04e03c), TOBN(0x716c563a, 0xd8d56268),
+     TOBN(0x27ba77a4, 0x1d6178e7), TOBN(0xe4c80c40, 0x68a1ff8e),
+     TOBN(0x75011099, 0x0a13f63d), TOBN(0x7bf33521, 0xa61d46f3),
+     TOBN(0x0aff218e, 0x10b365bb), TOBN(0x81021804, 0x0fd7ea75),
+     TOBN(0x05a3fd8a, 0xa4b3a925), TOBN(0xb829e75f, 0x9b3db4e6),
+     TOBN(0x6bdc75a5, 0x4d53e5fb), TOBN(0x04a5dc02, 0xd52717e3),
+     TOBN(0x86af502f, 0xe9a42ec2), TOBN(0x8867e8fb, 0x2630e382),
+     TOBN(0xbf845c6e, 0xbec9889b), TOBN(0x54f491f2, 0xcb47c98d),
+     TOBN(0xa3091fba, 0x790c2a12), TOBN(0xd7f6fd78, 0xc20f708b),
+     TOBN(0xa569ac30, 0xacde5e17), TOBN(0xd0f996d0, 0x6852b4d7),
+     TOBN(0xe51d4bb5, 0x4609ae54), TOBN(0x3fa37d17, 0x0daed061),
+     TOBN(0x62a88684, 0x34b8fb41), TOBN(0x99a2acbd, 0x9efb64f1),
+     TOBN(0xb75c1a5e, 0x6448e1f2), TOBN(0xfa99951a, 0x42b5a069),
+     TOBN(0x6d956e89, 0x2f3b26e7), TOBN(0xf4709860, 0xda875247),
+     TOBN(0x3ad15179, 0x2482dda3), TOBN(0xd64110e3, 0x017d82f0),
+     TOBN(0x14928d2c, 0xfad414e4), TOBN(0x2b155f58, 0x2ed02b24),
+     TOBN(0x481a141b, 0xcb821bf1), TOBN(0x12e3c770, 0x4f81f5da),
+     TOBN(0xe49c5de5, 0x9fff8381), TOBN(0x11053232, 0x5bbec894),
+     TOBN(0xa0d051cc, 0x454d88c4), TOBN(0x4f6db89c, 0x1f8e531b),
+     TOBN(0x34fe3fd6, 0xca563a44), TOBN(0x7f5c2215, 0x58da8ab9),
+     TOBN(0x8445016d, 0x9474f0a1), TOBN(0x17d34d61, 0xcb7d8a0a),
+     TOBN(0x8e9d3910, 0x1c474019), TOBN(0xcaff2629, 0xd52ceefb),
+     TOBN(0xf9cf3e32, 0xc1622c2b), TOBN(0xd4b95e3c, 0xe9071a05),
+     TOBN(0xfbbca61f, 0x1594438c), TOBN(0x1eb6e6a6, 0x04aadedf),
+     TOBN(0x853027f4, 0x68e14940), TOBN(0x221d322a, 0xdfabda9c),
+     TOBN(0xed8ea9f6, 0xb7cb179a), TOBN(0xdc7b764d, 0xb7934dcc),
+     TOBN(0xfcb13940, 0x5e09180d), TOBN(0x6629a6bf, 0xb47dc2dd),
+     TOBN(0xbfc55e4e, 0x9f5a915e), TOBN(0xb1db9d37, 0x6204441e),
+     TOBN(0xf82d68cf, 0x930c5f53), TOBN(0x17d3a142, 0xcbb605b1),
+     TOBN(0xdd5944ea, 0x308780f2), TOBN(0xdc8de761, 0x3845f5e4),
+     TOBN(0x6beaba7d, 0x7624d7a3), TOBN(0x1e709afd, 0x304df11e),
+     TOBN(0x95364376, 0x02170456), TOBN(0xbf204b3a, 0xc8f94b64),
+     TOBN(0x4e53af7c, 0x5680ca68), TOBN(0x0526074a, 0xe0c67574),
+     TOBN(0x95d8cef8, 0xecd92af6), TOBN(0xe6b9fa7a, 0x6cd1745a),
+     TOBN(0x3d546d3d, 0xa325c3e4), TOBN(0x1f57691d, 0x9ae93aae),
+     TOBN(0xe891f3fe, 0x9d2e1a33), TOBN(0xd430093f, 0xac063d35),
+     TOBN(0xeda59b12, 0x5513a327), TOBN(0xdc2134f3, 0x5536f18f),
+     TOBN(0xaa51fe2c, 0x5c210286), TOBN(0x3f68aaee, 0x1cab658c),
+     TOBN(0x5a23a00b, 0xf9357292), TOBN(0x9a626f39, 0x7efdabed),
+     TOBN(0xfe2b3bf3, 0x199d78e3), TOBN(0xb7a2af77, 0x71bbc345),
+     TOBN(0x3d19827a, 0x1e59802c), TOBN(0x823bbc15, 0xb487a51c),
+     TOBN(0x856139f2, 0x99d0a422), TOBN(0x9ac3df65, 0xf456c6fb),
+     TOBN(0xaddf65c6, 0x701f8bd6), TOBN(0x149f321e, 0x3758df87),
+     TOBN(0xb1ecf714, 0x721b7eba), TOBN(0xe17df098, 0x31a3312a),
+     TOBN(0xdb2fd6ec, 0xd5c4d581), TOBN(0xfd02996f, 0x8fcea1b3),
+     TOBN(0xe29fa63e, 0x7882f14f), TOBN(0xc9f6dc35, 0x07c6cadc),
+     TOBN(0x46f22d6f, 0xb882bed0), TOBN(0x1a45755b, 0xd118e52c),
+     TOBN(0x9f2c7c27, 0x7c4608cf), TOBN(0x7ccbdf32, 0x568012c2),
+     TOBN(0xfcb0aedd, 0x61729b0e), TOBN(0x7ca2ca9e, 0xf7d75dbf),
+     TOBN(0xf58fecb1, 0x6f640f62), TOBN(0xe274b92b, 0x39f51946),
+     TOBN(0x7f4dfc04, 0x6288af44), TOBN(0x0a91f32a, 0xeac329e5),
+     TOBN(0x43ad274b, 0xd6aaba31), TOBN(0x719a1640, 0x0f6884f9),
+     TOBN(0x685d29f6, 0xdaf91e20), TOBN(0x5ec1cc33, 0x27e49d52),
+     TOBN(0x38f4de96, 0x3b54a059), TOBN(0x0e0015e5, 0xefbcfdb3),
+     TOBN(0x177d23d9, 0x4dbb8da6), TOBN(0x98724aa2, 0x97a617ad),
+     TOBN(0x30f0885b, 0xfdb6558e), TOBN(0xf9f7a28a, 0xc7899a96),
+     TOBN(0xd2ae8ac8, 0x872dc112), TOBN(0xfa0642ca, 0x73c3c459),
+     TOBN(0x15296981, 0xe7dfc8d6), TOBN(0x67cd4450, 0x1fb5b94a),
+     TOBN(0x0ec71cf1, 0x0eddfd37), TOBN(0xc7e5eeb3, 0x9a8eddc7),
+     TOBN(0x02ac8e3d, 0x81d95028), TOBN(0x0088f172, 0x70b0e35d),
+     TOBN(0xec041fab, 0xe1881fe3), TOBN(0x62cf71b8, 0xd99e7faa),
+     TOBN(0x5043dea7, 0xe0f222c2), TOBN(0x309d42ac, 0x72e65142),
+     TOBN(0x94fe9ddd, 0x9216cd30), TOBN(0xd6539c7d, 0x0f87feec),
+     TOBN(0x03c5a57c, 0x432ac7d7), TOBN(0x72692cf0, 0x327fda10),
+     TOBN(0xec28c85f, 0x280698de), TOBN(0x2331fb46, 0x7ec283b1),
+     TOBN(0xd34bfa32, 0x2867e633), TOBN(0x78709a82, 0x0a9cc815),
+     TOBN(0xb7fe6964, 0x875e2fa5), TOBN(0x25cc064f, 0x9e98bfb5),
+     TOBN(0x9eb0151c, 0x493a65c5), TOBN(0x5fb5d941, 0x53182464),
+     TOBN(0x69e6f130, 0xf04618e2), TOBN(0xa8ecec22, 0xf89c8ab6),
+     TOBN(0xcd6ac88b, 0xb96209bd), TOBN(0x65fa8cdb, 0xb3e1c9e0),
+     TOBN(0xa47d22f5, 0x4a8d8eac), TOBN(0x83895cdf, 0x8d33f963),
+     TOBN(0xa8adca59, 0xb56cd3d1), TOBN(0x10c8350b, 0xdaf38232),
+     TOBN(0x2b161fb3, 0xa5080a9f), TOBN(0xbe7f5c64, 0x3af65b3a),
+     TOBN(0x2c754039, 0x97403a11), TOBN(0x94626cf7, 0x121b96af),
+     TOBN(0x431de7c4, 0x6a983ec2), TOBN(0x3780dd3a, 0x52cc3df7),
+     TOBN(0xe28a0e46, 0x2baf8e3b), TOBN(0xabe68aad, 0x51d299ae),
+     TOBN(0x603eb8f9, 0x647a2408), TOBN(0x14c61ed6, 0x5c750981),
+     TOBN(0x88b34414, 0xc53352e7), TOBN(0x5a34889c, 0x1337d46e),
+     TOBN(0x612c1560, 0xf95f2bc8), TOBN(0x8a3f8441, 0xd4807a3a),
+     TOBN(0x680d9e97, 0x5224da68), TOBN(0x60cd6e88, 0xc3eb00e9),
+     TOBN(0x3875a98e, 0x9a6bc375), TOBN(0xdc80f924, 0x4fd554c2),
+     TOBN(0x6c4b3415, 0x6ac77407), TOBN(0xa1e5ea8f, 0x25420681),
+     TOBN(0x541bfa14, 0x4607a458), TOBN(0x5dbc7e7a, 0x96d7fbf9),
+     TOBN(0x646a851b, 0x31590a47), TOBN(0x039e85ba, 0x15ee6df8),
+     TOBN(0xd19fa231, 0xd7b43fc0), TOBN(0x84bc8be8, 0x299a0e04),
+     TOBN(0x2b9d2936, 0xf20df03a), TOBN(0x24054382, 0x8608d472),
+     TOBN(0x76b6ba04, 0x9149202a), TOBN(0xb21c3831, 0x3670e7b7),
+     TOBN(0xddd93059, 0xd6fdee10), TOBN(0x9da47ad3, 0x78488e71),
+     TOBN(0x99cc1dfd, 0xa0fcfb25), TOBN(0x42abde10, 0x64696954),
+     TOBN(0x14cc15fc, 0x17eab9fe), TOBN(0xd6e863e4, 0xd3e70972),
+     TOBN(0x29a7765c, 0x6432112c), TOBN(0x88660001, 0x5b0774d8),
+     TOBN(0x3729175a, 0x2c088eae), TOBN(0x13afbcae, 0x8230b8d4),
+     TOBN(0x44768151, 0x915f4379), TOBN(0xf086431a, 0xd8d22812),
+     TOBN(0x37461955, 0xc298b974), TOBN(0x905fb5f0, 0xf8711e04),
+     TOBN(0x787abf3a, 0xfe969d18), TOBN(0x392167c2, 0x6f6a494e),
+     TOBN(0xfc7a0d2d, 0x28c511da), TOBN(0xf127c7dc, 0xb66a262d),
+     TOBN(0xf9c4bb95, 0xfd63fdf0), TOBN(0x90016589, 0x3913ef46),
+     TOBN(0x74d2a73c, 0x11aa600d), TOBN(0x2f5379bd, 0x9fb5ab52),
+     TOBN(0xe49e53a4, 0x7fb70068), TOBN(0x68dd39e5, 0x404aa9a7),
+     TOBN(0xb9b0cf57, 0x2ecaa9c3), TOBN(0xba0e103b, 0xe824826b),
+     TOBN(0x60c2198b, 0x4631a3c4), TOBN(0xc5ff84ab, 0xfa8966a2),
+     TOBN(0x2d6ebe22, 0xac95aff8), TOBN(0x1c9bb6db, 0xb5a46d09),
+     TOBN(0x419062da, 0x53ee4f8d), TOBN(0x7b9042d0, 0xbb97efef),
+     TOBN(0x0f87f080, 0x830cf6bd), TOBN(0x4861d19a, 0x6ec8a6c6),
+     TOBN(0xd3a0daa1, 0x202f01aa), TOBN(0xb0111674, 0xf25afbd5),
+     TOBN(0x6d00d6cf, 0x1afb20d9), TOBN(0x13695000, 0x40671bc5),
+     TOBN(0x913ab0dc, 0x2485ea9b), TOBN(0x1f2bed06, 0x9eef61ac),
+     TOBN(0x850c8217, 0x6d799e20), TOBN(0x93415f37, 0x3271c2de),
+     TOBN(0x5afb06e9, 0x6c4f5910), TOBN(0x688a52df, 0xc4e9e421),
+     TOBN(0x30495ba3, 0xe2a9a6db), TOBN(0x4601303d, 0x58f9268b),
+     TOBN(0xbe3b0dad, 0x7eb0f04f), TOBN(0x4ea47250, 0x4456936d),
+     TOBN(0x8caf8798, 0xd33fd3e7), TOBN(0x1ccd8a89, 0xeb433708),
+     TOBN(0x9effe3e8, 0x87fd50ad), TOBN(0xbe240a56, 0x6b29c4df),
+     TOBN(0xec4ffd98, 0xca0e7ebd), TOBN(0xf586783a, 0xe748616e),
+     TOBN(0xa5b00d8f, 0xc77baa99), TOBN(0x0acada29, 0xb4f34c9c),
+     TOBN(0x36dad67d, 0x0fe723ac), TOBN(0x1d8e53a5, 0x39c36c1e),
+     TOBN(0xe4dd342d, 0x1f4bea41), TOBN(0x64fd5e35, 0xebc9e4e0),
+     TOBN(0x96f01f90, 0x57908805), TOBN(0xb5b9ea3d, 0x5ed480dd),
+     TOBN(0x366c5dc2, 0x3efd2dd0), TOBN(0xed2fe305, 0x6e9dfa27),
+     TOBN(0x4575e892, 0x6e9197e2), TOBN(0x11719c09, 0xab502a5d),
+     TOBN(0x264c7bec, 0xe81f213f), TOBN(0x741b9241, 0x55f5c457),
+     TOBN(0x78ac7b68, 0x49a5f4f4), TOBN(0xf91d70a2, 0x9fc45b7d),
+     TOBN(0x39b05544, 0xb0f5f355), TOBN(0x11f06bce, 0xeef930d9),
+     TOBN(0xdb84d25d, 0x038d05e1), TOBN(0x04838ee5, 0xbacc1d51),
+     TOBN(0x9da3ce86, 0x9e8ee00b), TOBN(0xc3412057, 0xc36eda1f),
+     TOBN(0xae80b913, 0x64d9c2f4), TOBN(0x7468bac3, 0xa010a8ff),
+     TOBN(0xdfd20037, 0x37359d41), TOBN(0x1a0f5ab8, 0x15efeacc),
+     TOBN(0x7c25ad2f, 0x659d0ce0), TOBN(0x4011bcbb, 0x6785cff1),
+     TOBN(0x128b9912, 0x7e2192c7), TOBN(0xa549d8e1, 0x13ccb0e8),
+     TOBN(0x805588d8, 0xc85438b1), TOBN(0x5680332d, 0xbc25cb27),
+     TOBN(0xdcd1bc96, 0x1a4bfdf4), TOBN(0x779ff428, 0x706f6566),
+     TOBN(0x8bbee998, 0xf059987a), TOBN(0xf6ce8cf2, 0xcc686de7),
+     TOBN(0xf8ad3c4a, 0x953cfdb2), TOBN(0xd1d426d9, 0x2205da36),
+     TOBN(0xb3c0f13f, 0xc781a241), TOBN(0x3e89360e, 0xd75362a8),
+     TOBN(0xccd05863, 0xc8a91184), TOBN(0x9bd0c9b7, 0xefa8a7f4),
+     TOBN(0x97ee4d53, 0x8a912a4b), TOBN(0xde5e15f8, 0xbcf518fd),
+     TOBN(0x6a055bf8, 0xc467e1e0), TOBN(0x10be4b4b, 0x1587e256),
+     TOBN(0xd90c14f2, 0x668621c9), TOBN(0xd5518f51, 0xab9c92c1),
+     TOBN(0x8e6a0100, 0xd6d47b3c), TOBN(0xcbe980dd, 0x66716175),
+     TOBN(0x500d3f10, 0xddd83683), TOBN(0x3b6cb35d, 0x99cac73c),
+     TOBN(0x53730c8b, 0x6083d550), TOBN(0xcf159767, 0xdf0a1987),
+     TOBN(0x84bfcf53, 0x43ad73b3), TOBN(0x1b528c20, 0x4f035a94),
+     TOBN(0x4294edf7, 0x33eeac69), TOBN(0xb6283e83, 0x817f3240),
+     TOBN(0xc3fdc959, 0x0a5f25b1), TOBN(0xefaf8aa5, 0x5844ee22),
+     TOBN(0xde269ba5, 0xdbdde4de), TOBN(0xe3347160, 0xc56133bf),
+     TOBN(0xc1184219, 0x8d9ea9f8), TOBN(0x090de5db, 0xf3fc1ab5),
+     TOBN(0x404c37b1, 0x0bf22cda), TOBN(0x7de20ec8, 0xf5618894),
+     TOBN(0x754c588e, 0xecdaecab), TOBN(0x6ca4b0ed, 0x88342743),
+     TOBN(0x76f08bdd, 0xf4a938ec), TOBN(0xd182de89, 0x91493ccb),
+     TOBN(0xd652c53e, 0xc8a4186a), TOBN(0xb3e878db, 0x946d8e33),
+     TOBN(0x088453c0, 0x5f37663c), TOBN(0x5cd9daaa, 0xb407748b),
+     TOBN(0xa1f5197f, 0x586d5e72), TOBN(0x47500be8, 0xc443ca59),
+     TOBN(0x78ef35b2, 0xe2652424), TOBN(0x09c5d26f, 0x6dd7767d),
+     TOBN(0x7175a79a, 0xa74d3f7b), TOBN(0x0428fd8d, 0xcf5ea459),
+     TOBN(0x511cb97c, 0xa5d1746d), TOBN(0x36363939, 0xe71d1278),
+     TOBN(0xcf2df955, 0x10350bf4), TOBN(0xb3817439, 0x60aae782),
+     TOBN(0xa748c0e4, 0x3e688809), TOBN(0x98021fbf, 0xd7a5a006),
+     TOBN(0x9076a70c, 0x0e367a98), TOBN(0xbea1bc15, 0x0f62b7c2),
+     TOBN(0x2645a68c, 0x30fe0343), TOBN(0xacaffa78, 0x699dc14f),
+     TOBN(0xf4469964, 0x457bf9c4), TOBN(0x0db6407b, 0x0d2ead83),
+     TOBN(0x68d56cad, 0xb2c6f3eb), TOBN(0x3b512e73, 0xf376356c),
+     TOBN(0xe43b0e1f, 0xfce10408), TOBN(0x89ddc003, 0x5a5e257d),
+     TOBN(0xb0ae0d12, 0x0362e5b3), TOBN(0x07f983c7, 0xb0519161),
+     TOBN(0xc2e94d15, 0x5d5231e7), TOBN(0xcff22aed, 0x0b4f9513),
+     TOBN(0xb02588dd, 0x6ad0b0b5), TOBN(0xb967d1ac, 0x11d0dcd5),
+     TOBN(0x8dac6bc6, 0xcf777b6c), TOBN(0x0062bdbd, 0x4c6d1959),
+     TOBN(0x53da71b5, 0x0ef5cc85), TOBN(0x07012c7d, 0x4006f14f),
+     TOBN(0x4617f962, 0xac47800d), TOBN(0x53365f2b, 0xc102ed75),
+     TOBN(0xb422efcb, 0x4ab8c9d3), TOBN(0x195cb26b, 0x34af31c9),
+     TOBN(0x3a926e29, 0x05f2c4ce), TOBN(0xbd2bdecb, 0x9856966c),
+     TOBN(0x5d16ab3a, 0x85527015), TOBN(0x9f81609e, 0x4486c231),
+     TOBN(0xd8b96b2c, 0xda350002), TOBN(0xbd054690, 0xfa1b7d36),
+     TOBN(0xdc90ebf5, 0xe71d79bc), TOBN(0xf241b6f9, 0x08964e4e),
+     TOBN(0x7c838643, 0x2fe3cd4c), TOBN(0xe0f33acb, 0xb4bc633c),
+     TOBN(0xb4a9ecec, 0x3d139f1f), TOBN(0x05ce69cd, 0xdc4a1f49),
+     TOBN(0xa19d1b16, 0xf5f98aaf), TOBN(0x45bb71d6, 0x6f23e0ef),
+     TOBN(0x33789fcd, 0x46cdfdd3), TOBN(0x9b8e2978, 0xcee040ca),
+     TOBN(0x9c69b246, 0xae0a6828), TOBN(0xba533d24, 0x7078d5aa),
+     TOBN(0x7a2e42c0, 0x7bb4fbdb), TOBN(0xcfb4879a, 0x7035385c),
+     TOBN(0x8c3dd30b, 0x3281705b), TOBN(0x7e361c6c, 0x404fe081),
+     TOBN(0x7b21649c, 0x3f604edf), TOBN(0x5dbf6a3f, 0xe52ffe47),
+     TOBN(0xc41b7c23, 0x4b54d9bf), TOBN(0x1374e681, 0x3511c3d9),
+     TOBN(0x1863bf16, 0xc1b2b758), TOBN(0x90e78507, 0x1e9e6a96),
+     TOBN(0xab4bf98d, 0x5d86f174), TOBN(0xd74e0bd3, 0x85e96fe4),
+     TOBN(0x8afde39f, 0xcac5d344), TOBN(0x90946dbc, 0xbd91b847),
+     TOBN(0xf5b42358, 0xfe1a838c), TOBN(0x05aae6c5, 0x620ac9d8),
+     TOBN(0x8e193bd8, 0xa1ce5a0b), TOBN(0x8f710571, 0x4dabfd72),
+     TOBN(0x8d8fdd48, 0x182caaac), TOBN(0x8c4aeefa, 0x040745cf),
+     TOBN(0x73c6c30a, 0xf3b93e6d), TOBN(0x991241f3, 0x16f42011),
+     TOBN(0xa0158eea, 0xe457a477), TOBN(0xd19857db, 0xee6ddc05),
+     TOBN(0xb3265224, 0x18c41671), TOBN(0x3ffdfc7e, 0x3c2c0d58),
+     TOBN(0x3a3a5254, 0x26ee7cda), TOBN(0x341b0869, 0xdf02c3a8),
+     TOBN(0xa023bf42, 0x723bbfc8), TOBN(0x3d15002a, 0x14452691),}
+    ,
+    {TOBN(0x5ef7324c, 0x85edfa30), TOBN(0x25976554, 0x87d4f3da),
+     TOBN(0x352f5bc0, 0xdcb50c86), TOBN(0x8f6927b0, 0x4832a96c),
+     TOBN(0xd08ee1ba, 0x55f2f94c), TOBN(0x6a996f99, 0x344b45fa),
+     TOBN(0xe133cb8d, 0xa8aa455d), TOBN(0x5d0721ec, 0x758dc1f7),
+     TOBN(0x6ba7a920, 0x79e5fb67), TOBN(0xe1331feb, 0x70aa725e),
+     TOBN(0x5080ccf5, 0x7df5d837), TOBN(0xe4cae01d, 0x7ff72e21),
+     TOBN(0xd9243ee6, 0x0412a77d), TOBN(0x06ff7cac, 0xdf449025),
+     TOBN(0xbe75f7cd, 0x23ef5a31), TOBN(0xbc957822, 0x0ddef7a8),
+     TOBN(0x8cf7230c, 0xb0ce1c55), TOBN(0x5b534d05, 0x0bbfb607),
+     TOBN(0xee1ef113, 0x0e16363b), TOBN(0x27e0aa7a, 0xb4999e82),
+     TOBN(0xce1dac2d, 0x79362c41), TOBN(0x67920c90, 0x91bb6cb0),
+     TOBN(0x1e648d63, 0x2223df24), TOBN(0x0f7d9eef, 0xe32e8f28),
+     TOBN(0x6943f39a, 0xfa833834), TOBN(0x22951722, 0xa6328562),
+     TOBN(0x81d63dd5, 0x4170fc10), TOBN(0x9f5fa58f, 0xaecc2e6d),
+     TOBN(0xb66c8725, 0xe77d9a3b), TOBN(0x11235cea, 0x6384ebe0),
+     TOBN(0x06a8c118, 0x5845e24a), TOBN(0x0137b286, 0xebd093b1),
+     TOBN(0xc589e1ce, 0x44ace150), TOBN(0xe0f8d3d9, 0x4381e97c),
+     TOBN(0x59e99b11, 0x62c5a4b8), TOBN(0x90d262f7, 0xfd0ec9f9),
+     TOBN(0xfbc854c9, 0x283e13c9), TOBN(0x2d04fde7, 0xaedc7085),
+     TOBN(0x057d7765, 0x47dcbecb), TOBN(0x8dbdf591, 0x9a76fa5f),
+     TOBN(0xd0150695, 0x0de1e578), TOBN(0x2e1463e7, 0xe9f72bc6),
+     TOBN(0xffa68441, 0x1b39eca5), TOBN(0x673c8530, 0x7c037f2f),
+     TOBN(0xd0d6a600, 0x747f91da), TOBN(0xb08d43e1, 0xc9cb78e9),
+     TOBN(0x0fc0c644, 0x27b5cef5), TOBN(0x5c1d160a, 0xa60a2fd6),
+     TOBN(0xf98cae53, 0x28c8e13b), TOBN(0x375f10c4, 0xb2eddcd1),
+     TOBN(0xd4eb8b7f, 0x5cce06ad), TOBN(0xb4669f45, 0x80a2e1ef),
+     TOBN(0xd593f9d0, 0x5bbd8699), TOBN(0x5528a4c9, 0xe7976d13),
+     TOBN(0x3923e095, 0x1c7e28d3), TOBN(0xb9293790, 0x3f6bb577),
+     TOBN(0xdb567d6a, 0xc42bd6d2), TOBN(0x6df86468, 0xbb1f96ae),
+     TOBN(0x0efe5b1a, 0x4843b28e), TOBN(0x961bbb05, 0x6379b240),
+     TOBN(0xb6caf5f0, 0x70a6a26b), TOBN(0x70686c0d, 0x328e6e39),
+     TOBN(0x80da06cf, 0x895fc8d3), TOBN(0x804d8810, 0xb363fdc9),
+     TOBN(0xbe22877b, 0x207f1670), TOBN(0x9b0dd188, 0x4e615291),
+     TOBN(0x625ae8dc, 0x97a3c2bf), TOBN(0x08584ef7, 0x439b86e8),
+     TOBN(0xde7190a5, 0xdcd898ff), TOBN(0x26286c40, 0x2058ee3d),
+     TOBN(0x3db0b217, 0x5f87b1c1), TOBN(0xcc334771, 0x102a6db5),
+     TOBN(0xd99de954, 0x2f770fb1), TOBN(0x97c1c620, 0x4cd7535e),
+     TOBN(0xd3b6c448, 0x3f09cefc), TOBN(0xd725af15, 0x5a63b4f8),
+     TOBN(0x0c95d24f, 0xc01e20ec), TOBN(0xdfd37494, 0x9ae7121f),
+     TOBN(0x7d6ddb72, 0xec77b7ec), TOBN(0xfe079d3b, 0x0353a4ae),
+     TOBN(0x3066e70a, 0x2e6ac8d2), TOBN(0x9c6b5a43, 0x106e5c05),
+     TOBN(0x52d3c6f5, 0xede59b8c), TOBN(0x30d6a5c3, 0xfccec9ae),
+     TOBN(0xedec7c22, 0x4fc0a9ef), TOBN(0x190ff083, 0x95c16ced),
+     TOBN(0xbe12ec8f, 0x94de0fde), TOBN(0x0d131ab8, 0x852d3433),
+     TOBN(0x42ace07e, 0x85701291), TOBN(0x94793ed9, 0x194061a8),
+     TOBN(0x30e83ed6, 0xd7f4a485), TOBN(0x9eec7269, 0xf9eeff4d),
+     TOBN(0x90acba59, 0x0c9d8005), TOBN(0x5feca458, 0x1e79b9d1),
+     TOBN(0x8fbe5427, 0x1d506a1e), TOBN(0xa32b2c8e, 0x2439cfa7),
+     TOBN(0x1671c173, 0x73dd0b4e), TOBN(0x37a28214, 0x44a054c6),
+     TOBN(0x81760a1b, 0x4e8b53f1), TOBN(0xa6c04224, 0xf9f93b9e),
+     TOBN(0x18784b34, 0xcf671e3c), TOBN(0x81bbecd2, 0xcda9b994),
+     TOBN(0x38831979, 0xb2ab3848), TOBN(0xef54feb7, 0xf2e03c2d),
+     TOBN(0xcf197ca7, 0xfb8088fa), TOBN(0x01427247, 0x4ddc96c5),
+     TOBN(0xa2d2550a, 0x30777176), TOBN(0x53469898, 0x4d0cf71d),
+     TOBN(0x6ce937b8, 0x3a2aaac6), TOBN(0xe9f91dc3, 0x5af38d9b),
+     TOBN(0x2598ad83, 0xc8bf2899), TOBN(0x8e706ac9, 0xb5536c16),
+     TOBN(0x40dc7495, 0xf688dc98), TOBN(0x26490cd7, 0x124c4afc),
+     TOBN(0xe651ec84, 0x1f18775c), TOBN(0x393ea6c3, 0xb4fdaf4a),
+     TOBN(0x1e1f3343, 0x7f338e0d), TOBN(0x39fb832b, 0x6053e7b5),
+     TOBN(0x46e702da, 0x619e14d5), TOBN(0x859cacd1, 0xcdeef6e0),
+     TOBN(0x63b99ce7, 0x4462007d), TOBN(0xb8ab48a5, 0x4cb5f5b7),
+     TOBN(0x9ec673d2, 0xf55edde7), TOBN(0xd1567f74, 0x8cfaefda),
+     TOBN(0x46381b6b, 0x0887bcec), TOBN(0x694497ce, 0xe178f3c2),
+     TOBN(0x5e6525e3, 0x1e6266cb), TOBN(0x5931de26, 0x697d6413),
+     TOBN(0x87f8df7c, 0x0e58d493), TOBN(0xb1ae5ed0, 0x58b73f12),
+     TOBN(0xc368f784, 0xdea0c34d), TOBN(0x9bd0a120, 0x859a91a0),
+     TOBN(0xb00d88b7, 0xcc863c68), TOBN(0x3a1cc11e, 0x3d1f4d65),
+     TOBN(0xea38e0e7, 0x0aa85593), TOBN(0x37f13e98, 0x7dc4aee8),
+     TOBN(0x10d38667, 0xbc947bad), TOBN(0x738e07ce, 0x2a36ee2e),
+     TOBN(0xc93470cd, 0xc577fcac), TOBN(0xdee1b616, 0x2782470d),
+     TOBN(0x36a25e67, 0x2e793d12), TOBN(0xd6aa6cae, 0xe0f186da),
+     TOBN(0x474d0fd9, 0x80e07af7), TOBN(0xf7cdc47d, 0xba8a5cd4),
+     TOBN(0x28af6d9d, 0xab15247f), TOBN(0x7c789c10, 0x493a537f),
+     TOBN(0x7ac9b110, 0x23a334e7), TOBN(0x0236ac09, 0x12c9c277),
+     TOBN(0xa7e5bd25, 0x1d7a5144), TOBN(0x098b9c2a, 0xf13ec4ec),
+     TOBN(0x3639daca, 0xd3f0abca), TOBN(0x642da81a, 0xa23960f9),
+     TOBN(0x7d2e5c05, 0x4f7269b1), TOBN(0xfcf30777, 0xe287c385),
+     TOBN(0x10edc84f, 0xf2a46f21), TOBN(0x35441757, 0x4f43fa36),
+     TOBN(0xf1327899, 0xfd703431), TOBN(0xa438d7a6, 0x16dd587a),
+     TOBN(0x65c34c57, 0xe9c8352d), TOBN(0xa728edab, 0x5cc5a24e),
+     TOBN(0xaed78abc, 0x42531689), TOBN(0x0a51a0e8, 0x010963ef),
+     TOBN(0x5776fa0a, 0xd717d9b3), TOBN(0xf356c239, 0x7dd3428b),
+     TOBN(0x29903fff, 0x8d3a3dac), TOBN(0x409597fa, 0x3d94491f),
+     TOBN(0x4cd7a5ff, 0xbf4a56a4), TOBN(0xe5096474, 0x8adab462),
+     TOBN(0xa97b5126, 0x5c3427b0), TOBN(0x6401405c, 0xd282c9bd),
+     TOBN(0x3629f8d7, 0x222c5c45), TOBN(0xb1c02c16, 0xe8d50aed),
+     TOBN(0xbea2ed75, 0xd9635bc9), TOBN(0x226790c7, 0x6e24552f),
+     TOBN(0x3c33f2a3, 0x65f1d066), TOBN(0x2a43463e, 0x6dfccc2e),
+     TOBN(0x8cc3453a, 0xdb483761), TOBN(0xe7cc6085, 0x65d5672b),
+     TOBN(0x277ed6cb, 0xde3efc87), TOBN(0x19f2f368, 0x69234eaf),
+     TOBN(0x9aaf4317, 0x5c0b800b), TOBN(0x1f1e7c89, 0x8b6da6e2),
+     TOBN(0x6cfb4715, 0xb94ec75e), TOBN(0xd590dd5f, 0x453118c2),
+     TOBN(0x14e49da1, 0x1f17a34c), TOBN(0x5420ab39, 0x235a1456),
+     TOBN(0xb7637241, 0x2f50363b), TOBN(0x7b15d623, 0xc3fabb6e),
+     TOBN(0xa0ef40b1, 0xe274e49c), TOBN(0x5cf50744, 0x96b1860a),
+     TOBN(0xd6583fbf, 0x66afe5a4), TOBN(0x44240510, 0xf47e3e9a),
+     TOBN(0x99254343, 0x11b2d595), TOBN(0xf1367499, 0xeec8df57),
+     TOBN(0x3cb12c61, 0x3e73dd05), TOBN(0xd248c033, 0x7dac102a),
+     TOBN(0xcf154f13, 0xa77739f5), TOBN(0xbf4288cb, 0x23d2af42),
+     TOBN(0xaa64c9b6, 0x32e4a1cf), TOBN(0xee8c07a8, 0xc8a208f3),
+     TOBN(0xe10d4999, 0x6fe8393f), TOBN(0x0f809a3f, 0xe91f3a32),
+     TOBN(0x61096d1c, 0x802f63c8), TOBN(0x289e1462, 0x57750d3d),
+     TOBN(0xed06167e, 0x9889feea), TOBN(0xd5c9c0e2, 0xe0993909),
+     TOBN(0x46fca0d8, 0x56508ac6), TOBN(0x91826047, 0x4f1b8e83),
+     TOBN(0x4f2c877a, 0x9a4a2751), TOBN(0x71bd0072, 0xcae6fead),
+     TOBN(0x38df8dcc, 0x06aa1941), TOBN(0x5a074b4c, 0x63beeaa8),
+     TOBN(0xd6d65934, 0xc1cec8ed), TOBN(0xa6ecb49e, 0xaabc03bd),
+     TOBN(0xaade91c2, 0xde8a8415), TOBN(0xcfb0efdf, 0x691136e0),
+     TOBN(0x11af45ee, 0x23ab3495), TOBN(0xa132df88, 0x0b77463d),
+     TOBN(0x8923c15c, 0x815d06f4), TOBN(0xc3ceb3f5, 0x0d61a436),
+     TOBN(0xaf52291d, 0xe88fb1da), TOBN(0xea057974, 0x1da12179),
+     TOBN(0xb0d7218c, 0xd2fef720), TOBN(0x6c0899c9, 0x8e1d8845),
+     TOBN(0x98157504, 0x752ddad7), TOBN(0xd60bd74f, 0xa1a68a97),
+     TOBN(0x7047a3a9, 0xf658fb99), TOBN(0x1f5d86d6, 0x5f8511e4),
+     TOBN(0xb8a4bc42, 0x4b5a6d88), TOBN(0x69eb2c33, 0x1abefa7d),
+     TOBN(0x95bf39e8, 0x13c9c510), TOBN(0xf571960a, 0xd48aab43),
+     TOBN(0x7e8cfbcf, 0x704e23c6), TOBN(0xc71b7d22, 0x28aaa65b),
+     TOBN(0xa041b2bd, 0x245e3c83), TOBN(0x69b98834, 0xd21854ff),
+     TOBN(0x89d227a3, 0x963bfeec), TOBN(0x99947aaa, 0xde7da7cb),
+     TOBN(0x1d9ee9db, 0xee68a9b1), TOBN(0x0a08f003, 0x698ec368),
+     TOBN(0xe9ea4094, 0x78ef2487), TOBN(0xc8d2d415, 0x02cfec26),
+     TOBN(0xc52f9a6e, 0xb7dcf328), TOBN(0x0ed489e3, 0x85b6a937),
+     TOBN(0x9b94986b, 0xbef3366e), TOBN(0x0de59c70, 0xedddddb8),
+     TOBN(0xffdb748c, 0xeadddbe2), TOBN(0x9b9784bb, 0x8266ea40),
+     TOBN(0x142b5502, 0x1a93507a), TOBN(0xb4cd1187, 0x8d3c06cf),
+     TOBN(0xdf70e76a, 0x91ec3f40), TOBN(0x484e81ad, 0x4e7553c2),
+     TOBN(0x830f87b5, 0x272e9d6e), TOBN(0xea1c93e5, 0xc6ff514a),
+     TOBN(0x67cc2adc, 0xc4192a8e), TOBN(0xc77e27e2, 0x42f4535a),
+     TOBN(0x9cdbab36, 0xd2b713c5), TOBN(0x86274ea0, 0xcf7b0cd3),
+     TOBN(0x784680f3, 0x09af826b), TOBN(0xbfcc837a, 0x0c72dea3),
+     TOBN(0xa8bdfe9d, 0xd6529b73), TOBN(0x708aa228, 0x63a88002),
+     TOBN(0x6c7a9a54, 0xc91d45b9), TOBN(0xdf1a38bb, 0xfd004f56),
+     TOBN(0x2e8c9a26, 0xb8bad853), TOBN(0x2d52cea3, 0x3723eae7),
+     TOBN(0x054d6d81, 0x56ca2830), TOBN(0xa3317d14, 0x9a8dc411),
+     TOBN(0xa08662fe, 0xfd4ddeda), TOBN(0xed2a153a, 0xb55d792b),
+     TOBN(0x7035c16a, 0xbfc6e944), TOBN(0xb6bc5834, 0x00171cf3),
+     TOBN(0xe27152b3, 0x83d102b6), TOBN(0xfe695a47, 0x0646b848),
+     TOBN(0xa5bb09d8, 0x916e6d37), TOBN(0xb4269d64, 0x0d17015e),
+     TOBN(0x8d8156a1, 0x0a1d2285), TOBN(0xfeef6c51, 0x46d26d72),
+     TOBN(0x9dac57c8, 0x4c5434a7), TOBN(0x0282e5be, 0x59d39e31),
+     TOBN(0xedfff181, 0x721c486d), TOBN(0x301baf10, 0xbc58824e),
+     TOBN(0x8136a6aa, 0x00570031), TOBN(0x55aaf78c, 0x1cddde68),
+     TOBN(0x26829371, 0x59c63952), TOBN(0x3a3bd274, 0x8bc25baf),
+     TOBN(0xecdf8657, 0xb7e52dc3), TOBN(0x2dd8c087, 0xfd78e6c8),
+     TOBN(0x20553274, 0xf5531461), TOBN(0x8b4a1281, 0x5d95499b),
+     TOBN(0xe2c8763a, 0x1a80f9d2), TOBN(0xd1dbe32b, 0x4ddec758),
+     TOBN(0xaf12210d, 0x30c34169), TOBN(0xba74a953, 0x78baa533),
+     TOBN(0x3d133c6e, 0xa438f254), TOBN(0xa431531a, 0x201bef5b),
+     TOBN(0x15295e22, 0xf669d7ec), TOBN(0xca374f64, 0x357fb515),
+     TOBN(0x8a8406ff, 0xeaa3fdb3), TOBN(0x106ae448, 0xdf3f2da8),
+     TOBN(0x8f9b0a90, 0x33c8e9a1), TOBN(0x234645e2, 0x71ad5885),
+     TOBN(0x3d083224, 0x1c0aed14), TOBN(0xf10a7d3e, 0x7a942d46),
+     TOBN(0x7c11deee, 0x40d5c9be), TOBN(0xb2bae7ff, 0xba84ed98),
+     TOBN(0x93e97139, 0xaad58ddd), TOBN(0x3d872796, 0x3f6d1fa3),
+     TOBN(0x483aca81, 0x8569ff13), TOBN(0x8b89a5fb, 0x9a600f72),
+     TOBN(0x4cbc27c3, 0xc06f2b86), TOBN(0x22130713, 0x63ad9c0b),
+     TOBN(0xb5358b1e, 0x48ac2840), TOBN(0x18311294, 0xecba9477),
+     TOBN(0xda58f990, 0xa6946b43), TOBN(0x3098baf9, 0x9ab41819),
+     TOBN(0x66c4c158, 0x4198da52), TOBN(0xab4fc17c, 0x146bfd1b),
+     TOBN(0x2f0a4c3c, 0xbf36a908), TOBN(0x2ae9e34b, 0x58cf7838),
+     TOBN(0xf411529e, 0x3fa11b1f), TOBN(0x21e43677, 0x974af2b4),
+     TOBN(0x7c20958e, 0xc230793b), TOBN(0x710ea885, 0x16e840f3),
+     TOBN(0xfc0b21fc, 0xc5dc67cf), TOBN(0x08d51647, 0x88405718),
+     TOBN(0xd955c21f, 0xcfe49eb7), TOBN(0x9722a5d5, 0x56dd4a1f),
+     TOBN(0xc9ef50e2, 0xc861baa5), TOBN(0xc0c21a5d, 0x9505ac3e),
+     TOBN(0xaf6b9a33, 0x8b7c063f), TOBN(0xc6370339, 0x2f4779c1),
+     TOBN(0x22df99c7, 0x638167c3), TOBN(0xfe6ffe76, 0x795db30c),
+     TOBN(0x2b822d33, 0xa4854989), TOBN(0xfef031dd, 0x30563aa5),
+     TOBN(0x16b09f82, 0xd57c667f), TOBN(0xc70312ce, 0xcc0b76f1),
+     TOBN(0xbf04a9e6, 0xc9118aec), TOBN(0x82fcb419, 0x3409d133),
+     TOBN(0x1a8ab385, 0xab45d44d), TOBN(0xfba07222, 0x617b83a3),
+     TOBN(0xb05f50dd, 0x58e81b52), TOBN(0x1d8db553, 0x21ce5aff),
+     TOBN(0x3097b8d4, 0xe344a873), TOBN(0x7d8d116d, 0xfe36d53e),
+     TOBN(0x6db22f58, 0x7875e750), TOBN(0x2dc5e373, 0x43e144ea),
+     TOBN(0xc05f32e6, 0xe799eb95), TOBN(0xe9e5f4df, 0x6899e6ec),
+     TOBN(0xbdc3bd68, 0x1fab23d5), TOBN(0xb72b8ab7, 0x73af60e6),
+     TOBN(0x8db27ae0, 0x2cecc84a), TOBN(0x600016d8, 0x7bdb871c),
+     TOBN(0x42a44b13, 0xd7c46f58), TOBN(0xb8919727, 0xc3a77d39),
+     TOBN(0xcfc6bbbd, 0xdafd6088), TOBN(0x1a740146, 0x6bd20d39),
+     TOBN(0x8c747abd, 0x98c41072), TOBN(0x4c91e765, 0xbdf68ea1),
+     TOBN(0x7c95e5ca, 0x08819a78), TOBN(0xcf48b729, 0xc9587921),
+     TOBN(0x091c7c5f, 0xdebbcc7d), TOBN(0x6f287404, 0xf0e05149),
+     TOBN(0xf83b5ac2, 0x26cd44ec), TOBN(0x88ae32a6, 0xcfea250e),
+     TOBN(0x6ac5047a, 0x1d06ebc5), TOBN(0xc7e550b4, 0xd434f781),
+     TOBN(0x61ab1cf2, 0x5c727bd2), TOBN(0x2e4badb1, 0x1cf915b0),
+     TOBN(0x1b4dadec, 0xf69d3920), TOBN(0xe61b1ca6, 0xf14c1dfe),
+     TOBN(0x90b479cc, 0xbd6bd51f), TOBN(0x8024e401, 0x8045ec30),
+     TOBN(0xcab29ca3, 0x25ef0e62), TOBN(0x4f2e9416, 0x49e4ebc0),
+     TOBN(0x45eb40ec, 0x0ccced58), TOBN(0x25cd4b9c, 0x0da44f98),
+     TOBN(0x43e06458, 0x871812c6), TOBN(0x99f80d55, 0x16cef651),
+     TOBN(0x571340c9, 0xce6dc153), TOBN(0x138d5117, 0xd8665521),
+     TOBN(0xacdb45bc, 0x4e07014d), TOBN(0x2f34bb38, 0x84b60b91),
+     TOBN(0xf44a4fd2, 0x2ae8921e), TOBN(0xb039288e, 0x892ba1e2),
+     TOBN(0x9da50174, 0xb1c180b2), TOBN(0x6b70ab66, 0x1693dc87),
+     TOBN(0x7e9babc9, 0xe7057481), TOBN(0x4581ddef, 0x9c80dc41),
+     TOBN(0x0c890da9, 0x51294682), TOBN(0x0b5629d3, 0x3f4736e5),
+     TOBN(0x2340c79e, 0xb06f5b41), TOBN(0xa42e84ce, 0x4e243469),
+     TOBN(0xf9a20135, 0x045a71a9), TOBN(0xefbfb415, 0xd27b6fb6),
+     TOBN(0x25ebea23, 0x9d33cd6f), TOBN(0x9caedb88, 0xaa6c0af8),
+     TOBN(0x53dc7e9a, 0xd9ce6f96), TOBN(0x3897f9fd, 0x51e0b15a),
+     TOBN(0xf51cb1f8, 0x8e5d788e), TOBN(0x1aec7ba8, 0xe1d490ee),
+     TOBN(0x265991e0, 0xcc58cb3c), TOBN(0x9f306e8c, 0x9fc3ad31),
+     TOBN(0x5fed006e, 0x5040a0ac), TOBN(0xca9d5043, 0xfb476f2e),
+     TOBN(0xa19c06e8, 0xbeea7a23), TOBN(0xd2865801, 0x0edabb63),
+     TOBN(0xdb92293f, 0x6967469a), TOBN(0x2894d839, 0x8d8a8ed8),
+     TOBN(0x87c9e406, 0xbbc77122), TOBN(0x8671c6f1, 0x2ea3a26a),
+     TOBN(0xe42df8d6, 0xd7de9853), TOBN(0x2e3ce346, 0xb1f2bcc7),
+     TOBN(0xda601dfc, 0x899d50cf), TOBN(0xbfc913de, 0xfb1b598f),
+     TOBN(0x81c4909f, 0xe61f7908), TOBN(0x192e304f, 0x9bbc7b29),
+     TOBN(0xc3ed8738, 0xc104b338), TOBN(0xedbe9e47, 0x783f5d61),
+     TOBN(0x0c06e9be, 0x2db30660), TOBN(0xda3e613f, 0xc0eb7d8e),
+     TOBN(0xd8fa3e97, 0x322e096e), TOBN(0xfebd91e8, 0xd336e247),
+     TOBN(0x8f13ccc4, 0xdf655a49), TOBN(0xa9e00dfc, 0x5eb20210),
+     TOBN(0x84631d0f, 0xc656b6ea), TOBN(0x93a058cd, 0xd8c0d947),
+     TOBN(0x6846904a, 0x67bd3448), TOBN(0x4a3d4e1a, 0xf394fd5c),
+     TOBN(0xc102c1a5, 0xdb225f52), TOBN(0xe3455bba, 0xfc4f5e9a),
+     TOBN(0x6b36985b, 0x4b9ad1ce), TOBN(0xa9818536, 0x5bb7f793),
+     TOBN(0x6c25e1d0, 0x48b1a416), TOBN(0x1381dd53, 0x3c81bee7),
+     TOBN(0xd2a30d61, 0x7a4a7620), TOBN(0xc8412926, 0x39b8944c),
+     TOBN(0x3c1c6fbe, 0x7a97c33a), TOBN(0x941e541d, 0x938664e7),
+     TOBN(0x417499e8, 0x4a34f239), TOBN(0x15fdb83c, 0xb90402d5),
+     TOBN(0xb75f46bf, 0x433aa832), TOBN(0xb61e15af, 0x63215db1),
+     TOBN(0xaabe59d4, 0xa127f89a), TOBN(0x5d541e0c, 0x07e816da),
+     TOBN(0xaaba0659, 0xa618b692), TOBN(0x55327733, 0x17266026),
+     TOBN(0xaf53a0fc, 0x95f57552), TOBN(0x32947650, 0x6cacb0c9),
+     TOBN(0x253ff58d, 0xc821be01), TOBN(0xb0309531, 0xa06f1146),
+     TOBN(0x59bbbdf5, 0x05c2e54d), TOBN(0x158f27ad, 0x26e8dd22),
+     TOBN(0xcc5b7ffb, 0x397e1e53), TOBN(0xae03f65b, 0x7fc1e50d),
+     TOBN(0xa9784ebd, 0x9c95f0f9), TOBN(0x5ed9deb2, 0x24640771),
+     TOBN(0x31244af7, 0x035561c4), TOBN(0x87332f3a, 0x7ee857de),
+     TOBN(0x09e16e9e, 0x2b9e0d88), TOBN(0x52d910f4, 0x56a06049),
+     TOBN(0x507ed477, 0xa9592f48), TOBN(0x85cb917b, 0x2365d678),
+     TOBN(0xf8511c93, 0x4c8998d1), TOBN(0x2186a3f1, 0x730ea58f),
+     TOBN(0x50189626, 0xb2029db0), TOBN(0x9137a6d9, 0x02ceb75a),
+     TOBN(0x2fe17f37, 0x748bc82c), TOBN(0x87c2e931, 0x80469f8c),
+     TOBN(0x850f71cd, 0xbf891aa2), TOBN(0x0ca1b89b, 0x75ec3d8d),
+     TOBN(0x516c43aa, 0x5e1cd3cd), TOBN(0x89397808, 0x9a887c28),
+     TOBN(0x0059c699, 0xddea1f9f), TOBN(0x7737d6fa, 0x8e6868f7),
+     TOBN(0x6d93746a, 0x60f1524b), TOBN(0x36985e55, 0xba052aa7),
+     TOBN(0x41b1d322, 0xed923ea5), TOBN(0x3429759f, 0x25852a11),
+     TOBN(0xbeca6ec3, 0x092e9f41), TOBN(0x3a238c66, 0x62256bbd),
+     TOBN(0xd82958ea, 0x70ad487d), TOBN(0x4ac8aaf9, 0x65610d93),
+     TOBN(0x3fa101b1, 0x5e4ccab0), TOBN(0x9bf430f2, 0x9de14bfb),
+     TOBN(0xa10f5cc6, 0x6531899d), TOBN(0x590005fb, 0xea8ce17d),
+     TOBN(0xc437912f, 0x24544cb6), TOBN(0x9987b71a, 0xd79ac2e3),
+     TOBN(0x13e3d9dd, 0xc058a212), TOBN(0x00075aac, 0xd2de9606),
+     TOBN(0x80ab508b, 0x6cac8369), TOBN(0x87842be7, 0xf54f6c89),
+     TOBN(0xa7ad663d, 0x6bc532a4), TOBN(0x67813de7, 0x78a91bc8),
+     TOBN(0x5dcb61ce, 0xc3427239), TOBN(0x5f3c7cf0, 0xc56934d9),
+     TOBN(0xc079e0fb, 0xe3191591), TOBN(0xe40896bd, 0xb01aada7),
+     TOBN(0x8d466791, 0x0492d25f), TOBN(0x8aeb30c9, 0xe7408276),
+     TOBN(0xe9437495, 0x9287aacc), TOBN(0x23d4708d, 0x79fe03d4),
+     TOBN(0x8cda9cf2, 0xd0c05199), TOBN(0x502fbc22, 0xfae78454),
+     TOBN(0xc0bda9df, 0xf572a182), TOBN(0x5f9b71b8, 0x6158b372),
+     TOBN(0xe0f33a59, 0x2b82dd07), TOBN(0x76302735, 0x9523032e),
+     TOBN(0x7fe1a721, 0xc4505a32), TOBN(0x7b6e3e82, 0xf796409f),}
+    ,
+    {TOBN(0xe3417bc0, 0x35d0b34a), TOBN(0x440b386b, 0x8327c0a7),
+     TOBN(0x8fb7262d, 0xac0362d1), TOBN(0x2c41114c, 0xe0cdf943),
+     TOBN(0x2ba5cef1, 0xad95a0b1), TOBN(0xc09b37a8, 0x67d54362),
+     TOBN(0x26d6cdd2, 0x01e486c9), TOBN(0x20477abf, 0x42ff9297),
+     TOBN(0xa004dcb3, 0x292a9287), TOBN(0xddc15cf6, 0x77b092c7),
+     TOBN(0x083a8464, 0x806c0605), TOBN(0x4a68df70, 0x3db997b0),
+     TOBN(0x9c134e45, 0x05bf7dd0), TOBN(0xa4e63d39, 0x8ccf7f8c),
+     TOBN(0xa6e6517f, 0x41b5f8af), TOBN(0xaa8b9342, 0xad7bc1cc),
+     TOBN(0x126f35b5, 0x1e706ad9), TOBN(0xb99cebb4, 0xc3a9ebdf),
+     TOBN(0xa75389af, 0xbf608d90), TOBN(0x76113c4f, 0xc6c89858),
+     TOBN(0x80de8eb0, 0x97e2b5aa), TOBN(0x7e1022cc, 0x63b91304),
+     TOBN(0x3bdab605, 0x6ccc066c), TOBN(0x33cbb144, 0xb2edf900),
+     TOBN(0xc4176471, 0x7af715d2), TOBN(0xe2f7f594, 0xd0134a96),
+     TOBN(0x2c1873ef, 0xa41ec956), TOBN(0xe4e7b4f6, 0x77821304),
+     TOBN(0xe5c8ff97, 0x88d5374a), TOBN(0x2b915e63, 0x80823d5b),
+     TOBN(0xea6bc755, 0xb2ee8fe2), TOBN(0x6657624c, 0xe7112651),
+     TOBN(0x157af101, 0xdace5aca), TOBN(0xc4fdbcf2, 0x11a6a267),
+     TOBN(0xdaddf340, 0xc49c8609), TOBN(0x97e49f52, 0xe9604a65),
+     TOBN(0x9be8e790, 0x937e2ad5), TOBN(0x846e2508, 0x326e17f1),
+     TOBN(0x3f38007a, 0x0bbbc0dc), TOBN(0xcf03603f, 0xb11e16d6),
+     TOBN(0xd6f800e0, 0x7442f1d5), TOBN(0x475607d1, 0x66e0e3ab),
+     TOBN(0x82807f16, 0xb7c64047), TOBN(0x8858e1e3, 0xa749883d),
+     TOBN(0x5859120b, 0x8231ee10), TOBN(0x1b80e7eb, 0x638a1ece),
+     TOBN(0xcb72525a, 0xc6aa73a4), TOBN(0xa7cdea3d, 0x844423ac),
+     TOBN(0x5ed0c007, 0xf8ae7c38), TOBN(0x6db07a5c, 0x3d740192),
+     TOBN(0xbe5e9c2a, 0x5fe36db3), TOBN(0xd5b9d57a, 0x76e95046),
+     TOBN(0x54ac32e7, 0x8eba20f2), TOBN(0xef11ca8f, 0x71b9a352),
+     TOBN(0x305e373e, 0xff98a658), TOBN(0xffe5a100, 0x823eb667),
+     TOBN(0x57477b11, 0xe51732d2), TOBN(0xdfd6eb28, 0x2538fc0e),
+     TOBN(0x5c43b0cc, 0x3b39eec5), TOBN(0x6af12778, 0xcb36cc57),
+     TOBN(0x70b0852d, 0x06c425ae), TOBN(0x6df92f8c, 0x5c221b9b),
+     TOBN(0x6c8d4f9e, 0xce826d9c), TOBN(0xf59aba7b, 0xb49359c3),
+     TOBN(0x5c8ed8d5, 0xda64309d), TOBN(0x61a6de56, 0x91b30704),
+     TOBN(0xd6b52f6a, 0x2f9b5808), TOBN(0x0eee4194, 0x98c958a7),
+     TOBN(0xcddd9aab, 0x771e4caa), TOBN(0x83965dfd, 0x78bc21be),
+     TOBN(0x02affce3, 0xb3b504f5), TOBN(0x30847a21, 0x561c8291),
+     TOBN(0xd2eb2cf1, 0x52bfda05), TOBN(0xe0e4c4e9, 0x6197b98c),
+     TOBN(0x1d35076c, 0xf8a1726f), TOBN(0x6c06085b, 0x2db11e3d),
+     TOBN(0x15c0c4d7, 0x4463ba14), TOBN(0x9d292f83, 0x0030238c),
+     TOBN(0x1311ee8b, 0x3727536d), TOBN(0xfeea86ef, 0xbeaedc1e),
+     TOBN(0xb9d18cd3, 0x66131e2e), TOBN(0xf31d974f, 0x80fe2682),
+     TOBN(0xb6e49e0f, 0xe4160289), TOBN(0x7c48ec0b, 0x08e92799),
+     TOBN(0x818111d8, 0xd1989aa7), TOBN(0xb34fa0aa, 0xebf926f9),
+     TOBN(0xdb5fe2f5, 0xa245474a), TOBN(0xf80a6ebb, 0x3c7ca756),
+     TOBN(0xa7f96054, 0xafa05dd8), TOBN(0x26dfcf21, 0xfcaf119e),
+     TOBN(0xe20ef2e3, 0x0564bb59), TOBN(0xef4dca50, 0x61cb02b8),
+     TOBN(0xcda7838a, 0x65d30672), TOBN(0x8b08d534, 0xfd657e86),
+     TOBN(0x4c5b4395, 0x46d595c8), TOBN(0x39b58725, 0x425cb836),
+     TOBN(0x8ea61059, 0x3de9abe3), TOBN(0x40434881, 0x9cdc03be),
+     TOBN(0x9b261245, 0xcfedce8c), TOBN(0x78c318b4, 0xcf5234a1),
+     TOBN(0x510bcf16, 0xfde24c99), TOBN(0x2a77cb75, 0xa2c2ff5d),
+     TOBN(0x9c895c2b, 0x27960fb4), TOBN(0xd30ce975, 0xb0eda42b),
+     TOBN(0xfda85393, 0x1a62cc26), TOBN(0x23c69b96, 0x50c0e052),
+     TOBN(0xa227df15, 0xbfc633f3), TOBN(0x2ac78848, 0x1bae7d48),
+     TOBN(0x487878f9, 0x187d073d), TOBN(0x6c2be919, 0x967f807d),
+     TOBN(0x765861d8, 0x336e6d8f), TOBN(0x88b8974c, 0xce528a43),
+     TOBN(0x09521177, 0xff57d051), TOBN(0x2ff38037, 0xfb6a1961),
+     TOBN(0xfc0aba74, 0xa3d76ad4), TOBN(0x7c764803, 0x25a7ec17),
+     TOBN(0x7532d75f, 0x48879bc8), TOBN(0xea7eacc0, 0x58ce6bc1),
+     TOBN(0xc82176b4, 0x8e896c16), TOBN(0x9a30e0b2, 0x2c750fed),
+     TOBN(0xc37e2c2e, 0x421d3aa4), TOBN(0xf926407c, 0xe84fa840),
+     TOBN(0x18abc03d, 0x1454e41c), TOBN(0x26605ecd, 0x3f7af644),
+     TOBN(0x242341a6, 0xd6a5eabf), TOBN(0x1edb84f4, 0x216b668e),
+     TOBN(0xd836edb8, 0x04010102), TOBN(0x5b337ce7, 0x945e1d8c),
+     TOBN(0xd2075c77, 0xc055dc14), TOBN(0x2a0ffa25, 0x81d89cdf),
+     TOBN(0x8ce815ea, 0x6ffdcbaf), TOBN(0xa3428878, 0xfb648867),
+     TOBN(0x277699cf, 0x884655fb), TOBN(0xfa5b5bd6, 0x364d3e41),
+     TOBN(0x01f680c6, 0x441e1cb7), TOBN(0x3fd61e66, 0xb70a7d67),
+     TOBN(0x666ba2dc, 0xcc78cf66), TOBN(0xb3018174, 0x6fdbff77),
+     TOBN(0x8d4dd0db, 0x168d4668), TOBN(0x259455d0, 0x1dab3a2a),
+     TOBN(0xf58564c5, 0xcde3acec), TOBN(0x77141925, 0x13adb276),
+     TOBN(0x527d725d, 0x8a303f65), TOBN(0x55deb6c9, 0xe6f38f7b),
+     TOBN(0xfd5bb657, 0xb1fa70fb), TOBN(0xfa07f50f, 0xd8073a00),
+     TOBN(0xf72e3aa7, 0xbca02500), TOBN(0xf68f895d, 0x9975740d),
+     TOBN(0x30112060, 0x5cae2a6a), TOBN(0x01bd7218, 0x02874842),
+     TOBN(0x3d423891, 0x7ce47bd3), TOBN(0xa66663c1, 0x789544f6),
+     TOBN(0x864d05d7, 0x3272d838), TOBN(0xe22924f9, 0xfa6295c5),
+     TOBN(0x8189593f, 0x6c2fda32), TOBN(0x330d7189, 0xb184b544),
+     TOBN(0x79efa62c, 0xbde1f714), TOBN(0x35771c94, 0xe5cb1a63),
+     TOBN(0x2f4826b8, 0x641c8332), TOBN(0x00a894fb, 0xc8cee854),
+     TOBN(0xb4b9a39b, 0x36194d40), TOBN(0xe857a7c5, 0x77612601),
+     TOBN(0xf4209dd2, 0x4ecf2f58), TOBN(0x82b9e66d, 0x5a033487),
+     TOBN(0xc1e36934, 0xe4e8b9dd), TOBN(0xd2372c9d, 0xa42377d7),
+     TOBN(0x51dc94c7, 0x0e3ae43b), TOBN(0x4c57761e, 0x04474f6f),
+     TOBN(0xdcdacd0a, 0x1058a318), TOBN(0x369cf3f5, 0x78053a9a),
+     TOBN(0xc6c3de50, 0x31c68de2), TOBN(0x4653a576, 0x3c4b6d9f),
+     TOBN(0x1688dd5a, 0xaa4e5c97), TOBN(0x5be80aa1, 0xb7ab3c74),
+     TOBN(0x70cefe7c, 0xbc65c283), TOBN(0x57f95f13, 0x06867091),
+     TOBN(0xa39114e2, 0x4415503b), TOBN(0xc08ff7c6, 0x4cbb17e9),
+     TOBN(0x1eff674d, 0xd7dec966), TOBN(0x6d4690af, 0x53376f63),
+     TOBN(0xff6fe32e, 0xea74237b), TOBN(0xc436d17e, 0xcd57508e),
+     TOBN(0x15aa28e1, 0xedcc40fe), TOBN(0x0d769c04, 0x581bbb44),
+     TOBN(0xc240b6de, 0x34eaacda), TOBN(0xd9e116e8, 0x2ba0f1de),
+     TOBN(0xcbe45ec7, 0x79438e55), TOBN(0x91787c9d, 0x96f752d7),
+     TOBN(0x897f532b, 0xf129ac2f), TOBN(0xd307b7c8, 0x5a36e22c),
+     TOBN(0x91940675, 0x749fb8f3), TOBN(0xd14f95d0, 0x157fdb28),
+     TOBN(0xfe51d029, 0x6ae55043), TOBN(0x8931e98f, 0x44a87de1),
+     TOBN(0xe57f1cc6, 0x09e4fee2), TOBN(0x0d063b67, 0x4e072d92),
+     TOBN(0x70a998b9, 0xed0e4316), TOBN(0xe74a736b, 0x306aca46),
+     TOBN(0xecf0fbf2, 0x4fda97c7), TOBN(0xa40f65cb, 0x3e178d93),
+     TOBN(0x16253604, 0x16df4285), TOBN(0xb0c9babb, 0xd0c56ae2),
+     TOBN(0x73032b19, 0xcfc5cfc3), TOBN(0xe497e5c3, 0x09752056),
+     TOBN(0x12096bb4, 0x164bda96), TOBN(0x1ee42419, 0xa0b74da1),
+     TOBN(0x8fc36243, 0x403826ba), TOBN(0x0c8f0069, 0xdc09e660),
+     TOBN(0x8667e981, 0xc27253c9), TOBN(0x05a6aefb, 0x92b36a45),
+     TOBN(0xa62c4b36, 0x9cb7bb46), TOBN(0x8394f375, 0x11f7027b),
+     TOBN(0x747bc79c, 0x5f109d0f), TOBN(0xcad88a76, 0x5b8cc60a),
+     TOBN(0x80c5a66b, 0x58f09e68), TOBN(0xe753d451, 0xf6127eac),
+     TOBN(0xc44b74a1, 0x5b0ec6f5), TOBN(0x47989fe4, 0x5289b2b8),
+     TOBN(0x745f8484, 0x58d6fc73), TOBN(0xec362a6f, 0xf61c70ab),
+     TOBN(0x070c98a7, 0xb3a8ad41), TOBN(0x73a20fc0, 0x7b63db51),
+     TOBN(0xed2c2173, 0xf44c35f4), TOBN(0x8a56149d, 0x9acc9dca),
+     TOBN(0x98f17881, 0x9ac6e0f4), TOBN(0x360fdeaf, 0xa413b5ed),
+     TOBN(0x0625b8f4, 0xa300b0fd), TOBN(0xf1f4d76a, 0x5b3222d3),
+     TOBN(0x9d6f5109, 0x587f76b8), TOBN(0x8b4ee08d, 0x2317fdb5),
+     TOBN(0x88089bb7, 0x8c68b095), TOBN(0x95570e9a, 0x5808d9b9),
+     TOBN(0xa395c36f, 0x35d33ae7), TOBN(0x200ea123, 0x50bb5a94),
+     TOBN(0x20c789bd, 0x0bafe84b), TOBN(0x243ef52d, 0x0919276a),
+     TOBN(0x3934c577, 0xe23ae233), TOBN(0xb93807af, 0xa460d1ec),
+     TOBN(0xb72a53b1, 0xf8fa76a4), TOBN(0xd8914cb0, 0xc3ca4491),
+     TOBN(0x2e128494, 0x3fb42622), TOBN(0x3b2700ac, 0x500907d5),
+     TOBN(0xf370fb09, 0x1a95ec63), TOBN(0xf8f30be2, 0x31b6dfbd),
+     TOBN(0xf2b2f8d2, 0x69e55f15), TOBN(0x1fead851, 0xcc1323e9),
+     TOBN(0xfa366010, 0xd9e5eef6), TOBN(0x64d487b0, 0xe316107e),
+     TOBN(0x4c076b86, 0xd23ddc82), TOBN(0x03fd344c, 0x7e0143f0),
+     TOBN(0xa95362ff, 0x317af2c5), TOBN(0x0add3db7, 0xe18b7a4f),
+     TOBN(0x9c673e3f, 0x8260e01b), TOBN(0xfbeb49e5, 0x54a1cc91),
+     TOBN(0x91351bf2, 0x92f2e433), TOBN(0xc755e7ec, 0x851141eb),
+     TOBN(0xc9a95139, 0x29607745), TOBN(0x0ca07420, 0xa26f2b28),
+     TOBN(0xcb2790e7, 0x4bc6f9dd), TOBN(0x345bbb58, 0xadcaffc0),
+     TOBN(0xc65ea38c, 0xbe0f27a2), TOBN(0x67c24d7c, 0x641fcb56),
+     TOBN(0x2c25f0a7, 0xa9e2c757), TOBN(0x93f5cdb0, 0x16f16c49),
+     TOBN(0x2ca5a9d7, 0xc5ee30a1), TOBN(0xd1593635, 0xb909b729),
+     TOBN(0x804ce9f3, 0xdadeff48), TOBN(0xec464751, 0xb07c30c3),
+     TOBN(0x89d65ff3, 0x9e49af6a), TOBN(0xf2d6238a, 0x6f3d01bc),
+     TOBN(0x1095561e, 0x0bced843), TOBN(0x51789e12, 0xc8a13fd8),
+     TOBN(0xd633f929, 0x763231df), TOBN(0x46df9f7d, 0xe7cbddef),
+     TOBN(0x01c889c0, 0xcb265da8), TOBN(0xfce1ad10, 0xaf4336d2),
+     TOBN(0x8d110df6, 0xfc6a0a7e), TOBN(0xdd431b98, 0x6da425dc),
+     TOBN(0xcdc4aeab, 0x1834aabe), TOBN(0x84deb124, 0x8439b7fc),
+     TOBN(0x8796f169, 0x3c2a5998), TOBN(0x9b9247b4, 0x7947190d),
+     TOBN(0x55b9d9a5, 0x11597014), TOBN(0x7e9dd70d, 0x7b1566ee),
+     TOBN(0x94ad78f7, 0xcbcd5e64), TOBN(0x0359ac17, 0x9bd4c032),
+     TOBN(0x3b11baaf, 0x7cc222ae), TOBN(0xa6a6e284, 0xba78e812),
+     TOBN(0x8392053f, 0x24cea1a0), TOBN(0xc97bce4a, 0x33621491),
+     TOBN(0x7eb1db34, 0x35399ee9), TOBN(0x473f78ef, 0xece81ad1),
+     TOBN(0x41d72fe0, 0xf63d3d0d), TOBN(0xe620b880, 0xafab62fc),
+     TOBN(0x92096bc9, 0x93158383), TOBN(0x41a21357, 0x8f896f6c),
+     TOBN(0x1b5ee2fa, 0xc7dcfcab), TOBN(0x650acfde, 0x9546e007),
+     TOBN(0xc081b749, 0xb1b02e07), TOBN(0xda9e41a0, 0xf9eca03d),
+     TOBN(0x013ba727, 0x175a54ab), TOBN(0xca0cd190, 0xea5d8d10),
+     TOBN(0x85ea52c0, 0x95fd96a9), TOBN(0x2c591b9f, 0xbc5c3940),
+     TOBN(0x6fb4d4e4, 0x2bad4d5f), TOBN(0xfa4c3590, 0xfef0059b),
+     TOBN(0x6a10218a, 0xf5122294), TOBN(0x9a78a81a, 0xa85751d1),
+     TOBN(0x04f20579, 0xa98e84e7), TOBN(0xfe1242c0, 0x4997e5b5),
+     TOBN(0xe77a273b, 0xca21e1e4), TOBN(0xfcc8b1ef, 0x9411939d),
+     TOBN(0xe20ea302, 0x92d0487a), TOBN(0x1442dbec, 0x294b91fe),
+     TOBN(0x1f7a4afe, 0xbb6b0e8f), TOBN(0x1700ef74, 0x6889c318),
+     TOBN(0xf5bbffc3, 0x70f1fc62), TOBN(0x3b31d4b6, 0x69c79cca),
+     TOBN(0xe8bc2aab, 0xa7f6340d), TOBN(0xb0b08ab4, 0xa725e10a),
+     TOBN(0x44f05701, 0xae340050), TOBN(0xba4b3016, 0x1cf0c569),
+     TOBN(0x5aa29f83, 0xfbe19a51), TOBN(0x1b9ed428, 0xb71d752e),
+     TOBN(0x1666e54e, 0xeb4819f5), TOBN(0x616cdfed, 0x9e18b75b),
+     TOBN(0x112ed5be, 0x3ee27b0b), TOBN(0xfbf28319, 0x44c7de4d),
+     TOBN(0xd685ec85, 0xe0e60d84), TOBN(0x68037e30, 0x1db7ee78),
+     TOBN(0x5b65bdcd, 0x003c4d6e), TOBN(0x33e7363a, 0x93e29a6a),
+     TOBN(0x995b3a61, 0x08d0756c), TOBN(0xd727f85c, 0x2faf134b),
+     TOBN(0xfac6edf7, 0x1d337823), TOBN(0x99b9aa50, 0x0439b8b4),
+     TOBN(0x722eb104, 0xe2b4e075), TOBN(0x49987295, 0x437c4926),
+     TOBN(0xb1e4c0e4, 0x46a9b82d), TOBN(0xd0cb3197, 0x57a006f5),
+     TOBN(0xf3de0f7d, 0xd7808c56), TOBN(0xb5c54d8f, 0x51f89772),
+     TOBN(0x500a114a, 0xadbd31aa), TOBN(0x9afaaaa6, 0x295f6cab),
+     TOBN(0x94705e21, 0x04cf667a), TOBN(0xfc2a811b, 0x9d3935d7),
+     TOBN(0x560b0280, 0x6d09267c), TOBN(0xf19ed119, 0xf780e53b),
+     TOBN(0xf0227c09, 0x067b6269), TOBN(0x967b8533, 0x5caef599),
+     TOBN(0x155b9243, 0x68efeebc), TOBN(0xcd6d34f5, 0xc497bae6),
+     TOBN(0x1dd8d5d3, 0x6cceb370), TOBN(0x2aeac579, 0xa78d7bf9),
+     TOBN(0x5d65017d, 0x70b67a62), TOBN(0x70c8e44f, 0x17c53f67),
+     TOBN(0xd1fc0950, 0x86a34d09), TOBN(0xe0fca256, 0xe7134907),
+     TOBN(0xe24fa29c, 0x80fdd315), TOBN(0x2c4acd03, 0xd87499ad),
+     TOBN(0xbaaf7517, 0x3b5a9ba6), TOBN(0xb9cbe1f6, 0x12e51a51),
+     TOBN(0xd88edae3, 0x5e154897), TOBN(0xe4309c3c, 0x77b66ca0),
+     TOBN(0xf5555805, 0xf67f3746), TOBN(0x85fc37ba, 0xa36401ff),
+     TOBN(0xdf86e2ca, 0xd9499a53), TOBN(0x6270b2a3, 0xecbc955b),
+     TOBN(0xafae64f5, 0x974ad33b), TOBN(0x04d85977, 0xfe7b2df1),
+     TOBN(0x2a3db3ff, 0x4ab03f73), TOBN(0x0b87878a, 0x8702740a),
+     TOBN(0x6d263f01, 0x5a061732), TOBN(0xc25430ce, 0xa32a1901),
+     TOBN(0xf7ebab3d, 0xdb155018), TOBN(0x3a86f693, 0x63a9b78e),
+     TOBN(0x349ae368, 0xda9f3804), TOBN(0x470f07fe, 0xa164349c),
+     TOBN(0xd52f4cc9, 0x8562baa5), TOBN(0xc74a9e86, 0x2b290df3),
+     TOBN(0xd3a1aa35, 0x43471a24), TOBN(0x239446be, 0xb8194511),
+     TOBN(0xbec2dd00, 0x81dcd44d), TOBN(0xca3d7f0f, 0xc42ac82d),
+     TOBN(0x1f3db085, 0xfdaf4520), TOBN(0xbb6d3e80, 0x4549daf2),
+     TOBN(0xf5969d8a, 0x19ad5c42), TOBN(0x7052b13d, 0xdbfd1511),
+     TOBN(0x11890d1b, 0x682b9060), TOBN(0xa71d3883, 0xac34452c),
+     TOBN(0xa438055b, 0x783805b4), TOBN(0x43241277, 0x4725b23e),
+     TOBN(0xf20cf96e, 0x4901bbed), TOBN(0x6419c710, 0xf432a2bb),
+     TOBN(0x57a0fbb9, 0xdfa9cd7d), TOBN(0x589111e4, 0x00daa249),
+     TOBN(0x19809a33, 0x7b60554e), TOBN(0xea5f8887, 0xede283a4),
+     TOBN(0x2d713802, 0x503bfd35), TOBN(0x151bb0af, 0x585d2a53),
+     TOBN(0x40b08f74, 0x43b30ca8), TOBN(0xe10b5bba, 0xd9934583),
+     TOBN(0xe8a546d6, 0xb51110ad), TOBN(0x1dd50e66, 0x28e0b6c5),
+     TOBN(0x292e9d54, 0xcff2b821), TOBN(0x3882555d, 0x47281760),
+     TOBN(0x134838f8, 0x3724d6e3), TOBN(0xf2c679e0, 0x22ddcda1),
+     TOBN(0x40ee8815, 0x6d2a5768), TOBN(0x7f227bd2, 0x1c1e7e2d),
+     TOBN(0x487ba134, 0xd04ff443), TOBN(0x76e2ff3d, 0xc614e54b),
+     TOBN(0x36b88d6f, 0xa3177ec7), TOBN(0xbf731d51, 0x2328fff5),
+     TOBN(0x758caea2, 0x49ba158e), TOBN(0x5ab8ff4c, 0x02938188),
+     TOBN(0x33e16056, 0x35edc56d), TOBN(0x5a69d349, 0x7e940d79),
+     TOBN(0x6c4fd001, 0x03866dcb), TOBN(0x20a38f57, 0x4893cdef),
+     TOBN(0xfbf3e790, 0xfac3a15b), TOBN(0x6ed7ea2e, 0x7a4f8e6b),
+     TOBN(0xa663eb4f, 0xbc3aca86), TOBN(0x22061ea5, 0x080d53f7),
+     TOBN(0x2480dfe6, 0xf546783f), TOBN(0xd38bc6da, 0x5a0a641e),
+     TOBN(0xfb093cd1, 0x2ede8965), TOBN(0x89654db4, 0xacb455cf),
+     TOBN(0x413cbf9a, 0x26e1adee), TOBN(0x291f3764, 0x373294d4),
+     TOBN(0x00797257, 0x648083fe), TOBN(0x25f504d3, 0x208cc341),
+     TOBN(0x635a8e5e, 0xc3a0ee43), TOBN(0x70aaebca, 0x679898ff),
+     TOBN(0x9ee9f547, 0x5dc63d56), TOBN(0xce987966, 0xffb34d00),
+     TOBN(0xf9f86b19, 0x5e26310a), TOBN(0x9e435484, 0x382a8ca8),
+     TOBN(0x253bcb81, 0xc2352fe4), TOBN(0xa4eac8b0, 0x4474b571),
+     TOBN(0xc1b97512, 0xc1ad8cf8), TOBN(0x193b4e9e, 0x99e0b697),
+     TOBN(0x939d2716, 0x01e85df0), TOBN(0x4fb265b3, 0xcd44eafd),
+     TOBN(0x321e7dcd, 0xe51e1ae2), TOBN(0x8e3a8ca6, 0xe3d8b096),
+     TOBN(0x8de46cb0, 0x52604998), TOBN(0x91099ad8, 0x39072aa7),
+     TOBN(0x2617f91c, 0x93aa96b8), TOBN(0x0fc8716b, 0x7fca2e13),
+     TOBN(0xa7106f5e, 0x95328723), TOBN(0xd1c9c40b, 0x262e6522),
+     TOBN(0xb9bafe86, 0x42b7c094), TOBN(0x1873439d, 0x1543c021),
+     TOBN(0xe1baa5de, 0x5cbefd5d), TOBN(0xa363fc5e, 0x521e8aff),
+     TOBN(0xefe6320d, 0xf862eaac), TOBN(0x14419c63, 0x22c647dc),
+     TOBN(0x0e06707c, 0x4e46d428), TOBN(0xcb6c834f, 0x4a178f8f),
+     TOBN(0x0f993a45, 0xd30f917c), TOBN(0xd4c4b049, 0x9879afee),
+     TOBN(0xb6142a1e, 0x70500063), TOBN(0x7c9b41c3, 0xa5d9d605),
+     TOBN(0xbc00fc2f, 0x2f8ba2c7), TOBN(0x0966eb2f, 0x7c67aa28),
+     TOBN(0x13f7b516, 0x5a786972), TOBN(0x3bfb7557, 0x8a2fbba0),
+     TOBN(0x131c4f23, 0x5a2b9620), TOBN(0xbff3ed27, 0x6faf46be),
+     TOBN(0x9b4473d1, 0x7e172323), TOBN(0x421e8878, 0x339f6246),
+     TOBN(0x0fa8587a, 0x25a41632), TOBN(0xc0814124, 0xa35b6c93),
+     TOBN(0x2b18a9f5, 0x59ebb8db), TOBN(0x264e3357, 0x76edb29c),
+     TOBN(0xaf245ccd, 0xc87c51e2), TOBN(0x16b3015b, 0x501e6214),
+     TOBN(0xbb31c560, 0x0a3882ce), TOBN(0x6961bb94, 0xfec11e04),
+     TOBN(0x3b825b8d, 0xeff7a3a0), TOBN(0xbec33738, 0xb1df7326),
+     TOBN(0x68ad747c, 0x99604a1f), TOBN(0xd154c934, 0x9a3bd499),
+     TOBN(0xac33506f, 0x1cc7a906), TOBN(0x73bb5392, 0x6c560e8f),
+     TOBN(0x6428fcbe, 0x263e3944), TOBN(0xc11828d5, 0x1c387434),
+     TOBN(0x3cd04be1, 0x3e4b12ff), TOBN(0xc3aad9f9, 0x2d88667c),
+     TOBN(0xc52ddcf8, 0x248120cf), TOBN(0x985a892e, 0x2a389532),
+     TOBN(0xfbb4b21b, 0x3bb85fa0), TOBN(0xf95375e0, 0x8dfc6269),
+     TOBN(0xfb4fb06c, 0x7ee2acea), TOBN(0x6785426e, 0x309c4d1f),
+     TOBN(0x659b17c8, 0xd8ceb147), TOBN(0x9b649eee, 0xb70a5554),
+     TOBN(0x6b7fa0b5, 0xac6bc634), TOBN(0xd99fe2c7, 0x1d6e732f),
+     TOBN(0x30e6e762, 0x8d3abba2), TOBN(0x18fee6e7, 0xa797b799),
+     TOBN(0x5c9d360d, 0xc696464d), TOBN(0xe3baeb48, 0x27bfde12),
+     TOBN(0x2bf5db47, 0xf23206d5), TOBN(0x2f6d3420, 0x1d260152),
+     TOBN(0x17b87653, 0x3f8ff89a), TOBN(0x5157c30c, 0x378fa458),
+     TOBN(0x7517c5c5, 0x2d4fb936), TOBN(0xef22f7ac, 0xe6518cdc),
+     TOBN(0xdeb483e6, 0xbf847a64), TOBN(0xf5084558, 0x92e0fa89),}
+    ,
+    {TOBN(0xab9659d8, 0xdf7304d4), TOBN(0xb71bcf1b, 0xff210e8e),
+     TOBN(0xa9a2438b, 0xd73fbd60), TOBN(0x4595cd1f, 0x5d11b4de),
+     TOBN(0x9c0d329a, 0x4835859d), TOBN(0x4a0f0d2d, 0x7dbb6e56),
+     TOBN(0xc6038e5e, 0xdf928a4e), TOBN(0xc9429621, 0x8f5ad154),
+     TOBN(0x91213462, 0xf23f2d92), TOBN(0x6cab71bd, 0x60b94078),
+     TOBN(0x6bdd0a63, 0x176cde20), TOBN(0x54c9b20c, 0xee4d54bc),
+     TOBN(0x3cd2d8aa, 0x9f2ac02f), TOBN(0x03f8e617, 0x206eedb0),
+     TOBN(0xc7f68e16, 0x93086434), TOBN(0x831469c5, 0x92dd3db9),
+     TOBN(0x8521df24, 0x8f981354), TOBN(0x587e23ec, 0x3588a259),
+     TOBN(0xcbedf281, 0xd7a0992c), TOBN(0x06930a55, 0x38961407),
+     TOBN(0x09320deb, 0xbe5bbe21), TOBN(0xa7ffa5b5, 0x2491817f),
+     TOBN(0xe6c8b4d9, 0x09065160), TOBN(0xac4f3992, 0xfff6d2a9),
+     TOBN(0x7aa7a158, 0x3ae9c1bd), TOBN(0xe0af6d98, 0xe37ce240),
+     TOBN(0xe54342d9, 0x28ab38b4), TOBN(0xe8b75007, 0x0a1c98ca),
+     TOBN(0xefce86af, 0xe02358f2), TOBN(0x31b8b856, 0xea921228),
+     TOBN(0x052a1912, 0x0a1c67fc), TOBN(0xb4069ea4, 0xe3aead59),
+     TOBN(0x3232d6e2, 0x7fa03cb3), TOBN(0xdb938e5b, 0x0fdd7d88),
+     TOBN(0x04c1d2cd, 0x2ccbfc5d), TOBN(0xd2f45c12, 0xaf3a580f),
+     TOBN(0x592620b5, 0x7883e614), TOBN(0x5fd27e68, 0xbe7c5f26),
+     TOBN(0x139e45a9, 0x1567e1e3), TOBN(0x2cc71d2d, 0x44d8aaaf),
+     TOBN(0x4a9090cd, 0xe36d0757), TOBN(0xf722d7b1, 0xd9a29382),
+     TOBN(0xfb7fb04c, 0x04b48ddf), TOBN(0x628ad2a7, 0xebe16f43),
+     TOBN(0xcd3fbfb5, 0x20226040), TOBN(0x6c34ecb1, 0x5104b6c4),
+     TOBN(0x30c0754e, 0xc903c188), TOBN(0xec336b08, 0x2d23cab0),
+     TOBN(0x473d62a2, 0x1e206ee5), TOBN(0xf1e27480, 0x8c49a633),
+     TOBN(0x87ab956c, 0xe9f6b2c3), TOBN(0x61830b48, 0x62b606ea),
+     TOBN(0x67cd6846, 0xe78e815f), TOBN(0xfe40139f, 0x4c02082a),
+     TOBN(0x52bbbfcb, 0x952ec365), TOBN(0x74c11642, 0x6b9836ab),
+     TOBN(0x9f51439e, 0x558df019), TOBN(0x230da4ba, 0xac712b27),
+     TOBN(0x518919e3, 0x55185a24), TOBN(0x4dcefcdd, 0x84b78f50),
+     TOBN(0xa7d90fb2, 0xa47d4c5a), TOBN(0x55ac9abf, 0xb30e009e),
+     TOBN(0xfd2fc359, 0x74eed273), TOBN(0xb72d824c, 0xdbea8faf),
+     TOBN(0xce721a74, 0x4513e2ca), TOBN(0x0b418612, 0x38240b2c),
+     TOBN(0x05199968, 0xd5baa450), TOBN(0xeb1757ed, 0x2b0e8c25),
+     TOBN(0x6ebc3e28, 0x3dfac6d5), TOBN(0xb2431e2e, 0x48a237f5),
+     TOBN(0x2acb5e23, 0x52f61499), TOBN(0x5558a2a7, 0xe06c936b),
+     TOBN(0xd213f923, 0xcbb13d1b), TOBN(0x98799f42, 0x5bfb9bfe),
+     TOBN(0x1ae8ddc9, 0x701144a9), TOBN(0x0b8b3bb6, 0x4c5595ee),
+     TOBN(0x0ea9ef2e, 0x3ecebb21), TOBN(0x17cb6c4b, 0x3671f9a7),
+     TOBN(0x47ef464f, 0x726f1d1f), TOBN(0x171b9484, 0x6943a276),
+     TOBN(0x51a4ae2d, 0x7ef0329c), TOBN(0x08509222, 0x91c4402a),
+     TOBN(0x64a61d35, 0xafd45bbc), TOBN(0x38f096fe, 0x3035a851),
+     TOBN(0xc7468b74, 0xa1dec027), TOBN(0xe8cf10e7, 0x4fc7dcba),
+     TOBN(0xea35ff40, 0xf4a06353), TOBN(0x0b4c0dfa, 0x8b77dd66),
+     TOBN(0x779b8552, 0xde7e5c19), TOBN(0xfab28609, 0xc1c0256c),
+     TOBN(0x64f58eee, 0xabd4743d), TOBN(0x4e8ef838, 0x7b6cc93b),
+     TOBN(0xee650d26, 0x4cb1bf3d), TOBN(0x4c1f9d09, 0x73dedf61),
+     TOBN(0xaef7c9d7, 0xbfb70ced), TOBN(0x1ec0507e, 0x1641de1e),
+     TOBN(0xcd7e5cc7, 0xcde45079), TOBN(0xde173c9a, 0x516ac9e4),
+     TOBN(0x517a8494, 0xc170315c), TOBN(0x438fd905, 0x91d8e8fb),
+     TOBN(0x5145c506, 0xc7d9630b), TOBN(0x6457a87b, 0xf47d4d75),
+     TOBN(0xd31646bf, 0x0d9a80e8), TOBN(0x453add2b, 0xcef3aabe),
+     TOBN(0xc9941109, 0xa607419d), TOBN(0xfaa71e62, 0xbb6bca80),
+     TOBN(0x34158c13, 0x07c431f3), TOBN(0x594abebc, 0x992bc47a),
+     TOBN(0x6dfea691, 0xeb78399f), TOBN(0x48aafb35, 0x3f42cba4),
+     TOBN(0xedcd65af, 0x077c04f0), TOBN(0x1a29a366, 0xe884491a),
+     TOBN(0x023a40e5, 0x1c21f2bf), TOBN(0xf99a513c, 0xa5057aee),
+     TOBN(0xa3fe7e25, 0xbcab072e), TOBN(0x8568d2e1, 0x40e32bcf),
+     TOBN(0x904594eb, 0xd3f69d9f), TOBN(0x181a9733, 0x07affab1),
+     TOBN(0xe4d68d76, 0xb6e330f4), TOBN(0x87a6dafb, 0xc75a7fc1),
+     TOBN(0x549db2b5, 0xef7d9289), TOBN(0x2480d4a8, 0x197f015a),
+     TOBN(0x61d5590b, 0xc40493b6), TOBN(0x3a55b52e, 0x6f780331),
+     TOBN(0x40eb8115, 0x309eadb0), TOBN(0xdea7de5a, 0x92e5c625),
+     TOBN(0x64d631f0, 0xcc6a3d5a), TOBN(0x9d5e9d7c, 0x93e8dd61),
+     TOBN(0xf297bef5, 0x206d3ffc), TOBN(0x23d5e033, 0x7d808bd4),
+     TOBN(0x4a4f6912, 0xd24cf5ba), TOBN(0xe4d8163b, 0x09cdaa8a),
+     TOBN(0x0e0de9ef, 0xd3082e8e), TOBN(0x4fe1246c, 0x0192f360),
+     TOBN(0x1f900150, 0x4b8eee0a), TOBN(0x5219da81, 0xf1da391b),
+     TOBN(0x7bf6a5c1, 0xf7ea25aa), TOBN(0xd165e6bf, 0xfbb07d5f),
+     TOBN(0xe3539361, 0x89e78671), TOBN(0xa3fcac89, 0x2bac4219),
+     TOBN(0xdfab6fd4, 0xf0baa8ab), TOBN(0x5a4adac1, 0xe2c1c2e5),
+     TOBN(0x6cd75e31, 0x40d85849), TOBN(0xce263fea, 0x19b39181),
+     TOBN(0xcb6803d3, 0x07032c72), TOBN(0x7f40d5ce, 0x790968c8),
+     TOBN(0xa6de86bd, 0xdce978f0), TOBN(0x25547c4f, 0x368f751c),
+     TOBN(0xb1e685fd, 0x65fb2a9e), TOBN(0xce69336f, 0x1eb9179c),
+     TOBN(0xb15d1c27, 0x12504442), TOBN(0xb7df465c, 0xb911a06b),
+     TOBN(0xb8d804a3, 0x315980cd), TOBN(0x693bc492, 0xfa3bebf7),
+     TOBN(0x3578aeee, 0x2253c504), TOBN(0x158de498, 0xcd2474a2),
+     TOBN(0x1331f5c7, 0xcfda8368), TOBN(0xd2d7bbb3, 0x78d7177e),
+     TOBN(0xdf61133a, 0xf3c1e46e), TOBN(0x5836ce7d, 0xd30e7be8),
+     TOBN(0x83084f19, 0x94f834cb), TOBN(0xd35653d4, 0x429ed782),
+     TOBN(0xa542f16f, 0x59e58243), TOBN(0xc2b52f65, 0x0470a22d),
+     TOBN(0xe3b6221b, 0x18f23d96), TOBN(0xcb05abac, 0x3f5252b4),
+     TOBN(0xca00938b, 0x87d61402), TOBN(0x2f186cdd, 0x411933e4),
+     TOBN(0xe042ece5, 0x9a29a5c5), TOBN(0xb19b3c07, 0x3b6c8402),
+     TOBN(0xc97667c7, 0x19d92684), TOBN(0xb5624622, 0xebc66372),
+     TOBN(0x0cb96e65, 0x3c04fa02), TOBN(0x83a7176c, 0x8eaa39aa),
+     TOBN(0x2033561d, 0xeaa1633f), TOBN(0x45a9d086, 0x4533df73),
+     TOBN(0xe0542c1d, 0x3dc090bc), TOBN(0x82c996ef, 0xaa59c167),
+     TOBN(0xe3f735e8, 0x0ee7fc4d), TOBN(0x7b179393, 0x7c35db79),
+     TOBN(0xb6419e25, 0xf8c5dbfd), TOBN(0x4d9d7a1e, 0x1f327b04),
+     TOBN(0x979f6f9b, 0x298dfca8), TOBN(0xc7c5dff1, 0x8de9366a),
+     TOBN(0x1b7a588d, 0x04c82bdd), TOBN(0x68005534, 0xf8319dfd),
+     TOBN(0xde8a55b5, 0xd8eb9580), TOBN(0x5ea886da, 0x8d5bca81),
+     TOBN(0xe8530a01, 0x252a0b4d), TOBN(0x1bffb4fe, 0x35eaa0a1),
+     TOBN(0x2ad828b1, 0xd8e99563), TOBN(0x7de96ef5, 0x95f9cd87),
+     TOBN(0x4abb2d0c, 0xd77d970c), TOBN(0x03cfb933, 0xd33ef9cb),
+     TOBN(0xb0547c01, 0x8b211fe9), TOBN(0x2fe64809, 0xa56ed1c6),
+     TOBN(0xcb7d5624, 0xc2ac98cc), TOBN(0x2a1372c0, 0x1a393e33),
+     TOBN(0xc8d1ec1c, 0x29660521), TOBN(0xf3d31b04, 0xb37ac3e9),
+     TOBN(0xa29ae9df, 0x5ece6e7c), TOBN(0x0603ac8f, 0x0facfb55),
+     TOBN(0xcfe85b7a, 0xdda233a5), TOBN(0xe618919f, 0xbd75f0b8),
+     TOBN(0xf555a3d2, 0x99bf1603), TOBN(0x1f43afc9, 0xf184255a),
+     TOBN(0xdcdaf341, 0x319a3e02), TOBN(0xd3b117ef, 0x03903a39),
+     TOBN(0xe095da13, 0x65d1d131), TOBN(0x86f16367, 0xc37ad03e),
+     TOBN(0x5f37389e, 0x462cd8dd), TOBN(0xc103fa04, 0xd67a60e6),
+     TOBN(0x57c34344, 0xf4b478f0), TOBN(0xce91edd8, 0xe117c98d),
+     TOBN(0x001777b0, 0x231fc12e), TOBN(0x11ae47f2, 0xb207bccb),
+     TOBN(0xd983cf8d, 0x20f8a242), TOBN(0x7aff5b1d, 0xf22e1ad8),
+     TOBN(0x68fd11d0, 0x7fc4feb3), TOBN(0x5d53ae90, 0xb0f1c3e1),
+     TOBN(0x50fb7905, 0xec041803), TOBN(0x85e3c977, 0x14404888),
+     TOBN(0x0e67faed, 0xac628d8f), TOBN(0x2e865150, 0x6668532c),
+     TOBN(0x15acaaa4, 0x6a67a6b0), TOBN(0xf4cdee25, 0xb25cec41),
+     TOBN(0x49ee565a, 0xe4c6701e), TOBN(0x2a04ca66, 0xfc7d63d8),
+     TOBN(0xeb105018, 0xef0543fb), TOBN(0xf709a4f5, 0xd1b0d81d),
+     TOBN(0x5b906ee6, 0x2915d333), TOBN(0xf4a87412, 0x96f1f0ab),
+     TOBN(0xb6b82fa7, 0x4d82f4c2), TOBN(0x90725a60, 0x6804efb3),
+     TOBN(0xbc82ec46, 0xadc3425e), TOBN(0xb7b80581, 0x2787843e),
+     TOBN(0xdf46d91c, 0xdd1fc74c), TOBN(0xdc1c62cb, 0xe783a6c4),
+     TOBN(0x59d1b9f3, 0x1a04cbba), TOBN(0xd87f6f72, 0x95e40764),
+     TOBN(0x02b4cfc1, 0x317f4a76), TOBN(0x8d2703eb, 0x91036bce),
+     TOBN(0x98206cc6, 0xa5e72a56), TOBN(0x57be9ed1, 0xcf53fb0f),
+     TOBN(0x09374571, 0xef0b17ac), TOBN(0x74b2655e, 0xd9181b38),
+     TOBN(0xc8f80ea8, 0x89935d0e), TOBN(0xc0d9e942, 0x91529936),
+     TOBN(0x19686041, 0x1e84e0e5), TOBN(0xa5db84d3, 0xaea34c93),
+     TOBN(0xf9d5bb19, 0x7073a732), TOBN(0xb8d2fe56, 0x6bcfd7c0),
+     TOBN(0x45775f36, 0xf3eb82fa), TOBN(0x8cb20ccc, 0xfdff8b58),
+     TOBN(0x1659b65f, 0x8374c110), TOBN(0xb8b4a422, 0x330c789a),
+     TOBN(0x75e3c3ea, 0x6fe8208b), TOBN(0xbd74b9e4, 0x286e78fe),
+     TOBN(0x0be2e81b, 0xd7d93a1a), TOBN(0x7ed06e27, 0xdd0a5aae),
+     TOBN(0x721f5a58, 0x6be8b800), TOBN(0x428299d1, 0xd846db28),
+     TOBN(0x95cb8e6b, 0x5be88ed3), TOBN(0xc3186b23, 0x1c034e11),
+     TOBN(0xa6312c9e, 0x8977d99b), TOBN(0xbe944331, 0x83f531e7),
+     TOBN(0x8232c0c2, 0x18d3b1d4), TOBN(0x617aae8b, 0xe1247b73),
+     TOBN(0x40153fc4, 0x282aec3b), TOBN(0xc6063d2f, 0xf7b8f823),
+     TOBN(0x68f10e58, 0x3304f94c), TOBN(0x31efae74, 0xee676346),
+     TOBN(0xbadb6c6d, 0x40a9b97c), TOBN(0x14702c63, 0x4f666256),
+     TOBN(0xdeb954f1, 0x5184b2e3), TOBN(0x5184a526, 0x94b6ca40),
+     TOBN(0xfff05337, 0x003c32ea), TOBN(0x5aa374dd, 0x205974c7),
+     TOBN(0x9a763854, 0x4b0dd71a), TOBN(0x459cd27f, 0xdeb947ec),
+     TOBN(0xa6e28161, 0x459c2b92), TOBN(0x2f020fa8, 0x75ee8ef5),
+     TOBN(0xb132ec2d, 0x30b06310), TOBN(0xc3e15899, 0xbc6a4530),
+     TOBN(0xdc5f53fe, 0xaa3f451a), TOBN(0x3a3c7f23, 0xc2d9acac),
+     TOBN(0x2ec2f892, 0x6b27e58b), TOBN(0x68466ee7, 0xd742799f),
+     TOBN(0x98324dd4, 0x1fa26613), TOBN(0xa2dc6dab, 0xbdc29d63),
+     TOBN(0xf9675faa, 0xd712d657), TOBN(0x813994be, 0x21fd8d15),
+     TOBN(0x5ccbb722, 0xfd4f7553), TOBN(0x5135ff8b, 0xf3a36b20),
+     TOBN(0x44be28af, 0x69559df5), TOBN(0x40b65bed, 0x9d41bf30),
+     TOBN(0xd98bf2a4, 0x3734e520), TOBN(0x5e3abbe3, 0x209bdcba),
+     TOBN(0x77c76553, 0xbc945b35), TOBN(0x5331c093, 0xc6ef14aa),
+     TOBN(0x518ffe29, 0x76b60c80), TOBN(0x2285593b, 0x7ace16f8),
+     TOBN(0xab1f64cc, 0xbe2b9784), TOBN(0xe8f2c0d9, 0xab2421b6),
+     TOBN(0x617d7174, 0xc1df065c), TOBN(0xafeeb5ab, 0x5f6578fa),
+     TOBN(0x16ff1329, 0x263b54a8), TOBN(0x45c55808, 0xc990dce3),
+     TOBN(0x42eab6c0, 0xecc8c177), TOBN(0x799ea9b5, 0x5982ecaa),
+     TOBN(0xf65da244, 0xb607ef8e), TOBN(0x8ab226ce, 0x32a3fc2c),
+     TOBN(0x745741e5, 0x7ea973dc), TOBN(0x5c00ca70, 0x20888f2e),
+     TOBN(0x7cdce3cf, 0x45fd9cf1), TOBN(0x8a741ef1, 0x5507f872),
+     TOBN(0x47c51c2f, 0x196b4cec), TOBN(0x70d08e43, 0xc97ea618),
+     TOBN(0x930da15c, 0x15b18a2b), TOBN(0x33b6c678, 0x2f610514),
+     TOBN(0xc662e4f8, 0x07ac9794), TOBN(0x1eccf050, 0xba06cb79),
+     TOBN(0x1ff08623, 0xe7d954e5), TOBN(0x6ef2c5fb, 0x24cf71c3),
+     TOBN(0xb2c063d2, 0x67978453), TOBN(0xa0cf3796, 0x1d654af8),
+     TOBN(0x7cb242ea, 0x7ebdaa37), TOBN(0x206e0b10, 0xb86747e0),
+     TOBN(0x481dae5f, 0xd5ecfefc), TOBN(0x07084fd8, 0xc2bff8fc),
+     TOBN(0x8040a01a, 0xea324596), TOBN(0x4c646980, 0xd4de4036),
+     TOBN(0x9eb8ab4e, 0xd65abfc3), TOBN(0xe01cb91f, 0x13541ec7),
+     TOBN(0x8f029adb, 0xfd695012), TOBN(0x9ae28483, 0x3c7569ec),
+     TOBN(0xa5614c9e, 0xa66d80a1), TOBN(0x680a3e44, 0x75f5f911),
+     TOBN(0x0c07b14d, 0xceba4fc1), TOBN(0x891c285b, 0xa13071c1),
+     TOBN(0xcac67ceb, 0x799ece3c), TOBN(0x29b910a9, 0x41e07e27),
+     TOBN(0x66bdb409, 0xf2e43123), TOBN(0x06f8b137, 0x7ac9ecbe),
+     TOBN(0x5981fafd, 0x38547090), TOBN(0x19ab8b9f, 0x85e3415d),
+     TOBN(0xfc28c194, 0xc7e31b27), TOBN(0x843be0aa, 0x6fbcbb42),
+     TOBN(0xf3b1ed43, 0xa6db836c), TOBN(0x2a1330e4, 0x01a45c05),
+     TOBN(0x4f19f3c5, 0x95c1a377), TOBN(0xa85f39d0, 0x44b5ee33),
+     TOBN(0x3da18e6d, 0x4ae52834), TOBN(0x5a403b39, 0x7423dcb0),
+     TOBN(0xbb555e0a, 0xf2374aef), TOBN(0x2ad599c4, 0x1e8ca111),
+     TOBN(0x1b3a2fb9, 0x014b3bf8), TOBN(0x73092684, 0xf66d5007),
+     TOBN(0x079f1426, 0xc4340102), TOBN(0x1827cf81, 0x8fddf4de),
+     TOBN(0xc83605f6, 0xf10ff927), TOBN(0xd3871451, 0x23739fc6),
+     TOBN(0x6d163450, 0xcac1c2cc), TOBN(0x6b521296, 0xa2ec1ac5),
+     TOBN(0x0606c4f9, 0x6e3cb4a5), TOBN(0xe47d3f41, 0x778abff7),
+     TOBN(0x425a8d5e, 0xbe8e3a45), TOBN(0x53ea9e97, 0xa6102160),
+     TOBN(0x477a106e, 0x39cbb688), TOBN(0x532401d2, 0xf3386d32),
+     TOBN(0x8e564f64, 0xb1b9b421), TOBN(0xca9b8388, 0x81dad33f),
+     TOBN(0xb1422b4e, 0x2093913e), TOBN(0x533d2f92, 0x69bc8112),
+     TOBN(0x3fa017be, 0xebe7b2c7), TOBN(0xb2767c4a, 0xcaf197c6),
+     TOBN(0xc925ff87, 0xaedbae9f), TOBN(0x7daf0eb9, 0x36880a54),
+     TOBN(0x9284ddf5, 0x9c4d0e71), TOBN(0x1581cf93, 0x316f8cf5),
+     TOBN(0x3eeca887, 0x3ac1f452), TOBN(0xb417fce9, 0xfb6aeffe),
+     TOBN(0xa5918046, 0xeefb8dc3), TOBN(0x73d318ac, 0x02209400),
+     TOBN(0xe800400f, 0x728693e5), TOBN(0xe87d814b, 0x339927ed),
+     TOBN(0x93e94d3b, 0x57ea9910), TOBN(0xff8a35b6, 0x2245fb69),
+     TOBN(0x043853d7, 0x7f200d34), TOBN(0x470f1e68, 0x0f653ce1),
+     TOBN(0x81ac05bd, 0x59a06379), TOBN(0xa14052c2, 0x03930c29),
+     TOBN(0x6b72fab5, 0x26bc2797), TOBN(0x13670d16, 0x99f16771),
+     TOBN(0x00170052, 0x1e3e48d1), TOBN(0x978fe401, 0xb7adf678),
+     TOBN(0x55ecfb92, 0xd41c5dd4), TOBN(0x5ff8e247, 0xc7b27da5),
+     TOBN(0xe7518272, 0x013fb606), TOBN(0x5768d7e5, 0x2f547a3c),
+     TOBN(0xbb24eaa3, 0x60017a5f), TOBN(0x6b18e6e4, 0x9c64ce9b),
+     TOBN(0xc225c655, 0x103dde07), TOBN(0xfc3672ae, 0x7592f7ea),
+     TOBN(0x9606ad77, 0xd06283a1), TOBN(0x542fc650, 0xe4d59d99),
+     TOBN(0xabb57c49, 0x2a40e7c2), TOBN(0xac948f13, 0xa8db9f55),
+     TOBN(0x6d4c9682, 0xb04465c3), TOBN(0xe3d062fa, 0x6468bd15),
+     TOBN(0xa51729ac, 0x5f318d7e), TOBN(0x1fc87df6, 0x9eb6fc95),
+     TOBN(0x63d146a8, 0x0591f652), TOBN(0xa861b8f7, 0x589621aa),
+     TOBN(0x59f5f15a, 0xce31348c), TOBN(0x8f663391, 0x440da6da),
+     TOBN(0xcfa778ac, 0xb591ffa3), TOBN(0x027ca9c5, 0x4cdfebce),
+     TOBN(0xbe8e05a5, 0x444ea6b3), TOBN(0x8aab4e69, 0xa78d8254),
+     TOBN(0x2437f04f, 0xb474d6b8), TOBN(0x6597ffd4, 0x045b3855),
+     TOBN(0xbb0aea4e, 0xca47ecaa), TOBN(0x568aae83, 0x85c7ebfc),
+     TOBN(0x0e966e64, 0xc73b2383), TOBN(0x49eb3447, 0xd17d8762),
+     TOBN(0xde107821, 0x8da05dab), TOBN(0x443d8baa, 0x016b7236),
+     TOBN(0x163b63a5, 0xea7610d6), TOBN(0xe47e4185, 0xce1ca979),
+     TOBN(0xae648b65, 0x80baa132), TOBN(0xebf53de2, 0x0e0d5b64),
+     TOBN(0x8d3bfcb4, 0xd3c8c1ca), TOBN(0x0d914ef3, 0x5d04b309),
+     TOBN(0x55ef6415, 0x3de7d395), TOBN(0xbde1666f, 0x26b850e8),
+     TOBN(0xdbe1ca6e, 0xd449ab19), TOBN(0x8902b322, 0xe89a2672),
+     TOBN(0xb1674b7e, 0xdacb7a53), TOBN(0x8e9faf6e, 0xf52523ff),
+     TOBN(0x6ba535da, 0x9a85788b), TOBN(0xd21f03ae, 0xbd0626d4),
+     TOBN(0x099f8c47, 0xe873dc64), TOBN(0xcda8564d, 0x018ec97e),
+     TOBN(0x3e8d7a5c, 0xde92c68c), TOBN(0x78e035a1, 0x73323cc4),
+     TOBN(0x3ef26275, 0xf880ff7c), TOBN(0xa4ee3dff, 0x273eedaa),
+     TOBN(0x58823507, 0xaf4e18f8), TOBN(0x967ec9b5, 0x0672f328),
+     TOBN(0x9ded19d9, 0x559d3186), TOBN(0x5e2ab3de, 0x6cdce39c),
+     TOBN(0xabad6e4d, 0x11c226df), TOBN(0xf9783f43, 0x87723014),
+     TOBN(0x9a49a0cf, 0x1a885719), TOBN(0xfc0c1a5a, 0x90da9dbf),
+     TOBN(0x8bbaec49, 0x571d92ac), TOBN(0x569e85fe, 0x4692517f),
+     TOBN(0x8333b014, 0xa14ea4af), TOBN(0x32f2a62f, 0x12e5c5ad),
+     TOBN(0x98c2ce3a, 0x06d89b85), TOBN(0xb90741aa, 0x2ff77a08),
+     TOBN(0x2530defc, 0x01f795a2), TOBN(0xd6e5ba0b, 0x84b3c199),
+     TOBN(0x7d8e8451, 0x12e4c936), TOBN(0xae419f7d, 0xbd0be17b),
+     TOBN(0xa583fc8c, 0x22262bc9), TOBN(0x6b842ac7, 0x91bfe2bd),
+     TOBN(0x33cef4e9, 0x440d6827), TOBN(0x5f69f4de, 0xef81fb14),
+     TOBN(0xf16cf6f6, 0x234fbb92), TOBN(0x76ae3fc3, 0xd9e7e158),
+     TOBN(0x4e89f6c2, 0xe9740b33), TOBN(0x677bc85d, 0x4962d6a1),
+     TOBN(0x6c6d8a7f, 0x68d10d15), TOBN(0x5f9a7224, 0x0257b1cd),
+     TOBN(0x7096b916, 0x4ad85961), TOBN(0x5f8c47f7, 0xe657ab4a),
+     TOBN(0xde57d7d0, 0xf7461d7e), TOBN(0x7eb6094d, 0x80ce5ee2),
+     TOBN(0x0b1e1dfd, 0x34190547), TOBN(0x8a394f43, 0xf05dd150),
+     TOBN(0x0a9eb24d, 0x97df44e6), TOBN(0x78ca06bf, 0x87675719),
+     TOBN(0x6f0b3462, 0x6ffeec22), TOBN(0x9d91bcea, 0x36cdd8fb),
+     TOBN(0xac83363c, 0xa105be47), TOBN(0x81ba76c1, 0x069710e3),
+     TOBN(0x3d1b24cb, 0x28c682c6), TOBN(0x27f25228, 0x8612575b),
+     TOBN(0xb587c779, 0xe8e66e98), TOBN(0x7b0c03e9, 0x405eb1fe),
+     TOBN(0xfdf0d030, 0x15b548e7), TOBN(0xa8be76e0, 0x38b36af7),
+     TOBN(0x4cdab04a, 0x4f310c40), TOBN(0x6287223e, 0xf47ecaec),
+     TOBN(0x678e6055, 0x8b399320), TOBN(0x61fe3fa6, 0xc01e4646),
+     TOBN(0xc482866b, 0x03261a5e), TOBN(0xdfcf45b8, 0x5c2f244a),
+     TOBN(0x8fab9a51, 0x2f684b43), TOBN(0xf796c654, 0xc7220a66),
+     TOBN(0x1d90707e, 0xf5afa58f), TOBN(0x2c421d97, 0x4fdbe0de),
+     TOBN(0xc4f4cda3, 0xaf2ebc2f), TOBN(0xa0af843d, 0xcb4efe24),
+     TOBN(0x53b857c1, 0x9ccd10b1), TOBN(0xddc9d1eb, 0x914d3e04),
+     TOBN(0x7bdec8bb, 0x62771deb), TOBN(0x829277aa, 0x91c5aa81),
+     TOBN(0x7af18dd6, 0x832391ae), TOBN(0x1740f316, 0xc71a84ca),}
+    ,
+    {TOBN(0x8928e99a, 0xeeaf8c49), TOBN(0xee7aa73d, 0x6e24d728),
+     TOBN(0x4c5007c2, 0xe72b156c), TOBN(0x5fcf57c5, 0xed408a1d),
+     TOBN(0x9f719e39, 0xb6057604), TOBN(0x7d343c01, 0xc2868bbf),
+     TOBN(0x2cca254b, 0x7e103e2d), TOBN(0xe6eb38a9, 0xf131bea2),
+     TOBN(0xb33e624f, 0x8be762b4), TOBN(0x2a9ee4d1, 0x058e3413),
+     TOBN(0x968e6369, 0x67d805fa), TOBN(0x9848949b, 0x7db8bfd7),
+     TOBN(0x5308d7e5, 0xd23a8417), TOBN(0x892f3b1d, 0xf3e29da5),
+     TOBN(0xc95c139e, 0x3dee471f), TOBN(0x8631594d, 0xd757e089),
+     TOBN(0xe0c82a3c, 0xde918dcc), TOBN(0x2e7b5994, 0x26fdcf4b),
+     TOBN(0x82c50249, 0x32cb1b2d), TOBN(0xea613a9d, 0x7657ae07),
+     TOBN(0xc2eb5f6c, 0xf1fdc9f7), TOBN(0xb6eae8b8, 0x879fe682),
+     TOBN(0x253dfee0, 0x591cbc7f), TOBN(0x000da713, 0x3e1290e6),
+     TOBN(0x1083e2ea, 0x1f095615), TOBN(0x0a28ad77, 0x14e68c33),
+     TOBN(0x6bfc0252, 0x3d8818be), TOBN(0xb585113a, 0xf35850cd),
+     TOBN(0x7d935f0b, 0x30df8aa1), TOBN(0xaddda07c, 0x4ab7e3ac),
+     TOBN(0x92c34299, 0x552f00cb), TOBN(0xc33ed1de, 0x2909df6c),
+     TOBN(0x22c2195d, 0x80e87766), TOBN(0x9e99e6d8, 0x9ddf4ac0),
+     TOBN(0x09642e4e, 0x65e74934), TOBN(0x2610ffa2, 0xff1ff241),
+     TOBN(0x4d1d47d4, 0x751c8159), TOBN(0x697b4985, 0xaf3a9363),
+     TOBN(0x0318ca46, 0x87477c33), TOBN(0xa90cb565, 0x9441eff3),
+     TOBN(0x58bb3848, 0x36f024cb), TOBN(0x85be1f77, 0x36016168),
+     TOBN(0x6c59587c, 0xdc7e07f1), TOBN(0x191be071, 0xaf1d8f02),
+     TOBN(0xbf169fa5, 0xcca5e55c), TOBN(0x3864ba3c, 0xf7d04eac),
+     TOBN(0x915e367f, 0x8d7d05db), TOBN(0xb48a876d, 0xa6549e5d),
+     TOBN(0xef89c656, 0x580e40a2), TOBN(0xf194ed8c, 0x728068bc),
+     TOBN(0x74528045, 0xa47990c9), TOBN(0xf53fc7d7, 0x5e1a4649),
+     TOBN(0xbec5ae9b, 0x78593e7d), TOBN(0x2cac4ee3, 0x41db65d7),
+     TOBN(0xa8c1eb24, 0x04a3d39b), TOBN(0x53b7d634, 0x03f8f3ef),
+     TOBN(0x2dc40d48, 0x3e07113c), TOBN(0x6e4a5d39, 0x7d8b63ae),
+     TOBN(0x5582a94b, 0x79684c2b), TOBN(0x932b33d4, 0x622da26c),
+     TOBN(0xf534f651, 0x0dbbf08d), TOBN(0x211d07c9, 0x64c23a52),
+     TOBN(0x0eeece0f, 0xee5bdc9b), TOBN(0xdf178168, 0xf7015558),
+     TOBN(0xd4294635, 0x0a712229), TOBN(0x93cbe448, 0x09273f8c),
+     TOBN(0x00b095ef, 0x8f13bc83), TOBN(0xbb741972, 0x8798978c),
+     TOBN(0x9d7309a2, 0x56dbe6e7), TOBN(0xe578ec56, 0x5a5d39ec),
+     TOBN(0x3961151b, 0x851f9a31), TOBN(0x2da7715d, 0xe5709eb4),
+     TOBN(0x867f3017, 0x53dfabf0), TOBN(0x728d2078, 0xb8e39259),
+     TOBN(0x5c75a0cd, 0x815d9958), TOBN(0xf84867a6, 0x16603be1),
+     TOBN(0xc865b13d, 0x70e35b1c), TOBN(0x02414468, 0x19b03e2c),
+     TOBN(0xe46041da, 0xac1f3121), TOBN(0x7c9017ad, 0x6f028a7c),
+     TOBN(0xabc96de9, 0x0a482873), TOBN(0x4265d6b1, 0xb77e54d4),
+     TOBN(0x68c38e79, 0xa57d88e7), TOBN(0xd461d766, 0x9ce82de3),
+     TOBN(0x817a9ec5, 0x64a7e489), TOBN(0xcc5675cd, 0xa0def5f2),
+     TOBN(0x9a00e785, 0x985d494e), TOBN(0xc626833f, 0x1b03514a),
+     TOBN(0xabe7905a, 0x83cdd60e), TOBN(0x50602fb5, 0xa1170184),
+     TOBN(0x689886cd, 0xb023642a), TOBN(0xd568d090, 0xa6e1fb00),
+     TOBN(0x5b1922c7, 0x0259217f), TOBN(0x93831cd9, 0xc43141e4),
+     TOBN(0xdfca3587, 0x0c95f86e), TOBN(0xdec2057a, 0x568ae828),
+     TOBN(0xc44ea599, 0xf98a759a), TOBN(0x55a0a7a2, 0xf7c23c1d),
+     TOBN(0xd5ffb6e6, 0x94c4f687), TOBN(0x3563cce2, 0x12848478),
+     TOBN(0x812b3517, 0xe7b1fbe1), TOBN(0x8a7dc979, 0x4f7338e0),
+     TOBN(0x211ecee9, 0x52d048db), TOBN(0x2eea4056, 0xc86ea3b8),
+     TOBN(0xd8cb68a7, 0xba772b34), TOBN(0xe16ed341, 0x5f4e2541),
+     TOBN(0x9b32f6a6, 0x0fec14db), TOBN(0xeee376f7, 0x391698be),
+     TOBN(0xe9a7aa17, 0x83674c02), TOBN(0x65832f97, 0x5843022a),
+     TOBN(0x29f3a8da, 0x5ba4990f), TOBN(0x79a59c3a, 0xfb8e3216),
+     TOBN(0x9cdc4d2e, 0xbd19bb16), TOBN(0xc6c7cfd0, 0xb3262d86),
+     TOBN(0xd4ce14d0, 0x969c0b47), TOBN(0x1fa352b7, 0x13e56128),
+     TOBN(0x383d55b8, 0x973db6d3), TOBN(0x71836850, 0xe8e5b7bf),
+     TOBN(0xc7714596, 0xe6bb571f), TOBN(0x259df31f, 0x2d5b2dd2),
+     TOBN(0x568f8925, 0x913cc16d), TOBN(0x18bc5b6d, 0xe1a26f5a),
+     TOBN(0xdfa413be, 0xf5f499ae), TOBN(0xf8835dec, 0xc3f0ae84),
+     TOBN(0xb6e60bd8, 0x65a40ab0), TOBN(0x65596439, 0x194b377e),
+     TOBN(0xbcd85625, 0x92084a69), TOBN(0x5ce433b9, 0x4f23ede0),
+     TOBN(0xe8e8f04f, 0x6ad65143), TOBN(0x11511827, 0xd6e14af6),
+     TOBN(0x3d390a10, 0x8295c0c7), TOBN(0x71e29ee4, 0x621eba16),
+     TOBN(0xa588fc09, 0x63717b46), TOBN(0x02be02fe, 0xe06ad4a2),
+     TOBN(0x931558c6, 0x04c22b22), TOBN(0xbb4d4bd6, 0x12f3c849),
+     TOBN(0x54a4f496, 0x20efd662), TOBN(0x92ba6d20, 0xc5952d14),
+     TOBN(0x2db8ea1e, 0xcc9784c2), TOBN(0x81cc10ca, 0x4b353644),
+     TOBN(0x40b570ad, 0x4b4d7f6c), TOBN(0x5c9f1d96, 0x84a1dcd2),
+     TOBN(0x01379f81, 0x3147e797), TOBN(0xe5c6097b, 0x2bd499f5),
+     TOBN(0x40dcafa6, 0x328e5e20), TOBN(0xf7b5244a, 0x54815550),
+     TOBN(0xb9a4f118, 0x47bfc978), TOBN(0x0ea0e79f, 0xd25825b1),
+     TOBN(0xa50f96eb, 0x646c7ecf), TOBN(0xeb811493, 0x446dea9d),
+     TOBN(0x2af04677, 0xdfabcf69), TOBN(0xbe3a068f, 0xc713f6e8),
+     TOBN(0x860d523d, 0x42e06189), TOBN(0xbf077941, 0x4e3aff13),
+     TOBN(0x0b616dca, 0xc1b20650), TOBN(0xe66dd6d1, 0x2131300d),
+     TOBN(0xd4a0fd67, 0xff99abde), TOBN(0xc9903550, 0xc7aac50d),
+     TOBN(0x022ecf8b, 0x7c46b2d7), TOBN(0x3333b1e8, 0x3abf92af),
+     TOBN(0x11cc113c, 0x6c491c14), TOBN(0x05976688, 0x80dd3f88),
+     TOBN(0xf5b4d9e7, 0x29d932ed), TOBN(0xe982aad8, 0xa2c38b6d),
+     TOBN(0x6f925347, 0x8be0dcf0), TOBN(0x700080ae, 0x65ca53f2),
+     TOBN(0xd8131156, 0x443ca77f), TOBN(0xe92d6942, 0xec51f984),
+     TOBN(0xd2a08af8, 0x85dfe9ae), TOBN(0xd825d9a5, 0x4d2a86ca),
+     TOBN(0x2c53988d, 0x39dff020), TOBN(0xf38b135a, 0x430cdc40),
+     TOBN(0x0c918ae0, 0x62a7150b), TOBN(0xf31fd8de, 0x0c340e9b),
+     TOBN(0xafa0e7ae, 0x4dbbf02e), TOBN(0x5847fb2a, 0x5eba6239),
+     TOBN(0x6b1647dc, 0xdccbac8b), TOBN(0xb642aa78, 0x06f485c8),
+     TOBN(0x873f3765, 0x7038ecdf), TOBN(0x2ce5e865, 0xfa49d3fe),
+     TOBN(0xea223788, 0xc98c4400), TOBN(0x8104a8cd, 0xf1fa5279),
+     TOBN(0xbcf7cc7a, 0x06becfd7), TOBN(0x49424316, 0xc8f974ae),
+     TOBN(0xc0da65e7, 0x84d6365d), TOBN(0xbcb7443f, 0x8f759fb8),
+     TOBN(0x35c712b1, 0x7ae81930), TOBN(0x80428dff, 0x4c6e08ab),
+     TOBN(0xf19dafef, 0xa4faf843), TOBN(0xced8538d, 0xffa9855f),
+     TOBN(0x20ac409c, 0xbe3ac7ce), TOBN(0x358c1fb6, 0x882da71e),
+     TOBN(0xafa9c0e5, 0xfd349961), TOBN(0x2b2cfa51, 0x8421c2fc),
+     TOBN(0x2a80db17, 0xf3a28d38), TOBN(0xa8aba539, 0x5d138e7e),
+     TOBN(0x52012d1d, 0x6e96eb8d), TOBN(0x65d8dea0, 0xcbaf9622),
+     TOBN(0x57735447, 0xb264f56c), TOBN(0xbeebef3f, 0x1b6c8da2),
+     TOBN(0xfc346d98, 0xce785254), TOBN(0xd50e8d72, 0xbb64a161),
+     TOBN(0xc03567c7, 0x49794add), TOBN(0x15a76065, 0x752c7ef6),
+     TOBN(0x59f3a222, 0x961f23d6), TOBN(0x378e4438, 0x73ecc0b0),
+     TOBN(0xc74be434, 0x5a82fde4), TOBN(0xae509af2, 0xd8b9cf34),
+     TOBN(0x4a61ee46, 0x577f44a1), TOBN(0xe09b748c, 0xb611deeb),
+     TOBN(0xc0481b2c, 0xf5f7b884), TOBN(0x35626678, 0x61acfa6b),
+     TOBN(0x37f4c518, 0xbf8d21e6), TOBN(0x22d96531, 0xb205a76d),
+     TOBN(0x37fb85e1, 0x954073c0), TOBN(0xbceafe4f, 0x65b3a567),
+     TOBN(0xefecdef7, 0xbe42a582), TOBN(0xd3fc6080, 0x65046be6),
+     TOBN(0xc9af13c8, 0x09e8dba9), TOBN(0x1e6c9847, 0x641491ff),
+     TOBN(0x3b574925, 0xd30c31f7), TOBN(0xb7eb72ba, 0xac2a2122),
+     TOBN(0x776a0dac, 0xef0859e7), TOBN(0x06fec314, 0x21900942),
+     TOBN(0x2464bc10, 0xf8c22049), TOBN(0x9bfbcce7, 0x875ebf69),
+     TOBN(0xd7a88e2a, 0x4336326b), TOBN(0xda05261c, 0x5bc2acfa),
+     TOBN(0xc29f5bdc, 0xeba7efc8), TOBN(0x471237ca, 0x25dbbf2e),
+     TOBN(0xa72773f2, 0x2975f127), TOBN(0xdc744e8e, 0x04d0b326),
+     TOBN(0x38a7ed16, 0xa56edb73), TOBN(0x64357e37, 0x2c007e70),
+     TOBN(0xa167d15b, 0x5080b400), TOBN(0x07b41164, 0x23de4be1),
+     TOBN(0xb2d91e32, 0x74c89883), TOBN(0x3c162821, 0x2882e7ed),
+     TOBN(0xad6b36ba, 0x7503e482), TOBN(0x48434e8e, 0x0ea34331),
+     TOBN(0x79f4f24f, 0x2c7ae0b9), TOBN(0xc46fbf81, 0x1939b44a),
+     TOBN(0x76fefae8, 0x56595eb1), TOBN(0x417b66ab, 0xcd5f29c7),
+     TOBN(0x5f2332b2, 0xc5ceec20), TOBN(0xd69661ff, 0xe1a1cae2),
+     TOBN(0x5ede7e52, 0x9b0286e6), TOBN(0x9d062529, 0xe276b993),
+     TOBN(0x324794b0, 0x7e50122b), TOBN(0xdd744f8b, 0x4af07ca5),
+     TOBN(0x30a12f08, 0xd63fc97b), TOBN(0x39650f1a, 0x76626d9d),
+     TOBN(0x101b47f7, 0x1fa38477), TOBN(0x3d815f19, 0xd4dc124f),
+     TOBN(0x1569ae95, 0xb26eb58a), TOBN(0xc3cde188, 0x95fb1887),
+     TOBN(0x54e9f37b, 0xf9539a48), TOBN(0xb0100e06, 0x7408c1a5),
+     TOBN(0x821d9811, 0xea580cbb), TOBN(0x8af52d35, 0x86e50c56),
+     TOBN(0xdfbd9d47, 0xdbbf698b), TOBN(0x2961a1ea, 0x03dc1c73),
+     TOBN(0x203d38f8, 0xe76a5df8), TOBN(0x08a53a68, 0x6def707a),
+     TOBN(0x26eefb48, 0x1bee45d4), TOBN(0xb3cee346, 0x3c688036),
+     TOBN(0x463c5315, 0xc42f2469), TOBN(0x19d84d2e, 0x81378162),
+     TOBN(0x22d7c3c5, 0x1c4d349f), TOBN(0x65965844, 0x163d59c5),
+     TOBN(0xcf198c56, 0xb8abceae), TOBN(0x6fb1fb1b, 0x628559d5),
+     TOBN(0x8bbffd06, 0x07bf8fe3), TOBN(0x46259c58, 0x3467734b),
+     TOBN(0xd8953cea, 0x35f7f0d3), TOBN(0x1f0bece2, 0xd65b0ff1),
+     TOBN(0xf7d5b4b3, 0xf3c72914), TOBN(0x29e8ea95, 0x3cb53389),
+     TOBN(0x4a365626, 0x836b6d46), TOBN(0xe849f910, 0xea174fde),
+     TOBN(0x7ec62fbb, 0xf4737f21), TOBN(0xd8dba5ab, 0x6209f5ac),
+     TOBN(0x24b5d7a9, 0xa5f9adbe), TOBN(0x707d28f7, 0xa61dc768),
+     TOBN(0x7711460b, 0xcaa999ea), TOBN(0xba7b174d, 0x1c92e4cc),
+     TOBN(0x3c4bab66, 0x18d4bf2d), TOBN(0xb8f0c980, 0xeb8bd279),
+     TOBN(0x024bea9a, 0x324b4737), TOBN(0xfba9e423, 0x32a83bca),
+     TOBN(0x6e635643, 0xa232dced), TOBN(0x99619367, 0x2571c8ba),
+     TOBN(0xe8c9f357, 0x54b7032b), TOBN(0xf936b3ba, 0x2442d54a),
+     TOBN(0x2263f0f0, 0x8290c65a), TOBN(0x48989780, 0xee2c7fdb),
+     TOBN(0xadc5d55a, 0x13d4f95e), TOBN(0x737cff85, 0xad9b8500),
+     TOBN(0x271c557b, 0x8a73f43d), TOBN(0xbed617a4, 0xe18bc476),
+     TOBN(0x66245401, 0x7dfd8ab2), TOBN(0xae7b89ae, 0x3a2870aa),
+     TOBN(0x1b555f53, 0x23a7e545), TOBN(0x6791e247, 0xbe057e4c),
+     TOBN(0x860136ad, 0x324fa34d), TOBN(0xea111447, 0x4cbeae28),
+     TOBN(0x023a4270, 0xbedd3299), TOBN(0x3d5c3a7f, 0xc1c35c34),
+     TOBN(0xb0f6db67, 0x8d0412d2), TOBN(0xd92625e2, 0xfcdc6b9a),
+     TOBN(0x92ae5ccc, 0x4e28a982), TOBN(0xea251c36, 0x47a3ce7e),
+     TOBN(0x9d658932, 0x790691bf), TOBN(0xed610589, 0x06b736ae),
+     TOBN(0x712c2f04, 0xc0d63b6e), TOBN(0x5cf06fd5, 0xc63d488f),
+     TOBN(0x97363fac, 0xd9588e41), TOBN(0x1f9bf762, 0x2b93257e),
+     TOBN(0xa9d1ffc4, 0x667acace), TOBN(0x1cf4a1aa, 0x0a061ecf),
+     TOBN(0x40e48a49, 0xdc1818d0), TOBN(0x0643ff39, 0xa3621ab0),
+     TOBN(0x5768640c, 0xe39ef639), TOBN(0x1fc099ea, 0x04d86854),
+     TOBN(0x9130b9c3, 0xeccd28fd), TOBN(0xd743cbd2, 0x7eec54ab),
+     TOBN(0x052b146f, 0xe5b475b6), TOBN(0x058d9a82, 0x900a7d1f),
+     TOBN(0x65e02292, 0x91262b72), TOBN(0x96f924f9, 0xbb0edf03),
+     TOBN(0x5cfa59c8, 0xfe206842), TOBN(0xf6037004, 0x5eafa720),
+     TOBN(0x5f30699e, 0x18d7dd96), TOBN(0x381e8782, 0xcbab2495),
+     TOBN(0x91669b46, 0xdd8be949), TOBN(0xb40606f5, 0x26aae8ef),
+     TOBN(0x2812b839, 0xfc6751a4), TOBN(0x16196214, 0xfba800ef),
+     TOBN(0x4398d5ca, 0x4c1a2875), TOBN(0x720c00ee, 0x653d8349),
+     TOBN(0xc2699eb0, 0xd820007c), TOBN(0x880ee660, 0xa39b5825),
+     TOBN(0x70694694, 0x471f6984), TOBN(0xf7d16ea8, 0xe3dda99a),
+     TOBN(0x28d675b2, 0xc0519a23), TOBN(0x9ebf94fe, 0x4f6952e3),
+     TOBN(0xf28bb767, 0xa2294a8a), TOBN(0x85512b4d, 0xfe0af3f5),
+     TOBN(0x18958ba8, 0x99b16a0d), TOBN(0x95c2430c, 0xba7548a7),
+     TOBN(0xb30d1b10, 0xa16be615), TOBN(0xe3ebbb97, 0x85bfb74c),
+     TOBN(0xa3273cfe, 0x18549fdb), TOBN(0xf6e200bf, 0x4fcdb792),
+     TOBN(0x54a76e18, 0x83aba56c), TOBN(0x73ec66f6, 0x89ef6aa2),
+     TOBN(0x8d17add7, 0xd1b9a305), TOBN(0xa959c5b9, 0xb7ae1b9d),
+     TOBN(0x88643522, 0x6bcc094a), TOBN(0xcc5616c4, 0xd7d429b9),
+     TOBN(0xa6dada01, 0xe6a33f7c), TOBN(0xc6217a07, 0x9d4e70ad),
+     TOBN(0xd619a818, 0x09c15b7c), TOBN(0xea06b329, 0x0e80c854),
+     TOBN(0x174811ce, 0xa5f5e7b9), TOBN(0x66dfc310, 0x787c65f4),
+     TOBN(0x4ea7bd69, 0x3316ab54), TOBN(0xc12c4acb, 0x1dcc0f70),
+     TOBN(0xe4308d1a, 0x1e407dd9), TOBN(0xe8a3587c, 0x91afa997),
+     TOBN(0xea296c12, 0xab77b7a5), TOBN(0xb5ad49e4, 0x673c0d52),
+     TOBN(0x40f9b2b2, 0x7006085a), TOBN(0xa88ff340, 0x87bf6ec2),
+     TOBN(0x978603b1, 0x4e3066a6), TOBN(0xb3f99fc2, 0xb5e486e2),
+     TOBN(0x07b53f5e, 0xb2e63645), TOBN(0xbe57e547, 0x84c84232),
+     TOBN(0xd779c216, 0x7214d5cf), TOBN(0x617969cd, 0x029a3aca),
+     TOBN(0xd17668cd, 0x8a7017a0), TOBN(0x77b4d19a, 0xbe9b7ee8),
+     TOBN(0x58fd0e93, 0x9c161776), TOBN(0xa8c4f4ef, 0xd5968a72),
+     TOBN(0x296071cc, 0x67b3de77), TOBN(0xae3c0b8e, 0x634f7905),
+     TOBN(0x67e440c2, 0x8a7100c9), TOBN(0xbb8c3c1b, 0xeb4b9b42),
+     TOBN(0x6d71e8ea, 0xc51b3583), TOBN(0x7591f5af, 0x9525e642),
+     TOBN(0xf73a2f7b, 0x13f509f3), TOBN(0x618487aa, 0x5619ac9b),
+     TOBN(0x3a72e5f7, 0x9d61718a), TOBN(0x00413bcc, 0x7592d28c),
+     TOBN(0x7d9b11d3, 0x963c35cf), TOBN(0x77623bcf, 0xb90a46ed),
+     TOBN(0xdeef273b, 0xdcdd2a50), TOBN(0x4a741f9b, 0x0601846e),
+     TOBN(0x33b89e51, 0x0ec6e929), TOBN(0xcb02319f, 0x8b7f22cd),
+     TOBN(0xbbe1500d, 0x084bae24), TOBN(0x2f0ae8d7, 0x343d2693),
+     TOBN(0xacffb5f2, 0x7cdef811), TOBN(0xaa0c030a, 0x263fb94f),
+     TOBN(0x6eef0d61, 0xa0f442de), TOBN(0xf92e1817, 0x27b139d3),
+     TOBN(0x1ae6deb7, 0x0ad8bc28), TOBN(0xa89e38dc, 0xc0514130),
+     TOBN(0x81eeb865, 0xd2fdca23), TOBN(0x5a15ee08, 0xcc8ef895),
+     TOBN(0x768fa10a, 0x01905614), TOBN(0xeff5b8ef, 0x880ee19b),
+     TOBN(0xf0c0cabb, 0xcb1c8a0e), TOBN(0x2e1ee9cd, 0xb8c838f9),
+     TOBN(0x0587d8b8, 0x8a4a14c0), TOBN(0xf6f27896, 0x2ff698e5),
+     TOBN(0xed38ef1c, 0x89ee6256), TOBN(0xf44ee1fe, 0x6b353b45),
+     TOBN(0x9115c0c7, 0x70e903b3), TOBN(0xc78ec0a1, 0x818f31df),
+     TOBN(0x6c003324, 0xb7dccbc6), TOBN(0xd96dd1f3, 0x163bbc25),
+     TOBN(0x33aa82dd, 0x5cedd805), TOBN(0x123aae4f, 0x7f7eb2f1),
+     TOBN(0x1723fcf5, 0xa26262cd), TOBN(0x1f7f4d5d, 0x0060ebd5),
+     TOBN(0xf19c5c01, 0xb2eaa3af), TOBN(0x2ccb9b14, 0x9790accf),
+     TOBN(0x1f9c1cad, 0x52324aa6), TOBN(0x63200526, 0x7247df54),
+     TOBN(0x5732fe42, 0xbac96f82), TOBN(0x52fe771f, 0x01a1c384),
+     TOBN(0x546ca13d, 0xb1001684), TOBN(0xb56b4eee, 0xa1709f75),
+     TOBN(0x266545a9, 0xd5db8672), TOBN(0xed971c90, 0x1e8f3cfb),
+     TOBN(0x4e7d8691, 0xe3a07b29), TOBN(0x7570d9ec, 0xe4b696b9),
+     TOBN(0xdc5fa067, 0x7bc7e9ae), TOBN(0x68b44caf, 0xc82c4844),
+     TOBN(0x519d34b3, 0xbf44da80), TOBN(0x283834f9, 0x5ab32e66),
+     TOBN(0x6e608797, 0x6278a000), TOBN(0x1e62960e, 0x627312f6),
+     TOBN(0x9b87b27b, 0xe6901c55), TOBN(0x80e78538, 0x24fdbc1f),
+     TOBN(0xbbbc0951, 0x2facc27d), TOBN(0x06394239, 0xac143b5a),
+     TOBN(0x35bb4a40, 0x376c1944), TOBN(0x7cb62694, 0x63da1511),
+     TOBN(0xafd29161, 0xb7148a3b), TOBN(0xa6f9d9ed, 0x4e2ea2ee),
+     TOBN(0x15dc2ca2, 0x880dd212), TOBN(0x903c3813, 0xa61139a9),
+     TOBN(0x2aa7b46d, 0x6c0f8785), TOBN(0x36ce2871, 0x901c60ff),
+     TOBN(0xc683b028, 0xe10d9c12), TOBN(0x7573baa2, 0x032f33d3),
+     TOBN(0x87a9b1f6, 0x67a31b58), TOBN(0xfd3ed11a, 0xf4ffae12),
+     TOBN(0x83dcaa9a, 0x0cb2748e), TOBN(0x8239f018, 0x5d6fdf16),
+     TOBN(0xba67b49c, 0x72753941), TOBN(0x2beec455, 0xc321cb36),
+     TOBN(0x88015606, 0x3f8b84ce), TOBN(0x76417083, 0x8d38c86f),
+     TOBN(0x054f1ca7, 0x598953dd), TOBN(0xc939e110, 0x4e8e7429),
+     TOBN(0x9b1ac2b3, 0x5a914f2f), TOBN(0x39e35ed3, 0xe74b8f9c),
+     TOBN(0xd0debdb2, 0x781b2fb0), TOBN(0x1585638f, 0x2d997ba2),
+     TOBN(0x9c4b646e, 0x9e2fce99), TOBN(0x68a21081, 0x1e80857f),
+     TOBN(0x06d54e44, 0x3643b52a), TOBN(0xde8d6d63, 0x0d8eb843),
+     TOBN(0x70321563, 0x42146a0a), TOBN(0x8ba826f2, 0x5eaa3622),
+     TOBN(0x227a58bd, 0x86138787), TOBN(0x43b6c03c, 0x10281d37),
+     TOBN(0x6326afbb, 0xb54dde39), TOBN(0x744e5e8a, 0xdb6f2d5f),
+     TOBN(0x48b2a99a, 0xcff158e1), TOBN(0xa93c8fa0, 0xef87918f),
+     TOBN(0x2182f956, 0xde058c5c), TOBN(0x216235d2, 0x936f9e7a),
+     TOBN(0xace0c0db, 0xd2e31e67), TOBN(0xc96449bf, 0xf23ac3e7),
+     TOBN(0x7e9a2874, 0x170693bd), TOBN(0xa28e14fd, 0xa45e6335),
+     TOBN(0x5757f6b3, 0x56427344), TOBN(0x822e4556, 0xacf8edf9),
+     TOBN(0x2b7a6ee2, 0xe6a285cd), TOBN(0x5866f211, 0xa9df3af0),
+     TOBN(0x40dde2dd, 0xf845b844), TOBN(0x986c3726, 0x110e5e49),
+     TOBN(0x73680c2a, 0xf7172277), TOBN(0x57b94f0f, 0x0cccb244),
+     TOBN(0xbdff7267, 0x2d438ca7), TOBN(0xbad1ce11, 0xcf4663fd),
+     TOBN(0x9813ed9d, 0xd8f71cae), TOBN(0xf43272a6, 0x961fdaa6),
+     TOBN(0xbeff0119, 0xbd6d1637), TOBN(0xfebc4f91, 0x30361978),
+     TOBN(0x02b37a95, 0x2f41deff), TOBN(0x0e44a59a, 0xe63b89b7),
+     TOBN(0x673257dc, 0x143ff951), TOBN(0x19c02205, 0xd752baf4),
+     TOBN(0x46c23069, 0xc4b7d692), TOBN(0x2e6392c3, 0xfd1502ac),
+     TOBN(0x6057b1a2, 0x1b220846), TOBN(0xe51ff946, 0x0c1b5b63),}
+    ,
+    {TOBN(0x6e85cb51, 0x566c5c43), TOBN(0xcff9c919, 0x3597f046),
+     TOBN(0x9354e90c, 0x4994d94a), TOBN(0xe0a39332, 0x2147927d),
+     TOBN(0x8427fac1, 0x0dc1eb2b), TOBN(0x88cfd8c2, 0x2ff319fa),
+     TOBN(0xe2d4e684, 0x01965274), TOBN(0xfa2e067d, 0x67aaa746),
+     TOBN(0xb6d92a7f, 0x3e5f9f11), TOBN(0x9afe153a, 0xd6cb3b8e),
+     TOBN(0x4d1a6dd7, 0xddf800bd), TOBN(0xf6c13cc0, 0xcaf17e19),
+     TOBN(0x15f6c58e, 0x325fc3ee), TOBN(0x71095400, 0xa31dc3b2),
+     TOBN(0x168e7c07, 0xafa3d3e7), TOBN(0x3f8417a1, 0x94c7ae2d),
+     TOBN(0xec234772, 0x813b230d), TOBN(0x634d0f5f, 0x17344427),
+     TOBN(0x11548ab1, 0xd77fc56a), TOBN(0x7fab1750, 0xce06af77),
+     TOBN(0xb62c10a7, 0x4f7c4f83), TOBN(0xa7d2edc4, 0x220a67d9),
+     TOBN(0x1c404170, 0x921209a0), TOBN(0x0b9815a0, 0xface59f0),
+     TOBN(0x2842589b, 0x319540c3), TOBN(0x18490f59, 0xa283d6f8),
+     TOBN(0xa2731f84, 0xdaae9fcb), TOBN(0x3db6d960, 0xc3683ba0),
+     TOBN(0xc85c63bb, 0x14611069), TOBN(0xb19436af, 0x0788bf05),
+     TOBN(0x905459df, 0x347460d2), TOBN(0x73f6e094, 0xe11a7db1),
+     TOBN(0xdc7f938e, 0xb6357f37), TOBN(0xc5d00f79, 0x2bd8aa62),
+     TOBN(0xc878dcb9, 0x2ca979fc), TOBN(0x37e83ed9, 0xeb023a99),
+     TOBN(0x6b23e273, 0x1560bf3d), TOBN(0x1086e459, 0x1d0fae61),
+     TOBN(0x78248316, 0x9a9414bd), TOBN(0x1b956bc0, 0xf0ea9ea1),
+     TOBN(0x7b85bb91, 0xc31b9c38), TOBN(0x0c5aa90b, 0x48ef57b5),
+     TOBN(0xdedeb169, 0xaf3bab6f), TOBN(0xe610ad73, 0x2d373685),
+     TOBN(0xf13870df, 0x02ba8e15), TOBN(0x0337edb6, 0x8ca7f771),
+     TOBN(0xe4acf747, 0xb62c036c), TOBN(0xd921d576, 0xb6b94e81),
+     TOBN(0xdbc86439, 0x2c422f7a), TOBN(0xfb635362, 0xed348898),
+     TOBN(0x83084668, 0xc45bfcd1), TOBN(0xc357c9e3, 0x2b315e11),
+     TOBN(0xb173b540, 0x5b2e5b8c), TOBN(0x7e946931, 0xe102b9a4),
+     TOBN(0x17c890eb, 0x7b0fb199), TOBN(0xec225a83, 0xd61b662b),
+     TOBN(0xf306a3c8, 0xee3c76cb), TOBN(0x3cf11623, 0xd32a1f6e),
+     TOBN(0xe6d5ab64, 0x6863e956), TOBN(0x3b8a4cbe, 0x5c005c26),
+     TOBN(0xdcd529a5, 0x9ce6bb27), TOBN(0xc4afaa52, 0x04d4b16f),
+     TOBN(0xb0624a26, 0x7923798d), TOBN(0x85e56df6, 0x6b307fab),
+     TOBN(0x0281893c, 0x2bf29698), TOBN(0x91fc19a4, 0xd7ce7603),
+     TOBN(0x75a5dca3, 0xad9a558f), TOBN(0x40ceb3fa, 0x4d50bf77),
+     TOBN(0x1baf6060, 0xbc9ba369), TOBN(0x927e1037, 0x597888c2),
+     TOBN(0xd936bf19, 0x86a34c07), TOBN(0xd4cf10c1, 0xc34ae980),
+     TOBN(0x3a3e5334, 0x859dd614), TOBN(0x9c475b5b, 0x18d0c8ee),
+     TOBN(0x63080d1f, 0x07cd51d5), TOBN(0xc9c0d0a6, 0xb88b4326),
+     TOBN(0x1ac98691, 0xc234296f), TOBN(0x2a0a83a4, 0x94887fb6),
+     TOBN(0x56511427, 0x0cea9cf2), TOBN(0x5230a6e8, 0xa24802f5),
+     TOBN(0xf7a2bf0f, 0x72e3d5c1), TOBN(0x37717446, 0x4f21439e),
+     TOBN(0xfedcbf25, 0x9ce30334), TOBN(0xe0030a78, 0x7ce202f9),
+     TOBN(0x6f2d9ebf, 0x1202e9ca), TOBN(0xe79dde6c, 0x75e6e591),
+     TOBN(0xf52072af, 0xf1dac4f8), TOBN(0x6c8d087e, 0xbb9b404d),
+     TOBN(0xad0fc73d, 0xbce913af), TOBN(0x909e587b, 0x458a07cb),
+     TOBN(0x1300da84, 0xd4f00c8a), TOBN(0x425cd048, 0xb54466ac),
+     TOBN(0xb59cb9be, 0x90e9d8bf), TOBN(0x991616db, 0x3e431b0e),
+     TOBN(0xd3aa117a, 0x531aecff), TOBN(0x91af92d3, 0x59f4dc3b),
+     TOBN(0x9b1ec292, 0xe93fda29), TOBN(0x76bb6c17, 0xe97d91bc),
+     TOBN(0x7509d95f, 0xaface1e6), TOBN(0x3653fe47, 0xbe855ae3),
+     TOBN(0x73180b28, 0x0f680e75), TOBN(0x75eefd1b, 0xeeb6c26c),
+     TOBN(0xa4cdf29f, 0xb66d4236), TOBN(0x2d70a997, 0x6b5821d8),
+     TOBN(0x7a3ee207, 0x20445c36), TOBN(0x71d1ac82, 0x59877174),
+     TOBN(0x0fc539f7, 0x949f73e9), TOBN(0xd05cf3d7, 0x982e3081),
+     TOBN(0x8758e20b, 0x7b1c7129), TOBN(0xffadcc20, 0x569e61f2),
+     TOBN(0xb05d3a2f, 0x59544c2d), TOBN(0xbe16f5c1, 0x9fff5e53),
+     TOBN(0x73cf65b8, 0xaad58135), TOBN(0x622c2119, 0x037aa5be),
+     TOBN(0x79373b3f, 0x646fd6a0), TOBN(0x0e029db5, 0x0d3978cf),
+     TOBN(0x8bdfc437, 0x94fba037), TOBN(0xaefbd687, 0x620797a6),
+     TOBN(0x3fa5382b, 0xbd30d38e), TOBN(0x7627cfbf, 0x585d7464),
+     TOBN(0xb2330fef, 0x4e4ca463), TOBN(0xbcef7287, 0x3566cc63),
+     TOBN(0xd161d2ca, 0xcf780900), TOBN(0x135dc539, 0x5b54827d),
+     TOBN(0x638f052e, 0x27bf1bc6), TOBN(0x10a224f0, 0x07dfa06c),
+     TOBN(0xe973586d, 0x6d3321da), TOBN(0x8b0c5738, 0x26152c8f),
+     TOBN(0x07ef4f2a, 0x34606074), TOBN(0x80fe7fe8, 0xa0f7047a),
+     TOBN(0x3d1a8152, 0xe1a0e306), TOBN(0x32cf43d8, 0x88da5222),
+     TOBN(0xbf89a95f, 0x5f02ffe6), TOBN(0x3d9eb9a4, 0x806ad3ea),
+     TOBN(0x012c17bb, 0x79c8e55e), TOBN(0xfdcd1a74, 0x99c81dac),
+     TOBN(0x7043178b, 0xb9556098), TOBN(0x4090a1df, 0x801c3886),
+     TOBN(0x759800ff, 0x9b67b912), TOBN(0x3e5c0304, 0x232620c8),
+     TOBN(0x4b9d3c4b, 0x70dceeca), TOBN(0xbb2d3c15, 0x181f648e),
+     TOBN(0xf981d837, 0x6e33345c), TOBN(0xb626289b, 0x0cf2297a),
+     TOBN(0x766ac659, 0x8baebdcf), TOBN(0x1a28ae09, 0x75df01e5),
+     TOBN(0xb71283da, 0x375876d8), TOBN(0x4865a96d, 0x607b9800),
+     TOBN(0x25dd1bcd, 0x237936b2), TOBN(0x332f4f4b, 0x60417494),
+     TOBN(0xd0923d68, 0x370a2147), TOBN(0x497f5dfb, 0xdc842203),
+     TOBN(0x9dc74cbd, 0x32be5e0f), TOBN(0x7475bcb7, 0x17a01375),
+     TOBN(0x438477c9, 0x50d872b1), TOBN(0xcec67879, 0xffe1d63d),
+     TOBN(0x9b006014, 0xd8578c70), TOBN(0xc9ad99a8, 0x78bb6b8b),
+     TOBN(0x6799008e, 0x11fb3806), TOBN(0xcfe81435, 0xcd44cab3),
+     TOBN(0xa2ee1582, 0x2f4fb344), TOBN(0xb8823450, 0x483fa6eb),
+     TOBN(0x622d323d, 0x652c7749), TOBN(0xd8474a98, 0xbeb0a15b),
+     TOBN(0xe43c154d, 0x5d1c00d0), TOBN(0x7fd581d9, 0x0e3e7aac),
+     TOBN(0x2b44c619, 0x2525ddf8), TOBN(0x67a033eb, 0xb8ae9739),
+     TOBN(0x113ffec1, 0x9ef2d2e4), TOBN(0x1bf6767e, 0xd5a0ea7f),
+     TOBN(0x57fff75e, 0x03714c0a), TOBN(0xa23c422e, 0x0a23e9ee),
+     TOBN(0xdd5f6b2d, 0x540f83af), TOBN(0xc2c2c27e, 0x55ea46a7),
+     TOBN(0xeb6b4246, 0x672a1208), TOBN(0xd13599f7, 0xae634f7a),
+     TOBN(0xcf914b5c, 0xd7b32c6e), TOBN(0x61a5a640, 0xeaf61814),
+     TOBN(0x8dc3df8b, 0x208a1bbb), TOBN(0xef627fd6, 0xb6d79aa5),
+     TOBN(0x44232ffc, 0xc4c86bc8), TOBN(0xe6f9231b, 0x061539fe),
+     TOBN(0x1d04f25a, 0x958b9533), TOBN(0x180cf934, 0x49e8c885),
+     TOBN(0x89689595, 0x9884aaf7), TOBN(0xb1959be3, 0x07b348a6),
+     TOBN(0x96250e57, 0x3c147c87), TOBN(0xae0efb3a, 0xdd0c61f8),
+     TOBN(0xed00745e, 0xca8c325e), TOBN(0x3c911696, 0xecff3f70),
+     TOBN(0x73acbc65, 0x319ad41d), TOBN(0x7b01a020, 0xf0b1c7ef),
+     TOBN(0xea32b293, 0x63a1483f), TOBN(0x89eabe71, 0x7a248f96),
+     TOBN(0x9c6231d3, 0x343157e5), TOBN(0x93a375e5, 0xdf3c546d),
+     TOBN(0xe76e9343, 0x6a2afe69), TOBN(0xc4f89100, 0xe166c88e),
+     TOBN(0x248efd0d, 0x4f872093), TOBN(0xae0eb3ea, 0x8fe0ea61),
+     TOBN(0xaf89790d, 0x9d79046e), TOBN(0x4d650f2d, 0x6cee0976),
+     TOBN(0xa3935d9a, 0x43071eca), TOBN(0x66fcd2c9, 0x283b0bfe),
+     TOBN(0x0e665eb5, 0x696605f1), TOBN(0xe77e5d07, 0xa54cd38d),
+     TOBN(0x90ee050a, 0x43d950cf), TOBN(0x86ddebda, 0xd32e69b5),
+     TOBN(0x6ad94a3d, 0xfddf7415), TOBN(0xf7fa1309, 0x3f6e8d5a),
+     TOBN(0xc4831d1d, 0xe9957f75), TOBN(0x7de28501, 0xd5817447),
+     TOBN(0x6f1d7078, 0x9e2aeb6b), TOBN(0xba2b9ff4, 0xf67a53c2),
+     TOBN(0x36963767, 0xdf9defc3), TOBN(0x479deed3, 0x0d38022c),
+     TOBN(0xd2edb89b, 0x3a8631e8), TOBN(0x8de855de, 0x7a213746),
+     TOBN(0xb2056cb7, 0xb00c5f11), TOBN(0xdeaefbd0, 0x2c9b85e4),
+     TOBN(0x03f39a8d, 0xd150892d), TOBN(0x37b84686, 0x218b7985),
+     TOBN(0x36296dd8, 0xb7375f1a), TOBN(0x472cd4b1, 0xb78e898e),
+     TOBN(0x15dff651, 0xe9f05de9), TOBN(0xd4045069, 0x2ce98ba9),
+     TOBN(0x8466a7ae, 0x9b38024c), TOBN(0xb910e700, 0xe5a6b5ef),
+     TOBN(0xae1c56ea, 0xb3aa8f0d), TOBN(0xbab2a507, 0x7eee74a6),
+     TOBN(0x0dca11e2, 0x4b4c4620), TOBN(0xfd896e2e, 0x4c47d1f4),
+     TOBN(0xeb45ae53, 0x308fbd93), TOBN(0x46cd5a2e, 0x02c36fda),
+     TOBN(0x6a3d4e90, 0xbaa48385), TOBN(0xdd55e62e, 0x9dbe9960),
+     TOBN(0xa1406aa0, 0x2a81ede7), TOBN(0x6860dd14, 0xf9274ea7),
+     TOBN(0xcfdcb0c2, 0x80414f86), TOBN(0xff410b10, 0x22f94327),
+     TOBN(0x5a33cc38, 0x49ad467b), TOBN(0xefb48b6c, 0x0a7335f1),
+     TOBN(0x14fb54a4, 0xb153a360), TOBN(0x604aa9d2, 0xb52469cc),
+     TOBN(0x5e9dc486, 0x754e48e9), TOBN(0x693cb455, 0x37471e8e),
+     TOBN(0xfb2fd7cd, 0x8d3b37b6), TOBN(0x63345e16, 0xcf09ff07),
+     TOBN(0x9910ba6b, 0x23a5d896), TOBN(0x1fe19e35, 0x7fe4364e),
+     TOBN(0x6e1da8c3, 0x9a33c677), TOBN(0x15b4488b, 0x29fd9fd0),
+     TOBN(0x1f439254, 0x1a1f22bf), TOBN(0x920a8a70, 0xab8163e8),
+     TOBN(0x3fd1b249, 0x07e5658e), TOBN(0xf2c4f79c, 0xb6ec839b),
+     TOBN(0x1abbc3d0, 0x4aa38d1b), TOBN(0x3b0db35c, 0xb5d9510e),
+     TOBN(0x1754ac78, 0x3e60dec0), TOBN(0x53272fd7, 0xea099b33),
+     TOBN(0x5fb0494f, 0x07a8e107), TOBN(0x4a89e137, 0x6a8191fa),
+     TOBN(0xa113b7f6, 0x3c4ad544), TOBN(0x88a2e909, 0x6cb9897b),
+     TOBN(0x17d55de3, 0xb44a3f84), TOBN(0xacb2f344, 0x17c6c690),
+     TOBN(0x32088168, 0x10232390), TOBN(0xf2e8a61f, 0x6c733bf7),
+     TOBN(0xa774aab6, 0x9c2d7652), TOBN(0xfb5307e3, 0xed95c5bc),
+     TOBN(0xa05c73c2, 0x4981f110), TOBN(0x1baae31c, 0xa39458c9),
+     TOBN(0x1def185b, 0xcbea62e7), TOBN(0xe8ac9eae, 0xeaf63059),
+     TOBN(0x098a8cfd, 0x9921851c), TOBN(0xd959c3f1, 0x3abe2f5b),
+     TOBN(0xa4f19525, 0x20e40ae5), TOBN(0x320789e3, 0x07a24aa1),
+     TOBN(0x259e6927, 0x7392b2bc), TOBN(0x58f6c667, 0x1918668b),
+     TOBN(0xce1db2bb, 0xc55d2d8b), TOBN(0x41d58bb7, 0xf4f6ca56),
+     TOBN(0x7650b680, 0x8f877614), TOBN(0x905e16ba, 0xf4c349ed),
+     TOBN(0xed415140, 0xf661acac), TOBN(0x3b8784f0, 0xcb2270af),
+     TOBN(0x3bc280ac, 0x8a402cba), TOBN(0xd53f7146, 0x0937921a),
+     TOBN(0xc03c8ee5, 0xe5681e83), TOBN(0x62126105, 0xf6ac9e4a),
+     TOBN(0x9503a53f, 0x936b1a38), TOBN(0x3d45e2d4, 0x782fecbd),
+     TOBN(0x69a5c439, 0x76e8ae98), TOBN(0xb53b2eeb, 0xbfb4b00e),
+     TOBN(0xf1674712, 0x72386c89), TOBN(0x30ca34a2, 0x4268bce4),
+     TOBN(0x7f1ed86c, 0x78341730), TOBN(0x8ef5beb8, 0xb525e248),
+     TOBN(0xbbc489fd, 0xb74fbf38), TOBN(0x38a92a0e, 0x91a0b382),
+     TOBN(0x7a77ba3f, 0x22433ccf), TOBN(0xde8362d6, 0xa29f05a9),
+     TOBN(0x7f6a30ea, 0x61189afc), TOBN(0x693b5505, 0x59ef114f),
+     TOBN(0x50266bc0, 0xcd1797a1), TOBN(0xea17b47e, 0xf4b7af2d),
+     TOBN(0xd6c4025c, 0x3df9483e), TOBN(0x8cbb9d9f, 0xa37b18c9),
+     TOBN(0x91cbfd9c, 0x4d8424cf), TOBN(0xdb7048f1, 0xab1c3506),
+     TOBN(0x9eaf641f, 0x028206a3), TOBN(0xf986f3f9, 0x25bdf6ce),
+     TOBN(0x262143b5, 0x224c08dc), TOBN(0x2bbb09b4, 0x81b50c91),
+     TOBN(0xc16ed709, 0xaca8c84f), TOBN(0xa6210d9d, 0xb2850ca8),
+     TOBN(0x6d8df67a, 0x09cb54d6), TOBN(0x91eef6e0, 0x500919a4),
+     TOBN(0x90f61381, 0x0f132857), TOBN(0x9acede47, 0xf8d5028b),
+     TOBN(0x844d1b71, 0x90b771c3), TOBN(0x563b71e4, 0xba6426be),
+     TOBN(0x2efa2e83, 0xbdb802ff), TOBN(0x3410cbab, 0xab5b4a41),
+     TOBN(0x555b2d26, 0x30da84dd), TOBN(0xd0711ae9, 0xee1cc29a),
+     TOBN(0xcf3e8c60, 0x2f547792), TOBN(0x03d7d5de, 0xdc678b35),
+     TOBN(0x071a2fa8, 0xced806b8), TOBN(0x222e6134, 0x697f1478),
+     TOBN(0xdc16fd5d, 0xabfcdbbf), TOBN(0x44912ebf, 0x121b53b8),
+     TOBN(0xac943674, 0x2496c27c), TOBN(0x8ea3176c, 0x1ffc26b0),
+     TOBN(0xb6e224ac, 0x13debf2c), TOBN(0x524cc235, 0xf372a832),
+     TOBN(0xd706e1d8, 0x9f6f1b18), TOBN(0x2552f005, 0x44cce35b),
+     TOBN(0x8c8326c2, 0xa88e31fc), TOBN(0xb5468b2c, 0xf9552047),
+     TOBN(0xce683e88, 0x3ff90f2b), TOBN(0x77947bdf, 0x2f0a5423),
+     TOBN(0xd0a1b28b, 0xed56e328), TOBN(0xaee35253, 0xc20134ac),
+     TOBN(0x7e98367d, 0x3567962f), TOBN(0x379ed61f, 0x8188bffb),
+     TOBN(0x73bba348, 0xfaf130a1), TOBN(0x6c1f75e1, 0x904ed734),
+     TOBN(0x18956642, 0x3b4a79fc), TOBN(0xf20bc83d, 0x54ef4493),
+     TOBN(0x836d425d, 0x9111eca1), TOBN(0xe5b5c318, 0x009a8dcf),
+     TOBN(0x3360b25d, 0x13221bc5), TOBN(0x707baad2, 0x6b3eeaf7),
+     TOBN(0xd7279ed8, 0x743a95a1), TOBN(0x7450a875, 0x969e809f),
+     TOBN(0x32b6bd53, 0xe5d0338f), TOBN(0x1e77f7af, 0x2b883bbc),
+     TOBN(0x90da12cc, 0x1063ecd0), TOBN(0xe2697b58, 0xc315be47),
+     TOBN(0x2771a5bd, 0xda85d534), TOBN(0x53e78c1f, 0xff980eea),
+     TOBN(0xadf1cf84, 0x900385e7), TOBN(0x7d3b14f6, 0xc9387b62),
+     TOBN(0x170e74b0, 0xcb8f2bd2), TOBN(0x2d50b486, 0x827fa993),
+     TOBN(0xcdbe8c9a, 0xf6f32bab), TOBN(0x55e906b0, 0xc3b93ab8),
+     TOBN(0x747f22fc, 0x8fe280d1), TOBN(0xcd8e0de5, 0xb2e114ab),
+     TOBN(0x5ab7dbeb, 0xe10b68b0), TOBN(0x9dc63a9c, 0xa480d4b2),
+     TOBN(0x78d4bc3b, 0x4be1495f), TOBN(0x25eb3db8, 0x9359122d),
+     TOBN(0x3f8ac05b, 0x0809cbdc), TOBN(0xbf4187bb, 0xd37c702f),
+     TOBN(0x84cea069, 0x1416a6a5), TOBN(0x8f860c79, 0x43ef881c),
+     TOBN(0x41311f8a, 0x38038a5d), TOBN(0xe78c2ec0, 0xfc612067),
+     TOBN(0x494d2e81, 0x5ad73581), TOBN(0xb4cc9e00, 0x59604097),
+     TOBN(0xff558aec, 0xf3612cba), TOBN(0x35beef7a, 0x9e36c39e),
+     TOBN(0x1845c7cf, 0xdbcf41b9), TOBN(0x5703662a, 0xaea997c0),
+     TOBN(0x8b925afe, 0xe402f6d8), TOBN(0xd0a1b1ae, 0x4dd72162),
+     TOBN(0x9f47b375, 0x03c41c4b), TOBN(0xa023829b, 0x0391d042),
+     TOBN(0x5f5045c3, 0x503b8b0a), TOBN(0x123c2688, 0x98c010e5),
+     TOBN(0x324ec0cc, 0x36ba06ee), TOBN(0xface3115, 0x3dd2cc0c),
+     TOBN(0xb364f3be, 0xf333e91f), TOBN(0xef8aff73, 0x28e832b0),
+     TOBN(0x1e9bad04, 0x2d05841b), TOBN(0x42f0e3df, 0x356a21e2),
+     TOBN(0xa3270bcb, 0x4add627e), TOBN(0xb09a8158, 0xd322e711),
+     TOBN(0x86e326a1, 0x0fee104a), TOBN(0xad7788f8, 0x3703f65d),
+     TOBN(0x7e765430, 0x47bc4833), TOBN(0x6cee582b, 0x2b9b893a),
+     TOBN(0x9cd2a167, 0xe8f55a7b), TOBN(0xefbee3c6, 0xd9e4190d),
+     TOBN(0x33ee7185, 0xd40c2e9d), TOBN(0x844cc9c5, 0xa380b548),
+     TOBN(0x323f8ecd, 0x66926e04), TOBN(0x0001e38f, 0x8110c1ba),
+     TOBN(0x8dbcac12, 0xfc6a7f07), TOBN(0xd65e1d58, 0x0cec0827),
+     TOBN(0xd2cd4141, 0xbe76ca2d), TOBN(0x7895cf5c, 0xe892f33a),
+     TOBN(0x956d230d, 0x367139d2), TOBN(0xa91abd3e, 0xd012c4c1),
+     TOBN(0x34fa4883, 0x87eb36bf), TOBN(0xc5f07102, 0x914b8fb4),
+     TOBN(0x90f0e579, 0xadb9c95f), TOBN(0xfe6ea8cb, 0x28888195),
+     TOBN(0x7b9b5065, 0xedfa9284), TOBN(0x6c510bd2, 0x2b8c8d65),
+     TOBN(0xd7b8ebef, 0xcbe8aafd), TOBN(0xedb3af98, 0x96b1da07),
+     TOBN(0x28ff779d, 0x6295d426), TOBN(0x0c4f6ac7, 0x3fa3ad7b),
+     TOBN(0xec44d054, 0x8b8e2604), TOBN(0x9b32a66d, 0x8b0050e1),
+     TOBN(0x1f943366, 0xf0476ce2), TOBN(0x7554d953, 0xa602c7b4),
+     TOBN(0xbe35aca6, 0x524f2809), TOBN(0xb6881229, 0xfd4edbea),
+     TOBN(0xe8cd0c8f, 0x508efb63), TOBN(0x9eb5b5c8, 0x6abcefc7),
+     TOBN(0xf5621f5f, 0xb441ab4f), TOBN(0x79e6c046, 0xb76a2b22),
+     TOBN(0x74a4792c, 0xe37a1f69), TOBN(0xcbd252cb, 0x03542b60),
+     TOBN(0x785f65d5, 0xb3c20bd3), TOBN(0x8dea6143, 0x4fabc60c),
+     TOBN(0x45e21446, 0xde673629), TOBN(0x57f7aa1e, 0x703c2d21),
+     TOBN(0xa0e99b7f, 0x98c868c7), TOBN(0x4e42f66d, 0x8b641676),
+     TOBN(0x602884dc, 0x91077896), TOBN(0xa0d690cf, 0xc2c9885b),
+     TOBN(0xfeb4da33, 0x3b9a5187), TOBN(0x5f789598, 0x153c87ee),
+     TOBN(0x2192dd47, 0x52b16dba), TOBN(0xdeefc0e6, 0x3524c1b1),
+     TOBN(0x465ea76e, 0xe4383693), TOBN(0x79401711, 0x361b8d98),
+     TOBN(0xa5f9ace9, 0xf21a15cb), TOBN(0x73d26163, 0xefee9aeb),
+     TOBN(0xcca844b3, 0xe677016c), TOBN(0x6c122b07, 0x57eaee06),
+     TOBN(0xb782dce7, 0x15f09690), TOBN(0x508b9b12, 0x2dfc0fc9),
+     TOBN(0x9015ab4b, 0x65d89fc6), TOBN(0x5e79dab7, 0xd6d5bb0f),
+     TOBN(0x64f021f0, 0x6c775aa2), TOBN(0xdf09d8cc, 0x37c7eca1),
+     TOBN(0x9a761367, 0xef2fa506), TOBN(0xed4ca476, 0x5b81eec6),
+     TOBN(0x262ede36, 0x10bbb8b5), TOBN(0x0737ce83, 0x0641ada3),
+     TOBN(0x4c94288a, 0xe9831ccc), TOBN(0x487fc1ce, 0x8065e635),
+     TOBN(0xb13d7ab3, 0xb8bb3659), TOBN(0xdea5df3e, 0x855e4120),
+     TOBN(0xb9a18573, 0x85eb0244), TOBN(0x1a1b8ea3, 0xa7cfe0a3),
+     TOBN(0x3b837119, 0x67b0867c), TOBN(0x8d5e0d08, 0x9d364520),
+     TOBN(0x52dccc1e, 0xd930f0e3), TOBN(0xefbbcec7, 0xbf20bbaf),
+     TOBN(0x99cffcab, 0x0263ad10), TOBN(0xd8199e6d, 0xfcd18f8a),
+     TOBN(0x64e2773f, 0xe9f10617), TOBN(0x0079e8e1, 0x08704848),
+     TOBN(0x1169989f, 0x8a342283), TOBN(0x8097799c, 0xa83012e6),
+     TOBN(0xece966cb, 0x8a6a9001), TOBN(0x93b3afef, 0x072ac7fc),
+     TOBN(0xe6893a2a, 0x2db3d5ba), TOBN(0x263dc462, 0x89bf4fdc),
+     TOBN(0x8852dfc9, 0xe0396673), TOBN(0x7ac70895, 0x3af362b6),
+     TOBN(0xbb9cce4d, 0x5c2f342b), TOBN(0xbf80907a, 0xb52d7aae),
+     TOBN(0x97f3d3cd, 0x2161bcd0), TOBN(0xb25b0834, 0x0962744d),
+     TOBN(0xc5b18ea5, 0x6c3a1dda), TOBN(0xfe4ec7eb, 0x06c92317),
+     TOBN(0xb787b890, 0xad1c4afe), TOBN(0xdccd9a92, 0x0ede801a),
+     TOBN(0x9ac6ddda, 0xdb58da1f), TOBN(0x22bbc12f, 0xb8cae6ee),
+     TOBN(0xc6f8bced, 0x815c4a43), TOBN(0x8105a92c, 0xf96480c7),
+     TOBN(0x0dc3dbf3, 0x7a859d51), TOBN(0xe3ec7ce6, 0x3041196b),
+     TOBN(0xd9f64b25, 0x0d1067c9), TOBN(0xf2321321, 0x3d1f8dd8),
+     TOBN(0x8b5c619c, 0x76497ee8), TOBN(0x5d2b0ac6, 0xc717370e),
+     TOBN(0x98204cb6, 0x4fcf68e1), TOBN(0x0bdec211, 0x62bc6792),
+     TOBN(0x6973ccef, 0xa63b1011), TOBN(0xf9e3fa97, 0xe0de1ac5),
+     TOBN(0x5efb693e, 0x3d0e0c8b), TOBN(0x037248e9, 0xd2d4fcb4),}
+    ,
+    {TOBN(0x80802dc9, 0x1ec34f9e), TOBN(0xd8772d35, 0x33810603),
+     TOBN(0x3f06d66c, 0x530cb4f3), TOBN(0x7be5ed0d, 0xc475c129),
+     TOBN(0xcb9e3c19, 0x31e82b10), TOBN(0xc63d2857, 0xc9ff6b4c),
+     TOBN(0xb92118c6, 0x92a1b45e), TOBN(0x0aec4414, 0x7285bbca),
+     TOBN(0xfc189ae7, 0x1e29a3ef), TOBN(0xcbe906f0, 0x4c93302e),
+     TOBN(0xd0107914, 0xceaae10e), TOBN(0xb7a23f34, 0xb68e19f8),
+     TOBN(0xe9d875c2, 0xefd2119d), TOBN(0x03198c6e, 0xfcadc9c8),
+     TOBN(0x65591bf6, 0x4da17113), TOBN(0x3cf0bbf8, 0x3d443038),
+     TOBN(0xae485bb7, 0x2b724759), TOBN(0x945353e1, 0xb2d4c63a),
+     TOBN(0x82159d07, 0xde7d6f2c), TOBN(0x389caef3, 0x4ec5b109),
+     TOBN(0x4a8ebb53, 0xdb65ef14), TOBN(0x2dc2cb7e, 0xdd99de43),
+     TOBN(0x816fa3ed, 0x83f2405f), TOBN(0x73429bb9, 0xc14208a3),
+     TOBN(0xb618d590, 0xb01e6e27), TOBN(0x047e2ccd, 0xe180b2dc),
+     TOBN(0xd1b299b5, 0x04aea4a9), TOBN(0x412c9e1e, 0x9fa403a4),
+     TOBN(0x88d28a36, 0x79407552), TOBN(0x49c50136, 0xf332b8e3),
+     TOBN(0x3a1b6fcc, 0xe668de19), TOBN(0x178851bc, 0x75122b97),
+     TOBN(0xb1e13752, 0xfb85fa4c), TOBN(0xd61257ce, 0x383c8ce9),
+     TOBN(0xd43da670, 0xd2f74dae), TOBN(0xa35aa23f, 0xbf846bbb),
+     TOBN(0x5e74235d, 0x4421fc83), TOBN(0xf6df8ee0, 0xc363473b),
+     TOBN(0x34d7f52a, 0x3c4aa158), TOBN(0x50d05aab, 0x9bc6d22e),
+     TOBN(0x8c56e735, 0xa64785f4), TOBN(0xbc56637b, 0x5f29cd07),
+     TOBN(0x53b2bb80, 0x3ee35067), TOBN(0x50235a0f, 0xdc919270),
+     TOBN(0x191ab6d8, 0xf2c4aa65), TOBN(0xc3475831, 0x8396023b),
+     TOBN(0x80400ba5, 0xf0f805ba), TOBN(0x8881065b, 0x5ec0f80f),
+     TOBN(0xc370e522, 0xcc1b5e83), TOBN(0xde2d4ad1, 0x860b8bfb),
+     TOBN(0xad364df0, 0x67b256df), TOBN(0x8f12502e, 0xe0138997),
+     TOBN(0x503fa0dc, 0x7783920a), TOBN(0xe80014ad, 0xc0bc866a),
+     TOBN(0x3f89b744, 0xd3064ba6), TOBN(0x03511dcd, 0xcba5dba5),
+     TOBN(0x197dd46d, 0x95a7b1a2), TOBN(0x9c4e7ad6, 0x3c6341fb),
+     TOBN(0x426eca29, 0x484c2ece), TOBN(0x9211e489, 0xde7f4f8a),
+     TOBN(0x14997f6e, 0xc78ef1f4), TOBN(0x2b2c0910, 0x06574586),
+     TOBN(0x17286a6e, 0x1c3eede8), TOBN(0x25f92e47, 0x0f60e018),
+     TOBN(0x805c5646, 0x31890a36), TOBN(0x703ef600, 0x57feea5b),
+     TOBN(0x389f747c, 0xaf3c3030), TOBN(0xe0e5daeb, 0x54dd3739),
+     TOBN(0xfe24a4c3, 0xc9c9f155), TOBN(0x7e4bf176, 0xb5393962),
+     TOBN(0x37183de2, 0xaf20bf29), TOBN(0x4a1bd7b5, 0xf95a8c3b),
+     TOBN(0xa83b9699, 0x46191d3d), TOBN(0x281fc8dd, 0x7b87f257),
+     TOBN(0xb18e2c13, 0x54107588), TOBN(0x6372def7, 0x9b2bafe8),
+     TOBN(0xdaf4bb48, 0x0d8972ca), TOBN(0x3f2dd4b7, 0x56167a3f),
+     TOBN(0x1eace32d, 0x84310cf4), TOBN(0xe3bcefaf, 0xe42700aa),
+     TOBN(0x5fe5691e, 0xd785e73d), TOBN(0xa5db5ab6, 0x2ea60467),
+     TOBN(0x02e23d41, 0xdfc6514a), TOBN(0x35e8048e, 0xe03c3665),
+     TOBN(0x3f8b118f, 0x1adaa0f8), TOBN(0x28ec3b45, 0x84ce1a5a),
+     TOBN(0xe8cacc6e, 0x2c6646b8), TOBN(0x1343d185, 0xdbd0e40f),
+     TOBN(0xe5d7f844, 0xcaaa358c), TOBN(0x1a1db7e4, 0x9924182a),
+     TOBN(0xd64cd42d, 0x9c875d9a), TOBN(0xb37b515f, 0x042eeec8),
+     TOBN(0x4d4dd409, 0x7b165fbe), TOBN(0xfc322ed9, 0xe206eff3),
+     TOBN(0x7dee4102, 0x59b7e17e), TOBN(0x55a481c0, 0x8236ca00),
+     TOBN(0x8c885312, 0xc23fc975), TOBN(0x15715806, 0x05d6297b),
+     TOBN(0xa078868e, 0xf78edd39), TOBN(0x956b31e0, 0x03c45e52),
+     TOBN(0x470275d5, 0xff7b33a6), TOBN(0xc8d5dc3a, 0x0c7e673f),
+     TOBN(0x419227b4, 0x7e2f2598), TOBN(0x8b37b634, 0x4c14a975),
+     TOBN(0xd0667ed6, 0x8b11888c), TOBN(0x5e0e8c3e, 0x803e25dc),
+     TOBN(0x34e5d0dc, 0xb987a24a), TOBN(0x9f40ac3b, 0xae920323),
+     TOBN(0x5463de95, 0x34e0f63a), TOBN(0xa128bf92, 0x6b6328f9),
+     TOBN(0x491ccd7c, 0xda64f1b7), TOBN(0x7ef1ec27, 0xc47bde35),
+     TOBN(0xa857240f, 0xa36a2737), TOBN(0x35dc1366, 0x63621bc1),
+     TOBN(0x7a3a6453, 0xd4fb6897), TOBN(0x80f1a439, 0xc929319d),
+     TOBN(0xfc18274b, 0xf8cb0ba0), TOBN(0xb0b53766, 0x8078c5eb),
+     TOBN(0xfb0d4924, 0x1e01d0ef), TOBN(0x50d7c67d, 0x372ab09c),
+     TOBN(0xb4e370af, 0x3aeac968), TOBN(0xe4f7fee9, 0xc4b63266),
+     TOBN(0xb4acd4c2, 0xe3ac5664), TOBN(0xf8910bd2, 0xceb38cbf),
+     TOBN(0x1c3ae50c, 0xc9c0726e), TOBN(0x15309569, 0xd97b40bf),
+     TOBN(0x70884b7f, 0xfd5a5a1b), TOBN(0x3890896a, 0xef8314cd),
+     TOBN(0x58e1515c, 0xa5618c93), TOBN(0xe665432b, 0x77d942d1),
+     TOBN(0xb32181bf, 0xb6f767a8), TOBN(0x753794e8, 0x3a604110),
+     TOBN(0x09afeb7c, 0xe8c0dbcc), TOBN(0x31e02613, 0x598673a3),
+     TOBN(0x5d98e557, 0x7d46db00), TOBN(0xfc21fb8c, 0x9d985b28),
+     TOBN(0xc9040116, 0xb0843e0b), TOBN(0x53b1b3a8, 0x69b04531),
+     TOBN(0xdd1649f0, 0x85d7d830), TOBN(0xbb3bcc87, 0xcb7427e8),
+     TOBN(0x77261100, 0xc93dce83), TOBN(0x7e79da61, 0xa1922a2a),
+     TOBN(0x587a2b02, 0xf3149ce8), TOBN(0x147e1384, 0xde92ec83),
+     TOBN(0x484c83d3, 0xaf077f30), TOBN(0xea78f844, 0x0658b53a),
+     TOBN(0x912076c2, 0x027aec53), TOBN(0xf34714e3, 0x93c8177d),
+     TOBN(0x37ef5d15, 0xc2376c84), TOBN(0x8315b659, 0x3d1aa783),
+     TOBN(0x3a75c484, 0xef852a90), TOBN(0x0ba0c58a, 0x16086bd4),
+     TOBN(0x29688d7a, 0x529a6d48), TOBN(0x9c7f250d, 0xc2f19203),
+     TOBN(0x123042fb, 0x682e2df9), TOBN(0x2b7587e7, 0xad8121bc),
+     TOBN(0x30fc0233, 0xe0182a65), TOBN(0xb82ecf87, 0xe3e1128a),
+     TOBN(0x71682861, 0x93fb098f), TOBN(0x043e21ae, 0x85e9e6a7),
+     TOBN(0xab5b49d6, 0x66c834ea), TOBN(0x3be43e18, 0x47414287),
+     TOBN(0xf40fb859, 0x219a2a47), TOBN(0x0e6559e9, 0xcc58df3c),
+     TOBN(0xfe1dfe8e, 0x0c6615b4), TOBN(0x14abc8fd, 0x56459d70),
+     TOBN(0x7be0fa8e, 0x05de0386), TOBN(0x8e63ef68, 0xe9035c7c),
+     TOBN(0x116401b4, 0x53b31e91), TOBN(0x0cba7ad4, 0x4436b4d8),
+     TOBN(0x9151f9a0, 0x107afd66), TOBN(0xafaca8d0, 0x1f0ee4c4),
+     TOBN(0x75fe5c1d, 0x9ee9761c), TOBN(0x3497a16b, 0xf0c0588f),
+     TOBN(0x3ee2bebd, 0x0304804c), TOBN(0xa8fb9a60, 0xc2c990b9),
+     TOBN(0xd14d32fe, 0x39251114), TOBN(0x36bf25bc, 0xcac73366),
+     TOBN(0xc9562c66, 0xdba7495c), TOBN(0x324d301b, 0x46ad348b),
+     TOBN(0x9f46620c, 0xd670407e), TOBN(0x0ea8d4f1, 0xe3733a01),
+     TOBN(0xd396d532, 0xb0c324e0), TOBN(0x5b211a0e, 0x03c317cd),
+     TOBN(0x090d7d20, 0x5ffe7b37), TOBN(0x3b7f3efb, 0x1747d2da),
+     TOBN(0xa2cb525f, 0xb54fc519), TOBN(0x6e220932, 0xf66a971e),
+     TOBN(0xddc160df, 0xb486d440), TOBN(0x7fcfec46, 0x3fe13465),
+     TOBN(0x83da7e4e, 0x76e4c151), TOBN(0xd6fa48a1, 0xd8d302b5),
+     TOBN(0xc6304f26, 0x5872cd88), TOBN(0x806c1d3c, 0x278b90a1),
+     TOBN(0x3553e725, 0xcaf0bc1c), TOBN(0xff59e603, 0xbb9d8d5c),
+     TOBN(0xa4550f32, 0x7a0b85dd), TOBN(0xdec5720a, 0x93ecc217),
+     TOBN(0x0b88b741, 0x69d62213), TOBN(0x7212f245, 0x5b365955),
+     TOBN(0x20764111, 0xb5cae787), TOBN(0x13cb7f58, 0x1dfd3124),
+     TOBN(0x2dca77da, 0x1175aefb), TOBN(0xeb75466b, 0xffaae775),
+     TOBN(0x74d76f3b, 0xdb6cff32), TOBN(0x7440f37a, 0x61fcda9a),
+     TOBN(0x1bb3ac92, 0xb525028b), TOBN(0x20fbf8f7, 0xa1975f29),
+     TOBN(0x982692e1, 0xdf83097f), TOBN(0x28738f6c, 0x554b0800),
+     TOBN(0xdc703717, 0xa2ce2f2f), TOBN(0x7913b93c, 0x40814194),
+     TOBN(0x04924593, 0x1fe89636), TOBN(0x7b98443f, 0xf78834a6),
+     TOBN(0x11c6ab01, 0x5114a5a1), TOBN(0x60deb383, 0xffba5f4c),
+     TOBN(0x4caa54c6, 0x01a982e6), TOBN(0x1dd35e11, 0x3491cd26),
+     TOBN(0x973c315f, 0x7cbd6b05), TOBN(0xcab00775, 0x52494724),
+     TOBN(0x04659b1f, 0x6565e15a), TOBN(0xbf30f529, 0x8c8fb026),
+     TOBN(0xfc21641b, 0xa8a0de37), TOBN(0xe9c7a366, 0xfa5e5114),
+     TOBN(0xdb849ca5, 0x52f03ad8), TOBN(0xc7e8dbe9, 0x024e35c0),
+     TOBN(0xa1a2bbac, 0xcfc3c789), TOBN(0xbf733e7d, 0x9c26f262),
+     TOBN(0x882ffbf5, 0xb8444823), TOBN(0xb7224e88, 0x6bf8483b),
+     TOBN(0x53023b8b, 0x65bef640), TOBN(0xaabfec91, 0xd4d5f8cd),
+     TOBN(0xa40e1510, 0x079ea1bd), TOBN(0x1ad9addc, 0xd05d5d26),
+     TOBN(0xdb3f2eab, 0x13e68d4f), TOBN(0x1cff1ae2, 0x640f803f),
+     TOBN(0xe0e7b749, 0xd4cee117), TOBN(0x8e9f275b, 0x4036d909),
+     TOBN(0xce34e31d, 0x8f4d4c38), TOBN(0x22b37f69, 0xd75130fc),
+     TOBN(0x83e0f1fd, 0xb4014604), TOBN(0xa8ce9919, 0x89415078),
+     TOBN(0x82375b75, 0x41792efe), TOBN(0x4f59bf5c, 0x97d4515b),
+     TOBN(0xac4f324f, 0x923a277d), TOBN(0xd9bc9b7d, 0x650f3406),
+     TOBN(0xc6fa87d1, 0x8a39bc51), TOBN(0x82588530, 0x5ccc108f),
+     TOBN(0x5ced3c9f, 0x82e4c634), TOBN(0x8efb8314, 0x3a4464f8),
+     TOBN(0xe706381b, 0x7a1dca25), TOBN(0x6cd15a3c, 0x5a2a412b),
+     TOBN(0x9347a8fd, 0xbfcd8fb5), TOBN(0x31db2eef, 0x6e54cd22),
+     TOBN(0xc4aeb11e, 0xf8d8932f), TOBN(0x11e7c1ed, 0x344411af),
+     TOBN(0x2653050c, 0xdc9a151e), TOBN(0x9edbfc08, 0x3bb0a859),
+     TOBN(0x926c81c7, 0xfd5691e7), TOBN(0x9c1b2342, 0x6f39019a),
+     TOBN(0x64a81c8b, 0x7f8474b9), TOBN(0x90657c07, 0x01761819),
+     TOBN(0x390b3331, 0x55e0375a), TOBN(0xc676c626, 0xb6ebc47d),
+     TOBN(0x51623247, 0xb7d6dee8), TOBN(0x0948d927, 0x79659313),
+     TOBN(0x99700161, 0xe9ab35ed), TOBN(0x06cc32b4, 0x8ddde408),
+     TOBN(0x6f2fd664, 0x061ef338), TOBN(0x1606fa02, 0xc202e9ed),
+     TOBN(0x55388bc1, 0x929ba99b), TOBN(0xc4428c5e, 0x1e81df69),
+     TOBN(0xce2028ae, 0xf91b0b2a), TOBN(0xce870a23, 0xf03dfd3f),
+     TOBN(0x66ec2c87, 0x0affe8ed), TOBN(0xb205fb46, 0x284d0c00),
+     TOBN(0xbf5dffe7, 0x44cefa48), TOBN(0xb6fc37a8, 0xa19876d7),
+     TOBN(0xbecfa84c, 0x08b72863), TOBN(0xd7205ff5, 0x2576374f),
+     TOBN(0x80330d32, 0x8887de41), TOBN(0x5de0df0c, 0x869ea534),
+     TOBN(0x13f42753, 0x3c56ea17), TOBN(0xeb1f6069, 0x452b1a78),
+     TOBN(0x50474396, 0xe30ea15c), TOBN(0x575816a1, 0xc1494125),
+     TOBN(0xbe1ce55b, 0xfe6bb38f), TOBN(0xb901a948, 0x96ae30f7),
+     TOBN(0xe5af0f08, 0xd8fc3548), TOBN(0x5010b5d0, 0xd73bfd08),
+     TOBN(0x993d2880, 0x53fe655a), TOBN(0x99f2630b, 0x1c1309fd),
+     TOBN(0xd8677baf, 0xb4e3b76f), TOBN(0x14e51ddc, 0xb840784b),
+     TOBN(0x326c750c, 0xbf0092ce), TOBN(0xc83d306b, 0xf528320f),
+     TOBN(0xc4456715, 0x77d4715c), TOBN(0xd30019f9, 0x6b703235),
+     TOBN(0x207ccb2e, 0xd669e986), TOBN(0x57c824af, 0xf6dbfc28),
+     TOBN(0xf0eb532f, 0xd8f92a23), TOBN(0x4a557fd4, 0x9bb98fd2),
+     TOBN(0xa57acea7, 0xc1e6199a), TOBN(0x0c663820, 0x8b94b1ed),
+     TOBN(0x9b42be8f, 0xf83a9266), TOBN(0xc7741c97, 0x0101bd45),
+     TOBN(0x95770c11, 0x07bd9ceb), TOBN(0x1f50250a, 0x8b2e0744),
+     TOBN(0xf762eec8, 0x1477b654), TOBN(0xc65b900e, 0x15efe59a),
+     TOBN(0x88c96148, 0x9546a897), TOBN(0x7e8025b3, 0xc30b4d7c),
+     TOBN(0xae4065ef, 0x12045cf9), TOBN(0x6fcb2caf, 0x9ccce8bd),
+     TOBN(0x1fa0ba4e, 0xf2cf6525), TOBN(0xf683125d, 0xcb72c312),
+     TOBN(0xa01da4ea, 0xe312410e), TOBN(0x67e28677, 0x6cd8e830),
+     TOBN(0xabd95752, 0x98fb3f07), TOBN(0x05f11e11, 0xeef649a5),
+     TOBN(0xba47faef, 0x9d3472c2), TOBN(0x3adff697, 0xc77d1345),
+     TOBN(0x4761fa04, 0xdd15afee), TOBN(0x64f1f61a, 0xb9e69462),
+     TOBN(0xfa691fab, 0x9bfb9093), TOBN(0x3df8ae8f, 0xa1133dfe),
+     TOBN(0xcd5f8967, 0x58cc710d), TOBN(0xfbb88d50, 0x16c7fe79),
+     TOBN(0x8e011b4c, 0xe88c50d1), TOBN(0x7532e807, 0xa8771c4f),
+     TOBN(0x64c78a48, 0xe2278ee4), TOBN(0x0b283e83, 0x3845072a),
+     TOBN(0x98a6f291, 0x49e69274), TOBN(0xb96e9668, 0x1868b21c),
+     TOBN(0x38f0adc2, 0xb1a8908e), TOBN(0x90afcff7, 0x1feb829d),
+     TOBN(0x9915a383, 0x210b0856), TOBN(0xa5a80602, 0xdef04889),
+     TOBN(0x800e9af9, 0x7c64d509), TOBN(0x81382d0b, 0xb8996f6f),
+     TOBN(0x490eba53, 0x81927e27), TOBN(0x46c63b32, 0x4af50182),
+     TOBN(0x784c5fd9, 0xd3ad62ce), TOBN(0xe4fa1870, 0xf8ae8736),
+     TOBN(0x4ec9d0bc, 0xd7466b25), TOBN(0x84ddbe1a, 0xdb235c65),
+     TOBN(0x5e2645ee, 0x163c1688), TOBN(0x570bd00e, 0x00eba747),
+     TOBN(0xfa51b629, 0x128bfa0f), TOBN(0x92fce1bd, 0x6c1d3b68),
+     TOBN(0x3e7361dc, 0xb66778b1), TOBN(0x9c7d249d, 0x5561d2bb),
+     TOBN(0xa40b28bf, 0x0bbc6229), TOBN(0x1c83c05e, 0xdfd91497),
+     TOBN(0x5f9f5154, 0xf083df05), TOBN(0xbac38b3c, 0xeee66c9d),
+     TOBN(0xf71db7e3, 0xec0dfcfd), TOBN(0xf2ecda8e, 0x8b0a8416),
+     TOBN(0x52fddd86, 0x7812aa66), TOBN(0x2896ef10, 0x4e6f4272),
+     TOBN(0xff27186a, 0x0fe9a745), TOBN(0x08249fcd, 0x49ca70db),
+     TOBN(0x7425a2e6, 0x441cac49), TOBN(0xf4a0885a, 0xece5ff57),
+     TOBN(0x6e2cb731, 0x7d7ead58), TOBN(0xf96cf7d6, 0x1898d104),
+     TOBN(0xafe67c9d, 0x4f2c9a89), TOBN(0x89895a50, 0x1c7bf5bc),
+     TOBN(0xdc7cb8e5, 0x573cecfa), TOBN(0x66497eae, 0xd15f03e6),
+     TOBN(0x6bc0de69, 0x3f084420), TOBN(0x323b9b36, 0xacd532b0),
+     TOBN(0xcfed390a, 0x0115a3c1), TOBN(0x9414c40b, 0x2d65ca0e),
+     TOBN(0x641406bd, 0x2f530c78), TOBN(0x29369a44, 0x833438f2),
+     TOBN(0x996884f5, 0x903fa271), TOBN(0xe6da0fd2, 0xb9da921e),
+     TOBN(0xa6f2f269, 0x5db01e54), TOBN(0x1ee3e9bd, 0x6876214e),
+     TOBN(0xa26e181c, 0xe27a9497), TOBN(0x36d254e4, 0x8e215e04),
+     TOBN(0x42f32a6c, 0x252cabca), TOBN(0x99481487, 0x80b57614),
+     TOBN(0x4c4dfe69, 0x40d9cae1), TOBN(0x05869580, 0x11a10f09),
+     TOBN(0xca287b57, 0x3491b64b), TOBN(0x77862d5d, 0x3fd4a53b),
+     TOBN(0xbf94856e, 0x50349126), TOBN(0x2be30bd1, 0x71c5268f),
+     TOBN(0x10393f19, 0xcbb650a6), TOBN(0x639531fe, 0x778cf9fd),
+     TOBN(0x02556a11, 0xb2935359), TOBN(0xda38aa96, 0xaf8c126e),
+     TOBN(0x47dbe6c2, 0x0960167f), TOBN(0x37bbabb6, 0x501901cd),
+     TOBN(0xb6e979e0, 0x2c947778), TOBN(0xd69a5175, 0x7a1a1dc6),
+     TOBN(0xc3ed5095, 0x9d9faf0c), TOBN(0x4dd9c096, 0x1d5fa5f0),
+     TOBN(0xa0c4304d, 0x64f16ea8), TOBN(0x8b1cac16, 0x7e718623),
+     TOBN(0x0b576546, 0x7c67f03e), TOBN(0x559cf5ad, 0xcbd88c01),
+     TOBN(0x074877bb, 0x0e2af19a), TOBN(0x1f717ec1, 0xa1228c92),
+     TOBN(0x70bcb800, 0x326e8920), TOBN(0xec6e2c5c, 0x4f312804),
+     TOBN(0x426aea7d, 0x3fca4752), TOBN(0xf12c0949, 0x2211f62a),
+     TOBN(0x24beecd8, 0x7be7b6b5), TOBN(0xb77eaf4c, 0x36d7a27d),
+     TOBN(0x154c2781, 0xfda78fd3), TOBN(0x848a83b0, 0x264eeabe),
+     TOBN(0x81287ef0, 0x4ffe2bc4), TOBN(0x7b6d88c6, 0xb6b6fc2a),
+     TOBN(0x805fb947, 0xce417d99), TOBN(0x4b93dcc3, 0x8b916cc4),
+     TOBN(0x72e65bb3, 0x21273323), TOBN(0xbcc1badd, 0x6ea9886e),
+     TOBN(0x0e223011, 0x4bc5ee85), TOBN(0xa561be74, 0xc18ee1e4),
+     TOBN(0x762fd2d4, 0xa6bcf1f1), TOBN(0x50e6a5a4, 0x95231489),
+     TOBN(0xca96001f, 0xa00b500b), TOBN(0x5c098cfc, 0x5d7dcdf5),
+     TOBN(0xa64e2d2e, 0x8c446a85), TOBN(0xbae9bcf1, 0x971f3c62),
+     TOBN(0x4ec22683, 0x8435a2c5), TOBN(0x8ceaed6c, 0x4bad4643),
+     TOBN(0xe9f8fb47, 0xccccf4e3), TOBN(0xbd4f3fa4, 0x1ce3b21e),
+     TOBN(0xd79fb110, 0xa3db3292), TOBN(0xe28a37da, 0xb536c66a),
+     TOBN(0x279ce87b, 0x8e49e6a9), TOBN(0x70ccfe8d, 0xfdcec8e3),
+     TOBN(0x2193e4e0, 0x3ba464b2), TOBN(0x0f39d60e, 0xaca9a398),
+     TOBN(0x7d7932af, 0xf82c12ab), TOBN(0xd8ff50ed, 0x91e7e0f7),
+     TOBN(0xea961058, 0xfa28a7e0), TOBN(0xc726cf25, 0x0bf5ec74),
+     TOBN(0xe74d55c8, 0xdb229666), TOBN(0x0bd9abbf, 0xa57f5799),
+     TOBN(0x7479ef07, 0x4dfc47b3), TOBN(0xd9c65fc3, 0x0c52f91d),
+     TOBN(0x8e0283fe, 0x36a8bde2), TOBN(0xa32a8b5e, 0x7d4b7280),
+     TOBN(0x6a677c61, 0x12e83233), TOBN(0x0fbb3512, 0xdcc9bf28),
+     TOBN(0x562e8ea5, 0x0d780f61), TOBN(0x0db8b22b, 0x1dc4e89c),
+     TOBN(0x0a6fd1fb, 0x89be0144), TOBN(0x8c77d246, 0xca57113b),
+     TOBN(0x4639075d, 0xff09c91c), TOBN(0x5b47b17f, 0x5060824c),
+     TOBN(0x58aea2b0, 0x16287b52), TOBN(0xa1343520, 0xd0cd8eb0),
+     TOBN(0x6148b4d0, 0xc5d58573), TOBN(0xdd2b6170, 0x291c68ae),
+     TOBN(0xa61b3929, 0x1da3b3b7), TOBN(0x5f946d79, 0x08c4ac10),
+     TOBN(0x4105d4a5, 0x7217d583), TOBN(0x5061da3d, 0x25e6de5e),
+     TOBN(0x3113940d, 0xec1b4991), TOBN(0xf12195e1, 0x36f485ae),
+     TOBN(0xa7507fb2, 0x731a2ee0), TOBN(0x95057a8e, 0x6e9e196e),
+     TOBN(0xa3c2c911, 0x2e130136), TOBN(0x97dfbb36, 0x33c60d15),
+     TOBN(0xcaf3c581, 0xb300ee2b), TOBN(0x77f25d90, 0xf4bac8b8),
+     TOBN(0xdb1c4f98, 0x6d840cd6), TOBN(0x471d62c0, 0xe634288c),
+     TOBN(0x8ec2f85e, 0xcec8a161), TOBN(0x41f37cbc, 0xfa6f4ae2),
+     TOBN(0x6793a20f, 0x4b709985), TOBN(0x7a7bd33b, 0xefa8985b),
+     TOBN(0x2c6a3fbd, 0x938e6446), TOBN(0x19042619, 0x2a8d47c1),
+     TOBN(0x16848667, 0xcc36975f), TOBN(0x02acf168, 0x9d5f1dfb),
+     TOBN(0x62d41ad4, 0x613baa94), TOBN(0xb56fbb92, 0x9f684670),
+     TOBN(0xce610d0d, 0xe9e40569), TOBN(0x7b99c65f, 0x35489fef),
+     TOBN(0x0c88ad1b, 0x3df18b97), TOBN(0x81b7d9be, 0x5d0e9edb),
+     TOBN(0xd85218c0, 0xc716cc0a), TOBN(0xf4b5ff90, 0x85691c49),
+     TOBN(0xa4fd666b, 0xce356ac6), TOBN(0x17c72895, 0x4b327a7a),
+     TOBN(0xf93d5085, 0xda6be7de), TOBN(0xff71530e, 0x3301d34e),
+     TOBN(0x4cd96442, 0xd8f448e8), TOBN(0x9283d331, 0x2ed18ffa),
+     TOBN(0x4d33dd99, 0x2a849870), TOBN(0xa716964b, 0x41576335),
+     TOBN(0xff5e3a9b, 0x179be0e5), TOBN(0x5b9d6b1b, 0x83b13632),
+     TOBN(0x3b8bd7d4, 0xa52f313b), TOBN(0xc9dd95a0, 0x637a4660),
+     TOBN(0x30035962, 0x0b3e218f), TOBN(0xce1481a3, 0xc7b28a3c),
+     TOBN(0xab41b43a, 0x43228d83), TOBN(0x24ae1c30, 0x4ad63f99),
+     TOBN(0x8e525f1a, 0x46a51229), TOBN(0x14af860f, 0xcd26d2b4),
+     TOBN(0xd6baef61, 0x3f714aa1), TOBN(0xf51865ad, 0xeb78795e),
+     TOBN(0xd3e21fce, 0xe6a9d694), TOBN(0x82ceb1dd, 0x8a37b527)}
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_oct.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_oct.c
new file mode 100644
index 000000000..7ade1b3d2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_oct.c
@@ -0,0 +1,366 @@
+/*
+ * Copyright 2011-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/symhacks.h>
+
+#include "ec_lcl.h"
+
+int ec_GFp_simple_set_compressed_coordinates(const EC_GROUP *group,
+                                             EC_POINT *point,
+                                             const BIGNUM *x_, int y_bit,
+                                             BN_CTX *ctx)
+{
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *tmp1, *tmp2, *x, *y;
+    int ret = 0;
+
+    /* clear error queue */
+    ERR_clear_error();
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return 0;
+    }
+
+    y_bit = (y_bit != 0);
+
+    BN_CTX_start(ctx);
+    tmp1 = BN_CTX_get(ctx);
+    tmp2 = BN_CTX_get(ctx);
+    x = BN_CTX_get(ctx);
+    y = BN_CTX_get(ctx);
+    if (y == NULL)
+        goto err;
+
+    /*-
+     * Recover y.  We have a Weierstrass equation
+     *     y^2 = x^3 + a*x + b,
+     * so  y  is one of the square roots of  x^3 + a*x + b.
+     */
+
+    /* tmp1 := x^3 */
+    if (!BN_nnmod(x, x_, group->field, ctx))
+        goto err;
+    if (group->meth->field_decode == 0) {
+        /* field_{sqr,mul} work on standard representation */
+        if (!group->meth->field_sqr(group, tmp2, x_, ctx))
+            goto err;
+        if (!group->meth->field_mul(group, tmp1, tmp2, x_, ctx))
+            goto err;
+    } else {
+        if (!BN_mod_sqr(tmp2, x_, group->field, ctx))
+            goto err;
+        if (!BN_mod_mul(tmp1, tmp2, x_, group->field, ctx))
+            goto err;
+    }
+
+    /* tmp1 := tmp1 + a*x */
+    if (group->a_is_minus3) {
+        if (!BN_mod_lshift1_quick(tmp2, x, group->field))
+            goto err;
+        if (!BN_mod_add_quick(tmp2, tmp2, x, group->field))
+            goto err;
+        if (!BN_mod_sub_quick(tmp1, tmp1, tmp2, group->field))
+            goto err;
+    } else {
+        if (group->meth->field_decode) {
+            if (!group->meth->field_decode(group, tmp2, group->a, ctx))
+                goto err;
+            if (!BN_mod_mul(tmp2, tmp2, x, group->field, ctx))
+                goto err;
+        } else {
+            /* field_mul works on standard representation */
+            if (!group->meth->field_mul(group, tmp2, group->a, x, ctx))
+                goto err;
+        }
+
+        if (!BN_mod_add_quick(tmp1, tmp1, tmp2, group->field))
+            goto err;
+    }
+
+    /* tmp1 := tmp1 + b */
+    if (group->meth->field_decode) {
+        if (!group->meth->field_decode(group, tmp2, group->b, ctx))
+            goto err;
+        if (!BN_mod_add_quick(tmp1, tmp1, tmp2, group->field))
+            goto err;
+    } else {
+        if (!BN_mod_add_quick(tmp1, tmp1, group->b, group->field))
+            goto err;
+    }
+
+    if (!BN_mod_sqrt(y, tmp1, group->field, ctx)) {
+        unsigned long err = ERR_peek_last_error();
+
+        if (ERR_GET_LIB(err) == ERR_LIB_BN
+            && ERR_GET_REASON(err) == BN_R_NOT_A_SQUARE) {
+            ERR_clear_error();
+            ECerr(EC_F_EC_GFP_SIMPLE_SET_COMPRESSED_COORDINATES,
+                  EC_R_INVALID_COMPRESSED_POINT);
+        } else
+            ECerr(EC_F_EC_GFP_SIMPLE_SET_COMPRESSED_COORDINATES,
+                  ERR_R_BN_LIB);
+        goto err;
+    }
+
+    if (y_bit != BN_is_odd(y)) {
+        if (BN_is_zero(y)) {
+            int kron;
+
+            kron = BN_kronecker(x, group->field, ctx);
+            if (kron == -2)
+                goto err;
+
+            if (kron == 1)
+                ECerr(EC_F_EC_GFP_SIMPLE_SET_COMPRESSED_COORDINATES,
+                      EC_R_INVALID_COMPRESSION_BIT);
+            else
+                /*
+                 * BN_mod_sqrt() should have caught this error (not a square)
+                 */
+                ECerr(EC_F_EC_GFP_SIMPLE_SET_COMPRESSED_COORDINATES,
+                      EC_R_INVALID_COMPRESSED_POINT);
+            goto err;
+        }
+        if (!BN_usub(y, group->field, y))
+            goto err;
+    }
+    if (y_bit != BN_is_odd(y)) {
+        ECerr(EC_F_EC_GFP_SIMPLE_SET_COMPRESSED_COORDINATES,
+              ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    if (!EC_POINT_set_affine_coordinates(group, point, x, y, ctx))
+        goto err;
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+size_t ec_GFp_simple_point2oct(const EC_GROUP *group, const EC_POINT *point,
+                               point_conversion_form_t form,
+                               unsigned char *buf, size_t len, BN_CTX *ctx)
+{
+    size_t ret;
+    BN_CTX *new_ctx = NULL;
+    int used_ctx = 0;
+    BIGNUM *x, *y;
+    size_t field_len, i, skip;
+
+    if ((form != POINT_CONVERSION_COMPRESSED)
+        && (form != POINT_CONVERSION_UNCOMPRESSED)
+        && (form != POINT_CONVERSION_HYBRID)) {
+        ECerr(EC_F_EC_GFP_SIMPLE_POINT2OCT, EC_R_INVALID_FORM);
+        goto err;
+    }
+
+    if (EC_POINT_is_at_infinity(group, point)) {
+        /* encodes to a single 0 octet */
+        if (buf != NULL) {
+            if (len < 1) {
+                ECerr(EC_F_EC_GFP_SIMPLE_POINT2OCT, EC_R_BUFFER_TOO_SMALL);
+                return 0;
+            }
+            buf[0] = 0;
+        }
+        return 1;
+    }
+
+    /* ret := required output buffer length */
+    field_len = BN_num_bytes(group->field);
+    ret =
+        (form ==
+         POINT_CONVERSION_COMPRESSED) ? 1 + field_len : 1 + 2 * field_len;
+
+    /* if 'buf' is NULL, just return required length */
+    if (buf != NULL) {
+        if (len < ret) {
+            ECerr(EC_F_EC_GFP_SIMPLE_POINT2OCT, EC_R_BUFFER_TOO_SMALL);
+            goto err;
+        }
+
+        if (ctx == NULL) {
+            ctx = new_ctx = BN_CTX_new();
+            if (ctx == NULL)
+                return 0;
+        }
+
+        BN_CTX_start(ctx);
+        used_ctx = 1;
+        x = BN_CTX_get(ctx);
+        y = BN_CTX_get(ctx);
+        if (y == NULL)
+            goto err;
+
+        if (!EC_POINT_get_affine_coordinates(group, point, x, y, ctx))
+            goto err;
+
+        if ((form == POINT_CONVERSION_COMPRESSED
+             || form == POINT_CONVERSION_HYBRID) && BN_is_odd(y))
+            buf[0] = form + 1;
+        else
+            buf[0] = form;
+
+        i = 1;
+
+        skip = field_len - BN_num_bytes(x);
+        if (skip > field_len) {
+            ECerr(EC_F_EC_GFP_SIMPLE_POINT2OCT, ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        while (skip > 0) {
+            buf[i++] = 0;
+            skip--;
+        }
+        skip = BN_bn2bin(x, buf + i);
+        i += skip;
+        if (i != 1 + field_len) {
+            ECerr(EC_F_EC_GFP_SIMPLE_POINT2OCT, ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        if (form == POINT_CONVERSION_UNCOMPRESSED
+            || form == POINT_CONVERSION_HYBRID) {
+            skip = field_len - BN_num_bytes(y);
+            if (skip > field_len) {
+                ECerr(EC_F_EC_GFP_SIMPLE_POINT2OCT, ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+            while (skip > 0) {
+                buf[i++] = 0;
+                skip--;
+            }
+            skip = BN_bn2bin(y, buf + i);
+            i += skip;
+        }
+
+        if (i != ret) {
+            ECerr(EC_F_EC_GFP_SIMPLE_POINT2OCT, ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+    }
+
+    if (used_ctx)
+        BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+
+ err:
+    if (used_ctx)
+        BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return 0;
+}
+
+int ec_GFp_simple_oct2point(const EC_GROUP *group, EC_POINT *point,
+                            const unsigned char *buf, size_t len, BN_CTX *ctx)
+{
+    point_conversion_form_t form;
+    int y_bit;
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *x, *y;
+    size_t field_len, enc_len;
+    int ret = 0;
+
+    if (len == 0) {
+        ECerr(EC_F_EC_GFP_SIMPLE_OCT2POINT, EC_R_BUFFER_TOO_SMALL);
+        return 0;
+    }
+    form = buf[0];
+    y_bit = form & 1;
+    form = form & ~1U;
+    if ((form != 0) && (form != POINT_CONVERSION_COMPRESSED)
+        && (form != POINT_CONVERSION_UNCOMPRESSED)
+        && (form != POINT_CONVERSION_HYBRID)) {
+        ECerr(EC_F_EC_GFP_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING);
+        return 0;
+    }
+    if ((form == 0 || form == POINT_CONVERSION_UNCOMPRESSED) && y_bit) {
+        ECerr(EC_F_EC_GFP_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING);
+        return 0;
+    }
+
+    if (form == 0) {
+        if (len != 1) {
+            ECerr(EC_F_EC_GFP_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING);
+            return 0;
+        }
+
+        return EC_POINT_set_to_infinity(group, point);
+    }
+
+    field_len = BN_num_bytes(group->field);
+    enc_len =
+        (form ==
+         POINT_CONVERSION_COMPRESSED) ? 1 + field_len : 1 + 2 * field_len;
+
+    if (len != enc_len) {
+        ECerr(EC_F_EC_GFP_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING);
+        return 0;
+    }
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return 0;
+    }
+
+    BN_CTX_start(ctx);
+    x = BN_CTX_get(ctx);
+    y = BN_CTX_get(ctx);
+    if (y == NULL)
+        goto err;
+
+    if (!BN_bin2bn(buf + 1, field_len, x))
+        goto err;
+    if (BN_ucmp(x, group->field) >= 0) {
+        ECerr(EC_F_EC_GFP_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING);
+        goto err;
+    }
+
+    if (form == POINT_CONVERSION_COMPRESSED) {
+        if (!EC_POINT_set_compressed_coordinates(group, point, x, y_bit, ctx))
+            goto err;
+    } else {
+        if (!BN_bin2bn(buf + 1 + field_len, field_len, y))
+            goto err;
+        if (BN_ucmp(y, group->field) >= 0) {
+            ECerr(EC_F_EC_GFP_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING);
+            goto err;
+        }
+        if (form == POINT_CONVERSION_HYBRID) {
+            if (y_bit != BN_is_odd(y)) {
+                ECerr(EC_F_EC_GFP_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING);
+                goto err;
+            }
+        }
+
+        /*
+         * EC_POINT_set_affine_coordinates is responsible for checking that
+         * the point is on the curve.
+         */
+        if (!EC_POINT_set_affine_coordinates(group, point, x, y, ctx))
+            goto err;
+    }
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_smpl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_smpl.c
new file mode 100644
index 000000000..f6a6cedb0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecp_smpl.c
@@ -0,0 +1,1689 @@
+/*
+ * Copyright 2001-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/symhacks.h>
+
+#include "ec_lcl.h"
+
+const EC_METHOD *EC_GFp_simple_method(void)
+{
+    static const EC_METHOD ret = {
+        EC_FLAGS_DEFAULT_OCT,
+        NID_X9_62_prime_field,
+        ec_GFp_simple_group_init,
+        ec_GFp_simple_group_finish,
+        ec_GFp_simple_group_clear_finish,
+        ec_GFp_simple_group_copy,
+        ec_GFp_simple_group_set_curve,
+        ec_GFp_simple_group_get_curve,
+        ec_GFp_simple_group_get_degree,
+        ec_group_simple_order_bits,
+        ec_GFp_simple_group_check_discriminant,
+        ec_GFp_simple_point_init,
+        ec_GFp_simple_point_finish,
+        ec_GFp_simple_point_clear_finish,
+        ec_GFp_simple_point_copy,
+        ec_GFp_simple_point_set_to_infinity,
+        ec_GFp_simple_set_Jprojective_coordinates_GFp,
+        ec_GFp_simple_get_Jprojective_coordinates_GFp,
+        ec_GFp_simple_point_set_affine_coordinates,
+        ec_GFp_simple_point_get_affine_coordinates,
+        0, 0, 0,
+        ec_GFp_simple_add,
+        ec_GFp_simple_dbl,
+        ec_GFp_simple_invert,
+        ec_GFp_simple_is_at_infinity,
+        ec_GFp_simple_is_on_curve,
+        ec_GFp_simple_cmp,
+        ec_GFp_simple_make_affine,
+        ec_GFp_simple_points_make_affine,
+        0 /* mul */ ,
+        0 /* precompute_mult */ ,
+        0 /* have_precompute_mult */ ,
+        ec_GFp_simple_field_mul,
+        ec_GFp_simple_field_sqr,
+        0 /* field_div */ ,
+        ec_GFp_simple_field_inv,
+        0 /* field_encode */ ,
+        0 /* field_decode */ ,
+        0,                      /* field_set_to_one */
+        ec_key_simple_priv2oct,
+        ec_key_simple_oct2priv,
+        0, /* set private */
+        ec_key_simple_generate_key,
+        ec_key_simple_check_key,
+        ec_key_simple_generate_public_key,
+        0, /* keycopy */
+        0, /* keyfinish */
+        ecdh_simple_compute_key,
+        0, /* field_inverse_mod_ord */
+        ec_GFp_simple_blind_coordinates,
+        ec_GFp_simple_ladder_pre,
+        ec_GFp_simple_ladder_step,
+        ec_GFp_simple_ladder_post
+    };
+
+    return &ret;
+}
+
+/*
+ * Most method functions in this file are designed to work with
+ * non-trivial representations of field elements if necessary
+ * (see ecp_mont.c): while standard modular addition and subtraction
+ * are used, the field_mul and field_sqr methods will be used for
+ * multiplication, and field_encode and field_decode (if defined)
+ * will be used for converting between representations.
+ *
+ * Functions ec_GFp_simple_points_make_affine() and
+ * ec_GFp_simple_point_get_affine_coordinates() specifically assume
+ * that if a non-trivial representation is used, it is a Montgomery
+ * representation (i.e. 'encoding' means multiplying by some factor R).
+ */
+
+int ec_GFp_simple_group_init(EC_GROUP *group)
+{
+    group->field = BN_new();
+    group->a = BN_new();
+    group->b = BN_new();
+    if (group->field == NULL || group->a == NULL || group->b == NULL) {
+        BN_free(group->field);
+        BN_free(group->a);
+        BN_free(group->b);
+        return 0;
+    }
+    group->a_is_minus3 = 0;
+    return 1;
+}
+
+void ec_GFp_simple_group_finish(EC_GROUP *group)
+{
+    BN_free(group->field);
+    BN_free(group->a);
+    BN_free(group->b);
+}
+
+void ec_GFp_simple_group_clear_finish(EC_GROUP *group)
+{
+    BN_clear_free(group->field);
+    BN_clear_free(group->a);
+    BN_clear_free(group->b);
+}
+
+int ec_GFp_simple_group_copy(EC_GROUP *dest, const EC_GROUP *src)
+{
+    if (!BN_copy(dest->field, src->field))
+        return 0;
+    if (!BN_copy(dest->a, src->a))
+        return 0;
+    if (!BN_copy(dest->b, src->b))
+        return 0;
+
+    dest->a_is_minus3 = src->a_is_minus3;
+
+    return 1;
+}
+
+int ec_GFp_simple_group_set_curve(EC_GROUP *group,
+                                  const BIGNUM *p, const BIGNUM *a,
+                                  const BIGNUM *b, BN_CTX *ctx)
+{
+    int ret = 0;
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *tmp_a;
+
+    /* p must be a prime > 3 */
+    if (BN_num_bits(p) <= 2 || !BN_is_odd(p)) {
+        ECerr(EC_F_EC_GFP_SIMPLE_GROUP_SET_CURVE, EC_R_INVALID_FIELD);
+        return 0;
+    }
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return 0;
+    }
+
+    BN_CTX_start(ctx);
+    tmp_a = BN_CTX_get(ctx);
+    if (tmp_a == NULL)
+        goto err;
+
+    /* group->field */
+    if (!BN_copy(group->field, p))
+        goto err;
+    BN_set_negative(group->field, 0);
+
+    /* group->a */
+    if (!BN_nnmod(tmp_a, a, p, ctx))
+        goto err;
+    if (group->meth->field_encode) {
+        if (!group->meth->field_encode(group, group->a, tmp_a, ctx))
+            goto err;
+    } else if (!BN_copy(group->a, tmp_a))
+        goto err;
+
+    /* group->b */
+    if (!BN_nnmod(group->b, b, p, ctx))
+        goto err;
+    if (group->meth->field_encode)
+        if (!group->meth->field_encode(group, group->b, group->b, ctx))
+            goto err;
+
+    /* group->a_is_minus3 */
+    if (!BN_add_word(tmp_a, 3))
+        goto err;
+    group->a_is_minus3 = (0 == BN_cmp(tmp_a, group->field));
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+int ec_GFp_simple_group_get_curve(const EC_GROUP *group, BIGNUM *p, BIGNUM *a,
+                                  BIGNUM *b, BN_CTX *ctx)
+{
+    int ret = 0;
+    BN_CTX *new_ctx = NULL;
+
+    if (p != NULL) {
+        if (!BN_copy(p, group->field))
+            return 0;
+    }
+
+    if (a != NULL || b != NULL) {
+        if (group->meth->field_decode) {
+            if (ctx == NULL) {
+                ctx = new_ctx = BN_CTX_new();
+                if (ctx == NULL)
+                    return 0;
+            }
+            if (a != NULL) {
+                if (!group->meth->field_decode(group, a, group->a, ctx))
+                    goto err;
+            }
+            if (b != NULL) {
+                if (!group->meth->field_decode(group, b, group->b, ctx))
+                    goto err;
+            }
+        } else {
+            if (a != NULL) {
+                if (!BN_copy(a, group->a))
+                    goto err;
+            }
+            if (b != NULL) {
+                if (!BN_copy(b, group->b))
+                    goto err;
+            }
+        }
+    }
+
+    ret = 1;
+
+ err:
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+int ec_GFp_simple_group_get_degree(const EC_GROUP *group)
+{
+    return BN_num_bits(group->field);
+}
+
+int ec_GFp_simple_group_check_discriminant(const EC_GROUP *group, BN_CTX *ctx)
+{
+    int ret = 0;
+    BIGNUM *a, *b, *order, *tmp_1, *tmp_2;
+    const BIGNUM *p = group->field;
+    BN_CTX *new_ctx = NULL;
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL) {
+            ECerr(EC_F_EC_GFP_SIMPLE_GROUP_CHECK_DISCRIMINANT,
+                  ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+    BN_CTX_start(ctx);
+    a = BN_CTX_get(ctx);
+    b = BN_CTX_get(ctx);
+    tmp_1 = BN_CTX_get(ctx);
+    tmp_2 = BN_CTX_get(ctx);
+    order = BN_CTX_get(ctx);
+    if (order == NULL)
+        goto err;
+
+    if (group->meth->field_decode) {
+        if (!group->meth->field_decode(group, a, group->a, ctx))
+            goto err;
+        if (!group->meth->field_decode(group, b, group->b, ctx))
+            goto err;
+    } else {
+        if (!BN_copy(a, group->a))
+            goto err;
+        if (!BN_copy(b, group->b))
+            goto err;
+    }
+
+    /*-
+     * check the discriminant:
+     * y^2 = x^3 + a*x + b is an elliptic curve <=> 4*a^3 + 27*b^2 != 0 (mod p)
+     * 0 =< a, b < p
+     */
+    if (BN_is_zero(a)) {
+        if (BN_is_zero(b))
+            goto err;
+    } else if (!BN_is_zero(b)) {
+        if (!BN_mod_sqr(tmp_1, a, p, ctx))
+            goto err;
+        if (!BN_mod_mul(tmp_2, tmp_1, a, p, ctx))
+            goto err;
+        if (!BN_lshift(tmp_1, tmp_2, 2))
+            goto err;
+        /* tmp_1 = 4*a^3 */
+
+        if (!BN_mod_sqr(tmp_2, b, p, ctx))
+            goto err;
+        if (!BN_mul_word(tmp_2, 27))
+            goto err;
+        /* tmp_2 = 27*b^2 */
+
+        if (!BN_mod_add(a, tmp_1, tmp_2, p, ctx))
+            goto err;
+        if (BN_is_zero(a))
+            goto err;
+    }
+    ret = 1;
+
+ err:
+    if (ctx != NULL)
+        BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+int ec_GFp_simple_point_init(EC_POINT *point)
+{
+    point->X = BN_new();
+    point->Y = BN_new();
+    point->Z = BN_new();
+    point->Z_is_one = 0;
+
+    if (point->X == NULL || point->Y == NULL || point->Z == NULL) {
+        BN_free(point->X);
+        BN_free(point->Y);
+        BN_free(point->Z);
+        return 0;
+    }
+    return 1;
+}
+
+void ec_GFp_simple_point_finish(EC_POINT *point)
+{
+    BN_free(point->X);
+    BN_free(point->Y);
+    BN_free(point->Z);
+}
+
+void ec_GFp_simple_point_clear_finish(EC_POINT *point)
+{
+    BN_clear_free(point->X);
+    BN_clear_free(point->Y);
+    BN_clear_free(point->Z);
+    point->Z_is_one = 0;
+}
+
+int ec_GFp_simple_point_copy(EC_POINT *dest, const EC_POINT *src)
+{
+    if (!BN_copy(dest->X, src->X))
+        return 0;
+    if (!BN_copy(dest->Y, src->Y))
+        return 0;
+    if (!BN_copy(dest->Z, src->Z))
+        return 0;
+    dest->Z_is_one = src->Z_is_one;
+    dest->curve_name = src->curve_name;
+
+    return 1;
+}
+
+int ec_GFp_simple_point_set_to_infinity(const EC_GROUP *group,
+                                        EC_POINT *point)
+{
+    point->Z_is_one = 0;
+    BN_zero(point->Z);
+    return 1;
+}
+
+int ec_GFp_simple_set_Jprojective_coordinates_GFp(const EC_GROUP *group,
+                                                  EC_POINT *point,
+                                                  const BIGNUM *x,
+                                                  const BIGNUM *y,
+                                                  const BIGNUM *z,
+                                                  BN_CTX *ctx)
+{
+    BN_CTX *new_ctx = NULL;
+    int ret = 0;
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return 0;
+    }
+
+    if (x != NULL) {
+        if (!BN_nnmod(point->X, x, group->field, ctx))
+            goto err;
+        if (group->meth->field_encode) {
+            if (!group->meth->field_encode(group, point->X, point->X, ctx))
+                goto err;
+        }
+    }
+
+    if (y != NULL) {
+        if (!BN_nnmod(point->Y, y, group->field, ctx))
+            goto err;
+        if (group->meth->field_encode) {
+            if (!group->meth->field_encode(group, point->Y, point->Y, ctx))
+                goto err;
+        }
+    }
+
+    if (z != NULL) {
+        int Z_is_one;
+
+        if (!BN_nnmod(point->Z, z, group->field, ctx))
+            goto err;
+        Z_is_one = BN_is_one(point->Z);
+        if (group->meth->field_encode) {
+            if (Z_is_one && (group->meth->field_set_to_one != 0)) {
+                if (!group->meth->field_set_to_one(group, point->Z, ctx))
+                    goto err;
+            } else {
+                if (!group->
+                    meth->field_encode(group, point->Z, point->Z, ctx))
+                    goto err;
+            }
+        }
+        point->Z_is_one = Z_is_one;
+    }
+
+    ret = 1;
+
+ err:
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+int ec_GFp_simple_get_Jprojective_coordinates_GFp(const EC_GROUP *group,
+                                                  const EC_POINT *point,
+                                                  BIGNUM *x, BIGNUM *y,
+                                                  BIGNUM *z, BN_CTX *ctx)
+{
+    BN_CTX *new_ctx = NULL;
+    int ret = 0;
+
+    if (group->meth->field_decode != 0) {
+        if (ctx == NULL) {
+            ctx = new_ctx = BN_CTX_new();
+            if (ctx == NULL)
+                return 0;
+        }
+
+        if (x != NULL) {
+            if (!group->meth->field_decode(group, x, point->X, ctx))
+                goto err;
+        }
+        if (y != NULL) {
+            if (!group->meth->field_decode(group, y, point->Y, ctx))
+                goto err;
+        }
+        if (z != NULL) {
+            if (!group->meth->field_decode(group, z, point->Z, ctx))
+                goto err;
+        }
+    } else {
+        if (x != NULL) {
+            if (!BN_copy(x, point->X))
+                goto err;
+        }
+        if (y != NULL) {
+            if (!BN_copy(y, point->Y))
+                goto err;
+        }
+        if (z != NULL) {
+            if (!BN_copy(z, point->Z))
+                goto err;
+        }
+    }
+
+    ret = 1;
+
+ err:
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+int ec_GFp_simple_point_set_affine_coordinates(const EC_GROUP *group,
+                                               EC_POINT *point,
+                                               const BIGNUM *x,
+                                               const BIGNUM *y, BN_CTX *ctx)
+{
+    if (x == NULL || y == NULL) {
+        /*
+         * unlike for projective coordinates, we do not tolerate this
+         */
+        ECerr(EC_F_EC_GFP_SIMPLE_POINT_SET_AFFINE_COORDINATES,
+              ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+
+    return EC_POINT_set_Jprojective_coordinates_GFp(group, point, x, y,
+                                                    BN_value_one(), ctx);
+}
+
+int ec_GFp_simple_point_get_affine_coordinates(const EC_GROUP *group,
+                                               const EC_POINT *point,
+                                               BIGNUM *x, BIGNUM *y,
+                                               BN_CTX *ctx)
+{
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *Z, *Z_1, *Z_2, *Z_3;
+    const BIGNUM *Z_;
+    int ret = 0;
+
+    if (EC_POINT_is_at_infinity(group, point)) {
+        ECerr(EC_F_EC_GFP_SIMPLE_POINT_GET_AFFINE_COORDINATES,
+              EC_R_POINT_AT_INFINITY);
+        return 0;
+    }
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return 0;
+    }
+
+    BN_CTX_start(ctx);
+    Z = BN_CTX_get(ctx);
+    Z_1 = BN_CTX_get(ctx);
+    Z_2 = BN_CTX_get(ctx);
+    Z_3 = BN_CTX_get(ctx);
+    if (Z_3 == NULL)
+        goto err;
+
+    /* transform  (X, Y, Z)  into  (x, y) := (X/Z^2, Y/Z^3) */
+
+    if (group->meth->field_decode) {
+        if (!group->meth->field_decode(group, Z, point->Z, ctx))
+            goto err;
+        Z_ = Z;
+    } else {
+        Z_ = point->Z;
+    }
+
+    if (BN_is_one(Z_)) {
+        if (group->meth->field_decode) {
+            if (x != NULL) {
+                if (!group->meth->field_decode(group, x, point->X, ctx))
+                    goto err;
+            }
+            if (y != NULL) {
+                if (!group->meth->field_decode(group, y, point->Y, ctx))
+                    goto err;
+            }
+        } else {
+            if (x != NULL) {
+                if (!BN_copy(x, point->X))
+                    goto err;
+            }
+            if (y != NULL) {
+                if (!BN_copy(y, point->Y))
+                    goto err;
+            }
+        }
+    } else {
+        if (!group->meth->field_inv(group, Z_1, Z_, ctx)) {
+            ECerr(EC_F_EC_GFP_SIMPLE_POINT_GET_AFFINE_COORDINATES,
+                  ERR_R_BN_LIB);
+            goto err;
+        }
+
+        if (group->meth->field_encode == 0) {
+            /* field_sqr works on standard representation */
+            if (!group->meth->field_sqr(group, Z_2, Z_1, ctx))
+                goto err;
+        } else {
+            if (!BN_mod_sqr(Z_2, Z_1, group->field, ctx))
+                goto err;
+        }
+
+        if (x != NULL) {
+            /*
+             * in the Montgomery case, field_mul will cancel out Montgomery
+             * factor in X:
+             */
+            if (!group->meth->field_mul(group, x, point->X, Z_2, ctx))
+                goto err;
+        }
+
+        if (y != NULL) {
+            if (group->meth->field_encode == 0) {
+                /*
+                 * field_mul works on standard representation
+                 */
+                if (!group->meth->field_mul(group, Z_3, Z_2, Z_1, ctx))
+                    goto err;
+            } else {
+                if (!BN_mod_mul(Z_3, Z_2, Z_1, group->field, ctx))
+                    goto err;
+            }
+
+            /*
+             * in the Montgomery case, field_mul will cancel out Montgomery
+             * factor in Y:
+             */
+            if (!group->meth->field_mul(group, y, point->Y, Z_3, ctx))
+                goto err;
+        }
+    }
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+int ec_GFp_simple_add(const EC_GROUP *group, EC_POINT *r, const EC_POINT *a,
+                      const EC_POINT *b, BN_CTX *ctx)
+{
+    int (*field_mul) (const EC_GROUP *, BIGNUM *, const BIGNUM *,
+                      const BIGNUM *, BN_CTX *);
+    int (*field_sqr) (const EC_GROUP *, BIGNUM *, const BIGNUM *, BN_CTX *);
+    const BIGNUM *p;
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *n0, *n1, *n2, *n3, *n4, *n5, *n6;
+    int ret = 0;
+
+    if (a == b)
+        return EC_POINT_dbl(group, r, a, ctx);
+    if (EC_POINT_is_at_infinity(group, a))
+        return EC_POINT_copy(r, b);
+    if (EC_POINT_is_at_infinity(group, b))
+        return EC_POINT_copy(r, a);
+
+    field_mul = group->meth->field_mul;
+    field_sqr = group->meth->field_sqr;
+    p = group->field;
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return 0;
+    }
+
+    BN_CTX_start(ctx);
+    n0 = BN_CTX_get(ctx);
+    n1 = BN_CTX_get(ctx);
+    n2 = BN_CTX_get(ctx);
+    n3 = BN_CTX_get(ctx);
+    n4 = BN_CTX_get(ctx);
+    n5 = BN_CTX_get(ctx);
+    n6 = BN_CTX_get(ctx);
+    if (n6 == NULL)
+        goto end;
+
+    /*
+     * Note that in this function we must not read components of 'a' or 'b'
+     * once we have written the corresponding components of 'r'. ('r' might
+     * be one of 'a' or 'b'.)
+     */
+
+    /* n1, n2 */
+    if (b->Z_is_one) {
+        if (!BN_copy(n1, a->X))
+            goto end;
+        if (!BN_copy(n2, a->Y))
+            goto end;
+        /* n1 = X_a */
+        /* n2 = Y_a */
+    } else {
+        if (!field_sqr(group, n0, b->Z, ctx))
+            goto end;
+        if (!field_mul(group, n1, a->X, n0, ctx))
+            goto end;
+        /* n1 = X_a * Z_b^2 */
+
+        if (!field_mul(group, n0, n0, b->Z, ctx))
+            goto end;
+        if (!field_mul(group, n2, a->Y, n0, ctx))
+            goto end;
+        /* n2 = Y_a * Z_b^3 */
+    }
+
+    /* n3, n4 */
+    if (a->Z_is_one) {
+        if (!BN_copy(n3, b->X))
+            goto end;
+        if (!BN_copy(n4, b->Y))
+            goto end;
+        /* n3 = X_b */
+        /* n4 = Y_b */
+    } else {
+        if (!field_sqr(group, n0, a->Z, ctx))
+            goto end;
+        if (!field_mul(group, n3, b->X, n0, ctx))
+            goto end;
+        /* n3 = X_b * Z_a^2 */
+
+        if (!field_mul(group, n0, n0, a->Z, ctx))
+            goto end;
+        if (!field_mul(group, n4, b->Y, n0, ctx))
+            goto end;
+        /* n4 = Y_b * Z_a^3 */
+    }
+
+    /* n5, n6 */
+    if (!BN_mod_sub_quick(n5, n1, n3, p))
+        goto end;
+    if (!BN_mod_sub_quick(n6, n2, n4, p))
+        goto end;
+    /* n5 = n1 - n3 */
+    /* n6 = n2 - n4 */
+
+    if (BN_is_zero(n5)) {
+        if (BN_is_zero(n6)) {
+            /* a is the same point as b */
+            BN_CTX_end(ctx);
+            ret = EC_POINT_dbl(group, r, a, ctx);
+            ctx = NULL;
+            goto end;
+        } else {
+            /* a is the inverse of b */
+            BN_zero(r->Z);
+            r->Z_is_one = 0;
+            ret = 1;
+            goto end;
+        }
+    }
+
+    /* 'n7', 'n8' */
+    if (!BN_mod_add_quick(n1, n1, n3, p))
+        goto end;
+    if (!BN_mod_add_quick(n2, n2, n4, p))
+        goto end;
+    /* 'n7' = n1 + n3 */
+    /* 'n8' = n2 + n4 */
+
+    /* Z_r */
+    if (a->Z_is_one && b->Z_is_one) {
+        if (!BN_copy(r->Z, n5))
+            goto end;
+    } else {
+        if (a->Z_is_one) {
+            if (!BN_copy(n0, b->Z))
+                goto end;
+        } else if (b->Z_is_one) {
+            if (!BN_copy(n0, a->Z))
+                goto end;
+        } else {
+            if (!field_mul(group, n0, a->Z, b->Z, ctx))
+                goto end;
+        }
+        if (!field_mul(group, r->Z, n0, n5, ctx))
+            goto end;
+    }
+    r->Z_is_one = 0;
+    /* Z_r = Z_a * Z_b * n5 */
+
+    /* X_r */
+    if (!field_sqr(group, n0, n6, ctx))
+        goto end;
+    if (!field_sqr(group, n4, n5, ctx))
+        goto end;
+    if (!field_mul(group, n3, n1, n4, ctx))
+        goto end;
+    if (!BN_mod_sub_quick(r->X, n0, n3, p))
+        goto end;
+    /* X_r = n6^2 - n5^2 * 'n7' */
+
+    /* 'n9' */
+    if (!BN_mod_lshift1_quick(n0, r->X, p))
+        goto end;
+    if (!BN_mod_sub_quick(n0, n3, n0, p))
+        goto end;
+    /* n9 = n5^2 * 'n7' - 2 * X_r */
+
+    /* Y_r */
+    if (!field_mul(group, n0, n0, n6, ctx))
+        goto end;
+    if (!field_mul(group, n5, n4, n5, ctx))
+        goto end;               /* now n5 is n5^3 */
+    if (!field_mul(group, n1, n2, n5, ctx))
+        goto end;
+    if (!BN_mod_sub_quick(n0, n0, n1, p))
+        goto end;
+    if (BN_is_odd(n0))
+        if (!BN_add(n0, n0, p))
+            goto end;
+    /* now  0 <= n0 < 2*p,  and n0 is even */
+    if (!BN_rshift1(r->Y, n0))
+        goto end;
+    /* Y_r = (n6 * 'n9' - 'n8' * 'n5^3') / 2 */
+
+    ret = 1;
+
+ end:
+    if (ctx)                    /* otherwise we already called BN_CTX_end */
+        BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+int ec_GFp_simple_dbl(const EC_GROUP *group, EC_POINT *r, const EC_POINT *a,
+                      BN_CTX *ctx)
+{
+    int (*field_mul) (const EC_GROUP *, BIGNUM *, const BIGNUM *,
+                      const BIGNUM *, BN_CTX *);
+    int (*field_sqr) (const EC_GROUP *, BIGNUM *, const BIGNUM *, BN_CTX *);
+    const BIGNUM *p;
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *n0, *n1, *n2, *n3;
+    int ret = 0;
+
+    if (EC_POINT_is_at_infinity(group, a)) {
+        BN_zero(r->Z);
+        r->Z_is_one = 0;
+        return 1;
+    }
+
+    field_mul = group->meth->field_mul;
+    field_sqr = group->meth->field_sqr;
+    p = group->field;
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return 0;
+    }
+
+    BN_CTX_start(ctx);
+    n0 = BN_CTX_get(ctx);
+    n1 = BN_CTX_get(ctx);
+    n2 = BN_CTX_get(ctx);
+    n3 = BN_CTX_get(ctx);
+    if (n3 == NULL)
+        goto err;
+
+    /*
+     * Note that in this function we must not read components of 'a' once we
+     * have written the corresponding components of 'r'. ('r' might the same
+     * as 'a'.)
+     */
+
+    /* n1 */
+    if (a->Z_is_one) {
+        if (!field_sqr(group, n0, a->X, ctx))
+            goto err;
+        if (!BN_mod_lshift1_quick(n1, n0, p))
+            goto err;
+        if (!BN_mod_add_quick(n0, n0, n1, p))
+            goto err;
+        if (!BN_mod_add_quick(n1, n0, group->a, p))
+            goto err;
+        /* n1 = 3 * X_a^2 + a_curve */
+    } else if (group->a_is_minus3) {
+        if (!field_sqr(group, n1, a->Z, ctx))
+            goto err;
+        if (!BN_mod_add_quick(n0, a->X, n1, p))
+            goto err;
+        if (!BN_mod_sub_quick(n2, a->X, n1, p))
+            goto err;
+        if (!field_mul(group, n1, n0, n2, ctx))
+            goto err;
+        if (!BN_mod_lshift1_quick(n0, n1, p))
+            goto err;
+        if (!BN_mod_add_quick(n1, n0, n1, p))
+            goto err;
+        /*-
+         * n1 = 3 * (X_a + Z_a^2) * (X_a - Z_a^2)
+         *    = 3 * X_a^2 - 3 * Z_a^4
+         */
+    } else {
+        if (!field_sqr(group, n0, a->X, ctx))
+            goto err;
+        if (!BN_mod_lshift1_quick(n1, n0, p))
+            goto err;
+        if (!BN_mod_add_quick(n0, n0, n1, p))
+            goto err;
+        if (!field_sqr(group, n1, a->Z, ctx))
+            goto err;
+        if (!field_sqr(group, n1, n1, ctx))
+            goto err;
+        if (!field_mul(group, n1, n1, group->a, ctx))
+            goto err;
+        if (!BN_mod_add_quick(n1, n1, n0, p))
+            goto err;
+        /* n1 = 3 * X_a^2 + a_curve * Z_a^4 */
+    }
+
+    /* Z_r */
+    if (a->Z_is_one) {
+        if (!BN_copy(n0, a->Y))
+            goto err;
+    } else {
+        if (!field_mul(group, n0, a->Y, a->Z, ctx))
+            goto err;
+    }
+    if (!BN_mod_lshift1_quick(r->Z, n0, p))
+        goto err;
+    r->Z_is_one = 0;
+    /* Z_r = 2 * Y_a * Z_a */
+
+    /* n2 */
+    if (!field_sqr(group, n3, a->Y, ctx))
+        goto err;
+    if (!field_mul(group, n2, a->X, n3, ctx))
+        goto err;
+    if (!BN_mod_lshift_quick(n2, n2, 2, p))
+        goto err;
+    /* n2 = 4 * X_a * Y_a^2 */
+
+    /* X_r */
+    if (!BN_mod_lshift1_quick(n0, n2, p))
+        goto err;
+    if (!field_sqr(group, r->X, n1, ctx))
+        goto err;
+    if (!BN_mod_sub_quick(r->X, r->X, n0, p))
+        goto err;
+    /* X_r = n1^2 - 2 * n2 */
+
+    /* n3 */
+    if (!field_sqr(group, n0, n3, ctx))
+        goto err;
+    if (!BN_mod_lshift_quick(n3, n0, 3, p))
+        goto err;
+    /* n3 = 8 * Y_a^4 */
+
+    /* Y_r */
+    if (!BN_mod_sub_quick(n0, n2, r->X, p))
+        goto err;
+    if (!field_mul(group, n0, n1, n0, ctx))
+        goto err;
+    if (!BN_mod_sub_quick(r->Y, n0, n3, p))
+        goto err;
+    /* Y_r = n1 * (n2 - X_r) - n3 */
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+int ec_GFp_simple_invert(const EC_GROUP *group, EC_POINT *point, BN_CTX *ctx)
+{
+    if (EC_POINT_is_at_infinity(group, point) || BN_is_zero(point->Y))
+        /* point is its own inverse */
+        return 1;
+
+    return BN_usub(point->Y, group->field, point->Y);
+}
+
+int ec_GFp_simple_is_at_infinity(const EC_GROUP *group, const EC_POINT *point)
+{
+    return BN_is_zero(point->Z);
+}
+
+int ec_GFp_simple_is_on_curve(const EC_GROUP *group, const EC_POINT *point,
+                              BN_CTX *ctx)
+{
+    int (*field_mul) (const EC_GROUP *, BIGNUM *, const BIGNUM *,
+                      const BIGNUM *, BN_CTX *);
+    int (*field_sqr) (const EC_GROUP *, BIGNUM *, const BIGNUM *, BN_CTX *);
+    const BIGNUM *p;
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *rh, *tmp, *Z4, *Z6;
+    int ret = -1;
+
+    if (EC_POINT_is_at_infinity(group, point))
+        return 1;
+
+    field_mul = group->meth->field_mul;
+    field_sqr = group->meth->field_sqr;
+    p = group->field;
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return -1;
+    }
+
+    BN_CTX_start(ctx);
+    rh = BN_CTX_get(ctx);
+    tmp = BN_CTX_get(ctx);
+    Z4 = BN_CTX_get(ctx);
+    Z6 = BN_CTX_get(ctx);
+    if (Z6 == NULL)
+        goto err;
+
+    /*-
+     * We have a curve defined by a Weierstrass equation
+     *      y^2 = x^3 + a*x + b.
+     * The point to consider is given in Jacobian projective coordinates
+     * where  (X, Y, Z)  represents  (x, y) = (X/Z^2, Y/Z^3).
+     * Substituting this and multiplying by  Z^6  transforms the above equation into
+     *      Y^2 = X^3 + a*X*Z^4 + b*Z^6.
+     * To test this, we add up the right-hand side in 'rh'.
+     */
+
+    /* rh := X^2 */
+    if (!field_sqr(group, rh, point->X, ctx))
+        goto err;
+
+    if (!point->Z_is_one) {
+        if (!field_sqr(group, tmp, point->Z, ctx))
+            goto err;
+        if (!field_sqr(group, Z4, tmp, ctx))
+            goto err;
+        if (!field_mul(group, Z6, Z4, tmp, ctx))
+            goto err;
+
+        /* rh := (rh + a*Z^4)*X */
+        if (group->a_is_minus3) {
+            if (!BN_mod_lshift1_quick(tmp, Z4, p))
+                goto err;
+            if (!BN_mod_add_quick(tmp, tmp, Z4, p))
+                goto err;
+            if (!BN_mod_sub_quick(rh, rh, tmp, p))
+                goto err;
+            if (!field_mul(group, rh, rh, point->X, ctx))
+                goto err;
+        } else {
+            if (!field_mul(group, tmp, Z4, group->a, ctx))
+                goto err;
+            if (!BN_mod_add_quick(rh, rh, tmp, p))
+                goto err;
+            if (!field_mul(group, rh, rh, point->X, ctx))
+                goto err;
+        }
+
+        /* rh := rh + b*Z^6 */
+        if (!field_mul(group, tmp, group->b, Z6, ctx))
+            goto err;
+        if (!BN_mod_add_quick(rh, rh, tmp, p))
+            goto err;
+    } else {
+        /* point->Z_is_one */
+
+        /* rh := (rh + a)*X */
+        if (!BN_mod_add_quick(rh, rh, group->a, p))
+            goto err;
+        if (!field_mul(group, rh, rh, point->X, ctx))
+            goto err;
+        /* rh := rh + b */
+        if (!BN_mod_add_quick(rh, rh, group->b, p))
+            goto err;
+    }
+
+    /* 'lh' := Y^2 */
+    if (!field_sqr(group, tmp, point->Y, ctx))
+        goto err;
+
+    ret = (0 == BN_ucmp(tmp, rh));
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+int ec_GFp_simple_cmp(const EC_GROUP *group, const EC_POINT *a,
+                      const EC_POINT *b, BN_CTX *ctx)
+{
+    /*-
+     * return values:
+     *  -1   error
+     *   0   equal (in affine coordinates)
+     *   1   not equal
+     */
+
+    int (*field_mul) (const EC_GROUP *, BIGNUM *, const BIGNUM *,
+                      const BIGNUM *, BN_CTX *);
+    int (*field_sqr) (const EC_GROUP *, BIGNUM *, const BIGNUM *, BN_CTX *);
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *tmp1, *tmp2, *Za23, *Zb23;
+    const BIGNUM *tmp1_, *tmp2_;
+    int ret = -1;
+
+    if (EC_POINT_is_at_infinity(group, a)) {
+        return EC_POINT_is_at_infinity(group, b) ? 0 : 1;
+    }
+
+    if (EC_POINT_is_at_infinity(group, b))
+        return 1;
+
+    if (a->Z_is_one && b->Z_is_one) {
+        return ((BN_cmp(a->X, b->X) == 0) && BN_cmp(a->Y, b->Y) == 0) ? 0 : 1;
+    }
+
+    field_mul = group->meth->field_mul;
+    field_sqr = group->meth->field_sqr;
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return -1;
+    }
+
+    BN_CTX_start(ctx);
+    tmp1 = BN_CTX_get(ctx);
+    tmp2 = BN_CTX_get(ctx);
+    Za23 = BN_CTX_get(ctx);
+    Zb23 = BN_CTX_get(ctx);
+    if (Zb23 == NULL)
+        goto end;
+
+    /*-
+     * We have to decide whether
+     *     (X_a/Z_a^2, Y_a/Z_a^3) = (X_b/Z_b^2, Y_b/Z_b^3),
+     * or equivalently, whether
+     *     (X_a*Z_b^2, Y_a*Z_b^3) = (X_b*Z_a^2, Y_b*Z_a^3).
+     */
+
+    if (!b->Z_is_one) {
+        if (!field_sqr(group, Zb23, b->Z, ctx))
+            goto end;
+        if (!field_mul(group, tmp1, a->X, Zb23, ctx))
+            goto end;
+        tmp1_ = tmp1;
+    } else
+        tmp1_ = a->X;
+    if (!a->Z_is_one) {
+        if (!field_sqr(group, Za23, a->Z, ctx))
+            goto end;
+        if (!field_mul(group, tmp2, b->X, Za23, ctx))
+            goto end;
+        tmp2_ = tmp2;
+    } else
+        tmp2_ = b->X;
+
+    /* compare  X_a*Z_b^2  with  X_b*Z_a^2 */
+    if (BN_cmp(tmp1_, tmp2_) != 0) {
+        ret = 1;                /* points differ */
+        goto end;
+    }
+
+    if (!b->Z_is_one) {
+        if (!field_mul(group, Zb23, Zb23, b->Z, ctx))
+            goto end;
+        if (!field_mul(group, tmp1, a->Y, Zb23, ctx))
+            goto end;
+        /* tmp1_ = tmp1 */
+    } else
+        tmp1_ = a->Y;
+    if (!a->Z_is_one) {
+        if (!field_mul(group, Za23, Za23, a->Z, ctx))
+            goto end;
+        if (!field_mul(group, tmp2, b->Y, Za23, ctx))
+            goto end;
+        /* tmp2_ = tmp2 */
+    } else
+        tmp2_ = b->Y;
+
+    /* compare  Y_a*Z_b^3  with  Y_b*Z_a^3 */
+    if (BN_cmp(tmp1_, tmp2_) != 0) {
+        ret = 1;                /* points differ */
+        goto end;
+    }
+
+    /* points are equal */
+    ret = 0;
+
+ end:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+int ec_GFp_simple_make_affine(const EC_GROUP *group, EC_POINT *point,
+                              BN_CTX *ctx)
+{
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *x, *y;
+    int ret = 0;
+
+    if (point->Z_is_one || EC_POINT_is_at_infinity(group, point))
+        return 1;
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return 0;
+    }
+
+    BN_CTX_start(ctx);
+    x = BN_CTX_get(ctx);
+    y = BN_CTX_get(ctx);
+    if (y == NULL)
+        goto err;
+
+    if (!EC_POINT_get_affine_coordinates(group, point, x, y, ctx))
+        goto err;
+    if (!EC_POINT_set_affine_coordinates(group, point, x, y, ctx))
+        goto err;
+    if (!point->Z_is_one) {
+        ECerr(EC_F_EC_GFP_SIMPLE_MAKE_AFFINE, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+int ec_GFp_simple_points_make_affine(const EC_GROUP *group, size_t num,
+                                     EC_POINT *points[], BN_CTX *ctx)
+{
+    BN_CTX *new_ctx = NULL;
+    BIGNUM *tmp, *tmp_Z;
+    BIGNUM **prod_Z = NULL;
+    size_t i;
+    int ret = 0;
+
+    if (num == 0)
+        return 1;
+
+    if (ctx == NULL) {
+        ctx = new_ctx = BN_CTX_new();
+        if (ctx == NULL)
+            return 0;
+    }
+
+    BN_CTX_start(ctx);
+    tmp = BN_CTX_get(ctx);
+    tmp_Z = BN_CTX_get(ctx);
+    if (tmp_Z == NULL)
+        goto err;
+
+    prod_Z = OPENSSL_malloc(num * sizeof(prod_Z[0]));
+    if (prod_Z == NULL)
+        goto err;
+    for (i = 0; i < num; i++) {
+        prod_Z[i] = BN_new();
+        if (prod_Z[i] == NULL)
+            goto err;
+    }
+
+    /*
+     * Set each prod_Z[i] to the product of points[0]->Z .. points[i]->Z,
+     * skipping any zero-valued inputs (pretend that they're 1).
+     */
+
+    if (!BN_is_zero(points[0]->Z)) {
+        if (!BN_copy(prod_Z[0], points[0]->Z))
+            goto err;
+    } else {
+        if (group->meth->field_set_to_one != 0) {
+            if (!group->meth->field_set_to_one(group, prod_Z[0], ctx))
+                goto err;
+        } else {
+            if (!BN_one(prod_Z[0]))
+                goto err;
+        }
+    }
+
+    for (i = 1; i < num; i++) {
+        if (!BN_is_zero(points[i]->Z)) {
+            if (!group->
+                meth->field_mul(group, prod_Z[i], prod_Z[i - 1], points[i]->Z,
+                                ctx))
+                goto err;
+        } else {
+            if (!BN_copy(prod_Z[i], prod_Z[i - 1]))
+                goto err;
+        }
+    }
+
+    /*
+     * Now use a single explicit inversion to replace every non-zero
+     * points[i]->Z by its inverse.
+     */
+
+    if (!group->meth->field_inv(group, tmp, prod_Z[num - 1], ctx)) {
+        ECerr(EC_F_EC_GFP_SIMPLE_POINTS_MAKE_AFFINE, ERR_R_BN_LIB);
+        goto err;
+    }
+    if (group->meth->field_encode != 0) {
+        /*
+         * In the Montgomery case, we just turned R*H (representing H) into
+         * 1/(R*H), but we need R*(1/H) (representing 1/H); i.e. we need to
+         * multiply by the Montgomery factor twice.
+         */
+        if (!group->meth->field_encode(group, tmp, tmp, ctx))
+            goto err;
+        if (!group->meth->field_encode(group, tmp, tmp, ctx))
+            goto err;
+    }
+
+    for (i = num - 1; i > 0; --i) {
+        /*
+         * Loop invariant: tmp is the product of the inverses of points[0]->Z
+         * .. points[i]->Z (zero-valued inputs skipped).
+         */
+        if (!BN_is_zero(points[i]->Z)) {
+            /*
+             * Set tmp_Z to the inverse of points[i]->Z (as product of Z
+             * inverses 0 .. i, Z values 0 .. i - 1).
+             */
+            if (!group->
+                meth->field_mul(group, tmp_Z, prod_Z[i - 1], tmp, ctx))
+                goto err;
+            /*
+             * Update tmp to satisfy the loop invariant for i - 1.
+             */
+            if (!group->meth->field_mul(group, tmp, tmp, points[i]->Z, ctx))
+                goto err;
+            /* Replace points[i]->Z by its inverse. */
+            if (!BN_copy(points[i]->Z, tmp_Z))
+                goto err;
+        }
+    }
+
+    if (!BN_is_zero(points[0]->Z)) {
+        /* Replace points[0]->Z by its inverse. */
+        if (!BN_copy(points[0]->Z, tmp))
+            goto err;
+    }
+
+    /* Finally, fix up the X and Y coordinates for all points. */
+
+    for (i = 0; i < num; i++) {
+        EC_POINT *p = points[i];
+
+        if (!BN_is_zero(p->Z)) {
+            /* turn  (X, Y, 1/Z)  into  (X/Z^2, Y/Z^3, 1) */
+
+            if (!group->meth->field_sqr(group, tmp, p->Z, ctx))
+                goto err;
+            if (!group->meth->field_mul(group, p->X, p->X, tmp, ctx))
+                goto err;
+
+            if (!group->meth->field_mul(group, tmp, tmp, p->Z, ctx))
+                goto err;
+            if (!group->meth->field_mul(group, p->Y, p->Y, tmp, ctx))
+                goto err;
+
+            if (group->meth->field_set_to_one != 0) {
+                if (!group->meth->field_set_to_one(group, p->Z, ctx))
+                    goto err;
+            } else {
+                if (!BN_one(p->Z))
+                    goto err;
+            }
+            p->Z_is_one = 1;
+        }
+    }
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    if (prod_Z != NULL) {
+        for (i = 0; i < num; i++) {
+            if (prod_Z[i] == NULL)
+                break;
+            BN_clear_free(prod_Z[i]);
+        }
+        OPENSSL_free(prod_Z);
+    }
+    return ret;
+}
+
+int ec_GFp_simple_field_mul(const EC_GROUP *group, BIGNUM *r, const BIGNUM *a,
+                            const BIGNUM *b, BN_CTX *ctx)
+{
+    return BN_mod_mul(r, a, b, group->field, ctx);
+}
+
+int ec_GFp_simple_field_sqr(const EC_GROUP *group, BIGNUM *r, const BIGNUM *a,
+                            BN_CTX *ctx)
+{
+    return BN_mod_sqr(r, a, group->field, ctx);
+}
+
+/*-
+ * Computes the multiplicative inverse of a in GF(p), storing the result in r.
+ * If a is zero (or equivalent), you'll get a EC_R_CANNOT_INVERT error.
+ * Since we don't have a Mont structure here, SCA hardening is with blinding.
+ */
+int ec_GFp_simple_field_inv(const EC_GROUP *group, BIGNUM *r, const BIGNUM *a,
+                            BN_CTX *ctx)
+{
+    BIGNUM *e = NULL;
+    BN_CTX *new_ctx = NULL;
+    int ret = 0;
+
+    if (ctx == NULL && (ctx = new_ctx = BN_CTX_secure_new()) == NULL)
+        return 0;
+
+    BN_CTX_start(ctx);
+    if ((e = BN_CTX_get(ctx)) == NULL)
+        goto err;
+
+    do {
+        if (!BN_priv_rand_range(e, group->field))
+        goto err;
+    } while (BN_is_zero(e));
+
+    /* r := a * e */
+    if (!group->meth->field_mul(group, r, a, e, ctx))
+        goto err;
+    /* r := 1/(a * e) */
+    if (!BN_mod_inverse(r, r, group->field, ctx)) {
+        ECerr(EC_F_EC_GFP_SIMPLE_FIELD_INV, EC_R_CANNOT_INVERT);
+        goto err;
+    }
+    /* r := e/(a * e) = 1/a */
+    if (!group->meth->field_mul(group, r, r, e, ctx))
+        goto err;
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    BN_CTX_free(new_ctx);
+    return ret;
+}
+
+/*-
+ * Apply randomization of EC point projective coordinates:
+ *
+ *   (X, Y ,Z ) = (lambda^2*X, lambda^3*Y, lambda*Z)
+ *   lambda = [1,group->field)
+ *
+ */
+int ec_GFp_simple_blind_coordinates(const EC_GROUP *group, EC_POINT *p,
+                                    BN_CTX *ctx)
+{
+    int ret = 0;
+    BIGNUM *lambda = NULL;
+    BIGNUM *temp = NULL;
+
+    BN_CTX_start(ctx);
+    lambda = BN_CTX_get(ctx);
+    temp = BN_CTX_get(ctx);
+    if (temp == NULL) {
+        ECerr(EC_F_EC_GFP_SIMPLE_BLIND_COORDINATES, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    /* make sure lambda is not zero */
+    do {
+        if (!BN_priv_rand_range(lambda, group->field)) {
+            ECerr(EC_F_EC_GFP_SIMPLE_BLIND_COORDINATES, ERR_R_BN_LIB);
+            goto err;
+        }
+    } while (BN_is_zero(lambda));
+
+    /* if field_encode defined convert between representations */
+    if (group->meth->field_encode != NULL
+        && !group->meth->field_encode(group, lambda, lambda, ctx))
+        goto err;
+    if (!group->meth->field_mul(group, p->Z, p->Z, lambda, ctx))
+        goto err;
+    if (!group->meth->field_sqr(group, temp, lambda, ctx))
+        goto err;
+    if (!group->meth->field_mul(group, p->X, p->X, temp, ctx))
+        goto err;
+    if (!group->meth->field_mul(group, temp, temp, lambda, ctx))
+        goto err;
+    if (!group->meth->field_mul(group, p->Y, p->Y, temp, ctx))
+        goto err;
+    p->Z_is_one = 0;
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+/*-
+ * Set s := p, r := 2p.
+ *
+ * For doubling we use Formula 3 from Izu-Takagi "A fast parallel elliptic curve
+ * multiplication resistant against side channel attacks" appendix, as described
+ * at
+ * https://hyperelliptic.org/EFD/g1p/auto-shortw-xz.html#doubling-dbl-2002-it-2
+ *
+ * The input point p will be in randomized Jacobian projective coords:
+ *      x = X/Z**2, y=Y/Z**3
+ *
+ * The output points p, s, and r are converted to standard (homogeneous)
+ * projective coords:
+ *      x = X/Z, y=Y/Z
+ */
+int ec_GFp_simple_ladder_pre(const EC_GROUP *group,
+                             EC_POINT *r, EC_POINT *s,
+                             EC_POINT *p, BN_CTX *ctx)
+{
+    BIGNUM *t1, *t2, *t3, *t4, *t5, *t6 = NULL;
+
+    t1 = r->Z;
+    t2 = r->Y;
+    t3 = s->X;
+    t4 = r->X;
+    t5 = s->Y;
+    t6 = s->Z;
+
+    /* convert p: (X,Y,Z) -> (XZ,Y,Z**3) */
+    if (!group->meth->field_mul(group, p->X, p->X, p->Z, ctx)
+        || !group->meth->field_sqr(group, t1, p->Z, ctx)
+        || !group->meth->field_mul(group, p->Z, p->Z, t1, ctx)
+        /* r := 2p */
+        || !group->meth->field_sqr(group, t2, p->X, ctx)
+        || !group->meth->field_sqr(group, t3, p->Z, ctx)
+        || !group->meth->field_mul(group, t4, t3, group->a, ctx)
+        || !BN_mod_sub_quick(t5, t2, t4, group->field)
+        || !BN_mod_add_quick(t2, t2, t4, group->field)
+        || !group->meth->field_sqr(group, t5, t5, ctx)
+        || !group->meth->field_mul(group, t6, t3, group->b, ctx)
+        || !group->meth->field_mul(group, t1, p->X, p->Z, ctx)
+        || !group->meth->field_mul(group, t4, t1, t6, ctx)
+        || !BN_mod_lshift_quick(t4, t4, 3, group->field)
+        /* r->X coord output */
+        || !BN_mod_sub_quick(r->X, t5, t4, group->field)
+        || !group->meth->field_mul(group, t1, t1, t2, ctx)
+        || !group->meth->field_mul(group, t2, t3, t6, ctx)
+        || !BN_mod_add_quick(t1, t1, t2, group->field)
+        /* r->Z coord output */
+        || !BN_mod_lshift_quick(r->Z, t1, 2, group->field)
+        || !EC_POINT_copy(s, p))
+        return 0;
+
+    r->Z_is_one = 0;
+    s->Z_is_one = 0;
+    p->Z_is_one = 0;
+
+    return 1;
+}
+
+/*-
+ * Differential addition-and-doubling using  Eq. (9) and (10) from Izu-Takagi
+ * "A fast parallel elliptic curve multiplication resistant against side channel
+ * attacks", as described at
+ * https://hyperelliptic.org/EFD/g1p/auto-shortw-xz.html#ladder-ladd-2002-it-4
+ */
+int ec_GFp_simple_ladder_step(const EC_GROUP *group,
+                              EC_POINT *r, EC_POINT *s,
+                              EC_POINT *p, BN_CTX *ctx)
+{
+    int ret = 0;
+    BIGNUM *t0, *t1, *t2, *t3, *t4, *t5, *t6, *t7 = NULL;
+
+    BN_CTX_start(ctx);
+    t0 = BN_CTX_get(ctx);
+    t1 = BN_CTX_get(ctx);
+    t2 = BN_CTX_get(ctx);
+    t3 = BN_CTX_get(ctx);
+    t4 = BN_CTX_get(ctx);
+    t5 = BN_CTX_get(ctx);
+    t6 = BN_CTX_get(ctx);
+    t7 = BN_CTX_get(ctx);
+
+    if (t7 == NULL
+        || !group->meth->field_mul(group, t0, r->X, s->X, ctx)
+        || !group->meth->field_mul(group, t1, r->Z, s->Z, ctx)
+        || !group->meth->field_mul(group, t2, r->X, s->Z, ctx)
+        || !group->meth->field_mul(group, t3, r->Z, s->X, ctx)
+        || !group->meth->field_mul(group, t4, group->a, t1, ctx)
+        || !BN_mod_add_quick(t0, t0, t4, group->field)
+        || !BN_mod_add_quick(t4, t3, t2, group->field)
+        || !group->meth->field_mul(group, t0, t4, t0, ctx)
+        || !group->meth->field_sqr(group, t1, t1, ctx)
+        || !BN_mod_lshift_quick(t7, group->b, 2, group->field)
+        || !group->meth->field_mul(group, t1, t7, t1, ctx)
+        || !BN_mod_lshift1_quick(t0, t0, group->field)
+        || !BN_mod_add_quick(t0, t1, t0, group->field)
+        || !BN_mod_sub_quick(t1, t2, t3, group->field)
+        || !group->meth->field_sqr(group, t1, t1, ctx)
+        || !group->meth->field_mul(group, t3, t1, p->X, ctx)
+        || !group->meth->field_mul(group, t0, p->Z, t0, ctx)
+        /* s->X coord output */
+        || !BN_mod_sub_quick(s->X, t0, t3, group->field)
+        /* s->Z coord output */
+        || !group->meth->field_mul(group, s->Z, p->Z, t1, ctx)
+        || !group->meth->field_sqr(group, t3, r->X, ctx)
+        || !group->meth->field_sqr(group, t2, r->Z, ctx)
+        || !group->meth->field_mul(group, t4, t2, group->a, ctx)
+        || !BN_mod_add_quick(t5, r->X, r->Z, group->field)
+        || !group->meth->field_sqr(group, t5, t5, ctx)
+        || !BN_mod_sub_quick(t5, t5, t3, group->field)
+        || !BN_mod_sub_quick(t5, t5, t2, group->field)
+        || !BN_mod_sub_quick(t6, t3, t4, group->field)
+        || !group->meth->field_sqr(group, t6, t6, ctx)
+        || !group->meth->field_mul(group, t0, t2, t5, ctx)
+        || !group->meth->field_mul(group, t0, t7, t0, ctx)
+        /* r->X coord output */
+        || !BN_mod_sub_quick(r->X, t6, t0, group->field)
+        || !BN_mod_add_quick(t6, t3, t4, group->field)
+        || !group->meth->field_sqr(group, t3, t2, ctx)
+        || !group->meth->field_mul(group, t7, t3, t7, ctx)
+        || !group->meth->field_mul(group, t5, t5, t6, ctx)
+        || !BN_mod_lshift1_quick(t5, t5, group->field)
+        /* r->Z coord output */
+        || !BN_mod_add_quick(r->Z, t7, t5, group->field))
+        goto err;
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+/*-
+ * Recovers the y-coordinate of r using Eq. (8) from Brier-Joye, "Weierstrass
+ * Elliptic Curves and Side-Channel Attacks", modified to work in projective
+ * coordinates and return r in Jacobian projective coordinates.
+ *
+ * X4 = two*Y1*X2*Z3*Z2*Z1;
+ * Y4 = two*b*Z3*SQR(Z2*Z1) + Z3*(a*Z2*Z1+X1*X2)*(X1*Z2+X2*Z1) - X3*SQR(X1*Z2-X2*Z1);
+ * Z4 = two*Y1*Z3*SQR(Z2)*Z1;
+ *
+ * Z4 != 0 because:
+ *  - Z1==0 implies p is at infinity, which would have caused an early exit in
+ *    the caller;
+ *  - Z2==0 implies r is at infinity (handled by the BN_is_zero(r->Z) branch);
+ *  - Z3==0 implies s is at infinity (handled by the BN_is_zero(s->Z) branch);
+ *  - Y1==0 implies p has order 2, so either r or s are infinity and handled by
+ *    one of the BN_is_zero(...) branches.
+ */
+int ec_GFp_simple_ladder_post(const EC_GROUP *group,
+                              EC_POINT *r, EC_POINT *s,
+                              EC_POINT *p, BN_CTX *ctx)
+{
+    int ret = 0;
+    BIGNUM *t0, *t1, *t2, *t3, *t4, *t5, *t6 = NULL;
+
+    if (BN_is_zero(r->Z))
+        return EC_POINT_set_to_infinity(group, r);
+
+    if (BN_is_zero(s->Z)) {
+        /* (X,Y,Z) -> (XZ,YZ**2,Z) */
+        if (!group->meth->field_mul(group, r->X, p->X, p->Z, ctx)
+            || !group->meth->field_sqr(group, r->Z, p->Z, ctx)
+            || !group->meth->field_mul(group, r->Y, p->Y, r->Z, ctx)
+            || !BN_copy(r->Z, p->Z)
+            || !EC_POINT_invert(group, r, ctx))
+            return 0;
+        return 1;
+    }
+
+    BN_CTX_start(ctx);
+    t0 = BN_CTX_get(ctx);
+    t1 = BN_CTX_get(ctx);
+    t2 = BN_CTX_get(ctx);
+    t3 = BN_CTX_get(ctx);
+    t4 = BN_CTX_get(ctx);
+    t5 = BN_CTX_get(ctx);
+    t6 = BN_CTX_get(ctx);
+
+    if (t6 == NULL
+        || !BN_mod_lshift1_quick(t0, p->Y, group->field)
+        || !group->meth->field_mul(group, t1, r->X, p->Z, ctx)
+        || !group->meth->field_mul(group, t2, r->Z, s->Z, ctx)
+        || !group->meth->field_mul(group, t2, t1, t2, ctx)
+        || !group->meth->field_mul(group, t3, t2, t0, ctx)
+        || !group->meth->field_mul(group, t2, r->Z, p->Z, ctx)
+        || !group->meth->field_sqr(group, t4, t2, ctx)
+        || !BN_mod_lshift1_quick(t5, group->b, group->field)
+        || !group->meth->field_mul(group, t4, t4, t5, ctx)
+        || !group->meth->field_mul(group, t6, t2, group->a, ctx)
+        || !group->meth->field_mul(group, t5, r->X, p->X, ctx)
+        || !BN_mod_add_quick(t5, t6, t5, group->field)
+        || !group->meth->field_mul(group, t6, r->Z, p->X, ctx)
+        || !BN_mod_add_quick(t2, t6, t1, group->field)
+        || !group->meth->field_mul(group, t5, t5, t2, ctx)
+        || !BN_mod_sub_quick(t6, t6, t1, group->field)
+        || !group->meth->field_sqr(group, t6, t6, ctx)
+        || !group->meth->field_mul(group, t6, t6, s->X, ctx)
+        || !BN_mod_add_quick(t4, t5, t4, group->field)
+        || !group->meth->field_mul(group, t4, t4, s->Z, ctx)
+        || !BN_mod_sub_quick(t4, t4, t6, group->field)
+        || !group->meth->field_sqr(group, t5, r->Z, ctx)
+        || !group->meth->field_mul(group, r->Z, p->Z, s->Z, ctx)
+        || !group->meth->field_mul(group, r->Z, t5, r->Z, ctx)
+        || !group->meth->field_mul(group, r->Z, r->Z, t0, ctx)
+        /* t3 := X, t4 := Y */
+        /* (X,Y,Z) -> (XZ,YZ**2,Z) */
+        || !group->meth->field_mul(group, r->X, t3, r->Z, ctx)
+        || !group->meth->field_sqr(group, t3, r->Z, ctx)
+        || !group->meth->field_mul(group, r->Y, t4, t3, ctx))
+        goto err;
+
+    ret = 1;
+
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecx_meth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecx_meth.c
new file mode 100644
index 000000000..e4cac99e2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ec/ecx_meth.c
@@ -0,0 +1,841 @@
+/*
+ * Copyright 2006-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/ec.h>
+#include <openssl/rand.h>
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+#include "ec_lcl.h"
+#include "curve448/curve448_lcl.h"
+
+#define X25519_BITS          253
+#define X25519_SECURITY_BITS 128
+
+#define ED25519_SIGSIZE      64
+
+#define X448_BITS            448
+#define ED448_BITS           456
+#define X448_SECURITY_BITS   224
+
+#define ED448_SIGSIZE        114
+
+#define ISX448(id)      ((id) == EVP_PKEY_X448)
+#define IS25519(id)     ((id) == EVP_PKEY_X25519 || (id) == EVP_PKEY_ED25519)
+#define KEYLENID(id)    (IS25519(id) ? X25519_KEYLEN \
+                                     : ((id) == EVP_PKEY_X448 ? X448_KEYLEN \
+                                                              : ED448_KEYLEN))
+#define KEYLEN(p)       KEYLENID((p)->ameth->pkey_id)
+
+
+typedef enum {
+    KEY_OP_PUBLIC,
+    KEY_OP_PRIVATE,
+    KEY_OP_KEYGEN
+} ecx_key_op_t;
+
+/* Setup EVP_PKEY using public, private or generation */
+static int ecx_key_op(EVP_PKEY *pkey, int id, const X509_ALGOR *palg,
+                      const unsigned char *p, int plen, ecx_key_op_t op)
+{
+    ECX_KEY *key = NULL;
+    unsigned char *privkey, *pubkey;
+
+    if (op != KEY_OP_KEYGEN) {
+        if (palg != NULL) {
+            int ptype;
+
+            /* Algorithm parameters must be absent */
+            X509_ALGOR_get0(NULL, &ptype, NULL, palg);
+            if (ptype != V_ASN1_UNDEF) {
+                ECerr(EC_F_ECX_KEY_OP, EC_R_INVALID_ENCODING);
+                return 0;
+            }
+        }
+
+        if (p == NULL || plen != KEYLENID(id)) {
+            ECerr(EC_F_ECX_KEY_OP, EC_R_INVALID_ENCODING);
+            return 0;
+        }
+    }
+
+    key = OPENSSL_zalloc(sizeof(*key));
+    if (key == NULL) {
+        ECerr(EC_F_ECX_KEY_OP, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    pubkey = key->pubkey;
+
+    if (op == KEY_OP_PUBLIC) {
+        memcpy(pubkey, p, plen);
+    } else {
+        privkey = key->privkey = OPENSSL_secure_malloc(KEYLENID(id));
+        if (privkey == NULL) {
+            ECerr(EC_F_ECX_KEY_OP, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        if (op == KEY_OP_KEYGEN) {
+            if (RAND_priv_bytes(privkey, KEYLENID(id)) <= 0) {
+                OPENSSL_secure_free(privkey);
+                key->privkey = NULL;
+                goto err;
+            }
+            if (id == EVP_PKEY_X25519) {
+                privkey[0] &= 248;
+                privkey[X25519_KEYLEN - 1] &= 127;
+                privkey[X25519_KEYLEN - 1] |= 64;
+            } else if (id == EVP_PKEY_X448) {
+                privkey[0] &= 252;
+                privkey[X448_KEYLEN - 1] |= 128;
+            }
+        } else {
+            memcpy(privkey, p, KEYLENID(id));
+        }
+        switch (id) {
+        case EVP_PKEY_X25519:
+            X25519_public_from_private(pubkey, privkey);
+            break;
+        case EVP_PKEY_ED25519:
+            ED25519_public_from_private(pubkey, privkey);
+            break;
+        case EVP_PKEY_X448:
+            X448_public_from_private(pubkey, privkey);
+            break;
+        case EVP_PKEY_ED448:
+            ED448_public_from_private(pubkey, privkey);
+            break;
+        }
+    }
+
+    EVP_PKEY_assign(pkey, id, key);
+    return 1;
+ err:
+    OPENSSL_free(key);
+    return 0;
+}
+
+static int ecx_pub_encode(X509_PUBKEY *pk, const EVP_PKEY *pkey)
+{
+    const ECX_KEY *ecxkey = pkey->pkey.ecx;
+    unsigned char *penc;
+
+    if (ecxkey == NULL) {
+        ECerr(EC_F_ECX_PUB_ENCODE, EC_R_INVALID_KEY);
+        return 0;
+    }
+
+    penc = OPENSSL_memdup(ecxkey->pubkey, KEYLEN(pkey));
+    if (penc == NULL) {
+        ECerr(EC_F_ECX_PUB_ENCODE, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    if (!X509_PUBKEY_set0_param(pk, OBJ_nid2obj(pkey->ameth->pkey_id),
+                                V_ASN1_UNDEF, NULL, penc, KEYLEN(pkey))) {
+        OPENSSL_free(penc);
+        ECerr(EC_F_ECX_PUB_ENCODE, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    return 1;
+}
+
+static int ecx_pub_decode(EVP_PKEY *pkey, X509_PUBKEY *pubkey)
+{
+    const unsigned char *p;
+    int pklen;
+    X509_ALGOR *palg;
+
+    if (!X509_PUBKEY_get0_param(NULL, &p, &pklen, &palg, pubkey))
+        return 0;
+    return ecx_key_op(pkey, pkey->ameth->pkey_id, palg, p, pklen,
+                      KEY_OP_PUBLIC);
+}
+
+static int ecx_pub_cmp(const EVP_PKEY *a, const EVP_PKEY *b)
+{
+    const ECX_KEY *akey = a->pkey.ecx;
+    const ECX_KEY *bkey = b->pkey.ecx;
+
+    if (akey == NULL || bkey == NULL)
+        return -2;
+
+    return CRYPTO_memcmp(akey->pubkey, bkey->pubkey, KEYLEN(a)) == 0;
+}
+
+static int ecx_priv_decode(EVP_PKEY *pkey, const PKCS8_PRIV_KEY_INFO *p8)
+{
+    const unsigned char *p;
+    int plen;
+    ASN1_OCTET_STRING *oct = NULL;
+    const X509_ALGOR *palg;
+    int rv;
+
+    if (!PKCS8_pkey_get0(NULL, &p, &plen, &palg, p8))
+        return 0;
+
+    oct = d2i_ASN1_OCTET_STRING(NULL, &p, plen);
+    if (oct == NULL) {
+        p = NULL;
+        plen = 0;
+    } else {
+        p = ASN1_STRING_get0_data(oct);
+        plen = ASN1_STRING_length(oct);
+    }
+
+    rv = ecx_key_op(pkey, pkey->ameth->pkey_id, palg, p, plen, KEY_OP_PRIVATE);
+    ASN1_OCTET_STRING_free(oct);
+    return rv;
+}
+
+static int ecx_priv_encode(PKCS8_PRIV_KEY_INFO *p8, const EVP_PKEY *pkey)
+{
+    const ECX_KEY *ecxkey = pkey->pkey.ecx;
+    ASN1_OCTET_STRING oct;
+    unsigned char *penc = NULL;
+    int penclen;
+
+    if (ecxkey == NULL || ecxkey->privkey == NULL) {
+        ECerr(EC_F_ECX_PRIV_ENCODE, EC_R_INVALID_PRIVATE_KEY);
+        return 0;
+    }
+
+    oct.data = ecxkey->privkey;
+    oct.length = KEYLEN(pkey);
+    oct.flags = 0;
+
+    penclen = i2d_ASN1_OCTET_STRING(&oct, &penc);
+    if (penclen < 0) {
+        ECerr(EC_F_ECX_PRIV_ENCODE, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    if (!PKCS8_pkey_set0(p8, OBJ_nid2obj(pkey->ameth->pkey_id), 0,
+                         V_ASN1_UNDEF, NULL, penc, penclen)) {
+        OPENSSL_clear_free(penc, penclen);
+        ECerr(EC_F_ECX_PRIV_ENCODE, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    return 1;
+}
+
+static int ecx_size(const EVP_PKEY *pkey)
+{
+    return KEYLEN(pkey);
+}
+
+static int ecx_bits(const EVP_PKEY *pkey)
+{
+    if (IS25519(pkey->ameth->pkey_id)) {
+        return X25519_BITS;
+    } else if(ISX448(pkey->ameth->pkey_id)) {
+        return X448_BITS;
+    } else {
+        return ED448_BITS;
+    }
+}
+
+static int ecx_security_bits(const EVP_PKEY *pkey)
+{
+    if (IS25519(pkey->ameth->pkey_id)) {
+        return X25519_SECURITY_BITS;
+    } else {
+        return X448_SECURITY_BITS;
+    }
+}
+
+static void ecx_free(EVP_PKEY *pkey)
+{
+    if (pkey->pkey.ecx != NULL)
+        OPENSSL_secure_clear_free(pkey->pkey.ecx->privkey, KEYLEN(pkey));
+    OPENSSL_free(pkey->pkey.ecx);
+}
+
+/* "parameters" are always equal */
+static int ecx_cmp_parameters(const EVP_PKEY *a, const EVP_PKEY *b)
+{
+    return 1;
+}
+
+static int ecx_key_print(BIO *bp, const EVP_PKEY *pkey, int indent,
+                         ASN1_PCTX *ctx, ecx_key_op_t op)
+{
+    const ECX_KEY *ecxkey = pkey->pkey.ecx;
+    const char *nm = OBJ_nid2ln(pkey->ameth->pkey_id);
+
+    if (op == KEY_OP_PRIVATE) {
+        if (ecxkey == NULL || ecxkey->privkey == NULL) {
+            if (BIO_printf(bp, "%*s<INVALID PRIVATE KEY>\n", indent, "") <= 0)
+                return 0;
+            return 1;
+        }
+        if (BIO_printf(bp, "%*s%s Private-Key:\n", indent, "", nm) <= 0)
+            return 0;
+        if (BIO_printf(bp, "%*spriv:\n", indent, "") <= 0)
+            return 0;
+        if (ASN1_buf_print(bp, ecxkey->privkey, KEYLEN(pkey),
+                           indent + 4) == 0)
+            return 0;
+    } else {
+        if (ecxkey == NULL) {
+            if (BIO_printf(bp, "%*s<INVALID PUBLIC KEY>\n", indent, "") <= 0)
+                return 0;
+            return 1;
+        }
+        if (BIO_printf(bp, "%*s%s Public-Key:\n", indent, "", nm) <= 0)
+            return 0;
+    }
+    if (BIO_printf(bp, "%*spub:\n", indent, "") <= 0)
+        return 0;
+
+    if (ASN1_buf_print(bp, ecxkey->pubkey, KEYLEN(pkey),
+                       indent + 4) == 0)
+        return 0;
+    return 1;
+}
+
+static int ecx_priv_print(BIO *bp, const EVP_PKEY *pkey, int indent,
+                          ASN1_PCTX *ctx)
+{
+    return ecx_key_print(bp, pkey, indent, ctx, KEY_OP_PRIVATE);
+}
+
+static int ecx_pub_print(BIO *bp, const EVP_PKEY *pkey, int indent,
+                         ASN1_PCTX *ctx)
+{
+    return ecx_key_print(bp, pkey, indent, ctx, KEY_OP_PUBLIC);
+}
+
+static int ecx_ctrl(EVP_PKEY *pkey, int op, long arg1, void *arg2)
+{
+    switch (op) {
+
+    case ASN1_PKEY_CTRL_SET1_TLS_ENCPT:
+        return ecx_key_op(pkey, pkey->ameth->pkey_id, NULL, arg2, arg1,
+                          KEY_OP_PUBLIC);
+
+    case ASN1_PKEY_CTRL_GET1_TLS_ENCPT:
+        if (pkey->pkey.ecx != NULL) {
+            unsigned char **ppt = arg2;
+
+            *ppt = OPENSSL_memdup(pkey->pkey.ecx->pubkey, KEYLEN(pkey));
+            if (*ppt != NULL)
+                return KEYLEN(pkey);
+        }
+        return 0;
+
+    default:
+        return -2;
+
+    }
+}
+
+static int ecd_ctrl(EVP_PKEY *pkey, int op, long arg1, void *arg2)
+{
+    switch (op) {
+    case ASN1_PKEY_CTRL_DEFAULT_MD_NID:
+        /* We currently only support Pure EdDSA which takes no digest */
+        *(int *)arg2 = NID_undef;
+        return 2;
+
+    default:
+        return -2;
+
+    }
+}
+
+static int ecx_set_priv_key(EVP_PKEY *pkey, const unsigned char *priv,
+                            size_t len)
+{
+    return ecx_key_op(pkey, pkey->ameth->pkey_id, NULL, priv, len,
+                       KEY_OP_PRIVATE);
+}
+
+static int ecx_set_pub_key(EVP_PKEY *pkey, const unsigned char *pub, size_t len)
+{
+    return ecx_key_op(pkey, pkey->ameth->pkey_id, NULL, pub, len,
+                      KEY_OP_PUBLIC);
+}
+
+static int ecx_get_priv_key(const EVP_PKEY *pkey, unsigned char *priv,
+                            size_t *len)
+{
+    const ECX_KEY *key = pkey->pkey.ecx;
+
+    if (priv == NULL) {
+        *len = KEYLENID(pkey->ameth->pkey_id);
+        return 1;
+    }
+
+    if (key == NULL
+            || key->privkey == NULL
+            || *len < (size_t)KEYLENID(pkey->ameth->pkey_id))
+        return 0;
+
+    *len = KEYLENID(pkey->ameth->pkey_id);
+    memcpy(priv, key->privkey, *len);
+
+    return 1;
+}
+
+static int ecx_get_pub_key(const EVP_PKEY *pkey, unsigned char *pub,
+                           size_t *len)
+{
+    const ECX_KEY *key = pkey->pkey.ecx;
+
+    if (pub == NULL) {
+        *len = KEYLENID(pkey->ameth->pkey_id);
+        return 1;
+    }
+
+    if (key == NULL
+            || *len < (size_t)KEYLENID(pkey->ameth->pkey_id))
+        return 0;
+
+    *len = KEYLENID(pkey->ameth->pkey_id);
+    memcpy(pub, key->pubkey, *len);
+
+    return 1;
+}
+
+const EVP_PKEY_ASN1_METHOD ecx25519_asn1_meth = {
+    EVP_PKEY_X25519,
+    EVP_PKEY_X25519,
+    0,
+    "X25519",
+    "OpenSSL X25519 algorithm",
+
+    ecx_pub_decode,
+    ecx_pub_encode,
+    ecx_pub_cmp,
+    ecx_pub_print,
+
+    ecx_priv_decode,
+    ecx_priv_encode,
+    ecx_priv_print,
+
+    ecx_size,
+    ecx_bits,
+    ecx_security_bits,
+
+    0, 0, 0, 0,
+    ecx_cmp_parameters,
+    0, 0,
+
+    ecx_free,
+    ecx_ctrl,
+    NULL,
+    NULL,
+
+    NULL,
+    NULL,
+    NULL,
+
+    NULL,
+    NULL,
+    NULL,
+
+    ecx_set_priv_key,
+    ecx_set_pub_key,
+    ecx_get_priv_key,
+    ecx_get_pub_key,
+};
+
+const EVP_PKEY_ASN1_METHOD ecx448_asn1_meth = {
+    EVP_PKEY_X448,
+    EVP_PKEY_X448,
+    0,
+    "X448",
+    "OpenSSL X448 algorithm",
+
+    ecx_pub_decode,
+    ecx_pub_encode,
+    ecx_pub_cmp,
+    ecx_pub_print,
+
+    ecx_priv_decode,
+    ecx_priv_encode,
+    ecx_priv_print,
+
+    ecx_size,
+    ecx_bits,
+    ecx_security_bits,
+
+    0, 0, 0, 0,
+    ecx_cmp_parameters,
+    0, 0,
+
+    ecx_free,
+    ecx_ctrl,
+    NULL,
+    NULL,
+
+    NULL,
+    NULL,
+    NULL,
+
+    NULL,
+    NULL,
+    NULL,
+
+    ecx_set_priv_key,
+    ecx_set_pub_key,
+    ecx_get_priv_key,
+    ecx_get_pub_key,
+};
+
+static int ecd_size25519(const EVP_PKEY *pkey)
+{
+    return ED25519_SIGSIZE;
+}
+
+static int ecd_size448(const EVP_PKEY *pkey)
+{
+    return ED448_SIGSIZE;
+}
+
+static int ecd_item_verify(EVP_MD_CTX *ctx, const ASN1_ITEM *it, void *asn,
+                           X509_ALGOR *sigalg, ASN1_BIT_STRING *str,
+                           EVP_PKEY *pkey)
+{
+    const ASN1_OBJECT *obj;
+    int ptype;
+    int nid;
+
+    /* Sanity check: make sure it is ED25519/ED448 with absent parameters */
+    X509_ALGOR_get0(&obj, &ptype, NULL, sigalg);
+    nid = OBJ_obj2nid(obj);
+    if ((nid != NID_ED25519 && nid != NID_ED448) || ptype != V_ASN1_UNDEF) {
+        ECerr(EC_F_ECD_ITEM_VERIFY, EC_R_INVALID_ENCODING);
+        return 0;
+    }
+
+    if (!EVP_DigestVerifyInit(ctx, NULL, NULL, NULL, pkey))
+        return 0;
+
+    return 2;
+}
+
+static int ecd_item_sign25519(EVP_MD_CTX *ctx, const ASN1_ITEM *it, void *asn,
+                              X509_ALGOR *alg1, X509_ALGOR *alg2,
+                              ASN1_BIT_STRING *str)
+{
+    /* Set algorithms identifiers */
+    X509_ALGOR_set0(alg1, OBJ_nid2obj(NID_ED25519), V_ASN1_UNDEF, NULL);
+    if (alg2)
+        X509_ALGOR_set0(alg2, OBJ_nid2obj(NID_ED25519), V_ASN1_UNDEF, NULL);
+    /* Algorithm idetifiers set: carry on as normal */
+    return 3;
+}
+
+static int ecd_sig_info_set25519(X509_SIG_INFO *siginf, const X509_ALGOR *alg,
+                                 const ASN1_STRING *sig)
+{
+    X509_SIG_INFO_set(siginf, NID_undef, NID_ED25519, X25519_SECURITY_BITS,
+                      X509_SIG_INFO_TLS);
+    return 1;
+}
+
+static int ecd_item_sign448(EVP_MD_CTX *ctx, const ASN1_ITEM *it, void *asn,
+                            X509_ALGOR *alg1, X509_ALGOR *alg2,
+                            ASN1_BIT_STRING *str)
+{
+    /* Set algorithm identifier */
+    X509_ALGOR_set0(alg1, OBJ_nid2obj(NID_ED448), V_ASN1_UNDEF, NULL);
+    if (alg2 != NULL)
+        X509_ALGOR_set0(alg2, OBJ_nid2obj(NID_ED448), V_ASN1_UNDEF, NULL);
+    /* Algorithm identifier set: carry on as normal */
+    return 3;
+}
+
+static int ecd_sig_info_set448(X509_SIG_INFO *siginf, const X509_ALGOR *alg,
+                               const ASN1_STRING *sig)
+{
+    X509_SIG_INFO_set(siginf, NID_undef, NID_ED448, X448_SECURITY_BITS,
+                      X509_SIG_INFO_TLS);
+    return 1;
+}
+
+
+const EVP_PKEY_ASN1_METHOD ed25519_asn1_meth = {
+    EVP_PKEY_ED25519,
+    EVP_PKEY_ED25519,
+    0,
+    "ED25519",
+    "OpenSSL ED25519 algorithm",
+
+    ecx_pub_decode,
+    ecx_pub_encode,
+    ecx_pub_cmp,
+    ecx_pub_print,
+
+    ecx_priv_decode,
+    ecx_priv_encode,
+    ecx_priv_print,
+
+    ecd_size25519,
+    ecx_bits,
+    ecx_security_bits,
+
+    0, 0, 0, 0,
+    ecx_cmp_parameters,
+    0, 0,
+
+    ecx_free,
+    ecd_ctrl,
+    NULL,
+    NULL,
+    ecd_item_verify,
+    ecd_item_sign25519,
+    ecd_sig_info_set25519,
+
+    NULL,
+    NULL,
+    NULL,
+
+    ecx_set_priv_key,
+    ecx_set_pub_key,
+    ecx_get_priv_key,
+    ecx_get_pub_key,
+};
+
+const EVP_PKEY_ASN1_METHOD ed448_asn1_meth = {
+    EVP_PKEY_ED448,
+    EVP_PKEY_ED448,
+    0,
+    "ED448",
+    "OpenSSL ED448 algorithm",
+
+    ecx_pub_decode,
+    ecx_pub_encode,
+    ecx_pub_cmp,
+    ecx_pub_print,
+
+    ecx_priv_decode,
+    ecx_priv_encode,
+    ecx_priv_print,
+
+    ecd_size448,
+    ecx_bits,
+    ecx_security_bits,
+
+    0, 0, 0, 0,
+    ecx_cmp_parameters,
+    0, 0,
+
+    ecx_free,
+    ecd_ctrl,
+    NULL,
+    NULL,
+    ecd_item_verify,
+    ecd_item_sign448,
+    ecd_sig_info_set448,
+
+    NULL,
+    NULL,
+    NULL,
+
+    ecx_set_priv_key,
+    ecx_set_pub_key,
+    ecx_get_priv_key,
+    ecx_get_pub_key,
+};
+
+static int pkey_ecx_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
+{
+    return ecx_key_op(pkey, ctx->pmeth->pkey_id, NULL, NULL, 0, KEY_OP_KEYGEN);
+}
+
+static int validate_ecx_derive(EVP_PKEY_CTX *ctx, unsigned char *key,
+                                          size_t *keylen,
+                                          const unsigned char **privkey,
+                                          const unsigned char **pubkey)
+{
+    const ECX_KEY *ecxkey, *peerkey;
+
+    if (ctx->pkey == NULL || ctx->peerkey == NULL) {
+        ECerr(EC_F_VALIDATE_ECX_DERIVE, EC_R_KEYS_NOT_SET);
+        return 0;
+    }
+    ecxkey = ctx->pkey->pkey.ecx;
+    peerkey = ctx->peerkey->pkey.ecx;
+    if (ecxkey == NULL || ecxkey->privkey == NULL) {
+        ECerr(EC_F_VALIDATE_ECX_DERIVE, EC_R_INVALID_PRIVATE_KEY);
+        return 0;
+    }
+    if (peerkey == NULL) {
+        ECerr(EC_F_VALIDATE_ECX_DERIVE, EC_R_INVALID_PEER_KEY);
+        return 0;
+    }
+    *privkey = ecxkey->privkey;
+    *pubkey = peerkey->pubkey;
+
+    return 1;
+}
+
+static int pkey_ecx_derive25519(EVP_PKEY_CTX *ctx, unsigned char *key,
+                                size_t *keylen)
+{
+    const unsigned char *privkey, *pubkey;
+
+    if (!validate_ecx_derive(ctx, key, keylen, &privkey, &pubkey)
+            || (key != NULL
+                && X25519(key, privkey, pubkey) == 0))
+        return 0;
+    *keylen = X25519_KEYLEN;
+    return 1;
+}
+
+static int pkey_ecx_derive448(EVP_PKEY_CTX *ctx, unsigned char *key,
+                              size_t *keylen)
+{
+    const unsigned char *privkey, *pubkey;
+
+    if (!validate_ecx_derive(ctx, key, keylen, &privkey, &pubkey)
+            || (key != NULL
+                && X448(key, privkey, pubkey) == 0))
+        return 0;
+    *keylen = X448_KEYLEN;
+    return 1;
+}
+
+static int pkey_ecx_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
+{
+    /* Only need to handle peer key for derivation */
+    if (type == EVP_PKEY_CTRL_PEER_KEY)
+        return 1;
+    return -2;
+}
+
+const EVP_PKEY_METHOD ecx25519_pkey_meth = {
+    EVP_PKEY_X25519,
+    0, 0, 0, 0, 0, 0, 0,
+    pkey_ecx_keygen,
+    0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+    pkey_ecx_derive25519,
+    pkey_ecx_ctrl,
+    0
+};
+
+const EVP_PKEY_METHOD ecx448_pkey_meth = {
+    EVP_PKEY_X448,
+    0, 0, 0, 0, 0, 0, 0,
+    pkey_ecx_keygen,
+    0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+    pkey_ecx_derive448,
+    pkey_ecx_ctrl,
+    0
+};
+
+static int pkey_ecd_digestsign25519(EVP_MD_CTX *ctx, unsigned char *sig,
+                                    size_t *siglen, const unsigned char *tbs,
+                                    size_t tbslen)
+{
+    const ECX_KEY *edkey = EVP_MD_CTX_pkey_ctx(ctx)->pkey->pkey.ecx;
+
+    if (sig == NULL) {
+        *siglen = ED25519_SIGSIZE;
+        return 1;
+    }
+    if (*siglen < ED25519_SIGSIZE) {
+        ECerr(EC_F_PKEY_ECD_DIGESTSIGN25519, EC_R_BUFFER_TOO_SMALL);
+        return 0;
+    }
+
+    if (ED25519_sign(sig, tbs, tbslen, edkey->pubkey, edkey->privkey) == 0)
+        return 0;
+    *siglen = ED25519_SIGSIZE;
+    return 1;
+}
+
+static int pkey_ecd_digestsign448(EVP_MD_CTX *ctx, unsigned char *sig,
+                                  size_t *siglen, const unsigned char *tbs,
+                                  size_t tbslen)
+{
+    const ECX_KEY *edkey = EVP_MD_CTX_pkey_ctx(ctx)->pkey->pkey.ecx;
+
+    if (sig == NULL) {
+        *siglen = ED448_SIGSIZE;
+        return 1;
+    }
+    if (*siglen < ED448_SIGSIZE) {
+        ECerr(EC_F_PKEY_ECD_DIGESTSIGN448, EC_R_BUFFER_TOO_SMALL);
+        return 0;
+    }
+
+    if (ED448_sign(sig, tbs, tbslen, edkey->pubkey, edkey->privkey, NULL,
+                   0) == 0)
+        return 0;
+    *siglen = ED448_SIGSIZE;
+    return 1;
+}
+
+static int pkey_ecd_digestverify25519(EVP_MD_CTX *ctx, const unsigned char *sig,
+                                      size_t siglen, const unsigned char *tbs,
+                                      size_t tbslen)
+{
+    const ECX_KEY *edkey = EVP_MD_CTX_pkey_ctx(ctx)->pkey->pkey.ecx;
+
+    if (siglen != ED25519_SIGSIZE)
+        return 0;
+
+    return ED25519_verify(tbs, tbslen, sig, edkey->pubkey);
+}
+
+static int pkey_ecd_digestverify448(EVP_MD_CTX *ctx, const unsigned char *sig,
+                                    size_t siglen, const unsigned char *tbs,
+                                    size_t tbslen)
+{
+    const ECX_KEY *edkey = EVP_MD_CTX_pkey_ctx(ctx)->pkey->pkey.ecx;
+
+    if (siglen != ED448_SIGSIZE)
+        return 0;
+
+    return ED448_verify(tbs, tbslen, sig, edkey->pubkey, NULL, 0);
+}
+
+static int pkey_ecd_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
+{
+    switch (type) {
+    case EVP_PKEY_CTRL_MD:
+        /* Only NULL allowed as digest */
+        if (p2 == NULL || (const EVP_MD *)p2 == EVP_md_null())
+            return 1;
+        ECerr(EC_F_PKEY_ECD_CTRL, EC_R_INVALID_DIGEST_TYPE);
+        return 0;
+
+    case EVP_PKEY_CTRL_DIGESTINIT:
+        return 1;
+    }
+    return -2;
+}
+
+const EVP_PKEY_METHOD ed25519_pkey_meth = {
+    EVP_PKEY_ED25519, EVP_PKEY_FLAG_SIGCTX_CUSTOM,
+    0, 0, 0, 0, 0, 0,
+    pkey_ecx_keygen,
+    0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+    pkey_ecd_ctrl,
+    0,
+    pkey_ecd_digestsign25519,
+    pkey_ecd_digestverify25519
+};
+
+const EVP_PKEY_METHOD ed448_pkey_meth = {
+    EVP_PKEY_ED448, EVP_PKEY_FLAG_SIGCTX_CUSTOM,
+    0, 0, 0, 0, 0, 0,
+    pkey_ecx_keygen,
+    0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+    pkey_ecd_ctrl,
+    0,
+    pkey_ecd_digestsign448,
+    pkey_ecd_digestverify448
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/README b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/README
new file mode 100644
index 000000000..c7a5696ca
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/README
@@ -0,0 +1,211 @@
+Notes: 2001-09-24
+-----------------
+
+This "description" (if one chooses to call it that) needed some major updating
+so here goes. This update addresses a change being made at the same time to
+OpenSSL, and it pretty much completely restructures the underlying mechanics of
+the "ENGINE" code. So it serves a double purpose of being a "ENGINE internals
+for masochists" document *and* a rather extensive commit log message. (I'd get
+lynched for sticking all this in CHANGES or the commit mails :-).
+
+ENGINE_TABLE underlies this restructuring, as described in the internal header
+"eng_int.h", implemented in eng_table.c, and used in each of the "class" files;
+tb_rsa.c, tb_dsa.c, etc.
+
+However, "EVP_CIPHER" underlies the motivation and design of ENGINE_TABLE so
+I'll mention a bit about that first. EVP_CIPHER (and most of this applies
+equally to EVP_MD for digests) is both a "method" and a algorithm/mode
+identifier that, in the current API, "lingers". These cipher description +
+implementation structures can be defined or obtained directly by applications,
+or can be loaded "en masse" into EVP storage so that they can be catalogued and
+searched in various ways, ie. two ways of encrypting with the "des_cbc"
+algorithm/mode pair are;
+
+(i) directly;
+     const EVP_CIPHER *cipher = EVP_des_cbc();
+     EVP_EncryptInit(&ctx, cipher, key, iv);
+     [ ... use EVP_EncryptUpdate() and EVP_EncryptFinal() ...]
+
+(ii) indirectly;
+     OpenSSL_add_all_ciphers();
+     cipher = EVP_get_cipherbyname("des_cbc");
+     EVP_EncryptInit(&ctx, cipher, key, iv);
+     [ ... etc ... ]
+
+The latter is more generally used because it also allows ciphers/digests to be
+looked up based on other identifiers which can be useful for automatic cipher
+selection, eg. in SSL/TLS, or by user-controllable configuration.
+
+The important point about this is that EVP_CIPHER definitions and structures are
+passed around with impunity and there is no safe way, without requiring massive
+rewrites of many applications, to assume that EVP_CIPHERs can be reference
+counted. One an EVP_CIPHER is exposed to the caller, neither it nor anything it
+comes from can "safely" be destroyed. Unless of course the way of getting to
+such ciphers is via entirely distinct API calls that didn't exist before.
+However existing API usage cannot be made to understand when an EVP_CIPHER
+pointer, that has been passed to the caller, is no longer being used.
+
+The other problem with the existing API w.r.t. to hooking EVP_CIPHER support
+into ENGINE is storage - the OBJ_NAME-based storage used by EVP to register
+ciphers simultaneously registers cipher *types* and cipher *implementations* -
+they are effectively the same thing, an "EVP_CIPHER" pointer. The problem with
+hooking in ENGINEs is that multiple ENGINEs may implement the same ciphers. The
+solution is necessarily that ENGINE-provided ciphers simply are not registered,
+stored, or exposed to the caller in the same manner as existing ciphers. This is
+especially necessary considering the fact ENGINE uses reference counts to allow
+for cleanup, modularity, and DSO support - yet EVP_CIPHERs, as exposed to
+callers in the current API, support no such controls.
+
+Another sticking point for integrating cipher support into ENGINE is linkage.
+Already there is a problem with the way ENGINE supports RSA, DSA, etc whereby
+they are available *because* they're part of a giant ENGINE called "openssl".
+Ie. all implementations *have* to come from an ENGINE, but we get round that by
+having a giant ENGINE with all the software support encapsulated. This creates
+linker hassles if nothing else - linking a 1-line application that calls 2 basic
+RSA functions (eg. "RSA_free(RSA_new());") will result in large quantities of
+ENGINE code being linked in *and* because of that DSA, DH, and RAND also. If we
+continue with this approach for EVP_CIPHER support (even if it *was* possible)
+we would lose our ability to link selectively by selectively loading certain
+implementations of certain functionality. Touching any part of any kind of
+crypto would result in massive static linkage of everything else. So the
+solution is to change the way ENGINE feeds existing "classes", ie. how the
+hooking to ENGINE works from RSA, DSA, DH, RAND, as well as adding new hooking
+for EVP_CIPHER, and EVP_MD.
+
+The way this is now being done is by mostly reverting back to how things used to
+work prior to ENGINE :-). Ie. RSA now has a "RSA_METHOD" pointer again - this
+was previously replaced by an "ENGINE" pointer and all RSA code that required
+the RSA_METHOD would call ENGINE_get_RSA() each time on its ENGINE handle to
+temporarily get and use the ENGINE's RSA implementation. Apart from being more
+efficient, switching back to each RSA having an RSA_METHOD pointer also allows
+us to conceivably operate with *no* ENGINE. As we'll see, this removes any need
+for a fallback ENGINE that encapsulates default implementations - we can simply
+have our RSA structure pointing its RSA_METHOD pointer to the software
+implementation and have its ENGINE pointer set to NULL.
+
+A look at the EVP_CIPHER hooking is most explanatory, the RSA, DSA (etc) cases
+turn out to be degenerate forms of the same thing. The EVP storage of ciphers,
+and the existing EVP API functions that return "software" implementations and
+descriptions remain untouched. However, the storage takes more meaning in terms
+of "cipher description" and less meaning in terms of "implementation". When an
+EVP_CIPHER_CTX is actually initialised with an EVP_CIPHER method and is about to
+begin en/decryption, the hooking to ENGINE comes into play. What happens is that
+cipher-specific ENGINE code is asked for an ENGINE pointer (a functional
+reference) for any ENGINE that is registered to perform the algo/mode that the
+provided EVP_CIPHER structure represents. Under normal circumstances, that
+ENGINE code will return NULL because no ENGINEs will have had any cipher
+implementations *registered*. As such, a NULL ENGINE pointer is stored in the
+EVP_CIPHER_CTX context, and the EVP_CIPHER structure is left hooked into the
+context and so is used as the implementation. Pretty much how things work now
+except we'd have a redundant ENGINE pointer set to NULL and doing nothing.
+
+Conversely, if an ENGINE *has* been registered to perform the algorithm/mode
+combination represented by the provided EVP_CIPHER, then a functional reference
+to that ENGINE will be returned to the EVP_CIPHER_CTX during initialisation.
+That functional reference will be stored in the context (and released on
+cleanup) - and having that reference provides a *safe* way to use an EVP_CIPHER
+definition that is private to the ENGINE. Ie. the EVP_CIPHER provided by the
+application will actually be replaced by an EVP_CIPHER from the registered
+ENGINE - it will support the same algorithm/mode as the original but will be a
+completely different implementation. Because this EVP_CIPHER isn't stored in the
+EVP storage, nor is it returned to applications from traditional API functions,
+there is no associated problem with it not having reference counts. And of
+course, when one of these "private" cipher implementations is hooked into
+EVP_CIPHER_CTX, it is done whilst the EVP_CIPHER_CTX holds a functional
+reference to the ENGINE that owns it, thus the use of the ENGINE's EVP_CIPHER is
+safe.
+
+The "cipher-specific ENGINE code" I mentioned is implemented in tb_cipher.c but
+in essence it is simply an instantiation of "ENGINE_TABLE" code for use by
+EVP_CIPHER code. tb_digest.c is virtually identical but, of course, it is for
+use by EVP_MD code. Ditto for tb_rsa.c, tb_dsa.c, etc. These instantiations of
+ENGINE_TABLE essentially provide linker-separation of the classes so that even
+if ENGINEs implement *all* possible algorithms, an application using only
+EVP_CIPHER code will link at most code relating to EVP_CIPHER, tb_cipher.c, core
+ENGINE code that is independent of class, and of course the ENGINE
+implementation that the application loaded. It will *not* however link any
+class-specific ENGINE code for digests, RSA, etc nor will it bleed over into
+other APIs, such as the RSA/DSA/etc library code.
+
+ENGINE_TABLE is a little more complicated than may seem necessary but this is
+mostly to avoid a lot of "init()"-thrashing on ENGINEs (that may have to load
+DSOs, and other expensive setup that shouldn't be thrashed unnecessarily) *and*
+to duplicate "default" behaviour. Basically an ENGINE_TABLE instantiation, for
+example tb_cipher.c, implements a hash-table keyed by integer "nid" values.
+These nids provide the uniquenness of an algorithm/mode - and each nid will hash
+to a potentially NULL "ENGINE_PILE". An ENGINE_PILE is essentially a list of
+pointers to ENGINEs that implement that particular 'nid'. Each "pile" uses some
+caching tricks such that requests on that 'nid' will be cached and all future
+requests will return immediately (well, at least with minimal operation) unless
+a change is made to the pile, eg. perhaps an ENGINE was unloaded. The reason is
+that an application could have support for 10 ENGINEs statically linked
+in, and the machine in question may not have any of the hardware those 10
+ENGINEs support. If each of those ENGINEs has a "des_cbc" implementation, we
+want to avoid every EVP_CIPHER_CTX setup from trying (and failing) to initialise
+each of those 10 ENGINEs. Instead, the first such request will try to do that
+and will either return (and cache) a NULL ENGINE pointer or will return a
+functional reference to the first that successfully initialised. In the latter
+case it will also cache an extra functional reference to the ENGINE as a
+"default" for that 'nid'. The caching is acknowledged by a 'uptodate' variable
+that is unset only if un/registration takes place on that pile. Ie. if
+implementations of "des_cbc" are added or removed. This behaviour can be
+tweaked; the ENGINE_TABLE_FLAG_NOINIT value can be passed to
+ENGINE_set_table_flags(), in which case the only ENGINEs that tb_cipher.c will
+try to initialise from the "pile" will be those that are already initialised
+(ie. it's simply an increment of the functional reference count, and no real
+"initialisation" will take place).
+
+RSA, DSA, DH, and RAND all have their own ENGINE_TABLE code as well, and the
+difference is that they all use an implicit 'nid' of 1. Whereas EVP_CIPHERs are
+actually qualitatively different depending on 'nid' (the "des_cbc" EVP_CIPHER is
+not an interoperable implementation of "aes_256_cbc"), RSA_METHODs are
+necessarily interoperable and don't have different flavours, only different
+implementations. In other words, the ENGINE_TABLE for RSA will either be empty,
+or will have a single ENGINE_PILE hashed to by the 'nid' 1 and that pile
+represents ENGINEs that implement the single "type" of RSA there is.
+
+Cleanup - the registration and unregistration may pose questions about how
+cleanup works with the ENGINE_PILE doing all this caching nonsense (ie. when the
+application or EVP_CIPHER code releases its last reference to an ENGINE, the
+ENGINE_PILE code may still have references and thus those ENGINEs will stay
+hooked in forever). The way this is handled is via "unregistration". With these
+new ENGINE changes, an abstract ENGINE can be loaded and initialised, but that
+is an algorithm-agnostic process. Even if initialised, it will not have
+registered any of its implementations (to do so would link all class "table"
+code despite the fact the application may use only ciphers, for example). This
+is deliberately a distinct step. Moreover, registration and unregistration has
+nothing to do with whether an ENGINE is *functional* or not (ie. you can even
+register an ENGINE and its implementations without it being operational, you may
+not even have the drivers to make it operate). What actually happens with
+respect to cleanup is managed inside eng_lib.c with the "engine_cleanup_***"
+functions. These functions are internal-only and each part of ENGINE code that
+could require cleanup will, upon performing its first allocation, register a
+callback with the "engine_cleanup" code. The other part of this that makes it
+tick is that the ENGINE_TABLE instantiations (tb_***.c) use NULL as their
+initialised state. So if RSA code asks for an ENGINE and no ENGINE has
+registered an implementation, the code will simply return NULL and the tb_rsa.c
+state will be unchanged. Thus, no cleanup is required unless registration takes
+place. ENGINE_cleanup() will simply iterate across a list of registered cleanup
+callbacks calling each in turn, and will then internally delete its own storage
+(a STACK). When a cleanup callback is next registered (eg. if the cleanup() is
+part of a graceful restart and the application wants to cleanup all state then
+start again), the internal STACK storage will be freshly allocated. This is much
+the same as the situation in the ENGINE_TABLE instantiations ... NULL is the
+initialised state, so only modification operations (not queries) will cause that
+code to have to register a cleanup.
+
+What else? The bignum callbacks and associated ENGINE functions have been
+removed for two obvious reasons; (i) there was no way to generalise them to the
+mechanism now used by RSA/DSA/..., because there's no such thing as a BIGNUM
+method, and (ii) because of (i), there was no meaningful way for library or
+application code to automatically hook and use ENGINE supplied bignum functions
+anyway. Also, ENGINE_cpy() has been removed (although an internal-only version
+exists) - the idea of providing an ENGINE_cpy() function probably wasn't a good
+one and now certainly doesn't make sense in any generalised way. Some of the
+RSA, DSA, DH, and RAND functions that were fiddled during the original ENGINE
+changes have now, as a consequence, been reverted back. This is because the
+hooking of ENGINE is now automatic (and passive, it can internally use a NULL
+ENGINE pointer to simply ignore ENGINE from then on).
+
+Hell, that should be enough for now ... comments welcome.
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/build.info
new file mode 100644
index 000000000..e00802a3f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/build.info
@@ -0,0 +1,11 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        eng_err.c eng_lib.c eng_list.c eng_init.c eng_ctrl.c \
+        eng_table.c eng_pkey.c eng_fat.c eng_all.c \
+        tb_rsa.c tb_dsa.c tb_dh.c tb_rand.c \
+        tb_cipher.c tb_digest.c tb_pkmeth.c tb_asnmth.c tb_eckey.c \
+        eng_openssl.c eng_cnf.c eng_dyn.c \
+        eng_rdrand.c
+IF[{- !$disabled{devcryptoeng} -}]
+  SOURCE[../../libcrypto]=eng_devcrypto.c
+ENDIF
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_all.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_all.c
new file mode 100644
index 000000000..af306ccff
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_all.c
@@ -0,0 +1,25 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "eng_int.h"
+
+void ENGINE_load_builtin_engines(void)
+{
+    /* Some ENGINEs need this */
+    OPENSSL_cpuid_setup();
+
+    OPENSSL_init_crypto(OPENSSL_INIT_ENGINE_ALL_BUILTIN, NULL);
+}
+
+#if (defined(__OpenBSD__) || defined(__FreeBSD__) || defined(__DragonFly__)) && OPENSSL_API_COMPAT < 0x10100000L
+void ENGINE_setup_bsd_cryptodev(void)
+{
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_cnf.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_cnf.c
new file mode 100644
index 000000000..6f0a066d0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_cnf.c
@@ -0,0 +1,192 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "eng_int.h"
+#include <openssl/conf.h>
+
+/* #define ENGINE_CONF_DEBUG */
+
+/* ENGINE config module */
+
+static const char *skip_dot(const char *name)
+{
+    const char *p = strchr(name, '.');
+
+    if (p != NULL)
+        return p + 1;
+    return name;
+}
+
+static STACK_OF(ENGINE) *initialized_engines = NULL;
+
+static int int_engine_init(ENGINE *e)
+{
+    if (!ENGINE_init(e))
+        return 0;
+    if (!initialized_engines)
+        initialized_engines = sk_ENGINE_new_null();
+    if (!initialized_engines || !sk_ENGINE_push(initialized_engines, e)) {
+        ENGINE_finish(e);
+        return 0;
+    }
+    return 1;
+}
+
+static int int_engine_configure(const char *name, const char *value, const CONF *cnf)
+{
+    int i;
+    int ret = 0;
+    long do_init = -1;
+    STACK_OF(CONF_VALUE) *ecmds;
+    CONF_VALUE *ecmd = NULL;
+    const char *ctrlname, *ctrlvalue;
+    ENGINE *e = NULL;
+    int soft = 0;
+
+    name = skip_dot(name);
+#ifdef ENGINE_CONF_DEBUG
+    fprintf(stderr, "Configuring engine %s\n", name);
+#endif
+    /* Value is a section containing ENGINE commands */
+    ecmds = NCONF_get_section(cnf, value);
+
+    if (!ecmds) {
+        ENGINEerr(ENGINE_F_INT_ENGINE_CONFIGURE,
+                  ENGINE_R_ENGINE_SECTION_ERROR);
+        return 0;
+    }
+
+    for (i = 0; i < sk_CONF_VALUE_num(ecmds); i++) {
+        ecmd = sk_CONF_VALUE_value(ecmds, i);
+        ctrlname = skip_dot(ecmd->name);
+        ctrlvalue = ecmd->value;
+#ifdef ENGINE_CONF_DEBUG
+        fprintf(stderr, "ENGINE conf: doing ctrl(%s,%s)\n", ctrlname,
+                ctrlvalue);
+#endif
+
+        /* First handle some special pseudo ctrls */
+
+        /* Override engine name to use */
+        if (strcmp(ctrlname, "engine_id") == 0)
+            name = ctrlvalue;
+        else if (strcmp(ctrlname, "soft_load") == 0)
+            soft = 1;
+        /* Load a dynamic ENGINE */
+        else if (strcmp(ctrlname, "dynamic_path") == 0) {
+            e = ENGINE_by_id("dynamic");
+            if (!e)
+                goto err;
+            if (!ENGINE_ctrl_cmd_string(e, "SO_PATH", ctrlvalue, 0))
+                goto err;
+            if (!ENGINE_ctrl_cmd_string(e, "LIST_ADD", "2", 0))
+                goto err;
+            if (!ENGINE_ctrl_cmd_string(e, "LOAD", NULL, 0))
+                goto err;
+        }
+        /* ... add other pseudos here ... */
+        else {
+            /*
+             * At this point we need an ENGINE structural reference if we
+             * don't already have one.
+             */
+            if (!e) {
+                e = ENGINE_by_id(name);
+                if (!e && soft) {
+                    ERR_clear_error();
+                    return 1;
+                }
+                if (!e)
+                    goto err;
+            }
+            /*
+             * Allow "EMPTY" to mean no value: this allows a valid "value" to
+             * be passed to ctrls of type NO_INPUT
+             */
+            if (strcmp(ctrlvalue, "EMPTY") == 0)
+                ctrlvalue = NULL;
+            if (strcmp(ctrlname, "init") == 0) {
+                if (!NCONF_get_number_e(cnf, value, "init", &do_init))
+                    goto err;
+                if (do_init == 1) {
+                    if (!int_engine_init(e))
+                        goto err;
+                } else if (do_init != 0) {
+                    ENGINEerr(ENGINE_F_INT_ENGINE_CONFIGURE,
+                              ENGINE_R_INVALID_INIT_VALUE);
+                    goto err;
+                }
+            } else if (strcmp(ctrlname, "default_algorithms") == 0) {
+                if (!ENGINE_set_default_string(e, ctrlvalue))
+                    goto err;
+            } else if (!ENGINE_ctrl_cmd_string(e, ctrlname, ctrlvalue, 0))
+                goto err;
+        }
+
+    }
+    if (e && (do_init == -1) && !int_engine_init(e)) {
+        ecmd = NULL;
+        goto err;
+    }
+    ret = 1;
+ err:
+    if (ret != 1) {
+        ENGINEerr(ENGINE_F_INT_ENGINE_CONFIGURE,
+                  ENGINE_R_ENGINE_CONFIGURATION_ERROR);
+        if (ecmd)
+            ERR_add_error_data(6, "section=", ecmd->section,
+                               ", name=", ecmd->name,
+                               ", value=", ecmd->value);
+    }
+    ENGINE_free(e);
+    return ret;
+}
+
+static int int_engine_module_init(CONF_IMODULE *md, const CONF *cnf)
+{
+    STACK_OF(CONF_VALUE) *elist;
+    CONF_VALUE *cval;
+    int i;
+#ifdef ENGINE_CONF_DEBUG
+    fprintf(stderr, "Called engine module: name %s, value %s\n",
+            CONF_imodule_get_name(md), CONF_imodule_get_value(md));
+#endif
+    /* Value is a section containing ENGINEs to configure */
+    elist = NCONF_get_section(cnf, CONF_imodule_get_value(md));
+
+    if (!elist) {
+        ENGINEerr(ENGINE_F_INT_ENGINE_MODULE_INIT,
+                  ENGINE_R_ENGINES_SECTION_ERROR);
+        return 0;
+    }
+
+    for (i = 0; i < sk_CONF_VALUE_num(elist); i++) {
+        cval = sk_CONF_VALUE_value(elist, i);
+        if (!int_engine_configure(cval->name, cval->value, cnf))
+            return 0;
+    }
+
+    return 1;
+}
+
+static void int_engine_module_finish(CONF_IMODULE *md)
+{
+    ENGINE *e;
+
+    while ((e = sk_ENGINE_pop(initialized_engines)))
+        ENGINE_finish(e);
+    sk_ENGINE_free(initialized_engines);
+    initialized_engines = NULL;
+}
+
+void ENGINE_add_conf_module(void)
+{
+    CONF_module_add("engines",
+                    int_engine_module_init, int_engine_module_finish);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_ctrl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_ctrl.c
new file mode 100644
index 000000000..3bc4aab16
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_ctrl.c
@@ -0,0 +1,330 @@
+/*
+ * Copyright 2001-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "eng_int.h"
+
+/*
+ * When querying a ENGINE-specific control command's 'description', this
+ * string is used if the ENGINE_CMD_DEFN has cmd_desc set to NULL.
+ */
+static const char *int_no_description = "";
+
+/*
+ * These internal functions handle 'CMD'-related control commands when the
+ * ENGINE in question has asked us to take care of it (ie. the ENGINE did not
+ * set the ENGINE_FLAGS_MANUAL_CMD_CTRL flag.
+ */
+
+static int int_ctrl_cmd_is_null(const ENGINE_CMD_DEFN *defn)
+{
+    if ((defn->cmd_num == 0) || (defn->cmd_name == NULL))
+        return 1;
+    return 0;
+}
+
+static int int_ctrl_cmd_by_name(const ENGINE_CMD_DEFN *defn, const char *s)
+{
+    int idx = 0;
+    while (!int_ctrl_cmd_is_null(defn) && (strcmp(defn->cmd_name, s) != 0)) {
+        idx++;
+        defn++;
+    }
+    if (int_ctrl_cmd_is_null(defn))
+        /* The given name wasn't found */
+        return -1;
+    return idx;
+}
+
+static int int_ctrl_cmd_by_num(const ENGINE_CMD_DEFN *defn, unsigned int num)
+{
+    int idx = 0;
+    /*
+     * NB: It is stipulated that 'cmd_defn' lists are ordered by cmd_num. So
+     * our searches don't need to take any longer than necessary.
+     */
+    while (!int_ctrl_cmd_is_null(defn) && (defn->cmd_num < num)) {
+        idx++;
+        defn++;
+    }
+    if (defn->cmd_num == num)
+        return idx;
+    /* The given cmd_num wasn't found */
+    return -1;
+}
+
+static int int_ctrl_helper(ENGINE *e, int cmd, long i, void *p,
+                           void (*f) (void))
+{
+    int idx;
+    char *s = (char *)p;
+    const ENGINE_CMD_DEFN *cdp;
+
+    /* Take care of the easy one first (eg. it requires no searches) */
+    if (cmd == ENGINE_CTRL_GET_FIRST_CMD_TYPE) {
+        if ((e->cmd_defns == NULL) || int_ctrl_cmd_is_null(e->cmd_defns))
+            return 0;
+        return e->cmd_defns->cmd_num;
+    }
+    /* One or two commands require that "p" be a valid string buffer */
+    if ((cmd == ENGINE_CTRL_GET_CMD_FROM_NAME) ||
+        (cmd == ENGINE_CTRL_GET_NAME_FROM_CMD) ||
+        (cmd == ENGINE_CTRL_GET_DESC_FROM_CMD)) {
+        if (s == NULL) {
+            ENGINEerr(ENGINE_F_INT_CTRL_HELPER, ERR_R_PASSED_NULL_PARAMETER);
+            return -1;
+        }
+    }
+    /* Now handle cmd_name -> cmd_num conversion */
+    if (cmd == ENGINE_CTRL_GET_CMD_FROM_NAME) {
+        if ((e->cmd_defns == NULL)
+            || ((idx = int_ctrl_cmd_by_name(e->cmd_defns, s)) < 0)) {
+            ENGINEerr(ENGINE_F_INT_CTRL_HELPER, ENGINE_R_INVALID_CMD_NAME);
+            return -1;
+        }
+        return e->cmd_defns[idx].cmd_num;
+    }
+    /*
+     * For the rest of the commands, the 'long' argument must specify a valid
+     * command number - so we need to conduct a search.
+     */
+    if ((e->cmd_defns == NULL)
+        || ((idx = int_ctrl_cmd_by_num(e->cmd_defns, (unsigned int)i)) < 0)) {
+        ENGINEerr(ENGINE_F_INT_CTRL_HELPER, ENGINE_R_INVALID_CMD_NUMBER);
+        return -1;
+    }
+    /* Now the logic splits depending on command type */
+    cdp = &e->cmd_defns[idx];
+    switch (cmd) {
+    case ENGINE_CTRL_GET_NEXT_CMD_TYPE:
+        cdp++;
+        return int_ctrl_cmd_is_null(cdp) ? 0 : cdp->cmd_num;
+    case ENGINE_CTRL_GET_NAME_LEN_FROM_CMD:
+        return strlen(cdp->cmd_name);
+    case ENGINE_CTRL_GET_NAME_FROM_CMD:
+        return strlen(strcpy(s, cdp->cmd_name));
+    case ENGINE_CTRL_GET_DESC_LEN_FROM_CMD:
+        return strlen(cdp->cmd_desc == NULL ? int_no_description
+                                            : cdp->cmd_desc);
+    case ENGINE_CTRL_GET_DESC_FROM_CMD:
+        return strlen(strcpy(s, cdp->cmd_desc == NULL ? int_no_description
+                                                      : cdp->cmd_desc));
+    case ENGINE_CTRL_GET_CMD_FLAGS:
+        return cdp->cmd_flags;
+    }
+    /* Shouldn't really be here ... */
+    ENGINEerr(ENGINE_F_INT_CTRL_HELPER, ENGINE_R_INTERNAL_LIST_ERROR);
+    return -1;
+}
+
+int ENGINE_ctrl(ENGINE *e, int cmd, long i, void *p, void (*f) (void))
+{
+    int ctrl_exists, ref_exists;
+    if (e == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_CTRL, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    ref_exists = ((e->struct_ref > 0) ? 1 : 0);
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    ctrl_exists = ((e->ctrl == NULL) ? 0 : 1);
+    if (!ref_exists) {
+        ENGINEerr(ENGINE_F_ENGINE_CTRL, ENGINE_R_NO_REFERENCE);
+        return 0;
+    }
+    /*
+     * Intercept any "root-level" commands before trying to hand them on to
+     * ctrl() handlers.
+     */
+    switch (cmd) {
+    case ENGINE_CTRL_HAS_CTRL_FUNCTION:
+        return ctrl_exists;
+    case ENGINE_CTRL_GET_FIRST_CMD_TYPE:
+    case ENGINE_CTRL_GET_NEXT_CMD_TYPE:
+    case ENGINE_CTRL_GET_CMD_FROM_NAME:
+    case ENGINE_CTRL_GET_NAME_LEN_FROM_CMD:
+    case ENGINE_CTRL_GET_NAME_FROM_CMD:
+    case ENGINE_CTRL_GET_DESC_LEN_FROM_CMD:
+    case ENGINE_CTRL_GET_DESC_FROM_CMD:
+    case ENGINE_CTRL_GET_CMD_FLAGS:
+        if (ctrl_exists && !(e->flags & ENGINE_FLAGS_MANUAL_CMD_CTRL))
+            return int_ctrl_helper(e, cmd, i, p, f);
+        if (!ctrl_exists) {
+            ENGINEerr(ENGINE_F_ENGINE_CTRL, ENGINE_R_NO_CONTROL_FUNCTION);
+            /*
+             * For these cmd-related functions, failure is indicated by a -1
+             * return value (because 0 is used as a valid return in some
+             * places).
+             */
+            return -1;
+        }
+    default:
+        break;
+    }
+    /* Anything else requires a ctrl() handler to exist. */
+    if (!ctrl_exists) {
+        ENGINEerr(ENGINE_F_ENGINE_CTRL, ENGINE_R_NO_CONTROL_FUNCTION);
+        return 0;
+    }
+    return e->ctrl(e, cmd, i, p, f);
+}
+
+int ENGINE_cmd_is_executable(ENGINE *e, int cmd)
+{
+    int flags;
+    if ((flags =
+         ENGINE_ctrl(e, ENGINE_CTRL_GET_CMD_FLAGS, cmd, NULL, NULL)) < 0) {
+        ENGINEerr(ENGINE_F_ENGINE_CMD_IS_EXECUTABLE,
+                  ENGINE_R_INVALID_CMD_NUMBER);
+        return 0;
+    }
+    if (!(flags & ENGINE_CMD_FLAG_NO_INPUT) &&
+        !(flags & ENGINE_CMD_FLAG_NUMERIC) &&
+        !(flags & ENGINE_CMD_FLAG_STRING))
+        return 0;
+    return 1;
+}
+
+int ENGINE_ctrl_cmd(ENGINE *e, const char *cmd_name,
+                    long i, void *p, void (*f) (void), int cmd_optional)
+{
+    int num;
+
+    if (e == NULL || cmd_name == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_CTRL_CMD, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    if (e->ctrl == NULL
+        || (num = ENGINE_ctrl(e, ENGINE_CTRL_GET_CMD_FROM_NAME,
+                              0, (void *)cmd_name, NULL)) <= 0) {
+        /*
+         * If the command didn't *have* to be supported, we fake success.
+         * This allows certain settings to be specified for multiple ENGINEs
+         * and only require a change of ENGINE id (without having to
+         * selectively apply settings). Eg. changing from a hardware device
+         * back to the regular software ENGINE without editing the config
+         * file, etc.
+         */
+        if (cmd_optional) {
+            ERR_clear_error();
+            return 1;
+        }
+        ENGINEerr(ENGINE_F_ENGINE_CTRL_CMD, ENGINE_R_INVALID_CMD_NAME);
+        return 0;
+    }
+    /*
+     * Force the result of the control command to 0 or 1, for the reasons
+     * mentioned before.
+     */
+    if (ENGINE_ctrl(e, num, i, p, f) > 0)
+        return 1;
+    return 0;
+}
+
+int ENGINE_ctrl_cmd_string(ENGINE *e, const char *cmd_name, const char *arg,
+                           int cmd_optional)
+{
+    int num, flags;
+    long l;
+    char *ptr;
+
+    if (e == NULL || cmd_name == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_CTRL_CMD_STRING, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    if (e->ctrl == NULL
+        || (num = ENGINE_ctrl(e, ENGINE_CTRL_GET_CMD_FROM_NAME,
+                              0, (void *)cmd_name, NULL)) <= 0) {
+        /*
+         * If the command didn't *have* to be supported, we fake success.
+         * This allows certain settings to be specified for multiple ENGINEs
+         * and only require a change of ENGINE id (without having to
+         * selectively apply settings). Eg. changing from a hardware device
+         * back to the regular software ENGINE without editing the config
+         * file, etc.
+         */
+        if (cmd_optional) {
+            ERR_clear_error();
+            return 1;
+        }
+        ENGINEerr(ENGINE_F_ENGINE_CTRL_CMD_STRING, ENGINE_R_INVALID_CMD_NAME);
+        return 0;
+    }
+    if (!ENGINE_cmd_is_executable(e, num)) {
+        ENGINEerr(ENGINE_F_ENGINE_CTRL_CMD_STRING,
+                  ENGINE_R_CMD_NOT_EXECUTABLE);
+        return 0;
+    }
+
+    flags = ENGINE_ctrl(e, ENGINE_CTRL_GET_CMD_FLAGS, num, NULL, NULL);
+    if (flags < 0) {
+        /*
+         * Shouldn't happen, given that ENGINE_cmd_is_executable() returned
+         * success.
+         */
+        ENGINEerr(ENGINE_F_ENGINE_CTRL_CMD_STRING,
+                  ENGINE_R_INTERNAL_LIST_ERROR);
+        return 0;
+    }
+    /*
+     * If the command takes no input, there must be no input. And vice versa.
+     */
+    if (flags & ENGINE_CMD_FLAG_NO_INPUT) {
+        if (arg != NULL) {
+            ENGINEerr(ENGINE_F_ENGINE_CTRL_CMD_STRING,
+                      ENGINE_R_COMMAND_TAKES_NO_INPUT);
+            return 0;
+        }
+        /*
+         * We deliberately force the result of ENGINE_ctrl() to 0 or 1 rather
+         * than returning it as "return data". This is to ensure usage of
+         * these commands is consistent across applications and that certain
+         * applications don't understand it one way, and others another.
+         */
+        if (ENGINE_ctrl(e, num, 0, (void *)arg, NULL) > 0)
+            return 1;
+        return 0;
+    }
+    /* So, we require input */
+    if (arg == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_CTRL_CMD_STRING,
+                  ENGINE_R_COMMAND_TAKES_INPUT);
+        return 0;
+    }
+    /* If it takes string input, that's easy */
+    if (flags & ENGINE_CMD_FLAG_STRING) {
+        /* Same explanation as above */
+        if (ENGINE_ctrl(e, num, 0, (void *)arg, NULL) > 0)
+            return 1;
+        return 0;
+    }
+    /*
+     * If it doesn't take numeric either, then it is unsupported for use in a
+     * config-setting situation, which is what this function is for. This
+     * should never happen though, because ENGINE_cmd_is_executable() was
+     * used.
+     */
+    if (!(flags & ENGINE_CMD_FLAG_NUMERIC)) {
+        ENGINEerr(ENGINE_F_ENGINE_CTRL_CMD_STRING,
+                  ENGINE_R_INTERNAL_LIST_ERROR);
+        return 0;
+    }
+    l = strtol(arg, &ptr, 10);
+    if ((arg == ptr) || (*ptr != '\0')) {
+        ENGINEerr(ENGINE_F_ENGINE_CTRL_CMD_STRING,
+                  ENGINE_R_ARGUMENT_IS_NOT_A_NUMBER);
+        return 0;
+    }
+    /*
+     * Force the result of the control command to 0 or 1, for the reasons
+     * mentioned before.
+     */
+    if (ENGINE_ctrl(e, num, l, NULL, NULL) > 0)
+        return 1;
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_devcrypto.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_devcrypto.c
new file mode 100644
index 000000000..717d7c277
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_devcrypto.c
@@ -0,0 +1,836 @@
+/*
+ * Copyright 2017-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include <string.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <fcntl.h>
+#include <sys/ioctl.h>
+#include <unistd.h>
+#include <assert.h>
+
+#include <openssl/evp.h>
+#include <openssl/err.h>
+#include <openssl/engine.h>
+#include <openssl/objects.h>
+#include <crypto/cryptodev.h>
+
+#include "internal/engine.h"
+
+/* #define ENGINE_DEVCRYPTO_DEBUG */
+
+#ifdef CRYPTO_ALGORITHM_MIN
+# define CHECK_BSD_STYLE_MACROS
+#endif
+
+/*
+ * ONE global file descriptor for all sessions.  This allows operations
+ * such as digest session data copying (see digest_copy()), but is also
+ * saner...  why re-open /dev/crypto for every session?
+ */
+static int cfd;
+
+static int clean_devcrypto_session(struct session_op *sess) {
+    if (ioctl(cfd, CIOCFSESSION, &sess->ses) < 0) {
+        SYSerr(SYS_F_IOCTL, errno);
+        return 0;
+    }
+    memset(sess, 0, sizeof(struct session_op));
+    return 1;
+}
+
+/******************************************************************************
+ *
+ * Ciphers
+ *
+ * Because they all do the same basic operation, we have only one set of
+ * method functions for them all to share, and a mapping table between
+ * NIDs and cryptodev IDs, with all the necessary size data.
+ *
+ *****/
+
+struct cipher_ctx {
+    struct session_op sess;
+    int op;                      /* COP_ENCRYPT or COP_DECRYPT */
+    unsigned long mode;          /* EVP_CIPH_*_MODE */
+
+    /* to handle ctr mode being a stream cipher */
+    unsigned char partial[EVP_MAX_BLOCK_LENGTH];
+    unsigned int blocksize, num;
+};
+
+static const struct cipher_data_st {
+    int nid;
+    int blocksize;
+    int keylen;
+    int ivlen;
+    int flags;
+    int devcryptoid;
+} cipher_data[] = {
+#ifndef OPENSSL_NO_DES
+    { NID_des_cbc, 8, 8, 8, EVP_CIPH_CBC_MODE, CRYPTO_DES_CBC },
+    { NID_des_ede3_cbc, 8, 24, 8, EVP_CIPH_CBC_MODE, CRYPTO_3DES_CBC },
+#endif
+#ifndef OPENSSL_NO_BF
+    { NID_bf_cbc, 8, 16, 8, EVP_CIPH_CBC_MODE, CRYPTO_BLF_CBC },
+#endif
+#ifndef OPENSSL_NO_CAST
+    { NID_cast5_cbc, 8, 16, 8, EVP_CIPH_CBC_MODE, CRYPTO_CAST_CBC },
+#endif
+    { NID_aes_128_cbc, 16, 128 / 8, 16, EVP_CIPH_CBC_MODE, CRYPTO_AES_CBC },
+    { NID_aes_192_cbc, 16, 192 / 8, 16, EVP_CIPH_CBC_MODE, CRYPTO_AES_CBC },
+    { NID_aes_256_cbc, 16, 256 / 8, 16, EVP_CIPH_CBC_MODE, CRYPTO_AES_CBC },
+#ifndef OPENSSL_NO_RC4
+    { NID_rc4, 1, 16, 0, EVP_CIPH_STREAM_CIPHER, CRYPTO_ARC4 },
+#endif
+#if !defined(CHECK_BSD_STYLE_MACROS) || defined(CRYPTO_AES_CTR)
+    { NID_aes_128_ctr, 16, 128 / 8, 16, EVP_CIPH_CTR_MODE, CRYPTO_AES_CTR },
+    { NID_aes_192_ctr, 16, 192 / 8, 16, EVP_CIPH_CTR_MODE, CRYPTO_AES_CTR },
+    { NID_aes_256_ctr, 16, 256 / 8, 16, EVP_CIPH_CTR_MODE, CRYPTO_AES_CTR },
+#endif
+#if 0                            /* Not yet supported */
+    { NID_aes_128_xts, 16, 128 / 8 * 2, 16, EVP_CIPH_XTS_MODE, CRYPTO_AES_XTS },
+    { NID_aes_256_xts, 16, 256 / 8 * 2, 16, EVP_CIPH_XTS_MODE, CRYPTO_AES_XTS },
+#endif
+#if !defined(CHECK_BSD_STYLE_MACROS) || defined(CRYPTO_AES_ECB)
+    { NID_aes_128_ecb, 16, 128 / 8, 0, EVP_CIPH_ECB_MODE, CRYPTO_AES_ECB },
+    { NID_aes_192_ecb, 16, 192 / 8, 0, EVP_CIPH_ECB_MODE, CRYPTO_AES_ECB },
+    { NID_aes_256_ecb, 16, 256 / 8, 0, EVP_CIPH_ECB_MODE, CRYPTO_AES_ECB },
+#endif
+#if 0                            /* Not yet supported */
+    { NID_aes_128_gcm, 16, 128 / 8, 16, EVP_CIPH_GCM_MODE, CRYPTO_AES_GCM },
+    { NID_aes_192_gcm, 16, 192 / 8, 16, EVP_CIPH_GCM_MODE, CRYPTO_AES_GCM },
+    { NID_aes_256_gcm, 16, 256 / 8, 16, EVP_CIPH_GCM_MODE, CRYPTO_AES_GCM },
+#endif
+#ifndef OPENSSL_NO_CAMELLIA
+    { NID_camellia_128_cbc, 16, 128 / 8, 16, EVP_CIPH_CBC_MODE,
+      CRYPTO_CAMELLIA_CBC },
+    { NID_camellia_192_cbc, 16, 192 / 8, 16, EVP_CIPH_CBC_MODE,
+      CRYPTO_CAMELLIA_CBC },
+    { NID_camellia_256_cbc, 16, 256 / 8, 16, EVP_CIPH_CBC_MODE,
+      CRYPTO_CAMELLIA_CBC },
+#endif
+};
+
+static size_t get_cipher_data_index(int nid)
+{
+    size_t i;
+
+    for (i = 0; i < OSSL_NELEM(cipher_data); i++)
+        if (nid == cipher_data[i].nid)
+            return i;
+
+    /*
+     * Code further down must make sure that only NIDs in the table above
+     * are used.  If any other NID reaches this function, there's a grave
+     * coding error further down.
+     */
+    assert("Code that never should be reached" == NULL);
+    return -1;
+}
+
+static const struct cipher_data_st *get_cipher_data(int nid)
+{
+    return &cipher_data[get_cipher_data_index(nid)];
+}
+
+/*
+ * Following are the three necessary functions to map OpenSSL functionality
+ * with cryptodev.
+ */
+
+static int cipher_init(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                       const unsigned char *iv, int enc)
+{
+    struct cipher_ctx *cipher_ctx =
+        (struct cipher_ctx *)EVP_CIPHER_CTX_get_cipher_data(ctx);
+    const struct cipher_data_st *cipher_d =
+        get_cipher_data(EVP_CIPHER_CTX_nid(ctx));
+
+    /* cleanup a previous session */
+    if (cipher_ctx->sess.ses != 0 &&
+        clean_devcrypto_session(&cipher_ctx->sess) == 0)
+        return 0;
+
+    cipher_ctx->sess.cipher = cipher_d->devcryptoid;
+    cipher_ctx->sess.keylen = cipher_d->keylen;
+    cipher_ctx->sess.key = (void *)key;
+    cipher_ctx->op = enc ? COP_ENCRYPT : COP_DECRYPT;
+    cipher_ctx->mode = cipher_d->flags & EVP_CIPH_MODE;
+    cipher_ctx->blocksize = cipher_d->blocksize;
+    if (ioctl(cfd, CIOCGSESSION, &cipher_ctx->sess) < 0) {
+        SYSerr(SYS_F_IOCTL, errno);
+        return 0;
+    }
+
+    return 1;
+}
+
+static int cipher_do_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                            const unsigned char *in, size_t inl)
+{
+    struct cipher_ctx *cipher_ctx =
+        (struct cipher_ctx *)EVP_CIPHER_CTX_get_cipher_data(ctx);
+    struct crypt_op cryp;
+    unsigned char *iv = EVP_CIPHER_CTX_iv_noconst(ctx);
+#if !defined(COP_FLAG_WRITE_IV)
+    unsigned char saved_iv[EVP_MAX_IV_LENGTH];
+    const unsigned char *ivptr;
+    size_t nblocks, ivlen;
+#endif
+
+    memset(&cryp, 0, sizeof(cryp));
+    cryp.ses = cipher_ctx->sess.ses;
+    cryp.len = inl;
+    cryp.src = (void *)in;
+    cryp.dst = (void *)out;
+    cryp.iv = (void *)iv;
+    cryp.op = cipher_ctx->op;
+#if !defined(COP_FLAG_WRITE_IV)
+    cryp.flags = 0;
+
+    ivlen = EVP_CIPHER_CTX_iv_length(ctx);
+    if (ivlen > 0)
+        switch (cipher_ctx->mode) {
+        case EVP_CIPH_CBC_MODE:
+            assert(inl >= ivlen);
+            if (!EVP_CIPHER_CTX_encrypting(ctx)) {
+                ivptr = in + inl - ivlen;
+                memcpy(saved_iv, ivptr, ivlen);
+            }
+            break;
+
+        case EVP_CIPH_CTR_MODE:
+            break;
+
+        default: /* should not happen */
+            return 0;
+        }
+#else
+    cryp.flags = COP_FLAG_WRITE_IV;
+#endif
+
+    if (ioctl(cfd, CIOCCRYPT, &cryp) < 0) {
+        SYSerr(SYS_F_IOCTL, errno);
+        return 0;
+    }
+
+#if !defined(COP_FLAG_WRITE_IV)
+    if (ivlen > 0)
+        switch (cipher_ctx->mode) {
+        case EVP_CIPH_CBC_MODE:
+            assert(inl >= ivlen);
+            if (EVP_CIPHER_CTX_encrypting(ctx))
+                ivptr = out + inl - ivlen;
+            else
+                ivptr = saved_iv;
+
+            memcpy(iv, ivptr, ivlen);
+            break;
+
+        case EVP_CIPH_CTR_MODE:
+            nblocks = (inl + cipher_ctx->blocksize - 1)
+                      / cipher_ctx->blocksize;
+            do {
+                ivlen--;
+                nblocks += iv[ivlen];
+                iv[ivlen] = (uint8_t) nblocks;
+                nblocks >>= 8;
+            } while (ivlen);
+            break;
+
+        default: /* should not happen */
+            return 0;
+        }
+#endif
+
+    return 1;
+}
+
+static int ctr_do_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                         const unsigned char *in, size_t inl)
+{
+    struct cipher_ctx *cipher_ctx =
+        (struct cipher_ctx *)EVP_CIPHER_CTX_get_cipher_data(ctx);
+    size_t nblocks, len;
+
+    /* initial partial block */
+    while (cipher_ctx->num && inl) {
+        (*out++) = *(in++) ^ cipher_ctx->partial[cipher_ctx->num];
+        --inl;
+        cipher_ctx->num = (cipher_ctx->num + 1) % cipher_ctx->blocksize;
+    }
+
+    /* full blocks */
+    if (inl > (unsigned int) cipher_ctx->blocksize) {
+        nblocks = inl/cipher_ctx->blocksize;
+        len = nblocks * cipher_ctx->blocksize;
+        if (cipher_do_cipher(ctx, out, in, len) < 1)
+            return 0;
+        inl -= len;
+        out += len;
+        in += len;
+    }
+
+    /* final partial block */
+    if (inl) {
+        memset(cipher_ctx->partial, 0, cipher_ctx->blocksize);
+        if (cipher_do_cipher(ctx, cipher_ctx->partial, cipher_ctx->partial,
+            cipher_ctx->blocksize) < 1)
+            return 0;
+        while (inl--) {
+            out[cipher_ctx->num] = in[cipher_ctx->num]
+                                   ^ cipher_ctx->partial[cipher_ctx->num];
+            cipher_ctx->num++;
+        }
+    }
+
+    return 1;
+}
+
+static int cipher_ctrl(EVP_CIPHER_CTX *ctx, int type, int p1, void* p2)
+{
+    struct cipher_ctx *cipher_ctx =
+        (struct cipher_ctx *)EVP_CIPHER_CTX_get_cipher_data(ctx);
+    EVP_CIPHER_CTX *to_ctx = (EVP_CIPHER_CTX *)p2;
+    struct cipher_ctx *to_cipher_ctx;
+
+    switch (type) {
+    case EVP_CTRL_COPY:
+        if (cipher_ctx == NULL)
+            return 1;
+        /* when copying the context, a new session needs to be initialized */
+        to_cipher_ctx =
+            (struct cipher_ctx *)EVP_CIPHER_CTX_get_cipher_data(to_ctx);
+        memset(&to_cipher_ctx->sess, 0, sizeof(to_cipher_ctx->sess));
+        return cipher_init(to_ctx, cipher_ctx->sess.key, EVP_CIPHER_CTX_iv(ctx),
+                           (cipher_ctx->op == COP_ENCRYPT));
+
+    case EVP_CTRL_INIT:
+        memset(&cipher_ctx->sess, 0, sizeof(cipher_ctx->sess));
+        return 1;
+
+    default:
+        break;
+    }
+
+    return -1;
+}
+
+static int cipher_cleanup(EVP_CIPHER_CTX *ctx)
+{
+    struct cipher_ctx *cipher_ctx =
+        (struct cipher_ctx *)EVP_CIPHER_CTX_get_cipher_data(ctx);
+
+    return clean_devcrypto_session(&cipher_ctx->sess);
+}
+
+/*
+ * Keep a table of known nids and associated methods.
+ * Note that known_cipher_nids[] isn't necessarily indexed the same way as
+ * cipher_data[] above, which known_cipher_methods[] is.
+ */
+static int known_cipher_nids[OSSL_NELEM(cipher_data)];
+static int known_cipher_nids_amount = -1; /* -1 indicates not yet initialised */
+static EVP_CIPHER *known_cipher_methods[OSSL_NELEM(cipher_data)] = { NULL, };
+
+static void prepare_cipher_methods(void)
+{
+    size_t i;
+    struct session_op sess;
+    unsigned long cipher_mode;
+
+    memset(&sess, 0, sizeof(sess));
+    sess.key = (void *)"01234567890123456789012345678901234567890123456789";
+
+    for (i = 0, known_cipher_nids_amount = 0;
+         i < OSSL_NELEM(cipher_data); i++) {
+
+        /*
+         * Check that the algo is really availably by trying to open and close
+         * a session.
+         */
+        sess.cipher = cipher_data[i].devcryptoid;
+        sess.keylen = cipher_data[i].keylen;
+        if (ioctl(cfd, CIOCGSESSION, &sess) < 0
+            || ioctl(cfd, CIOCFSESSION, &sess.ses) < 0)
+            continue;
+
+        cipher_mode = cipher_data[i].flags & EVP_CIPH_MODE;
+
+        if ((known_cipher_methods[i] =
+                 EVP_CIPHER_meth_new(cipher_data[i].nid,
+                                     cipher_mode == EVP_CIPH_CTR_MODE ? 1 :
+                                                    cipher_data[i].blocksize,
+                                     cipher_data[i].keylen)) == NULL
+            || !EVP_CIPHER_meth_set_iv_length(known_cipher_methods[i],
+                                              cipher_data[i].ivlen)
+            || !EVP_CIPHER_meth_set_flags(known_cipher_methods[i],
+                                          cipher_data[i].flags
+                                          | EVP_CIPH_CUSTOM_COPY
+                                          | EVP_CIPH_CTRL_INIT
+                                          | EVP_CIPH_FLAG_DEFAULT_ASN1)
+            || !EVP_CIPHER_meth_set_init(known_cipher_methods[i], cipher_init)
+            || !EVP_CIPHER_meth_set_do_cipher(known_cipher_methods[i],
+                                     cipher_mode == EVP_CIPH_CTR_MODE ?
+                                              ctr_do_cipher :
+                                              cipher_do_cipher)
+            || !EVP_CIPHER_meth_set_ctrl(known_cipher_methods[i], cipher_ctrl)
+            || !EVP_CIPHER_meth_set_cleanup(known_cipher_methods[i],
+                                            cipher_cleanup)
+            || !EVP_CIPHER_meth_set_impl_ctx_size(known_cipher_methods[i],
+                                                  sizeof(struct cipher_ctx))) {
+            EVP_CIPHER_meth_free(known_cipher_methods[i]);
+            known_cipher_methods[i] = NULL;
+        } else {
+            known_cipher_nids[known_cipher_nids_amount++] =
+                cipher_data[i].nid;
+        }
+    }
+}
+
+static const EVP_CIPHER *get_cipher_method(int nid)
+{
+    size_t i = get_cipher_data_index(nid);
+
+    if (i == (size_t)-1)
+        return NULL;
+    return known_cipher_methods[i];
+}
+
+static int get_cipher_nids(const int **nids)
+{
+    *nids = known_cipher_nids;
+    return known_cipher_nids_amount;
+}
+
+static void destroy_cipher_method(int nid)
+{
+    size_t i = get_cipher_data_index(nid);
+
+    EVP_CIPHER_meth_free(known_cipher_methods[i]);
+    known_cipher_methods[i] = NULL;
+}
+
+static void destroy_all_cipher_methods(void)
+{
+    size_t i;
+
+    for (i = 0; i < OSSL_NELEM(cipher_data); i++)
+        destroy_cipher_method(cipher_data[i].nid);
+}
+
+static int devcrypto_ciphers(ENGINE *e, const EVP_CIPHER **cipher,
+                             const int **nids, int nid)
+{
+    if (cipher == NULL)
+        return get_cipher_nids(nids);
+
+    *cipher = get_cipher_method(nid);
+
+    return *cipher != NULL;
+}
+
+/*
+ * We only support digests if the cryptodev implementation supports multiple
+ * data updates and session copying.  Otherwise, we would be forced to maintain
+ * a cache, which is perilous if there's a lot of data coming in (if someone
+ * wants to checksum an OpenSSL tarball, for example).
+ */
+#if defined(CIOCCPHASH) && defined(COP_FLAG_UPDATE) && defined(COP_FLAG_FINAL)
+#define IMPLEMENT_DIGEST
+
+/******************************************************************************
+ *
+ * Digests
+ *
+ * Because they all do the same basic operation, we have only one set of
+ * method functions for them all to share, and a mapping table between
+ * NIDs and cryptodev IDs, with all the necessary size data.
+ *
+ *****/
+
+struct digest_ctx {
+    struct session_op sess;
+    /* This signals that the init function was called, not that it succeeded. */
+    int init_called;
+};
+
+static const struct digest_data_st {
+    int nid;
+    int blocksize;
+    int digestlen;
+    int devcryptoid;
+} digest_data[] = {
+#ifndef OPENSSL_NO_MD5
+    { NID_md5, /* MD5_CBLOCK */ 64, 16, CRYPTO_MD5 },
+#endif
+    { NID_sha1, SHA_CBLOCK, 20, CRYPTO_SHA1 },
+#ifndef OPENSSL_NO_RMD160
+# if !defined(CHECK_BSD_STYLE_MACROS) || defined(CRYPTO_RIPEMD160)
+    { NID_ripemd160, /* RIPEMD160_CBLOCK */ 64, 20, CRYPTO_RIPEMD160 },
+# endif
+#endif
+#if !defined(CHECK_BSD_STYLE_MACROS) || defined(CRYPTO_SHA2_224)
+    { NID_sha224, SHA256_CBLOCK, 224 / 8, CRYPTO_SHA2_224 },
+#endif
+#if !defined(CHECK_BSD_STYLE_MACROS) || defined(CRYPTO_SHA2_256)
+    { NID_sha256, SHA256_CBLOCK, 256 / 8, CRYPTO_SHA2_256 },
+#endif
+#if !defined(CHECK_BSD_STYLE_MACROS) || defined(CRYPTO_SHA2_384)
+    { NID_sha384, SHA512_CBLOCK, 384 / 8, CRYPTO_SHA2_384 },
+#endif
+#if !defined(CHECK_BSD_STYLE_MACROS) || defined(CRYPTO_SHA2_512)
+    { NID_sha512, SHA512_CBLOCK, 512 / 8, CRYPTO_SHA2_512 },
+#endif
+};
+
+static size_t get_digest_data_index(int nid)
+{
+    size_t i;
+
+    for (i = 0; i < OSSL_NELEM(digest_data); i++)
+        if (nid == digest_data[i].nid)
+            return i;
+
+    /*
+     * Code further down must make sure that only NIDs in the table above
+     * are used.  If any other NID reaches this function, there's a grave
+     * coding error further down.
+     */
+    assert("Code that never should be reached" == NULL);
+    return -1;
+}
+
+static const struct digest_data_st *get_digest_data(int nid)
+{
+    return &digest_data[get_digest_data_index(nid)];
+}
+
+/*
+ * Following are the four necessary functions to map OpenSSL functionality
+ * with cryptodev.
+ */
+
+static int digest_init(EVP_MD_CTX *ctx)
+{
+    struct digest_ctx *digest_ctx =
+        (struct digest_ctx *)EVP_MD_CTX_md_data(ctx);
+    const struct digest_data_st *digest_d =
+        get_digest_data(EVP_MD_CTX_type(ctx));
+
+    digest_ctx->init_called = 1;
+
+    memset(&digest_ctx->sess, 0, sizeof(digest_ctx->sess));
+    digest_ctx->sess.mac = digest_d->devcryptoid;
+    if (ioctl(cfd, CIOCGSESSION, &digest_ctx->sess) < 0) {
+        SYSerr(SYS_F_IOCTL, errno);
+        return 0;
+    }
+
+    return 1;
+}
+
+static int digest_op(struct digest_ctx *ctx, const void *src, size_t srclen,
+                     void *res, unsigned int flags)
+{
+    struct crypt_op cryp;
+
+    memset(&cryp, 0, sizeof(cryp));
+    cryp.ses = ctx->sess.ses;
+    cryp.len = srclen;
+    cryp.src = (void *)src;
+    cryp.dst = NULL;
+    cryp.mac = res;
+    cryp.flags = flags;
+    return ioctl(cfd, CIOCCRYPT, &cryp);
+}
+
+static int digest_update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    struct digest_ctx *digest_ctx =
+        (struct digest_ctx *)EVP_MD_CTX_md_data(ctx);
+
+    if (count == 0)
+        return 1;
+
+    if (digest_ctx == NULL)
+        return 0;
+
+    if (digest_op(digest_ctx, data, count, NULL, COP_FLAG_UPDATE) < 0) {
+        SYSerr(SYS_F_IOCTL, errno);
+        return 0;
+    }
+
+    return 1;
+}
+
+static int digest_final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    struct digest_ctx *digest_ctx =
+        (struct digest_ctx *)EVP_MD_CTX_md_data(ctx);
+
+    if (md == NULL || digest_ctx == NULL)
+        return 0;
+    if (digest_op(digest_ctx, NULL, 0, md, COP_FLAG_FINAL) < 0) {
+        SYSerr(SYS_F_IOCTL, errno);
+        return 0;
+    }
+
+    return 1;
+}
+
+static int digest_copy(EVP_MD_CTX *to, const EVP_MD_CTX *from)
+{
+    struct digest_ctx *digest_from =
+        (struct digest_ctx *)EVP_MD_CTX_md_data(from);
+    struct digest_ctx *digest_to =
+        (struct digest_ctx *)EVP_MD_CTX_md_data(to);
+    struct cphash_op cphash;
+
+    if (digest_from == NULL || digest_from->init_called != 1)
+        return 1;
+
+    if (!digest_init(to)) {
+        SYSerr(SYS_F_IOCTL, errno);
+        return 0;
+    }
+
+    cphash.src_ses = digest_from->sess.ses;
+    cphash.dst_ses = digest_to->sess.ses;
+    if (ioctl(cfd, CIOCCPHASH, &cphash) < 0) {
+        SYSerr(SYS_F_IOCTL, errno);
+        return 0;
+    }
+    return 1;
+}
+
+static int digest_cleanup(EVP_MD_CTX *ctx)
+{
+    struct digest_ctx *digest_ctx =
+        (struct digest_ctx *)EVP_MD_CTX_md_data(ctx);
+
+    if (digest_ctx == NULL)
+        return 1;
+
+    return clean_devcrypto_session(&digest_ctx->sess);
+}
+
+static int devcrypto_test_digest(size_t digest_data_index)
+{
+    struct session_op sess1, sess2;
+    struct cphash_op cphash;
+    int ret=0;
+
+    memset(&sess1, 0, sizeof(sess1));
+    memset(&sess2, 0, sizeof(sess2));
+    sess1.mac = digest_data[digest_data_index].devcryptoid;
+    if (ioctl(cfd, CIOCGSESSION, &sess1) < 0)
+        return 0;
+    /* Make sure the driver is capable of hash state copy */
+    sess2.mac = sess1.mac;
+    if (ioctl(cfd, CIOCGSESSION, &sess2) >= 0) {
+        cphash.src_ses = sess1.ses;
+        cphash.dst_ses = sess2.ses;
+        if (ioctl(cfd, CIOCCPHASH, &cphash) >= 0)
+            ret = 1;
+        ioctl(cfd, CIOCFSESSION, &sess2.ses);
+    }
+    ioctl(cfd, CIOCFSESSION, &sess1.ses);
+    return ret;
+}
+
+/*
+ * Keep a table of known nids and associated methods.
+ * Note that known_digest_nids[] isn't necessarily indexed the same way as
+ * digest_data[] above, which known_digest_methods[] is.
+ */
+static int known_digest_nids[OSSL_NELEM(digest_data)];
+static int known_digest_nids_amount = -1; /* -1 indicates not yet initialised */
+static EVP_MD *known_digest_methods[OSSL_NELEM(digest_data)] = { NULL, };
+
+static void prepare_digest_methods(void)
+{
+    size_t i;
+
+    for (i = 0, known_digest_nids_amount = 0; i < OSSL_NELEM(digest_data);
+         i++) {
+
+        /*
+         * Check that the algo is usable
+         */
+        if (!devcrypto_test_digest(i))
+            continue;
+
+        if ((known_digest_methods[i] = EVP_MD_meth_new(digest_data[i].nid,
+                                                       NID_undef)) == NULL
+            || !EVP_MD_meth_set_input_blocksize(known_digest_methods[i],
+                                                digest_data[i].blocksize)
+            || !EVP_MD_meth_set_result_size(known_digest_methods[i],
+                                            digest_data[i].digestlen)
+            || !EVP_MD_meth_set_init(known_digest_methods[i], digest_init)
+            || !EVP_MD_meth_set_update(known_digest_methods[i], digest_update)
+            || !EVP_MD_meth_set_final(known_digest_methods[i], digest_final)
+            || !EVP_MD_meth_set_copy(known_digest_methods[i], digest_copy)
+            || !EVP_MD_meth_set_cleanup(known_digest_methods[i], digest_cleanup)
+            || !EVP_MD_meth_set_app_datasize(known_digest_methods[i],
+                                             sizeof(struct digest_ctx))) {
+            EVP_MD_meth_free(known_digest_methods[i]);
+            known_digest_methods[i] = NULL;
+        } else {
+            known_digest_nids[known_digest_nids_amount++] = digest_data[i].nid;
+        }
+    }
+}
+
+static const EVP_MD *get_digest_method(int nid)
+{
+    size_t i = get_digest_data_index(nid);
+
+    if (i == (size_t)-1)
+        return NULL;
+    return known_digest_methods[i];
+}
+
+static int get_digest_nids(const int **nids)
+{
+    *nids = known_digest_nids;
+    return known_digest_nids_amount;
+}
+
+static void destroy_digest_method(int nid)
+{
+    size_t i = get_digest_data_index(nid);
+
+    EVP_MD_meth_free(known_digest_methods[i]);
+    known_digest_methods[i] = NULL;
+}
+
+static void destroy_all_digest_methods(void)
+{
+    size_t i;
+
+    for (i = 0; i < OSSL_NELEM(digest_data); i++)
+        destroy_digest_method(digest_data[i].nid);
+}
+
+static int devcrypto_digests(ENGINE *e, const EVP_MD **digest,
+                             const int **nids, int nid)
+{
+    if (digest == NULL)
+        return get_digest_nids(nids);
+
+    *digest = get_digest_method(nid);
+
+    return *digest != NULL;
+}
+
+#endif
+
+/******************************************************************************
+ *
+ * LOAD / UNLOAD
+ *
+ *****/
+
+static int devcrypto_unload(ENGINE *e)
+{
+    destroy_all_cipher_methods();
+#ifdef IMPLEMENT_DIGEST
+    destroy_all_digest_methods();
+#endif
+
+    close(cfd);
+
+    return 1;
+}
+/*
+ * This engine is always built into libcrypto, so it doesn't offer any
+ * ability to be dynamically loadable.
+ */
+void engine_load_devcrypto_int()
+{
+    ENGINE *e = NULL;
+
+    if ((cfd = open("/dev/crypto", O_RDWR, 0)) < 0) {
+#ifndef ENGINE_DEVCRYPTO_DEBUG
+        if (errno != ENOENT)
+#endif
+            fprintf(stderr, "Could not open /dev/crypto: %s\n", strerror(errno));
+        return;
+    }
+
+    if ((e = ENGINE_new()) == NULL
+        || !ENGINE_set_destroy_function(e, devcrypto_unload)) {
+        ENGINE_free(e);
+        /*
+         * We know that devcrypto_unload() won't be called when one of the
+         * above two calls have failed, so we close cfd explicitly here to
+         * avoid leaking resources.
+         */
+        close(cfd);
+        return;
+    }
+
+    prepare_cipher_methods();
+#ifdef IMPLEMENT_DIGEST
+    prepare_digest_methods();
+#endif
+
+    if (!ENGINE_set_id(e, "devcrypto")
+        || !ENGINE_set_name(e, "/dev/crypto engine")
+
+/*
+ * Asymmetric ciphers aren't well supported with /dev/crypto.  Among the BSD
+ * implementations, it seems to only exist in FreeBSD, and regarding the
+ * parameters in its crypt_kop, the manual crypto(4) has this to say:
+ *
+ *    The semantics of these arguments are currently undocumented.
+ *
+ * Reading through the FreeBSD source code doesn't give much more than
+ * their CRK_MOD_EXP implementation for ubsec.
+ *
+ * It doesn't look much better with cryptodev-linux.  They have the crypt_kop
+ * structure as well as the command (CRK_*) in cryptodev.h, but no support
+ * seems to be implemented at all for the moment.
+ *
+ * At the time of writing, it seems impossible to write proper support for
+ * FreeBSD's asym features without some very deep knowledge and access to
+ * specific kernel modules.
+ *
+ * /Richard Levitte, 2017-05-11
+ */
+#if 0
+# ifndef OPENSSL_NO_RSA
+        || !ENGINE_set_RSA(e, devcrypto_rsa)
+# endif
+# ifndef OPENSSL_NO_DSA
+        || !ENGINE_set_DSA(e, devcrypto_dsa)
+# endif
+# ifndef OPENSSL_NO_DH
+        || !ENGINE_set_DH(e, devcrypto_dh)
+# endif
+# ifndef OPENSSL_NO_EC
+        || !ENGINE_set_EC(e, devcrypto_ec)
+# endif
+#endif
+        || !ENGINE_set_ciphers(e, devcrypto_ciphers)
+#ifdef IMPLEMENT_DIGEST
+        || !ENGINE_set_digests(e, devcrypto_digests)
+#endif
+        ) {
+        ENGINE_free(e);
+        return;
+    }
+
+    ENGINE_add(e);
+    ENGINE_free(e);          /* Loose our local reference */
+    ERR_clear_error();
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_dyn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_dyn.c
new file mode 100644
index 000000000..843226c07
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_dyn.c
@@ -0,0 +1,510 @@
+/*
+ * Copyright 2001-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "eng_int.h"
+#include "internal/dso.h"
+#include <openssl/crypto.h>
+
+/*
+ * Shared libraries implementing ENGINEs for use by the "dynamic" ENGINE
+ * loader should implement the hook-up functions with the following
+ * prototypes.
+ */
+
+/* Our ENGINE handlers */
+static int dynamic_init(ENGINE *e);
+static int dynamic_finish(ENGINE *e);
+static int dynamic_ctrl(ENGINE *e, int cmd, long i, void *p,
+                        void (*f) (void));
+/* Predeclare our context type */
+typedef struct st_dynamic_data_ctx dynamic_data_ctx;
+/* The implementation for the important control command */
+static int dynamic_load(ENGINE *e, dynamic_data_ctx *ctx);
+
+#define DYNAMIC_CMD_SO_PATH             ENGINE_CMD_BASE
+#define DYNAMIC_CMD_NO_VCHECK           (ENGINE_CMD_BASE + 1)
+#define DYNAMIC_CMD_ID                  (ENGINE_CMD_BASE + 2)
+#define DYNAMIC_CMD_LIST_ADD            (ENGINE_CMD_BASE + 3)
+#define DYNAMIC_CMD_DIR_LOAD            (ENGINE_CMD_BASE + 4)
+#define DYNAMIC_CMD_DIR_ADD             (ENGINE_CMD_BASE + 5)
+#define DYNAMIC_CMD_LOAD                (ENGINE_CMD_BASE + 6)
+
+/* The constants used when creating the ENGINE */
+static const char *engine_dynamic_id = "dynamic";
+static const char *engine_dynamic_name = "Dynamic engine loading support";
+static const ENGINE_CMD_DEFN dynamic_cmd_defns[] = {
+    {DYNAMIC_CMD_SO_PATH,
+     "SO_PATH",
+     "Specifies the path to the new ENGINE shared library",
+     ENGINE_CMD_FLAG_STRING},
+    {DYNAMIC_CMD_NO_VCHECK,
+     "NO_VCHECK",
+     "Specifies to continue even if version checking fails (boolean)",
+     ENGINE_CMD_FLAG_NUMERIC},
+    {DYNAMIC_CMD_ID,
+     "ID",
+     "Specifies an ENGINE id name for loading",
+     ENGINE_CMD_FLAG_STRING},
+    {DYNAMIC_CMD_LIST_ADD,
+     "LIST_ADD",
+     "Whether to add a loaded ENGINE to the internal list (0=no,1=yes,2=mandatory)",
+     ENGINE_CMD_FLAG_NUMERIC},
+    {DYNAMIC_CMD_DIR_LOAD,
+     "DIR_LOAD",
+     "Specifies whether to load from 'DIR_ADD' directories (0=no,1=yes,2=mandatory)",
+     ENGINE_CMD_FLAG_NUMERIC},
+    {DYNAMIC_CMD_DIR_ADD,
+     "DIR_ADD",
+     "Adds a directory from which ENGINEs can be loaded",
+     ENGINE_CMD_FLAG_STRING},
+    {DYNAMIC_CMD_LOAD,
+     "LOAD",
+     "Load up the ENGINE specified by other settings",
+     ENGINE_CMD_FLAG_NO_INPUT},
+    {0, NULL, NULL, 0}
+};
+
+/*
+ * Loading code stores state inside the ENGINE structure via the "ex_data"
+ * element. We load all our state into a single structure and use that as a
+ * single context in the "ex_data" stack.
+ */
+struct st_dynamic_data_ctx {
+    /* The DSO object we load that supplies the ENGINE code */
+    DSO *dynamic_dso;
+    /*
+     * The function pointer to the version checking shared library function
+     */
+    dynamic_v_check_fn v_check;
+    /*
+     * The function pointer to the engine-binding shared library function
+     */
+    dynamic_bind_engine bind_engine;
+    /* The default name/path for loading the shared library */
+    char *DYNAMIC_LIBNAME;
+    /* Whether to continue loading on a version check failure */
+    int no_vcheck;
+    /* If non-NULL, stipulates the 'id' of the ENGINE to be loaded */
+    char *engine_id;
+    /*
+     * If non-zero, a successfully loaded ENGINE should be added to the
+     * internal ENGINE list. If 2, the add must succeed or the entire load
+     * should fail.
+     */
+    int list_add_value;
+    /* The symbol name for the version checking function */
+    const char *DYNAMIC_F1;
+    /* The symbol name for the "initialise ENGINE structure" function */
+    const char *DYNAMIC_F2;
+    /*
+     * Whether to never use 'dirs', use 'dirs' as a fallback, or only use
+     * 'dirs' for loading. Default is to use 'dirs' as a fallback.
+     */
+    int dir_load;
+    /* A stack of directories from which ENGINEs could be loaded */
+    STACK_OF(OPENSSL_STRING) *dirs;
+};
+
+/*
+ * This is the "ex_data" index we obtain and reserve for use with our context
+ * structure.
+ */
+static int dynamic_ex_data_idx = -1;
+
+static void int_free_str(char *s)
+{
+    OPENSSL_free(s);
+}
+
+/*
+ * Because our ex_data element may or may not get allocated depending on
+ * whether a "first-use" occurs before the ENGINE is freed, we have a memory
+ * leak problem to solve. We can't declare a "new" handler for the ex_data as
+ * we don't want a dynamic_data_ctx in *all* ENGINE structures of all types
+ * (this is a bug in the design of CRYPTO_EX_DATA). As such, we just declare
+ * a "free" handler and that will get called if an ENGINE is being destroyed
+ * and there was an ex_data element corresponding to our context type.
+ */
+static void dynamic_data_ctx_free_func(void *parent, void *ptr,
+                                       CRYPTO_EX_DATA *ad, int idx, long argl,
+                                       void *argp)
+{
+    if (ptr) {
+        dynamic_data_ctx *ctx = (dynamic_data_ctx *)ptr;
+        DSO_free(ctx->dynamic_dso);
+        OPENSSL_free(ctx->DYNAMIC_LIBNAME);
+        OPENSSL_free(ctx->engine_id);
+        sk_OPENSSL_STRING_pop_free(ctx->dirs, int_free_str);
+        OPENSSL_free(ctx);
+    }
+}
+
+/*
+ * Construct the per-ENGINE context. We create it blindly and then use a lock
+ * to check for a race - if so, all but one of the threads "racing" will have
+ * wasted their time. The alternative involves creating everything inside the
+ * lock which is far worse.
+ */
+static int dynamic_set_data_ctx(ENGINE *e, dynamic_data_ctx **ctx)
+{
+    dynamic_data_ctx *c = OPENSSL_zalloc(sizeof(*c));
+    int ret = 1;
+
+    if (c == NULL) {
+        ENGINEerr(ENGINE_F_DYNAMIC_SET_DATA_CTX, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    c->dirs = sk_OPENSSL_STRING_new_null();
+    if (c->dirs == NULL) {
+        ENGINEerr(ENGINE_F_DYNAMIC_SET_DATA_CTX, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(c);
+        return 0;
+    }
+    c->DYNAMIC_F1 = "v_check";
+    c->DYNAMIC_F2 = "bind_engine";
+    c->dir_load = 1;
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    if ((*ctx = (dynamic_data_ctx *)ENGINE_get_ex_data(e,
+                                                       dynamic_ex_data_idx))
+        == NULL) {
+        /* Good, we're the first */
+        ret = ENGINE_set_ex_data(e, dynamic_ex_data_idx, c);
+        if (ret) {
+            *ctx = c;
+            c = NULL;
+        }
+    }
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    /*
+     * If we lost the race to set the context, c is non-NULL and *ctx is the
+     * context of the thread that won.
+     */
+    if (c)
+        sk_OPENSSL_STRING_free(c->dirs);
+    OPENSSL_free(c);
+    return ret;
+}
+
+/*
+ * This function retrieves the context structure from an ENGINE's "ex_data",
+ * or if it doesn't exist yet, sets it up.
+ */
+static dynamic_data_ctx *dynamic_get_data_ctx(ENGINE *e)
+{
+    dynamic_data_ctx *ctx;
+    if (dynamic_ex_data_idx < 0) {
+        /*
+         * Create and register the ENGINE ex_data, and associate our "free"
+         * function with it to ensure any allocated contexts get freed when
+         * an ENGINE goes underground.
+         */
+        int new_idx = ENGINE_get_ex_new_index(0, NULL, NULL, NULL,
+                                              dynamic_data_ctx_free_func);
+        if (new_idx == -1) {
+            ENGINEerr(ENGINE_F_DYNAMIC_GET_DATA_CTX, ENGINE_R_NO_INDEX);
+            return NULL;
+        }
+        CRYPTO_THREAD_write_lock(global_engine_lock);
+        /* Avoid a race by checking again inside this lock */
+        if (dynamic_ex_data_idx < 0) {
+            /* Good, someone didn't beat us to it */
+            dynamic_ex_data_idx = new_idx;
+            new_idx = -1;
+        }
+        CRYPTO_THREAD_unlock(global_engine_lock);
+        /*
+         * In theory we could "give back" the index here if (new_idx>-1), but
+         * it's not possible and wouldn't gain us much if it were.
+         */
+    }
+    ctx = (dynamic_data_ctx *)ENGINE_get_ex_data(e, dynamic_ex_data_idx);
+    /* Check if the context needs to be created */
+    if ((ctx == NULL) && !dynamic_set_data_ctx(e, &ctx))
+        /* "set_data" will set errors if necessary */
+        return NULL;
+    return ctx;
+}
+
+static ENGINE *engine_dynamic(void)
+{
+    ENGINE *ret = ENGINE_new();
+    if (ret == NULL)
+        return NULL;
+    if (!ENGINE_set_id(ret, engine_dynamic_id) ||
+        !ENGINE_set_name(ret, engine_dynamic_name) ||
+        !ENGINE_set_init_function(ret, dynamic_init) ||
+        !ENGINE_set_finish_function(ret, dynamic_finish) ||
+        !ENGINE_set_ctrl_function(ret, dynamic_ctrl) ||
+        !ENGINE_set_flags(ret, ENGINE_FLAGS_BY_ID_COPY) ||
+        !ENGINE_set_cmd_defns(ret, dynamic_cmd_defns)) {
+        ENGINE_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+void engine_load_dynamic_int(void)
+{
+    ENGINE *toadd = engine_dynamic();
+    if (!toadd)
+        return;
+    ENGINE_add(toadd);
+    /*
+     * If the "add" worked, it gets a structural reference. So either way, we
+     * release our just-created reference.
+     */
+    ENGINE_free(toadd);
+    /*
+     * If the "add" didn't work, it was probably a conflict because it was
+     * already added (eg. someone calling ENGINE_load_blah then calling
+     * ENGINE_load_builtin_engines() perhaps).
+     */
+    ERR_clear_error();
+}
+
+static int dynamic_init(ENGINE *e)
+{
+    /*
+     * We always return failure - the "dynamic" engine itself can't be used
+     * for anything.
+     */
+    return 0;
+}
+
+static int dynamic_finish(ENGINE *e)
+{
+    /*
+     * This should never be called on account of "dynamic_init" always
+     * failing.
+     */
+    return 0;
+}
+
+static int dynamic_ctrl(ENGINE *e, int cmd, long i, void *p, void (*f) (void))
+{
+    dynamic_data_ctx *ctx = dynamic_get_data_ctx(e);
+    int initialised;
+
+    if (!ctx) {
+        ENGINEerr(ENGINE_F_DYNAMIC_CTRL, ENGINE_R_NOT_LOADED);
+        return 0;
+    }
+    initialised = ((ctx->dynamic_dso == NULL) ? 0 : 1);
+    /* All our control commands require the ENGINE to be uninitialised */
+    if (initialised) {
+        ENGINEerr(ENGINE_F_DYNAMIC_CTRL, ENGINE_R_ALREADY_LOADED);
+        return 0;
+    }
+    switch (cmd) {
+    case DYNAMIC_CMD_SO_PATH:
+        /* a NULL 'p' or a string of zero-length is the same thing */
+        if (p && (strlen((const char *)p) < 1))
+            p = NULL;
+        OPENSSL_free(ctx->DYNAMIC_LIBNAME);
+        if (p)
+            ctx->DYNAMIC_LIBNAME = OPENSSL_strdup(p);
+        else
+            ctx->DYNAMIC_LIBNAME = NULL;
+        return (ctx->DYNAMIC_LIBNAME ? 1 : 0);
+    case DYNAMIC_CMD_NO_VCHECK:
+        ctx->no_vcheck = ((i == 0) ? 0 : 1);
+        return 1;
+    case DYNAMIC_CMD_ID:
+        /* a NULL 'p' or a string of zero-length is the same thing */
+        if (p && (strlen((const char *)p) < 1))
+            p = NULL;
+        OPENSSL_free(ctx->engine_id);
+        if (p)
+            ctx->engine_id = OPENSSL_strdup(p);
+        else
+            ctx->engine_id = NULL;
+        return (ctx->engine_id ? 1 : 0);
+    case DYNAMIC_CMD_LIST_ADD:
+        if ((i < 0) || (i > 2)) {
+            ENGINEerr(ENGINE_F_DYNAMIC_CTRL, ENGINE_R_INVALID_ARGUMENT);
+            return 0;
+        }
+        ctx->list_add_value = (int)i;
+        return 1;
+    case DYNAMIC_CMD_LOAD:
+        return dynamic_load(e, ctx);
+    case DYNAMIC_CMD_DIR_LOAD:
+        if ((i < 0) || (i > 2)) {
+            ENGINEerr(ENGINE_F_DYNAMIC_CTRL, ENGINE_R_INVALID_ARGUMENT);
+            return 0;
+        }
+        ctx->dir_load = (int)i;
+        return 1;
+    case DYNAMIC_CMD_DIR_ADD:
+        /* a NULL 'p' or a string of zero-length is the same thing */
+        if (!p || (strlen((const char *)p) < 1)) {
+            ENGINEerr(ENGINE_F_DYNAMIC_CTRL, ENGINE_R_INVALID_ARGUMENT);
+            return 0;
+        }
+        {
+            char *tmp_str = OPENSSL_strdup(p);
+            if (tmp_str == NULL) {
+                ENGINEerr(ENGINE_F_DYNAMIC_CTRL, ERR_R_MALLOC_FAILURE);
+                return 0;
+            }
+            if (!sk_OPENSSL_STRING_push(ctx->dirs, tmp_str)) {
+                OPENSSL_free(tmp_str);
+                ENGINEerr(ENGINE_F_DYNAMIC_CTRL, ERR_R_MALLOC_FAILURE);
+                return 0;
+            }
+        }
+        return 1;
+    default:
+        break;
+    }
+    ENGINEerr(ENGINE_F_DYNAMIC_CTRL, ENGINE_R_CTRL_COMMAND_NOT_IMPLEMENTED);
+    return 0;
+}
+
+static int int_load(dynamic_data_ctx *ctx)
+{
+    int num, loop;
+    /* Unless told not to, try a direct load */
+    if ((ctx->dir_load != 2) && (DSO_load(ctx->dynamic_dso,
+                                          ctx->DYNAMIC_LIBNAME, NULL,
+                                          0)) != NULL)
+        return 1;
+    /* If we're not allowed to use 'dirs' or we have none, fail */
+    if (!ctx->dir_load || (num = sk_OPENSSL_STRING_num(ctx->dirs)) < 1)
+        return 0;
+    for (loop = 0; loop < num; loop++) {
+        const char *s = sk_OPENSSL_STRING_value(ctx->dirs, loop);
+        char *merge = DSO_merge(ctx->dynamic_dso, ctx->DYNAMIC_LIBNAME, s);
+        if (!merge)
+            return 0;
+        if (DSO_load(ctx->dynamic_dso, merge, NULL, 0)) {
+            /* Found what we're looking for */
+            OPENSSL_free(merge);
+            return 1;
+        }
+        OPENSSL_free(merge);
+    }
+    return 0;
+}
+
+static int dynamic_load(ENGINE *e, dynamic_data_ctx *ctx)
+{
+    ENGINE cpy;
+    dynamic_fns fns;
+
+    if (ctx->dynamic_dso == NULL)
+        ctx->dynamic_dso = DSO_new();
+    if (ctx->dynamic_dso == NULL)
+        return 0;
+    if (!ctx->DYNAMIC_LIBNAME) {
+        if (!ctx->engine_id)
+            return 0;
+        DSO_ctrl(ctx->dynamic_dso, DSO_CTRL_SET_FLAGS,
+                 DSO_FLAG_NAME_TRANSLATION_EXT_ONLY, NULL);
+        ctx->DYNAMIC_LIBNAME =
+            DSO_convert_filename(ctx->dynamic_dso, ctx->engine_id);
+    }
+    if (!int_load(ctx)) {
+        ENGINEerr(ENGINE_F_DYNAMIC_LOAD, ENGINE_R_DSO_NOT_FOUND);
+        DSO_free(ctx->dynamic_dso);
+        ctx->dynamic_dso = NULL;
+        return 0;
+    }
+    /* We have to find a bind function otherwise it'll always end badly */
+    if (!
+        (ctx->bind_engine =
+         (dynamic_bind_engine) DSO_bind_func(ctx->dynamic_dso,
+                                             ctx->DYNAMIC_F2))) {
+        ctx->bind_engine = NULL;
+        DSO_free(ctx->dynamic_dso);
+        ctx->dynamic_dso = NULL;
+        ENGINEerr(ENGINE_F_DYNAMIC_LOAD, ENGINE_R_DSO_FAILURE);
+        return 0;
+    }
+    /* Do we perform version checking? */
+    if (!ctx->no_vcheck) {
+        unsigned long vcheck_res = 0;
+        /*
+         * Now we try to find a version checking function and decide how to
+         * cope with failure if/when it fails.
+         */
+        ctx->v_check =
+            (dynamic_v_check_fn) DSO_bind_func(ctx->dynamic_dso,
+                                               ctx->DYNAMIC_F1);
+        if (ctx->v_check)
+            vcheck_res = ctx->v_check(OSSL_DYNAMIC_VERSION);
+        /*
+         * We fail if the version checker veto'd the load *or* if it is
+         * deferring to us (by returning its version) and we think it is too
+         * old.
+         */
+        if (vcheck_res < OSSL_DYNAMIC_OLDEST) {
+            /* Fail */
+            ctx->bind_engine = NULL;
+            ctx->v_check = NULL;
+            DSO_free(ctx->dynamic_dso);
+            ctx->dynamic_dso = NULL;
+            ENGINEerr(ENGINE_F_DYNAMIC_LOAD,
+                      ENGINE_R_VERSION_INCOMPATIBILITY);
+            return 0;
+        }
+    }
+    /*
+     * First binary copy the ENGINE structure so that we can roll back if the
+     * hand-over fails
+     */
+    memcpy(&cpy, e, sizeof(ENGINE));
+    /*
+     * Provide the ERR, "ex_data", memory, and locking callbacks so the
+     * loaded library uses our state rather than its own. FIXME: As noted in
+     * engine.h, much of this would be simplified if each area of code
+     * provided its own "summary" structure of all related callbacks. It
+     * would also increase opaqueness.
+     */
+    fns.static_state = ENGINE_get_static_state();
+    CRYPTO_get_mem_functions(&fns.mem_fns.malloc_fn, &fns.mem_fns.realloc_fn,
+                             &fns.mem_fns.free_fn);
+    /*
+     * Now that we've loaded the dynamic engine, make sure no "dynamic"
+     * ENGINE elements will show through.
+     */
+    engine_set_all_null(e);
+
+    /* Try to bind the ENGINE onto our own ENGINE structure */
+    if (!ctx->bind_engine(e, ctx->engine_id, &fns)) {
+        ctx->bind_engine = NULL;
+        ctx->v_check = NULL;
+        DSO_free(ctx->dynamic_dso);
+        ctx->dynamic_dso = NULL;
+        ENGINEerr(ENGINE_F_DYNAMIC_LOAD, ENGINE_R_INIT_FAILED);
+        /* Copy the original ENGINE structure back */
+        memcpy(e, &cpy, sizeof(ENGINE));
+        return 0;
+    }
+    /* Do we try to add this ENGINE to the internal list too? */
+    if (ctx->list_add_value > 0) {
+        if (!ENGINE_add(e)) {
+            /* Do we tolerate this or fail? */
+            if (ctx->list_add_value > 1) {
+                /*
+                 * Fail - NB: By this time, it's too late to rollback, and
+                 * trying to do so allows the bind_engine() code to have
+                 * created leaks. We just have to fail where we are, after
+                 * the ENGINE has changed.
+                 */
+                ENGINEerr(ENGINE_F_DYNAMIC_LOAD,
+                          ENGINE_R_CONFLICTING_ENGINE_ID);
+                return 0;
+            }
+            /* Tolerate */
+            ERR_clear_error();
+        }
+    }
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_err.c
new file mode 100644
index 000000000..bd1aefa18
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_err.c
@@ -0,0 +1,154 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/engineerr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA ENGINE_str_functs[] = {
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_DIGEST_UPDATE, 0), "digest_update"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_DYNAMIC_CTRL, 0), "dynamic_ctrl"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_DYNAMIC_GET_DATA_CTX, 0),
+     "dynamic_get_data_ctx"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_DYNAMIC_LOAD, 0), "dynamic_load"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_DYNAMIC_SET_DATA_CTX, 0),
+     "dynamic_set_data_ctx"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_ADD, 0), "ENGINE_add"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_BY_ID, 0), "ENGINE_by_id"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_CMD_IS_EXECUTABLE, 0),
+     "ENGINE_cmd_is_executable"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_CTRL, 0), "ENGINE_ctrl"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_CTRL_CMD, 0), "ENGINE_ctrl_cmd"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_CTRL_CMD_STRING, 0),
+     "ENGINE_ctrl_cmd_string"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_FINISH, 0), "ENGINE_finish"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_GET_CIPHER, 0),
+     "ENGINE_get_cipher"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_GET_DIGEST, 0),
+     "ENGINE_get_digest"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_GET_FIRST, 0),
+     "ENGINE_get_first"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_GET_LAST, 0), "ENGINE_get_last"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_GET_NEXT, 0), "ENGINE_get_next"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_GET_PKEY_ASN1_METH, 0),
+     "ENGINE_get_pkey_asn1_meth"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_GET_PKEY_METH, 0),
+     "ENGINE_get_pkey_meth"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_GET_PREV, 0), "ENGINE_get_prev"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_INIT, 0), "ENGINE_init"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_LIST_ADD, 0), "engine_list_add"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_LIST_REMOVE, 0),
+     "engine_list_remove"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_LOAD_PRIVATE_KEY, 0),
+     "ENGINE_load_private_key"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_LOAD_PUBLIC_KEY, 0),
+     "ENGINE_load_public_key"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_LOAD_SSL_CLIENT_CERT, 0),
+     "ENGINE_load_ssl_client_cert"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_NEW, 0), "ENGINE_new"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_PKEY_ASN1_FIND_STR, 0),
+     "ENGINE_pkey_asn1_find_str"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_REMOVE, 0), "ENGINE_remove"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_SET_DEFAULT_STRING, 0),
+     "ENGINE_set_default_string"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_SET_ID, 0), "ENGINE_set_id"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_SET_NAME, 0), "ENGINE_set_name"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_TABLE_REGISTER, 0),
+     "engine_table_register"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_UNLOCKED_FINISH, 0),
+     "engine_unlocked_finish"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_ENGINE_UP_REF, 0), "ENGINE_up_ref"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_INT_CLEANUP_ITEM, 0),
+     "int_cleanup_item"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_INT_CTRL_HELPER, 0), "int_ctrl_helper"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_INT_ENGINE_CONFIGURE, 0),
+     "int_engine_configure"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_INT_ENGINE_MODULE_INIT, 0),
+     "int_engine_module_init"},
+    {ERR_PACK(ERR_LIB_ENGINE, ENGINE_F_OSSL_HMAC_INIT, 0), "ossl_hmac_init"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA ENGINE_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_ALREADY_LOADED), "already loaded"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_ARGUMENT_IS_NOT_A_NUMBER),
+    "argument is not a number"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_CMD_NOT_EXECUTABLE),
+    "cmd not executable"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_COMMAND_TAKES_INPUT),
+    "command takes input"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_COMMAND_TAKES_NO_INPUT),
+    "command takes no input"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_CONFLICTING_ENGINE_ID),
+    "conflicting engine id"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_CTRL_COMMAND_NOT_IMPLEMENTED),
+    "ctrl command not implemented"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_DSO_FAILURE), "DSO failure"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_DSO_NOT_FOUND), "dso not found"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_ENGINES_SECTION_ERROR),
+    "engines section error"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_ENGINE_CONFIGURATION_ERROR),
+    "engine configuration error"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_ENGINE_IS_NOT_IN_LIST),
+    "engine is not in the list"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_ENGINE_SECTION_ERROR),
+    "engine section error"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_FAILED_LOADING_PRIVATE_KEY),
+    "failed loading private key"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_FAILED_LOADING_PUBLIC_KEY),
+    "failed loading public key"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_FINISH_FAILED), "finish failed"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_ID_OR_NAME_MISSING),
+    "'id' or 'name' missing"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_INIT_FAILED), "init failed"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_INTERNAL_LIST_ERROR),
+    "internal list error"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_INVALID_ARGUMENT),
+    "invalid argument"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_INVALID_CMD_NAME),
+    "invalid cmd name"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_INVALID_CMD_NUMBER),
+    "invalid cmd number"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_INVALID_INIT_VALUE),
+    "invalid init value"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_INVALID_STRING), "invalid string"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_NOT_INITIALISED), "not initialised"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_NOT_LOADED), "not loaded"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_NO_CONTROL_FUNCTION),
+    "no control function"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_NO_INDEX), "no index"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_NO_LOAD_FUNCTION),
+    "no load function"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_NO_REFERENCE), "no reference"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_NO_SUCH_ENGINE), "no such engine"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_UNIMPLEMENTED_CIPHER),
+    "unimplemented cipher"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_UNIMPLEMENTED_DIGEST),
+    "unimplemented digest"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_UNIMPLEMENTED_PUBLIC_KEY_METHOD),
+    "unimplemented public key method"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, ENGINE_R_VERSION_INCOMPATIBILITY),
+    "version incompatibility"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_ENGINE_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(ENGINE_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(ENGINE_str_functs);
+        ERR_load_strings_const(ENGINE_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_fat.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_fat.c
new file mode 100644
index 000000000..591fddc8e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_fat.c
@@ -0,0 +1,123 @@
+/*
+ * Copyright 2001-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "eng_int.h"
+#include <openssl/conf.h>
+
+int ENGINE_set_default(ENGINE *e, unsigned int flags)
+{
+    if ((flags & ENGINE_METHOD_CIPHERS) && !ENGINE_set_default_ciphers(e))
+        return 0;
+    if ((flags & ENGINE_METHOD_DIGESTS) && !ENGINE_set_default_digests(e))
+        return 0;
+#ifndef OPENSSL_NO_RSA
+    if ((flags & ENGINE_METHOD_RSA) && !ENGINE_set_default_RSA(e))
+        return 0;
+#endif
+#ifndef OPENSSL_NO_DSA
+    if ((flags & ENGINE_METHOD_DSA) && !ENGINE_set_default_DSA(e))
+        return 0;
+#endif
+#ifndef OPENSSL_NO_DH
+    if ((flags & ENGINE_METHOD_DH) && !ENGINE_set_default_DH(e))
+        return 0;
+#endif
+#ifndef OPENSSL_NO_EC
+    if ((flags & ENGINE_METHOD_EC) && !ENGINE_set_default_EC(e))
+        return 0;
+#endif
+    if ((flags & ENGINE_METHOD_RAND) && !ENGINE_set_default_RAND(e))
+        return 0;
+    if ((flags & ENGINE_METHOD_PKEY_METHS)
+        && !ENGINE_set_default_pkey_meths(e))
+        return 0;
+    if ((flags & ENGINE_METHOD_PKEY_ASN1_METHS)
+        && !ENGINE_set_default_pkey_asn1_meths(e))
+        return 0;
+    return 1;
+}
+
+/* Set default algorithms using a string */
+
+static int int_def_cb(const char *alg, int len, void *arg)
+{
+    unsigned int *pflags = arg;
+    if (alg == NULL)
+        return 0;
+    if (strncmp(alg, "ALL", len) == 0)
+        *pflags |= ENGINE_METHOD_ALL;
+    else if (strncmp(alg, "RSA", len) == 0)
+        *pflags |= ENGINE_METHOD_RSA;
+    else if (strncmp(alg, "DSA", len) == 0)
+        *pflags |= ENGINE_METHOD_DSA;
+    else if (strncmp(alg, "DH", len) == 0)
+        *pflags |= ENGINE_METHOD_DH;
+    else if (strncmp(alg, "EC", len) == 0)
+        *pflags |= ENGINE_METHOD_EC;
+    else if (strncmp(alg, "RAND", len) == 0)
+        *pflags |= ENGINE_METHOD_RAND;
+    else if (strncmp(alg, "CIPHERS", len) == 0)
+        *pflags |= ENGINE_METHOD_CIPHERS;
+    else if (strncmp(alg, "DIGESTS", len) == 0)
+        *pflags |= ENGINE_METHOD_DIGESTS;
+    else if (strncmp(alg, "PKEY", len) == 0)
+        *pflags |= ENGINE_METHOD_PKEY_METHS | ENGINE_METHOD_PKEY_ASN1_METHS;
+    else if (strncmp(alg, "PKEY_CRYPTO", len) == 0)
+        *pflags |= ENGINE_METHOD_PKEY_METHS;
+    else if (strncmp(alg, "PKEY_ASN1", len) == 0)
+        *pflags |= ENGINE_METHOD_PKEY_ASN1_METHS;
+    else
+        return 0;
+    return 1;
+}
+
+int ENGINE_set_default_string(ENGINE *e, const char *def_list)
+{
+    unsigned int flags = 0;
+    if (!CONF_parse_list(def_list, ',', 1, int_def_cb, &flags)) {
+        ENGINEerr(ENGINE_F_ENGINE_SET_DEFAULT_STRING,
+                  ENGINE_R_INVALID_STRING);
+        ERR_add_error_data(2, "str=", def_list);
+        return 0;
+    }
+    return ENGINE_set_default(e, flags);
+}
+
+int ENGINE_register_complete(ENGINE *e)
+{
+    ENGINE_register_ciphers(e);
+    ENGINE_register_digests(e);
+#ifndef OPENSSL_NO_RSA
+    ENGINE_register_RSA(e);
+#endif
+#ifndef OPENSSL_NO_DSA
+    ENGINE_register_DSA(e);
+#endif
+#ifndef OPENSSL_NO_DH
+    ENGINE_register_DH(e);
+#endif
+#ifndef OPENSSL_NO_EC
+    ENGINE_register_EC(e);
+#endif
+    ENGINE_register_RAND(e);
+    ENGINE_register_pkey_meths(e);
+    ENGINE_register_pkey_asn1_meths(e);
+    return 1;
+}
+
+int ENGINE_register_all_complete(void)
+{
+    ENGINE *e;
+
+    for (e = ENGINE_get_first(); e; e = ENGINE_get_next(e))
+        if (!(e->flags & ENGINE_FLAGS_NO_REGISTER_ALL))
+            ENGINE_register_complete(e);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_init.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_init.c
new file mode 100644
index 000000000..7c235fc47
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_init.c
@@ -0,0 +1,109 @@
+/*
+ * Copyright 2001-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include "eng_int.h"
+
+/*
+ * Initialise a engine type for use (or up its functional reference count if
+ * it's already in use). This version is only used internally.
+ */
+int engine_unlocked_init(ENGINE *e)
+{
+    int to_return = 1;
+
+    if ((e->funct_ref == 0) && e->init)
+        /*
+         * This is the first functional reference and the engine requires
+         * initialisation so we do it now.
+         */
+        to_return = e->init(e);
+    if (to_return) {
+        /*
+         * OK, we return a functional reference which is also a structural
+         * reference.
+         */
+        e->struct_ref++;
+        e->funct_ref++;
+        engine_ref_debug(e, 0, 1);
+        engine_ref_debug(e, 1, 1);
+    }
+    return to_return;
+}
+
+/*
+ * Free a functional reference to a engine type. This version is only used
+ * internally.
+ */
+int engine_unlocked_finish(ENGINE *e, int unlock_for_handlers)
+{
+    int to_return = 1;
+
+    /*
+     * Reduce the functional reference count here so if it's the terminating
+     * case, we can release the lock safely and call the finish() handler
+     * without risk of a race. We get a race if we leave the count until
+     * after and something else is calling "finish" at the same time -
+     * there's a chance that both threads will together take the count from 2
+     * to 0 without either calling finish().
+     */
+    e->funct_ref--;
+    engine_ref_debug(e, 1, -1);
+    if ((e->funct_ref == 0) && e->finish) {
+        if (unlock_for_handlers)
+            CRYPTO_THREAD_unlock(global_engine_lock);
+        to_return = e->finish(e);
+        if (unlock_for_handlers)
+            CRYPTO_THREAD_write_lock(global_engine_lock);
+        if (!to_return)
+            return 0;
+    }
+    REF_ASSERT_ISNT(e->funct_ref < 0);
+    /* Release the structural reference too */
+    if (!engine_free_util(e, 0)) {
+        ENGINEerr(ENGINE_F_ENGINE_UNLOCKED_FINISH, ENGINE_R_FINISH_FAILED);
+        return 0;
+    }
+    return to_return;
+}
+
+/* The API (locked) version of "init" */
+int ENGINE_init(ENGINE *e)
+{
+    int ret;
+    if (e == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_INIT, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    if (!RUN_ONCE(&engine_lock_init, do_engine_lock_init)) {
+        ENGINEerr(ENGINE_F_ENGINE_INIT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    ret = engine_unlocked_init(e);
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    return ret;
+}
+
+/* The API (locked) version of "finish" */
+int ENGINE_finish(ENGINE *e)
+{
+    int to_return = 1;
+
+    if (e == NULL)
+        return 1;
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    to_return = engine_unlocked_finish(e, 1);
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    if (!to_return) {
+        ENGINEerr(ENGINE_F_ENGINE_FINISH, ENGINE_R_FINISH_FAILED);
+        return 0;
+    }
+    return to_return;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_int.h b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_int.h
new file mode 100644
index 000000000..b95483341
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_int.h
@@ -0,0 +1,171 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_ENGINE_INT_H
+# define HEADER_ENGINE_INT_H
+
+# include "internal/cryptlib.h"
+# include "internal/engine.h"
+# include "internal/thread_once.h"
+# include "internal/refcount.h"
+
+extern CRYPTO_RWLOCK *global_engine_lock;
+
+/*
+ * If we compile with this symbol defined, then both reference counts in the
+ * ENGINE structure will be monitored with a line of output on stderr for
+ * each change. This prints the engine's pointer address (truncated to
+ * unsigned int), "struct" or "funct" to indicate the reference type, the
+ * before and after reference count, and the file:line-number pair. The
+ * "engine_ref_debug" statements must come *after* the change.
+ */
+# ifdef ENGINE_REF_COUNT_DEBUG
+
+#  define engine_ref_debug(e, isfunct, diff) \
+        fprintf(stderr, "engine: %08x %s from %d to %d (%s:%d)\n", \
+                (unsigned int)(e), (isfunct ? "funct" : "struct"), \
+                ((isfunct) ? ((e)->funct_ref - (diff)) : ((e)->struct_ref - (diff))), \
+                ((isfunct) ? (e)->funct_ref : (e)->struct_ref), \
+                (OPENSSL_FILE), (OPENSSL_LINE))
+
+# else
+
+#  define engine_ref_debug(e, isfunct, diff)
+
+# endif
+
+/*
+ * Any code that will need cleanup operations should use these functions to
+ * register callbacks. engine_cleanup_int() will call all registered
+ * callbacks in order. NB: both the "add" functions assume the engine lock to
+ * already be held (in "write" mode).
+ */
+typedef void (ENGINE_CLEANUP_CB) (void);
+typedef struct st_engine_cleanup_item {
+    ENGINE_CLEANUP_CB *cb;
+} ENGINE_CLEANUP_ITEM;
+DEFINE_STACK_OF(ENGINE_CLEANUP_ITEM)
+void engine_cleanup_add_first(ENGINE_CLEANUP_CB *cb);
+void engine_cleanup_add_last(ENGINE_CLEANUP_CB *cb);
+
+/* We need stacks of ENGINEs for use in eng_table.c */
+DEFINE_STACK_OF(ENGINE)
+
+/*
+ * If this symbol is defined then engine_table_select(), the function that is
+ * used by RSA, DSA (etc) code to select registered ENGINEs, cache defaults
+ * and functional references (etc), will display debugging summaries to
+ * stderr.
+ */
+/* #define ENGINE_TABLE_DEBUG */
+
+/*
+ * This represents an implementation table. Dependent code should instantiate
+ * it as a (ENGINE_TABLE *) pointer value set initially to NULL.
+ */
+typedef struct st_engine_table ENGINE_TABLE;
+int engine_table_register(ENGINE_TABLE **table, ENGINE_CLEANUP_CB *cleanup,
+                          ENGINE *e, const int *nids, int num_nids,
+                          int setdefault);
+void engine_table_unregister(ENGINE_TABLE **table, ENGINE *e);
+void engine_table_cleanup(ENGINE_TABLE **table);
+# ifndef ENGINE_TABLE_DEBUG
+ENGINE *engine_table_select(ENGINE_TABLE **table, int nid);
+# else
+ENGINE *engine_table_select_tmp(ENGINE_TABLE **table, int nid, const char *f,
+                                int l);
+#  define engine_table_select(t,n) engine_table_select_tmp(t,n,OPENSSL_FILE,OPENSSL_LINE)
+# endif
+typedef void (engine_table_doall_cb) (int nid, STACK_OF(ENGINE) *sk,
+                                      ENGINE *def, void *arg);
+void engine_table_doall(ENGINE_TABLE *table, engine_table_doall_cb *cb,
+                        void *arg);
+
+/*
+ * Internal versions of API functions that have control over locking. These
+ * are used between C files when functionality needs to be shared but the
+ * caller may already be controlling of the engine lock.
+ */
+int engine_unlocked_init(ENGINE *e);
+int engine_unlocked_finish(ENGINE *e, int unlock_for_handlers);
+int engine_free_util(ENGINE *e, int not_locked);
+
+/*
+ * This function will reset all "set"able values in an ENGINE to NULL. This
+ * won't touch reference counts or ex_data, but is equivalent to calling all
+ * the ENGINE_set_***() functions with a NULL value.
+ */
+void engine_set_all_null(ENGINE *e);
+
+/*
+ * NB: Bitwise OR-able values for the "flags" variable in ENGINE are now
+ * exposed in engine.h.
+ */
+
+/* Free up dynamically allocated public key methods associated with ENGINE */
+
+void engine_pkey_meths_free(ENGINE *e);
+void engine_pkey_asn1_meths_free(ENGINE *e);
+
+/* Once initialisation function */
+extern CRYPTO_ONCE engine_lock_init;
+DECLARE_RUN_ONCE(do_engine_lock_init)
+
+/*
+ * This is a structure for storing implementations of various crypto
+ * algorithms and functions.
+ */
+struct engine_st {
+    const char *id;
+    const char *name;
+    const RSA_METHOD *rsa_meth;
+    const DSA_METHOD *dsa_meth;
+    const DH_METHOD *dh_meth;
+    const EC_KEY_METHOD *ec_meth;
+    const RAND_METHOD *rand_meth;
+    /* Cipher handling is via this callback */
+    ENGINE_CIPHERS_PTR ciphers;
+    /* Digest handling is via this callback */
+    ENGINE_DIGESTS_PTR digests;
+    /* Public key handling via this callback */
+    ENGINE_PKEY_METHS_PTR pkey_meths;
+    /* ASN1 public key handling via this callback */
+    ENGINE_PKEY_ASN1_METHS_PTR pkey_asn1_meths;
+    ENGINE_GEN_INT_FUNC_PTR destroy;
+    ENGINE_GEN_INT_FUNC_PTR init;
+    ENGINE_GEN_INT_FUNC_PTR finish;
+    ENGINE_CTRL_FUNC_PTR ctrl;
+    ENGINE_LOAD_KEY_PTR load_privkey;
+    ENGINE_LOAD_KEY_PTR load_pubkey;
+    ENGINE_SSL_CLIENT_CERT_PTR load_ssl_client_cert;
+    const ENGINE_CMD_DEFN *cmd_defns;
+    int flags;
+    /* reference count on the structure itself */
+    CRYPTO_REF_COUNT struct_ref;
+    /*
+     * reference count on usability of the engine type. NB: This controls the
+     * loading and initialisation of any functionality required by this
+     * engine, whereas the previous count is simply to cope with
+     * (de)allocation of this structure. Hence, running_ref <= struct_ref at
+     * all times.
+     */
+    int funct_ref;
+    /* A place to store per-ENGINE data */
+    CRYPTO_EX_DATA ex_data;
+    /* Used to maintain the linked-list of engines. */
+    struct engine_st *prev;
+    struct engine_st *next;
+};
+
+typedef struct st_engine_pile ENGINE_PILE;
+
+DEFINE_LHASH_OF(ENGINE_PILE);
+
+#endif                          /* HEADER_ENGINE_INT_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_lib.c
new file mode 100644
index 000000000..d7f2026fa
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_lib.c
@@ -0,0 +1,299 @@
+/*
+ * Copyright 2001-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include "eng_int.h"
+#include <openssl/rand.h>
+#include "internal/refcount.h"
+
+CRYPTO_RWLOCK *global_engine_lock;
+
+CRYPTO_ONCE engine_lock_init = CRYPTO_ONCE_STATIC_INIT;
+
+/* The "new"/"free" stuff first */
+
+DEFINE_RUN_ONCE(do_engine_lock_init)
+{
+    if (!OPENSSL_init_crypto(0, NULL))
+        return 0;
+    global_engine_lock = CRYPTO_THREAD_lock_new();
+    return global_engine_lock != NULL;
+}
+
+ENGINE *ENGINE_new(void)
+{
+    ENGINE *ret;
+
+    if (!RUN_ONCE(&engine_lock_init, do_engine_lock_init)
+        || (ret = OPENSSL_zalloc(sizeof(*ret))) == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    ret->struct_ref = 1;
+    engine_ref_debug(ret, 0, 1);
+    if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_ENGINE, ret, &ret->ex_data)) {
+        OPENSSL_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+/*
+ * Placed here (close proximity to ENGINE_new) so that modifications to the
+ * elements of the ENGINE structure are more likely to be caught and changed
+ * here.
+ */
+void engine_set_all_null(ENGINE *e)
+{
+    e->id = NULL;
+    e->name = NULL;
+    e->rsa_meth = NULL;
+    e->dsa_meth = NULL;
+    e->dh_meth = NULL;
+    e->rand_meth = NULL;
+    e->ciphers = NULL;
+    e->digests = NULL;
+    e->destroy = NULL;
+    e->init = NULL;
+    e->finish = NULL;
+    e->ctrl = NULL;
+    e->load_privkey = NULL;
+    e->load_pubkey = NULL;
+    e->cmd_defns = NULL;
+    e->flags = 0;
+}
+
+int engine_free_util(ENGINE *e, int not_locked)
+{
+    int i;
+
+    if (e == NULL)
+        return 1;
+    if (not_locked)
+        CRYPTO_DOWN_REF(&e->struct_ref, &i, global_engine_lock);
+    else
+        i = --e->struct_ref;
+    engine_ref_debug(e, 0, -1);
+    if (i > 0)
+        return 1;
+    REF_ASSERT_ISNT(i < 0);
+    /* Free up any dynamically allocated public key methods */
+    engine_pkey_meths_free(e);
+    engine_pkey_asn1_meths_free(e);
+    /*
+     * Give the ENGINE a chance to do any structural cleanup corresponding to
+     * allocation it did in its constructor (eg. unload error strings)
+     */
+    if (e->destroy)
+        e->destroy(e);
+    CRYPTO_free_ex_data(CRYPTO_EX_INDEX_ENGINE, e, &e->ex_data);
+    OPENSSL_free(e);
+    return 1;
+}
+
+int ENGINE_free(ENGINE *e)
+{
+    return engine_free_util(e, 1);
+}
+
+/* Cleanup stuff */
+
+/*
+ * engine_cleanup_int() is coded such that anything that does work that will
+ * need cleanup can register a "cleanup" callback here. That way we don't get
+ * linker bloat by referring to all *possible* cleanups, but any linker bloat
+ * into code "X" will cause X's cleanup function to end up here.
+ */
+static STACK_OF(ENGINE_CLEANUP_ITEM) *cleanup_stack = NULL;
+static int int_cleanup_check(int create)
+{
+    if (cleanup_stack)
+        return 1;
+    if (!create)
+        return 0;
+    cleanup_stack = sk_ENGINE_CLEANUP_ITEM_new_null();
+    return (cleanup_stack ? 1 : 0);
+}
+
+static ENGINE_CLEANUP_ITEM *int_cleanup_item(ENGINE_CLEANUP_CB *cb)
+{
+    ENGINE_CLEANUP_ITEM *item;
+
+    if ((item = OPENSSL_malloc(sizeof(*item))) == NULL) {
+        ENGINEerr(ENGINE_F_INT_CLEANUP_ITEM, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    item->cb = cb;
+    return item;
+}
+
+void engine_cleanup_add_first(ENGINE_CLEANUP_CB *cb)
+{
+    ENGINE_CLEANUP_ITEM *item;
+
+    if (!int_cleanup_check(1))
+        return;
+    item = int_cleanup_item(cb);
+    if (item)
+        sk_ENGINE_CLEANUP_ITEM_insert(cleanup_stack, item, 0);
+}
+
+void engine_cleanup_add_last(ENGINE_CLEANUP_CB *cb)
+{
+    ENGINE_CLEANUP_ITEM *item;
+    if (!int_cleanup_check(1))
+        return;
+    item = int_cleanup_item(cb);
+    if (item != NULL) {
+        if (sk_ENGINE_CLEANUP_ITEM_push(cleanup_stack, item) <= 0)
+            OPENSSL_free(item);
+    }
+}
+
+/* The API function that performs all cleanup */
+static void engine_cleanup_cb_free(ENGINE_CLEANUP_ITEM *item)
+{
+    (*(item->cb)) ();
+    OPENSSL_free(item);
+}
+
+void engine_cleanup_int(void)
+{
+    if (int_cleanup_check(0)) {
+        sk_ENGINE_CLEANUP_ITEM_pop_free(cleanup_stack,
+                                        engine_cleanup_cb_free);
+        cleanup_stack = NULL;
+    }
+    CRYPTO_THREAD_lock_free(global_engine_lock);
+}
+
+/* Now the "ex_data" support */
+
+int ENGINE_set_ex_data(ENGINE *e, int idx, void *arg)
+{
+    return CRYPTO_set_ex_data(&e->ex_data, idx, arg);
+}
+
+void *ENGINE_get_ex_data(const ENGINE *e, int idx)
+{
+    return CRYPTO_get_ex_data(&e->ex_data, idx);
+}
+
+/*
+ * Functions to get/set an ENGINE's elements - mainly to avoid exposing the
+ * ENGINE structure itself.
+ */
+
+int ENGINE_set_id(ENGINE *e, const char *id)
+{
+    if (id == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_SET_ID, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    e->id = id;
+    return 1;
+}
+
+int ENGINE_set_name(ENGINE *e, const char *name)
+{
+    if (name == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_SET_NAME, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    e->name = name;
+    return 1;
+}
+
+int ENGINE_set_destroy_function(ENGINE *e, ENGINE_GEN_INT_FUNC_PTR destroy_f)
+{
+    e->destroy = destroy_f;
+    return 1;
+}
+
+int ENGINE_set_init_function(ENGINE *e, ENGINE_GEN_INT_FUNC_PTR init_f)
+{
+    e->init = init_f;
+    return 1;
+}
+
+int ENGINE_set_finish_function(ENGINE *e, ENGINE_GEN_INT_FUNC_PTR finish_f)
+{
+    e->finish = finish_f;
+    return 1;
+}
+
+int ENGINE_set_ctrl_function(ENGINE *e, ENGINE_CTRL_FUNC_PTR ctrl_f)
+{
+    e->ctrl = ctrl_f;
+    return 1;
+}
+
+int ENGINE_set_flags(ENGINE *e, int flags)
+{
+    e->flags = flags;
+    return 1;
+}
+
+int ENGINE_set_cmd_defns(ENGINE *e, const ENGINE_CMD_DEFN *defns)
+{
+    e->cmd_defns = defns;
+    return 1;
+}
+
+const char *ENGINE_get_id(const ENGINE *e)
+{
+    return e->id;
+}
+
+const char *ENGINE_get_name(const ENGINE *e)
+{
+    return e->name;
+}
+
+ENGINE_GEN_INT_FUNC_PTR ENGINE_get_destroy_function(const ENGINE *e)
+{
+    return e->destroy;
+}
+
+ENGINE_GEN_INT_FUNC_PTR ENGINE_get_init_function(const ENGINE *e)
+{
+    return e->init;
+}
+
+ENGINE_GEN_INT_FUNC_PTR ENGINE_get_finish_function(const ENGINE *e)
+{
+    return e->finish;
+}
+
+ENGINE_CTRL_FUNC_PTR ENGINE_get_ctrl_function(const ENGINE *e)
+{
+    return e->ctrl;
+}
+
+int ENGINE_get_flags(const ENGINE *e)
+{
+    return e->flags;
+}
+
+const ENGINE_CMD_DEFN *ENGINE_get_cmd_defns(const ENGINE *e)
+{
+    return e->cmd_defns;
+}
+
+/*
+ * eng_lib.o is pretty much linked into anything that touches ENGINE already,
+ * so put the "static_state" hack here.
+ */
+
+static int internal_static_hack = 0;
+
+void *ENGINE_get_static_state(void)
+{
+    return &internal_static_hack;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_list.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_list.c
new file mode 100644
index 000000000..45c339c54
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_list.c
@@ -0,0 +1,349 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "eng_int.h"
+
+/*
+ * The linked-list of pointers to engine types. engine_list_head incorporates
+ * an implicit structural reference but engine_list_tail does not - the
+ * latter is a computational optimization and only points to something that
+ * is already pointed to by its predecessor in the list (or engine_list_head
+ * itself). In the same way, the use of the "prev" pointer in each ENGINE is
+ * to save excessive list iteration, it doesn't correspond to an extra
+ * structural reference. Hence, engine_list_head, and each non-null "next"
+ * pointer account for the list itself assuming exactly 1 structural
+ * reference on each list member.
+ */
+static ENGINE *engine_list_head = NULL;
+static ENGINE *engine_list_tail = NULL;
+
+/*
+ * This cleanup function is only needed internally. If it should be called,
+ * we register it with the "engine_cleanup_int()" stack to be called during
+ * cleanup.
+ */
+
+static void engine_list_cleanup(void)
+{
+    ENGINE *iterator = engine_list_head;
+
+    while (iterator != NULL) {
+        ENGINE_remove(iterator);
+        iterator = engine_list_head;
+    }
+    return;
+}
+
+/*
+ * These static functions starting with a lower case "engine_" always take
+ * place when global_engine_lock has been locked up.
+ */
+static int engine_list_add(ENGINE *e)
+{
+    int conflict = 0;
+    ENGINE *iterator = NULL;
+
+    if (e == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_LIST_ADD, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    iterator = engine_list_head;
+    while (iterator && !conflict) {
+        conflict = (strcmp(iterator->id, e->id) == 0);
+        iterator = iterator->next;
+    }
+    if (conflict) {
+        ENGINEerr(ENGINE_F_ENGINE_LIST_ADD, ENGINE_R_CONFLICTING_ENGINE_ID);
+        return 0;
+    }
+    if (engine_list_head == NULL) {
+        /* We are adding to an empty list. */
+        if (engine_list_tail) {
+            ENGINEerr(ENGINE_F_ENGINE_LIST_ADD, ENGINE_R_INTERNAL_LIST_ERROR);
+            return 0;
+        }
+        engine_list_head = e;
+        e->prev = NULL;
+        /*
+         * The first time the list allocates, we should register the cleanup.
+         */
+        engine_cleanup_add_last(engine_list_cleanup);
+    } else {
+        /* We are adding to the tail of an existing list. */
+        if ((engine_list_tail == NULL) || (engine_list_tail->next != NULL)) {
+            ENGINEerr(ENGINE_F_ENGINE_LIST_ADD, ENGINE_R_INTERNAL_LIST_ERROR);
+            return 0;
+        }
+        engine_list_tail->next = e;
+        e->prev = engine_list_tail;
+    }
+    /*
+     * Having the engine in the list assumes a structural reference.
+     */
+    e->struct_ref++;
+    engine_ref_debug(e, 0, 1);
+    /* However it came to be, e is the last item in the list. */
+    engine_list_tail = e;
+    e->next = NULL;
+    return 1;
+}
+
+static int engine_list_remove(ENGINE *e)
+{
+    ENGINE *iterator;
+
+    if (e == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_LIST_REMOVE, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    /* We need to check that e is in our linked list! */
+    iterator = engine_list_head;
+    while (iterator && (iterator != e))
+        iterator = iterator->next;
+    if (iterator == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_LIST_REMOVE,
+                  ENGINE_R_ENGINE_IS_NOT_IN_LIST);
+        return 0;
+    }
+    /* un-link e from the chain. */
+    if (e->next)
+        e->next->prev = e->prev;
+    if (e->prev)
+        e->prev->next = e->next;
+    /* Correct our head/tail if necessary. */
+    if (engine_list_head == e)
+        engine_list_head = e->next;
+    if (engine_list_tail == e)
+        engine_list_tail = e->prev;
+    engine_free_util(e, 0);
+    return 1;
+}
+
+/* Get the first/last "ENGINE" type available. */
+ENGINE *ENGINE_get_first(void)
+{
+    ENGINE *ret;
+
+    if (!RUN_ONCE(&engine_lock_init, do_engine_lock_init)) {
+        ENGINEerr(ENGINE_F_ENGINE_GET_FIRST, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    ret = engine_list_head;
+    if (ret) {
+        ret->struct_ref++;
+        engine_ref_debug(ret, 0, 1);
+    }
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    return ret;
+}
+
+ENGINE *ENGINE_get_last(void)
+{
+    ENGINE *ret;
+
+    if (!RUN_ONCE(&engine_lock_init, do_engine_lock_init)) {
+        ENGINEerr(ENGINE_F_ENGINE_GET_LAST, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    ret = engine_list_tail;
+    if (ret) {
+        ret->struct_ref++;
+        engine_ref_debug(ret, 0, 1);
+    }
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    return ret;
+}
+
+/* Iterate to the next/previous "ENGINE" type (NULL = end of the list). */
+ENGINE *ENGINE_get_next(ENGINE *e)
+{
+    ENGINE *ret = NULL;
+    if (e == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_GET_NEXT, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    ret = e->next;
+    if (ret) {
+        /* Return a valid structural reference to the next ENGINE */
+        ret->struct_ref++;
+        engine_ref_debug(ret, 0, 1);
+    }
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    /* Release the structural reference to the previous ENGINE */
+    ENGINE_free(e);
+    return ret;
+}
+
+ENGINE *ENGINE_get_prev(ENGINE *e)
+{
+    ENGINE *ret = NULL;
+    if (e == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_GET_PREV, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    ret = e->prev;
+    if (ret) {
+        /* Return a valid structural reference to the next ENGINE */
+        ret->struct_ref++;
+        engine_ref_debug(ret, 0, 1);
+    }
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    /* Release the structural reference to the previous ENGINE */
+    ENGINE_free(e);
+    return ret;
+}
+
+/* Add another "ENGINE" type into the list. */
+int ENGINE_add(ENGINE *e)
+{
+    int to_return = 1;
+    if (e == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_ADD, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    if ((e->id == NULL) || (e->name == NULL)) {
+        ENGINEerr(ENGINE_F_ENGINE_ADD, ENGINE_R_ID_OR_NAME_MISSING);
+        return 0;
+    }
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    if (!engine_list_add(e)) {
+        ENGINEerr(ENGINE_F_ENGINE_ADD, ENGINE_R_INTERNAL_LIST_ERROR);
+        to_return = 0;
+    }
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    return to_return;
+}
+
+/* Remove an existing "ENGINE" type from the array. */
+int ENGINE_remove(ENGINE *e)
+{
+    int to_return = 1;
+    if (e == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_REMOVE, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    if (!engine_list_remove(e)) {
+        ENGINEerr(ENGINE_F_ENGINE_REMOVE, ENGINE_R_INTERNAL_LIST_ERROR);
+        to_return = 0;
+    }
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    return to_return;
+}
+
+static void engine_cpy(ENGINE *dest, const ENGINE *src)
+{
+    dest->id = src->id;
+    dest->name = src->name;
+#ifndef OPENSSL_NO_RSA
+    dest->rsa_meth = src->rsa_meth;
+#endif
+#ifndef OPENSSL_NO_DSA
+    dest->dsa_meth = src->dsa_meth;
+#endif
+#ifndef OPENSSL_NO_DH
+    dest->dh_meth = src->dh_meth;
+#endif
+#ifndef OPENSSL_NO_EC
+    dest->ec_meth = src->ec_meth;
+#endif
+    dest->rand_meth = src->rand_meth;
+    dest->ciphers = src->ciphers;
+    dest->digests = src->digests;
+    dest->pkey_meths = src->pkey_meths;
+    dest->destroy = src->destroy;
+    dest->init = src->init;
+    dest->finish = src->finish;
+    dest->ctrl = src->ctrl;
+    dest->load_privkey = src->load_privkey;
+    dest->load_pubkey = src->load_pubkey;
+    dest->cmd_defns = src->cmd_defns;
+    dest->flags = src->flags;
+}
+
+ENGINE *ENGINE_by_id(const char *id)
+{
+    ENGINE *iterator;
+    char *load_dir = NULL;
+    if (id == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_BY_ID, ERR_R_PASSED_NULL_PARAMETER);
+        return NULL;
+    }
+    if (!RUN_ONCE(&engine_lock_init, do_engine_lock_init)) {
+        ENGINEerr(ENGINE_F_ENGINE_BY_ID, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    iterator = engine_list_head;
+    while (iterator && (strcmp(id, iterator->id) != 0))
+        iterator = iterator->next;
+    if (iterator != NULL) {
+        /*
+         * We need to return a structural reference. If this is an ENGINE
+         * type that returns copies, make a duplicate - otherwise increment
+         * the existing ENGINE's reference count.
+         */
+        if (iterator->flags & ENGINE_FLAGS_BY_ID_COPY) {
+            ENGINE *cp = ENGINE_new();
+            if (cp == NULL)
+                iterator = NULL;
+            else {
+                engine_cpy(cp, iterator);
+                iterator = cp;
+            }
+        } else {
+            iterator->struct_ref++;
+            engine_ref_debug(iterator, 0, 1);
+        }
+    }
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    if (iterator != NULL)
+        return iterator;
+    /*
+     * Prevent infinite recursion if we're looking for the dynamic engine.
+     */
+    if (strcmp(id, "dynamic")) {
+        if ((load_dir = ossl_safe_getenv("OPENSSL_ENGINES")) == NULL)
+            load_dir = ENGINESDIR;
+        iterator = ENGINE_by_id("dynamic");
+        if (!iterator || !ENGINE_ctrl_cmd_string(iterator, "ID", id, 0) ||
+            !ENGINE_ctrl_cmd_string(iterator, "DIR_LOAD", "2", 0) ||
+            !ENGINE_ctrl_cmd_string(iterator, "DIR_ADD",
+                                    load_dir, 0) ||
+            !ENGINE_ctrl_cmd_string(iterator, "LIST_ADD", "1", 0) ||
+            !ENGINE_ctrl_cmd_string(iterator, "LOAD", NULL, 0))
+            goto notfound;
+        return iterator;
+    }
+ notfound:
+    ENGINE_free(iterator);
+    ENGINEerr(ENGINE_F_ENGINE_BY_ID, ENGINE_R_NO_SUCH_ENGINE);
+    ERR_add_error_data(2, "id=", id);
+    return NULL;
+    /* EEK! Experimental code ends */
+}
+
+int ENGINE_up_ref(ENGINE *e)
+{
+    int i;
+    if (e == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_UP_REF, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    CRYPTO_UP_REF(&e->struct_ref, &i, global_engine_lock);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_openssl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_openssl.c
new file mode 100644
index 000000000..f7ad7a5f4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_openssl.c
@@ -0,0 +1,648 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <openssl/crypto.h>
+#include "internal/cryptlib.h"
+#include "internal/engine.h"
+#include <openssl/pem.h>
+#include <openssl/evp.h>
+#include <openssl/rand.h>
+#include <openssl/rsa.h>
+#include <openssl/dsa.h>
+#include <openssl/dh.h>
+
+#include <openssl/hmac.h>
+#include <openssl/x509v3.h>
+
+/*
+ * This testing gunk is implemented (and explained) lower down. It also
+ * assumes the application explicitly calls "ENGINE_load_openssl()" because
+ * this is no longer automatic in ENGINE_load_builtin_engines().
+ */
+#define TEST_ENG_OPENSSL_RC4
+#ifndef OPENSSL_NO_STDIO
+#define TEST_ENG_OPENSSL_PKEY
+#endif
+/* #define TEST_ENG_OPENSSL_HMAC */
+/* #define TEST_ENG_OPENSSL_HMAC_INIT */
+/* #define TEST_ENG_OPENSSL_RC4_OTHERS */
+#define TEST_ENG_OPENSSL_RC4_P_INIT
+/* #define TEST_ENG_OPENSSL_RC4_P_CIPHER */
+#define TEST_ENG_OPENSSL_SHA
+/* #define TEST_ENG_OPENSSL_SHA_OTHERS */
+/* #define TEST_ENG_OPENSSL_SHA_P_INIT */
+/* #define TEST_ENG_OPENSSL_SHA_P_UPDATE */
+/* #define TEST_ENG_OPENSSL_SHA_P_FINAL */
+
+/* Now check what of those algorithms are actually enabled */
+#ifdef OPENSSL_NO_RC4
+# undef TEST_ENG_OPENSSL_RC4
+# undef TEST_ENG_OPENSSL_RC4_OTHERS
+# undef TEST_ENG_OPENSSL_RC4_P_INIT
+# undef TEST_ENG_OPENSSL_RC4_P_CIPHER
+#endif
+
+static int openssl_destroy(ENGINE *e);
+
+#ifdef TEST_ENG_OPENSSL_RC4
+static int openssl_ciphers(ENGINE *e, const EVP_CIPHER **cipher,
+                           const int **nids, int nid);
+#endif
+#ifdef TEST_ENG_OPENSSL_SHA
+static int openssl_digests(ENGINE *e, const EVP_MD **digest,
+                           const int **nids, int nid);
+#endif
+
+#ifdef TEST_ENG_OPENSSL_PKEY
+static EVP_PKEY *openssl_load_privkey(ENGINE *eng, const char *key_id,
+                                      UI_METHOD *ui_method,
+                                      void *callback_data);
+#endif
+
+#ifdef TEST_ENG_OPENSSL_HMAC
+static int ossl_register_hmac_meth(void);
+static int ossl_pkey_meths(ENGINE *e, EVP_PKEY_METHOD **pmeth,
+                           const int **nids, int nid);
+#endif
+
+/* The constants used when creating the ENGINE */
+static const char *engine_openssl_id = "openssl";
+static const char *engine_openssl_name = "Software engine support";
+
+/*
+ * This internal function is used by ENGINE_openssl() and possibly by the
+ * "dynamic" ENGINE support too
+ */
+static int bind_helper(ENGINE *e)
+{
+    if (!ENGINE_set_id(e, engine_openssl_id)
+        || !ENGINE_set_name(e, engine_openssl_name)
+        || !ENGINE_set_destroy_function(e, openssl_destroy)
+#ifndef TEST_ENG_OPENSSL_NO_ALGORITHMS
+# ifndef OPENSSL_NO_RSA
+        || !ENGINE_set_RSA(e, RSA_get_default_method())
+# endif
+# ifndef OPENSSL_NO_DSA
+        || !ENGINE_set_DSA(e, DSA_get_default_method())
+# endif
+# ifndef OPENSSL_NO_EC
+        || !ENGINE_set_EC(e, EC_KEY_OpenSSL())
+# endif
+# ifndef OPENSSL_NO_DH
+        || !ENGINE_set_DH(e, DH_get_default_method())
+# endif
+        || !ENGINE_set_RAND(e, RAND_OpenSSL())
+# ifdef TEST_ENG_OPENSSL_RC4
+        || !ENGINE_set_ciphers(e, openssl_ciphers)
+# endif
+# ifdef TEST_ENG_OPENSSL_SHA
+        || !ENGINE_set_digests(e, openssl_digests)
+# endif
+#endif
+#ifdef TEST_ENG_OPENSSL_PKEY
+        || !ENGINE_set_load_privkey_function(e, openssl_load_privkey)
+#endif
+#ifdef TEST_ENG_OPENSSL_HMAC
+        || !ossl_register_hmac_meth()
+        || !ENGINE_set_pkey_meths(e, ossl_pkey_meths)
+#endif
+        )
+        return 0;
+    /*
+     * If we add errors to this ENGINE, ensure the error handling is setup
+     * here
+     */
+    /* openssl_load_error_strings(); */
+    return 1;
+}
+
+static ENGINE *engine_openssl(void)
+{
+    ENGINE *ret = ENGINE_new();
+    if (ret == NULL)
+        return NULL;
+    if (!bind_helper(ret)) {
+        ENGINE_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+void engine_load_openssl_int(void)
+{
+    ENGINE *toadd = engine_openssl();
+    if (!toadd)
+        return;
+    ENGINE_add(toadd);
+    /*
+     * If the "add" worked, it gets a structural reference. So either way, we
+     * release our just-created reference.
+     */
+    ENGINE_free(toadd);
+    ERR_clear_error();
+}
+
+/*
+ * This stuff is needed if this ENGINE is being compiled into a
+ * self-contained shared-library.
+ */
+#ifdef ENGINE_DYNAMIC_SUPPORT
+static int bind_fn(ENGINE *e, const char *id)
+{
+    if (id && (strcmp(id, engine_openssl_id) != 0))
+        return 0;
+    if (!bind_helper(e))
+        return 0;
+    return 1;
+}
+
+IMPLEMENT_DYNAMIC_CHECK_FN()
+    IMPLEMENT_DYNAMIC_BIND_FN(bind_fn)
+#endif                          /* ENGINE_DYNAMIC_SUPPORT */
+#ifdef TEST_ENG_OPENSSL_RC4
+/*-
+ * This section of code compiles an "alternative implementation" of two modes of
+ * RC4 into this ENGINE. The result is that EVP_CIPHER operation for "rc4"
+ * should under normal circumstances go via this support rather than the default
+ * EVP support. There are other symbols to tweak the testing;
+ *    TEST_ENC_OPENSSL_RC4_OTHERS - print a one line message to stderr each time
+ *        we're asked for a cipher we don't support (should not happen).
+ *    TEST_ENG_OPENSSL_RC4_P_INIT - print a one line message to stderr each time
+ *        the "init_key" handler is called.
+ *    TEST_ENG_OPENSSL_RC4_P_CIPHER - ditto for the "cipher" handler.
+ */
+# include <openssl/rc4.h>
+# define TEST_RC4_KEY_SIZE               16
+typedef struct {
+    unsigned char key[TEST_RC4_KEY_SIZE];
+    RC4_KEY ks;
+} TEST_RC4_KEY;
+# define test(ctx) ((TEST_RC4_KEY *)EVP_CIPHER_CTX_get_cipher_data(ctx))
+static int test_rc4_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                             const unsigned char *iv, int enc)
+{
+# ifdef TEST_ENG_OPENSSL_RC4_P_INIT
+    fprintf(stderr, "(TEST_ENG_OPENSSL_RC4) test_init_key() called\n");
+# endif
+    memcpy(&test(ctx)->key[0], key, EVP_CIPHER_CTX_key_length(ctx));
+    RC4_set_key(&test(ctx)->ks, EVP_CIPHER_CTX_key_length(ctx),
+                test(ctx)->key);
+    return 1;
+}
+
+static int test_rc4_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                           const unsigned char *in, size_t inl)
+{
+# ifdef TEST_ENG_OPENSSL_RC4_P_CIPHER
+    fprintf(stderr, "(TEST_ENG_OPENSSL_RC4) test_cipher() called\n");
+# endif
+    RC4(&test(ctx)->ks, inl, in, out);
+    return 1;
+}
+
+static EVP_CIPHER *r4_cipher = NULL;
+static const EVP_CIPHER *test_r4_cipher(void)
+{
+    if (r4_cipher == NULL) {
+        EVP_CIPHER *cipher;
+
+        if ((cipher = EVP_CIPHER_meth_new(NID_rc4, 1, TEST_RC4_KEY_SIZE)) == NULL
+            || !EVP_CIPHER_meth_set_iv_length(cipher, 0)
+            || !EVP_CIPHER_meth_set_flags(cipher, EVP_CIPH_VARIABLE_LENGTH)
+            || !EVP_CIPHER_meth_set_init(cipher, test_rc4_init_key)
+            || !EVP_CIPHER_meth_set_do_cipher(cipher, test_rc4_cipher)
+            || !EVP_CIPHER_meth_set_impl_ctx_size(cipher, sizeof(TEST_RC4_KEY))) {
+            EVP_CIPHER_meth_free(cipher);
+            cipher = NULL;
+        }
+        r4_cipher = cipher;
+    }
+    return r4_cipher;
+}
+static void test_r4_cipher_destroy(void)
+{
+    EVP_CIPHER_meth_free(r4_cipher);
+    r4_cipher = NULL;
+}
+
+static EVP_CIPHER *r4_40_cipher = NULL;
+static const EVP_CIPHER *test_r4_40_cipher(void)
+{
+    if (r4_40_cipher == NULL) {
+        EVP_CIPHER *cipher;
+
+        if ((cipher = EVP_CIPHER_meth_new(NID_rc4, 1, 5 /* 40 bits */)) == NULL
+            || !EVP_CIPHER_meth_set_iv_length(cipher, 0)
+            || !EVP_CIPHER_meth_set_flags(cipher, EVP_CIPH_VARIABLE_LENGTH)
+            || !EVP_CIPHER_meth_set_init(cipher, test_rc4_init_key)
+            || !EVP_CIPHER_meth_set_do_cipher(cipher, test_rc4_cipher)
+            || !EVP_CIPHER_meth_set_impl_ctx_size(cipher, sizeof(TEST_RC4_KEY))) {
+            EVP_CIPHER_meth_free(cipher);
+            cipher = NULL;
+        }
+        r4_40_cipher = cipher;
+    }
+    return r4_40_cipher;
+}
+static void test_r4_40_cipher_destroy(void)
+{
+    EVP_CIPHER_meth_free(r4_40_cipher);
+    r4_40_cipher = NULL;
+}
+static int test_cipher_nids(const int **nids)
+{
+    static int cipher_nids[4] = { 0, 0, 0, 0 };
+    static int pos = 0;
+    static int init = 0;
+
+    if (!init) {
+        const EVP_CIPHER *cipher;
+        if ((cipher = test_r4_cipher()) != NULL)
+            cipher_nids[pos++] = EVP_CIPHER_nid(cipher);
+        if ((cipher = test_r4_40_cipher()) != NULL)
+            cipher_nids[pos++] = EVP_CIPHER_nid(cipher);
+        cipher_nids[pos] = 0;
+        init = 1;
+    }
+    *nids = cipher_nids;
+    return pos;
+}
+
+static int openssl_ciphers(ENGINE *e, const EVP_CIPHER **cipher,
+                           const int **nids, int nid)
+{
+    if (!cipher) {
+        /* We are returning a list of supported nids */
+        return test_cipher_nids(nids);
+    }
+    /* We are being asked for a specific cipher */
+    if (nid == NID_rc4)
+        *cipher = test_r4_cipher();
+    else if (nid == NID_rc4_40)
+        *cipher = test_r4_40_cipher();
+    else {
+# ifdef TEST_ENG_OPENSSL_RC4_OTHERS
+        fprintf(stderr, "(TEST_ENG_OPENSSL_RC4) returning NULL for "
+                "nid %d\n", nid);
+# endif
+        *cipher = NULL;
+        return 0;
+    }
+    return 1;
+}
+#endif
+
+#ifdef TEST_ENG_OPENSSL_SHA
+/* Much the same sort of comment as for TEST_ENG_OPENSSL_RC4 */
+# include <openssl/sha.h>
+
+static int test_sha1_init(EVP_MD_CTX *ctx)
+{
+# ifdef TEST_ENG_OPENSSL_SHA_P_INIT
+    fprintf(stderr, "(TEST_ENG_OPENSSL_SHA) test_sha1_init() called\n");
+# endif
+    return SHA1_Init(EVP_MD_CTX_md_data(ctx));
+}
+
+static int test_sha1_update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+# ifdef TEST_ENG_OPENSSL_SHA_P_UPDATE
+    fprintf(stderr, "(TEST_ENG_OPENSSL_SHA) test_sha1_update() called\n");
+# endif
+    return SHA1_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int test_sha1_final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+# ifdef TEST_ENG_OPENSSL_SHA_P_FINAL
+    fprintf(stderr, "(TEST_ENG_OPENSSL_SHA) test_sha1_final() called\n");
+# endif
+    return SHA1_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
+static EVP_MD *sha1_md = NULL;
+static const EVP_MD *test_sha_md(void)
+{
+    if (sha1_md == NULL) {
+        EVP_MD *md;
+
+        if ((md = EVP_MD_meth_new(NID_sha1, NID_sha1WithRSAEncryption)) == NULL
+            || !EVP_MD_meth_set_result_size(md, SHA_DIGEST_LENGTH)
+            || !EVP_MD_meth_set_input_blocksize(md, SHA_CBLOCK)
+            || !EVP_MD_meth_set_app_datasize(md,
+                                             sizeof(EVP_MD *) + sizeof(SHA_CTX))
+            || !EVP_MD_meth_set_flags(md, 0)
+            || !EVP_MD_meth_set_init(md, test_sha1_init)
+            || !EVP_MD_meth_set_update(md, test_sha1_update)
+            || !EVP_MD_meth_set_final(md, test_sha1_final)) {
+            EVP_MD_meth_free(md);
+            md = NULL;
+        }
+        sha1_md = md;
+    }
+    return sha1_md;
+}
+static void test_sha_md_destroy(void)
+{
+    EVP_MD_meth_free(sha1_md);
+    sha1_md = NULL;
+}
+static int test_digest_nids(const int **nids)
+{
+    static int digest_nids[2] = { 0, 0 };
+    static int pos = 0;
+    static int init = 0;
+
+    if (!init) {
+        const EVP_MD *md;
+        if ((md = test_sha_md()) != NULL)
+            digest_nids[pos++] = EVP_MD_type(md);
+        digest_nids[pos] = 0;
+        init = 1;
+    }
+    *nids = digest_nids;
+    return pos;
+}
+
+static int openssl_digests(ENGINE *e, const EVP_MD **digest,
+                           const int **nids, int nid)
+{
+    if (!digest) {
+        /* We are returning a list of supported nids */
+        return test_digest_nids(nids);
+    }
+    /* We are being asked for a specific digest */
+    if (nid == NID_sha1)
+        *digest = test_sha_md();
+    else {
+# ifdef TEST_ENG_OPENSSL_SHA_OTHERS
+        fprintf(stderr, "(TEST_ENG_OPENSSL_SHA) returning NULL for "
+                "nid %d\n", nid);
+# endif
+        *digest = NULL;
+        return 0;
+    }
+    return 1;
+}
+#endif
+
+#ifdef TEST_ENG_OPENSSL_PKEY
+static EVP_PKEY *openssl_load_privkey(ENGINE *eng, const char *key_id,
+                                      UI_METHOD *ui_method,
+                                      void *callback_data)
+{
+    BIO *in;
+    EVP_PKEY *key;
+    fprintf(stderr, "(TEST_ENG_OPENSSL_PKEY)Loading Private key %s\n",
+            key_id);
+    in = BIO_new_file(key_id, "r");
+    if (!in)
+        return NULL;
+    key = PEM_read_bio_PrivateKey(in, NULL, 0, NULL);
+    BIO_free(in);
+    return key;
+}
+#endif
+
+#ifdef TEST_ENG_OPENSSL_HMAC
+
+/*
+ * Experimental HMAC redirection implementation: mainly copied from
+ * hm_pmeth.c
+ */
+
+/* HMAC pkey context structure */
+
+typedef struct {
+    const EVP_MD *md;           /* MD for HMAC use */
+    ASN1_OCTET_STRING ktmp;     /* Temp storage for key */
+    HMAC_CTX *ctx;
+} OSSL_HMAC_PKEY_CTX;
+
+static int ossl_hmac_init(EVP_PKEY_CTX *ctx)
+{
+    OSSL_HMAC_PKEY_CTX *hctx;
+
+    if ((hctx = OPENSSL_zalloc(sizeof(*hctx))) == NULL) {
+        ENGINEerr(ENGINE_F_OSSL_HMAC_INIT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    hctx->ktmp.type = V_ASN1_OCTET_STRING;
+    hctx->ctx = HMAC_CTX_new();
+    if (hctx->ctx == NULL) {
+        OPENSSL_free(hctx);
+        return 0;
+    }
+    EVP_PKEY_CTX_set_data(ctx, hctx);
+    EVP_PKEY_CTX_set0_keygen_info(ctx, NULL, 0);
+# ifdef TEST_ENG_OPENSSL_HMAC_INIT
+    fprintf(stderr, "(TEST_ENG_OPENSSL_HMAC) ossl_hmac_init() called\n");
+# endif
+    return 1;
+}
+
+static void ossl_hmac_cleanup(EVP_PKEY_CTX *ctx);
+
+static int ossl_hmac_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src)
+{
+    OSSL_HMAC_PKEY_CTX *sctx, *dctx;
+
+    /* allocate memory for dst->data and a new HMAC_CTX in dst->data->ctx */
+    if (!ossl_hmac_init(dst))
+        return 0;
+    sctx = EVP_PKEY_CTX_get_data(src);
+    dctx = EVP_PKEY_CTX_get_data(dst);
+    dctx->md = sctx->md;
+    if (!HMAC_CTX_copy(dctx->ctx, sctx->ctx))
+        goto err;
+    if (sctx->ktmp.data) {
+        if (!ASN1_OCTET_STRING_set(&dctx->ktmp,
+                                   sctx->ktmp.data, sctx->ktmp.length))
+            goto err;
+    }
+    return 1;
+err:
+    /* release HMAC_CTX in dst->data->ctx and memory allocated for dst->data */
+    ossl_hmac_cleanup(dst);
+    return 0;
+}
+
+static void ossl_hmac_cleanup(EVP_PKEY_CTX *ctx)
+{
+    OSSL_HMAC_PKEY_CTX *hctx = EVP_PKEY_CTX_get_data(ctx);
+
+    if (hctx) {
+        HMAC_CTX_free(hctx->ctx);
+        OPENSSL_clear_free(hctx->ktmp.data, hctx->ktmp.length);
+        OPENSSL_free(hctx);
+        EVP_PKEY_CTX_set_data(ctx, NULL);
+    }
+}
+
+static int ossl_hmac_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
+{
+    ASN1_OCTET_STRING *hkey = NULL;
+    OSSL_HMAC_PKEY_CTX *hctx = EVP_PKEY_CTX_get_data(ctx);
+    if (!hctx->ktmp.data)
+        return 0;
+    hkey = ASN1_OCTET_STRING_dup(&hctx->ktmp);
+    if (!hkey)
+        return 0;
+    EVP_PKEY_assign(pkey, EVP_PKEY_HMAC, hkey);
+
+    return 1;
+}
+
+static int ossl_int_update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    OSSL_HMAC_PKEY_CTX *hctx = EVP_PKEY_CTX_get_data(EVP_MD_CTX_pkey_ctx(ctx));
+    if (!HMAC_Update(hctx->ctx, data, count))
+        return 0;
+    return 1;
+}
+
+static int ossl_hmac_signctx_init(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx)
+{
+    EVP_MD_CTX_set_flags(mctx, EVP_MD_CTX_FLAG_NO_INIT);
+    EVP_MD_CTX_set_update_fn(mctx, ossl_int_update);
+    return 1;
+}
+
+static int ossl_hmac_signctx(EVP_PKEY_CTX *ctx, unsigned char *sig,
+                             size_t *siglen, EVP_MD_CTX *mctx)
+{
+    unsigned int hlen;
+    OSSL_HMAC_PKEY_CTX *hctx = EVP_PKEY_CTX_get_data(ctx);
+    int l = EVP_MD_CTX_size(mctx);
+
+    if (l < 0)
+        return 0;
+    *siglen = l;
+    if (!sig)
+        return 1;
+
+    if (!HMAC_Final(hctx->ctx, sig, &hlen))
+        return 0;
+    *siglen = (size_t)hlen;
+    return 1;
+}
+
+static int ossl_hmac_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
+{
+    OSSL_HMAC_PKEY_CTX *hctx = EVP_PKEY_CTX_get_data(ctx);
+    EVP_PKEY *pk;
+    ASN1_OCTET_STRING *key;
+    switch (type) {
+
+    case EVP_PKEY_CTRL_SET_MAC_KEY:
+        if ((!p2 && p1 > 0) || (p1 < -1))
+            return 0;
+        if (!ASN1_OCTET_STRING_set(&hctx->ktmp, p2, p1))
+            return 0;
+        break;
+
+    case EVP_PKEY_CTRL_MD:
+        hctx->md = p2;
+        break;
+
+    case EVP_PKEY_CTRL_DIGESTINIT:
+        pk = EVP_PKEY_CTX_get0_pkey(ctx);
+        key = EVP_PKEY_get0(pk);
+        if (!HMAC_Init_ex(hctx->ctx, key->data, key->length, hctx->md, NULL))
+            return 0;
+        break;
+
+    default:
+        return -2;
+
+    }
+    return 1;
+}
+
+static int ossl_hmac_ctrl_str(EVP_PKEY_CTX *ctx,
+                              const char *type, const char *value)
+{
+    if (!value) {
+        return 0;
+    }
+    if (strcmp(type, "key") == 0) {
+        void *p = (void *)value;
+        return ossl_hmac_ctrl(ctx, EVP_PKEY_CTRL_SET_MAC_KEY, -1, p);
+    }
+    if (strcmp(type, "hexkey") == 0) {
+        unsigned char *key;
+        int r;
+        long keylen;
+        key = OPENSSL_hexstr2buf(value, &keylen);
+        if (!key)
+            return 0;
+        r = ossl_hmac_ctrl(ctx, EVP_PKEY_CTRL_SET_MAC_KEY, keylen, key);
+        OPENSSL_free(key);
+        return r;
+    }
+    return -2;
+}
+
+static EVP_PKEY_METHOD *ossl_hmac_meth;
+
+static int ossl_register_hmac_meth(void)
+{
+    EVP_PKEY_METHOD *meth;
+    meth = EVP_PKEY_meth_new(EVP_PKEY_HMAC, 0);
+    if (meth == NULL)
+        return 0;
+    EVP_PKEY_meth_set_init(meth, ossl_hmac_init);
+    EVP_PKEY_meth_set_copy(meth, ossl_hmac_copy);
+    EVP_PKEY_meth_set_cleanup(meth, ossl_hmac_cleanup);
+
+    EVP_PKEY_meth_set_keygen(meth, 0, ossl_hmac_keygen);
+
+    EVP_PKEY_meth_set_signctx(meth, ossl_hmac_signctx_init,
+                              ossl_hmac_signctx);
+
+    EVP_PKEY_meth_set_ctrl(meth, ossl_hmac_ctrl, ossl_hmac_ctrl_str);
+    ossl_hmac_meth = meth;
+    return 1;
+}
+
+static int ossl_pkey_meths(ENGINE *e, EVP_PKEY_METHOD **pmeth,
+                           const int **nids, int nid)
+{
+    static int ossl_pkey_nids[] = {
+        EVP_PKEY_HMAC,
+        0
+    };
+    if (!pmeth) {
+        *nids = ossl_pkey_nids;
+        return 1;
+    }
+
+    if (nid == EVP_PKEY_HMAC) {
+        *pmeth = ossl_hmac_meth;
+        return 1;
+    }
+
+    *pmeth = NULL;
+    return 0;
+}
+
+#endif
+
+int openssl_destroy(ENGINE *e)
+{
+    test_sha_md_destroy();
+#ifdef TEST_ENG_OPENSSL_RC4
+    test_r4_cipher_destroy();
+    test_r4_40_cipher_destroy();
+#endif
+    return 1;
+}
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_pkey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_pkey.c
new file mode 100644
index 000000000..305a648fe
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_pkey.c
@@ -0,0 +1,140 @@
+/*
+ * Copyright 2001-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "eng_int.h"
+
+/* Basic get/set stuff */
+
+int ENGINE_set_load_privkey_function(ENGINE *e,
+                                     ENGINE_LOAD_KEY_PTR loadpriv_f)
+{
+    e->load_privkey = loadpriv_f;
+    return 1;
+}
+
+int ENGINE_set_load_pubkey_function(ENGINE *e, ENGINE_LOAD_KEY_PTR loadpub_f)
+{
+    e->load_pubkey = loadpub_f;
+    return 1;
+}
+
+int ENGINE_set_load_ssl_client_cert_function(ENGINE *e,
+                                             ENGINE_SSL_CLIENT_CERT_PTR
+                                             loadssl_f)
+{
+    e->load_ssl_client_cert = loadssl_f;
+    return 1;
+}
+
+ENGINE_LOAD_KEY_PTR ENGINE_get_load_privkey_function(const ENGINE *e)
+{
+    return e->load_privkey;
+}
+
+ENGINE_LOAD_KEY_PTR ENGINE_get_load_pubkey_function(const ENGINE *e)
+{
+    return e->load_pubkey;
+}
+
+ENGINE_SSL_CLIENT_CERT_PTR ENGINE_get_ssl_client_cert_function(const ENGINE
+                                                               *e)
+{
+    return e->load_ssl_client_cert;
+}
+
+/* API functions to load public/private keys */
+
+EVP_PKEY *ENGINE_load_private_key(ENGINE *e, const char *key_id,
+                                  UI_METHOD *ui_method, void *callback_data)
+{
+    EVP_PKEY *pkey;
+
+    if (e == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_LOAD_PRIVATE_KEY,
+                  ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    if (e->funct_ref == 0) {
+        CRYPTO_THREAD_unlock(global_engine_lock);
+        ENGINEerr(ENGINE_F_ENGINE_LOAD_PRIVATE_KEY, ENGINE_R_NOT_INITIALISED);
+        return 0;
+    }
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    if (!e->load_privkey) {
+        ENGINEerr(ENGINE_F_ENGINE_LOAD_PRIVATE_KEY,
+                  ENGINE_R_NO_LOAD_FUNCTION);
+        return 0;
+    }
+    pkey = e->load_privkey(e, key_id, ui_method, callback_data);
+    if (!pkey) {
+        ENGINEerr(ENGINE_F_ENGINE_LOAD_PRIVATE_KEY,
+                  ENGINE_R_FAILED_LOADING_PRIVATE_KEY);
+        return 0;
+    }
+    return pkey;
+}
+
+EVP_PKEY *ENGINE_load_public_key(ENGINE *e, const char *key_id,
+                                 UI_METHOD *ui_method, void *callback_data)
+{
+    EVP_PKEY *pkey;
+
+    if (e == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_LOAD_PUBLIC_KEY,
+                  ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    if (e->funct_ref == 0) {
+        CRYPTO_THREAD_unlock(global_engine_lock);
+        ENGINEerr(ENGINE_F_ENGINE_LOAD_PUBLIC_KEY, ENGINE_R_NOT_INITIALISED);
+        return 0;
+    }
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    if (!e->load_pubkey) {
+        ENGINEerr(ENGINE_F_ENGINE_LOAD_PUBLIC_KEY, ENGINE_R_NO_LOAD_FUNCTION);
+        return 0;
+    }
+    pkey = e->load_pubkey(e, key_id, ui_method, callback_data);
+    if (!pkey) {
+        ENGINEerr(ENGINE_F_ENGINE_LOAD_PUBLIC_KEY,
+                  ENGINE_R_FAILED_LOADING_PUBLIC_KEY);
+        return 0;
+    }
+    return pkey;
+}
+
+int ENGINE_load_ssl_client_cert(ENGINE *e, SSL *s,
+                                STACK_OF(X509_NAME) *ca_dn, X509 **pcert,
+                                EVP_PKEY **ppkey, STACK_OF(X509) **pother,
+                                UI_METHOD *ui_method, void *callback_data)
+{
+
+    if (e == NULL) {
+        ENGINEerr(ENGINE_F_ENGINE_LOAD_SSL_CLIENT_CERT,
+                  ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    if (e->funct_ref == 0) {
+        CRYPTO_THREAD_unlock(global_engine_lock);
+        ENGINEerr(ENGINE_F_ENGINE_LOAD_SSL_CLIENT_CERT,
+                  ENGINE_R_NOT_INITIALISED);
+        return 0;
+    }
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    if (!e->load_ssl_client_cert) {
+        ENGINEerr(ENGINE_F_ENGINE_LOAD_SSL_CLIENT_CERT,
+                  ENGINE_R_NO_LOAD_FUNCTION);
+        return 0;
+    }
+    return e->load_ssl_client_cert(e, s, ca_dn, pcert, ppkey, pother,
+                                   ui_method, callback_data);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_rdrand.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_rdrand.c
new file mode 100644
index 000000000..261e5debb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_rdrand.c
@@ -0,0 +1,97 @@
+/*
+ * Copyright 2011-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+
+#include <stdio.h>
+#include <string.h>
+#include "internal/engine.h"
+#include <openssl/rand.h>
+#include <openssl/err.h>
+#include <openssl/crypto.h>
+
+#if (defined(__i386)   || defined(__i386__)   || defined(_M_IX86) || \
+     defined(__x86_64) || defined(__x86_64__) || \
+     defined(_M_AMD64) || defined (_M_X64)) && defined(OPENSSL_CPUID_OBJ)
+
+size_t OPENSSL_ia32_rdrand_bytes(unsigned char *buf, size_t len);
+
+static int get_random_bytes(unsigned char *buf, int num)
+{
+    if (num < 0) {
+        return 0;
+    }
+
+    return (size_t)num == OPENSSL_ia32_rdrand_bytes(buf, (size_t)num);
+}
+
+static int random_status(void)
+{
+    return 1;
+}
+
+static RAND_METHOD rdrand_meth = {
+    NULL,                       /* seed */
+    get_random_bytes,
+    NULL,                       /* cleanup */
+    NULL,                       /* add */
+    get_random_bytes,
+    random_status,
+};
+
+static int rdrand_init(ENGINE *e)
+{
+    return 1;
+}
+
+static const char *engine_e_rdrand_id = "rdrand";
+static const char *engine_e_rdrand_name = "Intel RDRAND engine";
+
+static int bind_helper(ENGINE *e)
+{
+    if (!ENGINE_set_id(e, engine_e_rdrand_id) ||
+        !ENGINE_set_name(e, engine_e_rdrand_name) ||
+        !ENGINE_set_flags(e, ENGINE_FLAGS_NO_REGISTER_ALL) ||
+        !ENGINE_set_init_function(e, rdrand_init) ||
+        !ENGINE_set_RAND(e, &rdrand_meth))
+        return 0;
+
+    return 1;
+}
+
+static ENGINE *ENGINE_rdrand(void)
+{
+    ENGINE *ret = ENGINE_new();
+    if (ret == NULL)
+        return NULL;
+    if (!bind_helper(ret)) {
+        ENGINE_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+void engine_load_rdrand_int(void)
+{
+    extern unsigned int OPENSSL_ia32cap_P[];
+
+    if (OPENSSL_ia32cap_P[1] & (1 << (62 - 32))) {
+        ENGINE *toadd = ENGINE_rdrand();
+        if (!toadd)
+            return;
+        ENGINE_add(toadd);
+        ENGINE_free(toadd);
+        ERR_clear_error();
+    }
+}
+#else
+void engine_load_rdrand_int(void)
+{
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_table.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_table.c
new file mode 100644
index 000000000..ac4b02fc1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/eng_table.c
@@ -0,0 +1,308 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/lhash.h>
+#include "eng_int.h"
+
+/* The type of the items in the table */
+struct st_engine_pile {
+    /* The 'nid' of this algorithm/mode */
+    int nid;
+    /* ENGINEs that implement this algorithm/mode. */
+    STACK_OF(ENGINE) *sk;
+    /* The default ENGINE to perform this algorithm/mode. */
+    ENGINE *funct;
+    /*
+     * Zero if 'sk' is newer than the cached 'funct', non-zero otherwise
+     */
+    int uptodate;
+};
+
+/* The type exposed in eng_int.h */
+struct st_engine_table {
+    LHASH_OF(ENGINE_PILE) piles;
+};                              /* ENGINE_TABLE */
+
+typedef struct st_engine_pile_doall {
+    engine_table_doall_cb *cb;
+    void *arg;
+} ENGINE_PILE_DOALL;
+
+/* Global flags (ENGINE_TABLE_FLAG_***). */
+static unsigned int table_flags = 0;
+
+/* API function manipulating 'table_flags' */
+unsigned int ENGINE_get_table_flags(void)
+{
+    return table_flags;
+}
+
+void ENGINE_set_table_flags(unsigned int flags)
+{
+    table_flags = flags;
+}
+
+/* Internal functions for the "piles" hash table */
+static unsigned long engine_pile_hash(const ENGINE_PILE *c)
+{
+    return c->nid;
+}
+
+static int engine_pile_cmp(const ENGINE_PILE *a, const ENGINE_PILE *b)
+{
+    return a->nid - b->nid;
+}
+
+static int int_table_check(ENGINE_TABLE **t, int create)
+{
+    LHASH_OF(ENGINE_PILE) *lh;
+
+    if (*t)
+        return 1;
+    if (!create)
+        return 0;
+    if ((lh = lh_ENGINE_PILE_new(engine_pile_hash, engine_pile_cmp)) == NULL)
+        return 0;
+    *t = (ENGINE_TABLE *)lh;
+    return 1;
+}
+
+/*
+ * Privately exposed (via eng_int.h) functions for adding and/or removing
+ * ENGINEs from the implementation table
+ */
+int engine_table_register(ENGINE_TABLE **table, ENGINE_CLEANUP_CB *cleanup,
+                          ENGINE *e, const int *nids, int num_nids,
+                          int setdefault)
+{
+    int ret = 0, added = 0;
+    ENGINE_PILE tmplate, *fnd;
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    if (!(*table))
+        added = 1;
+    if (!int_table_check(table, 1))
+        goto end;
+    if (added)
+        /* The cleanup callback needs to be added */
+        engine_cleanup_add_first(cleanup);
+    while (num_nids--) {
+        tmplate.nid = *nids;
+        fnd = lh_ENGINE_PILE_retrieve(&(*table)->piles, &tmplate);
+        if (!fnd) {
+            fnd = OPENSSL_malloc(sizeof(*fnd));
+            if (fnd == NULL)
+                goto end;
+            fnd->uptodate = 1;
+            fnd->nid = *nids;
+            fnd->sk = sk_ENGINE_new_null();
+            if (!fnd->sk) {
+                OPENSSL_free(fnd);
+                goto end;
+            }
+            fnd->funct = NULL;
+            (void)lh_ENGINE_PILE_insert(&(*table)->piles, fnd);
+            if (lh_ENGINE_PILE_retrieve(&(*table)->piles, &tmplate) != fnd) {
+                sk_ENGINE_free(fnd->sk);
+                OPENSSL_free(fnd);
+                goto end;
+            }
+        }
+        /* A registration shouldn't add duplicate entries */
+        (void)sk_ENGINE_delete_ptr(fnd->sk, e);
+        /*
+         * if 'setdefault', this ENGINE goes to the head of the list
+         */
+        if (!sk_ENGINE_push(fnd->sk, e))
+            goto end;
+        /* "touch" this ENGINE_PILE */
+        fnd->uptodate = 0;
+        if (setdefault) {
+            if (!engine_unlocked_init(e)) {
+                ENGINEerr(ENGINE_F_ENGINE_TABLE_REGISTER,
+                          ENGINE_R_INIT_FAILED);
+                goto end;
+            }
+            if (fnd->funct)
+                engine_unlocked_finish(fnd->funct, 0);
+            fnd->funct = e;
+            fnd->uptodate = 1;
+        }
+        nids++;
+    }
+    ret = 1;
+ end:
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    return ret;
+}
+
+static void int_unregister_cb(ENGINE_PILE *pile, ENGINE *e)
+{
+    int n;
+    /* Iterate the 'c->sk' stack removing any occurrence of 'e' */
+    while ((n = sk_ENGINE_find(pile->sk, e)) >= 0) {
+        (void)sk_ENGINE_delete(pile->sk, n);
+        pile->uptodate = 0;
+    }
+    if (pile->funct == e) {
+        engine_unlocked_finish(e, 0);
+        pile->funct = NULL;
+    }
+}
+
+IMPLEMENT_LHASH_DOALL_ARG(ENGINE_PILE, ENGINE);
+
+void engine_table_unregister(ENGINE_TABLE **table, ENGINE *e)
+{
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    if (int_table_check(table, 0))
+        lh_ENGINE_PILE_doall_ENGINE(&(*table)->piles, int_unregister_cb, e);
+    CRYPTO_THREAD_unlock(global_engine_lock);
+}
+
+static void int_cleanup_cb_doall(ENGINE_PILE *p)
+{
+    if (!p)
+        return;
+    sk_ENGINE_free(p->sk);
+    if (p->funct)
+        engine_unlocked_finish(p->funct, 0);
+    OPENSSL_free(p);
+}
+
+void engine_table_cleanup(ENGINE_TABLE **table)
+{
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    if (*table) {
+        lh_ENGINE_PILE_doall(&(*table)->piles, int_cleanup_cb_doall);
+        lh_ENGINE_PILE_free(&(*table)->piles);
+        *table = NULL;
+    }
+    CRYPTO_THREAD_unlock(global_engine_lock);
+}
+
+/* return a functional reference for a given 'nid' */
+#ifndef ENGINE_TABLE_DEBUG
+ENGINE *engine_table_select(ENGINE_TABLE **table, int nid)
+#else
+ENGINE *engine_table_select_tmp(ENGINE_TABLE **table, int nid, const char *f,
+                                int l)
+#endif
+{
+    ENGINE *ret = NULL;
+    ENGINE_PILE tmplate, *fnd = NULL;
+    int initres, loop = 0;
+
+    if (!(*table)) {
+#ifdef ENGINE_TABLE_DEBUG
+        fprintf(stderr, "engine_table_dbg: %s:%d, nid=%d, nothing "
+                "registered!\n", f, l, nid);
+#endif
+        return NULL;
+    }
+    ERR_set_mark();
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    /*
+     * Check again inside the lock otherwise we could race against cleanup
+     * operations. But don't worry about a fprintf(stderr).
+     */
+    if (!int_table_check(table, 0))
+        goto end;
+    tmplate.nid = nid;
+    fnd = lh_ENGINE_PILE_retrieve(&(*table)->piles, &tmplate);
+    if (!fnd)
+        goto end;
+    if (fnd->funct && engine_unlocked_init(fnd->funct)) {
+#ifdef ENGINE_TABLE_DEBUG
+        fprintf(stderr, "engine_table_dbg: %s:%d, nid=%d, using "
+                "ENGINE '%s' cached\n", f, l, nid, fnd->funct->id);
+#endif
+        ret = fnd->funct;
+        goto end;
+    }
+    if (fnd->uptodate) {
+        ret = fnd->funct;
+        goto end;
+    }
+ trynext:
+    ret = sk_ENGINE_value(fnd->sk, loop++);
+    if (!ret) {
+#ifdef ENGINE_TABLE_DEBUG
+        fprintf(stderr, "engine_table_dbg: %s:%d, nid=%d, no "
+                "registered implementations would initialise\n", f, l, nid);
+#endif
+        goto end;
+    }
+    /* Try to initialise the ENGINE? */
+    if ((ret->funct_ref > 0) || !(table_flags & ENGINE_TABLE_FLAG_NOINIT))
+        initres = engine_unlocked_init(ret);
+    else
+        initres = 0;
+    if (initres) {
+        /* Update 'funct' */
+        if ((fnd->funct != ret) && engine_unlocked_init(ret)) {
+            /* If there was a previous default we release it. */
+            if (fnd->funct)
+                engine_unlocked_finish(fnd->funct, 0);
+            fnd->funct = ret;
+#ifdef ENGINE_TABLE_DEBUG
+            fprintf(stderr, "engine_table_dbg: %s:%d, nid=%d, "
+                    "setting default to '%s'\n", f, l, nid, ret->id);
+#endif
+        }
+#ifdef ENGINE_TABLE_DEBUG
+        fprintf(stderr, "engine_table_dbg: %s:%d, nid=%d, using "
+                "newly initialised '%s'\n", f, l, nid, ret->id);
+#endif
+        goto end;
+    }
+    goto trynext;
+ end:
+    /*
+     * If it failed, it is unlikely to succeed again until some future
+     * registrations have taken place. In all cases, we cache.
+     */
+    if (fnd)
+        fnd->uptodate = 1;
+#ifdef ENGINE_TABLE_DEBUG
+    if (ret)
+        fprintf(stderr, "engine_table_dbg: %s:%d, nid=%d, caching "
+                "ENGINE '%s'\n", f, l, nid, ret->id);
+    else
+        fprintf(stderr, "engine_table_dbg: %s:%d, nid=%d, caching "
+                "'no matching ENGINE'\n", f, l, nid);
+#endif
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    /*
+     * Whatever happened, any failed init()s are not failures in this
+     * context, so clear our error state.
+     */
+    ERR_pop_to_mark();
+    return ret;
+}
+
+/* Table enumeration */
+
+static void int_dall(const ENGINE_PILE *pile, ENGINE_PILE_DOALL *dall)
+{
+    dall->cb(pile->nid, pile->sk, pile->funct, dall->arg);
+}
+
+IMPLEMENT_LHASH_DOALL_ARG_CONST(ENGINE_PILE, ENGINE_PILE_DOALL);
+
+void engine_table_doall(ENGINE_TABLE *table, engine_table_doall_cb *cb,
+                        void *arg)
+{
+    ENGINE_PILE_DOALL dall;
+    dall.cb = cb;
+    dall.arg = arg;
+    if (table)
+        lh_ENGINE_PILE_doall_ENGINE_PILE_DOALL(&table->piles, int_dall, &dall);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_asnmth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_asnmth.c
new file mode 100644
index 000000000..4bcc76136
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_asnmth.c
@@ -0,0 +1,209 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include "eng_int.h"
+#include <openssl/evp.h>
+#include "internal/asn1_int.h"
+
+/*
+ * If this symbol is defined then ENGINE_get_pkey_asn1_meth_engine(), the
+ * function that is used by EVP to hook in pkey_asn1_meth code and cache
+ * defaults (etc), will display brief debugging summaries to stderr with the
+ * 'nid'.
+ */
+/* #define ENGINE_PKEY_ASN1_METH_DEBUG */
+
+static ENGINE_TABLE *pkey_asn1_meth_table = NULL;
+
+void ENGINE_unregister_pkey_asn1_meths(ENGINE *e)
+{
+    engine_table_unregister(&pkey_asn1_meth_table, e);
+}
+
+static void engine_unregister_all_pkey_asn1_meths(void)
+{
+    engine_table_cleanup(&pkey_asn1_meth_table);
+}
+
+int ENGINE_register_pkey_asn1_meths(ENGINE *e)
+{
+    if (e->pkey_asn1_meths) {
+        const int *nids;
+        int num_nids = e->pkey_asn1_meths(e, NULL, &nids, 0);
+        if (num_nids > 0)
+            return engine_table_register(&pkey_asn1_meth_table,
+                                         engine_unregister_all_pkey_asn1_meths,
+                                         e, nids, num_nids, 0);
+    }
+    return 1;
+}
+
+void ENGINE_register_all_pkey_asn1_meths(void)
+{
+    ENGINE *e;
+
+    for (e = ENGINE_get_first(); e; e = ENGINE_get_next(e))
+        ENGINE_register_pkey_asn1_meths(e);
+}
+
+int ENGINE_set_default_pkey_asn1_meths(ENGINE *e)
+{
+    if (e->pkey_asn1_meths) {
+        const int *nids;
+        int num_nids = e->pkey_asn1_meths(e, NULL, &nids, 0);
+        if (num_nids > 0)
+            return engine_table_register(&pkey_asn1_meth_table,
+                                         engine_unregister_all_pkey_asn1_meths,
+                                         e, nids, num_nids, 1);
+    }
+    return 1;
+}
+
+/*
+ * Exposed API function to get a functional reference from the implementation
+ * table (ie. try to get a functional reference from the tabled structural
+ * references) for a given pkey_asn1_meth 'nid'
+ */
+ENGINE *ENGINE_get_pkey_asn1_meth_engine(int nid)
+{
+    return engine_table_select(&pkey_asn1_meth_table, nid);
+}
+
+/*
+ * Obtains a pkey_asn1_meth implementation from an ENGINE functional
+ * reference
+ */
+const EVP_PKEY_ASN1_METHOD *ENGINE_get_pkey_asn1_meth(ENGINE *e, int nid)
+{
+    EVP_PKEY_ASN1_METHOD *ret;
+    ENGINE_PKEY_ASN1_METHS_PTR fn = ENGINE_get_pkey_asn1_meths(e);
+    if (!fn || !fn(e, &ret, NULL, nid)) {
+        ENGINEerr(ENGINE_F_ENGINE_GET_PKEY_ASN1_METH,
+                  ENGINE_R_UNIMPLEMENTED_PUBLIC_KEY_METHOD);
+        return NULL;
+    }
+    return ret;
+}
+
+/* Gets the pkey_asn1_meth callback from an ENGINE structure */
+ENGINE_PKEY_ASN1_METHS_PTR ENGINE_get_pkey_asn1_meths(const ENGINE *e)
+{
+    return e->pkey_asn1_meths;
+}
+
+/* Sets the pkey_asn1_meth callback in an ENGINE structure */
+int ENGINE_set_pkey_asn1_meths(ENGINE *e, ENGINE_PKEY_ASN1_METHS_PTR f)
+{
+    e->pkey_asn1_meths = f;
+    return 1;
+}
+
+/*
+ * Internal function to free up EVP_PKEY_ASN1_METHOD structures before an
+ * ENGINE is destroyed
+ */
+
+void engine_pkey_asn1_meths_free(ENGINE *e)
+{
+    int i;
+    EVP_PKEY_ASN1_METHOD *pkm;
+    if (e->pkey_asn1_meths) {
+        const int *pknids;
+        int npknids;
+        npknids = e->pkey_asn1_meths(e, NULL, &pknids, 0);
+        for (i = 0; i < npknids; i++) {
+            if (e->pkey_asn1_meths(e, &pkm, NULL, pknids[i])) {
+                EVP_PKEY_asn1_free(pkm);
+            }
+        }
+    }
+}
+
+/*
+ * Find a method based on a string. This does a linear search through all
+ * implemented algorithms. This is OK in practice because only a small number
+ * of algorithms are likely to be implemented in an engine and it is not used
+ * for speed critical operations.
+ */
+
+const EVP_PKEY_ASN1_METHOD *ENGINE_get_pkey_asn1_meth_str(ENGINE *e,
+                                                          const char *str,
+                                                          int len)
+{
+    int i, nidcount;
+    const int *nids;
+    EVP_PKEY_ASN1_METHOD *ameth;
+    if (!e->pkey_asn1_meths)
+        return NULL;
+    if (len == -1)
+        len = strlen(str);
+    nidcount = e->pkey_asn1_meths(e, NULL, &nids, 0);
+    for (i = 0; i < nidcount; i++) {
+        e->pkey_asn1_meths(e, &ameth, NULL, nids[i]);
+        if (((int)strlen(ameth->pem_str) == len)
+            && strncasecmp(ameth->pem_str, str, len) == 0)
+            return ameth;
+    }
+    return NULL;
+}
+
+typedef struct {
+    ENGINE *e;
+    const EVP_PKEY_ASN1_METHOD *ameth;
+    const char *str;
+    int len;
+} ENGINE_FIND_STR;
+
+static void look_str_cb(int nid, STACK_OF(ENGINE) *sk, ENGINE *def, void *arg)
+{
+    ENGINE_FIND_STR *lk = arg;
+    int i;
+    if (lk->ameth)
+        return;
+    for (i = 0; i < sk_ENGINE_num(sk); i++) {
+        ENGINE *e = sk_ENGINE_value(sk, i);
+        EVP_PKEY_ASN1_METHOD *ameth;
+        e->pkey_asn1_meths(e, &ameth, NULL, nid);
+        if (ameth != NULL
+                && ((int)strlen(ameth->pem_str) == lk->len)
+                && strncasecmp(ameth->pem_str, lk->str, lk->len) == 0) {
+            lk->e = e;
+            lk->ameth = ameth;
+            return;
+        }
+    }
+}
+
+const EVP_PKEY_ASN1_METHOD *ENGINE_pkey_asn1_find_str(ENGINE **pe,
+                                                      const char *str,
+                                                      int len)
+{
+    ENGINE_FIND_STR fstr;
+    fstr.e = NULL;
+    fstr.ameth = NULL;
+    fstr.str = str;
+    fstr.len = len;
+
+    if (!RUN_ONCE(&engine_lock_init, do_engine_lock_init)) {
+        ENGINEerr(ENGINE_F_ENGINE_PKEY_ASN1_FIND_STR, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    CRYPTO_THREAD_write_lock(global_engine_lock);
+    engine_table_doall(pkey_asn1_meth_table, look_str_cb, &fstr);
+    /* If found obtain a structural reference to engine */
+    if (fstr.e) {
+        fstr.e->struct_ref++;
+        engine_ref_debug(fstr.e, 0, 1);
+    }
+    *pe = fstr.e;
+    CRYPTO_THREAD_unlock(global_engine_lock);
+    return fstr.ameth;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_cipher.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_cipher.c
new file mode 100644
index 000000000..faa967c47
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_cipher.c
@@ -0,0 +1,91 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "eng_int.h"
+
+static ENGINE_TABLE *cipher_table = NULL;
+
+void ENGINE_unregister_ciphers(ENGINE *e)
+{
+    engine_table_unregister(&cipher_table, e);
+}
+
+static void engine_unregister_all_ciphers(void)
+{
+    engine_table_cleanup(&cipher_table);
+}
+
+int ENGINE_register_ciphers(ENGINE *e)
+{
+    if (e->ciphers) {
+        const int *nids;
+        int num_nids = e->ciphers(e, NULL, &nids, 0);
+        if (num_nids > 0)
+            return engine_table_register(&cipher_table,
+                                         engine_unregister_all_ciphers, e,
+                                         nids, num_nids, 0);
+    }
+    return 1;
+}
+
+void ENGINE_register_all_ciphers(void)
+{
+    ENGINE *e;
+
+    for (e = ENGINE_get_first(); e; e = ENGINE_get_next(e))
+        ENGINE_register_ciphers(e);
+}
+
+int ENGINE_set_default_ciphers(ENGINE *e)
+{
+    if (e->ciphers) {
+        const int *nids;
+        int num_nids = e->ciphers(e, NULL, &nids, 0);
+        if (num_nids > 0)
+            return engine_table_register(&cipher_table,
+                                         engine_unregister_all_ciphers, e,
+                                         nids, num_nids, 1);
+    }
+    return 1;
+}
+
+/*
+ * Exposed API function to get a functional reference from the implementation
+ * table (ie. try to get a functional reference from the tabled structural
+ * references) for a given cipher 'nid'
+ */
+ENGINE *ENGINE_get_cipher_engine(int nid)
+{
+    return engine_table_select(&cipher_table, nid);
+}
+
+/* Obtains a cipher implementation from an ENGINE functional reference */
+const EVP_CIPHER *ENGINE_get_cipher(ENGINE *e, int nid)
+{
+    const EVP_CIPHER *ret;
+    ENGINE_CIPHERS_PTR fn = ENGINE_get_ciphers(e);
+    if (!fn || !fn(e, &ret, NULL, nid)) {
+        ENGINEerr(ENGINE_F_ENGINE_GET_CIPHER, ENGINE_R_UNIMPLEMENTED_CIPHER);
+        return NULL;
+    }
+    return ret;
+}
+
+/* Gets the cipher callback from an ENGINE structure */
+ENGINE_CIPHERS_PTR ENGINE_get_ciphers(const ENGINE *e)
+{
+    return e->ciphers;
+}
+
+/* Sets the cipher callback in an ENGINE structure */
+int ENGINE_set_ciphers(ENGINE *e, ENGINE_CIPHERS_PTR f)
+{
+    e->ciphers = f;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_dh.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_dh.c
new file mode 100644
index 000000000..785119f65
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_dh.c
@@ -0,0 +1,72 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "eng_int.h"
+
+static ENGINE_TABLE *dh_table = NULL;
+static const int dummy_nid = 1;
+
+void ENGINE_unregister_DH(ENGINE *e)
+{
+    engine_table_unregister(&dh_table, e);
+}
+
+static void engine_unregister_all_DH(void)
+{
+    engine_table_cleanup(&dh_table);
+}
+
+int ENGINE_register_DH(ENGINE *e)
+{
+    if (e->dh_meth)
+        return engine_table_register(&dh_table,
+                                     engine_unregister_all_DH, e, &dummy_nid,
+                                     1, 0);
+    return 1;
+}
+
+void ENGINE_register_all_DH(void)
+{
+    ENGINE *e;
+
+    for (e = ENGINE_get_first(); e; e = ENGINE_get_next(e))
+        ENGINE_register_DH(e);
+}
+
+int ENGINE_set_default_DH(ENGINE *e)
+{
+    if (e->dh_meth)
+        return engine_table_register(&dh_table,
+                                     engine_unregister_all_DH, e, &dummy_nid,
+                                     1, 1);
+    return 1;
+}
+
+/*
+ * Exposed API function to get a functional reference from the implementation
+ * table (ie. try to get a functional reference from the tabled structural
+ * references).
+ */
+ENGINE *ENGINE_get_default_DH(void)
+{
+    return engine_table_select(&dh_table, dummy_nid);
+}
+
+/* Obtains an DH implementation from an ENGINE functional reference */
+const DH_METHOD *ENGINE_get_DH(const ENGINE *e)
+{
+    return e->dh_meth;
+}
+
+/* Sets an DH implementation in an ENGINE structure */
+int ENGINE_set_DH(ENGINE *e, const DH_METHOD *dh_meth)
+{
+    e->dh_meth = dh_meth;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_digest.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_digest.c
new file mode 100644
index 000000000..d644b1b0a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_digest.c
@@ -0,0 +1,91 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "eng_int.h"
+
+static ENGINE_TABLE *digest_table = NULL;
+
+void ENGINE_unregister_digests(ENGINE *e)
+{
+    engine_table_unregister(&digest_table, e);
+}
+
+static void engine_unregister_all_digests(void)
+{
+    engine_table_cleanup(&digest_table);
+}
+
+int ENGINE_register_digests(ENGINE *e)
+{
+    if (e->digests) {
+        const int *nids;
+        int num_nids = e->digests(e, NULL, &nids, 0);
+        if (num_nids > 0)
+            return engine_table_register(&digest_table,
+                                         engine_unregister_all_digests, e,
+                                         nids, num_nids, 0);
+    }
+    return 1;
+}
+
+void ENGINE_register_all_digests(void)
+{
+    ENGINE *e;
+
+    for (e = ENGINE_get_first(); e; e = ENGINE_get_next(e))
+        ENGINE_register_digests(e);
+}
+
+int ENGINE_set_default_digests(ENGINE *e)
+{
+    if (e->digests) {
+        const int *nids;
+        int num_nids = e->digests(e, NULL, &nids, 0);
+        if (num_nids > 0)
+            return engine_table_register(&digest_table,
+                                         engine_unregister_all_digests, e,
+                                         nids, num_nids, 1);
+    }
+    return 1;
+}
+
+/*
+ * Exposed API function to get a functional reference from the implementation
+ * table (ie. try to get a functional reference from the tabled structural
+ * references) for a given digest 'nid'
+ */
+ENGINE *ENGINE_get_digest_engine(int nid)
+{
+    return engine_table_select(&digest_table, nid);
+}
+
+/* Obtains a digest implementation from an ENGINE functional reference */
+const EVP_MD *ENGINE_get_digest(ENGINE *e, int nid)
+{
+    const EVP_MD *ret;
+    ENGINE_DIGESTS_PTR fn = ENGINE_get_digests(e);
+    if (!fn || !fn(e, &ret, NULL, nid)) {
+        ENGINEerr(ENGINE_F_ENGINE_GET_DIGEST, ENGINE_R_UNIMPLEMENTED_DIGEST);
+        return NULL;
+    }
+    return ret;
+}
+
+/* Gets the digest callback from an ENGINE structure */
+ENGINE_DIGESTS_PTR ENGINE_get_digests(const ENGINE *e)
+{
+    return e->digests;
+}
+
+/* Sets the digest callback in an ENGINE structure */
+int ENGINE_set_digests(ENGINE *e, ENGINE_DIGESTS_PTR f)
+{
+    e->digests = f;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_dsa.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_dsa.c
new file mode 100644
index 000000000..65b6ea8d3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_dsa.c
@@ -0,0 +1,72 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "eng_int.h"
+
+static ENGINE_TABLE *dsa_table = NULL;
+static const int dummy_nid = 1;
+
+void ENGINE_unregister_DSA(ENGINE *e)
+{
+    engine_table_unregister(&dsa_table, e);
+}
+
+static void engine_unregister_all_DSA(void)
+{
+    engine_table_cleanup(&dsa_table);
+}
+
+int ENGINE_register_DSA(ENGINE *e)
+{
+    if (e->dsa_meth)
+        return engine_table_register(&dsa_table,
+                                     engine_unregister_all_DSA, e, &dummy_nid,
+                                     1, 0);
+    return 1;
+}
+
+void ENGINE_register_all_DSA(void)
+{
+    ENGINE *e;
+
+    for (e = ENGINE_get_first(); e; e = ENGINE_get_next(e))
+        ENGINE_register_DSA(e);
+}
+
+int ENGINE_set_default_DSA(ENGINE *e)
+{
+    if (e->dsa_meth)
+        return engine_table_register(&dsa_table,
+                                     engine_unregister_all_DSA, e, &dummy_nid,
+                                     1, 1);
+    return 1;
+}
+
+/*
+ * Exposed API function to get a functional reference from the implementation
+ * table (ie. try to get a functional reference from the tabled structural
+ * references).
+ */
+ENGINE *ENGINE_get_default_DSA(void)
+{
+    return engine_table_select(&dsa_table, dummy_nid);
+}
+
+/* Obtains an DSA implementation from an ENGINE functional reference */
+const DSA_METHOD *ENGINE_get_DSA(const ENGINE *e)
+{
+    return e->dsa_meth;
+}
+
+/* Sets an DSA implementation in an ENGINE structure */
+int ENGINE_set_DSA(ENGINE *e, const DSA_METHOD *dsa_meth)
+{
+    e->dsa_meth = dsa_meth;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_eckey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_eckey.c
new file mode 100644
index 000000000..1e5073685
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_eckey.c
@@ -0,0 +1,72 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "eng_int.h"
+
+static ENGINE_TABLE *dh_table = NULL;
+static const int dummy_nid = 1;
+
+void ENGINE_unregister_EC(ENGINE *e)
+{
+    engine_table_unregister(&dh_table, e);
+}
+
+static void engine_unregister_all_EC(void)
+{
+    engine_table_cleanup(&dh_table);
+}
+
+int ENGINE_register_EC(ENGINE *e)
+{
+    if (e->ec_meth != NULL)
+        return engine_table_register(&dh_table,
+                                     engine_unregister_all_EC, e, &dummy_nid,
+                                     1, 0);
+    return 1;
+}
+
+void ENGINE_register_all_EC(void)
+{
+    ENGINE *e;
+
+    for (e = ENGINE_get_first(); e; e = ENGINE_get_next(e))
+        ENGINE_register_EC(e);
+}
+
+int ENGINE_set_default_EC(ENGINE *e)
+{
+    if (e->ec_meth != NULL)
+        return engine_table_register(&dh_table,
+                                     engine_unregister_all_EC, e, &dummy_nid,
+                                     1, 1);
+    return 1;
+}
+
+/*
+ * Exposed API function to get a functional reference from the implementation
+ * table (ie. try to get a functional reference from the tabled structural
+ * references).
+ */
+ENGINE *ENGINE_get_default_EC(void)
+{
+    return engine_table_select(&dh_table, dummy_nid);
+}
+
+/* Obtains an EC_KEY implementation from an ENGINE functional reference */
+const EC_KEY_METHOD *ENGINE_get_EC(const ENGINE *e)
+{
+    return e->ec_meth;
+}
+
+/* Sets an EC_KEY implementation in an ENGINE structure */
+int ENGINE_set_EC(ENGINE *e, const EC_KEY_METHOD *ec_meth)
+{
+    e->ec_meth = ec_meth;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_pkmeth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_pkmeth.c
new file mode 100644
index 000000000..03cd1e69d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_pkmeth.c
@@ -0,0 +1,114 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "eng_int.h"
+#include <openssl/evp.h>
+
+static ENGINE_TABLE *pkey_meth_table = NULL;
+
+void ENGINE_unregister_pkey_meths(ENGINE *e)
+{
+    engine_table_unregister(&pkey_meth_table, e);
+}
+
+static void engine_unregister_all_pkey_meths(void)
+{
+    engine_table_cleanup(&pkey_meth_table);
+}
+
+int ENGINE_register_pkey_meths(ENGINE *e)
+{
+    if (e->pkey_meths) {
+        const int *nids;
+        int num_nids = e->pkey_meths(e, NULL, &nids, 0);
+        if (num_nids > 0)
+            return engine_table_register(&pkey_meth_table,
+                                         engine_unregister_all_pkey_meths, e,
+                                         nids, num_nids, 0);
+    }
+    return 1;
+}
+
+void ENGINE_register_all_pkey_meths(void)
+{
+    ENGINE *e;
+
+    for (e = ENGINE_get_first(); e; e = ENGINE_get_next(e))
+        ENGINE_register_pkey_meths(e);
+}
+
+int ENGINE_set_default_pkey_meths(ENGINE *e)
+{
+    if (e->pkey_meths) {
+        const int *nids;
+        int num_nids = e->pkey_meths(e, NULL, &nids, 0);
+        if (num_nids > 0)
+            return engine_table_register(&pkey_meth_table,
+                                         engine_unregister_all_pkey_meths, e,
+                                         nids, num_nids, 1);
+    }
+    return 1;
+}
+
+/*
+ * Exposed API function to get a functional reference from the implementation
+ * table (ie. try to get a functional reference from the tabled structural
+ * references) for a given pkey_meth 'nid'
+ */
+ENGINE *ENGINE_get_pkey_meth_engine(int nid)
+{
+    return engine_table_select(&pkey_meth_table, nid);
+}
+
+/* Obtains a pkey_meth implementation from an ENGINE functional reference */
+const EVP_PKEY_METHOD *ENGINE_get_pkey_meth(ENGINE *e, int nid)
+{
+    EVP_PKEY_METHOD *ret;
+    ENGINE_PKEY_METHS_PTR fn = ENGINE_get_pkey_meths(e);
+    if (!fn || !fn(e, &ret, NULL, nid)) {
+        ENGINEerr(ENGINE_F_ENGINE_GET_PKEY_METH,
+                  ENGINE_R_UNIMPLEMENTED_PUBLIC_KEY_METHOD);
+        return NULL;
+    }
+    return ret;
+}
+
+/* Gets the pkey_meth callback from an ENGINE structure */
+ENGINE_PKEY_METHS_PTR ENGINE_get_pkey_meths(const ENGINE *e)
+{
+    return e->pkey_meths;
+}
+
+/* Sets the pkey_meth callback in an ENGINE structure */
+int ENGINE_set_pkey_meths(ENGINE *e, ENGINE_PKEY_METHS_PTR f)
+{
+    e->pkey_meths = f;
+    return 1;
+}
+
+/*
+ * Internal function to free up EVP_PKEY_METHOD structures before an ENGINE
+ * is destroyed
+ */
+
+void engine_pkey_meths_free(ENGINE *e)
+{
+    int i;
+    EVP_PKEY_METHOD *pkm;
+    if (e->pkey_meths) {
+        const int *pknids;
+        int npknids;
+        npknids = e->pkey_meths(e, NULL, &pknids, 0);
+        for (i = 0; i < npknids; i++) {
+            if (e->pkey_meths(e, &pkm, NULL, pknids[i])) {
+                EVP_PKEY_meth_free(pkm);
+            }
+        }
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_rand.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_rand.c
new file mode 100644
index 000000000..98a98073c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_rand.c
@@ -0,0 +1,72 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "eng_int.h"
+
+static ENGINE_TABLE *rand_table = NULL;
+static const int dummy_nid = 1;
+
+void ENGINE_unregister_RAND(ENGINE *e)
+{
+    engine_table_unregister(&rand_table, e);
+}
+
+static void engine_unregister_all_RAND(void)
+{
+    engine_table_cleanup(&rand_table);
+}
+
+int ENGINE_register_RAND(ENGINE *e)
+{
+    if (e->rand_meth)
+        return engine_table_register(&rand_table,
+                                     engine_unregister_all_RAND, e,
+                                     &dummy_nid, 1, 0);
+    return 1;
+}
+
+void ENGINE_register_all_RAND(void)
+{
+    ENGINE *e;
+
+    for (e = ENGINE_get_first(); e; e = ENGINE_get_next(e))
+        ENGINE_register_RAND(e);
+}
+
+int ENGINE_set_default_RAND(ENGINE *e)
+{
+    if (e->rand_meth)
+        return engine_table_register(&rand_table,
+                                     engine_unregister_all_RAND, e,
+                                     &dummy_nid, 1, 1);
+    return 1;
+}
+
+/*
+ * Exposed API function to get a functional reference from the implementation
+ * table (ie. try to get a functional reference from the tabled structural
+ * references).
+ */
+ENGINE *ENGINE_get_default_RAND(void)
+{
+    return engine_table_select(&rand_table, dummy_nid);
+}
+
+/* Obtains an RAND implementation from an ENGINE functional reference */
+const RAND_METHOD *ENGINE_get_RAND(const ENGINE *e)
+{
+    return e->rand_meth;
+}
+
+/* Sets an RAND implementation in an ENGINE structure */
+int ENGINE_set_RAND(ENGINE *e, const RAND_METHOD *rand_meth)
+{
+    e->rand_meth = rand_meth;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_rsa.c b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_rsa.c
new file mode 100644
index 000000000..d8d2e34f8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/engine/tb_rsa.c
@@ -0,0 +1,72 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "eng_int.h"
+
+static ENGINE_TABLE *rsa_table = NULL;
+static const int dummy_nid = 1;
+
+void ENGINE_unregister_RSA(ENGINE *e)
+{
+    engine_table_unregister(&rsa_table, e);
+}
+
+static void engine_unregister_all_RSA(void)
+{
+    engine_table_cleanup(&rsa_table);
+}
+
+int ENGINE_register_RSA(ENGINE *e)
+{
+    if (e->rsa_meth)
+        return engine_table_register(&rsa_table,
+                                     engine_unregister_all_RSA, e, &dummy_nid,
+                                     1, 0);
+    return 1;
+}
+
+void ENGINE_register_all_RSA(void)
+{
+    ENGINE *e;
+
+    for (e = ENGINE_get_first(); e; e = ENGINE_get_next(e))
+        ENGINE_register_RSA(e);
+}
+
+int ENGINE_set_default_RSA(ENGINE *e)
+{
+    if (e->rsa_meth)
+        return engine_table_register(&rsa_table,
+                                     engine_unregister_all_RSA, e, &dummy_nid,
+                                     1, 1);
+    return 1;
+}
+
+/*
+ * Exposed API function to get a functional reference from the implementation
+ * table (ie. try to get a functional reference from the tabled structural
+ * references).
+ */
+ENGINE *ENGINE_get_default_RSA(void)
+{
+    return engine_table_select(&rsa_table, dummy_nid);
+}
+
+/* Obtains an RSA implementation from an ENGINE functional reference */
+const RSA_METHOD *ENGINE_get_RSA(const ENGINE *e)
+{
+    return e->rsa_meth;
+}
+
+/* Sets an RSA implementation in an ENGINE structure */
+int ENGINE_set_RSA(ENGINE *e, const RSA_METHOD *rsa_meth)
+{
+    e->rsa_meth = rsa_meth;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/err/README b/trunk/3rdparty/openssl-1.1-fit/crypto/err/README
new file mode 100644
index 000000000..6d2ce0cd0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/err/README
@@ -0,0 +1,44 @@
+Adding new libraries
+--------------------
+
+When adding a new sub-library to OpenSSL, assign it a library number
+ERR_LIB_XXX, define a macro XXXerr() (both in err.h), add its
+name to ERR_str_libraries[] (in crypto/err/err.c), and add
+ERR_load_XXX_strings() to the ERR_load_crypto_strings() function
+(in crypto/err/err_all.c). Finally, add an entry:
+
+    L      XXX     xxx.h   xxx_err.c
+
+to crypto/err/openssl.ec, and add xxx_err.c to the Makefile.
+Running make errors will then generate a file xxx_err.c, and
+add all error codes used in the library to xxx.h.
+
+Additionally the library include file must have a certain form.
+Typically it will initially look like this:
+
+    #ifndef HEADER_XXX_H
+    #define HEADER_XXX_H
+
+    #ifdef __cplusplus
+    extern "C" {
+    #endif
+
+    /* Include files */
+
+    #include <openssl/bio.h>
+    #include <openssl/x509.h>
+
+    /* Macros, structures and function prototypes */
+
+
+    /* BEGIN ERROR CODES */
+
+The BEGIN ERROR CODES sequence is used by the error code
+generation script as the point to place new error codes, any text
+after this point will be overwritten when make errors is run.
+The closing #endif etc will be automatically added by the script.
+
+The generated C error code file xxx_err.c will load the header
+files stdio.h, openssl/err.h and openssl/xxx.h so the
+header file must load any additional header files containing any
+definitions it uses.
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/err/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/err/build.info
new file mode 100644
index 000000000..6163d95b7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/err/build.info
@@ -0,0 +1,3 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        err.c err_all.c err_prn.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/err/err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/err/err.c
new file mode 100644
index 000000000..c737b2a9c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/err/err.c
@@ -0,0 +1,953 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdarg.h>
+#include <string.h>
+#include "internal/cryptlib_int.h"
+#include "internal/err.h"
+#include "internal/err_int.h"
+#include <openssl/err.h>
+#include <openssl/crypto.h>
+#include <openssl/buffer.h>
+#include <openssl/bio.h>
+#include <openssl/opensslconf.h>
+#include "internal/thread_once.h"
+#include "internal/ctype.h"
+#include "internal/constant_time_locl.h"
+#include "e_os.h"
+
+static int err_load_strings(const ERR_STRING_DATA *str);
+
+static void ERR_STATE_free(ERR_STATE *s);
+#ifndef OPENSSL_NO_ERR
+static ERR_STRING_DATA ERR_str_libraries[] = {
+    {ERR_PACK(ERR_LIB_NONE, 0, 0), "unknown library"},
+    {ERR_PACK(ERR_LIB_SYS, 0, 0), "system library"},
+    {ERR_PACK(ERR_LIB_BN, 0, 0), "bignum routines"},
+    {ERR_PACK(ERR_LIB_RSA, 0, 0), "rsa routines"},
+    {ERR_PACK(ERR_LIB_DH, 0, 0), "Diffie-Hellman routines"},
+    {ERR_PACK(ERR_LIB_EVP, 0, 0), "digital envelope routines"},
+    {ERR_PACK(ERR_LIB_BUF, 0, 0), "memory buffer routines"},
+    {ERR_PACK(ERR_LIB_OBJ, 0, 0), "object identifier routines"},
+    {ERR_PACK(ERR_LIB_PEM, 0, 0), "PEM routines"},
+    {ERR_PACK(ERR_LIB_DSA, 0, 0), "dsa routines"},
+    {ERR_PACK(ERR_LIB_X509, 0, 0), "x509 certificate routines"},
+    {ERR_PACK(ERR_LIB_ASN1, 0, 0), "asn1 encoding routines"},
+    {ERR_PACK(ERR_LIB_CONF, 0, 0), "configuration file routines"},
+    {ERR_PACK(ERR_LIB_CRYPTO, 0, 0), "common libcrypto routines"},
+    {ERR_PACK(ERR_LIB_EC, 0, 0), "elliptic curve routines"},
+    {ERR_PACK(ERR_LIB_ECDSA, 0, 0), "ECDSA routines"},
+    {ERR_PACK(ERR_LIB_ECDH, 0, 0), "ECDH routines"},
+    {ERR_PACK(ERR_LIB_SSL, 0, 0), "SSL routines"},
+    {ERR_PACK(ERR_LIB_BIO, 0, 0), "BIO routines"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, 0), "PKCS7 routines"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, 0), "X509 V3 routines"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, 0), "PKCS12 routines"},
+    {ERR_PACK(ERR_LIB_RAND, 0, 0), "random number generator"},
+    {ERR_PACK(ERR_LIB_DSO, 0, 0), "DSO support routines"},
+    {ERR_PACK(ERR_LIB_TS, 0, 0), "time stamp routines"},
+    {ERR_PACK(ERR_LIB_ENGINE, 0, 0), "engine routines"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, 0), "OCSP routines"},
+    {ERR_PACK(ERR_LIB_UI, 0, 0), "UI routines"},
+    {ERR_PACK(ERR_LIB_FIPS, 0, 0), "FIPS routines"},
+    {ERR_PACK(ERR_LIB_CMS, 0, 0), "CMS routines"},
+    {ERR_PACK(ERR_LIB_HMAC, 0, 0), "HMAC routines"},
+    {ERR_PACK(ERR_LIB_CT, 0, 0), "CT routines"},
+    {ERR_PACK(ERR_LIB_ASYNC, 0, 0), "ASYNC routines"},
+    {ERR_PACK(ERR_LIB_KDF, 0, 0), "KDF routines"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, 0), "STORE routines"},
+    {ERR_PACK(ERR_LIB_SM2, 0, 0), "SM2 routines"},
+    {0, NULL},
+};
+
+static ERR_STRING_DATA ERR_str_functs[] = {
+    {ERR_PACK(0, SYS_F_FOPEN, 0), "fopen"},
+    {ERR_PACK(0, SYS_F_CONNECT, 0), "connect"},
+    {ERR_PACK(0, SYS_F_GETSERVBYNAME, 0), "getservbyname"},
+    {ERR_PACK(0, SYS_F_SOCKET, 0), "socket"},
+    {ERR_PACK(0, SYS_F_IOCTLSOCKET, 0), "ioctlsocket"},
+    {ERR_PACK(0, SYS_F_BIND, 0), "bind"},
+    {ERR_PACK(0, SYS_F_LISTEN, 0), "listen"},
+    {ERR_PACK(0, SYS_F_ACCEPT, 0), "accept"},
+# ifdef OPENSSL_SYS_WINDOWS
+    {ERR_PACK(0, SYS_F_WSASTARTUP, 0), "WSAstartup"},
+# endif
+    {ERR_PACK(0, SYS_F_OPENDIR, 0), "opendir"},
+    {ERR_PACK(0, SYS_F_FREAD, 0), "fread"},
+    {ERR_PACK(0, SYS_F_GETADDRINFO, 0), "getaddrinfo"},
+    {ERR_PACK(0, SYS_F_GETNAMEINFO, 0), "getnameinfo"},
+    {ERR_PACK(0, SYS_F_SETSOCKOPT, 0), "setsockopt"},
+    {ERR_PACK(0, SYS_F_GETSOCKOPT, 0), "getsockopt"},
+    {ERR_PACK(0, SYS_F_GETSOCKNAME, 0), "getsockname"},
+    {ERR_PACK(0, SYS_F_GETHOSTBYNAME, 0), "gethostbyname"},
+    {ERR_PACK(0, SYS_F_FFLUSH, 0), "fflush"},
+    {ERR_PACK(0, SYS_F_OPEN, 0), "open"},
+    {ERR_PACK(0, SYS_F_CLOSE, 0), "close"},
+    {ERR_PACK(0, SYS_F_IOCTL, 0), "ioctl"},
+    {ERR_PACK(0, SYS_F_STAT, 0), "stat"},
+    {ERR_PACK(0, SYS_F_FCNTL, 0), "fcntl"},
+    {ERR_PACK(0, SYS_F_FSTAT, 0), "fstat"},
+    {0, NULL},
+};
+
+static ERR_STRING_DATA ERR_str_reasons[] = {
+    {ERR_R_SYS_LIB, "system lib"},
+    {ERR_R_BN_LIB, "BN lib"},
+    {ERR_R_RSA_LIB, "RSA lib"},
+    {ERR_R_DH_LIB, "DH lib"},
+    {ERR_R_EVP_LIB, "EVP lib"},
+    {ERR_R_BUF_LIB, "BUF lib"},
+    {ERR_R_OBJ_LIB, "OBJ lib"},
+    {ERR_R_PEM_LIB, "PEM lib"},
+    {ERR_R_DSA_LIB, "DSA lib"},
+    {ERR_R_X509_LIB, "X509 lib"},
+    {ERR_R_ASN1_LIB, "ASN1 lib"},
+    {ERR_R_EC_LIB, "EC lib"},
+    {ERR_R_BIO_LIB, "BIO lib"},
+    {ERR_R_PKCS7_LIB, "PKCS7 lib"},
+    {ERR_R_X509V3_LIB, "X509V3 lib"},
+    {ERR_R_ENGINE_LIB, "ENGINE lib"},
+    {ERR_R_UI_LIB, "UI lib"},
+    {ERR_R_OSSL_STORE_LIB, "STORE lib"},
+    {ERR_R_ECDSA_LIB, "ECDSA lib"},
+
+    {ERR_R_NESTED_ASN1_ERROR, "nested asn1 error"},
+    {ERR_R_MISSING_ASN1_EOS, "missing asn1 eos"},
+
+    {ERR_R_FATAL, "fatal"},
+    {ERR_R_MALLOC_FAILURE, "malloc failure"},
+    {ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED,
+     "called a function you should not call"},
+    {ERR_R_PASSED_NULL_PARAMETER, "passed a null parameter"},
+    {ERR_R_INTERNAL_ERROR, "internal error"},
+    {ERR_R_DISABLED, "called a function that was disabled at compile-time"},
+    {ERR_R_INIT_FAIL, "init fail"},
+    {ERR_R_OPERATION_FAIL, "operation fail"},
+
+    {0, NULL},
+};
+#endif
+
+static CRYPTO_ONCE err_init = CRYPTO_ONCE_STATIC_INIT;
+static int set_err_thread_local;
+static CRYPTO_THREAD_LOCAL err_thread_local;
+
+static CRYPTO_ONCE err_string_init = CRYPTO_ONCE_STATIC_INIT;
+static CRYPTO_RWLOCK *err_string_lock;
+
+static ERR_STRING_DATA *int_err_get_item(const ERR_STRING_DATA *);
+
+/*
+ * The internal state
+ */
+
+static LHASH_OF(ERR_STRING_DATA) *int_error_hash = NULL;
+static int int_err_library_number = ERR_LIB_USER;
+
+static unsigned long get_error_values(int inc, int top, const char **file,
+                                      int *line, const char **data,
+                                      int *flags);
+
+static unsigned long err_string_data_hash(const ERR_STRING_DATA *a)
+{
+    unsigned long ret, l;
+
+    l = a->error;
+    ret = l ^ ERR_GET_LIB(l) ^ ERR_GET_FUNC(l);
+    return (ret ^ ret % 19 * 13);
+}
+
+static int err_string_data_cmp(const ERR_STRING_DATA *a,
+                               const ERR_STRING_DATA *b)
+{
+    if (a->error == b->error)
+        return 0;
+    return a->error > b->error ? 1 : -1;
+}
+
+static ERR_STRING_DATA *int_err_get_item(const ERR_STRING_DATA *d)
+{
+    ERR_STRING_DATA *p = NULL;
+
+    CRYPTO_THREAD_read_lock(err_string_lock);
+    p = lh_ERR_STRING_DATA_retrieve(int_error_hash, d);
+    CRYPTO_THREAD_unlock(err_string_lock);
+
+    return p;
+}
+
+#ifndef OPENSSL_NO_ERR
+/* A measurement on Linux 2018-11-21 showed about 3.5kib */
+# define SPACE_SYS_STR_REASONS 4 * 1024
+# define NUM_SYS_STR_REASONS 127
+
+static ERR_STRING_DATA SYS_str_reasons[NUM_SYS_STR_REASONS + 1];
+/*
+ * SYS_str_reasons is filled with copies of strerror() results at
+ * initialization. 'errno' values up to 127 should cover all usual errors,
+ * others will be displayed numerically by ERR_error_string. It is crucial
+ * that we have something for each reason code that occurs in
+ * ERR_str_reasons, or bogus reason strings will be returned for SYSerr(),
+ * which always gets an errno value and never one of those 'standard' reason
+ * codes.
+ */
+
+static void build_SYS_str_reasons(void)
+{
+    /* OPENSSL_malloc cannot be used here, use static storage instead */
+    static char strerror_pool[SPACE_SYS_STR_REASONS];
+    char *cur = strerror_pool;
+    size_t cnt = 0;
+    static int init = 1;
+    int i;
+    int saveerrno = get_last_sys_error();
+
+    CRYPTO_THREAD_write_lock(err_string_lock);
+    if (!init) {
+        CRYPTO_THREAD_unlock(err_string_lock);
+        return;
+    }
+
+    for (i = 1; i <= NUM_SYS_STR_REASONS; i++) {
+        ERR_STRING_DATA *str = &SYS_str_reasons[i - 1];
+
+        str->error = ERR_PACK(ERR_LIB_SYS, 0, i);
+        if (str->string == NULL) {
+            if (openssl_strerror_r(i, cur, sizeof(strerror_pool) - cnt)) {
+                size_t l = strlen(cur);
+
+                str->string = cur;
+                cnt += l;
+                if (cnt > sizeof(strerror_pool))
+                    cnt = sizeof(strerror_pool);
+                cur += l;
+
+                /*
+                 * VMS has an unusual quirk of adding spaces at the end of
+                 * some (most? all?) messages.  Lets trim them off.
+                 */
+                while (ossl_isspace(cur[-1])) {
+                    cur--;
+                    cnt--;
+                }
+                *cur++ = '\0';
+                cnt++;
+            }
+        }
+        if (str->string == NULL)
+            str->string = "unknown";
+    }
+
+    /*
+     * Now we still have SYS_str_reasons[NUM_SYS_STR_REASONS] = {0, NULL}, as
+     * required by ERR_load_strings.
+     */
+
+    init = 0;
+
+    CRYPTO_THREAD_unlock(err_string_lock);
+    /* openssl_strerror_r could change errno, but we want to preserve it */
+    set_sys_error(saveerrno);
+    err_load_strings(SYS_str_reasons);
+}
+#endif
+
+#define err_clear_data(p, i) \
+        do { \
+            if ((p)->err_data_flags[i] & ERR_TXT_MALLOCED) {\
+                OPENSSL_free((p)->err_data[i]); \
+                (p)->err_data[i] = NULL; \
+            } \
+            (p)->err_data_flags[i] = 0; \
+        } while (0)
+
+#define err_clear(p, i) \
+        do { \
+            err_clear_data(p, i); \
+            (p)->err_flags[i] = 0; \
+            (p)->err_buffer[i] = 0; \
+            (p)->err_file[i] = NULL; \
+            (p)->err_line[i] = -1; \
+        } while (0)
+
+static void ERR_STATE_free(ERR_STATE *s)
+{
+    int i;
+
+    if (s == NULL)
+        return;
+    for (i = 0; i < ERR_NUM_ERRORS; i++) {
+        err_clear_data(s, i);
+    }
+    OPENSSL_free(s);
+}
+
+DEFINE_RUN_ONCE_STATIC(do_err_strings_init)
+{
+    if (!OPENSSL_init_crypto(0, NULL))
+        return 0;
+    err_string_lock = CRYPTO_THREAD_lock_new();
+    if (err_string_lock == NULL)
+        return 0;
+    int_error_hash = lh_ERR_STRING_DATA_new(err_string_data_hash,
+                                            err_string_data_cmp);
+    if (int_error_hash == NULL) {
+        CRYPTO_THREAD_lock_free(err_string_lock);
+        err_string_lock = NULL;
+        return 0;
+    }
+    return 1;
+}
+
+void err_cleanup(void)
+{
+    if (set_err_thread_local != 0)
+        CRYPTO_THREAD_cleanup_local(&err_thread_local);
+    CRYPTO_THREAD_lock_free(err_string_lock);
+    err_string_lock = NULL;
+    lh_ERR_STRING_DATA_free(int_error_hash);
+    int_error_hash = NULL;
+}
+
+/*
+ * Legacy; pack in the library.
+ */
+static void err_patch(int lib, ERR_STRING_DATA *str)
+{
+    unsigned long plib = ERR_PACK(lib, 0, 0);
+
+    for (; str->error != 0; str++)
+        str->error |= plib;
+}
+
+/*
+ * Hash in |str| error strings. Assumes the URN_ONCE was done.
+ */
+static int err_load_strings(const ERR_STRING_DATA *str)
+{
+    CRYPTO_THREAD_write_lock(err_string_lock);
+    for (; str->error; str++)
+        (void)lh_ERR_STRING_DATA_insert(int_error_hash,
+                                       (ERR_STRING_DATA *)str);
+    CRYPTO_THREAD_unlock(err_string_lock);
+    return 1;
+}
+
+int ERR_load_ERR_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (!RUN_ONCE(&err_string_init, do_err_strings_init))
+        return 0;
+
+    err_load_strings(ERR_str_libraries);
+    err_load_strings(ERR_str_reasons);
+    err_patch(ERR_LIB_SYS, ERR_str_functs);
+    err_load_strings(ERR_str_functs);
+    build_SYS_str_reasons();
+#endif
+    return 1;
+}
+
+int ERR_load_strings(int lib, ERR_STRING_DATA *str)
+{
+    if (ERR_load_ERR_strings() == 0)
+        return 0;
+
+    err_patch(lib, str);
+    err_load_strings(str);
+    return 1;
+}
+
+int ERR_load_strings_const(const ERR_STRING_DATA *str)
+{
+    if (ERR_load_ERR_strings() == 0)
+        return 0;
+    err_load_strings(str);
+    return 1;
+}
+
+int ERR_unload_strings(int lib, ERR_STRING_DATA *str)
+{
+    if (!RUN_ONCE(&err_string_init, do_err_strings_init))
+        return 0;
+
+    CRYPTO_THREAD_write_lock(err_string_lock);
+    /*
+     * We don't need to ERR_PACK the lib, since that was done (to
+     * the table) when it was loaded.
+     */
+    for (; str->error; str++)
+        (void)lh_ERR_STRING_DATA_delete(int_error_hash, str);
+    CRYPTO_THREAD_unlock(err_string_lock);
+
+    return 1;
+}
+
+void err_free_strings_int(void)
+{
+    if (!RUN_ONCE(&err_string_init, do_err_strings_init))
+        return;
+}
+
+/********************************************************/
+
+void ERR_put_error(int lib, int func, int reason, const char *file, int line)
+{
+    ERR_STATE *es;
+
+#ifdef _OSD_POSIX
+    /*
+     * In the BS2000-OSD POSIX subsystem, the compiler generates path names
+     * in the form "*POSIX(/etc/passwd)". This dirty hack strips them to
+     * something sensible. @@@ We shouldn't modify a const string, though.
+     */
+    if (strncmp(file, "*POSIX(", sizeof("*POSIX(") - 1) == 0) {
+        char *end;
+
+        /* Skip the "*POSIX(" prefix */
+        file += sizeof("*POSIX(") - 1;
+        end = &file[strlen(file) - 1];
+        if (*end == ')')
+            *end = '\0';
+        /* Optional: use the basename of the path only. */
+        if ((end = strrchr(file, '/')) != NULL)
+            file = &end[1];
+    }
+#endif
+    es = ERR_get_state();
+    if (es == NULL)
+        return;
+
+    es->top = (es->top + 1) % ERR_NUM_ERRORS;
+    if (es->top == es->bottom)
+        es->bottom = (es->bottom + 1) % ERR_NUM_ERRORS;
+    es->err_flags[es->top] = 0;
+    es->err_buffer[es->top] = ERR_PACK(lib, func, reason);
+    es->err_file[es->top] = file;
+    es->err_line[es->top] = line;
+    err_clear_data(es, es->top);
+}
+
+void ERR_clear_error(void)
+{
+    int i;
+    ERR_STATE *es;
+
+    es = ERR_get_state();
+    if (es == NULL)
+        return;
+
+    for (i = 0; i < ERR_NUM_ERRORS; i++) {
+        err_clear(es, i);
+    }
+    es->top = es->bottom = 0;
+}
+
+unsigned long ERR_get_error(void)
+{
+    return get_error_values(1, 0, NULL, NULL, NULL, NULL);
+}
+
+unsigned long ERR_get_error_line(const char **file, int *line)
+{
+    return get_error_values(1, 0, file, line, NULL, NULL);
+}
+
+unsigned long ERR_get_error_line_data(const char **file, int *line,
+                                      const char **data, int *flags)
+{
+    return get_error_values(1, 0, file, line, data, flags);
+}
+
+unsigned long ERR_peek_error(void)
+{
+    return get_error_values(0, 0, NULL, NULL, NULL, NULL);
+}
+
+unsigned long ERR_peek_error_line(const char **file, int *line)
+{
+    return get_error_values(0, 0, file, line, NULL, NULL);
+}
+
+unsigned long ERR_peek_error_line_data(const char **file, int *line,
+                                       const char **data, int *flags)
+{
+    return get_error_values(0, 0, file, line, data, flags);
+}
+
+unsigned long ERR_peek_last_error(void)
+{
+    return get_error_values(0, 1, NULL, NULL, NULL, NULL);
+}
+
+unsigned long ERR_peek_last_error_line(const char **file, int *line)
+{
+    return get_error_values(0, 1, file, line, NULL, NULL);
+}
+
+unsigned long ERR_peek_last_error_line_data(const char **file, int *line,
+                                            const char **data, int *flags)
+{
+    return get_error_values(0, 1, file, line, data, flags);
+}
+
+static unsigned long get_error_values(int inc, int top, const char **file,
+                                      int *line, const char **data,
+                                      int *flags)
+{
+    int i = 0;
+    ERR_STATE *es;
+    unsigned long ret;
+
+    es = ERR_get_state();
+    if (es == NULL)
+        return 0;
+
+    if (inc && top) {
+        if (file)
+            *file = "";
+        if (line)
+            *line = 0;
+        if (data)
+            *data = "";
+        if (flags)
+            *flags = 0;
+
+        return ERR_R_INTERNAL_ERROR;
+    }
+
+    if (es->bottom == es->top)
+        return 0;
+    if (top)
+        i = es->top;            /* last error */
+    else
+        i = (es->bottom + 1) % ERR_NUM_ERRORS; /* first error */
+
+    ret = es->err_buffer[i];
+    if (inc) {
+        es->bottom = i;
+        es->err_buffer[i] = 0;
+    }
+
+    if (file != NULL && line != NULL) {
+        if (es->err_file[i] == NULL) {
+            *file = "NA";
+            *line = 0;
+        } else {
+            *file = es->err_file[i];
+            *line = es->err_line[i];
+        }
+    }
+
+    if (data == NULL) {
+        if (inc) {
+            err_clear_data(es, i);
+        }
+    } else {
+        if (es->err_data[i] == NULL) {
+            *data = "";
+            if (flags != NULL)
+                *flags = 0;
+        } else {
+            *data = es->err_data[i];
+            if (flags != NULL)
+                *flags = es->err_data_flags[i];
+        }
+    }
+    return ret;
+}
+
+void ERR_error_string_n(unsigned long e, char *buf, size_t len)
+{
+    char lsbuf[64], fsbuf[64], rsbuf[64];
+    const char *ls, *fs, *rs;
+    unsigned long l, f, r;
+
+    if (len == 0)
+        return;
+
+    l = ERR_GET_LIB(e);
+    ls = ERR_lib_error_string(e);
+    if (ls == NULL) {
+        BIO_snprintf(lsbuf, sizeof(lsbuf), "lib(%lu)", l);
+        ls = lsbuf;
+    }
+
+    fs = ERR_func_error_string(e);
+    f = ERR_GET_FUNC(e);
+    if (fs == NULL) {
+        BIO_snprintf(fsbuf, sizeof(fsbuf), "func(%lu)", f);
+        fs = fsbuf;
+    }
+
+    rs = ERR_reason_error_string(e);
+    r = ERR_GET_REASON(e);
+    if (rs == NULL) {
+        BIO_snprintf(rsbuf, sizeof(rsbuf), "reason(%lu)", r);
+        rs = rsbuf;
+    }
+
+    BIO_snprintf(buf, len, "error:%08lX:%s:%s:%s", e, ls, fs, rs);
+    if (strlen(buf) == len - 1) {
+        /* Didn't fit; use a minimal format. */
+        BIO_snprintf(buf, len, "err:%lx:%lx:%lx:%lx", e, l, f, r);
+    }
+}
+
+/*
+ * ERR_error_string_n should be used instead for ret != NULL as
+ * ERR_error_string cannot know how large the buffer is
+ */
+char *ERR_error_string(unsigned long e, char *ret)
+{
+    static char buf[256];
+
+    if (ret == NULL)
+        ret = buf;
+    ERR_error_string_n(e, ret, (int)sizeof(buf));
+    return ret;
+}
+
+const char *ERR_lib_error_string(unsigned long e)
+{
+    ERR_STRING_DATA d, *p;
+    unsigned long l;
+
+    if (!RUN_ONCE(&err_string_init, do_err_strings_init)) {
+        return NULL;
+    }
+
+    l = ERR_GET_LIB(e);
+    d.error = ERR_PACK(l, 0, 0);
+    p = int_err_get_item(&d);
+    return ((p == NULL) ? NULL : p->string);
+}
+
+const char *ERR_func_error_string(unsigned long e)
+{
+    ERR_STRING_DATA d, *p;
+    unsigned long l, f;
+
+    if (!RUN_ONCE(&err_string_init, do_err_strings_init)) {
+        return NULL;
+    }
+
+    l = ERR_GET_LIB(e);
+    f = ERR_GET_FUNC(e);
+    d.error = ERR_PACK(l, f, 0);
+    p = int_err_get_item(&d);
+    return ((p == NULL) ? NULL : p->string);
+}
+
+const char *ERR_reason_error_string(unsigned long e)
+{
+    ERR_STRING_DATA d, *p = NULL;
+    unsigned long l, r;
+
+    if (!RUN_ONCE(&err_string_init, do_err_strings_init)) {
+        return NULL;
+    }
+
+    l = ERR_GET_LIB(e);
+    r = ERR_GET_REASON(e);
+    d.error = ERR_PACK(l, 0, r);
+    p = int_err_get_item(&d);
+    if (!p) {
+        d.error = ERR_PACK(0, 0, r);
+        p = int_err_get_item(&d);
+    }
+    return ((p == NULL) ? NULL : p->string);
+}
+
+void err_delete_thread_state(void)
+{
+    ERR_STATE *state = CRYPTO_THREAD_get_local(&err_thread_local);
+    if (state == NULL)
+        return;
+
+    CRYPTO_THREAD_set_local(&err_thread_local, NULL);
+    ERR_STATE_free(state);
+}
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+void ERR_remove_thread_state(void *dummy)
+{
+}
+#endif
+
+#if OPENSSL_API_COMPAT < 0x10000000L
+void ERR_remove_state(unsigned long pid)
+{
+}
+#endif
+
+DEFINE_RUN_ONCE_STATIC(err_do_init)
+{
+    set_err_thread_local = 1;
+    return CRYPTO_THREAD_init_local(&err_thread_local, NULL);
+}
+
+ERR_STATE *ERR_get_state(void)
+{
+    ERR_STATE *state;
+    int saveerrno = get_last_sys_error();
+
+    if (!OPENSSL_init_crypto(OPENSSL_INIT_BASE_ONLY, NULL))
+        return NULL;
+
+    if (!RUN_ONCE(&err_init, err_do_init))
+        return NULL;
+
+    state = CRYPTO_THREAD_get_local(&err_thread_local);
+    if (state == (ERR_STATE*)-1)
+        return NULL;
+
+    if (state == NULL) {
+        if (!CRYPTO_THREAD_set_local(&err_thread_local, (ERR_STATE*)-1))
+            return NULL;
+
+        if ((state = OPENSSL_zalloc(sizeof(*state))) == NULL) {
+            CRYPTO_THREAD_set_local(&err_thread_local, NULL);
+            return NULL;
+        }
+
+        if (!ossl_init_thread_start(OPENSSL_INIT_THREAD_ERR_STATE)
+                || !CRYPTO_THREAD_set_local(&err_thread_local, state)) {
+            ERR_STATE_free(state);
+            CRYPTO_THREAD_set_local(&err_thread_local, NULL);
+            return NULL;
+        }
+
+        /* Ignore failures from these */
+        OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL);
+    }
+
+    set_sys_error(saveerrno);
+    return state;
+}
+
+/*
+ * err_shelve_state returns the current thread local error state
+ * and freezes the error module until err_unshelve_state is called.
+ */
+int err_shelve_state(void **state)
+{
+    int saveerrno = get_last_sys_error();
+
+    /*
+     * Note, at present our only caller is OPENSSL_init_crypto(), indirectly
+     * via ossl_init_load_crypto_nodelete(), by which point the requested
+     * "base" initialization has already been performed, so the below call is a
+     * NOOP, that re-enters OPENSSL_init_crypto() only to quickly return.
+     *
+     * If are no other valid callers of this function, the call below can be
+     * removed, avoiding the re-entry into OPENSSL_init_crypto().  If there are
+     * potential uses that are not from inside OPENSSL_init_crypto(), then this
+     * call is needed, but some care is required to make sure that the re-entry
+     * remains a NOOP.
+     */
+    if (!OPENSSL_init_crypto(OPENSSL_INIT_BASE_ONLY, NULL))
+        return 0;
+
+    if (!RUN_ONCE(&err_init, err_do_init))
+        return 0;
+
+    *state = CRYPTO_THREAD_get_local(&err_thread_local);
+    if (!CRYPTO_THREAD_set_local(&err_thread_local, (ERR_STATE*)-1))
+        return 0;
+
+    set_sys_error(saveerrno);
+    return 1;
+}
+
+/*
+ * err_unshelve_state restores the error state that was returned
+ * by err_shelve_state previously.
+ */
+void err_unshelve_state(void* state)
+{
+    if (state != (void*)-1)
+        CRYPTO_THREAD_set_local(&err_thread_local, (ERR_STATE*)state);
+}
+
+int ERR_get_next_error_library(void)
+{
+    int ret;
+
+    if (!RUN_ONCE(&err_string_init, do_err_strings_init))
+        return 0;
+
+    CRYPTO_THREAD_write_lock(err_string_lock);
+    ret = int_err_library_number++;
+    CRYPTO_THREAD_unlock(err_string_lock);
+    return ret;
+}
+
+static int err_set_error_data_int(char *data, int flags)
+{
+    ERR_STATE *es;
+    int i;
+
+    es = ERR_get_state();
+    if (es == NULL)
+        return 0;
+
+    i = es->top;
+
+    err_clear_data(es, i);
+    es->err_data[i] = data;
+    es->err_data_flags[i] = flags;
+
+    return 1;
+}
+
+void ERR_set_error_data(char *data, int flags)
+{
+    /*
+     * This function is void so we cannot propagate the error return. Since it
+     * is also in the public API we can't change the return type.
+     */
+    err_set_error_data_int(data, flags);
+}
+
+void ERR_add_error_data(int num, ...)
+{
+    va_list args;
+    va_start(args, num);
+    ERR_add_error_vdata(num, args);
+    va_end(args);
+}
+
+void ERR_add_error_vdata(int num, va_list args)
+{
+    int i, n, s;
+    char *str, *p, *a;
+
+    s = 80;
+    if ((str = OPENSSL_malloc(s + 1)) == NULL) {
+        /* ERRerr(ERR_F_ERR_ADD_ERROR_VDATA, ERR_R_MALLOC_FAILURE); */
+        return;
+    }
+    str[0] = '\0';
+
+    n = 0;
+    for (i = 0; i < num; i++) {
+        a = va_arg(args, char *);
+        if (a == NULL)
+            a = "<NULL>";
+        n += strlen(a);
+        if (n > s) {
+            s = n + 20;
+            p = OPENSSL_realloc(str, s + 1);
+            if (p == NULL) {
+                OPENSSL_free(str);
+                return;
+            }
+            str = p;
+        }
+        OPENSSL_strlcat(str, a, (size_t)s + 1);
+    }
+    if (!err_set_error_data_int(str, ERR_TXT_MALLOCED | ERR_TXT_STRING))
+        OPENSSL_free(str);
+}
+
+int ERR_set_mark(void)
+{
+    ERR_STATE *es;
+
+    es = ERR_get_state();
+    if (es == NULL)
+        return 0;
+
+    if (es->bottom == es->top)
+        return 0;
+    es->err_flags[es->top] |= ERR_FLAG_MARK;
+    return 1;
+}
+
+int ERR_pop_to_mark(void)
+{
+    ERR_STATE *es;
+
+    es = ERR_get_state();
+    if (es == NULL)
+        return 0;
+
+    while (es->bottom != es->top
+           && (es->err_flags[es->top] & ERR_FLAG_MARK) == 0) {
+        err_clear(es, es->top);
+        es->top = es->top > 0 ? es->top - 1 : ERR_NUM_ERRORS - 1;
+    }
+
+    if (es->bottom == es->top)
+        return 0;
+    es->err_flags[es->top] &= ~ERR_FLAG_MARK;
+    return 1;
+}
+
+int ERR_clear_last_mark(void)
+{
+    ERR_STATE *es;
+    int top;
+
+    es = ERR_get_state();
+    if (es == NULL)
+        return 0;
+
+    top = es->top;
+    while (es->bottom != top
+           && (es->err_flags[top] & ERR_FLAG_MARK) == 0) {
+        top = top > 0 ? top - 1 : ERR_NUM_ERRORS - 1;
+    }
+
+    if (es->bottom == top)
+        return 0;
+    es->err_flags[top] &= ~ERR_FLAG_MARK;
+    return 1;
+}
+
+#ifdef UINTPTR_T
+# undef UINTPTR_T
+#endif
+/*
+ * uintptr_t is the answer, but unfortunately C89, current "least common
+ * denominator" doesn't define it. Most legacy platforms typedef it anyway,
+ * so that attempt to fill the gaps means that one would have to identify
+ * that track these gaps, which would be undesirable. Macro it is...
+ */
+#if defined(__VMS) && __INITIAL_POINTER_SIZE==64
+/*
+ * But we can't use size_t on VMS, because it adheres to sizeof(size_t)==4
+ * even in 64-bit builds, which means that it won't work as mask.
+ */
+# define UINTPTR_T unsigned long long
+#else
+# define UINTPTR_T size_t
+#endif
+
+void err_clear_last_constant_time(int clear)
+{
+    ERR_STATE *es;
+    int top;
+
+    es = ERR_get_state();
+    if (es == NULL)
+        return;
+
+    top = es->top;
+
+    es->err_flags[top] &= ~(0 - clear);
+    es->err_buffer[top] &= ~(0UL - clear);
+    es->err_file[top] = (const char *)((UINTPTR_T)es->err_file[top] &
+                                       ~((UINTPTR_T)0 - clear));
+    es->err_line[top] |= 0 - clear;
+
+    es->top = (top + ERR_NUM_ERRORS - clear) % ERR_NUM_ERRORS;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/err/err_all.c b/trunk/3rdparty/openssl-1.1-fit/crypto/err/err_all.c
new file mode 100644
index 000000000..d9ec04b60
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/err/err_all.c
@@ -0,0 +1,101 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/err_int.h"
+#include <openssl/asn1err.h>
+#include <openssl/bnerr.h>
+#include <openssl/ecerr.h>
+#include <openssl/buffererr.h>
+#include <openssl/bioerr.h>
+#include <openssl/comperr.h>
+#include <openssl/rsaerr.h>
+#include <openssl/dherr.h>
+#include <openssl/dsaerr.h>
+#include <openssl/evperr.h>
+#include <openssl/objectserr.h>
+#include <openssl/pemerr.h>
+#include <openssl/pkcs7err.h>
+#include <openssl/x509err.h>
+#include <openssl/x509v3err.h>
+#include <openssl/conferr.h>
+#include <openssl/pkcs12err.h>
+#include <openssl/randerr.h>
+#include "internal/dso.h"
+#include <openssl/engineerr.h>
+#include <openssl/uierr.h>
+#include <openssl/ocsperr.h>
+#include <openssl/err.h>
+#include <openssl/tserr.h>
+#include <openssl/cmserr.h>
+#include <openssl/cterr.h>
+#include <openssl/asyncerr.h>
+#include <openssl/kdferr.h>
+#include <openssl/storeerr.h>
+
+int err_load_crypto_strings_int(void)
+{
+    if (
+#ifndef OPENSSL_NO_ERR
+        ERR_load_ERR_strings() == 0 ||    /* include error strings for SYSerr */
+        ERR_load_BN_strings() == 0 ||
+# ifndef OPENSSL_NO_RSA
+        ERR_load_RSA_strings() == 0 ||
+# endif
+# ifndef OPENSSL_NO_DH
+        ERR_load_DH_strings() == 0 ||
+# endif
+        ERR_load_EVP_strings() == 0 ||
+        ERR_load_BUF_strings() == 0 ||
+        ERR_load_OBJ_strings() == 0 ||
+        ERR_load_PEM_strings() == 0 ||
+# ifndef OPENSSL_NO_DSA
+        ERR_load_DSA_strings() == 0 ||
+# endif
+        ERR_load_X509_strings() == 0 ||
+        ERR_load_ASN1_strings() == 0 ||
+        ERR_load_CONF_strings() == 0 ||
+        ERR_load_CRYPTO_strings() == 0 ||
+# ifndef OPENSSL_NO_COMP
+        ERR_load_COMP_strings() == 0 ||
+# endif
+# ifndef OPENSSL_NO_EC
+        ERR_load_EC_strings() == 0 ||
+# endif
+        /* skip ERR_load_SSL_strings() because it is not in this library */
+        ERR_load_BIO_strings() == 0 ||
+        ERR_load_PKCS7_strings() == 0 ||
+        ERR_load_X509V3_strings() == 0 ||
+        ERR_load_PKCS12_strings() == 0 ||
+        ERR_load_RAND_strings() == 0 ||
+        ERR_load_DSO_strings() == 0 ||
+# ifndef OPENSSL_NO_TS
+        ERR_load_TS_strings() == 0 ||
+# endif
+# ifndef OPENSSL_NO_ENGINE
+        ERR_load_ENGINE_strings() == 0 ||
+# endif
+# ifndef OPENSSL_NO_OCSP
+        ERR_load_OCSP_strings() == 0 ||
+# endif
+        ERR_load_UI_strings() == 0 ||
+# ifndef OPENSSL_NO_CMS
+        ERR_load_CMS_strings() == 0 ||
+# endif
+# ifndef OPENSSL_NO_CT
+        ERR_load_CT_strings() == 0 ||
+# endif
+        ERR_load_ASYNC_strings() == 0 ||
+#endif
+        ERR_load_KDF_strings() == 0 ||
+        ERR_load_OSSL_STORE_strings() == 0)
+        return 0;
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/err/err_prn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/err/err_prn.c
new file mode 100644
index 000000000..c82e62947
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/err/err_prn.c
@@ -0,0 +1,65 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/crypto.h>
+#include <openssl/buffer.h>
+#include <openssl/err.h>
+
+void ERR_print_errors_cb(int (*cb) (const char *str, size_t len, void *u),
+                         void *u)
+{
+    unsigned long l;
+    char buf[256];
+    char buf2[4096];
+    const char *file, *data;
+    int line, flags;
+    /*
+     * We don't know what kind of thing CRYPTO_THREAD_ID is. Here is our best
+     * attempt to convert it into something we can print.
+     */
+    union {
+        CRYPTO_THREAD_ID tid;
+        unsigned long ltid;
+    } tid;
+
+    tid.ltid = 0;
+    tid.tid = CRYPTO_THREAD_get_current_id();
+
+    while ((l = ERR_get_error_line_data(&file, &line, &data, &flags)) != 0) {
+        ERR_error_string_n(l, buf, sizeof(buf));
+        BIO_snprintf(buf2, sizeof(buf2), "%lu:%s:%s:%d:%s\n", tid.ltid, buf,
+                     file, line, (flags & ERR_TXT_STRING) ? data : "");
+        if (cb(buf2, strlen(buf2), u) <= 0)
+            break;              /* abort outputting the error report */
+    }
+}
+
+static int print_bio(const char *str, size_t len, void *bp)
+{
+    return BIO_write((BIO *)bp, str, len);
+}
+
+void ERR_print_errors(BIO *bp)
+{
+    ERR_print_errors_cb(print_bio, bp);
+}
+
+#ifndef OPENSSL_NO_STDIO
+void ERR_print_errors_fp(FILE *fp)
+{
+    BIO *bio = BIO_new_fp(fp, BIO_NOCLOSE);
+    if (bio == NULL)
+        return;
+
+    ERR_print_errors_cb(print_bio, bio);
+    BIO_free(bio);
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/err/openssl.ec b/trunk/3rdparty/openssl-1.1-fit/crypto/err/openssl.ec
new file mode 100644
index 000000000..3e092eae0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/err/openssl.ec
@@ -0,0 +1,78 @@
+# configuration file for util/mkerr.pl
+
+# The INPUT HEADER is scanned for declarations
+# LIBNAME       INPUT HEADER                    ERROR-TABLE FILE
+L ERR           NONE                            NONE
+L BN            include/openssl/bn.h            crypto/bn/bn_err.c
+L RSA           include/openssl/rsa.h           crypto/rsa/rsa_err.c
+L DH            include/openssl/dh.h            crypto/dh/dh_err.c
+L EVP           include/openssl/evp.h           crypto/evp/evp_err.c
+L BUF           include/openssl/buffer.h        crypto/buffer/buf_err.c
+L OBJ           include/openssl/objects.h       crypto/objects/obj_err.c
+L PEM           include/openssl/pem.h           crypto/pem/pem_err.c
+L DSA           include/openssl/dsa.h           crypto/dsa/dsa_err.c
+L X509          include/openssl/x509.h          crypto/x509/x509_err.c
+L ASN1          include/openssl/asn1.h          crypto/asn1/asn1_err.c
+L CONF          include/openssl/conf.h          crypto/conf/conf_err.c
+L CRYPTO        include/openssl/crypto.h        crypto/cpt_err.c
+L EC            include/openssl/ec.h            crypto/ec/ec_err.c
+L SSL           include/openssl/ssl.h           ssl/ssl_err.c
+L BIO           include/openssl/bio.h           crypto/bio/bio_err.c
+L PKCS7         include/openssl/pkcs7.h         crypto/pkcs7/pkcs7err.c
+L X509V3        include/openssl/x509v3.h        crypto/x509v3/v3err.c
+L PKCS12        include/openssl/pkcs12.h        crypto/pkcs12/pk12err.c
+L RAND          include/openssl/rand.h          crypto/rand/rand_err.c
+L DSO           include/internal/dso.h          crypto/dso/dso_err.c
+L ENGINE        include/openssl/engine.h        crypto/engine/eng_err.c
+L OCSP          include/openssl/ocsp.h          crypto/ocsp/ocsp_err.c
+L UI            include/openssl/ui.h            crypto/ui/ui_err.c
+L COMP          include/openssl/comp.h          crypto/comp/comp_err.c
+L TS            include/openssl/ts.h            crypto/ts/ts_err.c
+L CMS           include/openssl/cms.h           crypto/cms/cms_err.c
+L CT            include/openssl/ct.h            crypto/ct/ct_err.c
+L ASYNC         include/openssl/async.h         crypto/async/async_err.c
+L KDF           include/openssl/kdf.h           crypto/kdf/kdf_err.c
+L SM2           crypto/include/internal/sm2.h   crypto/sm2/sm2_err.c
+L OSSL_STORE    include/openssl/store.h         crypto/store/store_err.c
+
+# additional header files to be scanned for function names
+L NONE          include/openssl/x509_vfy.h      NONE
+L NONE          crypto/ec/ec_lcl.h              NONE
+L NONE          crypto/cms/cms_lcl.h            NONE
+L NONE          crypto/ct/ct_locl.h             NONE
+L NONE          ssl/ssl_locl.h                  NONE
+
+# SSL/TLS alerts
+R SSL_R_SSLV3_ALERT_UNEXPECTED_MESSAGE          1010
+R SSL_R_SSLV3_ALERT_BAD_RECORD_MAC              1020
+R SSL_R_TLSV1_ALERT_DECRYPTION_FAILED           1021
+R SSL_R_TLSV1_ALERT_RECORD_OVERFLOW             1022
+R SSL_R_SSLV3_ALERT_DECOMPRESSION_FAILURE       1030
+R SSL_R_SSLV3_ALERT_HANDSHAKE_FAILURE           1040
+R SSL_R_SSLV3_ALERT_NO_CERTIFICATE              1041
+R SSL_R_SSLV3_ALERT_BAD_CERTIFICATE             1042
+R SSL_R_SSLV3_ALERT_UNSUPPORTED_CERTIFICATE     1043
+R SSL_R_SSLV3_ALERT_CERTIFICATE_REVOKED         1044
+R SSL_R_SSLV3_ALERT_CERTIFICATE_EXPIRED         1045
+R SSL_R_SSLV3_ALERT_CERTIFICATE_UNKNOWN         1046
+R SSL_R_SSLV3_ALERT_ILLEGAL_PARAMETER           1047
+R SSL_R_TLSV1_ALERT_UNKNOWN_CA                  1048
+R SSL_R_TLSV1_ALERT_ACCESS_DENIED               1049
+R SSL_R_TLSV1_ALERT_DECODE_ERROR                1050
+R SSL_R_TLSV1_ALERT_DECRYPT_ERROR               1051
+R SSL_R_TLSV1_ALERT_EXPORT_RESTRICTION          1060
+R SSL_R_TLSV1_ALERT_PROTOCOL_VERSION            1070
+R SSL_R_TLSV1_ALERT_INSUFFICIENT_SECURITY       1071
+R SSL_R_TLSV1_ALERT_INTERNAL_ERROR              1080
+R SSL_R_TLSV1_ALERT_INAPPROPRIATE_FALLBACK      1086
+R SSL_R_TLSV1_ALERT_USER_CANCELLED              1090
+R SSL_R_TLSV1_ALERT_NO_RENEGOTIATION            1100
+R SSL_R_TLSV13_ALERT_MISSING_EXTENSION          1109
+R SSL_R_TLSV1_UNSUPPORTED_EXTENSION             1110
+R SSL_R_TLSV1_CERTIFICATE_UNOBTAINABLE          1111
+R SSL_R_TLSV1_UNRECOGNIZED_NAME                 1112
+R SSL_R_TLSV1_BAD_CERTIFICATE_STATUS_RESPONSE   1113
+R SSL_R_TLSV1_BAD_CERTIFICATE_HASH_VALUE        1114
+R TLS1_AD_UNKNOWN_PSK_IDENTITY                  1115
+R SSL_R_TLSV13_ALERT_CERTIFICATE_REQUIRED       1116
+R TLS1_AD_NO_APPLICATION_PROTOCOL               1120
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/err/openssl.txt b/trunk/3rdparty/openssl-1.1-fit/crypto/err/openssl.txt
new file mode 100644
index 000000000..feff1dccd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/err/openssl.txt
@@ -0,0 +1,3033 @@
+# Copyright 1999-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# Function codes
+ASN1_F_A2D_ASN1_OBJECT:100:a2d_ASN1_OBJECT
+ASN1_F_A2I_ASN1_INTEGER:102:a2i_ASN1_INTEGER
+ASN1_F_A2I_ASN1_STRING:103:a2i_ASN1_STRING
+ASN1_F_APPEND_EXP:176:append_exp
+ASN1_F_ASN1_BIO_INIT:113:asn1_bio_init
+ASN1_F_ASN1_BIT_STRING_SET_BIT:183:ASN1_BIT_STRING_set_bit
+ASN1_F_ASN1_CB:177:asn1_cb
+ASN1_F_ASN1_CHECK_TLEN:104:asn1_check_tlen
+ASN1_F_ASN1_COLLECT:106:asn1_collect
+ASN1_F_ASN1_D2I_EX_PRIMITIVE:108:asn1_d2i_ex_primitive
+ASN1_F_ASN1_D2I_FP:109:ASN1_d2i_fp
+ASN1_F_ASN1_D2I_READ_BIO:107:asn1_d2i_read_bio
+ASN1_F_ASN1_DIGEST:184:ASN1_digest
+ASN1_F_ASN1_DO_ADB:110:asn1_do_adb
+ASN1_F_ASN1_DO_LOCK:233:asn1_do_lock
+ASN1_F_ASN1_DUP:111:ASN1_dup
+ASN1_F_ASN1_ENC_SAVE:115:asn1_enc_save
+ASN1_F_ASN1_EX_C2I:204:asn1_ex_c2i
+ASN1_F_ASN1_FIND_END:190:asn1_find_end
+ASN1_F_ASN1_GENERALIZEDTIME_ADJ:216:ASN1_GENERALIZEDTIME_adj
+ASN1_F_ASN1_GENERATE_V3:178:ASN1_generate_v3
+ASN1_F_ASN1_GET_INT64:224:asn1_get_int64
+ASN1_F_ASN1_GET_OBJECT:114:ASN1_get_object
+ASN1_F_ASN1_GET_UINT64:225:asn1_get_uint64
+ASN1_F_ASN1_I2D_BIO:116:ASN1_i2d_bio
+ASN1_F_ASN1_I2D_FP:117:ASN1_i2d_fp
+ASN1_F_ASN1_ITEM_D2I_FP:206:ASN1_item_d2i_fp
+ASN1_F_ASN1_ITEM_DUP:191:ASN1_item_dup
+ASN1_F_ASN1_ITEM_EMBED_D2I:120:asn1_item_embed_d2i
+ASN1_F_ASN1_ITEM_EMBED_NEW:121:asn1_item_embed_new
+ASN1_F_ASN1_ITEM_FLAGS_I2D:118:asn1_item_flags_i2d
+ASN1_F_ASN1_ITEM_I2D_BIO:192:ASN1_item_i2d_bio
+ASN1_F_ASN1_ITEM_I2D_FP:193:ASN1_item_i2d_fp
+ASN1_F_ASN1_ITEM_PACK:198:ASN1_item_pack
+ASN1_F_ASN1_ITEM_SIGN:195:ASN1_item_sign
+ASN1_F_ASN1_ITEM_SIGN_CTX:220:ASN1_item_sign_ctx
+ASN1_F_ASN1_ITEM_UNPACK:199:ASN1_item_unpack
+ASN1_F_ASN1_ITEM_VERIFY:197:ASN1_item_verify
+ASN1_F_ASN1_MBSTRING_NCOPY:122:ASN1_mbstring_ncopy
+ASN1_F_ASN1_OBJECT_NEW:123:ASN1_OBJECT_new
+ASN1_F_ASN1_OUTPUT_DATA:214:asn1_output_data
+ASN1_F_ASN1_PCTX_NEW:205:ASN1_PCTX_new
+ASN1_F_ASN1_PRIMITIVE_NEW:119:asn1_primitive_new
+ASN1_F_ASN1_SCTX_NEW:221:ASN1_SCTX_new
+ASN1_F_ASN1_SIGN:128:ASN1_sign
+ASN1_F_ASN1_STR2TYPE:179:asn1_str2type
+ASN1_F_ASN1_STRING_GET_INT64:227:asn1_string_get_int64
+ASN1_F_ASN1_STRING_GET_UINT64:230:asn1_string_get_uint64
+ASN1_F_ASN1_STRING_SET:186:ASN1_STRING_set
+ASN1_F_ASN1_STRING_TABLE_ADD:129:ASN1_STRING_TABLE_add
+ASN1_F_ASN1_STRING_TO_BN:228:asn1_string_to_bn
+ASN1_F_ASN1_STRING_TYPE_NEW:130:ASN1_STRING_type_new
+ASN1_F_ASN1_TEMPLATE_EX_D2I:132:asn1_template_ex_d2i
+ASN1_F_ASN1_TEMPLATE_NEW:133:asn1_template_new
+ASN1_F_ASN1_TEMPLATE_NOEXP_D2I:131:asn1_template_noexp_d2i
+ASN1_F_ASN1_TIME_ADJ:217:ASN1_TIME_adj
+ASN1_F_ASN1_TYPE_GET_INT_OCTETSTRING:134:ASN1_TYPE_get_int_octetstring
+ASN1_F_ASN1_TYPE_GET_OCTETSTRING:135:ASN1_TYPE_get_octetstring
+ASN1_F_ASN1_UTCTIME_ADJ:218:ASN1_UTCTIME_adj
+ASN1_F_ASN1_VERIFY:137:ASN1_verify
+ASN1_F_B64_READ_ASN1:209:b64_read_asn1
+ASN1_F_B64_WRITE_ASN1:210:B64_write_ASN1
+ASN1_F_BIO_NEW_NDEF:208:BIO_new_NDEF
+ASN1_F_BITSTR_CB:180:bitstr_cb
+ASN1_F_BN_TO_ASN1_STRING:229:bn_to_asn1_string
+ASN1_F_C2I_ASN1_BIT_STRING:189:c2i_ASN1_BIT_STRING
+ASN1_F_C2I_ASN1_INTEGER:194:c2i_ASN1_INTEGER
+ASN1_F_C2I_ASN1_OBJECT:196:c2i_ASN1_OBJECT
+ASN1_F_C2I_IBUF:226:c2i_ibuf
+ASN1_F_C2I_UINT64_INT:101:c2i_uint64_int
+ASN1_F_COLLECT_DATA:140:collect_data
+ASN1_F_D2I_ASN1_OBJECT:147:d2i_ASN1_OBJECT
+ASN1_F_D2I_ASN1_UINTEGER:150:d2i_ASN1_UINTEGER
+ASN1_F_D2I_AUTOPRIVATEKEY:207:d2i_AutoPrivateKey
+ASN1_F_D2I_PRIVATEKEY:154:d2i_PrivateKey
+ASN1_F_D2I_PUBLICKEY:155:d2i_PublicKey
+ASN1_F_DO_BUF:142:do_buf
+ASN1_F_DO_CREATE:124:do_create
+ASN1_F_DO_DUMP:125:do_dump
+ASN1_F_DO_TCREATE:222:do_tcreate
+ASN1_F_I2A_ASN1_OBJECT:126:i2a_ASN1_OBJECT
+ASN1_F_I2D_ASN1_BIO_STREAM:211:i2d_ASN1_bio_stream
+ASN1_F_I2D_ASN1_OBJECT:143:i2d_ASN1_OBJECT
+ASN1_F_I2D_DSA_PUBKEY:161:i2d_DSA_PUBKEY
+ASN1_F_I2D_EC_PUBKEY:181:i2d_EC_PUBKEY
+ASN1_F_I2D_PRIVATEKEY:163:i2d_PrivateKey
+ASN1_F_I2D_PUBLICKEY:164:i2d_PublicKey
+ASN1_F_I2D_RSA_PUBKEY:165:i2d_RSA_PUBKEY
+ASN1_F_LONG_C2I:166:long_c2i
+ASN1_F_NDEF_PREFIX:127:ndef_prefix
+ASN1_F_NDEF_SUFFIX:136:ndef_suffix
+ASN1_F_OID_MODULE_INIT:174:oid_module_init
+ASN1_F_PARSE_TAGGING:182:parse_tagging
+ASN1_F_PKCS5_PBE2_SET_IV:167:PKCS5_pbe2_set_iv
+ASN1_F_PKCS5_PBE2_SET_SCRYPT:231:PKCS5_pbe2_set_scrypt
+ASN1_F_PKCS5_PBE_SET:202:PKCS5_pbe_set
+ASN1_F_PKCS5_PBE_SET0_ALGOR:215:PKCS5_pbe_set0_algor
+ASN1_F_PKCS5_PBKDF2_SET:219:PKCS5_pbkdf2_set
+ASN1_F_PKCS5_SCRYPT_SET:232:pkcs5_scrypt_set
+ASN1_F_SMIME_READ_ASN1:212:SMIME_read_ASN1
+ASN1_F_SMIME_TEXT:213:SMIME_text
+ASN1_F_STABLE_GET:138:stable_get
+ASN1_F_STBL_MODULE_INIT:223:stbl_module_init
+ASN1_F_UINT32_C2I:105:uint32_c2i
+ASN1_F_UINT32_NEW:139:uint32_new
+ASN1_F_UINT64_C2I:112:uint64_c2i
+ASN1_F_UINT64_NEW:141:uint64_new
+ASN1_F_X509_CRL_ADD0_REVOKED:169:X509_CRL_add0_revoked
+ASN1_F_X509_INFO_NEW:170:X509_INFO_new
+ASN1_F_X509_NAME_ENCODE:203:x509_name_encode
+ASN1_F_X509_NAME_EX_D2I:158:x509_name_ex_d2i
+ASN1_F_X509_NAME_EX_NEW:171:x509_name_ex_new
+ASN1_F_X509_PKEY_NEW:173:X509_PKEY_new
+ASYNC_F_ASYNC_CTX_NEW:100:async_ctx_new
+ASYNC_F_ASYNC_INIT_THREAD:101:ASYNC_init_thread
+ASYNC_F_ASYNC_JOB_NEW:102:async_job_new
+ASYNC_F_ASYNC_PAUSE_JOB:103:ASYNC_pause_job
+ASYNC_F_ASYNC_START_FUNC:104:async_start_func
+ASYNC_F_ASYNC_START_JOB:105:ASYNC_start_job
+ASYNC_F_ASYNC_WAIT_CTX_SET_WAIT_FD:106:ASYNC_WAIT_CTX_set_wait_fd
+BIO_F_ACPT_STATE:100:acpt_state
+BIO_F_ADDRINFO_WRAP:148:addrinfo_wrap
+BIO_F_ADDR_STRINGS:134:addr_strings
+BIO_F_BIO_ACCEPT:101:BIO_accept
+BIO_F_BIO_ACCEPT_EX:137:BIO_accept_ex
+BIO_F_BIO_ACCEPT_NEW:152:BIO_ACCEPT_new
+BIO_F_BIO_ADDR_NEW:144:BIO_ADDR_new
+BIO_F_BIO_BIND:147:BIO_bind
+BIO_F_BIO_CALLBACK_CTRL:131:BIO_callback_ctrl
+BIO_F_BIO_CONNECT:138:BIO_connect
+BIO_F_BIO_CONNECT_NEW:153:BIO_CONNECT_new
+BIO_F_BIO_CTRL:103:BIO_ctrl
+BIO_F_BIO_GETS:104:BIO_gets
+BIO_F_BIO_GET_HOST_IP:106:BIO_get_host_ip
+BIO_F_BIO_GET_NEW_INDEX:102:BIO_get_new_index
+BIO_F_BIO_GET_PORT:107:BIO_get_port
+BIO_F_BIO_LISTEN:139:BIO_listen
+BIO_F_BIO_LOOKUP:135:BIO_lookup
+BIO_F_BIO_LOOKUP_EX:143:BIO_lookup_ex
+BIO_F_BIO_MAKE_PAIR:121:bio_make_pair
+BIO_F_BIO_METH_NEW:146:BIO_meth_new
+BIO_F_BIO_NEW:108:BIO_new
+BIO_F_BIO_NEW_DGRAM_SCTP:145:BIO_new_dgram_sctp
+BIO_F_BIO_NEW_FILE:109:BIO_new_file
+BIO_F_BIO_NEW_MEM_BUF:126:BIO_new_mem_buf
+BIO_F_BIO_NREAD:123:BIO_nread
+BIO_F_BIO_NREAD0:124:BIO_nread0
+BIO_F_BIO_NWRITE:125:BIO_nwrite
+BIO_F_BIO_NWRITE0:122:BIO_nwrite0
+BIO_F_BIO_PARSE_HOSTSERV:136:BIO_parse_hostserv
+BIO_F_BIO_PUTS:110:BIO_puts
+BIO_F_BIO_READ:111:BIO_read
+BIO_F_BIO_READ_EX:105:BIO_read_ex
+BIO_F_BIO_READ_INTERN:120:bio_read_intern
+BIO_F_BIO_SOCKET:140:BIO_socket
+BIO_F_BIO_SOCKET_NBIO:142:BIO_socket_nbio
+BIO_F_BIO_SOCK_INFO:141:BIO_sock_info
+BIO_F_BIO_SOCK_INIT:112:BIO_sock_init
+BIO_F_BIO_WRITE:113:BIO_write
+BIO_F_BIO_WRITE_EX:119:BIO_write_ex
+BIO_F_BIO_WRITE_INTERN:128:bio_write_intern
+BIO_F_BUFFER_CTRL:114:buffer_ctrl
+BIO_F_CONN_CTRL:127:conn_ctrl
+BIO_F_CONN_STATE:115:conn_state
+BIO_F_DGRAM_SCTP_NEW:149:dgram_sctp_new
+BIO_F_DGRAM_SCTP_READ:132:dgram_sctp_read
+BIO_F_DGRAM_SCTP_WRITE:133:dgram_sctp_write
+BIO_F_DOAPR_OUTCH:150:doapr_outch
+BIO_F_FILE_CTRL:116:file_ctrl
+BIO_F_FILE_READ:130:file_read
+BIO_F_LINEBUFFER_CTRL:129:linebuffer_ctrl
+BIO_F_LINEBUFFER_NEW:151:linebuffer_new
+BIO_F_MEM_WRITE:117:mem_write
+BIO_F_NBIOF_NEW:154:nbiof_new
+BIO_F_SLG_WRITE:155:slg_write
+BIO_F_SSL_NEW:118:SSL_new
+BN_F_BNRAND:127:bnrand
+BN_F_BNRAND_RANGE:138:bnrand_range
+BN_F_BN_BLINDING_CONVERT_EX:100:BN_BLINDING_convert_ex
+BN_F_BN_BLINDING_CREATE_PARAM:128:BN_BLINDING_create_param
+BN_F_BN_BLINDING_INVERT_EX:101:BN_BLINDING_invert_ex
+BN_F_BN_BLINDING_NEW:102:BN_BLINDING_new
+BN_F_BN_BLINDING_UPDATE:103:BN_BLINDING_update
+BN_F_BN_BN2DEC:104:BN_bn2dec
+BN_F_BN_BN2HEX:105:BN_bn2hex
+BN_F_BN_COMPUTE_WNAF:142:bn_compute_wNAF
+BN_F_BN_CTX_GET:116:BN_CTX_get
+BN_F_BN_CTX_NEW:106:BN_CTX_new
+BN_F_BN_CTX_START:129:BN_CTX_start
+BN_F_BN_DIV:107:BN_div
+BN_F_BN_DIV_RECP:130:BN_div_recp
+BN_F_BN_EXP:123:BN_exp
+BN_F_BN_EXPAND_INTERNAL:120:bn_expand_internal
+BN_F_BN_GENCB_NEW:143:BN_GENCB_new
+BN_F_BN_GENERATE_DSA_NONCE:140:BN_generate_dsa_nonce
+BN_F_BN_GENERATE_PRIME_EX:141:BN_generate_prime_ex
+BN_F_BN_GF2M_MOD:131:BN_GF2m_mod
+BN_F_BN_GF2M_MOD_EXP:132:BN_GF2m_mod_exp
+BN_F_BN_GF2M_MOD_MUL:133:BN_GF2m_mod_mul
+BN_F_BN_GF2M_MOD_SOLVE_QUAD:134:BN_GF2m_mod_solve_quad
+BN_F_BN_GF2M_MOD_SOLVE_QUAD_ARR:135:BN_GF2m_mod_solve_quad_arr
+BN_F_BN_GF2M_MOD_SQR:136:BN_GF2m_mod_sqr
+BN_F_BN_GF2M_MOD_SQRT:137:BN_GF2m_mod_sqrt
+BN_F_BN_LSHIFT:145:BN_lshift
+BN_F_BN_MOD_EXP2_MONT:118:BN_mod_exp2_mont
+BN_F_BN_MOD_EXP_MONT:109:BN_mod_exp_mont
+BN_F_BN_MOD_EXP_MONT_CONSTTIME:124:BN_mod_exp_mont_consttime
+BN_F_BN_MOD_EXP_MONT_WORD:117:BN_mod_exp_mont_word
+BN_F_BN_MOD_EXP_RECP:125:BN_mod_exp_recp
+BN_F_BN_MOD_EXP_SIMPLE:126:BN_mod_exp_simple
+BN_F_BN_MOD_INVERSE:110:BN_mod_inverse
+BN_F_BN_MOD_INVERSE_NO_BRANCH:139:BN_mod_inverse_no_branch
+BN_F_BN_MOD_LSHIFT_QUICK:119:BN_mod_lshift_quick
+BN_F_BN_MOD_SQRT:121:BN_mod_sqrt
+BN_F_BN_MONT_CTX_NEW:149:BN_MONT_CTX_new
+BN_F_BN_MPI2BN:112:BN_mpi2bn
+BN_F_BN_NEW:113:BN_new
+BN_F_BN_POOL_GET:147:BN_POOL_get
+BN_F_BN_RAND:114:BN_rand
+BN_F_BN_RAND_RANGE:122:BN_rand_range
+BN_F_BN_RECP_CTX_NEW:150:BN_RECP_CTX_new
+BN_F_BN_RSHIFT:146:BN_rshift
+BN_F_BN_SET_WORDS:144:bn_set_words
+BN_F_BN_STACK_PUSH:148:BN_STACK_push
+BN_F_BN_USUB:115:BN_usub
+BUF_F_BUF_MEM_GROW:100:BUF_MEM_grow
+BUF_F_BUF_MEM_GROW_CLEAN:105:BUF_MEM_grow_clean
+BUF_F_BUF_MEM_NEW:101:BUF_MEM_new
+CMS_F_CHECK_CONTENT:99:check_content
+CMS_F_CMS_ADD0_CERT:164:CMS_add0_cert
+CMS_F_CMS_ADD0_RECIPIENT_KEY:100:CMS_add0_recipient_key
+CMS_F_CMS_ADD0_RECIPIENT_PASSWORD:165:CMS_add0_recipient_password
+CMS_F_CMS_ADD1_RECEIPTREQUEST:158:CMS_add1_ReceiptRequest
+CMS_F_CMS_ADD1_RECIPIENT_CERT:101:CMS_add1_recipient_cert
+CMS_F_CMS_ADD1_SIGNER:102:CMS_add1_signer
+CMS_F_CMS_ADD1_SIGNINGTIME:103:cms_add1_signingTime
+CMS_F_CMS_COMPRESS:104:CMS_compress
+CMS_F_CMS_COMPRESSEDDATA_CREATE:105:cms_CompressedData_create
+CMS_F_CMS_COMPRESSEDDATA_INIT_BIO:106:cms_CompressedData_init_bio
+CMS_F_CMS_COPY_CONTENT:107:cms_copy_content
+CMS_F_CMS_COPY_MESSAGEDIGEST:108:cms_copy_messageDigest
+CMS_F_CMS_DATA:109:CMS_data
+CMS_F_CMS_DATAFINAL:110:CMS_dataFinal
+CMS_F_CMS_DATAINIT:111:CMS_dataInit
+CMS_F_CMS_DECRYPT:112:CMS_decrypt
+CMS_F_CMS_DECRYPT_SET1_KEY:113:CMS_decrypt_set1_key
+CMS_F_CMS_DECRYPT_SET1_PASSWORD:166:CMS_decrypt_set1_password
+CMS_F_CMS_DECRYPT_SET1_PKEY:114:CMS_decrypt_set1_pkey
+CMS_F_CMS_DIGESTALGORITHM_FIND_CTX:115:cms_DigestAlgorithm_find_ctx
+CMS_F_CMS_DIGESTALGORITHM_INIT_BIO:116:cms_DigestAlgorithm_init_bio
+CMS_F_CMS_DIGESTEDDATA_DO_FINAL:117:cms_DigestedData_do_final
+CMS_F_CMS_DIGEST_VERIFY:118:CMS_digest_verify
+CMS_F_CMS_ENCODE_RECEIPT:161:cms_encode_Receipt
+CMS_F_CMS_ENCRYPT:119:CMS_encrypt
+CMS_F_CMS_ENCRYPTEDCONTENT_INIT:179:cms_EncryptedContent_init
+CMS_F_CMS_ENCRYPTEDCONTENT_INIT_BIO:120:cms_EncryptedContent_init_bio
+CMS_F_CMS_ENCRYPTEDDATA_DECRYPT:121:CMS_EncryptedData_decrypt
+CMS_F_CMS_ENCRYPTEDDATA_ENCRYPT:122:CMS_EncryptedData_encrypt
+CMS_F_CMS_ENCRYPTEDDATA_SET1_KEY:123:CMS_EncryptedData_set1_key
+CMS_F_CMS_ENVELOPEDDATA_CREATE:124:CMS_EnvelopedData_create
+CMS_F_CMS_ENVELOPEDDATA_INIT_BIO:125:cms_EnvelopedData_init_bio
+CMS_F_CMS_ENVELOPED_DATA_INIT:126:cms_enveloped_data_init
+CMS_F_CMS_ENV_ASN1_CTRL:171:cms_env_asn1_ctrl
+CMS_F_CMS_FINAL:127:CMS_final
+CMS_F_CMS_GET0_CERTIFICATE_CHOICES:128:cms_get0_certificate_choices
+CMS_F_CMS_GET0_CONTENT:129:CMS_get0_content
+CMS_F_CMS_GET0_ECONTENT_TYPE:130:cms_get0_econtent_type
+CMS_F_CMS_GET0_ENVELOPED:131:cms_get0_enveloped
+CMS_F_CMS_GET0_REVOCATION_CHOICES:132:cms_get0_revocation_choices
+CMS_F_CMS_GET0_SIGNED:133:cms_get0_signed
+CMS_F_CMS_MSGSIGDIGEST_ADD1:162:cms_msgSigDigest_add1
+CMS_F_CMS_RECEIPTREQUEST_CREATE0:159:CMS_ReceiptRequest_create0
+CMS_F_CMS_RECEIPT_VERIFY:160:cms_Receipt_verify
+CMS_F_CMS_RECIPIENTINFO_DECRYPT:134:CMS_RecipientInfo_decrypt
+CMS_F_CMS_RECIPIENTINFO_ENCRYPT:169:CMS_RecipientInfo_encrypt
+CMS_F_CMS_RECIPIENTINFO_KARI_ENCRYPT:178:cms_RecipientInfo_kari_encrypt
+CMS_F_CMS_RECIPIENTINFO_KARI_GET0_ALG:175:CMS_RecipientInfo_kari_get0_alg
+CMS_F_CMS_RECIPIENTINFO_KARI_GET0_ORIG_ID:173:\
+	CMS_RecipientInfo_kari_get0_orig_id
+CMS_F_CMS_RECIPIENTINFO_KARI_GET0_REKS:172:CMS_RecipientInfo_kari_get0_reks
+CMS_F_CMS_RECIPIENTINFO_KARI_ORIG_ID_CMP:174:CMS_RecipientInfo_kari_orig_id_cmp
+CMS_F_CMS_RECIPIENTINFO_KEKRI_DECRYPT:135:cms_RecipientInfo_kekri_decrypt
+CMS_F_CMS_RECIPIENTINFO_KEKRI_ENCRYPT:136:cms_RecipientInfo_kekri_encrypt
+CMS_F_CMS_RECIPIENTINFO_KEKRI_GET0_ID:137:CMS_RecipientInfo_kekri_get0_id
+CMS_F_CMS_RECIPIENTINFO_KEKRI_ID_CMP:138:CMS_RecipientInfo_kekri_id_cmp
+CMS_F_CMS_RECIPIENTINFO_KTRI_CERT_CMP:139:CMS_RecipientInfo_ktri_cert_cmp
+CMS_F_CMS_RECIPIENTINFO_KTRI_DECRYPT:140:cms_RecipientInfo_ktri_decrypt
+CMS_F_CMS_RECIPIENTINFO_KTRI_ENCRYPT:141:cms_RecipientInfo_ktri_encrypt
+CMS_F_CMS_RECIPIENTINFO_KTRI_GET0_ALGS:142:CMS_RecipientInfo_ktri_get0_algs
+CMS_F_CMS_RECIPIENTINFO_KTRI_GET0_SIGNER_ID:143:\
+	CMS_RecipientInfo_ktri_get0_signer_id
+CMS_F_CMS_RECIPIENTINFO_PWRI_CRYPT:167:cms_RecipientInfo_pwri_crypt
+CMS_F_CMS_RECIPIENTINFO_SET0_KEY:144:CMS_RecipientInfo_set0_key
+CMS_F_CMS_RECIPIENTINFO_SET0_PASSWORD:168:CMS_RecipientInfo_set0_password
+CMS_F_CMS_RECIPIENTINFO_SET0_PKEY:145:CMS_RecipientInfo_set0_pkey
+CMS_F_CMS_SD_ASN1_CTRL:170:cms_sd_asn1_ctrl
+CMS_F_CMS_SET1_IAS:176:cms_set1_ias
+CMS_F_CMS_SET1_KEYID:177:cms_set1_keyid
+CMS_F_CMS_SET1_SIGNERIDENTIFIER:146:cms_set1_SignerIdentifier
+CMS_F_CMS_SET_DETACHED:147:CMS_set_detached
+CMS_F_CMS_SIGN:148:CMS_sign
+CMS_F_CMS_SIGNED_DATA_INIT:149:cms_signed_data_init
+CMS_F_CMS_SIGNERINFO_CONTENT_SIGN:150:cms_SignerInfo_content_sign
+CMS_F_CMS_SIGNERINFO_SIGN:151:CMS_SignerInfo_sign
+CMS_F_CMS_SIGNERINFO_VERIFY:152:CMS_SignerInfo_verify
+CMS_F_CMS_SIGNERINFO_VERIFY_CERT:153:cms_signerinfo_verify_cert
+CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT:154:CMS_SignerInfo_verify_content
+CMS_F_CMS_SIGN_RECEIPT:163:CMS_sign_receipt
+CMS_F_CMS_STREAM:155:CMS_stream
+CMS_F_CMS_UNCOMPRESS:156:CMS_uncompress
+CMS_F_CMS_VERIFY:157:CMS_verify
+CMS_F_KEK_UNWRAP_KEY:180:kek_unwrap_key
+COMP_F_BIO_ZLIB_FLUSH:99:bio_zlib_flush
+COMP_F_BIO_ZLIB_NEW:100:bio_zlib_new
+COMP_F_BIO_ZLIB_READ:101:bio_zlib_read
+COMP_F_BIO_ZLIB_WRITE:102:bio_zlib_write
+COMP_F_COMP_CTX_NEW:103:COMP_CTX_new
+CONF_F_CONF_DUMP_FP:104:CONF_dump_fp
+CONF_F_CONF_LOAD:100:CONF_load
+CONF_F_CONF_LOAD_FP:103:CONF_load_fp
+CONF_F_CONF_PARSE_LIST:119:CONF_parse_list
+CONF_F_DEF_LOAD:120:def_load
+CONF_F_DEF_LOAD_BIO:121:def_load_bio
+CONF_F_GET_NEXT_FILE:107:get_next_file
+CONF_F_MODULE_ADD:122:module_add
+CONF_F_MODULE_INIT:115:module_init
+CONF_F_MODULE_LOAD_DSO:117:module_load_dso
+CONF_F_MODULE_RUN:118:module_run
+CONF_F_NCONF_DUMP_BIO:105:NCONF_dump_bio
+CONF_F_NCONF_DUMP_FP:106:NCONF_dump_fp
+CONF_F_NCONF_GET_NUMBER_E:112:NCONF_get_number_e
+CONF_F_NCONF_GET_SECTION:108:NCONF_get_section
+CONF_F_NCONF_GET_STRING:109:NCONF_get_string
+CONF_F_NCONF_LOAD:113:NCONF_load
+CONF_F_NCONF_LOAD_BIO:110:NCONF_load_bio
+CONF_F_NCONF_LOAD_FP:114:NCONF_load_fp
+CONF_F_NCONF_NEW:111:NCONF_new
+CONF_F_PROCESS_INCLUDE:116:process_include
+CONF_F_SSL_MODULE_INIT:123:ssl_module_init
+CONF_F_STR_COPY:101:str_copy
+CRYPTO_F_CMAC_CTX_NEW:120:CMAC_CTX_new
+CRYPTO_F_CRYPTO_DUP_EX_DATA:110:CRYPTO_dup_ex_data
+CRYPTO_F_CRYPTO_FREE_EX_DATA:111:CRYPTO_free_ex_data
+CRYPTO_F_CRYPTO_GET_EX_NEW_INDEX:100:CRYPTO_get_ex_new_index
+CRYPTO_F_CRYPTO_MEMDUP:115:CRYPTO_memdup
+CRYPTO_F_CRYPTO_NEW_EX_DATA:112:CRYPTO_new_ex_data
+CRYPTO_F_CRYPTO_OCB128_COPY_CTX:121:CRYPTO_ocb128_copy_ctx
+CRYPTO_F_CRYPTO_OCB128_INIT:122:CRYPTO_ocb128_init
+CRYPTO_F_CRYPTO_SET_EX_DATA:102:CRYPTO_set_ex_data
+CRYPTO_F_FIPS_MODE_SET:109:FIPS_mode_set
+CRYPTO_F_GET_AND_LOCK:113:get_and_lock
+CRYPTO_F_OPENSSL_ATEXIT:114:OPENSSL_atexit
+CRYPTO_F_OPENSSL_BUF2HEXSTR:117:OPENSSL_buf2hexstr
+CRYPTO_F_OPENSSL_FOPEN:119:openssl_fopen
+CRYPTO_F_OPENSSL_HEXSTR2BUF:118:OPENSSL_hexstr2buf
+CRYPTO_F_OPENSSL_INIT_CRYPTO:116:OPENSSL_init_crypto
+CRYPTO_F_OPENSSL_LH_NEW:126:OPENSSL_LH_new
+CRYPTO_F_OPENSSL_SK_DEEP_COPY:127:OPENSSL_sk_deep_copy
+CRYPTO_F_OPENSSL_SK_DUP:128:OPENSSL_sk_dup
+CRYPTO_F_PKEY_HMAC_INIT:123:pkey_hmac_init
+CRYPTO_F_PKEY_POLY1305_INIT:124:pkey_poly1305_init
+CRYPTO_F_PKEY_SIPHASH_INIT:125:pkey_siphash_init
+CRYPTO_F_SK_RESERVE:129:sk_reserve
+CT_F_CTLOG_NEW:117:CTLOG_new
+CT_F_CTLOG_NEW_FROM_BASE64:118:CTLOG_new_from_base64
+CT_F_CTLOG_NEW_FROM_CONF:119:ctlog_new_from_conf
+CT_F_CTLOG_STORE_LOAD_CTX_NEW:122:ctlog_store_load_ctx_new
+CT_F_CTLOG_STORE_LOAD_FILE:123:CTLOG_STORE_load_file
+CT_F_CTLOG_STORE_LOAD_LOG:130:ctlog_store_load_log
+CT_F_CTLOG_STORE_NEW:131:CTLOG_STORE_new
+CT_F_CT_BASE64_DECODE:124:ct_base64_decode
+CT_F_CT_POLICY_EVAL_CTX_NEW:133:CT_POLICY_EVAL_CTX_new
+CT_F_CT_V1_LOG_ID_FROM_PKEY:125:ct_v1_log_id_from_pkey
+CT_F_I2O_SCT:107:i2o_SCT
+CT_F_I2O_SCT_LIST:108:i2o_SCT_LIST
+CT_F_I2O_SCT_SIGNATURE:109:i2o_SCT_signature
+CT_F_O2I_SCT:110:o2i_SCT
+CT_F_O2I_SCT_LIST:111:o2i_SCT_LIST
+CT_F_O2I_SCT_SIGNATURE:112:o2i_SCT_signature
+CT_F_SCT_CTX_NEW:126:SCT_CTX_new
+CT_F_SCT_CTX_VERIFY:128:SCT_CTX_verify
+CT_F_SCT_NEW:100:SCT_new
+CT_F_SCT_NEW_FROM_BASE64:127:SCT_new_from_base64
+CT_F_SCT_SET0_LOG_ID:101:SCT_set0_log_id
+CT_F_SCT_SET1_EXTENSIONS:114:SCT_set1_extensions
+CT_F_SCT_SET1_LOG_ID:115:SCT_set1_log_id
+CT_F_SCT_SET1_SIGNATURE:116:SCT_set1_signature
+CT_F_SCT_SET_LOG_ENTRY_TYPE:102:SCT_set_log_entry_type
+CT_F_SCT_SET_SIGNATURE_NID:103:SCT_set_signature_nid
+CT_F_SCT_SET_VERSION:104:SCT_set_version
+DH_F_COMPUTE_KEY:102:compute_key
+DH_F_DHPARAMS_PRINT_FP:101:DHparams_print_fp
+DH_F_DH_BUILTIN_GENPARAMS:106:dh_builtin_genparams
+DH_F_DH_CHECK_EX:121:DH_check_ex
+DH_F_DH_CHECK_PARAMS_EX:122:DH_check_params_ex
+DH_F_DH_CHECK_PUB_KEY_EX:123:DH_check_pub_key_ex
+DH_F_DH_CMS_DECRYPT:114:dh_cms_decrypt
+DH_F_DH_CMS_SET_PEERKEY:115:dh_cms_set_peerkey
+DH_F_DH_CMS_SET_SHARED_INFO:116:dh_cms_set_shared_info
+DH_F_DH_METH_DUP:117:DH_meth_dup
+DH_F_DH_METH_NEW:118:DH_meth_new
+DH_F_DH_METH_SET1_NAME:119:DH_meth_set1_name
+DH_F_DH_NEW_BY_NID:104:DH_new_by_nid
+DH_F_DH_NEW_METHOD:105:DH_new_method
+DH_F_DH_PARAM_DECODE:107:dh_param_decode
+DH_F_DH_PKEY_PUBLIC_CHECK:124:dh_pkey_public_check
+DH_F_DH_PRIV_DECODE:110:dh_priv_decode
+DH_F_DH_PRIV_ENCODE:111:dh_priv_encode
+DH_F_DH_PUB_DECODE:108:dh_pub_decode
+DH_F_DH_PUB_ENCODE:109:dh_pub_encode
+DH_F_DO_DH_PRINT:100:do_dh_print
+DH_F_GENERATE_KEY:103:generate_key
+DH_F_PKEY_DH_CTRL_STR:120:pkey_dh_ctrl_str
+DH_F_PKEY_DH_DERIVE:112:pkey_dh_derive
+DH_F_PKEY_DH_INIT:125:pkey_dh_init
+DH_F_PKEY_DH_KEYGEN:113:pkey_dh_keygen
+DSA_F_DSAPARAMS_PRINT:100:DSAparams_print
+DSA_F_DSAPARAMS_PRINT_FP:101:DSAparams_print_fp
+DSA_F_DSA_BUILTIN_PARAMGEN:125:dsa_builtin_paramgen
+DSA_F_DSA_BUILTIN_PARAMGEN2:126:dsa_builtin_paramgen2
+DSA_F_DSA_DO_SIGN:112:DSA_do_sign
+DSA_F_DSA_DO_VERIFY:113:DSA_do_verify
+DSA_F_DSA_METH_DUP:127:DSA_meth_dup
+DSA_F_DSA_METH_NEW:128:DSA_meth_new
+DSA_F_DSA_METH_SET1_NAME:129:DSA_meth_set1_name
+DSA_F_DSA_NEW_METHOD:103:DSA_new_method
+DSA_F_DSA_PARAM_DECODE:119:dsa_param_decode
+DSA_F_DSA_PRINT_FP:105:DSA_print_fp
+DSA_F_DSA_PRIV_DECODE:115:dsa_priv_decode
+DSA_F_DSA_PRIV_ENCODE:116:dsa_priv_encode
+DSA_F_DSA_PUB_DECODE:117:dsa_pub_decode
+DSA_F_DSA_PUB_ENCODE:118:dsa_pub_encode
+DSA_F_DSA_SIGN:106:DSA_sign
+DSA_F_DSA_SIGN_SETUP:107:DSA_sign_setup
+DSA_F_DSA_SIG_NEW:102:DSA_SIG_new
+DSA_F_OLD_DSA_PRIV_DECODE:122:old_dsa_priv_decode
+DSA_F_PKEY_DSA_CTRL:120:pkey_dsa_ctrl
+DSA_F_PKEY_DSA_CTRL_STR:104:pkey_dsa_ctrl_str
+DSA_F_PKEY_DSA_KEYGEN:121:pkey_dsa_keygen
+DSO_F_DLFCN_BIND_FUNC:100:dlfcn_bind_func
+DSO_F_DLFCN_LOAD:102:dlfcn_load
+DSO_F_DLFCN_MERGER:130:dlfcn_merger
+DSO_F_DLFCN_NAME_CONVERTER:123:dlfcn_name_converter
+DSO_F_DLFCN_UNLOAD:103:dlfcn_unload
+DSO_F_DL_BIND_FUNC:104:dl_bind_func
+DSO_F_DL_LOAD:106:dl_load
+DSO_F_DL_MERGER:131:dl_merger
+DSO_F_DL_NAME_CONVERTER:124:dl_name_converter
+DSO_F_DL_UNLOAD:107:dl_unload
+DSO_F_DSO_BIND_FUNC:108:DSO_bind_func
+DSO_F_DSO_CONVERT_FILENAME:126:DSO_convert_filename
+DSO_F_DSO_CTRL:110:DSO_ctrl
+DSO_F_DSO_FREE:111:DSO_free
+DSO_F_DSO_GET_FILENAME:127:DSO_get_filename
+DSO_F_DSO_GLOBAL_LOOKUP:139:DSO_global_lookup
+DSO_F_DSO_LOAD:112:DSO_load
+DSO_F_DSO_MERGE:132:DSO_merge
+DSO_F_DSO_NEW_METHOD:113:DSO_new_method
+DSO_F_DSO_PATHBYADDR:105:DSO_pathbyaddr
+DSO_F_DSO_SET_FILENAME:129:DSO_set_filename
+DSO_F_DSO_UP_REF:114:DSO_up_ref
+DSO_F_VMS_BIND_SYM:115:vms_bind_sym
+DSO_F_VMS_LOAD:116:vms_load
+DSO_F_VMS_MERGER:133:vms_merger
+DSO_F_VMS_UNLOAD:117:vms_unload
+DSO_F_WIN32_BIND_FUNC:101:win32_bind_func
+DSO_F_WIN32_GLOBALLOOKUP:142:win32_globallookup
+DSO_F_WIN32_JOINER:135:win32_joiner
+DSO_F_WIN32_LOAD:120:win32_load
+DSO_F_WIN32_MERGER:134:win32_merger
+DSO_F_WIN32_NAME_CONVERTER:125:win32_name_converter
+DSO_F_WIN32_PATHBYADDR:109:*
+DSO_F_WIN32_SPLITTER:136:win32_splitter
+DSO_F_WIN32_UNLOAD:121:win32_unload
+EC_F_BN_TO_FELEM:224:BN_to_felem
+EC_F_D2I_ECPARAMETERS:144:d2i_ECParameters
+EC_F_D2I_ECPKPARAMETERS:145:d2i_ECPKParameters
+EC_F_D2I_ECPRIVATEKEY:146:d2i_ECPrivateKey
+EC_F_DO_EC_KEY_PRINT:221:do_EC_KEY_print
+EC_F_ECDH_CMS_DECRYPT:238:ecdh_cms_decrypt
+EC_F_ECDH_CMS_SET_SHARED_INFO:239:ecdh_cms_set_shared_info
+EC_F_ECDH_COMPUTE_KEY:246:ECDH_compute_key
+EC_F_ECDH_SIMPLE_COMPUTE_KEY:257:ecdh_simple_compute_key
+EC_F_ECDSA_DO_SIGN_EX:251:ECDSA_do_sign_ex
+EC_F_ECDSA_DO_VERIFY:252:ECDSA_do_verify
+EC_F_ECDSA_SIGN_EX:254:ECDSA_sign_ex
+EC_F_ECDSA_SIGN_SETUP:248:ECDSA_sign_setup
+EC_F_ECDSA_SIG_NEW:265:ECDSA_SIG_new
+EC_F_ECDSA_VERIFY:253:ECDSA_verify
+EC_F_ECD_ITEM_VERIFY:270:ecd_item_verify
+EC_F_ECKEY_PARAM2TYPE:223:eckey_param2type
+EC_F_ECKEY_PARAM_DECODE:212:eckey_param_decode
+EC_F_ECKEY_PRIV_DECODE:213:eckey_priv_decode
+EC_F_ECKEY_PRIV_ENCODE:214:eckey_priv_encode
+EC_F_ECKEY_PUB_DECODE:215:eckey_pub_decode
+EC_F_ECKEY_PUB_ENCODE:216:eckey_pub_encode
+EC_F_ECKEY_TYPE2PARAM:220:eckey_type2param
+EC_F_ECPARAMETERS_PRINT:147:ECParameters_print
+EC_F_ECPARAMETERS_PRINT_FP:148:ECParameters_print_fp
+EC_F_ECPKPARAMETERS_PRINT:149:ECPKParameters_print
+EC_F_ECPKPARAMETERS_PRINT_FP:150:ECPKParameters_print_fp
+EC_F_ECP_NISTZ256_GET_AFFINE:240:ecp_nistz256_get_affine
+EC_F_ECP_NISTZ256_INV_MOD_ORD:275:ecp_nistz256_inv_mod_ord
+EC_F_ECP_NISTZ256_MULT_PRECOMPUTE:243:ecp_nistz256_mult_precompute
+EC_F_ECP_NISTZ256_POINTS_MUL:241:ecp_nistz256_points_mul
+EC_F_ECP_NISTZ256_PRE_COMP_NEW:244:ecp_nistz256_pre_comp_new
+EC_F_ECP_NISTZ256_WINDOWED_MUL:242:ecp_nistz256_windowed_mul
+EC_F_ECX_KEY_OP:266:ecx_key_op
+EC_F_ECX_PRIV_ENCODE:267:ecx_priv_encode
+EC_F_ECX_PUB_ENCODE:268:ecx_pub_encode
+EC_F_EC_ASN1_GROUP2CURVE:153:ec_asn1_group2curve
+EC_F_EC_ASN1_GROUP2FIELDID:154:ec_asn1_group2fieldid
+EC_F_EC_GF2M_MONTGOMERY_POINT_MULTIPLY:208:ec_GF2m_montgomery_point_multiply
+EC_F_EC_GF2M_SIMPLE_FIELD_INV:296:ec_GF2m_simple_field_inv
+EC_F_EC_GF2M_SIMPLE_GROUP_CHECK_DISCRIMINANT:159:\
+	ec_GF2m_simple_group_check_discriminant
+EC_F_EC_GF2M_SIMPLE_GROUP_SET_CURVE:195:ec_GF2m_simple_group_set_curve
+EC_F_EC_GF2M_SIMPLE_LADDER_POST:285:ec_GF2m_simple_ladder_post
+EC_F_EC_GF2M_SIMPLE_LADDER_PRE:288:ec_GF2m_simple_ladder_pre
+EC_F_EC_GF2M_SIMPLE_OCT2POINT:160:ec_GF2m_simple_oct2point
+EC_F_EC_GF2M_SIMPLE_POINT2OCT:161:ec_GF2m_simple_point2oct
+EC_F_EC_GF2M_SIMPLE_POINTS_MUL:289:ec_GF2m_simple_points_mul
+EC_F_EC_GF2M_SIMPLE_POINT_GET_AFFINE_COORDINATES:162:\
+	ec_GF2m_simple_point_get_affine_coordinates
+EC_F_EC_GF2M_SIMPLE_POINT_SET_AFFINE_COORDINATES:163:\
+	ec_GF2m_simple_point_set_affine_coordinates
+EC_F_EC_GF2M_SIMPLE_SET_COMPRESSED_COORDINATES:164:\
+	ec_GF2m_simple_set_compressed_coordinates
+EC_F_EC_GFP_MONT_FIELD_DECODE:133:ec_GFp_mont_field_decode
+EC_F_EC_GFP_MONT_FIELD_ENCODE:134:ec_GFp_mont_field_encode
+EC_F_EC_GFP_MONT_FIELD_INV:297:ec_GFp_mont_field_inv
+EC_F_EC_GFP_MONT_FIELD_MUL:131:ec_GFp_mont_field_mul
+EC_F_EC_GFP_MONT_FIELD_SET_TO_ONE:209:ec_GFp_mont_field_set_to_one
+EC_F_EC_GFP_MONT_FIELD_SQR:132:ec_GFp_mont_field_sqr
+EC_F_EC_GFP_MONT_GROUP_SET_CURVE:189:ec_GFp_mont_group_set_curve
+EC_F_EC_GFP_NISTP224_GROUP_SET_CURVE:225:ec_GFp_nistp224_group_set_curve
+EC_F_EC_GFP_NISTP224_POINTS_MUL:228:ec_GFp_nistp224_points_mul
+EC_F_EC_GFP_NISTP224_POINT_GET_AFFINE_COORDINATES:226:\
+	ec_GFp_nistp224_point_get_affine_coordinates
+EC_F_EC_GFP_NISTP256_GROUP_SET_CURVE:230:ec_GFp_nistp256_group_set_curve
+EC_F_EC_GFP_NISTP256_POINTS_MUL:231:ec_GFp_nistp256_points_mul
+EC_F_EC_GFP_NISTP256_POINT_GET_AFFINE_COORDINATES:232:\
+	ec_GFp_nistp256_point_get_affine_coordinates
+EC_F_EC_GFP_NISTP521_GROUP_SET_CURVE:233:ec_GFp_nistp521_group_set_curve
+EC_F_EC_GFP_NISTP521_POINTS_MUL:234:ec_GFp_nistp521_points_mul
+EC_F_EC_GFP_NISTP521_POINT_GET_AFFINE_COORDINATES:235:\
+	ec_GFp_nistp521_point_get_affine_coordinates
+EC_F_EC_GFP_NIST_FIELD_MUL:200:ec_GFp_nist_field_mul
+EC_F_EC_GFP_NIST_FIELD_SQR:201:ec_GFp_nist_field_sqr
+EC_F_EC_GFP_NIST_GROUP_SET_CURVE:202:ec_GFp_nist_group_set_curve
+EC_F_EC_GFP_SIMPLE_BLIND_COORDINATES:287:ec_GFp_simple_blind_coordinates
+EC_F_EC_GFP_SIMPLE_FIELD_INV:298:ec_GFp_simple_field_inv
+EC_F_EC_GFP_SIMPLE_GROUP_CHECK_DISCRIMINANT:165:\
+	ec_GFp_simple_group_check_discriminant
+EC_F_EC_GFP_SIMPLE_GROUP_SET_CURVE:166:ec_GFp_simple_group_set_curve
+EC_F_EC_GFP_SIMPLE_MAKE_AFFINE:102:ec_GFp_simple_make_affine
+EC_F_EC_GFP_SIMPLE_OCT2POINT:103:ec_GFp_simple_oct2point
+EC_F_EC_GFP_SIMPLE_POINT2OCT:104:ec_GFp_simple_point2oct
+EC_F_EC_GFP_SIMPLE_POINTS_MAKE_AFFINE:137:ec_GFp_simple_points_make_affine
+EC_F_EC_GFP_SIMPLE_POINT_GET_AFFINE_COORDINATES:167:\
+	ec_GFp_simple_point_get_affine_coordinates
+EC_F_EC_GFP_SIMPLE_POINT_SET_AFFINE_COORDINATES:168:\
+	ec_GFp_simple_point_set_affine_coordinates
+EC_F_EC_GFP_SIMPLE_SET_COMPRESSED_COORDINATES:169:\
+	ec_GFp_simple_set_compressed_coordinates
+EC_F_EC_GROUP_CHECK:170:EC_GROUP_check
+EC_F_EC_GROUP_CHECK_DISCRIMINANT:171:EC_GROUP_check_discriminant
+EC_F_EC_GROUP_COPY:106:EC_GROUP_copy
+EC_F_EC_GROUP_GET_CURVE:291:EC_GROUP_get_curve
+EC_F_EC_GROUP_GET_CURVE_GF2M:172:EC_GROUP_get_curve_GF2m
+EC_F_EC_GROUP_GET_CURVE_GFP:130:EC_GROUP_get_curve_GFp
+EC_F_EC_GROUP_GET_DEGREE:173:EC_GROUP_get_degree
+EC_F_EC_GROUP_GET_ECPARAMETERS:261:EC_GROUP_get_ecparameters
+EC_F_EC_GROUP_GET_ECPKPARAMETERS:262:EC_GROUP_get_ecpkparameters
+EC_F_EC_GROUP_GET_PENTANOMIAL_BASIS:193:EC_GROUP_get_pentanomial_basis
+EC_F_EC_GROUP_GET_TRINOMIAL_BASIS:194:EC_GROUP_get_trinomial_basis
+EC_F_EC_GROUP_NEW:108:EC_GROUP_new
+EC_F_EC_GROUP_NEW_BY_CURVE_NAME:174:EC_GROUP_new_by_curve_name
+EC_F_EC_GROUP_NEW_FROM_DATA:175:ec_group_new_from_data
+EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS:263:EC_GROUP_new_from_ecparameters
+EC_F_EC_GROUP_NEW_FROM_ECPKPARAMETERS:264:EC_GROUP_new_from_ecpkparameters
+EC_F_EC_GROUP_SET_CURVE:292:EC_GROUP_set_curve
+EC_F_EC_GROUP_SET_CURVE_GF2M:176:EC_GROUP_set_curve_GF2m
+EC_F_EC_GROUP_SET_CURVE_GFP:109:EC_GROUP_set_curve_GFp
+EC_F_EC_GROUP_SET_GENERATOR:111:EC_GROUP_set_generator
+EC_F_EC_GROUP_SET_SEED:286:EC_GROUP_set_seed
+EC_F_EC_KEY_CHECK_KEY:177:EC_KEY_check_key
+EC_F_EC_KEY_COPY:178:EC_KEY_copy
+EC_F_EC_KEY_GENERATE_KEY:179:EC_KEY_generate_key
+EC_F_EC_KEY_NEW:182:EC_KEY_new
+EC_F_EC_KEY_NEW_METHOD:245:EC_KEY_new_method
+EC_F_EC_KEY_OCT2PRIV:255:EC_KEY_oct2priv
+EC_F_EC_KEY_PRINT:180:EC_KEY_print
+EC_F_EC_KEY_PRINT_FP:181:EC_KEY_print_fp
+EC_F_EC_KEY_PRIV2BUF:279:EC_KEY_priv2buf
+EC_F_EC_KEY_PRIV2OCT:256:EC_KEY_priv2oct
+EC_F_EC_KEY_SET_PUBLIC_KEY_AFFINE_COORDINATES:229:\
+	EC_KEY_set_public_key_affine_coordinates
+EC_F_EC_KEY_SIMPLE_CHECK_KEY:258:ec_key_simple_check_key
+EC_F_EC_KEY_SIMPLE_OCT2PRIV:259:ec_key_simple_oct2priv
+EC_F_EC_KEY_SIMPLE_PRIV2OCT:260:ec_key_simple_priv2oct
+EC_F_EC_PKEY_CHECK:273:ec_pkey_check
+EC_F_EC_PKEY_PARAM_CHECK:274:ec_pkey_param_check
+EC_F_EC_POINTS_MAKE_AFFINE:136:EC_POINTs_make_affine
+EC_F_EC_POINTS_MUL:290:EC_POINTs_mul
+EC_F_EC_POINT_ADD:112:EC_POINT_add
+EC_F_EC_POINT_BN2POINT:280:EC_POINT_bn2point
+EC_F_EC_POINT_CMP:113:EC_POINT_cmp
+EC_F_EC_POINT_COPY:114:EC_POINT_copy
+EC_F_EC_POINT_DBL:115:EC_POINT_dbl
+EC_F_EC_POINT_GET_AFFINE_COORDINATES:293:EC_POINT_get_affine_coordinates
+EC_F_EC_POINT_GET_AFFINE_COORDINATES_GF2M:183:\
+	EC_POINT_get_affine_coordinates_GF2m
+EC_F_EC_POINT_GET_AFFINE_COORDINATES_GFP:116:EC_POINT_get_affine_coordinates_GFp
+EC_F_EC_POINT_GET_JPROJECTIVE_COORDINATES_GFP:117:\
+	EC_POINT_get_Jprojective_coordinates_GFp
+EC_F_EC_POINT_INVERT:210:EC_POINT_invert
+EC_F_EC_POINT_IS_AT_INFINITY:118:EC_POINT_is_at_infinity
+EC_F_EC_POINT_IS_ON_CURVE:119:EC_POINT_is_on_curve
+EC_F_EC_POINT_MAKE_AFFINE:120:EC_POINT_make_affine
+EC_F_EC_POINT_NEW:121:EC_POINT_new
+EC_F_EC_POINT_OCT2POINT:122:EC_POINT_oct2point
+EC_F_EC_POINT_POINT2BUF:281:EC_POINT_point2buf
+EC_F_EC_POINT_POINT2OCT:123:EC_POINT_point2oct
+EC_F_EC_POINT_SET_AFFINE_COORDINATES:294:EC_POINT_set_affine_coordinates
+EC_F_EC_POINT_SET_AFFINE_COORDINATES_GF2M:185:\
+	EC_POINT_set_affine_coordinates_GF2m
+EC_F_EC_POINT_SET_AFFINE_COORDINATES_GFP:124:EC_POINT_set_affine_coordinates_GFp
+EC_F_EC_POINT_SET_COMPRESSED_COORDINATES:295:EC_POINT_set_compressed_coordinates
+EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GF2M:186:\
+	EC_POINT_set_compressed_coordinates_GF2m
+EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GFP:125:\
+	EC_POINT_set_compressed_coordinates_GFp
+EC_F_EC_POINT_SET_JPROJECTIVE_COORDINATES_GFP:126:\
+	EC_POINT_set_Jprojective_coordinates_GFp
+EC_F_EC_POINT_SET_TO_INFINITY:127:EC_POINT_set_to_infinity
+EC_F_EC_PRE_COMP_NEW:196:ec_pre_comp_new
+EC_F_EC_SCALAR_MUL_LADDER:284:ec_scalar_mul_ladder
+EC_F_EC_WNAF_MUL:187:ec_wNAF_mul
+EC_F_EC_WNAF_PRECOMPUTE_MULT:188:ec_wNAF_precompute_mult
+EC_F_I2D_ECPARAMETERS:190:i2d_ECParameters
+EC_F_I2D_ECPKPARAMETERS:191:i2d_ECPKParameters
+EC_F_I2D_ECPRIVATEKEY:192:i2d_ECPrivateKey
+EC_F_I2O_ECPUBLICKEY:151:i2o_ECPublicKey
+EC_F_NISTP224_PRE_COMP_NEW:227:nistp224_pre_comp_new
+EC_F_NISTP256_PRE_COMP_NEW:236:nistp256_pre_comp_new
+EC_F_NISTP521_PRE_COMP_NEW:237:nistp521_pre_comp_new
+EC_F_O2I_ECPUBLICKEY:152:o2i_ECPublicKey
+EC_F_OLD_EC_PRIV_DECODE:222:old_ec_priv_decode
+EC_F_OSSL_ECDH_COMPUTE_KEY:247:ossl_ecdh_compute_key
+EC_F_OSSL_ECDSA_SIGN_SIG:249:ossl_ecdsa_sign_sig
+EC_F_OSSL_ECDSA_VERIFY_SIG:250:ossl_ecdsa_verify_sig
+EC_F_PKEY_ECD_CTRL:271:pkey_ecd_ctrl
+EC_F_PKEY_ECD_DIGESTSIGN:272:pkey_ecd_digestsign
+EC_F_PKEY_ECD_DIGESTSIGN25519:276:pkey_ecd_digestsign25519
+EC_F_PKEY_ECD_DIGESTSIGN448:277:pkey_ecd_digestsign448
+EC_F_PKEY_ECX_DERIVE:269:pkey_ecx_derive
+EC_F_PKEY_EC_CTRL:197:pkey_ec_ctrl
+EC_F_PKEY_EC_CTRL_STR:198:pkey_ec_ctrl_str
+EC_F_PKEY_EC_DERIVE:217:pkey_ec_derive
+EC_F_PKEY_EC_INIT:282:pkey_ec_init
+EC_F_PKEY_EC_KDF_DERIVE:283:pkey_ec_kdf_derive
+EC_F_PKEY_EC_KEYGEN:199:pkey_ec_keygen
+EC_F_PKEY_EC_PARAMGEN:219:pkey_ec_paramgen
+EC_F_PKEY_EC_SIGN:218:pkey_ec_sign
+EC_F_VALIDATE_ECX_DERIVE:278:validate_ecx_derive
+ENGINE_F_DIGEST_UPDATE:198:digest_update
+ENGINE_F_DYNAMIC_CTRL:180:dynamic_ctrl
+ENGINE_F_DYNAMIC_GET_DATA_CTX:181:dynamic_get_data_ctx
+ENGINE_F_DYNAMIC_LOAD:182:dynamic_load
+ENGINE_F_DYNAMIC_SET_DATA_CTX:183:dynamic_set_data_ctx
+ENGINE_F_ENGINE_ADD:105:ENGINE_add
+ENGINE_F_ENGINE_BY_ID:106:ENGINE_by_id
+ENGINE_F_ENGINE_CMD_IS_EXECUTABLE:170:ENGINE_cmd_is_executable
+ENGINE_F_ENGINE_CTRL:142:ENGINE_ctrl
+ENGINE_F_ENGINE_CTRL_CMD:178:ENGINE_ctrl_cmd
+ENGINE_F_ENGINE_CTRL_CMD_STRING:171:ENGINE_ctrl_cmd_string
+ENGINE_F_ENGINE_FINISH:107:ENGINE_finish
+ENGINE_F_ENGINE_GET_CIPHER:185:ENGINE_get_cipher
+ENGINE_F_ENGINE_GET_DIGEST:186:ENGINE_get_digest
+ENGINE_F_ENGINE_GET_FIRST:195:ENGINE_get_first
+ENGINE_F_ENGINE_GET_LAST:196:ENGINE_get_last
+ENGINE_F_ENGINE_GET_NEXT:115:ENGINE_get_next
+ENGINE_F_ENGINE_GET_PKEY_ASN1_METH:193:ENGINE_get_pkey_asn1_meth
+ENGINE_F_ENGINE_GET_PKEY_METH:192:ENGINE_get_pkey_meth
+ENGINE_F_ENGINE_GET_PREV:116:ENGINE_get_prev
+ENGINE_F_ENGINE_INIT:119:ENGINE_init
+ENGINE_F_ENGINE_LIST_ADD:120:engine_list_add
+ENGINE_F_ENGINE_LIST_REMOVE:121:engine_list_remove
+ENGINE_F_ENGINE_LOAD_PRIVATE_KEY:150:ENGINE_load_private_key
+ENGINE_F_ENGINE_LOAD_PUBLIC_KEY:151:ENGINE_load_public_key
+ENGINE_F_ENGINE_LOAD_SSL_CLIENT_CERT:194:ENGINE_load_ssl_client_cert
+ENGINE_F_ENGINE_NEW:122:ENGINE_new
+ENGINE_F_ENGINE_PKEY_ASN1_FIND_STR:197:ENGINE_pkey_asn1_find_str
+ENGINE_F_ENGINE_REMOVE:123:ENGINE_remove
+ENGINE_F_ENGINE_SET_DEFAULT_STRING:189:ENGINE_set_default_string
+ENGINE_F_ENGINE_SET_ID:129:ENGINE_set_id
+ENGINE_F_ENGINE_SET_NAME:130:ENGINE_set_name
+ENGINE_F_ENGINE_TABLE_REGISTER:184:engine_table_register
+ENGINE_F_ENGINE_UNLOCKED_FINISH:191:engine_unlocked_finish
+ENGINE_F_ENGINE_UP_REF:190:ENGINE_up_ref
+ENGINE_F_INT_CLEANUP_ITEM:199:int_cleanup_item
+ENGINE_F_INT_CTRL_HELPER:172:int_ctrl_helper
+ENGINE_F_INT_ENGINE_CONFIGURE:188:int_engine_configure
+ENGINE_F_INT_ENGINE_MODULE_INIT:187:int_engine_module_init
+ENGINE_F_OSSL_HMAC_INIT:200:ossl_hmac_init
+EVP_F_AESNI_INIT_KEY:165:aesni_init_key
+EVP_F_AES_GCM_CTRL:196:aes_gcm_ctrl
+EVP_F_AES_INIT_KEY:133:aes_init_key
+EVP_F_AES_OCB_CIPHER:169:aes_ocb_cipher
+EVP_F_AES_T4_INIT_KEY:178:aes_t4_init_key
+EVP_F_AES_WRAP_CIPHER:170:aes_wrap_cipher
+EVP_F_ALG_MODULE_INIT:177:alg_module_init
+EVP_F_ARIA_CCM_INIT_KEY:175:aria_ccm_init_key
+EVP_F_ARIA_GCM_CTRL:197:aria_gcm_ctrl
+EVP_F_ARIA_GCM_INIT_KEY:176:aria_gcm_init_key
+EVP_F_ARIA_INIT_KEY:185:aria_init_key
+EVP_F_B64_NEW:198:b64_new
+EVP_F_CAMELLIA_INIT_KEY:159:camellia_init_key
+EVP_F_CHACHA20_POLY1305_CTRL:182:chacha20_poly1305_ctrl
+EVP_F_CMLL_T4_INIT_KEY:179:cmll_t4_init_key
+EVP_F_DES_EDE3_WRAP_CIPHER:171:des_ede3_wrap_cipher
+EVP_F_DO_SIGVER_INIT:161:do_sigver_init
+EVP_F_ENC_NEW:199:enc_new
+EVP_F_EVP_CIPHERINIT_EX:123:EVP_CipherInit_ex
+EVP_F_EVP_CIPHER_ASN1_TO_PARAM:204:EVP_CIPHER_asn1_to_param
+EVP_F_EVP_CIPHER_CTX_COPY:163:EVP_CIPHER_CTX_copy
+EVP_F_EVP_CIPHER_CTX_CTRL:124:EVP_CIPHER_CTX_ctrl
+EVP_F_EVP_CIPHER_CTX_SET_KEY_LENGTH:122:EVP_CIPHER_CTX_set_key_length
+EVP_F_EVP_CIPHER_PARAM_TO_ASN1:205:EVP_CIPHER_param_to_asn1
+EVP_F_EVP_DECRYPTFINAL_EX:101:EVP_DecryptFinal_ex
+EVP_F_EVP_DECRYPTUPDATE:166:EVP_DecryptUpdate
+EVP_F_EVP_DIGESTFINALXOF:174:EVP_DigestFinalXOF
+EVP_F_EVP_DIGESTINIT_EX:128:EVP_DigestInit_ex
+EVP_F_EVP_ENCRYPTDECRYPTUPDATE:219:evp_EncryptDecryptUpdate
+EVP_F_EVP_ENCRYPTFINAL_EX:127:EVP_EncryptFinal_ex
+EVP_F_EVP_ENCRYPTUPDATE:167:EVP_EncryptUpdate
+EVP_F_EVP_MD_CTX_COPY_EX:110:EVP_MD_CTX_copy_ex
+EVP_F_EVP_MD_SIZE:162:EVP_MD_size
+EVP_F_EVP_OPENINIT:102:EVP_OpenInit
+EVP_F_EVP_PBE_ALG_ADD:115:EVP_PBE_alg_add
+EVP_F_EVP_PBE_ALG_ADD_TYPE:160:EVP_PBE_alg_add_type
+EVP_F_EVP_PBE_CIPHERINIT:116:EVP_PBE_CipherInit
+EVP_F_EVP_PBE_SCRYPT:181:EVP_PBE_scrypt
+EVP_F_EVP_PKCS82PKEY:111:EVP_PKCS82PKEY
+EVP_F_EVP_PKEY2PKCS8:113:EVP_PKEY2PKCS8
+EVP_F_EVP_PKEY_ASN1_ADD0:188:EVP_PKEY_asn1_add0
+EVP_F_EVP_PKEY_CHECK:186:EVP_PKEY_check
+EVP_F_EVP_PKEY_COPY_PARAMETERS:103:EVP_PKEY_copy_parameters
+EVP_F_EVP_PKEY_CTX_CTRL:137:EVP_PKEY_CTX_ctrl
+EVP_F_EVP_PKEY_CTX_CTRL_STR:150:EVP_PKEY_CTX_ctrl_str
+EVP_F_EVP_PKEY_CTX_DUP:156:EVP_PKEY_CTX_dup
+EVP_F_EVP_PKEY_CTX_MD:168:EVP_PKEY_CTX_md
+EVP_F_EVP_PKEY_DECRYPT:104:EVP_PKEY_decrypt
+EVP_F_EVP_PKEY_DECRYPT_INIT:138:EVP_PKEY_decrypt_init
+EVP_F_EVP_PKEY_DECRYPT_OLD:151:EVP_PKEY_decrypt_old
+EVP_F_EVP_PKEY_DERIVE:153:EVP_PKEY_derive
+EVP_F_EVP_PKEY_DERIVE_INIT:154:EVP_PKEY_derive_init
+EVP_F_EVP_PKEY_DERIVE_SET_PEER:155:EVP_PKEY_derive_set_peer
+EVP_F_EVP_PKEY_ENCRYPT:105:EVP_PKEY_encrypt
+EVP_F_EVP_PKEY_ENCRYPT_INIT:139:EVP_PKEY_encrypt_init
+EVP_F_EVP_PKEY_ENCRYPT_OLD:152:EVP_PKEY_encrypt_old
+EVP_F_EVP_PKEY_GET0_DH:119:EVP_PKEY_get0_DH
+EVP_F_EVP_PKEY_GET0_DSA:120:EVP_PKEY_get0_DSA
+EVP_F_EVP_PKEY_GET0_EC_KEY:131:EVP_PKEY_get0_EC_KEY
+EVP_F_EVP_PKEY_GET0_HMAC:183:EVP_PKEY_get0_hmac
+EVP_F_EVP_PKEY_GET0_POLY1305:184:EVP_PKEY_get0_poly1305
+EVP_F_EVP_PKEY_GET0_RSA:121:EVP_PKEY_get0_RSA
+EVP_F_EVP_PKEY_GET0_SIPHASH:172:EVP_PKEY_get0_siphash
+EVP_F_EVP_PKEY_GET_RAW_PRIVATE_KEY:202:EVP_PKEY_get_raw_private_key
+EVP_F_EVP_PKEY_GET_RAW_PUBLIC_KEY:203:EVP_PKEY_get_raw_public_key
+EVP_F_EVP_PKEY_KEYGEN:146:EVP_PKEY_keygen
+EVP_F_EVP_PKEY_KEYGEN_INIT:147:EVP_PKEY_keygen_init
+EVP_F_EVP_PKEY_METH_ADD0:194:EVP_PKEY_meth_add0
+EVP_F_EVP_PKEY_METH_NEW:195:EVP_PKEY_meth_new
+EVP_F_EVP_PKEY_NEW:106:EVP_PKEY_new
+EVP_F_EVP_PKEY_NEW_CMAC_KEY:193:EVP_PKEY_new_CMAC_key
+EVP_F_EVP_PKEY_NEW_RAW_PRIVATE_KEY:191:EVP_PKEY_new_raw_private_key
+EVP_F_EVP_PKEY_NEW_RAW_PUBLIC_KEY:192:EVP_PKEY_new_raw_public_key
+EVP_F_EVP_PKEY_PARAMGEN:148:EVP_PKEY_paramgen
+EVP_F_EVP_PKEY_PARAMGEN_INIT:149:EVP_PKEY_paramgen_init
+EVP_F_EVP_PKEY_PARAM_CHECK:189:EVP_PKEY_param_check
+EVP_F_EVP_PKEY_PUBLIC_CHECK:190:EVP_PKEY_public_check
+EVP_F_EVP_PKEY_SET1_ENGINE:187:EVP_PKEY_set1_engine
+EVP_F_EVP_PKEY_SET_ALIAS_TYPE:206:EVP_PKEY_set_alias_type
+EVP_F_EVP_PKEY_SIGN:140:EVP_PKEY_sign
+EVP_F_EVP_PKEY_SIGN_INIT:141:EVP_PKEY_sign_init
+EVP_F_EVP_PKEY_VERIFY:142:EVP_PKEY_verify
+EVP_F_EVP_PKEY_VERIFY_INIT:143:EVP_PKEY_verify_init
+EVP_F_EVP_PKEY_VERIFY_RECOVER:144:EVP_PKEY_verify_recover
+EVP_F_EVP_PKEY_VERIFY_RECOVER_INIT:145:EVP_PKEY_verify_recover_init
+EVP_F_EVP_SIGNFINAL:107:EVP_SignFinal
+EVP_F_EVP_VERIFYFINAL:108:EVP_VerifyFinal
+EVP_F_INT_CTX_NEW:157:int_ctx_new
+EVP_F_OK_NEW:200:ok_new
+EVP_F_PKCS5_PBE_KEYIVGEN:117:PKCS5_PBE_keyivgen
+EVP_F_PKCS5_V2_PBE_KEYIVGEN:118:PKCS5_v2_PBE_keyivgen
+EVP_F_PKCS5_V2_PBKDF2_KEYIVGEN:164:PKCS5_v2_PBKDF2_keyivgen
+EVP_F_PKCS5_V2_SCRYPT_KEYIVGEN:180:PKCS5_v2_scrypt_keyivgen
+EVP_F_PKEY_SET_TYPE:158:pkey_set_type
+EVP_F_RC2_MAGIC_TO_METH:109:rc2_magic_to_meth
+EVP_F_RC5_CTRL:125:rc5_ctrl
+EVP_F_S390X_AES_GCM_CTRL:201:s390x_aes_gcm_ctrl
+EVP_F_UPDATE:173:update
+KDF_F_PKEY_HKDF_CTRL_STR:103:pkey_hkdf_ctrl_str
+KDF_F_PKEY_HKDF_DERIVE:102:pkey_hkdf_derive
+KDF_F_PKEY_HKDF_INIT:108:pkey_hkdf_init
+KDF_F_PKEY_SCRYPT_CTRL_STR:104:pkey_scrypt_ctrl_str
+KDF_F_PKEY_SCRYPT_CTRL_UINT64:105:pkey_scrypt_ctrl_uint64
+KDF_F_PKEY_SCRYPT_DERIVE:109:pkey_scrypt_derive
+KDF_F_PKEY_SCRYPT_INIT:106:pkey_scrypt_init
+KDF_F_PKEY_SCRYPT_SET_MEMBUF:107:pkey_scrypt_set_membuf
+KDF_F_PKEY_TLS1_PRF_CTRL_STR:100:pkey_tls1_prf_ctrl_str
+KDF_F_PKEY_TLS1_PRF_DERIVE:101:pkey_tls1_prf_derive
+KDF_F_PKEY_TLS1_PRF_INIT:110:pkey_tls1_prf_init
+KDF_F_TLS1_PRF_ALG:111:tls1_prf_alg
+OBJ_F_OBJ_ADD_OBJECT:105:OBJ_add_object
+OBJ_F_OBJ_ADD_SIGID:107:OBJ_add_sigid
+OBJ_F_OBJ_CREATE:100:OBJ_create
+OBJ_F_OBJ_DUP:101:OBJ_dup
+OBJ_F_OBJ_NAME_NEW_INDEX:106:OBJ_NAME_new_index
+OBJ_F_OBJ_NID2LN:102:OBJ_nid2ln
+OBJ_F_OBJ_NID2OBJ:103:OBJ_nid2obj
+OBJ_F_OBJ_NID2SN:104:OBJ_nid2sn
+OBJ_F_OBJ_TXT2OBJ:108:OBJ_txt2obj
+OCSP_F_D2I_OCSP_NONCE:102:d2i_ocsp_nonce
+OCSP_F_OCSP_BASIC_ADD1_STATUS:103:OCSP_basic_add1_status
+OCSP_F_OCSP_BASIC_SIGN:104:OCSP_basic_sign
+OCSP_F_OCSP_BASIC_SIGN_CTX:119:OCSP_basic_sign_ctx
+OCSP_F_OCSP_BASIC_VERIFY:105:OCSP_basic_verify
+OCSP_F_OCSP_CERT_ID_NEW:101:OCSP_cert_id_new
+OCSP_F_OCSP_CHECK_DELEGATED:106:ocsp_check_delegated
+OCSP_F_OCSP_CHECK_IDS:107:ocsp_check_ids
+OCSP_F_OCSP_CHECK_ISSUER:108:ocsp_check_issuer
+OCSP_F_OCSP_CHECK_VALIDITY:115:OCSP_check_validity
+OCSP_F_OCSP_MATCH_ISSUERID:109:ocsp_match_issuerid
+OCSP_F_OCSP_PARSE_URL:114:OCSP_parse_url
+OCSP_F_OCSP_REQUEST_SIGN:110:OCSP_request_sign
+OCSP_F_OCSP_REQUEST_VERIFY:116:OCSP_request_verify
+OCSP_F_OCSP_RESPONSE_GET1_BASIC:111:OCSP_response_get1_basic
+OCSP_F_PARSE_HTTP_LINE1:118:parse_http_line1
+OSSL_STORE_F_FILE_CTRL:129:file_ctrl
+OSSL_STORE_F_FILE_FIND:138:file_find
+OSSL_STORE_F_FILE_GET_PASS:118:file_get_pass
+OSSL_STORE_F_FILE_LOAD:119:file_load
+OSSL_STORE_F_FILE_LOAD_TRY_DECODE:124:file_load_try_decode
+OSSL_STORE_F_FILE_NAME_TO_URI:126:file_name_to_uri
+OSSL_STORE_F_FILE_OPEN:120:file_open
+OSSL_STORE_F_OSSL_STORE_ATTACH_PEM_BIO:127:ossl_store_attach_pem_bio
+OSSL_STORE_F_OSSL_STORE_EXPECT:130:OSSL_STORE_expect
+OSSL_STORE_F_OSSL_STORE_FILE_ATTACH_PEM_BIO_INT:128:\
+	ossl_store_file_attach_pem_bio_int
+OSSL_STORE_F_OSSL_STORE_FIND:131:OSSL_STORE_find
+OSSL_STORE_F_OSSL_STORE_GET0_LOADER_INT:100:ossl_store_get0_loader_int
+OSSL_STORE_F_OSSL_STORE_INFO_GET1_CERT:101:OSSL_STORE_INFO_get1_CERT
+OSSL_STORE_F_OSSL_STORE_INFO_GET1_CRL:102:OSSL_STORE_INFO_get1_CRL
+OSSL_STORE_F_OSSL_STORE_INFO_GET1_NAME:103:OSSL_STORE_INFO_get1_NAME
+OSSL_STORE_F_OSSL_STORE_INFO_GET1_NAME_DESCRIPTION:135:\
+	OSSL_STORE_INFO_get1_NAME_description
+OSSL_STORE_F_OSSL_STORE_INFO_GET1_PARAMS:104:OSSL_STORE_INFO_get1_PARAMS
+OSSL_STORE_F_OSSL_STORE_INFO_GET1_PKEY:105:OSSL_STORE_INFO_get1_PKEY
+OSSL_STORE_F_OSSL_STORE_INFO_NEW_CERT:106:OSSL_STORE_INFO_new_CERT
+OSSL_STORE_F_OSSL_STORE_INFO_NEW_CRL:107:OSSL_STORE_INFO_new_CRL
+OSSL_STORE_F_OSSL_STORE_INFO_NEW_EMBEDDED:123:ossl_store_info_new_EMBEDDED
+OSSL_STORE_F_OSSL_STORE_INFO_NEW_NAME:109:OSSL_STORE_INFO_new_NAME
+OSSL_STORE_F_OSSL_STORE_INFO_NEW_PARAMS:110:OSSL_STORE_INFO_new_PARAMS
+OSSL_STORE_F_OSSL_STORE_INFO_NEW_PKEY:111:OSSL_STORE_INFO_new_PKEY
+OSSL_STORE_F_OSSL_STORE_INFO_SET0_NAME_DESCRIPTION:134:\
+	OSSL_STORE_INFO_set0_NAME_description
+OSSL_STORE_F_OSSL_STORE_INIT_ONCE:112:ossl_store_init_once
+OSSL_STORE_F_OSSL_STORE_LOADER_NEW:113:OSSL_STORE_LOADER_new
+OSSL_STORE_F_OSSL_STORE_OPEN:114:OSSL_STORE_open
+OSSL_STORE_F_OSSL_STORE_OPEN_INT:115:*
+OSSL_STORE_F_OSSL_STORE_REGISTER_LOADER_INT:117:ossl_store_register_loader_int
+OSSL_STORE_F_OSSL_STORE_SEARCH_BY_ALIAS:132:OSSL_STORE_SEARCH_by_alias
+OSSL_STORE_F_OSSL_STORE_SEARCH_BY_ISSUER_SERIAL:133:\
+	OSSL_STORE_SEARCH_by_issuer_serial
+OSSL_STORE_F_OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT:136:\
+	OSSL_STORE_SEARCH_by_key_fingerprint
+OSSL_STORE_F_OSSL_STORE_SEARCH_BY_NAME:137:OSSL_STORE_SEARCH_by_name
+OSSL_STORE_F_OSSL_STORE_UNREGISTER_LOADER_INT:116:\
+	ossl_store_unregister_loader_int
+OSSL_STORE_F_TRY_DECODE_PARAMS:121:try_decode_params
+OSSL_STORE_F_TRY_DECODE_PKCS12:122:try_decode_PKCS12
+OSSL_STORE_F_TRY_DECODE_PKCS8ENCRYPTED:125:try_decode_PKCS8Encrypted
+PEM_F_B2I_DSS:127:b2i_dss
+PEM_F_B2I_PVK_BIO:128:b2i_PVK_bio
+PEM_F_B2I_RSA:129:b2i_rsa
+PEM_F_CHECK_BITLEN_DSA:130:check_bitlen_dsa
+PEM_F_CHECK_BITLEN_RSA:131:check_bitlen_rsa
+PEM_F_D2I_PKCS8PRIVATEKEY_BIO:120:d2i_PKCS8PrivateKey_bio
+PEM_F_D2I_PKCS8PRIVATEKEY_FP:121:d2i_PKCS8PrivateKey_fp
+PEM_F_DO_B2I:132:do_b2i
+PEM_F_DO_B2I_BIO:133:do_b2i_bio
+PEM_F_DO_BLOB_HEADER:134:do_blob_header
+PEM_F_DO_I2B:146:do_i2b
+PEM_F_DO_PK8PKEY:126:do_pk8pkey
+PEM_F_DO_PK8PKEY_FP:125:do_pk8pkey_fp
+PEM_F_DO_PVK_BODY:135:do_PVK_body
+PEM_F_DO_PVK_HEADER:136:do_PVK_header
+PEM_F_GET_HEADER_AND_DATA:143:get_header_and_data
+PEM_F_GET_NAME:144:get_name
+PEM_F_I2B_PVK:137:i2b_PVK
+PEM_F_I2B_PVK_BIO:138:i2b_PVK_bio
+PEM_F_LOAD_IV:101:load_iv
+PEM_F_PEM_ASN1_READ:102:PEM_ASN1_read
+PEM_F_PEM_ASN1_READ_BIO:103:PEM_ASN1_read_bio
+PEM_F_PEM_ASN1_WRITE:104:PEM_ASN1_write
+PEM_F_PEM_ASN1_WRITE_BIO:105:PEM_ASN1_write_bio
+PEM_F_PEM_DEF_CALLBACK:100:PEM_def_callback
+PEM_F_PEM_DO_HEADER:106:PEM_do_header
+PEM_F_PEM_GET_EVP_CIPHER_INFO:107:PEM_get_EVP_CIPHER_INFO
+PEM_F_PEM_READ:108:PEM_read
+PEM_F_PEM_READ_BIO:109:PEM_read_bio
+PEM_F_PEM_READ_BIO_DHPARAMS:141:PEM_read_bio_DHparams
+PEM_F_PEM_READ_BIO_EX:145:PEM_read_bio_ex
+PEM_F_PEM_READ_BIO_PARAMETERS:140:PEM_read_bio_Parameters
+PEM_F_PEM_READ_BIO_PRIVATEKEY:123:PEM_read_bio_PrivateKey
+PEM_F_PEM_READ_DHPARAMS:142:PEM_read_DHparams
+PEM_F_PEM_READ_PRIVATEKEY:124:PEM_read_PrivateKey
+PEM_F_PEM_SIGNFINAL:112:PEM_SignFinal
+PEM_F_PEM_WRITE:113:PEM_write
+PEM_F_PEM_WRITE_BIO:114:PEM_write_bio
+PEM_F_PEM_WRITE_PRIVATEKEY:139:PEM_write_PrivateKey
+PEM_F_PEM_X509_INFO_READ:115:PEM_X509_INFO_read
+PEM_F_PEM_X509_INFO_READ_BIO:116:PEM_X509_INFO_read_bio
+PEM_F_PEM_X509_INFO_WRITE_BIO:117:PEM_X509_INFO_write_bio
+PKCS12_F_OPENSSL_ASC2UNI:121:OPENSSL_asc2uni
+PKCS12_F_OPENSSL_UNI2ASC:124:OPENSSL_uni2asc
+PKCS12_F_OPENSSL_UNI2UTF8:127:OPENSSL_uni2utf8
+PKCS12_F_OPENSSL_UTF82UNI:129:OPENSSL_utf82uni
+PKCS12_F_PKCS12_CREATE:105:PKCS12_create
+PKCS12_F_PKCS12_GEN_MAC:107:PKCS12_gen_mac
+PKCS12_F_PKCS12_INIT:109:PKCS12_init
+PKCS12_F_PKCS12_ITEM_DECRYPT_D2I:106:PKCS12_item_decrypt_d2i
+PKCS12_F_PKCS12_ITEM_I2D_ENCRYPT:108:PKCS12_item_i2d_encrypt
+PKCS12_F_PKCS12_ITEM_PACK_SAFEBAG:117:PKCS12_item_pack_safebag
+PKCS12_F_PKCS12_KEY_GEN_ASC:110:PKCS12_key_gen_asc
+PKCS12_F_PKCS12_KEY_GEN_UNI:111:PKCS12_key_gen_uni
+PKCS12_F_PKCS12_KEY_GEN_UTF8:116:PKCS12_key_gen_utf8
+PKCS12_F_PKCS12_NEWPASS:128:PKCS12_newpass
+PKCS12_F_PKCS12_PACK_P7DATA:114:PKCS12_pack_p7data
+PKCS12_F_PKCS12_PACK_P7ENCDATA:115:PKCS12_pack_p7encdata
+PKCS12_F_PKCS12_PARSE:118:PKCS12_parse
+PKCS12_F_PKCS12_PBE_CRYPT:119:PKCS12_pbe_crypt
+PKCS12_F_PKCS12_PBE_KEYIVGEN:120:PKCS12_PBE_keyivgen
+PKCS12_F_PKCS12_SAFEBAG_CREATE0_P8INF:112:PKCS12_SAFEBAG_create0_p8inf
+PKCS12_F_PKCS12_SAFEBAG_CREATE0_PKCS8:113:PKCS12_SAFEBAG_create0_pkcs8
+PKCS12_F_PKCS12_SAFEBAG_CREATE_PKCS8_ENCRYPT:133:\
+	PKCS12_SAFEBAG_create_pkcs8_encrypt
+PKCS12_F_PKCS12_SETUP_MAC:122:PKCS12_setup_mac
+PKCS12_F_PKCS12_SET_MAC:123:PKCS12_set_mac
+PKCS12_F_PKCS12_UNPACK_AUTHSAFES:130:PKCS12_unpack_authsafes
+PKCS12_F_PKCS12_UNPACK_P7DATA:131:PKCS12_unpack_p7data
+PKCS12_F_PKCS12_VERIFY_MAC:126:PKCS12_verify_mac
+PKCS12_F_PKCS8_ENCRYPT:125:PKCS8_encrypt
+PKCS12_F_PKCS8_SET0_PBE:132:PKCS8_set0_pbe
+PKCS7_F_DO_PKCS7_SIGNED_ATTRIB:136:do_pkcs7_signed_attrib
+PKCS7_F_PKCS7_ADD0_ATTRIB_SIGNING_TIME:135:PKCS7_add0_attrib_signing_time
+PKCS7_F_PKCS7_ADD_ATTRIB_SMIMECAP:118:PKCS7_add_attrib_smimecap
+PKCS7_F_PKCS7_ADD_CERTIFICATE:100:PKCS7_add_certificate
+PKCS7_F_PKCS7_ADD_CRL:101:PKCS7_add_crl
+PKCS7_F_PKCS7_ADD_RECIPIENT_INFO:102:PKCS7_add_recipient_info
+PKCS7_F_PKCS7_ADD_SIGNATURE:131:PKCS7_add_signature
+PKCS7_F_PKCS7_ADD_SIGNER:103:PKCS7_add_signer
+PKCS7_F_PKCS7_BIO_ADD_DIGEST:125:PKCS7_bio_add_digest
+PKCS7_F_PKCS7_COPY_EXISTING_DIGEST:138:pkcs7_copy_existing_digest
+PKCS7_F_PKCS7_CTRL:104:PKCS7_ctrl
+PKCS7_F_PKCS7_DATADECODE:112:PKCS7_dataDecode
+PKCS7_F_PKCS7_DATAFINAL:128:PKCS7_dataFinal
+PKCS7_F_PKCS7_DATAINIT:105:PKCS7_dataInit
+PKCS7_F_PKCS7_DATAVERIFY:107:PKCS7_dataVerify
+PKCS7_F_PKCS7_DECRYPT:114:PKCS7_decrypt
+PKCS7_F_PKCS7_DECRYPT_RINFO:133:pkcs7_decrypt_rinfo
+PKCS7_F_PKCS7_ENCODE_RINFO:132:pkcs7_encode_rinfo
+PKCS7_F_PKCS7_ENCRYPT:115:PKCS7_encrypt
+PKCS7_F_PKCS7_FINAL:134:PKCS7_final
+PKCS7_F_PKCS7_FIND_DIGEST:127:PKCS7_find_digest
+PKCS7_F_PKCS7_GET0_SIGNERS:124:PKCS7_get0_signers
+PKCS7_F_PKCS7_RECIP_INFO_SET:130:PKCS7_RECIP_INFO_set
+PKCS7_F_PKCS7_SET_CIPHER:108:PKCS7_set_cipher
+PKCS7_F_PKCS7_SET_CONTENT:109:PKCS7_set_content
+PKCS7_F_PKCS7_SET_DIGEST:126:PKCS7_set_digest
+PKCS7_F_PKCS7_SET_TYPE:110:PKCS7_set_type
+PKCS7_F_PKCS7_SIGN:116:PKCS7_sign
+PKCS7_F_PKCS7_SIGNATUREVERIFY:113:PKCS7_signatureVerify
+PKCS7_F_PKCS7_SIGNER_INFO_SET:129:PKCS7_SIGNER_INFO_set
+PKCS7_F_PKCS7_SIGNER_INFO_SIGN:139:PKCS7_SIGNER_INFO_sign
+PKCS7_F_PKCS7_SIGN_ADD_SIGNER:137:PKCS7_sign_add_signer
+PKCS7_F_PKCS7_SIMPLE_SMIMECAP:119:PKCS7_simple_smimecap
+PKCS7_F_PKCS7_VERIFY:117:PKCS7_verify
+RAND_F_DRBG_BYTES:101:drbg_bytes
+RAND_F_DRBG_GET_ENTROPY:105:drbg_get_entropy
+RAND_F_DRBG_SETUP:117:drbg_setup
+RAND_F_GET_ENTROPY:106:get_entropy
+RAND_F_RAND_BYTES:100:RAND_bytes
+RAND_F_RAND_DRBG_ENABLE_LOCKING:119:rand_drbg_enable_locking
+RAND_F_RAND_DRBG_GENERATE:107:RAND_DRBG_generate
+RAND_F_RAND_DRBG_GET_ENTROPY:120:rand_drbg_get_entropy
+RAND_F_RAND_DRBG_GET_NONCE:123:rand_drbg_get_nonce
+RAND_F_RAND_DRBG_INSTANTIATE:108:RAND_DRBG_instantiate
+RAND_F_RAND_DRBG_NEW:109:RAND_DRBG_new
+RAND_F_RAND_DRBG_RESEED:110:RAND_DRBG_reseed
+RAND_F_RAND_DRBG_RESTART:102:rand_drbg_restart
+RAND_F_RAND_DRBG_SET:104:RAND_DRBG_set
+RAND_F_RAND_DRBG_SET_DEFAULTS:121:RAND_DRBG_set_defaults
+RAND_F_RAND_DRBG_UNINSTANTIATE:118:RAND_DRBG_uninstantiate
+RAND_F_RAND_LOAD_FILE:111:RAND_load_file
+RAND_F_RAND_POOL_ACQUIRE_ENTROPY:122:rand_pool_acquire_entropy
+RAND_F_RAND_POOL_ADD:103:rand_pool_add
+RAND_F_RAND_POOL_ADD_BEGIN:113:rand_pool_add_begin
+RAND_F_RAND_POOL_ADD_END:114:rand_pool_add_end
+RAND_F_RAND_POOL_ATTACH:124:rand_pool_attach
+RAND_F_RAND_POOL_BYTES_NEEDED:115:rand_pool_bytes_needed
+RAND_F_RAND_POOL_NEW:116:rand_pool_new
+RAND_F_RAND_WRITE_FILE:112:RAND_write_file
+RSA_F_CHECK_PADDING_MD:140:check_padding_md
+RSA_F_ENCODE_PKCS1:146:encode_pkcs1
+RSA_F_INT_RSA_VERIFY:145:int_rsa_verify
+RSA_F_OLD_RSA_PRIV_DECODE:147:old_rsa_priv_decode
+RSA_F_PKEY_PSS_INIT:165:pkey_pss_init
+RSA_F_PKEY_RSA_CTRL:143:pkey_rsa_ctrl
+RSA_F_PKEY_RSA_CTRL_STR:144:pkey_rsa_ctrl_str
+RSA_F_PKEY_RSA_SIGN:142:pkey_rsa_sign
+RSA_F_PKEY_RSA_VERIFY:149:pkey_rsa_verify
+RSA_F_PKEY_RSA_VERIFYRECOVER:141:pkey_rsa_verifyrecover
+RSA_F_RSA_ALGOR_TO_MD:156:rsa_algor_to_md
+RSA_F_RSA_BUILTIN_KEYGEN:129:rsa_builtin_keygen
+RSA_F_RSA_CHECK_KEY:123:RSA_check_key
+RSA_F_RSA_CHECK_KEY_EX:160:RSA_check_key_ex
+RSA_F_RSA_CMS_DECRYPT:159:rsa_cms_decrypt
+RSA_F_RSA_CMS_VERIFY:158:rsa_cms_verify
+RSA_F_RSA_ITEM_VERIFY:148:rsa_item_verify
+RSA_F_RSA_METH_DUP:161:RSA_meth_dup
+RSA_F_RSA_METH_NEW:162:RSA_meth_new
+RSA_F_RSA_METH_SET1_NAME:163:RSA_meth_set1_name
+RSA_F_RSA_MGF1_TO_MD:157:*
+RSA_F_RSA_MULTIP_INFO_NEW:166:rsa_multip_info_new
+RSA_F_RSA_NEW_METHOD:106:RSA_new_method
+RSA_F_RSA_NULL:124:*
+RSA_F_RSA_NULL_PRIVATE_DECRYPT:132:*
+RSA_F_RSA_NULL_PRIVATE_ENCRYPT:133:*
+RSA_F_RSA_NULL_PUBLIC_DECRYPT:134:*
+RSA_F_RSA_NULL_PUBLIC_ENCRYPT:135:*
+RSA_F_RSA_OSSL_PRIVATE_DECRYPT:101:rsa_ossl_private_decrypt
+RSA_F_RSA_OSSL_PRIVATE_ENCRYPT:102:rsa_ossl_private_encrypt
+RSA_F_RSA_OSSL_PUBLIC_DECRYPT:103:rsa_ossl_public_decrypt
+RSA_F_RSA_OSSL_PUBLIC_ENCRYPT:104:rsa_ossl_public_encrypt
+RSA_F_RSA_PADDING_ADD_NONE:107:RSA_padding_add_none
+RSA_F_RSA_PADDING_ADD_PKCS1_OAEP:121:RSA_padding_add_PKCS1_OAEP
+RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1:154:RSA_padding_add_PKCS1_OAEP_mgf1
+RSA_F_RSA_PADDING_ADD_PKCS1_PSS:125:RSA_padding_add_PKCS1_PSS
+RSA_F_RSA_PADDING_ADD_PKCS1_PSS_MGF1:152:RSA_padding_add_PKCS1_PSS_mgf1
+RSA_F_RSA_PADDING_ADD_PKCS1_TYPE_1:108:RSA_padding_add_PKCS1_type_1
+RSA_F_RSA_PADDING_ADD_PKCS1_TYPE_2:109:RSA_padding_add_PKCS1_type_2
+RSA_F_RSA_PADDING_ADD_SSLV23:110:RSA_padding_add_SSLv23
+RSA_F_RSA_PADDING_ADD_X931:127:RSA_padding_add_X931
+RSA_F_RSA_PADDING_CHECK_NONE:111:RSA_padding_check_none
+RSA_F_RSA_PADDING_CHECK_PKCS1_OAEP:122:RSA_padding_check_PKCS1_OAEP
+RSA_F_RSA_PADDING_CHECK_PKCS1_OAEP_MGF1:153:RSA_padding_check_PKCS1_OAEP_mgf1
+RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_1:112:RSA_padding_check_PKCS1_type_1
+RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_2:113:RSA_padding_check_PKCS1_type_2
+RSA_F_RSA_PADDING_CHECK_SSLV23:114:RSA_padding_check_SSLv23
+RSA_F_RSA_PADDING_CHECK_X931:128:RSA_padding_check_X931
+RSA_F_RSA_PARAM_DECODE:164:rsa_param_decode
+RSA_F_RSA_PRINT:115:RSA_print
+RSA_F_RSA_PRINT_FP:116:RSA_print_fp
+RSA_F_RSA_PRIV_DECODE:150:rsa_priv_decode
+RSA_F_RSA_PRIV_ENCODE:138:rsa_priv_encode
+RSA_F_RSA_PSS_GET_PARAM:151:rsa_pss_get_param
+RSA_F_RSA_PSS_TO_CTX:155:rsa_pss_to_ctx
+RSA_F_RSA_PUB_DECODE:139:rsa_pub_decode
+RSA_F_RSA_SETUP_BLINDING:136:RSA_setup_blinding
+RSA_F_RSA_SIGN:117:RSA_sign
+RSA_F_RSA_SIGN_ASN1_OCTET_STRING:118:RSA_sign_ASN1_OCTET_STRING
+RSA_F_RSA_VERIFY:119:RSA_verify
+RSA_F_RSA_VERIFY_ASN1_OCTET_STRING:120:RSA_verify_ASN1_OCTET_STRING
+RSA_F_RSA_VERIFY_PKCS1_PSS_MGF1:126:RSA_verify_PKCS1_PSS_mgf1
+RSA_F_SETUP_TBUF:167:setup_tbuf
+SM2_F_PKEY_SM2_COPY:115:pkey_sm2_copy
+SM2_F_PKEY_SM2_CTRL:109:pkey_sm2_ctrl
+SM2_F_PKEY_SM2_CTRL_STR:110:pkey_sm2_ctrl_str
+SM2_F_PKEY_SM2_DIGEST_CUSTOM:114:pkey_sm2_digest_custom
+SM2_F_PKEY_SM2_INIT:111:pkey_sm2_init
+SM2_F_PKEY_SM2_SIGN:112:pkey_sm2_sign
+SM2_F_SM2_COMPUTE_MSG_HASH:100:sm2_compute_msg_hash
+SM2_F_SM2_COMPUTE_USERID_DIGEST:101:sm2_compute_userid_digest
+SM2_F_SM2_COMPUTE_Z_DIGEST:113:sm2_compute_z_digest
+SM2_F_SM2_DECRYPT:102:sm2_decrypt
+SM2_F_SM2_ENCRYPT:103:sm2_encrypt
+SM2_F_SM2_PLAINTEXT_SIZE:104:sm2_plaintext_size
+SM2_F_SM2_SIGN:105:sm2_sign
+SM2_F_SM2_SIG_GEN:106:sm2_sig_gen
+SM2_F_SM2_SIG_VERIFY:107:sm2_sig_verify
+SM2_F_SM2_VERIFY:108:sm2_verify
+SSL_F_ADD_CLIENT_KEY_SHARE_EXT:438:*
+SSL_F_ADD_KEY_SHARE:512:add_key_share
+SSL_F_BYTES_TO_CIPHER_LIST:519:bytes_to_cipher_list
+SSL_F_CHECK_SUITEB_CIPHER_LIST:331:check_suiteb_cipher_list
+SSL_F_CIPHERSUITE_CB:622:ciphersuite_cb
+SSL_F_CONSTRUCT_CA_NAMES:552:construct_ca_names
+SSL_F_CONSTRUCT_KEY_EXCHANGE_TBS:553:construct_key_exchange_tbs
+SSL_F_CONSTRUCT_STATEFUL_TICKET:636:construct_stateful_ticket
+SSL_F_CONSTRUCT_STATELESS_TICKET:637:construct_stateless_ticket
+SSL_F_CREATE_SYNTHETIC_MESSAGE_HASH:539:create_synthetic_message_hash
+SSL_F_CREATE_TICKET_PREQUEL:638:create_ticket_prequel
+SSL_F_CT_MOVE_SCTS:345:ct_move_scts
+SSL_F_CT_STRICT:349:ct_strict
+SSL_F_CUSTOM_EXT_ADD:554:custom_ext_add
+SSL_F_CUSTOM_EXT_PARSE:555:custom_ext_parse
+SSL_F_D2I_SSL_SESSION:103:d2i_SSL_SESSION
+SSL_F_DANE_CTX_ENABLE:347:dane_ctx_enable
+SSL_F_DANE_MTYPE_SET:393:dane_mtype_set
+SSL_F_DANE_TLSA_ADD:394:dane_tlsa_add
+SSL_F_DERIVE_SECRET_KEY_AND_IV:514:derive_secret_key_and_iv
+SSL_F_DO_DTLS1_WRITE:245:do_dtls1_write
+SSL_F_DO_SSL3_WRITE:104:do_ssl3_write
+SSL_F_DTLS1_BUFFER_RECORD:247:dtls1_buffer_record
+SSL_F_DTLS1_CHECK_TIMEOUT_NUM:318:dtls1_check_timeout_num
+SSL_F_DTLS1_HEARTBEAT:305:*
+SSL_F_DTLS1_HM_FRAGMENT_NEW:623:dtls1_hm_fragment_new
+SSL_F_DTLS1_PREPROCESS_FRAGMENT:288:dtls1_preprocess_fragment
+SSL_F_DTLS1_PROCESS_BUFFERED_RECORDS:424:dtls1_process_buffered_records
+SSL_F_DTLS1_PROCESS_RECORD:257:dtls1_process_record
+SSL_F_DTLS1_READ_BYTES:258:dtls1_read_bytes
+SSL_F_DTLS1_READ_FAILED:339:dtls1_read_failed
+SSL_F_DTLS1_RETRANSMIT_MESSAGE:390:dtls1_retransmit_message
+SSL_F_DTLS1_WRITE_APP_DATA_BYTES:268:dtls1_write_app_data_bytes
+SSL_F_DTLS1_WRITE_BYTES:545:dtls1_write_bytes
+SSL_F_DTLSV1_LISTEN:350:DTLSv1_listen
+SSL_F_DTLS_CONSTRUCT_CHANGE_CIPHER_SPEC:371:dtls_construct_change_cipher_spec
+SSL_F_DTLS_CONSTRUCT_HELLO_VERIFY_REQUEST:385:\
+	dtls_construct_hello_verify_request
+SSL_F_DTLS_GET_REASSEMBLED_MESSAGE:370:dtls_get_reassembled_message
+SSL_F_DTLS_PROCESS_HELLO_VERIFY:386:dtls_process_hello_verify
+SSL_F_DTLS_RECORD_LAYER_NEW:635:DTLS_RECORD_LAYER_new
+SSL_F_DTLS_WAIT_FOR_DRY:592:dtls_wait_for_dry
+SSL_F_EARLY_DATA_COUNT_OK:532:early_data_count_ok
+SSL_F_FINAL_EARLY_DATA:556:final_early_data
+SSL_F_FINAL_EC_PT_FORMATS:485:final_ec_pt_formats
+SSL_F_FINAL_EMS:486:final_ems
+SSL_F_FINAL_KEY_SHARE:503:final_key_share
+SSL_F_FINAL_MAXFRAGMENTLEN:557:final_maxfragmentlen
+SSL_F_FINAL_RENEGOTIATE:483:final_renegotiate
+SSL_F_FINAL_SERVER_NAME:558:final_server_name
+SSL_F_FINAL_SIG_ALGS:497:final_sig_algs
+SSL_F_GET_CERT_VERIFY_TBS_DATA:588:get_cert_verify_tbs_data
+SSL_F_NSS_KEYLOG_INT:500:nss_keylog_int
+SSL_F_OPENSSL_INIT_SSL:342:OPENSSL_init_ssl
+SSL_F_OSSL_STATEM_CLIENT13_READ_TRANSITION:436:*
+SSL_F_OSSL_STATEM_CLIENT13_WRITE_TRANSITION:598:\
+	ossl_statem_client13_write_transition
+SSL_F_OSSL_STATEM_CLIENT_CONSTRUCT_MESSAGE:430:*
+SSL_F_OSSL_STATEM_CLIENT_POST_PROCESS_MESSAGE:593:\
+	ossl_statem_client_post_process_message
+SSL_F_OSSL_STATEM_CLIENT_PROCESS_MESSAGE:594:ossl_statem_client_process_message
+SSL_F_OSSL_STATEM_CLIENT_READ_TRANSITION:417:ossl_statem_client_read_transition
+SSL_F_OSSL_STATEM_CLIENT_WRITE_TRANSITION:599:\
+	ossl_statem_client_write_transition
+SSL_F_OSSL_STATEM_SERVER13_READ_TRANSITION:437:*
+SSL_F_OSSL_STATEM_SERVER13_WRITE_TRANSITION:600:\
+	ossl_statem_server13_write_transition
+SSL_F_OSSL_STATEM_SERVER_CONSTRUCT_MESSAGE:431:*
+SSL_F_OSSL_STATEM_SERVER_POST_PROCESS_MESSAGE:601:\
+	ossl_statem_server_post_process_message
+SSL_F_OSSL_STATEM_SERVER_POST_WORK:602:ossl_statem_server_post_work
+SSL_F_OSSL_STATEM_SERVER_PROCESS_MESSAGE:603:ossl_statem_server_process_message
+SSL_F_OSSL_STATEM_SERVER_READ_TRANSITION:418:ossl_statem_server_read_transition
+SSL_F_OSSL_STATEM_SERVER_WRITE_TRANSITION:604:\
+	ossl_statem_server_write_transition
+SSL_F_PARSE_CA_NAMES:541:parse_ca_names
+SSL_F_PITEM_NEW:624:pitem_new
+SSL_F_PQUEUE_NEW:625:pqueue_new
+SSL_F_PROCESS_KEY_SHARE_EXT:439:*
+SSL_F_READ_STATE_MACHINE:352:read_state_machine
+SSL_F_SET_CLIENT_CIPHERSUITE:540:set_client_ciphersuite
+SSL_F_SRP_GENERATE_CLIENT_MASTER_SECRET:595:srp_generate_client_master_secret
+SSL_F_SRP_GENERATE_SERVER_MASTER_SECRET:589:srp_generate_server_master_secret
+SSL_F_SRP_VERIFY_SERVER_PARAM:596:srp_verify_server_param
+SSL_F_SSL3_CHANGE_CIPHER_STATE:129:ssl3_change_cipher_state
+SSL_F_SSL3_CHECK_CERT_AND_ALGORITHM:130:ssl3_check_cert_and_algorithm
+SSL_F_SSL3_CTRL:213:ssl3_ctrl
+SSL_F_SSL3_CTX_CTRL:133:ssl3_ctx_ctrl
+SSL_F_SSL3_DIGEST_CACHED_RECORDS:293:ssl3_digest_cached_records
+SSL_F_SSL3_DO_CHANGE_CIPHER_SPEC:292:ssl3_do_change_cipher_spec
+SSL_F_SSL3_ENC:608:ssl3_enc
+SSL_F_SSL3_FINAL_FINISH_MAC:285:ssl3_final_finish_mac
+SSL_F_SSL3_FINISH_MAC:587:ssl3_finish_mac
+SSL_F_SSL3_GENERATE_KEY_BLOCK:238:ssl3_generate_key_block
+SSL_F_SSL3_GENERATE_MASTER_SECRET:388:ssl3_generate_master_secret
+SSL_F_SSL3_GET_RECORD:143:ssl3_get_record
+SSL_F_SSL3_INIT_FINISHED_MAC:397:ssl3_init_finished_mac
+SSL_F_SSL3_OUTPUT_CERT_CHAIN:147:ssl3_output_cert_chain
+SSL_F_SSL3_READ_BYTES:148:ssl3_read_bytes
+SSL_F_SSL3_READ_N:149:ssl3_read_n
+SSL_F_SSL3_SETUP_KEY_BLOCK:157:ssl3_setup_key_block
+SSL_F_SSL3_SETUP_READ_BUFFER:156:ssl3_setup_read_buffer
+SSL_F_SSL3_SETUP_WRITE_BUFFER:291:ssl3_setup_write_buffer
+SSL_F_SSL3_WRITE_BYTES:158:ssl3_write_bytes
+SSL_F_SSL3_WRITE_PENDING:159:ssl3_write_pending
+SSL_F_SSL_ADD_CERT_CHAIN:316:ssl_add_cert_chain
+SSL_F_SSL_ADD_CERT_TO_BUF:319:*
+SSL_F_SSL_ADD_CERT_TO_WPACKET:493:ssl_add_cert_to_wpacket
+SSL_F_SSL_ADD_CLIENTHELLO_RENEGOTIATE_EXT:298:*
+SSL_F_SSL_ADD_CLIENTHELLO_TLSEXT:277:*
+SSL_F_SSL_ADD_CLIENTHELLO_USE_SRTP_EXT:307:*
+SSL_F_SSL_ADD_DIR_CERT_SUBJECTS_TO_STACK:215:SSL_add_dir_cert_subjects_to_stack
+SSL_F_SSL_ADD_FILE_CERT_SUBJECTS_TO_STACK:216:\
+	SSL_add_file_cert_subjects_to_stack
+SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT:299:*
+SSL_F_SSL_ADD_SERVERHELLO_TLSEXT:278:*
+SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT:308:*
+SSL_F_SSL_BAD_METHOD:160:ssl_bad_method
+SSL_F_SSL_BUILD_CERT_CHAIN:332:ssl_build_cert_chain
+SSL_F_SSL_BYTES_TO_CIPHER_LIST:161:SSL_bytes_to_cipher_list
+SSL_F_SSL_CACHE_CIPHERLIST:520:ssl_cache_cipherlist
+SSL_F_SSL_CERT_ADD0_CHAIN_CERT:346:ssl_cert_add0_chain_cert
+SSL_F_SSL_CERT_DUP:221:ssl_cert_dup
+SSL_F_SSL_CERT_NEW:162:ssl_cert_new
+SSL_F_SSL_CERT_SET0_CHAIN:340:ssl_cert_set0_chain
+SSL_F_SSL_CHECK_PRIVATE_KEY:163:SSL_check_private_key
+SSL_F_SSL_CHECK_SERVERHELLO_TLSEXT:280:*
+SSL_F_SSL_CHECK_SRP_EXT_CLIENTHELLO:606:ssl_check_srp_ext_ClientHello
+SSL_F_SSL_CHECK_SRVR_ECC_CERT_AND_ALG:279:ssl_check_srvr_ecc_cert_and_alg
+SSL_F_SSL_CHOOSE_CLIENT_VERSION:607:ssl_choose_client_version
+SSL_F_SSL_CIPHER_DESCRIPTION:626:SSL_CIPHER_description
+SSL_F_SSL_CIPHER_LIST_TO_BYTES:425:ssl_cipher_list_to_bytes
+SSL_F_SSL_CIPHER_PROCESS_RULESTR:230:ssl_cipher_process_rulestr
+SSL_F_SSL_CIPHER_STRENGTH_SORT:231:ssl_cipher_strength_sort
+SSL_F_SSL_CLEAR:164:SSL_clear
+SSL_F_SSL_CLIENT_HELLO_GET1_EXTENSIONS_PRESENT:627:\
+	SSL_client_hello_get1_extensions_present
+SSL_F_SSL_COMP_ADD_COMPRESSION_METHOD:165:SSL_COMP_add_compression_method
+SSL_F_SSL_CONF_CMD:334:SSL_CONF_cmd
+SSL_F_SSL_CREATE_CIPHER_LIST:166:ssl_create_cipher_list
+SSL_F_SSL_CTRL:232:SSL_ctrl
+SSL_F_SSL_CTX_CHECK_PRIVATE_KEY:168:SSL_CTX_check_private_key
+SSL_F_SSL_CTX_ENABLE_CT:398:SSL_CTX_enable_ct
+SSL_F_SSL_CTX_MAKE_PROFILES:309:ssl_ctx_make_profiles
+SSL_F_SSL_CTX_NEW:169:SSL_CTX_new
+SSL_F_SSL_CTX_SET_ALPN_PROTOS:343:SSL_CTX_set_alpn_protos
+SSL_F_SSL_CTX_SET_CIPHER_LIST:269:SSL_CTX_set_cipher_list
+SSL_F_SSL_CTX_SET_CLIENT_CERT_ENGINE:290:SSL_CTX_set_client_cert_engine
+SSL_F_SSL_CTX_SET_CT_VALIDATION_CALLBACK:396:SSL_CTX_set_ct_validation_callback
+SSL_F_SSL_CTX_SET_SESSION_ID_CONTEXT:219:SSL_CTX_set_session_id_context
+SSL_F_SSL_CTX_SET_SSL_VERSION:170:SSL_CTX_set_ssl_version
+SSL_F_SSL_CTX_SET_TLSEXT_MAX_FRAGMENT_LENGTH:551:\
+	SSL_CTX_set_tlsext_max_fragment_length
+SSL_F_SSL_CTX_USE_CERTIFICATE:171:SSL_CTX_use_certificate
+SSL_F_SSL_CTX_USE_CERTIFICATE_ASN1:172:SSL_CTX_use_certificate_ASN1
+SSL_F_SSL_CTX_USE_CERTIFICATE_FILE:173:SSL_CTX_use_certificate_file
+SSL_F_SSL_CTX_USE_PRIVATEKEY:174:SSL_CTX_use_PrivateKey
+SSL_F_SSL_CTX_USE_PRIVATEKEY_ASN1:175:SSL_CTX_use_PrivateKey_ASN1
+SSL_F_SSL_CTX_USE_PRIVATEKEY_FILE:176:SSL_CTX_use_PrivateKey_file
+SSL_F_SSL_CTX_USE_PSK_IDENTITY_HINT:272:SSL_CTX_use_psk_identity_hint
+SSL_F_SSL_CTX_USE_RSAPRIVATEKEY:177:SSL_CTX_use_RSAPrivateKey
+SSL_F_SSL_CTX_USE_RSAPRIVATEKEY_ASN1:178:SSL_CTX_use_RSAPrivateKey_ASN1
+SSL_F_SSL_CTX_USE_RSAPRIVATEKEY_FILE:179:SSL_CTX_use_RSAPrivateKey_file
+SSL_F_SSL_CTX_USE_SERVERINFO:336:SSL_CTX_use_serverinfo
+SSL_F_SSL_CTX_USE_SERVERINFO_EX:543:SSL_CTX_use_serverinfo_ex
+SSL_F_SSL_CTX_USE_SERVERINFO_FILE:337:SSL_CTX_use_serverinfo_file
+SSL_F_SSL_DANE_DUP:403:ssl_dane_dup
+SSL_F_SSL_DANE_ENABLE:395:SSL_dane_enable
+SSL_F_SSL_DERIVE:590:ssl_derive
+SSL_F_SSL_DO_CONFIG:391:ssl_do_config
+SSL_F_SSL_DO_HANDSHAKE:180:SSL_do_handshake
+SSL_F_SSL_DUP_CA_LIST:408:SSL_dup_CA_list
+SSL_F_SSL_ENABLE_CT:402:SSL_enable_ct
+SSL_F_SSL_GENERATE_PKEY_GROUP:559:ssl_generate_pkey_group
+SSL_F_SSL_GENERATE_SESSION_ID:547:ssl_generate_session_id
+SSL_F_SSL_GET_NEW_SESSION:181:ssl_get_new_session
+SSL_F_SSL_GET_PREV_SESSION:217:ssl_get_prev_session
+SSL_F_SSL_GET_SERVER_CERT_INDEX:322:*
+SSL_F_SSL_GET_SIGN_PKEY:183:*
+SSL_F_SSL_HANDSHAKE_HASH:560:ssl_handshake_hash
+SSL_F_SSL_INIT_WBIO_BUFFER:184:ssl_init_wbio_buffer
+SSL_F_SSL_KEY_UPDATE:515:SSL_key_update
+SSL_F_SSL_LOAD_CLIENT_CA_FILE:185:SSL_load_client_CA_file
+SSL_F_SSL_LOG_MASTER_SECRET:498:*
+SSL_F_SSL_LOG_RSA_CLIENT_KEY_EXCHANGE:499:ssl_log_rsa_client_key_exchange
+SSL_F_SSL_MODULE_INIT:392:ssl_module_init
+SSL_F_SSL_NEW:186:SSL_new
+SSL_F_SSL_NEXT_PROTO_VALIDATE:565:ssl_next_proto_validate
+SSL_F_SSL_PARSE_CLIENTHELLO_RENEGOTIATE_EXT:300:*
+SSL_F_SSL_PARSE_CLIENTHELLO_TLSEXT:302:*
+SSL_F_SSL_PARSE_CLIENTHELLO_USE_SRTP_EXT:310:*
+SSL_F_SSL_PARSE_SERVERHELLO_RENEGOTIATE_EXT:301:*
+SSL_F_SSL_PARSE_SERVERHELLO_TLSEXT:303:*
+SSL_F_SSL_PARSE_SERVERHELLO_USE_SRTP_EXT:311:*
+SSL_F_SSL_PEEK:270:SSL_peek
+SSL_F_SSL_PEEK_EX:432:SSL_peek_ex
+SSL_F_SSL_PEEK_INTERNAL:522:ssl_peek_internal
+SSL_F_SSL_READ:223:SSL_read
+SSL_F_SSL_READ_EARLY_DATA:529:SSL_read_early_data
+SSL_F_SSL_READ_EX:434:SSL_read_ex
+SSL_F_SSL_READ_INTERNAL:523:ssl_read_internal
+SSL_F_SSL_RENEGOTIATE:516:SSL_renegotiate
+SSL_F_SSL_RENEGOTIATE_ABBREVIATED:546:SSL_renegotiate_abbreviated
+SSL_F_SSL_SCAN_CLIENTHELLO_TLSEXT:320:*
+SSL_F_SSL_SCAN_SERVERHELLO_TLSEXT:321:*
+SSL_F_SSL_SESSION_DUP:348:ssl_session_dup
+SSL_F_SSL_SESSION_NEW:189:SSL_SESSION_new
+SSL_F_SSL_SESSION_PRINT_FP:190:SSL_SESSION_print_fp
+SSL_F_SSL_SESSION_SET1_ID:423:SSL_SESSION_set1_id
+SSL_F_SSL_SESSION_SET1_ID_CONTEXT:312:SSL_SESSION_set1_id_context
+SSL_F_SSL_SET_ALPN_PROTOS:344:SSL_set_alpn_protos
+SSL_F_SSL_SET_CERT:191:ssl_set_cert
+SSL_F_SSL_SET_CERT_AND_KEY:621:ssl_set_cert_and_key
+SSL_F_SSL_SET_CIPHER_LIST:271:SSL_set_cipher_list
+SSL_F_SSL_SET_CT_VALIDATION_CALLBACK:399:SSL_set_ct_validation_callback
+SSL_F_SSL_SET_FD:192:SSL_set_fd
+SSL_F_SSL_SET_PKEY:193:ssl_set_pkey
+SSL_F_SSL_SET_RFD:194:SSL_set_rfd
+SSL_F_SSL_SET_SESSION:195:SSL_set_session
+SSL_F_SSL_SET_SESSION_ID_CONTEXT:218:SSL_set_session_id_context
+SSL_F_SSL_SET_SESSION_TICKET_EXT:294:SSL_set_session_ticket_ext
+SSL_F_SSL_SET_TLSEXT_MAX_FRAGMENT_LENGTH:550:SSL_set_tlsext_max_fragment_length
+SSL_F_SSL_SET_WFD:196:SSL_set_wfd
+SSL_F_SSL_SHUTDOWN:224:SSL_shutdown
+SSL_F_SSL_SRP_CTX_INIT:313:SSL_SRP_CTX_init
+SSL_F_SSL_START_ASYNC_JOB:389:ssl_start_async_job
+SSL_F_SSL_UNDEFINED_FUNCTION:197:ssl_undefined_function
+SSL_F_SSL_UNDEFINED_VOID_FUNCTION:244:ssl_undefined_void_function
+SSL_F_SSL_USE_CERTIFICATE:198:SSL_use_certificate
+SSL_F_SSL_USE_CERTIFICATE_ASN1:199:SSL_use_certificate_ASN1
+SSL_F_SSL_USE_CERTIFICATE_FILE:200:SSL_use_certificate_file
+SSL_F_SSL_USE_PRIVATEKEY:201:SSL_use_PrivateKey
+SSL_F_SSL_USE_PRIVATEKEY_ASN1:202:SSL_use_PrivateKey_ASN1
+SSL_F_SSL_USE_PRIVATEKEY_FILE:203:SSL_use_PrivateKey_file
+SSL_F_SSL_USE_PSK_IDENTITY_HINT:273:SSL_use_psk_identity_hint
+SSL_F_SSL_USE_RSAPRIVATEKEY:204:SSL_use_RSAPrivateKey
+SSL_F_SSL_USE_RSAPRIVATEKEY_ASN1:205:SSL_use_RSAPrivateKey_ASN1
+SSL_F_SSL_USE_RSAPRIVATEKEY_FILE:206:SSL_use_RSAPrivateKey_file
+SSL_F_SSL_VALIDATE_CT:400:ssl_validate_ct
+SSL_F_SSL_VERIFY_CERT_CHAIN:207:ssl_verify_cert_chain
+SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE:616:SSL_verify_client_post_handshake
+SSL_F_SSL_WRITE:208:SSL_write
+SSL_F_SSL_WRITE_EARLY_DATA:526:SSL_write_early_data
+SSL_F_SSL_WRITE_EARLY_FINISH:527:*
+SSL_F_SSL_WRITE_EX:433:SSL_write_ex
+SSL_F_SSL_WRITE_INTERNAL:524:ssl_write_internal
+SSL_F_STATE_MACHINE:353:state_machine
+SSL_F_TLS12_CHECK_PEER_SIGALG:333:tls12_check_peer_sigalg
+SSL_F_TLS12_COPY_SIGALGS:533:tls12_copy_sigalgs
+SSL_F_TLS13_CHANGE_CIPHER_STATE:440:tls13_change_cipher_state
+SSL_F_TLS13_ENC:609:tls13_enc
+SSL_F_TLS13_FINAL_FINISH_MAC:605:tls13_final_finish_mac
+SSL_F_TLS13_GENERATE_SECRET:591:tls13_generate_secret
+SSL_F_TLS13_HKDF_EXPAND:561:tls13_hkdf_expand
+SSL_F_TLS13_RESTORE_HANDSHAKE_DIGEST_FOR_PHA:617:\
+	tls13_restore_handshake_digest_for_pha
+SSL_F_TLS13_SAVE_HANDSHAKE_DIGEST_FOR_PHA:618:\
+	tls13_save_handshake_digest_for_pha
+SSL_F_TLS13_SETUP_KEY_BLOCK:441:tls13_setup_key_block
+SSL_F_TLS1_CHANGE_CIPHER_STATE:209:tls1_change_cipher_state
+SSL_F_TLS1_CHECK_DUPLICATE_EXTENSIONS:341:*
+SSL_F_TLS1_ENC:401:tls1_enc
+SSL_F_TLS1_EXPORT_KEYING_MATERIAL:314:tls1_export_keying_material
+SSL_F_TLS1_GET_CURVELIST:338:tls1_get_curvelist
+SSL_F_TLS1_PRF:284:tls1_PRF
+SSL_F_TLS1_SAVE_U16:628:tls1_save_u16
+SSL_F_TLS1_SETUP_KEY_BLOCK:211:tls1_setup_key_block
+SSL_F_TLS1_SET_GROUPS:629:tls1_set_groups
+SSL_F_TLS1_SET_RAW_SIGALGS:630:tls1_set_raw_sigalgs
+SSL_F_TLS1_SET_SERVER_SIGALGS:335:tls1_set_server_sigalgs
+SSL_F_TLS1_SET_SHARED_SIGALGS:631:tls1_set_shared_sigalgs
+SSL_F_TLS1_SET_SIGALGS:632:tls1_set_sigalgs
+SSL_F_TLS_CHOOSE_SIGALG:513:tls_choose_sigalg
+SSL_F_TLS_CLIENT_KEY_EXCHANGE_POST_WORK:354:tls_client_key_exchange_post_work
+SSL_F_TLS_COLLECT_EXTENSIONS:435:tls_collect_extensions
+SSL_F_TLS_CONSTRUCT_CERTIFICATE_AUTHORITIES:542:\
+	tls_construct_certificate_authorities
+SSL_F_TLS_CONSTRUCT_CERTIFICATE_REQUEST:372:tls_construct_certificate_request
+SSL_F_TLS_CONSTRUCT_CERT_STATUS:429:*
+SSL_F_TLS_CONSTRUCT_CERT_STATUS_BODY:494:tls_construct_cert_status_body
+SSL_F_TLS_CONSTRUCT_CERT_VERIFY:496:tls_construct_cert_verify
+SSL_F_TLS_CONSTRUCT_CHANGE_CIPHER_SPEC:427:tls_construct_change_cipher_spec
+SSL_F_TLS_CONSTRUCT_CKE_DHE:404:tls_construct_cke_dhe
+SSL_F_TLS_CONSTRUCT_CKE_ECDHE:405:tls_construct_cke_ecdhe
+SSL_F_TLS_CONSTRUCT_CKE_GOST:406:tls_construct_cke_gost
+SSL_F_TLS_CONSTRUCT_CKE_PSK_PREAMBLE:407:tls_construct_cke_psk_preamble
+SSL_F_TLS_CONSTRUCT_CKE_RSA:409:tls_construct_cke_rsa
+SSL_F_TLS_CONSTRUCT_CKE_SRP:410:tls_construct_cke_srp
+SSL_F_TLS_CONSTRUCT_CLIENT_CERTIFICATE:484:tls_construct_client_certificate
+SSL_F_TLS_CONSTRUCT_CLIENT_HELLO:487:tls_construct_client_hello
+SSL_F_TLS_CONSTRUCT_CLIENT_KEY_EXCHANGE:488:tls_construct_client_key_exchange
+SSL_F_TLS_CONSTRUCT_CLIENT_VERIFY:489:*
+SSL_F_TLS_CONSTRUCT_CTOS_ALPN:466:tls_construct_ctos_alpn
+SSL_F_TLS_CONSTRUCT_CTOS_CERTIFICATE:355:*
+SSL_F_TLS_CONSTRUCT_CTOS_COOKIE:535:tls_construct_ctos_cookie
+SSL_F_TLS_CONSTRUCT_CTOS_EARLY_DATA:530:tls_construct_ctos_early_data
+SSL_F_TLS_CONSTRUCT_CTOS_EC_PT_FORMATS:467:tls_construct_ctos_ec_pt_formats
+SSL_F_TLS_CONSTRUCT_CTOS_EMS:468:tls_construct_ctos_ems
+SSL_F_TLS_CONSTRUCT_CTOS_ETM:469:tls_construct_ctos_etm
+SSL_F_TLS_CONSTRUCT_CTOS_HELLO:356:*
+SSL_F_TLS_CONSTRUCT_CTOS_KEY_EXCHANGE:357:*
+SSL_F_TLS_CONSTRUCT_CTOS_KEY_SHARE:470:tls_construct_ctos_key_share
+SSL_F_TLS_CONSTRUCT_CTOS_MAXFRAGMENTLEN:549:tls_construct_ctos_maxfragmentlen
+SSL_F_TLS_CONSTRUCT_CTOS_NPN:471:tls_construct_ctos_npn
+SSL_F_TLS_CONSTRUCT_CTOS_PADDING:472:tls_construct_ctos_padding
+SSL_F_TLS_CONSTRUCT_CTOS_POST_HANDSHAKE_AUTH:619:\
+	tls_construct_ctos_post_handshake_auth
+SSL_F_TLS_CONSTRUCT_CTOS_PSK:501:tls_construct_ctos_psk
+SSL_F_TLS_CONSTRUCT_CTOS_PSK_KEX_MODES:509:tls_construct_ctos_psk_kex_modes
+SSL_F_TLS_CONSTRUCT_CTOS_RENEGOTIATE:473:tls_construct_ctos_renegotiate
+SSL_F_TLS_CONSTRUCT_CTOS_SCT:474:tls_construct_ctos_sct
+SSL_F_TLS_CONSTRUCT_CTOS_SERVER_NAME:475:tls_construct_ctos_server_name
+SSL_F_TLS_CONSTRUCT_CTOS_SESSION_TICKET:476:tls_construct_ctos_session_ticket
+SSL_F_TLS_CONSTRUCT_CTOS_SIG_ALGS:477:tls_construct_ctos_sig_algs
+SSL_F_TLS_CONSTRUCT_CTOS_SRP:478:tls_construct_ctos_srp
+SSL_F_TLS_CONSTRUCT_CTOS_STATUS_REQUEST:479:tls_construct_ctos_status_request
+SSL_F_TLS_CONSTRUCT_CTOS_SUPPORTED_GROUPS:480:\
+	tls_construct_ctos_supported_groups
+SSL_F_TLS_CONSTRUCT_CTOS_SUPPORTED_VERSIONS:481:\
+	tls_construct_ctos_supported_versions
+SSL_F_TLS_CONSTRUCT_CTOS_USE_SRTP:482:tls_construct_ctos_use_srtp
+SSL_F_TLS_CONSTRUCT_CTOS_VERIFY:358:*
+SSL_F_TLS_CONSTRUCT_ENCRYPTED_EXTENSIONS:443:tls_construct_encrypted_extensions
+SSL_F_TLS_CONSTRUCT_END_OF_EARLY_DATA:536:tls_construct_end_of_early_data
+SSL_F_TLS_CONSTRUCT_EXTENSIONS:447:tls_construct_extensions
+SSL_F_TLS_CONSTRUCT_FINISHED:359:tls_construct_finished
+SSL_F_TLS_CONSTRUCT_HELLO_REQUEST:373:*
+SSL_F_TLS_CONSTRUCT_HELLO_RETRY_REQUEST:510:tls_construct_hello_retry_request
+SSL_F_TLS_CONSTRUCT_KEY_UPDATE:517:tls_construct_key_update
+SSL_F_TLS_CONSTRUCT_NEW_SESSION_TICKET:428:tls_construct_new_session_ticket
+SSL_F_TLS_CONSTRUCT_NEXT_PROTO:426:tls_construct_next_proto
+SSL_F_TLS_CONSTRUCT_SERVER_CERTIFICATE:490:tls_construct_server_certificate
+SSL_F_TLS_CONSTRUCT_SERVER_HELLO:491:tls_construct_server_hello
+SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE:492:tls_construct_server_key_exchange
+SSL_F_TLS_CONSTRUCT_STOC_ALPN:451:tls_construct_stoc_alpn
+SSL_F_TLS_CONSTRUCT_STOC_CERTIFICATE:374:*
+SSL_F_TLS_CONSTRUCT_STOC_COOKIE:613:tls_construct_stoc_cookie
+SSL_F_TLS_CONSTRUCT_STOC_CRYPTOPRO_BUG:452:tls_construct_stoc_cryptopro_bug
+SSL_F_TLS_CONSTRUCT_STOC_DONE:375:*
+SSL_F_TLS_CONSTRUCT_STOC_EARLY_DATA:531:tls_construct_stoc_early_data
+SSL_F_TLS_CONSTRUCT_STOC_EARLY_DATA_INFO:525:*
+SSL_F_TLS_CONSTRUCT_STOC_EC_PT_FORMATS:453:tls_construct_stoc_ec_pt_formats
+SSL_F_TLS_CONSTRUCT_STOC_EMS:454:tls_construct_stoc_ems
+SSL_F_TLS_CONSTRUCT_STOC_ETM:455:tls_construct_stoc_etm
+SSL_F_TLS_CONSTRUCT_STOC_HELLO:376:*
+SSL_F_TLS_CONSTRUCT_STOC_KEY_EXCHANGE:377:*
+SSL_F_TLS_CONSTRUCT_STOC_KEY_SHARE:456:tls_construct_stoc_key_share
+SSL_F_TLS_CONSTRUCT_STOC_MAXFRAGMENTLEN:548:tls_construct_stoc_maxfragmentlen
+SSL_F_TLS_CONSTRUCT_STOC_NEXT_PROTO_NEG:457:tls_construct_stoc_next_proto_neg
+SSL_F_TLS_CONSTRUCT_STOC_PSK:504:tls_construct_stoc_psk
+SSL_F_TLS_CONSTRUCT_STOC_RENEGOTIATE:458:tls_construct_stoc_renegotiate
+SSL_F_TLS_CONSTRUCT_STOC_SERVER_NAME:459:tls_construct_stoc_server_name
+SSL_F_TLS_CONSTRUCT_STOC_SESSION_TICKET:460:tls_construct_stoc_session_ticket
+SSL_F_TLS_CONSTRUCT_STOC_STATUS_REQUEST:461:tls_construct_stoc_status_request
+SSL_F_TLS_CONSTRUCT_STOC_SUPPORTED_GROUPS:544:\
+	tls_construct_stoc_supported_groups
+SSL_F_TLS_CONSTRUCT_STOC_SUPPORTED_VERSIONS:611:\
+	tls_construct_stoc_supported_versions
+SSL_F_TLS_CONSTRUCT_STOC_USE_SRTP:462:tls_construct_stoc_use_srtp
+SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO:521:\
+	tls_early_post_process_client_hello
+SSL_F_TLS_FINISH_HANDSHAKE:597:tls_finish_handshake
+SSL_F_TLS_GET_MESSAGE_BODY:351:tls_get_message_body
+SSL_F_TLS_GET_MESSAGE_HEADER:387:tls_get_message_header
+SSL_F_TLS_HANDLE_ALPN:562:tls_handle_alpn
+SSL_F_TLS_HANDLE_STATUS_REQUEST:563:tls_handle_status_request
+SSL_F_TLS_PARSE_CERTIFICATE_AUTHORITIES:566:tls_parse_certificate_authorities
+SSL_F_TLS_PARSE_CLIENTHELLO_TLSEXT:449:*
+SSL_F_TLS_PARSE_CTOS_ALPN:567:tls_parse_ctos_alpn
+SSL_F_TLS_PARSE_CTOS_COOKIE:614:tls_parse_ctos_cookie
+SSL_F_TLS_PARSE_CTOS_EARLY_DATA:568:tls_parse_ctos_early_data
+SSL_F_TLS_PARSE_CTOS_EC_PT_FORMATS:569:tls_parse_ctos_ec_pt_formats
+SSL_F_TLS_PARSE_CTOS_EMS:570:tls_parse_ctos_ems
+SSL_F_TLS_PARSE_CTOS_KEY_SHARE:463:tls_parse_ctos_key_share
+SSL_F_TLS_PARSE_CTOS_MAXFRAGMENTLEN:571:tls_parse_ctos_maxfragmentlen
+SSL_F_TLS_PARSE_CTOS_POST_HANDSHAKE_AUTH:620:tls_parse_ctos_post_handshake_auth
+SSL_F_TLS_PARSE_CTOS_PSK:505:tls_parse_ctos_psk
+SSL_F_TLS_PARSE_CTOS_PSK_KEX_MODES:572:tls_parse_ctos_psk_kex_modes
+SSL_F_TLS_PARSE_CTOS_RENEGOTIATE:464:tls_parse_ctos_renegotiate
+SSL_F_TLS_PARSE_CTOS_SERVER_NAME:573:tls_parse_ctos_server_name
+SSL_F_TLS_PARSE_CTOS_SESSION_TICKET:574:tls_parse_ctos_session_ticket
+SSL_F_TLS_PARSE_CTOS_SIG_ALGS:575:tls_parse_ctos_sig_algs
+SSL_F_TLS_PARSE_CTOS_SIG_ALGS_CERT:615:tls_parse_ctos_sig_algs_cert
+SSL_F_TLS_PARSE_CTOS_SRP:576:tls_parse_ctos_srp
+SSL_F_TLS_PARSE_CTOS_STATUS_REQUEST:577:tls_parse_ctos_status_request
+SSL_F_TLS_PARSE_CTOS_SUPPORTED_GROUPS:578:tls_parse_ctos_supported_groups
+SSL_F_TLS_PARSE_CTOS_USE_SRTP:465:tls_parse_ctos_use_srtp
+SSL_F_TLS_PARSE_STOC_ALPN:579:tls_parse_stoc_alpn
+SSL_F_TLS_PARSE_STOC_COOKIE:534:tls_parse_stoc_cookie
+SSL_F_TLS_PARSE_STOC_EARLY_DATA:538:tls_parse_stoc_early_data
+SSL_F_TLS_PARSE_STOC_EARLY_DATA_INFO:528:*
+SSL_F_TLS_PARSE_STOC_EC_PT_FORMATS:580:tls_parse_stoc_ec_pt_formats
+SSL_F_TLS_PARSE_STOC_KEY_SHARE:445:tls_parse_stoc_key_share
+SSL_F_TLS_PARSE_STOC_MAXFRAGMENTLEN:581:tls_parse_stoc_maxfragmentlen
+SSL_F_TLS_PARSE_STOC_NPN:582:tls_parse_stoc_npn
+SSL_F_TLS_PARSE_STOC_PSK:502:tls_parse_stoc_psk
+SSL_F_TLS_PARSE_STOC_RENEGOTIATE:448:tls_parse_stoc_renegotiate
+SSL_F_TLS_PARSE_STOC_SCT:564:tls_parse_stoc_sct
+SSL_F_TLS_PARSE_STOC_SERVER_NAME:583:tls_parse_stoc_server_name
+SSL_F_TLS_PARSE_STOC_SESSION_TICKET:584:tls_parse_stoc_session_ticket
+SSL_F_TLS_PARSE_STOC_STATUS_REQUEST:585:tls_parse_stoc_status_request
+SSL_F_TLS_PARSE_STOC_SUPPORTED_VERSIONS:612:tls_parse_stoc_supported_versions
+SSL_F_TLS_PARSE_STOC_USE_SRTP:446:tls_parse_stoc_use_srtp
+SSL_F_TLS_POST_PROCESS_CLIENT_HELLO:378:tls_post_process_client_hello
+SSL_F_TLS_POST_PROCESS_CLIENT_KEY_EXCHANGE:384:\
+	tls_post_process_client_key_exchange
+SSL_F_TLS_PREPARE_CLIENT_CERTIFICATE:360:tls_prepare_client_certificate
+SSL_F_TLS_PROCESS_AS_HELLO_RETRY_REQUEST:610:tls_process_as_hello_retry_request
+SSL_F_TLS_PROCESS_CERTIFICATE_REQUEST:361:tls_process_certificate_request
+SSL_F_TLS_PROCESS_CERT_STATUS:362:*
+SSL_F_TLS_PROCESS_CERT_STATUS_BODY:495:tls_process_cert_status_body
+SSL_F_TLS_PROCESS_CERT_VERIFY:379:tls_process_cert_verify
+SSL_F_TLS_PROCESS_CHANGE_CIPHER_SPEC:363:tls_process_change_cipher_spec
+SSL_F_TLS_PROCESS_CKE_DHE:411:tls_process_cke_dhe
+SSL_F_TLS_PROCESS_CKE_ECDHE:412:tls_process_cke_ecdhe
+SSL_F_TLS_PROCESS_CKE_GOST:413:tls_process_cke_gost
+SSL_F_TLS_PROCESS_CKE_PSK_PREAMBLE:414:tls_process_cke_psk_preamble
+SSL_F_TLS_PROCESS_CKE_RSA:415:tls_process_cke_rsa
+SSL_F_TLS_PROCESS_CKE_SRP:416:tls_process_cke_srp
+SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE:380:tls_process_client_certificate
+SSL_F_TLS_PROCESS_CLIENT_HELLO:381:tls_process_client_hello
+SSL_F_TLS_PROCESS_CLIENT_KEY_EXCHANGE:382:tls_process_client_key_exchange
+SSL_F_TLS_PROCESS_ENCRYPTED_EXTENSIONS:444:tls_process_encrypted_extensions
+SSL_F_TLS_PROCESS_END_OF_EARLY_DATA:537:tls_process_end_of_early_data
+SSL_F_TLS_PROCESS_FINISHED:364:tls_process_finished
+SSL_F_TLS_PROCESS_HELLO_REQ:507:tls_process_hello_req
+SSL_F_TLS_PROCESS_HELLO_RETRY_REQUEST:511:tls_process_hello_retry_request
+SSL_F_TLS_PROCESS_INITIAL_SERVER_FLIGHT:442:tls_process_initial_server_flight
+SSL_F_TLS_PROCESS_KEY_EXCHANGE:365:tls_process_key_exchange
+SSL_F_TLS_PROCESS_KEY_UPDATE:518:tls_process_key_update
+SSL_F_TLS_PROCESS_NEW_SESSION_TICKET:366:tls_process_new_session_ticket
+SSL_F_TLS_PROCESS_NEXT_PROTO:383:tls_process_next_proto
+SSL_F_TLS_PROCESS_SERVER_CERTIFICATE:367:tls_process_server_certificate
+SSL_F_TLS_PROCESS_SERVER_DONE:368:tls_process_server_done
+SSL_F_TLS_PROCESS_SERVER_HELLO:369:tls_process_server_hello
+SSL_F_TLS_PROCESS_SKE_DHE:419:tls_process_ske_dhe
+SSL_F_TLS_PROCESS_SKE_ECDHE:420:tls_process_ske_ecdhe
+SSL_F_TLS_PROCESS_SKE_PSK_PREAMBLE:421:tls_process_ske_psk_preamble
+SSL_F_TLS_PROCESS_SKE_SRP:422:tls_process_ske_srp
+SSL_F_TLS_PSK_DO_BINDER:506:tls_psk_do_binder
+SSL_F_TLS_SCAN_CLIENTHELLO_TLSEXT:450:*
+SSL_F_TLS_SETUP_HANDSHAKE:508:tls_setup_handshake
+SSL_F_USE_CERTIFICATE_CHAIN_FILE:220:use_certificate_chain_file
+SSL_F_WPACKET_INTERN_INIT_LEN:633:wpacket_intern_init_len
+SSL_F_WPACKET_START_SUB_PACKET_LEN__:634:WPACKET_start_sub_packet_len__
+SSL_F_WRITE_STATE_MACHINE:586:write_state_machine
+TS_F_DEF_SERIAL_CB:110:def_serial_cb
+TS_F_DEF_TIME_CB:111:def_time_cb
+TS_F_ESS_ADD_SIGNING_CERT:112:ess_add_signing_cert
+TS_F_ESS_ADD_SIGNING_CERT_V2:147:ess_add_signing_cert_v2
+TS_F_ESS_CERT_ID_NEW_INIT:113:ess_CERT_ID_new_init
+TS_F_ESS_CERT_ID_V2_NEW_INIT:156:ess_cert_id_v2_new_init
+TS_F_ESS_SIGNING_CERT_NEW_INIT:114:ess_SIGNING_CERT_new_init
+TS_F_ESS_SIGNING_CERT_V2_NEW_INIT:157:ess_signing_cert_v2_new_init
+TS_F_INT_TS_RESP_VERIFY_TOKEN:149:int_ts_RESP_verify_token
+TS_F_PKCS7_TO_TS_TST_INFO:148:PKCS7_to_TS_TST_INFO
+TS_F_TS_ACCURACY_SET_MICROS:115:TS_ACCURACY_set_micros
+TS_F_TS_ACCURACY_SET_MILLIS:116:TS_ACCURACY_set_millis
+TS_F_TS_ACCURACY_SET_SECONDS:117:TS_ACCURACY_set_seconds
+TS_F_TS_CHECK_IMPRINTS:100:ts_check_imprints
+TS_F_TS_CHECK_NONCES:101:ts_check_nonces
+TS_F_TS_CHECK_POLICY:102:ts_check_policy
+TS_F_TS_CHECK_SIGNING_CERTS:103:ts_check_signing_certs
+TS_F_TS_CHECK_STATUS_INFO:104:ts_check_status_info
+TS_F_TS_COMPUTE_IMPRINT:145:ts_compute_imprint
+TS_F_TS_CONF_INVALID:151:ts_CONF_invalid
+TS_F_TS_CONF_LOAD_CERT:153:TS_CONF_load_cert
+TS_F_TS_CONF_LOAD_CERTS:154:TS_CONF_load_certs
+TS_F_TS_CONF_LOAD_KEY:155:TS_CONF_load_key
+TS_F_TS_CONF_LOOKUP_FAIL:152:ts_CONF_lookup_fail
+TS_F_TS_CONF_SET_DEFAULT_ENGINE:146:TS_CONF_set_default_engine
+TS_F_TS_GET_STATUS_TEXT:105:ts_get_status_text
+TS_F_TS_MSG_IMPRINT_SET_ALGO:118:TS_MSG_IMPRINT_set_algo
+TS_F_TS_REQ_SET_MSG_IMPRINT:119:TS_REQ_set_msg_imprint
+TS_F_TS_REQ_SET_NONCE:120:TS_REQ_set_nonce
+TS_F_TS_REQ_SET_POLICY_ID:121:TS_REQ_set_policy_id
+TS_F_TS_RESP_CREATE_RESPONSE:122:TS_RESP_create_response
+TS_F_TS_RESP_CREATE_TST_INFO:123:ts_RESP_create_tst_info
+TS_F_TS_RESP_CTX_ADD_FAILURE_INFO:124:TS_RESP_CTX_add_failure_info
+TS_F_TS_RESP_CTX_ADD_MD:125:TS_RESP_CTX_add_md
+TS_F_TS_RESP_CTX_ADD_POLICY:126:TS_RESP_CTX_add_policy
+TS_F_TS_RESP_CTX_NEW:127:TS_RESP_CTX_new
+TS_F_TS_RESP_CTX_SET_ACCURACY:128:TS_RESP_CTX_set_accuracy
+TS_F_TS_RESP_CTX_SET_CERTS:129:TS_RESP_CTX_set_certs
+TS_F_TS_RESP_CTX_SET_DEF_POLICY:130:TS_RESP_CTX_set_def_policy
+TS_F_TS_RESP_CTX_SET_SIGNER_CERT:131:TS_RESP_CTX_set_signer_cert
+TS_F_TS_RESP_CTX_SET_STATUS_INFO:132:TS_RESP_CTX_set_status_info
+TS_F_TS_RESP_GET_POLICY:133:ts_RESP_get_policy
+TS_F_TS_RESP_SET_GENTIME_WITH_PRECISION:134:TS_RESP_set_genTime_with_precision
+TS_F_TS_RESP_SET_STATUS_INFO:135:TS_RESP_set_status_info
+TS_F_TS_RESP_SET_TST_INFO:150:TS_RESP_set_tst_info
+TS_F_TS_RESP_SIGN:136:ts_RESP_sign
+TS_F_TS_RESP_VERIFY_SIGNATURE:106:TS_RESP_verify_signature
+TS_F_TS_TST_INFO_SET_ACCURACY:137:TS_TST_INFO_set_accuracy
+TS_F_TS_TST_INFO_SET_MSG_IMPRINT:138:TS_TST_INFO_set_msg_imprint
+TS_F_TS_TST_INFO_SET_NONCE:139:TS_TST_INFO_set_nonce
+TS_F_TS_TST_INFO_SET_POLICY_ID:140:TS_TST_INFO_set_policy_id
+TS_F_TS_TST_INFO_SET_SERIAL:141:TS_TST_INFO_set_serial
+TS_F_TS_TST_INFO_SET_TIME:142:TS_TST_INFO_set_time
+TS_F_TS_TST_INFO_SET_TSA:143:TS_TST_INFO_set_tsa
+TS_F_TS_VERIFY:108:*
+TS_F_TS_VERIFY_CERT:109:ts_verify_cert
+TS_F_TS_VERIFY_CTX_NEW:144:TS_VERIFY_CTX_new
+UI_F_CLOSE_CONSOLE:115:close_console
+UI_F_ECHO_CONSOLE:116:echo_console
+UI_F_GENERAL_ALLOCATE_BOOLEAN:108:general_allocate_boolean
+UI_F_GENERAL_ALLOCATE_PROMPT:109:general_allocate_prompt
+UI_F_NOECHO_CONSOLE:117:noecho_console
+UI_F_OPEN_CONSOLE:114:open_console
+UI_F_UI_CONSTRUCT_PROMPT:121:UI_construct_prompt
+UI_F_UI_CREATE_METHOD:112:UI_create_method
+UI_F_UI_CTRL:111:UI_ctrl
+UI_F_UI_DUP_ERROR_STRING:101:UI_dup_error_string
+UI_F_UI_DUP_INFO_STRING:102:UI_dup_info_string
+UI_F_UI_DUP_INPUT_BOOLEAN:110:UI_dup_input_boolean
+UI_F_UI_DUP_INPUT_STRING:103:UI_dup_input_string
+UI_F_UI_DUP_USER_DATA:118:UI_dup_user_data
+UI_F_UI_DUP_VERIFY_STRING:106:UI_dup_verify_string
+UI_F_UI_GET0_RESULT:107:UI_get0_result
+UI_F_UI_GET_RESULT_LENGTH:119:UI_get_result_length
+UI_F_UI_NEW_METHOD:104:UI_new_method
+UI_F_UI_PROCESS:113:UI_process
+UI_F_UI_SET_RESULT:105:UI_set_result
+UI_F_UI_SET_RESULT_EX:120:UI_set_result_ex
+X509V3_F_A2I_GENERAL_NAME:164:a2i_GENERAL_NAME
+X509V3_F_ADDR_VALIDATE_PATH_INTERNAL:166:addr_validate_path_internal
+X509V3_F_ASIDENTIFIERCHOICE_CANONIZE:161:ASIdentifierChoice_canonize
+X509V3_F_ASIDENTIFIERCHOICE_IS_CANONICAL:162:ASIdentifierChoice_is_canonical
+X509V3_F_BIGNUM_TO_STRING:167:bignum_to_string
+X509V3_F_COPY_EMAIL:122:copy_email
+X509V3_F_COPY_ISSUER:123:copy_issuer
+X509V3_F_DO_DIRNAME:144:do_dirname
+X509V3_F_DO_EXT_I2D:135:do_ext_i2d
+X509V3_F_DO_EXT_NCONF:151:do_ext_nconf
+X509V3_F_GNAMES_FROM_SECTNAME:156:gnames_from_sectname
+X509V3_F_I2S_ASN1_ENUMERATED:121:i2s_ASN1_ENUMERATED
+X509V3_F_I2S_ASN1_IA5STRING:149:i2s_ASN1_IA5STRING
+X509V3_F_I2S_ASN1_INTEGER:120:i2s_ASN1_INTEGER
+X509V3_F_I2V_AUTHORITY_INFO_ACCESS:138:i2v_AUTHORITY_INFO_ACCESS
+X509V3_F_LEVEL_ADD_NODE:168:level_add_node
+X509V3_F_NOTICE_SECTION:132:notice_section
+X509V3_F_NREF_NOS:133:nref_nos
+X509V3_F_POLICY_CACHE_CREATE:169:policy_cache_create
+X509V3_F_POLICY_CACHE_NEW:170:policy_cache_new
+X509V3_F_POLICY_DATA_NEW:171:policy_data_new
+X509V3_F_POLICY_SECTION:131:policy_section
+X509V3_F_PROCESS_PCI_VALUE:150:process_pci_value
+X509V3_F_R2I_CERTPOL:130:r2i_certpol
+X509V3_F_R2I_PCI:155:r2i_pci
+X509V3_F_S2I_ASN1_IA5STRING:100:s2i_ASN1_IA5STRING
+X509V3_F_S2I_ASN1_INTEGER:108:s2i_ASN1_INTEGER
+X509V3_F_S2I_ASN1_OCTET_STRING:112:s2i_ASN1_OCTET_STRING
+X509V3_F_S2I_SKEY_ID:115:s2i_skey_id
+X509V3_F_SET_DIST_POINT_NAME:158:set_dist_point_name
+X509V3_F_SXNET_ADD_ID_ASC:125:SXNET_add_id_asc
+X509V3_F_SXNET_ADD_ID_INTEGER:126:SXNET_add_id_INTEGER
+X509V3_F_SXNET_ADD_ID_ULONG:127:SXNET_add_id_ulong
+X509V3_F_SXNET_GET_ID_ASC:128:SXNET_get_id_asc
+X509V3_F_SXNET_GET_ID_ULONG:129:SXNET_get_id_ulong
+X509V3_F_TREE_INIT:172:tree_init
+X509V3_F_V2I_ASIDENTIFIERS:163:v2i_ASIdentifiers
+X509V3_F_V2I_ASN1_BIT_STRING:101:v2i_ASN1_BIT_STRING
+X509V3_F_V2I_AUTHORITY_INFO_ACCESS:139:v2i_AUTHORITY_INFO_ACCESS
+X509V3_F_V2I_AUTHORITY_KEYID:119:v2i_AUTHORITY_KEYID
+X509V3_F_V2I_BASIC_CONSTRAINTS:102:v2i_BASIC_CONSTRAINTS
+X509V3_F_V2I_CRLD:134:v2i_crld
+X509V3_F_V2I_EXTENDED_KEY_USAGE:103:v2i_EXTENDED_KEY_USAGE
+X509V3_F_V2I_GENERAL_NAMES:118:v2i_GENERAL_NAMES
+X509V3_F_V2I_GENERAL_NAME_EX:117:v2i_GENERAL_NAME_ex
+X509V3_F_V2I_IDP:157:v2i_idp
+X509V3_F_V2I_IPADDRBLOCKS:159:v2i_IPAddrBlocks
+X509V3_F_V2I_ISSUER_ALT:153:v2i_issuer_alt
+X509V3_F_V2I_NAME_CONSTRAINTS:147:v2i_NAME_CONSTRAINTS
+X509V3_F_V2I_POLICY_CONSTRAINTS:146:v2i_POLICY_CONSTRAINTS
+X509V3_F_V2I_POLICY_MAPPINGS:145:v2i_POLICY_MAPPINGS
+X509V3_F_V2I_SUBJECT_ALT:154:v2i_subject_alt
+X509V3_F_V2I_TLS_FEATURE:165:v2i_TLS_FEATURE
+X509V3_F_V3_GENERIC_EXTENSION:116:v3_generic_extension
+X509V3_F_X509V3_ADD1_I2D:140:X509V3_add1_i2d
+X509V3_F_X509V3_ADD_VALUE:105:X509V3_add_value
+X509V3_F_X509V3_EXT_ADD:104:X509V3_EXT_add
+X509V3_F_X509V3_EXT_ADD_ALIAS:106:X509V3_EXT_add_alias
+X509V3_F_X509V3_EXT_I2D:136:X509V3_EXT_i2d
+X509V3_F_X509V3_EXT_NCONF:152:X509V3_EXT_nconf
+X509V3_F_X509V3_GET_SECTION:142:X509V3_get_section
+X509V3_F_X509V3_GET_STRING:143:X509V3_get_string
+X509V3_F_X509V3_GET_VALUE_BOOL:110:X509V3_get_value_bool
+X509V3_F_X509V3_PARSE_LIST:109:X509V3_parse_list
+X509V3_F_X509_PURPOSE_ADD:137:X509_PURPOSE_add
+X509V3_F_X509_PURPOSE_SET:141:X509_PURPOSE_set
+X509_F_ADD_CERT_DIR:100:add_cert_dir
+X509_F_BUILD_CHAIN:106:build_chain
+X509_F_BY_FILE_CTRL:101:by_file_ctrl
+X509_F_CHECK_NAME_CONSTRAINTS:149:check_name_constraints
+X509_F_CHECK_POLICY:145:check_policy
+X509_F_DANE_I2D:107:dane_i2d
+X509_F_DIR_CTRL:102:dir_ctrl
+X509_F_GET_CERT_BY_SUBJECT:103:get_cert_by_subject
+X509_F_I2D_X509_AUX:151:i2d_X509_AUX
+X509_F_LOOKUP_CERTS_SK:152:lookup_certs_sk
+X509_F_NETSCAPE_SPKI_B64_DECODE:129:NETSCAPE_SPKI_b64_decode
+X509_F_NETSCAPE_SPKI_B64_ENCODE:130:NETSCAPE_SPKI_b64_encode
+X509_F_NEW_DIR:153:new_dir
+X509_F_X509AT_ADD1_ATTR:135:X509at_add1_attr
+X509_F_X509V3_ADD_EXT:104:X509v3_add_ext
+X509_F_X509_ATTRIBUTE_CREATE_BY_NID:136:X509_ATTRIBUTE_create_by_NID
+X509_F_X509_ATTRIBUTE_CREATE_BY_OBJ:137:X509_ATTRIBUTE_create_by_OBJ
+X509_F_X509_ATTRIBUTE_CREATE_BY_TXT:140:X509_ATTRIBUTE_create_by_txt
+X509_F_X509_ATTRIBUTE_GET0_DATA:139:X509_ATTRIBUTE_get0_data
+X509_F_X509_ATTRIBUTE_SET1_DATA:138:X509_ATTRIBUTE_set1_data
+X509_F_X509_CHECK_PRIVATE_KEY:128:X509_check_private_key
+X509_F_X509_CRL_DIFF:105:X509_CRL_diff
+X509_F_X509_CRL_METHOD_NEW:154:X509_CRL_METHOD_new
+X509_F_X509_CRL_PRINT_FP:147:X509_CRL_print_fp
+X509_F_X509_EXTENSION_CREATE_BY_NID:108:X509_EXTENSION_create_by_NID
+X509_F_X509_EXTENSION_CREATE_BY_OBJ:109:X509_EXTENSION_create_by_OBJ
+X509_F_X509_GET_PUBKEY_PARAMETERS:110:X509_get_pubkey_parameters
+X509_F_X509_LOAD_CERT_CRL_FILE:132:X509_load_cert_crl_file
+X509_F_X509_LOAD_CERT_FILE:111:X509_load_cert_file
+X509_F_X509_LOAD_CRL_FILE:112:X509_load_crl_file
+X509_F_X509_LOOKUP_METH_NEW:160:X509_LOOKUP_meth_new
+X509_F_X509_LOOKUP_NEW:155:X509_LOOKUP_new
+X509_F_X509_NAME_ADD_ENTRY:113:X509_NAME_add_entry
+X509_F_X509_NAME_CANON:156:x509_name_canon
+X509_F_X509_NAME_ENTRY_CREATE_BY_NID:114:X509_NAME_ENTRY_create_by_NID
+X509_F_X509_NAME_ENTRY_CREATE_BY_TXT:131:X509_NAME_ENTRY_create_by_txt
+X509_F_X509_NAME_ENTRY_SET_OBJECT:115:X509_NAME_ENTRY_set_object
+X509_F_X509_NAME_ONELINE:116:X509_NAME_oneline
+X509_F_X509_NAME_PRINT:117:X509_NAME_print
+X509_F_X509_OBJECT_NEW:150:X509_OBJECT_new
+X509_F_X509_PRINT_EX_FP:118:X509_print_ex_fp
+X509_F_X509_PUBKEY_DECODE:148:x509_pubkey_decode
+X509_F_X509_PUBKEY_GET0:119:X509_PUBKEY_get0
+X509_F_X509_PUBKEY_SET:120:X509_PUBKEY_set
+X509_F_X509_REQ_CHECK_PRIVATE_KEY:144:X509_REQ_check_private_key
+X509_F_X509_REQ_PRINT_EX:121:X509_REQ_print_ex
+X509_F_X509_REQ_PRINT_FP:122:X509_REQ_print_fp
+X509_F_X509_REQ_TO_X509:123:X509_REQ_to_X509
+X509_F_X509_STORE_ADD_CERT:124:X509_STORE_add_cert
+X509_F_X509_STORE_ADD_CRL:125:X509_STORE_add_crl
+X509_F_X509_STORE_ADD_LOOKUP:157:X509_STORE_add_lookup
+X509_F_X509_STORE_CTX_GET1_ISSUER:146:X509_STORE_CTX_get1_issuer
+X509_F_X509_STORE_CTX_INIT:143:X509_STORE_CTX_init
+X509_F_X509_STORE_CTX_NEW:142:X509_STORE_CTX_new
+X509_F_X509_STORE_CTX_PURPOSE_INHERIT:134:X509_STORE_CTX_purpose_inherit
+X509_F_X509_STORE_NEW:158:X509_STORE_new
+X509_F_X509_TO_X509_REQ:126:X509_to_X509_REQ
+X509_F_X509_TRUST_ADD:133:X509_TRUST_add
+X509_F_X509_TRUST_SET:141:X509_TRUST_set
+X509_F_X509_VERIFY_CERT:127:X509_verify_cert
+X509_F_X509_VERIFY_PARAM_NEW:159:X509_VERIFY_PARAM_new
+
+#Reason codes
+ASN1_R_ADDING_OBJECT:171:adding object
+ASN1_R_ASN1_PARSE_ERROR:203:asn1 parse error
+ASN1_R_ASN1_SIG_PARSE_ERROR:204:asn1 sig parse error
+ASN1_R_AUX_ERROR:100:aux error
+ASN1_R_BAD_OBJECT_HEADER:102:bad object header
+ASN1_R_BMPSTRING_IS_WRONG_LENGTH:214:bmpstring is wrong length
+ASN1_R_BN_LIB:105:bn lib
+ASN1_R_BOOLEAN_IS_WRONG_LENGTH:106:boolean is wrong length
+ASN1_R_BUFFER_TOO_SMALL:107:buffer too small
+ASN1_R_CIPHER_HAS_NO_OBJECT_IDENTIFIER:108:cipher has no object identifier
+ASN1_R_CONTEXT_NOT_INITIALISED:217:context not initialised
+ASN1_R_DATA_IS_WRONG:109:data is wrong
+ASN1_R_DECODE_ERROR:110:decode error
+ASN1_R_DEPTH_EXCEEDED:174:depth exceeded
+ASN1_R_DIGEST_AND_KEY_TYPE_NOT_SUPPORTED:198:digest and key type not supported
+ASN1_R_ENCODE_ERROR:112:encode error
+ASN1_R_ERROR_GETTING_TIME:173:error getting time
+ASN1_R_ERROR_LOADING_SECTION:172:error loading section
+ASN1_R_ERROR_SETTING_CIPHER_PARAMS:114:error setting cipher params
+ASN1_R_EXPECTING_AN_INTEGER:115:expecting an integer
+ASN1_R_EXPECTING_AN_OBJECT:116:expecting an object
+ASN1_R_EXPLICIT_LENGTH_MISMATCH:119:explicit length mismatch
+ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED:120:explicit tag not constructed
+ASN1_R_FIELD_MISSING:121:field missing
+ASN1_R_FIRST_NUM_TOO_LARGE:122:first num too large
+ASN1_R_HEADER_TOO_LONG:123:header too long
+ASN1_R_ILLEGAL_BITSTRING_FORMAT:175:illegal bitstring format
+ASN1_R_ILLEGAL_BOOLEAN:176:illegal boolean
+ASN1_R_ILLEGAL_CHARACTERS:124:illegal characters
+ASN1_R_ILLEGAL_FORMAT:177:illegal format
+ASN1_R_ILLEGAL_HEX:178:illegal hex
+ASN1_R_ILLEGAL_IMPLICIT_TAG:179:illegal implicit tag
+ASN1_R_ILLEGAL_INTEGER:180:illegal integer
+ASN1_R_ILLEGAL_NEGATIVE_VALUE:226:illegal negative value
+ASN1_R_ILLEGAL_NESTED_TAGGING:181:illegal nested tagging
+ASN1_R_ILLEGAL_NULL:125:illegal null
+ASN1_R_ILLEGAL_NULL_VALUE:182:illegal null value
+ASN1_R_ILLEGAL_OBJECT:183:illegal object
+ASN1_R_ILLEGAL_OPTIONAL_ANY:126:illegal optional any
+ASN1_R_ILLEGAL_OPTIONS_ON_ITEM_TEMPLATE:170:illegal options on item template
+ASN1_R_ILLEGAL_PADDING:221:illegal padding
+ASN1_R_ILLEGAL_TAGGED_ANY:127:illegal tagged any
+ASN1_R_ILLEGAL_TIME_VALUE:184:illegal time value
+ASN1_R_ILLEGAL_ZERO_CONTENT:222:illegal zero content
+ASN1_R_INTEGER_NOT_ASCII_FORMAT:185:integer not ascii format
+ASN1_R_INTEGER_TOO_LARGE_FOR_LONG:128:integer too large for long
+ASN1_R_INVALID_BIT_STRING_BITS_LEFT:220:invalid bit string bits left
+ASN1_R_INVALID_BMPSTRING_LENGTH:129:invalid bmpstring length
+ASN1_R_INVALID_DIGIT:130:invalid digit
+ASN1_R_INVALID_MIME_TYPE:205:invalid mime type
+ASN1_R_INVALID_MODIFIER:186:invalid modifier
+ASN1_R_INVALID_NUMBER:187:invalid number
+ASN1_R_INVALID_OBJECT_ENCODING:216:invalid object encoding
+ASN1_R_INVALID_SCRYPT_PARAMETERS:227:invalid scrypt parameters
+ASN1_R_INVALID_SEPARATOR:131:invalid separator
+ASN1_R_INVALID_STRING_TABLE_VALUE:218:invalid string table value
+ASN1_R_INVALID_UNIVERSALSTRING_LENGTH:133:invalid universalstring length
+ASN1_R_INVALID_UTF8STRING:134:invalid utf8string
+ASN1_R_INVALID_VALUE:219:invalid value
+ASN1_R_LIST_ERROR:188:list error
+ASN1_R_MIME_NO_CONTENT_TYPE:206:mime no content type
+ASN1_R_MIME_PARSE_ERROR:207:mime parse error
+ASN1_R_MIME_SIG_PARSE_ERROR:208:mime sig parse error
+ASN1_R_MISSING_EOC:137:missing eoc
+ASN1_R_MISSING_SECOND_NUMBER:138:missing second number
+ASN1_R_MISSING_VALUE:189:missing value
+ASN1_R_MSTRING_NOT_UNIVERSAL:139:mstring not universal
+ASN1_R_MSTRING_WRONG_TAG:140:mstring wrong tag
+ASN1_R_NESTED_ASN1_STRING:197:nested asn1 string
+ASN1_R_NESTED_TOO_DEEP:201:nested too deep
+ASN1_R_NON_HEX_CHARACTERS:141:non hex characters
+ASN1_R_NOT_ASCII_FORMAT:190:not ascii format
+ASN1_R_NOT_ENOUGH_DATA:142:not enough data
+ASN1_R_NO_CONTENT_TYPE:209:no content type
+ASN1_R_NO_MATCHING_CHOICE_TYPE:143:no matching choice type
+ASN1_R_NO_MULTIPART_BODY_FAILURE:210:no multipart body failure
+ASN1_R_NO_MULTIPART_BOUNDARY:211:no multipart boundary
+ASN1_R_NO_SIG_CONTENT_TYPE:212:no sig content type
+ASN1_R_NULL_IS_WRONG_LENGTH:144:null is wrong length
+ASN1_R_OBJECT_NOT_ASCII_FORMAT:191:object not ascii format
+ASN1_R_ODD_NUMBER_OF_CHARS:145:odd number of chars
+ASN1_R_SECOND_NUMBER_TOO_LARGE:147:second number too large
+ASN1_R_SEQUENCE_LENGTH_MISMATCH:148:sequence length mismatch
+ASN1_R_SEQUENCE_NOT_CONSTRUCTED:149:sequence not constructed
+ASN1_R_SEQUENCE_OR_SET_NEEDS_CONFIG:192:sequence or set needs config
+ASN1_R_SHORT_LINE:150:short line
+ASN1_R_SIG_INVALID_MIME_TYPE:213:sig invalid mime type
+ASN1_R_STREAMING_NOT_SUPPORTED:202:streaming not supported
+ASN1_R_STRING_TOO_LONG:151:string too long
+ASN1_R_STRING_TOO_SHORT:152:string too short
+ASN1_R_THE_ASN1_OBJECT_IDENTIFIER_IS_NOT_KNOWN_FOR_THIS_MD:154:\
+	the asn1 object identifier is not known for this md
+ASN1_R_TIME_NOT_ASCII_FORMAT:193:time not ascii format
+ASN1_R_TOO_LARGE:223:too large
+ASN1_R_TOO_LONG:155:too long
+ASN1_R_TOO_SMALL:224:too small
+ASN1_R_TYPE_NOT_CONSTRUCTED:156:type not constructed
+ASN1_R_TYPE_NOT_PRIMITIVE:195:type not primitive
+ASN1_R_UNEXPECTED_EOC:159:unexpected eoc
+ASN1_R_UNIVERSALSTRING_IS_WRONG_LENGTH:215:universalstring is wrong length
+ASN1_R_UNKNOWN_FORMAT:160:unknown format
+ASN1_R_UNKNOWN_MESSAGE_DIGEST_ALGORITHM:161:unknown message digest algorithm
+ASN1_R_UNKNOWN_OBJECT_TYPE:162:unknown object type
+ASN1_R_UNKNOWN_PUBLIC_KEY_TYPE:163:unknown public key type
+ASN1_R_UNKNOWN_SIGNATURE_ALGORITHM:199:unknown signature algorithm
+ASN1_R_UNKNOWN_TAG:194:unknown tag
+ASN1_R_UNSUPPORTED_ANY_DEFINED_BY_TYPE:164:unsupported any defined by type
+ASN1_R_UNSUPPORTED_CIPHER:228:unsupported cipher
+ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE:167:unsupported public key type
+ASN1_R_UNSUPPORTED_TYPE:196:unsupported type
+ASN1_R_WRONG_INTEGER_TYPE:225:wrong integer type
+ASN1_R_WRONG_PUBLIC_KEY_TYPE:200:wrong public key type
+ASN1_R_WRONG_TAG:168:wrong tag
+ASYNC_R_FAILED_TO_SET_POOL:101:failed to set pool
+ASYNC_R_FAILED_TO_SWAP_CONTEXT:102:failed to swap context
+ASYNC_R_INIT_FAILED:105:init failed
+ASYNC_R_INVALID_POOL_SIZE:103:invalid pool size
+BIO_R_ACCEPT_ERROR:100:accept error
+BIO_R_ADDRINFO_ADDR_IS_NOT_AF_INET:141:addrinfo addr is not af inet
+BIO_R_AMBIGUOUS_HOST_OR_SERVICE:129:ambiguous host or service
+BIO_R_BAD_FOPEN_MODE:101:bad fopen mode
+BIO_R_BROKEN_PIPE:124:broken pipe
+BIO_R_CONNECT_ERROR:103:connect error
+BIO_R_GETHOSTBYNAME_ADDR_IS_NOT_AF_INET:107:gethostbyname addr is not af inet
+BIO_R_GETSOCKNAME_ERROR:132:getsockname error
+BIO_R_GETSOCKNAME_TRUNCATED_ADDRESS:133:getsockname truncated address
+BIO_R_GETTING_SOCKTYPE:134:getting socktype
+BIO_R_INVALID_ARGUMENT:125:invalid argument
+BIO_R_INVALID_SOCKET:135:invalid socket
+BIO_R_IN_USE:123:in use
+BIO_R_LENGTH_TOO_LONG:102:length too long
+BIO_R_LISTEN_V6_ONLY:136:listen v6 only
+BIO_R_LOOKUP_RETURNED_NOTHING:142:lookup returned nothing
+BIO_R_MALFORMED_HOST_OR_SERVICE:130:malformed host or service
+BIO_R_NBIO_CONNECT_ERROR:110:nbio connect error
+BIO_R_NO_ACCEPT_ADDR_OR_SERVICE_SPECIFIED:143:\
+	no accept addr or service specified
+BIO_R_NO_HOSTNAME_OR_SERVICE_SPECIFIED:144:no hostname or service specified
+BIO_R_NO_PORT_DEFINED:113:no port defined
+BIO_R_NO_SUCH_FILE:128:no such file
+BIO_R_NULL_PARAMETER:115:null parameter
+BIO_R_UNABLE_TO_BIND_SOCKET:117:unable to bind socket
+BIO_R_UNABLE_TO_CREATE_SOCKET:118:unable to create socket
+BIO_R_UNABLE_TO_KEEPALIVE:137:unable to keepalive
+BIO_R_UNABLE_TO_LISTEN_SOCKET:119:unable to listen socket
+BIO_R_UNABLE_TO_NODELAY:138:unable to nodelay
+BIO_R_UNABLE_TO_REUSEADDR:139:unable to reuseaddr
+BIO_R_UNAVAILABLE_IP_FAMILY:145:unavailable ip family
+BIO_R_UNINITIALIZED:120:uninitialized
+BIO_R_UNKNOWN_INFO_TYPE:140:unknown info type
+BIO_R_UNSUPPORTED_IP_FAMILY:146:unsupported ip family
+BIO_R_UNSUPPORTED_METHOD:121:unsupported method
+BIO_R_UNSUPPORTED_PROTOCOL_FAMILY:131:unsupported protocol family
+BIO_R_WRITE_TO_READ_ONLY_BIO:126:write to read only BIO
+BIO_R_WSASTARTUP:122:WSAStartup
+BN_R_ARG2_LT_ARG3:100:arg2 lt arg3
+BN_R_BAD_RECIPROCAL:101:bad reciprocal
+BN_R_BIGNUM_TOO_LONG:114:bignum too long
+BN_R_BITS_TOO_SMALL:118:bits too small
+BN_R_CALLED_WITH_EVEN_MODULUS:102:called with even modulus
+BN_R_DIV_BY_ZERO:103:div by zero
+BN_R_ENCODING_ERROR:104:encoding error
+BN_R_EXPAND_ON_STATIC_BIGNUM_DATA:105:expand on static bignum data
+BN_R_INPUT_NOT_REDUCED:110:input not reduced
+BN_R_INVALID_LENGTH:106:invalid length
+BN_R_INVALID_RANGE:115:invalid range
+BN_R_INVALID_SHIFT:119:invalid shift
+BN_R_NOT_A_SQUARE:111:not a square
+BN_R_NOT_INITIALIZED:107:not initialized
+BN_R_NO_INVERSE:108:no inverse
+BN_R_NO_SOLUTION:116:no solution
+BN_R_PRIVATE_KEY_TOO_LARGE:117:private key too large
+BN_R_P_IS_NOT_PRIME:112:p is not prime
+BN_R_TOO_MANY_ITERATIONS:113:too many iterations
+BN_R_TOO_MANY_TEMPORARY_VARIABLES:109:too many temporary variables
+CMS_R_ADD_SIGNER_ERROR:99:add signer error
+CMS_R_CERTIFICATE_ALREADY_PRESENT:175:certificate already present
+CMS_R_CERTIFICATE_HAS_NO_KEYID:160:certificate has no keyid
+CMS_R_CERTIFICATE_VERIFY_ERROR:100:certificate verify error
+CMS_R_CIPHER_INITIALISATION_ERROR:101:cipher initialisation error
+CMS_R_CIPHER_PARAMETER_INITIALISATION_ERROR:102:\
+	cipher parameter initialisation error
+CMS_R_CMS_DATAFINAL_ERROR:103:cms datafinal error
+CMS_R_CMS_LIB:104:cms lib
+CMS_R_CONTENTIDENTIFIER_MISMATCH:170:contentidentifier mismatch
+CMS_R_CONTENT_NOT_FOUND:105:content not found
+CMS_R_CONTENT_TYPE_MISMATCH:171:content type mismatch
+CMS_R_CONTENT_TYPE_NOT_COMPRESSED_DATA:106:content type not compressed data
+CMS_R_CONTENT_TYPE_NOT_ENVELOPED_DATA:107:content type not enveloped data
+CMS_R_CONTENT_TYPE_NOT_SIGNED_DATA:108:content type not signed data
+CMS_R_CONTENT_VERIFY_ERROR:109:content verify error
+CMS_R_CTRL_ERROR:110:ctrl error
+CMS_R_CTRL_FAILURE:111:ctrl failure
+CMS_R_DECRYPT_ERROR:112:decrypt error
+CMS_R_ERROR_GETTING_PUBLIC_KEY:113:error getting public key
+CMS_R_ERROR_READING_MESSAGEDIGEST_ATTRIBUTE:114:\
+	error reading messagedigest attribute
+CMS_R_ERROR_SETTING_KEY:115:error setting key
+CMS_R_ERROR_SETTING_RECIPIENTINFO:116:error setting recipientinfo
+CMS_R_INVALID_ENCRYPTED_KEY_LENGTH:117:invalid encrypted key length
+CMS_R_INVALID_KEY_ENCRYPTION_PARAMETER:176:invalid key encryption parameter
+CMS_R_INVALID_KEY_LENGTH:118:invalid key length
+CMS_R_MD_BIO_INIT_ERROR:119:md bio init error
+CMS_R_MESSAGEDIGEST_ATTRIBUTE_WRONG_LENGTH:120:\
+	messagedigest attribute wrong length
+CMS_R_MESSAGEDIGEST_WRONG_LENGTH:121:messagedigest wrong length
+CMS_R_MSGSIGDIGEST_ERROR:172:msgsigdigest error
+CMS_R_MSGSIGDIGEST_VERIFICATION_FAILURE:162:msgsigdigest verification failure
+CMS_R_MSGSIGDIGEST_WRONG_LENGTH:163:msgsigdigest wrong length
+CMS_R_NEED_ONE_SIGNER:164:need one signer
+CMS_R_NOT_A_SIGNED_RECEIPT:165:not a signed receipt
+CMS_R_NOT_ENCRYPTED_DATA:122:not encrypted data
+CMS_R_NOT_KEK:123:not kek
+CMS_R_NOT_KEY_AGREEMENT:181:not key agreement
+CMS_R_NOT_KEY_TRANSPORT:124:not key transport
+CMS_R_NOT_PWRI:177:not pwri
+CMS_R_NOT_SUPPORTED_FOR_THIS_KEY_TYPE:125:not supported for this key type
+CMS_R_NO_CIPHER:126:no cipher
+CMS_R_NO_CONTENT:127:no content
+CMS_R_NO_CONTENT_TYPE:173:no content type
+CMS_R_NO_DEFAULT_DIGEST:128:no default digest
+CMS_R_NO_DIGEST_SET:129:no digest set
+CMS_R_NO_KEY:130:no key
+CMS_R_NO_KEY_OR_CERT:174:no key or cert
+CMS_R_NO_MATCHING_DIGEST:131:no matching digest
+CMS_R_NO_MATCHING_RECIPIENT:132:no matching recipient
+CMS_R_NO_MATCHING_SIGNATURE:166:no matching signature
+CMS_R_NO_MSGSIGDIGEST:167:no msgsigdigest
+CMS_R_NO_PASSWORD:178:no password
+CMS_R_NO_PRIVATE_KEY:133:no private key
+CMS_R_NO_PUBLIC_KEY:134:no public key
+CMS_R_NO_RECEIPT_REQUEST:168:no receipt request
+CMS_R_NO_SIGNERS:135:no signers
+CMS_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE:136:\
+	private key does not match certificate
+CMS_R_RECEIPT_DECODE_ERROR:169:receipt decode error
+CMS_R_RECIPIENT_ERROR:137:recipient error
+CMS_R_SIGNER_CERTIFICATE_NOT_FOUND:138:signer certificate not found
+CMS_R_SIGNFINAL_ERROR:139:signfinal error
+CMS_R_SMIME_TEXT_ERROR:140:smime text error
+CMS_R_STORE_INIT_ERROR:141:store init error
+CMS_R_TYPE_NOT_COMPRESSED_DATA:142:type not compressed data
+CMS_R_TYPE_NOT_DATA:143:type not data
+CMS_R_TYPE_NOT_DIGESTED_DATA:144:type not digested data
+CMS_R_TYPE_NOT_ENCRYPTED_DATA:145:type not encrypted data
+CMS_R_TYPE_NOT_ENVELOPED_DATA:146:type not enveloped data
+CMS_R_UNABLE_TO_FINALIZE_CONTEXT:147:unable to finalize context
+CMS_R_UNKNOWN_CIPHER:148:unknown cipher
+CMS_R_UNKNOWN_DIGEST_ALGORITHM:149:unknown digest algorithm
+CMS_R_UNKNOWN_ID:150:unknown id
+CMS_R_UNSUPPORTED_COMPRESSION_ALGORITHM:151:unsupported compression algorithm
+CMS_R_UNSUPPORTED_CONTENT_TYPE:152:unsupported content type
+CMS_R_UNSUPPORTED_KEK_ALGORITHM:153:unsupported kek algorithm
+CMS_R_UNSUPPORTED_KEY_ENCRYPTION_ALGORITHM:179:\
+	unsupported key encryption algorithm
+CMS_R_UNSUPPORTED_RECIPIENTINFO_TYPE:155:unsupported recipientinfo type
+CMS_R_UNSUPPORTED_RECIPIENT_TYPE:154:unsupported recipient type
+CMS_R_UNSUPPORTED_TYPE:156:unsupported type
+CMS_R_UNWRAP_ERROR:157:unwrap error
+CMS_R_UNWRAP_FAILURE:180:unwrap failure
+CMS_R_VERIFICATION_FAILURE:158:verification failure
+CMS_R_WRAP_ERROR:159:wrap error
+COMP_R_ZLIB_DEFLATE_ERROR:99:zlib deflate error
+COMP_R_ZLIB_INFLATE_ERROR:100:zlib inflate error
+COMP_R_ZLIB_NOT_SUPPORTED:101:zlib not supported
+CONF_R_ERROR_LOADING_DSO:110:error loading dso
+CONF_R_LIST_CANNOT_BE_NULL:115:list cannot be null
+CONF_R_MISSING_CLOSE_SQUARE_BRACKET:100:missing close square bracket
+CONF_R_MISSING_EQUAL_SIGN:101:missing equal sign
+CONF_R_MISSING_INIT_FUNCTION:112:missing init function
+CONF_R_MODULE_INITIALIZATION_ERROR:109:module initialization error
+CONF_R_NO_CLOSE_BRACE:102:no close brace
+CONF_R_NO_CONF:105:no conf
+CONF_R_NO_CONF_OR_ENVIRONMENT_VARIABLE:106:no conf or environment variable
+CONF_R_NO_SECTION:107:no section
+CONF_R_NO_SUCH_FILE:114:no such file
+CONF_R_NO_VALUE:108:no value
+CONF_R_NUMBER_TOO_LARGE:121:number too large
+CONF_R_RECURSIVE_DIRECTORY_INCLUDE:111:recursive directory include
+CONF_R_SSL_COMMAND_SECTION_EMPTY:117:ssl command section empty
+CONF_R_SSL_COMMAND_SECTION_NOT_FOUND:118:ssl command section not found
+CONF_R_SSL_SECTION_EMPTY:119:ssl section empty
+CONF_R_SSL_SECTION_NOT_FOUND:120:ssl section not found
+CONF_R_UNABLE_TO_CREATE_NEW_SECTION:103:unable to create new section
+CONF_R_UNKNOWN_MODULE_NAME:113:unknown module name
+CONF_R_VARIABLE_EXPANSION_TOO_LONG:116:variable expansion too long
+CONF_R_VARIABLE_HAS_NO_VALUE:104:variable has no value
+CRYPTO_R_FIPS_MODE_NOT_SUPPORTED:101:fips mode not supported
+CRYPTO_R_ILLEGAL_HEX_DIGIT:102:illegal hex digit
+CRYPTO_R_ODD_NUMBER_OF_DIGITS:103:odd number of digits
+CT_R_BASE64_DECODE_ERROR:108:base64 decode error
+CT_R_INVALID_LOG_ID_LENGTH:100:invalid log id length
+CT_R_LOG_CONF_INVALID:109:log conf invalid
+CT_R_LOG_CONF_INVALID_KEY:110:log conf invalid key
+CT_R_LOG_CONF_MISSING_DESCRIPTION:111:log conf missing description
+CT_R_LOG_CONF_MISSING_KEY:112:log conf missing key
+CT_R_LOG_KEY_INVALID:113:log key invalid
+CT_R_SCT_FUTURE_TIMESTAMP:116:sct future timestamp
+CT_R_SCT_INVALID:104:sct invalid
+CT_R_SCT_INVALID_SIGNATURE:107:sct invalid signature
+CT_R_SCT_LIST_INVALID:105:sct list invalid
+CT_R_SCT_LOG_ID_MISMATCH:114:sct log id mismatch
+CT_R_SCT_NOT_SET:106:sct not set
+CT_R_SCT_UNSUPPORTED_VERSION:115:sct unsupported version
+CT_R_UNRECOGNIZED_SIGNATURE_NID:101:unrecognized signature nid
+CT_R_UNSUPPORTED_ENTRY_TYPE:102:unsupported entry type
+CT_R_UNSUPPORTED_VERSION:103:unsupported version
+DH_R_BAD_GENERATOR:101:bad generator
+DH_R_BN_DECODE_ERROR:109:bn decode error
+DH_R_BN_ERROR:106:bn error
+DH_R_CHECK_INVALID_J_VALUE:115:check invalid j value
+DH_R_CHECK_INVALID_Q_VALUE:116:check invalid q value
+DH_R_CHECK_PUBKEY_INVALID:122:check pubkey invalid
+DH_R_CHECK_PUBKEY_TOO_LARGE:123:check pubkey too large
+DH_R_CHECK_PUBKEY_TOO_SMALL:124:check pubkey too small
+DH_R_CHECK_P_NOT_PRIME:117:check p not prime
+DH_R_CHECK_P_NOT_SAFE_PRIME:118:check p not safe prime
+DH_R_CHECK_Q_NOT_PRIME:119:check q not prime
+DH_R_DECODE_ERROR:104:decode error
+DH_R_INVALID_PARAMETER_NAME:110:invalid parameter name
+DH_R_INVALID_PARAMETER_NID:114:invalid parameter nid
+DH_R_INVALID_PUBKEY:102:invalid public key
+DH_R_KDF_PARAMETER_ERROR:112:kdf parameter error
+DH_R_KEYS_NOT_SET:108:keys not set
+DH_R_MISSING_PUBKEY:125:missing pubkey
+DH_R_MODULUS_TOO_LARGE:103:modulus too large
+DH_R_NOT_SUITABLE_GENERATOR:120:not suitable generator
+DH_R_NO_PARAMETERS_SET:107:no parameters set
+DH_R_NO_PRIVATE_VALUE:100:no private value
+DH_R_PARAMETER_ENCODING_ERROR:105:parameter encoding error
+DH_R_PEER_KEY_ERROR:111:peer key error
+DH_R_SHARED_INFO_ERROR:113:shared info error
+DH_R_UNABLE_TO_CHECK_GENERATOR:121:unable to check generator
+DSA_R_BAD_Q_VALUE:102:bad q value
+DSA_R_BN_DECODE_ERROR:108:bn decode error
+DSA_R_BN_ERROR:109:bn error
+DSA_R_DECODE_ERROR:104:decode error
+DSA_R_INVALID_DIGEST_TYPE:106:invalid digest type
+DSA_R_INVALID_PARAMETERS:112:invalid parameters
+DSA_R_MISSING_PARAMETERS:101:missing parameters
+DSA_R_MODULUS_TOO_LARGE:103:modulus too large
+DSA_R_NO_PARAMETERS_SET:107:no parameters set
+DSA_R_PARAMETER_ENCODING_ERROR:105:parameter encoding error
+DSA_R_Q_NOT_PRIME:113:q not prime
+DSA_R_SEED_LEN_SMALL:110:seed_len is less than the length of q
+DSO_R_CTRL_FAILED:100:control command failed
+DSO_R_DSO_ALREADY_LOADED:110:dso already loaded
+DSO_R_EMPTY_FILE_STRUCTURE:113:empty file structure
+DSO_R_FAILURE:114:failure
+DSO_R_FILENAME_TOO_BIG:101:filename too big
+DSO_R_FINISH_FAILED:102:cleanup method function failed
+DSO_R_INCORRECT_FILE_SYNTAX:115:incorrect file syntax
+DSO_R_LOAD_FAILED:103:could not load the shared library
+DSO_R_NAME_TRANSLATION_FAILED:109:name translation failed
+DSO_R_NO_FILENAME:111:no filename
+DSO_R_NULL_HANDLE:104:a null shared library handle was used
+DSO_R_SET_FILENAME_FAILED:112:set filename failed
+DSO_R_STACK_ERROR:105:the meth_data stack is corrupt
+DSO_R_SYM_FAILURE:106:could not bind to the requested symbol name
+DSO_R_UNLOAD_FAILED:107:could not unload the shared library
+DSO_R_UNSUPPORTED:108:functionality not supported
+EC_R_ASN1_ERROR:115:asn1 error
+EC_R_BAD_SIGNATURE:156:bad signature
+EC_R_BIGNUM_OUT_OF_RANGE:144:bignum out of range
+EC_R_BUFFER_TOO_SMALL:100:buffer too small
+EC_R_CANNOT_INVERT:165:cannot invert
+EC_R_COORDINATES_OUT_OF_RANGE:146:coordinates out of range
+EC_R_CURVE_DOES_NOT_SUPPORT_ECDH:160:curve does not support ecdh
+EC_R_CURVE_DOES_NOT_SUPPORT_SIGNING:159:curve does not support signing
+EC_R_D2I_ECPKPARAMETERS_FAILURE:117:d2i ecpkparameters failure
+EC_R_DECODE_ERROR:142:decode error
+EC_R_DISCRIMINANT_IS_ZERO:118:discriminant is zero
+EC_R_EC_GROUP_NEW_BY_NAME_FAILURE:119:ec group new by name failure
+EC_R_FIELD_TOO_LARGE:143:field too large
+EC_R_GF2M_NOT_SUPPORTED:147:gf2m not supported
+EC_R_GROUP2PKPARAMETERS_FAILURE:120:group2pkparameters failure
+EC_R_I2D_ECPKPARAMETERS_FAILURE:121:i2d ecpkparameters failure
+EC_R_INCOMPATIBLE_OBJECTS:101:incompatible objects
+EC_R_INVALID_ARGUMENT:112:invalid argument
+EC_R_INVALID_COMPRESSED_POINT:110:invalid compressed point
+EC_R_INVALID_COMPRESSION_BIT:109:invalid compression bit
+EC_R_INVALID_CURVE:141:invalid curve
+EC_R_INVALID_DIGEST:151:invalid digest
+EC_R_INVALID_DIGEST_TYPE:138:invalid digest type
+EC_R_INVALID_ENCODING:102:invalid encoding
+EC_R_INVALID_FIELD:103:invalid field
+EC_R_INVALID_FORM:104:invalid form
+EC_R_INVALID_GROUP_ORDER:122:invalid group order
+EC_R_INVALID_KEY:116:invalid key
+EC_R_INVALID_OUTPUT_LENGTH:161:invalid output length
+EC_R_INVALID_PEER_KEY:133:invalid peer key
+EC_R_INVALID_PENTANOMIAL_BASIS:132:invalid pentanomial basis
+EC_R_INVALID_PRIVATE_KEY:123:invalid private key
+EC_R_INVALID_TRINOMIAL_BASIS:137:invalid trinomial basis
+EC_R_KDF_PARAMETER_ERROR:148:kdf parameter error
+EC_R_KEYS_NOT_SET:140:keys not set
+EC_R_LADDER_POST_FAILURE:136:ladder post failure
+EC_R_LADDER_PRE_FAILURE:153:ladder pre failure
+EC_R_LADDER_STEP_FAILURE:162:ladder step failure
+EC_R_MISSING_PARAMETERS:124:missing parameters
+EC_R_MISSING_PRIVATE_KEY:125:missing private key
+EC_R_NEED_NEW_SETUP_VALUES:157:need new setup values
+EC_R_NOT_A_NIST_PRIME:135:not a NIST prime
+EC_R_NOT_IMPLEMENTED:126:not implemented
+EC_R_NOT_INITIALIZED:111:not initialized
+EC_R_NO_PARAMETERS_SET:139:no parameters set
+EC_R_NO_PRIVATE_VALUE:154:no private value
+EC_R_OPERATION_NOT_SUPPORTED:152:operation not supported
+EC_R_PASSED_NULL_PARAMETER:134:passed null parameter
+EC_R_PEER_KEY_ERROR:149:peer key error
+EC_R_PKPARAMETERS2GROUP_FAILURE:127:pkparameters2group failure
+EC_R_POINT_ARITHMETIC_FAILURE:155:point arithmetic failure
+EC_R_POINT_AT_INFINITY:106:point at infinity
+EC_R_POINT_COORDINATES_BLIND_FAILURE:163:point coordinates blind failure
+EC_R_POINT_IS_NOT_ON_CURVE:107:point is not on curve
+EC_R_RANDOM_NUMBER_GENERATION_FAILED:158:random number generation failed
+EC_R_SHARED_INFO_ERROR:150:shared info error
+EC_R_SLOT_FULL:108:slot full
+EC_R_UNDEFINED_GENERATOR:113:undefined generator
+EC_R_UNDEFINED_ORDER:128:undefined order
+EC_R_UNKNOWN_COFACTOR:164:unknown cofactor
+EC_R_UNKNOWN_GROUP:129:unknown group
+EC_R_UNKNOWN_ORDER:114:unknown order
+EC_R_UNSUPPORTED_FIELD:131:unsupported field
+EC_R_WRONG_CURVE_PARAMETERS:145:wrong curve parameters
+EC_R_WRONG_ORDER:130:wrong order
+ENGINE_R_ALREADY_LOADED:100:already loaded
+ENGINE_R_ARGUMENT_IS_NOT_A_NUMBER:133:argument is not a number
+ENGINE_R_CMD_NOT_EXECUTABLE:134:cmd not executable
+ENGINE_R_COMMAND_TAKES_INPUT:135:command takes input
+ENGINE_R_COMMAND_TAKES_NO_INPUT:136:command takes no input
+ENGINE_R_CONFLICTING_ENGINE_ID:103:conflicting engine id
+ENGINE_R_CTRL_COMMAND_NOT_IMPLEMENTED:119:ctrl command not implemented
+ENGINE_R_DSO_FAILURE:104:DSO failure
+ENGINE_R_DSO_NOT_FOUND:132:dso not found
+ENGINE_R_ENGINES_SECTION_ERROR:148:engines section error
+ENGINE_R_ENGINE_CONFIGURATION_ERROR:102:engine configuration error
+ENGINE_R_ENGINE_IS_NOT_IN_LIST:105:engine is not in the list
+ENGINE_R_ENGINE_SECTION_ERROR:149:engine section error
+ENGINE_R_FAILED_LOADING_PRIVATE_KEY:128:failed loading private key
+ENGINE_R_FAILED_LOADING_PUBLIC_KEY:129:failed loading public key
+ENGINE_R_FINISH_FAILED:106:finish failed
+ENGINE_R_ID_OR_NAME_MISSING:108:'id' or 'name' missing
+ENGINE_R_INIT_FAILED:109:init failed
+ENGINE_R_INTERNAL_LIST_ERROR:110:internal list error
+ENGINE_R_INVALID_ARGUMENT:143:invalid argument
+ENGINE_R_INVALID_CMD_NAME:137:invalid cmd name
+ENGINE_R_INVALID_CMD_NUMBER:138:invalid cmd number
+ENGINE_R_INVALID_INIT_VALUE:151:invalid init value
+ENGINE_R_INVALID_STRING:150:invalid string
+ENGINE_R_NOT_INITIALISED:117:not initialised
+ENGINE_R_NOT_LOADED:112:not loaded
+ENGINE_R_NO_CONTROL_FUNCTION:120:no control function
+ENGINE_R_NO_INDEX:144:no index
+ENGINE_R_NO_LOAD_FUNCTION:125:no load function
+ENGINE_R_NO_REFERENCE:130:no reference
+ENGINE_R_NO_SUCH_ENGINE:116:no such engine
+ENGINE_R_UNIMPLEMENTED_CIPHER:146:unimplemented cipher
+ENGINE_R_UNIMPLEMENTED_DIGEST:147:unimplemented digest
+ENGINE_R_UNIMPLEMENTED_PUBLIC_KEY_METHOD:101:unimplemented public key method
+ENGINE_R_VERSION_INCOMPATIBILITY:145:version incompatibility
+EVP_R_AES_KEY_SETUP_FAILED:143:aes key setup failed
+EVP_R_ARIA_KEY_SETUP_FAILED:176:aria key setup failed
+EVP_R_BAD_DECRYPT:100:bad decrypt
+EVP_R_BUFFER_TOO_SMALL:155:buffer too small
+EVP_R_CAMELLIA_KEY_SETUP_FAILED:157:camellia key setup failed
+EVP_R_CIPHER_PARAMETER_ERROR:122:cipher parameter error
+EVP_R_COMMAND_NOT_SUPPORTED:147:command not supported
+EVP_R_COPY_ERROR:173:copy error
+EVP_R_CTRL_NOT_IMPLEMENTED:132:ctrl not implemented
+EVP_R_CTRL_OPERATION_NOT_IMPLEMENTED:133:ctrl operation not implemented
+EVP_R_DATA_NOT_MULTIPLE_OF_BLOCK_LENGTH:138:data not multiple of block length
+EVP_R_DECODE_ERROR:114:decode error
+EVP_R_DIFFERENT_KEY_TYPES:101:different key types
+EVP_R_DIFFERENT_PARAMETERS:153:different parameters
+EVP_R_ERROR_LOADING_SECTION:165:error loading section
+EVP_R_ERROR_SETTING_FIPS_MODE:166:error setting fips mode
+EVP_R_EXPECTING_AN_HMAC_KEY:174:expecting an hmac key
+EVP_R_EXPECTING_AN_RSA_KEY:127:expecting an rsa key
+EVP_R_EXPECTING_A_DH_KEY:128:expecting a dh key
+EVP_R_EXPECTING_A_DSA_KEY:129:expecting a dsa key
+EVP_R_EXPECTING_A_EC_KEY:142:expecting a ec key
+EVP_R_EXPECTING_A_POLY1305_KEY:164:expecting a poly1305 key
+EVP_R_EXPECTING_A_SIPHASH_KEY:175:expecting a siphash key
+EVP_R_FIPS_MODE_NOT_SUPPORTED:167:fips mode not supported
+EVP_R_GET_RAW_KEY_FAILED:182:get raw key failed
+EVP_R_ILLEGAL_SCRYPT_PARAMETERS:171:illegal scrypt parameters
+EVP_R_INITIALIZATION_ERROR:134:initialization error
+EVP_R_INPUT_NOT_INITIALIZED:111:input not initialized
+EVP_R_INVALID_DIGEST:152:invalid digest
+EVP_R_INVALID_FIPS_MODE:168:invalid fips mode
+EVP_R_INVALID_KEY:163:invalid key
+EVP_R_INVALID_KEY_LENGTH:130:invalid key length
+EVP_R_INVALID_OPERATION:148:invalid operation
+EVP_R_KEYGEN_FAILURE:120:keygen failure
+EVP_R_KEY_SETUP_FAILED:180:key setup failed
+EVP_R_MEMORY_LIMIT_EXCEEDED:172:memory limit exceeded
+EVP_R_MESSAGE_DIGEST_IS_NULL:159:message digest is null
+EVP_R_METHOD_NOT_SUPPORTED:144:method not supported
+EVP_R_MISSING_PARAMETERS:103:missing parameters
+EVP_R_NOT_XOF_OR_INVALID_LENGTH:178:not XOF or invalid length
+EVP_R_NO_CIPHER_SET:131:no cipher set
+EVP_R_NO_DEFAULT_DIGEST:158:no default digest
+EVP_R_NO_DIGEST_SET:139:no digest set
+EVP_R_NO_KEY_SET:154:no key set
+EVP_R_NO_OPERATION_SET:149:no operation set
+EVP_R_ONLY_ONESHOT_SUPPORTED:177:only oneshot supported
+EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE:150:\
+	operation not supported for this keytype
+EVP_R_OPERATON_NOT_INITIALIZED:151:operaton not initialized
+EVP_R_PARTIALLY_OVERLAPPING:162:partially overlapping buffers
+EVP_R_PBKDF2_ERROR:181:pbkdf2 error
+EVP_R_PKEY_APPLICATION_ASN1_METHOD_ALREADY_REGISTERED:179:\
+	pkey application asn1 method already registered
+EVP_R_PRIVATE_KEY_DECODE_ERROR:145:private key decode error
+EVP_R_PRIVATE_KEY_ENCODE_ERROR:146:private key encode error
+EVP_R_PUBLIC_KEY_NOT_RSA:106:public key not rsa
+EVP_R_UNKNOWN_CIPHER:160:unknown cipher
+EVP_R_UNKNOWN_DIGEST:161:unknown digest
+EVP_R_UNKNOWN_OPTION:169:unknown option
+EVP_R_UNKNOWN_PBE_ALGORITHM:121:unknown pbe algorithm
+EVP_R_UNSUPPORTED_ALGORITHM:156:unsupported algorithm
+EVP_R_UNSUPPORTED_CIPHER:107:unsupported cipher
+EVP_R_UNSUPPORTED_KEYLENGTH:123:unsupported keylength
+EVP_R_UNSUPPORTED_KEY_DERIVATION_FUNCTION:124:\
+	unsupported key derivation function
+EVP_R_UNSUPPORTED_KEY_SIZE:108:unsupported key size
+EVP_R_UNSUPPORTED_NUMBER_OF_ROUNDS:135:unsupported number of rounds
+EVP_R_UNSUPPORTED_PRF:125:unsupported prf
+EVP_R_UNSUPPORTED_PRIVATE_KEY_ALGORITHM:118:unsupported private key algorithm
+EVP_R_UNSUPPORTED_SALT_TYPE:126:unsupported salt type
+EVP_R_WRAP_MODE_NOT_ALLOWED:170:wrap mode not allowed
+EVP_R_WRONG_FINAL_BLOCK_LENGTH:109:wrong final block length
+KDF_R_INVALID_DIGEST:100:invalid digest
+KDF_R_MISSING_ITERATION_COUNT:109:missing iteration count
+KDF_R_MISSING_KEY:104:missing key
+KDF_R_MISSING_MESSAGE_DIGEST:105:missing message digest
+KDF_R_MISSING_PARAMETER:101:missing parameter
+KDF_R_MISSING_PASS:110:missing pass
+KDF_R_MISSING_SALT:111:missing salt
+KDF_R_MISSING_SECRET:107:missing secret
+KDF_R_MISSING_SEED:106:missing seed
+KDF_R_UNKNOWN_PARAMETER_TYPE:103:unknown parameter type
+KDF_R_VALUE_ERROR:108:value error
+KDF_R_VALUE_MISSING:102:value missing
+OBJ_R_OID_EXISTS:102:oid exists
+OBJ_R_UNKNOWN_NID:101:unknown nid
+OCSP_R_CERTIFICATE_VERIFY_ERROR:101:certificate verify error
+OCSP_R_DIGEST_ERR:102:digest err
+OCSP_R_ERROR_IN_NEXTUPDATE_FIELD:122:error in nextupdate field
+OCSP_R_ERROR_IN_THISUPDATE_FIELD:123:error in thisupdate field
+OCSP_R_ERROR_PARSING_URL:121:error parsing url
+OCSP_R_MISSING_OCSPSIGNING_USAGE:103:missing ocspsigning usage
+OCSP_R_NEXTUPDATE_BEFORE_THISUPDATE:124:nextupdate before thisupdate
+OCSP_R_NOT_BASIC_RESPONSE:104:not basic response
+OCSP_R_NO_CERTIFICATES_IN_CHAIN:105:no certificates in chain
+OCSP_R_NO_RESPONSE_DATA:108:no response data
+OCSP_R_NO_REVOKED_TIME:109:no revoked time
+OCSP_R_NO_SIGNER_KEY:130:no signer key
+OCSP_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE:110:\
+	private key does not match certificate
+OCSP_R_REQUEST_NOT_SIGNED:128:request not signed
+OCSP_R_RESPONSE_CONTAINS_NO_REVOCATION_DATA:111:\
+	response contains no revocation data
+OCSP_R_ROOT_CA_NOT_TRUSTED:112:root ca not trusted
+OCSP_R_SERVER_RESPONSE_ERROR:114:server response error
+OCSP_R_SERVER_RESPONSE_PARSE_ERROR:115:server response parse error
+OCSP_R_SIGNATURE_FAILURE:117:signature failure
+OCSP_R_SIGNER_CERTIFICATE_NOT_FOUND:118:signer certificate not found
+OCSP_R_STATUS_EXPIRED:125:status expired
+OCSP_R_STATUS_NOT_YET_VALID:126:status not yet valid
+OCSP_R_STATUS_TOO_OLD:127:status too old
+OCSP_R_UNKNOWN_MESSAGE_DIGEST:119:unknown message digest
+OCSP_R_UNKNOWN_NID:120:unknown nid
+OCSP_R_UNSUPPORTED_REQUESTORNAME_TYPE:129:unsupported requestorname type
+OSSL_STORE_R_AMBIGUOUS_CONTENT_TYPE:107:ambiguous content type
+OSSL_STORE_R_BAD_PASSWORD_READ:115:bad password read
+OSSL_STORE_R_ERROR_VERIFYING_PKCS12_MAC:113:error verifying pkcs12 mac
+OSSL_STORE_R_FINGERPRINT_SIZE_DOES_NOT_MATCH_DIGEST:121:\
+	fingerprint size does not match digest
+OSSL_STORE_R_INVALID_SCHEME:106:invalid scheme
+OSSL_STORE_R_IS_NOT_A:112:is not a
+OSSL_STORE_R_LOADER_INCOMPLETE:116:loader incomplete
+OSSL_STORE_R_LOADING_STARTED:117:loading started
+OSSL_STORE_R_NOT_A_CERTIFICATE:100:not a certificate
+OSSL_STORE_R_NOT_A_CRL:101:not a crl
+OSSL_STORE_R_NOT_A_KEY:102:not a key
+OSSL_STORE_R_NOT_A_NAME:103:not a name
+OSSL_STORE_R_NOT_PARAMETERS:104:not parameters
+OSSL_STORE_R_PASSPHRASE_CALLBACK_ERROR:114:passphrase callback error
+OSSL_STORE_R_PATH_MUST_BE_ABSOLUTE:108:path must be absolute
+OSSL_STORE_R_SEARCH_ONLY_SUPPORTED_FOR_DIRECTORIES:119:\
+	search only supported for directories
+OSSL_STORE_R_UI_PROCESS_INTERRUPTED_OR_CANCELLED:109:\
+	ui process interrupted or cancelled
+OSSL_STORE_R_UNREGISTERED_SCHEME:105:unregistered scheme
+OSSL_STORE_R_UNSUPPORTED_CONTENT_TYPE:110:unsupported content type
+OSSL_STORE_R_UNSUPPORTED_OPERATION:118:unsupported operation
+OSSL_STORE_R_UNSUPPORTED_SEARCH_TYPE:120:unsupported search type
+OSSL_STORE_R_URI_AUTHORITY_UNSUPPORTED:111:uri authority unsupported
+PEM_R_BAD_BASE64_DECODE:100:bad base64 decode
+PEM_R_BAD_DECRYPT:101:bad decrypt
+PEM_R_BAD_END_LINE:102:bad end line
+PEM_R_BAD_IV_CHARS:103:bad iv chars
+PEM_R_BAD_MAGIC_NUMBER:116:bad magic number
+PEM_R_BAD_PASSWORD_READ:104:bad password read
+PEM_R_BAD_VERSION_NUMBER:117:bad version number
+PEM_R_BIO_WRITE_FAILURE:118:bio write failure
+PEM_R_CIPHER_IS_NULL:127:cipher is null
+PEM_R_ERROR_CONVERTING_PRIVATE_KEY:115:error converting private key
+PEM_R_EXPECTING_PRIVATE_KEY_BLOB:119:expecting private key blob
+PEM_R_EXPECTING_PUBLIC_KEY_BLOB:120:expecting public key blob
+PEM_R_HEADER_TOO_LONG:128:header too long
+PEM_R_INCONSISTENT_HEADER:121:inconsistent header
+PEM_R_KEYBLOB_HEADER_PARSE_ERROR:122:keyblob header parse error
+PEM_R_KEYBLOB_TOO_SHORT:123:keyblob too short
+PEM_R_MISSING_DEK_IV:129:missing dek iv
+PEM_R_NOT_DEK_INFO:105:not dek info
+PEM_R_NOT_ENCRYPTED:106:not encrypted
+PEM_R_NOT_PROC_TYPE:107:not proc type
+PEM_R_NO_START_LINE:108:no start line
+PEM_R_PROBLEMS_GETTING_PASSWORD:109:problems getting password
+PEM_R_PVK_DATA_TOO_SHORT:124:pvk data too short
+PEM_R_PVK_TOO_SHORT:125:pvk too short
+PEM_R_READ_KEY:111:read key
+PEM_R_SHORT_HEADER:112:short header
+PEM_R_UNEXPECTED_DEK_IV:130:unexpected dek iv
+PEM_R_UNSUPPORTED_CIPHER:113:unsupported cipher
+PEM_R_UNSUPPORTED_ENCRYPTION:114:unsupported encryption
+PEM_R_UNSUPPORTED_KEY_COMPONENTS:126:unsupported key components
+PKCS12_R_CANT_PACK_STRUCTURE:100:cant pack structure
+PKCS12_R_CONTENT_TYPE_NOT_DATA:121:content type not data
+PKCS12_R_DECODE_ERROR:101:decode error
+PKCS12_R_ENCODE_ERROR:102:encode error
+PKCS12_R_ENCRYPT_ERROR:103:encrypt error
+PKCS12_R_ERROR_SETTING_ENCRYPTED_DATA_TYPE:120:error setting encrypted data type
+PKCS12_R_INVALID_NULL_ARGUMENT:104:invalid null argument
+PKCS12_R_INVALID_NULL_PKCS12_POINTER:105:invalid null pkcs12 pointer
+PKCS12_R_IV_GEN_ERROR:106:iv gen error
+PKCS12_R_KEY_GEN_ERROR:107:key gen error
+PKCS12_R_MAC_ABSENT:108:mac absent
+PKCS12_R_MAC_GENERATION_ERROR:109:mac generation error
+PKCS12_R_MAC_SETUP_ERROR:110:mac setup error
+PKCS12_R_MAC_STRING_SET_ERROR:111:mac string set error
+PKCS12_R_MAC_VERIFY_FAILURE:113:mac verify failure
+PKCS12_R_PARSE_ERROR:114:parse error
+PKCS12_R_PKCS12_ALGOR_CIPHERINIT_ERROR:115:pkcs12 algor cipherinit error
+PKCS12_R_PKCS12_CIPHERFINAL_ERROR:116:pkcs12 cipherfinal error
+PKCS12_R_PKCS12_PBE_CRYPT_ERROR:117:pkcs12 pbe crypt error
+PKCS12_R_UNKNOWN_DIGEST_ALGORITHM:118:unknown digest algorithm
+PKCS12_R_UNSUPPORTED_PKCS12_MODE:119:unsupported pkcs12 mode
+PKCS7_R_CERTIFICATE_VERIFY_ERROR:117:certificate verify error
+PKCS7_R_CIPHER_HAS_NO_OBJECT_IDENTIFIER:144:cipher has no object identifier
+PKCS7_R_CIPHER_NOT_INITIALIZED:116:cipher not initialized
+PKCS7_R_CONTENT_AND_DATA_PRESENT:118:content and data present
+PKCS7_R_CTRL_ERROR:152:ctrl error
+PKCS7_R_DECRYPT_ERROR:119:decrypt error
+PKCS7_R_DIGEST_FAILURE:101:digest failure
+PKCS7_R_ENCRYPTION_CTRL_FAILURE:149:encryption ctrl failure
+PKCS7_R_ENCRYPTION_NOT_SUPPORTED_FOR_THIS_KEY_TYPE:150:\
+	encryption not supported for this key type
+PKCS7_R_ERROR_ADDING_RECIPIENT:120:error adding recipient
+PKCS7_R_ERROR_SETTING_CIPHER:121:error setting cipher
+PKCS7_R_INVALID_NULL_POINTER:143:invalid null pointer
+PKCS7_R_INVALID_SIGNED_DATA_TYPE:155:invalid signed data type
+PKCS7_R_NO_CONTENT:122:no content
+PKCS7_R_NO_DEFAULT_DIGEST:151:no default digest
+PKCS7_R_NO_MATCHING_DIGEST_TYPE_FOUND:154:no matching digest type found
+PKCS7_R_NO_RECIPIENT_MATCHES_CERTIFICATE:115:no recipient matches certificate
+PKCS7_R_NO_SIGNATURES_ON_DATA:123:no signatures on data
+PKCS7_R_NO_SIGNERS:142:no signers
+PKCS7_R_OPERATION_NOT_SUPPORTED_ON_THIS_TYPE:104:\
+	operation not supported on this type
+PKCS7_R_PKCS7_ADD_SIGNATURE_ERROR:124:pkcs7 add signature error
+PKCS7_R_PKCS7_ADD_SIGNER_ERROR:153:pkcs7 add signer error
+PKCS7_R_PKCS7_DATASIGN:145:pkcs7 datasign
+PKCS7_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE:127:\
+	private key does not match certificate
+PKCS7_R_SIGNATURE_FAILURE:105:signature failure
+PKCS7_R_SIGNER_CERTIFICATE_NOT_FOUND:128:signer certificate not found
+PKCS7_R_SIGNING_CTRL_FAILURE:147:signing ctrl failure
+PKCS7_R_SIGNING_NOT_SUPPORTED_FOR_THIS_KEY_TYPE:148:\
+	signing not supported for this key type
+PKCS7_R_SMIME_TEXT_ERROR:129:smime text error
+PKCS7_R_UNABLE_TO_FIND_CERTIFICATE:106:unable to find certificate
+PKCS7_R_UNABLE_TO_FIND_MEM_BIO:107:unable to find mem bio
+PKCS7_R_UNABLE_TO_FIND_MESSAGE_DIGEST:108:unable to find message digest
+PKCS7_R_UNKNOWN_DIGEST_TYPE:109:unknown digest type
+PKCS7_R_UNKNOWN_OPERATION:110:unknown operation
+PKCS7_R_UNSUPPORTED_CIPHER_TYPE:111:unsupported cipher type
+PKCS7_R_UNSUPPORTED_CONTENT_TYPE:112:unsupported content type
+PKCS7_R_WRONG_CONTENT_TYPE:113:wrong content type
+PKCS7_R_WRONG_PKCS7_TYPE:114:wrong pkcs7 type
+RAND_R_ADDITIONAL_INPUT_TOO_LONG:102:additional input too long
+RAND_R_ALREADY_INSTANTIATED:103:already instantiated
+RAND_R_ARGUMENT_OUT_OF_RANGE:105:argument out of range
+RAND_R_CANNOT_OPEN_FILE:121:Cannot open file
+RAND_R_DRBG_ALREADY_INITIALIZED:129:drbg already initialized
+RAND_R_DRBG_NOT_INITIALISED:104:drbg not initialised
+RAND_R_ENTROPY_INPUT_TOO_LONG:106:entropy input too long
+RAND_R_ENTROPY_OUT_OF_RANGE:124:entropy out of range
+RAND_R_ERROR_ENTROPY_POOL_WAS_IGNORED:127:error entropy pool was ignored
+RAND_R_ERROR_INITIALISING_DRBG:107:error initialising drbg
+RAND_R_ERROR_INSTANTIATING_DRBG:108:error instantiating drbg
+RAND_R_ERROR_RETRIEVING_ADDITIONAL_INPUT:109:error retrieving additional input
+RAND_R_ERROR_RETRIEVING_ENTROPY:110:error retrieving entropy
+RAND_R_ERROR_RETRIEVING_NONCE:111:error retrieving nonce
+RAND_R_FAILED_TO_CREATE_LOCK:126:failed to create lock
+RAND_R_FUNC_NOT_IMPLEMENTED:101:Function not implemented
+RAND_R_FWRITE_ERROR:123:Error writing file
+RAND_R_GENERATE_ERROR:112:generate error
+RAND_R_INTERNAL_ERROR:113:internal error
+RAND_R_IN_ERROR_STATE:114:in error state
+RAND_R_NOT_A_REGULAR_FILE:122:Not a regular file
+RAND_R_NOT_INSTANTIATED:115:not instantiated
+RAND_R_NO_DRBG_IMPLEMENTATION_SELECTED:128:no drbg implementation selected
+RAND_R_PARENT_LOCKING_NOT_ENABLED:130:parent locking not enabled
+RAND_R_PARENT_STRENGTH_TOO_WEAK:131:parent strength too weak
+RAND_R_PERSONALISATION_STRING_TOO_LONG:116:personalisation string too long
+RAND_R_PREDICTION_RESISTANCE_NOT_SUPPORTED:133:\
+	prediction resistance not supported
+RAND_R_PRNG_NOT_SEEDED:100:PRNG not seeded
+RAND_R_RANDOM_POOL_OVERFLOW:125:random pool overflow
+RAND_R_RANDOM_POOL_UNDERFLOW:134:random pool underflow
+RAND_R_REQUEST_TOO_LARGE_FOR_DRBG:117:request too large for drbg
+RAND_R_RESEED_ERROR:118:reseed error
+RAND_R_SELFTEST_FAILURE:119:selftest failure
+RAND_R_TOO_LITTLE_NONCE_REQUESTED:135:too little nonce requested
+RAND_R_TOO_MUCH_NONCE_REQUESTED:136:too much nonce requested
+RAND_R_UNSUPPORTED_DRBG_FLAGS:132:unsupported drbg flags
+RAND_R_UNSUPPORTED_DRBG_TYPE:120:unsupported drbg type
+RSA_R_ALGORITHM_MISMATCH:100:algorithm mismatch
+RSA_R_BAD_E_VALUE:101:bad e value
+RSA_R_BAD_FIXED_HEADER_DECRYPT:102:bad fixed header decrypt
+RSA_R_BAD_PAD_BYTE_COUNT:103:bad pad byte count
+RSA_R_BAD_SIGNATURE:104:bad signature
+RSA_R_BLOCK_TYPE_IS_NOT_01:106:block type is not 01
+RSA_R_BLOCK_TYPE_IS_NOT_02:107:block type is not 02
+RSA_R_DATA_GREATER_THAN_MOD_LEN:108:data greater than mod len
+RSA_R_DATA_TOO_LARGE:109:data too large
+RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE:110:data too large for key size
+RSA_R_DATA_TOO_LARGE_FOR_MODULUS:132:data too large for modulus
+RSA_R_DATA_TOO_SMALL:111:data too small
+RSA_R_DATA_TOO_SMALL_FOR_KEY_SIZE:122:data too small for key size
+RSA_R_DIGEST_DOES_NOT_MATCH:158:digest does not match
+RSA_R_DIGEST_NOT_ALLOWED:145:digest not allowed
+RSA_R_DIGEST_TOO_BIG_FOR_RSA_KEY:112:digest too big for rsa key
+RSA_R_DMP1_NOT_CONGRUENT_TO_D:124:dmp1 not congruent to d
+RSA_R_DMQ1_NOT_CONGRUENT_TO_D:125:dmq1 not congruent to d
+RSA_R_D_E_NOT_CONGRUENT_TO_1:123:d e not congruent to 1
+RSA_R_FIRST_OCTET_INVALID:133:first octet invalid
+RSA_R_ILLEGAL_OR_UNSUPPORTED_PADDING_MODE:144:\
+	illegal or unsupported padding mode
+RSA_R_INVALID_DIGEST:157:invalid digest
+RSA_R_INVALID_DIGEST_LENGTH:143:invalid digest length
+RSA_R_INVALID_HEADER:137:invalid header
+RSA_R_INVALID_LABEL:160:invalid label
+RSA_R_INVALID_MESSAGE_LENGTH:131:invalid message length
+RSA_R_INVALID_MGF1_MD:156:invalid mgf1 md
+RSA_R_INVALID_MULTI_PRIME_KEY:167:invalid multi prime key
+RSA_R_INVALID_OAEP_PARAMETERS:161:invalid oaep parameters
+RSA_R_INVALID_PADDING:138:invalid padding
+RSA_R_INVALID_PADDING_MODE:141:invalid padding mode
+RSA_R_INVALID_PSS_PARAMETERS:149:invalid pss parameters
+RSA_R_INVALID_PSS_SALTLEN:146:invalid pss saltlen
+RSA_R_INVALID_SALT_LENGTH:150:invalid salt length
+RSA_R_INVALID_TRAILER:139:invalid trailer
+RSA_R_INVALID_X931_DIGEST:142:invalid x931 digest
+RSA_R_IQMP_NOT_INVERSE_OF_Q:126:iqmp not inverse of q
+RSA_R_KEY_PRIME_NUM_INVALID:165:key prime num invalid
+RSA_R_KEY_SIZE_TOO_SMALL:120:key size too small
+RSA_R_LAST_OCTET_INVALID:134:last octet invalid
+RSA_R_MGF1_DIGEST_NOT_ALLOWED:152:mgf1 digest not allowed
+RSA_R_MODULUS_TOO_LARGE:105:modulus too large
+RSA_R_MP_COEFFICIENT_NOT_INVERSE_OF_R:168:mp coefficient not inverse of r
+RSA_R_MP_EXPONENT_NOT_CONGRUENT_TO_D:169:mp exponent not congruent to d
+RSA_R_MP_R_NOT_PRIME:170:mp r not prime
+RSA_R_NO_PUBLIC_EXPONENT:140:no public exponent
+RSA_R_NULL_BEFORE_BLOCK_MISSING:113:null before block missing
+RSA_R_N_DOES_NOT_EQUAL_PRODUCT_OF_PRIMES:172:n does not equal product of primes
+RSA_R_N_DOES_NOT_EQUAL_P_Q:127:n does not equal p q
+RSA_R_OAEP_DECODING_ERROR:121:oaep decoding error
+RSA_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE:148:\
+	operation not supported for this keytype
+RSA_R_PADDING_CHECK_FAILED:114:padding check failed
+RSA_R_PKCS_DECODING_ERROR:159:pkcs decoding error
+RSA_R_PSS_SALTLEN_TOO_SMALL:164:pss saltlen too small
+RSA_R_P_NOT_PRIME:128:p not prime
+RSA_R_Q_NOT_PRIME:129:q not prime
+RSA_R_RSA_OPERATIONS_NOT_SUPPORTED:130:rsa operations not supported
+RSA_R_SLEN_CHECK_FAILED:136:salt length check failed
+RSA_R_SLEN_RECOVERY_FAILED:135:salt length recovery failed
+RSA_R_SSLV3_ROLLBACK_ATTACK:115:sslv3 rollback attack
+RSA_R_THE_ASN1_OBJECT_IDENTIFIER_IS_NOT_KNOWN_FOR_THIS_MD:116:\
+	the asn1 object identifier is not known for this md
+RSA_R_UNKNOWN_ALGORITHM_TYPE:117:unknown algorithm type
+RSA_R_UNKNOWN_DIGEST:166:unknown digest
+RSA_R_UNKNOWN_MASK_DIGEST:151:unknown mask digest
+RSA_R_UNKNOWN_PADDING_TYPE:118:unknown padding type
+RSA_R_UNSUPPORTED_ENCRYPTION_TYPE:162:unsupported encryption type
+RSA_R_UNSUPPORTED_LABEL_SOURCE:163:unsupported label source
+RSA_R_UNSUPPORTED_MASK_ALGORITHM:153:unsupported mask algorithm
+RSA_R_UNSUPPORTED_MASK_PARAMETER:154:unsupported mask parameter
+RSA_R_UNSUPPORTED_SIGNATURE_TYPE:155:unsupported signature type
+RSA_R_VALUE_MISSING:147:value missing
+RSA_R_WRONG_SIGNATURE_LENGTH:119:wrong signature length
+SM2_R_ASN1_ERROR:100:asn1 error
+SM2_R_BAD_SIGNATURE:101:bad signature
+SM2_R_BUFFER_TOO_SMALL:107:buffer too small
+SM2_R_DIST_ID_TOO_LARGE:110:dist id too large
+SM2_R_ID_NOT_SET:112:id not set
+SM2_R_ID_TOO_LARGE:111:id too large
+SM2_R_INVALID_CURVE:108:invalid curve
+SM2_R_INVALID_DIGEST:102:invalid digest
+SM2_R_INVALID_DIGEST_TYPE:103:invalid digest type
+SM2_R_INVALID_ENCODING:104:invalid encoding
+SM2_R_INVALID_FIELD:105:invalid field
+SM2_R_NO_PARAMETERS_SET:109:no parameters set
+SM2_R_USER_ID_TOO_LARGE:106:user id too large
+SSL_R_APPLICATION_DATA_AFTER_CLOSE_NOTIFY:291:\
+	application data after close notify
+SSL_R_APP_DATA_IN_HANDSHAKE:100:app data in handshake
+SSL_R_ATTEMPT_TO_REUSE_SESSION_IN_DIFFERENT_CONTEXT:272:\
+	attempt to reuse session in different context
+SSL_R_AT_LEAST_TLS_1_0_NEEDED_IN_FIPS_MODE:143:\
+	at least TLS 1.0 needed in FIPS mode
+SSL_R_AT_LEAST_TLS_1_2_NEEDED_IN_SUITEB_MODE:158:\
+	at least (D)TLS 1.2 needed in Suite B mode
+SSL_R_BAD_CHANGE_CIPHER_SPEC:103:bad change cipher spec
+SSL_R_BAD_CIPHER:186:bad cipher
+SSL_R_BAD_DATA:390:bad data
+SSL_R_BAD_DATA_RETURNED_BY_CALLBACK:106:bad data returned by callback
+SSL_R_BAD_DECOMPRESSION:107:bad decompression
+SSL_R_BAD_DH_VALUE:102:bad dh value
+SSL_R_BAD_DIGEST_LENGTH:111:bad digest length
+SSL_R_BAD_EARLY_DATA:233:bad early data
+SSL_R_BAD_ECC_CERT:304:bad ecc cert
+SSL_R_BAD_ECPOINT:306:bad ecpoint
+SSL_R_BAD_EXTENSION:110:bad extension
+SSL_R_BAD_HANDSHAKE_LENGTH:332:bad handshake length
+SSL_R_BAD_HANDSHAKE_STATE:236:bad handshake state
+SSL_R_BAD_HELLO_REQUEST:105:bad hello request
+SSL_R_BAD_HRR_VERSION:263:bad hrr version
+SSL_R_BAD_KEY_SHARE:108:bad key share
+SSL_R_BAD_KEY_UPDATE:122:bad key update
+SSL_R_BAD_LEGACY_VERSION:292:bad legacy version
+SSL_R_BAD_LENGTH:271:bad length
+SSL_R_BAD_PACKET:240:bad packet
+SSL_R_BAD_PACKET_LENGTH:115:bad packet length
+SSL_R_BAD_PROTOCOL_VERSION_NUMBER:116:bad protocol version number
+SSL_R_BAD_PSK:219:bad psk
+SSL_R_BAD_PSK_IDENTITY:114:bad psk identity
+SSL_R_BAD_RECORD_TYPE:443:bad record type
+SSL_R_BAD_RSA_ENCRYPT:119:bad rsa encrypt
+SSL_R_BAD_SIGNATURE:123:bad signature
+SSL_R_BAD_SRP_A_LENGTH:347:bad srp a length
+SSL_R_BAD_SRP_PARAMETERS:371:bad srp parameters
+SSL_R_BAD_SRTP_MKI_VALUE:352:bad srtp mki value
+SSL_R_BAD_SRTP_PROTECTION_PROFILE_LIST:353:bad srtp protection profile list
+SSL_R_BAD_SSL_FILETYPE:124:bad ssl filetype
+SSL_R_BAD_VALUE:384:bad value
+SSL_R_BAD_WRITE_RETRY:127:bad write retry
+SSL_R_BINDER_DOES_NOT_VERIFY:253:binder does not verify
+SSL_R_BIO_NOT_SET:128:bio not set
+SSL_R_BLOCK_CIPHER_PAD_IS_WRONG:129:block cipher pad is wrong
+SSL_R_BN_LIB:130:bn lib
+SSL_R_CALLBACK_FAILED:234:callback failed
+SSL_R_CANNOT_CHANGE_CIPHER:109:cannot change cipher
+SSL_R_CA_DN_LENGTH_MISMATCH:131:ca dn length mismatch
+SSL_R_CA_KEY_TOO_SMALL:397:ca key too small
+SSL_R_CA_MD_TOO_WEAK:398:ca md too weak
+SSL_R_CCS_RECEIVED_EARLY:133:ccs received early
+SSL_R_CERTIFICATE_VERIFY_FAILED:134:certificate verify failed
+SSL_R_CERT_CB_ERROR:377:cert cb error
+SSL_R_CERT_LENGTH_MISMATCH:135:cert length mismatch
+SSL_R_CIPHERSUITE_DIGEST_HAS_CHANGED:218:ciphersuite digest has changed
+SSL_R_CIPHER_CODE_WRONG_LENGTH:137:cipher code wrong length
+SSL_R_CIPHER_OR_HASH_UNAVAILABLE:138:cipher or hash unavailable
+SSL_R_CLIENTHELLO_TLSEXT:226:clienthello tlsext
+SSL_R_COMPRESSED_LENGTH_TOO_LONG:140:compressed length too long
+SSL_R_COMPRESSION_DISABLED:343:compression disabled
+SSL_R_COMPRESSION_FAILURE:141:compression failure
+SSL_R_COMPRESSION_ID_NOT_WITHIN_PRIVATE_RANGE:307:\
+	compression id not within private range
+SSL_R_COMPRESSION_LIBRARY_ERROR:142:compression library error
+SSL_R_CONNECTION_TYPE_NOT_SET:144:connection type not set
+SSL_R_CONTEXT_NOT_DANE_ENABLED:167:context not dane enabled
+SSL_R_COOKIE_GEN_CALLBACK_FAILURE:400:cookie gen callback failure
+SSL_R_COOKIE_MISMATCH:308:cookie mismatch
+SSL_R_CUSTOM_EXT_HANDLER_ALREADY_INSTALLED:206:\
+	custom ext handler already installed
+SSL_R_DANE_ALREADY_ENABLED:172:dane already enabled
+SSL_R_DANE_CANNOT_OVERRIDE_MTYPE_FULL:173:dane cannot override mtype full
+SSL_R_DANE_NOT_ENABLED:175:dane not enabled
+SSL_R_DANE_TLSA_BAD_CERTIFICATE:180:dane tlsa bad certificate
+SSL_R_DANE_TLSA_BAD_CERTIFICATE_USAGE:184:dane tlsa bad certificate usage
+SSL_R_DANE_TLSA_BAD_DATA_LENGTH:189:dane tlsa bad data length
+SSL_R_DANE_TLSA_BAD_DIGEST_LENGTH:192:dane tlsa bad digest length
+SSL_R_DANE_TLSA_BAD_MATCHING_TYPE:200:dane tlsa bad matching type
+SSL_R_DANE_TLSA_BAD_PUBLIC_KEY:201:dane tlsa bad public key
+SSL_R_DANE_TLSA_BAD_SELECTOR:202:dane tlsa bad selector
+SSL_R_DANE_TLSA_NULL_DATA:203:dane tlsa null data
+SSL_R_DATA_BETWEEN_CCS_AND_FINISHED:145:data between ccs and finished
+SSL_R_DATA_LENGTH_TOO_LONG:146:data length too long
+SSL_R_DECRYPTION_FAILED:147:decryption failed
+SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC:281:\
+	decryption failed or bad record mac
+SSL_R_DH_KEY_TOO_SMALL:394:dh key too small
+SSL_R_DH_PUBLIC_VALUE_LENGTH_IS_WRONG:148:dh public value length is wrong
+SSL_R_DIGEST_CHECK_FAILED:149:digest check failed
+SSL_R_DTLS_MESSAGE_TOO_BIG:334:dtls message too big
+SSL_R_DUPLICATE_COMPRESSION_ID:309:duplicate compression id
+SSL_R_ECC_CERT_NOT_FOR_SIGNING:318:ecc cert not for signing
+SSL_R_ECDH_REQUIRED_FOR_SUITEB_MODE:374:ecdh required for suiteb mode
+SSL_R_EE_KEY_TOO_SMALL:399:ee key too small
+SSL_R_EMPTY_SRTP_PROTECTION_PROFILE_LIST:354:empty srtp protection profile list
+SSL_R_ENCRYPTED_LENGTH_TOO_LONG:150:encrypted length too long
+SSL_R_ERROR_IN_RECEIVED_CIPHER_LIST:151:error in received cipher list
+SSL_R_ERROR_SETTING_TLSA_BASE_DOMAIN:204:error setting tlsa base domain
+SSL_R_EXCEEDS_MAX_FRAGMENT_SIZE:194:exceeds max fragment size
+SSL_R_EXCESSIVE_MESSAGE_SIZE:152:excessive message size
+SSL_R_EXTENSION_NOT_RECEIVED:279:extension not received
+SSL_R_EXTRA_DATA_IN_MESSAGE:153:extra data in message
+SSL_R_EXT_LENGTH_MISMATCH:163:ext length mismatch
+SSL_R_FAILED_TO_INIT_ASYNC:405:failed to init async
+SSL_R_FRAGMENTED_CLIENT_HELLO:401:fragmented client hello
+SSL_R_GOT_A_FIN_BEFORE_A_CCS:154:got a fin before a ccs
+SSL_R_HTTPS_PROXY_REQUEST:155:https proxy request
+SSL_R_HTTP_REQUEST:156:http request
+SSL_R_ILLEGAL_POINT_COMPRESSION:162:illegal point compression
+SSL_R_ILLEGAL_SUITEB_DIGEST:380:illegal Suite B digest
+SSL_R_INAPPROPRIATE_FALLBACK:373:inappropriate fallback
+SSL_R_INCONSISTENT_COMPRESSION:340:inconsistent compression
+SSL_R_INCONSISTENT_EARLY_DATA_ALPN:222:inconsistent early data alpn
+SSL_R_INCONSISTENT_EARLY_DATA_SNI:231:inconsistent early data sni
+SSL_R_INCONSISTENT_EXTMS:104:inconsistent extms
+SSL_R_INSUFFICIENT_SECURITY:241:insufficient security
+SSL_R_INVALID_ALERT:205:invalid alert
+SSL_R_INVALID_CCS_MESSAGE:260:invalid ccs message
+SSL_R_INVALID_CERTIFICATE_OR_ALG:238:invalid certificate or alg
+SSL_R_INVALID_COMMAND:280:invalid command
+SSL_R_INVALID_COMPRESSION_ALGORITHM:341:invalid compression algorithm
+SSL_R_INVALID_CONFIG:283:invalid config
+SSL_R_INVALID_CONFIGURATION_NAME:113:invalid configuration name
+SSL_R_INVALID_CONTEXT:282:invalid context
+SSL_R_INVALID_CT_VALIDATION_TYPE:212:invalid ct validation type
+SSL_R_INVALID_KEY_UPDATE_TYPE:120:invalid key update type
+SSL_R_INVALID_MAX_EARLY_DATA:174:invalid max early data
+SSL_R_INVALID_NULL_CMD_NAME:385:invalid null cmd name
+SSL_R_INVALID_SEQUENCE_NUMBER:402:invalid sequence number
+SSL_R_INVALID_SERVERINFO_DATA:388:invalid serverinfo data
+SSL_R_INVALID_SESSION_ID:999:invalid session id
+SSL_R_INVALID_SRP_USERNAME:357:invalid srp username
+SSL_R_INVALID_STATUS_RESPONSE:328:invalid status response
+SSL_R_INVALID_TICKET_KEYS_LENGTH:325:invalid ticket keys length
+SSL_R_LENGTH_MISMATCH:159:length mismatch
+SSL_R_LENGTH_TOO_LONG:404:length too long
+SSL_R_LENGTH_TOO_SHORT:160:length too short
+SSL_R_LIBRARY_BUG:274:library bug
+SSL_R_LIBRARY_HAS_NO_CIPHERS:161:library has no ciphers
+SSL_R_MISSING_DSA_SIGNING_CERT:165:missing dsa signing cert
+SSL_R_MISSING_ECDSA_SIGNING_CERT:381:missing ecdsa signing cert
+SSL_R_MISSING_FATAL:256:missing fatal
+SSL_R_MISSING_PARAMETERS:290:missing parameters
+SSL_R_MISSING_RSA_CERTIFICATE:168:missing rsa certificate
+SSL_R_MISSING_RSA_ENCRYPTING_CERT:169:missing rsa encrypting cert
+SSL_R_MISSING_RSA_SIGNING_CERT:170:missing rsa signing cert
+SSL_R_MISSING_SIGALGS_EXTENSION:112:missing sigalgs extension
+SSL_R_MISSING_SIGNING_CERT:221:missing signing cert
+SSL_R_MISSING_SRP_PARAM:358:can't find SRP server param
+SSL_R_MISSING_SUPPORTED_GROUPS_EXTENSION:209:missing supported groups extension
+SSL_R_MISSING_TMP_DH_KEY:171:missing tmp dh key
+SSL_R_MISSING_TMP_ECDH_KEY:311:missing tmp ecdh key
+SSL_R_MIXED_HANDSHAKE_AND_NON_HANDSHAKE_DATA:293:\
+	mixed handshake and non handshake data
+SSL_R_NOT_ON_RECORD_BOUNDARY:182:not on record boundary
+SSL_R_NOT_REPLACING_CERTIFICATE:289:not replacing certificate
+SSL_R_NOT_SERVER:284:not server
+SSL_R_NO_APPLICATION_PROTOCOL:235:no application protocol
+SSL_R_NO_CERTIFICATES_RETURNED:176:no certificates returned
+SSL_R_NO_CERTIFICATE_ASSIGNED:177:no certificate assigned
+SSL_R_NO_CERTIFICATE_SET:179:no certificate set
+SSL_R_NO_CHANGE_FOLLOWING_HRR:214:no change following hrr
+SSL_R_NO_CIPHERS_AVAILABLE:181:no ciphers available
+SSL_R_NO_CIPHERS_SPECIFIED:183:no ciphers specified
+SSL_R_NO_CIPHER_MATCH:185:no cipher match
+SSL_R_NO_CLIENT_CERT_METHOD:331:no client cert method
+SSL_R_NO_COMPRESSION_SPECIFIED:187:no compression specified
+SSL_R_NO_COOKIE_CALLBACK_SET:287:no cookie callback set
+SSL_R_NO_GOST_CERTIFICATE_SENT_BY_PEER:330:\
+	Peer haven't sent GOST certificate, required for selected ciphersuite
+SSL_R_NO_METHOD_SPECIFIED:188:no method specified
+SSL_R_NO_PEM_EXTENSIONS:389:no pem extensions
+SSL_R_NO_PRIVATE_KEY_ASSIGNED:190:no private key assigned
+SSL_R_NO_PROTOCOLS_AVAILABLE:191:no protocols available
+SSL_R_NO_RENEGOTIATION:339:no renegotiation
+SSL_R_NO_REQUIRED_DIGEST:324:no required digest
+SSL_R_NO_SHARED_CIPHER:193:no shared cipher
+SSL_R_NO_SHARED_GROUPS:410:no shared groups
+SSL_R_NO_SHARED_SIGNATURE_ALGORITHMS:376:no shared signature algorithms
+SSL_R_NO_SRTP_PROFILES:359:no srtp profiles
+SSL_R_NO_SUITABLE_KEY_SHARE:101:no suitable key share
+SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM:118:no suitable signature algorithm
+SSL_R_NO_VALID_SCTS:216:no valid scts
+SSL_R_NO_VERIFY_COOKIE_CALLBACK:403:no verify cookie callback
+SSL_R_NULL_SSL_CTX:195:null ssl ctx
+SSL_R_NULL_SSL_METHOD_PASSED:196:null ssl method passed
+SSL_R_OLD_SESSION_CIPHER_NOT_RETURNED:197:old session cipher not returned
+SSL_R_OLD_SESSION_COMPRESSION_ALGORITHM_NOT_RETURNED:344:\
+	old session compression algorithm not returned
+SSL_R_OVERFLOW_ERROR:237:overflow error
+SSL_R_PACKET_LENGTH_TOO_LONG:198:packet length too long
+SSL_R_PARSE_TLSEXT:227:parse tlsext
+SSL_R_PATH_TOO_LONG:270:path too long
+SSL_R_PEER_DID_NOT_RETURN_A_CERTIFICATE:199:peer did not return a certificate
+SSL_R_PEM_NAME_BAD_PREFIX:391:pem name bad prefix
+SSL_R_PEM_NAME_TOO_SHORT:392:pem name too short
+SSL_R_PIPELINE_FAILURE:406:pipeline failure
+SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR:278:post handshake auth encoding err
+SSL_R_PRIVATE_KEY_MISMATCH:288:private key mismatch
+SSL_R_PROTOCOL_IS_SHUTDOWN:207:protocol is shutdown
+SSL_R_PSK_IDENTITY_NOT_FOUND:223:psk identity not found
+SSL_R_PSK_NO_CLIENT_CB:224:psk no client cb
+SSL_R_PSK_NO_SERVER_CB:225:psk no server cb
+SSL_R_READ_BIO_NOT_SET:211:read bio not set
+SSL_R_READ_TIMEOUT_EXPIRED:312:read timeout expired
+SSL_R_RECORD_LENGTH_MISMATCH:213:record length mismatch
+SSL_R_RECORD_TOO_SMALL:298:record too small
+SSL_R_RENEGOTIATE_EXT_TOO_LONG:335:renegotiate ext too long
+SSL_R_RENEGOTIATION_ENCODING_ERR:336:renegotiation encoding err
+SSL_R_RENEGOTIATION_MISMATCH:337:renegotiation mismatch
+SSL_R_REQUEST_PENDING:285:request pending
+SSL_R_REQUEST_SENT:286:request sent
+SSL_R_REQUIRED_CIPHER_MISSING:215:required cipher missing
+SSL_R_REQUIRED_COMPRESSION_ALGORITHM_MISSING:342:\
+	required compression algorithm missing
+SSL_R_SCSV_RECEIVED_WHEN_RENEGOTIATING:345:scsv received when renegotiating
+SSL_R_SCT_VERIFICATION_FAILED:208:sct verification failed
+SSL_R_SERVERHELLO_TLSEXT:275:serverhello tlsext
+SSL_R_SESSION_ID_CONTEXT_UNINITIALIZED:277:session id context uninitialized
+SSL_R_SHUTDOWN_WHILE_IN_INIT:407:shutdown while in init
+SSL_R_SIGNATURE_ALGORITHMS_ERROR:360:signature algorithms error
+SSL_R_SIGNATURE_FOR_NON_SIGNING_CERTIFICATE:220:\
+	signature for non signing certificate
+SSL_R_SRP_A_CALC:361:error with the srp params
+SSL_R_SRTP_COULD_NOT_ALLOCATE_PROFILES:362:srtp could not allocate profiles
+SSL_R_SRTP_PROTECTION_PROFILE_LIST_TOO_LONG:363:\
+	srtp protection profile list too long
+SSL_R_SRTP_UNKNOWN_PROTECTION_PROFILE:364:srtp unknown protection profile
+SSL_R_SSL3_EXT_INVALID_MAX_FRAGMENT_LENGTH:232:\
+	ssl3 ext invalid max fragment length
+SSL_R_SSL3_EXT_INVALID_SERVERNAME:319:ssl3 ext invalid servername
+SSL_R_SSL3_EXT_INVALID_SERVERNAME_TYPE:320:ssl3 ext invalid servername type
+SSL_R_SSL3_SESSION_ID_TOO_LONG:300:ssl3 session id too long
+SSL_R_SSL_COMMAND_SECTION_EMPTY:117:ssl command section empty
+SSL_R_SSL_COMMAND_SECTION_NOT_FOUND:125:ssl command section not found
+SSL_R_SSL_CTX_HAS_NO_DEFAULT_SSL_VERSION:228:ssl ctx has no default ssl version
+SSL_R_SSL_HANDSHAKE_FAILURE:229:ssl handshake failure
+SSL_R_SSL_LIBRARY_HAS_NO_CIPHERS:230:ssl library has no ciphers
+SSL_R_SSL_NEGATIVE_LENGTH:372:ssl negative length
+SSL_R_SSL_SECTION_EMPTY:126:ssl section empty
+SSL_R_SSL_SECTION_NOT_FOUND:136:ssl section not found
+SSL_R_SSL_SESSION_ID_CALLBACK_FAILED:301:ssl session id callback failed
+SSL_R_SSL_SESSION_ID_CONFLICT:302:ssl session id conflict
+SSL_R_SSL_SESSION_ID_CONTEXT_TOO_LONG:273:ssl session id context too long
+SSL_R_SSL_SESSION_ID_HAS_BAD_LENGTH:303:ssl session id has bad length
+SSL_R_SSL_SESSION_ID_TOO_LONG:408:ssl session id too long
+SSL_R_SSL_SESSION_VERSION_MISMATCH:210:ssl session version mismatch
+SSL_R_STILL_IN_INIT:121:still in init
+SSL_R_TLS_HEARTBEAT_PEER_DOESNT_ACCEPT:365:peer does not accept heartbeats
+SSL_R_TLS_HEARTBEAT_PENDING:366:heartbeat request already pending
+SSL_R_TLS_ILLEGAL_EXPORTER_LABEL:367:tls illegal exporter label
+SSL_R_TLS_INVALID_ECPOINTFORMAT_LIST:157:tls invalid ecpointformat list
+SSL_R_TOO_MANY_KEY_UPDATES:132:too many key updates
+SSL_R_TOO_MANY_WARN_ALERTS:409:too many warn alerts
+SSL_R_TOO_MUCH_EARLY_DATA:164:too much early data
+SSL_R_UNABLE_TO_FIND_ECDH_PARAMETERS:314:unable to find ecdh parameters
+SSL_R_UNABLE_TO_FIND_PUBLIC_KEY_PARAMETERS:239:\
+	unable to find public key parameters
+SSL_R_UNABLE_TO_LOAD_SSL3_MD5_ROUTINES:242:unable to load ssl3 md5 routines
+SSL_R_UNABLE_TO_LOAD_SSL3_SHA1_ROUTINES:243:unable to load ssl3 sha1 routines
+SSL_R_UNEXPECTED_CCS_MESSAGE:262:unexpected ccs message
+SSL_R_UNEXPECTED_END_OF_EARLY_DATA:178:unexpected end of early data
+SSL_R_UNEXPECTED_MESSAGE:244:unexpected message
+SSL_R_UNEXPECTED_RECORD:245:unexpected record
+SSL_R_UNINITIALIZED:276:uninitialized
+SSL_R_UNKNOWN_ALERT_TYPE:246:unknown alert type
+SSL_R_UNKNOWN_CERTIFICATE_TYPE:247:unknown certificate type
+SSL_R_UNKNOWN_CIPHER_RETURNED:248:unknown cipher returned
+SSL_R_UNKNOWN_CIPHER_TYPE:249:unknown cipher type
+SSL_R_UNKNOWN_CMD_NAME:386:unknown cmd name
+SSL_R_UNKNOWN_COMMAND:139:unknown command
+SSL_R_UNKNOWN_DIGEST:368:unknown digest
+SSL_R_UNKNOWN_KEY_EXCHANGE_TYPE:250:unknown key exchange type
+SSL_R_UNKNOWN_PKEY_TYPE:251:unknown pkey type
+SSL_R_UNKNOWN_PROTOCOL:252:unknown protocol
+SSL_R_UNKNOWN_SSL_VERSION:254:unknown ssl version
+SSL_R_UNKNOWN_STATE:255:unknown state
+SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED:338:\
+	unsafe legacy renegotiation disabled
+SSL_R_UNSOLICITED_EXTENSION:217:unsolicited extension
+SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM:257:unsupported compression algorithm
+SSL_R_UNSUPPORTED_ELLIPTIC_CURVE:315:unsupported elliptic curve
+SSL_R_UNSUPPORTED_PROTOCOL:258:unsupported protocol
+SSL_R_UNSUPPORTED_SSL_VERSION:259:unsupported ssl version
+SSL_R_UNSUPPORTED_STATUS_TYPE:329:unsupported status type
+SSL_R_USE_SRTP_NOT_NEGOTIATED:369:use srtp not negotiated
+SSL_R_VERSION_TOO_HIGH:166:version too high
+SSL_R_VERSION_TOO_LOW:396:version too low
+SSL_R_WRONG_CERTIFICATE_TYPE:383:wrong certificate type
+SSL_R_WRONG_CIPHER_RETURNED:261:wrong cipher returned
+SSL_R_WRONG_CURVE:378:wrong curve
+SSL_R_WRONG_SIGNATURE_LENGTH:264:wrong signature length
+SSL_R_WRONG_SIGNATURE_SIZE:265:wrong signature size
+SSL_R_WRONG_SIGNATURE_TYPE:370:wrong signature type
+SSL_R_WRONG_SSL_VERSION:266:wrong ssl version
+SSL_R_WRONG_VERSION_NUMBER:267:wrong version number
+SSL_R_X509_LIB:268:x509 lib
+SSL_R_X509_VERIFICATION_SETUP_PROBLEMS:269:x509 verification setup problems
+TS_R_BAD_PKCS7_TYPE:132:bad pkcs7 type
+TS_R_BAD_TYPE:133:bad type
+TS_R_CANNOT_LOAD_CERT:137:cannot load certificate
+TS_R_CANNOT_LOAD_KEY:138:cannot load private key
+TS_R_CERTIFICATE_VERIFY_ERROR:100:certificate verify error
+TS_R_COULD_NOT_SET_ENGINE:127:could not set engine
+TS_R_COULD_NOT_SET_TIME:115:could not set time
+TS_R_DETACHED_CONTENT:134:detached content
+TS_R_ESS_ADD_SIGNING_CERT_ERROR:116:ess add signing cert error
+TS_R_ESS_ADD_SIGNING_CERT_V2_ERROR:139:ess add signing cert v2 error
+TS_R_ESS_SIGNING_CERTIFICATE_ERROR:101:ess signing certificate error
+TS_R_INVALID_NULL_POINTER:102:invalid null pointer
+TS_R_INVALID_SIGNER_CERTIFICATE_PURPOSE:117:invalid signer certificate purpose
+TS_R_MESSAGE_IMPRINT_MISMATCH:103:message imprint mismatch
+TS_R_NONCE_MISMATCH:104:nonce mismatch
+TS_R_NONCE_NOT_RETURNED:105:nonce not returned
+TS_R_NO_CONTENT:106:no content
+TS_R_NO_TIME_STAMP_TOKEN:107:no time stamp token
+TS_R_PKCS7_ADD_SIGNATURE_ERROR:118:pkcs7 add signature error
+TS_R_PKCS7_ADD_SIGNED_ATTR_ERROR:119:pkcs7 add signed attr error
+TS_R_PKCS7_TO_TS_TST_INFO_FAILED:129:pkcs7 to ts tst info failed
+TS_R_POLICY_MISMATCH:108:policy mismatch
+TS_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE:120:\
+	private key does not match certificate
+TS_R_RESPONSE_SETUP_ERROR:121:response setup error
+TS_R_SIGNATURE_FAILURE:109:signature failure
+TS_R_THERE_MUST_BE_ONE_SIGNER:110:there must be one signer
+TS_R_TIME_SYSCALL_ERROR:122:time syscall error
+TS_R_TOKEN_NOT_PRESENT:130:token not present
+TS_R_TOKEN_PRESENT:131:token present
+TS_R_TSA_NAME_MISMATCH:111:tsa name mismatch
+TS_R_TSA_UNTRUSTED:112:tsa untrusted
+TS_R_TST_INFO_SETUP_ERROR:123:tst info setup error
+TS_R_TS_DATASIGN:124:ts datasign
+TS_R_UNACCEPTABLE_POLICY:125:unacceptable policy
+TS_R_UNSUPPORTED_MD_ALGORITHM:126:unsupported md algorithm
+TS_R_UNSUPPORTED_VERSION:113:unsupported version
+TS_R_VAR_BAD_VALUE:135:var bad value
+TS_R_VAR_LOOKUP_FAILURE:136:cannot find config variable
+TS_R_WRONG_CONTENT_TYPE:114:wrong content type
+UI_R_COMMON_OK_AND_CANCEL_CHARACTERS:104:common ok and cancel characters
+UI_R_INDEX_TOO_LARGE:102:index too large
+UI_R_INDEX_TOO_SMALL:103:index too small
+UI_R_NO_RESULT_BUFFER:105:no result buffer
+UI_R_PROCESSING_ERROR:107:processing error
+UI_R_RESULT_TOO_LARGE:100:result too large
+UI_R_RESULT_TOO_SMALL:101:result too small
+UI_R_SYSASSIGN_ERROR:109:sys$assign error
+UI_R_SYSDASSGN_ERROR:110:sys$dassgn error
+UI_R_SYSQIOW_ERROR:111:sys$qiow error
+UI_R_UNKNOWN_CONTROL_COMMAND:106:unknown control command
+UI_R_UNKNOWN_TTYGET_ERRNO_VALUE:108:unknown ttyget errno value
+UI_R_USER_DATA_DUPLICATION_UNSUPPORTED:112:user data duplication unsupported
+X509V3_R_BAD_IP_ADDRESS:118:bad ip address
+X509V3_R_BAD_OBJECT:119:bad object
+X509V3_R_BN_DEC2BN_ERROR:100:bn dec2bn error
+X509V3_R_BN_TO_ASN1_INTEGER_ERROR:101:bn to asn1 integer error
+X509V3_R_DIRNAME_ERROR:149:dirname error
+X509V3_R_DISTPOINT_ALREADY_SET:160:distpoint already set
+X509V3_R_DUPLICATE_ZONE_ID:133:duplicate zone id
+X509V3_R_ERROR_CONVERTING_ZONE:131:error converting zone
+X509V3_R_ERROR_CREATING_EXTENSION:144:error creating extension
+X509V3_R_ERROR_IN_EXTENSION:128:error in extension
+X509V3_R_EXPECTED_A_SECTION_NAME:137:expected a section name
+X509V3_R_EXTENSION_EXISTS:145:extension exists
+X509V3_R_EXTENSION_NAME_ERROR:115:extension name error
+X509V3_R_EXTENSION_NOT_FOUND:102:extension not found
+X509V3_R_EXTENSION_SETTING_NOT_SUPPORTED:103:extension setting not supported
+X509V3_R_EXTENSION_VALUE_ERROR:116:extension value error
+X509V3_R_ILLEGAL_EMPTY_EXTENSION:151:illegal empty extension
+X509V3_R_INCORRECT_POLICY_SYNTAX_TAG:152:incorrect policy syntax tag
+X509V3_R_INVALID_ASNUMBER:162:invalid asnumber
+X509V3_R_INVALID_ASRANGE:163:invalid asrange
+X509V3_R_INVALID_BOOLEAN_STRING:104:invalid boolean string
+X509V3_R_INVALID_EXTENSION_STRING:105:invalid extension string
+X509V3_R_INVALID_INHERITANCE:165:invalid inheritance
+X509V3_R_INVALID_IPADDRESS:166:invalid ipaddress
+X509V3_R_INVALID_MULTIPLE_RDNS:161:invalid multiple rdns
+X509V3_R_INVALID_NAME:106:invalid name
+X509V3_R_INVALID_NULL_ARGUMENT:107:invalid null argument
+X509V3_R_INVALID_NULL_NAME:108:invalid null name
+X509V3_R_INVALID_NULL_VALUE:109:invalid null value
+X509V3_R_INVALID_NUMBER:140:invalid number
+X509V3_R_INVALID_NUMBERS:141:invalid numbers
+X509V3_R_INVALID_OBJECT_IDENTIFIER:110:invalid object identifier
+X509V3_R_INVALID_OPTION:138:invalid option
+X509V3_R_INVALID_POLICY_IDENTIFIER:134:invalid policy identifier
+X509V3_R_INVALID_PROXY_POLICY_SETTING:153:invalid proxy policy setting
+X509V3_R_INVALID_PURPOSE:146:invalid purpose
+X509V3_R_INVALID_SAFI:164:invalid safi
+X509V3_R_INVALID_SECTION:135:invalid section
+X509V3_R_INVALID_SYNTAX:143:invalid syntax
+X509V3_R_ISSUER_DECODE_ERROR:126:issuer decode error
+X509V3_R_MISSING_VALUE:124:missing value
+X509V3_R_NEED_ORGANIZATION_AND_NUMBERS:142:need organization and numbers
+X509V3_R_NO_CONFIG_DATABASE:136:no config database
+X509V3_R_NO_ISSUER_CERTIFICATE:121:no issuer certificate
+X509V3_R_NO_ISSUER_DETAILS:127:no issuer details
+X509V3_R_NO_POLICY_IDENTIFIER:139:no policy identifier
+X509V3_R_NO_PROXY_CERT_POLICY_LANGUAGE_DEFINED:154:\
+	no proxy cert policy language defined
+X509V3_R_NO_PUBLIC_KEY:114:no public key
+X509V3_R_NO_SUBJECT_DETAILS:125:no subject details
+X509V3_R_OPERATION_NOT_DEFINED:148:operation not defined
+X509V3_R_OTHERNAME_ERROR:147:othername error
+X509V3_R_POLICY_LANGUAGE_ALREADY_DEFINED:155:policy language already defined
+X509V3_R_POLICY_PATH_LENGTH:156:policy path length
+X509V3_R_POLICY_PATH_LENGTH_ALREADY_DEFINED:157:\
+	policy path length already defined
+X509V3_R_POLICY_WHEN_PROXY_LANGUAGE_REQUIRES_NO_POLICY:159:\
+	policy when proxy language requires no policy
+X509V3_R_SECTION_NOT_FOUND:150:section not found
+X509V3_R_UNABLE_TO_GET_ISSUER_DETAILS:122:unable to get issuer details
+X509V3_R_UNABLE_TO_GET_ISSUER_KEYID:123:unable to get issuer keyid
+X509V3_R_UNKNOWN_BIT_STRING_ARGUMENT:111:unknown bit string argument
+X509V3_R_UNKNOWN_EXTENSION:129:unknown extension
+X509V3_R_UNKNOWN_EXTENSION_NAME:130:unknown extension name
+X509V3_R_UNKNOWN_OPTION:120:unknown option
+X509V3_R_UNSUPPORTED_OPTION:117:unsupported option
+X509V3_R_UNSUPPORTED_TYPE:167:unsupported type
+X509V3_R_USER_TOO_LONG:132:user too long
+X509_R_AKID_MISMATCH:110:akid mismatch
+X509_R_BAD_SELECTOR:133:bad selector
+X509_R_BAD_X509_FILETYPE:100:bad x509 filetype
+X509_R_BASE64_DECODE_ERROR:118:base64 decode error
+X509_R_CANT_CHECK_DH_KEY:114:cant check dh key
+X509_R_CERT_ALREADY_IN_HASH_TABLE:101:cert already in hash table
+X509_R_CRL_ALREADY_DELTA:127:crl already delta
+X509_R_CRL_VERIFY_FAILURE:131:crl verify failure
+X509_R_IDP_MISMATCH:128:idp mismatch
+X509_R_INVALID_DIRECTORY:113:invalid directory
+X509_R_INVALID_FIELD_NAME:119:invalid field name
+X509_R_INVALID_TRUST:123:invalid trust
+X509_R_ISSUER_MISMATCH:129:issuer mismatch
+X509_R_KEY_TYPE_MISMATCH:115:key type mismatch
+X509_R_KEY_VALUES_MISMATCH:116:key values mismatch
+X509_R_LOADING_CERT_DIR:103:loading cert dir
+X509_R_LOADING_DEFAULTS:104:loading defaults
+X509_R_METHOD_NOT_SUPPORTED:124:method not supported
+X509_R_NAME_TOO_LONG:134:name too long
+X509_R_NEWER_CRL_NOT_NEWER:132:newer crl not newer
+X509_R_NO_CERTIFICATE_FOUND:135:no certificate found
+X509_R_NO_CERTIFICATE_OR_CRL_FOUND:136:no certificate or crl found
+X509_R_NO_CERT_SET_FOR_US_TO_VERIFY:105:no cert set for us to verify
+X509_R_NO_CRL_FOUND:137:no crl found
+X509_R_NO_CRL_NUMBER:130:no crl number
+X509_R_PUBLIC_KEY_DECODE_ERROR:125:public key decode error
+X509_R_PUBLIC_KEY_ENCODE_ERROR:126:public key encode error
+X509_R_SHOULD_RETRY:106:should retry
+X509_R_UNABLE_TO_FIND_PARAMETERS_IN_CHAIN:107:unable to find parameters in chain
+X509_R_UNABLE_TO_GET_CERTS_PUBLIC_KEY:108:unable to get certs public key
+X509_R_UNKNOWN_KEY_TYPE:117:unknown key type
+X509_R_UNKNOWN_NID:109:unknown nid
+X509_R_UNKNOWN_PURPOSE_ID:121:unknown purpose id
+X509_R_UNKNOWN_TRUST_ID:120:unknown trust id
+X509_R_UNSUPPORTED_ALGORITHM:111:unsupported algorithm
+X509_R_WRONG_LOOKUP_TYPE:112:wrong lookup type
+X509_R_WRONG_TYPE:122:wrong type
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/bio_b64.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/bio_b64.c
new file mode 100644
index 000000000..9f891f762
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/bio_b64.c
@@ -0,0 +1,553 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <errno.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/evp.h>
+#include "internal/bio.h"
+
+static int b64_write(BIO *h, const char *buf, int num);
+static int b64_read(BIO *h, char *buf, int size);
+static int b64_puts(BIO *h, const char *str);
+static long b64_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int b64_new(BIO *h);
+static int b64_free(BIO *data);
+static long b64_callback_ctrl(BIO *h, int cmd, BIO_info_cb *fp);
+#define B64_BLOCK_SIZE  1024
+#define B64_BLOCK_SIZE2 768
+#define B64_NONE        0
+#define B64_ENCODE      1
+#define B64_DECODE      2
+
+typedef struct b64_struct {
+    /*
+     * BIO *bio; moved to the BIO structure
+     */
+    int buf_len;
+    int buf_off;
+    int tmp_len;                /* used to find the start when decoding */
+    int tmp_nl;                 /* If true, scan until '\n' */
+    int encode;
+    int start;                  /* have we started decoding yet? */
+    int cont;                   /* <= 0 when finished */
+    EVP_ENCODE_CTX *base64;
+    char buf[EVP_ENCODE_LENGTH(B64_BLOCK_SIZE) + 10];
+    char tmp[B64_BLOCK_SIZE];
+} BIO_B64_CTX;
+
+static const BIO_METHOD methods_b64 = {
+    BIO_TYPE_BASE64,
+    "base64 encoding",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    b64_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    b64_read,
+    b64_puts,
+    NULL,                       /* b64_gets, */
+    b64_ctrl,
+    b64_new,
+    b64_free,
+    b64_callback_ctrl,
+};
+
+
+const BIO_METHOD *BIO_f_base64(void)
+{
+    return &methods_b64;
+}
+
+static int b64_new(BIO *bi)
+{
+    BIO_B64_CTX *ctx;
+
+    if ((ctx = OPENSSL_zalloc(sizeof(*ctx))) == NULL) {
+        EVPerr(EVP_F_B64_NEW, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    ctx->cont = 1;
+    ctx->start = 1;
+    ctx->base64 = EVP_ENCODE_CTX_new();
+    if (ctx->base64 == NULL) {
+        OPENSSL_free(ctx);
+        return 0;
+    }
+
+    BIO_set_data(bi, ctx);
+    BIO_set_init(bi, 1);
+
+    return 1;
+}
+
+static int b64_free(BIO *a)
+{
+    BIO_B64_CTX *ctx;
+    if (a == NULL)
+        return 0;
+
+    ctx = BIO_get_data(a);
+    if (ctx == NULL)
+        return 0;
+
+    EVP_ENCODE_CTX_free(ctx->base64);
+    OPENSSL_free(ctx);
+    BIO_set_data(a, NULL);
+    BIO_set_init(a, 0);
+
+    return 1;
+}
+
+static int b64_read(BIO *b, char *out, int outl)
+{
+    int ret = 0, i, ii, j, k, x, n, num, ret_code = 0;
+    BIO_B64_CTX *ctx;
+    unsigned char *p, *q;
+    BIO *next;
+
+    if (out == NULL)
+        return 0;
+    ctx = (BIO_B64_CTX *)BIO_get_data(b);
+
+    next = BIO_next(b);
+    if ((ctx == NULL) || (next == NULL))
+        return 0;
+
+    BIO_clear_retry_flags(b);
+
+    if (ctx->encode != B64_DECODE) {
+        ctx->encode = B64_DECODE;
+        ctx->buf_len = 0;
+        ctx->buf_off = 0;
+        ctx->tmp_len = 0;
+        EVP_DecodeInit(ctx->base64);
+    }
+
+    /* First check if there are bytes decoded/encoded */
+    if (ctx->buf_len > 0) {
+        OPENSSL_assert(ctx->buf_len >= ctx->buf_off);
+        i = ctx->buf_len - ctx->buf_off;
+        if (i > outl)
+            i = outl;
+        OPENSSL_assert(ctx->buf_off + i < (int)sizeof(ctx->buf));
+        memcpy(out, &(ctx->buf[ctx->buf_off]), i);
+        ret = i;
+        out += i;
+        outl -= i;
+        ctx->buf_off += i;
+        if (ctx->buf_len == ctx->buf_off) {
+            ctx->buf_len = 0;
+            ctx->buf_off = 0;
+        }
+    }
+
+    /*
+     * At this point, we have room of outl bytes and an empty buffer, so we
+     * should read in some more.
+     */
+
+    ret_code = 0;
+    while (outl > 0) {
+        if (ctx->cont <= 0)
+            break;
+
+        i = BIO_read(next, &(ctx->tmp[ctx->tmp_len]),
+                     B64_BLOCK_SIZE - ctx->tmp_len);
+
+        if (i <= 0) {
+            ret_code = i;
+
+            /* Should we continue next time we are called? */
+            if (!BIO_should_retry(next)) {
+                ctx->cont = i;
+                /* If buffer empty break */
+                if (ctx->tmp_len == 0)
+                    break;
+                /* Fall through and process what we have */
+                else
+                    i = 0;
+            }
+            /* else we retry and add more data to buffer */
+            else
+                break;
+        }
+        i += ctx->tmp_len;
+        ctx->tmp_len = i;
+
+        /*
+         * We need to scan, a line at a time until we have a valid line if we
+         * are starting.
+         */
+        if (ctx->start && (BIO_get_flags(b) & BIO_FLAGS_BASE64_NO_NL)) {
+            /* ctx->start=1; */
+            ctx->tmp_len = 0;
+        } else if (ctx->start) {
+            q = p = (unsigned char *)ctx->tmp;
+            num = 0;
+            for (j = 0; j < i; j++) {
+                if (*(q++) != '\n')
+                    continue;
+
+                /*
+                 * due to a previous very long line, we need to keep on
+                 * scanning for a '\n' before we even start looking for
+                 * base64 encoded stuff.
+                 */
+                if (ctx->tmp_nl) {
+                    p = q;
+                    ctx->tmp_nl = 0;
+                    continue;
+                }
+
+                k = EVP_DecodeUpdate(ctx->base64,
+                                     (unsigned char *)ctx->buf,
+                                     &num, p, q - p);
+                if ((k <= 0) && (num == 0) && (ctx->start))
+                    EVP_DecodeInit(ctx->base64);
+                else {
+                    if (p != (unsigned char *)
+                        &(ctx->tmp[0])) {
+                        i -= (p - (unsigned char *)
+                              &(ctx->tmp[0]));
+                        for (x = 0; x < i; x++)
+                            ctx->tmp[x] = p[x];
+                    }
+                    EVP_DecodeInit(ctx->base64);
+                    ctx->start = 0;
+                    break;
+                }
+                p = q;
+            }
+
+            /* we fell off the end without starting */
+            if ((j == i) && (num == 0)) {
+                /*
+                 * Is this is one long chunk?, if so, keep on reading until a
+                 * new line.
+                 */
+                if (p == (unsigned char *)&(ctx->tmp[0])) {
+                    /* Check buffer full */
+                    if (i == B64_BLOCK_SIZE) {
+                        ctx->tmp_nl = 1;
+                        ctx->tmp_len = 0;
+                    }
+                } else if (p != q) { /* finished on a '\n' */
+                    n = q - p;
+                    for (ii = 0; ii < n; ii++)
+                        ctx->tmp[ii] = p[ii];
+                    ctx->tmp_len = n;
+                }
+                /* else finished on a '\n' */
+                continue;
+            } else {
+                ctx->tmp_len = 0;
+            }
+        } else if ((i < B64_BLOCK_SIZE) && (ctx->cont > 0)) {
+            /*
+             * If buffer isn't full and we can retry then restart to read in
+             * more data.
+             */
+            continue;
+        }
+
+        if (BIO_get_flags(b) & BIO_FLAGS_BASE64_NO_NL) {
+            int z, jj;
+
+            jj = i & ~3;        /* process per 4 */
+            z = EVP_DecodeBlock((unsigned char *)ctx->buf,
+                                (unsigned char *)ctx->tmp, jj);
+            if (jj > 2) {
+                if (ctx->tmp[jj - 1] == '=') {
+                    z--;
+                    if (ctx->tmp[jj - 2] == '=')
+                        z--;
+                }
+            }
+            /*
+             * z is now number of output bytes and jj is the number consumed
+             */
+            if (jj != i) {
+                memmove(ctx->tmp, &ctx->tmp[jj], i - jj);
+                ctx->tmp_len = i - jj;
+            }
+            ctx->buf_len = 0;
+            if (z > 0) {
+                ctx->buf_len = z;
+            }
+            i = z;
+        } else {
+            i = EVP_DecodeUpdate(ctx->base64,
+                                 (unsigned char *)ctx->buf, &ctx->buf_len,
+                                 (unsigned char *)ctx->tmp, i);
+            ctx->tmp_len = 0;
+        }
+        /*
+         * If eof or an error was signalled, then the condition
+         * 'ctx->cont <= 0' will prevent b64_read() from reading
+         * more data on subsequent calls. This assignment was
+         * deleted accidentally in commit 5562cfaca4f3.
+         */
+        ctx->cont = i;
+
+        ctx->buf_off = 0;
+        if (i < 0) {
+            ret_code = 0;
+            ctx->buf_len = 0;
+            break;
+        }
+
+        if (ctx->buf_len <= outl)
+            i = ctx->buf_len;
+        else
+            i = outl;
+
+        memcpy(out, ctx->buf, i);
+        ret += i;
+        ctx->buf_off = i;
+        if (ctx->buf_off == ctx->buf_len) {
+            ctx->buf_len = 0;
+            ctx->buf_off = 0;
+        }
+        outl -= i;
+        out += i;
+    }
+    /* BIO_clear_retry_flags(b); */
+    BIO_copy_next_retry(b);
+    return ((ret == 0) ? ret_code : ret);
+}
+
+static int b64_write(BIO *b, const char *in, int inl)
+{
+    int ret = 0;
+    int n;
+    int i;
+    BIO_B64_CTX *ctx;
+    BIO *next;
+
+    ctx = (BIO_B64_CTX *)BIO_get_data(b);
+    next = BIO_next(b);
+    if ((ctx == NULL) || (next == NULL))
+        return 0;
+
+    BIO_clear_retry_flags(b);
+
+    if (ctx->encode != B64_ENCODE) {
+        ctx->encode = B64_ENCODE;
+        ctx->buf_len = 0;
+        ctx->buf_off = 0;
+        ctx->tmp_len = 0;
+        EVP_EncodeInit(ctx->base64);
+    }
+
+    OPENSSL_assert(ctx->buf_off < (int)sizeof(ctx->buf));
+    OPENSSL_assert(ctx->buf_len <= (int)sizeof(ctx->buf));
+    OPENSSL_assert(ctx->buf_len >= ctx->buf_off);
+    n = ctx->buf_len - ctx->buf_off;
+    while (n > 0) {
+        i = BIO_write(next, &(ctx->buf[ctx->buf_off]), n);
+        if (i <= 0) {
+            BIO_copy_next_retry(b);
+            return i;
+        }
+        OPENSSL_assert(i <= n);
+        ctx->buf_off += i;
+        OPENSSL_assert(ctx->buf_off <= (int)sizeof(ctx->buf));
+        OPENSSL_assert(ctx->buf_len >= ctx->buf_off);
+        n -= i;
+    }
+    /* at this point all pending data has been written */
+    ctx->buf_off = 0;
+    ctx->buf_len = 0;
+
+    if ((in == NULL) || (inl <= 0))
+        return 0;
+
+    while (inl > 0) {
+        n = (inl > B64_BLOCK_SIZE) ? B64_BLOCK_SIZE : inl;
+
+        if (BIO_get_flags(b) & BIO_FLAGS_BASE64_NO_NL) {
+            if (ctx->tmp_len > 0) {
+                OPENSSL_assert(ctx->tmp_len <= 3);
+                n = 3 - ctx->tmp_len;
+                /*
+                 * There's a theoretical possibility for this
+                 */
+                if (n > inl)
+                    n = inl;
+                memcpy(&(ctx->tmp[ctx->tmp_len]), in, n);
+                ctx->tmp_len += n;
+                ret += n;
+                if (ctx->tmp_len < 3)
+                    break;
+                ctx->buf_len =
+                    EVP_EncodeBlock((unsigned char *)ctx->buf,
+                                    (unsigned char *)ctx->tmp, ctx->tmp_len);
+                OPENSSL_assert(ctx->buf_len <= (int)sizeof(ctx->buf));
+                OPENSSL_assert(ctx->buf_len >= ctx->buf_off);
+                /*
+                 * Since we're now done using the temporary buffer, the
+                 * length should be 0'd
+                 */
+                ctx->tmp_len = 0;
+            } else {
+                if (n < 3) {
+                    memcpy(ctx->tmp, in, n);
+                    ctx->tmp_len = n;
+                    ret += n;
+                    break;
+                }
+                n -= n % 3;
+                ctx->buf_len =
+                    EVP_EncodeBlock((unsigned char *)ctx->buf,
+                                    (const unsigned char *)in, n);
+                OPENSSL_assert(ctx->buf_len <= (int)sizeof(ctx->buf));
+                OPENSSL_assert(ctx->buf_len >= ctx->buf_off);
+                ret += n;
+            }
+        } else {
+            if (!EVP_EncodeUpdate(ctx->base64,
+                                 (unsigned char *)ctx->buf, &ctx->buf_len,
+                                 (unsigned char *)in, n))
+                return ((ret == 0) ? -1 : ret);
+            OPENSSL_assert(ctx->buf_len <= (int)sizeof(ctx->buf));
+            OPENSSL_assert(ctx->buf_len >= ctx->buf_off);
+            ret += n;
+        }
+        inl -= n;
+        in += n;
+
+        ctx->buf_off = 0;
+        n = ctx->buf_len;
+        while (n > 0) {
+            i = BIO_write(next, &(ctx->buf[ctx->buf_off]), n);
+            if (i <= 0) {
+                BIO_copy_next_retry(b);
+                return ((ret == 0) ? i : ret);
+            }
+            OPENSSL_assert(i <= n);
+            n -= i;
+            ctx->buf_off += i;
+            OPENSSL_assert(ctx->buf_off <= (int)sizeof(ctx->buf));
+            OPENSSL_assert(ctx->buf_len >= ctx->buf_off);
+        }
+        ctx->buf_len = 0;
+        ctx->buf_off = 0;
+    }
+    return ret;
+}
+
+static long b64_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    BIO_B64_CTX *ctx;
+    long ret = 1;
+    int i;
+    BIO *next;
+
+    ctx = (BIO_B64_CTX *)BIO_get_data(b);
+    next = BIO_next(b);
+    if ((ctx == NULL) || (next == NULL))
+        return 0;
+
+    switch (cmd) {
+    case BIO_CTRL_RESET:
+        ctx->cont = 1;
+        ctx->start = 1;
+        ctx->encode = B64_NONE;
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    case BIO_CTRL_EOF:         /* More to read */
+        if (ctx->cont <= 0)
+            ret = 1;
+        else
+            ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    case BIO_CTRL_WPENDING:    /* More to write in buffer */
+        OPENSSL_assert(ctx->buf_len >= ctx->buf_off);
+        ret = ctx->buf_len - ctx->buf_off;
+        if ((ret == 0) && (ctx->encode != B64_NONE)
+            && (EVP_ENCODE_CTX_num(ctx->base64) != 0))
+            ret = 1;
+        else if (ret <= 0)
+            ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    case BIO_CTRL_PENDING:     /* More to read in buffer */
+        OPENSSL_assert(ctx->buf_len >= ctx->buf_off);
+        ret = ctx->buf_len - ctx->buf_off;
+        if (ret <= 0)
+            ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    case BIO_CTRL_FLUSH:
+        /* do a final write */
+ again:
+        while (ctx->buf_len != ctx->buf_off) {
+            i = b64_write(b, NULL, 0);
+            if (i < 0)
+                return i;
+        }
+        if (BIO_get_flags(b) & BIO_FLAGS_BASE64_NO_NL) {
+            if (ctx->tmp_len != 0) {
+                ctx->buf_len = EVP_EncodeBlock((unsigned char *)ctx->buf,
+                                               (unsigned char *)ctx->tmp,
+                                               ctx->tmp_len);
+                ctx->buf_off = 0;
+                ctx->tmp_len = 0;
+                goto again;
+            }
+        } else if (ctx->encode != B64_NONE
+                   && EVP_ENCODE_CTX_num(ctx->base64) != 0) {
+            ctx->buf_off = 0;
+            EVP_EncodeFinal(ctx->base64,
+                            (unsigned char *)ctx->buf, &(ctx->buf_len));
+            /* push out the bytes */
+            goto again;
+        }
+        /* Finally flush the underlying BIO */
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+
+    case BIO_C_DO_STATE_MACHINE:
+        BIO_clear_retry_flags(b);
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        BIO_copy_next_retry(b);
+        break;
+
+    case BIO_CTRL_DUP:
+        break;
+    case BIO_CTRL_INFO:
+    case BIO_CTRL_GET:
+    case BIO_CTRL_SET:
+    default:
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    }
+    return ret;
+}
+
+static long b64_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
+{
+    long ret = 1;
+    BIO *next = BIO_next(b);
+
+    if (next == NULL)
+        return 0;
+    switch (cmd) {
+    default:
+        ret = BIO_callback_ctrl(next, cmd, fp);
+        break;
+    }
+    return ret;
+}
+
+static int b64_puts(BIO *b, const char *str)
+{
+    return b64_write(b, str, strlen(str));
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/bio_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/bio_enc.c
new file mode 100644
index 000000000..6639061ea
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/bio_enc.c
@@ -0,0 +1,429 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <errno.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/evp.h>
+#include "internal/bio.h"
+
+static int enc_write(BIO *h, const char *buf, int num);
+static int enc_read(BIO *h, char *buf, int size);
+static long enc_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int enc_new(BIO *h);
+static int enc_free(BIO *data);
+static long enc_callback_ctrl(BIO *h, int cmd, BIO_info_cb *fps);
+#define ENC_BLOCK_SIZE  (1024*4)
+#define ENC_MIN_CHUNK   (256)
+#define BUF_OFFSET      (ENC_MIN_CHUNK + EVP_MAX_BLOCK_LENGTH)
+
+typedef struct enc_struct {
+    int buf_len;
+    int buf_off;
+    int cont;                   /* <= 0 when finished */
+    int finished;
+    int ok;                     /* bad decrypt */
+    EVP_CIPHER_CTX *cipher;
+    unsigned char *read_start, *read_end;
+    /*
+     * buf is larger than ENC_BLOCK_SIZE because EVP_DecryptUpdate can return
+     * up to a block more data than is presented to it
+     */
+    unsigned char buf[BUF_OFFSET + ENC_BLOCK_SIZE];
+} BIO_ENC_CTX;
+
+static const BIO_METHOD methods_enc = {
+    BIO_TYPE_CIPHER,
+    "cipher",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    enc_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    enc_read,
+    NULL,                       /* enc_puts, */
+    NULL,                       /* enc_gets, */
+    enc_ctrl,
+    enc_new,
+    enc_free,
+    enc_callback_ctrl,
+};
+
+const BIO_METHOD *BIO_f_cipher(void)
+{
+    return &methods_enc;
+}
+
+static int enc_new(BIO *bi)
+{
+    BIO_ENC_CTX *ctx;
+
+    if ((ctx = OPENSSL_zalloc(sizeof(*ctx))) == NULL) {
+        EVPerr(EVP_F_ENC_NEW, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    ctx->cipher = EVP_CIPHER_CTX_new();
+    if (ctx->cipher == NULL) {
+        OPENSSL_free(ctx);
+        return 0;
+    }
+    ctx->cont = 1;
+    ctx->ok = 1;
+    ctx->read_end = ctx->read_start = &(ctx->buf[BUF_OFFSET]);
+    BIO_set_data(bi, ctx);
+    BIO_set_init(bi, 1);
+
+    return 1;
+}
+
+static int enc_free(BIO *a)
+{
+    BIO_ENC_CTX *b;
+
+    if (a == NULL)
+        return 0;
+
+    b = BIO_get_data(a);
+    if (b == NULL)
+        return 0;
+
+    EVP_CIPHER_CTX_free(b->cipher);
+    OPENSSL_clear_free(b, sizeof(BIO_ENC_CTX));
+    BIO_set_data(a, NULL);
+    BIO_set_init(a, 0);
+
+    return 1;
+}
+
+static int enc_read(BIO *b, char *out, int outl)
+{
+    int ret = 0, i, blocksize;
+    BIO_ENC_CTX *ctx;
+    BIO *next;
+
+    if (out == NULL)
+        return 0;
+    ctx = BIO_get_data(b);
+
+    next = BIO_next(b);
+    if ((ctx == NULL) || (next == NULL))
+        return 0;
+
+    /* First check if there are bytes decoded/encoded */
+    if (ctx->buf_len > 0) {
+        i = ctx->buf_len - ctx->buf_off;
+        if (i > outl)
+            i = outl;
+        memcpy(out, &(ctx->buf[ctx->buf_off]), i);
+        ret = i;
+        out += i;
+        outl -= i;
+        ctx->buf_off += i;
+        if (ctx->buf_len == ctx->buf_off) {
+            ctx->buf_len = 0;
+            ctx->buf_off = 0;
+        }
+    }
+
+    blocksize = EVP_CIPHER_CTX_block_size(ctx->cipher);
+    if (blocksize == 1)
+        blocksize = 0;
+
+    /*
+     * At this point, we have room of outl bytes and an empty buffer, so we
+     * should read in some more.
+     */
+
+    while (outl > 0) {
+        if (ctx->cont <= 0)
+            break;
+
+        if (ctx->read_start == ctx->read_end) { /* time to read more data */
+            ctx->read_end = ctx->read_start = &(ctx->buf[BUF_OFFSET]);
+            i = BIO_read(next, ctx->read_start, ENC_BLOCK_SIZE);
+            if (i > 0)
+                ctx->read_end += i;
+        } else {
+            i = ctx->read_end - ctx->read_start;
+        }
+
+        if (i <= 0) {
+            /* Should be continue next time we are called? */
+            if (!BIO_should_retry(next)) {
+                ctx->cont = i;
+                i = EVP_CipherFinal_ex(ctx->cipher,
+                                       ctx->buf, &(ctx->buf_len));
+                ctx->ok = i;
+                ctx->buf_off = 0;
+            } else {
+                ret = (ret == 0) ? i : ret;
+                break;
+            }
+        } else {
+            if (outl > ENC_MIN_CHUNK) {
+                /*
+                 * Depending on flags block cipher decrypt can write
+                 * one extra block and then back off, i.e. output buffer
+                 * has to accommodate extra block...
+                 */
+                int j = outl - blocksize, buf_len;
+
+                if (!EVP_CipherUpdate(ctx->cipher,
+                                      (unsigned char *)out, &buf_len,
+                                      ctx->read_start, i > j ? j : i)) {
+                    BIO_clear_retry_flags(b);
+                    return 0;
+                }
+                ret += buf_len;
+                out += buf_len;
+                outl -= buf_len;
+
+                if ((i -= j) <= 0) {
+                    ctx->read_start = ctx->read_end;
+                    continue;
+                }
+                ctx->read_start += j;
+            }
+            if (i > ENC_MIN_CHUNK)
+                i = ENC_MIN_CHUNK;
+            if (!EVP_CipherUpdate(ctx->cipher,
+                                  ctx->buf, &ctx->buf_len,
+                                  ctx->read_start, i)) {
+                BIO_clear_retry_flags(b);
+                ctx->ok = 0;
+                return 0;
+            }
+            ctx->read_start += i;
+            ctx->cont = 1;
+            /*
+             * Note: it is possible for EVP_CipherUpdate to decrypt zero
+             * bytes because this is or looks like the final block: if this
+             * happens we should retry and either read more data or decrypt
+             * the final block
+             */
+            if (ctx->buf_len == 0)
+                continue;
+        }
+
+        if (ctx->buf_len <= outl)
+            i = ctx->buf_len;
+        else
+            i = outl;
+        if (i <= 0)
+            break;
+        memcpy(out, ctx->buf, i);
+        ret += i;
+        ctx->buf_off = i;
+        outl -= i;
+        out += i;
+    }
+
+    BIO_clear_retry_flags(b);
+    BIO_copy_next_retry(b);
+    return ((ret == 0) ? ctx->cont : ret);
+}
+
+static int enc_write(BIO *b, const char *in, int inl)
+{
+    int ret = 0, n, i;
+    BIO_ENC_CTX *ctx;
+    BIO *next;
+
+    ctx = BIO_get_data(b);
+    next = BIO_next(b);
+    if ((ctx == NULL) || (next == NULL))
+        return 0;
+
+    ret = inl;
+
+    BIO_clear_retry_flags(b);
+    n = ctx->buf_len - ctx->buf_off;
+    while (n > 0) {
+        i = BIO_write(next, &(ctx->buf[ctx->buf_off]), n);
+        if (i <= 0) {
+            BIO_copy_next_retry(b);
+            return i;
+        }
+        ctx->buf_off += i;
+        n -= i;
+    }
+    /* at this point all pending data has been written */
+
+    if ((in == NULL) || (inl <= 0))
+        return 0;
+
+    ctx->buf_off = 0;
+    while (inl > 0) {
+        n = (inl > ENC_BLOCK_SIZE) ? ENC_BLOCK_SIZE : inl;
+        if (!EVP_CipherUpdate(ctx->cipher,
+                              ctx->buf, &ctx->buf_len,
+                              (const unsigned char *)in, n)) {
+            BIO_clear_retry_flags(b);
+            ctx->ok = 0;
+            return 0;
+        }
+        inl -= n;
+        in += n;
+
+        ctx->buf_off = 0;
+        n = ctx->buf_len;
+        while (n > 0) {
+            i = BIO_write(next, &(ctx->buf[ctx->buf_off]), n);
+            if (i <= 0) {
+                BIO_copy_next_retry(b);
+                return (ret == inl) ? i : ret - inl;
+            }
+            n -= i;
+            ctx->buf_off += i;
+        }
+        ctx->buf_len = 0;
+        ctx->buf_off = 0;
+    }
+    BIO_copy_next_retry(b);
+    return ret;
+}
+
+static long enc_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    BIO *dbio;
+    BIO_ENC_CTX *ctx, *dctx;
+    long ret = 1;
+    int i;
+    EVP_CIPHER_CTX **c_ctx;
+    BIO *next;
+
+    ctx = BIO_get_data(b);
+    next = BIO_next(b);
+    if (ctx == NULL)
+        return 0;
+
+    switch (cmd) {
+    case BIO_CTRL_RESET:
+        ctx->ok = 1;
+        ctx->finished = 0;
+        if (!EVP_CipherInit_ex(ctx->cipher, NULL, NULL, NULL, NULL,
+                               EVP_CIPHER_CTX_encrypting(ctx->cipher)))
+            return 0;
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    case BIO_CTRL_EOF:         /* More to read */
+        if (ctx->cont <= 0)
+            ret = 1;
+        else
+            ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    case BIO_CTRL_WPENDING:
+        ret = ctx->buf_len - ctx->buf_off;
+        if (ret <= 0)
+            ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    case BIO_CTRL_PENDING:     /* More to read in buffer */
+        ret = ctx->buf_len - ctx->buf_off;
+        if (ret <= 0)
+            ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    case BIO_CTRL_FLUSH:
+        /* do a final write */
+ again:
+        while (ctx->buf_len != ctx->buf_off) {
+            i = enc_write(b, NULL, 0);
+            if (i < 0)
+                return i;
+        }
+
+        if (!ctx->finished) {
+            ctx->finished = 1;
+            ctx->buf_off = 0;
+            ret = EVP_CipherFinal_ex(ctx->cipher,
+                                     (unsigned char *)ctx->buf,
+                                     &(ctx->buf_len));
+            ctx->ok = (int)ret;
+            if (ret <= 0)
+                break;
+
+            /* push out the bytes */
+            goto again;
+        }
+
+        /* Finally flush the underlying BIO */
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    case BIO_C_GET_CIPHER_STATUS:
+        ret = (long)ctx->ok;
+        break;
+    case BIO_C_DO_STATE_MACHINE:
+        BIO_clear_retry_flags(b);
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        BIO_copy_next_retry(b);
+        break;
+    case BIO_C_GET_CIPHER_CTX:
+        c_ctx = (EVP_CIPHER_CTX **)ptr;
+        *c_ctx = ctx->cipher;
+        BIO_set_init(b, 1);
+        break;
+    case BIO_CTRL_DUP:
+        dbio = (BIO *)ptr;
+        dctx = BIO_get_data(dbio);
+        dctx->cipher = EVP_CIPHER_CTX_new();
+        if (dctx->cipher == NULL)
+            return 0;
+        ret = EVP_CIPHER_CTX_copy(dctx->cipher, ctx->cipher);
+        if (ret)
+            BIO_set_init(dbio, 1);
+        break;
+    default:
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    }
+    return ret;
+}
+
+static long enc_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
+{
+    long ret = 1;
+    BIO *next = BIO_next(b);
+
+    if (next == NULL)
+        return 0;
+    switch (cmd) {
+    default:
+        ret = BIO_callback_ctrl(next, cmd, fp);
+        break;
+    }
+    return ret;
+}
+
+int BIO_set_cipher(BIO *b, const EVP_CIPHER *c, const unsigned char *k,
+                   const unsigned char *i, int e)
+{
+    BIO_ENC_CTX *ctx;
+    long (*callback) (struct bio_st *, int, const char *, int, long, long);
+
+    ctx = BIO_get_data(b);
+    if (ctx == NULL)
+        return 0;
+
+    callback = BIO_get_callback(b);
+
+    if ((callback != NULL) &&
+            (callback(b, BIO_CB_CTRL, (const char *)c, BIO_CTRL_SET, e,
+                      0L) <= 0))
+        return 0;
+
+    BIO_set_init(b, 1);
+
+    if (!EVP_CipherInit_ex(ctx->cipher, c, NULL, k, i, e))
+        return 0;
+
+    if (callback != NULL)
+        return callback(b, BIO_CB_CTRL, (const char *)c, BIO_CTRL_SET, e, 1L);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/bio_md.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/bio_md.c
new file mode 100644
index 000000000..288dee01b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/bio_md.c
@@ -0,0 +1,233 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <errno.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/evp.h>
+#include "internal/evp_int.h"
+#include "evp_locl.h"
+#include "internal/bio.h"
+
+/*
+ * BIO_put and BIO_get both add to the digest, BIO_gets returns the digest
+ */
+
+static int md_write(BIO *h, char const *buf, int num);
+static int md_read(BIO *h, char *buf, int size);
+static int md_gets(BIO *h, char *str, int size);
+static long md_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int md_new(BIO *h);
+static int md_free(BIO *data);
+static long md_callback_ctrl(BIO *h, int cmd, BIO_info_cb *fp);
+
+static const BIO_METHOD methods_md = {
+    BIO_TYPE_MD,
+    "message digest",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    md_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    md_read,
+    NULL,                       /* md_puts, */
+    md_gets,
+    md_ctrl,
+    md_new,
+    md_free,
+    md_callback_ctrl,
+};
+
+const BIO_METHOD *BIO_f_md(void)
+{
+    return &methods_md;
+}
+
+static int md_new(BIO *bi)
+{
+    EVP_MD_CTX *ctx;
+
+    ctx = EVP_MD_CTX_new();
+    if (ctx == NULL)
+        return 0;
+
+    BIO_set_init(bi, 1);
+    BIO_set_data(bi, ctx);
+
+    return 1;
+}
+
+static int md_free(BIO *a)
+{
+    if (a == NULL)
+        return 0;
+    EVP_MD_CTX_free(BIO_get_data(a));
+    BIO_set_data(a, NULL);
+    BIO_set_init(a, 0);
+
+    return 1;
+}
+
+static int md_read(BIO *b, char *out, int outl)
+{
+    int ret = 0;
+    EVP_MD_CTX *ctx;
+    BIO *next;
+
+    if (out == NULL)
+        return 0;
+
+    ctx = BIO_get_data(b);
+    next = BIO_next(b);
+
+    if ((ctx == NULL) || (next == NULL))
+        return 0;
+
+    ret = BIO_read(next, out, outl);
+    if (BIO_get_init(b)) {
+        if (ret > 0) {
+            if (EVP_DigestUpdate(ctx, (unsigned char *)out,
+                                 (unsigned int)ret) <= 0)
+                return -1;
+        }
+    }
+    BIO_clear_retry_flags(b);
+    BIO_copy_next_retry(b);
+    return ret;
+}
+
+static int md_write(BIO *b, const char *in, int inl)
+{
+    int ret = 0;
+    EVP_MD_CTX *ctx;
+    BIO *next;
+
+    if ((in == NULL) || (inl <= 0))
+        return 0;
+
+    ctx = BIO_get_data(b);
+    next = BIO_next(b);
+    if ((ctx != NULL) && (next != NULL))
+        ret = BIO_write(next, in, inl);
+
+    if (BIO_get_init(b)) {
+        if (ret > 0) {
+            if (!EVP_DigestUpdate(ctx, (const unsigned char *)in,
+                                  (unsigned int)ret)) {
+                BIO_clear_retry_flags(b);
+                return 0;
+            }
+        }
+    }
+    if (next != NULL) {
+        BIO_clear_retry_flags(b);
+        BIO_copy_next_retry(b);
+    }
+    return ret;
+}
+
+static long md_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    EVP_MD_CTX *ctx, *dctx, **pctx;
+    const EVP_MD **ppmd;
+    EVP_MD *md;
+    long ret = 1;
+    BIO *dbio, *next;
+
+
+    ctx = BIO_get_data(b);
+    next = BIO_next(b);
+
+    switch (cmd) {
+    case BIO_CTRL_RESET:
+        if (BIO_get_init(b))
+            ret = EVP_DigestInit_ex(ctx, ctx->digest, NULL);
+        else
+            ret = 0;
+        if (ret > 0)
+            ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    case BIO_C_GET_MD:
+        if (BIO_get_init(b)) {
+            ppmd = ptr;
+            *ppmd = ctx->digest;
+        } else
+            ret = 0;
+        break;
+    case BIO_C_GET_MD_CTX:
+        pctx = ptr;
+        *pctx = ctx;
+        BIO_set_init(b, 1);
+        break;
+    case BIO_C_SET_MD_CTX:
+        if (BIO_get_init(b))
+            BIO_set_data(b, ptr);
+        else
+            ret = 0;
+        break;
+    case BIO_C_DO_STATE_MACHINE:
+        BIO_clear_retry_flags(b);
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        BIO_copy_next_retry(b);
+        break;
+
+    case BIO_C_SET_MD:
+        md = ptr;
+        ret = EVP_DigestInit_ex(ctx, md, NULL);
+        if (ret > 0)
+            BIO_set_init(b, 1);
+        break;
+    case BIO_CTRL_DUP:
+        dbio = ptr;
+        dctx = BIO_get_data(dbio);
+        if (!EVP_MD_CTX_copy_ex(dctx, ctx))
+            return 0;
+        BIO_set_init(b, 1);
+        break;
+    default:
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    }
+    return ret;
+}
+
+static long md_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
+{
+    long ret = 1;
+    BIO *next;
+
+    next = BIO_next(b);
+
+    if (next == NULL)
+        return 0;
+
+    switch (cmd) {
+    default:
+        ret = BIO_callback_ctrl(next, cmd, fp);
+        break;
+    }
+    return ret;
+}
+
+static int md_gets(BIO *bp, char *buf, int size)
+{
+    EVP_MD_CTX *ctx;
+    unsigned int ret;
+
+    ctx = BIO_get_data(bp);
+
+    if (size < ctx->digest->md_size)
+        return 0;
+
+    if (EVP_DigestFinal_ex(ctx, (unsigned char *)buf, &ret) <= 0)
+        return -1;
+
+    return (int)ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/bio_ok.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/bio_ok.c
new file mode 100644
index 000000000..a0462219b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/bio_ok.c
@@ -0,0 +1,610 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*-
+        From: Arne Ansper
+
+        Why BIO_f_reliable?
+
+        I wrote function which took BIO* as argument, read data from it
+        and processed it. Then I wanted to store the input file in
+        encrypted form. OK I pushed BIO_f_cipher to the BIO stack
+        and everything was OK. BUT if user types wrong password
+        BIO_f_cipher outputs only garbage and my function crashes. Yes
+        I can and I should fix my function, but BIO_f_cipher is
+        easy way to add encryption support to many existing applications
+        and it's hard to debug and fix them all.
+
+        So I wanted another BIO which would catch the incorrect passwords and
+        file damages which cause garbage on BIO_f_cipher's output.
+
+        The easy way is to push the BIO_f_md and save the checksum at
+        the end of the file. However there are several problems with this
+        approach:
+
+        1) you must somehow separate checksum from actual data.
+        2) you need lot's of memory when reading the file, because you
+        must read to the end of the file and verify the checksum before
+        letting the application to read the data.
+
+        BIO_f_reliable tries to solve both problems, so that you can
+        read and write arbitrary long streams using only fixed amount
+        of memory.
+
+        BIO_f_reliable splits data stream into blocks. Each block is prefixed
+        with it's length and suffixed with it's digest. So you need only
+        several Kbytes of memory to buffer single block before verifying
+        it's digest.
+
+        BIO_f_reliable goes further and adds several important capabilities:
+
+        1) the digest of the block is computed over the whole stream
+        -- so nobody can rearrange the blocks or remove or replace them.
+
+        2) to detect invalid passwords right at the start BIO_f_reliable
+        adds special prefix to the stream. In order to avoid known plain-text
+        attacks this prefix is generated as follows:
+
+                *) digest is initialized with random seed instead of
+                standardized one.
+                *) same seed is written to output
+                *) well-known text is then hashed and the output
+                of the digest is also written to output.
+
+        reader can now read the seed from stream, hash the same string
+        and then compare the digest output.
+
+        Bad things: BIO_f_reliable knows what's going on in EVP_Digest. I
+        initially wrote and tested this code on x86 machine and wrote the
+        digests out in machine-dependent order :( There are people using
+        this code and I cannot change this easily without making existing
+        data files unreadable.
+
+*/
+
+#include <stdio.h>
+#include <errno.h>
+#include <assert.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include "internal/bio.h"
+#include <openssl/evp.h>
+#include <openssl/rand.h>
+#include "internal/evp_int.h"
+
+static int ok_write(BIO *h, const char *buf, int num);
+static int ok_read(BIO *h, char *buf, int size);
+static long ok_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int ok_new(BIO *h);
+static int ok_free(BIO *data);
+static long ok_callback_ctrl(BIO *h, int cmd, BIO_info_cb *fp);
+
+static __owur int sig_out(BIO *b);
+static __owur int sig_in(BIO *b);
+static __owur int block_out(BIO *b);
+static __owur int block_in(BIO *b);
+#define OK_BLOCK_SIZE   (1024*4)
+#define OK_BLOCK_BLOCK  4
+#define IOBS            (OK_BLOCK_SIZE+ OK_BLOCK_BLOCK+ 3*EVP_MAX_MD_SIZE)
+#define WELLKNOWN "The quick brown fox jumped over the lazy dog's back."
+
+typedef struct ok_struct {
+    size_t buf_len;
+    size_t buf_off;
+    size_t buf_len_save;
+    size_t buf_off_save;
+    int cont;                   /* <= 0 when finished */
+    int finished;
+    EVP_MD_CTX *md;
+    int blockout;               /* output block is ready */
+    int sigio;                  /* must process signature */
+    unsigned char buf[IOBS];
+} BIO_OK_CTX;
+
+static const BIO_METHOD methods_ok = {
+    BIO_TYPE_CIPHER,
+    "reliable",
+    /* TODO: Convert to new style write function */
+    bwrite_conv,
+    ok_write,
+    /* TODO: Convert to new style read function */
+    bread_conv,
+    ok_read,
+    NULL,                       /* ok_puts, */
+    NULL,                       /* ok_gets, */
+    ok_ctrl,
+    ok_new,
+    ok_free,
+    ok_callback_ctrl,
+};
+
+const BIO_METHOD *BIO_f_reliable(void)
+{
+    return &methods_ok;
+}
+
+static int ok_new(BIO *bi)
+{
+    BIO_OK_CTX *ctx;
+
+    if ((ctx = OPENSSL_zalloc(sizeof(*ctx))) == NULL) {
+        EVPerr(EVP_F_OK_NEW, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    ctx->cont = 1;
+    ctx->sigio = 1;
+    ctx->md = EVP_MD_CTX_new();
+    if (ctx->md == NULL) {
+        OPENSSL_free(ctx);
+        return 0;
+    }
+    BIO_set_init(bi, 0);
+    BIO_set_data(bi, ctx);
+
+    return 1;
+}
+
+static int ok_free(BIO *a)
+{
+    BIO_OK_CTX *ctx;
+
+    if (a == NULL)
+        return 0;
+
+    ctx = BIO_get_data(a);
+
+    EVP_MD_CTX_free(ctx->md);
+    OPENSSL_clear_free(ctx, sizeof(BIO_OK_CTX));
+    BIO_set_data(a, NULL);
+    BIO_set_init(a, 0);
+
+    return 1;
+}
+
+static int ok_read(BIO *b, char *out, int outl)
+{
+    int ret = 0, i, n;
+    BIO_OK_CTX *ctx;
+    BIO *next;
+
+    if (out == NULL)
+        return 0;
+
+    ctx = BIO_get_data(b);
+    next = BIO_next(b);
+
+    if ((ctx == NULL) || (next == NULL) || (BIO_get_init(b) == 0))
+        return 0;
+
+    while (outl > 0) {
+
+        /* copy clean bytes to output buffer */
+        if (ctx->blockout) {
+            i = ctx->buf_len - ctx->buf_off;
+            if (i > outl)
+                i = outl;
+            memcpy(out, &(ctx->buf[ctx->buf_off]), i);
+            ret += i;
+            out += i;
+            outl -= i;
+            ctx->buf_off += i;
+
+            /* all clean bytes are out */
+            if (ctx->buf_len == ctx->buf_off) {
+                ctx->buf_off = 0;
+
+                /*
+                 * copy start of the next block into proper place
+                 */
+                if (ctx->buf_len_save - ctx->buf_off_save > 0) {
+                    ctx->buf_len = ctx->buf_len_save - ctx->buf_off_save;
+                    memmove(ctx->buf, &(ctx->buf[ctx->buf_off_save]),
+                            ctx->buf_len);
+                } else {
+                    ctx->buf_len = 0;
+                }
+                ctx->blockout = 0;
+            }
+        }
+
+        /* output buffer full -- cancel */
+        if (outl == 0)
+            break;
+
+        /* no clean bytes in buffer -- fill it */
+        n = IOBS - ctx->buf_len;
+        i = BIO_read(next, &(ctx->buf[ctx->buf_len]), n);
+
+        if (i <= 0)
+            break;              /* nothing new */
+
+        ctx->buf_len += i;
+
+        /* no signature yet -- check if we got one */
+        if (ctx->sigio == 1) {
+            if (!sig_in(b)) {
+                BIO_clear_retry_flags(b);
+                return 0;
+            }
+        }
+
+        /* signature ok -- check if we got block */
+        if (ctx->sigio == 0) {
+            if (!block_in(b)) {
+                BIO_clear_retry_flags(b);
+                return 0;
+            }
+        }
+
+        /* invalid block -- cancel */
+        if (ctx->cont <= 0)
+            break;
+
+    }
+
+    BIO_clear_retry_flags(b);
+    BIO_copy_next_retry(b);
+    return ret;
+}
+
+static int ok_write(BIO *b, const char *in, int inl)
+{
+    int ret = 0, n, i;
+    BIO_OK_CTX *ctx;
+    BIO *next;
+
+    if (inl <= 0)
+        return inl;
+
+    ctx = BIO_get_data(b);
+    next = BIO_next(b);
+    ret = inl;
+
+    if ((ctx == NULL) || (next == NULL) || (BIO_get_init(b) == 0))
+        return 0;
+
+    if (ctx->sigio && !sig_out(b))
+        return 0;
+
+    do {
+        BIO_clear_retry_flags(b);
+        n = ctx->buf_len - ctx->buf_off;
+        while (ctx->blockout && n > 0) {
+            i = BIO_write(next, &(ctx->buf[ctx->buf_off]), n);
+            if (i <= 0) {
+                BIO_copy_next_retry(b);
+                if (!BIO_should_retry(b))
+                    ctx->cont = 0;
+                return i;
+            }
+            ctx->buf_off += i;
+            n -= i;
+        }
+
+        /* at this point all pending data has been written */
+        ctx->blockout = 0;
+        if (ctx->buf_len == ctx->buf_off) {
+            ctx->buf_len = OK_BLOCK_BLOCK;
+            ctx->buf_off = 0;
+        }
+
+        if ((in == NULL) || (inl <= 0))
+            return 0;
+
+        n = (inl + ctx->buf_len > OK_BLOCK_SIZE + OK_BLOCK_BLOCK) ?
+            (int)(OK_BLOCK_SIZE + OK_BLOCK_BLOCK - ctx->buf_len) : inl;
+
+        memcpy(&ctx->buf[ctx->buf_len], in, n);
+        ctx->buf_len += n;
+        inl -= n;
+        in += n;
+
+        if (ctx->buf_len >= OK_BLOCK_SIZE + OK_BLOCK_BLOCK) {
+            if (!block_out(b)) {
+                BIO_clear_retry_flags(b);
+                return 0;
+            }
+        }
+    } while (inl > 0);
+
+    BIO_clear_retry_flags(b);
+    BIO_copy_next_retry(b);
+    return ret;
+}
+
+static long ok_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    BIO_OK_CTX *ctx;
+    EVP_MD *md;
+    const EVP_MD **ppmd;
+    long ret = 1;
+    int i;
+    BIO *next;
+
+    ctx = BIO_get_data(b);
+    next = BIO_next(b);
+
+    switch (cmd) {
+    case BIO_CTRL_RESET:
+        ctx->buf_len = 0;
+        ctx->buf_off = 0;
+        ctx->buf_len_save = 0;
+        ctx->buf_off_save = 0;
+        ctx->cont = 1;
+        ctx->finished = 0;
+        ctx->blockout = 0;
+        ctx->sigio = 1;
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    case BIO_CTRL_EOF:         /* More to read */
+        if (ctx->cont <= 0)
+            ret = 1;
+        else
+            ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    case BIO_CTRL_PENDING:     /* More to read in buffer */
+    case BIO_CTRL_WPENDING:    /* More to read in buffer */
+        ret = ctx->blockout ? ctx->buf_len - ctx->buf_off : 0;
+        if (ret <= 0)
+            ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    case BIO_CTRL_FLUSH:
+        /* do a final write */
+        if (ctx->blockout == 0)
+            if (!block_out(b))
+                return 0;
+
+        while (ctx->blockout) {
+            i = ok_write(b, NULL, 0);
+            if (i < 0) {
+                ret = i;
+                break;
+            }
+        }
+
+        ctx->finished = 1;
+        ctx->buf_off = ctx->buf_len = 0;
+        ctx->cont = (int)ret;
+
+        /* Finally flush the underlying BIO */
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    case BIO_C_DO_STATE_MACHINE:
+        BIO_clear_retry_flags(b);
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        BIO_copy_next_retry(b);
+        break;
+    case BIO_CTRL_INFO:
+        ret = (long)ctx->cont;
+        break;
+    case BIO_C_SET_MD:
+        md = ptr;
+        if (!EVP_DigestInit_ex(ctx->md, md, NULL))
+            return 0;
+        BIO_set_init(b, 1);
+        break;
+    case BIO_C_GET_MD:
+        if (BIO_get_init(b)) {
+            ppmd = ptr;
+            *ppmd = EVP_MD_CTX_md(ctx->md);
+        } else
+            ret = 0;
+        break;
+    default:
+        ret = BIO_ctrl(next, cmd, num, ptr);
+        break;
+    }
+    return ret;
+}
+
+static long ok_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
+{
+    long ret = 1;
+    BIO *next;
+
+    next = BIO_next(b);
+
+    if (next == NULL)
+        return 0;
+
+    switch (cmd) {
+    default:
+        ret = BIO_callback_ctrl(next, cmd, fp);
+        break;
+    }
+
+    return ret;
+}
+
+static void longswap(void *_ptr, size_t len)
+{
+    const union {
+        long one;
+        char little;
+    } is_endian = {
+        1
+    };
+
+    if (is_endian.little) {
+        size_t i;
+        unsigned char *p = _ptr, c;
+
+        for (i = 0; i < len; i += 4) {
+            c = p[0], p[0] = p[3], p[3] = c;
+            c = p[1], p[1] = p[2], p[2] = c;
+        }
+    }
+}
+
+static int sig_out(BIO *b)
+{
+    BIO_OK_CTX *ctx;
+    EVP_MD_CTX *md;
+    const EVP_MD *digest;
+    int md_size;
+    void *md_data;
+
+    ctx = BIO_get_data(b);
+    md = ctx->md;
+    digest = EVP_MD_CTX_md(md);
+    md_size = EVP_MD_size(digest);
+    md_data = EVP_MD_CTX_md_data(md);
+
+    if (ctx->buf_len + 2 * md_size > OK_BLOCK_SIZE)
+        return 1;
+
+    if (!EVP_DigestInit_ex(md, digest, NULL))
+        goto berr;
+    /*
+     * FIXME: there's absolutely no guarantee this makes any sense at all,
+     * particularly now EVP_MD_CTX has been restructured.
+     */
+    if (RAND_bytes(md_data, md_size) <= 0)
+        goto berr;
+    memcpy(&(ctx->buf[ctx->buf_len]), md_data, md_size);
+    longswap(&(ctx->buf[ctx->buf_len]), md_size);
+    ctx->buf_len += md_size;
+
+    if (!EVP_DigestUpdate(md, WELLKNOWN, strlen(WELLKNOWN)))
+        goto berr;
+    if (!EVP_DigestFinal_ex(md, &(ctx->buf[ctx->buf_len]), NULL))
+        goto berr;
+    ctx->buf_len += md_size;
+    ctx->blockout = 1;
+    ctx->sigio = 0;
+    return 1;
+ berr:
+    BIO_clear_retry_flags(b);
+    return 0;
+}
+
+static int sig_in(BIO *b)
+{
+    BIO_OK_CTX *ctx;
+    EVP_MD_CTX *md;
+    unsigned char tmp[EVP_MAX_MD_SIZE];
+    int ret = 0;
+    const EVP_MD *digest;
+    int md_size;
+    void *md_data;
+
+    ctx = BIO_get_data(b);
+    md = ctx->md;
+    digest = EVP_MD_CTX_md(md);
+    md_size = EVP_MD_size(digest);
+    md_data = EVP_MD_CTX_md_data(md);
+
+    if ((int)(ctx->buf_len - ctx->buf_off) < 2 * md_size)
+        return 1;
+
+    if (!EVP_DigestInit_ex(md, digest, NULL))
+        goto berr;
+    memcpy(md_data, &(ctx->buf[ctx->buf_off]), md_size);
+    longswap(md_data, md_size);
+    ctx->buf_off += md_size;
+
+    if (!EVP_DigestUpdate(md, WELLKNOWN, strlen(WELLKNOWN)))
+        goto berr;
+    if (!EVP_DigestFinal_ex(md, tmp, NULL))
+        goto berr;
+    ret = memcmp(&(ctx->buf[ctx->buf_off]), tmp, md_size) == 0;
+    ctx->buf_off += md_size;
+    if (ret == 1) {
+        ctx->sigio = 0;
+        if (ctx->buf_len != ctx->buf_off) {
+            memmove(ctx->buf, &(ctx->buf[ctx->buf_off]),
+                    ctx->buf_len - ctx->buf_off);
+        }
+        ctx->buf_len -= ctx->buf_off;
+        ctx->buf_off = 0;
+    } else {
+        ctx->cont = 0;
+    }
+    return 1;
+ berr:
+    BIO_clear_retry_flags(b);
+    return 0;
+}
+
+static int block_out(BIO *b)
+{
+    BIO_OK_CTX *ctx;
+    EVP_MD_CTX *md;
+    unsigned long tl;
+    const EVP_MD *digest;
+    int md_size;
+
+    ctx = BIO_get_data(b);
+    md = ctx->md;
+    digest = EVP_MD_CTX_md(md);
+    md_size = EVP_MD_size(digest);
+
+    tl = ctx->buf_len - OK_BLOCK_BLOCK;
+    ctx->buf[0] = (unsigned char)(tl >> 24);
+    ctx->buf[1] = (unsigned char)(tl >> 16);
+    ctx->buf[2] = (unsigned char)(tl >> 8);
+    ctx->buf[3] = (unsigned char)(tl);
+    if (!EVP_DigestUpdate(md,
+                          (unsigned char *)&(ctx->buf[OK_BLOCK_BLOCK]), tl))
+        goto berr;
+    if (!EVP_DigestFinal_ex(md, &(ctx->buf[ctx->buf_len]), NULL))
+        goto berr;
+    ctx->buf_len += md_size;
+    ctx->blockout = 1;
+    return 1;
+ berr:
+    BIO_clear_retry_flags(b);
+    return 0;
+}
+
+static int block_in(BIO *b)
+{
+    BIO_OK_CTX *ctx;
+    EVP_MD_CTX *md;
+    unsigned long tl = 0;
+    unsigned char tmp[EVP_MAX_MD_SIZE];
+    int md_size;
+
+    ctx = BIO_get_data(b);
+    md = ctx->md;
+    md_size = EVP_MD_size(EVP_MD_CTX_md(md));
+
+    assert(sizeof(tl) >= OK_BLOCK_BLOCK); /* always true */
+    tl = ctx->buf[0];
+    tl <<= 8;
+    tl |= ctx->buf[1];
+    tl <<= 8;
+    tl |= ctx->buf[2];
+    tl <<= 8;
+    tl |= ctx->buf[3];
+
+    if (ctx->buf_len < tl + OK_BLOCK_BLOCK + md_size)
+        return 1;
+
+    if (!EVP_DigestUpdate(md,
+                          (unsigned char *)&(ctx->buf[OK_BLOCK_BLOCK]), tl))
+        goto berr;
+    if (!EVP_DigestFinal_ex(md, tmp, NULL))
+        goto berr;
+    if (memcmp(&(ctx->buf[tl + OK_BLOCK_BLOCK]), tmp, md_size) == 0) {
+        /* there might be parts from next block lurking around ! */
+        ctx->buf_off_save = tl + OK_BLOCK_BLOCK + md_size;
+        ctx->buf_len_save = ctx->buf_len;
+        ctx->buf_off = OK_BLOCK_BLOCK;
+        ctx->buf_len = tl + OK_BLOCK_BLOCK;
+        ctx->blockout = 1;
+    } else {
+        ctx->cont = 0;
+    }
+    return 1;
+ berr:
+    BIO_clear_retry_flags(b);
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/build.info
new file mode 100644
index 000000000..cc33ac3c4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/build.info
@@ -0,0 +1,25 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        encode.c digest.c evp_enc.c evp_key.c evp_cnf.c \
+        e_des.c e_bf.c e_idea.c e_des3.c e_camellia.c\
+        e_rc4.c e_aes.c names.c e_seed.c e_aria.c e_sm4.c \
+        e_xcbc_d.c e_rc2.c e_cast.c e_rc5.c \
+        m_null.c m_md2.c m_md4.c m_md5.c m_sha1.c m_wp.c \
+        m_md5_sha1.c m_mdc2.c m_ripemd.c m_sha3.c \
+        p_open.c p_seal.c p_sign.c p_verify.c p_lib.c p_enc.c p_dec.c \
+        bio_md.c bio_b64.c bio_enc.c evp_err.c e_null.c \
+        c_allc.c c_alld.c evp_lib.c bio_ok.c \
+        evp_pkey.c evp_pbe.c p5_crpt.c p5_crpt2.c pbe_scrypt.c \
+        e_old.c pmeth_lib.c pmeth_fn.c pmeth_gn.c m_sigver.c \
+        e_aes_cbc_hmac_sha1.c e_aes_cbc_hmac_sha256.c e_rc4_hmac_md5.c \
+        e_chacha20_poly1305.c cmeth_lib.c
+
+INCLUDE[e_aes.o]=.. ../modes
+INCLUDE[e_aes_cbc_hmac_sha1.o]=../modes
+INCLUDE[e_aes_cbc_hmac_sha256.o]=../modes
+INCLUDE[e_aria.o]=.. ../modes
+INCLUDE[e_camellia.o]=.. ../modes
+INCLUDE[e_sm4.o]=.. ../modes
+INCLUDE[e_des.o]=..
+INCLUDE[e_des3.o]=..
+INCLUDE[m_sha3.o]=..
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/c_allc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/c_allc.c
new file mode 100644
index 000000000..086b3c4d5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/c_allc.c
@@ -0,0 +1,266 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include "internal/evp_int.h"
+#include <openssl/pkcs12.h>
+#include <openssl/objects.h>
+
+void openssl_add_all_ciphers_int(void)
+{
+
+#ifndef OPENSSL_NO_DES
+    EVP_add_cipher(EVP_des_cfb());
+    EVP_add_cipher(EVP_des_cfb1());
+    EVP_add_cipher(EVP_des_cfb8());
+    EVP_add_cipher(EVP_des_ede_cfb());
+    EVP_add_cipher(EVP_des_ede3_cfb());
+    EVP_add_cipher(EVP_des_ede3_cfb1());
+    EVP_add_cipher(EVP_des_ede3_cfb8());
+
+    EVP_add_cipher(EVP_des_ofb());
+    EVP_add_cipher(EVP_des_ede_ofb());
+    EVP_add_cipher(EVP_des_ede3_ofb());
+
+    EVP_add_cipher(EVP_desx_cbc());
+    EVP_add_cipher_alias(SN_desx_cbc, "DESX");
+    EVP_add_cipher_alias(SN_desx_cbc, "desx");
+
+    EVP_add_cipher(EVP_des_cbc());
+    EVP_add_cipher_alias(SN_des_cbc, "DES");
+    EVP_add_cipher_alias(SN_des_cbc, "des");
+    EVP_add_cipher(EVP_des_ede_cbc());
+    EVP_add_cipher(EVP_des_ede3_cbc());
+    EVP_add_cipher_alias(SN_des_ede3_cbc, "DES3");
+    EVP_add_cipher_alias(SN_des_ede3_cbc, "des3");
+
+    EVP_add_cipher(EVP_des_ecb());
+    EVP_add_cipher(EVP_des_ede());
+    EVP_add_cipher_alias(SN_des_ede_ecb, "DES-EDE-ECB");
+    EVP_add_cipher_alias(SN_des_ede_ecb, "des-ede-ecb");
+    EVP_add_cipher(EVP_des_ede3());
+    EVP_add_cipher_alias(SN_des_ede3_ecb, "DES-EDE3-ECB");
+    EVP_add_cipher_alias(SN_des_ede3_ecb, "des-ede3-ecb");
+    EVP_add_cipher(EVP_des_ede3_wrap());
+    EVP_add_cipher_alias(SN_id_smime_alg_CMS3DESwrap, "des3-wrap");
+#endif
+
+#ifndef OPENSSL_NO_RC4
+    EVP_add_cipher(EVP_rc4());
+    EVP_add_cipher(EVP_rc4_40());
+# ifndef OPENSSL_NO_MD5
+    EVP_add_cipher(EVP_rc4_hmac_md5());
+# endif
+#endif
+
+#ifndef OPENSSL_NO_IDEA
+    EVP_add_cipher(EVP_idea_ecb());
+    EVP_add_cipher(EVP_idea_cfb());
+    EVP_add_cipher(EVP_idea_ofb());
+    EVP_add_cipher(EVP_idea_cbc());
+    EVP_add_cipher_alias(SN_idea_cbc, "IDEA");
+    EVP_add_cipher_alias(SN_idea_cbc, "idea");
+#endif
+
+#ifndef OPENSSL_NO_SEED
+    EVP_add_cipher(EVP_seed_ecb());
+    EVP_add_cipher(EVP_seed_cfb());
+    EVP_add_cipher(EVP_seed_ofb());
+    EVP_add_cipher(EVP_seed_cbc());
+    EVP_add_cipher_alias(SN_seed_cbc, "SEED");
+    EVP_add_cipher_alias(SN_seed_cbc, "seed");
+#endif
+
+#ifndef OPENSSL_NO_SM4
+    EVP_add_cipher(EVP_sm4_ecb());
+    EVP_add_cipher(EVP_sm4_cbc());
+    EVP_add_cipher(EVP_sm4_cfb());
+    EVP_add_cipher(EVP_sm4_ofb());
+    EVP_add_cipher(EVP_sm4_ctr());
+    EVP_add_cipher_alias(SN_sm4_cbc, "SM4");
+    EVP_add_cipher_alias(SN_sm4_cbc, "sm4");
+#endif
+
+#ifndef OPENSSL_NO_RC2
+    EVP_add_cipher(EVP_rc2_ecb());
+    EVP_add_cipher(EVP_rc2_cfb());
+    EVP_add_cipher(EVP_rc2_ofb());
+    EVP_add_cipher(EVP_rc2_cbc());
+    EVP_add_cipher(EVP_rc2_40_cbc());
+    EVP_add_cipher(EVP_rc2_64_cbc());
+    EVP_add_cipher_alias(SN_rc2_cbc, "RC2");
+    EVP_add_cipher_alias(SN_rc2_cbc, "rc2");
+    EVP_add_cipher_alias(SN_rc2_cbc, "rc2-128");
+    EVP_add_cipher_alias(SN_rc2_64_cbc, "rc2-64");
+    EVP_add_cipher_alias(SN_rc2_40_cbc, "rc2-40");
+#endif
+
+#ifndef OPENSSL_NO_BF
+    EVP_add_cipher(EVP_bf_ecb());
+    EVP_add_cipher(EVP_bf_cfb());
+    EVP_add_cipher(EVP_bf_ofb());
+    EVP_add_cipher(EVP_bf_cbc());
+    EVP_add_cipher_alias(SN_bf_cbc, "BF");
+    EVP_add_cipher_alias(SN_bf_cbc, "bf");
+    EVP_add_cipher_alias(SN_bf_cbc, "blowfish");
+#endif
+
+#ifndef OPENSSL_NO_CAST
+    EVP_add_cipher(EVP_cast5_ecb());
+    EVP_add_cipher(EVP_cast5_cfb());
+    EVP_add_cipher(EVP_cast5_ofb());
+    EVP_add_cipher(EVP_cast5_cbc());
+    EVP_add_cipher_alias(SN_cast5_cbc, "CAST");
+    EVP_add_cipher_alias(SN_cast5_cbc, "cast");
+    EVP_add_cipher_alias(SN_cast5_cbc, "CAST-cbc");
+    EVP_add_cipher_alias(SN_cast5_cbc, "cast-cbc");
+#endif
+
+#ifndef OPENSSL_NO_RC5
+    EVP_add_cipher(EVP_rc5_32_12_16_ecb());
+    EVP_add_cipher(EVP_rc5_32_12_16_cfb());
+    EVP_add_cipher(EVP_rc5_32_12_16_ofb());
+    EVP_add_cipher(EVP_rc5_32_12_16_cbc());
+    EVP_add_cipher_alias(SN_rc5_cbc, "rc5");
+    EVP_add_cipher_alias(SN_rc5_cbc, "RC5");
+#endif
+
+    EVP_add_cipher(EVP_aes_128_ecb());
+    EVP_add_cipher(EVP_aes_128_cbc());
+    EVP_add_cipher(EVP_aes_128_cfb());
+    EVP_add_cipher(EVP_aes_128_cfb1());
+    EVP_add_cipher(EVP_aes_128_cfb8());
+    EVP_add_cipher(EVP_aes_128_ofb());
+    EVP_add_cipher(EVP_aes_128_ctr());
+    EVP_add_cipher(EVP_aes_128_gcm());
+#ifndef OPENSSL_NO_OCB
+    EVP_add_cipher(EVP_aes_128_ocb());
+#endif
+    EVP_add_cipher(EVP_aes_128_xts());
+    EVP_add_cipher(EVP_aes_128_ccm());
+    EVP_add_cipher(EVP_aes_128_wrap());
+    EVP_add_cipher_alias(SN_id_aes128_wrap, "aes128-wrap");
+    EVP_add_cipher(EVP_aes_128_wrap_pad());
+    EVP_add_cipher_alias(SN_aes_128_cbc, "AES128");
+    EVP_add_cipher_alias(SN_aes_128_cbc, "aes128");
+    EVP_add_cipher(EVP_aes_192_ecb());
+    EVP_add_cipher(EVP_aes_192_cbc());
+    EVP_add_cipher(EVP_aes_192_cfb());
+    EVP_add_cipher(EVP_aes_192_cfb1());
+    EVP_add_cipher(EVP_aes_192_cfb8());
+    EVP_add_cipher(EVP_aes_192_ofb());
+    EVP_add_cipher(EVP_aes_192_ctr());
+    EVP_add_cipher(EVP_aes_192_gcm());
+#ifndef OPENSSL_NO_OCB
+    EVP_add_cipher(EVP_aes_192_ocb());
+#endif
+    EVP_add_cipher(EVP_aes_192_ccm());
+    EVP_add_cipher(EVP_aes_192_wrap());
+    EVP_add_cipher_alias(SN_id_aes192_wrap, "aes192-wrap");
+    EVP_add_cipher(EVP_aes_192_wrap_pad());
+    EVP_add_cipher_alias(SN_aes_192_cbc, "AES192");
+    EVP_add_cipher_alias(SN_aes_192_cbc, "aes192");
+    EVP_add_cipher(EVP_aes_256_ecb());
+    EVP_add_cipher(EVP_aes_256_cbc());
+    EVP_add_cipher(EVP_aes_256_cfb());
+    EVP_add_cipher(EVP_aes_256_cfb1());
+    EVP_add_cipher(EVP_aes_256_cfb8());
+    EVP_add_cipher(EVP_aes_256_ofb());
+    EVP_add_cipher(EVP_aes_256_ctr());
+    EVP_add_cipher(EVP_aes_256_gcm());
+#ifndef OPENSSL_NO_OCB
+    EVP_add_cipher(EVP_aes_256_ocb());
+#endif
+    EVP_add_cipher(EVP_aes_256_xts());
+    EVP_add_cipher(EVP_aes_256_ccm());
+    EVP_add_cipher(EVP_aes_256_wrap());
+    EVP_add_cipher_alias(SN_id_aes256_wrap, "aes256-wrap");
+    EVP_add_cipher(EVP_aes_256_wrap_pad());
+    EVP_add_cipher_alias(SN_aes_256_cbc, "AES256");
+    EVP_add_cipher_alias(SN_aes_256_cbc, "aes256");
+    EVP_add_cipher(EVP_aes_128_cbc_hmac_sha1());
+    EVP_add_cipher(EVP_aes_256_cbc_hmac_sha1());
+    EVP_add_cipher(EVP_aes_128_cbc_hmac_sha256());
+    EVP_add_cipher(EVP_aes_256_cbc_hmac_sha256());
+
+#ifndef OPENSSL_NO_ARIA
+    EVP_add_cipher(EVP_aria_128_ecb());
+    EVP_add_cipher(EVP_aria_128_cbc());
+    EVP_add_cipher(EVP_aria_128_cfb());
+    EVP_add_cipher(EVP_aria_128_cfb1());
+    EVP_add_cipher(EVP_aria_128_cfb8());
+    EVP_add_cipher(EVP_aria_128_ctr());
+    EVP_add_cipher(EVP_aria_128_ofb());
+    EVP_add_cipher(EVP_aria_128_gcm());
+    EVP_add_cipher(EVP_aria_128_ccm());
+    EVP_add_cipher_alias(SN_aria_128_cbc, "ARIA128");
+    EVP_add_cipher_alias(SN_aria_128_cbc, "aria128");
+    EVP_add_cipher(EVP_aria_192_ecb());
+    EVP_add_cipher(EVP_aria_192_cbc());
+    EVP_add_cipher(EVP_aria_192_cfb());
+    EVP_add_cipher(EVP_aria_192_cfb1());
+    EVP_add_cipher(EVP_aria_192_cfb8());
+    EVP_add_cipher(EVP_aria_192_ctr());
+    EVP_add_cipher(EVP_aria_192_ofb());
+    EVP_add_cipher(EVP_aria_192_gcm());
+    EVP_add_cipher(EVP_aria_192_ccm());
+    EVP_add_cipher_alias(SN_aria_192_cbc, "ARIA192");
+    EVP_add_cipher_alias(SN_aria_192_cbc, "aria192");
+    EVP_add_cipher(EVP_aria_256_ecb());
+    EVP_add_cipher(EVP_aria_256_cbc());
+    EVP_add_cipher(EVP_aria_256_cfb());
+    EVP_add_cipher(EVP_aria_256_cfb1());
+    EVP_add_cipher(EVP_aria_256_cfb8());
+    EVP_add_cipher(EVP_aria_256_ctr());
+    EVP_add_cipher(EVP_aria_256_ofb());
+    EVP_add_cipher(EVP_aria_256_gcm());
+    EVP_add_cipher(EVP_aria_256_ccm());
+    EVP_add_cipher_alias(SN_aria_256_cbc, "ARIA256");
+    EVP_add_cipher_alias(SN_aria_256_cbc, "aria256");
+#endif
+
+#ifndef OPENSSL_NO_CAMELLIA
+    EVP_add_cipher(EVP_camellia_128_ecb());
+    EVP_add_cipher(EVP_camellia_128_cbc());
+    EVP_add_cipher(EVP_camellia_128_cfb());
+    EVP_add_cipher(EVP_camellia_128_cfb1());
+    EVP_add_cipher(EVP_camellia_128_cfb8());
+    EVP_add_cipher(EVP_camellia_128_ofb());
+    EVP_add_cipher_alias(SN_camellia_128_cbc, "CAMELLIA128");
+    EVP_add_cipher_alias(SN_camellia_128_cbc, "camellia128");
+    EVP_add_cipher(EVP_camellia_192_ecb());
+    EVP_add_cipher(EVP_camellia_192_cbc());
+    EVP_add_cipher(EVP_camellia_192_cfb());
+    EVP_add_cipher(EVP_camellia_192_cfb1());
+    EVP_add_cipher(EVP_camellia_192_cfb8());
+    EVP_add_cipher(EVP_camellia_192_ofb());
+    EVP_add_cipher_alias(SN_camellia_192_cbc, "CAMELLIA192");
+    EVP_add_cipher_alias(SN_camellia_192_cbc, "camellia192");
+    EVP_add_cipher(EVP_camellia_256_ecb());
+    EVP_add_cipher(EVP_camellia_256_cbc());
+    EVP_add_cipher(EVP_camellia_256_cfb());
+    EVP_add_cipher(EVP_camellia_256_cfb1());
+    EVP_add_cipher(EVP_camellia_256_cfb8());
+    EVP_add_cipher(EVP_camellia_256_ofb());
+    EVP_add_cipher_alias(SN_camellia_256_cbc, "CAMELLIA256");
+    EVP_add_cipher_alias(SN_camellia_256_cbc, "camellia256");
+    EVP_add_cipher(EVP_camellia_128_ctr());
+    EVP_add_cipher(EVP_camellia_192_ctr());
+    EVP_add_cipher(EVP_camellia_256_ctr());
+#endif
+
+#ifndef OPENSSL_NO_CHACHA
+    EVP_add_cipher(EVP_chacha20());
+# ifndef OPENSSL_NO_POLY1305
+    EVP_add_cipher(EVP_chacha20_poly1305());
+# endif
+#endif
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/c_alld.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/c_alld.c
new file mode 100644
index 000000000..1267531a7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/c_alld.c
@@ -0,0 +1,60 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include "internal/evp_int.h"
+#include <openssl/pkcs12.h>
+#include <openssl/objects.h>
+
+void openssl_add_all_digests_int(void)
+{
+#ifndef OPENSSL_NO_MD4
+    EVP_add_digest(EVP_md4());
+#endif
+#ifndef OPENSSL_NO_MD5
+    EVP_add_digest(EVP_md5());
+    EVP_add_digest_alias(SN_md5, "ssl3-md5");
+    EVP_add_digest(EVP_md5_sha1());
+#endif
+    EVP_add_digest(EVP_sha1());
+    EVP_add_digest_alias(SN_sha1, "ssl3-sha1");
+    EVP_add_digest_alias(SN_sha1WithRSAEncryption, SN_sha1WithRSA);
+#if !defined(OPENSSL_NO_MDC2) && !defined(OPENSSL_NO_DES)
+    EVP_add_digest(EVP_mdc2());
+#endif
+#ifndef OPENSSL_NO_RMD160
+    EVP_add_digest(EVP_ripemd160());
+    EVP_add_digest_alias(SN_ripemd160, "ripemd");
+    EVP_add_digest_alias(SN_ripemd160, "rmd160");
+#endif
+    EVP_add_digest(EVP_sha224());
+    EVP_add_digest(EVP_sha256());
+    EVP_add_digest(EVP_sha384());
+    EVP_add_digest(EVP_sha512());
+    EVP_add_digest(EVP_sha512_224());
+    EVP_add_digest(EVP_sha512_256());
+#ifndef OPENSSL_NO_WHIRLPOOL
+    EVP_add_digest(EVP_whirlpool());
+#endif
+#ifndef OPENSSL_NO_SM3
+    EVP_add_digest(EVP_sm3());
+#endif
+#ifndef OPENSSL_NO_BLAKE2
+    EVP_add_digest(EVP_blake2b512());
+    EVP_add_digest(EVP_blake2s256());
+#endif
+    EVP_add_digest(EVP_sha3_224());
+    EVP_add_digest(EVP_sha3_256());
+    EVP_add_digest(EVP_sha3_384());
+    EVP_add_digest(EVP_sha3_512());
+    EVP_add_digest(EVP_shake128());
+    EVP_add_digest(EVP_shake256());
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/cmeth_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/cmeth_lib.c
new file mode 100644
index 000000000..e2295c4dc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/cmeth_lib.c
@@ -0,0 +1,151 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+
+#include <openssl/evp.h>
+#include "internal/evp_int.h"
+#include "evp_locl.h"
+
+EVP_CIPHER *EVP_CIPHER_meth_new(int cipher_type, int block_size, int key_len)
+{
+    EVP_CIPHER *cipher = OPENSSL_zalloc(sizeof(EVP_CIPHER));
+
+    if (cipher != NULL) {
+        cipher->nid = cipher_type;
+        cipher->block_size = block_size;
+        cipher->key_len = key_len;
+    }
+    return cipher;
+}
+
+EVP_CIPHER *EVP_CIPHER_meth_dup(const EVP_CIPHER *cipher)
+{
+    EVP_CIPHER *to = EVP_CIPHER_meth_new(cipher->nid, cipher->block_size,
+                                         cipher->key_len);
+
+    if (to != NULL)
+        memcpy(to, cipher, sizeof(*to));
+    return to;
+}
+
+void EVP_CIPHER_meth_free(EVP_CIPHER *cipher)
+{
+    OPENSSL_free(cipher);
+}
+
+int EVP_CIPHER_meth_set_iv_length(EVP_CIPHER *cipher, int iv_len)
+{
+    cipher->iv_len = iv_len;
+    return 1;
+}
+
+int EVP_CIPHER_meth_set_flags(EVP_CIPHER *cipher, unsigned long flags)
+{
+    cipher->flags = flags;
+    return 1;
+}
+
+int EVP_CIPHER_meth_set_impl_ctx_size(EVP_CIPHER *cipher, int ctx_size)
+{
+    cipher->ctx_size = ctx_size;
+    return 1;
+}
+
+int EVP_CIPHER_meth_set_init(EVP_CIPHER *cipher,
+                             int (*init) (EVP_CIPHER_CTX *ctx,
+                                          const unsigned char *key,
+                                          const unsigned char *iv,
+                                          int enc))
+{
+    cipher->init = init;
+    return 1;
+}
+
+int EVP_CIPHER_meth_set_do_cipher(EVP_CIPHER *cipher,
+                                  int (*do_cipher) (EVP_CIPHER_CTX *ctx,
+                                                    unsigned char *out,
+                                                    const unsigned char *in,
+                                                    size_t inl))
+{
+    cipher->do_cipher = do_cipher;
+    return 1;
+}
+
+int EVP_CIPHER_meth_set_cleanup(EVP_CIPHER *cipher,
+                                int (*cleanup) (EVP_CIPHER_CTX *))
+{
+    cipher->cleanup = cleanup;
+    return 1;
+}
+
+int EVP_CIPHER_meth_set_set_asn1_params(EVP_CIPHER *cipher,
+                                        int (*set_asn1_parameters) (EVP_CIPHER_CTX *,
+                                                                    ASN1_TYPE *))
+{
+    cipher->set_asn1_parameters = set_asn1_parameters;
+    return 1;
+}
+
+int EVP_CIPHER_meth_set_get_asn1_params(EVP_CIPHER *cipher,
+                                        int (*get_asn1_parameters) (EVP_CIPHER_CTX *,
+                                                                    ASN1_TYPE *))
+{
+    cipher->get_asn1_parameters = get_asn1_parameters;
+    return 1;
+}
+
+int EVP_CIPHER_meth_set_ctrl(EVP_CIPHER *cipher,
+                             int (*ctrl) (EVP_CIPHER_CTX *, int type,
+                                          int arg, void *ptr))
+{
+    cipher->ctrl = ctrl;
+    return 1;
+}
+
+
+int (*EVP_CIPHER_meth_get_init(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *ctx,
+                                                          const unsigned char *key,
+                                                          const unsigned char *iv,
+                                                          int enc)
+{
+    return cipher->init;
+}
+int (*EVP_CIPHER_meth_get_do_cipher(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *ctx,
+                                                               unsigned char *out,
+                                                               const unsigned char *in,
+                                                               size_t inl)
+{
+    return cipher->do_cipher;
+}
+
+int (*EVP_CIPHER_meth_get_cleanup(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *)
+{
+    return cipher->cleanup;
+}
+
+int (*EVP_CIPHER_meth_get_set_asn1_params(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *,
+                                                                     ASN1_TYPE *)
+{
+    return cipher->set_asn1_parameters;
+}
+
+int (*EVP_CIPHER_meth_get_get_asn1_params(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *,
+                                                               ASN1_TYPE *)
+{
+    return cipher->get_asn1_parameters;
+}
+
+int (*EVP_CIPHER_meth_get_ctrl(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *,
+                                                          int type, int arg,
+                                                          void *ptr)
+{
+    return cipher->ctrl;
+}
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/digest.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/digest.c
new file mode 100644
index 000000000..f78dab767
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/digest.c
@@ -0,0 +1,298 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/engine.h>
+#include "internal/evp_int.h"
+#include "evp_locl.h"
+
+/* This call frees resources associated with the context */
+int EVP_MD_CTX_reset(EVP_MD_CTX *ctx)
+{
+    if (ctx == NULL)
+        return 1;
+
+    /*
+     * Don't assume ctx->md_data was cleaned in EVP_Digest_Final, because
+     * sometimes only copies of the context are ever finalised.
+     */
+    if (ctx->digest && ctx->digest->cleanup
+        && !EVP_MD_CTX_test_flags(ctx, EVP_MD_CTX_FLAG_CLEANED))
+        ctx->digest->cleanup(ctx);
+    if (ctx->digest && ctx->digest->ctx_size && ctx->md_data
+        && !EVP_MD_CTX_test_flags(ctx, EVP_MD_CTX_FLAG_REUSE)) {
+        OPENSSL_clear_free(ctx->md_data, ctx->digest->ctx_size);
+    }
+    /*
+     * pctx should be freed by the user of EVP_MD_CTX
+     * if EVP_MD_CTX_FLAG_KEEP_PKEY_CTX is set
+     */
+    if (!EVP_MD_CTX_test_flags(ctx, EVP_MD_CTX_FLAG_KEEP_PKEY_CTX))
+        EVP_PKEY_CTX_free(ctx->pctx);
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_finish(ctx->engine);
+#endif
+    OPENSSL_cleanse(ctx, sizeof(*ctx));
+
+    return 1;
+}
+
+EVP_MD_CTX *EVP_MD_CTX_new(void)
+{
+    return OPENSSL_zalloc(sizeof(EVP_MD_CTX));
+}
+
+void EVP_MD_CTX_free(EVP_MD_CTX *ctx)
+{
+    EVP_MD_CTX_reset(ctx);
+    OPENSSL_free(ctx);
+}
+
+int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type)
+{
+    EVP_MD_CTX_reset(ctx);
+    return EVP_DigestInit_ex(ctx, type, NULL);
+}
+
+int EVP_DigestInit_ex(EVP_MD_CTX *ctx, const EVP_MD *type, ENGINE *impl)
+{
+    EVP_MD_CTX_clear_flags(ctx, EVP_MD_CTX_FLAG_CLEANED);
+#ifndef OPENSSL_NO_ENGINE
+    /*
+     * Whether it's nice or not, "Inits" can be used on "Final"'d contexts so
+     * this context may already have an ENGINE! Try to avoid releasing the
+     * previous handle, re-querying for an ENGINE, and having a
+     * reinitialisation, when it may all be unnecessary.
+     */
+    if (ctx->engine && ctx->digest &&
+        (type == NULL || (type->type == ctx->digest->type)))
+        goto skip_to_init;
+    if (type) {
+        /*
+         * Ensure an ENGINE left lying around from last time is cleared (the
+         * previous check attempted to avoid this if the same ENGINE and
+         * EVP_MD could be used).
+         */
+        ENGINE_finish(ctx->engine);
+        if (impl != NULL) {
+            if (!ENGINE_init(impl)) {
+                EVPerr(EVP_F_EVP_DIGESTINIT_EX, EVP_R_INITIALIZATION_ERROR);
+                return 0;
+            }
+        } else {
+            /* Ask if an ENGINE is reserved for this job */
+            impl = ENGINE_get_digest_engine(type->type);
+        }
+        if (impl != NULL) {
+            /* There's an ENGINE for this job ... (apparently) */
+            const EVP_MD *d = ENGINE_get_digest(impl, type->type);
+
+            if (d == NULL) {
+                EVPerr(EVP_F_EVP_DIGESTINIT_EX, EVP_R_INITIALIZATION_ERROR);
+                ENGINE_finish(impl);
+                return 0;
+            }
+            /* We'll use the ENGINE's private digest definition */
+            type = d;
+            /*
+             * Store the ENGINE functional reference so we know 'type' came
+             * from an ENGINE and we need to release it when done.
+             */
+            ctx->engine = impl;
+        } else
+            ctx->engine = NULL;
+    } else {
+        if (!ctx->digest) {
+            EVPerr(EVP_F_EVP_DIGESTINIT_EX, EVP_R_NO_DIGEST_SET);
+            return 0;
+        }
+        type = ctx->digest;
+    }
+#endif
+    if (ctx->digest != type) {
+        if (ctx->digest && ctx->digest->ctx_size) {
+            OPENSSL_clear_free(ctx->md_data, ctx->digest->ctx_size);
+            ctx->md_data = NULL;
+        }
+        ctx->digest = type;
+        if (!(ctx->flags & EVP_MD_CTX_FLAG_NO_INIT) && type->ctx_size) {
+            ctx->update = type->update;
+            ctx->md_data = OPENSSL_zalloc(type->ctx_size);
+            if (ctx->md_data == NULL) {
+                EVPerr(EVP_F_EVP_DIGESTINIT_EX, ERR_R_MALLOC_FAILURE);
+                return 0;
+            }
+        }
+    }
+#ifndef OPENSSL_NO_ENGINE
+ skip_to_init:
+#endif
+    if (ctx->pctx) {
+        int r;
+        r = EVP_PKEY_CTX_ctrl(ctx->pctx, -1, EVP_PKEY_OP_TYPE_SIG,
+                              EVP_PKEY_CTRL_DIGESTINIT, 0, ctx);
+        if (r <= 0 && (r != -2))
+            return 0;
+    }
+    if (ctx->flags & EVP_MD_CTX_FLAG_NO_INIT)
+        return 1;
+    return ctx->digest->init(ctx);
+}
+
+int EVP_DigestUpdate(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return ctx->update(ctx, data, count);
+}
+
+/* The caller can assume that this removes any secret data from the context */
+int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md, unsigned int *size)
+{
+    int ret;
+    ret = EVP_DigestFinal_ex(ctx, md, size);
+    EVP_MD_CTX_reset(ctx);
+    return ret;
+}
+
+/* The caller can assume that this removes any secret data from the context */
+int EVP_DigestFinal_ex(EVP_MD_CTX *ctx, unsigned char *md, unsigned int *size)
+{
+    int ret;
+
+    OPENSSL_assert(ctx->digest->md_size <= EVP_MAX_MD_SIZE);
+    ret = ctx->digest->final(ctx, md);
+    if (size != NULL)
+        *size = ctx->digest->md_size;
+    if (ctx->digest->cleanup) {
+        ctx->digest->cleanup(ctx);
+        EVP_MD_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_CLEANED);
+    }
+    OPENSSL_cleanse(ctx->md_data, ctx->digest->ctx_size);
+    return ret;
+}
+
+int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md, size_t size)
+{
+    int ret = 0;
+
+    if (ctx->digest->flags & EVP_MD_FLAG_XOF
+        && size <= INT_MAX
+        && ctx->digest->md_ctrl(ctx, EVP_MD_CTRL_XOF_LEN, (int)size, NULL)) {
+        ret = ctx->digest->final(ctx, md);
+
+        if (ctx->digest->cleanup != NULL) {
+            ctx->digest->cleanup(ctx);
+            EVP_MD_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_CLEANED);
+        }
+        OPENSSL_cleanse(ctx->md_data, ctx->digest->ctx_size);
+    } else {
+        EVPerr(EVP_F_EVP_DIGESTFINALXOF, EVP_R_NOT_XOF_OR_INVALID_LENGTH);
+    }
+
+    return ret;
+}
+
+int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in)
+{
+    EVP_MD_CTX_reset(out);
+    return EVP_MD_CTX_copy_ex(out, in);
+}
+
+int EVP_MD_CTX_copy_ex(EVP_MD_CTX *out, const EVP_MD_CTX *in)
+{
+    unsigned char *tmp_buf;
+    if ((in == NULL) || (in->digest == NULL)) {
+        EVPerr(EVP_F_EVP_MD_CTX_COPY_EX, EVP_R_INPUT_NOT_INITIALIZED);
+        return 0;
+    }
+#ifndef OPENSSL_NO_ENGINE
+    /* Make sure it's safe to copy a digest context using an ENGINE */
+    if (in->engine && !ENGINE_init(in->engine)) {
+        EVPerr(EVP_F_EVP_MD_CTX_COPY_EX, ERR_R_ENGINE_LIB);
+        return 0;
+    }
+#endif
+
+    if (out->digest == in->digest) {
+        tmp_buf = out->md_data;
+        EVP_MD_CTX_set_flags(out, EVP_MD_CTX_FLAG_REUSE);
+    } else
+        tmp_buf = NULL;
+    EVP_MD_CTX_reset(out);
+    memcpy(out, in, sizeof(*out));
+
+    /* copied EVP_MD_CTX should free the copied EVP_PKEY_CTX */
+    EVP_MD_CTX_clear_flags(out, EVP_MD_CTX_FLAG_KEEP_PKEY_CTX);
+
+    /* Null these variables, since they are getting fixed up
+     * properly below.  Anything else may cause a memleak and/or
+     * double free if any of the memory allocations below fail
+     */
+    out->md_data = NULL;
+    out->pctx = NULL;
+
+    if (in->md_data && out->digest->ctx_size) {
+        if (tmp_buf)
+            out->md_data = tmp_buf;
+        else {
+            out->md_data = OPENSSL_malloc(out->digest->ctx_size);
+            if (out->md_data == NULL) {
+                EVPerr(EVP_F_EVP_MD_CTX_COPY_EX, ERR_R_MALLOC_FAILURE);
+                return 0;
+            }
+        }
+        memcpy(out->md_data, in->md_data, out->digest->ctx_size);
+    }
+
+    out->update = in->update;
+
+    if (in->pctx) {
+        out->pctx = EVP_PKEY_CTX_dup(in->pctx);
+        if (!out->pctx) {
+            EVP_MD_CTX_reset(out);
+            return 0;
+        }
+    }
+
+    if (out->digest->copy)
+        return out->digest->copy(out, in);
+
+    return 1;
+}
+
+int EVP_Digest(const void *data, size_t count,
+               unsigned char *md, unsigned int *size, const EVP_MD *type,
+               ENGINE *impl)
+{
+    EVP_MD_CTX *ctx = EVP_MD_CTX_new();
+    int ret;
+
+    if (ctx == NULL)
+        return 0;
+    EVP_MD_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_ONESHOT);
+    ret = EVP_DigestInit_ex(ctx, type, impl)
+        && EVP_DigestUpdate(ctx, data, count)
+        && EVP_DigestFinal_ex(ctx, md, size);
+    EVP_MD_CTX_free(ctx);
+
+    return ret;
+}
+
+int EVP_MD_CTX_ctrl(EVP_MD_CTX *ctx, int cmd, int p1, void *p2)
+{
+    if (ctx->digest && ctx->digest->md_ctrl) {
+        int ret = ctx->digest->md_ctrl(ctx, cmd, p1, p2);
+        if (ret <= 0)
+            return 0;
+        return 1;
+    }
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_aes.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_aes.c
new file mode 100644
index 000000000..39eb4f379
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_aes.c
@@ -0,0 +1,4210 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#include <openssl/crypto.h>
+#include <openssl/evp.h>
+#include <openssl/err.h>
+#include <string.h>
+#include <assert.h>
+#include <openssl/aes.h>
+#include "internal/evp_int.h"
+#include "modes_lcl.h"
+#include <openssl/rand.h>
+#include "evp_locl.h"
+
+typedef struct {
+    union {
+        double align;
+        AES_KEY ks;
+    } ks;
+    block128_f block;
+    union {
+        cbc128_f cbc;
+        ctr128_f ctr;
+    } stream;
+} EVP_AES_KEY;
+
+typedef struct {
+    union {
+        double align;
+        AES_KEY ks;
+    } ks;                       /* AES key schedule to use */
+    int key_set;                /* Set if key initialised */
+    int iv_set;                 /* Set if an iv is set */
+    GCM128_CONTEXT gcm;
+    unsigned char *iv;          /* Temporary IV store */
+    int ivlen;                  /* IV length */
+    int taglen;
+    int iv_gen;                 /* It is OK to generate IVs */
+    int tls_aad_len;            /* TLS AAD length */
+    ctr128_f ctr;
+} EVP_AES_GCM_CTX;
+
+typedef struct {
+    union {
+        double align;
+        AES_KEY ks;
+    } ks1, ks2;                 /* AES key schedules to use */
+    XTS128_CONTEXT xts;
+    void (*stream) (const unsigned char *in,
+                    unsigned char *out, size_t length,
+                    const AES_KEY *key1, const AES_KEY *key2,
+                    const unsigned char iv[16]);
+} EVP_AES_XTS_CTX;
+
+typedef struct {
+    union {
+        double align;
+        AES_KEY ks;
+    } ks;                       /* AES key schedule to use */
+    int key_set;                /* Set if key initialised */
+    int iv_set;                 /* Set if an iv is set */
+    int tag_set;                /* Set if tag is valid */
+    int len_set;                /* Set if message length set */
+    int L, M;                   /* L and M parameters from RFC3610 */
+    int tls_aad_len;            /* TLS AAD length */
+    CCM128_CONTEXT ccm;
+    ccm128_f str;
+} EVP_AES_CCM_CTX;
+
+#ifndef OPENSSL_NO_OCB
+typedef struct {
+    union {
+        double align;
+        AES_KEY ks;
+    } ksenc;                    /* AES key schedule to use for encryption */
+    union {
+        double align;
+        AES_KEY ks;
+    } ksdec;                    /* AES key schedule to use for decryption */
+    int key_set;                /* Set if key initialised */
+    int iv_set;                 /* Set if an iv is set */
+    OCB128_CONTEXT ocb;
+    unsigned char *iv;          /* Temporary IV store */
+    unsigned char tag[16];
+    unsigned char data_buf[16]; /* Store partial data blocks */
+    unsigned char aad_buf[16];  /* Store partial AAD blocks */
+    int data_buf_len;
+    int aad_buf_len;
+    int ivlen;                  /* IV length */
+    int taglen;
+} EVP_AES_OCB_CTX;
+#endif
+
+#define MAXBITCHUNK     ((size_t)1<<(sizeof(size_t)*8-4))
+
+#ifdef VPAES_ASM
+int vpaes_set_encrypt_key(const unsigned char *userKey, int bits,
+                          AES_KEY *key);
+int vpaes_set_decrypt_key(const unsigned char *userKey, int bits,
+                          AES_KEY *key);
+
+void vpaes_encrypt(const unsigned char *in, unsigned char *out,
+                   const AES_KEY *key);
+void vpaes_decrypt(const unsigned char *in, unsigned char *out,
+                   const AES_KEY *key);
+
+void vpaes_cbc_encrypt(const unsigned char *in,
+                       unsigned char *out,
+                       size_t length,
+                       const AES_KEY *key, unsigned char *ivec, int enc);
+#endif
+#ifdef BSAES_ASM
+void bsaes_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                       size_t length, const AES_KEY *key,
+                       unsigned char ivec[16], int enc);
+void bsaes_ctr32_encrypt_blocks(const unsigned char *in, unsigned char *out,
+                                size_t len, const AES_KEY *key,
+                                const unsigned char ivec[16]);
+void bsaes_xts_encrypt(const unsigned char *inp, unsigned char *out,
+                       size_t len, const AES_KEY *key1,
+                       const AES_KEY *key2, const unsigned char iv[16]);
+void bsaes_xts_decrypt(const unsigned char *inp, unsigned char *out,
+                       size_t len, const AES_KEY *key1,
+                       const AES_KEY *key2, const unsigned char iv[16]);
+#endif
+#ifdef AES_CTR_ASM
+void AES_ctr32_encrypt(const unsigned char *in, unsigned char *out,
+                       size_t blocks, const AES_KEY *key,
+                       const unsigned char ivec[AES_BLOCK_SIZE]);
+#endif
+#ifdef AES_XTS_ASM
+void AES_xts_encrypt(const unsigned char *inp, unsigned char *out, size_t len,
+                     const AES_KEY *key1, const AES_KEY *key2,
+                     const unsigned char iv[16]);
+void AES_xts_decrypt(const unsigned char *inp, unsigned char *out, size_t len,
+                     const AES_KEY *key1, const AES_KEY *key2,
+                     const unsigned char iv[16]);
+#endif
+
+/* increment counter (64-bit int) by 1 */
+static void ctr64_inc(unsigned char *counter)
+{
+    int n = 8;
+    unsigned char c;
+
+    do {
+        --n;
+        c = counter[n];
+        ++c;
+        counter[n] = c;
+        if (c)
+            return;
+    } while (n);
+}
+
+#if defined(OPENSSL_CPUID_OBJ) && (defined(__powerpc__) || defined(__ppc__) || defined(_ARCH_PPC))
+# include "ppc_arch.h"
+# ifdef VPAES_ASM
+#  define VPAES_CAPABLE (OPENSSL_ppccap_P & PPC_ALTIVEC)
+# endif
+# define HWAES_CAPABLE  (OPENSSL_ppccap_P & PPC_CRYPTO207)
+# define HWAES_set_encrypt_key aes_p8_set_encrypt_key
+# define HWAES_set_decrypt_key aes_p8_set_decrypt_key
+# define HWAES_encrypt aes_p8_encrypt
+# define HWAES_decrypt aes_p8_decrypt
+# define HWAES_cbc_encrypt aes_p8_cbc_encrypt
+# define HWAES_ctr32_encrypt_blocks aes_p8_ctr32_encrypt_blocks
+# define HWAES_xts_encrypt aes_p8_xts_encrypt
+# define HWAES_xts_decrypt aes_p8_xts_decrypt
+#endif
+
+#if     defined(AES_ASM) && !defined(I386_ONLY) &&      (  \
+        ((defined(__i386)       || defined(__i386__)    || \
+          defined(_M_IX86)) && defined(OPENSSL_IA32_SSE2))|| \
+        defined(__x86_64)       || defined(__x86_64__)  || \
+        defined(_M_AMD64)       || defined(_M_X64)      )
+
+extern unsigned int OPENSSL_ia32cap_P[];
+
+# ifdef VPAES_ASM
+#  define VPAES_CAPABLE   (OPENSSL_ia32cap_P[1]&(1<<(41-32)))
+# endif
+# ifdef BSAES_ASM
+#  define BSAES_CAPABLE   (OPENSSL_ia32cap_P[1]&(1<<(41-32)))
+# endif
+/*
+ * AES-NI section
+ */
+# define AESNI_CAPABLE   (OPENSSL_ia32cap_P[1]&(1<<(57-32)))
+
+int aesni_set_encrypt_key(const unsigned char *userKey, int bits,
+                          AES_KEY *key);
+int aesni_set_decrypt_key(const unsigned char *userKey, int bits,
+                          AES_KEY *key);
+
+void aesni_encrypt(const unsigned char *in, unsigned char *out,
+                   const AES_KEY *key);
+void aesni_decrypt(const unsigned char *in, unsigned char *out,
+                   const AES_KEY *key);
+
+void aesni_ecb_encrypt(const unsigned char *in,
+                       unsigned char *out,
+                       size_t length, const AES_KEY *key, int enc);
+void aesni_cbc_encrypt(const unsigned char *in,
+                       unsigned char *out,
+                       size_t length,
+                       const AES_KEY *key, unsigned char *ivec, int enc);
+
+void aesni_ctr32_encrypt_blocks(const unsigned char *in,
+                                unsigned char *out,
+                                size_t blocks,
+                                const void *key, const unsigned char *ivec);
+
+void aesni_xts_encrypt(const unsigned char *in,
+                       unsigned char *out,
+                       size_t length,
+                       const AES_KEY *key1, const AES_KEY *key2,
+                       const unsigned char iv[16]);
+
+void aesni_xts_decrypt(const unsigned char *in,
+                       unsigned char *out,
+                       size_t length,
+                       const AES_KEY *key1, const AES_KEY *key2,
+                       const unsigned char iv[16]);
+
+void aesni_ccm64_encrypt_blocks(const unsigned char *in,
+                                unsigned char *out,
+                                size_t blocks,
+                                const void *key,
+                                const unsigned char ivec[16],
+                                unsigned char cmac[16]);
+
+void aesni_ccm64_decrypt_blocks(const unsigned char *in,
+                                unsigned char *out,
+                                size_t blocks,
+                                const void *key,
+                                const unsigned char ivec[16],
+                                unsigned char cmac[16]);
+
+# if defined(__x86_64) || defined(__x86_64__) || defined(_M_AMD64) || defined(_M_X64)
+size_t aesni_gcm_encrypt(const unsigned char *in,
+                         unsigned char *out,
+                         size_t len,
+                         const void *key, unsigned char ivec[16], u64 *Xi);
+#  define AES_gcm_encrypt aesni_gcm_encrypt
+size_t aesni_gcm_decrypt(const unsigned char *in,
+                         unsigned char *out,
+                         size_t len,
+                         const void *key, unsigned char ivec[16], u64 *Xi);
+#  define AES_gcm_decrypt aesni_gcm_decrypt
+void gcm_ghash_avx(u64 Xi[2], const u128 Htable[16], const u8 *in,
+                   size_t len);
+#  define AES_GCM_ASM(gctx)       (gctx->ctr==aesni_ctr32_encrypt_blocks && \
+                                 gctx->gcm.ghash==gcm_ghash_avx)
+#  define AES_GCM_ASM2(gctx)      (gctx->gcm.block==(block128_f)aesni_encrypt && \
+                                 gctx->gcm.ghash==gcm_ghash_avx)
+#  undef AES_GCM_ASM2          /* minor size optimization */
+# endif
+
+static int aesni_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                          const unsigned char *iv, int enc)
+{
+    int ret, mode;
+    EVP_AES_KEY *dat = EVP_C_DATA(EVP_AES_KEY,ctx);
+
+    mode = EVP_CIPHER_CTX_mode(ctx);
+    if ((mode == EVP_CIPH_ECB_MODE || mode == EVP_CIPH_CBC_MODE)
+        && !enc) {
+        ret = aesni_set_decrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                    &dat->ks.ks);
+        dat->block = (block128_f) aesni_decrypt;
+        dat->stream.cbc = mode == EVP_CIPH_CBC_MODE ?
+            (cbc128_f) aesni_cbc_encrypt : NULL;
+    } else {
+        ret = aesni_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                    &dat->ks.ks);
+        dat->block = (block128_f) aesni_encrypt;
+        if (mode == EVP_CIPH_CBC_MODE)
+            dat->stream.cbc = (cbc128_f) aesni_cbc_encrypt;
+        else if (mode == EVP_CIPH_CTR_MODE)
+            dat->stream.ctr = (ctr128_f) aesni_ctr32_encrypt_blocks;
+        else
+            dat->stream.cbc = NULL;
+    }
+
+    if (ret < 0) {
+        EVPerr(EVP_F_AESNI_INIT_KEY, EVP_R_AES_KEY_SETUP_FAILED);
+        return 0;
+    }
+
+    return 1;
+}
+
+static int aesni_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                            const unsigned char *in, size_t len)
+{
+    aesni_cbc_encrypt(in, out, len, &EVP_C_DATA(EVP_AES_KEY,ctx)->ks.ks,
+                      EVP_CIPHER_CTX_iv_noconst(ctx),
+                      EVP_CIPHER_CTX_encrypting(ctx));
+
+    return 1;
+}
+
+static int aesni_ecb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                            const unsigned char *in, size_t len)
+{
+    size_t bl = EVP_CIPHER_CTX_block_size(ctx);
+
+    if (len < bl)
+        return 1;
+
+    aesni_ecb_encrypt(in, out, len, &EVP_C_DATA(EVP_AES_KEY,ctx)->ks.ks,
+                      EVP_CIPHER_CTX_encrypting(ctx));
+
+    return 1;
+}
+
+# define aesni_ofb_cipher aes_ofb_cipher
+static int aesni_ofb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                            const unsigned char *in, size_t len);
+
+# define aesni_cfb_cipher aes_cfb_cipher
+static int aesni_cfb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                            const unsigned char *in, size_t len);
+
+# define aesni_cfb8_cipher aes_cfb8_cipher
+static int aesni_cfb8_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                             const unsigned char *in, size_t len);
+
+# define aesni_cfb1_cipher aes_cfb1_cipher
+static int aesni_cfb1_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                             const unsigned char *in, size_t len);
+
+# define aesni_ctr_cipher aes_ctr_cipher
+static int aesni_ctr_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                            const unsigned char *in, size_t len);
+
+static int aesni_gcm_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                              const unsigned char *iv, int enc)
+{
+    EVP_AES_GCM_CTX *gctx = EVP_C_DATA(EVP_AES_GCM_CTX,ctx);
+    if (!iv && !key)
+        return 1;
+    if (key) {
+        aesni_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                              &gctx->ks.ks);
+        CRYPTO_gcm128_init(&gctx->gcm, &gctx->ks, (block128_f) aesni_encrypt);
+        gctx->ctr = (ctr128_f) aesni_ctr32_encrypt_blocks;
+        /*
+         * If we have an iv can set it directly, otherwise use saved IV.
+         */
+        if (iv == NULL && gctx->iv_set)
+            iv = gctx->iv;
+        if (iv) {
+            CRYPTO_gcm128_setiv(&gctx->gcm, iv, gctx->ivlen);
+            gctx->iv_set = 1;
+        }
+        gctx->key_set = 1;
+    } else {
+        /* If key set use IV, otherwise copy */
+        if (gctx->key_set)
+            CRYPTO_gcm128_setiv(&gctx->gcm, iv, gctx->ivlen);
+        else
+            memcpy(gctx->iv, iv, gctx->ivlen);
+        gctx->iv_set = 1;
+        gctx->iv_gen = 0;
+    }
+    return 1;
+}
+
+# define aesni_gcm_cipher aes_gcm_cipher
+static int aesni_gcm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                            const unsigned char *in, size_t len);
+
+static int aesni_xts_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                              const unsigned char *iv, int enc)
+{
+    EVP_AES_XTS_CTX *xctx = EVP_C_DATA(EVP_AES_XTS_CTX,ctx);
+    if (!iv && !key)
+        return 1;
+
+    if (key) {
+        /* key_len is two AES keys */
+        if (enc) {
+            aesni_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 4,
+                                  &xctx->ks1.ks);
+            xctx->xts.block1 = (block128_f) aesni_encrypt;
+            xctx->stream = aesni_xts_encrypt;
+        } else {
+            aesni_set_decrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 4,
+                                  &xctx->ks1.ks);
+            xctx->xts.block1 = (block128_f) aesni_decrypt;
+            xctx->stream = aesni_xts_decrypt;
+        }
+
+        aesni_set_encrypt_key(key + EVP_CIPHER_CTX_key_length(ctx) / 2,
+                              EVP_CIPHER_CTX_key_length(ctx) * 4,
+                              &xctx->ks2.ks);
+        xctx->xts.block2 = (block128_f) aesni_encrypt;
+
+        xctx->xts.key1 = &xctx->ks1;
+    }
+
+    if (iv) {
+        xctx->xts.key2 = &xctx->ks2;
+        memcpy(EVP_CIPHER_CTX_iv_noconst(ctx), iv, 16);
+    }
+
+    return 1;
+}
+
+# define aesni_xts_cipher aes_xts_cipher
+static int aesni_xts_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                            const unsigned char *in, size_t len);
+
+static int aesni_ccm_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                              const unsigned char *iv, int enc)
+{
+    EVP_AES_CCM_CTX *cctx = EVP_C_DATA(EVP_AES_CCM_CTX,ctx);
+    if (!iv && !key)
+        return 1;
+    if (key) {
+        aesni_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                              &cctx->ks.ks);
+        CRYPTO_ccm128_init(&cctx->ccm, cctx->M, cctx->L,
+                           &cctx->ks, (block128_f) aesni_encrypt);
+        cctx->str = enc ? (ccm128_f) aesni_ccm64_encrypt_blocks :
+            (ccm128_f) aesni_ccm64_decrypt_blocks;
+        cctx->key_set = 1;
+    }
+    if (iv) {
+        memcpy(EVP_CIPHER_CTX_iv_noconst(ctx), iv, 15 - cctx->L);
+        cctx->iv_set = 1;
+    }
+    return 1;
+}
+
+# define aesni_ccm_cipher aes_ccm_cipher
+static int aesni_ccm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                            const unsigned char *in, size_t len);
+
+# ifndef OPENSSL_NO_OCB
+void aesni_ocb_encrypt(const unsigned char *in, unsigned char *out,
+                       size_t blocks, const void *key,
+                       size_t start_block_num,
+                       unsigned char offset_i[16],
+                       const unsigned char L_[][16],
+                       unsigned char checksum[16]);
+void aesni_ocb_decrypt(const unsigned char *in, unsigned char *out,
+                       size_t blocks, const void *key,
+                       size_t start_block_num,
+                       unsigned char offset_i[16],
+                       const unsigned char L_[][16],
+                       unsigned char checksum[16]);
+
+static int aesni_ocb_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                              const unsigned char *iv, int enc)
+{
+    EVP_AES_OCB_CTX *octx = EVP_C_DATA(EVP_AES_OCB_CTX,ctx);
+    if (!iv && !key)
+        return 1;
+    if (key) {
+        do {
+            /*
+             * We set both the encrypt and decrypt key here because decrypt
+             * needs both. We could possibly optimise to remove setting the
+             * decrypt for an encryption operation.
+             */
+            aesni_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                  &octx->ksenc.ks);
+            aesni_set_decrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                  &octx->ksdec.ks);
+            if (!CRYPTO_ocb128_init(&octx->ocb,
+                                    &octx->ksenc.ks, &octx->ksdec.ks,
+                                    (block128_f) aesni_encrypt,
+                                    (block128_f) aesni_decrypt,
+                                    enc ? aesni_ocb_encrypt
+                                        : aesni_ocb_decrypt))
+                return 0;
+        }
+        while (0);
+
+        /*
+         * If we have an iv we can set it directly, otherwise use saved IV.
+         */
+        if (iv == NULL && octx->iv_set)
+            iv = octx->iv;
+        if (iv) {
+            if (CRYPTO_ocb128_setiv(&octx->ocb, iv, octx->ivlen, octx->taglen)
+                != 1)
+                return 0;
+            octx->iv_set = 1;
+        }
+        octx->key_set = 1;
+    } else {
+        /* If key set use IV, otherwise copy */
+        if (octx->key_set)
+            CRYPTO_ocb128_setiv(&octx->ocb, iv, octx->ivlen, octx->taglen);
+        else
+            memcpy(octx->iv, iv, octx->ivlen);
+        octx->iv_set = 1;
+    }
+    return 1;
+}
+
+#  define aesni_ocb_cipher aes_ocb_cipher
+static int aesni_ocb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                            const unsigned char *in, size_t len);
+# endif                        /* OPENSSL_NO_OCB */
+
+# define BLOCK_CIPHER_generic(nid,keylen,blocksize,ivlen,nmode,mode,MODE,flags) \
+static const EVP_CIPHER aesni_##keylen##_##mode = { \
+        nid##_##keylen##_##nmode,blocksize,keylen/8,ivlen, \
+        flags|EVP_CIPH_##MODE##_MODE,   \
+        aesni_init_key,                 \
+        aesni_##mode##_cipher,          \
+        NULL,                           \
+        sizeof(EVP_AES_KEY),            \
+        NULL,NULL,NULL,NULL }; \
+static const EVP_CIPHER aes_##keylen##_##mode = { \
+        nid##_##keylen##_##nmode,blocksize,     \
+        keylen/8,ivlen, \
+        flags|EVP_CIPH_##MODE##_MODE,   \
+        aes_init_key,                   \
+        aes_##mode##_cipher,            \
+        NULL,                           \
+        sizeof(EVP_AES_KEY),            \
+        NULL,NULL,NULL,NULL }; \
+const EVP_CIPHER *EVP_aes_##keylen##_##mode(void) \
+{ return AESNI_CAPABLE?&aesni_##keylen##_##mode:&aes_##keylen##_##mode; }
+
+# define BLOCK_CIPHER_custom(nid,keylen,blocksize,ivlen,mode,MODE,flags) \
+static const EVP_CIPHER aesni_##keylen##_##mode = { \
+        nid##_##keylen##_##mode,blocksize, \
+        (EVP_CIPH_##MODE##_MODE==EVP_CIPH_XTS_MODE?2:1)*keylen/8, ivlen, \
+        flags|EVP_CIPH_##MODE##_MODE,   \
+        aesni_##mode##_init_key,        \
+        aesni_##mode##_cipher,          \
+        aes_##mode##_cleanup,           \
+        sizeof(EVP_AES_##MODE##_CTX),   \
+        NULL,NULL,aes_##mode##_ctrl,NULL }; \
+static const EVP_CIPHER aes_##keylen##_##mode = { \
+        nid##_##keylen##_##mode,blocksize, \
+        (EVP_CIPH_##MODE##_MODE==EVP_CIPH_XTS_MODE?2:1)*keylen/8, ivlen, \
+        flags|EVP_CIPH_##MODE##_MODE,   \
+        aes_##mode##_init_key,          \
+        aes_##mode##_cipher,            \
+        aes_##mode##_cleanup,           \
+        sizeof(EVP_AES_##MODE##_CTX),   \
+        NULL,NULL,aes_##mode##_ctrl,NULL }; \
+const EVP_CIPHER *EVP_aes_##keylen##_##mode(void) \
+{ return AESNI_CAPABLE?&aesni_##keylen##_##mode:&aes_##keylen##_##mode; }
+
+#elif   defined(AES_ASM) && (defined(__sparc) || defined(__sparc__))
+
+# include "sparc_arch.h"
+
+extern unsigned int OPENSSL_sparcv9cap_P[];
+
+/*
+ * Initial Fujitsu SPARC64 X support
+ */
+# define HWAES_CAPABLE           (OPENSSL_sparcv9cap_P[0] & SPARCV9_FJAESX)
+# define HWAES_set_encrypt_key aes_fx_set_encrypt_key
+# define HWAES_set_decrypt_key aes_fx_set_decrypt_key
+# define HWAES_encrypt aes_fx_encrypt
+# define HWAES_decrypt aes_fx_decrypt
+# define HWAES_cbc_encrypt aes_fx_cbc_encrypt
+# define HWAES_ctr32_encrypt_blocks aes_fx_ctr32_encrypt_blocks
+
+# define SPARC_AES_CAPABLE       (OPENSSL_sparcv9cap_P[1] & CFR_AES)
+
+void aes_t4_set_encrypt_key(const unsigned char *key, int bits, AES_KEY *ks);
+void aes_t4_set_decrypt_key(const unsigned char *key, int bits, AES_KEY *ks);
+void aes_t4_encrypt(const unsigned char *in, unsigned char *out,
+                    const AES_KEY *key);
+void aes_t4_decrypt(const unsigned char *in, unsigned char *out,
+                    const AES_KEY *key);
+/*
+ * Key-length specific subroutines were chosen for following reason.
+ * Each SPARC T4 core can execute up to 8 threads which share core's
+ * resources. Loading as much key material to registers allows to
+ * minimize references to shared memory interface, as well as amount
+ * of instructions in inner loops [much needed on T4]. But then having
+ * non-key-length specific routines would require conditional branches
+ * either in inner loops or on subroutines' entries. Former is hardly
+ * acceptable, while latter means code size increase to size occupied
+ * by multiple key-length specific subroutines, so why fight?
+ */
+void aes128_t4_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t len, const AES_KEY *key,
+                           unsigned char *ivec);
+void aes128_t4_cbc_decrypt(const unsigned char *in, unsigned char *out,
+                           size_t len, const AES_KEY *key,
+                           unsigned char *ivec);
+void aes192_t4_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t len, const AES_KEY *key,
+                           unsigned char *ivec);
+void aes192_t4_cbc_decrypt(const unsigned char *in, unsigned char *out,
+                           size_t len, const AES_KEY *key,
+                           unsigned char *ivec);
+void aes256_t4_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t len, const AES_KEY *key,
+                           unsigned char *ivec);
+void aes256_t4_cbc_decrypt(const unsigned char *in, unsigned char *out,
+                           size_t len, const AES_KEY *key,
+                           unsigned char *ivec);
+void aes128_t4_ctr32_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t blocks, const AES_KEY *key,
+                             unsigned char *ivec);
+void aes192_t4_ctr32_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t blocks, const AES_KEY *key,
+                             unsigned char *ivec);
+void aes256_t4_ctr32_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t blocks, const AES_KEY *key,
+                             unsigned char *ivec);
+void aes128_t4_xts_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t blocks, const AES_KEY *key1,
+                           const AES_KEY *key2, const unsigned char *ivec);
+void aes128_t4_xts_decrypt(const unsigned char *in, unsigned char *out,
+                           size_t blocks, const AES_KEY *key1,
+                           const AES_KEY *key2, const unsigned char *ivec);
+void aes256_t4_xts_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t blocks, const AES_KEY *key1,
+                           const AES_KEY *key2, const unsigned char *ivec);
+void aes256_t4_xts_decrypt(const unsigned char *in, unsigned char *out,
+                           size_t blocks, const AES_KEY *key1,
+                           const AES_KEY *key2, const unsigned char *ivec);
+
+static int aes_t4_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                           const unsigned char *iv, int enc)
+{
+    int ret, mode, bits;
+    EVP_AES_KEY *dat = EVP_C_DATA(EVP_AES_KEY,ctx);
+
+    mode = EVP_CIPHER_CTX_mode(ctx);
+    bits = EVP_CIPHER_CTX_key_length(ctx) * 8;
+    if ((mode == EVP_CIPH_ECB_MODE || mode == EVP_CIPH_CBC_MODE)
+        && !enc) {
+        ret = 0;
+        aes_t4_set_decrypt_key(key, bits, &dat->ks.ks);
+        dat->block = (block128_f) aes_t4_decrypt;
+        switch (bits) {
+        case 128:
+            dat->stream.cbc = mode == EVP_CIPH_CBC_MODE ?
+                (cbc128_f) aes128_t4_cbc_decrypt : NULL;
+            break;
+        case 192:
+            dat->stream.cbc = mode == EVP_CIPH_CBC_MODE ?
+                (cbc128_f) aes192_t4_cbc_decrypt : NULL;
+            break;
+        case 256:
+            dat->stream.cbc = mode == EVP_CIPH_CBC_MODE ?
+                (cbc128_f) aes256_t4_cbc_decrypt : NULL;
+            break;
+        default:
+            ret = -1;
+        }
+    } else {
+        ret = 0;
+        aes_t4_set_encrypt_key(key, bits, &dat->ks.ks);
+        dat->block = (block128_f) aes_t4_encrypt;
+        switch (bits) {
+        case 128:
+            if (mode == EVP_CIPH_CBC_MODE)
+                dat->stream.cbc = (cbc128_f) aes128_t4_cbc_encrypt;
+            else if (mode == EVP_CIPH_CTR_MODE)
+                dat->stream.ctr = (ctr128_f) aes128_t4_ctr32_encrypt;
+            else
+                dat->stream.cbc = NULL;
+            break;
+        case 192:
+            if (mode == EVP_CIPH_CBC_MODE)
+                dat->stream.cbc = (cbc128_f) aes192_t4_cbc_encrypt;
+            else if (mode == EVP_CIPH_CTR_MODE)
+                dat->stream.ctr = (ctr128_f) aes192_t4_ctr32_encrypt;
+            else
+                dat->stream.cbc = NULL;
+            break;
+        case 256:
+            if (mode == EVP_CIPH_CBC_MODE)
+                dat->stream.cbc = (cbc128_f) aes256_t4_cbc_encrypt;
+            else if (mode == EVP_CIPH_CTR_MODE)
+                dat->stream.ctr = (ctr128_f) aes256_t4_ctr32_encrypt;
+            else
+                dat->stream.cbc = NULL;
+            break;
+        default:
+            ret = -1;
+        }
+    }
+
+    if (ret < 0) {
+        EVPerr(EVP_F_AES_T4_INIT_KEY, EVP_R_AES_KEY_SETUP_FAILED);
+        return 0;
+    }
+
+    return 1;
+}
+
+# define aes_t4_cbc_cipher aes_cbc_cipher
+static int aes_t4_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                             const unsigned char *in, size_t len);
+
+# define aes_t4_ecb_cipher aes_ecb_cipher
+static int aes_t4_ecb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                             const unsigned char *in, size_t len);
+
+# define aes_t4_ofb_cipher aes_ofb_cipher
+static int aes_t4_ofb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                             const unsigned char *in, size_t len);
+
+# define aes_t4_cfb_cipher aes_cfb_cipher
+static int aes_t4_cfb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                             const unsigned char *in, size_t len);
+
+# define aes_t4_cfb8_cipher aes_cfb8_cipher
+static int aes_t4_cfb8_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                              const unsigned char *in, size_t len);
+
+# define aes_t4_cfb1_cipher aes_cfb1_cipher
+static int aes_t4_cfb1_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                              const unsigned char *in, size_t len);
+
+# define aes_t4_ctr_cipher aes_ctr_cipher
+static int aes_t4_ctr_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                             const unsigned char *in, size_t len);
+
+static int aes_t4_gcm_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                               const unsigned char *iv, int enc)
+{
+    EVP_AES_GCM_CTX *gctx = EVP_C_DATA(EVP_AES_GCM_CTX,ctx);
+    if (!iv && !key)
+        return 1;
+    if (key) {
+        int bits = EVP_CIPHER_CTX_key_length(ctx) * 8;
+        aes_t4_set_encrypt_key(key, bits, &gctx->ks.ks);
+        CRYPTO_gcm128_init(&gctx->gcm, &gctx->ks,
+                           (block128_f) aes_t4_encrypt);
+        switch (bits) {
+        case 128:
+            gctx->ctr = (ctr128_f) aes128_t4_ctr32_encrypt;
+            break;
+        case 192:
+            gctx->ctr = (ctr128_f) aes192_t4_ctr32_encrypt;
+            break;
+        case 256:
+            gctx->ctr = (ctr128_f) aes256_t4_ctr32_encrypt;
+            break;
+        default:
+            return 0;
+        }
+        /*
+         * If we have an iv can set it directly, otherwise use saved IV.
+         */
+        if (iv == NULL && gctx->iv_set)
+            iv = gctx->iv;
+        if (iv) {
+            CRYPTO_gcm128_setiv(&gctx->gcm, iv, gctx->ivlen);
+            gctx->iv_set = 1;
+        }
+        gctx->key_set = 1;
+    } else {
+        /* If key set use IV, otherwise copy */
+        if (gctx->key_set)
+            CRYPTO_gcm128_setiv(&gctx->gcm, iv, gctx->ivlen);
+        else
+            memcpy(gctx->iv, iv, gctx->ivlen);
+        gctx->iv_set = 1;
+        gctx->iv_gen = 0;
+    }
+    return 1;
+}
+
+# define aes_t4_gcm_cipher aes_gcm_cipher
+static int aes_t4_gcm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                             const unsigned char *in, size_t len);
+
+static int aes_t4_xts_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                               const unsigned char *iv, int enc)
+{
+    EVP_AES_XTS_CTX *xctx = EVP_C_DATA(EVP_AES_XTS_CTX,ctx);
+    if (!iv && !key)
+        return 1;
+
+    if (key) {
+        int bits = EVP_CIPHER_CTX_key_length(ctx) * 4;
+        xctx->stream = NULL;
+        /* key_len is two AES keys */
+        if (enc) {
+            aes_t4_set_encrypt_key(key, bits, &xctx->ks1.ks);
+            xctx->xts.block1 = (block128_f) aes_t4_encrypt;
+            switch (bits) {
+            case 128:
+                xctx->stream = aes128_t4_xts_encrypt;
+                break;
+            case 256:
+                xctx->stream = aes256_t4_xts_encrypt;
+                break;
+            default:
+                return 0;
+            }
+        } else {
+            aes_t4_set_decrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 4,
+                                   &xctx->ks1.ks);
+            xctx->xts.block1 = (block128_f) aes_t4_decrypt;
+            switch (bits) {
+            case 128:
+                xctx->stream = aes128_t4_xts_decrypt;
+                break;
+            case 256:
+                xctx->stream = aes256_t4_xts_decrypt;
+                break;
+            default:
+                return 0;
+            }
+        }
+
+        aes_t4_set_encrypt_key(key + EVP_CIPHER_CTX_key_length(ctx) / 2,
+                               EVP_CIPHER_CTX_key_length(ctx) * 4,
+                               &xctx->ks2.ks);
+        xctx->xts.block2 = (block128_f) aes_t4_encrypt;
+
+        xctx->xts.key1 = &xctx->ks1;
+    }
+
+    if (iv) {
+        xctx->xts.key2 = &xctx->ks2;
+        memcpy(EVP_CIPHER_CTX_iv_noconst(ctx), iv, 16);
+    }
+
+    return 1;
+}
+
+# define aes_t4_xts_cipher aes_xts_cipher
+static int aes_t4_xts_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                             const unsigned char *in, size_t len);
+
+static int aes_t4_ccm_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                               const unsigned char *iv, int enc)
+{
+    EVP_AES_CCM_CTX *cctx = EVP_C_DATA(EVP_AES_CCM_CTX,ctx);
+    if (!iv && !key)
+        return 1;
+    if (key) {
+        int bits = EVP_CIPHER_CTX_key_length(ctx) * 8;
+        aes_t4_set_encrypt_key(key, bits, &cctx->ks.ks);
+        CRYPTO_ccm128_init(&cctx->ccm, cctx->M, cctx->L,
+                           &cctx->ks, (block128_f) aes_t4_encrypt);
+        cctx->str = NULL;
+        cctx->key_set = 1;
+    }
+    if (iv) {
+        memcpy(EVP_CIPHER_CTX_iv_noconst(ctx), iv, 15 - cctx->L);
+        cctx->iv_set = 1;
+    }
+    return 1;
+}
+
+# define aes_t4_ccm_cipher aes_ccm_cipher
+static int aes_t4_ccm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                             const unsigned char *in, size_t len);
+
+# ifndef OPENSSL_NO_OCB
+static int aes_t4_ocb_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                               const unsigned char *iv, int enc)
+{
+    EVP_AES_OCB_CTX *octx = EVP_C_DATA(EVP_AES_OCB_CTX,ctx);
+    if (!iv && !key)
+        return 1;
+    if (key) {
+        do {
+            /*
+             * We set both the encrypt and decrypt key here because decrypt
+             * needs both. We could possibly optimise to remove setting the
+             * decrypt for an encryption operation.
+             */
+            aes_t4_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                   &octx->ksenc.ks);
+            aes_t4_set_decrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                   &octx->ksdec.ks);
+            if (!CRYPTO_ocb128_init(&octx->ocb,
+                                    &octx->ksenc.ks, &octx->ksdec.ks,
+                                    (block128_f) aes_t4_encrypt,
+                                    (block128_f) aes_t4_decrypt,
+                                    NULL))
+                return 0;
+        }
+        while (0);
+
+        /*
+         * If we have an iv we can set it directly, otherwise use saved IV.
+         */
+        if (iv == NULL && octx->iv_set)
+            iv = octx->iv;
+        if (iv) {
+            if (CRYPTO_ocb128_setiv(&octx->ocb, iv, octx->ivlen, octx->taglen)
+                != 1)
+                return 0;
+            octx->iv_set = 1;
+        }
+        octx->key_set = 1;
+    } else {
+        /* If key set use IV, otherwise copy */
+        if (octx->key_set)
+            CRYPTO_ocb128_setiv(&octx->ocb, iv, octx->ivlen, octx->taglen);
+        else
+            memcpy(octx->iv, iv, octx->ivlen);
+        octx->iv_set = 1;
+    }
+    return 1;
+}
+
+#  define aes_t4_ocb_cipher aes_ocb_cipher
+static int aes_t4_ocb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                             const unsigned char *in, size_t len);
+# endif                        /* OPENSSL_NO_OCB */
+
+# define BLOCK_CIPHER_generic(nid,keylen,blocksize,ivlen,nmode,mode,MODE,flags) \
+static const EVP_CIPHER aes_t4_##keylen##_##mode = { \
+        nid##_##keylen##_##nmode,blocksize,keylen/8,ivlen, \
+        flags|EVP_CIPH_##MODE##_MODE,   \
+        aes_t4_init_key,                \
+        aes_t4_##mode##_cipher,         \
+        NULL,                           \
+        sizeof(EVP_AES_KEY),            \
+        NULL,NULL,NULL,NULL }; \
+static const EVP_CIPHER aes_##keylen##_##mode = { \
+        nid##_##keylen##_##nmode,blocksize,     \
+        keylen/8,ivlen, \
+        flags|EVP_CIPH_##MODE##_MODE,   \
+        aes_init_key,                   \
+        aes_##mode##_cipher,            \
+        NULL,                           \
+        sizeof(EVP_AES_KEY),            \
+        NULL,NULL,NULL,NULL }; \
+const EVP_CIPHER *EVP_aes_##keylen##_##mode(void) \
+{ return SPARC_AES_CAPABLE?&aes_t4_##keylen##_##mode:&aes_##keylen##_##mode; }
+
+# define BLOCK_CIPHER_custom(nid,keylen,blocksize,ivlen,mode,MODE,flags) \
+static const EVP_CIPHER aes_t4_##keylen##_##mode = { \
+        nid##_##keylen##_##mode,blocksize, \
+        (EVP_CIPH_##MODE##_MODE==EVP_CIPH_XTS_MODE?2:1)*keylen/8, ivlen, \
+        flags|EVP_CIPH_##MODE##_MODE,   \
+        aes_t4_##mode##_init_key,       \
+        aes_t4_##mode##_cipher,         \
+        aes_##mode##_cleanup,           \
+        sizeof(EVP_AES_##MODE##_CTX),   \
+        NULL,NULL,aes_##mode##_ctrl,NULL }; \
+static const EVP_CIPHER aes_##keylen##_##mode = { \
+        nid##_##keylen##_##mode,blocksize, \
+        (EVP_CIPH_##MODE##_MODE==EVP_CIPH_XTS_MODE?2:1)*keylen/8, ivlen, \
+        flags|EVP_CIPH_##MODE##_MODE,   \
+        aes_##mode##_init_key,          \
+        aes_##mode##_cipher,            \
+        aes_##mode##_cleanup,           \
+        sizeof(EVP_AES_##MODE##_CTX),   \
+        NULL,NULL,aes_##mode##_ctrl,NULL }; \
+const EVP_CIPHER *EVP_aes_##keylen##_##mode(void) \
+{ return SPARC_AES_CAPABLE?&aes_t4_##keylen##_##mode:&aes_##keylen##_##mode; }
+
+#elif defined(OPENSSL_CPUID_OBJ) && defined(__s390__)
+/*
+ * IBM S390X support
+ */
+# include "s390x_arch.h"
+
+typedef struct {
+    union {
+        double align;
+        /*-
+         * KM-AES parameter block - begin
+         * (see z/Architecture Principles of Operation >= SA22-7832-06)
+         */
+        struct {
+            unsigned char k[32];
+        } param;
+        /* KM-AES parameter block - end */
+    } km;
+    unsigned int fc;
+} S390X_AES_ECB_CTX;
+
+typedef struct {
+    union {
+        double align;
+        /*-
+         * KMO-AES parameter block - begin
+         * (see z/Architecture Principles of Operation >= SA22-7832-08)
+         */
+        struct {
+            unsigned char cv[16];
+            unsigned char k[32];
+        } param;
+        /* KMO-AES parameter block - end */
+    } kmo;
+    unsigned int fc;
+
+    int res;
+} S390X_AES_OFB_CTX;
+
+typedef struct {
+    union {
+        double align;
+        /*-
+         * KMF-AES parameter block - begin
+         * (see z/Architecture Principles of Operation >= SA22-7832-08)
+         */
+        struct {
+            unsigned char cv[16];
+            unsigned char k[32];
+        } param;
+        /* KMF-AES parameter block - end */
+    } kmf;
+    unsigned int fc;
+
+    int res;
+} S390X_AES_CFB_CTX;
+
+typedef struct {
+    union {
+        double align;
+        /*-
+         * KMA-GCM-AES parameter block - begin
+         * (see z/Architecture Principles of Operation >= SA22-7832-11)
+         */
+        struct {
+            unsigned char reserved[12];
+            union {
+                unsigned int w;
+                unsigned char b[4];
+            } cv;
+            union {
+                unsigned long long g[2];
+                unsigned char b[16];
+            } t;
+            unsigned char h[16];
+            unsigned long long taadl;
+            unsigned long long tpcl;
+            union {
+                unsigned long long g[2];
+                unsigned int w[4];
+            } j0;
+            unsigned char k[32];
+        } param;
+        /* KMA-GCM-AES parameter block - end */
+    } kma;
+    unsigned int fc;
+    int key_set;
+
+    unsigned char *iv;
+    int ivlen;
+    int iv_set;
+    int iv_gen;
+
+    int taglen;
+
+    unsigned char ares[16];
+    unsigned char mres[16];
+    unsigned char kres[16];
+    int areslen;
+    int mreslen;
+    int kreslen;
+
+    int tls_aad_len;
+} S390X_AES_GCM_CTX;
+
+typedef struct {
+    union {
+        double align;
+        /*-
+         * Padding is chosen so that ccm.kmac_param.k overlaps with key.k and
+         * ccm.fc with key.k.rounds. Remember that on s390x, an AES_KEY's
+         * rounds field is used to store the function code and that the key
+         * schedule is not stored (if aes hardware support is detected).
+         */
+        struct {
+            unsigned char pad[16];
+            AES_KEY k;
+        } key;
+
+        struct {
+            /*-
+             * KMAC-AES parameter block - begin
+             * (see z/Architecture Principles of Operation >= SA22-7832-08)
+             */
+            struct {
+                union {
+                    unsigned long long g[2];
+                    unsigned char b[16];
+                } icv;
+                unsigned char k[32];
+            } kmac_param;
+            /* KMAC-AES paramater block - end */
+
+            union {
+                unsigned long long g[2];
+                unsigned char b[16];
+            } nonce;
+            union {
+                unsigned long long g[2];
+                unsigned char b[16];
+            } buf;
+
+            unsigned long long blocks;
+            int l;
+            int m;
+            int tls_aad_len;
+            int iv_set;
+            int tag_set;
+            int len_set;
+            int key_set;
+
+            unsigned char pad[140];
+            unsigned int fc;
+        } ccm;
+    } aes;
+} S390X_AES_CCM_CTX;
+
+/* Convert key size to function code: [16,24,32] -> [18,19,20]. */
+# define S390X_AES_FC(keylen)  (S390X_AES_128 + ((((keylen) << 3) - 128) >> 6))
+
+/* Most modes of operation need km for partial block processing. */
+# define S390X_aes_128_CAPABLE (OPENSSL_s390xcap_P.km[0] &	\
+                                S390X_CAPBIT(S390X_AES_128))
+# define S390X_aes_192_CAPABLE (OPENSSL_s390xcap_P.km[0] &	\
+                                S390X_CAPBIT(S390X_AES_192))
+# define S390X_aes_256_CAPABLE (OPENSSL_s390xcap_P.km[0] &	\
+                                S390X_CAPBIT(S390X_AES_256))
+
+# define s390x_aes_init_key aes_init_key
+static int s390x_aes_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                              const unsigned char *iv, int enc);
+
+# define S390X_aes_128_cbc_CAPABLE	1	/* checked by callee */
+# define S390X_aes_192_cbc_CAPABLE	1
+# define S390X_aes_256_cbc_CAPABLE	1
+# define S390X_AES_CBC_CTX		EVP_AES_KEY
+
+# define s390x_aes_cbc_init_key aes_init_key
+
+# define s390x_aes_cbc_cipher aes_cbc_cipher
+static int s390x_aes_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                const unsigned char *in, size_t len);
+
+# define S390X_aes_128_ecb_CAPABLE	S390X_aes_128_CAPABLE
+# define S390X_aes_192_ecb_CAPABLE	S390X_aes_192_CAPABLE
+# define S390X_aes_256_ecb_CAPABLE	S390X_aes_256_CAPABLE
+
+static int s390x_aes_ecb_init_key(EVP_CIPHER_CTX *ctx,
+                                  const unsigned char *key,
+                                  const unsigned char *iv, int enc)
+{
+    S390X_AES_ECB_CTX *cctx = EVP_C_DATA(S390X_AES_ECB_CTX, ctx);
+    const int keylen = EVP_CIPHER_CTX_key_length(ctx);
+
+    cctx->fc = S390X_AES_FC(keylen);
+    if (!enc)
+        cctx->fc |= S390X_DECRYPT;
+
+    memcpy(cctx->km.param.k, key, keylen);
+    return 1;
+}
+
+static int s390x_aes_ecb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                const unsigned char *in, size_t len)
+{
+    S390X_AES_ECB_CTX *cctx = EVP_C_DATA(S390X_AES_ECB_CTX, ctx);
+
+    s390x_km(in, len, out, cctx->fc, &cctx->km.param);
+    return 1;
+}
+
+# define S390X_aes_128_ofb_CAPABLE (S390X_aes_128_CAPABLE &&		\
+                                    (OPENSSL_s390xcap_P.kmo[0] &	\
+                                     S390X_CAPBIT(S390X_AES_128)))
+# define S390X_aes_192_ofb_CAPABLE (S390X_aes_192_CAPABLE &&		\
+                                    (OPENSSL_s390xcap_P.kmo[0] &	\
+                                     S390X_CAPBIT(S390X_AES_192)))
+# define S390X_aes_256_ofb_CAPABLE (S390X_aes_256_CAPABLE &&		\
+                                    (OPENSSL_s390xcap_P.kmo[0] &	\
+                                     S390X_CAPBIT(S390X_AES_256)))
+
+static int s390x_aes_ofb_init_key(EVP_CIPHER_CTX *ctx,
+                                  const unsigned char *key,
+                                  const unsigned char *ivec, int enc)
+{
+    S390X_AES_OFB_CTX *cctx = EVP_C_DATA(S390X_AES_OFB_CTX, ctx);
+    const unsigned char *iv = EVP_CIPHER_CTX_original_iv(ctx);
+    const int keylen = EVP_CIPHER_CTX_key_length(ctx);
+    const int ivlen = EVP_CIPHER_CTX_iv_length(ctx);
+
+    memcpy(cctx->kmo.param.cv, iv, ivlen);
+    memcpy(cctx->kmo.param.k, key, keylen);
+    cctx->fc = S390X_AES_FC(keylen);
+    cctx->res = 0;
+    return 1;
+}
+
+static int s390x_aes_ofb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                const unsigned char *in, size_t len)
+{
+    S390X_AES_OFB_CTX *cctx = EVP_C_DATA(S390X_AES_OFB_CTX, ctx);
+    int n = cctx->res;
+    int rem;
+
+    while (n && len) {
+        *out = *in ^ cctx->kmo.param.cv[n];
+        n = (n + 1) & 0xf;
+        --len;
+        ++in;
+        ++out;
+    }
+
+    rem = len & 0xf;
+
+    len &= ~(size_t)0xf;
+    if (len) {
+        s390x_kmo(in, len, out, cctx->fc, &cctx->kmo.param);
+
+        out += len;
+        in += len;
+    }
+
+    if (rem) {
+        s390x_km(cctx->kmo.param.cv, 16, cctx->kmo.param.cv, cctx->fc,
+                 cctx->kmo.param.k);
+
+        while (rem--) {
+            out[n] = in[n] ^ cctx->kmo.param.cv[n];
+            ++n;
+        }
+    }
+
+    cctx->res = n;
+    return 1;
+}
+
+# define S390X_aes_128_cfb_CAPABLE (S390X_aes_128_CAPABLE &&		\
+                                    (OPENSSL_s390xcap_P.kmf[0] &	\
+                                     S390X_CAPBIT(S390X_AES_128)))
+# define S390X_aes_192_cfb_CAPABLE (S390X_aes_192_CAPABLE &&		\
+                                    (OPENSSL_s390xcap_P.kmf[0] &	\
+                                     S390X_CAPBIT(S390X_AES_192)))
+# define S390X_aes_256_cfb_CAPABLE (S390X_aes_256_CAPABLE &&		\
+                                    (OPENSSL_s390xcap_P.kmf[0] &	\
+                                     S390X_CAPBIT(S390X_AES_256)))
+
+static int s390x_aes_cfb_init_key(EVP_CIPHER_CTX *ctx,
+                                  const unsigned char *key,
+                                  const unsigned char *ivec, int enc)
+{
+    S390X_AES_CFB_CTX *cctx = EVP_C_DATA(S390X_AES_CFB_CTX, ctx);
+    const unsigned char *iv = EVP_CIPHER_CTX_original_iv(ctx);
+    const int keylen = EVP_CIPHER_CTX_key_length(ctx);
+    const int ivlen = EVP_CIPHER_CTX_iv_length(ctx);
+
+    cctx->fc = S390X_AES_FC(keylen);
+    cctx->fc |= 16 << 24;   /* 16 bytes cipher feedback */
+    if (!enc)
+        cctx->fc |= S390X_DECRYPT;
+
+    cctx->res = 0;
+    memcpy(cctx->kmf.param.cv, iv, ivlen);
+    memcpy(cctx->kmf.param.k, key, keylen);
+    return 1;
+}
+
+static int s390x_aes_cfb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                const unsigned char *in, size_t len)
+{
+    S390X_AES_CFB_CTX *cctx = EVP_C_DATA(S390X_AES_CFB_CTX, ctx);
+    const int keylen = EVP_CIPHER_CTX_key_length(ctx);
+    const int enc = EVP_CIPHER_CTX_encrypting(ctx);
+    int n = cctx->res;
+    int rem;
+    unsigned char tmp;
+
+    while (n && len) {
+        tmp = *in;
+        *out = cctx->kmf.param.cv[n] ^ tmp;
+        cctx->kmf.param.cv[n] = enc ? *out : tmp;
+        n = (n + 1) & 0xf;
+        --len;
+        ++in;
+        ++out;
+    }
+
+    rem = len & 0xf;
+
+    len &= ~(size_t)0xf;
+    if (len) {
+        s390x_kmf(in, len, out, cctx->fc, &cctx->kmf.param);
+
+        out += len;
+        in += len;
+    }
+
+    if (rem) {
+        s390x_km(cctx->kmf.param.cv, 16, cctx->kmf.param.cv,
+                 S390X_AES_FC(keylen), cctx->kmf.param.k);
+
+        while (rem--) {
+            tmp = in[n];
+            out[n] = cctx->kmf.param.cv[n] ^ tmp;
+            cctx->kmf.param.cv[n] = enc ? out[n] : tmp;
+            ++n;
+        }
+    }
+
+    cctx->res = n;
+    return 1;
+}
+
+# define S390X_aes_128_cfb8_CAPABLE (OPENSSL_s390xcap_P.kmf[0] &	\
+                                     S390X_CAPBIT(S390X_AES_128))
+# define S390X_aes_192_cfb8_CAPABLE (OPENSSL_s390xcap_P.kmf[0] &	\
+                                     S390X_CAPBIT(S390X_AES_192))
+# define S390X_aes_256_cfb8_CAPABLE (OPENSSL_s390xcap_P.kmf[0] &	\
+                                     S390X_CAPBIT(S390X_AES_256))
+
+static int s390x_aes_cfb8_init_key(EVP_CIPHER_CTX *ctx,
+                                   const unsigned char *key,
+                                   const unsigned char *ivec, int enc)
+{
+    S390X_AES_CFB_CTX *cctx = EVP_C_DATA(S390X_AES_CFB_CTX, ctx);
+    const unsigned char *iv = EVP_CIPHER_CTX_original_iv(ctx);
+    const int keylen = EVP_CIPHER_CTX_key_length(ctx);
+    const int ivlen = EVP_CIPHER_CTX_iv_length(ctx);
+
+    cctx->fc = S390X_AES_FC(keylen);
+    cctx->fc |= 1 << 24;   /* 1 byte cipher feedback */
+    if (!enc)
+        cctx->fc |= S390X_DECRYPT;
+
+    memcpy(cctx->kmf.param.cv, iv, ivlen);
+    memcpy(cctx->kmf.param.k, key, keylen);
+    return 1;
+}
+
+static int s390x_aes_cfb8_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                 const unsigned char *in, size_t len)
+{
+    S390X_AES_CFB_CTX *cctx = EVP_C_DATA(S390X_AES_CFB_CTX, ctx);
+
+    s390x_kmf(in, len, out, cctx->fc, &cctx->kmf.param);
+    return 1;
+}
+
+# define S390X_aes_128_cfb1_CAPABLE	0
+# define S390X_aes_192_cfb1_CAPABLE	0
+# define S390X_aes_256_cfb1_CAPABLE	0
+
+# define s390x_aes_cfb1_init_key aes_init_key
+
+# define s390x_aes_cfb1_cipher aes_cfb1_cipher
+static int s390x_aes_cfb1_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                 const unsigned char *in, size_t len);
+
+# define S390X_aes_128_ctr_CAPABLE	1	/* checked by callee */
+# define S390X_aes_192_ctr_CAPABLE	1
+# define S390X_aes_256_ctr_CAPABLE	1
+# define S390X_AES_CTR_CTX		EVP_AES_KEY
+
+# define s390x_aes_ctr_init_key aes_init_key
+
+# define s390x_aes_ctr_cipher aes_ctr_cipher
+static int s390x_aes_ctr_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                const unsigned char *in, size_t len);
+
+# define S390X_aes_128_gcm_CAPABLE (S390X_aes_128_CAPABLE &&		\
+                                    (OPENSSL_s390xcap_P.kma[0] &	\
+                                     S390X_CAPBIT(S390X_AES_128)))
+# define S390X_aes_192_gcm_CAPABLE (S390X_aes_192_CAPABLE &&		\
+                                    (OPENSSL_s390xcap_P.kma[0] &	\
+                                     S390X_CAPBIT(S390X_AES_192)))
+# define S390X_aes_256_gcm_CAPABLE (S390X_aes_256_CAPABLE &&		\
+                                    (OPENSSL_s390xcap_P.kma[0] &	\
+                                     S390X_CAPBIT(S390X_AES_256)))
+
+/* iv + padding length for iv lenghts != 12 */
+# define S390X_gcm_ivpadlen(i)	((((i) + 15) >> 4 << 4) + 16)
+
+/*-
+ * Process additional authenticated data. Returns 0 on success. Code is
+ * big-endian.
+ */
+static int s390x_aes_gcm_aad(S390X_AES_GCM_CTX *ctx, const unsigned char *aad,
+                             size_t len)
+{
+    unsigned long long alen;
+    int n, rem;
+
+    if (ctx->kma.param.tpcl)
+        return -2;
+
+    alen = ctx->kma.param.taadl + len;
+    if (alen > (U64(1) << 61) || (sizeof(len) == 8 && alen < len))
+        return -1;
+    ctx->kma.param.taadl = alen;
+
+    n = ctx->areslen;
+    if (n) {
+        while (n && len) {
+            ctx->ares[n] = *aad;
+            n = (n + 1) & 0xf;
+            ++aad;
+            --len;
+        }
+        /* ctx->ares contains a complete block if offset has wrapped around */
+        if (!n) {
+            s390x_kma(ctx->ares, 16, NULL, 0, NULL, ctx->fc, &ctx->kma.param);
+            ctx->fc |= S390X_KMA_HS;
+        }
+        ctx->areslen = n;
+    }
+
+    rem = len & 0xf;
+
+    len &= ~(size_t)0xf;
+    if (len) {
+        s390x_kma(aad, len, NULL, 0, NULL, ctx->fc, &ctx->kma.param);
+        aad += len;
+        ctx->fc |= S390X_KMA_HS;
+    }
+
+    if (rem) {
+        ctx->areslen = rem;
+
+        do {
+            --rem;
+            ctx->ares[rem] = aad[rem];
+        } while (rem);
+    }
+    return 0;
+}
+
+/*-
+ * En/de-crypt plain/cipher-text and authenticate ciphertext. Returns 0 for
+ * success. Code is big-endian.
+ */
+static int s390x_aes_gcm(S390X_AES_GCM_CTX *ctx, const unsigned char *in,
+                         unsigned char *out, size_t len)
+{
+    const unsigned char *inptr;
+    unsigned long long mlen;
+    union {
+        unsigned int w[4];
+        unsigned char b[16];
+    } buf;
+    size_t inlen;
+    int n, rem, i;
+
+    mlen = ctx->kma.param.tpcl + len;
+    if (mlen > ((U64(1) << 36) - 32) || (sizeof(len) == 8 && mlen < len))
+        return -1;
+    ctx->kma.param.tpcl = mlen;
+
+    n = ctx->mreslen;
+    if (n) {
+        inptr = in;
+        inlen = len;
+        while (n && inlen) {
+            ctx->mres[n] = *inptr;
+            n = (n + 1) & 0xf;
+            ++inptr;
+            --inlen;
+        }
+        /* ctx->mres contains a complete block if offset has wrapped around */
+        if (!n) {
+            s390x_kma(ctx->ares, ctx->areslen, ctx->mres, 16, buf.b,
+                      ctx->fc | S390X_KMA_LAAD, &ctx->kma.param);
+            ctx->fc |= S390X_KMA_HS;
+            ctx->areslen = 0;
+
+            /* previous call already encrypted/decrypted its remainder,
+             * see comment below */
+            n = ctx->mreslen;
+            while (n) {
+                *out = buf.b[n];
+                n = (n + 1) & 0xf;
+                ++out;
+                ++in;
+                --len;
+            }
+            ctx->mreslen = 0;
+        }
+    }
+
+    rem = len & 0xf;
+
+    len &= ~(size_t)0xf;
+    if (len) {
+        s390x_kma(ctx->ares, ctx->areslen, in, len, out,
+                  ctx->fc | S390X_KMA_LAAD, &ctx->kma.param);
+        in += len;
+        out += len;
+        ctx->fc |= S390X_KMA_HS;
+        ctx->areslen = 0;
+    }
+
+    /*-
+     * If there is a remainder, it has to be saved such that it can be
+     * processed by kma later. However, we also have to do the for-now
+     * unauthenticated encryption/decryption part here and now...
+     */
+    if (rem) {
+        if (!ctx->mreslen) {
+            buf.w[0] = ctx->kma.param.j0.w[0];
+            buf.w[1] = ctx->kma.param.j0.w[1];
+            buf.w[2] = ctx->kma.param.j0.w[2];
+            buf.w[3] = ctx->kma.param.cv.w + 1;
+            s390x_km(buf.b, 16, ctx->kres, ctx->fc & 0x1f, &ctx->kma.param.k);
+        }
+
+        n = ctx->mreslen;
+        for (i = 0; i < rem; i++) {
+            ctx->mres[n + i] = in[i];
+            out[i] = in[i] ^ ctx->kres[n + i];
+        }
+
+        ctx->mreslen += rem;
+    }
+    return 0;
+}
+
+/*-
+ * Initialize context structure. Code is big-endian.
+ */
+static void s390x_aes_gcm_setiv(S390X_AES_GCM_CTX *ctx,
+                                const unsigned char *iv)
+{
+    ctx->kma.param.t.g[0] = 0;
+    ctx->kma.param.t.g[1] = 0;
+    ctx->kma.param.tpcl = 0;
+    ctx->kma.param.taadl = 0;
+    ctx->mreslen = 0;
+    ctx->areslen = 0;
+    ctx->kreslen = 0;
+
+    if (ctx->ivlen == 12) {
+        memcpy(&ctx->kma.param.j0, iv, ctx->ivlen);
+        ctx->kma.param.j0.w[3] = 1;
+        ctx->kma.param.cv.w = 1;
+    } else {
+        /* ctx->iv has the right size and is already padded. */
+        memcpy(ctx->iv, iv, ctx->ivlen);
+        s390x_kma(ctx->iv, S390X_gcm_ivpadlen(ctx->ivlen), NULL, 0, NULL,
+                  ctx->fc, &ctx->kma.param);
+        ctx->fc |= S390X_KMA_HS;
+
+        ctx->kma.param.j0.g[0] = ctx->kma.param.t.g[0];
+        ctx->kma.param.j0.g[1] = ctx->kma.param.t.g[1];
+        ctx->kma.param.cv.w = ctx->kma.param.j0.w[3];
+        ctx->kma.param.t.g[0] = 0;
+        ctx->kma.param.t.g[1] = 0;
+    }
+}
+
+/*-
+ * Performs various operations on the context structure depending on control
+ * type. Returns 1 for success, 0 for failure and -1 for unknown control type.
+ * Code is big-endian.
+ */
+static int s390x_aes_gcm_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
+{
+    S390X_AES_GCM_CTX *gctx = EVP_C_DATA(S390X_AES_GCM_CTX, c);
+    S390X_AES_GCM_CTX *gctx_out;
+    EVP_CIPHER_CTX *out;
+    unsigned char *buf, *iv;
+    int ivlen, enc, len;
+
+    switch (type) {
+    case EVP_CTRL_INIT:
+        ivlen = EVP_CIPHER_CTX_iv_length(c);
+        iv = EVP_CIPHER_CTX_iv_noconst(c);
+        gctx->key_set = 0;
+        gctx->iv_set = 0;
+        gctx->ivlen = ivlen;
+        gctx->iv = iv;
+        gctx->taglen = -1;
+        gctx->iv_gen = 0;
+        gctx->tls_aad_len = -1;
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_IVLEN:
+        if (arg <= 0)
+            return 0;
+
+        if (arg != 12) {
+            iv = EVP_CIPHER_CTX_iv_noconst(c);
+            len = S390X_gcm_ivpadlen(arg);
+
+            /* Allocate memory for iv if needed. */
+            if (gctx->ivlen == 12 || len > S390X_gcm_ivpadlen(gctx->ivlen)) {
+                if (gctx->iv != iv)
+                    OPENSSL_free(gctx->iv);
+
+                if ((gctx->iv = OPENSSL_malloc(len)) == NULL) {
+                    EVPerr(EVP_F_S390X_AES_GCM_CTRL, ERR_R_MALLOC_FAILURE);
+                    return 0;
+                }
+            }
+            /* Add padding. */
+            memset(gctx->iv + arg, 0, len - arg - 8);
+            *((unsigned long long *)(gctx->iv + len - 8)) = arg << 3;
+        }
+        gctx->ivlen = arg;
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_TAG:
+        buf = EVP_CIPHER_CTX_buf_noconst(c);
+        enc = EVP_CIPHER_CTX_encrypting(c);
+        if (arg <= 0 || arg > 16 || enc)
+            return 0;
+
+        memcpy(buf, ptr, arg);
+        gctx->taglen = arg;
+        return 1;
+
+    case EVP_CTRL_AEAD_GET_TAG:
+        enc = EVP_CIPHER_CTX_encrypting(c);
+        if (arg <= 0 || arg > 16 || !enc || gctx->taglen < 0)
+            return 0;
+
+        memcpy(ptr, gctx->kma.param.t.b, arg);
+        return 1;
+
+    case EVP_CTRL_GCM_SET_IV_FIXED:
+        /* Special case: -1 length restores whole iv */
+        if (arg == -1) {
+            memcpy(gctx->iv, ptr, gctx->ivlen);
+            gctx->iv_gen = 1;
+            return 1;
+        }
+        /*
+         * Fixed field must be at least 4 bytes and invocation field at least
+         * 8.
+         */
+        if ((arg < 4) || (gctx->ivlen - arg) < 8)
+            return 0;
+
+        if (arg)
+            memcpy(gctx->iv, ptr, arg);
+
+        enc = EVP_CIPHER_CTX_encrypting(c);
+        if (enc && RAND_bytes(gctx->iv + arg, gctx->ivlen - arg) <= 0)
+            return 0;
+
+        gctx->iv_gen = 1;
+        return 1;
+
+    case EVP_CTRL_GCM_IV_GEN:
+        if (gctx->iv_gen == 0 || gctx->key_set == 0)
+            return 0;
+
+        s390x_aes_gcm_setiv(gctx, gctx->iv);
+
+        if (arg <= 0 || arg > gctx->ivlen)
+            arg = gctx->ivlen;
+
+        memcpy(ptr, gctx->iv + gctx->ivlen - arg, arg);
+        /*
+         * Invocation field will be at least 8 bytes in size and so no need
+         * to check wrap around or increment more than last 8 bytes.
+         */
+        ctr64_inc(gctx->iv + gctx->ivlen - 8);
+        gctx->iv_set = 1;
+        return 1;
+
+    case EVP_CTRL_GCM_SET_IV_INV:
+        enc = EVP_CIPHER_CTX_encrypting(c);
+        if (gctx->iv_gen == 0 || gctx->key_set == 0 || enc)
+            return 0;
+
+        memcpy(gctx->iv + gctx->ivlen - arg, ptr, arg);
+        s390x_aes_gcm_setiv(gctx, gctx->iv);
+        gctx->iv_set = 1;
+        return 1;
+
+    case EVP_CTRL_AEAD_TLS1_AAD:
+        /* Save the aad for later use. */
+        if (arg != EVP_AEAD_TLS1_AAD_LEN)
+            return 0;
+
+        buf = EVP_CIPHER_CTX_buf_noconst(c);
+        memcpy(buf, ptr, arg);
+        gctx->tls_aad_len = arg;
+
+        len = buf[arg - 2] << 8 | buf[arg - 1];
+        /* Correct length for explicit iv. */
+        if (len < EVP_GCM_TLS_EXPLICIT_IV_LEN)
+            return 0;
+        len -= EVP_GCM_TLS_EXPLICIT_IV_LEN;
+
+        /* If decrypting correct for tag too. */
+        enc = EVP_CIPHER_CTX_encrypting(c);
+        if (!enc) {
+            if (len < EVP_GCM_TLS_TAG_LEN)
+                return 0;
+            len -= EVP_GCM_TLS_TAG_LEN;
+        }
+        buf[arg - 2] = len >> 8;
+        buf[arg - 1] = len & 0xff;
+        /* Extra padding: tag appended to record. */
+        return EVP_GCM_TLS_TAG_LEN;
+
+    case EVP_CTRL_COPY:
+        out = ptr;
+        gctx_out = EVP_C_DATA(S390X_AES_GCM_CTX, out);
+        iv = EVP_CIPHER_CTX_iv_noconst(c);
+
+        if (gctx->iv == iv) {
+            gctx_out->iv = EVP_CIPHER_CTX_iv_noconst(out);
+        } else {
+            len = S390X_gcm_ivpadlen(gctx->ivlen);
+
+            if ((gctx_out->iv = OPENSSL_malloc(len)) == NULL) {
+                EVPerr(EVP_F_S390X_AES_GCM_CTRL, ERR_R_MALLOC_FAILURE);
+                return 0;
+            }
+
+            memcpy(gctx_out->iv, gctx->iv, len);
+        }
+        return 1;
+
+    default:
+        return -1;
+    }
+}
+
+/*-
+ * Set key and/or iv. Returns 1 on success. Otherwise 0 is returned.
+ */
+static int s390x_aes_gcm_init_key(EVP_CIPHER_CTX *ctx,
+                                  const unsigned char *key,
+                                  const unsigned char *iv, int enc)
+{
+    S390X_AES_GCM_CTX *gctx = EVP_C_DATA(S390X_AES_GCM_CTX, ctx);
+    int keylen;
+
+    if (iv == NULL && key == NULL)
+        return 1;
+
+    if (key != NULL) {
+        keylen = EVP_CIPHER_CTX_key_length(ctx);
+        memcpy(&gctx->kma.param.k, key, keylen);
+
+        gctx->fc = S390X_AES_FC(keylen);
+        if (!enc)
+            gctx->fc |= S390X_DECRYPT;
+
+        if (iv == NULL && gctx->iv_set)
+            iv = gctx->iv;
+
+        if (iv != NULL) {
+            s390x_aes_gcm_setiv(gctx, iv);
+            gctx->iv_set = 1;
+        }
+        gctx->key_set = 1;
+    } else {
+        if (gctx->key_set)
+            s390x_aes_gcm_setiv(gctx, iv);
+        else
+            memcpy(gctx->iv, iv, gctx->ivlen);
+
+        gctx->iv_set = 1;
+        gctx->iv_gen = 0;
+    }
+    return 1;
+}
+
+/*-
+ * En/de-crypt and authenticate TLS packet. Returns the number of bytes written
+ * if successful. Otherwise -1 is returned. Code is big-endian.
+ */
+static int s390x_aes_gcm_tls_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                    const unsigned char *in, size_t len)
+{
+    S390X_AES_GCM_CTX *gctx = EVP_C_DATA(S390X_AES_GCM_CTX, ctx);
+    const unsigned char *buf = EVP_CIPHER_CTX_buf_noconst(ctx);
+    const int enc = EVP_CIPHER_CTX_encrypting(ctx);
+    int rv = -1;
+
+    if (out != in || len < (EVP_GCM_TLS_EXPLICIT_IV_LEN + EVP_GCM_TLS_TAG_LEN))
+        return -1;
+
+    if (EVP_CIPHER_CTX_ctrl(ctx, enc ? EVP_CTRL_GCM_IV_GEN
+                                     : EVP_CTRL_GCM_SET_IV_INV,
+                            EVP_GCM_TLS_EXPLICIT_IV_LEN, out) <= 0)
+        goto err;
+
+    in += EVP_GCM_TLS_EXPLICIT_IV_LEN;
+    out += EVP_GCM_TLS_EXPLICIT_IV_LEN;
+    len -= EVP_GCM_TLS_EXPLICIT_IV_LEN + EVP_GCM_TLS_TAG_LEN;
+
+    gctx->kma.param.taadl = gctx->tls_aad_len << 3;
+    gctx->kma.param.tpcl = len << 3;
+    s390x_kma(buf, gctx->tls_aad_len, in, len, out,
+              gctx->fc | S390X_KMA_LAAD | S390X_KMA_LPC, &gctx->kma.param);
+
+    if (enc) {
+        memcpy(out + len, gctx->kma.param.t.b, EVP_GCM_TLS_TAG_LEN);
+        rv = len + EVP_GCM_TLS_EXPLICIT_IV_LEN + EVP_GCM_TLS_TAG_LEN;
+    } else {
+        if (CRYPTO_memcmp(gctx->kma.param.t.b, in + len,
+                          EVP_GCM_TLS_TAG_LEN)) {
+            OPENSSL_cleanse(out, len);
+            goto err;
+        }
+        rv = len;
+    }
+err:
+    gctx->iv_set = 0;
+    gctx->tls_aad_len = -1;
+    return rv;
+}
+
+/*-
+ * Called from EVP layer to initialize context, process additional
+ * authenticated data, en/de-crypt plain/cipher-text and authenticate
+ * ciphertext or process a TLS packet, depending on context. Returns bytes
+ * written on success. Otherwise -1 is returned. Code is big-endian.
+ */
+static int s390x_aes_gcm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                const unsigned char *in, size_t len)
+{
+    S390X_AES_GCM_CTX *gctx = EVP_C_DATA(S390X_AES_GCM_CTX, ctx);
+    unsigned char *buf, tmp[16];
+    int enc;
+
+    if (!gctx->key_set)
+        return -1;
+
+    if (gctx->tls_aad_len >= 0)
+        return s390x_aes_gcm_tls_cipher(ctx, out, in, len);
+
+    if (!gctx->iv_set)
+        return -1;
+
+    if (in != NULL) {
+        if (out == NULL) {
+            if (s390x_aes_gcm_aad(gctx, in, len))
+                return -1;
+        } else {
+            if (s390x_aes_gcm(gctx, in, out, len))
+                return -1;
+        }
+        return len;
+    } else {
+        gctx->kma.param.taadl <<= 3;
+        gctx->kma.param.tpcl <<= 3;
+        s390x_kma(gctx->ares, gctx->areslen, gctx->mres, gctx->mreslen, tmp,
+                  gctx->fc | S390X_KMA_LAAD | S390X_KMA_LPC, &gctx->kma.param);
+        /* recall that we already did en-/decrypt gctx->mres
+         * and returned it to caller... */
+        OPENSSL_cleanse(tmp, gctx->mreslen);
+        gctx->iv_set = 0;
+
+        enc = EVP_CIPHER_CTX_encrypting(ctx);
+        if (enc) {
+            gctx->taglen = 16;
+        } else {
+            if (gctx->taglen < 0)
+                return -1;
+
+            buf = EVP_CIPHER_CTX_buf_noconst(ctx);
+            if (CRYPTO_memcmp(buf, gctx->kma.param.t.b, gctx->taglen))
+                return -1;
+        }
+        return 0;
+    }
+}
+
+static int s390x_aes_gcm_cleanup(EVP_CIPHER_CTX *c)
+{
+    S390X_AES_GCM_CTX *gctx = EVP_C_DATA(S390X_AES_GCM_CTX, c);
+    const unsigned char *iv;
+
+    if (gctx == NULL)
+        return 0;
+
+    iv = EVP_CIPHER_CTX_iv(c);
+    if (iv != gctx->iv)
+        OPENSSL_free(gctx->iv);
+
+    OPENSSL_cleanse(gctx, sizeof(*gctx));
+    return 1;
+}
+
+# define S390X_AES_XTS_CTX		EVP_AES_XTS_CTX
+# define S390X_aes_128_xts_CAPABLE	1	/* checked by callee */
+# define S390X_aes_256_xts_CAPABLE	1
+
+# define s390x_aes_xts_init_key aes_xts_init_key
+static int s390x_aes_xts_init_key(EVP_CIPHER_CTX *ctx,
+                                  const unsigned char *key,
+                                  const unsigned char *iv, int enc);
+# define s390x_aes_xts_cipher aes_xts_cipher
+static int s390x_aes_xts_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                const unsigned char *in, size_t len);
+# define s390x_aes_xts_ctrl aes_xts_ctrl
+static int s390x_aes_xts_ctrl(EVP_CIPHER_CTX *, int type, int arg, void *ptr);
+# define s390x_aes_xts_cleanup aes_xts_cleanup
+
+# define S390X_aes_128_ccm_CAPABLE (S390X_aes_128_CAPABLE &&		\
+                                    (OPENSSL_s390xcap_P.kmac[0] &	\
+                                     S390X_CAPBIT(S390X_AES_128)))
+# define S390X_aes_192_ccm_CAPABLE (S390X_aes_192_CAPABLE &&		\
+                                    (OPENSSL_s390xcap_P.kmac[0] &	\
+                                     S390X_CAPBIT(S390X_AES_192)))
+# define S390X_aes_256_ccm_CAPABLE (S390X_aes_256_CAPABLE &&		\
+                                    (OPENSSL_s390xcap_P.kmac[0] &	\
+                                     S390X_CAPBIT(S390X_AES_256)))
+
+# define S390X_CCM_AAD_FLAG	0x40
+
+/*-
+ * Set nonce and length fields. Code is big-endian.
+ */
+static inline void s390x_aes_ccm_setiv(S390X_AES_CCM_CTX *ctx,
+                                          const unsigned char *nonce,
+                                          size_t mlen)
+{
+    ctx->aes.ccm.nonce.b[0] &= ~S390X_CCM_AAD_FLAG;
+    ctx->aes.ccm.nonce.g[1] = mlen;
+    memcpy(ctx->aes.ccm.nonce.b + 1, nonce, 15 - ctx->aes.ccm.l);
+}
+
+/*-
+ * Process additional authenticated data. Code is big-endian.
+ */
+static void s390x_aes_ccm_aad(S390X_AES_CCM_CTX *ctx, const unsigned char *aad,
+                              size_t alen)
+{
+    unsigned char *ptr;
+    int i, rem;
+
+    if (!alen)
+        return;
+
+    ctx->aes.ccm.nonce.b[0] |= S390X_CCM_AAD_FLAG;
+
+    /* Suppress 'type-punned pointer dereference' warning. */
+    ptr = ctx->aes.ccm.buf.b;
+
+    if (alen < ((1 << 16) - (1 << 8))) {
+        *(uint16_t *)ptr = alen;
+        i = 2;
+    } else if (sizeof(alen) == 8
+               && alen >= (size_t)1 << (32 % (sizeof(alen) * 8))) {
+        *(uint16_t *)ptr = 0xffff;
+        *(uint64_t *)(ptr + 2) = alen;
+        i = 10;
+    } else {
+        *(uint16_t *)ptr = 0xfffe;
+        *(uint32_t *)(ptr + 2) = alen;
+        i = 6;
+    }
+
+    while (i < 16 && alen) {
+        ctx->aes.ccm.buf.b[i] = *aad;
+        ++aad;
+        --alen;
+        ++i;
+    }
+    while (i < 16) {
+        ctx->aes.ccm.buf.b[i] = 0;
+        ++i;
+    }
+
+    ctx->aes.ccm.kmac_param.icv.g[0] = 0;
+    ctx->aes.ccm.kmac_param.icv.g[1] = 0;
+    s390x_kmac(ctx->aes.ccm.nonce.b, 32, ctx->aes.ccm.fc,
+               &ctx->aes.ccm.kmac_param);
+    ctx->aes.ccm.blocks += 2;
+
+    rem = alen & 0xf;
+    alen &= ~(size_t)0xf;
+    if (alen) {
+        s390x_kmac(aad, alen, ctx->aes.ccm.fc, &ctx->aes.ccm.kmac_param);
+        ctx->aes.ccm.blocks += alen >> 4;
+        aad += alen;
+    }
+    if (rem) {
+        for (i = 0; i < rem; i++)
+            ctx->aes.ccm.kmac_param.icv.b[i] ^= aad[i];
+
+        s390x_km(ctx->aes.ccm.kmac_param.icv.b, 16,
+                 ctx->aes.ccm.kmac_param.icv.b, ctx->aes.ccm.fc,
+                 ctx->aes.ccm.kmac_param.k);
+        ctx->aes.ccm.blocks++;
+    }
+}
+
+/*-
+ * En/de-crypt plain/cipher-text. Compute tag from plaintext. Returns 0 for
+ * success.
+ */
+static int s390x_aes_ccm(S390X_AES_CCM_CTX *ctx, const unsigned char *in,
+                         unsigned char *out, size_t len, int enc)
+{
+    size_t n, rem;
+    unsigned int i, l, num;
+    unsigned char flags;
+
+    flags = ctx->aes.ccm.nonce.b[0];
+    if (!(flags & S390X_CCM_AAD_FLAG)) {
+        s390x_km(ctx->aes.ccm.nonce.b, 16, ctx->aes.ccm.kmac_param.icv.b,
+                 ctx->aes.ccm.fc, ctx->aes.ccm.kmac_param.k);
+        ctx->aes.ccm.blocks++;
+    }
+    l = flags & 0x7;
+    ctx->aes.ccm.nonce.b[0] = l;
+
+    /*-
+     * Reconstruct length from encoded length field
+     * and initialize it with counter value.
+     */
+    n = 0;
+    for (i = 15 - l; i < 15; i++) {
+        n |= ctx->aes.ccm.nonce.b[i];
+        ctx->aes.ccm.nonce.b[i] = 0;
+        n <<= 8;
+    }
+    n |= ctx->aes.ccm.nonce.b[15];
+    ctx->aes.ccm.nonce.b[15] = 1;
+
+    if (n != len)
+        return -1;		/* length mismatch */
+
+    if (enc) {
+        /* Two operations per block plus one for tag encryption */
+        ctx->aes.ccm.blocks += (((len + 15) >> 4) << 1) + 1;
+        if (ctx->aes.ccm.blocks > (1ULL << 61))
+            return -2;		/* too much data */
+    }
+
+    num = 0;
+    rem = len & 0xf;
+    len &= ~(size_t)0xf;
+
+    if (enc) {
+        /* mac-then-encrypt */
+        if (len)
+            s390x_kmac(in, len, ctx->aes.ccm.fc, &ctx->aes.ccm.kmac_param);
+        if (rem) {
+            for (i = 0; i < rem; i++)
+                ctx->aes.ccm.kmac_param.icv.b[i] ^= in[len + i];
+
+            s390x_km(ctx->aes.ccm.kmac_param.icv.b, 16,
+                     ctx->aes.ccm.kmac_param.icv.b, ctx->aes.ccm.fc,
+                     ctx->aes.ccm.kmac_param.k);
+        }
+
+        CRYPTO_ctr128_encrypt_ctr32(in, out, len + rem, &ctx->aes.key.k,
+                                    ctx->aes.ccm.nonce.b, ctx->aes.ccm.buf.b,
+                                    &num, (ctr128_f)AES_ctr32_encrypt);
+    } else {
+        /* decrypt-then-mac */
+        CRYPTO_ctr128_encrypt_ctr32(in, out, len + rem, &ctx->aes.key.k,
+                                    ctx->aes.ccm.nonce.b, ctx->aes.ccm.buf.b,
+                                    &num, (ctr128_f)AES_ctr32_encrypt);
+
+        if (len)
+            s390x_kmac(out, len, ctx->aes.ccm.fc, &ctx->aes.ccm.kmac_param);
+        if (rem) {
+            for (i = 0; i < rem; i++)
+                ctx->aes.ccm.kmac_param.icv.b[i] ^= out[len + i];
+
+            s390x_km(ctx->aes.ccm.kmac_param.icv.b, 16,
+                     ctx->aes.ccm.kmac_param.icv.b, ctx->aes.ccm.fc,
+                     ctx->aes.ccm.kmac_param.k);
+        }
+    }
+    /* encrypt tag */
+    for (i = 15 - l; i < 16; i++)
+        ctx->aes.ccm.nonce.b[i] = 0;
+
+    s390x_km(ctx->aes.ccm.nonce.b, 16, ctx->aes.ccm.buf.b, ctx->aes.ccm.fc,
+             ctx->aes.ccm.kmac_param.k);
+    ctx->aes.ccm.kmac_param.icv.g[0] ^= ctx->aes.ccm.buf.g[0];
+    ctx->aes.ccm.kmac_param.icv.g[1] ^= ctx->aes.ccm.buf.g[1];
+
+    ctx->aes.ccm.nonce.b[0] = flags;	/* restore flags field */
+    return 0;
+}
+
+/*-
+ * En/de-crypt and authenticate TLS packet. Returns the number of bytes written
+ * if successful. Otherwise -1 is returned.
+ */
+static int s390x_aes_ccm_tls_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                    const unsigned char *in, size_t len)
+{
+    S390X_AES_CCM_CTX *cctx = EVP_C_DATA(S390X_AES_CCM_CTX, ctx);
+    unsigned char *ivec = EVP_CIPHER_CTX_iv_noconst(ctx);
+    unsigned char *buf = EVP_CIPHER_CTX_buf_noconst(ctx);
+    const int enc = EVP_CIPHER_CTX_encrypting(ctx);
+
+    if (out != in
+            || len < (EVP_CCM_TLS_EXPLICIT_IV_LEN + (size_t)cctx->aes.ccm.m))
+        return -1;
+
+    if (enc) {
+        /* Set explicit iv (sequence number). */
+        memcpy(out, buf, EVP_CCM_TLS_EXPLICIT_IV_LEN);
+    }
+
+    len -= EVP_CCM_TLS_EXPLICIT_IV_LEN + cctx->aes.ccm.m;
+    /*-
+     * Get explicit iv (sequence number). We already have fixed iv
+     * (server/client_write_iv) here.
+     */
+    memcpy(ivec + EVP_CCM_TLS_FIXED_IV_LEN, in, EVP_CCM_TLS_EXPLICIT_IV_LEN);
+    s390x_aes_ccm_setiv(cctx, ivec, len);
+
+    /* Process aad (sequence number|type|version|length) */
+    s390x_aes_ccm_aad(cctx, buf, cctx->aes.ccm.tls_aad_len);
+
+    in += EVP_CCM_TLS_EXPLICIT_IV_LEN;
+    out += EVP_CCM_TLS_EXPLICIT_IV_LEN;
+
+    if (enc) {
+        if (s390x_aes_ccm(cctx, in, out, len, enc))
+            return -1;
+
+        memcpy(out + len, cctx->aes.ccm.kmac_param.icv.b, cctx->aes.ccm.m);
+        return len + EVP_CCM_TLS_EXPLICIT_IV_LEN + cctx->aes.ccm.m;
+    } else {
+        if (!s390x_aes_ccm(cctx, in, out, len, enc)) {
+            if (!CRYPTO_memcmp(cctx->aes.ccm.kmac_param.icv.b, in + len,
+                               cctx->aes.ccm.m))
+                return len;
+        }
+
+        OPENSSL_cleanse(out, len);
+        return -1;
+    }
+}
+
+/*-
+ * Set key and flag field and/or iv. Returns 1 if successful. Otherwise 0 is
+ * returned.
+ */
+static int s390x_aes_ccm_init_key(EVP_CIPHER_CTX *ctx,
+                                  const unsigned char *key,
+                                  const unsigned char *iv, int enc)
+{
+    S390X_AES_CCM_CTX *cctx = EVP_C_DATA(S390X_AES_CCM_CTX, ctx);
+    unsigned char *ivec;
+    int keylen;
+
+    if (iv == NULL && key == NULL)
+        return 1;
+
+    if (key != NULL) {
+        keylen = EVP_CIPHER_CTX_key_length(ctx);
+        cctx->aes.ccm.fc = S390X_AES_FC(keylen);
+        memcpy(cctx->aes.ccm.kmac_param.k, key, keylen);
+
+        /* Store encoded m and l. */
+        cctx->aes.ccm.nonce.b[0] = ((cctx->aes.ccm.l - 1) & 0x7)
+                                 | (((cctx->aes.ccm.m - 2) >> 1) & 0x7) << 3;
+        memset(cctx->aes.ccm.nonce.b + 1, 0,
+               sizeof(cctx->aes.ccm.nonce.b));
+        cctx->aes.ccm.blocks = 0;
+
+        cctx->aes.ccm.key_set = 1;
+    }
+
+    if (iv != NULL) {
+        ivec = EVP_CIPHER_CTX_iv_noconst(ctx);
+        memcpy(ivec, iv, 15 - cctx->aes.ccm.l);
+
+        cctx->aes.ccm.iv_set = 1;
+    }
+
+    return 1;
+}
+
+/*-
+ * Called from EVP layer to initialize context, process additional
+ * authenticated data, en/de-crypt plain/cipher-text and authenticate
+ * plaintext or process a TLS packet, depending on context. Returns bytes
+ * written on success. Otherwise -1 is returned.
+ */
+static int s390x_aes_ccm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                const unsigned char *in, size_t len)
+{
+    S390X_AES_CCM_CTX *cctx = EVP_C_DATA(S390X_AES_CCM_CTX, ctx);
+    const int enc = EVP_CIPHER_CTX_encrypting(ctx);
+    int rv;
+    unsigned char *buf, *ivec;
+
+    if (!cctx->aes.ccm.key_set)
+        return -1;
+
+    if (cctx->aes.ccm.tls_aad_len >= 0)
+        return s390x_aes_ccm_tls_cipher(ctx, out, in, len);
+
+    /*-
+     * Final(): Does not return any data. Recall that ccm is mac-then-encrypt
+     * so integrity must be checked already at Update() i.e., before
+     * potentially corrupted data is output.
+     */
+    if (in == NULL && out != NULL)
+        return 0;
+
+    if (!cctx->aes.ccm.iv_set)
+        return -1;
+
+    if (!enc && !cctx->aes.ccm.tag_set)
+        return -1;
+
+    if (out == NULL) {
+        /* Update(): Pass message length. */
+        if (in == NULL) {
+            ivec = EVP_CIPHER_CTX_iv_noconst(ctx);
+            s390x_aes_ccm_setiv(cctx, ivec, len);
+
+            cctx->aes.ccm.len_set = 1;
+            return len;
+        }
+
+        /* Update(): Process aad. */
+        if (!cctx->aes.ccm.len_set && len)
+            return -1;
+
+        s390x_aes_ccm_aad(cctx, in, len);
+        return len;
+    }
+
+    /* Update(): Process message. */
+
+    if (!cctx->aes.ccm.len_set) {
+        /*-
+         * In case message length was not previously set explicitly via
+         * Update(), set it now.
+         */
+        ivec = EVP_CIPHER_CTX_iv_noconst(ctx);
+        s390x_aes_ccm_setiv(cctx, ivec, len);
+
+        cctx->aes.ccm.len_set = 1;
+    }
+
+    if (enc) {
+        if (s390x_aes_ccm(cctx, in, out, len, enc))
+            return -1;
+
+        cctx->aes.ccm.tag_set = 1;
+        return len;
+    } else {
+        rv = -1;
+
+        if (!s390x_aes_ccm(cctx, in, out, len, enc)) {
+            buf = EVP_CIPHER_CTX_buf_noconst(ctx);
+            if (!CRYPTO_memcmp(cctx->aes.ccm.kmac_param.icv.b, buf,
+                               cctx->aes.ccm.m))
+                rv = len;
+        }
+
+        if (rv == -1)
+            OPENSSL_cleanse(out, len);
+
+        cctx->aes.ccm.iv_set = 0;
+        cctx->aes.ccm.tag_set = 0;
+        cctx->aes.ccm.len_set = 0;
+        return rv;
+    }
+}
+
+/*-
+ * Performs various operations on the context structure depending on control
+ * type. Returns 1 for success, 0 for failure and -1 for unknown control type.
+ * Code is big-endian.
+ */
+static int s390x_aes_ccm_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
+{
+    S390X_AES_CCM_CTX *cctx = EVP_C_DATA(S390X_AES_CCM_CTX, c);
+    unsigned char *buf, *iv;
+    int enc, len;
+
+    switch (type) {
+    case EVP_CTRL_INIT:
+        cctx->aes.ccm.key_set = 0;
+        cctx->aes.ccm.iv_set = 0;
+        cctx->aes.ccm.l = 8;
+        cctx->aes.ccm.m = 12;
+        cctx->aes.ccm.tag_set = 0;
+        cctx->aes.ccm.len_set = 0;
+        cctx->aes.ccm.tls_aad_len = -1;
+        return 1;
+
+    case EVP_CTRL_AEAD_TLS1_AAD:
+        if (arg != EVP_AEAD_TLS1_AAD_LEN)
+            return 0;
+
+        /* Save the aad for later use. */
+        buf = EVP_CIPHER_CTX_buf_noconst(c);
+        memcpy(buf, ptr, arg);
+        cctx->aes.ccm.tls_aad_len = arg;
+
+        len = buf[arg - 2] << 8 | buf[arg - 1];
+        if (len < EVP_CCM_TLS_EXPLICIT_IV_LEN)
+            return 0;
+
+        /* Correct length for explicit iv. */
+        len -= EVP_CCM_TLS_EXPLICIT_IV_LEN;
+
+        enc = EVP_CIPHER_CTX_encrypting(c);
+        if (!enc) {
+            if (len < cctx->aes.ccm.m)
+                return 0;
+
+            /* Correct length for tag. */
+            len -= cctx->aes.ccm.m;
+        }
+
+        buf[arg - 2] = len >> 8;
+        buf[arg - 1] = len & 0xff;
+
+        /* Extra padding: tag appended to record. */
+        return cctx->aes.ccm.m;
+
+    case EVP_CTRL_CCM_SET_IV_FIXED:
+        if (arg != EVP_CCM_TLS_FIXED_IV_LEN)
+            return 0;
+
+        /* Copy to first part of the iv. */
+        iv = EVP_CIPHER_CTX_iv_noconst(c);
+        memcpy(iv, ptr, arg);
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_IVLEN:
+        arg = 15 - arg;
+        /* fall-through */
+
+    case EVP_CTRL_CCM_SET_L:
+        if (arg < 2 || arg > 8)
+            return 0;
+
+        cctx->aes.ccm.l = arg;
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_TAG:
+        if ((arg & 1) || arg < 4 || arg > 16)
+            return 0;
+
+        enc = EVP_CIPHER_CTX_encrypting(c);
+        if (enc && ptr)
+            return 0;
+
+        if (ptr) {
+            cctx->aes.ccm.tag_set = 1;
+            buf = EVP_CIPHER_CTX_buf_noconst(c);
+            memcpy(buf, ptr, arg);
+        }
+
+        cctx->aes.ccm.m = arg;
+        return 1;
+
+    case EVP_CTRL_AEAD_GET_TAG:
+        enc = EVP_CIPHER_CTX_encrypting(c);
+        if (!enc || !cctx->aes.ccm.tag_set)
+            return 0;
+
+        if(arg < cctx->aes.ccm.m)
+            return 0;
+
+        memcpy(ptr, cctx->aes.ccm.kmac_param.icv.b, cctx->aes.ccm.m);
+        cctx->aes.ccm.tag_set = 0;
+        cctx->aes.ccm.iv_set = 0;
+        cctx->aes.ccm.len_set = 0;
+        return 1;
+
+    case EVP_CTRL_COPY:
+        return 1;
+
+    default:
+        return -1;
+    }
+}
+
+# define s390x_aes_ccm_cleanup aes_ccm_cleanup
+
+# ifndef OPENSSL_NO_OCB
+#  define S390X_AES_OCB_CTX		EVP_AES_OCB_CTX
+#  define S390X_aes_128_ocb_CAPABLE	0
+#  define S390X_aes_192_ocb_CAPABLE	0
+#  define S390X_aes_256_ocb_CAPABLE	0
+
+#  define s390x_aes_ocb_init_key aes_ocb_init_key
+static int s390x_aes_ocb_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                                  const unsigned char *iv, int enc);
+#  define s390x_aes_ocb_cipher aes_ocb_cipher
+static int s390x_aes_ocb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                const unsigned char *in, size_t len);
+#  define s390x_aes_ocb_cleanup aes_ocb_cleanup
+static int s390x_aes_ocb_cleanup(EVP_CIPHER_CTX *);
+#  define s390x_aes_ocb_ctrl aes_ocb_ctrl
+static int s390x_aes_ocb_ctrl(EVP_CIPHER_CTX *, int type, int arg, void *ptr);
+# endif
+
+# define BLOCK_CIPHER_generic(nid,keylen,blocksize,ivlen,nmode,mode,	\
+                              MODE,flags)				\
+static const EVP_CIPHER s390x_aes_##keylen##_##mode = {			\
+    nid##_##keylen##_##nmode,blocksize,					\
+    keylen / 8,								\
+    ivlen,								\
+    flags | EVP_CIPH_##MODE##_MODE,					\
+    s390x_aes_##mode##_init_key,					\
+    s390x_aes_##mode##_cipher,						\
+    NULL,								\
+    sizeof(S390X_AES_##MODE##_CTX),					\
+    NULL,								\
+    NULL,								\
+    NULL,								\
+    NULL								\
+};									\
+static const EVP_CIPHER aes_##keylen##_##mode = {			\
+    nid##_##keylen##_##nmode,						\
+    blocksize,								\
+    keylen / 8,								\
+    ivlen,								\
+    flags | EVP_CIPH_##MODE##_MODE,					\
+    aes_init_key,							\
+    aes_##mode##_cipher,						\
+    NULL,								\
+    sizeof(EVP_AES_KEY),						\
+    NULL,								\
+    NULL,								\
+    NULL,								\
+    NULL								\
+};									\
+const EVP_CIPHER *EVP_aes_##keylen##_##mode(void)			\
+{									\
+    return S390X_aes_##keylen##_##mode##_CAPABLE ?			\
+           &s390x_aes_##keylen##_##mode : &aes_##keylen##_##mode;	\
+}
+
+# define BLOCK_CIPHER_custom(nid,keylen,blocksize,ivlen,mode,MODE,flags)\
+static const EVP_CIPHER s390x_aes_##keylen##_##mode = {			\
+    nid##_##keylen##_##mode,						\
+    blocksize,								\
+    (EVP_CIPH_##MODE##_MODE == EVP_CIPH_XTS_MODE ? 2 : 1) * keylen / 8,	\
+    ivlen,								\
+    flags | EVP_CIPH_##MODE##_MODE,					\
+    s390x_aes_##mode##_init_key,					\
+    s390x_aes_##mode##_cipher,						\
+    s390x_aes_##mode##_cleanup,						\
+    sizeof(S390X_AES_##MODE##_CTX),					\
+    NULL,								\
+    NULL,								\
+    s390x_aes_##mode##_ctrl,						\
+    NULL								\
+};									\
+static const EVP_CIPHER aes_##keylen##_##mode = {			\
+    nid##_##keylen##_##mode,blocksize,					\
+    (EVP_CIPH_##MODE##_MODE == EVP_CIPH_XTS_MODE ? 2 : 1) * keylen / 8,	\
+    ivlen,								\
+    flags | EVP_CIPH_##MODE##_MODE,					\
+    aes_##mode##_init_key,						\
+    aes_##mode##_cipher,						\
+    aes_##mode##_cleanup,						\
+    sizeof(EVP_AES_##MODE##_CTX),					\
+    NULL,								\
+    NULL,								\
+    aes_##mode##_ctrl,							\
+    NULL								\
+};									\
+const EVP_CIPHER *EVP_aes_##keylen##_##mode(void)			\
+{									\
+    return S390X_aes_##keylen##_##mode##_CAPABLE ?			\
+           &s390x_aes_##keylen##_##mode : &aes_##keylen##_##mode;	\
+}
+
+#else
+
+# define BLOCK_CIPHER_generic(nid,keylen,blocksize,ivlen,nmode,mode,MODE,flags) \
+static const EVP_CIPHER aes_##keylen##_##mode = { \
+        nid##_##keylen##_##nmode,blocksize,keylen/8,ivlen, \
+        flags|EVP_CIPH_##MODE##_MODE,   \
+        aes_init_key,                   \
+        aes_##mode##_cipher,            \
+        NULL,                           \
+        sizeof(EVP_AES_KEY),            \
+        NULL,NULL,NULL,NULL }; \
+const EVP_CIPHER *EVP_aes_##keylen##_##mode(void) \
+{ return &aes_##keylen##_##mode; }
+
+# define BLOCK_CIPHER_custom(nid,keylen,blocksize,ivlen,mode,MODE,flags) \
+static const EVP_CIPHER aes_##keylen##_##mode = { \
+        nid##_##keylen##_##mode,blocksize, \
+        (EVP_CIPH_##MODE##_MODE==EVP_CIPH_XTS_MODE?2:1)*keylen/8, ivlen, \
+        flags|EVP_CIPH_##MODE##_MODE,   \
+        aes_##mode##_init_key,          \
+        aes_##mode##_cipher,            \
+        aes_##mode##_cleanup,           \
+        sizeof(EVP_AES_##MODE##_CTX),   \
+        NULL,NULL,aes_##mode##_ctrl,NULL }; \
+const EVP_CIPHER *EVP_aes_##keylen##_##mode(void) \
+{ return &aes_##keylen##_##mode; }
+
+#endif
+
+#if defined(OPENSSL_CPUID_OBJ) && (defined(__arm__) || defined(__arm) || defined(__aarch64__))
+# include "arm_arch.h"
+# if __ARM_MAX_ARCH__>=7
+#  if defined(BSAES_ASM)
+#   define BSAES_CAPABLE (OPENSSL_armcap_P & ARMV7_NEON)
+#  endif
+#  if defined(VPAES_ASM)
+#   define VPAES_CAPABLE (OPENSSL_armcap_P & ARMV7_NEON)
+#  endif
+#  define HWAES_CAPABLE (OPENSSL_armcap_P & ARMV8_AES)
+#  define HWAES_set_encrypt_key aes_v8_set_encrypt_key
+#  define HWAES_set_decrypt_key aes_v8_set_decrypt_key
+#  define HWAES_encrypt aes_v8_encrypt
+#  define HWAES_decrypt aes_v8_decrypt
+#  define HWAES_cbc_encrypt aes_v8_cbc_encrypt
+#  define HWAES_ctr32_encrypt_blocks aes_v8_ctr32_encrypt_blocks
+# endif
+#endif
+
+#if defined(HWAES_CAPABLE)
+int HWAES_set_encrypt_key(const unsigned char *userKey, const int bits,
+                          AES_KEY *key);
+int HWAES_set_decrypt_key(const unsigned char *userKey, const int bits,
+                          AES_KEY *key);
+void HWAES_encrypt(const unsigned char *in, unsigned char *out,
+                   const AES_KEY *key);
+void HWAES_decrypt(const unsigned char *in, unsigned char *out,
+                   const AES_KEY *key);
+void HWAES_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                       size_t length, const AES_KEY *key,
+                       unsigned char *ivec, const int enc);
+void HWAES_ctr32_encrypt_blocks(const unsigned char *in, unsigned char *out,
+                                size_t len, const AES_KEY *key,
+                                const unsigned char ivec[16]);
+void HWAES_xts_encrypt(const unsigned char *inp, unsigned char *out,
+                       size_t len, const AES_KEY *key1,
+                       const AES_KEY *key2, const unsigned char iv[16]);
+void HWAES_xts_decrypt(const unsigned char *inp, unsigned char *out,
+                       size_t len, const AES_KEY *key1,
+                       const AES_KEY *key2, const unsigned char iv[16]);
+#endif
+
+#define BLOCK_CIPHER_generic_pack(nid,keylen,flags)             \
+        BLOCK_CIPHER_generic(nid,keylen,16,16,cbc,cbc,CBC,flags|EVP_CIPH_FLAG_DEFAULT_ASN1)     \
+        BLOCK_CIPHER_generic(nid,keylen,16,0,ecb,ecb,ECB,flags|EVP_CIPH_FLAG_DEFAULT_ASN1)      \
+        BLOCK_CIPHER_generic(nid,keylen,1,16,ofb128,ofb,OFB,flags|EVP_CIPH_FLAG_DEFAULT_ASN1)   \
+        BLOCK_CIPHER_generic(nid,keylen,1,16,cfb128,cfb,CFB,flags|EVP_CIPH_FLAG_DEFAULT_ASN1)   \
+        BLOCK_CIPHER_generic(nid,keylen,1,16,cfb1,cfb1,CFB,flags)       \
+        BLOCK_CIPHER_generic(nid,keylen,1,16,cfb8,cfb8,CFB,flags)       \
+        BLOCK_CIPHER_generic(nid,keylen,1,16,ctr,ctr,CTR,flags)
+
+static int aes_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                        const unsigned char *iv, int enc)
+{
+    int ret, mode;
+    EVP_AES_KEY *dat = EVP_C_DATA(EVP_AES_KEY,ctx);
+
+    mode = EVP_CIPHER_CTX_mode(ctx);
+    if ((mode == EVP_CIPH_ECB_MODE || mode == EVP_CIPH_CBC_MODE)
+        && !enc) {
+#ifdef HWAES_CAPABLE
+        if (HWAES_CAPABLE) {
+            ret = HWAES_set_decrypt_key(key,
+                                        EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                        &dat->ks.ks);
+            dat->block = (block128_f) HWAES_decrypt;
+            dat->stream.cbc = NULL;
+# ifdef HWAES_cbc_encrypt
+            if (mode == EVP_CIPH_CBC_MODE)
+                dat->stream.cbc = (cbc128_f) HWAES_cbc_encrypt;
+# endif
+        } else
+#endif
+#ifdef BSAES_CAPABLE
+        if (BSAES_CAPABLE && mode == EVP_CIPH_CBC_MODE) {
+            ret = AES_set_decrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                      &dat->ks.ks);
+            dat->block = (block128_f) AES_decrypt;
+            dat->stream.cbc = (cbc128_f) bsaes_cbc_encrypt;
+        } else
+#endif
+#ifdef VPAES_CAPABLE
+        if (VPAES_CAPABLE) {
+            ret = vpaes_set_decrypt_key(key,
+                                        EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                        &dat->ks.ks);
+            dat->block = (block128_f) vpaes_decrypt;
+            dat->stream.cbc = mode == EVP_CIPH_CBC_MODE ?
+                (cbc128_f) vpaes_cbc_encrypt : NULL;
+        } else
+#endif
+        {
+            ret = AES_set_decrypt_key(key,
+                                      EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                      &dat->ks.ks);
+            dat->block = (block128_f) AES_decrypt;
+            dat->stream.cbc = mode == EVP_CIPH_CBC_MODE ?
+                (cbc128_f) AES_cbc_encrypt : NULL;
+        }
+    } else
+#ifdef HWAES_CAPABLE
+    if (HWAES_CAPABLE) {
+        ret = HWAES_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                    &dat->ks.ks);
+        dat->block = (block128_f) HWAES_encrypt;
+        dat->stream.cbc = NULL;
+# ifdef HWAES_cbc_encrypt
+        if (mode == EVP_CIPH_CBC_MODE)
+            dat->stream.cbc = (cbc128_f) HWAES_cbc_encrypt;
+        else
+# endif
+# ifdef HWAES_ctr32_encrypt_blocks
+        if (mode == EVP_CIPH_CTR_MODE)
+            dat->stream.ctr = (ctr128_f) HWAES_ctr32_encrypt_blocks;
+        else
+# endif
+            (void)0;            /* terminate potentially open 'else' */
+    } else
+#endif
+#ifdef BSAES_CAPABLE
+    if (BSAES_CAPABLE && mode == EVP_CIPH_CTR_MODE) {
+        ret = AES_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                  &dat->ks.ks);
+        dat->block = (block128_f) AES_encrypt;
+        dat->stream.ctr = (ctr128_f) bsaes_ctr32_encrypt_blocks;
+    } else
+#endif
+#ifdef VPAES_CAPABLE
+    if (VPAES_CAPABLE) {
+        ret = vpaes_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                    &dat->ks.ks);
+        dat->block = (block128_f) vpaes_encrypt;
+        dat->stream.cbc = mode == EVP_CIPH_CBC_MODE ?
+            (cbc128_f) vpaes_cbc_encrypt : NULL;
+    } else
+#endif
+    {
+        ret = AES_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                  &dat->ks.ks);
+        dat->block = (block128_f) AES_encrypt;
+        dat->stream.cbc = mode == EVP_CIPH_CBC_MODE ?
+            (cbc128_f) AES_cbc_encrypt : NULL;
+#ifdef AES_CTR_ASM
+        if (mode == EVP_CIPH_CTR_MODE)
+            dat->stream.ctr = (ctr128_f) AES_ctr32_encrypt;
+#endif
+    }
+
+    if (ret < 0) {
+        EVPerr(EVP_F_AES_INIT_KEY, EVP_R_AES_KEY_SETUP_FAILED);
+        return 0;
+    }
+
+    return 1;
+}
+
+static int aes_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                          const unsigned char *in, size_t len)
+{
+    EVP_AES_KEY *dat = EVP_C_DATA(EVP_AES_KEY,ctx);
+
+    if (dat->stream.cbc)
+        (*dat->stream.cbc) (in, out, len, &dat->ks,
+                            EVP_CIPHER_CTX_iv_noconst(ctx),
+                            EVP_CIPHER_CTX_encrypting(ctx));
+    else if (EVP_CIPHER_CTX_encrypting(ctx))
+        CRYPTO_cbc128_encrypt(in, out, len, &dat->ks,
+                              EVP_CIPHER_CTX_iv_noconst(ctx), dat->block);
+    else
+        CRYPTO_cbc128_decrypt(in, out, len, &dat->ks,
+                              EVP_CIPHER_CTX_iv_noconst(ctx), dat->block);
+
+    return 1;
+}
+
+static int aes_ecb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                          const unsigned char *in, size_t len)
+{
+    size_t bl = EVP_CIPHER_CTX_block_size(ctx);
+    size_t i;
+    EVP_AES_KEY *dat = EVP_C_DATA(EVP_AES_KEY,ctx);
+
+    if (len < bl)
+        return 1;
+
+    for (i = 0, len -= bl; i <= len; i += bl)
+        (*dat->block) (in + i, out + i, &dat->ks);
+
+    return 1;
+}
+
+static int aes_ofb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                          const unsigned char *in, size_t len)
+{
+    EVP_AES_KEY *dat = EVP_C_DATA(EVP_AES_KEY,ctx);
+
+    int num = EVP_CIPHER_CTX_num(ctx);
+    CRYPTO_ofb128_encrypt(in, out, len, &dat->ks,
+                          EVP_CIPHER_CTX_iv_noconst(ctx), &num, dat->block);
+    EVP_CIPHER_CTX_set_num(ctx, num);
+    return 1;
+}
+
+static int aes_cfb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                          const unsigned char *in, size_t len)
+{
+    EVP_AES_KEY *dat = EVP_C_DATA(EVP_AES_KEY,ctx);
+
+    int num = EVP_CIPHER_CTX_num(ctx);
+    CRYPTO_cfb128_encrypt(in, out, len, &dat->ks,
+                          EVP_CIPHER_CTX_iv_noconst(ctx), &num,
+                          EVP_CIPHER_CTX_encrypting(ctx), dat->block);
+    EVP_CIPHER_CTX_set_num(ctx, num);
+    return 1;
+}
+
+static int aes_cfb8_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                           const unsigned char *in, size_t len)
+{
+    EVP_AES_KEY *dat = EVP_C_DATA(EVP_AES_KEY,ctx);
+
+    int num = EVP_CIPHER_CTX_num(ctx);
+    CRYPTO_cfb128_8_encrypt(in, out, len, &dat->ks,
+                            EVP_CIPHER_CTX_iv_noconst(ctx), &num,
+                            EVP_CIPHER_CTX_encrypting(ctx), dat->block);
+    EVP_CIPHER_CTX_set_num(ctx, num);
+    return 1;
+}
+
+static int aes_cfb1_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                           const unsigned char *in, size_t len)
+{
+    EVP_AES_KEY *dat = EVP_C_DATA(EVP_AES_KEY,ctx);
+
+    if (EVP_CIPHER_CTX_test_flags(ctx, EVP_CIPH_FLAG_LENGTH_BITS)) {
+        int num = EVP_CIPHER_CTX_num(ctx);
+        CRYPTO_cfb128_1_encrypt(in, out, len, &dat->ks,
+                                EVP_CIPHER_CTX_iv_noconst(ctx), &num,
+                                EVP_CIPHER_CTX_encrypting(ctx), dat->block);
+        EVP_CIPHER_CTX_set_num(ctx, num);
+        return 1;
+    }
+
+    while (len >= MAXBITCHUNK) {
+        int num = EVP_CIPHER_CTX_num(ctx);
+        CRYPTO_cfb128_1_encrypt(in, out, MAXBITCHUNK * 8, &dat->ks,
+                                EVP_CIPHER_CTX_iv_noconst(ctx), &num,
+                                EVP_CIPHER_CTX_encrypting(ctx), dat->block);
+        EVP_CIPHER_CTX_set_num(ctx, num);
+        len -= MAXBITCHUNK;
+        out += MAXBITCHUNK;
+        in  += MAXBITCHUNK;
+    }
+    if (len) {
+        int num = EVP_CIPHER_CTX_num(ctx);
+        CRYPTO_cfb128_1_encrypt(in, out, len * 8, &dat->ks,
+                                EVP_CIPHER_CTX_iv_noconst(ctx), &num,
+                                EVP_CIPHER_CTX_encrypting(ctx), dat->block);
+        EVP_CIPHER_CTX_set_num(ctx, num);
+    }
+
+    return 1;
+}
+
+static int aes_ctr_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                          const unsigned char *in, size_t len)
+{
+    unsigned int num = EVP_CIPHER_CTX_num(ctx);
+    EVP_AES_KEY *dat = EVP_C_DATA(EVP_AES_KEY,ctx);
+
+    if (dat->stream.ctr)
+        CRYPTO_ctr128_encrypt_ctr32(in, out, len, &dat->ks,
+                                    EVP_CIPHER_CTX_iv_noconst(ctx),
+                                    EVP_CIPHER_CTX_buf_noconst(ctx),
+                                    &num, dat->stream.ctr);
+    else
+        CRYPTO_ctr128_encrypt(in, out, len, &dat->ks,
+                              EVP_CIPHER_CTX_iv_noconst(ctx),
+                              EVP_CIPHER_CTX_buf_noconst(ctx), &num,
+                              dat->block);
+    EVP_CIPHER_CTX_set_num(ctx, num);
+    return 1;
+}
+
+BLOCK_CIPHER_generic_pack(NID_aes, 128, 0)
+    BLOCK_CIPHER_generic_pack(NID_aes, 192, 0)
+    BLOCK_CIPHER_generic_pack(NID_aes, 256, 0)
+
+static int aes_gcm_cleanup(EVP_CIPHER_CTX *c)
+{
+    EVP_AES_GCM_CTX *gctx = EVP_C_DATA(EVP_AES_GCM_CTX,c);
+    if (gctx == NULL)
+        return 0;
+    OPENSSL_cleanse(&gctx->gcm, sizeof(gctx->gcm));
+    if (gctx->iv != EVP_CIPHER_CTX_iv_noconst(c))
+        OPENSSL_free(gctx->iv);
+    return 1;
+}
+
+static int aes_gcm_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
+{
+    EVP_AES_GCM_CTX *gctx = EVP_C_DATA(EVP_AES_GCM_CTX,c);
+    switch (type) {
+    case EVP_CTRL_INIT:
+        gctx->key_set = 0;
+        gctx->iv_set = 0;
+        gctx->ivlen = c->cipher->iv_len;
+        gctx->iv = c->iv;
+        gctx->taglen = -1;
+        gctx->iv_gen = 0;
+        gctx->tls_aad_len = -1;
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_IVLEN:
+        if (arg <= 0)
+            return 0;
+        /* Allocate memory for IV if needed */
+        if ((arg > EVP_MAX_IV_LENGTH) && (arg > gctx->ivlen)) {
+            if (gctx->iv != c->iv)
+                OPENSSL_free(gctx->iv);
+            if ((gctx->iv = OPENSSL_malloc(arg)) == NULL) {
+                EVPerr(EVP_F_AES_GCM_CTRL, ERR_R_MALLOC_FAILURE);
+                return 0;
+            }
+        }
+        gctx->ivlen = arg;
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_TAG:
+        if (arg <= 0 || arg > 16 || c->encrypt)
+            return 0;
+        memcpy(c->buf, ptr, arg);
+        gctx->taglen = arg;
+        return 1;
+
+    case EVP_CTRL_AEAD_GET_TAG:
+        if (arg <= 0 || arg > 16 || !c->encrypt
+            || gctx->taglen < 0)
+            return 0;
+        memcpy(ptr, c->buf, arg);
+        return 1;
+
+    case EVP_CTRL_GCM_SET_IV_FIXED:
+        /* Special case: -1 length restores whole IV */
+        if (arg == -1) {
+            memcpy(gctx->iv, ptr, gctx->ivlen);
+            gctx->iv_gen = 1;
+            return 1;
+        }
+        /*
+         * Fixed field must be at least 4 bytes and invocation field at least
+         * 8.
+         */
+        if ((arg < 4) || (gctx->ivlen - arg) < 8)
+            return 0;
+        if (arg)
+            memcpy(gctx->iv, ptr, arg);
+        if (c->encrypt && RAND_bytes(gctx->iv + arg, gctx->ivlen - arg) <= 0)
+            return 0;
+        gctx->iv_gen = 1;
+        return 1;
+
+    case EVP_CTRL_GCM_IV_GEN:
+        if (gctx->iv_gen == 0 || gctx->key_set == 0)
+            return 0;
+        CRYPTO_gcm128_setiv(&gctx->gcm, gctx->iv, gctx->ivlen);
+        if (arg <= 0 || arg > gctx->ivlen)
+            arg = gctx->ivlen;
+        memcpy(ptr, gctx->iv + gctx->ivlen - arg, arg);
+        /*
+         * Invocation field will be at least 8 bytes in size and so no need
+         * to check wrap around or increment more than last 8 bytes.
+         */
+        ctr64_inc(gctx->iv + gctx->ivlen - 8);
+        gctx->iv_set = 1;
+        return 1;
+
+    case EVP_CTRL_GCM_SET_IV_INV:
+        if (gctx->iv_gen == 0 || gctx->key_set == 0 || c->encrypt)
+            return 0;
+        memcpy(gctx->iv + gctx->ivlen - arg, ptr, arg);
+        CRYPTO_gcm128_setiv(&gctx->gcm, gctx->iv, gctx->ivlen);
+        gctx->iv_set = 1;
+        return 1;
+
+    case EVP_CTRL_AEAD_TLS1_AAD:
+        /* Save the AAD for later use */
+        if (arg != EVP_AEAD_TLS1_AAD_LEN)
+            return 0;
+        memcpy(c->buf, ptr, arg);
+        gctx->tls_aad_len = arg;
+        {
+            unsigned int len = c->buf[arg - 2] << 8 | c->buf[arg - 1];
+            /* Correct length for explicit IV */
+            if (len < EVP_GCM_TLS_EXPLICIT_IV_LEN)
+                return 0;
+            len -= EVP_GCM_TLS_EXPLICIT_IV_LEN;
+            /* If decrypting correct for tag too */
+            if (!c->encrypt) {
+                if (len < EVP_GCM_TLS_TAG_LEN)
+                    return 0;
+                len -= EVP_GCM_TLS_TAG_LEN;
+            }
+            c->buf[arg - 2] = len >> 8;
+            c->buf[arg - 1] = len & 0xff;
+        }
+        /* Extra padding: tag appended to record */
+        return EVP_GCM_TLS_TAG_LEN;
+
+    case EVP_CTRL_COPY:
+        {
+            EVP_CIPHER_CTX *out = ptr;
+            EVP_AES_GCM_CTX *gctx_out = EVP_C_DATA(EVP_AES_GCM_CTX,out);
+            if (gctx->gcm.key) {
+                if (gctx->gcm.key != &gctx->ks)
+                    return 0;
+                gctx_out->gcm.key = &gctx_out->ks;
+            }
+            if (gctx->iv == c->iv)
+                gctx_out->iv = out->iv;
+            else {
+                if ((gctx_out->iv = OPENSSL_malloc(gctx->ivlen)) == NULL) {
+                    EVPerr(EVP_F_AES_GCM_CTRL, ERR_R_MALLOC_FAILURE);
+                    return 0;
+                }
+                memcpy(gctx_out->iv, gctx->iv, gctx->ivlen);
+            }
+            return 1;
+        }
+
+    default:
+        return -1;
+
+    }
+}
+
+static int aes_gcm_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                            const unsigned char *iv, int enc)
+{
+    EVP_AES_GCM_CTX *gctx = EVP_C_DATA(EVP_AES_GCM_CTX,ctx);
+    if (!iv && !key)
+        return 1;
+    if (key) {
+        do {
+#ifdef HWAES_CAPABLE
+            if (HWAES_CAPABLE) {
+                HWAES_set_encrypt_key(key, ctx->key_len * 8, &gctx->ks.ks);
+                CRYPTO_gcm128_init(&gctx->gcm, &gctx->ks,
+                                   (block128_f) HWAES_encrypt);
+# ifdef HWAES_ctr32_encrypt_blocks
+                gctx->ctr = (ctr128_f) HWAES_ctr32_encrypt_blocks;
+# else
+                gctx->ctr = NULL;
+# endif
+                break;
+            } else
+#endif
+#ifdef BSAES_CAPABLE
+            if (BSAES_CAPABLE) {
+                AES_set_encrypt_key(key, ctx->key_len * 8, &gctx->ks.ks);
+                CRYPTO_gcm128_init(&gctx->gcm, &gctx->ks,
+                                   (block128_f) AES_encrypt);
+                gctx->ctr = (ctr128_f) bsaes_ctr32_encrypt_blocks;
+                break;
+            } else
+#endif
+#ifdef VPAES_CAPABLE
+            if (VPAES_CAPABLE) {
+                vpaes_set_encrypt_key(key, ctx->key_len * 8, &gctx->ks.ks);
+                CRYPTO_gcm128_init(&gctx->gcm, &gctx->ks,
+                                   (block128_f) vpaes_encrypt);
+                gctx->ctr = NULL;
+                break;
+            } else
+#endif
+                (void)0;        /* terminate potentially open 'else' */
+
+            AES_set_encrypt_key(key, ctx->key_len * 8, &gctx->ks.ks);
+            CRYPTO_gcm128_init(&gctx->gcm, &gctx->ks,
+                               (block128_f) AES_encrypt);
+#ifdef AES_CTR_ASM
+            gctx->ctr = (ctr128_f) AES_ctr32_encrypt;
+#else
+            gctx->ctr = NULL;
+#endif
+        } while (0);
+
+        /*
+         * If we have an iv can set it directly, otherwise use saved IV.
+         */
+        if (iv == NULL && gctx->iv_set)
+            iv = gctx->iv;
+        if (iv) {
+            CRYPTO_gcm128_setiv(&gctx->gcm, iv, gctx->ivlen);
+            gctx->iv_set = 1;
+        }
+        gctx->key_set = 1;
+    } else {
+        /* If key set use IV, otherwise copy */
+        if (gctx->key_set)
+            CRYPTO_gcm128_setiv(&gctx->gcm, iv, gctx->ivlen);
+        else
+            memcpy(gctx->iv, iv, gctx->ivlen);
+        gctx->iv_set = 1;
+        gctx->iv_gen = 0;
+    }
+    return 1;
+}
+
+/*
+ * Handle TLS GCM packet format. This consists of the last portion of the IV
+ * followed by the payload and finally the tag. On encrypt generate IV,
+ * encrypt payload and write the tag. On verify retrieve IV, decrypt payload
+ * and verify tag.
+ */
+
+static int aes_gcm_tls_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                              const unsigned char *in, size_t len)
+{
+    EVP_AES_GCM_CTX *gctx = EVP_C_DATA(EVP_AES_GCM_CTX,ctx);
+    int rv = -1;
+    /* Encrypt/decrypt must be performed in place */
+    if (out != in
+        || len < (EVP_GCM_TLS_EXPLICIT_IV_LEN + EVP_GCM_TLS_TAG_LEN))
+        return -1;
+    /*
+     * Set IV from start of buffer or generate IV and write to start of
+     * buffer.
+     */
+    if (EVP_CIPHER_CTX_ctrl(ctx, ctx->encrypt ? EVP_CTRL_GCM_IV_GEN
+                                              : EVP_CTRL_GCM_SET_IV_INV,
+                            EVP_GCM_TLS_EXPLICIT_IV_LEN, out) <= 0)
+        goto err;
+    /* Use saved AAD */
+    if (CRYPTO_gcm128_aad(&gctx->gcm, ctx->buf, gctx->tls_aad_len))
+        goto err;
+    /* Fix buffer and length to point to payload */
+    in += EVP_GCM_TLS_EXPLICIT_IV_LEN;
+    out += EVP_GCM_TLS_EXPLICIT_IV_LEN;
+    len -= EVP_GCM_TLS_EXPLICIT_IV_LEN + EVP_GCM_TLS_TAG_LEN;
+    if (ctx->encrypt) {
+        /* Encrypt payload */
+        if (gctx->ctr) {
+            size_t bulk = 0;
+#if defined(AES_GCM_ASM)
+            if (len >= 32 && AES_GCM_ASM(gctx)) {
+                if (CRYPTO_gcm128_encrypt(&gctx->gcm, NULL, NULL, 0))
+                    return -1;
+
+                bulk = AES_gcm_encrypt(in, out, len,
+                                       gctx->gcm.key,
+                                       gctx->gcm.Yi.c, gctx->gcm.Xi.u);
+                gctx->gcm.len.u[1] += bulk;
+            }
+#endif
+            if (CRYPTO_gcm128_encrypt_ctr32(&gctx->gcm,
+                                            in + bulk,
+                                            out + bulk,
+                                            len - bulk, gctx->ctr))
+                goto err;
+        } else {
+            size_t bulk = 0;
+#if defined(AES_GCM_ASM2)
+            if (len >= 32 && AES_GCM_ASM2(gctx)) {
+                if (CRYPTO_gcm128_encrypt(&gctx->gcm, NULL, NULL, 0))
+                    return -1;
+
+                bulk = AES_gcm_encrypt(in, out, len,
+                                       gctx->gcm.key,
+                                       gctx->gcm.Yi.c, gctx->gcm.Xi.u);
+                gctx->gcm.len.u[1] += bulk;
+            }
+#endif
+            if (CRYPTO_gcm128_encrypt(&gctx->gcm,
+                                      in + bulk, out + bulk, len - bulk))
+                goto err;
+        }
+        out += len;
+        /* Finally write tag */
+        CRYPTO_gcm128_tag(&gctx->gcm, out, EVP_GCM_TLS_TAG_LEN);
+        rv = len + EVP_GCM_TLS_EXPLICIT_IV_LEN + EVP_GCM_TLS_TAG_LEN;
+    } else {
+        /* Decrypt */
+        if (gctx->ctr) {
+            size_t bulk = 0;
+#if defined(AES_GCM_ASM)
+            if (len >= 16 && AES_GCM_ASM(gctx)) {
+                if (CRYPTO_gcm128_decrypt(&gctx->gcm, NULL, NULL, 0))
+                    return -1;
+
+                bulk = AES_gcm_decrypt(in, out, len,
+                                       gctx->gcm.key,
+                                       gctx->gcm.Yi.c, gctx->gcm.Xi.u);
+                gctx->gcm.len.u[1] += bulk;
+            }
+#endif
+            if (CRYPTO_gcm128_decrypt_ctr32(&gctx->gcm,
+                                            in + bulk,
+                                            out + bulk,
+                                            len - bulk, gctx->ctr))
+                goto err;
+        } else {
+            size_t bulk = 0;
+#if defined(AES_GCM_ASM2)
+            if (len >= 16 && AES_GCM_ASM2(gctx)) {
+                if (CRYPTO_gcm128_decrypt(&gctx->gcm, NULL, NULL, 0))
+                    return -1;
+
+                bulk = AES_gcm_decrypt(in, out, len,
+                                       gctx->gcm.key,
+                                       gctx->gcm.Yi.c, gctx->gcm.Xi.u);
+                gctx->gcm.len.u[1] += bulk;
+            }
+#endif
+            if (CRYPTO_gcm128_decrypt(&gctx->gcm,
+                                      in + bulk, out + bulk, len - bulk))
+                goto err;
+        }
+        /* Retrieve tag */
+        CRYPTO_gcm128_tag(&gctx->gcm, ctx->buf, EVP_GCM_TLS_TAG_LEN);
+        /* If tag mismatch wipe buffer */
+        if (CRYPTO_memcmp(ctx->buf, in + len, EVP_GCM_TLS_TAG_LEN)) {
+            OPENSSL_cleanse(out, len);
+            goto err;
+        }
+        rv = len;
+    }
+
+ err:
+    gctx->iv_set = 0;
+    gctx->tls_aad_len = -1;
+    return rv;
+}
+
+static int aes_gcm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                          const unsigned char *in, size_t len)
+{
+    EVP_AES_GCM_CTX *gctx = EVP_C_DATA(EVP_AES_GCM_CTX,ctx);
+    /* If not set up, return error */
+    if (!gctx->key_set)
+        return -1;
+
+    if (gctx->tls_aad_len >= 0)
+        return aes_gcm_tls_cipher(ctx, out, in, len);
+
+    if (!gctx->iv_set)
+        return -1;
+    if (in) {
+        if (out == NULL) {
+            if (CRYPTO_gcm128_aad(&gctx->gcm, in, len))
+                return -1;
+        } else if (ctx->encrypt) {
+            if (gctx->ctr) {
+                size_t bulk = 0;
+#if defined(AES_GCM_ASM)
+                if (len >= 32 && AES_GCM_ASM(gctx)) {
+                    size_t res = (16 - gctx->gcm.mres) % 16;
+
+                    if (CRYPTO_gcm128_encrypt(&gctx->gcm, in, out, res))
+                        return -1;
+
+                    bulk = AES_gcm_encrypt(in + res,
+                                           out + res, len - res,
+                                           gctx->gcm.key, gctx->gcm.Yi.c,
+                                           gctx->gcm.Xi.u);
+                    gctx->gcm.len.u[1] += bulk;
+                    bulk += res;
+                }
+#endif
+                if (CRYPTO_gcm128_encrypt_ctr32(&gctx->gcm,
+                                                in + bulk,
+                                                out + bulk,
+                                                len - bulk, gctx->ctr))
+                    return -1;
+            } else {
+                size_t bulk = 0;
+#if defined(AES_GCM_ASM2)
+                if (len >= 32 && AES_GCM_ASM2(gctx)) {
+                    size_t res = (16 - gctx->gcm.mres) % 16;
+
+                    if (CRYPTO_gcm128_encrypt(&gctx->gcm, in, out, res))
+                        return -1;
+
+                    bulk = AES_gcm_encrypt(in + res,
+                                           out + res, len - res,
+                                           gctx->gcm.key, gctx->gcm.Yi.c,
+                                           gctx->gcm.Xi.u);
+                    gctx->gcm.len.u[1] += bulk;
+                    bulk += res;
+                }
+#endif
+                if (CRYPTO_gcm128_encrypt(&gctx->gcm,
+                                          in + bulk, out + bulk, len - bulk))
+                    return -1;
+            }
+        } else {
+            if (gctx->ctr) {
+                size_t bulk = 0;
+#if defined(AES_GCM_ASM)
+                if (len >= 16 && AES_GCM_ASM(gctx)) {
+                    size_t res = (16 - gctx->gcm.mres) % 16;
+
+                    if (CRYPTO_gcm128_decrypt(&gctx->gcm, in, out, res))
+                        return -1;
+
+                    bulk = AES_gcm_decrypt(in + res,
+                                           out + res, len - res,
+                                           gctx->gcm.key,
+                                           gctx->gcm.Yi.c, gctx->gcm.Xi.u);
+                    gctx->gcm.len.u[1] += bulk;
+                    bulk += res;
+                }
+#endif
+                if (CRYPTO_gcm128_decrypt_ctr32(&gctx->gcm,
+                                                in + bulk,
+                                                out + bulk,
+                                                len - bulk, gctx->ctr))
+                    return -1;
+            } else {
+                size_t bulk = 0;
+#if defined(AES_GCM_ASM2)
+                if (len >= 16 && AES_GCM_ASM2(gctx)) {
+                    size_t res = (16 - gctx->gcm.mres) % 16;
+
+                    if (CRYPTO_gcm128_decrypt(&gctx->gcm, in, out, res))
+                        return -1;
+
+                    bulk = AES_gcm_decrypt(in + res,
+                                           out + res, len - res,
+                                           gctx->gcm.key,
+                                           gctx->gcm.Yi.c, gctx->gcm.Xi.u);
+                    gctx->gcm.len.u[1] += bulk;
+                    bulk += res;
+                }
+#endif
+                if (CRYPTO_gcm128_decrypt(&gctx->gcm,
+                                          in + bulk, out + bulk, len - bulk))
+                    return -1;
+            }
+        }
+        return len;
+    } else {
+        if (!ctx->encrypt) {
+            if (gctx->taglen < 0)
+                return -1;
+            if (CRYPTO_gcm128_finish(&gctx->gcm, ctx->buf, gctx->taglen) != 0)
+                return -1;
+            gctx->iv_set = 0;
+            return 0;
+        }
+        CRYPTO_gcm128_tag(&gctx->gcm, ctx->buf, 16);
+        gctx->taglen = 16;
+        /* Don't reuse the IV */
+        gctx->iv_set = 0;
+        return 0;
+    }
+
+}
+
+#define CUSTOM_FLAGS    (EVP_CIPH_FLAG_DEFAULT_ASN1 \
+                | EVP_CIPH_CUSTOM_IV | EVP_CIPH_FLAG_CUSTOM_CIPHER \
+                | EVP_CIPH_ALWAYS_CALL_INIT | EVP_CIPH_CTRL_INIT \
+                | EVP_CIPH_CUSTOM_COPY)
+
+BLOCK_CIPHER_custom(NID_aes, 128, 1, 12, gcm, GCM,
+                    EVP_CIPH_FLAG_AEAD_CIPHER | CUSTOM_FLAGS)
+    BLOCK_CIPHER_custom(NID_aes, 192, 1, 12, gcm, GCM,
+                    EVP_CIPH_FLAG_AEAD_CIPHER | CUSTOM_FLAGS)
+    BLOCK_CIPHER_custom(NID_aes, 256, 1, 12, gcm, GCM,
+                    EVP_CIPH_FLAG_AEAD_CIPHER | CUSTOM_FLAGS)
+
+static int aes_xts_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
+{
+    EVP_AES_XTS_CTX *xctx = EVP_C_DATA(EVP_AES_XTS_CTX,c);
+    if (type == EVP_CTRL_COPY) {
+        EVP_CIPHER_CTX *out = ptr;
+        EVP_AES_XTS_CTX *xctx_out = EVP_C_DATA(EVP_AES_XTS_CTX,out);
+        if (xctx->xts.key1) {
+            if (xctx->xts.key1 != &xctx->ks1)
+                return 0;
+            xctx_out->xts.key1 = &xctx_out->ks1;
+        }
+        if (xctx->xts.key2) {
+            if (xctx->xts.key2 != &xctx->ks2)
+                return 0;
+            xctx_out->xts.key2 = &xctx_out->ks2;
+        }
+        return 1;
+    } else if (type != EVP_CTRL_INIT)
+        return -1;
+    /* key1 and key2 are used as an indicator both key and IV are set */
+    xctx->xts.key1 = NULL;
+    xctx->xts.key2 = NULL;
+    return 1;
+}
+
+static int aes_xts_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                            const unsigned char *iv, int enc)
+{
+    EVP_AES_XTS_CTX *xctx = EVP_C_DATA(EVP_AES_XTS_CTX,ctx);
+    if (!iv && !key)
+        return 1;
+
+    if (key)
+        do {
+#ifdef AES_XTS_ASM
+            xctx->stream = enc ? AES_xts_encrypt : AES_xts_decrypt;
+#else
+            xctx->stream = NULL;
+#endif
+            /* key_len is two AES keys */
+#ifdef HWAES_CAPABLE
+            if (HWAES_CAPABLE) {
+                if (enc) {
+                    HWAES_set_encrypt_key(key,
+                                          EVP_CIPHER_CTX_key_length(ctx) * 4,
+                                          &xctx->ks1.ks);
+                    xctx->xts.block1 = (block128_f) HWAES_encrypt;
+# ifdef HWAES_xts_encrypt
+                    xctx->stream = HWAES_xts_encrypt;
+# endif
+                } else {
+                    HWAES_set_decrypt_key(key,
+                                          EVP_CIPHER_CTX_key_length(ctx) * 4,
+                                          &xctx->ks1.ks);
+                    xctx->xts.block1 = (block128_f) HWAES_decrypt;
+# ifdef HWAES_xts_decrypt
+                    xctx->stream = HWAES_xts_decrypt;
+#endif
+                }
+
+                HWAES_set_encrypt_key(key + EVP_CIPHER_CTX_key_length(ctx) / 2,
+                                      EVP_CIPHER_CTX_key_length(ctx) * 4,
+                                      &xctx->ks2.ks);
+                xctx->xts.block2 = (block128_f) HWAES_encrypt;
+
+                xctx->xts.key1 = &xctx->ks1;
+                break;
+            } else
+#endif
+#ifdef BSAES_CAPABLE
+            if (BSAES_CAPABLE)
+                xctx->stream = enc ? bsaes_xts_encrypt : bsaes_xts_decrypt;
+            else
+#endif
+#ifdef VPAES_CAPABLE
+            if (VPAES_CAPABLE) {
+                if (enc) {
+                    vpaes_set_encrypt_key(key,
+                                          EVP_CIPHER_CTX_key_length(ctx) * 4,
+                                          &xctx->ks1.ks);
+                    xctx->xts.block1 = (block128_f) vpaes_encrypt;
+                } else {
+                    vpaes_set_decrypt_key(key,
+                                          EVP_CIPHER_CTX_key_length(ctx) * 4,
+                                          &xctx->ks1.ks);
+                    xctx->xts.block1 = (block128_f) vpaes_decrypt;
+                }
+
+                vpaes_set_encrypt_key(key + EVP_CIPHER_CTX_key_length(ctx) / 2,
+                                      EVP_CIPHER_CTX_key_length(ctx) * 4,
+                                      &xctx->ks2.ks);
+                xctx->xts.block2 = (block128_f) vpaes_encrypt;
+
+                xctx->xts.key1 = &xctx->ks1;
+                break;
+            } else
+#endif
+                (void)0;        /* terminate potentially open 'else' */
+
+            if (enc) {
+                AES_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 4,
+                                    &xctx->ks1.ks);
+                xctx->xts.block1 = (block128_f) AES_encrypt;
+            } else {
+                AES_set_decrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 4,
+                                    &xctx->ks1.ks);
+                xctx->xts.block1 = (block128_f) AES_decrypt;
+            }
+
+            AES_set_encrypt_key(key + EVP_CIPHER_CTX_key_length(ctx) / 2,
+                                EVP_CIPHER_CTX_key_length(ctx) * 4,
+                                &xctx->ks2.ks);
+            xctx->xts.block2 = (block128_f) AES_encrypt;
+
+            xctx->xts.key1 = &xctx->ks1;
+        } while (0);
+
+    if (iv) {
+        xctx->xts.key2 = &xctx->ks2;
+        memcpy(EVP_CIPHER_CTX_iv_noconst(ctx), iv, 16);
+    }
+
+    return 1;
+}
+
+static int aes_xts_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                          const unsigned char *in, size_t len)
+{
+    EVP_AES_XTS_CTX *xctx = EVP_C_DATA(EVP_AES_XTS_CTX,ctx);
+    if (!xctx->xts.key1 || !xctx->xts.key2)
+        return 0;
+    if (!out || !in || len < AES_BLOCK_SIZE)
+        return 0;
+    if (xctx->stream)
+        (*xctx->stream) (in, out, len,
+                         xctx->xts.key1, xctx->xts.key2,
+                         EVP_CIPHER_CTX_iv_noconst(ctx));
+    else if (CRYPTO_xts128_encrypt(&xctx->xts, EVP_CIPHER_CTX_iv_noconst(ctx),
+                                   in, out, len,
+                                   EVP_CIPHER_CTX_encrypting(ctx)))
+        return 0;
+    return 1;
+}
+
+#define aes_xts_cleanup NULL
+
+#define XTS_FLAGS       (EVP_CIPH_FLAG_DEFAULT_ASN1 | EVP_CIPH_CUSTOM_IV \
+                         | EVP_CIPH_ALWAYS_CALL_INIT | EVP_CIPH_CTRL_INIT \
+                         | EVP_CIPH_CUSTOM_COPY)
+
+BLOCK_CIPHER_custom(NID_aes, 128, 1, 16, xts, XTS, XTS_FLAGS)
+    BLOCK_CIPHER_custom(NID_aes, 256, 1, 16, xts, XTS, XTS_FLAGS)
+
+static int aes_ccm_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
+{
+    EVP_AES_CCM_CTX *cctx = EVP_C_DATA(EVP_AES_CCM_CTX,c);
+    switch (type) {
+    case EVP_CTRL_INIT:
+        cctx->key_set = 0;
+        cctx->iv_set = 0;
+        cctx->L = 8;
+        cctx->M = 12;
+        cctx->tag_set = 0;
+        cctx->len_set = 0;
+        cctx->tls_aad_len = -1;
+        return 1;
+
+    case EVP_CTRL_AEAD_TLS1_AAD:
+        /* Save the AAD for later use */
+        if (arg != EVP_AEAD_TLS1_AAD_LEN)
+            return 0;
+        memcpy(EVP_CIPHER_CTX_buf_noconst(c), ptr, arg);
+        cctx->tls_aad_len = arg;
+        {
+            uint16_t len =
+                EVP_CIPHER_CTX_buf_noconst(c)[arg - 2] << 8
+                | EVP_CIPHER_CTX_buf_noconst(c)[arg - 1];
+            /* Correct length for explicit IV */
+            if (len < EVP_CCM_TLS_EXPLICIT_IV_LEN)
+                return 0;
+            len -= EVP_CCM_TLS_EXPLICIT_IV_LEN;
+            /* If decrypting correct for tag too */
+            if (!EVP_CIPHER_CTX_encrypting(c)) {
+                if (len < cctx->M)
+                    return 0;
+                len -= cctx->M;
+            }
+            EVP_CIPHER_CTX_buf_noconst(c)[arg - 2] = len >> 8;
+            EVP_CIPHER_CTX_buf_noconst(c)[arg - 1] = len & 0xff;
+        }
+        /* Extra padding: tag appended to record */
+        return cctx->M;
+
+    case EVP_CTRL_CCM_SET_IV_FIXED:
+        /* Sanity check length */
+        if (arg != EVP_CCM_TLS_FIXED_IV_LEN)
+            return 0;
+        /* Just copy to first part of IV */
+        memcpy(EVP_CIPHER_CTX_iv_noconst(c), ptr, arg);
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_IVLEN:
+        arg = 15 - arg;
+        /* fall thru */
+    case EVP_CTRL_CCM_SET_L:
+        if (arg < 2 || arg > 8)
+            return 0;
+        cctx->L = arg;
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_TAG:
+        if ((arg & 1) || arg < 4 || arg > 16)
+            return 0;
+        if (EVP_CIPHER_CTX_encrypting(c) && ptr)
+            return 0;
+        if (ptr) {
+            cctx->tag_set = 1;
+            memcpy(EVP_CIPHER_CTX_buf_noconst(c), ptr, arg);
+        }
+        cctx->M = arg;
+        return 1;
+
+    case EVP_CTRL_AEAD_GET_TAG:
+        if (!EVP_CIPHER_CTX_encrypting(c) || !cctx->tag_set)
+            return 0;
+        if (!CRYPTO_ccm128_tag(&cctx->ccm, ptr, (size_t)arg))
+            return 0;
+        cctx->tag_set = 0;
+        cctx->iv_set = 0;
+        cctx->len_set = 0;
+        return 1;
+
+    case EVP_CTRL_COPY:
+        {
+            EVP_CIPHER_CTX *out = ptr;
+            EVP_AES_CCM_CTX *cctx_out = EVP_C_DATA(EVP_AES_CCM_CTX,out);
+            if (cctx->ccm.key) {
+                if (cctx->ccm.key != &cctx->ks)
+                    return 0;
+                cctx_out->ccm.key = &cctx_out->ks;
+            }
+            return 1;
+        }
+
+    default:
+        return -1;
+
+    }
+}
+
+static int aes_ccm_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                            const unsigned char *iv, int enc)
+{
+    EVP_AES_CCM_CTX *cctx = EVP_C_DATA(EVP_AES_CCM_CTX,ctx);
+    if (!iv && !key)
+        return 1;
+    if (key)
+        do {
+#ifdef HWAES_CAPABLE
+            if (HWAES_CAPABLE) {
+                HWAES_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                      &cctx->ks.ks);
+
+                CRYPTO_ccm128_init(&cctx->ccm, cctx->M, cctx->L,
+                                   &cctx->ks, (block128_f) HWAES_encrypt);
+                cctx->str = NULL;
+                cctx->key_set = 1;
+                break;
+            } else
+#endif
+#ifdef VPAES_CAPABLE
+            if (VPAES_CAPABLE) {
+                vpaes_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                      &cctx->ks.ks);
+                CRYPTO_ccm128_init(&cctx->ccm, cctx->M, cctx->L,
+                                   &cctx->ks, (block128_f) vpaes_encrypt);
+                cctx->str = NULL;
+                cctx->key_set = 1;
+                break;
+            }
+#endif
+            AES_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                &cctx->ks.ks);
+            CRYPTO_ccm128_init(&cctx->ccm, cctx->M, cctx->L,
+                               &cctx->ks, (block128_f) AES_encrypt);
+            cctx->str = NULL;
+            cctx->key_set = 1;
+        } while (0);
+    if (iv) {
+        memcpy(EVP_CIPHER_CTX_iv_noconst(ctx), iv, 15 - cctx->L);
+        cctx->iv_set = 1;
+    }
+    return 1;
+}
+
+static int aes_ccm_tls_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                              const unsigned char *in, size_t len)
+{
+    EVP_AES_CCM_CTX *cctx = EVP_C_DATA(EVP_AES_CCM_CTX,ctx);
+    CCM128_CONTEXT *ccm = &cctx->ccm;
+    /* Encrypt/decrypt must be performed in place */
+    if (out != in || len < (EVP_CCM_TLS_EXPLICIT_IV_LEN + (size_t)cctx->M))
+        return -1;
+    /* If encrypting set explicit IV from sequence number (start of AAD) */
+    if (EVP_CIPHER_CTX_encrypting(ctx))
+        memcpy(out, EVP_CIPHER_CTX_buf_noconst(ctx),
+               EVP_CCM_TLS_EXPLICIT_IV_LEN);
+    /* Get rest of IV from explicit IV */
+    memcpy(EVP_CIPHER_CTX_iv_noconst(ctx) + EVP_CCM_TLS_FIXED_IV_LEN, in,
+           EVP_CCM_TLS_EXPLICIT_IV_LEN);
+    /* Correct length value */
+    len -= EVP_CCM_TLS_EXPLICIT_IV_LEN + cctx->M;
+    if (CRYPTO_ccm128_setiv(ccm, EVP_CIPHER_CTX_iv_noconst(ctx), 15 - cctx->L,
+                            len))
+            return -1;
+    /* Use saved AAD */
+    CRYPTO_ccm128_aad(ccm, EVP_CIPHER_CTX_buf_noconst(ctx), cctx->tls_aad_len);
+    /* Fix buffer to point to payload */
+    in += EVP_CCM_TLS_EXPLICIT_IV_LEN;
+    out += EVP_CCM_TLS_EXPLICIT_IV_LEN;
+    if (EVP_CIPHER_CTX_encrypting(ctx)) {
+        if (cctx->str ? CRYPTO_ccm128_encrypt_ccm64(ccm, in, out, len,
+                                                    cctx->str) :
+            CRYPTO_ccm128_encrypt(ccm, in, out, len))
+            return -1;
+        if (!CRYPTO_ccm128_tag(ccm, out + len, cctx->M))
+            return -1;
+        return len + EVP_CCM_TLS_EXPLICIT_IV_LEN + cctx->M;
+    } else {
+        if (cctx->str ? !CRYPTO_ccm128_decrypt_ccm64(ccm, in, out, len,
+                                                     cctx->str) :
+            !CRYPTO_ccm128_decrypt(ccm, in, out, len)) {
+            unsigned char tag[16];
+            if (CRYPTO_ccm128_tag(ccm, tag, cctx->M)) {
+                if (!CRYPTO_memcmp(tag, in + len, cctx->M))
+                    return len;
+            }
+        }
+        OPENSSL_cleanse(out, len);
+        return -1;
+    }
+}
+
+static int aes_ccm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                          const unsigned char *in, size_t len)
+{
+    EVP_AES_CCM_CTX *cctx = EVP_C_DATA(EVP_AES_CCM_CTX,ctx);
+    CCM128_CONTEXT *ccm = &cctx->ccm;
+    /* If not set up, return error */
+    if (!cctx->key_set)
+        return -1;
+
+    if (cctx->tls_aad_len >= 0)
+        return aes_ccm_tls_cipher(ctx, out, in, len);
+
+    /* EVP_*Final() doesn't return any data */
+    if (in == NULL && out != NULL)
+        return 0;
+
+    if (!cctx->iv_set)
+        return -1;
+
+    if (!EVP_CIPHER_CTX_encrypting(ctx) && !cctx->tag_set)
+        return -1;
+    if (!out) {
+        if (!in) {
+            if (CRYPTO_ccm128_setiv(ccm, EVP_CIPHER_CTX_iv_noconst(ctx),
+                                    15 - cctx->L, len))
+                return -1;
+            cctx->len_set = 1;
+            return len;
+        }
+        /* If have AAD need message length */
+        if (!cctx->len_set && len)
+            return -1;
+        CRYPTO_ccm128_aad(ccm, in, len);
+        return len;
+    }
+    /* If not set length yet do it */
+    if (!cctx->len_set) {
+        if (CRYPTO_ccm128_setiv(ccm, EVP_CIPHER_CTX_iv_noconst(ctx),
+                                15 - cctx->L, len))
+            return -1;
+        cctx->len_set = 1;
+    }
+    if (EVP_CIPHER_CTX_encrypting(ctx)) {
+        if (cctx->str ? CRYPTO_ccm128_encrypt_ccm64(ccm, in, out, len,
+                                                    cctx->str) :
+            CRYPTO_ccm128_encrypt(ccm, in, out, len))
+            return -1;
+        cctx->tag_set = 1;
+        return len;
+    } else {
+        int rv = -1;
+        if (cctx->str ? !CRYPTO_ccm128_decrypt_ccm64(ccm, in, out, len,
+                                                     cctx->str) :
+            !CRYPTO_ccm128_decrypt(ccm, in, out, len)) {
+            unsigned char tag[16];
+            if (CRYPTO_ccm128_tag(ccm, tag, cctx->M)) {
+                if (!CRYPTO_memcmp(tag, EVP_CIPHER_CTX_buf_noconst(ctx),
+                                   cctx->M))
+                    rv = len;
+            }
+        }
+        if (rv == -1)
+            OPENSSL_cleanse(out, len);
+        cctx->iv_set = 0;
+        cctx->tag_set = 0;
+        cctx->len_set = 0;
+        return rv;
+    }
+}
+
+#define aes_ccm_cleanup NULL
+
+BLOCK_CIPHER_custom(NID_aes, 128, 1, 12, ccm, CCM,
+                    EVP_CIPH_FLAG_AEAD_CIPHER | CUSTOM_FLAGS)
+    BLOCK_CIPHER_custom(NID_aes, 192, 1, 12, ccm, CCM,
+                        EVP_CIPH_FLAG_AEAD_CIPHER | CUSTOM_FLAGS)
+    BLOCK_CIPHER_custom(NID_aes, 256, 1, 12, ccm, CCM,
+                        EVP_CIPH_FLAG_AEAD_CIPHER | CUSTOM_FLAGS)
+
+typedef struct {
+    union {
+        double align;
+        AES_KEY ks;
+    } ks;
+    /* Indicates if IV has been set */
+    unsigned char *iv;
+} EVP_AES_WRAP_CTX;
+
+static int aes_wrap_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                             const unsigned char *iv, int enc)
+{
+    EVP_AES_WRAP_CTX *wctx = EVP_C_DATA(EVP_AES_WRAP_CTX,ctx);
+    if (!iv && !key)
+        return 1;
+    if (key) {
+        if (EVP_CIPHER_CTX_encrypting(ctx))
+            AES_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                &wctx->ks.ks);
+        else
+            AES_set_decrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                &wctx->ks.ks);
+        if (!iv)
+            wctx->iv = NULL;
+    }
+    if (iv) {
+        memcpy(EVP_CIPHER_CTX_iv_noconst(ctx), iv, EVP_CIPHER_CTX_iv_length(ctx));
+        wctx->iv = EVP_CIPHER_CTX_iv_noconst(ctx);
+    }
+    return 1;
+}
+
+static int aes_wrap_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                           const unsigned char *in, size_t inlen)
+{
+    EVP_AES_WRAP_CTX *wctx = EVP_C_DATA(EVP_AES_WRAP_CTX,ctx);
+    size_t rv;
+    /* AES wrap with padding has IV length of 4, without padding 8 */
+    int pad = EVP_CIPHER_CTX_iv_length(ctx) == 4;
+    /* No final operation so always return zero length */
+    if (!in)
+        return 0;
+    /* Input length must always be non-zero */
+    if (!inlen)
+        return -1;
+    /* If decrypting need at least 16 bytes and multiple of 8 */
+    if (!EVP_CIPHER_CTX_encrypting(ctx) && (inlen < 16 || inlen & 0x7))
+        return -1;
+    /* If not padding input must be multiple of 8 */
+    if (!pad && inlen & 0x7)
+        return -1;
+    if (is_partially_overlapping(out, in, inlen)) {
+        EVPerr(EVP_F_AES_WRAP_CIPHER, EVP_R_PARTIALLY_OVERLAPPING);
+        return 0;
+    }
+    if (!out) {
+        if (EVP_CIPHER_CTX_encrypting(ctx)) {
+            /* If padding round up to multiple of 8 */
+            if (pad)
+                inlen = (inlen + 7) / 8 * 8;
+            /* 8 byte prefix */
+            return inlen + 8;
+        } else {
+            /*
+             * If not padding output will be exactly 8 bytes smaller than
+             * input. If padding it will be at least 8 bytes smaller but we
+             * don't know how much.
+             */
+            return inlen - 8;
+        }
+    }
+    if (pad) {
+        if (EVP_CIPHER_CTX_encrypting(ctx))
+            rv = CRYPTO_128_wrap_pad(&wctx->ks.ks, wctx->iv,
+                                     out, in, inlen,
+                                     (block128_f) AES_encrypt);
+        else
+            rv = CRYPTO_128_unwrap_pad(&wctx->ks.ks, wctx->iv,
+                                       out, in, inlen,
+                                       (block128_f) AES_decrypt);
+    } else {
+        if (EVP_CIPHER_CTX_encrypting(ctx))
+            rv = CRYPTO_128_wrap(&wctx->ks.ks, wctx->iv,
+                                 out, in, inlen, (block128_f) AES_encrypt);
+        else
+            rv = CRYPTO_128_unwrap(&wctx->ks.ks, wctx->iv,
+                                   out, in, inlen, (block128_f) AES_decrypt);
+    }
+    return rv ? (int)rv : -1;
+}
+
+#define WRAP_FLAGS      (EVP_CIPH_WRAP_MODE \
+                | EVP_CIPH_CUSTOM_IV | EVP_CIPH_FLAG_CUSTOM_CIPHER \
+                | EVP_CIPH_ALWAYS_CALL_INIT | EVP_CIPH_FLAG_DEFAULT_ASN1)
+
+static const EVP_CIPHER aes_128_wrap = {
+    NID_id_aes128_wrap,
+    8, 16, 8, WRAP_FLAGS,
+    aes_wrap_init_key, aes_wrap_cipher,
+    NULL,
+    sizeof(EVP_AES_WRAP_CTX),
+    NULL, NULL, NULL, NULL
+};
+
+const EVP_CIPHER *EVP_aes_128_wrap(void)
+{
+    return &aes_128_wrap;
+}
+
+static const EVP_CIPHER aes_192_wrap = {
+    NID_id_aes192_wrap,
+    8, 24, 8, WRAP_FLAGS,
+    aes_wrap_init_key, aes_wrap_cipher,
+    NULL,
+    sizeof(EVP_AES_WRAP_CTX),
+    NULL, NULL, NULL, NULL
+};
+
+const EVP_CIPHER *EVP_aes_192_wrap(void)
+{
+    return &aes_192_wrap;
+}
+
+static const EVP_CIPHER aes_256_wrap = {
+    NID_id_aes256_wrap,
+    8, 32, 8, WRAP_FLAGS,
+    aes_wrap_init_key, aes_wrap_cipher,
+    NULL,
+    sizeof(EVP_AES_WRAP_CTX),
+    NULL, NULL, NULL, NULL
+};
+
+const EVP_CIPHER *EVP_aes_256_wrap(void)
+{
+    return &aes_256_wrap;
+}
+
+static const EVP_CIPHER aes_128_wrap_pad = {
+    NID_id_aes128_wrap_pad,
+    8, 16, 4, WRAP_FLAGS,
+    aes_wrap_init_key, aes_wrap_cipher,
+    NULL,
+    sizeof(EVP_AES_WRAP_CTX),
+    NULL, NULL, NULL, NULL
+};
+
+const EVP_CIPHER *EVP_aes_128_wrap_pad(void)
+{
+    return &aes_128_wrap_pad;
+}
+
+static const EVP_CIPHER aes_192_wrap_pad = {
+    NID_id_aes192_wrap_pad,
+    8, 24, 4, WRAP_FLAGS,
+    aes_wrap_init_key, aes_wrap_cipher,
+    NULL,
+    sizeof(EVP_AES_WRAP_CTX),
+    NULL, NULL, NULL, NULL
+};
+
+const EVP_CIPHER *EVP_aes_192_wrap_pad(void)
+{
+    return &aes_192_wrap_pad;
+}
+
+static const EVP_CIPHER aes_256_wrap_pad = {
+    NID_id_aes256_wrap_pad,
+    8, 32, 4, WRAP_FLAGS,
+    aes_wrap_init_key, aes_wrap_cipher,
+    NULL,
+    sizeof(EVP_AES_WRAP_CTX),
+    NULL, NULL, NULL, NULL
+};
+
+const EVP_CIPHER *EVP_aes_256_wrap_pad(void)
+{
+    return &aes_256_wrap_pad;
+}
+
+#ifndef OPENSSL_NO_OCB
+static int aes_ocb_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
+{
+    EVP_AES_OCB_CTX *octx = EVP_C_DATA(EVP_AES_OCB_CTX,c);
+    EVP_CIPHER_CTX *newc;
+    EVP_AES_OCB_CTX *new_octx;
+
+    switch (type) {
+    case EVP_CTRL_INIT:
+        octx->key_set = 0;
+        octx->iv_set = 0;
+        octx->ivlen = EVP_CIPHER_CTX_iv_length(c);
+        octx->iv = EVP_CIPHER_CTX_iv_noconst(c);
+        octx->taglen = 16;
+        octx->data_buf_len = 0;
+        octx->aad_buf_len = 0;
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_IVLEN:
+        /* IV len must be 1 to 15 */
+        if (arg <= 0 || arg > 15)
+            return 0;
+
+        octx->ivlen = arg;
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_TAG:
+        if (!ptr) {
+            /* Tag len must be 0 to 16 */
+            if (arg < 0 || arg > 16)
+                return 0;
+
+            octx->taglen = arg;
+            return 1;
+        }
+        if (arg != octx->taglen || EVP_CIPHER_CTX_encrypting(c))
+            return 0;
+        memcpy(octx->tag, ptr, arg);
+        return 1;
+
+    case EVP_CTRL_AEAD_GET_TAG:
+        if (arg != octx->taglen || !EVP_CIPHER_CTX_encrypting(c))
+            return 0;
+
+        memcpy(ptr, octx->tag, arg);
+        return 1;
+
+    case EVP_CTRL_COPY:
+        newc = (EVP_CIPHER_CTX *)ptr;
+        new_octx = EVP_C_DATA(EVP_AES_OCB_CTX,newc);
+        return CRYPTO_ocb128_copy_ctx(&new_octx->ocb, &octx->ocb,
+                                      &new_octx->ksenc.ks,
+                                      &new_octx->ksdec.ks);
+
+    default:
+        return -1;
+
+    }
+}
+
+# ifdef HWAES_CAPABLE
+#  ifdef HWAES_ocb_encrypt
+void HWAES_ocb_encrypt(const unsigned char *in, unsigned char *out,
+                       size_t blocks, const void *key,
+                       size_t start_block_num,
+                       unsigned char offset_i[16],
+                       const unsigned char L_[][16],
+                       unsigned char checksum[16]);
+#  else
+#    define HWAES_ocb_encrypt ((ocb128_f)NULL)
+#  endif
+#  ifdef HWAES_ocb_decrypt
+void HWAES_ocb_decrypt(const unsigned char *in, unsigned char *out,
+                       size_t blocks, const void *key,
+                       size_t start_block_num,
+                       unsigned char offset_i[16],
+                       const unsigned char L_[][16],
+                       unsigned char checksum[16]);
+#  else
+#    define HWAES_ocb_decrypt ((ocb128_f)NULL)
+#  endif
+# endif
+
+static int aes_ocb_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                            const unsigned char *iv, int enc)
+{
+    EVP_AES_OCB_CTX *octx = EVP_C_DATA(EVP_AES_OCB_CTX,ctx);
+    if (!iv && !key)
+        return 1;
+    if (key) {
+        do {
+            /*
+             * We set both the encrypt and decrypt key here because decrypt
+             * needs both. We could possibly optimise to remove setting the
+             * decrypt for an encryption operation.
+             */
+# ifdef HWAES_CAPABLE
+            if (HWAES_CAPABLE) {
+                HWAES_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                      &octx->ksenc.ks);
+                HWAES_set_decrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                      &octx->ksdec.ks);
+                if (!CRYPTO_ocb128_init(&octx->ocb,
+                                        &octx->ksenc.ks, &octx->ksdec.ks,
+                                        (block128_f) HWAES_encrypt,
+                                        (block128_f) HWAES_decrypt,
+                                        enc ? HWAES_ocb_encrypt
+                                            : HWAES_ocb_decrypt))
+                    return 0;
+                break;
+            }
+# endif
+# ifdef VPAES_CAPABLE
+            if (VPAES_CAPABLE) {
+                vpaes_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                      &octx->ksenc.ks);
+                vpaes_set_decrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                      &octx->ksdec.ks);
+                if (!CRYPTO_ocb128_init(&octx->ocb,
+                                        &octx->ksenc.ks, &octx->ksdec.ks,
+                                        (block128_f) vpaes_encrypt,
+                                        (block128_f) vpaes_decrypt,
+                                        NULL))
+                    return 0;
+                break;
+            }
+# endif
+            AES_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                &octx->ksenc.ks);
+            AES_set_decrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                &octx->ksdec.ks);
+            if (!CRYPTO_ocb128_init(&octx->ocb,
+                                    &octx->ksenc.ks, &octx->ksdec.ks,
+                                    (block128_f) AES_encrypt,
+                                    (block128_f) AES_decrypt,
+                                    NULL))
+                return 0;
+        }
+        while (0);
+
+        /*
+         * If we have an iv we can set it directly, otherwise use saved IV.
+         */
+        if (iv == NULL && octx->iv_set)
+            iv = octx->iv;
+        if (iv) {
+            if (CRYPTO_ocb128_setiv(&octx->ocb, iv, octx->ivlen, octx->taglen)
+                != 1)
+                return 0;
+            octx->iv_set = 1;
+        }
+        octx->key_set = 1;
+    } else {
+        /* If key set use IV, otherwise copy */
+        if (octx->key_set)
+            CRYPTO_ocb128_setiv(&octx->ocb, iv, octx->ivlen, octx->taglen);
+        else
+            memcpy(octx->iv, iv, octx->ivlen);
+        octx->iv_set = 1;
+    }
+    return 1;
+}
+
+static int aes_ocb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                          const unsigned char *in, size_t len)
+{
+    unsigned char *buf;
+    int *buf_len;
+    int written_len = 0;
+    size_t trailing_len;
+    EVP_AES_OCB_CTX *octx = EVP_C_DATA(EVP_AES_OCB_CTX,ctx);
+
+    /* If IV or Key not set then return error */
+    if (!octx->iv_set)
+        return -1;
+
+    if (!octx->key_set)
+        return -1;
+
+    if (in != NULL) {
+        /*
+         * Need to ensure we are only passing full blocks to low level OCB
+         * routines. We do it here rather than in EVP_EncryptUpdate/
+         * EVP_DecryptUpdate because we need to pass full blocks of AAD too
+         * and those routines don't support that
+         */
+
+        /* Are we dealing with AAD or normal data here? */
+        if (out == NULL) {
+            buf = octx->aad_buf;
+            buf_len = &(octx->aad_buf_len);
+        } else {
+            buf = octx->data_buf;
+            buf_len = &(octx->data_buf_len);
+
+            if (is_partially_overlapping(out + *buf_len, in, len)) {
+                EVPerr(EVP_F_AES_OCB_CIPHER, EVP_R_PARTIALLY_OVERLAPPING);
+                return 0;
+            }
+        }
+
+        /*
+         * If we've got a partially filled buffer from a previous call then
+         * use that data first
+         */
+        if (*buf_len > 0) {
+            unsigned int remaining;
+
+            remaining = AES_BLOCK_SIZE - (*buf_len);
+            if (remaining > len) {
+                memcpy(buf + (*buf_len), in, len);
+                *(buf_len) += len;
+                return 0;
+            }
+            memcpy(buf + (*buf_len), in, remaining);
+
+            /*
+             * If we get here we've filled the buffer, so process it
+             */
+            len -= remaining;
+            in += remaining;
+            if (out == NULL) {
+                if (!CRYPTO_ocb128_aad(&octx->ocb, buf, AES_BLOCK_SIZE))
+                    return -1;
+            } else if (EVP_CIPHER_CTX_encrypting(ctx)) {
+                if (!CRYPTO_ocb128_encrypt(&octx->ocb, buf, out,
+                                           AES_BLOCK_SIZE))
+                    return -1;
+            } else {
+                if (!CRYPTO_ocb128_decrypt(&octx->ocb, buf, out,
+                                           AES_BLOCK_SIZE))
+                    return -1;
+            }
+            written_len = AES_BLOCK_SIZE;
+            *buf_len = 0;
+            if (out != NULL)
+                out += AES_BLOCK_SIZE;
+        }
+
+        /* Do we have a partial block to handle at the end? */
+        trailing_len = len % AES_BLOCK_SIZE;
+
+        /*
+         * If we've got some full blocks to handle, then process these first
+         */
+        if (len != trailing_len) {
+            if (out == NULL) {
+                if (!CRYPTO_ocb128_aad(&octx->ocb, in, len - trailing_len))
+                    return -1;
+            } else if (EVP_CIPHER_CTX_encrypting(ctx)) {
+                if (!CRYPTO_ocb128_encrypt
+                    (&octx->ocb, in, out, len - trailing_len))
+                    return -1;
+            } else {
+                if (!CRYPTO_ocb128_decrypt
+                    (&octx->ocb, in, out, len - trailing_len))
+                    return -1;
+            }
+            written_len += len - trailing_len;
+            in += len - trailing_len;
+        }
+
+        /* Handle any trailing partial block */
+        if (trailing_len > 0) {
+            memcpy(buf, in, trailing_len);
+            *buf_len = trailing_len;
+        }
+
+        return written_len;
+    } else {
+        /*
+         * First of all empty the buffer of any partial block that we might
+         * have been provided - both for data and AAD
+         */
+        if (octx->data_buf_len > 0) {
+            if (EVP_CIPHER_CTX_encrypting(ctx)) {
+                if (!CRYPTO_ocb128_encrypt(&octx->ocb, octx->data_buf, out,
+                                           octx->data_buf_len))
+                    return -1;
+            } else {
+                if (!CRYPTO_ocb128_decrypt(&octx->ocb, octx->data_buf, out,
+                                           octx->data_buf_len))
+                    return -1;
+            }
+            written_len = octx->data_buf_len;
+            octx->data_buf_len = 0;
+        }
+        if (octx->aad_buf_len > 0) {
+            if (!CRYPTO_ocb128_aad
+                (&octx->ocb, octx->aad_buf, octx->aad_buf_len))
+                return -1;
+            octx->aad_buf_len = 0;
+        }
+        /* If decrypting then verify */
+        if (!EVP_CIPHER_CTX_encrypting(ctx)) {
+            if (octx->taglen < 0)
+                return -1;
+            if (CRYPTO_ocb128_finish(&octx->ocb,
+                                     octx->tag, octx->taglen) != 0)
+                return -1;
+            octx->iv_set = 0;
+            return written_len;
+        }
+        /* If encrypting then just get the tag */
+        if (CRYPTO_ocb128_tag(&octx->ocb, octx->tag, 16) != 1)
+            return -1;
+        /* Don't reuse the IV */
+        octx->iv_set = 0;
+        return written_len;
+    }
+}
+
+static int aes_ocb_cleanup(EVP_CIPHER_CTX *c)
+{
+    EVP_AES_OCB_CTX *octx = EVP_C_DATA(EVP_AES_OCB_CTX,c);
+    CRYPTO_ocb128_cleanup(&octx->ocb);
+    return 1;
+}
+
+BLOCK_CIPHER_custom(NID_aes, 128, 16, 12, ocb, OCB,
+                    EVP_CIPH_FLAG_AEAD_CIPHER | CUSTOM_FLAGS)
+BLOCK_CIPHER_custom(NID_aes, 192, 16, 12, ocb, OCB,
+                    EVP_CIPH_FLAG_AEAD_CIPHER | CUSTOM_FLAGS)
+BLOCK_CIPHER_custom(NID_aes, 256, 16, 12, ocb, OCB,
+                    EVP_CIPH_FLAG_AEAD_CIPHER | CUSTOM_FLAGS)
+#endif                         /* OPENSSL_NO_OCB */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_aes_cbc_hmac_sha1.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_aes_cbc_hmac_sha1.c
new file mode 100644
index 000000000..09d24dc3d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_aes_cbc_hmac_sha1.c
@@ -0,0 +1,964 @@
+/*
+ * Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+
+#include <stdio.h>
+#include <string.h>
+
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/aes.h>
+#include <openssl/sha.h>
+#include <openssl/rand.h>
+#include "modes_lcl.h"
+#include "internal/evp_int.h"
+#include "internal/constant_time_locl.h"
+
+typedef struct {
+    AES_KEY ks;
+    SHA_CTX head, tail, md;
+    size_t payload_length;      /* AAD length in decrypt case */
+    union {
+        unsigned int tls_ver;
+        unsigned char tls_aad[16]; /* 13 used */
+    } aux;
+} EVP_AES_HMAC_SHA1;
+
+#define NO_PAYLOAD_LENGTH       ((size_t)-1)
+
+#if     defined(AES_ASM) &&     ( \
+        defined(__x86_64)       || defined(__x86_64__)  || \
+        defined(_M_AMD64)       || defined(_M_X64)      )
+
+extern unsigned int OPENSSL_ia32cap_P[];
+# define AESNI_CAPABLE   (1<<(57-32))
+
+int aesni_set_encrypt_key(const unsigned char *userKey, int bits,
+                          AES_KEY *key);
+int aesni_set_decrypt_key(const unsigned char *userKey, int bits,
+                          AES_KEY *key);
+
+void aesni_cbc_encrypt(const unsigned char *in,
+                       unsigned char *out,
+                       size_t length,
+                       const AES_KEY *key, unsigned char *ivec, int enc);
+
+void aesni_cbc_sha1_enc(const void *inp, void *out, size_t blocks,
+                        const AES_KEY *key, unsigned char iv[16],
+                        SHA_CTX *ctx, const void *in0);
+
+void aesni256_cbc_sha1_dec(const void *inp, void *out, size_t blocks,
+                           const AES_KEY *key, unsigned char iv[16],
+                           SHA_CTX *ctx, const void *in0);
+
+# define data(ctx) ((EVP_AES_HMAC_SHA1 *)EVP_CIPHER_CTX_get_cipher_data(ctx))
+
+static int aesni_cbc_hmac_sha1_init_key(EVP_CIPHER_CTX *ctx,
+                                        const unsigned char *inkey,
+                                        const unsigned char *iv, int enc)
+{
+    EVP_AES_HMAC_SHA1 *key = data(ctx);
+    int ret;
+
+    if (enc)
+        ret = aesni_set_encrypt_key(inkey,
+                                    EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                    &key->ks);
+    else
+        ret = aesni_set_decrypt_key(inkey,
+                                    EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                    &key->ks);
+
+    SHA1_Init(&key->head);      /* handy when benchmarking */
+    key->tail = key->head;
+    key->md = key->head;
+
+    key->payload_length = NO_PAYLOAD_LENGTH;
+
+    return ret < 0 ? 0 : 1;
+}
+
+# define STITCHED_CALL
+# undef  STITCHED_DECRYPT_CALL
+
+# if !defined(STITCHED_CALL)
+#  define aes_off 0
+# endif
+
+void sha1_block_data_order(void *c, const void *p, size_t len);
+
+static void sha1_update(SHA_CTX *c, const void *data, size_t len)
+{
+    const unsigned char *ptr = data;
+    size_t res;
+
+    if ((res = c->num)) {
+        res = SHA_CBLOCK - res;
+        if (len < res)
+            res = len;
+        SHA1_Update(c, ptr, res);
+        ptr += res;
+        len -= res;
+    }
+
+    res = len % SHA_CBLOCK;
+    len -= res;
+
+    if (len) {
+        sha1_block_data_order(c, ptr, len / SHA_CBLOCK);
+
+        ptr += len;
+        c->Nh += len >> 29;
+        c->Nl += len <<= 3;
+        if (c->Nl < (unsigned int)len)
+            c->Nh++;
+    }
+
+    if (res)
+        SHA1_Update(c, ptr, res);
+}
+
+# ifdef SHA1_Update
+#  undef SHA1_Update
+# endif
+# define SHA1_Update sha1_update
+
+# if !defined(OPENSSL_NO_MULTIBLOCK)
+
+typedef struct {
+    unsigned int A[8], B[8], C[8], D[8], E[8];
+} SHA1_MB_CTX;
+typedef struct {
+    const unsigned char *ptr;
+    int blocks;
+} HASH_DESC;
+
+void sha1_multi_block(SHA1_MB_CTX *, const HASH_DESC *, int);
+
+typedef struct {
+    const unsigned char *inp;
+    unsigned char *out;
+    int blocks;
+    u64 iv[2];
+} CIPH_DESC;
+
+void aesni_multi_cbc_encrypt(CIPH_DESC *, void *, int);
+
+static size_t tls1_1_multi_block_encrypt(EVP_AES_HMAC_SHA1 *key,
+                                         unsigned char *out,
+                                         const unsigned char *inp,
+                                         size_t inp_len, int n4x)
+{                               /* n4x is 1 or 2 */
+    HASH_DESC hash_d[8], edges[8];
+    CIPH_DESC ciph_d[8];
+    unsigned char storage[sizeof(SHA1_MB_CTX) + 32];
+    union {
+        u64 q[16];
+        u32 d[32];
+        u8 c[128];
+    } blocks[8];
+    SHA1_MB_CTX *ctx;
+    unsigned int frag, last, packlen, i, x4 = 4 * n4x, minblocks, processed =
+        0;
+    size_t ret = 0;
+    u8 *IVs;
+#  if defined(BSWAP8)
+    u64 seqnum;
+#  endif
+
+    /* ask for IVs in bulk */
+    if (RAND_bytes((IVs = blocks[0].c), 16 * x4) <= 0)
+        return 0;
+
+    ctx = (SHA1_MB_CTX *) (storage + 32 - ((size_t)storage % 32)); /* align */
+
+    frag = (unsigned int)inp_len >> (1 + n4x);
+    last = (unsigned int)inp_len + frag - (frag << (1 + n4x));
+    if (last > frag && ((last + 13 + 9) % 64) < (x4 - 1)) {
+        frag++;
+        last -= x4 - 1;
+    }
+
+    packlen = 5 + 16 + ((frag + 20 + 16) & -16);
+
+    /* populate descriptors with pointers and IVs */
+    hash_d[0].ptr = inp;
+    ciph_d[0].inp = inp;
+    /* 5+16 is place for header and explicit IV */
+    ciph_d[0].out = out + 5 + 16;
+    memcpy(ciph_d[0].out - 16, IVs, 16);
+    memcpy(ciph_d[0].iv, IVs, 16);
+    IVs += 16;
+
+    for (i = 1; i < x4; i++) {
+        ciph_d[i].inp = hash_d[i].ptr = hash_d[i - 1].ptr + frag;
+        ciph_d[i].out = ciph_d[i - 1].out + packlen;
+        memcpy(ciph_d[i].out - 16, IVs, 16);
+        memcpy(ciph_d[i].iv, IVs, 16);
+        IVs += 16;
+    }
+
+#  if defined(BSWAP8)
+    memcpy(blocks[0].c, key->md.data, 8);
+    seqnum = BSWAP8(blocks[0].q[0]);
+#  endif
+    for (i = 0; i < x4; i++) {
+        unsigned int len = (i == (x4 - 1) ? last : frag);
+#  if !defined(BSWAP8)
+        unsigned int carry, j;
+#  endif
+
+        ctx->A[i] = key->md.h0;
+        ctx->B[i] = key->md.h1;
+        ctx->C[i] = key->md.h2;
+        ctx->D[i] = key->md.h3;
+        ctx->E[i] = key->md.h4;
+
+        /* fix seqnum */
+#  if defined(BSWAP8)
+        blocks[i].q[0] = BSWAP8(seqnum + i);
+#  else
+        for (carry = i, j = 8; j--;) {
+            blocks[i].c[j] = ((u8 *)key->md.data)[j] + carry;
+            carry = (blocks[i].c[j] - carry) >> (sizeof(carry) * 8 - 1);
+        }
+#  endif
+        blocks[i].c[8] = ((u8 *)key->md.data)[8];
+        blocks[i].c[9] = ((u8 *)key->md.data)[9];
+        blocks[i].c[10] = ((u8 *)key->md.data)[10];
+        /* fix length */
+        blocks[i].c[11] = (u8)(len >> 8);
+        blocks[i].c[12] = (u8)(len);
+
+        memcpy(blocks[i].c + 13, hash_d[i].ptr, 64 - 13);
+        hash_d[i].ptr += 64 - 13;
+        hash_d[i].blocks = (len - (64 - 13)) / 64;
+
+        edges[i].ptr = blocks[i].c;
+        edges[i].blocks = 1;
+    }
+
+    /* hash 13-byte headers and first 64-13 bytes of inputs */
+    sha1_multi_block(ctx, edges, n4x);
+    /* hash bulk inputs */
+#  define MAXCHUNKSIZE    2048
+#  if     MAXCHUNKSIZE%64
+#   error  "MAXCHUNKSIZE is not divisible by 64"
+#  elif   MAXCHUNKSIZE
+    /*
+     * goal is to minimize pressure on L1 cache by moving in shorter steps,
+     * so that hashed data is still in the cache by the time we encrypt it
+     */
+    minblocks = ((frag <= last ? frag : last) - (64 - 13)) / 64;
+    if (minblocks > MAXCHUNKSIZE / 64) {
+        for (i = 0; i < x4; i++) {
+            edges[i].ptr = hash_d[i].ptr;
+            edges[i].blocks = MAXCHUNKSIZE / 64;
+            ciph_d[i].blocks = MAXCHUNKSIZE / 16;
+        }
+        do {
+            sha1_multi_block(ctx, edges, n4x);
+            aesni_multi_cbc_encrypt(ciph_d, &key->ks, n4x);
+
+            for (i = 0; i < x4; i++) {
+                edges[i].ptr = hash_d[i].ptr += MAXCHUNKSIZE;
+                hash_d[i].blocks -= MAXCHUNKSIZE / 64;
+                edges[i].blocks = MAXCHUNKSIZE / 64;
+                ciph_d[i].inp += MAXCHUNKSIZE;
+                ciph_d[i].out += MAXCHUNKSIZE;
+                ciph_d[i].blocks = MAXCHUNKSIZE / 16;
+                memcpy(ciph_d[i].iv, ciph_d[i].out - 16, 16);
+            }
+            processed += MAXCHUNKSIZE;
+            minblocks -= MAXCHUNKSIZE / 64;
+        } while (minblocks > MAXCHUNKSIZE / 64);
+    }
+#  endif
+#  undef  MAXCHUNKSIZE
+    sha1_multi_block(ctx, hash_d, n4x);
+
+    memset(blocks, 0, sizeof(blocks));
+    for (i = 0; i < x4; i++) {
+        unsigned int len = (i == (x4 - 1) ? last : frag),
+            off = hash_d[i].blocks * 64;
+        const unsigned char *ptr = hash_d[i].ptr + off;
+
+        off = (len - processed) - (64 - 13) - off; /* remainder actually */
+        memcpy(blocks[i].c, ptr, off);
+        blocks[i].c[off] = 0x80;
+        len += 64 + 13;         /* 64 is HMAC header */
+        len *= 8;               /* convert to bits */
+        if (off < (64 - 8)) {
+#  ifdef BSWAP4
+            blocks[i].d[15] = BSWAP4(len);
+#  else
+            PUTU32(blocks[i].c + 60, len);
+#  endif
+            edges[i].blocks = 1;
+        } else {
+#  ifdef BSWAP4
+            blocks[i].d[31] = BSWAP4(len);
+#  else
+            PUTU32(blocks[i].c + 124, len);
+#  endif
+            edges[i].blocks = 2;
+        }
+        edges[i].ptr = blocks[i].c;
+    }
+
+    /* hash input tails and finalize */
+    sha1_multi_block(ctx, edges, n4x);
+
+    memset(blocks, 0, sizeof(blocks));
+    for (i = 0; i < x4; i++) {
+#  ifdef BSWAP4
+        blocks[i].d[0] = BSWAP4(ctx->A[i]);
+        ctx->A[i] = key->tail.h0;
+        blocks[i].d[1] = BSWAP4(ctx->B[i]);
+        ctx->B[i] = key->tail.h1;
+        blocks[i].d[2] = BSWAP4(ctx->C[i]);
+        ctx->C[i] = key->tail.h2;
+        blocks[i].d[3] = BSWAP4(ctx->D[i]);
+        ctx->D[i] = key->tail.h3;
+        blocks[i].d[4] = BSWAP4(ctx->E[i]);
+        ctx->E[i] = key->tail.h4;
+        blocks[i].c[20] = 0x80;
+        blocks[i].d[15] = BSWAP4((64 + 20) * 8);
+#  else
+        PUTU32(blocks[i].c + 0, ctx->A[i]);
+        ctx->A[i] = key->tail.h0;
+        PUTU32(blocks[i].c + 4, ctx->B[i]);
+        ctx->B[i] = key->tail.h1;
+        PUTU32(blocks[i].c + 8, ctx->C[i]);
+        ctx->C[i] = key->tail.h2;
+        PUTU32(blocks[i].c + 12, ctx->D[i]);
+        ctx->D[i] = key->tail.h3;
+        PUTU32(blocks[i].c + 16, ctx->E[i]);
+        ctx->E[i] = key->tail.h4;
+        blocks[i].c[20] = 0x80;
+        PUTU32(blocks[i].c + 60, (64 + 20) * 8);
+#  endif
+        edges[i].ptr = blocks[i].c;
+        edges[i].blocks = 1;
+    }
+
+    /* finalize MACs */
+    sha1_multi_block(ctx, edges, n4x);
+
+    for (i = 0; i < x4; i++) {
+        unsigned int len = (i == (x4 - 1) ? last : frag), pad, j;
+        unsigned char *out0 = out;
+
+        memcpy(ciph_d[i].out, ciph_d[i].inp, len - processed);
+        ciph_d[i].inp = ciph_d[i].out;
+
+        out += 5 + 16 + len;
+
+        /* write MAC */
+        PUTU32(out + 0, ctx->A[i]);
+        PUTU32(out + 4, ctx->B[i]);
+        PUTU32(out + 8, ctx->C[i]);
+        PUTU32(out + 12, ctx->D[i]);
+        PUTU32(out + 16, ctx->E[i]);
+        out += 20;
+        len += 20;
+
+        /* pad */
+        pad = 15 - len % 16;
+        for (j = 0; j <= pad; j++)
+            *(out++) = pad;
+        len += pad + 1;
+
+        ciph_d[i].blocks = (len - processed) / 16;
+        len += 16;              /* account for explicit iv */
+
+        /* arrange header */
+        out0[0] = ((u8 *)key->md.data)[8];
+        out0[1] = ((u8 *)key->md.data)[9];
+        out0[2] = ((u8 *)key->md.data)[10];
+        out0[3] = (u8)(len >> 8);
+        out0[4] = (u8)(len);
+
+        ret += len + 5;
+        inp += frag;
+    }
+
+    aesni_multi_cbc_encrypt(ciph_d, &key->ks, n4x);
+
+    OPENSSL_cleanse(blocks, sizeof(blocks));
+    OPENSSL_cleanse(ctx, sizeof(*ctx));
+
+    return ret;
+}
+# endif
+
+static int aesni_cbc_hmac_sha1_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                      const unsigned char *in, size_t len)
+{
+    EVP_AES_HMAC_SHA1 *key = data(ctx);
+    unsigned int l;
+    size_t plen = key->payload_length, iv = 0, /* explicit IV in TLS 1.1 and
+                                                * later */
+        sha_off = 0;
+# if defined(STITCHED_CALL)
+    size_t aes_off = 0, blocks;
+
+    sha_off = SHA_CBLOCK - key->md.num;
+# endif
+
+    key->payload_length = NO_PAYLOAD_LENGTH;
+
+    if (len % AES_BLOCK_SIZE)
+        return 0;
+
+    if (EVP_CIPHER_CTX_encrypting(ctx)) {
+        if (plen == NO_PAYLOAD_LENGTH)
+            plen = len;
+        else if (len !=
+                 ((plen + SHA_DIGEST_LENGTH +
+                   AES_BLOCK_SIZE) & -AES_BLOCK_SIZE))
+            return 0;
+        else if (key->aux.tls_ver >= TLS1_1_VERSION)
+            iv = AES_BLOCK_SIZE;
+
+# if defined(STITCHED_CALL)
+        if (plen > (sha_off + iv)
+            && (blocks = (plen - (sha_off + iv)) / SHA_CBLOCK)) {
+            SHA1_Update(&key->md, in + iv, sha_off);
+
+            aesni_cbc_sha1_enc(in, out, blocks, &key->ks,
+                               EVP_CIPHER_CTX_iv_noconst(ctx),
+                               &key->md, in + iv + sha_off);
+            blocks *= SHA_CBLOCK;
+            aes_off += blocks;
+            sha_off += blocks;
+            key->md.Nh += blocks >> 29;
+            key->md.Nl += blocks <<= 3;
+            if (key->md.Nl < (unsigned int)blocks)
+                key->md.Nh++;
+        } else {
+            sha_off = 0;
+        }
+# endif
+        sha_off += iv;
+        SHA1_Update(&key->md, in + sha_off, plen - sha_off);
+
+        if (plen != len) {      /* "TLS" mode of operation */
+            if (in != out)
+                memcpy(out + aes_off, in + aes_off, plen - aes_off);
+
+            /* calculate HMAC and append it to payload */
+            SHA1_Final(out + plen, &key->md);
+            key->md = key->tail;
+            SHA1_Update(&key->md, out + plen, SHA_DIGEST_LENGTH);
+            SHA1_Final(out + plen, &key->md);
+
+            /* pad the payload|hmac */
+            plen += SHA_DIGEST_LENGTH;
+            for (l = len - plen - 1; plen < len; plen++)
+                out[plen] = l;
+            /* encrypt HMAC|padding at once */
+            aesni_cbc_encrypt(out + aes_off, out + aes_off, len - aes_off,
+                              &key->ks, EVP_CIPHER_CTX_iv_noconst(ctx), 1);
+        } else {
+            aesni_cbc_encrypt(in + aes_off, out + aes_off, len - aes_off,
+                              &key->ks, EVP_CIPHER_CTX_iv_noconst(ctx), 1);
+        }
+    } else {
+        union {
+            unsigned int u[SHA_DIGEST_LENGTH / sizeof(unsigned int)];
+            unsigned char c[32 + SHA_DIGEST_LENGTH];
+        } mac, *pmac;
+
+        /* arrange cache line alignment */
+        pmac = (void *)(((size_t)mac.c + 31) & ((size_t)0 - 32));
+
+        if (plen != NO_PAYLOAD_LENGTH) { /* "TLS" mode of operation */
+            size_t inp_len, mask, j, i;
+            unsigned int res, maxpad, pad, bitlen;
+            int ret = 1;
+            union {
+                unsigned int u[SHA_LBLOCK];
+                unsigned char c[SHA_CBLOCK];
+            } *data = (void *)key->md.data;
+# if defined(STITCHED_DECRYPT_CALL)
+            unsigned char tail_iv[AES_BLOCK_SIZE];
+            int stitch = 0;
+# endif
+
+            if ((key->aux.tls_aad[plen - 4] << 8 | key->aux.tls_aad[plen - 3])
+                >= TLS1_1_VERSION) {
+                if (len < (AES_BLOCK_SIZE + SHA_DIGEST_LENGTH + 1))
+                    return 0;
+
+                /* omit explicit iv */
+                memcpy(EVP_CIPHER_CTX_iv_noconst(ctx), in, AES_BLOCK_SIZE);
+
+                in += AES_BLOCK_SIZE;
+                out += AES_BLOCK_SIZE;
+                len -= AES_BLOCK_SIZE;
+            } else if (len < (SHA_DIGEST_LENGTH + 1))
+                return 0;
+
+# if defined(STITCHED_DECRYPT_CALL)
+            if (len >= 1024 && ctx->key_len == 32) {
+                /* decrypt last block */
+                memcpy(tail_iv, in + len - 2 * AES_BLOCK_SIZE,
+                       AES_BLOCK_SIZE);
+                aesni_cbc_encrypt(in + len - AES_BLOCK_SIZE,
+                                  out + len - AES_BLOCK_SIZE, AES_BLOCK_SIZE,
+                                  &key->ks, tail_iv, 0);
+                stitch = 1;
+            } else
+# endif
+                /* decrypt HMAC|padding at once */
+                aesni_cbc_encrypt(in, out, len, &key->ks,
+                                  EVP_CIPHER_CTX_iv_noconst(ctx), 0);
+
+            /* figure out payload length */
+            pad = out[len - 1];
+            maxpad = len - (SHA_DIGEST_LENGTH + 1);
+            maxpad |= (255 - maxpad) >> (sizeof(maxpad) * 8 - 8);
+            maxpad &= 255;
+
+            mask = constant_time_ge(maxpad, pad);
+            ret &= mask;
+            /*
+             * If pad is invalid then we will fail the above test but we must
+             * continue anyway because we are in constant time code. However,
+             * we'll use the maxpad value instead of the supplied pad to make
+             * sure we perform well defined pointer arithmetic.
+             */
+            pad = constant_time_select(mask, pad, maxpad);
+
+            inp_len = len - (SHA_DIGEST_LENGTH + pad + 1);
+
+            key->aux.tls_aad[plen - 2] = inp_len >> 8;
+            key->aux.tls_aad[plen - 1] = inp_len;
+
+            /* calculate HMAC */
+            key->md = key->head;
+            SHA1_Update(&key->md, key->aux.tls_aad, plen);
+
+# if defined(STITCHED_DECRYPT_CALL)
+            if (stitch) {
+                blocks = (len - (256 + 32 + SHA_CBLOCK)) / SHA_CBLOCK;
+                aes_off = len - AES_BLOCK_SIZE - blocks * SHA_CBLOCK;
+                sha_off = SHA_CBLOCK - plen;
+
+                aesni_cbc_encrypt(in, out, aes_off, &key->ks, ctx->iv, 0);
+
+                SHA1_Update(&key->md, out, sha_off);
+                aesni256_cbc_sha1_dec(in + aes_off,
+                                      out + aes_off, blocks, &key->ks,
+                                      ctx->iv, &key->md, out + sha_off);
+
+                sha_off += blocks *= SHA_CBLOCK;
+                out += sha_off;
+                len -= sha_off;
+                inp_len -= sha_off;
+
+                key->md.Nl += (blocks << 3); /* at most 18 bits */
+                memcpy(ctx->iv, tail_iv, AES_BLOCK_SIZE);
+            }
+# endif
+
+# if 1      /* see original reference version in #else */
+            len -= SHA_DIGEST_LENGTH; /* amend mac */
+            if (len >= (256 + SHA_CBLOCK)) {
+                j = (len - (256 + SHA_CBLOCK)) & (0 - SHA_CBLOCK);
+                j += SHA_CBLOCK - key->md.num;
+                SHA1_Update(&key->md, out, j);
+                out += j;
+                len -= j;
+                inp_len -= j;
+            }
+
+            /* but pretend as if we hashed padded payload */
+            bitlen = key->md.Nl + (inp_len << 3); /* at most 18 bits */
+#  ifdef BSWAP4
+            bitlen = BSWAP4(bitlen);
+#  else
+            mac.c[0] = 0;
+            mac.c[1] = (unsigned char)(bitlen >> 16);
+            mac.c[2] = (unsigned char)(bitlen >> 8);
+            mac.c[3] = (unsigned char)bitlen;
+            bitlen = mac.u[0];
+#  endif
+
+            pmac->u[0] = 0;
+            pmac->u[1] = 0;
+            pmac->u[2] = 0;
+            pmac->u[3] = 0;
+            pmac->u[4] = 0;
+
+            for (res = key->md.num, j = 0; j < len; j++) {
+                size_t c = out[j];
+                mask = (j - inp_len) >> (sizeof(j) * 8 - 8);
+                c &= mask;
+                c |= 0x80 & ~mask & ~((inp_len - j) >> (sizeof(j) * 8 - 8));
+                data->c[res++] = (unsigned char)c;
+
+                if (res != SHA_CBLOCK)
+                    continue;
+
+                /* j is not incremented yet */
+                mask = 0 - ((inp_len + 7 - j) >> (sizeof(j) * 8 - 1));
+                data->u[SHA_LBLOCK - 1] |= bitlen & mask;
+                sha1_block_data_order(&key->md, data, 1);
+                mask &= 0 - ((j - inp_len - 72) >> (sizeof(j) * 8 - 1));
+                pmac->u[0] |= key->md.h0 & mask;
+                pmac->u[1] |= key->md.h1 & mask;
+                pmac->u[2] |= key->md.h2 & mask;
+                pmac->u[3] |= key->md.h3 & mask;
+                pmac->u[4] |= key->md.h4 & mask;
+                res = 0;
+            }
+
+            for (i = res; i < SHA_CBLOCK; i++, j++)
+                data->c[i] = 0;
+
+            if (res > SHA_CBLOCK - 8) {
+                mask = 0 - ((inp_len + 8 - j) >> (sizeof(j) * 8 - 1));
+                data->u[SHA_LBLOCK - 1] |= bitlen & mask;
+                sha1_block_data_order(&key->md, data, 1);
+                mask &= 0 - ((j - inp_len - 73) >> (sizeof(j) * 8 - 1));
+                pmac->u[0] |= key->md.h0 & mask;
+                pmac->u[1] |= key->md.h1 & mask;
+                pmac->u[2] |= key->md.h2 & mask;
+                pmac->u[3] |= key->md.h3 & mask;
+                pmac->u[4] |= key->md.h4 & mask;
+
+                memset(data, 0, SHA_CBLOCK);
+                j += 64;
+            }
+            data->u[SHA_LBLOCK - 1] = bitlen;
+            sha1_block_data_order(&key->md, data, 1);
+            mask = 0 - ((j - inp_len - 73) >> (sizeof(j) * 8 - 1));
+            pmac->u[0] |= key->md.h0 & mask;
+            pmac->u[1] |= key->md.h1 & mask;
+            pmac->u[2] |= key->md.h2 & mask;
+            pmac->u[3] |= key->md.h3 & mask;
+            pmac->u[4] |= key->md.h4 & mask;
+
+#  ifdef BSWAP4
+            pmac->u[0] = BSWAP4(pmac->u[0]);
+            pmac->u[1] = BSWAP4(pmac->u[1]);
+            pmac->u[2] = BSWAP4(pmac->u[2]);
+            pmac->u[3] = BSWAP4(pmac->u[3]);
+            pmac->u[4] = BSWAP4(pmac->u[4]);
+#  else
+            for (i = 0; i < 5; i++) {
+                res = pmac->u[i];
+                pmac->c[4 * i + 0] = (unsigned char)(res >> 24);
+                pmac->c[4 * i + 1] = (unsigned char)(res >> 16);
+                pmac->c[4 * i + 2] = (unsigned char)(res >> 8);
+                pmac->c[4 * i + 3] = (unsigned char)res;
+            }
+#  endif
+            len += SHA_DIGEST_LENGTH;
+# else      /* pre-lucky-13 reference version of above */
+            SHA1_Update(&key->md, out, inp_len);
+            res = key->md.num;
+            SHA1_Final(pmac->c, &key->md);
+
+            {
+                unsigned int inp_blocks, pad_blocks;
+
+                /* but pretend as if we hashed padded payload */
+                inp_blocks =
+                    1 + ((SHA_CBLOCK - 9 - res) >> (sizeof(res) * 8 - 1));
+                res += (unsigned int)(len - inp_len);
+                pad_blocks = res / SHA_CBLOCK;
+                res %= SHA_CBLOCK;
+                pad_blocks +=
+                    1 + ((SHA_CBLOCK - 9 - res) >> (sizeof(res) * 8 - 1));
+                for (; inp_blocks < pad_blocks; inp_blocks++)
+                    sha1_block_data_order(&key->md, data, 1);
+            }
+# endif
+            key->md = key->tail;
+            SHA1_Update(&key->md, pmac->c, SHA_DIGEST_LENGTH);
+            SHA1_Final(pmac->c, &key->md);
+
+            /* verify HMAC */
+            out += inp_len;
+            len -= inp_len;
+# if 1      /* see original reference version in #else */
+            {
+                unsigned char *p = out + len - 1 - maxpad - SHA_DIGEST_LENGTH;
+                size_t off = out - p;
+                unsigned int c, cmask;
+
+                maxpad += SHA_DIGEST_LENGTH;
+                for (res = 0, i = 0, j = 0; j < maxpad; j++) {
+                    c = p[j];
+                    cmask =
+                        ((int)(j - off - SHA_DIGEST_LENGTH)) >> (sizeof(int) *
+                                                                 8 - 1);
+                    res |= (c ^ pad) & ~cmask; /* ... and padding */
+                    cmask &= ((int)(off - 1 - j)) >> (sizeof(int) * 8 - 1);
+                    res |= (c ^ pmac->c[i]) & cmask;
+                    i += 1 & cmask;
+                }
+                maxpad -= SHA_DIGEST_LENGTH;
+
+                res = 0 - ((0 - res) >> (sizeof(res) * 8 - 1));
+                ret &= (int)~res;
+            }
+# else      /* pre-lucky-13 reference version of above */
+            for (res = 0, i = 0; i < SHA_DIGEST_LENGTH; i++)
+                res |= out[i] ^ pmac->c[i];
+            res = 0 - ((0 - res) >> (sizeof(res) * 8 - 1));
+            ret &= (int)~res;
+
+            /* verify padding */
+            pad = (pad & ~res) | (maxpad & res);
+            out = out + len - 1 - pad;
+            for (res = 0, i = 0; i < pad; i++)
+                res |= out[i] ^ pad;
+
+            res = (0 - res) >> (sizeof(res) * 8 - 1);
+            ret &= (int)~res;
+# endif
+            return ret;
+        } else {
+# if defined(STITCHED_DECRYPT_CALL)
+            if (len >= 1024 && ctx->key_len == 32) {
+                if (sha_off %= SHA_CBLOCK)
+                    blocks = (len - 3 * SHA_CBLOCK) / SHA_CBLOCK;
+                else
+                    blocks = (len - 2 * SHA_CBLOCK) / SHA_CBLOCK;
+                aes_off = len - blocks * SHA_CBLOCK;
+
+                aesni_cbc_encrypt(in, out, aes_off, &key->ks, ctx->iv, 0);
+                SHA1_Update(&key->md, out, sha_off);
+                aesni256_cbc_sha1_dec(in + aes_off,
+                                      out + aes_off, blocks, &key->ks,
+                                      ctx->iv, &key->md, out + sha_off);
+
+                sha_off += blocks *= SHA_CBLOCK;
+                out += sha_off;
+                len -= sha_off;
+
+                key->md.Nh += blocks >> 29;
+                key->md.Nl += blocks <<= 3;
+                if (key->md.Nl < (unsigned int)blocks)
+                    key->md.Nh++;
+            } else
+# endif
+                /* decrypt HMAC|padding at once */
+                aesni_cbc_encrypt(in, out, len, &key->ks,
+                                  EVP_CIPHER_CTX_iv_noconst(ctx), 0);
+
+            SHA1_Update(&key->md, out, len);
+        }
+    }
+
+    return 1;
+}
+
+static int aesni_cbc_hmac_sha1_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg,
+                                    void *ptr)
+{
+    EVP_AES_HMAC_SHA1 *key = data(ctx);
+
+    switch (type) {
+    case EVP_CTRL_AEAD_SET_MAC_KEY:
+        {
+            unsigned int i;
+            unsigned char hmac_key[64];
+
+            memset(hmac_key, 0, sizeof(hmac_key));
+
+            if (arg > (int)sizeof(hmac_key)) {
+                SHA1_Init(&key->head);
+                SHA1_Update(&key->head, ptr, arg);
+                SHA1_Final(hmac_key, &key->head);
+            } else {
+                memcpy(hmac_key, ptr, arg);
+            }
+
+            for (i = 0; i < sizeof(hmac_key); i++)
+                hmac_key[i] ^= 0x36; /* ipad */
+            SHA1_Init(&key->head);
+            SHA1_Update(&key->head, hmac_key, sizeof(hmac_key));
+
+            for (i = 0; i < sizeof(hmac_key); i++)
+                hmac_key[i] ^= 0x36 ^ 0x5c; /* opad */
+            SHA1_Init(&key->tail);
+            SHA1_Update(&key->tail, hmac_key, sizeof(hmac_key));
+
+            OPENSSL_cleanse(hmac_key, sizeof(hmac_key));
+
+            return 1;
+        }
+    case EVP_CTRL_AEAD_TLS1_AAD:
+        {
+            unsigned char *p = ptr;
+            unsigned int len;
+
+            if (arg != EVP_AEAD_TLS1_AAD_LEN)
+                return -1;
+
+            len = p[arg - 2] << 8 | p[arg - 1];
+
+            if (EVP_CIPHER_CTX_encrypting(ctx)) {
+                key->payload_length = len;
+                if ((key->aux.tls_ver =
+                     p[arg - 4] << 8 | p[arg - 3]) >= TLS1_1_VERSION) {
+                    if (len < AES_BLOCK_SIZE)
+                        return 0;
+                    len -= AES_BLOCK_SIZE;
+                    p[arg - 2] = len >> 8;
+                    p[arg - 1] = len;
+                }
+                key->md = key->head;
+                SHA1_Update(&key->md, p, arg);
+
+                return (int)(((len + SHA_DIGEST_LENGTH +
+                               AES_BLOCK_SIZE) & -AES_BLOCK_SIZE)
+                             - len);
+            } else {
+                memcpy(key->aux.tls_aad, ptr, arg);
+                key->payload_length = arg;
+
+                return SHA_DIGEST_LENGTH;
+            }
+        }
+# if !defined(OPENSSL_NO_MULTIBLOCK)
+    case EVP_CTRL_TLS1_1_MULTIBLOCK_MAX_BUFSIZE:
+        return (int)(5 + 16 + ((arg + 20 + 16) & -16));
+    case EVP_CTRL_TLS1_1_MULTIBLOCK_AAD:
+        {
+            EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM *param =
+                (EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM *) ptr;
+            unsigned int n4x = 1, x4;
+            unsigned int frag, last, packlen, inp_len;
+
+            if (arg < (int)sizeof(EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM))
+                return -1;
+
+            inp_len = param->inp[11] << 8 | param->inp[12];
+
+            if (EVP_CIPHER_CTX_encrypting(ctx)) {
+                if ((param->inp[9] << 8 | param->inp[10]) < TLS1_1_VERSION)
+                    return -1;
+
+                if (inp_len) {
+                    if (inp_len < 4096)
+                        return 0; /* too short */
+
+                    if (inp_len >= 8192 && OPENSSL_ia32cap_P[2] & (1 << 5))
+                        n4x = 2; /* AVX2 */
+                } else if ((n4x = param->interleave / 4) && n4x <= 2)
+                    inp_len = param->len;
+                else
+                    return -1;
+
+                key->md = key->head;
+                SHA1_Update(&key->md, param->inp, 13);
+
+                x4 = 4 * n4x;
+                n4x += 1;
+
+                frag = inp_len >> n4x;
+                last = inp_len + frag - (frag << n4x);
+                if (last > frag && ((last + 13 + 9) % 64 < (x4 - 1))) {
+                    frag++;
+                    last -= x4 - 1;
+                }
+
+                packlen = 5 + 16 + ((frag + 20 + 16) & -16);
+                packlen = (packlen << n4x) - packlen;
+                packlen += 5 + 16 + ((last + 20 + 16) & -16);
+
+                param->interleave = x4;
+
+                return (int)packlen;
+            } else
+                return -1;      /* not yet */
+        }
+    case EVP_CTRL_TLS1_1_MULTIBLOCK_ENCRYPT:
+        {
+            EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM *param =
+                (EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM *) ptr;
+
+            return (int)tls1_1_multi_block_encrypt(key, param->out,
+                                                   param->inp, param->len,
+                                                   param->interleave / 4);
+        }
+    case EVP_CTRL_TLS1_1_MULTIBLOCK_DECRYPT:
+# endif
+    default:
+        return -1;
+    }
+}
+
+static EVP_CIPHER aesni_128_cbc_hmac_sha1_cipher = {
+# ifdef NID_aes_128_cbc_hmac_sha1
+    NID_aes_128_cbc_hmac_sha1,
+# else
+    NID_undef,
+# endif
+    AES_BLOCK_SIZE, 16, AES_BLOCK_SIZE,
+    EVP_CIPH_CBC_MODE | EVP_CIPH_FLAG_DEFAULT_ASN1 |
+        EVP_CIPH_FLAG_AEAD_CIPHER | EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK,
+    aesni_cbc_hmac_sha1_init_key,
+    aesni_cbc_hmac_sha1_cipher,
+    NULL,
+    sizeof(EVP_AES_HMAC_SHA1),
+    EVP_CIPH_FLAG_DEFAULT_ASN1 ? NULL : EVP_CIPHER_set_asn1_iv,
+    EVP_CIPH_FLAG_DEFAULT_ASN1 ? NULL : EVP_CIPHER_get_asn1_iv,
+    aesni_cbc_hmac_sha1_ctrl,
+    NULL
+};
+
+static EVP_CIPHER aesni_256_cbc_hmac_sha1_cipher = {
+# ifdef NID_aes_256_cbc_hmac_sha1
+    NID_aes_256_cbc_hmac_sha1,
+# else
+    NID_undef,
+# endif
+    AES_BLOCK_SIZE, 32, AES_BLOCK_SIZE,
+    EVP_CIPH_CBC_MODE | EVP_CIPH_FLAG_DEFAULT_ASN1 |
+        EVP_CIPH_FLAG_AEAD_CIPHER | EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK,
+    aesni_cbc_hmac_sha1_init_key,
+    aesni_cbc_hmac_sha1_cipher,
+    NULL,
+    sizeof(EVP_AES_HMAC_SHA1),
+    EVP_CIPH_FLAG_DEFAULT_ASN1 ? NULL : EVP_CIPHER_set_asn1_iv,
+    EVP_CIPH_FLAG_DEFAULT_ASN1 ? NULL : EVP_CIPHER_get_asn1_iv,
+    aesni_cbc_hmac_sha1_ctrl,
+    NULL
+};
+
+const EVP_CIPHER *EVP_aes_128_cbc_hmac_sha1(void)
+{
+    return (OPENSSL_ia32cap_P[1] & AESNI_CAPABLE ?
+            &aesni_128_cbc_hmac_sha1_cipher : NULL);
+}
+
+const EVP_CIPHER *EVP_aes_256_cbc_hmac_sha1(void)
+{
+    return (OPENSSL_ia32cap_P[1] & AESNI_CAPABLE ?
+            &aesni_256_cbc_hmac_sha1_cipher : NULL);
+}
+#else
+const EVP_CIPHER *EVP_aes_128_cbc_hmac_sha1(void)
+{
+    return NULL;
+}
+
+const EVP_CIPHER *EVP_aes_256_cbc_hmac_sha1(void)
+{
+    return NULL;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_aes_cbc_hmac_sha256.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_aes_cbc_hmac_sha256.c
new file mode 100644
index 000000000..caac0c9d3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_aes_cbc_hmac_sha256.c
@@ -0,0 +1,950 @@
+/*
+ * Copyright 2013-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+
+#include <stdio.h>
+#include <string.h>
+
+
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/aes.h>
+#include <openssl/sha.h>
+#include <openssl/rand.h>
+#include "modes_lcl.h"
+#include "internal/constant_time_locl.h"
+#include "internal/evp_int.h"
+
+typedef struct {
+    AES_KEY ks;
+    SHA256_CTX head, tail, md;
+    size_t payload_length;      /* AAD length in decrypt case */
+    union {
+        unsigned int tls_ver;
+        unsigned char tls_aad[16]; /* 13 used */
+    } aux;
+} EVP_AES_HMAC_SHA256;
+
+# define NO_PAYLOAD_LENGTH       ((size_t)-1)
+
+#if     defined(AES_ASM) &&     ( \
+        defined(__x86_64)       || defined(__x86_64__)  || \
+        defined(_M_AMD64)       || defined(_M_X64)      )
+
+extern unsigned int OPENSSL_ia32cap_P[];
+# define AESNI_CAPABLE   (1<<(57-32))
+
+int aesni_set_encrypt_key(const unsigned char *userKey, int bits,
+                          AES_KEY *key);
+int aesni_set_decrypt_key(const unsigned char *userKey, int bits,
+                          AES_KEY *key);
+
+void aesni_cbc_encrypt(const unsigned char *in,
+                       unsigned char *out,
+                       size_t length,
+                       const AES_KEY *key, unsigned char *ivec, int enc);
+
+int aesni_cbc_sha256_enc(const void *inp, void *out, size_t blocks,
+                         const AES_KEY *key, unsigned char iv[16],
+                         SHA256_CTX *ctx, const void *in0);
+
+# define data(ctx) ((EVP_AES_HMAC_SHA256 *)EVP_CIPHER_CTX_get_cipher_data(ctx))
+
+static int aesni_cbc_hmac_sha256_init_key(EVP_CIPHER_CTX *ctx,
+                                          const unsigned char *inkey,
+                                          const unsigned char *iv, int enc)
+{
+    EVP_AES_HMAC_SHA256 *key = data(ctx);
+    int ret;
+
+    if (enc)
+        ret = aesni_set_encrypt_key(inkey,
+                                    EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                    &key->ks);
+    else
+        ret = aesni_set_decrypt_key(inkey,
+                                    EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                    &key->ks);
+
+    SHA256_Init(&key->head);    /* handy when benchmarking */
+    key->tail = key->head;
+    key->md = key->head;
+
+    key->payload_length = NO_PAYLOAD_LENGTH;
+
+    return ret < 0 ? 0 : 1;
+}
+
+# define STITCHED_CALL
+
+# if !defined(STITCHED_CALL)
+#  define aes_off 0
+# endif
+
+void sha256_block_data_order(void *c, const void *p, size_t len);
+
+static void sha256_update(SHA256_CTX *c, const void *data, size_t len)
+{
+    const unsigned char *ptr = data;
+    size_t res;
+
+    if ((res = c->num)) {
+        res = SHA256_CBLOCK - res;
+        if (len < res)
+            res = len;
+        SHA256_Update(c, ptr, res);
+        ptr += res;
+        len -= res;
+    }
+
+    res = len % SHA256_CBLOCK;
+    len -= res;
+
+    if (len) {
+        sha256_block_data_order(c, ptr, len / SHA256_CBLOCK);
+
+        ptr += len;
+        c->Nh += len >> 29;
+        c->Nl += len <<= 3;
+        if (c->Nl < (unsigned int)len)
+            c->Nh++;
+    }
+
+    if (res)
+        SHA256_Update(c, ptr, res);
+}
+
+# ifdef SHA256_Update
+#  undef SHA256_Update
+# endif
+# define SHA256_Update sha256_update
+
+# if !defined(OPENSSL_NO_MULTIBLOCK)
+
+typedef struct {
+    unsigned int A[8], B[8], C[8], D[8], E[8], F[8], G[8], H[8];
+} SHA256_MB_CTX;
+typedef struct {
+    const unsigned char *ptr;
+    int blocks;
+} HASH_DESC;
+
+void sha256_multi_block(SHA256_MB_CTX *, const HASH_DESC *, int);
+
+typedef struct {
+    const unsigned char *inp;
+    unsigned char *out;
+    int blocks;
+    u64 iv[2];
+} CIPH_DESC;
+
+void aesni_multi_cbc_encrypt(CIPH_DESC *, void *, int);
+
+static size_t tls1_1_multi_block_encrypt(EVP_AES_HMAC_SHA256 *key,
+                                         unsigned char *out,
+                                         const unsigned char *inp,
+                                         size_t inp_len, int n4x)
+{                               /* n4x is 1 or 2 */
+    HASH_DESC hash_d[8], edges[8];
+    CIPH_DESC ciph_d[8];
+    unsigned char storage[sizeof(SHA256_MB_CTX) + 32];
+    union {
+        u64 q[16];
+        u32 d[32];
+        u8 c[128];
+    } blocks[8];
+    SHA256_MB_CTX *ctx;
+    unsigned int frag, last, packlen, i, x4 = 4 * n4x, minblocks, processed =
+        0;
+    size_t ret = 0;
+    u8 *IVs;
+#  if defined(BSWAP8)
+    u64 seqnum;
+#  endif
+
+    /* ask for IVs in bulk */
+    if (RAND_bytes((IVs = blocks[0].c), 16 * x4) <= 0)
+        return 0;
+
+    /* align */
+    ctx = (SHA256_MB_CTX *) (storage + 32 - ((size_t)storage % 32));
+
+    frag = (unsigned int)inp_len >> (1 + n4x);
+    last = (unsigned int)inp_len + frag - (frag << (1 + n4x));
+    if (last > frag && ((last + 13 + 9) % 64) < (x4 - 1)) {
+        frag++;
+        last -= x4 - 1;
+    }
+
+    packlen = 5 + 16 + ((frag + 32 + 16) & -16);
+
+    /* populate descriptors with pointers and IVs */
+    hash_d[0].ptr = inp;
+    ciph_d[0].inp = inp;
+    /* 5+16 is place for header and explicit IV */
+    ciph_d[0].out = out + 5 + 16;
+    memcpy(ciph_d[0].out - 16, IVs, 16);
+    memcpy(ciph_d[0].iv, IVs, 16);
+    IVs += 16;
+
+    for (i = 1; i < x4; i++) {
+        ciph_d[i].inp = hash_d[i].ptr = hash_d[i - 1].ptr + frag;
+        ciph_d[i].out = ciph_d[i - 1].out + packlen;
+        memcpy(ciph_d[i].out - 16, IVs, 16);
+        memcpy(ciph_d[i].iv, IVs, 16);
+        IVs += 16;
+    }
+
+#  if defined(BSWAP8)
+    memcpy(blocks[0].c, key->md.data, 8);
+    seqnum = BSWAP8(blocks[0].q[0]);
+#  endif
+    for (i = 0; i < x4; i++) {
+        unsigned int len = (i == (x4 - 1) ? last : frag);
+#  if !defined(BSWAP8)
+        unsigned int carry, j;
+#  endif
+
+        ctx->A[i] = key->md.h[0];
+        ctx->B[i] = key->md.h[1];
+        ctx->C[i] = key->md.h[2];
+        ctx->D[i] = key->md.h[3];
+        ctx->E[i] = key->md.h[4];
+        ctx->F[i] = key->md.h[5];
+        ctx->G[i] = key->md.h[6];
+        ctx->H[i] = key->md.h[7];
+
+        /* fix seqnum */
+#  if defined(BSWAP8)
+        blocks[i].q[0] = BSWAP8(seqnum + i);
+#  else
+        for (carry = i, j = 8; j--;) {
+            blocks[i].c[j] = ((u8 *)key->md.data)[j] + carry;
+            carry = (blocks[i].c[j] - carry) >> (sizeof(carry) * 8 - 1);
+        }
+#  endif
+        blocks[i].c[8] = ((u8 *)key->md.data)[8];
+        blocks[i].c[9] = ((u8 *)key->md.data)[9];
+        blocks[i].c[10] = ((u8 *)key->md.data)[10];
+        /* fix length */
+        blocks[i].c[11] = (u8)(len >> 8);
+        blocks[i].c[12] = (u8)(len);
+
+        memcpy(blocks[i].c + 13, hash_d[i].ptr, 64 - 13);
+        hash_d[i].ptr += 64 - 13;
+        hash_d[i].blocks = (len - (64 - 13)) / 64;
+
+        edges[i].ptr = blocks[i].c;
+        edges[i].blocks = 1;
+    }
+
+    /* hash 13-byte headers and first 64-13 bytes of inputs */
+    sha256_multi_block(ctx, edges, n4x);
+    /* hash bulk inputs */
+#  define MAXCHUNKSIZE    2048
+#  if     MAXCHUNKSIZE%64
+#   error  "MAXCHUNKSIZE is not divisible by 64"
+#  elif   MAXCHUNKSIZE
+    /*
+     * goal is to minimize pressure on L1 cache by moving in shorter steps,
+     * so that hashed data is still in the cache by the time we encrypt it
+     */
+    minblocks = ((frag <= last ? frag : last) - (64 - 13)) / 64;
+    if (minblocks > MAXCHUNKSIZE / 64) {
+        for (i = 0; i < x4; i++) {
+            edges[i].ptr = hash_d[i].ptr;
+            edges[i].blocks = MAXCHUNKSIZE / 64;
+            ciph_d[i].blocks = MAXCHUNKSIZE / 16;
+        }
+        do {
+            sha256_multi_block(ctx, edges, n4x);
+            aesni_multi_cbc_encrypt(ciph_d, &key->ks, n4x);
+
+            for (i = 0; i < x4; i++) {
+                edges[i].ptr = hash_d[i].ptr += MAXCHUNKSIZE;
+                hash_d[i].blocks -= MAXCHUNKSIZE / 64;
+                edges[i].blocks = MAXCHUNKSIZE / 64;
+                ciph_d[i].inp += MAXCHUNKSIZE;
+                ciph_d[i].out += MAXCHUNKSIZE;
+                ciph_d[i].blocks = MAXCHUNKSIZE / 16;
+                memcpy(ciph_d[i].iv, ciph_d[i].out - 16, 16);
+            }
+            processed += MAXCHUNKSIZE;
+            minblocks -= MAXCHUNKSIZE / 64;
+        } while (minblocks > MAXCHUNKSIZE / 64);
+    }
+#  endif
+#  undef  MAXCHUNKSIZE
+    sha256_multi_block(ctx, hash_d, n4x);
+
+    memset(blocks, 0, sizeof(blocks));
+    for (i = 0; i < x4; i++) {
+        unsigned int len = (i == (x4 - 1) ? last : frag),
+            off = hash_d[i].blocks * 64;
+        const unsigned char *ptr = hash_d[i].ptr + off;
+
+        off = (len - processed) - (64 - 13) - off; /* remainder actually */
+        memcpy(blocks[i].c, ptr, off);
+        blocks[i].c[off] = 0x80;
+        len += 64 + 13;         /* 64 is HMAC header */
+        len *= 8;               /* convert to bits */
+        if (off < (64 - 8)) {
+#  ifdef BSWAP4
+            blocks[i].d[15] = BSWAP4(len);
+#  else
+            PUTU32(blocks[i].c + 60, len);
+#  endif
+            edges[i].blocks = 1;
+        } else {
+#  ifdef BSWAP4
+            blocks[i].d[31] = BSWAP4(len);
+#  else
+            PUTU32(blocks[i].c + 124, len);
+#  endif
+            edges[i].blocks = 2;
+        }
+        edges[i].ptr = blocks[i].c;
+    }
+
+    /* hash input tails and finalize */
+    sha256_multi_block(ctx, edges, n4x);
+
+    memset(blocks, 0, sizeof(blocks));
+    for (i = 0; i < x4; i++) {
+#  ifdef BSWAP4
+        blocks[i].d[0] = BSWAP4(ctx->A[i]);
+        ctx->A[i] = key->tail.h[0];
+        blocks[i].d[1] = BSWAP4(ctx->B[i]);
+        ctx->B[i] = key->tail.h[1];
+        blocks[i].d[2] = BSWAP4(ctx->C[i]);
+        ctx->C[i] = key->tail.h[2];
+        blocks[i].d[3] = BSWAP4(ctx->D[i]);
+        ctx->D[i] = key->tail.h[3];
+        blocks[i].d[4] = BSWAP4(ctx->E[i]);
+        ctx->E[i] = key->tail.h[4];
+        blocks[i].d[5] = BSWAP4(ctx->F[i]);
+        ctx->F[i] = key->tail.h[5];
+        blocks[i].d[6] = BSWAP4(ctx->G[i]);
+        ctx->G[i] = key->tail.h[6];
+        blocks[i].d[7] = BSWAP4(ctx->H[i]);
+        ctx->H[i] = key->tail.h[7];
+        blocks[i].c[32] = 0x80;
+        blocks[i].d[15] = BSWAP4((64 + 32) * 8);
+#  else
+        PUTU32(blocks[i].c + 0, ctx->A[i]);
+        ctx->A[i] = key->tail.h[0];
+        PUTU32(blocks[i].c + 4, ctx->B[i]);
+        ctx->B[i] = key->tail.h[1];
+        PUTU32(blocks[i].c + 8, ctx->C[i]);
+        ctx->C[i] = key->tail.h[2];
+        PUTU32(blocks[i].c + 12, ctx->D[i]);
+        ctx->D[i] = key->tail.h[3];
+        PUTU32(blocks[i].c + 16, ctx->E[i]);
+        ctx->E[i] = key->tail.h[4];
+        PUTU32(blocks[i].c + 20, ctx->F[i]);
+        ctx->F[i] = key->tail.h[5];
+        PUTU32(blocks[i].c + 24, ctx->G[i]);
+        ctx->G[i] = key->tail.h[6];
+        PUTU32(blocks[i].c + 28, ctx->H[i]);
+        ctx->H[i] = key->tail.h[7];
+        blocks[i].c[32] = 0x80;
+        PUTU32(blocks[i].c + 60, (64 + 32) * 8);
+#  endif
+        edges[i].ptr = blocks[i].c;
+        edges[i].blocks = 1;
+    }
+
+    /* finalize MACs */
+    sha256_multi_block(ctx, edges, n4x);
+
+    for (i = 0; i < x4; i++) {
+        unsigned int len = (i == (x4 - 1) ? last : frag), pad, j;
+        unsigned char *out0 = out;
+
+        memcpy(ciph_d[i].out, ciph_d[i].inp, len - processed);
+        ciph_d[i].inp = ciph_d[i].out;
+
+        out += 5 + 16 + len;
+
+        /* write MAC */
+        PUTU32(out + 0, ctx->A[i]);
+        PUTU32(out + 4, ctx->B[i]);
+        PUTU32(out + 8, ctx->C[i]);
+        PUTU32(out + 12, ctx->D[i]);
+        PUTU32(out + 16, ctx->E[i]);
+        PUTU32(out + 20, ctx->F[i]);
+        PUTU32(out + 24, ctx->G[i]);
+        PUTU32(out + 28, ctx->H[i]);
+        out += 32;
+        len += 32;
+
+        /* pad */
+        pad = 15 - len % 16;
+        for (j = 0; j <= pad; j++)
+            *(out++) = pad;
+        len += pad + 1;
+
+        ciph_d[i].blocks = (len - processed) / 16;
+        len += 16;              /* account for explicit iv */
+
+        /* arrange header */
+        out0[0] = ((u8 *)key->md.data)[8];
+        out0[1] = ((u8 *)key->md.data)[9];
+        out0[2] = ((u8 *)key->md.data)[10];
+        out0[3] = (u8)(len >> 8);
+        out0[4] = (u8)(len);
+
+        ret += len + 5;
+        inp += frag;
+    }
+
+    aesni_multi_cbc_encrypt(ciph_d, &key->ks, n4x);
+
+    OPENSSL_cleanse(blocks, sizeof(blocks));
+    OPENSSL_cleanse(ctx, sizeof(*ctx));
+
+    return ret;
+}
+# endif
+
+static int aesni_cbc_hmac_sha256_cipher(EVP_CIPHER_CTX *ctx,
+                                        unsigned char *out,
+                                        const unsigned char *in, size_t len)
+{
+    EVP_AES_HMAC_SHA256 *key = data(ctx);
+    unsigned int l;
+    size_t plen = key->payload_length, iv = 0, /* explicit IV in TLS 1.1 and
+                                                * later */
+        sha_off = 0;
+# if defined(STITCHED_CALL)
+    size_t aes_off = 0, blocks;
+
+    sha_off = SHA256_CBLOCK - key->md.num;
+# endif
+
+    key->payload_length = NO_PAYLOAD_LENGTH;
+
+    if (len % AES_BLOCK_SIZE)
+        return 0;
+
+    if (EVP_CIPHER_CTX_encrypting(ctx)) {
+        if (plen == NO_PAYLOAD_LENGTH)
+            plen = len;
+        else if (len !=
+                 ((plen + SHA256_DIGEST_LENGTH +
+                   AES_BLOCK_SIZE) & -AES_BLOCK_SIZE))
+            return 0;
+        else if (key->aux.tls_ver >= TLS1_1_VERSION)
+            iv = AES_BLOCK_SIZE;
+
+# if defined(STITCHED_CALL)
+        /*
+         * Assembly stitch handles AVX-capable processors, but its
+         * performance is not optimal on AMD Jaguar, ~40% worse, for
+         * unknown reasons. Incidentally processor in question supports
+         * AVX, but not AMD-specific XOP extension, which can be used
+         * to identify it and avoid stitch invocation. So that after we
+         * establish that current CPU supports AVX, we even see if it's
+         * either even XOP-capable Bulldozer-based or GenuineIntel one.
+         * But SHAEXT-capable go ahead...
+         */
+        if (((OPENSSL_ia32cap_P[2] & (1 << 29)) ||         /* SHAEXT? */
+             ((OPENSSL_ia32cap_P[1] & (1 << (60 - 32))) && /* AVX? */
+              ((OPENSSL_ia32cap_P[1] & (1 << (43 - 32)))   /* XOP? */
+               | (OPENSSL_ia32cap_P[0] & (1 << 30))))) &&  /* "Intel CPU"? */
+            plen > (sha_off + iv) &&
+            (blocks = (plen - (sha_off + iv)) / SHA256_CBLOCK)) {
+            SHA256_Update(&key->md, in + iv, sha_off);
+
+            (void)aesni_cbc_sha256_enc(in, out, blocks, &key->ks,
+                                       EVP_CIPHER_CTX_iv_noconst(ctx),
+                                       &key->md, in + iv + sha_off);
+            blocks *= SHA256_CBLOCK;
+            aes_off += blocks;
+            sha_off += blocks;
+            key->md.Nh += blocks >> 29;
+            key->md.Nl += blocks <<= 3;
+            if (key->md.Nl < (unsigned int)blocks)
+                key->md.Nh++;
+        } else {
+            sha_off = 0;
+        }
+# endif
+        sha_off += iv;
+        SHA256_Update(&key->md, in + sha_off, plen - sha_off);
+
+        if (plen != len) {      /* "TLS" mode of operation */
+            if (in != out)
+                memcpy(out + aes_off, in + aes_off, plen - aes_off);
+
+            /* calculate HMAC and append it to payload */
+            SHA256_Final(out + plen, &key->md);
+            key->md = key->tail;
+            SHA256_Update(&key->md, out + plen, SHA256_DIGEST_LENGTH);
+            SHA256_Final(out + plen, &key->md);
+
+            /* pad the payload|hmac */
+            plen += SHA256_DIGEST_LENGTH;
+            for (l = len - plen - 1; plen < len; plen++)
+                out[plen] = l;
+            /* encrypt HMAC|padding at once */
+            aesni_cbc_encrypt(out + aes_off, out + aes_off, len - aes_off,
+                              &key->ks, EVP_CIPHER_CTX_iv_noconst(ctx), 1);
+        } else {
+            aesni_cbc_encrypt(in + aes_off, out + aes_off, len - aes_off,
+                              &key->ks, EVP_CIPHER_CTX_iv_noconst(ctx), 1);
+        }
+    } else {
+        union {
+            unsigned int u[SHA256_DIGEST_LENGTH / sizeof(unsigned int)];
+            unsigned char c[64 + SHA256_DIGEST_LENGTH];
+        } mac, *pmac;
+
+        /* arrange cache line alignment */
+        pmac = (void *)(((size_t)mac.c + 63) & ((size_t)0 - 64));
+
+        /* decrypt HMAC|padding at once */
+        aesni_cbc_encrypt(in, out, len, &key->ks,
+                          EVP_CIPHER_CTX_iv_noconst(ctx), 0);
+
+        if (plen != NO_PAYLOAD_LENGTH) { /* "TLS" mode of operation */
+            size_t inp_len, mask, j, i;
+            unsigned int res, maxpad, pad, bitlen;
+            int ret = 1;
+            union {
+                unsigned int u[SHA_LBLOCK];
+                unsigned char c[SHA256_CBLOCK];
+            } *data = (void *)key->md.data;
+
+            if ((key->aux.tls_aad[plen - 4] << 8 | key->aux.tls_aad[plen - 3])
+                >= TLS1_1_VERSION)
+                iv = AES_BLOCK_SIZE;
+
+            if (len < (iv + SHA256_DIGEST_LENGTH + 1))
+                return 0;
+
+            /* omit explicit iv */
+            out += iv;
+            len -= iv;
+
+            /* figure out payload length */
+            pad = out[len - 1];
+            maxpad = len - (SHA256_DIGEST_LENGTH + 1);
+            maxpad |= (255 - maxpad) >> (sizeof(maxpad) * 8 - 8);
+            maxpad &= 255;
+
+            mask = constant_time_ge(maxpad, pad);
+            ret &= mask;
+            /*
+             * If pad is invalid then we will fail the above test but we must
+             * continue anyway because we are in constant time code. However,
+             * we'll use the maxpad value instead of the supplied pad to make
+             * sure we perform well defined pointer arithmetic.
+             */
+            pad = constant_time_select(mask, pad, maxpad);
+
+            inp_len = len - (SHA256_DIGEST_LENGTH + pad + 1);
+
+            key->aux.tls_aad[plen - 2] = inp_len >> 8;
+            key->aux.tls_aad[plen - 1] = inp_len;
+
+            /* calculate HMAC */
+            key->md = key->head;
+            SHA256_Update(&key->md, key->aux.tls_aad, plen);
+
+# if 1      /* see original reference version in #else */
+            len -= SHA256_DIGEST_LENGTH; /* amend mac */
+            if (len >= (256 + SHA256_CBLOCK)) {
+                j = (len - (256 + SHA256_CBLOCK)) & (0 - SHA256_CBLOCK);
+                j += SHA256_CBLOCK - key->md.num;
+                SHA256_Update(&key->md, out, j);
+                out += j;
+                len -= j;
+                inp_len -= j;
+            }
+
+            /* but pretend as if we hashed padded payload */
+            bitlen = key->md.Nl + (inp_len << 3); /* at most 18 bits */
+#  ifdef BSWAP4
+            bitlen = BSWAP4(bitlen);
+#  else
+            mac.c[0] = 0;
+            mac.c[1] = (unsigned char)(bitlen >> 16);
+            mac.c[2] = (unsigned char)(bitlen >> 8);
+            mac.c[3] = (unsigned char)bitlen;
+            bitlen = mac.u[0];
+#  endif
+
+            pmac->u[0] = 0;
+            pmac->u[1] = 0;
+            pmac->u[2] = 0;
+            pmac->u[3] = 0;
+            pmac->u[4] = 0;
+            pmac->u[5] = 0;
+            pmac->u[6] = 0;
+            pmac->u[7] = 0;
+
+            for (res = key->md.num, j = 0; j < len; j++) {
+                size_t c = out[j];
+                mask = (j - inp_len) >> (sizeof(j) * 8 - 8);
+                c &= mask;
+                c |= 0x80 & ~mask & ~((inp_len - j) >> (sizeof(j) * 8 - 8));
+                data->c[res++] = (unsigned char)c;
+
+                if (res != SHA256_CBLOCK)
+                    continue;
+
+                /* j is not incremented yet */
+                mask = 0 - ((inp_len + 7 - j) >> (sizeof(j) * 8 - 1));
+                data->u[SHA_LBLOCK - 1] |= bitlen & mask;
+                sha256_block_data_order(&key->md, data, 1);
+                mask &= 0 - ((j - inp_len - 72) >> (sizeof(j) * 8 - 1));
+                pmac->u[0] |= key->md.h[0] & mask;
+                pmac->u[1] |= key->md.h[1] & mask;
+                pmac->u[2] |= key->md.h[2] & mask;
+                pmac->u[3] |= key->md.h[3] & mask;
+                pmac->u[4] |= key->md.h[4] & mask;
+                pmac->u[5] |= key->md.h[5] & mask;
+                pmac->u[6] |= key->md.h[6] & mask;
+                pmac->u[7] |= key->md.h[7] & mask;
+                res = 0;
+            }
+
+            for (i = res; i < SHA256_CBLOCK; i++, j++)
+                data->c[i] = 0;
+
+            if (res > SHA256_CBLOCK - 8) {
+                mask = 0 - ((inp_len + 8 - j) >> (sizeof(j) * 8 - 1));
+                data->u[SHA_LBLOCK - 1] |= bitlen & mask;
+                sha256_block_data_order(&key->md, data, 1);
+                mask &= 0 - ((j - inp_len - 73) >> (sizeof(j) * 8 - 1));
+                pmac->u[0] |= key->md.h[0] & mask;
+                pmac->u[1] |= key->md.h[1] & mask;
+                pmac->u[2] |= key->md.h[2] & mask;
+                pmac->u[3] |= key->md.h[3] & mask;
+                pmac->u[4] |= key->md.h[4] & mask;
+                pmac->u[5] |= key->md.h[5] & mask;
+                pmac->u[6] |= key->md.h[6] & mask;
+                pmac->u[7] |= key->md.h[7] & mask;
+
+                memset(data, 0, SHA256_CBLOCK);
+                j += 64;
+            }
+            data->u[SHA_LBLOCK - 1] = bitlen;
+            sha256_block_data_order(&key->md, data, 1);
+            mask = 0 - ((j - inp_len - 73) >> (sizeof(j) * 8 - 1));
+            pmac->u[0] |= key->md.h[0] & mask;
+            pmac->u[1] |= key->md.h[1] & mask;
+            pmac->u[2] |= key->md.h[2] & mask;
+            pmac->u[3] |= key->md.h[3] & mask;
+            pmac->u[4] |= key->md.h[4] & mask;
+            pmac->u[5] |= key->md.h[5] & mask;
+            pmac->u[6] |= key->md.h[6] & mask;
+            pmac->u[7] |= key->md.h[7] & mask;
+
+#  ifdef BSWAP4
+            pmac->u[0] = BSWAP4(pmac->u[0]);
+            pmac->u[1] = BSWAP4(pmac->u[1]);
+            pmac->u[2] = BSWAP4(pmac->u[2]);
+            pmac->u[3] = BSWAP4(pmac->u[3]);
+            pmac->u[4] = BSWAP4(pmac->u[4]);
+            pmac->u[5] = BSWAP4(pmac->u[5]);
+            pmac->u[6] = BSWAP4(pmac->u[6]);
+            pmac->u[7] = BSWAP4(pmac->u[7]);
+#  else
+            for (i = 0; i < 8; i++) {
+                res = pmac->u[i];
+                pmac->c[4 * i + 0] = (unsigned char)(res >> 24);
+                pmac->c[4 * i + 1] = (unsigned char)(res >> 16);
+                pmac->c[4 * i + 2] = (unsigned char)(res >> 8);
+                pmac->c[4 * i + 3] = (unsigned char)res;
+            }
+#  endif
+            len += SHA256_DIGEST_LENGTH;
+# else
+            SHA256_Update(&key->md, out, inp_len);
+            res = key->md.num;
+            SHA256_Final(pmac->c, &key->md);
+
+            {
+                unsigned int inp_blocks, pad_blocks;
+
+                /* but pretend as if we hashed padded payload */
+                inp_blocks =
+                    1 + ((SHA256_CBLOCK - 9 - res) >> (sizeof(res) * 8 - 1));
+                res += (unsigned int)(len - inp_len);
+                pad_blocks = res / SHA256_CBLOCK;
+                res %= SHA256_CBLOCK;
+                pad_blocks +=
+                    1 + ((SHA256_CBLOCK - 9 - res) >> (sizeof(res) * 8 - 1));
+                for (; inp_blocks < pad_blocks; inp_blocks++)
+                    sha1_block_data_order(&key->md, data, 1);
+            }
+# endif      /* pre-lucky-13 reference version of above */
+            key->md = key->tail;
+            SHA256_Update(&key->md, pmac->c, SHA256_DIGEST_LENGTH);
+            SHA256_Final(pmac->c, &key->md);
+
+            /* verify HMAC */
+            out += inp_len;
+            len -= inp_len;
+# if 1      /* see original reference version in #else */
+            {
+                unsigned char *p =
+                    out + len - 1 - maxpad - SHA256_DIGEST_LENGTH;
+                size_t off = out - p;
+                unsigned int c, cmask;
+
+                maxpad += SHA256_DIGEST_LENGTH;
+                for (res = 0, i = 0, j = 0; j < maxpad; j++) {
+                    c = p[j];
+                    cmask =
+                        ((int)(j - off - SHA256_DIGEST_LENGTH)) >>
+                        (sizeof(int) * 8 - 1);
+                    res |= (c ^ pad) & ~cmask; /* ... and padding */
+                    cmask &= ((int)(off - 1 - j)) >> (sizeof(int) * 8 - 1);
+                    res |= (c ^ pmac->c[i]) & cmask;
+                    i += 1 & cmask;
+                }
+                maxpad -= SHA256_DIGEST_LENGTH;
+
+                res = 0 - ((0 - res) >> (sizeof(res) * 8 - 1));
+                ret &= (int)~res;
+            }
+# else      /* pre-lucky-13 reference version of above */
+            for (res = 0, i = 0; i < SHA256_DIGEST_LENGTH; i++)
+                res |= out[i] ^ pmac->c[i];
+            res = 0 - ((0 - res) >> (sizeof(res) * 8 - 1));
+            ret &= (int)~res;
+
+            /* verify padding */
+            pad = (pad & ~res) | (maxpad & res);
+            out = out + len - 1 - pad;
+            for (res = 0, i = 0; i < pad; i++)
+                res |= out[i] ^ pad;
+
+            res = (0 - res) >> (sizeof(res) * 8 - 1);
+            ret &= (int)~res;
+# endif
+            return ret;
+        } else {
+            SHA256_Update(&key->md, out, len);
+        }
+    }
+
+    return 1;
+}
+
+static int aesni_cbc_hmac_sha256_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg,
+                                      void *ptr)
+{
+    EVP_AES_HMAC_SHA256 *key = data(ctx);
+    unsigned int u_arg = (unsigned int)arg;
+
+    switch (type) {
+    case EVP_CTRL_AEAD_SET_MAC_KEY:
+        {
+            unsigned int i;
+            unsigned char hmac_key[64];
+
+            memset(hmac_key, 0, sizeof(hmac_key));
+
+            if (arg < 0)
+                return -1;
+
+            if (u_arg > sizeof(hmac_key)) {
+                SHA256_Init(&key->head);
+                SHA256_Update(&key->head, ptr, arg);
+                SHA256_Final(hmac_key, &key->head);
+            } else {
+                memcpy(hmac_key, ptr, arg);
+            }
+
+            for (i = 0; i < sizeof(hmac_key); i++)
+                hmac_key[i] ^= 0x36; /* ipad */
+            SHA256_Init(&key->head);
+            SHA256_Update(&key->head, hmac_key, sizeof(hmac_key));
+
+            for (i = 0; i < sizeof(hmac_key); i++)
+                hmac_key[i] ^= 0x36 ^ 0x5c; /* opad */
+            SHA256_Init(&key->tail);
+            SHA256_Update(&key->tail, hmac_key, sizeof(hmac_key));
+
+            OPENSSL_cleanse(hmac_key, sizeof(hmac_key));
+
+            return 1;
+        }
+    case EVP_CTRL_AEAD_TLS1_AAD:
+        {
+            unsigned char *p = ptr;
+            unsigned int len;
+
+            if (arg != EVP_AEAD_TLS1_AAD_LEN)
+                return -1;
+
+            len = p[arg - 2] << 8 | p[arg - 1];
+
+            if (EVP_CIPHER_CTX_encrypting(ctx)) {
+                key->payload_length = len;
+                if ((key->aux.tls_ver =
+                     p[arg - 4] << 8 | p[arg - 3]) >= TLS1_1_VERSION) {
+                    if (len < AES_BLOCK_SIZE)
+                        return 0;
+                    len -= AES_BLOCK_SIZE;
+                    p[arg - 2] = len >> 8;
+                    p[arg - 1] = len;
+                }
+                key->md = key->head;
+                SHA256_Update(&key->md, p, arg);
+
+                return (int)(((len + SHA256_DIGEST_LENGTH +
+                               AES_BLOCK_SIZE) & -AES_BLOCK_SIZE)
+                             - len);
+            } else {
+                memcpy(key->aux.tls_aad, ptr, arg);
+                key->payload_length = arg;
+
+                return SHA256_DIGEST_LENGTH;
+            }
+        }
+# if !defined(OPENSSL_NO_MULTIBLOCK)
+    case EVP_CTRL_TLS1_1_MULTIBLOCK_MAX_BUFSIZE:
+        return (int)(5 + 16 + ((arg + 32 + 16) & -16));
+    case EVP_CTRL_TLS1_1_MULTIBLOCK_AAD:
+        {
+            EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM *param =
+                (EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM *) ptr;
+            unsigned int n4x = 1, x4;
+            unsigned int frag, last, packlen, inp_len;
+
+            if (arg < 0)
+                return -1;
+
+            if (u_arg < sizeof(EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM))
+                return -1;
+
+            inp_len = param->inp[11] << 8 | param->inp[12];
+
+            if (EVP_CIPHER_CTX_encrypting(ctx)) {
+                if ((param->inp[9] << 8 | param->inp[10]) < TLS1_1_VERSION)
+                    return -1;
+
+                if (inp_len) {
+                    if (inp_len < 4096)
+                        return 0; /* too short */
+
+                    if (inp_len >= 8192 && OPENSSL_ia32cap_P[2] & (1 << 5))
+                        n4x = 2; /* AVX2 */
+                } else if ((n4x = param->interleave / 4) && n4x <= 2)
+                    inp_len = param->len;
+                else
+                    return -1;
+
+                key->md = key->head;
+                SHA256_Update(&key->md, param->inp, 13);
+
+                x4 = 4 * n4x;
+                n4x += 1;
+
+                frag = inp_len >> n4x;
+                last = inp_len + frag - (frag << n4x);
+                if (last > frag && ((last + 13 + 9) % 64 < (x4 - 1))) {
+                    frag++;
+                    last -= x4 - 1;
+                }
+
+                packlen = 5 + 16 + ((frag + 32 + 16) & -16);
+                packlen = (packlen << n4x) - packlen;
+                packlen += 5 + 16 + ((last + 32 + 16) & -16);
+
+                param->interleave = x4;
+
+                return (int)packlen;
+            } else
+                return -1;      /* not yet */
+        }
+    case EVP_CTRL_TLS1_1_MULTIBLOCK_ENCRYPT:
+        {
+            EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM *param =
+                (EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM *) ptr;
+
+            return (int)tls1_1_multi_block_encrypt(key, param->out,
+                                                   param->inp, param->len,
+                                                   param->interleave / 4);
+        }
+    case EVP_CTRL_TLS1_1_MULTIBLOCK_DECRYPT:
+# endif
+    default:
+        return -1;
+    }
+}
+
+static EVP_CIPHER aesni_128_cbc_hmac_sha256_cipher = {
+# ifdef NID_aes_128_cbc_hmac_sha256
+    NID_aes_128_cbc_hmac_sha256,
+# else
+    NID_undef,
+# endif
+    AES_BLOCK_SIZE, 16, AES_BLOCK_SIZE,
+    EVP_CIPH_CBC_MODE | EVP_CIPH_FLAG_DEFAULT_ASN1 |
+        EVP_CIPH_FLAG_AEAD_CIPHER | EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK,
+    aesni_cbc_hmac_sha256_init_key,
+    aesni_cbc_hmac_sha256_cipher,
+    NULL,
+    sizeof(EVP_AES_HMAC_SHA256),
+    EVP_CIPH_FLAG_DEFAULT_ASN1 ? NULL : EVP_CIPHER_set_asn1_iv,
+    EVP_CIPH_FLAG_DEFAULT_ASN1 ? NULL : EVP_CIPHER_get_asn1_iv,
+    aesni_cbc_hmac_sha256_ctrl,
+    NULL
+};
+
+static EVP_CIPHER aesni_256_cbc_hmac_sha256_cipher = {
+# ifdef NID_aes_256_cbc_hmac_sha256
+    NID_aes_256_cbc_hmac_sha256,
+# else
+    NID_undef,
+# endif
+    AES_BLOCK_SIZE, 32, AES_BLOCK_SIZE,
+    EVP_CIPH_CBC_MODE | EVP_CIPH_FLAG_DEFAULT_ASN1 |
+        EVP_CIPH_FLAG_AEAD_CIPHER | EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK,
+    aesni_cbc_hmac_sha256_init_key,
+    aesni_cbc_hmac_sha256_cipher,
+    NULL,
+    sizeof(EVP_AES_HMAC_SHA256),
+    EVP_CIPH_FLAG_DEFAULT_ASN1 ? NULL : EVP_CIPHER_set_asn1_iv,
+    EVP_CIPH_FLAG_DEFAULT_ASN1 ? NULL : EVP_CIPHER_get_asn1_iv,
+    aesni_cbc_hmac_sha256_ctrl,
+    NULL
+};
+
+const EVP_CIPHER *EVP_aes_128_cbc_hmac_sha256(void)
+{
+    return ((OPENSSL_ia32cap_P[1] & AESNI_CAPABLE) &&
+            aesni_cbc_sha256_enc(NULL, NULL, 0, NULL, NULL, NULL, NULL) ?
+            &aesni_128_cbc_hmac_sha256_cipher : NULL);
+}
+
+const EVP_CIPHER *EVP_aes_256_cbc_hmac_sha256(void)
+{
+    return ((OPENSSL_ia32cap_P[1] & AESNI_CAPABLE) &&
+            aesni_cbc_sha256_enc(NULL, NULL, 0, NULL, NULL, NULL, NULL) ?
+            &aesni_256_cbc_hmac_sha256_cipher : NULL);
+}
+#else
+const EVP_CIPHER *EVP_aes_128_cbc_hmac_sha256(void)
+{
+    return NULL;
+}
+
+const EVP_CIPHER *EVP_aes_256_cbc_hmac_sha256(void)
+{
+    return NULL;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_aria.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_aria.c
new file mode 100644
index 000000000..81c8a7eaf
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_aria.c
@@ -0,0 +1,756 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2017, Oracle and/or its affiliates.  All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#ifndef OPENSSL_NO_ARIA
+# include <openssl/evp.h>
+# include <openssl/modes.h>
+# include <openssl/rand.h>
+# include <openssl/rand_drbg.h>
+# include "internal/aria.h"
+# include "internal/evp_int.h"
+# include "modes_lcl.h"
+# include "evp_locl.h"
+
+/* ARIA subkey Structure */
+typedef struct {
+    ARIA_KEY ks;
+} EVP_ARIA_KEY;
+
+/* ARIA GCM context */
+typedef struct {
+    union {
+        double align;
+        ARIA_KEY ks;
+    } ks;                       /* ARIA subkey to use */
+    int key_set;                /* Set if key initialised */
+    int iv_set;                 /* Set if an iv is set */
+    GCM128_CONTEXT gcm;
+    unsigned char *iv;          /* Temporary IV store */
+    int ivlen;                  /* IV length */
+    int taglen;
+    int iv_gen;                 /* It is OK to generate IVs */
+    int tls_aad_len;            /* TLS AAD length */
+} EVP_ARIA_GCM_CTX;
+
+/* ARIA CCM context */
+typedef struct {
+    union {
+        double align;
+        ARIA_KEY ks;
+    } ks;                       /* ARIA key schedule to use */
+    int key_set;                /* Set if key initialised */
+    int iv_set;                 /* Set if an iv is set */
+    int tag_set;                /* Set if tag is valid */
+    int len_set;                /* Set if message length set */
+    int L, M;                   /* L and M parameters from RFC3610 */
+    int tls_aad_len;            /* TLS AAD length */
+    CCM128_CONTEXT ccm;
+    ccm128_f str;
+} EVP_ARIA_CCM_CTX;
+
+/* The subkey for ARIA is generated. */
+static int aria_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                            const unsigned char *iv, int enc)
+{
+    int ret;
+    int mode = EVP_CIPHER_CTX_mode(ctx);
+
+    if (enc || (mode != EVP_CIPH_ECB_MODE && mode != EVP_CIPH_CBC_MODE))
+        ret = aria_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                        EVP_CIPHER_CTX_get_cipher_data(ctx));
+    else
+        ret = aria_set_decrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                        EVP_CIPHER_CTX_get_cipher_data(ctx));
+    if (ret < 0) {
+        EVPerr(EVP_F_ARIA_INIT_KEY,EVP_R_ARIA_KEY_SETUP_FAILED);
+        return 0;
+    }
+    return 1;
+}
+
+static void aria_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t len, const ARIA_KEY *key,
+                             unsigned char *ivec, const int enc)
+{
+
+    if (enc)
+        CRYPTO_cbc128_encrypt(in, out, len, key, ivec,
+                              (block128_f) aria_encrypt);
+    else
+        CRYPTO_cbc128_decrypt(in, out, len, key, ivec,
+                              (block128_f) aria_encrypt);
+}
+
+static void aria_cfb128_encrypt(const unsigned char *in, unsigned char *out,
+                                size_t length, const ARIA_KEY *key,
+                                unsigned char *ivec, int *num, const int enc)
+{
+
+    CRYPTO_cfb128_encrypt(in, out, length, key, ivec, num, enc,
+                          (block128_f) aria_encrypt);
+}
+
+static void aria_cfb1_encrypt(const unsigned char *in, unsigned char *out,
+                              size_t length, const ARIA_KEY *key,
+                              unsigned char *ivec, int *num, const int enc)
+{
+    CRYPTO_cfb128_1_encrypt(in, out, length, key, ivec, num, enc,
+                            (block128_f) aria_encrypt);
+}
+
+static void aria_cfb8_encrypt(const unsigned char *in, unsigned char *out,
+                              size_t length, const ARIA_KEY *key,
+                              unsigned char *ivec, int *num, const int enc)
+{
+    CRYPTO_cfb128_8_encrypt(in, out, length, key, ivec, num, enc,
+                            (block128_f) aria_encrypt);
+}
+
+static void aria_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                             const ARIA_KEY *key, const int enc)
+{
+    aria_encrypt(in, out, key);
+}
+
+static void aria_ofb128_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t length, const ARIA_KEY *key,
+                             unsigned char *ivec, int *num)
+{
+    CRYPTO_ofb128_encrypt(in, out, length, key, ivec, num,
+                         (block128_f) aria_encrypt);
+}
+
+IMPLEMENT_BLOCK_CIPHER(aria_128, ks, aria, EVP_ARIA_KEY,
+                        NID_aria_128, 16, 16, 16, 128,
+                        0, aria_init_key, NULL,
+                        EVP_CIPHER_set_asn1_iv,
+                        EVP_CIPHER_get_asn1_iv,
+                        NULL)
+IMPLEMENT_BLOCK_CIPHER(aria_192, ks, aria, EVP_ARIA_KEY,
+                        NID_aria_192, 16, 24, 16, 128,
+                        0, aria_init_key, NULL,
+                        EVP_CIPHER_set_asn1_iv,
+                        EVP_CIPHER_get_asn1_iv,
+                        NULL)
+IMPLEMENT_BLOCK_CIPHER(aria_256, ks, aria, EVP_ARIA_KEY,
+                        NID_aria_256, 16, 32, 16, 128,
+                        0, aria_init_key, NULL,
+                        EVP_CIPHER_set_asn1_iv,
+                        EVP_CIPHER_get_asn1_iv,
+                        NULL)
+
+# define IMPLEMENT_ARIA_CFBR(ksize,cbits) \
+                IMPLEMENT_CFBR(aria,aria,EVP_ARIA_KEY,ks,ksize,cbits,16,0)
+IMPLEMENT_ARIA_CFBR(128,1)
+IMPLEMENT_ARIA_CFBR(192,1)
+IMPLEMENT_ARIA_CFBR(256,1)
+IMPLEMENT_ARIA_CFBR(128,8)
+IMPLEMENT_ARIA_CFBR(192,8)
+IMPLEMENT_ARIA_CFBR(256,8)
+
+# define BLOCK_CIPHER_generic(nid,keylen,blocksize,ivlen,nmode,mode,MODE,flags) \
+static const EVP_CIPHER aria_##keylen##_##mode = { \
+        nid##_##keylen##_##nmode,blocksize,keylen/8,ivlen, \
+        flags|EVP_CIPH_##MODE##_MODE,   \
+        aria_init_key,                  \
+        aria_##mode##_cipher,           \
+        NULL,                           \
+        sizeof(EVP_ARIA_KEY),           \
+        NULL,NULL,NULL,NULL };          \
+const EVP_CIPHER *EVP_aria_##keylen##_##mode(void) \
+{ return &aria_##keylen##_##mode; }
+
+static int aria_ctr_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                               const unsigned char *in, size_t len)
+{
+    unsigned int num = EVP_CIPHER_CTX_num(ctx);
+    EVP_ARIA_KEY *dat = EVP_C_DATA(EVP_ARIA_KEY,ctx);
+
+    CRYPTO_ctr128_encrypt(in, out, len, &dat->ks,
+                          EVP_CIPHER_CTX_iv_noconst(ctx),
+                          EVP_CIPHER_CTX_buf_noconst(ctx), &num,
+                          (block128_f) aria_encrypt);
+    EVP_CIPHER_CTX_set_num(ctx, num);
+    return 1;
+}
+
+BLOCK_CIPHER_generic(NID_aria, 128, 1, 16, ctr, ctr, CTR, 0)
+BLOCK_CIPHER_generic(NID_aria, 192, 1, 16, ctr, ctr, CTR, 0)
+BLOCK_CIPHER_generic(NID_aria, 256, 1, 16, ctr, ctr, CTR, 0)
+
+/* Authenticated cipher modes (GCM/CCM) */
+
+/* increment counter (64-bit int) by 1 */
+static void ctr64_inc(unsigned char *counter)
+{
+    int n = 8;
+    unsigned char c;
+
+    do {
+        --n;
+        c = counter[n];
+        ++c;
+        counter[n] = c;
+        if (c)
+            return;
+    } while (n);
+}
+
+static int aria_gcm_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                                 const unsigned char *iv, int enc)
+{
+    int ret;
+    EVP_ARIA_GCM_CTX *gctx = EVP_C_DATA(EVP_ARIA_GCM_CTX,ctx);
+
+    if (!iv && !key)
+        return 1;
+    if (key) {
+        ret = aria_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                   &gctx->ks.ks);
+        CRYPTO_gcm128_init(&gctx->gcm, &gctx->ks,
+                           (block128_f) aria_encrypt);
+        if (ret < 0) {
+            EVPerr(EVP_F_ARIA_GCM_INIT_KEY,EVP_R_ARIA_KEY_SETUP_FAILED);
+            return 0;
+        }
+
+        /*
+         * If we have an iv can set it directly, otherwise use saved IV.
+         */
+        if (iv == NULL && gctx->iv_set)
+            iv = gctx->iv;
+        if (iv) {
+            CRYPTO_gcm128_setiv(&gctx->gcm, iv, gctx->ivlen);
+            gctx->iv_set = 1;
+        }
+        gctx->key_set = 1;
+    } else {
+        /* If key set use IV, otherwise copy */
+        if (gctx->key_set)
+            CRYPTO_gcm128_setiv(&gctx->gcm, iv, gctx->ivlen);
+        else
+            memcpy(gctx->iv, iv, gctx->ivlen);
+        gctx->iv_set = 1;
+        gctx->iv_gen = 0;
+    }
+    return 1;
+}
+
+static int aria_gcm_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
+{
+    EVP_ARIA_GCM_CTX *gctx = EVP_C_DATA(EVP_ARIA_GCM_CTX,c);
+
+    switch (type) {
+    case EVP_CTRL_INIT:
+        gctx->key_set = 0;
+        gctx->iv_set = 0;
+        gctx->ivlen = EVP_CIPHER_CTX_iv_length(c);
+        gctx->iv = EVP_CIPHER_CTX_iv_noconst(c);
+        gctx->taglen = -1;
+        gctx->iv_gen = 0;
+        gctx->tls_aad_len = -1;
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_IVLEN:
+        if (arg <= 0)
+            return 0;
+        /* Allocate memory for IV if needed */
+        if ((arg > EVP_MAX_IV_LENGTH) && (arg > gctx->ivlen)) {
+            if (gctx->iv != EVP_CIPHER_CTX_iv_noconst(c))
+                OPENSSL_free(gctx->iv);
+            if ((gctx->iv = OPENSSL_malloc(arg)) == NULL) {
+                EVPerr(EVP_F_ARIA_GCM_CTRL, ERR_R_MALLOC_FAILURE);
+                return 0;
+            }
+        }
+        gctx->ivlen = arg;
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_TAG:
+        if (arg <= 0 || arg > 16 || EVP_CIPHER_CTX_encrypting(c))
+            return 0;
+        memcpy(EVP_CIPHER_CTX_buf_noconst(c), ptr, arg);
+        gctx->taglen = arg;
+        return 1;
+
+    case EVP_CTRL_AEAD_GET_TAG:
+        if (arg <= 0 || arg > 16 || !EVP_CIPHER_CTX_encrypting(c)
+            || gctx->taglen < 0)
+            return 0;
+        memcpy(ptr, EVP_CIPHER_CTX_buf_noconst(c), arg);
+        return 1;
+
+    case EVP_CTRL_GCM_SET_IV_FIXED:
+        /* Special case: -1 length restores whole IV */
+        if (arg == -1) {
+            memcpy(gctx->iv, ptr, gctx->ivlen);
+            gctx->iv_gen = 1;
+            return 1;
+        }
+        /*
+         * Fixed field must be at least 4 bytes and invocation field at least
+         * 8.
+         */
+        if ((arg < 4) || (gctx->ivlen - arg) < 8)
+            return 0;
+        if (arg)
+            memcpy(gctx->iv, ptr, arg);
+        if (EVP_CIPHER_CTX_encrypting(c)
+            && RAND_bytes(gctx->iv + arg, gctx->ivlen - arg) <= 0)
+            return 0;
+        gctx->iv_gen = 1;
+        return 1;
+
+    case EVP_CTRL_GCM_IV_GEN:
+        if (gctx->iv_gen == 0 || gctx->key_set == 0)
+            return 0;
+        CRYPTO_gcm128_setiv(&gctx->gcm, gctx->iv, gctx->ivlen);
+        if (arg <= 0 || arg > gctx->ivlen)
+            arg = gctx->ivlen;
+        memcpy(ptr, gctx->iv + gctx->ivlen - arg, arg);
+        /*
+         * Invocation field will be at least 8 bytes in size and so no need
+         * to check wrap around or increment more than last 8 bytes.
+         */
+        ctr64_inc(gctx->iv + gctx->ivlen - 8);
+        gctx->iv_set = 1;
+        return 1;
+
+    case EVP_CTRL_GCM_SET_IV_INV:
+        if (gctx->iv_gen == 0 || gctx->key_set == 0
+            || EVP_CIPHER_CTX_encrypting(c))
+            return 0;
+        memcpy(gctx->iv + gctx->ivlen - arg, ptr, arg);
+        CRYPTO_gcm128_setiv(&gctx->gcm, gctx->iv, gctx->ivlen);
+        gctx->iv_set = 1;
+        return 1;
+
+    case EVP_CTRL_AEAD_TLS1_AAD:
+        /* Save the AAD for later use */
+        if (arg != EVP_AEAD_TLS1_AAD_LEN)
+            return 0;
+        memcpy(EVP_CIPHER_CTX_buf_noconst(c), ptr, arg);
+        gctx->tls_aad_len = arg;
+        {
+            unsigned int len =
+                EVP_CIPHER_CTX_buf_noconst(c)[arg - 2] << 8
+                | EVP_CIPHER_CTX_buf_noconst(c)[arg - 1];
+            /* Correct length for explicit IV */
+            if (len < EVP_GCM_TLS_EXPLICIT_IV_LEN)
+                return 0;
+            len -= EVP_GCM_TLS_EXPLICIT_IV_LEN;
+            /* If decrypting correct for tag too */
+            if (!EVP_CIPHER_CTX_encrypting(c)) {
+                if (len < EVP_GCM_TLS_TAG_LEN)
+                    return 0;
+                len -= EVP_GCM_TLS_TAG_LEN;
+            }
+            EVP_CIPHER_CTX_buf_noconst(c)[arg - 2] = len >> 8;
+            EVP_CIPHER_CTX_buf_noconst(c)[arg - 1] = len & 0xff;
+        }
+        /* Extra padding: tag appended to record */
+        return EVP_GCM_TLS_TAG_LEN;
+
+    case EVP_CTRL_COPY:
+        {
+            EVP_CIPHER_CTX *out = ptr;
+            EVP_ARIA_GCM_CTX *gctx_out = EVP_C_DATA(EVP_ARIA_GCM_CTX,out);
+            if (gctx->gcm.key) {
+                if (gctx->gcm.key != &gctx->ks)
+                    return 0;
+                gctx_out->gcm.key = &gctx_out->ks;
+            }
+            if (gctx->iv == EVP_CIPHER_CTX_iv_noconst(c))
+                gctx_out->iv = EVP_CIPHER_CTX_iv_noconst(out);
+            else {
+                if ((gctx_out->iv = OPENSSL_malloc(gctx->ivlen)) == NULL) {
+                    EVPerr(EVP_F_ARIA_GCM_CTRL, ERR_R_MALLOC_FAILURE);
+                    return 0;
+                }
+                memcpy(gctx_out->iv, gctx->iv, gctx->ivlen);
+            }
+            return 1;
+        }
+
+    default:
+        return -1;
+
+    }
+}
+
+static int aria_gcm_tls_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                              const unsigned char *in, size_t len)
+{
+    EVP_ARIA_GCM_CTX *gctx = EVP_C_DATA(EVP_ARIA_GCM_CTX,ctx);
+    int rv = -1;
+
+    /* Encrypt/decrypt must be performed in place */
+    if (out != in
+        || len < (EVP_GCM_TLS_EXPLICIT_IV_LEN + EVP_GCM_TLS_TAG_LEN))
+        return -1;
+    /*
+     * Set IV from start of buffer or generate IV and write to start of
+     * buffer.
+     */
+    if (EVP_CIPHER_CTX_ctrl(ctx, EVP_CIPHER_CTX_encrypting(ctx) ?
+                            EVP_CTRL_GCM_IV_GEN : EVP_CTRL_GCM_SET_IV_INV,
+                            EVP_GCM_TLS_EXPLICIT_IV_LEN, out) <= 0)
+        goto err;
+    /* Use saved AAD */
+    if (CRYPTO_gcm128_aad(&gctx->gcm, EVP_CIPHER_CTX_buf_noconst(ctx),
+                          gctx->tls_aad_len))
+        goto err;
+    /* Fix buffer and length to point to payload */
+    in += EVP_GCM_TLS_EXPLICIT_IV_LEN;
+    out += EVP_GCM_TLS_EXPLICIT_IV_LEN;
+    len -= EVP_GCM_TLS_EXPLICIT_IV_LEN + EVP_GCM_TLS_TAG_LEN;
+    if (EVP_CIPHER_CTX_encrypting(ctx)) {
+        /* Encrypt payload */
+        if (CRYPTO_gcm128_encrypt(&gctx->gcm, in, out, len))
+            goto err;
+        out += len;
+        /* Finally write tag */
+        CRYPTO_gcm128_tag(&gctx->gcm, out, EVP_GCM_TLS_TAG_LEN);
+        rv = len + EVP_GCM_TLS_EXPLICIT_IV_LEN + EVP_GCM_TLS_TAG_LEN;
+    } else {
+        /* Decrypt */
+        if (CRYPTO_gcm128_decrypt(&gctx->gcm, in, out, len))
+            goto err;
+        /* Retrieve tag */
+        CRYPTO_gcm128_tag(&gctx->gcm, EVP_CIPHER_CTX_buf_noconst(ctx),
+                          EVP_GCM_TLS_TAG_LEN);
+        /* If tag mismatch wipe buffer */
+        if (CRYPTO_memcmp(EVP_CIPHER_CTX_buf_noconst(ctx), in + len,
+                          EVP_GCM_TLS_TAG_LEN)) {
+            OPENSSL_cleanse(out, len);
+            goto err;
+        }
+        rv = len;
+    }
+
+ err:
+    gctx->iv_set = 0;
+    gctx->tls_aad_len = -1;
+    return rv;
+}
+
+static int aria_gcm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                          const unsigned char *in, size_t len)
+{
+    EVP_ARIA_GCM_CTX *gctx = EVP_C_DATA(EVP_ARIA_GCM_CTX,ctx);
+
+    /* If not set up, return error */
+    if (!gctx->key_set)
+        return -1;
+
+    if (gctx->tls_aad_len >= 0)
+        return aria_gcm_tls_cipher(ctx, out, in, len);
+
+    if (!gctx->iv_set)
+        return -1;
+    if (in) {
+        if (out == NULL) {
+            if (CRYPTO_gcm128_aad(&gctx->gcm, in, len))
+                return -1;
+        } else if (EVP_CIPHER_CTX_encrypting(ctx)) {
+            if (CRYPTO_gcm128_encrypt(&gctx->gcm, in, out, len))
+                return -1;
+        } else {
+            if (CRYPTO_gcm128_decrypt(&gctx->gcm, in, out, len))
+                return -1;
+        }
+        return len;
+    }
+    if (!EVP_CIPHER_CTX_encrypting(ctx)) {
+        if (gctx->taglen < 0)
+            return -1;
+        if (CRYPTO_gcm128_finish(&gctx->gcm,
+                                 EVP_CIPHER_CTX_buf_noconst(ctx),
+                                 gctx->taglen) != 0)
+            return -1;
+        gctx->iv_set = 0;
+        return 0;
+    }
+    CRYPTO_gcm128_tag(&gctx->gcm, EVP_CIPHER_CTX_buf_noconst(ctx), 16);
+    gctx->taglen = 16;
+    /* Don't reuse the IV */
+    gctx->iv_set = 0;
+    return 0;
+}
+
+static int aria_ccm_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                            const unsigned char *iv, int enc)
+{
+    int ret;
+    EVP_ARIA_CCM_CTX *cctx = EVP_C_DATA(EVP_ARIA_CCM_CTX,ctx);
+
+    if (!iv && !key)
+        return 1;
+
+    if (key) {
+        ret = aria_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8,
+                                   &cctx->ks.ks);
+        CRYPTO_ccm128_init(&cctx->ccm, cctx->M, cctx->L,
+                           &cctx->ks, (block128_f) aria_encrypt);
+        if (ret < 0) {
+            EVPerr(EVP_F_ARIA_CCM_INIT_KEY,EVP_R_ARIA_KEY_SETUP_FAILED);
+            return 0;
+        }
+        cctx->str = NULL;
+        cctx->key_set = 1;
+    }
+    if (iv) {
+        memcpy(EVP_CIPHER_CTX_iv_noconst(ctx), iv, 15 - cctx->L);
+        cctx->iv_set = 1;
+    }
+    return 1;
+}
+
+static int aria_ccm_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
+{
+    EVP_ARIA_CCM_CTX *cctx = EVP_C_DATA(EVP_ARIA_CCM_CTX,c);
+
+    switch (type) {
+    case EVP_CTRL_INIT:
+        cctx->key_set = 0;
+        cctx->iv_set = 0;
+        cctx->L = 8;
+        cctx->M = 12;
+        cctx->tag_set = 0;
+        cctx->len_set = 0;
+        cctx->tls_aad_len = -1;
+        return 1;
+
+    case EVP_CTRL_AEAD_TLS1_AAD:
+        /* Save the AAD for later use */
+        if (arg != EVP_AEAD_TLS1_AAD_LEN)
+            return 0;
+        memcpy(EVP_CIPHER_CTX_buf_noconst(c), ptr, arg);
+        cctx->tls_aad_len = arg;
+        {
+            uint16_t len =
+                EVP_CIPHER_CTX_buf_noconst(c)[arg - 2] << 8
+                | EVP_CIPHER_CTX_buf_noconst(c)[arg - 1];
+            /* Correct length for explicit IV */
+            if (len < EVP_CCM_TLS_EXPLICIT_IV_LEN)
+                return 0;
+            len -= EVP_CCM_TLS_EXPLICIT_IV_LEN;
+            /* If decrypting correct for tag too */
+            if (!EVP_CIPHER_CTX_encrypting(c)) {
+                if (len < cctx->M)
+                    return 0;
+                len -= cctx->M;
+            }
+            EVP_CIPHER_CTX_buf_noconst(c)[arg - 2] = len >> 8;
+            EVP_CIPHER_CTX_buf_noconst(c)[arg - 1] = len & 0xff;
+        }
+        /* Extra padding: tag appended to record */
+        return cctx->M;
+
+    case EVP_CTRL_CCM_SET_IV_FIXED:
+        /* Sanity check length */
+        if (arg != EVP_CCM_TLS_FIXED_IV_LEN)
+            return 0;
+        /* Just copy to first part of IV */
+        memcpy(EVP_CIPHER_CTX_iv_noconst(c), ptr, arg);
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_IVLEN:
+        arg = 15 - arg;
+        /* fall thru */
+    case EVP_CTRL_CCM_SET_L:
+        if (arg < 2 || arg > 8)
+            return 0;
+        cctx->L = arg;
+        return 1;
+    case EVP_CTRL_AEAD_SET_TAG:
+        if ((arg & 1) || arg < 4 || arg > 16)
+            return 0;
+        if (EVP_CIPHER_CTX_encrypting(c) && ptr)
+            return 0;
+        if (ptr) {
+            cctx->tag_set = 1;
+            memcpy(EVP_CIPHER_CTX_buf_noconst(c), ptr, arg);
+        }
+        cctx->M = arg;
+        return 1;
+
+    case EVP_CTRL_AEAD_GET_TAG:
+        if (!EVP_CIPHER_CTX_encrypting(c) || !cctx->tag_set)
+            return 0;
+        if (!CRYPTO_ccm128_tag(&cctx->ccm, ptr, (size_t)arg))
+            return 0;
+        cctx->tag_set = 0;
+        cctx->iv_set = 0;
+        cctx->len_set = 0;
+        return 1;
+
+    case EVP_CTRL_COPY:
+        {
+            EVP_CIPHER_CTX *out = ptr;
+            EVP_ARIA_CCM_CTX *cctx_out = EVP_C_DATA(EVP_ARIA_CCM_CTX,out);
+            if (cctx->ccm.key) {
+                if (cctx->ccm.key != &cctx->ks)
+                    return 0;
+                cctx_out->ccm.key = &cctx_out->ks;
+            }
+            return 1;
+        }
+
+    default:
+        return -1;
+    }
+}
+
+static int aria_ccm_tls_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                              const unsigned char *in, size_t len)
+{
+    EVP_ARIA_CCM_CTX *cctx = EVP_C_DATA(EVP_ARIA_CCM_CTX,ctx);
+    CCM128_CONTEXT *ccm = &cctx->ccm;
+
+    /* Encrypt/decrypt must be performed in place */
+    if (out != in || len < (EVP_CCM_TLS_EXPLICIT_IV_LEN + (size_t)cctx->M))
+        return -1;
+    /* If encrypting set explicit IV from sequence number (start of AAD) */
+    if (EVP_CIPHER_CTX_encrypting(ctx))
+        memcpy(out, EVP_CIPHER_CTX_buf_noconst(ctx),
+               EVP_CCM_TLS_EXPLICIT_IV_LEN);
+    /* Get rest of IV from explicit IV */
+    memcpy(EVP_CIPHER_CTX_iv_noconst(ctx) + EVP_CCM_TLS_FIXED_IV_LEN, in,
+           EVP_CCM_TLS_EXPLICIT_IV_LEN);
+    /* Correct length value */
+    len -= EVP_CCM_TLS_EXPLICIT_IV_LEN + cctx->M;
+    if (CRYPTO_ccm128_setiv(ccm, EVP_CIPHER_CTX_iv_noconst(ctx), 15 - cctx->L,
+                            len))
+            return -1;
+    /* Use saved AAD */
+    CRYPTO_ccm128_aad(ccm, EVP_CIPHER_CTX_buf_noconst(ctx), cctx->tls_aad_len);
+    /* Fix buffer to point to payload */
+    in += EVP_CCM_TLS_EXPLICIT_IV_LEN;
+    out += EVP_CCM_TLS_EXPLICIT_IV_LEN;
+    if (EVP_CIPHER_CTX_encrypting(ctx)) {
+        if (cctx->str ? CRYPTO_ccm128_encrypt_ccm64(ccm, in, out, len, cctx->str)
+                      : CRYPTO_ccm128_encrypt(ccm, in, out, len))
+            return -1;
+        if (!CRYPTO_ccm128_tag(ccm, out + len, cctx->M))
+            return -1;
+        return len + EVP_CCM_TLS_EXPLICIT_IV_LEN + cctx->M;
+    } else {
+        if (cctx->str ? !CRYPTO_ccm128_decrypt_ccm64(ccm, in, out, len, cctx->str)
+                      : !CRYPTO_ccm128_decrypt(ccm, in, out, len)) {
+            unsigned char tag[16];
+            if (CRYPTO_ccm128_tag(ccm, tag, cctx->M)) {
+                if (!CRYPTO_memcmp(tag, in + len, cctx->M))
+                    return len;
+            }
+        }
+        OPENSSL_cleanse(out, len);
+        return -1;
+    }
+}
+
+static int aria_ccm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                          const unsigned char *in, size_t len)
+{
+    EVP_ARIA_CCM_CTX *cctx = EVP_C_DATA(EVP_ARIA_CCM_CTX,ctx);
+    CCM128_CONTEXT *ccm = &cctx->ccm;
+
+    /* If not set up, return error */
+    if (!cctx->key_set)
+        return -1;
+
+    if (cctx->tls_aad_len >= 0)
+        return aria_ccm_tls_cipher(ctx, out, in, len);
+
+    /* EVP_*Final() doesn't return any data */
+    if (in == NULL && out != NULL)
+        return 0;
+
+    if (!cctx->iv_set)
+        return -1;
+
+    if (!EVP_CIPHER_CTX_encrypting(ctx) && !cctx->tag_set)
+        return -1;
+    if (!out) {
+        if (!in) {
+            if (CRYPTO_ccm128_setiv(ccm, EVP_CIPHER_CTX_iv_noconst(ctx),
+                                    15 - cctx->L, len))
+                return -1;
+            cctx->len_set = 1;
+            return len;
+        }
+        /* If have AAD need message length */
+        if (!cctx->len_set && len)
+            return -1;
+        CRYPTO_ccm128_aad(ccm, in, len);
+        return len;
+    }
+    /* If not set length yet do it */
+    if (!cctx->len_set) {
+        if (CRYPTO_ccm128_setiv(ccm, EVP_CIPHER_CTX_iv_noconst(ctx),
+                                15 - cctx->L, len))
+            return -1;
+        cctx->len_set = 1;
+    }
+    if (EVP_CIPHER_CTX_encrypting(ctx)) {
+        if (cctx->str ? CRYPTO_ccm128_encrypt_ccm64(ccm, in, out, len, cctx->str)
+                      : CRYPTO_ccm128_encrypt(ccm, in, out, len))
+            return -1;
+        cctx->tag_set = 1;
+        return len;
+    } else {
+        int rv = -1;
+        if (cctx->str ? !CRYPTO_ccm128_decrypt_ccm64(ccm, in, out, len,
+                                                     cctx->str) :
+            !CRYPTO_ccm128_decrypt(ccm, in, out, len)) {
+            unsigned char tag[16];
+            if (CRYPTO_ccm128_tag(ccm, tag, cctx->M)) {
+                if (!CRYPTO_memcmp(tag, EVP_CIPHER_CTX_buf_noconst(ctx),
+                                   cctx->M))
+                    rv = len;
+            }
+        }
+        if (rv == -1)
+            OPENSSL_cleanse(out, len);
+        cctx->iv_set = 0;
+        cctx->tag_set = 0;
+        cctx->len_set = 0;
+        return rv;
+    }
+}
+
+#define ARIA_AUTH_FLAGS  (EVP_CIPH_FLAG_DEFAULT_ASN1 \
+                          | EVP_CIPH_CUSTOM_IV | EVP_CIPH_FLAG_CUSTOM_CIPHER \
+                          | EVP_CIPH_ALWAYS_CALL_INIT | EVP_CIPH_CTRL_INIT \
+                          | EVP_CIPH_CUSTOM_COPY | EVP_CIPH_FLAG_AEAD_CIPHER)
+
+#define BLOCK_CIPHER_aead(nid,keylen,blocksize,ivlen,nmode,mode,MODE,flags) \
+static const EVP_CIPHER aria_##keylen##_##mode = { \
+        nid##_##keylen##_##nmode,                  \
+        blocksize, keylen/8, ivlen,                \
+        ARIA_AUTH_FLAGS|EVP_CIPH_##MODE##_MODE,    \
+        aria_##mode##_init_key,                    \
+        aria_##mode##_cipher,                      \
+        NULL,                                      \
+        sizeof(EVP_ARIA_##MODE##_CTX),             \
+        NULL,NULL,aria_##mode##_ctrl,NULL };       \
+const EVP_CIPHER *EVP_aria_##keylen##_##mode(void) \
+{ return (EVP_CIPHER*)&aria_##keylen##_##mode; }
+
+BLOCK_CIPHER_aead(NID_aria, 128, 1, 12, gcm, gcm, GCM, 0)
+BLOCK_CIPHER_aead(NID_aria, 192, 1, 12, gcm, gcm, GCM, 0)
+BLOCK_CIPHER_aead(NID_aria, 256, 1, 12, gcm, gcm, GCM, 0)
+
+BLOCK_CIPHER_aead(NID_aria, 128, 1, 12, ccm, ccm, CCM, 0)
+BLOCK_CIPHER_aead(NID_aria, 192, 1, 12, ccm, ccm, CCM, 0)
+BLOCK_CIPHER_aead(NID_aria, 256, 1, 12, ccm, ccm, CCM, 0)
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_bf.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_bf.c
new file mode 100644
index 000000000..dc386905c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_bf.c
@@ -0,0 +1,38 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#ifndef OPENSSL_NO_BF
+# include <openssl/evp.h>
+# include "internal/evp_int.h"
+# include <openssl/objects.h>
+# include <openssl/blowfish.h>
+
+static int bf_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                       const unsigned char *iv, int enc);
+
+typedef struct {
+    BF_KEY ks;
+} EVP_BF_KEY;
+
+# define data(ctx)       EVP_C_DATA(EVP_BF_KEY,ctx)
+
+IMPLEMENT_BLOCK_CIPHER(bf, ks, BF, EVP_BF_KEY, NID_bf, 8, 16, 8, 64,
+                       EVP_CIPH_VARIABLE_LENGTH, bf_init_key, NULL,
+                       EVP_CIPHER_set_asn1_iv, EVP_CIPHER_get_asn1_iv, NULL)
+
+static int bf_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                       const unsigned char *iv, int enc)
+{
+    BF_set_key(&data(ctx)->ks, EVP_CIPHER_CTX_key_length(ctx), key);
+    return 1;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_camellia.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_camellia.c
new file mode 100644
index 000000000..2df4a6e3e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_camellia.c
@@ -0,0 +1,366 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_CAMELLIA
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <openssl/evp.h>
+# include <openssl/err.h>
+# include <string.h>
+# include <assert.h>
+# include <openssl/camellia.h>
+# include "internal/evp_int.h"
+# include "modes_lcl.h"
+
+static int camellia_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                             const unsigned char *iv, int enc);
+
+/* Camellia subkey Structure */
+typedef struct {
+    CAMELLIA_KEY ks;
+    block128_f block;
+    union {
+        cbc128_f cbc;
+        ctr128_f ctr;
+    } stream;
+} EVP_CAMELLIA_KEY;
+
+# define MAXBITCHUNK     ((size_t)1<<(sizeof(size_t)*8-4))
+
+/* Attribute operation for Camellia */
+# define data(ctx)       EVP_C_DATA(EVP_CAMELLIA_KEY,ctx)
+
+# if defined(AES_ASM) && (defined(__sparc) || defined(__sparc__))
+/* ---------^^^ this is not a typo, just a way to detect that
+ * assembler support was in general requested... */
+#  include "sparc_arch.h"
+
+extern unsigned int OPENSSL_sparcv9cap_P[];
+
+#  define SPARC_CMLL_CAPABLE      (OPENSSL_sparcv9cap_P[1] & CFR_CAMELLIA)
+
+void cmll_t4_set_key(const unsigned char *key, int bits, CAMELLIA_KEY *ks);
+void cmll_t4_encrypt(const unsigned char *in, unsigned char *out,
+                     const CAMELLIA_KEY *key);
+void cmll_t4_decrypt(const unsigned char *in, unsigned char *out,
+                     const CAMELLIA_KEY *key);
+
+void cmll128_t4_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                            size_t len, const CAMELLIA_KEY *key,
+                            unsigned char *ivec);
+void cmll128_t4_cbc_decrypt(const unsigned char *in, unsigned char *out,
+                            size_t len, const CAMELLIA_KEY *key,
+                            unsigned char *ivec);
+void cmll256_t4_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                            size_t len, const CAMELLIA_KEY *key,
+                            unsigned char *ivec);
+void cmll256_t4_cbc_decrypt(const unsigned char *in, unsigned char *out,
+                            size_t len, const CAMELLIA_KEY *key,
+                            unsigned char *ivec);
+void cmll128_t4_ctr32_encrypt(const unsigned char *in, unsigned char *out,
+                              size_t blocks, const CAMELLIA_KEY *key,
+                              unsigned char *ivec);
+void cmll256_t4_ctr32_encrypt(const unsigned char *in, unsigned char *out,
+                              size_t blocks, const CAMELLIA_KEY *key,
+                              unsigned char *ivec);
+
+static int cmll_t4_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                            const unsigned char *iv, int enc)
+{
+    int ret, mode, bits;
+    EVP_CAMELLIA_KEY *dat =
+        (EVP_CAMELLIA_KEY *)EVP_CIPHER_CTX_get_cipher_data(ctx);
+
+    mode = EVP_CIPHER_CTX_mode(ctx);
+    bits = EVP_CIPHER_CTX_key_length(ctx) * 8;
+
+    cmll_t4_set_key(key, bits, &dat->ks);
+
+    if ((mode == EVP_CIPH_ECB_MODE || mode == EVP_CIPH_CBC_MODE)
+        && !enc) {
+        ret = 0;
+        dat->block = (block128_f) cmll_t4_decrypt;
+        switch (bits) {
+        case 128:
+            dat->stream.cbc = mode == EVP_CIPH_CBC_MODE ?
+                (cbc128_f) cmll128_t4_cbc_decrypt : NULL;
+            break;
+        case 192:
+        case 256:
+            dat->stream.cbc = mode == EVP_CIPH_CBC_MODE ?
+                (cbc128_f) cmll256_t4_cbc_decrypt : NULL;
+            break;
+        default:
+            ret = -1;
+        }
+    } else {
+        ret = 0;
+        dat->block = (block128_f) cmll_t4_encrypt;
+        switch (bits) {
+        case 128:
+            if (mode == EVP_CIPH_CBC_MODE)
+                dat->stream.cbc = (cbc128_f) cmll128_t4_cbc_encrypt;
+            else if (mode == EVP_CIPH_CTR_MODE)
+                dat->stream.ctr = (ctr128_f) cmll128_t4_ctr32_encrypt;
+            else
+                dat->stream.cbc = NULL;
+            break;
+        case 192:
+        case 256:
+            if (mode == EVP_CIPH_CBC_MODE)
+                dat->stream.cbc = (cbc128_f) cmll256_t4_cbc_encrypt;
+            else if (mode == EVP_CIPH_CTR_MODE)
+                dat->stream.ctr = (ctr128_f) cmll256_t4_ctr32_encrypt;
+            else
+                dat->stream.cbc = NULL;
+            break;
+        default:
+            ret = -1;
+        }
+    }
+
+    if (ret < 0) {
+        EVPerr(EVP_F_CMLL_T4_INIT_KEY, EVP_R_CAMELLIA_KEY_SETUP_FAILED);
+        return 0;
+    }
+
+    return 1;
+}
+
+#  define cmll_t4_cbc_cipher camellia_cbc_cipher
+static int cmll_t4_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                              const unsigned char *in, size_t len);
+
+#  define cmll_t4_ecb_cipher camellia_ecb_cipher
+static int cmll_t4_ecb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                              const unsigned char *in, size_t len);
+
+#  define cmll_t4_ofb_cipher camellia_ofb_cipher
+static int cmll_t4_ofb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                              const unsigned char *in, size_t len);
+
+#  define cmll_t4_cfb_cipher camellia_cfb_cipher
+static int cmll_t4_cfb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                              const unsigned char *in, size_t len);
+
+#  define cmll_t4_cfb8_cipher camellia_cfb8_cipher
+static int cmll_t4_cfb8_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                               const unsigned char *in, size_t len);
+
+#  define cmll_t4_cfb1_cipher camellia_cfb1_cipher
+static int cmll_t4_cfb1_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                               const unsigned char *in, size_t len);
+
+#  define cmll_t4_ctr_cipher camellia_ctr_cipher
+static int cmll_t4_ctr_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                              const unsigned char *in, size_t len);
+
+#  define BLOCK_CIPHER_generic(nid,keylen,blocksize,ivlen,nmode,mode,MODE,flags) \
+static const EVP_CIPHER cmll_t4_##keylen##_##mode = { \
+        nid##_##keylen##_##nmode,blocksize,keylen/8,ivlen, \
+        flags|EVP_CIPH_##MODE##_MODE,   \
+        cmll_t4_init_key,               \
+        cmll_t4_##mode##_cipher,        \
+        NULL,                           \
+        sizeof(EVP_CAMELLIA_KEY),       \
+        NULL,NULL,NULL,NULL }; \
+static const EVP_CIPHER camellia_##keylen##_##mode = { \
+        nid##_##keylen##_##nmode,blocksize,     \
+        keylen/8,ivlen, \
+        flags|EVP_CIPH_##MODE##_MODE,   \
+        camellia_init_key,              \
+        camellia_##mode##_cipher,       \
+        NULL,                           \
+        sizeof(EVP_CAMELLIA_KEY),       \
+        NULL,NULL,NULL,NULL }; \
+const EVP_CIPHER *EVP_camellia_##keylen##_##mode(void) \
+{ return SPARC_CMLL_CAPABLE?&cmll_t4_##keylen##_##mode:&camellia_##keylen##_##mode; }
+
+# else
+
+#  define BLOCK_CIPHER_generic(nid,keylen,blocksize,ivlen,nmode,mode,MODE,flags) \
+static const EVP_CIPHER camellia_##keylen##_##mode = { \
+        nid##_##keylen##_##nmode,blocksize,keylen/8,ivlen, \
+        flags|EVP_CIPH_##MODE##_MODE,   \
+        camellia_init_key,              \
+        camellia_##mode##_cipher,       \
+        NULL,                           \
+        sizeof(EVP_CAMELLIA_KEY),       \
+        NULL,NULL,NULL,NULL }; \
+const EVP_CIPHER *EVP_camellia_##keylen##_##mode(void) \
+{ return &camellia_##keylen##_##mode; }
+
+# endif
+
+# define BLOCK_CIPHER_generic_pack(nid,keylen,flags)             \
+        BLOCK_CIPHER_generic(nid,keylen,16,16,cbc,cbc,CBC,flags|EVP_CIPH_FLAG_DEFAULT_ASN1)     \
+        BLOCK_CIPHER_generic(nid,keylen,16,0,ecb,ecb,ECB,flags|EVP_CIPH_FLAG_DEFAULT_ASN1)      \
+        BLOCK_CIPHER_generic(nid,keylen,1,16,ofb128,ofb,OFB,flags|EVP_CIPH_FLAG_DEFAULT_ASN1)   \
+        BLOCK_CIPHER_generic(nid,keylen,1,16,cfb128,cfb,CFB,flags|EVP_CIPH_FLAG_DEFAULT_ASN1)   \
+        BLOCK_CIPHER_generic(nid,keylen,1,16,cfb1,cfb1,CFB,flags)       \
+        BLOCK_CIPHER_generic(nid,keylen,1,16,cfb8,cfb8,CFB,flags)       \
+        BLOCK_CIPHER_generic(nid, keylen, 1, 16, ctr, ctr, CTR, flags)
+
+/* The subkey for Camellia is generated. */
+static int camellia_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                             const unsigned char *iv, int enc)
+{
+    int ret, mode;
+    EVP_CAMELLIA_KEY *dat = EVP_C_DATA(EVP_CAMELLIA_KEY,ctx);
+
+    ret = Camellia_set_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8, &dat->ks);
+    if (ret < 0) {
+        EVPerr(EVP_F_CAMELLIA_INIT_KEY, EVP_R_CAMELLIA_KEY_SETUP_FAILED);
+        return 0;
+    }
+
+    mode = EVP_CIPHER_CTX_mode(ctx);
+    if ((mode == EVP_CIPH_ECB_MODE || mode == EVP_CIPH_CBC_MODE)
+        && !enc) {
+        dat->block = (block128_f) Camellia_decrypt;
+        dat->stream.cbc = mode == EVP_CIPH_CBC_MODE ?
+            (cbc128_f) Camellia_cbc_encrypt : NULL;
+    } else {
+        dat->block = (block128_f) Camellia_encrypt;
+        dat->stream.cbc = mode == EVP_CIPH_CBC_MODE ?
+            (cbc128_f) Camellia_cbc_encrypt : NULL;
+    }
+
+    return 1;
+}
+
+static int camellia_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                               const unsigned char *in, size_t len)
+{
+    EVP_CAMELLIA_KEY *dat = EVP_C_DATA(EVP_CAMELLIA_KEY,ctx);
+
+    if (dat->stream.cbc)
+        (*dat->stream.cbc) (in, out, len, &dat->ks,
+                            EVP_CIPHER_CTX_iv_noconst(ctx),
+                            EVP_CIPHER_CTX_encrypting(ctx));
+    else if (EVP_CIPHER_CTX_encrypting(ctx))
+        CRYPTO_cbc128_encrypt(in, out, len, &dat->ks,
+                              EVP_CIPHER_CTX_iv_noconst(ctx), dat->block);
+    else
+        CRYPTO_cbc128_decrypt(in, out, len, &dat->ks,
+                              EVP_CIPHER_CTX_iv_noconst(ctx), dat->block);
+
+    return 1;
+}
+
+static int camellia_ecb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                               const unsigned char *in, size_t len)
+{
+    size_t bl = EVP_CIPHER_CTX_block_size(ctx);
+    size_t i;
+    EVP_CAMELLIA_KEY *dat = EVP_C_DATA(EVP_CAMELLIA_KEY,ctx);
+
+    if (len < bl)
+        return 1;
+
+    for (i = 0, len -= bl; i <= len; i += bl)
+        (*dat->block) (in + i, out + i, &dat->ks);
+
+    return 1;
+}
+
+static int camellia_ofb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                               const unsigned char *in, size_t len)
+{
+    EVP_CAMELLIA_KEY *dat = EVP_C_DATA(EVP_CAMELLIA_KEY,ctx);
+
+    int num = EVP_CIPHER_CTX_num(ctx);
+    CRYPTO_ofb128_encrypt(in, out, len, &dat->ks,
+                          EVP_CIPHER_CTX_iv_noconst(ctx), &num, dat->block);
+    EVP_CIPHER_CTX_set_num(ctx, num);
+    return 1;
+}
+
+static int camellia_cfb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                               const unsigned char *in, size_t len)
+{
+    EVP_CAMELLIA_KEY *dat = EVP_C_DATA(EVP_CAMELLIA_KEY,ctx);
+
+    int num = EVP_CIPHER_CTX_num(ctx);
+    CRYPTO_cfb128_encrypt(in, out, len, &dat->ks,
+                          EVP_CIPHER_CTX_iv_noconst(ctx), &num, EVP_CIPHER_CTX_encrypting(ctx), dat->block);
+    EVP_CIPHER_CTX_set_num(ctx, num);
+    return 1;
+}
+
+static int camellia_cfb8_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                const unsigned char *in, size_t len)
+{
+    EVP_CAMELLIA_KEY *dat = EVP_C_DATA(EVP_CAMELLIA_KEY,ctx);
+
+    int num = EVP_CIPHER_CTX_num(ctx);
+    CRYPTO_cfb128_8_encrypt(in, out, len, &dat->ks,
+                            EVP_CIPHER_CTX_iv_noconst(ctx), &num, EVP_CIPHER_CTX_encrypting(ctx), dat->block);
+    EVP_CIPHER_CTX_set_num(ctx, num);
+    return 1;
+}
+
+static int camellia_cfb1_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                const unsigned char *in, size_t len)
+{
+    EVP_CAMELLIA_KEY *dat = EVP_C_DATA(EVP_CAMELLIA_KEY,ctx);
+
+    if (EVP_CIPHER_CTX_test_flags(ctx, EVP_CIPH_FLAG_LENGTH_BITS)) {
+        int num = EVP_CIPHER_CTX_num(ctx);
+        CRYPTO_cfb128_1_encrypt(in, out, len, &dat->ks,
+                                EVP_CIPHER_CTX_iv_noconst(ctx), &num, EVP_CIPHER_CTX_encrypting(ctx), dat->block);
+        EVP_CIPHER_CTX_set_num(ctx, num);
+        return 1;
+    }
+
+    while (len >= MAXBITCHUNK) {
+        int num = EVP_CIPHER_CTX_num(ctx);
+        CRYPTO_cfb128_1_encrypt(in, out, MAXBITCHUNK * 8, &dat->ks,
+                                EVP_CIPHER_CTX_iv_noconst(ctx), &num, EVP_CIPHER_CTX_encrypting(ctx), dat->block);
+        EVP_CIPHER_CTX_set_num(ctx, num);
+        len -= MAXBITCHUNK;
+        out += MAXBITCHUNK;
+        in  += MAXBITCHUNK;
+    }
+    if (len) {
+        int num = EVP_CIPHER_CTX_num(ctx);
+        CRYPTO_cfb128_1_encrypt(in, out, len * 8, &dat->ks,
+                                EVP_CIPHER_CTX_iv_noconst(ctx), &num, EVP_CIPHER_CTX_encrypting(ctx), dat->block);
+        EVP_CIPHER_CTX_set_num(ctx, num);
+    }
+
+    return 1;
+}
+
+static int camellia_ctr_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                               const unsigned char *in, size_t len)
+{
+    unsigned int num = EVP_CIPHER_CTX_num(ctx);
+    EVP_CAMELLIA_KEY *dat = EVP_C_DATA(EVP_CAMELLIA_KEY,ctx);
+
+    if (dat->stream.ctr)
+        CRYPTO_ctr128_encrypt_ctr32(in, out, len, &dat->ks,
+                                    EVP_CIPHER_CTX_iv_noconst(ctx),
+                                    EVP_CIPHER_CTX_buf_noconst(ctx), &num,
+                                    dat->stream.ctr);
+    else
+        CRYPTO_ctr128_encrypt(in, out, len, &dat->ks,
+                              EVP_CIPHER_CTX_iv_noconst(ctx),
+                              EVP_CIPHER_CTX_buf_noconst(ctx), &num,
+                              dat->block);
+    EVP_CIPHER_CTX_set_num(ctx, num);
+    return 1;
+}
+
+BLOCK_CIPHER_generic_pack(NID_camellia, 128, 0)
+    BLOCK_CIPHER_generic_pack(NID_camellia, 192, 0)
+    BLOCK_CIPHER_generic_pack(NID_camellia, 256, 0)
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_cast.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_cast.c
new file mode 100644
index 000000000..259d44059
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_cast.c
@@ -0,0 +1,40 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_CAST
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include "internal/evp_int.h"
+# include <openssl/cast.h>
+
+static int cast_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                         const unsigned char *iv, int enc);
+
+typedef struct {
+    CAST_KEY ks;
+} EVP_CAST_KEY;
+
+# define data(ctx)       EVP_C_DATA(EVP_CAST_KEY,ctx)
+
+IMPLEMENT_BLOCK_CIPHER(cast5, ks, CAST, EVP_CAST_KEY,
+                       NID_cast5, 8, CAST_KEY_LENGTH, 8, 64,
+                       EVP_CIPH_VARIABLE_LENGTH, cast_init_key, NULL,
+                       EVP_CIPHER_set_asn1_iv, EVP_CIPHER_get_asn1_iv, NULL)
+
+static int cast_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                         const unsigned char *iv, int enc)
+{
+    CAST_set_key(&data(ctx)->ks, EVP_CIPHER_CTX_key_length(ctx), key);
+    return 1;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_chacha20_poly1305.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_chacha20_poly1305.c
new file mode 100644
index 000000000..c1917bb86
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_chacha20_poly1305.c
@@ -0,0 +1,630 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_CHACHA
+
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include "evp_locl.h"
+# include "internal/evp_int.h"
+# include "internal/chacha.h"
+
+typedef struct {
+    union {
+        double align;   /* this ensures even sizeof(EVP_CHACHA_KEY)%8==0 */
+        unsigned int d[CHACHA_KEY_SIZE / 4];
+    } key;
+    unsigned int  counter[CHACHA_CTR_SIZE / 4];
+    unsigned char buf[CHACHA_BLK_SIZE];
+    unsigned int  partial_len;
+} EVP_CHACHA_KEY;
+
+#define data(ctx)   ((EVP_CHACHA_KEY *)(ctx)->cipher_data)
+
+static int chacha_init_key(EVP_CIPHER_CTX *ctx,
+                           const unsigned char user_key[CHACHA_KEY_SIZE],
+                           const unsigned char iv[CHACHA_CTR_SIZE], int enc)
+{
+    EVP_CHACHA_KEY *key = data(ctx);
+    unsigned int i;
+
+    if (user_key)
+        for (i = 0; i < CHACHA_KEY_SIZE; i+=4) {
+            key->key.d[i/4] = CHACHA_U8TOU32(user_key+i);
+        }
+
+    if (iv)
+        for (i = 0; i < CHACHA_CTR_SIZE; i+=4) {
+            key->counter[i/4] = CHACHA_U8TOU32(iv+i);
+        }
+
+    key->partial_len = 0;
+
+    return 1;
+}
+
+static int chacha_cipher(EVP_CIPHER_CTX * ctx, unsigned char *out,
+                         const unsigned char *inp, size_t len)
+{
+    EVP_CHACHA_KEY *key = data(ctx);
+    unsigned int n, rem, ctr32;
+
+    if ((n = key->partial_len)) {
+        while (len && n < CHACHA_BLK_SIZE) {
+            *out++ = *inp++ ^ key->buf[n++];
+            len--;
+        }
+        key->partial_len = n;
+
+        if (len == 0)
+            return 1;
+
+        if (n == CHACHA_BLK_SIZE) {
+            key->partial_len = 0;
+            key->counter[0]++;
+            if (key->counter[0] == 0)
+                key->counter[1]++;
+        }
+    }
+
+    rem = (unsigned int)(len % CHACHA_BLK_SIZE);
+    len -= rem;
+    ctr32 = key->counter[0];
+    while (len >= CHACHA_BLK_SIZE) {
+        size_t blocks = len / CHACHA_BLK_SIZE;
+        /*
+         * 1<<28 is just a not-so-small yet not-so-large number...
+         * Below condition is practically never met, but it has to
+         * be checked for code correctness.
+         */
+        if (sizeof(size_t)>sizeof(unsigned int) && blocks>(1U<<28))
+            blocks = (1U<<28);
+
+        /*
+         * As ChaCha20_ctr32 operates on 32-bit counter, caller
+         * has to handle overflow. 'if' below detects the
+         * overflow, which is then handled by limiting the
+         * amount of blocks to the exact overflow point...
+         */
+        ctr32 += (unsigned int)blocks;
+        if (ctr32 < blocks) {
+            blocks -= ctr32;
+            ctr32 = 0;
+        }
+        blocks *= CHACHA_BLK_SIZE;
+        ChaCha20_ctr32(out, inp, blocks, key->key.d, key->counter);
+        len -= blocks;
+        inp += blocks;
+        out += blocks;
+
+        key->counter[0] = ctr32;
+        if (ctr32 == 0) key->counter[1]++;
+    }
+
+    if (rem) {
+        memset(key->buf, 0, sizeof(key->buf));
+        ChaCha20_ctr32(key->buf, key->buf, CHACHA_BLK_SIZE,
+                       key->key.d, key->counter);
+        for (n = 0; n < rem; n++)
+            out[n] = inp[n] ^ key->buf[n];
+        key->partial_len = rem;
+    }
+
+    return 1;
+}
+
+static const EVP_CIPHER chacha20 = {
+    NID_chacha20,
+    1,                      /* block_size */
+    CHACHA_KEY_SIZE,        /* key_len */
+    CHACHA_CTR_SIZE,        /* iv_len, 128-bit counter in the context */
+    EVP_CIPH_CUSTOM_IV | EVP_CIPH_ALWAYS_CALL_INIT,
+    chacha_init_key,
+    chacha_cipher,
+    NULL,
+    sizeof(EVP_CHACHA_KEY),
+    NULL,
+    NULL,
+    NULL,
+    NULL
+};
+
+const EVP_CIPHER *EVP_chacha20(void)
+{
+    return &chacha20;
+}
+
+# ifndef OPENSSL_NO_POLY1305
+#  include "internal/poly1305.h"
+
+typedef struct {
+    EVP_CHACHA_KEY key;
+    unsigned int nonce[12/4];
+    unsigned char tag[POLY1305_BLOCK_SIZE];
+    unsigned char tls_aad[POLY1305_BLOCK_SIZE];
+    struct { uint64_t aad, text; } len;
+    int aad, mac_inited, tag_len, nonce_len;
+    size_t tls_payload_length;
+} EVP_CHACHA_AEAD_CTX;
+
+#  define NO_TLS_PAYLOAD_LENGTH ((size_t)-1)
+#  define aead_data(ctx)        ((EVP_CHACHA_AEAD_CTX *)(ctx)->cipher_data)
+#  define POLY1305_ctx(actx)    ((POLY1305 *)(actx + 1))
+
+static int chacha20_poly1305_init_key(EVP_CIPHER_CTX *ctx,
+                                      const unsigned char *inkey,
+                                      const unsigned char *iv, int enc)
+{
+    EVP_CHACHA_AEAD_CTX *actx = aead_data(ctx);
+
+    if (!inkey && !iv)
+        return 1;
+
+    actx->len.aad = 0;
+    actx->len.text = 0;
+    actx->aad = 0;
+    actx->mac_inited = 0;
+    actx->tls_payload_length = NO_TLS_PAYLOAD_LENGTH;
+
+    if (iv != NULL) {
+        unsigned char temp[CHACHA_CTR_SIZE] = { 0 };
+
+        /* pad on the left */
+        if (actx->nonce_len <= CHACHA_CTR_SIZE)
+            memcpy(temp + CHACHA_CTR_SIZE - actx->nonce_len, iv,
+                   actx->nonce_len);
+
+        chacha_init_key(ctx, inkey, temp, enc);
+
+        actx->nonce[0] = actx->key.counter[1];
+        actx->nonce[1] = actx->key.counter[2];
+        actx->nonce[2] = actx->key.counter[3];
+    } else {
+        chacha_init_key(ctx, inkey, NULL, enc);
+    }
+
+    return 1;
+}
+
+#  if !defined(OPENSSL_SMALL_FOOTPRINT)
+
+#   if defined(POLY1305_ASM) && (defined(__x86_64) || defined(__x86_64__) || \
+                                 defined(_M_AMD64) || defined(_M_X64))
+#    define XOR128_HELPERS
+void *xor128_encrypt_n_pad(void *out, const void *inp, void *otp, size_t len);
+void *xor128_decrypt_n_pad(void *out, const void *inp, void *otp, size_t len);
+static const unsigned char zero[4 * CHACHA_BLK_SIZE] = { 0 };
+#   else
+static const unsigned char zero[2 * CHACHA_BLK_SIZE] = { 0 };
+#   endif
+
+static int chacha20_poly1305_tls_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                        const unsigned char *in, size_t len)
+{
+    EVP_CHACHA_AEAD_CTX *actx = aead_data(ctx);
+    size_t tail, tohash_len, buf_len, plen = actx->tls_payload_length;
+    unsigned char *buf, *tohash, *ctr, storage[sizeof(zero) + 32];
+
+    if (len != plen + POLY1305_BLOCK_SIZE)
+        return -1;
+
+    buf = storage + ((0 - (size_t)storage) & 15);   /* align */
+    ctr = buf + CHACHA_BLK_SIZE;
+    tohash = buf + CHACHA_BLK_SIZE - POLY1305_BLOCK_SIZE;
+
+#   ifdef XOR128_HELPERS
+    if (plen <= 3 * CHACHA_BLK_SIZE) {
+        actx->key.counter[0] = 0;
+        buf_len = (plen + 2 * CHACHA_BLK_SIZE - 1) & (0 - CHACHA_BLK_SIZE);
+        ChaCha20_ctr32(buf, zero, buf_len, actx->key.key.d,
+                       actx->key.counter);
+        Poly1305_Init(POLY1305_ctx(actx), buf);
+        actx->key.partial_len = 0;
+        memcpy(tohash, actx->tls_aad, POLY1305_BLOCK_SIZE);
+        tohash_len = POLY1305_BLOCK_SIZE;
+        actx->len.aad = EVP_AEAD_TLS1_AAD_LEN;
+        actx->len.text = plen;
+
+        if (plen) {
+            if (ctx->encrypt)
+                ctr = xor128_encrypt_n_pad(out, in, ctr, plen);
+            else
+                ctr = xor128_decrypt_n_pad(out, in, ctr, plen);
+
+            in += plen;
+            out += plen;
+            tohash_len = (size_t)(ctr - tohash);
+        }
+    }
+#   else
+    if (plen <= CHACHA_BLK_SIZE) {
+        size_t i;
+
+        actx->key.counter[0] = 0;
+        ChaCha20_ctr32(buf, zero, (buf_len = 2 * CHACHA_BLK_SIZE),
+                       actx->key.key.d, actx->key.counter);
+        Poly1305_Init(POLY1305_ctx(actx), buf);
+        actx->key.partial_len = 0;
+        memcpy(tohash, actx->tls_aad, POLY1305_BLOCK_SIZE);
+        tohash_len = POLY1305_BLOCK_SIZE;
+        actx->len.aad = EVP_AEAD_TLS1_AAD_LEN;
+        actx->len.text = plen;
+
+        if (ctx->encrypt) {
+            for (i = 0; i < plen; i++) {
+                out[i] = ctr[i] ^= in[i];
+            }
+        } else {
+            for (i = 0; i < plen; i++) {
+                unsigned char c = in[i];
+                out[i] = ctr[i] ^ c;
+                ctr[i] = c;
+            }
+        }
+
+        in += i;
+        out += i;
+
+        tail = (0 - i) & (POLY1305_BLOCK_SIZE - 1);
+        memset(ctr + i, 0, tail);
+        ctr += i + tail;
+        tohash_len += i + tail;
+    }
+#   endif
+    else {
+        actx->key.counter[0] = 0;
+        ChaCha20_ctr32(buf, zero, (buf_len = CHACHA_BLK_SIZE),
+                       actx->key.key.d, actx->key.counter);
+        Poly1305_Init(POLY1305_ctx(actx), buf);
+        actx->key.counter[0] = 1;
+        actx->key.partial_len = 0;
+        Poly1305_Update(POLY1305_ctx(actx), actx->tls_aad, POLY1305_BLOCK_SIZE);
+        tohash = ctr;
+        tohash_len = 0;
+        actx->len.aad = EVP_AEAD_TLS1_AAD_LEN;
+        actx->len.text = plen;
+
+        if (ctx->encrypt) {
+            ChaCha20_ctr32(out, in, plen, actx->key.key.d, actx->key.counter);
+            Poly1305_Update(POLY1305_ctx(actx), out, plen);
+        } else {
+            Poly1305_Update(POLY1305_ctx(actx), in, plen);
+            ChaCha20_ctr32(out, in, plen, actx->key.key.d, actx->key.counter);
+        }
+
+        in += plen;
+        out += plen;
+        tail = (0 - plen) & (POLY1305_BLOCK_SIZE - 1);
+        Poly1305_Update(POLY1305_ctx(actx), zero, tail);
+    }
+
+    {
+        const union {
+            long one;
+            char little;
+        } is_endian = { 1 };
+
+        if (is_endian.little) {
+            memcpy(ctr, (unsigned char *)&actx->len, POLY1305_BLOCK_SIZE);
+        } else {
+            ctr[0]  = (unsigned char)(actx->len.aad);
+            ctr[1]  = (unsigned char)(actx->len.aad>>8);
+            ctr[2]  = (unsigned char)(actx->len.aad>>16);
+            ctr[3]  = (unsigned char)(actx->len.aad>>24);
+            ctr[4]  = (unsigned char)(actx->len.aad>>32);
+            ctr[5]  = (unsigned char)(actx->len.aad>>40);
+            ctr[6]  = (unsigned char)(actx->len.aad>>48);
+            ctr[7]  = (unsigned char)(actx->len.aad>>56);
+
+            ctr[8]  = (unsigned char)(actx->len.text);
+            ctr[9]  = (unsigned char)(actx->len.text>>8);
+            ctr[10] = (unsigned char)(actx->len.text>>16);
+            ctr[11] = (unsigned char)(actx->len.text>>24);
+            ctr[12] = (unsigned char)(actx->len.text>>32);
+            ctr[13] = (unsigned char)(actx->len.text>>40);
+            ctr[14] = (unsigned char)(actx->len.text>>48);
+            ctr[15] = (unsigned char)(actx->len.text>>56);
+        }
+        tohash_len += POLY1305_BLOCK_SIZE;
+    }
+
+    Poly1305_Update(POLY1305_ctx(actx), tohash, tohash_len);
+    OPENSSL_cleanse(buf, buf_len);
+    Poly1305_Final(POLY1305_ctx(actx), ctx->encrypt ? actx->tag
+                                                    : tohash);
+
+    actx->tls_payload_length = NO_TLS_PAYLOAD_LENGTH;
+
+    if (ctx->encrypt) {
+        memcpy(out, actx->tag, POLY1305_BLOCK_SIZE);
+    } else {
+        if (CRYPTO_memcmp(tohash, in, POLY1305_BLOCK_SIZE)) {
+            memset(out - (len - POLY1305_BLOCK_SIZE), 0,
+                   len - POLY1305_BLOCK_SIZE);
+            return -1;
+        }
+    }
+
+    return len;
+}
+#  else
+static const unsigned char zero[CHACHA_BLK_SIZE] = { 0 };
+#  endif
+
+static int chacha20_poly1305_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                    const unsigned char *in, size_t len)
+{
+    EVP_CHACHA_AEAD_CTX *actx = aead_data(ctx);
+    size_t rem, plen = actx->tls_payload_length;
+
+    if (!actx->mac_inited) {
+#  if !defined(OPENSSL_SMALL_FOOTPRINT)
+        if (plen != NO_TLS_PAYLOAD_LENGTH && out != NULL)
+            return chacha20_poly1305_tls_cipher(ctx, out, in, len);
+#  endif
+        actx->key.counter[0] = 0;
+        ChaCha20_ctr32(actx->key.buf, zero, CHACHA_BLK_SIZE,
+                       actx->key.key.d, actx->key.counter);
+        Poly1305_Init(POLY1305_ctx(actx), actx->key.buf);
+        actx->key.counter[0] = 1;
+        actx->key.partial_len = 0;
+        actx->len.aad = actx->len.text = 0;
+        actx->mac_inited = 1;
+        if (plen != NO_TLS_PAYLOAD_LENGTH) {
+            Poly1305_Update(POLY1305_ctx(actx), actx->tls_aad,
+                            EVP_AEAD_TLS1_AAD_LEN);
+            actx->len.aad = EVP_AEAD_TLS1_AAD_LEN;
+            actx->aad = 1;
+        }
+    }
+
+    if (in) {                                   /* aad or text */
+        if (out == NULL) {                      /* aad */
+            Poly1305_Update(POLY1305_ctx(actx), in, len);
+            actx->len.aad += len;
+            actx->aad = 1;
+            return len;
+        } else {                                /* plain- or ciphertext */
+            if (actx->aad) {                    /* wrap up aad */
+                if ((rem = (size_t)actx->len.aad % POLY1305_BLOCK_SIZE))
+                    Poly1305_Update(POLY1305_ctx(actx), zero,
+                                    POLY1305_BLOCK_SIZE - rem);
+                actx->aad = 0;
+            }
+
+            actx->tls_payload_length = NO_TLS_PAYLOAD_LENGTH;
+            if (plen == NO_TLS_PAYLOAD_LENGTH)
+                plen = len;
+            else if (len != plen + POLY1305_BLOCK_SIZE)
+                return -1;
+
+            if (ctx->encrypt) {                 /* plaintext */
+                chacha_cipher(ctx, out, in, plen);
+                Poly1305_Update(POLY1305_ctx(actx), out, plen);
+                in += plen;
+                out += plen;
+                actx->len.text += plen;
+            } else {                            /* ciphertext */
+                Poly1305_Update(POLY1305_ctx(actx), in, plen);
+                chacha_cipher(ctx, out, in, plen);
+                in += plen;
+                out += plen;
+                actx->len.text += plen;
+            }
+        }
+    }
+    if (in == NULL                              /* explicit final */
+        || plen != len) {                       /* or tls mode */
+        const union {
+            long one;
+            char little;
+        } is_endian = { 1 };
+        unsigned char temp[POLY1305_BLOCK_SIZE];
+
+        if (actx->aad) {                        /* wrap up aad */
+            if ((rem = (size_t)actx->len.aad % POLY1305_BLOCK_SIZE))
+                Poly1305_Update(POLY1305_ctx(actx), zero,
+                                POLY1305_BLOCK_SIZE - rem);
+            actx->aad = 0;
+        }
+
+        if ((rem = (size_t)actx->len.text % POLY1305_BLOCK_SIZE))
+            Poly1305_Update(POLY1305_ctx(actx), zero,
+                            POLY1305_BLOCK_SIZE - rem);
+
+        if (is_endian.little) {
+            Poly1305_Update(POLY1305_ctx(actx),
+                            (unsigned char *)&actx->len, POLY1305_BLOCK_SIZE);
+        } else {
+            temp[0]  = (unsigned char)(actx->len.aad);
+            temp[1]  = (unsigned char)(actx->len.aad>>8);
+            temp[2]  = (unsigned char)(actx->len.aad>>16);
+            temp[3]  = (unsigned char)(actx->len.aad>>24);
+            temp[4]  = (unsigned char)(actx->len.aad>>32);
+            temp[5]  = (unsigned char)(actx->len.aad>>40);
+            temp[6]  = (unsigned char)(actx->len.aad>>48);
+            temp[7]  = (unsigned char)(actx->len.aad>>56);
+
+            temp[8]  = (unsigned char)(actx->len.text);
+            temp[9]  = (unsigned char)(actx->len.text>>8);
+            temp[10] = (unsigned char)(actx->len.text>>16);
+            temp[11] = (unsigned char)(actx->len.text>>24);
+            temp[12] = (unsigned char)(actx->len.text>>32);
+            temp[13] = (unsigned char)(actx->len.text>>40);
+            temp[14] = (unsigned char)(actx->len.text>>48);
+            temp[15] = (unsigned char)(actx->len.text>>56);
+
+            Poly1305_Update(POLY1305_ctx(actx), temp, POLY1305_BLOCK_SIZE);
+        }
+        Poly1305_Final(POLY1305_ctx(actx), ctx->encrypt ? actx->tag
+                                                        : temp);
+        actx->mac_inited = 0;
+
+        if (in != NULL && len != plen) {        /* tls mode */
+            if (ctx->encrypt) {
+                memcpy(out, actx->tag, POLY1305_BLOCK_SIZE);
+            } else {
+                if (CRYPTO_memcmp(temp, in, POLY1305_BLOCK_SIZE)) {
+                    memset(out - plen, 0, plen);
+                    return -1;
+                }
+            }
+        }
+        else if (!ctx->encrypt) {
+            if (CRYPTO_memcmp(temp, actx->tag, actx->tag_len))
+                return -1;
+        }
+    }
+    return len;
+}
+
+static int chacha20_poly1305_cleanup(EVP_CIPHER_CTX *ctx)
+{
+    EVP_CHACHA_AEAD_CTX *actx = aead_data(ctx);
+    if (actx)
+        OPENSSL_cleanse(ctx->cipher_data, sizeof(*actx) + Poly1305_ctx_size());
+    return 1;
+}
+
+static int chacha20_poly1305_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg,
+                                  void *ptr)
+{
+    EVP_CHACHA_AEAD_CTX *actx = aead_data(ctx);
+
+    switch(type) {
+    case EVP_CTRL_INIT:
+        if (actx == NULL)
+            actx = ctx->cipher_data
+                 = OPENSSL_zalloc(sizeof(*actx) + Poly1305_ctx_size());
+        if (actx == NULL) {
+            EVPerr(EVP_F_CHACHA20_POLY1305_CTRL, EVP_R_INITIALIZATION_ERROR);
+            return 0;
+        }
+        actx->len.aad = 0;
+        actx->len.text = 0;
+        actx->aad = 0;
+        actx->mac_inited = 0;
+        actx->tag_len = 0;
+        actx->nonce_len = 12;
+        actx->tls_payload_length = NO_TLS_PAYLOAD_LENGTH;
+        memset(actx->tls_aad, 0, POLY1305_BLOCK_SIZE);
+        return 1;
+
+    case EVP_CTRL_COPY:
+        if (actx) {
+            EVP_CIPHER_CTX *dst = (EVP_CIPHER_CTX *)ptr;
+
+            dst->cipher_data =
+                   OPENSSL_memdup(actx, sizeof(*actx) + Poly1305_ctx_size());
+            if (dst->cipher_data == NULL) {
+                EVPerr(EVP_F_CHACHA20_POLY1305_CTRL, EVP_R_COPY_ERROR);
+                return 0;
+            }
+        }
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_IVLEN:
+        if (arg <= 0 || arg > CHACHA_CTR_SIZE)
+            return 0;
+        actx->nonce_len = arg;
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_IV_FIXED:
+        if (arg != 12)
+            return 0;
+        actx->nonce[0] = actx->key.counter[1]
+                       = CHACHA_U8TOU32((unsigned char *)ptr);
+        actx->nonce[1] = actx->key.counter[2]
+                       = CHACHA_U8TOU32((unsigned char *)ptr+4);
+        actx->nonce[2] = actx->key.counter[3]
+                       = CHACHA_U8TOU32((unsigned char *)ptr+8);
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_TAG:
+        if (arg <= 0 || arg > POLY1305_BLOCK_SIZE)
+            return 0;
+        if (ptr != NULL) {
+            memcpy(actx->tag, ptr, arg);
+            actx->tag_len = arg;
+        }
+        return 1;
+
+    case EVP_CTRL_AEAD_GET_TAG:
+        if (arg <= 0 || arg > POLY1305_BLOCK_SIZE || !ctx->encrypt)
+            return 0;
+        memcpy(ptr, actx->tag, arg);
+        return 1;
+
+    case EVP_CTRL_AEAD_TLS1_AAD:
+        if (arg != EVP_AEAD_TLS1_AAD_LEN)
+            return 0;
+        {
+            unsigned int len;
+            unsigned char *aad = ptr;
+
+            memcpy(actx->tls_aad, ptr, EVP_AEAD_TLS1_AAD_LEN);
+            len = aad[EVP_AEAD_TLS1_AAD_LEN - 2] << 8 |
+                  aad[EVP_AEAD_TLS1_AAD_LEN - 1];
+            aad = actx->tls_aad;
+            if (!ctx->encrypt) {
+                if (len < POLY1305_BLOCK_SIZE)
+                    return 0;
+                len -= POLY1305_BLOCK_SIZE;     /* discount attached tag */
+                aad[EVP_AEAD_TLS1_AAD_LEN - 2] = (unsigned char)(len >> 8);
+                aad[EVP_AEAD_TLS1_AAD_LEN - 1] = (unsigned char)len;
+            }
+            actx->tls_payload_length = len;
+
+            /*
+             * merge record sequence number as per RFC7905
+             */
+            actx->key.counter[1] = actx->nonce[0];
+            actx->key.counter[2] = actx->nonce[1] ^ CHACHA_U8TOU32(aad);
+            actx->key.counter[3] = actx->nonce[2] ^ CHACHA_U8TOU32(aad+4);
+            actx->mac_inited = 0;
+
+            return POLY1305_BLOCK_SIZE;         /* tag length */
+        }
+
+    case EVP_CTRL_AEAD_SET_MAC_KEY:
+        /* no-op */
+        return 1;
+
+    default:
+        return -1;
+    }
+}
+
+static EVP_CIPHER chacha20_poly1305 = {
+    NID_chacha20_poly1305,
+    1,                  /* block_size */
+    CHACHA_KEY_SIZE,    /* key_len */
+    12,                 /* iv_len, 96-bit nonce in the context */
+    EVP_CIPH_FLAG_AEAD_CIPHER | EVP_CIPH_CUSTOM_IV |
+    EVP_CIPH_ALWAYS_CALL_INIT | EVP_CIPH_CTRL_INIT |
+    EVP_CIPH_CUSTOM_COPY | EVP_CIPH_FLAG_CUSTOM_CIPHER,
+    chacha20_poly1305_init_key,
+    chacha20_poly1305_cipher,
+    chacha20_poly1305_cleanup,
+    0,          /* 0 moves context-specific structure allocation to ctrl */
+    NULL,       /* set_asn1_parameters */
+    NULL,       /* get_asn1_parameters */
+    chacha20_poly1305_ctrl,
+    NULL        /* app_data */
+};
+
+const EVP_CIPHER *EVP_chacha20_poly1305(void)
+{
+    return(&chacha20_poly1305);
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_des.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_des.c
new file mode 100644
index 000000000..c13fb3e25
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_des.c
@@ -0,0 +1,242 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#ifndef OPENSSL_NO_DES
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include "internal/evp_int.h"
+# include <openssl/des.h>
+# include <openssl/rand.h>
+
+typedef struct {
+    union {
+        double align;
+        DES_key_schedule ks;
+    } ks;
+    union {
+        void (*cbc) (const void *, void *, size_t,
+                     const DES_key_schedule *, unsigned char *);
+    } stream;
+} EVP_DES_KEY;
+
+# if defined(AES_ASM) && (defined(__sparc) || defined(__sparc__))
+/* ----------^^^ this is not a typo, just a way to detect that
+ * assembler support was in general requested... */
+#  include "sparc_arch.h"
+
+extern unsigned int OPENSSL_sparcv9cap_P[];
+
+#  define SPARC_DES_CAPABLE       (OPENSSL_sparcv9cap_P[1] & CFR_DES)
+
+void des_t4_key_expand(const void *key, DES_key_schedule *ks);
+void des_t4_cbc_encrypt(const void *inp, void *out, size_t len,
+                        const DES_key_schedule *ks, unsigned char iv[8]);
+void des_t4_cbc_decrypt(const void *inp, void *out, size_t len,
+                        const DES_key_schedule *ks, unsigned char iv[8]);
+# endif
+
+static int des_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                        const unsigned char *iv, int enc);
+static int des_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr);
+
+/*
+ * Because of various casts and different names can't use
+ * IMPLEMENT_BLOCK_CIPHER
+ */
+
+static int des_ecb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                          const unsigned char *in, size_t inl)
+{
+    BLOCK_CIPHER_ecb_loop()
+        DES_ecb_encrypt((DES_cblock *)(in + i), (DES_cblock *)(out + i),
+                        EVP_CIPHER_CTX_get_cipher_data(ctx),
+                        EVP_CIPHER_CTX_encrypting(ctx));
+    return 1;
+}
+
+static int des_ofb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                          const unsigned char *in, size_t inl)
+{
+    while (inl >= EVP_MAXCHUNK) {
+        int num = EVP_CIPHER_CTX_num(ctx);
+        DES_ofb64_encrypt(in, out, (long)EVP_MAXCHUNK,
+                          EVP_CIPHER_CTX_get_cipher_data(ctx),
+                          (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx), &num);
+        EVP_CIPHER_CTX_set_num(ctx, num);
+        inl -= EVP_MAXCHUNK;
+        in += EVP_MAXCHUNK;
+        out += EVP_MAXCHUNK;
+    }
+    if (inl) {
+        int num = EVP_CIPHER_CTX_num(ctx);
+        DES_ofb64_encrypt(in, out, (long)inl,
+                          EVP_CIPHER_CTX_get_cipher_data(ctx),
+                          (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx), &num);
+        EVP_CIPHER_CTX_set_num(ctx, num);
+    }
+    return 1;
+}
+
+static int des_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                          const unsigned char *in, size_t inl)
+{
+    EVP_DES_KEY *dat = (EVP_DES_KEY *) EVP_CIPHER_CTX_get_cipher_data(ctx);
+
+    if (dat->stream.cbc != NULL) {
+        (*dat->stream.cbc) (in, out, inl, &dat->ks.ks,
+                            EVP_CIPHER_CTX_iv_noconst(ctx));
+        return 1;
+    }
+    while (inl >= EVP_MAXCHUNK) {
+        DES_ncbc_encrypt(in, out, (long)EVP_MAXCHUNK,
+                         EVP_CIPHER_CTX_get_cipher_data(ctx),
+                         (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx),
+                         EVP_CIPHER_CTX_encrypting(ctx));
+        inl -= EVP_MAXCHUNK;
+        in += EVP_MAXCHUNK;
+        out += EVP_MAXCHUNK;
+    }
+    if (inl)
+        DES_ncbc_encrypt(in, out, (long)inl,
+                         EVP_CIPHER_CTX_get_cipher_data(ctx),
+                         (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx),
+                         EVP_CIPHER_CTX_encrypting(ctx));
+    return 1;
+}
+
+static int des_cfb64_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                            const unsigned char *in, size_t inl)
+{
+    while (inl >= EVP_MAXCHUNK) {
+        int num = EVP_CIPHER_CTX_num(ctx);
+        DES_cfb64_encrypt(in, out, (long)EVP_MAXCHUNK,
+                          EVP_CIPHER_CTX_get_cipher_data(ctx),
+                          (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx), &num,
+                          EVP_CIPHER_CTX_encrypting(ctx));
+        EVP_CIPHER_CTX_set_num(ctx, num);
+        inl -= EVP_MAXCHUNK;
+        in += EVP_MAXCHUNK;
+        out += EVP_MAXCHUNK;
+    }
+    if (inl) {
+        int num = EVP_CIPHER_CTX_num(ctx);
+        DES_cfb64_encrypt(in, out, (long)inl,
+                          EVP_CIPHER_CTX_get_cipher_data(ctx),
+                          (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx), &num,
+                          EVP_CIPHER_CTX_encrypting(ctx));
+        EVP_CIPHER_CTX_set_num(ctx, num);
+    }
+    return 1;
+}
+
+/*
+ * Although we have a CFB-r implementation for DES, it doesn't pack the right
+ * way, so wrap it here
+ */
+static int des_cfb1_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                           const unsigned char *in, size_t inl)
+{
+    size_t n, chunk = EVP_MAXCHUNK / 8;
+    unsigned char c[1], d[1];
+
+    if (inl < chunk)
+        chunk = inl;
+
+    while (inl && inl >= chunk) {
+        for (n = 0; n < chunk * 8; ++n) {
+            c[0] = (in[n / 8] & (1 << (7 - n % 8))) ? 0x80 : 0;
+            DES_cfb_encrypt(c, d, 1, 1, EVP_CIPHER_CTX_get_cipher_data(ctx),
+                            (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx),
+                            EVP_CIPHER_CTX_encrypting(ctx));
+            out[n / 8] =
+                (out[n / 8] & ~(0x80 >> (unsigned int)(n % 8))) |
+                ((d[0] & 0x80) >> (unsigned int)(n % 8));
+        }
+        inl -= chunk;
+        in += chunk;
+        out += chunk;
+        if (inl < chunk)
+            chunk = inl;
+    }
+
+    return 1;
+}
+
+static int des_cfb8_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                           const unsigned char *in, size_t inl)
+{
+    while (inl >= EVP_MAXCHUNK) {
+        DES_cfb_encrypt(in, out, 8, (long)EVP_MAXCHUNK,
+                        EVP_CIPHER_CTX_get_cipher_data(ctx),
+                        (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx),
+                        EVP_CIPHER_CTX_encrypting(ctx));
+        inl -= EVP_MAXCHUNK;
+        in += EVP_MAXCHUNK;
+        out += EVP_MAXCHUNK;
+    }
+    if (inl)
+        DES_cfb_encrypt(in, out, 8, (long)inl,
+                        EVP_CIPHER_CTX_get_cipher_data(ctx),
+                        (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx),
+                        EVP_CIPHER_CTX_encrypting(ctx));
+    return 1;
+}
+
+BLOCK_CIPHER_defs(des, EVP_DES_KEY, NID_des, 8, 8, 8, 64,
+                  EVP_CIPH_RAND_KEY, des_init_key, NULL,
+                  EVP_CIPHER_set_asn1_iv, EVP_CIPHER_get_asn1_iv, des_ctrl)
+
+    BLOCK_CIPHER_def_cfb(des, EVP_DES_KEY, NID_des, 8, 8, 1,
+                     EVP_CIPH_RAND_KEY, des_init_key, NULL,
+                     EVP_CIPHER_set_asn1_iv, EVP_CIPHER_get_asn1_iv, des_ctrl)
+
+    BLOCK_CIPHER_def_cfb(des, EVP_DES_KEY, NID_des, 8, 8, 8,
+                     EVP_CIPH_RAND_KEY, des_init_key, NULL,
+                     EVP_CIPHER_set_asn1_iv, EVP_CIPHER_get_asn1_iv, des_ctrl)
+
+static int des_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                        const unsigned char *iv, int enc)
+{
+    DES_cblock *deskey = (DES_cblock *)key;
+    EVP_DES_KEY *dat = (EVP_DES_KEY *) EVP_CIPHER_CTX_get_cipher_data(ctx);
+
+    dat->stream.cbc = NULL;
+# if defined(SPARC_DES_CAPABLE)
+    if (SPARC_DES_CAPABLE) {
+        int mode = EVP_CIPHER_CTX_mode(ctx);
+
+        if (mode == EVP_CIPH_CBC_MODE) {
+            des_t4_key_expand(key, &dat->ks.ks);
+            dat->stream.cbc = enc ? des_t4_cbc_encrypt : des_t4_cbc_decrypt;
+            return 1;
+        }
+    }
+# endif
+    DES_set_key_unchecked(deskey, EVP_CIPHER_CTX_get_cipher_data(ctx));
+    return 1;
+}
+
+static int des_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
+{
+
+    switch (type) {
+    case EVP_CTRL_RAND_KEY:
+        if (RAND_priv_bytes(ptr, 8) <= 0)
+            return 0;
+        DES_set_odd_parity((DES_cblock *)ptr);
+        return 1;
+
+    default:
+        return -1;
+    }
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_des3.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_des3.c
new file mode 100644
index 000000000..6b492ce47
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_des3.c
@@ -0,0 +1,424 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#ifndef OPENSSL_NO_DES
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include "internal/evp_int.h"
+# include <openssl/des.h>
+# include <openssl/rand.h>
+# include "evp_locl.h"
+
+typedef struct {
+    union {
+        double align;
+        DES_key_schedule ks[3];
+    } ks;
+    union {
+        void (*cbc) (const void *, void *, size_t,
+                     const DES_key_schedule *, unsigned char *);
+    } stream;
+} DES_EDE_KEY;
+# define ks1 ks.ks[0]
+# define ks2 ks.ks[1]
+# define ks3 ks.ks[2]
+
+# if defined(AES_ASM) && (defined(__sparc) || defined(__sparc__))
+/* ---------^^^ this is not a typo, just a way to detect that
+ * assembler support was in general requested... */
+#  include "sparc_arch.h"
+
+extern unsigned int OPENSSL_sparcv9cap_P[];
+
+#  define SPARC_DES_CAPABLE       (OPENSSL_sparcv9cap_P[1] & CFR_DES)
+
+void des_t4_key_expand(const void *key, DES_key_schedule *ks);
+void des_t4_ede3_cbc_encrypt(const void *inp, void *out, size_t len,
+                             const DES_key_schedule ks[3], unsigned char iv[8]);
+void des_t4_ede3_cbc_decrypt(const void *inp, void *out, size_t len,
+                             const DES_key_schedule ks[3], unsigned char iv[8]);
+# endif
+
+static int des_ede_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                            const unsigned char *iv, int enc);
+
+static int des_ede3_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                             const unsigned char *iv, int enc);
+
+static int des3_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr);
+
+# define data(ctx) EVP_C_DATA(DES_EDE_KEY,ctx)
+
+/*
+ * Because of various casts and different args can't use
+ * IMPLEMENT_BLOCK_CIPHER
+ */
+
+static int des_ede_ecb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                              const unsigned char *in, size_t inl)
+{
+    BLOCK_CIPHER_ecb_loop()
+        DES_ecb3_encrypt((const_DES_cblock *)(in + i),
+                         (DES_cblock *)(out + i),
+                         &data(ctx)->ks1, &data(ctx)->ks2,
+                         &data(ctx)->ks3, EVP_CIPHER_CTX_encrypting(ctx));
+    return 1;
+}
+
+static int des_ede_ofb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                              const unsigned char *in, size_t inl)
+{
+    while (inl >= EVP_MAXCHUNK) {
+        int num = EVP_CIPHER_CTX_num(ctx);
+        DES_ede3_ofb64_encrypt(in, out, (long)EVP_MAXCHUNK,
+                               &data(ctx)->ks1, &data(ctx)->ks2,
+                               &data(ctx)->ks3,
+                               (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx),
+                               &num);
+        EVP_CIPHER_CTX_set_num(ctx, num);
+        inl -= EVP_MAXCHUNK;
+        in += EVP_MAXCHUNK;
+        out += EVP_MAXCHUNK;
+    }
+    if (inl) {
+        int num = EVP_CIPHER_CTX_num(ctx);
+        DES_ede3_ofb64_encrypt(in, out, (long)inl,
+                               &data(ctx)->ks1, &data(ctx)->ks2,
+                               &data(ctx)->ks3,
+                               (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx),
+                               &num);
+        EVP_CIPHER_CTX_set_num(ctx, num);
+    }
+    return 1;
+}
+
+static int des_ede_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                              const unsigned char *in, size_t inl)
+{
+    DES_EDE_KEY *dat = data(ctx);
+
+    if (dat->stream.cbc != NULL) {
+        (*dat->stream.cbc) (in, out, inl, dat->ks.ks,
+                            EVP_CIPHER_CTX_iv_noconst(ctx));
+        return 1;
+    }
+
+    while (inl >= EVP_MAXCHUNK) {
+        DES_ede3_cbc_encrypt(in, out, (long)EVP_MAXCHUNK,
+                             &dat->ks1, &dat->ks2, &dat->ks3,
+                             (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx),
+                             EVP_CIPHER_CTX_encrypting(ctx));
+        inl -= EVP_MAXCHUNK;
+        in += EVP_MAXCHUNK;
+        out += EVP_MAXCHUNK;
+    }
+    if (inl)
+        DES_ede3_cbc_encrypt(in, out, (long)inl,
+                             &dat->ks1, &dat->ks2, &dat->ks3,
+                             (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx),
+                             EVP_CIPHER_CTX_encrypting(ctx));
+    return 1;
+}
+
+static int des_ede_cfb64_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                const unsigned char *in, size_t inl)
+{
+    while (inl >= EVP_MAXCHUNK) {
+        int num = EVP_CIPHER_CTX_num(ctx);
+        DES_ede3_cfb64_encrypt(in, out, (long)EVP_MAXCHUNK,
+                               &data(ctx)->ks1, &data(ctx)->ks2,
+                               &data(ctx)->ks3,
+                               (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx),
+                               &num, EVP_CIPHER_CTX_encrypting(ctx));
+        EVP_CIPHER_CTX_set_num(ctx, num);
+        inl -= EVP_MAXCHUNK;
+        in += EVP_MAXCHUNK;
+        out += EVP_MAXCHUNK;
+    }
+    if (inl) {
+        int num = EVP_CIPHER_CTX_num(ctx);
+        DES_ede3_cfb64_encrypt(in, out, (long)inl,
+                               &data(ctx)->ks1, &data(ctx)->ks2,
+                               &data(ctx)->ks3,
+                               (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx),
+                               &num, EVP_CIPHER_CTX_encrypting(ctx));
+        EVP_CIPHER_CTX_set_num(ctx, num);
+    }
+    return 1;
+}
+
+/*
+ * Although we have a CFB-r implementation for 3-DES, it doesn't pack the
+ * right way, so wrap it here
+ */
+static int des_ede3_cfb1_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                const unsigned char *in, size_t inl)
+{
+    size_t n;
+    unsigned char c[1], d[1];
+
+    if (!EVP_CIPHER_CTX_test_flags(ctx, EVP_CIPH_FLAG_LENGTH_BITS))
+            inl *= 8;
+    for (n = 0; n < inl; ++n) {
+        c[0] = (in[n / 8] & (1 << (7 - n % 8))) ? 0x80 : 0;
+        DES_ede3_cfb_encrypt(c, d, 1, 1,
+                             &data(ctx)->ks1, &data(ctx)->ks2,
+                             &data(ctx)->ks3,
+                             (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx),
+                             EVP_CIPHER_CTX_encrypting(ctx));
+        out[n / 8] = (out[n / 8] & ~(0x80 >> (unsigned int)(n % 8)))
+            | ((d[0] & 0x80) >> (unsigned int)(n % 8));
+    }
+
+    return 1;
+}
+
+static int des_ede3_cfb8_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                const unsigned char *in, size_t inl)
+{
+    while (inl >= EVP_MAXCHUNK) {
+        DES_ede3_cfb_encrypt(in, out, 8, (long)EVP_MAXCHUNK,
+                             &data(ctx)->ks1, &data(ctx)->ks2,
+                             &data(ctx)->ks3,
+                             (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx),
+                             EVP_CIPHER_CTX_encrypting(ctx));
+        inl -= EVP_MAXCHUNK;
+        in += EVP_MAXCHUNK;
+        out += EVP_MAXCHUNK;
+    }
+    if (inl)
+        DES_ede3_cfb_encrypt(in, out, 8, (long)inl,
+                             &data(ctx)->ks1, &data(ctx)->ks2,
+                             &data(ctx)->ks3,
+                             (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx),
+                             EVP_CIPHER_CTX_encrypting(ctx));
+    return 1;
+}
+
+BLOCK_CIPHER_defs(des_ede, DES_EDE_KEY, NID_des_ede, 8, 16, 8, 64,
+                  EVP_CIPH_RAND_KEY | EVP_CIPH_FLAG_DEFAULT_ASN1,
+                  des_ede_init_key, NULL, NULL, NULL, des3_ctrl)
+# define des_ede3_cfb64_cipher des_ede_cfb64_cipher
+# define des_ede3_ofb_cipher des_ede_ofb_cipher
+# define des_ede3_cbc_cipher des_ede_cbc_cipher
+# define des_ede3_ecb_cipher des_ede_ecb_cipher
+    BLOCK_CIPHER_defs(des_ede3, DES_EDE_KEY, NID_des_ede3, 8, 24, 8, 64,
+                  EVP_CIPH_RAND_KEY | EVP_CIPH_FLAG_DEFAULT_ASN1,
+                  des_ede3_init_key, NULL, NULL, NULL, des3_ctrl)
+
+    BLOCK_CIPHER_def_cfb(des_ede3, DES_EDE_KEY, NID_des_ede3, 24, 8, 1,
+                     EVP_CIPH_RAND_KEY | EVP_CIPH_FLAG_DEFAULT_ASN1,
+                     des_ede3_init_key, NULL, NULL, NULL, des3_ctrl)
+
+    BLOCK_CIPHER_def_cfb(des_ede3, DES_EDE_KEY, NID_des_ede3, 24, 8, 8,
+                     EVP_CIPH_RAND_KEY | EVP_CIPH_FLAG_DEFAULT_ASN1,
+                     des_ede3_init_key, NULL, NULL, NULL, des3_ctrl)
+
+static int des_ede_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                            const unsigned char *iv, int enc)
+{
+    DES_cblock *deskey = (DES_cblock *)key;
+    DES_EDE_KEY *dat = data(ctx);
+
+    dat->stream.cbc = NULL;
+# if defined(SPARC_DES_CAPABLE)
+    if (SPARC_DES_CAPABLE) {
+        int mode = EVP_CIPHER_CTX_mode(ctx);
+
+        if (mode == EVP_CIPH_CBC_MODE) {
+            des_t4_key_expand(&deskey[0], &dat->ks1);
+            des_t4_key_expand(&deskey[1], &dat->ks2);
+            memcpy(&dat->ks3, &dat->ks1, sizeof(dat->ks1));
+            dat->stream.cbc = enc ? des_t4_ede3_cbc_encrypt :
+                des_t4_ede3_cbc_decrypt;
+            return 1;
+        }
+    }
+# endif
+    DES_set_key_unchecked(&deskey[0], &dat->ks1);
+    DES_set_key_unchecked(&deskey[1], &dat->ks2);
+    memcpy(&dat->ks3, &dat->ks1, sizeof(dat->ks1));
+    return 1;
+}
+
+static int des_ede3_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                             const unsigned char *iv, int enc)
+{
+    DES_cblock *deskey = (DES_cblock *)key;
+    DES_EDE_KEY *dat = data(ctx);
+
+    dat->stream.cbc = NULL;
+# if defined(SPARC_DES_CAPABLE)
+    if (SPARC_DES_CAPABLE) {
+        int mode = EVP_CIPHER_CTX_mode(ctx);
+
+        if (mode == EVP_CIPH_CBC_MODE) {
+            des_t4_key_expand(&deskey[0], &dat->ks1);
+            des_t4_key_expand(&deskey[1], &dat->ks2);
+            des_t4_key_expand(&deskey[2], &dat->ks3);
+            dat->stream.cbc = enc ? des_t4_ede3_cbc_encrypt :
+                des_t4_ede3_cbc_decrypt;
+            return 1;
+        }
+    }
+# endif
+    DES_set_key_unchecked(&deskey[0], &dat->ks1);
+    DES_set_key_unchecked(&deskey[1], &dat->ks2);
+    DES_set_key_unchecked(&deskey[2], &dat->ks3);
+    return 1;
+}
+
+static int des3_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void *ptr)
+{
+
+    DES_cblock *deskey = ptr;
+
+    switch (type) {
+    case EVP_CTRL_RAND_KEY:
+        if (RAND_priv_bytes(ptr, EVP_CIPHER_CTX_key_length(ctx)) <= 0)
+            return 0;
+        DES_set_odd_parity(deskey);
+        if (EVP_CIPHER_CTX_key_length(ctx) >= 16)
+            DES_set_odd_parity(deskey + 1);
+        if (EVP_CIPHER_CTX_key_length(ctx) >= 24)
+            DES_set_odd_parity(deskey + 2);
+        return 1;
+
+    default:
+        return -1;
+    }
+}
+
+const EVP_CIPHER *EVP_des_ede(void)
+{
+    return &des_ede_ecb;
+}
+
+const EVP_CIPHER *EVP_des_ede3(void)
+{
+    return &des_ede3_ecb;
+}
+
+
+# include <openssl/sha.h>
+
+static const unsigned char wrap_iv[8] =
+    { 0x4a, 0xdd, 0xa2, 0x2c, 0x79, 0xe8, 0x21, 0x05 };
+
+static int des_ede3_unwrap(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                           const unsigned char *in, size_t inl)
+{
+    unsigned char icv[8], iv[8], sha1tmp[SHA_DIGEST_LENGTH];
+    int rv = -1;
+    if (inl < 24)
+        return -1;
+    if (out == NULL)
+        return inl - 16;
+    memcpy(EVP_CIPHER_CTX_iv_noconst(ctx), wrap_iv, 8);
+    /* Decrypt first block which will end up as icv */
+    des_ede_cbc_cipher(ctx, icv, in, 8);
+    /* Decrypt central blocks */
+    /*
+     * If decrypting in place move whole output along a block so the next
+     * des_ede_cbc_cipher is in place.
+     */
+    if (out == in) {
+        memmove(out, out + 8, inl - 8);
+        in -= 8;
+    }
+    des_ede_cbc_cipher(ctx, out, in + 8, inl - 16);
+    /* Decrypt final block which will be IV */
+    des_ede_cbc_cipher(ctx, iv, in + inl - 8, 8);
+    /* Reverse order of everything */
+    BUF_reverse(icv, NULL, 8);
+    BUF_reverse(out, NULL, inl - 16);
+    BUF_reverse(EVP_CIPHER_CTX_iv_noconst(ctx), iv, 8);
+    /* Decrypt again using new IV */
+    des_ede_cbc_cipher(ctx, out, out, inl - 16);
+    des_ede_cbc_cipher(ctx, icv, icv, 8);
+    /* Work out SHA1 hash of first portion */
+    SHA1(out, inl - 16, sha1tmp);
+
+    if (!CRYPTO_memcmp(sha1tmp, icv, 8))
+        rv = inl - 16;
+    OPENSSL_cleanse(icv, 8);
+    OPENSSL_cleanse(sha1tmp, SHA_DIGEST_LENGTH);
+    OPENSSL_cleanse(iv, 8);
+    OPENSSL_cleanse(EVP_CIPHER_CTX_iv_noconst(ctx), 8);
+    if (rv == -1)
+        OPENSSL_cleanse(out, inl - 16);
+
+    return rv;
+}
+
+static int des_ede3_wrap(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                         const unsigned char *in, size_t inl)
+{
+    unsigned char sha1tmp[SHA_DIGEST_LENGTH];
+    if (out == NULL)
+        return inl + 16;
+    /* Copy input to output buffer + 8 so we have space for IV */
+    memmove(out + 8, in, inl);
+    /* Work out ICV */
+    SHA1(in, inl, sha1tmp);
+    memcpy(out + inl + 8, sha1tmp, 8);
+    OPENSSL_cleanse(sha1tmp, SHA_DIGEST_LENGTH);
+    /* Generate random IV */
+    if (RAND_bytes(EVP_CIPHER_CTX_iv_noconst(ctx), 8) <= 0)
+        return -1;
+    memcpy(out, EVP_CIPHER_CTX_iv_noconst(ctx), 8);
+    /* Encrypt everything after IV in place */
+    des_ede_cbc_cipher(ctx, out + 8, out + 8, inl + 8);
+    BUF_reverse(out, NULL, inl + 16);
+    memcpy(EVP_CIPHER_CTX_iv_noconst(ctx), wrap_iv, 8);
+    des_ede_cbc_cipher(ctx, out, out, inl + 16);
+    return inl + 16;
+}
+
+static int des_ede3_wrap_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                const unsigned char *in, size_t inl)
+{
+    /*
+     * Sanity check input length: we typically only wrap keys so EVP_MAXCHUNK
+     * is more than will ever be needed. Also input length must be a multiple
+     * of 8 bits.
+     */
+    if (inl >= EVP_MAXCHUNK || inl % 8)
+        return -1;
+
+    if (is_partially_overlapping(out, in, inl)) {
+        EVPerr(EVP_F_DES_EDE3_WRAP_CIPHER, EVP_R_PARTIALLY_OVERLAPPING);
+        return 0;
+    }
+
+    if (EVP_CIPHER_CTX_encrypting(ctx))
+        return des_ede3_wrap(ctx, out, in, inl);
+    else
+        return des_ede3_unwrap(ctx, out, in, inl);
+}
+
+static const EVP_CIPHER des3_wrap = {
+    NID_id_smime_alg_CMS3DESwrap,
+    8, 24, 0,
+    EVP_CIPH_WRAP_MODE | EVP_CIPH_CUSTOM_IV | EVP_CIPH_FLAG_CUSTOM_CIPHER
+        | EVP_CIPH_FLAG_DEFAULT_ASN1,
+    des_ede3_init_key, des_ede3_wrap_cipher,
+    NULL,
+    sizeof(DES_EDE_KEY),
+    NULL, NULL, NULL, NULL
+};
+
+const EVP_CIPHER *EVP_des_ede3_wrap(void)
+{
+    return &des3_wrap;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_idea.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_idea.c
new file mode 100644
index 000000000..93f6a4131
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_idea.c
@@ -0,0 +1,70 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_IDEA
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include "internal/evp_int.h"
+# include <openssl/idea.h>
+
+/* Can't use IMPLEMENT_BLOCK_CIPHER because IDEA_ecb_encrypt is different */
+
+typedef struct {
+    IDEA_KEY_SCHEDULE ks;
+} EVP_IDEA_KEY;
+
+static int idea_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                         const unsigned char *iv, int enc);
+
+/*
+ * NB IDEA_ecb_encrypt doesn't take an 'encrypt' argument so we treat it as a
+ * special case
+ */
+
+static int idea_ecb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                           const unsigned char *in, size_t inl)
+{
+    BLOCK_CIPHER_ecb_loop()
+        IDEA_ecb_encrypt(in + i, out + i, &EVP_C_DATA(EVP_IDEA_KEY,ctx)->ks);
+    return 1;
+}
+
+BLOCK_CIPHER_func_cbc(idea, IDEA, EVP_IDEA_KEY, ks)
+BLOCK_CIPHER_func_ofb(idea, IDEA, 64, EVP_IDEA_KEY, ks)
+BLOCK_CIPHER_func_cfb(idea, IDEA, 64, EVP_IDEA_KEY, ks)
+
+BLOCK_CIPHER_defs(idea, IDEA_KEY_SCHEDULE, NID_idea, 8, 16, 8, 64,
+                  0, idea_init_key, NULL,
+                  EVP_CIPHER_set_asn1_iv, EVP_CIPHER_get_asn1_iv, NULL)
+
+static int idea_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                         const unsigned char *iv, int enc)
+{
+    if (!enc) {
+        if (EVP_CIPHER_CTX_mode(ctx) == EVP_CIPH_OFB_MODE)
+            enc = 1;
+        else if (EVP_CIPHER_CTX_mode(ctx) == EVP_CIPH_CFB_MODE)
+            enc = 1;
+    }
+    if (enc)
+        IDEA_set_encrypt_key(key, &EVP_C_DATA(EVP_IDEA_KEY,ctx)->ks);
+    else {
+        IDEA_KEY_SCHEDULE tmp;
+
+        IDEA_set_encrypt_key(key, &tmp);
+        IDEA_set_decrypt_key(&tmp, &EVP_C_DATA(EVP_IDEA_KEY,ctx)->ks);
+        OPENSSL_cleanse((unsigned char *)&tmp, sizeof(IDEA_KEY_SCHEDULE));
+    }
+    return 1;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_null.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_null.c
new file mode 100644
index 000000000..18a846821
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_null.c
@@ -0,0 +1,50 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include "internal/evp_int.h"
+
+static int null_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                         const unsigned char *iv, int enc);
+static int null_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                       const unsigned char *in, size_t inl);
+static const EVP_CIPHER n_cipher = {
+    NID_undef,
+    1, 0, 0, 0,
+    null_init_key,
+    null_cipher,
+    NULL,
+    0,
+    NULL,
+    NULL,
+    NULL,
+    NULL
+};
+
+const EVP_CIPHER *EVP_enc_null(void)
+{
+    return &n_cipher;
+}
+
+static int null_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                         const unsigned char *iv, int enc)
+{
+    return 1;
+}
+
+static int null_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                       const unsigned char *in, size_t inl)
+{
+    if (in != out)
+        memcpy(out, in, inl);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_old.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_old.c
new file mode 100644
index 000000000..927908f87
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_old.c
@@ -0,0 +1,113 @@
+/*
+ * Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#if OPENSSL_API_COMPAT >= 0x00908000L
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <openssl/evp.h>
+
+/*
+ * Define some deprecated functions, so older programs don't crash and burn
+ * too quickly.  On Windows and VMS, these will never be used, since
+ * functions and variables in shared libraries are selected by entry point
+ * location, not by name.
+ */
+
+# ifndef OPENSSL_NO_BF
+#  undef EVP_bf_cfb
+const EVP_CIPHER *EVP_bf_cfb(void);
+const EVP_CIPHER *EVP_bf_cfb(void)
+{
+    return EVP_bf_cfb64();
+}
+# endif
+
+# ifndef OPENSSL_NO_DES
+#  undef EVP_des_cfb
+const EVP_CIPHER *EVP_des_cfb(void);
+const EVP_CIPHER *EVP_des_cfb(void)
+{
+    return EVP_des_cfb64();
+}
+
+#  undef EVP_des_ede3_cfb
+const EVP_CIPHER *EVP_des_ede3_cfb(void);
+const EVP_CIPHER *EVP_des_ede3_cfb(void)
+{
+    return EVP_des_ede3_cfb64();
+}
+
+#  undef EVP_des_ede_cfb
+const EVP_CIPHER *EVP_des_ede_cfb(void);
+const EVP_CIPHER *EVP_des_ede_cfb(void)
+{
+    return EVP_des_ede_cfb64();
+}
+# endif
+
+# ifndef OPENSSL_NO_IDEA
+#  undef EVP_idea_cfb
+const EVP_CIPHER *EVP_idea_cfb(void);
+const EVP_CIPHER *EVP_idea_cfb(void)
+{
+    return EVP_idea_cfb64();
+}
+# endif
+
+# ifndef OPENSSL_NO_RC2
+#  undef EVP_rc2_cfb
+const EVP_CIPHER *EVP_rc2_cfb(void);
+const EVP_CIPHER *EVP_rc2_cfb(void)
+{
+    return EVP_rc2_cfb64();
+}
+# endif
+
+# ifndef OPENSSL_NO_CAST
+#  undef EVP_cast5_cfb
+const EVP_CIPHER *EVP_cast5_cfb(void);
+const EVP_CIPHER *EVP_cast5_cfb(void)
+{
+    return EVP_cast5_cfb64();
+}
+# endif
+
+# ifndef OPENSSL_NO_RC5
+#  undef EVP_rc5_32_12_16_cfb
+const EVP_CIPHER *EVP_rc5_32_12_16_cfb(void);
+const EVP_CIPHER *EVP_rc5_32_12_16_cfb(void)
+{
+    return EVP_rc5_32_12_16_cfb64();
+}
+# endif
+
+# undef EVP_aes_128_cfb
+const EVP_CIPHER *EVP_aes_128_cfb(void);
+const EVP_CIPHER *EVP_aes_128_cfb(void)
+{
+    return EVP_aes_128_cfb128();
+}
+
+# undef EVP_aes_192_cfb
+const EVP_CIPHER *EVP_aes_192_cfb(void);
+const EVP_CIPHER *EVP_aes_192_cfb(void)
+{
+    return EVP_aes_192_cfb128();
+}
+
+# undef EVP_aes_256_cfb
+const EVP_CIPHER *EVP_aes_256_cfb(void);
+const EVP_CIPHER *EVP_aes_256_cfb(void)
+{
+    return EVP_aes_256_cfb128();
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_rc2.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_rc2.c
new file mode 100644
index 000000000..aa0d14018
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_rc2.c
@@ -0,0 +1,191 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_RC2
+
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include "internal/evp_int.h"
+# include <openssl/rc2.h>
+
+static int rc2_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                        const unsigned char *iv, int enc);
+static int rc2_meth_to_magic(EVP_CIPHER_CTX *ctx);
+static int rc2_magic_to_meth(int i);
+static int rc2_set_asn1_type_and_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
+static int rc2_get_asn1_type_and_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
+static int rc2_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr);
+
+typedef struct {
+    int key_bits;               /* effective key bits */
+    RC2_KEY ks;                 /* key schedule */
+} EVP_RC2_KEY;
+
+# define data(ctx)       EVP_C_DATA(EVP_RC2_KEY,ctx)
+
+IMPLEMENT_BLOCK_CIPHER(rc2, ks, RC2, EVP_RC2_KEY, NID_rc2,
+                       8,
+                       RC2_KEY_LENGTH, 8, 64,
+                       EVP_CIPH_VARIABLE_LENGTH | EVP_CIPH_CTRL_INIT,
+                       rc2_init_key, NULL,
+                       rc2_set_asn1_type_and_iv, rc2_get_asn1_type_and_iv,
+                       rc2_ctrl)
+# define RC2_40_MAGIC    0xa0
+# define RC2_64_MAGIC    0x78
+# define RC2_128_MAGIC   0x3a
+static const EVP_CIPHER r2_64_cbc_cipher = {
+    NID_rc2_64_cbc,
+    8, 8 /* 64 bit */ , 8,
+    EVP_CIPH_CBC_MODE | EVP_CIPH_VARIABLE_LENGTH | EVP_CIPH_CTRL_INIT,
+    rc2_init_key,
+    rc2_cbc_cipher,
+    NULL,
+    sizeof(EVP_RC2_KEY),
+    rc2_set_asn1_type_and_iv,
+    rc2_get_asn1_type_and_iv,
+    rc2_ctrl,
+    NULL
+};
+
+static const EVP_CIPHER r2_40_cbc_cipher = {
+    NID_rc2_40_cbc,
+    8, 5 /* 40 bit */ , 8,
+    EVP_CIPH_CBC_MODE | EVP_CIPH_VARIABLE_LENGTH | EVP_CIPH_CTRL_INIT,
+    rc2_init_key,
+    rc2_cbc_cipher,
+    NULL,
+    sizeof(EVP_RC2_KEY),
+    rc2_set_asn1_type_and_iv,
+    rc2_get_asn1_type_and_iv,
+    rc2_ctrl,
+    NULL
+};
+
+const EVP_CIPHER *EVP_rc2_64_cbc(void)
+{
+    return &r2_64_cbc_cipher;
+}
+
+const EVP_CIPHER *EVP_rc2_40_cbc(void)
+{
+    return &r2_40_cbc_cipher;
+}
+
+static int rc2_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                        const unsigned char *iv, int enc)
+{
+    RC2_set_key(&data(ctx)->ks, EVP_CIPHER_CTX_key_length(ctx),
+                key, data(ctx)->key_bits);
+    return 1;
+}
+
+static int rc2_meth_to_magic(EVP_CIPHER_CTX *e)
+{
+    int i;
+
+    if (EVP_CIPHER_CTX_ctrl(e, EVP_CTRL_GET_RC2_KEY_BITS, 0, &i) <= 0)
+        return 0;
+    if (i == 128)
+        return RC2_128_MAGIC;
+    else if (i == 64)
+        return RC2_64_MAGIC;
+    else if (i == 40)
+        return RC2_40_MAGIC;
+    else
+        return 0;
+}
+
+static int rc2_magic_to_meth(int i)
+{
+    if (i == RC2_128_MAGIC)
+        return 128;
+    else if (i == RC2_64_MAGIC)
+        return 64;
+    else if (i == RC2_40_MAGIC)
+        return 40;
+    else {
+        EVPerr(EVP_F_RC2_MAGIC_TO_METH, EVP_R_UNSUPPORTED_KEY_SIZE);
+        return 0;
+    }
+}
+
+static int rc2_get_asn1_type_and_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type)
+{
+    long num = 0;
+    int i = 0;
+    int key_bits;
+    unsigned int l;
+    unsigned char iv[EVP_MAX_IV_LENGTH];
+
+    if (type != NULL) {
+        l = EVP_CIPHER_CTX_iv_length(c);
+        OPENSSL_assert(l <= sizeof(iv));
+        i = ASN1_TYPE_get_int_octetstring(type, &num, iv, l);
+        if (i != (int)l)
+            return -1;
+        key_bits = rc2_magic_to_meth((int)num);
+        if (!key_bits)
+            return -1;
+        if (i > 0 && !EVP_CipherInit_ex(c, NULL, NULL, NULL, iv, -1))
+            return -1;
+        if (EVP_CIPHER_CTX_ctrl(c, EVP_CTRL_SET_RC2_KEY_BITS, key_bits,
+                                NULL) <= 0
+                || EVP_CIPHER_CTX_set_key_length(c, key_bits / 8) <= 0)
+            return -1;
+    }
+    return i;
+}
+
+static int rc2_set_asn1_type_and_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type)
+{
+    long num;
+    int i = 0, j;
+
+    if (type != NULL) {
+        num = rc2_meth_to_magic(c);
+        j = EVP_CIPHER_CTX_iv_length(c);
+        i = ASN1_TYPE_set_int_octetstring(type, num,
+                                          (unsigned char *)EVP_CIPHER_CTX_original_iv(c),
+                                          j);
+    }
+    return i;
+}
+
+static int rc2_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
+{
+    switch (type) {
+    case EVP_CTRL_INIT:
+        data(c)->key_bits = EVP_CIPHER_CTX_key_length(c) * 8;
+        return 1;
+
+    case EVP_CTRL_GET_RC2_KEY_BITS:
+        *(int *)ptr = data(c)->key_bits;
+        return 1;
+
+    case EVP_CTRL_SET_RC2_KEY_BITS:
+        if (arg > 0) {
+            data(c)->key_bits = arg;
+            return 1;
+        }
+        return 0;
+# ifdef PBE_PRF_TEST
+    case EVP_CTRL_PBE_PRF_NID:
+        *(int *)ptr = NID_hmacWithMD5;
+        return 1;
+# endif
+
+    default:
+        return -1;
+    }
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_rc4.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_rc4.c
new file mode 100644
index 000000000..d16abdd0d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_rc4.c
@@ -0,0 +1,82 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_RC4
+
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include <openssl/rc4.h>
+
+# include "internal/evp_int.h"
+
+typedef struct {
+    RC4_KEY ks;                 /* working key */
+} EVP_RC4_KEY;
+
+# define data(ctx) ((EVP_RC4_KEY *)EVP_CIPHER_CTX_get_cipher_data(ctx))
+
+static int rc4_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                        const unsigned char *iv, int enc);
+static int rc4_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                      const unsigned char *in, size_t inl);
+static const EVP_CIPHER r4_cipher = {
+    NID_rc4,
+    1, EVP_RC4_KEY_SIZE, 0,
+    EVP_CIPH_VARIABLE_LENGTH,
+    rc4_init_key,
+    rc4_cipher,
+    NULL,
+    sizeof(EVP_RC4_KEY),
+    NULL,
+    NULL,
+    NULL,
+    NULL
+};
+
+static const EVP_CIPHER r4_40_cipher = {
+    NID_rc4_40,
+    1, 5 /* 40 bit */ , 0,
+    EVP_CIPH_VARIABLE_LENGTH,
+    rc4_init_key,
+    rc4_cipher,
+    NULL,
+    sizeof(EVP_RC4_KEY),
+    NULL,
+    NULL,
+    NULL,
+    NULL
+};
+
+const EVP_CIPHER *EVP_rc4(void)
+{
+    return &r4_cipher;
+}
+
+const EVP_CIPHER *EVP_rc4_40(void)
+{
+    return &r4_40_cipher;
+}
+
+static int rc4_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                        const unsigned char *iv, int enc)
+{
+    RC4_set_key(&data(ctx)->ks, EVP_CIPHER_CTX_key_length(ctx), key);
+    return 1;
+}
+
+static int rc4_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                      const unsigned char *in, size_t inl)
+{
+    RC4(&data(ctx)->ks, inl, in, out);
+    return 1;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_rc4_hmac_md5.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_rc4_hmac_md5.c
new file mode 100644
index 000000000..b1e8ccd6d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_rc4_hmac_md5.c
@@ -0,0 +1,262 @@
+/*
+ * Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+
+#include <stdio.h>
+#include <string.h>
+
+#if !defined(OPENSSL_NO_RC4) && !defined(OPENSSL_NO_MD5)
+
+# include <openssl/crypto.h>
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include <openssl/rc4.h>
+# include <openssl/md5.h>
+# include "internal/evp_int.h"
+
+typedef struct {
+    RC4_KEY ks;
+    MD5_CTX head, tail, md;
+    size_t payload_length;
+} EVP_RC4_HMAC_MD5;
+
+# define NO_PAYLOAD_LENGTH       ((size_t)-1)
+
+void rc4_md5_enc(RC4_KEY *key, const void *in0, void *out,
+                 MD5_CTX *ctx, const void *inp, size_t blocks);
+
+# define data(ctx) ((EVP_RC4_HMAC_MD5 *)EVP_CIPHER_CTX_get_cipher_data(ctx))
+
+static int rc4_hmac_md5_init_key(EVP_CIPHER_CTX *ctx,
+                                 const unsigned char *inkey,
+                                 const unsigned char *iv, int enc)
+{
+    EVP_RC4_HMAC_MD5 *key = data(ctx);
+
+    RC4_set_key(&key->ks, EVP_CIPHER_CTX_key_length(ctx), inkey);
+
+    MD5_Init(&key->head);       /* handy when benchmarking */
+    key->tail = key->head;
+    key->md = key->head;
+
+    key->payload_length = NO_PAYLOAD_LENGTH;
+
+    return 1;
+}
+
+# if     defined(RC4_ASM) && defined(MD5_ASM) &&     (	   \
+        defined(__x86_64)       || defined(__x86_64__)  || \
+        defined(_M_AMD64)       || defined(_M_X64)      )
+#  define STITCHED_CALL
+# endif
+
+# if !defined(STITCHED_CALL)
+#  define rc4_off 0
+#  define md5_off 0
+# endif
+
+static int rc4_hmac_md5_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                               const unsigned char *in, size_t len)
+{
+    EVP_RC4_HMAC_MD5 *key = data(ctx);
+# if defined(STITCHED_CALL)
+    size_t rc4_off = 32 - 1 - (key->ks.x & (32 - 1)), /* 32 is $MOD from
+                                                       * rc4_md5-x86_64.pl */
+        md5_off = MD5_CBLOCK - key->md.num, blocks;
+    unsigned int l;
+    extern unsigned int OPENSSL_ia32cap_P[];
+# endif
+    size_t plen = key->payload_length;
+
+    if (plen != NO_PAYLOAD_LENGTH && len != (plen + MD5_DIGEST_LENGTH))
+        return 0;
+
+    if (EVP_CIPHER_CTX_encrypting(ctx)) {
+        if (plen == NO_PAYLOAD_LENGTH)
+            plen = len;
+# if defined(STITCHED_CALL)
+        /* cipher has to "fall behind" */
+        if (rc4_off > md5_off)
+            md5_off += MD5_CBLOCK;
+
+        if (plen > md5_off && (blocks = (plen - md5_off) / MD5_CBLOCK) &&
+            (OPENSSL_ia32cap_P[0] & (1 << 20)) == 0) {
+            MD5_Update(&key->md, in, md5_off);
+            RC4(&key->ks, rc4_off, in, out);
+
+            rc4_md5_enc(&key->ks, in + rc4_off, out + rc4_off,
+                        &key->md, in + md5_off, blocks);
+            blocks *= MD5_CBLOCK;
+            rc4_off += blocks;
+            md5_off += blocks;
+            key->md.Nh += blocks >> 29;
+            key->md.Nl += blocks <<= 3;
+            if (key->md.Nl < (unsigned int)blocks)
+                key->md.Nh++;
+        } else {
+            rc4_off = 0;
+            md5_off = 0;
+        }
+# endif
+        MD5_Update(&key->md, in + md5_off, plen - md5_off);
+
+        if (plen != len) {      /* "TLS" mode of operation */
+            if (in != out)
+                memcpy(out + rc4_off, in + rc4_off, plen - rc4_off);
+
+            /* calculate HMAC and append it to payload */
+            MD5_Final(out + plen, &key->md);
+            key->md = key->tail;
+            MD5_Update(&key->md, out + plen, MD5_DIGEST_LENGTH);
+            MD5_Final(out + plen, &key->md);
+            /* encrypt HMAC at once */
+            RC4(&key->ks, len - rc4_off, out + rc4_off, out + rc4_off);
+        } else {
+            RC4(&key->ks, len - rc4_off, in + rc4_off, out + rc4_off);
+        }
+    } else {
+        unsigned char mac[MD5_DIGEST_LENGTH];
+# if defined(STITCHED_CALL)
+        /* digest has to "fall behind" */
+        if (md5_off > rc4_off)
+            rc4_off += 2 * MD5_CBLOCK;
+        else
+            rc4_off += MD5_CBLOCK;
+
+        if (len > rc4_off && (blocks = (len - rc4_off) / MD5_CBLOCK) &&
+            (OPENSSL_ia32cap_P[0] & (1 << 20)) == 0) {
+            RC4(&key->ks, rc4_off, in, out);
+            MD5_Update(&key->md, out, md5_off);
+
+            rc4_md5_enc(&key->ks, in + rc4_off, out + rc4_off,
+                        &key->md, out + md5_off, blocks);
+            blocks *= MD5_CBLOCK;
+            rc4_off += blocks;
+            md5_off += blocks;
+            l = (key->md.Nl + (blocks << 3)) & 0xffffffffU;
+            if (l < key->md.Nl)
+                key->md.Nh++;
+            key->md.Nl = l;
+            key->md.Nh += blocks >> 29;
+        } else {
+            md5_off = 0;
+            rc4_off = 0;
+        }
+# endif
+        /* decrypt HMAC at once */
+        RC4(&key->ks, len - rc4_off, in + rc4_off, out + rc4_off);
+        if (plen != NO_PAYLOAD_LENGTH) { /* "TLS" mode of operation */
+            MD5_Update(&key->md, out + md5_off, plen - md5_off);
+
+            /* calculate HMAC and verify it */
+            MD5_Final(mac, &key->md);
+            key->md = key->tail;
+            MD5_Update(&key->md, mac, MD5_DIGEST_LENGTH);
+            MD5_Final(mac, &key->md);
+
+            if (CRYPTO_memcmp(out + plen, mac, MD5_DIGEST_LENGTH))
+                return 0;
+        } else {
+            MD5_Update(&key->md, out + md5_off, len - md5_off);
+        }
+    }
+
+    key->payload_length = NO_PAYLOAD_LENGTH;
+
+    return 1;
+}
+
+static int rc4_hmac_md5_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg,
+                             void *ptr)
+{
+    EVP_RC4_HMAC_MD5 *key = data(ctx);
+
+    switch (type) {
+    case EVP_CTRL_AEAD_SET_MAC_KEY:
+        {
+            unsigned int i;
+            unsigned char hmac_key[64];
+
+            memset(hmac_key, 0, sizeof(hmac_key));
+
+            if (arg > (int)sizeof(hmac_key)) {
+                MD5_Init(&key->head);
+                MD5_Update(&key->head, ptr, arg);
+                MD5_Final(hmac_key, &key->head);
+            } else {
+                memcpy(hmac_key, ptr, arg);
+            }
+
+            for (i = 0; i < sizeof(hmac_key); i++)
+                hmac_key[i] ^= 0x36; /* ipad */
+            MD5_Init(&key->head);
+            MD5_Update(&key->head, hmac_key, sizeof(hmac_key));
+
+            for (i = 0; i < sizeof(hmac_key); i++)
+                hmac_key[i] ^= 0x36 ^ 0x5c; /* opad */
+            MD5_Init(&key->tail);
+            MD5_Update(&key->tail, hmac_key, sizeof(hmac_key));
+
+            OPENSSL_cleanse(hmac_key, sizeof(hmac_key));
+
+            return 1;
+        }
+    case EVP_CTRL_AEAD_TLS1_AAD:
+        {
+            unsigned char *p = ptr;
+            unsigned int len;
+
+            if (arg != EVP_AEAD_TLS1_AAD_LEN)
+                return -1;
+
+            len = p[arg - 2] << 8 | p[arg - 1];
+
+            if (!EVP_CIPHER_CTX_encrypting(ctx)) {
+                if (len < MD5_DIGEST_LENGTH)
+                    return -1;
+                len -= MD5_DIGEST_LENGTH;
+                p[arg - 2] = len >> 8;
+                p[arg - 1] = len;
+            }
+            key->payload_length = len;
+            key->md = key->head;
+            MD5_Update(&key->md, p, arg);
+
+            return MD5_DIGEST_LENGTH;
+        }
+    default:
+        return -1;
+    }
+}
+
+static EVP_CIPHER r4_hmac_md5_cipher = {
+# ifdef NID_rc4_hmac_md5
+    NID_rc4_hmac_md5,
+# else
+    NID_undef,
+# endif
+    1, EVP_RC4_KEY_SIZE, 0,
+    EVP_CIPH_STREAM_CIPHER | EVP_CIPH_VARIABLE_LENGTH |
+        EVP_CIPH_FLAG_AEAD_CIPHER,
+    rc4_hmac_md5_init_key,
+    rc4_hmac_md5_cipher,
+    NULL,
+    sizeof(EVP_RC4_HMAC_MD5),
+    NULL,
+    NULL,
+    rc4_hmac_md5_ctrl,
+    NULL
+};
+
+const EVP_CIPHER *EVP_rc4_hmac_md5(void)
+{
+    return &r4_hmac_md5_cipher;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_rc5.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_rc5.c
new file mode 100644
index 000000000..a2f26d8c5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_rc5.c
@@ -0,0 +1,74 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_RC5
+
+# include <openssl/evp.h>
+# include "internal/evp_int.h"
+# include <openssl/objects.h>
+# include "evp_locl.h"
+# include <openssl/rc5.h>
+
+static int r_32_12_16_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                               const unsigned char *iv, int enc);
+static int rc5_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr);
+
+typedef struct {
+    int rounds;                 /* number of rounds */
+    RC5_32_KEY ks;              /* key schedule */
+} EVP_RC5_KEY;
+
+# define data(ctx)       EVP_C_DATA(EVP_RC5_KEY,ctx)
+
+IMPLEMENT_BLOCK_CIPHER(rc5_32_12_16, ks, RC5_32, EVP_RC5_KEY, NID_rc5,
+                       8, RC5_32_KEY_LENGTH, 8, 64,
+                       EVP_CIPH_VARIABLE_LENGTH | EVP_CIPH_CTRL_INIT,
+                       r_32_12_16_init_key, NULL, NULL, NULL, rc5_ctrl)
+
+static int rc5_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
+{
+    switch (type) {
+    case EVP_CTRL_INIT:
+        data(c)->rounds = RC5_12_ROUNDS;
+        return 1;
+
+    case EVP_CTRL_GET_RC5_ROUNDS:
+        *(int *)ptr = data(c)->rounds;
+        return 1;
+
+    case EVP_CTRL_SET_RC5_ROUNDS:
+        switch (arg) {
+        case RC5_8_ROUNDS:
+        case RC5_12_ROUNDS:
+        case RC5_16_ROUNDS:
+            data(c)->rounds = arg;
+            return 1;
+
+        default:
+            EVPerr(EVP_F_RC5_CTRL, EVP_R_UNSUPPORTED_NUMBER_OF_ROUNDS);
+            return 0;
+        }
+
+    default:
+        return -1;
+    }
+}
+
+static int r_32_12_16_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                               const unsigned char *iv, int enc)
+{
+    RC5_32_set_key(&data(ctx)->ks, EVP_CIPHER_CTX_key_length(ctx),
+                   key, data(ctx)->rounds);
+    return 1;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_seed.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_seed.c
new file mode 100644
index 000000000..40aec5fc6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_seed.c
@@ -0,0 +1,39 @@
+/*
+ * Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_SEED
+NON_EMPTY_TRANSLATION_UNIT
+#else
+# include <openssl/evp.h>
+# include <openssl/err.h>
+# include <string.h>
+# include <assert.h>
+# include <openssl/seed.h>
+# include "internal/evp_int.h"
+
+static int seed_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                         const unsigned char *iv, int enc);
+
+typedef struct {
+    SEED_KEY_SCHEDULE ks;
+} EVP_SEED_KEY;
+
+IMPLEMENT_BLOCK_CIPHER(seed, ks, SEED, EVP_SEED_KEY, NID_seed,
+                       16, 16, 16, 128, EVP_CIPH_FLAG_DEFAULT_ASN1,
+                       seed_init_key, 0, 0, 0, 0)
+
+static int seed_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                         const unsigned char *iv, int enc)
+{
+    SEED_set_key(key, &EVP_C_DATA(EVP_SEED_KEY,ctx)->ks);
+    return 1;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_sm4.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_sm4.c
new file mode 100644
index 000000000..79deb6563
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_sm4.c
@@ -0,0 +1,100 @@
+/*
+ * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017 Ribose Inc. All Rights Reserved.
+ * Ported from Ribose contributions from Botan.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#ifndef OPENSSL_NO_SM4
+# include <openssl/evp.h>
+# include <openssl/modes.h>
+# include "internal/sm4.h"
+# include "internal/evp_int.h"
+
+typedef struct {
+    SM4_KEY ks;
+} EVP_SM4_KEY;
+
+static int sm4_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                        const unsigned char *iv, int enc)
+{
+    SM4_set_key(key, EVP_CIPHER_CTX_get_cipher_data(ctx));
+    return 1;
+}
+
+static void sm4_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                            size_t len, const SM4_KEY *key,
+                            unsigned char *ivec, const int enc)
+{
+    if (enc)
+        CRYPTO_cbc128_encrypt(in, out, len, key, ivec,
+                              (block128_f)SM4_encrypt);
+    else
+        CRYPTO_cbc128_decrypt(in, out, len, key, ivec,
+                              (block128_f)SM4_decrypt);
+}
+
+static void sm4_cfb128_encrypt(const unsigned char *in, unsigned char *out,
+                               size_t length, const SM4_KEY *key,
+                               unsigned char *ivec, int *num, const int enc)
+{
+    CRYPTO_cfb128_encrypt(in, out, length, key, ivec, num, enc,
+                          (block128_f)SM4_encrypt);
+}
+
+static void sm4_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                            const SM4_KEY *key, const int enc)
+{
+    if (enc)
+        SM4_encrypt(in, out, key);
+    else
+        SM4_decrypt(in, out, key);
+}
+
+static void sm4_ofb128_encrypt(const unsigned char *in, unsigned char *out,
+                               size_t length, const SM4_KEY *key,
+                               unsigned char *ivec, int *num)
+{
+    CRYPTO_ofb128_encrypt(in, out, length, key, ivec, num,
+                          (block128_f)SM4_encrypt);
+}
+
+IMPLEMENT_BLOCK_CIPHER(sm4, ks, sm4, EVP_SM4_KEY, NID_sm4,
+                       16, 16, 16, 128, EVP_CIPH_FLAG_DEFAULT_ASN1,
+                       sm4_init_key, 0, 0, 0, 0)
+
+static int sm4_ctr_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                          const unsigned char *in, size_t len)
+{
+    unsigned int num = EVP_CIPHER_CTX_num(ctx);
+    EVP_SM4_KEY *dat = EVP_C_DATA(EVP_SM4_KEY, ctx);
+
+    CRYPTO_ctr128_encrypt(in, out, len, &dat->ks,
+                          EVP_CIPHER_CTX_iv_noconst(ctx),
+                          EVP_CIPHER_CTX_buf_noconst(ctx), &num,
+                          (block128_f)SM4_encrypt);
+    EVP_CIPHER_CTX_set_num(ctx, num);
+    return 1;
+}
+
+static const EVP_CIPHER sm4_ctr_mode = {
+    NID_sm4_ctr, 1, 16, 16,
+    EVP_CIPH_CTR_MODE,
+    sm4_init_key,
+    sm4_ctr_cipher,
+    NULL,
+    sizeof(EVP_SM4_KEY),
+    NULL, NULL, NULL, NULL
+};
+
+const EVP_CIPHER *EVP_sm4_ctr(void)
+{
+    return &sm4_ctr_mode;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_xcbc_d.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_xcbc_d.c
new file mode 100644
index 000000000..57ce813da
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/e_xcbc_d.c
@@ -0,0 +1,83 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_DES
+
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include "internal/evp_int.h"
+# include <openssl/des.h>
+
+static int desx_cbc_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                             const unsigned char *iv, int enc);
+static int desx_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                           const unsigned char *in, size_t inl);
+
+typedef struct {
+    DES_key_schedule ks;        /* key schedule */
+    DES_cblock inw;
+    DES_cblock outw;
+} DESX_CBC_KEY;
+
+# define data(ctx) EVP_C_DATA(DESX_CBC_KEY,ctx)
+
+static const EVP_CIPHER d_xcbc_cipher = {
+    NID_desx_cbc,
+    8, 24, 8,
+    EVP_CIPH_CBC_MODE,
+    desx_cbc_init_key,
+    desx_cbc_cipher,
+    NULL,
+    sizeof(DESX_CBC_KEY),
+    EVP_CIPHER_set_asn1_iv,
+    EVP_CIPHER_get_asn1_iv,
+    NULL,
+    NULL
+};
+
+const EVP_CIPHER *EVP_desx_cbc(void)
+{
+    return &d_xcbc_cipher;
+}
+
+static int desx_cbc_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                             const unsigned char *iv, int enc)
+{
+    DES_cblock *deskey = (DES_cblock *)key;
+
+    DES_set_key_unchecked(deskey, &data(ctx)->ks);
+    memcpy(&data(ctx)->inw[0], &key[8], 8);
+    memcpy(&data(ctx)->outw[0], &key[16], 8);
+
+    return 1;
+}
+
+static int desx_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                           const unsigned char *in, size_t inl)
+{
+    while (inl >= EVP_MAXCHUNK) {
+        DES_xcbc_encrypt(in, out, (long)EVP_MAXCHUNK, &data(ctx)->ks,
+                         (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx),
+                         &data(ctx)->inw, &data(ctx)->outw,
+                         EVP_CIPHER_CTX_encrypting(ctx));
+        inl -= EVP_MAXCHUNK;
+        in += EVP_MAXCHUNK;
+        out += EVP_MAXCHUNK;
+    }
+    if (inl)
+        DES_xcbc_encrypt(in, out, (long)inl, &data(ctx)->ks,
+                         (DES_cblock *)EVP_CIPHER_CTX_iv_noconst(ctx),
+                         &data(ctx)->inw, &data(ctx)->outw,
+                         EVP_CIPHER_CTX_encrypting(ctx));
+    return 1;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/encode.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/encode.c
new file mode 100644
index 000000000..da32d4fd1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/encode.c
@@ -0,0 +1,478 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <limits.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include "evp_locl.h"
+#include "internal/evp_int.h"
+
+static unsigned char conv_ascii2bin(unsigned char a,
+                                    const unsigned char *table);
+static int evp_encodeblock_int(EVP_ENCODE_CTX *ctx, unsigned char *t,
+                               const unsigned char *f, int dlen);
+static int evp_decodeblock_int(EVP_ENCODE_CTX *ctx, unsigned char *t,
+                               const unsigned char *f, int n);
+
+#ifndef CHARSET_EBCDIC
+# define conv_bin2ascii(a, table)       ((table)[(a)&0x3f])
+#else
+/*
+ * We assume that PEM encoded files are EBCDIC files (i.e., printable text
+ * files). Convert them here while decoding. When encoding, output is EBCDIC
+ * (text) format again. (No need for conversion in the conv_bin2ascii macro,
+ * as the underlying textstring data_bin2ascii[] is already EBCDIC)
+ */
+# define conv_bin2ascii(a, table)       ((table)[(a)&0x3f])
+#endif
+
+/*-
+ * 64 char lines
+ * pad input with 0
+ * left over chars are set to =
+ * 1 byte  => xx==
+ * 2 bytes => xxx=
+ * 3 bytes => xxxx
+ */
+#define BIN_PER_LINE    (64/4*3)
+#define CHUNKS_PER_LINE (64/4)
+#define CHAR_PER_LINE   (64+1)
+
+static const unsigned char data_bin2ascii[65] =
+    "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+
+/* SRP uses a different base64 alphabet */
+static const unsigned char srpdata_bin2ascii[65] =
+    "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz./";
+
+
+/*-
+ * 0xF0 is a EOLN
+ * 0xF1 is ignore but next needs to be 0xF0 (for \r\n processing).
+ * 0xF2 is EOF
+ * 0xE0 is ignore at start of line.
+ * 0xFF is error
+ */
+
+#define B64_EOLN                0xF0
+#define B64_CR                  0xF1
+#define B64_EOF                 0xF2
+#define B64_WS                  0xE0
+#define B64_ERROR               0xFF
+#define B64_NOT_BASE64(a)       (((a)|0x13) == 0xF3)
+#define B64_BASE64(a)           (!B64_NOT_BASE64(a))
+
+static const unsigned char data_ascii2bin[128] = {
+    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    0xFF, 0xE0, 0xF0, 0xFF, 0xFF, 0xF1, 0xFF, 0xFF,
+    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    0xE0, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    0xFF, 0xFF, 0xFF, 0x3E, 0xFF, 0xF2, 0xFF, 0x3F,
+    0x34, 0x35, 0x36, 0x37, 0x38, 0x39, 0x3A, 0x3B,
+    0x3C, 0x3D, 0xFF, 0xFF, 0xFF, 0x00, 0xFF, 0xFF,
+    0xFF, 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06,
+    0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E,
+    0x0F, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16,
+    0x17, 0x18, 0x19, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    0xFF, 0x1A, 0x1B, 0x1C, 0x1D, 0x1E, 0x1F, 0x20,
+    0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27, 0x28,
+    0x29, 0x2A, 0x2B, 0x2C, 0x2D, 0x2E, 0x2F, 0x30,
+    0x31, 0x32, 0x33, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+};
+
+static const unsigned char srpdata_ascii2bin[128] = {
+    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    0xFF, 0xE0, 0xF0, 0xFF, 0xFF, 0xF1, 0xFF, 0xFF,
+    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    0xE0, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xF2, 0x3E, 0x3F,
+    0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+    0x08, 0x09, 0xFF, 0xFF, 0xFF, 0x00, 0xFF, 0xFF,
+    0xFF, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F, 0x10,
+    0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18,
+    0x19, 0x1A, 0x1B, 0x1C, 0x1D, 0x1E, 0x1F, 0x20,
+    0x21, 0x22, 0x23, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+    0xFF, 0x24, 0x25, 0x26, 0x27, 0x28, 0x29, 0x2A,
+    0x2B, 0x2C, 0x2D, 0x2E, 0x2F, 0x30, 0x31, 0x32,
+    0x33, 0x34, 0x35, 0x36, 0x37, 0x38, 0x39, 0x3A,
+    0x3B, 0x3C, 0x3D, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
+};
+
+#ifndef CHARSET_EBCDIC
+static unsigned char conv_ascii2bin(unsigned char a, const unsigned char *table)
+{
+    if (a & 0x80)
+        return B64_ERROR;
+    return table[a];
+}
+#else
+static unsigned char conv_ascii2bin(unsigned char a, const unsigned char *table)
+{
+    a = os_toascii[a];
+    if (a & 0x80)
+        return B64_ERROR;
+    return table[a];
+}
+#endif
+
+EVP_ENCODE_CTX *EVP_ENCODE_CTX_new(void)
+{
+    return OPENSSL_zalloc(sizeof(EVP_ENCODE_CTX));
+}
+
+void EVP_ENCODE_CTX_free(EVP_ENCODE_CTX *ctx)
+{
+    OPENSSL_free(ctx);
+}
+
+int EVP_ENCODE_CTX_copy(EVP_ENCODE_CTX *dctx, EVP_ENCODE_CTX *sctx)
+{
+    memcpy(dctx, sctx, sizeof(EVP_ENCODE_CTX));
+
+    return 1;
+}
+
+int EVP_ENCODE_CTX_num(EVP_ENCODE_CTX *ctx)
+{
+    return ctx->num;
+}
+
+void evp_encode_ctx_set_flags(EVP_ENCODE_CTX *ctx, unsigned int flags)
+{
+    ctx->flags = flags;
+}
+
+void EVP_EncodeInit(EVP_ENCODE_CTX *ctx)
+{
+    ctx->length = 48;
+    ctx->num = 0;
+    ctx->line_num = 0;
+    ctx->flags = 0;
+}
+
+int EVP_EncodeUpdate(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl,
+                      const unsigned char *in, int inl)
+{
+    int i, j;
+    size_t total = 0;
+
+    *outl = 0;
+    if (inl <= 0)
+        return 0;
+    OPENSSL_assert(ctx->length <= (int)sizeof(ctx->enc_data));
+    if (ctx->length - ctx->num > inl) {
+        memcpy(&(ctx->enc_data[ctx->num]), in, inl);
+        ctx->num += inl;
+        return 1;
+    }
+    if (ctx->num != 0) {
+        i = ctx->length - ctx->num;
+        memcpy(&(ctx->enc_data[ctx->num]), in, i);
+        in += i;
+        inl -= i;
+        j = evp_encodeblock_int(ctx, out, ctx->enc_data, ctx->length);
+        ctx->num = 0;
+        out += j;
+        total = j;
+        if ((ctx->flags & EVP_ENCODE_CTX_NO_NEWLINES) == 0) {
+            *(out++) = '\n';
+            total++;
+        }
+        *out = '\0';
+    }
+    while (inl >= ctx->length && total <= INT_MAX) {
+        j = evp_encodeblock_int(ctx, out, in, ctx->length);
+        in += ctx->length;
+        inl -= ctx->length;
+        out += j;
+        total += j;
+        if ((ctx->flags & EVP_ENCODE_CTX_NO_NEWLINES) == 0) {
+            *(out++) = '\n';
+            total++;
+        }
+        *out = '\0';
+    }
+    if (total > INT_MAX) {
+        /* Too much output data! */
+        *outl = 0;
+        return 0;
+    }
+    if (inl != 0)
+        memcpy(&(ctx->enc_data[0]), in, inl);
+    ctx->num = inl;
+    *outl = total;
+
+    return 1;
+}
+
+void EVP_EncodeFinal(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl)
+{
+    unsigned int ret = 0;
+
+    if (ctx->num != 0) {
+        ret = evp_encodeblock_int(ctx, out, ctx->enc_data, ctx->num);
+        if ((ctx->flags & EVP_ENCODE_CTX_NO_NEWLINES) == 0)
+            out[ret++] = '\n';
+        out[ret] = '\0';
+        ctx->num = 0;
+    }
+    *outl = ret;
+}
+
+static int evp_encodeblock_int(EVP_ENCODE_CTX *ctx, unsigned char *t,
+                               const unsigned char *f, int dlen)
+{
+    int i, ret = 0;
+    unsigned long l;
+    const unsigned char *table;
+
+    if (ctx != NULL && (ctx->flags & EVP_ENCODE_CTX_USE_SRP_ALPHABET) != 0)
+        table = srpdata_bin2ascii;
+    else
+        table = data_bin2ascii;
+
+    for (i = dlen; i > 0; i -= 3) {
+        if (i >= 3) {
+            l = (((unsigned long)f[0]) << 16L) |
+                (((unsigned long)f[1]) << 8L) | f[2];
+            *(t++) = conv_bin2ascii(l >> 18L, table);
+            *(t++) = conv_bin2ascii(l >> 12L, table);
+            *(t++) = conv_bin2ascii(l >> 6L, table);
+            *(t++) = conv_bin2ascii(l, table);
+        } else {
+            l = ((unsigned long)f[0]) << 16L;
+            if (i == 2)
+                l |= ((unsigned long)f[1] << 8L);
+
+            *(t++) = conv_bin2ascii(l >> 18L, table);
+            *(t++) = conv_bin2ascii(l >> 12L, table);
+            *(t++) = (i == 1) ? '=' : conv_bin2ascii(l >> 6L, table);
+            *(t++) = '=';
+        }
+        ret += 4;
+        f += 3;
+    }
+
+    *t = '\0';
+    return ret;
+}
+
+int EVP_EncodeBlock(unsigned char *t, const unsigned char *f, int dlen)
+{
+    return evp_encodeblock_int(NULL, t, f, dlen);
+}
+
+void EVP_DecodeInit(EVP_ENCODE_CTX *ctx)
+{
+    /* Only ctx->num and ctx->flags are used during decoding. */
+    ctx->num = 0;
+    ctx->length = 0;
+    ctx->line_num = 0;
+    ctx->flags = 0;
+}
+
+/*-
+ * -1 for error
+ *  0 for last line
+ *  1 for full line
+ *
+ * Note: even though EVP_DecodeUpdate attempts to detect and report end of
+ * content, the context doesn't currently remember it and will accept more data
+ * in the next call. Therefore, the caller is responsible for checking and
+ * rejecting a 0 return value in the middle of content.
+ *
+ * Note: even though EVP_DecodeUpdate has historically tried to detect end of
+ * content based on line length, this has never worked properly. Therefore,
+ * we now return 0 when one of the following is true:
+ *   - Padding or B64_EOF was detected and the last block is complete.
+ *   - Input has zero-length.
+ * -1 is returned if:
+ *   - Invalid characters are detected.
+ *   - There is extra trailing padding, or data after padding.
+ *   - B64_EOF is detected after an incomplete base64 block.
+ */
+int EVP_DecodeUpdate(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl,
+                     const unsigned char *in, int inl)
+{
+    int seof = 0, eof = 0, rv = -1, ret = 0, i, v, tmp, n, decoded_len;
+    unsigned char *d;
+    const unsigned char *table;
+
+    n = ctx->num;
+    d = ctx->enc_data;
+
+    if (n > 0 && d[n - 1] == '=') {
+        eof++;
+        if (n > 1 && d[n - 2] == '=')
+            eof++;
+    }
+
+     /* Legacy behaviour: an empty input chunk signals end of input. */
+    if (inl == 0) {
+        rv = 0;
+        goto end;
+    }
+
+    if ((ctx->flags & EVP_ENCODE_CTX_USE_SRP_ALPHABET) != 0)
+        table = srpdata_ascii2bin;
+    else
+        table = data_ascii2bin;
+
+    for (i = 0; i < inl; i++) {
+        tmp = *(in++);
+        v = conv_ascii2bin(tmp, table);
+        if (v == B64_ERROR) {
+            rv = -1;
+            goto end;
+        }
+
+        if (tmp == '=') {
+            eof++;
+        } else if (eof > 0 && B64_BASE64(v)) {
+            /* More data after padding. */
+            rv = -1;
+            goto end;
+        }
+
+        if (eof > 2) {
+            rv = -1;
+            goto end;
+        }
+
+        if (v == B64_EOF) {
+            seof = 1;
+            goto tail;
+        }
+
+        /* Only save valid base64 characters. */
+        if (B64_BASE64(v)) {
+            if (n >= 64) {
+                /*
+                 * We increment n once per loop, and empty the buffer as soon as
+                 * we reach 64 characters, so this can only happen if someone's
+                 * manually messed with the ctx. Refuse to write any more data.
+                 */
+                rv = -1;
+                goto end;
+            }
+            OPENSSL_assert(n < (int)sizeof(ctx->enc_data));
+            d[n++] = tmp;
+        }
+
+        if (n == 64) {
+            decoded_len = evp_decodeblock_int(ctx, out, d, n);
+            n = 0;
+            if (decoded_len < 0 || eof > decoded_len) {
+                rv = -1;
+                goto end;
+            }
+            ret += decoded_len - eof;
+            out += decoded_len - eof;
+        }
+    }
+
+    /*
+     * Legacy behaviour: if the current line is a full base64-block (i.e., has
+     * 0 mod 4 base64 characters), it is processed immediately. We keep this
+     * behaviour as applications may not be calling EVP_DecodeFinal properly.
+     */
+tail:
+    if (n > 0) {
+        if ((n & 3) == 0) {
+            decoded_len = evp_decodeblock_int(ctx, out, d, n);
+            n = 0;
+            if (decoded_len < 0 || eof > decoded_len) {
+                rv = -1;
+                goto end;
+            }
+            ret += (decoded_len - eof);
+        } else if (seof) {
+            /* EOF in the middle of a base64 block. */
+            rv = -1;
+            goto end;
+        }
+    }
+
+    rv = seof || (n == 0 && eof) ? 0 : 1;
+end:
+    /* Legacy behaviour. This should probably rather be zeroed on error. */
+    *outl = ret;
+    ctx->num = n;
+    return rv;
+}
+
+static int evp_decodeblock_int(EVP_ENCODE_CTX *ctx, unsigned char *t,
+                               const unsigned char *f, int n)
+{
+    int i, ret = 0, a, b, c, d;
+    unsigned long l;
+    const unsigned char *table;
+
+    if (ctx != NULL && (ctx->flags & EVP_ENCODE_CTX_USE_SRP_ALPHABET) != 0)
+        table = srpdata_ascii2bin;
+    else
+        table = data_ascii2bin;
+
+    /* trim white space from the start of the line. */
+    while ((conv_ascii2bin(*f, table) == B64_WS) && (n > 0)) {
+        f++;
+        n--;
+    }
+
+    /*
+     * strip off stuff at the end of the line ascii2bin values B64_WS,
+     * B64_EOLN, B64_EOLN and B64_EOF
+     */
+    while ((n > 3) && (B64_NOT_BASE64(conv_ascii2bin(f[n - 1], table))))
+        n--;
+
+    if (n % 4 != 0)
+        return -1;
+
+    for (i = 0; i < n; i += 4) {
+        a = conv_ascii2bin(*(f++), table);
+        b = conv_ascii2bin(*(f++), table);
+        c = conv_ascii2bin(*(f++), table);
+        d = conv_ascii2bin(*(f++), table);
+        if ((a & 0x80) || (b & 0x80) || (c & 0x80) || (d & 0x80))
+            return -1;
+        l = ((((unsigned long)a) << 18L) |
+             (((unsigned long)b) << 12L) |
+             (((unsigned long)c) << 6L) | (((unsigned long)d)));
+        *(t++) = (unsigned char)(l >> 16L) & 0xff;
+        *(t++) = (unsigned char)(l >> 8L) & 0xff;
+        *(t++) = (unsigned char)(l) & 0xff;
+        ret += 3;
+    }
+    return ret;
+}
+
+int EVP_DecodeBlock(unsigned char *t, const unsigned char *f, int n)
+{
+    return evp_decodeblock_int(NULL, t, f, n);
+}
+
+int EVP_DecodeFinal(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl)
+{
+    int i;
+
+    *outl = 0;
+    if (ctx->num != 0) {
+        i = evp_decodeblock_int(ctx, out, ctx->enc_data, ctx->num);
+        if (i < 0)
+            return -1;
+        ctx->num = 0;
+        *outl = i;
+        return 1;
+    } else
+        return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_cnf.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_cnf.c
new file mode 100644
index 000000000..8df2c06e1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_cnf.c
@@ -0,0 +1,56 @@
+/*
+ * Copyright 2012-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <openssl/crypto.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+
+/* Algorithm configuration module. */
+
+static int alg_module_init(CONF_IMODULE *md, const CONF *cnf)
+{
+    int i;
+    const char *oid_section;
+    STACK_OF(CONF_VALUE) *sktmp;
+    CONF_VALUE *oval;
+
+    oid_section = CONF_imodule_get_value(md);
+    if ((sktmp = NCONF_get_section(cnf, oid_section)) == NULL) {
+        EVPerr(EVP_F_ALG_MODULE_INIT, EVP_R_ERROR_LOADING_SECTION);
+        return 0;
+    }
+    for (i = 0; i < sk_CONF_VALUE_num(sktmp); i++) {
+        oval = sk_CONF_VALUE_value(sktmp, i);
+        if (strcmp(oval->name, "fips_mode") == 0) {
+            int m;
+            if (!X509V3_get_value_bool(oval, &m)) {
+                EVPerr(EVP_F_ALG_MODULE_INIT, EVP_R_INVALID_FIPS_MODE);
+                return 0;
+            }
+            if (m > 0) {
+                EVPerr(EVP_F_ALG_MODULE_INIT, EVP_R_FIPS_MODE_NOT_SUPPORTED);
+                return 0;
+            }
+        } else {
+            EVPerr(EVP_F_ALG_MODULE_INIT, EVP_R_UNKNOWN_OPTION);
+            ERR_add_error_data(4, "name=", oval->name,
+                               ", value=", oval->value);
+        }
+
+    }
+    return 1;
+}
+
+void EVP_add_alg_module(void)
+{
+    CONF_module_add("alg_section", alg_module_init, 0);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_enc.c
new file mode 100644
index 000000000..05dd791b6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_enc.c
@@ -0,0 +1,677 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <assert.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/err.h>
+#include <openssl/rand.h>
+#include <openssl/rand_drbg.h>
+#include <openssl/engine.h>
+#include "internal/evp_int.h"
+#include "evp_locl.h"
+
+int EVP_CIPHER_CTX_reset(EVP_CIPHER_CTX *c)
+{
+    if (c == NULL)
+        return 1;
+    if (c->cipher != NULL) {
+        if (c->cipher->cleanup && !c->cipher->cleanup(c))
+            return 0;
+        /* Cleanse cipher context data */
+        if (c->cipher_data && c->cipher->ctx_size)
+            OPENSSL_cleanse(c->cipher_data, c->cipher->ctx_size);
+    }
+    OPENSSL_free(c->cipher_data);
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_finish(c->engine);
+#endif
+    memset(c, 0, sizeof(*c));
+    return 1;
+}
+
+EVP_CIPHER_CTX *EVP_CIPHER_CTX_new(void)
+{
+    return OPENSSL_zalloc(sizeof(EVP_CIPHER_CTX));
+}
+
+void EVP_CIPHER_CTX_free(EVP_CIPHER_CTX *ctx)
+{
+    EVP_CIPHER_CTX_reset(ctx);
+    OPENSSL_free(ctx);
+}
+
+int EVP_CipherInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
+                   const unsigned char *key, const unsigned char *iv, int enc)
+{
+    if (cipher != NULL)
+        EVP_CIPHER_CTX_reset(ctx);
+    return EVP_CipherInit_ex(ctx, cipher, NULL, key, iv, enc);
+}
+
+int EVP_CipherInit_ex(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
+                      ENGINE *impl, const unsigned char *key,
+                      const unsigned char *iv, int enc)
+{
+    if (enc == -1)
+        enc = ctx->encrypt;
+    else {
+        if (enc)
+            enc = 1;
+        ctx->encrypt = enc;
+    }
+#ifndef OPENSSL_NO_ENGINE
+    /*
+     * Whether it's nice or not, "Inits" can be used on "Final"'d contexts so
+     * this context may already have an ENGINE! Try to avoid releasing the
+     * previous handle, re-querying for an ENGINE, and having a
+     * reinitialisation, when it may all be unnecessary.
+     */
+    if (ctx->engine && ctx->cipher
+        && (cipher == NULL || cipher->nid == ctx->cipher->nid))
+        goto skip_to_init;
+#endif
+    if (cipher) {
+        /*
+         * Ensure a context left lying around from last time is cleared (the
+         * previous check attempted to avoid this if the same ENGINE and
+         * EVP_CIPHER could be used).
+         */
+        if (ctx->cipher) {
+            unsigned long flags = ctx->flags;
+            EVP_CIPHER_CTX_reset(ctx);
+            /* Restore encrypt and flags */
+            ctx->encrypt = enc;
+            ctx->flags = flags;
+        }
+#ifndef OPENSSL_NO_ENGINE
+        if (impl) {
+            if (!ENGINE_init(impl)) {
+                EVPerr(EVP_F_EVP_CIPHERINIT_EX, EVP_R_INITIALIZATION_ERROR);
+                return 0;
+            }
+        } else
+            /* Ask if an ENGINE is reserved for this job */
+            impl = ENGINE_get_cipher_engine(cipher->nid);
+        if (impl) {
+            /* There's an ENGINE for this job ... (apparently) */
+            const EVP_CIPHER *c = ENGINE_get_cipher(impl, cipher->nid);
+            if (!c) {
+                /*
+                 * One positive side-effect of US's export control history,
+                 * is that we should at least be able to avoid using US
+                 * misspellings of "initialisation"?
+                 */
+                EVPerr(EVP_F_EVP_CIPHERINIT_EX, EVP_R_INITIALIZATION_ERROR);
+                return 0;
+            }
+            /* We'll use the ENGINE's private cipher definition */
+            cipher = c;
+            /*
+             * Store the ENGINE functional reference so we know 'cipher' came
+             * from an ENGINE and we need to release it when done.
+             */
+            ctx->engine = impl;
+        } else
+            ctx->engine = NULL;
+#endif
+
+        ctx->cipher = cipher;
+        if (ctx->cipher->ctx_size) {
+            ctx->cipher_data = OPENSSL_zalloc(ctx->cipher->ctx_size);
+            if (ctx->cipher_data == NULL) {
+                ctx->cipher = NULL;
+                EVPerr(EVP_F_EVP_CIPHERINIT_EX, ERR_R_MALLOC_FAILURE);
+                return 0;
+            }
+        } else {
+            ctx->cipher_data = NULL;
+        }
+        ctx->key_len = cipher->key_len;
+        /* Preserve wrap enable flag, zero everything else */
+        ctx->flags &= EVP_CIPHER_CTX_FLAG_WRAP_ALLOW;
+        if (ctx->cipher->flags & EVP_CIPH_CTRL_INIT) {
+            if (!EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_INIT, 0, NULL)) {
+                ctx->cipher = NULL;
+                EVPerr(EVP_F_EVP_CIPHERINIT_EX, EVP_R_INITIALIZATION_ERROR);
+                return 0;
+            }
+        }
+    } else if (!ctx->cipher) {
+        EVPerr(EVP_F_EVP_CIPHERINIT_EX, EVP_R_NO_CIPHER_SET);
+        return 0;
+    }
+#ifndef OPENSSL_NO_ENGINE
+ skip_to_init:
+#endif
+    /* we assume block size is a power of 2 in *cryptUpdate */
+    OPENSSL_assert(ctx->cipher->block_size == 1
+                   || ctx->cipher->block_size == 8
+                   || ctx->cipher->block_size == 16);
+
+    if (!(ctx->flags & EVP_CIPHER_CTX_FLAG_WRAP_ALLOW)
+        && EVP_CIPHER_CTX_mode(ctx) == EVP_CIPH_WRAP_MODE) {
+        EVPerr(EVP_F_EVP_CIPHERINIT_EX, EVP_R_WRAP_MODE_NOT_ALLOWED);
+        return 0;
+    }
+
+    if (!(EVP_CIPHER_flags(EVP_CIPHER_CTX_cipher(ctx)) & EVP_CIPH_CUSTOM_IV)) {
+        switch (EVP_CIPHER_CTX_mode(ctx)) {
+
+        case EVP_CIPH_STREAM_CIPHER:
+        case EVP_CIPH_ECB_MODE:
+            break;
+
+        case EVP_CIPH_CFB_MODE:
+        case EVP_CIPH_OFB_MODE:
+
+            ctx->num = 0;
+            /* fall-through */
+
+        case EVP_CIPH_CBC_MODE:
+
+            OPENSSL_assert(EVP_CIPHER_CTX_iv_length(ctx) <=
+                           (int)sizeof(ctx->iv));
+            if (iv)
+                memcpy(ctx->oiv, iv, EVP_CIPHER_CTX_iv_length(ctx));
+            memcpy(ctx->iv, ctx->oiv, EVP_CIPHER_CTX_iv_length(ctx));
+            break;
+
+        case EVP_CIPH_CTR_MODE:
+            ctx->num = 0;
+            /* Don't reuse IV for CTR mode */
+            if (iv)
+                memcpy(ctx->iv, iv, EVP_CIPHER_CTX_iv_length(ctx));
+            break;
+
+        default:
+            return 0;
+        }
+    }
+
+    if (key || (ctx->cipher->flags & EVP_CIPH_ALWAYS_CALL_INIT)) {
+        if (!ctx->cipher->init(ctx, key, iv, enc))
+            return 0;
+    }
+    ctx->buf_len = 0;
+    ctx->final_used = 0;
+    ctx->block_mask = ctx->cipher->block_size - 1;
+    return 1;
+}
+
+int EVP_CipherUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
+                     const unsigned char *in, int inl)
+{
+    if (ctx->encrypt)
+        return EVP_EncryptUpdate(ctx, out, outl, in, inl);
+    else
+        return EVP_DecryptUpdate(ctx, out, outl, in, inl);
+}
+
+int EVP_CipherFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
+{
+    if (ctx->encrypt)
+        return EVP_EncryptFinal_ex(ctx, out, outl);
+    else
+        return EVP_DecryptFinal_ex(ctx, out, outl);
+}
+
+int EVP_CipherFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
+{
+    if (ctx->encrypt)
+        return EVP_EncryptFinal(ctx, out, outl);
+    else
+        return EVP_DecryptFinal(ctx, out, outl);
+}
+
+int EVP_EncryptInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
+                    const unsigned char *key, const unsigned char *iv)
+{
+    return EVP_CipherInit(ctx, cipher, key, iv, 1);
+}
+
+int EVP_EncryptInit_ex(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
+                       ENGINE *impl, const unsigned char *key,
+                       const unsigned char *iv)
+{
+    return EVP_CipherInit_ex(ctx, cipher, impl, key, iv, 1);
+}
+
+int EVP_DecryptInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
+                    const unsigned char *key, const unsigned char *iv)
+{
+    return EVP_CipherInit(ctx, cipher, key, iv, 0);
+}
+
+int EVP_DecryptInit_ex(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
+                       ENGINE *impl, const unsigned char *key,
+                       const unsigned char *iv)
+{
+    return EVP_CipherInit_ex(ctx, cipher, impl, key, iv, 0);
+}
+
+/*
+ * According to the letter of standard difference between pointers
+ * is specified to be valid only within same object. This makes
+ * it formally challenging to determine if input and output buffers
+ * are not partially overlapping with standard pointer arithmetic.
+ */
+#ifdef PTRDIFF_T
+# undef PTRDIFF_T
+#endif
+#if defined(OPENSSL_SYS_VMS) && __INITIAL_POINTER_SIZE==64
+/*
+ * Then we have VMS that distinguishes itself by adhering to
+ * sizeof(size_t)==4 even in 64-bit builds, which means that
+ * difference between two pointers might be truncated to 32 bits.
+ * In the context one can even wonder how comparison for
+ * equality is implemented. To be on the safe side we adhere to
+ * PTRDIFF_T even for comparison for equality.
+ */
+# define PTRDIFF_T uint64_t
+#else
+# define PTRDIFF_T size_t
+#endif
+
+int is_partially_overlapping(const void *ptr1, const void *ptr2, int len)
+{
+    PTRDIFF_T diff = (PTRDIFF_T)ptr1-(PTRDIFF_T)ptr2;
+    /*
+     * Check for partially overlapping buffers. [Binary logical
+     * operations are used instead of boolean to minimize number
+     * of conditional branches.]
+     */
+    int overlapped = (len > 0) & (diff != 0) & ((diff < (PTRDIFF_T)len) |
+                                                (diff > (0 - (PTRDIFF_T)len)));
+
+    return overlapped;
+}
+
+static int evp_EncryptDecryptUpdate(EVP_CIPHER_CTX *ctx,
+                                    unsigned char *out, int *outl,
+                                    const unsigned char *in, int inl)
+{
+    int i, j, bl, cmpl = inl;
+
+    if (EVP_CIPHER_CTX_test_flags(ctx, EVP_CIPH_FLAG_LENGTH_BITS))
+        cmpl = (cmpl + 7) / 8;
+
+    bl = ctx->cipher->block_size;
+
+    if (ctx->cipher->flags & EVP_CIPH_FLAG_CUSTOM_CIPHER) {
+        /* If block size > 1 then the cipher will have to do this check */
+        if (bl == 1 && is_partially_overlapping(out, in, cmpl)) {
+            EVPerr(EVP_F_EVP_ENCRYPTDECRYPTUPDATE, EVP_R_PARTIALLY_OVERLAPPING);
+            return 0;
+        }
+
+        i = ctx->cipher->do_cipher(ctx, out, in, inl);
+        if (i < 0)
+            return 0;
+        else
+            *outl = i;
+        return 1;
+    }
+
+    if (inl <= 0) {
+        *outl = 0;
+        return inl == 0;
+    }
+    if (is_partially_overlapping(out + ctx->buf_len, in, cmpl)) {
+        EVPerr(EVP_F_EVP_ENCRYPTDECRYPTUPDATE, EVP_R_PARTIALLY_OVERLAPPING);
+        return 0;
+    }
+
+    if (ctx->buf_len == 0 && (inl & (ctx->block_mask)) == 0) {
+        if (ctx->cipher->do_cipher(ctx, out, in, inl)) {
+            *outl = inl;
+            return 1;
+        } else {
+            *outl = 0;
+            return 0;
+        }
+    }
+    i = ctx->buf_len;
+    OPENSSL_assert(bl <= (int)sizeof(ctx->buf));
+    if (i != 0) {
+        if (bl - i > inl) {
+            memcpy(&(ctx->buf[i]), in, inl);
+            ctx->buf_len += inl;
+            *outl = 0;
+            return 1;
+        } else {
+            j = bl - i;
+            memcpy(&(ctx->buf[i]), in, j);
+            inl -= j;
+            in += j;
+            if (!ctx->cipher->do_cipher(ctx, out, ctx->buf, bl))
+                return 0;
+            out += bl;
+            *outl = bl;
+        }
+    } else
+        *outl = 0;
+    i = inl & (bl - 1);
+    inl -= i;
+    if (inl > 0) {
+        if (!ctx->cipher->do_cipher(ctx, out, in, inl))
+            return 0;
+        *outl += inl;
+    }
+
+    if (i != 0)
+        memcpy(ctx->buf, &(in[inl]), i);
+    ctx->buf_len = i;
+    return 1;
+}
+
+
+int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
+                      const unsigned char *in, int inl)
+{
+    /* Prevent accidental use of decryption context when encrypting */
+    if (!ctx->encrypt) {
+        EVPerr(EVP_F_EVP_ENCRYPTUPDATE, EVP_R_INVALID_OPERATION);
+        return 0;
+    }
+
+    return evp_EncryptDecryptUpdate(ctx, out, outl, in, inl);
+}
+
+int EVP_EncryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
+{
+    int ret;
+    ret = EVP_EncryptFinal_ex(ctx, out, outl);
+    return ret;
+}
+
+int EVP_EncryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
+{
+    int n, ret;
+    unsigned int i, b, bl;
+
+    /* Prevent accidental use of decryption context when encrypting */
+    if (!ctx->encrypt) {
+        EVPerr(EVP_F_EVP_ENCRYPTFINAL_EX, EVP_R_INVALID_OPERATION);
+        return 0;
+    }
+
+    if (ctx->cipher->flags & EVP_CIPH_FLAG_CUSTOM_CIPHER) {
+        ret = ctx->cipher->do_cipher(ctx, out, NULL, 0);
+        if (ret < 0)
+            return 0;
+        else
+            *outl = ret;
+        return 1;
+    }
+
+    b = ctx->cipher->block_size;
+    OPENSSL_assert(b <= sizeof(ctx->buf));
+    if (b == 1) {
+        *outl = 0;
+        return 1;
+    }
+    bl = ctx->buf_len;
+    if (ctx->flags & EVP_CIPH_NO_PADDING) {
+        if (bl) {
+            EVPerr(EVP_F_EVP_ENCRYPTFINAL_EX,
+                   EVP_R_DATA_NOT_MULTIPLE_OF_BLOCK_LENGTH);
+            return 0;
+        }
+        *outl = 0;
+        return 1;
+    }
+
+    n = b - bl;
+    for (i = bl; i < b; i++)
+        ctx->buf[i] = n;
+    ret = ctx->cipher->do_cipher(ctx, out, ctx->buf, b);
+
+    if (ret)
+        *outl = b;
+
+    return ret;
+}
+
+int EVP_DecryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
+                      const unsigned char *in, int inl)
+{
+    int fix_len, cmpl = inl;
+    unsigned int b;
+
+    /* Prevent accidental use of encryption context when decrypting */
+    if (ctx->encrypt) {
+        EVPerr(EVP_F_EVP_DECRYPTUPDATE, EVP_R_INVALID_OPERATION);
+        return 0;
+    }
+
+    b = ctx->cipher->block_size;
+
+    if (EVP_CIPHER_CTX_test_flags(ctx, EVP_CIPH_FLAG_LENGTH_BITS))
+        cmpl = (cmpl + 7) / 8;
+
+    if (ctx->cipher->flags & EVP_CIPH_FLAG_CUSTOM_CIPHER) {
+        if (b == 1 && is_partially_overlapping(out, in, cmpl)) {
+            EVPerr(EVP_F_EVP_DECRYPTUPDATE, EVP_R_PARTIALLY_OVERLAPPING);
+            return 0;
+        }
+
+        fix_len = ctx->cipher->do_cipher(ctx, out, in, inl);
+        if (fix_len < 0) {
+            *outl = 0;
+            return 0;
+        } else
+            *outl = fix_len;
+        return 1;
+    }
+
+    if (inl <= 0) {
+        *outl = 0;
+        return inl == 0;
+    }
+
+    if (ctx->flags & EVP_CIPH_NO_PADDING)
+        return evp_EncryptDecryptUpdate(ctx, out, outl, in, inl);
+
+    OPENSSL_assert(b <= sizeof(ctx->final));
+
+    if (ctx->final_used) {
+        /* see comment about PTRDIFF_T comparison above */
+        if (((PTRDIFF_T)out == (PTRDIFF_T)in)
+            || is_partially_overlapping(out, in, b)) {
+            EVPerr(EVP_F_EVP_DECRYPTUPDATE, EVP_R_PARTIALLY_OVERLAPPING);
+            return 0;
+        }
+        memcpy(out, ctx->final, b);
+        out += b;
+        fix_len = 1;
+    } else
+        fix_len = 0;
+
+    if (!evp_EncryptDecryptUpdate(ctx, out, outl, in, inl))
+        return 0;
+
+    /*
+     * if we have 'decrypted' a multiple of block size, make sure we have a
+     * copy of this last block
+     */
+    if (b > 1 && !ctx->buf_len) {
+        *outl -= b;
+        ctx->final_used = 1;
+        memcpy(ctx->final, &out[*outl], b);
+    } else
+        ctx->final_used = 0;
+
+    if (fix_len)
+        *outl += b;
+
+    return 1;
+}
+
+int EVP_DecryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
+{
+    int ret;
+    ret = EVP_DecryptFinal_ex(ctx, out, outl);
+    return ret;
+}
+
+int EVP_DecryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
+{
+    int i, n;
+    unsigned int b;
+
+    /* Prevent accidental use of encryption context when decrypting */
+    if (ctx->encrypt) {
+        EVPerr(EVP_F_EVP_DECRYPTFINAL_EX, EVP_R_INVALID_OPERATION);
+        return 0;
+    }
+
+    *outl = 0;
+
+    if (ctx->cipher->flags & EVP_CIPH_FLAG_CUSTOM_CIPHER) {
+        i = ctx->cipher->do_cipher(ctx, out, NULL, 0);
+        if (i < 0)
+            return 0;
+        else
+            *outl = i;
+        return 1;
+    }
+
+    b = ctx->cipher->block_size;
+    if (ctx->flags & EVP_CIPH_NO_PADDING) {
+        if (ctx->buf_len) {
+            EVPerr(EVP_F_EVP_DECRYPTFINAL_EX,
+                   EVP_R_DATA_NOT_MULTIPLE_OF_BLOCK_LENGTH);
+            return 0;
+        }
+        *outl = 0;
+        return 1;
+    }
+    if (b > 1) {
+        if (ctx->buf_len || !ctx->final_used) {
+            EVPerr(EVP_F_EVP_DECRYPTFINAL_EX, EVP_R_WRONG_FINAL_BLOCK_LENGTH);
+            return 0;
+        }
+        OPENSSL_assert(b <= sizeof(ctx->final));
+
+        /*
+         * The following assumes that the ciphertext has been authenticated.
+         * Otherwise it provides a padding oracle.
+         */
+        n = ctx->final[b - 1];
+        if (n == 0 || n > (int)b) {
+            EVPerr(EVP_F_EVP_DECRYPTFINAL_EX, EVP_R_BAD_DECRYPT);
+            return 0;
+        }
+        for (i = 0; i < n; i++) {
+            if (ctx->final[--b] != n) {
+                EVPerr(EVP_F_EVP_DECRYPTFINAL_EX, EVP_R_BAD_DECRYPT);
+                return 0;
+            }
+        }
+        n = ctx->cipher->block_size - n;
+        for (i = 0; i < n; i++)
+            out[i] = ctx->final[i];
+        *outl = n;
+    } else
+        *outl = 0;
+    return 1;
+}
+
+int EVP_CIPHER_CTX_set_key_length(EVP_CIPHER_CTX *c, int keylen)
+{
+    if (c->cipher->flags & EVP_CIPH_CUSTOM_KEY_LENGTH)
+        return EVP_CIPHER_CTX_ctrl(c, EVP_CTRL_SET_KEY_LENGTH, keylen, NULL);
+    if (c->key_len == keylen)
+        return 1;
+    if ((keylen > 0) && (c->cipher->flags & EVP_CIPH_VARIABLE_LENGTH)) {
+        c->key_len = keylen;
+        return 1;
+    }
+    EVPerr(EVP_F_EVP_CIPHER_CTX_SET_KEY_LENGTH, EVP_R_INVALID_KEY_LENGTH);
+    return 0;
+}
+
+int EVP_CIPHER_CTX_set_padding(EVP_CIPHER_CTX *ctx, int pad)
+{
+    if (pad)
+        ctx->flags &= ~EVP_CIPH_NO_PADDING;
+    else
+        ctx->flags |= EVP_CIPH_NO_PADDING;
+    return 1;
+}
+
+int EVP_CIPHER_CTX_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void *ptr)
+{
+    int ret;
+
+    if (!ctx->cipher) {
+        EVPerr(EVP_F_EVP_CIPHER_CTX_CTRL, EVP_R_NO_CIPHER_SET);
+        return 0;
+    }
+
+    if (!ctx->cipher->ctrl) {
+        EVPerr(EVP_F_EVP_CIPHER_CTX_CTRL, EVP_R_CTRL_NOT_IMPLEMENTED);
+        return 0;
+    }
+
+    ret = ctx->cipher->ctrl(ctx, type, arg, ptr);
+    if (ret == -1) {
+        EVPerr(EVP_F_EVP_CIPHER_CTX_CTRL,
+               EVP_R_CTRL_OPERATION_NOT_IMPLEMENTED);
+        return 0;
+    }
+    return ret;
+}
+
+int EVP_CIPHER_CTX_rand_key(EVP_CIPHER_CTX *ctx, unsigned char *key)
+{
+    if (ctx->cipher->flags & EVP_CIPH_RAND_KEY)
+        return EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_RAND_KEY, 0, key);
+    if (RAND_priv_bytes(key, ctx->key_len) <= 0)
+        return 0;
+    return 1;
+}
+
+int EVP_CIPHER_CTX_copy(EVP_CIPHER_CTX *out, const EVP_CIPHER_CTX *in)
+{
+    if ((in == NULL) || (in->cipher == NULL)) {
+        EVPerr(EVP_F_EVP_CIPHER_CTX_COPY, EVP_R_INPUT_NOT_INITIALIZED);
+        return 0;
+    }
+#ifndef OPENSSL_NO_ENGINE
+    /* Make sure it's safe to copy a cipher context using an ENGINE */
+    if (in->engine && !ENGINE_init(in->engine)) {
+        EVPerr(EVP_F_EVP_CIPHER_CTX_COPY, ERR_R_ENGINE_LIB);
+        return 0;
+    }
+#endif
+
+    EVP_CIPHER_CTX_reset(out);
+    memcpy(out, in, sizeof(*out));
+
+    if (in->cipher_data && in->cipher->ctx_size) {
+        out->cipher_data = OPENSSL_malloc(in->cipher->ctx_size);
+        if (out->cipher_data == NULL) {
+            out->cipher = NULL;
+            EVPerr(EVP_F_EVP_CIPHER_CTX_COPY, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        memcpy(out->cipher_data, in->cipher_data, in->cipher->ctx_size);
+    }
+
+    if (in->cipher->flags & EVP_CIPH_CUSTOM_COPY)
+        if (!in->cipher->ctrl((EVP_CIPHER_CTX *)in, EVP_CTRL_COPY, 0, out)) {
+            out->cipher = NULL;
+            EVPerr(EVP_F_EVP_CIPHER_CTX_COPY, EVP_R_INITIALIZATION_ERROR);
+            return 0;
+        }
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_err.c
new file mode 100644
index 000000000..60df27cbc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_err.c
@@ -0,0 +1,283 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/evperr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA EVP_str_functs[] = {
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_AESNI_INIT_KEY, 0), "aesni_init_key"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_AES_GCM_CTRL, 0), "aes_gcm_ctrl"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_AES_INIT_KEY, 0), "aes_init_key"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_AES_OCB_CIPHER, 0), "aes_ocb_cipher"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_AES_T4_INIT_KEY, 0), "aes_t4_init_key"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_AES_WRAP_CIPHER, 0), "aes_wrap_cipher"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_ALG_MODULE_INIT, 0), "alg_module_init"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_ARIA_CCM_INIT_KEY, 0), "aria_ccm_init_key"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_ARIA_GCM_CTRL, 0), "aria_gcm_ctrl"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_ARIA_GCM_INIT_KEY, 0), "aria_gcm_init_key"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_ARIA_INIT_KEY, 0), "aria_init_key"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_B64_NEW, 0), "b64_new"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_CAMELLIA_INIT_KEY, 0), "camellia_init_key"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_CHACHA20_POLY1305_CTRL, 0),
+     "chacha20_poly1305_ctrl"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_CMLL_T4_INIT_KEY, 0), "cmll_t4_init_key"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_DES_EDE3_WRAP_CIPHER, 0),
+     "des_ede3_wrap_cipher"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_DO_SIGVER_INIT, 0), "do_sigver_init"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_ENC_NEW, 0), "enc_new"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_CIPHERINIT_EX, 0), "EVP_CipherInit_ex"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_CIPHER_ASN1_TO_PARAM, 0),
+     "EVP_CIPHER_asn1_to_param"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_CIPHER_CTX_COPY, 0),
+     "EVP_CIPHER_CTX_copy"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_CIPHER_CTX_CTRL, 0),
+     "EVP_CIPHER_CTX_ctrl"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_CIPHER_CTX_SET_KEY_LENGTH, 0),
+     "EVP_CIPHER_CTX_set_key_length"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_CIPHER_PARAM_TO_ASN1, 0),
+     "EVP_CIPHER_param_to_asn1"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_DECRYPTFINAL_EX, 0),
+     "EVP_DecryptFinal_ex"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_DECRYPTUPDATE, 0), "EVP_DecryptUpdate"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_DIGESTFINALXOF, 0), "EVP_DigestFinalXOF"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_DIGESTINIT_EX, 0), "EVP_DigestInit_ex"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_ENCRYPTDECRYPTUPDATE, 0),
+     "evp_EncryptDecryptUpdate"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_ENCRYPTFINAL_EX, 0),
+     "EVP_EncryptFinal_ex"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_ENCRYPTUPDATE, 0), "EVP_EncryptUpdate"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_MD_CTX_COPY_EX, 0), "EVP_MD_CTX_copy_ex"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_MD_SIZE, 0), "EVP_MD_size"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_OPENINIT, 0), "EVP_OpenInit"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PBE_ALG_ADD, 0), "EVP_PBE_alg_add"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PBE_ALG_ADD_TYPE, 0),
+     "EVP_PBE_alg_add_type"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PBE_CIPHERINIT, 0), "EVP_PBE_CipherInit"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PBE_SCRYPT, 0), "EVP_PBE_scrypt"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKCS82PKEY, 0), "EVP_PKCS82PKEY"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY2PKCS8, 0), "EVP_PKEY2PKCS8"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_ASN1_ADD0, 0), "EVP_PKEY_asn1_add0"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_CHECK, 0), "EVP_PKEY_check"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_COPY_PARAMETERS, 0),
+     "EVP_PKEY_copy_parameters"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_CTX_CTRL, 0), "EVP_PKEY_CTX_ctrl"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_CTX_CTRL_STR, 0),
+     "EVP_PKEY_CTX_ctrl_str"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_CTX_DUP, 0), "EVP_PKEY_CTX_dup"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_CTX_MD, 0), "EVP_PKEY_CTX_md"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_DECRYPT, 0), "EVP_PKEY_decrypt"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_DECRYPT_INIT, 0),
+     "EVP_PKEY_decrypt_init"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_DECRYPT_OLD, 0),
+     "EVP_PKEY_decrypt_old"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_DERIVE, 0), "EVP_PKEY_derive"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_DERIVE_INIT, 0),
+     "EVP_PKEY_derive_init"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_DERIVE_SET_PEER, 0),
+     "EVP_PKEY_derive_set_peer"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_ENCRYPT, 0), "EVP_PKEY_encrypt"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_ENCRYPT_INIT, 0),
+     "EVP_PKEY_encrypt_init"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_ENCRYPT_OLD, 0),
+     "EVP_PKEY_encrypt_old"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_GET0_DH, 0), "EVP_PKEY_get0_DH"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_GET0_DSA, 0), "EVP_PKEY_get0_DSA"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_GET0_EC_KEY, 0),
+     "EVP_PKEY_get0_EC_KEY"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_GET0_HMAC, 0), "EVP_PKEY_get0_hmac"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_GET0_POLY1305, 0),
+     "EVP_PKEY_get0_poly1305"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_GET0_RSA, 0), "EVP_PKEY_get0_RSA"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_GET0_SIPHASH, 0),
+     "EVP_PKEY_get0_siphash"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_GET_RAW_PRIVATE_KEY, 0),
+     "EVP_PKEY_get_raw_private_key"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_GET_RAW_PUBLIC_KEY, 0),
+     "EVP_PKEY_get_raw_public_key"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_KEYGEN, 0), "EVP_PKEY_keygen"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_KEYGEN_INIT, 0),
+     "EVP_PKEY_keygen_init"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_METH_ADD0, 0), "EVP_PKEY_meth_add0"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_METH_NEW, 0), "EVP_PKEY_meth_new"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_NEW, 0), "EVP_PKEY_new"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_NEW_CMAC_KEY, 0),
+     "EVP_PKEY_new_CMAC_key"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_NEW_RAW_PRIVATE_KEY, 0),
+     "EVP_PKEY_new_raw_private_key"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_NEW_RAW_PUBLIC_KEY, 0),
+     "EVP_PKEY_new_raw_public_key"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_PARAMGEN, 0), "EVP_PKEY_paramgen"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_PARAMGEN_INIT, 0),
+     "EVP_PKEY_paramgen_init"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_PARAM_CHECK, 0),
+     "EVP_PKEY_param_check"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_PUBLIC_CHECK, 0),
+     "EVP_PKEY_public_check"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_SET1_ENGINE, 0),
+     "EVP_PKEY_set1_engine"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_SET_ALIAS_TYPE, 0),
+     "EVP_PKEY_set_alias_type"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_SIGN, 0), "EVP_PKEY_sign"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_SIGN_INIT, 0), "EVP_PKEY_sign_init"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_VERIFY, 0), "EVP_PKEY_verify"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_VERIFY_INIT, 0),
+     "EVP_PKEY_verify_init"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_VERIFY_RECOVER, 0),
+     "EVP_PKEY_verify_recover"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_PKEY_VERIFY_RECOVER_INIT, 0),
+     "EVP_PKEY_verify_recover_init"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_SIGNFINAL, 0), "EVP_SignFinal"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_EVP_VERIFYFINAL, 0), "EVP_VerifyFinal"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_INT_CTX_NEW, 0), "int_ctx_new"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_OK_NEW, 0), "ok_new"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_PKCS5_PBE_KEYIVGEN, 0), "PKCS5_PBE_keyivgen"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_PKCS5_V2_PBE_KEYIVGEN, 0),
+     "PKCS5_v2_PBE_keyivgen"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_PKCS5_V2_PBKDF2_KEYIVGEN, 0),
+     "PKCS5_v2_PBKDF2_keyivgen"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_PKCS5_V2_SCRYPT_KEYIVGEN, 0),
+     "PKCS5_v2_scrypt_keyivgen"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_PKEY_SET_TYPE, 0), "pkey_set_type"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_RC2_MAGIC_TO_METH, 0), "rc2_magic_to_meth"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_RC5_CTRL, 0), "rc5_ctrl"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_S390X_AES_GCM_CTRL, 0), "s390x_aes_gcm_ctrl"},
+    {ERR_PACK(ERR_LIB_EVP, EVP_F_UPDATE, 0), "update"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA EVP_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_AES_KEY_SETUP_FAILED),
+    "aes key setup failed"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_ARIA_KEY_SETUP_FAILED),
+    "aria key setup failed"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_BAD_DECRYPT), "bad decrypt"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_BUFFER_TOO_SMALL), "buffer too small"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_CAMELLIA_KEY_SETUP_FAILED),
+    "camellia key setup failed"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_CIPHER_PARAMETER_ERROR),
+    "cipher parameter error"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_COMMAND_NOT_SUPPORTED),
+    "command not supported"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_COPY_ERROR), "copy error"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_CTRL_NOT_IMPLEMENTED),
+    "ctrl not implemented"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_CTRL_OPERATION_NOT_IMPLEMENTED),
+    "ctrl operation not implemented"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_DATA_NOT_MULTIPLE_OF_BLOCK_LENGTH),
+    "data not multiple of block length"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_DECODE_ERROR), "decode error"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_DIFFERENT_KEY_TYPES),
+    "different key types"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_DIFFERENT_PARAMETERS),
+    "different parameters"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_ERROR_LOADING_SECTION),
+    "error loading section"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_ERROR_SETTING_FIPS_MODE),
+    "error setting fips mode"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_EXPECTING_AN_HMAC_KEY),
+    "expecting an hmac key"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_EXPECTING_AN_RSA_KEY),
+    "expecting an rsa key"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_EXPECTING_A_DH_KEY), "expecting a dh key"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_EXPECTING_A_DSA_KEY),
+    "expecting a dsa key"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_EXPECTING_A_EC_KEY), "expecting a ec key"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_EXPECTING_A_POLY1305_KEY),
+    "expecting a poly1305 key"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_EXPECTING_A_SIPHASH_KEY),
+    "expecting a siphash key"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_FIPS_MODE_NOT_SUPPORTED),
+    "fips mode not supported"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_GET_RAW_KEY_FAILED), "get raw key failed"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_ILLEGAL_SCRYPT_PARAMETERS),
+    "illegal scrypt parameters"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_INITIALIZATION_ERROR),
+    "initialization error"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_INPUT_NOT_INITIALIZED),
+    "input not initialized"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_INVALID_DIGEST), "invalid digest"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_INVALID_FIPS_MODE), "invalid fips mode"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_INVALID_KEY), "invalid key"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_INVALID_KEY_LENGTH), "invalid key length"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_INVALID_OPERATION), "invalid operation"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_KEYGEN_FAILURE), "keygen failure"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_KEY_SETUP_FAILED), "key setup failed"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_MEMORY_LIMIT_EXCEEDED),
+    "memory limit exceeded"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_MESSAGE_DIGEST_IS_NULL),
+    "message digest is null"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_METHOD_NOT_SUPPORTED),
+    "method not supported"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_MISSING_PARAMETERS), "missing parameters"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_NOT_XOF_OR_INVALID_LENGTH),
+    "not XOF or invalid length"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_NO_CIPHER_SET), "no cipher set"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_NO_DEFAULT_DIGEST), "no default digest"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_NO_DIGEST_SET), "no digest set"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_NO_KEY_SET), "no key set"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_NO_OPERATION_SET), "no operation set"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_ONLY_ONESHOT_SUPPORTED),
+    "only oneshot supported"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE),
+    "operation not supported for this keytype"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_OPERATON_NOT_INITIALIZED),
+    "operaton not initialized"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_PARTIALLY_OVERLAPPING),
+    "partially overlapping buffers"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_PBKDF2_ERROR), "pbkdf2 error"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_PKEY_APPLICATION_ASN1_METHOD_ALREADY_REGISTERED),
+    "pkey application asn1 method already registered"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_PRIVATE_KEY_DECODE_ERROR),
+    "private key decode error"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_PRIVATE_KEY_ENCODE_ERROR),
+    "private key encode error"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_PUBLIC_KEY_NOT_RSA), "public key not rsa"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_UNKNOWN_CIPHER), "unknown cipher"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_UNKNOWN_DIGEST), "unknown digest"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_UNKNOWN_OPTION), "unknown option"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_UNKNOWN_PBE_ALGORITHM),
+    "unknown pbe algorithm"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_UNSUPPORTED_ALGORITHM),
+    "unsupported algorithm"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_UNSUPPORTED_CIPHER), "unsupported cipher"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_UNSUPPORTED_KEYLENGTH),
+    "unsupported keylength"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_UNSUPPORTED_KEY_DERIVATION_FUNCTION),
+    "unsupported key derivation function"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_UNSUPPORTED_KEY_SIZE),
+    "unsupported key size"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_UNSUPPORTED_NUMBER_OF_ROUNDS),
+    "unsupported number of rounds"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_UNSUPPORTED_PRF), "unsupported prf"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_UNSUPPORTED_PRIVATE_KEY_ALGORITHM),
+    "unsupported private key algorithm"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_UNSUPPORTED_SALT_TYPE),
+    "unsupported salt type"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_WRAP_MODE_NOT_ALLOWED),
+    "wrap mode not allowed"},
+    {ERR_PACK(ERR_LIB_EVP, 0, EVP_R_WRONG_FINAL_BLOCK_LENGTH),
+    "wrong final block length"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_EVP_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(EVP_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(EVP_str_functs);
+        ERR_load_strings_const(EVP_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_key.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_key.c
new file mode 100644
index 000000000..e5ac107c3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_key.c
@@ -0,0 +1,150 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/ui.h>
+
+/* should be init to zeros. */
+static char prompt_string[80];
+
+void EVP_set_pw_prompt(const char *prompt)
+{
+    if (prompt == NULL)
+        prompt_string[0] = '\0';
+    else {
+        strncpy(prompt_string, prompt, 79);
+        prompt_string[79] = '\0';
+    }
+}
+
+char *EVP_get_pw_prompt(void)
+{
+    if (prompt_string[0] == '\0')
+        return NULL;
+    else
+        return prompt_string;
+}
+
+/*
+ * For historical reasons, the standard function for reading passwords is in
+ * the DES library -- if someone ever wants to disable DES, this function
+ * will fail
+ */
+int EVP_read_pw_string(char *buf, int len, const char *prompt, int verify)
+{
+    return EVP_read_pw_string_min(buf, 0, len, prompt, verify);
+}
+
+int EVP_read_pw_string_min(char *buf, int min, int len, const char *prompt,
+                           int verify)
+{
+    int ret = -1;
+    char buff[BUFSIZ];
+    UI *ui;
+
+    if ((prompt == NULL) && (prompt_string[0] != '\0'))
+        prompt = prompt_string;
+    ui = UI_new();
+    if (ui == NULL)
+        return ret;
+    if (UI_add_input_string(ui, prompt, 0, buf, min,
+                            (len >= BUFSIZ) ? BUFSIZ - 1 : len) < 0
+        || (verify
+            && UI_add_verify_string(ui, prompt, 0, buff, min,
+                                    (len >= BUFSIZ) ? BUFSIZ - 1 : len,
+                                    buf) < 0))
+        goto end;
+    ret = UI_process(ui);
+    OPENSSL_cleanse(buff, BUFSIZ);
+ end:
+    UI_free(ui);
+    return ret;
+}
+
+int EVP_BytesToKey(const EVP_CIPHER *type, const EVP_MD *md,
+                   const unsigned char *salt, const unsigned char *data,
+                   int datal, int count, unsigned char *key,
+                   unsigned char *iv)
+{
+    EVP_MD_CTX *c;
+    unsigned char md_buf[EVP_MAX_MD_SIZE];
+    int niv, nkey, addmd = 0;
+    unsigned int mds = 0, i;
+    int rv = 0;
+    nkey = EVP_CIPHER_key_length(type);
+    niv = EVP_CIPHER_iv_length(type);
+    OPENSSL_assert(nkey <= EVP_MAX_KEY_LENGTH);
+    OPENSSL_assert(niv <= EVP_MAX_IV_LENGTH);
+
+    if (data == NULL)
+        return nkey;
+
+    c = EVP_MD_CTX_new();
+    if (c == NULL)
+        goto err;
+    for (;;) {
+        if (!EVP_DigestInit_ex(c, md, NULL))
+            goto err;
+        if (addmd++)
+            if (!EVP_DigestUpdate(c, &(md_buf[0]), mds))
+                goto err;
+        if (!EVP_DigestUpdate(c, data, datal))
+            goto err;
+        if (salt != NULL)
+            if (!EVP_DigestUpdate(c, salt, PKCS5_SALT_LEN))
+                goto err;
+        if (!EVP_DigestFinal_ex(c, &(md_buf[0]), &mds))
+            goto err;
+
+        for (i = 1; i < (unsigned int)count; i++) {
+            if (!EVP_DigestInit_ex(c, md, NULL))
+                goto err;
+            if (!EVP_DigestUpdate(c, &(md_buf[0]), mds))
+                goto err;
+            if (!EVP_DigestFinal_ex(c, &(md_buf[0]), &mds))
+                goto err;
+        }
+        i = 0;
+        if (nkey) {
+            for (;;) {
+                if (nkey == 0)
+                    break;
+                if (i == mds)
+                    break;
+                if (key != NULL)
+                    *(key++) = md_buf[i];
+                nkey--;
+                i++;
+            }
+        }
+        if (niv && (i != mds)) {
+            for (;;) {
+                if (niv == 0)
+                    break;
+                if (i == mds)
+                    break;
+                if (iv != NULL)
+                    *(iv++) = md_buf[i];
+                niv--;
+                i++;
+            }
+        }
+        if ((nkey == 0) && (niv == 0))
+            break;
+    }
+    rv = EVP_CIPHER_key_length(type);
+ err:
+    EVP_MD_CTX_free(c);
+    OPENSSL_cleanse(md_buf, sizeof(md_buf));
+    return rv;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_lib.c
new file mode 100644
index 000000000..1b3c9840c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_lib.c
@@ -0,0 +1,528 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include "internal/evp_int.h"
+#include "evp_locl.h"
+
+int EVP_CIPHER_param_to_asn1(EVP_CIPHER_CTX *c, ASN1_TYPE *type)
+{
+    int ret;
+
+    if (c->cipher->set_asn1_parameters != NULL)
+        ret = c->cipher->set_asn1_parameters(c, type);
+    else if (c->cipher->flags & EVP_CIPH_FLAG_DEFAULT_ASN1) {
+        switch (EVP_CIPHER_CTX_mode(c)) {
+        case EVP_CIPH_WRAP_MODE:
+            if (EVP_CIPHER_CTX_nid(c) == NID_id_smime_alg_CMS3DESwrap)
+                ASN1_TYPE_set(type, V_ASN1_NULL, NULL);
+            ret = 1;
+            break;
+
+        case EVP_CIPH_GCM_MODE:
+        case EVP_CIPH_CCM_MODE:
+        case EVP_CIPH_XTS_MODE:
+        case EVP_CIPH_OCB_MODE:
+            ret = -2;
+            break;
+
+        default:
+            ret = EVP_CIPHER_set_asn1_iv(c, type);
+        }
+    } else
+        ret = -1;
+    if (ret <= 0)
+        EVPerr(EVP_F_EVP_CIPHER_PARAM_TO_ASN1, ret == -2 ?
+               ASN1_R_UNSUPPORTED_CIPHER :
+               EVP_R_CIPHER_PARAMETER_ERROR);
+    if (ret < -1)
+        ret = -1;
+    return ret;
+}
+
+int EVP_CIPHER_asn1_to_param(EVP_CIPHER_CTX *c, ASN1_TYPE *type)
+{
+    int ret;
+
+    if (c->cipher->get_asn1_parameters != NULL)
+        ret = c->cipher->get_asn1_parameters(c, type);
+    else if (c->cipher->flags & EVP_CIPH_FLAG_DEFAULT_ASN1) {
+        switch (EVP_CIPHER_CTX_mode(c)) {
+
+        case EVP_CIPH_WRAP_MODE:
+            ret = 1;
+            break;
+
+        case EVP_CIPH_GCM_MODE:
+        case EVP_CIPH_CCM_MODE:
+        case EVP_CIPH_XTS_MODE:
+        case EVP_CIPH_OCB_MODE:
+            ret = -2;
+            break;
+
+        default:
+            ret = EVP_CIPHER_get_asn1_iv(c, type);
+            break;
+        }
+    } else
+        ret = -1;
+    if (ret <= 0)
+        EVPerr(EVP_F_EVP_CIPHER_ASN1_TO_PARAM, ret == -2 ?
+               EVP_R_UNSUPPORTED_CIPHER :
+               EVP_R_CIPHER_PARAMETER_ERROR);
+    if (ret < -1)
+        ret = -1;
+    return ret;
+}
+
+int EVP_CIPHER_get_asn1_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type)
+{
+    int i = 0;
+    unsigned int l;
+
+    if (type != NULL) {
+        l = EVP_CIPHER_CTX_iv_length(c);
+        OPENSSL_assert(l <= sizeof(c->iv));
+        i = ASN1_TYPE_get_octetstring(type, c->oiv, l);
+        if (i != (int)l)
+            return -1;
+        else if (i > 0)
+            memcpy(c->iv, c->oiv, l);
+    }
+    return i;
+}
+
+int EVP_CIPHER_set_asn1_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type)
+{
+    int i = 0;
+    unsigned int j;
+
+    if (type != NULL) {
+        j = EVP_CIPHER_CTX_iv_length(c);
+        OPENSSL_assert(j <= sizeof(c->iv));
+        i = ASN1_TYPE_set_octetstring(type, c->oiv, j);
+    }
+    return i;
+}
+
+/* Convert the various cipher NIDs and dummies to a proper OID NID */
+int EVP_CIPHER_type(const EVP_CIPHER *ctx)
+{
+    int nid;
+    ASN1_OBJECT *otmp;
+    nid = EVP_CIPHER_nid(ctx);
+
+    switch (nid) {
+
+    case NID_rc2_cbc:
+    case NID_rc2_64_cbc:
+    case NID_rc2_40_cbc:
+
+        return NID_rc2_cbc;
+
+    case NID_rc4:
+    case NID_rc4_40:
+
+        return NID_rc4;
+
+    case NID_aes_128_cfb128:
+    case NID_aes_128_cfb8:
+    case NID_aes_128_cfb1:
+
+        return NID_aes_128_cfb128;
+
+    case NID_aes_192_cfb128:
+    case NID_aes_192_cfb8:
+    case NID_aes_192_cfb1:
+
+        return NID_aes_192_cfb128;
+
+    case NID_aes_256_cfb128:
+    case NID_aes_256_cfb8:
+    case NID_aes_256_cfb1:
+
+        return NID_aes_256_cfb128;
+
+    case NID_des_cfb64:
+    case NID_des_cfb8:
+    case NID_des_cfb1:
+
+        return NID_des_cfb64;
+
+    case NID_des_ede3_cfb64:
+    case NID_des_ede3_cfb8:
+    case NID_des_ede3_cfb1:
+
+        return NID_des_cfb64;
+
+    default:
+        /* Check it has an OID and it is valid */
+        otmp = OBJ_nid2obj(nid);
+        if (OBJ_get0_data(otmp) == NULL)
+            nid = NID_undef;
+        ASN1_OBJECT_free(otmp);
+        return nid;
+    }
+}
+
+int EVP_CIPHER_block_size(const EVP_CIPHER *e)
+{
+    return e->block_size;
+}
+
+int EVP_CIPHER_CTX_block_size(const EVP_CIPHER_CTX *ctx)
+{
+    return ctx->cipher->block_size;
+}
+
+int EVP_CIPHER_impl_ctx_size(const EVP_CIPHER *e)
+{
+    return e->ctx_size;
+}
+
+int EVP_Cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+               const unsigned char *in, unsigned int inl)
+{
+    return ctx->cipher->do_cipher(ctx, out, in, inl);
+}
+
+const EVP_CIPHER *EVP_CIPHER_CTX_cipher(const EVP_CIPHER_CTX *ctx)
+{
+    return ctx->cipher;
+}
+
+int EVP_CIPHER_CTX_encrypting(const EVP_CIPHER_CTX *ctx)
+{
+    return ctx->encrypt;
+}
+
+unsigned long EVP_CIPHER_flags(const EVP_CIPHER *cipher)
+{
+    return cipher->flags;
+}
+
+void *EVP_CIPHER_CTX_get_app_data(const EVP_CIPHER_CTX *ctx)
+{
+    return ctx->app_data;
+}
+
+void EVP_CIPHER_CTX_set_app_data(EVP_CIPHER_CTX *ctx, void *data)
+{
+    ctx->app_data = data;
+}
+
+void *EVP_CIPHER_CTX_get_cipher_data(const EVP_CIPHER_CTX *ctx)
+{
+    return ctx->cipher_data;
+}
+
+void *EVP_CIPHER_CTX_set_cipher_data(EVP_CIPHER_CTX *ctx, void *cipher_data)
+{
+    void *old_cipher_data;
+
+    old_cipher_data = ctx->cipher_data;
+    ctx->cipher_data = cipher_data;
+
+    return old_cipher_data;
+}
+
+int EVP_CIPHER_iv_length(const EVP_CIPHER *cipher)
+{
+    return cipher->iv_len;
+}
+
+int EVP_CIPHER_CTX_iv_length(const EVP_CIPHER_CTX *ctx)
+{
+    return ctx->cipher->iv_len;
+}
+
+const unsigned char *EVP_CIPHER_CTX_original_iv(const EVP_CIPHER_CTX *ctx)
+{
+    return ctx->oiv;
+}
+
+const unsigned char *EVP_CIPHER_CTX_iv(const EVP_CIPHER_CTX *ctx)
+{
+    return ctx->iv;
+}
+
+unsigned char *EVP_CIPHER_CTX_iv_noconst(EVP_CIPHER_CTX *ctx)
+{
+    return ctx->iv;
+}
+
+unsigned char *EVP_CIPHER_CTX_buf_noconst(EVP_CIPHER_CTX *ctx)
+{
+    return ctx->buf;
+}
+
+int EVP_CIPHER_CTX_num(const EVP_CIPHER_CTX *ctx)
+{
+    return ctx->num;
+}
+
+void EVP_CIPHER_CTX_set_num(EVP_CIPHER_CTX *ctx, int num)
+{
+    ctx->num = num;
+}
+
+int EVP_CIPHER_key_length(const EVP_CIPHER *cipher)
+{
+    return cipher->key_len;
+}
+
+int EVP_CIPHER_CTX_key_length(const EVP_CIPHER_CTX *ctx)
+{
+    return ctx->key_len;
+}
+
+int EVP_CIPHER_nid(const EVP_CIPHER *cipher)
+{
+    return cipher->nid;
+}
+
+int EVP_CIPHER_CTX_nid(const EVP_CIPHER_CTX *ctx)
+{
+    return ctx->cipher->nid;
+}
+
+int EVP_MD_block_size(const EVP_MD *md)
+{
+    return md->block_size;
+}
+
+int EVP_MD_type(const EVP_MD *md)
+{
+    return md->type;
+}
+
+int EVP_MD_pkey_type(const EVP_MD *md)
+{
+    return md->pkey_type;
+}
+
+int EVP_MD_size(const EVP_MD *md)
+{
+    if (!md) {
+        EVPerr(EVP_F_EVP_MD_SIZE, EVP_R_MESSAGE_DIGEST_IS_NULL);
+        return -1;
+    }
+    return md->md_size;
+}
+
+unsigned long EVP_MD_flags(const EVP_MD *md)
+{
+    return md->flags;
+}
+
+EVP_MD *EVP_MD_meth_new(int md_type, int pkey_type)
+{
+    EVP_MD *md = OPENSSL_zalloc(sizeof(*md));
+
+    if (md != NULL) {
+        md->type = md_type;
+        md->pkey_type = pkey_type;
+    }
+    return md;
+}
+EVP_MD *EVP_MD_meth_dup(const EVP_MD *md)
+{
+    EVP_MD *to = EVP_MD_meth_new(md->type, md->pkey_type);
+
+    if (to != NULL)
+        memcpy(to, md, sizeof(*to));
+    return to;
+}
+void EVP_MD_meth_free(EVP_MD *md)
+{
+    OPENSSL_free(md);
+}
+int EVP_MD_meth_set_input_blocksize(EVP_MD *md, int blocksize)
+{
+    md->block_size = blocksize;
+    return 1;
+}
+int EVP_MD_meth_set_result_size(EVP_MD *md, int resultsize)
+{
+    md->md_size = resultsize;
+    return 1;
+}
+int EVP_MD_meth_set_app_datasize(EVP_MD *md, int datasize)
+{
+    md->ctx_size = datasize;
+    return 1;
+}
+int EVP_MD_meth_set_flags(EVP_MD *md, unsigned long flags)
+{
+    md->flags = flags;
+    return 1;
+}
+int EVP_MD_meth_set_init(EVP_MD *md, int (*init)(EVP_MD_CTX *ctx))
+{
+    md->init = init;
+    return 1;
+}
+int EVP_MD_meth_set_update(EVP_MD *md, int (*update)(EVP_MD_CTX *ctx,
+                                                     const void *data,
+                                                     size_t count))
+{
+    md->update = update;
+    return 1;
+}
+int EVP_MD_meth_set_final(EVP_MD *md, int (*final)(EVP_MD_CTX *ctx,
+                                                   unsigned char *md))
+{
+    md->final = final;
+    return 1;
+}
+int EVP_MD_meth_set_copy(EVP_MD *md, int (*copy)(EVP_MD_CTX *to,
+                                                 const EVP_MD_CTX *from))
+{
+    md->copy = copy;
+    return 1;
+}
+int EVP_MD_meth_set_cleanup(EVP_MD *md, int (*cleanup)(EVP_MD_CTX *ctx))
+{
+    md->cleanup = cleanup;
+    return 1;
+}
+int EVP_MD_meth_set_ctrl(EVP_MD *md, int (*ctrl)(EVP_MD_CTX *ctx, int cmd,
+                                                 int p1, void *p2))
+{
+    md->md_ctrl = ctrl;
+    return 1;
+}
+
+int EVP_MD_meth_get_input_blocksize(const EVP_MD *md)
+{
+    return md->block_size;
+}
+int EVP_MD_meth_get_result_size(const EVP_MD *md)
+{
+    return md->md_size;
+}
+int EVP_MD_meth_get_app_datasize(const EVP_MD *md)
+{
+    return md->ctx_size;
+}
+unsigned long EVP_MD_meth_get_flags(const EVP_MD *md)
+{
+    return md->flags;
+}
+int (*EVP_MD_meth_get_init(const EVP_MD *md))(EVP_MD_CTX *ctx)
+{
+    return md->init;
+}
+int (*EVP_MD_meth_get_update(const EVP_MD *md))(EVP_MD_CTX *ctx,
+                                                const void *data,
+                                                size_t count)
+{
+    return md->update;
+}
+int (*EVP_MD_meth_get_final(const EVP_MD *md))(EVP_MD_CTX *ctx,
+                                               unsigned char *md)
+{
+    return md->final;
+}
+int (*EVP_MD_meth_get_copy(const EVP_MD *md))(EVP_MD_CTX *to,
+                                              const EVP_MD_CTX *from)
+{
+    return md->copy;
+}
+int (*EVP_MD_meth_get_cleanup(const EVP_MD *md))(EVP_MD_CTX *ctx)
+{
+    return md->cleanup;
+}
+int (*EVP_MD_meth_get_ctrl(const EVP_MD *md))(EVP_MD_CTX *ctx, int cmd,
+                                              int p1, void *p2)
+{
+    return md->md_ctrl;
+}
+
+const EVP_MD *EVP_MD_CTX_md(const EVP_MD_CTX *ctx)
+{
+    if (!ctx)
+        return NULL;
+    return ctx->digest;
+}
+
+EVP_PKEY_CTX *EVP_MD_CTX_pkey_ctx(const EVP_MD_CTX *ctx)
+{
+    return ctx->pctx;
+}
+
+void EVP_MD_CTX_set_pkey_ctx(EVP_MD_CTX *ctx, EVP_PKEY_CTX *pctx)
+{
+    /*
+     * it's reasonable to set NULL pctx (a.k.a clear the ctx->pctx), so
+     * we have to deal with the cleanup job here.
+     */
+    if (!EVP_MD_CTX_test_flags(ctx, EVP_MD_CTX_FLAG_KEEP_PKEY_CTX))
+        EVP_PKEY_CTX_free(ctx->pctx);
+
+    ctx->pctx = pctx;
+
+    if (pctx != NULL) {
+        /* make sure pctx is not freed when destroying EVP_MD_CTX */
+        EVP_MD_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_KEEP_PKEY_CTX);
+    } else {
+        EVP_MD_CTX_clear_flags(ctx, EVP_MD_CTX_FLAG_KEEP_PKEY_CTX);
+    }
+}
+
+void *EVP_MD_CTX_md_data(const EVP_MD_CTX *ctx)
+{
+    return ctx->md_data;
+}
+
+int (*EVP_MD_CTX_update_fn(EVP_MD_CTX *ctx))(EVP_MD_CTX *ctx,
+                                             const void *data, size_t count)
+{
+    return ctx->update;
+}
+
+void EVP_MD_CTX_set_update_fn(EVP_MD_CTX *ctx,
+                              int (*update) (EVP_MD_CTX *ctx,
+                                             const void *data, size_t count))
+{
+    ctx->update = update;
+}
+
+void EVP_MD_CTX_set_flags(EVP_MD_CTX *ctx, int flags)
+{
+    ctx->flags |= flags;
+}
+
+void EVP_MD_CTX_clear_flags(EVP_MD_CTX *ctx, int flags)
+{
+    ctx->flags &= ~flags;
+}
+
+int EVP_MD_CTX_test_flags(const EVP_MD_CTX *ctx, int flags)
+{
+    return (ctx->flags & flags);
+}
+
+void EVP_CIPHER_CTX_set_flags(EVP_CIPHER_CTX *ctx, int flags)
+{
+    ctx->flags |= flags;
+}
+
+void EVP_CIPHER_CTX_clear_flags(EVP_CIPHER_CTX *ctx, int flags)
+{
+    ctx->flags &= ~flags;
+}
+
+int EVP_CIPHER_CTX_test_flags(const EVP_CIPHER_CTX *ctx, int flags)
+{
+    return (ctx->flags & flags);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_locl.h
new file mode 100644
index 000000000..f1589d682
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_locl.h
@@ -0,0 +1,68 @@
+/*
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* EVP_MD_CTX related stuff */
+
+struct evp_md_ctx_st {
+    const EVP_MD *digest;
+    ENGINE *engine;             /* functional reference if 'digest' is
+                                 * ENGINE-provided */
+    unsigned long flags;
+    void *md_data;
+    /* Public key context for sign/verify */
+    EVP_PKEY_CTX *pctx;
+    /* Update function: usually copied from EVP_MD */
+    int (*update) (EVP_MD_CTX *ctx, const void *data, size_t count);
+} /* EVP_MD_CTX */ ;
+
+struct evp_cipher_ctx_st {
+    const EVP_CIPHER *cipher;
+    ENGINE *engine;             /* functional reference if 'cipher' is
+                                 * ENGINE-provided */
+    int encrypt;                /* encrypt or decrypt */
+    int buf_len;                /* number we have left */
+    unsigned char oiv[EVP_MAX_IV_LENGTH]; /* original iv */
+    unsigned char iv[EVP_MAX_IV_LENGTH]; /* working iv */
+    unsigned char buf[EVP_MAX_BLOCK_LENGTH]; /* saved partial block */
+    int num;                    /* used by cfb/ofb/ctr mode */
+    /* FIXME: Should this even exist? It appears unused */
+    void *app_data;             /* application stuff */
+    int key_len;                /* May change for variable length cipher */
+    unsigned long flags;        /* Various flags */
+    void *cipher_data;          /* per EVP data */
+    int final_used;
+    int block_mask;
+    unsigned char final[EVP_MAX_BLOCK_LENGTH]; /* possible final block */
+} /* EVP_CIPHER_CTX */ ;
+
+int PKCS5_v2_PBKDF2_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass,
+                             int passlen, ASN1_TYPE *param,
+                             const EVP_CIPHER *c, const EVP_MD *md,
+                             int en_de);
+
+struct evp_Encode_Ctx_st {
+    /* number saved in a partial encode/decode */
+    int num;
+    /*
+     * The length is either the output line length (in input bytes) or the
+     * shortest input line length that is ok.  Once decoding begins, the
+     * length is adjusted up each time a longer line is decoded
+     */
+    int length;
+    /* data to encode */
+    unsigned char enc_data[80];
+    /* number read on current line */
+    int line_num;
+    unsigned int flags;
+};
+
+typedef struct evp_pbe_st EVP_PBE_CTL;
+DEFINE_STACK_OF(EVP_PBE_CTL)
+
+int is_partially_overlapping(const void *ptr1, const void *ptr2, int len);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_pbe.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_pbe.c
new file mode 100644
index 000000000..5a88817b4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_pbe.c
@@ -0,0 +1,262 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/pkcs12.h>
+#include <openssl/x509.h>
+#include "evp_locl.h"
+
+/* Password based encryption (PBE) functions */
+
+/* Setup a cipher context from a PBE algorithm */
+
+struct evp_pbe_st {
+    int pbe_type;
+    int pbe_nid;
+    int cipher_nid;
+    int md_nid;
+    EVP_PBE_KEYGEN *keygen;
+};
+
+static STACK_OF(EVP_PBE_CTL) *pbe_algs;
+
+static const EVP_PBE_CTL builtin_pbe[] = {
+    {EVP_PBE_TYPE_OUTER, NID_pbeWithMD2AndDES_CBC,
+     NID_des_cbc, NID_md2, PKCS5_PBE_keyivgen},
+    {EVP_PBE_TYPE_OUTER, NID_pbeWithMD5AndDES_CBC,
+     NID_des_cbc, NID_md5, PKCS5_PBE_keyivgen},
+    {EVP_PBE_TYPE_OUTER, NID_pbeWithSHA1AndRC2_CBC,
+     NID_rc2_64_cbc, NID_sha1, PKCS5_PBE_keyivgen},
+
+    {EVP_PBE_TYPE_OUTER, NID_id_pbkdf2, -1, -1, PKCS5_v2_PBKDF2_keyivgen},
+
+    {EVP_PBE_TYPE_OUTER, NID_pbe_WithSHA1And128BitRC4,
+     NID_rc4, NID_sha1, PKCS12_PBE_keyivgen},
+    {EVP_PBE_TYPE_OUTER, NID_pbe_WithSHA1And40BitRC4,
+     NID_rc4_40, NID_sha1, PKCS12_PBE_keyivgen},
+    {EVP_PBE_TYPE_OUTER, NID_pbe_WithSHA1And3_Key_TripleDES_CBC,
+     NID_des_ede3_cbc, NID_sha1, PKCS12_PBE_keyivgen},
+    {EVP_PBE_TYPE_OUTER, NID_pbe_WithSHA1And2_Key_TripleDES_CBC,
+     NID_des_ede_cbc, NID_sha1, PKCS12_PBE_keyivgen},
+    {EVP_PBE_TYPE_OUTER, NID_pbe_WithSHA1And128BitRC2_CBC,
+     NID_rc2_cbc, NID_sha1, PKCS12_PBE_keyivgen},
+    {EVP_PBE_TYPE_OUTER, NID_pbe_WithSHA1And40BitRC2_CBC,
+     NID_rc2_40_cbc, NID_sha1, PKCS12_PBE_keyivgen},
+
+    {EVP_PBE_TYPE_OUTER, NID_pbes2, -1, -1, PKCS5_v2_PBE_keyivgen},
+
+    {EVP_PBE_TYPE_OUTER, NID_pbeWithMD2AndRC2_CBC,
+     NID_rc2_64_cbc, NID_md2, PKCS5_PBE_keyivgen},
+    {EVP_PBE_TYPE_OUTER, NID_pbeWithMD5AndRC2_CBC,
+     NID_rc2_64_cbc, NID_md5, PKCS5_PBE_keyivgen},
+    {EVP_PBE_TYPE_OUTER, NID_pbeWithSHA1AndDES_CBC,
+     NID_des_cbc, NID_sha1, PKCS5_PBE_keyivgen},
+
+    {EVP_PBE_TYPE_PRF, NID_hmacWithSHA1, -1, NID_sha1, 0},
+    {EVP_PBE_TYPE_PRF, NID_hmac_md5, -1, NID_md5, 0},
+    {EVP_PBE_TYPE_PRF, NID_hmac_sha1, -1, NID_sha1, 0},
+    {EVP_PBE_TYPE_PRF, NID_hmacWithMD5, -1, NID_md5, 0},
+    {EVP_PBE_TYPE_PRF, NID_hmacWithSHA224, -1, NID_sha224, 0},
+    {EVP_PBE_TYPE_PRF, NID_hmacWithSHA256, -1, NID_sha256, 0},
+    {EVP_PBE_TYPE_PRF, NID_hmacWithSHA384, -1, NID_sha384, 0},
+    {EVP_PBE_TYPE_PRF, NID_hmacWithSHA512, -1, NID_sha512, 0},
+    {EVP_PBE_TYPE_PRF, NID_id_HMACGostR3411_94, -1, NID_id_GostR3411_94, 0},
+    {EVP_PBE_TYPE_PRF, NID_id_tc26_hmac_gost_3411_2012_256, -1,
+     NID_id_GostR3411_2012_256, 0},
+    {EVP_PBE_TYPE_PRF, NID_id_tc26_hmac_gost_3411_2012_512, -1,
+     NID_id_GostR3411_2012_512, 0},
+    {EVP_PBE_TYPE_PRF, NID_hmacWithSHA512_224, -1, NID_sha512_224, 0},
+    {EVP_PBE_TYPE_PRF, NID_hmacWithSHA512_256, -1, NID_sha512_256, 0},
+    {EVP_PBE_TYPE_KDF, NID_id_pbkdf2, -1, -1, PKCS5_v2_PBKDF2_keyivgen},
+#ifndef OPENSSL_NO_SCRYPT
+    {EVP_PBE_TYPE_KDF, NID_id_scrypt, -1, -1, PKCS5_v2_scrypt_keyivgen}
+#endif
+};
+
+int EVP_PBE_CipherInit(ASN1_OBJECT *pbe_obj, const char *pass, int passlen,
+                       ASN1_TYPE *param, EVP_CIPHER_CTX *ctx, int en_de)
+{
+    const EVP_CIPHER *cipher;
+    const EVP_MD *md;
+    int cipher_nid, md_nid;
+    EVP_PBE_KEYGEN *keygen;
+
+    if (!EVP_PBE_find(EVP_PBE_TYPE_OUTER, OBJ_obj2nid(pbe_obj),
+                      &cipher_nid, &md_nid, &keygen)) {
+        char obj_tmp[80];
+        EVPerr(EVP_F_EVP_PBE_CIPHERINIT, EVP_R_UNKNOWN_PBE_ALGORITHM);
+        if (!pbe_obj)
+            OPENSSL_strlcpy(obj_tmp, "NULL", sizeof(obj_tmp));
+        else
+            i2t_ASN1_OBJECT(obj_tmp, sizeof(obj_tmp), pbe_obj);
+        ERR_add_error_data(2, "TYPE=", obj_tmp);
+        return 0;
+    }
+
+    if (!pass)
+        passlen = 0;
+    else if (passlen == -1)
+        passlen = strlen(pass);
+
+    if (cipher_nid == -1)
+        cipher = NULL;
+    else {
+        cipher = EVP_get_cipherbynid(cipher_nid);
+        if (!cipher) {
+            EVPerr(EVP_F_EVP_PBE_CIPHERINIT, EVP_R_UNKNOWN_CIPHER);
+            return 0;
+        }
+    }
+
+    if (md_nid == -1)
+        md = NULL;
+    else {
+        md = EVP_get_digestbynid(md_nid);
+        if (!md) {
+            EVPerr(EVP_F_EVP_PBE_CIPHERINIT, EVP_R_UNKNOWN_DIGEST);
+            return 0;
+        }
+    }
+
+    if (!keygen(ctx, pass, passlen, param, cipher, md, en_de)) {
+        EVPerr(EVP_F_EVP_PBE_CIPHERINIT, EVP_R_KEYGEN_FAILURE);
+        return 0;
+    }
+    return 1;
+}
+
+DECLARE_OBJ_BSEARCH_CMP_FN(EVP_PBE_CTL, EVP_PBE_CTL, pbe2);
+
+static int pbe2_cmp(const EVP_PBE_CTL *pbe1, const EVP_PBE_CTL *pbe2)
+{
+    int ret = pbe1->pbe_type - pbe2->pbe_type;
+    if (ret)
+        return ret;
+    else
+        return pbe1->pbe_nid - pbe2->pbe_nid;
+}
+
+IMPLEMENT_OBJ_BSEARCH_CMP_FN(EVP_PBE_CTL, EVP_PBE_CTL, pbe2);
+
+static int pbe_cmp(const EVP_PBE_CTL *const *a, const EVP_PBE_CTL *const *b)
+{
+    int ret = (*a)->pbe_type - (*b)->pbe_type;
+    if (ret)
+        return ret;
+    else
+        return (*a)->pbe_nid - (*b)->pbe_nid;
+}
+
+/* Add a PBE algorithm */
+
+int EVP_PBE_alg_add_type(int pbe_type, int pbe_nid, int cipher_nid,
+                         int md_nid, EVP_PBE_KEYGEN *keygen)
+{
+    EVP_PBE_CTL *pbe_tmp;
+
+    if (pbe_algs == NULL) {
+        pbe_algs = sk_EVP_PBE_CTL_new(pbe_cmp);
+        if (pbe_algs == NULL)
+            goto err;
+    }
+
+    if ((pbe_tmp = OPENSSL_malloc(sizeof(*pbe_tmp))) == NULL)
+        goto err;
+
+    pbe_tmp->pbe_type = pbe_type;
+    pbe_tmp->pbe_nid = pbe_nid;
+    pbe_tmp->cipher_nid = cipher_nid;
+    pbe_tmp->md_nid = md_nid;
+    pbe_tmp->keygen = keygen;
+
+    if (!sk_EVP_PBE_CTL_push(pbe_algs, pbe_tmp)) {
+        OPENSSL_free(pbe_tmp);
+        goto err;
+    }
+    return 1;
+
+ err:
+    EVPerr(EVP_F_EVP_PBE_ALG_ADD_TYPE, ERR_R_MALLOC_FAILURE);
+    return 0;
+}
+
+int EVP_PBE_alg_add(int nid, const EVP_CIPHER *cipher, const EVP_MD *md,
+                    EVP_PBE_KEYGEN *keygen)
+{
+    int cipher_nid, md_nid;
+
+    if (cipher)
+        cipher_nid = EVP_CIPHER_nid(cipher);
+    else
+        cipher_nid = -1;
+    if (md)
+        md_nid = EVP_MD_type(md);
+    else
+        md_nid = -1;
+
+    return EVP_PBE_alg_add_type(EVP_PBE_TYPE_OUTER, nid,
+                                cipher_nid, md_nid, keygen);
+}
+
+int EVP_PBE_find(int type, int pbe_nid,
+                 int *pcnid, int *pmnid, EVP_PBE_KEYGEN **pkeygen)
+{
+    EVP_PBE_CTL *pbetmp = NULL, pbelu;
+    int i;
+    if (pbe_nid == NID_undef)
+        return 0;
+
+    pbelu.pbe_type = type;
+    pbelu.pbe_nid = pbe_nid;
+
+    if (pbe_algs != NULL) {
+        i = sk_EVP_PBE_CTL_find(pbe_algs, &pbelu);
+        pbetmp = sk_EVP_PBE_CTL_value(pbe_algs, i);
+    }
+    if (pbetmp == NULL) {
+        pbetmp = OBJ_bsearch_pbe2(&pbelu, builtin_pbe, OSSL_NELEM(builtin_pbe));
+    }
+    if (pbetmp == NULL)
+        return 0;
+    if (pcnid)
+        *pcnid = pbetmp->cipher_nid;
+    if (pmnid)
+        *pmnid = pbetmp->md_nid;
+    if (pkeygen)
+        *pkeygen = pbetmp->keygen;
+    return 1;
+}
+
+static void free_evp_pbe_ctl(EVP_PBE_CTL *pbe)
+{
+    OPENSSL_free(pbe);
+}
+
+void EVP_PBE_cleanup(void)
+{
+    sk_EVP_PBE_CTL_pop_free(pbe_algs, free_evp_pbe_ctl);
+    pbe_algs = NULL;
+}
+
+int EVP_PBE_get(int *ptype, int *ppbe_nid, size_t num)
+{
+    const EVP_PBE_CTL *tpbe;
+
+    if (num >= OSSL_NELEM(builtin_pbe))
+        return 0;
+
+    tpbe = builtin_pbe + num;
+    if (ptype)
+        *ptype = tpbe->pbe_type;
+    if (ppbe_nid)
+        *ppbe_nid = tpbe->pbe_nid;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_pkey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_pkey.c
new file mode 100644
index 000000000..e61a8761a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/evp_pkey.c
@@ -0,0 +1,149 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/rand.h>
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+#include "internal/x509_int.h"
+
+/* Extract a private key from a PKCS8 structure */
+
+EVP_PKEY *EVP_PKCS82PKEY(const PKCS8_PRIV_KEY_INFO *p8)
+{
+    EVP_PKEY *pkey = NULL;
+    const ASN1_OBJECT *algoid;
+    char obj_tmp[80];
+
+    if (!PKCS8_pkey_get0(&algoid, NULL, NULL, NULL, p8))
+        return NULL;
+
+    if ((pkey = EVP_PKEY_new()) == NULL) {
+        EVPerr(EVP_F_EVP_PKCS82PKEY, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if (!EVP_PKEY_set_type(pkey, OBJ_obj2nid(algoid))) {
+        EVPerr(EVP_F_EVP_PKCS82PKEY, EVP_R_UNSUPPORTED_PRIVATE_KEY_ALGORITHM);
+        i2t_ASN1_OBJECT(obj_tmp, 80, algoid);
+        ERR_add_error_data(2, "TYPE=", obj_tmp);
+        goto error;
+    }
+
+    if (pkey->ameth->priv_decode) {
+        if (!pkey->ameth->priv_decode(pkey, p8)) {
+            EVPerr(EVP_F_EVP_PKCS82PKEY, EVP_R_PRIVATE_KEY_DECODE_ERROR);
+            goto error;
+        }
+    } else {
+        EVPerr(EVP_F_EVP_PKCS82PKEY, EVP_R_METHOD_NOT_SUPPORTED);
+        goto error;
+    }
+
+    return pkey;
+
+ error:
+    EVP_PKEY_free(pkey);
+    return NULL;
+}
+
+/* Turn a private key into a PKCS8 structure */
+
+PKCS8_PRIV_KEY_INFO *EVP_PKEY2PKCS8(EVP_PKEY *pkey)
+{
+    PKCS8_PRIV_KEY_INFO *p8 = PKCS8_PRIV_KEY_INFO_new();
+    if (p8  == NULL) {
+        EVPerr(EVP_F_EVP_PKEY2PKCS8, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if (pkey->ameth) {
+        if (pkey->ameth->priv_encode) {
+            if (!pkey->ameth->priv_encode(p8, pkey)) {
+                EVPerr(EVP_F_EVP_PKEY2PKCS8, EVP_R_PRIVATE_KEY_ENCODE_ERROR);
+                goto error;
+            }
+        } else {
+            EVPerr(EVP_F_EVP_PKEY2PKCS8, EVP_R_METHOD_NOT_SUPPORTED);
+            goto error;
+        }
+    } else {
+        EVPerr(EVP_F_EVP_PKEY2PKCS8, EVP_R_UNSUPPORTED_PRIVATE_KEY_ALGORITHM);
+        goto error;
+    }
+    return p8;
+ error:
+    PKCS8_PRIV_KEY_INFO_free(p8);
+    return NULL;
+}
+
+/* EVP_PKEY attribute functions */
+
+int EVP_PKEY_get_attr_count(const EVP_PKEY *key)
+{
+    return X509at_get_attr_count(key->attributes);
+}
+
+int EVP_PKEY_get_attr_by_NID(const EVP_PKEY *key, int nid, int lastpos)
+{
+    return X509at_get_attr_by_NID(key->attributes, nid, lastpos);
+}
+
+int EVP_PKEY_get_attr_by_OBJ(const EVP_PKEY *key, const ASN1_OBJECT *obj,
+                             int lastpos)
+{
+    return X509at_get_attr_by_OBJ(key->attributes, obj, lastpos);
+}
+
+X509_ATTRIBUTE *EVP_PKEY_get_attr(const EVP_PKEY *key, int loc)
+{
+    return X509at_get_attr(key->attributes, loc);
+}
+
+X509_ATTRIBUTE *EVP_PKEY_delete_attr(EVP_PKEY *key, int loc)
+{
+    return X509at_delete_attr(key->attributes, loc);
+}
+
+int EVP_PKEY_add1_attr(EVP_PKEY *key, X509_ATTRIBUTE *attr)
+{
+    if (X509at_add1_attr(&key->attributes, attr))
+        return 1;
+    return 0;
+}
+
+int EVP_PKEY_add1_attr_by_OBJ(EVP_PKEY *key,
+                              const ASN1_OBJECT *obj, int type,
+                              const unsigned char *bytes, int len)
+{
+    if (X509at_add1_attr_by_OBJ(&key->attributes, obj, type, bytes, len))
+        return 1;
+    return 0;
+}
+
+int EVP_PKEY_add1_attr_by_NID(EVP_PKEY *key,
+                              int nid, int type,
+                              const unsigned char *bytes, int len)
+{
+    if (X509at_add1_attr_by_NID(&key->attributes, nid, type, bytes, len))
+        return 1;
+    return 0;
+}
+
+int EVP_PKEY_add1_attr_by_txt(EVP_PKEY *key,
+                              const char *attrname, int type,
+                              const unsigned char *bytes, int len)
+{
+    if (X509at_add1_attr_by_txt(&key->attributes, attrname, type, bytes, len))
+        return 1;
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_md2.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_md2.c
new file mode 100644
index 000000000..c4e28ae17
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_md2.c
@@ -0,0 +1,56 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_MD2
+
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include <openssl/x509.h>
+# include <openssl/md2.h>
+# include <openssl/rsa.h>
+
+#include "internal/evp_int.h"
+
+static int init(EVP_MD_CTX *ctx)
+{
+    return MD2_Init(EVP_MD_CTX_md_data(ctx));
+}
+
+static int update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return MD2_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return MD2_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
+static const EVP_MD md2_md = {
+    NID_md2,
+    NID_md2WithRSAEncryption,
+    MD2_DIGEST_LENGTH,
+    0,
+    init,
+    update,
+    final,
+    NULL,
+    NULL,
+    MD2_BLOCK,
+    sizeof(EVP_MD *) + sizeof(MD2_CTX),
+};
+
+const EVP_MD *EVP_md2(void)
+{
+    return &md2_md;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_md4.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_md4.c
new file mode 100644
index 000000000..0efc586db
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_md4.c
@@ -0,0 +1,55 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_MD4
+
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include <openssl/x509.h>
+# include <openssl/md4.h>
+# include <openssl/rsa.h>
+# include "internal/evp_int.h"
+
+static int init(EVP_MD_CTX *ctx)
+{
+    return MD4_Init(EVP_MD_CTX_md_data(ctx));
+}
+
+static int update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return MD4_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return MD4_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
+static const EVP_MD md4_md = {
+    NID_md4,
+    NID_md4WithRSAEncryption,
+    MD4_DIGEST_LENGTH,
+    0,
+    init,
+    update,
+    final,
+    NULL,
+    NULL,
+    MD4_CBLOCK,
+    sizeof(EVP_MD *) + sizeof(MD4_CTX),
+};
+
+const EVP_MD *EVP_md4(void)
+{
+    return &md4_md;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_md5.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_md5.c
new file mode 100644
index 000000000..3d96ae93b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_md5.c
@@ -0,0 +1,55 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_MD5
+
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include <openssl/x509.h>
+# include <openssl/md5.h>
+# include <openssl/rsa.h>
+# include "internal/evp_int.h"
+
+static int init(EVP_MD_CTX *ctx)
+{
+    return MD5_Init(EVP_MD_CTX_md_data(ctx));
+}
+
+static int update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return MD5_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return MD5_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
+static const EVP_MD md5_md = {
+    NID_md5,
+    NID_md5WithRSAEncryption,
+    MD5_DIGEST_LENGTH,
+    0,
+    init,
+    update,
+    final,
+    NULL,
+    NULL,
+    MD5_CBLOCK,
+    sizeof(EVP_MD *) + sizeof(MD5_CTX),
+};
+
+const EVP_MD *EVP_md5(void)
+{
+    return &md5_md;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_md5_sha1.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_md5_sha1.c
new file mode 100644
index 000000000..2d98886ba
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_md5_sha1.c
@@ -0,0 +1,142 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#if !defined(OPENSSL_NO_MD5)
+
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include <openssl/x509.h>
+# include <openssl/md5.h>
+# include <openssl/sha.h>
+# include "internal/cryptlib.h"
+# include "internal/evp_int.h"
+# include <openssl/rsa.h>
+
+struct md5_sha1_ctx {
+    MD5_CTX md5;
+    SHA_CTX sha1;
+};
+
+static int init(EVP_MD_CTX *ctx)
+{
+    struct md5_sha1_ctx *mctx = EVP_MD_CTX_md_data(ctx);
+    if (!MD5_Init(&mctx->md5))
+        return 0;
+    return SHA1_Init(&mctx->sha1);
+}
+
+static int update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    struct md5_sha1_ctx *mctx = EVP_MD_CTX_md_data(ctx);
+    if (!MD5_Update(&mctx->md5, data, count))
+        return 0;
+    return SHA1_Update(&mctx->sha1, data, count);
+}
+
+static int final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    struct md5_sha1_ctx *mctx = EVP_MD_CTX_md_data(ctx);
+    if (!MD5_Final(md, &mctx->md5))
+        return 0;
+    return SHA1_Final(md + MD5_DIGEST_LENGTH, &mctx->sha1);
+}
+
+static int ctrl(EVP_MD_CTX *ctx, int cmd, int mslen, void *ms)
+{
+    unsigned char padtmp[48];
+    unsigned char md5tmp[MD5_DIGEST_LENGTH];
+    unsigned char sha1tmp[SHA_DIGEST_LENGTH];
+    struct md5_sha1_ctx *mctx;
+
+    if (cmd != EVP_CTRL_SSL3_MASTER_SECRET)
+        return -2;
+
+    if (ctx == NULL)
+        return 0;
+
+    mctx = EVP_MD_CTX_md_data(ctx);
+
+    /* SSLv3 client auth handling: see RFC-6101 5.6.8 */
+    if (mslen != 48)
+        return 0;
+
+    /* At this point hash contains all handshake messages, update
+     * with master secret and pad_1.
+     */
+
+    if (update(ctx, ms, mslen) <= 0)
+        return 0;
+
+    /* Set padtmp to pad_1 value */
+    memset(padtmp, 0x36, sizeof(padtmp));
+
+    if (!MD5_Update(&mctx->md5, padtmp, sizeof(padtmp)))
+        return 0;
+
+    if (!MD5_Final(md5tmp, &mctx->md5))
+        return 0;
+
+    if (!SHA1_Update(&mctx->sha1, padtmp, 40))
+        return 0;
+
+    if (!SHA1_Final(sha1tmp, &mctx->sha1))
+        return 0;
+
+    /* Reinitialise context */
+
+    if (!init(ctx))
+        return 0;
+
+    if (update(ctx, ms, mslen) <= 0)
+        return 0;
+
+    /* Set padtmp to pad_2 value */
+    memset(padtmp, 0x5c, sizeof(padtmp));
+
+    if (!MD5_Update(&mctx->md5, padtmp, sizeof(padtmp)))
+        return 0;
+
+    if (!MD5_Update(&mctx->md5, md5tmp, sizeof(md5tmp)))
+        return 0;
+
+    if (!SHA1_Update(&mctx->sha1, padtmp, 40))
+        return 0;
+
+    if (!SHA1_Update(&mctx->sha1, sha1tmp, sizeof(sha1tmp)))
+        return 0;
+
+    /* Now when ctx is finalised it will return the SSL v3 hash value */
+
+    OPENSSL_cleanse(md5tmp, sizeof(md5tmp));
+    OPENSSL_cleanse(sha1tmp, sizeof(sha1tmp));
+
+    return 1;
+
+}
+
+static const EVP_MD md5_sha1_md = {
+    NID_md5_sha1,
+    NID_md5_sha1,
+    MD5_DIGEST_LENGTH + SHA_DIGEST_LENGTH,
+    0,
+    init,
+    update,
+    final,
+    NULL,
+    NULL,
+    MD5_CBLOCK,
+    sizeof(EVP_MD *) + sizeof(struct md5_sha1_ctx),
+    ctrl
+};
+
+const EVP_MD *EVP_md5_sha1(void)
+{
+    return &md5_sha1_md;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_mdc2.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_mdc2.c
new file mode 100644
index 000000000..1051a9070
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_mdc2.c
@@ -0,0 +1,55 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_MDC2
+
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include <openssl/x509.h>
+# include <openssl/mdc2.h>
+# include <openssl/rsa.h>
+# include "internal/evp_int.h"
+
+static int init(EVP_MD_CTX *ctx)
+{
+    return MDC2_Init(EVP_MD_CTX_md_data(ctx));
+}
+
+static int update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return MDC2_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return MDC2_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
+static const EVP_MD mdc2_md = {
+    NID_mdc2,
+    NID_mdc2WithRSA,
+    MDC2_DIGEST_LENGTH,
+    0,
+    init,
+    update,
+    final,
+    NULL,
+    NULL,
+    MDC2_BLOCK,
+    sizeof(EVP_MD *) + sizeof(MDC2_CTX),
+};
+
+const EVP_MD *EVP_mdc2(void)
+{
+    return &mdc2_md;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_null.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_null.c
new file mode 100644
index 000000000..5dce1d510
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_null.c
@@ -0,0 +1,49 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include "internal/evp_int.h"
+
+static int init(EVP_MD_CTX *ctx)
+{
+    return 1;
+}
+
+static int update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return 1;
+}
+
+static int final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return 1;
+}
+
+static const EVP_MD null_md = {
+    NID_undef,
+    NID_undef,
+    0,
+    0,
+    init,
+    update,
+    final,
+    NULL,
+    NULL,
+    0,
+    sizeof(EVP_MD *),
+};
+
+const EVP_MD *EVP_md_null(void)
+{
+    return &null_md;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_ripemd.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_ripemd.c
new file mode 100644
index 000000000..7ab320843
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_ripemd.c
@@ -0,0 +1,55 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_RMD160
+
+# include <openssl/ripemd.h>
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include <openssl/x509.h>
+# include <openssl/rsa.h>
+# include "internal/evp_int.h"
+
+static int init(EVP_MD_CTX *ctx)
+{
+    return RIPEMD160_Init(EVP_MD_CTX_md_data(ctx));
+}
+
+static int update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return RIPEMD160_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return RIPEMD160_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
+static const EVP_MD ripemd160_md = {
+    NID_ripemd160,
+    NID_ripemd160WithRSA,
+    RIPEMD160_DIGEST_LENGTH,
+    0,
+    init,
+    update,
+    final,
+    NULL,
+    NULL,
+    RIPEMD160_CBLOCK,
+    sizeof(EVP_MD *) + sizeof(RIPEMD160_CTX),
+};
+
+const EVP_MD *EVP_ripemd160(void)
+{
+    return &ripemd160_md;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_sha1.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_sha1.c
new file mode 100644
index 000000000..ac5241785
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_sha1.c
@@ -0,0 +1,297 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/sha.h>
+#include <openssl/rsa.h>
+#include "internal/evp_int.h"
+#include "internal/sha.h"
+
+static int init(EVP_MD_CTX *ctx)
+{
+    return SHA1_Init(EVP_MD_CTX_md_data(ctx));
+}
+
+static int update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return SHA1_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return SHA1_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
+static int ctrl(EVP_MD_CTX *ctx, int cmd, int mslen, void *ms)
+{
+    unsigned char padtmp[40];
+    unsigned char sha1tmp[SHA_DIGEST_LENGTH];
+
+    SHA_CTX *sha1;
+
+    if (cmd != EVP_CTRL_SSL3_MASTER_SECRET)
+        return -2;
+
+    if (ctx == NULL)
+        return 0;
+
+    sha1 = EVP_MD_CTX_md_data(ctx);
+
+    /* SSLv3 client auth handling: see RFC-6101 5.6.8 */
+    if (mslen != 48)
+        return 0;
+
+    /* At this point hash contains all handshake messages, update
+     * with master secret and pad_1.
+     */
+
+    if (SHA1_Update(sha1, ms, mslen) <= 0)
+        return 0;
+
+    /* Set padtmp to pad_1 value */
+    memset(padtmp, 0x36, sizeof(padtmp));
+
+    if (!SHA1_Update(sha1, padtmp, sizeof(padtmp)))
+        return 0;
+
+    if (!SHA1_Final(sha1tmp, sha1))
+        return 0;
+
+    /* Reinitialise context */
+
+    if (!SHA1_Init(sha1))
+        return 0;
+
+    if (SHA1_Update(sha1, ms, mslen) <= 0)
+        return 0;
+
+    /* Set padtmp to pad_2 value */
+    memset(padtmp, 0x5c, sizeof(padtmp));
+
+    if (!SHA1_Update(sha1, padtmp, sizeof(padtmp)))
+        return 0;
+
+    if (!SHA1_Update(sha1, sha1tmp, sizeof(sha1tmp)))
+        return 0;
+
+    /* Now when ctx is finalised it will return the SSL v3 hash value */
+    OPENSSL_cleanse(sha1tmp, sizeof(sha1tmp));
+
+    return 1;
+
+}
+
+static const EVP_MD sha1_md = {
+    NID_sha1,
+    NID_sha1WithRSAEncryption,
+    SHA_DIGEST_LENGTH,
+    EVP_MD_FLAG_DIGALGID_ABSENT,
+    init,
+    update,
+    final,
+    NULL,
+    NULL,
+    SHA_CBLOCK,
+    sizeof(EVP_MD *) + sizeof(SHA_CTX),
+    ctrl
+};
+
+const EVP_MD *EVP_sha1(void)
+{
+    return &sha1_md;
+}
+
+static int init224(EVP_MD_CTX *ctx)
+{
+    return SHA224_Init(EVP_MD_CTX_md_data(ctx));
+}
+
+static int update224(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return SHA224_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final224(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return SHA224_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
+static int init256(EVP_MD_CTX *ctx)
+{
+    return SHA256_Init(EVP_MD_CTX_md_data(ctx));
+}
+
+static int update256(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return SHA256_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final256(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return SHA256_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
+static const EVP_MD sha224_md = {
+    NID_sha224,
+    NID_sha224WithRSAEncryption,
+    SHA224_DIGEST_LENGTH,
+    EVP_MD_FLAG_DIGALGID_ABSENT,
+    init224,
+    update224,
+    final224,
+    NULL,
+    NULL,
+    SHA256_CBLOCK,
+    sizeof(EVP_MD *) + sizeof(SHA256_CTX),
+};
+
+const EVP_MD *EVP_sha224(void)
+{
+    return &sha224_md;
+}
+
+static const EVP_MD sha256_md = {
+    NID_sha256,
+    NID_sha256WithRSAEncryption,
+    SHA256_DIGEST_LENGTH,
+    EVP_MD_FLAG_DIGALGID_ABSENT,
+    init256,
+    update256,
+    final256,
+    NULL,
+    NULL,
+    SHA256_CBLOCK,
+    sizeof(EVP_MD *) + sizeof(SHA256_CTX),
+};
+
+const EVP_MD *EVP_sha256(void)
+{
+    return &sha256_md;
+}
+
+static int init512_224(EVP_MD_CTX *ctx)
+{
+    return sha512_224_init(EVP_MD_CTX_md_data(ctx));
+}
+
+static int init512_256(EVP_MD_CTX *ctx)
+{
+    return sha512_256_init(EVP_MD_CTX_md_data(ctx));
+}
+
+static int init384(EVP_MD_CTX *ctx)
+{
+    return SHA384_Init(EVP_MD_CTX_md_data(ctx));
+}
+
+static int update384(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return SHA384_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final384(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return SHA384_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
+static int init512(EVP_MD_CTX *ctx)
+{
+    return SHA512_Init(EVP_MD_CTX_md_data(ctx));
+}
+
+/* See comment in SHA224/256 section */
+static int update512(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return SHA512_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final512(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return SHA512_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
+static const EVP_MD sha512_224_md = {
+    NID_sha512_224,
+    NID_sha512_224WithRSAEncryption,
+    SHA224_DIGEST_LENGTH,
+    EVP_MD_FLAG_DIGALGID_ABSENT,
+    init512_224,
+    update512,
+    final512,
+    NULL,
+    NULL,
+    SHA512_CBLOCK,
+    sizeof(EVP_MD *) + sizeof(SHA512_CTX),
+};
+
+const EVP_MD *EVP_sha512_224(void)
+{
+    return &sha512_224_md;
+}
+
+static const EVP_MD sha512_256_md = {
+    NID_sha512_256,
+    NID_sha512_256WithRSAEncryption,
+    SHA256_DIGEST_LENGTH,
+    EVP_MD_FLAG_DIGALGID_ABSENT,
+    init512_256,
+    update512,
+    final512,
+    NULL,
+    NULL,
+    SHA512_CBLOCK,
+    sizeof(EVP_MD *) + sizeof(SHA512_CTX),
+};
+
+const EVP_MD *EVP_sha512_256(void)
+{
+    return &sha512_256_md;
+}
+
+static const EVP_MD sha384_md = {
+    NID_sha384,
+    NID_sha384WithRSAEncryption,
+    SHA384_DIGEST_LENGTH,
+    EVP_MD_FLAG_DIGALGID_ABSENT,
+    init384,
+    update384,
+    final384,
+    NULL,
+    NULL,
+    SHA512_CBLOCK,
+    sizeof(EVP_MD *) + sizeof(SHA512_CTX),
+};
+
+const EVP_MD *EVP_sha384(void)
+{
+    return &sha384_md;
+}
+
+static const EVP_MD sha512_md = {
+    NID_sha512,
+    NID_sha512WithRSAEncryption,
+    SHA512_DIGEST_LENGTH,
+    EVP_MD_FLAG_DIGALGID_ABSENT,
+    init512,
+    update512,
+    final512,
+    NULL,
+    NULL,
+    SHA512_CBLOCK,
+    sizeof(EVP_MD *) + sizeof(SHA512_CTX),
+};
+
+const EVP_MD *EVP_sha512(void)
+{
+    return &sha512_md;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_sha3.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_sha3.c
new file mode 100644
index 000000000..31379c0f6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_sha3.c
@@ -0,0 +1,406 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include "internal/evp_int.h"
+#include "evp_locl.h"
+
+size_t SHA3_absorb(uint64_t A[5][5], const unsigned char *inp, size_t len,
+                   size_t r);
+void SHA3_squeeze(uint64_t A[5][5], unsigned char *out, size_t len, size_t r);
+
+#define KECCAK1600_WIDTH 1600
+
+typedef struct {
+    uint64_t A[5][5];
+    size_t block_size;          /* cached ctx->digest->block_size */
+    size_t md_size;             /* output length, variable in XOF */
+    size_t num;                 /* used bytes in below buffer */
+    unsigned char buf[KECCAK1600_WIDTH / 8 - 32];
+    unsigned char pad;
+} KECCAK1600_CTX;
+
+static int init(EVP_MD_CTX *evp_ctx, unsigned char pad)
+{
+    KECCAK1600_CTX *ctx = evp_ctx->md_data;
+    size_t bsz = evp_ctx->digest->block_size;
+
+    if (bsz <= sizeof(ctx->buf)) {
+        memset(ctx->A, 0, sizeof(ctx->A));
+
+        ctx->num = 0;
+        ctx->block_size = bsz;
+        ctx->md_size = evp_ctx->digest->md_size;
+        ctx->pad = pad;
+
+        return 1;
+    }
+
+    return 0;
+}
+
+static int sha3_init(EVP_MD_CTX *evp_ctx)
+{
+    return init(evp_ctx, '\x06');
+}
+
+static int shake_init(EVP_MD_CTX *evp_ctx)
+{
+    return init(evp_ctx, '\x1f');
+}
+
+static int sha3_update(EVP_MD_CTX *evp_ctx, const void *_inp, size_t len)
+{
+    KECCAK1600_CTX *ctx = evp_ctx->md_data;
+    const unsigned char *inp = _inp;
+    size_t bsz = ctx->block_size;
+    size_t num, rem;
+
+    if (len == 0)
+        return 1;
+
+    if ((num = ctx->num) != 0) {      /* process intermediate buffer? */
+        rem = bsz - num;
+
+        if (len < rem) {
+            memcpy(ctx->buf + num, inp, len);
+            ctx->num += len;
+            return 1;
+        }
+        /*
+         * We have enough data to fill or overflow the intermediate
+         * buffer. So we append |rem| bytes and process the block,
+         * leaving the rest for later processing...
+         */
+        memcpy(ctx->buf + num, inp, rem);
+        inp += rem, len -= rem;
+        (void)SHA3_absorb(ctx->A, ctx->buf, bsz, bsz);
+        ctx->num = 0;
+        /* ctx->buf is processed, ctx->num is guaranteed to be zero */
+    }
+
+    if (len >= bsz)
+        rem = SHA3_absorb(ctx->A, inp, len, bsz);
+    else
+        rem = len;
+
+    if (rem) {
+        memcpy(ctx->buf, inp + len - rem, rem);
+        ctx->num = rem;
+    }
+
+    return 1;
+}
+
+static int sha3_final(EVP_MD_CTX *evp_ctx, unsigned char *md)
+{
+    KECCAK1600_CTX *ctx = evp_ctx->md_data;
+    size_t bsz = ctx->block_size;
+    size_t num = ctx->num;
+
+    /*
+     * Pad the data with 10*1. Note that |num| can be |bsz - 1|
+     * in which case both byte operations below are performed on
+     * same byte...
+     */
+    memset(ctx->buf + num, 0, bsz - num);
+    ctx->buf[num] = ctx->pad;
+    ctx->buf[bsz - 1] |= 0x80;
+
+    (void)SHA3_absorb(ctx->A, ctx->buf, bsz, bsz);
+
+    SHA3_squeeze(ctx->A, md, ctx->md_size, bsz);
+
+    return 1;
+}
+
+static int shake_ctrl(EVP_MD_CTX *evp_ctx, int cmd, int p1, void *p2)
+{
+    KECCAK1600_CTX *ctx = evp_ctx->md_data;
+
+    switch (cmd) {
+    case EVP_MD_CTRL_XOF_LEN:
+        ctx->md_size = p1;
+        return 1;
+    default:
+        return 0;
+    }
+}
+
+#if defined(OPENSSL_CPUID_OBJ) && defined(__s390__) && defined(KECCAK1600_ASM)
+/*
+ * IBM S390X support
+ */
+# include "s390x_arch.h"
+
+# define S390X_SHA3_FC(ctx)     ((ctx)->pad)
+
+# define S390X_sha3_224_CAPABLE ((OPENSSL_s390xcap_P.kimd[0] &      \
+                                  S390X_CAPBIT(S390X_SHA3_224)) &&  \
+                                 (OPENSSL_s390xcap_P.klmd[0] &      \
+                                  S390X_CAPBIT(S390X_SHA3_224)))
+# define S390X_sha3_256_CAPABLE ((OPENSSL_s390xcap_P.kimd[0] &      \
+                                  S390X_CAPBIT(S390X_SHA3_256)) &&  \
+                                 (OPENSSL_s390xcap_P.klmd[0] &      \
+                                  S390X_CAPBIT(S390X_SHA3_256)))
+# define S390X_sha3_384_CAPABLE ((OPENSSL_s390xcap_P.kimd[0] &      \
+                                  S390X_CAPBIT(S390X_SHA3_384)) &&  \
+                                 (OPENSSL_s390xcap_P.klmd[0] &      \
+                                  S390X_CAPBIT(S390X_SHA3_384)))
+# define S390X_sha3_512_CAPABLE ((OPENSSL_s390xcap_P.kimd[0] &      \
+                                  S390X_CAPBIT(S390X_SHA3_512)) &&  \
+                                 (OPENSSL_s390xcap_P.klmd[0] &      \
+                                  S390X_CAPBIT(S390X_SHA3_512)))
+# define S390X_shake128_CAPABLE ((OPENSSL_s390xcap_P.kimd[0] &      \
+                                  S390X_CAPBIT(S390X_SHAKE_128)) && \
+                                 (OPENSSL_s390xcap_P.klmd[0] &      \
+                                  S390X_CAPBIT(S390X_SHAKE_128)))
+# define S390X_shake256_CAPABLE ((OPENSSL_s390xcap_P.kimd[0] &      \
+                                  S390X_CAPBIT(S390X_SHAKE_256)) && \
+                                 (OPENSSL_s390xcap_P.klmd[0] &      \
+                                  S390X_CAPBIT(S390X_SHAKE_256)))
+
+/* Convert md-size to block-size. */
+# define S390X_KECCAK1600_BSZ(n) ((KECCAK1600_WIDTH - ((n) << 1)) >> 3)
+
+static int s390x_sha3_init(EVP_MD_CTX *evp_ctx)
+{
+    KECCAK1600_CTX *ctx = evp_ctx->md_data;
+    const size_t bsz = evp_ctx->digest->block_size;
+
+    /*-
+     * KECCAK1600_CTX structure's pad field is used to store the KIMD/KLMD
+     * function code.
+     */
+    switch (bsz) {
+    case S390X_KECCAK1600_BSZ(224):
+        ctx->pad = S390X_SHA3_224;
+        break;
+    case S390X_KECCAK1600_BSZ(256):
+        ctx->pad = S390X_SHA3_256;
+        break;
+    case S390X_KECCAK1600_BSZ(384):
+        ctx->pad = S390X_SHA3_384;
+        break;
+    case S390X_KECCAK1600_BSZ(512):
+        ctx->pad = S390X_SHA3_512;
+        break;
+    default:
+        return 0;
+    }
+
+    memset(ctx->A, 0, sizeof(ctx->A));
+    ctx->num = 0;
+    ctx->block_size = bsz;
+    ctx->md_size = evp_ctx->digest->md_size;
+    return 1;
+}
+
+static int s390x_shake_init(EVP_MD_CTX *evp_ctx)
+{
+    KECCAK1600_CTX *ctx = evp_ctx->md_data;
+    const size_t bsz = evp_ctx->digest->block_size;
+
+    /*-
+     * KECCAK1600_CTX structure's pad field is used to store the KIMD/KLMD
+     * function code.
+     */
+    switch (bsz) {
+    case S390X_KECCAK1600_BSZ(128):
+        ctx->pad = S390X_SHAKE_128;
+        break;
+    case S390X_KECCAK1600_BSZ(256):
+        ctx->pad = S390X_SHAKE_256;
+        break;
+    default:
+        return 0;
+    }
+
+    memset(ctx->A, 0, sizeof(ctx->A));
+    ctx->num = 0;
+    ctx->block_size = bsz;
+    ctx->md_size = evp_ctx->digest->md_size;
+    return 1;
+}
+
+static int s390x_sha3_update(EVP_MD_CTX *evp_ctx, const void *_inp, size_t len)
+{
+    KECCAK1600_CTX *ctx = evp_ctx->md_data;
+    const unsigned char *inp = _inp;
+    const size_t bsz = ctx->block_size;
+    size_t num, rem;
+
+    if (len == 0)
+        return 1;
+
+    if ((num = ctx->num) != 0) {
+        rem = bsz - num;
+
+        if (len < rem) {
+            memcpy(ctx->buf + num, inp, len);
+            ctx->num += len;
+            return 1;
+        }
+        memcpy(ctx->buf + num, inp, rem);
+        inp += rem;
+        len -= rem;
+        s390x_kimd(ctx->buf, bsz, ctx->pad, ctx->A);
+        ctx->num = 0;
+    }
+    rem = len % bsz;
+
+    s390x_kimd(inp, len - rem, ctx->pad, ctx->A);
+
+    if (rem) {
+        memcpy(ctx->buf, inp + len - rem, rem);
+        ctx->num = rem;
+    }
+    return 1;
+}
+
+static int s390x_sha3_final(EVP_MD_CTX *evp_ctx, unsigned char *md)
+{
+    KECCAK1600_CTX *ctx = evp_ctx->md_data;
+
+    s390x_klmd(ctx->buf, ctx->num, NULL, 0, ctx->pad, ctx->A);
+    memcpy(md, ctx->A, ctx->md_size);
+    return 1;
+}
+
+static int s390x_shake_final(EVP_MD_CTX *evp_ctx, unsigned char *md)
+{
+    KECCAK1600_CTX *ctx = evp_ctx->md_data;
+
+    s390x_klmd(ctx->buf, ctx->num, md, ctx->md_size, ctx->pad, ctx->A);
+    return 1;
+}
+
+# define EVP_MD_SHA3(bitlen)                         \
+const EVP_MD *EVP_sha3_##bitlen(void)                \
+{                                                    \
+    static const EVP_MD s390x_sha3_##bitlen##_md = { \
+        NID_sha3_##bitlen,                           \
+        NID_RSA_SHA3_##bitlen,                       \
+        bitlen / 8,                                  \
+        EVP_MD_FLAG_DIGALGID_ABSENT,                 \
+        s390x_sha3_init,                             \
+        s390x_sha3_update,                           \
+        s390x_sha3_final,                            \
+        NULL,                                        \
+        NULL,                                        \
+        (KECCAK1600_WIDTH - bitlen * 2) / 8,         \
+        sizeof(KECCAK1600_CTX),                      \
+    };                                               \
+    static const EVP_MD sha3_##bitlen##_md = {       \
+        NID_sha3_##bitlen,                           \
+        NID_RSA_SHA3_##bitlen,                       \
+        bitlen / 8,                                  \
+        EVP_MD_FLAG_DIGALGID_ABSENT,                 \
+        sha3_init,                                   \
+        sha3_update,                                 \
+        sha3_final,                                  \
+        NULL,                                        \
+        NULL,                                        \
+        (KECCAK1600_WIDTH - bitlen * 2) / 8,         \
+        sizeof(KECCAK1600_CTX),                      \
+    };                                               \
+    return S390X_sha3_##bitlen##_CAPABLE ?           \
+           &s390x_sha3_##bitlen##_md :               \
+           &sha3_##bitlen##_md;                      \
+}
+
+# define EVP_MD_SHAKE(bitlen)                        \
+const EVP_MD *EVP_shake##bitlen(void)                \
+{                                                    \
+    static const EVP_MD s390x_shake##bitlen##_md = { \
+        NID_shake##bitlen,                           \
+        0,                                           \
+        bitlen / 8,                                  \
+        EVP_MD_FLAG_XOF,                             \
+        s390x_shake_init,                            \
+        s390x_sha3_update,                           \
+        s390x_shake_final,                           \
+        NULL,                                        \
+        NULL,                                        \
+        (KECCAK1600_WIDTH - bitlen * 2) / 8,         \
+        sizeof(KECCAK1600_CTX),                      \
+        shake_ctrl                                   \
+    };                                               \
+    static const EVP_MD shake##bitlen##_md = {       \
+        NID_shake##bitlen,                           \
+        0,                                           \
+        bitlen / 8,                                  \
+        EVP_MD_FLAG_XOF,                             \
+        shake_init,                                  \
+        sha3_update,                                 \
+        sha3_final,                                  \
+        NULL,                                        \
+        NULL,                                        \
+        (KECCAK1600_WIDTH - bitlen * 2) / 8,         \
+        sizeof(KECCAK1600_CTX),                      \
+        shake_ctrl                                   \
+    };                                               \
+    return S390X_shake##bitlen##_CAPABLE ?           \
+           &s390x_shake##bitlen##_md :               \
+           &shake##bitlen##_md;                      \
+}
+
+#else
+
+# define EVP_MD_SHA3(bitlen)                    \
+const EVP_MD *EVP_sha3_##bitlen(void)           \
+{                                               \
+    static const EVP_MD sha3_##bitlen##_md = {  \
+        NID_sha3_##bitlen,                      \
+        NID_RSA_SHA3_##bitlen,                  \
+        bitlen / 8,                             \
+        EVP_MD_FLAG_DIGALGID_ABSENT,            \
+        sha3_init,                              \
+        sha3_update,                            \
+        sha3_final,                             \
+        NULL,                                   \
+        NULL,                                   \
+        (KECCAK1600_WIDTH - bitlen * 2) / 8,    \
+        sizeof(KECCAK1600_CTX),                 \
+    };                                          \
+    return &sha3_##bitlen##_md;                 \
+}
+
+# define EVP_MD_SHAKE(bitlen)                   \
+const EVP_MD *EVP_shake##bitlen(void)           \
+{                                               \
+    static const EVP_MD shake##bitlen##_md = {  \
+        NID_shake##bitlen,                      \
+        0,                                      \
+        bitlen / 8,                             \
+        EVP_MD_FLAG_XOF,                        \
+        shake_init,                             \
+        sha3_update,                            \
+        sha3_final,                             \
+        NULL,                                   \
+        NULL,                                   \
+        (KECCAK1600_WIDTH - bitlen * 2) / 8,    \
+        sizeof(KECCAK1600_CTX),                 \
+        shake_ctrl                              \
+    };                                          \
+    return &shake##bitlen##_md;                 \
+}
+#endif
+
+EVP_MD_SHA3(224)
+EVP_MD_SHA3(256)
+EVP_MD_SHA3(384)
+EVP_MD_SHA3(512)
+
+EVP_MD_SHAKE(128)
+EVP_MD_SHAKE(256)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_sigver.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_sigver.c
new file mode 100644
index 000000000..94e37f02b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_sigver.c
@@ -0,0 +1,218 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include "internal/evp_int.h"
+#include "evp_locl.h"
+
+static int update(EVP_MD_CTX *ctx, const void *data, size_t datalen)
+{
+    EVPerr(EVP_F_UPDATE, EVP_R_ONLY_ONESHOT_SUPPORTED);
+    return 0;
+}
+
+static int do_sigver_init(EVP_MD_CTX *ctx, EVP_PKEY_CTX **pctx,
+                          const EVP_MD *type, ENGINE *e, EVP_PKEY *pkey,
+                          int ver)
+{
+    if (ctx->pctx == NULL)
+        ctx->pctx = EVP_PKEY_CTX_new(pkey, e);
+    if (ctx->pctx == NULL)
+        return 0;
+
+    if (!(ctx->pctx->pmeth->flags & EVP_PKEY_FLAG_SIGCTX_CUSTOM)) {
+
+        if (type == NULL) {
+            int def_nid;
+            if (EVP_PKEY_get_default_digest_nid(pkey, &def_nid) > 0)
+                type = EVP_get_digestbynid(def_nid);
+        }
+
+        if (type == NULL) {
+            EVPerr(EVP_F_DO_SIGVER_INIT, EVP_R_NO_DEFAULT_DIGEST);
+            return 0;
+        }
+    }
+
+    if (ver) {
+        if (ctx->pctx->pmeth->verifyctx_init) {
+            if (ctx->pctx->pmeth->verifyctx_init(ctx->pctx, ctx) <= 0)
+                return 0;
+            ctx->pctx->operation = EVP_PKEY_OP_VERIFYCTX;
+        } else if (ctx->pctx->pmeth->digestverify != 0) {
+            ctx->pctx->operation = EVP_PKEY_OP_VERIFY;
+            ctx->update = update;
+        } else if (EVP_PKEY_verify_init(ctx->pctx) <= 0) {
+            return 0;
+        }
+    } else {
+        if (ctx->pctx->pmeth->signctx_init) {
+            if (ctx->pctx->pmeth->signctx_init(ctx->pctx, ctx) <= 0)
+                return 0;
+            ctx->pctx->operation = EVP_PKEY_OP_SIGNCTX;
+        } else if (ctx->pctx->pmeth->digestsign != 0) {
+            ctx->pctx->operation = EVP_PKEY_OP_SIGN;
+            ctx->update = update;
+        } else if (EVP_PKEY_sign_init(ctx->pctx) <= 0) {
+            return 0;
+        }
+    }
+    if (EVP_PKEY_CTX_set_signature_md(ctx->pctx, type) <= 0)
+        return 0;
+    if (pctx)
+        *pctx = ctx->pctx;
+    if (ctx->pctx->pmeth->flags & EVP_PKEY_FLAG_SIGCTX_CUSTOM)
+        return 1;
+    if (!EVP_DigestInit_ex(ctx, type, e))
+        return 0;
+    /*
+     * This indicates the current algorithm requires
+     * special treatment before hashing the tbs-message.
+     */
+    if (ctx->pctx->pmeth->digest_custom != NULL)
+        return ctx->pctx->pmeth->digest_custom(ctx->pctx, ctx);
+
+    return 1;
+}
+
+int EVP_DigestSignInit(EVP_MD_CTX *ctx, EVP_PKEY_CTX **pctx,
+                       const EVP_MD *type, ENGINE *e, EVP_PKEY *pkey)
+{
+    return do_sigver_init(ctx, pctx, type, e, pkey, 0);
+}
+
+int EVP_DigestVerifyInit(EVP_MD_CTX *ctx, EVP_PKEY_CTX **pctx,
+                         const EVP_MD *type, ENGINE *e, EVP_PKEY *pkey)
+{
+    return do_sigver_init(ctx, pctx, type, e, pkey, 1);
+}
+
+int EVP_DigestSignFinal(EVP_MD_CTX *ctx, unsigned char *sigret,
+                        size_t *siglen)
+{
+    int sctx = 0, r = 0;
+    EVP_PKEY_CTX *pctx = ctx->pctx;
+    if (pctx->pmeth->flags & EVP_PKEY_FLAG_SIGCTX_CUSTOM) {
+        if (!sigret)
+            return pctx->pmeth->signctx(pctx, sigret, siglen, ctx);
+        if (ctx->flags & EVP_MD_CTX_FLAG_FINALISE)
+            r = pctx->pmeth->signctx(pctx, sigret, siglen, ctx);
+        else {
+            EVP_PKEY_CTX *dctx = EVP_PKEY_CTX_dup(ctx->pctx);
+            if (!dctx)
+                return 0;
+            r = dctx->pmeth->signctx(dctx, sigret, siglen, ctx);
+            EVP_PKEY_CTX_free(dctx);
+        }
+        return r;
+    }
+    if (pctx->pmeth->signctx)
+        sctx = 1;
+    else
+        sctx = 0;
+    if (sigret) {
+        unsigned char md[EVP_MAX_MD_SIZE];
+        unsigned int mdlen = 0;
+        if (ctx->flags & EVP_MD_CTX_FLAG_FINALISE) {
+            if (sctx)
+                r = ctx->pctx->pmeth->signctx(ctx->pctx, sigret, siglen, ctx);
+            else
+                r = EVP_DigestFinal_ex(ctx, md, &mdlen);
+        } else {
+            EVP_MD_CTX *tmp_ctx = EVP_MD_CTX_new();
+            if (tmp_ctx == NULL)
+                return 0;
+            if (!EVP_MD_CTX_copy_ex(tmp_ctx, ctx)) {
+                EVP_MD_CTX_free(tmp_ctx);
+                return 0;
+            }
+            if (sctx)
+                r = tmp_ctx->pctx->pmeth->signctx(tmp_ctx->pctx,
+                                                  sigret, siglen, tmp_ctx);
+            else
+                r = EVP_DigestFinal_ex(tmp_ctx, md, &mdlen);
+            EVP_MD_CTX_free(tmp_ctx);
+        }
+        if (sctx || !r)
+            return r;
+        if (EVP_PKEY_sign(ctx->pctx, sigret, siglen, md, mdlen) <= 0)
+            return 0;
+    } else {
+        if (sctx) {
+            if (pctx->pmeth->signctx(pctx, sigret, siglen, ctx) <= 0)
+                return 0;
+        } else {
+            int s = EVP_MD_size(ctx->digest);
+            if (s < 0 || EVP_PKEY_sign(pctx, sigret, siglen, NULL, s) <= 0)
+                return 0;
+        }
+    }
+    return 1;
+}
+
+int EVP_DigestSign(EVP_MD_CTX *ctx, unsigned char *sigret, size_t *siglen,
+                   const unsigned char *tbs, size_t tbslen)
+{
+    if (ctx->pctx->pmeth->digestsign != NULL)
+        return ctx->pctx->pmeth->digestsign(ctx, sigret, siglen, tbs, tbslen);
+    if (sigret != NULL && EVP_DigestSignUpdate(ctx, tbs, tbslen) <= 0)
+        return 0;
+    return EVP_DigestSignFinal(ctx, sigret, siglen);
+}
+
+int EVP_DigestVerifyFinal(EVP_MD_CTX *ctx, const unsigned char *sig,
+                          size_t siglen)
+{
+    unsigned char md[EVP_MAX_MD_SIZE];
+    int r = 0;
+    unsigned int mdlen = 0;
+    int vctx = 0;
+
+    if (ctx->pctx->pmeth->verifyctx)
+        vctx = 1;
+    else
+        vctx = 0;
+    if (ctx->flags & EVP_MD_CTX_FLAG_FINALISE) {
+        if (vctx)
+            r = ctx->pctx->pmeth->verifyctx(ctx->pctx, sig, siglen, ctx);
+        else
+            r = EVP_DigestFinal_ex(ctx, md, &mdlen);
+    } else {
+        EVP_MD_CTX *tmp_ctx = EVP_MD_CTX_new();
+        if (tmp_ctx == NULL)
+            return -1;
+        if (!EVP_MD_CTX_copy_ex(tmp_ctx, ctx)) {
+            EVP_MD_CTX_free(tmp_ctx);
+            return -1;
+        }
+        if (vctx)
+            r = tmp_ctx->pctx->pmeth->verifyctx(tmp_ctx->pctx,
+                                                sig, siglen, tmp_ctx);
+        else
+            r = EVP_DigestFinal_ex(tmp_ctx, md, &mdlen);
+        EVP_MD_CTX_free(tmp_ctx);
+    }
+    if (vctx || !r)
+        return r;
+    return EVP_PKEY_verify(ctx->pctx, sig, siglen, md, mdlen);
+}
+
+int EVP_DigestVerify(EVP_MD_CTX *ctx, const unsigned char *sigret,
+                     size_t siglen, const unsigned char *tbs, size_t tbslen)
+{
+    if (ctx->pctx->pmeth->digestverify != NULL)
+        return ctx->pctx->pmeth->digestverify(ctx, sigret, siglen, tbs, tbslen);
+    if (EVP_DigestVerifyUpdate(ctx, tbs, tbslen) <= 0)
+        return -1;
+    return EVP_DigestVerifyFinal(ctx, sigret, siglen);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_wp.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_wp.c
new file mode 100644
index 000000000..27e2b3c5c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/m_wp.c
@@ -0,0 +1,54 @@
+/*
+ * Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_WHIRLPOOL
+
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include <openssl/x509.h>
+# include <openssl/whrlpool.h>
+# include "internal/evp_int.h"
+
+static int init(EVP_MD_CTX *ctx)
+{
+    return WHIRLPOOL_Init(EVP_MD_CTX_md_data(ctx));
+}
+
+static int update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return WHIRLPOOL_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return WHIRLPOOL_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
+static const EVP_MD whirlpool_md = {
+    NID_whirlpool,
+    0,
+    WHIRLPOOL_DIGEST_LENGTH,
+    0,
+    init,
+    update,
+    final,
+    NULL,
+    NULL,
+    WHIRLPOOL_BBLOCK / 8,
+    sizeof(EVP_MD *) + sizeof(WHIRLPOOL_CTX),
+};
+
+const EVP_MD *EVP_whirlpool(void)
+{
+    return &whirlpool_md;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/names.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/names.c
new file mode 100644
index 000000000..077c2a6c4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/names.c
@@ -0,0 +1,180 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include "internal/objects.h"
+#include <openssl/x509.h>
+#include "internal/evp_int.h"
+
+int EVP_add_cipher(const EVP_CIPHER *c)
+{
+    int r;
+
+    if (c == NULL)
+        return 0;
+
+    r = OBJ_NAME_add(OBJ_nid2sn(c->nid), OBJ_NAME_TYPE_CIPHER_METH,
+                     (const char *)c);
+    if (r == 0)
+        return 0;
+    r = OBJ_NAME_add(OBJ_nid2ln(c->nid), OBJ_NAME_TYPE_CIPHER_METH,
+                     (const char *)c);
+    return r;
+}
+
+int EVP_add_digest(const EVP_MD *md)
+{
+    int r;
+    const char *name;
+
+    name = OBJ_nid2sn(md->type);
+    r = OBJ_NAME_add(name, OBJ_NAME_TYPE_MD_METH, (const char *)md);
+    if (r == 0)
+        return 0;
+    r = OBJ_NAME_add(OBJ_nid2ln(md->type), OBJ_NAME_TYPE_MD_METH,
+                     (const char *)md);
+    if (r == 0)
+        return 0;
+
+    if (md->pkey_type && md->type != md->pkey_type) {
+        r = OBJ_NAME_add(OBJ_nid2sn(md->pkey_type),
+                         OBJ_NAME_TYPE_MD_METH | OBJ_NAME_ALIAS, name);
+        if (r == 0)
+            return 0;
+        r = OBJ_NAME_add(OBJ_nid2ln(md->pkey_type),
+                         OBJ_NAME_TYPE_MD_METH | OBJ_NAME_ALIAS, name);
+    }
+    return r;
+}
+
+const EVP_CIPHER *EVP_get_cipherbyname(const char *name)
+{
+    const EVP_CIPHER *cp;
+
+    if (!OPENSSL_init_crypto(OPENSSL_INIT_ADD_ALL_CIPHERS, NULL))
+        return NULL;
+
+    cp = (const EVP_CIPHER *)OBJ_NAME_get(name, OBJ_NAME_TYPE_CIPHER_METH);
+    return cp;
+}
+
+const EVP_MD *EVP_get_digestbyname(const char *name)
+{
+    const EVP_MD *cp;
+
+    if (!OPENSSL_init_crypto(OPENSSL_INIT_ADD_ALL_DIGESTS, NULL))
+        return NULL;
+
+    cp = (const EVP_MD *)OBJ_NAME_get(name, OBJ_NAME_TYPE_MD_METH);
+    return cp;
+}
+
+void evp_cleanup_int(void)
+{
+    OBJ_NAME_cleanup(OBJ_NAME_TYPE_CIPHER_METH);
+    OBJ_NAME_cleanup(OBJ_NAME_TYPE_MD_METH);
+    /*
+     * The above calls will only clean out the contents of the name hash
+     * table, but not the hash table itself.  The following line does that
+     * part.  -- Richard Levitte
+     */
+    OBJ_NAME_cleanup(-1);
+
+    EVP_PBE_cleanup();
+    OBJ_sigid_free();
+
+    evp_app_cleanup_int();
+}
+
+struct doall_cipher {
+    void *arg;
+    void (*fn) (const EVP_CIPHER *ciph,
+                const char *from, const char *to, void *arg);
+};
+
+static void do_all_cipher_fn(const OBJ_NAME *nm, void *arg)
+{
+    struct doall_cipher *dc = arg;
+    if (nm->alias)
+        dc->fn(NULL, nm->name, nm->data, dc->arg);
+    else
+        dc->fn((const EVP_CIPHER *)nm->data, nm->name, NULL, dc->arg);
+}
+
+void EVP_CIPHER_do_all(void (*fn) (const EVP_CIPHER *ciph,
+                                   const char *from, const char *to, void *x),
+                       void *arg)
+{
+    struct doall_cipher dc;
+
+    /* Ignore errors */
+    OPENSSL_init_crypto(OPENSSL_INIT_ADD_ALL_CIPHERS, NULL);
+
+    dc.fn = fn;
+    dc.arg = arg;
+    OBJ_NAME_do_all(OBJ_NAME_TYPE_CIPHER_METH, do_all_cipher_fn, &dc);
+}
+
+void EVP_CIPHER_do_all_sorted(void (*fn) (const EVP_CIPHER *ciph,
+                                          const char *from, const char *to,
+                                          void *x), void *arg)
+{
+    struct doall_cipher dc;
+
+    /* Ignore errors */
+    OPENSSL_init_crypto(OPENSSL_INIT_ADD_ALL_CIPHERS, NULL);
+
+    dc.fn = fn;
+    dc.arg = arg;
+    OBJ_NAME_do_all_sorted(OBJ_NAME_TYPE_CIPHER_METH, do_all_cipher_fn, &dc);
+}
+
+struct doall_md {
+    void *arg;
+    void (*fn) (const EVP_MD *ciph,
+                const char *from, const char *to, void *arg);
+};
+
+static void do_all_md_fn(const OBJ_NAME *nm, void *arg)
+{
+    struct doall_md *dc = arg;
+    if (nm->alias)
+        dc->fn(NULL, nm->name, nm->data, dc->arg);
+    else
+        dc->fn((const EVP_MD *)nm->data, nm->name, NULL, dc->arg);
+}
+
+void EVP_MD_do_all(void (*fn) (const EVP_MD *md,
+                               const char *from, const char *to, void *x),
+                   void *arg)
+{
+    struct doall_md dc;
+
+    /* Ignore errors */
+    OPENSSL_init_crypto(OPENSSL_INIT_ADD_ALL_DIGESTS, NULL);
+
+    dc.fn = fn;
+    dc.arg = arg;
+    OBJ_NAME_do_all(OBJ_NAME_TYPE_MD_METH, do_all_md_fn, &dc);
+}
+
+void EVP_MD_do_all_sorted(void (*fn) (const EVP_MD *md,
+                                      const char *from, const char *to,
+                                      void *x), void *arg)
+{
+    struct doall_md dc;
+
+    OPENSSL_init_crypto(OPENSSL_INIT_ADD_ALL_DIGESTS, NULL);
+
+    dc.fn = fn;
+    dc.arg = arg;
+    OBJ_NAME_do_all_sorted(OBJ_NAME_TYPE_MD_METH, do_all_md_fn, &dc);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p5_crpt.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p5_crpt.c
new file mode 100644
index 000000000..7e55d0bfb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p5_crpt.c
@@ -0,0 +1,103 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/evp.h>
+
+/*
+ * Doesn't do anything now: Builtin PBE algorithms in static table.
+ */
+
+void PKCS5_PBE_add(void)
+{
+}
+
+int PKCS5_PBE_keyivgen(EVP_CIPHER_CTX *cctx, const char *pass, int passlen,
+                       ASN1_TYPE *param, const EVP_CIPHER *cipher,
+                       const EVP_MD *md, int en_de)
+{
+    EVP_MD_CTX *ctx;
+    unsigned char md_tmp[EVP_MAX_MD_SIZE];
+    unsigned char key[EVP_MAX_KEY_LENGTH], iv[EVP_MAX_IV_LENGTH];
+    int i;
+    PBEPARAM *pbe;
+    int saltlen, iter;
+    unsigned char *salt;
+    int mdsize;
+    int rv = 0;
+
+    /* Extract useful info from parameter */
+    if (param == NULL || param->type != V_ASN1_SEQUENCE ||
+        param->value.sequence == NULL) {
+        EVPerr(EVP_F_PKCS5_PBE_KEYIVGEN, EVP_R_DECODE_ERROR);
+        return 0;
+    }
+
+    pbe = ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(PBEPARAM), param);
+    if (pbe == NULL) {
+        EVPerr(EVP_F_PKCS5_PBE_KEYIVGEN, EVP_R_DECODE_ERROR);
+        return 0;
+    }
+
+    if (!pbe->iter)
+        iter = 1;
+    else
+        iter = ASN1_INTEGER_get(pbe->iter);
+    salt = pbe->salt->data;
+    saltlen = pbe->salt->length;
+
+    if (!pass)
+        passlen = 0;
+    else if (passlen == -1)
+        passlen = strlen(pass);
+
+    ctx = EVP_MD_CTX_new();
+    if (ctx == NULL) {
+        EVPerr(EVP_F_PKCS5_PBE_KEYIVGEN, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (!EVP_DigestInit_ex(ctx, md, NULL))
+        goto err;
+    if (!EVP_DigestUpdate(ctx, pass, passlen))
+        goto err;
+    if (!EVP_DigestUpdate(ctx, salt, saltlen))
+        goto err;
+    PBEPARAM_free(pbe);
+    if (!EVP_DigestFinal_ex(ctx, md_tmp, NULL))
+        goto err;
+    mdsize = EVP_MD_size(md);
+    if (mdsize < 0)
+        return 0;
+    for (i = 1; i < iter; i++) {
+        if (!EVP_DigestInit_ex(ctx, md, NULL))
+            goto err;
+        if (!EVP_DigestUpdate(ctx, md_tmp, mdsize))
+            goto err;
+        if (!EVP_DigestFinal_ex(ctx, md_tmp, NULL))
+            goto err;
+    }
+    OPENSSL_assert(EVP_CIPHER_key_length(cipher) <= (int)sizeof(md_tmp));
+    memcpy(key, md_tmp, EVP_CIPHER_key_length(cipher));
+    OPENSSL_assert(EVP_CIPHER_iv_length(cipher) <= 16);
+    memcpy(iv, md_tmp + (16 - EVP_CIPHER_iv_length(cipher)),
+           EVP_CIPHER_iv_length(cipher));
+    if (!EVP_CipherInit_ex(cctx, cipher, NULL, key, iv, en_de))
+        goto err;
+    OPENSSL_cleanse(md_tmp, EVP_MAX_MD_SIZE);
+    OPENSSL_cleanse(key, EVP_MAX_KEY_LENGTH);
+    OPENSSL_cleanse(iv, EVP_MAX_IV_LENGTH);
+    rv = 1;
+ err:
+    EVP_MD_CTX_free(ctx);
+    return rv;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p5_crpt2.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p5_crpt2.c
new file mode 100644
index 000000000..e819eb9b4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p5_crpt2.c
@@ -0,0 +1,265 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include "internal/cryptlib.h"
+# include <openssl/x509.h>
+# include <openssl/evp.h>
+# include <openssl/hmac.h>
+# include "evp_locl.h"
+
+/* set this to print out info about the keygen algorithm */
+/* #define OPENSSL_DEBUG_PKCS5V2 */
+
+# ifdef OPENSSL_DEBUG_PKCS5V2
+static void h__dump(const unsigned char *p, int len);
+# endif
+
+/*
+ * This is an implementation of PKCS#5 v2.0 password based encryption key
+ * derivation function PBKDF2. SHA1 version verified against test vectors
+ * posted by Peter Gutmann to the PKCS-TNG mailing list.
+ */
+
+int PKCS5_PBKDF2_HMAC(const char *pass, int passlen,
+                      const unsigned char *salt, int saltlen, int iter,
+                      const EVP_MD *digest, int keylen, unsigned char *out)
+{
+    const char *empty = "";
+    unsigned char digtmp[EVP_MAX_MD_SIZE], *p, itmp[4];
+    int cplen, j, k, tkeylen, mdlen;
+    unsigned long i = 1;
+    HMAC_CTX *hctx_tpl = NULL, *hctx = NULL;
+
+    mdlen = EVP_MD_size(digest);
+    if (mdlen < 0)
+        return 0;
+
+    hctx_tpl = HMAC_CTX_new();
+    if (hctx_tpl == NULL)
+        return 0;
+    p = out;
+    tkeylen = keylen;
+    if (pass == NULL) {
+        pass = empty;
+        passlen = 0;
+    } else if (passlen == -1) {
+        passlen = strlen(pass);
+    }
+    if (!HMAC_Init_ex(hctx_tpl, pass, passlen, digest, NULL)) {
+        HMAC_CTX_free(hctx_tpl);
+        return 0;
+    }
+    hctx = HMAC_CTX_new();
+    if (hctx == NULL) {
+        HMAC_CTX_free(hctx_tpl);
+        return 0;
+    }
+    while (tkeylen) {
+        if (tkeylen > mdlen)
+            cplen = mdlen;
+        else
+            cplen = tkeylen;
+        /*
+         * We are unlikely to ever use more than 256 blocks (5120 bits!) but
+         * just in case...
+         */
+        itmp[0] = (unsigned char)((i >> 24) & 0xff);
+        itmp[1] = (unsigned char)((i >> 16) & 0xff);
+        itmp[2] = (unsigned char)((i >> 8) & 0xff);
+        itmp[3] = (unsigned char)(i & 0xff);
+        if (!HMAC_CTX_copy(hctx, hctx_tpl)) {
+            HMAC_CTX_free(hctx);
+            HMAC_CTX_free(hctx_tpl);
+            return 0;
+        }
+        if (!HMAC_Update(hctx, salt, saltlen)
+            || !HMAC_Update(hctx, itmp, 4)
+            || !HMAC_Final(hctx, digtmp, NULL)) {
+            HMAC_CTX_free(hctx);
+            HMAC_CTX_free(hctx_tpl);
+            return 0;
+        }
+        memcpy(p, digtmp, cplen);
+        for (j = 1; j < iter; j++) {
+            if (!HMAC_CTX_copy(hctx, hctx_tpl)) {
+                HMAC_CTX_free(hctx);
+                HMAC_CTX_free(hctx_tpl);
+                return 0;
+            }
+            if (!HMAC_Update(hctx, digtmp, mdlen)
+                || !HMAC_Final(hctx, digtmp, NULL)) {
+                HMAC_CTX_free(hctx);
+                HMAC_CTX_free(hctx_tpl);
+                return 0;
+            }
+            for (k = 0; k < cplen; k++)
+                p[k] ^= digtmp[k];
+        }
+        tkeylen -= cplen;
+        i++;
+        p += cplen;
+    }
+    HMAC_CTX_free(hctx);
+    HMAC_CTX_free(hctx_tpl);
+# ifdef OPENSSL_DEBUG_PKCS5V2
+    fprintf(stderr, "Password:\n");
+    h__dump(pass, passlen);
+    fprintf(stderr, "Salt:\n");
+    h__dump(salt, saltlen);
+    fprintf(stderr, "Iteration count %d\n", iter);
+    fprintf(stderr, "Key:\n");
+    h__dump(out, keylen);
+# endif
+    return 1;
+}
+
+int PKCS5_PBKDF2_HMAC_SHA1(const char *pass, int passlen,
+                           const unsigned char *salt, int saltlen, int iter,
+                           int keylen, unsigned char *out)
+{
+    return PKCS5_PBKDF2_HMAC(pass, passlen, salt, saltlen, iter, EVP_sha1(),
+                             keylen, out);
+}
+
+/*
+ * Now the key derivation function itself. This is a bit evil because it has
+ * to check the ASN1 parameters are valid: and there are quite a few of
+ * them...
+ */
+
+int PKCS5_v2_PBE_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass, int passlen,
+                          ASN1_TYPE *param, const EVP_CIPHER *c,
+                          const EVP_MD *md, int en_de)
+{
+    PBE2PARAM *pbe2 = NULL;
+    const EVP_CIPHER *cipher;
+    EVP_PBE_KEYGEN *kdf;
+
+    int rv = 0;
+
+    pbe2 = ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(PBE2PARAM), param);
+    if (pbe2 == NULL) {
+        EVPerr(EVP_F_PKCS5_V2_PBE_KEYIVGEN, EVP_R_DECODE_ERROR);
+        goto err;
+    }
+
+    /* See if we recognise the key derivation function */
+    if (!EVP_PBE_find(EVP_PBE_TYPE_KDF, OBJ_obj2nid(pbe2->keyfunc->algorithm),
+                        NULL, NULL, &kdf)) {
+        EVPerr(EVP_F_PKCS5_V2_PBE_KEYIVGEN,
+               EVP_R_UNSUPPORTED_KEY_DERIVATION_FUNCTION);
+        goto err;
+    }
+
+    /*
+     * lets see if we recognise the encryption algorithm.
+     */
+
+    cipher = EVP_get_cipherbyobj(pbe2->encryption->algorithm);
+
+    if (!cipher) {
+        EVPerr(EVP_F_PKCS5_V2_PBE_KEYIVGEN, EVP_R_UNSUPPORTED_CIPHER);
+        goto err;
+    }
+
+    /* Fixup cipher based on AlgorithmIdentifier */
+    if (!EVP_CipherInit_ex(ctx, cipher, NULL, NULL, NULL, en_de))
+        goto err;
+    if (EVP_CIPHER_asn1_to_param(ctx, pbe2->encryption->parameter) < 0) {
+        EVPerr(EVP_F_PKCS5_V2_PBE_KEYIVGEN, EVP_R_CIPHER_PARAMETER_ERROR);
+        goto err;
+    }
+    rv = kdf(ctx, pass, passlen, pbe2->keyfunc->parameter, NULL, NULL, en_de);
+ err:
+    PBE2PARAM_free(pbe2);
+    return rv;
+}
+
+int PKCS5_v2_PBKDF2_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass,
+                             int passlen, ASN1_TYPE *param,
+                             const EVP_CIPHER *c, const EVP_MD *md, int en_de)
+{
+    unsigned char *salt, key[EVP_MAX_KEY_LENGTH];
+    int saltlen, iter;
+    int rv = 0;
+    unsigned int keylen = 0;
+    int prf_nid, hmac_md_nid;
+    PBKDF2PARAM *kdf = NULL;
+    const EVP_MD *prfmd;
+
+    if (EVP_CIPHER_CTX_cipher(ctx) == NULL) {
+        EVPerr(EVP_F_PKCS5_V2_PBKDF2_KEYIVGEN, EVP_R_NO_CIPHER_SET);
+        goto err;
+    }
+    keylen = EVP_CIPHER_CTX_key_length(ctx);
+    OPENSSL_assert(keylen <= sizeof(key));
+
+    /* Decode parameter */
+
+    kdf = ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(PBKDF2PARAM), param);
+
+    if (kdf == NULL) {
+        EVPerr(EVP_F_PKCS5_V2_PBKDF2_KEYIVGEN, EVP_R_DECODE_ERROR);
+        goto err;
+    }
+
+    keylen = EVP_CIPHER_CTX_key_length(ctx);
+
+    /* Now check the parameters of the kdf */
+
+    if (kdf->keylength && (ASN1_INTEGER_get(kdf->keylength) != (int)keylen)) {
+        EVPerr(EVP_F_PKCS5_V2_PBKDF2_KEYIVGEN, EVP_R_UNSUPPORTED_KEYLENGTH);
+        goto err;
+    }
+
+    if (kdf->prf)
+        prf_nid = OBJ_obj2nid(kdf->prf->algorithm);
+    else
+        prf_nid = NID_hmacWithSHA1;
+
+    if (!EVP_PBE_find(EVP_PBE_TYPE_PRF, prf_nid, NULL, &hmac_md_nid, 0)) {
+        EVPerr(EVP_F_PKCS5_V2_PBKDF2_KEYIVGEN, EVP_R_UNSUPPORTED_PRF);
+        goto err;
+    }
+
+    prfmd = EVP_get_digestbynid(hmac_md_nid);
+    if (prfmd == NULL) {
+        EVPerr(EVP_F_PKCS5_V2_PBKDF2_KEYIVGEN, EVP_R_UNSUPPORTED_PRF);
+        goto err;
+    }
+
+    if (kdf->salt->type != V_ASN1_OCTET_STRING) {
+        EVPerr(EVP_F_PKCS5_V2_PBKDF2_KEYIVGEN, EVP_R_UNSUPPORTED_SALT_TYPE);
+        goto err;
+    }
+
+    /* it seems that its all OK */
+    salt = kdf->salt->value.octet_string->data;
+    saltlen = kdf->salt->value.octet_string->length;
+    iter = ASN1_INTEGER_get(kdf->iter);
+    if (!PKCS5_PBKDF2_HMAC(pass, passlen, salt, saltlen, iter, prfmd,
+                           keylen, key))
+        goto err;
+    rv = EVP_CipherInit_ex(ctx, NULL, NULL, key, NULL, en_de);
+ err:
+    OPENSSL_cleanse(key, keylen);
+    PBKDF2PARAM_free(kdf);
+    return rv;
+}
+
+# ifdef OPENSSL_DEBUG_PKCS5V2
+static void h__dump(const unsigned char *p, int len)
+{
+    for (; len--; p++)
+        fprintf(stderr, "%02X ", *p);
+    fprintf(stderr, "\n");
+}
+# endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_dec.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_dec.c
new file mode 100644
index 000000000..a150a26e0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_dec.c
@@ -0,0 +1,36 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/rsa.h>
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+
+int EVP_PKEY_decrypt_old(unsigned char *key, const unsigned char *ek, int ekl,
+                         EVP_PKEY *priv)
+{
+    int ret = -1;
+
+#ifndef OPENSSL_NO_RSA
+    if (EVP_PKEY_id(priv) != EVP_PKEY_RSA) {
+#endif
+        EVPerr(EVP_F_EVP_PKEY_DECRYPT_OLD, EVP_R_PUBLIC_KEY_NOT_RSA);
+#ifndef OPENSSL_NO_RSA
+        goto err;
+    }
+
+    ret =
+        RSA_private_decrypt(ekl, ek, key, EVP_PKEY_get0_RSA(priv),
+                            RSA_PKCS1_PADDING);
+ err:
+#endif
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_enc.c
new file mode 100644
index 000000000..04d67cb50
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_enc.c
@@ -0,0 +1,35 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/rsa.h>
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+
+int EVP_PKEY_encrypt_old(unsigned char *ek, const unsigned char *key,
+                         int key_len, EVP_PKEY *pubk)
+{
+    int ret = 0;
+
+#ifndef OPENSSL_NO_RSA
+    if (EVP_PKEY_id(pubk) != EVP_PKEY_RSA) {
+#endif
+        EVPerr(EVP_F_EVP_PKEY_ENCRYPT_OLD, EVP_R_PUBLIC_KEY_NOT_RSA);
+#ifndef OPENSSL_NO_RSA
+        goto err;
+    }
+    ret =
+        RSA_public_encrypt(key_len, key, ek, EVP_PKEY_get0_RSA(pubk),
+                           RSA_PKCS1_PADDING);
+ err:
+#endif
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_lib.c
new file mode 100644
index 000000000..148df90f8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_lib.c
@@ -0,0 +1,686 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "internal/refcount.h"
+#include <openssl/bn.h>
+#include <openssl/err.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/rsa.h>
+#include <openssl/dsa.h>
+#include <openssl/dh.h>
+#include <openssl/cmac.h>
+#include <openssl/engine.h>
+
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+
+static void EVP_PKEY_free_it(EVP_PKEY *x);
+
+int EVP_PKEY_bits(const EVP_PKEY *pkey)
+{
+    if (pkey && pkey->ameth && pkey->ameth->pkey_bits)
+        return pkey->ameth->pkey_bits(pkey);
+    return 0;
+}
+
+int EVP_PKEY_security_bits(const EVP_PKEY *pkey)
+{
+    if (pkey == NULL)
+        return 0;
+    if (!pkey->ameth || !pkey->ameth->pkey_security_bits)
+        return -2;
+    return pkey->ameth->pkey_security_bits(pkey);
+}
+
+int EVP_PKEY_size(const EVP_PKEY *pkey)
+{
+    if (pkey && pkey->ameth && pkey->ameth->pkey_size)
+        return pkey->ameth->pkey_size(pkey);
+    return 0;
+}
+
+int EVP_PKEY_save_parameters(EVP_PKEY *pkey, int mode)
+{
+#ifndef OPENSSL_NO_DSA
+    if (pkey->type == EVP_PKEY_DSA) {
+        int ret = pkey->save_parameters;
+
+        if (mode >= 0)
+            pkey->save_parameters = mode;
+        return ret;
+    }
+#endif
+#ifndef OPENSSL_NO_EC
+    if (pkey->type == EVP_PKEY_EC) {
+        int ret = pkey->save_parameters;
+
+        if (mode >= 0)
+            pkey->save_parameters = mode;
+        return ret;
+    }
+#endif
+    return 0;
+}
+
+int EVP_PKEY_copy_parameters(EVP_PKEY *to, const EVP_PKEY *from)
+{
+    if (to->type == EVP_PKEY_NONE) {
+        if (EVP_PKEY_set_type(to, from->type) == 0)
+            return 0;
+    } else if (to->type != from->type) {
+        EVPerr(EVP_F_EVP_PKEY_COPY_PARAMETERS, EVP_R_DIFFERENT_KEY_TYPES);
+        goto err;
+    }
+
+    if (EVP_PKEY_missing_parameters(from)) {
+        EVPerr(EVP_F_EVP_PKEY_COPY_PARAMETERS, EVP_R_MISSING_PARAMETERS);
+        goto err;
+    }
+
+    if (!EVP_PKEY_missing_parameters(to)) {
+        if (EVP_PKEY_cmp_parameters(to, from) == 1)
+            return 1;
+        EVPerr(EVP_F_EVP_PKEY_COPY_PARAMETERS, EVP_R_DIFFERENT_PARAMETERS);
+        return 0;
+    }
+
+    if (from->ameth && from->ameth->param_copy)
+        return from->ameth->param_copy(to, from);
+ err:
+    return 0;
+}
+
+int EVP_PKEY_missing_parameters(const EVP_PKEY *pkey)
+{
+    if (pkey->ameth && pkey->ameth->param_missing)
+        return pkey->ameth->param_missing(pkey);
+    return 0;
+}
+
+int EVP_PKEY_cmp_parameters(const EVP_PKEY *a, const EVP_PKEY *b)
+{
+    if (a->type != b->type)
+        return -1;
+    if (a->ameth && a->ameth->param_cmp)
+        return a->ameth->param_cmp(a, b);
+    return -2;
+}
+
+int EVP_PKEY_cmp(const EVP_PKEY *a, const EVP_PKEY *b)
+{
+    if (a->type != b->type)
+        return -1;
+
+    if (a->ameth) {
+        int ret;
+        /* Compare parameters if the algorithm has them */
+        if (a->ameth->param_cmp) {
+            ret = a->ameth->param_cmp(a, b);
+            if (ret <= 0)
+                return ret;
+        }
+
+        if (a->ameth->pub_cmp)
+            return a->ameth->pub_cmp(a, b);
+    }
+
+    return -2;
+}
+
+EVP_PKEY *EVP_PKEY_new(void)
+{
+    EVP_PKEY *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        EVPerr(EVP_F_EVP_PKEY_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    ret->type = EVP_PKEY_NONE;
+    ret->save_type = EVP_PKEY_NONE;
+    ret->references = 1;
+    ret->save_parameters = 1;
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        EVPerr(EVP_F_EVP_PKEY_NEW, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+int EVP_PKEY_up_ref(EVP_PKEY *pkey)
+{
+    int i;
+
+    if (CRYPTO_UP_REF(&pkey->references, &i, pkey->lock) <= 0)
+        return 0;
+
+    REF_PRINT_COUNT("EVP_PKEY", pkey);
+    REF_ASSERT_ISNT(i < 2);
+    return ((i > 1) ? 1 : 0);
+}
+
+/*
+ * Setup a public key ASN1 method and ENGINE from a NID or a string. If pkey
+ * is NULL just return 1 or 0 if the algorithm exists.
+ */
+
+static int pkey_set_type(EVP_PKEY *pkey, ENGINE *e, int type, const char *str,
+                         int len)
+{
+    const EVP_PKEY_ASN1_METHOD *ameth;
+    ENGINE **eptr = (e == NULL) ? &e :  NULL;
+
+    if (pkey) {
+        if (pkey->pkey.ptr)
+            EVP_PKEY_free_it(pkey);
+        /*
+         * If key type matches and a method exists then this lookup has
+         * succeeded once so just indicate success.
+         */
+        if ((type == pkey->save_type) && pkey->ameth)
+            return 1;
+#ifndef OPENSSL_NO_ENGINE
+        /* If we have ENGINEs release them */
+        ENGINE_finish(pkey->engine);
+        pkey->engine = NULL;
+        ENGINE_finish(pkey->pmeth_engine);
+        pkey->pmeth_engine = NULL;
+#endif
+    }
+    if (str)
+        ameth = EVP_PKEY_asn1_find_str(eptr, str, len);
+    else
+        ameth = EVP_PKEY_asn1_find(eptr, type);
+#ifndef OPENSSL_NO_ENGINE
+    if (pkey == NULL && eptr != NULL)
+        ENGINE_finish(e);
+#endif
+    if (ameth == NULL) {
+        EVPerr(EVP_F_PKEY_SET_TYPE, EVP_R_UNSUPPORTED_ALGORITHM);
+        return 0;
+    }
+    if (pkey) {
+        pkey->ameth = ameth;
+        pkey->engine = e;
+
+        pkey->type = pkey->ameth->pkey_id;
+        pkey->save_type = type;
+    }
+    return 1;
+}
+
+EVP_PKEY *EVP_PKEY_new_raw_private_key(int type, ENGINE *e,
+                                       const unsigned char *priv,
+                                       size_t len)
+{
+    EVP_PKEY *ret = EVP_PKEY_new();
+
+    if (ret == NULL
+            || !pkey_set_type(ret, e, type, NULL, -1)) {
+        /* EVPerr already called */
+        goto err;
+    }
+
+    if (ret->ameth->set_priv_key == NULL) {
+        EVPerr(EVP_F_EVP_PKEY_NEW_RAW_PRIVATE_KEY,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        goto err;
+    }
+
+    if (!ret->ameth->set_priv_key(ret, priv, len)) {
+        EVPerr(EVP_F_EVP_PKEY_NEW_RAW_PRIVATE_KEY, EVP_R_KEY_SETUP_FAILED);
+        goto err;
+    }
+
+    return ret;
+
+ err:
+    EVP_PKEY_free(ret);
+    return NULL;
+}
+
+EVP_PKEY *EVP_PKEY_new_raw_public_key(int type, ENGINE *e,
+                                      const unsigned char *pub,
+                                      size_t len)
+{
+    EVP_PKEY *ret = EVP_PKEY_new();
+
+    if (ret == NULL
+            || !pkey_set_type(ret, e, type, NULL, -1)) {
+        /* EVPerr already called */
+        goto err;
+    }
+
+    if (ret->ameth->set_pub_key == NULL) {
+        EVPerr(EVP_F_EVP_PKEY_NEW_RAW_PUBLIC_KEY,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        goto err;
+    }
+
+    if (!ret->ameth->set_pub_key(ret, pub, len)) {
+        EVPerr(EVP_F_EVP_PKEY_NEW_RAW_PUBLIC_KEY, EVP_R_KEY_SETUP_FAILED);
+        goto err;
+    }
+
+    return ret;
+
+ err:
+    EVP_PKEY_free(ret);
+    return NULL;
+}
+
+int EVP_PKEY_get_raw_private_key(const EVP_PKEY *pkey, unsigned char *priv,
+                                 size_t *len)
+{
+     if (pkey->ameth->get_priv_key == NULL) {
+        EVPerr(EVP_F_EVP_PKEY_GET_RAW_PRIVATE_KEY,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return 0;
+    }
+
+    if (!pkey->ameth->get_priv_key(pkey, priv, len)) {
+        EVPerr(EVP_F_EVP_PKEY_GET_RAW_PRIVATE_KEY, EVP_R_GET_RAW_KEY_FAILED);
+        return 0;
+    }
+
+    return 1;
+}
+
+int EVP_PKEY_get_raw_public_key(const EVP_PKEY *pkey, unsigned char *pub,
+                                size_t *len)
+{
+     if (pkey->ameth->get_pub_key == NULL) {
+        EVPerr(EVP_F_EVP_PKEY_GET_RAW_PUBLIC_KEY,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return 0;
+    }
+
+    if (!pkey->ameth->get_pub_key(pkey, pub, len)) {
+        EVPerr(EVP_F_EVP_PKEY_GET_RAW_PUBLIC_KEY, EVP_R_GET_RAW_KEY_FAILED);
+        return 0;
+    }
+
+    return 1;
+}
+
+EVP_PKEY *EVP_PKEY_new_CMAC_key(ENGINE *e, const unsigned char *priv,
+                                size_t len, const EVP_CIPHER *cipher)
+{
+#ifndef OPENSSL_NO_CMAC
+    EVP_PKEY *ret = EVP_PKEY_new();
+    CMAC_CTX *cmctx = CMAC_CTX_new();
+
+    if (ret == NULL
+            || cmctx == NULL
+            || !pkey_set_type(ret, e, EVP_PKEY_CMAC, NULL, -1)) {
+        /* EVPerr already called */
+        goto err;
+    }
+
+    if (!CMAC_Init(cmctx, priv, len, cipher, e)) {
+        EVPerr(EVP_F_EVP_PKEY_NEW_CMAC_KEY, EVP_R_KEY_SETUP_FAILED);
+        goto err;
+    }
+
+    ret->pkey.ptr = cmctx;
+    return ret;
+
+ err:
+    EVP_PKEY_free(ret);
+    CMAC_CTX_free(cmctx);
+    return NULL;
+#else
+    EVPerr(EVP_F_EVP_PKEY_NEW_CMAC_KEY,
+           EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+    return NULL;
+#endif
+}
+
+int EVP_PKEY_set_type(EVP_PKEY *pkey, int type)
+{
+    return pkey_set_type(pkey, NULL, type, NULL, -1);
+}
+
+int EVP_PKEY_set_type_str(EVP_PKEY *pkey, const char *str, int len)
+{
+    return pkey_set_type(pkey, NULL, EVP_PKEY_NONE, str, len);
+}
+
+int EVP_PKEY_set_alias_type(EVP_PKEY *pkey, int type)
+{
+    if (pkey->type == type) {
+        return 1; /* it already is that type */
+    }
+
+    /*
+     * The application is requesting to alias this to a different pkey type,
+     * but not one that resolves to the base type.
+     */
+    if (EVP_PKEY_type(type) != EVP_PKEY_base_id(pkey)) {
+        EVPerr(EVP_F_EVP_PKEY_SET_ALIAS_TYPE, EVP_R_UNSUPPORTED_ALGORITHM);
+        return 0;
+    }
+
+    pkey->type = type;
+    return 1;
+}
+
+#ifndef OPENSSL_NO_ENGINE
+int EVP_PKEY_set1_engine(EVP_PKEY *pkey, ENGINE *e)
+{
+    if (e != NULL) {
+        if (!ENGINE_init(e)) {
+            EVPerr(EVP_F_EVP_PKEY_SET1_ENGINE, ERR_R_ENGINE_LIB);
+            return 0;
+        }
+        if (ENGINE_get_pkey_meth(e, pkey->type) == NULL) {
+            ENGINE_finish(e);
+            EVPerr(EVP_F_EVP_PKEY_SET1_ENGINE, EVP_R_UNSUPPORTED_ALGORITHM);
+            return 0;
+        }
+    }
+    ENGINE_finish(pkey->pmeth_engine);
+    pkey->pmeth_engine = e;
+    return 1;
+}
+#endif
+int EVP_PKEY_assign(EVP_PKEY *pkey, int type, void *key)
+{
+    if (pkey == NULL || !EVP_PKEY_set_type(pkey, type))
+        return 0;
+    pkey->pkey.ptr = key;
+    return (key != NULL);
+}
+
+void *EVP_PKEY_get0(const EVP_PKEY *pkey)
+{
+    return pkey->pkey.ptr;
+}
+
+const unsigned char *EVP_PKEY_get0_hmac(const EVP_PKEY *pkey, size_t *len)
+{
+    ASN1_OCTET_STRING *os = NULL;
+    if (pkey->type != EVP_PKEY_HMAC) {
+        EVPerr(EVP_F_EVP_PKEY_GET0_HMAC, EVP_R_EXPECTING_AN_HMAC_KEY);
+        return NULL;
+    }
+    os = EVP_PKEY_get0(pkey);
+    *len = os->length;
+    return os->data;
+}
+
+#ifndef OPENSSL_NO_POLY1305
+const unsigned char *EVP_PKEY_get0_poly1305(const EVP_PKEY *pkey, size_t *len)
+{
+    ASN1_OCTET_STRING *os = NULL;
+    if (pkey->type != EVP_PKEY_POLY1305) {
+        EVPerr(EVP_F_EVP_PKEY_GET0_POLY1305, EVP_R_EXPECTING_A_POLY1305_KEY);
+        return NULL;
+    }
+    os = EVP_PKEY_get0(pkey);
+    *len = os->length;
+    return os->data;
+}
+#endif
+
+#ifndef OPENSSL_NO_SIPHASH
+const unsigned char *EVP_PKEY_get0_siphash(const EVP_PKEY *pkey, size_t *len)
+{
+    ASN1_OCTET_STRING *os = NULL;
+
+    if (pkey->type != EVP_PKEY_SIPHASH) {
+        EVPerr(EVP_F_EVP_PKEY_GET0_SIPHASH, EVP_R_EXPECTING_A_SIPHASH_KEY);
+        return NULL;
+    }
+    os = EVP_PKEY_get0(pkey);
+    *len = os->length;
+    return os->data;
+}
+#endif
+
+#ifndef OPENSSL_NO_RSA
+int EVP_PKEY_set1_RSA(EVP_PKEY *pkey, RSA *key)
+{
+    int ret = EVP_PKEY_assign_RSA(pkey, key);
+    if (ret)
+        RSA_up_ref(key);
+    return ret;
+}
+
+RSA *EVP_PKEY_get0_RSA(EVP_PKEY *pkey)
+{
+    if (pkey->type != EVP_PKEY_RSA) {
+        EVPerr(EVP_F_EVP_PKEY_GET0_RSA, EVP_R_EXPECTING_AN_RSA_KEY);
+        return NULL;
+    }
+    return pkey->pkey.rsa;
+}
+
+RSA *EVP_PKEY_get1_RSA(EVP_PKEY *pkey)
+{
+    RSA *ret = EVP_PKEY_get0_RSA(pkey);
+    if (ret != NULL)
+        RSA_up_ref(ret);
+    return ret;
+}
+#endif
+
+#ifndef OPENSSL_NO_DSA
+int EVP_PKEY_set1_DSA(EVP_PKEY *pkey, DSA *key)
+{
+    int ret = EVP_PKEY_assign_DSA(pkey, key);
+    if (ret)
+        DSA_up_ref(key);
+    return ret;
+}
+
+DSA *EVP_PKEY_get0_DSA(EVP_PKEY *pkey)
+{
+    if (pkey->type != EVP_PKEY_DSA) {
+        EVPerr(EVP_F_EVP_PKEY_GET0_DSA, EVP_R_EXPECTING_A_DSA_KEY);
+        return NULL;
+    }
+    return pkey->pkey.dsa;
+}
+
+DSA *EVP_PKEY_get1_DSA(EVP_PKEY *pkey)
+{
+    DSA *ret = EVP_PKEY_get0_DSA(pkey);
+    if (ret != NULL)
+        DSA_up_ref(ret);
+    return ret;
+}
+#endif
+
+#ifndef OPENSSL_NO_EC
+
+int EVP_PKEY_set1_EC_KEY(EVP_PKEY *pkey, EC_KEY *key)
+{
+    int ret = EVP_PKEY_assign_EC_KEY(pkey, key);
+    if (ret)
+        EC_KEY_up_ref(key);
+    return ret;
+}
+
+EC_KEY *EVP_PKEY_get0_EC_KEY(EVP_PKEY *pkey)
+{
+    if (pkey->type != EVP_PKEY_EC) {
+        EVPerr(EVP_F_EVP_PKEY_GET0_EC_KEY, EVP_R_EXPECTING_A_EC_KEY);
+        return NULL;
+    }
+    return pkey->pkey.ec;
+}
+
+EC_KEY *EVP_PKEY_get1_EC_KEY(EVP_PKEY *pkey)
+{
+    EC_KEY *ret = EVP_PKEY_get0_EC_KEY(pkey);
+    if (ret != NULL)
+        EC_KEY_up_ref(ret);
+    return ret;
+}
+#endif
+
+#ifndef OPENSSL_NO_DH
+
+int EVP_PKEY_set1_DH(EVP_PKEY *pkey, DH *key)
+{
+    int ret = EVP_PKEY_assign_DH(pkey, key);
+    if (ret)
+        DH_up_ref(key);
+    return ret;
+}
+
+DH *EVP_PKEY_get0_DH(EVP_PKEY *pkey)
+{
+    if (pkey->type != EVP_PKEY_DH && pkey->type != EVP_PKEY_DHX) {
+        EVPerr(EVP_F_EVP_PKEY_GET0_DH, EVP_R_EXPECTING_A_DH_KEY);
+        return NULL;
+    }
+    return pkey->pkey.dh;
+}
+
+DH *EVP_PKEY_get1_DH(EVP_PKEY *pkey)
+{
+    DH *ret = EVP_PKEY_get0_DH(pkey);
+    if (ret != NULL)
+        DH_up_ref(ret);
+    return ret;
+}
+#endif
+
+int EVP_PKEY_type(int type)
+{
+    int ret;
+    const EVP_PKEY_ASN1_METHOD *ameth;
+    ENGINE *e;
+    ameth = EVP_PKEY_asn1_find(&e, type);
+    if (ameth)
+        ret = ameth->pkey_id;
+    else
+        ret = NID_undef;
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_finish(e);
+#endif
+    return ret;
+}
+
+int EVP_PKEY_id(const EVP_PKEY *pkey)
+{
+    return pkey->type;
+}
+
+int EVP_PKEY_base_id(const EVP_PKEY *pkey)
+{
+    return EVP_PKEY_type(pkey->type);
+}
+
+void EVP_PKEY_free(EVP_PKEY *x)
+{
+    int i;
+
+    if (x == NULL)
+        return;
+
+    CRYPTO_DOWN_REF(&x->references, &i, x->lock);
+    REF_PRINT_COUNT("EVP_PKEY", x);
+    if (i > 0)
+        return;
+    REF_ASSERT_ISNT(i < 0);
+    EVP_PKEY_free_it(x);
+    CRYPTO_THREAD_lock_free(x->lock);
+    sk_X509_ATTRIBUTE_pop_free(x->attributes, X509_ATTRIBUTE_free);
+    OPENSSL_free(x);
+}
+
+static void EVP_PKEY_free_it(EVP_PKEY *x)
+{
+    /* internal function; x is never NULL */
+    if (x->ameth && x->ameth->pkey_free) {
+        x->ameth->pkey_free(x);
+        x->pkey.ptr = NULL;
+    }
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_finish(x->engine);
+    x->engine = NULL;
+    ENGINE_finish(x->pmeth_engine);
+    x->pmeth_engine = NULL;
+#endif
+}
+
+static int unsup_alg(BIO *out, const EVP_PKEY *pkey, int indent,
+                     const char *kstr)
+{
+    BIO_indent(out, indent, 128);
+    BIO_printf(out, "%s algorithm \"%s\" unsupported\n",
+               kstr, OBJ_nid2ln(pkey->type));
+    return 1;
+}
+
+int EVP_PKEY_print_public(BIO *out, const EVP_PKEY *pkey,
+                          int indent, ASN1_PCTX *pctx)
+{
+    if (pkey->ameth && pkey->ameth->pub_print)
+        return pkey->ameth->pub_print(out, pkey, indent, pctx);
+
+    return unsup_alg(out, pkey, indent, "Public Key");
+}
+
+int EVP_PKEY_print_private(BIO *out, const EVP_PKEY *pkey,
+                           int indent, ASN1_PCTX *pctx)
+{
+    if (pkey->ameth && pkey->ameth->priv_print)
+        return pkey->ameth->priv_print(out, pkey, indent, pctx);
+
+    return unsup_alg(out, pkey, indent, "Private Key");
+}
+
+int EVP_PKEY_print_params(BIO *out, const EVP_PKEY *pkey,
+                          int indent, ASN1_PCTX *pctx)
+{
+    if (pkey->ameth && pkey->ameth->param_print)
+        return pkey->ameth->param_print(out, pkey, indent, pctx);
+    return unsup_alg(out, pkey, indent, "Parameters");
+}
+
+static int evp_pkey_asn1_ctrl(EVP_PKEY *pkey, int op, int arg1, void *arg2)
+{
+    if (pkey->ameth == NULL || pkey->ameth->pkey_ctrl == NULL)
+        return -2;
+    return pkey->ameth->pkey_ctrl(pkey, op, arg1, arg2);
+}
+
+int EVP_PKEY_get_default_digest_nid(EVP_PKEY *pkey, int *pnid)
+{
+    return evp_pkey_asn1_ctrl(pkey, ASN1_PKEY_CTRL_DEFAULT_MD_NID, 0, pnid);
+}
+
+int EVP_PKEY_set1_tls_encodedpoint(EVP_PKEY *pkey,
+                               const unsigned char *pt, size_t ptlen)
+{
+    if (ptlen > INT_MAX)
+        return 0;
+    if (evp_pkey_asn1_ctrl(pkey, ASN1_PKEY_CTRL_SET1_TLS_ENCPT, ptlen,
+                           (void *)pt) <= 0)
+        return 0;
+    return 1;
+}
+
+size_t EVP_PKEY_get1_tls_encodedpoint(EVP_PKEY *pkey, unsigned char **ppt)
+{
+    int rv;
+    rv = evp_pkey_asn1_ctrl(pkey, ASN1_PKEY_CTRL_GET1_TLS_ENCPT, 0, ppt);
+    if (rv <= 0)
+        return 0;
+    return rv;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_open.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_open.c
new file mode 100644
index 000000000..f2976f8a9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_open.c
@@ -0,0 +1,73 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#ifdef OPENSSL_NO_RSA
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <stdio.h>
+# include <openssl/evp.h>
+# include <openssl/objects.h>
+# include <openssl/x509.h>
+# include <openssl/rsa.h>
+
+int EVP_OpenInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type,
+                 const unsigned char *ek, int ekl, const unsigned char *iv,
+                 EVP_PKEY *priv)
+{
+    unsigned char *key = NULL;
+    int i, size = 0, ret = 0;
+
+    if (type) {
+        EVP_CIPHER_CTX_reset(ctx);
+        if (!EVP_DecryptInit_ex(ctx, type, NULL, NULL, NULL))
+            return 0;
+    }
+
+    if (!priv)
+        return 1;
+
+    if (EVP_PKEY_id(priv) != EVP_PKEY_RSA) {
+        EVPerr(EVP_F_EVP_OPENINIT, EVP_R_PUBLIC_KEY_NOT_RSA);
+        goto err;
+    }
+
+    size = EVP_PKEY_size(priv);
+    key = OPENSSL_malloc(size + 2);
+    if (key == NULL) {
+        /* ERROR */
+        EVPerr(EVP_F_EVP_OPENINIT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    i = EVP_PKEY_decrypt_old(key, ek, ekl, priv);
+    if ((i <= 0) || !EVP_CIPHER_CTX_set_key_length(ctx, i)) {
+        /* ERROR */
+        goto err;
+    }
+    if (!EVP_DecryptInit_ex(ctx, NULL, NULL, key, iv))
+        goto err;
+
+    ret = 1;
+ err:
+    OPENSSL_clear_free(key, size);
+    return ret;
+}
+
+int EVP_OpenFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
+{
+    int i;
+
+    i = EVP_DecryptFinal_ex(ctx, out, outl);
+    if (i)
+        i = EVP_DecryptInit_ex(ctx, NULL, NULL, NULL, NULL);
+    return i;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_seal.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_seal.c
new file mode 100644
index 000000000..e851d7ab8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_seal.c
@@ -0,0 +1,65 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/rand.h>
+#include <openssl/rsa.h>
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+
+int EVP_SealInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type,
+                 unsigned char **ek, int *ekl, unsigned char *iv,
+                 EVP_PKEY **pubk, int npubk)
+{
+    unsigned char key[EVP_MAX_KEY_LENGTH];
+    int i;
+    int rv = 0;
+
+    if (type) {
+        EVP_CIPHER_CTX_reset(ctx);
+        if (!EVP_EncryptInit_ex(ctx, type, NULL, NULL, NULL))
+            return 0;
+    }
+    if ((npubk <= 0) || !pubk)
+        return 1;
+    if (EVP_CIPHER_CTX_rand_key(ctx, key) <= 0)
+        return 0;
+
+    if (EVP_CIPHER_CTX_iv_length(ctx)
+            && RAND_bytes(iv, EVP_CIPHER_CTX_iv_length(ctx)) <= 0)
+        goto err;
+
+    if (!EVP_EncryptInit_ex(ctx, NULL, NULL, key, iv))
+        goto err;
+
+    for (i = 0; i < npubk; i++) {
+        ekl[i] =
+            EVP_PKEY_encrypt_old(ek[i], key, EVP_CIPHER_CTX_key_length(ctx),
+                                 pubk[i]);
+        if (ekl[i] <= 0) {
+            rv = -1;
+            goto err;
+        }
+    }
+    rv = npubk;
+err:
+    OPENSSL_cleanse(key, sizeof(key));
+    return rv;
+}
+
+int EVP_SealFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
+{
+    int i;
+    i = EVP_EncryptFinal_ex(ctx, out, outl);
+    if (i)
+        i = EVP_EncryptInit_ex(ctx, NULL, NULL, NULL, NULL);
+    return i;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_sign.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_sign.c
new file mode 100644
index 000000000..6cb442e4f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_sign.c
@@ -0,0 +1,61 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include "internal/evp_int.h"
+
+int EVP_SignFinal(EVP_MD_CTX *ctx, unsigned char *sigret,
+                  unsigned int *siglen, EVP_PKEY *pkey)
+{
+    unsigned char m[EVP_MAX_MD_SIZE];
+    unsigned int m_len = 0;
+    int i = 0;
+    size_t sltmp;
+    EVP_PKEY_CTX *pkctx = NULL;
+
+    *siglen = 0;
+    if (EVP_MD_CTX_test_flags(ctx, EVP_MD_CTX_FLAG_FINALISE)) {
+        if (!EVP_DigestFinal_ex(ctx, m, &m_len))
+            goto err;
+    } else {
+        int rv = 0;
+        EVP_MD_CTX *tmp_ctx = EVP_MD_CTX_new();
+        if (tmp_ctx == NULL) {
+            EVPerr(EVP_F_EVP_SIGNFINAL, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        rv = EVP_MD_CTX_copy_ex(tmp_ctx, ctx);
+        if (rv)
+            rv = EVP_DigestFinal_ex(tmp_ctx, m, &m_len);
+        EVP_MD_CTX_free(tmp_ctx);
+        if (!rv)
+            return 0;
+    }
+
+    sltmp = (size_t)EVP_PKEY_size(pkey);
+    i = 0;
+    pkctx = EVP_PKEY_CTX_new(pkey, NULL);
+    if (pkctx == NULL)
+        goto err;
+    if (EVP_PKEY_sign_init(pkctx) <= 0)
+        goto err;
+    if (EVP_PKEY_CTX_set_signature_md(pkctx, EVP_MD_CTX_md(ctx)) <= 0)
+        goto err;
+    if (EVP_PKEY_sign(pkctx, sigret, &sltmp, m, m_len) <= 0)
+        goto err;
+    *siglen = sltmp;
+    i = 1;
+ err:
+    EVP_PKEY_CTX_free(pkctx);
+    return i;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_verify.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_verify.c
new file mode 100644
index 000000000..6e8c565df
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/p_verify.c
@@ -0,0 +1,55 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include "internal/evp_int.h"
+
+int EVP_VerifyFinal(EVP_MD_CTX *ctx, const unsigned char *sigbuf,
+                    unsigned int siglen, EVP_PKEY *pkey)
+{
+    unsigned char m[EVP_MAX_MD_SIZE];
+    unsigned int m_len = 0;
+    int i = 0;
+    EVP_PKEY_CTX *pkctx = NULL;
+
+    if (EVP_MD_CTX_test_flags(ctx, EVP_MD_CTX_FLAG_FINALISE)) {
+        if (!EVP_DigestFinal_ex(ctx, m, &m_len))
+            goto err;
+    } else {
+        int rv = 0;
+        EVP_MD_CTX *tmp_ctx = EVP_MD_CTX_new();
+        if (tmp_ctx == NULL) {
+            EVPerr(EVP_F_EVP_VERIFYFINAL, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        rv = EVP_MD_CTX_copy_ex(tmp_ctx, ctx);
+        if (rv)
+            rv = EVP_DigestFinal_ex(tmp_ctx, m, &m_len);
+        EVP_MD_CTX_free(tmp_ctx);
+        if (!rv)
+            return 0;
+    }
+
+    i = -1;
+    pkctx = EVP_PKEY_CTX_new(pkey, NULL);
+    if (pkctx == NULL)
+        goto err;
+    if (EVP_PKEY_verify_init(pkctx) <= 0)
+        goto err;
+    if (EVP_PKEY_CTX_set_signature_md(pkctx, EVP_MD_CTX_md(ctx)) <= 0)
+        goto err;
+    i = EVP_PKEY_verify(pkctx, sigbuf, siglen, m, m_len);
+ err:
+    EVP_PKEY_CTX_free(pkctx);
+    return i;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/pbe_scrypt.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/pbe_scrypt.c
new file mode 100644
index 000000000..57da82f3f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/pbe_scrypt.c
@@ -0,0 +1,266 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stddef.h>
+#include <stdio.h>
+#include <string.h>
+#include <openssl/evp.h>
+#include <openssl/err.h>
+#include "internal/numbers.h"
+
+#ifndef OPENSSL_NO_SCRYPT
+
+#define R(a,b) (((a) << (b)) | ((a) >> (32 - (b))))
+static void salsa208_word_specification(uint32_t inout[16])
+{
+    int i;
+    uint32_t x[16];
+    memcpy(x, inout, sizeof(x));
+    for (i = 8; i > 0; i -= 2) {
+        x[4] ^= R(x[0] + x[12], 7);
+        x[8] ^= R(x[4] + x[0], 9);
+        x[12] ^= R(x[8] + x[4], 13);
+        x[0] ^= R(x[12] + x[8], 18);
+        x[9] ^= R(x[5] + x[1], 7);
+        x[13] ^= R(x[9] + x[5], 9);
+        x[1] ^= R(x[13] + x[9], 13);
+        x[5] ^= R(x[1] + x[13], 18);
+        x[14] ^= R(x[10] + x[6], 7);
+        x[2] ^= R(x[14] + x[10], 9);
+        x[6] ^= R(x[2] + x[14], 13);
+        x[10] ^= R(x[6] + x[2], 18);
+        x[3] ^= R(x[15] + x[11], 7);
+        x[7] ^= R(x[3] + x[15], 9);
+        x[11] ^= R(x[7] + x[3], 13);
+        x[15] ^= R(x[11] + x[7], 18);
+        x[1] ^= R(x[0] + x[3], 7);
+        x[2] ^= R(x[1] + x[0], 9);
+        x[3] ^= R(x[2] + x[1], 13);
+        x[0] ^= R(x[3] + x[2], 18);
+        x[6] ^= R(x[5] + x[4], 7);
+        x[7] ^= R(x[6] + x[5], 9);
+        x[4] ^= R(x[7] + x[6], 13);
+        x[5] ^= R(x[4] + x[7], 18);
+        x[11] ^= R(x[10] + x[9], 7);
+        x[8] ^= R(x[11] + x[10], 9);
+        x[9] ^= R(x[8] + x[11], 13);
+        x[10] ^= R(x[9] + x[8], 18);
+        x[12] ^= R(x[15] + x[14], 7);
+        x[13] ^= R(x[12] + x[15], 9);
+        x[14] ^= R(x[13] + x[12], 13);
+        x[15] ^= R(x[14] + x[13], 18);
+    }
+    for (i = 0; i < 16; ++i)
+        inout[i] += x[i];
+    OPENSSL_cleanse(x, sizeof(x));
+}
+
+static void scryptBlockMix(uint32_t *B_, uint32_t *B, uint64_t r)
+{
+    uint64_t i, j;
+    uint32_t X[16], *pB;
+
+    memcpy(X, B + (r * 2 - 1) * 16, sizeof(X));
+    pB = B;
+    for (i = 0; i < r * 2; i++) {
+        for (j = 0; j < 16; j++)
+            X[j] ^= *pB++;
+        salsa208_word_specification(X);
+        memcpy(B_ + (i / 2 + (i & 1) * r) * 16, X, sizeof(X));
+    }
+    OPENSSL_cleanse(X, sizeof(X));
+}
+
+static void scryptROMix(unsigned char *B, uint64_t r, uint64_t N,
+                        uint32_t *X, uint32_t *T, uint32_t *V)
+{
+    unsigned char *pB;
+    uint32_t *pV;
+    uint64_t i, k;
+
+    /* Convert from little endian input */
+    for (pV = V, i = 0, pB = B; i < 32 * r; i++, pV++) {
+        *pV = *pB++;
+        *pV |= *pB++ << 8;
+        *pV |= *pB++ << 16;
+        *pV |= (uint32_t)*pB++ << 24;
+    }
+
+    for (i = 1; i < N; i++, pV += 32 * r)
+        scryptBlockMix(pV, pV - 32 * r, r);
+
+    scryptBlockMix(X, V + (N - 1) * 32 * r, r);
+
+    for (i = 0; i < N; i++) {
+        uint32_t j;
+        j = X[16 * (2 * r - 1)] % N;
+        pV = V + 32 * r * j;
+        for (k = 0; k < 32 * r; k++)
+            T[k] = X[k] ^ *pV++;
+        scryptBlockMix(X, T, r);
+    }
+    /* Convert output to little endian */
+    for (i = 0, pB = B; i < 32 * r; i++) {
+        uint32_t xtmp = X[i];
+        *pB++ = xtmp & 0xff;
+        *pB++ = (xtmp >> 8) & 0xff;
+        *pB++ = (xtmp >> 16) & 0xff;
+        *pB++ = (xtmp >> 24) & 0xff;
+    }
+}
+
+#ifndef SIZE_MAX
+# define SIZE_MAX    ((size_t)-1)
+#endif
+
+/*
+ * Maximum power of two that will fit in uint64_t: this should work on
+ * most (all?) platforms.
+ */
+
+#define LOG2_UINT64_MAX         (sizeof(uint64_t) * 8 - 1)
+
+/*
+ * Maximum value of p * r:
+ * p <= ((2^32-1) * hLen) / MFLen =>
+ * p <= ((2^32-1) * 32) / (128 * r) =>
+ * p * r <= (2^30-1)
+ *
+ */
+
+#define SCRYPT_PR_MAX   ((1 << 30) - 1)
+
+/*
+ * Maximum permitted memory allow this to be overridden with Configuration
+ * option: e.g. -DSCRYPT_MAX_MEM=0 for maximum possible.
+ */
+
+#ifdef SCRYPT_MAX_MEM
+# if SCRYPT_MAX_MEM == 0
+#  undef SCRYPT_MAX_MEM
+/*
+ * Although we could theoretically allocate SIZE_MAX memory that would leave
+ * no memory available for anything else so set limit as half that.
+ */
+#  define SCRYPT_MAX_MEM (SIZE_MAX/2)
+# endif
+#else
+/* Default memory limit: 32 MB */
+# define SCRYPT_MAX_MEM  (1024 * 1024 * 32)
+#endif
+
+int EVP_PBE_scrypt(const char *pass, size_t passlen,
+                   const unsigned char *salt, size_t saltlen,
+                   uint64_t N, uint64_t r, uint64_t p, uint64_t maxmem,
+                   unsigned char *key, size_t keylen)
+{
+    int rv = 0;
+    unsigned char *B;
+    uint32_t *X, *V, *T;
+    uint64_t i, Blen, Vlen;
+
+    /* Sanity check parameters */
+    /* initial check, r,p must be non zero, N >= 2 and a power of 2 */
+    if (r == 0 || p == 0 || N < 2 || (N & (N - 1)))
+        return 0;
+    /* Check p * r < SCRYPT_PR_MAX avoiding overflow */
+    if (p > SCRYPT_PR_MAX / r) {
+        EVPerr(EVP_F_EVP_PBE_SCRYPT, EVP_R_MEMORY_LIMIT_EXCEEDED);
+        return 0;
+    }
+
+    /*
+     * Need to check N: if 2^(128 * r / 8) overflows limit this is
+     * automatically satisfied since N <= UINT64_MAX.
+     */
+
+    if (16 * r <= LOG2_UINT64_MAX) {
+        if (N >= (((uint64_t)1) << (16 * r))) {
+            EVPerr(EVP_F_EVP_PBE_SCRYPT, EVP_R_MEMORY_LIMIT_EXCEEDED);
+            return 0;
+        }
+    }
+
+    /* Memory checks: check total allocated buffer size fits in uint64_t */
+
+    /*
+     * B size in section 5 step 1.S
+     * Note: we know p * 128 * r < UINT64_MAX because we already checked
+     * p * r < SCRYPT_PR_MAX
+     */
+    Blen = p * 128 * r;
+    /*
+     * Yet we pass it as integer to PKCS5_PBKDF2_HMAC... [This would
+     * have to be revised when/if PKCS5_PBKDF2_HMAC accepts size_t.]
+     */
+    if (Blen > INT_MAX) {
+        EVPerr(EVP_F_EVP_PBE_SCRYPT, EVP_R_MEMORY_LIMIT_EXCEEDED);
+        return 0;
+    }
+
+    /*
+     * Check 32 * r * (N + 2) * sizeof(uint32_t) fits in uint64_t
+     * This is combined size V, X and T (section 4)
+     */
+    i = UINT64_MAX / (32 * sizeof(uint32_t));
+    if (N + 2 > i / r) {
+        EVPerr(EVP_F_EVP_PBE_SCRYPT, EVP_R_MEMORY_LIMIT_EXCEEDED);
+        return 0;
+    }
+    Vlen = 32 * r * (N + 2) * sizeof(uint32_t);
+
+    /* check total allocated size fits in uint64_t */
+    if (Blen > UINT64_MAX - Vlen) {
+        EVPerr(EVP_F_EVP_PBE_SCRYPT, EVP_R_MEMORY_LIMIT_EXCEEDED);
+        return 0;
+    }
+
+    if (maxmem == 0)
+        maxmem = SCRYPT_MAX_MEM;
+
+    /* Check that the maximum memory doesn't exceed a size_t limits */
+    if (maxmem > SIZE_MAX)
+        maxmem = SIZE_MAX;
+
+    if (Blen + Vlen > maxmem) {
+        EVPerr(EVP_F_EVP_PBE_SCRYPT, EVP_R_MEMORY_LIMIT_EXCEEDED);
+        return 0;
+    }
+
+    /* If no key return to indicate parameters are OK */
+    if (key == NULL)
+        return 1;
+
+    B = OPENSSL_malloc((size_t)(Blen + Vlen));
+    if (B == NULL) {
+        EVPerr(EVP_F_EVP_PBE_SCRYPT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    X = (uint32_t *)(B + Blen);
+    T = X + 32 * r;
+    V = T + 32 * r;
+    if (PKCS5_PBKDF2_HMAC(pass, passlen, salt, saltlen, 1, EVP_sha256(),
+                          (int)Blen, B) == 0)
+        goto err;
+
+    for (i = 0; i < p; i++)
+        scryptROMix(B + 128 * r * i, r, N, X, T, V);
+
+    if (PKCS5_PBKDF2_HMAC(pass, passlen, B, (int)Blen, 1, EVP_sha256(),
+                          keylen, key) == 0)
+        goto err;
+    rv = 1;
+ err:
+    if (rv == 0)
+        EVPerr(EVP_F_EVP_PBE_SCRYPT, EVP_R_PBKDF2_ERROR);
+
+    OPENSSL_clear_free(B, (size_t)(Blen + Vlen));
+    return rv;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/pmeth_fn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/pmeth_fn.c
new file mode 100644
index 000000000..de1c07e17
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/pmeth_fn.c
@@ -0,0 +1,297 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include "internal/evp_int.h"
+
+#define M_check_autoarg(ctx, arg, arglen, err) \
+    if (ctx->pmeth->flags & EVP_PKEY_FLAG_AUTOARGLEN) {           \
+        size_t pksize = (size_t)EVP_PKEY_size(ctx->pkey);         \
+                                                                  \
+        if (pksize == 0) {                                        \
+            EVPerr(err, EVP_R_INVALID_KEY); /*ckerr_ignore*/      \
+            return 0;                                             \
+        }                                                         \
+        if (!arg) {                                               \
+            *arglen = pksize;                                     \
+            return 1;                                             \
+        }                                                         \
+        if (*arglen < pksize) {                                   \
+            EVPerr(err, EVP_R_BUFFER_TOO_SMALL); /*ckerr_ignore*/ \
+            return 0;                                             \
+        }                                                         \
+    }
+
+int EVP_PKEY_sign_init(EVP_PKEY_CTX *ctx)
+{
+    int ret;
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->sign) {
+        EVPerr(EVP_F_EVP_PKEY_SIGN_INIT,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+    ctx->operation = EVP_PKEY_OP_SIGN;
+    if (!ctx->pmeth->sign_init)
+        return 1;
+    ret = ctx->pmeth->sign_init(ctx);
+    if (ret <= 0)
+        ctx->operation = EVP_PKEY_OP_UNDEFINED;
+    return ret;
+}
+
+int EVP_PKEY_sign(EVP_PKEY_CTX *ctx,
+                  unsigned char *sig, size_t *siglen,
+                  const unsigned char *tbs, size_t tbslen)
+{
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->sign) {
+        EVPerr(EVP_F_EVP_PKEY_SIGN,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+    if (ctx->operation != EVP_PKEY_OP_SIGN) {
+        EVPerr(EVP_F_EVP_PKEY_SIGN, EVP_R_OPERATON_NOT_INITIALIZED);
+        return -1;
+    }
+    M_check_autoarg(ctx, sig, siglen, EVP_F_EVP_PKEY_SIGN)
+        return ctx->pmeth->sign(ctx, sig, siglen, tbs, tbslen);
+}
+
+int EVP_PKEY_verify_init(EVP_PKEY_CTX *ctx)
+{
+    int ret;
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->verify) {
+        EVPerr(EVP_F_EVP_PKEY_VERIFY_INIT,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+    ctx->operation = EVP_PKEY_OP_VERIFY;
+    if (!ctx->pmeth->verify_init)
+        return 1;
+    ret = ctx->pmeth->verify_init(ctx);
+    if (ret <= 0)
+        ctx->operation = EVP_PKEY_OP_UNDEFINED;
+    return ret;
+}
+
+int EVP_PKEY_verify(EVP_PKEY_CTX *ctx,
+                    const unsigned char *sig, size_t siglen,
+                    const unsigned char *tbs, size_t tbslen)
+{
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->verify) {
+        EVPerr(EVP_F_EVP_PKEY_VERIFY,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+    if (ctx->operation != EVP_PKEY_OP_VERIFY) {
+        EVPerr(EVP_F_EVP_PKEY_VERIFY, EVP_R_OPERATON_NOT_INITIALIZED);
+        return -1;
+    }
+    return ctx->pmeth->verify(ctx, sig, siglen, tbs, tbslen);
+}
+
+int EVP_PKEY_verify_recover_init(EVP_PKEY_CTX *ctx)
+{
+    int ret;
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->verify_recover) {
+        EVPerr(EVP_F_EVP_PKEY_VERIFY_RECOVER_INIT,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+    ctx->operation = EVP_PKEY_OP_VERIFYRECOVER;
+    if (!ctx->pmeth->verify_recover_init)
+        return 1;
+    ret = ctx->pmeth->verify_recover_init(ctx);
+    if (ret <= 0)
+        ctx->operation = EVP_PKEY_OP_UNDEFINED;
+    return ret;
+}
+
+int EVP_PKEY_verify_recover(EVP_PKEY_CTX *ctx,
+                            unsigned char *rout, size_t *routlen,
+                            const unsigned char *sig, size_t siglen)
+{
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->verify_recover) {
+        EVPerr(EVP_F_EVP_PKEY_VERIFY_RECOVER,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+    if (ctx->operation != EVP_PKEY_OP_VERIFYRECOVER) {
+        EVPerr(EVP_F_EVP_PKEY_VERIFY_RECOVER, EVP_R_OPERATON_NOT_INITIALIZED);
+        return -1;
+    }
+    M_check_autoarg(ctx, rout, routlen, EVP_F_EVP_PKEY_VERIFY_RECOVER)
+        return ctx->pmeth->verify_recover(ctx, rout, routlen, sig, siglen);
+}
+
+int EVP_PKEY_encrypt_init(EVP_PKEY_CTX *ctx)
+{
+    int ret;
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->encrypt) {
+        EVPerr(EVP_F_EVP_PKEY_ENCRYPT_INIT,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+    ctx->operation = EVP_PKEY_OP_ENCRYPT;
+    if (!ctx->pmeth->encrypt_init)
+        return 1;
+    ret = ctx->pmeth->encrypt_init(ctx);
+    if (ret <= 0)
+        ctx->operation = EVP_PKEY_OP_UNDEFINED;
+    return ret;
+}
+
+int EVP_PKEY_encrypt(EVP_PKEY_CTX *ctx,
+                     unsigned char *out, size_t *outlen,
+                     const unsigned char *in, size_t inlen)
+{
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->encrypt) {
+        EVPerr(EVP_F_EVP_PKEY_ENCRYPT,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+    if (ctx->operation != EVP_PKEY_OP_ENCRYPT) {
+        EVPerr(EVP_F_EVP_PKEY_ENCRYPT, EVP_R_OPERATON_NOT_INITIALIZED);
+        return -1;
+    }
+    M_check_autoarg(ctx, out, outlen, EVP_F_EVP_PKEY_ENCRYPT)
+        return ctx->pmeth->encrypt(ctx, out, outlen, in, inlen);
+}
+
+int EVP_PKEY_decrypt_init(EVP_PKEY_CTX *ctx)
+{
+    int ret;
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->decrypt) {
+        EVPerr(EVP_F_EVP_PKEY_DECRYPT_INIT,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+    ctx->operation = EVP_PKEY_OP_DECRYPT;
+    if (!ctx->pmeth->decrypt_init)
+        return 1;
+    ret = ctx->pmeth->decrypt_init(ctx);
+    if (ret <= 0)
+        ctx->operation = EVP_PKEY_OP_UNDEFINED;
+    return ret;
+}
+
+int EVP_PKEY_decrypt(EVP_PKEY_CTX *ctx,
+                     unsigned char *out, size_t *outlen,
+                     const unsigned char *in, size_t inlen)
+{
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->decrypt) {
+        EVPerr(EVP_F_EVP_PKEY_DECRYPT,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+    if (ctx->operation != EVP_PKEY_OP_DECRYPT) {
+        EVPerr(EVP_F_EVP_PKEY_DECRYPT, EVP_R_OPERATON_NOT_INITIALIZED);
+        return -1;
+    }
+    M_check_autoarg(ctx, out, outlen, EVP_F_EVP_PKEY_DECRYPT)
+        return ctx->pmeth->decrypt(ctx, out, outlen, in, inlen);
+}
+
+int EVP_PKEY_derive_init(EVP_PKEY_CTX *ctx)
+{
+    int ret;
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->derive) {
+        EVPerr(EVP_F_EVP_PKEY_DERIVE_INIT,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+    ctx->operation = EVP_PKEY_OP_DERIVE;
+    if (!ctx->pmeth->derive_init)
+        return 1;
+    ret = ctx->pmeth->derive_init(ctx);
+    if (ret <= 0)
+        ctx->operation = EVP_PKEY_OP_UNDEFINED;
+    return ret;
+}
+
+int EVP_PKEY_derive_set_peer(EVP_PKEY_CTX *ctx, EVP_PKEY *peer)
+{
+    int ret;
+    if (!ctx || !ctx->pmeth
+        || !(ctx->pmeth->derive || ctx->pmeth->encrypt || ctx->pmeth->decrypt)
+        || !ctx->pmeth->ctrl) {
+        EVPerr(EVP_F_EVP_PKEY_DERIVE_SET_PEER,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+    if (ctx->operation != EVP_PKEY_OP_DERIVE
+        && ctx->operation != EVP_PKEY_OP_ENCRYPT
+        && ctx->operation != EVP_PKEY_OP_DECRYPT) {
+        EVPerr(EVP_F_EVP_PKEY_DERIVE_SET_PEER,
+               EVP_R_OPERATON_NOT_INITIALIZED);
+        return -1;
+    }
+
+    ret = ctx->pmeth->ctrl(ctx, EVP_PKEY_CTRL_PEER_KEY, 0, peer);
+
+    if (ret <= 0)
+        return ret;
+
+    if (ret == 2)
+        return 1;
+
+    if (!ctx->pkey) {
+        EVPerr(EVP_F_EVP_PKEY_DERIVE_SET_PEER, EVP_R_NO_KEY_SET);
+        return -1;
+    }
+
+    if (ctx->pkey->type != peer->type) {
+        EVPerr(EVP_F_EVP_PKEY_DERIVE_SET_PEER, EVP_R_DIFFERENT_KEY_TYPES);
+        return -1;
+    }
+
+    /*
+     * For clarity.  The error is if parameters in peer are
+     * present (!missing) but don't match.  EVP_PKEY_cmp_parameters may return
+     * 1 (match), 0 (don't match) and -2 (comparison is not defined).  -1
+     * (different key types) is impossible here because it is checked earlier.
+     * -2 is OK for us here, as well as 1, so we can check for 0 only.
+     */
+    if (!EVP_PKEY_missing_parameters(peer) &&
+        !EVP_PKEY_cmp_parameters(ctx->pkey, peer)) {
+        EVPerr(EVP_F_EVP_PKEY_DERIVE_SET_PEER, EVP_R_DIFFERENT_PARAMETERS);
+        return -1;
+    }
+
+    EVP_PKEY_free(ctx->peerkey);
+    ctx->peerkey = peer;
+
+    ret = ctx->pmeth->ctrl(ctx, EVP_PKEY_CTRL_PEER_KEY, 1, peer);
+
+    if (ret <= 0) {
+        ctx->peerkey = NULL;
+        return ret;
+    }
+
+    EVP_PKEY_up_ref(peer);
+    return 1;
+}
+
+int EVP_PKEY_derive(EVP_PKEY_CTX *ctx, unsigned char *key, size_t *pkeylen)
+{
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->derive) {
+        EVPerr(EVP_F_EVP_PKEY_DERIVE,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+    if (ctx->operation != EVP_PKEY_OP_DERIVE) {
+        EVPerr(EVP_F_EVP_PKEY_DERIVE, EVP_R_OPERATON_NOT_INITIALIZED);
+        return -1;
+    }
+    M_check_autoarg(ctx, key, pkeylen, EVP_F_EVP_PKEY_DERIVE)
+        return ctx->pmeth->derive(ctx, key, pkeylen);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/pmeth_gn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/pmeth_gn.c
new file mode 100644
index 000000000..e14965f33
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/pmeth_gn.c
@@ -0,0 +1,239 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include "internal/bn_int.h"
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+
+int EVP_PKEY_paramgen_init(EVP_PKEY_CTX *ctx)
+{
+    int ret;
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->paramgen) {
+        EVPerr(EVP_F_EVP_PKEY_PARAMGEN_INIT,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+    ctx->operation = EVP_PKEY_OP_PARAMGEN;
+    if (!ctx->pmeth->paramgen_init)
+        return 1;
+    ret = ctx->pmeth->paramgen_init(ctx);
+    if (ret <= 0)
+        ctx->operation = EVP_PKEY_OP_UNDEFINED;
+    return ret;
+}
+
+int EVP_PKEY_paramgen(EVP_PKEY_CTX *ctx, EVP_PKEY **ppkey)
+{
+    int ret;
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->paramgen) {
+        EVPerr(EVP_F_EVP_PKEY_PARAMGEN,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+
+    if (ctx->operation != EVP_PKEY_OP_PARAMGEN) {
+        EVPerr(EVP_F_EVP_PKEY_PARAMGEN, EVP_R_OPERATON_NOT_INITIALIZED);
+        return -1;
+    }
+
+    if (ppkey == NULL)
+        return -1;
+
+    if (*ppkey == NULL)
+        *ppkey = EVP_PKEY_new();
+
+    if (*ppkey == NULL) {
+        EVPerr(EVP_F_EVP_PKEY_PARAMGEN, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+
+    ret = ctx->pmeth->paramgen(ctx, *ppkey);
+    if (ret <= 0) {
+        EVP_PKEY_free(*ppkey);
+        *ppkey = NULL;
+    }
+    return ret;
+}
+
+int EVP_PKEY_keygen_init(EVP_PKEY_CTX *ctx)
+{
+    int ret;
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->keygen) {
+        EVPerr(EVP_F_EVP_PKEY_KEYGEN_INIT,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+    ctx->operation = EVP_PKEY_OP_KEYGEN;
+    if (!ctx->pmeth->keygen_init)
+        return 1;
+    ret = ctx->pmeth->keygen_init(ctx);
+    if (ret <= 0)
+        ctx->operation = EVP_PKEY_OP_UNDEFINED;
+    return ret;
+}
+
+int EVP_PKEY_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY **ppkey)
+{
+    int ret;
+
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->keygen) {
+        EVPerr(EVP_F_EVP_PKEY_KEYGEN,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+    if (ctx->operation != EVP_PKEY_OP_KEYGEN) {
+        EVPerr(EVP_F_EVP_PKEY_KEYGEN, EVP_R_OPERATON_NOT_INITIALIZED);
+        return -1;
+    }
+
+    if (ppkey == NULL)
+        return -1;
+
+    if (*ppkey == NULL)
+        *ppkey = EVP_PKEY_new();
+    if (*ppkey == NULL)
+        return -1;
+
+    ret = ctx->pmeth->keygen(ctx, *ppkey);
+    if (ret <= 0) {
+        EVP_PKEY_free(*ppkey);
+        *ppkey = NULL;
+    }
+    return ret;
+}
+
+void EVP_PKEY_CTX_set_cb(EVP_PKEY_CTX *ctx, EVP_PKEY_gen_cb *cb)
+{
+    ctx->pkey_gencb = cb;
+}
+
+EVP_PKEY_gen_cb *EVP_PKEY_CTX_get_cb(EVP_PKEY_CTX *ctx)
+{
+    return ctx->pkey_gencb;
+}
+
+/*
+ * "translation callback" to call EVP_PKEY_CTX callbacks using BN_GENCB style
+ * callbacks.
+ */
+
+static int trans_cb(int a, int b, BN_GENCB *gcb)
+{
+    EVP_PKEY_CTX *ctx = BN_GENCB_get_arg(gcb);
+    ctx->keygen_info[0] = a;
+    ctx->keygen_info[1] = b;
+    return ctx->pkey_gencb(ctx);
+}
+
+void evp_pkey_set_cb_translate(BN_GENCB *cb, EVP_PKEY_CTX *ctx)
+{
+    BN_GENCB_set(cb, trans_cb, ctx);
+}
+
+int EVP_PKEY_CTX_get_keygen_info(EVP_PKEY_CTX *ctx, int idx)
+{
+    if (idx == -1)
+        return ctx->keygen_info_count;
+    if (idx < 0 || idx > ctx->keygen_info_count)
+        return 0;
+    return ctx->keygen_info[idx];
+}
+
+EVP_PKEY *EVP_PKEY_new_mac_key(int type, ENGINE *e,
+                               const unsigned char *key, int keylen)
+{
+    EVP_PKEY_CTX *mac_ctx = NULL;
+    EVP_PKEY *mac_key = NULL;
+    mac_ctx = EVP_PKEY_CTX_new_id(type, e);
+    if (!mac_ctx)
+        return NULL;
+    if (EVP_PKEY_keygen_init(mac_ctx) <= 0)
+        goto merr;
+    if (EVP_PKEY_CTX_set_mac_key(mac_ctx, key, keylen) <= 0)
+        goto merr;
+    if (EVP_PKEY_keygen(mac_ctx, &mac_key) <= 0)
+        goto merr;
+ merr:
+    EVP_PKEY_CTX_free(mac_ctx);
+    return mac_key;
+}
+
+int EVP_PKEY_check(EVP_PKEY_CTX *ctx)
+{
+    EVP_PKEY *pkey = ctx->pkey;
+
+    if (pkey == NULL) {
+        EVPerr(EVP_F_EVP_PKEY_CHECK, EVP_R_NO_KEY_SET);
+        return 0;
+    }
+
+    /* call customized check function first */
+    if (ctx->pmeth->check != NULL)
+        return ctx->pmeth->check(pkey);
+
+    /* use default check function in ameth */
+    if (pkey->ameth == NULL || pkey->ameth->pkey_check == NULL) {
+        EVPerr(EVP_F_EVP_PKEY_CHECK,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+
+    return pkey->ameth->pkey_check(pkey);
+}
+
+int EVP_PKEY_public_check(EVP_PKEY_CTX *ctx)
+{
+    EVP_PKEY *pkey = ctx->pkey;
+
+    if (pkey == NULL) {
+        EVPerr(EVP_F_EVP_PKEY_PUBLIC_CHECK, EVP_R_NO_KEY_SET);
+        return 0;
+    }
+
+    /* call customized public key check function first */
+    if (ctx->pmeth->public_check != NULL)
+        return ctx->pmeth->public_check(pkey);
+
+    /* use default public key check function in ameth */
+    if (pkey->ameth == NULL || pkey->ameth->pkey_public_check == NULL) {
+        EVPerr(EVP_F_EVP_PKEY_PUBLIC_CHECK,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+
+    return pkey->ameth->pkey_public_check(pkey);
+}
+
+int EVP_PKEY_param_check(EVP_PKEY_CTX *ctx)
+{
+    EVP_PKEY *pkey = ctx->pkey;
+
+    if (pkey == NULL) {
+        EVPerr(EVP_F_EVP_PKEY_PARAM_CHECK, EVP_R_NO_KEY_SET);
+        return 0;
+    }
+
+    /* call customized param check function first */
+    if (ctx->pmeth->param_check != NULL)
+        return ctx->pmeth->param_check(pkey);
+
+    /* use default param check function in ameth */
+    if (pkey->ameth == NULL || pkey->ameth->pkey_param_check == NULL) {
+        EVPerr(EVP_F_EVP_PKEY_PARAM_CHECK,
+               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+    }
+
+    return pkey->ameth->pkey_param_check(pkey);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/evp/pmeth_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/pmeth_lib.c
new file mode 100644
index 000000000..7fbf895e0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/evp/pmeth_lib.c
@@ -0,0 +1,864 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include "internal/cryptlib.h"
+#include <openssl/engine.h>
+#include <openssl/evp.h>
+#include <openssl/x509v3.h>
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+#include "internal/numbers.h"
+
+typedef int sk_cmp_fn_type(const char *const *a, const char *const *b);
+
+static STACK_OF(EVP_PKEY_METHOD) *app_pkey_methods = NULL;
+
+/* This array needs to be in order of NIDs */
+static const EVP_PKEY_METHOD *standard_methods[] = {
+#ifndef OPENSSL_NO_RSA
+    &rsa_pkey_meth,
+#endif
+#ifndef OPENSSL_NO_DH
+    &dh_pkey_meth,
+#endif
+#ifndef OPENSSL_NO_DSA
+    &dsa_pkey_meth,
+#endif
+#ifndef OPENSSL_NO_EC
+    &ec_pkey_meth,
+#endif
+    &hmac_pkey_meth,
+#ifndef OPENSSL_NO_CMAC
+    &cmac_pkey_meth,
+#endif
+#ifndef OPENSSL_NO_RSA
+    &rsa_pss_pkey_meth,
+#endif
+#ifndef OPENSSL_NO_DH
+    &dhx_pkey_meth,
+#endif
+#ifndef OPENSSL_NO_SCRYPT
+    &scrypt_pkey_meth,
+#endif
+    &tls1_prf_pkey_meth,
+#ifndef OPENSSL_NO_EC
+    &ecx25519_pkey_meth,
+    &ecx448_pkey_meth,
+#endif
+    &hkdf_pkey_meth,
+#ifndef OPENSSL_NO_POLY1305
+    &poly1305_pkey_meth,
+#endif
+#ifndef OPENSSL_NO_SIPHASH
+    &siphash_pkey_meth,
+#endif
+#ifndef OPENSSL_NO_EC
+    &ed25519_pkey_meth,
+    &ed448_pkey_meth,
+#endif
+#ifndef OPENSSL_NO_SM2
+    &sm2_pkey_meth,
+#endif
+};
+
+DECLARE_OBJ_BSEARCH_CMP_FN(const EVP_PKEY_METHOD *, const EVP_PKEY_METHOD *,
+                           pmeth);
+
+static int pmeth_cmp(const EVP_PKEY_METHOD *const *a,
+                     const EVP_PKEY_METHOD *const *b)
+{
+    return ((*a)->pkey_id - (*b)->pkey_id);
+}
+
+IMPLEMENT_OBJ_BSEARCH_CMP_FN(const EVP_PKEY_METHOD *, const EVP_PKEY_METHOD *,
+                             pmeth);
+
+const EVP_PKEY_METHOD *EVP_PKEY_meth_find(int type)
+{
+    EVP_PKEY_METHOD tmp;
+    const EVP_PKEY_METHOD *t = &tmp, **ret;
+    tmp.pkey_id = type;
+    if (app_pkey_methods) {
+        int idx;
+        idx = sk_EVP_PKEY_METHOD_find(app_pkey_methods, &tmp);
+        if (idx >= 0)
+            return sk_EVP_PKEY_METHOD_value(app_pkey_methods, idx);
+    }
+    ret = OBJ_bsearch_pmeth(&t, standard_methods,
+                            sizeof(standard_methods) /
+                            sizeof(EVP_PKEY_METHOD *));
+    if (!ret || !*ret)
+        return NULL;
+    return *ret;
+}
+
+static EVP_PKEY_CTX *int_ctx_new(EVP_PKEY *pkey, ENGINE *e, int id)
+{
+    EVP_PKEY_CTX *ret;
+    const EVP_PKEY_METHOD *pmeth;
+
+    if (id == -1) {
+        if (pkey == NULL)
+            return 0;
+        id = pkey->type;
+    }
+#ifndef OPENSSL_NO_ENGINE
+    if (e == NULL && pkey != NULL)
+        e = pkey->pmeth_engine != NULL ? pkey->pmeth_engine : pkey->engine;
+    /* Try to find an ENGINE which implements this method */
+    if (e) {
+        if (!ENGINE_init(e)) {
+            EVPerr(EVP_F_INT_CTX_NEW, ERR_R_ENGINE_LIB);
+            return NULL;
+        }
+    } else {
+        e = ENGINE_get_pkey_meth_engine(id);
+    }
+
+    /*
+     * If an ENGINE handled this method look it up. Otherwise use internal
+     * tables.
+     */
+    if (e)
+        pmeth = ENGINE_get_pkey_meth(e, id);
+    else
+#endif
+        pmeth = EVP_PKEY_meth_find(id);
+
+    if (pmeth == NULL) {
+#ifndef OPENSSL_NO_ENGINE
+        ENGINE_finish(e);
+#endif
+        EVPerr(EVP_F_INT_CTX_NEW, EVP_R_UNSUPPORTED_ALGORITHM);
+        return NULL;
+    }
+
+    ret = OPENSSL_zalloc(sizeof(*ret));
+    if (ret == NULL) {
+#ifndef OPENSSL_NO_ENGINE
+        ENGINE_finish(e);
+#endif
+        EVPerr(EVP_F_INT_CTX_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    ret->engine = e;
+    ret->pmeth = pmeth;
+    ret->operation = EVP_PKEY_OP_UNDEFINED;
+    ret->pkey = pkey;
+    if (pkey != NULL)
+        EVP_PKEY_up_ref(pkey);
+
+    if (pmeth->init) {
+        if (pmeth->init(ret) <= 0) {
+            ret->pmeth = NULL;
+            EVP_PKEY_CTX_free(ret);
+            return NULL;
+        }
+    }
+
+    return ret;
+}
+
+EVP_PKEY_METHOD *EVP_PKEY_meth_new(int id, int flags)
+{
+    EVP_PKEY_METHOD *pmeth;
+
+    pmeth = OPENSSL_zalloc(sizeof(*pmeth));
+    if (pmeth == NULL) {
+        EVPerr(EVP_F_EVP_PKEY_METH_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    pmeth->pkey_id = id;
+    pmeth->flags = flags | EVP_PKEY_FLAG_DYNAMIC;
+    return pmeth;
+}
+
+void EVP_PKEY_meth_get0_info(int *ppkey_id, int *pflags,
+                             const EVP_PKEY_METHOD *meth)
+{
+    if (ppkey_id)
+        *ppkey_id = meth->pkey_id;
+    if (pflags)
+        *pflags = meth->flags;
+}
+
+void EVP_PKEY_meth_copy(EVP_PKEY_METHOD *dst, const EVP_PKEY_METHOD *src)
+{
+
+    dst->init = src->init;
+    dst->copy = src->copy;
+    dst->cleanup = src->cleanup;
+
+    dst->paramgen_init = src->paramgen_init;
+    dst->paramgen = src->paramgen;
+
+    dst->keygen_init = src->keygen_init;
+    dst->keygen = src->keygen;
+
+    dst->sign_init = src->sign_init;
+    dst->sign = src->sign;
+
+    dst->verify_init = src->verify_init;
+    dst->verify = src->verify;
+
+    dst->verify_recover_init = src->verify_recover_init;
+    dst->verify_recover = src->verify_recover;
+
+    dst->signctx_init = src->signctx_init;
+    dst->signctx = src->signctx;
+
+    dst->verifyctx_init = src->verifyctx_init;
+    dst->verifyctx = src->verifyctx;
+
+    dst->encrypt_init = src->encrypt_init;
+    dst->encrypt = src->encrypt;
+
+    dst->decrypt_init = src->decrypt_init;
+    dst->decrypt = src->decrypt;
+
+    dst->derive_init = src->derive_init;
+    dst->derive = src->derive;
+
+    dst->ctrl = src->ctrl;
+    dst->ctrl_str = src->ctrl_str;
+
+    dst->check = src->check;
+}
+
+void EVP_PKEY_meth_free(EVP_PKEY_METHOD *pmeth)
+{
+    if (pmeth && (pmeth->flags & EVP_PKEY_FLAG_DYNAMIC))
+        OPENSSL_free(pmeth);
+}
+
+EVP_PKEY_CTX *EVP_PKEY_CTX_new(EVP_PKEY *pkey, ENGINE *e)
+{
+    return int_ctx_new(pkey, e, -1);
+}
+
+EVP_PKEY_CTX *EVP_PKEY_CTX_new_id(int id, ENGINE *e)
+{
+    return int_ctx_new(NULL, e, id);
+}
+
+EVP_PKEY_CTX *EVP_PKEY_CTX_dup(EVP_PKEY_CTX *pctx)
+{
+    EVP_PKEY_CTX *rctx;
+    if (!pctx->pmeth || !pctx->pmeth->copy)
+        return NULL;
+#ifndef OPENSSL_NO_ENGINE
+    /* Make sure it's safe to copy a pkey context using an ENGINE */
+    if (pctx->engine && !ENGINE_init(pctx->engine)) {
+        EVPerr(EVP_F_EVP_PKEY_CTX_DUP, ERR_R_ENGINE_LIB);
+        return 0;
+    }
+#endif
+    rctx = OPENSSL_malloc(sizeof(*rctx));
+    if (rctx == NULL) {
+        EVPerr(EVP_F_EVP_PKEY_CTX_DUP, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    rctx->pmeth = pctx->pmeth;
+#ifndef OPENSSL_NO_ENGINE
+    rctx->engine = pctx->engine;
+#endif
+
+    if (pctx->pkey)
+        EVP_PKEY_up_ref(pctx->pkey);
+
+    rctx->pkey = pctx->pkey;
+
+    if (pctx->peerkey)
+        EVP_PKEY_up_ref(pctx->peerkey);
+
+    rctx->peerkey = pctx->peerkey;
+
+    rctx->data = NULL;
+    rctx->app_data = NULL;
+    rctx->operation = pctx->operation;
+
+    if (pctx->pmeth->copy(rctx, pctx) > 0)
+        return rctx;
+
+    rctx->pmeth = NULL;
+    EVP_PKEY_CTX_free(rctx);
+    return NULL;
+
+}
+
+int EVP_PKEY_meth_add0(const EVP_PKEY_METHOD *pmeth)
+{
+    if (app_pkey_methods == NULL) {
+        app_pkey_methods = sk_EVP_PKEY_METHOD_new(pmeth_cmp);
+        if (app_pkey_methods == NULL){
+            EVPerr(EVP_F_EVP_PKEY_METH_ADD0, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+    }
+    if (!sk_EVP_PKEY_METHOD_push(app_pkey_methods, pmeth)) {
+        EVPerr(EVP_F_EVP_PKEY_METH_ADD0, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    sk_EVP_PKEY_METHOD_sort(app_pkey_methods);
+    return 1;
+}
+
+void evp_app_cleanup_int(void)
+{
+    if (app_pkey_methods != NULL)
+        sk_EVP_PKEY_METHOD_pop_free(app_pkey_methods, EVP_PKEY_meth_free);
+}
+
+int EVP_PKEY_meth_remove(const EVP_PKEY_METHOD *pmeth)
+{
+    const EVP_PKEY_METHOD *ret;
+
+    ret = sk_EVP_PKEY_METHOD_delete_ptr(app_pkey_methods, pmeth);
+
+    return ret == NULL ? 0 : 1;
+}
+
+size_t EVP_PKEY_meth_get_count(void)
+{
+    size_t rv = OSSL_NELEM(standard_methods);
+
+    if (app_pkey_methods)
+        rv += sk_EVP_PKEY_METHOD_num(app_pkey_methods);
+    return rv;
+}
+
+const EVP_PKEY_METHOD *EVP_PKEY_meth_get0(size_t idx)
+{
+    if (idx < OSSL_NELEM(standard_methods))
+        return standard_methods[idx];
+    if (app_pkey_methods == NULL)
+        return NULL;
+    idx -= OSSL_NELEM(standard_methods);
+    if (idx >= (size_t)sk_EVP_PKEY_METHOD_num(app_pkey_methods))
+        return NULL;
+    return sk_EVP_PKEY_METHOD_value(app_pkey_methods, idx);
+}
+
+void EVP_PKEY_CTX_free(EVP_PKEY_CTX *ctx)
+{
+    if (ctx == NULL)
+        return;
+    if (ctx->pmeth && ctx->pmeth->cleanup)
+        ctx->pmeth->cleanup(ctx);
+    EVP_PKEY_free(ctx->pkey);
+    EVP_PKEY_free(ctx->peerkey);
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_finish(ctx->engine);
+#endif
+    OPENSSL_free(ctx);
+}
+
+int EVP_PKEY_CTX_ctrl(EVP_PKEY_CTX *ctx, int keytype, int optype,
+                      int cmd, int p1, void *p2)
+{
+    int ret;
+
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->ctrl) {
+        EVPerr(EVP_F_EVP_PKEY_CTX_CTRL, EVP_R_COMMAND_NOT_SUPPORTED);
+        return -2;
+    }
+    if ((keytype != -1) && (ctx->pmeth->pkey_id != keytype))
+        return -1;
+
+    /* Skip the operation checks since this is called in a very early stage */
+    if (ctx->pmeth->digest_custom != NULL)
+        goto doit;
+
+    if (ctx->operation == EVP_PKEY_OP_UNDEFINED) {
+        EVPerr(EVP_F_EVP_PKEY_CTX_CTRL, EVP_R_NO_OPERATION_SET);
+        return -1;
+    }
+
+    if ((optype != -1) && !(ctx->operation & optype)) {
+        EVPerr(EVP_F_EVP_PKEY_CTX_CTRL, EVP_R_INVALID_OPERATION);
+        return -1;
+    }
+
+ doit:
+    ret = ctx->pmeth->ctrl(ctx, cmd, p1, p2);
+
+    if (ret == -2)
+        EVPerr(EVP_F_EVP_PKEY_CTX_CTRL, EVP_R_COMMAND_NOT_SUPPORTED);
+
+    return ret;
+}
+
+int EVP_PKEY_CTX_ctrl_uint64(EVP_PKEY_CTX *ctx, int keytype, int optype,
+                             int cmd, uint64_t value)
+{
+    return EVP_PKEY_CTX_ctrl(ctx, keytype, optype, cmd, 0, &value);
+}
+
+int EVP_PKEY_CTX_ctrl_str(EVP_PKEY_CTX *ctx,
+                          const char *name, const char *value)
+{
+    if (!ctx || !ctx->pmeth || !ctx->pmeth->ctrl_str) {
+        EVPerr(EVP_F_EVP_PKEY_CTX_CTRL_STR, EVP_R_COMMAND_NOT_SUPPORTED);
+        return -2;
+    }
+    if (strcmp(name, "digest") == 0)
+        return EVP_PKEY_CTX_md(ctx, EVP_PKEY_OP_TYPE_SIG, EVP_PKEY_CTRL_MD,
+                               value);
+    return ctx->pmeth->ctrl_str(ctx, name, value);
+}
+
+/* Utility functions to send a string of hex string to a ctrl */
+
+int EVP_PKEY_CTX_str2ctrl(EVP_PKEY_CTX *ctx, int cmd, const char *str)
+{
+    size_t len;
+
+    len = strlen(str);
+    if (len > INT_MAX)
+        return -1;
+    return ctx->pmeth->ctrl(ctx, cmd, len, (void *)str);
+}
+
+int EVP_PKEY_CTX_hex2ctrl(EVP_PKEY_CTX *ctx, int cmd, const char *hex)
+{
+    unsigned char *bin;
+    long binlen;
+    int rv = -1;
+
+    bin = OPENSSL_hexstr2buf(hex, &binlen);
+    if (bin == NULL)
+        return 0;
+    if (binlen <= INT_MAX)
+        rv = ctx->pmeth->ctrl(ctx, cmd, binlen, bin);
+    OPENSSL_free(bin);
+    return rv;
+}
+
+/* Pass a message digest to a ctrl */
+int EVP_PKEY_CTX_md(EVP_PKEY_CTX *ctx, int optype, int cmd, const char *md)
+{
+    const EVP_MD *m;
+
+    if (md == NULL || (m = EVP_get_digestbyname(md)) == NULL) {
+        EVPerr(EVP_F_EVP_PKEY_CTX_MD, EVP_R_INVALID_DIGEST);
+        return 0;
+    }
+    return EVP_PKEY_CTX_ctrl(ctx, -1, optype, cmd, 0, (void *)m);
+}
+
+int EVP_PKEY_CTX_get_operation(EVP_PKEY_CTX *ctx)
+{
+    return ctx->operation;
+}
+
+void EVP_PKEY_CTX_set0_keygen_info(EVP_PKEY_CTX *ctx, int *dat, int datlen)
+{
+    ctx->keygen_info = dat;
+    ctx->keygen_info_count = datlen;
+}
+
+void EVP_PKEY_CTX_set_data(EVP_PKEY_CTX *ctx, void *data)
+{
+    ctx->data = data;
+}
+
+void *EVP_PKEY_CTX_get_data(EVP_PKEY_CTX *ctx)
+{
+    return ctx->data;
+}
+
+EVP_PKEY *EVP_PKEY_CTX_get0_pkey(EVP_PKEY_CTX *ctx)
+{
+    return ctx->pkey;
+}
+
+EVP_PKEY *EVP_PKEY_CTX_get0_peerkey(EVP_PKEY_CTX *ctx)
+{
+    return ctx->peerkey;
+}
+
+void EVP_PKEY_CTX_set_app_data(EVP_PKEY_CTX *ctx, void *data)
+{
+    ctx->app_data = data;
+}
+
+void *EVP_PKEY_CTX_get_app_data(EVP_PKEY_CTX *ctx)
+{
+    return ctx->app_data;
+}
+
+void EVP_PKEY_meth_set_init(EVP_PKEY_METHOD *pmeth,
+                            int (*init) (EVP_PKEY_CTX *ctx))
+{
+    pmeth->init = init;
+}
+
+void EVP_PKEY_meth_set_copy(EVP_PKEY_METHOD *pmeth,
+                            int (*copy) (EVP_PKEY_CTX *dst,
+                                         EVP_PKEY_CTX *src))
+{
+    pmeth->copy = copy;
+}
+
+void EVP_PKEY_meth_set_cleanup(EVP_PKEY_METHOD *pmeth,
+                               void (*cleanup) (EVP_PKEY_CTX *ctx))
+{
+    pmeth->cleanup = cleanup;
+}
+
+void EVP_PKEY_meth_set_paramgen(EVP_PKEY_METHOD *pmeth,
+                                int (*paramgen_init) (EVP_PKEY_CTX *ctx),
+                                int (*paramgen) (EVP_PKEY_CTX *ctx,
+                                                 EVP_PKEY *pkey))
+{
+    pmeth->paramgen_init = paramgen_init;
+    pmeth->paramgen = paramgen;
+}
+
+void EVP_PKEY_meth_set_keygen(EVP_PKEY_METHOD *pmeth,
+                              int (*keygen_init) (EVP_PKEY_CTX *ctx),
+                              int (*keygen) (EVP_PKEY_CTX *ctx,
+                                             EVP_PKEY *pkey))
+{
+    pmeth->keygen_init = keygen_init;
+    pmeth->keygen = keygen;
+}
+
+void EVP_PKEY_meth_set_sign(EVP_PKEY_METHOD *pmeth,
+                            int (*sign_init) (EVP_PKEY_CTX *ctx),
+                            int (*sign) (EVP_PKEY_CTX *ctx,
+                                         unsigned char *sig, size_t *siglen,
+                                         const unsigned char *tbs,
+                                         size_t tbslen))
+{
+    pmeth->sign_init = sign_init;
+    pmeth->sign = sign;
+}
+
+void EVP_PKEY_meth_set_verify(EVP_PKEY_METHOD *pmeth,
+                              int (*verify_init) (EVP_PKEY_CTX *ctx),
+                              int (*verify) (EVP_PKEY_CTX *ctx,
+                                             const unsigned char *sig,
+                                             size_t siglen,
+                                             const unsigned char *tbs,
+                                             size_t tbslen))
+{
+    pmeth->verify_init = verify_init;
+    pmeth->verify = verify;
+}
+
+void EVP_PKEY_meth_set_verify_recover(EVP_PKEY_METHOD *pmeth,
+                                      int (*verify_recover_init) (EVP_PKEY_CTX
+                                                                  *ctx),
+                                      int (*verify_recover) (EVP_PKEY_CTX
+                                                             *ctx,
+                                                             unsigned char
+                                                             *sig,
+                                                             size_t *siglen,
+                                                             const unsigned
+                                                             char *tbs,
+                                                             size_t tbslen))
+{
+    pmeth->verify_recover_init = verify_recover_init;
+    pmeth->verify_recover = verify_recover;
+}
+
+void EVP_PKEY_meth_set_signctx(EVP_PKEY_METHOD *pmeth,
+                               int (*signctx_init) (EVP_PKEY_CTX *ctx,
+                                                    EVP_MD_CTX *mctx),
+                               int (*signctx) (EVP_PKEY_CTX *ctx,
+                                               unsigned char *sig,
+                                               size_t *siglen,
+                                               EVP_MD_CTX *mctx))
+{
+    pmeth->signctx_init = signctx_init;
+    pmeth->signctx = signctx;
+}
+
+void EVP_PKEY_meth_set_verifyctx(EVP_PKEY_METHOD *pmeth,
+                                 int (*verifyctx_init) (EVP_PKEY_CTX *ctx,
+                                                        EVP_MD_CTX *mctx),
+                                 int (*verifyctx) (EVP_PKEY_CTX *ctx,
+                                                   const unsigned char *sig,
+                                                   int siglen,
+                                                   EVP_MD_CTX *mctx))
+{
+    pmeth->verifyctx_init = verifyctx_init;
+    pmeth->verifyctx = verifyctx;
+}
+
+void EVP_PKEY_meth_set_encrypt(EVP_PKEY_METHOD *pmeth,
+                               int (*encrypt_init) (EVP_PKEY_CTX *ctx),
+                               int (*encryptfn) (EVP_PKEY_CTX *ctx,
+                                                 unsigned char *out,
+                                                 size_t *outlen,
+                                                 const unsigned char *in,
+                                                 size_t inlen))
+{
+    pmeth->encrypt_init = encrypt_init;
+    pmeth->encrypt = encryptfn;
+}
+
+void EVP_PKEY_meth_set_decrypt(EVP_PKEY_METHOD *pmeth,
+                               int (*decrypt_init) (EVP_PKEY_CTX *ctx),
+                               int (*decrypt) (EVP_PKEY_CTX *ctx,
+                                               unsigned char *out,
+                                               size_t *outlen,
+                                               const unsigned char *in,
+                                               size_t inlen))
+{
+    pmeth->decrypt_init = decrypt_init;
+    pmeth->decrypt = decrypt;
+}
+
+void EVP_PKEY_meth_set_derive(EVP_PKEY_METHOD *pmeth,
+                              int (*derive_init) (EVP_PKEY_CTX *ctx),
+                              int (*derive) (EVP_PKEY_CTX *ctx,
+                                             unsigned char *key,
+                                             size_t *keylen))
+{
+    pmeth->derive_init = derive_init;
+    pmeth->derive = derive;
+}
+
+void EVP_PKEY_meth_set_ctrl(EVP_PKEY_METHOD *pmeth,
+                            int (*ctrl) (EVP_PKEY_CTX *ctx, int type, int p1,
+                                         void *p2),
+                            int (*ctrl_str) (EVP_PKEY_CTX *ctx,
+                                             const char *type,
+                                             const char *value))
+{
+    pmeth->ctrl = ctrl;
+    pmeth->ctrl_str = ctrl_str;
+}
+
+void EVP_PKEY_meth_set_check(EVP_PKEY_METHOD *pmeth,
+                             int (*check) (EVP_PKEY *pkey))
+{
+    pmeth->check = check;
+}
+
+void EVP_PKEY_meth_set_public_check(EVP_PKEY_METHOD *pmeth,
+                                    int (*check) (EVP_PKEY *pkey))
+{
+    pmeth->public_check = check;
+}
+
+void EVP_PKEY_meth_set_param_check(EVP_PKEY_METHOD *pmeth,
+                                   int (*check) (EVP_PKEY *pkey))
+{
+    pmeth->param_check = check;
+}
+
+void EVP_PKEY_meth_set_digest_custom(EVP_PKEY_METHOD *pmeth,
+                                     int (*digest_custom) (EVP_PKEY_CTX *ctx,
+                                                           EVP_MD_CTX *mctx))
+{
+    pmeth->digest_custom = digest_custom;
+}
+
+void EVP_PKEY_meth_get_init(const EVP_PKEY_METHOD *pmeth,
+                            int (**pinit) (EVP_PKEY_CTX *ctx))
+{
+    *pinit = pmeth->init;
+}
+
+void EVP_PKEY_meth_get_copy(const EVP_PKEY_METHOD *pmeth,
+                            int (**pcopy) (EVP_PKEY_CTX *dst,
+                                           EVP_PKEY_CTX *src))
+{
+    *pcopy = pmeth->copy;
+}
+
+void EVP_PKEY_meth_get_cleanup(const EVP_PKEY_METHOD *pmeth,
+                               void (**pcleanup) (EVP_PKEY_CTX *ctx))
+{
+    *pcleanup = pmeth->cleanup;
+}
+
+void EVP_PKEY_meth_get_paramgen(const EVP_PKEY_METHOD *pmeth,
+                                int (**pparamgen_init) (EVP_PKEY_CTX *ctx),
+                                int (**pparamgen) (EVP_PKEY_CTX *ctx,
+                                                   EVP_PKEY *pkey))
+{
+    if (pparamgen_init)
+        *pparamgen_init = pmeth->paramgen_init;
+    if (pparamgen)
+        *pparamgen = pmeth->paramgen;
+}
+
+void EVP_PKEY_meth_get_keygen(const EVP_PKEY_METHOD *pmeth,
+                              int (**pkeygen_init) (EVP_PKEY_CTX *ctx),
+                              int (**pkeygen) (EVP_PKEY_CTX *ctx,
+                                               EVP_PKEY *pkey))
+{
+    if (pkeygen_init)
+        *pkeygen_init = pmeth->keygen_init;
+    if (pkeygen)
+        *pkeygen = pmeth->keygen;
+}
+
+void EVP_PKEY_meth_get_sign(const EVP_PKEY_METHOD *pmeth,
+                            int (**psign_init) (EVP_PKEY_CTX *ctx),
+                            int (**psign) (EVP_PKEY_CTX *ctx,
+                                           unsigned char *sig, size_t *siglen,
+                                           const unsigned char *tbs,
+                                           size_t tbslen))
+{
+    if (psign_init)
+        *psign_init = pmeth->sign_init;
+    if (psign)
+        *psign = pmeth->sign;
+}
+
+void EVP_PKEY_meth_get_verify(const EVP_PKEY_METHOD *pmeth,
+                              int (**pverify_init) (EVP_PKEY_CTX *ctx),
+                              int (**pverify) (EVP_PKEY_CTX *ctx,
+                                               const unsigned char *sig,
+                                               size_t siglen,
+                                               const unsigned char *tbs,
+                                               size_t tbslen))
+{
+    if (pverify_init)
+        *pverify_init = pmeth->verify_init;
+    if (pverify)
+        *pverify = pmeth->verify;
+}
+
+void EVP_PKEY_meth_get_verify_recover(const EVP_PKEY_METHOD *pmeth,
+                                      int (**pverify_recover_init) (EVP_PKEY_CTX
+                                                                    *ctx),
+                                      int (**pverify_recover) (EVP_PKEY_CTX
+                                                               *ctx,
+                                                               unsigned char
+                                                               *sig,
+                                                               size_t *siglen,
+                                                               const unsigned
+                                                               char *tbs,
+                                                               size_t tbslen))
+{
+    if (pverify_recover_init)
+        *pverify_recover_init = pmeth->verify_recover_init;
+    if (pverify_recover)
+        *pverify_recover = pmeth->verify_recover;
+}
+
+void EVP_PKEY_meth_get_signctx(const EVP_PKEY_METHOD *pmeth,
+                               int (**psignctx_init) (EVP_PKEY_CTX *ctx,
+                                                      EVP_MD_CTX *mctx),
+                               int (**psignctx) (EVP_PKEY_CTX *ctx,
+                                                 unsigned char *sig,
+                                                 size_t *siglen,
+                                                 EVP_MD_CTX *mctx))
+{
+    if (psignctx_init)
+        *psignctx_init = pmeth->signctx_init;
+    if (psignctx)
+        *psignctx = pmeth->signctx;
+}
+
+void EVP_PKEY_meth_get_verifyctx(const EVP_PKEY_METHOD *pmeth,
+                                 int (**pverifyctx_init) (EVP_PKEY_CTX *ctx,
+                                                          EVP_MD_CTX *mctx),
+                                 int (**pverifyctx) (EVP_PKEY_CTX *ctx,
+                                                     const unsigned char *sig,
+                                                     int siglen,
+                                                     EVP_MD_CTX *mctx))
+{
+    if (pverifyctx_init)
+        *pverifyctx_init = pmeth->verifyctx_init;
+    if (pverifyctx)
+        *pverifyctx = pmeth->verifyctx;
+}
+
+void EVP_PKEY_meth_get_encrypt(const EVP_PKEY_METHOD *pmeth,
+                               int (**pencrypt_init) (EVP_PKEY_CTX *ctx),
+                               int (**pencryptfn) (EVP_PKEY_CTX *ctx,
+                                                   unsigned char *out,
+                                                   size_t *outlen,
+                                                   const unsigned char *in,
+                                                   size_t inlen))
+{
+    if (pencrypt_init)
+        *pencrypt_init = pmeth->encrypt_init;
+    if (pencryptfn)
+        *pencryptfn = pmeth->encrypt;
+}
+
+void EVP_PKEY_meth_get_decrypt(const EVP_PKEY_METHOD *pmeth,
+                               int (**pdecrypt_init) (EVP_PKEY_CTX *ctx),
+                               int (**pdecrypt) (EVP_PKEY_CTX *ctx,
+                                                 unsigned char *out,
+                                                 size_t *outlen,
+                                                 const unsigned char *in,
+                                                 size_t inlen))
+{
+    if (pdecrypt_init)
+        *pdecrypt_init = pmeth->decrypt_init;
+    if (pdecrypt)
+        *pdecrypt = pmeth->decrypt;
+}
+
+void EVP_PKEY_meth_get_derive(const EVP_PKEY_METHOD *pmeth,
+                              int (**pderive_init) (EVP_PKEY_CTX *ctx),
+                              int (**pderive) (EVP_PKEY_CTX *ctx,
+                                               unsigned char *key,
+                                               size_t *keylen))
+{
+    if (pderive_init)
+        *pderive_init = pmeth->derive_init;
+    if (pderive)
+        *pderive = pmeth->derive;
+}
+
+void EVP_PKEY_meth_get_ctrl(const EVP_PKEY_METHOD *pmeth,
+                            int (**pctrl) (EVP_PKEY_CTX *ctx, int type, int p1,
+                                           void *p2),
+                            int (**pctrl_str) (EVP_PKEY_CTX *ctx,
+                                               const char *type,
+                                               const char *value))
+{
+    if (pctrl)
+        *pctrl = pmeth->ctrl;
+    if (pctrl_str)
+        *pctrl_str = pmeth->ctrl_str;
+}
+
+void EVP_PKEY_meth_get_check(const EVP_PKEY_METHOD *pmeth,
+                             int (**pcheck) (EVP_PKEY *pkey))
+{
+    if (pcheck != NULL)
+        *pcheck = pmeth->check;
+}
+
+void EVP_PKEY_meth_get_public_check(const EVP_PKEY_METHOD *pmeth,
+                                    int (**pcheck) (EVP_PKEY *pkey))
+{
+    if (pcheck != NULL)
+        *pcheck = pmeth->public_check;
+}
+
+void EVP_PKEY_meth_get_param_check(const EVP_PKEY_METHOD *pmeth,
+                                   int (**pcheck) (EVP_PKEY *pkey))
+{
+    if (pcheck != NULL)
+        *pcheck = pmeth->param_check;
+}
+
+void EVP_PKEY_meth_get_digest_custom(EVP_PKEY_METHOD *pmeth,
+                                     int (**pdigest_custom) (EVP_PKEY_CTX *ctx,
+                                                             EVP_MD_CTX *mctx))
+{
+    if (pdigest_custom != NULL)
+        *pdigest_custom = pmeth->digest_custom;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ex_data.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ex_data.c
new file mode 100644
index 000000000..08dc7c407
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ex_data.c
@@ -0,0 +1,399 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib_int.h"
+#include "internal/thread_once.h"
+
+/*
+ * Each structure type (sometimes called a class), that supports
+ * exdata has a stack of callbacks for each instance.
+ */
+struct ex_callback_st {
+    long argl;                  /* Arbitrary long */
+    void *argp;                 /* Arbitrary void * */
+    CRYPTO_EX_new *new_func;
+    CRYPTO_EX_free *free_func;
+    CRYPTO_EX_dup *dup_func;
+};
+
+/*
+ * The state for each class.  This could just be a typedef, but
+ * a structure allows future changes.
+ */
+typedef struct ex_callbacks_st {
+    STACK_OF(EX_CALLBACK) *meth;
+} EX_CALLBACKS;
+
+static EX_CALLBACKS ex_data[CRYPTO_EX_INDEX__COUNT];
+
+static CRYPTO_RWLOCK *ex_data_lock = NULL;
+static CRYPTO_ONCE ex_data_init = CRYPTO_ONCE_STATIC_INIT;
+
+DEFINE_RUN_ONCE_STATIC(do_ex_data_init)
+{
+    if (!OPENSSL_init_crypto(0, NULL))
+        return 0;
+    ex_data_lock = CRYPTO_THREAD_lock_new();
+    return ex_data_lock != NULL;
+}
+
+/*
+ * Return the EX_CALLBACKS from the |ex_data| array that corresponds to
+ * a given class.  On success, *holds the lock.*
+ */
+static EX_CALLBACKS *get_and_lock(int class_index)
+{
+    EX_CALLBACKS *ip;
+
+    if (class_index < 0 || class_index >= CRYPTO_EX_INDEX__COUNT) {
+        CRYPTOerr(CRYPTO_F_GET_AND_LOCK, ERR_R_PASSED_INVALID_ARGUMENT);
+        return NULL;
+    }
+
+    if (!RUN_ONCE(&ex_data_init, do_ex_data_init)) {
+        CRYPTOerr(CRYPTO_F_GET_AND_LOCK, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if (ex_data_lock == NULL) {
+        /*
+         * This can happen in normal operation when using CRYPTO_mem_leaks().
+         * The CRYPTO_mem_leaks() function calls OPENSSL_cleanup() which cleans
+         * up the locks. Subsequently the BIO that CRYPTO_mem_leaks() uses gets
+         * freed, which also attempts to free the ex_data. However
+         * CRYPTO_mem_leaks() ensures that the ex_data is freed early (i.e.
+         * before OPENSSL_cleanup() is called), so if we get here we can safely
+         * ignore this operation. We just treat it as an error.
+         */
+         return NULL;
+    }
+
+    ip = &ex_data[class_index];
+    CRYPTO_THREAD_write_lock(ex_data_lock);
+    return ip;
+}
+
+static void cleanup_cb(EX_CALLBACK *funcs)
+{
+    OPENSSL_free(funcs);
+}
+
+/*
+ * Release all "ex_data" state to prevent memory leaks. This can't be made
+ * thread-safe without overhauling a lot of stuff, and shouldn't really be
+ * called under potential race-conditions anyway (it's for program shutdown
+ * after all).
+ */
+void crypto_cleanup_all_ex_data_int(void)
+{
+    int i;
+
+    for (i = 0; i < CRYPTO_EX_INDEX__COUNT; ++i) {
+        EX_CALLBACKS *ip = &ex_data[i];
+
+        sk_EX_CALLBACK_pop_free(ip->meth, cleanup_cb);
+        ip->meth = NULL;
+    }
+
+    CRYPTO_THREAD_lock_free(ex_data_lock);
+    ex_data_lock = NULL;
+}
+
+
+/*
+ * Unregister a new index by replacing the callbacks with no-ops.
+ * Any in-use instances are leaked.
+ */
+static void dummy_new(void *parent, void *ptr, CRYPTO_EX_DATA *ad, int idx,
+                     long argl, void *argp)
+{
+}
+
+static void dummy_free(void *parent, void *ptr, CRYPTO_EX_DATA *ad, int idx,
+                       long argl, void *argp)
+{
+}
+
+static int dummy_dup(CRYPTO_EX_DATA *to, const CRYPTO_EX_DATA *from,
+                     void *from_d, int idx,
+                     long argl, void *argp)
+{
+    return 1;
+}
+
+int CRYPTO_free_ex_index(int class_index, int idx)
+{
+    EX_CALLBACKS *ip = get_and_lock(class_index);
+    EX_CALLBACK *a;
+    int toret = 0;
+
+    if (ip == NULL)
+        return 0;
+    if (idx < 0 || idx >= sk_EX_CALLBACK_num(ip->meth))
+        goto err;
+    a = sk_EX_CALLBACK_value(ip->meth, idx);
+    if (a == NULL)
+        goto err;
+    a->new_func = dummy_new;
+    a->dup_func = dummy_dup;
+    a->free_func = dummy_free;
+    toret = 1;
+err:
+    CRYPTO_THREAD_unlock(ex_data_lock);
+    return toret;
+}
+
+/*
+ * Register a new index.
+ */
+int CRYPTO_get_ex_new_index(int class_index, long argl, void *argp,
+                            CRYPTO_EX_new *new_func, CRYPTO_EX_dup *dup_func,
+                            CRYPTO_EX_free *free_func)
+{
+    int toret = -1;
+    EX_CALLBACK *a;
+    EX_CALLBACKS *ip = get_and_lock(class_index);
+
+    if (ip == NULL)
+        return -1;
+
+    if (ip->meth == NULL) {
+        ip->meth = sk_EX_CALLBACK_new_null();
+        /* We push an initial value on the stack because the SSL
+         * "app_data" routines use ex_data index zero.  See RT 3710. */
+        if (ip->meth == NULL
+            || !sk_EX_CALLBACK_push(ip->meth, NULL)) {
+            CRYPTOerr(CRYPTO_F_CRYPTO_GET_EX_NEW_INDEX, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+
+    a = (EX_CALLBACK *)OPENSSL_malloc(sizeof(*a));
+    if (a == NULL) {
+        CRYPTOerr(CRYPTO_F_CRYPTO_GET_EX_NEW_INDEX, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    a->argl = argl;
+    a->argp = argp;
+    a->new_func = new_func;
+    a->dup_func = dup_func;
+    a->free_func = free_func;
+
+    if (!sk_EX_CALLBACK_push(ip->meth, NULL)) {
+        CRYPTOerr(CRYPTO_F_CRYPTO_GET_EX_NEW_INDEX, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(a);
+        goto err;
+    }
+    toret = sk_EX_CALLBACK_num(ip->meth) - 1;
+    (void)sk_EX_CALLBACK_set(ip->meth, toret, a);
+
+ err:
+    CRYPTO_THREAD_unlock(ex_data_lock);
+    return toret;
+}
+
+/*
+ * Initialise a new CRYPTO_EX_DATA for use in a particular class - including
+ * calling new() callbacks for each index in the class used by this variable
+ * Thread-safe by copying a class's array of "EX_CALLBACK" entries
+ * in the lock, then using them outside the lock. Note this only applies
+ * to the global "ex_data" state (ie. class definitions), not 'ad' itself.
+ */
+int CRYPTO_new_ex_data(int class_index, void *obj, CRYPTO_EX_DATA *ad)
+{
+    int mx, i;
+    void *ptr;
+    EX_CALLBACK **storage = NULL;
+    EX_CALLBACK *stack[10];
+    EX_CALLBACKS *ip = get_and_lock(class_index);
+
+    if (ip == NULL)
+        return 0;
+
+    ad->sk = NULL;
+
+    mx = sk_EX_CALLBACK_num(ip->meth);
+    if (mx > 0) {
+        if (mx < (int)OSSL_NELEM(stack))
+            storage = stack;
+        else
+            storage = OPENSSL_malloc(sizeof(*storage) * mx);
+        if (storage != NULL)
+            for (i = 0; i < mx; i++)
+                storage[i] = sk_EX_CALLBACK_value(ip->meth, i);
+    }
+    CRYPTO_THREAD_unlock(ex_data_lock);
+
+    if (mx > 0 && storage == NULL) {
+        CRYPTOerr(CRYPTO_F_CRYPTO_NEW_EX_DATA, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    for (i = 0; i < mx; i++) {
+        if (storage[i] && storage[i]->new_func) {
+            ptr = CRYPTO_get_ex_data(ad, i);
+            storage[i]->new_func(obj, ptr, ad, i,
+                                 storage[i]->argl, storage[i]->argp);
+        }
+    }
+    if (storage != stack)
+        OPENSSL_free(storage);
+    return 1;
+}
+
+/*
+ * Duplicate a CRYPTO_EX_DATA variable - including calling dup() callbacks
+ * for each index in the class used by this variable
+ */
+int CRYPTO_dup_ex_data(int class_index, CRYPTO_EX_DATA *to,
+                       const CRYPTO_EX_DATA *from)
+{
+    int mx, j, i;
+    void *ptr;
+    EX_CALLBACK *stack[10];
+    EX_CALLBACK **storage = NULL;
+    EX_CALLBACKS *ip;
+    int toret = 0;
+
+    if (from->sk == NULL)
+        /* Nothing to copy over */
+        return 1;
+    if ((ip = get_and_lock(class_index)) == NULL)
+        return 0;
+
+    mx = sk_EX_CALLBACK_num(ip->meth);
+    j = sk_void_num(from->sk);
+    if (j < mx)
+        mx = j;
+    if (mx > 0) {
+        if (mx < (int)OSSL_NELEM(stack))
+            storage = stack;
+        else
+            storage = OPENSSL_malloc(sizeof(*storage) * mx);
+        if (storage != NULL)
+            for (i = 0; i < mx; i++)
+                storage[i] = sk_EX_CALLBACK_value(ip->meth, i);
+    }
+    CRYPTO_THREAD_unlock(ex_data_lock);
+
+    if (mx == 0)
+        return 1;
+    if (storage == NULL) {
+        CRYPTOerr(CRYPTO_F_CRYPTO_DUP_EX_DATA, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    /*
+     * Make sure the ex_data stack is at least |mx| elements long to avoid
+     * issues in the for loop that follows; so go get the |mx|'th element
+     * (if it does not exist CRYPTO_get_ex_data() returns NULL), and assign
+     * to itself. This is normally a no-op; but ensures the stack is the
+     * proper size
+     */
+    if (!CRYPTO_set_ex_data(to, mx - 1, CRYPTO_get_ex_data(to, mx - 1)))
+        goto err;
+
+    for (i = 0; i < mx; i++) {
+        ptr = CRYPTO_get_ex_data(from, i);
+        if (storage[i] && storage[i]->dup_func)
+            if (!storage[i]->dup_func(to, from, &ptr, i,
+                                      storage[i]->argl, storage[i]->argp))
+                goto err;
+        CRYPTO_set_ex_data(to, i, ptr);
+    }
+    toret = 1;
+ err:
+    if (storage != stack)
+        OPENSSL_free(storage);
+    return toret;
+}
+
+
+/*
+ * Cleanup a CRYPTO_EX_DATA variable - including calling free() callbacks for
+ * each index in the class used by this variable
+ */
+void CRYPTO_free_ex_data(int class_index, void *obj, CRYPTO_EX_DATA *ad)
+{
+    int mx, i;
+    EX_CALLBACKS *ip;
+    void *ptr;
+    EX_CALLBACK *f;
+    EX_CALLBACK *stack[10];
+    EX_CALLBACK **storage = NULL;
+
+    if ((ip = get_and_lock(class_index)) == NULL)
+        goto err;
+
+    mx = sk_EX_CALLBACK_num(ip->meth);
+    if (mx > 0) {
+        if (mx < (int)OSSL_NELEM(stack))
+            storage = stack;
+        else
+            storage = OPENSSL_malloc(sizeof(*storage) * mx);
+        if (storage != NULL)
+            for (i = 0; i < mx; i++)
+                storage[i] = sk_EX_CALLBACK_value(ip->meth, i);
+    }
+    CRYPTO_THREAD_unlock(ex_data_lock);
+
+    for (i = 0; i < mx; i++) {
+        if (storage != NULL)
+            f = storage[i];
+        else {
+            CRYPTO_THREAD_write_lock(ex_data_lock);
+            f = sk_EX_CALLBACK_value(ip->meth, i);
+            CRYPTO_THREAD_unlock(ex_data_lock);
+        }
+        if (f != NULL && f->free_func != NULL) {
+            ptr = CRYPTO_get_ex_data(ad, i);
+            f->free_func(obj, ptr, ad, i, f->argl, f->argp);
+        }
+    }
+
+    if (storage != stack)
+        OPENSSL_free(storage);
+ err:
+    sk_void_free(ad->sk);
+    ad->sk = NULL;
+}
+
+/*
+ * For a given CRYPTO_EX_DATA variable, set the value corresponding to a
+ * particular index in the class used by this variable
+ */
+int CRYPTO_set_ex_data(CRYPTO_EX_DATA *ad, int idx, void *val)
+{
+    int i;
+
+    if (ad->sk == NULL) {
+        if ((ad->sk = sk_void_new_null()) == NULL) {
+            CRYPTOerr(CRYPTO_F_CRYPTO_SET_EX_DATA, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+    }
+
+    for (i = sk_void_num(ad->sk); i <= idx; ++i) {
+        if (!sk_void_push(ad->sk, NULL)) {
+            CRYPTOerr(CRYPTO_F_CRYPTO_SET_EX_DATA, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+    }
+    sk_void_set(ad->sk, idx, val);
+    return 1;
+}
+
+/*
+ * For a given CRYPTO_EX_DATA_ variable, get the value corresponding to a
+ * particular index in the class used by this variable
+ */
+void *CRYPTO_get_ex_data(const CRYPTO_EX_DATA *ad, int idx)
+{
+    if (ad->sk == NULL || idx >= sk_void_num(ad->sk))
+        return NULL;
+    return sk_void_value(ad->sk, idx);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/getenv.c b/trunk/3rdparty/openssl-1.1-fit/crypto/getenv.c
new file mode 100644
index 000000000..7e98b645b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/getenv.c
@@ -0,0 +1,31 @@
+/*
+ * Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef _GNU_SOURCE
+# define _GNU_SOURCE
+#endif
+
+#include <stdlib.h>
+#include "internal/cryptlib.h"
+
+char *ossl_safe_getenv(const char *name)
+{
+#if defined(__GLIBC__) && defined(__GLIBC_PREREQ)
+# if __GLIBC_PREREQ(2, 17)
+#  define SECURE_GETENV
+    return secure_getenv(name);
+# endif
+#endif
+
+#ifndef SECURE_GETENV
+    if (OPENSSL_issetugid())
+        return NULL;
+    return getenv(name);
+#endif
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/hmac/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/hmac/build.info
new file mode 100644
index 000000000..09f67c2a0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/hmac/build.info
@@ -0,0 +1,3 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        hmac.c hm_ameth.c hm_pmeth.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/hmac/hm_ameth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/hmac/hm_ameth.c
new file mode 100644
index 000000000..fa204e906
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/hmac/hm_ameth.c
@@ -0,0 +1,127 @@
+/*
+ * Copyright 2007-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+
+/*
+ * HMAC "ASN1" method. This is just here to indicate the maximum HMAC output
+ * length and to free up an HMAC key.
+ */
+
+static int hmac_size(const EVP_PKEY *pkey)
+{
+    return EVP_MAX_MD_SIZE;
+}
+
+static void hmac_key_free(EVP_PKEY *pkey)
+{
+    ASN1_OCTET_STRING *os = EVP_PKEY_get0(pkey);
+    if (os) {
+        if (os->data)
+            OPENSSL_cleanse(os->data, os->length);
+        ASN1_OCTET_STRING_free(os);
+    }
+}
+
+static int hmac_pkey_ctrl(EVP_PKEY *pkey, int op, long arg1, void *arg2)
+{
+    switch (op) {
+    case ASN1_PKEY_CTRL_DEFAULT_MD_NID:
+        *(int *)arg2 = NID_sha256;
+        return 1;
+
+    default:
+        return -2;
+    }
+}
+
+static int hmac_pkey_public_cmp(const EVP_PKEY *a, const EVP_PKEY *b)
+{
+    return ASN1_OCTET_STRING_cmp(EVP_PKEY_get0(a), EVP_PKEY_get0(b));
+}
+
+static int hmac_set_priv_key(EVP_PKEY *pkey, const unsigned char *priv,
+                             size_t len)
+{
+    ASN1_OCTET_STRING *os;
+
+    if (pkey->pkey.ptr != NULL)
+        return 0;
+
+    os = ASN1_OCTET_STRING_new();
+    if (os == NULL)
+        return 0;
+
+
+    if (!ASN1_OCTET_STRING_set(os, priv, len)) {
+        ASN1_OCTET_STRING_free(os);
+        return 0;
+    }
+
+    pkey->pkey.ptr = os;
+    return 1;
+}
+
+static int hmac_get_priv_key(const EVP_PKEY *pkey, unsigned char *priv,
+                             size_t *len)
+{
+    ASN1_OCTET_STRING *os = (ASN1_OCTET_STRING *)pkey->pkey.ptr;
+
+    if (priv == NULL) {
+        *len = ASN1_STRING_length(os);
+        return 1;
+    }
+
+    if (os == NULL || *len < (size_t)ASN1_STRING_length(os))
+        return 0;
+
+    *len = ASN1_STRING_length(os);
+    memcpy(priv, ASN1_STRING_get0_data(os), *len);
+
+    return 1;
+}
+
+const EVP_PKEY_ASN1_METHOD hmac_asn1_meth = {
+    EVP_PKEY_HMAC,
+    EVP_PKEY_HMAC,
+    0,
+
+    "HMAC",
+    "OpenSSL HMAC method",
+
+    0, 0, hmac_pkey_public_cmp, 0,
+
+    0, 0, 0,
+
+    hmac_size,
+    0, 0,
+    0, 0, 0, 0, 0, 0, 0,
+
+    hmac_key_free,
+    hmac_pkey_ctrl,
+    NULL,
+    NULL,
+
+    NULL,
+    NULL,
+    NULL,
+
+    NULL,
+    NULL,
+    NULL,
+
+    hmac_set_priv_key,
+    NULL,
+    hmac_get_priv_key,
+    NULL,
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/hmac/hm_pmeth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/hmac/hm_pmeth.c
new file mode 100644
index 000000000..55dd27d63
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/hmac/hm_pmeth.c
@@ -0,0 +1,212 @@
+/*
+ * Copyright 2007-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/evp.h>
+#include <openssl/hmac.h>
+#include <openssl/err.h>
+#include "internal/evp_int.h"
+
+/* HMAC pkey context structure */
+
+typedef struct {
+    const EVP_MD *md;           /* MD for HMAC use */
+    ASN1_OCTET_STRING ktmp;     /* Temp storage for key */
+    HMAC_CTX *ctx;
+} HMAC_PKEY_CTX;
+
+static int pkey_hmac_init(EVP_PKEY_CTX *ctx)
+{
+    HMAC_PKEY_CTX *hctx;
+
+    if ((hctx = OPENSSL_zalloc(sizeof(*hctx))) == NULL) {
+        CRYPTOerr(CRYPTO_F_PKEY_HMAC_INIT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    hctx->ktmp.type = V_ASN1_OCTET_STRING;
+    hctx->ctx = HMAC_CTX_new();
+    if (hctx->ctx == NULL) {
+        OPENSSL_free(hctx);
+        return 0;
+    }
+
+    ctx->data = hctx;
+    ctx->keygen_info_count = 0;
+
+    return 1;
+}
+
+static void pkey_hmac_cleanup(EVP_PKEY_CTX *ctx);
+
+static int pkey_hmac_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src)
+{
+    HMAC_PKEY_CTX *sctx, *dctx;
+
+    /* allocate memory for dst->data and a new HMAC_CTX in dst->data->ctx */
+    if (!pkey_hmac_init(dst))
+        return 0;
+    sctx = EVP_PKEY_CTX_get_data(src);
+    dctx = EVP_PKEY_CTX_get_data(dst);
+    dctx->md = sctx->md;
+    if (!HMAC_CTX_copy(dctx->ctx, sctx->ctx))
+        goto err;
+    if (sctx->ktmp.data) {
+        if (!ASN1_OCTET_STRING_set(&dctx->ktmp,
+                                   sctx->ktmp.data, sctx->ktmp.length))
+            goto err;
+    }
+    return 1;
+err:
+    /* release HMAC_CTX in dst->data->ctx and memory allocated for dst->data */
+    pkey_hmac_cleanup (dst);
+    return 0;
+}
+
+static void pkey_hmac_cleanup(EVP_PKEY_CTX *ctx)
+{
+    HMAC_PKEY_CTX *hctx = EVP_PKEY_CTX_get_data(ctx);
+
+    if (hctx != NULL) {
+        HMAC_CTX_free(hctx->ctx);
+        OPENSSL_clear_free(hctx->ktmp.data, hctx->ktmp.length);
+        OPENSSL_free(hctx);
+        EVP_PKEY_CTX_set_data(ctx, NULL);
+    }
+}
+
+static int pkey_hmac_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
+{
+    ASN1_OCTET_STRING *hkey = NULL;
+    HMAC_PKEY_CTX *hctx = ctx->data;
+    if (!hctx->ktmp.data)
+        return 0;
+    hkey = ASN1_OCTET_STRING_dup(&hctx->ktmp);
+    if (!hkey)
+        return 0;
+    EVP_PKEY_assign(pkey, EVP_PKEY_HMAC, hkey);
+
+    return 1;
+}
+
+static int int_update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    HMAC_PKEY_CTX *hctx = EVP_MD_CTX_pkey_ctx(ctx)->data;
+    if (!HMAC_Update(hctx->ctx, data, count))
+        return 0;
+    return 1;
+}
+
+static int hmac_signctx_init(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx)
+{
+    HMAC_PKEY_CTX *hctx = ctx->data;
+    HMAC_CTX_set_flags(hctx->ctx,
+                       EVP_MD_CTX_test_flags(mctx, ~EVP_MD_CTX_FLAG_NO_INIT));
+    EVP_MD_CTX_set_flags(mctx, EVP_MD_CTX_FLAG_NO_INIT);
+    EVP_MD_CTX_set_update_fn(mctx, int_update);
+    return 1;
+}
+
+static int hmac_signctx(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
+                        EVP_MD_CTX *mctx)
+{
+    unsigned int hlen;
+    HMAC_PKEY_CTX *hctx = ctx->data;
+    int l = EVP_MD_CTX_size(mctx);
+
+    if (l < 0)
+        return 0;
+    *siglen = l;
+    if (!sig)
+        return 1;
+
+    if (!HMAC_Final(hctx->ctx, sig, &hlen))
+        return 0;
+    *siglen = (size_t)hlen;
+    return 1;
+}
+
+static int pkey_hmac_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
+{
+    HMAC_PKEY_CTX *hctx = ctx->data;
+    ASN1_OCTET_STRING *key;
+    switch (type) {
+
+    case EVP_PKEY_CTRL_SET_MAC_KEY:
+        if ((!p2 && p1 > 0) || (p1 < -1))
+            return 0;
+        if (!ASN1_OCTET_STRING_set(&hctx->ktmp, p2, p1))
+            return 0;
+        break;
+
+    case EVP_PKEY_CTRL_MD:
+        hctx->md = p2;
+        break;
+
+    case EVP_PKEY_CTRL_DIGESTINIT:
+        key = (ASN1_OCTET_STRING *)ctx->pkey->pkey.ptr;
+        if (!HMAC_Init_ex(hctx->ctx, key->data, key->length, hctx->md,
+                          ctx->engine))
+            return 0;
+        break;
+
+    default:
+        return -2;
+
+    }
+    return 1;
+}
+
+static int pkey_hmac_ctrl_str(EVP_PKEY_CTX *ctx,
+                              const char *type, const char *value)
+{
+    if (!value) {
+        return 0;
+    }
+    if (strcmp(type, "key") == 0)
+        return EVP_PKEY_CTX_str2ctrl(ctx, EVP_PKEY_CTRL_SET_MAC_KEY, value);
+    if (strcmp(type, "hexkey") == 0)
+        return EVP_PKEY_CTX_hex2ctrl(ctx, EVP_PKEY_CTRL_SET_MAC_KEY, value);
+    return -2;
+}
+
+const EVP_PKEY_METHOD hmac_pkey_meth = {
+    EVP_PKEY_HMAC,
+    0,
+    pkey_hmac_init,
+    pkey_hmac_copy,
+    pkey_hmac_cleanup,
+
+    0, 0,
+
+    0,
+    pkey_hmac_keygen,
+
+    0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    hmac_signctx_init,
+    hmac_signctx,
+
+    0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    pkey_hmac_ctrl,
+    pkey_hmac_ctrl_str
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/hmac/hmac.c b/trunk/3rdparty/openssl-1.1-fit/crypto/hmac/hmac.c
new file mode 100644
index 000000000..e4031b44a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/hmac/hmac.c
@@ -0,0 +1,247 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include "internal/cryptlib.h"
+#include <openssl/hmac.h>
+#include <openssl/opensslconf.h>
+#include "hmac_lcl.h"
+
+int HMAC_Init_ex(HMAC_CTX *ctx, const void *key, int len,
+                 const EVP_MD *md, ENGINE *impl)
+{
+    int rv = 0;
+    int i, j, reset = 0;
+    unsigned char pad[HMAC_MAX_MD_CBLOCK_SIZE];
+
+    /* If we are changing MD then we must have a key */
+    if (md != NULL && md != ctx->md && (key == NULL || len < 0))
+        return 0;
+
+    if (md != NULL) {
+        reset = 1;
+        ctx->md = md;
+    } else if (ctx->md) {
+        md = ctx->md;
+    } else {
+        return 0;
+    }
+
+    if (key != NULL) {
+        reset = 1;
+        j = EVP_MD_block_size(md);
+        if (!ossl_assert(j <= (int)sizeof(ctx->key)))
+            return 0;
+        if (j < len) {
+            if (!EVP_DigestInit_ex(ctx->md_ctx, md, impl)
+                    || !EVP_DigestUpdate(ctx->md_ctx, key, len)
+                    || !EVP_DigestFinal_ex(ctx->md_ctx, ctx->key,
+                                           &ctx->key_length))
+                return 0;
+        } else {
+            if (len < 0 || len > (int)sizeof(ctx->key))
+                return 0;
+            memcpy(ctx->key, key, len);
+            ctx->key_length = len;
+        }
+        if (ctx->key_length != HMAC_MAX_MD_CBLOCK_SIZE)
+            memset(&ctx->key[ctx->key_length], 0,
+                   HMAC_MAX_MD_CBLOCK_SIZE - ctx->key_length);
+    }
+
+    if (reset) {
+        for (i = 0; i < HMAC_MAX_MD_CBLOCK_SIZE; i++)
+            pad[i] = 0x36 ^ ctx->key[i];
+        if (!EVP_DigestInit_ex(ctx->i_ctx, md, impl)
+                || !EVP_DigestUpdate(ctx->i_ctx, pad, EVP_MD_block_size(md)))
+            goto err;
+
+        for (i = 0; i < HMAC_MAX_MD_CBLOCK_SIZE; i++)
+            pad[i] = 0x5c ^ ctx->key[i];
+        if (!EVP_DigestInit_ex(ctx->o_ctx, md, impl)
+                || !EVP_DigestUpdate(ctx->o_ctx, pad, EVP_MD_block_size(md)))
+            goto err;
+    }
+    if (!EVP_MD_CTX_copy_ex(ctx->md_ctx, ctx->i_ctx))
+        goto err;
+    rv = 1;
+ err:
+    if (reset)
+        OPENSSL_cleanse(pad, sizeof(pad));
+    return rv;
+}
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+int HMAC_Init(HMAC_CTX *ctx, const void *key, int len, const EVP_MD *md)
+{
+    if (key && md)
+        HMAC_CTX_reset(ctx);
+    return HMAC_Init_ex(ctx, key, len, md, NULL);
+}
+#endif
+
+int HMAC_Update(HMAC_CTX *ctx, const unsigned char *data, size_t len)
+{
+    if (!ctx->md)
+        return 0;
+    return EVP_DigestUpdate(ctx->md_ctx, data, len);
+}
+
+int HMAC_Final(HMAC_CTX *ctx, unsigned char *md, unsigned int *len)
+{
+    unsigned int i;
+    unsigned char buf[EVP_MAX_MD_SIZE];
+
+    if (!ctx->md)
+        goto err;
+
+    if (!EVP_DigestFinal_ex(ctx->md_ctx, buf, &i))
+        goto err;
+    if (!EVP_MD_CTX_copy_ex(ctx->md_ctx, ctx->o_ctx))
+        goto err;
+    if (!EVP_DigestUpdate(ctx->md_ctx, buf, i))
+        goto err;
+    if (!EVP_DigestFinal_ex(ctx->md_ctx, md, len))
+        goto err;
+    return 1;
+ err:
+    return 0;
+}
+
+size_t HMAC_size(const HMAC_CTX *ctx)
+{
+    int size = EVP_MD_size((ctx)->md);
+
+    return (size < 0) ? 0 : size;
+}
+
+HMAC_CTX *HMAC_CTX_new(void)
+{
+    HMAC_CTX *ctx = OPENSSL_zalloc(sizeof(HMAC_CTX));
+
+    if (ctx != NULL) {
+        if (!HMAC_CTX_reset(ctx)) {
+            HMAC_CTX_free(ctx);
+            return NULL;
+        }
+    }
+    return ctx;
+}
+
+static void hmac_ctx_cleanup(HMAC_CTX *ctx)
+{
+    EVP_MD_CTX_reset(ctx->i_ctx);
+    EVP_MD_CTX_reset(ctx->o_ctx);
+    EVP_MD_CTX_reset(ctx->md_ctx);
+    ctx->md = NULL;
+    ctx->key_length = 0;
+    OPENSSL_cleanse(ctx->key, sizeof(ctx->key));
+}
+
+void HMAC_CTX_free(HMAC_CTX *ctx)
+{
+    if (ctx != NULL) {
+        hmac_ctx_cleanup(ctx);
+        EVP_MD_CTX_free(ctx->i_ctx);
+        EVP_MD_CTX_free(ctx->o_ctx);
+        EVP_MD_CTX_free(ctx->md_ctx);
+        OPENSSL_free(ctx);
+    }
+}
+
+static int hmac_ctx_alloc_mds(HMAC_CTX *ctx)
+{
+    if (ctx->i_ctx == NULL)
+        ctx->i_ctx = EVP_MD_CTX_new();
+    if (ctx->i_ctx == NULL)
+        return 0;
+    if (ctx->o_ctx == NULL)
+        ctx->o_ctx = EVP_MD_CTX_new();
+    if (ctx->o_ctx == NULL)
+        return 0;
+    if (ctx->md_ctx == NULL)
+        ctx->md_ctx = EVP_MD_CTX_new();
+    if (ctx->md_ctx == NULL)
+        return 0;
+    return 1;
+}
+
+int HMAC_CTX_reset(HMAC_CTX *ctx)
+{
+    hmac_ctx_cleanup(ctx);
+    if (!hmac_ctx_alloc_mds(ctx)) {
+        hmac_ctx_cleanup(ctx);
+        return 0;
+    }
+    return 1;
+}
+
+int HMAC_CTX_copy(HMAC_CTX *dctx, HMAC_CTX *sctx)
+{
+    if (!hmac_ctx_alloc_mds(dctx))
+        goto err;
+    if (!EVP_MD_CTX_copy_ex(dctx->i_ctx, sctx->i_ctx))
+        goto err;
+    if (!EVP_MD_CTX_copy_ex(dctx->o_ctx, sctx->o_ctx))
+        goto err;
+    if (!EVP_MD_CTX_copy_ex(dctx->md_ctx, sctx->md_ctx))
+        goto err;
+    memcpy(dctx->key, sctx->key, HMAC_MAX_MD_CBLOCK_SIZE);
+    dctx->key_length = sctx->key_length;
+    dctx->md = sctx->md;
+    return 1;
+ err:
+    hmac_ctx_cleanup(dctx);
+    return 0;
+}
+
+unsigned char *HMAC(const EVP_MD *evp_md, const void *key, int key_len,
+                    const unsigned char *d, size_t n, unsigned char *md,
+                    unsigned int *md_len)
+{
+    HMAC_CTX *c = NULL;
+    static unsigned char m[EVP_MAX_MD_SIZE];
+    static const unsigned char dummy_key[1] = {'\0'};
+
+    if (md == NULL)
+        md = m;
+    if ((c = HMAC_CTX_new()) == NULL)
+        goto err;
+
+    /* For HMAC_Init_ex, NULL key signals reuse. */
+    if (key == NULL && key_len == 0) {
+        key = dummy_key;
+    }
+
+    if (!HMAC_Init_ex(c, key, key_len, evp_md, NULL))
+        goto err;
+    if (!HMAC_Update(c, d, n))
+        goto err;
+    if (!HMAC_Final(c, md, md_len))
+        goto err;
+    HMAC_CTX_free(c);
+    return md;
+ err:
+    HMAC_CTX_free(c);
+    return NULL;
+}
+
+void HMAC_CTX_set_flags(HMAC_CTX *ctx, unsigned long flags)
+{
+    EVP_MD_CTX_set_flags(ctx->i_ctx, flags);
+    EVP_MD_CTX_set_flags(ctx->o_ctx, flags);
+    EVP_MD_CTX_set_flags(ctx->md_ctx, flags);
+}
+
+const EVP_MD *HMAC_CTX_get_md(const HMAC_CTX *ctx)
+{
+    return ctx->md;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/hmac/hmac_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/hmac/hmac_lcl.h
new file mode 100644
index 000000000..8fd834569
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/hmac/hmac_lcl.h
@@ -0,0 +1,25 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_HMAC_LCL_H
+# define HEADER_HMAC_LCL_H
+
+/* The current largest case is for SHA3-224 */
+#define HMAC_MAX_MD_CBLOCK_SIZE     144
+
+struct hmac_ctx_st {
+    const EVP_MD *md;
+    EVP_MD_CTX *md_ctx;
+    EVP_MD_CTX *i_ctx;
+    EVP_MD_CTX *o_ctx;
+    unsigned int key_length;
+    unsigned char key[HMAC_MAX_MD_CBLOCK_SIZE];
+};
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ia64cpuid.S b/trunk/3rdparty/openssl-1.1-fit/crypto/ia64cpuid.S
new file mode 100644
index 000000000..92c55124b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ia64cpuid.S
@@ -0,0 +1,297 @@
+// Copyright 2004-2017 The OpenSSL Project Authors. All Rights Reserved.
+//
+// Licensed under the OpenSSL license (the "License").  You may not use
+// this file except in compliance with the License.  You can obtain a copy
+// in the file LICENSE in the source distribution or at
+// https://www.openssl.org/source/license.html
+// Works on all IA-64 platforms: Linux, HP-UX, Win64i...
+// On Win64i compile with ias.exe.
+.text
+
+#if defined(_HPUX_SOURCE) && !defined(_LP64)
+#define	ADDP	addp4
+#else
+#define	ADDP	add
+#endif
+
+.global	OPENSSL_cpuid_setup#
+.proc	OPENSSL_cpuid_setup#
+OPENSSL_cpuid_setup:
+{ .mib;	br.ret.sptk.many	b0		};;
+.endp	OPENSSL_cpuid_setup#
+
+.global	OPENSSL_rdtsc#
+.proc	OPENSSL_rdtsc#
+OPENSSL_rdtsc:
+{ .mib;	mov			r8=ar.itc
+	br.ret.sptk.many	b0		};;
+.endp   OPENSSL_rdtsc#
+
+.global	OPENSSL_atomic_add#
+.proc	OPENSSL_atomic_add#
+.align	32
+OPENSSL_atomic_add:
+{ .mii;	ld4		r2=[r32]
+	nop.i		0
+	nop.i		0		};;
+.Lspin:
+{ .mii;	mov		ar.ccv=r2
+	add		r8=r2,r33
+	mov		r3=r2		};;
+{ .mmi;	mf;;
+	cmpxchg4.acq	r2=[r32],r8,ar.ccv
+	nop.i		0		};;
+{ .mib;	cmp.ne		p6,p0=r2,r3
+	nop.i		0
+(p6)	br.dpnt		.Lspin		};;
+{ .mib;	nop.m		0
+	sxt4		r8=r8
+	br.ret.sptk.many	b0	};;
+.endp	OPENSSL_atomic_add#
+
+// Returns a structure comprising pointer to the top of stack of
+// the caller and pointer beyond backing storage for the current
+// register frame. The latter is required, because it might be
+// insufficient to wipe backing storage for the current frame
+// (as this procedure does), one might have to go further, toward
+// higher addresses to reach for whole "retroactively" saved
+// context...
+.global	OPENSSL_wipe_cpu#
+.proc	OPENSSL_wipe_cpu#
+.align	32
+OPENSSL_wipe_cpu:
+	.prologue
+	.fframe	0
+	.save	ar.pfs,r2
+	.save	ar.lc,r3
+{ .mib;	alloc		r2=ar.pfs,0,96,0,96
+	mov		r3=ar.lc
+	brp.loop.imp	.L_wipe_top,.L_wipe_end-16
+					};;
+{ .mii;	mov		r9=ar.bsp
+	mov		r8=pr
+	mov		ar.lc=96	};;
+	.body
+{ .mii;	add		r9=96*8-8,r9
+	mov		ar.ec=1		};;
+
+// One can sweep double as fast, but then we can't guarantee
+// that backing storage is wiped...
+.L_wipe_top:
+{ .mfi;	st8		[r9]=r0,-8
+	mov		f127=f0
+	mov		r127=r0		}
+{ .mfb;	nop.m		0
+	nop.f		0
+	br.ctop.sptk	.L_wipe_top	};;
+.L_wipe_end:
+
+{ .mfi;	mov		r11=r0
+	mov		f6=f0
+	mov		r14=r0		}
+{ .mfi;	mov		r15=r0
+	mov		f7=f0
+	mov		r16=r0		}
+{ .mfi;	mov		r17=r0
+	mov		f8=f0
+	mov		r18=r0		}
+{ .mfi;	mov		r19=r0
+	mov		f9=f0
+	mov		r20=r0		}
+{ .mfi;	mov		r21=r0
+	mov		f10=f0
+	mov		r22=r0		}
+{ .mfi;	mov		r23=r0
+	mov		f11=f0
+	mov		r24=r0		}
+{ .mfi;	mov		r25=r0
+	mov		f12=f0
+	mov		r26=r0		}
+{ .mfi;	mov		r27=r0
+	mov		f13=f0
+	mov		r28=r0		}
+{ .mfi;	mov		r29=r0
+	mov		f14=f0
+	mov		r30=r0		}
+{ .mfi;	mov		r31=r0
+	mov		f15=f0
+	nop.i		0		}
+{ .mfi;	mov		f16=f0		}
+{ .mfi;	mov		f17=f0		}
+{ .mfi;	mov		f18=f0		}
+{ .mfi;	mov		f19=f0		}
+{ .mfi;	mov		f20=f0		}
+{ .mfi;	mov		f21=f0		}
+{ .mfi;	mov		f22=f0		}
+{ .mfi;	mov		f23=f0		}
+{ .mfi;	mov		f24=f0		}
+{ .mfi;	mov		f25=f0		}
+{ .mfi;	mov		f26=f0		}
+{ .mfi;	mov		f27=f0		}
+{ .mfi;	mov		f28=f0		}
+{ .mfi;	mov		f29=f0		}
+{ .mfi;	mov		f30=f0		}
+{ .mfi;	add		r9=96*8+8,r9
+	mov		f31=f0
+	mov		pr=r8,0x1ffff	}
+{ .mib;	mov		r8=sp
+	mov		ar.lc=r3
+	br.ret.sptk	b0		};;
+.endp	OPENSSL_wipe_cpu#
+
+.global	OPENSSL_cleanse#
+.proc	OPENSSL_cleanse#
+OPENSSL_cleanse:
+{ .mib;	cmp.eq		p6,p0=0,r33	    // len==0
+	ADDP		r32=0,r32
+(p6)	br.ret.spnt	b0		};;
+{ .mib;	and		r2=7,r32
+	cmp.leu		p6,p0=15,r33	    // len>=15
+(p6)	br.cond.dptk	.Lot		};;
+
+.Little:
+{ .mib;	st1		[r32]=r0,1
+	cmp.ltu		p6,p7=1,r33	}  // len>1
+{ .mbb;	add		r33=-1,r33	   // len--
+(p6)	br.cond.dptk	.Little
+(p7)	br.ret.sptk.many	b0	};;
+
+.Lot:
+{ .mib;	cmp.eq		p6,p0=0,r2
+(p6)	br.cond.dptk	.Laligned	};;
+{ .mmi;	st1		[r32]=r0,1;;
+	and		r2=7,r32	}
+{ .mib;	add		r33=-1,r33
+	br		.Lot		};;
+
+.Laligned:
+{ .mmi;	st8		[r32]=r0,8
+	and		r2=-8,r33	    // len&~7
+	add		r33=-8,r33	};; // len-=8
+{ .mib;	cmp.ltu		p6,p0=8,r2	    // ((len+8)&~7)>8
+(p6)	br.cond.dptk	.Laligned	};;
+
+{ .mbb;	cmp.eq		p6,p7=r0,r33
+(p7)	br.cond.dpnt	.Little
+(p6)	br.ret.sptk.many	b0	};;
+.endp	OPENSSL_cleanse#
+
+.global	CRYPTO_memcmp#
+.proc	CRYPTO_memcmp#
+.align	32
+.skip	16
+CRYPTO_memcmp:
+	.prologue
+{ .mib;	mov		r8=0
+	cmp.eq		p6,p0=0,r34	    // len==0?
+(p6)	br.ret.spnt	b0		};;
+	.save		ar.pfs,r2
+{ .mib;	alloc		r2=ar.pfs,3,5,0,8
+	.save		ar.lc,r3
+	mov		r3=ar.lc
+	brp.loop.imp	.Loop_cmp_ctop,.Loop_cmp_cend-16
+					}
+{ .mib;	sub		r10=r34,r0,1
+	.save		pr,r9
+	mov		r9=pr		};;
+{ .mii;	ADDP		r16=0,r32
+	mov		ar.lc=r10
+	mov		ar.ec=4		}
+{ .mib;	ADDP		r17=0,r33
+	mov		pr.rot=1<<16	};;
+
+.Loop_cmp_ctop:
+{ .mib;	(p16)	ld1	r32=[r16],1
+	(p18)	xor	r34=r34,r38	}
+{ .mib;	(p16)	ld1	r36=[r17],1
+	(p19)	or	r8=r8,r35
+	br.ctop.sptk	.Loop_cmp_ctop	};;
+.Loop_cmp_cend:
+
+{ .mib;	cmp.ne		p6,p0=0,r8
+	mov		ar.lc=r3	};;
+{ .mib;
+(p6)	mov		r8=1
+	mov		pr=r9,0x1ffff
+	br.ret.sptk.many	b0	};;
+.endp	CRYPTO_memcmp#
+
+.global	OPENSSL_instrument_bus#
+.proc	OPENSSL_instrument_bus#
+OPENSSL_instrument_bus:
+{ .mmi;	mov		r2=r33
+	ADDP		r32=0,r32	}
+{ .mmi;	mov		r8=ar.itc;;
+	mov		r10=r0
+	mov		r9=r8		};;
+
+{ .mmi;	fc		r32;;
+	ld4		r8=[r32]	};;
+{ .mmi;	mf
+	mov		ar.ccv=r8
+	add		r8=r8,r10	};;
+{ .mmi;	cmpxchg4.acq	r3=[r32],r8,ar.ccv
+					};;
+.Loop:
+{ .mmi;	mov		r8=ar.itc;;
+	sub		r10=r8,r9		// diff=tick-lasttick
+	mov		r9=r8		};;	// lasttick=tick
+{ .mmi;	fc		r32;;
+	ld4		r8=[r32]	};;
+{ .mmi;	mf
+	mov		ar.ccv=r8
+	add		r8=r8,r10	};;
+{ .mmi;	cmpxchg4.acq	r3=[r32],r8,ar.ccv
+	add		r33=-1,r33
+	add		r32=4,r32	};;
+{ .mib;	cmp4.ne		p6,p0=0,r33
+(p6)	br.cond.dptk	.Loop		};;
+
+{ .mib;	sub		r8=r2,r33
+	br.ret.sptk.many	b0	};;
+.endp	OPENSSL_instrument_bus#
+
+.global	OPENSSL_instrument_bus2#
+.proc	OPENSSL_instrument_bus2#
+OPENSSL_instrument_bus2:
+{ .mmi;	mov		r2=r33			// put aside cnt
+	ADDP		r32=0,r32	}
+{ .mmi;	mov		r8=ar.itc;;
+	mov		r10=r0
+	mov		r9=r8		};;
+
+{ .mmi;	fc		r32;;
+	ld4		r8=[r32]	};;
+{ .mmi;	mf
+	mov		ar.ccv=r8
+	add		r8=r8,r10	};;
+{ .mmi;	cmpxchg4.acq	r3=[r32],r8,ar.ccv
+					};;
+
+{ .mmi;	mov		r8=ar.itc;;
+	sub		r10=r8,r9
+	mov		r9=r8		};;
+.Loop2:
+{ .mmi;	mov		r11=r10			// lastdiff=diff
+	add		r34=-1,r34	};;	// --max
+{ .mmi;	fc		r32;;
+	ld4		r8=[r32]
+	cmp4.eq		p6,p0=0,r34	};;
+{ .mmi;	mf
+	mov		ar.ccv=r8
+	add		r8=r8,r10	};;
+{ .mmb;	cmpxchg4.acq	r3=[r32],r8,ar.ccv
+(p6)	br.cond.spnt	.Ldone2		};;
+
+{ .mmi;	mov		r8=ar.itc;;
+	sub		r10=r8,r9		// diff=tick-lasttick
+	mov		r9=r8		};;	// lasttick=tick
+{ .mmi;	cmp.ne		p6,p0=r10,r11;;		// diff!=lastdiff
+(p6)	add		r33=-1,r33	};;	// conditional --cnt
+{ .mib;	cmp4.ne		p7,p0=0,r33
+(p6)	add		r32=4,r32		// conditional ++out
+(p7)	br.cond.dptk	.Loop2		};;
+.Ldone2:
+{ .mib;	sub		r8=r2,r33
+	br.ret.sptk.many	b0	};;
+.endp	OPENSSL_instrument_bus2#
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/idea/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/idea/build.info
new file mode 100644
index 000000000..232612379
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/idea/build.info
@@ -0,0 +1,3 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        i_cbc.c i_cfb64.c i_ofb64.c i_ecb.c i_skey.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_cbc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_cbc.c
new file mode 100644
index 000000000..a70a8682a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_cbc.c
@@ -0,0 +1,122 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/idea.h>
+#include "idea_lcl.h"
+
+void IDEA_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                      long length, IDEA_KEY_SCHEDULE *ks, unsigned char *iv,
+                      int encrypt)
+{
+    register unsigned long tin0, tin1;
+    register unsigned long tout0, tout1, xor0, xor1;
+    register long l = length;
+    unsigned long tin[2];
+
+    if (encrypt) {
+        n2l(iv, tout0);
+        n2l(iv, tout1);
+        iv -= 8;
+        for (l -= 8; l >= 0; l -= 8) {
+            n2l(in, tin0);
+            n2l(in, tin1);
+            tin0 ^= tout0;
+            tin1 ^= tout1;
+            tin[0] = tin0;
+            tin[1] = tin1;
+            IDEA_encrypt(tin, ks);
+            tout0 = tin[0];
+            l2n(tout0, out);
+            tout1 = tin[1];
+            l2n(tout1, out);
+        }
+        if (l != -8) {
+            n2ln(in, tin0, tin1, l + 8);
+            tin0 ^= tout0;
+            tin1 ^= tout1;
+            tin[0] = tin0;
+            tin[1] = tin1;
+            IDEA_encrypt(tin, ks);
+            tout0 = tin[0];
+            l2n(tout0, out);
+            tout1 = tin[1];
+            l2n(tout1, out);
+        }
+        l2n(tout0, iv);
+        l2n(tout1, iv);
+    } else {
+        n2l(iv, xor0);
+        n2l(iv, xor1);
+        iv -= 8;
+        for (l -= 8; l >= 0; l -= 8) {
+            n2l(in, tin0);
+            tin[0] = tin0;
+            n2l(in, tin1);
+            tin[1] = tin1;
+            IDEA_encrypt(tin, ks);
+            tout0 = tin[0] ^ xor0;
+            tout1 = tin[1] ^ xor1;
+            l2n(tout0, out);
+            l2n(tout1, out);
+            xor0 = tin0;
+            xor1 = tin1;
+        }
+        if (l != -8) {
+            n2l(in, tin0);
+            tin[0] = tin0;
+            n2l(in, tin1);
+            tin[1] = tin1;
+            IDEA_encrypt(tin, ks);
+            tout0 = tin[0] ^ xor0;
+            tout1 = tin[1] ^ xor1;
+            l2nn(tout0, tout1, out, l + 8);
+            xor0 = tin0;
+            xor1 = tin1;
+        }
+        l2n(xor0, iv);
+        l2n(xor1, iv);
+    }
+    tin0 = tin1 = tout0 = tout1 = xor0 = xor1 = 0;
+    tin[0] = tin[1] = 0;
+}
+
+void IDEA_encrypt(unsigned long *d, IDEA_KEY_SCHEDULE *key)
+{
+    register IDEA_INT *p;
+    register unsigned long x1, x2, x3, x4, t0, t1, ul;
+
+    x2 = d[0];
+    x1 = (x2 >> 16);
+    x4 = d[1];
+    x3 = (x4 >> 16);
+
+    p = &(key->data[0][0]);
+
+    E_IDEA(0);
+    E_IDEA(1);
+    E_IDEA(2);
+    E_IDEA(3);
+    E_IDEA(4);
+    E_IDEA(5);
+    E_IDEA(6);
+    E_IDEA(7);
+
+    x1 &= 0xffff;
+    idea_mul(x1, x1, *p, ul);
+    p++;
+
+    t0 = x3 + *(p++);
+    t1 = x2 + *(p++);
+
+    x4 &= 0xffff;
+    idea_mul(x4, x4, *p, ul);
+
+    d[0] = (t0 & 0xffff) | ((x1 & 0xffff) << 16);
+    d[1] = (x4 & 0xffff) | ((t1 & 0xffff) << 16);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_cfb64.c b/trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_cfb64.c
new file mode 100644
index 000000000..daf467eb5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_cfb64.c
@@ -0,0 +1,74 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/idea.h>
+#include "idea_lcl.h"
+
+/*
+ * The input and output encrypted as though 64bit cfb mode is being used.
+ * The extra state information to record how much of the 64bit block we have
+ * used is contained in *num;
+ */
+
+void IDEA_cfb64_encrypt(const unsigned char *in, unsigned char *out,
+                        long length, IDEA_KEY_SCHEDULE *schedule,
+                        unsigned char *ivec, int *num, int encrypt)
+{
+    register unsigned long v0, v1, t;
+    register int n = *num;
+    register long l = length;
+    unsigned long ti[2];
+    unsigned char *iv, c, cc;
+
+    iv = (unsigned char *)ivec;
+    if (encrypt) {
+        while (l--) {
+            if (n == 0) {
+                n2l(iv, v0);
+                ti[0] = v0;
+                n2l(iv, v1);
+                ti[1] = v1;
+                IDEA_encrypt((unsigned long *)ti, schedule);
+                iv = (unsigned char *)ivec;
+                t = ti[0];
+                l2n(t, iv);
+                t = ti[1];
+                l2n(t, iv);
+                iv = (unsigned char *)ivec;
+            }
+            c = *(in++) ^ iv[n];
+            *(out++) = c;
+            iv[n] = c;
+            n = (n + 1) & 0x07;
+        }
+    } else {
+        while (l--) {
+            if (n == 0) {
+                n2l(iv, v0);
+                ti[0] = v0;
+                n2l(iv, v1);
+                ti[1] = v1;
+                IDEA_encrypt((unsigned long *)ti, schedule);
+                iv = (unsigned char *)ivec;
+                t = ti[0];
+                l2n(t, iv);
+                t = ti[1];
+                l2n(t, iv);
+                iv = (unsigned char *)ivec;
+            }
+            cc = *(in++);
+            c = iv[n];
+            iv[n] = cc;
+            *(out++) = c ^ cc;
+            n = (n + 1) & 0x07;
+        }
+    }
+    v0 = v1 = ti[0] = ti[1] = t = c = cc = 0;
+    *num = n;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_ecb.c b/trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_ecb.c
new file mode 100644
index 000000000..058d0c14c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_ecb.c
@@ -0,0 +1,34 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/idea.h>
+#include "idea_lcl.h"
+#include <openssl/opensslv.h>
+
+const char *IDEA_options(void)
+{
+    return "idea(int)";
+}
+
+void IDEA_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                      IDEA_KEY_SCHEDULE *ks)
+{
+    unsigned long l0, l1, d[2];
+
+    n2l(in, l0);
+    d[0] = l0;
+    n2l(in, l1);
+    d[1] = l1;
+    IDEA_encrypt(d, ks);
+    l0 = d[0];
+    l2n(l0, out);
+    l1 = d[1];
+    l2n(l1, out);
+    l0 = l1 = d[0] = d[1] = 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_ofb64.c b/trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_ofb64.c
new file mode 100644
index 000000000..997a7b88e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_ofb64.c
@@ -0,0 +1,61 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/idea.h>
+#include "idea_lcl.h"
+
+/*
+ * The input and output encrypted as though 64bit ofb mode is being used.
+ * The extra state information to record how much of the 64bit block we have
+ * used is contained in *num;
+ */
+void IDEA_ofb64_encrypt(const unsigned char *in, unsigned char *out,
+                        long length, IDEA_KEY_SCHEDULE *schedule,
+                        unsigned char *ivec, int *num)
+{
+    register unsigned long v0, v1, t;
+    register int n = *num;
+    register long l = length;
+    unsigned char d[8];
+    register char *dp;
+    unsigned long ti[2];
+    unsigned char *iv;
+    int save = 0;
+
+    iv = (unsigned char *)ivec;
+    n2l(iv, v0);
+    n2l(iv, v1);
+    ti[0] = v0;
+    ti[1] = v1;
+    dp = (char *)d;
+    l2n(v0, dp);
+    l2n(v1, dp);
+    while (l--) {
+        if (n == 0) {
+            IDEA_encrypt((unsigned long *)ti, schedule);
+            dp = (char *)d;
+            t = ti[0];
+            l2n(t, dp);
+            t = ti[1];
+            l2n(t, dp);
+            save++;
+        }
+        *(out++) = *(in++) ^ d[n];
+        n = (n + 1) & 0x07;
+    }
+    if (save) {
+        v0 = ti[0];
+        v1 = ti[1];
+        iv = (unsigned char *)ivec;
+        l2n(v0, iv);
+        l2n(v1, iv);
+    }
+    t = v0 = v1 = ti[0] = ti[1] = 0;
+    *num = n;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_skey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_skey.c
new file mode 100644
index 000000000..9d9145580
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/idea/i_skey.c
@@ -0,0 +1,112 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/idea.h>
+#include "idea_lcl.h"
+
+static IDEA_INT inverse(unsigned int xin);
+void IDEA_set_encrypt_key(const unsigned char *key, IDEA_KEY_SCHEDULE *ks)
+{
+    int i;
+    register IDEA_INT *kt, *kf, r0, r1, r2;
+
+    kt = &(ks->data[0][0]);
+    n2s(key, kt[0]);
+    n2s(key, kt[1]);
+    n2s(key, kt[2]);
+    n2s(key, kt[3]);
+    n2s(key, kt[4]);
+    n2s(key, kt[5]);
+    n2s(key, kt[6]);
+    n2s(key, kt[7]);
+
+    kf = kt;
+    kt += 8;
+    for (i = 0; i < 6; i++) {
+        r2 = kf[1];
+        r1 = kf[2];
+        *(kt++) = ((r2 << 9) | (r1 >> 7)) & 0xffff;
+        r0 = kf[3];
+        *(kt++) = ((r1 << 9) | (r0 >> 7)) & 0xffff;
+        r1 = kf[4];
+        *(kt++) = ((r0 << 9) | (r1 >> 7)) & 0xffff;
+        r0 = kf[5];
+        *(kt++) = ((r1 << 9) | (r0 >> 7)) & 0xffff;
+        r1 = kf[6];
+        *(kt++) = ((r0 << 9) | (r1 >> 7)) & 0xffff;
+        r0 = kf[7];
+        *(kt++) = ((r1 << 9) | (r0 >> 7)) & 0xffff;
+        r1 = kf[0];
+        if (i >= 5)
+            break;
+        *(kt++) = ((r0 << 9) | (r1 >> 7)) & 0xffff;
+        *(kt++) = ((r1 << 9) | (r2 >> 7)) & 0xffff;
+        kf += 8;
+    }
+}
+
+void IDEA_set_decrypt_key(IDEA_KEY_SCHEDULE *ek, IDEA_KEY_SCHEDULE *dk)
+{
+    int r;
+    register IDEA_INT *fp, *tp, t;
+
+    tp = &(dk->data[0][0]);
+    fp = &(ek->data[8][0]);
+    for (r = 0; r < 9; r++) {
+        *(tp++) = inverse(fp[0]);
+        *(tp++) = ((int)(0x10000L - fp[2]) & 0xffff);
+        *(tp++) = ((int)(0x10000L - fp[1]) & 0xffff);
+        *(tp++) = inverse(fp[3]);
+        if (r == 8)
+            break;
+        fp -= 6;
+        *(tp++) = fp[4];
+        *(tp++) = fp[5];
+    }
+
+    tp = &(dk->data[0][0]);
+    t = tp[1];
+    tp[1] = tp[2];
+    tp[2] = t;
+
+    t = tp[49];
+    tp[49] = tp[50];
+    tp[50] = t;
+}
+
+/* taken directly from the 'paper' I'll have a look at it later */
+static IDEA_INT inverse(unsigned int xin)
+{
+    long n1, n2, q, r, b1, b2, t;
+
+    if (xin == 0)
+        b2 = 0;
+    else {
+        n1 = 0x10001;
+        n2 = xin;
+        b2 = 1;
+        b1 = 0;
+
+        do {
+            r = (n1 % n2);
+            q = (n1 - r) / n2;
+            if (r == 0) {
+                if (b2 < 0)
+                    b2 = 0x10001 + b2;
+            } else {
+                n1 = n2;
+                n2 = r;
+                t = b2;
+                b2 = b1 - q * b2;
+                b1 = t;
+            }
+        } while (r != 0);
+    }
+    return (IDEA_INT)b2;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/idea/idea_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/idea/idea_lcl.h
new file mode 100644
index 000000000..50f81dfd8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/idea/idea_lcl.h
@@ -0,0 +1,102 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#define idea_mul(r,a,b,ul) \
+ul=(unsigned long)a*b; \
+if (ul != 0) \
+        { \
+        r=(ul&0xffff)-(ul>>16); \
+        r-=((r)>>16); \
+        } \
+else \
+        r=(-(int)a-b+1);        /* assuming a or b is 0 and in range */
+
+/* NOTE - c is not incremented as per n2l */
+#define n2ln(c,l1,l2,n) { \
+                        c+=n; \
+                        l1=l2=0; \
+                        switch (n) { \
+                        case 8: l2 =((unsigned long)(*(--(c))))    ; \
+                        /* fall thru */                              \
+                        case 7: l2|=((unsigned long)(*(--(c))))<< 8; \
+                        /* fall thru */                              \
+                        case 6: l2|=((unsigned long)(*(--(c))))<<16; \
+                        /* fall thru */                              \
+                        case 5: l2|=((unsigned long)(*(--(c))))<<24; \
+                        /* fall thru */                              \
+                        case 4: l1 =((unsigned long)(*(--(c))))    ; \
+                        /* fall thru */                              \
+                        case 3: l1|=((unsigned long)(*(--(c))))<< 8; \
+                        /* fall thru */                              \
+                        case 2: l1|=((unsigned long)(*(--(c))))<<16; \
+                        /* fall thru */                              \
+                        case 1: l1|=((unsigned long)(*(--(c))))<<24; \
+                                } \
+                        }
+
+/* NOTE - c is not incremented as per l2n */
+#define l2nn(l1,l2,c,n) { \
+                        c+=n; \
+                        switch (n) { \
+                        case 8: *(--(c))=(unsigned char)(((l2)    )&0xff); \
+                        /* fall thru */                                    \
+                        case 7: *(--(c))=(unsigned char)(((l2)>> 8)&0xff); \
+                        /* fall thru */                                    \
+                        case 6: *(--(c))=(unsigned char)(((l2)>>16)&0xff); \
+                        /* fall thru */                                    \
+                        case 5: *(--(c))=(unsigned char)(((l2)>>24)&0xff); \
+                        /* fall thru */                                    \
+                        case 4: *(--(c))=(unsigned char)(((l1)    )&0xff); \
+                        /* fall thru */                                    \
+                        case 3: *(--(c))=(unsigned char)(((l1)>> 8)&0xff); \
+                        /* fall thru */                                    \
+                        case 2: *(--(c))=(unsigned char)(((l1)>>16)&0xff); \
+                        /* fall thru */                                    \
+                        case 1: *(--(c))=(unsigned char)(((l1)>>24)&0xff); \
+                                } \
+                        }
+
+#undef n2l
+#define n2l(c,l)        (l =((unsigned long)(*((c)++)))<<24L, \
+                         l|=((unsigned long)(*((c)++)))<<16L, \
+                         l|=((unsigned long)(*((c)++)))<< 8L, \
+                         l|=((unsigned long)(*((c)++))))
+
+#undef l2n
+#define l2n(l,c)        (*((c)++)=(unsigned char)(((l)>>24L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>16L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>> 8L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)     )&0xff))
+
+#undef s2n
+#define s2n(l,c)        (*((c)++)=(unsigned char)(((l)     )&0xff), \
+                         *((c)++)=(unsigned char)(((l)>> 8L)&0xff))
+
+#undef n2s
+#define n2s(c,l)        (l =((IDEA_INT)(*((c)++)))<< 8L, \
+                         l|=((IDEA_INT)(*((c)++)))      )
+
+
+#define E_IDEA(num) \
+        x1&=0xffff; \
+        idea_mul(x1,x1,*p,ul); p++; \
+        x2+= *(p++); \
+        x3+= *(p++); \
+        x4&=0xffff; \
+        idea_mul(x4,x4,*p,ul); p++; \
+        t0=(x1^x3)&0xffff; \
+        idea_mul(t0,t0,*p,ul); p++; \
+        t1=(t0+(x2^x4))&0xffff; \
+        idea_mul(t1,t1,*p,ul); p++; \
+        t0+=t1; \
+        x1^=t1; \
+        x4^=t0; \
+        ul=x2^t0; /* do the swap to x3 */ \
+        x2=x3^t1; \
+        x3=ul;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/__DECC_INCLUDE_EPILOGUE.H b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/__DECC_INCLUDE_EPILOGUE.H
new file mode 100644
index 000000000..c350018ad
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/__DECC_INCLUDE_EPILOGUE.H
@@ -0,0 +1,16 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file is only used by HP C on VMS, and is included automatically
+ * after each header file from this directory
+ */
+
+/* restore state.  Must correspond to the save in __decc_include_prologue.h */
+#pragma names restore
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/__DECC_INCLUDE_PROLOGUE.H b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/__DECC_INCLUDE_PROLOGUE.H
new file mode 100644
index 000000000..9a9c777f9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/__DECC_INCLUDE_PROLOGUE.H
@@ -0,0 +1,20 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file is only used by HP C on VMS, and is included automatically
+ * after each header file from this directory
+ */
+
+/* save state */
+#pragma names save
+/* have the compiler shorten symbols larger than 31 chars to 23 chars
+ * followed by a 8 hex char CRC
+ */
+#pragma names as_is,shortened
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/aria.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/aria.h
new file mode 100644
index 000000000..355abe539
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/aria.h
@@ -0,0 +1,50 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2017, Oracle and/or its affiliates.  All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+ /* Copyright (c) 2017 National Security Research Institute.  All rights reserved. */
+
+#ifndef HEADER_ARIA_H
+# define HEADER_ARIA_H
+
+# include <openssl/opensslconf.h>
+
+# ifdef OPENSSL_NO_ARIA
+#  error ARIA is disabled.
+# endif
+
+# define ARIA_ENCRYPT     1
+# define ARIA_DECRYPT     0
+
+# define ARIA_BLOCK_SIZE    16  /* Size of each encryption/decryption block */
+# define ARIA_MAX_KEYS      17  /* Number of keys needed in the worst case  */
+
+typedef union {
+    unsigned char c[ARIA_BLOCK_SIZE];
+    unsigned int u[ARIA_BLOCK_SIZE / sizeof(unsigned int)];
+} ARIA_u128;
+
+typedef unsigned char ARIA_c128[ARIA_BLOCK_SIZE];
+
+struct aria_key_st {
+    ARIA_u128 rd_key[ARIA_MAX_KEYS];
+    unsigned int rounds;
+};
+typedef struct aria_key_st ARIA_KEY;
+
+
+int aria_set_encrypt_key(const unsigned char *userKey, const int bits,
+                         ARIA_KEY *key);
+int aria_set_decrypt_key(const unsigned char *userKey, const int bits,
+                         ARIA_KEY *key);
+
+void aria_encrypt(const unsigned char *in, unsigned char *out,
+                  const ARIA_KEY *key);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/asn1_int.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/asn1_int.h
new file mode 100644
index 000000000..9c9b4d897
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/asn1_int.h
@@ -0,0 +1,113 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* Internal ASN1 structures and functions: not for application use */
+
+/* ASN1 public key method structure */
+
+struct evp_pkey_asn1_method_st {
+    int pkey_id;
+    int pkey_base_id;
+    unsigned long pkey_flags;
+    char *pem_str;
+    char *info;
+    int (*pub_decode) (EVP_PKEY *pk, X509_PUBKEY *pub);
+    int (*pub_encode) (X509_PUBKEY *pub, const EVP_PKEY *pk);
+    int (*pub_cmp) (const EVP_PKEY *a, const EVP_PKEY *b);
+    int (*pub_print) (BIO *out, const EVP_PKEY *pkey, int indent,
+                      ASN1_PCTX *pctx);
+    int (*priv_decode) (EVP_PKEY *pk, const PKCS8_PRIV_KEY_INFO *p8inf);
+    int (*priv_encode) (PKCS8_PRIV_KEY_INFO *p8, const EVP_PKEY *pk);
+    int (*priv_print) (BIO *out, const EVP_PKEY *pkey, int indent,
+                       ASN1_PCTX *pctx);
+    int (*pkey_size) (const EVP_PKEY *pk);
+    int (*pkey_bits) (const EVP_PKEY *pk);
+    int (*pkey_security_bits) (const EVP_PKEY *pk);
+    int (*param_decode) (EVP_PKEY *pkey,
+                         const unsigned char **pder, int derlen);
+    int (*param_encode) (const EVP_PKEY *pkey, unsigned char **pder);
+    int (*param_missing) (const EVP_PKEY *pk);
+    int (*param_copy) (EVP_PKEY *to, const EVP_PKEY *from);
+    int (*param_cmp) (const EVP_PKEY *a, const EVP_PKEY *b);
+    int (*param_print) (BIO *out, const EVP_PKEY *pkey, int indent,
+                        ASN1_PCTX *pctx);
+    int (*sig_print) (BIO *out,
+                      const X509_ALGOR *sigalg, const ASN1_STRING *sig,
+                      int indent, ASN1_PCTX *pctx);
+    void (*pkey_free) (EVP_PKEY *pkey);
+    int (*pkey_ctrl) (EVP_PKEY *pkey, int op, long arg1, void *arg2);
+    /* Legacy functions for old PEM */
+    int (*old_priv_decode) (EVP_PKEY *pkey,
+                            const unsigned char **pder, int derlen);
+    int (*old_priv_encode) (const EVP_PKEY *pkey, unsigned char **pder);
+    /* Custom ASN1 signature verification */
+    int (*item_verify) (EVP_MD_CTX *ctx, const ASN1_ITEM *it, void *asn,
+                        X509_ALGOR *a, ASN1_BIT_STRING *sig, EVP_PKEY *pkey);
+    int (*item_sign) (EVP_MD_CTX *ctx, const ASN1_ITEM *it, void *asn,
+                      X509_ALGOR *alg1, X509_ALGOR *alg2,
+                      ASN1_BIT_STRING *sig);
+    int (*siginf_set) (X509_SIG_INFO *siginf, const X509_ALGOR *alg,
+                       const ASN1_STRING *sig);
+    /* Check */
+    int (*pkey_check) (const EVP_PKEY *pk);
+    int (*pkey_public_check) (const EVP_PKEY *pk);
+    int (*pkey_param_check) (const EVP_PKEY *pk);
+    /* Get/set raw private/public key data */
+    int (*set_priv_key) (EVP_PKEY *pk, const unsigned char *priv, size_t len);
+    int (*set_pub_key) (EVP_PKEY *pk, const unsigned char *pub, size_t len);
+    int (*get_priv_key) (const EVP_PKEY *pk, unsigned char *priv, size_t *len);
+    int (*get_pub_key) (const EVP_PKEY *pk, unsigned char *pub, size_t *len);
+} /* EVP_PKEY_ASN1_METHOD */ ;
+
+DEFINE_STACK_OF_CONST(EVP_PKEY_ASN1_METHOD)
+
+extern const EVP_PKEY_ASN1_METHOD cmac_asn1_meth;
+extern const EVP_PKEY_ASN1_METHOD dh_asn1_meth;
+extern const EVP_PKEY_ASN1_METHOD dhx_asn1_meth;
+extern const EVP_PKEY_ASN1_METHOD dsa_asn1_meths[5];
+extern const EVP_PKEY_ASN1_METHOD eckey_asn1_meth;
+extern const EVP_PKEY_ASN1_METHOD ecx25519_asn1_meth;
+extern const EVP_PKEY_ASN1_METHOD ecx448_asn1_meth;
+extern const EVP_PKEY_ASN1_METHOD ed25519_asn1_meth;
+extern const EVP_PKEY_ASN1_METHOD ed448_asn1_meth;
+extern const EVP_PKEY_ASN1_METHOD sm2_asn1_meth;
+extern const EVP_PKEY_ASN1_METHOD poly1305_asn1_meth;
+
+extern const EVP_PKEY_ASN1_METHOD hmac_asn1_meth;
+extern const EVP_PKEY_ASN1_METHOD rsa_asn1_meths[2];
+extern const EVP_PKEY_ASN1_METHOD rsa_pss_asn1_meth;
+extern const EVP_PKEY_ASN1_METHOD siphash_asn1_meth;
+
+/*
+ * These are used internally in the ASN1_OBJECT to keep track of whether the
+ * names and data need to be free()ed
+ */
+# define ASN1_OBJECT_FLAG_DYNAMIC         0x01/* internal use */
+# define ASN1_OBJECT_FLAG_CRITICAL        0x02/* critical x509v3 object id */
+# define ASN1_OBJECT_FLAG_DYNAMIC_STRINGS 0x04/* internal use */
+# define ASN1_OBJECT_FLAG_DYNAMIC_DATA    0x08/* internal use */
+struct asn1_object_st {
+    const char *sn, *ln;
+    int nid;
+    int length;
+    const unsigned char *data;  /* data remains const after init */
+    int flags;                  /* Should we free this one */
+};
+
+/* ASN1 print context structure */
+
+struct asn1_pctx_st {
+    unsigned long flags;
+    unsigned long nm_flags;
+    unsigned long cert_flags;
+    unsigned long oid_flags;
+    unsigned long str_flags;
+} /* ASN1_PCTX */ ;
+
+int asn1_d2i_read_bio(BIO *in, BUF_MEM **pb);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/async.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/async.h
new file mode 100644
index 000000000..dc8e937b0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/async.h
@@ -0,0 +1,15 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/async.h>
+
+int async_init(void);
+void async_deinit(void);
+void async_delete_thread_state(void);
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/bn_conf.h.in b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/bn_conf.h.in
new file mode 100644
index 000000000..ec6e4f6c1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/bn_conf.h.in
@@ -0,0 +1,27 @@
+{- join("\n",map { "/* $_ */" } @autowarntext) -}
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_BN_CONF_H
+# define HEADER_BN_CONF_H
+
+/*
+ * The contents of this file are not used in the UEFI build, as
+ * both 32-bit and 64-bit builds are supported from a single run
+ * of the Configure script.
+ */
+
+/* Should we define BN_DIV2W here? */
+
+/* Only one for the following should be defined */
+{- $config{b64l} ? "#define" : "#undef" -} SIXTY_FOUR_BIT_LONG
+{- $config{b64}  ? "#define" : "#undef" -} SIXTY_FOUR_BIT
+{- $config{b32}  ? "#define" : "#undef" -} THIRTY_TWO_BIT
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/bn_dh.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/bn_dh.h
new file mode 100644
index 000000000..70ebca287
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/bn_dh.h
@@ -0,0 +1,24 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#define declare_dh_bn(x) \
+    extern const BIGNUM _bignum_dh##x##_p;              \
+    extern const BIGNUM _bignum_dh##x##_g;              \
+    extern const BIGNUM _bignum_dh##x##_q;
+
+declare_dh_bn(1024_160)
+declare_dh_bn(2048_224)
+declare_dh_bn(2048_256)
+
+extern const BIGNUM _bignum_ffdhe2048_p;
+extern const BIGNUM _bignum_ffdhe3072_p;
+extern const BIGNUM _bignum_ffdhe4096_p;
+extern const BIGNUM _bignum_ffdhe6144_p;
+extern const BIGNUM _bignum_ffdhe8192_p;
+extern const BIGNUM _bignum_const_2;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/bn_int.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/bn_int.h
new file mode 100644
index 000000000..30be7efe1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/bn_int.h
@@ -0,0 +1,90 @@
+/*
+ * Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_BN_INT_H
+# define HEADER_BN_INT_H
+
+# include <openssl/bn.h>
+# include <limits.h>
+
+BIGNUM *bn_wexpand(BIGNUM *a, int words);
+BIGNUM *bn_expand2(BIGNUM *a, int words);
+
+void bn_correct_top(BIGNUM *a);
+
+/*
+ * Determine the modified width-(w+1) Non-Adjacent Form (wNAF) of 'scalar'.
+ * This is an array r[] of values that are either zero or odd with an
+ * absolute value less than 2^w satisfying scalar = \sum_j r[j]*2^j where at
+ * most one of any w+1 consecutive digits is non-zero with the exception that
+ * the most significant digit may be only w-1 zeros away from that next
+ * non-zero digit.
+ */
+signed char *bn_compute_wNAF(const BIGNUM *scalar, int w, size_t *ret_len);
+
+int bn_get_top(const BIGNUM *a);
+
+int bn_get_dmax(const BIGNUM *a);
+
+/* Set all words to zero */
+void bn_set_all_zero(BIGNUM *a);
+
+/*
+ * Copy the internal BIGNUM words into out which holds size elements (and size
+ * must be bigger than top)
+ */
+int bn_copy_words(BN_ULONG *out, const BIGNUM *in, int size);
+
+BN_ULONG *bn_get_words(const BIGNUM *a);
+
+/*
+ * Set the internal data words in a to point to words which contains size
+ * elements. The BN_FLG_STATIC_DATA flag is set
+ */
+void bn_set_static_words(BIGNUM *a, const BN_ULONG *words, int size);
+
+/*
+ * Copy words into the BIGNUM |a|, reallocating space as necessary.
+ * The negative flag of |a| is not modified.
+ * Returns 1 on success and 0 on failure.
+ */
+/*
+ * |num_words| is int because bn_expand2 takes an int. This is an internal
+ * function so we simply trust callers not to pass negative values.
+ */
+int bn_set_words(BIGNUM *a, const BN_ULONG *words, int num_words);
+
+/*
+ * Some BIGNUM functions assume most significant limb to be non-zero, which
+ * is customarily arranged by bn_correct_top. Output from below functions
+ * is not processed with bn_correct_top, and for this reason it may not be
+ * returned out of public API. It may only be passed internally into other
+ * functions known to support non-minimal or zero-padded BIGNUMs. Even
+ * though the goal is to facilitate constant-time-ness, not each subroutine
+ * is constant-time by itself. They all have pre-conditions, consult source
+ * code...
+ */
+int bn_mul_mont_fixed_top(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                          BN_MONT_CTX *mont, BN_CTX *ctx);
+int bn_to_mont_fixed_top(BIGNUM *r, const BIGNUM *a, BN_MONT_CTX *mont,
+                         BN_CTX *ctx);
+int bn_from_mont_fixed_top(BIGNUM *r, const BIGNUM *a, BN_MONT_CTX *mont,
+                           BN_CTX *ctx);
+int bn_mod_add_fixed_top(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                         const BIGNUM *m);
+int bn_mod_sub_fixed_top(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                         const BIGNUM *m);
+int bn_mul_fixed_top(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx);
+int bn_sqr_fixed_top(BIGNUM *r, const BIGNUM *a, BN_CTX *ctx);
+int bn_lshift_fixed_top(BIGNUM *r, const BIGNUM *a, int n);
+int bn_rshift_fixed_top(BIGNUM *r, const BIGNUM *a, int n);
+int bn_div_fixed_top(BIGNUM *dv, BIGNUM *rem, const BIGNUM *m,
+                     const BIGNUM *d, BN_CTX *ctx);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/bn_srp.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/bn_srp.h
new file mode 100644
index 000000000..d4b282a6b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/bn_srp.h
@@ -0,0 +1,32 @@
+/*
+ * Copyright 2014-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef OPENSSL_NO_SRP
+
+extern const BIGNUM bn_group_1024;
+
+extern const BIGNUM bn_group_1536;
+
+extern const BIGNUM bn_group_2048;
+
+extern const BIGNUM bn_group_3072;
+
+extern const BIGNUM bn_group_4096;
+
+extern const BIGNUM bn_group_6144;
+
+extern const BIGNUM bn_group_8192;
+
+extern const BIGNUM bn_generator_19;
+
+extern const BIGNUM bn_generator_5;
+
+extern const BIGNUM bn_generator_2;
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/chacha.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/chacha.h
new file mode 100644
index 000000000..67243f222
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/chacha.h
@@ -0,0 +1,42 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_CHACHA_H
+#define HEADER_CHACHA_H
+
+#include <stddef.h>
+
+/*
+ * ChaCha20_ctr32 encrypts |len| bytes from |inp| with the given key and
+ * nonce and writes the result to |out|, which may be equal to |inp|.
+ * The |key| is not 32 bytes of verbatim key material though, but the
+ * said material collected into 8 32-bit elements array in host byte
+ * order. Same approach applies to nonce: the |counter| argument is
+ * pointer to concatenated nonce and counter values collected into 4
+ * 32-bit elements. This, passing crypto material collected into 32-bit
+ * elements as opposite to passing verbatim byte vectors, is chosen for
+ * efficiency in multi-call scenarios.
+ */
+void ChaCha20_ctr32(unsigned char *out, const unsigned char *inp,
+                    size_t len, const unsigned int key[8],
+                    const unsigned int counter[4]);
+/*
+ * You can notice that there is no key setup procedure. Because it's
+ * as trivial as collecting bytes into 32-bit elements, it's reckoned
+ * that below macro is sufficient.
+ */
+#define CHACHA_U8TOU32(p)  ( \
+                ((unsigned int)(p)[0])     | ((unsigned int)(p)[1]<<8) | \
+                ((unsigned int)(p)[2]<<16) | ((unsigned int)(p)[3]<<24)  )
+
+#define CHACHA_KEY_SIZE		32
+#define CHACHA_CTR_SIZE		16
+#define CHACHA_BLK_SIZE		64
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/cryptlib_int.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/cryptlib_int.h
new file mode 100644
index 000000000..38b5dac9a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/cryptlib_int.h
@@ -0,0 +1,35 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+
+/* This file is not scanned by mkdef.pl, whereas cryptlib.h is */
+
+struct thread_local_inits_st {
+    int async;
+    int err_state;
+    int rand;
+};
+
+int ossl_init_thread_start(uint64_t opts);
+
+/*
+ * OPENSSL_INIT flags. The primary list of these is in crypto.h. Flags below
+ * are those omitted from crypto.h because they are "reserved for internal
+ * use".
+ */
+# define OPENSSL_INIT_ZLIB                   0x00010000L
+# define OPENSSL_INIT_BASE_ONLY              0x00040000L
+
+/* OPENSSL_INIT_THREAD flags */
+# define OPENSSL_INIT_THREAD_ASYNC           0x01
+# define OPENSSL_INIT_THREAD_ERR_STATE       0x02
+# define OPENSSL_INIT_THREAD_RAND            0x04
+
+void ossl_malloc_setup_failures(void);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/ctype.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/ctype.h
new file mode 100644
index 000000000..a35b12bfb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/ctype.h
@@ -0,0 +1,80 @@
+/*
+ * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This version of ctype.h provides a standardised and platform
+ * independent implementation that supports seven bit ASCII characters.
+ * The specific intent is to not pass extended ASCII characters (> 127)
+ * even if the host operating system would.
+ *
+ * There is EBCDIC support included for machines which use this.  However,
+ * there are a number of concerns about how well EBCDIC is supported
+ * throughout the rest of the source code.  Refer to issue #4154 for
+ * details.
+ */
+#ifndef INTERNAL_CTYPE_H
+# define INTERNAL_CTYPE_H
+
+# define CTYPE_MASK_lower       0x1
+# define CTYPE_MASK_upper       0x2
+# define CTYPE_MASK_digit       0x4
+# define CTYPE_MASK_space       0x8
+# define CTYPE_MASK_xdigit      0x10
+# define CTYPE_MASK_blank       0x20
+# define CTYPE_MASK_cntrl       0x40
+# define CTYPE_MASK_graph       0x80
+# define CTYPE_MASK_print       0x100
+# define CTYPE_MASK_punct       0x200
+# define CTYPE_MASK_base64      0x400
+# define CTYPE_MASK_asn1print   0x800
+
+# define CTYPE_MASK_alpha   (CTYPE_MASK_lower | CTYPE_MASK_upper)
+# define CTYPE_MASK_alnum   (CTYPE_MASK_alpha | CTYPE_MASK_digit)
+
+/*
+ * The ascii mask assumes that any other classification implies that
+ * the character is ASCII and that there are no ASCII characters
+ * that aren't in any of the classifications.
+ *
+ * This assumption holds at the moment, but it might not in the future.
+ */
+# define CTYPE_MASK_ascii   (~0)
+
+# ifdef CHARSET_EBCDIC
+int ossl_toascii(int c);
+int ossl_fromascii(int c);
+# else
+#  define ossl_toascii(c)       (c)
+#  define ossl_fromascii(c)     (c)
+# endif
+int ossl_ctype_check(int c, unsigned int mask);
+int ossl_tolower(int c);
+int ossl_toupper(int c);
+
+# define ossl_isalnum(c)        (ossl_ctype_check((c), CTYPE_MASK_alnum))
+# define ossl_isalpha(c)        (ossl_ctype_check((c), CTYPE_MASK_alpha))
+# ifdef CHARSET_EBCDIC
+# define ossl_isascii(c)        (ossl_ctype_check((c), CTYPE_MASK_ascii))
+# else
+# define ossl_isascii(c)        (((c) & ~127) == 0)
+# endif
+# define ossl_isblank(c)        (ossl_ctype_check((c), CTYPE_MASK_blank))
+# define ossl_iscntrl(c)        (ossl_ctype_check((c), CTYPE_MASK_cntrl))
+# define ossl_isdigit(c)        (ossl_ctype_check((c), CTYPE_MASK_digit))
+# define ossl_isgraph(c)        (ossl_ctype_check((c), CTYPE_MASK_graph))
+# define ossl_islower(c)        (ossl_ctype_check((c), CTYPE_MASK_lower))
+# define ossl_isprint(c)        (ossl_ctype_check((c), CTYPE_MASK_print))
+# define ossl_ispunct(c)        (ossl_ctype_check((c), CTYPE_MASK_punct))
+# define ossl_isspace(c)        (ossl_ctype_check((c), CTYPE_MASK_space))
+# define ossl_isupper(c)        (ossl_ctype_check((c), CTYPE_MASK_upper))
+# define ossl_isxdigit(c)       (ossl_ctype_check((c), CTYPE_MASK_xdigit))
+# define ossl_isbase64(c)       (ossl_ctype_check((c), CTYPE_MASK_base64))
+# define ossl_isasn1print(c)    (ossl_ctype_check((c), CTYPE_MASK_asn1print))
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/dso_conf.h.in b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/dso_conf.h.in
new file mode 100644
index 000000000..d6e9d1b1b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/dso_conf.h.in
@@ -0,0 +1,30 @@
+{- join("\n",map { "/* $_ */" } @autowarntext) -}
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_DSO_CONF_H
+# define HEADER_DSO_CONF_H
+{- output_off() if $disabled{dso} -}
+{-  # The DSO code currently always implements all functions so that no
+    # applications will have to worry about that from a compilation point
+    # of view. However, the "method"s may return zero unless that platform
+    # has support compiled in for them. Currently each method is enabled
+    # by a define "DSO_<name>" ... we translate the "dso_scheme" config
+    # string entry into using the following logic;
+    my $scheme = uc $target{dso_scheme};
+    my @macros = ( "DSO_$scheme" );
+    if ($scheme eq 'DLFCN') {
+        @macros = ( "DSO_DLFCN", "HAVE_DLFCN_H" );
+    } elsif ($scheme eq "DLFCN_NO_H") {
+        @macros = ( "DSO_DLFCN" );
+    }
+    join("\n", map { "# define $_" } @macros); -}
+# define DSO_EXTENSION "{- $target{dso_extension} -}"
+{- output_on() if $disabled{dso} -}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/ec_int.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/ec_int.h
new file mode 100644
index 000000000..182c39cc8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/ec_int.h
@@ -0,0 +1,53 @@
+/*
+ * Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* Internal EC functions for other submodules: not for application use */
+
+#ifndef HEADER_OSSL_EC_INTERNAL_H
+# define HEADER_OSSL_EC_INTERNAL_H
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_EC
+
+#  include <openssl/ec.h>
+
+/*-
+ * Computes the multiplicative inverse of x in the range
+ * [1,EC_GROUP::order), where EC_GROUP::order is the cardinality of the
+ * subgroup generated by the generator G:
+ *
+ *         res := x^(-1) (mod EC_GROUP::order).
+ *
+ * This function expects the following two conditions to hold:
+ *  - the EC_GROUP order is prime, and
+ *  - x is included in the range [1, EC_GROUP::order).
+ *
+ * This function returns 1 on success, 0 on error.
+ *
+ * If the EC_GROUP order is even, this function explicitly returns 0 as
+ * an error.
+ * In case any of the two conditions stated above is not satisfied,
+ * the correctness of its output is not guaranteed, even if the return
+ * value could still be 1 (as primality testing and a conditional modular
+ * reduction round on the input can be omitted by the underlying
+ * implementations for better SCA properties on regular input values).
+ */
+__owur int ec_group_do_inverse_ord(const EC_GROUP *group, BIGNUM *res,
+                                   const BIGNUM *x, BN_CTX *ctx);
+
+/*-
+ * ECDH Key Derivation Function as defined in ANSI X9.63
+ */
+int ecdh_KDF_X9_63(unsigned char *out, size_t outlen,
+                   const unsigned char *Z, size_t Zlen,
+                   const unsigned char *sinfo, size_t sinfolen,
+                   const EVP_MD *md);
+
+# endif /* OPENSSL_NO_EC */
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/engine.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/engine.h
new file mode 100644
index 000000000..f80ae3ec3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/engine.h
@@ -0,0 +1,20 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/engine.h>
+
+void engine_load_openssl_int(void);
+void engine_load_devcrypto_int(void);
+void engine_load_rdrand_int(void);
+void engine_load_dynamic_int(void);
+void engine_load_padlock_int(void);
+void engine_load_capi_int(void);
+void engine_load_dasync_int(void);
+void engine_load_afalg_int(void);
+void engine_cleanup_int(void);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/err_int.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/err_int.h
new file mode 100644
index 000000000..44ac94462
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/err_int.h
@@ -0,0 +1,19 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef INTERNAL_ERR_INT_H
+# define INTERNAL_ERR_INT_H
+
+int err_load_crypto_strings_int(void);
+void err_cleanup(void);
+void err_delete_thread_state(void);
+int err_shelve_state(void **);
+void err_unshelve_state(void *);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/evp_int.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/evp_int.h
new file mode 100644
index 000000000..d86aed36f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/evp_int.h
@@ -0,0 +1,442 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/evp.h>
+#include "internal/refcount.h"
+
+/*
+ * Don't free up md_ctx->pctx in EVP_MD_CTX_reset, use the reserved flag
+ * values in evp.h
+ */
+#define EVP_MD_CTX_FLAG_KEEP_PKEY_CTX   0x0400
+
+struct evp_pkey_ctx_st {
+    /* Method associated with this operation */
+    const EVP_PKEY_METHOD *pmeth;
+    /* Engine that implements this method or NULL if builtin */
+    ENGINE *engine;
+    /* Key: may be NULL */
+    EVP_PKEY *pkey;
+    /* Peer key for key agreement, may be NULL */
+    EVP_PKEY *peerkey;
+    /* Actual operation */
+    int operation;
+    /* Algorithm specific data */
+    void *data;
+    /* Application specific data */
+    void *app_data;
+    /* Keygen callback */
+    EVP_PKEY_gen_cb *pkey_gencb;
+    /* implementation specific keygen data */
+    int *keygen_info;
+    int keygen_info_count;
+} /* EVP_PKEY_CTX */ ;
+
+#define EVP_PKEY_FLAG_DYNAMIC   1
+
+struct evp_pkey_method_st {
+    int pkey_id;
+    int flags;
+    int (*init) (EVP_PKEY_CTX *ctx);
+    int (*copy) (EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src);
+    void (*cleanup) (EVP_PKEY_CTX *ctx);
+    int (*paramgen_init) (EVP_PKEY_CTX *ctx);
+    int (*paramgen) (EVP_PKEY_CTX *ctx, EVP_PKEY *pkey);
+    int (*keygen_init) (EVP_PKEY_CTX *ctx);
+    int (*keygen) (EVP_PKEY_CTX *ctx, EVP_PKEY *pkey);
+    int (*sign_init) (EVP_PKEY_CTX *ctx);
+    int (*sign) (EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
+                 const unsigned char *tbs, size_t tbslen);
+    int (*verify_init) (EVP_PKEY_CTX *ctx);
+    int (*verify) (EVP_PKEY_CTX *ctx,
+                   const unsigned char *sig, size_t siglen,
+                   const unsigned char *tbs, size_t tbslen);
+    int (*verify_recover_init) (EVP_PKEY_CTX *ctx);
+    int (*verify_recover) (EVP_PKEY_CTX *ctx,
+                           unsigned char *rout, size_t *routlen,
+                           const unsigned char *sig, size_t siglen);
+    int (*signctx_init) (EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx);
+    int (*signctx) (EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
+                    EVP_MD_CTX *mctx);
+    int (*verifyctx_init) (EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx);
+    int (*verifyctx) (EVP_PKEY_CTX *ctx, const unsigned char *sig, int siglen,
+                      EVP_MD_CTX *mctx);
+    int (*encrypt_init) (EVP_PKEY_CTX *ctx);
+    int (*encrypt) (EVP_PKEY_CTX *ctx, unsigned char *out, size_t *outlen,
+                    const unsigned char *in, size_t inlen);
+    int (*decrypt_init) (EVP_PKEY_CTX *ctx);
+    int (*decrypt) (EVP_PKEY_CTX *ctx, unsigned char *out, size_t *outlen,
+                    const unsigned char *in, size_t inlen);
+    int (*derive_init) (EVP_PKEY_CTX *ctx);
+    int (*derive) (EVP_PKEY_CTX *ctx, unsigned char *key, size_t *keylen);
+    int (*ctrl) (EVP_PKEY_CTX *ctx, int type, int p1, void *p2);
+    int (*ctrl_str) (EVP_PKEY_CTX *ctx, const char *type, const char *value);
+    int (*digestsign) (EVP_MD_CTX *ctx, unsigned char *sig, size_t *siglen,
+                       const unsigned char *tbs, size_t tbslen);
+    int (*digestverify) (EVP_MD_CTX *ctx, const unsigned char *sig,
+                         size_t siglen, const unsigned char *tbs,
+                         size_t tbslen);
+    int (*check) (EVP_PKEY *pkey);
+    int (*public_check) (EVP_PKEY *pkey);
+    int (*param_check) (EVP_PKEY *pkey);
+
+    int (*digest_custom) (EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx);
+} /* EVP_PKEY_METHOD */ ;
+
+DEFINE_STACK_OF_CONST(EVP_PKEY_METHOD)
+
+void evp_pkey_set_cb_translate(BN_GENCB *cb, EVP_PKEY_CTX *ctx);
+
+extern const EVP_PKEY_METHOD cmac_pkey_meth;
+extern const EVP_PKEY_METHOD dh_pkey_meth;
+extern const EVP_PKEY_METHOD dhx_pkey_meth;
+extern const EVP_PKEY_METHOD dsa_pkey_meth;
+extern const EVP_PKEY_METHOD ec_pkey_meth;
+extern const EVP_PKEY_METHOD sm2_pkey_meth;
+extern const EVP_PKEY_METHOD ecx25519_pkey_meth;
+extern const EVP_PKEY_METHOD ecx448_pkey_meth;
+extern const EVP_PKEY_METHOD ed25519_pkey_meth;
+extern const EVP_PKEY_METHOD ed448_pkey_meth;
+extern const EVP_PKEY_METHOD hmac_pkey_meth;
+extern const EVP_PKEY_METHOD rsa_pkey_meth;
+extern const EVP_PKEY_METHOD rsa_pss_pkey_meth;
+extern const EVP_PKEY_METHOD scrypt_pkey_meth;
+extern const EVP_PKEY_METHOD tls1_prf_pkey_meth;
+extern const EVP_PKEY_METHOD hkdf_pkey_meth;
+extern const EVP_PKEY_METHOD poly1305_pkey_meth;
+extern const EVP_PKEY_METHOD siphash_pkey_meth;
+
+struct evp_md_st {
+    int type;
+    int pkey_type;
+    int md_size;
+    unsigned long flags;
+    int (*init) (EVP_MD_CTX *ctx);
+    int (*update) (EVP_MD_CTX *ctx, const void *data, size_t count);
+    int (*final) (EVP_MD_CTX *ctx, unsigned char *md);
+    int (*copy) (EVP_MD_CTX *to, const EVP_MD_CTX *from);
+    int (*cleanup) (EVP_MD_CTX *ctx);
+    int block_size;
+    int ctx_size;               /* how big does the ctx->md_data need to be */
+    /* control function */
+    int (*md_ctrl) (EVP_MD_CTX *ctx, int cmd, int p1, void *p2);
+} /* EVP_MD */ ;
+
+struct evp_cipher_st {
+    int nid;
+    int block_size;
+    /* Default value for variable length ciphers */
+    int key_len;
+    int iv_len;
+    /* Various flags */
+    unsigned long flags;
+    /* init key */
+    int (*init) (EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                 const unsigned char *iv, int enc);
+    /* encrypt/decrypt data */
+    int (*do_cipher) (EVP_CIPHER_CTX *ctx, unsigned char *out,
+                      const unsigned char *in, size_t inl);
+    /* cleanup ctx */
+    int (*cleanup) (EVP_CIPHER_CTX *);
+    /* how big ctx->cipher_data needs to be */
+    int ctx_size;
+    /* Populate a ASN1_TYPE with parameters */
+    int (*set_asn1_parameters) (EVP_CIPHER_CTX *, ASN1_TYPE *);
+    /* Get parameters from a ASN1_TYPE */
+    int (*get_asn1_parameters) (EVP_CIPHER_CTX *, ASN1_TYPE *);
+    /* Miscellaneous operations */
+    int (*ctrl) (EVP_CIPHER_CTX *, int type, int arg, void *ptr);
+    /* Application data */
+    void *app_data;
+} /* EVP_CIPHER */ ;
+
+/* Macros to code block cipher wrappers */
+
+/* Wrapper functions for each cipher mode */
+
+#define EVP_C_DATA(kstruct, ctx) \
+        ((kstruct *)EVP_CIPHER_CTX_get_cipher_data(ctx))
+
+#define BLOCK_CIPHER_ecb_loop() \
+        size_t i, bl; \
+        bl = EVP_CIPHER_CTX_cipher(ctx)->block_size;    \
+        if (inl < bl) return 1;\
+        inl -= bl; \
+        for (i=0; i <= inl; i+=bl)
+
+#define BLOCK_CIPHER_func_ecb(cname, cprefix, kstruct, ksched) \
+static int cname##_ecb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, const unsigned char *in, size_t inl) \
+{\
+        BLOCK_CIPHER_ecb_loop() \
+            cprefix##_ecb_encrypt(in + i, out + i, &EVP_C_DATA(kstruct,ctx)->ksched, EVP_CIPHER_CTX_encrypting(ctx)); \
+        return 1;\
+}
+
+#define EVP_MAXCHUNK ((size_t)1<<(sizeof(long)*8-2))
+
+#define BLOCK_CIPHER_func_ofb(cname, cprefix, cbits, kstruct, ksched) \
+    static int cname##_ofb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, const unsigned char *in, size_t inl) \
+{\
+        while(inl>=EVP_MAXCHUNK) {\
+            int num = EVP_CIPHER_CTX_num(ctx);\
+            cprefix##_ofb##cbits##_encrypt(in, out, (long)EVP_MAXCHUNK, &EVP_C_DATA(kstruct,ctx)->ksched, EVP_CIPHER_CTX_iv_noconst(ctx), &num); \
+            EVP_CIPHER_CTX_set_num(ctx, num);\
+            inl-=EVP_MAXCHUNK;\
+            in +=EVP_MAXCHUNK;\
+            out+=EVP_MAXCHUNK;\
+        }\
+        if (inl) {\
+            int num = EVP_CIPHER_CTX_num(ctx);\
+            cprefix##_ofb##cbits##_encrypt(in, out, (long)inl, &EVP_C_DATA(kstruct,ctx)->ksched, EVP_CIPHER_CTX_iv_noconst(ctx), &num); \
+            EVP_CIPHER_CTX_set_num(ctx, num);\
+        }\
+        return 1;\
+}
+
+#define BLOCK_CIPHER_func_cbc(cname, cprefix, kstruct, ksched) \
+static int cname##_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, const unsigned char *in, size_t inl) \
+{\
+        while(inl>=EVP_MAXCHUNK) \
+            {\
+            cprefix##_cbc_encrypt(in, out, (long)EVP_MAXCHUNK, &EVP_C_DATA(kstruct,ctx)->ksched, EVP_CIPHER_CTX_iv_noconst(ctx), EVP_CIPHER_CTX_encrypting(ctx));\
+            inl-=EVP_MAXCHUNK;\
+            in +=EVP_MAXCHUNK;\
+            out+=EVP_MAXCHUNK;\
+            }\
+        if (inl)\
+            cprefix##_cbc_encrypt(in, out, (long)inl, &EVP_C_DATA(kstruct,ctx)->ksched, EVP_CIPHER_CTX_iv_noconst(ctx), EVP_CIPHER_CTX_encrypting(ctx));\
+        return 1;\
+}
+
+#define BLOCK_CIPHER_func_cfb(cname, cprefix, cbits, kstruct, ksched)  \
+static int cname##_cfb##cbits##_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, const unsigned char *in, size_t inl) \
+{\
+    size_t chunk = EVP_MAXCHUNK;\
+    if (cbits == 1)  chunk >>= 3;\
+    if (inl < chunk) chunk = inl;\
+    while (inl && inl >= chunk)\
+    {\
+        int num = EVP_CIPHER_CTX_num(ctx);\
+        cprefix##_cfb##cbits##_encrypt(in, out, (long) \
+            ((cbits == 1) \
+                && !EVP_CIPHER_CTX_test_flags(ctx, EVP_CIPH_FLAG_LENGTH_BITS) \
+                ? chunk*8 : chunk), \
+            &EVP_C_DATA(kstruct, ctx)->ksched, EVP_CIPHER_CTX_iv_noconst(ctx),\
+            &num, EVP_CIPHER_CTX_encrypting(ctx));\
+        EVP_CIPHER_CTX_set_num(ctx, num);\
+        inl -= chunk;\
+        in += chunk;\
+        out += chunk;\
+        if (inl < chunk) chunk = inl;\
+    }\
+    return 1;\
+}
+
+#define BLOCK_CIPHER_all_funcs(cname, cprefix, cbits, kstruct, ksched) \
+        BLOCK_CIPHER_func_cbc(cname, cprefix, kstruct, ksched) \
+        BLOCK_CIPHER_func_cfb(cname, cprefix, cbits, kstruct, ksched) \
+        BLOCK_CIPHER_func_ecb(cname, cprefix, kstruct, ksched) \
+        BLOCK_CIPHER_func_ofb(cname, cprefix, cbits, kstruct, ksched)
+
+#define BLOCK_CIPHER_def1(cname, nmode, mode, MODE, kstruct, nid, block_size, \
+                          key_len, iv_len, flags, init_key, cleanup, \
+                          set_asn1, get_asn1, ctrl) \
+static const EVP_CIPHER cname##_##mode = { \
+        nid##_##nmode, block_size, key_len, iv_len, \
+        flags | EVP_CIPH_##MODE##_MODE, \
+        init_key, \
+        cname##_##mode##_cipher, \
+        cleanup, \
+        sizeof(kstruct), \
+        set_asn1, get_asn1,\
+        ctrl, \
+        NULL \
+}; \
+const EVP_CIPHER *EVP_##cname##_##mode(void) { return &cname##_##mode; }
+
+#define BLOCK_CIPHER_def_cbc(cname, kstruct, nid, block_size, key_len, \
+                             iv_len, flags, init_key, cleanup, set_asn1, \
+                             get_asn1, ctrl) \
+BLOCK_CIPHER_def1(cname, cbc, cbc, CBC, kstruct, nid, block_size, key_len, \
+                  iv_len, flags, init_key, cleanup, set_asn1, get_asn1, ctrl)
+
+#define BLOCK_CIPHER_def_cfb(cname, kstruct, nid, key_len, \
+                             iv_len, cbits, flags, init_key, cleanup, \
+                             set_asn1, get_asn1, ctrl) \
+BLOCK_CIPHER_def1(cname, cfb##cbits, cfb##cbits, CFB, kstruct, nid, 1, \
+                  key_len, iv_len, flags, init_key, cleanup, set_asn1, \
+                  get_asn1, ctrl)
+
+#define BLOCK_CIPHER_def_ofb(cname, kstruct, nid, key_len, \
+                             iv_len, cbits, flags, init_key, cleanup, \
+                             set_asn1, get_asn1, ctrl) \
+BLOCK_CIPHER_def1(cname, ofb##cbits, ofb, OFB, kstruct, nid, 1, \
+                  key_len, iv_len, flags, init_key, cleanup, set_asn1, \
+                  get_asn1, ctrl)
+
+#define BLOCK_CIPHER_def_ecb(cname, kstruct, nid, block_size, key_len, \
+                             flags, init_key, cleanup, set_asn1, \
+                             get_asn1, ctrl) \
+BLOCK_CIPHER_def1(cname, ecb, ecb, ECB, kstruct, nid, block_size, key_len, \
+                  0, flags, init_key, cleanup, set_asn1, get_asn1, ctrl)
+
+#define BLOCK_CIPHER_defs(cname, kstruct, \
+                          nid, block_size, key_len, iv_len, cbits, flags, \
+                          init_key, cleanup, set_asn1, get_asn1, ctrl) \
+BLOCK_CIPHER_def_cbc(cname, kstruct, nid, block_size, key_len, iv_len, flags, \
+                     init_key, cleanup, set_asn1, get_asn1, ctrl) \
+BLOCK_CIPHER_def_cfb(cname, kstruct, nid, key_len, iv_len, cbits, \
+                     flags, init_key, cleanup, set_asn1, get_asn1, ctrl) \
+BLOCK_CIPHER_def_ofb(cname, kstruct, nid, key_len, iv_len, cbits, \
+                     flags, init_key, cleanup, set_asn1, get_asn1, ctrl) \
+BLOCK_CIPHER_def_ecb(cname, kstruct, nid, block_size, key_len, flags, \
+                     init_key, cleanup, set_asn1, get_asn1, ctrl)
+
+/*-
+#define BLOCK_CIPHER_defs(cname, kstruct, \
+                                nid, block_size, key_len, iv_len, flags,\
+                                 init_key, cleanup, set_asn1, get_asn1, ctrl)\
+static const EVP_CIPHER cname##_cbc = {\
+        nid##_cbc, block_size, key_len, iv_len, \
+        flags | EVP_CIPH_CBC_MODE,\
+        init_key,\
+        cname##_cbc_cipher,\
+        cleanup,\
+        sizeof(EVP_CIPHER_CTX)-sizeof((((EVP_CIPHER_CTX *)NULL)->c))+\
+                sizeof((((EVP_CIPHER_CTX *)NULL)->c.kstruct)),\
+        set_asn1, get_asn1,\
+        ctrl, \
+        NULL \
+};\
+const EVP_CIPHER *EVP_##cname##_cbc(void) { return &cname##_cbc; }\
+static const EVP_CIPHER cname##_cfb = {\
+        nid##_cfb64, 1, key_len, iv_len, \
+        flags | EVP_CIPH_CFB_MODE,\
+        init_key,\
+        cname##_cfb_cipher,\
+        cleanup,\
+        sizeof(EVP_CIPHER_CTX)-sizeof((((EVP_CIPHER_CTX *)NULL)->c))+\
+                sizeof((((EVP_CIPHER_CTX *)NULL)->c.kstruct)),\
+        set_asn1, get_asn1,\
+        ctrl,\
+        NULL \
+};\
+const EVP_CIPHER *EVP_##cname##_cfb(void) { return &cname##_cfb; }\
+static const EVP_CIPHER cname##_ofb = {\
+        nid##_ofb64, 1, key_len, iv_len, \
+        flags | EVP_CIPH_OFB_MODE,\
+        init_key,\
+        cname##_ofb_cipher,\
+        cleanup,\
+        sizeof(EVP_CIPHER_CTX)-sizeof((((EVP_CIPHER_CTX *)NULL)->c))+\
+                sizeof((((EVP_CIPHER_CTX *)NULL)->c.kstruct)),\
+        set_asn1, get_asn1,\
+        ctrl,\
+        NULL \
+};\
+const EVP_CIPHER *EVP_##cname##_ofb(void) { return &cname##_ofb; }\
+static const EVP_CIPHER cname##_ecb = {\
+        nid##_ecb, block_size, key_len, iv_len, \
+        flags | EVP_CIPH_ECB_MODE,\
+        init_key,\
+        cname##_ecb_cipher,\
+        cleanup,\
+        sizeof(EVP_CIPHER_CTX)-sizeof((((EVP_CIPHER_CTX *)NULL)->c))+\
+                sizeof((((EVP_CIPHER_CTX *)NULL)->c.kstruct)),\
+        set_asn1, get_asn1,\
+        ctrl,\
+        NULL \
+};\
+const EVP_CIPHER *EVP_##cname##_ecb(void) { return &cname##_ecb; }
+*/
+
+#define IMPLEMENT_BLOCK_CIPHER(cname, ksched, cprefix, kstruct, nid, \
+                               block_size, key_len, iv_len, cbits, \
+                               flags, init_key, \
+                               cleanup, set_asn1, get_asn1, ctrl) \
+        BLOCK_CIPHER_all_funcs(cname, cprefix, cbits, kstruct, ksched) \
+        BLOCK_CIPHER_defs(cname, kstruct, nid, block_size, key_len, iv_len, \
+                          cbits, flags, init_key, cleanup, set_asn1, \
+                          get_asn1, ctrl)
+
+#define IMPLEMENT_CFBR(cipher,cprefix,kstruct,ksched,keysize,cbits,iv_len,fl) \
+        BLOCK_CIPHER_func_cfb(cipher##_##keysize,cprefix,cbits,kstruct,ksched) \
+        BLOCK_CIPHER_def_cfb(cipher##_##keysize,kstruct, \
+                             NID_##cipher##_##keysize, keysize/8, iv_len, cbits, \
+                             (fl)|EVP_CIPH_FLAG_DEFAULT_ASN1, \
+                             cipher##_init_key, NULL, NULL, NULL, NULL)
+
+
+# ifndef OPENSSL_NO_EC
+
+#define X25519_KEYLEN        32
+#define X448_KEYLEN          56
+#define ED448_KEYLEN         57
+
+#define MAX_KEYLEN  ED448_KEYLEN
+
+typedef struct {
+    unsigned char pubkey[MAX_KEYLEN];
+    unsigned char *privkey;
+} ECX_KEY;
+
+#endif
+
+/*
+ * Type needs to be a bit field Sub-type needs to be for variations on the
+ * method, as in, can it do arbitrary encryption....
+ */
+struct evp_pkey_st {
+    int type;
+    int save_type;
+    CRYPTO_REF_COUNT references;
+    const EVP_PKEY_ASN1_METHOD *ameth;
+    ENGINE *engine;
+    ENGINE *pmeth_engine; /* If not NULL public key ENGINE to use */
+    union {
+        void *ptr;
+# ifndef OPENSSL_NO_RSA
+        struct rsa_st *rsa;     /* RSA */
+# endif
+# ifndef OPENSSL_NO_DSA
+        struct dsa_st *dsa;     /* DSA */
+# endif
+# ifndef OPENSSL_NO_DH
+        struct dh_st *dh;       /* DH */
+# endif
+# ifndef OPENSSL_NO_EC
+        struct ec_key_st *ec;   /* ECC */
+        ECX_KEY *ecx;           /* X25519, X448, Ed25519, Ed448 */
+# endif
+    } pkey;
+    int save_parameters;
+    STACK_OF(X509_ATTRIBUTE) *attributes; /* [ 0 ] */
+    CRYPTO_RWLOCK *lock;
+} /* EVP_PKEY */ ;
+
+
+void openssl_add_all_ciphers_int(void);
+void openssl_add_all_digests_int(void);
+void evp_cleanup_int(void);
+void evp_app_cleanup_int(void);
+
+/* Pulling defines out of C source files */
+
+#define EVP_RC4_KEY_SIZE 16
+#ifndef TLS1_1_VERSION
+# define TLS1_1_VERSION   0x0302
+#endif
+
+void evp_encode_ctx_set_flags(EVP_ENCODE_CTX *ctx, unsigned int flags);
+
+/* EVP_ENCODE_CTX flags */
+/* Don't generate new lines when encoding */
+#define EVP_ENCODE_CTX_NO_NEWLINES          1
+/* Use the SRP base64 alphabet instead of the standard one */
+#define EVP_ENCODE_CTX_USE_SRP_ALPHABET     2
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/lhash.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/lhash.h
new file mode 100644
index 000000000..200ba8685
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/lhash.h
@@ -0,0 +1,15 @@
+/*
+ * Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef INTERNAL_LHASH_H
+# define INTERNAL_LHASH_H
+
+unsigned long openssl_lh_strcasehash(const char *);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/md32_common.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/md32_common.h
new file mode 100644
index 000000000..1124e9c24
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/md32_common.h
@@ -0,0 +1,256 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*-
+ * This is a generic 32 bit "collector" for message digest algorithms.
+ * Whenever needed it collects input character stream into chunks of
+ * 32 bit values and invokes a block function that performs actual hash
+ * calculations.
+ *
+ * Porting guide.
+ *
+ * Obligatory macros:
+ *
+ * DATA_ORDER_IS_BIG_ENDIAN or DATA_ORDER_IS_LITTLE_ENDIAN
+ *      this macro defines byte order of input stream.
+ * HASH_CBLOCK
+ *      size of a unit chunk HASH_BLOCK operates on.
+ * HASH_LONG
+ *      has to be at least 32 bit wide.
+ * HASH_CTX
+ *      context structure that at least contains following
+ *      members:
+ *              typedef struct {
+ *                      ...
+ *                      HASH_LONG       Nl,Nh;
+ *                      either {
+ *                      HASH_LONG       data[HASH_LBLOCK];
+ *                      unsigned char   data[HASH_CBLOCK];
+ *                      };
+ *                      unsigned int    num;
+ *                      ...
+ *                      } HASH_CTX;
+ *      data[] vector is expected to be zeroed upon first call to
+ *      HASH_UPDATE.
+ * HASH_UPDATE
+ *      name of "Update" function, implemented here.
+ * HASH_TRANSFORM
+ *      name of "Transform" function, implemented here.
+ * HASH_FINAL
+ *      name of "Final" function, implemented here.
+ * HASH_BLOCK_DATA_ORDER
+ *      name of "block" function capable of treating *unaligned* input
+ *      message in original (data) byte order, implemented externally.
+ * HASH_MAKE_STRING
+ *      macro converting context variables to an ASCII hash string.
+ *
+ * MD5 example:
+ *
+ *      #define DATA_ORDER_IS_LITTLE_ENDIAN
+ *
+ *      #define HASH_LONG               MD5_LONG
+ *      #define HASH_CTX                MD5_CTX
+ *      #define HASH_CBLOCK             MD5_CBLOCK
+ *      #define HASH_UPDATE             MD5_Update
+ *      #define HASH_TRANSFORM          MD5_Transform
+ *      #define HASH_FINAL              MD5_Final
+ *      #define HASH_BLOCK_DATA_ORDER   md5_block_data_order
+ */
+
+#include <openssl/crypto.h>
+
+#if !defined(DATA_ORDER_IS_BIG_ENDIAN) && !defined(DATA_ORDER_IS_LITTLE_ENDIAN)
+# error "DATA_ORDER must be defined!"
+#endif
+
+#ifndef HASH_CBLOCK
+# error "HASH_CBLOCK must be defined!"
+#endif
+#ifndef HASH_LONG
+# error "HASH_LONG must be defined!"
+#endif
+#ifndef HASH_CTX
+# error "HASH_CTX must be defined!"
+#endif
+
+#ifndef HASH_UPDATE
+# error "HASH_UPDATE must be defined!"
+#endif
+#ifndef HASH_TRANSFORM
+# error "HASH_TRANSFORM must be defined!"
+#endif
+#ifndef HASH_FINAL
+# error "HASH_FINAL must be defined!"
+#endif
+
+#ifndef HASH_BLOCK_DATA_ORDER
+# error "HASH_BLOCK_DATA_ORDER must be defined!"
+#endif
+
+#define ROTATE(a,n)     (((a)<<(n))|(((a)&0xffffffff)>>(32-(n))))
+
+#if defined(DATA_ORDER_IS_BIG_ENDIAN)
+
+# define HOST_c2l(c,l)  (l =(((unsigned long)(*((c)++)))<<24),          \
+                         l|=(((unsigned long)(*((c)++)))<<16),          \
+                         l|=(((unsigned long)(*((c)++)))<< 8),          \
+                         l|=(((unsigned long)(*((c)++)))    )           )
+# define HOST_l2c(l,c)  (*((c)++)=(unsigned char)(((l)>>24)&0xff),      \
+                         *((c)++)=(unsigned char)(((l)>>16)&0xff),      \
+                         *((c)++)=(unsigned char)(((l)>> 8)&0xff),      \
+                         *((c)++)=(unsigned char)(((l)    )&0xff),      \
+                         l)
+
+#elif defined(DATA_ORDER_IS_LITTLE_ENDIAN)
+
+# define HOST_c2l(c,l)  (l =(((unsigned long)(*((c)++)))    ),          \
+                         l|=(((unsigned long)(*((c)++)))<< 8),          \
+                         l|=(((unsigned long)(*((c)++)))<<16),          \
+                         l|=(((unsigned long)(*((c)++)))<<24)           )
+# define HOST_l2c(l,c)  (*((c)++)=(unsigned char)(((l)    )&0xff),      \
+                         *((c)++)=(unsigned char)(((l)>> 8)&0xff),      \
+                         *((c)++)=(unsigned char)(((l)>>16)&0xff),      \
+                         *((c)++)=(unsigned char)(((l)>>24)&0xff),      \
+                         l)
+
+#endif
+
+/*
+ * Time for some action :-)
+ */
+
+int HASH_UPDATE(HASH_CTX *c, const void *data_, size_t len)
+{
+    const unsigned char *data = data_;
+    unsigned char *p;
+    HASH_LONG l;
+    size_t n;
+
+    if (len == 0)
+        return 1;
+
+    l = (c->Nl + (((HASH_LONG) len) << 3)) & 0xffffffffUL;
+    if (l < c->Nl)              /* overflow */
+        c->Nh++;
+    c->Nh += (HASH_LONG) (len >> 29); /* might cause compiler warning on
+                                       * 16-bit */
+    c->Nl = l;
+
+    n = c->num;
+    if (n != 0) {
+        p = (unsigned char *)c->data;
+
+        if (len >= HASH_CBLOCK || len + n >= HASH_CBLOCK) {
+            memcpy(p + n, data, HASH_CBLOCK - n);
+            HASH_BLOCK_DATA_ORDER(c, p, 1);
+            n = HASH_CBLOCK - n;
+            data += n;
+            len -= n;
+            c->num = 0;
+            /*
+             * We use memset rather than OPENSSL_cleanse() here deliberately.
+             * Using OPENSSL_cleanse() here could be a performance issue. It
+             * will get properly cleansed on finalisation so this isn't a
+             * security problem.
+             */
+            memset(p, 0, HASH_CBLOCK); /* keep it zeroed */
+        } else {
+            memcpy(p + n, data, len);
+            c->num += (unsigned int)len;
+            return 1;
+        }
+    }
+
+    n = len / HASH_CBLOCK;
+    if (n > 0) {
+        HASH_BLOCK_DATA_ORDER(c, data, n);
+        n *= HASH_CBLOCK;
+        data += n;
+        len -= n;
+    }
+
+    if (len != 0) {
+        p = (unsigned char *)c->data;
+        c->num = (unsigned int)len;
+        memcpy(p, data, len);
+    }
+    return 1;
+}
+
+void HASH_TRANSFORM(HASH_CTX *c, const unsigned char *data)
+{
+    HASH_BLOCK_DATA_ORDER(c, data, 1);
+}
+
+int HASH_FINAL(unsigned char *md, HASH_CTX *c)
+{
+    unsigned char *p = (unsigned char *)c->data;
+    size_t n = c->num;
+
+    p[n] = 0x80;                /* there is always room for one */
+    n++;
+
+    if (n > (HASH_CBLOCK - 8)) {
+        memset(p + n, 0, HASH_CBLOCK - n);
+        n = 0;
+        HASH_BLOCK_DATA_ORDER(c, p, 1);
+    }
+    memset(p + n, 0, HASH_CBLOCK - 8 - n);
+
+    p += HASH_CBLOCK - 8;
+#if   defined(DATA_ORDER_IS_BIG_ENDIAN)
+    (void)HOST_l2c(c->Nh, p);
+    (void)HOST_l2c(c->Nl, p);
+#elif defined(DATA_ORDER_IS_LITTLE_ENDIAN)
+    (void)HOST_l2c(c->Nl, p);
+    (void)HOST_l2c(c->Nh, p);
+#endif
+    p -= HASH_CBLOCK;
+    HASH_BLOCK_DATA_ORDER(c, p, 1);
+    c->num = 0;
+    OPENSSL_cleanse(p, HASH_CBLOCK);
+
+#ifndef HASH_MAKE_STRING
+# error "HASH_MAKE_STRING must be defined!"
+#else
+    HASH_MAKE_STRING(c, md);
+#endif
+
+    return 1;
+}
+
+#ifndef MD32_REG_T
+# if defined(__alpha) || defined(__sparcv9) || defined(__mips)
+#  define MD32_REG_T long
+/*
+ * This comment was originally written for MD5, which is why it
+ * discusses A-D. But it basically applies to all 32-bit digests,
+ * which is why it was moved to common header file.
+ *
+ * In case you wonder why A-D are declared as long and not
+ * as MD5_LONG. Doing so results in slight performance
+ * boost on LP64 architectures. The catch is we don't
+ * really care if 32 MSBs of a 64-bit register get polluted
+ * with eventual overflows as we *save* only 32 LSBs in
+ * *either* case. Now declaring 'em long excuses the compiler
+ * from keeping 32 MSBs zeroed resulting in 13% performance
+ * improvement under SPARC Solaris7/64 and 5% under AlphaLinux.
+ * Well, to be honest it should say that this *prevents*
+ * performance degradation.
+ */
+# else
+/*
+ * Above is not absolute and there are LP64 compilers that
+ * generate better code if MD32_REG_T is defined int. The above
+ * pre-processor condition reflects the circumstances under which
+ * the conclusion was made and is subject to further extension.
+ */
+#  define MD32_REG_T int
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/objects.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/objects.h
new file mode 100644
index 000000000..76e1b4d98
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/objects.h
@@ -0,0 +1,12 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/objects.h>
+
+void obj_cleanup_int(void);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/poly1305.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/poly1305.h
new file mode 100644
index 000000000..5fef239d0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/poly1305.h
@@ -0,0 +1,21 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stddef.h>
+
+#define POLY1305_BLOCK_SIZE  16
+#define POLY1305_DIGEST_SIZE 16
+#define POLY1305_KEY_SIZE    32
+
+typedef struct poly1305_context POLY1305;
+
+size_t Poly1305_ctx_size(void);
+void Poly1305_Init(POLY1305 *ctx, const unsigned char key[32]);
+void Poly1305_Update(POLY1305 *ctx, const unsigned char *inp, size_t len);
+void Poly1305_Final(POLY1305 *ctx, unsigned char mac[16]);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/rand_int.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/rand_int.h
new file mode 100644
index 000000000..888cab1b8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/rand_int.h
@@ -0,0 +1,134 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+
+#ifndef HEADER_RAND_INT_H
+# define HEADER_RAND_INT_H
+
+# include <openssl/rand.h>
+
+/* forward declaration */
+typedef struct rand_pool_st RAND_POOL;
+
+void rand_cleanup_int(void);
+void rand_drbg_cleanup_int(void);
+void drbg_delete_thread_state(void);
+void rand_fork(void);
+
+/* Hardware-based seeding functions. */
+size_t rand_acquire_entropy_from_tsc(RAND_POOL *pool);
+size_t rand_acquire_entropy_from_cpu(RAND_POOL *pool);
+
+/* DRBG entropy callbacks. */
+size_t rand_drbg_get_entropy(RAND_DRBG *drbg,
+                             unsigned char **pout,
+                             int entropy, size_t min_len, size_t max_len,
+                             int prediction_resistance);
+void rand_drbg_cleanup_entropy(RAND_DRBG *drbg,
+                               unsigned char *out, size_t outlen);
+size_t rand_drbg_get_nonce(RAND_DRBG *drbg,
+                           unsigned char **pout,
+                           int entropy, size_t min_len, size_t max_len);
+void rand_drbg_cleanup_nonce(RAND_DRBG *drbg,
+                             unsigned char *out, size_t outlen);
+
+size_t rand_drbg_get_additional_data(RAND_POOL *pool, unsigned char **pout);
+
+void rand_drbg_cleanup_additional_data(RAND_POOL *pool, unsigned char *out);
+
+/*
+ * RAND_POOL functions
+ */
+RAND_POOL *rand_pool_new(int entropy_requested, size_t min_len, size_t max_len);
+RAND_POOL *rand_pool_attach(const unsigned char *buffer, size_t len,
+                            size_t entropy);
+void rand_pool_free(RAND_POOL *pool);
+
+const unsigned char *rand_pool_buffer(RAND_POOL *pool);
+unsigned char *rand_pool_detach(RAND_POOL *pool);
+void rand_pool_reattach(RAND_POOL *pool, unsigned char *buffer);
+
+size_t rand_pool_entropy(RAND_POOL *pool);
+size_t rand_pool_length(RAND_POOL *pool);
+
+size_t rand_pool_entropy_available(RAND_POOL *pool);
+size_t rand_pool_entropy_needed(RAND_POOL *pool);
+/* |entropy_factor| expresses how many bits of data contain 1 bit of entropy */
+size_t rand_pool_bytes_needed(RAND_POOL *pool, unsigned int entropy_factor);
+size_t rand_pool_bytes_remaining(RAND_POOL *pool);
+
+int rand_pool_add(RAND_POOL *pool,
+                  const unsigned char *buffer, size_t len, size_t entropy);
+unsigned char *rand_pool_add_begin(RAND_POOL *pool, size_t len);
+int rand_pool_add_end(RAND_POOL *pool, size_t len, size_t entropy);
+
+
+/*
+ * Add random bytes to the pool to acquire requested amount of entropy
+ *
+ * This function is platform specific and tries to acquire the requested
+ * amount of entropy by polling platform specific entropy sources.
+ *
+ * If the function succeeds in acquiring at least |entropy_requested| bits
+ * of entropy, the total entropy count is returned. If it fails, it returns
+ * an entropy count of 0.
+ */
+size_t rand_pool_acquire_entropy(RAND_POOL *pool);
+
+/*
+ * Add some application specific nonce data
+ *
+ * This function is platform specific and adds some application specific
+ * data to the nonce used for instantiating the drbg.
+ *
+ * This data currently consists of the process and thread id, and a high
+ * resolution timestamp. The data does not include an atomic counter,
+ * because that is added by the calling function rand_drbg_get_nonce().
+ *
+ * Returns 1 on success and 0 on failure.
+ */
+int rand_pool_add_nonce_data(RAND_POOL *pool);
+
+
+/*
+ * Add some platform specific additional data
+ *
+ * This function is platform specific and adds some random noise to the
+ * additional data used for generating random bytes and for reseeding
+ * the drbg.
+ *
+ * Returns 1 on success and 0 on failure.
+ */
+int rand_pool_add_additional_data(RAND_POOL *pool);
+
+/*
+ * Initialise the random pool reseeding sources.
+ *
+ * Returns 1 on success and 0 on failure.
+ */
+int rand_pool_init(void);
+
+/*
+ * Finalise the random pool reseeding sources.
+ */
+void rand_pool_cleanup(void);
+
+/*
+ * Control the random pool use of open file descriptors.
+ */
+void rand_pool_keep_random_devices_open(int keep);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sha.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sha.h
new file mode 100644
index 000000000..458a75e89
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sha.h
@@ -0,0 +1,19 @@
+/*
+ * Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2018, Oracle and/or its affiliates.  All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_INTERNAL_SHA_H
+# define HEADER_INTERNAL_SHA_H
+
+# include <openssl/opensslconf.h>
+
+int sha512_224_init(SHA512_CTX *);
+int sha512_256_init(SHA512_CTX *);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/siphash.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/siphash.h
new file mode 100644
index 000000000..9573680f0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/siphash.h
@@ -0,0 +1,25 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stddef.h>
+
+#define SIPHASH_BLOCK_SIZE        8
+#define SIPHASH_KEY_SIZE         16
+#define SIPHASH_MIN_DIGEST_SIZE   8
+#define SIPHASH_MAX_DIGEST_SIZE  16
+
+typedef struct siphash_st SIPHASH;
+
+size_t SipHash_ctx_size(void);
+size_t SipHash_hash_size(SIPHASH *ctx);
+int SipHash_set_hash_size(SIPHASH *ctx, size_t hash_size);
+int SipHash_Init(SIPHASH *ctx, const unsigned char *k,
+                 int crounds, int drounds);
+void SipHash_Update(SIPHASH *ctx, const unsigned char *in, size_t inlen);
+int SipHash_Final(SIPHASH *ctx, unsigned char *out, size_t outlen);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sm2.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sm2.h
new file mode 100644
index 000000000..5c5cd4b4f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sm2.h
@@ -0,0 +1,78 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017 Ribose Inc. All Rights Reserved.
+ * Ported from Ribose contributions from Botan.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_SM2_H
+# define HEADER_SM2_H
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_SM2
+
+#  include <openssl/ec.h>
+
+/* The default user id as specified in GM/T 0009-2012 */
+#  define SM2_DEFAULT_USERID "1234567812345678"
+
+int sm2_compute_z_digest(uint8_t *out,
+                         const EVP_MD *digest,
+                         const uint8_t *id,
+                         const size_t id_len,
+                         const EC_KEY *key);
+
+/*
+ * SM2 signature operation. Computes Z and then signs H(Z || msg) using SM2
+ */
+ECDSA_SIG *sm2_do_sign(const EC_KEY *key,
+                       const EVP_MD *digest,
+                       const uint8_t *id,
+                       const size_t id_len,
+                       const uint8_t *msg, size_t msg_len);
+
+int sm2_do_verify(const EC_KEY *key,
+                  const EVP_MD *digest,
+                  const ECDSA_SIG *signature,
+                  const uint8_t *id,
+                  const size_t id_len,
+                  const uint8_t *msg, size_t msg_len);
+
+/*
+ * SM2 signature generation.
+ */
+int sm2_sign(const unsigned char *dgst, int dgstlen,
+             unsigned char *sig, unsigned int *siglen, EC_KEY *eckey);
+
+/*
+ * SM2 signature verification.
+ */
+int sm2_verify(const unsigned char *dgst, int dgstlen,
+               const unsigned char *sig, int siglen, EC_KEY *eckey);
+
+/*
+ * SM2 encryption
+ */
+int sm2_ciphertext_size(const EC_KEY *key, const EVP_MD *digest, size_t msg_len,
+                        size_t *ct_size);
+
+int sm2_plaintext_size(const EC_KEY *key, const EVP_MD *digest, size_t msg_len,
+                       size_t *pt_size);
+
+int sm2_encrypt(const EC_KEY *key,
+                const EVP_MD *digest,
+                const uint8_t *msg,
+                size_t msg_len,
+                uint8_t *ciphertext_buf, size_t *ciphertext_len);
+
+int sm2_decrypt(const EC_KEY *key,
+                const EVP_MD *digest,
+                const uint8_t *ciphertext,
+                size_t ciphertext_len, uint8_t *ptext_buf, size_t *ptext_len);
+
+# endif /* OPENSSL_NO_SM2 */
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sm2err.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sm2err.h
new file mode 100644
index 000000000..a4db1b73d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sm2err.h
@@ -0,0 +1,61 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_SM2ERR_H
+# define HEADER_SM2ERR_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_SM2
+
+#  ifdef  __cplusplus
+extern "C"
+#  endif
+int ERR_load_SM2_strings(void);
+
+/*
+ * SM2 function codes.
+ */
+#  define SM2_F_PKEY_SM2_COPY                              115
+#  define SM2_F_PKEY_SM2_CTRL                              109
+#  define SM2_F_PKEY_SM2_CTRL_STR                          110
+#  define SM2_F_PKEY_SM2_DIGEST_CUSTOM                     114
+#  define SM2_F_PKEY_SM2_INIT                              111
+#  define SM2_F_PKEY_SM2_SIGN                              112
+#  define SM2_F_SM2_COMPUTE_MSG_HASH                       100
+#  define SM2_F_SM2_COMPUTE_USERID_DIGEST                  101
+#  define SM2_F_SM2_COMPUTE_Z_DIGEST                       113
+#  define SM2_F_SM2_DECRYPT                                102
+#  define SM2_F_SM2_ENCRYPT                                103
+#  define SM2_F_SM2_PLAINTEXT_SIZE                         104
+#  define SM2_F_SM2_SIGN                                   105
+#  define SM2_F_SM2_SIG_GEN                                106
+#  define SM2_F_SM2_SIG_VERIFY                             107
+#  define SM2_F_SM2_VERIFY                                 108
+
+/*
+ * SM2 reason codes.
+ */
+#  define SM2_R_ASN1_ERROR                                 100
+#  define SM2_R_BAD_SIGNATURE                              101
+#  define SM2_R_BUFFER_TOO_SMALL                           107
+#  define SM2_R_DIST_ID_TOO_LARGE                          110
+#  define SM2_R_ID_NOT_SET                                 112
+#  define SM2_R_ID_TOO_LARGE                               111
+#  define SM2_R_INVALID_CURVE                              108
+#  define SM2_R_INVALID_DIGEST                             102
+#  define SM2_R_INVALID_DIGEST_TYPE                        103
+#  define SM2_R_INVALID_ENCODING                           104
+#  define SM2_R_INVALID_FIELD                              105
+#  define SM2_R_NO_PARAMETERS_SET                          109
+#  define SM2_R_USER_ID_TOO_LARGE                          106
+
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sm3.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sm3.h
new file mode 100644
index 000000000..27eb471c2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sm3.h
@@ -0,0 +1,39 @@
+/*
+ * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017 Ribose Inc. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_SM3_H
+# define HEADER_SM3_H
+
+# include <openssl/opensslconf.h>
+
+# ifdef OPENSSL_NO_SM3
+#  error SM3 is disabled.
+# endif
+
+# define SM3_DIGEST_LENGTH 32
+# define SM3_WORD unsigned int
+
+# define SM3_CBLOCK      64
+# define SM3_LBLOCK      (SM3_CBLOCK/4)
+
+typedef struct SM3state_st {
+   SM3_WORD A, B, C, D, E, F, G, H;
+   SM3_WORD Nl, Nh;
+   SM3_WORD data[SM3_LBLOCK];
+   unsigned int num;
+} SM3_CTX;
+
+int sm3_init(SM3_CTX *c);
+int sm3_update(SM3_CTX *c, const void *data, size_t len);
+int sm3_final(unsigned char *md, SM3_CTX *c);
+
+void sm3_block_data_order(SM3_CTX *c, const void *p, size_t num);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sm4.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sm4.h
new file mode 100644
index 000000000..f1f157ef5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/sm4.h
@@ -0,0 +1,37 @@
+/*
+ * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017 Ribose Inc. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_SM4_H
+# define HEADER_SM4_H
+
+# include <openssl/opensslconf.h>
+# include <openssl/e_os2.h>
+
+# ifdef OPENSSL_NO_SM4
+#  error SM4 is disabled.
+# endif
+
+# define SM4_ENCRYPT     1
+# define SM4_DECRYPT     0
+
+# define SM4_BLOCK_SIZE    16
+# define SM4_KEY_SCHEDULE  32
+
+typedef struct SM4_KEY_st {
+    uint32_t rk[SM4_KEY_SCHEDULE];
+} SM4_KEY;
+
+int SM4_set_key(const uint8_t *key, SM4_KEY *ks);
+
+void SM4_encrypt(const uint8_t *in, uint8_t *out, const SM4_KEY *ks);
+
+void SM4_decrypt(const uint8_t *in, uint8_t *out, const SM4_KEY *ks);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/store.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/store.h
new file mode 100644
index 000000000..f5013dc36
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/store.h
@@ -0,0 +1,10 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+void ossl_store_cleanup_int(void);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/store_int.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/store_int.h
new file mode 100644
index 000000000..6f31e019e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/store_int.h
@@ -0,0 +1,26 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_STORE_INT_H
+# define HEADER_STORE_INT_H
+
+# include <openssl/bio.h>
+# include <openssl/store.h>
+# include <openssl/ui.h>
+
+/*
+ * Two functions to read PEM data off an already opened BIO.  To be used
+ * instead of OSSLSTORE_open() and OSSLSTORE_close().  Everything is done
+ * as usual with OSSLSTORE_load() and OSSLSTORE_eof().
+ */
+OSSL_STORE_CTX *ossl_store_attach_pem_bio(BIO *bp, const UI_METHOD *ui_method,
+                                          void *ui_data);
+int ossl_store_detach_pem_bio(OSSL_STORE_CTX *ctx);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/x509_int.h b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/x509_int.h
new file mode 100644
index 000000000..b53c2b03c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/include/internal/x509_int.h
@@ -0,0 +1,286 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/refcount.h"
+
+/* Internal X509 structures and functions: not for application use */
+
+/* Note: unless otherwise stated a field pointer is mandatory and should
+ * never be set to NULL: the ASN.1 code and accessors rely on mandatory
+ * fields never being NULL.
+ */
+
+/*
+ * name entry structure, equivalent to AttributeTypeAndValue defined
+ * in RFC5280 et al.
+ */
+struct X509_name_entry_st {
+    ASN1_OBJECT *object;        /* AttributeType */
+    ASN1_STRING *value;         /* AttributeValue */
+    int set;                    /* index of RDNSequence for this entry */
+    int size;                   /* temp variable */
+};
+
+/* Name from RFC 5280. */
+struct X509_name_st {
+    STACK_OF(X509_NAME_ENTRY) *entries; /* DN components */
+    int modified;               /* true if 'bytes' needs to be built */
+    BUF_MEM *bytes;             /* cached encoding: cannot be NULL */
+    /* canonical encoding used for rapid Name comparison */
+    unsigned char *canon_enc;
+    int canon_enclen;
+} /* X509_NAME */ ;
+
+/* Signature info structure */
+
+struct x509_sig_info_st {
+    /* NID of message digest */
+    int mdnid;
+    /* NID of public key algorithm */
+    int pknid;
+    /* Security bits */
+    int secbits;
+    /* Various flags */
+    uint32_t flags;
+};
+
+/* PKCS#10 certificate request */
+
+struct X509_req_info_st {
+    ASN1_ENCODING enc;          /* cached encoding of signed part */
+    ASN1_INTEGER *version;      /* version, defaults to v1(0) so can be NULL */
+    X509_NAME *subject;         /* certificate request DN */
+    X509_PUBKEY *pubkey;        /* public key of request */
+    /*
+     * Zero or more attributes.
+     * NB: although attributes is a mandatory field some broken
+     * encodings omit it so this may be NULL in that case.
+     */
+    STACK_OF(X509_ATTRIBUTE) *attributes;
+};
+
+struct X509_req_st {
+    X509_REQ_INFO req_info;     /* signed certificate request data */
+    X509_ALGOR sig_alg;         /* signature algorithm */
+    ASN1_BIT_STRING *signature; /* signature */
+    CRYPTO_REF_COUNT references;
+    CRYPTO_RWLOCK *lock;
+};
+
+struct X509_crl_info_st {
+    ASN1_INTEGER *version;      /* version: defaults to v1(0) so may be NULL */
+    X509_ALGOR sig_alg;         /* signature algorithm */
+    X509_NAME *issuer;          /* CRL issuer name */
+    ASN1_TIME *lastUpdate;      /* lastUpdate field */
+    ASN1_TIME *nextUpdate;      /* nextUpdate field: optional */
+    STACK_OF(X509_REVOKED) *revoked;        /* revoked entries: optional */
+    STACK_OF(X509_EXTENSION) *extensions;   /* extensions: optional */
+    ASN1_ENCODING enc;                      /* encoding of signed portion of CRL */
+};
+
+struct X509_crl_st {
+    X509_CRL_INFO crl;          /* signed CRL data */
+    X509_ALGOR sig_alg;         /* CRL signature algorithm */
+    ASN1_BIT_STRING signature;  /* CRL signature */
+    CRYPTO_REF_COUNT references;
+    int flags;
+    /*
+     * Cached copies of decoded extension values, since extensions
+     * are optional any of these can be NULL.
+     */
+    AUTHORITY_KEYID *akid;
+    ISSUING_DIST_POINT *idp;
+    /* Convenient breakdown of IDP */
+    int idp_flags;
+    int idp_reasons;
+    /* CRL and base CRL numbers for delta processing */
+    ASN1_INTEGER *crl_number;
+    ASN1_INTEGER *base_crl_number;
+    STACK_OF(GENERAL_NAMES) *issuers;
+    /* hash of CRL */
+    unsigned char sha1_hash[SHA_DIGEST_LENGTH];
+    /* alternative method to handle this CRL */
+    const X509_CRL_METHOD *meth;
+    void *meth_data;
+    CRYPTO_RWLOCK *lock;
+};
+
+struct x509_revoked_st {
+    ASN1_INTEGER serialNumber; /* revoked entry serial number */
+    ASN1_TIME *revocationDate;  /* revocation date */
+    STACK_OF(X509_EXTENSION) *extensions;   /* CRL entry extensions: optional */
+    /* decoded value of CRLissuer extension: set if indirect CRL */
+    STACK_OF(GENERAL_NAME) *issuer;
+    /* revocation reason: set to CRL_REASON_NONE if reason extension absent */
+    int reason;
+    /*
+     * CRL entries are reordered for faster lookup of serial numbers. This
+     * field contains the original load sequence for this entry.
+     */
+    int sequence;
+};
+
+/*
+ * This stuff is certificate "auxiliary info": it contains details which are
+ * useful in certificate stores and databases. When used this is tagged onto
+ * the end of the certificate itself. OpenSSL specific structure not defined
+ * in any RFC.
+ */
+
+struct x509_cert_aux_st {
+    STACK_OF(ASN1_OBJECT) *trust; /* trusted uses */
+    STACK_OF(ASN1_OBJECT) *reject; /* rejected uses */
+    ASN1_UTF8STRING *alias;     /* "friendly name" */
+    ASN1_OCTET_STRING *keyid;   /* key id of private key */
+    STACK_OF(X509_ALGOR) *other; /* other unspecified info */
+};
+
+struct x509_cinf_st {
+    ASN1_INTEGER *version;      /* [ 0 ] default of v1 */
+    ASN1_INTEGER serialNumber;
+    X509_ALGOR signature;
+    X509_NAME *issuer;
+    X509_VAL validity;
+    X509_NAME *subject;
+    X509_PUBKEY *key;
+    ASN1_BIT_STRING *issuerUID; /* [ 1 ] optional in v2 */
+    ASN1_BIT_STRING *subjectUID; /* [ 2 ] optional in v2 */
+    STACK_OF(X509_EXTENSION) *extensions; /* [ 3 ] optional in v3 */
+    ASN1_ENCODING enc;
+};
+
+struct x509_st {
+    X509_CINF cert_info;
+    X509_ALGOR sig_alg;
+    ASN1_BIT_STRING signature;
+    X509_SIG_INFO siginf;
+    CRYPTO_REF_COUNT references;
+    CRYPTO_EX_DATA ex_data;
+    /* These contain copies of various extension values */
+    long ex_pathlen;
+    long ex_pcpathlen;
+    uint32_t ex_flags;
+    uint32_t ex_kusage;
+    uint32_t ex_xkusage;
+    uint32_t ex_nscert;
+    ASN1_OCTET_STRING *skid;
+    AUTHORITY_KEYID *akid;
+    X509_POLICY_CACHE *policy_cache;
+    STACK_OF(DIST_POINT) *crldp;
+    STACK_OF(GENERAL_NAME) *altname;
+    NAME_CONSTRAINTS *nc;
+#ifndef OPENSSL_NO_RFC3779
+    STACK_OF(IPAddressFamily) *rfc3779_addr;
+    struct ASIdentifiers_st *rfc3779_asid;
+# endif
+    unsigned char sha1_hash[SHA_DIGEST_LENGTH];
+    X509_CERT_AUX *aux;
+    CRYPTO_RWLOCK *lock;
+    volatile int ex_cached;
+} /* X509 */ ;
+
+/*
+ * This is a used when verifying cert chains.  Since the gathering of the
+ * cert chain can take some time (and have to be 'retried', this needs to be
+ * kept and passed around.
+ */
+struct x509_store_ctx_st {      /* X509_STORE_CTX */
+    X509_STORE *ctx;
+    /* The following are set by the caller */
+    /* The cert to check */
+    X509 *cert;
+    /* chain of X509s - untrusted - passed in */
+    STACK_OF(X509) *untrusted;
+    /* set of CRLs passed in */
+    STACK_OF(X509_CRL) *crls;
+    X509_VERIFY_PARAM *param;
+    /* Other info for use with get_issuer() */
+    void *other_ctx;
+    /* Callbacks for various operations */
+    /* called to verify a certificate */
+    int (*verify) (X509_STORE_CTX *ctx);
+    /* error callback */
+    int (*verify_cb) (int ok, X509_STORE_CTX *ctx);
+    /* get issuers cert from ctx */
+    int (*get_issuer) (X509 **issuer, X509_STORE_CTX *ctx, X509 *x);
+    /* check issued */
+    int (*check_issued) (X509_STORE_CTX *ctx, X509 *x, X509 *issuer);
+    /* Check revocation status of chain */
+    int (*check_revocation) (X509_STORE_CTX *ctx);
+    /* retrieve CRL */
+    int (*get_crl) (X509_STORE_CTX *ctx, X509_CRL **crl, X509 *x);
+    /* Check CRL validity */
+    int (*check_crl) (X509_STORE_CTX *ctx, X509_CRL *crl);
+    /* Check certificate against CRL */
+    int (*cert_crl) (X509_STORE_CTX *ctx, X509_CRL *crl, X509 *x);
+    /* Check policy status of the chain */
+    int (*check_policy) (X509_STORE_CTX *ctx);
+    STACK_OF(X509) *(*lookup_certs) (X509_STORE_CTX *ctx, X509_NAME *nm);
+    STACK_OF(X509_CRL) *(*lookup_crls) (X509_STORE_CTX *ctx, X509_NAME *nm);
+    int (*cleanup) (X509_STORE_CTX *ctx);
+    /* The following is built up */
+    /* if 0, rebuild chain */
+    int valid;
+    /* number of untrusted certs */
+    int num_untrusted;
+    /* chain of X509s - built up and trusted */
+    STACK_OF(X509) *chain;
+    /* Valid policy tree */
+    X509_POLICY_TREE *tree;
+    /* Require explicit policy value */
+    int explicit_policy;
+    /* When something goes wrong, this is why */
+    int error_depth;
+    int error;
+    X509 *current_cert;
+    /* cert currently being tested as valid issuer */
+    X509 *current_issuer;
+    /* current CRL */
+    X509_CRL *current_crl;
+    /* score of current CRL */
+    int current_crl_score;
+    /* Reason mask */
+    unsigned int current_reasons;
+    /* For CRL path validation: parent context */
+    X509_STORE_CTX *parent;
+    CRYPTO_EX_DATA ex_data;
+    SSL_DANE *dane;
+    /* signed via bare TA public key, rather than CA certificate */
+    int bare_ta_signed;
+};
+
+/* PKCS#8 private key info structure */
+
+struct pkcs8_priv_key_info_st {
+    ASN1_INTEGER *version;
+    X509_ALGOR *pkeyalg;
+    ASN1_OCTET_STRING *pkey;
+    STACK_OF(X509_ATTRIBUTE) *attributes;
+};
+
+struct X509_sig_st {
+    X509_ALGOR *algor;
+    ASN1_OCTET_STRING *digest;
+};
+
+struct x509_object_st {
+    /* one of the above types */
+    X509_LOOKUP_TYPE type;
+    union {
+        char *ptr;
+        X509 *x509;
+        X509_CRL *crl;
+        EVP_PKEY *pkey;
+    } data;
+};
+
+int a2i_ipadd(unsigned char *ipout, const char *ipasc);
+int x509_set1_time(ASN1_TIME **ptm, const ASN1_TIME *tm);
+
+void x509_init_sig_info(X509 *x);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/init.c b/trunk/3rdparty/openssl-1.1-fit/crypto/init.c
new file mode 100644
index 000000000..b9a7334a7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/init.c
@@ -0,0 +1,854 @@
+/*
+ * Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include "internal/cryptlib_int.h"
+#include <openssl/err.h>
+#include "internal/rand_int.h"
+#include "internal/bio.h"
+#include <openssl/evp.h>
+#include "internal/evp_int.h"
+#include "internal/conf.h"
+#include "internal/async.h"
+#include "internal/engine.h"
+#include "internal/comp.h"
+#include "internal/err.h"
+#include "internal/err_int.h"
+#include "internal/objects.h"
+#include <stdlib.h>
+#include <assert.h>
+#include "internal/thread_once.h"
+#include "internal/dso_conf.h"
+#include "internal/dso.h"
+#include "internal/store.h"
+
+static int stopped = 0;
+
+/*
+ * Since per-thread-specific-data destructors are not universally
+ * available, i.e. not on Windows, only below CRYPTO_THREAD_LOCAL key
+ * is assumed to have destructor associated. And then an effort is made
+ * to call this single destructor on non-pthread platform[s].
+ *
+ * Initial value is "impossible". It is used as guard value to shortcut
+ * destructor for threads terminating before libcrypto is initialized or
+ * after it's de-initialized. Access to the key doesn't have to be
+ * serialized for the said threads, because they didn't use libcrypto
+ * and it doesn't matter if they pick "impossible" or derefernce real
+ * key value and pull NULL past initialization in the first thread that
+ * intends to use libcrypto.
+ */
+static union {
+    long sane;
+    CRYPTO_THREAD_LOCAL value;
+} destructor_key = { -1 };
+
+static void ossl_init_thread_stop(struct thread_local_inits_st *locals);
+
+static void ossl_init_thread_destructor(void *local)
+{
+    ossl_init_thread_stop((struct thread_local_inits_st *)local);
+}
+
+static struct thread_local_inits_st *ossl_init_get_thread_local(int alloc)
+{
+    struct thread_local_inits_st *local =
+        CRYPTO_THREAD_get_local(&destructor_key.value);
+
+    if (alloc) {
+        if (local == NULL
+            && (local = OPENSSL_zalloc(sizeof(*local))) != NULL
+            && !CRYPTO_THREAD_set_local(&destructor_key.value, local)) {
+            OPENSSL_free(local);
+            return NULL;
+        }
+    } else {
+        CRYPTO_THREAD_set_local(&destructor_key.value, NULL);
+    }
+
+    return local;
+}
+
+typedef struct ossl_init_stop_st OPENSSL_INIT_STOP;
+struct ossl_init_stop_st {
+    void (*handler)(void);
+    OPENSSL_INIT_STOP *next;
+};
+
+static OPENSSL_INIT_STOP *stop_handlers = NULL;
+static CRYPTO_RWLOCK *init_lock = NULL;
+
+static CRYPTO_ONCE base = CRYPTO_ONCE_STATIC_INIT;
+static int base_inited = 0;
+DEFINE_RUN_ONCE_STATIC(ossl_init_base)
+{
+    CRYPTO_THREAD_LOCAL key;
+
+#ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_base: Setting up stop handlers\n");
+#endif
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+    ossl_malloc_setup_failures();
+#endif
+    if (!CRYPTO_THREAD_init_local(&key, ossl_init_thread_destructor))
+        return 0;
+    if ((init_lock = CRYPTO_THREAD_lock_new()) == NULL)
+        goto err;
+    OPENSSL_cpuid_setup();
+
+    destructor_key.value = key;
+    base_inited = 1;
+    return 1;
+
+err:
+#ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_base not ok!\n");
+#endif
+    CRYPTO_THREAD_lock_free(init_lock);
+    init_lock = NULL;
+
+    CRYPTO_THREAD_cleanup_local(&key);
+    return 0;
+}
+
+static CRYPTO_ONCE register_atexit = CRYPTO_ONCE_STATIC_INIT;
+#if !defined(OPENSSL_SYS_UEFI) && defined(_WIN32)
+static int win32atexit(void)
+{
+    OPENSSL_cleanup();
+    return 0;
+}
+#endif
+
+DEFINE_RUN_ONCE_STATIC(ossl_init_register_atexit)
+{
+#ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_register_atexit()\n");
+#endif
+#ifndef OPENSSL_SYS_UEFI
+# ifdef _WIN32
+    /* We use _onexit() in preference because it gets called on DLL unload */
+    if (_onexit(win32atexit) == NULL)
+        return 0;
+# else
+    if (atexit(OPENSSL_cleanup) != 0)
+        return 0;
+# endif
+#endif
+
+    return 1;
+}
+
+DEFINE_RUN_ONCE_STATIC_ALT(ossl_init_no_register_atexit,
+                           ossl_init_register_atexit)
+{
+#ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_no_register_atexit ok!\n");
+#endif
+    /* Do nothing in this case */
+    return 1;
+}
+
+static CRYPTO_ONCE load_crypto_nodelete = CRYPTO_ONCE_STATIC_INIT;
+DEFINE_RUN_ONCE_STATIC(ossl_init_load_crypto_nodelete)
+{
+#ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_load_crypto_nodelete()\n");
+#endif
+#if !defined(OPENSSL_NO_DSO) \
+    && !defined(OPENSSL_USE_NODELETE) \
+    && !defined(OPENSSL_NO_PINSHARED)
+# ifdef DSO_WIN32
+    {
+        HMODULE handle = NULL;
+        BOOL ret;
+
+        /* We don't use the DSO route for WIN32 because there is a better way */
+        ret = GetModuleHandleEx(GET_MODULE_HANDLE_EX_FLAG_FROM_ADDRESS
+                                | GET_MODULE_HANDLE_EX_FLAG_PIN,
+                                (void *)&base_inited, &handle);
+
+#  ifdef OPENSSL_INIT_DEBUG
+        fprintf(stderr, "OPENSSL_INIT: obtained DSO reference? %s\n",
+                (ret == TRUE ? "No!" : "Yes."));
+#  endif
+        return (ret == TRUE) ? 1 : 0;
+    }
+# else
+    /*
+     * Deliberately leak a reference to ourselves. This will force the library
+     * to remain loaded until the atexit() handler is run at process exit.
+     */
+    {
+        DSO *dso;
+        void *err;
+
+        if (!err_shelve_state(&err))
+            return 0;
+
+        dso = DSO_dsobyaddr(&base_inited, DSO_FLAG_NO_UNLOAD_ON_FREE);
+#  ifdef OPENSSL_INIT_DEBUG
+        fprintf(stderr, "OPENSSL_INIT: obtained DSO reference? %s\n",
+                (dso == NULL ? "No!" : "Yes."));
+        /*
+         * In case of No!, it is uncertain our exit()-handlers can still be
+         * called. After dlclose() the whole library might have been unloaded
+         * already.
+         */
+#  endif
+        DSO_free(dso);
+        err_unshelve_state(err);
+    }
+# endif
+#endif
+
+    return 1;
+}
+
+static CRYPTO_ONCE load_crypto_strings = CRYPTO_ONCE_STATIC_INIT;
+static int load_crypto_strings_inited = 0;
+DEFINE_RUN_ONCE_STATIC(ossl_init_load_crypto_strings)
+{
+    int ret = 1;
+    /*
+     * OPENSSL_NO_AUTOERRINIT is provided here to prevent at compile time
+     * pulling in all the error strings during static linking
+     */
+#if !defined(OPENSSL_NO_ERR) && !defined(OPENSSL_NO_AUTOERRINIT)
+# ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_load_crypto_strings: "
+                    "err_load_crypto_strings_int()\n");
+# endif
+    ret = err_load_crypto_strings_int();
+    load_crypto_strings_inited = 1;
+#endif
+    return ret;
+}
+
+DEFINE_RUN_ONCE_STATIC_ALT(ossl_init_no_load_crypto_strings,
+                           ossl_init_load_crypto_strings)
+{
+    /* Do nothing in this case */
+    return 1;
+}
+
+static CRYPTO_ONCE add_all_ciphers = CRYPTO_ONCE_STATIC_INIT;
+DEFINE_RUN_ONCE_STATIC(ossl_init_add_all_ciphers)
+{
+    /*
+     * OPENSSL_NO_AUTOALGINIT is provided here to prevent at compile time
+     * pulling in all the ciphers during static linking
+     */
+#ifndef OPENSSL_NO_AUTOALGINIT
+# ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_add_all_ciphers: "
+                    "openssl_add_all_ciphers_int()\n");
+# endif
+    openssl_add_all_ciphers_int();
+#endif
+    return 1;
+}
+
+DEFINE_RUN_ONCE_STATIC_ALT(ossl_init_no_add_all_ciphers,
+                           ossl_init_add_all_ciphers)
+{
+    /* Do nothing */
+    return 1;
+}
+
+static CRYPTO_ONCE add_all_digests = CRYPTO_ONCE_STATIC_INIT;
+DEFINE_RUN_ONCE_STATIC(ossl_init_add_all_digests)
+{
+    /*
+     * OPENSSL_NO_AUTOALGINIT is provided here to prevent at compile time
+     * pulling in all the ciphers during static linking
+     */
+#ifndef OPENSSL_NO_AUTOALGINIT
+# ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_add_all_digests: "
+                    "openssl_add_all_digests()\n");
+# endif
+    openssl_add_all_digests_int();
+#endif
+    return 1;
+}
+
+DEFINE_RUN_ONCE_STATIC_ALT(ossl_init_no_add_all_digests,
+                           ossl_init_add_all_digests)
+{
+    /* Do nothing */
+    return 1;
+}
+
+static CRYPTO_ONCE config = CRYPTO_ONCE_STATIC_INIT;
+static int config_inited = 0;
+static const OPENSSL_INIT_SETTINGS *conf_settings = NULL;
+DEFINE_RUN_ONCE_STATIC(ossl_init_config)
+{
+    int ret = openssl_config_int(conf_settings);
+    config_inited = 1;
+    return ret;
+}
+DEFINE_RUN_ONCE_STATIC_ALT(ossl_init_no_config, ossl_init_config)
+{
+#ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr,
+            "OPENSSL_INIT: ossl_init_config: openssl_no_config_int()\n");
+#endif
+    openssl_no_config_int();
+    config_inited = 1;
+    return 1;
+}
+
+static CRYPTO_ONCE async = CRYPTO_ONCE_STATIC_INIT;
+static int async_inited = 0;
+DEFINE_RUN_ONCE_STATIC(ossl_init_async)
+{
+#ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_async: async_init()\n");
+#endif
+    if (!async_init())
+        return 0;
+    async_inited = 1;
+    return 1;
+}
+
+#ifndef OPENSSL_NO_ENGINE
+static CRYPTO_ONCE engine_openssl = CRYPTO_ONCE_STATIC_INIT;
+DEFINE_RUN_ONCE_STATIC(ossl_init_engine_openssl)
+{
+# ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_engine_openssl: "
+                    "engine_load_openssl_int()\n");
+# endif
+    engine_load_openssl_int();
+    return 1;
+}
+# ifndef OPENSSL_NO_DEVCRYPTOENG
+static CRYPTO_ONCE engine_devcrypto = CRYPTO_ONCE_STATIC_INIT;
+DEFINE_RUN_ONCE_STATIC(ossl_init_engine_devcrypto)
+{
+#  ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_engine_devcrypto: "
+                    "engine_load_devcrypto_int()\n");
+#  endif
+    engine_load_devcrypto_int();
+    return 1;
+}
+# endif
+
+# ifndef OPENSSL_NO_RDRAND
+static CRYPTO_ONCE engine_rdrand = CRYPTO_ONCE_STATIC_INIT;
+DEFINE_RUN_ONCE_STATIC(ossl_init_engine_rdrand)
+{
+#  ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_engine_rdrand: "
+                    "engine_load_rdrand_int()\n");
+#  endif
+    engine_load_rdrand_int();
+    return 1;
+}
+# endif
+static CRYPTO_ONCE engine_dynamic = CRYPTO_ONCE_STATIC_INIT;
+DEFINE_RUN_ONCE_STATIC(ossl_init_engine_dynamic)
+{
+# ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_engine_dynamic: "
+                    "engine_load_dynamic_int()\n");
+# endif
+    engine_load_dynamic_int();
+    return 1;
+}
+# ifndef OPENSSL_NO_STATIC_ENGINE
+#  if !defined(OPENSSL_NO_HW) && !defined(OPENSSL_NO_HW_PADLOCK)
+static CRYPTO_ONCE engine_padlock = CRYPTO_ONCE_STATIC_INIT;
+DEFINE_RUN_ONCE_STATIC(ossl_init_engine_padlock)
+{
+#   ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_engine_padlock: "
+                    "engine_load_padlock_int()\n");
+#   endif
+    engine_load_padlock_int();
+    return 1;
+}
+#  endif
+#  if defined(OPENSSL_SYS_WIN32) && !defined(OPENSSL_NO_CAPIENG)
+static CRYPTO_ONCE engine_capi = CRYPTO_ONCE_STATIC_INIT;
+DEFINE_RUN_ONCE_STATIC(ossl_init_engine_capi)
+{
+#   ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_engine_capi: "
+                    "engine_load_capi_int()\n");
+#   endif
+    engine_load_capi_int();
+    return 1;
+}
+#  endif
+#  if !defined(OPENSSL_NO_AFALGENG)
+static CRYPTO_ONCE engine_afalg = CRYPTO_ONCE_STATIC_INIT;
+DEFINE_RUN_ONCE_STATIC(ossl_init_engine_afalg)
+{
+#   ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_engine_afalg: "
+                    "engine_load_afalg_int()\n");
+#   endif
+    engine_load_afalg_int();
+    return 1;
+}
+#  endif
+# endif
+#endif
+
+#ifndef OPENSSL_NO_COMP
+static CRYPTO_ONCE zlib = CRYPTO_ONCE_STATIC_INIT;
+
+static int zlib_inited = 0;
+DEFINE_RUN_ONCE_STATIC(ossl_init_zlib)
+{
+    /* Do nothing - we need to know about this for the later cleanup */
+    zlib_inited = 1;
+    return 1;
+}
+#endif
+
+static void ossl_init_thread_stop(struct thread_local_inits_st *locals)
+{
+    /* Can't do much about this */
+    if (locals == NULL)
+        return;
+
+    if (locals->async) {
+#ifdef OPENSSL_INIT_DEBUG
+        fprintf(stderr, "OPENSSL_INIT: ossl_init_thread_stop: "
+                        "async_delete_thread_state()\n");
+#endif
+        async_delete_thread_state();
+    }
+
+    if (locals->err_state) {
+#ifdef OPENSSL_INIT_DEBUG
+        fprintf(stderr, "OPENSSL_INIT: ossl_init_thread_stop: "
+                        "err_delete_thread_state()\n");
+#endif
+        err_delete_thread_state();
+    }
+
+    if (locals->rand) {
+#ifdef OPENSSL_INIT_DEBUG
+        fprintf(stderr, "OPENSSL_INIT: ossl_init_thread_stop: "
+                        "drbg_delete_thread_state()\n");
+#endif
+        drbg_delete_thread_state();
+    }
+
+    OPENSSL_free(locals);
+}
+
+void OPENSSL_thread_stop(void)
+{
+    if (destructor_key.sane != -1)
+        ossl_init_thread_stop(ossl_init_get_thread_local(0));
+}
+
+int ossl_init_thread_start(uint64_t opts)
+{
+    struct thread_local_inits_st *locals;
+
+    if (!OPENSSL_init_crypto(0, NULL))
+        return 0;
+
+    locals = ossl_init_get_thread_local(1);
+
+    if (locals == NULL)
+        return 0;
+
+    if (opts & OPENSSL_INIT_THREAD_ASYNC) {
+#ifdef OPENSSL_INIT_DEBUG
+        fprintf(stderr, "OPENSSL_INIT: ossl_init_thread_start: "
+                        "marking thread for async\n");
+#endif
+        locals->async = 1;
+    }
+
+    if (opts & OPENSSL_INIT_THREAD_ERR_STATE) {
+#ifdef OPENSSL_INIT_DEBUG
+        fprintf(stderr, "OPENSSL_INIT: ossl_init_thread_start: "
+                        "marking thread for err_state\n");
+#endif
+        locals->err_state = 1;
+    }
+
+    if (opts & OPENSSL_INIT_THREAD_RAND) {
+#ifdef OPENSSL_INIT_DEBUG
+        fprintf(stderr, "OPENSSL_INIT: ossl_init_thread_start: "
+                        "marking thread for rand\n");
+#endif
+        locals->rand = 1;
+    }
+
+    return 1;
+}
+
+void OPENSSL_cleanup(void)
+{
+    OPENSSL_INIT_STOP *currhandler, *lasthandler;
+    CRYPTO_THREAD_LOCAL key;
+
+    /* If we've not been inited then no need to deinit */
+    if (!base_inited)
+        return;
+
+    /* Might be explicitly called and also by atexit */
+    if (stopped)
+        return;
+    stopped = 1;
+
+    /*
+     * Thread stop may not get automatically called by the thread library for
+     * the very last thread in some situations, so call it directly.
+     */
+    ossl_init_thread_stop(ossl_init_get_thread_local(0));
+
+    currhandler = stop_handlers;
+    while (currhandler != NULL) {
+        currhandler->handler();
+        lasthandler = currhandler;
+        currhandler = currhandler->next;
+        OPENSSL_free(lasthandler);
+    }
+    stop_handlers = NULL;
+
+    CRYPTO_THREAD_lock_free(init_lock);
+    init_lock = NULL;
+
+    /*
+     * We assume we are single-threaded for this function, i.e. no race
+     * conditions for the various "*_inited" vars below.
+     */
+
+#ifndef OPENSSL_NO_COMP
+    if (zlib_inited) {
+#ifdef OPENSSL_INIT_DEBUG
+        fprintf(stderr, "OPENSSL_INIT: OPENSSL_cleanup: "
+                        "comp_zlib_cleanup_int()\n");
+#endif
+        comp_zlib_cleanup_int();
+    }
+#endif
+
+    if (async_inited) {
+# ifdef OPENSSL_INIT_DEBUG
+        fprintf(stderr, "OPENSSL_INIT: OPENSSL_cleanup: "
+                        "async_deinit()\n");
+# endif
+        async_deinit();
+    }
+
+    if (load_crypto_strings_inited) {
+#ifdef OPENSSL_INIT_DEBUG
+        fprintf(stderr, "OPENSSL_INIT: OPENSSL_cleanup: "
+                        "err_free_strings_int()\n");
+#endif
+        err_free_strings_int();
+    }
+
+    key = destructor_key.value;
+    destructor_key.sane = -1;
+    CRYPTO_THREAD_cleanup_local(&key);
+
+#ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: OPENSSL_cleanup: "
+                    "rand_cleanup_int()\n");
+    fprintf(stderr, "OPENSSL_INIT: OPENSSL_cleanup: "
+                    "conf_modules_free_int()\n");
+#ifndef OPENSSL_NO_ENGINE
+    fprintf(stderr, "OPENSSL_INIT: OPENSSL_cleanup: "
+                    "engine_cleanup_int()\n");
+#endif
+    fprintf(stderr, "OPENSSL_INIT: OPENSSL_cleanup: "
+                    "crypto_cleanup_all_ex_data_int()\n");
+    fprintf(stderr, "OPENSSL_INIT: OPENSSL_cleanup: "
+                    "bio_sock_cleanup_int()\n");
+    fprintf(stderr, "OPENSSL_INIT: OPENSSL_cleanup: "
+                    "bio_cleanup()\n");
+    fprintf(stderr, "OPENSSL_INIT: OPENSSL_cleanup: "
+                    "evp_cleanup_int()\n");
+    fprintf(stderr, "OPENSSL_INIT: OPENSSL_cleanup: "
+                    "obj_cleanup_int()\n");
+    fprintf(stderr, "OPENSSL_INIT: OPENSSL_cleanup: "
+                    "err_cleanup()\n");
+#endif
+    /*
+     * Note that cleanup order is important:
+     * - rand_cleanup_int could call an ENGINE's RAND cleanup function so
+     * must be called before engine_cleanup_int()
+     * - ENGINEs use CRYPTO_EX_DATA and therefore, must be cleaned up
+     * before the ex data handlers are wiped in CRYPTO_cleanup_all_ex_data().
+     * - conf_modules_free_int() can end up in ENGINE code so must be called
+     * before engine_cleanup_int()
+     * - ENGINEs and additional EVP algorithms might use added OIDs names so
+     * obj_cleanup_int() must be called last
+     */
+    rand_cleanup_int();
+    rand_drbg_cleanup_int();
+    conf_modules_free_int();
+#ifndef OPENSSL_NO_ENGINE
+    engine_cleanup_int();
+#endif
+    ossl_store_cleanup_int();
+    crypto_cleanup_all_ex_data_int();
+    bio_cleanup();
+    evp_cleanup_int();
+    obj_cleanup_int();
+    err_cleanup();
+
+    CRYPTO_secure_malloc_done();
+
+    base_inited = 0;
+}
+
+/*
+ * If this function is called with a non NULL settings value then it must be
+ * called prior to any threads making calls to any OpenSSL functions,
+ * i.e. passing a non-null settings value is assumed to be single-threaded.
+ */
+int OPENSSL_init_crypto(uint64_t opts, const OPENSSL_INIT_SETTINGS *settings)
+{
+    if (stopped) {
+        if (!(opts & OPENSSL_INIT_BASE_ONLY))
+            CRYPTOerr(CRYPTO_F_OPENSSL_INIT_CRYPTO, ERR_R_INIT_FAIL);
+        return 0;
+    }
+
+    /*
+     * When the caller specifies OPENSSL_INIT_BASE_ONLY, that should be the
+     * *only* option specified.  With that option we return immediately after
+     * doing the requested limited initialization.  Note that
+     * err_shelve_state() called by us via ossl_init_load_crypto_nodelete()
+     * re-enters OPENSSL_init_crypto() with OPENSSL_INIT_BASE_ONLY, but with
+     * base already initialized this is a harmless NOOP.
+     *
+     * If we remain the only caller of err_shelve_state() the recursion should
+     * perhaps be removed, but if in doubt, it can be left in place.
+     */
+    if (!RUN_ONCE(&base, ossl_init_base))
+        return 0;
+    if (opts & OPENSSL_INIT_BASE_ONLY)
+        return 1;
+
+    /*
+     * Now we don't always set up exit handlers, the INIT_BASE_ONLY calls
+     * should not have the side-effect of setting up exit handlers, and
+     * therefore, this code block is below the INIT_BASE_ONLY-conditioned early
+     * return above.
+     */
+    if ((opts & OPENSSL_INIT_NO_ATEXIT) != 0) {
+        if (!RUN_ONCE_ALT(&register_atexit, ossl_init_no_register_atexit,
+                          ossl_init_register_atexit))
+            return 0;
+    } else if (!RUN_ONCE(&register_atexit, ossl_init_register_atexit)) {
+        return 0;
+    }
+
+    if (!RUN_ONCE(&load_crypto_nodelete, ossl_init_load_crypto_nodelete))
+        return 0;
+
+    if ((opts & OPENSSL_INIT_NO_LOAD_CRYPTO_STRINGS)
+            && !RUN_ONCE_ALT(&load_crypto_strings,
+                             ossl_init_no_load_crypto_strings,
+                             ossl_init_load_crypto_strings))
+        return 0;
+
+    if ((opts & OPENSSL_INIT_LOAD_CRYPTO_STRINGS)
+            && !RUN_ONCE(&load_crypto_strings, ossl_init_load_crypto_strings))
+        return 0;
+
+    if ((opts & OPENSSL_INIT_NO_ADD_ALL_CIPHERS)
+            && !RUN_ONCE_ALT(&add_all_ciphers, ossl_init_no_add_all_ciphers,
+                             ossl_init_add_all_ciphers))
+        return 0;
+
+    if ((opts & OPENSSL_INIT_ADD_ALL_CIPHERS)
+            && !RUN_ONCE(&add_all_ciphers, ossl_init_add_all_ciphers))
+        return 0;
+
+    if ((opts & OPENSSL_INIT_NO_ADD_ALL_DIGESTS)
+            && !RUN_ONCE_ALT(&add_all_digests, ossl_init_no_add_all_digests,
+                             ossl_init_add_all_digests))
+        return 0;
+
+    if ((opts & OPENSSL_INIT_ADD_ALL_DIGESTS)
+            && !RUN_ONCE(&add_all_digests, ossl_init_add_all_digests))
+        return 0;
+
+    if ((opts & OPENSSL_INIT_ATFORK)
+            && !openssl_init_fork_handlers())
+        return 0;
+
+    if ((opts & OPENSSL_INIT_NO_LOAD_CONFIG)
+            && !RUN_ONCE_ALT(&config, ossl_init_no_config, ossl_init_config))
+        return 0;
+
+    if (opts & OPENSSL_INIT_LOAD_CONFIG) {
+        int ret;
+        CRYPTO_THREAD_write_lock(init_lock);
+        conf_settings = settings;
+        ret = RUN_ONCE(&config, ossl_init_config);
+        conf_settings = NULL;
+        CRYPTO_THREAD_unlock(init_lock);
+        if (!ret)
+            return 0;
+    }
+
+    if ((opts & OPENSSL_INIT_ASYNC)
+            && !RUN_ONCE(&async, ossl_init_async))
+        return 0;
+
+#ifndef OPENSSL_NO_ENGINE
+    if ((opts & OPENSSL_INIT_ENGINE_OPENSSL)
+            && !RUN_ONCE(&engine_openssl, ossl_init_engine_openssl))
+        return 0;
+# if !defined(OPENSSL_NO_HW) && !defined(OPENSSL_NO_DEVCRYPTOENG)
+    if ((opts & OPENSSL_INIT_ENGINE_CRYPTODEV)
+            && !RUN_ONCE(&engine_devcrypto, ossl_init_engine_devcrypto))
+        return 0;
+# endif
+# ifndef OPENSSL_NO_RDRAND
+    if ((opts & OPENSSL_INIT_ENGINE_RDRAND)
+            && !RUN_ONCE(&engine_rdrand, ossl_init_engine_rdrand))
+        return 0;
+# endif
+    if ((opts & OPENSSL_INIT_ENGINE_DYNAMIC)
+            && !RUN_ONCE(&engine_dynamic, ossl_init_engine_dynamic))
+        return 0;
+# ifndef OPENSSL_NO_STATIC_ENGINE
+#  if !defined(OPENSSL_NO_HW) && !defined(OPENSSL_NO_HW_PADLOCK)
+    if ((opts & OPENSSL_INIT_ENGINE_PADLOCK)
+            && !RUN_ONCE(&engine_padlock, ossl_init_engine_padlock))
+        return 0;
+#  endif
+#  if defined(OPENSSL_SYS_WIN32) && !defined(OPENSSL_NO_CAPIENG)
+    if ((opts & OPENSSL_INIT_ENGINE_CAPI)
+            && !RUN_ONCE(&engine_capi, ossl_init_engine_capi))
+        return 0;
+#  endif
+#  if !defined(OPENSSL_NO_AFALGENG)
+    if ((opts & OPENSSL_INIT_ENGINE_AFALG)
+            && !RUN_ONCE(&engine_afalg, ossl_init_engine_afalg))
+        return 0;
+#  endif
+# endif
+    if (opts & (OPENSSL_INIT_ENGINE_ALL_BUILTIN
+                | OPENSSL_INIT_ENGINE_OPENSSL
+                | OPENSSL_INIT_ENGINE_AFALG)) {
+        ENGINE_register_all_complete();
+    }
+#endif
+
+#ifndef OPENSSL_NO_COMP
+    if ((opts & OPENSSL_INIT_ZLIB)
+            && !RUN_ONCE(&zlib, ossl_init_zlib))
+        return 0;
+#endif
+
+    return 1;
+}
+
+int OPENSSL_atexit(void (*handler)(void))
+{
+    OPENSSL_INIT_STOP *newhand;
+
+#if !defined(OPENSSL_NO_DSO) \
+    && !defined(OPENSSL_USE_NODELETE)\
+    && !defined(OPENSSL_NO_PINSHARED)
+    {
+        union {
+            void *sym;
+            void (*func)(void);
+        } handlersym;
+
+        handlersym.func = handler;
+# ifdef DSO_WIN32
+        {
+            HMODULE handle = NULL;
+            BOOL ret;
+
+            /*
+             * We don't use the DSO route for WIN32 because there is a better
+             * way
+             */
+            ret = GetModuleHandleEx(GET_MODULE_HANDLE_EX_FLAG_FROM_ADDRESS
+                                    | GET_MODULE_HANDLE_EX_FLAG_PIN,
+                                    handlersym.sym, &handle);
+
+            if (!ret)
+                return 0;
+        }
+# else
+        /*
+         * Deliberately leak a reference to the handler. This will force the
+         * library/code containing the handler to remain loaded until we run the
+         * atexit handler. If -znodelete has been used then this is
+         * unnecessary.
+         */
+        {
+            DSO *dso = NULL;
+
+            ERR_set_mark();
+            dso = DSO_dsobyaddr(handlersym.sym, DSO_FLAG_NO_UNLOAD_ON_FREE);
+#  ifdef OPENSSL_INIT_DEBUG
+            fprintf(stderr,
+                    "OPENSSL_INIT: OPENSSL_atexit: obtained DSO reference? %s\n",
+                    (dso == NULL ? "No!" : "Yes."));
+            /* See same code above in ossl_init_base() for an explanation. */
+#  endif
+            DSO_free(dso);
+            ERR_pop_to_mark();
+        }
+# endif
+    }
+#endif
+
+    if ((newhand = OPENSSL_malloc(sizeof(*newhand))) == NULL) {
+        CRYPTOerr(CRYPTO_F_OPENSSL_ATEXIT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    newhand->handler = handler;
+    newhand->next = stop_handlers;
+    stop_handlers = newhand;
+
+    return 1;
+}
+
+#ifdef OPENSSL_SYS_UNIX
+/*
+ * The following three functions are for OpenSSL developers.  This is
+ * where we set/reset state across fork (called via pthread_atfork when
+ * it exists, or manually by the application when it doesn't).
+ *
+ * WARNING!  If you put code in either OPENSSL_fork_parent or
+ * OPENSSL_fork_child, you MUST MAKE SURE that they are async-signal-
+ * safe.  See this link, for example:
+ *      http://man7.org/linux/man-pages/man7/signal-safety.7.html
+ */
+
+void OPENSSL_fork_prepare(void)
+{
+}
+
+void OPENSSL_fork_parent(void)
+{
+}
+
+void OPENSSL_fork_child(void)
+{
+    rand_fork();
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/kdf/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/kdf/build.info
new file mode 100644
index 000000000..c166399d0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/kdf/build.info
@@ -0,0 +1,3 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        tls1_prf.c kdf_err.c hkdf.c scrypt.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/kdf/hkdf.c b/trunk/3rdparty/openssl-1.1-fit/crypto/kdf/hkdf.c
new file mode 100644
index 000000000..ae46fad60
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/kdf/hkdf.c
@@ -0,0 +1,352 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdlib.h>
+#include <string.h>
+#include <openssl/hmac.h>
+#include <openssl/kdf.h>
+#include <openssl/evp.h>
+#include "internal/cryptlib.h"
+#include "internal/evp_int.h"
+
+#define HKDF_MAXBUF 1024
+
+static unsigned char *HKDF(const EVP_MD *evp_md,
+                           const unsigned char *salt, size_t salt_len,
+                           const unsigned char *key, size_t key_len,
+                           const unsigned char *info, size_t info_len,
+                           unsigned char *okm, size_t okm_len);
+
+static unsigned char *HKDF_Extract(const EVP_MD *evp_md,
+                                   const unsigned char *salt, size_t salt_len,
+                                   const unsigned char *key, size_t key_len,
+                                   unsigned char *prk, size_t *prk_len);
+
+static unsigned char *HKDF_Expand(const EVP_MD *evp_md,
+                                  const unsigned char *prk, size_t prk_len,
+                                  const unsigned char *info, size_t info_len,
+                                  unsigned char *okm, size_t okm_len);
+
+typedef struct {
+    int mode;
+    const EVP_MD *md;
+    unsigned char *salt;
+    size_t salt_len;
+    unsigned char *key;
+    size_t key_len;
+    unsigned char info[HKDF_MAXBUF];
+    size_t info_len;
+} HKDF_PKEY_CTX;
+
+static int pkey_hkdf_init(EVP_PKEY_CTX *ctx)
+{
+    HKDF_PKEY_CTX *kctx;
+
+    if ((kctx = OPENSSL_zalloc(sizeof(*kctx))) == NULL) {
+        KDFerr(KDF_F_PKEY_HKDF_INIT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    ctx->data = kctx;
+
+    return 1;
+}
+
+static void pkey_hkdf_cleanup(EVP_PKEY_CTX *ctx)
+{
+    HKDF_PKEY_CTX *kctx = ctx->data;
+    OPENSSL_clear_free(kctx->salt, kctx->salt_len);
+    OPENSSL_clear_free(kctx->key, kctx->key_len);
+    OPENSSL_cleanse(kctx->info, kctx->info_len);
+    OPENSSL_free(kctx);
+}
+
+static int pkey_hkdf_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
+{
+    HKDF_PKEY_CTX *kctx = ctx->data;
+
+    switch (type) {
+    case EVP_PKEY_CTRL_HKDF_MD:
+        if (p2 == NULL)
+            return 0;
+
+        kctx->md = p2;
+        return 1;
+
+    case EVP_PKEY_CTRL_HKDF_MODE:
+        kctx->mode = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_HKDF_SALT:
+        if (p1 == 0 || p2 == NULL)
+            return 1;
+
+        if (p1 < 0)
+            return 0;
+
+        if (kctx->salt != NULL)
+            OPENSSL_clear_free(kctx->salt, kctx->salt_len);
+
+        kctx->salt = OPENSSL_memdup(p2, p1);
+        if (kctx->salt == NULL)
+            return 0;
+
+        kctx->salt_len = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_HKDF_KEY:
+        if (p1 < 0)
+            return 0;
+
+        if (kctx->key != NULL)
+            OPENSSL_clear_free(kctx->key, kctx->key_len);
+
+        kctx->key = OPENSSL_memdup(p2, p1);
+        if (kctx->key == NULL)
+            return 0;
+
+        kctx->key_len  = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_HKDF_INFO:
+        if (p1 == 0 || p2 == NULL)
+            return 1;
+
+        if (p1 < 0 || p1 > (int)(HKDF_MAXBUF - kctx->info_len))
+            return 0;
+
+        memcpy(kctx->info + kctx->info_len, p2, p1);
+        kctx->info_len += p1;
+        return 1;
+
+    default:
+        return -2;
+
+    }
+}
+
+static int pkey_hkdf_ctrl_str(EVP_PKEY_CTX *ctx, const char *type,
+                              const char *value)
+{
+    if (strcmp(type, "mode") == 0) {
+        int mode;
+
+        if (strcmp(value, "EXTRACT_AND_EXPAND") == 0)
+            mode = EVP_PKEY_HKDEF_MODE_EXTRACT_AND_EXPAND;
+        else if (strcmp(value, "EXTRACT_ONLY") == 0)
+            mode = EVP_PKEY_HKDEF_MODE_EXTRACT_ONLY;
+        else if (strcmp(value, "EXPAND_ONLY") == 0)
+            mode = EVP_PKEY_HKDEF_MODE_EXPAND_ONLY;
+        else
+            return 0;
+
+        return EVP_PKEY_CTX_hkdf_mode(ctx, mode);
+    }
+
+    if (strcmp(type, "md") == 0)
+        return EVP_PKEY_CTX_md(ctx, EVP_PKEY_OP_DERIVE,
+                               EVP_PKEY_CTRL_HKDF_MD, value);
+
+    if (strcmp(type, "salt") == 0)
+        return EVP_PKEY_CTX_str2ctrl(ctx, EVP_PKEY_CTRL_HKDF_SALT, value);
+
+    if (strcmp(type, "hexsalt") == 0)
+        return EVP_PKEY_CTX_hex2ctrl(ctx, EVP_PKEY_CTRL_HKDF_SALT, value);
+
+    if (strcmp(type, "key") == 0)
+        return EVP_PKEY_CTX_str2ctrl(ctx, EVP_PKEY_CTRL_HKDF_KEY, value);
+
+    if (strcmp(type, "hexkey") == 0)
+        return EVP_PKEY_CTX_hex2ctrl(ctx, EVP_PKEY_CTRL_HKDF_KEY, value);
+
+    if (strcmp(type, "info") == 0)
+        return EVP_PKEY_CTX_str2ctrl(ctx, EVP_PKEY_CTRL_HKDF_INFO, value);
+
+    if (strcmp(type, "hexinfo") == 0)
+        return EVP_PKEY_CTX_hex2ctrl(ctx, EVP_PKEY_CTRL_HKDF_INFO, value);
+
+    KDFerr(KDF_F_PKEY_HKDF_CTRL_STR, KDF_R_UNKNOWN_PARAMETER_TYPE);
+    return -2;
+}
+
+static int pkey_hkdf_derive_init(EVP_PKEY_CTX *ctx)
+{
+    HKDF_PKEY_CTX *kctx = ctx->data;
+
+    OPENSSL_clear_free(kctx->key, kctx->key_len);
+    OPENSSL_clear_free(kctx->salt, kctx->salt_len);
+    OPENSSL_cleanse(kctx->info, kctx->info_len);
+    memset(kctx, 0, sizeof(*kctx));
+
+    return 1;
+}
+
+static int pkey_hkdf_derive(EVP_PKEY_CTX *ctx, unsigned char *key,
+                            size_t *keylen)
+{
+    HKDF_PKEY_CTX *kctx = ctx->data;
+
+    if (kctx->md == NULL) {
+        KDFerr(KDF_F_PKEY_HKDF_DERIVE, KDF_R_MISSING_MESSAGE_DIGEST);
+        return 0;
+    }
+    if (kctx->key == NULL) {
+        KDFerr(KDF_F_PKEY_HKDF_DERIVE, KDF_R_MISSING_KEY);
+        return 0;
+    }
+
+    switch (kctx->mode) {
+    case EVP_PKEY_HKDEF_MODE_EXTRACT_AND_EXPAND:
+        return HKDF(kctx->md, kctx->salt, kctx->salt_len, kctx->key,
+                    kctx->key_len, kctx->info, kctx->info_len, key,
+                    *keylen) != NULL;
+
+    case EVP_PKEY_HKDEF_MODE_EXTRACT_ONLY:
+        if (key == NULL) {
+            *keylen = EVP_MD_size(kctx->md);
+            return 1;
+        }
+        return HKDF_Extract(kctx->md, kctx->salt, kctx->salt_len, kctx->key,
+                            kctx->key_len, key, keylen) != NULL;
+
+    case EVP_PKEY_HKDEF_MODE_EXPAND_ONLY:
+        return HKDF_Expand(kctx->md, kctx->key, kctx->key_len, kctx->info,
+                           kctx->info_len, key, *keylen) != NULL;
+
+    default:
+        return 0;
+    }
+}
+
+const EVP_PKEY_METHOD hkdf_pkey_meth = {
+    EVP_PKEY_HKDF,
+    0,
+    pkey_hkdf_init,
+    0,
+    pkey_hkdf_cleanup,
+
+    0, 0,
+    0, 0,
+
+    0,
+    0,
+
+    0,
+    0,
+
+    0, 0,
+
+    0, 0, 0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    pkey_hkdf_derive_init,
+    pkey_hkdf_derive,
+    pkey_hkdf_ctrl,
+    pkey_hkdf_ctrl_str
+};
+
+static unsigned char *HKDF(const EVP_MD *evp_md,
+                           const unsigned char *salt, size_t salt_len,
+                           const unsigned char *key, size_t key_len,
+                           const unsigned char *info, size_t info_len,
+                           unsigned char *okm, size_t okm_len)
+{
+    unsigned char prk[EVP_MAX_MD_SIZE];
+    unsigned char *ret;
+    size_t prk_len;
+
+    if (!HKDF_Extract(evp_md, salt, salt_len, key, key_len, prk, &prk_len))
+        return NULL;
+
+    ret = HKDF_Expand(evp_md, prk, prk_len, info, info_len, okm, okm_len);
+    OPENSSL_cleanse(prk, sizeof(prk));
+
+    return ret;
+}
+
+static unsigned char *HKDF_Extract(const EVP_MD *evp_md,
+                                   const unsigned char *salt, size_t salt_len,
+                                   const unsigned char *key, size_t key_len,
+                                   unsigned char *prk, size_t *prk_len)
+{
+    unsigned int tmp_len;
+
+    if (!HMAC(evp_md, salt, salt_len, key, key_len, prk, &tmp_len))
+        return NULL;
+
+    *prk_len = tmp_len;
+    return prk;
+}
+
+static unsigned char *HKDF_Expand(const EVP_MD *evp_md,
+                                  const unsigned char *prk, size_t prk_len,
+                                  const unsigned char *info, size_t info_len,
+                                  unsigned char *okm, size_t okm_len)
+{
+    HMAC_CTX *hmac;
+    unsigned char *ret = NULL;
+
+    unsigned int i;
+
+    unsigned char prev[EVP_MAX_MD_SIZE];
+
+    size_t done_len = 0, dig_len = EVP_MD_size(evp_md);
+
+    size_t n = okm_len / dig_len;
+    if (okm_len % dig_len)
+        n++;
+
+    if (n > 255 || okm == NULL)
+        return NULL;
+
+    if ((hmac = HMAC_CTX_new()) == NULL)
+        return NULL;
+
+    if (!HMAC_Init_ex(hmac, prk, prk_len, evp_md, NULL))
+        goto err;
+
+    for (i = 1; i <= n; i++) {
+        size_t copy_len;
+        const unsigned char ctr = i;
+
+        if (i > 1) {
+            if (!HMAC_Init_ex(hmac, NULL, 0, NULL, NULL))
+                goto err;
+
+            if (!HMAC_Update(hmac, prev, dig_len))
+                goto err;
+        }
+
+        if (!HMAC_Update(hmac, info, info_len))
+            goto err;
+
+        if (!HMAC_Update(hmac, &ctr, 1))
+            goto err;
+
+        if (!HMAC_Final(hmac, prev, NULL))
+            goto err;
+
+        copy_len = (done_len + dig_len > okm_len) ?
+                       okm_len - done_len :
+                       dig_len;
+
+        memcpy(okm + done_len, prev, copy_len);
+
+        done_len += copy_len;
+    }
+    ret = okm;
+
+ err:
+    OPENSSL_cleanse(prev, sizeof(prev));
+    HMAC_CTX_free(hmac);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/kdf/kdf_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/kdf/kdf_err.c
new file mode 100644
index 000000000..1627c0a39
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/kdf/kdf_err.c
@@ -0,0 +1,67 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/kdferr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA KDF_str_functs[] = {
+    {ERR_PACK(ERR_LIB_KDF, KDF_F_PKEY_HKDF_CTRL_STR, 0), "pkey_hkdf_ctrl_str"},
+    {ERR_PACK(ERR_LIB_KDF, KDF_F_PKEY_HKDF_DERIVE, 0), "pkey_hkdf_derive"},
+    {ERR_PACK(ERR_LIB_KDF, KDF_F_PKEY_HKDF_INIT, 0), "pkey_hkdf_init"},
+    {ERR_PACK(ERR_LIB_KDF, KDF_F_PKEY_SCRYPT_CTRL_STR, 0),
+     "pkey_scrypt_ctrl_str"},
+    {ERR_PACK(ERR_LIB_KDF, KDF_F_PKEY_SCRYPT_CTRL_UINT64, 0),
+     "pkey_scrypt_ctrl_uint64"},
+    {ERR_PACK(ERR_LIB_KDF, KDF_F_PKEY_SCRYPT_DERIVE, 0), "pkey_scrypt_derive"},
+    {ERR_PACK(ERR_LIB_KDF, KDF_F_PKEY_SCRYPT_INIT, 0), "pkey_scrypt_init"},
+    {ERR_PACK(ERR_LIB_KDF, KDF_F_PKEY_SCRYPT_SET_MEMBUF, 0),
+     "pkey_scrypt_set_membuf"},
+    {ERR_PACK(ERR_LIB_KDF, KDF_F_PKEY_TLS1_PRF_CTRL_STR, 0),
+     "pkey_tls1_prf_ctrl_str"},
+    {ERR_PACK(ERR_LIB_KDF, KDF_F_PKEY_TLS1_PRF_DERIVE, 0),
+     "pkey_tls1_prf_derive"},
+    {ERR_PACK(ERR_LIB_KDF, KDF_F_PKEY_TLS1_PRF_INIT, 0), "pkey_tls1_prf_init"},
+    {ERR_PACK(ERR_LIB_KDF, KDF_F_TLS1_PRF_ALG, 0), "tls1_prf_alg"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA KDF_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_KDF, 0, KDF_R_INVALID_DIGEST), "invalid digest"},
+    {ERR_PACK(ERR_LIB_KDF, 0, KDF_R_MISSING_ITERATION_COUNT),
+    "missing iteration count"},
+    {ERR_PACK(ERR_LIB_KDF, 0, KDF_R_MISSING_KEY), "missing key"},
+    {ERR_PACK(ERR_LIB_KDF, 0, KDF_R_MISSING_MESSAGE_DIGEST),
+    "missing message digest"},
+    {ERR_PACK(ERR_LIB_KDF, 0, KDF_R_MISSING_PARAMETER), "missing parameter"},
+    {ERR_PACK(ERR_LIB_KDF, 0, KDF_R_MISSING_PASS), "missing pass"},
+    {ERR_PACK(ERR_LIB_KDF, 0, KDF_R_MISSING_SALT), "missing salt"},
+    {ERR_PACK(ERR_LIB_KDF, 0, KDF_R_MISSING_SECRET), "missing secret"},
+    {ERR_PACK(ERR_LIB_KDF, 0, KDF_R_MISSING_SEED), "missing seed"},
+    {ERR_PACK(ERR_LIB_KDF, 0, KDF_R_UNKNOWN_PARAMETER_TYPE),
+    "unknown parameter type"},
+    {ERR_PACK(ERR_LIB_KDF, 0, KDF_R_VALUE_ERROR), "value error"},
+    {ERR_PACK(ERR_LIB_KDF, 0, KDF_R_VALUE_MISSING), "value missing"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_KDF_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(KDF_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(KDF_str_functs);
+        ERR_load_strings_const(KDF_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/kdf/scrypt.c b/trunk/3rdparty/openssl-1.1-fit/crypto/kdf/scrypt.c
new file mode 100644
index 000000000..61fd390e9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/kdf/scrypt.c
@@ -0,0 +1,266 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdlib.h>
+#include <string.h>
+#include <openssl/hmac.h>
+#include <openssl/kdf.h>
+#include <openssl/evp.h>
+#include "internal/cryptlib.h"
+#include "internal/evp_int.h"
+
+#ifndef OPENSSL_NO_SCRYPT
+
+static int atou64(const char *nptr, uint64_t *result);
+
+typedef struct {
+    unsigned char *pass;
+    size_t pass_len;
+    unsigned char *salt;
+    size_t salt_len;
+    uint64_t N, r, p;
+    uint64_t maxmem_bytes;
+} SCRYPT_PKEY_CTX;
+
+/* Custom uint64_t parser since we do not have strtoull */
+static int atou64(const char *nptr, uint64_t *result)
+{
+    uint64_t value = 0;
+
+    while (*nptr) {
+        unsigned int digit;
+        uint64_t new_value;
+
+        if ((*nptr < '0') || (*nptr > '9')) {
+            return 0;
+        }
+        digit = (unsigned int)(*nptr - '0');
+        new_value = (value * 10) + digit;
+        if ((new_value < digit) || ((new_value - digit) / 10 != value)) {
+            /* Overflow */
+            return 0;
+        }
+        value = new_value;
+        nptr++;
+    }
+    *result = value;
+    return 1;
+}
+
+static int pkey_scrypt_init(EVP_PKEY_CTX *ctx)
+{
+    SCRYPT_PKEY_CTX *kctx;
+
+    kctx = OPENSSL_zalloc(sizeof(*kctx));
+    if (kctx == NULL) {
+        KDFerr(KDF_F_PKEY_SCRYPT_INIT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    /* Default values are the most conservative recommendation given in the
+     * original paper of C. Percival. Derivation uses roughly 1 GiB of memory
+     * for this parameter choice (approx. 128 * r * (N + p) bytes).
+     */
+    kctx->N = 1 << 20;
+    kctx->r = 8;
+    kctx->p = 1;
+    kctx->maxmem_bytes = 1025 * 1024 * 1024;
+
+    ctx->data = kctx;
+
+    return 1;
+}
+
+static void pkey_scrypt_cleanup(EVP_PKEY_CTX *ctx)
+{
+    SCRYPT_PKEY_CTX *kctx = ctx->data;
+
+    OPENSSL_clear_free(kctx->salt, kctx->salt_len);
+    OPENSSL_clear_free(kctx->pass, kctx->pass_len);
+    OPENSSL_free(kctx);
+}
+
+static int pkey_scrypt_set_membuf(unsigned char **buffer, size_t *buflen,
+                                  const unsigned char *new_buffer,
+                                  const int new_buflen)
+{
+    if (new_buffer == NULL)
+        return 1;
+
+    if (new_buflen < 0)
+        return 0;
+
+    if (*buffer != NULL)
+        OPENSSL_clear_free(*buffer, *buflen);
+
+    if (new_buflen > 0) {
+        *buffer = OPENSSL_memdup(new_buffer, new_buflen);
+    } else {
+        *buffer = OPENSSL_malloc(1);
+    }
+    if (*buffer == NULL) {
+        KDFerr(KDF_F_PKEY_SCRYPT_SET_MEMBUF, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    *buflen = new_buflen;
+    return 1;
+}
+
+static int is_power_of_two(uint64_t value)
+{
+    return (value != 0) && ((value & (value - 1)) == 0);
+}
+
+static int pkey_scrypt_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
+{
+    SCRYPT_PKEY_CTX *kctx = ctx->data;
+    uint64_t u64_value;
+
+    switch (type) {
+    case EVP_PKEY_CTRL_PASS:
+        return pkey_scrypt_set_membuf(&kctx->pass, &kctx->pass_len, p2, p1);
+
+    case EVP_PKEY_CTRL_SCRYPT_SALT:
+        return pkey_scrypt_set_membuf(&kctx->salt, &kctx->salt_len, p2, p1);
+
+    case EVP_PKEY_CTRL_SCRYPT_N:
+        u64_value = *((uint64_t *)p2);
+        if ((u64_value <= 1) || !is_power_of_two(u64_value))
+            return 0;
+        kctx->N = u64_value;
+        return 1;
+
+    case EVP_PKEY_CTRL_SCRYPT_R:
+        u64_value = *((uint64_t *)p2);
+        if (u64_value < 1)
+            return 0;
+        kctx->r = u64_value;
+        return 1;
+
+    case EVP_PKEY_CTRL_SCRYPT_P:
+        u64_value = *((uint64_t *)p2);
+        if (u64_value < 1)
+            return 0;
+        kctx->p = u64_value;
+        return 1;
+
+    case EVP_PKEY_CTRL_SCRYPT_MAXMEM_BYTES:
+        u64_value = *((uint64_t *)p2);
+        if (u64_value < 1)
+            return 0;
+        kctx->maxmem_bytes = u64_value;
+        return 1;
+
+    default:
+        return -2;
+
+    }
+}
+
+static int pkey_scrypt_ctrl_uint64(EVP_PKEY_CTX *ctx, int type,
+                                   const char *value)
+{
+    uint64_t int_value;
+
+    if (!atou64(value, &int_value)) {
+        KDFerr(KDF_F_PKEY_SCRYPT_CTRL_UINT64, KDF_R_VALUE_ERROR);
+        return 0;
+    }
+    return pkey_scrypt_ctrl(ctx, type, 0, &int_value);
+}
+
+static int pkey_scrypt_ctrl_str(EVP_PKEY_CTX *ctx, const char *type,
+                                const char *value)
+{
+    if (value == NULL) {
+        KDFerr(KDF_F_PKEY_SCRYPT_CTRL_STR, KDF_R_VALUE_MISSING);
+        return 0;
+    }
+
+    if (strcmp(type, "pass") == 0)
+        return EVP_PKEY_CTX_str2ctrl(ctx, EVP_PKEY_CTRL_PASS, value);
+
+    if (strcmp(type, "hexpass") == 0)
+        return EVP_PKEY_CTX_hex2ctrl(ctx, EVP_PKEY_CTRL_PASS, value);
+
+    if (strcmp(type, "salt") == 0)
+        return EVP_PKEY_CTX_str2ctrl(ctx, EVP_PKEY_CTRL_SCRYPT_SALT, value);
+
+    if (strcmp(type, "hexsalt") == 0)
+        return EVP_PKEY_CTX_hex2ctrl(ctx, EVP_PKEY_CTRL_SCRYPT_SALT, value);
+
+    if (strcmp(type, "N") == 0)
+        return pkey_scrypt_ctrl_uint64(ctx, EVP_PKEY_CTRL_SCRYPT_N, value);
+
+    if (strcmp(type, "r") == 0)
+        return pkey_scrypt_ctrl_uint64(ctx, EVP_PKEY_CTRL_SCRYPT_R, value);
+
+    if (strcmp(type, "p") == 0)
+        return pkey_scrypt_ctrl_uint64(ctx, EVP_PKEY_CTRL_SCRYPT_P, value);
+
+    if (strcmp(type, "maxmem_bytes") == 0)
+        return pkey_scrypt_ctrl_uint64(ctx, EVP_PKEY_CTRL_SCRYPT_MAXMEM_BYTES,
+                                       value);
+
+    KDFerr(KDF_F_PKEY_SCRYPT_CTRL_STR, KDF_R_UNKNOWN_PARAMETER_TYPE);
+    return -2;
+}
+
+static int pkey_scrypt_derive(EVP_PKEY_CTX *ctx, unsigned char *key,
+                              size_t *keylen)
+{
+    SCRYPT_PKEY_CTX *kctx = ctx->data;
+
+    if (kctx->pass == NULL) {
+        KDFerr(KDF_F_PKEY_SCRYPT_DERIVE, KDF_R_MISSING_PASS);
+        return 0;
+    }
+
+    if (kctx->salt == NULL) {
+        KDFerr(KDF_F_PKEY_SCRYPT_DERIVE, KDF_R_MISSING_SALT);
+        return 0;
+    }
+
+    return EVP_PBE_scrypt((char *)kctx->pass, kctx->pass_len, kctx->salt,
+                          kctx->salt_len, kctx->N, kctx->r, kctx->p,
+                          kctx->maxmem_bytes, key, *keylen);
+}
+
+const EVP_PKEY_METHOD scrypt_pkey_meth = {
+    EVP_PKEY_SCRYPT,
+    0,
+    pkey_scrypt_init,
+    0,
+    pkey_scrypt_cleanup,
+
+    0, 0,
+    0, 0,
+
+    0,
+    0,
+
+    0,
+    0,
+
+    0, 0,
+
+    0, 0, 0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    0,
+    pkey_scrypt_derive,
+    pkey_scrypt_ctrl,
+    pkey_scrypt_ctrl_str
+};
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/kdf/tls1_prf.c b/trunk/3rdparty/openssl-1.1-fit/crypto/kdf/tls1_prf.c
new file mode 100644
index 000000000..49f7ecced
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/kdf/tls1_prf.c
@@ -0,0 +1,278 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/kdf.h>
+#include <openssl/evp.h>
+#include "internal/evp_int.h"
+
+static int tls1_prf_alg(const EVP_MD *md,
+                        const unsigned char *sec, size_t slen,
+                        const unsigned char *seed, size_t seed_len,
+                        unsigned char *out, size_t olen);
+
+#define TLS1_PRF_MAXBUF 1024
+
+/* TLS KDF pkey context structure */
+
+typedef struct {
+    /* Digest to use for PRF */
+    const EVP_MD *md;
+    /* Secret value to use for PRF */
+    unsigned char *sec;
+    size_t seclen;
+    /* Buffer of concatenated seed data */
+    unsigned char seed[TLS1_PRF_MAXBUF];
+    size_t seedlen;
+} TLS1_PRF_PKEY_CTX;
+
+static int pkey_tls1_prf_init(EVP_PKEY_CTX *ctx)
+{
+    TLS1_PRF_PKEY_CTX *kctx;
+
+    if ((kctx = OPENSSL_zalloc(sizeof(*kctx))) == NULL) {
+        KDFerr(KDF_F_PKEY_TLS1_PRF_INIT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ctx->data = kctx;
+
+    return 1;
+}
+
+static void pkey_tls1_prf_cleanup(EVP_PKEY_CTX *ctx)
+{
+    TLS1_PRF_PKEY_CTX *kctx = ctx->data;
+    OPENSSL_clear_free(kctx->sec, kctx->seclen);
+    OPENSSL_cleanse(kctx->seed, kctx->seedlen);
+    OPENSSL_free(kctx);
+}
+
+static int pkey_tls1_prf_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
+{
+    TLS1_PRF_PKEY_CTX *kctx = ctx->data;
+    switch (type) {
+    case EVP_PKEY_CTRL_TLS_MD:
+        kctx->md = p2;
+        return 1;
+
+    case EVP_PKEY_CTRL_TLS_SECRET:
+        if (p1 < 0)
+            return 0;
+        if (kctx->sec != NULL)
+            OPENSSL_clear_free(kctx->sec, kctx->seclen);
+        OPENSSL_cleanse(kctx->seed, kctx->seedlen);
+        kctx->seedlen = 0;
+        kctx->sec = OPENSSL_memdup(p2, p1);
+        if (kctx->sec == NULL)
+            return 0;
+        kctx->seclen  = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_TLS_SEED:
+        if (p1 == 0 || p2 == NULL)
+            return 1;
+        if (p1 < 0 || p1 > (int)(TLS1_PRF_MAXBUF - kctx->seedlen))
+            return 0;
+        memcpy(kctx->seed + kctx->seedlen, p2, p1);
+        kctx->seedlen += p1;
+        return 1;
+
+    default:
+        return -2;
+
+    }
+}
+
+static int pkey_tls1_prf_ctrl_str(EVP_PKEY_CTX *ctx,
+                                  const char *type, const char *value)
+{
+    if (value == NULL) {
+        KDFerr(KDF_F_PKEY_TLS1_PRF_CTRL_STR, KDF_R_VALUE_MISSING);
+        return 0;
+    }
+    if (strcmp(type, "md") == 0) {
+        TLS1_PRF_PKEY_CTX *kctx = ctx->data;
+
+        const EVP_MD *md = EVP_get_digestbyname(value);
+        if (md == NULL) {
+            KDFerr(KDF_F_PKEY_TLS1_PRF_CTRL_STR, KDF_R_INVALID_DIGEST);
+            return 0;
+        }
+        kctx->md = md;
+        return 1;
+    }
+    if (strcmp(type, "secret") == 0)
+        return EVP_PKEY_CTX_str2ctrl(ctx, EVP_PKEY_CTRL_TLS_SECRET, value);
+    if (strcmp(type, "hexsecret") == 0)
+        return EVP_PKEY_CTX_hex2ctrl(ctx, EVP_PKEY_CTRL_TLS_SECRET, value);
+    if (strcmp(type, "seed") == 0)
+        return EVP_PKEY_CTX_str2ctrl(ctx, EVP_PKEY_CTRL_TLS_SEED, value);
+    if (strcmp(type, "hexseed") == 0)
+        return EVP_PKEY_CTX_hex2ctrl(ctx, EVP_PKEY_CTRL_TLS_SEED, value);
+
+    KDFerr(KDF_F_PKEY_TLS1_PRF_CTRL_STR, KDF_R_UNKNOWN_PARAMETER_TYPE);
+    return -2;
+}
+
+static int pkey_tls1_prf_derive(EVP_PKEY_CTX *ctx, unsigned char *key,
+                                size_t *keylen)
+{
+    TLS1_PRF_PKEY_CTX *kctx = ctx->data;
+    if (kctx->md == NULL) {
+        KDFerr(KDF_F_PKEY_TLS1_PRF_DERIVE, KDF_R_MISSING_MESSAGE_DIGEST);
+        return 0;
+    }
+    if (kctx->sec == NULL) {
+        KDFerr(KDF_F_PKEY_TLS1_PRF_DERIVE, KDF_R_MISSING_SECRET);
+        return 0;
+    }
+    if (kctx->seedlen == 0) {
+        KDFerr(KDF_F_PKEY_TLS1_PRF_DERIVE, KDF_R_MISSING_SEED);
+        return 0;
+    }
+    return tls1_prf_alg(kctx->md, kctx->sec, kctx->seclen,
+                        kctx->seed, kctx->seedlen,
+                        key, *keylen);
+}
+
+const EVP_PKEY_METHOD tls1_prf_pkey_meth = {
+    EVP_PKEY_TLS1_PRF,
+    0,
+    pkey_tls1_prf_init,
+    0,
+    pkey_tls1_prf_cleanup,
+
+    0, 0,
+    0, 0,
+
+    0,
+    0,
+
+    0,
+    0,
+
+    0, 0,
+
+    0, 0, 0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    0,
+    pkey_tls1_prf_derive,
+    pkey_tls1_prf_ctrl,
+    pkey_tls1_prf_ctrl_str
+};
+
+static int tls1_prf_P_hash(const EVP_MD *md,
+                           const unsigned char *sec, size_t sec_len,
+                           const unsigned char *seed, size_t seed_len,
+                           unsigned char *out, size_t olen)
+{
+    int chunk;
+    EVP_MD_CTX *ctx = NULL, *ctx_tmp = NULL, *ctx_init = NULL;
+    EVP_PKEY *mac_key = NULL;
+    unsigned char A1[EVP_MAX_MD_SIZE];
+    size_t A1_len;
+    int ret = 0;
+
+    chunk = EVP_MD_size(md);
+    if (!ossl_assert(chunk > 0))
+        goto err;
+
+    ctx = EVP_MD_CTX_new();
+    ctx_tmp = EVP_MD_CTX_new();
+    ctx_init = EVP_MD_CTX_new();
+    if (ctx == NULL || ctx_tmp == NULL || ctx_init == NULL)
+        goto err;
+    EVP_MD_CTX_set_flags(ctx_init, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
+    mac_key = EVP_PKEY_new_raw_private_key(EVP_PKEY_HMAC, NULL, sec, sec_len);
+    if (mac_key == NULL)
+        goto err;
+    if (!EVP_DigestSignInit(ctx_init, NULL, md, NULL, mac_key))
+        goto err;
+    if (!EVP_MD_CTX_copy_ex(ctx, ctx_init))
+        goto err;
+    if (seed != NULL && !EVP_DigestSignUpdate(ctx, seed, seed_len))
+        goto err;
+    if (!EVP_DigestSignFinal(ctx, A1, &A1_len))
+        goto err;
+
+    for (;;) {
+        /* Reinit mac contexts */
+        if (!EVP_MD_CTX_copy_ex(ctx, ctx_init))
+            goto err;
+        if (!EVP_DigestSignUpdate(ctx, A1, A1_len))
+            goto err;
+        if (olen > (size_t)chunk && !EVP_MD_CTX_copy_ex(ctx_tmp, ctx))
+            goto err;
+        if (seed && !EVP_DigestSignUpdate(ctx, seed, seed_len))
+            goto err;
+
+        if (olen > (size_t)chunk) {
+            size_t mac_len;
+            if (!EVP_DigestSignFinal(ctx, out, &mac_len))
+                goto err;
+            out += mac_len;
+            olen -= mac_len;
+            /* calc the next A1 value */
+            if (!EVP_DigestSignFinal(ctx_tmp, A1, &A1_len))
+                goto err;
+        } else {                /* last one */
+
+            if (!EVP_DigestSignFinal(ctx, A1, &A1_len))
+                goto err;
+            memcpy(out, A1, olen);
+            break;
+        }
+    }
+    ret = 1;
+ err:
+    EVP_PKEY_free(mac_key);
+    EVP_MD_CTX_free(ctx);
+    EVP_MD_CTX_free(ctx_tmp);
+    EVP_MD_CTX_free(ctx_init);
+    OPENSSL_cleanse(A1, sizeof(A1));
+    return ret;
+}
+
+static int tls1_prf_alg(const EVP_MD *md,
+                        const unsigned char *sec, size_t slen,
+                        const unsigned char *seed, size_t seed_len,
+                        unsigned char *out, size_t olen)
+{
+
+    if (EVP_MD_type(md) == NID_md5_sha1) {
+        size_t i;
+        unsigned char *tmp;
+        if (!tls1_prf_P_hash(EVP_md5(), sec, slen/2 + (slen & 1),
+                         seed, seed_len, out, olen))
+            return 0;
+
+        if ((tmp = OPENSSL_malloc(olen)) == NULL) {
+            KDFerr(KDF_F_TLS1_PRF_ALG, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        if (!tls1_prf_P_hash(EVP_sha1(), sec + slen/2, slen/2 + (slen & 1),
+                         seed, seed_len, tmp, olen)) {
+            OPENSSL_clear_free(tmp, olen);
+            return 0;
+        }
+        for (i = 0; i < olen; i++)
+            out[i] ^= tmp[i];
+        OPENSSL_clear_free(tmp, olen);
+        return 1;
+    }
+    if (!tls1_prf_P_hash(md, sec, slen, seed, seed_len, out, olen))
+        return 0;
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/lhash/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/lhash/build.info
new file mode 100644
index 000000000..30797f2ca
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/lhash/build.info
@@ -0,0 +1,3 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        lhash.c lh_stats.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/lhash/lh_stats.c b/trunk/3rdparty/openssl-1.1-fit/crypto/lhash/lh_stats.c
new file mode 100644
index 000000000..65b91e1ef
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/lhash/lh_stats.c
@@ -0,0 +1,117 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include <stdlib.h>
+/*
+ * If you wish to build this outside of OpenSSL, remove the following lines
+ * and things should work as expected
+ */
+#include "internal/cryptlib.h"
+
+#include <openssl/bio.h>
+#include <openssl/lhash.h>
+#include "lhash_lcl.h"
+
+# ifndef OPENSSL_NO_STDIO
+void OPENSSL_LH_stats(const OPENSSL_LHASH *lh, FILE *fp)
+{
+    BIO *bp;
+
+    bp = BIO_new(BIO_s_file());
+    if (bp == NULL)
+        return;
+    BIO_set_fp(bp, fp, BIO_NOCLOSE);
+    OPENSSL_LH_stats_bio(lh, bp);
+    BIO_free(bp);
+}
+
+void OPENSSL_LH_node_stats(const OPENSSL_LHASH *lh, FILE *fp)
+{
+    BIO *bp;
+
+    bp = BIO_new(BIO_s_file());
+    if (bp == NULL)
+        return;
+    BIO_set_fp(bp, fp, BIO_NOCLOSE);
+    OPENSSL_LH_node_stats_bio(lh, bp);
+    BIO_free(bp);
+}
+
+void OPENSSL_LH_node_usage_stats(const OPENSSL_LHASH *lh, FILE *fp)
+{
+    BIO *bp;
+
+    bp = BIO_new(BIO_s_file());
+    if (bp == NULL)
+        return;
+    BIO_set_fp(bp, fp, BIO_NOCLOSE);
+    OPENSSL_LH_node_usage_stats_bio(lh, bp);
+    BIO_free(bp);
+}
+
+# endif
+
+void OPENSSL_LH_stats_bio(const OPENSSL_LHASH *lh, BIO *out)
+{
+    BIO_printf(out, "num_items             = %lu\n", lh->num_items);
+    BIO_printf(out, "num_nodes             = %u\n",  lh->num_nodes);
+    BIO_printf(out, "num_alloc_nodes       = %u\n",  lh->num_alloc_nodes);
+    BIO_printf(out, "num_expands           = %lu\n", lh->num_expands);
+    BIO_printf(out, "num_expand_reallocs   = %lu\n", lh->num_expand_reallocs);
+    BIO_printf(out, "num_contracts         = %lu\n", lh->num_contracts);
+    BIO_printf(out, "num_contract_reallocs = %lu\n", lh->num_contract_reallocs);
+    BIO_printf(out, "num_hash_calls        = %lu\n", lh->num_hash_calls);
+    BIO_printf(out, "num_comp_calls        = %lu\n", lh->num_comp_calls);
+    BIO_printf(out, "num_insert            = %lu\n", lh->num_insert);
+    BIO_printf(out, "num_replace           = %lu\n", lh->num_replace);
+    BIO_printf(out, "num_delete            = %lu\n", lh->num_delete);
+    BIO_printf(out, "num_no_delete         = %lu\n", lh->num_no_delete);
+    BIO_printf(out, "num_retrieve          = %lu\n", lh->num_retrieve);
+    BIO_printf(out, "num_retrieve_miss     = %lu\n", lh->num_retrieve_miss);
+    BIO_printf(out, "num_hash_comps        = %lu\n", lh->num_hash_comps);
+}
+
+void OPENSSL_LH_node_stats_bio(const OPENSSL_LHASH *lh, BIO *out)
+{
+    OPENSSL_LH_NODE *n;
+    unsigned int i, num;
+
+    for (i = 0; i < lh->num_nodes; i++) {
+        for (n = lh->b[i], num = 0; n != NULL; n = n->next)
+            num++;
+        BIO_printf(out, "node %6u -> %3u\n", i, num);
+    }
+}
+
+void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *lh, BIO *out)
+{
+    OPENSSL_LH_NODE *n;
+    unsigned long num;
+    unsigned int i;
+    unsigned long total = 0, n_used = 0;
+
+    for (i = 0; i < lh->num_nodes; i++) {
+        for (n = lh->b[i], num = 0; n != NULL; n = n->next)
+            num++;
+        if (num != 0) {
+            n_used++;
+            total += num;
+        }
+    }
+    BIO_printf(out, "%lu nodes used out of %u\n", n_used, lh->num_nodes);
+    BIO_printf(out, "%lu items\n", total);
+    if (n_used == 0)
+        return;
+    BIO_printf(out, "load %d.%02d  actual load %d.%02d\n",
+               (int)(total / lh->num_nodes),
+               (int)((total % lh->num_nodes) * 100 / lh->num_nodes),
+               (int)(total / n_used), (int)((total % n_used) * 100 / n_used));
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/lhash/lhash.c b/trunk/3rdparty/openssl-1.1-fit/crypto/lhash/lhash.c
new file mode 100644
index 000000000..8d9f933df
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/lhash/lhash.c
@@ -0,0 +1,393 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include <stdlib.h>
+#include <openssl/crypto.h>
+#include <openssl/lhash.h>
+#include <openssl/err.h>
+#include "internal/ctype.h"
+#include "internal/lhash.h"
+#include "lhash_lcl.h"
+
+/*
+ * A hashing implementation that appears to be based on the linear hashing
+ * alogrithm:
+ * https://en.wikipedia.org/wiki/Linear_hashing
+ *
+ * Litwin, Witold (1980), "Linear hashing: A new tool for file and table
+ * addressing", Proc. 6th Conference on Very Large Databases: 212-223
+ * http://hackthology.com/pdfs/Litwin-1980-Linear_Hashing.pdf
+ *
+ * From the wikipedia article "Linear hashing is used in the BDB Berkeley
+ * database system, which in turn is used by many software systems such as
+ * OpenLDAP, using a C implementation derived from the CACM article and first
+ * published on the Usenet in 1988 by Esmond Pitt."
+ *
+ * The CACM paper is available here:
+ * https://pdfs.semanticscholar.org/ff4d/1c5deca6269cc316bfd952172284dbf610ee.pdf
+ */
+
+#undef MIN_NODES
+#define MIN_NODES       16
+#define UP_LOAD         (2*LH_LOAD_MULT) /* load times 256 (default 2) */
+#define DOWN_LOAD       (LH_LOAD_MULT) /* load times 256 (default 1) */
+
+static int expand(OPENSSL_LHASH *lh);
+static void contract(OPENSSL_LHASH *lh);
+static OPENSSL_LH_NODE **getrn(OPENSSL_LHASH *lh, const void *data, unsigned long *rhash);
+
+OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c)
+{
+    OPENSSL_LHASH *ret;
+
+    if ((ret = OPENSSL_zalloc(sizeof(*ret))) == NULL) {
+        /*
+         * Do not set the error code, because the ERR code uses LHASH
+         * and we want to avoid possible endless error loop.
+         * CRYPTOerr(CRYPTO_F_OPENSSL_LH_NEW, ERR_R_MALLOC_FAILURE);
+         */
+        return NULL;
+    }
+    if ((ret->b = OPENSSL_zalloc(sizeof(*ret->b) * MIN_NODES)) == NULL)
+        goto err;
+    ret->comp = ((c == NULL) ? (OPENSSL_LH_COMPFUNC)strcmp : c);
+    ret->hash = ((h == NULL) ? (OPENSSL_LH_HASHFUNC)OPENSSL_LH_strhash : h);
+    ret->num_nodes = MIN_NODES / 2;
+    ret->num_alloc_nodes = MIN_NODES;
+    ret->pmax = MIN_NODES / 2;
+    ret->up_load = UP_LOAD;
+    ret->down_load = DOWN_LOAD;
+    return ret;
+
+err:
+    OPENSSL_free(ret->b);
+    OPENSSL_free(ret);
+    return NULL;
+}
+
+void OPENSSL_LH_free(OPENSSL_LHASH *lh)
+{
+    unsigned int i;
+    OPENSSL_LH_NODE *n, *nn;
+
+    if (lh == NULL)
+        return;
+
+    for (i = 0; i < lh->num_nodes; i++) {
+        n = lh->b[i];
+        while (n != NULL) {
+            nn = n->next;
+            OPENSSL_free(n);
+            n = nn;
+        }
+    }
+    OPENSSL_free(lh->b);
+    OPENSSL_free(lh);
+}
+
+void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data)
+{
+    unsigned long hash;
+    OPENSSL_LH_NODE *nn, **rn;
+    void *ret;
+
+    lh->error = 0;
+    if ((lh->up_load <= (lh->num_items * LH_LOAD_MULT / lh->num_nodes)) && !expand(lh))
+        return NULL;        /* 'lh->error++' already done in 'expand' */
+
+    rn = getrn(lh, data, &hash);
+
+    if (*rn == NULL) {
+        if ((nn = OPENSSL_malloc(sizeof(*nn))) == NULL) {
+            lh->error++;
+            return NULL;
+        }
+        nn->data = data;
+        nn->next = NULL;
+        nn->hash = hash;
+        *rn = nn;
+        ret = NULL;
+        lh->num_insert++;
+        lh->num_items++;
+    } else {                    /* replace same key */
+        ret = (*rn)->data;
+        (*rn)->data = data;
+        lh->num_replace++;
+    }
+    return ret;
+}
+
+void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data)
+{
+    unsigned long hash;
+    OPENSSL_LH_NODE *nn, **rn;
+    void *ret;
+
+    lh->error = 0;
+    rn = getrn(lh, data, &hash);
+
+    if (*rn == NULL) {
+        lh->num_no_delete++;
+        return NULL;
+    } else {
+        nn = *rn;
+        *rn = nn->next;
+        ret = nn->data;
+        OPENSSL_free(nn);
+        lh->num_delete++;
+    }
+
+    lh->num_items--;
+    if ((lh->num_nodes > MIN_NODES) &&
+        (lh->down_load >= (lh->num_items * LH_LOAD_MULT / lh->num_nodes)))
+        contract(lh);
+
+    return ret;
+}
+
+void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data)
+{
+    unsigned long hash;
+    OPENSSL_LH_NODE **rn;
+    void *ret;
+
+    tsan_store((TSAN_QUALIFIER int *)&lh->error, 0);
+
+    rn = getrn(lh, data, &hash);
+
+    if (*rn == NULL) {
+        tsan_counter(&lh->num_retrieve_miss);
+        return NULL;
+    } else {
+        ret = (*rn)->data;
+        tsan_counter(&lh->num_retrieve);
+    }
+
+    return ret;
+}
+
+static void doall_util_fn(OPENSSL_LHASH *lh, int use_arg,
+                          OPENSSL_LH_DOALL_FUNC func,
+                          OPENSSL_LH_DOALL_FUNCARG func_arg, void *arg)
+{
+    int i;
+    OPENSSL_LH_NODE *a, *n;
+
+    if (lh == NULL)
+        return;
+
+    /*
+     * reverse the order so we search from 'top to bottom' We were having
+     * memory leaks otherwise
+     */
+    for (i = lh->num_nodes - 1; i >= 0; i--) {
+        a = lh->b[i];
+        while (a != NULL) {
+            n = a->next;
+            if (use_arg)
+                func_arg(a->data, arg);
+            else
+                func(a->data);
+            a = n;
+        }
+    }
+}
+
+void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func)
+{
+    doall_util_fn(lh, 0, func, (OPENSSL_LH_DOALL_FUNCARG)0, NULL);
+}
+
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg)
+{
+    doall_util_fn(lh, 1, (OPENSSL_LH_DOALL_FUNC)0, func, arg);
+}
+
+static int expand(OPENSSL_LHASH *lh)
+{
+    OPENSSL_LH_NODE **n, **n1, **n2, *np;
+    unsigned int p, pmax, nni, j;
+    unsigned long hash;
+
+    nni = lh->num_alloc_nodes;
+    p = lh->p;
+    pmax = lh->pmax;
+    if (p + 1 >= pmax) {
+        j = nni * 2;
+        n = OPENSSL_realloc(lh->b, sizeof(OPENSSL_LH_NODE *) * j);
+        if (n == NULL) {
+            lh->error++;
+            return 0;
+        }
+        lh->b = n;
+        memset(n + nni, 0, sizeof(*n) * (j - nni));
+        lh->pmax = nni;
+        lh->num_alloc_nodes = j;
+        lh->num_expand_reallocs++;
+        lh->p = 0;
+    } else {
+        lh->p++;
+    }
+
+    lh->num_nodes++;
+    lh->num_expands++;
+    n1 = &(lh->b[p]);
+    n2 = &(lh->b[p + pmax]);
+    *n2 = NULL;
+
+    for (np = *n1; np != NULL;) {
+        hash = np->hash;
+        if ((hash % nni) != p) { /* move it */
+            *n1 = (*n1)->next;
+            np->next = *n2;
+            *n2 = np;
+        } else
+            n1 = &((*n1)->next);
+        np = *n1;
+    }
+
+    return 1;
+}
+
+static void contract(OPENSSL_LHASH *lh)
+{
+    OPENSSL_LH_NODE **n, *n1, *np;
+
+    np = lh->b[lh->p + lh->pmax - 1];
+    lh->b[lh->p + lh->pmax - 1] = NULL; /* 24/07-92 - eay - weird but :-( */
+    if (lh->p == 0) {
+        n = OPENSSL_realloc(lh->b,
+                            (unsigned int)(sizeof(OPENSSL_LH_NODE *) * lh->pmax));
+        if (n == NULL) {
+            /* fputs("realloc error in lhash",stderr); */
+            lh->error++;
+            return;
+        }
+        lh->num_contract_reallocs++;
+        lh->num_alloc_nodes /= 2;
+        lh->pmax /= 2;
+        lh->p = lh->pmax - 1;
+        lh->b = n;
+    } else
+        lh->p--;
+
+    lh->num_nodes--;
+    lh->num_contracts++;
+
+    n1 = lh->b[(int)lh->p];
+    if (n1 == NULL)
+        lh->b[(int)lh->p] = np;
+    else {
+        while (n1->next != NULL)
+            n1 = n1->next;
+        n1->next = np;
+    }
+}
+
+static OPENSSL_LH_NODE **getrn(OPENSSL_LHASH *lh,
+                               const void *data, unsigned long *rhash)
+{
+    OPENSSL_LH_NODE **ret, *n1;
+    unsigned long hash, nn;
+    OPENSSL_LH_COMPFUNC cf;
+
+    hash = (*(lh->hash)) (data);
+    tsan_counter(&lh->num_hash_calls);
+    *rhash = hash;
+
+    nn = hash % lh->pmax;
+    if (nn < lh->p)
+        nn = hash % lh->num_alloc_nodes;
+
+    cf = lh->comp;
+    ret = &(lh->b[(int)nn]);
+    for (n1 = *ret; n1 != NULL; n1 = n1->next) {
+        tsan_counter(&lh->num_hash_comps);
+        if (n1->hash != hash) {
+            ret = &(n1->next);
+            continue;
+        }
+        tsan_counter(&lh->num_comp_calls);
+        if (cf(n1->data, data) == 0)
+            break;
+        ret = &(n1->next);
+    }
+    return ret;
+}
+
+/*
+ * The following hash seems to work very well on normal text strings no
+ * collisions on /usr/dict/words and it distributes on %2^n quite well, not
+ * as good as MD5, but still good.
+ */
+unsigned long OPENSSL_LH_strhash(const char *c)
+{
+    unsigned long ret = 0;
+    long n;
+    unsigned long v;
+    int r;
+
+    if ((c == NULL) || (*c == '\0'))
+        return ret;
+
+    n = 0x100;
+    while (*c) {
+        v = n | (*c);
+        n += 0x100;
+        r = (int)((v >> 2) ^ v) & 0x0f;
+        ret = (ret << r) | (ret >> (32 - r));
+        ret &= 0xFFFFFFFFL;
+        ret ^= v * v;
+        c++;
+    }
+    return (ret >> 16) ^ ret;
+}
+
+unsigned long openssl_lh_strcasehash(const char *c)
+{
+    unsigned long ret = 0;
+    long n;
+    unsigned long v;
+    int r;
+
+    if (c == NULL || *c == '\0')
+        return ret;
+
+    for (n = 0x100; *c != '\0'; n += 0x100) {
+        v = n | ossl_tolower(*c);
+        r = (int)((v >> 2) ^ v) & 0x0f;
+        ret = (ret << r) | (ret >> (32 - r));
+        ret &= 0xFFFFFFFFL;
+        ret ^= v * v;
+        c++;
+    }
+    return (ret >> 16) ^ ret;
+}
+
+unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh)
+{
+    return lh ? lh->num_items : 0;
+}
+
+unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh)
+{
+    return lh->down_load;
+}
+
+void OPENSSL_LH_set_down_load(OPENSSL_LHASH *lh, unsigned long down_load)
+{
+    lh->down_load = down_load;
+}
+
+int OPENSSL_LH_error(OPENSSL_LHASH *lh)
+{
+    return lh->error;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/lhash/lhash_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/lhash/lhash_lcl.h
new file mode 100644
index 000000000..678224acd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/lhash/lhash_lcl.h
@@ -0,0 +1,44 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+#include <openssl/crypto.h>
+
+#include "internal/tsan_assist.h"
+
+struct lhash_node_st {
+    void *data;
+    struct lhash_node_st *next;
+    unsigned long hash;
+};
+
+struct lhash_st {
+    OPENSSL_LH_NODE **b;
+    OPENSSL_LH_COMPFUNC comp;
+    OPENSSL_LH_HASHFUNC hash;
+    unsigned int num_nodes;
+    unsigned int num_alloc_nodes;
+    unsigned int p;
+    unsigned int pmax;
+    unsigned long up_load;      /* load times 256 */
+    unsigned long down_load;    /* load times 256 */
+    unsigned long num_items;
+    unsigned long num_expands;
+    unsigned long num_expand_reallocs;
+    unsigned long num_contracts;
+    unsigned long num_contract_reallocs;
+    TSAN_QUALIFIER unsigned long num_hash_calls;
+    TSAN_QUALIFIER unsigned long num_comp_calls;
+    unsigned long num_insert;
+    unsigned long num_replace;
+    unsigned long num_delete;
+    unsigned long num_no_delete;
+    TSAN_QUALIFIER unsigned long num_retrieve;
+    TSAN_QUALIFIER unsigned long num_retrieve_miss;
+    TSAN_QUALIFIER unsigned long num_hash_comps;
+    int error;
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/md2/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/md2/build.info
new file mode 100644
index 000000000..e31948c23
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/md2/build.info
@@ -0,0 +1,3 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        md2_dgst.c md2_one.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/md2/md2_dgst.c b/trunk/3rdparty/openssl-1.1-fit/crypto/md2/md2_dgst.c
new file mode 100644
index 000000000..faa9393f2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/md2/md2_dgst.c
@@ -0,0 +1,173 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <openssl/md2.h>
+#include <openssl/opensslv.h>
+#include <openssl/crypto.h>
+
+/*
+ * Implemented from RFC1319 The MD2 Message-Digest Algorithm
+ */
+
+#define UCHAR   unsigned char
+
+static void md2_block(MD2_CTX *c, const unsigned char *d);
+/*
+ * The magic S table - I have converted it to hex since it is basically just
+ * a random byte string.
+ */
+static const MD2_INT S[256] = {
+    0x29, 0x2E, 0x43, 0xC9, 0xA2, 0xD8, 0x7C, 0x01,
+    0x3D, 0x36, 0x54, 0xA1, 0xEC, 0xF0, 0x06, 0x13,
+    0x62, 0xA7, 0x05, 0xF3, 0xC0, 0xC7, 0x73, 0x8C,
+    0x98, 0x93, 0x2B, 0xD9, 0xBC, 0x4C, 0x82, 0xCA,
+    0x1E, 0x9B, 0x57, 0x3C, 0xFD, 0xD4, 0xE0, 0x16,
+    0x67, 0x42, 0x6F, 0x18, 0x8A, 0x17, 0xE5, 0x12,
+    0xBE, 0x4E, 0xC4, 0xD6, 0xDA, 0x9E, 0xDE, 0x49,
+    0xA0, 0xFB, 0xF5, 0x8E, 0xBB, 0x2F, 0xEE, 0x7A,
+    0xA9, 0x68, 0x79, 0x91, 0x15, 0xB2, 0x07, 0x3F,
+    0x94, 0xC2, 0x10, 0x89, 0x0B, 0x22, 0x5F, 0x21,
+    0x80, 0x7F, 0x5D, 0x9A, 0x5A, 0x90, 0x32, 0x27,
+    0x35, 0x3E, 0xCC, 0xE7, 0xBF, 0xF7, 0x97, 0x03,
+    0xFF, 0x19, 0x30, 0xB3, 0x48, 0xA5, 0xB5, 0xD1,
+    0xD7, 0x5E, 0x92, 0x2A, 0xAC, 0x56, 0xAA, 0xC6,
+    0x4F, 0xB8, 0x38, 0xD2, 0x96, 0xA4, 0x7D, 0xB6,
+    0x76, 0xFC, 0x6B, 0xE2, 0x9C, 0x74, 0x04, 0xF1,
+    0x45, 0x9D, 0x70, 0x59, 0x64, 0x71, 0x87, 0x20,
+    0x86, 0x5B, 0xCF, 0x65, 0xE6, 0x2D, 0xA8, 0x02,
+    0x1B, 0x60, 0x25, 0xAD, 0xAE, 0xB0, 0xB9, 0xF6,
+    0x1C, 0x46, 0x61, 0x69, 0x34, 0x40, 0x7E, 0x0F,
+    0x55, 0x47, 0xA3, 0x23, 0xDD, 0x51, 0xAF, 0x3A,
+    0xC3, 0x5C, 0xF9, 0xCE, 0xBA, 0xC5, 0xEA, 0x26,
+    0x2C, 0x53, 0x0D, 0x6E, 0x85, 0x28, 0x84, 0x09,
+    0xD3, 0xDF, 0xCD, 0xF4, 0x41, 0x81, 0x4D, 0x52,
+    0x6A, 0xDC, 0x37, 0xC8, 0x6C, 0xC1, 0xAB, 0xFA,
+    0x24, 0xE1, 0x7B, 0x08, 0x0C, 0xBD, 0xB1, 0x4A,
+    0x78, 0x88, 0x95, 0x8B, 0xE3, 0x63, 0xE8, 0x6D,
+    0xE9, 0xCB, 0xD5, 0xFE, 0x3B, 0x00, 0x1D, 0x39,
+    0xF2, 0xEF, 0xB7, 0x0E, 0x66, 0x58, 0xD0, 0xE4,
+    0xA6, 0x77, 0x72, 0xF8, 0xEB, 0x75, 0x4B, 0x0A,
+    0x31, 0x44, 0x50, 0xB4, 0x8F, 0xED, 0x1F, 0x1A,
+    0xDB, 0x99, 0x8D, 0x33, 0x9F, 0x11, 0x83, 0x14,
+};
+
+const char *MD2_options(void)
+{
+    if (sizeof(MD2_INT) == 1)
+        return "md2(char)";
+    else
+        return "md2(int)";
+}
+
+int MD2_Init(MD2_CTX *c)
+{
+    c->num = 0;
+    memset(c->state, 0, sizeof(c->state));
+    memset(c->cksm, 0, sizeof(c->cksm));
+    memset(c->data, 0, sizeof(c->data));
+    return 1;
+}
+
+int MD2_Update(MD2_CTX *c, const unsigned char *data, size_t len)
+{
+    register UCHAR *p;
+
+    if (len == 0)
+        return 1;
+
+    p = c->data;
+    if (c->num != 0) {
+        if ((c->num + len) >= MD2_BLOCK) {
+            memcpy(&(p[c->num]), data, MD2_BLOCK - c->num);
+            md2_block(c, c->data);
+            data += (MD2_BLOCK - c->num);
+            len -= (MD2_BLOCK - c->num);
+            c->num = 0;
+            /* drop through and do the rest */
+        } else {
+            memcpy(&(p[c->num]), data, len);
+            /* data+=len; */
+            c->num += (int)len;
+            return 1;
+        }
+    }
+    /*
+     * we now can process the input data in blocks of MD2_BLOCK chars and
+     * save the leftovers to c->data.
+     */
+    while (len >= MD2_BLOCK) {
+        md2_block(c, data);
+        data += MD2_BLOCK;
+        len -= MD2_BLOCK;
+    }
+    memcpy(p, data, len);
+    c->num = (int)len;
+    return 1;
+}
+
+static void md2_block(MD2_CTX *c, const unsigned char *d)
+{
+    register MD2_INT t, *sp1, *sp2;
+    register int i, j;
+    MD2_INT state[48];
+
+    sp1 = c->state;
+    sp2 = c->cksm;
+    j = sp2[MD2_BLOCK - 1];
+    for (i = 0; i < 16; i++) {
+        state[i] = sp1[i];
+        state[i + 16] = t = d[i];
+        state[i + 32] = (t ^ sp1[i]);
+        j = sp2[i] ^= S[t ^ j];
+    }
+    t = 0;
+    for (i = 0; i < 18; i++) {
+        for (j = 0; j < 48; j += 8) {
+            t = state[j + 0] ^= S[t];
+            t = state[j + 1] ^= S[t];
+            t = state[j + 2] ^= S[t];
+            t = state[j + 3] ^= S[t];
+            t = state[j + 4] ^= S[t];
+            t = state[j + 5] ^= S[t];
+            t = state[j + 6] ^= S[t];
+            t = state[j + 7] ^= S[t];
+        }
+        t = (t + i) & 0xff;
+    }
+    memcpy(sp1, state, 16 * sizeof(MD2_INT));
+    OPENSSL_cleanse(state, 48 * sizeof(MD2_INT));
+}
+
+int MD2_Final(unsigned char *md, MD2_CTX *c)
+{
+    int i, v;
+    register UCHAR *cp;
+    register MD2_INT *p1, *p2;
+
+    cp = c->data;
+    p1 = c->state;
+    p2 = c->cksm;
+    v = MD2_BLOCK - c->num;
+    for (i = c->num; i < MD2_BLOCK; i++)
+        cp[i] = (UCHAR) v;
+
+    md2_block(c, cp);
+
+    for (i = 0; i < MD2_BLOCK; i++)
+        cp[i] = (UCHAR) p2[i];
+    md2_block(c, cp);
+
+    for (i = 0; i < 16; i++)
+        md[i] = (UCHAR) (p1[i] & 0xff);
+    OPENSSL_cleanse(c, sizeof(*c));
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/md2/md2_one.c b/trunk/3rdparty/openssl-1.1-fit/crypto/md2/md2_one.c
new file mode 100644
index 000000000..5502b2169
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/md2/md2_one.c
@@ -0,0 +1,47 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/md2.h>
+
+/*
+ * This is a separate file so that #defines in cryptlib.h can map my MD
+ * functions to different names
+ */
+
+unsigned char *MD2(const unsigned char *d, size_t n, unsigned char *md)
+{
+    MD2_CTX c;
+    static unsigned char m[MD2_DIGEST_LENGTH];
+
+    if (md == NULL)
+        md = m;
+    if (!MD2_Init(&c))
+        return NULL;
+#ifndef CHARSET_EBCDIC
+    MD2_Update(&c, d, n);
+#else
+    {
+        char temp[1024];
+        unsigned long chunk;
+
+        while (n > 0) {
+            chunk = (n > sizeof(temp)) ? sizeof(temp) : n;
+            ebcdic2ascii(temp, d, chunk);
+            MD2_Update(&c, temp, chunk);
+            n -= chunk;
+            d += chunk;
+        }
+    }
+#endif
+    MD2_Final(md, &c);
+    OPENSSL_cleanse(&c, sizeof(c)); /* Security consideration */
+    return md;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/md4/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/md4/build.info
new file mode 100644
index 000000000..20846e0dc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/md4/build.info
@@ -0,0 +1,3 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        md4_dgst.c md4_one.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/md4/md4_dgst.c b/trunk/3rdparty/openssl-1.1-fit/crypto/md4/md4_dgst.c
new file mode 100644
index 000000000..531961861
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/md4/md4_dgst.c
@@ -0,0 +1,147 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <openssl/opensslv.h>
+#include "md4_locl.h"
+
+/*
+ * Implemented from RFC1186 The MD4 Message-Digest Algorithm
+ */
+
+#define INIT_DATA_A (unsigned long)0x67452301L
+#define INIT_DATA_B (unsigned long)0xefcdab89L
+#define INIT_DATA_C (unsigned long)0x98badcfeL
+#define INIT_DATA_D (unsigned long)0x10325476L
+
+int MD4_Init(MD4_CTX *c)
+{
+    memset(c, 0, sizeof(*c));
+    c->A = INIT_DATA_A;
+    c->B = INIT_DATA_B;
+    c->C = INIT_DATA_C;
+    c->D = INIT_DATA_D;
+    return 1;
+}
+
+#ifndef md4_block_data_order
+# ifdef X
+#  undef X
+# endif
+void md4_block_data_order(MD4_CTX *c, const void *data_, size_t num)
+{
+    const unsigned char *data = data_;
+    register unsigned MD32_REG_T A, B, C, D, l;
+# ifndef MD32_XARRAY
+    /* See comment in crypto/sha/sha_locl.h for details. */
+    unsigned MD32_REG_T XX0, XX1, XX2, XX3, XX4, XX5, XX6, XX7,
+        XX8, XX9, XX10, XX11, XX12, XX13, XX14, XX15;
+#  define X(i)   XX##i
+# else
+    MD4_LONG XX[MD4_LBLOCK];
+#  define X(i)   XX[i]
+# endif
+
+    A = c->A;
+    B = c->B;
+    C = c->C;
+    D = c->D;
+
+    for (; num--;) {
+        (void)HOST_c2l(data, l);
+        X(0) = l;
+        (void)HOST_c2l(data, l);
+        X(1) = l;
+        /* Round 0 */
+        R0(A, B, C, D, X(0), 3, 0);
+        (void)HOST_c2l(data, l);
+        X(2) = l;
+        R0(D, A, B, C, X(1), 7, 0);
+        (void)HOST_c2l(data, l);
+        X(3) = l;
+        R0(C, D, A, B, X(2), 11, 0);
+        (void)HOST_c2l(data, l);
+        X(4) = l;
+        R0(B, C, D, A, X(3), 19, 0);
+        (void)HOST_c2l(data, l);
+        X(5) = l;
+        R0(A, B, C, D, X(4), 3, 0);
+        (void)HOST_c2l(data, l);
+        X(6) = l;
+        R0(D, A, B, C, X(5), 7, 0);
+        (void)HOST_c2l(data, l);
+        X(7) = l;
+        R0(C, D, A, B, X(6), 11, 0);
+        (void)HOST_c2l(data, l);
+        X(8) = l;
+        R0(B, C, D, A, X(7), 19, 0);
+        (void)HOST_c2l(data, l);
+        X(9) = l;
+        R0(A, B, C, D, X(8), 3, 0);
+        (void)HOST_c2l(data, l);
+        X(10) = l;
+        R0(D, A, B, C, X(9), 7, 0);
+        (void)HOST_c2l(data, l);
+        X(11) = l;
+        R0(C, D, A, B, X(10), 11, 0);
+        (void)HOST_c2l(data, l);
+        X(12) = l;
+        R0(B, C, D, A, X(11), 19, 0);
+        (void)HOST_c2l(data, l);
+        X(13) = l;
+        R0(A, B, C, D, X(12), 3, 0);
+        (void)HOST_c2l(data, l);
+        X(14) = l;
+        R0(D, A, B, C, X(13), 7, 0);
+        (void)HOST_c2l(data, l);
+        X(15) = l;
+        R0(C, D, A, B, X(14), 11, 0);
+        R0(B, C, D, A, X(15), 19, 0);
+        /* Round 1 */
+        R1(A, B, C, D, X(0), 3, 0x5A827999L);
+        R1(D, A, B, C, X(4), 5, 0x5A827999L);
+        R1(C, D, A, B, X(8), 9, 0x5A827999L);
+        R1(B, C, D, A, X(12), 13, 0x5A827999L);
+        R1(A, B, C, D, X(1), 3, 0x5A827999L);
+        R1(D, A, B, C, X(5), 5, 0x5A827999L);
+        R1(C, D, A, B, X(9), 9, 0x5A827999L);
+        R1(B, C, D, A, X(13), 13, 0x5A827999L);
+        R1(A, B, C, D, X(2), 3, 0x5A827999L);
+        R1(D, A, B, C, X(6), 5, 0x5A827999L);
+        R1(C, D, A, B, X(10), 9, 0x5A827999L);
+        R1(B, C, D, A, X(14), 13, 0x5A827999L);
+        R1(A, B, C, D, X(3), 3, 0x5A827999L);
+        R1(D, A, B, C, X(7), 5, 0x5A827999L);
+        R1(C, D, A, B, X(11), 9, 0x5A827999L);
+        R1(B, C, D, A, X(15), 13, 0x5A827999L);
+        /* Round 2 */
+        R2(A, B, C, D, X(0), 3, 0x6ED9EBA1L);
+        R2(D, A, B, C, X(8), 9, 0x6ED9EBA1L);
+        R2(C, D, A, B, X(4), 11, 0x6ED9EBA1L);
+        R2(B, C, D, A, X(12), 15, 0x6ED9EBA1L);
+        R2(A, B, C, D, X(2), 3, 0x6ED9EBA1L);
+        R2(D, A, B, C, X(10), 9, 0x6ED9EBA1L);
+        R2(C, D, A, B, X(6), 11, 0x6ED9EBA1L);
+        R2(B, C, D, A, X(14), 15, 0x6ED9EBA1L);
+        R2(A, B, C, D, X(1), 3, 0x6ED9EBA1L);
+        R2(D, A, B, C, X(9), 9, 0x6ED9EBA1L);
+        R2(C, D, A, B, X(5), 11, 0x6ED9EBA1L);
+        R2(B, C, D, A, X(13), 15, 0x6ED9EBA1L);
+        R2(A, B, C, D, X(3), 3, 0x6ED9EBA1L);
+        R2(D, A, B, C, X(11), 9, 0x6ED9EBA1L);
+        R2(C, D, A, B, X(7), 11, 0x6ED9EBA1L);
+        R2(B, C, D, A, X(15), 15, 0x6ED9EBA1L);
+
+        A = c->A += A;
+        B = c->B += B;
+        C = c->C += C;
+        D = c->D += D;
+    }
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/md4/md4_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/md4/md4_locl.h
new file mode 100644
index 000000000..a6c4003fd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/md4/md4_locl.h
@@ -0,0 +1,60 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdlib.h>
+#include <string.h>
+#include <openssl/opensslconf.h>
+#include <openssl/md4.h>
+
+void md4_block_data_order(MD4_CTX *c, const void *p, size_t num);
+
+#define DATA_ORDER_IS_LITTLE_ENDIAN
+
+#define HASH_LONG               MD4_LONG
+#define HASH_CTX                MD4_CTX
+#define HASH_CBLOCK             MD4_CBLOCK
+#define HASH_UPDATE             MD4_Update
+#define HASH_TRANSFORM          MD4_Transform
+#define HASH_FINAL              MD4_Final
+#define HASH_MAKE_STRING(c,s)   do {    \
+        unsigned long ll;               \
+        ll=(c)->A; (void)HOST_l2c(ll,(s));      \
+        ll=(c)->B; (void)HOST_l2c(ll,(s));      \
+        ll=(c)->C; (void)HOST_l2c(ll,(s));      \
+        ll=(c)->D; (void)HOST_l2c(ll,(s));      \
+        } while (0)
+#define HASH_BLOCK_DATA_ORDER   md4_block_data_order
+
+#include "internal/md32_common.h"
+
+/*-
+#define F(x,y,z)        (((x) & (y))  |  ((~(x)) & (z)))
+#define G(x,y,z)        (((x) & (y))  |  ((x) & ((z))) | ((y) & ((z))))
+*/
+
+/*
+ * As pointed out by Wei Dai, the above can be simplified to the code
+ * below.  Wei attributes these optimizations to Peter Gutmann's SHS code,
+ * and he attributes it to Rich Schroeppel.
+ */
+#define F(b,c,d)        ((((c) ^ (d)) & (b)) ^ (d))
+#define G(b,c,d)        (((b) & (c)) | ((b) & (d)) | ((c) & (d)))
+#define H(b,c,d)        ((b) ^ (c) ^ (d))
+
+#define R0(a,b,c,d,k,s,t) { \
+        a+=((k)+(t)+F((b),(c),(d))); \
+        a=ROTATE(a,s); };
+
+#define R1(a,b,c,d,k,s,t) { \
+        a+=((k)+(t)+G((b),(c),(d))); \
+        a=ROTATE(a,s); };\
+
+#define R2(a,b,c,d,k,s,t) { \
+        a+=((k)+(t)+H((b),(c),(d))); \
+        a=ROTATE(a,s); };
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/md4/md4_one.c b/trunk/3rdparty/openssl-1.1-fit/crypto/md4/md4_one.c
new file mode 100644
index 000000000..9e52303c2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/md4/md4_one.c
@@ -0,0 +1,47 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include <openssl/md4.h>
+#include <openssl/crypto.h>
+
+#ifdef CHARSET_EBCDIC
+# include <openssl/ebcdic.h>
+#endif
+
+unsigned char *MD4(const unsigned char *d, size_t n, unsigned char *md)
+{
+    MD4_CTX c;
+    static unsigned char m[MD4_DIGEST_LENGTH];
+
+    if (md == NULL)
+        md = m;
+    if (!MD4_Init(&c))
+        return NULL;
+#ifndef CHARSET_EBCDIC
+    MD4_Update(&c, d, n);
+#else
+    {
+        char temp[1024];
+        unsigned long chunk;
+
+        while (n > 0) {
+            chunk = (n > sizeof(temp)) ? sizeof(temp) : n;
+            ebcdic2ascii(temp, d, chunk);
+            MD4_Update(&c, temp, chunk);
+            n -= chunk;
+            d += chunk;
+        }
+    }
+#endif
+    MD4_Final(md, &c);
+    OPENSSL_cleanse(&c, sizeof(c)); /* security consideration */
+    return md;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/md5/asm/md5-586.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/md5/asm/md5-586.pl
new file mode 100644
index 000000000..15e14864d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/md5/asm/md5-586.pl
@@ -0,0 +1,318 @@
+#! /usr/bin/env perl
+# Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# Normal is the
+# md5_block_x86(MD5_CTX *c, ULONG *X);
+# version, non-normal is the
+# md5_block_x86(MD5_CTX *c, ULONG *X,int blocks);
+
+$normal=0;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output=pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0]);
+
+$A="eax";
+$B="ebx";
+$C="ecx";
+$D="edx";
+$tmp1="edi";
+$tmp2="ebp";
+$X="esi";
+
+# What we need to load into $tmp for the next round
+%Ltmp1=("R0",&Np($C), "R1",&Np($C), "R2",&Np($C), "R3",&Np($D));
+@xo=(
+ 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15,	# R0
+ 1, 6, 11, 0, 5, 10, 15, 4, 9, 14, 3, 8, 13, 2, 7, 12,	# R1
+ 5, 8, 11, 14, 1, 4, 7, 10, 13, 0, 3, 6, 9, 12, 15, 2,	# R2
+ 0, 7, 14, 5, 12, 3, 10, 1, 8, 15, 6, 13, 4, 11, 2, 9,	# R3
+ );
+
+&md5_block("md5_block_asm_data_order");
+&asm_finish();
+
+close STDOUT;
+
+sub Np
+	{
+	local($p)=@_;
+	local(%n)=($A,$D,$B,$A,$C,$B,$D,$C);
+	return($n{$p});
+	}
+
+sub R0
+	{
+	local($pos,$a,$b,$c,$d,$K,$ki,$s,$t)=@_;
+
+	&mov($tmp1,$C)  if $pos < 0;
+	&mov($tmp2,&DWP($xo[$ki]*4,$K,"",0)) if $pos < 0; # very first one
+
+	# body proper
+
+	&comment("R0 $ki");
+	&xor($tmp1,$d); # F function - part 2
+
+	&and($tmp1,$b); # F function - part 3
+	&lea($a,&DWP($t,$a,$tmp2,1));
+
+	&xor($tmp1,$d); # F function - part 4
+	&mov($tmp2,&DWP($xo[$ki+1]*4,$K,"",0)) if ($pos != 2);
+
+	&add($a,$tmp1);
+
+	&rotl($a,$s);
+
+	&mov($tmp1,&Np($c)) if $pos < 1;	# next tmp1 for R0
+	&mov($tmp1,&Np($c)) if $pos == 1;	# next tmp1 for R1
+
+	&add($a,$b);
+	}
+
+sub R1
+	{
+	local($pos,$a,$b,$c,$d,$K,$ki,$s,$t)=@_;
+
+	&comment("R1 $ki");
+
+	&xor($tmp1,$b); # G function - part 2
+	&and($tmp1,$d); # G function - part 3
+	&lea($a,&DWP($t,$a,$tmp2,1));
+
+	&xor($tmp1,$c);			# G function - part 4
+	&mov($tmp2,&DWP($xo[$ki+1]*4,$K,"",0)) if ($pos != 2);
+
+	&add($a,$tmp1);
+	&mov($tmp1,&Np($c)) if $pos < 1;	# G function - part 1
+	&mov($tmp1,&Np($c)) if $pos == 1;	# G function - part 1
+
+	&rotl($a,$s);
+
+	&add($a,$b);
+	}
+
+sub R2
+	{
+	local($n,$pos,$a,$b,$c,$d,$K,$ki,$s,$t)=@_;
+	# This one is different, only 3 logical operations
+
+if (($n & 1) == 0)
+	{
+	&comment("R2 $ki");
+	# make sure to do 'D' first, not 'B', else we clash with
+	# the last add from the previous round.
+
+	&xor($tmp1,$d); # H function - part 2
+
+	&xor($tmp1,$b); # H function - part 3
+	&lea($a,&DWP($t,$a,$tmp2,1));
+
+	&add($a,$tmp1);
+	&mov($tmp2,&DWP($xo[$ki+1]*4,$K,"",0));
+
+	&rotl($a,$s);
+
+	&mov($tmp1,&Np($c));
+	}
+else
+	{
+	&comment("R2 $ki");
+	# make sure to do 'D' first, not 'B', else we clash with
+	# the last add from the previous round.
+
+	&add($b,$c);			# MOVED FORWARD
+	&xor($tmp1,$d); # H function - part 2
+
+	&lea($a,&DWP($t,$a,$tmp2,1));
+
+	&xor($tmp1,$b); # H function - part 3
+	&mov($tmp2,&DWP($xo[$ki+1]*4,$K,"",0)) if ($pos != 2);
+
+	&add($a,$tmp1);
+	&mov($tmp1,&Np($c)) if $pos < 1;	# H function - part 1
+	&mov($tmp1,-1) if $pos == 1;		# I function - part 1
+
+	&rotl($a,$s);
+
+	&add($a,$b);
+	}
+	}
+
+sub R3
+	{
+	local($pos,$a,$b,$c,$d,$K,$ki,$s,$t)=@_;
+
+	&comment("R3 $ki");
+
+	# &not($tmp1)
+	&xor($tmp1,$d) if $pos < 0; 	# I function - part 2
+
+	&or($tmp1,$b);				# I function - part 3
+	&lea($a,&DWP($t,$a,$tmp2,1));
+
+	&xor($tmp1,$c); 			# I function - part 4
+	&mov($tmp2,&DWP($xo[$ki+1]*4,$K,"",0))	if $pos != 2; # load X/k value
+	&mov($tmp2,&wparam(0)) if $pos == 2;
+
+	&add($a,$tmp1);
+	&mov($tmp1,-1) if $pos < 1;	# H function - part 1
+	&add($K,64) if $pos >=1 && !$normal;
+
+	&rotl($a,$s);
+
+	&xor($tmp1,&Np($d)) if $pos <= 0; 	# I function - part = first time
+	&mov($tmp1,&DWP( 0,$tmp2,"",0)) if $pos > 0;
+	&add($a,$b);
+	}
+
+
+sub md5_block
+	{
+	local($name)=@_;
+
+	&function_begin_B($name,"",3);
+
+	# parameter 1 is the MD5_CTX structure.
+	# A	0
+	# B	4
+	# C	8
+	# D 	12
+
+	&push("esi");
+	 &push("edi");
+	&mov($tmp1,	&wparam(0)); # edi
+	 &mov($X,	&wparam(1)); # esi
+	&mov($C,	&wparam(2));
+	 &push("ebp");
+	&shl($C,	6);
+	&push("ebx");
+	 &add($C,	$X); # offset we end at
+	&sub($C,	64);
+	 &mov($A,	&DWP( 0,$tmp1,"",0));
+	&push($C);	# Put on the TOS
+	 &mov($B,	&DWP( 4,$tmp1,"",0));
+	&mov($C,	&DWP( 8,$tmp1,"",0));
+	 &mov($D,	&DWP(12,$tmp1,"",0));
+
+	&set_label("start") unless $normal;
+	&comment("");
+	&comment("R0 section");
+
+	&R0(-2,$A,$B,$C,$D,$X, 0, 7,0xd76aa478);
+	&R0( 0,$D,$A,$B,$C,$X, 1,12,0xe8c7b756);
+	&R0( 0,$C,$D,$A,$B,$X, 2,17,0x242070db);
+	&R0( 0,$B,$C,$D,$A,$X, 3,22,0xc1bdceee);
+	&R0( 0,$A,$B,$C,$D,$X, 4, 7,0xf57c0faf);
+	&R0( 0,$D,$A,$B,$C,$X, 5,12,0x4787c62a);
+	&R0( 0,$C,$D,$A,$B,$X, 6,17,0xa8304613);
+	&R0( 0,$B,$C,$D,$A,$X, 7,22,0xfd469501);
+	&R0( 0,$A,$B,$C,$D,$X, 8, 7,0x698098d8);
+	&R0( 0,$D,$A,$B,$C,$X, 9,12,0x8b44f7af);
+	&R0( 0,$C,$D,$A,$B,$X,10,17,0xffff5bb1);
+	&R0( 0,$B,$C,$D,$A,$X,11,22,0x895cd7be);
+	&R0( 0,$A,$B,$C,$D,$X,12, 7,0x6b901122);
+	&R0( 0,$D,$A,$B,$C,$X,13,12,0xfd987193);
+	&R0( 0,$C,$D,$A,$B,$X,14,17,0xa679438e);
+	&R0( 1,$B,$C,$D,$A,$X,15,22,0x49b40821);
+
+	&comment("");
+	&comment("R1 section");
+	&R1(-1,$A,$B,$C,$D,$X,16, 5,0xf61e2562);
+	&R1( 0,$D,$A,$B,$C,$X,17, 9,0xc040b340);
+	&R1( 0,$C,$D,$A,$B,$X,18,14,0x265e5a51);
+	&R1( 0,$B,$C,$D,$A,$X,19,20,0xe9b6c7aa);
+	&R1( 0,$A,$B,$C,$D,$X,20, 5,0xd62f105d);
+	&R1( 0,$D,$A,$B,$C,$X,21, 9,0x02441453);
+	&R1( 0,$C,$D,$A,$B,$X,22,14,0xd8a1e681);
+	&R1( 0,$B,$C,$D,$A,$X,23,20,0xe7d3fbc8);
+	&R1( 0,$A,$B,$C,$D,$X,24, 5,0x21e1cde6);
+	&R1( 0,$D,$A,$B,$C,$X,25, 9,0xc33707d6);
+	&R1( 0,$C,$D,$A,$B,$X,26,14,0xf4d50d87);
+	&R1( 0,$B,$C,$D,$A,$X,27,20,0x455a14ed);
+	&R1( 0,$A,$B,$C,$D,$X,28, 5,0xa9e3e905);
+	&R1( 0,$D,$A,$B,$C,$X,29, 9,0xfcefa3f8);
+	&R1( 0,$C,$D,$A,$B,$X,30,14,0x676f02d9);
+	&R1( 1,$B,$C,$D,$A,$X,31,20,0x8d2a4c8a);
+
+	&comment("");
+	&comment("R2 section");
+	&R2( 0,-1,$A,$B,$C,$D,$X,32, 4,0xfffa3942);
+	&R2( 1, 0,$D,$A,$B,$C,$X,33,11,0x8771f681);
+	&R2( 2, 0,$C,$D,$A,$B,$X,34,16,0x6d9d6122);
+	&R2( 3, 0,$B,$C,$D,$A,$X,35,23,0xfde5380c);
+	&R2( 4, 0,$A,$B,$C,$D,$X,36, 4,0xa4beea44);
+	&R2( 5, 0,$D,$A,$B,$C,$X,37,11,0x4bdecfa9);
+	&R2( 6, 0,$C,$D,$A,$B,$X,38,16,0xf6bb4b60);
+	&R2( 7, 0,$B,$C,$D,$A,$X,39,23,0xbebfbc70);
+	&R2( 8, 0,$A,$B,$C,$D,$X,40, 4,0x289b7ec6);
+	&R2( 9, 0,$D,$A,$B,$C,$X,41,11,0xeaa127fa);
+	&R2(10, 0,$C,$D,$A,$B,$X,42,16,0xd4ef3085);
+	&R2(11, 0,$B,$C,$D,$A,$X,43,23,0x04881d05);
+	&R2(12, 0,$A,$B,$C,$D,$X,44, 4,0xd9d4d039);
+	&R2(13, 0,$D,$A,$B,$C,$X,45,11,0xe6db99e5);
+	&R2(14, 0,$C,$D,$A,$B,$X,46,16,0x1fa27cf8);
+	&R2(15, 1,$B,$C,$D,$A,$X,47,23,0xc4ac5665);
+
+	&comment("");
+	&comment("R3 section");
+	&R3(-1,$A,$B,$C,$D,$X,48, 6,0xf4292244);
+	&R3( 0,$D,$A,$B,$C,$X,49,10,0x432aff97);
+	&R3( 0,$C,$D,$A,$B,$X,50,15,0xab9423a7);
+	&R3( 0,$B,$C,$D,$A,$X,51,21,0xfc93a039);
+	&R3( 0,$A,$B,$C,$D,$X,52, 6,0x655b59c3);
+	&R3( 0,$D,$A,$B,$C,$X,53,10,0x8f0ccc92);
+	&R3( 0,$C,$D,$A,$B,$X,54,15,0xffeff47d);
+	&R3( 0,$B,$C,$D,$A,$X,55,21,0x85845dd1);
+	&R3( 0,$A,$B,$C,$D,$X,56, 6,0x6fa87e4f);
+	&R3( 0,$D,$A,$B,$C,$X,57,10,0xfe2ce6e0);
+	&R3( 0,$C,$D,$A,$B,$X,58,15,0xa3014314);
+	&R3( 0,$B,$C,$D,$A,$X,59,21,0x4e0811a1);
+	&R3( 0,$A,$B,$C,$D,$X,60, 6,0xf7537e82);
+	&R3( 0,$D,$A,$B,$C,$X,61,10,0xbd3af235);
+	&R3( 0,$C,$D,$A,$B,$X,62,15,0x2ad7d2bb);
+	&R3( 2,$B,$C,$D,$A,$X,63,21,0xeb86d391);
+
+	# &mov($tmp2,&wparam(0));	# done in the last R3
+	# &mov($tmp1,	&DWP( 0,$tmp2,"",0)); # done is the last R3
+
+	&add($A,$tmp1);
+	 &mov($tmp1,	&DWP( 4,$tmp2,"",0));
+
+	&add($B,$tmp1);
+	&mov($tmp1,	&DWP( 8,$tmp2,"",0));
+
+	&add($C,$tmp1);
+	&mov($tmp1,	&DWP(12,$tmp2,"",0));
+
+	&add($D,$tmp1);
+	&mov(&DWP( 0,$tmp2,"",0),$A);
+
+	&mov(&DWP( 4,$tmp2,"",0),$B);
+	&mov($tmp1,&swtmp(0)) unless $normal;
+
+	&mov(&DWP( 8,$tmp2,"",0),$C);
+	 &mov(&DWP(12,$tmp2,"",0),$D);
+
+	&cmp($tmp1,$X) unless $normal;			# check count
+	 &jae(&label("start")) unless $normal;
+
+	&pop("eax"); # pop the temp variable off the stack
+	 &pop("ebx");
+	&pop("ebp");
+	 &pop("edi");
+	&pop("esi");
+	 &ret();
+	&function_end_B($name);
+	}
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/md5/asm/md5-sparcv9.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/md5/asm/md5-sparcv9.pl
new file mode 100644
index 000000000..6a62c6253
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/md5/asm/md5-sparcv9.pl
@@ -0,0 +1,437 @@
+#! /usr/bin/env perl
+# Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+#
+# Hardware SPARC T4 support by David S. Miller.
+# ====================================================================
+
+# MD5 for SPARCv9, 6.9 cycles per byte on UltraSPARC, >40% faster than
+# code generated by Sun C 5.2.
+
+# SPARC T4 MD5 hardware achieves 3.20 cycles per byte, which is 2.1x
+# faster than software. Multi-process benchmark saturates at 12x
+# single-process result on 8-core processor, or ~11GBps per 2.85GHz
+# socket.
+
+$output=pop;
+open STDOUT,">$output";
+
+use integer;
+
+($ctx,$inp,$len)=("%i0","%i1","%i2");	# input arguments
+
+# 64-bit values
+@X=("%o0","%o1","%o2","%o3","%o4","%o5","%o7","%g1","%g2");
+$tx="%g3";
+($AB,$CD)=("%g4","%g5");
+
+# 32-bit values
+@V=($A,$B,$C,$D)=map("%l$_",(0..3));
+($t1,$t2,$t3,$saved_asi)=map("%l$_",(4..7));
+($shr,$shl1,$shl2)=("%i3","%i4","%i5");
+
+my @K=(	0xd76aa478,0xe8c7b756,0x242070db,0xc1bdceee,
+	0xf57c0faf,0x4787c62a,0xa8304613,0xfd469501,
+	0x698098d8,0x8b44f7af,0xffff5bb1,0x895cd7be,
+	0x6b901122,0xfd987193,0xa679438e,0x49b40821,
+
+	0xf61e2562,0xc040b340,0x265e5a51,0xe9b6c7aa,
+	0xd62f105d,0x02441453,0xd8a1e681,0xe7d3fbc8,
+	0x21e1cde6,0xc33707d6,0xf4d50d87,0x455a14ed,
+	0xa9e3e905,0xfcefa3f8,0x676f02d9,0x8d2a4c8a,
+
+	0xfffa3942,0x8771f681,0x6d9d6122,0xfde5380c,
+	0xa4beea44,0x4bdecfa9,0xf6bb4b60,0xbebfbc70,
+	0x289b7ec6,0xeaa127fa,0xd4ef3085,0x04881d05,
+	0xd9d4d039,0xe6db99e5,0x1fa27cf8,0xc4ac5665,
+
+	0xf4292244,0x432aff97,0xab9423a7,0xfc93a039,
+	0x655b59c3,0x8f0ccc92,0xffeff47d,0x85845dd1,
+	0x6fa87e4f,0xfe2ce6e0,0xa3014314,0x4e0811a1,
+	0xf7537e82,0xbd3af235,0x2ad7d2bb,0xeb86d391, 0	);
+
+sub R0 {
+  my ($i,$a,$b,$c,$d) = @_;
+  my $rot = (7,12,17,22)[$i%4];
+  my $j   = ($i+1)/2;
+
+  if ($i&1) {
+    $code.=<<___;
+	 srlx	@X[$j],$shr,@X[$j]	! align X[`$i+1`]
+	and	$b,$t1,$t1		! round $i
+	 sllx	@X[$j+1],$shl1,$tx
+	add	$t2,$a,$a
+	 sllx	$tx,$shl2,$tx
+	xor	$d,$t1,$t1
+	 or	$tx,@X[$j],@X[$j]
+	 sethi	%hi(@K[$i+1]),$t2
+	add	$t1,$a,$a
+	 or	$t2,%lo(@K[$i+1]),$t2
+	sll	$a,$rot,$t3
+	 add	@X[$j],$t2,$t2		! X[`$i+1`]+K[`$i+1`]
+	srl	$a,32-$rot,$a
+	add	$b,$t3,$t3
+	 xor	 $b,$c,$t1
+	add	$t3,$a,$a
+___
+  } else {
+    $code.=<<___;
+	 srlx	@X[$j],32,$tx		! extract X[`2*$j+1`]
+	and	$b,$t1,$t1		! round $i
+	add	$t2,$a,$a
+	xor	$d,$t1,$t1
+	 sethi	%hi(@K[$i+1]),$t2
+	add	$t1,$a,$a
+	 or	$t2,%lo(@K[$i+1]),$t2
+	sll	$a,$rot,$t3
+	 add	$tx,$t2,$t2		! X[`2*$j+1`]+K[`$i+1`]
+	srl	$a,32-$rot,$a
+	add	$b,$t3,$t3
+	 xor	 $b,$c,$t1
+	add	$t3,$a,$a
+___
+  }
+}
+
+sub R0_1 {
+  my ($i,$a,$b,$c,$d) = @_;
+  my $rot = (7,12,17,22)[$i%4];
+
+$code.=<<___;
+	 srlx	@X[0],32,$tx		! extract X[1]
+	and	$b,$t1,$t1		! round $i
+	add	$t2,$a,$a
+	xor	$d,$t1,$t1
+	 sethi	%hi(@K[$i+1]),$t2
+	add	$t1,$a,$a
+	 or	$t2,%lo(@K[$i+1]),$t2
+	sll	$a,$rot,$t3
+	 add	$tx,$t2,$t2		! X[1]+K[`$i+1`]
+	srl	$a,32-$rot,$a
+	add	$b,$t3,$t3
+	 andn	 $b,$c,$t1
+	add	$t3,$a,$a
+___
+}
+
+sub R1 {
+  my ($i,$a,$b,$c,$d) = @_;
+  my $rot = (5,9,14,20)[$i%4];
+  my $j   = $i<31 ? (1+5*($i+1))%16 : (5+3*($i+1))%16;
+  my $xi  = @X[$j/2];
+
+$code.=<<___ if ($j&1 && ($xi=$tx));
+	 srlx	@X[$j/2],32,$xi		! extract X[$j]
+___
+$code.=<<___;
+	and	$b,$d,$t3		! round $i
+	add	$t2,$a,$a
+	or	$t3,$t1,$t1
+	 sethi	%hi(@K[$i+1]),$t2
+	add	$t1,$a,$a
+	 or	$t2,%lo(@K[$i+1]),$t2
+	sll	$a,$rot,$t3
+	 add	$xi,$t2,$t2		! X[$j]+K[`$i+1`]
+	srl	$a,32-$rot,$a
+	add	$b,$t3,$t3
+	 `$i<31?"andn":"xor"`	 $b,$c,$t1
+	add	$t3,$a,$a
+___
+}
+
+sub R2 {
+  my ($i,$a,$b,$c,$d) = @_;
+  my $rot = (4,11,16,23)[$i%4];
+  my $j   = $i<47 ? (5+3*($i+1))%16 : (0+7*($i+1))%16;
+  my $xi  = @X[$j/2];
+
+$code.=<<___ if ($j&1 && ($xi=$tx));
+	 srlx	@X[$j/2],32,$xi		! extract X[$j]
+___
+$code.=<<___;
+	add	$t2,$a,$a		! round $i
+	xor	$b,$t1,$t1
+	 sethi	%hi(@K[$i+1]),$t2
+	add	$t1,$a,$a
+	 or	$t2,%lo(@K[$i+1]),$t2
+	sll	$a,$rot,$t3
+	 add	$xi,$t2,$t2		! X[$j]+K[`$i+1`]
+	srl	$a,32-$rot,$a
+	add	$b,$t3,$t3
+	 xor	 $b,$c,$t1
+	add	$t3,$a,$a
+___
+}
+
+sub R3 {
+  my ($i,$a,$b,$c,$d) = @_;
+  my $rot = (6,10,15,21)[$i%4];
+  my $j   = (0+7*($i+1))%16;
+  my $xi  = @X[$j/2];
+
+$code.=<<___;
+	add	$t2,$a,$a		! round $i
+___
+$code.=<<___ if ($j&1 && ($xi=$tx));
+	 srlx	@X[$j/2],32,$xi		! extract X[$j]
+___
+$code.=<<___;
+	orn	$b,$d,$t1
+	 sethi	%hi(@K[$i+1]),$t2
+	xor	$c,$t1,$t1
+	 or	$t2,%lo(@K[$i+1]),$t2
+	add	$t1,$a,$a
+	sll	$a,$rot,$t3
+	 add	$xi,$t2,$t2		! X[$j]+K[`$i+1`]
+	srl	$a,32-$rot,$a
+	add	$b,$t3,$t3
+	add	$t3,$a,$a
+___
+}
+
+$code.=<<___;
+#include "sparc_arch.h"
+
+#ifdef __arch64__
+.register	%g2,#scratch
+.register	%g3,#scratch
+#endif
+
+.section	".text",#alloc,#execinstr
+
+#ifdef __PIC__
+SPARC_PIC_THUNK(%g1)
+#endif
+
+.globl	md5_block_asm_data_order
+.align	32
+md5_block_asm_data_order:
+	SPARC_LOAD_ADDRESS_LEAF(OPENSSL_sparcv9cap_P,%g1,%g5)
+	ld	[%g1+4],%g1		! OPENSSL_sparcv9cap_P[1]
+
+	andcc	%g1, CFR_MD5, %g0
+	be	.Lsoftware
+	nop
+
+	mov	4, %g1
+	andcc	%o1, 0x7, %g0
+	lda	[%o0 + %g0]0x88, %f0		! load context
+	lda	[%o0 + %g1]0x88, %f1
+	add	%o0, 8, %o0
+	lda	[%o0 + %g0]0x88, %f2
+	lda	[%o0 + %g1]0x88, %f3
+	bne,pn	%icc, .Lhwunaligned
+	sub	%o0, 8, %o0
+
+.Lhw_loop:
+	ldd	[%o1 + 0x00], %f8
+	ldd	[%o1 + 0x08], %f10
+	ldd	[%o1 + 0x10], %f12
+	ldd	[%o1 + 0x18], %f14
+	ldd	[%o1 + 0x20], %f16
+	ldd	[%o1 + 0x28], %f18
+	ldd	[%o1 + 0x30], %f20
+	subcc	%o2, 1, %o2		! done yet?
+	ldd	[%o1 + 0x38], %f22
+	add	%o1, 0x40, %o1
+	prefetch [%o1 + 63], 20
+
+	.word	0x81b02800		! MD5
+
+	bne,pt	SIZE_T_CC, .Lhw_loop
+	nop
+
+.Lhwfinish:
+	sta	%f0, [%o0 + %g0]0x88	! store context
+	sta	%f1, [%o0 + %g1]0x88
+	add	%o0, 8, %o0
+	sta	%f2, [%o0 + %g0]0x88
+	sta	%f3, [%o0 + %g1]0x88
+	retl
+	nop
+
+.align	8
+.Lhwunaligned:
+	alignaddr %o1, %g0, %o1
+
+	ldd	[%o1 + 0x00], %f10
+.Lhwunaligned_loop:
+	ldd	[%o1 + 0x08], %f12
+	ldd	[%o1 + 0x10], %f14
+	ldd	[%o1 + 0x18], %f16
+	ldd	[%o1 + 0x20], %f18
+	ldd	[%o1 + 0x28], %f20
+	ldd	[%o1 + 0x30], %f22
+	ldd	[%o1 + 0x38], %f24
+	subcc	%o2, 1, %o2		! done yet?
+	ldd	[%o1 + 0x40], %f26
+	add	%o1, 0x40, %o1
+	prefetch [%o1 + 63], 20
+
+	faligndata %f10, %f12, %f8
+	faligndata %f12, %f14, %f10
+	faligndata %f14, %f16, %f12
+	faligndata %f16, %f18, %f14
+	faligndata %f18, %f20, %f16
+	faligndata %f20, %f22, %f18
+	faligndata %f22, %f24, %f20
+	faligndata %f24, %f26, %f22
+
+	.word	0x81b02800		! MD5
+
+	bne,pt	SIZE_T_CC, .Lhwunaligned_loop
+	for	%f26, %f26, %f10	! %f10=%f26
+
+	ba	.Lhwfinish
+	nop
+
+.align	16
+.Lsoftware:
+	save	%sp,-STACK_FRAME,%sp
+
+	rd	%asi,$saved_asi
+	wr	%g0,0x88,%asi		! ASI_PRIMARY_LITTLE
+	and	$inp,7,$shr
+	andn	$inp,7,$inp
+
+	sll	$shr,3,$shr		! *=8
+	mov	56,$shl2
+	ld	[$ctx+0],$A
+	sub	$shl2,$shr,$shl2
+	ld	[$ctx+4],$B
+	and	$shl2,32,$shl1
+	add	$shl2,8,$shl2
+	ld	[$ctx+8],$C
+	sub	$shl2,$shl1,$shl2	! shr+shl1+shl2==64
+	ld	[$ctx+12],$D
+	nop
+
+.Loop:
+	 cmp	$shr,0			! was inp aligned?
+	ldxa	[$inp+0]%asi,@X[0]	! load little-endian input
+	ldxa	[$inp+8]%asi,@X[1]
+	ldxa	[$inp+16]%asi,@X[2]
+	ldxa	[$inp+24]%asi,@X[3]
+	ldxa	[$inp+32]%asi,@X[4]
+	 sllx	$A,32,$AB		! pack A,B
+	ldxa	[$inp+40]%asi,@X[5]
+	 sllx	$C,32,$CD		! pack C,D
+	ldxa	[$inp+48]%asi,@X[6]
+	 or	$B,$AB,$AB
+	ldxa	[$inp+56]%asi,@X[7]
+	 or	$D,$CD,$CD
+	bnz,a,pn	%icc,.+8
+	ldxa	[$inp+64]%asi,@X[8]
+
+	srlx	@X[0],$shr,@X[0]	! align X[0]
+	sllx	@X[1],$shl1,$tx
+	 sethi	%hi(@K[0]),$t2
+	sllx	$tx,$shl2,$tx
+	 or	$t2,%lo(@K[0]),$t2
+	or	$tx,@X[0],@X[0]
+	 xor	$C,$D,$t1
+	 add	@X[0],$t2,$t2		! X[0]+K[0]
+___
+	for ($i=0;$i<15;$i++)	{ &R0($i,@V);	unshift(@V,pop(@V)); }
+	for (;$i<16;$i++)	{ &R0_1($i,@V);	unshift(@V,pop(@V)); }
+	for (;$i<32;$i++)	{ &R1($i,@V);	unshift(@V,pop(@V)); }
+	for (;$i<48;$i++)	{ &R2($i,@V);	unshift(@V,pop(@V)); }
+	for (;$i<64;$i++)	{ &R3($i,@V);	unshift(@V,pop(@V)); }
+$code.=<<___;
+	srlx	$AB,32,$t1		! unpack A,B,C,D and accumulate
+	add	$inp,64,$inp		! advance inp
+	srlx	$CD,32,$t2
+	add	$t1,$A,$A
+	subcc	$len,1,$len		! done yet?
+	add	$AB,$B,$B
+	add	$t2,$C,$C
+	add	$CD,$D,$D
+	srl	$B,0,$B			! clruw	$B
+	bne	SIZE_T_CC,.Loop
+	srl	$D,0,$D			! clruw	$D
+
+	st	$A,[$ctx+0]		! write out ctx
+	st	$B,[$ctx+4]
+	st	$C,[$ctx+8]
+	st	$D,[$ctx+12]
+
+	wr	%g0,$saved_asi,%asi
+	ret
+	restore
+.type	md5_block_asm_data_order,#function
+.size	md5_block_asm_data_order,(.-md5_block_asm_data_order)
+
+.asciz	"MD5 block transform for SPARCv9, CRYPTOGAMS by <appro\@openssl.org>"
+.align	4
+___
+
+# Purpose of these subroutines is to explicitly encode VIS instructions,
+# so that one can compile the module without having to specify VIS
+# extensions on compiler command line, e.g. -xarch=v9 vs. -xarch=v9a.
+# Idea is to reserve for option to produce "universal" binary and let
+# programmer detect if current CPU is VIS capable at run-time.
+sub unvis {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my $ref,$opf;
+my %visopf = (	"faligndata"	=> 0x048,
+		"for"		=> 0x07c	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rd";
+
+    if ($opf=$visopf{$mnemonic}) {
+	foreach ($rs1,$rs2,$rd) {
+	    return $ref if (!/%f([0-9]{1,2})/);
+	    $_=$1;
+	    if ($1>=32) {
+		return $ref if ($1&1);
+		# re-encode for upper double register addressing
+		$_=($1|$1>>5)&31;
+	    }
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			0x81b00000|$rd<<25|$rs1<<14|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+sub unalignaddr {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my %bias = ( "g" => 0, "o" => 8, "l" => 16, "i" => 24 );
+my $ref="$mnemonic\t$rs1,$rs2,$rd";
+
+    foreach ($rs1,$rs2,$rd) {
+	if (/%([goli])([0-7])/)	{ $_=$bias{$1}+$2; }
+	else			{ return $ref; }
+    }
+    return  sprintf ".word\t0x%08x !%s",
+		    0x81b00300|$rd<<25|$rs1<<14|$rs2,
+		    $ref;
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	s/\b(f[^\s]*)\s+(%f[0-9]{1,2}),\s*(%f[0-9]{1,2}),\s*(%f[0-9]{1,2})/
+		&unvis($1,$2,$3,$4)
+	 /ge;
+	s/\b(alignaddr)\s+(%[goli][0-7]),\s*(%[goli][0-7]),\s*(%[goli][0-7])/
+		&unalignaddr($1,$2,$3,$4)
+	 /ge;
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/md5/asm/md5-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/md5/asm/md5-x86_64.pl
new file mode 100755
index 000000000..386d8048e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/md5/asm/md5-x86_64.pl
@@ -0,0 +1,393 @@
+#! /usr/bin/env perl
+# Author: Marc Bevand <bevand_m (at) epita.fr>
+# Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# MD5 optimized for AMD64.
+
+use strict;
+
+my $code;
+
+# round1_step() does:
+#   dst = x + ((dst + F(x,y,z) + X[k] + T_i) <<< s)
+#   %r10d = X[k_next]
+#   %r11d = z' (copy of z for the next step)
+# Each round1_step() takes about 5.3 clocks (9 instructions, 1.7 IPC)
+sub round1_step
+{
+    my ($pos, $dst, $x, $y, $z, $k_next, $T_i, $s) = @_;
+    $code .= " mov	0*4(%rsi),	%r10d		/* (NEXT STEP) X[0] */\n" if ($pos == -1);
+    $code .= " mov	%edx,		%r11d		/* (NEXT STEP) z' = %edx */\n" if ($pos == -1);
+    $code .= <<EOF;
+	xor	$y,		%r11d		/* y ^ ... */
+	lea	$T_i($dst,%r10d),$dst		/* Const + dst + ... */
+	and	$x,		%r11d		/* x & ... */
+	mov	$k_next*4(%rsi),%r10d		/* (NEXT STEP) X[$k_next] */
+	xor	$z,		%r11d		/* z ^ ... */
+	add	%r11d,		$dst		/* dst += ... */
+	rol	\$$s,		$dst		/* dst <<< s */
+	mov	$y,		%r11d		/* (NEXT STEP) z' = $y */
+	add	$x,		$dst		/* dst += x */
+EOF
+}
+
+# round2_step() does:
+#   dst = x + ((dst + G(x,y,z) + X[k] + T_i) <<< s)
+#   %r10d = X[k_next]
+#   %r11d = z' (copy of z for the next step)
+#   %r12d = z' (copy of z for the next step)
+# Each round2_step() takes about 5.4 clocks (11 instructions, 2.0 IPC)
+sub round2_step
+{
+    my ($pos, $dst, $x, $y, $z, $k_next, $T_i, $s) = @_;
+    $code .= " mov	%edx,		%r11d		/* (NEXT STEP) z' = %edx */\n" if ($pos == -1);
+    $code .= " mov	%edx,		%r12d		/* (NEXT STEP) z' = %edx */\n" if ($pos == -1);
+    $code .= <<EOF;
+	not	%r11d				/* not z */
+	and	$x,		%r12d		/* x & z */
+	lea	$T_i($dst,%r10d),$dst		/* Const + dst + ... */
+	and	$y,		%r11d		/* y & (not z) */
+	mov	$k_next*4(%rsi),%r10d		/* (NEXT STEP) X[$k_next] */
+	or	%r11d,		%r12d		/* (y & (not z)) | (x & z) */
+	mov	$y,		%r11d		/* (NEXT STEP) z' = $y */
+	add	%r12d,		$dst		/* dst += ... */
+	mov	$y,		%r12d		/* (NEXT STEP) z' = $y */
+	rol	\$$s,		$dst		/* dst <<< s */
+	add	$x,		$dst		/* dst += x */
+EOF
+}
+
+# round3_step() does:
+#   dst = x + ((dst + H(x,y,z) + X[k] + T_i) <<< s)
+#   %r10d = X[k_next]
+#   %r11d = y' (copy of y for the next step)
+# Each round3_step() takes about 4.2 clocks (8 instructions, 1.9 IPC)
+{ my $round3_alter=0;
+sub round3_step
+{
+    my ($pos, $dst, $x, $y, $z, $k_next, $T_i, $s) = @_;
+    $code .= " mov	%ecx,		%r11d		/* (NEXT STEP) y' = %ecx */\n" if ($pos == -1);
+    $code .= <<EOF;
+	lea	$T_i($dst,%r10d),$dst		/* Const + dst + ... */
+	xor	$z,		%r11d		/* z ^ ... */
+	mov	$k_next*4(%rsi),%r10d		/* (NEXT STEP) X[$k_next] */
+	xor	$x,		%r11d		/* x ^ ... */
+	add	%r11d,		$dst		/* dst += ... */
+EOF
+    $code .= <<EOF if ($round3_alter);
+	rol	\$$s,		$dst		/* dst <<< s */
+	mov	$x,		%r11d		/* (NEXT STEP) y' = $x */
+EOF
+    $code .= <<EOF if (!$round3_alter);
+	mov	$x,		%r11d		/* (NEXT STEP) y' = $x */
+	rol	\$$s,		$dst		/* dst <<< s */
+EOF
+    $code .= <<EOF;
+	add	$x,		$dst		/* dst += x */
+EOF
+    $round3_alter^=1;
+}
+}
+
+# round4_step() does:
+#   dst = x + ((dst + I(x,y,z) + X[k] + T_i) <<< s)
+#   %r10d = X[k_next]
+#   %r11d = not z' (copy of not z for the next step)
+# Each round4_step() takes about 5.2 clocks (9 instructions, 1.7 IPC)
+sub round4_step
+{
+    my ($pos, $dst, $x, $y, $z, $k_next, $T_i, $s) = @_;
+    $code .= " mov	\$0xffffffff,	%r11d\n" if ($pos == -1);
+    $code .= " xor	%edx,		%r11d		/* (NEXT STEP) not z' = not %edx*/\n"
+    if ($pos == -1);
+    $code .= <<EOF;
+	lea	$T_i($dst,%r10d),$dst		/* Const + dst + ... */
+	or	$x,		%r11d		/* x | ... */
+	mov	$k_next*4(%rsi),%r10d		/* (NEXT STEP) X[$k_next] */
+	xor	$y,		%r11d		/* y ^ ... */
+	add	%r11d,		$dst		/* dst += ... */
+	mov	\$0xffffffff,	%r11d
+	rol	\$$s,		$dst		/* dst <<< s */
+	xor	$y,		%r11d		/* (NEXT STEP) not z' = not $y */
+	add	$x,		$dst		/* dst += x */
+EOF
+}
+
+no warnings qw(uninitialized);
+my $flavour = shift;
+my $output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+my $win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; my $dir=$1; my $xlate;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+$code .= <<EOF;
+.text
+.align 16
+
+.globl md5_block_asm_data_order
+.type md5_block_asm_data_order,\@function,3
+md5_block_asm_data_order:
+.cfi_startproc
+	push	%rbp
+.cfi_push	%rbp
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lprologue:
+
+	# rdi = arg #1 (ctx, MD5_CTX pointer)
+	# rsi = arg #2 (ptr, data pointer)
+	# rdx = arg #3 (nbr, number of 16-word blocks to process)
+	mov	%rdi,		%rbp	# rbp = ctx
+	shl	\$6,		%rdx	# rdx = nbr in bytes
+	lea	(%rsi,%rdx),	%rdi	# rdi = end
+	mov	0*4(%rbp),	%eax	# eax = ctx->A
+	mov	1*4(%rbp),	%ebx	# ebx = ctx->B
+	mov	2*4(%rbp),	%ecx	# ecx = ctx->C
+	mov	3*4(%rbp),	%edx	# edx = ctx->D
+	# end is 'rdi'
+	# ptr is 'rsi'
+	# A is 'eax'
+	# B is 'ebx'
+	# C is 'ecx'
+	# D is 'edx'
+
+	cmp	%rdi,		%rsi		# cmp end with ptr
+	je	.Lend				# jmp if ptr == end
+
+	# BEGIN of loop over 16-word blocks
+.Lloop:	# save old values of A, B, C, D
+	mov	%eax,		%r8d
+	mov	%ebx,		%r9d
+	mov	%ecx,		%r14d
+	mov	%edx,		%r15d
+EOF
+round1_step(-1,'%eax','%ebx','%ecx','%edx', '1','0xd76aa478', '7');
+round1_step( 0,'%edx','%eax','%ebx','%ecx', '2','0xe8c7b756','12');
+round1_step( 0,'%ecx','%edx','%eax','%ebx', '3','0x242070db','17');
+round1_step( 0,'%ebx','%ecx','%edx','%eax', '4','0xc1bdceee','22');
+round1_step( 0,'%eax','%ebx','%ecx','%edx', '5','0xf57c0faf', '7');
+round1_step( 0,'%edx','%eax','%ebx','%ecx', '6','0x4787c62a','12');
+round1_step( 0,'%ecx','%edx','%eax','%ebx', '7','0xa8304613','17');
+round1_step( 0,'%ebx','%ecx','%edx','%eax', '8','0xfd469501','22');
+round1_step( 0,'%eax','%ebx','%ecx','%edx', '9','0x698098d8', '7');
+round1_step( 0,'%edx','%eax','%ebx','%ecx','10','0x8b44f7af','12');
+round1_step( 0,'%ecx','%edx','%eax','%ebx','11','0xffff5bb1','17');
+round1_step( 0,'%ebx','%ecx','%edx','%eax','12','0x895cd7be','22');
+round1_step( 0,'%eax','%ebx','%ecx','%edx','13','0x6b901122', '7');
+round1_step( 0,'%edx','%eax','%ebx','%ecx','14','0xfd987193','12');
+round1_step( 0,'%ecx','%edx','%eax','%ebx','15','0xa679438e','17');
+round1_step( 1,'%ebx','%ecx','%edx','%eax', '1','0x49b40821','22');
+
+round2_step(-1,'%eax','%ebx','%ecx','%edx', '6','0xf61e2562', '5');
+round2_step( 0,'%edx','%eax','%ebx','%ecx','11','0xc040b340', '9');
+round2_step( 0,'%ecx','%edx','%eax','%ebx', '0','0x265e5a51','14');
+round2_step( 0,'%ebx','%ecx','%edx','%eax', '5','0xe9b6c7aa','20');
+round2_step( 0,'%eax','%ebx','%ecx','%edx','10','0xd62f105d', '5');
+round2_step( 0,'%edx','%eax','%ebx','%ecx','15', '0x2441453', '9');
+round2_step( 0,'%ecx','%edx','%eax','%ebx', '4','0xd8a1e681','14');
+round2_step( 0,'%ebx','%ecx','%edx','%eax', '9','0xe7d3fbc8','20');
+round2_step( 0,'%eax','%ebx','%ecx','%edx','14','0x21e1cde6', '5');
+round2_step( 0,'%edx','%eax','%ebx','%ecx', '3','0xc33707d6', '9');
+round2_step( 0,'%ecx','%edx','%eax','%ebx', '8','0xf4d50d87','14');
+round2_step( 0,'%ebx','%ecx','%edx','%eax','13','0x455a14ed','20');
+round2_step( 0,'%eax','%ebx','%ecx','%edx', '2','0xa9e3e905', '5');
+round2_step( 0,'%edx','%eax','%ebx','%ecx', '7','0xfcefa3f8', '9');
+round2_step( 0,'%ecx','%edx','%eax','%ebx','12','0x676f02d9','14');
+round2_step( 1,'%ebx','%ecx','%edx','%eax', '5','0x8d2a4c8a','20');
+
+round3_step(-1,'%eax','%ebx','%ecx','%edx', '8','0xfffa3942', '4');
+round3_step( 0,'%edx','%eax','%ebx','%ecx','11','0x8771f681','11');
+round3_step( 0,'%ecx','%edx','%eax','%ebx','14','0x6d9d6122','16');
+round3_step( 0,'%ebx','%ecx','%edx','%eax', '1','0xfde5380c','23');
+round3_step( 0,'%eax','%ebx','%ecx','%edx', '4','0xa4beea44', '4');
+round3_step( 0,'%edx','%eax','%ebx','%ecx', '7','0x4bdecfa9','11');
+round3_step( 0,'%ecx','%edx','%eax','%ebx','10','0xf6bb4b60','16');
+round3_step( 0,'%ebx','%ecx','%edx','%eax','13','0xbebfbc70','23');
+round3_step( 0,'%eax','%ebx','%ecx','%edx', '0','0x289b7ec6', '4');
+round3_step( 0,'%edx','%eax','%ebx','%ecx', '3','0xeaa127fa','11');
+round3_step( 0,'%ecx','%edx','%eax','%ebx', '6','0xd4ef3085','16');
+round3_step( 0,'%ebx','%ecx','%edx','%eax', '9', '0x4881d05','23');
+round3_step( 0,'%eax','%ebx','%ecx','%edx','12','0xd9d4d039', '4');
+round3_step( 0,'%edx','%eax','%ebx','%ecx','15','0xe6db99e5','11');
+round3_step( 0,'%ecx','%edx','%eax','%ebx', '2','0x1fa27cf8','16');
+round3_step( 1,'%ebx','%ecx','%edx','%eax', '0','0xc4ac5665','23');
+
+round4_step(-1,'%eax','%ebx','%ecx','%edx', '7','0xf4292244', '6');
+round4_step( 0,'%edx','%eax','%ebx','%ecx','14','0x432aff97','10');
+round4_step( 0,'%ecx','%edx','%eax','%ebx', '5','0xab9423a7','15');
+round4_step( 0,'%ebx','%ecx','%edx','%eax','12','0xfc93a039','21');
+round4_step( 0,'%eax','%ebx','%ecx','%edx', '3','0x655b59c3', '6');
+round4_step( 0,'%edx','%eax','%ebx','%ecx','10','0x8f0ccc92','10');
+round4_step( 0,'%ecx','%edx','%eax','%ebx', '1','0xffeff47d','15');
+round4_step( 0,'%ebx','%ecx','%edx','%eax', '8','0x85845dd1','21');
+round4_step( 0,'%eax','%ebx','%ecx','%edx','15','0x6fa87e4f', '6');
+round4_step( 0,'%edx','%eax','%ebx','%ecx', '6','0xfe2ce6e0','10');
+round4_step( 0,'%ecx','%edx','%eax','%ebx','13','0xa3014314','15');
+round4_step( 0,'%ebx','%ecx','%edx','%eax', '4','0x4e0811a1','21');
+round4_step( 0,'%eax','%ebx','%ecx','%edx','11','0xf7537e82', '6');
+round4_step( 0,'%edx','%eax','%ebx','%ecx', '2','0xbd3af235','10');
+round4_step( 0,'%ecx','%edx','%eax','%ebx', '9','0x2ad7d2bb','15');
+round4_step( 1,'%ebx','%ecx','%edx','%eax', '0','0xeb86d391','21');
+$code .= <<EOF;
+	# add old values of A, B, C, D
+	add	%r8d,	%eax
+	add	%r9d,	%ebx
+	add	%r14d,	%ecx
+	add	%r15d,	%edx
+
+	# loop control
+	add	\$64,		%rsi		# ptr += 64
+	cmp	%rdi,		%rsi		# cmp end with ptr
+	jb	.Lloop				# jmp if ptr < end
+	# END of loop over 16-word blocks
+
+.Lend:
+	mov	%eax,		0*4(%rbp)	# ctx->A = A
+	mov	%ebx,		1*4(%rbp)	# ctx->B = B
+	mov	%ecx,		2*4(%rbp)	# ctx->C = C
+	mov	%edx,		3*4(%rbp)	# ctx->D = D
+
+	mov	(%rsp),%r15
+.cfi_restore	%r15
+	mov	8(%rsp),%r14
+.cfi_restore	%r14
+	mov	16(%rsp),%r12
+.cfi_restore	%r12
+	mov	24(%rsp),%rbx
+.cfi_restore	%rbx
+	mov	32(%rsp),%rbp
+.cfi_restore	%rbp
+	add	\$40,%rsp
+.cfi_adjust_cfa_offset	-40
+.Lepilogue:
+	ret
+.cfi_endproc
+.size md5_block_asm_data_order,.-md5_block_asm_data_order
+EOF
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+my $rec="%rcx";
+my $frame="%rdx";
+my $context="%r8";
+my $disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	se_handler,\@abi-omnipotent
+.align	16
+se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	lea	.Lprologue(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<.Lprologue
+	jb	.Lin_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	lea	.Lepilogue(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip>=.Lepilogue
+	jae	.Lin_prologue
+
+	lea	40(%rax),%rax
+
+	mov	-8(%rax),%rbp
+	mov	-16(%rax),%rbx
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r14
+	mov	-40(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+.Lin_prologue:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	se_handler,.-se_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_md5_block_asm_data_order
+	.rva	.LSEH_end_md5_block_asm_data_order
+	.rva	.LSEH_info_md5_block_asm_data_order
+
+.section	.xdata
+.align	8
+.LSEH_info_md5_block_asm_data_order:
+	.byte	9,0,0,0
+	.rva	se_handler
+___
+}
+
+print $code;
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/md5/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/md5/build.info
new file mode 100644
index 000000000..e641fecd0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/md5/build.info
@@ -0,0 +1,11 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        md5_dgst.c md5_one.c {- $target{md5_asm_src} -}
+
+GENERATE[md5-586.s]=asm/md5-586.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS)
+
+GENERATE[md5-x86_64.s]=asm/md5-x86_64.pl $(PERLASM_SCHEME)
+
+GENERATE[md5-sparcv9.S]=asm/md5-sparcv9.pl $(PERLASM_SCHEME)
+INCLUDE[md5-sparcv9.o]=..
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/md5/md5_dgst.c b/trunk/3rdparty/openssl-1.1-fit/crypto/md5/md5_dgst.c
new file mode 100644
index 000000000..fbede6742
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/md5/md5_dgst.c
@@ -0,0 +1,164 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "md5_locl.h"
+#include <openssl/opensslv.h>
+
+/*
+ * Implemented from RFC1321 The MD5 Message-Digest Algorithm
+ */
+
+#define INIT_DATA_A (unsigned long)0x67452301L
+#define INIT_DATA_B (unsigned long)0xefcdab89L
+#define INIT_DATA_C (unsigned long)0x98badcfeL
+#define INIT_DATA_D (unsigned long)0x10325476L
+
+int MD5_Init(MD5_CTX *c)
+{
+    memset(c, 0, sizeof(*c));
+    c->A = INIT_DATA_A;
+    c->B = INIT_DATA_B;
+    c->C = INIT_DATA_C;
+    c->D = INIT_DATA_D;
+    return 1;
+}
+
+#ifndef md5_block_data_order
+# ifdef X
+#  undef X
+# endif
+void md5_block_data_order(MD5_CTX *c, const void *data_, size_t num)
+{
+    const unsigned char *data = data_;
+    register unsigned MD32_REG_T A, B, C, D, l;
+# ifndef MD32_XARRAY
+    /* See comment in crypto/sha/sha_locl.h for details. */
+    unsigned MD32_REG_T XX0, XX1, XX2, XX3, XX4, XX5, XX6, XX7,
+        XX8, XX9, XX10, XX11, XX12, XX13, XX14, XX15;
+#  define X(i)   XX##i
+# else
+    MD5_LONG XX[MD5_LBLOCK];
+#  define X(i)   XX[i]
+# endif
+
+    A = c->A;
+    B = c->B;
+    C = c->C;
+    D = c->D;
+
+    for (; num--;) {
+        (void)HOST_c2l(data, l);
+        X(0) = l;
+        (void)HOST_c2l(data, l);
+        X(1) = l;
+        /* Round 0 */
+        R0(A, B, C, D, X(0), 7, 0xd76aa478L);
+        (void)HOST_c2l(data, l);
+        X(2) = l;
+        R0(D, A, B, C, X(1), 12, 0xe8c7b756L);
+        (void)HOST_c2l(data, l);
+        X(3) = l;
+        R0(C, D, A, B, X(2), 17, 0x242070dbL);
+        (void)HOST_c2l(data, l);
+        X(4) = l;
+        R0(B, C, D, A, X(3), 22, 0xc1bdceeeL);
+        (void)HOST_c2l(data, l);
+        X(5) = l;
+        R0(A, B, C, D, X(4), 7, 0xf57c0fafL);
+        (void)HOST_c2l(data, l);
+        X(6) = l;
+        R0(D, A, B, C, X(5), 12, 0x4787c62aL);
+        (void)HOST_c2l(data, l);
+        X(7) = l;
+        R0(C, D, A, B, X(6), 17, 0xa8304613L);
+        (void)HOST_c2l(data, l);
+        X(8) = l;
+        R0(B, C, D, A, X(7), 22, 0xfd469501L);
+        (void)HOST_c2l(data, l);
+        X(9) = l;
+        R0(A, B, C, D, X(8), 7, 0x698098d8L);
+        (void)HOST_c2l(data, l);
+        X(10) = l;
+        R0(D, A, B, C, X(9), 12, 0x8b44f7afL);
+        (void)HOST_c2l(data, l);
+        X(11) = l;
+        R0(C, D, A, B, X(10), 17, 0xffff5bb1L);
+        (void)HOST_c2l(data, l);
+        X(12) = l;
+        R0(B, C, D, A, X(11), 22, 0x895cd7beL);
+        (void)HOST_c2l(data, l);
+        X(13) = l;
+        R0(A, B, C, D, X(12), 7, 0x6b901122L);
+        (void)HOST_c2l(data, l);
+        X(14) = l;
+        R0(D, A, B, C, X(13), 12, 0xfd987193L);
+        (void)HOST_c2l(data, l);
+        X(15) = l;
+        R0(C, D, A, B, X(14), 17, 0xa679438eL);
+        R0(B, C, D, A, X(15), 22, 0x49b40821L);
+        /* Round 1 */
+        R1(A, B, C, D, X(1), 5, 0xf61e2562L);
+        R1(D, A, B, C, X(6), 9, 0xc040b340L);
+        R1(C, D, A, B, X(11), 14, 0x265e5a51L);
+        R1(B, C, D, A, X(0), 20, 0xe9b6c7aaL);
+        R1(A, B, C, D, X(5), 5, 0xd62f105dL);
+        R1(D, A, B, C, X(10), 9, 0x02441453L);
+        R1(C, D, A, B, X(15), 14, 0xd8a1e681L);
+        R1(B, C, D, A, X(4), 20, 0xe7d3fbc8L);
+        R1(A, B, C, D, X(9), 5, 0x21e1cde6L);
+        R1(D, A, B, C, X(14), 9, 0xc33707d6L);
+        R1(C, D, A, B, X(3), 14, 0xf4d50d87L);
+        R1(B, C, D, A, X(8), 20, 0x455a14edL);
+        R1(A, B, C, D, X(13), 5, 0xa9e3e905L);
+        R1(D, A, B, C, X(2), 9, 0xfcefa3f8L);
+        R1(C, D, A, B, X(7), 14, 0x676f02d9L);
+        R1(B, C, D, A, X(12), 20, 0x8d2a4c8aL);
+        /* Round 2 */
+        R2(A, B, C, D, X(5), 4, 0xfffa3942L);
+        R2(D, A, B, C, X(8), 11, 0x8771f681L);
+        R2(C, D, A, B, X(11), 16, 0x6d9d6122L);
+        R2(B, C, D, A, X(14), 23, 0xfde5380cL);
+        R2(A, B, C, D, X(1), 4, 0xa4beea44L);
+        R2(D, A, B, C, X(4), 11, 0x4bdecfa9L);
+        R2(C, D, A, B, X(7), 16, 0xf6bb4b60L);
+        R2(B, C, D, A, X(10), 23, 0xbebfbc70L);
+        R2(A, B, C, D, X(13), 4, 0x289b7ec6L);
+        R2(D, A, B, C, X(0), 11, 0xeaa127faL);
+        R2(C, D, A, B, X(3), 16, 0xd4ef3085L);
+        R2(B, C, D, A, X(6), 23, 0x04881d05L);
+        R2(A, B, C, D, X(9), 4, 0xd9d4d039L);
+        R2(D, A, B, C, X(12), 11, 0xe6db99e5L);
+        R2(C, D, A, B, X(15), 16, 0x1fa27cf8L);
+        R2(B, C, D, A, X(2), 23, 0xc4ac5665L);
+        /* Round 3 */
+        R3(A, B, C, D, X(0), 6, 0xf4292244L);
+        R3(D, A, B, C, X(7), 10, 0x432aff97L);
+        R3(C, D, A, B, X(14), 15, 0xab9423a7L);
+        R3(B, C, D, A, X(5), 21, 0xfc93a039L);
+        R3(A, B, C, D, X(12), 6, 0x655b59c3L);
+        R3(D, A, B, C, X(3), 10, 0x8f0ccc92L);
+        R3(C, D, A, B, X(10), 15, 0xffeff47dL);
+        R3(B, C, D, A, X(1), 21, 0x85845dd1L);
+        R3(A, B, C, D, X(8), 6, 0x6fa87e4fL);
+        R3(D, A, B, C, X(15), 10, 0xfe2ce6e0L);
+        R3(C, D, A, B, X(6), 15, 0xa3014314L);
+        R3(B, C, D, A, X(13), 21, 0x4e0811a1L);
+        R3(A, B, C, D, X(4), 6, 0xf7537e82L);
+        R3(D, A, B, C, X(11), 10, 0xbd3af235L);
+        R3(C, D, A, B, X(2), 15, 0x2ad7d2bbL);
+        R3(B, C, D, A, X(9), 21, 0xeb86d391L);
+
+        A = c->A += A;
+        B = c->B += B;
+        C = c->C += C;
+        D = c->D += D;
+    }
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/md5/md5_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/md5/md5_locl.h
new file mode 100644
index 000000000..4eb7e50ef
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/md5/md5_locl.h
@@ -0,0 +1,80 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdlib.h>
+#include <string.h>
+#include <openssl/e_os2.h>
+#include <openssl/md5.h>
+
+#ifdef MD5_ASM
+# if defined(__i386) || defined(__i386__) || defined(_M_IX86) || \
+     defined(__x86_64) || defined(__x86_64__) || defined(_M_AMD64) || defined(_M_X64)
+#  define md5_block_data_order md5_block_asm_data_order
+# elif defined(__ia64) || defined(__ia64__) || defined(_M_IA64)
+#  define md5_block_data_order md5_block_asm_data_order
+# elif defined(__sparc) || defined(__sparc__)
+#  define md5_block_data_order md5_block_asm_data_order
+# endif
+#endif
+
+void md5_block_data_order(MD5_CTX *c, const void *p, size_t num);
+
+#define DATA_ORDER_IS_LITTLE_ENDIAN
+
+#define HASH_LONG               MD5_LONG
+#define HASH_CTX                MD5_CTX
+#define HASH_CBLOCK             MD5_CBLOCK
+#define HASH_UPDATE             MD5_Update
+#define HASH_TRANSFORM          MD5_Transform
+#define HASH_FINAL              MD5_Final
+#define HASH_MAKE_STRING(c,s)   do {    \
+        unsigned long ll;               \
+        ll=(c)->A; (void)HOST_l2c(ll,(s));      \
+        ll=(c)->B; (void)HOST_l2c(ll,(s));      \
+        ll=(c)->C; (void)HOST_l2c(ll,(s));      \
+        ll=(c)->D; (void)HOST_l2c(ll,(s));      \
+        } while (0)
+#define HASH_BLOCK_DATA_ORDER   md5_block_data_order
+
+#include "internal/md32_common.h"
+
+/*-
+#define F(x,y,z)        (((x) & (y))  |  ((~(x)) & (z)))
+#define G(x,y,z)        (((x) & (z))  |  ((y) & (~(z))))
+*/
+
+/*
+ * As pointed out by Wei Dai, the above can be simplified to the code
+ * below.  Wei attributes these optimizations to Peter Gutmann's
+ * SHS code, and he attributes it to Rich Schroeppel.
+ */
+#define F(b,c,d)        ((((c) ^ (d)) & (b)) ^ (d))
+#define G(b,c,d)        ((((b) ^ (c)) & (d)) ^ (c))
+#define H(b,c,d)        ((b) ^ (c) ^ (d))
+#define I(b,c,d)        (((~(d)) | (b)) ^ (c))
+
+#define R0(a,b,c,d,k,s,t) { \
+        a+=((k)+(t)+F((b),(c),(d))); \
+        a=ROTATE(a,s); \
+        a+=b; };\
+
+#define R1(a,b,c,d,k,s,t) { \
+        a+=((k)+(t)+G((b),(c),(d))); \
+        a=ROTATE(a,s); \
+        a+=b; };
+
+#define R2(a,b,c,d,k,s,t) { \
+        a+=((k)+(t)+H((b),(c),(d))); \
+        a=ROTATE(a,s); \
+        a+=b; };
+
+#define R3(a,b,c,d,k,s,t) { \
+        a+=((k)+(t)+I((b),(c),(d))); \
+        a=ROTATE(a,s); \
+        a+=b; };
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/md5/md5_one.c b/trunk/3rdparty/openssl-1.1-fit/crypto/md5/md5_one.c
new file mode 100644
index 000000000..c3bf2f88f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/md5/md5_one.c
@@ -0,0 +1,47 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include <openssl/md5.h>
+#include <openssl/crypto.h>
+
+#ifdef CHARSET_EBCDIC
+# include <openssl/ebcdic.h>
+#endif
+
+unsigned char *MD5(const unsigned char *d, size_t n, unsigned char *md)
+{
+    MD5_CTX c;
+    static unsigned char m[MD5_DIGEST_LENGTH];
+
+    if (md == NULL)
+        md = m;
+    if (!MD5_Init(&c))
+        return NULL;
+#ifndef CHARSET_EBCDIC
+    MD5_Update(&c, d, n);
+#else
+    {
+        char temp[1024];
+        unsigned long chunk;
+
+        while (n > 0) {
+            chunk = (n > sizeof(temp)) ? sizeof(temp) : n;
+            ebcdic2ascii(temp, d, chunk);
+            MD5_Update(&c, temp, chunk);
+            n -= chunk;
+            d += chunk;
+        }
+    }
+#endif
+    MD5_Final(md, &c);
+    OPENSSL_cleanse(&c, sizeof(c)); /* security consideration */
+    return md;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/mdc2/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/mdc2/build.info
new file mode 100644
index 000000000..8fe6878d6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/mdc2/build.info
@@ -0,0 +1,3 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        mdc2dgst.c mdc2_one.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/mdc2/mdc2_one.c b/trunk/3rdparty/openssl-1.1-fit/crypto/mdc2/mdc2_one.c
new file mode 100644
index 000000000..58e1e0fdf
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/mdc2/mdc2_one.c
@@ -0,0 +1,27 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/mdc2.h>
+
+unsigned char *MDC2(const unsigned char *d, size_t n, unsigned char *md)
+{
+    MDC2_CTX c;
+    static unsigned char m[MDC2_DIGEST_LENGTH];
+
+    if (md == NULL)
+        md = m;
+    if (!MDC2_Init(&c))
+        return NULL;
+    MDC2_Update(&c, d, n);
+    MDC2_Final(md, &c);
+    OPENSSL_cleanse(&c, sizeof(c)); /* security consideration */
+    return md;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/mdc2/mdc2dgst.c b/trunk/3rdparty/openssl-1.1-fit/crypto/mdc2/mdc2dgst.c
new file mode 100644
index 000000000..14233b9ab
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/mdc2/mdc2dgst.c
@@ -0,0 +1,126 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <openssl/crypto.h>
+#include <openssl/des.h>
+#include <openssl/mdc2.h>
+
+#undef c2l
+#define c2l(c,l)        (l =((DES_LONG)(*((c)++)))    , \
+                         l|=((DES_LONG)(*((c)++)))<< 8L, \
+                         l|=((DES_LONG)(*((c)++)))<<16L, \
+                         l|=((DES_LONG)(*((c)++)))<<24L)
+
+#undef l2c
+#define l2c(l,c)        (*((c)++)=(unsigned char)(((l)     )&0xff), \
+                        *((c)++)=(unsigned char)(((l)>> 8L)&0xff), \
+                        *((c)++)=(unsigned char)(((l)>>16L)&0xff), \
+                        *((c)++)=(unsigned char)(((l)>>24L)&0xff))
+
+static void mdc2_body(MDC2_CTX *c, const unsigned char *in, size_t len);
+int MDC2_Init(MDC2_CTX *c)
+{
+    c->num = 0;
+    c->pad_type = 1;
+    memset(&(c->h[0]), 0x52, MDC2_BLOCK);
+    memset(&(c->hh[0]), 0x25, MDC2_BLOCK);
+    return 1;
+}
+
+int MDC2_Update(MDC2_CTX *c, const unsigned char *in, size_t len)
+{
+    size_t i, j;
+
+    i = c->num;
+    if (i != 0) {
+        if (len < MDC2_BLOCK - i) {
+            /* partial block */
+            memcpy(&(c->data[i]), in, len);
+            c->num += (int)len;
+            return 1;
+        } else {
+            /* filled one */
+            j = MDC2_BLOCK - i;
+            memcpy(&(c->data[i]), in, j);
+            len -= j;
+            in += j;
+            c->num = 0;
+            mdc2_body(c, &(c->data[0]), MDC2_BLOCK);
+        }
+    }
+    i = len & ~((size_t)MDC2_BLOCK - 1);
+    if (i > 0)
+        mdc2_body(c, in, i);
+    j = len - i;
+    if (j > 0) {
+        memcpy(&(c->data[0]), &(in[i]), j);
+        c->num = (int)j;
+    }
+    return 1;
+}
+
+static void mdc2_body(MDC2_CTX *c, const unsigned char *in, size_t len)
+{
+    register DES_LONG tin0, tin1;
+    register DES_LONG ttin0, ttin1;
+    DES_LONG d[2], dd[2];
+    DES_key_schedule k;
+    unsigned char *p;
+    size_t i;
+
+    for (i = 0; i < len; i += 8) {
+        c2l(in, tin0);
+        d[0] = dd[0] = tin0;
+        c2l(in, tin1);
+        d[1] = dd[1] = tin1;
+        c->h[0] = (c->h[0] & 0x9f) | 0x40;
+        c->hh[0] = (c->hh[0] & 0x9f) | 0x20;
+
+        DES_set_odd_parity(&c->h);
+        DES_set_key_unchecked(&c->h, &k);
+        DES_encrypt1(d, &k, 1);
+
+        DES_set_odd_parity(&c->hh);
+        DES_set_key_unchecked(&c->hh, &k);
+        DES_encrypt1(dd, &k, 1);
+
+        ttin0 = tin0 ^ dd[0];
+        ttin1 = tin1 ^ dd[1];
+        tin0 ^= d[0];
+        tin1 ^= d[1];
+
+        p = c->h;
+        l2c(tin0, p);
+        l2c(ttin1, p);
+        p = c->hh;
+        l2c(ttin0, p);
+        l2c(tin1, p);
+    }
+}
+
+int MDC2_Final(unsigned char *md, MDC2_CTX *c)
+{
+    unsigned int i;
+    int j;
+
+    i = c->num;
+    j = c->pad_type;
+    if ((i > 0) || (j == 2)) {
+        if (j == 2)
+            c->data[i++] = 0x80;
+        memset(&(c->data[i]), 0, MDC2_BLOCK - i);
+        mdc2_body(c, c->data, MDC2_BLOCK);
+    }
+    memcpy(md, (char *)c->h, MDC2_BLOCK);
+    memcpy(&(md[MDC2_BLOCK]), (char *)c->hh, MDC2_BLOCK);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/mem.c b/trunk/3rdparty/openssl-1.1-fit/crypto/mem.c
new file mode 100644
index 000000000..780053ffe
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/mem.c
@@ -0,0 +1,323 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include "internal/cryptlib.h"
+#include "internal/cryptlib_int.h"
+#include <stdio.h>
+#include <stdlib.h>
+#include <limits.h>
+#include <openssl/crypto.h>
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG_BACKTRACE
+# include <execinfo.h>
+#endif
+
+/*
+ * the following pointers may be changed as long as 'allow_customize' is set
+ */
+static int allow_customize = 1;
+
+static void *(*malloc_impl)(size_t, const char *, int)
+    = CRYPTO_malloc;
+static void *(*realloc_impl)(void *, size_t, const char *, int)
+    = CRYPTO_realloc;
+static void (*free_impl)(void *, const char *, int)
+    = CRYPTO_free;
+
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+# include "internal/tsan_assist.h"
+
+static TSAN_QUALIFIER int malloc_count;
+static TSAN_QUALIFIER int realloc_count;
+static TSAN_QUALIFIER int free_count;
+
+# define INCREMENT(x) tsan_counter(&(x))
+
+static char *md_failstring;
+static long md_count;
+static int md_fail_percent = 0;
+static int md_tracefd = -1;
+static int call_malloc_debug = 1;
+
+static void parseit(void);
+static int shouldfail(void);
+
+# define FAILTEST() if (shouldfail()) return NULL
+
+#else
+static int call_malloc_debug = 0;
+
+# define INCREMENT(x) /* empty */
+# define FAILTEST() /* empty */
+#endif
+
+int CRYPTO_set_mem_functions(
+        void *(*m)(size_t, const char *, int),
+        void *(*r)(void *, size_t, const char *, int),
+        void (*f)(void *, const char *, int))
+{
+    if (!allow_customize)
+        return 0;
+    if (m)
+        malloc_impl = m;
+    if (r)
+        realloc_impl = r;
+    if (f)
+        free_impl = f;
+    return 1;
+}
+
+int CRYPTO_set_mem_debug(int flag)
+{
+    if (!allow_customize)
+        return 0;
+    call_malloc_debug = flag;
+    return 1;
+}
+
+void CRYPTO_get_mem_functions(
+        void *(**m)(size_t, const char *, int),
+        void *(**r)(void *, size_t, const char *, int),
+        void (**f)(void *, const char *, int))
+{
+    if (m != NULL)
+        *m = malloc_impl;
+    if (r != NULL)
+        *r = realloc_impl;
+    if (f != NULL)
+        *f = free_impl;
+}
+
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+void CRYPTO_get_alloc_counts(int *mcount, int *rcount, int *fcount)
+{
+    if (mcount != NULL)
+        *mcount = tsan_load(&malloc_count);
+    if (rcount != NULL)
+        *rcount = tsan_load(&realloc_count);
+    if (fcount != NULL)
+        *fcount = tsan_load(&free_count);
+}
+
+/*
+ * Parse a "malloc failure spec" string.  This likes like a set of fields
+ * separated by semicolons.  Each field has a count and an optional failure
+ * percentage.  For example:
+ *          100@0;100@25;0@0
+ *    or    100;100@25;0
+ * This means 100 mallocs succeed, then next 100 fail 25% of the time, and
+ * all remaining (count is zero) succeed.
+ */
+static void parseit(void)
+{
+    char *semi = strchr(md_failstring, ';');
+    char *atsign;
+
+    if (semi != NULL)
+        *semi++ = '\0';
+
+    /* Get the count (atol will stop at the @ if there), and percentage */
+    md_count = atol(md_failstring);
+    atsign = strchr(md_failstring, '@');
+    md_fail_percent = atsign == NULL ? 0 : atoi(atsign + 1);
+
+    if (semi != NULL)
+        md_failstring = semi;
+}
+
+/*
+ * Windows doesn't have random(), but it has rand()
+ * Some rand() implementations aren't good, but we're not
+ * dealing with secure randomness here.
+ */
+# ifdef _WIN32
+#  define random() rand()
+# endif
+/*
+ * See if the current malloc should fail.
+ */
+static int shouldfail(void)
+{
+    int roll = (int)(random() % 100);
+    int shoulditfail = roll < md_fail_percent;
+# ifndef _WIN32
+/* suppressed on Windows as POSIX-like file descriptors are non-inheritable */
+    int len;
+    char buff[80];
+
+    if (md_tracefd > 0) {
+        BIO_snprintf(buff, sizeof(buff),
+                     "%c C%ld %%%d R%d\n",
+                     shoulditfail ? '-' : '+', md_count, md_fail_percent, roll);
+        len = strlen(buff);
+        if (write(md_tracefd, buff, len) != len)
+            perror("shouldfail write failed");
+#  ifndef OPENSSL_NO_CRYPTO_MDEBUG_BACKTRACE
+        if (shoulditfail) {
+            void *addrs[30];
+            int num = backtrace(addrs, OSSL_NELEM(addrs));
+
+            backtrace_symbols_fd(addrs, num, md_tracefd);
+        }
+#  endif
+    }
+# endif
+
+    if (md_count) {
+        /* If we used up this one, go to the next. */
+        if (--md_count == 0)
+            parseit();
+    }
+
+    return shoulditfail;
+}
+
+void ossl_malloc_setup_failures(void)
+{
+    const char *cp = getenv("OPENSSL_MALLOC_FAILURES");
+
+    if (cp != NULL && (md_failstring = strdup(cp)) != NULL)
+        parseit();
+    if ((cp = getenv("OPENSSL_MALLOC_FD")) != NULL)
+        md_tracefd = atoi(cp);
+}
+#endif
+
+void *CRYPTO_malloc(size_t num, const char *file, int line)
+{
+    void *ret = NULL;
+
+    INCREMENT(malloc_count);
+    if (malloc_impl != NULL && malloc_impl != CRYPTO_malloc)
+        return malloc_impl(num, file, line);
+
+    if (num == 0)
+        return NULL;
+
+    FAILTEST();
+    if (allow_customize) {
+        /*
+         * Disallow customization after the first allocation. We only set this
+         * if necessary to avoid a store to the same cache line on every
+         * allocation.
+         */
+        allow_customize = 0;
+    }
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+    if (call_malloc_debug) {
+        CRYPTO_mem_debug_malloc(NULL, num, 0, file, line);
+        ret = malloc(num);
+        CRYPTO_mem_debug_malloc(ret, num, 1, file, line);
+    } else {
+        ret = malloc(num);
+    }
+#else
+    (void)(file); (void)(line);
+    ret = malloc(num);
+#endif
+
+    return ret;
+}
+
+void *CRYPTO_zalloc(size_t num, const char *file, int line)
+{
+    void *ret = CRYPTO_malloc(num, file, line);
+
+    FAILTEST();
+    if (ret != NULL)
+        memset(ret, 0, num);
+    return ret;
+}
+
+void *CRYPTO_realloc(void *str, size_t num, const char *file, int line)
+{
+    INCREMENT(realloc_count);
+    if (realloc_impl != NULL && realloc_impl != &CRYPTO_realloc)
+        return realloc_impl(str, num, file, line);
+
+    FAILTEST();
+    if (str == NULL)
+        return CRYPTO_malloc(num, file, line);
+
+    if (num == 0) {
+        CRYPTO_free(str, file, line);
+        return NULL;
+    }
+
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+    if (call_malloc_debug) {
+        void *ret;
+        CRYPTO_mem_debug_realloc(str, NULL, num, 0, file, line);
+        ret = realloc(str, num);
+        CRYPTO_mem_debug_realloc(str, ret, num, 1, file, line);
+        return ret;
+    }
+#else
+    (void)(file); (void)(line);
+#endif
+    return realloc(str, num);
+
+}
+
+void *CRYPTO_clear_realloc(void *str, size_t old_len, size_t num,
+                           const char *file, int line)
+{
+    void *ret = NULL;
+
+    if (str == NULL)
+        return CRYPTO_malloc(num, file, line);
+
+    if (num == 0) {
+        CRYPTO_clear_free(str, old_len, file, line);
+        return NULL;
+    }
+
+    /* Can't shrink the buffer since memcpy below copies |old_len| bytes. */
+    if (num < old_len) {
+        OPENSSL_cleanse((char*)str + num, old_len - num);
+        return str;
+    }
+
+    ret = CRYPTO_malloc(num, file, line);
+    if (ret != NULL) {
+        memcpy(ret, str, old_len);
+        CRYPTO_clear_free(str, old_len, file, line);
+    }
+    return ret;
+}
+
+void CRYPTO_free(void *str, const char *file, int line)
+{
+    INCREMENT(free_count);
+    if (free_impl != NULL && free_impl != &CRYPTO_free) {
+        free_impl(str, file, line);
+        return;
+    }
+
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+    if (call_malloc_debug) {
+        CRYPTO_mem_debug_free(str, 0, file, line);
+        free(str);
+        CRYPTO_mem_debug_free(str, 1, file, line);
+    } else {
+        free(str);
+    }
+#else
+    free(str);
+#endif
+}
+
+void CRYPTO_clear_free(void *str, size_t num, const char *file, int line)
+{
+    if (str == NULL)
+        return;
+    if (num)
+        OPENSSL_cleanse(str, num);
+    CRYPTO_free(str, file, line);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/mem_clr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/mem_clr.c
new file mode 100644
index 000000000..35bfb74ea
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/mem_clr.c
@@ -0,0 +1,25 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include <openssl/crypto.h>
+
+/*
+ * Pointer to memset is volatile so that compiler must de-reference
+ * the pointer and can't assume that it points to any function in
+ * particular (such as memset, which it then might further "optimize")
+ */
+typedef void *(*memset_t)(void *, int, size_t);
+
+static volatile memset_t memset_func = memset;
+
+void OPENSSL_cleanse(void *ptr, size_t len)
+{
+    memset_func(ptr, 0, len);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/mem_dbg.c b/trunk/3rdparty/openssl-1.1-fit/crypto/mem_dbg.c
new file mode 100644
index 000000000..0489e97ad
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/mem_dbg.c
@@ -0,0 +1,670 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <time.h>
+#include "internal/cryptlib.h"
+#include "internal/thread_once.h"
+#include <openssl/crypto.h>
+#include <openssl/buffer.h>
+#include "internal/bio.h"
+#include <openssl/lhash.h>
+
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG_BACKTRACE
+# include <execinfo.h>
+#endif
+
+/*
+ * The state changes to CRYPTO_MEM_CHECK_ON | CRYPTO_MEM_CHECK_ENABLE when
+ * the application asks for it (usually after library initialisation for
+ * which no book-keeping is desired). State CRYPTO_MEM_CHECK_ON exists only
+ * temporarily when the library thinks that certain allocations should not be
+ * checked (e.g. the data structures used for memory checking).  It is not
+ * suitable as an initial state: the library will unexpectedly enable memory
+ * checking when it executes one of those sections that want to disable
+ * checking temporarily. State CRYPTO_MEM_CHECK_ENABLE without ..._ON makes
+ * no sense whatsoever.
+ */
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+static int mh_mode = CRYPTO_MEM_CHECK_OFF;
+#endif
+
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+static unsigned long order = 0; /* number of memory requests */
+
+/*-
+ * For application-defined information (static C-string `info')
+ * to be displayed in memory leak list.
+ * Each thread has its own stack.  For applications, there is
+ *   OPENSSL_mem_debug_push("...")     to push an entry,
+ *   OPENSSL_mem_debug_pop()     to pop an entry,
+ */
+struct app_mem_info_st {
+    CRYPTO_THREAD_ID threadid;
+    const char *file;
+    int line;
+    const char *info;
+    struct app_mem_info_st *next; /* tail of thread's stack */
+    int references;
+};
+
+static CRYPTO_ONCE memdbg_init = CRYPTO_ONCE_STATIC_INIT;
+CRYPTO_RWLOCK *memdbg_lock;
+static CRYPTO_RWLOCK *long_memdbg_lock;
+static CRYPTO_THREAD_LOCAL appinfokey;
+
+/* memory-block description */
+struct mem_st {
+    void *addr;
+    int num;
+    const char *file;
+    int line;
+    CRYPTO_THREAD_ID threadid;
+    unsigned long order;
+    time_t time;
+    APP_INFO *app_info;
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG_BACKTRACE
+    void *array[30];
+    size_t array_siz;
+#endif
+};
+
+/*
+ * hash-table of memory requests (address as * key); access requires
+ * long_memdbg_lock lock
+ */
+static LHASH_OF(MEM) *mh = NULL;
+
+/* num_disable > 0 iff mh_mode == CRYPTO_MEM_CHECK_ON (w/o ..._ENABLE) */
+static unsigned int num_disable = 0;
+
+/*
+ * Valid iff num_disable > 0.  long_memdbg_lock is locked exactly in this
+ * case (by the thread named in disabling_thread).
+ */
+static CRYPTO_THREAD_ID disabling_threadid;
+
+DEFINE_RUN_ONCE_STATIC(do_memdbg_init)
+{
+    memdbg_lock = CRYPTO_THREAD_lock_new();
+    long_memdbg_lock = CRYPTO_THREAD_lock_new();
+    if (memdbg_lock == NULL || long_memdbg_lock == NULL
+        || !CRYPTO_THREAD_init_local(&appinfokey, NULL)) {
+        CRYPTO_THREAD_lock_free(memdbg_lock);
+        memdbg_lock = NULL;
+        CRYPTO_THREAD_lock_free(long_memdbg_lock);
+        long_memdbg_lock = NULL;
+        return 0;
+    }
+    return 1;
+}
+
+static void app_info_free(APP_INFO *inf)
+{
+    if (inf == NULL)
+        return;
+    if (--(inf->references) <= 0) {
+        app_info_free(inf->next);
+        OPENSSL_free(inf);
+    }
+}
+#endif
+
+int CRYPTO_mem_ctrl(int mode)
+{
+#ifdef OPENSSL_NO_CRYPTO_MDEBUG
+    return mode - mode;
+#else
+    int ret = mh_mode;
+
+    if (!RUN_ONCE(&memdbg_init, do_memdbg_init))
+        return -1;
+
+    CRYPTO_THREAD_write_lock(memdbg_lock);
+    switch (mode) {
+    default:
+        break;
+
+    case CRYPTO_MEM_CHECK_ON:
+        mh_mode = CRYPTO_MEM_CHECK_ON | CRYPTO_MEM_CHECK_ENABLE;
+        num_disable = 0;
+        break;
+
+    case CRYPTO_MEM_CHECK_OFF:
+        mh_mode = 0;
+        num_disable = 0;
+        break;
+
+    /* switch off temporarily (for library-internal use): */
+    case CRYPTO_MEM_CHECK_DISABLE:
+        if (mh_mode & CRYPTO_MEM_CHECK_ON) {
+            CRYPTO_THREAD_ID cur = CRYPTO_THREAD_get_current_id();
+            /* see if we don't have long_memdbg_lock already */
+            if (!num_disable
+                || !CRYPTO_THREAD_compare_id(disabling_threadid, cur)) {
+                /*
+                 * Long-time lock long_memdbg_lock must not be claimed
+                 * while we're holding memdbg_lock, or we'll deadlock
+                 * if somebody else holds long_memdbg_lock (and cannot
+                 * release it because we block entry to this function). Give
+                 * them a chance, first, and then claim the locks in
+                 * appropriate order (long-time lock first).
+                 */
+                CRYPTO_THREAD_unlock(memdbg_lock);
+                /*
+                 * Note that after we have waited for long_memdbg_lock and
+                 * memdbg_lock, we'll still be in the right "case" and
+                 * "if" branch because MemCheck_start and MemCheck_stop may
+                 * never be used while there are multiple OpenSSL threads.
+                 */
+                CRYPTO_THREAD_write_lock(long_memdbg_lock);
+                CRYPTO_THREAD_write_lock(memdbg_lock);
+                mh_mode &= ~CRYPTO_MEM_CHECK_ENABLE;
+                disabling_threadid = cur;
+            }
+            num_disable++;
+        }
+        break;
+
+    case CRYPTO_MEM_CHECK_ENABLE:
+        if (mh_mode & CRYPTO_MEM_CHECK_ON) {
+            if (num_disable) {  /* always true, or something is going wrong */
+                num_disable--;
+                if (num_disable == 0) {
+                    mh_mode |= CRYPTO_MEM_CHECK_ENABLE;
+                    CRYPTO_THREAD_unlock(long_memdbg_lock);
+                }
+            }
+        }
+        break;
+    }
+    CRYPTO_THREAD_unlock(memdbg_lock);
+    return ret;
+#endif
+}
+
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG
+
+static int mem_check_on(void)
+{
+    int ret = 0;
+    CRYPTO_THREAD_ID cur;
+
+    if (mh_mode & CRYPTO_MEM_CHECK_ON) {
+        if (!RUN_ONCE(&memdbg_init, do_memdbg_init))
+            return 0;
+
+        cur = CRYPTO_THREAD_get_current_id();
+        CRYPTO_THREAD_read_lock(memdbg_lock);
+
+        ret = (mh_mode & CRYPTO_MEM_CHECK_ENABLE)
+            || !CRYPTO_THREAD_compare_id(disabling_threadid, cur);
+
+        CRYPTO_THREAD_unlock(memdbg_lock);
+    }
+    return ret;
+}
+
+static int mem_cmp(const MEM *a, const MEM *b)
+{
+#ifdef _WIN64
+    const char *ap = (const char *)a->addr, *bp = (const char *)b->addr;
+    if (ap == bp)
+        return 0;
+    else if (ap > bp)
+        return 1;
+    else
+        return -1;
+#else
+    return (const char *)a->addr - (const char *)b->addr;
+#endif
+}
+
+static unsigned long mem_hash(const MEM *a)
+{
+    size_t ret;
+
+    ret = (size_t)a->addr;
+
+    ret = ret * 17851 + (ret >> 14) * 7 + (ret >> 4) * 251;
+    return ret;
+}
+
+/* returns 1 if there was an info to pop, 0 if the stack was empty. */
+static int pop_info(void)
+{
+    APP_INFO *current = NULL;
+
+    if (!RUN_ONCE(&memdbg_init, do_memdbg_init))
+        return 0;
+
+    current = (APP_INFO *)CRYPTO_THREAD_get_local(&appinfokey);
+    if (current != NULL) {
+        APP_INFO *next = current->next;
+
+        if (next != NULL) {
+            next->references++;
+            CRYPTO_THREAD_set_local(&appinfokey, next);
+        } else {
+            CRYPTO_THREAD_set_local(&appinfokey, NULL);
+        }
+        if (--(current->references) <= 0) {
+            current->next = NULL;
+            if (next != NULL)
+                next->references--;
+            OPENSSL_free(current);
+        }
+        return 1;
+    }
+    return 0;
+}
+
+int CRYPTO_mem_debug_push(const char *info, const char *file, int line)
+{
+    APP_INFO *ami, *amim;
+    int ret = 0;
+
+    if (mem_check_on()) {
+        CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_DISABLE);
+
+        if (!RUN_ONCE(&memdbg_init, do_memdbg_init)
+            || (ami = OPENSSL_malloc(sizeof(*ami))) == NULL)
+            goto err;
+
+        ami->threadid = CRYPTO_THREAD_get_current_id();
+        ami->file = file;
+        ami->line = line;
+        ami->info = info;
+        ami->references = 1;
+        ami->next = NULL;
+
+        amim = (APP_INFO *)CRYPTO_THREAD_get_local(&appinfokey);
+        CRYPTO_THREAD_set_local(&appinfokey, ami);
+
+        if (amim != NULL)
+            ami->next = amim;
+        ret = 1;
+ err:
+        CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ENABLE);
+    }
+
+    return ret;
+}
+
+int CRYPTO_mem_debug_pop(void)
+{
+    int ret = 0;
+
+    if (mem_check_on()) {
+        CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_DISABLE);
+        ret = pop_info();
+        CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ENABLE);
+    }
+    return ret;
+}
+
+static unsigned long break_order_num = 0;
+
+void CRYPTO_mem_debug_malloc(void *addr, size_t num, int before_p,
+                             const char *file, int line)
+{
+    MEM *m, *mm;
+    APP_INFO *amim;
+
+    switch (before_p & 127) {
+    case 0:
+        break;
+    case 1:
+        if (addr == NULL)
+            break;
+
+        if (mem_check_on()) {
+            CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_DISABLE);
+
+            if (!RUN_ONCE(&memdbg_init, do_memdbg_init)
+                || (m = OPENSSL_malloc(sizeof(*m))) == NULL) {
+                OPENSSL_free(addr);
+                CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ENABLE);
+                return;
+            }
+            if (mh == NULL) {
+                if ((mh = lh_MEM_new(mem_hash, mem_cmp)) == NULL) {
+                    OPENSSL_free(addr);
+                    OPENSSL_free(m);
+                    addr = NULL;
+                    goto err;
+                }
+            }
+
+            m->addr = addr;
+            m->file = file;
+            m->line = line;
+            m->num = num;
+            m->threadid = CRYPTO_THREAD_get_current_id();
+
+            if (order == break_order_num) {
+                /* BREAK HERE */
+                m->order = order;
+            }
+            m->order = order++;
+# ifndef OPENSSL_NO_CRYPTO_MDEBUG_BACKTRACE
+            m->array_siz = backtrace(m->array, OSSL_NELEM(m->array));
+# endif
+            m->time = time(NULL);
+
+            amim = (APP_INFO *)CRYPTO_THREAD_get_local(&appinfokey);
+            m->app_info = amim;
+            if (amim != NULL)
+                amim->references++;
+
+            if ((mm = lh_MEM_insert(mh, m)) != NULL) {
+                /* Not good, but don't sweat it */
+                if (mm->app_info != NULL) {
+                    mm->app_info->references--;
+                }
+                OPENSSL_free(mm);
+            }
+ err:
+            CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ENABLE);
+        }
+        break;
+    }
+    return;
+}
+
+void CRYPTO_mem_debug_free(void *addr, int before_p,
+        const char *file, int line)
+{
+    MEM m, *mp;
+
+    switch (before_p) {
+    case 0:
+        if (addr == NULL)
+            break;
+
+        if (mem_check_on() && (mh != NULL)) {
+            CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_DISABLE);
+
+            m.addr = addr;
+            mp = lh_MEM_delete(mh, &m);
+            if (mp != NULL) {
+                app_info_free(mp->app_info);
+                OPENSSL_free(mp);
+            }
+
+            CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ENABLE);
+        }
+        break;
+    case 1:
+        break;
+    }
+}
+
+void CRYPTO_mem_debug_realloc(void *addr1, void *addr2, size_t num,
+                              int before_p, const char *file, int line)
+{
+    MEM m, *mp;
+
+    switch (before_p) {
+    case 0:
+        break;
+    case 1:
+        if (addr2 == NULL)
+            break;
+
+        if (addr1 == NULL) {
+            CRYPTO_mem_debug_malloc(addr2, num, 128 | before_p, file, line);
+            break;
+        }
+
+        if (mem_check_on()) {
+            CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_DISABLE);
+
+            m.addr = addr1;
+            mp = lh_MEM_delete(mh, &m);
+            if (mp != NULL) {
+                mp->addr = addr2;
+                mp->num = num;
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG_BACKTRACE
+                mp->array_siz = backtrace(mp->array, OSSL_NELEM(mp->array));
+#endif
+                (void)lh_MEM_insert(mh, mp);
+            }
+
+            CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ENABLE);
+        }
+        break;
+    }
+    return;
+}
+
+typedef struct mem_leak_st {
+    int (*print_cb) (const char *str, size_t len, void *u);
+    void *print_cb_arg;
+    int chunks;
+    long bytes;
+} MEM_LEAK;
+
+static void print_leak(const MEM *m, MEM_LEAK *l)
+{
+    char buf[1024];
+    char *bufp = buf;
+    size_t len = sizeof(buf), ami_cnt;
+    APP_INFO *amip;
+    int n;
+    struct tm *lcl = NULL;
+    /*
+     * Convert between CRYPTO_THREAD_ID (which could be anything at all) and
+     * a long. This may not be meaningful depending on what CRYPTO_THREAD_ID is
+     * but hopefully should give something sensible on most platforms
+     */
+    union {
+        CRYPTO_THREAD_ID tid;
+        unsigned long ltid;
+    } tid;
+    CRYPTO_THREAD_ID ti;
+
+    lcl = localtime(&m->time);
+    n = BIO_snprintf(bufp, len, "[%02d:%02d:%02d] ",
+                     lcl->tm_hour, lcl->tm_min, lcl->tm_sec);
+    if (n <= 0) {
+        bufp[0] = '\0';
+        return;
+    }
+    bufp += n;
+    len -= n;
+
+    n = BIO_snprintf(bufp, len, "%5lu file=%s, line=%d, ",
+                     m->order, m->file, m->line);
+    if (n <= 0)
+        return;
+    bufp += n;
+    len -= n;
+
+    tid.ltid = 0;
+    tid.tid = m->threadid;
+    n = BIO_snprintf(bufp, len, "thread=%lu, ", tid.ltid);
+    if (n <= 0)
+        return;
+    bufp += n;
+    len -= n;
+
+    n = BIO_snprintf(bufp, len, "number=%d, address=%p\n", m->num, m->addr);
+    if (n <= 0)
+        return;
+    bufp += n;
+    len -= n;
+
+    l->print_cb(buf, (size_t)(bufp - buf), l->print_cb_arg);
+
+    l->chunks++;
+    l->bytes += m->num;
+
+    amip = m->app_info;
+    ami_cnt = 0;
+
+    if (amip) {
+        ti = amip->threadid;
+
+        do {
+            int buf_len;
+            int info_len;
+
+            ami_cnt++;
+            if (ami_cnt >= sizeof(buf) - 1)
+                break;
+            memset(buf, '>', ami_cnt);
+            buf[ami_cnt] = '\0';
+            tid.ltid = 0;
+            tid.tid = amip->threadid;
+            n = BIO_snprintf(buf + ami_cnt, sizeof(buf) - ami_cnt,
+                             " thread=%lu, file=%s, line=%d, info=\"",
+                             tid.ltid, amip->file, amip->line);
+            if (n <= 0)
+                break;
+            buf_len = ami_cnt + n;
+            info_len = strlen(amip->info);
+            if (128 - buf_len - 3 < info_len) {
+                memcpy(buf + buf_len, amip->info, 128 - buf_len - 3);
+                buf_len = 128 - 3;
+            } else {
+                n = BIO_snprintf(buf + buf_len, sizeof(buf) - buf_len, "%s",
+                                 amip->info);
+                if (n < 0)
+                    break;
+                buf_len += n;
+            }
+            n = BIO_snprintf(buf + buf_len, sizeof(buf) - buf_len, "\"\n");
+            if (n <= 0)
+                break;
+
+            l->print_cb(buf, buf_len + n, l->print_cb_arg);
+
+            amip = amip->next;
+        }
+        while (amip && CRYPTO_THREAD_compare_id(amip->threadid, ti));
+    }
+
+#ifndef OPENSSL_NO_CRYPTO_MDEBUG_BACKTRACE
+    {
+        size_t i;
+        char **strings = backtrace_symbols(m->array, m->array_siz);
+
+        for (i = 0; i < m->array_siz; i++)
+            fprintf(stderr, "##> %s\n", strings[i]);
+        free(strings);
+    }
+#endif
+}
+
+IMPLEMENT_LHASH_DOALL_ARG_CONST(MEM, MEM_LEAK);
+
+int CRYPTO_mem_leaks_cb(int (*cb) (const char *str, size_t len, void *u),
+                        void *u)
+{
+    MEM_LEAK ml;
+
+    /* Ensure all resources are released */
+    OPENSSL_cleanup();
+
+    if (!RUN_ONCE(&memdbg_init, do_memdbg_init))
+        return -1;
+
+    CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_DISABLE);
+
+    ml.print_cb = cb;
+    ml.print_cb_arg = u;
+    ml.bytes = 0;
+    ml.chunks = 0;
+    if (mh != NULL)
+        lh_MEM_doall_MEM_LEAK(mh, print_leak, &ml);
+
+    if (ml.chunks != 0) {
+        char buf[256];
+
+        BIO_snprintf(buf, sizeof(buf), "%ld bytes leaked in %d chunks\n",
+                     ml.bytes, ml.chunks);
+        cb(buf, strlen(buf), u);
+    } else {
+        /*
+         * Make sure that, if we found no leaks, memory-leak debugging itself
+         * does not introduce memory leaks (which might irritate external
+         * debugging tools). (When someone enables leak checking, but does not
+         * call this function, we declare it to be their fault.)
+         */
+        int old_mh_mode;
+
+        CRYPTO_THREAD_write_lock(memdbg_lock);
+
+        /*
+         * avoid deadlock when lh_free() uses CRYPTO_mem_debug_free(), which uses
+         * mem_check_on
+         */
+        old_mh_mode = mh_mode;
+        mh_mode = CRYPTO_MEM_CHECK_OFF;
+
+        lh_MEM_free(mh);
+        mh = NULL;
+
+        mh_mode = old_mh_mode;
+        CRYPTO_THREAD_unlock(memdbg_lock);
+    }
+    CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_OFF);
+
+    /* Clean up locks etc */
+    CRYPTO_THREAD_cleanup_local(&appinfokey);
+    CRYPTO_THREAD_lock_free(memdbg_lock);
+    CRYPTO_THREAD_lock_free(long_memdbg_lock);
+    memdbg_lock = NULL;
+    long_memdbg_lock = NULL;
+
+    return ml.chunks == 0 ? 1 : 0;
+}
+
+static int print_bio(const char *str, size_t len, void *b)
+{
+    return BIO_write((BIO *)b, str, len);
+}
+
+int CRYPTO_mem_leaks(BIO *b)
+{
+    /*
+     * OPENSSL_cleanup() will free the ex_data locks so we can't have any
+     * ex_data hanging around
+     */
+    bio_free_ex_data(b);
+
+    return CRYPTO_mem_leaks_cb(print_bio, b);
+}
+
+# ifndef OPENSSL_NO_STDIO
+int CRYPTO_mem_leaks_fp(FILE *fp)
+{
+    BIO *b;
+    int ret;
+
+    /*
+     * Need to turn off memory checking when allocated BIOs ... especially as
+     * we're creating them at a time when we're trying to check we've not
+     * left anything un-free()'d!!
+     */
+    CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_DISABLE);
+    b = BIO_new(BIO_s_file());
+    CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ENABLE);
+    if (b == NULL)
+        return -1;
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = CRYPTO_mem_leaks_cb(print_bio, b);
+    BIO_free(b);
+    return ret;
+}
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/mem_sec.c b/trunk/3rdparty/openssl-1.1-fit/crypto/mem_sec.c
new file mode 100644
index 000000000..9e0f6702f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/mem_sec.c
@@ -0,0 +1,646 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2004-2014, Akamai Technologies. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file is in two halves. The first half implements the public API
+ * to be used by external consumers, and to be used by OpenSSL to store
+ * data in a "secure arena." The second half implements the secure arena.
+ * For details on that implementation, see below (look for uppercase
+ * "SECURE HEAP IMPLEMENTATION").
+ */
+#include "e_os.h"
+#include <openssl/crypto.h>
+
+#include <string.h>
+
+/* e_os.h defines OPENSSL_SECURE_MEMORY if secure memory can be implemented */
+#ifdef OPENSSL_SECURE_MEMORY
+# include <stdlib.h>
+# include <assert.h>
+# include <unistd.h>
+# include <sys/types.h>
+# include <sys/mman.h>
+# if defined(OPENSSL_SYS_LINUX)
+#  include <sys/syscall.h>
+#  if defined(SYS_mlock2)
+#   include <linux/mman.h>
+#   include <errno.h>
+#  endif
+# endif
+# include <sys/param.h>
+# include <sys/stat.h>
+# include <fcntl.h>
+#endif
+
+#define CLEAR(p, s) OPENSSL_cleanse(p, s)
+#ifndef PAGE_SIZE
+# define PAGE_SIZE    4096
+#endif
+#if !defined(MAP_ANON) && defined(MAP_ANONYMOUS)
+# define MAP_ANON MAP_ANONYMOUS
+#endif
+
+#ifdef OPENSSL_SECURE_MEMORY
+static size_t secure_mem_used;
+
+static int secure_mem_initialized;
+
+static CRYPTO_RWLOCK *sec_malloc_lock = NULL;
+
+/*
+ * These are the functions that must be implemented by a secure heap (sh).
+ */
+static int sh_init(size_t size, int minsize);
+static void *sh_malloc(size_t size);
+static void sh_free(void *ptr);
+static void sh_done(void);
+static size_t sh_actual_size(char *ptr);
+static int sh_allocated(const char *ptr);
+#endif
+
+int CRYPTO_secure_malloc_init(size_t size, int minsize)
+{
+#ifdef OPENSSL_SECURE_MEMORY
+    int ret = 0;
+
+    if (!secure_mem_initialized) {
+        sec_malloc_lock = CRYPTO_THREAD_lock_new();
+        if (sec_malloc_lock == NULL)
+            return 0;
+        if ((ret = sh_init(size, minsize)) != 0) {
+            secure_mem_initialized = 1;
+        } else {
+            CRYPTO_THREAD_lock_free(sec_malloc_lock);
+            sec_malloc_lock = NULL;
+        }
+    }
+
+    return ret;
+#else
+    return 0;
+#endif /* OPENSSL_SECURE_MEMORY */
+}
+
+int CRYPTO_secure_malloc_done(void)
+{
+#ifdef OPENSSL_SECURE_MEMORY
+    if (secure_mem_used == 0) {
+        sh_done();
+        secure_mem_initialized = 0;
+        CRYPTO_THREAD_lock_free(sec_malloc_lock);
+        sec_malloc_lock = NULL;
+        return 1;
+    }
+#endif /* OPENSSL_SECURE_MEMORY */
+    return 0;
+}
+
+int CRYPTO_secure_malloc_initialized(void)
+{
+#ifdef OPENSSL_SECURE_MEMORY
+    return secure_mem_initialized;
+#else
+    return 0;
+#endif /* OPENSSL_SECURE_MEMORY */
+}
+
+void *CRYPTO_secure_malloc(size_t num, const char *file, int line)
+{
+#ifdef OPENSSL_SECURE_MEMORY
+    void *ret;
+    size_t actual_size;
+
+    if (!secure_mem_initialized) {
+        return CRYPTO_malloc(num, file, line);
+    }
+    CRYPTO_THREAD_write_lock(sec_malloc_lock);
+    ret = sh_malloc(num);
+    actual_size = ret ? sh_actual_size(ret) : 0;
+    secure_mem_used += actual_size;
+    CRYPTO_THREAD_unlock(sec_malloc_lock);
+    return ret;
+#else
+    return CRYPTO_malloc(num, file, line);
+#endif /* OPENSSL_SECURE_MEMORY */
+}
+
+void *CRYPTO_secure_zalloc(size_t num, const char *file, int line)
+{
+#ifdef OPENSSL_SECURE_MEMORY
+    if (secure_mem_initialized)
+        /* CRYPTO_secure_malloc() zeroes allocations when it is implemented */
+        return CRYPTO_secure_malloc(num, file, line);
+#endif
+    return CRYPTO_zalloc(num, file, line);
+}
+
+void CRYPTO_secure_free(void *ptr, const char *file, int line)
+{
+#ifdef OPENSSL_SECURE_MEMORY
+    size_t actual_size;
+
+    if (ptr == NULL)
+        return;
+    if (!CRYPTO_secure_allocated(ptr)) {
+        CRYPTO_free(ptr, file, line);
+        return;
+    }
+    CRYPTO_THREAD_write_lock(sec_malloc_lock);
+    actual_size = sh_actual_size(ptr);
+    CLEAR(ptr, actual_size);
+    secure_mem_used -= actual_size;
+    sh_free(ptr);
+    CRYPTO_THREAD_unlock(sec_malloc_lock);
+#else
+    CRYPTO_free(ptr, file, line);
+#endif /* OPENSSL_SECURE_MEMORY */
+}
+
+void CRYPTO_secure_clear_free(void *ptr, size_t num,
+                              const char *file, int line)
+{
+#ifdef OPENSSL_SECURE_MEMORY
+    size_t actual_size;
+
+    if (ptr == NULL)
+        return;
+    if (!CRYPTO_secure_allocated(ptr)) {
+        OPENSSL_cleanse(ptr, num);
+        CRYPTO_free(ptr, file, line);
+        return;
+    }
+    CRYPTO_THREAD_write_lock(sec_malloc_lock);
+    actual_size = sh_actual_size(ptr);
+    CLEAR(ptr, actual_size);
+    secure_mem_used -= actual_size;
+    sh_free(ptr);
+    CRYPTO_THREAD_unlock(sec_malloc_lock);
+#else
+    if (ptr == NULL)
+        return;
+    OPENSSL_cleanse(ptr, num);
+    CRYPTO_free(ptr, file, line);
+#endif /* OPENSSL_SECURE_MEMORY */
+}
+
+int CRYPTO_secure_allocated(const void *ptr)
+{
+#ifdef OPENSSL_SECURE_MEMORY
+    int ret;
+
+    if (!secure_mem_initialized)
+        return 0;
+    CRYPTO_THREAD_write_lock(sec_malloc_lock);
+    ret = sh_allocated(ptr);
+    CRYPTO_THREAD_unlock(sec_malloc_lock);
+    return ret;
+#else
+    return 0;
+#endif /* OPENSSL_SECURE_MEMORY */
+}
+
+size_t CRYPTO_secure_used(void)
+{
+#ifdef OPENSSL_SECURE_MEMORY
+    return secure_mem_used;
+#else
+    return 0;
+#endif /* OPENSSL_SECURE_MEMORY */
+}
+
+size_t CRYPTO_secure_actual_size(void *ptr)
+{
+#ifdef OPENSSL_SECURE_MEMORY
+    size_t actual_size;
+
+    CRYPTO_THREAD_write_lock(sec_malloc_lock);
+    actual_size = sh_actual_size(ptr);
+    CRYPTO_THREAD_unlock(sec_malloc_lock);
+    return actual_size;
+#else
+    return 0;
+#endif
+}
+/* END OF PAGE ...
+
+   ... START OF PAGE */
+
+/*
+ * SECURE HEAP IMPLEMENTATION
+ */
+#ifdef OPENSSL_SECURE_MEMORY
+
+
+/*
+ * The implementation provided here uses a fixed-sized mmap() heap,
+ * which is locked into memory, not written to core files, and protected
+ * on either side by an unmapped page, which will catch pointer overruns
+ * (or underruns) and an attempt to read data out of the secure heap.
+ * Free'd memory is zero'd or otherwise cleansed.
+ *
+ * This is a pretty standard buddy allocator.  We keep areas in a multiple
+ * of "sh.minsize" units.  The freelist and bitmaps are kept separately,
+ * so all (and only) data is kept in the mmap'd heap.
+ *
+ * This code assumes eight-bit bytes.  The numbers 3 and 7 are all over the
+ * place.
+ */
+
+#define ONE ((size_t)1)
+
+# define TESTBIT(t, b)  (t[(b) >> 3] &  (ONE << ((b) & 7)))
+# define SETBIT(t, b)   (t[(b) >> 3] |= (ONE << ((b) & 7)))
+# define CLEARBIT(t, b) (t[(b) >> 3] &= (0xFF & ~(ONE << ((b) & 7))))
+
+#define WITHIN_ARENA(p) \
+    ((char*)(p) >= sh.arena && (char*)(p) < &sh.arena[sh.arena_size])
+#define WITHIN_FREELIST(p) \
+    ((char*)(p) >= (char*)sh.freelist && (char*)(p) < (char*)&sh.freelist[sh.freelist_size])
+
+
+typedef struct sh_list_st
+{
+    struct sh_list_st *next;
+    struct sh_list_st **p_next;
+} SH_LIST;
+
+typedef struct sh_st
+{
+    char* map_result;
+    size_t map_size;
+    char *arena;
+    size_t arena_size;
+    char **freelist;
+    ossl_ssize_t freelist_size;
+    size_t minsize;
+    unsigned char *bittable;
+    unsigned char *bitmalloc;
+    size_t bittable_size; /* size in bits */
+} SH;
+
+static SH sh;
+
+static size_t sh_getlist(char *ptr)
+{
+    ossl_ssize_t list = sh.freelist_size - 1;
+    size_t bit = (sh.arena_size + ptr - sh.arena) / sh.minsize;
+
+    for (; bit; bit >>= 1, list--) {
+        if (TESTBIT(sh.bittable, bit))
+            break;
+        OPENSSL_assert((bit & 1) == 0);
+    }
+
+    return list;
+}
+
+
+static int sh_testbit(char *ptr, int list, unsigned char *table)
+{
+    size_t bit;
+
+    OPENSSL_assert(list >= 0 && list < sh.freelist_size);
+    OPENSSL_assert(((ptr - sh.arena) & ((sh.arena_size >> list) - 1)) == 0);
+    bit = (ONE << list) + ((ptr - sh.arena) / (sh.arena_size >> list));
+    OPENSSL_assert(bit > 0 && bit < sh.bittable_size);
+    return TESTBIT(table, bit);
+}
+
+static void sh_clearbit(char *ptr, int list, unsigned char *table)
+{
+    size_t bit;
+
+    OPENSSL_assert(list >= 0 && list < sh.freelist_size);
+    OPENSSL_assert(((ptr - sh.arena) & ((sh.arena_size >> list) - 1)) == 0);
+    bit = (ONE << list) + ((ptr - sh.arena) / (sh.arena_size >> list));
+    OPENSSL_assert(bit > 0 && bit < sh.bittable_size);
+    OPENSSL_assert(TESTBIT(table, bit));
+    CLEARBIT(table, bit);
+}
+
+static void sh_setbit(char *ptr, int list, unsigned char *table)
+{
+    size_t bit;
+
+    OPENSSL_assert(list >= 0 && list < sh.freelist_size);
+    OPENSSL_assert(((ptr - sh.arena) & ((sh.arena_size >> list) - 1)) == 0);
+    bit = (ONE << list) + ((ptr - sh.arena) / (sh.arena_size >> list));
+    OPENSSL_assert(bit > 0 && bit < sh.bittable_size);
+    OPENSSL_assert(!TESTBIT(table, bit));
+    SETBIT(table, bit);
+}
+
+static void sh_add_to_list(char **list, char *ptr)
+{
+    SH_LIST *temp;
+
+    OPENSSL_assert(WITHIN_FREELIST(list));
+    OPENSSL_assert(WITHIN_ARENA(ptr));
+
+    temp = (SH_LIST *)ptr;
+    temp->next = *(SH_LIST **)list;
+    OPENSSL_assert(temp->next == NULL || WITHIN_ARENA(temp->next));
+    temp->p_next = (SH_LIST **)list;
+
+    if (temp->next != NULL) {
+        OPENSSL_assert((char **)temp->next->p_next == list);
+        temp->next->p_next = &(temp->next);
+    }
+
+    *list = ptr;
+}
+
+static void sh_remove_from_list(char *ptr)
+{
+    SH_LIST *temp, *temp2;
+
+    temp = (SH_LIST *)ptr;
+    if (temp->next != NULL)
+        temp->next->p_next = temp->p_next;
+    *temp->p_next = temp->next;
+    if (temp->next == NULL)
+        return;
+
+    temp2 = temp->next;
+    OPENSSL_assert(WITHIN_FREELIST(temp2->p_next) || WITHIN_ARENA(temp2->p_next));
+}
+
+
+static int sh_init(size_t size, int minsize)
+{
+    int ret;
+    size_t i;
+    size_t pgsize;
+    size_t aligned;
+
+    memset(&sh, 0, sizeof(sh));
+
+    /* make sure size and minsize are powers of 2 */
+    OPENSSL_assert(size > 0);
+    OPENSSL_assert((size & (size - 1)) == 0);
+    OPENSSL_assert(minsize > 0);
+    OPENSSL_assert((minsize & (minsize - 1)) == 0);
+    if (size <= 0 || (size & (size - 1)) != 0)
+        goto err;
+    if (minsize <= 0 || (minsize & (minsize - 1)) != 0)
+        goto err;
+
+    while (minsize < (int)sizeof(SH_LIST))
+        minsize *= 2;
+
+    sh.arena_size = size;
+    sh.minsize = minsize;
+    sh.bittable_size = (sh.arena_size / sh.minsize) * 2;
+
+    /* Prevent allocations of size 0 later on */
+    if (sh.bittable_size >> 3 == 0)
+        goto err;
+
+    sh.freelist_size = -1;
+    for (i = sh.bittable_size; i; i >>= 1)
+        sh.freelist_size++;
+
+    sh.freelist = OPENSSL_zalloc(sh.freelist_size * sizeof(char *));
+    OPENSSL_assert(sh.freelist != NULL);
+    if (sh.freelist == NULL)
+        goto err;
+
+    sh.bittable = OPENSSL_zalloc(sh.bittable_size >> 3);
+    OPENSSL_assert(sh.bittable != NULL);
+    if (sh.bittable == NULL)
+        goto err;
+
+    sh.bitmalloc = OPENSSL_zalloc(sh.bittable_size >> 3);
+    OPENSSL_assert(sh.bitmalloc != NULL);
+    if (sh.bitmalloc == NULL)
+        goto err;
+
+    /* Allocate space for heap, and two extra pages as guards */
+#if defined(_SC_PAGE_SIZE) || defined (_SC_PAGESIZE)
+    {
+# if defined(_SC_PAGE_SIZE)
+        long tmppgsize = sysconf(_SC_PAGE_SIZE);
+# else
+        long tmppgsize = sysconf(_SC_PAGESIZE);
+# endif
+        if (tmppgsize < 1)
+            pgsize = PAGE_SIZE;
+        else
+            pgsize = (size_t)tmppgsize;
+    }
+#else
+    pgsize = PAGE_SIZE;
+#endif
+    sh.map_size = pgsize + sh.arena_size + pgsize;
+    if (1) {
+#ifdef MAP_ANON
+        sh.map_result = mmap(NULL, sh.map_size,
+                             PROT_READ|PROT_WRITE, MAP_ANON|MAP_PRIVATE, -1, 0);
+    } else {
+#endif
+        int fd;
+
+        sh.map_result = MAP_FAILED;
+        if ((fd = open("/dev/zero", O_RDWR)) >= 0) {
+            sh.map_result = mmap(NULL, sh.map_size,
+                                 PROT_READ|PROT_WRITE, MAP_PRIVATE, fd, 0);
+            close(fd);
+        }
+    }
+    if (sh.map_result == MAP_FAILED)
+        goto err;
+    sh.arena = (char *)(sh.map_result + pgsize);
+    sh_setbit(sh.arena, 0, sh.bittable);
+    sh_add_to_list(&sh.freelist[0], sh.arena);
+
+    /* Now try to add guard pages and lock into memory. */
+    ret = 1;
+
+    /* Starting guard is already aligned from mmap. */
+    if (mprotect(sh.map_result, pgsize, PROT_NONE) < 0)
+        ret = 2;
+
+    /* Ending guard page - need to round up to page boundary */
+    aligned = (pgsize + sh.arena_size + (pgsize - 1)) & ~(pgsize - 1);
+    if (mprotect(sh.map_result + aligned, pgsize, PROT_NONE) < 0)
+        ret = 2;
+
+#if defined(OPENSSL_SYS_LINUX) && defined(MLOCK_ONFAULT) && defined(SYS_mlock2)
+    if (syscall(SYS_mlock2, sh.arena, sh.arena_size, MLOCK_ONFAULT) < 0) {
+        if (errno == ENOSYS) {
+            if (mlock(sh.arena, sh.arena_size) < 0)
+                ret = 2;
+        } else {
+            ret = 2;
+        }
+    }
+#else
+    if (mlock(sh.arena, sh.arena_size) < 0)
+        ret = 2;
+#endif
+#ifdef MADV_DONTDUMP
+    if (madvise(sh.arena, sh.arena_size, MADV_DONTDUMP) < 0)
+        ret = 2;
+#endif
+
+    return ret;
+
+ err:
+    sh_done();
+    return 0;
+}
+
+static void sh_done(void)
+{
+    OPENSSL_free(sh.freelist);
+    OPENSSL_free(sh.bittable);
+    OPENSSL_free(sh.bitmalloc);
+    if (sh.map_result != NULL && sh.map_size)
+        munmap(sh.map_result, sh.map_size);
+    memset(&sh, 0, sizeof(sh));
+}
+
+static int sh_allocated(const char *ptr)
+{
+    return WITHIN_ARENA(ptr) ? 1 : 0;
+}
+
+static char *sh_find_my_buddy(char *ptr, int list)
+{
+    size_t bit;
+    char *chunk = NULL;
+
+    bit = (ONE << list) + (ptr - sh.arena) / (sh.arena_size >> list);
+    bit ^= 1;
+
+    if (TESTBIT(sh.bittable, bit) && !TESTBIT(sh.bitmalloc, bit))
+        chunk = sh.arena + ((bit & ((ONE << list) - 1)) * (sh.arena_size >> list));
+
+    return chunk;
+}
+
+static void *sh_malloc(size_t size)
+{
+    ossl_ssize_t list, slist;
+    size_t i;
+    char *chunk;
+
+    if (size > sh.arena_size)
+        return NULL;
+
+    list = sh.freelist_size - 1;
+    for (i = sh.minsize; i < size; i <<= 1)
+        list--;
+    if (list < 0)
+        return NULL;
+
+    /* try to find a larger entry to split */
+    for (slist = list; slist >= 0; slist--)
+        if (sh.freelist[slist] != NULL)
+            break;
+    if (slist < 0)
+        return NULL;
+
+    /* split larger entry */
+    while (slist != list) {
+        char *temp = sh.freelist[slist];
+
+        /* remove from bigger list */
+        OPENSSL_assert(!sh_testbit(temp, slist, sh.bitmalloc));
+        sh_clearbit(temp, slist, sh.bittable);
+        sh_remove_from_list(temp);
+        OPENSSL_assert(temp != sh.freelist[slist]);
+
+        /* done with bigger list */
+        slist++;
+
+        /* add to smaller list */
+        OPENSSL_assert(!sh_testbit(temp, slist, sh.bitmalloc));
+        sh_setbit(temp, slist, sh.bittable);
+        sh_add_to_list(&sh.freelist[slist], temp);
+        OPENSSL_assert(sh.freelist[slist] == temp);
+
+        /* split in 2 */
+        temp += sh.arena_size >> slist;
+        OPENSSL_assert(!sh_testbit(temp, slist, sh.bitmalloc));
+        sh_setbit(temp, slist, sh.bittable);
+        sh_add_to_list(&sh.freelist[slist], temp);
+        OPENSSL_assert(sh.freelist[slist] == temp);
+
+        OPENSSL_assert(temp-(sh.arena_size >> slist) == sh_find_my_buddy(temp, slist));
+    }
+
+    /* peel off memory to hand back */
+    chunk = sh.freelist[list];
+    OPENSSL_assert(sh_testbit(chunk, list, sh.bittable));
+    sh_setbit(chunk, list, sh.bitmalloc);
+    sh_remove_from_list(chunk);
+
+    OPENSSL_assert(WITHIN_ARENA(chunk));
+
+    /* zero the free list header as a precaution against information leakage */
+    memset(chunk, 0, sizeof(SH_LIST));
+
+    return chunk;
+}
+
+static void sh_free(void *ptr)
+{
+    size_t list;
+    void *buddy;
+
+    if (ptr == NULL)
+        return;
+    OPENSSL_assert(WITHIN_ARENA(ptr));
+    if (!WITHIN_ARENA(ptr))
+        return;
+
+    list = sh_getlist(ptr);
+    OPENSSL_assert(sh_testbit(ptr, list, sh.bittable));
+    sh_clearbit(ptr, list, sh.bitmalloc);
+    sh_add_to_list(&sh.freelist[list], ptr);
+
+    /* Try to coalesce two adjacent free areas. */
+    while ((buddy = sh_find_my_buddy(ptr, list)) != NULL) {
+        OPENSSL_assert(ptr == sh_find_my_buddy(buddy, list));
+        OPENSSL_assert(ptr != NULL);
+        OPENSSL_assert(!sh_testbit(ptr, list, sh.bitmalloc));
+        sh_clearbit(ptr, list, sh.bittable);
+        sh_remove_from_list(ptr);
+        OPENSSL_assert(!sh_testbit(ptr, list, sh.bitmalloc));
+        sh_clearbit(buddy, list, sh.bittable);
+        sh_remove_from_list(buddy);
+
+        list--;
+
+        /* Zero the higher addressed block's free list pointers */
+        memset(ptr > buddy ? ptr : buddy, 0, sizeof(SH_LIST));
+        if (ptr > buddy)
+            ptr = buddy;
+
+        OPENSSL_assert(!sh_testbit(ptr, list, sh.bitmalloc));
+        sh_setbit(ptr, list, sh.bittable);
+        sh_add_to_list(&sh.freelist[list], ptr);
+        OPENSSL_assert(sh.freelist[list] == ptr);
+    }
+}
+
+static size_t sh_actual_size(char *ptr)
+{
+    int list;
+
+    OPENSSL_assert(WITHIN_ARENA(ptr));
+    if (!WITHIN_ARENA(ptr))
+        return 0;
+    list = sh_getlist(ptr);
+    OPENSSL_assert(sh_testbit(ptr, list, sh.bittable));
+    return sh.arena_size / (ONE << list);
+}
+#endif /* OPENSSL_SECURE_MEMORY */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/mips_arch.h b/trunk/3rdparty/openssl-1.1-fit/crypto/mips_arch.h
new file mode 100644
index 000000000..75043e79d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/mips_arch.h
@@ -0,0 +1,40 @@
+/*
+ * Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef __MIPS_ARCH_H__
+# define __MIPS_ARCH_H__
+
+# if (defined(__mips_smartmips) || defined(_MIPS_ARCH_MIPS32R3) || \
+      defined(_MIPS_ARCH_MIPS32R5) || defined(_MIPS_ARCH_MIPS32R6))
+      && !defined(_MIPS_ARCH_MIPS32R2)
+#  define _MIPS_ARCH_MIPS32R2
+# endif
+
+# if (defined(_MIPS_ARCH_MIPS64R3) || defined(_MIPS_ARCH_MIPS64R5) || \
+      defined(_MIPS_ARCH_MIPS64R6)) \
+      && !defined(_MIPS_ARCH_MIPS64R2)
+#  define _MIPS_ARCH_MIPS64R2
+# endif
+
+# if defined(_MIPS_ARCH_MIPS64R6)
+#  define dmultu(rs,rt)
+#  define mflo(rd,rs,rt)	dmulu	rd,rs,rt
+#  define mfhi(rd,rs,rt)	dmuhu	rd,rs,rt
+# elif defined(_MIPS_ARCH_MIPS32R6)
+#  define multu(rs,rt)
+#  define mflo(rd,rs,rt)	mulu	rd,rs,rt
+#  define mfhi(rd,rs,rt)	muhu	rd,rs,rt
+# else
+#  define dmultu(rs,rt)		dmultu	rs,rt
+#  define multu(rs,rt)		multu	rs,rt
+#  define mflo(rd,rs,rt)	mflo	rd
+#  define mfhi(rd,rs,rt)	mfhi	rd
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/aesni-gcm-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/aesni-gcm-x86_64.pl
new file mode 100644
index 000000000..b42016101
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/aesni-gcm-x86_64.pl
@@ -0,0 +1,1099 @@
+#! /usr/bin/env perl
+# Copyright 2013-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+#
+# AES-NI-CTR+GHASH stitch.
+#
+# February 2013
+#
+# OpenSSL GCM implementation is organized in such way that its
+# performance is rather close to the sum of its streamed components,
+# in the context parallelized AES-NI CTR and modulo-scheduled
+# PCLMULQDQ-enabled GHASH. Unfortunately, as no stitch implementation
+# was observed to perform significantly better than the sum of the
+# components on contemporary CPUs, the effort was deemed impossible to
+# justify. This module is based on combination of Intel submissions,
+# [1] and [2], with MOVBE twist suggested by Ilya Albrekht and Max
+# Locktyukhin of Intel Corp. who verified that it reduces shuffles
+# pressure with notable relative improvement, achieving 1.0 cycle per
+# byte processed with 128-bit key on Haswell processor, 0.74 - on
+# Broadwell, 0.63 - on Skylake... [Mentioned results are raw profiled
+# measurements for favourable packet size, one divisible by 96.
+# Applications using the EVP interface will observe a few percent
+# worse performance.]
+#
+# Knights Landing processes 1 byte in 1.25 cycles (measured with EVP).
+#
+# [1] http://rt.openssl.org/Ticket/Display.html?id=2900&user=guest&pass=guest
+# [2] http://www.intel.com/content/dam/www/public/us/en/documents/software-support/enabling-high-performance-gcm.pdf
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.20) + ($1>=2.22);
+}
+
+if (!$avx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	    `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.09) + ($1>=2.10);
+}
+
+if (!$avx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	    `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$avx = ($1>=10) + ($1>=11);
+}
+
+if (!$avx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([3-9]\.[0-9]+)/) {
+	$avx = ($2>=3.0) + ($2>3.0);
+}
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+if ($avx>1) {{{
+
+($inp,$out,$len,$key,$ivp,$Xip)=("%rdi","%rsi","%rdx","%rcx","%r8","%r9");
+
+($Ii,$T1,$T2,$Hkey,
+ $Z0,$Z1,$Z2,$Z3,$Xi) = map("%xmm$_",(0..8));
+
+($inout0,$inout1,$inout2,$inout3,$inout4,$inout5,$rndkey) = map("%xmm$_",(9..15));
+
+($counter,$rounds,$ret,$const,$in0,$end0)=("%ebx","%ebp","%r10","%r11","%r14","%r15");
+
+$code=<<___;
+.text
+
+.type	_aesni_ctr32_ghash_6x,\@abi-omnipotent
+.align	32
+_aesni_ctr32_ghash_6x:
+	vmovdqu		0x20($const),$T2	# borrow $T2, .Lone_msb
+	sub		\$6,$len
+	vpxor		$Z0,$Z0,$Z0		# $Z0   = 0
+	vmovdqu		0x00-0x80($key),$rndkey
+	vpaddb		$T2,$T1,$inout1
+	vpaddb		$T2,$inout1,$inout2
+	vpaddb		$T2,$inout2,$inout3
+	vpaddb		$T2,$inout3,$inout4
+	vpaddb		$T2,$inout4,$inout5
+	vpxor		$rndkey,$T1,$inout0
+	vmovdqu		$Z0,16+8(%rsp)		# "$Z3" = 0
+	jmp		.Loop6x
+
+.align	32
+.Loop6x:
+	add		\$`6<<24`,$counter
+	jc		.Lhandle_ctr32		# discard $inout[1-5]?
+	vmovdqu		0x00-0x20($Xip),$Hkey	# $Hkey^1
+	  vpaddb	$T2,$inout5,$T1		# next counter value
+	  vpxor		$rndkey,$inout1,$inout1
+	  vpxor		$rndkey,$inout2,$inout2
+
+.Lresume_ctr32:
+	vmovdqu		$T1,($ivp)		# save next counter value
+	vpclmulqdq	\$0x10,$Hkey,$Z3,$Z1
+	  vpxor		$rndkey,$inout3,$inout3
+	  vmovups	0x10-0x80($key),$T2	# borrow $T2 for $rndkey
+	vpclmulqdq	\$0x01,$Hkey,$Z3,$Z2
+	xor		%r12,%r12
+	cmp		$in0,$end0
+
+	  vaesenc	$T2,$inout0,$inout0
+	vmovdqu		0x30+8(%rsp),$Ii	# I[4]
+	  vpxor		$rndkey,$inout4,$inout4
+	vpclmulqdq	\$0x00,$Hkey,$Z3,$T1
+	  vaesenc	$T2,$inout1,$inout1
+	  vpxor		$rndkey,$inout5,$inout5
+	setnc		%r12b
+	vpclmulqdq	\$0x11,$Hkey,$Z3,$Z3
+	  vaesenc	$T2,$inout2,$inout2
+	vmovdqu		0x10-0x20($Xip),$Hkey	# $Hkey^2
+	neg		%r12
+	  vaesenc	$T2,$inout3,$inout3
+	 vpxor		$Z1,$Z2,$Z2
+	vpclmulqdq	\$0x00,$Hkey,$Ii,$Z1
+	 vpxor		$Z0,$Xi,$Xi		# modulo-scheduled
+	  vaesenc	$T2,$inout4,$inout4
+	 vpxor		$Z1,$T1,$Z0
+	and		\$0x60,%r12
+	  vmovups	0x20-0x80($key),$rndkey
+	vpclmulqdq	\$0x10,$Hkey,$Ii,$T1
+	  vaesenc	$T2,$inout5,$inout5
+
+	vpclmulqdq	\$0x01,$Hkey,$Ii,$T2
+	lea		($in0,%r12),$in0
+	  vaesenc	$rndkey,$inout0,$inout0
+	 vpxor		16+8(%rsp),$Xi,$Xi	# modulo-scheduled [vpxor $Z3,$Xi,$Xi]
+	vpclmulqdq	\$0x11,$Hkey,$Ii,$Hkey
+	 vmovdqu	0x40+8(%rsp),$Ii	# I[3]
+	  vaesenc	$rndkey,$inout1,$inout1
+	movbe		0x58($in0),%r13
+	  vaesenc	$rndkey,$inout2,$inout2
+	movbe		0x50($in0),%r12
+	  vaesenc	$rndkey,$inout3,$inout3
+	mov		%r13,0x20+8(%rsp)
+	  vaesenc	$rndkey,$inout4,$inout4
+	mov		%r12,0x28+8(%rsp)
+	vmovdqu		0x30-0x20($Xip),$Z1	# borrow $Z1 for $Hkey^3
+	  vaesenc	$rndkey,$inout5,$inout5
+
+	  vmovups	0x30-0x80($key),$rndkey
+	 vpxor		$T1,$Z2,$Z2
+	vpclmulqdq	\$0x00,$Z1,$Ii,$T1
+	  vaesenc	$rndkey,$inout0,$inout0
+	 vpxor		$T2,$Z2,$Z2
+	vpclmulqdq	\$0x10,$Z1,$Ii,$T2
+	  vaesenc	$rndkey,$inout1,$inout1
+	 vpxor		$Hkey,$Z3,$Z3
+	vpclmulqdq	\$0x01,$Z1,$Ii,$Hkey
+	  vaesenc	$rndkey,$inout2,$inout2
+	vpclmulqdq	\$0x11,$Z1,$Ii,$Z1
+	 vmovdqu	0x50+8(%rsp),$Ii	# I[2]
+	  vaesenc	$rndkey,$inout3,$inout3
+	  vaesenc	$rndkey,$inout4,$inout4
+	 vpxor		$T1,$Z0,$Z0
+	vmovdqu		0x40-0x20($Xip),$T1	# borrow $T1 for $Hkey^4
+	  vaesenc	$rndkey,$inout5,$inout5
+
+	  vmovups	0x40-0x80($key),$rndkey
+	 vpxor		$T2,$Z2,$Z2
+	vpclmulqdq	\$0x00,$T1,$Ii,$T2
+	  vaesenc	$rndkey,$inout0,$inout0
+	 vpxor		$Hkey,$Z2,$Z2
+	vpclmulqdq	\$0x10,$T1,$Ii,$Hkey
+	  vaesenc	$rndkey,$inout1,$inout1
+	movbe		0x48($in0),%r13
+	 vpxor		$Z1,$Z3,$Z3
+	vpclmulqdq	\$0x01,$T1,$Ii,$Z1
+	  vaesenc	$rndkey,$inout2,$inout2
+	movbe		0x40($in0),%r12
+	vpclmulqdq	\$0x11,$T1,$Ii,$T1
+	 vmovdqu	0x60+8(%rsp),$Ii	# I[1]
+	  vaesenc	$rndkey,$inout3,$inout3
+	mov		%r13,0x30+8(%rsp)
+	  vaesenc	$rndkey,$inout4,$inout4
+	mov		%r12,0x38+8(%rsp)
+	 vpxor		$T2,$Z0,$Z0
+	vmovdqu		0x60-0x20($Xip),$T2	# borrow $T2 for $Hkey^5
+	  vaesenc	$rndkey,$inout5,$inout5
+
+	  vmovups	0x50-0x80($key),$rndkey
+	 vpxor		$Hkey,$Z2,$Z2
+	vpclmulqdq	\$0x00,$T2,$Ii,$Hkey
+	  vaesenc	$rndkey,$inout0,$inout0
+	 vpxor		$Z1,$Z2,$Z2
+	vpclmulqdq	\$0x10,$T2,$Ii,$Z1
+	  vaesenc	$rndkey,$inout1,$inout1
+	movbe		0x38($in0),%r13
+	 vpxor		$T1,$Z3,$Z3
+	vpclmulqdq	\$0x01,$T2,$Ii,$T1
+	 vpxor		0x70+8(%rsp),$Xi,$Xi	# accumulate I[0]
+	  vaesenc	$rndkey,$inout2,$inout2
+	movbe		0x30($in0),%r12
+	vpclmulqdq	\$0x11,$T2,$Ii,$T2
+	  vaesenc	$rndkey,$inout3,$inout3
+	mov		%r13,0x40+8(%rsp)
+	  vaesenc	$rndkey,$inout4,$inout4
+	mov		%r12,0x48+8(%rsp)
+	 vpxor		$Hkey,$Z0,$Z0
+	 vmovdqu	0x70-0x20($Xip),$Hkey	# $Hkey^6
+	  vaesenc	$rndkey,$inout5,$inout5
+
+	  vmovups	0x60-0x80($key),$rndkey
+	 vpxor		$Z1,$Z2,$Z2
+	vpclmulqdq	\$0x10,$Hkey,$Xi,$Z1
+	  vaesenc	$rndkey,$inout0,$inout0
+	 vpxor		$T1,$Z2,$Z2
+	vpclmulqdq	\$0x01,$Hkey,$Xi,$T1
+	  vaesenc	$rndkey,$inout1,$inout1
+	movbe		0x28($in0),%r13
+	 vpxor		$T2,$Z3,$Z3
+	vpclmulqdq	\$0x00,$Hkey,$Xi,$T2
+	  vaesenc	$rndkey,$inout2,$inout2
+	movbe		0x20($in0),%r12
+	vpclmulqdq	\$0x11,$Hkey,$Xi,$Xi
+	  vaesenc	$rndkey,$inout3,$inout3
+	mov		%r13,0x50+8(%rsp)
+	  vaesenc	$rndkey,$inout4,$inout4
+	mov		%r12,0x58+8(%rsp)
+	vpxor		$Z1,$Z2,$Z2
+	  vaesenc	$rndkey,$inout5,$inout5
+	vpxor		$T1,$Z2,$Z2
+
+	  vmovups	0x70-0x80($key),$rndkey
+	vpslldq		\$8,$Z2,$Z1
+	vpxor		$T2,$Z0,$Z0
+	vmovdqu		0x10($const),$Hkey	# .Lpoly
+
+	  vaesenc	$rndkey,$inout0,$inout0
+	vpxor		$Xi,$Z3,$Z3
+	  vaesenc	$rndkey,$inout1,$inout1
+	vpxor		$Z1,$Z0,$Z0
+	movbe		0x18($in0),%r13
+	  vaesenc	$rndkey,$inout2,$inout2
+	movbe		0x10($in0),%r12
+	vpalignr	\$8,$Z0,$Z0,$Ii		# 1st phase
+	vpclmulqdq	\$0x10,$Hkey,$Z0,$Z0
+	mov		%r13,0x60+8(%rsp)
+	  vaesenc	$rndkey,$inout3,$inout3
+	mov		%r12,0x68+8(%rsp)
+	  vaesenc	$rndkey,$inout4,$inout4
+	  vmovups	0x80-0x80($key),$T1	# borrow $T1 for $rndkey
+	  vaesenc	$rndkey,$inout5,$inout5
+
+	  vaesenc	$T1,$inout0,$inout0
+	  vmovups	0x90-0x80($key),$rndkey
+	  vaesenc	$T1,$inout1,$inout1
+	vpsrldq		\$8,$Z2,$Z2
+	  vaesenc	$T1,$inout2,$inout2
+	vpxor		$Z2,$Z3,$Z3
+	  vaesenc	$T1,$inout3,$inout3
+	vpxor		$Ii,$Z0,$Z0
+	movbe		0x08($in0),%r13
+	  vaesenc	$T1,$inout4,$inout4
+	movbe		0x00($in0),%r12
+	  vaesenc	$T1,$inout5,$inout5
+	  vmovups	0xa0-0x80($key),$T1
+	  cmp		\$11,$rounds
+	  jb		.Lenc_tail		# 128-bit key
+
+	  vaesenc	$rndkey,$inout0,$inout0
+	  vaesenc	$rndkey,$inout1,$inout1
+	  vaesenc	$rndkey,$inout2,$inout2
+	  vaesenc	$rndkey,$inout3,$inout3
+	  vaesenc	$rndkey,$inout4,$inout4
+	  vaesenc	$rndkey,$inout5,$inout5
+
+	  vaesenc	$T1,$inout0,$inout0
+	  vaesenc	$T1,$inout1,$inout1
+	  vaesenc	$T1,$inout2,$inout2
+	  vaesenc	$T1,$inout3,$inout3
+	  vaesenc	$T1,$inout4,$inout4
+	  vmovups	0xb0-0x80($key),$rndkey
+	  vaesenc	$T1,$inout5,$inout5
+	  vmovups	0xc0-0x80($key),$T1
+	  je		.Lenc_tail		# 192-bit key
+
+	  vaesenc	$rndkey,$inout0,$inout0
+	  vaesenc	$rndkey,$inout1,$inout1
+	  vaesenc	$rndkey,$inout2,$inout2
+	  vaesenc	$rndkey,$inout3,$inout3
+	  vaesenc	$rndkey,$inout4,$inout4
+	  vaesenc	$rndkey,$inout5,$inout5
+
+	  vaesenc	$T1,$inout0,$inout0
+	  vaesenc	$T1,$inout1,$inout1
+	  vaesenc	$T1,$inout2,$inout2
+	  vaesenc	$T1,$inout3,$inout3
+	  vaesenc	$T1,$inout4,$inout4
+	  vmovups	0xd0-0x80($key),$rndkey
+	  vaesenc	$T1,$inout5,$inout5
+	  vmovups	0xe0-0x80($key),$T1
+	  jmp		.Lenc_tail		# 256-bit key
+
+.align	32
+.Lhandle_ctr32:
+	vmovdqu		($const),$Ii		# borrow $Ii for .Lbswap_mask
+	  vpshufb	$Ii,$T1,$Z2		# byte-swap counter
+	  vmovdqu	0x30($const),$Z1	# borrow $Z1, .Ltwo_lsb
+	  vpaddd	0x40($const),$Z2,$inout1	# .Lone_lsb
+	  vpaddd	$Z1,$Z2,$inout2
+	vmovdqu		0x00-0x20($Xip),$Hkey	# $Hkey^1
+	  vpaddd	$Z1,$inout1,$inout3
+	  vpshufb	$Ii,$inout1,$inout1
+	  vpaddd	$Z1,$inout2,$inout4
+	  vpshufb	$Ii,$inout2,$inout2
+	  vpxor		$rndkey,$inout1,$inout1
+	  vpaddd	$Z1,$inout3,$inout5
+	  vpshufb	$Ii,$inout3,$inout3
+	  vpxor		$rndkey,$inout2,$inout2
+	  vpaddd	$Z1,$inout4,$T1		# byte-swapped next counter value
+	  vpshufb	$Ii,$inout4,$inout4
+	  vpshufb	$Ii,$inout5,$inout5
+	  vpshufb	$Ii,$T1,$T1		# next counter value
+	jmp		.Lresume_ctr32
+
+.align	32
+.Lenc_tail:
+	  vaesenc	$rndkey,$inout0,$inout0
+	vmovdqu		$Z3,16+8(%rsp)		# postpone vpxor $Z3,$Xi,$Xi
+	vpalignr	\$8,$Z0,$Z0,$Xi		# 2nd phase
+	  vaesenc	$rndkey,$inout1,$inout1
+	vpclmulqdq	\$0x10,$Hkey,$Z0,$Z0
+	  vpxor		0x00($inp),$T1,$T2
+	  vaesenc	$rndkey,$inout2,$inout2
+	  vpxor		0x10($inp),$T1,$Ii
+	  vaesenc	$rndkey,$inout3,$inout3
+	  vpxor		0x20($inp),$T1,$Z1
+	  vaesenc	$rndkey,$inout4,$inout4
+	  vpxor		0x30($inp),$T1,$Z2
+	  vaesenc	$rndkey,$inout5,$inout5
+	  vpxor		0x40($inp),$T1,$Z3
+	  vpxor		0x50($inp),$T1,$Hkey
+	  vmovdqu	($ivp),$T1		# load next counter value
+
+	  vaesenclast	$T2,$inout0,$inout0
+	  vmovdqu	0x20($const),$T2	# borrow $T2, .Lone_msb
+	  vaesenclast	$Ii,$inout1,$inout1
+	 vpaddb		$T2,$T1,$Ii
+	mov		%r13,0x70+8(%rsp)
+	lea		0x60($inp),$inp
+	  vaesenclast	$Z1,$inout2,$inout2
+	 vpaddb		$T2,$Ii,$Z1
+	mov		%r12,0x78+8(%rsp)
+	lea		0x60($out),$out
+	  vmovdqu	0x00-0x80($key),$rndkey
+	  vaesenclast	$Z2,$inout3,$inout3
+	 vpaddb		$T2,$Z1,$Z2
+	  vaesenclast	$Z3, $inout4,$inout4
+	 vpaddb		$T2,$Z2,$Z3
+	  vaesenclast	$Hkey,$inout5,$inout5
+	 vpaddb		$T2,$Z3,$Hkey
+
+	add		\$0x60,$ret
+	sub		\$0x6,$len
+	jc		.L6x_done
+
+	  vmovups	$inout0,-0x60($out)	# save output
+	 vpxor		$rndkey,$T1,$inout0
+	  vmovups	$inout1,-0x50($out)
+	 vmovdqa	$Ii,$inout1		# 0 latency
+	  vmovups	$inout2,-0x40($out)
+	 vmovdqa	$Z1,$inout2		# 0 latency
+	  vmovups	$inout3,-0x30($out)
+	 vmovdqa	$Z2,$inout3		# 0 latency
+	  vmovups	$inout4,-0x20($out)
+	 vmovdqa	$Z3,$inout4		# 0 latency
+	  vmovups	$inout5,-0x10($out)
+	 vmovdqa	$Hkey,$inout5		# 0 latency
+	vmovdqu		0x20+8(%rsp),$Z3	# I[5]
+	jmp		.Loop6x
+
+.L6x_done:
+	vpxor		16+8(%rsp),$Xi,$Xi	# modulo-scheduled
+	vpxor		$Z0,$Xi,$Xi		# modulo-scheduled
+
+	ret
+.size	_aesni_ctr32_ghash_6x,.-_aesni_ctr32_ghash_6x
+___
+######################################################################
+#
+# size_t aesni_gcm_[en|de]crypt(const void *inp, void *out, size_t len,
+#		const AES_KEY *key, unsigned char iv[16],
+#		struct { u128 Xi,H,Htbl[9]; } *Xip);
+$code.=<<___;
+.globl	aesni_gcm_decrypt
+.type	aesni_gcm_decrypt,\@function,6
+.align	32
+aesni_gcm_decrypt:
+.cfi_startproc
+	xor	$ret,$ret
+	cmp	\$0x60,$len			# minimal accepted length
+	jb	.Lgcm_dec_abort
+
+	lea	(%rsp),%rax			# save stack pointer
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+___
+$code.=<<___ if ($win64);
+	lea	-0xa8(%rsp),%rsp
+	movaps	%xmm6,-0xd8(%rax)
+	movaps	%xmm7,-0xc8(%rax)
+	movaps	%xmm8,-0xb8(%rax)
+	movaps	%xmm9,-0xa8(%rax)
+	movaps	%xmm10,-0x98(%rax)
+	movaps	%xmm11,-0x88(%rax)
+	movaps	%xmm12,-0x78(%rax)
+	movaps	%xmm13,-0x68(%rax)
+	movaps	%xmm14,-0x58(%rax)
+	movaps	%xmm15,-0x48(%rax)
+.Lgcm_dec_body:
+___
+$code.=<<___;
+	vzeroupper
+
+	vmovdqu		($ivp),$T1		# input counter value
+	add		\$-128,%rsp
+	mov		12($ivp),$counter
+	lea		.Lbswap_mask(%rip),$const
+	lea		-0x80($key),$in0	# borrow $in0
+	mov		\$0xf80,$end0		# borrow $end0
+	vmovdqu		($Xip),$Xi		# load Xi
+	and		\$-128,%rsp		# ensure stack alignment
+	vmovdqu		($const),$Ii		# borrow $Ii for .Lbswap_mask
+	lea		0x80($key),$key		# size optimization
+	lea		0x20+0x20($Xip),$Xip	# size optimization
+	mov		0xf0-0x80($key),$rounds
+	vpshufb		$Ii,$Xi,$Xi
+
+	and		$end0,$in0
+	and		%rsp,$end0
+	sub		$in0,$end0
+	jc		.Ldec_no_key_aliasing
+	cmp		\$768,$end0
+	jnc		.Ldec_no_key_aliasing
+	sub		$end0,%rsp		# avoid aliasing with key
+.Ldec_no_key_aliasing:
+
+	vmovdqu		0x50($inp),$Z3		# I[5]
+	lea		($inp),$in0
+	vmovdqu		0x40($inp),$Z0
+	lea		-0xc0($inp,$len),$end0
+	vmovdqu		0x30($inp),$Z1
+	shr		\$4,$len
+	xor		$ret,$ret
+	vmovdqu		0x20($inp),$Z2
+	 vpshufb	$Ii,$Z3,$Z3		# passed to _aesni_ctr32_ghash_6x
+	vmovdqu		0x10($inp),$T2
+	 vpshufb	$Ii,$Z0,$Z0
+	vmovdqu		($inp),$Hkey
+	 vpshufb	$Ii,$Z1,$Z1
+	vmovdqu		$Z0,0x30(%rsp)
+	 vpshufb	$Ii,$Z2,$Z2
+	vmovdqu		$Z1,0x40(%rsp)
+	 vpshufb	$Ii,$T2,$T2
+	vmovdqu		$Z2,0x50(%rsp)
+	 vpshufb	$Ii,$Hkey,$Hkey
+	vmovdqu		$T2,0x60(%rsp)
+	vmovdqu		$Hkey,0x70(%rsp)
+
+	call		_aesni_ctr32_ghash_6x
+
+	vmovups		$inout0,-0x60($out)	# save output
+	vmovups		$inout1,-0x50($out)
+	vmovups		$inout2,-0x40($out)
+	vmovups		$inout3,-0x30($out)
+	vmovups		$inout4,-0x20($out)
+	vmovups		$inout5,-0x10($out)
+
+	vpshufb		($const),$Xi,$Xi	# .Lbswap_mask
+	vmovdqu		$Xi,-0x40($Xip)		# output Xi
+
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	movaps	-0xd8(%rax),%xmm6
+	movaps	-0xc8(%rax),%xmm7
+	movaps	-0xb8(%rax),%xmm8
+	movaps	-0xa8(%rax),%xmm9
+	movaps	-0x98(%rax),%xmm10
+	movaps	-0x88(%rax),%xmm11
+	movaps	-0x78(%rax),%xmm12
+	movaps	-0x68(%rax),%xmm13
+	movaps	-0x58(%rax),%xmm14
+	movaps	-0x48(%rax),%xmm15
+___
+$code.=<<___;
+	mov	-48(%rax),%r15
+.cfi_restore	%r15
+	mov	-40(%rax),%r14
+.cfi_restore	%r14
+	mov	-32(%rax),%r13
+.cfi_restore	%r13
+	mov	-24(%rax),%r12
+.cfi_restore	%r12
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp		# restore %rsp
+.cfi_def_cfa_register	%rsp
+.Lgcm_dec_abort:
+	mov	$ret,%rax		# return value
+	ret
+.cfi_endproc
+.size	aesni_gcm_decrypt,.-aesni_gcm_decrypt
+___
+
+$code.=<<___;
+.type	_aesni_ctr32_6x,\@abi-omnipotent
+.align	32
+_aesni_ctr32_6x:
+	vmovdqu		0x00-0x80($key),$Z0	# borrow $Z0 for $rndkey
+	vmovdqu		0x20($const),$T2	# borrow $T2, .Lone_msb
+	lea		-1($rounds),%r13
+	vmovups		0x10-0x80($key),$rndkey
+	lea		0x20-0x80($key),%r12
+	vpxor		$Z0,$T1,$inout0
+	add		\$`6<<24`,$counter
+	jc		.Lhandle_ctr32_2
+	vpaddb		$T2,$T1,$inout1
+	vpaddb		$T2,$inout1,$inout2
+	vpxor		$Z0,$inout1,$inout1
+	vpaddb		$T2,$inout2,$inout3
+	vpxor		$Z0,$inout2,$inout2
+	vpaddb		$T2,$inout3,$inout4
+	vpxor		$Z0,$inout3,$inout3
+	vpaddb		$T2,$inout4,$inout5
+	vpxor		$Z0,$inout4,$inout4
+	vpaddb		$T2,$inout5,$T1
+	vpxor		$Z0,$inout5,$inout5
+	jmp		.Loop_ctr32
+
+.align	16
+.Loop_ctr32:
+	vaesenc		$rndkey,$inout0,$inout0
+	vaesenc		$rndkey,$inout1,$inout1
+	vaesenc		$rndkey,$inout2,$inout2
+	vaesenc		$rndkey,$inout3,$inout3
+	vaesenc		$rndkey,$inout4,$inout4
+	vaesenc		$rndkey,$inout5,$inout5
+	vmovups		(%r12),$rndkey
+	lea		0x10(%r12),%r12
+	dec		%r13d
+	jnz		.Loop_ctr32
+
+	vmovdqu		(%r12),$Hkey		# last round key
+	vaesenc		$rndkey,$inout0,$inout0
+	vpxor		0x00($inp),$Hkey,$Z0
+	vaesenc		$rndkey,$inout1,$inout1
+	vpxor		0x10($inp),$Hkey,$Z1
+	vaesenc		$rndkey,$inout2,$inout2
+	vpxor		0x20($inp),$Hkey,$Z2
+	vaesenc		$rndkey,$inout3,$inout3
+	vpxor		0x30($inp),$Hkey,$Xi
+	vaesenc		$rndkey,$inout4,$inout4
+	vpxor		0x40($inp),$Hkey,$T2
+	vaesenc		$rndkey,$inout5,$inout5
+	vpxor		0x50($inp),$Hkey,$Hkey
+	lea		0x60($inp),$inp
+
+	vaesenclast	$Z0,$inout0,$inout0
+	vaesenclast	$Z1,$inout1,$inout1
+	vaesenclast	$Z2,$inout2,$inout2
+	vaesenclast	$Xi,$inout3,$inout3
+	vaesenclast	$T2,$inout4,$inout4
+	vaesenclast	$Hkey,$inout5,$inout5
+	vmovups		$inout0,0x00($out)
+	vmovups		$inout1,0x10($out)
+	vmovups		$inout2,0x20($out)
+	vmovups		$inout3,0x30($out)
+	vmovups		$inout4,0x40($out)
+	vmovups		$inout5,0x50($out)
+	lea		0x60($out),$out
+
+	ret
+.align	32
+.Lhandle_ctr32_2:
+	vpshufb		$Ii,$T1,$Z2		# byte-swap counter
+	vmovdqu		0x30($const),$Z1	# borrow $Z1, .Ltwo_lsb
+	vpaddd		0x40($const),$Z2,$inout1	# .Lone_lsb
+	vpaddd		$Z1,$Z2,$inout2
+	vpaddd		$Z1,$inout1,$inout3
+	vpshufb		$Ii,$inout1,$inout1
+	vpaddd		$Z1,$inout2,$inout4
+	vpshufb		$Ii,$inout2,$inout2
+	vpxor		$Z0,$inout1,$inout1
+	vpaddd		$Z1,$inout3,$inout5
+	vpshufb		$Ii,$inout3,$inout3
+	vpxor		$Z0,$inout2,$inout2
+	vpaddd		$Z1,$inout4,$T1		# byte-swapped next counter value
+	vpshufb		$Ii,$inout4,$inout4
+	vpxor		$Z0,$inout3,$inout3
+	vpshufb		$Ii,$inout5,$inout5
+	vpxor		$Z0,$inout4,$inout4
+	vpshufb		$Ii,$T1,$T1		# next counter value
+	vpxor		$Z0,$inout5,$inout5
+	jmp	.Loop_ctr32
+.size	_aesni_ctr32_6x,.-_aesni_ctr32_6x
+
+.globl	aesni_gcm_encrypt
+.type	aesni_gcm_encrypt,\@function,6
+.align	32
+aesni_gcm_encrypt:
+.cfi_startproc
+	xor	$ret,$ret
+	cmp	\$0x60*3,$len			# minimal accepted length
+	jb	.Lgcm_enc_abort
+
+	lea	(%rsp),%rax			# save stack pointer
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+___
+$code.=<<___ if ($win64);
+	lea	-0xa8(%rsp),%rsp
+	movaps	%xmm6,-0xd8(%rax)
+	movaps	%xmm7,-0xc8(%rax)
+	movaps	%xmm8,-0xb8(%rax)
+	movaps	%xmm9,-0xa8(%rax)
+	movaps	%xmm10,-0x98(%rax)
+	movaps	%xmm11,-0x88(%rax)
+	movaps	%xmm12,-0x78(%rax)
+	movaps	%xmm13,-0x68(%rax)
+	movaps	%xmm14,-0x58(%rax)
+	movaps	%xmm15,-0x48(%rax)
+.Lgcm_enc_body:
+___
+$code.=<<___;
+	vzeroupper
+
+	vmovdqu		($ivp),$T1		# input counter value
+	add		\$-128,%rsp
+	mov		12($ivp),$counter
+	lea		.Lbswap_mask(%rip),$const
+	lea		-0x80($key),$in0	# borrow $in0
+	mov		\$0xf80,$end0		# borrow $end0
+	lea		0x80($key),$key		# size optimization
+	vmovdqu		($const),$Ii		# borrow $Ii for .Lbswap_mask
+	and		\$-128,%rsp		# ensure stack alignment
+	mov		0xf0-0x80($key),$rounds
+
+	and		$end0,$in0
+	and		%rsp,$end0
+	sub		$in0,$end0
+	jc		.Lenc_no_key_aliasing
+	cmp		\$768,$end0
+	jnc		.Lenc_no_key_aliasing
+	sub		$end0,%rsp		# avoid aliasing with key
+.Lenc_no_key_aliasing:
+
+	lea		($out),$in0
+	lea		-0xc0($out,$len),$end0
+	shr		\$4,$len
+
+	call		_aesni_ctr32_6x
+	vpshufb		$Ii,$inout0,$Xi		# save bswapped output on stack
+	vpshufb		$Ii,$inout1,$T2
+	vmovdqu		$Xi,0x70(%rsp)
+	vpshufb		$Ii,$inout2,$Z0
+	vmovdqu		$T2,0x60(%rsp)
+	vpshufb		$Ii,$inout3,$Z1
+	vmovdqu		$Z0,0x50(%rsp)
+	vpshufb		$Ii,$inout4,$Z2
+	vmovdqu		$Z1,0x40(%rsp)
+	vpshufb		$Ii,$inout5,$Z3		# passed to _aesni_ctr32_ghash_6x
+	vmovdqu		$Z2,0x30(%rsp)
+
+	call		_aesni_ctr32_6x
+
+	vmovdqu		($Xip),$Xi		# load Xi
+	lea		0x20+0x20($Xip),$Xip	# size optimization
+	sub		\$12,$len
+	mov		\$0x60*2,$ret
+	vpshufb		$Ii,$Xi,$Xi
+
+	call		_aesni_ctr32_ghash_6x
+	vmovdqu		0x20(%rsp),$Z3		# I[5]
+	 vmovdqu	($const),$Ii		# borrow $Ii for .Lbswap_mask
+	vmovdqu		0x00-0x20($Xip),$Hkey	# $Hkey^1
+	vpunpckhqdq	$Z3,$Z3,$T1
+	vmovdqu		0x20-0x20($Xip),$rndkey	# borrow $rndkey for $HK
+	 vmovups	$inout0,-0x60($out)	# save output
+	 vpshufb	$Ii,$inout0,$inout0	# but keep bswapped copy
+	vpxor		$Z3,$T1,$T1
+	 vmovups	$inout1,-0x50($out)
+	 vpshufb	$Ii,$inout1,$inout1
+	 vmovups	$inout2,-0x40($out)
+	 vpshufb	$Ii,$inout2,$inout2
+	 vmovups	$inout3,-0x30($out)
+	 vpshufb	$Ii,$inout3,$inout3
+	 vmovups	$inout4,-0x20($out)
+	 vpshufb	$Ii,$inout4,$inout4
+	 vmovups	$inout5,-0x10($out)
+	 vpshufb	$Ii,$inout5,$inout5
+	 vmovdqu	$inout0,0x10(%rsp)	# free $inout0
+___
+{ my ($HK,$T3)=($rndkey,$inout0);
+
+$code.=<<___;
+	 vmovdqu	0x30(%rsp),$Z2		# I[4]
+	 vmovdqu	0x10-0x20($Xip),$Ii	# borrow $Ii for $Hkey^2
+	 vpunpckhqdq	$Z2,$Z2,$T2
+	vpclmulqdq	\$0x00,$Hkey,$Z3,$Z1
+	 vpxor		$Z2,$T2,$T2
+	vpclmulqdq	\$0x11,$Hkey,$Z3,$Z3
+	vpclmulqdq	\$0x00,$HK,$T1,$T1
+
+	 vmovdqu	0x40(%rsp),$T3		# I[3]
+	vpclmulqdq	\$0x00,$Ii,$Z2,$Z0
+	 vmovdqu	0x30-0x20($Xip),$Hkey	# $Hkey^3
+	vpxor		$Z1,$Z0,$Z0
+	 vpunpckhqdq	$T3,$T3,$Z1
+	vpclmulqdq	\$0x11,$Ii,$Z2,$Z2
+	 vpxor		$T3,$Z1,$Z1
+	vpxor		$Z3,$Z2,$Z2
+	vpclmulqdq	\$0x10,$HK,$T2,$T2
+	 vmovdqu	0x50-0x20($Xip),$HK
+	vpxor		$T1,$T2,$T2
+
+	 vmovdqu	0x50(%rsp),$T1		# I[2]
+	vpclmulqdq	\$0x00,$Hkey,$T3,$Z3
+	 vmovdqu	0x40-0x20($Xip),$Ii	# borrow $Ii for $Hkey^4
+	vpxor		$Z0,$Z3,$Z3
+	 vpunpckhqdq	$T1,$T1,$Z0
+	vpclmulqdq	\$0x11,$Hkey,$T3,$T3
+	 vpxor		$T1,$Z0,$Z0
+	vpxor		$Z2,$T3,$T3
+	vpclmulqdq	\$0x00,$HK,$Z1,$Z1
+	vpxor		$T2,$Z1,$Z1
+
+	 vmovdqu	0x60(%rsp),$T2		# I[1]
+	vpclmulqdq	\$0x00,$Ii,$T1,$Z2
+	 vmovdqu	0x60-0x20($Xip),$Hkey	# $Hkey^5
+	vpxor		$Z3,$Z2,$Z2
+	 vpunpckhqdq	$T2,$T2,$Z3
+	vpclmulqdq	\$0x11,$Ii,$T1,$T1
+	 vpxor		$T2,$Z3,$Z3
+	vpxor		$T3,$T1,$T1
+	vpclmulqdq	\$0x10,$HK,$Z0,$Z0
+	 vmovdqu	0x80-0x20($Xip),$HK
+	vpxor		$Z1,$Z0,$Z0
+
+	 vpxor		0x70(%rsp),$Xi,$Xi	# accumulate I[0]
+	vpclmulqdq	\$0x00,$Hkey,$T2,$Z1
+	 vmovdqu	0x70-0x20($Xip),$Ii	# borrow $Ii for $Hkey^6
+	 vpunpckhqdq	$Xi,$Xi,$T3
+	vpxor		$Z2,$Z1,$Z1
+	vpclmulqdq	\$0x11,$Hkey,$T2,$T2
+	 vpxor		$Xi,$T3,$T3
+	vpxor		$T1,$T2,$T2
+	vpclmulqdq	\$0x00,$HK,$Z3,$Z3
+	vpxor		$Z0,$Z3,$Z0
+
+	vpclmulqdq	\$0x00,$Ii,$Xi,$Z2
+	 vmovdqu	0x00-0x20($Xip),$Hkey	# $Hkey^1
+	 vpunpckhqdq	$inout5,$inout5,$T1
+	vpclmulqdq	\$0x11,$Ii,$Xi,$Xi
+	 vpxor		$inout5,$T1,$T1
+	vpxor		$Z1,$Z2,$Z1
+	vpclmulqdq	\$0x10,$HK,$T3,$T3
+	 vmovdqu	0x20-0x20($Xip),$HK
+	vpxor		$T2,$Xi,$Z3
+	vpxor		$Z0,$T3,$Z2
+
+	 vmovdqu	0x10-0x20($Xip),$Ii	# borrow $Ii for $Hkey^2
+	  vpxor		$Z1,$Z3,$T3		# aggregated Karatsuba post-processing
+	vpclmulqdq	\$0x00,$Hkey,$inout5,$Z0
+	  vpxor		$T3,$Z2,$Z2
+	 vpunpckhqdq	$inout4,$inout4,$T2
+	vpclmulqdq	\$0x11,$Hkey,$inout5,$inout5
+	 vpxor		$inout4,$T2,$T2
+	  vpslldq	\$8,$Z2,$T3
+	vpclmulqdq	\$0x00,$HK,$T1,$T1
+	  vpxor		$T3,$Z1,$Xi
+	  vpsrldq	\$8,$Z2,$Z2
+	  vpxor		$Z2,$Z3,$Z3
+
+	vpclmulqdq	\$0x00,$Ii,$inout4,$Z1
+	 vmovdqu	0x30-0x20($Xip),$Hkey	# $Hkey^3
+	vpxor		$Z0,$Z1,$Z1
+	 vpunpckhqdq	$inout3,$inout3,$T3
+	vpclmulqdq	\$0x11,$Ii,$inout4,$inout4
+	 vpxor		$inout3,$T3,$T3
+	vpxor		$inout5,$inout4,$inout4
+	  vpalignr	\$8,$Xi,$Xi,$inout5	# 1st phase
+	vpclmulqdq	\$0x10,$HK,$T2,$T2
+	 vmovdqu	0x50-0x20($Xip),$HK
+	vpxor		$T1,$T2,$T2
+
+	vpclmulqdq	\$0x00,$Hkey,$inout3,$Z0
+	 vmovdqu	0x40-0x20($Xip),$Ii	# borrow $Ii for $Hkey^4
+	vpxor		$Z1,$Z0,$Z0
+	 vpunpckhqdq	$inout2,$inout2,$T1
+	vpclmulqdq	\$0x11,$Hkey,$inout3,$inout3
+	 vpxor		$inout2,$T1,$T1
+	vpxor		$inout4,$inout3,$inout3
+	  vxorps	0x10(%rsp),$Z3,$Z3	# accumulate $inout0
+	vpclmulqdq	\$0x00,$HK,$T3,$T3
+	vpxor		$T2,$T3,$T3
+
+	  vpclmulqdq	\$0x10,0x10($const),$Xi,$Xi
+	  vxorps	$inout5,$Xi,$Xi
+
+	vpclmulqdq	\$0x00,$Ii,$inout2,$Z1
+	 vmovdqu	0x60-0x20($Xip),$Hkey	# $Hkey^5
+	vpxor		$Z0,$Z1,$Z1
+	 vpunpckhqdq	$inout1,$inout1,$T2
+	vpclmulqdq	\$0x11,$Ii,$inout2,$inout2
+	 vpxor		$inout1,$T2,$T2
+	  vpalignr	\$8,$Xi,$Xi,$inout5	# 2nd phase
+	vpxor		$inout3,$inout2,$inout2
+	vpclmulqdq	\$0x10,$HK,$T1,$T1
+	 vmovdqu	0x80-0x20($Xip),$HK
+	vpxor		$T3,$T1,$T1
+
+	  vxorps	$Z3,$inout5,$inout5
+	  vpclmulqdq	\$0x10,0x10($const),$Xi,$Xi
+	  vxorps	$inout5,$Xi,$Xi
+
+	vpclmulqdq	\$0x00,$Hkey,$inout1,$Z0
+	 vmovdqu	0x70-0x20($Xip),$Ii	# borrow $Ii for $Hkey^6
+	vpxor		$Z1,$Z0,$Z0
+	 vpunpckhqdq	$Xi,$Xi,$T3
+	vpclmulqdq	\$0x11,$Hkey,$inout1,$inout1
+	 vpxor		$Xi,$T3,$T3
+	vpxor		$inout2,$inout1,$inout1
+	vpclmulqdq	\$0x00,$HK,$T2,$T2
+	vpxor		$T1,$T2,$T2
+
+	vpclmulqdq	\$0x00,$Ii,$Xi,$Z1
+	vpclmulqdq	\$0x11,$Ii,$Xi,$Z3
+	vpxor		$Z0,$Z1,$Z1
+	vpclmulqdq	\$0x10,$HK,$T3,$Z2
+	vpxor		$inout1,$Z3,$Z3
+	vpxor		$T2,$Z2,$Z2
+
+	vpxor		$Z1,$Z3,$Z0		# aggregated Karatsuba post-processing
+	vpxor		$Z0,$Z2,$Z2
+	vpslldq		\$8,$Z2,$T1
+	vmovdqu		0x10($const),$Hkey	# .Lpoly
+	vpsrldq		\$8,$Z2,$Z2
+	vpxor		$T1,$Z1,$Xi
+	vpxor		$Z2,$Z3,$Z3
+
+	vpalignr	\$8,$Xi,$Xi,$T2		# 1st phase
+	vpclmulqdq	\$0x10,$Hkey,$Xi,$Xi
+	vpxor		$T2,$Xi,$Xi
+
+	vpalignr	\$8,$Xi,$Xi,$T2		# 2nd phase
+	vpclmulqdq	\$0x10,$Hkey,$Xi,$Xi
+	vpxor		$Z3,$T2,$T2
+	vpxor		$T2,$Xi,$Xi
+___
+}
+$code.=<<___;
+	vpshufb		($const),$Xi,$Xi	# .Lbswap_mask
+	vmovdqu		$Xi,-0x40($Xip)		# output Xi
+
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	movaps	-0xd8(%rax),%xmm6
+	movaps	-0xc8(%rax),%xmm7
+	movaps	-0xb8(%rax),%xmm8
+	movaps	-0xa8(%rax),%xmm9
+	movaps	-0x98(%rax),%xmm10
+	movaps	-0x88(%rax),%xmm11
+	movaps	-0x78(%rax),%xmm12
+	movaps	-0x68(%rax),%xmm13
+	movaps	-0x58(%rax),%xmm14
+	movaps	-0x48(%rax),%xmm15
+___
+$code.=<<___;
+	mov	-48(%rax),%r15
+.cfi_restore	%r15
+	mov	-40(%rax),%r14
+.cfi_restore	%r14
+	mov	-32(%rax),%r13
+.cfi_restore	%r13
+	mov	-24(%rax),%r12
+.cfi_restore	%r12
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp		# restore %rsp
+.cfi_def_cfa_register	%rsp
+.Lgcm_enc_abort:
+	mov	$ret,%rax		# return value
+	ret
+.cfi_endproc
+.size	aesni_gcm_encrypt,.-aesni_gcm_encrypt
+___
+
+$code.=<<___;
+.align	64
+.Lbswap_mask:
+	.byte	15,14,13,12,11,10,9,8,7,6,5,4,3,2,1,0
+.Lpoly:
+	.byte	0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0xc2
+.Lone_msb:
+	.byte	0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1
+.Ltwo_lsb:
+	.byte	2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
+.Lone_lsb:
+	.byte	1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
+.asciz	"AES-NI GCM module for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+.align	64
+___
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___
+.extern	__imp_RtlVirtualUnwind
+.type	gcm_se_handler,\@abi-omnipotent
+.align	16
+gcm_se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lcommon_seh_tail
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lcommon_seh_tail
+
+	mov	120($context),%rax	# pull context->Rax
+
+	mov	-48(%rax),%r15
+	mov	-40(%rax),%r14
+	mov	-32(%rax),%r13
+	mov	-24(%rax),%r12
+	mov	-16(%rax),%rbp
+	mov	-8(%rax),%rbx
+	mov	%r15,240($context)
+	mov	%r14,232($context)
+	mov	%r13,224($context)
+	mov	%r12,216($context)
+	mov	%rbp,160($context)
+	mov	%rbx,144($context)
+
+	lea	-0xd8(%rax),%rsi	# %xmm save area
+	lea	512($context),%rdi	# & context.Xmm6
+	mov	\$20,%ecx		# 10*sizeof(%xmm0)/sizeof(%rax)
+	.long	0xa548f3fc		# cld; rep movsq
+
+.Lcommon_seh_tail:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	gcm_se_handler,.-gcm_se_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_aesni_gcm_decrypt
+	.rva	.LSEH_end_aesni_gcm_decrypt
+	.rva	.LSEH_gcm_dec_info
+
+	.rva	.LSEH_begin_aesni_gcm_encrypt
+	.rva	.LSEH_end_aesni_gcm_encrypt
+	.rva	.LSEH_gcm_enc_info
+.section	.xdata
+.align	8
+.LSEH_gcm_dec_info:
+	.byte	9,0,0,0
+	.rva	gcm_se_handler
+	.rva	.Lgcm_dec_body,.Lgcm_dec_abort
+.LSEH_gcm_enc_info:
+	.byte	9,0,0,0
+	.rva	gcm_se_handler
+	.rva	.Lgcm_enc_body,.Lgcm_enc_abort
+___
+}
+}}} else {{{
+$code=<<___;	# assembler is too old
+.text
+
+.globl	aesni_gcm_encrypt
+.type	aesni_gcm_encrypt,\@abi-omnipotent
+aesni_gcm_encrypt:
+	xor	%eax,%eax
+	ret
+.size	aesni_gcm_encrypt,.-aesni_gcm_encrypt
+
+.globl	aesni_gcm_decrypt
+.type	aesni_gcm_decrypt,\@abi-omnipotent
+aesni_gcm_decrypt:
+	xor	%eax,%eax
+	ret
+.size	aesni_gcm_decrypt,.-aesni_gcm_decrypt
+___
+}}}
+
+$code =~ s/\`([^\`]*)\`/eval($1)/gem;
+
+print $code;
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-alpha.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-alpha.pl
new file mode 100644
index 000000000..ccf6b2bd6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-alpha.pl
@@ -0,0 +1,467 @@
+#! /usr/bin/env perl
+# Copyright 2010-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# March 2010
+#
+# The module implements "4-bit" GCM GHASH function and underlying
+# single multiplication operation in GF(2^128). "4-bit" means that it
+# uses 256 bytes per-key table [+128 bytes shared table]. Even though
+# loops are aggressively modulo-scheduled in respect to references to
+# Htbl and Z.hi updates for 8 cycles per byte, measured performance is
+# ~12 cycles per processed byte on 21264 CPU. It seems to be a dynamic
+# scheduling "glitch," because uprofile(1) indicates uniform sample
+# distribution, as if all instruction bundles execute in 1.5 cycles.
+# Meaning that it could have been even faster, yet 12 cycles is ~60%
+# better than gcc-generated code and ~80% than code generated by vendor
+# compiler.
+
+$cnt="v0";	# $0
+$t0="t0";
+$t1="t1";
+$t2="t2";
+$Thi0="t3";	# $4
+$Tlo0="t4";
+$Thi1="t5";
+$Tlo1="t6";
+$rem="t7";	# $8
+#################
+$Xi="a0";	# $16, input argument block
+$Htbl="a1";
+$inp="a2";
+$len="a3";
+$nlo="a4";	# $20
+$nhi="a5";
+$Zhi="t8";
+$Zlo="t9";
+$Xhi="t10";	# $24
+$Xlo="t11";
+$remp="t12";
+$rem_4bit="AT";	# $28
+
+{ my $N;
+  sub loop() {
+
+	$N++;
+$code.=<<___;
+.align	4
+	extbl	$Xlo,7,$nlo
+	and	$nlo,0xf0,$nhi
+	sll	$nlo,4,$nlo
+	and	$nlo,0xf0,$nlo
+
+	addq	$nlo,$Htbl,$nlo
+	ldq	$Zlo,8($nlo)
+	addq	$nhi,$Htbl,$nhi
+	ldq	$Zhi,0($nlo)
+
+	and	$Zlo,0x0f,$remp
+	sll	$Zhi,60,$t0
+	lda	$cnt,6(zero)
+	extbl	$Xlo,6,$nlo
+
+	ldq	$Tlo1,8($nhi)
+	s8addq	$remp,$rem_4bit,$remp
+	ldq	$Thi1,0($nhi)
+	srl	$Zlo,4,$Zlo
+
+	ldq	$rem,0($remp)
+	srl	$Zhi,4,$Zhi
+	xor	$t0,$Zlo,$Zlo
+	and	$nlo,0xf0,$nhi
+
+	xor	$Tlo1,$Zlo,$Zlo
+	sll	$nlo,4,$nlo
+	xor	$Thi1,$Zhi,$Zhi
+	and	$nlo,0xf0,$nlo
+
+	addq	$nlo,$Htbl,$nlo
+	ldq	$Tlo0,8($nlo)
+	addq	$nhi,$Htbl,$nhi
+	ldq	$Thi0,0($nlo)
+
+.Looplo$N:
+	and	$Zlo,0x0f,$remp
+	sll	$Zhi,60,$t0
+	subq	$cnt,1,$cnt
+	srl	$Zlo,4,$Zlo
+
+	ldq	$Tlo1,8($nhi)
+	xor	$rem,$Zhi,$Zhi
+	ldq	$Thi1,0($nhi)
+	s8addq	$remp,$rem_4bit,$remp
+
+	ldq	$rem,0($remp)
+	srl	$Zhi,4,$Zhi
+	xor	$t0,$Zlo,$Zlo
+	extbl	$Xlo,$cnt,$nlo
+
+	and	$nlo,0xf0,$nhi
+	xor	$Thi0,$Zhi,$Zhi
+	xor	$Tlo0,$Zlo,$Zlo
+	sll	$nlo,4,$nlo
+
+
+	and	$Zlo,0x0f,$remp
+	sll	$Zhi,60,$t0
+	and	$nlo,0xf0,$nlo
+	srl	$Zlo,4,$Zlo
+
+	s8addq	$remp,$rem_4bit,$remp
+	xor	$rem,$Zhi,$Zhi
+	addq	$nlo,$Htbl,$nlo
+	addq	$nhi,$Htbl,$nhi
+
+	ldq	$rem,0($remp)
+	srl	$Zhi,4,$Zhi
+	ldq	$Tlo0,8($nlo)
+	xor	$t0,$Zlo,$Zlo
+
+	xor	$Tlo1,$Zlo,$Zlo
+	xor	$Thi1,$Zhi,$Zhi
+	ldq	$Thi0,0($nlo)
+	bne	$cnt,.Looplo$N
+
+
+	and	$Zlo,0x0f,$remp
+	sll	$Zhi,60,$t0
+	lda	$cnt,7(zero)
+	srl	$Zlo,4,$Zlo
+
+	ldq	$Tlo1,8($nhi)
+	xor	$rem,$Zhi,$Zhi
+	ldq	$Thi1,0($nhi)
+	s8addq	$remp,$rem_4bit,$remp
+
+	ldq	$rem,0($remp)
+	srl	$Zhi,4,$Zhi
+	xor	$t0,$Zlo,$Zlo
+	extbl	$Xhi,$cnt,$nlo
+
+	and	$nlo,0xf0,$nhi
+	xor	$Thi0,$Zhi,$Zhi
+	xor	$Tlo0,$Zlo,$Zlo
+	sll	$nlo,4,$nlo
+
+	and	$Zlo,0x0f,$remp
+	sll	$Zhi,60,$t0
+	and	$nlo,0xf0,$nlo
+	srl	$Zlo,4,$Zlo
+
+	s8addq	$remp,$rem_4bit,$remp
+	xor	$rem,$Zhi,$Zhi
+	addq	$nlo,$Htbl,$nlo
+	addq	$nhi,$Htbl,$nhi
+
+	ldq	$rem,0($remp)
+	srl	$Zhi,4,$Zhi
+	ldq	$Tlo0,8($nlo)
+	xor	$t0,$Zlo,$Zlo
+
+	xor	$Tlo1,$Zlo,$Zlo
+	xor	$Thi1,$Zhi,$Zhi
+	ldq	$Thi0,0($nlo)
+	unop
+
+
+.Loophi$N:
+	and	$Zlo,0x0f,$remp
+	sll	$Zhi,60,$t0
+	subq	$cnt,1,$cnt
+	srl	$Zlo,4,$Zlo
+
+	ldq	$Tlo1,8($nhi)
+	xor	$rem,$Zhi,$Zhi
+	ldq	$Thi1,0($nhi)
+	s8addq	$remp,$rem_4bit,$remp
+
+	ldq	$rem,0($remp)
+	srl	$Zhi,4,$Zhi
+	xor	$t0,$Zlo,$Zlo
+	extbl	$Xhi,$cnt,$nlo
+
+	and	$nlo,0xf0,$nhi
+	xor	$Thi0,$Zhi,$Zhi
+	xor	$Tlo0,$Zlo,$Zlo
+	sll	$nlo,4,$nlo
+
+
+	and	$Zlo,0x0f,$remp
+	sll	$Zhi,60,$t0
+	and	$nlo,0xf0,$nlo
+	srl	$Zlo,4,$Zlo
+
+	s8addq	$remp,$rem_4bit,$remp
+	xor	$rem,$Zhi,$Zhi
+	addq	$nlo,$Htbl,$nlo
+	addq	$nhi,$Htbl,$nhi
+
+	ldq	$rem,0($remp)
+	srl	$Zhi,4,$Zhi
+	ldq	$Tlo0,8($nlo)
+	xor	$t0,$Zlo,$Zlo
+
+	xor	$Tlo1,$Zlo,$Zlo
+	xor	$Thi1,$Zhi,$Zhi
+	ldq	$Thi0,0($nlo)
+	bne	$cnt,.Loophi$N
+
+
+	and	$Zlo,0x0f,$remp
+	sll	$Zhi,60,$t0
+	srl	$Zlo,4,$Zlo
+
+	ldq	$Tlo1,8($nhi)
+	xor	$rem,$Zhi,$Zhi
+	ldq	$Thi1,0($nhi)
+	s8addq	$remp,$rem_4bit,$remp
+
+	ldq	$rem,0($remp)
+	srl	$Zhi,4,$Zhi
+	xor	$t0,$Zlo,$Zlo
+
+	xor	$Tlo0,$Zlo,$Zlo
+	xor	$Thi0,$Zhi,$Zhi
+
+	and	$Zlo,0x0f,$remp
+	sll	$Zhi,60,$t0
+	srl	$Zlo,4,$Zlo
+
+	s8addq	$remp,$rem_4bit,$remp
+	xor	$rem,$Zhi,$Zhi
+
+	ldq	$rem,0($remp)
+	srl	$Zhi,4,$Zhi
+	xor	$Tlo1,$Zlo,$Zlo
+	xor	$Thi1,$Zhi,$Zhi
+	xor	$t0,$Zlo,$Zlo
+	xor	$rem,$Zhi,$Zhi
+___
+}}
+
+$code=<<___;
+#ifdef __linux__
+#include <asm/regdef.h>
+#else
+#include <asm.h>
+#include <regdef.h>
+#endif
+
+.text
+
+.set	noat
+.set	noreorder
+.globl	gcm_gmult_4bit
+.align	4
+.ent	gcm_gmult_4bit
+gcm_gmult_4bit:
+	.frame	sp,0,ra
+	.prologue 0
+
+	ldq	$Xlo,8($Xi)
+	ldq	$Xhi,0($Xi)
+
+	bsr	$t0,picmeup
+	nop
+___
+
+	&loop();
+
+$code.=<<___;
+	srl	$Zlo,24,$t0	# byte swap
+	srl	$Zlo,8,$t1
+
+	sll	$Zlo,8,$t2
+	sll	$Zlo,24,$Zlo
+	zapnot	$t0,0x11,$t0
+	zapnot	$t1,0x22,$t1
+
+	zapnot	$Zlo,0x88,$Zlo
+	or	$t0,$t1,$t0
+	zapnot	$t2,0x44,$t2
+
+	or	$Zlo,$t0,$Zlo
+	srl	$Zhi,24,$t0
+	srl	$Zhi,8,$t1
+
+	or	$Zlo,$t2,$Zlo
+	sll	$Zhi,8,$t2
+	sll	$Zhi,24,$Zhi
+
+	srl	$Zlo,32,$Xlo
+	sll	$Zlo,32,$Zlo
+
+	zapnot	$t0,0x11,$t0
+	zapnot	$t1,0x22,$t1
+	or	$Zlo,$Xlo,$Xlo
+
+	zapnot	$Zhi,0x88,$Zhi
+	or	$t0,$t1,$t0
+	zapnot	$t2,0x44,$t2
+
+	or	$Zhi,$t0,$Zhi
+	or	$Zhi,$t2,$Zhi
+
+	srl	$Zhi,32,$Xhi
+	sll	$Zhi,32,$Zhi
+
+	or	$Zhi,$Xhi,$Xhi
+	stq	$Xlo,8($Xi)
+	stq	$Xhi,0($Xi)
+
+	ret	(ra)
+.end	gcm_gmult_4bit
+___
+
+$inhi="s0";
+$inlo="s1";
+
+$code.=<<___;
+.globl	gcm_ghash_4bit
+.align	4
+.ent	gcm_ghash_4bit
+gcm_ghash_4bit:
+	lda	sp,-32(sp)
+	stq	ra,0(sp)
+	stq	s0,8(sp)
+	stq	s1,16(sp)
+	.mask	0x04000600,-32
+	.frame	sp,32,ra
+	.prologue 0
+
+	ldq_u	$inhi,0($inp)
+	ldq_u	$Thi0,7($inp)
+	ldq_u	$inlo,8($inp)
+	ldq_u	$Tlo0,15($inp)
+	ldq	$Xhi,0($Xi)
+	ldq	$Xlo,8($Xi)
+
+	bsr	$t0,picmeup
+	nop
+
+.Louter:
+	extql	$inhi,$inp,$inhi
+	extqh	$Thi0,$inp,$Thi0
+	or	$inhi,$Thi0,$inhi
+	lda	$inp,16($inp)
+
+	extql	$inlo,$inp,$inlo
+	extqh	$Tlo0,$inp,$Tlo0
+	or	$inlo,$Tlo0,$inlo
+	subq	$len,16,$len
+
+	xor	$Xlo,$inlo,$Xlo
+	xor	$Xhi,$inhi,$Xhi
+___
+
+	&loop();
+
+$code.=<<___;
+	srl	$Zlo,24,$t0	# byte swap
+	srl	$Zlo,8,$t1
+
+	sll	$Zlo,8,$t2
+	sll	$Zlo,24,$Zlo
+	zapnot	$t0,0x11,$t0
+	zapnot	$t1,0x22,$t1
+
+	zapnot	$Zlo,0x88,$Zlo
+	or	$t0,$t1,$t0
+	zapnot	$t2,0x44,$t2
+
+	or	$Zlo,$t0,$Zlo
+	srl	$Zhi,24,$t0
+	srl	$Zhi,8,$t1
+
+	or	$Zlo,$t2,$Zlo
+	sll	$Zhi,8,$t2
+	sll	$Zhi,24,$Zhi
+
+	srl	$Zlo,32,$Xlo
+	sll	$Zlo,32,$Zlo
+	beq	$len,.Ldone
+
+	zapnot	$t0,0x11,$t0
+	zapnot	$t1,0x22,$t1
+	or	$Zlo,$Xlo,$Xlo
+	ldq_u	$inhi,0($inp)
+
+	zapnot	$Zhi,0x88,$Zhi
+	or	$t0,$t1,$t0
+	zapnot	$t2,0x44,$t2
+	ldq_u	$Thi0,7($inp)
+
+	or	$Zhi,$t0,$Zhi
+	or	$Zhi,$t2,$Zhi
+	ldq_u	$inlo,8($inp)
+	ldq_u	$Tlo0,15($inp)
+
+	srl	$Zhi,32,$Xhi
+	sll	$Zhi,32,$Zhi
+
+	or	$Zhi,$Xhi,$Xhi
+	br	zero,.Louter
+
+.Ldone:
+	zapnot	$t0,0x11,$t0
+	zapnot	$t1,0x22,$t1
+	or	$Zlo,$Xlo,$Xlo
+
+	zapnot	$Zhi,0x88,$Zhi
+	or	$t0,$t1,$t0
+	zapnot	$t2,0x44,$t2
+
+	or	$Zhi,$t0,$Zhi
+	or	$Zhi,$t2,$Zhi
+
+	srl	$Zhi,32,$Xhi
+	sll	$Zhi,32,$Zhi
+
+	or	$Zhi,$Xhi,$Xhi
+
+	stq	$Xlo,8($Xi)
+	stq	$Xhi,0($Xi)
+
+	.set	noreorder
+	/*ldq	ra,0(sp)*/
+	ldq	s0,8(sp)
+	ldq	s1,16(sp)
+	lda	sp,32(sp)
+	ret	(ra)
+.end	gcm_ghash_4bit
+
+.align	4
+.ent	picmeup
+picmeup:
+	.frame	sp,0,$t0
+	.prologue 0
+	br	$rem_4bit,.Lpic
+.Lpic:	lda	$rem_4bit,12($rem_4bit)
+	ret	($t0)
+.end	picmeup
+	nop
+rem_4bit:
+	.long	0,0x0000<<16, 0,0x1C20<<16, 0,0x3840<<16, 0,0x2460<<16
+	.long	0,0x7080<<16, 0,0x6CA0<<16, 0,0x48C0<<16, 0,0x54E0<<16
+	.long	0,0xE100<<16, 0,0xFD20<<16, 0,0xD940<<16, 0,0xC560<<16
+	.long	0,0x9180<<16, 0,0x8DA0<<16, 0,0xA9C0<<16, 0,0xB5E0<<16
+.ascii	"GHASH for Alpha, CRYPTOGAMS by <appro\@openssl.org>"
+.align	4
+
+___
+$output=pop and open STDOUT,">$output";
+print $code;
+close STDOUT;
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-armv4.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-armv4.pl
new file mode 100644
index 000000000..dcc23f7d7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-armv4.pl
@@ -0,0 +1,551 @@
+#! /usr/bin/env perl
+# Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# April 2010
+#
+# The module implements "4-bit" GCM GHASH function and underlying
+# single multiplication operation in GF(2^128). "4-bit" means that it
+# uses 256 bytes per-key table [+32 bytes shared table]. There is no
+# experimental performance data available yet. The only approximation
+# that can be made at this point is based on code size. Inner loop is
+# 32 instructions long and on single-issue core should execute in <40
+# cycles. Having verified that gcc 3.4 didn't unroll corresponding
+# loop, this assembler loop body was found to be ~3x smaller than
+# compiler-generated one...
+#
+# July 2010
+#
+# Rescheduling for dual-issue pipeline resulted in 8.5% improvement on
+# Cortex A8 core and ~25 cycles per processed byte (which was observed
+# to be ~3 times faster than gcc-generated code:-)
+#
+# February 2011
+#
+# Profiler-assisted and platform-specific optimization resulted in 7%
+# improvement on Cortex A8 core and ~23.5 cycles per byte.
+#
+# March 2011
+#
+# Add NEON implementation featuring polynomial multiplication, i.e. no
+# lookup tables involved. On Cortex A8 it was measured to process one
+# byte in 15 cycles or 55% faster than integer-only code.
+#
+# April 2014
+#
+# Switch to multiplication algorithm suggested in paper referred
+# below and combine it with reduction algorithm from x86 module.
+# Performance improvement over previous version varies from 65% on
+# Snapdragon S4 to 110% on Cortex A9. In absolute terms Cortex A8
+# processes one byte in 8.45 cycles, A9 - in 10.2, A15 - in 7.63,
+# Snapdragon S4 - in 9.33.
+#
+# Câmara, D.; Gouvêa, C. P. L.; López, J. & Dahab, R.: Fast Software
+# Polynomial Multiplication on ARM Processors using the NEON Engine.
+#
+# http://conradoplg.cryptoland.net/files/2010/12/mocrysen13.pdf
+
+# ====================================================================
+# Note about "528B" variant. In ARM case it makes lesser sense to
+# implement it for following reasons:
+#
+# - performance improvement won't be anywhere near 50%, because 128-
+#   bit shift operation is neatly fused with 128-bit xor here, and
+#   "538B" variant would eliminate only 4-5 instructions out of 32
+#   in the inner loop (meaning that estimated improvement is ~15%);
+# - ARM-based systems are often embedded ones and extra memory
+#   consumption might be unappreciated (for so little improvement);
+#
+# Byte order [in]dependence. =========================================
+#
+# Caller is expected to maintain specific *dword* order in Htable,
+# namely with *least* significant dword of 128-bit value at *lower*
+# address. This differs completely from C code and has everything to
+# do with ldm instruction and order in which dwords are "consumed" by
+# algorithm. *Byte* order within these dwords in turn is whatever
+# *native* byte order on current platform. See gcm128.c for working
+# example...
+
+$flavour = shift;
+if ($flavour=~/\w[\w\-]*\.\w+$/) { $output=$flavour; undef $flavour; }
+else { while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {} }
+
+if ($flavour && $flavour ne "void") {
+    $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+    ( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+    ( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+    die "can't locate arm-xlate.pl";
+
+    open STDOUT,"| \"$^X\" $xlate $flavour $output";
+} else {
+    open STDOUT,">$output";
+}
+
+$Xi="r0";	# argument block
+$Htbl="r1";
+$inp="r2";
+$len="r3";
+
+$Zll="r4";	# variables
+$Zlh="r5";
+$Zhl="r6";
+$Zhh="r7";
+$Tll="r8";
+$Tlh="r9";
+$Thl="r10";
+$Thh="r11";
+$nlo="r12";
+################# r13 is stack pointer
+$nhi="r14";
+################# r15 is program counter
+
+$rem_4bit=$inp;	# used in gcm_gmult_4bit
+$cnt=$len;
+
+sub Zsmash() {
+  my $i=12;
+  my @args=@_;
+  for ($Zll,$Zlh,$Zhl,$Zhh) {
+    $code.=<<___;
+#if __ARM_ARCH__>=7 && defined(__ARMEL__)
+	rev	$_,$_
+	str	$_,[$Xi,#$i]
+#elif defined(__ARMEB__)
+	str	$_,[$Xi,#$i]
+#else
+	mov	$Tlh,$_,lsr#8
+	strb	$_,[$Xi,#$i+3]
+	mov	$Thl,$_,lsr#16
+	strb	$Tlh,[$Xi,#$i+2]
+	mov	$Thh,$_,lsr#24
+	strb	$Thl,[$Xi,#$i+1]
+	strb	$Thh,[$Xi,#$i]
+#endif
+___
+    $code.="\t".shift(@args)."\n";
+    $i-=4;
+  }
+}
+
+$code=<<___;
+#include "arm_arch.h"
+
+.text
+#if defined(__thumb2__) || defined(__clang__)
+.syntax	unified
+#define ldrplb  ldrbpl
+#define ldrneb  ldrbne
+#endif
+#if defined(__thumb2__)
+.thumb
+#else
+.code	32
+#endif
+
+.type	rem_4bit,%object
+.align	5
+rem_4bit:
+.short	0x0000,0x1C20,0x3840,0x2460
+.short	0x7080,0x6CA0,0x48C0,0x54E0
+.short	0xE100,0xFD20,0xD940,0xC560
+.short	0x9180,0x8DA0,0xA9C0,0xB5E0
+.size	rem_4bit,.-rem_4bit
+
+.type	rem_4bit_get,%function
+rem_4bit_get:
+#if defined(__thumb2__)
+	adr	$rem_4bit,rem_4bit
+#else
+	sub	$rem_4bit,pc,#8+32	@ &rem_4bit
+#endif
+	b	.Lrem_4bit_got
+	nop
+	nop
+.size	rem_4bit_get,.-rem_4bit_get
+
+.global	gcm_ghash_4bit
+.type	gcm_ghash_4bit,%function
+.align	4
+gcm_ghash_4bit:
+#if defined(__thumb2__)
+	adr	r12,rem_4bit
+#else
+	sub	r12,pc,#8+48		@ &rem_4bit
+#endif
+	add	$len,$inp,$len		@ $len to point at the end
+	stmdb	sp!,{r3-r11,lr}		@ save $len/end too
+
+	ldmia	r12,{r4-r11}		@ copy rem_4bit ...
+	stmdb	sp!,{r4-r11}		@ ... to stack
+
+	ldrb	$nlo,[$inp,#15]
+	ldrb	$nhi,[$Xi,#15]
+.Louter:
+	eor	$nlo,$nlo,$nhi
+	and	$nhi,$nlo,#0xf0
+	and	$nlo,$nlo,#0x0f
+	mov	$cnt,#14
+
+	add	$Zhh,$Htbl,$nlo,lsl#4
+	ldmia	$Zhh,{$Zll-$Zhh}	@ load Htbl[nlo]
+	add	$Thh,$Htbl,$nhi
+	ldrb	$nlo,[$inp,#14]
+
+	and	$nhi,$Zll,#0xf		@ rem
+	ldmia	$Thh,{$Tll-$Thh}	@ load Htbl[nhi]
+	add	$nhi,$nhi,$nhi
+	eor	$Zll,$Tll,$Zll,lsr#4
+	ldrh	$Tll,[sp,$nhi]		@ rem_4bit[rem]
+	eor	$Zll,$Zll,$Zlh,lsl#28
+	ldrb	$nhi,[$Xi,#14]
+	eor	$Zlh,$Tlh,$Zlh,lsr#4
+	eor	$Zlh,$Zlh,$Zhl,lsl#28
+	eor	$Zhl,$Thl,$Zhl,lsr#4
+	eor	$Zhl,$Zhl,$Zhh,lsl#28
+	eor	$Zhh,$Thh,$Zhh,lsr#4
+	eor	$nlo,$nlo,$nhi
+	and	$nhi,$nlo,#0xf0
+	and	$nlo,$nlo,#0x0f
+	eor	$Zhh,$Zhh,$Tll,lsl#16
+
+.Linner:
+	add	$Thh,$Htbl,$nlo,lsl#4
+	and	$nlo,$Zll,#0xf		@ rem
+	subs	$cnt,$cnt,#1
+	add	$nlo,$nlo,$nlo
+	ldmia	$Thh,{$Tll-$Thh}	@ load Htbl[nlo]
+	eor	$Zll,$Tll,$Zll,lsr#4
+	eor	$Zll,$Zll,$Zlh,lsl#28
+	eor	$Zlh,$Tlh,$Zlh,lsr#4
+	eor	$Zlh,$Zlh,$Zhl,lsl#28
+	ldrh	$Tll,[sp,$nlo]		@ rem_4bit[rem]
+	eor	$Zhl,$Thl,$Zhl,lsr#4
+#ifdef	__thumb2__
+	it	pl
+#endif
+	ldrplb	$nlo,[$inp,$cnt]
+	eor	$Zhl,$Zhl,$Zhh,lsl#28
+	eor	$Zhh,$Thh,$Zhh,lsr#4
+
+	add	$Thh,$Htbl,$nhi
+	and	$nhi,$Zll,#0xf		@ rem
+	eor	$Zhh,$Zhh,$Tll,lsl#16	@ ^= rem_4bit[rem]
+	add	$nhi,$nhi,$nhi
+	ldmia	$Thh,{$Tll-$Thh}	@ load Htbl[nhi]
+	eor	$Zll,$Tll,$Zll,lsr#4
+#ifdef	__thumb2__
+	it	pl
+#endif
+	ldrplb	$Tll,[$Xi,$cnt]
+	eor	$Zll,$Zll,$Zlh,lsl#28
+	eor	$Zlh,$Tlh,$Zlh,lsr#4
+	ldrh	$Tlh,[sp,$nhi]
+	eor	$Zlh,$Zlh,$Zhl,lsl#28
+	eor	$Zhl,$Thl,$Zhl,lsr#4
+	eor	$Zhl,$Zhl,$Zhh,lsl#28
+#ifdef	__thumb2__
+	it	pl
+#endif
+	eorpl	$nlo,$nlo,$Tll
+	eor	$Zhh,$Thh,$Zhh,lsr#4
+#ifdef	__thumb2__
+	itt	pl
+#endif
+	andpl	$nhi,$nlo,#0xf0
+	andpl	$nlo,$nlo,#0x0f
+	eor	$Zhh,$Zhh,$Tlh,lsl#16	@ ^= rem_4bit[rem]
+	bpl	.Linner
+
+	ldr	$len,[sp,#32]		@ re-load $len/end
+	add	$inp,$inp,#16
+	mov	$nhi,$Zll
+___
+	&Zsmash("cmp\t$inp,$len","\n".
+				 "#ifdef __thumb2__\n".
+				 "	it	ne\n".
+				 "#endif\n".
+				 "	ldrneb	$nlo,[$inp,#15]");
+$code.=<<___;
+	bne	.Louter
+
+	add	sp,sp,#36
+#if __ARM_ARCH__>=5
+	ldmia	sp!,{r4-r11,pc}
+#else
+	ldmia	sp!,{r4-r11,lr}
+	tst	lr,#1
+	moveq	pc,lr			@ be binary compatible with V4, yet
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	gcm_ghash_4bit,.-gcm_ghash_4bit
+
+.global	gcm_gmult_4bit
+.type	gcm_gmult_4bit,%function
+gcm_gmult_4bit:
+	stmdb	sp!,{r4-r11,lr}
+	ldrb	$nlo,[$Xi,#15]
+	b	rem_4bit_get
+.Lrem_4bit_got:
+	and	$nhi,$nlo,#0xf0
+	and	$nlo,$nlo,#0x0f
+	mov	$cnt,#14
+
+	add	$Zhh,$Htbl,$nlo,lsl#4
+	ldmia	$Zhh,{$Zll-$Zhh}	@ load Htbl[nlo]
+	ldrb	$nlo,[$Xi,#14]
+
+	add	$Thh,$Htbl,$nhi
+	and	$nhi,$Zll,#0xf		@ rem
+	ldmia	$Thh,{$Tll-$Thh}	@ load Htbl[nhi]
+	add	$nhi,$nhi,$nhi
+	eor	$Zll,$Tll,$Zll,lsr#4
+	ldrh	$Tll,[$rem_4bit,$nhi]	@ rem_4bit[rem]
+	eor	$Zll,$Zll,$Zlh,lsl#28
+	eor	$Zlh,$Tlh,$Zlh,lsr#4
+	eor	$Zlh,$Zlh,$Zhl,lsl#28
+	eor	$Zhl,$Thl,$Zhl,lsr#4
+	eor	$Zhl,$Zhl,$Zhh,lsl#28
+	eor	$Zhh,$Thh,$Zhh,lsr#4
+	and	$nhi,$nlo,#0xf0
+	eor	$Zhh,$Zhh,$Tll,lsl#16
+	and	$nlo,$nlo,#0x0f
+
+.Loop:
+	add	$Thh,$Htbl,$nlo,lsl#4
+	and	$nlo,$Zll,#0xf		@ rem
+	subs	$cnt,$cnt,#1
+	add	$nlo,$nlo,$nlo
+	ldmia	$Thh,{$Tll-$Thh}	@ load Htbl[nlo]
+	eor	$Zll,$Tll,$Zll,lsr#4
+	eor	$Zll,$Zll,$Zlh,lsl#28
+	eor	$Zlh,$Tlh,$Zlh,lsr#4
+	eor	$Zlh,$Zlh,$Zhl,lsl#28
+	ldrh	$Tll,[$rem_4bit,$nlo]	@ rem_4bit[rem]
+	eor	$Zhl,$Thl,$Zhl,lsr#4
+#ifdef	__thumb2__
+	it	pl
+#endif
+	ldrplb	$nlo,[$Xi,$cnt]
+	eor	$Zhl,$Zhl,$Zhh,lsl#28
+	eor	$Zhh,$Thh,$Zhh,lsr#4
+
+	add	$Thh,$Htbl,$nhi
+	and	$nhi,$Zll,#0xf		@ rem
+	eor	$Zhh,$Zhh,$Tll,lsl#16	@ ^= rem_4bit[rem]
+	add	$nhi,$nhi,$nhi
+	ldmia	$Thh,{$Tll-$Thh}	@ load Htbl[nhi]
+	eor	$Zll,$Tll,$Zll,lsr#4
+	eor	$Zll,$Zll,$Zlh,lsl#28
+	eor	$Zlh,$Tlh,$Zlh,lsr#4
+	ldrh	$Tll,[$rem_4bit,$nhi]	@ rem_4bit[rem]
+	eor	$Zlh,$Zlh,$Zhl,lsl#28
+	eor	$Zhl,$Thl,$Zhl,lsr#4
+	eor	$Zhl,$Zhl,$Zhh,lsl#28
+	eor	$Zhh,$Thh,$Zhh,lsr#4
+#ifdef	__thumb2__
+	itt	pl
+#endif
+	andpl	$nhi,$nlo,#0xf0
+	andpl	$nlo,$nlo,#0x0f
+	eor	$Zhh,$Zhh,$Tll,lsl#16	@ ^= rem_4bit[rem]
+	bpl	.Loop
+___
+	&Zsmash();
+$code.=<<___;
+#if __ARM_ARCH__>=5
+	ldmia	sp!,{r4-r11,pc}
+#else
+	ldmia	sp!,{r4-r11,lr}
+	tst	lr,#1
+	moveq	pc,lr			@ be binary compatible with V4, yet
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	gcm_gmult_4bit,.-gcm_gmult_4bit
+___
+{
+my ($Xl,$Xm,$Xh,$IN)=map("q$_",(0..3));
+my ($t0,$t1,$t2,$t3)=map("q$_",(8..12));
+my ($Hlo,$Hhi,$Hhl,$k48,$k32,$k16)=map("d$_",(26..31));
+
+sub clmul64x64 {
+my ($r,$a,$b)=@_;
+$code.=<<___;
+	vext.8		$t0#lo, $a, $a, #1	@ A1
+	vmull.p8	$t0, $t0#lo, $b		@ F = A1*B
+	vext.8		$r#lo, $b, $b, #1	@ B1
+	vmull.p8	$r, $a, $r#lo		@ E = A*B1
+	vext.8		$t1#lo, $a, $a, #2	@ A2
+	vmull.p8	$t1, $t1#lo, $b		@ H = A2*B
+	vext.8		$t3#lo, $b, $b, #2	@ B2
+	vmull.p8	$t3, $a, $t3#lo		@ G = A*B2
+	vext.8		$t2#lo, $a, $a, #3	@ A3
+	veor		$t0, $t0, $r		@ L = E + F
+	vmull.p8	$t2, $t2#lo, $b		@ J = A3*B
+	vext.8		$r#lo, $b, $b, #3	@ B3
+	veor		$t1, $t1, $t3		@ M = G + H
+	vmull.p8	$r, $a, $r#lo		@ I = A*B3
+	veor		$t0#lo, $t0#lo, $t0#hi	@ t0 = (L) (P0 + P1) << 8
+	vand		$t0#hi, $t0#hi, $k48
+	vext.8		$t3#lo, $b, $b, #4	@ B4
+	veor		$t1#lo, $t1#lo, $t1#hi	@ t1 = (M) (P2 + P3) << 16
+	vand		$t1#hi, $t1#hi, $k32
+	vmull.p8	$t3, $a, $t3#lo		@ K = A*B4
+	veor		$t2, $t2, $r		@ N = I + J
+	veor		$t0#lo, $t0#lo, $t0#hi
+	veor		$t1#lo, $t1#lo, $t1#hi
+	veor		$t2#lo, $t2#lo, $t2#hi	@ t2 = (N) (P4 + P5) << 24
+	vand		$t2#hi, $t2#hi, $k16
+	vext.8		$t0, $t0, $t0, #15
+	veor		$t3#lo, $t3#lo, $t3#hi	@ t3 = (K) (P6 + P7) << 32
+	vmov.i64	$t3#hi, #0
+	vext.8		$t1, $t1, $t1, #14
+	veor		$t2#lo, $t2#lo, $t2#hi
+	vmull.p8	$r, $a, $b		@ D = A*B
+	vext.8		$t3, $t3, $t3, #12
+	vext.8		$t2, $t2, $t2, #13
+	veor		$t0, $t0, $t1
+	veor		$t2, $t2, $t3
+	veor		$r, $r, $t0
+	veor		$r, $r, $t2
+___
+}
+
+$code.=<<___;
+#if __ARM_MAX_ARCH__>=7
+.arch	armv7-a
+.fpu	neon
+
+.global	gcm_init_neon
+.type	gcm_init_neon,%function
+.align	4
+gcm_init_neon:
+	vld1.64		$IN#hi,[r1]!		@ load H
+	vmov.i8		$t0,#0xe1
+	vld1.64		$IN#lo,[r1]
+	vshl.i64	$t0#hi,#57
+	vshr.u64	$t0#lo,#63		@ t0=0xc2....01
+	vdup.8		$t1,$IN#hi[7]
+	vshr.u64	$Hlo,$IN#lo,#63
+	vshr.s8		$t1,#7			@ broadcast carry bit
+	vshl.i64	$IN,$IN,#1
+	vand		$t0,$t0,$t1
+	vorr		$IN#hi,$Hlo		@ H<<<=1
+	veor		$IN,$IN,$t0		@ twisted H
+	vstmia		r0,{$IN}
+
+	ret					@ bx lr
+.size	gcm_init_neon,.-gcm_init_neon
+
+.global	gcm_gmult_neon
+.type	gcm_gmult_neon,%function
+.align	4
+gcm_gmult_neon:
+	vld1.64		$IN#hi,[$Xi]!		@ load Xi
+	vld1.64		$IN#lo,[$Xi]!
+	vmov.i64	$k48,#0x0000ffffffffffff
+	vldmia		$Htbl,{$Hlo-$Hhi}	@ load twisted H
+	vmov.i64	$k32,#0x00000000ffffffff
+#ifdef __ARMEL__
+	vrev64.8	$IN,$IN
+#endif
+	vmov.i64	$k16,#0x000000000000ffff
+	veor		$Hhl,$Hlo,$Hhi		@ Karatsuba pre-processing
+	mov		$len,#16
+	b		.Lgmult_neon
+.size	gcm_gmult_neon,.-gcm_gmult_neon
+
+.global	gcm_ghash_neon
+.type	gcm_ghash_neon,%function
+.align	4
+gcm_ghash_neon:
+	vld1.64		$Xl#hi,[$Xi]!		@ load Xi
+	vld1.64		$Xl#lo,[$Xi]!
+	vmov.i64	$k48,#0x0000ffffffffffff
+	vldmia		$Htbl,{$Hlo-$Hhi}	@ load twisted H
+	vmov.i64	$k32,#0x00000000ffffffff
+#ifdef __ARMEL__
+	vrev64.8	$Xl,$Xl
+#endif
+	vmov.i64	$k16,#0x000000000000ffff
+	veor		$Hhl,$Hlo,$Hhi		@ Karatsuba pre-processing
+
+.Loop_neon:
+	vld1.64		$IN#hi,[$inp]!		@ load inp
+	vld1.64		$IN#lo,[$inp]!
+#ifdef __ARMEL__
+	vrev64.8	$IN,$IN
+#endif
+	veor		$IN,$Xl			@ inp^=Xi
+.Lgmult_neon:
+___
+	&clmul64x64	($Xl,$Hlo,"$IN#lo");	# H.lo·Xi.lo
+$code.=<<___;
+	veor		$IN#lo,$IN#lo,$IN#hi	@ Karatsuba pre-processing
+___
+	&clmul64x64	($Xm,$Hhl,"$IN#lo");	# (H.lo+H.hi)·(Xi.lo+Xi.hi)
+	&clmul64x64	($Xh,$Hhi,"$IN#hi");	# H.hi·Xi.hi
+$code.=<<___;
+	veor		$Xm,$Xm,$Xl		@ Karatsuba post-processing
+	veor		$Xm,$Xm,$Xh
+	veor		$Xl#hi,$Xl#hi,$Xm#lo
+	veor		$Xh#lo,$Xh#lo,$Xm#hi	@ Xh|Xl - 256-bit result
+
+	@ equivalent of reduction_avx from ghash-x86_64.pl
+	vshl.i64	$t1,$Xl,#57		@ 1st phase
+	vshl.i64	$t2,$Xl,#62
+	veor		$t2,$t2,$t1		@
+	vshl.i64	$t1,$Xl,#63
+	veor		$t2, $t2, $t1		@
+ 	veor		$Xl#hi,$Xl#hi,$t2#lo	@
+	veor		$Xh#lo,$Xh#lo,$t2#hi
+
+	vshr.u64	$t2,$Xl,#1		@ 2nd phase
+	veor		$Xh,$Xh,$Xl
+	veor		$Xl,$Xl,$t2		@
+	vshr.u64	$t2,$t2,#6
+	vshr.u64	$Xl,$Xl,#1		@
+	veor		$Xl,$Xl,$Xh		@
+	veor		$Xl,$Xl,$t2		@
+
+	subs		$len,#16
+	bne		.Loop_neon
+
+#ifdef __ARMEL__
+	vrev64.8	$Xl,$Xl
+#endif
+	sub		$Xi,#16
+	vst1.64		$Xl#hi,[$Xi]!		@ write out Xi
+	vst1.64		$Xl#lo,[$Xi]
+
+	ret					@ bx lr
+.size	gcm_ghash_neon,.-gcm_ghash_neon
+#endif
+___
+}
+$code.=<<___;
+.asciz  "GHASH for ARMv4/NEON, CRYPTOGAMS by <appro\@openssl.org>"
+.align  2
+___
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/geo;
+
+	s/\bq([0-9]+)#(lo|hi)/sprintf "d%d",2*$1+($2 eq "hi")/geo	or
+	s/\bret\b/bx	lr/go		or
+	s/\bbx\s+lr\b/.word\t0xe12fff1e/go;    # make it possible to compile with -march=armv4
+
+	print $_,"\n";
+}
+close STDOUT; # enforce flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-c64xplus.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-c64xplus.pl
new file mode 100644
index 000000000..3cadda399
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-c64xplus.pl
@@ -0,0 +1,247 @@
+#! /usr/bin/env perl
+# Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# December 2011
+#
+# The module implements GCM GHASH function and underlying single
+# multiplication operation in GF(2^128). Even though subroutines
+# have _4bit suffix, they are not using any tables, but rely on
+# hardware Galois Field Multiply support. Streamed GHASH processes
+# byte in ~7 cycles, which is >6x faster than "4-bit" table-driven
+# code compiled with TI's cl6x 6.0 with -mv6400+ -o2 flags. We are
+# comparing apples vs. oranges, but compiler surely could have done
+# better, because theoretical [though not necessarily achievable]
+# estimate for "4-bit" table-driven implementation is ~12 cycles.
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+($Xip,$Htable,$inp,$len)=("A4","B4","A6","B6");	# arguments
+
+($Z0,$Z1,$Z2,$Z3,	$H0, $H1, $H2, $H3,
+			$H0x,$H1x,$H2x,$H3x)=map("A$_",(16..27));
+($H01u,$H01y,$H2u,$H3u,	$H0y,$H1y,$H2y,$H3y,
+			$H0z,$H1z,$H2z,$H3z)=map("B$_",(16..27));
+($FF000000,$E10000)=("B30","B31");
+($xip,$x0,$x1,$xib)=map("B$_",(6..9));	# $xip zaps $len
+ $xia="A9";
+($rem,$res)=("B4","B5");		# $rem zaps $Htable
+
+$code.=<<___;
+	.text
+
+	.if	.ASSEMBLER_VERSION<7000000
+	.asg	0,__TI_EABI__
+	.endif
+	.if	__TI_EABI__
+	.asg	gcm_gmult_1bit,_gcm_gmult_1bit
+	.asg	gcm_gmult_4bit,_gcm_gmult_4bit
+	.asg	gcm_ghash_4bit,_gcm_ghash_4bit
+	.endif
+
+	.asg	B3,RA
+
+	.if	0
+	.global	_gcm_gmult_1bit
+_gcm_gmult_1bit:
+	ADDAD	$Htable,2,$Htable
+	.endif
+	.global	_gcm_gmult_4bit
+_gcm_gmult_4bit:
+	.asmfunc
+	LDDW	*${Htable}[-1],$H1:$H0	; H.lo
+	LDDW	*${Htable}[-2],$H3:$H2	; H.hi
+||	MV	$Xip,${xip}		; reassign Xi
+||	MVK	15,B1			; SPLOOPD constant
+
+	MVK	0xE1,$E10000
+||	LDBU	*++${xip}[15],$x1	; Xi[15]
+	MVK	0xFF,$FF000000
+||	LDBU	*--${xip},$x0		; Xi[14]
+	SHL	$E10000,16,$E10000	; [pre-shifted] reduction polynomial
+	SHL	$FF000000,24,$FF000000	; upper byte mask
+||	BNOP	ghash_loop?
+||	MVK	1,B0			; take a single spin
+
+	PACKH2	$H0,$H1,$xia		; pack H0' and H1's upper bytes
+	AND	$H2,$FF000000,$H2u	; H2's upper byte
+	AND	$H3,$FF000000,$H3u	; H3's upper byte
+||	SHRU	$H2u,8,$H2u
+	SHRU	$H3u,8,$H3u
+||	ZERO	$Z1:$Z0
+	SHRU2	$xia,8,$H01u
+||	ZERO	$Z3:$Z2
+	.endasmfunc
+
+	.global	_gcm_ghash_4bit
+_gcm_ghash_4bit:
+	.asmfunc
+	LDDW	*${Htable}[-1],$H1:$H0	; H.lo
+||	SHRU	$len,4,B0		; reassign len
+	LDDW	*${Htable}[-2],$H3:$H2	; H.hi
+||	MV	$Xip,${xip}		; reassign Xi
+||	MVK	15,B1			; SPLOOPD constant
+
+	MVK	0xE1,$E10000
+|| [B0]	LDNDW	*${inp}[1],$H1x:$H0x
+	MVK	0xFF,$FF000000
+|| [B0]	LDNDW	*${inp}++[2],$H3x:$H2x
+	SHL	$E10000,16,$E10000	; [pre-shifted] reduction polynomial
+||	LDDW	*${xip}[1],$Z1:$Z0
+	SHL	$FF000000,24,$FF000000	; upper byte mask
+||	LDDW	*${xip}[0],$Z3:$Z2
+
+	PACKH2	$H0,$H1,$xia		; pack H0' and H1's upper bytes
+	AND	$H2,$FF000000,$H2u	; H2's upper byte
+	AND	$H3,$FF000000,$H3u	; H3's upper byte
+||	SHRU	$H2u,8,$H2u
+	SHRU	$H3u,8,$H3u
+	SHRU2	$xia,8,$H01u
+
+|| [B0]	XOR	$H0x,$Z0,$Z0		; Xi^=inp
+|| [B0]	XOR	$H1x,$Z1,$Z1
+	.if	.LITTLE_ENDIAN
+   [B0]	XOR	$H2x,$Z2,$Z2
+|| [B0]	XOR	$H3x,$Z3,$Z3
+|| [B0]	SHRU	$Z1,24,$xia		; Xi[15], avoid cross-path stall
+	STDW	$Z1:$Z0,*${xip}[1]
+|| [B0]	SHRU	$Z1,16,$x0		; Xi[14]
+|| [B0]	ZERO	$Z1:$Z0
+	.else
+   [B0]	XOR	$H2x,$Z2,$Z2
+|| [B0]	XOR	$H3x,$Z3,$Z3
+|| [B0]	MV	$Z0,$xia		; Xi[15], avoid cross-path stall
+	STDW	$Z1:$Z0,*${xip}[1]
+|| [B0] SHRU	$Z0,8,$x0		; Xi[14]
+|| [B0]	ZERO	$Z1:$Z0
+	.endif
+	STDW	$Z3:$Z2,*${xip}[0]
+|| [B0]	ZERO	$Z3:$Z2
+|| [B0]	MV	$xia,$x1
+   [B0]	ADDK	14,${xip}
+
+ghash_loop?:
+	SPLOOPD	6			; 6*16+7
+||	MVC	B1,ILC
+|| [B0]	SUB	B0,1,B0
+||	ZERO	A0
+||	ADD	$x1,$x1,$xib		; SHL	$x1,1,$xib
+||	SHL	$x1,1,$xia
+___
+
+########____________________________
+#  0    D2.     M1          M2      |
+#  1            M1                  |
+#  2            M1          M2      |
+#  3        D1. M1          M2      |
+#  4        S1. L1                  |
+#  5    S2  S1x L1          D2  L2  |____________________________
+#  6/0          L1  S1      L2  S2x |D2.     M1          M2      |
+#  7/1          L1  S1  D1x S2  M2  |        M1                  |
+#  8/2              S1  L1x S2      |        M1          M2      |
+#  9/3              S1  L1x         |    D1. M1          M2      |
+# 10/4                  D1x         |    S1. L1                  |
+# 11/5                              |S2  S1x L1          D2  L2  |____________
+# 12/6/0                D1x       __|        L1  S1      L2  S2x |D2.     ....
+#    7/1                                     L1  S1  D1x S2  M2  |        ....
+#    8/2                                         S1  L1x S2      |        ....
+#####...                                         ................|............
+$code.=<<___;
+	XORMPY	$H0,$xia,$H0x		; 0	; H·(Xi[i]<<1)
+||	XORMPY	$H01u,$xib,$H01y
+|| [A0]	LDBU	*--${xip},$x0
+	XORMPY	$H1,$xia,$H1x		; 1
+	XORMPY	$H2,$xia,$H2x		; 2
+||	XORMPY	$H2u,$xib,$H2y
+	XORMPY	$H3,$xia,$H3x		; 3
+||	XORMPY	$H3u,$xib,$H3y
+||[!A0]	MVK.D	15,A0				; *--${xip} counter
+	XOR.L	$H0x,$Z0,$Z0		; 4	; Z^=H·(Xi[i]<<1)
+|| [A0]	SUB.S	A0,1,A0
+	XOR.L	$H1x,$Z1,$Z1		; 5
+||	AND.D	$H01y,$FF000000,$H0z
+||	SWAP2.L	$H01y,$H1y		;	; SHL	$H01y,16,$H1y
+||	SHL	$x0,1,$xib
+||	SHL	$x0,1,$xia
+
+	XOR.L	$H2x,$Z2,$Z2		; 6/0	; [0,0] in epilogue
+||	SHL	$Z0,1,$rem		;	; rem=Z<<1
+||	SHRMB.S	$Z1,$Z0,$Z0		;	; Z>>=8
+||	AND.L	$H1y,$FF000000,$H1z
+	XOR.L	$H3x,$Z3,$Z3		; 7/1
+||	SHRMB.S	$Z2,$Z1,$Z1
+||	XOR.D	$H0z,$Z0,$Z0			; merge upper byte products
+||	AND.S	$H2y,$FF000000,$H2z
+||	XORMPY	$E10000,$rem,$res	;	; implicit rem&0x1FE
+	XOR.L	$H1z,$Z1,$Z1		; 8/2
+||	SHRMB.S	$Z3,$Z2,$Z2
+||	AND.S	$H3y,$FF000000,$H3z
+	XOR.L	$H2z,$Z2,$Z2		; 9/3
+||	SHRU	$Z3,8,$Z3
+	XOR.D	$H3z,$Z3,$Z3		; 10/4
+	NOP				; 11/5
+
+	SPKERNEL 0,2
+||	XOR.D	$res,$Z3,$Z3		; 12/6/0; Z^=res
+
+	; input pre-fetch is possible where D1 slot is available...
+   [B0]	LDNDW	*${inp}[1],$H1x:$H0x	; 8/-
+   [B0]	LDNDW	*${inp}++[2],$H3x:$H2x	; 9/-
+	NOP				; 10/-
+	.if	.LITTLE_ENDIAN
+	SWAP2	$Z0,$Z1			; 11/-
+||	SWAP4	$Z1,$Z0
+	SWAP4	$Z1,$Z1			; 12/-
+||	SWAP2	$Z0,$Z0
+	SWAP2	$Z2,$Z3
+||	SWAP4	$Z3,$Z2
+||[!B0]	BNOP	RA
+	SWAP4	$Z3,$Z3
+||	SWAP2	$Z2,$Z2
+|| [B0]	BNOP	ghash_loop?
+   [B0]	XOR	$H0x,$Z0,$Z0		; Xi^=inp
+|| [B0]	XOR	$H1x,$Z1,$Z1
+   [B0]	XOR	$H2x,$Z2,$Z2
+|| [B0]	XOR	$H3x,$Z3,$Z3
+|| [B0]	SHRU	$Z1,24,$xia		; Xi[15], avoid cross-path stall
+	STDW	$Z1:$Z0,*${xip}[1]
+|| [B0]	SHRU	$Z1,16,$x0		; Xi[14]
+|| [B0]	ZERO	$Z1:$Z0
+	.else
+  [!B0]	BNOP	RA			; 11/-
+   [B0]	BNOP	ghash_loop?		; 12/-
+   [B0]	XOR	$H0x,$Z0,$Z0		; Xi^=inp
+|| [B0]	XOR	$H1x,$Z1,$Z1
+   [B0]	XOR	$H2x,$Z2,$Z2
+|| [B0]	XOR	$H3x,$Z3,$Z3
+|| [B0]	MV	$Z0,$xia		; Xi[15], avoid cross-path stall
+	STDW	$Z1:$Z0,*${xip}[1]
+|| [B0] SHRU	$Z0,8,$x0		; Xi[14]
+|| [B0]	ZERO	$Z1:$Z0
+	.endif
+	STDW	$Z3:$Z2,*${xip}[0]
+|| [B0]	ZERO	$Z3:$Z2
+|| [B0]	MV	$xia,$x1
+   [B0]	ADDK	14,${xip}
+	.endasmfunc
+
+	.sect	.const
+	.cstring "GHASH for C64x+, CRYPTOGAMS by <appro\@openssl.org>"
+	.align	4
+___
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-ia64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-ia64.pl
new file mode 100755
index 000000000..eb9ded91e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-ia64.pl
@@ -0,0 +1,470 @@
+#! /usr/bin/env perl
+# Copyright 2010-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# March 2010
+#
+# The module implements "4-bit" GCM GHASH function and underlying
+# single multiplication operation in GF(2^128). "4-bit" means that it
+# uses 256 bytes per-key table [+128 bytes shared table]. Streamed
+# GHASH performance was measured to be 6.67 cycles per processed byte
+# on Itanium 2, which is >90% better than Microsoft compiler generated
+# code. To anchor to something else sha1-ia64.pl module processes one
+# byte in 5.7 cycles. On Itanium GHASH should run at ~8.5 cycles per
+# byte.
+
+# September 2010
+#
+# It was originally thought that it makes lesser sense to implement
+# "528B" variant on Itanium 2 for following reason. Because number of
+# functional units is naturally limited, it appeared impossible to
+# implement "528B" loop in 4 cycles, only in 5. This would mean that
+# theoretically performance improvement couldn't be more than 20%.
+# But occasionally you prove yourself wrong:-) I figured out a way to
+# fold couple of instructions and having freed yet another instruction
+# slot by unrolling the loop... Resulting performance is 4.45 cycles
+# per processed byte and 50% better than "256B" version. On original
+# Itanium performance should remain the same as the "256B" version,
+# i.e. ~8.5 cycles.
+
+$output=pop and (open STDOUT,">$output" or die "can't open $output: $!");
+
+if ($^O eq "hpux") {
+    $ADDP="addp4";
+    for (@ARGV) { $ADDP="add" if (/[\+DD|\-mlp]64/); }
+} else { $ADDP="add"; }
+for (@ARGV)  {  $big_endian=1 if (/\-DB_ENDIAN/);
+                $big_endian=0 if (/\-DL_ENDIAN/);  }
+if (!defined($big_endian))
+             {  $big_endian=(unpack('L',pack('N',1))==1);  }
+
+sub loop() {
+my $label=shift;
+my ($p16,$p17)=(shift)?("p63","p63"):("p16","p17"); # mask references to inp
+
+# Loop is scheduled for 6 ticks on Itanium 2 and 8 on Itanium, i.e.
+# in scalable manner;-) Naturally assuming data in L1 cache...
+# Special note about 'dep' instruction, which is used to construct
+# &rem_4bit[Zlo&0xf]. It works, because rem_4bit is aligned at 128
+# bytes boundary and lower 7 bits of its address are guaranteed to
+# be zero.
+$code.=<<___;
+$label:
+{ .mfi;	(p18)	ld8	Hlo=[Hi[1]],-8
+	(p19)	dep	rem=Zlo,rem_4bitp,3,4	}
+{ .mfi;	(p19)	xor	Zhi=Zhi,Hhi
+	($p17)	xor	xi[1]=xi[1],in[1]	};;
+{ .mfi;	(p18)	ld8	Hhi=[Hi[1]]
+	(p19)	shrp	Zlo=Zhi,Zlo,4		}
+{ .mfi;	(p19)	ld8	rem=[rem]
+	(p18)	and	Hi[1]=mask0xf0,xi[2]	};;
+{ .mmi;	($p16)	ld1	in[0]=[inp],-1
+	(p18)	xor	Zlo=Zlo,Hlo
+	(p19)	shr.u	Zhi=Zhi,4		}
+{ .mib;	(p19)	xor	Hhi=Hhi,rem
+	(p18)	add	Hi[1]=Htbl,Hi[1]	};;
+
+{ .mfi;	(p18)	ld8	Hlo=[Hi[1]],-8
+	(p18)	dep	rem=Zlo,rem_4bitp,3,4	}
+{ .mfi;	(p17)	shladd	Hi[0]=xi[1],4,r0
+	(p18)	xor	Zhi=Zhi,Hhi		};;
+{ .mfi;	(p18)	ld8	Hhi=[Hi[1]]
+	(p18)	shrp	Zlo=Zhi,Zlo,4		}
+{ .mfi;	(p18)	ld8	rem=[rem]
+	(p17)	and	Hi[0]=mask0xf0,Hi[0]	};;
+{ .mmi;	(p16)	ld1	xi[0]=[Xi],-1
+	(p18)	xor	Zlo=Zlo,Hlo
+	(p18)	shr.u	Zhi=Zhi,4		}
+{ .mib;	(p18)	xor	Hhi=Hhi,rem
+	(p17)	add	Hi[0]=Htbl,Hi[0]
+	br.ctop.sptk	$label			};;
+___
+}
+
+$code=<<___;
+.explicit
+.text
+
+prevfs=r2;	prevlc=r3;	prevpr=r8;
+mask0xf0=r21;
+rem=r22;	rem_4bitp=r23;
+Xi=r24;		Htbl=r25;
+inp=r26;	end=r27;
+Hhi=r28;	Hlo=r29;
+Zhi=r30;	Zlo=r31;
+
+.align	128
+.skip	16					// aligns loop body
+.global	gcm_gmult_4bit#
+.proc	gcm_gmult_4bit#
+gcm_gmult_4bit:
+	.prologue
+{ .mmi;	.save	ar.pfs,prevfs
+	alloc	prevfs=ar.pfs,2,6,0,8
+	$ADDP	Xi=15,in0			// &Xi[15]
+	mov	rem_4bitp=ip		}
+{ .mii;	$ADDP	Htbl=8,in1			// &Htbl[0].lo
+	.save	ar.lc,prevlc
+	mov	prevlc=ar.lc
+	.save	pr,prevpr
+	mov	prevpr=pr		};;
+
+	.body
+	.rotr	in[3],xi[3],Hi[2]
+
+{ .mib;	ld1	xi[2]=[Xi],-1			// Xi[15]
+	mov	mask0xf0=0xf0
+	brp.loop.imp	.Loop1,.Lend1-16};;
+{ .mmi;	ld1	xi[1]=[Xi],-1			// Xi[14]
+					};;
+{ .mii;	shladd	Hi[1]=xi[2],4,r0
+	mov	pr.rot=0x7<<16
+	mov	ar.lc=13		};;
+{ .mii;	and	Hi[1]=mask0xf0,Hi[1]
+	mov	ar.ec=3
+	xor	Zlo=Zlo,Zlo		};;
+{ .mii;	add	Hi[1]=Htbl,Hi[1]		// &Htbl[nlo].lo
+	add	rem_4bitp=rem_4bit#-gcm_gmult_4bit#,rem_4bitp
+	xor	Zhi=Zhi,Zhi		};;
+___
+	&loop	(".Loop1",1);
+$code.=<<___;
+.Lend1:
+{ .mib;	xor	Zhi=Zhi,Hhi		};;	// modulo-scheduling artefact
+{ .mib;	mux1	Zlo=Zlo,\@rev		};;
+{ .mib;	mux1	Zhi=Zhi,\@rev		};;
+{ .mmi;	add	Hlo=9,Xi;;			// ;; is here to prevent
+	add	Hhi=1,Xi		};;	// pipeline flush on Itanium
+{ .mib;	st8	[Hlo]=Zlo
+	mov	pr=prevpr,0x1ffff	};;
+{ .mib;	st8	[Hhi]=Zhi
+	mov	ar.lc=prevlc
+	br.ret.sptk.many	b0	};;
+.endp	gcm_gmult_4bit#
+___
+
+######################################################################
+# "528B" (well, "512B" actually) streamed GHASH
+#
+$Xip="in0";
+$Htbl="in1";
+$inp="in2";
+$len="in3";
+$rem_8bit="loc0";
+$mask0xff="loc1";
+($sum,$rum) = $big_endian ? ("nop.m","nop.m") : ("sum","rum");
+
+sub load_htable() {
+    for (my $i=0;$i<8;$i++) {
+	$code.=<<___;
+{ .mmi;	ld8	r`16+2*$i+1`=[r8],16		// Htable[$i].hi
+	ld8	r`16+2*$i`=[r9],16	}	// Htable[$i].lo
+{ .mmi;	ldf8	f`32+2*$i+1`=[r10],16		// Htable[`8+$i`].hi
+	ldf8	f`32+2*$i`=[r11],16		// Htable[`8+$i`].lo
+___
+	$code.=shift	if (($i+$#_)==7);
+	$code.="\t};;\n"
+    }
+}
+
+$code.=<<___;
+prevsp=r3;
+
+.align	32
+.skip	16					// aligns loop body
+.global	gcm_ghash_4bit#
+.proc	gcm_ghash_4bit#
+gcm_ghash_4bit:
+	.prologue
+{ .mmi;	.save	ar.pfs,prevfs
+	alloc	prevfs=ar.pfs,4,2,0,0
+	.vframe	prevsp
+	mov	prevsp=sp
+	mov	$rem_8bit=ip		};;
+	.body
+{ .mfi;	$ADDP	r8=0+0,$Htbl
+	$ADDP	r9=0+8,$Htbl		}
+{ .mfi;	$ADDP	r10=128+0,$Htbl
+	$ADDP	r11=128+8,$Htbl		};;
+___
+	&load_htable(
+	"	$ADDP	$Xip=15,$Xip",		# &Xi[15]
+	"	$ADDP	$len=$len,$inp",	# &inp[len]
+	"	$ADDP	$inp=15,$inp",		# &inp[15]
+	"	mov	$mask0xff=0xff",
+	"	add	sp=-512,sp",
+	"	andcm	sp=sp,$mask0xff",	# align stack frame
+	"	add	r14=0,sp",
+	"	add	r15=8,sp");
+$code.=<<___;
+{ .mmi;	$sum	1<<1				// go big-endian
+	add	r8=256+0,sp
+	add	r9=256+8,sp		}
+{ .mmi;	add	r10=256+128+0,sp
+	add	r11=256+128+8,sp
+	add	$len=-17,$len		};;
+___
+for($i=0;$i<8;$i++) {	# generate first half of Hshr4[]
+my ($rlo,$rhi)=("r".eval(16+2*$i),"r".eval(16+2*$i+1));
+$code.=<<___;
+{ .mmi;	st8	[r8]=$rlo,16			// Htable[$i].lo
+	st8	[r9]=$rhi,16			// Htable[$i].hi
+	shrp	$rlo=$rhi,$rlo,4	}//;;
+{ .mmi;	stf8	[r10]=f`32+2*$i`,16		// Htable[`8+$i`].lo
+	stf8	[r11]=f`32+2*$i+1`,16		// Htable[`8+$i`].hi
+	shr.u	$rhi=$rhi,4		};;
+{ .mmi;	st8	[r14]=$rlo,16			// Htable[$i].lo>>4
+	st8	[r15]=$rhi,16		}//;;	// Htable[$i].hi>>4
+___
+}
+$code.=<<___;
+{ .mmi;	ld8	r16=[r8],16			// Htable[8].lo
+	ld8	r17=[r9],16		};;	// Htable[8].hi
+{ .mmi;	ld8	r18=[r8],16			// Htable[9].lo
+	ld8	r19=[r9],16		}	// Htable[9].hi
+{ .mmi;	rum	1<<5				// clear um.mfh
+	shrp	r16=r17,r16,4		};;
+___
+for($i=0;$i<6;$i++) {	# generate second half of Hshr4[]
+$code.=<<___;
+{ .mmi;	ld8	r`20+2*$i`=[r8],16		// Htable[`10+$i`].lo
+	ld8	r`20+2*$i+1`=[r9],16		// Htable[`10+$i`].hi
+	shr.u	r`16+2*$i+1`=r`16+2*$i+1`,4	};;
+{ .mmi;	st8	[r14]=r`16+2*$i`,16		// Htable[`8+$i`].lo>>4
+	st8	[r15]=r`16+2*$i+1`,16		// Htable[`8+$i`].hi>>4
+	shrp	r`18+2*$i`=r`18+2*$i+1`,r`18+2*$i`,4	}
+___
+}
+$code.=<<___;
+{ .mmi;	shr.u	r`16+2*$i+1`=r`16+2*$i+1`,4	};;
+{ .mmi;	st8	[r14]=r`16+2*$i`,16		// Htable[`8+$i`].lo>>4
+	st8	[r15]=r`16+2*$i+1`,16		// Htable[`8+$i`].hi>>4
+	shrp	r`18+2*$i`=r`18+2*$i+1`,r`18+2*$i`,4	}
+{ .mmi;	add	$Htbl=256,sp			// &Htable[0]
+	add	$rem_8bit=rem_8bit#-gcm_ghash_4bit#,$rem_8bit
+	shr.u	r`18+2*$i+1`=r`18+2*$i+1`,4	};;
+{ .mmi;	st8	[r14]=r`18+2*$i`		// Htable[`8+$i`].lo>>4
+	st8	[r15]=r`18+2*$i+1`	}	// Htable[`8+$i`].hi>>4
+___
+
+$in="r15";
+@xi=("r16","r17");
+@rem=("r18","r19");
+($Alo,$Ahi,$Blo,$Bhi,$Zlo,$Zhi)=("r20","r21","r22","r23","r24","r25");
+($Atbl,$Btbl)=("r26","r27");
+
+$code.=<<___;	# (p16)
+{ .mmi;	ld1	$in=[$inp],-1			//(p16) *inp--
+	ld1	$xi[0]=[$Xip],-1		//(p16) *Xi--
+	cmp.eq	p0,p6=r0,r0		};;	//	clear p6
+___
+push (@xi,shift(@xi)); push (@rem,shift(@rem));	# "rotate" registers
+
+$code.=<<___;	# (p16),(p17)
+{ .mmi;	ld1	$xi[0]=[$Xip],-1		//(p16) *Xi--
+	xor	$xi[1]=$xi[1],$in	};;	//(p17) xi=$xi[i]^inp[i]
+{ .mii;	ld1	$in=[$inp],-1			//(p16) *inp--
+	dep	$Atbl=$xi[1],$Htbl,4,4		//(p17) &Htable[nlo].lo
+	and	$xi[1]=-16,$xi[1]	};;	//(p17) nhi=xi&0xf0
+.align	32
+.LOOP:
+{ .mmi;
+(p6)	st8	[$Xip]=$Zhi,13
+	xor	$Zlo=$Zlo,$Zlo
+	add	$Btbl=$xi[1],$Htbl	};;	//(p17) &Htable[nhi].lo
+___
+push (@xi,shift(@xi)); push (@rem,shift(@rem));	# "rotate" registers
+
+$code.=<<___;	# (p16),(p17),(p18)
+{ .mmi;	ld8	$Alo=[$Atbl],8			//(p18) Htable[nlo].lo,&Htable[nlo].hi
+	ld8	$rem[0]=[$Btbl],-256		//(p18) Htable[nhi].lo,&Hshr4[nhi].lo
+	xor	$xi[1]=$xi[1],$in	};;	//(p17) xi=$xi[i]^inp[i]
+{ .mfi;	ld8	$Ahi=[$Atbl]			//(p18) Htable[nlo].hi
+	dep	$Atbl=$xi[1],$Htbl,4,4	}	//(p17) &Htable[nlo].lo
+{ .mfi;	shladd	$rem[0]=$rem[0],4,r0		//(p18) Htable[nhi].lo<<4
+	xor	$Zlo=$Zlo,$Alo		};;	//(p18) Z.lo^=Htable[nlo].lo
+{ .mmi;	ld8	$Blo=[$Btbl],8			//(p18) Hshr4[nhi].lo,&Hshr4[nhi].hi
+	ld1	$in=[$inp],-1		}	//(p16) *inp--
+{ .mmi;	xor	$rem[0]=$rem[0],$Zlo		//(p18) Z.lo^(Htable[nhi].lo<<4)
+	mov	$Zhi=$Ahi			//(p18) Z.hi^=Htable[nlo].hi
+	and	$xi[1]=-16,$xi[1]	};;	//(p17) nhi=xi&0xf0
+{ .mmi;	ld8	$Bhi=[$Btbl]			//(p18) Hshr4[nhi].hi
+	ld1	$xi[0]=[$Xip],-1		//(p16) *Xi--
+	shrp	$Zlo=$Zhi,$Zlo,8	}	//(p18) Z.lo=(Z.hi<<56)|(Z.lo>>8)
+{ .mmi;	and	$rem[0]=$rem[0],$mask0xff	//(p18) rem=($Zlo^(Htable[nhi].lo<<4))&0xff
+	add	$Btbl=$xi[1],$Htbl	};;	//(p17) &Htable[nhi]
+___
+push (@xi,shift(@xi)); push (@rem,shift(@rem));	# "rotate" registers
+
+for ($i=1;$i<14;$i++) {
+# Above and below fragments are derived from this one by removing
+# unsuitable (p??) instructions.
+$code.=<<___;	# (p16),(p17),(p18),(p19)
+{ .mmi;	ld8	$Alo=[$Atbl],8			//(p18) Htable[nlo].lo,&Htable[nlo].hi
+	ld8	$rem[0]=[$Btbl],-256		//(p18) Htable[nhi].lo,&Hshr4[nhi].lo
+	shr.u	$Zhi=$Zhi,8		}	//(p19) Z.hi>>=8
+{ .mmi;	shladd	$rem[1]=$rem[1],1,$rem_8bit	//(p19) &rem_8bit[rem]
+	xor	$Zlo=$Zlo,$Blo			//(p19) Z.lo^=Hshr4[nhi].lo
+	xor	$xi[1]=$xi[1],$in	};;	//(p17) xi=$xi[i]^inp[i]
+{ .mmi;	ld8	$Ahi=[$Atbl]			//(p18) Htable[nlo].hi
+	ld2	$rem[1]=[$rem[1]]		//(p19) rem_8bit[rem]
+	dep	$Atbl=$xi[1],$Htbl,4,4	}	//(p17) &Htable[nlo].lo
+{ .mmi;	shladd	$rem[0]=$rem[0],4,r0		//(p18) Htable[nhi].lo<<4
+	xor	$Zlo=$Zlo,$Alo			//(p18) Z.lo^=Htable[nlo].lo
+	xor	$Zhi=$Zhi,$Bhi		};;	//(p19) Z.hi^=Hshr4[nhi].hi
+{ .mmi;	ld8	$Blo=[$Btbl],8			//(p18) Hshr4[nhi].lo,&Hshr4[nhi].hi
+	ld1	$in=[$inp],-1			//(p16) *inp--
+	shl	$rem[1]=$rem[1],48	}	//(p19) rem_8bit[rem]<<48
+{ .mmi;	xor	$rem[0]=$rem[0],$Zlo		//(p18) Z.lo^(Htable[nhi].lo<<4)
+	xor	$Zhi=$Zhi,$Ahi			//(p18) Z.hi^=Htable[nlo].hi
+	and	$xi[1]=-16,$xi[1]	};;	//(p17) nhi=xi&0xf0
+{ .mmi;	ld8	$Bhi=[$Btbl]			//(p18) Hshr4[nhi].hi
+	ld1	$xi[0]=[$Xip],-1		//(p16) *Xi--
+	shrp	$Zlo=$Zhi,$Zlo,8	}	//(p18) Z.lo=(Z.hi<<56)|(Z.lo>>8)
+{ .mmi;	and	$rem[0]=$rem[0],$mask0xff	//(p18) rem=($Zlo^(Htable[nhi].lo<<4))&0xff
+	xor	$Zhi=$Zhi,$rem[1]		//(p19) Z.hi^=rem_8bit[rem]<<48
+	add	$Btbl=$xi[1],$Htbl	};;	//(p17) &Htable[nhi]
+___
+push (@xi,shift(@xi)); push (@rem,shift(@rem));	# "rotate" registers
+}
+
+$code.=<<___;	# (p17),(p18),(p19)
+{ .mmi;	ld8	$Alo=[$Atbl],8			//(p18) Htable[nlo].lo,&Htable[nlo].hi
+	ld8	$rem[0]=[$Btbl],-256		//(p18) Htable[nhi].lo,&Hshr4[nhi].lo
+	shr.u	$Zhi=$Zhi,8		}	//(p19) Z.hi>>=8
+{ .mmi;	shladd	$rem[1]=$rem[1],1,$rem_8bit	//(p19) &rem_8bit[rem]
+	xor	$Zlo=$Zlo,$Blo			//(p19) Z.lo^=Hshr4[nhi].lo
+	xor	$xi[1]=$xi[1],$in	};;	//(p17) xi=$xi[i]^inp[i]
+{ .mmi;	ld8	$Ahi=[$Atbl]			//(p18) Htable[nlo].hi
+	ld2	$rem[1]=[$rem[1]]		//(p19) rem_8bit[rem]
+	dep	$Atbl=$xi[1],$Htbl,4,4	};;	//(p17) &Htable[nlo].lo
+{ .mmi;	shladd	$rem[0]=$rem[0],4,r0		//(p18) Htable[nhi].lo<<4
+	xor	$Zlo=$Zlo,$Alo			//(p18) Z.lo^=Htable[nlo].lo
+	xor	$Zhi=$Zhi,$Bhi		};;	//(p19) Z.hi^=Hshr4[nhi].hi
+{ .mmi;	ld8	$Blo=[$Btbl],8			//(p18) Hshr4[nhi].lo,&Hshr4[nhi].hi
+	shl	$rem[1]=$rem[1],48	}	//(p19) rem_8bit[rem]<<48
+{ .mmi;	xor	$rem[0]=$rem[0],$Zlo		//(p18) Z.lo^(Htable[nhi].lo<<4)
+	xor	$Zhi=$Zhi,$Ahi			//(p18) Z.hi^=Htable[nlo].hi
+	and	$xi[1]=-16,$xi[1]	};;	//(p17) nhi=xi&0xf0
+{ .mmi;	ld8	$Bhi=[$Btbl]			//(p18) Hshr4[nhi].hi
+	shrp	$Zlo=$Zhi,$Zlo,8	}	//(p18) Z.lo=(Z.hi<<56)|(Z.lo>>8)
+{ .mmi;	and	$rem[0]=$rem[0],$mask0xff	//(p18) rem=($Zlo^(Htable[nhi].lo<<4))&0xff
+	xor	$Zhi=$Zhi,$rem[1]		//(p19) Z.hi^=rem_8bit[rem]<<48
+	add	$Btbl=$xi[1],$Htbl	};;	//(p17) &Htable[nhi]
+___
+push (@xi,shift(@xi)); push (@rem,shift(@rem));	# "rotate" registers
+
+$code.=<<___;	# (p18),(p19)
+{ .mfi;	ld8	$Alo=[$Atbl],8			//(p18) Htable[nlo].lo,&Htable[nlo].hi
+	shr.u	$Zhi=$Zhi,8		}	//(p19) Z.hi>>=8
+{ .mfi;	shladd	$rem[1]=$rem[1],1,$rem_8bit	//(p19) &rem_8bit[rem]
+	xor	$Zlo=$Zlo,$Blo		};;	//(p19) Z.lo^=Hshr4[nhi].lo
+{ .mfi;	ld8	$Ahi=[$Atbl]			//(p18) Htable[nlo].hi
+	xor	$Zlo=$Zlo,$Alo		}	//(p18) Z.lo^=Htable[nlo].lo
+{ .mfi;	ld2	$rem[1]=[$rem[1]]		//(p19) rem_8bit[rem]
+	xor	$Zhi=$Zhi,$Bhi		};;	//(p19) Z.hi^=Hshr4[nhi].hi
+{ .mfi;	ld8	$Blo=[$Btbl],8			//(p18) Htable[nhi].lo,&Htable[nhi].hi
+	shl	$rem[1]=$rem[1],48	}	//(p19) rem_8bit[rem]<<48
+{ .mfi;	shladd	$rem[0]=$Zlo,4,r0		//(p18) Z.lo<<4
+	xor	$Zhi=$Zhi,$Ahi		};;	//(p18) Z.hi^=Htable[nlo].hi
+{ .mfi;	ld8	$Bhi=[$Btbl]			//(p18) Htable[nhi].hi
+	shrp	$Zlo=$Zhi,$Zlo,4	}	//(p18) Z.lo=(Z.hi<<60)|(Z.lo>>4)
+{ .mfi;	and	$rem[0]=$rem[0],$mask0xff	//(p18) rem=($Zlo^(Htable[nhi].lo<<4))&0xff
+	xor	$Zhi=$Zhi,$rem[1]	};;	//(p19) Z.hi^=rem_8bit[rem]<<48
+___
+push (@xi,shift(@xi)); push (@rem,shift(@rem));	# "rotate" registers
+
+$code.=<<___;	# (p19)
+{ .mmi;	cmp.ltu	p6,p0=$inp,$len
+	add	$inp=32,$inp
+	shr.u	$Zhi=$Zhi,4		}	//(p19) Z.hi>>=4
+{ .mmi;	shladd	$rem[1]=$rem[1],1,$rem_8bit	//(p19) &rem_8bit[rem]
+	xor	$Zlo=$Zlo,$Blo			//(p19) Z.lo^=Hshr4[nhi].lo
+	add	$Xip=9,$Xip		};;	//	&Xi.lo
+{ .mmi;	ld2	$rem[1]=[$rem[1]]		//(p19) rem_8bit[rem]
+(p6)	ld1	$in=[$inp],-1			//[p16] *inp--
+(p6)	extr.u	$xi[1]=$Zlo,8,8		}	//[p17] Xi[14]
+{ .mmi;	xor	$Zhi=$Zhi,$Bhi			//(p19) Z.hi^=Hshr4[nhi].hi
+(p6)	and	$xi[0]=$Zlo,$mask0xff	};;	//[p16] Xi[15]
+{ .mmi;	st8	[$Xip]=$Zlo,-8
+(p6)	xor	$xi[0]=$xi[0],$in		//[p17] xi=$xi[i]^inp[i]
+	shl	$rem[1]=$rem[1],48	};;	//(p19) rem_8bit[rem]<<48
+{ .mmi;
+(p6)	ld1	$in=[$inp],-1			//[p16] *inp--
+	xor	$Zhi=$Zhi,$rem[1]		//(p19) Z.hi^=rem_8bit[rem]<<48
+(p6)	dep	$Atbl=$xi[0],$Htbl,4,4	}	//[p17] &Htable[nlo].lo
+{ .mib;
+(p6)	and	$xi[0]=-16,$xi[0]		//[p17] nhi=xi&0xf0
+(p6)	br.cond.dptk.many	.LOOP	};;
+
+{ .mib;	st8	[$Xip]=$Zhi		};;
+{ .mib;	$rum	1<<1				// return to little-endian
+	.restore	sp
+	mov	sp=prevsp
+	br.ret.sptk.many	b0	};;
+.endp	gcm_ghash_4bit#
+___
+$code.=<<___;
+.align	128
+.type	rem_4bit#,\@object
+rem_4bit:
+        data8	0x0000<<48, 0x1C20<<48, 0x3840<<48, 0x2460<<48
+        data8	0x7080<<48, 0x6CA0<<48, 0x48C0<<48, 0x54E0<<48
+        data8	0xE100<<48, 0xFD20<<48, 0xD940<<48, 0xC560<<48
+        data8	0x9180<<48, 0x8DA0<<48, 0xA9C0<<48, 0xB5E0<<48
+.size	rem_4bit#,128
+.type	rem_8bit#,\@object
+rem_8bit:
+	data1	0x00,0x00, 0x01,0xC2, 0x03,0x84, 0x02,0x46, 0x07,0x08, 0x06,0xCA, 0x04,0x8C, 0x05,0x4E
+	data1	0x0E,0x10, 0x0F,0xD2, 0x0D,0x94, 0x0C,0x56, 0x09,0x18, 0x08,0xDA, 0x0A,0x9C, 0x0B,0x5E
+	data1	0x1C,0x20, 0x1D,0xE2, 0x1F,0xA4, 0x1E,0x66, 0x1B,0x28, 0x1A,0xEA, 0x18,0xAC, 0x19,0x6E
+	data1	0x12,0x30, 0x13,0xF2, 0x11,0xB4, 0x10,0x76, 0x15,0x38, 0x14,0xFA, 0x16,0xBC, 0x17,0x7E
+	data1	0x38,0x40, 0x39,0x82, 0x3B,0xC4, 0x3A,0x06, 0x3F,0x48, 0x3E,0x8A, 0x3C,0xCC, 0x3D,0x0E
+	data1	0x36,0x50, 0x37,0x92, 0x35,0xD4, 0x34,0x16, 0x31,0x58, 0x30,0x9A, 0x32,0xDC, 0x33,0x1E
+	data1	0x24,0x60, 0x25,0xA2, 0x27,0xE4, 0x26,0x26, 0x23,0x68, 0x22,0xAA, 0x20,0xEC, 0x21,0x2E
+	data1	0x2A,0x70, 0x2B,0xB2, 0x29,0xF4, 0x28,0x36, 0x2D,0x78, 0x2C,0xBA, 0x2E,0xFC, 0x2F,0x3E
+	data1	0x70,0x80, 0x71,0x42, 0x73,0x04, 0x72,0xC6, 0x77,0x88, 0x76,0x4A, 0x74,0x0C, 0x75,0xCE
+	data1	0x7E,0x90, 0x7F,0x52, 0x7D,0x14, 0x7C,0xD6, 0x79,0x98, 0x78,0x5A, 0x7A,0x1C, 0x7B,0xDE
+	data1	0x6C,0xA0, 0x6D,0x62, 0x6F,0x24, 0x6E,0xE6, 0x6B,0xA8, 0x6A,0x6A, 0x68,0x2C, 0x69,0xEE
+	data1	0x62,0xB0, 0x63,0x72, 0x61,0x34, 0x60,0xF6, 0x65,0xB8, 0x64,0x7A, 0x66,0x3C, 0x67,0xFE
+	data1	0x48,0xC0, 0x49,0x02, 0x4B,0x44, 0x4A,0x86, 0x4F,0xC8, 0x4E,0x0A, 0x4C,0x4C, 0x4D,0x8E
+	data1	0x46,0xD0, 0x47,0x12, 0x45,0x54, 0x44,0x96, 0x41,0xD8, 0x40,0x1A, 0x42,0x5C, 0x43,0x9E
+	data1	0x54,0xE0, 0x55,0x22, 0x57,0x64, 0x56,0xA6, 0x53,0xE8, 0x52,0x2A, 0x50,0x6C, 0x51,0xAE
+	data1	0x5A,0xF0, 0x5B,0x32, 0x59,0x74, 0x58,0xB6, 0x5D,0xF8, 0x5C,0x3A, 0x5E,0x7C, 0x5F,0xBE
+	data1	0xE1,0x00, 0xE0,0xC2, 0xE2,0x84, 0xE3,0x46, 0xE6,0x08, 0xE7,0xCA, 0xE5,0x8C, 0xE4,0x4E
+	data1	0xEF,0x10, 0xEE,0xD2, 0xEC,0x94, 0xED,0x56, 0xE8,0x18, 0xE9,0xDA, 0xEB,0x9C, 0xEA,0x5E
+	data1	0xFD,0x20, 0xFC,0xE2, 0xFE,0xA4, 0xFF,0x66, 0xFA,0x28, 0xFB,0xEA, 0xF9,0xAC, 0xF8,0x6E
+	data1	0xF3,0x30, 0xF2,0xF2, 0xF0,0xB4, 0xF1,0x76, 0xF4,0x38, 0xF5,0xFA, 0xF7,0xBC, 0xF6,0x7E
+	data1	0xD9,0x40, 0xD8,0x82, 0xDA,0xC4, 0xDB,0x06, 0xDE,0x48, 0xDF,0x8A, 0xDD,0xCC, 0xDC,0x0E
+	data1	0xD7,0x50, 0xD6,0x92, 0xD4,0xD4, 0xD5,0x16, 0xD0,0x58, 0xD1,0x9A, 0xD3,0xDC, 0xD2,0x1E
+	data1	0xC5,0x60, 0xC4,0xA2, 0xC6,0xE4, 0xC7,0x26, 0xC2,0x68, 0xC3,0xAA, 0xC1,0xEC, 0xC0,0x2E
+	data1	0xCB,0x70, 0xCA,0xB2, 0xC8,0xF4, 0xC9,0x36, 0xCC,0x78, 0xCD,0xBA, 0xCF,0xFC, 0xCE,0x3E
+	data1	0x91,0x80, 0x90,0x42, 0x92,0x04, 0x93,0xC6, 0x96,0x88, 0x97,0x4A, 0x95,0x0C, 0x94,0xCE
+	data1	0x9F,0x90, 0x9E,0x52, 0x9C,0x14, 0x9D,0xD6, 0x98,0x98, 0x99,0x5A, 0x9B,0x1C, 0x9A,0xDE
+	data1	0x8D,0xA0, 0x8C,0x62, 0x8E,0x24, 0x8F,0xE6, 0x8A,0xA8, 0x8B,0x6A, 0x89,0x2C, 0x88,0xEE
+	data1	0x83,0xB0, 0x82,0x72, 0x80,0x34, 0x81,0xF6, 0x84,0xB8, 0x85,0x7A, 0x87,0x3C, 0x86,0xFE
+	data1	0xA9,0xC0, 0xA8,0x02, 0xAA,0x44, 0xAB,0x86, 0xAE,0xC8, 0xAF,0x0A, 0xAD,0x4C, 0xAC,0x8E
+	data1	0xA7,0xD0, 0xA6,0x12, 0xA4,0x54, 0xA5,0x96, 0xA0,0xD8, 0xA1,0x1A, 0xA3,0x5C, 0xA2,0x9E
+	data1	0xB5,0xE0, 0xB4,0x22, 0xB6,0x64, 0xB7,0xA6, 0xB2,0xE8, 0xB3,0x2A, 0xB1,0x6C, 0xB0,0xAE
+	data1	0xBB,0xF0, 0xBA,0x32, 0xB8,0x74, 0xB9,0xB6, 0xBC,0xF8, 0xBD,0x3A, 0xBF,0x7C, 0xBE,0xBE
+.size	rem_8bit#,512
+stringz	"GHASH for IA64, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+$code =~ s/mux1(\s+)\S+\@rev/nop.i$1 0x0/gm      if ($big_endian);
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-parisc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-parisc.pl
new file mode 100644
index 000000000..a614c99c2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-parisc.pl
@@ -0,0 +1,748 @@
+#! /usr/bin/env perl
+# Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# April 2010
+#
+# The module implements "4-bit" GCM GHASH function and underlying
+# single multiplication operation in GF(2^128). "4-bit" means that it
+# uses 256 bytes per-key table [+128 bytes shared table]. On PA-7100LC
+# it processes one byte in 19.6 cycles, which is more than twice as
+# fast as code generated by gcc 3.2. PA-RISC 2.0 loop is scheduled for
+# 8 cycles, but measured performance on PA-8600 system is ~9 cycles per
+# processed byte. This is ~2.2x faster than 64-bit code generated by
+# vendor compiler (which used to be very hard to beat:-).
+#
+# Special thanks to polarhome.com for providing HP-UX account.
+
+$flavour = shift;
+$output = shift;
+open STDOUT,">$output";
+
+if ($flavour =~ /64/) {
+	$LEVEL		="2.0W";
+	$SIZE_T		=8;
+	$FRAME_MARKER	=80;
+	$SAVED_RP	=16;
+	$PUSH		="std";
+	$PUSHMA		="std,ma";
+	$POP		="ldd";
+	$POPMB		="ldd,mb";
+	$NREGS		=6;
+} else {
+	$LEVEL		="1.0";	#"\n\t.ALLOW\t2.0";
+	$SIZE_T		=4;
+	$FRAME_MARKER	=48;
+	$SAVED_RP	=20;
+	$PUSH		="stw";
+	$PUSHMA		="stwm";
+	$POP		="ldw";
+	$POPMB		="ldwm";
+	$NREGS		=11;
+}
+
+$FRAME=10*$SIZE_T+$FRAME_MARKER;# NREGS saved regs + frame marker
+				#                 [+ argument transfer]
+
+################# volatile registers
+$Xi="%r26";	# argument block
+$Htbl="%r25";
+$inp="%r24";
+$len="%r23";
+$Hhh=$Htbl;	# variables
+$Hll="%r22";
+$Zhh="%r21";
+$Zll="%r20";
+$cnt="%r19";
+$rem_4bit="%r28";
+$rem="%r29";
+$mask0xf0="%r31";
+
+################# preserved registers
+$Thh="%r1";
+$Tll="%r2";
+$nlo="%r3";
+$nhi="%r4";
+$byte="%r5";
+if ($SIZE_T==4) {
+	$Zhl="%r6";
+	$Zlh="%r7";
+	$Hhl="%r8";
+	$Hlh="%r9";
+	$Thl="%r10";
+	$Tlh="%r11";
+}
+$rem2="%r6";	# used in PA-RISC 2.0 code
+
+$code.=<<___;
+	.LEVEL	$LEVEL
+	.SPACE	\$TEXT\$
+	.SUBSPA	\$CODE\$,QUAD=0,ALIGN=8,ACCESS=0x2C,CODE_ONLY
+
+	.EXPORT	gcm_gmult_4bit,ENTRY,ARGW0=GR,ARGW1=GR
+	.ALIGN	64
+gcm_gmult_4bit
+	.PROC
+	.CALLINFO	FRAME=`$FRAME-10*$SIZE_T`,NO_CALLS,SAVE_RP,ENTRY_GR=$NREGS
+	.ENTRY
+	$PUSH	%r2,-$SAVED_RP(%sp)	; standard prologue
+	$PUSHMA	%r3,$FRAME(%sp)
+	$PUSH	%r4,`-$FRAME+1*$SIZE_T`(%sp)
+	$PUSH	%r5,`-$FRAME+2*$SIZE_T`(%sp)
+	$PUSH	%r6,`-$FRAME+3*$SIZE_T`(%sp)
+___
+$code.=<<___ if ($SIZE_T==4);
+	$PUSH	%r7,`-$FRAME+4*$SIZE_T`(%sp)
+	$PUSH	%r8,`-$FRAME+5*$SIZE_T`(%sp)
+	$PUSH	%r9,`-$FRAME+6*$SIZE_T`(%sp)
+	$PUSH	%r10,`-$FRAME+7*$SIZE_T`(%sp)
+	$PUSH	%r11,`-$FRAME+8*$SIZE_T`(%sp)
+___
+$code.=<<___;
+	blr	%r0,$rem_4bit
+	ldi	3,$rem
+L\$pic_gmult
+	andcm	$rem_4bit,$rem,$rem_4bit
+	addl	$inp,$len,$len
+	ldo	L\$rem_4bit-L\$pic_gmult($rem_4bit),$rem_4bit
+	ldi	0xf0,$mask0xf0
+___
+$code.=<<___ if ($SIZE_T==4);
+	ldi	31,$rem
+	mtctl	$rem,%cr11
+	extrd,u,*= $rem,%sar,1,$rem	; executes on PA-RISC 1.0
+	b	L\$parisc1_gmult
+	nop
+___
+
+$code.=<<___;
+	ldb	15($Xi),$nlo
+	ldo	8($Htbl),$Hll
+
+	and	$mask0xf0,$nlo,$nhi
+	depd,z	$nlo,59,4,$nlo
+
+	ldd	$nlo($Hll),$Zll
+	ldd	$nlo($Hhh),$Zhh
+
+	depd,z	$Zll,60,4,$rem
+	shrpd	$Zhh,$Zll,4,$Zll
+	extrd,u	$Zhh,59,60,$Zhh
+	ldb	14($Xi),$nlo
+
+	ldd	$nhi($Hll),$Tll
+	ldd	$nhi($Hhh),$Thh
+	and	$mask0xf0,$nlo,$nhi
+	depd,z	$nlo,59,4,$nlo
+
+	xor	$Tll,$Zll,$Zll
+	xor	$Thh,$Zhh,$Zhh
+	ldd	$rem($rem_4bit),$rem
+	b	L\$oop_gmult_pa2
+	ldi	13,$cnt
+
+	.ALIGN	8
+L\$oop_gmult_pa2
+	xor	$rem,$Zhh,$Zhh		; moved here to work around gas bug
+	depd,z	$Zll,60,4,$rem
+
+	shrpd	$Zhh,$Zll,4,$Zll
+	extrd,u	$Zhh,59,60,$Zhh
+	ldd	$nlo($Hll),$Tll
+	ldd	$nlo($Hhh),$Thh
+
+	xor	$Tll,$Zll,$Zll
+	xor	$Thh,$Zhh,$Zhh
+	ldd	$rem($rem_4bit),$rem
+
+	xor	$rem,$Zhh,$Zhh
+	depd,z	$Zll,60,4,$rem
+	ldbx	$cnt($Xi),$nlo
+
+	shrpd	$Zhh,$Zll,4,$Zll
+	extrd,u	$Zhh,59,60,$Zhh
+	ldd	$nhi($Hll),$Tll
+	ldd	$nhi($Hhh),$Thh
+
+	and	$mask0xf0,$nlo,$nhi
+	depd,z	$nlo,59,4,$nlo
+	ldd	$rem($rem_4bit),$rem
+
+	xor	$Tll,$Zll,$Zll
+	addib,uv -1,$cnt,L\$oop_gmult_pa2
+	xor	$Thh,$Zhh,$Zhh
+
+	xor	$rem,$Zhh,$Zhh
+	depd,z	$Zll,60,4,$rem
+
+	shrpd	$Zhh,$Zll,4,$Zll
+	extrd,u	$Zhh,59,60,$Zhh
+	ldd	$nlo($Hll),$Tll
+	ldd	$nlo($Hhh),$Thh
+
+	xor	$Tll,$Zll,$Zll
+	xor	$Thh,$Zhh,$Zhh
+	ldd	$rem($rem_4bit),$rem
+
+	xor	$rem,$Zhh,$Zhh
+	depd,z	$Zll,60,4,$rem
+
+	shrpd	$Zhh,$Zll,4,$Zll
+	extrd,u	$Zhh,59,60,$Zhh
+	ldd	$nhi($Hll),$Tll
+	ldd	$nhi($Hhh),$Thh
+
+	xor	$Tll,$Zll,$Zll
+	xor	$Thh,$Zhh,$Zhh
+	ldd	$rem($rem_4bit),$rem
+
+	xor	$rem,$Zhh,$Zhh
+	std	$Zll,8($Xi)
+	std	$Zhh,0($Xi)
+___
+
+$code.=<<___ if ($SIZE_T==4);
+	b	L\$done_gmult
+	nop
+
+L\$parisc1_gmult
+	ldb	15($Xi),$nlo
+	ldo	12($Htbl),$Hll
+	ldo	8($Htbl),$Hlh
+	ldo	4($Htbl),$Hhl
+
+	and	$mask0xf0,$nlo,$nhi
+	zdep	$nlo,27,4,$nlo
+
+	ldwx	$nlo($Hll),$Zll
+	ldwx	$nlo($Hlh),$Zlh
+	ldwx	$nlo($Hhl),$Zhl
+	ldwx	$nlo($Hhh),$Zhh
+	zdep	$Zll,28,4,$rem
+	ldb	14($Xi),$nlo
+	ldwx	$rem($rem_4bit),$rem
+	shrpw	$Zlh,$Zll,4,$Zll
+	ldwx	$nhi($Hll),$Tll
+	shrpw	$Zhl,$Zlh,4,$Zlh
+	ldwx	$nhi($Hlh),$Tlh
+	shrpw	$Zhh,$Zhl,4,$Zhl
+	ldwx	$nhi($Hhl),$Thl
+	extru	$Zhh,27,28,$Zhh
+	ldwx	$nhi($Hhh),$Thh
+	xor	$rem,$Zhh,$Zhh
+	and	$mask0xf0,$nlo,$nhi
+	zdep	$nlo,27,4,$nlo
+
+	xor	$Tll,$Zll,$Zll
+	ldwx	$nlo($Hll),$Tll
+	xor	$Tlh,$Zlh,$Zlh
+	ldwx	$nlo($Hlh),$Tlh
+	xor	$Thl,$Zhl,$Zhl
+	b	L\$oop_gmult_pa1
+	ldi	13,$cnt
+
+	.ALIGN	8
+L\$oop_gmult_pa1
+	zdep	$Zll,28,4,$rem
+	ldwx	$nlo($Hhl),$Thl
+	xor	$Thh,$Zhh,$Zhh
+	ldwx	$rem($rem_4bit),$rem
+	shrpw	$Zlh,$Zll,4,$Zll
+	ldwx	$nlo($Hhh),$Thh
+	shrpw	$Zhl,$Zlh,4,$Zlh
+	ldbx	$cnt($Xi),$nlo
+	xor	$Tll,$Zll,$Zll
+	ldwx	$nhi($Hll),$Tll
+	shrpw	$Zhh,$Zhl,4,$Zhl
+	xor	$Tlh,$Zlh,$Zlh
+	ldwx	$nhi($Hlh),$Tlh
+	extru	$Zhh,27,28,$Zhh
+	xor	$Thl,$Zhl,$Zhl
+	ldwx	$nhi($Hhl),$Thl
+	xor	$rem,$Zhh,$Zhh
+	zdep	$Zll,28,4,$rem
+	xor	$Thh,$Zhh,$Zhh
+	ldwx	$nhi($Hhh),$Thh
+	shrpw	$Zlh,$Zll,4,$Zll
+	ldwx	$rem($rem_4bit),$rem
+	shrpw	$Zhl,$Zlh,4,$Zlh
+	shrpw	$Zhh,$Zhl,4,$Zhl
+	and	$mask0xf0,$nlo,$nhi
+	extru	$Zhh,27,28,$Zhh
+	zdep	$nlo,27,4,$nlo
+	xor	$Tll,$Zll,$Zll
+	ldwx	$nlo($Hll),$Tll
+	xor	$Tlh,$Zlh,$Zlh
+	ldwx	$nlo($Hlh),$Tlh
+	xor	$rem,$Zhh,$Zhh
+	addib,uv -1,$cnt,L\$oop_gmult_pa1
+	xor	$Thl,$Zhl,$Zhl
+
+	zdep	$Zll,28,4,$rem
+	ldwx	$nlo($Hhl),$Thl
+	xor	$Thh,$Zhh,$Zhh
+	ldwx	$rem($rem_4bit),$rem
+	shrpw	$Zlh,$Zll,4,$Zll
+	ldwx	$nlo($Hhh),$Thh
+	shrpw	$Zhl,$Zlh,4,$Zlh
+	xor	$Tll,$Zll,$Zll
+	ldwx	$nhi($Hll),$Tll
+	shrpw	$Zhh,$Zhl,4,$Zhl
+	xor	$Tlh,$Zlh,$Zlh
+	ldwx	$nhi($Hlh),$Tlh
+	extru	$Zhh,27,28,$Zhh
+	xor	$rem,$Zhh,$Zhh
+	xor	$Thl,$Zhl,$Zhl
+	ldwx	$nhi($Hhl),$Thl
+	xor	$Thh,$Zhh,$Zhh
+	ldwx	$nhi($Hhh),$Thh
+	zdep	$Zll,28,4,$rem
+	ldwx	$rem($rem_4bit),$rem
+	shrpw	$Zlh,$Zll,4,$Zll
+	shrpw	$Zhl,$Zlh,4,$Zlh
+	shrpw	$Zhh,$Zhl,4,$Zhl
+	extru	$Zhh,27,28,$Zhh
+	xor	$Tll,$Zll,$Zll
+	xor	$Tlh,$Zlh,$Zlh
+	xor	$rem,$Zhh,$Zhh
+	stw	$Zll,12($Xi)
+	xor	$Thl,$Zhl,$Zhl
+	stw	$Zlh,8($Xi)
+	xor	$Thh,$Zhh,$Zhh
+	stw	$Zhl,4($Xi)
+	stw	$Zhh,0($Xi)
+___
+$code.=<<___;
+L\$done_gmult
+	$POP	`-$FRAME-$SAVED_RP`(%sp),%r2		; standard epilogue
+	$POP	`-$FRAME+1*$SIZE_T`(%sp),%r4
+	$POP	`-$FRAME+2*$SIZE_T`(%sp),%r5
+	$POP	`-$FRAME+3*$SIZE_T`(%sp),%r6
+___
+$code.=<<___ if ($SIZE_T==4);
+	$POP	`-$FRAME+4*$SIZE_T`(%sp),%r7
+	$POP	`-$FRAME+5*$SIZE_T`(%sp),%r8
+	$POP	`-$FRAME+6*$SIZE_T`(%sp),%r9
+	$POP	`-$FRAME+7*$SIZE_T`(%sp),%r10
+	$POP	`-$FRAME+8*$SIZE_T`(%sp),%r11
+___
+$code.=<<___;
+	bv	(%r2)
+	.EXIT
+	$POPMB	-$FRAME(%sp),%r3
+	.PROCEND
+
+	.EXPORT	gcm_ghash_4bit,ENTRY,ARGW0=GR,ARGW1=GR,ARGW2=GR,ARGW3=GR
+	.ALIGN	64
+gcm_ghash_4bit
+	.PROC
+	.CALLINFO	FRAME=`$FRAME-10*$SIZE_T`,NO_CALLS,SAVE_RP,ENTRY_GR=11
+	.ENTRY
+	$PUSH	%r2,-$SAVED_RP(%sp)	; standard prologue
+	$PUSHMA	%r3,$FRAME(%sp)
+	$PUSH	%r4,`-$FRAME+1*$SIZE_T`(%sp)
+	$PUSH	%r5,`-$FRAME+2*$SIZE_T`(%sp)
+	$PUSH	%r6,`-$FRAME+3*$SIZE_T`(%sp)
+___
+$code.=<<___ if ($SIZE_T==4);
+	$PUSH	%r7,`-$FRAME+4*$SIZE_T`(%sp)
+	$PUSH	%r8,`-$FRAME+5*$SIZE_T`(%sp)
+	$PUSH	%r9,`-$FRAME+6*$SIZE_T`(%sp)
+	$PUSH	%r10,`-$FRAME+7*$SIZE_T`(%sp)
+	$PUSH	%r11,`-$FRAME+8*$SIZE_T`(%sp)
+___
+$code.=<<___;
+	blr	%r0,$rem_4bit
+	ldi	3,$rem
+L\$pic_ghash
+	andcm	$rem_4bit,$rem,$rem_4bit
+	addl	$inp,$len,$len
+	ldo	L\$rem_4bit-L\$pic_ghash($rem_4bit),$rem_4bit
+	ldi	0xf0,$mask0xf0
+___
+$code.=<<___ if ($SIZE_T==4);
+	ldi	31,$rem
+	mtctl	$rem,%cr11
+	extrd,u,*= $rem,%sar,1,$rem	; executes on PA-RISC 1.0
+	b	L\$parisc1_ghash
+	nop
+___
+
+$code.=<<___;
+	ldb	15($Xi),$nlo
+	ldo	8($Htbl),$Hll
+
+L\$outer_ghash_pa2
+	ldb	15($inp),$nhi
+	xor	$nhi,$nlo,$nlo
+	and	$mask0xf0,$nlo,$nhi
+	depd,z	$nlo,59,4,$nlo
+
+	ldd	$nlo($Hll),$Zll
+	ldd	$nlo($Hhh),$Zhh
+
+	depd,z	$Zll,60,4,$rem
+	shrpd	$Zhh,$Zll,4,$Zll
+	extrd,u	$Zhh,59,60,$Zhh
+	ldb	14($Xi),$nlo
+	ldb	14($inp),$byte
+
+	ldd	$nhi($Hll),$Tll
+	ldd	$nhi($Hhh),$Thh
+	xor	$byte,$nlo,$nlo
+	and	$mask0xf0,$nlo,$nhi
+	depd,z	$nlo,59,4,$nlo
+
+	xor	$Tll,$Zll,$Zll
+	xor	$Thh,$Zhh,$Zhh
+	ldd	$rem($rem_4bit),$rem
+	b	L\$oop_ghash_pa2
+	ldi	13,$cnt
+
+	.ALIGN	8
+L\$oop_ghash_pa2
+	xor	$rem,$Zhh,$Zhh		; moved here to work around gas bug
+	depd,z	$Zll,60,4,$rem2
+
+	shrpd	$Zhh,$Zll,4,$Zll
+	extrd,u	$Zhh,59,60,$Zhh
+	ldd	$nlo($Hll),$Tll
+	ldd	$nlo($Hhh),$Thh
+
+	xor	$Tll,$Zll,$Zll
+	xor	$Thh,$Zhh,$Zhh
+	ldbx	$cnt($Xi),$nlo
+	ldbx	$cnt($inp),$byte
+
+	depd,z	$Zll,60,4,$rem
+	shrpd	$Zhh,$Zll,4,$Zll
+	ldd	$rem2($rem_4bit),$rem2
+
+	xor	$rem2,$Zhh,$Zhh
+	xor	$byte,$nlo,$nlo
+	ldd	$nhi($Hll),$Tll
+	ldd	$nhi($Hhh),$Thh
+
+	and	$mask0xf0,$nlo,$nhi
+	depd,z	$nlo,59,4,$nlo
+
+	extrd,u	$Zhh,59,60,$Zhh
+	xor	$Tll,$Zll,$Zll
+
+	ldd	$rem($rem_4bit),$rem
+	addib,uv -1,$cnt,L\$oop_ghash_pa2
+	xor	$Thh,$Zhh,$Zhh
+
+	xor	$rem,$Zhh,$Zhh
+	depd,z	$Zll,60,4,$rem2
+
+	shrpd	$Zhh,$Zll,4,$Zll
+	extrd,u	$Zhh,59,60,$Zhh
+	ldd	$nlo($Hll),$Tll
+	ldd	$nlo($Hhh),$Thh
+
+	xor	$Tll,$Zll,$Zll
+	xor	$Thh,$Zhh,$Zhh
+
+	depd,z	$Zll,60,4,$rem
+	shrpd	$Zhh,$Zll,4,$Zll
+	ldd	$rem2($rem_4bit),$rem2
+
+	xor	$rem2,$Zhh,$Zhh
+	ldd	$nhi($Hll),$Tll
+	ldd	$nhi($Hhh),$Thh
+
+	extrd,u	$Zhh,59,60,$Zhh
+	xor	$Tll,$Zll,$Zll
+	xor	$Thh,$Zhh,$Zhh
+	ldd	$rem($rem_4bit),$rem
+
+	xor	$rem,$Zhh,$Zhh
+	std	$Zll,8($Xi)
+	ldo	16($inp),$inp
+	std	$Zhh,0($Xi)
+	cmpb,*<> $inp,$len,L\$outer_ghash_pa2
+	copy	$Zll,$nlo
+___
+
+$code.=<<___ if ($SIZE_T==4);
+	b	L\$done_ghash
+	nop
+
+L\$parisc1_ghash
+	ldb	15($Xi),$nlo
+	ldo	12($Htbl),$Hll
+	ldo	8($Htbl),$Hlh
+	ldo	4($Htbl),$Hhl
+
+L\$outer_ghash_pa1
+	ldb	15($inp),$byte
+	xor	$byte,$nlo,$nlo
+	and	$mask0xf0,$nlo,$nhi
+	zdep	$nlo,27,4,$nlo
+
+	ldwx	$nlo($Hll),$Zll
+	ldwx	$nlo($Hlh),$Zlh
+	ldwx	$nlo($Hhl),$Zhl
+	ldwx	$nlo($Hhh),$Zhh
+	zdep	$Zll,28,4,$rem
+	ldb	14($Xi),$nlo
+	ldb	14($inp),$byte
+	ldwx	$rem($rem_4bit),$rem
+	shrpw	$Zlh,$Zll,4,$Zll
+	ldwx	$nhi($Hll),$Tll
+	shrpw	$Zhl,$Zlh,4,$Zlh
+	ldwx	$nhi($Hlh),$Tlh
+	shrpw	$Zhh,$Zhl,4,$Zhl
+	ldwx	$nhi($Hhl),$Thl
+	extru	$Zhh,27,28,$Zhh
+	ldwx	$nhi($Hhh),$Thh
+	xor	$byte,$nlo,$nlo
+	xor	$rem,$Zhh,$Zhh
+	and	$mask0xf0,$nlo,$nhi
+	zdep	$nlo,27,4,$nlo
+
+	xor	$Tll,$Zll,$Zll
+	ldwx	$nlo($Hll),$Tll
+	xor	$Tlh,$Zlh,$Zlh
+	ldwx	$nlo($Hlh),$Tlh
+	xor	$Thl,$Zhl,$Zhl
+	b	L\$oop_ghash_pa1
+	ldi	13,$cnt
+
+	.ALIGN	8
+L\$oop_ghash_pa1
+	zdep	$Zll,28,4,$rem
+	ldwx	$nlo($Hhl),$Thl
+	xor	$Thh,$Zhh,$Zhh
+	ldwx	$rem($rem_4bit),$rem
+	shrpw	$Zlh,$Zll,4,$Zll
+	ldwx	$nlo($Hhh),$Thh
+	shrpw	$Zhl,$Zlh,4,$Zlh
+	ldbx	$cnt($Xi),$nlo
+	xor	$Tll,$Zll,$Zll
+	ldwx	$nhi($Hll),$Tll
+	shrpw	$Zhh,$Zhl,4,$Zhl
+	ldbx	$cnt($inp),$byte
+	xor	$Tlh,$Zlh,$Zlh
+	ldwx	$nhi($Hlh),$Tlh
+	extru	$Zhh,27,28,$Zhh
+	xor	$Thl,$Zhl,$Zhl
+	ldwx	$nhi($Hhl),$Thl
+	xor	$rem,$Zhh,$Zhh
+	zdep	$Zll,28,4,$rem
+	xor	$Thh,$Zhh,$Zhh
+	ldwx	$nhi($Hhh),$Thh
+	shrpw	$Zlh,$Zll,4,$Zll
+	ldwx	$rem($rem_4bit),$rem
+	shrpw	$Zhl,$Zlh,4,$Zlh
+	xor	$byte,$nlo,$nlo
+	shrpw	$Zhh,$Zhl,4,$Zhl
+	and	$mask0xf0,$nlo,$nhi
+	extru	$Zhh,27,28,$Zhh
+	zdep	$nlo,27,4,$nlo
+	xor	$Tll,$Zll,$Zll
+	ldwx	$nlo($Hll),$Tll
+	xor	$Tlh,$Zlh,$Zlh
+	ldwx	$nlo($Hlh),$Tlh
+	xor	$rem,$Zhh,$Zhh
+	addib,uv -1,$cnt,L\$oop_ghash_pa1
+	xor	$Thl,$Zhl,$Zhl
+
+	zdep	$Zll,28,4,$rem
+	ldwx	$nlo($Hhl),$Thl
+	xor	$Thh,$Zhh,$Zhh
+	ldwx	$rem($rem_4bit),$rem
+	shrpw	$Zlh,$Zll,4,$Zll
+	ldwx	$nlo($Hhh),$Thh
+	shrpw	$Zhl,$Zlh,4,$Zlh
+	xor	$Tll,$Zll,$Zll
+	ldwx	$nhi($Hll),$Tll
+	shrpw	$Zhh,$Zhl,4,$Zhl
+	xor	$Tlh,$Zlh,$Zlh
+	ldwx	$nhi($Hlh),$Tlh
+	extru	$Zhh,27,28,$Zhh
+	xor	$rem,$Zhh,$Zhh
+	xor	$Thl,$Zhl,$Zhl
+	ldwx	$nhi($Hhl),$Thl
+	xor	$Thh,$Zhh,$Zhh
+	ldwx	$nhi($Hhh),$Thh
+	zdep	$Zll,28,4,$rem
+	ldwx	$rem($rem_4bit),$rem
+	shrpw	$Zlh,$Zll,4,$Zll
+	shrpw	$Zhl,$Zlh,4,$Zlh
+	shrpw	$Zhh,$Zhl,4,$Zhl
+	extru	$Zhh,27,28,$Zhh
+	xor	$Tll,$Zll,$Zll
+	xor	$Tlh,$Zlh,$Zlh
+	xor	$rem,$Zhh,$Zhh
+	stw	$Zll,12($Xi)
+	xor	$Thl,$Zhl,$Zhl
+	stw	$Zlh,8($Xi)
+	xor	$Thh,$Zhh,$Zhh
+	stw	$Zhl,4($Xi)
+	ldo	16($inp),$inp
+	stw	$Zhh,0($Xi)
+	comb,<>	$inp,$len,L\$outer_ghash_pa1
+	copy	$Zll,$nlo
+___
+$code.=<<___;
+L\$done_ghash
+	$POP	`-$FRAME-$SAVED_RP`(%sp),%r2		; standard epilogue
+	$POP	`-$FRAME+1*$SIZE_T`(%sp),%r4
+	$POP	`-$FRAME+2*$SIZE_T`(%sp),%r5
+	$POP	`-$FRAME+3*$SIZE_T`(%sp),%r6
+___
+$code.=<<___ if ($SIZE_T==4);
+	$POP	`-$FRAME+4*$SIZE_T`(%sp),%r7
+	$POP	`-$FRAME+5*$SIZE_T`(%sp),%r8
+	$POP	`-$FRAME+6*$SIZE_T`(%sp),%r9
+	$POP	`-$FRAME+7*$SIZE_T`(%sp),%r10
+	$POP	`-$FRAME+8*$SIZE_T`(%sp),%r11
+___
+$code.=<<___;
+	bv	(%r2)
+	.EXIT
+	$POPMB	-$FRAME(%sp),%r3
+	.PROCEND
+
+	.ALIGN	64
+L\$rem_4bit
+	.WORD	`0x0000<<16`,0,`0x1C20<<16`,0,`0x3840<<16`,0,`0x2460<<16`,0
+	.WORD	`0x7080<<16`,0,`0x6CA0<<16`,0,`0x48C0<<16`,0,`0x54E0<<16`,0
+	.WORD	`0xE100<<16`,0,`0xFD20<<16`,0,`0xD940<<16`,0,`0xC560<<16`,0
+	.WORD	`0x9180<<16`,0,`0x8DA0<<16`,0,`0xA9C0<<16`,0,`0xB5E0<<16`,0
+	.STRINGZ "GHASH for PA-RISC, GRYPTOGAMS by <appro\@openssl.org>"
+	.ALIGN	64
+___
+
+# Explicitly encode PA-RISC 2.0 instructions used in this module, so
+# that it can be compiled with .LEVEL 1.0. It should be noted that I
+# wouldn't have to do this, if GNU assembler understood .ALLOW 2.0
+# directive...
+
+my $ldd = sub {
+  my ($mod,$args) = @_;
+  my $orig = "ldd$mod\t$args";
+
+    if ($args =~ /%r([0-9]+)\(%r([0-9]+)\),%r([0-9]+)/)		# format 4
+    {	my $opcode=(0x03<<26)|($2<<21)|($1<<16)|(3<<6)|$3;
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    elsif ($args =~ /(\-?[0-9]+)\(%r([0-9]+)\),%r([0-9]+)/)	# format 5
+    {	my $opcode=(0x03<<26)|($2<<21)|(1<<12)|(3<<6)|$3;
+	$opcode|=(($1&0xF)<<17)|(($1&0x10)<<12);		# encode offset
+	$opcode|=(1<<5)  if ($mod =~ /^,m/);
+	$opcode|=(1<<13) if ($mod =~ /^,mb/);
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    else { "\t".$orig; }
+};
+
+my $std = sub {
+  my ($mod,$args) = @_;
+  my $orig = "std$mod\t$args";
+
+    if ($args =~ /%r([0-9]+),(\-?[0-9]+)\(%r([0-9]+)\)/) # format 3 suffices
+    {	my $opcode=(0x1c<<26)|($3<<21)|($1<<16)|(($2&0x1FF8)<<1)|(($2>>13)&1);
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    else { "\t".$orig; }
+};
+
+my $extrd = sub {
+  my ($mod,$args) = @_;
+  my $orig = "extrd$mod\t$args";
+
+    # I only have ",u" completer, it's implicitly encoded...
+    if ($args =~ /%r([0-9]+),([0-9]+),([0-9]+),%r([0-9]+)/)	# format 15
+    {	my $opcode=(0x36<<26)|($1<<21)|($4<<16);
+	my $len=32-$3;
+	$opcode |= (($2&0x20)<<6)|(($2&0x1f)<<5);		# encode pos
+	$opcode |= (($len&0x20)<<7)|($len&0x1f);		# encode len
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    elsif ($args =~ /%r([0-9]+),%sar,([0-9]+),%r([0-9]+)/)	# format 12
+    {	my $opcode=(0x34<<26)|($1<<21)|($3<<16)|(2<<11)|(1<<9);
+	my $len=32-$2;
+	$opcode |= (($len&0x20)<<3)|($len&0x1f);		# encode len
+	$opcode |= (1<<13) if ($mod =~ /,\**=/);
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    else { "\t".$orig; }
+};
+
+my $shrpd = sub {
+  my ($mod,$args) = @_;
+  my $orig = "shrpd$mod\t$args";
+
+    if ($args =~ /%r([0-9]+),%r([0-9]+),([0-9]+),%r([0-9]+)/)	# format 14
+    {	my $opcode=(0x34<<26)|($2<<21)|($1<<16)|(1<<10)|$4;
+	my $cpos=63-$3;
+	$opcode |= (($cpos&0x20)<<6)|(($cpos&0x1f)<<5);		# encode sa
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    elsif ($args =~ /%r([0-9]+),%r([0-9]+),%sar,%r([0-9]+)/)	# format 11
+    {	sprintf "\t.WORD\t0x%08x\t; %s",
+		(0x34<<26)|($2<<21)|($1<<16)|(1<<9)|$3,$orig;
+    }
+    else { "\t".$orig; }
+};
+
+my $depd = sub {
+  my ($mod,$args) = @_;
+  my $orig = "depd$mod\t$args";
+
+    # I only have ",z" completer, it's implicitly encoded...
+    if ($args =~ /%r([0-9]+),([0-9]+),([0-9]+),%r([0-9]+)/)	# format 16
+    {	my $opcode=(0x3c<<26)|($4<<21)|($1<<16);
+    	my $cpos=63-$2;
+	my $len=32-$3;
+	$opcode |= (($cpos&0x20)<<6)|(($cpos&0x1f)<<5);		# encode pos
+	$opcode |= (($len&0x20)<<7)|($len&0x1f);		# encode len
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    else { "\t".$orig; }
+};
+
+sub assemble {
+  my ($mnemonic,$mod,$args)=@_;
+  my $opcode = eval("\$$mnemonic");
+
+    ref($opcode) eq 'CODE' ? &$opcode($mod,$args) : "\t$mnemonic$mod\t$args";
+}
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+	=~ /GNU assembler/) {
+    $gnuas = 1;
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+	if ($SIZE_T==4) {
+		s/^\s+([a-z]+)([\S]*)\s+([\S]*)/&assemble($1,$2,$3)/e;
+		s/cmpb,\*/comb,/;
+		s/,\*/,/;
+	}
+
+	s/(\.LEVEL\s+2\.0)W/$1w/	if ($gnuas && $SIZE_T==8);
+	s/\.SPACE\s+\$TEXT\$/.text/	if ($gnuas && $SIZE_T==8);
+	s/\.SUBSPA.*//			if ($gnuas && $SIZE_T==8);
+	s/\bbv\b/bve/			if ($SIZE_T==8);
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-s390x.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-s390x.pl
new file mode 100644
index 000000000..17dc37505
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-s390x.pl
@@ -0,0 +1,262 @@
+#! /usr/bin/env perl
+# Copyright 2010-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# September 2010.
+#
+# The module implements "4-bit" GCM GHASH function and underlying
+# single multiplication operation in GF(2^128). "4-bit" means that it
+# uses 256 bytes per-key table [+128 bytes shared table]. Performance
+# was measured to be ~18 cycles per processed byte on z10, which is
+# almost 40% better than gcc-generated code. It should be noted that
+# 18 cycles is worse result than expected: loop is scheduled for 12
+# and the result should be close to 12. In the lack of instruction-
+# level profiling data it's impossible to tell why...
+
+# November 2010.
+#
+# Adapt for -m31 build. If kernel supports what's called "highgprs"
+# feature on Linux [see /proc/cpuinfo], it's possible to use 64-bit
+# instructions and achieve "64-bit" performance even in 31-bit legacy
+# application context. The feature is not specific to any particular
+# processor, as long as it's "z-CPU". Latter implies that the code
+# remains z/Architecture specific. On z990 it was measured to perform
+# 2.8x better than 32-bit code generated by gcc 4.3.
+
+# March 2011.
+#
+# Support for hardware KIMD-GHASH is verified to produce correct
+# result and therefore is engaged. On z196 it was measured to process
+# 8KB buffer ~7 faster than software implementation. It's not as
+# impressive for smaller buffer sizes and for smallest 16-bytes buffer
+# it's actually almost 2 times slower. Which is the reason why
+# KIMD-GHASH is not used in gcm_gmult_4bit.
+
+$flavour = shift;
+
+if ($flavour =~ /3[12]/) {
+	$SIZE_T=4;
+	$g="";
+} else {
+	$SIZE_T=8;
+	$g="g";
+}
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+$softonly=0;
+
+$Zhi="%r0";
+$Zlo="%r1";
+
+$Xi="%r2";	# argument block
+$Htbl="%r3";
+$inp="%r4";
+$len="%r5";
+
+$rem0="%r6";	# variables
+$rem1="%r7";
+$nlo="%r8";
+$nhi="%r9";
+$xi="%r10";
+$cnt="%r11";
+$tmp="%r12";
+$x78="%r13";
+$rem_4bit="%r14";
+
+$sp="%r15";
+
+$code.=<<___;
+#include "s390x_arch.h"
+
+.text
+
+.globl	gcm_gmult_4bit
+.align	32
+gcm_gmult_4bit:
+___
+$code.=<<___ if(!$softonly && 0);	# hardware is slow for single block...
+	larl	%r1,OPENSSL_s390xcap_P
+	lghi	%r0,0
+	lg	%r1,S390X_KIMD+8(%r1)	# load second word of kimd capabilities
+					#  vector
+	tmhh	%r1,0x4000	# check for function 65
+	jz	.Lsoft_gmult
+	stg	%r0,16($sp)	# arrange 16 bytes of zero input
+	stg	%r0,24($sp)
+	lghi	%r0,S390X_GHASH	# function 65
+	la	%r1,0($Xi)	# H lies right after Xi in gcm128_context
+	la	$inp,16($sp)
+	lghi	$len,16
+	.long	0xb93e0004	# kimd %r0,$inp
+	brc	1,.-4		# pay attention to "partial completion"
+	br	%r14
+.align	32
+.Lsoft_gmult:
+___
+$code.=<<___;
+	stm${g}	%r6,%r14,6*$SIZE_T($sp)
+
+	aghi	$Xi,-1
+	lghi	$len,1
+	lghi	$x78,`0xf<<3`
+	larl	$rem_4bit,rem_4bit
+
+	lg	$Zlo,8+1($Xi)		# Xi
+	j	.Lgmult_shortcut
+.type	gcm_gmult_4bit,\@function
+.size	gcm_gmult_4bit,(.-gcm_gmult_4bit)
+
+.globl	gcm_ghash_4bit
+.align	32
+gcm_ghash_4bit:
+___
+$code.=<<___ if(!$softonly);
+	larl	%r1,OPENSSL_s390xcap_P
+	lg	%r0,S390X_KIMD+8(%r1)	# load second word of kimd capabilities
+					#  vector
+	tmhh	%r0,0x4000	# check for function 65
+	jz	.Lsoft_ghash
+	lghi	%r0,S390X_GHASH	# function 65
+	la	%r1,0($Xi)	# H lies right after Xi in gcm128_context
+	.long	0xb93e0004	# kimd %r0,$inp
+	brc	1,.-4		# pay attention to "partial completion"
+	br	%r14
+.align	32
+.Lsoft_ghash:
+___
+$code.=<<___ if ($flavour =~ /3[12]/);
+	llgfr	$len,$len
+___
+$code.=<<___;
+	stm${g}	%r6,%r14,6*$SIZE_T($sp)
+
+	aghi	$Xi,-1
+	srlg	$len,$len,4
+	lghi	$x78,`0xf<<3`
+	larl	$rem_4bit,rem_4bit
+
+	lg	$Zlo,8+1($Xi)		# Xi
+	lg	$Zhi,0+1($Xi)
+	lghi	$tmp,0
+.Louter:
+	xg	$Zhi,0($inp)		# Xi ^= inp
+	xg	$Zlo,8($inp)
+	xgr	$Zhi,$tmp
+	stg	$Zlo,8+1($Xi)
+	stg	$Zhi,0+1($Xi)
+
+.Lgmult_shortcut:
+	lghi	$tmp,0xf0
+	sllg	$nlo,$Zlo,4
+	srlg	$xi,$Zlo,8		# extract second byte
+	ngr	$nlo,$tmp
+	lgr	$nhi,$Zlo
+	lghi	$cnt,14
+	ngr	$nhi,$tmp
+
+	lg	$Zlo,8($nlo,$Htbl)
+	lg	$Zhi,0($nlo,$Htbl)
+
+	sllg	$nlo,$xi,4
+	sllg	$rem0,$Zlo,3
+	ngr	$nlo,$tmp
+	ngr	$rem0,$x78
+	ngr	$xi,$tmp
+
+	sllg	$tmp,$Zhi,60
+	srlg	$Zlo,$Zlo,4
+	srlg	$Zhi,$Zhi,4
+	xg	$Zlo,8($nhi,$Htbl)
+	xg	$Zhi,0($nhi,$Htbl)
+	lgr	$nhi,$xi
+	sllg	$rem1,$Zlo,3
+	xgr	$Zlo,$tmp
+	ngr	$rem1,$x78
+	sllg	$tmp,$Zhi,60
+	j	.Lghash_inner
+.align	16
+.Lghash_inner:
+	srlg	$Zlo,$Zlo,4
+	srlg	$Zhi,$Zhi,4
+	xg	$Zlo,8($nlo,$Htbl)
+	llgc	$xi,0($cnt,$Xi)
+	xg	$Zhi,0($nlo,$Htbl)
+	sllg	$nlo,$xi,4
+	xg	$Zhi,0($rem0,$rem_4bit)
+	nill	$nlo,0xf0
+	sllg	$rem0,$Zlo,3
+	xgr	$Zlo,$tmp
+	ngr	$rem0,$x78
+	nill	$xi,0xf0
+
+	sllg	$tmp,$Zhi,60
+	srlg	$Zlo,$Zlo,4
+	srlg	$Zhi,$Zhi,4
+	xg	$Zlo,8($nhi,$Htbl)
+	xg	$Zhi,0($nhi,$Htbl)
+	lgr	$nhi,$xi
+	xg	$Zhi,0($rem1,$rem_4bit)
+	sllg	$rem1,$Zlo,3
+	xgr	$Zlo,$tmp
+	ngr	$rem1,$x78
+	sllg	$tmp,$Zhi,60
+	brct	$cnt,.Lghash_inner
+
+	srlg	$Zlo,$Zlo,4
+	srlg	$Zhi,$Zhi,4
+	xg	$Zlo,8($nlo,$Htbl)
+	xg	$Zhi,0($nlo,$Htbl)
+	sllg	$xi,$Zlo,3
+	xg	$Zhi,0($rem0,$rem_4bit)
+	xgr	$Zlo,$tmp
+	ngr	$xi,$x78
+
+	sllg	$tmp,$Zhi,60
+	srlg	$Zlo,$Zlo,4
+	srlg	$Zhi,$Zhi,4
+	xg	$Zlo,8($nhi,$Htbl)
+	xg	$Zhi,0($nhi,$Htbl)
+	xgr	$Zlo,$tmp
+	xg	$Zhi,0($rem1,$rem_4bit)
+
+	lg	$tmp,0($xi,$rem_4bit)
+	la	$inp,16($inp)
+	sllg	$tmp,$tmp,4		# correct last rem_4bit[rem]
+	brctg	$len,.Louter
+
+	xgr	$Zhi,$tmp
+	stg	$Zlo,8+1($Xi)
+	stg	$Zhi,0+1($Xi)
+	lm${g}	%r6,%r14,6*$SIZE_T($sp)
+	br	%r14
+.type	gcm_ghash_4bit,\@function
+.size	gcm_ghash_4bit,(.-gcm_ghash_4bit)
+
+.align	64
+rem_4bit:
+	.long	`0x0000<<12`,0,`0x1C20<<12`,0,`0x3840<<12`,0,`0x2460<<12`,0
+	.long	`0x7080<<12`,0,`0x6CA0<<12`,0,`0x48C0<<12`,0,`0x54E0<<12`,0
+	.long	`0xE100<<12`,0,`0xFD20<<12`,0,`0xD940<<12`,0,`0xC560<<12`,0
+	.long	`0x9180<<12`,0,`0x8DA0<<12`,0,`0xA9C0<<12`,0,`0xB5E0<<12`,0
+.type	rem_4bit,\@object
+.size	rem_4bit,(.-rem_4bit)
+.string	"GHASH for s390x, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-sparcv9.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-sparcv9.pl
new file mode 100644
index 000000000..c4eb3b1f0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-sparcv9.pl
@@ -0,0 +1,581 @@
+#! /usr/bin/env perl
+# Copyright 2010-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# March 2010
+#
+# The module implements "4-bit" GCM GHASH function and underlying
+# single multiplication operation in GF(2^128). "4-bit" means that it
+# uses 256 bytes per-key table [+128 bytes shared table]. Performance
+# results are for streamed GHASH subroutine on UltraSPARC pre-Tx CPU
+# and are expressed in cycles per processed byte, less is better:
+#
+#		gcc 3.3.x	cc 5.2		this assembler
+#
+# 32-bit build	81.4		43.3		12.6	(+546%/+244%)
+# 64-bit build	20.2		21.2		12.6	(+60%/+68%)
+#
+# Here is data collected on UltraSPARC T1 system running Linux:
+#
+#		gcc 4.4.1			this assembler
+#
+# 32-bit build	566				50	(+1000%)
+# 64-bit build	56				50	(+12%)
+#
+# I don't quite understand why difference between 32-bit and 64-bit
+# compiler-generated code is so big. Compilers *were* instructed to
+# generate code for UltraSPARC and should have used 64-bit registers
+# for Z vector (see C code) even in 32-bit build... Oh well, it only
+# means more impressive improvement coefficients for this assembler
+# module;-) Loops are aggressively modulo-scheduled in respect to
+# references to input data and Z.hi updates to achieve 12 cycles
+# timing. To anchor to something else, sha1-sparcv9.pl spends 11.6
+# cycles to process one byte on UltraSPARC pre-Tx CPU and ~24 on T1.
+#
+# October 2012
+#
+# Add VIS3 lookup-table-free implementation using polynomial
+# multiplication xmulx[hi] and extended addition addxc[cc]
+# instructions. 4.52/7.63x improvement on T3/T4 or in absolute
+# terms 7.90/2.14 cycles per byte. On T4 multi-process benchmark
+# saturates at ~15.5x single-process result on 8-core processor,
+# or ~20.5GBps per 2.85GHz socket.
+
+$output=pop;
+open STDOUT,">$output";
+
+$frame="STACK_FRAME";
+$bias="STACK_BIAS";
+
+$Zhi="%o0";	# 64-bit values
+$Zlo="%o1";
+$Thi="%o2";
+$Tlo="%o3";
+$rem="%o4";
+$tmp="%o5";
+
+$nhi="%l0";	# small values and pointers
+$nlo="%l1";
+$xi0="%l2";
+$xi1="%l3";
+$rem_4bit="%l4";
+$remi="%l5";
+$Htblo="%l6";
+$cnt="%l7";
+
+$Xi="%i0";	# input argument block
+$Htbl="%i1";
+$inp="%i2";
+$len="%i3";
+
+$code.=<<___;
+#include "sparc_arch.h"
+
+#ifdef  __arch64__
+.register	%g2,#scratch
+.register	%g3,#scratch
+#endif
+
+.section	".text",#alloc,#execinstr
+
+.align	64
+rem_4bit:
+	.long	`0x0000<<16`,0,`0x1C20<<16`,0,`0x3840<<16`,0,`0x2460<<16`,0
+	.long	`0x7080<<16`,0,`0x6CA0<<16`,0,`0x48C0<<16`,0,`0x54E0<<16`,0
+	.long	`0xE100<<16`,0,`0xFD20<<16`,0,`0xD940<<16`,0,`0xC560<<16`,0
+	.long	`0x9180<<16`,0,`0x8DA0<<16`,0,`0xA9C0<<16`,0,`0xB5E0<<16`,0
+.type	rem_4bit,#object
+.size	rem_4bit,(.-rem_4bit)
+
+.globl	gcm_ghash_4bit
+.align	32
+gcm_ghash_4bit:
+	save	%sp,-$frame,%sp
+	ldub	[$inp+15],$nlo
+	ldub	[$Xi+15],$xi0
+	ldub	[$Xi+14],$xi1
+	add	$len,$inp,$len
+	add	$Htbl,8,$Htblo
+
+1:	call	.+8
+	add	%o7,rem_4bit-1b,$rem_4bit
+
+.Louter:
+	xor	$xi0,$nlo,$nlo
+	and	$nlo,0xf0,$nhi
+	and	$nlo,0x0f,$nlo
+	sll	$nlo,4,$nlo
+	ldx	[$Htblo+$nlo],$Zlo
+	ldx	[$Htbl+$nlo],$Zhi
+
+	ldub	[$inp+14],$nlo
+
+	ldx	[$Htblo+$nhi],$Tlo
+	and	$Zlo,0xf,$remi
+	ldx	[$Htbl+$nhi],$Thi
+	sll	$remi,3,$remi
+	ldx	[$rem_4bit+$remi],$rem
+	srlx	$Zlo,4,$Zlo
+	mov	13,$cnt
+	sllx	$Zhi,60,$tmp
+	xor	$Tlo,$Zlo,$Zlo
+	srlx	$Zhi,4,$Zhi
+	xor	$Zlo,$tmp,$Zlo
+
+	xor	$xi1,$nlo,$nlo
+	and	$Zlo,0xf,$remi
+	and	$nlo,0xf0,$nhi
+	and	$nlo,0x0f,$nlo
+	ba	.Lghash_inner
+	sll	$nlo,4,$nlo
+.align	32
+.Lghash_inner:
+	ldx	[$Htblo+$nlo],$Tlo
+	sll	$remi,3,$remi
+	xor	$Thi,$Zhi,$Zhi
+	ldx	[$Htbl+$nlo],$Thi
+	srlx	$Zlo,4,$Zlo
+	xor	$rem,$Zhi,$Zhi
+	ldx	[$rem_4bit+$remi],$rem
+	sllx	$Zhi,60,$tmp
+	xor	$Tlo,$Zlo,$Zlo
+	ldub	[$inp+$cnt],$nlo
+	srlx	$Zhi,4,$Zhi
+	xor	$Zlo,$tmp,$Zlo
+	ldub	[$Xi+$cnt],$xi1
+	xor	$Thi,$Zhi,$Zhi
+	and	$Zlo,0xf,$remi
+
+	ldx	[$Htblo+$nhi],$Tlo
+	sll	$remi,3,$remi
+	xor	$rem,$Zhi,$Zhi
+	ldx	[$Htbl+$nhi],$Thi
+	srlx	$Zlo,4,$Zlo
+	ldx	[$rem_4bit+$remi],$rem
+	sllx	$Zhi,60,$tmp
+	xor	$xi1,$nlo,$nlo
+	srlx	$Zhi,4,$Zhi
+	and	$nlo,0xf0,$nhi
+	addcc	$cnt,-1,$cnt
+	xor	$Zlo,$tmp,$Zlo
+	and	$nlo,0x0f,$nlo
+	xor	$Tlo,$Zlo,$Zlo
+	sll	$nlo,4,$nlo
+	blu	.Lghash_inner
+	and	$Zlo,0xf,$remi
+
+	ldx	[$Htblo+$nlo],$Tlo
+	sll	$remi,3,$remi
+	xor	$Thi,$Zhi,$Zhi
+	ldx	[$Htbl+$nlo],$Thi
+	srlx	$Zlo,4,$Zlo
+	xor	$rem,$Zhi,$Zhi
+	ldx	[$rem_4bit+$remi],$rem
+	sllx	$Zhi,60,$tmp
+	xor	$Tlo,$Zlo,$Zlo
+	srlx	$Zhi,4,$Zhi
+	xor	$Zlo,$tmp,$Zlo
+	xor	$Thi,$Zhi,$Zhi
+
+	add	$inp,16,$inp
+	cmp	$inp,$len
+	be,pn	SIZE_T_CC,.Ldone
+	and	$Zlo,0xf,$remi
+
+	ldx	[$Htblo+$nhi],$Tlo
+	sll	$remi,3,$remi
+	xor	$rem,$Zhi,$Zhi
+	ldx	[$Htbl+$nhi],$Thi
+	srlx	$Zlo,4,$Zlo
+	ldx	[$rem_4bit+$remi],$rem
+	sllx	$Zhi,60,$tmp
+	xor	$Tlo,$Zlo,$Zlo
+	ldub	[$inp+15],$nlo
+	srlx	$Zhi,4,$Zhi
+	xor	$Zlo,$tmp,$Zlo
+	xor	$Thi,$Zhi,$Zhi
+	stx	$Zlo,[$Xi+8]
+	xor	$rem,$Zhi,$Zhi
+	stx	$Zhi,[$Xi]
+	srl	$Zlo,8,$xi1
+	and	$Zlo,0xff,$xi0
+	ba	.Louter
+	and	$xi1,0xff,$xi1
+.align	32
+.Ldone:
+	ldx	[$Htblo+$nhi],$Tlo
+	sll	$remi,3,$remi
+	xor	$rem,$Zhi,$Zhi
+	ldx	[$Htbl+$nhi],$Thi
+	srlx	$Zlo,4,$Zlo
+	ldx	[$rem_4bit+$remi],$rem
+	sllx	$Zhi,60,$tmp
+	xor	$Tlo,$Zlo,$Zlo
+	srlx	$Zhi,4,$Zhi
+	xor	$Zlo,$tmp,$Zlo
+	xor	$Thi,$Zhi,$Zhi
+	stx	$Zlo,[$Xi+8]
+	xor	$rem,$Zhi,$Zhi
+	stx	$Zhi,[$Xi]
+
+	ret
+	restore
+.type	gcm_ghash_4bit,#function
+.size	gcm_ghash_4bit,(.-gcm_ghash_4bit)
+___
+
+undef $inp;
+undef $len;
+
+$code.=<<___;
+.globl	gcm_gmult_4bit
+.align	32
+gcm_gmult_4bit:
+	save	%sp,-$frame,%sp
+	ldub	[$Xi+15],$nlo
+	add	$Htbl,8,$Htblo
+
+1:	call	.+8
+	add	%o7,rem_4bit-1b,$rem_4bit
+
+	and	$nlo,0xf0,$nhi
+	and	$nlo,0x0f,$nlo
+	sll	$nlo,4,$nlo
+	ldx	[$Htblo+$nlo],$Zlo
+	ldx	[$Htbl+$nlo],$Zhi
+
+	ldub	[$Xi+14],$nlo
+
+	ldx	[$Htblo+$nhi],$Tlo
+	and	$Zlo,0xf,$remi
+	ldx	[$Htbl+$nhi],$Thi
+	sll	$remi,3,$remi
+	ldx	[$rem_4bit+$remi],$rem
+	srlx	$Zlo,4,$Zlo
+	mov	13,$cnt
+	sllx	$Zhi,60,$tmp
+	xor	$Tlo,$Zlo,$Zlo
+	srlx	$Zhi,4,$Zhi
+	xor	$Zlo,$tmp,$Zlo
+
+	and	$Zlo,0xf,$remi
+	and	$nlo,0xf0,$nhi
+	and	$nlo,0x0f,$nlo
+	ba	.Lgmult_inner
+	sll	$nlo,4,$nlo
+.align	32
+.Lgmult_inner:
+	ldx	[$Htblo+$nlo],$Tlo
+	sll	$remi,3,$remi
+	xor	$Thi,$Zhi,$Zhi
+	ldx	[$Htbl+$nlo],$Thi
+	srlx	$Zlo,4,$Zlo
+	xor	$rem,$Zhi,$Zhi
+	ldx	[$rem_4bit+$remi],$rem
+	sllx	$Zhi,60,$tmp
+	xor	$Tlo,$Zlo,$Zlo
+	ldub	[$Xi+$cnt],$nlo
+	srlx	$Zhi,4,$Zhi
+	xor	$Zlo,$tmp,$Zlo
+	xor	$Thi,$Zhi,$Zhi
+	and	$Zlo,0xf,$remi
+
+	ldx	[$Htblo+$nhi],$Tlo
+	sll	$remi,3,$remi
+	xor	$rem,$Zhi,$Zhi
+	ldx	[$Htbl+$nhi],$Thi
+	srlx	$Zlo,4,$Zlo
+	ldx	[$rem_4bit+$remi],$rem
+	sllx	$Zhi,60,$tmp
+	srlx	$Zhi,4,$Zhi
+	and	$nlo,0xf0,$nhi
+	addcc	$cnt,-1,$cnt
+	xor	$Zlo,$tmp,$Zlo
+	and	$nlo,0x0f,$nlo
+	xor	$Tlo,$Zlo,$Zlo
+	sll	$nlo,4,$nlo
+	blu	.Lgmult_inner
+	and	$Zlo,0xf,$remi
+
+	ldx	[$Htblo+$nlo],$Tlo
+	sll	$remi,3,$remi
+	xor	$Thi,$Zhi,$Zhi
+	ldx	[$Htbl+$nlo],$Thi
+	srlx	$Zlo,4,$Zlo
+	xor	$rem,$Zhi,$Zhi
+	ldx	[$rem_4bit+$remi],$rem
+	sllx	$Zhi,60,$tmp
+	xor	$Tlo,$Zlo,$Zlo
+	srlx	$Zhi,4,$Zhi
+	xor	$Zlo,$tmp,$Zlo
+	xor	$Thi,$Zhi,$Zhi
+	and	$Zlo,0xf,$remi
+
+	ldx	[$Htblo+$nhi],$Tlo
+	sll	$remi,3,$remi
+	xor	$rem,$Zhi,$Zhi
+	ldx	[$Htbl+$nhi],$Thi
+	srlx	$Zlo,4,$Zlo
+	ldx	[$rem_4bit+$remi],$rem
+	sllx	$Zhi,60,$tmp
+	xor	$Tlo,$Zlo,$Zlo
+	srlx	$Zhi,4,$Zhi
+	xor	$Zlo,$tmp,$Zlo
+	xor	$Thi,$Zhi,$Zhi
+	stx	$Zlo,[$Xi+8]
+	xor	$rem,$Zhi,$Zhi
+	stx	$Zhi,[$Xi]
+
+	ret
+	restore
+.type	gcm_gmult_4bit,#function
+.size	gcm_gmult_4bit,(.-gcm_gmult_4bit)
+___
+
+{{{
+# Straightforward 128x128-bit multiplication using Karatsuba algorithm
+# followed by pair of 64-bit reductions [with a shortcut in first one,
+# which allowed to break dependency between reductions and remove one
+# multiplication from critical path]. While it might be suboptimal
+# with regard to sheer number of multiplications, other methods [such
+# as aggregate reduction] would require more 64-bit registers, which
+# we don't have in 32-bit application context.
+
+($Xip,$Htable,$inp,$len)=map("%i$_",(0..3));
+
+($Hhl,$Hlo,$Hhi,$Xlo,$Xhi,$xE1,$sqr, $C0,$C1,$C2,$C3,$V)=
+	(map("%o$_",(0..5,7)),map("%g$_",(1..5)));
+
+($shl,$shr)=map("%l$_",(0..7));
+
+# For details regarding "twisted H" see ghash-x86.pl.
+$code.=<<___;
+.globl	gcm_init_vis3
+.align	32
+gcm_init_vis3:
+	save	%sp,-$frame,%sp
+
+	ldx	[%i1+0],$Hhi
+	ldx	[%i1+8],$Hlo
+	mov	0xE1,$Xhi
+	mov	1,$Xlo
+	sllx	$Xhi,57,$Xhi
+	srax	$Hhi,63,$C0		! broadcast carry
+	addcc	$Hlo,$Hlo,$Hlo		! H<<=1
+	addxc	$Hhi,$Hhi,$Hhi
+	and	$C0,$Xlo,$Xlo
+	and	$C0,$Xhi,$Xhi
+	xor	$Xlo,$Hlo,$Hlo
+	xor	$Xhi,$Hhi,$Hhi
+	stx	$Hlo,[%i0+8]		! save twisted H
+	stx	$Hhi,[%i0+0]
+
+	sethi	%hi(0xA0406080),$V
+	sethi	%hi(0x20C0E000),%l0
+	or	$V,%lo(0xA0406080),$V
+	or	%l0,%lo(0x20C0E000),%l0
+	sllx	$V,32,$V
+	or	%l0,$V,$V		! (0xE0·i)&0xff=0xA040608020C0E000
+	stx	$V,[%i0+16]
+
+	ret
+	restore
+.type	gcm_init_vis3,#function
+.size	gcm_init_vis3,.-gcm_init_vis3
+
+.globl	gcm_gmult_vis3
+.align	32
+gcm_gmult_vis3:
+	save	%sp,-$frame,%sp
+
+	ldx	[$Xip+8],$Xlo		! load Xi
+	ldx	[$Xip+0],$Xhi
+	ldx	[$Htable+8],$Hlo	! load twisted H
+	ldx	[$Htable+0],$Hhi
+
+	mov	0xE1,%l7
+	sllx	%l7,57,$xE1		! 57 is not a typo
+	ldx	[$Htable+16],$V		! (0xE0·i)&0xff=0xA040608020C0E000
+
+	xor	$Hhi,$Hlo,$Hhl		! Karatsuba pre-processing
+	xmulx	$Xlo,$Hlo,$C0
+	xor	$Xlo,$Xhi,$C2		! Karatsuba pre-processing
+	xmulx	$C2,$Hhl,$C1
+	xmulxhi	$Xlo,$Hlo,$Xlo
+	xmulxhi	$C2,$Hhl,$C2
+	xmulxhi	$Xhi,$Hhi,$C3
+	xmulx	$Xhi,$Hhi,$Xhi
+
+	sll	$C0,3,$sqr
+	srlx	$V,$sqr,$sqr		! ·0xE0 [implicit &(7<<3)]
+	xor	$C0,$sqr,$sqr
+	sllx	$sqr,57,$sqr		! ($C0·0xE1)<<1<<56 [implicit &0x7f]
+
+	xor	$C0,$C1,$C1		! Karatsuba post-processing
+	xor	$Xlo,$C2,$C2
+	 xor	$sqr,$Xlo,$Xlo		! real destination is $C1
+	xor	$C3,$C2,$C2
+	xor	$Xlo,$C1,$C1
+	xor	$Xhi,$C2,$C2
+	xor	$Xhi,$C1,$C1
+
+	xmulxhi	$C0,$xE1,$Xlo		! ·0xE1<<1<<56
+	 xor	$C0,$C2,$C2
+	xmulx	$C1,$xE1,$C0
+	 xor	$C1,$C3,$C3
+	xmulxhi	$C1,$xE1,$C1
+
+	xor	$Xlo,$C2,$C2
+	xor	$C0,$C2,$C2
+	xor	$C1,$C3,$C3
+
+	stx	$C2,[$Xip+8]		! save Xi
+	stx	$C3,[$Xip+0]
+
+	ret
+	restore
+.type	gcm_gmult_vis3,#function
+.size	gcm_gmult_vis3,.-gcm_gmult_vis3
+
+.globl	gcm_ghash_vis3
+.align	32
+gcm_ghash_vis3:
+	save	%sp,-$frame,%sp
+	nop
+	srln	$len,0,$len		! needed on v8+, "nop" on v9
+
+	ldx	[$Xip+8],$C2		! load Xi
+	ldx	[$Xip+0],$C3
+	ldx	[$Htable+8],$Hlo	! load twisted H
+	ldx	[$Htable+0],$Hhi
+
+	mov	0xE1,%l7
+	sllx	%l7,57,$xE1		! 57 is not a typo
+	ldx	[$Htable+16],$V		! (0xE0·i)&0xff=0xA040608020C0E000
+
+	and	$inp,7,$shl
+	andn	$inp,7,$inp
+	sll	$shl,3,$shl
+	prefetch [$inp+63], 20
+	sub	%g0,$shl,$shr
+
+	xor	$Hhi,$Hlo,$Hhl		! Karatsuba pre-processing
+.Loop:
+	ldx	[$inp+8],$Xlo
+	brz,pt	$shl,1f
+	ldx	[$inp+0],$Xhi
+
+	ldx	[$inp+16],$C1		! align data
+	srlx	$Xlo,$shr,$C0
+	sllx	$Xlo,$shl,$Xlo
+	sllx	$Xhi,$shl,$Xhi
+	srlx	$C1,$shr,$C1
+	or	$C0,$Xhi,$Xhi
+	or	$C1,$Xlo,$Xlo
+1:
+	add	$inp,16,$inp
+	sub	$len,16,$len
+	xor	$C2,$Xlo,$Xlo
+	xor	$C3,$Xhi,$Xhi
+	prefetch [$inp+63], 20
+
+	xmulx	$Xlo,$Hlo,$C0
+	xor	$Xlo,$Xhi,$C2		! Karatsuba pre-processing
+	xmulx	$C2,$Hhl,$C1
+	xmulxhi	$Xlo,$Hlo,$Xlo
+	xmulxhi	$C2,$Hhl,$C2
+	xmulxhi	$Xhi,$Hhi,$C3
+	xmulx	$Xhi,$Hhi,$Xhi
+
+	sll	$C0,3,$sqr
+	srlx	$V,$sqr,$sqr		! ·0xE0 [implicit &(7<<3)]
+	xor	$C0,$sqr,$sqr
+	sllx	$sqr,57,$sqr		! ($C0·0xE1)<<1<<56 [implicit &0x7f]
+
+	xor	$C0,$C1,$C1		! Karatsuba post-processing
+	xor	$Xlo,$C2,$C2
+	 xor	$sqr,$Xlo,$Xlo		! real destination is $C1
+	xor	$C3,$C2,$C2
+	xor	$Xlo,$C1,$C1
+	xor	$Xhi,$C2,$C2
+	xor	$Xhi,$C1,$C1
+
+	xmulxhi	$C0,$xE1,$Xlo		! ·0xE1<<1<<56
+	 xor	$C0,$C2,$C2
+	xmulx	$C1,$xE1,$C0
+	 xor	$C1,$C3,$C3
+	xmulxhi	$C1,$xE1,$C1
+
+	xor	$Xlo,$C2,$C2
+	xor	$C0,$C2,$C2
+	brnz,pt	$len,.Loop
+	xor	$C1,$C3,$C3
+
+	stx	$C2,[$Xip+8]		! save Xi
+	stx	$C3,[$Xip+0]
+
+	ret
+	restore
+.type	gcm_ghash_vis3,#function
+.size	gcm_ghash_vis3,.-gcm_ghash_vis3
+___
+}}}
+$code.=<<___;
+.asciz	"GHASH for SPARCv9/VIS3, CRYPTOGAMS by <appro\@openssl.org>"
+.align	4
+___
+
+
+# Purpose of these subroutines is to explicitly encode VIS instructions,
+# so that one can compile the module without having to specify VIS
+# extensions on compiler command line, e.g. -xarch=v9 vs. -xarch=v9a.
+# Idea is to reserve for option to produce "universal" binary and let
+# programmer detect if current CPU is VIS capable at run-time.
+sub unvis3 {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my %bias = ( "g" => 0, "o" => 8, "l" => 16, "i" => 24 );
+my ($ref,$opf);
+my %visopf = (	"addxc"		=> 0x011,
+		"addxccc"	=> 0x013,
+		"xmulx"		=> 0x115,
+		"xmulxhi"	=> 0x116	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rd";
+
+    if ($opf=$visopf{$mnemonic}) {
+	foreach ($rs1,$rs2,$rd) {
+	    return $ref if (!/%([goli])([0-9])/);
+	    $_=$bias{$1}+$2;
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			0x81b00000|$rd<<25|$rs1<<14|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	s/\b(xmulx[hi]*|addxc[c]{0,2})\s+(%[goli][0-7]),\s*(%[goli][0-7]),\s*(%[goli][0-7])/
+		&unvis3($1,$2,$3,$4)
+	 /ge;
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-x86.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-x86.pl
new file mode 100644
index 000000000..bcbe6e399
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-x86.pl
@@ -0,0 +1,1404 @@
+#! /usr/bin/env perl
+# Copyright 2010-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# March, May, June 2010
+#
+# The module implements "4-bit" GCM GHASH function and underlying
+# single multiplication operation in GF(2^128). "4-bit" means that it
+# uses 256 bytes per-key table [+64/128 bytes fixed table]. It has two
+# code paths: vanilla x86 and vanilla SSE. Former will be executed on
+# 486 and Pentium, latter on all others. SSE GHASH features so called
+# "528B" variant of "4-bit" method utilizing additional 256+16 bytes
+# of per-key storage [+512 bytes shared table]. Performance results
+# are for streamed GHASH subroutine and are expressed in cycles per
+# processed byte, less is better:
+#
+#		gcc 2.95.3(*)	SSE assembler	x86 assembler
+#
+# Pentium	105/111(**)	-		50
+# PIII		68 /75		12.2		24
+# P4		125/125		17.8		84(***)
+# Opteron	66 /70		10.1		30
+# Core2		54 /67		8.4		18
+# Atom		105/105		16.8		53
+# VIA Nano	69 /71		13.0		27
+#
+# (*)	gcc 3.4.x was observed to generate few percent slower code,
+#	which is one of reasons why 2.95.3 results were chosen,
+#	another reason is lack of 3.4.x results for older CPUs;
+#	comparison with SSE results is not completely fair, because C
+#	results are for vanilla "256B" implementation, while
+#	assembler results are for "528B";-)
+# (**)	second number is result for code compiled with -fPIC flag,
+#	which is actually more relevant, because assembler code is
+#	position-independent;
+# (***)	see comment in non-MMX routine for further details;
+#
+# To summarize, it's >2-5 times faster than gcc-generated code. To
+# anchor it to something else SHA1 assembler processes one byte in
+# ~7 cycles on contemporary x86 cores. As for choice of MMX/SSE
+# in particular, see comment at the end of the file...
+
+# May 2010
+#
+# Add PCLMULQDQ version performing at 2.10 cycles per processed byte.
+# The question is how close is it to theoretical limit? The pclmulqdq
+# instruction latency appears to be 14 cycles and there can't be more
+# than 2 of them executing at any given time. This means that single
+# Karatsuba multiplication would take 28 cycles *plus* few cycles for
+# pre- and post-processing. Then multiplication has to be followed by
+# modulo-reduction. Given that aggregated reduction method [see
+# "Carry-less Multiplication and Its Usage for Computing the GCM Mode"
+# white paper by Intel] allows you to perform reduction only once in
+# a while we can assume that asymptotic performance can be estimated
+# as (28+Tmod/Naggr)/16, where Tmod is time to perform reduction
+# and Naggr is the aggregation factor.
+#
+# Before we proceed to this implementation let's have closer look at
+# the best-performing code suggested by Intel in their white paper.
+# By tracing inter-register dependencies Tmod is estimated as ~19
+# cycles and Naggr chosen by Intel is 4, resulting in 2.05 cycles per
+# processed byte. As implied, this is quite optimistic estimate,
+# because it does not account for Karatsuba pre- and post-processing,
+# which for a single multiplication is ~5 cycles. Unfortunately Intel
+# does not provide performance data for GHASH alone. But benchmarking
+# AES_GCM_encrypt ripped out of Fig. 15 of the white paper with aadt
+# alone resulted in 2.46 cycles per byte of out 16KB buffer. Note that
+# the result accounts even for pre-computing of degrees of the hash
+# key H, but its portion is negligible at 16KB buffer size.
+#
+# Moving on to the implementation in question. Tmod is estimated as
+# ~13 cycles and Naggr is 2, giving asymptotic performance of ...
+# 2.16. How is it possible that measured performance is better than
+# optimistic theoretical estimate? There is one thing Intel failed
+# to recognize. By serializing GHASH with CTR in same subroutine
+# former's performance is really limited to above (Tmul + Tmod/Naggr)
+# equation. But if GHASH procedure is detached, the modulo-reduction
+# can be interleaved with Naggr-1 multiplications at instruction level
+# and under ideal conditions even disappear from the equation. So that
+# optimistic theoretical estimate for this implementation is ...
+# 28/16=1.75, and not 2.16. Well, it's probably way too optimistic,
+# at least for such small Naggr. I'd argue that (28+Tproc/Naggr),
+# where Tproc is time required for Karatsuba pre- and post-processing,
+# is more realistic estimate. In this case it gives ... 1.91 cycles.
+# Or in other words, depending on how well we can interleave reduction
+# and one of the two multiplications the performance should be between
+# 1.91 and 2.16. As already mentioned, this implementation processes
+# one byte out of 8KB buffer in 2.10 cycles, while x86_64 counterpart
+# - in 2.02. x86_64 performance is better, because larger register
+# bank allows to interleave reduction and multiplication better.
+#
+# Does it make sense to increase Naggr? To start with it's virtually
+# impossible in 32-bit mode, because of limited register bank
+# capacity. Otherwise improvement has to be weighed against slower
+# setup, as well as code size and complexity increase. As even
+# optimistic estimate doesn't promise 30% performance improvement,
+# there are currently no plans to increase Naggr.
+#
+# Special thanks to David Woodhouse for providing access to a
+# Westmere-based system on behalf of Intel Open Source Technology Centre.
+
+# January 2010
+#
+# Tweaked to optimize transitions between integer and FP operations
+# on same XMM register, PCLMULQDQ subroutine was measured to process
+# one byte in 2.07 cycles on Sandy Bridge, and in 2.12 - on Westmere.
+# The minor regression on Westmere is outweighed by ~15% improvement
+# on Sandy Bridge. Strangely enough attempt to modify 64-bit code in
+# similar manner resulted in almost 20% degradation on Sandy Bridge,
+# where original 64-bit code processes one byte in 1.95 cycles.
+
+#####################################################################
+# For reference, AMD Bulldozer processes one byte in 1.98 cycles in
+# 32-bit mode and 1.89 in 64-bit.
+
+# February 2013
+#
+# Overhaul: aggregate Karatsuba post-processing, improve ILP in
+# reduction_alg9. Resulting performance is 1.96 cycles per byte on
+# Westmere, 1.95 - on Sandy/Ivy Bridge, 1.76 - on Bulldozer.
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output=pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0],$x86only = $ARGV[$#ARGV] eq "386");
+
+$sse2=0;
+for (@ARGV) { $sse2=1 if (/-DOPENSSL_IA32_SSE2/); }
+
+($Zhh,$Zhl,$Zlh,$Zll) = ("ebp","edx","ecx","ebx");
+$inp  = "edi";
+$Htbl = "esi";
+
+$unroll = 0;	# Affects x86 loop. Folded loop performs ~7% worse
+		# than unrolled, which has to be weighted against
+		# 2.5x x86-specific code size reduction.
+
+sub x86_loop {
+    my $off = shift;
+    my $rem = "eax";
+
+	&mov	($Zhh,&DWP(4,$Htbl,$Zll));
+	&mov	($Zhl,&DWP(0,$Htbl,$Zll));
+	&mov	($Zlh,&DWP(12,$Htbl,$Zll));
+	&mov	($Zll,&DWP(8,$Htbl,$Zll));
+	&xor	($rem,$rem);	# avoid partial register stalls on PIII
+
+	# shrd practically kills P4, 2.5x deterioration, but P4 has
+	# MMX code-path to execute. shrd runs tad faster [than twice
+	# the shifts, move's and or's] on pre-MMX Pentium (as well as
+	# PIII and Core2), *but* minimizes code size, spares register
+	# and thus allows to fold the loop...
+	if (!$unroll) {
+	my $cnt = $inp;
+	&mov	($cnt,15);
+	&jmp	(&label("x86_loop"));
+	&set_label("x86_loop",16);
+	    for($i=1;$i<=2;$i++) {
+		&mov	(&LB($rem),&LB($Zll));
+		&shrd	($Zll,$Zlh,4);
+		&and	(&LB($rem),0xf);
+		&shrd	($Zlh,$Zhl,4);
+		&shrd	($Zhl,$Zhh,4);
+		&shr	($Zhh,4);
+		&xor	($Zhh,&DWP($off+16,"esp",$rem,4));
+
+		&mov	(&LB($rem),&BP($off,"esp",$cnt));
+		if ($i&1) {
+			&and	(&LB($rem),0xf0);
+		} else {
+			&shl	(&LB($rem),4);
+		}
+
+		&xor	($Zll,&DWP(8,$Htbl,$rem));
+		&xor	($Zlh,&DWP(12,$Htbl,$rem));
+		&xor	($Zhl,&DWP(0,$Htbl,$rem));
+		&xor	($Zhh,&DWP(4,$Htbl,$rem));
+
+		if ($i&1) {
+			&dec	($cnt);
+			&js	(&label("x86_break"));
+		} else {
+			&jmp	(&label("x86_loop"));
+		}
+	    }
+	&set_label("x86_break",16);
+	} else {
+	    for($i=1;$i<32;$i++) {
+		&comment($i);
+		&mov	(&LB($rem),&LB($Zll));
+		&shrd	($Zll,$Zlh,4);
+		&and	(&LB($rem),0xf);
+		&shrd	($Zlh,$Zhl,4);
+		&shrd	($Zhl,$Zhh,4);
+		&shr	($Zhh,4);
+		&xor	($Zhh,&DWP($off+16,"esp",$rem,4));
+
+		if ($i&1) {
+			&mov	(&LB($rem),&BP($off+15-($i>>1),"esp"));
+			&and	(&LB($rem),0xf0);
+		} else {
+			&mov	(&LB($rem),&BP($off+15-($i>>1),"esp"));
+			&shl	(&LB($rem),4);
+		}
+
+		&xor	($Zll,&DWP(8,$Htbl,$rem));
+		&xor	($Zlh,&DWP(12,$Htbl,$rem));
+		&xor	($Zhl,&DWP(0,$Htbl,$rem));
+		&xor	($Zhh,&DWP(4,$Htbl,$rem));
+	    }
+	}
+	&bswap	($Zll);
+	&bswap	($Zlh);
+	&bswap	($Zhl);
+	if (!$x86only) {
+		&bswap	($Zhh);
+	} else {
+		&mov	("eax",$Zhh);
+		&bswap	("eax");
+		&mov	($Zhh,"eax");
+	}
+}
+
+if ($unroll) {
+    &function_begin_B("_x86_gmult_4bit_inner");
+	&x86_loop(4);
+	&ret	();
+    &function_end_B("_x86_gmult_4bit_inner");
+}
+
+sub deposit_rem_4bit {
+    my $bias = shift;
+
+	&mov	(&DWP($bias+0, "esp"),0x0000<<16);
+	&mov	(&DWP($bias+4, "esp"),0x1C20<<16);
+	&mov	(&DWP($bias+8, "esp"),0x3840<<16);
+	&mov	(&DWP($bias+12,"esp"),0x2460<<16);
+	&mov	(&DWP($bias+16,"esp"),0x7080<<16);
+	&mov	(&DWP($bias+20,"esp"),0x6CA0<<16);
+	&mov	(&DWP($bias+24,"esp"),0x48C0<<16);
+	&mov	(&DWP($bias+28,"esp"),0x54E0<<16);
+	&mov	(&DWP($bias+32,"esp"),0xE100<<16);
+	&mov	(&DWP($bias+36,"esp"),0xFD20<<16);
+	&mov	(&DWP($bias+40,"esp"),0xD940<<16);
+	&mov	(&DWP($bias+44,"esp"),0xC560<<16);
+	&mov	(&DWP($bias+48,"esp"),0x9180<<16);
+	&mov	(&DWP($bias+52,"esp"),0x8DA0<<16);
+	&mov	(&DWP($bias+56,"esp"),0xA9C0<<16);
+	&mov	(&DWP($bias+60,"esp"),0xB5E0<<16);
+}
+
+$suffix = $x86only ? "" : "_x86";
+
+&function_begin("gcm_gmult_4bit".$suffix);
+	&stack_push(16+4+1);			# +1 for stack alignment
+	&mov	($inp,&wparam(0));		# load Xi
+	&mov	($Htbl,&wparam(1));		# load Htable
+
+	&mov	($Zhh,&DWP(0,$inp));		# load Xi[16]
+	&mov	($Zhl,&DWP(4,$inp));
+	&mov	($Zlh,&DWP(8,$inp));
+	&mov	($Zll,&DWP(12,$inp));
+
+	&deposit_rem_4bit(16);
+
+	&mov	(&DWP(0,"esp"),$Zhh);		# copy Xi[16] on stack
+	&mov	(&DWP(4,"esp"),$Zhl);
+	&mov	(&DWP(8,"esp"),$Zlh);
+	&mov	(&DWP(12,"esp"),$Zll);
+	&shr	($Zll,20);
+	&and	($Zll,0xf0);
+
+	if ($unroll) {
+		&call	("_x86_gmult_4bit_inner");
+	} else {
+		&x86_loop(0);
+		&mov	($inp,&wparam(0));
+	}
+
+	&mov	(&DWP(12,$inp),$Zll);
+	&mov	(&DWP(8,$inp),$Zlh);
+	&mov	(&DWP(4,$inp),$Zhl);
+	&mov	(&DWP(0,$inp),$Zhh);
+	&stack_pop(16+4+1);
+&function_end("gcm_gmult_4bit".$suffix);
+
+&function_begin("gcm_ghash_4bit".$suffix);
+	&stack_push(16+4+1);			# +1 for 64-bit alignment
+	&mov	($Zll,&wparam(0));		# load Xi
+	&mov	($Htbl,&wparam(1));		# load Htable
+	&mov	($inp,&wparam(2));		# load in
+	&mov	("ecx",&wparam(3));		# load len
+	&add	("ecx",$inp);
+	&mov	(&wparam(3),"ecx");
+
+	&mov	($Zhh,&DWP(0,$Zll));		# load Xi[16]
+	&mov	($Zhl,&DWP(4,$Zll));
+	&mov	($Zlh,&DWP(8,$Zll));
+	&mov	($Zll,&DWP(12,$Zll));
+
+	&deposit_rem_4bit(16);
+
+    &set_label("x86_outer_loop",16);
+	&xor	($Zll,&DWP(12,$inp));		# xor with input
+	&xor	($Zlh,&DWP(8,$inp));
+	&xor	($Zhl,&DWP(4,$inp));
+	&xor	($Zhh,&DWP(0,$inp));
+	&mov	(&DWP(12,"esp"),$Zll);		# dump it on stack
+	&mov	(&DWP(8,"esp"),$Zlh);
+	&mov	(&DWP(4,"esp"),$Zhl);
+	&mov	(&DWP(0,"esp"),$Zhh);
+
+	&shr	($Zll,20);
+	&and	($Zll,0xf0);
+
+	if ($unroll) {
+		&call	("_x86_gmult_4bit_inner");
+	} else {
+		&x86_loop(0);
+		&mov	($inp,&wparam(2));
+	}
+	&lea	($inp,&DWP(16,$inp));
+	&cmp	($inp,&wparam(3));
+	&mov	(&wparam(2),$inp)	if (!$unroll);
+	&jb	(&label("x86_outer_loop"));
+
+	&mov	($inp,&wparam(0));	# load Xi
+	&mov	(&DWP(12,$inp),$Zll);
+	&mov	(&DWP(8,$inp),$Zlh);
+	&mov	(&DWP(4,$inp),$Zhl);
+	&mov	(&DWP(0,$inp),$Zhh);
+	&stack_pop(16+4+1);
+&function_end("gcm_ghash_4bit".$suffix);
+
+if (!$x86only) {{{
+
+&static_label("rem_4bit");
+
+if (!$sse2) {{	# pure-MMX "May" version...
+
+$S=12;		# shift factor for rem_4bit
+
+&function_begin_B("_mmx_gmult_4bit_inner");
+# MMX version performs 3.5 times better on P4 (see comment in non-MMX
+# routine for further details), 100% better on Opteron, ~70% better
+# on Core2 and PIII... In other words effort is considered to be well
+# spent... Since initial release the loop was unrolled in order to
+# "liberate" register previously used as loop counter. Instead it's
+# used to optimize critical path in 'Z.hi ^= rem_4bit[Z.lo&0xf]'.
+# The path involves move of Z.lo from MMX to integer register,
+# effective address calculation and finally merge of value to Z.hi.
+# Reference to rem_4bit is scheduled so late that I had to >>4
+# rem_4bit elements. This resulted in 20-45% procent improvement
+# on contemporary µ-archs.
+{
+    my $cnt;
+    my $rem_4bit = "eax";
+    my @rem = ($Zhh,$Zll);
+    my $nhi = $Zhl;
+    my $nlo = $Zlh;
+
+    my ($Zlo,$Zhi) = ("mm0","mm1");
+    my $tmp = "mm2";
+
+	&xor	($nlo,$nlo);	# avoid partial register stalls on PIII
+	&mov	($nhi,$Zll);
+	&mov	(&LB($nlo),&LB($nhi));
+	&shl	(&LB($nlo),4);
+	&and	($nhi,0xf0);
+	&movq	($Zlo,&QWP(8,$Htbl,$nlo));
+	&movq	($Zhi,&QWP(0,$Htbl,$nlo));
+	&movd	($rem[0],$Zlo);
+
+	for ($cnt=28;$cnt>=-2;$cnt--) {
+	    my $odd = $cnt&1;
+	    my $nix = $odd ? $nlo : $nhi;
+
+		&shl	(&LB($nlo),4)			if ($odd);
+		&psrlq	($Zlo,4);
+		&movq	($tmp,$Zhi);
+		&psrlq	($Zhi,4);
+		&pxor	($Zlo,&QWP(8,$Htbl,$nix));
+		&mov	(&LB($nlo),&BP($cnt/2,$inp))	if (!$odd && $cnt>=0);
+		&psllq	($tmp,60);
+		&and	($nhi,0xf0)			if ($odd);
+		&pxor	($Zhi,&QWP(0,$rem_4bit,$rem[1],8)) if ($cnt<28);
+		&and	($rem[0],0xf);
+		&pxor	($Zhi,&QWP(0,$Htbl,$nix));
+		&mov	($nhi,$nlo)			if (!$odd && $cnt>=0);
+		&movd	($rem[1],$Zlo);
+		&pxor	($Zlo,$tmp);
+
+		push	(@rem,shift(@rem));		# "rotate" registers
+	}
+
+	&mov	($inp,&DWP(4,$rem_4bit,$rem[1],8));	# last rem_4bit[rem]
+
+	&psrlq	($Zlo,32);	# lower part of Zlo is already there
+	&movd	($Zhl,$Zhi);
+	&psrlq	($Zhi,32);
+	&movd	($Zlh,$Zlo);
+	&movd	($Zhh,$Zhi);
+	&shl	($inp,4);	# compensate for rem_4bit[i] being >>4
+
+	&bswap	($Zll);
+	&bswap	($Zhl);
+	&bswap	($Zlh);
+	&xor	($Zhh,$inp);
+	&bswap	($Zhh);
+
+	&ret	();
+}
+&function_end_B("_mmx_gmult_4bit_inner");
+
+&function_begin("gcm_gmult_4bit_mmx");
+	&mov	($inp,&wparam(0));	# load Xi
+	&mov	($Htbl,&wparam(1));	# load Htable
+
+	&call	(&label("pic_point"));
+	&set_label("pic_point");
+	&blindpop("eax");
+	&lea	("eax",&DWP(&label("rem_4bit")."-".&label("pic_point"),"eax"));
+
+	&movz	($Zll,&BP(15,$inp));
+
+	&call	("_mmx_gmult_4bit_inner");
+
+	&mov	($inp,&wparam(0));	# load Xi
+	&emms	();
+	&mov	(&DWP(12,$inp),$Zll);
+	&mov	(&DWP(4,$inp),$Zhl);
+	&mov	(&DWP(8,$inp),$Zlh);
+	&mov	(&DWP(0,$inp),$Zhh);
+&function_end("gcm_gmult_4bit_mmx");
+
+# Streamed version performs 20% better on P4, 7% on Opteron,
+# 10% on Core2 and PIII...
+&function_begin("gcm_ghash_4bit_mmx");
+	&mov	($Zhh,&wparam(0));	# load Xi
+	&mov	($Htbl,&wparam(1));	# load Htable
+	&mov	($inp,&wparam(2));	# load in
+	&mov	($Zlh,&wparam(3));	# load len
+
+	&call	(&label("pic_point"));
+	&set_label("pic_point");
+	&blindpop("eax");
+	&lea	("eax",&DWP(&label("rem_4bit")."-".&label("pic_point"),"eax"));
+
+	&add	($Zlh,$inp);
+	&mov	(&wparam(3),$Zlh);	# len to point at the end of input
+	&stack_push(4+1);		# +1 for stack alignment
+
+	&mov	($Zll,&DWP(12,$Zhh));	# load Xi[16]
+	&mov	($Zhl,&DWP(4,$Zhh));
+	&mov	($Zlh,&DWP(8,$Zhh));
+	&mov	($Zhh,&DWP(0,$Zhh));
+	&jmp	(&label("mmx_outer_loop"));
+
+    &set_label("mmx_outer_loop",16);
+	&xor	($Zll,&DWP(12,$inp));
+	&xor	($Zhl,&DWP(4,$inp));
+	&xor	($Zlh,&DWP(8,$inp));
+	&xor	($Zhh,&DWP(0,$inp));
+	&mov	(&wparam(2),$inp);
+	&mov	(&DWP(12,"esp"),$Zll);
+	&mov	(&DWP(4,"esp"),$Zhl);
+	&mov	(&DWP(8,"esp"),$Zlh);
+	&mov	(&DWP(0,"esp"),$Zhh);
+
+	&mov	($inp,"esp");
+	&shr	($Zll,24);
+
+	&call	("_mmx_gmult_4bit_inner");
+
+	&mov	($inp,&wparam(2));
+	&lea	($inp,&DWP(16,$inp));
+	&cmp	($inp,&wparam(3));
+	&jb	(&label("mmx_outer_loop"));
+
+	&mov	($inp,&wparam(0));	# load Xi
+	&emms	();
+	&mov	(&DWP(12,$inp),$Zll);
+	&mov	(&DWP(4,$inp),$Zhl);
+	&mov	(&DWP(8,$inp),$Zlh);
+	&mov	(&DWP(0,$inp),$Zhh);
+
+	&stack_pop(4+1);
+&function_end("gcm_ghash_4bit_mmx");
+
+}} else {{	# "June" MMX version...
+		# ... has slower "April" gcm_gmult_4bit_mmx with folded
+		# loop. This is done to conserve code size...
+$S=16;		# shift factor for rem_4bit
+
+sub mmx_loop() {
+# MMX version performs 2.8 times better on P4 (see comment in non-MMX
+# routine for further details), 40% better on Opteron and Core2, 50%
+# better on PIII... In other words effort is considered to be well
+# spent...
+    my $inp = shift;
+    my $rem_4bit = shift;
+    my $cnt = $Zhh;
+    my $nhi = $Zhl;
+    my $nlo = $Zlh;
+    my $rem = $Zll;
+
+    my ($Zlo,$Zhi) = ("mm0","mm1");
+    my $tmp = "mm2";
+
+	&xor	($nlo,$nlo);	# avoid partial register stalls on PIII
+	&mov	($nhi,$Zll);
+	&mov	(&LB($nlo),&LB($nhi));
+	&mov	($cnt,14);
+	&shl	(&LB($nlo),4);
+	&and	($nhi,0xf0);
+	&movq	($Zlo,&QWP(8,$Htbl,$nlo));
+	&movq	($Zhi,&QWP(0,$Htbl,$nlo));
+	&movd	($rem,$Zlo);
+	&jmp	(&label("mmx_loop"));
+
+    &set_label("mmx_loop",16);
+	&psrlq	($Zlo,4);
+	&and	($rem,0xf);
+	&movq	($tmp,$Zhi);
+	&psrlq	($Zhi,4);
+	&pxor	($Zlo,&QWP(8,$Htbl,$nhi));
+	&mov	(&LB($nlo),&BP(0,$inp,$cnt));
+	&psllq	($tmp,60);
+	&pxor	($Zhi,&QWP(0,$rem_4bit,$rem,8));
+	&dec	($cnt);
+	&movd	($rem,$Zlo);
+	&pxor	($Zhi,&QWP(0,$Htbl,$nhi));
+	&mov	($nhi,$nlo);
+	&pxor	($Zlo,$tmp);
+	&js	(&label("mmx_break"));
+
+	&shl	(&LB($nlo),4);
+	&and	($rem,0xf);
+	&psrlq	($Zlo,4);
+	&and	($nhi,0xf0);
+	&movq	($tmp,$Zhi);
+	&psrlq	($Zhi,4);
+	&pxor	($Zlo,&QWP(8,$Htbl,$nlo));
+	&psllq	($tmp,60);
+	&pxor	($Zhi,&QWP(0,$rem_4bit,$rem,8));
+	&movd	($rem,$Zlo);
+	&pxor	($Zhi,&QWP(0,$Htbl,$nlo));
+	&pxor	($Zlo,$tmp);
+	&jmp	(&label("mmx_loop"));
+
+    &set_label("mmx_break",16);
+	&shl	(&LB($nlo),4);
+	&and	($rem,0xf);
+	&psrlq	($Zlo,4);
+	&and	($nhi,0xf0);
+	&movq	($tmp,$Zhi);
+	&psrlq	($Zhi,4);
+	&pxor	($Zlo,&QWP(8,$Htbl,$nlo));
+	&psllq	($tmp,60);
+	&pxor	($Zhi,&QWP(0,$rem_4bit,$rem,8));
+	&movd	($rem,$Zlo);
+	&pxor	($Zhi,&QWP(0,$Htbl,$nlo));
+	&pxor	($Zlo,$tmp);
+
+	&psrlq	($Zlo,4);
+	&and	($rem,0xf);
+	&movq	($tmp,$Zhi);
+	&psrlq	($Zhi,4);
+	&pxor	($Zlo,&QWP(8,$Htbl,$nhi));
+	&psllq	($tmp,60);
+	&pxor	($Zhi,&QWP(0,$rem_4bit,$rem,8));
+	&movd	($rem,$Zlo);
+	&pxor	($Zhi,&QWP(0,$Htbl,$nhi));
+	&pxor	($Zlo,$tmp);
+
+	&psrlq	($Zlo,32);	# lower part of Zlo is already there
+	&movd	($Zhl,$Zhi);
+	&psrlq	($Zhi,32);
+	&movd	($Zlh,$Zlo);
+	&movd	($Zhh,$Zhi);
+
+	&bswap	($Zll);
+	&bswap	($Zhl);
+	&bswap	($Zlh);
+	&bswap	($Zhh);
+}
+
+&function_begin("gcm_gmult_4bit_mmx");
+	&mov	($inp,&wparam(0));	# load Xi
+	&mov	($Htbl,&wparam(1));	# load Htable
+
+	&call	(&label("pic_point"));
+	&set_label("pic_point");
+	&blindpop("eax");
+	&lea	("eax",&DWP(&label("rem_4bit")."-".&label("pic_point"),"eax"));
+
+	&movz	($Zll,&BP(15,$inp));
+
+	&mmx_loop($inp,"eax");
+
+	&emms	();
+	&mov	(&DWP(12,$inp),$Zll);
+	&mov	(&DWP(4,$inp),$Zhl);
+	&mov	(&DWP(8,$inp),$Zlh);
+	&mov	(&DWP(0,$inp),$Zhh);
+&function_end("gcm_gmult_4bit_mmx");
+
+######################################################################
+# Below subroutine is "528B" variant of "4-bit" GCM GHASH function
+# (see gcm128.c for details). It provides further 20-40% performance
+# improvement over above mentioned "May" version.
+
+&static_label("rem_8bit");
+
+&function_begin("gcm_ghash_4bit_mmx");
+{ my ($Zlo,$Zhi) = ("mm7","mm6");
+  my $rem_8bit = "esi";
+  my $Htbl = "ebx";
+
+    # parameter block
+    &mov	("eax",&wparam(0));		# Xi
+    &mov	("ebx",&wparam(1));		# Htable
+    &mov	("ecx",&wparam(2));		# inp
+    &mov	("edx",&wparam(3));		# len
+    &mov	("ebp","esp");			# original %esp
+    &call	(&label("pic_point"));
+    &set_label	("pic_point");
+    &blindpop	($rem_8bit);
+    &lea	($rem_8bit,&DWP(&label("rem_8bit")."-".&label("pic_point"),$rem_8bit));
+
+    &sub	("esp",512+16+16);		# allocate stack frame...
+    &and	("esp",-64);			# ...and align it
+    &sub	("esp",16);			# place for (u8)(H[]<<4)
+
+    &add	("edx","ecx");			# pointer to the end of input
+    &mov	(&DWP(528+16+0,"esp"),"eax");	# save Xi
+    &mov	(&DWP(528+16+8,"esp"),"edx");	# save inp+len
+    &mov	(&DWP(528+16+12,"esp"),"ebp");	# save original %esp
+
+    { my @lo  = ("mm0","mm1","mm2");
+      my @hi  = ("mm3","mm4","mm5");
+      my @tmp = ("mm6","mm7");
+      my ($off1,$off2,$i) = (0,0,);
+
+      &add	($Htbl,128);			# optimize for size
+      &lea	("edi",&DWP(16+128,"esp"));
+      &lea	("ebp",&DWP(16+256+128,"esp"));
+
+      # decompose Htable (low and high parts are kept separately),
+      # generate Htable[]>>4, (u8)(Htable[]<<4), save to stack...
+      for ($i=0;$i<18;$i++) {
+
+	&mov	("edx",&DWP(16*$i+8-128,$Htbl))		if ($i<16);
+	&movq	($lo[0],&QWP(16*$i+8-128,$Htbl))	if ($i<16);
+	&psllq	($tmp[1],60)				if ($i>1);
+	&movq	($hi[0],&QWP(16*$i+0-128,$Htbl))	if ($i<16);
+	&por	($lo[2],$tmp[1])			if ($i>1);
+	&movq	(&QWP($off1-128,"edi"),$lo[1])		if ($i>0 && $i<17);
+	&psrlq	($lo[1],4)				if ($i>0 && $i<17);
+	&movq	(&QWP($off1,"edi"),$hi[1])		if ($i>0 && $i<17);
+	&movq	($tmp[0],$hi[1])			if ($i>0 && $i<17);
+	&movq	(&QWP($off2-128,"ebp"),$lo[2])		if ($i>1);
+	&psrlq	($hi[1],4)				if ($i>0 && $i<17);
+	&movq	(&QWP($off2,"ebp"),$hi[2])		if ($i>1);
+	&shl	("edx",4)				if ($i<16);
+	&mov	(&BP($i,"esp"),&LB("edx"))		if ($i<16);
+
+	unshift	(@lo,pop(@lo));			# "rotate" registers
+	unshift	(@hi,pop(@hi));
+	unshift	(@tmp,pop(@tmp));
+	$off1 += 8	if ($i>0);
+	$off2 += 8	if ($i>1);
+      }
+    }
+
+    &movq	($Zhi,&QWP(0,"eax"));
+    &mov	("ebx",&DWP(8,"eax"));
+    &mov	("edx",&DWP(12,"eax"));		# load Xi
+
+&set_label("outer",16);
+  { my $nlo = "eax";
+    my $dat = "edx";
+    my @nhi = ("edi","ebp");
+    my @rem = ("ebx","ecx");
+    my @red = ("mm0","mm1","mm2");
+    my $tmp = "mm3";
+
+    &xor	($dat,&DWP(12,"ecx"));		# merge input data
+    &xor	("ebx",&DWP(8,"ecx"));
+    &pxor	($Zhi,&QWP(0,"ecx"));
+    &lea	("ecx",&DWP(16,"ecx"));		# inp+=16
+    #&mov	(&DWP(528+12,"esp"),$dat);	# save inp^Xi
+    &mov	(&DWP(528+8,"esp"),"ebx");
+    &movq	(&QWP(528+0,"esp"),$Zhi);
+    &mov	(&DWP(528+16+4,"esp"),"ecx");	# save inp
+
+    &xor	($nlo,$nlo);
+    &rol	($dat,8);
+    &mov	(&LB($nlo),&LB($dat));
+    &mov	($nhi[1],$nlo);
+    &and	(&LB($nlo),0x0f);
+    &shr	($nhi[1],4);
+    &pxor	($red[0],$red[0]);
+    &rol	($dat,8);			# next byte
+    &pxor	($red[1],$red[1]);
+    &pxor	($red[2],$red[2]);
+
+    # Just like in "May" version modulo-schedule for critical path in
+    # 'Z.hi ^= rem_8bit[Z.lo&0xff^((u8)H[nhi]<<4)]<<48'. Final 'pxor'
+    # is scheduled so late that rem_8bit[] has to be shifted *right*
+    # by 16, which is why last argument to pinsrw is 2, which
+    # corresponds to <<32=<<48>>16...
+    for ($j=11,$i=0;$i<15;$i++) {
+
+      if ($i>0) {
+	&pxor	($Zlo,&QWP(16,"esp",$nlo,8));		# Z^=H[nlo]
+	&rol	($dat,8);				# next byte
+	&pxor	($Zhi,&QWP(16+128,"esp",$nlo,8));
+
+	&pxor	($Zlo,$tmp);
+	&pxor	($Zhi,&QWP(16+256+128,"esp",$nhi[0],8));
+	&xor	(&LB($rem[1]),&BP(0,"esp",$nhi[0]));	# rem^(H[nhi]<<4)
+      } else {
+	&movq	($Zlo,&QWP(16,"esp",$nlo,8));
+	&movq	($Zhi,&QWP(16+128,"esp",$nlo,8));
+      }
+
+	&mov	(&LB($nlo),&LB($dat));
+	&mov	($dat,&DWP(528+$j,"esp"))		if (--$j%4==0);
+
+	&movd	($rem[0],$Zlo);
+	&movz	($rem[1],&LB($rem[1]))			if ($i>0);
+	&psrlq	($Zlo,8);				# Z>>=8
+
+	&movq	($tmp,$Zhi);
+	&mov	($nhi[0],$nlo);
+	&psrlq	($Zhi,8);
+
+	&pxor	($Zlo,&QWP(16+256+0,"esp",$nhi[1],8));	# Z^=H[nhi]>>4
+	&and	(&LB($nlo),0x0f);
+	&psllq	($tmp,56);
+
+	&pxor	($Zhi,$red[1])				if ($i>1);
+	&shr	($nhi[0],4);
+	&pinsrw	($red[0],&WP(0,$rem_8bit,$rem[1],2),2)	if ($i>0);
+
+	unshift	(@red,pop(@red));			# "rotate" registers
+	unshift	(@rem,pop(@rem));
+	unshift	(@nhi,pop(@nhi));
+    }
+
+    &pxor	($Zlo,&QWP(16,"esp",$nlo,8));		# Z^=H[nlo]
+    &pxor	($Zhi,&QWP(16+128,"esp",$nlo,8));
+    &xor	(&LB($rem[1]),&BP(0,"esp",$nhi[0]));	# rem^(H[nhi]<<4)
+
+    &pxor	($Zlo,$tmp);
+    &pxor	($Zhi,&QWP(16+256+128,"esp",$nhi[0],8));
+    &movz	($rem[1],&LB($rem[1]));
+
+    &pxor	($red[2],$red[2]);			# clear 2nd word
+    &psllq	($red[1],4);
+
+    &movd	($rem[0],$Zlo);
+    &psrlq	($Zlo,4);				# Z>>=4
+
+    &movq	($tmp,$Zhi);
+    &psrlq	($Zhi,4);
+    &shl	($rem[0],4);				# rem<<4
+
+    &pxor	($Zlo,&QWP(16,"esp",$nhi[1],8));	# Z^=H[nhi]
+    &psllq	($tmp,60);
+    &movz	($rem[0],&LB($rem[0]));
+
+    &pxor	($Zlo,$tmp);
+    &pxor	($Zhi,&QWP(16+128,"esp",$nhi[1],8));
+
+    &pinsrw	($red[0],&WP(0,$rem_8bit,$rem[1],2),2);
+    &pxor	($Zhi,$red[1]);
+
+    &movd	($dat,$Zlo);
+    &pinsrw	($red[2],&WP(0,$rem_8bit,$rem[0],2),3);	# last is <<48
+
+    &psllq	($red[0],12);				# correct by <<16>>4
+    &pxor	($Zhi,$red[0]);
+    &psrlq	($Zlo,32);
+    &pxor	($Zhi,$red[2]);
+
+    &mov	("ecx",&DWP(528+16+4,"esp"));	# restore inp
+    &movd	("ebx",$Zlo);
+    &movq	($tmp,$Zhi);			# 01234567
+    &psllw	($Zhi,8);			# 1.3.5.7.
+    &psrlw	($tmp,8);			# .0.2.4.6
+    &por	($Zhi,$tmp);			# 10325476
+    &bswap	($dat);
+    &pshufw	($Zhi,$Zhi,0b00011011);		# 76543210
+    &bswap	("ebx");
+
+    &cmp	("ecx",&DWP(528+16+8,"esp"));	# are we done?
+    &jne	(&label("outer"));
+  }
+
+    &mov	("eax",&DWP(528+16+0,"esp"));	# restore Xi
+    &mov	(&DWP(12,"eax"),"edx");
+    &mov	(&DWP(8,"eax"),"ebx");
+    &movq	(&QWP(0,"eax"),$Zhi);
+
+    &mov	("esp",&DWP(528+16+12,"esp"));	# restore original %esp
+    &emms	();
+}
+&function_end("gcm_ghash_4bit_mmx");
+}}
+
+if ($sse2) {{
+######################################################################
+# PCLMULQDQ version.
+
+$Xip="eax";
+$Htbl="edx";
+$const="ecx";
+$inp="esi";
+$len="ebx";
+
+($Xi,$Xhi)=("xmm0","xmm1");	$Hkey="xmm2";
+($T1,$T2,$T3)=("xmm3","xmm4","xmm5");
+($Xn,$Xhn)=("xmm6","xmm7");
+
+&static_label("bswap");
+
+sub clmul64x64_T2 {	# minimal "register" pressure
+my ($Xhi,$Xi,$Hkey,$HK)=@_;
+
+	&movdqa		($Xhi,$Xi);		#
+	&pshufd		($T1,$Xi,0b01001110);
+	&pshufd		($T2,$Hkey,0b01001110)	if (!defined($HK));
+	&pxor		($T1,$Xi);		#
+	&pxor		($T2,$Hkey)		if (!defined($HK));
+			$HK=$T2			if (!defined($HK));
+
+	&pclmulqdq	($Xi,$Hkey,0x00);	#######
+	&pclmulqdq	($Xhi,$Hkey,0x11);	#######
+	&pclmulqdq	($T1,$HK,0x00);		#######
+	&xorps		($T1,$Xi);		#
+	&xorps		($T1,$Xhi);		#
+
+	&movdqa		($T2,$T1);		#
+	&psrldq		($T1,8);
+	&pslldq		($T2,8);		#
+	&pxor		($Xhi,$T1);
+	&pxor		($Xi,$T2);		#
+}
+
+sub clmul64x64_T3 {
+# Even though this subroutine offers visually better ILP, it
+# was empirically found to be a tad slower than above version.
+# At least in gcm_ghash_clmul context. But it's just as well,
+# because loop modulo-scheduling is possible only thanks to
+# minimized "register" pressure...
+my ($Xhi,$Xi,$Hkey)=@_;
+
+	&movdqa		($T1,$Xi);		#
+	&movdqa		($Xhi,$Xi);
+	&pclmulqdq	($Xi,$Hkey,0x00);	#######
+	&pclmulqdq	($Xhi,$Hkey,0x11);	#######
+	&pshufd		($T2,$T1,0b01001110);	#
+	&pshufd		($T3,$Hkey,0b01001110);
+	&pxor		($T2,$T1);		#
+	&pxor		($T3,$Hkey);
+	&pclmulqdq	($T2,$T3,0x00);		#######
+	&pxor		($T2,$Xi);		#
+	&pxor		($T2,$Xhi);		#
+
+	&movdqa		($T3,$T2);		#
+	&psrldq		($T2,8);
+	&pslldq		($T3,8);		#
+	&pxor		($Xhi,$T2);
+	&pxor		($Xi,$T3);		#
+}
+
+if (1) {		# Algorithm 9 with <<1 twist.
+			# Reduction is shorter and uses only two
+			# temporary registers, which makes it better
+			# candidate for interleaving with 64x64
+			# multiplication. Pre-modulo-scheduled loop
+			# was found to be ~20% faster than Algorithm 5
+			# below. Algorithm 9 was therefore chosen for
+			# further optimization...
+
+sub reduction_alg9 {	# 17/11 times faster than Intel version
+my ($Xhi,$Xi) = @_;
+
+	# 1st phase
+	&movdqa		($T2,$Xi);		#
+	&movdqa		($T1,$Xi);
+	&psllq		($Xi,5);
+	&pxor		($T1,$Xi);		#
+	&psllq		($Xi,1);
+	&pxor		($Xi,$T1);		#
+	&psllq		($Xi,57);		#
+	&movdqa		($T1,$Xi);		#
+	&pslldq		($Xi,8);
+	&psrldq		($T1,8);		#
+	&pxor		($Xi,$T2);
+	&pxor		($Xhi,$T1);		#
+
+	# 2nd phase
+	&movdqa		($T2,$Xi);
+	&psrlq		($Xi,1);
+	&pxor		($Xhi,$T2);		#
+	&pxor		($T2,$Xi);
+	&psrlq		($Xi,5);
+	&pxor		($Xi,$T2);		#
+	&psrlq		($Xi,1);		#
+	&pxor		($Xi,$Xhi)		#
+}
+
+&function_begin_B("gcm_init_clmul");
+	&mov		($Htbl,&wparam(0));
+	&mov		($Xip,&wparam(1));
+
+	&call		(&label("pic"));
+&set_label("pic");
+	&blindpop	($const);
+	&lea		($const,&DWP(&label("bswap")."-".&label("pic"),$const));
+
+	&movdqu		($Hkey,&QWP(0,$Xip));
+	&pshufd		($Hkey,$Hkey,0b01001110);# dword swap
+
+	# <<1 twist
+	&pshufd		($T2,$Hkey,0b11111111);	# broadcast uppermost dword
+	&movdqa		($T1,$Hkey);
+	&psllq		($Hkey,1);
+	&pxor		($T3,$T3);		#
+	&psrlq		($T1,63);
+	&pcmpgtd	($T3,$T2);		# broadcast carry bit
+	&pslldq		($T1,8);
+	&por		($Hkey,$T1);		# H<<=1
+
+	# magic reduction
+	&pand		($T3,&QWP(16,$const));	# 0x1c2_polynomial
+	&pxor		($Hkey,$T3);		# if(carry) H^=0x1c2_polynomial
+
+	# calculate H^2
+	&movdqa		($Xi,$Hkey);
+	&clmul64x64_T2	($Xhi,$Xi,$Hkey);
+	&reduction_alg9	($Xhi,$Xi);
+
+	&pshufd		($T1,$Hkey,0b01001110);
+	&pshufd		($T2,$Xi,0b01001110);
+	&pxor		($T1,$Hkey);		# Karatsuba pre-processing
+	&movdqu		(&QWP(0,$Htbl),$Hkey);	# save H
+	&pxor		($T2,$Xi);		# Karatsuba pre-processing
+	&movdqu		(&QWP(16,$Htbl),$Xi);	# save H^2
+	&palignr	($T2,$T1,8);		# low part is H.lo^H.hi
+	&movdqu		(&QWP(32,$Htbl),$T2);	# save Karatsuba "salt"
+
+	&ret		();
+&function_end_B("gcm_init_clmul");
+
+&function_begin_B("gcm_gmult_clmul");
+	&mov		($Xip,&wparam(0));
+	&mov		($Htbl,&wparam(1));
+
+	&call		(&label("pic"));
+&set_label("pic");
+	&blindpop	($const);
+	&lea		($const,&DWP(&label("bswap")."-".&label("pic"),$const));
+
+	&movdqu		($Xi,&QWP(0,$Xip));
+	&movdqa		($T3,&QWP(0,$const));
+	&movups		($Hkey,&QWP(0,$Htbl));
+	&pshufb		($Xi,$T3);
+	&movups		($T2,&QWP(32,$Htbl));
+
+	&clmul64x64_T2	($Xhi,$Xi,$Hkey,$T2);
+	&reduction_alg9	($Xhi,$Xi);
+
+	&pshufb		($Xi,$T3);
+	&movdqu		(&QWP(0,$Xip),$Xi);
+
+	&ret	();
+&function_end_B("gcm_gmult_clmul");
+
+&function_begin("gcm_ghash_clmul");
+	&mov		($Xip,&wparam(0));
+	&mov		($Htbl,&wparam(1));
+	&mov		($inp,&wparam(2));
+	&mov		($len,&wparam(3));
+
+	&call		(&label("pic"));
+&set_label("pic");
+	&blindpop	($const);
+	&lea		($const,&DWP(&label("bswap")."-".&label("pic"),$const));
+
+	&movdqu		($Xi,&QWP(0,$Xip));
+	&movdqa		($T3,&QWP(0,$const));
+	&movdqu		($Hkey,&QWP(0,$Htbl));
+	&pshufb		($Xi,$T3);
+
+	&sub		($len,0x10);
+	&jz		(&label("odd_tail"));
+
+	#######
+	# Xi+2 =[H*(Ii+1 + Xi+1)] mod P =
+	#	[(H*Ii+1) + (H*Xi+1)] mod P =
+	#	[(H*Ii+1) + H^2*(Ii+Xi)] mod P
+	#
+	&movdqu		($T1,&QWP(0,$inp));	# Ii
+	&movdqu		($Xn,&QWP(16,$inp));	# Ii+1
+	&pshufb		($T1,$T3);
+	&pshufb		($Xn,$T3);
+	&movdqu		($T3,&QWP(32,$Htbl));
+	&pxor		($Xi,$T1);		# Ii+Xi
+
+	&pshufd		($T1,$Xn,0b01001110);	# H*Ii+1
+	&movdqa		($Xhn,$Xn);
+	&pxor		($T1,$Xn);		#
+	&lea		($inp,&DWP(32,$inp));	# i+=2
+
+	&pclmulqdq	($Xn,$Hkey,0x00);	#######
+	&pclmulqdq	($Xhn,$Hkey,0x11);	#######
+	&pclmulqdq	($T1,$T3,0x00);		#######
+	&movups		($Hkey,&QWP(16,$Htbl));	# load H^2
+	&nop		();
+
+	&sub		($len,0x20);
+	&jbe		(&label("even_tail"));
+	&jmp		(&label("mod_loop"));
+
+&set_label("mod_loop",32);
+	&pshufd		($T2,$Xi,0b01001110);	# H^2*(Ii+Xi)
+	&movdqa		($Xhi,$Xi);
+	&pxor		($T2,$Xi);		#
+	&nop		();
+
+	&pclmulqdq	($Xi,$Hkey,0x00);	#######
+	&pclmulqdq	($Xhi,$Hkey,0x11);	#######
+	&pclmulqdq	($T2,$T3,0x10);		#######
+	&movups		($Hkey,&QWP(0,$Htbl));	# load H
+
+	&xorps		($Xi,$Xn);		# (H*Ii+1) + H^2*(Ii+Xi)
+	&movdqa		($T3,&QWP(0,$const));
+	&xorps		($Xhi,$Xhn);
+	 &movdqu	($Xhn,&QWP(0,$inp));	# Ii
+	&pxor		($T1,$Xi);		# aggregated Karatsuba post-processing
+	 &movdqu	($Xn,&QWP(16,$inp));	# Ii+1
+	&pxor		($T1,$Xhi);		#
+
+	 &pshufb	($Xhn,$T3);
+	&pxor		($T2,$T1);		#
+
+	&movdqa		($T1,$T2);		#
+	&psrldq		($T2,8);
+	&pslldq		($T1,8);		#
+	&pxor		($Xhi,$T2);
+	&pxor		($Xi,$T1);		#
+	 &pshufb	($Xn,$T3);
+	 &pxor		($Xhi,$Xhn);		# "Ii+Xi", consume early
+
+	&movdqa		($Xhn,$Xn);		#&clmul64x64_TX	($Xhn,$Xn,$Hkey); H*Ii+1
+	  &movdqa	($T2,$Xi);		#&reduction_alg9($Xhi,$Xi); 1st phase
+	  &movdqa	($T1,$Xi);
+	  &psllq	($Xi,5);
+	  &pxor		($T1,$Xi);		#
+	  &psllq	($Xi,1);
+	  &pxor		($Xi,$T1);		#
+	&pclmulqdq	($Xn,$Hkey,0x00);	#######
+	&movups		($T3,&QWP(32,$Htbl));
+	  &psllq	($Xi,57);		#
+	  &movdqa	($T1,$Xi);		#
+	  &pslldq	($Xi,8);
+	  &psrldq	($T1,8);		#
+	  &pxor		($Xi,$T2);
+	  &pxor		($Xhi,$T1);		#
+	&pshufd		($T1,$Xhn,0b01001110);
+	  &movdqa	($T2,$Xi);		# 2nd phase
+	  &psrlq	($Xi,1);
+	&pxor		($T1,$Xhn);
+	  &pxor		($Xhi,$T2);		#
+	&pclmulqdq	($Xhn,$Hkey,0x11);	#######
+	&movups		($Hkey,&QWP(16,$Htbl));	# load H^2
+	  &pxor		($T2,$Xi);
+	  &psrlq	($Xi,5);
+	  &pxor		($Xi,$T2);		#
+	  &psrlq	($Xi,1);		#
+	  &pxor		($Xi,$Xhi)		#
+	&pclmulqdq	($T1,$T3,0x00);		#######
+
+	&lea		($inp,&DWP(32,$inp));
+	&sub		($len,0x20);
+	&ja		(&label("mod_loop"));
+
+&set_label("even_tail");
+	&pshufd		($T2,$Xi,0b01001110);	# H^2*(Ii+Xi)
+	&movdqa		($Xhi,$Xi);
+	&pxor		($T2,$Xi);		#
+
+	&pclmulqdq	($Xi,$Hkey,0x00);	#######
+	&pclmulqdq	($Xhi,$Hkey,0x11);	#######
+	&pclmulqdq	($T2,$T3,0x10);		#######
+	&movdqa		($T3,&QWP(0,$const));
+
+	&xorps		($Xi,$Xn);		# (H*Ii+1) + H^2*(Ii+Xi)
+	&xorps		($Xhi,$Xhn);
+	&pxor		($T1,$Xi);		# aggregated Karatsuba post-processing
+	&pxor		($T1,$Xhi);		#
+
+	&pxor		($T2,$T1);		#
+
+	&movdqa		($T1,$T2);		#
+	&psrldq		($T2,8);
+	&pslldq		($T1,8);		#
+	&pxor		($Xhi,$T2);
+	&pxor		($Xi,$T1);		#
+
+	&reduction_alg9	($Xhi,$Xi);
+
+	&test		($len,$len);
+	&jnz		(&label("done"));
+
+	&movups		($Hkey,&QWP(0,$Htbl));	# load H
+&set_label("odd_tail");
+	&movdqu		($T1,&QWP(0,$inp));	# Ii
+	&pshufb		($T1,$T3);
+	&pxor		($Xi,$T1);		# Ii+Xi
+
+	&clmul64x64_T2	($Xhi,$Xi,$Hkey);	# H*(Ii+Xi)
+	&reduction_alg9	($Xhi,$Xi);
+
+&set_label("done");
+	&pshufb		($Xi,$T3);
+	&movdqu		(&QWP(0,$Xip),$Xi);
+&function_end("gcm_ghash_clmul");
+
+} else {		# Algorithm 5. Kept for reference purposes.
+
+sub reduction_alg5 {	# 19/16 times faster than Intel version
+my ($Xhi,$Xi)=@_;
+
+	# <<1
+	&movdqa		($T1,$Xi);		#
+	&movdqa		($T2,$Xhi);
+	&pslld		($Xi,1);
+	&pslld		($Xhi,1);		#
+	&psrld		($T1,31);
+	&psrld		($T2,31);		#
+	&movdqa		($T3,$T1);
+	&pslldq		($T1,4);
+	&psrldq		($T3,12);		#
+	&pslldq		($T2,4);
+	&por		($Xhi,$T3);		#
+	&por		($Xi,$T1);
+	&por		($Xhi,$T2);		#
+
+	# 1st phase
+	&movdqa		($T1,$Xi);
+	&movdqa		($T2,$Xi);
+	&movdqa		($T3,$Xi);		#
+	&pslld		($T1,31);
+	&pslld		($T2,30);
+	&pslld		($Xi,25);		#
+	&pxor		($T1,$T2);
+	&pxor		($T1,$Xi);		#
+	&movdqa		($T2,$T1);		#
+	&pslldq		($T1,12);
+	&psrldq		($T2,4);		#
+	&pxor		($T3,$T1);
+
+	# 2nd phase
+	&pxor		($Xhi,$T3);		#
+	&movdqa		($Xi,$T3);
+	&movdqa		($T1,$T3);
+	&psrld		($Xi,1);		#
+	&psrld		($T1,2);
+	&psrld		($T3,7);		#
+	&pxor		($Xi,$T1);
+	&pxor		($Xhi,$T2);
+	&pxor		($Xi,$T3);		#
+	&pxor		($Xi,$Xhi);		#
+}
+
+&function_begin_B("gcm_init_clmul");
+	&mov		($Htbl,&wparam(0));
+	&mov		($Xip,&wparam(1));
+
+	&call		(&label("pic"));
+&set_label("pic");
+	&blindpop	($const);
+	&lea		($const,&DWP(&label("bswap")."-".&label("pic"),$const));
+
+	&movdqu		($Hkey,&QWP(0,$Xip));
+	&pshufd		($Hkey,$Hkey,0b01001110);# dword swap
+
+	# calculate H^2
+	&movdqa		($Xi,$Hkey);
+	&clmul64x64_T3	($Xhi,$Xi,$Hkey);
+	&reduction_alg5	($Xhi,$Xi);
+
+	&movdqu		(&QWP(0,$Htbl),$Hkey);	# save H
+	&movdqu		(&QWP(16,$Htbl),$Xi);	# save H^2
+
+	&ret		();
+&function_end_B("gcm_init_clmul");
+
+&function_begin_B("gcm_gmult_clmul");
+	&mov		($Xip,&wparam(0));
+	&mov		($Htbl,&wparam(1));
+
+	&call		(&label("pic"));
+&set_label("pic");
+	&blindpop	($const);
+	&lea		($const,&DWP(&label("bswap")."-".&label("pic"),$const));
+
+	&movdqu		($Xi,&QWP(0,$Xip));
+	&movdqa		($Xn,&QWP(0,$const));
+	&movdqu		($Hkey,&QWP(0,$Htbl));
+	&pshufb		($Xi,$Xn);
+
+	&clmul64x64_T3	($Xhi,$Xi,$Hkey);
+	&reduction_alg5	($Xhi,$Xi);
+
+	&pshufb		($Xi,$Xn);
+	&movdqu		(&QWP(0,$Xip),$Xi);
+
+	&ret	();
+&function_end_B("gcm_gmult_clmul");
+
+&function_begin("gcm_ghash_clmul");
+	&mov		($Xip,&wparam(0));
+	&mov		($Htbl,&wparam(1));
+	&mov		($inp,&wparam(2));
+	&mov		($len,&wparam(3));
+
+	&call		(&label("pic"));
+&set_label("pic");
+	&blindpop	($const);
+	&lea		($const,&DWP(&label("bswap")."-".&label("pic"),$const));
+
+	&movdqu		($Xi,&QWP(0,$Xip));
+	&movdqa		($T3,&QWP(0,$const));
+	&movdqu		($Hkey,&QWP(0,$Htbl));
+	&pshufb		($Xi,$T3);
+
+	&sub		($len,0x10);
+	&jz		(&label("odd_tail"));
+
+	#######
+	# Xi+2 =[H*(Ii+1 + Xi+1)] mod P =
+	#	[(H*Ii+1) + (H*Xi+1)] mod P =
+	#	[(H*Ii+1) + H^2*(Ii+Xi)] mod P
+	#
+	&movdqu		($T1,&QWP(0,$inp));	# Ii
+	&movdqu		($Xn,&QWP(16,$inp));	# Ii+1
+	&pshufb		($T1,$T3);
+	&pshufb		($Xn,$T3);
+	&pxor		($Xi,$T1);		# Ii+Xi
+
+	&clmul64x64_T3	($Xhn,$Xn,$Hkey);	# H*Ii+1
+	&movdqu		($Hkey,&QWP(16,$Htbl));	# load H^2
+
+	&sub		($len,0x20);
+	&lea		($inp,&DWP(32,$inp));	# i+=2
+	&jbe		(&label("even_tail"));
+
+&set_label("mod_loop");
+	&clmul64x64_T3	($Xhi,$Xi,$Hkey);	# H^2*(Ii+Xi)
+	&movdqu		($Hkey,&QWP(0,$Htbl));	# load H
+
+	&pxor		($Xi,$Xn);		# (H*Ii+1) + H^2*(Ii+Xi)
+	&pxor		($Xhi,$Xhn);
+
+	&reduction_alg5	($Xhi,$Xi);
+
+	#######
+	&movdqa		($T3,&QWP(0,$const));
+	&movdqu		($T1,&QWP(0,$inp));	# Ii
+	&movdqu		($Xn,&QWP(16,$inp));	# Ii+1
+	&pshufb		($T1,$T3);
+	&pshufb		($Xn,$T3);
+	&pxor		($Xi,$T1);		# Ii+Xi
+
+	&clmul64x64_T3	($Xhn,$Xn,$Hkey);	# H*Ii+1
+	&movdqu		($Hkey,&QWP(16,$Htbl));	# load H^2
+
+	&sub		($len,0x20);
+	&lea		($inp,&DWP(32,$inp));
+	&ja		(&label("mod_loop"));
+
+&set_label("even_tail");
+	&clmul64x64_T3	($Xhi,$Xi,$Hkey);	# H^2*(Ii+Xi)
+
+	&pxor		($Xi,$Xn);		# (H*Ii+1) + H^2*(Ii+Xi)
+	&pxor		($Xhi,$Xhn);
+
+	&reduction_alg5	($Xhi,$Xi);
+
+	&movdqa		($T3,&QWP(0,$const));
+	&test		($len,$len);
+	&jnz		(&label("done"));
+
+	&movdqu		($Hkey,&QWP(0,$Htbl));	# load H
+&set_label("odd_tail");
+	&movdqu		($T1,&QWP(0,$inp));	# Ii
+	&pshufb		($T1,$T3);
+	&pxor		($Xi,$T1);		# Ii+Xi
+
+	&clmul64x64_T3	($Xhi,$Xi,$Hkey);	# H*(Ii+Xi)
+	&reduction_alg5	($Xhi,$Xi);
+
+	&movdqa		($T3,&QWP(0,$const));
+&set_label("done");
+	&pshufb		($Xi,$T3);
+	&movdqu		(&QWP(0,$Xip),$Xi);
+&function_end("gcm_ghash_clmul");
+
+}
+
+&set_label("bswap",64);
+	&data_byte(15,14,13,12,11,10,9,8,7,6,5,4,3,2,1,0);
+	&data_byte(1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0xc2);	# 0x1c2_polynomial
+&set_label("rem_8bit",64);
+	&data_short(0x0000,0x01C2,0x0384,0x0246,0x0708,0x06CA,0x048C,0x054E);
+	&data_short(0x0E10,0x0FD2,0x0D94,0x0C56,0x0918,0x08DA,0x0A9C,0x0B5E);
+	&data_short(0x1C20,0x1DE2,0x1FA4,0x1E66,0x1B28,0x1AEA,0x18AC,0x196E);
+	&data_short(0x1230,0x13F2,0x11B4,0x1076,0x1538,0x14FA,0x16BC,0x177E);
+	&data_short(0x3840,0x3982,0x3BC4,0x3A06,0x3F48,0x3E8A,0x3CCC,0x3D0E);
+	&data_short(0x3650,0x3792,0x35D4,0x3416,0x3158,0x309A,0x32DC,0x331E);
+	&data_short(0x2460,0x25A2,0x27E4,0x2626,0x2368,0x22AA,0x20EC,0x212E);
+	&data_short(0x2A70,0x2BB2,0x29F4,0x2836,0x2D78,0x2CBA,0x2EFC,0x2F3E);
+	&data_short(0x7080,0x7142,0x7304,0x72C6,0x7788,0x764A,0x740C,0x75CE);
+	&data_short(0x7E90,0x7F52,0x7D14,0x7CD6,0x7998,0x785A,0x7A1C,0x7BDE);
+	&data_short(0x6CA0,0x6D62,0x6F24,0x6EE6,0x6BA8,0x6A6A,0x682C,0x69EE);
+	&data_short(0x62B0,0x6372,0x6134,0x60F6,0x65B8,0x647A,0x663C,0x67FE);
+	&data_short(0x48C0,0x4902,0x4B44,0x4A86,0x4FC8,0x4E0A,0x4C4C,0x4D8E);
+	&data_short(0x46D0,0x4712,0x4554,0x4496,0x41D8,0x401A,0x425C,0x439E);
+	&data_short(0x54E0,0x5522,0x5764,0x56A6,0x53E8,0x522A,0x506C,0x51AE);
+	&data_short(0x5AF0,0x5B32,0x5974,0x58B6,0x5DF8,0x5C3A,0x5E7C,0x5FBE);
+	&data_short(0xE100,0xE0C2,0xE284,0xE346,0xE608,0xE7CA,0xE58C,0xE44E);
+	&data_short(0xEF10,0xEED2,0xEC94,0xED56,0xE818,0xE9DA,0xEB9C,0xEA5E);
+	&data_short(0xFD20,0xFCE2,0xFEA4,0xFF66,0xFA28,0xFBEA,0xF9AC,0xF86E);
+	&data_short(0xF330,0xF2F2,0xF0B4,0xF176,0xF438,0xF5FA,0xF7BC,0xF67E);
+	&data_short(0xD940,0xD882,0xDAC4,0xDB06,0xDE48,0xDF8A,0xDDCC,0xDC0E);
+	&data_short(0xD750,0xD692,0xD4D4,0xD516,0xD058,0xD19A,0xD3DC,0xD21E);
+	&data_short(0xC560,0xC4A2,0xC6E4,0xC726,0xC268,0xC3AA,0xC1EC,0xC02E);
+	&data_short(0xCB70,0xCAB2,0xC8F4,0xC936,0xCC78,0xCDBA,0xCFFC,0xCE3E);
+	&data_short(0x9180,0x9042,0x9204,0x93C6,0x9688,0x974A,0x950C,0x94CE);
+	&data_short(0x9F90,0x9E52,0x9C14,0x9DD6,0x9898,0x995A,0x9B1C,0x9ADE);
+	&data_short(0x8DA0,0x8C62,0x8E24,0x8FE6,0x8AA8,0x8B6A,0x892C,0x88EE);
+	&data_short(0x83B0,0x8272,0x8034,0x81F6,0x84B8,0x857A,0x873C,0x86FE);
+	&data_short(0xA9C0,0xA802,0xAA44,0xAB86,0xAEC8,0xAF0A,0xAD4C,0xAC8E);
+	&data_short(0xA7D0,0xA612,0xA454,0xA596,0xA0D8,0xA11A,0xA35C,0xA29E);
+	&data_short(0xB5E0,0xB422,0xB664,0xB7A6,0xB2E8,0xB32A,0xB16C,0xB0AE);
+	&data_short(0xBBF0,0xBA32,0xB874,0xB9B6,0xBCF8,0xBD3A,0xBF7C,0xBEBE);
+}}	# $sse2
+
+&set_label("rem_4bit",64);
+	&data_word(0,0x0000<<$S,0,0x1C20<<$S,0,0x3840<<$S,0,0x2460<<$S);
+	&data_word(0,0x7080<<$S,0,0x6CA0<<$S,0,0x48C0<<$S,0,0x54E0<<$S);
+	&data_word(0,0xE100<<$S,0,0xFD20<<$S,0,0xD940<<$S,0,0xC560<<$S);
+	&data_word(0,0x9180<<$S,0,0x8DA0<<$S,0,0xA9C0<<$S,0,0xB5E0<<$S);
+}}}	# !$x86only
+
+&asciz("GHASH for x86, CRYPTOGAMS by <appro\@openssl.org>");
+&asm_finish();
+
+close STDOUT;
+
+# A question was risen about choice of vanilla MMX. Or rather why wasn't
+# SSE2 chosen instead? In addition to the fact that MMX runs on legacy
+# CPUs such as PIII, "4-bit" MMX version was observed to provide better
+# performance than *corresponding* SSE2 one even on contemporary CPUs.
+# SSE2 results were provided by Peter-Michael Hager. He maintains SSE2
+# implementation featuring full range of lookup-table sizes, but with
+# per-invocation lookup table setup. Latter means that table size is
+# chosen depending on how much data is to be hashed in every given call,
+# more data - larger table. Best reported result for Core2 is ~4 cycles
+# per processed byte out of 64KB block. This number accounts even for
+# 64KB table setup overhead. As discussed in gcm128.c we choose to be
+# more conservative in respect to lookup table sizes, but how do the
+# results compare? Minimalistic "256B" MMX version delivers ~11 cycles
+# on same platform. As also discussed in gcm128.c, next in line "8-bit
+# Shoup's" or "4KB" method should deliver twice the performance of
+# "256B" one, in other words not worse than ~6 cycles per byte. It
+# should be also be noted that in SSE2 case improvement can be "super-
+# linear," i.e. more than twice, mostly because >>8 maps to single
+# instruction on SSE2 register. This is unlike "4-bit" case when >>4
+# maps to same amount of instructions in both MMX and SSE2 cases.
+# Bottom line is that switch to SSE2 is considered to be justifiable
+# only in case we choose to implement "8-bit" method...
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-x86_64.pl
new file mode 100644
index 000000000..30158aa07
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghash-x86_64.pl
@@ -0,0 +1,1816 @@
+#! /usr/bin/env perl
+# Copyright 2010-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# March, June 2010
+#
+# The module implements "4-bit" GCM GHASH function and underlying
+# single multiplication operation in GF(2^128). "4-bit" means that
+# it uses 256 bytes per-key table [+128 bytes shared table]. GHASH
+# function features so called "528B" variant utilizing additional
+# 256+16 bytes of per-key storage [+512 bytes shared table].
+# Performance results are for this streamed GHASH subroutine and are
+# expressed in cycles per processed byte, less is better:
+#
+#		gcc 3.4.x(*)	assembler
+#
+# P4		28.6		14.0		+100%
+# Opteron	19.3		7.7		+150%
+# Core2		17.8		8.1(**)		+120%
+# Atom		31.6		16.8		+88%
+# VIA Nano	21.8		10.1		+115%
+#
+# (*)	comparison is not completely fair, because C results are
+#	for vanilla "256B" implementation, while assembler results
+#	are for "528B";-)
+# (**)	it's mystery [to me] why Core2 result is not same as for
+#	Opteron;
+
+# May 2010
+#
+# Add PCLMULQDQ version performing at 2.02 cycles per processed byte.
+# See ghash-x86.pl for background information and details about coding
+# techniques.
+#
+# Special thanks to David Woodhouse for providing access to a
+# Westmere-based system on behalf of Intel Open Source Technology Centre.
+
+# December 2012
+#
+# Overhaul: aggregate Karatsuba post-processing, improve ILP in
+# reduction_alg9, increase reduction aggregate factor to 4x. As for
+# the latter. ghash-x86.pl discusses that it makes lesser sense to
+# increase aggregate factor. Then why increase here? Critical path
+# consists of 3 independent pclmulqdq instructions, Karatsuba post-
+# processing and reduction. "On top" of this we lay down aggregated
+# multiplication operations, triplets of independent pclmulqdq's. As
+# issue rate for pclmulqdq is limited, it makes lesser sense to
+# aggregate more multiplications than it takes to perform remaining
+# non-multiplication operations. 2x is near-optimal coefficient for
+# contemporary Intel CPUs (therefore modest improvement coefficient),
+# but not for Bulldozer. Latter is because logical SIMD operations
+# are twice as slow in comparison to Intel, so that critical path is
+# longer. A CPU with higher pclmulqdq issue rate would also benefit
+# from higher aggregate factor...
+#
+# Westmere	1.78(+13%)
+# Sandy Bridge	1.80(+8%)
+# Ivy Bridge	1.80(+7%)
+# Haswell	0.55(+93%) (if system doesn't support AVX)
+# Broadwell	0.45(+110%)(if system doesn't support AVX)
+# Skylake	0.44(+110%)(if system doesn't support AVX)
+# Bulldozer	1.49(+27%)
+# Silvermont	2.88(+13%)
+# Knights L	2.12(-)    (if system doesn't support AVX)
+# Goldmont	1.08(+24%)
+
+# March 2013
+#
+# ... 8x aggregate factor AVX code path is using reduction algorithm
+# suggested by Shay Gueron[1]. Even though contemporary AVX-capable
+# CPUs such as Sandy and Ivy Bridge can execute it, the code performs
+# sub-optimally in comparison to above mentioned version. But thanks
+# to Ilya Albrekht and Max Locktyukhin of Intel Corp. we knew that
+# it performs in 0.41 cycles per byte on Haswell processor, in
+# 0.29 on Broadwell, and in 0.36 on Skylake.
+#
+# Knights Landing achieves 1.09 cpb.
+#
+# [1] http://rt.openssl.org/Ticket/Display.html?id=2900&user=guest&pass=guest
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.20) + ($1>=2.22);
+}
+
+if (!$avx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	    `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.09) + ($1>=2.10);
+}
+
+if (!$avx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	    `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$avx = ($1>=10) + ($1>=11);
+}
+
+if (!$avx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([3-9]\.[0-9]+)/) {
+	$avx = ($2>=3.0) + ($2>3.0);
+}
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+$do4xaggr=1;
+
+# common register layout
+$nlo="%rax";
+$nhi="%rbx";
+$Zlo="%r8";
+$Zhi="%r9";
+$tmp="%r10";
+$rem_4bit = "%r11";
+
+$Xi="%rdi";
+$Htbl="%rsi";
+
+# per-function register layout
+$cnt="%rcx";
+$rem="%rdx";
+
+sub LB() { my $r=shift; $r =~ s/%[er]([a-d])x/%\1l/	or
+			$r =~ s/%[er]([sd]i)/%\1l/	or
+			$r =~ s/%[er](bp)/%\1l/		or
+			$r =~ s/%(r[0-9]+)[d]?/%\1b/;   $r; }
+
+sub AUTOLOAD()		# thunk [simplified] 32-bit style perlasm
+{ my $opcode = $AUTOLOAD; $opcode =~ s/.*:://;
+  my $arg = pop;
+    $arg = "\$$arg" if ($arg*1 eq $arg);
+    $code .= "\t$opcode\t".join(',',$arg,reverse @_)."\n";
+}
+
+{ my $N;
+  sub loop() {
+  my $inp = shift;
+
+	$N++;
+$code.=<<___;
+	xor	$nlo,$nlo
+	xor	$nhi,$nhi
+	mov	`&LB("$Zlo")`,`&LB("$nlo")`
+	mov	`&LB("$Zlo")`,`&LB("$nhi")`
+	shl	\$4,`&LB("$nlo")`
+	mov	\$14,$cnt
+	mov	8($Htbl,$nlo),$Zlo
+	mov	($Htbl,$nlo),$Zhi
+	and	\$0xf0,`&LB("$nhi")`
+	mov	$Zlo,$rem
+	jmp	.Loop$N
+
+.align	16
+.Loop$N:
+	shr	\$4,$Zlo
+	and	\$0xf,$rem
+	mov	$Zhi,$tmp
+	mov	($inp,$cnt),`&LB("$nlo")`
+	shr	\$4,$Zhi
+	xor	8($Htbl,$nhi),$Zlo
+	shl	\$60,$tmp
+	xor	($Htbl,$nhi),$Zhi
+	mov	`&LB("$nlo")`,`&LB("$nhi")`
+	xor	($rem_4bit,$rem,8),$Zhi
+	mov	$Zlo,$rem
+	shl	\$4,`&LB("$nlo")`
+	xor	$tmp,$Zlo
+	dec	$cnt
+	js	.Lbreak$N
+
+	shr	\$4,$Zlo
+	and	\$0xf,$rem
+	mov	$Zhi,$tmp
+	shr	\$4,$Zhi
+	xor	8($Htbl,$nlo),$Zlo
+	shl	\$60,$tmp
+	xor	($Htbl,$nlo),$Zhi
+	and	\$0xf0,`&LB("$nhi")`
+	xor	($rem_4bit,$rem,8),$Zhi
+	mov	$Zlo,$rem
+	xor	$tmp,$Zlo
+	jmp	.Loop$N
+
+.align	16
+.Lbreak$N:
+	shr	\$4,$Zlo
+	and	\$0xf,$rem
+	mov	$Zhi,$tmp
+	shr	\$4,$Zhi
+	xor	8($Htbl,$nlo),$Zlo
+	shl	\$60,$tmp
+	xor	($Htbl,$nlo),$Zhi
+	and	\$0xf0,`&LB("$nhi")`
+	xor	($rem_4bit,$rem,8),$Zhi
+	mov	$Zlo,$rem
+	xor	$tmp,$Zlo
+
+	shr	\$4,$Zlo
+	and	\$0xf,$rem
+	mov	$Zhi,$tmp
+	shr	\$4,$Zhi
+	xor	8($Htbl,$nhi),$Zlo
+	shl	\$60,$tmp
+	xor	($Htbl,$nhi),$Zhi
+	xor	$tmp,$Zlo
+	xor	($rem_4bit,$rem,8),$Zhi
+
+	bswap	$Zlo
+	bswap	$Zhi
+___
+}}
+
+$code=<<___;
+.text
+.extern	OPENSSL_ia32cap_P
+
+.globl	gcm_gmult_4bit
+.type	gcm_gmult_4bit,\@function,2
+.align	16
+gcm_gmult_4bit:
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp		# %rbp and others are pushed exclusively in
+.cfi_push	%rbp
+	push	%r12		# order to reuse Win64 exception handler...
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	sub	\$280,%rsp
+.cfi_adjust_cfa_offset	280
+.Lgmult_prologue:
+
+	movzb	15($Xi),$Zlo
+	lea	.Lrem_4bit(%rip),$rem_4bit
+___
+	&loop	($Xi);
+$code.=<<___;
+	mov	$Zlo,8($Xi)
+	mov	$Zhi,($Xi)
+
+	lea	280+48(%rsp),%rsi
+.cfi_def_cfa	%rsi,8
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lgmult_epilogue:
+	ret
+.cfi_endproc
+.size	gcm_gmult_4bit,.-gcm_gmult_4bit
+___
+
+# per-function register layout
+$inp="%rdx";
+$len="%rcx";
+$rem_8bit=$rem_4bit;
+
+$code.=<<___;
+.globl	gcm_ghash_4bit
+.type	gcm_ghash_4bit,\@function,4
+.align	16
+gcm_ghash_4bit:
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	sub	\$280,%rsp
+.cfi_adjust_cfa_offset	280
+.Lghash_prologue:
+	mov	$inp,%r14		# reassign couple of args
+	mov	$len,%r15
+___
+{ my $inp="%r14";
+  my $dat="%edx";
+  my $len="%r15";
+  my @nhi=("%ebx","%ecx");
+  my @rem=("%r12","%r13");
+  my $Hshr4="%rbp";
+
+	&sub	($Htbl,-128);		# size optimization
+	&lea	($Hshr4,"16+128(%rsp)");
+	{ my @lo =($nlo,$nhi);
+          my @hi =($Zlo,$Zhi);
+
+	  &xor	($dat,$dat);
+	  for ($i=0,$j=-2;$i<18;$i++,$j++) {
+	    &mov	("$j(%rsp)",&LB($dat))		if ($i>1);
+	    &or		($lo[0],$tmp)			if ($i>1);
+	    &mov	(&LB($dat),&LB($lo[1]))		if ($i>0 && $i<17);
+	    &shr	($lo[1],4)			if ($i>0 && $i<17);
+	    &mov	($tmp,$hi[1])			if ($i>0 && $i<17);
+	    &shr	($hi[1],4)			if ($i>0 && $i<17);
+	    &mov	("8*$j($Hshr4)",$hi[0])		if ($i>1);
+	    &mov	($hi[0],"16*$i+0-128($Htbl)")	if ($i<16);
+	    &shl	(&LB($dat),4)			if ($i>0 && $i<17);
+	    &mov	("8*$j-128($Hshr4)",$lo[0])	if ($i>1);
+	    &mov	($lo[0],"16*$i+8-128($Htbl)")	if ($i<16);
+	    &shl	($tmp,60)			if ($i>0 && $i<17);
+
+	    push	(@lo,shift(@lo));
+	    push	(@hi,shift(@hi));
+	  }
+	}
+	&add	($Htbl,-128);
+	&mov	($Zlo,"8($Xi)");
+	&mov	($Zhi,"0($Xi)");
+	&add	($len,$inp);		# pointer to the end of data
+	&lea	($rem_8bit,".Lrem_8bit(%rip)");
+	&jmp	(".Louter_loop");
+
+$code.=".align	16\n.Louter_loop:\n";
+	&xor	($Zhi,"($inp)");
+	&mov	("%rdx","8($inp)");
+	&lea	($inp,"16($inp)");
+	&xor	("%rdx",$Zlo);
+	&mov	("($Xi)",$Zhi);
+	&mov	("8($Xi)","%rdx");
+	&shr	("%rdx",32);
+
+	&xor	($nlo,$nlo);
+	&rol	($dat,8);
+	&mov	(&LB($nlo),&LB($dat));
+	&movz	($nhi[0],&LB($dat));
+	&shl	(&LB($nlo),4);
+	&shr	($nhi[0],4);
+
+	for ($j=11,$i=0;$i<15;$i++) {
+	    &rol	($dat,8);
+	    &xor	($Zlo,"8($Htbl,$nlo)")			if ($i>0);
+	    &xor	($Zhi,"($Htbl,$nlo)")			if ($i>0);
+	    &mov	($Zlo,"8($Htbl,$nlo)")			if ($i==0);
+	    &mov	($Zhi,"($Htbl,$nlo)")			if ($i==0);
+
+	    &mov	(&LB($nlo),&LB($dat));
+	    &xor	($Zlo,$tmp)				if ($i>0);
+	    &movzw	($rem[1],"($rem_8bit,$rem[1],2)")	if ($i>0);
+
+	    &movz	($nhi[1],&LB($dat));
+	    &shl	(&LB($nlo),4);
+	    &movzb	($rem[0],"(%rsp,$nhi[0])");
+
+	    &shr	($nhi[1],4)				if ($i<14);
+	    &and	($nhi[1],0xf0)				if ($i==14);
+	    &shl	($rem[1],48)				if ($i>0);
+	    &xor	($rem[0],$Zlo);
+
+	    &mov	($tmp,$Zhi);
+	    &xor	($Zhi,$rem[1])				if ($i>0);
+	    &shr	($Zlo,8);
+
+	    &movz	($rem[0],&LB($rem[0]));
+	    &mov	($dat,"$j($Xi)")			if (--$j%4==0);
+	    &shr	($Zhi,8);
+
+	    &xor	($Zlo,"-128($Hshr4,$nhi[0],8)");
+	    &shl	($tmp,56);
+	    &xor	($Zhi,"($Hshr4,$nhi[0],8)");
+
+	    unshift	(@nhi,pop(@nhi));		# "rotate" registers
+	    unshift	(@rem,pop(@rem));
+	}
+	&movzw	($rem[1],"($rem_8bit,$rem[1],2)");
+	&xor	($Zlo,"8($Htbl,$nlo)");
+	&xor	($Zhi,"($Htbl,$nlo)");
+
+	&shl	($rem[1],48);
+	&xor	($Zlo,$tmp);
+
+	&xor	($Zhi,$rem[1]);
+	&movz	($rem[0],&LB($Zlo));
+	&shr	($Zlo,4);
+
+	&mov	($tmp,$Zhi);
+	&shl	(&LB($rem[0]),4);
+	&shr	($Zhi,4);
+
+	&xor	($Zlo,"8($Htbl,$nhi[0])");
+	&movzw	($rem[0],"($rem_8bit,$rem[0],2)");
+	&shl	($tmp,60);
+
+	&xor	($Zhi,"($Htbl,$nhi[0])");
+	&xor	($Zlo,$tmp);
+	&shl	($rem[0],48);
+
+	&bswap	($Zlo);
+	&xor	($Zhi,$rem[0]);
+
+	&bswap	($Zhi);
+	&cmp	($inp,$len);
+	&jb	(".Louter_loop");
+}
+$code.=<<___;
+	mov	$Zlo,8($Xi)
+	mov	$Zhi,($Xi)
+
+	lea	280+48(%rsp),%rsi
+.cfi_def_cfa	%rsi,8
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	0(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lghash_epilogue:
+	ret
+.cfi_endproc
+.size	gcm_ghash_4bit,.-gcm_ghash_4bit
+___
+
+######################################################################
+# PCLMULQDQ version.
+
+@_4args=$win64?	("%rcx","%rdx","%r8", "%r9") :	# Win64 order
+		("%rdi","%rsi","%rdx","%rcx");	# Unix order
+
+($Xi,$Xhi)=("%xmm0","%xmm1");	$Hkey="%xmm2";
+($T1,$T2,$T3)=("%xmm3","%xmm4","%xmm5");
+
+sub clmul64x64_T2 {	# minimal register pressure
+my ($Xhi,$Xi,$Hkey,$HK)=@_;
+
+if (!defined($HK)) {	$HK = $T2;
+$code.=<<___;
+	movdqa		$Xi,$Xhi		#
+	pshufd		\$0b01001110,$Xi,$T1
+	pshufd		\$0b01001110,$Hkey,$T2
+	pxor		$Xi,$T1			#
+	pxor		$Hkey,$T2
+___
+} else {
+$code.=<<___;
+	movdqa		$Xi,$Xhi		#
+	pshufd		\$0b01001110,$Xi,$T1
+	pxor		$Xi,$T1			#
+___
+}
+$code.=<<___;
+	pclmulqdq	\$0x00,$Hkey,$Xi	#######
+	pclmulqdq	\$0x11,$Hkey,$Xhi	#######
+	pclmulqdq	\$0x00,$HK,$T1		#######
+	pxor		$Xi,$T1			#
+	pxor		$Xhi,$T1		#
+
+	movdqa		$T1,$T2			#
+	psrldq		\$8,$T1
+	pslldq		\$8,$T2			#
+	pxor		$T1,$Xhi
+	pxor		$T2,$Xi			#
+___
+}
+
+sub reduction_alg9 {	# 17/11 times faster than Intel version
+my ($Xhi,$Xi) = @_;
+
+$code.=<<___;
+	# 1st phase
+	movdqa		$Xi,$T2			#
+	movdqa		$Xi,$T1
+	psllq		\$5,$Xi
+	pxor		$Xi,$T1			#
+	psllq		\$1,$Xi
+	pxor		$T1,$Xi			#
+	psllq		\$57,$Xi		#
+	movdqa		$Xi,$T1			#
+	pslldq		\$8,$Xi
+	psrldq		\$8,$T1			#
+	pxor		$T2,$Xi
+	pxor		$T1,$Xhi		#
+
+	# 2nd phase
+	movdqa		$Xi,$T2
+	psrlq		\$1,$Xi
+	pxor		$T2,$Xhi		#
+	pxor		$Xi,$T2
+	psrlq		\$5,$Xi
+	pxor		$T2,$Xi			#
+	psrlq		\$1,$Xi			#
+	pxor		$Xhi,$Xi		#
+___
+}
+
+{ my ($Htbl,$Xip)=@_4args;
+  my $HK="%xmm6";
+
+$code.=<<___;
+.globl	gcm_init_clmul
+.type	gcm_init_clmul,\@abi-omnipotent
+.align	16
+gcm_init_clmul:
+.cfi_startproc
+.L_init_clmul:
+___
+$code.=<<___ if ($win64);
+.LSEH_begin_gcm_init_clmul:
+	# I can't trust assembler to use specific encoding:-(
+	.byte	0x48,0x83,0xec,0x18		#sub	$0x18,%rsp
+	.byte	0x0f,0x29,0x34,0x24		#movaps	%xmm6,(%rsp)
+___
+$code.=<<___;
+	movdqu		($Xip),$Hkey
+	pshufd		\$0b01001110,$Hkey,$Hkey	# dword swap
+
+	# <<1 twist
+	pshufd		\$0b11111111,$Hkey,$T2	# broadcast uppermost dword
+	movdqa		$Hkey,$T1
+	psllq		\$1,$Hkey
+	pxor		$T3,$T3			#
+	psrlq		\$63,$T1
+	pcmpgtd		$T2,$T3			# broadcast carry bit
+	pslldq		\$8,$T1
+	por		$T1,$Hkey		# H<<=1
+
+	# magic reduction
+	pand		.L0x1c2_polynomial(%rip),$T3
+	pxor		$T3,$Hkey		# if(carry) H^=0x1c2_polynomial
+
+	# calculate H^2
+	pshufd		\$0b01001110,$Hkey,$HK
+	movdqa		$Hkey,$Xi
+	pxor		$Hkey,$HK
+___
+	&clmul64x64_T2	($Xhi,$Xi,$Hkey,$HK);
+	&reduction_alg9	($Xhi,$Xi);
+$code.=<<___;
+	pshufd		\$0b01001110,$Hkey,$T1
+	pshufd		\$0b01001110,$Xi,$T2
+	pxor		$Hkey,$T1		# Karatsuba pre-processing
+	movdqu		$Hkey,0x00($Htbl)	# save H
+	pxor		$Xi,$T2			# Karatsuba pre-processing
+	movdqu		$Xi,0x10($Htbl)		# save H^2
+	palignr		\$8,$T1,$T2		# low part is H.lo^H.hi...
+	movdqu		$T2,0x20($Htbl)		# save Karatsuba "salt"
+___
+if ($do4xaggr) {
+	&clmul64x64_T2	($Xhi,$Xi,$Hkey,$HK);	# H^3
+	&reduction_alg9	($Xhi,$Xi);
+$code.=<<___;
+	movdqa		$Xi,$T3
+___
+	&clmul64x64_T2	($Xhi,$Xi,$Hkey,$HK);	# H^4
+	&reduction_alg9	($Xhi,$Xi);
+$code.=<<___;
+	pshufd		\$0b01001110,$T3,$T1
+	pshufd		\$0b01001110,$Xi,$T2
+	pxor		$T3,$T1			# Karatsuba pre-processing
+	movdqu		$T3,0x30($Htbl)		# save H^3
+	pxor		$Xi,$T2			# Karatsuba pre-processing
+	movdqu		$Xi,0x40($Htbl)		# save H^4
+	palignr		\$8,$T1,$T2		# low part is H^3.lo^H^3.hi...
+	movdqu		$T2,0x50($Htbl)		# save Karatsuba "salt"
+___
+}
+$code.=<<___ if ($win64);
+	movaps	(%rsp),%xmm6
+	lea	0x18(%rsp),%rsp
+.LSEH_end_gcm_init_clmul:
+___
+$code.=<<___;
+	ret
+.cfi_endproc
+.size	gcm_init_clmul,.-gcm_init_clmul
+___
+}
+
+{ my ($Xip,$Htbl)=@_4args;
+
+$code.=<<___;
+.globl	gcm_gmult_clmul
+.type	gcm_gmult_clmul,\@abi-omnipotent
+.align	16
+gcm_gmult_clmul:
+.cfi_startproc
+.L_gmult_clmul:
+	movdqu		($Xip),$Xi
+	movdqa		.Lbswap_mask(%rip),$T3
+	movdqu		($Htbl),$Hkey
+	movdqu		0x20($Htbl),$T2
+	pshufb		$T3,$Xi
+___
+	&clmul64x64_T2	($Xhi,$Xi,$Hkey,$T2);
+$code.=<<___ if (0 || (&reduction_alg9($Xhi,$Xi)&&0));
+	# experimental alternative. special thing about is that there
+	# no dependency between the two multiplications...
+	mov		\$`0xE1<<1`,%eax
+	mov		\$0xA040608020C0E000,%r10	# ((7..0)·0xE0)&0xff
+	mov		\$0x07,%r11d
+	movq		%rax,$T1
+	movq		%r10,$T2
+	movq		%r11,$T3		# borrow $T3
+	pand		$Xi,$T3
+	pshufb		$T3,$T2			# ($Xi&7)·0xE0
+	movq		%rax,$T3
+	pclmulqdq	\$0x00,$Xi,$T1		# ·(0xE1<<1)
+	pxor		$Xi,$T2
+	pslldq		\$15,$T2
+	paddd		$T2,$T2			# <<(64+56+1)
+	pxor		$T2,$Xi
+	pclmulqdq	\$0x01,$T3,$Xi
+	movdqa		.Lbswap_mask(%rip),$T3	# reload $T3
+	psrldq		\$1,$T1
+	pxor		$T1,$Xhi
+	pslldq		\$7,$Xi
+	pxor		$Xhi,$Xi
+___
+$code.=<<___;
+	pshufb		$T3,$Xi
+	movdqu		$Xi,($Xip)
+	ret
+.cfi_endproc
+.size	gcm_gmult_clmul,.-gcm_gmult_clmul
+___
+}
+
+{ my ($Xip,$Htbl,$inp,$len)=@_4args;
+  my ($Xln,$Xmn,$Xhn,$Hkey2,$HK) = map("%xmm$_",(3..7));
+  my ($T1,$T2,$T3)=map("%xmm$_",(8..10));
+
+$code.=<<___;
+.globl	gcm_ghash_clmul
+.type	gcm_ghash_clmul,\@abi-omnipotent
+.align	32
+gcm_ghash_clmul:
+.cfi_startproc
+.L_ghash_clmul:
+___
+$code.=<<___ if ($win64);
+	lea	-0x88(%rsp),%rax
+.LSEH_begin_gcm_ghash_clmul:
+	# I can't trust assembler to use specific encoding:-(
+	.byte	0x48,0x8d,0x60,0xe0		#lea	-0x20(%rax),%rsp
+	.byte	0x0f,0x29,0x70,0xe0		#movaps	%xmm6,-0x20(%rax)
+	.byte	0x0f,0x29,0x78,0xf0		#movaps	%xmm7,-0x10(%rax)
+	.byte	0x44,0x0f,0x29,0x00		#movaps	%xmm8,0(%rax)
+	.byte	0x44,0x0f,0x29,0x48,0x10	#movaps	%xmm9,0x10(%rax)
+	.byte	0x44,0x0f,0x29,0x50,0x20	#movaps	%xmm10,0x20(%rax)
+	.byte	0x44,0x0f,0x29,0x58,0x30	#movaps	%xmm11,0x30(%rax)
+	.byte	0x44,0x0f,0x29,0x60,0x40	#movaps	%xmm12,0x40(%rax)
+	.byte	0x44,0x0f,0x29,0x68,0x50	#movaps	%xmm13,0x50(%rax)
+	.byte	0x44,0x0f,0x29,0x70,0x60	#movaps	%xmm14,0x60(%rax)
+	.byte	0x44,0x0f,0x29,0x78,0x70	#movaps	%xmm15,0x70(%rax)
+___
+$code.=<<___;
+	movdqa		.Lbswap_mask(%rip),$T3
+
+	movdqu		($Xip),$Xi
+	movdqu		($Htbl),$Hkey
+	movdqu		0x20($Htbl),$HK
+	pshufb		$T3,$Xi
+
+	sub		\$0x10,$len
+	jz		.Lodd_tail
+
+	movdqu		0x10($Htbl),$Hkey2
+___
+if ($do4xaggr) {
+my ($Xl,$Xm,$Xh,$Hkey3,$Hkey4)=map("%xmm$_",(11..15));
+
+$code.=<<___;
+	mov		OPENSSL_ia32cap_P+4(%rip),%eax
+	cmp		\$0x30,$len
+	jb		.Lskip4x
+
+	and		\$`1<<26|1<<22`,%eax	# isolate MOVBE+XSAVE
+	cmp		\$`1<<22`,%eax		# check for MOVBE without XSAVE
+	je		.Lskip4x
+
+	sub		\$0x30,$len
+	mov		\$0xA040608020C0E000,%rax	# ((7..0)·0xE0)&0xff
+	movdqu		0x30($Htbl),$Hkey3
+	movdqu		0x40($Htbl),$Hkey4
+
+	#######
+	# Xi+4 =[(H*Ii+3) + (H^2*Ii+2) + (H^3*Ii+1) + H^4*(Ii+Xi)] mod P
+	#
+	movdqu		0x30($inp),$Xln
+	 movdqu		0x20($inp),$Xl
+	pshufb		$T3,$Xln
+	 pshufb		$T3,$Xl
+	movdqa		$Xln,$Xhn
+	pshufd		\$0b01001110,$Xln,$Xmn
+	pxor		$Xln,$Xmn
+	pclmulqdq	\$0x00,$Hkey,$Xln
+	pclmulqdq	\$0x11,$Hkey,$Xhn
+	pclmulqdq	\$0x00,$HK,$Xmn
+
+	movdqa		$Xl,$Xh
+	pshufd		\$0b01001110,$Xl,$Xm
+	pxor		$Xl,$Xm
+	pclmulqdq	\$0x00,$Hkey2,$Xl
+	pclmulqdq	\$0x11,$Hkey2,$Xh
+	pclmulqdq	\$0x10,$HK,$Xm
+	xorps		$Xl,$Xln
+	xorps		$Xh,$Xhn
+	movups		0x50($Htbl),$HK
+	xorps		$Xm,$Xmn
+
+	movdqu		0x10($inp),$Xl
+	 movdqu		0($inp),$T1
+	pshufb		$T3,$Xl
+	 pshufb		$T3,$T1
+	movdqa		$Xl,$Xh
+	pshufd		\$0b01001110,$Xl,$Xm
+	 pxor		$T1,$Xi
+	pxor		$Xl,$Xm
+	pclmulqdq	\$0x00,$Hkey3,$Xl
+	 movdqa		$Xi,$Xhi
+	 pshufd		\$0b01001110,$Xi,$T1
+	 pxor		$Xi,$T1
+	pclmulqdq	\$0x11,$Hkey3,$Xh
+	pclmulqdq	\$0x00,$HK,$Xm
+	xorps		$Xl,$Xln
+	xorps		$Xh,$Xhn
+
+	lea	0x40($inp),$inp
+	sub	\$0x40,$len
+	jc	.Ltail4x
+
+	jmp	.Lmod4_loop
+.align	32
+.Lmod4_loop:
+	pclmulqdq	\$0x00,$Hkey4,$Xi
+	xorps		$Xm,$Xmn
+	 movdqu		0x30($inp),$Xl
+	 pshufb		$T3,$Xl
+	pclmulqdq	\$0x11,$Hkey4,$Xhi
+	xorps		$Xln,$Xi
+	 movdqu		0x20($inp),$Xln
+	 movdqa		$Xl,$Xh
+	pclmulqdq	\$0x10,$HK,$T1
+	 pshufd		\$0b01001110,$Xl,$Xm
+	xorps		$Xhn,$Xhi
+	 pxor		$Xl,$Xm
+	 pshufb		$T3,$Xln
+	movups		0x20($Htbl),$HK
+	xorps		$Xmn,$T1
+	 pclmulqdq	\$0x00,$Hkey,$Xl
+	 pshufd		\$0b01001110,$Xln,$Xmn
+
+	pxor		$Xi,$T1			# aggregated Karatsuba post-processing
+	 movdqa		$Xln,$Xhn
+	pxor		$Xhi,$T1		#
+	 pxor		$Xln,$Xmn
+	movdqa		$T1,$T2			#
+	 pclmulqdq	\$0x11,$Hkey,$Xh
+	pslldq		\$8,$T1
+	psrldq		\$8,$T2			#
+	pxor		$T1,$Xi
+	movdqa		.L7_mask(%rip),$T1
+	pxor		$T2,$Xhi		#
+	movq		%rax,$T2
+
+	pand		$Xi,$T1			# 1st phase
+	pshufb		$T1,$T2			#
+	pxor		$Xi,$T2			#
+	 pclmulqdq	\$0x00,$HK,$Xm
+	psllq		\$57,$T2		#
+	movdqa		$T2,$T1			#
+	pslldq		\$8,$T2
+	 pclmulqdq	\$0x00,$Hkey2,$Xln
+	psrldq		\$8,$T1			#
+	pxor		$T2,$Xi
+	pxor		$T1,$Xhi		#
+	movdqu		0($inp),$T1
+
+	movdqa		$Xi,$T2			# 2nd phase
+	psrlq		\$1,$Xi
+	 pclmulqdq	\$0x11,$Hkey2,$Xhn
+	 xorps		$Xl,$Xln
+	 movdqu		0x10($inp),$Xl
+	 pshufb		$T3,$Xl
+	 pclmulqdq	\$0x10,$HK,$Xmn
+	 xorps		$Xh,$Xhn
+	 movups		0x50($Htbl),$HK
+	pshufb		$T3,$T1
+	pxor		$T2,$Xhi		#
+	pxor		$Xi,$T2
+	psrlq		\$5,$Xi
+
+	 movdqa		$Xl,$Xh
+	 pxor		$Xm,$Xmn
+	 pshufd		\$0b01001110,$Xl,$Xm
+	pxor		$T2,$Xi			#
+	pxor		$T1,$Xhi
+	 pxor		$Xl,$Xm
+	 pclmulqdq	\$0x00,$Hkey3,$Xl
+	psrlq		\$1,$Xi			#
+	pxor		$Xhi,$Xi		#
+	movdqa		$Xi,$Xhi
+	 pclmulqdq	\$0x11,$Hkey3,$Xh
+	 xorps		$Xl,$Xln
+	pshufd		\$0b01001110,$Xi,$T1
+	pxor		$Xi,$T1
+
+	 pclmulqdq	\$0x00,$HK,$Xm
+	 xorps		$Xh,$Xhn
+
+	lea	0x40($inp),$inp
+	sub	\$0x40,$len
+	jnc	.Lmod4_loop
+
+.Ltail4x:
+	pclmulqdq	\$0x00,$Hkey4,$Xi
+	pclmulqdq	\$0x11,$Hkey4,$Xhi
+	pclmulqdq	\$0x10,$HK,$T1
+	xorps		$Xm,$Xmn
+	xorps		$Xln,$Xi
+	xorps		$Xhn,$Xhi
+	pxor		$Xi,$Xhi		# aggregated Karatsuba post-processing
+	pxor		$Xmn,$T1
+
+	pxor		$Xhi,$T1		#
+	pxor		$Xi,$Xhi
+
+	movdqa		$T1,$T2			#
+	psrldq		\$8,$T1
+	pslldq		\$8,$T2			#
+	pxor		$T1,$Xhi
+	pxor		$T2,$Xi			#
+___
+	&reduction_alg9($Xhi,$Xi);
+$code.=<<___;
+	add	\$0x40,$len
+	jz	.Ldone
+	movdqu	0x20($Htbl),$HK
+	sub	\$0x10,$len
+	jz	.Lodd_tail
+.Lskip4x:
+___
+}
+$code.=<<___;
+	#######
+	# Xi+2 =[H*(Ii+1 + Xi+1)] mod P =
+	#	[(H*Ii+1) + (H*Xi+1)] mod P =
+	#	[(H*Ii+1) + H^2*(Ii+Xi)] mod P
+	#
+	movdqu		($inp),$T1		# Ii
+	movdqu		16($inp),$Xln		# Ii+1
+	pshufb		$T3,$T1
+	pshufb		$T3,$Xln
+	pxor		$T1,$Xi			# Ii+Xi
+
+	movdqa		$Xln,$Xhn
+	pshufd		\$0b01001110,$Xln,$Xmn
+	pxor		$Xln,$Xmn
+	pclmulqdq	\$0x00,$Hkey,$Xln
+	pclmulqdq	\$0x11,$Hkey,$Xhn
+	pclmulqdq	\$0x00,$HK,$Xmn
+
+	lea		32($inp),$inp		# i+=2
+	nop
+	sub		\$0x20,$len
+	jbe		.Leven_tail
+	nop
+	jmp		.Lmod_loop
+
+.align	32
+.Lmod_loop:
+	movdqa		$Xi,$Xhi
+	movdqa		$Xmn,$T1
+	pshufd		\$0b01001110,$Xi,$Xmn	#
+	pxor		$Xi,$Xmn		#
+
+	pclmulqdq	\$0x00,$Hkey2,$Xi
+	pclmulqdq	\$0x11,$Hkey2,$Xhi
+	pclmulqdq	\$0x10,$HK,$Xmn
+
+	pxor		$Xln,$Xi		# (H*Ii+1) + H^2*(Ii+Xi)
+	pxor		$Xhn,$Xhi
+	  movdqu	($inp),$T2		# Ii
+	pxor		$Xi,$T1			# aggregated Karatsuba post-processing
+	  pshufb	$T3,$T2
+	  movdqu	16($inp),$Xln		# Ii+1
+
+	pxor		$Xhi,$T1
+	  pxor		$T2,$Xhi		# "Ii+Xi", consume early
+	pxor		$T1,$Xmn
+	 pshufb		$T3,$Xln
+	movdqa		$Xmn,$T1		#
+	psrldq		\$8,$T1
+	pslldq		\$8,$Xmn		#
+	pxor		$T1,$Xhi
+	pxor		$Xmn,$Xi		#
+
+	movdqa		$Xln,$Xhn		#
+
+	  movdqa	$Xi,$T2			# 1st phase
+	  movdqa	$Xi,$T1
+	  psllq		\$5,$Xi
+	  pxor		$Xi,$T1			#
+	pclmulqdq	\$0x00,$Hkey,$Xln	#######
+	  psllq		\$1,$Xi
+	  pxor		$T1,$Xi			#
+	  psllq		\$57,$Xi		#
+	  movdqa	$Xi,$T1			#
+	  pslldq	\$8,$Xi
+	  psrldq	\$8,$T1			#
+	  pxor		$T2,$Xi
+	pshufd		\$0b01001110,$Xhn,$Xmn
+	  pxor		$T1,$Xhi		#
+	pxor		$Xhn,$Xmn		#
+
+	  movdqa	$Xi,$T2			# 2nd phase
+	  psrlq		\$1,$Xi
+	pclmulqdq	\$0x11,$Hkey,$Xhn	#######
+	  pxor		$T2,$Xhi		#
+	  pxor		$Xi,$T2
+	  psrlq		\$5,$Xi
+	  pxor		$T2,$Xi			#
+	lea		32($inp),$inp
+	  psrlq		\$1,$Xi			#
+	pclmulqdq	\$0x00,$HK,$Xmn		#######
+	  pxor		$Xhi,$Xi		#
+
+	sub		\$0x20,$len
+	ja		.Lmod_loop
+
+.Leven_tail:
+	 movdqa		$Xi,$Xhi
+	 movdqa		$Xmn,$T1
+	 pshufd		\$0b01001110,$Xi,$Xmn	#
+	 pxor		$Xi,$Xmn		#
+
+	pclmulqdq	\$0x00,$Hkey2,$Xi
+	pclmulqdq	\$0x11,$Hkey2,$Xhi
+	pclmulqdq	\$0x10,$HK,$Xmn
+
+	pxor		$Xln,$Xi		# (H*Ii+1) + H^2*(Ii+Xi)
+	pxor		$Xhn,$Xhi
+	pxor		$Xi,$T1
+	pxor		$Xhi,$T1
+	pxor		$T1,$Xmn
+	movdqa		$Xmn,$T1		#
+	psrldq		\$8,$T1
+	pslldq		\$8,$Xmn		#
+	pxor		$T1,$Xhi
+	pxor		$Xmn,$Xi		#
+___
+	&reduction_alg9	($Xhi,$Xi);
+$code.=<<___;
+	test		$len,$len
+	jnz		.Ldone
+
+.Lodd_tail:
+	movdqu		($inp),$T1		# Ii
+	pshufb		$T3,$T1
+	pxor		$T1,$Xi			# Ii+Xi
+___
+	&clmul64x64_T2	($Xhi,$Xi,$Hkey,$HK);	# H*(Ii+Xi)
+	&reduction_alg9	($Xhi,$Xi);
+$code.=<<___;
+.Ldone:
+	pshufb		$T3,$Xi
+	movdqu		$Xi,($Xip)
+___
+$code.=<<___ if ($win64);
+	movaps	(%rsp),%xmm6
+	movaps	0x10(%rsp),%xmm7
+	movaps	0x20(%rsp),%xmm8
+	movaps	0x30(%rsp),%xmm9
+	movaps	0x40(%rsp),%xmm10
+	movaps	0x50(%rsp),%xmm11
+	movaps	0x60(%rsp),%xmm12
+	movaps	0x70(%rsp),%xmm13
+	movaps	0x80(%rsp),%xmm14
+	movaps	0x90(%rsp),%xmm15
+	lea	0xa8(%rsp),%rsp
+.LSEH_end_gcm_ghash_clmul:
+___
+$code.=<<___;
+	ret
+.cfi_endproc
+.size	gcm_ghash_clmul,.-gcm_ghash_clmul
+___
+}
+
+$code.=<<___;
+.globl	gcm_init_avx
+.type	gcm_init_avx,\@abi-omnipotent
+.align	32
+gcm_init_avx:
+.cfi_startproc
+___
+if ($avx) {
+my ($Htbl,$Xip)=@_4args;
+my $HK="%xmm6";
+
+$code.=<<___ if ($win64);
+.LSEH_begin_gcm_init_avx:
+	# I can't trust assembler to use specific encoding:-(
+	.byte	0x48,0x83,0xec,0x18		#sub	$0x18,%rsp
+	.byte	0x0f,0x29,0x34,0x24		#movaps	%xmm6,(%rsp)
+___
+$code.=<<___;
+	vzeroupper
+
+	vmovdqu		($Xip),$Hkey
+	vpshufd		\$0b01001110,$Hkey,$Hkey	# dword swap
+
+	# <<1 twist
+	vpshufd		\$0b11111111,$Hkey,$T2	# broadcast uppermost dword
+	vpsrlq		\$63,$Hkey,$T1
+	vpsllq		\$1,$Hkey,$Hkey
+	vpxor		$T3,$T3,$T3		#
+	vpcmpgtd	$T2,$T3,$T3		# broadcast carry bit
+	vpslldq		\$8,$T1,$T1
+	vpor		$T1,$Hkey,$Hkey		# H<<=1
+
+	# magic reduction
+	vpand		.L0x1c2_polynomial(%rip),$T3,$T3
+	vpxor		$T3,$Hkey,$Hkey		# if(carry) H^=0x1c2_polynomial
+
+	vpunpckhqdq	$Hkey,$Hkey,$HK
+	vmovdqa		$Hkey,$Xi
+	vpxor		$Hkey,$HK,$HK
+	mov		\$4,%r10		# up to H^8
+	jmp		.Linit_start_avx
+___
+
+sub clmul64x64_avx {
+my ($Xhi,$Xi,$Hkey,$HK)=@_;
+
+if (!defined($HK)) {	$HK = $T2;
+$code.=<<___;
+	vpunpckhqdq	$Xi,$Xi,$T1
+	vpunpckhqdq	$Hkey,$Hkey,$T2
+	vpxor		$Xi,$T1,$T1		#
+	vpxor		$Hkey,$T2,$T2
+___
+} else {
+$code.=<<___;
+	vpunpckhqdq	$Xi,$Xi,$T1
+	vpxor		$Xi,$T1,$T1		#
+___
+}
+$code.=<<___;
+	vpclmulqdq	\$0x11,$Hkey,$Xi,$Xhi	#######
+	vpclmulqdq	\$0x00,$Hkey,$Xi,$Xi	#######
+	vpclmulqdq	\$0x00,$HK,$T1,$T1	#######
+	vpxor		$Xi,$Xhi,$T2		#
+	vpxor		$T2,$T1,$T1		#
+
+	vpslldq		\$8,$T1,$T2		#
+	vpsrldq		\$8,$T1,$T1
+	vpxor		$T2,$Xi,$Xi		#
+	vpxor		$T1,$Xhi,$Xhi
+___
+}
+
+sub reduction_avx {
+my ($Xhi,$Xi) = @_;
+
+$code.=<<___;
+	vpsllq		\$57,$Xi,$T1		# 1st phase
+	vpsllq		\$62,$Xi,$T2
+	vpxor		$T1,$T2,$T2		#
+	vpsllq		\$63,$Xi,$T1
+	vpxor		$T1,$T2,$T2		#
+	vpslldq		\$8,$T2,$T1		#
+	vpsrldq		\$8,$T2,$T2
+	vpxor		$T1,$Xi,$Xi		#
+	vpxor		$T2,$Xhi,$Xhi
+
+	vpsrlq		\$1,$Xi,$T2		# 2nd phase
+	vpxor		$Xi,$Xhi,$Xhi
+	vpxor		$T2,$Xi,$Xi		#
+	vpsrlq		\$5,$T2,$T2
+	vpxor		$T2,$Xi,$Xi		#
+	vpsrlq		\$1,$Xi,$Xi		#
+	vpxor		$Xhi,$Xi,$Xi		#
+___
+}
+
+$code.=<<___;
+.align	32
+.Linit_loop_avx:
+	vpalignr	\$8,$T1,$T2,$T3		# low part is H.lo^H.hi...
+	vmovdqu		$T3,-0x10($Htbl)	# save Karatsuba "salt"
+___
+	&clmul64x64_avx	($Xhi,$Xi,$Hkey,$HK);	# calculate H^3,5,7
+	&reduction_avx	($Xhi,$Xi);
+$code.=<<___;
+.Linit_start_avx:
+	vmovdqa		$Xi,$T3
+___
+	&clmul64x64_avx	($Xhi,$Xi,$Hkey,$HK);	# calculate H^2,4,6,8
+	&reduction_avx	($Xhi,$Xi);
+$code.=<<___;
+	vpshufd		\$0b01001110,$T3,$T1
+	vpshufd		\$0b01001110,$Xi,$T2
+	vpxor		$T3,$T1,$T1		# Karatsuba pre-processing
+	vmovdqu		$T3,0x00($Htbl)		# save H^1,3,5,7
+	vpxor		$Xi,$T2,$T2		# Karatsuba pre-processing
+	vmovdqu		$Xi,0x10($Htbl)		# save H^2,4,6,8
+	lea		0x30($Htbl),$Htbl
+	sub		\$1,%r10
+	jnz		.Linit_loop_avx
+
+	vpalignr	\$8,$T2,$T1,$T3		# last "salt" is flipped
+	vmovdqu		$T3,-0x10($Htbl)
+
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	movaps	(%rsp),%xmm6
+	lea	0x18(%rsp),%rsp
+.LSEH_end_gcm_init_avx:
+___
+$code.=<<___;
+	ret
+.cfi_endproc
+.size	gcm_init_avx,.-gcm_init_avx
+___
+} else {
+$code.=<<___;
+	jmp	.L_init_clmul
+.size	gcm_init_avx,.-gcm_init_avx
+___
+}
+
+$code.=<<___;
+.globl	gcm_gmult_avx
+.type	gcm_gmult_avx,\@abi-omnipotent
+.align	32
+gcm_gmult_avx:
+.cfi_startproc
+	jmp	.L_gmult_clmul
+.cfi_endproc
+.size	gcm_gmult_avx,.-gcm_gmult_avx
+___
+
+$code.=<<___;
+.globl	gcm_ghash_avx
+.type	gcm_ghash_avx,\@abi-omnipotent
+.align	32
+gcm_ghash_avx:
+.cfi_startproc
+___
+if ($avx) {
+my ($Xip,$Htbl,$inp,$len)=@_4args;
+my ($Xlo,$Xhi,$Xmi,
+    $Zlo,$Zhi,$Zmi,
+    $Hkey,$HK,$T1,$T2,
+    $Xi,$Xo,$Tred,$bswap,$Ii,$Ij) = map("%xmm$_",(0..15));
+
+$code.=<<___ if ($win64);
+	lea	-0x88(%rsp),%rax
+.LSEH_begin_gcm_ghash_avx:
+	# I can't trust assembler to use specific encoding:-(
+	.byte	0x48,0x8d,0x60,0xe0		#lea	-0x20(%rax),%rsp
+	.byte	0x0f,0x29,0x70,0xe0		#movaps	%xmm6,-0x20(%rax)
+	.byte	0x0f,0x29,0x78,0xf0		#movaps	%xmm7,-0x10(%rax)
+	.byte	0x44,0x0f,0x29,0x00		#movaps	%xmm8,0(%rax)
+	.byte	0x44,0x0f,0x29,0x48,0x10	#movaps	%xmm9,0x10(%rax)
+	.byte	0x44,0x0f,0x29,0x50,0x20	#movaps	%xmm10,0x20(%rax)
+	.byte	0x44,0x0f,0x29,0x58,0x30	#movaps	%xmm11,0x30(%rax)
+	.byte	0x44,0x0f,0x29,0x60,0x40	#movaps	%xmm12,0x40(%rax)
+	.byte	0x44,0x0f,0x29,0x68,0x50	#movaps	%xmm13,0x50(%rax)
+	.byte	0x44,0x0f,0x29,0x70,0x60	#movaps	%xmm14,0x60(%rax)
+	.byte	0x44,0x0f,0x29,0x78,0x70	#movaps	%xmm15,0x70(%rax)
+___
+$code.=<<___;
+	vzeroupper
+
+	vmovdqu		($Xip),$Xi		# load $Xi
+	lea		.L0x1c2_polynomial(%rip),%r10
+	lea		0x40($Htbl),$Htbl	# size optimization
+	vmovdqu		.Lbswap_mask(%rip),$bswap
+	vpshufb		$bswap,$Xi,$Xi
+	cmp		\$0x80,$len
+	jb		.Lshort_avx
+	sub		\$0x80,$len
+
+	vmovdqu		0x70($inp),$Ii		# I[7]
+	vmovdqu		0x00-0x40($Htbl),$Hkey	# $Hkey^1
+	vpshufb		$bswap,$Ii,$Ii
+	vmovdqu		0x20-0x40($Htbl),$HK
+
+	vpunpckhqdq	$Ii,$Ii,$T2
+	 vmovdqu	0x60($inp),$Ij		# I[6]
+	vpclmulqdq	\$0x00,$Hkey,$Ii,$Xlo
+	vpxor		$Ii,$T2,$T2
+	 vpshufb	$bswap,$Ij,$Ij
+	vpclmulqdq	\$0x11,$Hkey,$Ii,$Xhi
+	 vmovdqu	0x10-0x40($Htbl),$Hkey	# $Hkey^2
+	 vpunpckhqdq	$Ij,$Ij,$T1
+	 vmovdqu	0x50($inp),$Ii		# I[5]
+	vpclmulqdq	\$0x00,$HK,$T2,$Xmi
+	 vpxor		$Ij,$T1,$T1
+
+	 vpshufb	$bswap,$Ii,$Ii
+	vpclmulqdq	\$0x00,$Hkey,$Ij,$Zlo
+	 vpunpckhqdq	$Ii,$Ii,$T2
+	vpclmulqdq	\$0x11,$Hkey,$Ij,$Zhi
+	 vmovdqu	0x30-0x40($Htbl),$Hkey	# $Hkey^3
+	 vpxor		$Ii,$T2,$T2
+	 vmovdqu	0x40($inp),$Ij		# I[4]
+	vpclmulqdq	\$0x10,$HK,$T1,$Zmi
+	 vmovdqu	0x50-0x40($Htbl),$HK
+
+	 vpshufb	$bswap,$Ij,$Ij
+	vpxor		$Xlo,$Zlo,$Zlo
+	vpclmulqdq	\$0x00,$Hkey,$Ii,$Xlo
+	vpxor		$Xhi,$Zhi,$Zhi
+	 vpunpckhqdq	$Ij,$Ij,$T1
+	vpclmulqdq	\$0x11,$Hkey,$Ii,$Xhi
+	 vmovdqu	0x40-0x40($Htbl),$Hkey	# $Hkey^4
+	vpxor		$Xmi,$Zmi,$Zmi
+	vpclmulqdq	\$0x00,$HK,$T2,$Xmi
+	 vpxor		$Ij,$T1,$T1
+
+	 vmovdqu	0x30($inp),$Ii		# I[3]
+	vpxor		$Zlo,$Xlo,$Xlo
+	vpclmulqdq	\$0x00,$Hkey,$Ij,$Zlo
+	vpxor		$Zhi,$Xhi,$Xhi
+	 vpshufb	$bswap,$Ii,$Ii
+	vpclmulqdq	\$0x11,$Hkey,$Ij,$Zhi
+	 vmovdqu	0x60-0x40($Htbl),$Hkey	# $Hkey^5
+	vpxor		$Zmi,$Xmi,$Xmi
+	 vpunpckhqdq	$Ii,$Ii,$T2
+	vpclmulqdq	\$0x10,$HK,$T1,$Zmi
+	 vmovdqu	0x80-0x40($Htbl),$HK
+	 vpxor		$Ii,$T2,$T2
+
+	 vmovdqu	0x20($inp),$Ij		# I[2]
+	vpxor		$Xlo,$Zlo,$Zlo
+	vpclmulqdq	\$0x00,$Hkey,$Ii,$Xlo
+	vpxor		$Xhi,$Zhi,$Zhi
+	 vpshufb	$bswap,$Ij,$Ij
+	vpclmulqdq	\$0x11,$Hkey,$Ii,$Xhi
+	 vmovdqu	0x70-0x40($Htbl),$Hkey	# $Hkey^6
+	vpxor		$Xmi,$Zmi,$Zmi
+	 vpunpckhqdq	$Ij,$Ij,$T1
+	vpclmulqdq	\$0x00,$HK,$T2,$Xmi
+	 vpxor		$Ij,$T1,$T1
+
+	 vmovdqu	0x10($inp),$Ii		# I[1]
+	vpxor		$Zlo,$Xlo,$Xlo
+	vpclmulqdq	\$0x00,$Hkey,$Ij,$Zlo
+	vpxor		$Zhi,$Xhi,$Xhi
+	 vpshufb	$bswap,$Ii,$Ii
+	vpclmulqdq	\$0x11,$Hkey,$Ij,$Zhi
+	 vmovdqu	0x90-0x40($Htbl),$Hkey	# $Hkey^7
+	vpxor		$Zmi,$Xmi,$Xmi
+	 vpunpckhqdq	$Ii,$Ii,$T2
+	vpclmulqdq	\$0x10,$HK,$T1,$Zmi
+	 vmovdqu	0xb0-0x40($Htbl),$HK
+	 vpxor		$Ii,$T2,$T2
+
+	 vmovdqu	($inp),$Ij		# I[0]
+	vpxor		$Xlo,$Zlo,$Zlo
+	vpclmulqdq	\$0x00,$Hkey,$Ii,$Xlo
+	vpxor		$Xhi,$Zhi,$Zhi
+	 vpshufb	$bswap,$Ij,$Ij
+	vpclmulqdq	\$0x11,$Hkey,$Ii,$Xhi
+	 vmovdqu	0xa0-0x40($Htbl),$Hkey	# $Hkey^8
+	vpxor		$Xmi,$Zmi,$Zmi
+	vpclmulqdq	\$0x10,$HK,$T2,$Xmi
+
+	lea		0x80($inp),$inp
+	cmp		\$0x80,$len
+	jb		.Ltail_avx
+
+	vpxor		$Xi,$Ij,$Ij		# accumulate $Xi
+	sub		\$0x80,$len
+	jmp		.Loop8x_avx
+
+.align	32
+.Loop8x_avx:
+	vpunpckhqdq	$Ij,$Ij,$T1
+	 vmovdqu	0x70($inp),$Ii		# I[7]
+	vpxor		$Xlo,$Zlo,$Zlo
+	vpxor		$Ij,$T1,$T1
+	vpclmulqdq	\$0x00,$Hkey,$Ij,$Xi
+	 vpshufb	$bswap,$Ii,$Ii
+	vpxor		$Xhi,$Zhi,$Zhi
+	vpclmulqdq	\$0x11,$Hkey,$Ij,$Xo
+	 vmovdqu	0x00-0x40($Htbl),$Hkey	# $Hkey^1
+	 vpunpckhqdq	$Ii,$Ii,$T2
+	vpxor		$Xmi,$Zmi,$Zmi
+	vpclmulqdq	\$0x00,$HK,$T1,$Tred
+	 vmovdqu	0x20-0x40($Htbl),$HK
+	 vpxor		$Ii,$T2,$T2
+
+	  vmovdqu	0x60($inp),$Ij		# I[6]
+	 vpclmulqdq	\$0x00,$Hkey,$Ii,$Xlo
+	vpxor		$Zlo,$Xi,$Xi		# collect result
+	  vpshufb	$bswap,$Ij,$Ij
+	 vpclmulqdq	\$0x11,$Hkey,$Ii,$Xhi
+	vxorps		$Zhi,$Xo,$Xo
+	  vmovdqu	0x10-0x40($Htbl),$Hkey	# $Hkey^2
+	 vpunpckhqdq	$Ij,$Ij,$T1
+	 vpclmulqdq	\$0x00,$HK,  $T2,$Xmi
+	vpxor		$Zmi,$Tred,$Tred
+	 vxorps		$Ij,$T1,$T1
+
+	  vmovdqu	0x50($inp),$Ii		# I[5]
+	vpxor		$Xi,$Tred,$Tred		# aggregated Karatsuba post-processing
+	 vpclmulqdq	\$0x00,$Hkey,$Ij,$Zlo
+	vpxor		$Xo,$Tred,$Tred
+	vpslldq		\$8,$Tred,$T2
+	 vpxor		$Xlo,$Zlo,$Zlo
+	 vpclmulqdq	\$0x11,$Hkey,$Ij,$Zhi
+	vpsrldq		\$8,$Tred,$Tred
+	vpxor		$T2, $Xi, $Xi
+	  vmovdqu	0x30-0x40($Htbl),$Hkey	# $Hkey^3
+	  vpshufb	$bswap,$Ii,$Ii
+	vxorps		$Tred,$Xo, $Xo
+	 vpxor		$Xhi,$Zhi,$Zhi
+	 vpunpckhqdq	$Ii,$Ii,$T2
+	 vpclmulqdq	\$0x10,$HK,  $T1,$Zmi
+	  vmovdqu	0x50-0x40($Htbl),$HK
+	 vpxor		$Ii,$T2,$T2
+	 vpxor		$Xmi,$Zmi,$Zmi
+
+	  vmovdqu	0x40($inp),$Ij		# I[4]
+	vpalignr	\$8,$Xi,$Xi,$Tred	# 1st phase
+	 vpclmulqdq	\$0x00,$Hkey,$Ii,$Xlo
+	  vpshufb	$bswap,$Ij,$Ij
+	 vpxor		$Zlo,$Xlo,$Xlo
+	 vpclmulqdq	\$0x11,$Hkey,$Ii,$Xhi
+	  vmovdqu	0x40-0x40($Htbl),$Hkey	# $Hkey^4
+	 vpunpckhqdq	$Ij,$Ij,$T1
+	 vpxor		$Zhi,$Xhi,$Xhi
+	 vpclmulqdq	\$0x00,$HK,  $T2,$Xmi
+	 vxorps		$Ij,$T1,$T1
+	 vpxor		$Zmi,$Xmi,$Xmi
+
+	  vmovdqu	0x30($inp),$Ii		# I[3]
+	vpclmulqdq	\$0x10,(%r10),$Xi,$Xi
+	 vpclmulqdq	\$0x00,$Hkey,$Ij,$Zlo
+	  vpshufb	$bswap,$Ii,$Ii
+	 vpxor		$Xlo,$Zlo,$Zlo
+	 vpclmulqdq	\$0x11,$Hkey,$Ij,$Zhi
+	  vmovdqu	0x60-0x40($Htbl),$Hkey	# $Hkey^5
+	 vpunpckhqdq	$Ii,$Ii,$T2
+	 vpxor		$Xhi,$Zhi,$Zhi
+	 vpclmulqdq	\$0x10,$HK,  $T1,$Zmi
+	  vmovdqu	0x80-0x40($Htbl),$HK
+	 vpxor		$Ii,$T2,$T2
+	 vpxor		$Xmi,$Zmi,$Zmi
+
+	  vmovdqu	0x20($inp),$Ij		# I[2]
+	 vpclmulqdq	\$0x00,$Hkey,$Ii,$Xlo
+	  vpshufb	$bswap,$Ij,$Ij
+	 vpxor		$Zlo,$Xlo,$Xlo
+	 vpclmulqdq	\$0x11,$Hkey,$Ii,$Xhi
+	  vmovdqu	0x70-0x40($Htbl),$Hkey	# $Hkey^6
+	 vpunpckhqdq	$Ij,$Ij,$T1
+	 vpxor		$Zhi,$Xhi,$Xhi
+	 vpclmulqdq	\$0x00,$HK,  $T2,$Xmi
+	 vpxor		$Ij,$T1,$T1
+	 vpxor		$Zmi,$Xmi,$Xmi
+	vxorps		$Tred,$Xi,$Xi
+
+	  vmovdqu	0x10($inp),$Ii		# I[1]
+	vpalignr	\$8,$Xi,$Xi,$Tred	# 2nd phase
+	 vpclmulqdq	\$0x00,$Hkey,$Ij,$Zlo
+	  vpshufb	$bswap,$Ii,$Ii
+	 vpxor		$Xlo,$Zlo,$Zlo
+	 vpclmulqdq	\$0x11,$Hkey,$Ij,$Zhi
+	  vmovdqu	0x90-0x40($Htbl),$Hkey	# $Hkey^7
+	vpclmulqdq	\$0x10,(%r10),$Xi,$Xi
+	vxorps		$Xo,$Tred,$Tred
+	 vpunpckhqdq	$Ii,$Ii,$T2
+	 vpxor		$Xhi,$Zhi,$Zhi
+	 vpclmulqdq	\$0x10,$HK,  $T1,$Zmi
+	  vmovdqu	0xb0-0x40($Htbl),$HK
+	 vpxor		$Ii,$T2,$T2
+	 vpxor		$Xmi,$Zmi,$Zmi
+
+	  vmovdqu	($inp),$Ij		# I[0]
+	 vpclmulqdq	\$0x00,$Hkey,$Ii,$Xlo
+	  vpshufb	$bswap,$Ij,$Ij
+	 vpclmulqdq	\$0x11,$Hkey,$Ii,$Xhi
+	  vmovdqu	0xa0-0x40($Htbl),$Hkey	# $Hkey^8
+	vpxor		$Tred,$Ij,$Ij
+	 vpclmulqdq	\$0x10,$HK,  $T2,$Xmi
+	vpxor		$Xi,$Ij,$Ij		# accumulate $Xi
+
+	lea		0x80($inp),$inp
+	sub		\$0x80,$len
+	jnc		.Loop8x_avx
+
+	add		\$0x80,$len
+	jmp		.Ltail_no_xor_avx
+
+.align	32
+.Lshort_avx:
+	vmovdqu		-0x10($inp,$len),$Ii	# very last word
+	lea		($inp,$len),$inp
+	vmovdqu		0x00-0x40($Htbl),$Hkey	# $Hkey^1
+	vmovdqu		0x20-0x40($Htbl),$HK
+	vpshufb		$bswap,$Ii,$Ij
+
+	vmovdqa		$Xlo,$Zlo		# subtle way to zero $Zlo,
+	vmovdqa		$Xhi,$Zhi		# $Zhi and
+	vmovdqa		$Xmi,$Zmi		# $Zmi
+	sub		\$0x10,$len
+	jz		.Ltail_avx
+
+	vpunpckhqdq	$Ij,$Ij,$T1
+	vpxor		$Xlo,$Zlo,$Zlo
+	vpclmulqdq	\$0x00,$Hkey,$Ij,$Xlo
+	vpxor		$Ij,$T1,$T1
+	 vmovdqu	-0x20($inp),$Ii
+	vpxor		$Xhi,$Zhi,$Zhi
+	vpclmulqdq	\$0x11,$Hkey,$Ij,$Xhi
+	vmovdqu		0x10-0x40($Htbl),$Hkey	# $Hkey^2
+	 vpshufb	$bswap,$Ii,$Ij
+	vpxor		$Xmi,$Zmi,$Zmi
+	vpclmulqdq	\$0x00,$HK,$T1,$Xmi
+	vpsrldq		\$8,$HK,$HK
+	sub		\$0x10,$len
+	jz		.Ltail_avx
+
+	vpunpckhqdq	$Ij,$Ij,$T1
+	vpxor		$Xlo,$Zlo,$Zlo
+	vpclmulqdq	\$0x00,$Hkey,$Ij,$Xlo
+	vpxor		$Ij,$T1,$T1
+	 vmovdqu	-0x30($inp),$Ii
+	vpxor		$Xhi,$Zhi,$Zhi
+	vpclmulqdq	\$0x11,$Hkey,$Ij,$Xhi
+	vmovdqu		0x30-0x40($Htbl),$Hkey	# $Hkey^3
+	 vpshufb	$bswap,$Ii,$Ij
+	vpxor		$Xmi,$Zmi,$Zmi
+	vpclmulqdq	\$0x00,$HK,$T1,$Xmi
+	vmovdqu		0x50-0x40($Htbl),$HK
+	sub		\$0x10,$len
+	jz		.Ltail_avx
+
+	vpunpckhqdq	$Ij,$Ij,$T1
+	vpxor		$Xlo,$Zlo,$Zlo
+	vpclmulqdq	\$0x00,$Hkey,$Ij,$Xlo
+	vpxor		$Ij,$T1,$T1
+	 vmovdqu	-0x40($inp),$Ii
+	vpxor		$Xhi,$Zhi,$Zhi
+	vpclmulqdq	\$0x11,$Hkey,$Ij,$Xhi
+	vmovdqu		0x40-0x40($Htbl),$Hkey	# $Hkey^4
+	 vpshufb	$bswap,$Ii,$Ij
+	vpxor		$Xmi,$Zmi,$Zmi
+	vpclmulqdq	\$0x00,$HK,$T1,$Xmi
+	vpsrldq		\$8,$HK,$HK
+	sub		\$0x10,$len
+	jz		.Ltail_avx
+
+	vpunpckhqdq	$Ij,$Ij,$T1
+	vpxor		$Xlo,$Zlo,$Zlo
+	vpclmulqdq	\$0x00,$Hkey,$Ij,$Xlo
+	vpxor		$Ij,$T1,$T1
+	 vmovdqu	-0x50($inp),$Ii
+	vpxor		$Xhi,$Zhi,$Zhi
+	vpclmulqdq	\$0x11,$Hkey,$Ij,$Xhi
+	vmovdqu		0x60-0x40($Htbl),$Hkey	# $Hkey^5
+	 vpshufb	$bswap,$Ii,$Ij
+	vpxor		$Xmi,$Zmi,$Zmi
+	vpclmulqdq	\$0x00,$HK,$T1,$Xmi
+	vmovdqu		0x80-0x40($Htbl),$HK
+	sub		\$0x10,$len
+	jz		.Ltail_avx
+
+	vpunpckhqdq	$Ij,$Ij,$T1
+	vpxor		$Xlo,$Zlo,$Zlo
+	vpclmulqdq	\$0x00,$Hkey,$Ij,$Xlo
+	vpxor		$Ij,$T1,$T1
+	 vmovdqu	-0x60($inp),$Ii
+	vpxor		$Xhi,$Zhi,$Zhi
+	vpclmulqdq	\$0x11,$Hkey,$Ij,$Xhi
+	vmovdqu		0x70-0x40($Htbl),$Hkey	# $Hkey^6
+	 vpshufb	$bswap,$Ii,$Ij
+	vpxor		$Xmi,$Zmi,$Zmi
+	vpclmulqdq	\$0x00,$HK,$T1,$Xmi
+	vpsrldq		\$8,$HK,$HK
+	sub		\$0x10,$len
+	jz		.Ltail_avx
+
+	vpunpckhqdq	$Ij,$Ij,$T1
+	vpxor		$Xlo,$Zlo,$Zlo
+	vpclmulqdq	\$0x00,$Hkey,$Ij,$Xlo
+	vpxor		$Ij,$T1,$T1
+	 vmovdqu	-0x70($inp),$Ii
+	vpxor		$Xhi,$Zhi,$Zhi
+	vpclmulqdq	\$0x11,$Hkey,$Ij,$Xhi
+	vmovdqu		0x90-0x40($Htbl),$Hkey	# $Hkey^7
+	 vpshufb	$bswap,$Ii,$Ij
+	vpxor		$Xmi,$Zmi,$Zmi
+	vpclmulqdq	\$0x00,$HK,$T1,$Xmi
+	vmovq		0xb8-0x40($Htbl),$HK
+	sub		\$0x10,$len
+	jmp		.Ltail_avx
+
+.align	32
+.Ltail_avx:
+	vpxor		$Xi,$Ij,$Ij		# accumulate $Xi
+.Ltail_no_xor_avx:
+	vpunpckhqdq	$Ij,$Ij,$T1
+	vpxor		$Xlo,$Zlo,$Zlo
+	vpclmulqdq	\$0x00,$Hkey,$Ij,$Xlo
+	vpxor		$Ij,$T1,$T1
+	vpxor		$Xhi,$Zhi,$Zhi
+	vpclmulqdq	\$0x11,$Hkey,$Ij,$Xhi
+	vpxor		$Xmi,$Zmi,$Zmi
+	vpclmulqdq	\$0x00,$HK,$T1,$Xmi
+
+	vmovdqu		(%r10),$Tred
+
+	vpxor		$Xlo,$Zlo,$Xi
+	vpxor		$Xhi,$Zhi,$Xo
+	vpxor		$Xmi,$Zmi,$Zmi
+
+	vpxor		$Xi, $Zmi,$Zmi		# aggregated Karatsuba post-processing
+	vpxor		$Xo, $Zmi,$Zmi
+	vpslldq		\$8, $Zmi,$T2
+	vpsrldq		\$8, $Zmi,$Zmi
+	vpxor		$T2, $Xi, $Xi
+	vpxor		$Zmi,$Xo, $Xo
+
+	vpclmulqdq	\$0x10,$Tred,$Xi,$T2	# 1st phase
+	vpalignr	\$8,$Xi,$Xi,$Xi
+	vpxor		$T2,$Xi,$Xi
+
+	vpclmulqdq	\$0x10,$Tred,$Xi,$T2	# 2nd phase
+	vpalignr	\$8,$Xi,$Xi,$Xi
+	vpxor		$Xo,$Xi,$Xi
+	vpxor		$T2,$Xi,$Xi
+
+	cmp		\$0,$len
+	jne		.Lshort_avx
+
+	vpshufb		$bswap,$Xi,$Xi
+	vmovdqu		$Xi,($Xip)
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	movaps	(%rsp),%xmm6
+	movaps	0x10(%rsp),%xmm7
+	movaps	0x20(%rsp),%xmm8
+	movaps	0x30(%rsp),%xmm9
+	movaps	0x40(%rsp),%xmm10
+	movaps	0x50(%rsp),%xmm11
+	movaps	0x60(%rsp),%xmm12
+	movaps	0x70(%rsp),%xmm13
+	movaps	0x80(%rsp),%xmm14
+	movaps	0x90(%rsp),%xmm15
+	lea	0xa8(%rsp),%rsp
+.LSEH_end_gcm_ghash_avx:
+___
+$code.=<<___;
+	ret
+.cfi_endproc
+.size	gcm_ghash_avx,.-gcm_ghash_avx
+___
+} else {
+$code.=<<___;
+	jmp	.L_ghash_clmul
+.size	gcm_ghash_avx,.-gcm_ghash_avx
+___
+}
+
+$code.=<<___;
+.align	64
+.Lbswap_mask:
+	.byte	15,14,13,12,11,10,9,8,7,6,5,4,3,2,1,0
+.L0x1c2_polynomial:
+	.byte	1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0xc2
+.L7_mask:
+	.long	7,0,7,0
+.L7_mask_poly:
+	.long	7,0,`0xE1<<1`,0
+.align	64
+.type	.Lrem_4bit,\@object
+.Lrem_4bit:
+	.long	0,`0x0000<<16`,0,`0x1C20<<16`,0,`0x3840<<16`,0,`0x2460<<16`
+	.long	0,`0x7080<<16`,0,`0x6CA0<<16`,0,`0x48C0<<16`,0,`0x54E0<<16`
+	.long	0,`0xE100<<16`,0,`0xFD20<<16`,0,`0xD940<<16`,0,`0xC560<<16`
+	.long	0,`0x9180<<16`,0,`0x8DA0<<16`,0,`0xA9C0<<16`,0,`0xB5E0<<16`
+.type	.Lrem_8bit,\@object
+.Lrem_8bit:
+	.value	0x0000,0x01C2,0x0384,0x0246,0x0708,0x06CA,0x048C,0x054E
+	.value	0x0E10,0x0FD2,0x0D94,0x0C56,0x0918,0x08DA,0x0A9C,0x0B5E
+	.value	0x1C20,0x1DE2,0x1FA4,0x1E66,0x1B28,0x1AEA,0x18AC,0x196E
+	.value	0x1230,0x13F2,0x11B4,0x1076,0x1538,0x14FA,0x16BC,0x177E
+	.value	0x3840,0x3982,0x3BC4,0x3A06,0x3F48,0x3E8A,0x3CCC,0x3D0E
+	.value	0x3650,0x3792,0x35D4,0x3416,0x3158,0x309A,0x32DC,0x331E
+	.value	0x2460,0x25A2,0x27E4,0x2626,0x2368,0x22AA,0x20EC,0x212E
+	.value	0x2A70,0x2BB2,0x29F4,0x2836,0x2D78,0x2CBA,0x2EFC,0x2F3E
+	.value	0x7080,0x7142,0x7304,0x72C6,0x7788,0x764A,0x740C,0x75CE
+	.value	0x7E90,0x7F52,0x7D14,0x7CD6,0x7998,0x785A,0x7A1C,0x7BDE
+	.value	0x6CA0,0x6D62,0x6F24,0x6EE6,0x6BA8,0x6A6A,0x682C,0x69EE
+	.value	0x62B0,0x6372,0x6134,0x60F6,0x65B8,0x647A,0x663C,0x67FE
+	.value	0x48C0,0x4902,0x4B44,0x4A86,0x4FC8,0x4E0A,0x4C4C,0x4D8E
+	.value	0x46D0,0x4712,0x4554,0x4496,0x41D8,0x401A,0x425C,0x439E
+	.value	0x54E0,0x5522,0x5764,0x56A6,0x53E8,0x522A,0x506C,0x51AE
+	.value	0x5AF0,0x5B32,0x5974,0x58B6,0x5DF8,0x5C3A,0x5E7C,0x5FBE
+	.value	0xE100,0xE0C2,0xE284,0xE346,0xE608,0xE7CA,0xE58C,0xE44E
+	.value	0xEF10,0xEED2,0xEC94,0xED56,0xE818,0xE9DA,0xEB9C,0xEA5E
+	.value	0xFD20,0xFCE2,0xFEA4,0xFF66,0xFA28,0xFBEA,0xF9AC,0xF86E
+	.value	0xF330,0xF2F2,0xF0B4,0xF176,0xF438,0xF5FA,0xF7BC,0xF67E
+	.value	0xD940,0xD882,0xDAC4,0xDB06,0xDE48,0xDF8A,0xDDCC,0xDC0E
+	.value	0xD750,0xD692,0xD4D4,0xD516,0xD058,0xD19A,0xD3DC,0xD21E
+	.value	0xC560,0xC4A2,0xC6E4,0xC726,0xC268,0xC3AA,0xC1EC,0xC02E
+	.value	0xCB70,0xCAB2,0xC8F4,0xC936,0xCC78,0xCDBA,0xCFFC,0xCE3E
+	.value	0x9180,0x9042,0x9204,0x93C6,0x9688,0x974A,0x950C,0x94CE
+	.value	0x9F90,0x9E52,0x9C14,0x9DD6,0x9898,0x995A,0x9B1C,0x9ADE
+	.value	0x8DA0,0x8C62,0x8E24,0x8FE6,0x8AA8,0x8B6A,0x892C,0x88EE
+	.value	0x83B0,0x8272,0x8034,0x81F6,0x84B8,0x857A,0x873C,0x86FE
+	.value	0xA9C0,0xA802,0xAA44,0xAB86,0xAEC8,0xAF0A,0xAD4C,0xAC8E
+	.value	0xA7D0,0xA612,0xA454,0xA596,0xA0D8,0xA11A,0xA35C,0xA29E
+	.value	0xB5E0,0xB422,0xB664,0xB7A6,0xB2E8,0xB32A,0xB16C,0xB0AE
+	.value	0xBBF0,0xBA32,0xB874,0xB9B6,0xBCF8,0xBD3A,0xBF7C,0xBEBE
+
+.asciz	"GHASH for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+.align	64
+___
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	se_handler,\@abi-omnipotent
+.align	16
+se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lin_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lin_prologue
+
+	lea	48+280(%rax),%rax	# adjust "rsp"
+
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+.Lin_prologue:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$`1232/8`,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	se_handler,.-se_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_gcm_gmult_4bit
+	.rva	.LSEH_end_gcm_gmult_4bit
+	.rva	.LSEH_info_gcm_gmult_4bit
+
+	.rva	.LSEH_begin_gcm_ghash_4bit
+	.rva	.LSEH_end_gcm_ghash_4bit
+	.rva	.LSEH_info_gcm_ghash_4bit
+
+	.rva	.LSEH_begin_gcm_init_clmul
+	.rva	.LSEH_end_gcm_init_clmul
+	.rva	.LSEH_info_gcm_init_clmul
+
+	.rva	.LSEH_begin_gcm_ghash_clmul
+	.rva	.LSEH_end_gcm_ghash_clmul
+	.rva	.LSEH_info_gcm_ghash_clmul
+___
+$code.=<<___	if ($avx);
+	.rva	.LSEH_begin_gcm_init_avx
+	.rva	.LSEH_end_gcm_init_avx
+	.rva	.LSEH_info_gcm_init_clmul
+
+	.rva	.LSEH_begin_gcm_ghash_avx
+	.rva	.LSEH_end_gcm_ghash_avx
+	.rva	.LSEH_info_gcm_ghash_clmul
+___
+$code.=<<___;
+.section	.xdata
+.align	8
+.LSEH_info_gcm_gmult_4bit:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lgmult_prologue,.Lgmult_epilogue	# HandlerData
+.LSEH_info_gcm_ghash_4bit:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lghash_prologue,.Lghash_epilogue	# HandlerData
+.LSEH_info_gcm_init_clmul:
+	.byte	0x01,0x08,0x03,0x00
+	.byte	0x08,0x68,0x00,0x00	#movaps	0x00(rsp),xmm6
+	.byte	0x04,0x22,0x00,0x00	#sub	rsp,0x18
+.LSEH_info_gcm_ghash_clmul:
+	.byte	0x01,0x33,0x16,0x00
+	.byte	0x33,0xf8,0x09,0x00	#movaps 0x90(rsp),xmm15
+	.byte	0x2e,0xe8,0x08,0x00	#movaps 0x80(rsp),xmm14
+	.byte	0x29,0xd8,0x07,0x00	#movaps 0x70(rsp),xmm13
+	.byte	0x24,0xc8,0x06,0x00	#movaps 0x60(rsp),xmm12
+	.byte	0x1f,0xb8,0x05,0x00	#movaps 0x50(rsp),xmm11
+	.byte	0x1a,0xa8,0x04,0x00	#movaps 0x40(rsp),xmm10
+	.byte	0x15,0x98,0x03,0x00	#movaps 0x30(rsp),xmm9
+	.byte	0x10,0x88,0x02,0x00	#movaps 0x20(rsp),xmm8
+	.byte	0x0c,0x78,0x01,0x00	#movaps 0x10(rsp),xmm7
+	.byte	0x08,0x68,0x00,0x00	#movaps 0x00(rsp),xmm6
+	.byte	0x04,0x01,0x15,0x00	#sub	rsp,0xa8
+___
+}
+
+$code =~ s/\`([^\`]*)\`/eval($1)/gem;
+
+print $code;
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghashp8-ppc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghashp8-ppc.pl
new file mode 100755
index 000000000..6a2ac7129
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghashp8-ppc.pl
@@ -0,0 +1,671 @@
+#! /usr/bin/env perl
+# Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# GHASH for for PowerISA v2.07.
+#
+# July 2014
+#
+# Accurate performance measurements are problematic, because it's
+# always virtualized setup with possibly throttled processor.
+# Relative comparison is therefore more informative. This initial
+# version is ~2.1x slower than hardware-assisted AES-128-CTR, ~12x
+# faster than "4-bit" integer-only compiler-generated 64-bit code.
+# "Initial version" means that there is room for further improvement.
+
+# May 2016
+#
+# 2x aggregated reduction improves performance by 50% (resulting
+# performance on POWER8 is 1 cycle per processed byte), and 4x
+# aggregated reduction - by 170% or 2.7x (resulting in 0.55 cpb).
+# POWER9 delivers 0.51 cpb.
+
+$flavour=shift;
+$output =shift;
+
+if ($flavour =~ /64/) {
+	$SIZE_T=8;
+	$LRSAVE=2*$SIZE_T;
+	$STU="stdu";
+	$POP="ld";
+	$PUSH="std";
+	$UCMP="cmpld";
+	$SHRI="srdi";
+} elsif ($flavour =~ /32/) {
+	$SIZE_T=4;
+	$LRSAVE=$SIZE_T;
+	$STU="stwu";
+	$POP="lwz";
+	$PUSH="stw";
+	$UCMP="cmplw";
+	$SHRI="srwi";
+} else { die "nonsense $flavour"; }
+
+$sp="r1";
+$FRAME=6*$SIZE_T+13*16;	# 13*16 is for v20-v31 offload
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open STDOUT,"| $^X $xlate $flavour $output" || die "can't call $xlate: $!";
+
+my ($Xip,$Htbl,$inp,$len)=map("r$_",(3..6));	# argument block
+
+my ($Xl,$Xm,$Xh,$IN)=map("v$_",(0..3));
+my ($zero,$t0,$t1,$t2,$xC2,$H,$Hh,$Hl,$lemask)=map("v$_",(4..12));
+my ($Xl1,$Xm1,$Xh1,$IN1,$H2,$H2h,$H2l)=map("v$_",(13..19));
+my $vrsave="r12";
+
+$code=<<___;
+.machine	"any"
+
+.text
+
+.globl	.gcm_init_p8
+.align	5
+.gcm_init_p8:
+	li		r0,-4096
+	li		r8,0x10
+	mfspr		$vrsave,256
+	li		r9,0x20
+	mtspr		256,r0
+	li		r10,0x30
+	lvx_u		$H,0,r4			# load H
+
+	vspltisb	$xC2,-16		# 0xf0
+	vspltisb	$t0,1			# one
+	vaddubm		$xC2,$xC2,$xC2		# 0xe0
+	vxor		$zero,$zero,$zero
+	vor		$xC2,$xC2,$t0		# 0xe1
+	vsldoi		$xC2,$xC2,$zero,15	# 0xe1...
+	vsldoi		$t1,$zero,$t0,1		# ...1
+	vaddubm		$xC2,$xC2,$xC2		# 0xc2...
+	vspltisb	$t2,7
+	vor		$xC2,$xC2,$t1		# 0xc2....01
+	vspltb		$t1,$H,0		# most significant byte
+	vsl		$H,$H,$t0		# H<<=1
+	vsrab		$t1,$t1,$t2		# broadcast carry bit
+	vand		$t1,$t1,$xC2
+	vxor		$IN,$H,$t1		# twisted H
+
+	vsldoi		$H,$IN,$IN,8		# twist even more ...
+	vsldoi		$xC2,$zero,$xC2,8	# 0xc2.0
+	vsldoi		$Hl,$zero,$H,8		# ... and split
+	vsldoi		$Hh,$H,$zero,8
+
+	stvx_u		$xC2,0,r3		# save pre-computed table
+	stvx_u		$Hl,r8,r3
+	li		r8,0x40
+	stvx_u		$H, r9,r3
+	li		r9,0x50
+	stvx_u		$Hh,r10,r3
+	li		r10,0x60
+
+	vpmsumd		$Xl,$IN,$Hl		# H.lo·H.lo
+	vpmsumd		$Xm,$IN,$H		# H.hi·H.lo+H.lo·H.hi
+	vpmsumd		$Xh,$IN,$Hh		# H.hi·H.hi
+
+	vpmsumd		$t2,$Xl,$xC2		# 1st reduction phase
+
+	vsldoi		$t0,$Xm,$zero,8
+	vsldoi		$t1,$zero,$Xm,8
+	vxor		$Xl,$Xl,$t0
+	vxor		$Xh,$Xh,$t1
+
+	vsldoi		$Xl,$Xl,$Xl,8
+	vxor		$Xl,$Xl,$t2
+
+	vsldoi		$t1,$Xl,$Xl,8		# 2nd reduction phase
+	vpmsumd		$Xl,$Xl,$xC2
+	vxor		$t1,$t1,$Xh
+	vxor		$IN1,$Xl,$t1
+
+	vsldoi		$H2,$IN1,$IN1,8
+	vsldoi		$H2l,$zero,$H2,8
+	vsldoi		$H2h,$H2,$zero,8
+
+	stvx_u		$H2l,r8,r3		# save H^2
+	li		r8,0x70
+	stvx_u		$H2,r9,r3
+	li		r9,0x80
+	stvx_u		$H2h,r10,r3
+	li		r10,0x90
+___
+{
+my ($t4,$t5,$t6) = ($Hl,$H,$Hh);
+$code.=<<___;
+	vpmsumd		$Xl,$IN,$H2l		# H.lo·H^2.lo
+	 vpmsumd	$Xl1,$IN1,$H2l		# H^2.lo·H^2.lo
+	vpmsumd		$Xm,$IN,$H2		# H.hi·H^2.lo+H.lo·H^2.hi
+	 vpmsumd	$Xm1,$IN1,$H2		# H^2.hi·H^2.lo+H^2.lo·H^2.hi
+	vpmsumd		$Xh,$IN,$H2h		# H.hi·H^2.hi
+	 vpmsumd	$Xh1,$IN1,$H2h		# H^2.hi·H^2.hi
+
+	vpmsumd		$t2,$Xl,$xC2		# 1st reduction phase
+	 vpmsumd	$t6,$Xl1,$xC2		# 1st reduction phase
+
+	vsldoi		$t0,$Xm,$zero,8
+	vsldoi		$t1,$zero,$Xm,8
+	 vsldoi		$t4,$Xm1,$zero,8
+	 vsldoi		$t5,$zero,$Xm1,8
+	vxor		$Xl,$Xl,$t0
+	vxor		$Xh,$Xh,$t1
+	 vxor		$Xl1,$Xl1,$t4
+	 vxor		$Xh1,$Xh1,$t5
+
+	vsldoi		$Xl,$Xl,$Xl,8
+	 vsldoi		$Xl1,$Xl1,$Xl1,8
+	vxor		$Xl,$Xl,$t2
+	 vxor		$Xl1,$Xl1,$t6
+
+	vsldoi		$t1,$Xl,$Xl,8		# 2nd reduction phase
+	 vsldoi		$t5,$Xl1,$Xl1,8		# 2nd reduction phase
+	vpmsumd		$Xl,$Xl,$xC2
+	 vpmsumd	$Xl1,$Xl1,$xC2
+	vxor		$t1,$t1,$Xh
+	 vxor		$t5,$t5,$Xh1
+	vxor		$Xl,$Xl,$t1
+	 vxor		$Xl1,$Xl1,$t5
+
+	vsldoi		$H,$Xl,$Xl,8
+	 vsldoi		$H2,$Xl1,$Xl1,8
+	vsldoi		$Hl,$zero,$H,8
+	vsldoi		$Hh,$H,$zero,8
+	 vsldoi		$H2l,$zero,$H2,8
+	 vsldoi		$H2h,$H2,$zero,8
+
+	stvx_u		$Hl,r8,r3		# save H^3
+	li		r8,0xa0
+	stvx_u		$H,r9,r3
+	li		r9,0xb0
+	stvx_u		$Hh,r10,r3
+	li		r10,0xc0
+	 stvx_u		$H2l,r8,r3		# save H^4
+	 stvx_u		$H2,r9,r3
+	 stvx_u		$H2h,r10,r3
+
+	mtspr		256,$vrsave
+	blr
+	.long		0
+	.byte		0,12,0x14,0,0,0,2,0
+	.long		0
+.size	.gcm_init_p8,.-.gcm_init_p8
+___
+}
+$code.=<<___;
+.globl	.gcm_gmult_p8
+.align	5
+.gcm_gmult_p8:
+	lis		r0,0xfff8
+	li		r8,0x10
+	mfspr		$vrsave,256
+	li		r9,0x20
+	mtspr		256,r0
+	li		r10,0x30
+	lvx_u		$IN,0,$Xip		# load Xi
+
+	lvx_u		$Hl,r8,$Htbl		# load pre-computed table
+	 le?lvsl	$lemask,r0,r0
+	lvx_u		$H, r9,$Htbl
+	 le?vspltisb	$t0,0x07
+	lvx_u		$Hh,r10,$Htbl
+	 le?vxor	$lemask,$lemask,$t0
+	lvx_u		$xC2,0,$Htbl
+	 le?vperm	$IN,$IN,$IN,$lemask
+	vxor		$zero,$zero,$zero
+
+	vpmsumd		$Xl,$IN,$Hl		# H.lo·Xi.lo
+	vpmsumd		$Xm,$IN,$H		# H.hi·Xi.lo+H.lo·Xi.hi
+	vpmsumd		$Xh,$IN,$Hh		# H.hi·Xi.hi
+
+	vpmsumd		$t2,$Xl,$xC2		# 1st reduction phase
+
+	vsldoi		$t0,$Xm,$zero,8
+	vsldoi		$t1,$zero,$Xm,8
+	vxor		$Xl,$Xl,$t0
+	vxor		$Xh,$Xh,$t1
+
+	vsldoi		$Xl,$Xl,$Xl,8
+	vxor		$Xl,$Xl,$t2
+
+	vsldoi		$t1,$Xl,$Xl,8		# 2nd reduction phase
+	vpmsumd		$Xl,$Xl,$xC2
+	vxor		$t1,$t1,$Xh
+	vxor		$Xl,$Xl,$t1
+
+	le?vperm	$Xl,$Xl,$Xl,$lemask
+	stvx_u		$Xl,0,$Xip		# write out Xi
+
+	mtspr		256,$vrsave
+	blr
+	.long		0
+	.byte		0,12,0x14,0,0,0,2,0
+	.long		0
+.size	.gcm_gmult_p8,.-.gcm_gmult_p8
+
+.globl	.gcm_ghash_p8
+.align	5
+.gcm_ghash_p8:
+	li		r0,-4096
+	li		r8,0x10
+	mfspr		$vrsave,256
+	li		r9,0x20
+	mtspr		256,r0
+	li		r10,0x30
+	lvx_u		$Xl,0,$Xip		# load Xi
+
+	lvx_u		$Hl,r8,$Htbl		# load pre-computed table
+	li		r8,0x40
+	 le?lvsl	$lemask,r0,r0
+	lvx_u		$H, r9,$Htbl
+	li		r9,0x50
+	 le?vspltisb	$t0,0x07
+	lvx_u		$Hh,r10,$Htbl
+	li		r10,0x60
+	 le?vxor	$lemask,$lemask,$t0
+	lvx_u		$xC2,0,$Htbl
+	 le?vperm	$Xl,$Xl,$Xl,$lemask
+	vxor		$zero,$zero,$zero
+
+	${UCMP}i	$len,64
+	bge		Lgcm_ghash_p8_4x
+
+	lvx_u		$IN,0,$inp
+	addi		$inp,$inp,16
+	subic.		$len,$len,16
+	 le?vperm	$IN,$IN,$IN,$lemask
+	vxor		$IN,$IN,$Xl
+	beq		Lshort
+
+	lvx_u		$H2l,r8,$Htbl		# load H^2
+	li		r8,16
+	lvx_u		$H2, r9,$Htbl
+	add		r9,$inp,$len		# end of input
+	lvx_u		$H2h,r10,$Htbl
+	be?b		Loop_2x
+
+.align	5
+Loop_2x:
+	lvx_u		$IN1,0,$inp
+	le?vperm	$IN1,$IN1,$IN1,$lemask
+
+	 subic		$len,$len,32
+	vpmsumd		$Xl,$IN,$H2l		# H^2.lo·Xi.lo
+	 vpmsumd	$Xl1,$IN1,$Hl		# H.lo·Xi+1.lo
+	 subfe		r0,r0,r0		# borrow?-1:0
+	vpmsumd		$Xm,$IN,$H2		# H^2.hi·Xi.lo+H^2.lo·Xi.hi
+	 vpmsumd	$Xm1,$IN1,$H		# H.hi·Xi+1.lo+H.lo·Xi+1.hi
+	 and		r0,r0,$len
+	vpmsumd		$Xh,$IN,$H2h		# H^2.hi·Xi.hi
+	 vpmsumd	$Xh1,$IN1,$Hh		# H.hi·Xi+1.hi
+	 add		$inp,$inp,r0
+
+	vxor		$Xl,$Xl,$Xl1
+	vxor		$Xm,$Xm,$Xm1
+
+	vpmsumd		$t2,$Xl,$xC2		# 1st reduction phase
+
+	vsldoi		$t0,$Xm,$zero,8
+	vsldoi		$t1,$zero,$Xm,8
+	 vxor		$Xh,$Xh,$Xh1
+	vxor		$Xl,$Xl,$t0
+	vxor		$Xh,$Xh,$t1
+
+	vsldoi		$Xl,$Xl,$Xl,8
+	vxor		$Xl,$Xl,$t2
+	 lvx_u		$IN,r8,$inp
+	 addi		$inp,$inp,32
+
+	vsldoi		$t1,$Xl,$Xl,8		# 2nd reduction phase
+	vpmsumd		$Xl,$Xl,$xC2
+	 le?vperm	$IN,$IN,$IN,$lemask
+	vxor		$t1,$t1,$Xh
+	vxor		$IN,$IN,$t1
+	vxor		$IN,$IN,$Xl
+	$UCMP		r9,$inp
+	bgt		Loop_2x			# done yet?
+
+	cmplwi		$len,0
+	bne		Leven
+
+Lshort:
+	vpmsumd		$Xl,$IN,$Hl		# H.lo·Xi.lo
+	vpmsumd		$Xm,$IN,$H		# H.hi·Xi.lo+H.lo·Xi.hi
+	vpmsumd		$Xh,$IN,$Hh		# H.hi·Xi.hi
+
+	vpmsumd		$t2,$Xl,$xC2		# 1st reduction phase
+
+	vsldoi		$t0,$Xm,$zero,8
+	vsldoi		$t1,$zero,$Xm,8
+	vxor		$Xl,$Xl,$t0
+	vxor		$Xh,$Xh,$t1
+
+	vsldoi		$Xl,$Xl,$Xl,8
+	vxor		$Xl,$Xl,$t2
+
+	vsldoi		$t1,$Xl,$Xl,8		# 2nd reduction phase
+	vpmsumd		$Xl,$Xl,$xC2
+	vxor		$t1,$t1,$Xh
+
+Leven:
+	vxor		$Xl,$Xl,$t1
+	le?vperm	$Xl,$Xl,$Xl,$lemask
+	stvx_u		$Xl,0,$Xip		# write out Xi
+
+	mtspr		256,$vrsave
+	blr
+	.long		0
+	.byte		0,12,0x14,0,0,0,4,0
+	.long		0
+___
+{
+my ($Xl3,$Xm2,$IN2,$H3l,$H3,$H3h,
+    $Xh3,$Xm3,$IN3,$H4l,$H4,$H4h) = map("v$_",(20..31));
+my $IN0=$IN;
+my ($H21l,$H21h,$loperm,$hiperm) = ($Hl,$Hh,$H2l,$H2h);
+
+$code.=<<___;
+.align	5
+.gcm_ghash_p8_4x:
+Lgcm_ghash_p8_4x:
+	$STU		$sp,-$FRAME($sp)
+	li		r10,`15+6*$SIZE_T`
+	li		r11,`31+6*$SIZE_T`
+	stvx		v20,r10,$sp
+	addi		r10,r10,32
+	stvx		v21,r11,$sp
+	addi		r11,r11,32
+	stvx		v22,r10,$sp
+	addi		r10,r10,32
+	stvx		v23,r11,$sp
+	addi		r11,r11,32
+	stvx		v24,r10,$sp
+	addi		r10,r10,32
+	stvx		v25,r11,$sp
+	addi		r11,r11,32
+	stvx		v26,r10,$sp
+	addi		r10,r10,32
+	stvx		v27,r11,$sp
+	addi		r11,r11,32
+	stvx		v28,r10,$sp
+	addi		r10,r10,32
+	stvx		v29,r11,$sp
+	addi		r11,r11,32
+	stvx		v30,r10,$sp
+	li		r10,0x60
+	stvx		v31,r11,$sp
+	li		r0,-1
+	stw		$vrsave,`$FRAME-4`($sp)	# save vrsave
+	mtspr		256,r0			# preserve all AltiVec registers
+
+	lvsl		$t0,0,r8		# 0x0001..0e0f
+	#lvx_u		$H2l,r8,$Htbl		# load H^2
+	li		r8,0x70
+	lvx_u		$H2, r9,$Htbl
+	li		r9,0x80
+	vspltisb	$t1,8			# 0x0808..0808
+	#lvx_u		$H2h,r10,$Htbl
+	li		r10,0x90
+	lvx_u		$H3l,r8,$Htbl		# load H^3
+	li		r8,0xa0
+	lvx_u		$H3, r9,$Htbl
+	li		r9,0xb0
+	lvx_u		$H3h,r10,$Htbl
+	li		r10,0xc0
+	lvx_u		$H4l,r8,$Htbl		# load H^4
+	li		r8,0x10
+	lvx_u		$H4, r9,$Htbl
+	li		r9,0x20
+	lvx_u		$H4h,r10,$Htbl
+	li		r10,0x30
+
+	vsldoi		$t2,$zero,$t1,8		# 0x0000..0808
+	vaddubm		$hiperm,$t0,$t2		# 0x0001..1617
+	vaddubm		$loperm,$t1,$hiperm	# 0x0809..1e1f
+
+	$SHRI		$len,$len,4		# this allows to use sign bit
+						# as carry
+	lvx_u		$IN0,0,$inp		# load input
+	lvx_u		$IN1,r8,$inp
+	subic.		$len,$len,8
+	lvx_u		$IN2,r9,$inp
+	lvx_u		$IN3,r10,$inp
+	addi		$inp,$inp,0x40
+	le?vperm	$IN0,$IN0,$IN0,$lemask
+	le?vperm	$IN1,$IN1,$IN1,$lemask
+	le?vperm	$IN2,$IN2,$IN2,$lemask
+	le?vperm	$IN3,$IN3,$IN3,$lemask
+
+	vxor		$Xh,$IN0,$Xl
+
+	 vpmsumd	$Xl1,$IN1,$H3l
+	 vpmsumd	$Xm1,$IN1,$H3
+	 vpmsumd	$Xh1,$IN1,$H3h
+
+	 vperm		$H21l,$H2,$H,$hiperm
+	 vperm		$t0,$IN2,$IN3,$loperm
+	 vperm		$H21h,$H2,$H,$loperm
+	 vperm		$t1,$IN2,$IN3,$hiperm
+	 vpmsumd	$Xm2,$IN2,$H2		# H^2.lo·Xi+2.hi+H^2.hi·Xi+2.lo
+	 vpmsumd	$Xl3,$t0,$H21l		# H^2.lo·Xi+2.lo+H.lo·Xi+3.lo
+	 vpmsumd	$Xm3,$IN3,$H		# H.hi·Xi+3.lo  +H.lo·Xi+3.hi
+	 vpmsumd	$Xh3,$t1,$H21h		# H^2.hi·Xi+2.hi+H.hi·Xi+3.hi
+
+	 vxor		$Xm2,$Xm2,$Xm1
+	 vxor		$Xl3,$Xl3,$Xl1
+	 vxor		$Xm3,$Xm3,$Xm2
+	 vxor		$Xh3,$Xh3,$Xh1
+
+	blt		Ltail_4x
+
+Loop_4x:
+	lvx_u		$IN0,0,$inp
+	lvx_u		$IN1,r8,$inp
+	subic.		$len,$len,4
+	lvx_u		$IN2,r9,$inp
+	lvx_u		$IN3,r10,$inp
+	addi		$inp,$inp,0x40
+	le?vperm	$IN1,$IN1,$IN1,$lemask
+	le?vperm	$IN2,$IN2,$IN2,$lemask
+	le?vperm	$IN3,$IN3,$IN3,$lemask
+	le?vperm	$IN0,$IN0,$IN0,$lemask
+
+	vpmsumd		$Xl,$Xh,$H4l		# H^4.lo·Xi.lo
+	vpmsumd		$Xm,$Xh,$H4		# H^4.hi·Xi.lo+H^4.lo·Xi.hi
+	vpmsumd		$Xh,$Xh,$H4h		# H^4.hi·Xi.hi
+	 vpmsumd	$Xl1,$IN1,$H3l
+	 vpmsumd	$Xm1,$IN1,$H3
+	 vpmsumd	$Xh1,$IN1,$H3h
+
+	vxor		$Xl,$Xl,$Xl3
+	vxor		$Xm,$Xm,$Xm3
+	vxor		$Xh,$Xh,$Xh3
+	 vperm		$t0,$IN2,$IN3,$loperm
+	 vperm		$t1,$IN2,$IN3,$hiperm
+
+	vpmsumd		$t2,$Xl,$xC2		# 1st reduction phase
+	 vpmsumd	$Xl3,$t0,$H21l		# H.lo·Xi+3.lo  +H^2.lo·Xi+2.lo
+	 vpmsumd	$Xh3,$t1,$H21h		# H.hi·Xi+3.hi  +H^2.hi·Xi+2.hi
+
+	vsldoi		$t0,$Xm,$zero,8
+	vsldoi		$t1,$zero,$Xm,8
+	vxor		$Xl,$Xl,$t0
+	vxor		$Xh,$Xh,$t1
+
+	vsldoi		$Xl,$Xl,$Xl,8
+	vxor		$Xl,$Xl,$t2
+
+	vsldoi		$t1,$Xl,$Xl,8		# 2nd reduction phase
+	 vpmsumd	$Xm2,$IN2,$H2		# H^2.hi·Xi+2.lo+H^2.lo·Xi+2.hi
+	 vpmsumd	$Xm3,$IN3,$H		# H.hi·Xi+3.lo  +H.lo·Xi+3.hi
+	vpmsumd		$Xl,$Xl,$xC2
+
+	 vxor		$Xl3,$Xl3,$Xl1
+	 vxor		$Xh3,$Xh3,$Xh1
+	vxor		$Xh,$Xh,$IN0
+	 vxor		$Xm2,$Xm2,$Xm1
+	vxor		$Xh,$Xh,$t1
+	 vxor		$Xm3,$Xm3,$Xm2
+	vxor		$Xh,$Xh,$Xl
+	bge		Loop_4x
+
+Ltail_4x:
+	vpmsumd		$Xl,$Xh,$H4l		# H^4.lo·Xi.lo
+	vpmsumd		$Xm,$Xh,$H4		# H^4.hi·Xi.lo+H^4.lo·Xi.hi
+	vpmsumd		$Xh,$Xh,$H4h		# H^4.hi·Xi.hi
+
+	vxor		$Xl,$Xl,$Xl3
+	vxor		$Xm,$Xm,$Xm3
+
+	vpmsumd		$t2,$Xl,$xC2		# 1st reduction phase
+
+	vsldoi		$t0,$Xm,$zero,8
+	vsldoi		$t1,$zero,$Xm,8
+	 vxor		$Xh,$Xh,$Xh3
+	vxor		$Xl,$Xl,$t0
+	vxor		$Xh,$Xh,$t1
+
+	vsldoi		$Xl,$Xl,$Xl,8
+	vxor		$Xl,$Xl,$t2
+
+	vsldoi		$t1,$Xl,$Xl,8		# 2nd reduction phase
+	vpmsumd		$Xl,$Xl,$xC2
+	vxor		$t1,$t1,$Xh
+	vxor		$Xl,$Xl,$t1
+
+	addic.		$len,$len,4
+	beq		Ldone_4x
+
+	lvx_u		$IN0,0,$inp
+	${UCMP}i	$len,2
+	li		$len,-4
+	blt		Lone
+	lvx_u		$IN1,r8,$inp
+	beq		Ltwo
+
+Lthree:
+	lvx_u		$IN2,r9,$inp
+	le?vperm	$IN0,$IN0,$IN0,$lemask
+	le?vperm	$IN1,$IN1,$IN1,$lemask
+	le?vperm	$IN2,$IN2,$IN2,$lemask
+
+	vxor		$Xh,$IN0,$Xl
+	vmr		$H4l,$H3l
+	vmr		$H4, $H3
+	vmr		$H4h,$H3h
+
+	vperm		$t0,$IN1,$IN2,$loperm
+	vperm		$t1,$IN1,$IN2,$hiperm
+	vpmsumd		$Xm2,$IN1,$H2		# H^2.lo·Xi+1.hi+H^2.hi·Xi+1.lo
+	vpmsumd		$Xm3,$IN2,$H		# H.hi·Xi+2.lo  +H.lo·Xi+2.hi
+	vpmsumd		$Xl3,$t0,$H21l		# H^2.lo·Xi+1.lo+H.lo·Xi+2.lo
+	vpmsumd		$Xh3,$t1,$H21h		# H^2.hi·Xi+1.hi+H.hi·Xi+2.hi
+
+	vxor		$Xm3,$Xm3,$Xm2
+	b		Ltail_4x
+
+.align	4
+Ltwo:
+	le?vperm	$IN0,$IN0,$IN0,$lemask
+	le?vperm	$IN1,$IN1,$IN1,$lemask
+
+	vxor		$Xh,$IN0,$Xl
+	vperm		$t0,$zero,$IN1,$loperm
+	vperm		$t1,$zero,$IN1,$hiperm
+
+	vsldoi		$H4l,$zero,$H2,8
+	vmr		$H4, $H2
+	vsldoi		$H4h,$H2,$zero,8
+
+	vpmsumd		$Xl3,$t0, $H21l		# H.lo·Xi+1.lo
+	vpmsumd		$Xm3,$IN1,$H		# H.hi·Xi+1.lo+H.lo·Xi+2.hi
+	vpmsumd		$Xh3,$t1, $H21h		# H.hi·Xi+1.hi
+
+	b		Ltail_4x
+
+.align	4
+Lone:
+	le?vperm	$IN0,$IN0,$IN0,$lemask
+
+	vsldoi		$H4l,$zero,$H,8
+	vmr		$H4, $H
+	vsldoi		$H4h,$H,$zero,8
+
+	vxor		$Xh,$IN0,$Xl
+	vxor		$Xl3,$Xl3,$Xl3
+	vxor		$Xm3,$Xm3,$Xm3
+	vxor		$Xh3,$Xh3,$Xh3
+
+	b		Ltail_4x
+
+Ldone_4x:
+	le?vperm	$Xl,$Xl,$Xl,$lemask
+	stvx_u		$Xl,0,$Xip		# write out Xi
+
+	li		r10,`15+6*$SIZE_T`
+	li		r11,`31+6*$SIZE_T`
+	mtspr		256,$vrsave
+	lvx		v20,r10,$sp
+	addi		r10,r10,32
+	lvx		v21,r11,$sp
+	addi		r11,r11,32
+	lvx		v22,r10,$sp
+	addi		r10,r10,32
+	lvx		v23,r11,$sp
+	addi		r11,r11,32
+	lvx		v24,r10,$sp
+	addi		r10,r10,32
+	lvx		v25,r11,$sp
+	addi		r11,r11,32
+	lvx		v26,r10,$sp
+	addi		r10,r10,32
+	lvx		v27,r11,$sp
+	addi		r11,r11,32
+	lvx		v28,r10,$sp
+	addi		r10,r10,32
+	lvx		v29,r11,$sp
+	addi		r11,r11,32
+	lvx		v30,r10,$sp
+	lvx		v31,r11,$sp
+	addi		$sp,$sp,$FRAME
+	blr
+	.long		0
+	.byte		0,12,0x04,0,0x80,0,4,0
+	.long		0
+___
+}
+$code.=<<___;
+.size	.gcm_ghash_p8,.-.gcm_ghash_p8
+
+.asciz  "GHASH for PowerISA 2.07, CRYPTOGAMS by <appro\@openssl.org>"
+.align  2
+___
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/geo;
+
+	if ($flavour =~ /le$/o) {	# little-endian
+	    s/le\?//o		or
+	    s/be\?/#be#/o;
+	} else {
+	    s/le\?/#le#/o	or
+	    s/be\?//o;
+	}
+	print $_,"\n";
+}
+
+close STDOUT; # enforce flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghashv8-armx.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghashv8-armx.pl
new file mode 100644
index 000000000..47e882008
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/asm/ghashv8-armx.pl
@@ -0,0 +1,781 @@
+#! /usr/bin/env perl
+# Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# GHASH for ARMv8 Crypto Extension, 64-bit polynomial multiplication.
+#
+# June 2014
+#
+# Initial version was developed in tight cooperation with Ard
+# Biesheuvel of Linaro from bits-n-pieces from other assembly modules.
+# Just like aesv8-armx.pl this module supports both AArch32 and
+# AArch64 execution modes.
+#
+# July 2014
+#
+# Implement 2x aggregated reduction [see ghash-x86.pl for background
+# information].
+#
+# November 2017
+#
+# AArch64 register bank to "accommodate" 4x aggregated reduction and
+# improve performance by 20-70% depending on processor.
+#
+# Current performance in cycles per processed byte:
+#
+#		64-bit PMULL	32-bit PMULL	32-bit NEON(*)
+# Apple A7	0.58		0.92		5.62
+# Cortex-A53	0.85		1.01		8.39
+# Cortex-A57	0.73		1.17		7.61
+# Denver	0.51		0.65		6.02
+# Mongoose	0.65		1.10		8.06
+# Kryo		0.76		1.16		8.00
+#
+# (*)	presented for reference/comparison purposes;
+
+$flavour = shift;
+$output  = shift;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+die "can't locate arm-xlate.pl";
+
+open OUT,"| \"$^X\" $xlate $flavour $output";
+*STDOUT=*OUT;
+
+$Xi="x0";	# argument block
+$Htbl="x1";
+$inp="x2";
+$len="x3";
+
+$inc="x12";
+
+{
+my ($Xl,$Xm,$Xh,$IN)=map("q$_",(0..3));
+my ($t0,$t1,$t2,$xC2,$H,$Hhl,$H2)=map("q$_",(8..14));
+
+$code=<<___;
+#include "arm_arch.h"
+
+#if __ARM_MAX_ARCH__>=7
+.text
+___
+$code.=".arch	armv8-a+crypto\n"	if ($flavour =~ /64/);
+$code.=<<___				if ($flavour !~ /64/);
+.fpu	neon
+.code	32
+#undef	__thumb2__
+___
+
+################################################################################
+# void gcm_init_v8(u128 Htable[16],const u64 H[2]);
+#
+# input:	128-bit H - secret parameter E(K,0^128)
+# output:	precomputed table filled with degrees of twisted H;
+#		H is twisted to handle reverse bitness of GHASH;
+#		only few of 16 slots of Htable[16] are used;
+#		data is opaque to outside world (which allows to
+#		optimize the code independently);
+#
+$code.=<<___;
+.global	gcm_init_v8
+.type	gcm_init_v8,%function
+.align	4
+gcm_init_v8:
+	vld1.64		{$t1},[x1]		@ load input H
+	vmov.i8		$xC2,#0xe1
+	vshl.i64	$xC2,$xC2,#57		@ 0xc2.0
+	vext.8		$IN,$t1,$t1,#8
+	vshr.u64	$t2,$xC2,#63
+	vdup.32		$t1,${t1}[1]
+	vext.8		$t0,$t2,$xC2,#8		@ t0=0xc2....01
+	vshr.u64	$t2,$IN,#63
+	vshr.s32	$t1,$t1,#31		@ broadcast carry bit
+	vand		$t2,$t2,$t0
+	vshl.i64	$IN,$IN,#1
+	vext.8		$t2,$t2,$t2,#8
+	vand		$t0,$t0,$t1
+	vorr		$IN,$IN,$t2		@ H<<<=1
+	veor		$H,$IN,$t0		@ twisted H
+	vst1.64		{$H},[x0],#16		@ store Htable[0]
+
+	@ calculate H^2
+	vext.8		$t0,$H,$H,#8		@ Karatsuba pre-processing
+	vpmull.p64	$Xl,$H,$H
+	veor		$t0,$t0,$H
+	vpmull2.p64	$Xh,$H,$H
+	vpmull.p64	$Xm,$t0,$t0
+
+	vext.8		$t1,$Xl,$Xh,#8		@ Karatsuba post-processing
+	veor		$t2,$Xl,$Xh
+	veor		$Xm,$Xm,$t1
+	veor		$Xm,$Xm,$t2
+	vpmull.p64	$t2,$Xl,$xC2		@ 1st phase
+
+	vmov		$Xh#lo,$Xm#hi		@ Xh|Xm - 256-bit result
+	vmov		$Xm#hi,$Xl#lo		@ Xm is rotated Xl
+	veor		$Xl,$Xm,$t2
+
+	vext.8		$t2,$Xl,$Xl,#8		@ 2nd phase
+	vpmull.p64	$Xl,$Xl,$xC2
+	veor		$t2,$t2,$Xh
+	veor		$H2,$Xl,$t2
+
+	vext.8		$t1,$H2,$H2,#8		@ Karatsuba pre-processing
+	veor		$t1,$t1,$H2
+	vext.8		$Hhl,$t0,$t1,#8		@ pack Karatsuba pre-processed
+	vst1.64		{$Hhl-$H2},[x0],#32	@ store Htable[1..2]
+___
+if ($flavour =~ /64/) {
+my ($t3,$Yl,$Ym,$Yh) = map("q$_",(4..7));
+
+$code.=<<___;
+	@ calculate H^3 and H^4
+	vpmull.p64	$Xl,$H, $H2
+	 vpmull.p64	$Yl,$H2,$H2
+	vpmull2.p64	$Xh,$H, $H2
+	 vpmull2.p64	$Yh,$H2,$H2
+	vpmull.p64	$Xm,$t0,$t1
+	 vpmull.p64	$Ym,$t1,$t1
+
+	vext.8		$t0,$Xl,$Xh,#8		@ Karatsuba post-processing
+	 vext.8		$t1,$Yl,$Yh,#8
+	veor		$t2,$Xl,$Xh
+	veor		$Xm,$Xm,$t0
+	 veor		$t3,$Yl,$Yh
+	 veor		$Ym,$Ym,$t1
+	veor		$Xm,$Xm,$t2
+	vpmull.p64	$t2,$Xl,$xC2		@ 1st phase
+	 veor		$Ym,$Ym,$t3
+	 vpmull.p64	$t3,$Yl,$xC2
+
+	vmov		$Xh#lo,$Xm#hi		@ Xh|Xm - 256-bit result
+	 vmov		$Yh#lo,$Ym#hi
+	vmov		$Xm#hi,$Xl#lo		@ Xm is rotated Xl
+	 vmov		$Ym#hi,$Yl#lo
+	veor		$Xl,$Xm,$t2
+	 veor		$Yl,$Ym,$t3
+
+	vext.8		$t2,$Xl,$Xl,#8		@ 2nd phase
+	 vext.8		$t3,$Yl,$Yl,#8
+	vpmull.p64	$Xl,$Xl,$xC2
+	 vpmull.p64	$Yl,$Yl,$xC2
+	veor		$t2,$t2,$Xh
+	 veor		$t3,$t3,$Yh
+	veor		$H, $Xl,$t2		@ H^3
+	 veor		$H2,$Yl,$t3		@ H^4
+
+	vext.8		$t0,$H, $H,#8		@ Karatsuba pre-processing
+	 vext.8		$t1,$H2,$H2,#8
+	veor		$t0,$t0,$H
+	 veor		$t1,$t1,$H2
+	vext.8		$Hhl,$t0,$t1,#8		@ pack Karatsuba pre-processed
+	vst1.64		{$H-$H2},[x0]		@ store Htable[3..5]
+___
+}
+$code.=<<___;
+	ret
+.size	gcm_init_v8,.-gcm_init_v8
+___
+################################################################################
+# void gcm_gmult_v8(u64 Xi[2],const u128 Htable[16]);
+#
+# input:	Xi - current hash value;
+#		Htable - table precomputed in gcm_init_v8;
+# output:	Xi - next hash value Xi;
+#
+$code.=<<___;
+.global	gcm_gmult_v8
+.type	gcm_gmult_v8,%function
+.align	4
+gcm_gmult_v8:
+	vld1.64		{$t1},[$Xi]		@ load Xi
+	vmov.i8		$xC2,#0xe1
+	vld1.64		{$H-$Hhl},[$Htbl]	@ load twisted H, ...
+	vshl.u64	$xC2,$xC2,#57
+#ifndef __ARMEB__
+	vrev64.8	$t1,$t1
+#endif
+	vext.8		$IN,$t1,$t1,#8
+
+	vpmull.p64	$Xl,$H,$IN		@ H.lo·Xi.lo
+	veor		$t1,$t1,$IN		@ Karatsuba pre-processing
+	vpmull2.p64	$Xh,$H,$IN		@ H.hi·Xi.hi
+	vpmull.p64	$Xm,$Hhl,$t1		@ (H.lo+H.hi)·(Xi.lo+Xi.hi)
+
+	vext.8		$t1,$Xl,$Xh,#8		@ Karatsuba post-processing
+	veor		$t2,$Xl,$Xh
+	veor		$Xm,$Xm,$t1
+	veor		$Xm,$Xm,$t2
+	vpmull.p64	$t2,$Xl,$xC2		@ 1st phase of reduction
+
+	vmov		$Xh#lo,$Xm#hi		@ Xh|Xm - 256-bit result
+	vmov		$Xm#hi,$Xl#lo		@ Xm is rotated Xl
+	veor		$Xl,$Xm,$t2
+
+	vext.8		$t2,$Xl,$Xl,#8		@ 2nd phase of reduction
+	vpmull.p64	$Xl,$Xl,$xC2
+	veor		$t2,$t2,$Xh
+	veor		$Xl,$Xl,$t2
+
+#ifndef __ARMEB__
+	vrev64.8	$Xl,$Xl
+#endif
+	vext.8		$Xl,$Xl,$Xl,#8
+	vst1.64		{$Xl},[$Xi]		@ write out Xi
+
+	ret
+.size	gcm_gmult_v8,.-gcm_gmult_v8
+___
+################################################################################
+# void gcm_ghash_v8(u64 Xi[2],const u128 Htable[16],const u8 *inp,size_t len);
+#
+# input:	table precomputed in gcm_init_v8;
+#		current hash value Xi;
+#		pointer to input data;
+#		length of input data in bytes, but divisible by block size;
+# output:	next hash value Xi;
+#
+$code.=<<___;
+.global	gcm_ghash_v8
+.type	gcm_ghash_v8,%function
+.align	4
+gcm_ghash_v8:
+___
+$code.=<<___	if ($flavour =~ /64/);
+	cmp		$len,#64
+	b.hs		.Lgcm_ghash_v8_4x
+___
+$code.=<<___		if ($flavour !~ /64/);
+	vstmdb		sp!,{d8-d15}		@ 32-bit ABI says so
+___
+$code.=<<___;
+	vld1.64		{$Xl},[$Xi]		@ load [rotated] Xi
+						@ "[rotated]" means that
+						@ loaded value would have
+						@ to be rotated in order to
+						@ make it appear as in
+						@ algorithm specification
+	subs		$len,$len,#32		@ see if $len is 32 or larger
+	mov		$inc,#16		@ $inc is used as post-
+						@ increment for input pointer;
+						@ as loop is modulo-scheduled
+						@ $inc is zeroed just in time
+						@ to preclude overstepping
+						@ inp[len], which means that
+						@ last block[s] are actually
+						@ loaded twice, but last
+						@ copy is not processed
+	vld1.64		{$H-$Hhl},[$Htbl],#32	@ load twisted H, ..., H^2
+	vmov.i8		$xC2,#0xe1
+	vld1.64		{$H2},[$Htbl]
+	cclr		$inc,eq			@ is it time to zero $inc?
+	vext.8		$Xl,$Xl,$Xl,#8		@ rotate Xi
+	vld1.64		{$t0},[$inp],#16	@ load [rotated] I[0]
+	vshl.u64	$xC2,$xC2,#57		@ compose 0xc2.0 constant
+#ifndef __ARMEB__
+	vrev64.8	$t0,$t0
+	vrev64.8	$Xl,$Xl
+#endif
+	vext.8		$IN,$t0,$t0,#8		@ rotate I[0]
+	b.lo		.Lodd_tail_v8		@ $len was less than 32
+___
+{ my ($Xln,$Xmn,$Xhn,$In) = map("q$_",(4..7));
+	#######
+	# Xi+2 =[H*(Ii+1 + Xi+1)] mod P =
+	#	[(H*Ii+1) + (H*Xi+1)] mod P =
+	#	[(H*Ii+1) + H^2*(Ii+Xi)] mod P
+	#
+$code.=<<___;
+	vld1.64		{$t1},[$inp],$inc	@ load [rotated] I[1]
+#ifndef __ARMEB__
+	vrev64.8	$t1,$t1
+#endif
+	vext.8		$In,$t1,$t1,#8
+	veor		$IN,$IN,$Xl		@ I[i]^=Xi
+	vpmull.p64	$Xln,$H,$In		@ H·Ii+1
+	veor		$t1,$t1,$In		@ Karatsuba pre-processing
+	vpmull2.p64	$Xhn,$H,$In
+	b		.Loop_mod2x_v8
+
+.align	4
+.Loop_mod2x_v8:
+	vext.8		$t2,$IN,$IN,#8
+	subs		$len,$len,#32		@ is there more data?
+	vpmull.p64	$Xl,$H2,$IN		@ H^2.lo·Xi.lo
+	cclr		$inc,lo			@ is it time to zero $inc?
+
+	 vpmull.p64	$Xmn,$Hhl,$t1
+	veor		$t2,$t2,$IN		@ Karatsuba pre-processing
+	vpmull2.p64	$Xh,$H2,$IN		@ H^2.hi·Xi.hi
+	veor		$Xl,$Xl,$Xln		@ accumulate
+	vpmull2.p64	$Xm,$Hhl,$t2		@ (H^2.lo+H^2.hi)·(Xi.lo+Xi.hi)
+	 vld1.64	{$t0},[$inp],$inc	@ load [rotated] I[i+2]
+
+	veor		$Xh,$Xh,$Xhn
+	 cclr		$inc,eq			@ is it time to zero $inc?
+	veor		$Xm,$Xm,$Xmn
+
+	vext.8		$t1,$Xl,$Xh,#8		@ Karatsuba post-processing
+	veor		$t2,$Xl,$Xh
+	veor		$Xm,$Xm,$t1
+	 vld1.64	{$t1},[$inp],$inc	@ load [rotated] I[i+3]
+#ifndef __ARMEB__
+	 vrev64.8	$t0,$t0
+#endif
+	veor		$Xm,$Xm,$t2
+	vpmull.p64	$t2,$Xl,$xC2		@ 1st phase of reduction
+
+#ifndef __ARMEB__
+	 vrev64.8	$t1,$t1
+#endif
+	vmov		$Xh#lo,$Xm#hi		@ Xh|Xm - 256-bit result
+	vmov		$Xm#hi,$Xl#lo		@ Xm is rotated Xl
+	 vext.8		$In,$t1,$t1,#8
+	 vext.8		$IN,$t0,$t0,#8
+	veor		$Xl,$Xm,$t2
+	 vpmull.p64	$Xln,$H,$In		@ H·Ii+1
+	veor		$IN,$IN,$Xh		@ accumulate $IN early
+
+	vext.8		$t2,$Xl,$Xl,#8		@ 2nd phase of reduction
+	vpmull.p64	$Xl,$Xl,$xC2
+	veor		$IN,$IN,$t2
+	 veor		$t1,$t1,$In		@ Karatsuba pre-processing
+	veor		$IN,$IN,$Xl
+	 vpmull2.p64	$Xhn,$H,$In
+	b.hs		.Loop_mod2x_v8		@ there was at least 32 more bytes
+
+	veor		$Xh,$Xh,$t2
+	vext.8		$IN,$t0,$t0,#8		@ re-construct $IN
+	adds		$len,$len,#32		@ re-construct $len
+	veor		$Xl,$Xl,$Xh		@ re-construct $Xl
+	b.eq		.Ldone_v8		@ is $len zero?
+___
+}
+$code.=<<___;
+.Lodd_tail_v8:
+	vext.8		$t2,$Xl,$Xl,#8
+	veor		$IN,$IN,$Xl		@ inp^=Xi
+	veor		$t1,$t0,$t2		@ $t1 is rotated inp^Xi
+
+	vpmull.p64	$Xl,$H,$IN		@ H.lo·Xi.lo
+	veor		$t1,$t1,$IN		@ Karatsuba pre-processing
+	vpmull2.p64	$Xh,$H,$IN		@ H.hi·Xi.hi
+	vpmull.p64	$Xm,$Hhl,$t1		@ (H.lo+H.hi)·(Xi.lo+Xi.hi)
+
+	vext.8		$t1,$Xl,$Xh,#8		@ Karatsuba post-processing
+	veor		$t2,$Xl,$Xh
+	veor		$Xm,$Xm,$t1
+	veor		$Xm,$Xm,$t2
+	vpmull.p64	$t2,$Xl,$xC2		@ 1st phase of reduction
+
+	vmov		$Xh#lo,$Xm#hi		@ Xh|Xm - 256-bit result
+	vmov		$Xm#hi,$Xl#lo		@ Xm is rotated Xl
+	veor		$Xl,$Xm,$t2
+
+	vext.8		$t2,$Xl,$Xl,#8		@ 2nd phase of reduction
+	vpmull.p64	$Xl,$Xl,$xC2
+	veor		$t2,$t2,$Xh
+	veor		$Xl,$Xl,$t2
+
+.Ldone_v8:
+#ifndef __ARMEB__
+	vrev64.8	$Xl,$Xl
+#endif
+	vext.8		$Xl,$Xl,$Xl,#8
+	vst1.64		{$Xl},[$Xi]		@ write out Xi
+
+___
+$code.=<<___		if ($flavour !~ /64/);
+	vldmia		sp!,{d8-d15}		@ 32-bit ABI says so
+___
+$code.=<<___;
+	ret
+.size	gcm_ghash_v8,.-gcm_ghash_v8
+___
+
+if ($flavour =~ /64/) {				# 4x subroutine
+my ($I0,$j1,$j2,$j3,
+    $I1,$I2,$I3,$H3,$H34,$H4,$Yl,$Ym,$Yh) = map("q$_",(4..7,15..23));
+
+$code.=<<___;
+.type	gcm_ghash_v8_4x,%function
+.align	4
+gcm_ghash_v8_4x:
+.Lgcm_ghash_v8_4x:
+	vld1.64		{$Xl},[$Xi]		@ load [rotated] Xi
+	vld1.64		{$H-$H2},[$Htbl],#48	@ load twisted H, ..., H^2
+	vmov.i8		$xC2,#0xe1
+	vld1.64		{$H3-$H4},[$Htbl]	@ load twisted H^3, ..., H^4
+	vshl.u64	$xC2,$xC2,#57		@ compose 0xc2.0 constant
+
+	vld1.64		{$I0-$j3},[$inp],#64
+#ifndef __ARMEB__
+	vrev64.8	$Xl,$Xl
+	vrev64.8	$j1,$j1
+	vrev64.8	$j2,$j2
+	vrev64.8	$j3,$j3
+	vrev64.8	$I0,$I0
+#endif
+	vext.8		$I3,$j3,$j3,#8
+	vext.8		$I2,$j2,$j2,#8
+	vext.8		$I1,$j1,$j1,#8
+
+	vpmull.p64	$Yl,$H,$I3		@ H·Ii+3
+	veor		$j3,$j3,$I3
+	vpmull2.p64	$Yh,$H,$I3
+	vpmull.p64	$Ym,$Hhl,$j3
+
+	vpmull.p64	$t0,$H2,$I2		@ H^2·Ii+2
+	veor		$j2,$j2,$I2
+	vpmull2.p64	$I2,$H2,$I2
+	vpmull2.p64	$j2,$Hhl,$j2
+
+	veor		$Yl,$Yl,$t0
+	veor		$Yh,$Yh,$I2
+	veor		$Ym,$Ym,$j2
+
+	vpmull.p64	$j3,$H3,$I1		@ H^3·Ii+1
+	veor		$j1,$j1,$I1
+	vpmull2.p64	$I1,$H3,$I1
+	vpmull.p64	$j1,$H34,$j1
+
+	veor		$Yl,$Yl,$j3
+	veor		$Yh,$Yh,$I1
+	veor		$Ym,$Ym,$j1
+
+	subs		$len,$len,#128
+	b.lo		.Ltail4x
+
+	b		.Loop4x
+
+.align	4
+.Loop4x:
+	veor		$t0,$I0,$Xl
+	 vld1.64	{$I0-$j3},[$inp],#64
+	vext.8		$IN,$t0,$t0,#8
+#ifndef __ARMEB__
+	 vrev64.8	$j1,$j1
+	 vrev64.8	$j2,$j2
+	 vrev64.8	$j3,$j3
+	 vrev64.8	$I0,$I0
+#endif
+
+	vpmull.p64	$Xl,$H4,$IN		@ H^4·(Xi+Ii)
+	veor		$t0,$t0,$IN
+	vpmull2.p64	$Xh,$H4,$IN
+	 vext.8		$I3,$j3,$j3,#8
+	vpmull2.p64	$Xm,$H34,$t0
+
+	veor		$Xl,$Xl,$Yl
+	veor		$Xh,$Xh,$Yh
+	 vext.8		$I2,$j2,$j2,#8
+	veor		$Xm,$Xm,$Ym
+	 vext.8		$I1,$j1,$j1,#8
+
+	vext.8		$t1,$Xl,$Xh,#8		@ Karatsuba post-processing
+	veor		$t2,$Xl,$Xh
+	 vpmull.p64	$Yl,$H,$I3		@ H·Ii+3
+	 veor		$j3,$j3,$I3
+	veor		$Xm,$Xm,$t1
+	 vpmull2.p64	$Yh,$H,$I3
+	veor		$Xm,$Xm,$t2
+	 vpmull.p64	$Ym,$Hhl,$j3
+
+	vpmull.p64	$t2,$Xl,$xC2		@ 1st phase of reduction
+	vmov		$Xh#lo,$Xm#hi		@ Xh|Xm - 256-bit result
+	vmov		$Xm#hi,$Xl#lo		@ Xm is rotated Xl
+	 vpmull.p64	$t0,$H2,$I2		@ H^2·Ii+2
+	 veor		$j2,$j2,$I2
+	 vpmull2.p64	$I2,$H2,$I2
+	veor		$Xl,$Xm,$t2
+	 vpmull2.p64	$j2,$Hhl,$j2
+
+	 veor		$Yl,$Yl,$t0
+	 veor		$Yh,$Yh,$I2
+	 veor		$Ym,$Ym,$j2
+
+	vext.8		$t2,$Xl,$Xl,#8		@ 2nd phase of reduction
+	vpmull.p64	$Xl,$Xl,$xC2
+	 vpmull.p64	$j3,$H3,$I1		@ H^3·Ii+1
+	 veor		$j1,$j1,$I1
+	veor		$t2,$t2,$Xh
+	 vpmull2.p64	$I1,$H3,$I1
+	 vpmull.p64	$j1,$H34,$j1
+
+	veor		$Xl,$Xl,$t2
+	 veor		$Yl,$Yl,$j3
+	 veor		$Yh,$Yh,$I1
+	vext.8		$Xl,$Xl,$Xl,#8
+	 veor		$Ym,$Ym,$j1
+
+	subs		$len,$len,#64
+	b.hs		.Loop4x
+
+.Ltail4x:
+	veor		$t0,$I0,$Xl
+	vext.8		$IN,$t0,$t0,#8
+
+	vpmull.p64	$Xl,$H4,$IN		@ H^4·(Xi+Ii)
+	veor		$t0,$t0,$IN
+	vpmull2.p64	$Xh,$H4,$IN
+	vpmull2.p64	$Xm,$H34,$t0
+
+	veor		$Xl,$Xl,$Yl
+	veor		$Xh,$Xh,$Yh
+	veor		$Xm,$Xm,$Ym
+
+	adds		$len,$len,#64
+	b.eq		.Ldone4x
+
+	cmp		$len,#32
+	b.lo		.Lone
+	b.eq		.Ltwo
+.Lthree:
+	vext.8		$t1,$Xl,$Xh,#8		@ Karatsuba post-processing
+	veor		$t2,$Xl,$Xh
+	veor		$Xm,$Xm,$t1
+	 vld1.64	{$I0-$j2},[$inp]
+	veor		$Xm,$Xm,$t2
+#ifndef	__ARMEB__
+	 vrev64.8	$j1,$j1
+	 vrev64.8	$j2,$j2
+	 vrev64.8	$I0,$I0
+#endif
+
+	vpmull.p64	$t2,$Xl,$xC2		@ 1st phase of reduction
+	vmov		$Xh#lo,$Xm#hi		@ Xh|Xm - 256-bit result
+	vmov		$Xm#hi,$Xl#lo		@ Xm is rotated Xl
+	 vext.8		$I2,$j2,$j2,#8
+	 vext.8		$I1,$j1,$j1,#8
+	veor		$Xl,$Xm,$t2
+
+	 vpmull.p64	$Yl,$H,$I2		@ H·Ii+2
+	 veor		$j2,$j2,$I2
+
+	vext.8		$t2,$Xl,$Xl,#8		@ 2nd phase of reduction
+	vpmull.p64	$Xl,$Xl,$xC2
+	veor		$t2,$t2,$Xh
+	 vpmull2.p64	$Yh,$H,$I2
+	 vpmull.p64	$Ym,$Hhl,$j2
+	veor		$Xl,$Xl,$t2
+	 vpmull.p64	$j3,$H2,$I1		@ H^2·Ii+1
+	 veor		$j1,$j1,$I1
+	vext.8		$Xl,$Xl,$Xl,#8
+
+	 vpmull2.p64	$I1,$H2,$I1
+	veor		$t0,$I0,$Xl
+	 vpmull2.p64	$j1,$Hhl,$j1
+	vext.8		$IN,$t0,$t0,#8
+
+	 veor		$Yl,$Yl,$j3
+	 veor		$Yh,$Yh,$I1
+	 veor		$Ym,$Ym,$j1
+
+	vpmull.p64	$Xl,$H3,$IN		@ H^3·(Xi+Ii)
+	veor		$t0,$t0,$IN
+	vpmull2.p64	$Xh,$H3,$IN
+	vpmull.p64	$Xm,$H34,$t0
+
+	veor		$Xl,$Xl,$Yl
+	veor		$Xh,$Xh,$Yh
+	veor		$Xm,$Xm,$Ym
+	b		.Ldone4x
+
+.align	4
+.Ltwo:
+	vext.8		$t1,$Xl,$Xh,#8		@ Karatsuba post-processing
+	veor		$t2,$Xl,$Xh
+	veor		$Xm,$Xm,$t1
+	 vld1.64	{$I0-$j1},[$inp]
+	veor		$Xm,$Xm,$t2
+#ifndef	__ARMEB__
+	 vrev64.8	$j1,$j1
+	 vrev64.8	$I0,$I0
+#endif
+
+	vpmull.p64	$t2,$Xl,$xC2		@ 1st phase of reduction
+	vmov		$Xh#lo,$Xm#hi		@ Xh|Xm - 256-bit result
+	vmov		$Xm#hi,$Xl#lo		@ Xm is rotated Xl
+	 vext.8		$I1,$j1,$j1,#8
+	veor		$Xl,$Xm,$t2
+
+	vext.8		$t2,$Xl,$Xl,#8		@ 2nd phase of reduction
+	vpmull.p64	$Xl,$Xl,$xC2
+	veor		$t2,$t2,$Xh
+	veor		$Xl,$Xl,$t2
+	vext.8		$Xl,$Xl,$Xl,#8
+
+	 vpmull.p64	$Yl,$H,$I1		@ H·Ii+1
+	 veor		$j1,$j1,$I1
+
+	veor		$t0,$I0,$Xl
+	vext.8		$IN,$t0,$t0,#8
+
+	 vpmull2.p64	$Yh,$H,$I1
+	 vpmull.p64	$Ym,$Hhl,$j1
+
+	vpmull.p64	$Xl,$H2,$IN		@ H^2·(Xi+Ii)
+	veor		$t0,$t0,$IN
+	vpmull2.p64	$Xh,$H2,$IN
+	vpmull2.p64	$Xm,$Hhl,$t0
+
+	veor		$Xl,$Xl,$Yl
+	veor		$Xh,$Xh,$Yh
+	veor		$Xm,$Xm,$Ym
+	b		.Ldone4x
+
+.align	4
+.Lone:
+	vext.8		$t1,$Xl,$Xh,#8		@ Karatsuba post-processing
+	veor		$t2,$Xl,$Xh
+	veor		$Xm,$Xm,$t1
+	 vld1.64	{$I0},[$inp]
+	veor		$Xm,$Xm,$t2
+#ifndef	__ARMEB__
+	 vrev64.8	$I0,$I0
+#endif
+
+	vpmull.p64	$t2,$Xl,$xC2		@ 1st phase of reduction
+	vmov		$Xh#lo,$Xm#hi		@ Xh|Xm - 256-bit result
+	vmov		$Xm#hi,$Xl#lo		@ Xm is rotated Xl
+	veor		$Xl,$Xm,$t2
+
+	vext.8		$t2,$Xl,$Xl,#8		@ 2nd phase of reduction
+	vpmull.p64	$Xl,$Xl,$xC2
+	veor		$t2,$t2,$Xh
+	veor		$Xl,$Xl,$t2
+	vext.8		$Xl,$Xl,$Xl,#8
+
+	veor		$t0,$I0,$Xl
+	vext.8		$IN,$t0,$t0,#8
+
+	vpmull.p64	$Xl,$H,$IN
+	veor		$t0,$t0,$IN
+	vpmull2.p64	$Xh,$H,$IN
+	vpmull.p64	$Xm,$Hhl,$t0
+
+.Ldone4x:
+	vext.8		$t1,$Xl,$Xh,#8		@ Karatsuba post-processing
+	veor		$t2,$Xl,$Xh
+	veor		$Xm,$Xm,$t1
+	veor		$Xm,$Xm,$t2
+
+	vpmull.p64	$t2,$Xl,$xC2		@ 1st phase of reduction
+	vmov		$Xh#lo,$Xm#hi		@ Xh|Xm - 256-bit result
+	vmov		$Xm#hi,$Xl#lo		@ Xm is rotated Xl
+	veor		$Xl,$Xm,$t2
+
+	vext.8		$t2,$Xl,$Xl,#8		@ 2nd phase of reduction
+	vpmull.p64	$Xl,$Xl,$xC2
+	veor		$t2,$t2,$Xh
+	veor		$Xl,$Xl,$t2
+	vext.8		$Xl,$Xl,$Xl,#8
+
+#ifndef __ARMEB__
+	vrev64.8	$Xl,$Xl
+#endif
+	vst1.64		{$Xl},[$Xi]		@ write out Xi
+
+	ret
+.size	gcm_ghash_v8_4x,.-gcm_ghash_v8_4x
+___
+
+}
+}
+
+$code.=<<___;
+.asciz  "GHASH for ARMv8, CRYPTOGAMS by <appro\@openssl.org>"
+.align  2
+#endif
+___
+
+if ($flavour =~ /64/) {			######## 64-bit code
+    sub unvmov {
+	my $arg=shift;
+
+	$arg =~ m/q([0-9]+)#(lo|hi),\s*q([0-9]+)#(lo|hi)/o &&
+	sprintf	"ins	v%d.d[%d],v%d.d[%d]",$1<8?$1:$1+8,($2 eq "lo")?0:1,
+					     $3<8?$3:$3+8,($4 eq "lo")?0:1;
+    }
+    foreach(split("\n",$code)) {
+	s/cclr\s+([wx])([^,]+),\s*([a-z]+)/csel	$1$2,$1zr,$1$2,$3/o	or
+	s/vmov\.i8/movi/o		or	# fix up legacy mnemonics
+	s/vmov\s+(.*)/unvmov($1)/geo	or
+	s/vext\.8/ext/o			or
+	s/vshr\.s/sshr\.s/o		or
+	s/vshr/ushr/o			or
+	s/^(\s+)v/$1/o			or	# strip off v prefix
+	s/\bbx\s+lr\b/ret/o;
+
+	s/\bq([0-9]+)\b/"v".($1<8?$1:$1+8).".16b"/geo;	# old->new registers
+	s/@\s/\/\//o;				# old->new style commentary
+
+	# fix up remaining legacy suffixes
+	s/\.[ui]?8(\s)/$1/o;
+	s/\.[uis]?32//o and s/\.16b/\.4s/go;
+	m/\.p64/o and s/\.16b/\.1q/o;		# 1st pmull argument
+	m/l\.p64/o and s/\.16b/\.1d/go;		# 2nd and 3rd pmull arguments
+	s/\.[uisp]?64//o and s/\.16b/\.2d/go;
+	s/\.[42]([sd])\[([0-3])\]/\.$1\[$2\]/o;
+
+	print $_,"\n";
+    }
+} else {				######## 32-bit code
+    sub unvdup32 {
+	my $arg=shift;
+
+	$arg =~ m/q([0-9]+),\s*q([0-9]+)\[([0-3])\]/o &&
+	sprintf	"vdup.32	q%d,d%d[%d]",$1,2*$2+($3>>1),$3&1;
+    }
+    sub unvpmullp64 {
+	my ($mnemonic,$arg)=@_;
+
+	if ($arg =~ m/q([0-9]+),\s*q([0-9]+),\s*q([0-9]+)/o) {
+	    my $word = 0xf2a00e00|(($1&7)<<13)|(($1&8)<<19)
+				 |(($2&7)<<17)|(($2&8)<<4)
+				 |(($3&7)<<1) |(($3&8)<<2);
+	    $word |= 0x00010001	 if ($mnemonic =~ "2");
+	    # since ARMv7 instructions are always encoded little-endian.
+	    # correct solution is to use .inst directive, but older
+	    # assemblers don't implement it:-(
+	    sprintf ".byte\t0x%02x,0x%02x,0x%02x,0x%02x\t@ %s %s",
+			$word&0xff,($word>>8)&0xff,
+			($word>>16)&0xff,($word>>24)&0xff,
+			$mnemonic,$arg;
+	}
+    }
+
+    foreach(split("\n",$code)) {
+	s/\b[wx]([0-9]+)\b/r$1/go;		# new->old registers
+	s/\bv([0-9])\.[12468]+[bsd]\b/q$1/go;	# new->old registers
+	s/\/\/\s?/@ /o;				# new->old style commentary
+
+	# fix up remaining new-style suffixes
+	s/\],#[0-9]+/]!/o;
+
+	s/cclr\s+([^,]+),\s*([a-z]+)/mov$2	$1,#0/o			or
+	s/vdup\.32\s+(.*)/unvdup32($1)/geo				or
+	s/v?(pmull2?)\.p64\s+(.*)/unvpmullp64($1,$2)/geo		or
+	s/\bq([0-9]+)#(lo|hi)/sprintf "d%d",2*$1+($2 eq "hi")/geo	or
+	s/^(\s+)b\./$1b/o						or
+	s/^(\s+)ret/$1bx\tlr/o;
+
+	print $_,"\n";
+    }
+}
+
+close STDOUT; # enforce flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/build.info
new file mode 100644
index 000000000..821340eb9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/build.info
@@ -0,0 +1,30 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        cbc128.c ctr128.c cts128.c cfb128.c ofb128.c gcm128.c \
+        ccm128.c xts128.c wrap128.c ocb128.c \
+        {- $target{modes_asm_src} -}
+
+INCLUDE[gcm128.o]=..
+
+GENERATE[ghash-ia64.s]=asm/ghash-ia64.pl $(LIB_CFLAGS) $(LIB_CPPFLAGS)
+GENERATE[ghash-x86.s]=asm/ghash-x86.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+GENERATE[ghash-x86_64.s]=asm/ghash-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[aesni-gcm-x86_64.s]=asm/aesni-gcm-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[ghash-sparcv9.S]=asm/ghash-sparcv9.pl $(PERLASM_SCHEME)
+INCLUDE[ghash-sparcv9.o]=..
+GENERATE[ghash-alpha.S]=asm/ghash-alpha.pl $(PERLASM_SCHEME)
+GENERATE[ghash-parisc.s]=asm/ghash-parisc.pl $(PERLASM_SCHEME)
+GENERATE[ghashp8-ppc.s]=asm/ghashp8-ppc.pl $(PERLASM_SCHEME)
+GENERATE[ghash-armv4.S]=asm/ghash-armv4.pl $(PERLASM_SCHEME)
+INCLUDE[ghash-armv4.o]=..
+GENERATE[ghashv8-armx.S]=asm/ghashv8-armx.pl $(PERLASM_SCHEME)
+INCLUDE[ghashv8-armx.o]=..
+GENERATE[ghash-s390x.S]=asm/ghash-s390x.pl $(PERLASM_SCHEME)
+INCLUDE[ghash-s390x.o]=..
+
+BEGINRAW[Makefile]
+# GNU make "catch all"
+{- $builddir -}/ghash-%.S:	{- $sourcedir -}/asm/ghash-%.pl
+	CC="$(CC)" $(PERL) $< $(PERLASM_SCHEME) $@
+ENDRAW[Makefile]
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/cbc128.c b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/cbc128.c
new file mode 100644
index 000000000..4ce5eb2ae
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/cbc128.c
@@ -0,0 +1,161 @@
+/*
+ * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/crypto.h>
+#include "modes_lcl.h"
+#include <string.h>
+
+#if !defined(STRICT_ALIGNMENT) && !defined(PEDANTIC)
+# define STRICT_ALIGNMENT 0
+#endif
+
+void CRYPTO_cbc128_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t len, const void *key,
+                           unsigned char ivec[16], block128_f block)
+{
+    size_t n;
+    const unsigned char *iv = ivec;
+
+    if (len == 0)
+        return;
+
+#if !defined(OPENSSL_SMALL_FOOTPRINT)
+    if (STRICT_ALIGNMENT &&
+        ((size_t)in | (size_t)out | (size_t)ivec) % sizeof(size_t) != 0) {
+        while (len >= 16) {
+            for (n = 0; n < 16; ++n)
+                out[n] = in[n] ^ iv[n];
+            (*block) (out, out, key);
+            iv = out;
+            len -= 16;
+            in += 16;
+            out += 16;
+        }
+    } else {
+        while (len >= 16) {
+            for (n = 0; n < 16; n += sizeof(size_t))
+                *(size_t *)(out + n) =
+                    *(size_t *)(in + n) ^ *(size_t *)(iv + n);
+            (*block) (out, out, key);
+            iv = out;
+            len -= 16;
+            in += 16;
+            out += 16;
+        }
+    }
+#endif
+    while (len) {
+        for (n = 0; n < 16 && n < len; ++n)
+            out[n] = in[n] ^ iv[n];
+        for (; n < 16; ++n)
+            out[n] = iv[n];
+        (*block) (out, out, key);
+        iv = out;
+        if (len <= 16)
+            break;
+        len -= 16;
+        in += 16;
+        out += 16;
+    }
+    memcpy(ivec, iv, 16);
+}
+
+void CRYPTO_cbc128_decrypt(const unsigned char *in, unsigned char *out,
+                           size_t len, const void *key,
+                           unsigned char ivec[16], block128_f block)
+{
+    size_t n;
+    union {
+        size_t t[16 / sizeof(size_t)];
+        unsigned char c[16];
+    } tmp;
+
+    if (len == 0)
+        return;
+
+#if !defined(OPENSSL_SMALL_FOOTPRINT)
+    if (in != out) {
+        const unsigned char *iv = ivec;
+
+        if (STRICT_ALIGNMENT &&
+            ((size_t)in | (size_t)out | (size_t)ivec) % sizeof(size_t) != 0) {
+            while (len >= 16) {
+                (*block) (in, out, key);
+                for (n = 0; n < 16; ++n)
+                    out[n] ^= iv[n];
+                iv = in;
+                len -= 16;
+                in += 16;
+                out += 16;
+            }
+        } else if (16 % sizeof(size_t) == 0) { /* always true */
+            while (len >= 16) {
+                size_t *out_t = (size_t *)out, *iv_t = (size_t *)iv;
+
+                (*block) (in, out, key);
+                for (n = 0; n < 16 / sizeof(size_t); n++)
+                    out_t[n] ^= iv_t[n];
+                iv = in;
+                len -= 16;
+                in += 16;
+                out += 16;
+            }
+        }
+        memcpy(ivec, iv, 16);
+    } else {
+        if (STRICT_ALIGNMENT &&
+            ((size_t)in | (size_t)out | (size_t)ivec) % sizeof(size_t) != 0) {
+            unsigned char c;
+            while (len >= 16) {
+                (*block) (in, tmp.c, key);
+                for (n = 0; n < 16; ++n) {
+                    c = in[n];
+                    out[n] = tmp.c[n] ^ ivec[n];
+                    ivec[n] = c;
+                }
+                len -= 16;
+                in += 16;
+                out += 16;
+            }
+        } else if (16 % sizeof(size_t) == 0) { /* always true */
+            while (len >= 16) {
+                size_t c, *out_t = (size_t *)out, *ivec_t = (size_t *)ivec;
+                const size_t *in_t = (const size_t *)in;
+
+                (*block) (in, tmp.c, key);
+                for (n = 0; n < 16 / sizeof(size_t); n++) {
+                    c = in_t[n];
+                    out_t[n] = tmp.t[n] ^ ivec_t[n];
+                    ivec_t[n] = c;
+                }
+                len -= 16;
+                in += 16;
+                out += 16;
+            }
+        }
+    }
+#endif
+    while (len) {
+        unsigned char c;
+        (*block) (in, tmp.c, key);
+        for (n = 0; n < 16 && n < len; ++n) {
+            c = in[n];
+            out[n] = tmp.c[n] ^ ivec[n];
+            ivec[n] = c;
+        }
+        if (len <= 16) {
+            for (; n < 16; ++n)
+                ivec[n] = in[n];
+            break;
+        }
+        len -= 16;
+        in += 16;
+        out += 16;
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/ccm128.c b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/ccm128.c
new file mode 100644
index 000000000..85ce84f10
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/ccm128.c
@@ -0,0 +1,432 @@
+/*
+ * Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/crypto.h>
+#include "modes_lcl.h"
+#include <string.h>
+
+/*
+ * First you setup M and L parameters and pass the key schedule. This is
+ * called once per session setup...
+ */
+void CRYPTO_ccm128_init(CCM128_CONTEXT *ctx,
+                        unsigned int M, unsigned int L, void *key,
+                        block128_f block)
+{
+    memset(ctx->nonce.c, 0, sizeof(ctx->nonce.c));
+    ctx->nonce.c[0] = ((u8)(L - 1) & 7) | (u8)(((M - 2) / 2) & 7) << 3;
+    ctx->blocks = 0;
+    ctx->block = block;
+    ctx->key = key;
+}
+
+/* !!! Following interfaces are to be called *once* per packet !!! */
+
+/* Then you setup per-message nonce and pass the length of the message */
+int CRYPTO_ccm128_setiv(CCM128_CONTEXT *ctx,
+                        const unsigned char *nonce, size_t nlen, size_t mlen)
+{
+    unsigned int L = ctx->nonce.c[0] & 7; /* the L parameter */
+
+    if (nlen < (14 - L))
+        return -1;              /* nonce is too short */
+
+    if (sizeof(mlen) == 8 && L >= 3) {
+        ctx->nonce.c[8] = (u8)(mlen >> (56 % (sizeof(mlen) * 8)));
+        ctx->nonce.c[9] = (u8)(mlen >> (48 % (sizeof(mlen) * 8)));
+        ctx->nonce.c[10] = (u8)(mlen >> (40 % (sizeof(mlen) * 8)));
+        ctx->nonce.c[11] = (u8)(mlen >> (32 % (sizeof(mlen) * 8)));
+    } else
+        ctx->nonce.u[1] = 0;
+
+    ctx->nonce.c[12] = (u8)(mlen >> 24);
+    ctx->nonce.c[13] = (u8)(mlen >> 16);
+    ctx->nonce.c[14] = (u8)(mlen >> 8);
+    ctx->nonce.c[15] = (u8)mlen;
+
+    ctx->nonce.c[0] &= ~0x40;   /* clear Adata flag */
+    memcpy(&ctx->nonce.c[1], nonce, 14 - L);
+
+    return 0;
+}
+
+/* Then you pass additional authentication data, this is optional */
+void CRYPTO_ccm128_aad(CCM128_CONTEXT *ctx,
+                       const unsigned char *aad, size_t alen)
+{
+    unsigned int i;
+    block128_f block = ctx->block;
+
+    if (alen == 0)
+        return;
+
+    ctx->nonce.c[0] |= 0x40;    /* set Adata flag */
+    (*block) (ctx->nonce.c, ctx->cmac.c, ctx->key), ctx->blocks++;
+
+    if (alen < (0x10000 - 0x100)) {
+        ctx->cmac.c[0] ^= (u8)(alen >> 8);
+        ctx->cmac.c[1] ^= (u8)alen;
+        i = 2;
+    } else if (sizeof(alen) == 8
+               && alen >= (size_t)1 << (32 % (sizeof(alen) * 8))) {
+        ctx->cmac.c[0] ^= 0xFF;
+        ctx->cmac.c[1] ^= 0xFF;
+        ctx->cmac.c[2] ^= (u8)(alen >> (56 % (sizeof(alen) * 8)));
+        ctx->cmac.c[3] ^= (u8)(alen >> (48 % (sizeof(alen) * 8)));
+        ctx->cmac.c[4] ^= (u8)(alen >> (40 % (sizeof(alen) * 8)));
+        ctx->cmac.c[5] ^= (u8)(alen >> (32 % (sizeof(alen) * 8)));
+        ctx->cmac.c[6] ^= (u8)(alen >> 24);
+        ctx->cmac.c[7] ^= (u8)(alen >> 16);
+        ctx->cmac.c[8] ^= (u8)(alen >> 8);
+        ctx->cmac.c[9] ^= (u8)alen;
+        i = 10;
+    } else {
+        ctx->cmac.c[0] ^= 0xFF;
+        ctx->cmac.c[1] ^= 0xFE;
+        ctx->cmac.c[2] ^= (u8)(alen >> 24);
+        ctx->cmac.c[3] ^= (u8)(alen >> 16);
+        ctx->cmac.c[4] ^= (u8)(alen >> 8);
+        ctx->cmac.c[5] ^= (u8)alen;
+        i = 6;
+    }
+
+    do {
+        for (; i < 16 && alen; ++i, ++aad, --alen)
+            ctx->cmac.c[i] ^= *aad;
+        (*block) (ctx->cmac.c, ctx->cmac.c, ctx->key), ctx->blocks++;
+        i = 0;
+    } while (alen);
+}
+
+/* Finally you encrypt or decrypt the message */
+
+/*
+ * counter part of nonce may not be larger than L*8 bits, L is not larger
+ * than 8, therefore 64-bit counter...
+ */
+static void ctr64_inc(unsigned char *counter)
+{
+    unsigned int n = 8;
+    u8 c;
+
+    counter += 8;
+    do {
+        --n;
+        c = counter[n];
+        ++c;
+        counter[n] = c;
+        if (c)
+            return;
+    } while (n);
+}
+
+int CRYPTO_ccm128_encrypt(CCM128_CONTEXT *ctx,
+                          const unsigned char *inp, unsigned char *out,
+                          size_t len)
+{
+    size_t n;
+    unsigned int i, L;
+    unsigned char flags0 = ctx->nonce.c[0];
+    block128_f block = ctx->block;
+    void *key = ctx->key;
+    union {
+        u64 u[2];
+        u8 c[16];
+    } scratch;
+
+    if (!(flags0 & 0x40))
+        (*block) (ctx->nonce.c, ctx->cmac.c, key), ctx->blocks++;
+
+    ctx->nonce.c[0] = L = flags0 & 7;
+    for (n = 0, i = 15 - L; i < 15; ++i) {
+        n |= ctx->nonce.c[i];
+        ctx->nonce.c[i] = 0;
+        n <<= 8;
+    }
+    n |= ctx->nonce.c[15];      /* reconstructed length */
+    ctx->nonce.c[15] = 1;
+
+    if (n != len)
+        return -1;              /* length mismatch */
+
+    ctx->blocks += ((len + 15) >> 3) | 1;
+    if (ctx->blocks > (U64(1) << 61))
+        return -2;              /* too much data */
+
+    while (len >= 16) {
+#if defined(STRICT_ALIGNMENT)
+        union {
+            u64 u[2];
+            u8 c[16];
+        } temp;
+
+        memcpy(temp.c, inp, 16);
+        ctx->cmac.u[0] ^= temp.u[0];
+        ctx->cmac.u[1] ^= temp.u[1];
+#else
+        ctx->cmac.u[0] ^= ((u64 *)inp)[0];
+        ctx->cmac.u[1] ^= ((u64 *)inp)[1];
+#endif
+        (*block) (ctx->cmac.c, ctx->cmac.c, key);
+        (*block) (ctx->nonce.c, scratch.c, key);
+        ctr64_inc(ctx->nonce.c);
+#if defined(STRICT_ALIGNMENT)
+        temp.u[0] ^= scratch.u[0];
+        temp.u[1] ^= scratch.u[1];
+        memcpy(out, temp.c, 16);
+#else
+        ((u64 *)out)[0] = scratch.u[0] ^ ((u64 *)inp)[0];
+        ((u64 *)out)[1] = scratch.u[1] ^ ((u64 *)inp)[1];
+#endif
+        inp += 16;
+        out += 16;
+        len -= 16;
+    }
+
+    if (len) {
+        for (i = 0; i < len; ++i)
+            ctx->cmac.c[i] ^= inp[i];
+        (*block) (ctx->cmac.c, ctx->cmac.c, key);
+        (*block) (ctx->nonce.c, scratch.c, key);
+        for (i = 0; i < len; ++i)
+            out[i] = scratch.c[i] ^ inp[i];
+    }
+
+    for (i = 15 - L; i < 16; ++i)
+        ctx->nonce.c[i] = 0;
+
+    (*block) (ctx->nonce.c, scratch.c, key);
+    ctx->cmac.u[0] ^= scratch.u[0];
+    ctx->cmac.u[1] ^= scratch.u[1];
+
+    ctx->nonce.c[0] = flags0;
+
+    return 0;
+}
+
+int CRYPTO_ccm128_decrypt(CCM128_CONTEXT *ctx,
+                          const unsigned char *inp, unsigned char *out,
+                          size_t len)
+{
+    size_t n;
+    unsigned int i, L;
+    unsigned char flags0 = ctx->nonce.c[0];
+    block128_f block = ctx->block;
+    void *key = ctx->key;
+    union {
+        u64 u[2];
+        u8 c[16];
+    } scratch;
+
+    if (!(flags0 & 0x40))
+        (*block) (ctx->nonce.c, ctx->cmac.c, key);
+
+    ctx->nonce.c[0] = L = flags0 & 7;
+    for (n = 0, i = 15 - L; i < 15; ++i) {
+        n |= ctx->nonce.c[i];
+        ctx->nonce.c[i] = 0;
+        n <<= 8;
+    }
+    n |= ctx->nonce.c[15];      /* reconstructed length */
+    ctx->nonce.c[15] = 1;
+
+    if (n != len)
+        return -1;
+
+    while (len >= 16) {
+#if defined(STRICT_ALIGNMENT)
+        union {
+            u64 u[2];
+            u8 c[16];
+        } temp;
+#endif
+        (*block) (ctx->nonce.c, scratch.c, key);
+        ctr64_inc(ctx->nonce.c);
+#if defined(STRICT_ALIGNMENT)
+        memcpy(temp.c, inp, 16);
+        ctx->cmac.u[0] ^= (scratch.u[0] ^= temp.u[0]);
+        ctx->cmac.u[1] ^= (scratch.u[1] ^= temp.u[1]);
+        memcpy(out, scratch.c, 16);
+#else
+        ctx->cmac.u[0] ^= (((u64 *)out)[0] = scratch.u[0] ^ ((u64 *)inp)[0]);
+        ctx->cmac.u[1] ^= (((u64 *)out)[1] = scratch.u[1] ^ ((u64 *)inp)[1]);
+#endif
+        (*block) (ctx->cmac.c, ctx->cmac.c, key);
+
+        inp += 16;
+        out += 16;
+        len -= 16;
+    }
+
+    if (len) {
+        (*block) (ctx->nonce.c, scratch.c, key);
+        for (i = 0; i < len; ++i)
+            ctx->cmac.c[i] ^= (out[i] = scratch.c[i] ^ inp[i]);
+        (*block) (ctx->cmac.c, ctx->cmac.c, key);
+    }
+
+    for (i = 15 - L; i < 16; ++i)
+        ctx->nonce.c[i] = 0;
+
+    (*block) (ctx->nonce.c, scratch.c, key);
+    ctx->cmac.u[0] ^= scratch.u[0];
+    ctx->cmac.u[1] ^= scratch.u[1];
+
+    ctx->nonce.c[0] = flags0;
+
+    return 0;
+}
+
+static void ctr64_add(unsigned char *counter, size_t inc)
+{
+    size_t n = 8, val = 0;
+
+    counter += 8;
+    do {
+        --n;
+        val += counter[n] + (inc & 0xff);
+        counter[n] = (unsigned char)val;
+        val >>= 8;              /* carry bit */
+        inc >>= 8;
+    } while (n && (inc || val));
+}
+
+int CRYPTO_ccm128_encrypt_ccm64(CCM128_CONTEXT *ctx,
+                                const unsigned char *inp, unsigned char *out,
+                                size_t len, ccm128_f stream)
+{
+    size_t n;
+    unsigned int i, L;
+    unsigned char flags0 = ctx->nonce.c[0];
+    block128_f block = ctx->block;
+    void *key = ctx->key;
+    union {
+        u64 u[2];
+        u8 c[16];
+    } scratch;
+
+    if (!(flags0 & 0x40))
+        (*block) (ctx->nonce.c, ctx->cmac.c, key), ctx->blocks++;
+
+    ctx->nonce.c[0] = L = flags0 & 7;
+    for (n = 0, i = 15 - L; i < 15; ++i) {
+        n |= ctx->nonce.c[i];
+        ctx->nonce.c[i] = 0;
+        n <<= 8;
+    }
+    n |= ctx->nonce.c[15];      /* reconstructed length */
+    ctx->nonce.c[15] = 1;
+
+    if (n != len)
+        return -1;              /* length mismatch */
+
+    ctx->blocks += ((len + 15) >> 3) | 1;
+    if (ctx->blocks > (U64(1) << 61))
+        return -2;              /* too much data */
+
+    if ((n = len / 16)) {
+        (*stream) (inp, out, n, key, ctx->nonce.c, ctx->cmac.c);
+        n *= 16;
+        inp += n;
+        out += n;
+        len -= n;
+        if (len)
+            ctr64_add(ctx->nonce.c, n / 16);
+    }
+
+    if (len) {
+        for (i = 0; i < len; ++i)
+            ctx->cmac.c[i] ^= inp[i];
+        (*block) (ctx->cmac.c, ctx->cmac.c, key);
+        (*block) (ctx->nonce.c, scratch.c, key);
+        for (i = 0; i < len; ++i)
+            out[i] = scratch.c[i] ^ inp[i];
+    }
+
+    for (i = 15 - L; i < 16; ++i)
+        ctx->nonce.c[i] = 0;
+
+    (*block) (ctx->nonce.c, scratch.c, key);
+    ctx->cmac.u[0] ^= scratch.u[0];
+    ctx->cmac.u[1] ^= scratch.u[1];
+
+    ctx->nonce.c[0] = flags0;
+
+    return 0;
+}
+
+int CRYPTO_ccm128_decrypt_ccm64(CCM128_CONTEXT *ctx,
+                                const unsigned char *inp, unsigned char *out,
+                                size_t len, ccm128_f stream)
+{
+    size_t n;
+    unsigned int i, L;
+    unsigned char flags0 = ctx->nonce.c[0];
+    block128_f block = ctx->block;
+    void *key = ctx->key;
+    union {
+        u64 u[2];
+        u8 c[16];
+    } scratch;
+
+    if (!(flags0 & 0x40))
+        (*block) (ctx->nonce.c, ctx->cmac.c, key);
+
+    ctx->nonce.c[0] = L = flags0 & 7;
+    for (n = 0, i = 15 - L; i < 15; ++i) {
+        n |= ctx->nonce.c[i];
+        ctx->nonce.c[i] = 0;
+        n <<= 8;
+    }
+    n |= ctx->nonce.c[15];      /* reconstructed length */
+    ctx->nonce.c[15] = 1;
+
+    if (n != len)
+        return -1;
+
+    if ((n = len / 16)) {
+        (*stream) (inp, out, n, key, ctx->nonce.c, ctx->cmac.c);
+        n *= 16;
+        inp += n;
+        out += n;
+        len -= n;
+        if (len)
+            ctr64_add(ctx->nonce.c, n / 16);
+    }
+
+    if (len) {
+        (*block) (ctx->nonce.c, scratch.c, key);
+        for (i = 0; i < len; ++i)
+            ctx->cmac.c[i] ^= (out[i] = scratch.c[i] ^ inp[i]);
+        (*block) (ctx->cmac.c, ctx->cmac.c, key);
+    }
+
+    for (i = 15 - L; i < 16; ++i)
+        ctx->nonce.c[i] = 0;
+
+    (*block) (ctx->nonce.c, scratch.c, key);
+    ctx->cmac.u[0] ^= scratch.u[0];
+    ctx->cmac.u[1] ^= scratch.u[1];
+
+    ctx->nonce.c[0] = flags0;
+
+    return 0;
+}
+
+size_t CRYPTO_ccm128_tag(CCM128_CONTEXT *ctx, unsigned char *tag, size_t len)
+{
+    unsigned int M = (ctx->nonce.c[0] >> 3) & 7; /* the M parameter */
+
+    M *= 2;
+    M += 2;
+    if (len < M)
+        return 0;
+    memcpy(tag, ctx->cmac.c, M);
+    return M;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/cfb128.c b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/cfb128.c
new file mode 100644
index 000000000..e439567fe
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/cfb128.c
@@ -0,0 +1,198 @@
+/*
+ * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/crypto.h>
+#include "modes_lcl.h"
+#include <string.h>
+
+/*
+ * The input and output encrypted as though 128bit cfb mode is being used.
+ * The extra state information to record how much of the 128bit block we have
+ * used is contained in *num;
+ */
+void CRYPTO_cfb128_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t len, const void *key,
+                           unsigned char ivec[16], int *num,
+                           int enc, block128_f block)
+{
+    unsigned int n;
+    size_t l = 0;
+
+    n = *num;
+
+    if (enc) {
+#if !defined(OPENSSL_SMALL_FOOTPRINT)
+        if (16 % sizeof(size_t) == 0) { /* always true actually */
+            do {
+                while (n && len) {
+                    *(out++) = ivec[n] ^= *(in++);
+                    --len;
+                    n = (n + 1) % 16;
+                }
+# if defined(STRICT_ALIGNMENT)
+                if (((size_t)in | (size_t)out | (size_t)ivec) %
+                    sizeof(size_t) != 0)
+                    break;
+# endif
+                while (len >= 16) {
+                    (*block) (ivec, ivec, key);
+                    for (; n < 16; n += sizeof(size_t)) {
+                        *(size_t *)(out + n) =
+                            *(size_t *)(ivec + n) ^= *(size_t *)(in + n);
+                    }
+                    len -= 16;
+                    out += 16;
+                    in += 16;
+                    n = 0;
+                }
+                if (len) {
+                    (*block) (ivec, ivec, key);
+                    while (len--) {
+                        out[n] = ivec[n] ^= in[n];
+                        ++n;
+                    }
+                }
+                *num = n;
+                return;
+            } while (0);
+        }
+        /* the rest would be commonly eliminated by x86* compiler */
+#endif
+        while (l < len) {
+            if (n == 0) {
+                (*block) (ivec, ivec, key);
+            }
+            out[l] = ivec[n] ^= in[l];
+            ++l;
+            n = (n + 1) % 16;
+        }
+        *num = n;
+    } else {
+#if !defined(OPENSSL_SMALL_FOOTPRINT)
+        if (16 % sizeof(size_t) == 0) { /* always true actually */
+            do {
+                while (n && len) {
+                    unsigned char c;
+                    *(out++) = ivec[n] ^ (c = *(in++));
+                    ivec[n] = c;
+                    --len;
+                    n = (n + 1) % 16;
+                }
+# if defined(STRICT_ALIGNMENT)
+                if (((size_t)in | (size_t)out | (size_t)ivec) %
+                    sizeof(size_t) != 0)
+                    break;
+# endif
+                while (len >= 16) {
+                    (*block) (ivec, ivec, key);
+                    for (; n < 16; n += sizeof(size_t)) {
+                        size_t t = *(size_t *)(in + n);
+                        *(size_t *)(out + n) = *(size_t *)(ivec + n) ^ t;
+                        *(size_t *)(ivec + n) = t;
+                    }
+                    len -= 16;
+                    out += 16;
+                    in += 16;
+                    n = 0;
+                }
+                if (len) {
+                    (*block) (ivec, ivec, key);
+                    while (len--) {
+                        unsigned char c;
+                        out[n] = ivec[n] ^ (c = in[n]);
+                        ivec[n] = c;
+                        ++n;
+                    }
+                }
+                *num = n;
+                return;
+            } while (0);
+        }
+        /* the rest would be commonly eliminated by x86* compiler */
+#endif
+        while (l < len) {
+            unsigned char c;
+            if (n == 0) {
+                (*block) (ivec, ivec, key);
+            }
+            out[l] = ivec[n] ^ (c = in[l]);
+            ivec[n] = c;
+            ++l;
+            n = (n + 1) % 16;
+        }
+        *num = n;
+    }
+}
+
+/*
+ * This expects a single block of size nbits for both in and out. Note that
+ * it corrupts any extra bits in the last byte of out
+ */
+static void cfbr_encrypt_block(const unsigned char *in, unsigned char *out,
+                               int nbits, const void *key,
+                               unsigned char ivec[16], int enc,
+                               block128_f block)
+{
+    int n, rem, num;
+    unsigned char ovec[16 * 2 + 1]; /* +1 because we dereference (but don't
+                                     * use) one byte off the end */
+
+    if (nbits <= 0 || nbits > 128)
+        return;
+
+    /* fill in the first half of the new IV with the current IV */
+    memcpy(ovec, ivec, 16);
+    /* construct the new IV */
+    (*block) (ivec, ivec, key);
+    num = (nbits + 7) / 8;
+    if (enc)                    /* encrypt the input */
+        for (n = 0; n < num; ++n)
+            out[n] = (ovec[16 + n] = in[n] ^ ivec[n]);
+    else                        /* decrypt the input */
+        for (n = 0; n < num; ++n)
+            out[n] = (ovec[16 + n] = in[n]) ^ ivec[n];
+    /* shift ovec left... */
+    rem = nbits % 8;
+    num = nbits / 8;
+    if (rem == 0)
+        memcpy(ivec, ovec + num, 16);
+    else
+        for (n = 0; n < 16; ++n)
+            ivec[n] = ovec[n + num] << rem | ovec[n + num + 1] >> (8 - rem);
+
+    /* it is not necessary to cleanse ovec, since the IV is not secret */
+}
+
+/* N.B. This expects the input to be packed, MS bit first */
+void CRYPTO_cfb128_1_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t bits, const void *key,
+                             unsigned char ivec[16], int *num,
+                             int enc, block128_f block)
+{
+    size_t n;
+    unsigned char c[1], d[1];
+
+    for (n = 0; n < bits; ++n) {
+        c[0] = (in[n / 8] & (1 << (7 - n % 8))) ? 0x80 : 0;
+        cfbr_encrypt_block(c, d, 1, key, ivec, enc, block);
+        out[n / 8] = (out[n / 8] & ~(1 << (unsigned int)(7 - n % 8))) |
+            ((d[0] & 0x80) >> (unsigned int)(n % 8));
+    }
+}
+
+void CRYPTO_cfb128_8_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t length, const void *key,
+                             unsigned char ivec[16], int *num,
+                             int enc, block128_f block)
+{
+    size_t n;
+
+    for (n = 0; n < length; ++n)
+        cfbr_encrypt_block(&in[n], &out[n], 8, key, ivec, enc, block);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/ctr128.c b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/ctr128.c
new file mode 100644
index 000000000..03920b447
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/ctr128.c
@@ -0,0 +1,209 @@
+/*
+ * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/crypto.h>
+#include "modes_lcl.h"
+#include <string.h>
+
+/*
+ * NOTE: the IV/counter CTR mode is big-endian.  The code itself is
+ * endian-neutral.
+ */
+
+/* increment counter (128-bit int) by 1 */
+static void ctr128_inc(unsigned char *counter)
+{
+    u32 n = 16, c = 1;
+
+    do {
+        --n;
+        c += counter[n];
+        counter[n] = (u8)c;
+        c >>= 8;
+    } while (n);
+}
+
+#if !defined(OPENSSL_SMALL_FOOTPRINT)
+static void ctr128_inc_aligned(unsigned char *counter)
+{
+    size_t *data, c, d, n;
+    const union {
+        long one;
+        char little;
+    } is_endian = {
+        1
+    };
+
+    if (is_endian.little || ((size_t)counter % sizeof(size_t)) != 0) {
+        ctr128_inc(counter);
+        return;
+    }
+
+    data = (size_t *)counter;
+    c = 1;
+    n = 16 / sizeof(size_t);
+    do {
+        --n;
+        d = data[n] += c;
+        /* did addition carry? */
+        c = ((d - c) & ~d) >> (sizeof(size_t) * 8 - 1);
+    } while (n);
+}
+#endif
+
+/*
+ * The input encrypted as though 128bit counter mode is being used.  The
+ * extra state information to record how much of the 128bit block we have
+ * used is contained in *num, and the encrypted counter is kept in
+ * ecount_buf.  Both *num and ecount_buf must be initialised with zeros
+ * before the first call to CRYPTO_ctr128_encrypt(). This algorithm assumes
+ * that the counter is in the x lower bits of the IV (ivec), and that the
+ * application has full control over overflow and the rest of the IV.  This
+ * implementation takes NO responsibility for checking that the counter
+ * doesn't overflow into the rest of the IV when incremented.
+ */
+void CRYPTO_ctr128_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t len, const void *key,
+                           unsigned char ivec[16],
+                           unsigned char ecount_buf[16], unsigned int *num,
+                           block128_f block)
+{
+    unsigned int n;
+    size_t l = 0;
+
+    n = *num;
+
+#if !defined(OPENSSL_SMALL_FOOTPRINT)
+    if (16 % sizeof(size_t) == 0) { /* always true actually */
+        do {
+            while (n && len) {
+                *(out++) = *(in++) ^ ecount_buf[n];
+                --len;
+                n = (n + 1) % 16;
+            }
+
+# if defined(STRICT_ALIGNMENT)
+            if (((size_t)in | (size_t)out | (size_t)ecount_buf)
+                % sizeof(size_t) != 0)
+                break;
+# endif
+            while (len >= 16) {
+                (*block) (ivec, ecount_buf, key);
+                ctr128_inc_aligned(ivec);
+                for (n = 0; n < 16; n += sizeof(size_t))
+                    *(size_t *)(out + n) =
+                        *(size_t *)(in + n) ^ *(size_t *)(ecount_buf + n);
+                len -= 16;
+                out += 16;
+                in += 16;
+                n = 0;
+            }
+            if (len) {
+                (*block) (ivec, ecount_buf, key);
+                ctr128_inc_aligned(ivec);
+                while (len--) {
+                    out[n] = in[n] ^ ecount_buf[n];
+                    ++n;
+                }
+            }
+            *num = n;
+            return;
+        } while (0);
+    }
+    /* the rest would be commonly eliminated by x86* compiler */
+#endif
+    while (l < len) {
+        if (n == 0) {
+            (*block) (ivec, ecount_buf, key);
+            ctr128_inc(ivec);
+        }
+        out[l] = in[l] ^ ecount_buf[n];
+        ++l;
+        n = (n + 1) % 16;
+    }
+
+    *num = n;
+}
+
+/* increment upper 96 bits of 128-bit counter by 1 */
+static void ctr96_inc(unsigned char *counter)
+{
+    u32 n = 12, c = 1;
+
+    do {
+        --n;
+        c += counter[n];
+        counter[n] = (u8)c;
+        c >>= 8;
+    } while (n);
+}
+
+void CRYPTO_ctr128_encrypt_ctr32(const unsigned char *in, unsigned char *out,
+                                 size_t len, const void *key,
+                                 unsigned char ivec[16],
+                                 unsigned char ecount_buf[16],
+                                 unsigned int *num, ctr128_f func)
+{
+    unsigned int n, ctr32;
+
+    n = *num;
+
+    while (n && len) {
+        *(out++) = *(in++) ^ ecount_buf[n];
+        --len;
+        n = (n + 1) % 16;
+    }
+
+    ctr32 = GETU32(ivec + 12);
+    while (len >= 16) {
+        size_t blocks = len / 16;
+        /*
+         * 1<<28 is just a not-so-small yet not-so-large number...
+         * Below condition is practically never met, but it has to
+         * be checked for code correctness.
+         */
+        if (sizeof(size_t) > sizeof(unsigned int) && blocks > (1U << 28))
+            blocks = (1U << 28);
+        /*
+         * As (*func) operates on 32-bit counter, caller
+         * has to handle overflow. 'if' below detects the
+         * overflow, which is then handled by limiting the
+         * amount of blocks to the exact overflow point...
+         */
+        ctr32 += (u32)blocks;
+        if (ctr32 < blocks) {
+            blocks -= ctr32;
+            ctr32 = 0;
+        }
+        (*func) (in, out, blocks, key, ivec);
+        /* (*ctr) does not update ivec, caller does: */
+        PUTU32(ivec + 12, ctr32);
+        /* ... overflow was detected, propagate carry. */
+        if (ctr32 == 0)
+            ctr96_inc(ivec);
+        blocks *= 16;
+        len -= blocks;
+        out += blocks;
+        in += blocks;
+    }
+    if (len) {
+        memset(ecount_buf, 0, 16);
+        (*func) (ecount_buf, ecount_buf, 1, key, ivec);
+        ++ctr32;
+        PUTU32(ivec + 12, ctr32);
+        if (ctr32 == 0)
+            ctr96_inc(ivec);
+        while (len--) {
+            out[n] = in[n] ^ ecount_buf[n];
+            ++n;
+        }
+    }
+
+    *num = n;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/cts128.c b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/cts128.c
new file mode 100644
index 000000000..93826a1e2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/cts128.c
@@ -0,0 +1,330 @@
+/*
+ * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/crypto.h>
+#include "modes_lcl.h"
+#include <string.h>
+
+/*
+ * Trouble with Ciphertext Stealing, CTS, mode is that there is no
+ * common official specification, but couple of cipher/application
+ * specific ones: RFC2040 and RFC3962. Then there is 'Proposal to
+ * Extend CBC Mode By "Ciphertext Stealing"' at NIST site, which
+ * deviates from mentioned RFCs. Most notably it allows input to be
+ * of block length and it doesn't flip the order of the last two
+ * blocks. CTS is being discussed even in ECB context, but it's not
+ * adopted for any known application. This implementation provides
+ * two interfaces: one compliant with above mentioned RFCs and one
+ * compliant with the NIST proposal, both extending CBC mode.
+ */
+
+size_t CRYPTO_cts128_encrypt_block(const unsigned char *in,
+                                   unsigned char *out, size_t len,
+                                   const void *key, unsigned char ivec[16],
+                                   block128_f block)
+{
+    size_t residue, n;
+
+    if (len <= 16)
+        return 0;
+
+    if ((residue = len % 16) == 0)
+        residue = 16;
+
+    len -= residue;
+
+    CRYPTO_cbc128_encrypt(in, out, len, key, ivec, block);
+
+    in += len;
+    out += len;
+
+    for (n = 0; n < residue; ++n)
+        ivec[n] ^= in[n];
+    (*block) (ivec, ivec, key);
+    memcpy(out, out - 16, residue);
+    memcpy(out - 16, ivec, 16);
+
+    return len + residue;
+}
+
+size_t CRYPTO_nistcts128_encrypt_block(const unsigned char *in,
+                                       unsigned char *out, size_t len,
+                                       const void *key,
+                                       unsigned char ivec[16],
+                                       block128_f block)
+{
+    size_t residue, n;
+
+    if (len < 16)
+        return 0;
+
+    residue = len % 16;
+
+    len -= residue;
+
+    CRYPTO_cbc128_encrypt(in, out, len, key, ivec, block);
+
+    if (residue == 0)
+        return len;
+
+    in += len;
+    out += len;
+
+    for (n = 0; n < residue; ++n)
+        ivec[n] ^= in[n];
+    (*block) (ivec, ivec, key);
+    memcpy(out - 16 + residue, ivec, 16);
+
+    return len + residue;
+}
+
+size_t CRYPTO_cts128_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t len, const void *key,
+                             unsigned char ivec[16], cbc128_f cbc)
+{
+    size_t residue;
+    union {
+        size_t align;
+        unsigned char c[16];
+    } tmp;
+
+    if (len <= 16)
+        return 0;
+
+    if ((residue = len % 16) == 0)
+        residue = 16;
+
+    len -= residue;
+
+    (*cbc) (in, out, len, key, ivec, 1);
+
+    in += len;
+    out += len;
+
+#if defined(CBC_HANDLES_TRUNCATED_IO)
+    memcpy(tmp.c, out - 16, 16);
+    (*cbc) (in, out - 16, residue, key, ivec, 1);
+    memcpy(out, tmp.c, residue);
+#else
+    memset(tmp.c, 0, sizeof(tmp));
+    memcpy(tmp.c, in, residue);
+    memcpy(out, out - 16, residue);
+    (*cbc) (tmp.c, out - 16, 16, key, ivec, 1);
+#endif
+    return len + residue;
+}
+
+size_t CRYPTO_nistcts128_encrypt(const unsigned char *in, unsigned char *out,
+                                 size_t len, const void *key,
+                                 unsigned char ivec[16], cbc128_f cbc)
+{
+    size_t residue;
+    union {
+        size_t align;
+        unsigned char c[16];
+    } tmp;
+
+    if (len < 16)
+        return 0;
+
+    residue = len % 16;
+
+    len -= residue;
+
+    (*cbc) (in, out, len, key, ivec, 1);
+
+    if (residue == 0)
+        return len;
+
+    in += len;
+    out += len;
+
+#if defined(CBC_HANDLES_TRUNCATED_IO)
+    (*cbc) (in, out - 16 + residue, residue, key, ivec, 1);
+#else
+    memset(tmp.c, 0, sizeof(tmp));
+    memcpy(tmp.c, in, residue);
+    (*cbc) (tmp.c, out - 16 + residue, 16, key, ivec, 1);
+#endif
+    return len + residue;
+}
+
+size_t CRYPTO_cts128_decrypt_block(const unsigned char *in,
+                                   unsigned char *out, size_t len,
+                                   const void *key, unsigned char ivec[16],
+                                   block128_f block)
+{
+    size_t residue, n;
+    union {
+        size_t align;
+        unsigned char c[32];
+    } tmp;
+
+    if (len <= 16)
+        return 0;
+
+    if ((residue = len % 16) == 0)
+        residue = 16;
+
+    len -= 16 + residue;
+
+    if (len) {
+        CRYPTO_cbc128_decrypt(in, out, len, key, ivec, block);
+        in += len;
+        out += len;
+    }
+
+    (*block) (in, tmp.c + 16, key);
+
+    memcpy(tmp.c, tmp.c + 16, 16);
+    memcpy(tmp.c, in + 16, residue);
+    (*block) (tmp.c, tmp.c, key);
+
+    for (n = 0; n < 16; ++n) {
+        unsigned char c = in[n];
+        out[n] = tmp.c[n] ^ ivec[n];
+        ivec[n] = c;
+    }
+    for (residue += 16; n < residue; ++n)
+        out[n] = tmp.c[n] ^ in[n];
+
+    return 16 + len + residue;
+}
+
+size_t CRYPTO_nistcts128_decrypt_block(const unsigned char *in,
+                                       unsigned char *out, size_t len,
+                                       const void *key,
+                                       unsigned char ivec[16],
+                                       block128_f block)
+{
+    size_t residue, n;
+    union {
+        size_t align;
+        unsigned char c[32];
+    } tmp;
+
+    if (len < 16)
+        return 0;
+
+    residue = len % 16;
+
+    if (residue == 0) {
+        CRYPTO_cbc128_decrypt(in, out, len, key, ivec, block);
+        return len;
+    }
+
+    len -= 16 + residue;
+
+    if (len) {
+        CRYPTO_cbc128_decrypt(in, out, len, key, ivec, block);
+        in += len;
+        out += len;
+    }
+
+    (*block) (in + residue, tmp.c + 16, key);
+
+    memcpy(tmp.c, tmp.c + 16, 16);
+    memcpy(tmp.c, in, residue);
+    (*block) (tmp.c, tmp.c, key);
+
+    for (n = 0; n < 16; ++n) {
+        unsigned char c = in[n];
+        out[n] = tmp.c[n] ^ ivec[n];
+        ivec[n] = in[n + residue];
+        tmp.c[n] = c;
+    }
+    for (residue += 16; n < residue; ++n)
+        out[n] = tmp.c[n] ^ tmp.c[n - 16];
+
+    return 16 + len + residue;
+}
+
+size_t CRYPTO_cts128_decrypt(const unsigned char *in, unsigned char *out,
+                             size_t len, const void *key,
+                             unsigned char ivec[16], cbc128_f cbc)
+{
+    size_t residue;
+    union {
+        size_t align;
+        unsigned char c[32];
+    } tmp;
+
+    if (len <= 16)
+        return 0;
+
+    if ((residue = len % 16) == 0)
+        residue = 16;
+
+    len -= 16 + residue;
+
+    if (len) {
+        (*cbc) (in, out, len, key, ivec, 0);
+        in += len;
+        out += len;
+    }
+
+    memset(tmp.c, 0, sizeof(tmp));
+    /*
+     * this places in[16] at &tmp.c[16] and decrypted block at &tmp.c[0]
+     */
+    (*cbc) (in, tmp.c, 16, key, tmp.c + 16, 0);
+
+    memcpy(tmp.c, in + 16, residue);
+#if defined(CBC_HANDLES_TRUNCATED_IO)
+    (*cbc) (tmp.c, out, 16 + residue, key, ivec, 0);
+#else
+    (*cbc) (tmp.c, tmp.c, 32, key, ivec, 0);
+    memcpy(out, tmp.c, 16 + residue);
+#endif
+    return 16 + len + residue;
+}
+
+size_t CRYPTO_nistcts128_decrypt(const unsigned char *in, unsigned char *out,
+                                 size_t len, const void *key,
+                                 unsigned char ivec[16], cbc128_f cbc)
+{
+    size_t residue;
+    union {
+        size_t align;
+        unsigned char c[32];
+    } tmp;
+
+    if (len < 16)
+        return 0;
+
+    residue = len % 16;
+
+    if (residue == 0) {
+        (*cbc) (in, out, len, key, ivec, 0);
+        return len;
+    }
+
+    len -= 16 + residue;
+
+    if (len) {
+        (*cbc) (in, out, len, key, ivec, 0);
+        in += len;
+        out += len;
+    }
+
+    memset(tmp.c, 0, sizeof(tmp));
+    /*
+     * this places in[16] at &tmp.c[16] and decrypted block at &tmp.c[0]
+     */
+    (*cbc) (in + residue, tmp.c, 16, key, tmp.c + 16, 0);
+
+    memcpy(tmp.c, in, residue);
+#if defined(CBC_HANDLES_TRUNCATED_IO)
+    (*cbc) (tmp.c, out, 16 + residue, key, ivec, 0);
+#else
+    (*cbc) (tmp.c, tmp.c, 32, key, ivec, 0);
+    memcpy(out, tmp.c, 16 + residue);
+#endif
+    return 16 + len + residue;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/gcm128.c b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/gcm128.c
new file mode 100644
index 000000000..15f76e3e8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/gcm128.c
@@ -0,0 +1,1888 @@
+/*
+ * Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/crypto.h>
+#include "modes_lcl.h"
+#include <string.h>
+
+#if defined(BSWAP4) && defined(STRICT_ALIGNMENT)
+/* redefine, because alignment is ensured */
+# undef  GETU32
+# define GETU32(p)       BSWAP4(*(const u32 *)(p))
+# undef  PUTU32
+# define PUTU32(p,v)     *(u32 *)(p) = BSWAP4(v)
+#endif
+
+#define PACK(s)         ((size_t)(s)<<(sizeof(size_t)*8-16))
+#define REDUCE1BIT(V)   do { \
+        if (sizeof(size_t)==8) { \
+                u64 T = U64(0xe100000000000000) & (0-(V.lo&1)); \
+                V.lo  = (V.hi<<63)|(V.lo>>1); \
+                V.hi  = (V.hi>>1 )^T; \
+        } \
+        else { \
+                u32 T = 0xe1000000U & (0-(u32)(V.lo&1)); \
+                V.lo  = (V.hi<<63)|(V.lo>>1); \
+                V.hi  = (V.hi>>1 )^((u64)T<<32); \
+        } \
+} while(0)
+
+/*-
+ * Even though permitted values for TABLE_BITS are 8, 4 and 1, it should
+ * never be set to 8. 8 is effectively reserved for testing purposes.
+ * TABLE_BITS>1 are lookup-table-driven implementations referred to as
+ * "Shoup's" in GCM specification. In other words OpenSSL does not cover
+ * whole spectrum of possible table driven implementations. Why? In
+ * non-"Shoup's" case memory access pattern is segmented in such manner,
+ * that it's trivial to see that cache timing information can reveal
+ * fair portion of intermediate hash value. Given that ciphertext is
+ * always available to attacker, it's possible for him to attempt to
+ * deduce secret parameter H and if successful, tamper with messages
+ * [which is nothing but trivial in CTR mode]. In "Shoup's" case it's
+ * not as trivial, but there is no reason to believe that it's resistant
+ * to cache-timing attack. And the thing about "8-bit" implementation is
+ * that it consumes 16 (sixteen) times more memory, 4KB per individual
+ * key + 1KB shared. Well, on pros side it should be twice as fast as
+ * "4-bit" version. And for gcc-generated x86[_64] code, "8-bit" version
+ * was observed to run ~75% faster, closer to 100% for commercial
+ * compilers... Yet "4-bit" procedure is preferred, because it's
+ * believed to provide better security-performance balance and adequate
+ * all-round performance. "All-round" refers to things like:
+ *
+ * - shorter setup time effectively improves overall timing for
+ *   handling short messages;
+ * - larger table allocation can become unbearable because of VM
+ *   subsystem penalties (for example on Windows large enough free
+ *   results in VM working set trimming, meaning that consequent
+ *   malloc would immediately incur working set expansion);
+ * - larger table has larger cache footprint, which can affect
+ *   performance of other code paths (not necessarily even from same
+ *   thread in Hyper-Threading world);
+ *
+ * Value of 1 is not appropriate for performance reasons.
+ */
+#if     TABLE_BITS==8
+
+static void gcm_init_8bit(u128 Htable[256], u64 H[2])
+{
+    int i, j;
+    u128 V;
+
+    Htable[0].hi = 0;
+    Htable[0].lo = 0;
+    V.hi = H[0];
+    V.lo = H[1];
+
+    for (Htable[128] = V, i = 64; i > 0; i >>= 1) {
+        REDUCE1BIT(V);
+        Htable[i] = V;
+    }
+
+    for (i = 2; i < 256; i <<= 1) {
+        u128 *Hi = Htable + i, H0 = *Hi;
+        for (j = 1; j < i; ++j) {
+            Hi[j].hi = H0.hi ^ Htable[j].hi;
+            Hi[j].lo = H0.lo ^ Htable[j].lo;
+        }
+    }
+}
+
+static void gcm_gmult_8bit(u64 Xi[2], const u128 Htable[256])
+{
+    u128 Z = { 0, 0 };
+    const u8 *xi = (const u8 *)Xi + 15;
+    size_t rem, n = *xi;
+    const union {
+        long one;
+        char little;
+    } is_endian = { 1 };
+    static const size_t rem_8bit[256] = {
+        PACK(0x0000), PACK(0x01C2), PACK(0x0384), PACK(0x0246),
+        PACK(0x0708), PACK(0x06CA), PACK(0x048C), PACK(0x054E),
+        PACK(0x0E10), PACK(0x0FD2), PACK(0x0D94), PACK(0x0C56),
+        PACK(0x0918), PACK(0x08DA), PACK(0x0A9C), PACK(0x0B5E),
+        PACK(0x1C20), PACK(0x1DE2), PACK(0x1FA4), PACK(0x1E66),
+        PACK(0x1B28), PACK(0x1AEA), PACK(0x18AC), PACK(0x196E),
+        PACK(0x1230), PACK(0x13F2), PACK(0x11B4), PACK(0x1076),
+        PACK(0x1538), PACK(0x14FA), PACK(0x16BC), PACK(0x177E),
+        PACK(0x3840), PACK(0x3982), PACK(0x3BC4), PACK(0x3A06),
+        PACK(0x3F48), PACK(0x3E8A), PACK(0x3CCC), PACK(0x3D0E),
+        PACK(0x3650), PACK(0x3792), PACK(0x35D4), PACK(0x3416),
+        PACK(0x3158), PACK(0x309A), PACK(0x32DC), PACK(0x331E),
+        PACK(0x2460), PACK(0x25A2), PACK(0x27E4), PACK(0x2626),
+        PACK(0x2368), PACK(0x22AA), PACK(0x20EC), PACK(0x212E),
+        PACK(0x2A70), PACK(0x2BB2), PACK(0x29F4), PACK(0x2836),
+        PACK(0x2D78), PACK(0x2CBA), PACK(0x2EFC), PACK(0x2F3E),
+        PACK(0x7080), PACK(0x7142), PACK(0x7304), PACK(0x72C6),
+        PACK(0x7788), PACK(0x764A), PACK(0x740C), PACK(0x75CE),
+        PACK(0x7E90), PACK(0x7F52), PACK(0x7D14), PACK(0x7CD6),
+        PACK(0x7998), PACK(0x785A), PACK(0x7A1C), PACK(0x7BDE),
+        PACK(0x6CA0), PACK(0x6D62), PACK(0x6F24), PACK(0x6EE6),
+        PACK(0x6BA8), PACK(0x6A6A), PACK(0x682C), PACK(0x69EE),
+        PACK(0x62B0), PACK(0x6372), PACK(0x6134), PACK(0x60F6),
+        PACK(0x65B8), PACK(0x647A), PACK(0x663C), PACK(0x67FE),
+        PACK(0x48C0), PACK(0x4902), PACK(0x4B44), PACK(0x4A86),
+        PACK(0x4FC8), PACK(0x4E0A), PACK(0x4C4C), PACK(0x4D8E),
+        PACK(0x46D0), PACK(0x4712), PACK(0x4554), PACK(0x4496),
+        PACK(0x41D8), PACK(0x401A), PACK(0x425C), PACK(0x439E),
+        PACK(0x54E0), PACK(0x5522), PACK(0x5764), PACK(0x56A6),
+        PACK(0x53E8), PACK(0x522A), PACK(0x506C), PACK(0x51AE),
+        PACK(0x5AF0), PACK(0x5B32), PACK(0x5974), PACK(0x58B6),
+        PACK(0x5DF8), PACK(0x5C3A), PACK(0x5E7C), PACK(0x5FBE),
+        PACK(0xE100), PACK(0xE0C2), PACK(0xE284), PACK(0xE346),
+        PACK(0xE608), PACK(0xE7CA), PACK(0xE58C), PACK(0xE44E),
+        PACK(0xEF10), PACK(0xEED2), PACK(0xEC94), PACK(0xED56),
+        PACK(0xE818), PACK(0xE9DA), PACK(0xEB9C), PACK(0xEA5E),
+        PACK(0xFD20), PACK(0xFCE2), PACK(0xFEA4), PACK(0xFF66),
+        PACK(0xFA28), PACK(0xFBEA), PACK(0xF9AC), PACK(0xF86E),
+        PACK(0xF330), PACK(0xF2F2), PACK(0xF0B4), PACK(0xF176),
+        PACK(0xF438), PACK(0xF5FA), PACK(0xF7BC), PACK(0xF67E),
+        PACK(0xD940), PACK(0xD882), PACK(0xDAC4), PACK(0xDB06),
+        PACK(0xDE48), PACK(0xDF8A), PACK(0xDDCC), PACK(0xDC0E),
+        PACK(0xD750), PACK(0xD692), PACK(0xD4D4), PACK(0xD516),
+        PACK(0xD058), PACK(0xD19A), PACK(0xD3DC), PACK(0xD21E),
+        PACK(0xC560), PACK(0xC4A2), PACK(0xC6E4), PACK(0xC726),
+        PACK(0xC268), PACK(0xC3AA), PACK(0xC1EC), PACK(0xC02E),
+        PACK(0xCB70), PACK(0xCAB2), PACK(0xC8F4), PACK(0xC936),
+        PACK(0xCC78), PACK(0xCDBA), PACK(0xCFFC), PACK(0xCE3E),
+        PACK(0x9180), PACK(0x9042), PACK(0x9204), PACK(0x93C6),
+        PACK(0x9688), PACK(0x974A), PACK(0x950C), PACK(0x94CE),
+        PACK(0x9F90), PACK(0x9E52), PACK(0x9C14), PACK(0x9DD6),
+        PACK(0x9898), PACK(0x995A), PACK(0x9B1C), PACK(0x9ADE),
+        PACK(0x8DA0), PACK(0x8C62), PACK(0x8E24), PACK(0x8FE6),
+        PACK(0x8AA8), PACK(0x8B6A), PACK(0x892C), PACK(0x88EE),
+        PACK(0x83B0), PACK(0x8272), PACK(0x8034), PACK(0x81F6),
+        PACK(0x84B8), PACK(0x857A), PACK(0x873C), PACK(0x86FE),
+        PACK(0xA9C0), PACK(0xA802), PACK(0xAA44), PACK(0xAB86),
+        PACK(0xAEC8), PACK(0xAF0A), PACK(0xAD4C), PACK(0xAC8E),
+        PACK(0xA7D0), PACK(0xA612), PACK(0xA454), PACK(0xA596),
+        PACK(0xA0D8), PACK(0xA11A), PACK(0xA35C), PACK(0xA29E),
+        PACK(0xB5E0), PACK(0xB422), PACK(0xB664), PACK(0xB7A6),
+        PACK(0xB2E8), PACK(0xB32A), PACK(0xB16C), PACK(0xB0AE),
+        PACK(0xBBF0), PACK(0xBA32), PACK(0xB874), PACK(0xB9B6),
+        PACK(0xBCF8), PACK(0xBD3A), PACK(0xBF7C), PACK(0xBEBE)
+    };
+
+    while (1) {
+        Z.hi ^= Htable[n].hi;
+        Z.lo ^= Htable[n].lo;
+
+        if ((u8 *)Xi == xi)
+            break;
+
+        n = *(--xi);
+
+        rem = (size_t)Z.lo & 0xff;
+        Z.lo = (Z.hi << 56) | (Z.lo >> 8);
+        Z.hi = (Z.hi >> 8);
+        if (sizeof(size_t) == 8)
+            Z.hi ^= rem_8bit[rem];
+        else
+            Z.hi ^= (u64)rem_8bit[rem] << 32;
+    }
+
+    if (is_endian.little) {
+# ifdef BSWAP8
+        Xi[0] = BSWAP8(Z.hi);
+        Xi[1] = BSWAP8(Z.lo);
+# else
+        u8 *p = (u8 *)Xi;
+        u32 v;
+        v = (u32)(Z.hi >> 32);
+        PUTU32(p, v);
+        v = (u32)(Z.hi);
+        PUTU32(p + 4, v);
+        v = (u32)(Z.lo >> 32);
+        PUTU32(p + 8, v);
+        v = (u32)(Z.lo);
+        PUTU32(p + 12, v);
+# endif
+    } else {
+        Xi[0] = Z.hi;
+        Xi[1] = Z.lo;
+    }
+}
+
+# define GCM_MUL(ctx)      gcm_gmult_8bit(ctx->Xi.u,ctx->Htable)
+
+#elif   TABLE_BITS==4
+
+static void gcm_init_4bit(u128 Htable[16], u64 H[2])
+{
+    u128 V;
+# if defined(OPENSSL_SMALL_FOOTPRINT)
+    int i;
+# endif
+
+    Htable[0].hi = 0;
+    Htable[0].lo = 0;
+    V.hi = H[0];
+    V.lo = H[1];
+
+# if defined(OPENSSL_SMALL_FOOTPRINT)
+    for (Htable[8] = V, i = 4; i > 0; i >>= 1) {
+        REDUCE1BIT(V);
+        Htable[i] = V;
+    }
+
+    for (i = 2; i < 16; i <<= 1) {
+        u128 *Hi = Htable + i;
+        int j;
+        for (V = *Hi, j = 1; j < i; ++j) {
+            Hi[j].hi = V.hi ^ Htable[j].hi;
+            Hi[j].lo = V.lo ^ Htable[j].lo;
+        }
+    }
+# else
+    Htable[8] = V;
+    REDUCE1BIT(V);
+    Htable[4] = V;
+    REDUCE1BIT(V);
+    Htable[2] = V;
+    REDUCE1BIT(V);
+    Htable[1] = V;
+    Htable[3].hi = V.hi ^ Htable[2].hi, Htable[3].lo = V.lo ^ Htable[2].lo;
+    V = Htable[4];
+    Htable[5].hi = V.hi ^ Htable[1].hi, Htable[5].lo = V.lo ^ Htable[1].lo;
+    Htable[6].hi = V.hi ^ Htable[2].hi, Htable[6].lo = V.lo ^ Htable[2].lo;
+    Htable[7].hi = V.hi ^ Htable[3].hi, Htable[7].lo = V.lo ^ Htable[3].lo;
+    V = Htable[8];
+    Htable[9].hi = V.hi ^ Htable[1].hi, Htable[9].lo = V.lo ^ Htable[1].lo;
+    Htable[10].hi = V.hi ^ Htable[2].hi, Htable[10].lo = V.lo ^ Htable[2].lo;
+    Htable[11].hi = V.hi ^ Htable[3].hi, Htable[11].lo = V.lo ^ Htable[3].lo;
+    Htable[12].hi = V.hi ^ Htable[4].hi, Htable[12].lo = V.lo ^ Htable[4].lo;
+    Htable[13].hi = V.hi ^ Htable[5].hi, Htable[13].lo = V.lo ^ Htable[5].lo;
+    Htable[14].hi = V.hi ^ Htable[6].hi, Htable[14].lo = V.lo ^ Htable[6].lo;
+    Htable[15].hi = V.hi ^ Htable[7].hi, Htable[15].lo = V.lo ^ Htable[7].lo;
+# endif
+# if defined(GHASH_ASM) && (defined(__arm__) || defined(__arm))
+    /*
+     * ARM assembler expects specific dword order in Htable.
+     */
+    {
+        int j;
+        const union {
+            long one;
+            char little;
+        } is_endian = { 1 };
+
+        if (is_endian.little)
+            for (j = 0; j < 16; ++j) {
+                V = Htable[j];
+                Htable[j].hi = V.lo;
+                Htable[j].lo = V.hi;
+        } else
+            for (j = 0; j < 16; ++j) {
+                V = Htable[j];
+                Htable[j].hi = V.lo << 32 | V.lo >> 32;
+                Htable[j].lo = V.hi << 32 | V.hi >> 32;
+            }
+    }
+# endif
+}
+
+# ifndef GHASH_ASM
+static const size_t rem_4bit[16] = {
+    PACK(0x0000), PACK(0x1C20), PACK(0x3840), PACK(0x2460),
+    PACK(0x7080), PACK(0x6CA0), PACK(0x48C0), PACK(0x54E0),
+    PACK(0xE100), PACK(0xFD20), PACK(0xD940), PACK(0xC560),
+    PACK(0x9180), PACK(0x8DA0), PACK(0xA9C0), PACK(0xB5E0)
+};
+
+static void gcm_gmult_4bit(u64 Xi[2], const u128 Htable[16])
+{
+    u128 Z;
+    int cnt = 15;
+    size_t rem, nlo, nhi;
+    const union {
+        long one;
+        char little;
+    } is_endian = { 1 };
+
+    nlo = ((const u8 *)Xi)[15];
+    nhi = nlo >> 4;
+    nlo &= 0xf;
+
+    Z.hi = Htable[nlo].hi;
+    Z.lo = Htable[nlo].lo;
+
+    while (1) {
+        rem = (size_t)Z.lo & 0xf;
+        Z.lo = (Z.hi << 60) | (Z.lo >> 4);
+        Z.hi = (Z.hi >> 4);
+        if (sizeof(size_t) == 8)
+            Z.hi ^= rem_4bit[rem];
+        else
+            Z.hi ^= (u64)rem_4bit[rem] << 32;
+
+        Z.hi ^= Htable[nhi].hi;
+        Z.lo ^= Htable[nhi].lo;
+
+        if (--cnt < 0)
+            break;
+
+        nlo = ((const u8 *)Xi)[cnt];
+        nhi = nlo >> 4;
+        nlo &= 0xf;
+
+        rem = (size_t)Z.lo & 0xf;
+        Z.lo = (Z.hi << 60) | (Z.lo >> 4);
+        Z.hi = (Z.hi >> 4);
+        if (sizeof(size_t) == 8)
+            Z.hi ^= rem_4bit[rem];
+        else
+            Z.hi ^= (u64)rem_4bit[rem] << 32;
+
+        Z.hi ^= Htable[nlo].hi;
+        Z.lo ^= Htable[nlo].lo;
+    }
+
+    if (is_endian.little) {
+#  ifdef BSWAP8
+        Xi[0] = BSWAP8(Z.hi);
+        Xi[1] = BSWAP8(Z.lo);
+#  else
+        u8 *p = (u8 *)Xi;
+        u32 v;
+        v = (u32)(Z.hi >> 32);
+        PUTU32(p, v);
+        v = (u32)(Z.hi);
+        PUTU32(p + 4, v);
+        v = (u32)(Z.lo >> 32);
+        PUTU32(p + 8, v);
+        v = (u32)(Z.lo);
+        PUTU32(p + 12, v);
+#  endif
+    } else {
+        Xi[0] = Z.hi;
+        Xi[1] = Z.lo;
+    }
+}
+
+#  if !defined(OPENSSL_SMALL_FOOTPRINT)
+/*
+ * Streamed gcm_mult_4bit, see CRYPTO_gcm128_[en|de]crypt for
+ * details... Compiler-generated code doesn't seem to give any
+ * performance improvement, at least not on x86[_64]. It's here
+ * mostly as reference and a placeholder for possible future
+ * non-trivial optimization[s]...
+ */
+static void gcm_ghash_4bit(u64 Xi[2], const u128 Htable[16],
+                           const u8 *inp, size_t len)
+{
+    u128 Z;
+    int cnt;
+    size_t rem, nlo, nhi;
+    const union {
+        long one;
+        char little;
+    } is_endian = { 1 };
+
+#   if 1
+    do {
+        cnt = 15;
+        nlo = ((const u8 *)Xi)[15];
+        nlo ^= inp[15];
+        nhi = nlo >> 4;
+        nlo &= 0xf;
+
+        Z.hi = Htable[nlo].hi;
+        Z.lo = Htable[nlo].lo;
+
+        while (1) {
+            rem = (size_t)Z.lo & 0xf;
+            Z.lo = (Z.hi << 60) | (Z.lo >> 4);
+            Z.hi = (Z.hi >> 4);
+            if (sizeof(size_t) == 8)
+                Z.hi ^= rem_4bit[rem];
+            else
+                Z.hi ^= (u64)rem_4bit[rem] << 32;
+
+            Z.hi ^= Htable[nhi].hi;
+            Z.lo ^= Htable[nhi].lo;
+
+            if (--cnt < 0)
+                break;
+
+            nlo = ((const u8 *)Xi)[cnt];
+            nlo ^= inp[cnt];
+            nhi = nlo >> 4;
+            nlo &= 0xf;
+
+            rem = (size_t)Z.lo & 0xf;
+            Z.lo = (Z.hi << 60) | (Z.lo >> 4);
+            Z.hi = (Z.hi >> 4);
+            if (sizeof(size_t) == 8)
+                Z.hi ^= rem_4bit[rem];
+            else
+                Z.hi ^= (u64)rem_4bit[rem] << 32;
+
+            Z.hi ^= Htable[nlo].hi;
+            Z.lo ^= Htable[nlo].lo;
+        }
+#   else
+    /*
+     * Extra 256+16 bytes per-key plus 512 bytes shared tables
+     * [should] give ~50% improvement... One could have PACK()-ed
+     * the rem_8bit even here, but the priority is to minimize
+     * cache footprint...
+     */
+    u128 Hshr4[16];             /* Htable shifted right by 4 bits */
+    u8 Hshl4[16];               /* Htable shifted left by 4 bits */
+    static const unsigned short rem_8bit[256] = {
+        0x0000, 0x01C2, 0x0384, 0x0246, 0x0708, 0x06CA, 0x048C, 0x054E,
+        0x0E10, 0x0FD2, 0x0D94, 0x0C56, 0x0918, 0x08DA, 0x0A9C, 0x0B5E,
+        0x1C20, 0x1DE2, 0x1FA4, 0x1E66, 0x1B28, 0x1AEA, 0x18AC, 0x196E,
+        0x1230, 0x13F2, 0x11B4, 0x1076, 0x1538, 0x14FA, 0x16BC, 0x177E,
+        0x3840, 0x3982, 0x3BC4, 0x3A06, 0x3F48, 0x3E8A, 0x3CCC, 0x3D0E,
+        0x3650, 0x3792, 0x35D4, 0x3416, 0x3158, 0x309A, 0x32DC, 0x331E,
+        0x2460, 0x25A2, 0x27E4, 0x2626, 0x2368, 0x22AA, 0x20EC, 0x212E,
+        0x2A70, 0x2BB2, 0x29F4, 0x2836, 0x2D78, 0x2CBA, 0x2EFC, 0x2F3E,
+        0x7080, 0x7142, 0x7304, 0x72C6, 0x7788, 0x764A, 0x740C, 0x75CE,
+        0x7E90, 0x7F52, 0x7D14, 0x7CD6, 0x7998, 0x785A, 0x7A1C, 0x7BDE,
+        0x6CA0, 0x6D62, 0x6F24, 0x6EE6, 0x6BA8, 0x6A6A, 0x682C, 0x69EE,
+        0x62B0, 0x6372, 0x6134, 0x60F6, 0x65B8, 0x647A, 0x663C, 0x67FE,
+        0x48C0, 0x4902, 0x4B44, 0x4A86, 0x4FC8, 0x4E0A, 0x4C4C, 0x4D8E,
+        0x46D0, 0x4712, 0x4554, 0x4496, 0x41D8, 0x401A, 0x425C, 0x439E,
+        0x54E0, 0x5522, 0x5764, 0x56A6, 0x53E8, 0x522A, 0x506C, 0x51AE,
+        0x5AF0, 0x5B32, 0x5974, 0x58B6, 0x5DF8, 0x5C3A, 0x5E7C, 0x5FBE,
+        0xE100, 0xE0C2, 0xE284, 0xE346, 0xE608, 0xE7CA, 0xE58C, 0xE44E,
+        0xEF10, 0xEED2, 0xEC94, 0xED56, 0xE818, 0xE9DA, 0xEB9C, 0xEA5E,
+        0xFD20, 0xFCE2, 0xFEA4, 0xFF66, 0xFA28, 0xFBEA, 0xF9AC, 0xF86E,
+        0xF330, 0xF2F2, 0xF0B4, 0xF176, 0xF438, 0xF5FA, 0xF7BC, 0xF67E,
+        0xD940, 0xD882, 0xDAC4, 0xDB06, 0xDE48, 0xDF8A, 0xDDCC, 0xDC0E,
+        0xD750, 0xD692, 0xD4D4, 0xD516, 0xD058, 0xD19A, 0xD3DC, 0xD21E,
+        0xC560, 0xC4A2, 0xC6E4, 0xC726, 0xC268, 0xC3AA, 0xC1EC, 0xC02E,
+        0xCB70, 0xCAB2, 0xC8F4, 0xC936, 0xCC78, 0xCDBA, 0xCFFC, 0xCE3E,
+        0x9180, 0x9042, 0x9204, 0x93C6, 0x9688, 0x974A, 0x950C, 0x94CE,
+        0x9F90, 0x9E52, 0x9C14, 0x9DD6, 0x9898, 0x995A, 0x9B1C, 0x9ADE,
+        0x8DA0, 0x8C62, 0x8E24, 0x8FE6, 0x8AA8, 0x8B6A, 0x892C, 0x88EE,
+        0x83B0, 0x8272, 0x8034, 0x81F6, 0x84B8, 0x857A, 0x873C, 0x86FE,
+        0xA9C0, 0xA802, 0xAA44, 0xAB86, 0xAEC8, 0xAF0A, 0xAD4C, 0xAC8E,
+        0xA7D0, 0xA612, 0xA454, 0xA596, 0xA0D8, 0xA11A, 0xA35C, 0xA29E,
+        0xB5E0, 0xB422, 0xB664, 0xB7A6, 0xB2E8, 0xB32A, 0xB16C, 0xB0AE,
+        0xBBF0, 0xBA32, 0xB874, 0xB9B6, 0xBCF8, 0xBD3A, 0xBF7C, 0xBEBE
+    };
+    /*
+     * This pre-processing phase slows down procedure by approximately
+     * same time as it makes each loop spin faster. In other words
+     * single block performance is approximately same as straightforward
+     * "4-bit" implementation, and then it goes only faster...
+     */
+    for (cnt = 0; cnt < 16; ++cnt) {
+        Z.hi = Htable[cnt].hi;
+        Z.lo = Htable[cnt].lo;
+        Hshr4[cnt].lo = (Z.hi << 60) | (Z.lo >> 4);
+        Hshr4[cnt].hi = (Z.hi >> 4);
+        Hshl4[cnt] = (u8)(Z.lo << 4);
+    }
+
+    do {
+        for (Z.lo = 0, Z.hi = 0, cnt = 15; cnt; --cnt) {
+            nlo = ((const u8 *)Xi)[cnt];
+            nlo ^= inp[cnt];
+            nhi = nlo >> 4;
+            nlo &= 0xf;
+
+            Z.hi ^= Htable[nlo].hi;
+            Z.lo ^= Htable[nlo].lo;
+
+            rem = (size_t)Z.lo & 0xff;
+
+            Z.lo = (Z.hi << 56) | (Z.lo >> 8);
+            Z.hi = (Z.hi >> 8);
+
+            Z.hi ^= Hshr4[nhi].hi;
+            Z.lo ^= Hshr4[nhi].lo;
+            Z.hi ^= (u64)rem_8bit[rem ^ Hshl4[nhi]] << 48;
+        }
+
+        nlo = ((const u8 *)Xi)[0];
+        nlo ^= inp[0];
+        nhi = nlo >> 4;
+        nlo &= 0xf;
+
+        Z.hi ^= Htable[nlo].hi;
+        Z.lo ^= Htable[nlo].lo;
+
+        rem = (size_t)Z.lo & 0xf;
+
+        Z.lo = (Z.hi << 60) | (Z.lo >> 4);
+        Z.hi = (Z.hi >> 4);
+
+        Z.hi ^= Htable[nhi].hi;
+        Z.lo ^= Htable[nhi].lo;
+        Z.hi ^= ((u64)rem_8bit[rem << 4]) << 48;
+#   endif
+
+        if (is_endian.little) {
+#   ifdef BSWAP8
+            Xi[0] = BSWAP8(Z.hi);
+            Xi[1] = BSWAP8(Z.lo);
+#   else
+            u8 *p = (u8 *)Xi;
+            u32 v;
+            v = (u32)(Z.hi >> 32);
+            PUTU32(p, v);
+            v = (u32)(Z.hi);
+            PUTU32(p + 4, v);
+            v = (u32)(Z.lo >> 32);
+            PUTU32(p + 8, v);
+            v = (u32)(Z.lo);
+            PUTU32(p + 12, v);
+#   endif
+        } else {
+            Xi[0] = Z.hi;
+            Xi[1] = Z.lo;
+        }
+    } while (inp += 16, len -= 16);
+}
+#  endif
+# else
+void gcm_gmult_4bit(u64 Xi[2], const u128 Htable[16]);
+void gcm_ghash_4bit(u64 Xi[2], const u128 Htable[16], const u8 *inp,
+                    size_t len);
+# endif
+
+# define GCM_MUL(ctx)      gcm_gmult_4bit(ctx->Xi.u,ctx->Htable)
+# if defined(GHASH_ASM) || !defined(OPENSSL_SMALL_FOOTPRINT)
+#  define GHASH(ctx,in,len) gcm_ghash_4bit((ctx)->Xi.u,(ctx)->Htable,in,len)
+/*
+ * GHASH_CHUNK is "stride parameter" missioned to mitigate cache trashing
+ * effect. In other words idea is to hash data while it's still in L1 cache
+ * after encryption pass...
+ */
+#  define GHASH_CHUNK       (3*1024)
+# endif
+
+#else                           /* TABLE_BITS */
+
+static void gcm_gmult_1bit(u64 Xi[2], const u64 H[2])
+{
+    u128 V, Z = { 0, 0 };
+    long X;
+    int i, j;
+    const long *xi = (const long *)Xi;
+    const union {
+        long one;
+        char little;
+    } is_endian = { 1 };
+
+    V.hi = H[0];                /* H is in host byte order, no byte swapping */
+    V.lo = H[1];
+
+    for (j = 0; j < 16 / sizeof(long); ++j) {
+        if (is_endian.little) {
+            if (sizeof(long) == 8) {
+# ifdef BSWAP8
+                X = (long)(BSWAP8(xi[j]));
+# else
+                const u8 *p = (const u8 *)(xi + j);
+                X = (long)((u64)GETU32(p) << 32 | GETU32(p + 4));
+# endif
+            } else {
+                const u8 *p = (const u8 *)(xi + j);
+                X = (long)GETU32(p);
+            }
+        } else
+            X = xi[j];
+
+        for (i = 0; i < 8 * sizeof(long); ++i, X <<= 1) {
+            u64 M = (u64)(X >> (8 * sizeof(long) - 1));
+            Z.hi ^= V.hi & M;
+            Z.lo ^= V.lo & M;
+
+            REDUCE1BIT(V);
+        }
+    }
+
+    if (is_endian.little) {
+# ifdef BSWAP8
+        Xi[0] = BSWAP8(Z.hi);
+        Xi[1] = BSWAP8(Z.lo);
+# else
+        u8 *p = (u8 *)Xi;
+        u32 v;
+        v = (u32)(Z.hi >> 32);
+        PUTU32(p, v);
+        v = (u32)(Z.hi);
+        PUTU32(p + 4, v);
+        v = (u32)(Z.lo >> 32);
+        PUTU32(p + 8, v);
+        v = (u32)(Z.lo);
+        PUTU32(p + 12, v);
+# endif
+    } else {
+        Xi[0] = Z.hi;
+        Xi[1] = Z.lo;
+    }
+}
+
+# define GCM_MUL(ctx)      gcm_gmult_1bit(ctx->Xi.u,ctx->H.u)
+
+#endif
+
+#if     TABLE_BITS==4 && (defined(GHASH_ASM) || defined(OPENSSL_CPUID_OBJ))
+# if    !defined(I386_ONLY) && \
+        (defined(__i386)        || defined(__i386__)    || \
+         defined(__x86_64)      || defined(__x86_64__)  || \
+         defined(_M_IX86)       || defined(_M_AMD64)    || defined(_M_X64))
+#  define GHASH_ASM_X86_OR_64
+#  define GCM_FUNCREF_4BIT
+extern unsigned int OPENSSL_ia32cap_P[];
+
+void gcm_init_clmul(u128 Htable[16], const u64 Xi[2]);
+void gcm_gmult_clmul(u64 Xi[2], const u128 Htable[16]);
+void gcm_ghash_clmul(u64 Xi[2], const u128 Htable[16], const u8 *inp,
+                     size_t len);
+
+#  if defined(__i386) || defined(__i386__) || defined(_M_IX86)
+#   define gcm_init_avx   gcm_init_clmul
+#   define gcm_gmult_avx  gcm_gmult_clmul
+#   define gcm_ghash_avx  gcm_ghash_clmul
+#  else
+void gcm_init_avx(u128 Htable[16], const u64 Xi[2]);
+void gcm_gmult_avx(u64 Xi[2], const u128 Htable[16]);
+void gcm_ghash_avx(u64 Xi[2], const u128 Htable[16], const u8 *inp,
+                   size_t len);
+#  endif
+
+#  if   defined(__i386) || defined(__i386__) || defined(_M_IX86)
+#   define GHASH_ASM_X86
+void gcm_gmult_4bit_mmx(u64 Xi[2], const u128 Htable[16]);
+void gcm_ghash_4bit_mmx(u64 Xi[2], const u128 Htable[16], const u8 *inp,
+                        size_t len);
+
+void gcm_gmult_4bit_x86(u64 Xi[2], const u128 Htable[16]);
+void gcm_ghash_4bit_x86(u64 Xi[2], const u128 Htable[16], const u8 *inp,
+                        size_t len);
+#  endif
+# elif defined(__arm__) || defined(__arm) || defined(__aarch64__)
+#  include "arm_arch.h"
+#  if __ARM_MAX_ARCH__>=7
+#   define GHASH_ASM_ARM
+#   define GCM_FUNCREF_4BIT
+#   define PMULL_CAPABLE        (OPENSSL_armcap_P & ARMV8_PMULL)
+#   if defined(__arm__) || defined(__arm)
+#    define NEON_CAPABLE        (OPENSSL_armcap_P & ARMV7_NEON)
+#   endif
+void gcm_init_neon(u128 Htable[16], const u64 Xi[2]);
+void gcm_gmult_neon(u64 Xi[2], const u128 Htable[16]);
+void gcm_ghash_neon(u64 Xi[2], const u128 Htable[16], const u8 *inp,
+                    size_t len);
+void gcm_init_v8(u128 Htable[16], const u64 Xi[2]);
+void gcm_gmult_v8(u64 Xi[2], const u128 Htable[16]);
+void gcm_ghash_v8(u64 Xi[2], const u128 Htable[16], const u8 *inp,
+                  size_t len);
+#  endif
+# elif defined(__sparc__) || defined(__sparc)
+#  include "sparc_arch.h"
+#  define GHASH_ASM_SPARC
+#  define GCM_FUNCREF_4BIT
+extern unsigned int OPENSSL_sparcv9cap_P[];
+void gcm_init_vis3(u128 Htable[16], const u64 Xi[2]);
+void gcm_gmult_vis3(u64 Xi[2], const u128 Htable[16]);
+void gcm_ghash_vis3(u64 Xi[2], const u128 Htable[16], const u8 *inp,
+                    size_t len);
+# elif defined(OPENSSL_CPUID_OBJ) && (defined(__powerpc__) || defined(__ppc__) || defined(_ARCH_PPC))
+#  include "ppc_arch.h"
+#  define GHASH_ASM_PPC
+#  define GCM_FUNCREF_4BIT
+void gcm_init_p8(u128 Htable[16], const u64 Xi[2]);
+void gcm_gmult_p8(u64 Xi[2], const u128 Htable[16]);
+void gcm_ghash_p8(u64 Xi[2], const u128 Htable[16], const u8 *inp,
+                  size_t len);
+# endif
+#endif
+
+#ifdef GCM_FUNCREF_4BIT
+# undef  GCM_MUL
+# define GCM_MUL(ctx)           (*gcm_gmult_p)(ctx->Xi.u,ctx->Htable)
+# ifdef GHASH
+#  undef  GHASH
+#  define GHASH(ctx,in,len)     (*gcm_ghash_p)(ctx->Xi.u,ctx->Htable,in,len)
+# endif
+#endif
+
+void CRYPTO_gcm128_init(GCM128_CONTEXT *ctx, void *key, block128_f block)
+{
+    const union {
+        long one;
+        char little;
+    } is_endian = { 1 };
+
+    memset(ctx, 0, sizeof(*ctx));
+    ctx->block = block;
+    ctx->key = key;
+
+    (*block) (ctx->H.c, ctx->H.c, key);
+
+    if (is_endian.little) {
+        /* H is stored in host byte order */
+#ifdef BSWAP8
+        ctx->H.u[0] = BSWAP8(ctx->H.u[0]);
+        ctx->H.u[1] = BSWAP8(ctx->H.u[1]);
+#else
+        u8 *p = ctx->H.c;
+        u64 hi, lo;
+        hi = (u64)GETU32(p) << 32 | GETU32(p + 4);
+        lo = (u64)GETU32(p + 8) << 32 | GETU32(p + 12);
+        ctx->H.u[0] = hi;
+        ctx->H.u[1] = lo;
+#endif
+    }
+#if     TABLE_BITS==8
+    gcm_init_8bit(ctx->Htable, ctx->H.u);
+#elif   TABLE_BITS==4
+# if    defined(GHASH)
+#  define CTX__GHASH(f) (ctx->ghash = (f))
+# else
+#  define CTX__GHASH(f) (ctx->ghash = NULL)
+# endif
+# if    defined(GHASH_ASM_X86_OR_64)
+#  if   !defined(GHASH_ASM_X86) || defined(OPENSSL_IA32_SSE2)
+    if (OPENSSL_ia32cap_P[1] & (1 << 1)) { /* check PCLMULQDQ bit */
+        if (((OPENSSL_ia32cap_P[1] >> 22) & 0x41) == 0x41) { /* AVX+MOVBE */
+            gcm_init_avx(ctx->Htable, ctx->H.u);
+            ctx->gmult = gcm_gmult_avx;
+            CTX__GHASH(gcm_ghash_avx);
+        } else {
+            gcm_init_clmul(ctx->Htable, ctx->H.u);
+            ctx->gmult = gcm_gmult_clmul;
+            CTX__GHASH(gcm_ghash_clmul);
+        }
+        return;
+    }
+#  endif
+    gcm_init_4bit(ctx->Htable, ctx->H.u);
+#  if   defined(GHASH_ASM_X86)  /* x86 only */
+#   if  defined(OPENSSL_IA32_SSE2)
+    if (OPENSSL_ia32cap_P[0] & (1 << 25)) { /* check SSE bit */
+#   else
+    if (OPENSSL_ia32cap_P[0] & (1 << 23)) { /* check MMX bit */
+#   endif
+        ctx->gmult = gcm_gmult_4bit_mmx;
+        CTX__GHASH(gcm_ghash_4bit_mmx);
+    } else {
+        ctx->gmult = gcm_gmult_4bit_x86;
+        CTX__GHASH(gcm_ghash_4bit_x86);
+    }
+#  else
+    ctx->gmult = gcm_gmult_4bit;
+    CTX__GHASH(gcm_ghash_4bit);
+#  endif
+# elif  defined(GHASH_ASM_ARM)
+#  ifdef PMULL_CAPABLE
+    if (PMULL_CAPABLE) {
+        gcm_init_v8(ctx->Htable, ctx->H.u);
+        ctx->gmult = gcm_gmult_v8;
+        CTX__GHASH(gcm_ghash_v8);
+    } else
+#  endif
+#  ifdef NEON_CAPABLE
+    if (NEON_CAPABLE) {
+        gcm_init_neon(ctx->Htable, ctx->H.u);
+        ctx->gmult = gcm_gmult_neon;
+        CTX__GHASH(gcm_ghash_neon);
+    } else
+#  endif
+    {
+        gcm_init_4bit(ctx->Htable, ctx->H.u);
+        ctx->gmult = gcm_gmult_4bit;
+        CTX__GHASH(gcm_ghash_4bit);
+    }
+# elif  defined(GHASH_ASM_SPARC)
+    if (OPENSSL_sparcv9cap_P[0] & SPARCV9_VIS3) {
+        gcm_init_vis3(ctx->Htable, ctx->H.u);
+        ctx->gmult = gcm_gmult_vis3;
+        CTX__GHASH(gcm_ghash_vis3);
+    } else {
+        gcm_init_4bit(ctx->Htable, ctx->H.u);
+        ctx->gmult = gcm_gmult_4bit;
+        CTX__GHASH(gcm_ghash_4bit);
+    }
+# elif  defined(GHASH_ASM_PPC)
+    if (OPENSSL_ppccap_P & PPC_CRYPTO207) {
+        gcm_init_p8(ctx->Htable, ctx->H.u);
+        ctx->gmult = gcm_gmult_p8;
+        CTX__GHASH(gcm_ghash_p8);
+    } else {
+        gcm_init_4bit(ctx->Htable, ctx->H.u);
+        ctx->gmult = gcm_gmult_4bit;
+        CTX__GHASH(gcm_ghash_4bit);
+    }
+# else
+    gcm_init_4bit(ctx->Htable, ctx->H.u);
+# endif
+# undef CTX__GHASH
+#endif
+}
+
+void CRYPTO_gcm128_setiv(GCM128_CONTEXT *ctx, const unsigned char *iv,
+                         size_t len)
+{
+    const union {
+        long one;
+        char little;
+    } is_endian = { 1 };
+    unsigned int ctr;
+#ifdef GCM_FUNCREF_4BIT
+    void (*gcm_gmult_p) (u64 Xi[2], const u128 Htable[16]) = ctx->gmult;
+#endif
+
+    ctx->len.u[0] = 0;          /* AAD length */
+    ctx->len.u[1] = 0;          /* message length */
+    ctx->ares = 0;
+    ctx->mres = 0;
+
+    if (len == 12) {
+        memcpy(ctx->Yi.c, iv, 12);
+        ctx->Yi.c[12] = 0;
+        ctx->Yi.c[13] = 0;
+        ctx->Yi.c[14] = 0;
+        ctx->Yi.c[15] = 1;
+        ctr = 1;
+    } else {
+        size_t i;
+        u64 len0 = len;
+
+        /* Borrow ctx->Xi to calculate initial Yi */
+        ctx->Xi.u[0] = 0;
+        ctx->Xi.u[1] = 0;
+
+        while (len >= 16) {
+            for (i = 0; i < 16; ++i)
+                ctx->Xi.c[i] ^= iv[i];
+            GCM_MUL(ctx);
+            iv += 16;
+            len -= 16;
+        }
+        if (len) {
+            for (i = 0; i < len; ++i)
+                ctx->Xi.c[i] ^= iv[i];
+            GCM_MUL(ctx);
+        }
+        len0 <<= 3;
+        if (is_endian.little) {
+#ifdef BSWAP8
+            ctx->Xi.u[1] ^= BSWAP8(len0);
+#else
+            ctx->Xi.c[8] ^= (u8)(len0 >> 56);
+            ctx->Xi.c[9] ^= (u8)(len0 >> 48);
+            ctx->Xi.c[10] ^= (u8)(len0 >> 40);
+            ctx->Xi.c[11] ^= (u8)(len0 >> 32);
+            ctx->Xi.c[12] ^= (u8)(len0 >> 24);
+            ctx->Xi.c[13] ^= (u8)(len0 >> 16);
+            ctx->Xi.c[14] ^= (u8)(len0 >> 8);
+            ctx->Xi.c[15] ^= (u8)(len0);
+#endif
+        } else {
+            ctx->Xi.u[1] ^= len0;
+        }
+
+        GCM_MUL(ctx);
+
+        if (is_endian.little)
+#ifdef BSWAP4
+            ctr = BSWAP4(ctx->Xi.d[3]);
+#else
+            ctr = GETU32(ctx->Xi.c + 12);
+#endif
+        else
+            ctr = ctx->Xi.d[3];
+
+        /* Copy borrowed Xi to Yi */
+        ctx->Yi.u[0] = ctx->Xi.u[0];
+        ctx->Yi.u[1] = ctx->Xi.u[1];
+    }
+
+    ctx->Xi.u[0] = 0;
+    ctx->Xi.u[1] = 0;
+
+    (*ctx->block) (ctx->Yi.c, ctx->EK0.c, ctx->key);
+    ++ctr;
+    if (is_endian.little)
+#ifdef BSWAP4
+        ctx->Yi.d[3] = BSWAP4(ctr);
+#else
+        PUTU32(ctx->Yi.c + 12, ctr);
+#endif
+    else
+        ctx->Yi.d[3] = ctr;
+}
+
+int CRYPTO_gcm128_aad(GCM128_CONTEXT *ctx, const unsigned char *aad,
+                      size_t len)
+{
+    size_t i;
+    unsigned int n;
+    u64 alen = ctx->len.u[0];
+#ifdef GCM_FUNCREF_4BIT
+    void (*gcm_gmult_p) (u64 Xi[2], const u128 Htable[16]) = ctx->gmult;
+# ifdef GHASH
+    void (*gcm_ghash_p) (u64 Xi[2], const u128 Htable[16],
+                         const u8 *inp, size_t len) = ctx->ghash;
+# endif
+#endif
+
+    if (ctx->len.u[1])
+        return -2;
+
+    alen += len;
+    if (alen > (U64(1) << 61) || (sizeof(len) == 8 && alen < len))
+        return -1;
+    ctx->len.u[0] = alen;
+
+    n = ctx->ares;
+    if (n) {
+        while (n && len) {
+            ctx->Xi.c[n] ^= *(aad++);
+            --len;
+            n = (n + 1) % 16;
+        }
+        if (n == 0)
+            GCM_MUL(ctx);
+        else {
+            ctx->ares = n;
+            return 0;
+        }
+    }
+#ifdef GHASH
+    if ((i = (len & (size_t)-16))) {
+        GHASH(ctx, aad, i);
+        aad += i;
+        len -= i;
+    }
+#else
+    while (len >= 16) {
+        for (i = 0; i < 16; ++i)
+            ctx->Xi.c[i] ^= aad[i];
+        GCM_MUL(ctx);
+        aad += 16;
+        len -= 16;
+    }
+#endif
+    if (len) {
+        n = (unsigned int)len;
+        for (i = 0; i < len; ++i)
+            ctx->Xi.c[i] ^= aad[i];
+    }
+
+    ctx->ares = n;
+    return 0;
+}
+
+int CRYPTO_gcm128_encrypt(GCM128_CONTEXT *ctx,
+                          const unsigned char *in, unsigned char *out,
+                          size_t len)
+{
+    const union {
+        long one;
+        char little;
+    } is_endian = { 1 };
+    unsigned int n, ctr, mres;
+    size_t i;
+    u64 mlen = ctx->len.u[1];
+    block128_f block = ctx->block;
+    void *key = ctx->key;
+#ifdef GCM_FUNCREF_4BIT
+    void (*gcm_gmult_p) (u64 Xi[2], const u128 Htable[16]) = ctx->gmult;
+# if defined(GHASH) && !defined(OPENSSL_SMALL_FOOTPRINT)
+    void (*gcm_ghash_p) (u64 Xi[2], const u128 Htable[16],
+                         const u8 *inp, size_t len) = ctx->ghash;
+# endif
+#endif
+
+    mlen += len;
+    if (mlen > ((U64(1) << 36) - 32) || (sizeof(len) == 8 && mlen < len))
+        return -1;
+    ctx->len.u[1] = mlen;
+
+    mres = ctx->mres;
+
+    if (ctx->ares) {
+        /* First call to encrypt finalizes GHASH(AAD) */
+#if defined(GHASH) && !defined(OPENSSL_SMALL_FOOTPRINT)
+        if (len == 0) {
+            GCM_MUL(ctx);
+            ctx->ares = 0;
+            return 0;
+        }
+        memcpy(ctx->Xn, ctx->Xi.c, sizeof(ctx->Xi));
+        ctx->Xi.u[0] = 0;
+        ctx->Xi.u[1] = 0;
+        mres = sizeof(ctx->Xi);
+#else
+        GCM_MUL(ctx);
+#endif
+        ctx->ares = 0;
+    }
+
+    if (is_endian.little)
+#ifdef BSWAP4
+        ctr = BSWAP4(ctx->Yi.d[3]);
+#else
+        ctr = GETU32(ctx->Yi.c + 12);
+#endif
+    else
+        ctr = ctx->Yi.d[3];
+
+    n = mres % 16;
+#if !defined(OPENSSL_SMALL_FOOTPRINT)
+    if (16 % sizeof(size_t) == 0) { /* always true actually */
+        do {
+            if (n) {
+# if defined(GHASH)
+                while (n && len) {
+                    ctx->Xn[mres++] = *(out++) = *(in++) ^ ctx->EKi.c[n];
+                    --len;
+                    n = (n + 1) % 16;
+                }
+                if (n == 0) {
+                    GHASH(ctx, ctx->Xn, mres);
+                    mres = 0;
+                } else {
+                    ctx->mres = mres;
+                    return 0;
+                }
+# else
+                while (n && len) {
+                    ctx->Xi.c[n] ^= *(out++) = *(in++) ^ ctx->EKi.c[n];
+                    --len;
+                    n = (n + 1) % 16;
+                }
+                if (n == 0) {
+                    GCM_MUL(ctx);
+                    mres = 0;
+                } else {
+                    ctx->mres = n;
+                    return 0;
+                }
+# endif
+            }
+# if defined(STRICT_ALIGNMENT)
+            if (((size_t)in | (size_t)out) % sizeof(size_t) != 0)
+                break;
+# endif
+# if defined(GHASH)
+            if (len >= 16 && mres) {
+                GHASH(ctx, ctx->Xn, mres);
+                mres = 0;
+            }
+#  if defined(GHASH_CHUNK)
+            while (len >= GHASH_CHUNK) {
+                size_t j = GHASH_CHUNK;
+
+                while (j) {
+                    size_t *out_t = (size_t *)out;
+                    const size_t *in_t = (const size_t *)in;
+
+                    (*block) (ctx->Yi.c, ctx->EKi.c, key);
+                    ++ctr;
+                    if (is_endian.little)
+#   ifdef BSWAP4
+                        ctx->Yi.d[3] = BSWAP4(ctr);
+#   else
+                        PUTU32(ctx->Yi.c + 12, ctr);
+#   endif
+                    else
+                        ctx->Yi.d[3] = ctr;
+                    for (i = 0; i < 16 / sizeof(size_t); ++i)
+                        out_t[i] = in_t[i] ^ ctx->EKi.t[i];
+                    out += 16;
+                    in += 16;
+                    j -= 16;
+                }
+                GHASH(ctx, out - GHASH_CHUNK, GHASH_CHUNK);
+                len -= GHASH_CHUNK;
+            }
+#  endif
+            if ((i = (len & (size_t)-16))) {
+                size_t j = i;
+
+                while (len >= 16) {
+                    size_t *out_t = (size_t *)out;
+                    const size_t *in_t = (const size_t *)in;
+
+                    (*block) (ctx->Yi.c, ctx->EKi.c, key);
+                    ++ctr;
+                    if (is_endian.little)
+#  ifdef BSWAP4
+                        ctx->Yi.d[3] = BSWAP4(ctr);
+#  else
+                        PUTU32(ctx->Yi.c + 12, ctr);
+#  endif
+                    else
+                        ctx->Yi.d[3] = ctr;
+                    for (i = 0; i < 16 / sizeof(size_t); ++i)
+                        out_t[i] = in_t[i] ^ ctx->EKi.t[i];
+                    out += 16;
+                    in += 16;
+                    len -= 16;
+                }
+                GHASH(ctx, out - j, j);
+            }
+# else
+            while (len >= 16) {
+                size_t *out_t = (size_t *)out;
+                const size_t *in_t = (const size_t *)in;
+
+                (*block) (ctx->Yi.c, ctx->EKi.c, key);
+                ++ctr;
+                if (is_endian.little)
+#  ifdef BSWAP4
+                    ctx->Yi.d[3] = BSWAP4(ctr);
+#  else
+                    PUTU32(ctx->Yi.c + 12, ctr);
+#  endif
+                else
+                    ctx->Yi.d[3] = ctr;
+                for (i = 0; i < 16 / sizeof(size_t); ++i)
+                    ctx->Xi.t[i] ^= out_t[i] = in_t[i] ^ ctx->EKi.t[i];
+                GCM_MUL(ctx);
+                out += 16;
+                in += 16;
+                len -= 16;
+            }
+# endif
+            if (len) {
+                (*block) (ctx->Yi.c, ctx->EKi.c, key);
+                ++ctr;
+                if (is_endian.little)
+# ifdef BSWAP4
+                    ctx->Yi.d[3] = BSWAP4(ctr);
+# else
+                    PUTU32(ctx->Yi.c + 12, ctr);
+# endif
+                else
+                    ctx->Yi.d[3] = ctr;
+# if defined(GHASH)
+                while (len--) {
+                    ctx->Xn[mres++] = out[n] = in[n] ^ ctx->EKi.c[n];
+                    ++n;
+                }
+# else
+                while (len--) {
+                    ctx->Xi.c[n] ^= out[n] = in[n] ^ ctx->EKi.c[n];
+                    ++n;
+                }
+                mres = n;
+# endif
+            }
+
+            ctx->mres = mres;
+            return 0;
+        } while (0);
+    }
+#endif
+    for (i = 0; i < len; ++i) {
+        if (n == 0) {
+            (*block) (ctx->Yi.c, ctx->EKi.c, key);
+            ++ctr;
+            if (is_endian.little)
+#ifdef BSWAP4
+                ctx->Yi.d[3] = BSWAP4(ctr);
+#else
+                PUTU32(ctx->Yi.c + 12, ctr);
+#endif
+            else
+                ctx->Yi.d[3] = ctr;
+        }
+#if defined(GHASH) && !defined(OPENSSL_SMALL_FOOTPRINT)
+        ctx->Xn[mres++] = out[i] = in[i] ^ ctx->EKi.c[n];
+        n = (n + 1) % 16;
+        if (mres == sizeof(ctx->Xn)) {
+            GHASH(ctx,ctx->Xn,sizeof(ctx->Xn));
+            mres = 0;
+        }
+#else
+        ctx->Xi.c[n] ^= out[i] = in[i] ^ ctx->EKi.c[n];
+        mres = n = (n + 1) % 16;
+        if (n == 0)
+            GCM_MUL(ctx);
+#endif
+    }
+
+    ctx->mres = mres;
+    return 0;
+}
+
+int CRYPTO_gcm128_decrypt(GCM128_CONTEXT *ctx,
+                          const unsigned char *in, unsigned char *out,
+                          size_t len)
+{
+    const union {
+        long one;
+        char little;
+    } is_endian = { 1 };
+    unsigned int n, ctr, mres;
+    size_t i;
+    u64 mlen = ctx->len.u[1];
+    block128_f block = ctx->block;
+    void *key = ctx->key;
+#ifdef GCM_FUNCREF_4BIT
+    void (*gcm_gmult_p) (u64 Xi[2], const u128 Htable[16]) = ctx->gmult;
+# if defined(GHASH) && !defined(OPENSSL_SMALL_FOOTPRINT)
+    void (*gcm_ghash_p) (u64 Xi[2], const u128 Htable[16],
+                         const u8 *inp, size_t len) = ctx->ghash;
+# endif
+#endif
+
+    mlen += len;
+    if (mlen > ((U64(1) << 36) - 32) || (sizeof(len) == 8 && mlen < len))
+        return -1;
+    ctx->len.u[1] = mlen;
+
+    mres = ctx->mres;
+
+    if (ctx->ares) {
+        /* First call to decrypt finalizes GHASH(AAD) */
+#if defined(GHASH) && !defined(OPENSSL_SMALL_FOOTPRINT)
+        if (len == 0) {
+            GCM_MUL(ctx);
+            ctx->ares = 0;
+            return 0;
+        }
+        memcpy(ctx->Xn, ctx->Xi.c, sizeof(ctx->Xi));
+        ctx->Xi.u[0] = 0;
+        ctx->Xi.u[1] = 0;
+        mres = sizeof(ctx->Xi);
+#else
+        GCM_MUL(ctx);
+#endif
+        ctx->ares = 0;
+    }
+
+    if (is_endian.little)
+#ifdef BSWAP4
+        ctr = BSWAP4(ctx->Yi.d[3]);
+#else
+        ctr = GETU32(ctx->Yi.c + 12);
+#endif
+    else
+        ctr = ctx->Yi.d[3];
+
+    n = mres % 16;
+#if !defined(OPENSSL_SMALL_FOOTPRINT)
+    if (16 % sizeof(size_t) == 0) { /* always true actually */
+        do {
+            if (n) {
+# if defined(GHASH)
+                while (n && len) {
+                    *(out++) = (ctx->Xn[mres++] = *(in++)) ^ ctx->EKi.c[n];
+                    --len;
+                    n = (n + 1) % 16;
+                }
+                if (n == 0) {
+                    GHASH(ctx, ctx->Xn, mres);
+                    mres = 0;
+                } else {
+                    ctx->mres = mres;
+                    return 0;
+                }
+# else
+                while (n && len) {
+                    u8 c = *(in++);
+                    *(out++) = c ^ ctx->EKi.c[n];
+                    ctx->Xi.c[n] ^= c;
+                    --len;
+                    n = (n + 1) % 16;
+                }
+                if (n == 0) {
+                    GCM_MUL(ctx);
+                    mres = 0;
+                } else {
+                    ctx->mres = n;
+                    return 0;
+                }
+# endif
+            }
+# if defined(STRICT_ALIGNMENT)
+            if (((size_t)in | (size_t)out) % sizeof(size_t) != 0)
+                break;
+# endif
+# if defined(GHASH)
+            if (len >= 16 && mres) {
+                GHASH(ctx, ctx->Xn, mres);
+                mres = 0;
+            }
+#  if defined(GHASH_CHUNK)
+            while (len >= GHASH_CHUNK) {
+                size_t j = GHASH_CHUNK;
+
+                GHASH(ctx, in, GHASH_CHUNK);
+                while (j) {
+                    size_t *out_t = (size_t *)out;
+                    const size_t *in_t = (const size_t *)in;
+
+                    (*block) (ctx->Yi.c, ctx->EKi.c, key);
+                    ++ctr;
+                    if (is_endian.little)
+#   ifdef BSWAP4
+                        ctx->Yi.d[3] = BSWAP4(ctr);
+#   else
+                        PUTU32(ctx->Yi.c + 12, ctr);
+#   endif
+                    else
+                        ctx->Yi.d[3] = ctr;
+                    for (i = 0; i < 16 / sizeof(size_t); ++i)
+                        out_t[i] = in_t[i] ^ ctx->EKi.t[i];
+                    out += 16;
+                    in += 16;
+                    j -= 16;
+                }
+                len -= GHASH_CHUNK;
+            }
+#  endif
+            if ((i = (len & (size_t)-16))) {
+                GHASH(ctx, in, i);
+                while (len >= 16) {
+                    size_t *out_t = (size_t *)out;
+                    const size_t *in_t = (const size_t *)in;
+
+                    (*block) (ctx->Yi.c, ctx->EKi.c, key);
+                    ++ctr;
+                    if (is_endian.little)
+#  ifdef BSWAP4
+                        ctx->Yi.d[3] = BSWAP4(ctr);
+#  else
+                        PUTU32(ctx->Yi.c + 12, ctr);
+#  endif
+                    else
+                        ctx->Yi.d[3] = ctr;
+                    for (i = 0; i < 16 / sizeof(size_t); ++i)
+                        out_t[i] = in_t[i] ^ ctx->EKi.t[i];
+                    out += 16;
+                    in += 16;
+                    len -= 16;
+                }
+            }
+# else
+            while (len >= 16) {
+                size_t *out_t = (size_t *)out;
+                const size_t *in_t = (const size_t *)in;
+
+                (*block) (ctx->Yi.c, ctx->EKi.c, key);
+                ++ctr;
+                if (is_endian.little)
+#  ifdef BSWAP4
+                    ctx->Yi.d[3] = BSWAP4(ctr);
+#  else
+                    PUTU32(ctx->Yi.c + 12, ctr);
+#  endif
+                else
+                    ctx->Yi.d[3] = ctr;
+                for (i = 0; i < 16 / sizeof(size_t); ++i) {
+                    size_t c = in[i];
+                    out[i] = c ^ ctx->EKi.t[i];
+                    ctx->Xi.t[i] ^= c;
+                }
+                GCM_MUL(ctx);
+                out += 16;
+                in += 16;
+                len -= 16;
+            }
+# endif
+            if (len) {
+                (*block) (ctx->Yi.c, ctx->EKi.c, key);
+                ++ctr;
+                if (is_endian.little)
+# ifdef BSWAP4
+                    ctx->Yi.d[3] = BSWAP4(ctr);
+# else
+                    PUTU32(ctx->Yi.c + 12, ctr);
+# endif
+                else
+                    ctx->Yi.d[3] = ctr;
+# if defined(GHASH)
+                while (len--) {
+                    out[n] = (ctx->Xn[mres++] = in[n]) ^ ctx->EKi.c[n];
+                    ++n;
+                }
+# else
+                while (len--) {
+                    u8 c = in[n];
+                    ctx->Xi.c[n] ^= c;
+                    out[n] = c ^ ctx->EKi.c[n];
+                    ++n;
+                }
+                mres = n;
+# endif
+            }
+
+            ctx->mres = mres;
+            return 0;
+        } while (0);
+    }
+#endif
+    for (i = 0; i < len; ++i) {
+        u8 c;
+        if (n == 0) {
+            (*block) (ctx->Yi.c, ctx->EKi.c, key);
+            ++ctr;
+            if (is_endian.little)
+#ifdef BSWAP4
+                ctx->Yi.d[3] = BSWAP4(ctr);
+#else
+                PUTU32(ctx->Yi.c + 12, ctr);
+#endif
+            else
+                ctx->Yi.d[3] = ctr;
+        }
+#if defined(GHASH) && !defined(OPENSSL_SMALL_FOOTPRINT)
+        out[i] = (ctx->Xn[mres++] = c = in[i]) ^ ctx->EKi.c[n];
+        n = (n + 1) % 16;
+        if (mres == sizeof(ctx->Xn)) {
+            GHASH(ctx,ctx->Xn,sizeof(ctx->Xn));
+            mres = 0;
+        }
+#else
+        c = in[i];
+        out[i] = c ^ ctx->EKi.c[n];
+        ctx->Xi.c[n] ^= c;
+        mres = n = (n + 1) % 16;
+        if (n == 0)
+            GCM_MUL(ctx);
+#endif
+    }
+
+    ctx->mres = mres;
+    return 0;
+}
+
+int CRYPTO_gcm128_encrypt_ctr32(GCM128_CONTEXT *ctx,
+                                const unsigned char *in, unsigned char *out,
+                                size_t len, ctr128_f stream)
+{
+#if defined(OPENSSL_SMALL_FOOTPRINT)
+    return CRYPTO_gcm128_encrypt(ctx, in, out, len);
+#else
+    const union {
+        long one;
+        char little;
+    } is_endian = { 1 };
+    unsigned int n, ctr, mres;
+    size_t i;
+    u64 mlen = ctx->len.u[1];
+    void *key = ctx->key;
+# ifdef GCM_FUNCREF_4BIT
+    void (*gcm_gmult_p) (u64 Xi[2], const u128 Htable[16]) = ctx->gmult;
+#  ifdef GHASH
+    void (*gcm_ghash_p) (u64 Xi[2], const u128 Htable[16],
+                         const u8 *inp, size_t len) = ctx->ghash;
+#  endif
+# endif
+
+    mlen += len;
+    if (mlen > ((U64(1) << 36) - 32) || (sizeof(len) == 8 && mlen < len))
+        return -1;
+    ctx->len.u[1] = mlen;
+
+    mres = ctx->mres;
+
+    if (ctx->ares) {
+        /* First call to encrypt finalizes GHASH(AAD) */
+#if defined(GHASH)
+        if (len == 0) {
+            GCM_MUL(ctx);
+            ctx->ares = 0;
+            return 0;
+        }
+        memcpy(ctx->Xn, ctx->Xi.c, sizeof(ctx->Xi));
+        ctx->Xi.u[0] = 0;
+        ctx->Xi.u[1] = 0;
+        mres = sizeof(ctx->Xi);
+#else
+        GCM_MUL(ctx);
+#endif
+        ctx->ares = 0;
+    }
+
+    if (is_endian.little)
+# ifdef BSWAP4
+        ctr = BSWAP4(ctx->Yi.d[3]);
+# else
+        ctr = GETU32(ctx->Yi.c + 12);
+# endif
+    else
+        ctr = ctx->Yi.d[3];
+
+    n = mres % 16;
+    if (n) {
+# if defined(GHASH)
+        while (n && len) {
+            ctx->Xn[mres++] = *(out++) = *(in++) ^ ctx->EKi.c[n];
+            --len;
+            n = (n + 1) % 16;
+        }
+        if (n == 0) {
+            GHASH(ctx, ctx->Xn, mres);
+            mres = 0;
+        } else {
+            ctx->mres = mres;
+            return 0;
+        }
+# else
+        while (n && len) {
+            ctx->Xi.c[n] ^= *(out++) = *(in++) ^ ctx->EKi.c[n];
+            --len;
+            n = (n + 1) % 16;
+        }
+        if (n == 0) {
+            GCM_MUL(ctx);
+            mres = 0;
+        } else {
+            ctx->mres = n;
+            return 0;
+        }
+# endif
+    }
+# if defined(GHASH)
+        if (len >= 16 && mres) {
+            GHASH(ctx, ctx->Xn, mres);
+            mres = 0;
+        }
+#  if defined(GHASH_CHUNK)
+    while (len >= GHASH_CHUNK) {
+        (*stream) (in, out, GHASH_CHUNK / 16, key, ctx->Yi.c);
+        ctr += GHASH_CHUNK / 16;
+        if (is_endian.little)
+#   ifdef BSWAP4
+            ctx->Yi.d[3] = BSWAP4(ctr);
+#   else
+            PUTU32(ctx->Yi.c + 12, ctr);
+#   endif
+        else
+            ctx->Yi.d[3] = ctr;
+        GHASH(ctx, out, GHASH_CHUNK);
+        out += GHASH_CHUNK;
+        in += GHASH_CHUNK;
+        len -= GHASH_CHUNK;
+    }
+#  endif
+# endif
+    if ((i = (len & (size_t)-16))) {
+        size_t j = i / 16;
+
+        (*stream) (in, out, j, key, ctx->Yi.c);
+        ctr += (unsigned int)j;
+        if (is_endian.little)
+# ifdef BSWAP4
+            ctx->Yi.d[3] = BSWAP4(ctr);
+# else
+            PUTU32(ctx->Yi.c + 12, ctr);
+# endif
+        else
+            ctx->Yi.d[3] = ctr;
+        in += i;
+        len -= i;
+# if defined(GHASH)
+        GHASH(ctx, out, i);
+        out += i;
+# else
+        while (j--) {
+            for (i = 0; i < 16; ++i)
+                ctx->Xi.c[i] ^= out[i];
+            GCM_MUL(ctx);
+            out += 16;
+        }
+# endif
+    }
+    if (len) {
+        (*ctx->block) (ctx->Yi.c, ctx->EKi.c, key);
+        ++ctr;
+        if (is_endian.little)
+# ifdef BSWAP4
+            ctx->Yi.d[3] = BSWAP4(ctr);
+# else
+            PUTU32(ctx->Yi.c + 12, ctr);
+# endif
+        else
+            ctx->Yi.d[3] = ctr;
+        while (len--) {
+# if defined(GHASH)
+            ctx->Xn[mres++] = out[n] = in[n] ^ ctx->EKi.c[n];
+# else
+            ctx->Xi.c[mres++] ^= out[n] = in[n] ^ ctx->EKi.c[n];
+# endif
+            ++n;
+        }
+    }
+
+    ctx->mres = mres;
+    return 0;
+#endif
+}
+
+int CRYPTO_gcm128_decrypt_ctr32(GCM128_CONTEXT *ctx,
+                                const unsigned char *in, unsigned char *out,
+                                size_t len, ctr128_f stream)
+{
+#if defined(OPENSSL_SMALL_FOOTPRINT)
+    return CRYPTO_gcm128_decrypt(ctx, in, out, len);
+#else
+    const union {
+        long one;
+        char little;
+    } is_endian = { 1 };
+    unsigned int n, ctr, mres;
+    size_t i;
+    u64 mlen = ctx->len.u[1];
+    void *key = ctx->key;
+# ifdef GCM_FUNCREF_4BIT
+    void (*gcm_gmult_p) (u64 Xi[2], const u128 Htable[16]) = ctx->gmult;
+#  ifdef GHASH
+    void (*gcm_ghash_p) (u64 Xi[2], const u128 Htable[16],
+                         const u8 *inp, size_t len) = ctx->ghash;
+#  endif
+# endif
+
+    mlen += len;
+    if (mlen > ((U64(1) << 36) - 32) || (sizeof(len) == 8 && mlen < len))
+        return -1;
+    ctx->len.u[1] = mlen;
+
+    mres = ctx->mres;
+
+    if (ctx->ares) {
+        /* First call to decrypt finalizes GHASH(AAD) */
+# if defined(GHASH)
+        if (len == 0) {
+            GCM_MUL(ctx);
+            ctx->ares = 0;
+            return 0;
+        }
+        memcpy(ctx->Xn, ctx->Xi.c, sizeof(ctx->Xi));
+        ctx->Xi.u[0] = 0;
+        ctx->Xi.u[1] = 0;
+        mres = sizeof(ctx->Xi);
+# else
+        GCM_MUL(ctx);
+# endif
+        ctx->ares = 0;
+    }
+
+    if (is_endian.little)
+# ifdef BSWAP4
+        ctr = BSWAP4(ctx->Yi.d[3]);
+# else
+        ctr = GETU32(ctx->Yi.c + 12);
+# endif
+    else
+        ctr = ctx->Yi.d[3];
+
+    n = mres % 16;
+    if (n) {
+# if defined(GHASH)
+        while (n && len) {
+            *(out++) = (ctx->Xn[mres++] = *(in++)) ^ ctx->EKi.c[n];
+            --len;
+            n = (n + 1) % 16;
+        }
+        if (n == 0) {
+            GHASH(ctx, ctx->Xn, mres);
+            mres = 0;
+        } else {
+            ctx->mres = mres;
+            return 0;
+        }
+# else
+        while (n && len) {
+            u8 c = *(in++);
+            *(out++) = c ^ ctx->EKi.c[n];
+            ctx->Xi.c[n] ^= c;
+            --len;
+            n = (n + 1) % 16;
+        }
+        if (n == 0) {
+            GCM_MUL(ctx);
+            mres = 0;
+        } else {
+            ctx->mres = n;
+            return 0;
+        }
+# endif
+    }
+# if defined(GHASH)
+    if (len >= 16 && mres) {
+        GHASH(ctx, ctx->Xn, mres);
+        mres = 0;
+    }
+#  if defined(GHASH_CHUNK)
+    while (len >= GHASH_CHUNK) {
+        GHASH(ctx, in, GHASH_CHUNK);
+        (*stream) (in, out, GHASH_CHUNK / 16, key, ctx->Yi.c);
+        ctr += GHASH_CHUNK / 16;
+        if (is_endian.little)
+#   ifdef BSWAP4
+            ctx->Yi.d[3] = BSWAP4(ctr);
+#   else
+            PUTU32(ctx->Yi.c + 12, ctr);
+#   endif
+        else
+            ctx->Yi.d[3] = ctr;
+        out += GHASH_CHUNK;
+        in += GHASH_CHUNK;
+        len -= GHASH_CHUNK;
+    }
+#  endif
+# endif
+    if ((i = (len & (size_t)-16))) {
+        size_t j = i / 16;
+
+# if defined(GHASH)
+        GHASH(ctx, in, i);
+# else
+        while (j--) {
+            size_t k;
+            for (k = 0; k < 16; ++k)
+                ctx->Xi.c[k] ^= in[k];
+            GCM_MUL(ctx);
+            in += 16;
+        }
+        j = i / 16;
+        in -= i;
+# endif
+        (*stream) (in, out, j, key, ctx->Yi.c);
+        ctr += (unsigned int)j;
+        if (is_endian.little)
+# ifdef BSWAP4
+            ctx->Yi.d[3] = BSWAP4(ctr);
+# else
+            PUTU32(ctx->Yi.c + 12, ctr);
+# endif
+        else
+            ctx->Yi.d[3] = ctr;
+        out += i;
+        in += i;
+        len -= i;
+    }
+    if (len) {
+        (*ctx->block) (ctx->Yi.c, ctx->EKi.c, key);
+        ++ctr;
+        if (is_endian.little)
+# ifdef BSWAP4
+            ctx->Yi.d[3] = BSWAP4(ctr);
+# else
+            PUTU32(ctx->Yi.c + 12, ctr);
+# endif
+        else
+            ctx->Yi.d[3] = ctr;
+        while (len--) {
+# if defined(GHASH)
+            out[n] = (ctx->Xn[mres++] = in[n]) ^ ctx->EKi.c[n];
+# else
+            u8 c = in[n];
+            ctx->Xi.c[mres++] ^= c;
+            out[n] = c ^ ctx->EKi.c[n];
+# endif
+            ++n;
+        }
+    }
+
+    ctx->mres = mres;
+    return 0;
+#endif
+}
+
+int CRYPTO_gcm128_finish(GCM128_CONTEXT *ctx, const unsigned char *tag,
+                         size_t len)
+{
+    const union {
+        long one;
+        char little;
+    } is_endian = { 1 };
+    u64 alen = ctx->len.u[0] << 3;
+    u64 clen = ctx->len.u[1] << 3;
+#ifdef GCM_FUNCREF_4BIT
+    void (*gcm_gmult_p) (u64 Xi[2], const u128 Htable[16]) = ctx->gmult;
+# if defined(GHASH) && !defined(OPENSSL_SMALL_FOOTPRINT)
+    void (*gcm_ghash_p) (u64 Xi[2], const u128 Htable[16],
+                         const u8 *inp, size_t len) = ctx->ghash;
+# endif
+#endif
+
+#if defined(GHASH) && !defined(OPENSSL_SMALL_FOOTPRINT)
+    u128 bitlen;
+    unsigned int mres = ctx->mres;
+
+    if (mres) {
+        unsigned blocks = (mres + 15) & -16;
+
+        memset(ctx->Xn + mres, 0, blocks - mres);
+        mres = blocks;
+        if (mres == sizeof(ctx->Xn)) {
+            GHASH(ctx, ctx->Xn, mres);
+            mres = 0;
+        }
+    } else if (ctx->ares) {
+        GCM_MUL(ctx);
+    }
+#else
+    if (ctx->mres || ctx->ares)
+        GCM_MUL(ctx);
+#endif
+
+    if (is_endian.little) {
+#ifdef BSWAP8
+        alen = BSWAP8(alen);
+        clen = BSWAP8(clen);
+#else
+        u8 *p = ctx->len.c;
+
+        ctx->len.u[0] = alen;
+        ctx->len.u[1] = clen;
+
+        alen = (u64)GETU32(p) << 32 | GETU32(p + 4);
+        clen = (u64)GETU32(p + 8) << 32 | GETU32(p + 12);
+#endif
+    }
+
+#if defined(GHASH) && !defined(OPENSSL_SMALL_FOOTPRINT)
+    bitlen.hi = alen;
+    bitlen.lo = clen;
+    memcpy(ctx->Xn + mres, &bitlen, sizeof(bitlen));
+    mres += sizeof(bitlen);
+    GHASH(ctx, ctx->Xn, mres);
+#else
+    ctx->Xi.u[0] ^= alen;
+    ctx->Xi.u[1] ^= clen;
+    GCM_MUL(ctx);
+#endif
+
+    ctx->Xi.u[0] ^= ctx->EK0.u[0];
+    ctx->Xi.u[1] ^= ctx->EK0.u[1];
+
+    if (tag && len <= sizeof(ctx->Xi))
+        return CRYPTO_memcmp(ctx->Xi.c, tag, len);
+    else
+        return -1;
+}
+
+void CRYPTO_gcm128_tag(GCM128_CONTEXT *ctx, unsigned char *tag, size_t len)
+{
+    CRYPTO_gcm128_finish(ctx, NULL, 0);
+    memcpy(tag, ctx->Xi.c,
+           len <= sizeof(ctx->Xi.c) ? len : sizeof(ctx->Xi.c));
+}
+
+GCM128_CONTEXT *CRYPTO_gcm128_new(void *key, block128_f block)
+{
+    GCM128_CONTEXT *ret;
+
+    if ((ret = OPENSSL_malloc(sizeof(*ret))) != NULL)
+        CRYPTO_gcm128_init(ret, key, block);
+
+    return ret;
+}
+
+void CRYPTO_gcm128_release(GCM128_CONTEXT *ctx)
+{
+    OPENSSL_clear_free(ctx, sizeof(*ctx));
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/modes_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/modes_lcl.h
new file mode 100644
index 000000000..f2ae01d11
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/modes_lcl.h
@@ -0,0 +1,190 @@
+/*
+ * Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/modes.h>
+
+#if (defined(_WIN32) || defined(_WIN64)) && !defined(__MINGW32__)
+typedef __int64 i64;
+typedef unsigned __int64 u64;
+# define U64(C) C##UI64
+#elif defined(__arch64__)
+typedef long i64;
+typedef unsigned long u64;
+# define U64(C) C##UL
+#else
+typedef long long i64;
+typedef unsigned long long u64;
+# define U64(C) C##ULL
+#endif
+
+typedef unsigned int u32;
+typedef unsigned char u8;
+
+#define STRICT_ALIGNMENT 1
+#ifndef PEDANTIC
+# if defined(__i386)    || defined(__i386__)    || \
+     defined(__x86_64)  || defined(__x86_64__)  || \
+     defined(_M_IX86)   || defined(_M_AMD64)    || defined(_M_X64) || \
+     defined(__aarch64__)                       || \
+     defined(__s390__)  || defined(__s390x__)
+#  undef STRICT_ALIGNMENT
+# endif
+#endif
+
+#if !defined(PEDANTIC) && !defined(OPENSSL_NO_ASM) && !defined(OPENSSL_NO_INLINE_ASM)
+# if defined(__GNUC__) && __GNUC__>=2
+#  if defined(__x86_64) || defined(__x86_64__)
+#   define BSWAP8(x) ({ u64 ret_=(x);                   \
+                        asm ("bswapq %0"                \
+                        : "+r"(ret_));   ret_;          })
+#   define BSWAP4(x) ({ u32 ret_=(x);                   \
+                        asm ("bswapl %0"                \
+                        : "+r"(ret_));   ret_;          })
+#  elif (defined(__i386) || defined(__i386__)) && !defined(I386_ONLY)
+#   define BSWAP8(x) ({ u32 lo_=(u64)(x)>>32,hi_=(x);   \
+                        asm ("bswapl %0; bswapl %1"     \
+                        : "+r"(hi_),"+r"(lo_));         \
+                        (u64)hi_<<32|lo_;               })
+#   define BSWAP4(x) ({ u32 ret_=(x);                   \
+                        asm ("bswapl %0"                \
+                        : "+r"(ret_));   ret_;          })
+#  elif defined(__aarch64__)
+#   define BSWAP8(x) ({ u64 ret_;                       \
+                        asm ("rev %0,%1"                \
+                        : "=r"(ret_) : "r"(x)); ret_;   })
+#   define BSWAP4(x) ({ u32 ret_;                       \
+                        asm ("rev %w0,%w1"              \
+                        : "=r"(ret_) : "r"(x)); ret_;   })
+#  elif (defined(__arm__) || defined(__arm)) && !defined(STRICT_ALIGNMENT)
+#   define BSWAP8(x) ({ u32 lo_=(u64)(x)>>32,hi_=(x);   \
+                        asm ("rev %0,%0; rev %1,%1"     \
+                        : "+r"(hi_),"+r"(lo_));         \
+                        (u64)hi_<<32|lo_;               })
+#   define BSWAP4(x) ({ u32 ret_;                       \
+                        asm ("rev %0,%1"                \
+                        : "=r"(ret_) : "r"((u32)(x)));  \
+                        ret_;                           })
+#  endif
+# elif defined(_MSC_VER)
+#  if _MSC_VER>=1300
+#   include <stdlib.h>
+#   pragma intrinsic(_byteswap_uint64,_byteswap_ulong)
+#   define BSWAP8(x)    _byteswap_uint64((u64)(x))
+#   define BSWAP4(x)    _byteswap_ulong((u32)(x))
+#  elif defined(_M_IX86)
+__inline u32 _bswap4(u32 val)
+{
+_asm mov eax, val _asm bswap eax}
+#   define BSWAP4(x)    _bswap4(x)
+#  endif
+# endif
+#endif
+#if defined(BSWAP4) && !defined(STRICT_ALIGNMENT)
+# define GETU32(p)       BSWAP4(*(const u32 *)(p))
+# define PUTU32(p,v)     *(u32 *)(p) = BSWAP4(v)
+#else
+# define GETU32(p)       ((u32)(p)[0]<<24|(u32)(p)[1]<<16|(u32)(p)[2]<<8|(u32)(p)[3])
+# define PUTU32(p,v)     ((p)[0]=(u8)((v)>>24),(p)[1]=(u8)((v)>>16),(p)[2]=(u8)((v)>>8),(p)[3]=(u8)(v))
+#endif
+/*- GCM definitions */ typedef struct {
+    u64 hi, lo;
+} u128;
+
+#ifdef  TABLE_BITS
+# undef  TABLE_BITS
+#endif
+/*
+ * Even though permitted values for TABLE_BITS are 8, 4 and 1, it should
+ * never be set to 8 [or 1]. For further information see gcm128.c.
+ */
+#define TABLE_BITS 4
+
+struct gcm128_context {
+    /* Following 6 names follow names in GCM specification */
+    union {
+        u64 u[2];
+        u32 d[4];
+        u8 c[16];
+        size_t t[16 / sizeof(size_t)];
+    } Yi, EKi, EK0, len, Xi, H;
+    /*
+     * Relative position of Xi, H and pre-computed Htable is used in some
+     * assembler modules, i.e. don't change the order!
+     */
+#if TABLE_BITS==8
+    u128 Htable[256];
+#else
+    u128 Htable[16];
+    void (*gmult) (u64 Xi[2], const u128 Htable[16]);
+    void (*ghash) (u64 Xi[2], const u128 Htable[16], const u8 *inp,
+                   size_t len);
+#endif
+    unsigned int mres, ares;
+    block128_f block;
+    void *key;
+#if !defined(OPENSSL_SMALL_FOOTPRINT)
+    unsigned char Xn[48];
+#endif
+};
+
+struct xts128_context {
+    void *key1, *key2;
+    block128_f block1, block2;
+};
+
+struct ccm128_context {
+    union {
+        u64 u[2];
+        u8 c[16];
+    } nonce, cmac;
+    u64 blocks;
+    block128_f block;
+    void *key;
+};
+
+#ifndef OPENSSL_NO_OCB
+
+typedef union {
+    u64 a[2];
+    unsigned char c[16];
+} OCB_BLOCK;
+# define ocb_block16_xor(in1,in2,out) \
+    ( (out)->a[0]=(in1)->a[0]^(in2)->a[0], \
+      (out)->a[1]=(in1)->a[1]^(in2)->a[1] )
+# if STRICT_ALIGNMENT
+#  define ocb_block16_xor_misaligned(in1,in2,out) \
+    ocb_block_xor((in1)->c,(in2)->c,16,(out)->c)
+# else
+#  define ocb_block16_xor_misaligned ocb_block16_xor
+# endif
+
+struct ocb128_context {
+    /* Need both encrypt and decrypt key schedules for decryption */
+    block128_f encrypt;
+    block128_f decrypt;
+    void *keyenc;
+    void *keydec;
+    ocb128_f stream;    /* direction dependent */
+    /* Key dependent variables. Can be reused if key remains the same */
+    size_t l_index;
+    size_t max_l_index;
+    OCB_BLOCK l_star;
+    OCB_BLOCK l_dollar;
+    OCB_BLOCK *l;
+    /* Must be reset for each session */
+    struct {
+        u64 blocks_hashed;
+        u64 blocks_processed;
+        OCB_BLOCK offset_aad;
+        OCB_BLOCK sum;
+        OCB_BLOCK offset;
+        OCB_BLOCK checksum;
+    } sess;
+};
+#endif                          /* OPENSSL_NO_OCB */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/ocb128.c b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/ocb128.c
new file mode 100644
index 000000000..713b9aaf1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/ocb128.c
@@ -0,0 +1,562 @@
+/*
+ * Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include <openssl/crypto.h>
+#include <openssl/err.h>
+#include "modes_lcl.h"
+
+#ifndef OPENSSL_NO_OCB
+
+/*
+ * Calculate the number of binary trailing zero's in any given number
+ */
+static u32 ocb_ntz(u64 n)
+{
+    u32 cnt = 0;
+
+    /*
+     * We do a right-to-left simple sequential search. This is surprisingly
+     * efficient as the distribution of trailing zeros is not uniform,
+     * e.g. the number of possible inputs with no trailing zeros is equal to
+     * the number with 1 or more; the number with exactly 1 is equal to the
+     * number with 2 or more, etc. Checking the last two bits covers 75% of
+     * all numbers. Checking the last three covers 87.5%
+     */
+    while (!(n & 1)) {
+        n >>= 1;
+        cnt++;
+    }
+    return cnt;
+}
+
+/*
+ * Shift a block of 16 bytes left by shift bits
+ */
+static void ocb_block_lshift(const unsigned char *in, size_t shift,
+                             unsigned char *out)
+{
+    int i;
+    unsigned char carry = 0, carry_next;
+
+    for (i = 15; i >= 0; i--) {
+        carry_next = in[i] >> (8 - shift);
+        out[i] = (in[i] << shift) | carry;
+        carry = carry_next;
+    }
+}
+
+/*
+ * Perform a "double" operation as per OCB spec
+ */
+static void ocb_double(OCB_BLOCK *in, OCB_BLOCK *out)
+{
+    unsigned char mask;
+
+    /*
+     * Calculate the mask based on the most significant bit. There are more
+     * efficient ways to do this - but this way is constant time
+     */
+    mask = in->c[0] & 0x80;
+    mask >>= 7;
+    mask = (0 - mask) & 0x87;
+
+    ocb_block_lshift(in->c, 1, out->c);
+
+    out->c[15] ^= mask;
+}
+
+/*
+ * Perform an xor on in1 and in2 - each of len bytes. Store result in out
+ */
+static void ocb_block_xor(const unsigned char *in1,
+                          const unsigned char *in2, size_t len,
+                          unsigned char *out)
+{
+    size_t i;
+    for (i = 0; i < len; i++) {
+        out[i] = in1[i] ^ in2[i];
+    }
+}
+
+/*
+ * Lookup L_index in our lookup table. If we haven't already got it we need to
+ * calculate it
+ */
+static OCB_BLOCK *ocb_lookup_l(OCB128_CONTEXT *ctx, size_t idx)
+{
+    size_t l_index = ctx->l_index;
+
+    if (idx <= l_index) {
+        return ctx->l + idx;
+    }
+
+    /* We don't have it - so calculate it */
+    if (idx >= ctx->max_l_index) {
+        void *tmp_ptr;
+        /*
+         * Each additional entry allows to process almost double as
+         * much data, so that in linear world the table will need to
+         * be expanded with smaller and smaller increments. Originally
+         * it was doubling in size, which was a waste. Growing it
+         * linearly is not formally optimal, but is simpler to implement.
+         * We grow table by minimally required 4*n that would accommodate
+         * the index.
+         */
+        ctx->max_l_index += (idx - ctx->max_l_index + 4) & ~3;
+        tmp_ptr = OPENSSL_realloc(ctx->l, ctx->max_l_index * sizeof(OCB_BLOCK));
+        if (tmp_ptr == NULL) /* prevent ctx->l from being clobbered */
+            return NULL;
+        ctx->l = tmp_ptr;
+    }
+    while (l_index < idx) {
+        ocb_double(ctx->l + l_index, ctx->l + l_index + 1);
+        l_index++;
+    }
+    ctx->l_index = l_index;
+
+    return ctx->l + idx;
+}
+
+/*
+ * Create a new OCB128_CONTEXT
+ */
+OCB128_CONTEXT *CRYPTO_ocb128_new(void *keyenc, void *keydec,
+                                  block128_f encrypt, block128_f decrypt,
+                                  ocb128_f stream)
+{
+    OCB128_CONTEXT *octx;
+    int ret;
+
+    if ((octx = OPENSSL_malloc(sizeof(*octx))) != NULL) {
+        ret = CRYPTO_ocb128_init(octx, keyenc, keydec, encrypt, decrypt,
+                                 stream);
+        if (ret)
+            return octx;
+        OPENSSL_free(octx);
+    }
+
+    return NULL;
+}
+
+/*
+ * Initialise an existing OCB128_CONTEXT
+ */
+int CRYPTO_ocb128_init(OCB128_CONTEXT *ctx, void *keyenc, void *keydec,
+                       block128_f encrypt, block128_f decrypt,
+                       ocb128_f stream)
+{
+    memset(ctx, 0, sizeof(*ctx));
+    ctx->l_index = 0;
+    ctx->max_l_index = 5;
+    if ((ctx->l = OPENSSL_malloc(ctx->max_l_index * 16)) == NULL) {
+        CRYPTOerr(CRYPTO_F_CRYPTO_OCB128_INIT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    /*
+     * We set both the encryption and decryption key schedules - decryption
+     * needs both. Don't really need decryption schedule if only doing
+     * encryption - but it simplifies things to take it anyway
+     */
+    ctx->encrypt = encrypt;
+    ctx->decrypt = decrypt;
+    ctx->stream = stream;
+    ctx->keyenc = keyenc;
+    ctx->keydec = keydec;
+
+    /* L_* = ENCIPHER(K, zeros(128)) */
+    ctx->encrypt(ctx->l_star.c, ctx->l_star.c, ctx->keyenc);
+
+    /* L_$ = double(L_*) */
+    ocb_double(&ctx->l_star, &ctx->l_dollar);
+
+    /* L_0 = double(L_$) */
+    ocb_double(&ctx->l_dollar, ctx->l);
+
+    /* L_{i} = double(L_{i-1}) */
+    ocb_double(ctx->l, ctx->l+1);
+    ocb_double(ctx->l+1, ctx->l+2);
+    ocb_double(ctx->l+2, ctx->l+3);
+    ocb_double(ctx->l+3, ctx->l+4);
+    ctx->l_index = 4;   /* enough to process up to 496 bytes */
+
+    return 1;
+}
+
+/*
+ * Copy an OCB128_CONTEXT object
+ */
+int CRYPTO_ocb128_copy_ctx(OCB128_CONTEXT *dest, OCB128_CONTEXT *src,
+                           void *keyenc, void *keydec)
+{
+    memcpy(dest, src, sizeof(OCB128_CONTEXT));
+    if (keyenc)
+        dest->keyenc = keyenc;
+    if (keydec)
+        dest->keydec = keydec;
+    if (src->l) {
+        if ((dest->l = OPENSSL_malloc(src->max_l_index * 16)) == NULL) {
+            CRYPTOerr(CRYPTO_F_CRYPTO_OCB128_COPY_CTX, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        memcpy(dest->l, src->l, (src->l_index + 1) * 16);
+    }
+    return 1;
+}
+
+/*
+ * Set the IV to be used for this operation. Must be 1 - 15 bytes.
+ */
+int CRYPTO_ocb128_setiv(OCB128_CONTEXT *ctx, const unsigned char *iv,
+                        size_t len, size_t taglen)
+{
+    unsigned char ktop[16], tmp[16], mask;
+    unsigned char stretch[24], nonce[16];
+    size_t bottom, shift;
+
+    /*
+     * Spec says IV is 120 bits or fewer - it allows non byte aligned lengths.
+     * We don't support this at this stage
+     */
+    if ((len > 15) || (len < 1) || (taglen > 16) || (taglen < 1)) {
+        return -1;
+    }
+
+    /* Reset nonce-dependent variables */
+    memset(&ctx->sess, 0, sizeof(ctx->sess));
+
+    /* Nonce = num2str(TAGLEN mod 128,7) || zeros(120-bitlen(N)) || 1 || N */
+    nonce[0] = ((taglen * 8) % 128) << 1;
+    memset(nonce + 1, 0, 15);
+    memcpy(nonce + 16 - len, iv, len);
+    nonce[15 - len] |= 1;
+
+    /* Ktop = ENCIPHER(K, Nonce[1..122] || zeros(6)) */
+    memcpy(tmp, nonce, 16);
+    tmp[15] &= 0xc0;
+    ctx->encrypt(tmp, ktop, ctx->keyenc);
+
+    /* Stretch = Ktop || (Ktop[1..64] xor Ktop[9..72]) */
+    memcpy(stretch, ktop, 16);
+    ocb_block_xor(ktop, ktop + 1, 8, stretch + 16);
+
+    /* bottom = str2num(Nonce[123..128]) */
+    bottom = nonce[15] & 0x3f;
+
+    /* Offset_0 = Stretch[1+bottom..128+bottom] */
+    shift = bottom % 8;
+    ocb_block_lshift(stretch + (bottom / 8), shift, ctx->sess.offset.c);
+    mask = 0xff;
+    mask <<= 8 - shift;
+    ctx->sess.offset.c[15] |=
+        (*(stretch + (bottom / 8) + 16) & mask) >> (8 - shift);
+
+    return 1;
+}
+
+/*
+ * Provide any AAD. This can be called multiple times. Only the final time can
+ * have a partial block
+ */
+int CRYPTO_ocb128_aad(OCB128_CONTEXT *ctx, const unsigned char *aad,
+                      size_t len)
+{
+    u64 i, all_num_blocks;
+    size_t num_blocks, last_len;
+    OCB_BLOCK tmp;
+
+    /* Calculate the number of blocks of AAD provided now, and so far */
+    num_blocks = len / 16;
+    all_num_blocks = num_blocks + ctx->sess.blocks_hashed;
+
+    /* Loop through all full blocks of AAD */
+    for (i = ctx->sess.blocks_hashed + 1; i <= all_num_blocks; i++) {
+        OCB_BLOCK *lookup;
+
+        /* Offset_i = Offset_{i-1} xor L_{ntz(i)} */
+        lookup = ocb_lookup_l(ctx, ocb_ntz(i));
+        if (lookup == NULL)
+            return 0;
+        ocb_block16_xor(&ctx->sess.offset_aad, lookup, &ctx->sess.offset_aad);
+
+        memcpy(tmp.c, aad, 16);
+        aad += 16;
+
+        /* Sum_i = Sum_{i-1} xor ENCIPHER(K, A_i xor Offset_i) */
+        ocb_block16_xor(&ctx->sess.offset_aad, &tmp, &tmp);
+        ctx->encrypt(tmp.c, tmp.c, ctx->keyenc);
+        ocb_block16_xor(&tmp, &ctx->sess.sum, &ctx->sess.sum);
+    }
+
+    /*
+     * Check if we have any partial blocks left over. This is only valid in the
+     * last call to this function
+     */
+    last_len = len % 16;
+
+    if (last_len > 0) {
+        /* Offset_* = Offset_m xor L_* */
+        ocb_block16_xor(&ctx->sess.offset_aad, &ctx->l_star,
+                        &ctx->sess.offset_aad);
+
+        /* CipherInput = (A_* || 1 || zeros(127-bitlen(A_*))) xor Offset_* */
+        memset(tmp.c, 0, 16);
+        memcpy(tmp.c, aad, last_len);
+        tmp.c[last_len] = 0x80;
+        ocb_block16_xor(&ctx->sess.offset_aad, &tmp, &tmp);
+
+        /* Sum = Sum_m xor ENCIPHER(K, CipherInput) */
+        ctx->encrypt(tmp.c, tmp.c, ctx->keyenc);
+        ocb_block16_xor(&tmp, &ctx->sess.sum, &ctx->sess.sum);
+    }
+
+    ctx->sess.blocks_hashed = all_num_blocks;
+
+    return 1;
+}
+
+/*
+ * Provide any data to be encrypted. This can be called multiple times. Only
+ * the final time can have a partial block
+ */
+int CRYPTO_ocb128_encrypt(OCB128_CONTEXT *ctx,
+                          const unsigned char *in, unsigned char *out,
+                          size_t len)
+{
+    u64 i, all_num_blocks;
+    size_t num_blocks, last_len;
+
+    /*
+     * Calculate the number of blocks of data to be encrypted provided now, and
+     * so far
+     */
+    num_blocks = len / 16;
+    all_num_blocks = num_blocks + ctx->sess.blocks_processed;
+
+    if (num_blocks && all_num_blocks == (size_t)all_num_blocks
+        && ctx->stream != NULL) {
+        size_t max_idx = 0, top = (size_t)all_num_blocks;
+
+        /*
+         * See how many L_{i} entries we need to process data at hand
+         * and pre-compute missing entries in the table [if any]...
+         */
+        while (top >>= 1)
+            max_idx++;
+        if (ocb_lookup_l(ctx, max_idx) == NULL)
+            return 0;
+
+        ctx->stream(in, out, num_blocks, ctx->keyenc,
+                    (size_t)ctx->sess.blocks_processed + 1, ctx->sess.offset.c,
+                    (const unsigned char (*)[16])ctx->l, ctx->sess.checksum.c);
+    } else {
+        /* Loop through all full blocks to be encrypted */
+        for (i = ctx->sess.blocks_processed + 1; i <= all_num_blocks; i++) {
+            OCB_BLOCK *lookup;
+            OCB_BLOCK tmp;
+
+            /* Offset_i = Offset_{i-1} xor L_{ntz(i)} */
+            lookup = ocb_lookup_l(ctx, ocb_ntz(i));
+            if (lookup == NULL)
+                return 0;
+            ocb_block16_xor(&ctx->sess.offset, lookup, &ctx->sess.offset);
+
+            memcpy(tmp.c, in, 16);
+            in += 16;
+
+            /* Checksum_i = Checksum_{i-1} xor P_i */
+            ocb_block16_xor(&tmp, &ctx->sess.checksum, &ctx->sess.checksum);
+
+            /* C_i = Offset_i xor ENCIPHER(K, P_i xor Offset_i) */
+            ocb_block16_xor(&ctx->sess.offset, &tmp, &tmp);
+            ctx->encrypt(tmp.c, tmp.c, ctx->keyenc);
+            ocb_block16_xor(&ctx->sess.offset, &tmp, &tmp);
+
+            memcpy(out, tmp.c, 16);
+            out += 16;
+        }
+    }
+
+    /*
+     * Check if we have any partial blocks left over. This is only valid in the
+     * last call to this function
+     */
+    last_len = len % 16;
+
+    if (last_len > 0) {
+        OCB_BLOCK pad;
+
+        /* Offset_* = Offset_m xor L_* */
+        ocb_block16_xor(&ctx->sess.offset, &ctx->l_star, &ctx->sess.offset);
+
+        /* Pad = ENCIPHER(K, Offset_*) */
+        ctx->encrypt(ctx->sess.offset.c, pad.c, ctx->keyenc);
+
+        /* C_* = P_* xor Pad[1..bitlen(P_*)] */
+        ocb_block_xor(in, pad.c, last_len, out);
+
+        /* Checksum_* = Checksum_m xor (P_* || 1 || zeros(127-bitlen(P_*))) */
+        memset(pad.c, 0, 16);           /* borrow pad */
+        memcpy(pad.c, in, last_len);
+        pad.c[last_len] = 0x80;
+        ocb_block16_xor(&pad, &ctx->sess.checksum, &ctx->sess.checksum);
+    }
+
+    ctx->sess.blocks_processed = all_num_blocks;
+
+    return 1;
+}
+
+/*
+ * Provide any data to be decrypted. This can be called multiple times. Only
+ * the final time can have a partial block
+ */
+int CRYPTO_ocb128_decrypt(OCB128_CONTEXT *ctx,
+                          const unsigned char *in, unsigned char *out,
+                          size_t len)
+{
+    u64 i, all_num_blocks;
+    size_t num_blocks, last_len;
+
+    /*
+     * Calculate the number of blocks of data to be decrypted provided now, and
+     * so far
+     */
+    num_blocks = len / 16;
+    all_num_blocks = num_blocks + ctx->sess.blocks_processed;
+
+    if (num_blocks && all_num_blocks == (size_t)all_num_blocks
+        && ctx->stream != NULL) {
+        size_t max_idx = 0, top = (size_t)all_num_blocks;
+
+        /*
+         * See how many L_{i} entries we need to process data at hand
+         * and pre-compute missing entries in the table [if any]...
+         */
+        while (top >>= 1)
+            max_idx++;
+        if (ocb_lookup_l(ctx, max_idx) == NULL)
+            return 0;
+
+        ctx->stream(in, out, num_blocks, ctx->keydec,
+                    (size_t)ctx->sess.blocks_processed + 1, ctx->sess.offset.c,
+                    (const unsigned char (*)[16])ctx->l, ctx->sess.checksum.c);
+    } else {
+        OCB_BLOCK tmp;
+
+        /* Loop through all full blocks to be decrypted */
+        for (i = ctx->sess.blocks_processed + 1; i <= all_num_blocks; i++) {
+
+            /* Offset_i = Offset_{i-1} xor L_{ntz(i)} */
+            OCB_BLOCK *lookup = ocb_lookup_l(ctx, ocb_ntz(i));
+            if (lookup == NULL)
+                return 0;
+            ocb_block16_xor(&ctx->sess.offset, lookup, &ctx->sess.offset);
+
+            memcpy(tmp.c, in, 16);
+            in += 16;
+
+            /* P_i = Offset_i xor DECIPHER(K, C_i xor Offset_i) */
+            ocb_block16_xor(&ctx->sess.offset, &tmp, &tmp);
+            ctx->decrypt(tmp.c, tmp.c, ctx->keydec);
+            ocb_block16_xor(&ctx->sess.offset, &tmp, &tmp);
+
+            /* Checksum_i = Checksum_{i-1} xor P_i */
+            ocb_block16_xor(&tmp, &ctx->sess.checksum, &ctx->sess.checksum);
+
+            memcpy(out, tmp.c, 16);
+            out += 16;
+        }
+    }
+
+    /*
+     * Check if we have any partial blocks left over. This is only valid in the
+     * last call to this function
+     */
+    last_len = len % 16;
+
+    if (last_len > 0) {
+        OCB_BLOCK pad;
+
+        /* Offset_* = Offset_m xor L_* */
+        ocb_block16_xor(&ctx->sess.offset, &ctx->l_star, &ctx->sess.offset);
+
+        /* Pad = ENCIPHER(K, Offset_*) */
+        ctx->encrypt(ctx->sess.offset.c, pad.c, ctx->keyenc);
+
+        /* P_* = C_* xor Pad[1..bitlen(C_*)] */
+        ocb_block_xor(in, pad.c, last_len, out);
+
+        /* Checksum_* = Checksum_m xor (P_* || 1 || zeros(127-bitlen(P_*))) */
+        memset(pad.c, 0, 16);           /* borrow pad */
+        memcpy(pad.c, out, last_len);
+        pad.c[last_len] = 0x80;
+        ocb_block16_xor(&pad, &ctx->sess.checksum, &ctx->sess.checksum);
+    }
+
+    ctx->sess.blocks_processed = all_num_blocks;
+
+    return 1;
+}
+
+static int ocb_finish(OCB128_CONTEXT *ctx, unsigned char *tag, size_t len,
+                      int write)
+{
+    OCB_BLOCK tmp;
+
+    if (len > 16 || len < 1) {
+        return -1;
+    }
+
+    /*
+     * Tag = ENCIPHER(K, Checksum_* xor Offset_* xor L_$) xor HASH(K,A)
+     */
+    ocb_block16_xor(&ctx->sess.checksum, &ctx->sess.offset, &tmp);
+    ocb_block16_xor(&ctx->l_dollar, &tmp, &tmp);
+    ctx->encrypt(tmp.c, tmp.c, ctx->keyenc);
+    ocb_block16_xor(&tmp, &ctx->sess.sum, &tmp);
+
+    if (write) {
+        memcpy(tag, &tmp, len);
+        return 1;
+    } else {
+        return CRYPTO_memcmp(&tmp, tag, len);
+    }
+}
+
+/*
+ * Calculate the tag and verify it against the supplied tag
+ */
+int CRYPTO_ocb128_finish(OCB128_CONTEXT *ctx, const unsigned char *tag,
+                         size_t len)
+{
+    return ocb_finish(ctx, (unsigned char*)tag, len, 0);
+}
+
+/*
+ * Retrieve the calculated tag
+ */
+int CRYPTO_ocb128_tag(OCB128_CONTEXT *ctx, unsigned char *tag, size_t len)
+{
+    return ocb_finish(ctx, tag, len, 1);
+}
+
+/*
+ * Release all resources
+ */
+void CRYPTO_ocb128_cleanup(OCB128_CONTEXT *ctx)
+{
+    if (ctx) {
+        OPENSSL_clear_free(ctx->l, ctx->max_l_index * 16);
+        OPENSSL_cleanse(ctx, sizeof(*ctx));
+    }
+}
+
+#endif                          /* OPENSSL_NO_OCB */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/ofb128.c b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/ofb128.c
new file mode 100644
index 000000000..83092564c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/ofb128.c
@@ -0,0 +1,74 @@
+/*
+ * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/crypto.h>
+#include "modes_lcl.h"
+#include <string.h>
+
+/*
+ * The input and output encrypted as though 128bit ofb mode is being used.
+ * The extra state information to record how much of the 128bit block we have
+ * used is contained in *num;
+ */
+void CRYPTO_ofb128_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t len, const void *key,
+                           unsigned char ivec[16], int *num, block128_f block)
+{
+    unsigned int n;
+    size_t l = 0;
+
+    n = *num;
+
+#if !defined(OPENSSL_SMALL_FOOTPRINT)
+    if (16 % sizeof(size_t) == 0) { /* always true actually */
+        do {
+            while (n && len) {
+                *(out++) = *(in++) ^ ivec[n];
+                --len;
+                n = (n + 1) % 16;
+            }
+# if defined(STRICT_ALIGNMENT)
+            if (((size_t)in | (size_t)out | (size_t)ivec) % sizeof(size_t) !=
+                0)
+                break;
+# endif
+            while (len >= 16) {
+                (*block) (ivec, ivec, key);
+                for (; n < 16; n += sizeof(size_t))
+                    *(size_t *)(out + n) =
+                        *(size_t *)(in + n) ^ *(size_t *)(ivec + n);
+                len -= 16;
+                out += 16;
+                in += 16;
+                n = 0;
+            }
+            if (len) {
+                (*block) (ivec, ivec, key);
+                while (len--) {
+                    out[n] = in[n] ^ ivec[n];
+                    ++n;
+                }
+            }
+            *num = n;
+            return;
+        } while (0);
+    }
+    /* the rest would be commonly eliminated by x86* compiler */
+#endif
+    while (l < len) {
+        if (n == 0) {
+            (*block) (ivec, ivec, key);
+        }
+        out[l] = in[l] ^ ivec[n];
+        ++l;
+        n = (n + 1) % 16;
+    }
+
+    *num = n;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/wrap128.c b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/wrap128.c
new file mode 100644
index 000000000..d7e56cc26
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/wrap128.c
@@ -0,0 +1,331 @@
+/*
+ * Copyright 2013-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/**  Beware!
+ *
+ *  Following wrapping modes were designed for AES but this implementation
+ *  allows you to use them for any 128 bit block cipher.
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/modes.h>
+
+/** RFC 3394 section 2.2.3.1 Default Initial Value */
+static const unsigned char default_iv[] = {
+    0xA6, 0xA6, 0xA6, 0xA6, 0xA6, 0xA6, 0xA6, 0xA6,
+};
+
+/** RFC 5649 section 3 Alternative Initial Value 32-bit constant */
+static const unsigned char default_aiv[] = {
+    0xA6, 0x59, 0x59, 0xA6
+};
+
+/** Input size limit: lower than maximum of standards but far larger than
+ *  anything that will be used in practice.
+ */
+#define CRYPTO128_WRAP_MAX (1UL << 31)
+
+/** Wrapping according to RFC 3394 section 2.2.1.
+ *
+ *  @param[in]  key    Key value.
+ *  @param[in]  iv     IV value. Length = 8 bytes. NULL = use default_iv.
+ *  @param[in]  in     Plaintext as n 64-bit blocks, n >= 2.
+ *  @param[in]  inlen  Length of in.
+ *  @param[out] out    Ciphertext. Minimal buffer length = (inlen + 8) bytes.
+ *                     Input and output buffers can overlap if block function
+ *                     supports that.
+ *  @param[in]  block  Block processing function.
+ *  @return            0 if inlen does not consist of n 64-bit blocks, n >= 2.
+ *                     or if inlen > CRYPTO128_WRAP_MAX.
+ *                     Output length if wrapping succeeded.
+ */
+size_t CRYPTO_128_wrap(void *key, const unsigned char *iv,
+                       unsigned char *out,
+                       const unsigned char *in, size_t inlen,
+                       block128_f block)
+{
+    unsigned char *A, B[16], *R;
+    size_t i, j, t;
+    if ((inlen & 0x7) || (inlen < 16) || (inlen > CRYPTO128_WRAP_MAX))
+        return 0;
+    A = B;
+    t = 1;
+    memmove(out + 8, in, inlen);
+    if (!iv)
+        iv = default_iv;
+
+    memcpy(A, iv, 8);
+
+    for (j = 0; j < 6; j++) {
+        R = out + 8;
+        for (i = 0; i < inlen; i += 8, t++, R += 8) {
+            memcpy(B + 8, R, 8);
+            block(B, B, key);
+            A[7] ^= (unsigned char)(t & 0xff);
+            if (t > 0xff) {
+                A[6] ^= (unsigned char)((t >> 8) & 0xff);
+                A[5] ^= (unsigned char)((t >> 16) & 0xff);
+                A[4] ^= (unsigned char)((t >> 24) & 0xff);
+            }
+            memcpy(R, B + 8, 8);
+        }
+    }
+    memcpy(out, A, 8);
+    return inlen + 8;
+}
+
+/** Unwrapping according to RFC 3394 section 2.2.2 steps 1-2.
+ *  The IV check (step 3) is responsibility of the caller.
+ *
+ *  @param[in]  key    Key value.
+ *  @param[out] iv     Unchecked IV value. Minimal buffer length = 8 bytes.
+ *  @param[out] out    Plaintext without IV.
+ *                     Minimal buffer length = (inlen - 8) bytes.
+ *                     Input and output buffers can overlap if block function
+ *                     supports that.
+ *  @param[in]  in     Ciphertext as n 64-bit blocks.
+ *  @param[in]  inlen  Length of in.
+ *  @param[in]  block  Block processing function.
+ *  @return            0 if inlen is out of range [24, CRYPTO128_WRAP_MAX]
+ *                     or if inlen is not a multiple of 8.
+ *                     Output length otherwise.
+ */
+static size_t crypto_128_unwrap_raw(void *key, unsigned char *iv,
+                                    unsigned char *out,
+                                    const unsigned char *in, size_t inlen,
+                                    block128_f block)
+{
+    unsigned char *A, B[16], *R;
+    size_t i, j, t;
+    inlen -= 8;
+    if ((inlen & 0x7) || (inlen < 16) || (inlen > CRYPTO128_WRAP_MAX))
+        return 0;
+    A = B;
+    t = 6 * (inlen >> 3);
+    memcpy(A, in, 8);
+    memmove(out, in + 8, inlen);
+    for (j = 0; j < 6; j++) {
+        R = out + inlen - 8;
+        for (i = 0; i < inlen; i += 8, t--, R -= 8) {
+            A[7] ^= (unsigned char)(t & 0xff);
+            if (t > 0xff) {
+                A[6] ^= (unsigned char)((t >> 8) & 0xff);
+                A[5] ^= (unsigned char)((t >> 16) & 0xff);
+                A[4] ^= (unsigned char)((t >> 24) & 0xff);
+            }
+            memcpy(B + 8, R, 8);
+            block(B, B, key);
+            memcpy(R, B + 8, 8);
+        }
+    }
+    memcpy(iv, A, 8);
+    return inlen;
+}
+
+/** Unwrapping according to RFC 3394 section 2.2.2, including the IV check.
+ *  The first block of plaintext has to match the supplied IV, otherwise an
+ *  error is returned.
+ *
+ *  @param[in]  key    Key value.
+ *  @param[out] iv     IV value to match against. Length = 8 bytes.
+ *                     NULL = use default_iv.
+ *  @param[out] out    Plaintext without IV.
+ *                     Minimal buffer length = (inlen - 8) bytes.
+ *                     Input and output buffers can overlap if block function
+ *                     supports that.
+ *  @param[in]  in     Ciphertext as n 64-bit blocks.
+ *  @param[in]  inlen  Length of in.
+ *  @param[in]  block  Block processing function.
+ *  @return            0 if inlen is out of range [24, CRYPTO128_WRAP_MAX]
+ *                     or if inlen is not a multiple of 8
+ *                     or if IV doesn't match expected value.
+ *                     Output length otherwise.
+ */
+size_t CRYPTO_128_unwrap(void *key, const unsigned char *iv,
+                         unsigned char *out, const unsigned char *in,
+                         size_t inlen, block128_f block)
+{
+    size_t ret;
+    unsigned char got_iv[8];
+
+    ret = crypto_128_unwrap_raw(key, got_iv, out, in, inlen, block);
+    if (ret == 0)
+        return 0;
+
+    if (!iv)
+        iv = default_iv;
+    if (CRYPTO_memcmp(got_iv, iv, 8)) {
+        OPENSSL_cleanse(out, ret);
+        return 0;
+    }
+    return ret;
+}
+
+/** Wrapping according to RFC 5649 section 4.1.
+ *
+ *  @param[in]  key    Key value.
+ *  @param[in]  icv    (Non-standard) IV, 4 bytes. NULL = use default_aiv.
+ *  @param[out] out    Ciphertext. Minimal buffer length = (inlen + 15) bytes.
+ *                     Input and output buffers can overlap if block function
+ *                     supports that.
+ *  @param[in]  in     Plaintext as n 64-bit blocks, n >= 2.
+ *  @param[in]  inlen  Length of in.
+ *  @param[in]  block  Block processing function.
+ *  @return            0 if inlen is out of range [1, CRYPTO128_WRAP_MAX].
+ *                     Output length if wrapping succeeded.
+ */
+size_t CRYPTO_128_wrap_pad(void *key, const unsigned char *icv,
+                           unsigned char *out,
+                           const unsigned char *in, size_t inlen,
+                           block128_f block)
+{
+    /* n: number of 64-bit blocks in the padded key data
+     *
+     * If length of plain text is not a multiple of 8, pad the plain text octet
+     * string on the right with octets of zeros, where final length is the
+     * smallest multiple of 8 that is greater than length of plain text.
+     * If length of plain text is a multiple of 8, then there is no padding. */
+    const size_t blocks_padded = (inlen + 7) / 8; /* CEILING(m/8) */
+    const size_t padded_len = blocks_padded * 8;
+    const size_t padding_len = padded_len - inlen;
+    /* RFC 5649 section 3: Alternative Initial Value */
+    unsigned char aiv[8];
+    int ret;
+
+    /* Section 1: use 32-bit fixed field for plaintext octet length */
+    if (inlen == 0 || inlen >= CRYPTO128_WRAP_MAX)
+        return 0;
+
+    /* Section 3: Alternative Initial Value */
+    if (!icv)
+        memcpy(aiv, default_aiv, 4);
+    else
+        memcpy(aiv, icv, 4);    /* Standard doesn't mention this. */
+
+    aiv[4] = (inlen >> 24) & 0xFF;
+    aiv[5] = (inlen >> 16) & 0xFF;
+    aiv[6] = (inlen >> 8) & 0xFF;
+    aiv[7] = inlen & 0xFF;
+
+    if (padded_len == 8) {
+        /*
+         * Section 4.1 - special case in step 2: If the padded plaintext
+         * contains exactly eight octets, then prepend the AIV and encrypt
+         * the resulting 128-bit block using AES in ECB mode.
+         */
+        memmove(out + 8, in, inlen);
+        memcpy(out, aiv, 8);
+        memset(out + 8 + inlen, 0, padding_len);
+        block(out, out, key);
+        ret = 16;               /* AIV + padded input */
+    } else {
+        memmove(out, in, inlen);
+        memset(out + inlen, 0, padding_len); /* Section 4.1 step 1 */
+        ret = CRYPTO_128_wrap(key, aiv, out, out, padded_len, block);
+    }
+
+    return ret;
+}
+
+/** Unwrapping according to RFC 5649 section 4.2.
+ *
+ *  @param[in]  key    Key value.
+ *  @param[in]  icv    (Non-standard) IV, 4 bytes. NULL = use default_aiv.
+ *  @param[out] out    Plaintext. Minimal buffer length = (inlen - 8) bytes.
+ *                     Input and output buffers can overlap if block function
+ *                     supports that.
+ *  @param[in]  in     Ciphertext as n 64-bit blocks.
+ *  @param[in]  inlen  Length of in.
+ *  @param[in]  block  Block processing function.
+ *  @return            0 if inlen is out of range [16, CRYPTO128_WRAP_MAX],
+ *                     or if inlen is not a multiple of 8
+ *                     or if IV and message length indicator doesn't match.
+ *                     Output length if unwrapping succeeded and IV matches.
+ */
+size_t CRYPTO_128_unwrap_pad(void *key, const unsigned char *icv,
+                             unsigned char *out,
+                             const unsigned char *in, size_t inlen,
+                             block128_f block)
+{
+    /* n: number of 64-bit blocks in the padded key data */
+    size_t n = inlen / 8 - 1;
+    size_t padded_len;
+    size_t padding_len;
+    size_t ptext_len;
+    /* RFC 5649 section 3: Alternative Initial Value */
+    unsigned char aiv[8];
+    static unsigned char zeros[8] = { 0x0 };
+    size_t ret;
+
+    /* Section 4.2: Ciphertext length has to be (n+1) 64-bit blocks. */
+    if ((inlen & 0x7) != 0 || inlen < 16 || inlen >= CRYPTO128_WRAP_MAX)
+        return 0;
+
+    if (inlen == 16) {
+        /*
+         * Section 4.2 - special case in step 1: When n=1, the ciphertext
+         * contains exactly two 64-bit blocks and they are decrypted as a
+         * single AES block using AES in ECB mode: AIV | P[1] = DEC(K, C[0] |
+         * C[1])
+         */
+        unsigned char buff[16];
+
+        block(in, buff, key);
+        memcpy(aiv, buff, 8);
+        /* Remove AIV */
+        memcpy(out, buff + 8, 8);
+        padded_len = 8;
+        OPENSSL_cleanse(buff, inlen);
+    } else {
+        padded_len = inlen - 8;
+        ret = crypto_128_unwrap_raw(key, aiv, out, in, inlen, block);
+        if (padded_len != ret) {
+            OPENSSL_cleanse(out, inlen);
+            return 0;
+        }
+    }
+
+    /*
+     * Section 3: AIV checks: Check that MSB(32,A) = A65959A6. Optionally a
+     * user-supplied value can be used (even if standard doesn't mention
+     * this).
+     */
+    if ((!icv && CRYPTO_memcmp(aiv, default_aiv, 4))
+        || (icv && CRYPTO_memcmp(aiv, icv, 4))) {
+        OPENSSL_cleanse(out, inlen);
+        return 0;
+    }
+
+    /*
+     * Check that 8*(n-1) < LSB(32,AIV) <= 8*n. If so, let ptext_len =
+     * LSB(32,AIV).
+     */
+
+    ptext_len =   ((unsigned int)aiv[4] << 24)
+                | ((unsigned int)aiv[5] << 16)
+                | ((unsigned int)aiv[6] <<  8)
+                |  (unsigned int)aiv[7];
+    if (8 * (n - 1) >= ptext_len || ptext_len > 8 * n) {
+        OPENSSL_cleanse(out, inlen);
+        return 0;
+    }
+
+    /*
+     * Check that the rightmost padding_len octets of the output data are
+     * zero.
+     */
+    padding_len = padded_len - ptext_len;
+    if (CRYPTO_memcmp(out + ptext_len, zeros, padding_len) != 0) {
+        OPENSSL_cleanse(out, inlen);
+        return 0;
+    }
+
+    /* Section 4.2 step 3: Remove padding */
+    return ptext_len;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/modes/xts128.c b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/xts128.c
new file mode 100644
index 000000000..81b1eacd5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/modes/xts128.c
@@ -0,0 +1,157 @@
+/*
+ * Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/crypto.h>
+#include "modes_lcl.h"
+#include <string.h>
+
+int CRYPTO_xts128_encrypt(const XTS128_CONTEXT *ctx,
+                          const unsigned char iv[16],
+                          const unsigned char *inp, unsigned char *out,
+                          size_t len, int enc)
+{
+    const union {
+        long one;
+        char little;
+    } is_endian = {
+        1
+    };
+    union {
+        u64 u[2];
+        u32 d[4];
+        u8 c[16];
+    } tweak, scratch;
+    unsigned int i;
+
+    if (len < 16)
+        return -1;
+
+    memcpy(tweak.c, iv, 16);
+
+    (*ctx->block2) (tweak.c, tweak.c, ctx->key2);
+
+    if (!enc && (len % 16))
+        len -= 16;
+
+    while (len >= 16) {
+#if defined(STRICT_ALIGNMENT)
+        memcpy(scratch.c, inp, 16);
+        scratch.u[0] ^= tweak.u[0];
+        scratch.u[1] ^= tweak.u[1];
+#else
+        scratch.u[0] = ((u64 *)inp)[0] ^ tweak.u[0];
+        scratch.u[1] = ((u64 *)inp)[1] ^ tweak.u[1];
+#endif
+        (*ctx->block1) (scratch.c, scratch.c, ctx->key1);
+#if defined(STRICT_ALIGNMENT)
+        scratch.u[0] ^= tweak.u[0];
+        scratch.u[1] ^= tweak.u[1];
+        memcpy(out, scratch.c, 16);
+#else
+        ((u64 *)out)[0] = scratch.u[0] ^= tweak.u[0];
+        ((u64 *)out)[1] = scratch.u[1] ^= tweak.u[1];
+#endif
+        inp += 16;
+        out += 16;
+        len -= 16;
+
+        if (len == 0)
+            return 0;
+
+        if (is_endian.little) {
+            unsigned int carry, res;
+
+            res = 0x87 & (((int)tweak.d[3]) >> 31);
+            carry = (unsigned int)(tweak.u[0] >> 63);
+            tweak.u[0] = (tweak.u[0] << 1) ^ res;
+            tweak.u[1] = (tweak.u[1] << 1) | carry;
+        } else {
+            size_t c;
+
+            for (c = 0, i = 0; i < 16; ++i) {
+                /*
+                 * + substitutes for |, because c is 1 bit
+                 */
+                c += ((size_t)tweak.c[i]) << 1;
+                tweak.c[i] = (u8)c;
+                c = c >> 8;
+            }
+            tweak.c[0] ^= (u8)(0x87 & (0 - c));
+        }
+    }
+    if (enc) {
+        for (i = 0; i < len; ++i) {
+            u8 c = inp[i];
+            out[i] = scratch.c[i];
+            scratch.c[i] = c;
+        }
+        scratch.u[0] ^= tweak.u[0];
+        scratch.u[1] ^= tweak.u[1];
+        (*ctx->block1) (scratch.c, scratch.c, ctx->key1);
+        scratch.u[0] ^= tweak.u[0];
+        scratch.u[1] ^= tweak.u[1];
+        memcpy(out - 16, scratch.c, 16);
+    } else {
+        union {
+            u64 u[2];
+            u8 c[16];
+        } tweak1;
+
+        if (is_endian.little) {
+            unsigned int carry, res;
+
+            res = 0x87 & (((int)tweak.d[3]) >> 31);
+            carry = (unsigned int)(tweak.u[0] >> 63);
+            tweak1.u[0] = (tweak.u[0] << 1) ^ res;
+            tweak1.u[1] = (tweak.u[1] << 1) | carry;
+        } else {
+            size_t c;
+
+            for (c = 0, i = 0; i < 16; ++i) {
+                /*
+                 * + substitutes for |, because c is 1 bit
+                 */
+                c += ((size_t)tweak.c[i]) << 1;
+                tweak1.c[i] = (u8)c;
+                c = c >> 8;
+            }
+            tweak1.c[0] ^= (u8)(0x87 & (0 - c));
+        }
+#if defined(STRICT_ALIGNMENT)
+        memcpy(scratch.c, inp, 16);
+        scratch.u[0] ^= tweak1.u[0];
+        scratch.u[1] ^= tweak1.u[1];
+#else
+        scratch.u[0] = ((u64 *)inp)[0] ^ tweak1.u[0];
+        scratch.u[1] = ((u64 *)inp)[1] ^ tweak1.u[1];
+#endif
+        (*ctx->block1) (scratch.c, scratch.c, ctx->key1);
+        scratch.u[0] ^= tweak1.u[0];
+        scratch.u[1] ^= tweak1.u[1];
+
+        for (i = 0; i < len; ++i) {
+            u8 c = inp[16 + i];
+            out[16 + i] = scratch.c[i];
+            scratch.c[i] = c;
+        }
+        scratch.u[0] ^= tweak.u[0];
+        scratch.u[1] ^= tweak.u[1];
+        (*ctx->block1) (scratch.c, scratch.c, ctx->key1);
+#if defined(STRICT_ALIGNMENT)
+        scratch.u[0] ^= tweak.u[0];
+        scratch.u[1] ^= tweak.u[1];
+        memcpy(out, scratch.c, 16);
+#else
+        ((u64 *)out)[0] = scratch.u[0] ^ tweak.u[0];
+        ((u64 *)out)[1] = scratch.u[1] ^ tweak.u[1];
+#endif
+    }
+
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/o_dir.c b/trunk/3rdparty/openssl-1.1-fit/crypto/o_dir.c
new file mode 100644
index 000000000..fca9c75e0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/o_dir.c
@@ -0,0 +1,37 @@
+/*
+ * Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include <errno.h>
+
+/*
+ * The routines really come from the Levitte Programming, so to make life
+ * simple, let's just use the raw files and hack the symbols to fit our
+ * namespace.
+ */
+#define LP_DIR_CTX OPENSSL_DIR_CTX
+#define LP_dir_context_st OPENSSL_dir_context_st
+#define LP_find_file OPENSSL_DIR_read
+#define LP_find_file_end OPENSSL_DIR_end
+
+#include "internal/o_dir.h"
+
+#define LPDIR_H
+#if defined OPENSSL_SYS_UNIX || defined DJGPP \
+    || (defined __VMS_VER && __VMS_VER >= 70000000)
+# include "LPdir_unix.c"
+#elif defined OPENSSL_SYS_VMS
+# include "LPdir_vms.c"
+#elif defined OPENSSL_SYS_WIN32
+# include "LPdir_win32.c"
+#elif defined OPENSSL_SYS_WINCE
+# include "LPdir_wince.c"
+#else
+# include "LPdir_nyi.c"
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/o_fips.c b/trunk/3rdparty/openssl-1.1-fit/crypto/o_fips.c
new file mode 100644
index 000000000..050ea9c21
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/o_fips.c
@@ -0,0 +1,24 @@
+/*
+ * Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+
+int FIPS_mode(void)
+{
+    /* This version of the library does not support FIPS mode. */
+    return 0;
+}
+
+int FIPS_mode_set(int r)
+{
+    if (r == 0)
+        return 1;
+    CRYPTOerr(CRYPTO_F_FIPS_MODE_SET, CRYPTO_R_FIPS_MODE_NOT_SUPPORTED);
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/o_fopen.c b/trunk/3rdparty/openssl-1.1-fit/crypto/o_fopen.c
new file mode 100644
index 000000000..7d51ad725
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/o_fopen.c
@@ -0,0 +1,126 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+# if defined(__linux) || defined(__sun) || defined(__hpux)
+/*
+ * Following definition aliases fopen to fopen64 on above mentioned
+ * platforms. This makes it possible to open and sequentially access files
+ * larger than 2GB from 32-bit application. It does not allow to traverse
+ * them beyond 2GB with fseek/ftell, but on the other hand *no* 32-bit
+ * platform permits that, not with fseek/ftell. Not to mention that breaking
+ * 2GB limit for seeking would require surgery to *our* API. But sequential
+ * access suffices for practical cases when you can run into large files,
+ * such as fingerprinting, so we can let API alone. For reference, the list
+ * of 32-bit platforms which allow for sequential access of large files
+ * without extra "magic" comprise *BSD, Darwin, IRIX...
+ */
+#  ifndef _FILE_OFFSET_BITS
+#   define _FILE_OFFSET_BITS 64
+#  endif
+# endif
+
+#include "e_os.h"
+#include "internal/cryptlib.h"
+
+#if !defined(OPENSSL_NO_STDIO)
+
+# include <stdio.h>
+# ifdef __DJGPP__
+#  include <unistd.h>
+# endif
+
+FILE *openssl_fopen(const char *filename, const char *mode)
+{
+    FILE *file = NULL;
+# if defined(_WIN32) && defined(CP_UTF8)
+    int sz, len_0 = (int)strlen(filename) + 1;
+    DWORD flags;
+
+    /*
+     * Basically there are three cases to cover: a) filename is
+     * pure ASCII string; b) actual UTF-8 encoded string and
+     * c) locale-ized string, i.e. one containing 8-bit
+     * characters that are meaningful in current system locale.
+     * If filename is pure ASCII or real UTF-8 encoded string,
+     * MultiByteToWideChar succeeds and _wfopen works. If
+     * filename is locale-ized string, chances are that
+     * MultiByteToWideChar fails reporting
+     * ERROR_NO_UNICODE_TRANSLATION, in which case we fall
+     * back to fopen...
+     */
+    if ((sz = MultiByteToWideChar(CP_UTF8, (flags = MB_ERR_INVALID_CHARS),
+                                  filename, len_0, NULL, 0)) > 0 ||
+        (GetLastError() == ERROR_INVALID_FLAGS &&
+         (sz = MultiByteToWideChar(CP_UTF8, (flags = 0),
+                                   filename, len_0, NULL, 0)) > 0)
+        ) {
+        WCHAR wmode[8];
+        WCHAR *wfilename = _alloca(sz * sizeof(WCHAR));
+
+        if (MultiByteToWideChar(CP_UTF8, flags,
+                                filename, len_0, wfilename, sz) &&
+            MultiByteToWideChar(CP_UTF8, 0, mode, strlen(mode) + 1,
+                                wmode, OSSL_NELEM(wmode)) &&
+            (file = _wfopen(wfilename, wmode)) == NULL &&
+            (errno == ENOENT || errno == EBADF)
+            ) {
+            /*
+             * UTF-8 decode succeeded, but no file, filename
+             * could still have been locale-ized...
+             */
+            file = fopen(filename, mode);
+        }
+    } else if (GetLastError() == ERROR_NO_UNICODE_TRANSLATION) {
+        file = fopen(filename, mode);
+    }
+# elif defined(__DJGPP__)
+    {
+        char *newname = NULL;
+
+        if (pathconf(filename, _PC_NAME_MAX) <= 12) {  /* 8.3 file system? */
+            char *iterator;
+            char lastchar;
+
+            if ((newname = OPENSSL_malloc(strlen(filename) + 1)) == NULL) {
+                CRYPTOerr(CRYPTO_F_OPENSSL_FOPEN, ERR_R_MALLOC_FAILURE);
+                return NULL;
+            }
+
+            for (iterator = newname, lastchar = '\0';
+                *filename; filename++, iterator++) {
+                if (lastchar == '/' && filename[0] == '.'
+                    && filename[1] != '.' && filename[1] != '/') {
+                    /* Leading dots are not permitted in plain DOS. */
+                    *iterator = '_';
+                } else {
+                    *iterator = *filename;
+                }
+                lastchar = *filename;
+            }
+            *iterator = '\0';
+            filename = newname;
+        }
+        file = fopen(filename, mode);
+
+        OPENSSL_free(newname);
+    }
+# else
+    file = fopen(filename, mode);
+# endif
+    return file;
+}
+
+#else
+
+void *openssl_fopen(const char *filename, const char *mode)
+{
+    return NULL;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/o_init.c b/trunk/3rdparty/openssl-1.1-fit/crypto/o_init.c
new file mode 100644
index 000000000..ed6b1303d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/o_init.c
@@ -0,0 +1,21 @@
+/*
+ * Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include <openssl/err.h>
+
+/*
+ * Perform any essential OpenSSL initialization operations. Currently does
+ * nothing.
+ */
+
+void OPENSSL_init(void)
+{
+    return;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/o_str.c b/trunk/3rdparty/openssl-1.1-fit/crypto/o_str.c
new file mode 100644
index 000000000..a8357691a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/o_str.c
@@ -0,0 +1,248 @@
+/*
+ * Copyright 2003-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include <limits.h>
+#include <openssl/crypto.h>
+#include "internal/cryptlib.h"
+#include "internal/o_str.h"
+
+int OPENSSL_memcmp(const void *v1, const void *v2, size_t n)
+{
+    const unsigned char *c1 = v1, *c2 = v2;
+    int ret = 0;
+
+    while (n && (ret = *c1 - *c2) == 0)
+        n--, c1++, c2++;
+
+    return ret;
+}
+
+char *CRYPTO_strdup(const char *str, const char* file, int line)
+{
+    char *ret;
+
+    if (str == NULL)
+        return NULL;
+    ret = CRYPTO_malloc(strlen(str) + 1, file, line);
+    if (ret != NULL)
+        strcpy(ret, str);
+    return ret;
+}
+
+char *CRYPTO_strndup(const char *str, size_t s, const char* file, int line)
+{
+    size_t maxlen;
+    char *ret;
+
+    if (str == NULL)
+        return NULL;
+
+    maxlen = OPENSSL_strnlen(str, s);
+
+    ret = CRYPTO_malloc(maxlen + 1, file, line);
+    if (ret) {
+        memcpy(ret, str, maxlen);
+        ret[maxlen] = '\0';
+    }
+    return ret;
+}
+
+void *CRYPTO_memdup(const void *data, size_t siz, const char* file, int line)
+{
+    void *ret;
+
+    if (data == NULL || siz >= INT_MAX)
+        return NULL;
+
+    ret = CRYPTO_malloc(siz, file, line);
+    if (ret == NULL) {
+        CRYPTOerr(CRYPTO_F_CRYPTO_MEMDUP, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    return memcpy(ret, data, siz);
+}
+
+size_t OPENSSL_strnlen(const char *str, size_t maxlen)
+{
+    const char *p;
+
+    for (p = str; maxlen-- != 0 && *p != '\0'; ++p) ;
+
+    return p - str;
+}
+
+size_t OPENSSL_strlcpy(char *dst, const char *src, size_t size)
+{
+    size_t l = 0;
+    for (; size > 1 && *src; size--) {
+        *dst++ = *src++;
+        l++;
+    }
+    if (size)
+        *dst = '\0';
+    return l + strlen(src);
+}
+
+size_t OPENSSL_strlcat(char *dst, const char *src, size_t size)
+{
+    size_t l = 0;
+    for (; size > 0 && *dst; size--, dst++)
+        l++;
+    return l + OPENSSL_strlcpy(dst, src, size);
+}
+
+int OPENSSL_hexchar2int(unsigned char c)
+{
+#ifdef CHARSET_EBCDIC
+    c = os_toebcdic[c];
+#endif
+
+    switch (c) {
+    case '0':
+        return 0;
+    case '1':
+        return 1;
+    case '2':
+        return 2;
+    case '3':
+        return 3;
+    case '4':
+          return 4;
+    case '5':
+          return 5;
+    case '6':
+          return 6;
+    case '7':
+          return 7;
+    case '8':
+          return 8;
+    case '9':
+          return 9;
+    case 'a': case 'A':
+          return 0x0A;
+    case 'b': case 'B':
+          return 0x0B;
+    case 'c': case 'C':
+          return 0x0C;
+    case 'd': case 'D':
+          return 0x0D;
+    case 'e': case 'E':
+          return 0x0E;
+    case 'f': case 'F':
+          return 0x0F;
+    }
+    return -1;
+}
+
+/*
+ * Give a string of hex digits convert to a buffer
+ */
+unsigned char *OPENSSL_hexstr2buf(const char *str, long *len)
+{
+    unsigned char *hexbuf, *q;
+    unsigned char ch, cl;
+    int chi, cli;
+    const unsigned char *p;
+    size_t s;
+
+    s = strlen(str);
+    if ((hexbuf = OPENSSL_malloc(s >> 1)) == NULL) {
+        CRYPTOerr(CRYPTO_F_OPENSSL_HEXSTR2BUF, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    for (p = (const unsigned char *)str, q = hexbuf; *p; ) {
+        ch = *p++;
+        if (ch == ':')
+            continue;
+        cl = *p++;
+        if (!cl) {
+            CRYPTOerr(CRYPTO_F_OPENSSL_HEXSTR2BUF,
+                      CRYPTO_R_ODD_NUMBER_OF_DIGITS);
+            OPENSSL_free(hexbuf);
+            return NULL;
+        }
+        cli = OPENSSL_hexchar2int(cl);
+        chi = OPENSSL_hexchar2int(ch);
+        if (cli < 0 || chi < 0) {
+            OPENSSL_free(hexbuf);
+            CRYPTOerr(CRYPTO_F_OPENSSL_HEXSTR2BUF, CRYPTO_R_ILLEGAL_HEX_DIGIT);
+            return NULL;
+        }
+        *q++ = (unsigned char)((chi << 4) | cli);
+    }
+
+    if (len)
+        *len = q - hexbuf;
+    return hexbuf;
+}
+
+/*
+ * Given a buffer of length 'len' return a OPENSSL_malloc'ed string with its
+ * hex representation @@@ (Contents of buffer are always kept in ASCII, also
+ * on EBCDIC machines)
+ */
+char *OPENSSL_buf2hexstr(const unsigned char *buffer, long len)
+{
+    static const char hexdig[] = "0123456789ABCDEF";
+    char *tmp, *q;
+    const unsigned char *p;
+    int i;
+
+    if (len == 0)
+    {
+        return OPENSSL_zalloc(1);
+    }
+
+    if ((tmp = OPENSSL_malloc(len * 3)) == NULL) {
+        CRYPTOerr(CRYPTO_F_OPENSSL_BUF2HEXSTR, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    q = tmp;
+    for (i = 0, p = buffer; i < len; i++, p++) {
+        *q++ = hexdig[(*p >> 4) & 0xf];
+        *q++ = hexdig[*p & 0xf];
+        *q++ = ':';
+    }
+    q[-1] = 0;
+#ifdef CHARSET_EBCDIC
+    ebcdic2ascii(tmp, tmp, q - tmp - 1);
+#endif
+
+    return tmp;
+}
+
+int openssl_strerror_r(int errnum, char *buf, size_t buflen)
+{
+#if defined(_MSC_VER) && _MSC_VER>=1400
+    return !strerror_s(buf, buflen, errnum);
+#elif defined(_GNU_SOURCE)
+    return strerror_r(errnum, buf, buflen) != NULL;
+#elif (defined(_POSIX_C_SOURCE) && _POSIX_C_SOURCE >= 200112L) || \
+      (defined(_XOPEN_SOURCE) && _XOPEN_SOURCE >= 600)
+    /*
+     * We can use "real" strerror_r. The OpenSSL version differs in that it
+     * gives 1 on success and 0 on failure for consistency with other OpenSSL
+     * functions. Real strerror_r does it the other way around
+     */
+    return !strerror_r(errnum, buf, buflen);
+#else
+    char *err;
+    /* Fall back to non-thread safe strerror()...its all we can do */
+    if (buflen < 2)
+        return 0;
+    err = strerror(errnum);
+    /* Can this ever happen? */
+    if (err == NULL)
+        return 0;
+    strncpy(buf, err, buflen - 1);
+    buf[buflen - 1] = '\0';
+    return 1;
+#endif
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/o_time.c b/trunk/3rdparty/openssl-1.1-fit/crypto/o_time.c
new file mode 100644
index 000000000..6d764f55e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/o_time.c
@@ -0,0 +1,200 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/e_os2.h>
+#include <string.h>
+#include <openssl/crypto.h>
+
+struct tm *OPENSSL_gmtime(const time_t *timer, struct tm *result)
+{
+    struct tm *ts = NULL;
+
+#if defined(OPENSSL_THREADS) && defined(OPENSSL_SYS_VMS)
+    {
+        /*
+         * On VMS, gmtime_r() takes a 32-bit pointer as second argument.
+         * Since we can't know that |result| is in a space that can easily
+         * translate to a 32-bit pointer, we must store temporarily on stack
+         * and copy the result.  The stack is always reachable with 32-bit
+         * pointers.
+         */
+#if defined(OPENSSL_SYS_VMS) && __INITIAL_POINTER_SIZE
+# pragma pointer_size save
+# pragma pointer_size 32
+#endif
+        struct tm data, *ts2 = &data;
+#if defined OPENSSL_SYS_VMS && __INITIAL_POINTER_SIZE
+# pragma pointer_size restore
+#endif
+        if (gmtime_r(timer, ts2) == NULL)
+            return NULL;
+        memcpy(result, ts2, sizeof(struct tm));
+        ts = result;
+    }
+#elif defined(OPENSSL_THREADS) && !defined(OPENSSL_SYS_WIN32) && !defined(OPENSSL_SYS_MACOSX)
+    if (gmtime_r(timer, result) == NULL)
+        return NULL;
+    ts = result;
+#elif defined (OPENSSL_SYS_WINDOWS) && defined(_MSC_VER) && _MSC_VER >= 1400
+    if (gmtime_s(result, timer))
+        return NULL;
+    ts = result;
+#else
+    ts = gmtime(timer);
+    if (ts == NULL)
+        return NULL;
+
+    memcpy(result, ts, sizeof(struct tm));
+    ts = result;
+#endif
+    return ts;
+}
+
+/*
+ * Take a tm structure and add an offset to it. This avoids any OS issues
+ * with restricted date types and overflows which cause the year 2038
+ * problem.
+ */
+
+#define SECS_PER_DAY (24 * 60 * 60)
+
+static long date_to_julian(int y, int m, int d);
+static void julian_to_date(long jd, int *y, int *m, int *d);
+static int julian_adj(const struct tm *tm, int off_day, long offset_sec,
+                      long *pday, int *psec);
+
+int OPENSSL_gmtime_adj(struct tm *tm, int off_day, long offset_sec)
+{
+    int time_sec, time_year, time_month, time_day;
+    long time_jd;
+
+    /* Convert time and offset into Julian day and seconds */
+    if (!julian_adj(tm, off_day, offset_sec, &time_jd, &time_sec))
+        return 0;
+
+    /* Convert Julian day back to date */
+
+    julian_to_date(time_jd, &time_year, &time_month, &time_day);
+
+    if (time_year < 1900 || time_year > 9999)
+        return 0;
+
+    /* Update tm structure */
+
+    tm->tm_year = time_year - 1900;
+    tm->tm_mon = time_month - 1;
+    tm->tm_mday = time_day;
+
+    tm->tm_hour = time_sec / 3600;
+    tm->tm_min = (time_sec / 60) % 60;
+    tm->tm_sec = time_sec % 60;
+
+    return 1;
+
+}
+
+int OPENSSL_gmtime_diff(int *pday, int *psec,
+                        const struct tm *from, const struct tm *to)
+{
+    int from_sec, to_sec, diff_sec;
+    long from_jd, to_jd, diff_day;
+    if (!julian_adj(from, 0, 0, &from_jd, &from_sec))
+        return 0;
+    if (!julian_adj(to, 0, 0, &to_jd, &to_sec))
+        return 0;
+    diff_day = to_jd - from_jd;
+    diff_sec = to_sec - from_sec;
+    /* Adjust differences so both positive or both negative */
+    if (diff_day > 0 && diff_sec < 0) {
+        diff_day--;
+        diff_sec += SECS_PER_DAY;
+    }
+    if (diff_day < 0 && diff_sec > 0) {
+        diff_day++;
+        diff_sec -= SECS_PER_DAY;
+    }
+
+    if (pday)
+        *pday = (int)diff_day;
+    if (psec)
+        *psec = diff_sec;
+
+    return 1;
+
+}
+
+/* Convert tm structure and offset into julian day and seconds */
+static int julian_adj(const struct tm *tm, int off_day, long offset_sec,
+                      long *pday, int *psec)
+{
+    int offset_hms, offset_day;
+    long time_jd;
+    int time_year, time_month, time_day;
+    /* split offset into days and day seconds */
+    offset_day = offset_sec / SECS_PER_DAY;
+    /* Avoid sign issues with % operator */
+    offset_hms = offset_sec - (offset_day * SECS_PER_DAY);
+    offset_day += off_day;
+    /* Add current time seconds to offset */
+    offset_hms += tm->tm_hour * 3600 + tm->tm_min * 60 + tm->tm_sec;
+    /* Adjust day seconds if overflow */
+    if (offset_hms >= SECS_PER_DAY) {
+        offset_day++;
+        offset_hms -= SECS_PER_DAY;
+    } else if (offset_hms < 0) {
+        offset_day--;
+        offset_hms += SECS_PER_DAY;
+    }
+
+    /*
+     * Convert date of time structure into a Julian day number.
+     */
+
+    time_year = tm->tm_year + 1900;
+    time_month = tm->tm_mon + 1;
+    time_day = tm->tm_mday;
+
+    time_jd = date_to_julian(time_year, time_month, time_day);
+
+    /* Work out Julian day of new date */
+    time_jd += offset_day;
+
+    if (time_jd < 0)
+        return 0;
+
+    *pday = time_jd;
+    *psec = offset_hms;
+    return 1;
+}
+
+/*
+ * Convert date to and from julian day Uses Fliegel & Van Flandern algorithm
+ */
+static long date_to_julian(int y, int m, int d)
+{
+    return (1461 * (y + 4800 + (m - 14) / 12)) / 4 +
+        (367 * (m - 2 - 12 * ((m - 14) / 12))) / 12 -
+        (3 * ((y + 4900 + (m - 14) / 12) / 100)) / 4 + d - 32075;
+}
+
+static void julian_to_date(long jd, int *y, int *m, int *d)
+{
+    long L = jd + 68569;
+    long n = (4 * L) / 146097;
+    long i, j;
+
+    L = L - (146097 * n + 3) / 4;
+    i = (4000 * (L + 1)) / 1461001;
+    L = L - (1461 * i) / 4 + 31;
+    j = (80 * L) / 2447;
+    *d = L - (2447 * j) / 80;
+    L = j / 11;
+    *m = j + 2 - (12 * L);
+    *y = 100 * (n - 49) + i + L;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/objects/README b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/README
new file mode 100644
index 000000000..700f9c5e5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/README
@@ -0,0 +1,44 @@
+objects.txt syntax
+------------------
+
+To cover all the naming hacks that were previously in objects.h needed some
+kind of hacks in objects.txt.
+
+The basic syntax for adding an object is as follows:
+
+	1 2 3 4		: shortName	: Long Name
+
+		If Long Name contains only word characters and hyphen-minus
+		(0x2D) or full stop (0x2E) then Long Name is used as basis
+		for the base name in C. Otherwise, the shortName is used.
+
+		The base name (let's call it 'base') will then be used to
+		create the C macros SN_base, LN_base, NID_base and OBJ_base.
+
+		Note that if the base name contains spaces, dashes or periods,
+		those will be converted to underscore.
+
+Then there are some extra commands:
+
+	!Alias foo 1 2 3 4
+
+		This just makes a name foo for an OID.  The C macro
+		OBJ_foo will be created as a result.
+
+	!Cname foo
+
+		This makes sure that the name foo will be used as base name
+		in C.
+
+	!module foo
+	1 2 3 4		: shortName	: Long Name
+	!global
+
+		The !module command was meant to define a kind of modularity.
+		What it does is to make sure the module name is prepended
+		to the base name.  !global turns this off.  This construction
+		is not recursive.
+
+Lines starting with # are treated as comments, as well as any line starting
+with ! and not matching the commands above.
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/objects/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/build.info
new file mode 100644
index 000000000..38e290756
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/build.info
@@ -0,0 +1,3 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        o_names.c obj_dat.c obj_lib.c obj_err.c obj_xref.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/objects/o_names.c b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/o_names.c
new file mode 100644
index 000000000..c4355370c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/o_names.c
@@ -0,0 +1,406 @@
+/*
+ * Copyright 1998-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include <openssl/err.h>
+#include <openssl/lhash.h>
+#include <openssl/objects.h>
+#include <openssl/safestack.h>
+#include <openssl/e_os2.h>
+#include "internal/thread_once.h"
+#include "internal/lhash.h"
+#include "obj_lcl.h"
+#include "e_os.h"
+
+/*
+ * We define this wrapper for two reasons. Firstly, later versions of
+ * DEC C add linkage information to certain functions, which makes it
+ * tricky to use them as values to regular function pointers.
+ * Secondly, in the EDK2 build environment, the strcasecmp function is
+ * actually an external function with the Microsoft ABI, so we can't
+ * transparently assign function pointers to it.
+ */
+#if defined(OPENSSL_SYS_VMS_DECC) || defined(OPENSSL_SYS_UEFI)
+static int obj_strcasecmp(const char *a, const char *b)
+{
+    return strcasecmp(a, b);
+}
+#else
+#define obj_strcasecmp strcasecmp
+#endif
+
+/*
+ * I use the ex_data stuff to manage the identifiers for the obj_name_types
+ * that applications may define.  I only really use the free function field.
+ */
+static LHASH_OF(OBJ_NAME) *names_lh = NULL;
+static int names_type_num = OBJ_NAME_TYPE_NUM;
+static CRYPTO_RWLOCK *obj_lock = NULL;
+
+struct name_funcs_st {
+    unsigned long (*hash_func) (const char *name);
+    int (*cmp_func) (const char *a, const char *b);
+    void (*free_func) (const char *, int, const char *);
+};
+
+static STACK_OF(NAME_FUNCS) *name_funcs_stack;
+
+/*
+ * The LHASH callbacks now use the raw "void *" prototypes and do
+ * per-variable casting in the functions. This prevents function pointer
+ * casting without the need for macro-generated wrapper functions.
+ */
+
+static unsigned long obj_name_hash(const OBJ_NAME *a);
+static int obj_name_cmp(const OBJ_NAME *a, const OBJ_NAME *b);
+
+static CRYPTO_ONCE init = CRYPTO_ONCE_STATIC_INIT;
+DEFINE_RUN_ONCE_STATIC(o_names_init)
+{
+    CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_DISABLE);
+    names_lh = lh_OBJ_NAME_new(obj_name_hash, obj_name_cmp);
+    obj_lock = CRYPTO_THREAD_lock_new();
+    CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ENABLE);
+    return names_lh != NULL && obj_lock != NULL;
+}
+
+int OBJ_NAME_init(void)
+{
+    return RUN_ONCE(&init, o_names_init);
+}
+
+int OBJ_NAME_new_index(unsigned long (*hash_func) (const char *),
+                       int (*cmp_func) (const char *, const char *),
+                       void (*free_func) (const char *, int, const char *))
+{
+    int ret = 0, i, push;
+    NAME_FUNCS *name_funcs;
+
+    if (!OBJ_NAME_init())
+        return 0;
+
+    CRYPTO_THREAD_write_lock(obj_lock);
+
+    if (name_funcs_stack == NULL) {
+        CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_DISABLE);
+        name_funcs_stack = sk_NAME_FUNCS_new_null();
+        CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ENABLE);
+    }
+    if (name_funcs_stack == NULL) {
+        /* ERROR */
+        goto out;
+    }
+    ret = names_type_num;
+    names_type_num++;
+    for (i = sk_NAME_FUNCS_num(name_funcs_stack); i < names_type_num; i++) {
+        CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_DISABLE);
+        name_funcs = OPENSSL_zalloc(sizeof(*name_funcs));
+        CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ENABLE);
+        if (name_funcs == NULL) {
+            OBJerr(OBJ_F_OBJ_NAME_NEW_INDEX, ERR_R_MALLOC_FAILURE);
+            ret = 0;
+            goto out;
+        }
+        name_funcs->hash_func = openssl_lh_strcasehash;
+        name_funcs->cmp_func = obj_strcasecmp;
+        CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_DISABLE);
+
+        push = sk_NAME_FUNCS_push(name_funcs_stack, name_funcs);
+        CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ENABLE);
+
+        if (!push) {
+            OBJerr(OBJ_F_OBJ_NAME_NEW_INDEX, ERR_R_MALLOC_FAILURE);
+            OPENSSL_free(name_funcs);
+            ret = 0;
+            goto out;
+        }
+    }
+    name_funcs = sk_NAME_FUNCS_value(name_funcs_stack, ret);
+    if (hash_func != NULL)
+        name_funcs->hash_func = hash_func;
+    if (cmp_func != NULL)
+        name_funcs->cmp_func = cmp_func;
+    if (free_func != NULL)
+        name_funcs->free_func = free_func;
+
+out:
+    CRYPTO_THREAD_unlock(obj_lock);
+    return ret;
+}
+
+static int obj_name_cmp(const OBJ_NAME *a, const OBJ_NAME *b)
+{
+    int ret;
+
+    ret = a->type - b->type;
+    if (ret == 0) {
+        if ((name_funcs_stack != NULL)
+            && (sk_NAME_FUNCS_num(name_funcs_stack) > a->type)) {
+            ret = sk_NAME_FUNCS_value(name_funcs_stack,
+                                      a->type)->cmp_func(a->name, b->name);
+        } else
+            ret = strcasecmp(a->name, b->name);
+    }
+    return ret;
+}
+
+static unsigned long obj_name_hash(const OBJ_NAME *a)
+{
+    unsigned long ret;
+
+    if ((name_funcs_stack != NULL)
+        && (sk_NAME_FUNCS_num(name_funcs_stack) > a->type)) {
+        ret =
+            sk_NAME_FUNCS_value(name_funcs_stack,
+                                a->type)->hash_func(a->name);
+    } else {
+        ret = openssl_lh_strcasehash(a->name);
+    }
+    ret ^= a->type;
+    return ret;
+}
+
+const char *OBJ_NAME_get(const char *name, int type)
+{
+    OBJ_NAME on, *ret;
+    int num = 0, alias;
+    const char *value = NULL;
+
+    if (name == NULL)
+        return NULL;
+    if (!OBJ_NAME_init())
+        return NULL;
+    CRYPTO_THREAD_read_lock(obj_lock);
+
+    alias = type & OBJ_NAME_ALIAS;
+    type &= ~OBJ_NAME_ALIAS;
+
+    on.name = name;
+    on.type = type;
+
+    for (;;) {
+        ret = lh_OBJ_NAME_retrieve(names_lh, &on);
+        if (ret == NULL)
+            break;
+        if ((ret->alias) && !alias) {
+            if (++num > 10)
+                break;
+            on.name = ret->data;
+        } else {
+            value = ret->data;
+            break;
+        }
+    }
+
+    CRYPTO_THREAD_unlock(obj_lock);
+    return value;
+}
+
+int OBJ_NAME_add(const char *name, int type, const char *data)
+{
+    OBJ_NAME *onp, *ret;
+    int alias, ok = 0;
+
+    if (!OBJ_NAME_init())
+        return 0;
+
+    alias = type & OBJ_NAME_ALIAS;
+    type &= ~OBJ_NAME_ALIAS;
+
+    onp = OPENSSL_malloc(sizeof(*onp));
+    if (onp == NULL) {
+        /* ERROR */
+        goto unlock;
+    }
+
+    onp->name = name;
+    onp->alias = alias;
+    onp->type = type;
+    onp->data = data;
+
+    CRYPTO_THREAD_write_lock(obj_lock);
+
+    ret = lh_OBJ_NAME_insert(names_lh, onp);
+    if (ret != NULL) {
+        /* free things */
+        if ((name_funcs_stack != NULL)
+            && (sk_NAME_FUNCS_num(name_funcs_stack) > ret->type)) {
+            /*
+             * XXX: I'm not sure I understand why the free function should
+             * get three arguments... -- Richard Levitte
+             */
+            sk_NAME_FUNCS_value(name_funcs_stack,
+                                ret->type)->free_func(ret->name, ret->type,
+                                                      ret->data);
+        }
+        OPENSSL_free(ret);
+    } else {
+        if (lh_OBJ_NAME_error(names_lh)) {
+            /* ERROR */
+            OPENSSL_free(onp);
+            goto unlock;
+        }
+    }
+
+    ok = 1;
+
+unlock:
+    CRYPTO_THREAD_unlock(obj_lock);
+    return ok;
+}
+
+int OBJ_NAME_remove(const char *name, int type)
+{
+    OBJ_NAME on, *ret;
+    int ok = 0;
+
+    if (!OBJ_NAME_init())
+        return 0;
+
+    CRYPTO_THREAD_write_lock(obj_lock);
+
+    type &= ~OBJ_NAME_ALIAS;
+    on.name = name;
+    on.type = type;
+    ret = lh_OBJ_NAME_delete(names_lh, &on);
+    if (ret != NULL) {
+        /* free things */
+        if ((name_funcs_stack != NULL)
+            && (sk_NAME_FUNCS_num(name_funcs_stack) > ret->type)) {
+            /*
+             * XXX: I'm not sure I understand why the free function should
+             * get three arguments... -- Richard Levitte
+             */
+            sk_NAME_FUNCS_value(name_funcs_stack,
+                                ret->type)->free_func(ret->name, ret->type,
+                                                      ret->data);
+        }
+        OPENSSL_free(ret);
+        ok = 1;
+    }
+
+    CRYPTO_THREAD_unlock(obj_lock);
+    return ok;
+}
+
+typedef struct {
+    int type;
+    void (*fn) (const OBJ_NAME *, void *arg);
+    void *arg;
+} OBJ_DOALL;
+
+static void do_all_fn(const OBJ_NAME *name, OBJ_DOALL *d)
+{
+    if (name->type == d->type)
+        d->fn(name, d->arg);
+}
+
+IMPLEMENT_LHASH_DOALL_ARG_CONST(OBJ_NAME, OBJ_DOALL);
+
+void OBJ_NAME_do_all(int type, void (*fn) (const OBJ_NAME *, void *arg),
+                     void *arg)
+{
+    OBJ_DOALL d;
+
+    d.type = type;
+    d.fn = fn;
+    d.arg = arg;
+
+    lh_OBJ_NAME_doall_OBJ_DOALL(names_lh, do_all_fn, &d);
+}
+
+struct doall_sorted {
+    int type;
+    int n;
+    const OBJ_NAME **names;
+};
+
+static void do_all_sorted_fn(const OBJ_NAME *name, void *d_)
+{
+    struct doall_sorted *d = d_;
+
+    if (name->type != d->type)
+        return;
+
+    d->names[d->n++] = name;
+}
+
+static int do_all_sorted_cmp(const void *n1_, const void *n2_)
+{
+    const OBJ_NAME *const *n1 = n1_;
+    const OBJ_NAME *const *n2 = n2_;
+
+    return strcmp((*n1)->name, (*n2)->name);
+}
+
+void OBJ_NAME_do_all_sorted(int type,
+                            void (*fn) (const OBJ_NAME *, void *arg),
+                            void *arg)
+{
+    struct doall_sorted d;
+    int n;
+
+    d.type = type;
+    d.names =
+        OPENSSL_malloc(sizeof(*d.names) * lh_OBJ_NAME_num_items(names_lh));
+    /* Really should return an error if !d.names...but its a void function! */
+    if (d.names != NULL) {
+        d.n = 0;
+        OBJ_NAME_do_all(type, do_all_sorted_fn, &d);
+
+        qsort((void *)d.names, d.n, sizeof(*d.names), do_all_sorted_cmp);
+
+        for (n = 0; n < d.n; ++n)
+            fn(d.names[n], arg);
+
+        OPENSSL_free((void *)d.names);
+    }
+}
+
+static int free_type;
+
+static void names_lh_free_doall(OBJ_NAME *onp)
+{
+    if (onp == NULL)
+        return;
+
+    if (free_type < 0 || free_type == onp->type)
+        OBJ_NAME_remove(onp->name, onp->type);
+}
+
+static void name_funcs_free(NAME_FUNCS *ptr)
+{
+    OPENSSL_free(ptr);
+}
+
+void OBJ_NAME_cleanup(int type)
+{
+    unsigned long down_load;
+
+    if (names_lh == NULL)
+        return;
+
+    free_type = type;
+    down_load = lh_OBJ_NAME_get_down_load(names_lh);
+    lh_OBJ_NAME_set_down_load(names_lh, 0);
+
+    lh_OBJ_NAME_doall(names_lh, names_lh_free_doall);
+    if (type < 0) {
+        lh_OBJ_NAME_free(names_lh);
+        sk_NAME_FUNCS_pop_free(name_funcs_stack, name_funcs_free);
+        CRYPTO_THREAD_lock_free(obj_lock);
+        names_lh = NULL;
+        name_funcs_stack = NULL;
+        obj_lock = NULL;
+    } else
+        lh_OBJ_NAME_set_down_load(names_lh, down_load);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_dat.c b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_dat.c
new file mode 100644
index 000000000..ef2d1e0dd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_dat.c
@@ -0,0 +1,739 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/ctype.h"
+#include <limits.h>
+#include "internal/cryptlib.h"
+#include <openssl/lhash.h>
+#include <openssl/asn1.h>
+#include "internal/objects.h"
+#include <openssl/bn.h>
+#include "internal/asn1_int.h"
+#include "obj_lcl.h"
+
+/* obj_dat.h is generated from objects.h by obj_dat.pl */
+#include "obj_dat.h"
+
+DECLARE_OBJ_BSEARCH_CMP_FN(const ASN1_OBJECT *, unsigned int, sn);
+DECLARE_OBJ_BSEARCH_CMP_FN(const ASN1_OBJECT *, unsigned int, ln);
+DECLARE_OBJ_BSEARCH_CMP_FN(const ASN1_OBJECT *, unsigned int, obj);
+
+#define ADDED_DATA      0
+#define ADDED_SNAME     1
+#define ADDED_LNAME     2
+#define ADDED_NID       3
+
+struct added_obj_st {
+    int type;
+    ASN1_OBJECT *obj;
+};
+
+static int new_nid = NUM_NID;
+static LHASH_OF(ADDED_OBJ) *added = NULL;
+
+static int sn_cmp(const ASN1_OBJECT *const *a, const unsigned int *b)
+{
+    return strcmp((*a)->sn, nid_objs[*b].sn);
+}
+
+IMPLEMENT_OBJ_BSEARCH_CMP_FN(const ASN1_OBJECT *, unsigned int, sn);
+
+static int ln_cmp(const ASN1_OBJECT *const *a, const unsigned int *b)
+{
+    return strcmp((*a)->ln, nid_objs[*b].ln);
+}
+
+IMPLEMENT_OBJ_BSEARCH_CMP_FN(const ASN1_OBJECT *, unsigned int, ln);
+
+static unsigned long added_obj_hash(const ADDED_OBJ *ca)
+{
+    const ASN1_OBJECT *a;
+    int i;
+    unsigned long ret = 0;
+    unsigned char *p;
+
+    a = ca->obj;
+    switch (ca->type) {
+    case ADDED_DATA:
+        ret = a->length << 20L;
+        p = (unsigned char *)a->data;
+        for (i = 0; i < a->length; i++)
+            ret ^= p[i] << ((i * 3) % 24);
+        break;
+    case ADDED_SNAME:
+        ret = OPENSSL_LH_strhash(a->sn);
+        break;
+    case ADDED_LNAME:
+        ret = OPENSSL_LH_strhash(a->ln);
+        break;
+    case ADDED_NID:
+        ret = a->nid;
+        break;
+    default:
+        /* abort(); */
+        return 0;
+    }
+    ret &= 0x3fffffffL;
+    ret |= ((unsigned long)ca->type) << 30L;
+    return ret;
+}
+
+static int added_obj_cmp(const ADDED_OBJ *ca, const ADDED_OBJ *cb)
+{
+    ASN1_OBJECT *a, *b;
+    int i;
+
+    i = ca->type - cb->type;
+    if (i)
+        return i;
+    a = ca->obj;
+    b = cb->obj;
+    switch (ca->type) {
+    case ADDED_DATA:
+        i = (a->length - b->length);
+        if (i)
+            return i;
+        return memcmp(a->data, b->data, (size_t)a->length);
+    case ADDED_SNAME:
+        if (a->sn == NULL)
+            return -1;
+        else if (b->sn == NULL)
+            return 1;
+        else
+            return strcmp(a->sn, b->sn);
+    case ADDED_LNAME:
+        if (a->ln == NULL)
+            return -1;
+        else if (b->ln == NULL)
+            return 1;
+        else
+            return strcmp(a->ln, b->ln);
+    case ADDED_NID:
+        return a->nid - b->nid;
+    default:
+        /* abort(); */
+        return 0;
+    }
+}
+
+static int init_added(void)
+{
+    if (added != NULL)
+        return 1;
+    added = lh_ADDED_OBJ_new(added_obj_hash, added_obj_cmp);
+    return added != NULL;
+}
+
+static void cleanup1_doall(ADDED_OBJ *a)
+{
+    a->obj->nid = 0;
+    a->obj->flags |= ASN1_OBJECT_FLAG_DYNAMIC |
+        ASN1_OBJECT_FLAG_DYNAMIC_STRINGS | ASN1_OBJECT_FLAG_DYNAMIC_DATA;
+}
+
+static void cleanup2_doall(ADDED_OBJ *a)
+{
+    a->obj->nid++;
+}
+
+static void cleanup3_doall(ADDED_OBJ *a)
+{
+    if (--a->obj->nid == 0)
+        ASN1_OBJECT_free(a->obj);
+    OPENSSL_free(a);
+}
+
+void obj_cleanup_int(void)
+{
+    if (added == NULL)
+        return;
+    lh_ADDED_OBJ_set_down_load(added, 0);
+    lh_ADDED_OBJ_doall(added, cleanup1_doall); /* zero counters */
+    lh_ADDED_OBJ_doall(added, cleanup2_doall); /* set counters */
+    lh_ADDED_OBJ_doall(added, cleanup3_doall); /* free objects */
+    lh_ADDED_OBJ_free(added);
+    added = NULL;
+}
+
+int OBJ_new_nid(int num)
+{
+    int i;
+
+    i = new_nid;
+    new_nid += num;
+    return i;
+}
+
+int OBJ_add_object(const ASN1_OBJECT *obj)
+{
+    ASN1_OBJECT *o;
+    ADDED_OBJ *ao[4] = { NULL, NULL, NULL, NULL }, *aop;
+    int i;
+
+    if (added == NULL)
+        if (!init_added())
+            return 0;
+    if ((o = OBJ_dup(obj)) == NULL)
+        goto err;
+    if ((ao[ADDED_NID] = OPENSSL_malloc(sizeof(*ao[0]))) == NULL)
+        goto err2;
+    if ((o->length != 0) && (obj->data != NULL))
+        if ((ao[ADDED_DATA] = OPENSSL_malloc(sizeof(*ao[0]))) == NULL)
+            goto err2;
+    if (o->sn != NULL)
+        if ((ao[ADDED_SNAME] = OPENSSL_malloc(sizeof(*ao[0]))) == NULL)
+            goto err2;
+    if (o->ln != NULL)
+        if ((ao[ADDED_LNAME] = OPENSSL_malloc(sizeof(*ao[0]))) == NULL)
+            goto err2;
+
+    for (i = ADDED_DATA; i <= ADDED_NID; i++) {
+        if (ao[i] != NULL) {
+            ao[i]->type = i;
+            ao[i]->obj = o;
+            aop = lh_ADDED_OBJ_insert(added, ao[i]);
+            /* memory leak, but should not normally matter */
+            OPENSSL_free(aop);
+        }
+    }
+    o->flags &=
+        ~(ASN1_OBJECT_FLAG_DYNAMIC | ASN1_OBJECT_FLAG_DYNAMIC_STRINGS |
+          ASN1_OBJECT_FLAG_DYNAMIC_DATA);
+
+    return o->nid;
+ err2:
+    OBJerr(OBJ_F_OBJ_ADD_OBJECT, ERR_R_MALLOC_FAILURE);
+ err:
+    for (i = ADDED_DATA; i <= ADDED_NID; i++)
+        OPENSSL_free(ao[i]);
+    ASN1_OBJECT_free(o);
+    return NID_undef;
+}
+
+ASN1_OBJECT *OBJ_nid2obj(int n)
+{
+    ADDED_OBJ ad, *adp;
+    ASN1_OBJECT ob;
+
+    if ((n >= 0) && (n < NUM_NID)) {
+        if ((n != NID_undef) && (nid_objs[n].nid == NID_undef)) {
+            OBJerr(OBJ_F_OBJ_NID2OBJ, OBJ_R_UNKNOWN_NID);
+            return NULL;
+        }
+        return (ASN1_OBJECT *)&(nid_objs[n]);
+    } else if (added == NULL)
+        return NULL;
+    else {
+        ad.type = ADDED_NID;
+        ad.obj = &ob;
+        ob.nid = n;
+        adp = lh_ADDED_OBJ_retrieve(added, &ad);
+        if (adp != NULL)
+            return adp->obj;
+        else {
+            OBJerr(OBJ_F_OBJ_NID2OBJ, OBJ_R_UNKNOWN_NID);
+            return NULL;
+        }
+    }
+}
+
+const char *OBJ_nid2sn(int n)
+{
+    ADDED_OBJ ad, *adp;
+    ASN1_OBJECT ob;
+
+    if ((n >= 0) && (n < NUM_NID)) {
+        if ((n != NID_undef) && (nid_objs[n].nid == NID_undef)) {
+            OBJerr(OBJ_F_OBJ_NID2SN, OBJ_R_UNKNOWN_NID);
+            return NULL;
+        }
+        return nid_objs[n].sn;
+    } else if (added == NULL)
+        return NULL;
+    else {
+        ad.type = ADDED_NID;
+        ad.obj = &ob;
+        ob.nid = n;
+        adp = lh_ADDED_OBJ_retrieve(added, &ad);
+        if (adp != NULL)
+            return adp->obj->sn;
+        else {
+            OBJerr(OBJ_F_OBJ_NID2SN, OBJ_R_UNKNOWN_NID);
+            return NULL;
+        }
+    }
+}
+
+const char *OBJ_nid2ln(int n)
+{
+    ADDED_OBJ ad, *adp;
+    ASN1_OBJECT ob;
+
+    if ((n >= 0) && (n < NUM_NID)) {
+        if ((n != NID_undef) && (nid_objs[n].nid == NID_undef)) {
+            OBJerr(OBJ_F_OBJ_NID2LN, OBJ_R_UNKNOWN_NID);
+            return NULL;
+        }
+        return nid_objs[n].ln;
+    } else if (added == NULL)
+        return NULL;
+    else {
+        ad.type = ADDED_NID;
+        ad.obj = &ob;
+        ob.nid = n;
+        adp = lh_ADDED_OBJ_retrieve(added, &ad);
+        if (adp != NULL)
+            return adp->obj->ln;
+        else {
+            OBJerr(OBJ_F_OBJ_NID2LN, OBJ_R_UNKNOWN_NID);
+            return NULL;
+        }
+    }
+}
+
+static int obj_cmp(const ASN1_OBJECT *const *ap, const unsigned int *bp)
+{
+    int j;
+    const ASN1_OBJECT *a = *ap;
+    const ASN1_OBJECT *b = &nid_objs[*bp];
+
+    j = (a->length - b->length);
+    if (j)
+        return j;
+    if (a->length == 0)
+        return 0;
+    return memcmp(a->data, b->data, a->length);
+}
+
+IMPLEMENT_OBJ_BSEARCH_CMP_FN(const ASN1_OBJECT *, unsigned int, obj);
+
+int OBJ_obj2nid(const ASN1_OBJECT *a)
+{
+    const unsigned int *op;
+    ADDED_OBJ ad, *adp;
+
+    if (a == NULL)
+        return NID_undef;
+    if (a->nid != 0)
+        return a->nid;
+
+    if (a->length == 0)
+        return NID_undef;
+
+    if (added != NULL) {
+        ad.type = ADDED_DATA;
+        ad.obj = (ASN1_OBJECT *)a; /* XXX: ugly but harmless */
+        adp = lh_ADDED_OBJ_retrieve(added, &ad);
+        if (adp != NULL)
+            return adp->obj->nid;
+    }
+    op = OBJ_bsearch_obj(&a, obj_objs, NUM_OBJ);
+    if (op == NULL)
+        return NID_undef;
+    return nid_objs[*op].nid;
+}
+
+/*
+ * Convert an object name into an ASN1_OBJECT if "noname" is not set then
+ * search for short and long names first. This will convert the "dotted" form
+ * into an object: unlike OBJ_txt2nid it can be used with any objects, not
+ * just registered ones.
+ */
+
+ASN1_OBJECT *OBJ_txt2obj(const char *s, int no_name)
+{
+    int nid = NID_undef;
+    ASN1_OBJECT *op;
+    unsigned char *buf;
+    unsigned char *p;
+    const unsigned char *cp;
+    int i, j;
+
+    if (!no_name) {
+        if (((nid = OBJ_sn2nid(s)) != NID_undef) ||
+            ((nid = OBJ_ln2nid(s)) != NID_undef))
+            return OBJ_nid2obj(nid);
+    }
+
+    /* Work out size of content octets */
+    i = a2d_ASN1_OBJECT(NULL, 0, s, -1);
+    if (i <= 0) {
+        /* Don't clear the error */
+        /*
+         * ERR_clear_error();
+         */
+        return NULL;
+    }
+    /* Work out total size */
+    j = ASN1_object_size(0, i, V_ASN1_OBJECT);
+    if (j < 0)
+        return NULL;
+
+    if ((buf = OPENSSL_malloc(j)) == NULL) {
+        OBJerr(OBJ_F_OBJ_TXT2OBJ, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    p = buf;
+    /* Write out tag+length */
+    ASN1_put_object(&p, 0, i, V_ASN1_OBJECT, V_ASN1_UNIVERSAL);
+    /* Write out contents */
+    a2d_ASN1_OBJECT(p, i, s, -1);
+
+    cp = buf;
+    op = d2i_ASN1_OBJECT(NULL, &cp, j);
+    OPENSSL_free(buf);
+    return op;
+}
+
+int OBJ_obj2txt(char *buf, int buf_len, const ASN1_OBJECT *a, int no_name)
+{
+    int i, n = 0, len, nid, first, use_bn;
+    BIGNUM *bl;
+    unsigned long l;
+    const unsigned char *p;
+    char tbuf[DECIMAL_SIZE(i) + DECIMAL_SIZE(l) + 2];
+
+    /* Ensure that, at every state, |buf| is NUL-terminated. */
+    if (buf && buf_len > 0)
+        buf[0] = '\0';
+
+    if ((a == NULL) || (a->data == NULL))
+        return 0;
+
+    if (!no_name && (nid = OBJ_obj2nid(a)) != NID_undef) {
+        const char *s;
+        s = OBJ_nid2ln(nid);
+        if (s == NULL)
+            s = OBJ_nid2sn(nid);
+        if (s) {
+            if (buf)
+                OPENSSL_strlcpy(buf, s, buf_len);
+            n = strlen(s);
+            return n;
+        }
+    }
+
+    len = a->length;
+    p = a->data;
+
+    first = 1;
+    bl = NULL;
+
+    while (len > 0) {
+        l = 0;
+        use_bn = 0;
+        for (;;) {
+            unsigned char c = *p++;
+            len--;
+            if ((len == 0) && (c & 0x80))
+                goto err;
+            if (use_bn) {
+                if (!BN_add_word(bl, c & 0x7f))
+                    goto err;
+            } else
+                l |= c & 0x7f;
+            if (!(c & 0x80))
+                break;
+            if (!use_bn && (l > (ULONG_MAX >> 7L))) {
+                if (bl == NULL && (bl = BN_new()) == NULL)
+                    goto err;
+                if (!BN_set_word(bl, l))
+                    goto err;
+                use_bn = 1;
+            }
+            if (use_bn) {
+                if (!BN_lshift(bl, bl, 7))
+                    goto err;
+            } else
+                l <<= 7L;
+        }
+
+        if (first) {
+            first = 0;
+            if (l >= 80) {
+                i = 2;
+                if (use_bn) {
+                    if (!BN_sub_word(bl, 80))
+                        goto err;
+                } else
+                    l -= 80;
+            } else {
+                i = (int)(l / 40);
+                l -= (long)(i * 40);
+            }
+            if (buf && (buf_len > 1)) {
+                *buf++ = i + '0';
+                *buf = '\0';
+                buf_len--;
+            }
+            n++;
+        }
+
+        if (use_bn) {
+            char *bndec;
+            bndec = BN_bn2dec(bl);
+            if (!bndec)
+                goto err;
+            i = strlen(bndec);
+            if (buf) {
+                if (buf_len > 1) {
+                    *buf++ = '.';
+                    *buf = '\0';
+                    buf_len--;
+                }
+                OPENSSL_strlcpy(buf, bndec, buf_len);
+                if (i > buf_len) {
+                    buf += buf_len;
+                    buf_len = 0;
+                } else {
+                    buf += i;
+                    buf_len -= i;
+                }
+            }
+            n++;
+            n += i;
+            OPENSSL_free(bndec);
+        } else {
+            BIO_snprintf(tbuf, sizeof(tbuf), ".%lu", l);
+            i = strlen(tbuf);
+            if (buf && (buf_len > 0)) {
+                OPENSSL_strlcpy(buf, tbuf, buf_len);
+                if (i > buf_len) {
+                    buf += buf_len;
+                    buf_len = 0;
+                } else {
+                    buf += i;
+                    buf_len -= i;
+                }
+            }
+            n += i;
+            l = 0;
+        }
+    }
+
+    BN_free(bl);
+    return n;
+
+ err:
+    BN_free(bl);
+    return -1;
+}
+
+int OBJ_txt2nid(const char *s)
+{
+    ASN1_OBJECT *obj;
+    int nid;
+    obj = OBJ_txt2obj(s, 0);
+    nid = OBJ_obj2nid(obj);
+    ASN1_OBJECT_free(obj);
+    return nid;
+}
+
+int OBJ_ln2nid(const char *s)
+{
+    ASN1_OBJECT o;
+    const ASN1_OBJECT *oo = &o;
+    ADDED_OBJ ad, *adp;
+    const unsigned int *op;
+
+    o.ln = s;
+    if (added != NULL) {
+        ad.type = ADDED_LNAME;
+        ad.obj = &o;
+        adp = lh_ADDED_OBJ_retrieve(added, &ad);
+        if (adp != NULL)
+            return adp->obj->nid;
+    }
+    op = OBJ_bsearch_ln(&oo, ln_objs, NUM_LN);
+    if (op == NULL)
+        return NID_undef;
+    return nid_objs[*op].nid;
+}
+
+int OBJ_sn2nid(const char *s)
+{
+    ASN1_OBJECT o;
+    const ASN1_OBJECT *oo = &o;
+    ADDED_OBJ ad, *adp;
+    const unsigned int *op;
+
+    o.sn = s;
+    if (added != NULL) {
+        ad.type = ADDED_SNAME;
+        ad.obj = &o;
+        adp = lh_ADDED_OBJ_retrieve(added, &ad);
+        if (adp != NULL)
+            return adp->obj->nid;
+    }
+    op = OBJ_bsearch_sn(&oo, sn_objs, NUM_SN);
+    if (op == NULL)
+        return NID_undef;
+    return nid_objs[*op].nid;
+}
+
+const void *OBJ_bsearch_(const void *key, const void *base, int num, int size,
+                         int (*cmp) (const void *, const void *))
+{
+    return OBJ_bsearch_ex_(key, base, num, size, cmp, 0);
+}
+
+const void *OBJ_bsearch_ex_(const void *key, const void *base_, int num,
+                            int size,
+                            int (*cmp) (const void *, const void *),
+                            int flags)
+{
+    const char *base = base_;
+    int l, h, i = 0, c = 0;
+    const char *p = NULL;
+
+    if (num == 0)
+        return NULL;
+    l = 0;
+    h = num;
+    while (l < h) {
+        i = (l + h) / 2;
+        p = &(base[i * size]);
+        c = (*cmp) (key, p);
+        if (c < 0)
+            h = i;
+        else if (c > 0)
+            l = i + 1;
+        else
+            break;
+    }
+#ifdef CHARSET_EBCDIC
+    /*
+     * THIS IS A KLUDGE - Because the *_obj is sorted in ASCII order, and I
+     * don't have perl (yet), we revert to a *LINEAR* search when the object
+     * wasn't found in the binary search.
+     */
+    if (c != 0) {
+        for (i = 0; i < num; ++i) {
+            p = &(base[i * size]);
+            c = (*cmp) (key, p);
+            if (c == 0 || (c < 0 && (flags & OBJ_BSEARCH_VALUE_ON_NOMATCH)))
+                return p;
+        }
+    }
+#endif
+    if (c != 0 && !(flags & OBJ_BSEARCH_VALUE_ON_NOMATCH))
+        p = NULL;
+    else if (c == 0 && (flags & OBJ_BSEARCH_FIRST_VALUE_ON_MATCH)) {
+        while (i > 0 && (*cmp) (key, &(base[(i - 1) * size])) == 0)
+            i--;
+        p = &(base[i * size]);
+    }
+    return p;
+}
+
+/*
+ * Parse a BIO sink to create some extra oid's objects.
+ * Line format:<OID:isdigit or '.']><isspace><SN><isspace><LN>
+ */
+int OBJ_create_objects(BIO *in)
+{
+    char buf[512];
+    int i, num = 0;
+    char *o, *s, *l = NULL;
+
+    for (;;) {
+        s = o = NULL;
+        i = BIO_gets(in, buf, 512);
+        if (i <= 0)
+            return num;
+        buf[i - 1] = '\0';
+        if (!ossl_isalnum(buf[0]))
+            return num;
+        o = s = buf;
+        while (ossl_isdigit(*s) || *s == '.')
+            s++;
+        if (*s != '\0') {
+            *(s++) = '\0';
+            while (ossl_isspace(*s))
+                s++;
+            if (*s == '\0') {
+                s = NULL;
+            } else {
+                l = s;
+                while (*l != '\0' && !ossl_isspace(*l))
+                    l++;
+                if (*l != '\0') {
+                    *(l++) = '\0';
+                    while (ossl_isspace(*l))
+                        l++;
+                    if (*l == '\0') {
+                        l = NULL;
+                    }
+                } else {
+                    l = NULL;
+                }
+            }
+        } else {
+            s = NULL;
+        }
+        if (*o == '\0')
+            return num;
+        if (!OBJ_create(o, s, l))
+            return num;
+        num++;
+    }
+}
+
+int OBJ_create(const char *oid, const char *sn, const char *ln)
+{
+    ASN1_OBJECT *tmpoid = NULL;
+    int ok = 0;
+
+    /* Check to see if short or long name already present */
+    if ((sn != NULL && OBJ_sn2nid(sn) != NID_undef)
+            || (ln != NULL && OBJ_ln2nid(ln) != NID_undef)) {
+        OBJerr(OBJ_F_OBJ_CREATE, OBJ_R_OID_EXISTS);
+        return 0;
+    }
+
+    /* Convert numerical OID string to an ASN1_OBJECT structure */
+    tmpoid = OBJ_txt2obj(oid, 1);
+    if (tmpoid == NULL)
+        return 0;
+
+    /* If NID is not NID_undef then object already exists */
+    if (OBJ_obj2nid(tmpoid) != NID_undef) {
+        OBJerr(OBJ_F_OBJ_CREATE, OBJ_R_OID_EXISTS);
+        goto err;
+    }
+
+    tmpoid->nid = OBJ_new_nid(1);
+    tmpoid->sn = (char *)sn;
+    tmpoid->ln = (char *)ln;
+
+    ok = OBJ_add_object(tmpoid);
+
+    tmpoid->sn = NULL;
+    tmpoid->ln = NULL;
+
+ err:
+    ASN1_OBJECT_free(tmpoid);
+    return ok;
+}
+
+size_t OBJ_length(const ASN1_OBJECT *obj)
+{
+    if (obj == NULL)
+        return 0;
+    return obj->length;
+}
+
+const unsigned char *OBJ_get0_data(const ASN1_OBJECT *obj)
+{
+    if (obj == NULL)
+        return NULL;
+    return obj->data;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_dat.h b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_dat.h
new file mode 100644
index 000000000..9ab1a14b9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_dat.h
@@ -0,0 +1,5733 @@
+/*
+ * WARNING: do not edit!
+ * Generated by crypto/objects/obj_dat.pl
+ *
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* Serialized OID's */
+static const unsigned char so[7762] = {
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,                 /* [    0] OBJ_rsadsi */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,            /* [    6] OBJ_pkcs */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x02,0x02,       /* [   13] OBJ_md2 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x02,0x05,       /* [   21] OBJ_md5 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x03,0x04,       /* [   29] OBJ_rc4 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x01,  /* [   37] OBJ_rsaEncryption */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x02,  /* [   46] OBJ_md2WithRSAEncryption */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x04,  /* [   55] OBJ_md5WithRSAEncryption */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x05,0x01,  /* [   64] OBJ_pbeWithMD2AndDES_CBC */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x05,0x03,  /* [   73] OBJ_pbeWithMD5AndDES_CBC */
+    0x55,                                          /* [   82] OBJ_X500 */
+    0x55,0x04,                                     /* [   83] OBJ_X509 */
+    0x55,0x04,0x03,                                /* [   85] OBJ_commonName */
+    0x55,0x04,0x06,                                /* [   88] OBJ_countryName */
+    0x55,0x04,0x07,                                /* [   91] OBJ_localityName */
+    0x55,0x04,0x08,                                /* [   94] OBJ_stateOrProvinceName */
+    0x55,0x04,0x0A,                                /* [   97] OBJ_organizationName */
+    0x55,0x04,0x0B,                                /* [  100] OBJ_organizationalUnitName */
+    0x55,0x08,0x01,0x01,                           /* [  103] OBJ_rsa */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x07,       /* [  107] OBJ_pkcs7 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x07,0x01,  /* [  115] OBJ_pkcs7_data */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x07,0x02,  /* [  124] OBJ_pkcs7_signed */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x07,0x03,  /* [  133] OBJ_pkcs7_enveloped */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x07,0x04,  /* [  142] OBJ_pkcs7_signedAndEnveloped */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x07,0x05,  /* [  151] OBJ_pkcs7_digest */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x07,0x06,  /* [  160] OBJ_pkcs7_encrypted */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x03,       /* [  169] OBJ_pkcs3 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x03,0x01,  /* [  177] OBJ_dhKeyAgreement */
+    0x2B,0x0E,0x03,0x02,0x06,                      /* [  186] OBJ_des_ecb */
+    0x2B,0x0E,0x03,0x02,0x09,                      /* [  191] OBJ_des_cfb64 */
+    0x2B,0x0E,0x03,0x02,0x07,                      /* [  196] OBJ_des_cbc */
+    0x2B,0x0E,0x03,0x02,0x11,                      /* [  201] OBJ_des_ede_ecb */
+    0x2B,0x06,0x01,0x04,0x01,0x81,0x3C,0x07,0x01,0x01,0x02,  /* [  206] OBJ_idea_cbc */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x03,0x02,       /* [  217] OBJ_rc2_cbc */
+    0x2B,0x0E,0x03,0x02,0x12,                      /* [  225] OBJ_sha */
+    0x2B,0x0E,0x03,0x02,0x0F,                      /* [  230] OBJ_shaWithRSAEncryption */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x03,0x07,       /* [  235] OBJ_des_ede3_cbc */
+    0x2B,0x0E,0x03,0x02,0x08,                      /* [  243] OBJ_des_ofb64 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,       /* [  248] OBJ_pkcs9 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x01,  /* [  256] OBJ_pkcs9_emailAddress */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x02,  /* [  265] OBJ_pkcs9_unstructuredName */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x03,  /* [  274] OBJ_pkcs9_contentType */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x04,  /* [  283] OBJ_pkcs9_messageDigest */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x05,  /* [  292] OBJ_pkcs9_signingTime */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x06,  /* [  301] OBJ_pkcs9_countersignature */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x07,  /* [  310] OBJ_pkcs9_challengePassword */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x08,  /* [  319] OBJ_pkcs9_unstructuredAddress */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x09,  /* [  328] OBJ_pkcs9_extCertAttributes */
+    0x60,0x86,0x48,0x01,0x86,0xF8,0x42,            /* [  337] OBJ_netscape */
+    0x60,0x86,0x48,0x01,0x86,0xF8,0x42,0x01,       /* [  344] OBJ_netscape_cert_extension */
+    0x60,0x86,0x48,0x01,0x86,0xF8,0x42,0x02,       /* [  352] OBJ_netscape_data_type */
+    0x2B,0x0E,0x03,0x02,0x1A,                      /* [  360] OBJ_sha1 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x05,  /* [  365] OBJ_sha1WithRSAEncryption */
+    0x2B,0x0E,0x03,0x02,0x0D,                      /* [  374] OBJ_dsaWithSHA */
+    0x2B,0x0E,0x03,0x02,0x0C,                      /* [  379] OBJ_dsa_2 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x05,0x0B,  /* [  384] OBJ_pbeWithSHA1AndRC2_CBC */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x05,0x0C,  /* [  393] OBJ_id_pbkdf2 */
+    0x2B,0x0E,0x03,0x02,0x1B,                      /* [  402] OBJ_dsaWithSHA1_2 */
+    0x60,0x86,0x48,0x01,0x86,0xF8,0x42,0x01,0x01,  /* [  407] OBJ_netscape_cert_type */
+    0x60,0x86,0x48,0x01,0x86,0xF8,0x42,0x01,0x02,  /* [  416] OBJ_netscape_base_url */
+    0x60,0x86,0x48,0x01,0x86,0xF8,0x42,0x01,0x03,  /* [  425] OBJ_netscape_revocation_url */
+    0x60,0x86,0x48,0x01,0x86,0xF8,0x42,0x01,0x04,  /* [  434] OBJ_netscape_ca_revocation_url */
+    0x60,0x86,0x48,0x01,0x86,0xF8,0x42,0x01,0x07,  /* [  443] OBJ_netscape_renewal_url */
+    0x60,0x86,0x48,0x01,0x86,0xF8,0x42,0x01,0x08,  /* [  452] OBJ_netscape_ca_policy_url */
+    0x60,0x86,0x48,0x01,0x86,0xF8,0x42,0x01,0x0C,  /* [  461] OBJ_netscape_ssl_server_name */
+    0x60,0x86,0x48,0x01,0x86,0xF8,0x42,0x01,0x0D,  /* [  470] OBJ_netscape_comment */
+    0x60,0x86,0x48,0x01,0x86,0xF8,0x42,0x02,0x05,  /* [  479] OBJ_netscape_cert_sequence */
+    0x55,0x1D,                                     /* [  488] OBJ_id_ce */
+    0x55,0x1D,0x0E,                                /* [  490] OBJ_subject_key_identifier */
+    0x55,0x1D,0x0F,                                /* [  493] OBJ_key_usage */
+    0x55,0x1D,0x10,                                /* [  496] OBJ_private_key_usage_period */
+    0x55,0x1D,0x11,                                /* [  499] OBJ_subject_alt_name */
+    0x55,0x1D,0x12,                                /* [  502] OBJ_issuer_alt_name */
+    0x55,0x1D,0x13,                                /* [  505] OBJ_basic_constraints */
+    0x55,0x1D,0x14,                                /* [  508] OBJ_crl_number */
+    0x55,0x1D,0x20,                                /* [  511] OBJ_certificate_policies */
+    0x55,0x1D,0x23,                                /* [  514] OBJ_authority_key_identifier */
+    0x2B,0x06,0x01,0x04,0x01,0x97,0x55,0x01,0x02,  /* [  517] OBJ_bf_cbc */
+    0x55,0x08,0x03,0x65,                           /* [  526] OBJ_mdc2 */
+    0x55,0x08,0x03,0x64,                           /* [  530] OBJ_mdc2WithRSA */
+    0x55,0x04,0x2A,                                /* [  534] OBJ_givenName */
+    0x55,0x04,0x04,                                /* [  537] OBJ_surname */
+    0x55,0x04,0x2B,                                /* [  540] OBJ_initials */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x2C,  /* [  543] OBJ_uniqueIdentifier */
+    0x55,0x1D,0x1F,                                /* [  553] OBJ_crl_distribution_points */
+    0x2B,0x0E,0x03,0x02,0x03,                      /* [  556] OBJ_md5WithRSA */
+    0x55,0x04,0x05,                                /* [  561] OBJ_serialNumber */
+    0x55,0x04,0x0C,                                /* [  564] OBJ_title */
+    0x55,0x04,0x0D,                                /* [  567] OBJ_description */
+    0x2A,0x86,0x48,0x86,0xF6,0x7D,0x07,0x42,0x0A,  /* [  570] OBJ_cast5_cbc */
+    0x2A,0x86,0x48,0x86,0xF6,0x7D,0x07,0x42,0x0C,  /* [  579] OBJ_pbeWithMD5AndCast5_CBC */
+    0x2A,0x86,0x48,0xCE,0x38,0x04,0x03,            /* [  588] OBJ_dsaWithSHA1 */
+    0x2B,0x0E,0x03,0x02,0x1D,                      /* [  595] OBJ_sha1WithRSA */
+    0x2A,0x86,0x48,0xCE,0x38,0x04,0x01,            /* [  600] OBJ_dsa */
+    0x2B,0x24,0x03,0x02,0x01,                      /* [  607] OBJ_ripemd160 */
+    0x2B,0x24,0x03,0x03,0x01,0x02,                 /* [  612] OBJ_ripemd160WithRSA */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x03,0x08,       /* [  618] OBJ_rc5_cbc */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x03,0x08,  /* [  626] OBJ_zlib_compression */
+    0x55,0x1D,0x25,                                /* [  637] OBJ_ext_key_usage */
+    0x2B,0x06,0x01,0x05,0x05,0x07,                 /* [  640] OBJ_id_pkix */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,            /* [  646] OBJ_id_kp */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x01,       /* [  653] OBJ_server_auth */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x02,       /* [  661] OBJ_client_auth */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x03,       /* [  669] OBJ_code_sign */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x04,       /* [  677] OBJ_email_protect */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x08,       /* [  685] OBJ_time_stamp */
+    0x2B,0x06,0x01,0x04,0x01,0x82,0x37,0x02,0x01,0x15,  /* [  693] OBJ_ms_code_ind */
+    0x2B,0x06,0x01,0x04,0x01,0x82,0x37,0x02,0x01,0x16,  /* [  703] OBJ_ms_code_com */
+    0x2B,0x06,0x01,0x04,0x01,0x82,0x37,0x0A,0x03,0x01,  /* [  713] OBJ_ms_ctl_sign */
+    0x2B,0x06,0x01,0x04,0x01,0x82,0x37,0x0A,0x03,0x03,  /* [  723] OBJ_ms_sgc */
+    0x2B,0x06,0x01,0x04,0x01,0x82,0x37,0x0A,0x03,0x04,  /* [  733] OBJ_ms_efs */
+    0x60,0x86,0x48,0x01,0x86,0xF8,0x42,0x04,0x01,  /* [  743] OBJ_ns_sgc */
+    0x55,0x1D,0x1B,                                /* [  752] OBJ_delta_crl */
+    0x55,0x1D,0x15,                                /* [  755] OBJ_crl_reason */
+    0x55,0x1D,0x18,                                /* [  758] OBJ_invalidity_date */
+    0x2B,0x65,0x01,0x04,0x01,                      /* [  761] OBJ_sxnet */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x0C,0x01,0x01,  /* [  766] OBJ_pbe_WithSHA1And128BitRC4 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x0C,0x01,0x02,  /* [  776] OBJ_pbe_WithSHA1And40BitRC4 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x0C,0x01,0x03,  /* [  786] OBJ_pbe_WithSHA1And3_Key_TripleDES_CBC */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x0C,0x01,0x04,  /* [  796] OBJ_pbe_WithSHA1And2_Key_TripleDES_CBC */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x0C,0x01,0x05,  /* [  806] OBJ_pbe_WithSHA1And128BitRC2_CBC */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x0C,0x01,0x06,  /* [  816] OBJ_pbe_WithSHA1And40BitRC2_CBC */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x0C,0x0A,0x01,0x01,  /* [  826] OBJ_keyBag */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x0C,0x0A,0x01,0x02,  /* [  837] OBJ_pkcs8ShroudedKeyBag */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x0C,0x0A,0x01,0x03,  /* [  848] OBJ_certBag */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x0C,0x0A,0x01,0x04,  /* [  859] OBJ_crlBag */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x0C,0x0A,0x01,0x05,  /* [  870] OBJ_secretBag */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x0C,0x0A,0x01,0x06,  /* [  881] OBJ_safeContentsBag */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x14,  /* [  892] OBJ_friendlyName */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x15,  /* [  901] OBJ_localKeyID */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x16,0x01,  /* [  910] OBJ_x509Certificate */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x16,0x02,  /* [  920] OBJ_sdsiCertificate */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x17,0x01,  /* [  930] OBJ_x509Crl */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x05,0x0D,  /* [  940] OBJ_pbes2 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x05,0x0E,  /* [  949] OBJ_pbmac1 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x02,0x07,       /* [  958] OBJ_hmacWithSHA1 */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x02,0x01,       /* [  966] OBJ_id_qt_cps */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x02,0x02,       /* [  974] OBJ_id_qt_unotice */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x0F,  /* [  982] OBJ_SMIMECapabilities */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x05,0x04,  /* [  991] OBJ_pbeWithMD2AndRC2_CBC */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x05,0x06,  /* [ 1000] OBJ_pbeWithMD5AndRC2_CBC */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x05,0x0A,  /* [ 1009] OBJ_pbeWithSHA1AndDES_CBC */
+    0x2B,0x06,0x01,0x04,0x01,0x82,0x37,0x02,0x01,0x0E,  /* [ 1018] OBJ_ms_ext_req */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x0E,  /* [ 1028] OBJ_ext_req */
+    0x55,0x04,0x29,                                /* [ 1037] OBJ_name */
+    0x55,0x04,0x2E,                                /* [ 1040] OBJ_dnQualifier */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x01,            /* [ 1043] OBJ_id_pe */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,            /* [ 1050] OBJ_id_ad */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x01,0x01,       /* [ 1057] OBJ_info_access */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,0x01,       /* [ 1065] OBJ_ad_OCSP */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,0x02,       /* [ 1073] OBJ_ad_ca_issuers */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x09,       /* [ 1081] OBJ_OCSP_sign */
+    0x2A,                                          /* [ 1089] OBJ_member_body */
+    0x2A,0x86,0x48,                                /* [ 1090] OBJ_ISO_US */
+    0x2A,0x86,0x48,0xCE,0x38,                      /* [ 1093] OBJ_X9_57 */
+    0x2A,0x86,0x48,0xCE,0x38,0x04,                 /* [ 1098] OBJ_X9cm */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,       /* [ 1104] OBJ_pkcs1 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x05,       /* [ 1112] OBJ_pkcs5 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,  /* [ 1120] OBJ_SMIME */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x00,  /* [ 1129] OBJ_id_smime_mod */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x01,  /* [ 1139] OBJ_id_smime_ct */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,  /* [ 1149] OBJ_id_smime_aa */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x03,  /* [ 1159] OBJ_id_smime_alg */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x04,  /* [ 1169] OBJ_id_smime_cd */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x05,  /* [ 1179] OBJ_id_smime_spq */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x06,  /* [ 1189] OBJ_id_smime_cti */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x00,0x01,  /* [ 1199] OBJ_id_smime_mod_cms */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x00,0x02,  /* [ 1210] OBJ_id_smime_mod_ess */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x00,0x03,  /* [ 1221] OBJ_id_smime_mod_oid */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x00,0x04,  /* [ 1232] OBJ_id_smime_mod_msg_v3 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x00,0x05,  /* [ 1243] OBJ_id_smime_mod_ets_eSignature_88 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x00,0x06,  /* [ 1254] OBJ_id_smime_mod_ets_eSignature_97 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x00,0x07,  /* [ 1265] OBJ_id_smime_mod_ets_eSigPolicy_88 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x00,0x08,  /* [ 1276] OBJ_id_smime_mod_ets_eSigPolicy_97 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x01,0x01,  /* [ 1287] OBJ_id_smime_ct_receipt */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x01,0x02,  /* [ 1298] OBJ_id_smime_ct_authData */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x01,0x03,  /* [ 1309] OBJ_id_smime_ct_publishCert */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x01,0x04,  /* [ 1320] OBJ_id_smime_ct_TSTInfo */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x01,0x05,  /* [ 1331] OBJ_id_smime_ct_TDTInfo */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x01,0x06,  /* [ 1342] OBJ_id_smime_ct_contentInfo */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x01,0x07,  /* [ 1353] OBJ_id_smime_ct_DVCSRequestData */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x01,0x08,  /* [ 1364] OBJ_id_smime_ct_DVCSResponseData */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x01,  /* [ 1375] OBJ_id_smime_aa_receiptRequest */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x02,  /* [ 1386] OBJ_id_smime_aa_securityLabel */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x03,  /* [ 1397] OBJ_id_smime_aa_mlExpandHistory */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x04,  /* [ 1408] OBJ_id_smime_aa_contentHint */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x05,  /* [ 1419] OBJ_id_smime_aa_msgSigDigest */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x06,  /* [ 1430] OBJ_id_smime_aa_encapContentType */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x07,  /* [ 1441] OBJ_id_smime_aa_contentIdentifier */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x08,  /* [ 1452] OBJ_id_smime_aa_macValue */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x09,  /* [ 1463] OBJ_id_smime_aa_equivalentLabels */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x0A,  /* [ 1474] OBJ_id_smime_aa_contentReference */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x0B,  /* [ 1485] OBJ_id_smime_aa_encrypKeyPref */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x0C,  /* [ 1496] OBJ_id_smime_aa_signingCertificate */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x0D,  /* [ 1507] OBJ_id_smime_aa_smimeEncryptCerts */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x0E,  /* [ 1518] OBJ_id_smime_aa_timeStampToken */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x0F,  /* [ 1529] OBJ_id_smime_aa_ets_sigPolicyId */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x10,  /* [ 1540] OBJ_id_smime_aa_ets_commitmentType */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x11,  /* [ 1551] OBJ_id_smime_aa_ets_signerLocation */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x12,  /* [ 1562] OBJ_id_smime_aa_ets_signerAttr */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x13,  /* [ 1573] OBJ_id_smime_aa_ets_otherSigCert */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x14,  /* [ 1584] OBJ_id_smime_aa_ets_contentTimestamp */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x15,  /* [ 1595] OBJ_id_smime_aa_ets_CertificateRefs */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x16,  /* [ 1606] OBJ_id_smime_aa_ets_RevocationRefs */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x17,  /* [ 1617] OBJ_id_smime_aa_ets_certValues */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x18,  /* [ 1628] OBJ_id_smime_aa_ets_revocationValues */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x19,  /* [ 1639] OBJ_id_smime_aa_ets_escTimeStamp */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x1A,  /* [ 1650] OBJ_id_smime_aa_ets_certCRLTimestamp */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x1B,  /* [ 1661] OBJ_id_smime_aa_ets_archiveTimeStamp */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x1C,  /* [ 1672] OBJ_id_smime_aa_signatureType */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x1D,  /* [ 1683] OBJ_id_smime_aa_dvcs_dvc */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x03,0x01,  /* [ 1694] OBJ_id_smime_alg_ESDHwith3DES */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x03,0x02,  /* [ 1705] OBJ_id_smime_alg_ESDHwithRC2 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x03,0x03,  /* [ 1716] OBJ_id_smime_alg_3DESwrap */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x03,0x04,  /* [ 1727] OBJ_id_smime_alg_RC2wrap */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x03,0x05,  /* [ 1738] OBJ_id_smime_alg_ESDH */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x03,0x06,  /* [ 1749] OBJ_id_smime_alg_CMS3DESwrap */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x03,0x07,  /* [ 1760] OBJ_id_smime_alg_CMSRC2wrap */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x04,0x01,  /* [ 1771] OBJ_id_smime_cd_ldap */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x05,0x01,  /* [ 1782] OBJ_id_smime_spq_ets_sqt_uri */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x05,0x02,  /* [ 1793] OBJ_id_smime_spq_ets_sqt_unotice */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x06,0x01,  /* [ 1804] OBJ_id_smime_cti_ets_proofOfOrigin */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x06,0x02,  /* [ 1815] OBJ_id_smime_cti_ets_proofOfReceipt */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x06,0x03,  /* [ 1826] OBJ_id_smime_cti_ets_proofOfDelivery */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x06,0x04,  /* [ 1837] OBJ_id_smime_cti_ets_proofOfSender */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x06,0x05,  /* [ 1848] OBJ_id_smime_cti_ets_proofOfApproval */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x06,0x06,  /* [ 1859] OBJ_id_smime_cti_ets_proofOfCreation */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x02,0x04,       /* [ 1870] OBJ_md4 */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,            /* [ 1878] OBJ_id_pkix_mod */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x02,            /* [ 1885] OBJ_id_qt */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,            /* [ 1892] OBJ_id_it */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x05,            /* [ 1899] OBJ_id_pkip */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x06,            /* [ 1906] OBJ_id_alg */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,            /* [ 1913] OBJ_id_cmc */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x08,            /* [ 1920] OBJ_id_on */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x09,            /* [ 1927] OBJ_id_pda */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x0A,            /* [ 1934] OBJ_id_aca */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x0B,            /* [ 1941] OBJ_id_qcs */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x0C,            /* [ 1948] OBJ_id_cct */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,0x01,       /* [ 1955] OBJ_id_pkix1_explicit_88 */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,0x02,       /* [ 1963] OBJ_id_pkix1_implicit_88 */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,0x03,       /* [ 1971] OBJ_id_pkix1_explicit_93 */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,0x04,       /* [ 1979] OBJ_id_pkix1_implicit_93 */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,0x05,       /* [ 1987] OBJ_id_mod_crmf */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,0x06,       /* [ 1995] OBJ_id_mod_cmc */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,0x07,       /* [ 2003] OBJ_id_mod_kea_profile_88 */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,0x08,       /* [ 2011] OBJ_id_mod_kea_profile_93 */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,0x09,       /* [ 2019] OBJ_id_mod_cmp */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,0x0A,       /* [ 2027] OBJ_id_mod_qualified_cert_88 */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,0x0B,       /* [ 2035] OBJ_id_mod_qualified_cert_93 */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,0x0C,       /* [ 2043] OBJ_id_mod_attribute_cert */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,0x0D,       /* [ 2051] OBJ_id_mod_timestamp_protocol */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,0x0E,       /* [ 2059] OBJ_id_mod_ocsp */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,0x0F,       /* [ 2067] OBJ_id_mod_dvcs */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x00,0x10,       /* [ 2075] OBJ_id_mod_cmp2000 */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x01,0x02,       /* [ 2083] OBJ_biometricInfo */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x01,0x03,       /* [ 2091] OBJ_qcStatements */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x01,0x04,       /* [ 2099] OBJ_ac_auditEntity */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x01,0x05,       /* [ 2107] OBJ_ac_targeting */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x01,0x06,       /* [ 2115] OBJ_aaControls */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x01,0x07,       /* [ 2123] OBJ_sbgp_ipAddrBlock */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x01,0x08,       /* [ 2131] OBJ_sbgp_autonomousSysNum */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x01,0x09,       /* [ 2139] OBJ_sbgp_routerIdentifier */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x02,0x03,       /* [ 2147] OBJ_textNotice */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x05,       /* [ 2155] OBJ_ipsecEndSystem */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x06,       /* [ 2163] OBJ_ipsecTunnel */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x07,       /* [ 2171] OBJ_ipsecUser */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x0A,       /* [ 2179] OBJ_dvcs */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,0x01,       /* [ 2187] OBJ_id_it_caProtEncCert */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,0x02,       /* [ 2195] OBJ_id_it_signKeyPairTypes */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,0x03,       /* [ 2203] OBJ_id_it_encKeyPairTypes */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,0x04,       /* [ 2211] OBJ_id_it_preferredSymmAlg */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,0x05,       /* [ 2219] OBJ_id_it_caKeyUpdateInfo */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,0x06,       /* [ 2227] OBJ_id_it_currentCRL */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,0x07,       /* [ 2235] OBJ_id_it_unsupportedOIDs */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,0x08,       /* [ 2243] OBJ_id_it_subscriptionRequest */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,0x09,       /* [ 2251] OBJ_id_it_subscriptionResponse */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,0x0A,       /* [ 2259] OBJ_id_it_keyPairParamReq */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,0x0B,       /* [ 2267] OBJ_id_it_keyPairParamRep */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,0x0C,       /* [ 2275] OBJ_id_it_revPassphrase */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,0x0D,       /* [ 2283] OBJ_id_it_implicitConfirm */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,0x0E,       /* [ 2291] OBJ_id_it_confirmWaitTime */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,0x0F,       /* [ 2299] OBJ_id_it_origPKIMessage */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x05,0x01,       /* [ 2307] OBJ_id_regCtrl */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x05,0x02,       /* [ 2315] OBJ_id_regInfo */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x05,0x01,0x01,  /* [ 2323] OBJ_id_regCtrl_regToken */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x05,0x01,0x02,  /* [ 2332] OBJ_id_regCtrl_authenticator */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x05,0x01,0x03,  /* [ 2341] OBJ_id_regCtrl_pkiPublicationInfo */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x05,0x01,0x04,  /* [ 2350] OBJ_id_regCtrl_pkiArchiveOptions */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x05,0x01,0x05,  /* [ 2359] OBJ_id_regCtrl_oldCertID */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x05,0x01,0x06,  /* [ 2368] OBJ_id_regCtrl_protocolEncrKey */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x05,0x02,0x01,  /* [ 2377] OBJ_id_regInfo_utf8Pairs */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x05,0x02,0x02,  /* [ 2386] OBJ_id_regInfo_certReq */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x06,0x01,       /* [ 2395] OBJ_id_alg_des40 */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x06,0x02,       /* [ 2403] OBJ_id_alg_noSignature */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x06,0x03,       /* [ 2411] OBJ_id_alg_dh_sig_hmac_sha1 */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x06,0x04,       /* [ 2419] OBJ_id_alg_dh_pop */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x01,       /* [ 2427] OBJ_id_cmc_statusInfo */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x02,       /* [ 2435] OBJ_id_cmc_identification */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x03,       /* [ 2443] OBJ_id_cmc_identityProof */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x04,       /* [ 2451] OBJ_id_cmc_dataReturn */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x05,       /* [ 2459] OBJ_id_cmc_transactionId */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x06,       /* [ 2467] OBJ_id_cmc_senderNonce */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x07,       /* [ 2475] OBJ_id_cmc_recipientNonce */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x08,       /* [ 2483] OBJ_id_cmc_addExtensions */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x09,       /* [ 2491] OBJ_id_cmc_encryptedPOP */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x0A,       /* [ 2499] OBJ_id_cmc_decryptedPOP */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x0B,       /* [ 2507] OBJ_id_cmc_lraPOPWitness */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x0F,       /* [ 2515] OBJ_id_cmc_getCert */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x10,       /* [ 2523] OBJ_id_cmc_getCRL */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x11,       /* [ 2531] OBJ_id_cmc_revokeRequest */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x12,       /* [ 2539] OBJ_id_cmc_regInfo */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x13,       /* [ 2547] OBJ_id_cmc_responseInfo */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x15,       /* [ 2555] OBJ_id_cmc_queryPending */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x16,       /* [ 2563] OBJ_id_cmc_popLinkRandom */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x17,       /* [ 2571] OBJ_id_cmc_popLinkWitness */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x07,0x18,       /* [ 2579] OBJ_id_cmc_confirmCertAcceptance */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x08,0x01,       /* [ 2587] OBJ_id_on_personalData */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x09,0x01,       /* [ 2595] OBJ_id_pda_dateOfBirth */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x09,0x02,       /* [ 2603] OBJ_id_pda_placeOfBirth */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x09,0x03,       /* [ 2611] OBJ_id_pda_gender */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x09,0x04,       /* [ 2619] OBJ_id_pda_countryOfCitizenship */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x09,0x05,       /* [ 2627] OBJ_id_pda_countryOfResidence */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x0A,0x01,       /* [ 2635] OBJ_id_aca_authenticationInfo */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x0A,0x02,       /* [ 2643] OBJ_id_aca_accessIdentity */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x0A,0x03,       /* [ 2651] OBJ_id_aca_chargingIdentity */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x0A,0x04,       /* [ 2659] OBJ_id_aca_group */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x0A,0x05,       /* [ 2667] OBJ_id_aca_role */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x0B,0x01,       /* [ 2675] OBJ_id_qcs_pkixQCSyntax_v1 */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x0C,0x01,       /* [ 2683] OBJ_id_cct_crs */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x0C,0x02,       /* [ 2691] OBJ_id_cct_PKIData */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x0C,0x03,       /* [ 2699] OBJ_id_cct_PKIResponse */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,0x03,       /* [ 2707] OBJ_ad_timeStamping */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,0x04,       /* [ 2715] OBJ_ad_dvcs */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,0x01,0x01,  /* [ 2723] OBJ_id_pkix_OCSP_basic */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,0x01,0x02,  /* [ 2732] OBJ_id_pkix_OCSP_Nonce */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,0x01,0x03,  /* [ 2741] OBJ_id_pkix_OCSP_CrlID */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,0x01,0x04,  /* [ 2750] OBJ_id_pkix_OCSP_acceptableResponses */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,0x01,0x05,  /* [ 2759] OBJ_id_pkix_OCSP_noCheck */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,0x01,0x06,  /* [ 2768] OBJ_id_pkix_OCSP_archiveCutoff */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,0x01,0x07,  /* [ 2777] OBJ_id_pkix_OCSP_serviceLocator */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,0x01,0x08,  /* [ 2786] OBJ_id_pkix_OCSP_extendedStatus */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,0x01,0x09,  /* [ 2795] OBJ_id_pkix_OCSP_valid */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,0x01,0x0A,  /* [ 2804] OBJ_id_pkix_OCSP_path */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,0x01,0x0B,  /* [ 2813] OBJ_id_pkix_OCSP_trustRoot */
+    0x2B,0x0E,0x03,0x02,                           /* [ 2822] OBJ_algorithm */
+    0x2B,0x0E,0x03,0x02,0x0B,                      /* [ 2826] OBJ_rsaSignature */
+    0x55,0x08,                                     /* [ 2831] OBJ_X500algorithms */
+    0x2B,                                          /* [ 2833] OBJ_org */
+    0x2B,0x06,                                     /* [ 2834] OBJ_dod */
+    0x2B,0x06,0x01,                                /* [ 2836] OBJ_iana */
+    0x2B,0x06,0x01,0x01,                           /* [ 2839] OBJ_Directory */
+    0x2B,0x06,0x01,0x02,                           /* [ 2843] OBJ_Management */
+    0x2B,0x06,0x01,0x03,                           /* [ 2847] OBJ_Experimental */
+    0x2B,0x06,0x01,0x04,                           /* [ 2851] OBJ_Private */
+    0x2B,0x06,0x01,0x05,                           /* [ 2855] OBJ_Security */
+    0x2B,0x06,0x01,0x06,                           /* [ 2859] OBJ_SNMPv2 */
+    0x2B,0x06,0x01,0x07,                           /* [ 2863] OBJ_Mail */
+    0x2B,0x06,0x01,0x04,0x01,                      /* [ 2867] OBJ_Enterprises */
+    0x2B,0x06,0x01,0x04,0x01,0x8B,0x3A,0x82,0x58,  /* [ 2872] OBJ_dcObject */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x19,  /* [ 2881] OBJ_domainComponent */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x04,0x0D,  /* [ 2891] OBJ_Domain */
+    0x55,0x01,0x05,                                /* [ 2901] OBJ_selected_attribute_types */
+    0x55,0x01,0x05,0x37,                           /* [ 2904] OBJ_clearance */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x03,  /* [ 2908] OBJ_md4WithRSAEncryption */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x01,0x0A,       /* [ 2917] OBJ_ac_proxying */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x01,0x0B,       /* [ 2925] OBJ_sinfo_access */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x0A,0x06,       /* [ 2933] OBJ_id_aca_encAttrs */
+    0x55,0x04,0x48,                                /* [ 2941] OBJ_role */
+    0x55,0x1D,0x24,                                /* [ 2944] OBJ_policy_constraints */
+    0x55,0x1D,0x37,                                /* [ 2947] OBJ_target_information */
+    0x55,0x1D,0x38,                                /* [ 2950] OBJ_no_rev_avail */
+    0x2A,0x86,0x48,0xCE,0x3D,                      /* [ 2953] OBJ_ansi_X9_62 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x01,0x01,            /* [ 2958] OBJ_X9_62_prime_field */
+    0x2A,0x86,0x48,0xCE,0x3D,0x01,0x02,            /* [ 2965] OBJ_X9_62_characteristic_two_field */
+    0x2A,0x86,0x48,0xCE,0x3D,0x02,0x01,            /* [ 2972] OBJ_X9_62_id_ecPublicKey */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x01,0x01,       /* [ 2979] OBJ_X9_62_prime192v1 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x01,0x02,       /* [ 2987] OBJ_X9_62_prime192v2 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x01,0x03,       /* [ 2995] OBJ_X9_62_prime192v3 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x01,0x04,       /* [ 3003] OBJ_X9_62_prime239v1 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x01,0x05,       /* [ 3011] OBJ_X9_62_prime239v2 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x01,0x06,       /* [ 3019] OBJ_X9_62_prime239v3 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x01,0x07,       /* [ 3027] OBJ_X9_62_prime256v1 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x04,0x01,            /* [ 3035] OBJ_ecdsa_with_SHA1 */
+    0x2B,0x06,0x01,0x04,0x01,0x82,0x37,0x11,0x01,  /* [ 3042] OBJ_ms_csp_name */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x01,  /* [ 3051] OBJ_aes_128_ecb */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x02,  /* [ 3060] OBJ_aes_128_cbc */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x03,  /* [ 3069] OBJ_aes_128_ofb128 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x04,  /* [ 3078] OBJ_aes_128_cfb128 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x15,  /* [ 3087] OBJ_aes_192_ecb */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x16,  /* [ 3096] OBJ_aes_192_cbc */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x17,  /* [ 3105] OBJ_aes_192_ofb128 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x18,  /* [ 3114] OBJ_aes_192_cfb128 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x29,  /* [ 3123] OBJ_aes_256_ecb */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x2A,  /* [ 3132] OBJ_aes_256_cbc */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x2B,  /* [ 3141] OBJ_aes_256_ofb128 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x2C,  /* [ 3150] OBJ_aes_256_cfb128 */
+    0x55,0x1D,0x17,                                /* [ 3159] OBJ_hold_instruction_code */
+    0x2A,0x86,0x48,0xCE,0x38,0x02,0x01,            /* [ 3162] OBJ_hold_instruction_none */
+    0x2A,0x86,0x48,0xCE,0x38,0x02,0x02,            /* [ 3169] OBJ_hold_instruction_call_issuer */
+    0x2A,0x86,0x48,0xCE,0x38,0x02,0x03,            /* [ 3176] OBJ_hold_instruction_reject */
+    0x09,                                          /* [ 3183] OBJ_data */
+    0x09,0x92,0x26,                                /* [ 3184] OBJ_pss */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,            /* [ 3187] OBJ_ucl */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,       /* [ 3194] OBJ_pilot */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,  /* [ 3202] OBJ_pilotAttributeType */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x03,  /* [ 3211] OBJ_pilotAttributeSyntax */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x04,  /* [ 3220] OBJ_pilotObjectClass */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x0A,  /* [ 3229] OBJ_pilotGroups */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x03,0x04,  /* [ 3238] OBJ_iA5StringSyntax */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x03,0x05,  /* [ 3248] OBJ_caseIgnoreIA5StringSyntax */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x04,0x03,  /* [ 3258] OBJ_pilotObject */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x04,0x04,  /* [ 3268] OBJ_pilotPerson */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x04,0x05,  /* [ 3278] OBJ_account */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x04,0x06,  /* [ 3288] OBJ_document */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x04,0x07,  /* [ 3298] OBJ_room */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x04,0x09,  /* [ 3308] OBJ_documentSeries */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x04,0x0E,  /* [ 3318] OBJ_rFC822localPart */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x04,0x0F,  /* [ 3328] OBJ_dNSDomain */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x04,0x11,  /* [ 3338] OBJ_domainRelatedObject */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x04,0x12,  /* [ 3348] OBJ_friendlyCountry */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x04,0x13,  /* [ 3358] OBJ_simpleSecurityObject */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x04,0x14,  /* [ 3368] OBJ_pilotOrganization */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x04,0x15,  /* [ 3378] OBJ_pilotDSA */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x04,0x16,  /* [ 3388] OBJ_qualityLabelledData */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x01,  /* [ 3398] OBJ_userId */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x02,  /* [ 3408] OBJ_textEncodedORAddress */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x03,  /* [ 3418] OBJ_rfc822Mailbox */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x04,  /* [ 3428] OBJ_info */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x05,  /* [ 3438] OBJ_favouriteDrink */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x06,  /* [ 3448] OBJ_roomNumber */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x07,  /* [ 3458] OBJ_photo */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x08,  /* [ 3468] OBJ_userClass */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x09,  /* [ 3478] OBJ_host */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x0A,  /* [ 3488] OBJ_manager */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x0B,  /* [ 3498] OBJ_documentIdentifier */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x0C,  /* [ 3508] OBJ_documentTitle */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x0D,  /* [ 3518] OBJ_documentVersion */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x0E,  /* [ 3528] OBJ_documentAuthor */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x0F,  /* [ 3538] OBJ_documentLocation */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x14,  /* [ 3548] OBJ_homeTelephoneNumber */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x15,  /* [ 3558] OBJ_secretary */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x16,  /* [ 3568] OBJ_otherMailbox */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x17,  /* [ 3578] OBJ_lastModifiedTime */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x18,  /* [ 3588] OBJ_lastModifiedBy */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x1A,  /* [ 3598] OBJ_aRecord */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x1B,  /* [ 3608] OBJ_pilotAttributeType27 */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x1C,  /* [ 3618] OBJ_mXRecord */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x1D,  /* [ 3628] OBJ_nSRecord */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x1E,  /* [ 3638] OBJ_sOARecord */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x1F,  /* [ 3648] OBJ_cNAMERecord */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x25,  /* [ 3658] OBJ_associatedDomain */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x26,  /* [ 3668] OBJ_associatedName */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x27,  /* [ 3678] OBJ_homePostalAddress */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x28,  /* [ 3688] OBJ_personalTitle */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x29,  /* [ 3698] OBJ_mobileTelephoneNumber */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x2A,  /* [ 3708] OBJ_pagerTelephoneNumber */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x2B,  /* [ 3718] OBJ_friendlyCountryName */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x2D,  /* [ 3728] OBJ_organizationalStatus */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x2E,  /* [ 3738] OBJ_janetMailbox */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x2F,  /* [ 3748] OBJ_mailPreferenceOption */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x30,  /* [ 3758] OBJ_buildingName */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x31,  /* [ 3768] OBJ_dSAQuality */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x32,  /* [ 3778] OBJ_singleLevelQuality */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x33,  /* [ 3788] OBJ_subtreeMinimumQuality */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x34,  /* [ 3798] OBJ_subtreeMaximumQuality */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x35,  /* [ 3808] OBJ_personalSignature */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x36,  /* [ 3818] OBJ_dITRedirect */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x37,  /* [ 3828] OBJ_audio */
+    0x09,0x92,0x26,0x89,0x93,0xF2,0x2C,0x64,0x01,0x38,  /* [ 3838] OBJ_documentPublisher */
+    0x55,0x04,0x2D,                                /* [ 3848] OBJ_x500UniqueIdentifier */
+    0x2B,0x06,0x01,0x07,0x01,                      /* [ 3851] OBJ_mime_mhs */
+    0x2B,0x06,0x01,0x07,0x01,0x01,                 /* [ 3856] OBJ_mime_mhs_headings */
+    0x2B,0x06,0x01,0x07,0x01,0x02,                 /* [ 3862] OBJ_mime_mhs_bodies */
+    0x2B,0x06,0x01,0x07,0x01,0x01,0x01,            /* [ 3868] OBJ_id_hex_partial_message */
+    0x2B,0x06,0x01,0x07,0x01,0x01,0x02,            /* [ 3875] OBJ_id_hex_multipart_message */
+    0x55,0x04,0x2C,                                /* [ 3882] OBJ_generationQualifier */
+    0x55,0x04,0x41,                                /* [ 3885] OBJ_pseudonym */
+    0x67,0x2A,                                     /* [ 3888] OBJ_id_set */
+    0x67,0x2A,0x00,                                /* [ 3890] OBJ_set_ctype */
+    0x67,0x2A,0x01,                                /* [ 3893] OBJ_set_msgExt */
+    0x67,0x2A,0x03,                                /* [ 3896] OBJ_set_attr */
+    0x67,0x2A,0x05,                                /* [ 3899] OBJ_set_policy */
+    0x67,0x2A,0x07,                                /* [ 3902] OBJ_set_certExt */
+    0x67,0x2A,0x08,                                /* [ 3905] OBJ_set_brand */
+    0x67,0x2A,0x00,0x00,                           /* [ 3908] OBJ_setct_PANData */
+    0x67,0x2A,0x00,0x01,                           /* [ 3912] OBJ_setct_PANToken */
+    0x67,0x2A,0x00,0x02,                           /* [ 3916] OBJ_setct_PANOnly */
+    0x67,0x2A,0x00,0x03,                           /* [ 3920] OBJ_setct_OIData */
+    0x67,0x2A,0x00,0x04,                           /* [ 3924] OBJ_setct_PI */
+    0x67,0x2A,0x00,0x05,                           /* [ 3928] OBJ_setct_PIData */
+    0x67,0x2A,0x00,0x06,                           /* [ 3932] OBJ_setct_PIDataUnsigned */
+    0x67,0x2A,0x00,0x07,                           /* [ 3936] OBJ_setct_HODInput */
+    0x67,0x2A,0x00,0x08,                           /* [ 3940] OBJ_setct_AuthResBaggage */
+    0x67,0x2A,0x00,0x09,                           /* [ 3944] OBJ_setct_AuthRevReqBaggage */
+    0x67,0x2A,0x00,0x0A,                           /* [ 3948] OBJ_setct_AuthRevResBaggage */
+    0x67,0x2A,0x00,0x0B,                           /* [ 3952] OBJ_setct_CapTokenSeq */
+    0x67,0x2A,0x00,0x0C,                           /* [ 3956] OBJ_setct_PInitResData */
+    0x67,0x2A,0x00,0x0D,                           /* [ 3960] OBJ_setct_PI_TBS */
+    0x67,0x2A,0x00,0x0E,                           /* [ 3964] OBJ_setct_PResData */
+    0x67,0x2A,0x00,0x10,                           /* [ 3968] OBJ_setct_AuthReqTBS */
+    0x67,0x2A,0x00,0x11,                           /* [ 3972] OBJ_setct_AuthResTBS */
+    0x67,0x2A,0x00,0x12,                           /* [ 3976] OBJ_setct_AuthResTBSX */
+    0x67,0x2A,0x00,0x13,                           /* [ 3980] OBJ_setct_AuthTokenTBS */
+    0x67,0x2A,0x00,0x14,                           /* [ 3984] OBJ_setct_CapTokenData */
+    0x67,0x2A,0x00,0x15,                           /* [ 3988] OBJ_setct_CapTokenTBS */
+    0x67,0x2A,0x00,0x16,                           /* [ 3992] OBJ_setct_AcqCardCodeMsg */
+    0x67,0x2A,0x00,0x17,                           /* [ 3996] OBJ_setct_AuthRevReqTBS */
+    0x67,0x2A,0x00,0x18,                           /* [ 4000] OBJ_setct_AuthRevResData */
+    0x67,0x2A,0x00,0x19,                           /* [ 4004] OBJ_setct_AuthRevResTBS */
+    0x67,0x2A,0x00,0x1A,                           /* [ 4008] OBJ_setct_CapReqTBS */
+    0x67,0x2A,0x00,0x1B,                           /* [ 4012] OBJ_setct_CapReqTBSX */
+    0x67,0x2A,0x00,0x1C,                           /* [ 4016] OBJ_setct_CapResData */
+    0x67,0x2A,0x00,0x1D,                           /* [ 4020] OBJ_setct_CapRevReqTBS */
+    0x67,0x2A,0x00,0x1E,                           /* [ 4024] OBJ_setct_CapRevReqTBSX */
+    0x67,0x2A,0x00,0x1F,                           /* [ 4028] OBJ_setct_CapRevResData */
+    0x67,0x2A,0x00,0x20,                           /* [ 4032] OBJ_setct_CredReqTBS */
+    0x67,0x2A,0x00,0x21,                           /* [ 4036] OBJ_setct_CredReqTBSX */
+    0x67,0x2A,0x00,0x22,                           /* [ 4040] OBJ_setct_CredResData */
+    0x67,0x2A,0x00,0x23,                           /* [ 4044] OBJ_setct_CredRevReqTBS */
+    0x67,0x2A,0x00,0x24,                           /* [ 4048] OBJ_setct_CredRevReqTBSX */
+    0x67,0x2A,0x00,0x25,                           /* [ 4052] OBJ_setct_CredRevResData */
+    0x67,0x2A,0x00,0x26,                           /* [ 4056] OBJ_setct_PCertReqData */
+    0x67,0x2A,0x00,0x27,                           /* [ 4060] OBJ_setct_PCertResTBS */
+    0x67,0x2A,0x00,0x28,                           /* [ 4064] OBJ_setct_BatchAdminReqData */
+    0x67,0x2A,0x00,0x29,                           /* [ 4068] OBJ_setct_BatchAdminResData */
+    0x67,0x2A,0x00,0x2A,                           /* [ 4072] OBJ_setct_CardCInitResTBS */
+    0x67,0x2A,0x00,0x2B,                           /* [ 4076] OBJ_setct_MeAqCInitResTBS */
+    0x67,0x2A,0x00,0x2C,                           /* [ 4080] OBJ_setct_RegFormResTBS */
+    0x67,0x2A,0x00,0x2D,                           /* [ 4084] OBJ_setct_CertReqData */
+    0x67,0x2A,0x00,0x2E,                           /* [ 4088] OBJ_setct_CertReqTBS */
+    0x67,0x2A,0x00,0x2F,                           /* [ 4092] OBJ_setct_CertResData */
+    0x67,0x2A,0x00,0x30,                           /* [ 4096] OBJ_setct_CertInqReqTBS */
+    0x67,0x2A,0x00,0x31,                           /* [ 4100] OBJ_setct_ErrorTBS */
+    0x67,0x2A,0x00,0x32,                           /* [ 4104] OBJ_setct_PIDualSignedTBE */
+    0x67,0x2A,0x00,0x33,                           /* [ 4108] OBJ_setct_PIUnsignedTBE */
+    0x67,0x2A,0x00,0x34,                           /* [ 4112] OBJ_setct_AuthReqTBE */
+    0x67,0x2A,0x00,0x35,                           /* [ 4116] OBJ_setct_AuthResTBE */
+    0x67,0x2A,0x00,0x36,                           /* [ 4120] OBJ_setct_AuthResTBEX */
+    0x67,0x2A,0x00,0x37,                           /* [ 4124] OBJ_setct_AuthTokenTBE */
+    0x67,0x2A,0x00,0x38,                           /* [ 4128] OBJ_setct_CapTokenTBE */
+    0x67,0x2A,0x00,0x39,                           /* [ 4132] OBJ_setct_CapTokenTBEX */
+    0x67,0x2A,0x00,0x3A,                           /* [ 4136] OBJ_setct_AcqCardCodeMsgTBE */
+    0x67,0x2A,0x00,0x3B,                           /* [ 4140] OBJ_setct_AuthRevReqTBE */
+    0x67,0x2A,0x00,0x3C,                           /* [ 4144] OBJ_setct_AuthRevResTBE */
+    0x67,0x2A,0x00,0x3D,                           /* [ 4148] OBJ_setct_AuthRevResTBEB */
+    0x67,0x2A,0x00,0x3E,                           /* [ 4152] OBJ_setct_CapReqTBE */
+    0x67,0x2A,0x00,0x3F,                           /* [ 4156] OBJ_setct_CapReqTBEX */
+    0x67,0x2A,0x00,0x40,                           /* [ 4160] OBJ_setct_CapResTBE */
+    0x67,0x2A,0x00,0x41,                           /* [ 4164] OBJ_setct_CapRevReqTBE */
+    0x67,0x2A,0x00,0x42,                           /* [ 4168] OBJ_setct_CapRevReqTBEX */
+    0x67,0x2A,0x00,0x43,                           /* [ 4172] OBJ_setct_CapRevResTBE */
+    0x67,0x2A,0x00,0x44,                           /* [ 4176] OBJ_setct_CredReqTBE */
+    0x67,0x2A,0x00,0x45,                           /* [ 4180] OBJ_setct_CredReqTBEX */
+    0x67,0x2A,0x00,0x46,                           /* [ 4184] OBJ_setct_CredResTBE */
+    0x67,0x2A,0x00,0x47,                           /* [ 4188] OBJ_setct_CredRevReqTBE */
+    0x67,0x2A,0x00,0x48,                           /* [ 4192] OBJ_setct_CredRevReqTBEX */
+    0x67,0x2A,0x00,0x49,                           /* [ 4196] OBJ_setct_CredRevResTBE */
+    0x67,0x2A,0x00,0x4A,                           /* [ 4200] OBJ_setct_BatchAdminReqTBE */
+    0x67,0x2A,0x00,0x4B,                           /* [ 4204] OBJ_setct_BatchAdminResTBE */
+    0x67,0x2A,0x00,0x4C,                           /* [ 4208] OBJ_setct_RegFormReqTBE */
+    0x67,0x2A,0x00,0x4D,                           /* [ 4212] OBJ_setct_CertReqTBE */
+    0x67,0x2A,0x00,0x4E,                           /* [ 4216] OBJ_setct_CertReqTBEX */
+    0x67,0x2A,0x00,0x4F,                           /* [ 4220] OBJ_setct_CertResTBE */
+    0x67,0x2A,0x00,0x50,                           /* [ 4224] OBJ_setct_CRLNotificationTBS */
+    0x67,0x2A,0x00,0x51,                           /* [ 4228] OBJ_setct_CRLNotificationResTBS */
+    0x67,0x2A,0x00,0x52,                           /* [ 4232] OBJ_setct_BCIDistributionTBS */
+    0x67,0x2A,0x01,0x01,                           /* [ 4236] OBJ_setext_genCrypt */
+    0x67,0x2A,0x01,0x03,                           /* [ 4240] OBJ_setext_miAuth */
+    0x67,0x2A,0x01,0x04,                           /* [ 4244] OBJ_setext_pinSecure */
+    0x67,0x2A,0x01,0x05,                           /* [ 4248] OBJ_setext_pinAny */
+    0x67,0x2A,0x01,0x07,                           /* [ 4252] OBJ_setext_track2 */
+    0x67,0x2A,0x01,0x08,                           /* [ 4256] OBJ_setext_cv */
+    0x67,0x2A,0x05,0x00,                           /* [ 4260] OBJ_set_policy_root */
+    0x67,0x2A,0x07,0x00,                           /* [ 4264] OBJ_setCext_hashedRoot */
+    0x67,0x2A,0x07,0x01,                           /* [ 4268] OBJ_setCext_certType */
+    0x67,0x2A,0x07,0x02,                           /* [ 4272] OBJ_setCext_merchData */
+    0x67,0x2A,0x07,0x03,                           /* [ 4276] OBJ_setCext_cCertRequired */
+    0x67,0x2A,0x07,0x04,                           /* [ 4280] OBJ_setCext_tunneling */
+    0x67,0x2A,0x07,0x05,                           /* [ 4284] OBJ_setCext_setExt */
+    0x67,0x2A,0x07,0x06,                           /* [ 4288] OBJ_setCext_setQualf */
+    0x67,0x2A,0x07,0x07,                           /* [ 4292] OBJ_setCext_PGWYcapabilities */
+    0x67,0x2A,0x07,0x08,                           /* [ 4296] OBJ_setCext_TokenIdentifier */
+    0x67,0x2A,0x07,0x09,                           /* [ 4300] OBJ_setCext_Track2Data */
+    0x67,0x2A,0x07,0x0A,                           /* [ 4304] OBJ_setCext_TokenType */
+    0x67,0x2A,0x07,0x0B,                           /* [ 4308] OBJ_setCext_IssuerCapabilities */
+    0x67,0x2A,0x03,0x00,                           /* [ 4312] OBJ_setAttr_Cert */
+    0x67,0x2A,0x03,0x01,                           /* [ 4316] OBJ_setAttr_PGWYcap */
+    0x67,0x2A,0x03,0x02,                           /* [ 4320] OBJ_setAttr_TokenType */
+    0x67,0x2A,0x03,0x03,                           /* [ 4324] OBJ_setAttr_IssCap */
+    0x67,0x2A,0x03,0x00,0x00,                      /* [ 4328] OBJ_set_rootKeyThumb */
+    0x67,0x2A,0x03,0x00,0x01,                      /* [ 4333] OBJ_set_addPolicy */
+    0x67,0x2A,0x03,0x02,0x01,                      /* [ 4338] OBJ_setAttr_Token_EMV */
+    0x67,0x2A,0x03,0x02,0x02,                      /* [ 4343] OBJ_setAttr_Token_B0Prime */
+    0x67,0x2A,0x03,0x03,0x03,                      /* [ 4348] OBJ_setAttr_IssCap_CVM */
+    0x67,0x2A,0x03,0x03,0x04,                      /* [ 4353] OBJ_setAttr_IssCap_T2 */
+    0x67,0x2A,0x03,0x03,0x05,                      /* [ 4358] OBJ_setAttr_IssCap_Sig */
+    0x67,0x2A,0x03,0x03,0x03,0x01,                 /* [ 4363] OBJ_setAttr_GenCryptgrm */
+    0x67,0x2A,0x03,0x03,0x04,0x01,                 /* [ 4369] OBJ_setAttr_T2Enc */
+    0x67,0x2A,0x03,0x03,0x04,0x02,                 /* [ 4375] OBJ_setAttr_T2cleartxt */
+    0x67,0x2A,0x03,0x03,0x05,0x01,                 /* [ 4381] OBJ_setAttr_TokICCsig */
+    0x67,0x2A,0x03,0x03,0x05,0x02,                 /* [ 4387] OBJ_setAttr_SecDevSig */
+    0x67,0x2A,0x08,0x01,                           /* [ 4393] OBJ_set_brand_IATA_ATA */
+    0x67,0x2A,0x08,0x1E,                           /* [ 4397] OBJ_set_brand_Diners */
+    0x67,0x2A,0x08,0x22,                           /* [ 4401] OBJ_set_brand_AmericanExpress */
+    0x67,0x2A,0x08,0x23,                           /* [ 4405] OBJ_set_brand_JCB */
+    0x67,0x2A,0x08,0x04,                           /* [ 4409] OBJ_set_brand_Visa */
+    0x67,0x2A,0x08,0x05,                           /* [ 4413] OBJ_set_brand_MasterCard */
+    0x67,0x2A,0x08,0xAE,0x7B,                      /* [ 4417] OBJ_set_brand_Novus */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x03,0x0A,       /* [ 4422] OBJ_des_cdmf */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x06,  /* [ 4430] OBJ_rsaOAEPEncryptionSET */
+    0x67,                                          /* [ 4439] OBJ_international_organizations */
+    0x2B,0x06,0x01,0x04,0x01,0x82,0x37,0x14,0x02,0x02,  /* [ 4440] OBJ_ms_smartcard_login */
+    0x2B,0x06,0x01,0x04,0x01,0x82,0x37,0x14,0x02,0x03,  /* [ 4450] OBJ_ms_upn */
+    0x55,0x04,0x09,                                /* [ 4460] OBJ_streetAddress */
+    0x55,0x04,0x11,                                /* [ 4463] OBJ_postalCode */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x15,            /* [ 4466] OBJ_id_ppl */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x01,0x0E,       /* [ 4473] OBJ_proxyCertInfo */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x15,0x00,       /* [ 4481] OBJ_id_ppl_anyLanguage */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x15,0x01,       /* [ 4489] OBJ_id_ppl_inheritAll */
+    0x55,0x1D,0x1E,                                /* [ 4497] OBJ_name_constraints */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x15,0x02,       /* [ 4500] OBJ_Independent */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x0B,  /* [ 4508] OBJ_sha256WithRSAEncryption */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x0C,  /* [ 4517] OBJ_sha384WithRSAEncryption */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x0D,  /* [ 4526] OBJ_sha512WithRSAEncryption */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x0E,  /* [ 4535] OBJ_sha224WithRSAEncryption */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x01,  /* [ 4544] OBJ_sha256 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x02,  /* [ 4553] OBJ_sha384 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x03,  /* [ 4562] OBJ_sha512 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x04,  /* [ 4571] OBJ_sha224 */
+    0x2B,                                          /* [ 4580] OBJ_identified_organization */
+    0x2B,0x81,0x04,                                /* [ 4581] OBJ_certicom_arc */
+    0x67,0x2B,                                     /* [ 4584] OBJ_wap */
+    0x67,0x2B,0x01,                                /* [ 4586] OBJ_wap_wsg */
+    0x2A,0x86,0x48,0xCE,0x3D,0x01,0x02,0x03,       /* [ 4589] OBJ_X9_62_id_characteristic_two_basis */
+    0x2A,0x86,0x48,0xCE,0x3D,0x01,0x02,0x03,0x01,  /* [ 4597] OBJ_X9_62_onBasis */
+    0x2A,0x86,0x48,0xCE,0x3D,0x01,0x02,0x03,0x02,  /* [ 4606] OBJ_X9_62_tpBasis */
+    0x2A,0x86,0x48,0xCE,0x3D,0x01,0x02,0x03,0x03,  /* [ 4615] OBJ_X9_62_ppBasis */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x01,       /* [ 4624] OBJ_X9_62_c2pnb163v1 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x02,       /* [ 4632] OBJ_X9_62_c2pnb163v2 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x03,       /* [ 4640] OBJ_X9_62_c2pnb163v3 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x04,       /* [ 4648] OBJ_X9_62_c2pnb176v1 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x05,       /* [ 4656] OBJ_X9_62_c2tnb191v1 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x06,       /* [ 4664] OBJ_X9_62_c2tnb191v2 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x07,       /* [ 4672] OBJ_X9_62_c2tnb191v3 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x08,       /* [ 4680] OBJ_X9_62_c2onb191v4 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x09,       /* [ 4688] OBJ_X9_62_c2onb191v5 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x0A,       /* [ 4696] OBJ_X9_62_c2pnb208w1 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x0B,       /* [ 4704] OBJ_X9_62_c2tnb239v1 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x0C,       /* [ 4712] OBJ_X9_62_c2tnb239v2 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x0D,       /* [ 4720] OBJ_X9_62_c2tnb239v3 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x0E,       /* [ 4728] OBJ_X9_62_c2onb239v4 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x0F,       /* [ 4736] OBJ_X9_62_c2onb239v5 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x10,       /* [ 4744] OBJ_X9_62_c2pnb272w1 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x11,       /* [ 4752] OBJ_X9_62_c2pnb304w1 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x12,       /* [ 4760] OBJ_X9_62_c2tnb359v1 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x13,       /* [ 4768] OBJ_X9_62_c2pnb368w1 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x03,0x00,0x14,       /* [ 4776] OBJ_X9_62_c2tnb431r1 */
+    0x2B,0x81,0x04,0x00,0x06,                      /* [ 4784] OBJ_secp112r1 */
+    0x2B,0x81,0x04,0x00,0x07,                      /* [ 4789] OBJ_secp112r2 */
+    0x2B,0x81,0x04,0x00,0x1C,                      /* [ 4794] OBJ_secp128r1 */
+    0x2B,0x81,0x04,0x00,0x1D,                      /* [ 4799] OBJ_secp128r2 */
+    0x2B,0x81,0x04,0x00,0x09,                      /* [ 4804] OBJ_secp160k1 */
+    0x2B,0x81,0x04,0x00,0x08,                      /* [ 4809] OBJ_secp160r1 */
+    0x2B,0x81,0x04,0x00,0x1E,                      /* [ 4814] OBJ_secp160r2 */
+    0x2B,0x81,0x04,0x00,0x1F,                      /* [ 4819] OBJ_secp192k1 */
+    0x2B,0x81,0x04,0x00,0x20,                      /* [ 4824] OBJ_secp224k1 */
+    0x2B,0x81,0x04,0x00,0x21,                      /* [ 4829] OBJ_secp224r1 */
+    0x2B,0x81,0x04,0x00,0x0A,                      /* [ 4834] OBJ_secp256k1 */
+    0x2B,0x81,0x04,0x00,0x22,                      /* [ 4839] OBJ_secp384r1 */
+    0x2B,0x81,0x04,0x00,0x23,                      /* [ 4844] OBJ_secp521r1 */
+    0x2B,0x81,0x04,0x00,0x04,                      /* [ 4849] OBJ_sect113r1 */
+    0x2B,0x81,0x04,0x00,0x05,                      /* [ 4854] OBJ_sect113r2 */
+    0x2B,0x81,0x04,0x00,0x16,                      /* [ 4859] OBJ_sect131r1 */
+    0x2B,0x81,0x04,0x00,0x17,                      /* [ 4864] OBJ_sect131r2 */
+    0x2B,0x81,0x04,0x00,0x01,                      /* [ 4869] OBJ_sect163k1 */
+    0x2B,0x81,0x04,0x00,0x02,                      /* [ 4874] OBJ_sect163r1 */
+    0x2B,0x81,0x04,0x00,0x0F,                      /* [ 4879] OBJ_sect163r2 */
+    0x2B,0x81,0x04,0x00,0x18,                      /* [ 4884] OBJ_sect193r1 */
+    0x2B,0x81,0x04,0x00,0x19,                      /* [ 4889] OBJ_sect193r2 */
+    0x2B,0x81,0x04,0x00,0x1A,                      /* [ 4894] OBJ_sect233k1 */
+    0x2B,0x81,0x04,0x00,0x1B,                      /* [ 4899] OBJ_sect233r1 */
+    0x2B,0x81,0x04,0x00,0x03,                      /* [ 4904] OBJ_sect239k1 */
+    0x2B,0x81,0x04,0x00,0x10,                      /* [ 4909] OBJ_sect283k1 */
+    0x2B,0x81,0x04,0x00,0x11,                      /* [ 4914] OBJ_sect283r1 */
+    0x2B,0x81,0x04,0x00,0x24,                      /* [ 4919] OBJ_sect409k1 */
+    0x2B,0x81,0x04,0x00,0x25,                      /* [ 4924] OBJ_sect409r1 */
+    0x2B,0x81,0x04,0x00,0x26,                      /* [ 4929] OBJ_sect571k1 */
+    0x2B,0x81,0x04,0x00,0x27,                      /* [ 4934] OBJ_sect571r1 */
+    0x67,0x2B,0x01,0x04,0x01,                      /* [ 4939] OBJ_wap_wsg_idm_ecid_wtls1 */
+    0x67,0x2B,0x01,0x04,0x03,                      /* [ 4944] OBJ_wap_wsg_idm_ecid_wtls3 */
+    0x67,0x2B,0x01,0x04,0x04,                      /* [ 4949] OBJ_wap_wsg_idm_ecid_wtls4 */
+    0x67,0x2B,0x01,0x04,0x05,                      /* [ 4954] OBJ_wap_wsg_idm_ecid_wtls5 */
+    0x67,0x2B,0x01,0x04,0x06,                      /* [ 4959] OBJ_wap_wsg_idm_ecid_wtls6 */
+    0x67,0x2B,0x01,0x04,0x07,                      /* [ 4964] OBJ_wap_wsg_idm_ecid_wtls7 */
+    0x67,0x2B,0x01,0x04,0x08,                      /* [ 4969] OBJ_wap_wsg_idm_ecid_wtls8 */
+    0x67,0x2B,0x01,0x04,0x09,                      /* [ 4974] OBJ_wap_wsg_idm_ecid_wtls9 */
+    0x67,0x2B,0x01,0x04,0x0A,                      /* [ 4979] OBJ_wap_wsg_idm_ecid_wtls10 */
+    0x67,0x2B,0x01,0x04,0x0B,                      /* [ 4984] OBJ_wap_wsg_idm_ecid_wtls11 */
+    0x67,0x2B,0x01,0x04,0x0C,                      /* [ 4989] OBJ_wap_wsg_idm_ecid_wtls12 */
+    0x55,0x1D,0x20,0x00,                           /* [ 4994] OBJ_any_policy */
+    0x55,0x1D,0x21,                                /* [ 4998] OBJ_policy_mappings */
+    0x55,0x1D,0x36,                                /* [ 5001] OBJ_inhibit_any_policy */
+    0x2A,0x83,0x08,0x8C,0x9A,0x4B,0x3D,0x01,0x01,0x01,0x02,  /* [ 5004] OBJ_camellia_128_cbc */
+    0x2A,0x83,0x08,0x8C,0x9A,0x4B,0x3D,0x01,0x01,0x01,0x03,  /* [ 5015] OBJ_camellia_192_cbc */
+    0x2A,0x83,0x08,0x8C,0x9A,0x4B,0x3D,0x01,0x01,0x01,0x04,  /* [ 5026] OBJ_camellia_256_cbc */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x01,       /* [ 5037] OBJ_camellia_128_ecb */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x15,       /* [ 5045] OBJ_camellia_192_ecb */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x29,       /* [ 5053] OBJ_camellia_256_ecb */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x04,       /* [ 5061] OBJ_camellia_128_cfb128 */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x18,       /* [ 5069] OBJ_camellia_192_cfb128 */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x2C,       /* [ 5077] OBJ_camellia_256_cfb128 */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x03,       /* [ 5085] OBJ_camellia_128_ofb128 */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x17,       /* [ 5093] OBJ_camellia_192_ofb128 */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x2B,       /* [ 5101] OBJ_camellia_256_ofb128 */
+    0x55,0x1D,0x09,                                /* [ 5109] OBJ_subject_directory_attributes */
+    0x55,0x1D,0x1C,                                /* [ 5112] OBJ_issuing_distribution_point */
+    0x55,0x1D,0x1D,                                /* [ 5115] OBJ_certificate_issuer */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x44,                 /* [ 5118] OBJ_kisa */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x44,0x01,0x03,       /* [ 5124] OBJ_seed_ecb */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x44,0x01,0x04,       /* [ 5132] OBJ_seed_cbc */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x44,0x01,0x06,       /* [ 5140] OBJ_seed_ofb128 */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x44,0x01,0x05,       /* [ 5148] OBJ_seed_cfb128 */
+    0x2B,0x06,0x01,0x05,0x05,0x08,0x01,0x01,       /* [ 5156] OBJ_hmac_md5 */
+    0x2B,0x06,0x01,0x05,0x05,0x08,0x01,0x02,       /* [ 5164] OBJ_hmac_sha1 */
+    0x2A,0x86,0x48,0x86,0xF6,0x7D,0x07,0x42,0x0D,  /* [ 5172] OBJ_id_PasswordBasedMAC */
+    0x2A,0x86,0x48,0x86,0xF6,0x7D,0x07,0x42,0x1E,  /* [ 5181] OBJ_id_DHBasedMac */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x04,0x10,       /* [ 5190] OBJ_id_it_suppLangTags */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x30,0x05,       /* [ 5198] OBJ_caRepository */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x01,0x09,  /* [ 5206] OBJ_id_smime_ct_compressedData */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x01,0x1B,  /* [ 5217] OBJ_id_ct_asciiTextWithCRLF */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x05,  /* [ 5228] OBJ_id_aes128_wrap */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x19,  /* [ 5237] OBJ_id_aes192_wrap */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x2D,  /* [ 5246] OBJ_id_aes256_wrap */
+    0x2A,0x86,0x48,0xCE,0x3D,0x04,0x02,            /* [ 5255] OBJ_ecdsa_with_Recommended */
+    0x2A,0x86,0x48,0xCE,0x3D,0x04,0x03,            /* [ 5262] OBJ_ecdsa_with_Specified */
+    0x2A,0x86,0x48,0xCE,0x3D,0x04,0x03,0x01,       /* [ 5269] OBJ_ecdsa_with_SHA224 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x04,0x03,0x02,       /* [ 5277] OBJ_ecdsa_with_SHA256 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x04,0x03,0x03,       /* [ 5285] OBJ_ecdsa_with_SHA384 */
+    0x2A,0x86,0x48,0xCE,0x3D,0x04,0x03,0x04,       /* [ 5293] OBJ_ecdsa_with_SHA512 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x02,0x06,       /* [ 5301] OBJ_hmacWithMD5 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x02,0x08,       /* [ 5309] OBJ_hmacWithSHA224 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x02,0x09,       /* [ 5317] OBJ_hmacWithSHA256 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x02,0x0A,       /* [ 5325] OBJ_hmacWithSHA384 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x02,0x0B,       /* [ 5333] OBJ_hmacWithSHA512 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x03,0x01,  /* [ 5341] OBJ_dsa_with_SHA224 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x03,0x02,  /* [ 5350] OBJ_dsa_with_SHA256 */
+    0x28,0xCF,0x06,0x03,0x00,0x37,                 /* [ 5359] OBJ_whirlpool */
+    0x2A,0x85,0x03,0x02,0x02,                      /* [ 5365] OBJ_cryptopro */
+    0x2A,0x85,0x03,0x02,0x09,                      /* [ 5370] OBJ_cryptocom */
+    0x2A,0x85,0x03,0x02,0x02,0x03,                 /* [ 5375] OBJ_id_GostR3411_94_with_GostR3410_2001 */
+    0x2A,0x85,0x03,0x02,0x02,0x04,                 /* [ 5381] OBJ_id_GostR3411_94_with_GostR3410_94 */
+    0x2A,0x85,0x03,0x02,0x02,0x09,                 /* [ 5387] OBJ_id_GostR3411_94 */
+    0x2A,0x85,0x03,0x02,0x02,0x0A,                 /* [ 5393] OBJ_id_HMACGostR3411_94 */
+    0x2A,0x85,0x03,0x02,0x02,0x13,                 /* [ 5399] OBJ_id_GostR3410_2001 */
+    0x2A,0x85,0x03,0x02,0x02,0x14,                 /* [ 5405] OBJ_id_GostR3410_94 */
+    0x2A,0x85,0x03,0x02,0x02,0x15,                 /* [ 5411] OBJ_id_Gost28147_89 */
+    0x2A,0x85,0x03,0x02,0x02,0x16,                 /* [ 5417] OBJ_id_Gost28147_89_MAC */
+    0x2A,0x85,0x03,0x02,0x02,0x17,                 /* [ 5423] OBJ_id_GostR3411_94_prf */
+    0x2A,0x85,0x03,0x02,0x02,0x62,                 /* [ 5429] OBJ_id_GostR3410_2001DH */
+    0x2A,0x85,0x03,0x02,0x02,0x63,                 /* [ 5435] OBJ_id_GostR3410_94DH */
+    0x2A,0x85,0x03,0x02,0x02,0x0E,0x01,            /* [ 5441] OBJ_id_Gost28147_89_CryptoPro_KeyMeshing */
+    0x2A,0x85,0x03,0x02,0x02,0x0E,0x00,            /* [ 5448] OBJ_id_Gost28147_89_None_KeyMeshing */
+    0x2A,0x85,0x03,0x02,0x02,0x1E,0x00,            /* [ 5455] OBJ_id_GostR3411_94_TestParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x1E,0x01,            /* [ 5462] OBJ_id_GostR3411_94_CryptoProParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x1F,0x00,            /* [ 5469] OBJ_id_Gost28147_89_TestParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x1F,0x01,            /* [ 5476] OBJ_id_Gost28147_89_CryptoPro_A_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x1F,0x02,            /* [ 5483] OBJ_id_Gost28147_89_CryptoPro_B_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x1F,0x03,            /* [ 5490] OBJ_id_Gost28147_89_CryptoPro_C_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x1F,0x04,            /* [ 5497] OBJ_id_Gost28147_89_CryptoPro_D_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x1F,0x05,            /* [ 5504] OBJ_id_Gost28147_89_CryptoPro_Oscar_1_1_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x1F,0x06,            /* [ 5511] OBJ_id_Gost28147_89_CryptoPro_Oscar_1_0_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x1F,0x07,            /* [ 5518] OBJ_id_Gost28147_89_CryptoPro_RIC_1_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x20,0x00,            /* [ 5525] OBJ_id_GostR3410_94_TestParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x20,0x02,            /* [ 5532] OBJ_id_GostR3410_94_CryptoPro_A_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x20,0x03,            /* [ 5539] OBJ_id_GostR3410_94_CryptoPro_B_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x20,0x04,            /* [ 5546] OBJ_id_GostR3410_94_CryptoPro_C_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x20,0x05,            /* [ 5553] OBJ_id_GostR3410_94_CryptoPro_D_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x21,0x01,            /* [ 5560] OBJ_id_GostR3410_94_CryptoPro_XchA_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x21,0x02,            /* [ 5567] OBJ_id_GostR3410_94_CryptoPro_XchB_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x21,0x03,            /* [ 5574] OBJ_id_GostR3410_94_CryptoPro_XchC_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x23,0x00,            /* [ 5581] OBJ_id_GostR3410_2001_TestParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x23,0x01,            /* [ 5588] OBJ_id_GostR3410_2001_CryptoPro_A_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x23,0x02,            /* [ 5595] OBJ_id_GostR3410_2001_CryptoPro_B_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x23,0x03,            /* [ 5602] OBJ_id_GostR3410_2001_CryptoPro_C_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x24,0x00,            /* [ 5609] OBJ_id_GostR3410_2001_CryptoPro_XchA_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x24,0x01,            /* [ 5616] OBJ_id_GostR3410_2001_CryptoPro_XchB_ParamSet */
+    0x2A,0x85,0x03,0x02,0x02,0x14,0x01,            /* [ 5623] OBJ_id_GostR3410_94_a */
+    0x2A,0x85,0x03,0x02,0x02,0x14,0x02,            /* [ 5630] OBJ_id_GostR3410_94_aBis */
+    0x2A,0x85,0x03,0x02,0x02,0x14,0x03,            /* [ 5637] OBJ_id_GostR3410_94_b */
+    0x2A,0x85,0x03,0x02,0x02,0x14,0x04,            /* [ 5644] OBJ_id_GostR3410_94_bBis */
+    0x2A,0x85,0x03,0x02,0x09,0x01,0x06,0x01,       /* [ 5651] OBJ_id_Gost28147_89_cc */
+    0x2A,0x85,0x03,0x02,0x09,0x01,0x05,0x03,       /* [ 5659] OBJ_id_GostR3410_94_cc */
+    0x2A,0x85,0x03,0x02,0x09,0x01,0x05,0x04,       /* [ 5667] OBJ_id_GostR3410_2001_cc */
+    0x2A,0x85,0x03,0x02,0x09,0x01,0x03,0x03,       /* [ 5675] OBJ_id_GostR3411_94_with_GostR3410_94_cc */
+    0x2A,0x85,0x03,0x02,0x09,0x01,0x03,0x04,       /* [ 5683] OBJ_id_GostR3411_94_with_GostR3410_2001_cc */
+    0x2A,0x85,0x03,0x02,0x09,0x01,0x08,0x01,       /* [ 5691] OBJ_id_GostR3410_2001_ParamSet_cc */
+    0x2B,0x06,0x01,0x04,0x01,0x82,0x37,0x11,0x02,  /* [ 5699] OBJ_LocalKeySet */
+    0x55,0x1D,0x2E,                                /* [ 5708] OBJ_freshest_crl */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x08,0x03,       /* [ 5711] OBJ_id_on_permanentIdentifier */
+    0x55,0x04,0x0E,                                /* [ 5719] OBJ_searchGuide */
+    0x55,0x04,0x0F,                                /* [ 5722] OBJ_businessCategory */
+    0x55,0x04,0x10,                                /* [ 5725] OBJ_postalAddress */
+    0x55,0x04,0x12,                                /* [ 5728] OBJ_postOfficeBox */
+    0x55,0x04,0x13,                                /* [ 5731] OBJ_physicalDeliveryOfficeName */
+    0x55,0x04,0x14,                                /* [ 5734] OBJ_telephoneNumber */
+    0x55,0x04,0x15,                                /* [ 5737] OBJ_telexNumber */
+    0x55,0x04,0x16,                                /* [ 5740] OBJ_teletexTerminalIdentifier */
+    0x55,0x04,0x17,                                /* [ 5743] OBJ_facsimileTelephoneNumber */
+    0x55,0x04,0x18,                                /* [ 5746] OBJ_x121Address */
+    0x55,0x04,0x19,                                /* [ 5749] OBJ_internationaliSDNNumber */
+    0x55,0x04,0x1A,                                /* [ 5752] OBJ_registeredAddress */
+    0x55,0x04,0x1B,                                /* [ 5755] OBJ_destinationIndicator */
+    0x55,0x04,0x1C,                                /* [ 5758] OBJ_preferredDeliveryMethod */
+    0x55,0x04,0x1D,                                /* [ 5761] OBJ_presentationAddress */
+    0x55,0x04,0x1E,                                /* [ 5764] OBJ_supportedApplicationContext */
+    0x55,0x04,0x1F,                                /* [ 5767] OBJ_member */
+    0x55,0x04,0x20,                                /* [ 5770] OBJ_owner */
+    0x55,0x04,0x21,                                /* [ 5773] OBJ_roleOccupant */
+    0x55,0x04,0x22,                                /* [ 5776] OBJ_seeAlso */
+    0x55,0x04,0x23,                                /* [ 5779] OBJ_userPassword */
+    0x55,0x04,0x24,                                /* [ 5782] OBJ_userCertificate */
+    0x55,0x04,0x25,                                /* [ 5785] OBJ_cACertificate */
+    0x55,0x04,0x26,                                /* [ 5788] OBJ_authorityRevocationList */
+    0x55,0x04,0x27,                                /* [ 5791] OBJ_certificateRevocationList */
+    0x55,0x04,0x28,                                /* [ 5794] OBJ_crossCertificatePair */
+    0x55,0x04,0x2F,                                /* [ 5797] OBJ_enhancedSearchGuide */
+    0x55,0x04,0x30,                                /* [ 5800] OBJ_protocolInformation */
+    0x55,0x04,0x31,                                /* [ 5803] OBJ_distinguishedName */
+    0x55,0x04,0x32,                                /* [ 5806] OBJ_uniqueMember */
+    0x55,0x04,0x33,                                /* [ 5809] OBJ_houseIdentifier */
+    0x55,0x04,0x34,                                /* [ 5812] OBJ_supportedAlgorithms */
+    0x55,0x04,0x35,                                /* [ 5815] OBJ_deltaRevocationList */
+    0x55,0x04,0x36,                                /* [ 5818] OBJ_dmdName */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x03,0x09,  /* [ 5821] OBJ_id_alg_PWRI_KEK */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x06,  /* [ 5832] OBJ_aes_128_gcm */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x07,  /* [ 5841] OBJ_aes_128_ccm */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x08,  /* [ 5850] OBJ_id_aes128_wrap_pad */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x1A,  /* [ 5859] OBJ_aes_192_gcm */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x1B,  /* [ 5868] OBJ_aes_192_ccm */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x1C,  /* [ 5877] OBJ_id_aes192_wrap_pad */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x2E,  /* [ 5886] OBJ_aes_256_gcm */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x2F,  /* [ 5895] OBJ_aes_256_ccm */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x01,0x30,  /* [ 5904] OBJ_id_aes256_wrap_pad */
+    0x2A,0x83,0x08,0x8C,0x9A,0x4B,0x3D,0x01,0x01,0x03,0x02,  /* [ 5913] OBJ_id_camellia128_wrap */
+    0x2A,0x83,0x08,0x8C,0x9A,0x4B,0x3D,0x01,0x01,0x03,0x03,  /* [ 5924] OBJ_id_camellia192_wrap */
+    0x2A,0x83,0x08,0x8C,0x9A,0x4B,0x3D,0x01,0x01,0x03,0x04,  /* [ 5935] OBJ_id_camellia256_wrap */
+    0x55,0x1D,0x25,0x00,                           /* [ 5946] OBJ_anyExtendedKeyUsage */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x08,  /* [ 5950] OBJ_mgf1 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x0A,  /* [ 5959] OBJ_rsassaPss */
+    0x2B,0x6F,0x02,0x8C,0x53,0x00,0x01,0x01,       /* [ 5968] OBJ_aes_128_xts */
+    0x2B,0x6F,0x02,0x8C,0x53,0x00,0x01,0x02,       /* [ 5976] OBJ_aes_256_xts */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x07,  /* [ 5984] OBJ_rsaesOaep */
+    0x2A,0x86,0x48,0xCE,0x3E,0x02,0x01,            /* [ 5993] OBJ_dhpublicnumber */
+    0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x01,  /* [ 6000] OBJ_brainpoolP160r1 */
+    0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x02,  /* [ 6009] OBJ_brainpoolP160t1 */
+    0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x03,  /* [ 6018] OBJ_brainpoolP192r1 */
+    0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x04,  /* [ 6027] OBJ_brainpoolP192t1 */
+    0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x05,  /* [ 6036] OBJ_brainpoolP224r1 */
+    0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x06,  /* [ 6045] OBJ_brainpoolP224t1 */
+    0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x07,  /* [ 6054] OBJ_brainpoolP256r1 */
+    0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x08,  /* [ 6063] OBJ_brainpoolP256t1 */
+    0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x09,  /* [ 6072] OBJ_brainpoolP320r1 */
+    0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x0A,  /* [ 6081] OBJ_brainpoolP320t1 */
+    0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x0B,  /* [ 6090] OBJ_brainpoolP384r1 */
+    0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x0C,  /* [ 6099] OBJ_brainpoolP384t1 */
+    0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x0D,  /* [ 6108] OBJ_brainpoolP512r1 */
+    0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x0E,  /* [ 6117] OBJ_brainpoolP512t1 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x09,  /* [ 6126] OBJ_pSpecified */
+    0x2B,0x81,0x05,0x10,0x86,0x48,0x3F,0x00,0x02,  /* [ 6135] OBJ_dhSinglePass_stdDH_sha1kdf_scheme */
+    0x2B,0x81,0x04,0x01,0x0B,0x00,                 /* [ 6144] OBJ_dhSinglePass_stdDH_sha224kdf_scheme */
+    0x2B,0x81,0x04,0x01,0x0B,0x01,                 /* [ 6150] OBJ_dhSinglePass_stdDH_sha256kdf_scheme */
+    0x2B,0x81,0x04,0x01,0x0B,0x02,                 /* [ 6156] OBJ_dhSinglePass_stdDH_sha384kdf_scheme */
+    0x2B,0x81,0x04,0x01,0x0B,0x03,                 /* [ 6162] OBJ_dhSinglePass_stdDH_sha512kdf_scheme */
+    0x2B,0x81,0x05,0x10,0x86,0x48,0x3F,0x00,0x03,  /* [ 6168] OBJ_dhSinglePass_cofactorDH_sha1kdf_scheme */
+    0x2B,0x81,0x04,0x01,0x0E,0x00,                 /* [ 6177] OBJ_dhSinglePass_cofactorDH_sha224kdf_scheme */
+    0x2B,0x81,0x04,0x01,0x0E,0x01,                 /* [ 6183] OBJ_dhSinglePass_cofactorDH_sha256kdf_scheme */
+    0x2B,0x81,0x04,0x01,0x0E,0x02,                 /* [ 6189] OBJ_dhSinglePass_cofactorDH_sha384kdf_scheme */
+    0x2B,0x81,0x04,0x01,0x0E,0x03,                 /* [ 6195] OBJ_dhSinglePass_cofactorDH_sha512kdf_scheme */
+    0x2B,0x06,0x01,0x04,0x01,0xD6,0x79,0x02,0x04,0x02,  /* [ 6201] OBJ_ct_precert_scts */
+    0x2B,0x06,0x01,0x04,0x01,0xD6,0x79,0x02,0x04,0x03,  /* [ 6211] OBJ_ct_precert_poison */
+    0x2B,0x06,0x01,0x04,0x01,0xD6,0x79,0x02,0x04,0x04,  /* [ 6221] OBJ_ct_precert_signer */
+    0x2B,0x06,0x01,0x04,0x01,0xD6,0x79,0x02,0x04,0x05,  /* [ 6231] OBJ_ct_cert_scts */
+    0x2B,0x06,0x01,0x04,0x01,0x82,0x37,0x3C,0x02,0x01,0x01,  /* [ 6241] OBJ_jurisdictionLocalityName */
+    0x2B,0x06,0x01,0x04,0x01,0x82,0x37,0x3C,0x02,0x01,0x02,  /* [ 6252] OBJ_jurisdictionStateOrProvinceName */
+    0x2B,0x06,0x01,0x04,0x01,0x82,0x37,0x3C,0x02,0x01,0x03,  /* [ 6263] OBJ_jurisdictionCountryName */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x06,       /* [ 6274] OBJ_camellia_128_gcm */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x07,       /* [ 6282] OBJ_camellia_128_ccm */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x09,       /* [ 6290] OBJ_camellia_128_ctr */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x0A,       /* [ 6298] OBJ_camellia_128_cmac */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x1A,       /* [ 6306] OBJ_camellia_192_gcm */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x1B,       /* [ 6314] OBJ_camellia_192_ccm */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x1D,       /* [ 6322] OBJ_camellia_192_ctr */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x1E,       /* [ 6330] OBJ_camellia_192_cmac */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x2E,       /* [ 6338] OBJ_camellia_256_gcm */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x2F,       /* [ 6346] OBJ_camellia_256_ccm */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x31,       /* [ 6354] OBJ_camellia_256_ctr */
+    0x03,0xA2,0x31,0x05,0x03,0x01,0x09,0x32,       /* [ 6362] OBJ_camellia_256_cmac */
+    0x2B,0x06,0x01,0x04,0x01,0xDA,0x47,0x04,0x0B,  /* [ 6370] OBJ_id_scrypt */
+    0x2A,0x85,0x03,0x07,0x01,                      /* [ 6379] OBJ_id_tc26 */
+    0x2A,0x85,0x03,0x07,0x01,0x01,                 /* [ 6384] OBJ_id_tc26_algorithms */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x01,            /* [ 6390] OBJ_id_tc26_sign */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x01,0x01,       /* [ 6397] OBJ_id_GostR3410_2012_256 */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x01,0x02,       /* [ 6405] OBJ_id_GostR3410_2012_512 */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x02,            /* [ 6413] OBJ_id_tc26_digest */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x02,0x02,       /* [ 6420] OBJ_id_GostR3411_2012_256 */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x02,0x03,       /* [ 6428] OBJ_id_GostR3411_2012_512 */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x03,            /* [ 6436] OBJ_id_tc26_signwithdigest */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x03,0x02,       /* [ 6443] OBJ_id_tc26_signwithdigest_gost3410_2012_256 */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x03,0x03,       /* [ 6451] OBJ_id_tc26_signwithdigest_gost3410_2012_512 */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x04,            /* [ 6459] OBJ_id_tc26_mac */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x04,0x01,       /* [ 6466] OBJ_id_tc26_hmac_gost_3411_2012_256 */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x04,0x02,       /* [ 6474] OBJ_id_tc26_hmac_gost_3411_2012_512 */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x05,            /* [ 6482] OBJ_id_tc26_cipher */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x06,            /* [ 6489] OBJ_id_tc26_agreement */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x06,0x01,       /* [ 6496] OBJ_id_tc26_agreement_gost_3410_2012_256 */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x06,0x02,       /* [ 6504] OBJ_id_tc26_agreement_gost_3410_2012_512 */
+    0x2A,0x85,0x03,0x07,0x01,0x02,                 /* [ 6512] OBJ_id_tc26_constants */
+    0x2A,0x85,0x03,0x07,0x01,0x02,0x01,            /* [ 6518] OBJ_id_tc26_sign_constants */
+    0x2A,0x85,0x03,0x07,0x01,0x02,0x01,0x02,       /* [ 6525] OBJ_id_tc26_gost_3410_2012_512_constants */
+    0x2A,0x85,0x03,0x07,0x01,0x02,0x01,0x02,0x00,  /* [ 6533] OBJ_id_tc26_gost_3410_2012_512_paramSetTest */
+    0x2A,0x85,0x03,0x07,0x01,0x02,0x01,0x02,0x01,  /* [ 6542] OBJ_id_tc26_gost_3410_2012_512_paramSetA */
+    0x2A,0x85,0x03,0x07,0x01,0x02,0x01,0x02,0x02,  /* [ 6551] OBJ_id_tc26_gost_3410_2012_512_paramSetB */
+    0x2A,0x85,0x03,0x07,0x01,0x02,0x02,            /* [ 6560] OBJ_id_tc26_digest_constants */
+    0x2A,0x85,0x03,0x07,0x01,0x02,0x05,            /* [ 6567] OBJ_id_tc26_cipher_constants */
+    0x2A,0x85,0x03,0x07,0x01,0x02,0x05,0x01,       /* [ 6574] OBJ_id_tc26_gost_28147_constants */
+    0x2A,0x85,0x03,0x07,0x01,0x02,0x05,0x01,0x01,  /* [ 6582] OBJ_id_tc26_gost_28147_param_Z */
+    0x2A,0x85,0x03,0x03,0x81,0x03,0x01,0x01,       /* [ 6591] OBJ_INN */
+    0x2A,0x85,0x03,0x64,0x01,                      /* [ 6599] OBJ_OGRN */
+    0x2A,0x85,0x03,0x64,0x03,                      /* [ 6604] OBJ_SNILS */
+    0x2A,0x85,0x03,0x64,0x6F,                      /* [ 6609] OBJ_subjectSignTool */
+    0x2A,0x85,0x03,0x64,0x70,                      /* [ 6614] OBJ_issuerSignTool */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x01,0x18,       /* [ 6619] OBJ_tlsfeature */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x11,       /* [ 6627] OBJ_ipsec_IKE */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x12,       /* [ 6635] OBJ_capwapAC */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x13,       /* [ 6643] OBJ_capwapWTP */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x15,       /* [ 6651] OBJ_sshClient */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x16,       /* [ 6659] OBJ_sshServer */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x17,       /* [ 6667] OBJ_sendRouter */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x18,       /* [ 6675] OBJ_sendProxiedRouter */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x19,       /* [ 6683] OBJ_sendOwner */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x1A,       /* [ 6691] OBJ_sendProxiedOwner */
+    0x2B,0x06,0x01,0x05,0x02,0x03,                 /* [ 6699] OBJ_id_pkinit */
+    0x2B,0x06,0x01,0x05,0x02,0x03,0x04,            /* [ 6705] OBJ_pkInitClientAuth */
+    0x2B,0x06,0x01,0x05,0x02,0x03,0x05,            /* [ 6712] OBJ_pkInitKDC */
+    0x2B,0x65,0x6E,                                /* [ 6719] OBJ_X25519 */
+    0x2B,0x65,0x6F,                                /* [ 6722] OBJ_X448 */
+    0x2B,0x06,0x01,0x04,0x01,0x8D,0x3A,0x0C,0x02,0x01,0x10,  /* [ 6725] OBJ_blake2b512 */
+    0x2B,0x06,0x01,0x04,0x01,0x8D,0x3A,0x0C,0x02,0x02,0x08,  /* [ 6736] OBJ_blake2s256 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x01,0x13,  /* [ 6747] OBJ_id_smime_ct_contentCollection */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x01,0x17,  /* [ 6758] OBJ_id_smime_ct_authEnvelopedData */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x01,0x1C,  /* [ 6769] OBJ_id_ct_xml */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x01,  /* [ 6780] OBJ_aria_128_ecb */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x02,  /* [ 6789] OBJ_aria_128_cbc */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x03,  /* [ 6798] OBJ_aria_128_cfb128 */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x04,  /* [ 6807] OBJ_aria_128_ofb128 */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x05,  /* [ 6816] OBJ_aria_128_ctr */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x06,  /* [ 6825] OBJ_aria_192_ecb */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x07,  /* [ 6834] OBJ_aria_192_cbc */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x08,  /* [ 6843] OBJ_aria_192_cfb128 */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x09,  /* [ 6852] OBJ_aria_192_ofb128 */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x0A,  /* [ 6861] OBJ_aria_192_ctr */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x0B,  /* [ 6870] OBJ_aria_256_ecb */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x0C,  /* [ 6879] OBJ_aria_256_cbc */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x0D,  /* [ 6888] OBJ_aria_256_cfb128 */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x0E,  /* [ 6897] OBJ_aria_256_ofb128 */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x0F,  /* [ 6906] OBJ_aria_256_ctr */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x09,0x10,0x02,0x2F,  /* [ 6915] OBJ_id_smime_aa_signingCertificateV2 */
+    0x2B,0x65,0x70,                                /* [ 6926] OBJ_ED25519 */
+    0x2B,0x65,0x71,                                /* [ 6929] OBJ_ED448 */
+    0x55,0x04,0x61,                                /* [ 6932] OBJ_organizationIdentifier */
+    0x55,0x04,0x62,                                /* [ 6935] OBJ_countryCode3c */
+    0x55,0x04,0x63,                                /* [ 6938] OBJ_countryCode3n */
+    0x55,0x04,0x64,                                /* [ 6941] OBJ_dnsName */
+    0x2B,0x24,0x08,0x03,0x03,                      /* [ 6944] OBJ_x509ExtAdmission */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x05,  /* [ 6949] OBJ_sha512_224 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x06,  /* [ 6958] OBJ_sha512_256 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x07,  /* [ 6967] OBJ_sha3_224 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x08,  /* [ 6976] OBJ_sha3_256 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x09,  /* [ 6985] OBJ_sha3_384 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x0A,  /* [ 6994] OBJ_sha3_512 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x0B,  /* [ 7003] OBJ_shake128 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x0C,  /* [ 7012] OBJ_shake256 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x0D,  /* [ 7021] OBJ_hmac_sha3_224 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x0E,  /* [ 7030] OBJ_hmac_sha3_256 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x0F,  /* [ 7039] OBJ_hmac_sha3_384 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x02,0x10,  /* [ 7048] OBJ_hmac_sha3_512 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x03,0x03,  /* [ 7057] OBJ_dsa_with_SHA384 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x03,0x04,  /* [ 7066] OBJ_dsa_with_SHA512 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x03,0x05,  /* [ 7075] OBJ_dsa_with_SHA3_224 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x03,0x06,  /* [ 7084] OBJ_dsa_with_SHA3_256 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x03,0x07,  /* [ 7093] OBJ_dsa_with_SHA3_384 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x03,0x08,  /* [ 7102] OBJ_dsa_with_SHA3_512 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x03,0x09,  /* [ 7111] OBJ_ecdsa_with_SHA3_224 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x03,0x0A,  /* [ 7120] OBJ_ecdsa_with_SHA3_256 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x03,0x0B,  /* [ 7129] OBJ_ecdsa_with_SHA3_384 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x03,0x0C,  /* [ 7138] OBJ_ecdsa_with_SHA3_512 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x03,0x0D,  /* [ 7147] OBJ_RSA_SHA3_224 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x03,0x0E,  /* [ 7156] OBJ_RSA_SHA3_256 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x03,0x0F,  /* [ 7165] OBJ_RSA_SHA3_384 */
+    0x60,0x86,0x48,0x01,0x65,0x03,0x04,0x03,0x10,  /* [ 7174] OBJ_RSA_SHA3_512 */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x25,  /* [ 7183] OBJ_aria_128_ccm */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x26,  /* [ 7192] OBJ_aria_192_ccm */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x27,  /* [ 7201] OBJ_aria_256_ccm */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x22,  /* [ 7210] OBJ_aria_128_gcm */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x23,  /* [ 7219] OBJ_aria_192_gcm */
+    0x2A,0x83,0x1A,0x8C,0x9A,0x6E,0x01,0x01,0x24,  /* [ 7228] OBJ_aria_256_gcm */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x1B,       /* [ 7237] OBJ_cmcCA */
+    0x2B,0x06,0x01,0x05,0x05,0x07,0x03,0x1C,       /* [ 7245] OBJ_cmcRA */
+    0x2A,0x81,0x1C,0xCF,0x55,0x01,0x68,0x01,       /* [ 7253] OBJ_sm4_ecb */
+    0x2A,0x81,0x1C,0xCF,0x55,0x01,0x68,0x02,       /* [ 7261] OBJ_sm4_cbc */
+    0x2A,0x81,0x1C,0xCF,0x55,0x01,0x68,0x03,       /* [ 7269] OBJ_sm4_ofb128 */
+    0x2A,0x81,0x1C,0xCF,0x55,0x01,0x68,0x05,       /* [ 7277] OBJ_sm4_cfb1 */
+    0x2A,0x81,0x1C,0xCF,0x55,0x01,0x68,0x04,       /* [ 7285] OBJ_sm4_cfb128 */
+    0x2A,0x81,0x1C,0xCF,0x55,0x01,0x68,0x06,       /* [ 7293] OBJ_sm4_cfb8 */
+    0x2A,0x81,0x1C,0xCF,0x55,0x01,0x68,0x07,       /* [ 7301] OBJ_sm4_ctr */
+    0x2A,0x81,0x1C,                                /* [ 7309] OBJ_ISO_CN */
+    0x2A,0x81,0x1C,0xCF,0x55,                      /* [ 7312] OBJ_oscca */
+    0x2A,0x81,0x1C,0xCF,0x55,0x01,                 /* [ 7317] OBJ_sm_scheme */
+    0x2A,0x81,0x1C,0xCF,0x55,0x01,0x83,0x11,       /* [ 7323] OBJ_sm3 */
+    0x2A,0x81,0x1C,0xCF,0x55,0x01,0x83,0x78,       /* [ 7331] OBJ_sm3WithRSAEncryption */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x0F,  /* [ 7339] OBJ_sha512_224WithRSAEncryption */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x10,  /* [ 7348] OBJ_sha512_256WithRSAEncryption */
+    0x2A,0x85,0x03,0x07,0x01,0x02,0x01,0x01,       /* [ 7357] OBJ_id_tc26_gost_3410_2012_256_constants */
+    0x2A,0x85,0x03,0x07,0x01,0x02,0x01,0x01,0x01,  /* [ 7365] OBJ_id_tc26_gost_3410_2012_256_paramSetA */
+    0x2A,0x85,0x03,0x07,0x01,0x02,0x01,0x02,0x03,  /* [ 7374] OBJ_id_tc26_gost_3410_2012_512_paramSetC */
+    0x2A,0x86,0x24,                                /* [ 7383] OBJ_ISO_UA */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,            /* [ 7386] OBJ_ua_pki */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x01,0x01,  /* [ 7393] OBJ_dstu28147 */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x01,0x01,0x02,  /* [ 7403] OBJ_dstu28147_ofb */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x01,0x01,0x03,  /* [ 7414] OBJ_dstu28147_cfb */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x01,0x01,0x05,  /* [ 7425] OBJ_dstu28147_wrap */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x01,0x02,  /* [ 7436] OBJ_hmacWithDstu34311 */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x02,0x01,  /* [ 7446] OBJ_dstu34311 */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x03,0x01,0x01,  /* [ 7456] OBJ_dstu4145le */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x03,0x01,0x01,0x01,0x01,  /* [ 7467] OBJ_dstu4145be */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x03,0x01,0x01,0x02,0x00,  /* [ 7480] OBJ_uacurve0 */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x03,0x01,0x01,0x02,0x01,  /* [ 7493] OBJ_uacurve1 */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x03,0x01,0x01,0x02,0x02,  /* [ 7506] OBJ_uacurve2 */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x03,0x01,0x01,0x02,0x03,  /* [ 7519] OBJ_uacurve3 */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x03,0x01,0x01,0x02,0x04,  /* [ 7532] OBJ_uacurve4 */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x03,0x01,0x01,0x02,0x05,  /* [ 7545] OBJ_uacurve5 */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x03,0x01,0x01,0x02,0x06,  /* [ 7558] OBJ_uacurve6 */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x03,0x01,0x01,0x02,0x07,  /* [ 7571] OBJ_uacurve7 */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x03,0x01,0x01,0x02,0x08,  /* [ 7584] OBJ_uacurve8 */
+    0x2A,0x86,0x24,0x02,0x01,0x01,0x01,0x01,0x03,0x01,0x01,0x02,0x09,  /* [ 7597] OBJ_uacurve9 */
+    0x2B,0x6F,                                     /* [ 7610] OBJ_ieee */
+    0x2B,0x6F,0x02,0x8C,0x53,                      /* [ 7612] OBJ_ieee_siswg */
+    0x2A,0x81,0x1C,0xCF,0x55,0x01,0x82,0x2D,       /* [ 7617] OBJ_sm2 */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x05,0x01,       /* [ 7625] OBJ_id_tc26_cipher_gostr3412_2015_magma */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x05,0x01,0x01,  /* [ 7633] OBJ_id_tc26_cipher_gostr3412_2015_magma_ctracpkm */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x05,0x01,0x02,  /* [ 7642] OBJ_id_tc26_cipher_gostr3412_2015_magma_ctracpkm_omac */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x05,0x02,       /* [ 7651] OBJ_id_tc26_cipher_gostr3412_2015_kuznyechik */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x05,0x02,0x01,  /* [ 7659] OBJ_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x05,0x02,0x02,  /* [ 7668] OBJ_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm_omac */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x07,            /* [ 7677] OBJ_id_tc26_wrap */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x07,0x01,       /* [ 7684] OBJ_id_tc26_wrap_gostr3412_2015_magma */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x07,0x01,0x01,  /* [ 7692] OBJ_id_tc26_wrap_gostr3412_2015_magma_kexp15 */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x07,0x02,       /* [ 7701] OBJ_id_tc26_wrap_gostr3412_2015_kuznyechik */
+    0x2A,0x85,0x03,0x07,0x01,0x01,0x07,0x01,0x01,  /* [ 7709] OBJ_id_tc26_wrap_gostr3412_2015_kuznyechik_kexp15 */
+    0x2A,0x85,0x03,0x07,0x01,0x02,0x01,0x01,0x02,  /* [ 7718] OBJ_id_tc26_gost_3410_2012_256_paramSetB */
+    0x2A,0x85,0x03,0x07,0x01,0x02,0x01,0x01,0x03,  /* [ 7727] OBJ_id_tc26_gost_3410_2012_256_paramSetC */
+    0x2A,0x85,0x03,0x07,0x01,0x02,0x01,0x01,0x04,  /* [ 7736] OBJ_id_tc26_gost_3410_2012_256_paramSetD */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x02,0x0C,       /* [ 7745] OBJ_hmacWithSHA512_224 */
+    0x2A,0x86,0x48,0x86,0xF7,0x0D,0x02,0x0D,       /* [ 7753] OBJ_hmacWithSHA512_256 */
+};
+
+#define NUM_NID 1195
+static const ASN1_OBJECT nid_objs[NUM_NID] = {
+    {"UNDEF", "undefined", NID_undef},
+    {"rsadsi", "RSA Data Security, Inc.", NID_rsadsi, 6, &so[0]},
+    {"pkcs", "RSA Data Security, Inc. PKCS", NID_pkcs, 7, &so[6]},
+    {"MD2", "md2", NID_md2, 8, &so[13]},
+    {"MD5", "md5", NID_md5, 8, &so[21]},
+    {"RC4", "rc4", NID_rc4, 8, &so[29]},
+    {"rsaEncryption", "rsaEncryption", NID_rsaEncryption, 9, &so[37]},
+    {"RSA-MD2", "md2WithRSAEncryption", NID_md2WithRSAEncryption, 9, &so[46]},
+    {"RSA-MD5", "md5WithRSAEncryption", NID_md5WithRSAEncryption, 9, &so[55]},
+    {"PBE-MD2-DES", "pbeWithMD2AndDES-CBC", NID_pbeWithMD2AndDES_CBC, 9, &so[64]},
+    {"PBE-MD5-DES", "pbeWithMD5AndDES-CBC", NID_pbeWithMD5AndDES_CBC, 9, &so[73]},
+    {"X500", "directory services (X.500)", NID_X500, 1, &so[82]},
+    {"X509", "X509", NID_X509, 2, &so[83]},
+    {"CN", "commonName", NID_commonName, 3, &so[85]},
+    {"C", "countryName", NID_countryName, 3, &so[88]},
+    {"L", "localityName", NID_localityName, 3, &so[91]},
+    {"ST", "stateOrProvinceName", NID_stateOrProvinceName, 3, &so[94]},
+    {"O", "organizationName", NID_organizationName, 3, &so[97]},
+    {"OU", "organizationalUnitName", NID_organizationalUnitName, 3, &so[100]},
+    {"RSA", "rsa", NID_rsa, 4, &so[103]},
+    {"pkcs7", "pkcs7", NID_pkcs7, 8, &so[107]},
+    {"pkcs7-data", "pkcs7-data", NID_pkcs7_data, 9, &so[115]},
+    {"pkcs7-signedData", "pkcs7-signedData", NID_pkcs7_signed, 9, &so[124]},
+    {"pkcs7-envelopedData", "pkcs7-envelopedData", NID_pkcs7_enveloped, 9, &so[133]},
+    {"pkcs7-signedAndEnvelopedData", "pkcs7-signedAndEnvelopedData", NID_pkcs7_signedAndEnveloped, 9, &so[142]},
+    {"pkcs7-digestData", "pkcs7-digestData", NID_pkcs7_digest, 9, &so[151]},
+    {"pkcs7-encryptedData", "pkcs7-encryptedData", NID_pkcs7_encrypted, 9, &so[160]},
+    {"pkcs3", "pkcs3", NID_pkcs3, 8, &so[169]},
+    {"dhKeyAgreement", "dhKeyAgreement", NID_dhKeyAgreement, 9, &so[177]},
+    {"DES-ECB", "des-ecb", NID_des_ecb, 5, &so[186]},
+    {"DES-CFB", "des-cfb", NID_des_cfb64, 5, &so[191]},
+    {"DES-CBC", "des-cbc", NID_des_cbc, 5, &so[196]},
+    {"DES-EDE", "des-ede", NID_des_ede_ecb, 5, &so[201]},
+    {"DES-EDE3", "des-ede3", NID_des_ede3_ecb},
+    {"IDEA-CBC", "idea-cbc", NID_idea_cbc, 11, &so[206]},
+    {"IDEA-CFB", "idea-cfb", NID_idea_cfb64},
+    {"IDEA-ECB", "idea-ecb", NID_idea_ecb},
+    {"RC2-CBC", "rc2-cbc", NID_rc2_cbc, 8, &so[217]},
+    {"RC2-ECB", "rc2-ecb", NID_rc2_ecb},
+    {"RC2-CFB", "rc2-cfb", NID_rc2_cfb64},
+    {"RC2-OFB", "rc2-ofb", NID_rc2_ofb64},
+    {"SHA", "sha", NID_sha, 5, &so[225]},
+    {"RSA-SHA", "shaWithRSAEncryption", NID_shaWithRSAEncryption, 5, &so[230]},
+    {"DES-EDE-CBC", "des-ede-cbc", NID_des_ede_cbc},
+    {"DES-EDE3-CBC", "des-ede3-cbc", NID_des_ede3_cbc, 8, &so[235]},
+    {"DES-OFB", "des-ofb", NID_des_ofb64, 5, &so[243]},
+    {"IDEA-OFB", "idea-ofb", NID_idea_ofb64},
+    {"pkcs9", "pkcs9", NID_pkcs9, 8, &so[248]},
+    {"emailAddress", "emailAddress", NID_pkcs9_emailAddress, 9, &so[256]},
+    {"unstructuredName", "unstructuredName", NID_pkcs9_unstructuredName, 9, &so[265]},
+    {"contentType", "contentType", NID_pkcs9_contentType, 9, &so[274]},
+    {"messageDigest", "messageDigest", NID_pkcs9_messageDigest, 9, &so[283]},
+    {"signingTime", "signingTime", NID_pkcs9_signingTime, 9, &so[292]},
+    {"countersignature", "countersignature", NID_pkcs9_countersignature, 9, &so[301]},
+    {"challengePassword", "challengePassword", NID_pkcs9_challengePassword, 9, &so[310]},
+    {"unstructuredAddress", "unstructuredAddress", NID_pkcs9_unstructuredAddress, 9, &so[319]},
+    {"extendedCertificateAttributes", "extendedCertificateAttributes", NID_pkcs9_extCertAttributes, 9, &so[328]},
+    {"Netscape", "Netscape Communications Corp.", NID_netscape, 7, &so[337]},
+    {"nsCertExt", "Netscape Certificate Extension", NID_netscape_cert_extension, 8, &so[344]},
+    {"nsDataType", "Netscape Data Type", NID_netscape_data_type, 8, &so[352]},
+    {"DES-EDE-CFB", "des-ede-cfb", NID_des_ede_cfb64},
+    {"DES-EDE3-CFB", "des-ede3-cfb", NID_des_ede3_cfb64},
+    {"DES-EDE-OFB", "des-ede-ofb", NID_des_ede_ofb64},
+    {"DES-EDE3-OFB", "des-ede3-ofb", NID_des_ede3_ofb64},
+    {"SHA1", "sha1", NID_sha1, 5, &so[360]},
+    {"RSA-SHA1", "sha1WithRSAEncryption", NID_sha1WithRSAEncryption, 9, &so[365]},
+    {"DSA-SHA", "dsaWithSHA", NID_dsaWithSHA, 5, &so[374]},
+    {"DSA-old", "dsaEncryption-old", NID_dsa_2, 5, &so[379]},
+    {"PBE-SHA1-RC2-64", "pbeWithSHA1AndRC2-CBC", NID_pbeWithSHA1AndRC2_CBC, 9, &so[384]},
+    {"PBKDF2", "PBKDF2", NID_id_pbkdf2, 9, &so[393]},
+    {"DSA-SHA1-old", "dsaWithSHA1-old", NID_dsaWithSHA1_2, 5, &so[402]},
+    {"nsCertType", "Netscape Cert Type", NID_netscape_cert_type, 9, &so[407]},
+    {"nsBaseUrl", "Netscape Base Url", NID_netscape_base_url, 9, &so[416]},
+    {"nsRevocationUrl", "Netscape Revocation Url", NID_netscape_revocation_url, 9, &so[425]},
+    {"nsCaRevocationUrl", "Netscape CA Revocation Url", NID_netscape_ca_revocation_url, 9, &so[434]},
+    {"nsRenewalUrl", "Netscape Renewal Url", NID_netscape_renewal_url, 9, &so[443]},
+    {"nsCaPolicyUrl", "Netscape CA Policy Url", NID_netscape_ca_policy_url, 9, &so[452]},
+    {"nsSslServerName", "Netscape SSL Server Name", NID_netscape_ssl_server_name, 9, &so[461]},
+    {"nsComment", "Netscape Comment", NID_netscape_comment, 9, &so[470]},
+    {"nsCertSequence", "Netscape Certificate Sequence", NID_netscape_cert_sequence, 9, &so[479]},
+    {"DESX-CBC", "desx-cbc", NID_desx_cbc},
+    {"id-ce", "id-ce", NID_id_ce, 2, &so[488]},
+    {"subjectKeyIdentifier", "X509v3 Subject Key Identifier", NID_subject_key_identifier, 3, &so[490]},
+    {"keyUsage", "X509v3 Key Usage", NID_key_usage, 3, &so[493]},
+    {"privateKeyUsagePeriod", "X509v3 Private Key Usage Period", NID_private_key_usage_period, 3, &so[496]},
+    {"subjectAltName", "X509v3 Subject Alternative Name", NID_subject_alt_name, 3, &so[499]},
+    {"issuerAltName", "X509v3 Issuer Alternative Name", NID_issuer_alt_name, 3, &so[502]},
+    {"basicConstraints", "X509v3 Basic Constraints", NID_basic_constraints, 3, &so[505]},
+    {"crlNumber", "X509v3 CRL Number", NID_crl_number, 3, &so[508]},
+    {"certificatePolicies", "X509v3 Certificate Policies", NID_certificate_policies, 3, &so[511]},
+    {"authorityKeyIdentifier", "X509v3 Authority Key Identifier", NID_authority_key_identifier, 3, &so[514]},
+    {"BF-CBC", "bf-cbc", NID_bf_cbc, 9, &so[517]},
+    {"BF-ECB", "bf-ecb", NID_bf_ecb},
+    {"BF-CFB", "bf-cfb", NID_bf_cfb64},
+    {"BF-OFB", "bf-ofb", NID_bf_ofb64},
+    {"MDC2", "mdc2", NID_mdc2, 4, &so[526]},
+    {"RSA-MDC2", "mdc2WithRSA", NID_mdc2WithRSA, 4, &so[530]},
+    {"RC4-40", "rc4-40", NID_rc4_40},
+    {"RC2-40-CBC", "rc2-40-cbc", NID_rc2_40_cbc},
+    {"GN", "givenName", NID_givenName, 3, &so[534]},
+    {"SN", "surname", NID_surname, 3, &so[537]},
+    {"initials", "initials", NID_initials, 3, &so[540]},
+    {"uid", "uniqueIdentifier", NID_uniqueIdentifier, 10, &so[543]},
+    {"crlDistributionPoints", "X509v3 CRL Distribution Points", NID_crl_distribution_points, 3, &so[553]},
+    {"RSA-NP-MD5", "md5WithRSA", NID_md5WithRSA, 5, &so[556]},
+    {"serialNumber", "serialNumber", NID_serialNumber, 3, &so[561]},
+    {"title", "title", NID_title, 3, &so[564]},
+    {"description", "description", NID_description, 3, &so[567]},
+    {"CAST5-CBC", "cast5-cbc", NID_cast5_cbc, 9, &so[570]},
+    {"CAST5-ECB", "cast5-ecb", NID_cast5_ecb},
+    {"CAST5-CFB", "cast5-cfb", NID_cast5_cfb64},
+    {"CAST5-OFB", "cast5-ofb", NID_cast5_ofb64},
+    {"pbeWithMD5AndCast5CBC", "pbeWithMD5AndCast5CBC", NID_pbeWithMD5AndCast5_CBC, 9, &so[579]},
+    {"DSA-SHA1", "dsaWithSHA1", NID_dsaWithSHA1, 7, &so[588]},
+    {"MD5-SHA1", "md5-sha1", NID_md5_sha1},
+    {"RSA-SHA1-2", "sha1WithRSA", NID_sha1WithRSA, 5, &so[595]},
+    {"DSA", "dsaEncryption", NID_dsa, 7, &so[600]},
+    {"RIPEMD160", "ripemd160", NID_ripemd160, 5, &so[607]},
+    { NULL, NULL, NID_undef },
+    {"RSA-RIPEMD160", "ripemd160WithRSA", NID_ripemd160WithRSA, 6, &so[612]},
+    {"RC5-CBC", "rc5-cbc", NID_rc5_cbc, 8, &so[618]},
+    {"RC5-ECB", "rc5-ecb", NID_rc5_ecb},
+    {"RC5-CFB", "rc5-cfb", NID_rc5_cfb64},
+    {"RC5-OFB", "rc5-ofb", NID_rc5_ofb64},
+    { NULL, NULL, NID_undef },
+    {"ZLIB", "zlib compression", NID_zlib_compression, 11, &so[626]},
+    {"extendedKeyUsage", "X509v3 Extended Key Usage", NID_ext_key_usage, 3, &so[637]},
+    {"PKIX", "PKIX", NID_id_pkix, 6, &so[640]},
+    {"id-kp", "id-kp", NID_id_kp, 7, &so[646]},
+    {"serverAuth", "TLS Web Server Authentication", NID_server_auth, 8, &so[653]},
+    {"clientAuth", "TLS Web Client Authentication", NID_client_auth, 8, &so[661]},
+    {"codeSigning", "Code Signing", NID_code_sign, 8, &so[669]},
+    {"emailProtection", "E-mail Protection", NID_email_protect, 8, &so[677]},
+    {"timeStamping", "Time Stamping", NID_time_stamp, 8, &so[685]},
+    {"msCodeInd", "Microsoft Individual Code Signing", NID_ms_code_ind, 10, &so[693]},
+    {"msCodeCom", "Microsoft Commercial Code Signing", NID_ms_code_com, 10, &so[703]},
+    {"msCTLSign", "Microsoft Trust List Signing", NID_ms_ctl_sign, 10, &so[713]},
+    {"msSGC", "Microsoft Server Gated Crypto", NID_ms_sgc, 10, &so[723]},
+    {"msEFS", "Microsoft Encrypted File System", NID_ms_efs, 10, &so[733]},
+    {"nsSGC", "Netscape Server Gated Crypto", NID_ns_sgc, 9, &so[743]},
+    {"deltaCRL", "X509v3 Delta CRL Indicator", NID_delta_crl, 3, &so[752]},
+    {"CRLReason", "X509v3 CRL Reason Code", NID_crl_reason, 3, &so[755]},
+    {"invalidityDate", "Invalidity Date", NID_invalidity_date, 3, &so[758]},
+    {"SXNetID", "Strong Extranet ID", NID_sxnet, 5, &so[761]},
+    {"PBE-SHA1-RC4-128", "pbeWithSHA1And128BitRC4", NID_pbe_WithSHA1And128BitRC4, 10, &so[766]},
+    {"PBE-SHA1-RC4-40", "pbeWithSHA1And40BitRC4", NID_pbe_WithSHA1And40BitRC4, 10, &so[776]},
+    {"PBE-SHA1-3DES", "pbeWithSHA1And3-KeyTripleDES-CBC", NID_pbe_WithSHA1And3_Key_TripleDES_CBC, 10, &so[786]},
+    {"PBE-SHA1-2DES", "pbeWithSHA1And2-KeyTripleDES-CBC", NID_pbe_WithSHA1And2_Key_TripleDES_CBC, 10, &so[796]},
+    {"PBE-SHA1-RC2-128", "pbeWithSHA1And128BitRC2-CBC", NID_pbe_WithSHA1And128BitRC2_CBC, 10, &so[806]},
+    {"PBE-SHA1-RC2-40", "pbeWithSHA1And40BitRC2-CBC", NID_pbe_WithSHA1And40BitRC2_CBC, 10, &so[816]},
+    {"keyBag", "keyBag", NID_keyBag, 11, &so[826]},
+    {"pkcs8ShroudedKeyBag", "pkcs8ShroudedKeyBag", NID_pkcs8ShroudedKeyBag, 11, &so[837]},
+    {"certBag", "certBag", NID_certBag, 11, &so[848]},
+    {"crlBag", "crlBag", NID_crlBag, 11, &so[859]},
+    {"secretBag", "secretBag", NID_secretBag, 11, &so[870]},
+    {"safeContentsBag", "safeContentsBag", NID_safeContentsBag, 11, &so[881]},
+    {"friendlyName", "friendlyName", NID_friendlyName, 9, &so[892]},
+    {"localKeyID", "localKeyID", NID_localKeyID, 9, &so[901]},
+    {"x509Certificate", "x509Certificate", NID_x509Certificate, 10, &so[910]},
+    {"sdsiCertificate", "sdsiCertificate", NID_sdsiCertificate, 10, &so[920]},
+    {"x509Crl", "x509Crl", NID_x509Crl, 10, &so[930]},
+    {"PBES2", "PBES2", NID_pbes2, 9, &so[940]},
+    {"PBMAC1", "PBMAC1", NID_pbmac1, 9, &so[949]},
+    {"hmacWithSHA1", "hmacWithSHA1", NID_hmacWithSHA1, 8, &so[958]},
+    {"id-qt-cps", "Policy Qualifier CPS", NID_id_qt_cps, 8, &so[966]},
+    {"id-qt-unotice", "Policy Qualifier User Notice", NID_id_qt_unotice, 8, &so[974]},
+    {"RC2-64-CBC", "rc2-64-cbc", NID_rc2_64_cbc},
+    {"SMIME-CAPS", "S/MIME Capabilities", NID_SMIMECapabilities, 9, &so[982]},
+    {"PBE-MD2-RC2-64", "pbeWithMD2AndRC2-CBC", NID_pbeWithMD2AndRC2_CBC, 9, &so[991]},
+    {"PBE-MD5-RC2-64", "pbeWithMD5AndRC2-CBC", NID_pbeWithMD5AndRC2_CBC, 9, &so[1000]},
+    {"PBE-SHA1-DES", "pbeWithSHA1AndDES-CBC", NID_pbeWithSHA1AndDES_CBC, 9, &so[1009]},
+    {"msExtReq", "Microsoft Extension Request", NID_ms_ext_req, 10, &so[1018]},
+    {"extReq", "Extension Request", NID_ext_req, 9, &so[1028]},
+    {"name", "name", NID_name, 3, &so[1037]},
+    {"dnQualifier", "dnQualifier", NID_dnQualifier, 3, &so[1040]},
+    {"id-pe", "id-pe", NID_id_pe, 7, &so[1043]},
+    {"id-ad", "id-ad", NID_id_ad, 7, &so[1050]},
+    {"authorityInfoAccess", "Authority Information Access", NID_info_access, 8, &so[1057]},
+    {"OCSP", "OCSP", NID_ad_OCSP, 8, &so[1065]},
+    {"caIssuers", "CA Issuers", NID_ad_ca_issuers, 8, &so[1073]},
+    {"OCSPSigning", "OCSP Signing", NID_OCSP_sign, 8, &so[1081]},
+    {"ISO", "iso", NID_iso},
+    {"member-body", "ISO Member Body", NID_member_body, 1, &so[1089]},
+    {"ISO-US", "ISO US Member Body", NID_ISO_US, 3, &so[1090]},
+    {"X9-57", "X9.57", NID_X9_57, 5, &so[1093]},
+    {"X9cm", "X9.57 CM ?", NID_X9cm, 6, &so[1098]},
+    {"pkcs1", "pkcs1", NID_pkcs1, 8, &so[1104]},
+    {"pkcs5", "pkcs5", NID_pkcs5, 8, &so[1112]},
+    {"SMIME", "S/MIME", NID_SMIME, 9, &so[1120]},
+    {"id-smime-mod", "id-smime-mod", NID_id_smime_mod, 10, &so[1129]},
+    {"id-smime-ct", "id-smime-ct", NID_id_smime_ct, 10, &so[1139]},
+    {"id-smime-aa", "id-smime-aa", NID_id_smime_aa, 10, &so[1149]},
+    {"id-smime-alg", "id-smime-alg", NID_id_smime_alg, 10, &so[1159]},
+    {"id-smime-cd", "id-smime-cd", NID_id_smime_cd, 10, &so[1169]},
+    {"id-smime-spq", "id-smime-spq", NID_id_smime_spq, 10, &so[1179]},
+    {"id-smime-cti", "id-smime-cti", NID_id_smime_cti, 10, &so[1189]},
+    {"id-smime-mod-cms", "id-smime-mod-cms", NID_id_smime_mod_cms, 11, &so[1199]},
+    {"id-smime-mod-ess", "id-smime-mod-ess", NID_id_smime_mod_ess, 11, &so[1210]},
+    {"id-smime-mod-oid", "id-smime-mod-oid", NID_id_smime_mod_oid, 11, &so[1221]},
+    {"id-smime-mod-msg-v3", "id-smime-mod-msg-v3", NID_id_smime_mod_msg_v3, 11, &so[1232]},
+    {"id-smime-mod-ets-eSignature-88", "id-smime-mod-ets-eSignature-88", NID_id_smime_mod_ets_eSignature_88, 11, &so[1243]},
+    {"id-smime-mod-ets-eSignature-97", "id-smime-mod-ets-eSignature-97", NID_id_smime_mod_ets_eSignature_97, 11, &so[1254]},
+    {"id-smime-mod-ets-eSigPolicy-88", "id-smime-mod-ets-eSigPolicy-88", NID_id_smime_mod_ets_eSigPolicy_88, 11, &so[1265]},
+    {"id-smime-mod-ets-eSigPolicy-97", "id-smime-mod-ets-eSigPolicy-97", NID_id_smime_mod_ets_eSigPolicy_97, 11, &so[1276]},
+    {"id-smime-ct-receipt", "id-smime-ct-receipt", NID_id_smime_ct_receipt, 11, &so[1287]},
+    {"id-smime-ct-authData", "id-smime-ct-authData", NID_id_smime_ct_authData, 11, &so[1298]},
+    {"id-smime-ct-publishCert", "id-smime-ct-publishCert", NID_id_smime_ct_publishCert, 11, &so[1309]},
+    {"id-smime-ct-TSTInfo", "id-smime-ct-TSTInfo", NID_id_smime_ct_TSTInfo, 11, &so[1320]},
+    {"id-smime-ct-TDTInfo", "id-smime-ct-TDTInfo", NID_id_smime_ct_TDTInfo, 11, &so[1331]},
+    {"id-smime-ct-contentInfo", "id-smime-ct-contentInfo", NID_id_smime_ct_contentInfo, 11, &so[1342]},
+    {"id-smime-ct-DVCSRequestData", "id-smime-ct-DVCSRequestData", NID_id_smime_ct_DVCSRequestData, 11, &so[1353]},
+    {"id-smime-ct-DVCSResponseData", "id-smime-ct-DVCSResponseData", NID_id_smime_ct_DVCSResponseData, 11, &so[1364]},
+    {"id-smime-aa-receiptRequest", "id-smime-aa-receiptRequest", NID_id_smime_aa_receiptRequest, 11, &so[1375]},
+    {"id-smime-aa-securityLabel", "id-smime-aa-securityLabel", NID_id_smime_aa_securityLabel, 11, &so[1386]},
+    {"id-smime-aa-mlExpandHistory", "id-smime-aa-mlExpandHistory", NID_id_smime_aa_mlExpandHistory, 11, &so[1397]},
+    {"id-smime-aa-contentHint", "id-smime-aa-contentHint", NID_id_smime_aa_contentHint, 11, &so[1408]},
+    {"id-smime-aa-msgSigDigest", "id-smime-aa-msgSigDigest", NID_id_smime_aa_msgSigDigest, 11, &so[1419]},
+    {"id-smime-aa-encapContentType", "id-smime-aa-encapContentType", NID_id_smime_aa_encapContentType, 11, &so[1430]},
+    {"id-smime-aa-contentIdentifier", "id-smime-aa-contentIdentifier", NID_id_smime_aa_contentIdentifier, 11, &so[1441]},
+    {"id-smime-aa-macValue", "id-smime-aa-macValue", NID_id_smime_aa_macValue, 11, &so[1452]},
+    {"id-smime-aa-equivalentLabels", "id-smime-aa-equivalentLabels", NID_id_smime_aa_equivalentLabels, 11, &so[1463]},
+    {"id-smime-aa-contentReference", "id-smime-aa-contentReference", NID_id_smime_aa_contentReference, 11, &so[1474]},
+    {"id-smime-aa-encrypKeyPref", "id-smime-aa-encrypKeyPref", NID_id_smime_aa_encrypKeyPref, 11, &so[1485]},
+    {"id-smime-aa-signingCertificate", "id-smime-aa-signingCertificate", NID_id_smime_aa_signingCertificate, 11, &so[1496]},
+    {"id-smime-aa-smimeEncryptCerts", "id-smime-aa-smimeEncryptCerts", NID_id_smime_aa_smimeEncryptCerts, 11, &so[1507]},
+    {"id-smime-aa-timeStampToken", "id-smime-aa-timeStampToken", NID_id_smime_aa_timeStampToken, 11, &so[1518]},
+    {"id-smime-aa-ets-sigPolicyId", "id-smime-aa-ets-sigPolicyId", NID_id_smime_aa_ets_sigPolicyId, 11, &so[1529]},
+    {"id-smime-aa-ets-commitmentType", "id-smime-aa-ets-commitmentType", NID_id_smime_aa_ets_commitmentType, 11, &so[1540]},
+    {"id-smime-aa-ets-signerLocation", "id-smime-aa-ets-signerLocation", NID_id_smime_aa_ets_signerLocation, 11, &so[1551]},
+    {"id-smime-aa-ets-signerAttr", "id-smime-aa-ets-signerAttr", NID_id_smime_aa_ets_signerAttr, 11, &so[1562]},
+    {"id-smime-aa-ets-otherSigCert", "id-smime-aa-ets-otherSigCert", NID_id_smime_aa_ets_otherSigCert, 11, &so[1573]},
+    {"id-smime-aa-ets-contentTimestamp", "id-smime-aa-ets-contentTimestamp", NID_id_smime_aa_ets_contentTimestamp, 11, &so[1584]},
+    {"id-smime-aa-ets-CertificateRefs", "id-smime-aa-ets-CertificateRefs", NID_id_smime_aa_ets_CertificateRefs, 11, &so[1595]},
+    {"id-smime-aa-ets-RevocationRefs", "id-smime-aa-ets-RevocationRefs", NID_id_smime_aa_ets_RevocationRefs, 11, &so[1606]},
+    {"id-smime-aa-ets-certValues", "id-smime-aa-ets-certValues", NID_id_smime_aa_ets_certValues, 11, &so[1617]},
+    {"id-smime-aa-ets-revocationValues", "id-smime-aa-ets-revocationValues", NID_id_smime_aa_ets_revocationValues, 11, &so[1628]},
+    {"id-smime-aa-ets-escTimeStamp", "id-smime-aa-ets-escTimeStamp", NID_id_smime_aa_ets_escTimeStamp, 11, &so[1639]},
+    {"id-smime-aa-ets-certCRLTimestamp", "id-smime-aa-ets-certCRLTimestamp", NID_id_smime_aa_ets_certCRLTimestamp, 11, &so[1650]},
+    {"id-smime-aa-ets-archiveTimeStamp", "id-smime-aa-ets-archiveTimeStamp", NID_id_smime_aa_ets_archiveTimeStamp, 11, &so[1661]},
+    {"id-smime-aa-signatureType", "id-smime-aa-signatureType", NID_id_smime_aa_signatureType, 11, &so[1672]},
+    {"id-smime-aa-dvcs-dvc", "id-smime-aa-dvcs-dvc", NID_id_smime_aa_dvcs_dvc, 11, &so[1683]},
+    {"id-smime-alg-ESDHwith3DES", "id-smime-alg-ESDHwith3DES", NID_id_smime_alg_ESDHwith3DES, 11, &so[1694]},
+    {"id-smime-alg-ESDHwithRC2", "id-smime-alg-ESDHwithRC2", NID_id_smime_alg_ESDHwithRC2, 11, &so[1705]},
+    {"id-smime-alg-3DESwrap", "id-smime-alg-3DESwrap", NID_id_smime_alg_3DESwrap, 11, &so[1716]},
+    {"id-smime-alg-RC2wrap", "id-smime-alg-RC2wrap", NID_id_smime_alg_RC2wrap, 11, &so[1727]},
+    {"id-smime-alg-ESDH", "id-smime-alg-ESDH", NID_id_smime_alg_ESDH, 11, &so[1738]},
+    {"id-smime-alg-CMS3DESwrap", "id-smime-alg-CMS3DESwrap", NID_id_smime_alg_CMS3DESwrap, 11, &so[1749]},
+    {"id-smime-alg-CMSRC2wrap", "id-smime-alg-CMSRC2wrap", NID_id_smime_alg_CMSRC2wrap, 11, &so[1760]},
+    {"id-smime-cd-ldap", "id-smime-cd-ldap", NID_id_smime_cd_ldap, 11, &so[1771]},
+    {"id-smime-spq-ets-sqt-uri", "id-smime-spq-ets-sqt-uri", NID_id_smime_spq_ets_sqt_uri, 11, &so[1782]},
+    {"id-smime-spq-ets-sqt-unotice", "id-smime-spq-ets-sqt-unotice", NID_id_smime_spq_ets_sqt_unotice, 11, &so[1793]},
+    {"id-smime-cti-ets-proofOfOrigin", "id-smime-cti-ets-proofOfOrigin", NID_id_smime_cti_ets_proofOfOrigin, 11, &so[1804]},
+    {"id-smime-cti-ets-proofOfReceipt", "id-smime-cti-ets-proofOfReceipt", NID_id_smime_cti_ets_proofOfReceipt, 11, &so[1815]},
+    {"id-smime-cti-ets-proofOfDelivery", "id-smime-cti-ets-proofOfDelivery", NID_id_smime_cti_ets_proofOfDelivery, 11, &so[1826]},
+    {"id-smime-cti-ets-proofOfSender", "id-smime-cti-ets-proofOfSender", NID_id_smime_cti_ets_proofOfSender, 11, &so[1837]},
+    {"id-smime-cti-ets-proofOfApproval", "id-smime-cti-ets-proofOfApproval", NID_id_smime_cti_ets_proofOfApproval, 11, &so[1848]},
+    {"id-smime-cti-ets-proofOfCreation", "id-smime-cti-ets-proofOfCreation", NID_id_smime_cti_ets_proofOfCreation, 11, &so[1859]},
+    {"MD4", "md4", NID_md4, 8, &so[1870]},
+    {"id-pkix-mod", "id-pkix-mod", NID_id_pkix_mod, 7, &so[1878]},
+    {"id-qt", "id-qt", NID_id_qt, 7, &so[1885]},
+    {"id-it", "id-it", NID_id_it, 7, &so[1892]},
+    {"id-pkip", "id-pkip", NID_id_pkip, 7, &so[1899]},
+    {"id-alg", "id-alg", NID_id_alg, 7, &so[1906]},
+    {"id-cmc", "id-cmc", NID_id_cmc, 7, &so[1913]},
+    {"id-on", "id-on", NID_id_on, 7, &so[1920]},
+    {"id-pda", "id-pda", NID_id_pda, 7, &so[1927]},
+    {"id-aca", "id-aca", NID_id_aca, 7, &so[1934]},
+    {"id-qcs", "id-qcs", NID_id_qcs, 7, &so[1941]},
+    {"id-cct", "id-cct", NID_id_cct, 7, &so[1948]},
+    {"id-pkix1-explicit-88", "id-pkix1-explicit-88", NID_id_pkix1_explicit_88, 8, &so[1955]},
+    {"id-pkix1-implicit-88", "id-pkix1-implicit-88", NID_id_pkix1_implicit_88, 8, &so[1963]},
+    {"id-pkix1-explicit-93", "id-pkix1-explicit-93", NID_id_pkix1_explicit_93, 8, &so[1971]},
+    {"id-pkix1-implicit-93", "id-pkix1-implicit-93", NID_id_pkix1_implicit_93, 8, &so[1979]},
+    {"id-mod-crmf", "id-mod-crmf", NID_id_mod_crmf, 8, &so[1987]},
+    {"id-mod-cmc", "id-mod-cmc", NID_id_mod_cmc, 8, &so[1995]},
+    {"id-mod-kea-profile-88", "id-mod-kea-profile-88", NID_id_mod_kea_profile_88, 8, &so[2003]},
+    {"id-mod-kea-profile-93", "id-mod-kea-profile-93", NID_id_mod_kea_profile_93, 8, &so[2011]},
+    {"id-mod-cmp", "id-mod-cmp", NID_id_mod_cmp, 8, &so[2019]},
+    {"id-mod-qualified-cert-88", "id-mod-qualified-cert-88", NID_id_mod_qualified_cert_88, 8, &so[2027]},
+    {"id-mod-qualified-cert-93", "id-mod-qualified-cert-93", NID_id_mod_qualified_cert_93, 8, &so[2035]},
+    {"id-mod-attribute-cert", "id-mod-attribute-cert", NID_id_mod_attribute_cert, 8, &so[2043]},
+    {"id-mod-timestamp-protocol", "id-mod-timestamp-protocol", NID_id_mod_timestamp_protocol, 8, &so[2051]},
+    {"id-mod-ocsp", "id-mod-ocsp", NID_id_mod_ocsp, 8, &so[2059]},
+    {"id-mod-dvcs", "id-mod-dvcs", NID_id_mod_dvcs, 8, &so[2067]},
+    {"id-mod-cmp2000", "id-mod-cmp2000", NID_id_mod_cmp2000, 8, &so[2075]},
+    {"biometricInfo", "Biometric Info", NID_biometricInfo, 8, &so[2083]},
+    {"qcStatements", "qcStatements", NID_qcStatements, 8, &so[2091]},
+    {"ac-auditEntity", "ac-auditEntity", NID_ac_auditEntity, 8, &so[2099]},
+    {"ac-targeting", "ac-targeting", NID_ac_targeting, 8, &so[2107]},
+    {"aaControls", "aaControls", NID_aaControls, 8, &so[2115]},
+    {"sbgp-ipAddrBlock", "sbgp-ipAddrBlock", NID_sbgp_ipAddrBlock, 8, &so[2123]},
+    {"sbgp-autonomousSysNum", "sbgp-autonomousSysNum", NID_sbgp_autonomousSysNum, 8, &so[2131]},
+    {"sbgp-routerIdentifier", "sbgp-routerIdentifier", NID_sbgp_routerIdentifier, 8, &so[2139]},
+    {"textNotice", "textNotice", NID_textNotice, 8, &so[2147]},
+    {"ipsecEndSystem", "IPSec End System", NID_ipsecEndSystem, 8, &so[2155]},
+    {"ipsecTunnel", "IPSec Tunnel", NID_ipsecTunnel, 8, &so[2163]},
+    {"ipsecUser", "IPSec User", NID_ipsecUser, 8, &so[2171]},
+    {"DVCS", "dvcs", NID_dvcs, 8, &so[2179]},
+    {"id-it-caProtEncCert", "id-it-caProtEncCert", NID_id_it_caProtEncCert, 8, &so[2187]},
+    {"id-it-signKeyPairTypes", "id-it-signKeyPairTypes", NID_id_it_signKeyPairTypes, 8, &so[2195]},
+    {"id-it-encKeyPairTypes", "id-it-encKeyPairTypes", NID_id_it_encKeyPairTypes, 8, &so[2203]},
+    {"id-it-preferredSymmAlg", "id-it-preferredSymmAlg", NID_id_it_preferredSymmAlg, 8, &so[2211]},
+    {"id-it-caKeyUpdateInfo", "id-it-caKeyUpdateInfo", NID_id_it_caKeyUpdateInfo, 8, &so[2219]},
+    {"id-it-currentCRL", "id-it-currentCRL", NID_id_it_currentCRL, 8, &so[2227]},
+    {"id-it-unsupportedOIDs", "id-it-unsupportedOIDs", NID_id_it_unsupportedOIDs, 8, &so[2235]},
+    {"id-it-subscriptionRequest", "id-it-subscriptionRequest", NID_id_it_subscriptionRequest, 8, &so[2243]},
+    {"id-it-subscriptionResponse", "id-it-subscriptionResponse", NID_id_it_subscriptionResponse, 8, &so[2251]},
+    {"id-it-keyPairParamReq", "id-it-keyPairParamReq", NID_id_it_keyPairParamReq, 8, &so[2259]},
+    {"id-it-keyPairParamRep", "id-it-keyPairParamRep", NID_id_it_keyPairParamRep, 8, &so[2267]},
+    {"id-it-revPassphrase", "id-it-revPassphrase", NID_id_it_revPassphrase, 8, &so[2275]},
+    {"id-it-implicitConfirm", "id-it-implicitConfirm", NID_id_it_implicitConfirm, 8, &so[2283]},
+    {"id-it-confirmWaitTime", "id-it-confirmWaitTime", NID_id_it_confirmWaitTime, 8, &so[2291]},
+    {"id-it-origPKIMessage", "id-it-origPKIMessage", NID_id_it_origPKIMessage, 8, &so[2299]},
+    {"id-regCtrl", "id-regCtrl", NID_id_regCtrl, 8, &so[2307]},
+    {"id-regInfo", "id-regInfo", NID_id_regInfo, 8, &so[2315]},
+    {"id-regCtrl-regToken", "id-regCtrl-regToken", NID_id_regCtrl_regToken, 9, &so[2323]},
+    {"id-regCtrl-authenticator", "id-regCtrl-authenticator", NID_id_regCtrl_authenticator, 9, &so[2332]},
+    {"id-regCtrl-pkiPublicationInfo", "id-regCtrl-pkiPublicationInfo", NID_id_regCtrl_pkiPublicationInfo, 9, &so[2341]},
+    {"id-regCtrl-pkiArchiveOptions", "id-regCtrl-pkiArchiveOptions", NID_id_regCtrl_pkiArchiveOptions, 9, &so[2350]},
+    {"id-regCtrl-oldCertID", "id-regCtrl-oldCertID", NID_id_regCtrl_oldCertID, 9, &so[2359]},
+    {"id-regCtrl-protocolEncrKey", "id-regCtrl-protocolEncrKey", NID_id_regCtrl_protocolEncrKey, 9, &so[2368]},
+    {"id-regInfo-utf8Pairs", "id-regInfo-utf8Pairs", NID_id_regInfo_utf8Pairs, 9, &so[2377]},
+    {"id-regInfo-certReq", "id-regInfo-certReq", NID_id_regInfo_certReq, 9, &so[2386]},
+    {"id-alg-des40", "id-alg-des40", NID_id_alg_des40, 8, &so[2395]},
+    {"id-alg-noSignature", "id-alg-noSignature", NID_id_alg_noSignature, 8, &so[2403]},
+    {"id-alg-dh-sig-hmac-sha1", "id-alg-dh-sig-hmac-sha1", NID_id_alg_dh_sig_hmac_sha1, 8, &so[2411]},
+    {"id-alg-dh-pop", "id-alg-dh-pop", NID_id_alg_dh_pop, 8, &so[2419]},
+    {"id-cmc-statusInfo", "id-cmc-statusInfo", NID_id_cmc_statusInfo, 8, &so[2427]},
+    {"id-cmc-identification", "id-cmc-identification", NID_id_cmc_identification, 8, &so[2435]},
+    {"id-cmc-identityProof", "id-cmc-identityProof", NID_id_cmc_identityProof, 8, &so[2443]},
+    {"id-cmc-dataReturn", "id-cmc-dataReturn", NID_id_cmc_dataReturn, 8, &so[2451]},
+    {"id-cmc-transactionId", "id-cmc-transactionId", NID_id_cmc_transactionId, 8, &so[2459]},
+    {"id-cmc-senderNonce", "id-cmc-senderNonce", NID_id_cmc_senderNonce, 8, &so[2467]},
+    {"id-cmc-recipientNonce", "id-cmc-recipientNonce", NID_id_cmc_recipientNonce, 8, &so[2475]},
+    {"id-cmc-addExtensions", "id-cmc-addExtensions", NID_id_cmc_addExtensions, 8, &so[2483]},
+    {"id-cmc-encryptedPOP", "id-cmc-encryptedPOP", NID_id_cmc_encryptedPOP, 8, &so[2491]},
+    {"id-cmc-decryptedPOP", "id-cmc-decryptedPOP", NID_id_cmc_decryptedPOP, 8, &so[2499]},
+    {"id-cmc-lraPOPWitness", "id-cmc-lraPOPWitness", NID_id_cmc_lraPOPWitness, 8, &so[2507]},
+    {"id-cmc-getCert", "id-cmc-getCert", NID_id_cmc_getCert, 8, &so[2515]},
+    {"id-cmc-getCRL", "id-cmc-getCRL", NID_id_cmc_getCRL, 8, &so[2523]},
+    {"id-cmc-revokeRequest", "id-cmc-revokeRequest", NID_id_cmc_revokeRequest, 8, &so[2531]},
+    {"id-cmc-regInfo", "id-cmc-regInfo", NID_id_cmc_regInfo, 8, &so[2539]},
+    {"id-cmc-responseInfo", "id-cmc-responseInfo", NID_id_cmc_responseInfo, 8, &so[2547]},
+    {"id-cmc-queryPending", "id-cmc-queryPending", NID_id_cmc_queryPending, 8, &so[2555]},
+    {"id-cmc-popLinkRandom", "id-cmc-popLinkRandom", NID_id_cmc_popLinkRandom, 8, &so[2563]},
+    {"id-cmc-popLinkWitness", "id-cmc-popLinkWitness", NID_id_cmc_popLinkWitness, 8, &so[2571]},
+    {"id-cmc-confirmCertAcceptance", "id-cmc-confirmCertAcceptance", NID_id_cmc_confirmCertAcceptance, 8, &so[2579]},
+    {"id-on-personalData", "id-on-personalData", NID_id_on_personalData, 8, &so[2587]},
+    {"id-pda-dateOfBirth", "id-pda-dateOfBirth", NID_id_pda_dateOfBirth, 8, &so[2595]},
+    {"id-pda-placeOfBirth", "id-pda-placeOfBirth", NID_id_pda_placeOfBirth, 8, &so[2603]},
+    { NULL, NULL, NID_undef },
+    {"id-pda-gender", "id-pda-gender", NID_id_pda_gender, 8, &so[2611]},
+    {"id-pda-countryOfCitizenship", "id-pda-countryOfCitizenship", NID_id_pda_countryOfCitizenship, 8, &so[2619]},
+    {"id-pda-countryOfResidence", "id-pda-countryOfResidence", NID_id_pda_countryOfResidence, 8, &so[2627]},
+    {"id-aca-authenticationInfo", "id-aca-authenticationInfo", NID_id_aca_authenticationInfo, 8, &so[2635]},
+    {"id-aca-accessIdentity", "id-aca-accessIdentity", NID_id_aca_accessIdentity, 8, &so[2643]},
+    {"id-aca-chargingIdentity", "id-aca-chargingIdentity", NID_id_aca_chargingIdentity, 8, &so[2651]},
+    {"id-aca-group", "id-aca-group", NID_id_aca_group, 8, &so[2659]},
+    {"id-aca-role", "id-aca-role", NID_id_aca_role, 8, &so[2667]},
+    {"id-qcs-pkixQCSyntax-v1", "id-qcs-pkixQCSyntax-v1", NID_id_qcs_pkixQCSyntax_v1, 8, &so[2675]},
+    {"id-cct-crs", "id-cct-crs", NID_id_cct_crs, 8, &so[2683]},
+    {"id-cct-PKIData", "id-cct-PKIData", NID_id_cct_PKIData, 8, &so[2691]},
+    {"id-cct-PKIResponse", "id-cct-PKIResponse", NID_id_cct_PKIResponse, 8, &so[2699]},
+    {"ad_timestamping", "AD Time Stamping", NID_ad_timeStamping, 8, &so[2707]},
+    {"AD_DVCS", "ad dvcs", NID_ad_dvcs, 8, &so[2715]},
+    {"basicOCSPResponse", "Basic OCSP Response", NID_id_pkix_OCSP_basic, 9, &so[2723]},
+    {"Nonce", "OCSP Nonce", NID_id_pkix_OCSP_Nonce, 9, &so[2732]},
+    {"CrlID", "OCSP CRL ID", NID_id_pkix_OCSP_CrlID, 9, &so[2741]},
+    {"acceptableResponses", "Acceptable OCSP Responses", NID_id_pkix_OCSP_acceptableResponses, 9, &so[2750]},
+    {"noCheck", "OCSP No Check", NID_id_pkix_OCSP_noCheck, 9, &so[2759]},
+    {"archiveCutoff", "OCSP Archive Cutoff", NID_id_pkix_OCSP_archiveCutoff, 9, &so[2768]},
+    {"serviceLocator", "OCSP Service Locator", NID_id_pkix_OCSP_serviceLocator, 9, &so[2777]},
+    {"extendedStatus", "Extended OCSP Status", NID_id_pkix_OCSP_extendedStatus, 9, &so[2786]},
+    {"valid", "valid", NID_id_pkix_OCSP_valid, 9, &so[2795]},
+    {"path", "path", NID_id_pkix_OCSP_path, 9, &so[2804]},
+    {"trustRoot", "Trust Root", NID_id_pkix_OCSP_trustRoot, 9, &so[2813]},
+    {"algorithm", "algorithm", NID_algorithm, 4, &so[2822]},
+    {"rsaSignature", "rsaSignature", NID_rsaSignature, 5, &so[2826]},
+    {"X500algorithms", "directory services - algorithms", NID_X500algorithms, 2, &so[2831]},
+    {"ORG", "org", NID_org, 1, &so[2833]},
+    {"DOD", "dod", NID_dod, 2, &so[2834]},
+    {"IANA", "iana", NID_iana, 3, &so[2836]},
+    {"directory", "Directory", NID_Directory, 4, &so[2839]},
+    {"mgmt", "Management", NID_Management, 4, &so[2843]},
+    {"experimental", "Experimental", NID_Experimental, 4, &so[2847]},
+    {"private", "Private", NID_Private, 4, &so[2851]},
+    {"security", "Security", NID_Security, 4, &so[2855]},
+    {"snmpv2", "SNMPv2", NID_SNMPv2, 4, &so[2859]},
+    {"Mail", "Mail", NID_Mail, 4, &so[2863]},
+    {"enterprises", "Enterprises", NID_Enterprises, 5, &so[2867]},
+    {"dcobject", "dcObject", NID_dcObject, 9, &so[2872]},
+    {"DC", "domainComponent", NID_domainComponent, 10, &so[2881]},
+    {"domain", "Domain", NID_Domain, 10, &so[2891]},
+    {"NULL", "NULL", NID_joint_iso_ccitt},
+    {"selected-attribute-types", "Selected Attribute Types", NID_selected_attribute_types, 3, &so[2901]},
+    {"clearance", "clearance", NID_clearance, 4, &so[2904]},
+    {"RSA-MD4", "md4WithRSAEncryption", NID_md4WithRSAEncryption, 9, &so[2908]},
+    {"ac-proxying", "ac-proxying", NID_ac_proxying, 8, &so[2917]},
+    {"subjectInfoAccess", "Subject Information Access", NID_sinfo_access, 8, &so[2925]},
+    {"id-aca-encAttrs", "id-aca-encAttrs", NID_id_aca_encAttrs, 8, &so[2933]},
+    {"role", "role", NID_role, 3, &so[2941]},
+    {"policyConstraints", "X509v3 Policy Constraints", NID_policy_constraints, 3, &so[2944]},
+    {"targetInformation", "X509v3 AC Targeting", NID_target_information, 3, &so[2947]},
+    {"noRevAvail", "X509v3 No Revocation Available", NID_no_rev_avail, 3, &so[2950]},
+    {"NULL", "NULL", NID_ccitt},
+    {"ansi-X9-62", "ANSI X9.62", NID_ansi_X9_62, 5, &so[2953]},
+    {"prime-field", "prime-field", NID_X9_62_prime_field, 7, &so[2958]},
+    {"characteristic-two-field", "characteristic-two-field", NID_X9_62_characteristic_two_field, 7, &so[2965]},
+    {"id-ecPublicKey", "id-ecPublicKey", NID_X9_62_id_ecPublicKey, 7, &so[2972]},
+    {"prime192v1", "prime192v1", NID_X9_62_prime192v1, 8, &so[2979]},
+    {"prime192v2", "prime192v2", NID_X9_62_prime192v2, 8, &so[2987]},
+    {"prime192v3", "prime192v3", NID_X9_62_prime192v3, 8, &so[2995]},
+    {"prime239v1", "prime239v1", NID_X9_62_prime239v1, 8, &so[3003]},
+    {"prime239v2", "prime239v2", NID_X9_62_prime239v2, 8, &so[3011]},
+    {"prime239v3", "prime239v3", NID_X9_62_prime239v3, 8, &so[3019]},
+    {"prime256v1", "prime256v1", NID_X9_62_prime256v1, 8, &so[3027]},
+    {"ecdsa-with-SHA1", "ecdsa-with-SHA1", NID_ecdsa_with_SHA1, 7, &so[3035]},
+    {"CSPName", "Microsoft CSP Name", NID_ms_csp_name, 9, &so[3042]},
+    {"AES-128-ECB", "aes-128-ecb", NID_aes_128_ecb, 9, &so[3051]},
+    {"AES-128-CBC", "aes-128-cbc", NID_aes_128_cbc, 9, &so[3060]},
+    {"AES-128-OFB", "aes-128-ofb", NID_aes_128_ofb128, 9, &so[3069]},
+    {"AES-128-CFB", "aes-128-cfb", NID_aes_128_cfb128, 9, &so[3078]},
+    {"AES-192-ECB", "aes-192-ecb", NID_aes_192_ecb, 9, &so[3087]},
+    {"AES-192-CBC", "aes-192-cbc", NID_aes_192_cbc, 9, &so[3096]},
+    {"AES-192-OFB", "aes-192-ofb", NID_aes_192_ofb128, 9, &so[3105]},
+    {"AES-192-CFB", "aes-192-cfb", NID_aes_192_cfb128, 9, &so[3114]},
+    {"AES-256-ECB", "aes-256-ecb", NID_aes_256_ecb, 9, &so[3123]},
+    {"AES-256-CBC", "aes-256-cbc", NID_aes_256_cbc, 9, &so[3132]},
+    {"AES-256-OFB", "aes-256-ofb", NID_aes_256_ofb128, 9, &so[3141]},
+    {"AES-256-CFB", "aes-256-cfb", NID_aes_256_cfb128, 9, &so[3150]},
+    {"holdInstructionCode", "Hold Instruction Code", NID_hold_instruction_code, 3, &so[3159]},
+    {"holdInstructionNone", "Hold Instruction None", NID_hold_instruction_none, 7, &so[3162]},
+    {"holdInstructionCallIssuer", "Hold Instruction Call Issuer", NID_hold_instruction_call_issuer, 7, &so[3169]},
+    {"holdInstructionReject", "Hold Instruction Reject", NID_hold_instruction_reject, 7, &so[3176]},
+    {"data", "data", NID_data, 1, &so[3183]},
+    {"pss", "pss", NID_pss, 3, &so[3184]},
+    {"ucl", "ucl", NID_ucl, 7, &so[3187]},
+    {"pilot", "pilot", NID_pilot, 8, &so[3194]},
+    {"pilotAttributeType", "pilotAttributeType", NID_pilotAttributeType, 9, &so[3202]},
+    {"pilotAttributeSyntax", "pilotAttributeSyntax", NID_pilotAttributeSyntax, 9, &so[3211]},
+    {"pilotObjectClass", "pilotObjectClass", NID_pilotObjectClass, 9, &so[3220]},
+    {"pilotGroups", "pilotGroups", NID_pilotGroups, 9, &so[3229]},
+    {"iA5StringSyntax", "iA5StringSyntax", NID_iA5StringSyntax, 10, &so[3238]},
+    {"caseIgnoreIA5StringSyntax", "caseIgnoreIA5StringSyntax", NID_caseIgnoreIA5StringSyntax, 10, &so[3248]},
+    {"pilotObject", "pilotObject", NID_pilotObject, 10, &so[3258]},
+    {"pilotPerson", "pilotPerson", NID_pilotPerson, 10, &so[3268]},
+    {"account", "account", NID_account, 10, &so[3278]},
+    {"document", "document", NID_document, 10, &so[3288]},
+    {"room", "room", NID_room, 10, &so[3298]},
+    {"documentSeries", "documentSeries", NID_documentSeries, 10, &so[3308]},
+    {"rFC822localPart", "rFC822localPart", NID_rFC822localPart, 10, &so[3318]},
+    {"dNSDomain", "dNSDomain", NID_dNSDomain, 10, &so[3328]},
+    {"domainRelatedObject", "domainRelatedObject", NID_domainRelatedObject, 10, &so[3338]},
+    {"friendlyCountry", "friendlyCountry", NID_friendlyCountry, 10, &so[3348]},
+    {"simpleSecurityObject", "simpleSecurityObject", NID_simpleSecurityObject, 10, &so[3358]},
+    {"pilotOrganization", "pilotOrganization", NID_pilotOrganization, 10, &so[3368]},
+    {"pilotDSA", "pilotDSA", NID_pilotDSA, 10, &so[3378]},
+    {"qualityLabelledData", "qualityLabelledData", NID_qualityLabelledData, 10, &so[3388]},
+    {"UID", "userId", NID_userId, 10, &so[3398]},
+    {"textEncodedORAddress", "textEncodedORAddress", NID_textEncodedORAddress, 10, &so[3408]},
+    {"mail", "rfc822Mailbox", NID_rfc822Mailbox, 10, &so[3418]},
+    {"info", "info", NID_info, 10, &so[3428]},
+    {"favouriteDrink", "favouriteDrink", NID_favouriteDrink, 10, &so[3438]},
+    {"roomNumber", "roomNumber", NID_roomNumber, 10, &so[3448]},
+    {"photo", "photo", NID_photo, 10, &so[3458]},
+    {"userClass", "userClass", NID_userClass, 10, &so[3468]},
+    {"host", "host", NID_host, 10, &so[3478]},
+    {"manager", "manager", NID_manager, 10, &so[3488]},
+    {"documentIdentifier", "documentIdentifier", NID_documentIdentifier, 10, &so[3498]},
+    {"documentTitle", "documentTitle", NID_documentTitle, 10, &so[3508]},
+    {"documentVersion", "documentVersion", NID_documentVersion, 10, &so[3518]},
+    {"documentAuthor", "documentAuthor", NID_documentAuthor, 10, &so[3528]},
+    {"documentLocation", "documentLocation", NID_documentLocation, 10, &so[3538]},
+    {"homeTelephoneNumber", "homeTelephoneNumber", NID_homeTelephoneNumber, 10, &so[3548]},
+    {"secretary", "secretary", NID_secretary, 10, &so[3558]},
+    {"otherMailbox", "otherMailbox", NID_otherMailbox, 10, &so[3568]},
+    {"lastModifiedTime", "lastModifiedTime", NID_lastModifiedTime, 10, &so[3578]},
+    {"lastModifiedBy", "lastModifiedBy", NID_lastModifiedBy, 10, &so[3588]},
+    {"aRecord", "aRecord", NID_aRecord, 10, &so[3598]},
+    {"pilotAttributeType27", "pilotAttributeType27", NID_pilotAttributeType27, 10, &so[3608]},
+    {"mXRecord", "mXRecord", NID_mXRecord, 10, &so[3618]},
+    {"nSRecord", "nSRecord", NID_nSRecord, 10, &so[3628]},
+    {"sOARecord", "sOARecord", NID_sOARecord, 10, &so[3638]},
+    {"cNAMERecord", "cNAMERecord", NID_cNAMERecord, 10, &so[3648]},
+    {"associatedDomain", "associatedDomain", NID_associatedDomain, 10, &so[3658]},
+    {"associatedName", "associatedName", NID_associatedName, 10, &so[3668]},
+    {"homePostalAddress", "homePostalAddress", NID_homePostalAddress, 10, &so[3678]},
+    {"personalTitle", "personalTitle", NID_personalTitle, 10, &so[3688]},
+    {"mobileTelephoneNumber", "mobileTelephoneNumber", NID_mobileTelephoneNumber, 10, &so[3698]},
+    {"pagerTelephoneNumber", "pagerTelephoneNumber", NID_pagerTelephoneNumber, 10, &so[3708]},
+    {"friendlyCountryName", "friendlyCountryName", NID_friendlyCountryName, 10, &so[3718]},
+    {"organizationalStatus", "organizationalStatus", NID_organizationalStatus, 10, &so[3728]},
+    {"janetMailbox", "janetMailbox", NID_janetMailbox, 10, &so[3738]},
+    {"mailPreferenceOption", "mailPreferenceOption", NID_mailPreferenceOption, 10, &so[3748]},
+    {"buildingName", "buildingName", NID_buildingName, 10, &so[3758]},
+    {"dSAQuality", "dSAQuality", NID_dSAQuality, 10, &so[3768]},
+    {"singleLevelQuality", "singleLevelQuality", NID_singleLevelQuality, 10, &so[3778]},
+    {"subtreeMinimumQuality", "subtreeMinimumQuality", NID_subtreeMinimumQuality, 10, &so[3788]},
+    {"subtreeMaximumQuality", "subtreeMaximumQuality", NID_subtreeMaximumQuality, 10, &so[3798]},
+    {"personalSignature", "personalSignature", NID_personalSignature, 10, &so[3808]},
+    {"dITRedirect", "dITRedirect", NID_dITRedirect, 10, &so[3818]},
+    {"audio", "audio", NID_audio, 10, &so[3828]},
+    {"documentPublisher", "documentPublisher", NID_documentPublisher, 10, &so[3838]},
+    {"x500UniqueIdentifier", "x500UniqueIdentifier", NID_x500UniqueIdentifier, 3, &so[3848]},
+    {"mime-mhs", "MIME MHS", NID_mime_mhs, 5, &so[3851]},
+    {"mime-mhs-headings", "mime-mhs-headings", NID_mime_mhs_headings, 6, &so[3856]},
+    {"mime-mhs-bodies", "mime-mhs-bodies", NID_mime_mhs_bodies, 6, &so[3862]},
+    {"id-hex-partial-message", "id-hex-partial-message", NID_id_hex_partial_message, 7, &so[3868]},
+    {"id-hex-multipart-message", "id-hex-multipart-message", NID_id_hex_multipart_message, 7, &so[3875]},
+    {"generationQualifier", "generationQualifier", NID_generationQualifier, 3, &so[3882]},
+    {"pseudonym", "pseudonym", NID_pseudonym, 3, &so[3885]},
+    { NULL, NULL, NID_undef },
+    {"id-set", "Secure Electronic Transactions", NID_id_set, 2, &so[3888]},
+    {"set-ctype", "content types", NID_set_ctype, 3, &so[3890]},
+    {"set-msgExt", "message extensions", NID_set_msgExt, 3, &so[3893]},
+    {"set-attr", "set-attr", NID_set_attr, 3, &so[3896]},
+    {"set-policy", "set-policy", NID_set_policy, 3, &so[3899]},
+    {"set-certExt", "certificate extensions", NID_set_certExt, 3, &so[3902]},
+    {"set-brand", "set-brand", NID_set_brand, 3, &so[3905]},
+    {"setct-PANData", "setct-PANData", NID_setct_PANData, 4, &so[3908]},
+    {"setct-PANToken", "setct-PANToken", NID_setct_PANToken, 4, &so[3912]},
+    {"setct-PANOnly", "setct-PANOnly", NID_setct_PANOnly, 4, &so[3916]},
+    {"setct-OIData", "setct-OIData", NID_setct_OIData, 4, &so[3920]},
+    {"setct-PI", "setct-PI", NID_setct_PI, 4, &so[3924]},
+    {"setct-PIData", "setct-PIData", NID_setct_PIData, 4, &so[3928]},
+    {"setct-PIDataUnsigned", "setct-PIDataUnsigned", NID_setct_PIDataUnsigned, 4, &so[3932]},
+    {"setct-HODInput", "setct-HODInput", NID_setct_HODInput, 4, &so[3936]},
+    {"setct-AuthResBaggage", "setct-AuthResBaggage", NID_setct_AuthResBaggage, 4, &so[3940]},
+    {"setct-AuthRevReqBaggage", "setct-AuthRevReqBaggage", NID_setct_AuthRevReqBaggage, 4, &so[3944]},
+    {"setct-AuthRevResBaggage", "setct-AuthRevResBaggage", NID_setct_AuthRevResBaggage, 4, &so[3948]},
+    {"setct-CapTokenSeq", "setct-CapTokenSeq", NID_setct_CapTokenSeq, 4, &so[3952]},
+    {"setct-PInitResData", "setct-PInitResData", NID_setct_PInitResData, 4, &so[3956]},
+    {"setct-PI-TBS", "setct-PI-TBS", NID_setct_PI_TBS, 4, &so[3960]},
+    {"setct-PResData", "setct-PResData", NID_setct_PResData, 4, &so[3964]},
+    {"setct-AuthReqTBS", "setct-AuthReqTBS", NID_setct_AuthReqTBS, 4, &so[3968]},
+    {"setct-AuthResTBS", "setct-AuthResTBS", NID_setct_AuthResTBS, 4, &so[3972]},
+    {"setct-AuthResTBSX", "setct-AuthResTBSX", NID_setct_AuthResTBSX, 4, &so[3976]},
+    {"setct-AuthTokenTBS", "setct-AuthTokenTBS", NID_setct_AuthTokenTBS, 4, &so[3980]},
+    {"setct-CapTokenData", "setct-CapTokenData", NID_setct_CapTokenData, 4, &so[3984]},
+    {"setct-CapTokenTBS", "setct-CapTokenTBS", NID_setct_CapTokenTBS, 4, &so[3988]},
+    {"setct-AcqCardCodeMsg", "setct-AcqCardCodeMsg", NID_setct_AcqCardCodeMsg, 4, &so[3992]},
+    {"setct-AuthRevReqTBS", "setct-AuthRevReqTBS", NID_setct_AuthRevReqTBS, 4, &so[3996]},
+    {"setct-AuthRevResData", "setct-AuthRevResData", NID_setct_AuthRevResData, 4, &so[4000]},
+    {"setct-AuthRevResTBS", "setct-AuthRevResTBS", NID_setct_AuthRevResTBS, 4, &so[4004]},
+    {"setct-CapReqTBS", "setct-CapReqTBS", NID_setct_CapReqTBS, 4, &so[4008]},
+    {"setct-CapReqTBSX", "setct-CapReqTBSX", NID_setct_CapReqTBSX, 4, &so[4012]},
+    {"setct-CapResData", "setct-CapResData", NID_setct_CapResData, 4, &so[4016]},
+    {"setct-CapRevReqTBS", "setct-CapRevReqTBS", NID_setct_CapRevReqTBS, 4, &so[4020]},
+    {"setct-CapRevReqTBSX", "setct-CapRevReqTBSX", NID_setct_CapRevReqTBSX, 4, &so[4024]},
+    {"setct-CapRevResData", "setct-CapRevResData", NID_setct_CapRevResData, 4, &so[4028]},
+    {"setct-CredReqTBS", "setct-CredReqTBS", NID_setct_CredReqTBS, 4, &so[4032]},
+    {"setct-CredReqTBSX", "setct-CredReqTBSX", NID_setct_CredReqTBSX, 4, &so[4036]},
+    {"setct-CredResData", "setct-CredResData", NID_setct_CredResData, 4, &so[4040]},
+    {"setct-CredRevReqTBS", "setct-CredRevReqTBS", NID_setct_CredRevReqTBS, 4, &so[4044]},
+    {"setct-CredRevReqTBSX", "setct-CredRevReqTBSX", NID_setct_CredRevReqTBSX, 4, &so[4048]},
+    {"setct-CredRevResData", "setct-CredRevResData", NID_setct_CredRevResData, 4, &so[4052]},
+    {"setct-PCertReqData", "setct-PCertReqData", NID_setct_PCertReqData, 4, &so[4056]},
+    {"setct-PCertResTBS", "setct-PCertResTBS", NID_setct_PCertResTBS, 4, &so[4060]},
+    {"setct-BatchAdminReqData", "setct-BatchAdminReqData", NID_setct_BatchAdminReqData, 4, &so[4064]},
+    {"setct-BatchAdminResData", "setct-BatchAdminResData", NID_setct_BatchAdminResData, 4, &so[4068]},
+    {"setct-CardCInitResTBS", "setct-CardCInitResTBS", NID_setct_CardCInitResTBS, 4, &so[4072]},
+    {"setct-MeAqCInitResTBS", "setct-MeAqCInitResTBS", NID_setct_MeAqCInitResTBS, 4, &so[4076]},
+    {"setct-RegFormResTBS", "setct-RegFormResTBS", NID_setct_RegFormResTBS, 4, &so[4080]},
+    {"setct-CertReqData", "setct-CertReqData", NID_setct_CertReqData, 4, &so[4084]},
+    {"setct-CertReqTBS", "setct-CertReqTBS", NID_setct_CertReqTBS, 4, &so[4088]},
+    {"setct-CertResData", "setct-CertResData", NID_setct_CertResData, 4, &so[4092]},
+    {"setct-CertInqReqTBS", "setct-CertInqReqTBS", NID_setct_CertInqReqTBS, 4, &so[4096]},
+    {"setct-ErrorTBS", "setct-ErrorTBS", NID_setct_ErrorTBS, 4, &so[4100]},
+    {"setct-PIDualSignedTBE", "setct-PIDualSignedTBE", NID_setct_PIDualSignedTBE, 4, &so[4104]},
+    {"setct-PIUnsignedTBE", "setct-PIUnsignedTBE", NID_setct_PIUnsignedTBE, 4, &so[4108]},
+    {"setct-AuthReqTBE", "setct-AuthReqTBE", NID_setct_AuthReqTBE, 4, &so[4112]},
+    {"setct-AuthResTBE", "setct-AuthResTBE", NID_setct_AuthResTBE, 4, &so[4116]},
+    {"setct-AuthResTBEX", "setct-AuthResTBEX", NID_setct_AuthResTBEX, 4, &so[4120]},
+    {"setct-AuthTokenTBE", "setct-AuthTokenTBE", NID_setct_AuthTokenTBE, 4, &so[4124]},
+    {"setct-CapTokenTBE", "setct-CapTokenTBE", NID_setct_CapTokenTBE, 4, &so[4128]},
+    {"setct-CapTokenTBEX", "setct-CapTokenTBEX", NID_setct_CapTokenTBEX, 4, &so[4132]},
+    {"setct-AcqCardCodeMsgTBE", "setct-AcqCardCodeMsgTBE", NID_setct_AcqCardCodeMsgTBE, 4, &so[4136]},
+    {"setct-AuthRevReqTBE", "setct-AuthRevReqTBE", NID_setct_AuthRevReqTBE, 4, &so[4140]},
+    {"setct-AuthRevResTBE", "setct-AuthRevResTBE", NID_setct_AuthRevResTBE, 4, &so[4144]},
+    {"setct-AuthRevResTBEB", "setct-AuthRevResTBEB", NID_setct_AuthRevResTBEB, 4, &so[4148]},
+    {"setct-CapReqTBE", "setct-CapReqTBE", NID_setct_CapReqTBE, 4, &so[4152]},
+    {"setct-CapReqTBEX", "setct-CapReqTBEX", NID_setct_CapReqTBEX, 4, &so[4156]},
+    {"setct-CapResTBE", "setct-CapResTBE", NID_setct_CapResTBE, 4, &so[4160]},
+    {"setct-CapRevReqTBE", "setct-CapRevReqTBE", NID_setct_CapRevReqTBE, 4, &so[4164]},
+    {"setct-CapRevReqTBEX", "setct-CapRevReqTBEX", NID_setct_CapRevReqTBEX, 4, &so[4168]},
+    {"setct-CapRevResTBE", "setct-CapRevResTBE", NID_setct_CapRevResTBE, 4, &so[4172]},
+    {"setct-CredReqTBE", "setct-CredReqTBE", NID_setct_CredReqTBE, 4, &so[4176]},
+    {"setct-CredReqTBEX", "setct-CredReqTBEX", NID_setct_CredReqTBEX, 4, &so[4180]},
+    {"setct-CredResTBE", "setct-CredResTBE", NID_setct_CredResTBE, 4, &so[4184]},
+    {"setct-CredRevReqTBE", "setct-CredRevReqTBE", NID_setct_CredRevReqTBE, 4, &so[4188]},
+    {"setct-CredRevReqTBEX", "setct-CredRevReqTBEX", NID_setct_CredRevReqTBEX, 4, &so[4192]},
+    {"setct-CredRevResTBE", "setct-CredRevResTBE", NID_setct_CredRevResTBE, 4, &so[4196]},
+    {"setct-BatchAdminReqTBE", "setct-BatchAdminReqTBE", NID_setct_BatchAdminReqTBE, 4, &so[4200]},
+    {"setct-BatchAdminResTBE", "setct-BatchAdminResTBE", NID_setct_BatchAdminResTBE, 4, &so[4204]},
+    {"setct-RegFormReqTBE", "setct-RegFormReqTBE", NID_setct_RegFormReqTBE, 4, &so[4208]},
+    {"setct-CertReqTBE", "setct-CertReqTBE", NID_setct_CertReqTBE, 4, &so[4212]},
+    {"setct-CertReqTBEX", "setct-CertReqTBEX", NID_setct_CertReqTBEX, 4, &so[4216]},
+    {"setct-CertResTBE", "setct-CertResTBE", NID_setct_CertResTBE, 4, &so[4220]},
+    {"setct-CRLNotificationTBS", "setct-CRLNotificationTBS", NID_setct_CRLNotificationTBS, 4, &so[4224]},
+    {"setct-CRLNotificationResTBS", "setct-CRLNotificationResTBS", NID_setct_CRLNotificationResTBS, 4, &so[4228]},
+    {"setct-BCIDistributionTBS", "setct-BCIDistributionTBS", NID_setct_BCIDistributionTBS, 4, &so[4232]},
+    {"setext-genCrypt", "generic cryptogram", NID_setext_genCrypt, 4, &so[4236]},
+    {"setext-miAuth", "merchant initiated auth", NID_setext_miAuth, 4, &so[4240]},
+    {"setext-pinSecure", "setext-pinSecure", NID_setext_pinSecure, 4, &so[4244]},
+    {"setext-pinAny", "setext-pinAny", NID_setext_pinAny, 4, &so[4248]},
+    {"setext-track2", "setext-track2", NID_setext_track2, 4, &so[4252]},
+    {"setext-cv", "additional verification", NID_setext_cv, 4, &so[4256]},
+    {"set-policy-root", "set-policy-root", NID_set_policy_root, 4, &so[4260]},
+    {"setCext-hashedRoot", "setCext-hashedRoot", NID_setCext_hashedRoot, 4, &so[4264]},
+    {"setCext-certType", "setCext-certType", NID_setCext_certType, 4, &so[4268]},
+    {"setCext-merchData", "setCext-merchData", NID_setCext_merchData, 4, &so[4272]},
+    {"setCext-cCertRequired", "setCext-cCertRequired", NID_setCext_cCertRequired, 4, &so[4276]},
+    {"setCext-tunneling", "setCext-tunneling", NID_setCext_tunneling, 4, &so[4280]},
+    {"setCext-setExt", "setCext-setExt", NID_setCext_setExt, 4, &so[4284]},
+    {"setCext-setQualf", "setCext-setQualf", NID_setCext_setQualf, 4, &so[4288]},
+    {"setCext-PGWYcapabilities", "setCext-PGWYcapabilities", NID_setCext_PGWYcapabilities, 4, &so[4292]},
+    {"setCext-TokenIdentifier", "setCext-TokenIdentifier", NID_setCext_TokenIdentifier, 4, &so[4296]},
+    {"setCext-Track2Data", "setCext-Track2Data", NID_setCext_Track2Data, 4, &so[4300]},
+    {"setCext-TokenType", "setCext-TokenType", NID_setCext_TokenType, 4, &so[4304]},
+    {"setCext-IssuerCapabilities", "setCext-IssuerCapabilities", NID_setCext_IssuerCapabilities, 4, &so[4308]},
+    {"setAttr-Cert", "setAttr-Cert", NID_setAttr_Cert, 4, &so[4312]},
+    {"setAttr-PGWYcap", "payment gateway capabilities", NID_setAttr_PGWYcap, 4, &so[4316]},
+    {"setAttr-TokenType", "setAttr-TokenType", NID_setAttr_TokenType, 4, &so[4320]},
+    {"setAttr-IssCap", "issuer capabilities", NID_setAttr_IssCap, 4, &so[4324]},
+    {"set-rootKeyThumb", "set-rootKeyThumb", NID_set_rootKeyThumb, 5, &so[4328]},
+    {"set-addPolicy", "set-addPolicy", NID_set_addPolicy, 5, &so[4333]},
+    {"setAttr-Token-EMV", "setAttr-Token-EMV", NID_setAttr_Token_EMV, 5, &so[4338]},
+    {"setAttr-Token-B0Prime", "setAttr-Token-B0Prime", NID_setAttr_Token_B0Prime, 5, &so[4343]},
+    {"setAttr-IssCap-CVM", "setAttr-IssCap-CVM", NID_setAttr_IssCap_CVM, 5, &so[4348]},
+    {"setAttr-IssCap-T2", "setAttr-IssCap-T2", NID_setAttr_IssCap_T2, 5, &so[4353]},
+    {"setAttr-IssCap-Sig", "setAttr-IssCap-Sig", NID_setAttr_IssCap_Sig, 5, &so[4358]},
+    {"setAttr-GenCryptgrm", "generate cryptogram", NID_setAttr_GenCryptgrm, 6, &so[4363]},
+    {"setAttr-T2Enc", "encrypted track 2", NID_setAttr_T2Enc, 6, &so[4369]},
+    {"setAttr-T2cleartxt", "cleartext track 2", NID_setAttr_T2cleartxt, 6, &so[4375]},
+    {"setAttr-TokICCsig", "ICC or token signature", NID_setAttr_TokICCsig, 6, &so[4381]},
+    {"setAttr-SecDevSig", "secure device signature", NID_setAttr_SecDevSig, 6, &so[4387]},
+    {"set-brand-IATA-ATA", "set-brand-IATA-ATA", NID_set_brand_IATA_ATA, 4, &so[4393]},
+    {"set-brand-Diners", "set-brand-Diners", NID_set_brand_Diners, 4, &so[4397]},
+    {"set-brand-AmericanExpress", "set-brand-AmericanExpress", NID_set_brand_AmericanExpress, 4, &so[4401]},
+    {"set-brand-JCB", "set-brand-JCB", NID_set_brand_JCB, 4, &so[4405]},
+    {"set-brand-Visa", "set-brand-Visa", NID_set_brand_Visa, 4, &so[4409]},
+    {"set-brand-MasterCard", "set-brand-MasterCard", NID_set_brand_MasterCard, 4, &so[4413]},
+    {"set-brand-Novus", "set-brand-Novus", NID_set_brand_Novus, 5, &so[4417]},
+    {"DES-CDMF", "des-cdmf", NID_des_cdmf, 8, &so[4422]},
+    {"rsaOAEPEncryptionSET", "rsaOAEPEncryptionSET", NID_rsaOAEPEncryptionSET, 9, &so[4430]},
+    {"ITU-T", "itu-t", NID_itu_t},
+    {"JOINT-ISO-ITU-T", "joint-iso-itu-t", NID_joint_iso_itu_t},
+    {"international-organizations", "International Organizations", NID_international_organizations, 1, &so[4439]},
+    {"msSmartcardLogin", "Microsoft Smartcardlogin", NID_ms_smartcard_login, 10, &so[4440]},
+    {"msUPN", "Microsoft Universal Principal Name", NID_ms_upn, 10, &so[4450]},
+    {"AES-128-CFB1", "aes-128-cfb1", NID_aes_128_cfb1},
+    {"AES-192-CFB1", "aes-192-cfb1", NID_aes_192_cfb1},
+    {"AES-256-CFB1", "aes-256-cfb1", NID_aes_256_cfb1},
+    {"AES-128-CFB8", "aes-128-cfb8", NID_aes_128_cfb8},
+    {"AES-192-CFB8", "aes-192-cfb8", NID_aes_192_cfb8},
+    {"AES-256-CFB8", "aes-256-cfb8", NID_aes_256_cfb8},
+    {"DES-CFB1", "des-cfb1", NID_des_cfb1},
+    {"DES-CFB8", "des-cfb8", NID_des_cfb8},
+    {"DES-EDE3-CFB1", "des-ede3-cfb1", NID_des_ede3_cfb1},
+    {"DES-EDE3-CFB8", "des-ede3-cfb8", NID_des_ede3_cfb8},
+    {"street", "streetAddress", NID_streetAddress, 3, &so[4460]},
+    {"postalCode", "postalCode", NID_postalCode, 3, &so[4463]},
+    {"id-ppl", "id-ppl", NID_id_ppl, 7, &so[4466]},
+    {"proxyCertInfo", "Proxy Certificate Information", NID_proxyCertInfo, 8, &so[4473]},
+    {"id-ppl-anyLanguage", "Any language", NID_id_ppl_anyLanguage, 8, &so[4481]},
+    {"id-ppl-inheritAll", "Inherit all", NID_id_ppl_inheritAll, 8, &so[4489]},
+    {"nameConstraints", "X509v3 Name Constraints", NID_name_constraints, 3, &so[4497]},
+    {"id-ppl-independent", "Independent", NID_Independent, 8, &so[4500]},
+    {"RSA-SHA256", "sha256WithRSAEncryption", NID_sha256WithRSAEncryption, 9, &so[4508]},
+    {"RSA-SHA384", "sha384WithRSAEncryption", NID_sha384WithRSAEncryption, 9, &so[4517]},
+    {"RSA-SHA512", "sha512WithRSAEncryption", NID_sha512WithRSAEncryption, 9, &so[4526]},
+    {"RSA-SHA224", "sha224WithRSAEncryption", NID_sha224WithRSAEncryption, 9, &so[4535]},
+    {"SHA256", "sha256", NID_sha256, 9, &so[4544]},
+    {"SHA384", "sha384", NID_sha384, 9, &so[4553]},
+    {"SHA512", "sha512", NID_sha512, 9, &so[4562]},
+    {"SHA224", "sha224", NID_sha224, 9, &so[4571]},
+    {"identified-organization", "identified-organization", NID_identified_organization, 1, &so[4580]},
+    {"certicom-arc", "certicom-arc", NID_certicom_arc, 3, &so[4581]},
+    {"wap", "wap", NID_wap, 2, &so[4584]},
+    {"wap-wsg", "wap-wsg", NID_wap_wsg, 3, &so[4586]},
+    {"id-characteristic-two-basis", "id-characteristic-two-basis", NID_X9_62_id_characteristic_two_basis, 8, &so[4589]},
+    {"onBasis", "onBasis", NID_X9_62_onBasis, 9, &so[4597]},
+    {"tpBasis", "tpBasis", NID_X9_62_tpBasis, 9, &so[4606]},
+    {"ppBasis", "ppBasis", NID_X9_62_ppBasis, 9, &so[4615]},
+    {"c2pnb163v1", "c2pnb163v1", NID_X9_62_c2pnb163v1, 8, &so[4624]},
+    {"c2pnb163v2", "c2pnb163v2", NID_X9_62_c2pnb163v2, 8, &so[4632]},
+    {"c2pnb163v3", "c2pnb163v3", NID_X9_62_c2pnb163v3, 8, &so[4640]},
+    {"c2pnb176v1", "c2pnb176v1", NID_X9_62_c2pnb176v1, 8, &so[4648]},
+    {"c2tnb191v1", "c2tnb191v1", NID_X9_62_c2tnb191v1, 8, &so[4656]},
+    {"c2tnb191v2", "c2tnb191v2", NID_X9_62_c2tnb191v2, 8, &so[4664]},
+    {"c2tnb191v3", "c2tnb191v3", NID_X9_62_c2tnb191v3, 8, &so[4672]},
+    {"c2onb191v4", "c2onb191v4", NID_X9_62_c2onb191v4, 8, &so[4680]},
+    {"c2onb191v5", "c2onb191v5", NID_X9_62_c2onb191v5, 8, &so[4688]},
+    {"c2pnb208w1", "c2pnb208w1", NID_X9_62_c2pnb208w1, 8, &so[4696]},
+    {"c2tnb239v1", "c2tnb239v1", NID_X9_62_c2tnb239v1, 8, &so[4704]},
+    {"c2tnb239v2", "c2tnb239v2", NID_X9_62_c2tnb239v2, 8, &so[4712]},
+    {"c2tnb239v3", "c2tnb239v3", NID_X9_62_c2tnb239v3, 8, &so[4720]},
+    {"c2onb239v4", "c2onb239v4", NID_X9_62_c2onb239v4, 8, &so[4728]},
+    {"c2onb239v5", "c2onb239v5", NID_X9_62_c2onb239v5, 8, &so[4736]},
+    {"c2pnb272w1", "c2pnb272w1", NID_X9_62_c2pnb272w1, 8, &so[4744]},
+    {"c2pnb304w1", "c2pnb304w1", NID_X9_62_c2pnb304w1, 8, &so[4752]},
+    {"c2tnb359v1", "c2tnb359v1", NID_X9_62_c2tnb359v1, 8, &so[4760]},
+    {"c2pnb368w1", "c2pnb368w1", NID_X9_62_c2pnb368w1, 8, &so[4768]},
+    {"c2tnb431r1", "c2tnb431r1", NID_X9_62_c2tnb431r1, 8, &so[4776]},
+    {"secp112r1", "secp112r1", NID_secp112r1, 5, &so[4784]},
+    {"secp112r2", "secp112r2", NID_secp112r2, 5, &so[4789]},
+    {"secp128r1", "secp128r1", NID_secp128r1, 5, &so[4794]},
+    {"secp128r2", "secp128r2", NID_secp128r2, 5, &so[4799]},
+    {"secp160k1", "secp160k1", NID_secp160k1, 5, &so[4804]},
+    {"secp160r1", "secp160r1", NID_secp160r1, 5, &so[4809]},
+    {"secp160r2", "secp160r2", NID_secp160r2, 5, &so[4814]},
+    {"secp192k1", "secp192k1", NID_secp192k1, 5, &so[4819]},
+    {"secp224k1", "secp224k1", NID_secp224k1, 5, &so[4824]},
+    {"secp224r1", "secp224r1", NID_secp224r1, 5, &so[4829]},
+    {"secp256k1", "secp256k1", NID_secp256k1, 5, &so[4834]},
+    {"secp384r1", "secp384r1", NID_secp384r1, 5, &so[4839]},
+    {"secp521r1", "secp521r1", NID_secp521r1, 5, &so[4844]},
+    {"sect113r1", "sect113r1", NID_sect113r1, 5, &so[4849]},
+    {"sect113r2", "sect113r2", NID_sect113r2, 5, &so[4854]},
+    {"sect131r1", "sect131r1", NID_sect131r1, 5, &so[4859]},
+    {"sect131r2", "sect131r2", NID_sect131r2, 5, &so[4864]},
+    {"sect163k1", "sect163k1", NID_sect163k1, 5, &so[4869]},
+    {"sect163r1", "sect163r1", NID_sect163r1, 5, &so[4874]},
+    {"sect163r2", "sect163r2", NID_sect163r2, 5, &so[4879]},
+    {"sect193r1", "sect193r1", NID_sect193r1, 5, &so[4884]},
+    {"sect193r2", "sect193r2", NID_sect193r2, 5, &so[4889]},
+    {"sect233k1", "sect233k1", NID_sect233k1, 5, &so[4894]},
+    {"sect233r1", "sect233r1", NID_sect233r1, 5, &so[4899]},
+    {"sect239k1", "sect239k1", NID_sect239k1, 5, &so[4904]},
+    {"sect283k1", "sect283k1", NID_sect283k1, 5, &so[4909]},
+    {"sect283r1", "sect283r1", NID_sect283r1, 5, &so[4914]},
+    {"sect409k1", "sect409k1", NID_sect409k1, 5, &so[4919]},
+    {"sect409r1", "sect409r1", NID_sect409r1, 5, &so[4924]},
+    {"sect571k1", "sect571k1", NID_sect571k1, 5, &so[4929]},
+    {"sect571r1", "sect571r1", NID_sect571r1, 5, &so[4934]},
+    {"wap-wsg-idm-ecid-wtls1", "wap-wsg-idm-ecid-wtls1", NID_wap_wsg_idm_ecid_wtls1, 5, &so[4939]},
+    {"wap-wsg-idm-ecid-wtls3", "wap-wsg-idm-ecid-wtls3", NID_wap_wsg_idm_ecid_wtls3, 5, &so[4944]},
+    {"wap-wsg-idm-ecid-wtls4", "wap-wsg-idm-ecid-wtls4", NID_wap_wsg_idm_ecid_wtls4, 5, &so[4949]},
+    {"wap-wsg-idm-ecid-wtls5", "wap-wsg-idm-ecid-wtls5", NID_wap_wsg_idm_ecid_wtls5, 5, &so[4954]},
+    {"wap-wsg-idm-ecid-wtls6", "wap-wsg-idm-ecid-wtls6", NID_wap_wsg_idm_ecid_wtls6, 5, &so[4959]},
+    {"wap-wsg-idm-ecid-wtls7", "wap-wsg-idm-ecid-wtls7", NID_wap_wsg_idm_ecid_wtls7, 5, &so[4964]},
+    {"wap-wsg-idm-ecid-wtls8", "wap-wsg-idm-ecid-wtls8", NID_wap_wsg_idm_ecid_wtls8, 5, &so[4969]},
+    {"wap-wsg-idm-ecid-wtls9", "wap-wsg-idm-ecid-wtls9", NID_wap_wsg_idm_ecid_wtls9, 5, &so[4974]},
+    {"wap-wsg-idm-ecid-wtls10", "wap-wsg-idm-ecid-wtls10", NID_wap_wsg_idm_ecid_wtls10, 5, &so[4979]},
+    {"wap-wsg-idm-ecid-wtls11", "wap-wsg-idm-ecid-wtls11", NID_wap_wsg_idm_ecid_wtls11, 5, &so[4984]},
+    {"wap-wsg-idm-ecid-wtls12", "wap-wsg-idm-ecid-wtls12", NID_wap_wsg_idm_ecid_wtls12, 5, &so[4989]},
+    {"anyPolicy", "X509v3 Any Policy", NID_any_policy, 4, &so[4994]},
+    {"policyMappings", "X509v3 Policy Mappings", NID_policy_mappings, 3, &so[4998]},
+    {"inhibitAnyPolicy", "X509v3 Inhibit Any Policy", NID_inhibit_any_policy, 3, &so[5001]},
+    {"Oakley-EC2N-3", "ipsec3", NID_ipsec3},
+    {"Oakley-EC2N-4", "ipsec4", NID_ipsec4},
+    {"CAMELLIA-128-CBC", "camellia-128-cbc", NID_camellia_128_cbc, 11, &so[5004]},
+    {"CAMELLIA-192-CBC", "camellia-192-cbc", NID_camellia_192_cbc, 11, &so[5015]},
+    {"CAMELLIA-256-CBC", "camellia-256-cbc", NID_camellia_256_cbc, 11, &so[5026]},
+    {"CAMELLIA-128-ECB", "camellia-128-ecb", NID_camellia_128_ecb, 8, &so[5037]},
+    {"CAMELLIA-192-ECB", "camellia-192-ecb", NID_camellia_192_ecb, 8, &so[5045]},
+    {"CAMELLIA-256-ECB", "camellia-256-ecb", NID_camellia_256_ecb, 8, &so[5053]},
+    {"CAMELLIA-128-CFB", "camellia-128-cfb", NID_camellia_128_cfb128, 8, &so[5061]},
+    {"CAMELLIA-192-CFB", "camellia-192-cfb", NID_camellia_192_cfb128, 8, &so[5069]},
+    {"CAMELLIA-256-CFB", "camellia-256-cfb", NID_camellia_256_cfb128, 8, &so[5077]},
+    {"CAMELLIA-128-CFB1", "camellia-128-cfb1", NID_camellia_128_cfb1},
+    {"CAMELLIA-192-CFB1", "camellia-192-cfb1", NID_camellia_192_cfb1},
+    {"CAMELLIA-256-CFB1", "camellia-256-cfb1", NID_camellia_256_cfb1},
+    {"CAMELLIA-128-CFB8", "camellia-128-cfb8", NID_camellia_128_cfb8},
+    {"CAMELLIA-192-CFB8", "camellia-192-cfb8", NID_camellia_192_cfb8},
+    {"CAMELLIA-256-CFB8", "camellia-256-cfb8", NID_camellia_256_cfb8},
+    {"CAMELLIA-128-OFB", "camellia-128-ofb", NID_camellia_128_ofb128, 8, &so[5085]},
+    {"CAMELLIA-192-OFB", "camellia-192-ofb", NID_camellia_192_ofb128, 8, &so[5093]},
+    {"CAMELLIA-256-OFB", "camellia-256-ofb", NID_camellia_256_ofb128, 8, &so[5101]},
+    {"subjectDirectoryAttributes", "X509v3 Subject Directory Attributes", NID_subject_directory_attributes, 3, &so[5109]},
+    {"issuingDistributionPoint", "X509v3 Issuing Distribution Point", NID_issuing_distribution_point, 3, &so[5112]},
+    {"certificateIssuer", "X509v3 Certificate Issuer", NID_certificate_issuer, 3, &so[5115]},
+    { NULL, NULL, NID_undef },
+    {"KISA", "kisa", NID_kisa, 6, &so[5118]},
+    { NULL, NULL, NID_undef },
+    { NULL, NULL, NID_undef },
+    {"SEED-ECB", "seed-ecb", NID_seed_ecb, 8, &so[5124]},
+    {"SEED-CBC", "seed-cbc", NID_seed_cbc, 8, &so[5132]},
+    {"SEED-OFB", "seed-ofb", NID_seed_ofb128, 8, &so[5140]},
+    {"SEED-CFB", "seed-cfb", NID_seed_cfb128, 8, &so[5148]},
+    {"HMAC-MD5", "hmac-md5", NID_hmac_md5, 8, &so[5156]},
+    {"HMAC-SHA1", "hmac-sha1", NID_hmac_sha1, 8, &so[5164]},
+    {"id-PasswordBasedMAC", "password based MAC", NID_id_PasswordBasedMAC, 9, &so[5172]},
+    {"id-DHBasedMac", "Diffie-Hellman based MAC", NID_id_DHBasedMac, 9, &so[5181]},
+    {"id-it-suppLangTags", "id-it-suppLangTags", NID_id_it_suppLangTags, 8, &so[5190]},
+    {"caRepository", "CA Repository", NID_caRepository, 8, &so[5198]},
+    {"id-smime-ct-compressedData", "id-smime-ct-compressedData", NID_id_smime_ct_compressedData, 11, &so[5206]},
+    {"id-ct-asciiTextWithCRLF", "id-ct-asciiTextWithCRLF", NID_id_ct_asciiTextWithCRLF, 11, &so[5217]},
+    {"id-aes128-wrap", "id-aes128-wrap", NID_id_aes128_wrap, 9, &so[5228]},
+    {"id-aes192-wrap", "id-aes192-wrap", NID_id_aes192_wrap, 9, &so[5237]},
+    {"id-aes256-wrap", "id-aes256-wrap", NID_id_aes256_wrap, 9, &so[5246]},
+    {"ecdsa-with-Recommended", "ecdsa-with-Recommended", NID_ecdsa_with_Recommended, 7, &so[5255]},
+    {"ecdsa-with-Specified", "ecdsa-with-Specified", NID_ecdsa_with_Specified, 7, &so[5262]},
+    {"ecdsa-with-SHA224", "ecdsa-with-SHA224", NID_ecdsa_with_SHA224, 8, &so[5269]},
+    {"ecdsa-with-SHA256", "ecdsa-with-SHA256", NID_ecdsa_with_SHA256, 8, &so[5277]},
+    {"ecdsa-with-SHA384", "ecdsa-with-SHA384", NID_ecdsa_with_SHA384, 8, &so[5285]},
+    {"ecdsa-with-SHA512", "ecdsa-with-SHA512", NID_ecdsa_with_SHA512, 8, &so[5293]},
+    {"hmacWithMD5", "hmacWithMD5", NID_hmacWithMD5, 8, &so[5301]},
+    {"hmacWithSHA224", "hmacWithSHA224", NID_hmacWithSHA224, 8, &so[5309]},
+    {"hmacWithSHA256", "hmacWithSHA256", NID_hmacWithSHA256, 8, &so[5317]},
+    {"hmacWithSHA384", "hmacWithSHA384", NID_hmacWithSHA384, 8, &so[5325]},
+    {"hmacWithSHA512", "hmacWithSHA512", NID_hmacWithSHA512, 8, &so[5333]},
+    {"dsa_with_SHA224", "dsa_with_SHA224", NID_dsa_with_SHA224, 9, &so[5341]},
+    {"dsa_with_SHA256", "dsa_with_SHA256", NID_dsa_with_SHA256, 9, &so[5350]},
+    {"whirlpool", "whirlpool", NID_whirlpool, 6, &so[5359]},
+    {"cryptopro", "cryptopro", NID_cryptopro, 5, &so[5365]},
+    {"cryptocom", "cryptocom", NID_cryptocom, 5, &so[5370]},
+    {"id-GostR3411-94-with-GostR3410-2001", "GOST R 34.11-94 with GOST R 34.10-2001", NID_id_GostR3411_94_with_GostR3410_2001, 6, &so[5375]},
+    {"id-GostR3411-94-with-GostR3410-94", "GOST R 34.11-94 with GOST R 34.10-94", NID_id_GostR3411_94_with_GostR3410_94, 6, &so[5381]},
+    {"md_gost94", "GOST R 34.11-94", NID_id_GostR3411_94, 6, &so[5387]},
+    {"id-HMACGostR3411-94", "HMAC GOST 34.11-94", NID_id_HMACGostR3411_94, 6, &so[5393]},
+    {"gost2001", "GOST R 34.10-2001", NID_id_GostR3410_2001, 6, &so[5399]},
+    {"gost94", "GOST R 34.10-94", NID_id_GostR3410_94, 6, &so[5405]},
+    {"gost89", "GOST 28147-89", NID_id_Gost28147_89, 6, &so[5411]},
+    {"gost89-cnt", "gost89-cnt", NID_gost89_cnt},
+    {"gost-mac", "GOST 28147-89 MAC", NID_id_Gost28147_89_MAC, 6, &so[5417]},
+    {"prf-gostr3411-94", "GOST R 34.11-94 PRF", NID_id_GostR3411_94_prf, 6, &so[5423]},
+    {"id-GostR3410-2001DH", "GOST R 34.10-2001 DH", NID_id_GostR3410_2001DH, 6, &so[5429]},
+    {"id-GostR3410-94DH", "GOST R 34.10-94 DH", NID_id_GostR3410_94DH, 6, &so[5435]},
+    {"id-Gost28147-89-CryptoPro-KeyMeshing", "id-Gost28147-89-CryptoPro-KeyMeshing", NID_id_Gost28147_89_CryptoPro_KeyMeshing, 7, &so[5441]},
+    {"id-Gost28147-89-None-KeyMeshing", "id-Gost28147-89-None-KeyMeshing", NID_id_Gost28147_89_None_KeyMeshing, 7, &so[5448]},
+    {"id-GostR3411-94-TestParamSet", "id-GostR3411-94-TestParamSet", NID_id_GostR3411_94_TestParamSet, 7, &so[5455]},
+    {"id-GostR3411-94-CryptoProParamSet", "id-GostR3411-94-CryptoProParamSet", NID_id_GostR3411_94_CryptoProParamSet, 7, &so[5462]},
+    {"id-Gost28147-89-TestParamSet", "id-Gost28147-89-TestParamSet", NID_id_Gost28147_89_TestParamSet, 7, &so[5469]},
+    {"id-Gost28147-89-CryptoPro-A-ParamSet", "id-Gost28147-89-CryptoPro-A-ParamSet", NID_id_Gost28147_89_CryptoPro_A_ParamSet, 7, &so[5476]},
+    {"id-Gost28147-89-CryptoPro-B-ParamSet", "id-Gost28147-89-CryptoPro-B-ParamSet", NID_id_Gost28147_89_CryptoPro_B_ParamSet, 7, &so[5483]},
+    {"id-Gost28147-89-CryptoPro-C-ParamSet", "id-Gost28147-89-CryptoPro-C-ParamSet", NID_id_Gost28147_89_CryptoPro_C_ParamSet, 7, &so[5490]},
+    {"id-Gost28147-89-CryptoPro-D-ParamSet", "id-Gost28147-89-CryptoPro-D-ParamSet", NID_id_Gost28147_89_CryptoPro_D_ParamSet, 7, &so[5497]},
+    {"id-Gost28147-89-CryptoPro-Oscar-1-1-ParamSet", "id-Gost28147-89-CryptoPro-Oscar-1-1-ParamSet", NID_id_Gost28147_89_CryptoPro_Oscar_1_1_ParamSet, 7, &so[5504]},
+    {"id-Gost28147-89-CryptoPro-Oscar-1-0-ParamSet", "id-Gost28147-89-CryptoPro-Oscar-1-0-ParamSet", NID_id_Gost28147_89_CryptoPro_Oscar_1_0_ParamSet, 7, &so[5511]},
+    {"id-Gost28147-89-CryptoPro-RIC-1-ParamSet", "id-Gost28147-89-CryptoPro-RIC-1-ParamSet", NID_id_Gost28147_89_CryptoPro_RIC_1_ParamSet, 7, &so[5518]},
+    {"id-GostR3410-94-TestParamSet", "id-GostR3410-94-TestParamSet", NID_id_GostR3410_94_TestParamSet, 7, &so[5525]},
+    {"id-GostR3410-94-CryptoPro-A-ParamSet", "id-GostR3410-94-CryptoPro-A-ParamSet", NID_id_GostR3410_94_CryptoPro_A_ParamSet, 7, &so[5532]},
+    {"id-GostR3410-94-CryptoPro-B-ParamSet", "id-GostR3410-94-CryptoPro-B-ParamSet", NID_id_GostR3410_94_CryptoPro_B_ParamSet, 7, &so[5539]},
+    {"id-GostR3410-94-CryptoPro-C-ParamSet", "id-GostR3410-94-CryptoPro-C-ParamSet", NID_id_GostR3410_94_CryptoPro_C_ParamSet, 7, &so[5546]},
+    {"id-GostR3410-94-CryptoPro-D-ParamSet", "id-GostR3410-94-CryptoPro-D-ParamSet", NID_id_GostR3410_94_CryptoPro_D_ParamSet, 7, &so[5553]},
+    {"id-GostR3410-94-CryptoPro-XchA-ParamSet", "id-GostR3410-94-CryptoPro-XchA-ParamSet", NID_id_GostR3410_94_CryptoPro_XchA_ParamSet, 7, &so[5560]},
+    {"id-GostR3410-94-CryptoPro-XchB-ParamSet", "id-GostR3410-94-CryptoPro-XchB-ParamSet", NID_id_GostR3410_94_CryptoPro_XchB_ParamSet, 7, &so[5567]},
+    {"id-GostR3410-94-CryptoPro-XchC-ParamSet", "id-GostR3410-94-CryptoPro-XchC-ParamSet", NID_id_GostR3410_94_CryptoPro_XchC_ParamSet, 7, &so[5574]},
+    {"id-GostR3410-2001-TestParamSet", "id-GostR3410-2001-TestParamSet", NID_id_GostR3410_2001_TestParamSet, 7, &so[5581]},
+    {"id-GostR3410-2001-CryptoPro-A-ParamSet", "id-GostR3410-2001-CryptoPro-A-ParamSet", NID_id_GostR3410_2001_CryptoPro_A_ParamSet, 7, &so[5588]},
+    {"id-GostR3410-2001-CryptoPro-B-ParamSet", "id-GostR3410-2001-CryptoPro-B-ParamSet", NID_id_GostR3410_2001_CryptoPro_B_ParamSet, 7, &so[5595]},
+    {"id-GostR3410-2001-CryptoPro-C-ParamSet", "id-GostR3410-2001-CryptoPro-C-ParamSet", NID_id_GostR3410_2001_CryptoPro_C_ParamSet, 7, &so[5602]},
+    {"id-GostR3410-2001-CryptoPro-XchA-ParamSet", "id-GostR3410-2001-CryptoPro-XchA-ParamSet", NID_id_GostR3410_2001_CryptoPro_XchA_ParamSet, 7, &so[5609]},
+    {"id-GostR3410-2001-CryptoPro-XchB-ParamSet", "id-GostR3410-2001-CryptoPro-XchB-ParamSet", NID_id_GostR3410_2001_CryptoPro_XchB_ParamSet, 7, &so[5616]},
+    {"id-GostR3410-94-a", "id-GostR3410-94-a", NID_id_GostR3410_94_a, 7, &so[5623]},
+    {"id-GostR3410-94-aBis", "id-GostR3410-94-aBis", NID_id_GostR3410_94_aBis, 7, &so[5630]},
+    {"id-GostR3410-94-b", "id-GostR3410-94-b", NID_id_GostR3410_94_b, 7, &so[5637]},
+    {"id-GostR3410-94-bBis", "id-GostR3410-94-bBis", NID_id_GostR3410_94_bBis, 7, &so[5644]},
+    {"id-Gost28147-89-cc", "GOST 28147-89 Cryptocom ParamSet", NID_id_Gost28147_89_cc, 8, &so[5651]},
+    {"gost94cc", "GOST 34.10-94 Cryptocom", NID_id_GostR3410_94_cc, 8, &so[5659]},
+    {"gost2001cc", "GOST 34.10-2001 Cryptocom", NID_id_GostR3410_2001_cc, 8, &so[5667]},
+    {"id-GostR3411-94-with-GostR3410-94-cc", "GOST R 34.11-94 with GOST R 34.10-94 Cryptocom", NID_id_GostR3411_94_with_GostR3410_94_cc, 8, &so[5675]},
+    {"id-GostR3411-94-with-GostR3410-2001-cc", "GOST R 34.11-94 with GOST R 34.10-2001 Cryptocom", NID_id_GostR3411_94_with_GostR3410_2001_cc, 8, &so[5683]},
+    {"id-GostR3410-2001-ParamSet-cc", "GOST R 3410-2001 Parameter Set Cryptocom", NID_id_GostR3410_2001_ParamSet_cc, 8, &so[5691]},
+    {"HMAC", "hmac", NID_hmac},
+    {"LocalKeySet", "Microsoft Local Key set", NID_LocalKeySet, 9, &so[5699]},
+    {"freshestCRL", "X509v3 Freshest CRL", NID_freshest_crl, 3, &so[5708]},
+    {"id-on-permanentIdentifier", "Permanent Identifier", NID_id_on_permanentIdentifier, 8, &so[5711]},
+    {"searchGuide", "searchGuide", NID_searchGuide, 3, &so[5719]},
+    {"businessCategory", "businessCategory", NID_businessCategory, 3, &so[5722]},
+    {"postalAddress", "postalAddress", NID_postalAddress, 3, &so[5725]},
+    {"postOfficeBox", "postOfficeBox", NID_postOfficeBox, 3, &so[5728]},
+    {"physicalDeliveryOfficeName", "physicalDeliveryOfficeName", NID_physicalDeliveryOfficeName, 3, &so[5731]},
+    {"telephoneNumber", "telephoneNumber", NID_telephoneNumber, 3, &so[5734]},
+    {"telexNumber", "telexNumber", NID_telexNumber, 3, &so[5737]},
+    {"teletexTerminalIdentifier", "teletexTerminalIdentifier", NID_teletexTerminalIdentifier, 3, &so[5740]},
+    {"facsimileTelephoneNumber", "facsimileTelephoneNumber", NID_facsimileTelephoneNumber, 3, &so[5743]},
+    {"x121Address", "x121Address", NID_x121Address, 3, &so[5746]},
+    {"internationaliSDNNumber", "internationaliSDNNumber", NID_internationaliSDNNumber, 3, &so[5749]},
+    {"registeredAddress", "registeredAddress", NID_registeredAddress, 3, &so[5752]},
+    {"destinationIndicator", "destinationIndicator", NID_destinationIndicator, 3, &so[5755]},
+    {"preferredDeliveryMethod", "preferredDeliveryMethod", NID_preferredDeliveryMethod, 3, &so[5758]},
+    {"presentationAddress", "presentationAddress", NID_presentationAddress, 3, &so[5761]},
+    {"supportedApplicationContext", "supportedApplicationContext", NID_supportedApplicationContext, 3, &so[5764]},
+    {"member", "member", NID_member, 3, &so[5767]},
+    {"owner", "owner", NID_owner, 3, &so[5770]},
+    {"roleOccupant", "roleOccupant", NID_roleOccupant, 3, &so[5773]},
+    {"seeAlso", "seeAlso", NID_seeAlso, 3, &so[5776]},
+    {"userPassword", "userPassword", NID_userPassword, 3, &so[5779]},
+    {"userCertificate", "userCertificate", NID_userCertificate, 3, &so[5782]},
+    {"cACertificate", "cACertificate", NID_cACertificate, 3, &so[5785]},
+    {"authorityRevocationList", "authorityRevocationList", NID_authorityRevocationList, 3, &so[5788]},
+    {"certificateRevocationList", "certificateRevocationList", NID_certificateRevocationList, 3, &so[5791]},
+    {"crossCertificatePair", "crossCertificatePair", NID_crossCertificatePair, 3, &so[5794]},
+    {"enhancedSearchGuide", "enhancedSearchGuide", NID_enhancedSearchGuide, 3, &so[5797]},
+    {"protocolInformation", "protocolInformation", NID_protocolInformation, 3, &so[5800]},
+    {"distinguishedName", "distinguishedName", NID_distinguishedName, 3, &so[5803]},
+    {"uniqueMember", "uniqueMember", NID_uniqueMember, 3, &so[5806]},
+    {"houseIdentifier", "houseIdentifier", NID_houseIdentifier, 3, &so[5809]},
+    {"supportedAlgorithms", "supportedAlgorithms", NID_supportedAlgorithms, 3, &so[5812]},
+    {"deltaRevocationList", "deltaRevocationList", NID_deltaRevocationList, 3, &so[5815]},
+    {"dmdName", "dmdName", NID_dmdName, 3, &so[5818]},
+    {"id-alg-PWRI-KEK", "id-alg-PWRI-KEK", NID_id_alg_PWRI_KEK, 11, &so[5821]},
+    {"CMAC", "cmac", NID_cmac},
+    {"id-aes128-GCM", "aes-128-gcm", NID_aes_128_gcm, 9, &so[5832]},
+    {"id-aes128-CCM", "aes-128-ccm", NID_aes_128_ccm, 9, &so[5841]},
+    {"id-aes128-wrap-pad", "id-aes128-wrap-pad", NID_id_aes128_wrap_pad, 9, &so[5850]},
+    {"id-aes192-GCM", "aes-192-gcm", NID_aes_192_gcm, 9, &so[5859]},
+    {"id-aes192-CCM", "aes-192-ccm", NID_aes_192_ccm, 9, &so[5868]},
+    {"id-aes192-wrap-pad", "id-aes192-wrap-pad", NID_id_aes192_wrap_pad, 9, &so[5877]},
+    {"id-aes256-GCM", "aes-256-gcm", NID_aes_256_gcm, 9, &so[5886]},
+    {"id-aes256-CCM", "aes-256-ccm", NID_aes_256_ccm, 9, &so[5895]},
+    {"id-aes256-wrap-pad", "id-aes256-wrap-pad", NID_id_aes256_wrap_pad, 9, &so[5904]},
+    {"AES-128-CTR", "aes-128-ctr", NID_aes_128_ctr},
+    {"AES-192-CTR", "aes-192-ctr", NID_aes_192_ctr},
+    {"AES-256-CTR", "aes-256-ctr", NID_aes_256_ctr},
+    {"id-camellia128-wrap", "id-camellia128-wrap", NID_id_camellia128_wrap, 11, &so[5913]},
+    {"id-camellia192-wrap", "id-camellia192-wrap", NID_id_camellia192_wrap, 11, &so[5924]},
+    {"id-camellia256-wrap", "id-camellia256-wrap", NID_id_camellia256_wrap, 11, &so[5935]},
+    {"anyExtendedKeyUsage", "Any Extended Key Usage", NID_anyExtendedKeyUsage, 4, &so[5946]},
+    {"MGF1", "mgf1", NID_mgf1, 9, &so[5950]},
+    {"RSASSA-PSS", "rsassaPss", NID_rsassaPss, 9, &so[5959]},
+    {"AES-128-XTS", "aes-128-xts", NID_aes_128_xts, 8, &so[5968]},
+    {"AES-256-XTS", "aes-256-xts", NID_aes_256_xts, 8, &so[5976]},
+    {"RC4-HMAC-MD5", "rc4-hmac-md5", NID_rc4_hmac_md5},
+    {"AES-128-CBC-HMAC-SHA1", "aes-128-cbc-hmac-sha1", NID_aes_128_cbc_hmac_sha1},
+    {"AES-192-CBC-HMAC-SHA1", "aes-192-cbc-hmac-sha1", NID_aes_192_cbc_hmac_sha1},
+    {"AES-256-CBC-HMAC-SHA1", "aes-256-cbc-hmac-sha1", NID_aes_256_cbc_hmac_sha1},
+    {"RSAES-OAEP", "rsaesOaep", NID_rsaesOaep, 9, &so[5984]},
+    {"dhpublicnumber", "X9.42 DH", NID_dhpublicnumber, 7, &so[5993]},
+    {"brainpoolP160r1", "brainpoolP160r1", NID_brainpoolP160r1, 9, &so[6000]},
+    {"brainpoolP160t1", "brainpoolP160t1", NID_brainpoolP160t1, 9, &so[6009]},
+    {"brainpoolP192r1", "brainpoolP192r1", NID_brainpoolP192r1, 9, &so[6018]},
+    {"brainpoolP192t1", "brainpoolP192t1", NID_brainpoolP192t1, 9, &so[6027]},
+    {"brainpoolP224r1", "brainpoolP224r1", NID_brainpoolP224r1, 9, &so[6036]},
+    {"brainpoolP224t1", "brainpoolP224t1", NID_brainpoolP224t1, 9, &so[6045]},
+    {"brainpoolP256r1", "brainpoolP256r1", NID_brainpoolP256r1, 9, &so[6054]},
+    {"brainpoolP256t1", "brainpoolP256t1", NID_brainpoolP256t1, 9, &so[6063]},
+    {"brainpoolP320r1", "brainpoolP320r1", NID_brainpoolP320r1, 9, &so[6072]},
+    {"brainpoolP320t1", "brainpoolP320t1", NID_brainpoolP320t1, 9, &so[6081]},
+    {"brainpoolP384r1", "brainpoolP384r1", NID_brainpoolP384r1, 9, &so[6090]},
+    {"brainpoolP384t1", "brainpoolP384t1", NID_brainpoolP384t1, 9, &so[6099]},
+    {"brainpoolP512r1", "brainpoolP512r1", NID_brainpoolP512r1, 9, &so[6108]},
+    {"brainpoolP512t1", "brainpoolP512t1", NID_brainpoolP512t1, 9, &so[6117]},
+    {"PSPECIFIED", "pSpecified", NID_pSpecified, 9, &so[6126]},
+    {"dhSinglePass-stdDH-sha1kdf-scheme", "dhSinglePass-stdDH-sha1kdf-scheme", NID_dhSinglePass_stdDH_sha1kdf_scheme, 9, &so[6135]},
+    {"dhSinglePass-stdDH-sha224kdf-scheme", "dhSinglePass-stdDH-sha224kdf-scheme", NID_dhSinglePass_stdDH_sha224kdf_scheme, 6, &so[6144]},
+    {"dhSinglePass-stdDH-sha256kdf-scheme", "dhSinglePass-stdDH-sha256kdf-scheme", NID_dhSinglePass_stdDH_sha256kdf_scheme, 6, &so[6150]},
+    {"dhSinglePass-stdDH-sha384kdf-scheme", "dhSinglePass-stdDH-sha384kdf-scheme", NID_dhSinglePass_stdDH_sha384kdf_scheme, 6, &so[6156]},
+    {"dhSinglePass-stdDH-sha512kdf-scheme", "dhSinglePass-stdDH-sha512kdf-scheme", NID_dhSinglePass_stdDH_sha512kdf_scheme, 6, &so[6162]},
+    {"dhSinglePass-cofactorDH-sha1kdf-scheme", "dhSinglePass-cofactorDH-sha1kdf-scheme", NID_dhSinglePass_cofactorDH_sha1kdf_scheme, 9, &so[6168]},
+    {"dhSinglePass-cofactorDH-sha224kdf-scheme", "dhSinglePass-cofactorDH-sha224kdf-scheme", NID_dhSinglePass_cofactorDH_sha224kdf_scheme, 6, &so[6177]},
+    {"dhSinglePass-cofactorDH-sha256kdf-scheme", "dhSinglePass-cofactorDH-sha256kdf-scheme", NID_dhSinglePass_cofactorDH_sha256kdf_scheme, 6, &so[6183]},
+    {"dhSinglePass-cofactorDH-sha384kdf-scheme", "dhSinglePass-cofactorDH-sha384kdf-scheme", NID_dhSinglePass_cofactorDH_sha384kdf_scheme, 6, &so[6189]},
+    {"dhSinglePass-cofactorDH-sha512kdf-scheme", "dhSinglePass-cofactorDH-sha512kdf-scheme", NID_dhSinglePass_cofactorDH_sha512kdf_scheme, 6, &so[6195]},
+    {"dh-std-kdf", "dh-std-kdf", NID_dh_std_kdf},
+    {"dh-cofactor-kdf", "dh-cofactor-kdf", NID_dh_cofactor_kdf},
+    {"AES-128-CBC-HMAC-SHA256", "aes-128-cbc-hmac-sha256", NID_aes_128_cbc_hmac_sha256},
+    {"AES-192-CBC-HMAC-SHA256", "aes-192-cbc-hmac-sha256", NID_aes_192_cbc_hmac_sha256},
+    {"AES-256-CBC-HMAC-SHA256", "aes-256-cbc-hmac-sha256", NID_aes_256_cbc_hmac_sha256},
+    {"ct_precert_scts", "CT Precertificate SCTs", NID_ct_precert_scts, 10, &so[6201]},
+    {"ct_precert_poison", "CT Precertificate Poison", NID_ct_precert_poison, 10, &so[6211]},
+    {"ct_precert_signer", "CT Precertificate Signer", NID_ct_precert_signer, 10, &so[6221]},
+    {"ct_cert_scts", "CT Certificate SCTs", NID_ct_cert_scts, 10, &so[6231]},
+    {"jurisdictionL", "jurisdictionLocalityName", NID_jurisdictionLocalityName, 11, &so[6241]},
+    {"jurisdictionST", "jurisdictionStateOrProvinceName", NID_jurisdictionStateOrProvinceName, 11, &so[6252]},
+    {"jurisdictionC", "jurisdictionCountryName", NID_jurisdictionCountryName, 11, &so[6263]},
+    {"AES-128-OCB", "aes-128-ocb", NID_aes_128_ocb},
+    {"AES-192-OCB", "aes-192-ocb", NID_aes_192_ocb},
+    {"AES-256-OCB", "aes-256-ocb", NID_aes_256_ocb},
+    {"CAMELLIA-128-GCM", "camellia-128-gcm", NID_camellia_128_gcm, 8, &so[6274]},
+    {"CAMELLIA-128-CCM", "camellia-128-ccm", NID_camellia_128_ccm, 8, &so[6282]},
+    {"CAMELLIA-128-CTR", "camellia-128-ctr", NID_camellia_128_ctr, 8, &so[6290]},
+    {"CAMELLIA-128-CMAC", "camellia-128-cmac", NID_camellia_128_cmac, 8, &so[6298]},
+    {"CAMELLIA-192-GCM", "camellia-192-gcm", NID_camellia_192_gcm, 8, &so[6306]},
+    {"CAMELLIA-192-CCM", "camellia-192-ccm", NID_camellia_192_ccm, 8, &so[6314]},
+    {"CAMELLIA-192-CTR", "camellia-192-ctr", NID_camellia_192_ctr, 8, &so[6322]},
+    {"CAMELLIA-192-CMAC", "camellia-192-cmac", NID_camellia_192_cmac, 8, &so[6330]},
+    {"CAMELLIA-256-GCM", "camellia-256-gcm", NID_camellia_256_gcm, 8, &so[6338]},
+    {"CAMELLIA-256-CCM", "camellia-256-ccm", NID_camellia_256_ccm, 8, &so[6346]},
+    {"CAMELLIA-256-CTR", "camellia-256-ctr", NID_camellia_256_ctr, 8, &so[6354]},
+    {"CAMELLIA-256-CMAC", "camellia-256-cmac", NID_camellia_256_cmac, 8, &so[6362]},
+    {"id-scrypt", "scrypt", NID_id_scrypt, 9, &so[6370]},
+    {"id-tc26", "id-tc26", NID_id_tc26, 5, &so[6379]},
+    {"gost89-cnt-12", "gost89-cnt-12", NID_gost89_cnt_12},
+    {"gost-mac-12", "gost-mac-12", NID_gost_mac_12},
+    {"id-tc26-algorithms", "id-tc26-algorithms", NID_id_tc26_algorithms, 6, &so[6384]},
+    {"id-tc26-sign", "id-tc26-sign", NID_id_tc26_sign, 7, &so[6390]},
+    {"gost2012_256", "GOST R 34.10-2012 with 256 bit modulus", NID_id_GostR3410_2012_256, 8, &so[6397]},
+    {"gost2012_512", "GOST R 34.10-2012 with 512 bit modulus", NID_id_GostR3410_2012_512, 8, &so[6405]},
+    {"id-tc26-digest", "id-tc26-digest", NID_id_tc26_digest, 7, &so[6413]},
+    {"md_gost12_256", "GOST R 34.11-2012 with 256 bit hash", NID_id_GostR3411_2012_256, 8, &so[6420]},
+    {"md_gost12_512", "GOST R 34.11-2012 with 512 bit hash", NID_id_GostR3411_2012_512, 8, &so[6428]},
+    {"id-tc26-signwithdigest", "id-tc26-signwithdigest", NID_id_tc26_signwithdigest, 7, &so[6436]},
+    {"id-tc26-signwithdigest-gost3410-2012-256", "GOST R 34.10-2012 with GOST R 34.11-2012 (256 bit)", NID_id_tc26_signwithdigest_gost3410_2012_256, 8, &so[6443]},
+    {"id-tc26-signwithdigest-gost3410-2012-512", "GOST R 34.10-2012 with GOST R 34.11-2012 (512 bit)", NID_id_tc26_signwithdigest_gost3410_2012_512, 8, &so[6451]},
+    {"id-tc26-mac", "id-tc26-mac", NID_id_tc26_mac, 7, &so[6459]},
+    {"id-tc26-hmac-gost-3411-2012-256", "HMAC GOST 34.11-2012 256 bit", NID_id_tc26_hmac_gost_3411_2012_256, 8, &so[6466]},
+    {"id-tc26-hmac-gost-3411-2012-512", "HMAC GOST 34.11-2012 512 bit", NID_id_tc26_hmac_gost_3411_2012_512, 8, &so[6474]},
+    {"id-tc26-cipher", "id-tc26-cipher", NID_id_tc26_cipher, 7, &so[6482]},
+    {"id-tc26-agreement", "id-tc26-agreement", NID_id_tc26_agreement, 7, &so[6489]},
+    {"id-tc26-agreement-gost-3410-2012-256", "id-tc26-agreement-gost-3410-2012-256", NID_id_tc26_agreement_gost_3410_2012_256, 8, &so[6496]},
+    {"id-tc26-agreement-gost-3410-2012-512", "id-tc26-agreement-gost-3410-2012-512", NID_id_tc26_agreement_gost_3410_2012_512, 8, &so[6504]},
+    {"id-tc26-constants", "id-tc26-constants", NID_id_tc26_constants, 6, &so[6512]},
+    {"id-tc26-sign-constants", "id-tc26-sign-constants", NID_id_tc26_sign_constants, 7, &so[6518]},
+    {"id-tc26-gost-3410-2012-512-constants", "id-tc26-gost-3410-2012-512-constants", NID_id_tc26_gost_3410_2012_512_constants, 8, &so[6525]},
+    {"id-tc26-gost-3410-2012-512-paramSetTest", "GOST R 34.10-2012 (512 bit) testing parameter set", NID_id_tc26_gost_3410_2012_512_paramSetTest, 9, &so[6533]},
+    {"id-tc26-gost-3410-2012-512-paramSetA", "GOST R 34.10-2012 (512 bit) ParamSet A", NID_id_tc26_gost_3410_2012_512_paramSetA, 9, &so[6542]},
+    {"id-tc26-gost-3410-2012-512-paramSetB", "GOST R 34.10-2012 (512 bit) ParamSet B", NID_id_tc26_gost_3410_2012_512_paramSetB, 9, &so[6551]},
+    {"id-tc26-digest-constants", "id-tc26-digest-constants", NID_id_tc26_digest_constants, 7, &so[6560]},
+    {"id-tc26-cipher-constants", "id-tc26-cipher-constants", NID_id_tc26_cipher_constants, 7, &so[6567]},
+    {"id-tc26-gost-28147-constants", "id-tc26-gost-28147-constants", NID_id_tc26_gost_28147_constants, 8, &so[6574]},
+    {"id-tc26-gost-28147-param-Z", "GOST 28147-89 TC26 parameter set", NID_id_tc26_gost_28147_param_Z, 9, &so[6582]},
+    {"INN", "INN", NID_INN, 8, &so[6591]},
+    {"OGRN", "OGRN", NID_OGRN, 5, &so[6599]},
+    {"SNILS", "SNILS", NID_SNILS, 5, &so[6604]},
+    {"subjectSignTool", "Signing Tool of Subject", NID_subjectSignTool, 5, &so[6609]},
+    {"issuerSignTool", "Signing Tool of Issuer", NID_issuerSignTool, 5, &so[6614]},
+    {"gost89-cbc", "gost89-cbc", NID_gost89_cbc},
+    {"gost89-ecb", "gost89-ecb", NID_gost89_ecb},
+    {"gost89-ctr", "gost89-ctr", NID_gost89_ctr},
+    {"grasshopper-ecb", "grasshopper-ecb", NID_grasshopper_ecb},
+    {"grasshopper-ctr", "grasshopper-ctr", NID_grasshopper_ctr},
+    {"grasshopper-ofb", "grasshopper-ofb", NID_grasshopper_ofb},
+    {"grasshopper-cbc", "grasshopper-cbc", NID_grasshopper_cbc},
+    {"grasshopper-cfb", "grasshopper-cfb", NID_grasshopper_cfb},
+    {"grasshopper-mac", "grasshopper-mac", NID_grasshopper_mac},
+    {"ChaCha20-Poly1305", "chacha20-poly1305", NID_chacha20_poly1305},
+    {"ChaCha20", "chacha20", NID_chacha20},
+    {"tlsfeature", "TLS Feature", NID_tlsfeature, 8, &so[6619]},
+    {"TLS1-PRF", "tls1-prf", NID_tls1_prf},
+    {"ipsecIKE", "ipsec Internet Key Exchange", NID_ipsec_IKE, 8, &so[6627]},
+    {"capwapAC", "Ctrl/provision WAP Access", NID_capwapAC, 8, &so[6635]},
+    {"capwapWTP", "Ctrl/Provision WAP Termination", NID_capwapWTP, 8, &so[6643]},
+    {"secureShellClient", "SSH Client", NID_sshClient, 8, &so[6651]},
+    {"secureShellServer", "SSH Server", NID_sshServer, 8, &so[6659]},
+    {"sendRouter", "Send Router", NID_sendRouter, 8, &so[6667]},
+    {"sendProxiedRouter", "Send Proxied Router", NID_sendProxiedRouter, 8, &so[6675]},
+    {"sendOwner", "Send Owner", NID_sendOwner, 8, &so[6683]},
+    {"sendProxiedOwner", "Send Proxied Owner", NID_sendProxiedOwner, 8, &so[6691]},
+    {"id-pkinit", "id-pkinit", NID_id_pkinit, 6, &so[6699]},
+    {"pkInitClientAuth", "PKINIT Client Auth", NID_pkInitClientAuth, 7, &so[6705]},
+    {"pkInitKDC", "Signing KDC Response", NID_pkInitKDC, 7, &so[6712]},
+    {"X25519", "X25519", NID_X25519, 3, &so[6719]},
+    {"X448", "X448", NID_X448, 3, &so[6722]},
+    {"HKDF", "hkdf", NID_hkdf},
+    {"KxRSA", "kx-rsa", NID_kx_rsa},
+    {"KxECDHE", "kx-ecdhe", NID_kx_ecdhe},
+    {"KxDHE", "kx-dhe", NID_kx_dhe},
+    {"KxECDHE-PSK", "kx-ecdhe-psk", NID_kx_ecdhe_psk},
+    {"KxDHE-PSK", "kx-dhe-psk", NID_kx_dhe_psk},
+    {"KxRSA_PSK", "kx-rsa-psk", NID_kx_rsa_psk},
+    {"KxPSK", "kx-psk", NID_kx_psk},
+    {"KxSRP", "kx-srp", NID_kx_srp},
+    {"KxGOST", "kx-gost", NID_kx_gost},
+    {"AuthRSA", "auth-rsa", NID_auth_rsa},
+    {"AuthECDSA", "auth-ecdsa", NID_auth_ecdsa},
+    {"AuthPSK", "auth-psk", NID_auth_psk},
+    {"AuthDSS", "auth-dss", NID_auth_dss},
+    {"AuthGOST01", "auth-gost01", NID_auth_gost01},
+    {"AuthGOST12", "auth-gost12", NID_auth_gost12},
+    {"AuthSRP", "auth-srp", NID_auth_srp},
+    {"AuthNULL", "auth-null", NID_auth_null},
+    { NULL, NULL, NID_undef },
+    { NULL, NULL, NID_undef },
+    {"BLAKE2b512", "blake2b512", NID_blake2b512, 11, &so[6725]},
+    {"BLAKE2s256", "blake2s256", NID_blake2s256, 11, &so[6736]},
+    {"id-smime-ct-contentCollection", "id-smime-ct-contentCollection", NID_id_smime_ct_contentCollection, 11, &so[6747]},
+    {"id-smime-ct-authEnvelopedData", "id-smime-ct-authEnvelopedData", NID_id_smime_ct_authEnvelopedData, 11, &so[6758]},
+    {"id-ct-xml", "id-ct-xml", NID_id_ct_xml, 11, &so[6769]},
+    {"Poly1305", "poly1305", NID_poly1305},
+    {"SipHash", "siphash", NID_siphash},
+    {"KxANY", "kx-any", NID_kx_any},
+    {"AuthANY", "auth-any", NID_auth_any},
+    {"ARIA-128-ECB", "aria-128-ecb", NID_aria_128_ecb, 9, &so[6780]},
+    {"ARIA-128-CBC", "aria-128-cbc", NID_aria_128_cbc, 9, &so[6789]},
+    {"ARIA-128-CFB", "aria-128-cfb", NID_aria_128_cfb128, 9, &so[6798]},
+    {"ARIA-128-OFB", "aria-128-ofb", NID_aria_128_ofb128, 9, &so[6807]},
+    {"ARIA-128-CTR", "aria-128-ctr", NID_aria_128_ctr, 9, &so[6816]},
+    {"ARIA-192-ECB", "aria-192-ecb", NID_aria_192_ecb, 9, &so[6825]},
+    {"ARIA-192-CBC", "aria-192-cbc", NID_aria_192_cbc, 9, &so[6834]},
+    {"ARIA-192-CFB", "aria-192-cfb", NID_aria_192_cfb128, 9, &so[6843]},
+    {"ARIA-192-OFB", "aria-192-ofb", NID_aria_192_ofb128, 9, &so[6852]},
+    {"ARIA-192-CTR", "aria-192-ctr", NID_aria_192_ctr, 9, &so[6861]},
+    {"ARIA-256-ECB", "aria-256-ecb", NID_aria_256_ecb, 9, &so[6870]},
+    {"ARIA-256-CBC", "aria-256-cbc", NID_aria_256_cbc, 9, &so[6879]},
+    {"ARIA-256-CFB", "aria-256-cfb", NID_aria_256_cfb128, 9, &so[6888]},
+    {"ARIA-256-OFB", "aria-256-ofb", NID_aria_256_ofb128, 9, &so[6897]},
+    {"ARIA-256-CTR", "aria-256-ctr", NID_aria_256_ctr, 9, &so[6906]},
+    {"ARIA-128-CFB1", "aria-128-cfb1", NID_aria_128_cfb1},
+    {"ARIA-192-CFB1", "aria-192-cfb1", NID_aria_192_cfb1},
+    {"ARIA-256-CFB1", "aria-256-cfb1", NID_aria_256_cfb1},
+    {"ARIA-128-CFB8", "aria-128-cfb8", NID_aria_128_cfb8},
+    {"ARIA-192-CFB8", "aria-192-cfb8", NID_aria_192_cfb8},
+    {"ARIA-256-CFB8", "aria-256-cfb8", NID_aria_256_cfb8},
+    {"id-smime-aa-signingCertificateV2", "id-smime-aa-signingCertificateV2", NID_id_smime_aa_signingCertificateV2, 11, &so[6915]},
+    {"ED25519", "ED25519", NID_ED25519, 3, &so[6926]},
+    {"ED448", "ED448", NID_ED448, 3, &so[6929]},
+    {"organizationIdentifier", "organizationIdentifier", NID_organizationIdentifier, 3, &so[6932]},
+    {"c3", "countryCode3c", NID_countryCode3c, 3, &so[6935]},
+    {"n3", "countryCode3n", NID_countryCode3n, 3, &so[6938]},
+    {"dnsName", "dnsName", NID_dnsName, 3, &so[6941]},
+    {"x509ExtAdmission", "Professional Information or basis for Admission", NID_x509ExtAdmission, 5, &so[6944]},
+    {"SHA512-224", "sha512-224", NID_sha512_224, 9, &so[6949]},
+    {"SHA512-256", "sha512-256", NID_sha512_256, 9, &so[6958]},
+    {"SHA3-224", "sha3-224", NID_sha3_224, 9, &so[6967]},
+    {"SHA3-256", "sha3-256", NID_sha3_256, 9, &so[6976]},
+    {"SHA3-384", "sha3-384", NID_sha3_384, 9, &so[6985]},
+    {"SHA3-512", "sha3-512", NID_sha3_512, 9, &so[6994]},
+    {"SHAKE128", "shake128", NID_shake128, 9, &so[7003]},
+    {"SHAKE256", "shake256", NID_shake256, 9, &so[7012]},
+    {"id-hmacWithSHA3-224", "hmac-sha3-224", NID_hmac_sha3_224, 9, &so[7021]},
+    {"id-hmacWithSHA3-256", "hmac-sha3-256", NID_hmac_sha3_256, 9, &so[7030]},
+    {"id-hmacWithSHA3-384", "hmac-sha3-384", NID_hmac_sha3_384, 9, &so[7039]},
+    {"id-hmacWithSHA3-512", "hmac-sha3-512", NID_hmac_sha3_512, 9, &so[7048]},
+    {"id-dsa-with-sha384", "dsa_with_SHA384", NID_dsa_with_SHA384, 9, &so[7057]},
+    {"id-dsa-with-sha512", "dsa_with_SHA512", NID_dsa_with_SHA512, 9, &so[7066]},
+    {"id-dsa-with-sha3-224", "dsa_with_SHA3-224", NID_dsa_with_SHA3_224, 9, &so[7075]},
+    {"id-dsa-with-sha3-256", "dsa_with_SHA3-256", NID_dsa_with_SHA3_256, 9, &so[7084]},
+    {"id-dsa-with-sha3-384", "dsa_with_SHA3-384", NID_dsa_with_SHA3_384, 9, &so[7093]},
+    {"id-dsa-with-sha3-512", "dsa_with_SHA3-512", NID_dsa_with_SHA3_512, 9, &so[7102]},
+    {"id-ecdsa-with-sha3-224", "ecdsa_with_SHA3-224", NID_ecdsa_with_SHA3_224, 9, &so[7111]},
+    {"id-ecdsa-with-sha3-256", "ecdsa_with_SHA3-256", NID_ecdsa_with_SHA3_256, 9, &so[7120]},
+    {"id-ecdsa-with-sha3-384", "ecdsa_with_SHA3-384", NID_ecdsa_with_SHA3_384, 9, &so[7129]},
+    {"id-ecdsa-with-sha3-512", "ecdsa_with_SHA3-512", NID_ecdsa_with_SHA3_512, 9, &so[7138]},
+    {"id-rsassa-pkcs1-v1_5-with-sha3-224", "RSA-SHA3-224", NID_RSA_SHA3_224, 9, &so[7147]},
+    {"id-rsassa-pkcs1-v1_5-with-sha3-256", "RSA-SHA3-256", NID_RSA_SHA3_256, 9, &so[7156]},
+    {"id-rsassa-pkcs1-v1_5-with-sha3-384", "RSA-SHA3-384", NID_RSA_SHA3_384, 9, &so[7165]},
+    {"id-rsassa-pkcs1-v1_5-with-sha3-512", "RSA-SHA3-512", NID_RSA_SHA3_512, 9, &so[7174]},
+    {"ARIA-128-CCM", "aria-128-ccm", NID_aria_128_ccm, 9, &so[7183]},
+    {"ARIA-192-CCM", "aria-192-ccm", NID_aria_192_ccm, 9, &so[7192]},
+    {"ARIA-256-CCM", "aria-256-ccm", NID_aria_256_ccm, 9, &so[7201]},
+    {"ARIA-128-GCM", "aria-128-gcm", NID_aria_128_gcm, 9, &so[7210]},
+    {"ARIA-192-GCM", "aria-192-gcm", NID_aria_192_gcm, 9, &so[7219]},
+    {"ARIA-256-GCM", "aria-256-gcm", NID_aria_256_gcm, 9, &so[7228]},
+    {"ffdhe2048", "ffdhe2048", NID_ffdhe2048},
+    {"ffdhe3072", "ffdhe3072", NID_ffdhe3072},
+    {"ffdhe4096", "ffdhe4096", NID_ffdhe4096},
+    {"ffdhe6144", "ffdhe6144", NID_ffdhe6144},
+    {"ffdhe8192", "ffdhe8192", NID_ffdhe8192},
+    {"cmcCA", "CMC Certificate Authority", NID_cmcCA, 8, &so[7237]},
+    {"cmcRA", "CMC Registration Authority", NID_cmcRA, 8, &so[7245]},
+    {"SM4-ECB", "sm4-ecb", NID_sm4_ecb, 8, &so[7253]},
+    {"SM4-CBC", "sm4-cbc", NID_sm4_cbc, 8, &so[7261]},
+    {"SM4-OFB", "sm4-ofb", NID_sm4_ofb128, 8, &so[7269]},
+    {"SM4-CFB1", "sm4-cfb1", NID_sm4_cfb1, 8, &so[7277]},
+    {"SM4-CFB", "sm4-cfb", NID_sm4_cfb128, 8, &so[7285]},
+    {"SM4-CFB8", "sm4-cfb8", NID_sm4_cfb8, 8, &so[7293]},
+    {"SM4-CTR", "sm4-ctr", NID_sm4_ctr, 8, &so[7301]},
+    {"ISO-CN", "ISO CN Member Body", NID_ISO_CN, 3, &so[7309]},
+    {"oscca", "oscca", NID_oscca, 5, &so[7312]},
+    {"sm-scheme", "sm-scheme", NID_sm_scheme, 6, &so[7317]},
+    {"SM3", "sm3", NID_sm3, 8, &so[7323]},
+    {"RSA-SM3", "sm3WithRSAEncryption", NID_sm3WithRSAEncryption, 8, &so[7331]},
+    {"RSA-SHA512/224", "sha512-224WithRSAEncryption", NID_sha512_224WithRSAEncryption, 9, &so[7339]},
+    {"RSA-SHA512/256", "sha512-256WithRSAEncryption", NID_sha512_256WithRSAEncryption, 9, &so[7348]},
+    {"id-tc26-gost-3410-2012-256-constants", "id-tc26-gost-3410-2012-256-constants", NID_id_tc26_gost_3410_2012_256_constants, 8, &so[7357]},
+    {"id-tc26-gost-3410-2012-256-paramSetA", "GOST R 34.10-2012 (256 bit) ParamSet A", NID_id_tc26_gost_3410_2012_256_paramSetA, 9, &so[7365]},
+    {"id-tc26-gost-3410-2012-512-paramSetC", "GOST R 34.10-2012 (512 bit) ParamSet C", NID_id_tc26_gost_3410_2012_512_paramSetC, 9, &so[7374]},
+    {"ISO-UA", "ISO-UA", NID_ISO_UA, 3, &so[7383]},
+    {"ua-pki", "ua-pki", NID_ua_pki, 7, &so[7386]},
+    {"dstu28147", "DSTU Gost 28147-2009", NID_dstu28147, 10, &so[7393]},
+    {"dstu28147-ofb", "DSTU Gost 28147-2009 OFB mode", NID_dstu28147_ofb, 11, &so[7403]},
+    {"dstu28147-cfb", "DSTU Gost 28147-2009 CFB mode", NID_dstu28147_cfb, 11, &so[7414]},
+    {"dstu28147-wrap", "DSTU Gost 28147-2009 key wrap", NID_dstu28147_wrap, 11, &so[7425]},
+    {"hmacWithDstu34311", "HMAC DSTU Gost 34311-95", NID_hmacWithDstu34311, 10, &so[7436]},
+    {"dstu34311", "DSTU Gost 34311-95", NID_dstu34311, 10, &so[7446]},
+    {"dstu4145le", "DSTU 4145-2002 little endian", NID_dstu4145le, 11, &so[7456]},
+    {"dstu4145be", "DSTU 4145-2002 big endian", NID_dstu4145be, 13, &so[7467]},
+    {"uacurve0", "DSTU curve 0", NID_uacurve0, 13, &so[7480]},
+    {"uacurve1", "DSTU curve 1", NID_uacurve1, 13, &so[7493]},
+    {"uacurve2", "DSTU curve 2", NID_uacurve2, 13, &so[7506]},
+    {"uacurve3", "DSTU curve 3", NID_uacurve3, 13, &so[7519]},
+    {"uacurve4", "DSTU curve 4", NID_uacurve4, 13, &so[7532]},
+    {"uacurve5", "DSTU curve 5", NID_uacurve5, 13, &so[7545]},
+    {"uacurve6", "DSTU curve 6", NID_uacurve6, 13, &so[7558]},
+    {"uacurve7", "DSTU curve 7", NID_uacurve7, 13, &so[7571]},
+    {"uacurve8", "DSTU curve 8", NID_uacurve8, 13, &so[7584]},
+    {"uacurve9", "DSTU curve 9", NID_uacurve9, 13, &so[7597]},
+    {"ieee", "ieee", NID_ieee, 2, &so[7610]},
+    {"ieee-siswg", "IEEE Security in Storage Working Group", NID_ieee_siswg, 5, &so[7612]},
+    {"SM2", "sm2", NID_sm2, 8, &so[7617]},
+    {"id-tc26-cipher-gostr3412-2015-magma", "id-tc26-cipher-gostr3412-2015-magma", NID_id_tc26_cipher_gostr3412_2015_magma, 8, &so[7625]},
+    {"id-tc26-cipher-gostr3412-2015-magma-ctracpkm", "id-tc26-cipher-gostr3412-2015-magma-ctracpkm", NID_id_tc26_cipher_gostr3412_2015_magma_ctracpkm, 9, &so[7633]},
+    {"id-tc26-cipher-gostr3412-2015-magma-ctracpkm-omac", "id-tc26-cipher-gostr3412-2015-magma-ctracpkm-omac", NID_id_tc26_cipher_gostr3412_2015_magma_ctracpkm_omac, 9, &so[7642]},
+    {"id-tc26-cipher-gostr3412-2015-kuznyechik", "id-tc26-cipher-gostr3412-2015-kuznyechik", NID_id_tc26_cipher_gostr3412_2015_kuznyechik, 8, &so[7651]},
+    {"id-tc26-cipher-gostr3412-2015-kuznyechik-ctracpkm", "id-tc26-cipher-gostr3412-2015-kuznyechik-ctracpkm", NID_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm, 9, &so[7659]},
+    {"id-tc26-cipher-gostr3412-2015-kuznyechik-ctracpkm-omac", "id-tc26-cipher-gostr3412-2015-kuznyechik-ctracpkm-omac", NID_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm_omac, 9, &so[7668]},
+    {"id-tc26-wrap", "id-tc26-wrap", NID_id_tc26_wrap, 7, &so[7677]},
+    {"id-tc26-wrap-gostr3412-2015-magma", "id-tc26-wrap-gostr3412-2015-magma", NID_id_tc26_wrap_gostr3412_2015_magma, 8, &so[7684]},
+    {"id-tc26-wrap-gostr3412-2015-magma-kexp15", "id-tc26-wrap-gostr3412-2015-magma-kexp15", NID_id_tc26_wrap_gostr3412_2015_magma_kexp15, 9, &so[7692]},
+    {"id-tc26-wrap-gostr3412-2015-kuznyechik", "id-tc26-wrap-gostr3412-2015-kuznyechik", NID_id_tc26_wrap_gostr3412_2015_kuznyechik, 8, &so[7701]},
+    {"id-tc26-wrap-gostr3412-2015-kuznyechik-kexp15", "id-tc26-wrap-gostr3412-2015-kuznyechik-kexp15", NID_id_tc26_wrap_gostr3412_2015_kuznyechik_kexp15, 9, &so[7709]},
+    {"id-tc26-gost-3410-2012-256-paramSetB", "GOST R 34.10-2012 (256 bit) ParamSet B", NID_id_tc26_gost_3410_2012_256_paramSetB, 9, &so[7718]},
+    {"id-tc26-gost-3410-2012-256-paramSetC", "GOST R 34.10-2012 (256 bit) ParamSet C", NID_id_tc26_gost_3410_2012_256_paramSetC, 9, &so[7727]},
+    {"id-tc26-gost-3410-2012-256-paramSetD", "GOST R 34.10-2012 (256 bit) ParamSet D", NID_id_tc26_gost_3410_2012_256_paramSetD, 9, &so[7736]},
+    {"magma-ecb", "magma-ecb", NID_magma_ecb},
+    {"magma-ctr", "magma-ctr", NID_magma_ctr},
+    {"magma-ofb", "magma-ofb", NID_magma_ofb},
+    {"magma-cbc", "magma-cbc", NID_magma_cbc},
+    {"magma-cfb", "magma-cfb", NID_magma_cfb},
+    {"magma-mac", "magma-mac", NID_magma_mac},
+    {"hmacWithSHA512-224", "hmacWithSHA512-224", NID_hmacWithSHA512_224, 8, &so[7745]},
+    {"hmacWithSHA512-256", "hmacWithSHA512-256", NID_hmacWithSHA512_256, 8, &so[7753]},
+};
+
+#define NUM_SN 1186
+static const unsigned int sn_objs[NUM_SN] = {
+     364,    /* "AD_DVCS" */
+     419,    /* "AES-128-CBC" */
+     916,    /* "AES-128-CBC-HMAC-SHA1" */
+     948,    /* "AES-128-CBC-HMAC-SHA256" */
+     421,    /* "AES-128-CFB" */
+     650,    /* "AES-128-CFB1" */
+     653,    /* "AES-128-CFB8" */
+     904,    /* "AES-128-CTR" */
+     418,    /* "AES-128-ECB" */
+     958,    /* "AES-128-OCB" */
+     420,    /* "AES-128-OFB" */
+     913,    /* "AES-128-XTS" */
+     423,    /* "AES-192-CBC" */
+     917,    /* "AES-192-CBC-HMAC-SHA1" */
+     949,    /* "AES-192-CBC-HMAC-SHA256" */
+     425,    /* "AES-192-CFB" */
+     651,    /* "AES-192-CFB1" */
+     654,    /* "AES-192-CFB8" */
+     905,    /* "AES-192-CTR" */
+     422,    /* "AES-192-ECB" */
+     959,    /* "AES-192-OCB" */
+     424,    /* "AES-192-OFB" */
+     427,    /* "AES-256-CBC" */
+     918,    /* "AES-256-CBC-HMAC-SHA1" */
+     950,    /* "AES-256-CBC-HMAC-SHA256" */
+     429,    /* "AES-256-CFB" */
+     652,    /* "AES-256-CFB1" */
+     655,    /* "AES-256-CFB8" */
+     906,    /* "AES-256-CTR" */
+     426,    /* "AES-256-ECB" */
+     960,    /* "AES-256-OCB" */
+     428,    /* "AES-256-OFB" */
+     914,    /* "AES-256-XTS" */
+    1066,    /* "ARIA-128-CBC" */
+    1120,    /* "ARIA-128-CCM" */
+    1067,    /* "ARIA-128-CFB" */
+    1080,    /* "ARIA-128-CFB1" */
+    1083,    /* "ARIA-128-CFB8" */
+    1069,    /* "ARIA-128-CTR" */
+    1065,    /* "ARIA-128-ECB" */
+    1123,    /* "ARIA-128-GCM" */
+    1068,    /* "ARIA-128-OFB" */
+    1071,    /* "ARIA-192-CBC" */
+    1121,    /* "ARIA-192-CCM" */
+    1072,    /* "ARIA-192-CFB" */
+    1081,    /* "ARIA-192-CFB1" */
+    1084,    /* "ARIA-192-CFB8" */
+    1074,    /* "ARIA-192-CTR" */
+    1070,    /* "ARIA-192-ECB" */
+    1124,    /* "ARIA-192-GCM" */
+    1073,    /* "ARIA-192-OFB" */
+    1076,    /* "ARIA-256-CBC" */
+    1122,    /* "ARIA-256-CCM" */
+    1077,    /* "ARIA-256-CFB" */
+    1082,    /* "ARIA-256-CFB1" */
+    1085,    /* "ARIA-256-CFB8" */
+    1079,    /* "ARIA-256-CTR" */
+    1075,    /* "ARIA-256-ECB" */
+    1125,    /* "ARIA-256-GCM" */
+    1078,    /* "ARIA-256-OFB" */
+    1064,    /* "AuthANY" */
+    1049,    /* "AuthDSS" */
+    1047,    /* "AuthECDSA" */
+    1050,    /* "AuthGOST01" */
+    1051,    /* "AuthGOST12" */
+    1053,    /* "AuthNULL" */
+    1048,    /* "AuthPSK" */
+    1046,    /* "AuthRSA" */
+    1052,    /* "AuthSRP" */
+      91,    /* "BF-CBC" */
+      93,    /* "BF-CFB" */
+      92,    /* "BF-ECB" */
+      94,    /* "BF-OFB" */
+    1056,    /* "BLAKE2b512" */
+    1057,    /* "BLAKE2s256" */
+      14,    /* "C" */
+     751,    /* "CAMELLIA-128-CBC" */
+     962,    /* "CAMELLIA-128-CCM" */
+     757,    /* "CAMELLIA-128-CFB" */
+     760,    /* "CAMELLIA-128-CFB1" */
+     763,    /* "CAMELLIA-128-CFB8" */
+     964,    /* "CAMELLIA-128-CMAC" */
+     963,    /* "CAMELLIA-128-CTR" */
+     754,    /* "CAMELLIA-128-ECB" */
+     961,    /* "CAMELLIA-128-GCM" */
+     766,    /* "CAMELLIA-128-OFB" */
+     752,    /* "CAMELLIA-192-CBC" */
+     966,    /* "CAMELLIA-192-CCM" */
+     758,    /* "CAMELLIA-192-CFB" */
+     761,    /* "CAMELLIA-192-CFB1" */
+     764,    /* "CAMELLIA-192-CFB8" */
+     968,    /* "CAMELLIA-192-CMAC" */
+     967,    /* "CAMELLIA-192-CTR" */
+     755,    /* "CAMELLIA-192-ECB" */
+     965,    /* "CAMELLIA-192-GCM" */
+     767,    /* "CAMELLIA-192-OFB" */
+     753,    /* "CAMELLIA-256-CBC" */
+     970,    /* "CAMELLIA-256-CCM" */
+     759,    /* "CAMELLIA-256-CFB" */
+     762,    /* "CAMELLIA-256-CFB1" */
+     765,    /* "CAMELLIA-256-CFB8" */
+     972,    /* "CAMELLIA-256-CMAC" */
+     971,    /* "CAMELLIA-256-CTR" */
+     756,    /* "CAMELLIA-256-ECB" */
+     969,    /* "CAMELLIA-256-GCM" */
+     768,    /* "CAMELLIA-256-OFB" */
+     108,    /* "CAST5-CBC" */
+     110,    /* "CAST5-CFB" */
+     109,    /* "CAST5-ECB" */
+     111,    /* "CAST5-OFB" */
+     894,    /* "CMAC" */
+      13,    /* "CN" */
+     141,    /* "CRLReason" */
+     417,    /* "CSPName" */
+    1019,    /* "ChaCha20" */
+    1018,    /* "ChaCha20-Poly1305" */
+     367,    /* "CrlID" */
+     391,    /* "DC" */
+      31,    /* "DES-CBC" */
+     643,    /* "DES-CDMF" */
+      30,    /* "DES-CFB" */
+     656,    /* "DES-CFB1" */
+     657,    /* "DES-CFB8" */
+      29,    /* "DES-ECB" */
+      32,    /* "DES-EDE" */
+      43,    /* "DES-EDE-CBC" */
+      60,    /* "DES-EDE-CFB" */
+      62,    /* "DES-EDE-OFB" */
+      33,    /* "DES-EDE3" */
+      44,    /* "DES-EDE3-CBC" */
+      61,    /* "DES-EDE3-CFB" */
+     658,    /* "DES-EDE3-CFB1" */
+     659,    /* "DES-EDE3-CFB8" */
+      63,    /* "DES-EDE3-OFB" */
+      45,    /* "DES-OFB" */
+      80,    /* "DESX-CBC" */
+     380,    /* "DOD" */
+     116,    /* "DSA" */
+      66,    /* "DSA-SHA" */
+     113,    /* "DSA-SHA1" */
+      70,    /* "DSA-SHA1-old" */
+      67,    /* "DSA-old" */
+     297,    /* "DVCS" */
+    1087,    /* "ED25519" */
+    1088,    /* "ED448" */
+      99,    /* "GN" */
+    1036,    /* "HKDF" */
+     855,    /* "HMAC" */
+     780,    /* "HMAC-MD5" */
+     781,    /* "HMAC-SHA1" */
+     381,    /* "IANA" */
+      34,    /* "IDEA-CBC" */
+      35,    /* "IDEA-CFB" */
+      36,    /* "IDEA-ECB" */
+      46,    /* "IDEA-OFB" */
+    1004,    /* "INN" */
+     181,    /* "ISO" */
+    1140,    /* "ISO-CN" */
+    1150,    /* "ISO-UA" */
+     183,    /* "ISO-US" */
+     645,    /* "ITU-T" */
+     646,    /* "JOINT-ISO-ITU-T" */
+     773,    /* "KISA" */
+    1063,    /* "KxANY" */
+    1039,    /* "KxDHE" */
+    1041,    /* "KxDHE-PSK" */
+    1038,    /* "KxECDHE" */
+    1040,    /* "KxECDHE-PSK" */
+    1045,    /* "KxGOST" */
+    1043,    /* "KxPSK" */
+    1037,    /* "KxRSA" */
+    1042,    /* "KxRSA_PSK" */
+    1044,    /* "KxSRP" */
+      15,    /* "L" */
+     856,    /* "LocalKeySet" */
+       3,    /* "MD2" */
+     257,    /* "MD4" */
+       4,    /* "MD5" */
+     114,    /* "MD5-SHA1" */
+      95,    /* "MDC2" */
+     911,    /* "MGF1" */
+     388,    /* "Mail" */
+     393,    /* "NULL" */
+     404,    /* "NULL" */
+      57,    /* "Netscape" */
+     366,    /* "Nonce" */
+      17,    /* "O" */
+     178,    /* "OCSP" */
+     180,    /* "OCSPSigning" */
+    1005,    /* "OGRN" */
+     379,    /* "ORG" */
+      18,    /* "OU" */
+     749,    /* "Oakley-EC2N-3" */
+     750,    /* "Oakley-EC2N-4" */
+       9,    /* "PBE-MD2-DES" */
+     168,    /* "PBE-MD2-RC2-64" */
+      10,    /* "PBE-MD5-DES" */
+     169,    /* "PBE-MD5-RC2-64" */
+     147,    /* "PBE-SHA1-2DES" */
+     146,    /* "PBE-SHA1-3DES" */
+     170,    /* "PBE-SHA1-DES" */
+     148,    /* "PBE-SHA1-RC2-128" */
+     149,    /* "PBE-SHA1-RC2-40" */
+      68,    /* "PBE-SHA1-RC2-64" */
+     144,    /* "PBE-SHA1-RC4-128" */
+     145,    /* "PBE-SHA1-RC4-40" */
+     161,    /* "PBES2" */
+      69,    /* "PBKDF2" */
+     162,    /* "PBMAC1" */
+     127,    /* "PKIX" */
+     935,    /* "PSPECIFIED" */
+    1061,    /* "Poly1305" */
+      98,    /* "RC2-40-CBC" */
+     166,    /* "RC2-64-CBC" */
+      37,    /* "RC2-CBC" */
+      39,    /* "RC2-CFB" */
+      38,    /* "RC2-ECB" */
+      40,    /* "RC2-OFB" */
+       5,    /* "RC4" */
+      97,    /* "RC4-40" */
+     915,    /* "RC4-HMAC-MD5" */
+     120,    /* "RC5-CBC" */
+     122,    /* "RC5-CFB" */
+     121,    /* "RC5-ECB" */
+     123,    /* "RC5-OFB" */
+     117,    /* "RIPEMD160" */
+      19,    /* "RSA" */
+       7,    /* "RSA-MD2" */
+     396,    /* "RSA-MD4" */
+       8,    /* "RSA-MD5" */
+      96,    /* "RSA-MDC2" */
+     104,    /* "RSA-NP-MD5" */
+     119,    /* "RSA-RIPEMD160" */
+      42,    /* "RSA-SHA" */
+      65,    /* "RSA-SHA1" */
+     115,    /* "RSA-SHA1-2" */
+     671,    /* "RSA-SHA224" */
+     668,    /* "RSA-SHA256" */
+     669,    /* "RSA-SHA384" */
+     670,    /* "RSA-SHA512" */
+    1145,    /* "RSA-SHA512/224" */
+    1146,    /* "RSA-SHA512/256" */
+    1144,    /* "RSA-SM3" */
+     919,    /* "RSAES-OAEP" */
+     912,    /* "RSASSA-PSS" */
+     777,    /* "SEED-CBC" */
+     779,    /* "SEED-CFB" */
+     776,    /* "SEED-ECB" */
+     778,    /* "SEED-OFB" */
+      41,    /* "SHA" */
+      64,    /* "SHA1" */
+     675,    /* "SHA224" */
+     672,    /* "SHA256" */
+    1096,    /* "SHA3-224" */
+    1097,    /* "SHA3-256" */
+    1098,    /* "SHA3-384" */
+    1099,    /* "SHA3-512" */
+     673,    /* "SHA384" */
+     674,    /* "SHA512" */
+    1094,    /* "SHA512-224" */
+    1095,    /* "SHA512-256" */
+    1100,    /* "SHAKE128" */
+    1101,    /* "SHAKE256" */
+    1172,    /* "SM2" */
+    1143,    /* "SM3" */
+    1134,    /* "SM4-CBC" */
+    1137,    /* "SM4-CFB" */
+    1136,    /* "SM4-CFB1" */
+    1138,    /* "SM4-CFB8" */
+    1139,    /* "SM4-CTR" */
+    1133,    /* "SM4-ECB" */
+    1135,    /* "SM4-OFB" */
+     188,    /* "SMIME" */
+     167,    /* "SMIME-CAPS" */
+     100,    /* "SN" */
+    1006,    /* "SNILS" */
+      16,    /* "ST" */
+     143,    /* "SXNetID" */
+    1062,    /* "SipHash" */
+    1021,    /* "TLS1-PRF" */
+     458,    /* "UID" */
+       0,    /* "UNDEF" */
+    1034,    /* "X25519" */
+    1035,    /* "X448" */
+      11,    /* "X500" */
+     378,    /* "X500algorithms" */
+      12,    /* "X509" */
+     184,    /* "X9-57" */
+     185,    /* "X9cm" */
+     125,    /* "ZLIB" */
+     478,    /* "aRecord" */
+     289,    /* "aaControls" */
+     287,    /* "ac-auditEntity" */
+     397,    /* "ac-proxying" */
+     288,    /* "ac-targeting" */
+     368,    /* "acceptableResponses" */
+     446,    /* "account" */
+     363,    /* "ad_timestamping" */
+     376,    /* "algorithm" */
+     405,    /* "ansi-X9-62" */
+     910,    /* "anyExtendedKeyUsage" */
+     746,    /* "anyPolicy" */
+     370,    /* "archiveCutoff" */
+     484,    /* "associatedDomain" */
+     485,    /* "associatedName" */
+     501,    /* "audio" */
+     177,    /* "authorityInfoAccess" */
+      90,    /* "authorityKeyIdentifier" */
+     882,    /* "authorityRevocationList" */
+      87,    /* "basicConstraints" */
+     365,    /* "basicOCSPResponse" */
+     285,    /* "biometricInfo" */
+     921,    /* "brainpoolP160r1" */
+     922,    /* "brainpoolP160t1" */
+     923,    /* "brainpoolP192r1" */
+     924,    /* "brainpoolP192t1" */
+     925,    /* "brainpoolP224r1" */
+     926,    /* "brainpoolP224t1" */
+     927,    /* "brainpoolP256r1" */
+     928,    /* "brainpoolP256t1" */
+     929,    /* "brainpoolP320r1" */
+     930,    /* "brainpoolP320t1" */
+     931,    /* "brainpoolP384r1" */
+     932,    /* "brainpoolP384t1" */
+     933,    /* "brainpoolP512r1" */
+     934,    /* "brainpoolP512t1" */
+     494,    /* "buildingName" */
+     860,    /* "businessCategory" */
+     691,    /* "c2onb191v4" */
+     692,    /* "c2onb191v5" */
+     697,    /* "c2onb239v4" */
+     698,    /* "c2onb239v5" */
+     684,    /* "c2pnb163v1" */
+     685,    /* "c2pnb163v2" */
+     686,    /* "c2pnb163v3" */
+     687,    /* "c2pnb176v1" */
+     693,    /* "c2pnb208w1" */
+     699,    /* "c2pnb272w1" */
+     700,    /* "c2pnb304w1" */
+     702,    /* "c2pnb368w1" */
+     688,    /* "c2tnb191v1" */
+     689,    /* "c2tnb191v2" */
+     690,    /* "c2tnb191v3" */
+     694,    /* "c2tnb239v1" */
+     695,    /* "c2tnb239v2" */
+     696,    /* "c2tnb239v3" */
+     701,    /* "c2tnb359v1" */
+     703,    /* "c2tnb431r1" */
+    1090,    /* "c3" */
+     881,    /* "cACertificate" */
+     483,    /* "cNAMERecord" */
+     179,    /* "caIssuers" */
+     785,    /* "caRepository" */
+    1023,    /* "capwapAC" */
+    1024,    /* "capwapWTP" */
+     443,    /* "caseIgnoreIA5StringSyntax" */
+     152,    /* "certBag" */
+     677,    /* "certicom-arc" */
+     771,    /* "certificateIssuer" */
+      89,    /* "certificatePolicies" */
+     883,    /* "certificateRevocationList" */
+      54,    /* "challengePassword" */
+     407,    /* "characteristic-two-field" */
+     395,    /* "clearance" */
+     130,    /* "clientAuth" */
+    1131,    /* "cmcCA" */
+    1132,    /* "cmcRA" */
+     131,    /* "codeSigning" */
+      50,    /* "contentType" */
+      53,    /* "countersignature" */
+     153,    /* "crlBag" */
+     103,    /* "crlDistributionPoints" */
+      88,    /* "crlNumber" */
+     884,    /* "crossCertificatePair" */
+     806,    /* "cryptocom" */
+     805,    /* "cryptopro" */
+     954,    /* "ct_cert_scts" */
+     952,    /* "ct_precert_poison" */
+     951,    /* "ct_precert_scts" */
+     953,    /* "ct_precert_signer" */
+     500,    /* "dITRedirect" */
+     451,    /* "dNSDomain" */
+     495,    /* "dSAQuality" */
+     434,    /* "data" */
+     390,    /* "dcobject" */
+     140,    /* "deltaCRL" */
+     891,    /* "deltaRevocationList" */
+     107,    /* "description" */
+     871,    /* "destinationIndicator" */
+     947,    /* "dh-cofactor-kdf" */
+     946,    /* "dh-std-kdf" */
+      28,    /* "dhKeyAgreement" */
+     941,    /* "dhSinglePass-cofactorDH-sha1kdf-scheme" */
+     942,    /* "dhSinglePass-cofactorDH-sha224kdf-scheme" */
+     943,    /* "dhSinglePass-cofactorDH-sha256kdf-scheme" */
+     944,    /* "dhSinglePass-cofactorDH-sha384kdf-scheme" */
+     945,    /* "dhSinglePass-cofactorDH-sha512kdf-scheme" */
+     936,    /* "dhSinglePass-stdDH-sha1kdf-scheme" */
+     937,    /* "dhSinglePass-stdDH-sha224kdf-scheme" */
+     938,    /* "dhSinglePass-stdDH-sha256kdf-scheme" */
+     939,    /* "dhSinglePass-stdDH-sha384kdf-scheme" */
+     940,    /* "dhSinglePass-stdDH-sha512kdf-scheme" */
+     920,    /* "dhpublicnumber" */
+     382,    /* "directory" */
+     887,    /* "distinguishedName" */
+     892,    /* "dmdName" */
+     174,    /* "dnQualifier" */
+    1092,    /* "dnsName" */
+     447,    /* "document" */
+     471,    /* "documentAuthor" */
+     468,    /* "documentIdentifier" */
+     472,    /* "documentLocation" */
+     502,    /* "documentPublisher" */
+     449,    /* "documentSeries" */
+     469,    /* "documentTitle" */
+     470,    /* "documentVersion" */
+     392,    /* "domain" */
+     452,    /* "domainRelatedObject" */
+     802,    /* "dsa_with_SHA224" */
+     803,    /* "dsa_with_SHA256" */
+    1152,    /* "dstu28147" */
+    1154,    /* "dstu28147-cfb" */
+    1153,    /* "dstu28147-ofb" */
+    1155,    /* "dstu28147-wrap" */
+    1157,    /* "dstu34311" */
+    1159,    /* "dstu4145be" */
+    1158,    /* "dstu4145le" */
+     791,    /* "ecdsa-with-Recommended" */
+     416,    /* "ecdsa-with-SHA1" */
+     793,    /* "ecdsa-with-SHA224" */
+     794,    /* "ecdsa-with-SHA256" */
+     795,    /* "ecdsa-with-SHA384" */
+     796,    /* "ecdsa-with-SHA512" */
+     792,    /* "ecdsa-with-Specified" */
+      48,    /* "emailAddress" */
+     132,    /* "emailProtection" */
+     885,    /* "enhancedSearchGuide" */
+     389,    /* "enterprises" */
+     384,    /* "experimental" */
+     172,    /* "extReq" */
+      56,    /* "extendedCertificateAttributes" */
+     126,    /* "extendedKeyUsage" */
+     372,    /* "extendedStatus" */
+     867,    /* "facsimileTelephoneNumber" */
+     462,    /* "favouriteDrink" */
+    1126,    /* "ffdhe2048" */
+    1127,    /* "ffdhe3072" */
+    1128,    /* "ffdhe4096" */
+    1129,    /* "ffdhe6144" */
+    1130,    /* "ffdhe8192" */
+     857,    /* "freshestCRL" */
+     453,    /* "friendlyCountry" */
+     490,    /* "friendlyCountryName" */
+     156,    /* "friendlyName" */
+     509,    /* "generationQualifier" */
+     815,    /* "gost-mac" */
+     976,    /* "gost-mac-12" */
+     811,    /* "gost2001" */
+     851,    /* "gost2001cc" */
+     979,    /* "gost2012_256" */
+     980,    /* "gost2012_512" */
+     813,    /* "gost89" */
+    1009,    /* "gost89-cbc" */
+     814,    /* "gost89-cnt" */
+     975,    /* "gost89-cnt-12" */
+    1011,    /* "gost89-ctr" */
+    1010,    /* "gost89-ecb" */
+     812,    /* "gost94" */
+     850,    /* "gost94cc" */
+    1015,    /* "grasshopper-cbc" */
+    1016,    /* "grasshopper-cfb" */
+    1013,    /* "grasshopper-ctr" */
+    1012,    /* "grasshopper-ecb" */
+    1017,    /* "grasshopper-mac" */
+    1014,    /* "grasshopper-ofb" */
+    1156,    /* "hmacWithDstu34311" */
+     797,    /* "hmacWithMD5" */
+     163,    /* "hmacWithSHA1" */
+     798,    /* "hmacWithSHA224" */
+     799,    /* "hmacWithSHA256" */
+     800,    /* "hmacWithSHA384" */
+     801,    /* "hmacWithSHA512" */
+    1193,    /* "hmacWithSHA512-224" */
+    1194,    /* "hmacWithSHA512-256" */
+     432,    /* "holdInstructionCallIssuer" */
+     430,    /* "holdInstructionCode" */
+     431,    /* "holdInstructionNone" */
+     433,    /* "holdInstructionReject" */
+     486,    /* "homePostalAddress" */
+     473,    /* "homeTelephoneNumber" */
+     466,    /* "host" */
+     889,    /* "houseIdentifier" */
+     442,    /* "iA5StringSyntax" */
+     783,    /* "id-DHBasedMac" */
+     824,    /* "id-Gost28147-89-CryptoPro-A-ParamSet" */
+     825,    /* "id-Gost28147-89-CryptoPro-B-ParamSet" */
+     826,    /* "id-Gost28147-89-CryptoPro-C-ParamSet" */
+     827,    /* "id-Gost28147-89-CryptoPro-D-ParamSet" */
+     819,    /* "id-Gost28147-89-CryptoPro-KeyMeshing" */
+     829,    /* "id-Gost28147-89-CryptoPro-Oscar-1-0-ParamSet" */
+     828,    /* "id-Gost28147-89-CryptoPro-Oscar-1-1-ParamSet" */
+     830,    /* "id-Gost28147-89-CryptoPro-RIC-1-ParamSet" */
+     820,    /* "id-Gost28147-89-None-KeyMeshing" */
+     823,    /* "id-Gost28147-89-TestParamSet" */
+     849,    /* "id-Gost28147-89-cc" */
+     840,    /* "id-GostR3410-2001-CryptoPro-A-ParamSet" */
+     841,    /* "id-GostR3410-2001-CryptoPro-B-ParamSet" */
+     842,    /* "id-GostR3410-2001-CryptoPro-C-ParamSet" */
+     843,    /* "id-GostR3410-2001-CryptoPro-XchA-ParamSet" */
+     844,    /* "id-GostR3410-2001-CryptoPro-XchB-ParamSet" */
+     854,    /* "id-GostR3410-2001-ParamSet-cc" */
+     839,    /* "id-GostR3410-2001-TestParamSet" */
+     817,    /* "id-GostR3410-2001DH" */
+     832,    /* "id-GostR3410-94-CryptoPro-A-ParamSet" */
+     833,    /* "id-GostR3410-94-CryptoPro-B-ParamSet" */
+     834,    /* "id-GostR3410-94-CryptoPro-C-ParamSet" */
+     835,    /* "id-GostR3410-94-CryptoPro-D-ParamSet" */
+     836,    /* "id-GostR3410-94-CryptoPro-XchA-ParamSet" */
+     837,    /* "id-GostR3410-94-CryptoPro-XchB-ParamSet" */
+     838,    /* "id-GostR3410-94-CryptoPro-XchC-ParamSet" */
+     831,    /* "id-GostR3410-94-TestParamSet" */
+     845,    /* "id-GostR3410-94-a" */
+     846,    /* "id-GostR3410-94-aBis" */
+     847,    /* "id-GostR3410-94-b" */
+     848,    /* "id-GostR3410-94-bBis" */
+     818,    /* "id-GostR3410-94DH" */
+     822,    /* "id-GostR3411-94-CryptoProParamSet" */
+     821,    /* "id-GostR3411-94-TestParamSet" */
+     807,    /* "id-GostR3411-94-with-GostR3410-2001" */
+     853,    /* "id-GostR3411-94-with-GostR3410-2001-cc" */
+     808,    /* "id-GostR3411-94-with-GostR3410-94" */
+     852,    /* "id-GostR3411-94-with-GostR3410-94-cc" */
+     810,    /* "id-HMACGostR3411-94" */
+     782,    /* "id-PasswordBasedMAC" */
+     266,    /* "id-aca" */
+     355,    /* "id-aca-accessIdentity" */
+     354,    /* "id-aca-authenticationInfo" */
+     356,    /* "id-aca-chargingIdentity" */
+     399,    /* "id-aca-encAttrs" */
+     357,    /* "id-aca-group" */
+     358,    /* "id-aca-role" */
+     176,    /* "id-ad" */
+     896,    /* "id-aes128-CCM" */
+     895,    /* "id-aes128-GCM" */
+     788,    /* "id-aes128-wrap" */
+     897,    /* "id-aes128-wrap-pad" */
+     899,    /* "id-aes192-CCM" */
+     898,    /* "id-aes192-GCM" */
+     789,    /* "id-aes192-wrap" */
+     900,    /* "id-aes192-wrap-pad" */
+     902,    /* "id-aes256-CCM" */
+     901,    /* "id-aes256-GCM" */
+     790,    /* "id-aes256-wrap" */
+     903,    /* "id-aes256-wrap-pad" */
+     262,    /* "id-alg" */
+     893,    /* "id-alg-PWRI-KEK" */
+     323,    /* "id-alg-des40" */
+     326,    /* "id-alg-dh-pop" */
+     325,    /* "id-alg-dh-sig-hmac-sha1" */
+     324,    /* "id-alg-noSignature" */
+     907,    /* "id-camellia128-wrap" */
+     908,    /* "id-camellia192-wrap" */
+     909,    /* "id-camellia256-wrap" */
+     268,    /* "id-cct" */
+     361,    /* "id-cct-PKIData" */
+     362,    /* "id-cct-PKIResponse" */
+     360,    /* "id-cct-crs" */
+      81,    /* "id-ce" */
+     680,    /* "id-characteristic-two-basis" */
+     263,    /* "id-cmc" */
+     334,    /* "id-cmc-addExtensions" */
+     346,    /* "id-cmc-confirmCertAcceptance" */
+     330,    /* "id-cmc-dataReturn" */
+     336,    /* "id-cmc-decryptedPOP" */
+     335,    /* "id-cmc-encryptedPOP" */
+     339,    /* "id-cmc-getCRL" */
+     338,    /* "id-cmc-getCert" */
+     328,    /* "id-cmc-identification" */
+     329,    /* "id-cmc-identityProof" */
+     337,    /* "id-cmc-lraPOPWitness" */
+     344,    /* "id-cmc-popLinkRandom" */
+     345,    /* "id-cmc-popLinkWitness" */
+     343,    /* "id-cmc-queryPending" */
+     333,    /* "id-cmc-recipientNonce" */
+     341,    /* "id-cmc-regInfo" */
+     342,    /* "id-cmc-responseInfo" */
+     340,    /* "id-cmc-revokeRequest" */
+     332,    /* "id-cmc-senderNonce" */
+     327,    /* "id-cmc-statusInfo" */
+     331,    /* "id-cmc-transactionId" */
+     787,    /* "id-ct-asciiTextWithCRLF" */
+    1060,    /* "id-ct-xml" */
+    1108,    /* "id-dsa-with-sha3-224" */
+    1109,    /* "id-dsa-with-sha3-256" */
+    1110,    /* "id-dsa-with-sha3-384" */
+    1111,    /* "id-dsa-with-sha3-512" */
+    1106,    /* "id-dsa-with-sha384" */
+    1107,    /* "id-dsa-with-sha512" */
+     408,    /* "id-ecPublicKey" */
+    1112,    /* "id-ecdsa-with-sha3-224" */
+    1113,    /* "id-ecdsa-with-sha3-256" */
+    1114,    /* "id-ecdsa-with-sha3-384" */
+    1115,    /* "id-ecdsa-with-sha3-512" */
+     508,    /* "id-hex-multipart-message" */
+     507,    /* "id-hex-partial-message" */
+    1102,    /* "id-hmacWithSHA3-224" */
+    1103,    /* "id-hmacWithSHA3-256" */
+    1104,    /* "id-hmacWithSHA3-384" */
+    1105,    /* "id-hmacWithSHA3-512" */
+     260,    /* "id-it" */
+     302,    /* "id-it-caKeyUpdateInfo" */
+     298,    /* "id-it-caProtEncCert" */
+     311,    /* "id-it-confirmWaitTime" */
+     303,    /* "id-it-currentCRL" */
+     300,    /* "id-it-encKeyPairTypes" */
+     310,    /* "id-it-implicitConfirm" */
+     308,    /* "id-it-keyPairParamRep" */
+     307,    /* "id-it-keyPairParamReq" */
+     312,    /* "id-it-origPKIMessage" */
+     301,    /* "id-it-preferredSymmAlg" */
+     309,    /* "id-it-revPassphrase" */
+     299,    /* "id-it-signKeyPairTypes" */
+     305,    /* "id-it-subscriptionRequest" */
+     306,    /* "id-it-subscriptionResponse" */
+     784,    /* "id-it-suppLangTags" */
+     304,    /* "id-it-unsupportedOIDs" */
+     128,    /* "id-kp" */
+     280,    /* "id-mod-attribute-cert" */
+     274,    /* "id-mod-cmc" */
+     277,    /* "id-mod-cmp" */
+     284,    /* "id-mod-cmp2000" */
+     273,    /* "id-mod-crmf" */
+     283,    /* "id-mod-dvcs" */
+     275,    /* "id-mod-kea-profile-88" */
+     276,    /* "id-mod-kea-profile-93" */
+     282,    /* "id-mod-ocsp" */
+     278,    /* "id-mod-qualified-cert-88" */
+     279,    /* "id-mod-qualified-cert-93" */
+     281,    /* "id-mod-timestamp-protocol" */
+     264,    /* "id-on" */
+     858,    /* "id-on-permanentIdentifier" */
+     347,    /* "id-on-personalData" */
+     265,    /* "id-pda" */
+     352,    /* "id-pda-countryOfCitizenship" */
+     353,    /* "id-pda-countryOfResidence" */
+     348,    /* "id-pda-dateOfBirth" */
+     351,    /* "id-pda-gender" */
+     349,    /* "id-pda-placeOfBirth" */
+     175,    /* "id-pe" */
+    1031,    /* "id-pkinit" */
+     261,    /* "id-pkip" */
+     258,    /* "id-pkix-mod" */
+     269,    /* "id-pkix1-explicit-88" */
+     271,    /* "id-pkix1-explicit-93" */
+     270,    /* "id-pkix1-implicit-88" */
+     272,    /* "id-pkix1-implicit-93" */
+     662,    /* "id-ppl" */
+     664,    /* "id-ppl-anyLanguage" */
+     667,    /* "id-ppl-independent" */
+     665,    /* "id-ppl-inheritAll" */
+     267,    /* "id-qcs" */
+     359,    /* "id-qcs-pkixQCSyntax-v1" */
+     259,    /* "id-qt" */
+     164,    /* "id-qt-cps" */
+     165,    /* "id-qt-unotice" */
+     313,    /* "id-regCtrl" */
+     316,    /* "id-regCtrl-authenticator" */
+     319,    /* "id-regCtrl-oldCertID" */
+     318,    /* "id-regCtrl-pkiArchiveOptions" */
+     317,    /* "id-regCtrl-pkiPublicationInfo" */
+     320,    /* "id-regCtrl-protocolEncrKey" */
+     315,    /* "id-regCtrl-regToken" */
+     314,    /* "id-regInfo" */
+     322,    /* "id-regInfo-certReq" */
+     321,    /* "id-regInfo-utf8Pairs" */
+    1116,    /* "id-rsassa-pkcs1-v1_5-with-sha3-224" */
+    1117,    /* "id-rsassa-pkcs1-v1_5-with-sha3-256" */
+    1118,    /* "id-rsassa-pkcs1-v1_5-with-sha3-384" */
+    1119,    /* "id-rsassa-pkcs1-v1_5-with-sha3-512" */
+     973,    /* "id-scrypt" */
+     512,    /* "id-set" */
+     191,    /* "id-smime-aa" */
+     215,    /* "id-smime-aa-contentHint" */
+     218,    /* "id-smime-aa-contentIdentifier" */
+     221,    /* "id-smime-aa-contentReference" */
+     240,    /* "id-smime-aa-dvcs-dvc" */
+     217,    /* "id-smime-aa-encapContentType" */
+     222,    /* "id-smime-aa-encrypKeyPref" */
+     220,    /* "id-smime-aa-equivalentLabels" */
+     232,    /* "id-smime-aa-ets-CertificateRefs" */
+     233,    /* "id-smime-aa-ets-RevocationRefs" */
+     238,    /* "id-smime-aa-ets-archiveTimeStamp" */
+     237,    /* "id-smime-aa-ets-certCRLTimestamp" */
+     234,    /* "id-smime-aa-ets-certValues" */
+     227,    /* "id-smime-aa-ets-commitmentType" */
+     231,    /* "id-smime-aa-ets-contentTimestamp" */
+     236,    /* "id-smime-aa-ets-escTimeStamp" */
+     230,    /* "id-smime-aa-ets-otherSigCert" */
+     235,    /* "id-smime-aa-ets-revocationValues" */
+     226,    /* "id-smime-aa-ets-sigPolicyId" */
+     229,    /* "id-smime-aa-ets-signerAttr" */
+     228,    /* "id-smime-aa-ets-signerLocation" */
+     219,    /* "id-smime-aa-macValue" */
+     214,    /* "id-smime-aa-mlExpandHistory" */
+     216,    /* "id-smime-aa-msgSigDigest" */
+     212,    /* "id-smime-aa-receiptRequest" */
+     213,    /* "id-smime-aa-securityLabel" */
+     239,    /* "id-smime-aa-signatureType" */
+     223,    /* "id-smime-aa-signingCertificate" */
+    1086,    /* "id-smime-aa-signingCertificateV2" */
+     224,    /* "id-smime-aa-smimeEncryptCerts" */
+     225,    /* "id-smime-aa-timeStampToken" */
+     192,    /* "id-smime-alg" */
+     243,    /* "id-smime-alg-3DESwrap" */
+     246,    /* "id-smime-alg-CMS3DESwrap" */
+     247,    /* "id-smime-alg-CMSRC2wrap" */
+     245,    /* "id-smime-alg-ESDH" */
+     241,    /* "id-smime-alg-ESDHwith3DES" */
+     242,    /* "id-smime-alg-ESDHwithRC2" */
+     244,    /* "id-smime-alg-RC2wrap" */
+     193,    /* "id-smime-cd" */
+     248,    /* "id-smime-cd-ldap" */
+     190,    /* "id-smime-ct" */
+     210,    /* "id-smime-ct-DVCSRequestData" */
+     211,    /* "id-smime-ct-DVCSResponseData" */
+     208,    /* "id-smime-ct-TDTInfo" */
+     207,    /* "id-smime-ct-TSTInfo" */
+     205,    /* "id-smime-ct-authData" */
+    1059,    /* "id-smime-ct-authEnvelopedData" */
+     786,    /* "id-smime-ct-compressedData" */
+    1058,    /* "id-smime-ct-contentCollection" */
+     209,    /* "id-smime-ct-contentInfo" */
+     206,    /* "id-smime-ct-publishCert" */
+     204,    /* "id-smime-ct-receipt" */
+     195,    /* "id-smime-cti" */
+     255,    /* "id-smime-cti-ets-proofOfApproval" */
+     256,    /* "id-smime-cti-ets-proofOfCreation" */
+     253,    /* "id-smime-cti-ets-proofOfDelivery" */
+     251,    /* "id-smime-cti-ets-proofOfOrigin" */
+     252,    /* "id-smime-cti-ets-proofOfReceipt" */
+     254,    /* "id-smime-cti-ets-proofOfSender" */
+     189,    /* "id-smime-mod" */
+     196,    /* "id-smime-mod-cms" */
+     197,    /* "id-smime-mod-ess" */
+     202,    /* "id-smime-mod-ets-eSigPolicy-88" */
+     203,    /* "id-smime-mod-ets-eSigPolicy-97" */
+     200,    /* "id-smime-mod-ets-eSignature-88" */
+     201,    /* "id-smime-mod-ets-eSignature-97" */
+     199,    /* "id-smime-mod-msg-v3" */
+     198,    /* "id-smime-mod-oid" */
+     194,    /* "id-smime-spq" */
+     250,    /* "id-smime-spq-ets-sqt-unotice" */
+     249,    /* "id-smime-spq-ets-sqt-uri" */
+     974,    /* "id-tc26" */
+     991,    /* "id-tc26-agreement" */
+     992,    /* "id-tc26-agreement-gost-3410-2012-256" */
+     993,    /* "id-tc26-agreement-gost-3410-2012-512" */
+     977,    /* "id-tc26-algorithms" */
+     990,    /* "id-tc26-cipher" */
+    1001,    /* "id-tc26-cipher-constants" */
+    1176,    /* "id-tc26-cipher-gostr3412-2015-kuznyechik" */
+    1177,    /* "id-tc26-cipher-gostr3412-2015-kuznyechik-ctracpkm" */
+    1178,    /* "id-tc26-cipher-gostr3412-2015-kuznyechik-ctracpkm-omac" */
+    1173,    /* "id-tc26-cipher-gostr3412-2015-magma" */
+    1174,    /* "id-tc26-cipher-gostr3412-2015-magma-ctracpkm" */
+    1175,    /* "id-tc26-cipher-gostr3412-2015-magma-ctracpkm-omac" */
+     994,    /* "id-tc26-constants" */
+     981,    /* "id-tc26-digest" */
+    1000,    /* "id-tc26-digest-constants" */
+    1002,    /* "id-tc26-gost-28147-constants" */
+    1003,    /* "id-tc26-gost-28147-param-Z" */
+    1147,    /* "id-tc26-gost-3410-2012-256-constants" */
+    1148,    /* "id-tc26-gost-3410-2012-256-paramSetA" */
+    1184,    /* "id-tc26-gost-3410-2012-256-paramSetB" */
+    1185,    /* "id-tc26-gost-3410-2012-256-paramSetC" */
+    1186,    /* "id-tc26-gost-3410-2012-256-paramSetD" */
+     996,    /* "id-tc26-gost-3410-2012-512-constants" */
+     998,    /* "id-tc26-gost-3410-2012-512-paramSetA" */
+     999,    /* "id-tc26-gost-3410-2012-512-paramSetB" */
+    1149,    /* "id-tc26-gost-3410-2012-512-paramSetC" */
+     997,    /* "id-tc26-gost-3410-2012-512-paramSetTest" */
+     988,    /* "id-tc26-hmac-gost-3411-2012-256" */
+     989,    /* "id-tc26-hmac-gost-3411-2012-512" */
+     987,    /* "id-tc26-mac" */
+     978,    /* "id-tc26-sign" */
+     995,    /* "id-tc26-sign-constants" */
+     984,    /* "id-tc26-signwithdigest" */
+     985,    /* "id-tc26-signwithdigest-gost3410-2012-256" */
+     986,    /* "id-tc26-signwithdigest-gost3410-2012-512" */
+    1179,    /* "id-tc26-wrap" */
+    1182,    /* "id-tc26-wrap-gostr3412-2015-kuznyechik" */
+    1183,    /* "id-tc26-wrap-gostr3412-2015-kuznyechik-kexp15" */
+    1180,    /* "id-tc26-wrap-gostr3412-2015-magma" */
+    1181,    /* "id-tc26-wrap-gostr3412-2015-magma-kexp15" */
+     676,    /* "identified-organization" */
+    1170,    /* "ieee" */
+    1171,    /* "ieee-siswg" */
+     461,    /* "info" */
+     748,    /* "inhibitAnyPolicy" */
+     101,    /* "initials" */
+     647,    /* "international-organizations" */
+     869,    /* "internationaliSDNNumber" */
+     142,    /* "invalidityDate" */
+     294,    /* "ipsecEndSystem" */
+    1022,    /* "ipsecIKE" */
+     295,    /* "ipsecTunnel" */
+     296,    /* "ipsecUser" */
+      86,    /* "issuerAltName" */
+    1008,    /* "issuerSignTool" */
+     770,    /* "issuingDistributionPoint" */
+     492,    /* "janetMailbox" */
+     957,    /* "jurisdictionC" */
+     955,    /* "jurisdictionL" */
+     956,    /* "jurisdictionST" */
+     150,    /* "keyBag" */
+      83,    /* "keyUsage" */
+     477,    /* "lastModifiedBy" */
+     476,    /* "lastModifiedTime" */
+     157,    /* "localKeyID" */
+     480,    /* "mXRecord" */
+    1190,    /* "magma-cbc" */
+    1191,    /* "magma-cfb" */
+    1188,    /* "magma-ctr" */
+    1187,    /* "magma-ecb" */
+    1192,    /* "magma-mac" */
+    1189,    /* "magma-ofb" */
+     460,    /* "mail" */
+     493,    /* "mailPreferenceOption" */
+     467,    /* "manager" */
+     982,    /* "md_gost12_256" */
+     983,    /* "md_gost12_512" */
+     809,    /* "md_gost94" */
+     875,    /* "member" */
+     182,    /* "member-body" */
+      51,    /* "messageDigest" */
+     383,    /* "mgmt" */
+     504,    /* "mime-mhs" */
+     506,    /* "mime-mhs-bodies" */
+     505,    /* "mime-mhs-headings" */
+     488,    /* "mobileTelephoneNumber" */
+     136,    /* "msCTLSign" */
+     135,    /* "msCodeCom" */
+     134,    /* "msCodeInd" */
+     138,    /* "msEFS" */
+     171,    /* "msExtReq" */
+     137,    /* "msSGC" */
+     648,    /* "msSmartcardLogin" */
+     649,    /* "msUPN" */
+    1091,    /* "n3" */
+     481,    /* "nSRecord" */
+     173,    /* "name" */
+     666,    /* "nameConstraints" */
+     369,    /* "noCheck" */
+     403,    /* "noRevAvail" */
+      72,    /* "nsBaseUrl" */
+      76,    /* "nsCaPolicyUrl" */
+      74,    /* "nsCaRevocationUrl" */
+      58,    /* "nsCertExt" */
+      79,    /* "nsCertSequence" */
+      71,    /* "nsCertType" */
+      78,    /* "nsComment" */
+      59,    /* "nsDataType" */
+      75,    /* "nsRenewalUrl" */
+      73,    /* "nsRevocationUrl" */
+     139,    /* "nsSGC" */
+      77,    /* "nsSslServerName" */
+     681,    /* "onBasis" */
+    1089,    /* "organizationIdentifier" */
+     491,    /* "organizationalStatus" */
+    1141,    /* "oscca" */
+     475,    /* "otherMailbox" */
+     876,    /* "owner" */
+     489,    /* "pagerTelephoneNumber" */
+     374,    /* "path" */
+     112,    /* "pbeWithMD5AndCast5CBC" */
+     499,    /* "personalSignature" */
+     487,    /* "personalTitle" */
+     464,    /* "photo" */
+     863,    /* "physicalDeliveryOfficeName" */
+     437,    /* "pilot" */
+     439,    /* "pilotAttributeSyntax" */
+     438,    /* "pilotAttributeType" */
+     479,    /* "pilotAttributeType27" */
+     456,    /* "pilotDSA" */
+     441,    /* "pilotGroups" */
+     444,    /* "pilotObject" */
+     440,    /* "pilotObjectClass" */
+     455,    /* "pilotOrganization" */
+     445,    /* "pilotPerson" */
+    1032,    /* "pkInitClientAuth" */
+    1033,    /* "pkInitKDC" */
+       2,    /* "pkcs" */
+     186,    /* "pkcs1" */
+      27,    /* "pkcs3" */
+     187,    /* "pkcs5" */
+      20,    /* "pkcs7" */
+      21,    /* "pkcs7-data" */
+      25,    /* "pkcs7-digestData" */
+      26,    /* "pkcs7-encryptedData" */
+      23,    /* "pkcs7-envelopedData" */
+      24,    /* "pkcs7-signedAndEnvelopedData" */
+      22,    /* "pkcs7-signedData" */
+     151,    /* "pkcs8ShroudedKeyBag" */
+      47,    /* "pkcs9" */
+     401,    /* "policyConstraints" */
+     747,    /* "policyMappings" */
+     862,    /* "postOfficeBox" */
+     861,    /* "postalAddress" */
+     661,    /* "postalCode" */
+     683,    /* "ppBasis" */
+     872,    /* "preferredDeliveryMethod" */
+     873,    /* "presentationAddress" */
+     816,    /* "prf-gostr3411-94" */
+     406,    /* "prime-field" */
+     409,    /* "prime192v1" */
+     410,    /* "prime192v2" */
+     411,    /* "prime192v3" */
+     412,    /* "prime239v1" */
+     413,    /* "prime239v2" */
+     414,    /* "prime239v3" */
+     415,    /* "prime256v1" */
+     385,    /* "private" */
+      84,    /* "privateKeyUsagePeriod" */
+     886,    /* "protocolInformation" */
+     663,    /* "proxyCertInfo" */
+     510,    /* "pseudonym" */
+     435,    /* "pss" */
+     286,    /* "qcStatements" */
+     457,    /* "qualityLabelledData" */
+     450,    /* "rFC822localPart" */
+     870,    /* "registeredAddress" */
+     400,    /* "role" */
+     877,    /* "roleOccupant" */
+     448,    /* "room" */
+     463,    /* "roomNumber" */
+       6,    /* "rsaEncryption" */
+     644,    /* "rsaOAEPEncryptionSET" */
+     377,    /* "rsaSignature" */
+       1,    /* "rsadsi" */
+     482,    /* "sOARecord" */
+     155,    /* "safeContentsBag" */
+     291,    /* "sbgp-autonomousSysNum" */
+     290,    /* "sbgp-ipAddrBlock" */
+     292,    /* "sbgp-routerIdentifier" */
+     159,    /* "sdsiCertificate" */
+     859,    /* "searchGuide" */
+     704,    /* "secp112r1" */
+     705,    /* "secp112r2" */
+     706,    /* "secp128r1" */
+     707,    /* "secp128r2" */
+     708,    /* "secp160k1" */
+     709,    /* "secp160r1" */
+     710,    /* "secp160r2" */
+     711,    /* "secp192k1" */
+     712,    /* "secp224k1" */
+     713,    /* "secp224r1" */
+     714,    /* "secp256k1" */
+     715,    /* "secp384r1" */
+     716,    /* "secp521r1" */
+     154,    /* "secretBag" */
+     474,    /* "secretary" */
+     717,    /* "sect113r1" */
+     718,    /* "sect113r2" */
+     719,    /* "sect131r1" */
+     720,    /* "sect131r2" */
+     721,    /* "sect163k1" */
+     722,    /* "sect163r1" */
+     723,    /* "sect163r2" */
+     724,    /* "sect193r1" */
+     725,    /* "sect193r2" */
+     726,    /* "sect233k1" */
+     727,    /* "sect233r1" */
+     728,    /* "sect239k1" */
+     729,    /* "sect283k1" */
+     730,    /* "sect283r1" */
+     731,    /* "sect409k1" */
+     732,    /* "sect409r1" */
+     733,    /* "sect571k1" */
+     734,    /* "sect571r1" */
+    1025,    /* "secureShellClient" */
+    1026,    /* "secureShellServer" */
+     386,    /* "security" */
+     878,    /* "seeAlso" */
+     394,    /* "selected-attribute-types" */
+    1029,    /* "sendOwner" */
+    1030,    /* "sendProxiedOwner" */
+    1028,    /* "sendProxiedRouter" */
+    1027,    /* "sendRouter" */
+     105,    /* "serialNumber" */
+     129,    /* "serverAuth" */
+     371,    /* "serviceLocator" */
+     625,    /* "set-addPolicy" */
+     515,    /* "set-attr" */
+     518,    /* "set-brand" */
+     638,    /* "set-brand-AmericanExpress" */
+     637,    /* "set-brand-Diners" */
+     636,    /* "set-brand-IATA-ATA" */
+     639,    /* "set-brand-JCB" */
+     641,    /* "set-brand-MasterCard" */
+     642,    /* "set-brand-Novus" */
+     640,    /* "set-brand-Visa" */
+     517,    /* "set-certExt" */
+     513,    /* "set-ctype" */
+     514,    /* "set-msgExt" */
+     516,    /* "set-policy" */
+     607,    /* "set-policy-root" */
+     624,    /* "set-rootKeyThumb" */
+     620,    /* "setAttr-Cert" */
+     631,    /* "setAttr-GenCryptgrm" */
+     623,    /* "setAttr-IssCap" */
+     628,    /* "setAttr-IssCap-CVM" */
+     630,    /* "setAttr-IssCap-Sig" */
+     629,    /* "setAttr-IssCap-T2" */
+     621,    /* "setAttr-PGWYcap" */
+     635,    /* "setAttr-SecDevSig" */
+     632,    /* "setAttr-T2Enc" */
+     633,    /* "setAttr-T2cleartxt" */
+     634,    /* "setAttr-TokICCsig" */
+     627,    /* "setAttr-Token-B0Prime" */
+     626,    /* "setAttr-Token-EMV" */
+     622,    /* "setAttr-TokenType" */
+     619,    /* "setCext-IssuerCapabilities" */
+     615,    /* "setCext-PGWYcapabilities" */
+     616,    /* "setCext-TokenIdentifier" */
+     618,    /* "setCext-TokenType" */
+     617,    /* "setCext-Track2Data" */
+     611,    /* "setCext-cCertRequired" */
+     609,    /* "setCext-certType" */
+     608,    /* "setCext-hashedRoot" */
+     610,    /* "setCext-merchData" */
+     613,    /* "setCext-setExt" */
+     614,    /* "setCext-setQualf" */
+     612,    /* "setCext-tunneling" */
+     540,    /* "setct-AcqCardCodeMsg" */
+     576,    /* "setct-AcqCardCodeMsgTBE" */
+     570,    /* "setct-AuthReqTBE" */
+     534,    /* "setct-AuthReqTBS" */
+     527,    /* "setct-AuthResBaggage" */
+     571,    /* "setct-AuthResTBE" */
+     572,    /* "setct-AuthResTBEX" */
+     535,    /* "setct-AuthResTBS" */
+     536,    /* "setct-AuthResTBSX" */
+     528,    /* "setct-AuthRevReqBaggage" */
+     577,    /* "setct-AuthRevReqTBE" */
+     541,    /* "setct-AuthRevReqTBS" */
+     529,    /* "setct-AuthRevResBaggage" */
+     542,    /* "setct-AuthRevResData" */
+     578,    /* "setct-AuthRevResTBE" */
+     579,    /* "setct-AuthRevResTBEB" */
+     543,    /* "setct-AuthRevResTBS" */
+     573,    /* "setct-AuthTokenTBE" */
+     537,    /* "setct-AuthTokenTBS" */
+     600,    /* "setct-BCIDistributionTBS" */
+     558,    /* "setct-BatchAdminReqData" */
+     592,    /* "setct-BatchAdminReqTBE" */
+     559,    /* "setct-BatchAdminResData" */
+     593,    /* "setct-BatchAdminResTBE" */
+     599,    /* "setct-CRLNotificationResTBS" */
+     598,    /* "setct-CRLNotificationTBS" */
+     580,    /* "setct-CapReqTBE" */
+     581,    /* "setct-CapReqTBEX" */
+     544,    /* "setct-CapReqTBS" */
+     545,    /* "setct-CapReqTBSX" */
+     546,    /* "setct-CapResData" */
+     582,    /* "setct-CapResTBE" */
+     583,    /* "setct-CapRevReqTBE" */
+     584,    /* "setct-CapRevReqTBEX" */
+     547,    /* "setct-CapRevReqTBS" */
+     548,    /* "setct-CapRevReqTBSX" */
+     549,    /* "setct-CapRevResData" */
+     585,    /* "setct-CapRevResTBE" */
+     538,    /* "setct-CapTokenData" */
+     530,    /* "setct-CapTokenSeq" */
+     574,    /* "setct-CapTokenTBE" */
+     575,    /* "setct-CapTokenTBEX" */
+     539,    /* "setct-CapTokenTBS" */
+     560,    /* "setct-CardCInitResTBS" */
+     566,    /* "setct-CertInqReqTBS" */
+     563,    /* "setct-CertReqData" */
+     595,    /* "setct-CertReqTBE" */
+     596,    /* "setct-CertReqTBEX" */
+     564,    /* "setct-CertReqTBS" */
+     565,    /* "setct-CertResData" */
+     597,    /* "setct-CertResTBE" */
+     586,    /* "setct-CredReqTBE" */
+     587,    /* "setct-CredReqTBEX" */
+     550,    /* "setct-CredReqTBS" */
+     551,    /* "setct-CredReqTBSX" */
+     552,    /* "setct-CredResData" */
+     588,    /* "setct-CredResTBE" */
+     589,    /* "setct-CredRevReqTBE" */
+     590,    /* "setct-CredRevReqTBEX" */
+     553,    /* "setct-CredRevReqTBS" */
+     554,    /* "setct-CredRevReqTBSX" */
+     555,    /* "setct-CredRevResData" */
+     591,    /* "setct-CredRevResTBE" */
+     567,    /* "setct-ErrorTBS" */
+     526,    /* "setct-HODInput" */
+     561,    /* "setct-MeAqCInitResTBS" */
+     522,    /* "setct-OIData" */
+     519,    /* "setct-PANData" */
+     521,    /* "setct-PANOnly" */
+     520,    /* "setct-PANToken" */
+     556,    /* "setct-PCertReqData" */
+     557,    /* "setct-PCertResTBS" */
+     523,    /* "setct-PI" */
+     532,    /* "setct-PI-TBS" */
+     524,    /* "setct-PIData" */
+     525,    /* "setct-PIDataUnsigned" */
+     568,    /* "setct-PIDualSignedTBE" */
+     569,    /* "setct-PIUnsignedTBE" */
+     531,    /* "setct-PInitResData" */
+     533,    /* "setct-PResData" */
+     594,    /* "setct-RegFormReqTBE" */
+     562,    /* "setct-RegFormResTBS" */
+     606,    /* "setext-cv" */
+     601,    /* "setext-genCrypt" */
+     602,    /* "setext-miAuth" */
+     604,    /* "setext-pinAny" */
+     603,    /* "setext-pinSecure" */
+     605,    /* "setext-track2" */
+      52,    /* "signingTime" */
+     454,    /* "simpleSecurityObject" */
+     496,    /* "singleLevelQuality" */
+    1142,    /* "sm-scheme" */
+     387,    /* "snmpv2" */
+     660,    /* "street" */
+      85,    /* "subjectAltName" */
+     769,    /* "subjectDirectoryAttributes" */
+     398,    /* "subjectInfoAccess" */
+      82,    /* "subjectKeyIdentifier" */
+    1007,    /* "subjectSignTool" */
+     498,    /* "subtreeMaximumQuality" */
+     497,    /* "subtreeMinimumQuality" */
+     890,    /* "supportedAlgorithms" */
+     874,    /* "supportedApplicationContext" */
+     402,    /* "targetInformation" */
+     864,    /* "telephoneNumber" */
+     866,    /* "teletexTerminalIdentifier" */
+     865,    /* "telexNumber" */
+     459,    /* "textEncodedORAddress" */
+     293,    /* "textNotice" */
+     133,    /* "timeStamping" */
+     106,    /* "title" */
+    1020,    /* "tlsfeature" */
+     682,    /* "tpBasis" */
+     375,    /* "trustRoot" */
+    1151,    /* "ua-pki" */
+    1160,    /* "uacurve0" */
+    1161,    /* "uacurve1" */
+    1162,    /* "uacurve2" */
+    1163,    /* "uacurve3" */
+    1164,    /* "uacurve4" */
+    1165,    /* "uacurve5" */
+    1166,    /* "uacurve6" */
+    1167,    /* "uacurve7" */
+    1168,    /* "uacurve8" */
+    1169,    /* "uacurve9" */
+     436,    /* "ucl" */
+     102,    /* "uid" */
+     888,    /* "uniqueMember" */
+      55,    /* "unstructuredAddress" */
+      49,    /* "unstructuredName" */
+     880,    /* "userCertificate" */
+     465,    /* "userClass" */
+     879,    /* "userPassword" */
+     373,    /* "valid" */
+     678,    /* "wap" */
+     679,    /* "wap-wsg" */
+     735,    /* "wap-wsg-idm-ecid-wtls1" */
+     743,    /* "wap-wsg-idm-ecid-wtls10" */
+     744,    /* "wap-wsg-idm-ecid-wtls11" */
+     745,    /* "wap-wsg-idm-ecid-wtls12" */
+     736,    /* "wap-wsg-idm-ecid-wtls3" */
+     737,    /* "wap-wsg-idm-ecid-wtls4" */
+     738,    /* "wap-wsg-idm-ecid-wtls5" */
+     739,    /* "wap-wsg-idm-ecid-wtls6" */
+     740,    /* "wap-wsg-idm-ecid-wtls7" */
+     741,    /* "wap-wsg-idm-ecid-wtls8" */
+     742,    /* "wap-wsg-idm-ecid-wtls9" */
+     804,    /* "whirlpool" */
+     868,    /* "x121Address" */
+     503,    /* "x500UniqueIdentifier" */
+     158,    /* "x509Certificate" */
+     160,    /* "x509Crl" */
+    1093,    /* "x509ExtAdmission" */
+};
+
+#define NUM_LN 1186
+static const unsigned int ln_objs[NUM_LN] = {
+     363,    /* "AD Time Stamping" */
+     405,    /* "ANSI X9.62" */
+     368,    /* "Acceptable OCSP Responses" */
+     910,    /* "Any Extended Key Usage" */
+     664,    /* "Any language" */
+     177,    /* "Authority Information Access" */
+     365,    /* "Basic OCSP Response" */
+     285,    /* "Biometric Info" */
+     179,    /* "CA Issuers" */
+     785,    /* "CA Repository" */
+    1131,    /* "CMC Certificate Authority" */
+    1132,    /* "CMC Registration Authority" */
+     954,    /* "CT Certificate SCTs" */
+     952,    /* "CT Precertificate Poison" */
+     951,    /* "CT Precertificate SCTs" */
+     953,    /* "CT Precertificate Signer" */
+     131,    /* "Code Signing" */
+    1024,    /* "Ctrl/Provision WAP Termination" */
+    1023,    /* "Ctrl/provision WAP Access" */
+    1159,    /* "DSTU 4145-2002 big endian" */
+    1158,    /* "DSTU 4145-2002 little endian" */
+    1152,    /* "DSTU Gost 28147-2009" */
+    1154,    /* "DSTU Gost 28147-2009 CFB mode" */
+    1153,    /* "DSTU Gost 28147-2009 OFB mode" */
+    1155,    /* "DSTU Gost 28147-2009 key wrap" */
+    1157,    /* "DSTU Gost 34311-95" */
+    1160,    /* "DSTU curve 0" */
+    1161,    /* "DSTU curve 1" */
+    1162,    /* "DSTU curve 2" */
+    1163,    /* "DSTU curve 3" */
+    1164,    /* "DSTU curve 4" */
+    1165,    /* "DSTU curve 5" */
+    1166,    /* "DSTU curve 6" */
+    1167,    /* "DSTU curve 7" */
+    1168,    /* "DSTU curve 8" */
+    1169,    /* "DSTU curve 9" */
+     783,    /* "Diffie-Hellman based MAC" */
+     382,    /* "Directory" */
+     392,    /* "Domain" */
+     132,    /* "E-mail Protection" */
+    1087,    /* "ED25519" */
+    1088,    /* "ED448" */
+     389,    /* "Enterprises" */
+     384,    /* "Experimental" */
+     372,    /* "Extended OCSP Status" */
+     172,    /* "Extension Request" */
+     813,    /* "GOST 28147-89" */
+     849,    /* "GOST 28147-89 Cryptocom ParamSet" */
+     815,    /* "GOST 28147-89 MAC" */
+    1003,    /* "GOST 28147-89 TC26 parameter set" */
+     851,    /* "GOST 34.10-2001 Cryptocom" */
+     850,    /* "GOST 34.10-94 Cryptocom" */
+     811,    /* "GOST R 34.10-2001" */
+     817,    /* "GOST R 34.10-2001 DH" */
+    1148,    /* "GOST R 34.10-2012 (256 bit) ParamSet A" */
+    1184,    /* "GOST R 34.10-2012 (256 bit) ParamSet B" */
+    1185,    /* "GOST R 34.10-2012 (256 bit) ParamSet C" */
+    1186,    /* "GOST R 34.10-2012 (256 bit) ParamSet D" */
+     998,    /* "GOST R 34.10-2012 (512 bit) ParamSet A" */
+     999,    /* "GOST R 34.10-2012 (512 bit) ParamSet B" */
+    1149,    /* "GOST R 34.10-2012 (512 bit) ParamSet C" */
+     997,    /* "GOST R 34.10-2012 (512 bit) testing parameter set" */
+     979,    /* "GOST R 34.10-2012 with 256 bit modulus" */
+     980,    /* "GOST R 34.10-2012 with 512 bit modulus" */
+     985,    /* "GOST R 34.10-2012 with GOST R 34.11-2012 (256 bit)" */
+     986,    /* "GOST R 34.10-2012 with GOST R 34.11-2012 (512 bit)" */
+     812,    /* "GOST R 34.10-94" */
+     818,    /* "GOST R 34.10-94 DH" */
+     982,    /* "GOST R 34.11-2012 with 256 bit hash" */
+     983,    /* "GOST R 34.11-2012 with 512 bit hash" */
+     809,    /* "GOST R 34.11-94" */
+     816,    /* "GOST R 34.11-94 PRF" */
+     807,    /* "GOST R 34.11-94 with GOST R 34.10-2001" */
+     853,    /* "GOST R 34.11-94 with GOST R 34.10-2001 Cryptocom" */
+     808,    /* "GOST R 34.11-94 with GOST R 34.10-94" */
+     852,    /* "GOST R 34.11-94 with GOST R 34.10-94 Cryptocom" */
+     854,    /* "GOST R 3410-2001 Parameter Set Cryptocom" */
+    1156,    /* "HMAC DSTU Gost 34311-95" */
+     988,    /* "HMAC GOST 34.11-2012 256 bit" */
+     989,    /* "HMAC GOST 34.11-2012 512 bit" */
+     810,    /* "HMAC GOST 34.11-94" */
+     432,    /* "Hold Instruction Call Issuer" */
+     430,    /* "Hold Instruction Code" */
+     431,    /* "Hold Instruction None" */
+     433,    /* "Hold Instruction Reject" */
+     634,    /* "ICC or token signature" */
+    1171,    /* "IEEE Security in Storage Working Group" */
+    1004,    /* "INN" */
+     294,    /* "IPSec End System" */
+     295,    /* "IPSec Tunnel" */
+     296,    /* "IPSec User" */
+    1140,    /* "ISO CN Member Body" */
+     182,    /* "ISO Member Body" */
+     183,    /* "ISO US Member Body" */
+    1150,    /* "ISO-UA" */
+     667,    /* "Independent" */
+     665,    /* "Inherit all" */
+     647,    /* "International Organizations" */
+     142,    /* "Invalidity Date" */
+     504,    /* "MIME MHS" */
+     388,    /* "Mail" */
+     383,    /* "Management" */
+     417,    /* "Microsoft CSP Name" */
+     135,    /* "Microsoft Commercial Code Signing" */
+     138,    /* "Microsoft Encrypted File System" */
+     171,    /* "Microsoft Extension Request" */
+     134,    /* "Microsoft Individual Code Signing" */
+     856,    /* "Microsoft Local Key set" */
+     137,    /* "Microsoft Server Gated Crypto" */
+     648,    /* "Microsoft Smartcardlogin" */
+     136,    /* "Microsoft Trust List Signing" */
+     649,    /* "Microsoft Universal Principal Name" */
+     393,    /* "NULL" */
+     404,    /* "NULL" */
+      72,    /* "Netscape Base Url" */
+      76,    /* "Netscape CA Policy Url" */
+      74,    /* "Netscape CA Revocation Url" */
+      71,    /* "Netscape Cert Type" */
+      58,    /* "Netscape Certificate Extension" */
+      79,    /* "Netscape Certificate Sequence" */
+      78,    /* "Netscape Comment" */
+      57,    /* "Netscape Communications Corp." */
+      59,    /* "Netscape Data Type" */
+      75,    /* "Netscape Renewal Url" */
+      73,    /* "Netscape Revocation Url" */
+      77,    /* "Netscape SSL Server Name" */
+     139,    /* "Netscape Server Gated Crypto" */
+     178,    /* "OCSP" */
+     370,    /* "OCSP Archive Cutoff" */
+     367,    /* "OCSP CRL ID" */
+     369,    /* "OCSP No Check" */
+     366,    /* "OCSP Nonce" */
+     371,    /* "OCSP Service Locator" */
+     180,    /* "OCSP Signing" */
+    1005,    /* "OGRN" */
+     161,    /* "PBES2" */
+      69,    /* "PBKDF2" */
+     162,    /* "PBMAC1" */
+    1032,    /* "PKINIT Client Auth" */
+     127,    /* "PKIX" */
+     858,    /* "Permanent Identifier" */
+     164,    /* "Policy Qualifier CPS" */
+     165,    /* "Policy Qualifier User Notice" */
+     385,    /* "Private" */
+    1093,    /* "Professional Information or basis for Admission" */
+     663,    /* "Proxy Certificate Information" */
+       1,    /* "RSA Data Security, Inc." */
+       2,    /* "RSA Data Security, Inc. PKCS" */
+    1116,    /* "RSA-SHA3-224" */
+    1117,    /* "RSA-SHA3-256" */
+    1118,    /* "RSA-SHA3-384" */
+    1119,    /* "RSA-SHA3-512" */
+     188,    /* "S/MIME" */
+     167,    /* "S/MIME Capabilities" */
+    1006,    /* "SNILS" */
+     387,    /* "SNMPv2" */
+    1025,    /* "SSH Client" */
+    1026,    /* "SSH Server" */
+     512,    /* "Secure Electronic Transactions" */
+     386,    /* "Security" */
+     394,    /* "Selected Attribute Types" */
+    1029,    /* "Send Owner" */
+    1030,    /* "Send Proxied Owner" */
+    1028,    /* "Send Proxied Router" */
+    1027,    /* "Send Router" */
+    1033,    /* "Signing KDC Response" */
+    1008,    /* "Signing Tool of Issuer" */
+    1007,    /* "Signing Tool of Subject" */
+     143,    /* "Strong Extranet ID" */
+     398,    /* "Subject Information Access" */
+    1020,    /* "TLS Feature" */
+     130,    /* "TLS Web Client Authentication" */
+     129,    /* "TLS Web Server Authentication" */
+     133,    /* "Time Stamping" */
+     375,    /* "Trust Root" */
+    1034,    /* "X25519" */
+    1035,    /* "X448" */
+      12,    /* "X509" */
+     402,    /* "X509v3 AC Targeting" */
+     746,    /* "X509v3 Any Policy" */
+      90,    /* "X509v3 Authority Key Identifier" */
+      87,    /* "X509v3 Basic Constraints" */
+     103,    /* "X509v3 CRL Distribution Points" */
+      88,    /* "X509v3 CRL Number" */
+     141,    /* "X509v3 CRL Reason Code" */
+     771,    /* "X509v3 Certificate Issuer" */
+      89,    /* "X509v3 Certificate Policies" */
+     140,    /* "X509v3 Delta CRL Indicator" */
+     126,    /* "X509v3 Extended Key Usage" */
+     857,    /* "X509v3 Freshest CRL" */
+     748,    /* "X509v3 Inhibit Any Policy" */
+      86,    /* "X509v3 Issuer Alternative Name" */
+     770,    /* "X509v3 Issuing Distribution Point" */
+      83,    /* "X509v3 Key Usage" */
+     666,    /* "X509v3 Name Constraints" */
+     403,    /* "X509v3 No Revocation Available" */
+     401,    /* "X509v3 Policy Constraints" */
+     747,    /* "X509v3 Policy Mappings" */
+      84,    /* "X509v3 Private Key Usage Period" */
+      85,    /* "X509v3 Subject Alternative Name" */
+     769,    /* "X509v3 Subject Directory Attributes" */
+      82,    /* "X509v3 Subject Key Identifier" */
+     920,    /* "X9.42 DH" */
+     184,    /* "X9.57" */
+     185,    /* "X9.57 CM ?" */
+     478,    /* "aRecord" */
+     289,    /* "aaControls" */
+     287,    /* "ac-auditEntity" */
+     397,    /* "ac-proxying" */
+     288,    /* "ac-targeting" */
+     446,    /* "account" */
+     364,    /* "ad dvcs" */
+     606,    /* "additional verification" */
+     419,    /* "aes-128-cbc" */
+     916,    /* "aes-128-cbc-hmac-sha1" */
+     948,    /* "aes-128-cbc-hmac-sha256" */
+     896,    /* "aes-128-ccm" */
+     421,    /* "aes-128-cfb" */
+     650,    /* "aes-128-cfb1" */
+     653,    /* "aes-128-cfb8" */
+     904,    /* "aes-128-ctr" */
+     418,    /* "aes-128-ecb" */
+     895,    /* "aes-128-gcm" */
+     958,    /* "aes-128-ocb" */
+     420,    /* "aes-128-ofb" */
+     913,    /* "aes-128-xts" */
+     423,    /* "aes-192-cbc" */
+     917,    /* "aes-192-cbc-hmac-sha1" */
+     949,    /* "aes-192-cbc-hmac-sha256" */
+     899,    /* "aes-192-ccm" */
+     425,    /* "aes-192-cfb" */
+     651,    /* "aes-192-cfb1" */
+     654,    /* "aes-192-cfb8" */
+     905,    /* "aes-192-ctr" */
+     422,    /* "aes-192-ecb" */
+     898,    /* "aes-192-gcm" */
+     959,    /* "aes-192-ocb" */
+     424,    /* "aes-192-ofb" */
+     427,    /* "aes-256-cbc" */
+     918,    /* "aes-256-cbc-hmac-sha1" */
+     950,    /* "aes-256-cbc-hmac-sha256" */
+     902,    /* "aes-256-ccm" */
+     429,    /* "aes-256-cfb" */
+     652,    /* "aes-256-cfb1" */
+     655,    /* "aes-256-cfb8" */
+     906,    /* "aes-256-ctr" */
+     426,    /* "aes-256-ecb" */
+     901,    /* "aes-256-gcm" */
+     960,    /* "aes-256-ocb" */
+     428,    /* "aes-256-ofb" */
+     914,    /* "aes-256-xts" */
+     376,    /* "algorithm" */
+    1066,    /* "aria-128-cbc" */
+    1120,    /* "aria-128-ccm" */
+    1067,    /* "aria-128-cfb" */
+    1080,    /* "aria-128-cfb1" */
+    1083,    /* "aria-128-cfb8" */
+    1069,    /* "aria-128-ctr" */
+    1065,    /* "aria-128-ecb" */
+    1123,    /* "aria-128-gcm" */
+    1068,    /* "aria-128-ofb" */
+    1071,    /* "aria-192-cbc" */
+    1121,    /* "aria-192-ccm" */
+    1072,    /* "aria-192-cfb" */
+    1081,    /* "aria-192-cfb1" */
+    1084,    /* "aria-192-cfb8" */
+    1074,    /* "aria-192-ctr" */
+    1070,    /* "aria-192-ecb" */
+    1124,    /* "aria-192-gcm" */
+    1073,    /* "aria-192-ofb" */
+    1076,    /* "aria-256-cbc" */
+    1122,    /* "aria-256-ccm" */
+    1077,    /* "aria-256-cfb" */
+    1082,    /* "aria-256-cfb1" */
+    1085,    /* "aria-256-cfb8" */
+    1079,    /* "aria-256-ctr" */
+    1075,    /* "aria-256-ecb" */
+    1125,    /* "aria-256-gcm" */
+    1078,    /* "aria-256-ofb" */
+     484,    /* "associatedDomain" */
+     485,    /* "associatedName" */
+     501,    /* "audio" */
+    1064,    /* "auth-any" */
+    1049,    /* "auth-dss" */
+    1047,    /* "auth-ecdsa" */
+    1050,    /* "auth-gost01" */
+    1051,    /* "auth-gost12" */
+    1053,    /* "auth-null" */
+    1048,    /* "auth-psk" */
+    1046,    /* "auth-rsa" */
+    1052,    /* "auth-srp" */
+     882,    /* "authorityRevocationList" */
+      91,    /* "bf-cbc" */
+      93,    /* "bf-cfb" */
+      92,    /* "bf-ecb" */
+      94,    /* "bf-ofb" */
+    1056,    /* "blake2b512" */
+    1057,    /* "blake2s256" */
+     921,    /* "brainpoolP160r1" */
+     922,    /* "brainpoolP160t1" */
+     923,    /* "brainpoolP192r1" */
+     924,    /* "brainpoolP192t1" */
+     925,    /* "brainpoolP224r1" */
+     926,    /* "brainpoolP224t1" */
+     927,    /* "brainpoolP256r1" */
+     928,    /* "brainpoolP256t1" */
+     929,    /* "brainpoolP320r1" */
+     930,    /* "brainpoolP320t1" */
+     931,    /* "brainpoolP384r1" */
+     932,    /* "brainpoolP384t1" */
+     933,    /* "brainpoolP512r1" */
+     934,    /* "brainpoolP512t1" */
+     494,    /* "buildingName" */
+     860,    /* "businessCategory" */
+     691,    /* "c2onb191v4" */
+     692,    /* "c2onb191v5" */
+     697,    /* "c2onb239v4" */
+     698,    /* "c2onb239v5" */
+     684,    /* "c2pnb163v1" */
+     685,    /* "c2pnb163v2" */
+     686,    /* "c2pnb163v3" */
+     687,    /* "c2pnb176v1" */
+     693,    /* "c2pnb208w1" */
+     699,    /* "c2pnb272w1" */
+     700,    /* "c2pnb304w1" */
+     702,    /* "c2pnb368w1" */
+     688,    /* "c2tnb191v1" */
+     689,    /* "c2tnb191v2" */
+     690,    /* "c2tnb191v3" */
+     694,    /* "c2tnb239v1" */
+     695,    /* "c2tnb239v2" */
+     696,    /* "c2tnb239v3" */
+     701,    /* "c2tnb359v1" */
+     703,    /* "c2tnb431r1" */
+     881,    /* "cACertificate" */
+     483,    /* "cNAMERecord" */
+     751,    /* "camellia-128-cbc" */
+     962,    /* "camellia-128-ccm" */
+     757,    /* "camellia-128-cfb" */
+     760,    /* "camellia-128-cfb1" */
+     763,    /* "camellia-128-cfb8" */
+     964,    /* "camellia-128-cmac" */
+     963,    /* "camellia-128-ctr" */
+     754,    /* "camellia-128-ecb" */
+     961,    /* "camellia-128-gcm" */
+     766,    /* "camellia-128-ofb" */
+     752,    /* "camellia-192-cbc" */
+     966,    /* "camellia-192-ccm" */
+     758,    /* "camellia-192-cfb" */
+     761,    /* "camellia-192-cfb1" */
+     764,    /* "camellia-192-cfb8" */
+     968,    /* "camellia-192-cmac" */
+     967,    /* "camellia-192-ctr" */
+     755,    /* "camellia-192-ecb" */
+     965,    /* "camellia-192-gcm" */
+     767,    /* "camellia-192-ofb" */
+     753,    /* "camellia-256-cbc" */
+     970,    /* "camellia-256-ccm" */
+     759,    /* "camellia-256-cfb" */
+     762,    /* "camellia-256-cfb1" */
+     765,    /* "camellia-256-cfb8" */
+     972,    /* "camellia-256-cmac" */
+     971,    /* "camellia-256-ctr" */
+     756,    /* "camellia-256-ecb" */
+     969,    /* "camellia-256-gcm" */
+     768,    /* "camellia-256-ofb" */
+     443,    /* "caseIgnoreIA5StringSyntax" */
+     108,    /* "cast5-cbc" */
+     110,    /* "cast5-cfb" */
+     109,    /* "cast5-ecb" */
+     111,    /* "cast5-ofb" */
+     152,    /* "certBag" */
+     677,    /* "certicom-arc" */
+     517,    /* "certificate extensions" */
+     883,    /* "certificateRevocationList" */
+    1019,    /* "chacha20" */
+    1018,    /* "chacha20-poly1305" */
+      54,    /* "challengePassword" */
+     407,    /* "characteristic-two-field" */
+     395,    /* "clearance" */
+     633,    /* "cleartext track 2" */
+     894,    /* "cmac" */
+      13,    /* "commonName" */
+     513,    /* "content types" */
+      50,    /* "contentType" */
+      53,    /* "countersignature" */
+    1090,    /* "countryCode3c" */
+    1091,    /* "countryCode3n" */
+      14,    /* "countryName" */
+     153,    /* "crlBag" */
+     884,    /* "crossCertificatePair" */
+     806,    /* "cryptocom" */
+     805,    /* "cryptopro" */
+     500,    /* "dITRedirect" */
+     451,    /* "dNSDomain" */
+     495,    /* "dSAQuality" */
+     434,    /* "data" */
+     390,    /* "dcObject" */
+     891,    /* "deltaRevocationList" */
+      31,    /* "des-cbc" */
+     643,    /* "des-cdmf" */
+      30,    /* "des-cfb" */
+     656,    /* "des-cfb1" */
+     657,    /* "des-cfb8" */
+      29,    /* "des-ecb" */
+      32,    /* "des-ede" */
+      43,    /* "des-ede-cbc" */
+      60,    /* "des-ede-cfb" */
+      62,    /* "des-ede-ofb" */
+      33,    /* "des-ede3" */
+      44,    /* "des-ede3-cbc" */
+      61,    /* "des-ede3-cfb" */
+     658,    /* "des-ede3-cfb1" */
+     659,    /* "des-ede3-cfb8" */
+      63,    /* "des-ede3-ofb" */
+      45,    /* "des-ofb" */
+     107,    /* "description" */
+     871,    /* "destinationIndicator" */
+      80,    /* "desx-cbc" */
+     947,    /* "dh-cofactor-kdf" */
+     946,    /* "dh-std-kdf" */
+      28,    /* "dhKeyAgreement" */
+     941,    /* "dhSinglePass-cofactorDH-sha1kdf-scheme" */
+     942,    /* "dhSinglePass-cofactorDH-sha224kdf-scheme" */
+     943,    /* "dhSinglePass-cofactorDH-sha256kdf-scheme" */
+     944,    /* "dhSinglePass-cofactorDH-sha384kdf-scheme" */
+     945,    /* "dhSinglePass-cofactorDH-sha512kdf-scheme" */
+     936,    /* "dhSinglePass-stdDH-sha1kdf-scheme" */
+     937,    /* "dhSinglePass-stdDH-sha224kdf-scheme" */
+     938,    /* "dhSinglePass-stdDH-sha256kdf-scheme" */
+     939,    /* "dhSinglePass-stdDH-sha384kdf-scheme" */
+     940,    /* "dhSinglePass-stdDH-sha512kdf-scheme" */
+      11,    /* "directory services (X.500)" */
+     378,    /* "directory services - algorithms" */
+     887,    /* "distinguishedName" */
+     892,    /* "dmdName" */
+     174,    /* "dnQualifier" */
+    1092,    /* "dnsName" */
+     447,    /* "document" */
+     471,    /* "documentAuthor" */
+     468,    /* "documentIdentifier" */
+     472,    /* "documentLocation" */
+     502,    /* "documentPublisher" */
+     449,    /* "documentSeries" */
+     469,    /* "documentTitle" */
+     470,    /* "documentVersion" */
+     380,    /* "dod" */
+     391,    /* "domainComponent" */
+     452,    /* "domainRelatedObject" */
+     116,    /* "dsaEncryption" */
+      67,    /* "dsaEncryption-old" */
+      66,    /* "dsaWithSHA" */
+     113,    /* "dsaWithSHA1" */
+      70,    /* "dsaWithSHA1-old" */
+     802,    /* "dsa_with_SHA224" */
+     803,    /* "dsa_with_SHA256" */
+    1108,    /* "dsa_with_SHA3-224" */
+    1109,    /* "dsa_with_SHA3-256" */
+    1110,    /* "dsa_with_SHA3-384" */
+    1111,    /* "dsa_with_SHA3-512" */
+    1106,    /* "dsa_with_SHA384" */
+    1107,    /* "dsa_with_SHA512" */
+     297,    /* "dvcs" */
+     791,    /* "ecdsa-with-Recommended" */
+     416,    /* "ecdsa-with-SHA1" */
+     793,    /* "ecdsa-with-SHA224" */
+     794,    /* "ecdsa-with-SHA256" */
+     795,    /* "ecdsa-with-SHA384" */
+     796,    /* "ecdsa-with-SHA512" */
+     792,    /* "ecdsa-with-Specified" */
+    1112,    /* "ecdsa_with_SHA3-224" */
+    1113,    /* "ecdsa_with_SHA3-256" */
+    1114,    /* "ecdsa_with_SHA3-384" */
+    1115,    /* "ecdsa_with_SHA3-512" */
+      48,    /* "emailAddress" */
+     632,    /* "encrypted track 2" */
+     885,    /* "enhancedSearchGuide" */
+      56,    /* "extendedCertificateAttributes" */
+     867,    /* "facsimileTelephoneNumber" */
+     462,    /* "favouriteDrink" */
+    1126,    /* "ffdhe2048" */
+    1127,    /* "ffdhe3072" */
+    1128,    /* "ffdhe4096" */
+    1129,    /* "ffdhe6144" */
+    1130,    /* "ffdhe8192" */
+     453,    /* "friendlyCountry" */
+     490,    /* "friendlyCountryName" */
+     156,    /* "friendlyName" */
+     631,    /* "generate cryptogram" */
+     509,    /* "generationQualifier" */
+     601,    /* "generic cryptogram" */
+      99,    /* "givenName" */
+     976,    /* "gost-mac-12" */
+    1009,    /* "gost89-cbc" */
+     814,    /* "gost89-cnt" */
+     975,    /* "gost89-cnt-12" */
+    1011,    /* "gost89-ctr" */
+    1010,    /* "gost89-ecb" */
+    1015,    /* "grasshopper-cbc" */
+    1016,    /* "grasshopper-cfb" */
+    1013,    /* "grasshopper-ctr" */
+    1012,    /* "grasshopper-ecb" */
+    1017,    /* "grasshopper-mac" */
+    1014,    /* "grasshopper-ofb" */
+    1036,    /* "hkdf" */
+     855,    /* "hmac" */
+     780,    /* "hmac-md5" */
+     781,    /* "hmac-sha1" */
+    1102,    /* "hmac-sha3-224" */
+    1103,    /* "hmac-sha3-256" */
+    1104,    /* "hmac-sha3-384" */
+    1105,    /* "hmac-sha3-512" */
+     797,    /* "hmacWithMD5" */
+     163,    /* "hmacWithSHA1" */
+     798,    /* "hmacWithSHA224" */
+     799,    /* "hmacWithSHA256" */
+     800,    /* "hmacWithSHA384" */
+     801,    /* "hmacWithSHA512" */
+    1193,    /* "hmacWithSHA512-224" */
+    1194,    /* "hmacWithSHA512-256" */
+     486,    /* "homePostalAddress" */
+     473,    /* "homeTelephoneNumber" */
+     466,    /* "host" */
+     889,    /* "houseIdentifier" */
+     442,    /* "iA5StringSyntax" */
+     381,    /* "iana" */
+     824,    /* "id-Gost28147-89-CryptoPro-A-ParamSet" */
+     825,    /* "id-Gost28147-89-CryptoPro-B-ParamSet" */
+     826,    /* "id-Gost28147-89-CryptoPro-C-ParamSet" */
+     827,    /* "id-Gost28147-89-CryptoPro-D-ParamSet" */
+     819,    /* "id-Gost28147-89-CryptoPro-KeyMeshing" */
+     829,    /* "id-Gost28147-89-CryptoPro-Oscar-1-0-ParamSet" */
+     828,    /* "id-Gost28147-89-CryptoPro-Oscar-1-1-ParamSet" */
+     830,    /* "id-Gost28147-89-CryptoPro-RIC-1-ParamSet" */
+     820,    /* "id-Gost28147-89-None-KeyMeshing" */
+     823,    /* "id-Gost28147-89-TestParamSet" */
+     840,    /* "id-GostR3410-2001-CryptoPro-A-ParamSet" */
+     841,    /* "id-GostR3410-2001-CryptoPro-B-ParamSet" */
+     842,    /* "id-GostR3410-2001-CryptoPro-C-ParamSet" */
+     843,    /* "id-GostR3410-2001-CryptoPro-XchA-ParamSet" */
+     844,    /* "id-GostR3410-2001-CryptoPro-XchB-ParamSet" */
+     839,    /* "id-GostR3410-2001-TestParamSet" */
+     832,    /* "id-GostR3410-94-CryptoPro-A-ParamSet" */
+     833,    /* "id-GostR3410-94-CryptoPro-B-ParamSet" */
+     834,    /* "id-GostR3410-94-CryptoPro-C-ParamSet" */
+     835,    /* "id-GostR3410-94-CryptoPro-D-ParamSet" */
+     836,    /* "id-GostR3410-94-CryptoPro-XchA-ParamSet" */
+     837,    /* "id-GostR3410-94-CryptoPro-XchB-ParamSet" */
+     838,    /* "id-GostR3410-94-CryptoPro-XchC-ParamSet" */
+     831,    /* "id-GostR3410-94-TestParamSet" */
+     845,    /* "id-GostR3410-94-a" */
+     846,    /* "id-GostR3410-94-aBis" */
+     847,    /* "id-GostR3410-94-b" */
+     848,    /* "id-GostR3410-94-bBis" */
+     822,    /* "id-GostR3411-94-CryptoProParamSet" */
+     821,    /* "id-GostR3411-94-TestParamSet" */
+     266,    /* "id-aca" */
+     355,    /* "id-aca-accessIdentity" */
+     354,    /* "id-aca-authenticationInfo" */
+     356,    /* "id-aca-chargingIdentity" */
+     399,    /* "id-aca-encAttrs" */
+     357,    /* "id-aca-group" */
+     358,    /* "id-aca-role" */
+     176,    /* "id-ad" */
+     788,    /* "id-aes128-wrap" */
+     897,    /* "id-aes128-wrap-pad" */
+     789,    /* "id-aes192-wrap" */
+     900,    /* "id-aes192-wrap-pad" */
+     790,    /* "id-aes256-wrap" */
+     903,    /* "id-aes256-wrap-pad" */
+     262,    /* "id-alg" */
+     893,    /* "id-alg-PWRI-KEK" */
+     323,    /* "id-alg-des40" */
+     326,    /* "id-alg-dh-pop" */
+     325,    /* "id-alg-dh-sig-hmac-sha1" */
+     324,    /* "id-alg-noSignature" */
+     907,    /* "id-camellia128-wrap" */
+     908,    /* "id-camellia192-wrap" */
+     909,    /* "id-camellia256-wrap" */
+     268,    /* "id-cct" */
+     361,    /* "id-cct-PKIData" */
+     362,    /* "id-cct-PKIResponse" */
+     360,    /* "id-cct-crs" */
+      81,    /* "id-ce" */
+     680,    /* "id-characteristic-two-basis" */
+     263,    /* "id-cmc" */
+     334,    /* "id-cmc-addExtensions" */
+     346,    /* "id-cmc-confirmCertAcceptance" */
+     330,    /* "id-cmc-dataReturn" */
+     336,    /* "id-cmc-decryptedPOP" */
+     335,    /* "id-cmc-encryptedPOP" */
+     339,    /* "id-cmc-getCRL" */
+     338,    /* "id-cmc-getCert" */
+     328,    /* "id-cmc-identification" */
+     329,    /* "id-cmc-identityProof" */
+     337,    /* "id-cmc-lraPOPWitness" */
+     344,    /* "id-cmc-popLinkRandom" */
+     345,    /* "id-cmc-popLinkWitness" */
+     343,    /* "id-cmc-queryPending" */
+     333,    /* "id-cmc-recipientNonce" */
+     341,    /* "id-cmc-regInfo" */
+     342,    /* "id-cmc-responseInfo" */
+     340,    /* "id-cmc-revokeRequest" */
+     332,    /* "id-cmc-senderNonce" */
+     327,    /* "id-cmc-statusInfo" */
+     331,    /* "id-cmc-transactionId" */
+     787,    /* "id-ct-asciiTextWithCRLF" */
+    1060,    /* "id-ct-xml" */
+     408,    /* "id-ecPublicKey" */
+     508,    /* "id-hex-multipart-message" */
+     507,    /* "id-hex-partial-message" */
+     260,    /* "id-it" */
+     302,    /* "id-it-caKeyUpdateInfo" */
+     298,    /* "id-it-caProtEncCert" */
+     311,    /* "id-it-confirmWaitTime" */
+     303,    /* "id-it-currentCRL" */
+     300,    /* "id-it-encKeyPairTypes" */
+     310,    /* "id-it-implicitConfirm" */
+     308,    /* "id-it-keyPairParamRep" */
+     307,    /* "id-it-keyPairParamReq" */
+     312,    /* "id-it-origPKIMessage" */
+     301,    /* "id-it-preferredSymmAlg" */
+     309,    /* "id-it-revPassphrase" */
+     299,    /* "id-it-signKeyPairTypes" */
+     305,    /* "id-it-subscriptionRequest" */
+     306,    /* "id-it-subscriptionResponse" */
+     784,    /* "id-it-suppLangTags" */
+     304,    /* "id-it-unsupportedOIDs" */
+     128,    /* "id-kp" */
+     280,    /* "id-mod-attribute-cert" */
+     274,    /* "id-mod-cmc" */
+     277,    /* "id-mod-cmp" */
+     284,    /* "id-mod-cmp2000" */
+     273,    /* "id-mod-crmf" */
+     283,    /* "id-mod-dvcs" */
+     275,    /* "id-mod-kea-profile-88" */
+     276,    /* "id-mod-kea-profile-93" */
+     282,    /* "id-mod-ocsp" */
+     278,    /* "id-mod-qualified-cert-88" */
+     279,    /* "id-mod-qualified-cert-93" */
+     281,    /* "id-mod-timestamp-protocol" */
+     264,    /* "id-on" */
+     347,    /* "id-on-personalData" */
+     265,    /* "id-pda" */
+     352,    /* "id-pda-countryOfCitizenship" */
+     353,    /* "id-pda-countryOfResidence" */
+     348,    /* "id-pda-dateOfBirth" */
+     351,    /* "id-pda-gender" */
+     349,    /* "id-pda-placeOfBirth" */
+     175,    /* "id-pe" */
+    1031,    /* "id-pkinit" */
+     261,    /* "id-pkip" */
+     258,    /* "id-pkix-mod" */
+     269,    /* "id-pkix1-explicit-88" */
+     271,    /* "id-pkix1-explicit-93" */
+     270,    /* "id-pkix1-implicit-88" */
+     272,    /* "id-pkix1-implicit-93" */
+     662,    /* "id-ppl" */
+     267,    /* "id-qcs" */
+     359,    /* "id-qcs-pkixQCSyntax-v1" */
+     259,    /* "id-qt" */
+     313,    /* "id-regCtrl" */
+     316,    /* "id-regCtrl-authenticator" */
+     319,    /* "id-regCtrl-oldCertID" */
+     318,    /* "id-regCtrl-pkiArchiveOptions" */
+     317,    /* "id-regCtrl-pkiPublicationInfo" */
+     320,    /* "id-regCtrl-protocolEncrKey" */
+     315,    /* "id-regCtrl-regToken" */
+     314,    /* "id-regInfo" */
+     322,    /* "id-regInfo-certReq" */
+     321,    /* "id-regInfo-utf8Pairs" */
+     191,    /* "id-smime-aa" */
+     215,    /* "id-smime-aa-contentHint" */
+     218,    /* "id-smime-aa-contentIdentifier" */
+     221,    /* "id-smime-aa-contentReference" */
+     240,    /* "id-smime-aa-dvcs-dvc" */
+     217,    /* "id-smime-aa-encapContentType" */
+     222,    /* "id-smime-aa-encrypKeyPref" */
+     220,    /* "id-smime-aa-equivalentLabels" */
+     232,    /* "id-smime-aa-ets-CertificateRefs" */
+     233,    /* "id-smime-aa-ets-RevocationRefs" */
+     238,    /* "id-smime-aa-ets-archiveTimeStamp" */
+     237,    /* "id-smime-aa-ets-certCRLTimestamp" */
+     234,    /* "id-smime-aa-ets-certValues" */
+     227,    /* "id-smime-aa-ets-commitmentType" */
+     231,    /* "id-smime-aa-ets-contentTimestamp" */
+     236,    /* "id-smime-aa-ets-escTimeStamp" */
+     230,    /* "id-smime-aa-ets-otherSigCert" */
+     235,    /* "id-smime-aa-ets-revocationValues" */
+     226,    /* "id-smime-aa-ets-sigPolicyId" */
+     229,    /* "id-smime-aa-ets-signerAttr" */
+     228,    /* "id-smime-aa-ets-signerLocation" */
+     219,    /* "id-smime-aa-macValue" */
+     214,    /* "id-smime-aa-mlExpandHistory" */
+     216,    /* "id-smime-aa-msgSigDigest" */
+     212,    /* "id-smime-aa-receiptRequest" */
+     213,    /* "id-smime-aa-securityLabel" */
+     239,    /* "id-smime-aa-signatureType" */
+     223,    /* "id-smime-aa-signingCertificate" */
+    1086,    /* "id-smime-aa-signingCertificateV2" */
+     224,    /* "id-smime-aa-smimeEncryptCerts" */
+     225,    /* "id-smime-aa-timeStampToken" */
+     192,    /* "id-smime-alg" */
+     243,    /* "id-smime-alg-3DESwrap" */
+     246,    /* "id-smime-alg-CMS3DESwrap" */
+     247,    /* "id-smime-alg-CMSRC2wrap" */
+     245,    /* "id-smime-alg-ESDH" */
+     241,    /* "id-smime-alg-ESDHwith3DES" */
+     242,    /* "id-smime-alg-ESDHwithRC2" */
+     244,    /* "id-smime-alg-RC2wrap" */
+     193,    /* "id-smime-cd" */
+     248,    /* "id-smime-cd-ldap" */
+     190,    /* "id-smime-ct" */
+     210,    /* "id-smime-ct-DVCSRequestData" */
+     211,    /* "id-smime-ct-DVCSResponseData" */
+     208,    /* "id-smime-ct-TDTInfo" */
+     207,    /* "id-smime-ct-TSTInfo" */
+     205,    /* "id-smime-ct-authData" */
+    1059,    /* "id-smime-ct-authEnvelopedData" */
+     786,    /* "id-smime-ct-compressedData" */
+    1058,    /* "id-smime-ct-contentCollection" */
+     209,    /* "id-smime-ct-contentInfo" */
+     206,    /* "id-smime-ct-publishCert" */
+     204,    /* "id-smime-ct-receipt" */
+     195,    /* "id-smime-cti" */
+     255,    /* "id-smime-cti-ets-proofOfApproval" */
+     256,    /* "id-smime-cti-ets-proofOfCreation" */
+     253,    /* "id-smime-cti-ets-proofOfDelivery" */
+     251,    /* "id-smime-cti-ets-proofOfOrigin" */
+     252,    /* "id-smime-cti-ets-proofOfReceipt" */
+     254,    /* "id-smime-cti-ets-proofOfSender" */
+     189,    /* "id-smime-mod" */
+     196,    /* "id-smime-mod-cms" */
+     197,    /* "id-smime-mod-ess" */
+     202,    /* "id-smime-mod-ets-eSigPolicy-88" */
+     203,    /* "id-smime-mod-ets-eSigPolicy-97" */
+     200,    /* "id-smime-mod-ets-eSignature-88" */
+     201,    /* "id-smime-mod-ets-eSignature-97" */
+     199,    /* "id-smime-mod-msg-v3" */
+     198,    /* "id-smime-mod-oid" */
+     194,    /* "id-smime-spq" */
+     250,    /* "id-smime-spq-ets-sqt-unotice" */
+     249,    /* "id-smime-spq-ets-sqt-uri" */
+     974,    /* "id-tc26" */
+     991,    /* "id-tc26-agreement" */
+     992,    /* "id-tc26-agreement-gost-3410-2012-256" */
+     993,    /* "id-tc26-agreement-gost-3410-2012-512" */
+     977,    /* "id-tc26-algorithms" */
+     990,    /* "id-tc26-cipher" */
+    1001,    /* "id-tc26-cipher-constants" */
+    1176,    /* "id-tc26-cipher-gostr3412-2015-kuznyechik" */
+    1177,    /* "id-tc26-cipher-gostr3412-2015-kuznyechik-ctracpkm" */
+    1178,    /* "id-tc26-cipher-gostr3412-2015-kuznyechik-ctracpkm-omac" */
+    1173,    /* "id-tc26-cipher-gostr3412-2015-magma" */
+    1174,    /* "id-tc26-cipher-gostr3412-2015-magma-ctracpkm" */
+    1175,    /* "id-tc26-cipher-gostr3412-2015-magma-ctracpkm-omac" */
+     994,    /* "id-tc26-constants" */
+     981,    /* "id-tc26-digest" */
+    1000,    /* "id-tc26-digest-constants" */
+    1002,    /* "id-tc26-gost-28147-constants" */
+    1147,    /* "id-tc26-gost-3410-2012-256-constants" */
+     996,    /* "id-tc26-gost-3410-2012-512-constants" */
+     987,    /* "id-tc26-mac" */
+     978,    /* "id-tc26-sign" */
+     995,    /* "id-tc26-sign-constants" */
+     984,    /* "id-tc26-signwithdigest" */
+    1179,    /* "id-tc26-wrap" */
+    1182,    /* "id-tc26-wrap-gostr3412-2015-kuznyechik" */
+    1183,    /* "id-tc26-wrap-gostr3412-2015-kuznyechik-kexp15" */
+    1180,    /* "id-tc26-wrap-gostr3412-2015-magma" */
+    1181,    /* "id-tc26-wrap-gostr3412-2015-magma-kexp15" */
+      34,    /* "idea-cbc" */
+      35,    /* "idea-cfb" */
+      36,    /* "idea-ecb" */
+      46,    /* "idea-ofb" */
+     676,    /* "identified-organization" */
+    1170,    /* "ieee" */
+     461,    /* "info" */
+     101,    /* "initials" */
+     869,    /* "internationaliSDNNumber" */
+    1022,    /* "ipsec Internet Key Exchange" */
+     749,    /* "ipsec3" */
+     750,    /* "ipsec4" */
+     181,    /* "iso" */
+     623,    /* "issuer capabilities" */
+     645,    /* "itu-t" */
+     492,    /* "janetMailbox" */
+     646,    /* "joint-iso-itu-t" */
+     957,    /* "jurisdictionCountryName" */
+     955,    /* "jurisdictionLocalityName" */
+     956,    /* "jurisdictionStateOrProvinceName" */
+     150,    /* "keyBag" */
+     773,    /* "kisa" */
+    1063,    /* "kx-any" */
+    1039,    /* "kx-dhe" */
+    1041,    /* "kx-dhe-psk" */
+    1038,    /* "kx-ecdhe" */
+    1040,    /* "kx-ecdhe-psk" */
+    1045,    /* "kx-gost" */
+    1043,    /* "kx-psk" */
+    1037,    /* "kx-rsa" */
+    1042,    /* "kx-rsa-psk" */
+    1044,    /* "kx-srp" */
+     477,    /* "lastModifiedBy" */
+     476,    /* "lastModifiedTime" */
+     157,    /* "localKeyID" */
+      15,    /* "localityName" */
+     480,    /* "mXRecord" */
+    1190,    /* "magma-cbc" */
+    1191,    /* "magma-cfb" */
+    1188,    /* "magma-ctr" */
+    1187,    /* "magma-ecb" */
+    1192,    /* "magma-mac" */
+    1189,    /* "magma-ofb" */
+     493,    /* "mailPreferenceOption" */
+     467,    /* "manager" */
+       3,    /* "md2" */
+       7,    /* "md2WithRSAEncryption" */
+     257,    /* "md4" */
+     396,    /* "md4WithRSAEncryption" */
+       4,    /* "md5" */
+     114,    /* "md5-sha1" */
+     104,    /* "md5WithRSA" */
+       8,    /* "md5WithRSAEncryption" */
+      95,    /* "mdc2" */
+      96,    /* "mdc2WithRSA" */
+     875,    /* "member" */
+     602,    /* "merchant initiated auth" */
+     514,    /* "message extensions" */
+      51,    /* "messageDigest" */
+     911,    /* "mgf1" */
+     506,    /* "mime-mhs-bodies" */
+     505,    /* "mime-mhs-headings" */
+     488,    /* "mobileTelephoneNumber" */
+     481,    /* "nSRecord" */
+     173,    /* "name" */
+     681,    /* "onBasis" */
+     379,    /* "org" */
+    1089,    /* "organizationIdentifier" */
+      17,    /* "organizationName" */
+     491,    /* "organizationalStatus" */
+      18,    /* "organizationalUnitName" */
+    1141,    /* "oscca" */
+     475,    /* "otherMailbox" */
+     876,    /* "owner" */
+     935,    /* "pSpecified" */
+     489,    /* "pagerTelephoneNumber" */
+     782,    /* "password based MAC" */
+     374,    /* "path" */
+     621,    /* "payment gateway capabilities" */
+       9,    /* "pbeWithMD2AndDES-CBC" */
+     168,    /* "pbeWithMD2AndRC2-CBC" */
+     112,    /* "pbeWithMD5AndCast5CBC" */
+      10,    /* "pbeWithMD5AndDES-CBC" */
+     169,    /* "pbeWithMD5AndRC2-CBC" */
+     148,    /* "pbeWithSHA1And128BitRC2-CBC" */
+     144,    /* "pbeWithSHA1And128BitRC4" */
+     147,    /* "pbeWithSHA1And2-KeyTripleDES-CBC" */
+     146,    /* "pbeWithSHA1And3-KeyTripleDES-CBC" */
+     149,    /* "pbeWithSHA1And40BitRC2-CBC" */
+     145,    /* "pbeWithSHA1And40BitRC4" */
+     170,    /* "pbeWithSHA1AndDES-CBC" */
+      68,    /* "pbeWithSHA1AndRC2-CBC" */
+     499,    /* "personalSignature" */
+     487,    /* "personalTitle" */
+     464,    /* "photo" */
+     863,    /* "physicalDeliveryOfficeName" */
+     437,    /* "pilot" */
+     439,    /* "pilotAttributeSyntax" */
+     438,    /* "pilotAttributeType" */
+     479,    /* "pilotAttributeType27" */
+     456,    /* "pilotDSA" */
+     441,    /* "pilotGroups" */
+     444,    /* "pilotObject" */
+     440,    /* "pilotObjectClass" */
+     455,    /* "pilotOrganization" */
+     445,    /* "pilotPerson" */
+     186,    /* "pkcs1" */
+      27,    /* "pkcs3" */
+     187,    /* "pkcs5" */
+      20,    /* "pkcs7" */
+      21,    /* "pkcs7-data" */
+      25,    /* "pkcs7-digestData" */
+      26,    /* "pkcs7-encryptedData" */
+      23,    /* "pkcs7-envelopedData" */
+      24,    /* "pkcs7-signedAndEnvelopedData" */
+      22,    /* "pkcs7-signedData" */
+     151,    /* "pkcs8ShroudedKeyBag" */
+      47,    /* "pkcs9" */
+    1061,    /* "poly1305" */
+     862,    /* "postOfficeBox" */
+     861,    /* "postalAddress" */
+     661,    /* "postalCode" */
+     683,    /* "ppBasis" */
+     872,    /* "preferredDeliveryMethod" */
+     873,    /* "presentationAddress" */
+     406,    /* "prime-field" */
+     409,    /* "prime192v1" */
+     410,    /* "prime192v2" */
+     411,    /* "prime192v3" */
+     412,    /* "prime239v1" */
+     413,    /* "prime239v2" */
+     414,    /* "prime239v3" */
+     415,    /* "prime256v1" */
+     886,    /* "protocolInformation" */
+     510,    /* "pseudonym" */
+     435,    /* "pss" */
+     286,    /* "qcStatements" */
+     457,    /* "qualityLabelledData" */
+     450,    /* "rFC822localPart" */
+      98,    /* "rc2-40-cbc" */
+     166,    /* "rc2-64-cbc" */
+      37,    /* "rc2-cbc" */
+      39,    /* "rc2-cfb" */
+      38,    /* "rc2-ecb" */
+      40,    /* "rc2-ofb" */
+       5,    /* "rc4" */
+      97,    /* "rc4-40" */
+     915,    /* "rc4-hmac-md5" */
+     120,    /* "rc5-cbc" */
+     122,    /* "rc5-cfb" */
+     121,    /* "rc5-ecb" */
+     123,    /* "rc5-ofb" */
+     870,    /* "registeredAddress" */
+     460,    /* "rfc822Mailbox" */
+     117,    /* "ripemd160" */
+     119,    /* "ripemd160WithRSA" */
+     400,    /* "role" */
+     877,    /* "roleOccupant" */
+     448,    /* "room" */
+     463,    /* "roomNumber" */
+      19,    /* "rsa" */
+       6,    /* "rsaEncryption" */
+     644,    /* "rsaOAEPEncryptionSET" */
+     377,    /* "rsaSignature" */
+     919,    /* "rsaesOaep" */
+     912,    /* "rsassaPss" */
+     482,    /* "sOARecord" */
+     155,    /* "safeContentsBag" */
+     291,    /* "sbgp-autonomousSysNum" */
+     290,    /* "sbgp-ipAddrBlock" */
+     292,    /* "sbgp-routerIdentifier" */
+     973,    /* "scrypt" */
+     159,    /* "sdsiCertificate" */
+     859,    /* "searchGuide" */
+     704,    /* "secp112r1" */
+     705,    /* "secp112r2" */
+     706,    /* "secp128r1" */
+     707,    /* "secp128r2" */
+     708,    /* "secp160k1" */
+     709,    /* "secp160r1" */
+     710,    /* "secp160r2" */
+     711,    /* "secp192k1" */
+     712,    /* "secp224k1" */
+     713,    /* "secp224r1" */
+     714,    /* "secp256k1" */
+     715,    /* "secp384r1" */
+     716,    /* "secp521r1" */
+     154,    /* "secretBag" */
+     474,    /* "secretary" */
+     717,    /* "sect113r1" */
+     718,    /* "sect113r2" */
+     719,    /* "sect131r1" */
+     720,    /* "sect131r2" */
+     721,    /* "sect163k1" */
+     722,    /* "sect163r1" */
+     723,    /* "sect163r2" */
+     724,    /* "sect193r1" */
+     725,    /* "sect193r2" */
+     726,    /* "sect233k1" */
+     727,    /* "sect233r1" */
+     728,    /* "sect239k1" */
+     729,    /* "sect283k1" */
+     730,    /* "sect283r1" */
+     731,    /* "sect409k1" */
+     732,    /* "sect409r1" */
+     733,    /* "sect571k1" */
+     734,    /* "sect571r1" */
+     635,    /* "secure device signature" */
+     878,    /* "seeAlso" */
+     777,    /* "seed-cbc" */
+     779,    /* "seed-cfb" */
+     776,    /* "seed-ecb" */
+     778,    /* "seed-ofb" */
+     105,    /* "serialNumber" */
+     625,    /* "set-addPolicy" */
+     515,    /* "set-attr" */
+     518,    /* "set-brand" */
+     638,    /* "set-brand-AmericanExpress" */
+     637,    /* "set-brand-Diners" */
+     636,    /* "set-brand-IATA-ATA" */
+     639,    /* "set-brand-JCB" */
+     641,    /* "set-brand-MasterCard" */
+     642,    /* "set-brand-Novus" */
+     640,    /* "set-brand-Visa" */
+     516,    /* "set-policy" */
+     607,    /* "set-policy-root" */
+     624,    /* "set-rootKeyThumb" */
+     620,    /* "setAttr-Cert" */
+     628,    /* "setAttr-IssCap-CVM" */
+     630,    /* "setAttr-IssCap-Sig" */
+     629,    /* "setAttr-IssCap-T2" */
+     627,    /* "setAttr-Token-B0Prime" */
+     626,    /* "setAttr-Token-EMV" */
+     622,    /* "setAttr-TokenType" */
+     619,    /* "setCext-IssuerCapabilities" */
+     615,    /* "setCext-PGWYcapabilities" */
+     616,    /* "setCext-TokenIdentifier" */
+     618,    /* "setCext-TokenType" */
+     617,    /* "setCext-Track2Data" */
+     611,    /* "setCext-cCertRequired" */
+     609,    /* "setCext-certType" */
+     608,    /* "setCext-hashedRoot" */
+     610,    /* "setCext-merchData" */
+     613,    /* "setCext-setExt" */
+     614,    /* "setCext-setQualf" */
+     612,    /* "setCext-tunneling" */
+     540,    /* "setct-AcqCardCodeMsg" */
+     576,    /* "setct-AcqCardCodeMsgTBE" */
+     570,    /* "setct-AuthReqTBE" */
+     534,    /* "setct-AuthReqTBS" */
+     527,    /* "setct-AuthResBaggage" */
+     571,    /* "setct-AuthResTBE" */
+     572,    /* "setct-AuthResTBEX" */
+     535,    /* "setct-AuthResTBS" */
+     536,    /* "setct-AuthResTBSX" */
+     528,    /* "setct-AuthRevReqBaggage" */
+     577,    /* "setct-AuthRevReqTBE" */
+     541,    /* "setct-AuthRevReqTBS" */
+     529,    /* "setct-AuthRevResBaggage" */
+     542,    /* "setct-AuthRevResData" */
+     578,    /* "setct-AuthRevResTBE" */
+     579,    /* "setct-AuthRevResTBEB" */
+     543,    /* "setct-AuthRevResTBS" */
+     573,    /* "setct-AuthTokenTBE" */
+     537,    /* "setct-AuthTokenTBS" */
+     600,    /* "setct-BCIDistributionTBS" */
+     558,    /* "setct-BatchAdminReqData" */
+     592,    /* "setct-BatchAdminReqTBE" */
+     559,    /* "setct-BatchAdminResData" */
+     593,    /* "setct-BatchAdminResTBE" */
+     599,    /* "setct-CRLNotificationResTBS" */
+     598,    /* "setct-CRLNotificationTBS" */
+     580,    /* "setct-CapReqTBE" */
+     581,    /* "setct-CapReqTBEX" */
+     544,    /* "setct-CapReqTBS" */
+     545,    /* "setct-CapReqTBSX" */
+     546,    /* "setct-CapResData" */
+     582,    /* "setct-CapResTBE" */
+     583,    /* "setct-CapRevReqTBE" */
+     584,    /* "setct-CapRevReqTBEX" */
+     547,    /* "setct-CapRevReqTBS" */
+     548,    /* "setct-CapRevReqTBSX" */
+     549,    /* "setct-CapRevResData" */
+     585,    /* "setct-CapRevResTBE" */
+     538,    /* "setct-CapTokenData" */
+     530,    /* "setct-CapTokenSeq" */
+     574,    /* "setct-CapTokenTBE" */
+     575,    /* "setct-CapTokenTBEX" */
+     539,    /* "setct-CapTokenTBS" */
+     560,    /* "setct-CardCInitResTBS" */
+     566,    /* "setct-CertInqReqTBS" */
+     563,    /* "setct-CertReqData" */
+     595,    /* "setct-CertReqTBE" */
+     596,    /* "setct-CertReqTBEX" */
+     564,    /* "setct-CertReqTBS" */
+     565,    /* "setct-CertResData" */
+     597,    /* "setct-CertResTBE" */
+     586,    /* "setct-CredReqTBE" */
+     587,    /* "setct-CredReqTBEX" */
+     550,    /* "setct-CredReqTBS" */
+     551,    /* "setct-CredReqTBSX" */
+     552,    /* "setct-CredResData" */
+     588,    /* "setct-CredResTBE" */
+     589,    /* "setct-CredRevReqTBE" */
+     590,    /* "setct-CredRevReqTBEX" */
+     553,    /* "setct-CredRevReqTBS" */
+     554,    /* "setct-CredRevReqTBSX" */
+     555,    /* "setct-CredRevResData" */
+     591,    /* "setct-CredRevResTBE" */
+     567,    /* "setct-ErrorTBS" */
+     526,    /* "setct-HODInput" */
+     561,    /* "setct-MeAqCInitResTBS" */
+     522,    /* "setct-OIData" */
+     519,    /* "setct-PANData" */
+     521,    /* "setct-PANOnly" */
+     520,    /* "setct-PANToken" */
+     556,    /* "setct-PCertReqData" */
+     557,    /* "setct-PCertResTBS" */
+     523,    /* "setct-PI" */
+     532,    /* "setct-PI-TBS" */
+     524,    /* "setct-PIData" */
+     525,    /* "setct-PIDataUnsigned" */
+     568,    /* "setct-PIDualSignedTBE" */
+     569,    /* "setct-PIUnsignedTBE" */
+     531,    /* "setct-PInitResData" */
+     533,    /* "setct-PResData" */
+     594,    /* "setct-RegFormReqTBE" */
+     562,    /* "setct-RegFormResTBS" */
+     604,    /* "setext-pinAny" */
+     603,    /* "setext-pinSecure" */
+     605,    /* "setext-track2" */
+      41,    /* "sha" */
+      64,    /* "sha1" */
+     115,    /* "sha1WithRSA" */
+      65,    /* "sha1WithRSAEncryption" */
+     675,    /* "sha224" */
+     671,    /* "sha224WithRSAEncryption" */
+     672,    /* "sha256" */
+     668,    /* "sha256WithRSAEncryption" */
+    1096,    /* "sha3-224" */
+    1097,    /* "sha3-256" */
+    1098,    /* "sha3-384" */
+    1099,    /* "sha3-512" */
+     673,    /* "sha384" */
+     669,    /* "sha384WithRSAEncryption" */
+     674,    /* "sha512" */
+    1094,    /* "sha512-224" */
+    1145,    /* "sha512-224WithRSAEncryption" */
+    1095,    /* "sha512-256" */
+    1146,    /* "sha512-256WithRSAEncryption" */
+     670,    /* "sha512WithRSAEncryption" */
+      42,    /* "shaWithRSAEncryption" */
+    1100,    /* "shake128" */
+    1101,    /* "shake256" */
+      52,    /* "signingTime" */
+     454,    /* "simpleSecurityObject" */
+     496,    /* "singleLevelQuality" */
+    1062,    /* "siphash" */
+    1142,    /* "sm-scheme" */
+    1172,    /* "sm2" */
+    1143,    /* "sm3" */
+    1144,    /* "sm3WithRSAEncryption" */
+    1134,    /* "sm4-cbc" */
+    1137,    /* "sm4-cfb" */
+    1136,    /* "sm4-cfb1" */
+    1138,    /* "sm4-cfb8" */
+    1139,    /* "sm4-ctr" */
+    1133,    /* "sm4-ecb" */
+    1135,    /* "sm4-ofb" */
+      16,    /* "stateOrProvinceName" */
+     660,    /* "streetAddress" */
+     498,    /* "subtreeMaximumQuality" */
+     497,    /* "subtreeMinimumQuality" */
+     890,    /* "supportedAlgorithms" */
+     874,    /* "supportedApplicationContext" */
+     100,    /* "surname" */
+     864,    /* "telephoneNumber" */
+     866,    /* "teletexTerminalIdentifier" */
+     865,    /* "telexNumber" */
+     459,    /* "textEncodedORAddress" */
+     293,    /* "textNotice" */
+     106,    /* "title" */
+    1021,    /* "tls1-prf" */
+     682,    /* "tpBasis" */
+    1151,    /* "ua-pki" */
+     436,    /* "ucl" */
+       0,    /* "undefined" */
+     102,    /* "uniqueIdentifier" */
+     888,    /* "uniqueMember" */
+      55,    /* "unstructuredAddress" */
+      49,    /* "unstructuredName" */
+     880,    /* "userCertificate" */
+     465,    /* "userClass" */
+     458,    /* "userId" */
+     879,    /* "userPassword" */
+     373,    /* "valid" */
+     678,    /* "wap" */
+     679,    /* "wap-wsg" */
+     735,    /* "wap-wsg-idm-ecid-wtls1" */
+     743,    /* "wap-wsg-idm-ecid-wtls10" */
+     744,    /* "wap-wsg-idm-ecid-wtls11" */
+     745,    /* "wap-wsg-idm-ecid-wtls12" */
+     736,    /* "wap-wsg-idm-ecid-wtls3" */
+     737,    /* "wap-wsg-idm-ecid-wtls4" */
+     738,    /* "wap-wsg-idm-ecid-wtls5" */
+     739,    /* "wap-wsg-idm-ecid-wtls6" */
+     740,    /* "wap-wsg-idm-ecid-wtls7" */
+     741,    /* "wap-wsg-idm-ecid-wtls8" */
+     742,    /* "wap-wsg-idm-ecid-wtls9" */
+     804,    /* "whirlpool" */
+     868,    /* "x121Address" */
+     503,    /* "x500UniqueIdentifier" */
+     158,    /* "x509Certificate" */
+     160,    /* "x509Crl" */
+     125,    /* "zlib compression" */
+};
+
+#define NUM_OBJ 1071
+static const unsigned int obj_objs[NUM_OBJ] = {
+       0,    /* OBJ_undef                        0 */
+     181,    /* OBJ_iso                          1 */
+     393,    /* OBJ_joint_iso_ccitt              OBJ_joint_iso_itu_t */
+     404,    /* OBJ_ccitt                        OBJ_itu_t */
+     645,    /* OBJ_itu_t                        0 */
+     646,    /* OBJ_joint_iso_itu_t              2 */
+     434,    /* OBJ_data                         0 9 */
+     182,    /* OBJ_member_body                  1 2 */
+     379,    /* OBJ_org                          1 3 */
+     676,    /* OBJ_identified_organization      1 3 */
+      11,    /* OBJ_X500                         2 5 */
+     647,    /* OBJ_international_organizations  2 23 */
+     380,    /* OBJ_dod                          1 3 6 */
+    1170,    /* OBJ_ieee                         1 3 111 */
+      12,    /* OBJ_X509                         2 5 4 */
+     378,    /* OBJ_X500algorithms               2 5 8 */
+      81,    /* OBJ_id_ce                        2 5 29 */
+     512,    /* OBJ_id_set                       2 23 42 */
+     678,    /* OBJ_wap                          2 23 43 */
+     435,    /* OBJ_pss                          0 9 2342 */
+    1140,    /* OBJ_ISO_CN                       1 2 156 */
+    1150,    /* OBJ_ISO_UA                       1 2 804 */
+     183,    /* OBJ_ISO_US                       1 2 840 */
+     381,    /* OBJ_iana                         1 3 6 1 */
+    1034,    /* OBJ_X25519                       1 3 101 110 */
+    1035,    /* OBJ_X448                         1 3 101 111 */
+    1087,    /* OBJ_ED25519                      1 3 101 112 */
+    1088,    /* OBJ_ED448                        1 3 101 113 */
+     677,    /* OBJ_certicom_arc                 1 3 132 */
+     394,    /* OBJ_selected_attribute_types     2 5 1 5 */
+      13,    /* OBJ_commonName                   2 5 4 3 */
+     100,    /* OBJ_surname                      2 5 4 4 */
+     105,    /* OBJ_serialNumber                 2 5 4 5 */
+      14,    /* OBJ_countryName                  2 5 4 6 */
+      15,    /* OBJ_localityName                 2 5 4 7 */
+      16,    /* OBJ_stateOrProvinceName          2 5 4 8 */
+     660,    /* OBJ_streetAddress                2 5 4 9 */
+      17,    /* OBJ_organizationName             2 5 4 10 */
+      18,    /* OBJ_organizationalUnitName       2 5 4 11 */
+     106,    /* OBJ_title                        2 5 4 12 */
+     107,    /* OBJ_description                  2 5 4 13 */
+     859,    /* OBJ_searchGuide                  2 5 4 14 */
+     860,    /* OBJ_businessCategory             2 5 4 15 */
+     861,    /* OBJ_postalAddress                2 5 4 16 */
+     661,    /* OBJ_postalCode                   2 5 4 17 */
+     862,    /* OBJ_postOfficeBox                2 5 4 18 */
+     863,    /* OBJ_physicalDeliveryOfficeName   2 5 4 19 */
+     864,    /* OBJ_telephoneNumber              2 5 4 20 */
+     865,    /* OBJ_telexNumber                  2 5 4 21 */
+     866,    /* OBJ_teletexTerminalIdentifier    2 5 4 22 */
+     867,    /* OBJ_facsimileTelephoneNumber     2 5 4 23 */
+     868,    /* OBJ_x121Address                  2 5 4 24 */
+     869,    /* OBJ_internationaliSDNNumber      2 5 4 25 */
+     870,    /* OBJ_registeredAddress            2 5 4 26 */
+     871,    /* OBJ_destinationIndicator         2 5 4 27 */
+     872,    /* OBJ_preferredDeliveryMethod      2 5 4 28 */
+     873,    /* OBJ_presentationAddress          2 5 4 29 */
+     874,    /* OBJ_supportedApplicationContext  2 5 4 30 */
+     875,    /* OBJ_member                       2 5 4 31 */
+     876,    /* OBJ_owner                        2 5 4 32 */
+     877,    /* OBJ_roleOccupant                 2 5 4 33 */
+     878,    /* OBJ_seeAlso                      2 5 4 34 */
+     879,    /* OBJ_userPassword                 2 5 4 35 */
+     880,    /* OBJ_userCertificate              2 5 4 36 */
+     881,    /* OBJ_cACertificate                2 5 4 37 */
+     882,    /* OBJ_authorityRevocationList      2 5 4 38 */
+     883,    /* OBJ_certificateRevocationList    2 5 4 39 */
+     884,    /* OBJ_crossCertificatePair         2 5 4 40 */
+     173,    /* OBJ_name                         2 5 4 41 */
+      99,    /* OBJ_givenName                    2 5 4 42 */
+     101,    /* OBJ_initials                     2 5 4 43 */
+     509,    /* OBJ_generationQualifier          2 5 4 44 */
+     503,    /* OBJ_x500UniqueIdentifier         2 5 4 45 */
+     174,    /* OBJ_dnQualifier                  2 5 4 46 */
+     885,    /* OBJ_enhancedSearchGuide          2 5 4 47 */
+     886,    /* OBJ_protocolInformation          2 5 4 48 */
+     887,    /* OBJ_distinguishedName            2 5 4 49 */
+     888,    /* OBJ_uniqueMember                 2 5 4 50 */
+     889,    /* OBJ_houseIdentifier              2 5 4 51 */
+     890,    /* OBJ_supportedAlgorithms          2 5 4 52 */
+     891,    /* OBJ_deltaRevocationList          2 5 4 53 */
+     892,    /* OBJ_dmdName                      2 5 4 54 */
+     510,    /* OBJ_pseudonym                    2 5 4 65 */
+     400,    /* OBJ_role                         2 5 4 72 */
+    1089,    /* OBJ_organizationIdentifier       2 5 4 97 */
+    1090,    /* OBJ_countryCode3c                2 5 4 98 */
+    1091,    /* OBJ_countryCode3n                2 5 4 99 */
+    1092,    /* OBJ_dnsName                      2 5 4 100 */
+     769,    /* OBJ_subject_directory_attributes 2 5 29 9 */
+      82,    /* OBJ_subject_key_identifier       2 5 29 14 */
+      83,    /* OBJ_key_usage                    2 5 29 15 */
+      84,    /* OBJ_private_key_usage_period     2 5 29 16 */
+      85,    /* OBJ_subject_alt_name             2 5 29 17 */
+      86,    /* OBJ_issuer_alt_name              2 5 29 18 */
+      87,    /* OBJ_basic_constraints            2 5 29 19 */
+      88,    /* OBJ_crl_number                   2 5 29 20 */
+     141,    /* OBJ_crl_reason                   2 5 29 21 */
+     430,    /* OBJ_hold_instruction_code        2 5 29 23 */
+     142,    /* OBJ_invalidity_date              2 5 29 24 */
+     140,    /* OBJ_delta_crl                    2 5 29 27 */
+     770,    /* OBJ_issuing_distribution_point   2 5 29 28 */
+     771,    /* OBJ_certificate_issuer           2 5 29 29 */
+     666,    /* OBJ_name_constraints             2 5 29 30 */
+     103,    /* OBJ_crl_distribution_points      2 5 29 31 */
+      89,    /* OBJ_certificate_policies         2 5 29 32 */
+     747,    /* OBJ_policy_mappings              2 5 29 33 */
+      90,    /* OBJ_authority_key_identifier     2 5 29 35 */
+     401,    /* OBJ_policy_constraints           2 5 29 36 */
+     126,    /* OBJ_ext_key_usage                2 5 29 37 */
+     857,    /* OBJ_freshest_crl                 2 5 29 46 */
+     748,    /* OBJ_inhibit_any_policy           2 5 29 54 */
+     402,    /* OBJ_target_information           2 5 29 55 */
+     403,    /* OBJ_no_rev_avail                 2 5 29 56 */
+     513,    /* OBJ_set_ctype                    2 23 42 0 */
+     514,    /* OBJ_set_msgExt                   2 23 42 1 */
+     515,    /* OBJ_set_attr                     2 23 42 3 */
+     516,    /* OBJ_set_policy                   2 23 42 5 */
+     517,    /* OBJ_set_certExt                  2 23 42 7 */
+     518,    /* OBJ_set_brand                    2 23 42 8 */
+     679,    /* OBJ_wap_wsg                      2 23 43 1 */
+     382,    /* OBJ_Directory                    1 3 6 1 1 */
+     383,    /* OBJ_Management                   1 3 6 1 2 */
+     384,    /* OBJ_Experimental                 1 3 6 1 3 */
+     385,    /* OBJ_Private                      1 3 6 1 4 */
+     386,    /* OBJ_Security                     1 3 6 1 5 */
+     387,    /* OBJ_SNMPv2                       1 3 6 1 6 */
+     388,    /* OBJ_Mail                         1 3 6 1 7 */
+     376,    /* OBJ_algorithm                    1 3 14 3 2 */
+     395,    /* OBJ_clearance                    2 5 1 5 55 */
+      19,    /* OBJ_rsa                          2 5 8 1 1 */
+      96,    /* OBJ_mdc2WithRSA                  2 5 8 3 100 */
+      95,    /* OBJ_mdc2                         2 5 8 3 101 */
+     746,    /* OBJ_any_policy                   2 5 29 32 0 */
+     910,    /* OBJ_anyExtendedKeyUsage          2 5 29 37 0 */
+     519,    /* OBJ_setct_PANData                2 23 42 0 0 */
+     520,    /* OBJ_setct_PANToken               2 23 42 0 1 */
+     521,    /* OBJ_setct_PANOnly                2 23 42 0 2 */
+     522,    /* OBJ_setct_OIData                 2 23 42 0 3 */
+     523,    /* OBJ_setct_PI                     2 23 42 0 4 */
+     524,    /* OBJ_setct_PIData                 2 23 42 0 5 */
+     525,    /* OBJ_setct_PIDataUnsigned         2 23 42 0 6 */
+     526,    /* OBJ_setct_HODInput               2 23 42 0 7 */
+     527,    /* OBJ_setct_AuthResBaggage         2 23 42 0 8 */
+     528,    /* OBJ_setct_AuthRevReqBaggage      2 23 42 0 9 */
+     529,    /* OBJ_setct_AuthRevResBaggage      2 23 42 0 10 */
+     530,    /* OBJ_setct_CapTokenSeq            2 23 42 0 11 */
+     531,    /* OBJ_setct_PInitResData           2 23 42 0 12 */
+     532,    /* OBJ_setct_PI_TBS                 2 23 42 0 13 */
+     533,    /* OBJ_setct_PResData               2 23 42 0 14 */
+     534,    /* OBJ_setct_AuthReqTBS             2 23 42 0 16 */
+     535,    /* OBJ_setct_AuthResTBS             2 23 42 0 17 */
+     536,    /* OBJ_setct_AuthResTBSX            2 23 42 0 18 */
+     537,    /* OBJ_setct_AuthTokenTBS           2 23 42 0 19 */
+     538,    /* OBJ_setct_CapTokenData           2 23 42 0 20 */
+     539,    /* OBJ_setct_CapTokenTBS            2 23 42 0 21 */
+     540,    /* OBJ_setct_AcqCardCodeMsg         2 23 42 0 22 */
+     541,    /* OBJ_setct_AuthRevReqTBS          2 23 42 0 23 */
+     542,    /* OBJ_setct_AuthRevResData         2 23 42 0 24 */
+     543,    /* OBJ_setct_AuthRevResTBS          2 23 42 0 25 */
+     544,    /* OBJ_setct_CapReqTBS              2 23 42 0 26 */
+     545,    /* OBJ_setct_CapReqTBSX             2 23 42 0 27 */
+     546,    /* OBJ_setct_CapResData             2 23 42 0 28 */
+     547,    /* OBJ_setct_CapRevReqTBS           2 23 42 0 29 */
+     548,    /* OBJ_setct_CapRevReqTBSX          2 23 42 0 30 */
+     549,    /* OBJ_setct_CapRevResData          2 23 42 0 31 */
+     550,    /* OBJ_setct_CredReqTBS             2 23 42 0 32 */
+     551,    /* OBJ_setct_CredReqTBSX            2 23 42 0 33 */
+     552,    /* OBJ_setct_CredResData            2 23 42 0 34 */
+     553,    /* OBJ_setct_CredRevReqTBS          2 23 42 0 35 */
+     554,    /* OBJ_setct_CredRevReqTBSX         2 23 42 0 36 */
+     555,    /* OBJ_setct_CredRevResData         2 23 42 0 37 */
+     556,    /* OBJ_setct_PCertReqData           2 23 42 0 38 */
+     557,    /* OBJ_setct_PCertResTBS            2 23 42 0 39 */
+     558,    /* OBJ_setct_BatchAdminReqData      2 23 42 0 40 */
+     559,    /* OBJ_setct_BatchAdminResData      2 23 42 0 41 */
+     560,    /* OBJ_setct_CardCInitResTBS        2 23 42 0 42 */
+     561,    /* OBJ_setct_MeAqCInitResTBS        2 23 42 0 43 */
+     562,    /* OBJ_setct_RegFormResTBS          2 23 42 0 44 */
+     563,    /* OBJ_setct_CertReqData            2 23 42 0 45 */
+     564,    /* OBJ_setct_CertReqTBS             2 23 42 0 46 */
+     565,    /* OBJ_setct_CertResData            2 23 42 0 47 */
+     566,    /* OBJ_setct_CertInqReqTBS          2 23 42 0 48 */
+     567,    /* OBJ_setct_ErrorTBS               2 23 42 0 49 */
+     568,    /* OBJ_setct_PIDualSignedTBE        2 23 42 0 50 */
+     569,    /* OBJ_setct_PIUnsignedTBE          2 23 42 0 51 */
+     570,    /* OBJ_setct_AuthReqTBE             2 23 42 0 52 */
+     571,    /* OBJ_setct_AuthResTBE             2 23 42 0 53 */
+     572,    /* OBJ_setct_AuthResTBEX            2 23 42 0 54 */
+     573,    /* OBJ_setct_AuthTokenTBE           2 23 42 0 55 */
+     574,    /* OBJ_setct_CapTokenTBE            2 23 42 0 56 */
+     575,    /* OBJ_setct_CapTokenTBEX           2 23 42 0 57 */
+     576,    /* OBJ_setct_AcqCardCodeMsgTBE      2 23 42 0 58 */
+     577,    /* OBJ_setct_AuthRevReqTBE          2 23 42 0 59 */
+     578,    /* OBJ_setct_AuthRevResTBE          2 23 42 0 60 */
+     579,    /* OBJ_setct_AuthRevResTBEB         2 23 42 0 61 */
+     580,    /* OBJ_setct_CapReqTBE              2 23 42 0 62 */
+     581,    /* OBJ_setct_CapReqTBEX             2 23 42 0 63 */
+     582,    /* OBJ_setct_CapResTBE              2 23 42 0 64 */
+     583,    /* OBJ_setct_CapRevReqTBE           2 23 42 0 65 */
+     584,    /* OBJ_setct_CapRevReqTBEX          2 23 42 0 66 */
+     585,    /* OBJ_setct_CapRevResTBE           2 23 42 0 67 */
+     586,    /* OBJ_setct_CredReqTBE             2 23 42 0 68 */
+     587,    /* OBJ_setct_CredReqTBEX            2 23 42 0 69 */
+     588,    /* OBJ_setct_CredResTBE             2 23 42 0 70 */
+     589,    /* OBJ_setct_CredRevReqTBE          2 23 42 0 71 */
+     590,    /* OBJ_setct_CredRevReqTBEX         2 23 42 0 72 */
+     591,    /* OBJ_setct_CredRevResTBE          2 23 42 0 73 */
+     592,    /* OBJ_setct_BatchAdminReqTBE       2 23 42 0 74 */
+     593,    /* OBJ_setct_BatchAdminResTBE       2 23 42 0 75 */
+     594,    /* OBJ_setct_RegFormReqTBE          2 23 42 0 76 */
+     595,    /* OBJ_setct_CertReqTBE             2 23 42 0 77 */
+     596,    /* OBJ_setct_CertReqTBEX            2 23 42 0 78 */
+     597,    /* OBJ_setct_CertResTBE             2 23 42 0 79 */
+     598,    /* OBJ_setct_CRLNotificationTBS     2 23 42 0 80 */
+     599,    /* OBJ_setct_CRLNotificationResTBS  2 23 42 0 81 */
+     600,    /* OBJ_setct_BCIDistributionTBS     2 23 42 0 82 */
+     601,    /* OBJ_setext_genCrypt              2 23 42 1 1 */
+     602,    /* OBJ_setext_miAuth                2 23 42 1 3 */
+     603,    /* OBJ_setext_pinSecure             2 23 42 1 4 */
+     604,    /* OBJ_setext_pinAny                2 23 42 1 5 */
+     605,    /* OBJ_setext_track2                2 23 42 1 7 */
+     606,    /* OBJ_setext_cv                    2 23 42 1 8 */
+     620,    /* OBJ_setAttr_Cert                 2 23 42 3 0 */
+     621,    /* OBJ_setAttr_PGWYcap              2 23 42 3 1 */
+     622,    /* OBJ_setAttr_TokenType            2 23 42 3 2 */
+     623,    /* OBJ_setAttr_IssCap               2 23 42 3 3 */
+     607,    /* OBJ_set_policy_root              2 23 42 5 0 */
+     608,    /* OBJ_setCext_hashedRoot           2 23 42 7 0 */
+     609,    /* OBJ_setCext_certType             2 23 42 7 1 */
+     610,    /* OBJ_setCext_merchData            2 23 42 7 2 */
+     611,    /* OBJ_setCext_cCertRequired        2 23 42 7 3 */
+     612,    /* OBJ_setCext_tunneling            2 23 42 7 4 */
+     613,    /* OBJ_setCext_setExt               2 23 42 7 5 */
+     614,    /* OBJ_setCext_setQualf             2 23 42 7 6 */
+     615,    /* OBJ_setCext_PGWYcapabilities     2 23 42 7 7 */
+     616,    /* OBJ_setCext_TokenIdentifier      2 23 42 7 8 */
+     617,    /* OBJ_setCext_Track2Data           2 23 42 7 9 */
+     618,    /* OBJ_setCext_TokenType            2 23 42 7 10 */
+     619,    /* OBJ_setCext_IssuerCapabilities   2 23 42 7 11 */
+     636,    /* OBJ_set_brand_IATA_ATA           2 23 42 8 1 */
+     640,    /* OBJ_set_brand_Visa               2 23 42 8 4 */
+     641,    /* OBJ_set_brand_MasterCard         2 23 42 8 5 */
+     637,    /* OBJ_set_brand_Diners             2 23 42 8 30 */
+     638,    /* OBJ_set_brand_AmericanExpress    2 23 42 8 34 */
+     639,    /* OBJ_set_brand_JCB                2 23 42 8 35 */
+    1141,    /* OBJ_oscca                        1 2 156 10197 */
+     805,    /* OBJ_cryptopro                    1 2 643 2 2 */
+     806,    /* OBJ_cryptocom                    1 2 643 2 9 */
+     974,    /* OBJ_id_tc26                      1 2 643 7 1 */
+    1005,    /* OBJ_OGRN                         1 2 643 100 1 */
+    1006,    /* OBJ_SNILS                        1 2 643 100 3 */
+    1007,    /* OBJ_subjectSignTool              1 2 643 100 111 */
+    1008,    /* OBJ_issuerSignTool               1 2 643 100 112 */
+     184,    /* OBJ_X9_57                        1 2 840 10040 */
+     405,    /* OBJ_ansi_X9_62                   1 2 840 10045 */
+     389,    /* OBJ_Enterprises                  1 3 6 1 4 1 */
+     504,    /* OBJ_mime_mhs                     1 3 6 1 7 1 */
+     104,    /* OBJ_md5WithRSA                   1 3 14 3 2 3 */
+      29,    /* OBJ_des_ecb                      1 3 14 3 2 6 */
+      31,    /* OBJ_des_cbc                      1 3 14 3 2 7 */
+      45,    /* OBJ_des_ofb64                    1 3 14 3 2 8 */
+      30,    /* OBJ_des_cfb64                    1 3 14 3 2 9 */
+     377,    /* OBJ_rsaSignature                 1 3 14 3 2 11 */
+      67,    /* OBJ_dsa_2                        1 3 14 3 2 12 */
+      66,    /* OBJ_dsaWithSHA                   1 3 14 3 2 13 */
+      42,    /* OBJ_shaWithRSAEncryption         1 3 14 3 2 15 */
+      32,    /* OBJ_des_ede_ecb                  1 3 14 3 2 17 */
+      41,    /* OBJ_sha                          1 3 14 3 2 18 */
+      64,    /* OBJ_sha1                         1 3 14 3 2 26 */
+      70,    /* OBJ_dsaWithSHA1_2                1 3 14 3 2 27 */
+     115,    /* OBJ_sha1WithRSA                  1 3 14 3 2 29 */
+     117,    /* OBJ_ripemd160                    1 3 36 3 2 1 */
+    1093,    /* OBJ_x509ExtAdmission             1 3 36 8 3 3 */
+     143,    /* OBJ_sxnet                        1 3 101 1 4 1 */
+    1171,    /* OBJ_ieee_siswg                   1 3 111 2 1619 */
+     721,    /* OBJ_sect163k1                    1 3 132 0 1 */
+     722,    /* OBJ_sect163r1                    1 3 132 0 2 */
+     728,    /* OBJ_sect239k1                    1 3 132 0 3 */
+     717,    /* OBJ_sect113r1                    1 3 132 0 4 */
+     718,    /* OBJ_sect113r2                    1 3 132 0 5 */
+     704,    /* OBJ_secp112r1                    1 3 132 0 6 */
+     705,    /* OBJ_secp112r2                    1 3 132 0 7 */
+     709,    /* OBJ_secp160r1                    1 3 132 0 8 */
+     708,    /* OBJ_secp160k1                    1 3 132 0 9 */
+     714,    /* OBJ_secp256k1                    1 3 132 0 10 */
+     723,    /* OBJ_sect163r2                    1 3 132 0 15 */
+     729,    /* OBJ_sect283k1                    1 3 132 0 16 */
+     730,    /* OBJ_sect283r1                    1 3 132 0 17 */
+     719,    /* OBJ_sect131r1                    1 3 132 0 22 */
+     720,    /* OBJ_sect131r2                    1 3 132 0 23 */
+     724,    /* OBJ_sect193r1                    1 3 132 0 24 */
+     725,    /* OBJ_sect193r2                    1 3 132 0 25 */
+     726,    /* OBJ_sect233k1                    1 3 132 0 26 */
+     727,    /* OBJ_sect233r1                    1 3 132 0 27 */
+     706,    /* OBJ_secp128r1                    1 3 132 0 28 */
+     707,    /* OBJ_secp128r2                    1 3 132 0 29 */
+     710,    /* OBJ_secp160r2                    1 3 132 0 30 */
+     711,    /* OBJ_secp192k1                    1 3 132 0 31 */
+     712,    /* OBJ_secp224k1                    1 3 132 0 32 */
+     713,    /* OBJ_secp224r1                    1 3 132 0 33 */
+     715,    /* OBJ_secp384r1                    1 3 132 0 34 */
+     716,    /* OBJ_secp521r1                    1 3 132 0 35 */
+     731,    /* OBJ_sect409k1                    1 3 132 0 36 */
+     732,    /* OBJ_sect409r1                    1 3 132 0 37 */
+     733,    /* OBJ_sect571k1                    1 3 132 0 38 */
+     734,    /* OBJ_sect571r1                    1 3 132 0 39 */
+     624,    /* OBJ_set_rootKeyThumb             2 23 42 3 0 0 */
+     625,    /* OBJ_set_addPolicy                2 23 42 3 0 1 */
+     626,    /* OBJ_setAttr_Token_EMV            2 23 42 3 2 1 */
+     627,    /* OBJ_setAttr_Token_B0Prime        2 23 42 3 2 2 */
+     628,    /* OBJ_setAttr_IssCap_CVM           2 23 42 3 3 3 */
+     629,    /* OBJ_setAttr_IssCap_T2            2 23 42 3 3 4 */
+     630,    /* OBJ_setAttr_IssCap_Sig           2 23 42 3 3 5 */
+     642,    /* OBJ_set_brand_Novus              2 23 42 8 6011 */
+     735,    /* OBJ_wap_wsg_idm_ecid_wtls1       2 23 43 1 4 1 */
+     736,    /* OBJ_wap_wsg_idm_ecid_wtls3       2 23 43 1 4 3 */
+     737,    /* OBJ_wap_wsg_idm_ecid_wtls4       2 23 43 1 4 4 */
+     738,    /* OBJ_wap_wsg_idm_ecid_wtls5       2 23 43 1 4 5 */
+     739,    /* OBJ_wap_wsg_idm_ecid_wtls6       2 23 43 1 4 6 */
+     740,    /* OBJ_wap_wsg_idm_ecid_wtls7       2 23 43 1 4 7 */
+     741,    /* OBJ_wap_wsg_idm_ecid_wtls8       2 23 43 1 4 8 */
+     742,    /* OBJ_wap_wsg_idm_ecid_wtls9       2 23 43 1 4 9 */
+     743,    /* OBJ_wap_wsg_idm_ecid_wtls10      2 23 43 1 4 10 */
+     744,    /* OBJ_wap_wsg_idm_ecid_wtls11      2 23 43 1 4 11 */
+     745,    /* OBJ_wap_wsg_idm_ecid_wtls12      2 23 43 1 4 12 */
+     804,    /* OBJ_whirlpool                    1 0 10118 3 0 55 */
+    1142,    /* OBJ_sm_scheme                    1 2 156 10197 1 */
+     773,    /* OBJ_kisa                         1 2 410 200004 */
+     807,    /* OBJ_id_GostR3411_94_with_GostR3410_2001 1 2 643 2 2 3 */
+     808,    /* OBJ_id_GostR3411_94_with_GostR3410_94 1 2 643 2 2 4 */
+     809,    /* OBJ_id_GostR3411_94              1 2 643 2 2 9 */
+     810,    /* OBJ_id_HMACGostR3411_94          1 2 643 2 2 10 */
+     811,    /* OBJ_id_GostR3410_2001            1 2 643 2 2 19 */
+     812,    /* OBJ_id_GostR3410_94              1 2 643 2 2 20 */
+     813,    /* OBJ_id_Gost28147_89              1 2 643 2 2 21 */
+     815,    /* OBJ_id_Gost28147_89_MAC          1 2 643 2 2 22 */
+     816,    /* OBJ_id_GostR3411_94_prf          1 2 643 2 2 23 */
+     817,    /* OBJ_id_GostR3410_2001DH          1 2 643 2 2 98 */
+     818,    /* OBJ_id_GostR3410_94DH            1 2 643 2 2 99 */
+     977,    /* OBJ_id_tc26_algorithms           1 2 643 7 1 1 */
+     994,    /* OBJ_id_tc26_constants            1 2 643 7 1 2 */
+       1,    /* OBJ_rsadsi                       1 2 840 113549 */
+     185,    /* OBJ_X9cm                         1 2 840 10040 4 */
+    1031,    /* OBJ_id_pkinit                    1 3 6 1 5 2 3 */
+     127,    /* OBJ_id_pkix                      1 3 6 1 5 5 7 */
+     505,    /* OBJ_mime_mhs_headings            1 3 6 1 7 1 1 */
+     506,    /* OBJ_mime_mhs_bodies              1 3 6 1 7 1 2 */
+     119,    /* OBJ_ripemd160WithRSA             1 3 36 3 3 1 2 */
+     937,    /* OBJ_dhSinglePass_stdDH_sha224kdf_scheme 1 3 132 1 11 0 */
+     938,    /* OBJ_dhSinglePass_stdDH_sha256kdf_scheme 1 3 132 1 11 1 */
+     939,    /* OBJ_dhSinglePass_stdDH_sha384kdf_scheme 1 3 132 1 11 2 */
+     940,    /* OBJ_dhSinglePass_stdDH_sha512kdf_scheme 1 3 132 1 11 3 */
+     942,    /* OBJ_dhSinglePass_cofactorDH_sha224kdf_scheme 1 3 132 1 14 0 */
+     943,    /* OBJ_dhSinglePass_cofactorDH_sha256kdf_scheme 1 3 132 1 14 1 */
+     944,    /* OBJ_dhSinglePass_cofactorDH_sha384kdf_scheme 1 3 132 1 14 2 */
+     945,    /* OBJ_dhSinglePass_cofactorDH_sha512kdf_scheme 1 3 132 1 14 3 */
+     631,    /* OBJ_setAttr_GenCryptgrm          2 23 42 3 3 3 1 */
+     632,    /* OBJ_setAttr_T2Enc                2 23 42 3 3 4 1 */
+     633,    /* OBJ_setAttr_T2cleartxt           2 23 42 3 3 4 2 */
+     634,    /* OBJ_setAttr_TokICCsig            2 23 42 3 3 5 1 */
+     635,    /* OBJ_setAttr_SecDevSig            2 23 42 3 3 5 2 */
+     436,    /* OBJ_ucl                          0 9 2342 19200300 */
+     820,    /* OBJ_id_Gost28147_89_None_KeyMeshing 1 2 643 2 2 14 0 */
+     819,    /* OBJ_id_Gost28147_89_CryptoPro_KeyMeshing 1 2 643 2 2 14 1 */
+     845,    /* OBJ_id_GostR3410_94_a            1 2 643 2 2 20 1 */
+     846,    /* OBJ_id_GostR3410_94_aBis         1 2 643 2 2 20 2 */
+     847,    /* OBJ_id_GostR3410_94_b            1 2 643 2 2 20 3 */
+     848,    /* OBJ_id_GostR3410_94_bBis         1 2 643 2 2 20 4 */
+     821,    /* OBJ_id_GostR3411_94_TestParamSet 1 2 643 2 2 30 0 */
+     822,    /* OBJ_id_GostR3411_94_CryptoProParamSet 1 2 643 2 2 30 1 */
+     823,    /* OBJ_id_Gost28147_89_TestParamSet 1 2 643 2 2 31 0 */
+     824,    /* OBJ_id_Gost28147_89_CryptoPro_A_ParamSet 1 2 643 2 2 31 1 */
+     825,    /* OBJ_id_Gost28147_89_CryptoPro_B_ParamSet 1 2 643 2 2 31 2 */
+     826,    /* OBJ_id_Gost28147_89_CryptoPro_C_ParamSet 1 2 643 2 2 31 3 */
+     827,    /* OBJ_id_Gost28147_89_CryptoPro_D_ParamSet 1 2 643 2 2 31 4 */
+     828,    /* OBJ_id_Gost28147_89_CryptoPro_Oscar_1_1_ParamSet 1 2 643 2 2 31 5 */
+     829,    /* OBJ_id_Gost28147_89_CryptoPro_Oscar_1_0_ParamSet 1 2 643 2 2 31 6 */
+     830,    /* OBJ_id_Gost28147_89_CryptoPro_RIC_1_ParamSet 1 2 643 2 2 31 7 */
+     831,    /* OBJ_id_GostR3410_94_TestParamSet 1 2 643 2 2 32 0 */
+     832,    /* OBJ_id_GostR3410_94_CryptoPro_A_ParamSet 1 2 643 2 2 32 2 */
+     833,    /* OBJ_id_GostR3410_94_CryptoPro_B_ParamSet 1 2 643 2 2 32 3 */
+     834,    /* OBJ_id_GostR3410_94_CryptoPro_C_ParamSet 1 2 643 2 2 32 4 */
+     835,    /* OBJ_id_GostR3410_94_CryptoPro_D_ParamSet 1 2 643 2 2 32 5 */
+     836,    /* OBJ_id_GostR3410_94_CryptoPro_XchA_ParamSet 1 2 643 2 2 33 1 */
+     837,    /* OBJ_id_GostR3410_94_CryptoPro_XchB_ParamSet 1 2 643 2 2 33 2 */
+     838,    /* OBJ_id_GostR3410_94_CryptoPro_XchC_ParamSet 1 2 643 2 2 33 3 */
+     839,    /* OBJ_id_GostR3410_2001_TestParamSet 1 2 643 2 2 35 0 */
+     840,    /* OBJ_id_GostR3410_2001_CryptoPro_A_ParamSet 1 2 643 2 2 35 1 */
+     841,    /* OBJ_id_GostR3410_2001_CryptoPro_B_ParamSet 1 2 643 2 2 35 2 */
+     842,    /* OBJ_id_GostR3410_2001_CryptoPro_C_ParamSet 1 2 643 2 2 35 3 */
+     843,    /* OBJ_id_GostR3410_2001_CryptoPro_XchA_ParamSet 1 2 643 2 2 36 0 */
+     844,    /* OBJ_id_GostR3410_2001_CryptoPro_XchB_ParamSet 1 2 643 2 2 36 1 */
+     978,    /* OBJ_id_tc26_sign                 1 2 643 7 1 1 1 */
+     981,    /* OBJ_id_tc26_digest               1 2 643 7 1 1 2 */
+     984,    /* OBJ_id_tc26_signwithdigest       1 2 643 7 1 1 3 */
+     987,    /* OBJ_id_tc26_mac                  1 2 643 7 1 1 4 */
+     990,    /* OBJ_id_tc26_cipher               1 2 643 7 1 1 5 */
+     991,    /* OBJ_id_tc26_agreement            1 2 643 7 1 1 6 */
+    1179,    /* OBJ_id_tc26_wrap                 1 2 643 7 1 1 7 */
+     995,    /* OBJ_id_tc26_sign_constants       1 2 643 7 1 2 1 */
+    1000,    /* OBJ_id_tc26_digest_constants     1 2 643 7 1 2 2 */
+    1001,    /* OBJ_id_tc26_cipher_constants     1 2 643 7 1 2 5 */
+    1151,    /* OBJ_ua_pki                       1 2 804 2 1 1 1 */
+       2,    /* OBJ_pkcs                         1 2 840 113549 1 */
+     431,    /* OBJ_hold_instruction_none        1 2 840 10040 2 1 */
+     432,    /* OBJ_hold_instruction_call_issuer 1 2 840 10040 2 2 */
+     433,    /* OBJ_hold_instruction_reject      1 2 840 10040 2 3 */
+     116,    /* OBJ_dsa                          1 2 840 10040 4 1 */
+     113,    /* OBJ_dsaWithSHA1                  1 2 840 10040 4 3 */
+     406,    /* OBJ_X9_62_prime_field            1 2 840 10045 1 1 */
+     407,    /* OBJ_X9_62_characteristic_two_field 1 2 840 10045 1 2 */
+     408,    /* OBJ_X9_62_id_ecPublicKey         1 2 840 10045 2 1 */
+     416,    /* OBJ_ecdsa_with_SHA1              1 2 840 10045 4 1 */
+     791,    /* OBJ_ecdsa_with_Recommended       1 2 840 10045 4 2 */
+     792,    /* OBJ_ecdsa_with_Specified         1 2 840 10045 4 3 */
+     920,    /* OBJ_dhpublicnumber               1 2 840 10046 2 1 */
+    1032,    /* OBJ_pkInitClientAuth             1 3 6 1 5 2 3 4 */
+    1033,    /* OBJ_pkInitKDC                    1 3 6 1 5 2 3 5 */
+     258,    /* OBJ_id_pkix_mod                  1 3 6 1 5 5 7 0 */
+     175,    /* OBJ_id_pe                        1 3 6 1 5 5 7 1 */
+     259,    /* OBJ_id_qt                        1 3 6 1 5 5 7 2 */
+     128,    /* OBJ_id_kp                        1 3 6 1 5 5 7 3 */
+     260,    /* OBJ_id_it                        1 3 6 1 5 5 7 4 */
+     261,    /* OBJ_id_pkip                      1 3 6 1 5 5 7 5 */
+     262,    /* OBJ_id_alg                       1 3 6 1 5 5 7 6 */
+     263,    /* OBJ_id_cmc                       1 3 6 1 5 5 7 7 */
+     264,    /* OBJ_id_on                        1 3 6 1 5 5 7 8 */
+     265,    /* OBJ_id_pda                       1 3 6 1 5 5 7 9 */
+     266,    /* OBJ_id_aca                       1 3 6 1 5 5 7 10 */
+     267,    /* OBJ_id_qcs                       1 3 6 1 5 5 7 11 */
+     268,    /* OBJ_id_cct                       1 3 6 1 5 5 7 12 */
+     662,    /* OBJ_id_ppl                       1 3 6 1 5 5 7 21 */
+     176,    /* OBJ_id_ad                        1 3 6 1 5 5 7 48 */
+     507,    /* OBJ_id_hex_partial_message       1 3 6 1 7 1 1 1 */
+     508,    /* OBJ_id_hex_multipart_message     1 3 6 1 7 1 1 2 */
+      57,    /* OBJ_netscape                     2 16 840 1 113730 */
+     754,    /* OBJ_camellia_128_ecb             0 3 4401 5 3 1 9 1 */
+     766,    /* OBJ_camellia_128_ofb128          0 3 4401 5 3 1 9 3 */
+     757,    /* OBJ_camellia_128_cfb128          0 3 4401 5 3 1 9 4 */
+     961,    /* OBJ_camellia_128_gcm             0 3 4401 5 3 1 9 6 */
+     962,    /* OBJ_camellia_128_ccm             0 3 4401 5 3 1 9 7 */
+     963,    /* OBJ_camellia_128_ctr             0 3 4401 5 3 1 9 9 */
+     964,    /* OBJ_camellia_128_cmac            0 3 4401 5 3 1 9 10 */
+     755,    /* OBJ_camellia_192_ecb             0 3 4401 5 3 1 9 21 */
+     767,    /* OBJ_camellia_192_ofb128          0 3 4401 5 3 1 9 23 */
+     758,    /* OBJ_camellia_192_cfb128          0 3 4401 5 3 1 9 24 */
+     965,    /* OBJ_camellia_192_gcm             0 3 4401 5 3 1 9 26 */
+     966,    /* OBJ_camellia_192_ccm             0 3 4401 5 3 1 9 27 */
+     967,    /* OBJ_camellia_192_ctr             0 3 4401 5 3 1 9 29 */
+     968,    /* OBJ_camellia_192_cmac            0 3 4401 5 3 1 9 30 */
+     756,    /* OBJ_camellia_256_ecb             0 3 4401 5 3 1 9 41 */
+     768,    /* OBJ_camellia_256_ofb128          0 3 4401 5 3 1 9 43 */
+     759,    /* OBJ_camellia_256_cfb128          0 3 4401 5 3 1 9 44 */
+     969,    /* OBJ_camellia_256_gcm             0 3 4401 5 3 1 9 46 */
+     970,    /* OBJ_camellia_256_ccm             0 3 4401 5 3 1 9 47 */
+     971,    /* OBJ_camellia_256_ctr             0 3 4401 5 3 1 9 49 */
+     972,    /* OBJ_camellia_256_cmac            0 3 4401 5 3 1 9 50 */
+     437,    /* OBJ_pilot                        0 9 2342 19200300 100 */
+    1133,    /* OBJ_sm4_ecb                      1 2 156 10197 1 104 1 */
+    1134,    /* OBJ_sm4_cbc                      1 2 156 10197 1 104 2 */
+    1135,    /* OBJ_sm4_ofb128                   1 2 156 10197 1 104 3 */
+    1137,    /* OBJ_sm4_cfb128                   1 2 156 10197 1 104 4 */
+    1136,    /* OBJ_sm4_cfb1                     1 2 156 10197 1 104 5 */
+    1138,    /* OBJ_sm4_cfb8                     1 2 156 10197 1 104 6 */
+    1139,    /* OBJ_sm4_ctr                      1 2 156 10197 1 104 7 */
+    1172,    /* OBJ_sm2                          1 2 156 10197 1 301 */
+    1143,    /* OBJ_sm3                          1 2 156 10197 1 401 */
+    1144,    /* OBJ_sm3WithRSAEncryption         1 2 156 10197 1 504 */
+     776,    /* OBJ_seed_ecb                     1 2 410 200004 1 3 */
+     777,    /* OBJ_seed_cbc                     1 2 410 200004 1 4 */
+     779,    /* OBJ_seed_cfb128                  1 2 410 200004 1 5 */
+     778,    /* OBJ_seed_ofb128                  1 2 410 200004 1 6 */
+     852,    /* OBJ_id_GostR3411_94_with_GostR3410_94_cc 1 2 643 2 9 1 3 3 */
+     853,    /* OBJ_id_GostR3411_94_with_GostR3410_2001_cc 1 2 643 2 9 1 3 4 */
+     850,    /* OBJ_id_GostR3410_94_cc           1 2 643 2 9 1 5 3 */
+     851,    /* OBJ_id_GostR3410_2001_cc         1 2 643 2 9 1 5 4 */
+     849,    /* OBJ_id_Gost28147_89_cc           1 2 643 2 9 1 6 1 */
+     854,    /* OBJ_id_GostR3410_2001_ParamSet_cc 1 2 643 2 9 1 8 1 */
+    1004,    /* OBJ_INN                          1 2 643 3 131 1 1 */
+     979,    /* OBJ_id_GostR3410_2012_256        1 2 643 7 1 1 1 1 */
+     980,    /* OBJ_id_GostR3410_2012_512        1 2 643 7 1 1 1 2 */
+     982,    /* OBJ_id_GostR3411_2012_256        1 2 643 7 1 1 2 2 */
+     983,    /* OBJ_id_GostR3411_2012_512        1 2 643 7 1 1 2 3 */
+     985,    /* OBJ_id_tc26_signwithdigest_gost3410_2012_256 1 2 643 7 1 1 3 2 */
+     986,    /* OBJ_id_tc26_signwithdigest_gost3410_2012_512 1 2 643 7 1 1 3 3 */
+     988,    /* OBJ_id_tc26_hmac_gost_3411_2012_256 1 2 643 7 1 1 4 1 */
+     989,    /* OBJ_id_tc26_hmac_gost_3411_2012_512 1 2 643 7 1 1 4 2 */
+    1173,    /* OBJ_id_tc26_cipher_gostr3412_2015_magma 1 2 643 7 1 1 5 1 */
+    1176,    /* OBJ_id_tc26_cipher_gostr3412_2015_kuznyechik 1 2 643 7 1 1 5 2 */
+     992,    /* OBJ_id_tc26_agreement_gost_3410_2012_256 1 2 643 7 1 1 6 1 */
+     993,    /* OBJ_id_tc26_agreement_gost_3410_2012_512 1 2 643 7 1 1 6 2 */
+    1180,    /* OBJ_id_tc26_wrap_gostr3412_2015_magma 1 2 643 7 1 1 7 1 */
+    1182,    /* OBJ_id_tc26_wrap_gostr3412_2015_kuznyechik 1 2 643 7 1 1 7 2 */
+    1147,    /* OBJ_id_tc26_gost_3410_2012_256_constants 1 2 643 7 1 2 1 1 */
+     996,    /* OBJ_id_tc26_gost_3410_2012_512_constants 1 2 643 7 1 2 1 2 */
+    1002,    /* OBJ_id_tc26_gost_28147_constants 1 2 643 7 1 2 5 1 */
+     186,    /* OBJ_pkcs1                        1 2 840 113549 1 1 */
+      27,    /* OBJ_pkcs3                        1 2 840 113549 1 3 */
+     187,    /* OBJ_pkcs5                        1 2 840 113549 1 5 */
+      20,    /* OBJ_pkcs7                        1 2 840 113549 1 7 */
+      47,    /* OBJ_pkcs9                        1 2 840 113549 1 9 */
+       3,    /* OBJ_md2                          1 2 840 113549 2 2 */
+     257,    /* OBJ_md4                          1 2 840 113549 2 4 */
+       4,    /* OBJ_md5                          1 2 840 113549 2 5 */
+     797,    /* OBJ_hmacWithMD5                  1 2 840 113549 2 6 */
+     163,    /* OBJ_hmacWithSHA1                 1 2 840 113549 2 7 */
+     798,    /* OBJ_hmacWithSHA224               1 2 840 113549 2 8 */
+     799,    /* OBJ_hmacWithSHA256               1 2 840 113549 2 9 */
+     800,    /* OBJ_hmacWithSHA384               1 2 840 113549 2 10 */
+     801,    /* OBJ_hmacWithSHA512               1 2 840 113549 2 11 */
+    1193,    /* OBJ_hmacWithSHA512_224           1 2 840 113549 2 12 */
+    1194,    /* OBJ_hmacWithSHA512_256           1 2 840 113549 2 13 */
+      37,    /* OBJ_rc2_cbc                      1 2 840 113549 3 2 */
+       5,    /* OBJ_rc4                          1 2 840 113549 3 4 */
+      44,    /* OBJ_des_ede3_cbc                 1 2 840 113549 3 7 */
+     120,    /* OBJ_rc5_cbc                      1 2 840 113549 3 8 */
+     643,    /* OBJ_des_cdmf                     1 2 840 113549 3 10 */
+     680,    /* OBJ_X9_62_id_characteristic_two_basis 1 2 840 10045 1 2 3 */
+     684,    /* OBJ_X9_62_c2pnb163v1             1 2 840 10045 3 0 1 */
+     685,    /* OBJ_X9_62_c2pnb163v2             1 2 840 10045 3 0 2 */
+     686,    /* OBJ_X9_62_c2pnb163v3             1 2 840 10045 3 0 3 */
+     687,    /* OBJ_X9_62_c2pnb176v1             1 2 840 10045 3 0 4 */
+     688,    /* OBJ_X9_62_c2tnb191v1             1 2 840 10045 3 0 5 */
+     689,    /* OBJ_X9_62_c2tnb191v2             1 2 840 10045 3 0 6 */
+     690,    /* OBJ_X9_62_c2tnb191v3             1 2 840 10045 3 0 7 */
+     691,    /* OBJ_X9_62_c2onb191v4             1 2 840 10045 3 0 8 */
+     692,    /* OBJ_X9_62_c2onb191v5             1 2 840 10045 3 0 9 */
+     693,    /* OBJ_X9_62_c2pnb208w1             1 2 840 10045 3 0 10 */
+     694,    /* OBJ_X9_62_c2tnb239v1             1 2 840 10045 3 0 11 */
+     695,    /* OBJ_X9_62_c2tnb239v2             1 2 840 10045 3 0 12 */
+     696,    /* OBJ_X9_62_c2tnb239v3             1 2 840 10045 3 0 13 */
+     697,    /* OBJ_X9_62_c2onb239v4             1 2 840 10045 3 0 14 */
+     698,    /* OBJ_X9_62_c2onb239v5             1 2 840 10045 3 0 15 */
+     699,    /* OBJ_X9_62_c2pnb272w1             1 2 840 10045 3 0 16 */
+     700,    /* OBJ_X9_62_c2pnb304w1             1 2 840 10045 3 0 17 */
+     701,    /* OBJ_X9_62_c2tnb359v1             1 2 840 10045 3 0 18 */
+     702,    /* OBJ_X9_62_c2pnb368w1             1 2 840 10045 3 0 19 */
+     703,    /* OBJ_X9_62_c2tnb431r1             1 2 840 10045 3 0 20 */
+     409,    /* OBJ_X9_62_prime192v1             1 2 840 10045 3 1 1 */
+     410,    /* OBJ_X9_62_prime192v2             1 2 840 10045 3 1 2 */
+     411,    /* OBJ_X9_62_prime192v3             1 2 840 10045 3 1 3 */
+     412,    /* OBJ_X9_62_prime239v1             1 2 840 10045 3 1 4 */
+     413,    /* OBJ_X9_62_prime239v2             1 2 840 10045 3 1 5 */
+     414,    /* OBJ_X9_62_prime239v3             1 2 840 10045 3 1 6 */
+     415,    /* OBJ_X9_62_prime256v1             1 2 840 10045 3 1 7 */
+     793,    /* OBJ_ecdsa_with_SHA224            1 2 840 10045 4 3 1 */
+     794,    /* OBJ_ecdsa_with_SHA256            1 2 840 10045 4 3 2 */
+     795,    /* OBJ_ecdsa_with_SHA384            1 2 840 10045 4 3 3 */
+     796,    /* OBJ_ecdsa_with_SHA512            1 2 840 10045 4 3 4 */
+     269,    /* OBJ_id_pkix1_explicit_88         1 3 6 1 5 5 7 0 1 */
+     270,    /* OBJ_id_pkix1_implicit_88         1 3 6 1 5 5 7 0 2 */
+     271,    /* OBJ_id_pkix1_explicit_93         1 3 6 1 5 5 7 0 3 */
+     272,    /* OBJ_id_pkix1_implicit_93         1 3 6 1 5 5 7 0 4 */
+     273,    /* OBJ_id_mod_crmf                  1 3 6 1 5 5 7 0 5 */
+     274,    /* OBJ_id_mod_cmc                   1 3 6 1 5 5 7 0 6 */
+     275,    /* OBJ_id_mod_kea_profile_88        1 3 6 1 5 5 7 0 7 */
+     276,    /* OBJ_id_mod_kea_profile_93        1 3 6 1 5 5 7 0 8 */
+     277,    /* OBJ_id_mod_cmp                   1 3 6 1 5 5 7 0 9 */
+     278,    /* OBJ_id_mod_qualified_cert_88     1 3 6 1 5 5 7 0 10 */
+     279,    /* OBJ_id_mod_qualified_cert_93     1 3 6 1 5 5 7 0 11 */
+     280,    /* OBJ_id_mod_attribute_cert        1 3 6 1 5 5 7 0 12 */
+     281,    /* OBJ_id_mod_timestamp_protocol    1 3 6 1 5 5 7 0 13 */
+     282,    /* OBJ_id_mod_ocsp                  1 3 6 1 5 5 7 0 14 */
+     283,    /* OBJ_id_mod_dvcs                  1 3 6 1 5 5 7 0 15 */
+     284,    /* OBJ_id_mod_cmp2000               1 3 6 1 5 5 7 0 16 */
+     177,    /* OBJ_info_access                  1 3 6 1 5 5 7 1 1 */
+     285,    /* OBJ_biometricInfo                1 3 6 1 5 5 7 1 2 */
+     286,    /* OBJ_qcStatements                 1 3 6 1 5 5 7 1 3 */
+     287,    /* OBJ_ac_auditEntity               1 3 6 1 5 5 7 1 4 */
+     288,    /* OBJ_ac_targeting                 1 3 6 1 5 5 7 1 5 */
+     289,    /* OBJ_aaControls                   1 3 6 1 5 5 7 1 6 */
+     290,    /* OBJ_sbgp_ipAddrBlock             1 3 6 1 5 5 7 1 7 */
+     291,    /* OBJ_sbgp_autonomousSysNum        1 3 6 1 5 5 7 1 8 */
+     292,    /* OBJ_sbgp_routerIdentifier        1 3 6 1 5 5 7 1 9 */
+     397,    /* OBJ_ac_proxying                  1 3 6 1 5 5 7 1 10 */
+     398,    /* OBJ_sinfo_access                 1 3 6 1 5 5 7 1 11 */
+     663,    /* OBJ_proxyCertInfo                1 3 6 1 5 5 7 1 14 */
+    1020,    /* OBJ_tlsfeature                   1 3 6 1 5 5 7 1 24 */
+     164,    /* OBJ_id_qt_cps                    1 3 6 1 5 5 7 2 1 */
+     165,    /* OBJ_id_qt_unotice                1 3 6 1 5 5 7 2 2 */
+     293,    /* OBJ_textNotice                   1 3 6 1 5 5 7 2 3 */
+     129,    /* OBJ_server_auth                  1 3 6 1 5 5 7 3 1 */
+     130,    /* OBJ_client_auth                  1 3 6 1 5 5 7 3 2 */
+     131,    /* OBJ_code_sign                    1 3 6 1 5 5 7 3 3 */
+     132,    /* OBJ_email_protect                1 3 6 1 5 5 7 3 4 */
+     294,    /* OBJ_ipsecEndSystem               1 3 6 1 5 5 7 3 5 */
+     295,    /* OBJ_ipsecTunnel                  1 3 6 1 5 5 7 3 6 */
+     296,    /* OBJ_ipsecUser                    1 3 6 1 5 5 7 3 7 */
+     133,    /* OBJ_time_stamp                   1 3 6 1 5 5 7 3 8 */
+     180,    /* OBJ_OCSP_sign                    1 3 6 1 5 5 7 3 9 */
+     297,    /* OBJ_dvcs                         1 3 6 1 5 5 7 3 10 */
+    1022,    /* OBJ_ipsec_IKE                    1 3 6 1 5 5 7 3 17 */
+    1023,    /* OBJ_capwapAC                     1 3 6 1 5 5 7 3 18 */
+    1024,    /* OBJ_capwapWTP                    1 3 6 1 5 5 7 3 19 */
+    1025,    /* OBJ_sshClient                    1 3 6 1 5 5 7 3 21 */
+    1026,    /* OBJ_sshServer                    1 3 6 1 5 5 7 3 22 */
+    1027,    /* OBJ_sendRouter                   1 3 6 1 5 5 7 3 23 */
+    1028,    /* OBJ_sendProxiedRouter            1 3 6 1 5 5 7 3 24 */
+    1029,    /* OBJ_sendOwner                    1 3 6 1 5 5 7 3 25 */
+    1030,    /* OBJ_sendProxiedOwner             1 3 6 1 5 5 7 3 26 */
+    1131,    /* OBJ_cmcCA                        1 3 6 1 5 5 7 3 27 */
+    1132,    /* OBJ_cmcRA                        1 3 6 1 5 5 7 3 28 */
+     298,    /* OBJ_id_it_caProtEncCert          1 3 6 1 5 5 7 4 1 */
+     299,    /* OBJ_id_it_signKeyPairTypes       1 3 6 1 5 5 7 4 2 */
+     300,    /* OBJ_id_it_encKeyPairTypes        1 3 6 1 5 5 7 4 3 */
+     301,    /* OBJ_id_it_preferredSymmAlg       1 3 6 1 5 5 7 4 4 */
+     302,    /* OBJ_id_it_caKeyUpdateInfo        1 3 6 1 5 5 7 4 5 */
+     303,    /* OBJ_id_it_currentCRL             1 3 6 1 5 5 7 4 6 */
+     304,    /* OBJ_id_it_unsupportedOIDs        1 3 6 1 5 5 7 4 7 */
+     305,    /* OBJ_id_it_subscriptionRequest    1 3 6 1 5 5 7 4 8 */
+     306,    /* OBJ_id_it_subscriptionResponse   1 3 6 1 5 5 7 4 9 */
+     307,    /* OBJ_id_it_keyPairParamReq        1 3 6 1 5 5 7 4 10 */
+     308,    /* OBJ_id_it_keyPairParamRep        1 3 6 1 5 5 7 4 11 */
+     309,    /* OBJ_id_it_revPassphrase          1 3 6 1 5 5 7 4 12 */
+     310,    /* OBJ_id_it_implicitConfirm        1 3 6 1 5 5 7 4 13 */
+     311,    /* OBJ_id_it_confirmWaitTime        1 3 6 1 5 5 7 4 14 */
+     312,    /* OBJ_id_it_origPKIMessage         1 3 6 1 5 5 7 4 15 */
+     784,    /* OBJ_id_it_suppLangTags           1 3 6 1 5 5 7 4 16 */
+     313,    /* OBJ_id_regCtrl                   1 3 6 1 5 5 7 5 1 */
+     314,    /* OBJ_id_regInfo                   1 3 6 1 5 5 7 5 2 */
+     323,    /* OBJ_id_alg_des40                 1 3 6 1 5 5 7 6 1 */
+     324,    /* OBJ_id_alg_noSignature           1 3 6 1 5 5 7 6 2 */
+     325,    /* OBJ_id_alg_dh_sig_hmac_sha1      1 3 6 1 5 5 7 6 3 */
+     326,    /* OBJ_id_alg_dh_pop                1 3 6 1 5 5 7 6 4 */
+     327,    /* OBJ_id_cmc_statusInfo            1 3 6 1 5 5 7 7 1 */
+     328,    /* OBJ_id_cmc_identification        1 3 6 1 5 5 7 7 2 */
+     329,    /* OBJ_id_cmc_identityProof         1 3 6 1 5 5 7 7 3 */
+     330,    /* OBJ_id_cmc_dataReturn            1 3 6 1 5 5 7 7 4 */
+     331,    /* OBJ_id_cmc_transactionId         1 3 6 1 5 5 7 7 5 */
+     332,    /* OBJ_id_cmc_senderNonce           1 3 6 1 5 5 7 7 6 */
+     333,    /* OBJ_id_cmc_recipientNonce        1 3 6 1 5 5 7 7 7 */
+     334,    /* OBJ_id_cmc_addExtensions         1 3 6 1 5 5 7 7 8 */
+     335,    /* OBJ_id_cmc_encryptedPOP          1 3 6 1 5 5 7 7 9 */
+     336,    /* OBJ_id_cmc_decryptedPOP          1 3 6 1 5 5 7 7 10 */
+     337,    /* OBJ_id_cmc_lraPOPWitness         1 3 6 1 5 5 7 7 11 */
+     338,    /* OBJ_id_cmc_getCert               1 3 6 1 5 5 7 7 15 */
+     339,    /* OBJ_id_cmc_getCRL                1 3 6 1 5 5 7 7 16 */
+     340,    /* OBJ_id_cmc_revokeRequest         1 3 6 1 5 5 7 7 17 */
+     341,    /* OBJ_id_cmc_regInfo               1 3 6 1 5 5 7 7 18 */
+     342,    /* OBJ_id_cmc_responseInfo          1 3 6 1 5 5 7 7 19 */
+     343,    /* OBJ_id_cmc_queryPending          1 3 6 1 5 5 7 7 21 */
+     344,    /* OBJ_id_cmc_popLinkRandom         1 3 6 1 5 5 7 7 22 */
+     345,    /* OBJ_id_cmc_popLinkWitness        1 3 6 1 5 5 7 7 23 */
+     346,    /* OBJ_id_cmc_confirmCertAcceptance 1 3 6 1 5 5 7 7 24 */
+     347,    /* OBJ_id_on_personalData           1 3 6 1 5 5 7 8 1 */
+     858,    /* OBJ_id_on_permanentIdentifier    1 3 6 1 5 5 7 8 3 */
+     348,    /* OBJ_id_pda_dateOfBirth           1 3 6 1 5 5 7 9 1 */
+     349,    /* OBJ_id_pda_placeOfBirth          1 3 6 1 5 5 7 9 2 */
+     351,    /* OBJ_id_pda_gender                1 3 6 1 5 5 7 9 3 */
+     352,    /* OBJ_id_pda_countryOfCitizenship  1 3 6 1 5 5 7 9 4 */
+     353,    /* OBJ_id_pda_countryOfResidence    1 3 6 1 5 5 7 9 5 */
+     354,    /* OBJ_id_aca_authenticationInfo    1 3 6 1 5 5 7 10 1 */
+     355,    /* OBJ_id_aca_accessIdentity        1 3 6 1 5 5 7 10 2 */
+     356,    /* OBJ_id_aca_chargingIdentity      1 3 6 1 5 5 7 10 3 */
+     357,    /* OBJ_id_aca_group                 1 3 6 1 5 5 7 10 4 */
+     358,    /* OBJ_id_aca_role                  1 3 6 1 5 5 7 10 5 */
+     399,    /* OBJ_id_aca_encAttrs              1 3 6 1 5 5 7 10 6 */
+     359,    /* OBJ_id_qcs_pkixQCSyntax_v1       1 3 6 1 5 5 7 11 1 */
+     360,    /* OBJ_id_cct_crs                   1 3 6 1 5 5 7 12 1 */
+     361,    /* OBJ_id_cct_PKIData               1 3 6 1 5 5 7 12 2 */
+     362,    /* OBJ_id_cct_PKIResponse           1 3 6 1 5 5 7 12 3 */
+     664,    /* OBJ_id_ppl_anyLanguage           1 3 6 1 5 5 7 21 0 */
+     665,    /* OBJ_id_ppl_inheritAll            1 3 6 1 5 5 7 21 1 */
+     667,    /* OBJ_Independent                  1 3 6 1 5 5 7 21 2 */
+     178,    /* OBJ_ad_OCSP                      1 3 6 1 5 5 7 48 1 */
+     179,    /* OBJ_ad_ca_issuers                1 3 6 1 5 5 7 48 2 */
+     363,    /* OBJ_ad_timeStamping              1 3 6 1 5 5 7 48 3 */
+     364,    /* OBJ_ad_dvcs                      1 3 6 1 5 5 7 48 4 */
+     785,    /* OBJ_caRepository                 1 3 6 1 5 5 7 48 5 */
+     780,    /* OBJ_hmac_md5                     1 3 6 1 5 5 8 1 1 */
+     781,    /* OBJ_hmac_sha1                    1 3 6 1 5 5 8 1 2 */
+     913,    /* OBJ_aes_128_xts                  1 3 111 2 1619 0 1 1 */
+     914,    /* OBJ_aes_256_xts                  1 3 111 2 1619 0 1 2 */
+      58,    /* OBJ_netscape_cert_extension      2 16 840 1 113730 1 */
+      59,    /* OBJ_netscape_data_type           2 16 840 1 113730 2 */
+     438,    /* OBJ_pilotAttributeType           0 9 2342 19200300 100 1 */
+     439,    /* OBJ_pilotAttributeSyntax         0 9 2342 19200300 100 3 */
+     440,    /* OBJ_pilotObjectClass             0 9 2342 19200300 100 4 */
+     441,    /* OBJ_pilotGroups                  0 9 2342 19200300 100 10 */
+    1065,    /* OBJ_aria_128_ecb                 1 2 410 200046 1 1 1 */
+    1066,    /* OBJ_aria_128_cbc                 1 2 410 200046 1 1 2 */
+    1067,    /* OBJ_aria_128_cfb128              1 2 410 200046 1 1 3 */
+    1068,    /* OBJ_aria_128_ofb128              1 2 410 200046 1 1 4 */
+    1069,    /* OBJ_aria_128_ctr                 1 2 410 200046 1 1 5 */
+    1070,    /* OBJ_aria_192_ecb                 1 2 410 200046 1 1 6 */
+    1071,    /* OBJ_aria_192_cbc                 1 2 410 200046 1 1 7 */
+    1072,    /* OBJ_aria_192_cfb128              1 2 410 200046 1 1 8 */
+    1073,    /* OBJ_aria_192_ofb128              1 2 410 200046 1 1 9 */
+    1074,    /* OBJ_aria_192_ctr                 1 2 410 200046 1 1 10 */
+    1075,    /* OBJ_aria_256_ecb                 1 2 410 200046 1 1 11 */
+    1076,    /* OBJ_aria_256_cbc                 1 2 410 200046 1 1 12 */
+    1077,    /* OBJ_aria_256_cfb128              1 2 410 200046 1 1 13 */
+    1078,    /* OBJ_aria_256_ofb128              1 2 410 200046 1 1 14 */
+    1079,    /* OBJ_aria_256_ctr                 1 2 410 200046 1 1 15 */
+    1123,    /* OBJ_aria_128_gcm                 1 2 410 200046 1 1 34 */
+    1124,    /* OBJ_aria_192_gcm                 1 2 410 200046 1 1 35 */
+    1125,    /* OBJ_aria_256_gcm                 1 2 410 200046 1 1 36 */
+    1120,    /* OBJ_aria_128_ccm                 1 2 410 200046 1 1 37 */
+    1121,    /* OBJ_aria_192_ccm                 1 2 410 200046 1 1 38 */
+    1122,    /* OBJ_aria_256_ccm                 1 2 410 200046 1 1 39 */
+    1174,    /* OBJ_id_tc26_cipher_gostr3412_2015_magma_ctracpkm 1 2 643 7 1 1 5 1 1 */
+    1175,    /* OBJ_id_tc26_cipher_gostr3412_2015_magma_ctracpkm_omac 1 2 643 7 1 1 5 1 2 */
+    1177,    /* OBJ_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm 1 2 643 7 1 1 5 2 1 */
+    1178,    /* OBJ_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm_omac 1 2 643 7 1 1 5 2 2 */
+    1181,    /* OBJ_id_tc26_wrap_gostr3412_2015_magma_kexp15 1 2 643 7 1 1 7 1 1 */
+    1183,    /* OBJ_id_tc26_wrap_gostr3412_2015_kuznyechik_kexp15 1 2 643 7 1 1 7 1 1 */
+    1148,    /* OBJ_id_tc26_gost_3410_2012_256_paramSetA 1 2 643 7 1 2 1 1 1 */
+    1184,    /* OBJ_id_tc26_gost_3410_2012_256_paramSetB 1 2 643 7 1 2 1 1 2 */
+    1185,    /* OBJ_id_tc26_gost_3410_2012_256_paramSetC 1 2 643 7 1 2 1 1 3 */
+    1186,    /* OBJ_id_tc26_gost_3410_2012_256_paramSetD 1 2 643 7 1 2 1 1 4 */
+     997,    /* OBJ_id_tc26_gost_3410_2012_512_paramSetTest 1 2 643 7 1 2 1 2 0 */
+     998,    /* OBJ_id_tc26_gost_3410_2012_512_paramSetA 1 2 643 7 1 2 1 2 1 */
+     999,    /* OBJ_id_tc26_gost_3410_2012_512_paramSetB 1 2 643 7 1 2 1 2 2 */
+    1149,    /* OBJ_id_tc26_gost_3410_2012_512_paramSetC 1 2 643 7 1 2 1 2 3 */
+    1003,    /* OBJ_id_tc26_gost_28147_param_Z   1 2 643 7 1 2 5 1 1 */
+     108,    /* OBJ_cast5_cbc                    1 2 840 113533 7 66 10 */
+     112,    /* OBJ_pbeWithMD5AndCast5_CBC       1 2 840 113533 7 66 12 */
+     782,    /* OBJ_id_PasswordBasedMAC          1 2 840 113533 7 66 13 */
+     783,    /* OBJ_id_DHBasedMac                1 2 840 113533 7 66 30 */
+       6,    /* OBJ_rsaEncryption                1 2 840 113549 1 1 1 */
+       7,    /* OBJ_md2WithRSAEncryption         1 2 840 113549 1 1 2 */
+     396,    /* OBJ_md4WithRSAEncryption         1 2 840 113549 1 1 3 */
+       8,    /* OBJ_md5WithRSAEncryption         1 2 840 113549 1 1 4 */
+      65,    /* OBJ_sha1WithRSAEncryption        1 2 840 113549 1 1 5 */
+     644,    /* OBJ_rsaOAEPEncryptionSET         1 2 840 113549 1 1 6 */
+     919,    /* OBJ_rsaesOaep                    1 2 840 113549 1 1 7 */
+     911,    /* OBJ_mgf1                         1 2 840 113549 1 1 8 */
+     935,    /* OBJ_pSpecified                   1 2 840 113549 1 1 9 */
+     912,    /* OBJ_rsassaPss                    1 2 840 113549 1 1 10 */
+     668,    /* OBJ_sha256WithRSAEncryption      1 2 840 113549 1 1 11 */
+     669,    /* OBJ_sha384WithRSAEncryption      1 2 840 113549 1 1 12 */
+     670,    /* OBJ_sha512WithRSAEncryption      1 2 840 113549 1 1 13 */
+     671,    /* OBJ_sha224WithRSAEncryption      1 2 840 113549 1 1 14 */
+    1145,    /* OBJ_sha512_224WithRSAEncryption  1 2 840 113549 1 1 15 */
+    1146,    /* OBJ_sha512_256WithRSAEncryption  1 2 840 113549 1 1 16 */
+      28,    /* OBJ_dhKeyAgreement               1 2 840 113549 1 3 1 */
+       9,    /* OBJ_pbeWithMD2AndDES_CBC         1 2 840 113549 1 5 1 */
+      10,    /* OBJ_pbeWithMD5AndDES_CBC         1 2 840 113549 1 5 3 */
+     168,    /* OBJ_pbeWithMD2AndRC2_CBC         1 2 840 113549 1 5 4 */
+     169,    /* OBJ_pbeWithMD5AndRC2_CBC         1 2 840 113549 1 5 6 */
+     170,    /* OBJ_pbeWithSHA1AndDES_CBC        1 2 840 113549 1 5 10 */
+      68,    /* OBJ_pbeWithSHA1AndRC2_CBC        1 2 840 113549 1 5 11 */
+      69,    /* OBJ_id_pbkdf2                    1 2 840 113549 1 5 12 */
+     161,    /* OBJ_pbes2                        1 2 840 113549 1 5 13 */
+     162,    /* OBJ_pbmac1                       1 2 840 113549 1 5 14 */
+      21,    /* OBJ_pkcs7_data                   1 2 840 113549 1 7 1 */
+      22,    /* OBJ_pkcs7_signed                 1 2 840 113549 1 7 2 */
+      23,    /* OBJ_pkcs7_enveloped              1 2 840 113549 1 7 3 */
+      24,    /* OBJ_pkcs7_signedAndEnveloped     1 2 840 113549 1 7 4 */
+      25,    /* OBJ_pkcs7_digest                 1 2 840 113549 1 7 5 */
+      26,    /* OBJ_pkcs7_encrypted              1 2 840 113549 1 7 6 */
+      48,    /* OBJ_pkcs9_emailAddress           1 2 840 113549 1 9 1 */
+      49,    /* OBJ_pkcs9_unstructuredName       1 2 840 113549 1 9 2 */
+      50,    /* OBJ_pkcs9_contentType            1 2 840 113549 1 9 3 */
+      51,    /* OBJ_pkcs9_messageDigest          1 2 840 113549 1 9 4 */
+      52,    /* OBJ_pkcs9_signingTime            1 2 840 113549 1 9 5 */
+      53,    /* OBJ_pkcs9_countersignature       1 2 840 113549 1 9 6 */
+      54,    /* OBJ_pkcs9_challengePassword      1 2 840 113549 1 9 7 */
+      55,    /* OBJ_pkcs9_unstructuredAddress    1 2 840 113549 1 9 8 */
+      56,    /* OBJ_pkcs9_extCertAttributes      1 2 840 113549 1 9 9 */
+     172,    /* OBJ_ext_req                      1 2 840 113549 1 9 14 */
+     167,    /* OBJ_SMIMECapabilities            1 2 840 113549 1 9 15 */
+     188,    /* OBJ_SMIME                        1 2 840 113549 1 9 16 */
+     156,    /* OBJ_friendlyName                 1 2 840 113549 1 9 20 */
+     157,    /* OBJ_localKeyID                   1 2 840 113549 1 9 21 */
+     681,    /* OBJ_X9_62_onBasis                1 2 840 10045 1 2 3 1 */
+     682,    /* OBJ_X9_62_tpBasis                1 2 840 10045 1 2 3 2 */
+     683,    /* OBJ_X9_62_ppBasis                1 2 840 10045 1 2 3 3 */
+     417,    /* OBJ_ms_csp_name                  1 3 6 1 4 1 311 17 1 */
+     856,    /* OBJ_LocalKeySet                  1 3 6 1 4 1 311 17 2 */
+     390,    /* OBJ_dcObject                     1 3 6 1 4 1 1466 344 */
+      91,    /* OBJ_bf_cbc                       1 3 6 1 4 1 3029 1 2 */
+     973,    /* OBJ_id_scrypt                    1 3 6 1 4 1 11591 4 11 */
+     315,    /* OBJ_id_regCtrl_regToken          1 3 6 1 5 5 7 5 1 1 */
+     316,    /* OBJ_id_regCtrl_authenticator     1 3 6 1 5 5 7 5 1 2 */
+     317,    /* OBJ_id_regCtrl_pkiPublicationInfo 1 3 6 1 5 5 7 5 1 3 */
+     318,    /* OBJ_id_regCtrl_pkiArchiveOptions 1 3 6 1 5 5 7 5 1 4 */
+     319,    /* OBJ_id_regCtrl_oldCertID         1 3 6 1 5 5 7 5 1 5 */
+     320,    /* OBJ_id_regCtrl_protocolEncrKey   1 3 6 1 5 5 7 5 1 6 */
+     321,    /* OBJ_id_regInfo_utf8Pairs         1 3 6 1 5 5 7 5 2 1 */
+     322,    /* OBJ_id_regInfo_certReq           1 3 6 1 5 5 7 5 2 2 */
+     365,    /* OBJ_id_pkix_OCSP_basic           1 3 6 1 5 5 7 48 1 1 */
+     366,    /* OBJ_id_pkix_OCSP_Nonce           1 3 6 1 5 5 7 48 1 2 */
+     367,    /* OBJ_id_pkix_OCSP_CrlID           1 3 6 1 5 5 7 48 1 3 */
+     368,    /* OBJ_id_pkix_OCSP_acceptableResponses 1 3 6 1 5 5 7 48 1 4 */
+     369,    /* OBJ_id_pkix_OCSP_noCheck         1 3 6 1 5 5 7 48 1 5 */
+     370,    /* OBJ_id_pkix_OCSP_archiveCutoff   1 3 6 1 5 5 7 48 1 6 */
+     371,    /* OBJ_id_pkix_OCSP_serviceLocator  1 3 6 1 5 5 7 48 1 7 */
+     372,    /* OBJ_id_pkix_OCSP_extendedStatus  1 3 6 1 5 5 7 48 1 8 */
+     373,    /* OBJ_id_pkix_OCSP_valid           1 3 6 1 5 5 7 48 1 9 */
+     374,    /* OBJ_id_pkix_OCSP_path            1 3 6 1 5 5 7 48 1 10 */
+     375,    /* OBJ_id_pkix_OCSP_trustRoot       1 3 6 1 5 5 7 48 1 11 */
+     921,    /* OBJ_brainpoolP160r1              1 3 36 3 3 2 8 1 1 1 */
+     922,    /* OBJ_brainpoolP160t1              1 3 36 3 3 2 8 1 1 2 */
+     923,    /* OBJ_brainpoolP192r1              1 3 36 3 3 2 8 1 1 3 */
+     924,    /* OBJ_brainpoolP192t1              1 3 36 3 3 2 8 1 1 4 */
+     925,    /* OBJ_brainpoolP224r1              1 3 36 3 3 2 8 1 1 5 */
+     926,    /* OBJ_brainpoolP224t1              1 3 36 3 3 2 8 1 1 6 */
+     927,    /* OBJ_brainpoolP256r1              1 3 36 3 3 2 8 1 1 7 */
+     928,    /* OBJ_brainpoolP256t1              1 3 36 3 3 2 8 1 1 8 */
+     929,    /* OBJ_brainpoolP320r1              1 3 36 3 3 2 8 1 1 9 */
+     930,    /* OBJ_brainpoolP320t1              1 3 36 3 3 2 8 1 1 10 */
+     931,    /* OBJ_brainpoolP384r1              1 3 36 3 3 2 8 1 1 11 */
+     932,    /* OBJ_brainpoolP384t1              1 3 36 3 3 2 8 1 1 12 */
+     933,    /* OBJ_brainpoolP512r1              1 3 36 3 3 2 8 1 1 13 */
+     934,    /* OBJ_brainpoolP512t1              1 3 36 3 3 2 8 1 1 14 */
+     936,    /* OBJ_dhSinglePass_stdDH_sha1kdf_scheme 1 3 133 16 840 63 0 2 */
+     941,    /* OBJ_dhSinglePass_cofactorDH_sha1kdf_scheme 1 3 133 16 840 63 0 3 */
+     418,    /* OBJ_aes_128_ecb                  2 16 840 1 101 3 4 1 1 */
+     419,    /* OBJ_aes_128_cbc                  2 16 840 1 101 3 4 1 2 */
+     420,    /* OBJ_aes_128_ofb128               2 16 840 1 101 3 4 1 3 */
+     421,    /* OBJ_aes_128_cfb128               2 16 840 1 101 3 4 1 4 */
+     788,    /* OBJ_id_aes128_wrap               2 16 840 1 101 3 4 1 5 */
+     895,    /* OBJ_aes_128_gcm                  2 16 840 1 101 3 4 1 6 */
+     896,    /* OBJ_aes_128_ccm                  2 16 840 1 101 3 4 1 7 */
+     897,    /* OBJ_id_aes128_wrap_pad           2 16 840 1 101 3 4 1 8 */
+     422,    /* OBJ_aes_192_ecb                  2 16 840 1 101 3 4 1 21 */
+     423,    /* OBJ_aes_192_cbc                  2 16 840 1 101 3 4 1 22 */
+     424,    /* OBJ_aes_192_ofb128               2 16 840 1 101 3 4 1 23 */
+     425,    /* OBJ_aes_192_cfb128               2 16 840 1 101 3 4 1 24 */
+     789,    /* OBJ_id_aes192_wrap               2 16 840 1 101 3 4 1 25 */
+     898,    /* OBJ_aes_192_gcm                  2 16 840 1 101 3 4 1 26 */
+     899,    /* OBJ_aes_192_ccm                  2 16 840 1 101 3 4 1 27 */
+     900,    /* OBJ_id_aes192_wrap_pad           2 16 840 1 101 3 4 1 28 */
+     426,    /* OBJ_aes_256_ecb                  2 16 840 1 101 3 4 1 41 */
+     427,    /* OBJ_aes_256_cbc                  2 16 840 1 101 3 4 1 42 */
+     428,    /* OBJ_aes_256_ofb128               2 16 840 1 101 3 4 1 43 */
+     429,    /* OBJ_aes_256_cfb128               2 16 840 1 101 3 4 1 44 */
+     790,    /* OBJ_id_aes256_wrap               2 16 840 1 101 3 4 1 45 */
+     901,    /* OBJ_aes_256_gcm                  2 16 840 1 101 3 4 1 46 */
+     902,    /* OBJ_aes_256_ccm                  2 16 840 1 101 3 4 1 47 */
+     903,    /* OBJ_id_aes256_wrap_pad           2 16 840 1 101 3 4 1 48 */
+     672,    /* OBJ_sha256                       2 16 840 1 101 3 4 2 1 */
+     673,    /* OBJ_sha384                       2 16 840 1 101 3 4 2 2 */
+     674,    /* OBJ_sha512                       2 16 840 1 101 3 4 2 3 */
+     675,    /* OBJ_sha224                       2 16 840 1 101 3 4 2 4 */
+    1094,    /* OBJ_sha512_224                   2 16 840 1 101 3 4 2 5 */
+    1095,    /* OBJ_sha512_256                   2 16 840 1 101 3 4 2 6 */
+    1096,    /* OBJ_sha3_224                     2 16 840 1 101 3 4 2 7 */
+    1097,    /* OBJ_sha3_256                     2 16 840 1 101 3 4 2 8 */
+    1098,    /* OBJ_sha3_384                     2 16 840 1 101 3 4 2 9 */
+    1099,    /* OBJ_sha3_512                     2 16 840 1 101 3 4 2 10 */
+    1100,    /* OBJ_shake128                     2 16 840 1 101 3 4 2 11 */
+    1101,    /* OBJ_shake256                     2 16 840 1 101 3 4 2 12 */
+    1102,    /* OBJ_hmac_sha3_224                2 16 840 1 101 3 4 2 13 */
+    1103,    /* OBJ_hmac_sha3_256                2 16 840 1 101 3 4 2 14 */
+    1104,    /* OBJ_hmac_sha3_384                2 16 840 1 101 3 4 2 15 */
+    1105,    /* OBJ_hmac_sha3_512                2 16 840 1 101 3 4 2 16 */
+     802,    /* OBJ_dsa_with_SHA224              2 16 840 1 101 3 4 3 1 */
+     803,    /* OBJ_dsa_with_SHA256              2 16 840 1 101 3 4 3 2 */
+    1106,    /* OBJ_dsa_with_SHA384              2 16 840 1 101 3 4 3 3 */
+    1107,    /* OBJ_dsa_with_SHA512              2 16 840 1 101 3 4 3 4 */
+    1108,    /* OBJ_dsa_with_SHA3_224            2 16 840 1 101 3 4 3 5 */
+    1109,    /* OBJ_dsa_with_SHA3_256            2 16 840 1 101 3 4 3 6 */
+    1110,    /* OBJ_dsa_with_SHA3_384            2 16 840 1 101 3 4 3 7 */
+    1111,    /* OBJ_dsa_with_SHA3_512            2 16 840 1 101 3 4 3 8 */
+    1112,    /* OBJ_ecdsa_with_SHA3_224          2 16 840 1 101 3 4 3 9 */
+    1113,    /* OBJ_ecdsa_with_SHA3_256          2 16 840 1 101 3 4 3 10 */
+    1114,    /* OBJ_ecdsa_with_SHA3_384          2 16 840 1 101 3 4 3 11 */
+    1115,    /* OBJ_ecdsa_with_SHA3_512          2 16 840 1 101 3 4 3 12 */
+    1116,    /* OBJ_RSA_SHA3_224                 2 16 840 1 101 3 4 3 13 */
+    1117,    /* OBJ_RSA_SHA3_256                 2 16 840 1 101 3 4 3 14 */
+    1118,    /* OBJ_RSA_SHA3_384                 2 16 840 1 101 3 4 3 15 */
+    1119,    /* OBJ_RSA_SHA3_512                 2 16 840 1 101 3 4 3 16 */
+      71,    /* OBJ_netscape_cert_type           2 16 840 1 113730 1 1 */
+      72,    /* OBJ_netscape_base_url            2 16 840 1 113730 1 2 */
+      73,    /* OBJ_netscape_revocation_url      2 16 840 1 113730 1 3 */
+      74,    /* OBJ_netscape_ca_revocation_url   2 16 840 1 113730 1 4 */
+      75,    /* OBJ_netscape_renewal_url         2 16 840 1 113730 1 7 */
+      76,    /* OBJ_netscape_ca_policy_url       2 16 840 1 113730 1 8 */
+      77,    /* OBJ_netscape_ssl_server_name     2 16 840 1 113730 1 12 */
+      78,    /* OBJ_netscape_comment             2 16 840 1 113730 1 13 */
+      79,    /* OBJ_netscape_cert_sequence       2 16 840 1 113730 2 5 */
+     139,    /* OBJ_ns_sgc                       2 16 840 1 113730 4 1 */
+     458,    /* OBJ_userId                       0 9 2342 19200300 100 1 1 */
+     459,    /* OBJ_textEncodedORAddress         0 9 2342 19200300 100 1 2 */
+     460,    /* OBJ_rfc822Mailbox                0 9 2342 19200300 100 1 3 */
+     461,    /* OBJ_info                         0 9 2342 19200300 100 1 4 */
+     462,    /* OBJ_favouriteDrink               0 9 2342 19200300 100 1 5 */
+     463,    /* OBJ_roomNumber                   0 9 2342 19200300 100 1 6 */
+     464,    /* OBJ_photo                        0 9 2342 19200300 100 1 7 */
+     465,    /* OBJ_userClass                    0 9 2342 19200300 100 1 8 */
+     466,    /* OBJ_host                         0 9 2342 19200300 100 1 9 */
+     467,    /* OBJ_manager                      0 9 2342 19200300 100 1 10 */
+     468,    /* OBJ_documentIdentifier           0 9 2342 19200300 100 1 11 */
+     469,    /* OBJ_documentTitle                0 9 2342 19200300 100 1 12 */
+     470,    /* OBJ_documentVersion              0 9 2342 19200300 100 1 13 */
+     471,    /* OBJ_documentAuthor               0 9 2342 19200300 100 1 14 */
+     472,    /* OBJ_documentLocation             0 9 2342 19200300 100 1 15 */
+     473,    /* OBJ_homeTelephoneNumber          0 9 2342 19200300 100 1 20 */
+     474,    /* OBJ_secretary                    0 9 2342 19200300 100 1 21 */
+     475,    /* OBJ_otherMailbox                 0 9 2342 19200300 100 1 22 */
+     476,    /* OBJ_lastModifiedTime             0 9 2342 19200300 100 1 23 */
+     477,    /* OBJ_lastModifiedBy               0 9 2342 19200300 100 1 24 */
+     391,    /* OBJ_domainComponent              0 9 2342 19200300 100 1 25 */
+     478,    /* OBJ_aRecord                      0 9 2342 19200300 100 1 26 */
+     479,    /* OBJ_pilotAttributeType27         0 9 2342 19200300 100 1 27 */
+     480,    /* OBJ_mXRecord                     0 9 2342 19200300 100 1 28 */
+     481,    /* OBJ_nSRecord                     0 9 2342 19200300 100 1 29 */
+     482,    /* OBJ_sOARecord                    0 9 2342 19200300 100 1 30 */
+     483,    /* OBJ_cNAMERecord                  0 9 2342 19200300 100 1 31 */
+     484,    /* OBJ_associatedDomain             0 9 2342 19200300 100 1 37 */
+     485,    /* OBJ_associatedName               0 9 2342 19200300 100 1 38 */
+     486,    /* OBJ_homePostalAddress            0 9 2342 19200300 100 1 39 */
+     487,    /* OBJ_personalTitle                0 9 2342 19200300 100 1 40 */
+     488,    /* OBJ_mobileTelephoneNumber        0 9 2342 19200300 100 1 41 */
+     489,    /* OBJ_pagerTelephoneNumber         0 9 2342 19200300 100 1 42 */
+     490,    /* OBJ_friendlyCountryName          0 9 2342 19200300 100 1 43 */
+     102,    /* OBJ_uniqueIdentifier             0 9 2342 19200300 100 1 44 */
+     491,    /* OBJ_organizationalStatus         0 9 2342 19200300 100 1 45 */
+     492,    /* OBJ_janetMailbox                 0 9 2342 19200300 100 1 46 */
+     493,    /* OBJ_mailPreferenceOption         0 9 2342 19200300 100 1 47 */
+     494,    /* OBJ_buildingName                 0 9 2342 19200300 100 1 48 */
+     495,    /* OBJ_dSAQuality                   0 9 2342 19200300 100 1 49 */
+     496,    /* OBJ_singleLevelQuality           0 9 2342 19200300 100 1 50 */
+     497,    /* OBJ_subtreeMinimumQuality        0 9 2342 19200300 100 1 51 */
+     498,    /* OBJ_subtreeMaximumQuality        0 9 2342 19200300 100 1 52 */
+     499,    /* OBJ_personalSignature            0 9 2342 19200300 100 1 53 */
+     500,    /* OBJ_dITRedirect                  0 9 2342 19200300 100 1 54 */
+     501,    /* OBJ_audio                        0 9 2342 19200300 100 1 55 */
+     502,    /* OBJ_documentPublisher            0 9 2342 19200300 100 1 56 */
+     442,    /* OBJ_iA5StringSyntax              0 9 2342 19200300 100 3 4 */
+     443,    /* OBJ_caseIgnoreIA5StringSyntax    0 9 2342 19200300 100 3 5 */
+     444,    /* OBJ_pilotObject                  0 9 2342 19200300 100 4 3 */
+     445,    /* OBJ_pilotPerson                  0 9 2342 19200300 100 4 4 */
+     446,    /* OBJ_account                      0 9 2342 19200300 100 4 5 */
+     447,    /* OBJ_document                     0 9 2342 19200300 100 4 6 */
+     448,    /* OBJ_room                         0 9 2342 19200300 100 4 7 */
+     449,    /* OBJ_documentSeries               0 9 2342 19200300 100 4 9 */
+     392,    /* OBJ_Domain                       0 9 2342 19200300 100 4 13 */
+     450,    /* OBJ_rFC822localPart              0 9 2342 19200300 100 4 14 */
+     451,    /* OBJ_dNSDomain                    0 9 2342 19200300 100 4 15 */
+     452,    /* OBJ_domainRelatedObject          0 9 2342 19200300 100 4 17 */
+     453,    /* OBJ_friendlyCountry              0 9 2342 19200300 100 4 18 */
+     454,    /* OBJ_simpleSecurityObject         0 9 2342 19200300 100 4 19 */
+     455,    /* OBJ_pilotOrganization            0 9 2342 19200300 100 4 20 */
+     456,    /* OBJ_pilotDSA                     0 9 2342 19200300 100 4 21 */
+     457,    /* OBJ_qualityLabelledData          0 9 2342 19200300 100 4 22 */
+    1152,    /* OBJ_dstu28147                    1 2 804 2 1 1 1 1 1 1 */
+    1156,    /* OBJ_hmacWithDstu34311            1 2 804 2 1 1 1 1 1 2 */
+    1157,    /* OBJ_dstu34311                    1 2 804 2 1 1 1 1 2 1 */
+     189,    /* OBJ_id_smime_mod                 1 2 840 113549 1 9 16 0 */
+     190,    /* OBJ_id_smime_ct                  1 2 840 113549 1 9 16 1 */
+     191,    /* OBJ_id_smime_aa                  1 2 840 113549 1 9 16 2 */
+     192,    /* OBJ_id_smime_alg                 1 2 840 113549 1 9 16 3 */
+     193,    /* OBJ_id_smime_cd                  1 2 840 113549 1 9 16 4 */
+     194,    /* OBJ_id_smime_spq                 1 2 840 113549 1 9 16 5 */
+     195,    /* OBJ_id_smime_cti                 1 2 840 113549 1 9 16 6 */
+     158,    /* OBJ_x509Certificate              1 2 840 113549 1 9 22 1 */
+     159,    /* OBJ_sdsiCertificate              1 2 840 113549 1 9 22 2 */
+     160,    /* OBJ_x509Crl                      1 2 840 113549 1 9 23 1 */
+     144,    /* OBJ_pbe_WithSHA1And128BitRC4     1 2 840 113549 1 12 1 1 */
+     145,    /* OBJ_pbe_WithSHA1And40BitRC4      1 2 840 113549 1 12 1 2 */
+     146,    /* OBJ_pbe_WithSHA1And3_Key_TripleDES_CBC 1 2 840 113549 1 12 1 3 */
+     147,    /* OBJ_pbe_WithSHA1And2_Key_TripleDES_CBC 1 2 840 113549 1 12 1 4 */
+     148,    /* OBJ_pbe_WithSHA1And128BitRC2_CBC 1 2 840 113549 1 12 1 5 */
+     149,    /* OBJ_pbe_WithSHA1And40BitRC2_CBC  1 2 840 113549 1 12 1 6 */
+     171,    /* OBJ_ms_ext_req                   1 3 6 1 4 1 311 2 1 14 */
+     134,    /* OBJ_ms_code_ind                  1 3 6 1 4 1 311 2 1 21 */
+     135,    /* OBJ_ms_code_com                  1 3 6 1 4 1 311 2 1 22 */
+     136,    /* OBJ_ms_ctl_sign                  1 3 6 1 4 1 311 10 3 1 */
+     137,    /* OBJ_ms_sgc                       1 3 6 1 4 1 311 10 3 3 */
+     138,    /* OBJ_ms_efs                       1 3 6 1 4 1 311 10 3 4 */
+     648,    /* OBJ_ms_smartcard_login           1 3 6 1 4 1 311 20 2 2 */
+     649,    /* OBJ_ms_upn                       1 3 6 1 4 1 311 20 2 3 */
+     951,    /* OBJ_ct_precert_scts              1 3 6 1 4 1 11129 2 4 2 */
+     952,    /* OBJ_ct_precert_poison            1 3 6 1 4 1 11129 2 4 3 */
+     953,    /* OBJ_ct_precert_signer            1 3 6 1 4 1 11129 2 4 4 */
+     954,    /* OBJ_ct_cert_scts                 1 3 6 1 4 1 11129 2 4 5 */
+     751,    /* OBJ_camellia_128_cbc             1 2 392 200011 61 1 1 1 2 */
+     752,    /* OBJ_camellia_192_cbc             1 2 392 200011 61 1 1 1 3 */
+     753,    /* OBJ_camellia_256_cbc             1 2 392 200011 61 1 1 1 4 */
+     907,    /* OBJ_id_camellia128_wrap          1 2 392 200011 61 1 1 3 2 */
+     908,    /* OBJ_id_camellia192_wrap          1 2 392 200011 61 1 1 3 3 */
+     909,    /* OBJ_id_camellia256_wrap          1 2 392 200011 61 1 1 3 4 */
+    1153,    /* OBJ_dstu28147_ofb                1 2 804 2 1 1 1 1 1 1 2 */
+    1154,    /* OBJ_dstu28147_cfb                1 2 804 2 1 1 1 1 1 1 3 */
+    1155,    /* OBJ_dstu28147_wrap               1 2 804 2 1 1 1 1 1 1 5 */
+    1158,    /* OBJ_dstu4145le                   1 2 804 2 1 1 1 1 3 1 1 */
+     196,    /* OBJ_id_smime_mod_cms             1 2 840 113549 1 9 16 0 1 */
+     197,    /* OBJ_id_smime_mod_ess             1 2 840 113549 1 9 16 0 2 */
+     198,    /* OBJ_id_smime_mod_oid             1 2 840 113549 1 9 16 0 3 */
+     199,    /* OBJ_id_smime_mod_msg_v3          1 2 840 113549 1 9 16 0 4 */
+     200,    /* OBJ_id_smime_mod_ets_eSignature_88 1 2 840 113549 1 9 16 0 5 */
+     201,    /* OBJ_id_smime_mod_ets_eSignature_97 1 2 840 113549 1 9 16 0 6 */
+     202,    /* OBJ_id_smime_mod_ets_eSigPolicy_88 1 2 840 113549 1 9 16 0 7 */
+     203,    /* OBJ_id_smime_mod_ets_eSigPolicy_97 1 2 840 113549 1 9 16 0 8 */
+     204,    /* OBJ_id_smime_ct_receipt          1 2 840 113549 1 9 16 1 1 */
+     205,    /* OBJ_id_smime_ct_authData         1 2 840 113549 1 9 16 1 2 */
+     206,    /* OBJ_id_smime_ct_publishCert      1 2 840 113549 1 9 16 1 3 */
+     207,    /* OBJ_id_smime_ct_TSTInfo          1 2 840 113549 1 9 16 1 4 */
+     208,    /* OBJ_id_smime_ct_TDTInfo          1 2 840 113549 1 9 16 1 5 */
+     209,    /* OBJ_id_smime_ct_contentInfo      1 2 840 113549 1 9 16 1 6 */
+     210,    /* OBJ_id_smime_ct_DVCSRequestData  1 2 840 113549 1 9 16 1 7 */
+     211,    /* OBJ_id_smime_ct_DVCSResponseData 1 2 840 113549 1 9 16 1 8 */
+     786,    /* OBJ_id_smime_ct_compressedData   1 2 840 113549 1 9 16 1 9 */
+    1058,    /* OBJ_id_smime_ct_contentCollection 1 2 840 113549 1 9 16 1 19 */
+    1059,    /* OBJ_id_smime_ct_authEnvelopedData 1 2 840 113549 1 9 16 1 23 */
+     787,    /* OBJ_id_ct_asciiTextWithCRLF      1 2 840 113549 1 9 16 1 27 */
+    1060,    /* OBJ_id_ct_xml                    1 2 840 113549 1 9 16 1 28 */
+     212,    /* OBJ_id_smime_aa_receiptRequest   1 2 840 113549 1 9 16 2 1 */
+     213,    /* OBJ_id_smime_aa_securityLabel    1 2 840 113549 1 9 16 2 2 */
+     214,    /* OBJ_id_smime_aa_mlExpandHistory  1 2 840 113549 1 9 16 2 3 */
+     215,    /* OBJ_id_smime_aa_contentHint      1 2 840 113549 1 9 16 2 4 */
+     216,    /* OBJ_id_smime_aa_msgSigDigest     1 2 840 113549 1 9 16 2 5 */
+     217,    /* OBJ_id_smime_aa_encapContentType 1 2 840 113549 1 9 16 2 6 */
+     218,    /* OBJ_id_smime_aa_contentIdentifier 1 2 840 113549 1 9 16 2 7 */
+     219,    /* OBJ_id_smime_aa_macValue         1 2 840 113549 1 9 16 2 8 */
+     220,    /* OBJ_id_smime_aa_equivalentLabels 1 2 840 113549 1 9 16 2 9 */
+     221,    /* OBJ_id_smime_aa_contentReference 1 2 840 113549 1 9 16 2 10 */
+     222,    /* OBJ_id_smime_aa_encrypKeyPref    1 2 840 113549 1 9 16 2 11 */
+     223,    /* OBJ_id_smime_aa_signingCertificate 1 2 840 113549 1 9 16 2 12 */
+     224,    /* OBJ_id_smime_aa_smimeEncryptCerts 1 2 840 113549 1 9 16 2 13 */
+     225,    /* OBJ_id_smime_aa_timeStampToken   1 2 840 113549 1 9 16 2 14 */
+     226,    /* OBJ_id_smime_aa_ets_sigPolicyId  1 2 840 113549 1 9 16 2 15 */
+     227,    /* OBJ_id_smime_aa_ets_commitmentType 1 2 840 113549 1 9 16 2 16 */
+     228,    /* OBJ_id_smime_aa_ets_signerLocation 1 2 840 113549 1 9 16 2 17 */
+     229,    /* OBJ_id_smime_aa_ets_signerAttr   1 2 840 113549 1 9 16 2 18 */
+     230,    /* OBJ_id_smime_aa_ets_otherSigCert 1 2 840 113549 1 9 16 2 19 */
+     231,    /* OBJ_id_smime_aa_ets_contentTimestamp 1 2 840 113549 1 9 16 2 20 */
+     232,    /* OBJ_id_smime_aa_ets_CertificateRefs 1 2 840 113549 1 9 16 2 21 */
+     233,    /* OBJ_id_smime_aa_ets_RevocationRefs 1 2 840 113549 1 9 16 2 22 */
+     234,    /* OBJ_id_smime_aa_ets_certValues   1 2 840 113549 1 9 16 2 23 */
+     235,    /* OBJ_id_smime_aa_ets_revocationValues 1 2 840 113549 1 9 16 2 24 */
+     236,    /* OBJ_id_smime_aa_ets_escTimeStamp 1 2 840 113549 1 9 16 2 25 */
+     237,    /* OBJ_id_smime_aa_ets_certCRLTimestamp 1 2 840 113549 1 9 16 2 26 */
+     238,    /* OBJ_id_smime_aa_ets_archiveTimeStamp 1 2 840 113549 1 9 16 2 27 */
+     239,    /* OBJ_id_smime_aa_signatureType    1 2 840 113549 1 9 16 2 28 */
+     240,    /* OBJ_id_smime_aa_dvcs_dvc         1 2 840 113549 1 9 16 2 29 */
+    1086,    /* OBJ_id_smime_aa_signingCertificateV2 1 2 840 113549 1 9 16 2 47 */
+     241,    /* OBJ_id_smime_alg_ESDHwith3DES    1 2 840 113549 1 9 16 3 1 */
+     242,    /* OBJ_id_smime_alg_ESDHwithRC2     1 2 840 113549 1 9 16 3 2 */
+     243,    /* OBJ_id_smime_alg_3DESwrap        1 2 840 113549 1 9 16 3 3 */
+     244,    /* OBJ_id_smime_alg_RC2wrap         1 2 840 113549 1 9 16 3 4 */
+     245,    /* OBJ_id_smime_alg_ESDH            1 2 840 113549 1 9 16 3 5 */
+     246,    /* OBJ_id_smime_alg_CMS3DESwrap     1 2 840 113549 1 9 16 3 6 */
+     247,    /* OBJ_id_smime_alg_CMSRC2wrap      1 2 840 113549 1 9 16 3 7 */
+     125,    /* OBJ_zlib_compression             1 2 840 113549 1 9 16 3 8 */
+     893,    /* OBJ_id_alg_PWRI_KEK              1 2 840 113549 1 9 16 3 9 */
+     248,    /* OBJ_id_smime_cd_ldap             1 2 840 113549 1 9 16 4 1 */
+     249,    /* OBJ_id_smime_spq_ets_sqt_uri     1 2 840 113549 1 9 16 5 1 */
+     250,    /* OBJ_id_smime_spq_ets_sqt_unotice 1 2 840 113549 1 9 16 5 2 */
+     251,    /* OBJ_id_smime_cti_ets_proofOfOrigin 1 2 840 113549 1 9 16 6 1 */
+     252,    /* OBJ_id_smime_cti_ets_proofOfReceipt 1 2 840 113549 1 9 16 6 2 */
+     253,    /* OBJ_id_smime_cti_ets_proofOfDelivery 1 2 840 113549 1 9 16 6 3 */
+     254,    /* OBJ_id_smime_cti_ets_proofOfSender 1 2 840 113549 1 9 16 6 4 */
+     255,    /* OBJ_id_smime_cti_ets_proofOfApproval 1 2 840 113549 1 9 16 6 5 */
+     256,    /* OBJ_id_smime_cti_ets_proofOfCreation 1 2 840 113549 1 9 16 6 6 */
+     150,    /* OBJ_keyBag                       1 2 840 113549 1 12 10 1 1 */
+     151,    /* OBJ_pkcs8ShroudedKeyBag          1 2 840 113549 1 12 10 1 2 */
+     152,    /* OBJ_certBag                      1 2 840 113549 1 12 10 1 3 */
+     153,    /* OBJ_crlBag                       1 2 840 113549 1 12 10 1 4 */
+     154,    /* OBJ_secretBag                    1 2 840 113549 1 12 10 1 5 */
+     155,    /* OBJ_safeContentsBag              1 2 840 113549 1 12 10 1 6 */
+      34,    /* OBJ_idea_cbc                     1 3 6 1 4 1 188 7 1 1 2 */
+     955,    /* OBJ_jurisdictionLocalityName     1 3 6 1 4 1 311 60 2 1 1 */
+     956,    /* OBJ_jurisdictionStateOrProvinceName 1 3 6 1 4 1 311 60 2 1 2 */
+     957,    /* OBJ_jurisdictionCountryName      1 3 6 1 4 1 311 60 2 1 3 */
+    1056,    /* OBJ_blake2b512                   1 3 6 1 4 1 1722 12 2 1 16 */
+    1057,    /* OBJ_blake2s256                   1 3 6 1 4 1 1722 12 2 2 8 */
+    1159,    /* OBJ_dstu4145be                   1 2 804 2 1 1 1 1 3 1 1 1 1 */
+    1160,    /* OBJ_uacurve0                     1 2 804 2 1 1 1 1 3 1 1 2 0 */
+    1161,    /* OBJ_uacurve1                     1 2 804 2 1 1 1 1 3 1 1 2 1 */
+    1162,    /* OBJ_uacurve2                     1 2 804 2 1 1 1 1 3 1 1 2 2 */
+    1163,    /* OBJ_uacurve3                     1 2 804 2 1 1 1 1 3 1 1 2 3 */
+    1164,    /* OBJ_uacurve4                     1 2 804 2 1 1 1 1 3 1 1 2 4 */
+    1165,    /* OBJ_uacurve5                     1 2 804 2 1 1 1 1 3 1 1 2 5 */
+    1166,    /* OBJ_uacurve6                     1 2 804 2 1 1 1 1 3 1 1 2 6 */
+    1167,    /* OBJ_uacurve7                     1 2 804 2 1 1 1 1 3 1 1 2 7 */
+    1168,    /* OBJ_uacurve8                     1 2 804 2 1 1 1 1 3 1 1 2 8 */
+    1169,    /* OBJ_uacurve9                     1 2 804 2 1 1 1 1 3 1 1 2 9 */
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_dat.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_dat.pl
new file mode 100644
index 000000000..e5d38147e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_dat.pl
@@ -0,0 +1,228 @@
+#! /usr/bin/env perl
+# Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use integer;
+use strict;
+use warnings;
+
+# Generate the DER encoding for the given OID.
+sub der_it
+{
+    # Prologue
+    my ($v) = @_;
+    my @a = split(/\s+/, $v);
+    my $ret = pack("C*", $a[0] * 40 + $a[1]);
+    shift @a;
+    shift @a;
+
+    # Loop over rest of bytes; or in 0x80 for multi-byte numbers.
+    my $t;
+    foreach (@a) {
+        my @r = ();
+        $t = 0;
+        while ($_ >= 128) {
+            my $x = $_ % 128;
+            $_ /= 128;
+            push(@r, ($t++ ? 0x80 : 0) | $x);
+        }
+        push(@r, ($t++ ? 0x80 : 0) | $_);
+        $ret .= pack("C*", reverse(@r));
+    }
+    return $ret;
+}
+
+# Output year depends on the year of the script and the input file.
+my $YEAR = [localtime([stat($0)]->[9])]->[5] + 1900;
+my $iYEAR = [localtime([stat($ARGV[0])]->[9])]->[5] + 1900;
+$YEAR = $iYEAR if $iYEAR > $YEAR;
+
+# Read input, parse all #define's into OID name and value.
+# Populate %ln and %sn with long and short names (%dupln and %dupsn)
+# are used to watch for duplicates.  Also %nid and %obj get the
+# NID and OBJ entries.
+my %ln;
+my %sn;
+my %dupln;
+my %dupsn;
+my %nid;
+my %obj;
+my %objd;
+open(IN, "$ARGV[0]") || die "Can't open input file $ARGV[0], $!";
+while (<IN>) {
+    next unless /^\#define\s+(\S+)\s+(.*)$/;
+    my $v = $1;
+    my $d = $2;
+    $d =~ s/^\"//;
+    $d =~ s/\"$//;
+    if ($v =~ /^SN_(.*)$/) {
+        if (defined $dupsn{$d}) {
+            print "WARNING: Duplicate short name \"$d\"\n";
+        } else {
+            $dupsn{$d} = 1;
+        }
+        $sn{$1} = $d;
+    }
+    elsif ($v =~ /^LN_(.*)$/) {
+        if (defined $dupln{$d}) {
+            print "WARNING: Duplicate long name \"$d\"\n";
+        } else {
+            $dupln{$d} = 1;
+        }
+        $ln{$1} = $d;
+    }
+    elsif ($v =~ /^NID_(.*)$/) {
+        $nid{$d} = $1;
+    }
+    elsif ($v =~ /^OBJ_(.*)$/) {
+        $obj{$1} = $v;
+        $objd{$v} = $d;
+    }
+}
+close IN;
+
+# For every value in %obj, recursively expand OBJ_xxx values.  That is:
+#     #define OBJ_iso 1L
+#     #define OBJ_identified_organization OBJ_iso,3L
+# Modify %objd values in-place.  Create an %objn array that has
+my $changed;
+do {
+    $changed = 0;
+    foreach my $k (keys %objd) {
+        $changed = 1 if $objd{$k} =~ s/(OBJ_[^,]+),/$objd{$1},/;
+    }
+} while ($changed);
+
+my @a = sort { $a <=> $b } keys %nid;
+my $n = $a[$#a] + 1;
+my @lvalues = ();
+my $lvalues = 0;
+
+# Scan all defined objects, building up the @out array.
+# %obj_der holds the DER encoding as an array of bytes, and %obj_len
+# holds the length in bytes.
+my @out;
+my %obj_der;
+my %obj_len;
+for (my $i = 0; $i < $n; $i++) {
+    if (!defined $nid{$i}) {
+        push(@out, "    { NULL, NULL, NID_undef },\n");
+        next;
+    }
+
+    my $sn = defined $sn{$nid{$i}} ? "$sn{$nid{$i}}" : "NULL";
+    my $ln = defined $ln{$nid{$i}} ? "$ln{$nid{$i}}" : "NULL";
+    if ($sn eq "NULL") {
+        $sn = $ln;
+        $sn{$nid{$i}} = $ln;
+    }
+    if ($ln eq "NULL") {
+        $ln = $sn;
+        $ln{$nid{$i}} = $sn;
+    }
+
+    my $out = "    {\"$sn\", \"$ln\", NID_$nid{$i}";
+    if (defined $obj{$nid{$i}} && $objd{$obj{$nid{$i}}} =~ /,/) {
+        my $v = $objd{$obj{$nid{$i}}};
+        $v =~ s/L//g;
+        $v =~ s/,/ /g;
+        my $r = &der_it($v);
+        my $z = "";
+        my $length = 0;
+        # Format using fixed-with because we use strcmp later.
+        foreach (unpack("C*",$r)) {
+            $z .= sprintf("0x%02X,", $_);
+            $length++;
+        }
+        $obj_der{$obj{$nid{$i}}} = $z;
+        $obj_len{$obj{$nid{$i}}} = $length;
+
+        push(@lvalues,
+            sprintf("    %-45s  /* [%5d] %s */\n",
+                $z, $lvalues, $obj{$nid{$i}}));
+        $out .= ", $length, &so[$lvalues]";
+        $lvalues += $length;
+    }
+    $out .= "},\n";
+    push(@out, $out);
+}
+
+# Finally ready to generate the output.
+print <<"EOF";
+/*
+ * WARNING: do not edit!
+ * Generated by crypto/objects/obj_dat.pl
+ *
+ * Copyright 1995-$YEAR The OpenSSL Project Authors. All Rights Reserved.
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+EOF
+
+print "/* Serialized OID's */\n";
+printf "static const unsigned char so[%d] = {\n", $lvalues + 1;
+print @lvalues;
+print "};\n\n";
+
+printf "#define NUM_NID %d\n", $n;
+printf "static const ASN1_OBJECT nid_objs[NUM_NID] = {\n";
+print @out;
+print  "};\n\n";
+
+{
+    no warnings "uninitialized";
+    @a = grep(defined $sn{$nid{$_}}, 0 .. $n);
+}
+printf "#define NUM_SN %d\n", $#a + 1;
+printf "static const unsigned int sn_objs[NUM_SN] = {\n";
+foreach (sort { $sn{$nid{$a}} cmp $sn{$nid{$b}} } @a) {
+    printf "    %4d,    /* \"$sn{$nid{$_}}\" */\n", $_;
+}
+print  "};\n\n";
+
+{
+    no warnings "uninitialized";
+    @a = grep(defined $ln{$nid{$_}}, 0 .. $n);
+}
+printf "#define NUM_LN %d\n", $#a + 1;
+printf "static const unsigned int ln_objs[NUM_LN] = {\n";
+foreach (sort { $ln{$nid{$a}} cmp $ln{$nid{$b}} } @a) {
+    printf "    %4d,    /* \"$ln{$nid{$_}}\" */\n", $_;
+}
+print  "};\n\n";
+
+{
+    no warnings "uninitialized";
+    @a = grep(defined $obj{$nid{$_}}, 0 .. $n);
+}
+printf "#define NUM_OBJ %d\n", $#a + 1;
+printf "static const unsigned int obj_objs[NUM_OBJ] = {\n";
+
+# Compare DER; prefer shorter; if some length, use the "smaller" encoding.
+sub obj_cmp
+{
+    no warnings "uninitialized";
+    my $A = $obj_len{$obj{$nid{$a}}};
+    my $B = $obj_len{$obj{$nid{$b}}};
+    my $r = $A - $B;
+    return $r if $r != 0;
+
+    $A = $obj_der{$obj{$nid{$a}}};
+    $B = $obj_der{$obj{$nid{$b}}};
+    return $A cmp $B;
+}
+foreach (sort obj_cmp @a) {
+    my $m = $obj{$nid{$_}};
+    my $v = $objd{$m};
+    $v =~ s/L//g;
+    $v =~ s/,/ /g;
+    printf "    %4d,    /* %-32s %s */\n", $_, $m, $v;
+}
+print  "};\n";
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_err.c
new file mode 100644
index 000000000..be4f11ca2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_err.c
@@ -0,0 +1,46 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/objectserr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA OBJ_str_functs[] = {
+    {ERR_PACK(ERR_LIB_OBJ, OBJ_F_OBJ_ADD_OBJECT, 0), "OBJ_add_object"},
+    {ERR_PACK(ERR_LIB_OBJ, OBJ_F_OBJ_ADD_SIGID, 0), "OBJ_add_sigid"},
+    {ERR_PACK(ERR_LIB_OBJ, OBJ_F_OBJ_CREATE, 0), "OBJ_create"},
+    {ERR_PACK(ERR_LIB_OBJ, OBJ_F_OBJ_DUP, 0), "OBJ_dup"},
+    {ERR_PACK(ERR_LIB_OBJ, OBJ_F_OBJ_NAME_NEW_INDEX, 0), "OBJ_NAME_new_index"},
+    {ERR_PACK(ERR_LIB_OBJ, OBJ_F_OBJ_NID2LN, 0), "OBJ_nid2ln"},
+    {ERR_PACK(ERR_LIB_OBJ, OBJ_F_OBJ_NID2OBJ, 0), "OBJ_nid2obj"},
+    {ERR_PACK(ERR_LIB_OBJ, OBJ_F_OBJ_NID2SN, 0), "OBJ_nid2sn"},
+    {ERR_PACK(ERR_LIB_OBJ, OBJ_F_OBJ_TXT2OBJ, 0), "OBJ_txt2obj"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA OBJ_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_OBJ, 0, OBJ_R_OID_EXISTS), "oid exists"},
+    {ERR_PACK(ERR_LIB_OBJ, 0, OBJ_R_UNKNOWN_NID), "unknown nid"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_OBJ_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(OBJ_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(OBJ_str_functs);
+        ERR_load_strings_const(OBJ_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_lcl.h
new file mode 100644
index 000000000..a417f7c46
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_lcl.h
@@ -0,0 +1,14 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+typedef struct name_funcs_st NAME_FUNCS;
+DEFINE_STACK_OF(NAME_FUNCS)
+DEFINE_LHASH_OF(OBJ_NAME);
+typedef struct added_obj_st ADDED_OBJ;
+DEFINE_LHASH_OF(ADDED_OBJ);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_lib.c
new file mode 100644
index 000000000..acbdeec2c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_lib.c
@@ -0,0 +1,65 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/buffer.h>
+#include "internal/asn1_int.h"
+
+ASN1_OBJECT *OBJ_dup(const ASN1_OBJECT *o)
+{
+    ASN1_OBJECT *r;
+
+    if (o == NULL)
+        return NULL;
+    /* If object isn't dynamic it's an internal OID which is never freed */
+    if (!(o->flags & ASN1_OBJECT_FLAG_DYNAMIC))
+        return (ASN1_OBJECT *)o;
+
+    r = ASN1_OBJECT_new();
+    if (r == NULL) {
+        OBJerr(OBJ_F_OBJ_DUP, ERR_R_ASN1_LIB);
+        return NULL;
+    }
+
+    /* Set dynamic flags so everything gets freed up on error */
+
+    r->flags = o->flags | (ASN1_OBJECT_FLAG_DYNAMIC |
+                           ASN1_OBJECT_FLAG_DYNAMIC_STRINGS |
+                           ASN1_OBJECT_FLAG_DYNAMIC_DATA);
+
+    if (o->length > 0 && (r->data = OPENSSL_memdup(o->data, o->length)) == NULL)
+        goto err;
+
+    r->length = o->length;
+    r->nid = o->nid;
+
+    if (o->ln != NULL && (r->ln = OPENSSL_strdup(o->ln)) == NULL)
+        goto err;
+
+    if (o->sn != NULL && (r->sn = OPENSSL_strdup(o->sn)) == NULL)
+        goto err;
+
+    return r;
+ err:
+    ASN1_OBJECT_free(r);
+    OBJerr(OBJ_F_OBJ_DUP, ERR_R_MALLOC_FAILURE);
+    return NULL;
+}
+
+int OBJ_cmp(const ASN1_OBJECT *a, const ASN1_OBJECT *b)
+{
+    int ret;
+
+    ret = (a->length - b->length);
+    if (ret)
+        return ret;
+    return memcmp(a->data, b->data, a->length);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_mac.num b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_mac.num
new file mode 100644
index 000000000..1b6a9c61a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_mac.num
@@ -0,0 +1,1194 @@
+undef		0
+rsadsi		1
+pkcs		2
+md2		3
+md5		4
+rc4		5
+rsaEncryption		6
+md2WithRSAEncryption		7
+md5WithRSAEncryption		8
+pbeWithMD2AndDES_CBC		9
+pbeWithMD5AndDES_CBC		10
+X500		11
+X509		12
+commonName		13
+countryName		14
+localityName		15
+stateOrProvinceName		16
+organizationName		17
+organizationalUnitName		18
+rsa		19
+pkcs7		20
+pkcs7_data		21
+pkcs7_signed		22
+pkcs7_enveloped		23
+pkcs7_signedAndEnveloped		24
+pkcs7_digest		25
+pkcs7_encrypted		26
+pkcs3		27
+dhKeyAgreement		28
+des_ecb		29
+des_cfb64		30
+des_cbc		31
+des_ede_ecb		32
+des_ede3_ecb		33
+idea_cbc		34
+idea_cfb64		35
+idea_ecb		36
+rc2_cbc		37
+rc2_ecb		38
+rc2_cfb64		39
+rc2_ofb64		40
+sha		41
+shaWithRSAEncryption		42
+des_ede_cbc		43
+des_ede3_cbc		44
+des_ofb64		45
+idea_ofb64		46
+pkcs9		47
+pkcs9_emailAddress		48
+pkcs9_unstructuredName		49
+pkcs9_contentType		50
+pkcs9_messageDigest		51
+pkcs9_signingTime		52
+pkcs9_countersignature		53
+pkcs9_challengePassword		54
+pkcs9_unstructuredAddress		55
+pkcs9_extCertAttributes		56
+netscape		57
+netscape_cert_extension		58
+netscape_data_type		59
+des_ede_cfb64		60
+des_ede3_cfb64		61
+des_ede_ofb64		62
+des_ede3_ofb64		63
+sha1		64
+sha1WithRSAEncryption		65
+dsaWithSHA		66
+dsa_2		67
+pbeWithSHA1AndRC2_CBC		68
+id_pbkdf2		69
+dsaWithSHA1_2		70
+netscape_cert_type		71
+netscape_base_url		72
+netscape_revocation_url		73
+netscape_ca_revocation_url		74
+netscape_renewal_url		75
+netscape_ca_policy_url		76
+netscape_ssl_server_name		77
+netscape_comment		78
+netscape_cert_sequence		79
+desx_cbc		80
+id_ce		81
+subject_key_identifier		82
+key_usage		83
+private_key_usage_period		84
+subject_alt_name		85
+issuer_alt_name		86
+basic_constraints		87
+crl_number		88
+certificate_policies		89
+authority_key_identifier		90
+bf_cbc		91
+bf_ecb		92
+bf_cfb64		93
+bf_ofb64		94
+mdc2		95
+mdc2WithRSA		96
+rc4_40		97
+rc2_40_cbc		98
+givenName		99
+surname		100
+initials		101
+uniqueIdentifier		102
+crl_distribution_points		103
+md5WithRSA		104
+serialNumber		105
+title		106
+description		107
+cast5_cbc		108
+cast5_ecb		109
+cast5_cfb64		110
+cast5_ofb64		111
+pbeWithMD5AndCast5_CBC		112
+dsaWithSHA1		113
+md5_sha1		114
+sha1WithRSA		115
+dsa		116
+ripemd160		117
+ripemd160WithRSA		119
+rc5_cbc		120
+rc5_ecb		121
+rc5_cfb64		122
+rc5_ofb64		123
+rle_compression		124
+zlib_compression		125
+ext_key_usage		126
+id_pkix		127
+id_kp		128
+server_auth		129
+client_auth		130
+code_sign		131
+email_protect		132
+time_stamp		133
+ms_code_ind		134
+ms_code_com		135
+ms_ctl_sign		136
+ms_sgc		137
+ms_efs		138
+ns_sgc		139
+delta_crl		140
+crl_reason		141
+invalidity_date		142
+sxnet		143
+pbe_WithSHA1And128BitRC4		144
+pbe_WithSHA1And40BitRC4		145
+pbe_WithSHA1And3_Key_TripleDES_CBC		146
+pbe_WithSHA1And2_Key_TripleDES_CBC		147
+pbe_WithSHA1And128BitRC2_CBC		148
+pbe_WithSHA1And40BitRC2_CBC		149
+keyBag		150
+pkcs8ShroudedKeyBag		151
+certBag		152
+crlBag		153
+secretBag		154
+safeContentsBag		155
+friendlyName		156
+localKeyID		157
+x509Certificate		158
+sdsiCertificate		159
+x509Crl		160
+pbes2		161
+pbmac1		162
+hmacWithSHA1		163
+id_qt_cps		164
+id_qt_unotice		165
+rc2_64_cbc		166
+SMIMECapabilities		167
+pbeWithMD2AndRC2_CBC		168
+pbeWithMD5AndRC2_CBC		169
+pbeWithSHA1AndDES_CBC		170
+ms_ext_req		171
+ext_req		172
+name		173
+dnQualifier		174
+id_pe		175
+id_ad		176
+info_access		177
+ad_OCSP		178
+ad_ca_issuers		179
+OCSP_sign		180
+iso		181
+member_body		182
+ISO_US		183
+X9_57		184
+X9cm		185
+pkcs1		186
+pkcs5		187
+SMIME		188
+id_smime_mod		189
+id_smime_ct		190
+id_smime_aa		191
+id_smime_alg		192
+id_smime_cd		193
+id_smime_spq		194
+id_smime_cti		195
+id_smime_mod_cms		196
+id_smime_mod_ess		197
+id_smime_mod_oid		198
+id_smime_mod_msg_v3		199
+id_smime_mod_ets_eSignature_88		200
+id_smime_mod_ets_eSignature_97		201
+id_smime_mod_ets_eSigPolicy_88		202
+id_smime_mod_ets_eSigPolicy_97		203
+id_smime_ct_receipt		204
+id_smime_ct_authData		205
+id_smime_ct_publishCert		206
+id_smime_ct_TSTInfo		207
+id_smime_ct_TDTInfo		208
+id_smime_ct_contentInfo		209
+id_smime_ct_DVCSRequestData		210
+id_smime_ct_DVCSResponseData		211
+id_smime_aa_receiptRequest		212
+id_smime_aa_securityLabel		213
+id_smime_aa_mlExpandHistory		214
+id_smime_aa_contentHint		215
+id_smime_aa_msgSigDigest		216
+id_smime_aa_encapContentType		217
+id_smime_aa_contentIdentifier		218
+id_smime_aa_macValue		219
+id_smime_aa_equivalentLabels		220
+id_smime_aa_contentReference		221
+id_smime_aa_encrypKeyPref		222
+id_smime_aa_signingCertificate		223
+id_smime_aa_smimeEncryptCerts		224
+id_smime_aa_timeStampToken		225
+id_smime_aa_ets_sigPolicyId		226
+id_smime_aa_ets_commitmentType		227
+id_smime_aa_ets_signerLocation		228
+id_smime_aa_ets_signerAttr		229
+id_smime_aa_ets_otherSigCert		230
+id_smime_aa_ets_contentTimestamp		231
+id_smime_aa_ets_CertificateRefs		232
+id_smime_aa_ets_RevocationRefs		233
+id_smime_aa_ets_certValues		234
+id_smime_aa_ets_revocationValues		235
+id_smime_aa_ets_escTimeStamp		236
+id_smime_aa_ets_certCRLTimestamp		237
+id_smime_aa_ets_archiveTimeStamp		238
+id_smime_aa_signatureType		239
+id_smime_aa_dvcs_dvc		240
+id_smime_alg_ESDHwith3DES		241
+id_smime_alg_ESDHwithRC2		242
+id_smime_alg_3DESwrap		243
+id_smime_alg_RC2wrap		244
+id_smime_alg_ESDH		245
+id_smime_alg_CMS3DESwrap		246
+id_smime_alg_CMSRC2wrap		247
+id_smime_cd_ldap		248
+id_smime_spq_ets_sqt_uri		249
+id_smime_spq_ets_sqt_unotice		250
+id_smime_cti_ets_proofOfOrigin		251
+id_smime_cti_ets_proofOfReceipt		252
+id_smime_cti_ets_proofOfDelivery		253
+id_smime_cti_ets_proofOfSender		254
+id_smime_cti_ets_proofOfApproval		255
+id_smime_cti_ets_proofOfCreation		256
+md4		257
+id_pkix_mod		258
+id_qt		259
+id_it		260
+id_pkip		261
+id_alg		262
+id_cmc		263
+id_on		264
+id_pda		265
+id_aca		266
+id_qcs		267
+id_cct		268
+id_pkix1_explicit_88		269
+id_pkix1_implicit_88		270
+id_pkix1_explicit_93		271
+id_pkix1_implicit_93		272
+id_mod_crmf		273
+id_mod_cmc		274
+id_mod_kea_profile_88		275
+id_mod_kea_profile_93		276
+id_mod_cmp		277
+id_mod_qualified_cert_88		278
+id_mod_qualified_cert_93		279
+id_mod_attribute_cert		280
+id_mod_timestamp_protocol		281
+id_mod_ocsp		282
+id_mod_dvcs		283
+id_mod_cmp2000		284
+biometricInfo		285
+qcStatements		286
+ac_auditEntity		287
+ac_targeting		288
+aaControls		289
+sbgp_ipAddrBlock		290
+sbgp_autonomousSysNum		291
+sbgp_routerIdentifier		292
+textNotice		293
+ipsecEndSystem		294
+ipsecTunnel		295
+ipsecUser		296
+dvcs		297
+id_it_caProtEncCert		298
+id_it_signKeyPairTypes		299
+id_it_encKeyPairTypes		300
+id_it_preferredSymmAlg		301
+id_it_caKeyUpdateInfo		302
+id_it_currentCRL		303
+id_it_unsupportedOIDs		304
+id_it_subscriptionRequest		305
+id_it_subscriptionResponse		306
+id_it_keyPairParamReq		307
+id_it_keyPairParamRep		308
+id_it_revPassphrase		309
+id_it_implicitConfirm		310
+id_it_confirmWaitTime		311
+id_it_origPKIMessage		312
+id_regCtrl		313
+id_regInfo		314
+id_regCtrl_regToken		315
+id_regCtrl_authenticator		316
+id_regCtrl_pkiPublicationInfo		317
+id_regCtrl_pkiArchiveOptions		318
+id_regCtrl_oldCertID		319
+id_regCtrl_protocolEncrKey		320
+id_regInfo_utf8Pairs		321
+id_regInfo_certReq		322
+id_alg_des40		323
+id_alg_noSignature		324
+id_alg_dh_sig_hmac_sha1		325
+id_alg_dh_pop		326
+id_cmc_statusInfo		327
+id_cmc_identification		328
+id_cmc_identityProof		329
+id_cmc_dataReturn		330
+id_cmc_transactionId		331
+id_cmc_senderNonce		332
+id_cmc_recipientNonce		333
+id_cmc_addExtensions		334
+id_cmc_encryptedPOP		335
+id_cmc_decryptedPOP		336
+id_cmc_lraPOPWitness		337
+id_cmc_getCert		338
+id_cmc_getCRL		339
+id_cmc_revokeRequest		340
+id_cmc_regInfo		341
+id_cmc_responseInfo		342
+id_cmc_queryPending		343
+id_cmc_popLinkRandom		344
+id_cmc_popLinkWitness		345
+id_cmc_confirmCertAcceptance		346
+id_on_personalData		347
+id_pda_dateOfBirth		348
+id_pda_placeOfBirth		349
+id_pda_pseudonym		350
+id_pda_gender		351
+id_pda_countryOfCitizenship		352
+id_pda_countryOfResidence		353
+id_aca_authenticationInfo		354
+id_aca_accessIdentity		355
+id_aca_chargingIdentity		356
+id_aca_group		357
+id_aca_role		358
+id_qcs_pkixQCSyntax_v1		359
+id_cct_crs		360
+id_cct_PKIData		361
+id_cct_PKIResponse		362
+ad_timeStamping		363
+ad_dvcs		364
+id_pkix_OCSP_basic		365
+id_pkix_OCSP_Nonce		366
+id_pkix_OCSP_CrlID		367
+id_pkix_OCSP_acceptableResponses		368
+id_pkix_OCSP_noCheck		369
+id_pkix_OCSP_archiveCutoff		370
+id_pkix_OCSP_serviceLocator		371
+id_pkix_OCSP_extendedStatus		372
+id_pkix_OCSP_valid		373
+id_pkix_OCSP_path		374
+id_pkix_OCSP_trustRoot		375
+algorithm		376
+rsaSignature		377
+X500algorithms		378
+org		379
+dod		380
+iana		381
+Directory		382
+Management		383
+Experimental		384
+Private		385
+Security		386
+SNMPv2		387
+Mail		388
+Enterprises		389
+dcObject		390
+domainComponent		391
+Domain		392
+joint_iso_ccitt		393
+selected_attribute_types		394
+clearance		395
+md4WithRSAEncryption		396
+ac_proxying		397
+sinfo_access		398
+id_aca_encAttrs		399
+role		400
+policy_constraints		401
+target_information		402
+no_rev_avail		403
+ccitt		404
+ansi_X9_62		405
+X9_62_prime_field		406
+X9_62_characteristic_two_field		407
+X9_62_id_ecPublicKey		408
+X9_62_prime192v1		409
+X9_62_prime192v2		410
+X9_62_prime192v3		411
+X9_62_prime239v1		412
+X9_62_prime239v2		413
+X9_62_prime239v3		414
+X9_62_prime256v1		415
+ecdsa_with_SHA1		416
+ms_csp_name		417
+aes_128_ecb		418
+aes_128_cbc		419
+aes_128_ofb128		420
+aes_128_cfb128		421
+aes_192_ecb		422
+aes_192_cbc		423
+aes_192_ofb128		424
+aes_192_cfb128		425
+aes_256_ecb		426
+aes_256_cbc		427
+aes_256_ofb128		428
+aes_256_cfb128		429
+hold_instruction_code		430
+hold_instruction_none		431
+hold_instruction_call_issuer		432
+hold_instruction_reject		433
+data		434
+pss		435
+ucl		436
+pilot		437
+pilotAttributeType		438
+pilotAttributeSyntax		439
+pilotObjectClass		440
+pilotGroups		441
+iA5StringSyntax		442
+caseIgnoreIA5StringSyntax		443
+pilotObject		444
+pilotPerson		445
+account		446
+document		447
+room		448
+documentSeries		449
+rFC822localPart		450
+dNSDomain		451
+domainRelatedObject		452
+friendlyCountry		453
+simpleSecurityObject		454
+pilotOrganization		455
+pilotDSA		456
+qualityLabelledData		457
+userId		458
+textEncodedORAddress		459
+rfc822Mailbox		460
+info		461
+favouriteDrink		462
+roomNumber		463
+photo		464
+userClass		465
+host		466
+manager		467
+documentIdentifier		468
+documentTitle		469
+documentVersion		470
+documentAuthor		471
+documentLocation		472
+homeTelephoneNumber		473
+secretary		474
+otherMailbox		475
+lastModifiedTime		476
+lastModifiedBy		477
+aRecord		478
+pilotAttributeType27		479
+mXRecord		480
+nSRecord		481
+sOARecord		482
+cNAMERecord		483
+associatedDomain		484
+associatedName		485
+homePostalAddress		486
+personalTitle		487
+mobileTelephoneNumber		488
+pagerTelephoneNumber		489
+friendlyCountryName		490
+organizationalStatus		491
+janetMailbox		492
+mailPreferenceOption		493
+buildingName		494
+dSAQuality		495
+singleLevelQuality		496
+subtreeMinimumQuality		497
+subtreeMaximumQuality		498
+personalSignature		499
+dITRedirect		500
+audio		501
+documentPublisher		502
+x500UniqueIdentifier		503
+mime_mhs		504
+mime_mhs_headings		505
+mime_mhs_bodies		506
+id_hex_partial_message		507
+id_hex_multipart_message		508
+generationQualifier		509
+pseudonym		510
+InternationalRA		511
+id_set		512
+set_ctype		513
+set_msgExt		514
+set_attr		515
+set_policy		516
+set_certExt		517
+set_brand		518
+setct_PANData		519
+setct_PANToken		520
+setct_PANOnly		521
+setct_OIData		522
+setct_PI		523
+setct_PIData		524
+setct_PIDataUnsigned		525
+setct_HODInput		526
+setct_AuthResBaggage		527
+setct_AuthRevReqBaggage		528
+setct_AuthRevResBaggage		529
+setct_CapTokenSeq		530
+setct_PInitResData		531
+setct_PI_TBS		532
+setct_PResData		533
+setct_AuthReqTBS		534
+setct_AuthResTBS		535
+setct_AuthResTBSX		536
+setct_AuthTokenTBS		537
+setct_CapTokenData		538
+setct_CapTokenTBS		539
+setct_AcqCardCodeMsg		540
+setct_AuthRevReqTBS		541
+setct_AuthRevResData		542
+setct_AuthRevResTBS		543
+setct_CapReqTBS		544
+setct_CapReqTBSX		545
+setct_CapResData		546
+setct_CapRevReqTBS		547
+setct_CapRevReqTBSX		548
+setct_CapRevResData		549
+setct_CredReqTBS		550
+setct_CredReqTBSX		551
+setct_CredResData		552
+setct_CredRevReqTBS		553
+setct_CredRevReqTBSX		554
+setct_CredRevResData		555
+setct_PCertReqData		556
+setct_PCertResTBS		557
+setct_BatchAdminReqData		558
+setct_BatchAdminResData		559
+setct_CardCInitResTBS		560
+setct_MeAqCInitResTBS		561
+setct_RegFormResTBS		562
+setct_CertReqData		563
+setct_CertReqTBS		564
+setct_CertResData		565
+setct_CertInqReqTBS		566
+setct_ErrorTBS		567
+setct_PIDualSignedTBE		568
+setct_PIUnsignedTBE		569
+setct_AuthReqTBE		570
+setct_AuthResTBE		571
+setct_AuthResTBEX		572
+setct_AuthTokenTBE		573
+setct_CapTokenTBE		574
+setct_CapTokenTBEX		575
+setct_AcqCardCodeMsgTBE		576
+setct_AuthRevReqTBE		577
+setct_AuthRevResTBE		578
+setct_AuthRevResTBEB		579
+setct_CapReqTBE		580
+setct_CapReqTBEX		581
+setct_CapResTBE		582
+setct_CapRevReqTBE		583
+setct_CapRevReqTBEX		584
+setct_CapRevResTBE		585
+setct_CredReqTBE		586
+setct_CredReqTBEX		587
+setct_CredResTBE		588
+setct_CredRevReqTBE		589
+setct_CredRevReqTBEX		590
+setct_CredRevResTBE		591
+setct_BatchAdminReqTBE		592
+setct_BatchAdminResTBE		593
+setct_RegFormReqTBE		594
+setct_CertReqTBE		595
+setct_CertReqTBEX		596
+setct_CertResTBE		597
+setct_CRLNotificationTBS		598
+setct_CRLNotificationResTBS		599
+setct_BCIDistributionTBS		600
+setext_genCrypt		601
+setext_miAuth		602
+setext_pinSecure		603
+setext_pinAny		604
+setext_track2		605
+setext_cv		606
+set_policy_root		607
+setCext_hashedRoot		608
+setCext_certType		609
+setCext_merchData		610
+setCext_cCertRequired		611
+setCext_tunneling		612
+setCext_setExt		613
+setCext_setQualf		614
+setCext_PGWYcapabilities		615
+setCext_TokenIdentifier		616
+setCext_Track2Data		617
+setCext_TokenType		618
+setCext_IssuerCapabilities		619
+setAttr_Cert		620
+setAttr_PGWYcap		621
+setAttr_TokenType		622
+setAttr_IssCap		623
+set_rootKeyThumb		624
+set_addPolicy		625
+setAttr_Token_EMV		626
+setAttr_Token_B0Prime		627
+setAttr_IssCap_CVM		628
+setAttr_IssCap_T2		629
+setAttr_IssCap_Sig		630
+setAttr_GenCryptgrm		631
+setAttr_T2Enc		632
+setAttr_T2cleartxt		633
+setAttr_TokICCsig		634
+setAttr_SecDevSig		635
+set_brand_IATA_ATA		636
+set_brand_Diners		637
+set_brand_AmericanExpress		638
+set_brand_JCB		639
+set_brand_Visa		640
+set_brand_MasterCard		641
+set_brand_Novus		642
+des_cdmf		643
+rsaOAEPEncryptionSET		644
+itu_t		645
+joint_iso_itu_t		646
+international_organizations		647
+ms_smartcard_login		648
+ms_upn		649
+aes_128_cfb1		650
+aes_192_cfb1		651
+aes_256_cfb1		652
+aes_128_cfb8		653
+aes_192_cfb8		654
+aes_256_cfb8		655
+des_cfb1		656
+des_cfb8		657
+des_ede3_cfb1		658
+des_ede3_cfb8		659
+streetAddress		660
+postalCode		661
+id_ppl		662
+proxyCertInfo		663
+id_ppl_anyLanguage		664
+id_ppl_inheritAll		665
+name_constraints		666
+Independent		667
+sha256WithRSAEncryption		668
+sha384WithRSAEncryption		669
+sha512WithRSAEncryption		670
+sha224WithRSAEncryption		671
+sha256		672
+sha384		673
+sha512		674
+sha224		675
+identified_organization		676
+certicom_arc		677
+wap		678
+wap_wsg		679
+X9_62_id_characteristic_two_basis		680
+X9_62_onBasis		681
+X9_62_tpBasis		682
+X9_62_ppBasis		683
+X9_62_c2pnb163v1		684
+X9_62_c2pnb163v2		685
+X9_62_c2pnb163v3		686
+X9_62_c2pnb176v1		687
+X9_62_c2tnb191v1		688
+X9_62_c2tnb191v2		689
+X9_62_c2tnb191v3		690
+X9_62_c2onb191v4		691
+X9_62_c2onb191v5		692
+X9_62_c2pnb208w1		693
+X9_62_c2tnb239v1		694
+X9_62_c2tnb239v2		695
+X9_62_c2tnb239v3		696
+X9_62_c2onb239v4		697
+X9_62_c2onb239v5		698
+X9_62_c2pnb272w1		699
+X9_62_c2pnb304w1		700
+X9_62_c2tnb359v1		701
+X9_62_c2pnb368w1		702
+X9_62_c2tnb431r1		703
+secp112r1		704
+secp112r2		705
+secp128r1		706
+secp128r2		707
+secp160k1		708
+secp160r1		709
+secp160r2		710
+secp192k1		711
+secp224k1		712
+secp224r1		713
+secp256k1		714
+secp384r1		715
+secp521r1		716
+sect113r1		717
+sect113r2		718
+sect131r1		719
+sect131r2		720
+sect163k1		721
+sect163r1		722
+sect163r2		723
+sect193r1		724
+sect193r2		725
+sect233k1		726
+sect233r1		727
+sect239k1		728
+sect283k1		729
+sect283r1		730
+sect409k1		731
+sect409r1		732
+sect571k1		733
+sect571r1		734
+wap_wsg_idm_ecid_wtls1		735
+wap_wsg_idm_ecid_wtls3		736
+wap_wsg_idm_ecid_wtls4		737
+wap_wsg_idm_ecid_wtls5		738
+wap_wsg_idm_ecid_wtls6		739
+wap_wsg_idm_ecid_wtls7		740
+wap_wsg_idm_ecid_wtls8		741
+wap_wsg_idm_ecid_wtls9		742
+wap_wsg_idm_ecid_wtls10		743
+wap_wsg_idm_ecid_wtls11		744
+wap_wsg_idm_ecid_wtls12		745
+any_policy		746
+policy_mappings		747
+inhibit_any_policy		748
+ipsec3		749
+ipsec4		750
+camellia_128_cbc		751
+camellia_192_cbc		752
+camellia_256_cbc		753
+camellia_128_ecb		754
+camellia_192_ecb		755
+camellia_256_ecb		756
+camellia_128_cfb128		757
+camellia_192_cfb128		758
+camellia_256_cfb128		759
+camellia_128_cfb1		760
+camellia_192_cfb1		761
+camellia_256_cfb1		762
+camellia_128_cfb8		763
+camellia_192_cfb8		764
+camellia_256_cfb8		765
+camellia_128_ofb128		766
+camellia_192_ofb128		767
+camellia_256_ofb128		768
+subject_directory_attributes		769
+issuing_distribution_point		770
+certificate_issuer		771
+korea		772
+kisa		773
+kftc		774
+npki_alg		775
+seed_ecb		776
+seed_cbc		777
+seed_ofb128		778
+seed_cfb128		779
+hmac_md5		780
+hmac_sha1		781
+id_PasswordBasedMAC		782
+id_DHBasedMac		783
+id_it_suppLangTags		784
+caRepository		785
+id_smime_ct_compressedData		786
+id_ct_asciiTextWithCRLF		787
+id_aes128_wrap		788
+id_aes192_wrap		789
+id_aes256_wrap		790
+ecdsa_with_Recommended		791
+ecdsa_with_Specified		792
+ecdsa_with_SHA224		793
+ecdsa_with_SHA256		794
+ecdsa_with_SHA384		795
+ecdsa_with_SHA512		796
+hmacWithMD5		797
+hmacWithSHA224		798
+hmacWithSHA256		799
+hmacWithSHA384		800
+hmacWithSHA512		801
+dsa_with_SHA224		802
+dsa_with_SHA256		803
+whirlpool		804
+cryptopro		805
+cryptocom		806
+id_GostR3411_94_with_GostR3410_2001		807
+id_GostR3411_94_with_GostR3410_94		808
+id_GostR3411_94		809
+id_HMACGostR3411_94		810
+id_GostR3410_2001		811
+id_GostR3410_94		812
+id_Gost28147_89		813
+gost89_cnt		814
+id_Gost28147_89_MAC		815
+id_GostR3411_94_prf		816
+id_GostR3410_2001DH		817
+id_GostR3410_94DH		818
+id_Gost28147_89_CryptoPro_KeyMeshing		819
+id_Gost28147_89_None_KeyMeshing		820
+id_GostR3411_94_TestParamSet		821
+id_GostR3411_94_CryptoProParamSet		822
+id_Gost28147_89_TestParamSet		823
+id_Gost28147_89_CryptoPro_A_ParamSet		824
+id_Gost28147_89_CryptoPro_B_ParamSet		825
+id_Gost28147_89_CryptoPro_C_ParamSet		826
+id_Gost28147_89_CryptoPro_D_ParamSet		827
+id_Gost28147_89_CryptoPro_Oscar_1_1_ParamSet		828
+id_Gost28147_89_CryptoPro_Oscar_1_0_ParamSet		829
+id_Gost28147_89_CryptoPro_RIC_1_ParamSet		830
+id_GostR3410_94_TestParamSet		831
+id_GostR3410_94_CryptoPro_A_ParamSet		832
+id_GostR3410_94_CryptoPro_B_ParamSet		833
+id_GostR3410_94_CryptoPro_C_ParamSet		834
+id_GostR3410_94_CryptoPro_D_ParamSet		835
+id_GostR3410_94_CryptoPro_XchA_ParamSet		836
+id_GostR3410_94_CryptoPro_XchB_ParamSet		837
+id_GostR3410_94_CryptoPro_XchC_ParamSet		838
+id_GostR3410_2001_TestParamSet		839
+id_GostR3410_2001_CryptoPro_A_ParamSet		840
+id_GostR3410_2001_CryptoPro_B_ParamSet		841
+id_GostR3410_2001_CryptoPro_C_ParamSet		842
+id_GostR3410_2001_CryptoPro_XchA_ParamSet		843
+id_GostR3410_2001_CryptoPro_XchB_ParamSet		844
+id_GostR3410_94_a		845
+id_GostR3410_94_aBis		846
+id_GostR3410_94_b		847
+id_GostR3410_94_bBis		848
+id_Gost28147_89_cc		849
+id_GostR3410_94_cc		850
+id_GostR3410_2001_cc		851
+id_GostR3411_94_with_GostR3410_94_cc		852
+id_GostR3411_94_with_GostR3410_2001_cc		853
+id_GostR3410_2001_ParamSet_cc		854
+hmac		855
+LocalKeySet		856
+freshest_crl		857
+id_on_permanentIdentifier		858
+searchGuide		859
+businessCategory		860
+postalAddress		861
+postOfficeBox		862
+physicalDeliveryOfficeName		863
+telephoneNumber		864
+telexNumber		865
+teletexTerminalIdentifier		866
+facsimileTelephoneNumber		867
+x121Address		868
+internationaliSDNNumber		869
+registeredAddress		870
+destinationIndicator		871
+preferredDeliveryMethod		872
+presentationAddress		873
+supportedApplicationContext		874
+member		875
+owner		876
+roleOccupant		877
+seeAlso		878
+userPassword		879
+userCertificate		880
+cACertificate		881
+authorityRevocationList		882
+certificateRevocationList		883
+crossCertificatePair		884
+enhancedSearchGuide		885
+protocolInformation		886
+distinguishedName		887
+uniqueMember		888
+houseIdentifier		889
+supportedAlgorithms		890
+deltaRevocationList		891
+dmdName		892
+id_alg_PWRI_KEK		893
+cmac		894
+aes_128_gcm		895
+aes_128_ccm		896
+id_aes128_wrap_pad		897
+aes_192_gcm		898
+aes_192_ccm		899
+id_aes192_wrap_pad		900
+aes_256_gcm		901
+aes_256_ccm		902
+id_aes256_wrap_pad		903
+aes_128_ctr		904
+aes_192_ctr		905
+aes_256_ctr		906
+id_camellia128_wrap		907
+id_camellia192_wrap		908
+id_camellia256_wrap		909
+anyExtendedKeyUsage		910
+mgf1		911
+rsassaPss		912
+aes_128_xts		913
+aes_256_xts		914
+rc4_hmac_md5		915
+aes_128_cbc_hmac_sha1		916
+aes_192_cbc_hmac_sha1		917
+aes_256_cbc_hmac_sha1		918
+rsaesOaep		919
+dhpublicnumber		920
+brainpoolP160r1		921
+brainpoolP160t1		922
+brainpoolP192r1		923
+brainpoolP192t1		924
+brainpoolP224r1		925
+brainpoolP224t1		926
+brainpoolP256r1		927
+brainpoolP256t1		928
+brainpoolP320r1		929
+brainpoolP320t1		930
+brainpoolP384r1		931
+brainpoolP384t1		932
+brainpoolP512r1		933
+brainpoolP512t1		934
+pSpecified		935
+dhSinglePass_stdDH_sha1kdf_scheme		936
+dhSinglePass_stdDH_sha224kdf_scheme		937
+dhSinglePass_stdDH_sha256kdf_scheme		938
+dhSinglePass_stdDH_sha384kdf_scheme		939
+dhSinglePass_stdDH_sha512kdf_scheme		940
+dhSinglePass_cofactorDH_sha1kdf_scheme		941
+dhSinglePass_cofactorDH_sha224kdf_scheme		942
+dhSinglePass_cofactorDH_sha256kdf_scheme		943
+dhSinglePass_cofactorDH_sha384kdf_scheme		944
+dhSinglePass_cofactorDH_sha512kdf_scheme		945
+dh_std_kdf		946
+dh_cofactor_kdf		947
+aes_128_cbc_hmac_sha256		948
+aes_192_cbc_hmac_sha256		949
+aes_256_cbc_hmac_sha256		950
+ct_precert_scts		951
+ct_precert_poison		952
+ct_precert_signer		953
+ct_cert_scts		954
+jurisdictionLocalityName		955
+jurisdictionStateOrProvinceName		956
+jurisdictionCountryName		957
+aes_128_ocb		958
+aes_192_ocb		959
+aes_256_ocb		960
+camellia_128_gcm		961
+camellia_128_ccm		962
+camellia_128_ctr		963
+camellia_128_cmac		964
+camellia_192_gcm		965
+camellia_192_ccm		966
+camellia_192_ctr		967
+camellia_192_cmac		968
+camellia_256_gcm		969
+camellia_256_ccm		970
+camellia_256_ctr		971
+camellia_256_cmac		972
+id_scrypt		973
+id_tc26		974
+gost89_cnt_12		975
+gost_mac_12		976
+id_tc26_algorithms		977
+id_tc26_sign		978
+id_GostR3410_2012_256		979
+id_GostR3410_2012_512		980
+id_tc26_digest		981
+id_GostR3411_2012_256		982
+id_GostR3411_2012_512		983
+id_tc26_signwithdigest		984
+id_tc26_signwithdigest_gost3410_2012_256		985
+id_tc26_signwithdigest_gost3410_2012_512		986
+id_tc26_mac		987
+id_tc26_hmac_gost_3411_2012_256		988
+id_tc26_hmac_gost_3411_2012_512		989
+id_tc26_cipher		990
+id_tc26_agreement		991
+id_tc26_agreement_gost_3410_2012_256		992
+id_tc26_agreement_gost_3410_2012_512		993
+id_tc26_constants		994
+id_tc26_sign_constants		995
+id_tc26_gost_3410_2012_512_constants		996
+id_tc26_gost_3410_2012_512_paramSetTest		997
+id_tc26_gost_3410_2012_512_paramSetA		998
+id_tc26_gost_3410_2012_512_paramSetB		999
+id_tc26_digest_constants		1000
+id_tc26_cipher_constants		1001
+id_tc26_gost_28147_constants		1002
+id_tc26_gost_28147_param_Z		1003
+INN		1004
+OGRN		1005
+SNILS		1006
+subjectSignTool		1007
+issuerSignTool		1008
+gost89_cbc		1009
+gost89_ecb		1010
+gost89_ctr		1011
+grasshopper_ecb		1012
+grasshopper_ctr		1013
+grasshopper_ofb		1014
+grasshopper_cbc		1015
+grasshopper_cfb		1016
+grasshopper_mac		1017
+chacha20_poly1305		1018
+chacha20		1019
+tlsfeature		1020
+tls1_prf		1021
+ipsec_IKE		1022
+capwapAC		1023
+capwapWTP		1024
+sshClient		1025
+sshServer		1026
+sendRouter		1027
+sendProxiedRouter		1028
+sendOwner		1029
+sendProxiedOwner		1030
+id_pkinit		1031
+pkInitClientAuth		1032
+pkInitKDC		1033
+X25519		1034
+X448		1035
+hkdf		1036
+kx_rsa		1037
+kx_ecdhe		1038
+kx_dhe		1039
+kx_ecdhe_psk		1040
+kx_dhe_psk		1041
+kx_rsa_psk		1042
+kx_psk		1043
+kx_srp		1044
+kx_gost		1045
+auth_rsa		1046
+auth_ecdsa		1047
+auth_psk		1048
+auth_dss		1049
+auth_gost01		1050
+auth_gost12		1051
+auth_srp		1052
+auth_null		1053
+fips_none		1054
+fips_140_2		1055
+blake2b512		1056
+blake2s256		1057
+id_smime_ct_contentCollection		1058
+id_smime_ct_authEnvelopedData		1059
+id_ct_xml		1060
+poly1305		1061
+siphash		1062
+kx_any		1063
+auth_any		1064
+aria_128_ecb		1065
+aria_128_cbc		1066
+aria_128_cfb128		1067
+aria_128_ofb128		1068
+aria_128_ctr		1069
+aria_192_ecb		1070
+aria_192_cbc		1071
+aria_192_cfb128		1072
+aria_192_ofb128		1073
+aria_192_ctr		1074
+aria_256_ecb		1075
+aria_256_cbc		1076
+aria_256_cfb128		1077
+aria_256_ofb128		1078
+aria_256_ctr		1079
+aria_128_cfb1		1080
+aria_192_cfb1		1081
+aria_256_cfb1		1082
+aria_128_cfb8		1083
+aria_192_cfb8		1084
+aria_256_cfb8		1085
+id_smime_aa_signingCertificateV2		1086
+ED25519		1087
+ED448		1088
+organizationIdentifier		1089
+countryCode3c		1090
+countryCode3n		1091
+dnsName		1092
+x509ExtAdmission		1093
+sha512_224		1094
+sha512_256		1095
+sha3_224		1096
+sha3_256		1097
+sha3_384		1098
+sha3_512		1099
+shake128		1100
+shake256		1101
+hmac_sha3_224		1102
+hmac_sha3_256		1103
+hmac_sha3_384		1104
+hmac_sha3_512		1105
+dsa_with_SHA384		1106
+dsa_with_SHA512		1107
+dsa_with_SHA3_224		1108
+dsa_with_SHA3_256		1109
+dsa_with_SHA3_384		1110
+dsa_with_SHA3_512		1111
+ecdsa_with_SHA3_224		1112
+ecdsa_with_SHA3_256		1113
+ecdsa_with_SHA3_384		1114
+ecdsa_with_SHA3_512		1115
+RSA_SHA3_224		1116
+RSA_SHA3_256		1117
+RSA_SHA3_384		1118
+RSA_SHA3_512		1119
+aria_128_ccm		1120
+aria_192_ccm		1121
+aria_256_ccm		1122
+aria_128_gcm		1123
+aria_192_gcm		1124
+aria_256_gcm		1125
+ffdhe2048		1126
+ffdhe3072		1127
+ffdhe4096		1128
+ffdhe6144		1129
+ffdhe8192		1130
+cmcCA		1131
+cmcRA		1132
+sm4_ecb		1133
+sm4_cbc		1134
+sm4_ofb128		1135
+sm4_cfb1		1136
+sm4_cfb128		1137
+sm4_cfb8		1138
+sm4_ctr		1139
+ISO_CN		1140
+oscca		1141
+sm_scheme		1142
+sm3		1143
+sm3WithRSAEncryption		1144
+sha512_224WithRSAEncryption		1145
+sha512_256WithRSAEncryption		1146
+id_tc26_gost_3410_2012_256_constants		1147
+id_tc26_gost_3410_2012_256_paramSetA		1148
+id_tc26_gost_3410_2012_512_paramSetC		1149
+ISO_UA		1150
+ua_pki		1151
+dstu28147		1152
+dstu28147_ofb		1153
+dstu28147_cfb		1154
+dstu28147_wrap		1155
+hmacWithDstu34311		1156
+dstu34311		1157
+dstu4145le		1158
+dstu4145be		1159
+uacurve0		1160
+uacurve1		1161
+uacurve2		1162
+uacurve3		1163
+uacurve4		1164
+uacurve5		1165
+uacurve6		1166
+uacurve7		1167
+uacurve8		1168
+uacurve9		1169
+ieee		1170
+ieee_siswg		1171
+sm2		1172
+id_tc26_cipher_gostr3412_2015_magma		1173
+id_tc26_cipher_gostr3412_2015_magma_ctracpkm		1174
+id_tc26_cipher_gostr3412_2015_magma_ctracpkm_omac		1175
+id_tc26_cipher_gostr3412_2015_kuznyechik		1176
+id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm		1177
+id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm_omac		1178
+id_tc26_wrap		1179
+id_tc26_wrap_gostr3412_2015_magma		1180
+id_tc26_wrap_gostr3412_2015_magma_kexp15		1181
+id_tc26_wrap_gostr3412_2015_kuznyechik		1182
+id_tc26_wrap_gostr3412_2015_kuznyechik_kexp15		1183
+id_tc26_gost_3410_2012_256_paramSetB		1184
+id_tc26_gost_3410_2012_256_paramSetC		1185
+id_tc26_gost_3410_2012_256_paramSetD		1186
+magma_ecb		1187
+magma_ctr		1188
+magma_ofb		1189
+magma_cbc		1190
+magma_cfb		1191
+magma_mac		1192
+hmacWithSHA512_224		1193
+hmacWithSHA512_256		1194
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_xref.c b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_xref.c
new file mode 100644
index 000000000..faf59eb20
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_xref.c
@@ -0,0 +1,139 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/objects.h>
+#include "obj_xref.h"
+#include "internal/nelem.h"
+#include <openssl/err.h>
+
+static STACK_OF(nid_triple) *sig_app, *sigx_app;
+
+static int sig_cmp(const nid_triple *a, const nid_triple *b)
+{
+    return a->sign_id - b->sign_id;
+}
+
+DECLARE_OBJ_BSEARCH_CMP_FN(nid_triple, nid_triple, sig);
+IMPLEMENT_OBJ_BSEARCH_CMP_FN(nid_triple, nid_triple, sig);
+
+static int sig_sk_cmp(const nid_triple *const *a, const nid_triple *const *b)
+{
+    return (*a)->sign_id - (*b)->sign_id;
+}
+
+DECLARE_OBJ_BSEARCH_CMP_FN(const nid_triple *, const nid_triple *, sigx);
+
+static int sigx_cmp(const nid_triple *const *a, const nid_triple *const *b)
+{
+    int ret;
+    ret = (*a)->hash_id - (*b)->hash_id;
+    if (ret)
+        return ret;
+    return (*a)->pkey_id - (*b)->pkey_id;
+}
+
+IMPLEMENT_OBJ_BSEARCH_CMP_FN(const nid_triple *, const nid_triple *, sigx);
+
+int OBJ_find_sigid_algs(int signid, int *pdig_nid, int *ppkey_nid)
+{
+    nid_triple tmp;
+    const nid_triple *rv = NULL;
+    tmp.sign_id = signid;
+
+    if (sig_app != NULL) {
+        int idx = sk_nid_triple_find(sig_app, &tmp);
+        rv = sk_nid_triple_value(sig_app, idx);
+    }
+#ifndef OBJ_XREF_TEST2
+    if (rv == NULL) {
+        rv = OBJ_bsearch_sig(&tmp, sigoid_srt, OSSL_NELEM(sigoid_srt));
+    }
+#endif
+    if (rv == NULL)
+        return 0;
+    if (pdig_nid)
+        *pdig_nid = rv->hash_id;
+    if (ppkey_nid)
+        *ppkey_nid = rv->pkey_id;
+    return 1;
+}
+
+int OBJ_find_sigid_by_algs(int *psignid, int dig_nid, int pkey_nid)
+{
+    nid_triple tmp;
+    const nid_triple *t = &tmp;
+    const nid_triple **rv = NULL;
+
+    tmp.hash_id = dig_nid;
+    tmp.pkey_id = pkey_nid;
+
+    if (sigx_app) {
+        int idx = sk_nid_triple_find(sigx_app, &tmp);
+        if (idx >= 0) {
+            t = sk_nid_triple_value(sigx_app, idx);
+            rv = &t;
+        }
+    }
+#ifndef OBJ_XREF_TEST2
+    if (rv == NULL) {
+        rv = OBJ_bsearch_sigx(&t, sigoid_srt_xref, OSSL_NELEM(sigoid_srt_xref));
+    }
+#endif
+    if (rv == NULL)
+        return 0;
+    if (psignid)
+        *psignid = (*rv)->sign_id;
+    return 1;
+}
+
+int OBJ_add_sigid(int signid, int dig_id, int pkey_id)
+{
+    nid_triple *ntr;
+    if (sig_app == NULL)
+        sig_app = sk_nid_triple_new(sig_sk_cmp);
+    if (sig_app == NULL)
+        return 0;
+    if (sigx_app == NULL)
+        sigx_app = sk_nid_triple_new(sigx_cmp);
+    if (sigx_app == NULL)
+        return 0;
+    if ((ntr = OPENSSL_malloc(sizeof(*ntr))) == NULL) {
+        OBJerr(OBJ_F_OBJ_ADD_SIGID, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ntr->sign_id = signid;
+    ntr->hash_id = dig_id;
+    ntr->pkey_id = pkey_id;
+
+    if (!sk_nid_triple_push(sig_app, ntr)) {
+        OPENSSL_free(ntr);
+        return 0;
+    }
+
+    if (!sk_nid_triple_push(sigx_app, ntr))
+        return 0;
+
+    sk_nid_triple_sort(sig_app);
+    sk_nid_triple_sort(sigx_app);
+
+    return 1;
+}
+
+static void sid_free(nid_triple *tt)
+{
+    OPENSSL_free(tt);
+}
+
+void OBJ_sigid_free(void)
+{
+    sk_nid_triple_pop_free(sig_app, sid_free);
+    sig_app = NULL;
+    sk_nid_triple_free(sigx_app);
+    sigx_app = NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_xref.h b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_xref.h
new file mode 100644
index 000000000..9144d569d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_xref.h
@@ -0,0 +1,128 @@
+/*
+ * WARNING: do not edit!
+ * Generated by objxref.pl
+ *
+ * Copyright 1998-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+
+typedef struct {
+    int sign_id;
+    int hash_id;
+    int pkey_id;
+} nid_triple;
+
+DEFINE_STACK_OF(nid_triple)
+
+static const nid_triple sigoid_srt[] = {
+    {NID_md2WithRSAEncryption, NID_md2, NID_rsaEncryption},
+    {NID_md5WithRSAEncryption, NID_md5, NID_rsaEncryption},
+    {NID_shaWithRSAEncryption, NID_sha, NID_rsaEncryption},
+    {NID_sha1WithRSAEncryption, NID_sha1, NID_rsaEncryption},
+    {NID_dsaWithSHA, NID_sha, NID_dsa},
+    {NID_dsaWithSHA1_2, NID_sha1, NID_dsa_2},
+    {NID_mdc2WithRSA, NID_mdc2, NID_rsaEncryption},
+    {NID_md5WithRSA, NID_md5, NID_rsa},
+    {NID_dsaWithSHA1, NID_sha1, NID_dsa},
+    {NID_sha1WithRSA, NID_sha1, NID_rsa},
+    {NID_ripemd160WithRSA, NID_ripemd160, NID_rsaEncryption},
+    {NID_md4WithRSAEncryption, NID_md4, NID_rsaEncryption},
+    {NID_ecdsa_with_SHA1, NID_sha1, NID_X9_62_id_ecPublicKey},
+    {NID_sha256WithRSAEncryption, NID_sha256, NID_rsaEncryption},
+    {NID_sha384WithRSAEncryption, NID_sha384, NID_rsaEncryption},
+    {NID_sha512WithRSAEncryption, NID_sha512, NID_rsaEncryption},
+    {NID_sha224WithRSAEncryption, NID_sha224, NID_rsaEncryption},
+    {NID_ecdsa_with_Recommended, NID_undef, NID_X9_62_id_ecPublicKey},
+    {NID_ecdsa_with_Specified, NID_undef, NID_X9_62_id_ecPublicKey},
+    {NID_ecdsa_with_SHA224, NID_sha224, NID_X9_62_id_ecPublicKey},
+    {NID_ecdsa_with_SHA256, NID_sha256, NID_X9_62_id_ecPublicKey},
+    {NID_ecdsa_with_SHA384, NID_sha384, NID_X9_62_id_ecPublicKey},
+    {NID_ecdsa_with_SHA512, NID_sha512, NID_X9_62_id_ecPublicKey},
+    {NID_dsa_with_SHA224, NID_sha224, NID_dsa},
+    {NID_dsa_with_SHA256, NID_sha256, NID_dsa},
+    {NID_id_GostR3411_94_with_GostR3410_2001, NID_id_GostR3411_94,
+     NID_id_GostR3410_2001},
+    {NID_id_GostR3411_94_with_GostR3410_94, NID_id_GostR3411_94,
+     NID_id_GostR3410_94},
+    {NID_id_GostR3411_94_with_GostR3410_94_cc, NID_id_GostR3411_94,
+     NID_id_GostR3410_94_cc},
+    {NID_id_GostR3411_94_with_GostR3410_2001_cc, NID_id_GostR3411_94,
+     NID_id_GostR3410_2001_cc},
+    {NID_rsassaPss, NID_undef, NID_rsaEncryption},
+    {NID_dhSinglePass_stdDH_sha1kdf_scheme, NID_sha1, NID_dh_std_kdf},
+    {NID_dhSinglePass_stdDH_sha224kdf_scheme, NID_sha224, NID_dh_std_kdf},
+    {NID_dhSinglePass_stdDH_sha256kdf_scheme, NID_sha256, NID_dh_std_kdf},
+    {NID_dhSinglePass_stdDH_sha384kdf_scheme, NID_sha384, NID_dh_std_kdf},
+    {NID_dhSinglePass_stdDH_sha512kdf_scheme, NID_sha512, NID_dh_std_kdf},
+    {NID_dhSinglePass_cofactorDH_sha1kdf_scheme, NID_sha1,
+     NID_dh_cofactor_kdf},
+    {NID_dhSinglePass_cofactorDH_sha224kdf_scheme, NID_sha224,
+     NID_dh_cofactor_kdf},
+    {NID_dhSinglePass_cofactorDH_sha256kdf_scheme, NID_sha256,
+     NID_dh_cofactor_kdf},
+    {NID_dhSinglePass_cofactorDH_sha384kdf_scheme, NID_sha384,
+     NID_dh_cofactor_kdf},
+    {NID_dhSinglePass_cofactorDH_sha512kdf_scheme, NID_sha512,
+     NID_dh_cofactor_kdf},
+    {NID_id_tc26_signwithdigest_gost3410_2012_256, NID_id_GostR3411_2012_256,
+     NID_id_GostR3410_2012_256},
+    {NID_id_tc26_signwithdigest_gost3410_2012_512, NID_id_GostR3411_2012_512,
+     NID_id_GostR3410_2012_512},
+    {NID_ED25519, NID_undef, NID_ED25519},
+    {NID_ED448, NID_undef, NID_ED448},
+    {NID_RSA_SHA3_224, NID_sha3_224, NID_rsaEncryption},
+    {NID_RSA_SHA3_256, NID_sha3_256, NID_rsaEncryption},
+    {NID_RSA_SHA3_384, NID_sha3_384, NID_rsaEncryption},
+    {NID_RSA_SHA3_512, NID_sha3_512, NID_rsaEncryption},
+};
+
+static const nid_triple *const sigoid_srt_xref[] = {
+    &sigoid_srt[0],
+    &sigoid_srt[1],
+    &sigoid_srt[7],
+    &sigoid_srt[2],
+    &sigoid_srt[4],
+    &sigoid_srt[3],
+    &sigoid_srt[9],
+    &sigoid_srt[5],
+    &sigoid_srt[8],
+    &sigoid_srt[12],
+    &sigoid_srt[30],
+    &sigoid_srt[35],
+    &sigoid_srt[6],
+    &sigoid_srt[10],
+    &sigoid_srt[11],
+    &sigoid_srt[13],
+    &sigoid_srt[24],
+    &sigoid_srt[20],
+    &sigoid_srt[32],
+    &sigoid_srt[37],
+    &sigoid_srt[14],
+    &sigoid_srt[21],
+    &sigoid_srt[33],
+    &sigoid_srt[38],
+    &sigoid_srt[15],
+    &sigoid_srt[22],
+    &sigoid_srt[34],
+    &sigoid_srt[39],
+    &sigoid_srt[16],
+    &sigoid_srt[23],
+    &sigoid_srt[19],
+    &sigoid_srt[31],
+    &sigoid_srt[36],
+    &sigoid_srt[25],
+    &sigoid_srt[26],
+    &sigoid_srt[27],
+    &sigoid_srt[28],
+    &sigoid_srt[40],
+    &sigoid_srt[41],
+    &sigoid_srt[44],
+    &sigoid_srt[45],
+    &sigoid_srt[46],
+    &sigoid_srt[47],
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_xref.txt b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_xref.txt
new file mode 100644
index 000000000..ca3e74461
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/obj_xref.txt
@@ -0,0 +1,66 @@
+# OID cross reference table.
+# Links signatures OIDs to their corresponding public key algorithms
+# and digests.
+
+md2WithRSAEncryption	md2	rsaEncryption
+md5WithRSAEncryption	md5	rsaEncryption
+shaWithRSAEncryption	sha	rsaEncryption
+sha1WithRSAEncryption	sha1	rsaEncryption
+md4WithRSAEncryption	md4	rsaEncryption
+sha256WithRSAEncryption sha256	rsaEncryption
+sha384WithRSAEncryption	sha384	rsaEncryption
+sha512WithRSAEncryption	sha512	rsaEncryption
+sha224WithRSAEncryption	sha224	rsaEncryption
+mdc2WithRSA		mdc2	rsaEncryption
+ripemd160WithRSA	ripemd160 rsaEncryption
+RSA_SHA3_224		sha3_224 rsaEncryption
+RSA_SHA3_256		sha3_256 rsaEncryption
+RSA_SHA3_384		sha3_384 rsaEncryption
+RSA_SHA3_512		sha3_512 rsaEncryption
+# For PSS the digest algorithm can vary and depends on the included
+# AlgorithmIdentifier. The digest "undef" indicates the public key
+# method should handle this explicitly.
+rsassaPss		undef	rsaEncryption
+ED25519		    undef	ED25519
+ED448		    undef	ED448
+
+# Alternative deprecated OIDs. By using the older "rsa" OID this
+# type will be recognized by not normally used.
+
+md5WithRSA		md5	rsa
+sha1WithRSA		sha1	rsa
+
+dsaWithSHA		sha	dsa
+dsaWithSHA1		sha1	dsa
+
+dsaWithSHA1_2		sha1	dsa_2
+
+ecdsa_with_SHA1		sha1	X9_62_id_ecPublicKey
+ecdsa_with_SHA224	sha224	X9_62_id_ecPublicKey
+ecdsa_with_SHA256	sha256	X9_62_id_ecPublicKey
+ecdsa_with_SHA384	sha384	X9_62_id_ecPublicKey
+ecdsa_with_SHA512	sha512	X9_62_id_ecPublicKey
+ecdsa_with_Recommended	undef	X9_62_id_ecPublicKey
+ecdsa_with_Specified	undef	X9_62_id_ecPublicKey
+
+dsa_with_SHA224		sha224	dsa
+dsa_with_SHA256		sha256	dsa
+
+id_GostR3411_94_with_GostR3410_2001	id_GostR3411_94 id_GostR3410_2001
+id_GostR3411_94_with_GostR3410_94	id_GostR3411_94 id_GostR3410_94
+id_GostR3411_94_with_GostR3410_94_cc	id_GostR3411_94 id_GostR3410_94_cc
+id_GostR3411_94_with_GostR3410_2001_cc	id_GostR3411_94 id_GostR3410_2001_cc
+id_tc26_signwithdigest_gost3410_2012_256 id_GostR3411_2012_256 id_GostR3410_2012_256
+id_tc26_signwithdigest_gost3410_2012_512 id_GostR3411_2012_512 id_GostR3410_2012_512
+# ECDH KDFs and their corresponding message digests and schemes
+dhSinglePass_stdDH_sha1kdf_scheme		sha1	dh_std_kdf
+dhSinglePass_stdDH_sha224kdf_scheme		sha224	dh_std_kdf
+dhSinglePass_stdDH_sha256kdf_scheme		sha256	dh_std_kdf
+dhSinglePass_stdDH_sha384kdf_scheme		sha384	dh_std_kdf
+dhSinglePass_stdDH_sha512kdf_scheme		sha512	dh_std_kdf
+
+dhSinglePass_cofactorDH_sha1kdf_scheme		sha1	dh_cofactor_kdf
+dhSinglePass_cofactorDH_sha224kdf_scheme	sha224	dh_cofactor_kdf
+dhSinglePass_cofactorDH_sha256kdf_scheme	sha256	dh_cofactor_kdf
+dhSinglePass_cofactorDH_sha384kdf_scheme	sha384	dh_cofactor_kdf
+dhSinglePass_cofactorDH_sha512kdf_scheme	sha512	dh_cofactor_kdf
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/objects/objects.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/objects.pl
new file mode 100644
index 000000000..d7d1962c9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/objects.pl
@@ -0,0 +1,203 @@
+#! /usr/bin/env perl
+# Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use Getopt::Std;
+
+our($opt_n);
+getopts('n');
+
+# Output year depends on the year of the script and the input file.
+my $YEAR = [localtime([stat($0)]->[9])]->[5] + 1900;
+my $iYEAR = [localtime([stat($ARGV[0])]->[9])]->[5] + 1900;
+$YEAR = $iYEAR if $iYEAR > $YEAR;
+$iYEAR = [localtime([stat($ARGV[1])]->[9])]->[5] + 1900;
+$YEAR = $iYEAR if $iYEAR > $YEAR;
+
+open (NUMIN,"$ARGV[1]") || die "Can't open number file $ARGV[1]";
+$max_nid=0;
+$o=0;
+while(<NUMIN>)
+	{
+	s|\R$||;
+	$o++;
+	s/#.*$//;
+	next if /^\s*$/;
+	$_ = 'X'.$_;
+	($Cname,$mynum) = split;
+	$Cname =~ s/^X//;
+	if (defined($nidn{$mynum}))
+		{ die "$ARGV[1]:$o:There's already an object with NID ",$mynum," on line ",$order{$mynum},"\n"; }
+	if (defined($nid{$Cname}))
+		{ die "$ARGV[1]:$o:There's already an object with name ",$Cname," on line ",$order{$nid{$Cname}},"\n"; }
+	$nid{$Cname} = $mynum;
+	$nidn{$mynum} = $Cname;
+	$order{$mynum} = $o;
+	$max_nid = $mynum if $mynum > $max_nid;
+	}
+close NUMIN;
+
+open (IN,"$ARGV[0]") || die "Can't open input file $ARGV[0]";
+$Cname="";
+$o=0;
+while (<IN>)
+	{
+	s|\R$||;
+	$o++;
+        if (/^!module\s+(.*)$/)
+		{
+		$module = $1."-";
+		$module =~ s/\./_/g;
+		$module =~ s/-/_/g;
+		}
+        if (/^!global$/)
+		{ $module = ""; }
+	if (/^!Cname\s+(.*)$/)
+		{ $Cname = $1; }
+	if (/^!Alias\s+(.+?)\s+(.*)$/)
+		{
+		$Cname = $module.$1;
+		$myoid = $2;
+		$myoid = &process_oid($myoid);
+		$Cname =~ s/-/_/g;
+		$ordern{$o} = $Cname;
+		$order{$Cname} = $o;
+		$obj{$Cname} = $myoid;
+		$_ = "";
+		$Cname = "";
+		}
+	s/!.*$//;
+	s/#.*$//;
+	next if /^\s*$/;
+	($myoid,$mysn,$myln) = split ':';
+	$mysn =~ s/^\s*//;
+	$mysn =~ s/\s*$//;
+	$myln =~ s/^\s*//;
+	$myln =~ s/\s*$//;
+	$myoid =~ s/^\s*//;
+	$myoid =~ s/\s*$//;
+	if ($myoid ne "")
+		{
+		$myoid = &process_oid($myoid);
+		}
+
+	if ($Cname eq "" && ($myln =~ /^[_A-Za-z][\w.-]*$/ ))
+		{
+		$Cname = $myln;
+		$Cname =~ s/\./_/g;
+		$Cname =~ s/-/_/g;
+		if ($Cname ne "" && defined($ln{$module.$Cname}))
+			{ die "objects.txt:$o:There's already an object with long name ",$ln{$module.$Cname}," on line ",$order{$module.$Cname},"\n"; }
+		}
+	if ($Cname eq "")
+		{
+		$Cname = $mysn;
+		$Cname =~ s/-/_/g;
+		if ($Cname ne "" && defined($sn{$module.$Cname}))
+			{ die "objects.txt:$o:There's already an object with short name ",$sn{$module.$Cname}," on line ",$order{$module.$Cname},"\n"; }
+		}
+	if ($Cname eq "")
+		{
+		$Cname = $myln;
+		$Cname =~ s/-/_/g;
+		$Cname =~ s/\./_/g;
+		$Cname =~ s/ /_/g;
+		if ($Cname ne "" && defined($ln{$module.$Cname}))
+			{ die "objects.txt:$o:There's already an object with long name ",$ln{$module.$Cname}," on line ",$order{$module.$Cname},"\n"; }
+		}
+	$Cname =~ s/\./_/g;
+	$Cname =~ s/-/_/g;
+	$Cname = $module.$Cname;
+	$ordern{$o} = $Cname;
+	$order{$Cname} = $o;
+	$sn{$Cname} = $mysn;
+	$ln{$Cname} = $myln;
+	$obj{$Cname} = $myoid;
+	if (!defined($nid{$Cname}))
+		{
+		$max_nid++;
+		$nid{$Cname} = $max_nid;
+		$nidn{$max_nid} = $Cname;
+print STDERR "Added OID $Cname\n";
+		}
+	$Cname="";
+	}
+close IN;
+
+if ( $opt_n ) {
+    foreach (sort { $a <=> $b } keys %nidn)
+            {
+            print $nidn{$_},"\t\t",$_,"\n";
+            }
+    exit;
+}
+
+print <<"EOF";
+/*
+ * WARNING: do not edit!
+ * Generated by crypto/objects/objects.pl
+ *
+ * Copyright 2000-$YEAR The OpenSSL Project Authors. All Rights Reserved.
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#define SN_undef                        "UNDEF"
+#define LN_undef                        "undefined"
+#define NID_undef                       0
+#define OBJ_undef                       0L
+EOF
+
+sub expand
+	{
+	my $string = shift;
+
+	1 while $string =~ s/\t+/' ' x (length($&) * 8 - length($`) % 8)/e;
+
+	return $string;
+	}
+
+foreach (sort { $a <=> $b } keys %ordern)
+	{
+	$Cname=$ordern{$_};
+	print "\n";
+	print expand("#define SN_$Cname\t\t\"$sn{$Cname}\"\n") if $sn{$Cname} ne "";
+	print expand("#define LN_$Cname\t\t\"$ln{$Cname}\"\n") if $ln{$Cname} ne "";
+	print expand("#define NID_$Cname\t\t$nid{$Cname}\n") if $nid{$Cname} ne "";
+	print expand("#define OBJ_$Cname\t\t$obj{$Cname}\n") if $obj{$Cname} ne "";
+	}
+
+sub process_oid
+	{
+	local($oid)=@_;
+	local(@a,$oid_pref);
+
+	@a = split(/\s+/,$myoid);
+	$pref_oid = "";
+	$pref_sep = "";
+	if (!($a[0] =~ /^[0-9]+$/))
+		{
+		$a[0] =~ s/-/_/g;
+		if (!defined($obj{$a[0]}))
+			{ die "$ARGV[0]:$o:Undefined identifier ",$a[0],"\n"; }
+		$pref_oid = "OBJ_" . $a[0];
+		$pref_sep = ",";
+		shift @a;
+		}
+	$oids = join('L,',@a) . "L";
+	if ($oids ne "L")
+		{
+		$oids = $pref_oid . $pref_sep . $oids;
+		}
+	else
+		{
+		$oids = $pref_oid;
+		}
+	return($oids);
+	}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/objects/objects.txt b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/objects.txt
new file mode 100644
index 000000000..6dbc41ce3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/objects.txt
@@ -0,0 +1,1677 @@
+# CCITT was renamed to ITU-T quite some time ago
+0			: ITU-T			: itu-t
+!Alias ccitt itu-t
+
+1			: ISO			: iso
+
+2			: JOINT-ISO-ITU-T	: joint-iso-itu-t
+!Alias joint-iso-ccitt joint-iso-itu-t
+
+iso 2			: member-body		: ISO Member Body
+
+iso 3			: identified-organization
+
+# HMAC OIDs
+identified-organization 6 1 5 5 8 1 1	: HMAC-MD5	: hmac-md5
+identified-organization 6 1 5 5 8 1 2	: HMAC-SHA1	: hmac-sha1
+
+# "1.3.36.8.3.3"
+identified-organization 36 8 3 3	: x509ExtAdmission	: Professional Information or basis for Admission
+
+identified-organization 132	: certicom-arc
+
+identified-organization 111     : ieee
+ieee 2 1619                     : ieee-siswg    : IEEE Security in Storage Working Group
+
+joint-iso-itu-t 23	: international-organizations	: International Organizations
+
+international-organizations 43	: wap
+wap 1			: wap-wsg
+
+joint-iso-itu-t 5 1 5	: selected-attribute-types	: Selected Attribute Types
+
+selected-attribute-types 55	: clearance
+
+member-body 840		: ISO-US		: ISO US Member Body
+ISO-US 10040		: X9-57			: X9.57
+X9-57 4			: X9cm			: X9.57 CM ?
+
+member-body 156         : ISO-CN        : ISO CN Member Body
+ISO-CN 10197            : oscca
+oscca 1                 : sm-scheme
+
+!Cname dsa
+X9cm 1			: DSA			: dsaEncryption
+X9cm 3			: DSA-SHA1		: dsaWithSHA1
+
+
+ISO-US 10045		: ansi-X9-62		: ANSI X9.62
+!module X9-62
+!Alias id-fieldType ansi-X9-62 1
+X9-62_id-fieldType 1		: prime-field
+X9-62_id-fieldType 2		: characteristic-two-field
+X9-62_characteristic-two-field 3 : id-characteristic-two-basis
+X9-62_id-characteristic-two-basis 1 : onBasis
+X9-62_id-characteristic-two-basis 2 : tpBasis
+X9-62_id-characteristic-two-basis 3 : ppBasis
+!Alias id-publicKeyType ansi-X9-62 2
+X9-62_id-publicKeyType 1	: id-ecPublicKey
+!Alias ellipticCurve ansi-X9-62 3
+!Alias c-TwoCurve X9-62_ellipticCurve 0
+X9-62_c-TwoCurve 1		: c2pnb163v1
+X9-62_c-TwoCurve 2		: c2pnb163v2
+X9-62_c-TwoCurve 3		: c2pnb163v3
+X9-62_c-TwoCurve 4		: c2pnb176v1
+X9-62_c-TwoCurve 5		: c2tnb191v1
+X9-62_c-TwoCurve 6		: c2tnb191v2
+X9-62_c-TwoCurve 7		: c2tnb191v3
+X9-62_c-TwoCurve 8		: c2onb191v4
+X9-62_c-TwoCurve 9		: c2onb191v5
+X9-62_c-TwoCurve 10		: c2pnb208w1
+X9-62_c-TwoCurve 11		: c2tnb239v1
+X9-62_c-TwoCurve 12		: c2tnb239v2
+X9-62_c-TwoCurve 13		: c2tnb239v3
+X9-62_c-TwoCurve 14		: c2onb239v4
+X9-62_c-TwoCurve 15		: c2onb239v5
+X9-62_c-TwoCurve 16		: c2pnb272w1
+X9-62_c-TwoCurve 17		: c2pnb304w1
+X9-62_c-TwoCurve 18		: c2tnb359v1
+X9-62_c-TwoCurve 19		: c2pnb368w1
+X9-62_c-TwoCurve 20		: c2tnb431r1
+!Alias primeCurve X9-62_ellipticCurve 1
+X9-62_primeCurve 1	 	: prime192v1
+X9-62_primeCurve 2	 	: prime192v2
+X9-62_primeCurve 3	 	: prime192v3
+X9-62_primeCurve 4	 	: prime239v1
+X9-62_primeCurve 5	 	: prime239v2
+X9-62_primeCurve 6	 	: prime239v3
+X9-62_primeCurve 7	 	: prime256v1
+!Alias id-ecSigType ansi-X9-62 4
+!global
+X9-62_id-ecSigType 1		: ecdsa-with-SHA1
+X9-62_id-ecSigType 2		: ecdsa-with-Recommended
+X9-62_id-ecSigType 3		: ecdsa-with-Specified
+ecdsa-with-Specified 1		: ecdsa-with-SHA224
+ecdsa-with-Specified 2		: ecdsa-with-SHA256
+ecdsa-with-Specified 3		: ecdsa-with-SHA384
+ecdsa-with-Specified 4		: ecdsa-with-SHA512
+
+# SECG curve OIDs from "SEC 2: Recommended Elliptic Curve Domain Parameters"
+# (http://www.secg.org/)
+!Alias secg_ellipticCurve certicom-arc 0
+# SECG prime curves OIDs
+secg-ellipticCurve 6		: secp112r1
+secg-ellipticCurve 7		: secp112r2
+secg-ellipticCurve 28		: secp128r1
+secg-ellipticCurve 29		: secp128r2
+secg-ellipticCurve 9		: secp160k1
+secg-ellipticCurve 8		: secp160r1
+secg-ellipticCurve 30		: secp160r2
+secg-ellipticCurve 31		: secp192k1
+# NOTE: the curve secp192r1 is the same as prime192v1 defined above
+#       and is therefore omitted
+secg-ellipticCurve 32		: secp224k1
+secg-ellipticCurve 33		: secp224r1
+secg-ellipticCurve 10		: secp256k1
+# NOTE: the curve secp256r1 is the same as prime256v1 defined above
+#       and is therefore omitted
+secg-ellipticCurve 34		: secp384r1
+secg-ellipticCurve 35		: secp521r1
+# SECG characteristic two curves OIDs
+secg-ellipticCurve 4		: sect113r1
+secg-ellipticCurve 5		: sect113r2
+secg-ellipticCurve 22		: sect131r1
+secg-ellipticCurve 23		: sect131r2
+secg-ellipticCurve 1		: sect163k1
+secg-ellipticCurve 2		: sect163r1
+secg-ellipticCurve 15		: sect163r2
+secg-ellipticCurve 24		: sect193r1
+secg-ellipticCurve 25		: sect193r2
+secg-ellipticCurve 26		: sect233k1
+secg-ellipticCurve 27		: sect233r1
+secg-ellipticCurve 3		: sect239k1
+secg-ellipticCurve 16		: sect283k1
+secg-ellipticCurve 17		: sect283r1
+secg-ellipticCurve 36		: sect409k1
+secg-ellipticCurve 37		: sect409r1
+secg-ellipticCurve 38		: sect571k1
+secg-ellipticCurve 39		: sect571r1
+
+# WAP/TLS curve OIDs (http://www.wapforum.org/)
+!Alias wap-wsg-idm-ecid wap-wsg 4
+wap-wsg-idm-ecid 1	: wap-wsg-idm-ecid-wtls1
+wap-wsg-idm-ecid 3	: wap-wsg-idm-ecid-wtls3
+wap-wsg-idm-ecid 4	: wap-wsg-idm-ecid-wtls4
+wap-wsg-idm-ecid 5	: wap-wsg-idm-ecid-wtls5
+wap-wsg-idm-ecid 6	: wap-wsg-idm-ecid-wtls6
+wap-wsg-idm-ecid 7	: wap-wsg-idm-ecid-wtls7
+wap-wsg-idm-ecid 8	: wap-wsg-idm-ecid-wtls8
+wap-wsg-idm-ecid 9	: wap-wsg-idm-ecid-wtls9
+wap-wsg-idm-ecid 10	: wap-wsg-idm-ecid-wtls10
+wap-wsg-idm-ecid 11	: wap-wsg-idm-ecid-wtls11
+wap-wsg-idm-ecid 12	: wap-wsg-idm-ecid-wtls12
+
+
+ISO-US 113533 7 66 10	: CAST5-CBC		: cast5-cbc
+			: CAST5-ECB		: cast5-ecb
+!Cname cast5-cfb64
+			: CAST5-CFB		: cast5-cfb
+!Cname cast5-ofb64
+			: CAST5-OFB		: cast5-ofb
+!Cname pbeWithMD5AndCast5-CBC
+ISO-US 113533 7 66 12	:			: pbeWithMD5AndCast5CBC
+
+# Macs for CMP and CRMF
+ISO-US 113533 7 66 13	: id-PasswordBasedMAC	: password based MAC
+ISO-US 113533 7 66 30	: id-DHBasedMac		: Diffie-Hellman based MAC
+
+ISO-US 113549		: rsadsi		: RSA Data Security, Inc.
+
+rsadsi 1		: pkcs			: RSA Data Security, Inc. PKCS
+
+pkcs 1			: pkcs1
+pkcs1 1			:			: rsaEncryption
+pkcs1 2			: RSA-MD2		: md2WithRSAEncryption
+pkcs1 3			: RSA-MD4		: md4WithRSAEncryption
+pkcs1 4			: RSA-MD5		: md5WithRSAEncryption
+pkcs1 5			: RSA-SHA1		: sha1WithRSAEncryption
+# According to PKCS #1 version 2.1
+pkcs1 7			: RSAES-OAEP		: rsaesOaep
+pkcs1 8			: MGF1			: mgf1
+pkcs1 9			: PSPECIFIED		: pSpecified
+pkcs1 10		: RSASSA-PSS		: rsassaPss
+
+pkcs1 11		: RSA-SHA256		: sha256WithRSAEncryption
+pkcs1 12		: RSA-SHA384		: sha384WithRSAEncryption
+pkcs1 13		: RSA-SHA512		: sha512WithRSAEncryption
+pkcs1 14		: RSA-SHA224		: sha224WithRSAEncryption
+pkcs1 15		: RSA-SHA512/224	: sha512-224WithRSAEncryption
+pkcs1 16		: RSA-SHA512/256	: sha512-256WithRSAEncryption
+
+pkcs 3			: pkcs3
+pkcs3 1			:			: dhKeyAgreement
+
+pkcs 5			: pkcs5
+pkcs5 1			: PBE-MD2-DES		: pbeWithMD2AndDES-CBC
+pkcs5 3			: PBE-MD5-DES		: pbeWithMD5AndDES-CBC
+pkcs5 4			: PBE-MD2-RC2-64	: pbeWithMD2AndRC2-CBC
+pkcs5 6			: PBE-MD5-RC2-64	: pbeWithMD5AndRC2-CBC
+pkcs5 10		: PBE-SHA1-DES		: pbeWithSHA1AndDES-CBC
+pkcs5 11		: PBE-SHA1-RC2-64	: pbeWithSHA1AndRC2-CBC
+!Cname id_pbkdf2
+pkcs5 12		:			: PBKDF2
+!Cname pbes2
+pkcs5 13		:			: PBES2
+!Cname pbmac1
+pkcs5 14		:			: PBMAC1
+
+pkcs 7			: pkcs7
+pkcs7 1			:			: pkcs7-data
+!Cname pkcs7-signed
+pkcs7 2			:			: pkcs7-signedData
+!Cname pkcs7-enveloped
+pkcs7 3			:			: pkcs7-envelopedData
+!Cname pkcs7-signedAndEnveloped
+pkcs7 4			:			: pkcs7-signedAndEnvelopedData
+!Cname pkcs7-digest
+pkcs7 5			:			: pkcs7-digestData
+!Cname pkcs7-encrypted
+pkcs7 6			:			: pkcs7-encryptedData
+
+pkcs 9			: pkcs9
+!module pkcs9
+pkcs9 1			: 			: emailAddress
+pkcs9 2			:			: unstructuredName
+pkcs9 3			:			: contentType
+pkcs9 4			:			: messageDigest
+pkcs9 5			:			: signingTime
+pkcs9 6			:			: countersignature
+pkcs9 7			:			: challengePassword
+pkcs9 8			:			: unstructuredAddress
+!Cname extCertAttributes
+pkcs9 9			:			: extendedCertificateAttributes
+!global
+
+!Cname ext-req
+pkcs9 14		: extReq		: Extension Request
+
+!Cname SMIMECapabilities
+pkcs9 15		: SMIME-CAPS		: S/MIME Capabilities
+
+# S/MIME
+!Cname SMIME
+pkcs9 16		: SMIME			: S/MIME
+SMIME 0			: id-smime-mod
+SMIME 1			: id-smime-ct
+SMIME 2			: id-smime-aa
+SMIME 3			: id-smime-alg
+SMIME 4			: id-smime-cd
+SMIME 5			: id-smime-spq
+SMIME 6			: id-smime-cti
+
+# S/MIME Modules
+id-smime-mod 1		: id-smime-mod-cms
+id-smime-mod 2		: id-smime-mod-ess
+id-smime-mod 3		: id-smime-mod-oid
+id-smime-mod 4		: id-smime-mod-msg-v3
+id-smime-mod 5		: id-smime-mod-ets-eSignature-88
+id-smime-mod 6		: id-smime-mod-ets-eSignature-97
+id-smime-mod 7		: id-smime-mod-ets-eSigPolicy-88
+id-smime-mod 8		: id-smime-mod-ets-eSigPolicy-97
+
+# S/MIME Content Types
+id-smime-ct 1		: id-smime-ct-receipt
+id-smime-ct 2		: id-smime-ct-authData
+id-smime-ct 3		: id-smime-ct-publishCert
+id-smime-ct 4		: id-smime-ct-TSTInfo
+id-smime-ct 5		: id-smime-ct-TDTInfo
+id-smime-ct 6		: id-smime-ct-contentInfo
+id-smime-ct 7		: id-smime-ct-DVCSRequestData
+id-smime-ct 8		: id-smime-ct-DVCSResponseData
+id-smime-ct 9		: id-smime-ct-compressedData
+id-smime-ct 19		: id-smime-ct-contentCollection
+id-smime-ct 23		: id-smime-ct-authEnvelopedData
+id-smime-ct 27		: id-ct-asciiTextWithCRLF
+id-smime-ct 28		: id-ct-xml
+
+# S/MIME Attributes
+id-smime-aa 1		: id-smime-aa-receiptRequest
+id-smime-aa 2		: id-smime-aa-securityLabel
+id-smime-aa 3		: id-smime-aa-mlExpandHistory
+id-smime-aa 4		: id-smime-aa-contentHint
+id-smime-aa 5		: id-smime-aa-msgSigDigest
+# obsolete
+id-smime-aa 6		: id-smime-aa-encapContentType
+id-smime-aa 7		: id-smime-aa-contentIdentifier
+# obsolete
+id-smime-aa 8		: id-smime-aa-macValue
+id-smime-aa 9		: id-smime-aa-equivalentLabels
+id-smime-aa 10		: id-smime-aa-contentReference
+id-smime-aa 11		: id-smime-aa-encrypKeyPref
+id-smime-aa 12		: id-smime-aa-signingCertificate
+id-smime-aa 13		: id-smime-aa-smimeEncryptCerts
+id-smime-aa 14		: id-smime-aa-timeStampToken
+id-smime-aa 15		: id-smime-aa-ets-sigPolicyId
+id-smime-aa 16		: id-smime-aa-ets-commitmentType
+id-smime-aa 17		: id-smime-aa-ets-signerLocation
+id-smime-aa 18		: id-smime-aa-ets-signerAttr
+id-smime-aa 19		: id-smime-aa-ets-otherSigCert
+id-smime-aa 20		: id-smime-aa-ets-contentTimestamp
+id-smime-aa 21		: id-smime-aa-ets-CertificateRefs
+id-smime-aa 22		: id-smime-aa-ets-RevocationRefs
+id-smime-aa 23		: id-smime-aa-ets-certValues
+id-smime-aa 24		: id-smime-aa-ets-revocationValues
+id-smime-aa 25		: id-smime-aa-ets-escTimeStamp
+id-smime-aa 26		: id-smime-aa-ets-certCRLTimestamp
+id-smime-aa 27		: id-smime-aa-ets-archiveTimeStamp
+id-smime-aa 28		: id-smime-aa-signatureType
+id-smime-aa 29		: id-smime-aa-dvcs-dvc
+id-smime-aa 47		: id-smime-aa-signingCertificateV2
+
+# S/MIME Algorithm Identifiers
+# obsolete
+id-smime-alg 1		: id-smime-alg-ESDHwith3DES
+# obsolete
+id-smime-alg 2		: id-smime-alg-ESDHwithRC2
+# obsolete
+id-smime-alg 3		: id-smime-alg-3DESwrap
+# obsolete
+id-smime-alg 4		: id-smime-alg-RC2wrap
+id-smime-alg 5		: id-smime-alg-ESDH
+id-smime-alg 6		: id-smime-alg-CMS3DESwrap
+id-smime-alg 7		: id-smime-alg-CMSRC2wrap
+id-smime-alg 9		: id-alg-PWRI-KEK
+
+# S/MIME Certificate Distribution
+id-smime-cd 1		: id-smime-cd-ldap
+
+# S/MIME Signature Policy Qualifier
+id-smime-spq 1		: id-smime-spq-ets-sqt-uri
+id-smime-spq 2		: id-smime-spq-ets-sqt-unotice
+
+# S/MIME Commitment Type Identifier
+id-smime-cti 1		: id-smime-cti-ets-proofOfOrigin
+id-smime-cti 2		: id-smime-cti-ets-proofOfReceipt
+id-smime-cti 3		: id-smime-cti-ets-proofOfDelivery
+id-smime-cti 4		: id-smime-cti-ets-proofOfSender
+id-smime-cti 5		: id-smime-cti-ets-proofOfApproval
+id-smime-cti 6		: id-smime-cti-ets-proofOfCreation
+
+pkcs9 20		:			: friendlyName
+pkcs9 21		:			: localKeyID
+!Cname ms-csp-name
+1 3 6 1 4 1 311 17 1	: CSPName		: Microsoft CSP Name
+1 3 6 1 4 1 311 17 2	: LocalKeySet		: Microsoft Local Key set
+!Alias certTypes pkcs9 22
+certTypes 1		:			: x509Certificate
+certTypes 2		:			: sdsiCertificate
+!Alias crlTypes pkcs9 23
+crlTypes 1		:			: x509Crl
+
+!Alias pkcs12 pkcs 12
+!Alias pkcs12-pbeids pkcs12 1
+
+!Cname pbe-WithSHA1And128BitRC4
+pkcs12-pbeids 1		: PBE-SHA1-RC4-128	: pbeWithSHA1And128BitRC4
+!Cname pbe-WithSHA1And40BitRC4
+pkcs12-pbeids 2		: PBE-SHA1-RC4-40	: pbeWithSHA1And40BitRC4
+!Cname pbe-WithSHA1And3_Key_TripleDES-CBC
+pkcs12-pbeids 3		: PBE-SHA1-3DES		: pbeWithSHA1And3-KeyTripleDES-CBC
+!Cname pbe-WithSHA1And2_Key_TripleDES-CBC
+pkcs12-pbeids 4		: PBE-SHA1-2DES		: pbeWithSHA1And2-KeyTripleDES-CBC
+!Cname pbe-WithSHA1And128BitRC2-CBC
+pkcs12-pbeids 5		: PBE-SHA1-RC2-128	: pbeWithSHA1And128BitRC2-CBC
+!Cname pbe-WithSHA1And40BitRC2-CBC
+pkcs12-pbeids 6		: PBE-SHA1-RC2-40	: pbeWithSHA1And40BitRC2-CBC
+
+!Alias pkcs12-Version1 pkcs12 10
+!Alias pkcs12-BagIds pkcs12-Version1 1
+pkcs12-BagIds 1		:			: keyBag
+pkcs12-BagIds 2		:			: pkcs8ShroudedKeyBag
+pkcs12-BagIds 3		:			: certBag
+pkcs12-BagIds 4		:			: crlBag
+pkcs12-BagIds 5		:			: secretBag
+pkcs12-BagIds 6		:			: safeContentsBag
+
+rsadsi 2 2		: MD2			: md2
+rsadsi 2 4		: MD4			: md4
+rsadsi 2 5		: MD5			: md5
+			: MD5-SHA1		: md5-sha1
+rsadsi 2 6		:			: hmacWithMD5
+rsadsi 2 7		:			: hmacWithSHA1
+
+sm-scheme 301           : SM2                   : sm2
+
+sm-scheme 401           : SM3                   : sm3
+sm-scheme 504           : RSA-SM3		: sm3WithRSAEncryption
+
+# From RFC4231
+rsadsi 2 8		:			: hmacWithSHA224
+rsadsi 2 9		:			: hmacWithSHA256
+rsadsi 2 10		:			: hmacWithSHA384
+rsadsi 2 11		:			: hmacWithSHA512
+
+# From RFC8018
+rsadsi 2 12             :                       : hmacWithSHA512-224
+rsadsi 2 13             :                       : hmacWithSHA512-256
+
+rsadsi 3 2		: RC2-CBC		: rc2-cbc
+			: RC2-ECB		: rc2-ecb
+!Cname rc2-cfb64
+			: RC2-CFB		: rc2-cfb
+!Cname rc2-ofb64
+			: RC2-OFB		: rc2-ofb
+			: RC2-40-CBC		: rc2-40-cbc
+			: RC2-64-CBC		: rc2-64-cbc
+rsadsi 3 4		: RC4			: rc4
+			: RC4-40		: rc4-40
+rsadsi 3 7		: DES-EDE3-CBC		: des-ede3-cbc
+rsadsi 3 8		: RC5-CBC		: rc5-cbc
+			: RC5-ECB		: rc5-ecb
+!Cname rc5-cfb64
+			: RC5-CFB		: rc5-cfb
+!Cname rc5-ofb64
+			: RC5-OFB		: rc5-ofb
+
+!Cname ms-ext-req
+1 3 6 1 4 1 311 2 1 14	: msExtReq		: Microsoft Extension Request
+!Cname ms-code-ind
+1 3 6 1 4 1 311 2 1 21	: msCodeInd		: Microsoft Individual Code Signing
+!Cname ms-code-com
+1 3 6 1 4 1 311 2 1 22	: msCodeCom		: Microsoft Commercial Code Signing
+!Cname ms-ctl-sign
+1 3 6 1 4 1 311 10 3 1	: msCTLSign		: Microsoft Trust List Signing
+!Cname ms-sgc
+1 3 6 1 4 1 311 10 3 3	: msSGC			: Microsoft Server Gated Crypto
+!Cname ms-efs
+1 3 6 1 4 1 311 10 3 4	: msEFS			: Microsoft Encrypted File System
+!Cname ms-smartcard-login
+1 3 6 1 4 1 311 20 2 2	: msSmartcardLogin	: Microsoft Smartcardlogin
+!Cname ms-upn
+1 3 6 1 4 1 311 20 2 3	: msUPN			: Microsoft Universal Principal Name
+
+1 3 6 1 4 1 188 7 1 1 2	: IDEA-CBC		: idea-cbc
+			: IDEA-ECB		: idea-ecb
+!Cname idea-cfb64
+			: IDEA-CFB		: idea-cfb
+!Cname idea-ofb64
+			: IDEA-OFB		: idea-ofb
+
+1 3 6 1 4 1 3029 1 2	: BF-CBC		: bf-cbc
+			: BF-ECB		: bf-ecb
+!Cname bf-cfb64
+			: BF-CFB		: bf-cfb
+!Cname bf-ofb64
+			: BF-OFB		: bf-ofb
+
+!Cname id-pkix
+1 3 6 1 5 5 7		: PKIX
+
+# PKIX Arcs
+id-pkix 0		: id-pkix-mod
+id-pkix 1		: id-pe
+id-pkix 2		: id-qt
+id-pkix 3		: id-kp
+id-pkix 4		: id-it
+id-pkix 5		: id-pkip
+id-pkix 6		: id-alg
+id-pkix 7		: id-cmc
+id-pkix 8		: id-on
+id-pkix 9		: id-pda
+id-pkix 10		: id-aca
+id-pkix 11		: id-qcs
+id-pkix 12		: id-cct
+id-pkix 21		: id-ppl
+id-pkix 48		: id-ad
+
+# PKIX Modules
+id-pkix-mod 1		: id-pkix1-explicit-88
+id-pkix-mod 2		: id-pkix1-implicit-88
+id-pkix-mod 3		: id-pkix1-explicit-93
+id-pkix-mod 4		: id-pkix1-implicit-93
+id-pkix-mod 5		: id-mod-crmf
+id-pkix-mod 6		: id-mod-cmc
+id-pkix-mod 7		: id-mod-kea-profile-88
+id-pkix-mod 8		: id-mod-kea-profile-93
+id-pkix-mod 9		: id-mod-cmp
+id-pkix-mod 10		: id-mod-qualified-cert-88
+id-pkix-mod 11		: id-mod-qualified-cert-93
+id-pkix-mod 12		: id-mod-attribute-cert
+id-pkix-mod 13		: id-mod-timestamp-protocol
+id-pkix-mod 14		: id-mod-ocsp
+id-pkix-mod 15		: id-mod-dvcs
+id-pkix-mod 16		: id-mod-cmp2000
+
+# PKIX Private Extensions
+!Cname info-access
+id-pe 1			: authorityInfoAccess	: Authority Information Access
+id-pe 2			: biometricInfo		: Biometric Info
+id-pe 3			: qcStatements
+id-pe 4			: ac-auditEntity
+id-pe 5			: ac-targeting
+id-pe 6			: aaControls
+id-pe 7			: sbgp-ipAddrBlock
+id-pe 8			: sbgp-autonomousSysNum
+id-pe 9			: sbgp-routerIdentifier
+id-pe 10		: ac-proxying
+!Cname sinfo-access
+id-pe 11		: subjectInfoAccess	: Subject Information Access
+id-pe 14		: proxyCertInfo		: Proxy Certificate Information
+id-pe 24		: tlsfeature		: TLS Feature
+
+# PKIX policyQualifiers for Internet policy qualifiers
+id-qt 1			: id-qt-cps		: Policy Qualifier CPS
+id-qt 2			: id-qt-unotice		: Policy Qualifier User Notice
+id-qt 3			: textNotice
+
+# PKIX key purpose identifiers
+!Cname server-auth
+id-kp 1			: serverAuth		: TLS Web Server Authentication
+!Cname client-auth
+id-kp 2			: clientAuth		: TLS Web Client Authentication
+!Cname code-sign
+id-kp 3			: codeSigning		: Code Signing
+!Cname email-protect
+id-kp 4			: emailProtection	: E-mail Protection
+id-kp 5			: ipsecEndSystem	: IPSec End System
+id-kp 6			: ipsecTunnel		: IPSec Tunnel
+id-kp 7			: ipsecUser		: IPSec User
+!Cname time-stamp
+id-kp 8			: timeStamping		: Time Stamping
+# From OCSP spec RFC2560
+!Cname OCSP-sign
+id-kp 9			: OCSPSigning		: OCSP Signing
+id-kp 10		: DVCS			: dvcs
+!Cname ipsec-IKE
+id-kp 17                : ipsecIKE              : ipsec Internet Key Exchange
+id-kp 18                : capwapAC              : Ctrl/provision WAP Access
+id-kp 19                : capwapWTP             : Ctrl/Provision WAP Termination
+!Cname sshClient
+id-kp 21                : secureShellClient     : SSH Client
+!Cname sshServer
+id-kp 22                : secureShellServer     : SSH Server
+id-kp 23                : sendRouter            : Send Router
+id-kp 24                : sendProxiedRouter     : Send Proxied Router
+id-kp 25                : sendOwner             : Send Owner
+id-kp 26                : sendProxiedOwner      : Send Proxied Owner
+id-kp 27                : cmcCA                 : CMC Certificate Authority
+id-kp 28                : cmcRA                 : CMC Registration Authority
+
+# CMP information types
+id-it 1			: id-it-caProtEncCert
+id-it 2			: id-it-signKeyPairTypes
+id-it 3			: id-it-encKeyPairTypes
+id-it 4			: id-it-preferredSymmAlg
+id-it 5			: id-it-caKeyUpdateInfo
+id-it 6			: id-it-currentCRL
+id-it 7			: id-it-unsupportedOIDs
+# obsolete
+id-it 8			: id-it-subscriptionRequest
+# obsolete
+id-it 9			: id-it-subscriptionResponse
+id-it 10		: id-it-keyPairParamReq
+id-it 11		: id-it-keyPairParamRep
+id-it 12		: id-it-revPassphrase
+id-it 13		: id-it-implicitConfirm
+id-it 14		: id-it-confirmWaitTime
+id-it 15		: id-it-origPKIMessage
+id-it 16		: id-it-suppLangTags
+
+# CRMF registration
+id-pkip 1		: id-regCtrl
+id-pkip 2		: id-regInfo
+
+# CRMF registration controls
+id-regCtrl 1		: id-regCtrl-regToken
+id-regCtrl 2		: id-regCtrl-authenticator
+id-regCtrl 3		: id-regCtrl-pkiPublicationInfo
+id-regCtrl 4		: id-regCtrl-pkiArchiveOptions
+id-regCtrl 5		: id-regCtrl-oldCertID
+id-regCtrl 6		: id-regCtrl-protocolEncrKey
+
+# CRMF registration information
+id-regInfo 1		: id-regInfo-utf8Pairs
+id-regInfo 2		: id-regInfo-certReq
+
+# algorithms
+id-alg 1		: id-alg-des40
+id-alg 2		: id-alg-noSignature
+id-alg 3		: id-alg-dh-sig-hmac-sha1
+id-alg 4		: id-alg-dh-pop
+
+# CMC controls
+id-cmc 1		: id-cmc-statusInfo
+id-cmc 2		: id-cmc-identification
+id-cmc 3		: id-cmc-identityProof
+id-cmc 4		: id-cmc-dataReturn
+id-cmc 5		: id-cmc-transactionId
+id-cmc 6		: id-cmc-senderNonce
+id-cmc 7		: id-cmc-recipientNonce
+id-cmc 8		: id-cmc-addExtensions
+id-cmc 9		: id-cmc-encryptedPOP
+id-cmc 10		: id-cmc-decryptedPOP
+id-cmc 11		: id-cmc-lraPOPWitness
+id-cmc 15		: id-cmc-getCert
+id-cmc 16		: id-cmc-getCRL
+id-cmc 17		: id-cmc-revokeRequest
+id-cmc 18		: id-cmc-regInfo
+id-cmc 19		: id-cmc-responseInfo
+id-cmc 21		: id-cmc-queryPending
+id-cmc 22		: id-cmc-popLinkRandom
+id-cmc 23		: id-cmc-popLinkWitness
+id-cmc 24		: id-cmc-confirmCertAcceptance
+
+# other names
+id-on 1			: id-on-personalData
+id-on 3			: id-on-permanentIdentifier : Permanent Identifier
+
+# personal data attributes
+id-pda 1		: id-pda-dateOfBirth
+id-pda 2		: id-pda-placeOfBirth
+id-pda 3		: id-pda-gender
+id-pda 4		: id-pda-countryOfCitizenship
+id-pda 5		: id-pda-countryOfResidence
+
+# attribute certificate attributes
+id-aca 1		: id-aca-authenticationInfo
+id-aca 2		: id-aca-accessIdentity
+id-aca 3		: id-aca-chargingIdentity
+id-aca 4		: id-aca-group
+# attention : the following seems to be obsolete, replace by 'role'
+id-aca 5		: id-aca-role
+id-aca 6		: id-aca-encAttrs
+
+# qualified certificate statements
+id-qcs 1		: id-qcs-pkixQCSyntax-v1
+
+# CMC content types
+id-cct 1		: id-cct-crs
+id-cct 2		: id-cct-PKIData
+id-cct 3		: id-cct-PKIResponse
+
+# Predefined Proxy Certificate policy languages
+id-ppl 0		: id-ppl-anyLanguage	: Any language
+id-ppl 1		: id-ppl-inheritAll	: Inherit all
+id-ppl 2		: id-ppl-independent	: Independent
+
+# access descriptors for authority info access extension
+!Cname ad-OCSP
+id-ad 1			: OCSP			: OCSP
+!Cname ad-ca-issuers
+id-ad 2			: caIssuers		: CA Issuers
+!Cname ad-timeStamping
+id-ad 3			: ad_timestamping	: AD Time Stamping
+!Cname ad-dvcs
+id-ad 4			: AD_DVCS		: ad dvcs
+id-ad 5			: caRepository		: CA Repository
+
+
+!Alias id-pkix-OCSP ad-OCSP
+!module id-pkix-OCSP
+!Cname basic
+id-pkix-OCSP 1		: basicOCSPResponse	: Basic OCSP Response
+id-pkix-OCSP 2		: Nonce			: OCSP Nonce
+id-pkix-OCSP 3		: CrlID			: OCSP CRL ID
+id-pkix-OCSP 4		: acceptableResponses	: Acceptable OCSP Responses
+id-pkix-OCSP 5		: noCheck		: OCSP No Check
+id-pkix-OCSP 6		: archiveCutoff		: OCSP Archive Cutoff
+id-pkix-OCSP 7		: serviceLocator	: OCSP Service Locator
+id-pkix-OCSP 8		: extendedStatus	: Extended OCSP Status
+id-pkix-OCSP 9		: valid
+id-pkix-OCSP 10		: path
+id-pkix-OCSP 11		: trustRoot		: Trust Root
+!global
+
+1 3 14 3 2		: algorithm		: algorithm
+algorithm 3		: RSA-NP-MD5		: md5WithRSA
+algorithm 6		: DES-ECB		: des-ecb
+algorithm 7		: DES-CBC		: des-cbc
+!Cname des-ofb64
+algorithm 8		: DES-OFB		: des-ofb
+!Cname des-cfb64
+algorithm 9		: DES-CFB		: des-cfb
+algorithm 11		: rsaSignature
+!Cname dsa-2
+algorithm 12		: DSA-old		: dsaEncryption-old
+algorithm 13		: DSA-SHA		: dsaWithSHA
+algorithm 15		: RSA-SHA		: shaWithRSAEncryption
+!Cname des-ede-ecb
+algorithm 17		: DES-EDE		: des-ede
+!Cname des-ede3-ecb
+			: DES-EDE3		: des-ede3
+			: DES-EDE-CBC		: des-ede-cbc
+!Cname des-ede-cfb64
+			: DES-EDE-CFB		: des-ede-cfb
+!Cname des-ede3-cfb64
+			: DES-EDE3-CFB		: des-ede3-cfb
+!Cname des-ede-ofb64
+			: DES-EDE-OFB		: des-ede-ofb
+!Cname des-ede3-ofb64
+			: DES-EDE3-OFB		: des-ede3-ofb
+			: DESX-CBC		: desx-cbc
+algorithm 18		: SHA			: sha
+algorithm 26		: SHA1			: sha1
+!Cname dsaWithSHA1-2
+algorithm 27		: DSA-SHA1-old		: dsaWithSHA1-old
+algorithm 29		: RSA-SHA1-2		: sha1WithRSA
+
+1 3 36 3 2 1		: RIPEMD160		: ripemd160
+1 3 36 3 3 1 2		: RSA-RIPEMD160		: ripemd160WithRSA
+
+1 3 6 1 4 1 1722 12 2 1 16 : BLAKE2b512        : blake2b512
+1 3 6 1 4 1 1722 12 2 2 8  : BLAKE2s256        : blake2s256
+
+!Cname sxnet
+1 3 101 1 4 1		: SXNetID		: Strong Extranet ID
+
+2 5			: X500			: directory services (X.500)
+
+X500 4			: X509
+X509 3			: CN			: commonName
+X509 4			: SN			: surname
+X509 5			: 			: serialNumber
+X509 6			: C			: countryName
+X509 7			: L			: localityName
+X509 8			: ST			: stateOrProvinceName
+X509 9			: street		: streetAddress
+X509 10			: O			: organizationName
+X509 11			: OU			: organizationalUnitName
+X509 12			: title			: title
+X509 13			: 			: description
+X509 14			: 			: searchGuide
+X509 15			: 			: businessCategory
+X509 16			: 			: postalAddress
+X509 17			: 			: postalCode
+X509 18			: 			: postOfficeBox
+X509 19			: 			: physicalDeliveryOfficeName
+X509 20			: 			: telephoneNumber
+X509 21			: 			: telexNumber
+X509 22			: 			: teletexTerminalIdentifier
+X509 23			: 			: facsimileTelephoneNumber
+X509 24			: 			: x121Address
+X509 25			: 			: internationaliSDNNumber
+X509 26			: 			: registeredAddress
+X509 27			: 			: destinationIndicator
+X509 28			: 			: preferredDeliveryMethod
+X509 29			: 			: presentationAddress
+X509 30			: 			: supportedApplicationContext
+X509 31			: member		:
+X509 32			: owner			:
+X509 33			: 			: roleOccupant
+X509 34			: seeAlso		:
+X509 35			: 			: userPassword
+X509 36			: 			: userCertificate
+X509 37			: 			: cACertificate
+X509 38			: 			: authorityRevocationList
+X509 39			: 			: certificateRevocationList
+X509 40			: 			: crossCertificatePair
+X509 41			: name			: name
+X509 42			: GN			: givenName
+X509 43			: initials		: initials
+X509 44			: 			: generationQualifier
+X509 45			: 			: x500UniqueIdentifier
+X509 46			: dnQualifier		: dnQualifier
+X509 47			: 			: enhancedSearchGuide
+X509 48			: 			: protocolInformation
+X509 49			: 			: distinguishedName
+X509 50			: 			: uniqueMember
+X509 51			: 			: houseIdentifier
+X509 52			: 			: supportedAlgorithms
+X509 53			: 			: deltaRevocationList
+X509 54			: dmdName		:
+X509 65			:			: pseudonym
+X509 72			: role			: role
+X509 97                 :			: organizationIdentifier
+X509 98			: c3			: countryCode3c
+X509 99			: n3			: countryCode3n
+X509 100		:			: dnsName
+
+
+X500 8			: X500algorithms	: directory services - algorithms
+X500algorithms 1 1	: RSA			: rsa
+X500algorithms 3 100	: RSA-MDC2		: mdc2WithRSA
+X500algorithms 3 101	: MDC2			: mdc2
+
+X500 29			: id-ce
+!Cname subject-directory-attributes
+id-ce 9			: subjectDirectoryAttributes : X509v3 Subject Directory Attributes
+!Cname subject-key-identifier
+id-ce 14		: subjectKeyIdentifier	: X509v3 Subject Key Identifier
+!Cname key-usage
+id-ce 15		: keyUsage		: X509v3 Key Usage
+!Cname private-key-usage-period
+id-ce 16		: privateKeyUsagePeriod	: X509v3 Private Key Usage Period
+!Cname subject-alt-name
+id-ce 17		: subjectAltName	: X509v3 Subject Alternative Name
+!Cname issuer-alt-name
+id-ce 18		: issuerAltName		: X509v3 Issuer Alternative Name
+!Cname basic-constraints
+id-ce 19		: basicConstraints	: X509v3 Basic Constraints
+!Cname crl-number
+id-ce 20		: crlNumber		: X509v3 CRL Number
+!Cname crl-reason
+id-ce 21		: CRLReason		: X509v3 CRL Reason Code
+!Cname invalidity-date
+id-ce 24		: invalidityDate	: Invalidity Date
+!Cname delta-crl
+id-ce 27		: deltaCRL		: X509v3 Delta CRL Indicator
+!Cname issuing-distribution-point
+id-ce 28		: issuingDistributionPoint : X509v3 Issuing Distribution Point
+!Cname certificate-issuer
+id-ce 29		: certificateIssuer	: X509v3 Certificate Issuer
+!Cname name-constraints
+id-ce 30		: nameConstraints	: X509v3 Name Constraints
+!Cname crl-distribution-points
+id-ce 31		: crlDistributionPoints	: X509v3 CRL Distribution Points
+!Cname certificate-policies
+id-ce 32		: certificatePolicies	: X509v3 Certificate Policies
+!Cname any-policy
+certificate-policies 0	: anyPolicy		: X509v3 Any Policy
+!Cname policy-mappings
+id-ce 33		: policyMappings	: X509v3 Policy Mappings
+!Cname authority-key-identifier
+id-ce 35		: authorityKeyIdentifier : X509v3 Authority Key Identifier
+!Cname policy-constraints
+id-ce 36		: policyConstraints	: X509v3 Policy Constraints
+!Cname ext-key-usage
+id-ce 37		: extendedKeyUsage	: X509v3 Extended Key Usage
+!Cname freshest-crl
+id-ce 46		: freshestCRL		: X509v3 Freshest CRL
+!Cname inhibit-any-policy
+id-ce 54		: inhibitAnyPolicy	: X509v3 Inhibit Any Policy
+!Cname target-information
+id-ce 55		: targetInformation	: X509v3 AC Targeting
+!Cname no-rev-avail
+id-ce 56		: noRevAvail		: X509v3 No Revocation Available
+
+# From RFC5280
+ext-key-usage 0		: anyExtendedKeyUsage	: Any Extended Key Usage
+
+
+!Cname netscape
+2 16 840 1 113730	: Netscape		: Netscape Communications Corp.
+!Cname netscape-cert-extension
+netscape 1		: nsCertExt		: Netscape Certificate Extension
+!Cname netscape-data-type
+netscape 2		: nsDataType		: Netscape Data Type
+!Cname netscape-cert-type
+netscape-cert-extension 1 : nsCertType		: Netscape Cert Type
+!Cname netscape-base-url
+netscape-cert-extension 2 : nsBaseUrl		: Netscape Base Url
+!Cname netscape-revocation-url
+netscape-cert-extension 3 : nsRevocationUrl	: Netscape Revocation Url
+!Cname netscape-ca-revocation-url
+netscape-cert-extension 4 : nsCaRevocationUrl	: Netscape CA Revocation Url
+!Cname netscape-renewal-url
+netscape-cert-extension 7 : nsRenewalUrl	: Netscape Renewal Url
+!Cname netscape-ca-policy-url
+netscape-cert-extension 8 : nsCaPolicyUrl	: Netscape CA Policy Url
+!Cname netscape-ssl-server-name
+netscape-cert-extension 12 : nsSslServerName	: Netscape SSL Server Name
+!Cname netscape-comment
+netscape-cert-extension 13 : nsComment		: Netscape Comment
+!Cname netscape-cert-sequence
+netscape-data-type 5	: nsCertSequence	: Netscape Certificate Sequence
+!Cname ns-sgc
+netscape 4 1		: nsSGC			: Netscape Server Gated Crypto
+
+# iso(1)
+iso 3			: ORG			: org
+org 6			: DOD			: dod
+dod 1			: IANA			: iana
+!Alias internet iana
+
+internet 1		: directory		: Directory
+internet 2		: mgmt			: Management
+internet 3		: experimental		: Experimental
+internet 4		: private		: Private
+internet 5		: security		: Security
+internet 6		: snmpv2		: SNMPv2
+# Documents refer to "internet 7" as "mail". This however leads to ambiguities
+# with RFC2798, Section 9.1.3, where "mail" is defined as the short name for
+# rfc822Mailbox. The short name is therefore here left out for a reason.
+# Subclasses of "mail", e.g. "MIME MHS" don't constitute a problem, as
+# references are realized via long name "Mail" (with capital M).
+internet 7		:			: Mail
+
+Private 1		: enterprises		: Enterprises
+
+# RFC 2247
+Enterprises 1466 344	: dcobject		: dcObject
+
+# RFC 1495
+Mail 1			: mime-mhs		: MIME MHS
+mime-mhs 1		: mime-mhs-headings	: mime-mhs-headings
+mime-mhs 2		: mime-mhs-bodies	: mime-mhs-bodies
+mime-mhs-headings 1	: id-hex-partial-message : id-hex-partial-message
+mime-mhs-headings 2	: id-hex-multipart-message : id-hex-multipart-message
+
+# RFC 3274
+!Cname zlib-compression
+id-smime-alg 8		: ZLIB			: zlib compression
+
+# AES aka Rijndael
+
+!Alias csor 2 16 840 1 101 3
+!Alias nistAlgorithms csor 4
+!Alias aes nistAlgorithms 1
+
+aes 1			: AES-128-ECB		: aes-128-ecb
+aes 2			: AES-128-CBC		: aes-128-cbc
+!Cname aes-128-ofb128
+aes 3			: AES-128-OFB		: aes-128-ofb
+!Cname aes-128-cfb128
+aes 4			: AES-128-CFB		: aes-128-cfb
+aes 5			: id-aes128-wrap
+aes 6			: id-aes128-GCM		: aes-128-gcm
+aes 7			: id-aes128-CCM		: aes-128-ccm
+aes 8			: id-aes128-wrap-pad
+
+aes 21			: AES-192-ECB		: aes-192-ecb
+aes 22			: AES-192-CBC		: aes-192-cbc
+!Cname aes-192-ofb128
+aes 23			: AES-192-OFB		: aes-192-ofb
+!Cname aes-192-cfb128
+aes 24			: AES-192-CFB		: aes-192-cfb
+aes 25			: id-aes192-wrap
+aes 26			: id-aes192-GCM		: aes-192-gcm
+aes 27			: id-aes192-CCM		: aes-192-ccm
+aes 28			: id-aes192-wrap-pad
+
+aes 41			: AES-256-ECB		: aes-256-ecb
+aes 42			: AES-256-CBC		: aes-256-cbc
+!Cname aes-256-ofb128
+aes 43			: AES-256-OFB		: aes-256-ofb
+!Cname aes-256-cfb128
+aes 44			: AES-256-CFB		: aes-256-cfb
+aes 45			: id-aes256-wrap
+aes 46			: id-aes256-GCM		: aes-256-gcm
+aes 47			: id-aes256-CCM		: aes-256-ccm
+aes 48			: id-aes256-wrap-pad
+
+ieee-siswg 0 1 1        : AES-128-XTS		: aes-128-xts
+ieee-siswg 0 1 2        : AES-256-XTS		: aes-256-xts
+
+# There are no OIDs for these modes...
+
+			: AES-128-CFB1		: aes-128-cfb1
+			: AES-192-CFB1		: aes-192-cfb1
+			: AES-256-CFB1		: aes-256-cfb1
+			: AES-128-CFB8		: aes-128-cfb8
+			: AES-192-CFB8		: aes-192-cfb8
+			: AES-256-CFB8		: aes-256-cfb8
+			: AES-128-CTR		: aes-128-ctr
+			: AES-192-CTR		: aes-192-ctr
+			: AES-256-CTR		: aes-256-ctr
+			: AES-128-OCB		: aes-128-ocb
+			: AES-192-OCB		: aes-192-ocb
+			: AES-256-OCB		: aes-256-ocb
+			: DES-CFB1		: des-cfb1
+			: DES-CFB8		: des-cfb8
+			: DES-EDE3-CFB1		: des-ede3-cfb1
+			: DES-EDE3-CFB8		: des-ede3-cfb8
+
+# OIDs for SHA224, SHA256, SHA385 and SHA512, according to x9.84 and
+# http://csrc.nist.gov/groups/ST/crypto_apps_infra/csor/algorithms.html
+# "Middle" names are specified to be id-sha256, id-sha384, etc., but
+# we adhere to unprefixed capitals for backward compatibility...
+!Alias nist_hashalgs nistAlgorithms 2
+nist_hashalgs 1		: SHA256		: sha256
+nist_hashalgs 2		: SHA384		: sha384
+nist_hashalgs 3		: SHA512		: sha512
+nist_hashalgs 4		: SHA224		: sha224
+nist_hashalgs 5		: SHA512-224		: sha512-224
+nist_hashalgs 6		: SHA512-256		: sha512-256
+nist_hashalgs 7		: SHA3-224		: sha3-224
+nist_hashalgs 8		: SHA3-256		: sha3-256
+nist_hashalgs 9		: SHA3-384		: sha3-384
+nist_hashalgs 10	: SHA3-512		: sha3-512
+nist_hashalgs 11	: SHAKE128		: shake128
+nist_hashalgs 12	: SHAKE256		: shake256
+nist_hashalgs 13	: id-hmacWithSHA3-224	: hmac-sha3-224
+nist_hashalgs 14	: id-hmacWithSHA3-256	: hmac-sha3-256
+nist_hashalgs 15	: id-hmacWithSHA3-384	: hmac-sha3-384
+nist_hashalgs 16	: id-hmacWithSHA3-512	: hmac-sha3-512
+# Below two are incomplete OIDs, to be uncommented when we figure out
+# how to handle them...
+# nist_hashalgs 17	: id-shake128-len	: shake128-len
+# nist_hashalgs 18	: id-shake256-len	: shake256-len
+
+# OIDs for dsa-with-sha224 and dsa-with-sha256
+!Alias dsa_with_sha2 nistAlgorithms 3
+dsa_with_sha2 1		: dsa_with_SHA224
+dsa_with_sha2 2		: dsa_with_SHA256
+# Above two belong below, but kept as they are for backward compatibility
+!Alias sigAlgs nistAlgorithms 3
+sigAlgs 3	: id-dsa-with-sha384	: dsa_with_SHA384
+sigAlgs 4	: id-dsa-with-sha512	: dsa_with_SHA512
+sigAlgs 5	: id-dsa-with-sha3-224	: dsa_with_SHA3-224
+sigAlgs 6	: id-dsa-with-sha3-256	: dsa_with_SHA3-256
+sigAlgs 7	: id-dsa-with-sha3-384	: dsa_with_SHA3-384
+sigAlgs 8	: id-dsa-with-sha3-512	: dsa_with_SHA3-512
+sigAlgs 9	: id-ecdsa-with-sha3-224	: ecdsa_with_SHA3-224
+sigAlgs 10	: id-ecdsa-with-sha3-256	: ecdsa_with_SHA3-256
+sigAlgs 11	: id-ecdsa-with-sha3-384	: ecdsa_with_SHA3-384
+sigAlgs 12	: id-ecdsa-with-sha3-512	: ecdsa_with_SHA3-512
+sigAlgs 13	: id-rsassa-pkcs1-v1_5-with-sha3-224	: RSA-SHA3-224
+sigAlgs 14	: id-rsassa-pkcs1-v1_5-with-sha3-256	: RSA-SHA3-256
+sigAlgs 15	: id-rsassa-pkcs1-v1_5-with-sha3-384	: RSA-SHA3-384
+sigAlgs 16	: id-rsassa-pkcs1-v1_5-with-sha3-512	: RSA-SHA3-512
+
+# Hold instruction CRL entry extension
+!Cname hold-instruction-code
+id-ce 23		: holdInstructionCode	: Hold Instruction Code
+!Alias holdInstruction	X9-57 2
+!Cname hold-instruction-none
+holdInstruction 1	: holdInstructionNone	: Hold Instruction None
+!Cname hold-instruction-call-issuer
+holdInstruction 2	: holdInstructionCallIssuer : Hold Instruction Call Issuer
+!Cname hold-instruction-reject
+holdInstruction 3	: holdInstructionReject	: Hold Instruction Reject
+
+# OID's from ITU-T.  Most of this is defined in RFC 1274.  A couple of
+# them are also mentioned in RFC 2247
+itu-t 9			: data
+data 2342		: pss
+pss 19200300		: ucl
+ucl 100			: pilot
+pilot 1			:			: pilotAttributeType
+pilot 3			:			: pilotAttributeSyntax
+pilot 4			:			: pilotObjectClass
+pilot 10		:			: pilotGroups
+pilotAttributeSyntax 4	:			: iA5StringSyntax
+pilotAttributeSyntax 5	:			: caseIgnoreIA5StringSyntax
+pilotObjectClass 3	:			: pilotObject
+pilotObjectClass 4	:			: pilotPerson
+pilotObjectClass 5	: account
+pilotObjectClass 6	: document
+pilotObjectClass 7	: room
+pilotObjectClass 9	:			: documentSeries
+pilotObjectClass 13	: domain		: Domain
+pilotObjectClass 14	:			: rFC822localPart
+pilotObjectClass 15	:			: dNSDomain
+pilotObjectClass 17	:			: domainRelatedObject
+pilotObjectClass 18	:			: friendlyCountry
+pilotObjectClass 19	:			: simpleSecurityObject
+pilotObjectClass 20	:			: pilotOrganization
+pilotObjectClass 21	:			: pilotDSA
+pilotObjectClass 22	:			: qualityLabelledData
+pilotAttributeType 1	: UID			: userId
+pilotAttributeType 2	:			: textEncodedORAddress
+pilotAttributeType 3	: mail			: rfc822Mailbox
+pilotAttributeType 4	: info
+pilotAttributeType 5	:			: favouriteDrink
+pilotAttributeType 6	:			: roomNumber
+pilotAttributeType 7	: photo
+pilotAttributeType 8	:			: userClass
+pilotAttributeType 9	: host
+pilotAttributeType 10	: manager
+pilotAttributeType 11	:			: documentIdentifier
+pilotAttributeType 12	:			: documentTitle
+pilotAttributeType 13	:			: documentVersion
+pilotAttributeType 14	:			: documentAuthor
+pilotAttributeType 15	:			: documentLocation
+pilotAttributeType 20	:			: homeTelephoneNumber
+pilotAttributeType 21	: secretary
+pilotAttributeType 22	:			: otherMailbox
+pilotAttributeType 23	:			: lastModifiedTime
+pilotAttributeType 24	:			: lastModifiedBy
+pilotAttributeType 25	: DC			: domainComponent
+pilotAttributeType 26	:			: aRecord
+pilotAttributeType 27	:			: pilotAttributeType27
+pilotAttributeType 28	:			: mXRecord
+pilotAttributeType 29	:			: nSRecord
+pilotAttributeType 30	:			: sOARecord
+pilotAttributeType 31	:			: cNAMERecord
+pilotAttributeType 37	:			: associatedDomain
+pilotAttributeType 38	:			: associatedName
+pilotAttributeType 39	:			: homePostalAddress
+pilotAttributeType 40	:			: personalTitle
+pilotAttributeType 41	:			: mobileTelephoneNumber
+pilotAttributeType 42	:			: pagerTelephoneNumber
+pilotAttributeType 43	:			: friendlyCountryName
+pilotAttributeType 44	: uid			: uniqueIdentifier
+pilotAttributeType 45	:			: organizationalStatus
+pilotAttributeType 46	:			: janetMailbox
+pilotAttributeType 47	:			: mailPreferenceOption
+pilotAttributeType 48	:			: buildingName
+pilotAttributeType 49	:			: dSAQuality
+pilotAttributeType 50	:			: singleLevelQuality
+pilotAttributeType 51	:			: subtreeMinimumQuality
+pilotAttributeType 52	:			: subtreeMaximumQuality
+pilotAttributeType 53	:			: personalSignature
+pilotAttributeType 54	:			: dITRedirect
+pilotAttributeType 55	: audio
+pilotAttributeType 56	:			: documentPublisher
+
+international-organizations 42	: id-set	: Secure Electronic Transactions
+
+id-set 0		: set-ctype		: content types
+id-set 1		: set-msgExt		: message extensions
+id-set 3		: set-attr
+id-set 5		: set-policy
+id-set 7		: set-certExt		: certificate extensions
+id-set 8		: set-brand
+
+set-ctype 0		: setct-PANData
+set-ctype 1		: setct-PANToken
+set-ctype 2		: setct-PANOnly
+set-ctype 3		: setct-OIData
+set-ctype 4		: setct-PI
+set-ctype 5		: setct-PIData
+set-ctype 6		: setct-PIDataUnsigned
+set-ctype 7		: setct-HODInput
+set-ctype 8		: setct-AuthResBaggage
+set-ctype 9		: setct-AuthRevReqBaggage
+set-ctype 10		: setct-AuthRevResBaggage
+set-ctype 11		: setct-CapTokenSeq
+set-ctype 12		: setct-PInitResData
+set-ctype 13		: setct-PI-TBS
+set-ctype 14		: setct-PResData
+set-ctype 16		: setct-AuthReqTBS
+set-ctype 17		: setct-AuthResTBS
+set-ctype 18		: setct-AuthResTBSX
+set-ctype 19		: setct-AuthTokenTBS
+set-ctype 20		: setct-CapTokenData
+set-ctype 21		: setct-CapTokenTBS
+set-ctype 22		: setct-AcqCardCodeMsg
+set-ctype 23		: setct-AuthRevReqTBS
+set-ctype 24		: setct-AuthRevResData
+set-ctype 25		: setct-AuthRevResTBS
+set-ctype 26		: setct-CapReqTBS
+set-ctype 27		: setct-CapReqTBSX
+set-ctype 28		: setct-CapResData
+set-ctype 29		: setct-CapRevReqTBS
+set-ctype 30		: setct-CapRevReqTBSX
+set-ctype 31		: setct-CapRevResData
+set-ctype 32		: setct-CredReqTBS
+set-ctype 33		: setct-CredReqTBSX
+set-ctype 34		: setct-CredResData
+set-ctype 35		: setct-CredRevReqTBS
+set-ctype 36		: setct-CredRevReqTBSX
+set-ctype 37		: setct-CredRevResData
+set-ctype 38		: setct-PCertReqData
+set-ctype 39		: setct-PCertResTBS
+set-ctype 40		: setct-BatchAdminReqData
+set-ctype 41		: setct-BatchAdminResData
+set-ctype 42		: setct-CardCInitResTBS
+set-ctype 43		: setct-MeAqCInitResTBS
+set-ctype 44		: setct-RegFormResTBS
+set-ctype 45		: setct-CertReqData
+set-ctype 46		: setct-CertReqTBS
+set-ctype 47		: setct-CertResData
+set-ctype 48		: setct-CertInqReqTBS
+set-ctype 49		: setct-ErrorTBS
+set-ctype 50		: setct-PIDualSignedTBE
+set-ctype 51		: setct-PIUnsignedTBE
+set-ctype 52		: setct-AuthReqTBE
+set-ctype 53		: setct-AuthResTBE
+set-ctype 54		: setct-AuthResTBEX
+set-ctype 55		: setct-AuthTokenTBE
+set-ctype 56		: setct-CapTokenTBE
+set-ctype 57		: setct-CapTokenTBEX
+set-ctype 58		: setct-AcqCardCodeMsgTBE
+set-ctype 59		: setct-AuthRevReqTBE
+set-ctype 60		: setct-AuthRevResTBE
+set-ctype 61		: setct-AuthRevResTBEB
+set-ctype 62		: setct-CapReqTBE
+set-ctype 63		: setct-CapReqTBEX
+set-ctype 64		: setct-CapResTBE
+set-ctype 65		: setct-CapRevReqTBE
+set-ctype 66		: setct-CapRevReqTBEX
+set-ctype 67		: setct-CapRevResTBE
+set-ctype 68		: setct-CredReqTBE
+set-ctype 69		: setct-CredReqTBEX
+set-ctype 70		: setct-CredResTBE
+set-ctype 71		: setct-CredRevReqTBE
+set-ctype 72		: setct-CredRevReqTBEX
+set-ctype 73		: setct-CredRevResTBE
+set-ctype 74		: setct-BatchAdminReqTBE
+set-ctype 75		: setct-BatchAdminResTBE
+set-ctype 76		: setct-RegFormReqTBE
+set-ctype 77		: setct-CertReqTBE
+set-ctype 78		: setct-CertReqTBEX
+set-ctype 79		: setct-CertResTBE
+set-ctype 80		: setct-CRLNotificationTBS
+set-ctype 81		: setct-CRLNotificationResTBS
+set-ctype 82		: setct-BCIDistributionTBS
+
+set-msgExt 1		: setext-genCrypt	: generic cryptogram
+set-msgExt 3		: setext-miAuth		: merchant initiated auth
+set-msgExt 4		: setext-pinSecure
+set-msgExt 5		: setext-pinAny
+set-msgExt 7		: setext-track2
+set-msgExt 8		: setext-cv		: additional verification
+
+set-policy 0		: set-policy-root
+
+set-certExt 0		: setCext-hashedRoot
+set-certExt 1		: setCext-certType
+set-certExt 2		: setCext-merchData
+set-certExt 3		: setCext-cCertRequired
+set-certExt 4		: setCext-tunneling
+set-certExt 5		: setCext-setExt
+set-certExt 6		: setCext-setQualf
+set-certExt 7		: setCext-PGWYcapabilities
+set-certExt 8		: setCext-TokenIdentifier
+set-certExt 9		: setCext-Track2Data
+set-certExt 10		: setCext-TokenType
+set-certExt 11		: setCext-IssuerCapabilities
+
+set-attr 0		: setAttr-Cert
+set-attr 1		: setAttr-PGWYcap	: payment gateway capabilities
+set-attr 2		: setAttr-TokenType
+set-attr 3		: setAttr-IssCap	: issuer capabilities
+
+setAttr-Cert 0		: set-rootKeyThumb
+setAttr-Cert 1		: set-addPolicy
+
+setAttr-TokenType 1	: setAttr-Token-EMV
+setAttr-TokenType 2	: setAttr-Token-B0Prime
+
+setAttr-IssCap 3	: setAttr-IssCap-CVM
+setAttr-IssCap 4	: setAttr-IssCap-T2
+setAttr-IssCap 5	: setAttr-IssCap-Sig
+
+setAttr-IssCap-CVM 1	: setAttr-GenCryptgrm	: generate cryptogram
+setAttr-IssCap-T2 1	: setAttr-T2Enc		: encrypted track 2
+setAttr-IssCap-T2 2	: setAttr-T2cleartxt	: cleartext track 2
+
+setAttr-IssCap-Sig 1	: setAttr-TokICCsig	: ICC or token signature
+setAttr-IssCap-Sig 2	: setAttr-SecDevSig	: secure device signature
+
+set-brand 1		: set-brand-IATA-ATA
+set-brand 30		: set-brand-Diners
+set-brand 34		: set-brand-AmericanExpress
+set-brand 35		: set-brand-JCB
+set-brand 4		: set-brand-Visa
+set-brand 5		: set-brand-MasterCard
+set-brand 6011		: set-brand-Novus
+
+rsadsi 3 10		: DES-CDMF		: des-cdmf
+rsadsi 1 1 6		: rsaOAEPEncryptionSET
+
+			: Oakley-EC2N-3		: ipsec3
+			: Oakley-EC2N-4		: ipsec4
+
+iso 0 10118 3 0 55	: whirlpool
+
+# GOST OIDs
+
+member-body 643 2 2	: cryptopro
+member-body 643 2 9	: cryptocom
+member-body 643 7 1	: id-tc26
+
+cryptopro 3		: id-GostR3411-94-with-GostR3410-2001 : GOST R 34.11-94 with GOST R 34.10-2001
+cryptopro 4		: id-GostR3411-94-with-GostR3410-94 : GOST R 34.11-94 with GOST R 34.10-94
+!Cname id-GostR3411-94
+cryptopro 9		: md_gost94		: GOST R 34.11-94
+cryptopro 10		: id-HMACGostR3411-94	: HMAC GOST 34.11-94
+!Cname id-GostR3410-2001
+cryptopro 19		: gost2001	: GOST R 34.10-2001
+!Cname id-GostR3410-94
+cryptopro 20		: gost94	: GOST R 34.10-94
+!Cname id-Gost28147-89
+cryptopro 21		: gost89 		: GOST 28147-89
+			: gost89-cnt
+			: gost89-cnt-12
+			: gost89-cbc
+			: gost89-ecb
+			: gost89-ctr
+!Cname id-Gost28147-89-MAC
+cryptopro 22		: gost-mac	: GOST 28147-89 MAC
+			: gost-mac-12
+!Cname id-GostR3411-94-prf
+cryptopro 23		: prf-gostr3411-94	: GOST R 34.11-94 PRF
+cryptopro 98		: id-GostR3410-2001DH	: GOST R 34.10-2001 DH
+cryptopro 99		: id-GostR3410-94DH	: GOST R 34.10-94 DH
+
+cryptopro 14 1		: id-Gost28147-89-CryptoPro-KeyMeshing
+cryptopro 14 0		: id-Gost28147-89-None-KeyMeshing
+
+# GOST parameter set OIDs
+
+cryptopro 30 0		: id-GostR3411-94-TestParamSet
+cryptopro 30 1		: id-GostR3411-94-CryptoProParamSet
+
+cryptopro 31 0		: id-Gost28147-89-TestParamSet
+cryptopro 31 1		: id-Gost28147-89-CryptoPro-A-ParamSet
+cryptopro 31 2		: id-Gost28147-89-CryptoPro-B-ParamSet
+cryptopro 31 3		: id-Gost28147-89-CryptoPro-C-ParamSet
+cryptopro 31 4		: id-Gost28147-89-CryptoPro-D-ParamSet
+cryptopro 31 5		: id-Gost28147-89-CryptoPro-Oscar-1-1-ParamSet
+cryptopro 31 6		: id-Gost28147-89-CryptoPro-Oscar-1-0-ParamSet
+cryptopro 31 7		: id-Gost28147-89-CryptoPro-RIC-1-ParamSet
+
+cryptopro 32 0		: id-GostR3410-94-TestParamSet
+cryptopro 32 2		: id-GostR3410-94-CryptoPro-A-ParamSet
+cryptopro 32 3		: id-GostR3410-94-CryptoPro-B-ParamSet
+cryptopro 32 4		: id-GostR3410-94-CryptoPro-C-ParamSet
+cryptopro 32 5		: id-GostR3410-94-CryptoPro-D-ParamSet
+
+cryptopro 33 1		: id-GostR3410-94-CryptoPro-XchA-ParamSet
+cryptopro 33 2		: id-GostR3410-94-CryptoPro-XchB-ParamSet
+cryptopro 33 3		: id-GostR3410-94-CryptoPro-XchC-ParamSet
+
+cryptopro 35 0		: id-GostR3410-2001-TestParamSet
+cryptopro 35 1		: id-GostR3410-2001-CryptoPro-A-ParamSet
+cryptopro 35 2		: id-GostR3410-2001-CryptoPro-B-ParamSet
+cryptopro 35 3		: id-GostR3410-2001-CryptoPro-C-ParamSet
+
+cryptopro 36 0		: id-GostR3410-2001-CryptoPro-XchA-ParamSet
+cryptopro 36 1		: id-GostR3410-2001-CryptoPro-XchB-ParamSet
+
+id-GostR3410-94 1	: id-GostR3410-94-a
+id-GostR3410-94 2	: id-GostR3410-94-aBis
+id-GostR3410-94 3	: id-GostR3410-94-b
+id-GostR3410-94 4	: id-GostR3410-94-bBis
+
+# Cryptocom LTD GOST OIDs
+
+cryptocom 1 6 1		: id-Gost28147-89-cc	: GOST 28147-89 Cryptocom ParamSet
+!Cname id-GostR3410-94-cc
+cryptocom 1 5 3		: gost94cc	: GOST 34.10-94 Cryptocom
+!Cname id-GostR3410-2001-cc
+cryptocom 1 5 4		: gost2001cc	: GOST 34.10-2001 Cryptocom
+
+cryptocom 1 3 3		: id-GostR3411-94-with-GostR3410-94-cc : GOST R 34.11-94 with GOST R 34.10-94 Cryptocom
+cryptocom 1 3 4		: id-GostR3411-94-with-GostR3410-2001-cc : GOST R 34.11-94 with GOST R 34.10-2001 Cryptocom
+
+cryptocom 1 8 1		: id-GostR3410-2001-ParamSet-cc : GOST R 3410-2001 Parameter Set Cryptocom
+
+# TC26 GOST OIDs
+
+id-tc26 1 		: id-tc26-algorithms
+id-tc26-algorithms 1	: id-tc26-sign
+!Cname id-GostR3410-2012-256
+id-tc26-sign 1		: gost2012_256: GOST R 34.10-2012 with 256 bit modulus
+!Cname id-GostR3410-2012-512
+id-tc26-sign 2		: gost2012_512: GOST R 34.10-2012 with 512 bit modulus
+
+id-tc26-algorithms 2	: id-tc26-digest
+!Cname id-GostR3411-2012-256
+id-tc26-digest 2	: md_gost12_256: GOST R 34.11-2012 with 256 bit hash
+!Cname id-GostR3411-2012-512
+id-tc26-digest 3	: md_gost12_512: GOST R 34.11-2012 with 512 bit hash
+
+id-tc26-algorithms 3	: id-tc26-signwithdigest
+id-tc26-signwithdigest 2: id-tc26-signwithdigest-gost3410-2012-256: GOST R 34.10-2012 with GOST R 34.11-2012 (256 bit)
+id-tc26-signwithdigest 3: id-tc26-signwithdigest-gost3410-2012-512: GOST R 34.10-2012 with GOST R 34.11-2012 (512 bit)
+
+id-tc26-algorithms 4	: id-tc26-mac
+id-tc26-mac 1		: id-tc26-hmac-gost-3411-2012-256 : HMAC GOST 34.11-2012 256 bit
+id-tc26-mac 2		: id-tc26-hmac-gost-3411-2012-512 : HMAC GOST 34.11-2012 512 bit
+
+id-tc26-algorithms 5	: id-tc26-cipher
+id-tc26-cipher 1	:  id-tc26-cipher-gostr3412-2015-magma
+id-tc26-cipher-gostr3412-2015-magma 1	: id-tc26-cipher-gostr3412-2015-magma-ctracpkm
+id-tc26-cipher-gostr3412-2015-magma 2	: id-tc26-cipher-gostr3412-2015-magma-ctracpkm-omac
+id-tc26-cipher 2	:  id-tc26-cipher-gostr3412-2015-kuznyechik
+id-tc26-cipher-gostr3412-2015-kuznyechik 1	: id-tc26-cipher-gostr3412-2015-kuznyechik-ctracpkm
+id-tc26-cipher-gostr3412-2015-kuznyechik 2	: id-tc26-cipher-gostr3412-2015-kuznyechik-ctracpkm-omac
+
+id-tc26-algorithms 6	: id-tc26-agreement
+id-tc26-agreement 1	: id-tc26-agreement-gost-3410-2012-256
+id-tc26-agreement 2	: id-tc26-agreement-gost-3410-2012-512
+
+id-tc26-algorithms 7	:	id-tc26-wrap
+id-tc26-wrap 1	: id-tc26-wrap-gostr3412-2015-magma
+id-tc26-wrap-gostr3412-2015-magma 1	: id-tc26-wrap-gostr3412-2015-magma-kexp15
+id-tc26-wrap 2	: id-tc26-wrap-gostr3412-2015-kuznyechik
+id-tc26-wrap-gostr3412-2015-magma 1	: id-tc26-wrap-gostr3412-2015-kuznyechik-kexp15
+
+id-tc26 2 		: id-tc26-constants
+
+id-tc26-constants 1	: id-tc26-sign-constants
+id-tc26-sign-constants 1: id-tc26-gost-3410-2012-256-constants
+id-tc26-gost-3410-2012-256-constants 1	: id-tc26-gost-3410-2012-256-paramSetA: GOST R 34.10-2012 (256 bit) ParamSet A
+id-tc26-gost-3410-2012-256-constants 2	: id-tc26-gost-3410-2012-256-paramSetB: GOST R 34.10-2012 (256 bit) ParamSet B
+id-tc26-gost-3410-2012-256-constants 3	: id-tc26-gost-3410-2012-256-paramSetC: GOST R 34.10-2012 (256 bit) ParamSet C
+id-tc26-gost-3410-2012-256-constants 4	: id-tc26-gost-3410-2012-256-paramSetD: GOST R 34.10-2012 (256 bit) ParamSet D
+id-tc26-sign-constants 2: id-tc26-gost-3410-2012-512-constants
+id-tc26-gost-3410-2012-512-constants 0	: id-tc26-gost-3410-2012-512-paramSetTest: GOST R 34.10-2012 (512 bit) testing parameter set
+id-tc26-gost-3410-2012-512-constants 1	: id-tc26-gost-3410-2012-512-paramSetA: GOST R 34.10-2012 (512 bit) ParamSet A
+id-tc26-gost-3410-2012-512-constants 2	: id-tc26-gost-3410-2012-512-paramSetB: GOST R 34.10-2012 (512 bit) ParamSet B
+id-tc26-gost-3410-2012-512-constants 3	: id-tc26-gost-3410-2012-512-paramSetC: GOST R 34.10-2012 (512 bit) ParamSet C
+
+id-tc26-constants 2     : id-tc26-digest-constants
+id-tc26-constants 5     : id-tc26-cipher-constants
+id-tc26-cipher-constants 1	: id-tc26-gost-28147-constants
+id-tc26-gost-28147-constants 1	: id-tc26-gost-28147-param-Z : GOST 28147-89 TC26 parameter set
+
+member-body 643 3 131 1 1	: INN	: INN
+member-body 643 100 1		: OGRN	: OGRN
+member-body 643 100 3		: SNILS	: SNILS
+member-body 643 100 111	: subjectSignTool	: Signing Tool of Subject
+member-body 643 100 112	: issuerSignTool	: Signing Tool of Issuer
+
+#GOST R34.13-2015 Grasshopper "Kuznechik"
+			: grasshopper-ecb
+			: grasshopper-ctr
+			: grasshopper-ofb
+			: grasshopper-cbc
+			: grasshopper-cfb
+			: grasshopper-mac
+
+#GOST R34.13-2015 Magma
+			: magma-ecb
+			: magma-ctr
+			: magma-ofb
+			: magma-cbc
+			: magma-cfb
+			: magma-mac
+
+# Definitions for Camellia cipher - CBC MODE
+
+1 2 392 200011 61 1 1 1 2 : CAMELLIA-128-CBC		: camellia-128-cbc
+1 2 392 200011 61 1 1 1 3 : CAMELLIA-192-CBC		: camellia-192-cbc
+1 2 392 200011 61 1 1 1 4 : CAMELLIA-256-CBC		: camellia-256-cbc
+1 2 392 200011 61 1 1 3 2 : id-camellia128-wrap
+1 2 392 200011 61 1 1 3 3 : id-camellia192-wrap
+1 2 392 200011 61 1 1 3 4 : id-camellia256-wrap
+
+# Definitions for Camellia cipher - ECB, CFB, OFB MODE
+
+!Alias ntt-ds 0 3 4401 5
+!Alias camellia ntt-ds 3 1 9
+
+camellia 1		: CAMELLIA-128-ECB		: camellia-128-ecb
+!Cname camellia-128-ofb128
+camellia 3		: CAMELLIA-128-OFB		: camellia-128-ofb
+!Cname camellia-128-cfb128
+camellia 4		: CAMELLIA-128-CFB		: camellia-128-cfb
+camellia 6		: CAMELLIA-128-GCM		: camellia-128-gcm
+camellia 7		: CAMELLIA-128-CCM		: camellia-128-ccm
+camellia 9		: CAMELLIA-128-CTR		: camellia-128-ctr
+camellia 10		: CAMELLIA-128-CMAC		: camellia-128-cmac
+
+camellia 21		: CAMELLIA-192-ECB		: camellia-192-ecb
+!Cname camellia-192-ofb128
+camellia 23		: CAMELLIA-192-OFB		: camellia-192-ofb
+!Cname camellia-192-cfb128
+camellia 24		: CAMELLIA-192-CFB		: camellia-192-cfb
+camellia 26		: CAMELLIA-192-GCM		: camellia-192-gcm
+camellia 27		: CAMELLIA-192-CCM		: camellia-192-ccm
+camellia 29		: CAMELLIA-192-CTR		: camellia-192-ctr
+camellia 30		: CAMELLIA-192-CMAC		: camellia-192-cmac
+
+camellia 41		: CAMELLIA-256-ECB		: camellia-256-ecb
+!Cname camellia-256-ofb128
+camellia 43		: CAMELLIA-256-OFB		: camellia-256-ofb
+!Cname camellia-256-cfb128
+camellia 44		: CAMELLIA-256-CFB		: camellia-256-cfb
+camellia 46		: CAMELLIA-256-GCM		: camellia-256-gcm
+camellia 47		: CAMELLIA-256-CCM		: camellia-256-ccm
+camellia 49		: CAMELLIA-256-CTR		: camellia-256-ctr
+camellia 50		: CAMELLIA-256-CMAC		: camellia-256-cmac
+
+# There are no OIDs for these modes...
+
+			: CAMELLIA-128-CFB1		: camellia-128-cfb1
+			: CAMELLIA-192-CFB1		: camellia-192-cfb1
+			: CAMELLIA-256-CFB1		: camellia-256-cfb1
+			: CAMELLIA-128-CFB8		: camellia-128-cfb8
+			: CAMELLIA-192-CFB8		: camellia-192-cfb8
+			: CAMELLIA-256-CFB8		: camellia-256-cfb8
+
+# Definitions for ARIA cipher
+
+!Alias aria 1 2 410 200046 1 1
+aria 1                  : ARIA-128-ECB                  : aria-128-ecb
+aria 2                  : ARIA-128-CBC                  : aria-128-cbc
+!Cname aria-128-cfb128
+aria 3                  : ARIA-128-CFB                  : aria-128-cfb
+!Cname aria-128-ofb128
+aria 4                  : ARIA-128-OFB                  : aria-128-ofb
+aria 5			: ARIA-128-CTR                  : aria-128-ctr
+
+aria 6                  : ARIA-192-ECB                  : aria-192-ecb
+aria 7                  : ARIA-192-CBC                  : aria-192-cbc
+!Cname aria-192-cfb128
+aria 8                  : ARIA-192-CFB                  : aria-192-cfb
+!Cname aria-192-ofb128
+aria 9                  : ARIA-192-OFB                  : aria-192-ofb
+aria 10                 : ARIA-192-CTR                  : aria-192-ctr
+
+aria 11                 : ARIA-256-ECB                  : aria-256-ecb
+aria 12                 : ARIA-256-CBC                  : aria-256-cbc
+!Cname aria-256-cfb128
+aria 13                 : ARIA-256-CFB                  : aria-256-cfb
+!Cname aria-256-ofb128
+aria 14                 : ARIA-256-OFB                  : aria-256-ofb
+aria 15                 : ARIA-256-CTR                  : aria-256-ctr
+
+# There are no OIDs for these ARIA modes...
+                        : ARIA-128-CFB1                 : aria-128-cfb1
+                        : ARIA-192-CFB1                 : aria-192-cfb1
+                        : ARIA-256-CFB1                 : aria-256-cfb1
+                        : ARIA-128-CFB8                 : aria-128-cfb8
+                        : ARIA-192-CFB8                 : aria-192-cfb8
+                        : ARIA-256-CFB8                 : aria-256-cfb8
+
+aria 37                 : ARIA-128-CCM                  : aria-128-ccm
+aria 38                 : ARIA-192-CCM                  : aria-192-ccm
+aria 39                 : ARIA-256-CCM                  : aria-256-ccm
+aria 34                 : ARIA-128-GCM                  : aria-128-gcm
+aria 35                 : ARIA-192-GCM                  : aria-192-gcm
+aria 36                 : ARIA-256-GCM                  : aria-256-gcm
+
+# Definitions for SEED cipher - ECB, CBC, OFB mode
+
+member-body 410 200004  : KISA          : kisa
+kisa 1 3                : SEED-ECB      : seed-ecb
+kisa 1 4                : SEED-CBC      : seed-cbc
+!Cname seed-cfb128
+kisa 1 5                : SEED-CFB      : seed-cfb
+!Cname seed-ofb128
+kisa 1 6                : SEED-OFB      : seed-ofb
+
+
+# Definitions for SM4 cipher
+
+sm-scheme 104 1         : SM4-ECB             : sm4-ecb
+sm-scheme 104 2         : SM4-CBC             : sm4-cbc
+!Cname sm4-ofb128
+sm-scheme 104 3         : SM4-OFB             : sm4-ofb
+!Cname sm4-cfb128
+sm-scheme 104 4         : SM4-CFB             : sm4-cfb
+sm-scheme 104 5         : SM4-CFB1            : sm4-cfb1
+sm-scheme 104 6         : SM4-CFB8            : sm4-cfb8
+sm-scheme 104 7         : SM4-CTR             : sm4-ctr
+
+# There is no OID that just denotes "HMAC" oddly enough...
+
+			: HMAC				: hmac
+# Nor CMAC either
+			: CMAC				: cmac
+
+# Synthetic composite ciphersuites
+			: RC4-HMAC-MD5			: rc4-hmac-md5
+			: AES-128-CBC-HMAC-SHA1		: aes-128-cbc-hmac-sha1
+			: AES-192-CBC-HMAC-SHA1		: aes-192-cbc-hmac-sha1
+			: AES-256-CBC-HMAC-SHA1		: aes-256-cbc-hmac-sha1
+			: AES-128-CBC-HMAC-SHA256	: aes-128-cbc-hmac-sha256
+			: AES-192-CBC-HMAC-SHA256	: aes-192-cbc-hmac-sha256
+			: AES-256-CBC-HMAC-SHA256	: aes-256-cbc-hmac-sha256
+			: ChaCha20-Poly1305		: chacha20-poly1305
+			: ChaCha20			: chacha20
+
+ISO-US 10046 2 1	: dhpublicnumber		: X9.42 DH
+
+# RFC 5639 curve OIDs (see http://www.ietf.org/rfc/rfc5639.txt)
+# versionOne OBJECT IDENTIFIER ::= {
+# iso(1) identified-organization(3) teletrust(36) algorithm(3)
+# signature-algorithm(3) ecSign(2) ecStdCurvesAndGeneration(8)
+# ellipticCurve(1) 1 }
+1 3 36 3 3 2 8 1 1 1 : brainpoolP160r1
+1 3 36 3 3 2 8 1 1 2 : brainpoolP160t1
+1 3 36 3 3 2 8 1 1 3 : brainpoolP192r1
+1 3 36 3 3 2 8 1 1 4 : brainpoolP192t1
+1 3 36 3 3 2 8 1 1 5 : brainpoolP224r1
+1 3 36 3 3 2 8 1 1 6 : brainpoolP224t1
+1 3 36 3 3 2 8 1 1 7 : brainpoolP256r1
+1 3 36 3 3 2 8 1 1 8 : brainpoolP256t1
+1 3 36 3 3 2 8 1 1 9 : brainpoolP320r1
+1 3 36 3 3 2 8 1 1 10 : brainpoolP320t1
+1 3 36 3 3 2 8 1 1 11 : brainpoolP384r1
+1 3 36 3 3 2 8 1 1 12 : brainpoolP384t1
+1 3 36 3 3 2 8 1 1 13 : brainpoolP512r1
+1 3 36 3 3 2 8 1 1 14 : brainpoolP512t1
+
+# ECDH schemes from RFC5753
+!Alias x9-63-scheme 1 3 133 16 840 63 0
+!Alias secg-scheme certicom-arc 1
+
+x9-63-scheme 2   : dhSinglePass-stdDH-sha1kdf-scheme
+secg-scheme 11 0 : dhSinglePass-stdDH-sha224kdf-scheme
+secg-scheme 11 1 : dhSinglePass-stdDH-sha256kdf-scheme
+secg-scheme 11 2 : dhSinglePass-stdDH-sha384kdf-scheme
+secg-scheme 11 3 : dhSinglePass-stdDH-sha512kdf-scheme
+
+x9-63-scheme 3   : dhSinglePass-cofactorDH-sha1kdf-scheme
+secg-scheme 14 0 : dhSinglePass-cofactorDH-sha224kdf-scheme
+secg-scheme 14 1 : dhSinglePass-cofactorDH-sha256kdf-scheme
+secg-scheme 14 2 : dhSinglePass-cofactorDH-sha384kdf-scheme
+secg-scheme 14 3 : dhSinglePass-cofactorDH-sha512kdf-scheme
+# NIDs for use with lookup tables.
+                 : dh-std-kdf
+                 : dh-cofactor-kdf
+
+# RFC 6962 Extension OIDs (see http://www.ietf.org/rfc/rfc6962.txt)
+1 3 6 1 4 1 11129 2 4 2	: ct_precert_scts		: CT Precertificate SCTs
+1 3 6 1 4 1 11129 2 4 3	: ct_precert_poison		: CT Precertificate Poison
+1 3 6 1 4 1 11129 2 4 4	: ct_precert_signer		: CT Precertificate Signer
+1 3 6 1 4 1 11129 2 4 5	: ct_cert_scts			: CT Certificate SCTs
+
+# CABForum EV SSL Certificate Guidelines
+# (see https://cabforum.org/extended-validation/)
+# OIDs for Subject Jurisdiction of Incorporation or Registration
+1 3 6 1 4 1 311 60 2 1 1	: jurisdictionL		: jurisdictionLocalityName
+1 3 6 1 4 1 311 60 2 1 2	: jurisdictionST	: jurisdictionStateOrProvinceName
+1 3 6 1 4 1 311 60 2 1 3	: jurisdictionC		: jurisdictionCountryName
+
+# SCRYPT algorithm
+!Cname id-scrypt
+1 3 6 1 4 1 11591 4 11		: id-scrypt         : scrypt
+
+# NID for TLS1 PRF
+                            : TLS1-PRF          : tls1-prf
+
+# NID for HKDF
+                            : HKDF              : hkdf
+
+# RFC 4556
+1 3 6 1 5 2 3 : id-pkinit
+id-pkinit 4                     : pkInitClientAuth      : PKINIT Client Auth
+id-pkinit 5                     : pkInitKDC             : Signing KDC Response
+
+# From RFC8410
+1 3 101 110 : X25519
+1 3 101 111 : X448
+1 3 101 112 : ED25519
+1 3 101 113 : ED448
+
+
+# NIDs for cipher key exchange
+                            : KxRSA        : kx-rsa
+                            : KxECDHE      : kx-ecdhe
+                            : KxDHE        : kx-dhe
+                            : KxECDHE-PSK  : kx-ecdhe-psk
+                            : KxDHE-PSK    : kx-dhe-psk
+                            : KxRSA_PSK    : kx-rsa-psk
+                            : KxPSK        : kx-psk
+                            : KxSRP        : kx-srp
+                            : KxGOST       : kx-gost
+                            : KxANY        : kx-any
+
+# NIDs for cipher authentication
+                            : AuthRSA      : auth-rsa
+                            : AuthECDSA    : auth-ecdsa
+                            : AuthPSK      : auth-psk
+                            : AuthDSS      : auth-dss
+                            : AuthGOST01   : auth-gost01
+                            : AuthGOST12   : auth-gost12
+                            : AuthSRP      : auth-srp
+                            : AuthNULL     : auth-null
+                            : AuthANY      : auth-any
+# NID for Poly1305
+                            : Poly1305     : poly1305
+# NID for SipHash
+                            : SipHash      : siphash
+
+# NIDs for RFC7919 DH parameters
+                            : ffdhe2048
+                            : ffdhe3072
+                            : ffdhe4096
+                            : ffdhe6144
+                            : ffdhe8192
+
+# OIDs for DSTU-4145/DSTU-7564 (http://zakon2.rada.gov.ua/laws/show/z0423-17)
+
+# DSTU OIDs
+member-body 804   : ISO-UA
+ISO-UA 2 1 1 1    : ua-pki
+ua-pki 1 1 1      : dstu28147         : DSTU Gost 28147-2009
+dstu28147 2       : dstu28147-ofb     : DSTU Gost 28147-2009 OFB mode
+dstu28147 3       : dstu28147-cfb     : DSTU Gost 28147-2009 CFB mode
+dstu28147 5       : dstu28147-wrap    : DSTU Gost 28147-2009 key wrap
+
+ua-pki 1 1 2      : hmacWithDstu34311 : HMAC DSTU Gost 34311-95
+ua-pki 1 2 1      : dstu34311         : DSTU Gost 34311-95
+
+ua-pki 1 3 1 1    : dstu4145le        : DSTU 4145-2002 little endian
+dstu4145le 1 1    : dstu4145be        : DSTU 4145-2002 big endian
+
+# 1.2.804. 2.1.1.1 1.3.1.1  .2.6
+#     UA    ua-pki  4145 le
+# DSTU named curves
+dstu4145le 2 0 : uacurve0 : DSTU curve 0
+dstu4145le 2 1 : uacurve1 : DSTU curve 1
+dstu4145le 2 2 : uacurve2 : DSTU curve 2
+dstu4145le 2 3 : uacurve3 : DSTU curve 3
+dstu4145le 2 4 : uacurve4 : DSTU curve 4
+dstu4145le 2 5 : uacurve5 : DSTU curve 5
+dstu4145le 2 6 : uacurve6 : DSTU curve 6
+dstu4145le 2 7 : uacurve7 : DSTU curve 7
+dstu4145le 2 8 : uacurve8 : DSTU curve 8
+dstu4145le 2 9 : uacurve9 : DSTU curve 9
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/objects/objxref.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/objxref.pl
new file mode 100644
index 000000000..ce76cadae
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/objects/objxref.pl
@@ -0,0 +1,142 @@
+#! /usr/bin/env perl
+# Copyright 1998-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+use strict;
+
+my %xref_tbl;
+my %oid_tbl;
+
+my ($mac_file, $xref_file) = @ARGV;
+
+# Output year depends on the year of the script and the input file.
+my $YEAR = [localtime([stat($0)]->[9])]->[5] + 1900;
+my $iYEAR = [localtime([stat($mac_file)]->[9])]->[5] + 1900;
+$YEAR = $iYEAR if $iYEAR > $YEAR;
+$iYEAR = [localtime([stat($xref_file)]->[9])]->[5] + 1900;
+$YEAR = $iYEAR if $iYEAR > $YEAR;
+
+open(IN, $mac_file) || die "Can't open $mac_file, $!\n";
+
+# Read in OID nid values for a lookup table.
+
+while (<IN>)
+	{
+	s|\R$||;                # Better chomp
+	my ($name, $num) = /^(\S+)\s+(\S+)$/;
+	$oid_tbl{$name} = $num;
+	}
+close IN;
+
+open(IN, $xref_file) || die "Can't open $xref_file, $!\n";
+
+my $ln = 1;
+
+while (<IN>)
+	{
+	s|\R$||;                # Better chomp
+	s/#.*$//;
+	next if (/^\S*$/);
+	my ($xr, $p1, $p2) = /^(\S+)\s+(\S+)\s+(\S+)/;
+	check_oid($xr);
+	check_oid($p1);
+	check_oid($p2);
+	$xref_tbl{$xr} = [$p1, $p2, $ln];
+	}
+
+my @xrkeys = keys %xref_tbl;
+
+my @srt1 = sort { $oid_tbl{$a} <=> $oid_tbl{$b}} @xrkeys;
+
+my $i;
+for($i = 0; $i <= $#srt1; $i++)
+	{
+	$xref_tbl{$srt1[$i]}[2] = $i;
+	}
+
+my @srt2 = sort
+	{
+	my$ap1 = $oid_tbl{$xref_tbl{$a}[0]};
+	my$bp1 = $oid_tbl{$xref_tbl{$b}[0]};
+	return $ap1 - $bp1 if ($ap1 != $bp1);
+	my$ap2 = $oid_tbl{$xref_tbl{$a}[1]};
+	my$bp2 = $oid_tbl{$xref_tbl{$b}[1]};
+
+	return $ap2 - $bp2;
+	} @xrkeys;
+
+my $pname = $0;
+$pname =~ s|.*/||;
+
+print <<EOF;
+/*
+ * WARNING: do not edit!
+ * Generated by $pname
+ *
+ * Copyright 1998-$YEAR The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+
+typedef struct {
+    int sign_id;
+    int hash_id;
+    int pkey_id;
+} nid_triple;
+
+DEFINE_STACK_OF(nid_triple)
+
+static const nid_triple sigoid_srt[] = {
+EOF
+
+foreach (@srt1)
+	{
+	my $xr = $_;
+	my ($p1, $p2) = @{$xref_tbl{$_}};
+	my $o1 = "    {NID_$xr, NID_$p1,";
+	my $o2 = "NID_$p2},";
+        if (length("$o1 $o2") < 78)
+		{
+		print "$o1 $o2\n";
+		}
+	else
+		{
+		print "$o1\n     $o2\n";
+		}
+        }
+
+print "};";
+print <<EOF;
+
+
+static const nid_triple *const sigoid_srt_xref[] = {
+EOF
+
+foreach (@srt2)
+	{
+	my ($p1, $p2, $x) = @{$xref_tbl{$_}};
+	# If digest or signature algorithm is "undef" then the algorithm
+	# needs special handling and is excluded from the cross reference table.
+	next if $p1 eq "undef" || $p2 eq "undef";
+	print "    \&sigoid_srt\[$x\],\n";
+	}
+
+print "};\n";
+
+sub check_oid
+	{
+	my ($chk) = @_;
+	if (!exists $oid_tbl{$chk})
+		{
+		die "Can't find \"$chk\"\n";
+		}
+	}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/build.info
new file mode 100644
index 000000000..0902caae3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/build.info
@@ -0,0 +1,4 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        ocsp_asn.c ocsp_ext.c ocsp_ht.c ocsp_lib.c ocsp_cl.c \
+        ocsp_srv.c ocsp_prn.c ocsp_vfy.c ocsp_err.c v3_ocsp.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_asn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_asn.c
new file mode 100644
index 000000000..1e0b82797
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_asn.c
@@ -0,0 +1,135 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/ocsp.h>
+#include "ocsp_lcl.h"
+
+ASN1_SEQUENCE(OCSP_SIGNATURE) = {
+        ASN1_EMBED(OCSP_SIGNATURE, signatureAlgorithm, X509_ALGOR),
+        ASN1_SIMPLE(OCSP_SIGNATURE, signature, ASN1_BIT_STRING),
+        ASN1_EXP_SEQUENCE_OF_OPT(OCSP_SIGNATURE, certs, X509, 0)
+} ASN1_SEQUENCE_END(OCSP_SIGNATURE)
+
+IMPLEMENT_ASN1_FUNCTIONS(OCSP_SIGNATURE)
+
+ASN1_SEQUENCE(OCSP_CERTID) = {
+        ASN1_EMBED(OCSP_CERTID, hashAlgorithm, X509_ALGOR),
+        ASN1_EMBED(OCSP_CERTID, issuerNameHash, ASN1_OCTET_STRING),
+        ASN1_EMBED(OCSP_CERTID, issuerKeyHash, ASN1_OCTET_STRING),
+        ASN1_EMBED(OCSP_CERTID, serialNumber, ASN1_INTEGER)
+} ASN1_SEQUENCE_END(OCSP_CERTID)
+
+IMPLEMENT_ASN1_FUNCTIONS(OCSP_CERTID)
+
+ASN1_SEQUENCE(OCSP_ONEREQ) = {
+        ASN1_SIMPLE(OCSP_ONEREQ, reqCert, OCSP_CERTID),
+        ASN1_EXP_SEQUENCE_OF_OPT(OCSP_ONEREQ, singleRequestExtensions, X509_EXTENSION, 0)
+} ASN1_SEQUENCE_END(OCSP_ONEREQ)
+
+IMPLEMENT_ASN1_FUNCTIONS(OCSP_ONEREQ)
+
+ASN1_SEQUENCE(OCSP_REQINFO) = {
+        ASN1_EXP_OPT(OCSP_REQINFO, version, ASN1_INTEGER, 0),
+        ASN1_EXP_OPT(OCSP_REQINFO, requestorName, GENERAL_NAME, 1),
+        ASN1_SEQUENCE_OF(OCSP_REQINFO, requestList, OCSP_ONEREQ),
+        ASN1_EXP_SEQUENCE_OF_OPT(OCSP_REQINFO, requestExtensions, X509_EXTENSION, 2)
+} ASN1_SEQUENCE_END(OCSP_REQINFO)
+
+IMPLEMENT_ASN1_FUNCTIONS(OCSP_REQINFO)
+
+ASN1_SEQUENCE(OCSP_REQUEST) = {
+        ASN1_EMBED(OCSP_REQUEST, tbsRequest, OCSP_REQINFO),
+        ASN1_EXP_OPT(OCSP_REQUEST, optionalSignature, OCSP_SIGNATURE, 0)
+} ASN1_SEQUENCE_END(OCSP_REQUEST)
+
+IMPLEMENT_ASN1_FUNCTIONS(OCSP_REQUEST)
+
+/* OCSP_RESPONSE templates */
+
+ASN1_SEQUENCE(OCSP_RESPBYTES) = {
+            ASN1_SIMPLE(OCSP_RESPBYTES, responseType, ASN1_OBJECT),
+            ASN1_SIMPLE(OCSP_RESPBYTES, response, ASN1_OCTET_STRING)
+} ASN1_SEQUENCE_END(OCSP_RESPBYTES)
+
+IMPLEMENT_ASN1_FUNCTIONS(OCSP_RESPBYTES)
+
+ASN1_SEQUENCE(OCSP_RESPONSE) = {
+        ASN1_SIMPLE(OCSP_RESPONSE, responseStatus, ASN1_ENUMERATED),
+        ASN1_EXP_OPT(OCSP_RESPONSE, responseBytes, OCSP_RESPBYTES, 0)
+} ASN1_SEQUENCE_END(OCSP_RESPONSE)
+
+IMPLEMENT_ASN1_FUNCTIONS(OCSP_RESPONSE)
+
+ASN1_CHOICE(OCSP_RESPID) = {
+           ASN1_EXP(OCSP_RESPID, value.byName, X509_NAME, 1),
+           ASN1_EXP(OCSP_RESPID, value.byKey, ASN1_OCTET_STRING, 2)
+} ASN1_CHOICE_END(OCSP_RESPID)
+
+IMPLEMENT_ASN1_FUNCTIONS(OCSP_RESPID)
+
+ASN1_SEQUENCE(OCSP_REVOKEDINFO) = {
+        ASN1_SIMPLE(OCSP_REVOKEDINFO, revocationTime, ASN1_GENERALIZEDTIME),
+        ASN1_EXP_OPT(OCSP_REVOKEDINFO, revocationReason, ASN1_ENUMERATED, 0)
+} ASN1_SEQUENCE_END(OCSP_REVOKEDINFO)
+
+IMPLEMENT_ASN1_FUNCTIONS(OCSP_REVOKEDINFO)
+
+ASN1_CHOICE(OCSP_CERTSTATUS) = {
+        ASN1_IMP(OCSP_CERTSTATUS, value.good, ASN1_NULL, 0),
+        ASN1_IMP(OCSP_CERTSTATUS, value.revoked, OCSP_REVOKEDINFO, 1),
+        ASN1_IMP(OCSP_CERTSTATUS, value.unknown, ASN1_NULL, 2)
+} ASN1_CHOICE_END(OCSP_CERTSTATUS)
+
+IMPLEMENT_ASN1_FUNCTIONS(OCSP_CERTSTATUS)
+
+ASN1_SEQUENCE(OCSP_SINGLERESP) = {
+           ASN1_SIMPLE(OCSP_SINGLERESP, certId, OCSP_CERTID),
+           ASN1_SIMPLE(OCSP_SINGLERESP, certStatus, OCSP_CERTSTATUS),
+           ASN1_SIMPLE(OCSP_SINGLERESP, thisUpdate, ASN1_GENERALIZEDTIME),
+           ASN1_EXP_OPT(OCSP_SINGLERESP, nextUpdate, ASN1_GENERALIZEDTIME, 0),
+           ASN1_EXP_SEQUENCE_OF_OPT(OCSP_SINGLERESP, singleExtensions, X509_EXTENSION, 1)
+} ASN1_SEQUENCE_END(OCSP_SINGLERESP)
+
+IMPLEMENT_ASN1_FUNCTIONS(OCSP_SINGLERESP)
+
+ASN1_SEQUENCE(OCSP_RESPDATA) = {
+           ASN1_EXP_OPT(OCSP_RESPDATA, version, ASN1_INTEGER, 0),
+           ASN1_EMBED(OCSP_RESPDATA, responderId, OCSP_RESPID),
+           ASN1_SIMPLE(OCSP_RESPDATA, producedAt, ASN1_GENERALIZEDTIME),
+           ASN1_SEQUENCE_OF(OCSP_RESPDATA, responses, OCSP_SINGLERESP),
+           ASN1_EXP_SEQUENCE_OF_OPT(OCSP_RESPDATA, responseExtensions, X509_EXTENSION, 1)
+} ASN1_SEQUENCE_END(OCSP_RESPDATA)
+
+IMPLEMENT_ASN1_FUNCTIONS(OCSP_RESPDATA)
+
+ASN1_SEQUENCE(OCSP_BASICRESP) = {
+           ASN1_EMBED(OCSP_BASICRESP, tbsResponseData, OCSP_RESPDATA),
+           ASN1_EMBED(OCSP_BASICRESP, signatureAlgorithm, X509_ALGOR),
+           ASN1_SIMPLE(OCSP_BASICRESP, signature, ASN1_BIT_STRING),
+           ASN1_EXP_SEQUENCE_OF_OPT(OCSP_BASICRESP, certs, X509, 0)
+} ASN1_SEQUENCE_END(OCSP_BASICRESP)
+
+IMPLEMENT_ASN1_FUNCTIONS(OCSP_BASICRESP)
+
+ASN1_SEQUENCE(OCSP_CRLID) = {
+           ASN1_EXP_OPT(OCSP_CRLID, crlUrl, ASN1_IA5STRING, 0),
+           ASN1_EXP_OPT(OCSP_CRLID, crlNum, ASN1_INTEGER, 1),
+           ASN1_EXP_OPT(OCSP_CRLID, crlTime, ASN1_GENERALIZEDTIME, 2)
+} ASN1_SEQUENCE_END(OCSP_CRLID)
+
+IMPLEMENT_ASN1_FUNCTIONS(OCSP_CRLID)
+
+ASN1_SEQUENCE(OCSP_SERVICELOC) = {
+        ASN1_SIMPLE(OCSP_SERVICELOC, issuer, X509_NAME),
+        ASN1_SEQUENCE_OF_OPT(OCSP_SERVICELOC, locator, ACCESS_DESCRIPTION)
+} ASN1_SEQUENCE_END(OCSP_SERVICELOC)
+
+IMPLEMENT_ASN1_FUNCTIONS(OCSP_SERVICELOC)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_cl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_cl.c
new file mode 100644
index 000000000..739ac0180
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_cl.c
@@ -0,0 +1,396 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include <openssl/pem.h>
+#include <openssl/x509v3.h>
+#include <openssl/ocsp.h>
+#include "ocsp_lcl.h"
+
+/*
+ * Utility functions related to sending OCSP requests and extracting relevant
+ * information from the response.
+ */
+
+/*
+ * Add an OCSP_CERTID to an OCSP request. Return new OCSP_ONEREQ pointer:
+ * useful if we want to add extensions.
+ */
+
+OCSP_ONEREQ *OCSP_request_add0_id(OCSP_REQUEST *req, OCSP_CERTID *cid)
+{
+    OCSP_ONEREQ *one = NULL;
+
+    if ((one = OCSP_ONEREQ_new()) == NULL)
+        return NULL;
+    OCSP_CERTID_free(one->reqCert);
+    one->reqCert = cid;
+    if (req && !sk_OCSP_ONEREQ_push(req->tbsRequest.requestList, one)) {
+        one->reqCert = NULL; /* do not free on error */
+        goto err;
+    }
+    return one;
+ err:
+    OCSP_ONEREQ_free(one);
+    return NULL;
+}
+
+/* Set requestorName from an X509_NAME structure */
+
+int OCSP_request_set1_name(OCSP_REQUEST *req, X509_NAME *nm)
+{
+    GENERAL_NAME *gen;
+
+    gen = GENERAL_NAME_new();
+    if (gen == NULL)
+        return 0;
+    if (!X509_NAME_set(&gen->d.directoryName, nm)) {
+        GENERAL_NAME_free(gen);
+        return 0;
+    }
+    gen->type = GEN_DIRNAME;
+    GENERAL_NAME_free(req->tbsRequest.requestorName);
+    req->tbsRequest.requestorName = gen;
+    return 1;
+}
+
+/* Add a certificate to an OCSP request */
+
+int OCSP_request_add1_cert(OCSP_REQUEST *req, X509 *cert)
+{
+    OCSP_SIGNATURE *sig;
+    if (req->optionalSignature == NULL)
+        req->optionalSignature = OCSP_SIGNATURE_new();
+    sig = req->optionalSignature;
+    if (sig == NULL)
+        return 0;
+    if (cert == NULL)
+        return 1;
+    if (sig->certs == NULL
+        && (sig->certs = sk_X509_new_null()) == NULL)
+        return 0;
+
+    if (!sk_X509_push(sig->certs, cert))
+        return 0;
+    X509_up_ref(cert);
+    return 1;
+}
+
+/*
+ * Sign an OCSP request set the requestorName to the subject name of an
+ * optional signers certificate and include one or more optional certificates
+ * in the request. Behaves like PKCS7_sign().
+ */
+
+int OCSP_request_sign(OCSP_REQUEST *req,
+                      X509 *signer,
+                      EVP_PKEY *key,
+                      const EVP_MD *dgst,
+                      STACK_OF(X509) *certs, unsigned long flags)
+{
+    int i;
+    X509 *x;
+
+    if (!OCSP_request_set1_name(req, X509_get_subject_name(signer)))
+        goto err;
+
+    if ((req->optionalSignature = OCSP_SIGNATURE_new()) == NULL)
+        goto err;
+    if (key) {
+        if (!X509_check_private_key(signer, key)) {
+            OCSPerr(OCSP_F_OCSP_REQUEST_SIGN,
+                    OCSP_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE);
+            goto err;
+        }
+        if (!OCSP_REQUEST_sign(req, key, dgst))
+            goto err;
+    }
+
+    if (!(flags & OCSP_NOCERTS)) {
+        if (!OCSP_request_add1_cert(req, signer))
+            goto err;
+        for (i = 0; i < sk_X509_num(certs); i++) {
+            x = sk_X509_value(certs, i);
+            if (!OCSP_request_add1_cert(req, x))
+                goto err;
+        }
+    }
+
+    return 1;
+ err:
+    OCSP_SIGNATURE_free(req->optionalSignature);
+    req->optionalSignature = NULL;
+    return 0;
+}
+
+/* Get response status */
+
+int OCSP_response_status(OCSP_RESPONSE *resp)
+{
+    return ASN1_ENUMERATED_get(resp->responseStatus);
+}
+
+/*
+ * Extract basic response from OCSP_RESPONSE or NULL if no basic response
+ * present.
+ */
+
+OCSP_BASICRESP *OCSP_response_get1_basic(OCSP_RESPONSE *resp)
+{
+    OCSP_RESPBYTES *rb;
+    rb = resp->responseBytes;
+    if (!rb) {
+        OCSPerr(OCSP_F_OCSP_RESPONSE_GET1_BASIC, OCSP_R_NO_RESPONSE_DATA);
+        return NULL;
+    }
+    if (OBJ_obj2nid(rb->responseType) != NID_id_pkix_OCSP_basic) {
+        OCSPerr(OCSP_F_OCSP_RESPONSE_GET1_BASIC, OCSP_R_NOT_BASIC_RESPONSE);
+        return NULL;
+    }
+
+    return ASN1_item_unpack(rb->response, ASN1_ITEM_rptr(OCSP_BASICRESP));
+}
+
+const ASN1_OCTET_STRING *OCSP_resp_get0_signature(const OCSP_BASICRESP *bs)
+{
+    return bs->signature;
+}
+
+const X509_ALGOR *OCSP_resp_get0_tbs_sigalg(const OCSP_BASICRESP *bs)
+{
+    return &bs->signatureAlgorithm;
+}
+
+const OCSP_RESPDATA *OCSP_resp_get0_respdata(const OCSP_BASICRESP *bs)
+{
+    return &bs->tbsResponseData;
+}
+
+/*
+ * Return number of OCSP_SINGLERESP responses present in a basic response.
+ */
+
+int OCSP_resp_count(OCSP_BASICRESP *bs)
+{
+    if (!bs)
+        return -1;
+    return sk_OCSP_SINGLERESP_num(bs->tbsResponseData.responses);
+}
+
+/* Extract an OCSP_SINGLERESP response with a given index */
+
+OCSP_SINGLERESP *OCSP_resp_get0(OCSP_BASICRESP *bs, int idx)
+{
+    if (!bs)
+        return NULL;
+    return sk_OCSP_SINGLERESP_value(bs->tbsResponseData.responses, idx);
+}
+
+const ASN1_GENERALIZEDTIME *OCSP_resp_get0_produced_at(const OCSP_BASICRESP* bs)
+{
+    return bs->tbsResponseData.producedAt;
+}
+
+const STACK_OF(X509) *OCSP_resp_get0_certs(const OCSP_BASICRESP *bs)
+{
+    return bs->certs;
+}
+
+int OCSP_resp_get0_id(const OCSP_BASICRESP *bs,
+                      const ASN1_OCTET_STRING **pid,
+                      const X509_NAME **pname)
+{
+    const OCSP_RESPID *rid = &bs->tbsResponseData.responderId;
+
+    if (rid->type == V_OCSP_RESPID_NAME) {
+        *pname = rid->value.byName;
+        *pid = NULL;
+    } else if (rid->type == V_OCSP_RESPID_KEY) {
+        *pid = rid->value.byKey;
+        *pname = NULL;
+    } else {
+        return 0;
+    }
+    return 1;
+}
+
+int OCSP_resp_get1_id(const OCSP_BASICRESP *bs,
+                      ASN1_OCTET_STRING **pid,
+                      X509_NAME **pname)
+{
+    const OCSP_RESPID *rid = &bs->tbsResponseData.responderId;
+
+    if (rid->type == V_OCSP_RESPID_NAME) {
+        *pname = X509_NAME_dup(rid->value.byName);
+        *pid = NULL;
+    } else if (rid->type == V_OCSP_RESPID_KEY) {
+        *pid = ASN1_OCTET_STRING_dup(rid->value.byKey);
+        *pname = NULL;
+    } else {
+        return 0;
+    }
+    if (*pname == NULL && *pid == NULL)
+        return 0;
+    return 1;
+}
+
+/* Look single response matching a given certificate ID */
+
+int OCSP_resp_find(OCSP_BASICRESP *bs, OCSP_CERTID *id, int last)
+{
+    int i;
+    STACK_OF(OCSP_SINGLERESP) *sresp;
+    OCSP_SINGLERESP *single;
+    if (!bs)
+        return -1;
+    if (last < 0)
+        last = 0;
+    else
+        last++;
+    sresp = bs->tbsResponseData.responses;
+    for (i = last; i < sk_OCSP_SINGLERESP_num(sresp); i++) {
+        single = sk_OCSP_SINGLERESP_value(sresp, i);
+        if (!OCSP_id_cmp(id, single->certId))
+            return i;
+    }
+    return -1;
+}
+
+/*
+ * Extract status information from an OCSP_SINGLERESP structure. Note: the
+ * revtime and reason values are only set if the certificate status is
+ * revoked. Returns numerical value of status.
+ */
+
+int OCSP_single_get0_status(OCSP_SINGLERESP *single, int *reason,
+                            ASN1_GENERALIZEDTIME **revtime,
+                            ASN1_GENERALIZEDTIME **thisupd,
+                            ASN1_GENERALIZEDTIME **nextupd)
+{
+    int ret;
+    OCSP_CERTSTATUS *cst;
+    if (!single)
+        return -1;
+    cst = single->certStatus;
+    ret = cst->type;
+    if (ret == V_OCSP_CERTSTATUS_REVOKED) {
+        OCSP_REVOKEDINFO *rev = cst->value.revoked;
+        if (revtime)
+            *revtime = rev->revocationTime;
+        if (reason) {
+            if (rev->revocationReason)
+                *reason = ASN1_ENUMERATED_get(rev->revocationReason);
+            else
+                *reason = -1;
+        }
+    }
+    if (thisupd)
+        *thisupd = single->thisUpdate;
+    if (nextupd)
+        *nextupd = single->nextUpdate;
+    return ret;
+}
+
+/*
+ * This function combines the previous ones: look up a certificate ID and if
+ * found extract status information. Return 0 is successful.
+ */
+
+int OCSP_resp_find_status(OCSP_BASICRESP *bs, OCSP_CERTID *id, int *status,
+                          int *reason,
+                          ASN1_GENERALIZEDTIME **revtime,
+                          ASN1_GENERALIZEDTIME **thisupd,
+                          ASN1_GENERALIZEDTIME **nextupd)
+{
+    int i;
+    OCSP_SINGLERESP *single;
+    i = OCSP_resp_find(bs, id, -1);
+    /* Maybe check for multiple responses and give an error? */
+    if (i < 0)
+        return 0;
+    single = OCSP_resp_get0(bs, i);
+    i = OCSP_single_get0_status(single, reason, revtime, thisupd, nextupd);
+    if (status)
+        *status = i;
+    return 1;
+}
+
+/*
+ * Check validity of thisUpdate and nextUpdate fields. It is possible that
+ * the request will take a few seconds to process and/or the time won't be
+ * totally accurate. Therefore to avoid rejecting otherwise valid time we
+ * allow the times to be within 'nsec' of the current time. Also to avoid
+ * accepting very old responses without a nextUpdate field an optional maxage
+ * parameter specifies the maximum age the thisUpdate field can be.
+ */
+
+int OCSP_check_validity(ASN1_GENERALIZEDTIME *thisupd,
+                        ASN1_GENERALIZEDTIME *nextupd, long nsec, long maxsec)
+{
+    int ret = 1;
+    time_t t_now, t_tmp;
+    time(&t_now);
+    /* Check thisUpdate is valid and not more than nsec in the future */
+    if (!ASN1_GENERALIZEDTIME_check(thisupd)) {
+        OCSPerr(OCSP_F_OCSP_CHECK_VALIDITY, OCSP_R_ERROR_IN_THISUPDATE_FIELD);
+        ret = 0;
+    } else {
+        t_tmp = t_now + nsec;
+        if (X509_cmp_time(thisupd, &t_tmp) > 0) {
+            OCSPerr(OCSP_F_OCSP_CHECK_VALIDITY, OCSP_R_STATUS_NOT_YET_VALID);
+            ret = 0;
+        }
+
+        /*
+         * If maxsec specified check thisUpdate is not more than maxsec in
+         * the past
+         */
+        if (maxsec >= 0) {
+            t_tmp = t_now - maxsec;
+            if (X509_cmp_time(thisupd, &t_tmp) < 0) {
+                OCSPerr(OCSP_F_OCSP_CHECK_VALIDITY, OCSP_R_STATUS_TOO_OLD);
+                ret = 0;
+            }
+        }
+    }
+
+    if (!nextupd)
+        return ret;
+
+    /* Check nextUpdate is valid and not more than nsec in the past */
+    if (!ASN1_GENERALIZEDTIME_check(nextupd)) {
+        OCSPerr(OCSP_F_OCSP_CHECK_VALIDITY, OCSP_R_ERROR_IN_NEXTUPDATE_FIELD);
+        ret = 0;
+    } else {
+        t_tmp = t_now - nsec;
+        if (X509_cmp_time(nextupd, &t_tmp) < 0) {
+            OCSPerr(OCSP_F_OCSP_CHECK_VALIDITY, OCSP_R_STATUS_EXPIRED);
+            ret = 0;
+        }
+    }
+
+    /* Also don't allow nextUpdate to precede thisUpdate */
+    if (ASN1_STRING_cmp(nextupd, thisupd) < 0) {
+        OCSPerr(OCSP_F_OCSP_CHECK_VALIDITY,
+                OCSP_R_NEXTUPDATE_BEFORE_THISUPDATE);
+        ret = 0;
+    }
+
+    return ret;
+}
+
+const OCSP_CERTID *OCSP_SINGLERESP_get0_id(const OCSP_SINGLERESP *single)
+{
+    return single->certId;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_err.c
new file mode 100644
index 000000000..660e19366
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_err.c
@@ -0,0 +1,101 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/ocsperr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA OCSP_str_functs[] = {
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_D2I_OCSP_NONCE, 0), "d2i_ocsp_nonce"},
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_BASIC_ADD1_STATUS, 0),
+     "OCSP_basic_add1_status"},
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_BASIC_SIGN, 0), "OCSP_basic_sign"},
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_BASIC_SIGN_CTX, 0),
+     "OCSP_basic_sign_ctx"},
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_BASIC_VERIFY, 0), "OCSP_basic_verify"},
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_CERT_ID_NEW, 0), "OCSP_cert_id_new"},
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_CHECK_DELEGATED, 0),
+     "ocsp_check_delegated"},
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_CHECK_IDS, 0), "ocsp_check_ids"},
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_CHECK_ISSUER, 0), "ocsp_check_issuer"},
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_CHECK_VALIDITY, 0),
+     "OCSP_check_validity"},
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_MATCH_ISSUERID, 0),
+     "ocsp_match_issuerid"},
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_PARSE_URL, 0), "OCSP_parse_url"},
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_REQUEST_SIGN, 0), "OCSP_request_sign"},
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_REQUEST_VERIFY, 0),
+     "OCSP_request_verify"},
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_RESPONSE_GET1_BASIC, 0),
+     "OCSP_response_get1_basic"},
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_PARSE_HTTP_LINE1, 0), "parse_http_line1"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA OCSP_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_CERTIFICATE_VERIFY_ERROR),
+    "certificate verify error"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_DIGEST_ERR), "digest err"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_ERROR_IN_NEXTUPDATE_FIELD),
+    "error in nextupdate field"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_ERROR_IN_THISUPDATE_FIELD),
+    "error in thisupdate field"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_ERROR_PARSING_URL), "error parsing url"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_MISSING_OCSPSIGNING_USAGE),
+    "missing ocspsigning usage"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_NEXTUPDATE_BEFORE_THISUPDATE),
+    "nextupdate before thisupdate"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_NOT_BASIC_RESPONSE),
+    "not basic response"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_NO_CERTIFICATES_IN_CHAIN),
+    "no certificates in chain"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_NO_RESPONSE_DATA), "no response data"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_NO_REVOKED_TIME), "no revoked time"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_NO_SIGNER_KEY), "no signer key"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE),
+    "private key does not match certificate"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_REQUEST_NOT_SIGNED),
+    "request not signed"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_RESPONSE_CONTAINS_NO_REVOCATION_DATA),
+    "response contains no revocation data"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_ROOT_CA_NOT_TRUSTED),
+    "root ca not trusted"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_SERVER_RESPONSE_ERROR),
+    "server response error"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_SERVER_RESPONSE_PARSE_ERROR),
+    "server response parse error"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_SIGNATURE_FAILURE), "signature failure"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_SIGNER_CERTIFICATE_NOT_FOUND),
+    "signer certificate not found"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_STATUS_EXPIRED), "status expired"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_STATUS_NOT_YET_VALID),
+    "status not yet valid"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_STATUS_TOO_OLD), "status too old"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_UNKNOWN_MESSAGE_DIGEST),
+    "unknown message digest"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_UNKNOWN_NID), "unknown nid"},
+    {ERR_PACK(ERR_LIB_OCSP, 0, OCSP_R_UNSUPPORTED_REQUESTORNAME_TYPE),
+    "unsupported requestorname type"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_OCSP_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(OCSP_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(OCSP_str_functs);
+        ERR_load_strings_const(OCSP_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_ext.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_ext.c
new file mode 100644
index 000000000..27ee21245
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_ext.c
@@ -0,0 +1,472 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include <openssl/ocsp.h>
+#include "ocsp_lcl.h"
+#include <openssl/rand.h>
+#include <openssl/x509v3.h>
+
+/* Standard wrapper functions for extensions */
+
+/* OCSP request extensions */
+
+int OCSP_REQUEST_get_ext_count(OCSP_REQUEST *x)
+{
+    return X509v3_get_ext_count(x->tbsRequest.requestExtensions);
+}
+
+int OCSP_REQUEST_get_ext_by_NID(OCSP_REQUEST *x, int nid, int lastpos)
+{
+    return (X509v3_get_ext_by_NID
+            (x->tbsRequest.requestExtensions, nid, lastpos));
+}
+
+int OCSP_REQUEST_get_ext_by_OBJ(OCSP_REQUEST *x, const ASN1_OBJECT *obj,
+                                int lastpos)
+{
+    return (X509v3_get_ext_by_OBJ
+            (x->tbsRequest.requestExtensions, obj, lastpos));
+}
+
+int OCSP_REQUEST_get_ext_by_critical(OCSP_REQUEST *x, int crit, int lastpos)
+{
+    return (X509v3_get_ext_by_critical
+            (x->tbsRequest.requestExtensions, crit, lastpos));
+}
+
+X509_EXTENSION *OCSP_REQUEST_get_ext(OCSP_REQUEST *x, int loc)
+{
+    return X509v3_get_ext(x->tbsRequest.requestExtensions, loc);
+}
+
+X509_EXTENSION *OCSP_REQUEST_delete_ext(OCSP_REQUEST *x, int loc)
+{
+    return X509v3_delete_ext(x->tbsRequest.requestExtensions, loc);
+}
+
+void *OCSP_REQUEST_get1_ext_d2i(OCSP_REQUEST *x, int nid, int *crit, int *idx)
+{
+    return X509V3_get_d2i(x->tbsRequest.requestExtensions, nid, crit, idx);
+}
+
+int OCSP_REQUEST_add1_ext_i2d(OCSP_REQUEST *x, int nid, void *value, int crit,
+                              unsigned long flags)
+{
+    return X509V3_add1_i2d(&x->tbsRequest.requestExtensions, nid, value,
+                           crit, flags);
+}
+
+int OCSP_REQUEST_add_ext(OCSP_REQUEST *x, X509_EXTENSION *ex, int loc)
+{
+    return (X509v3_add_ext(&(x->tbsRequest.requestExtensions), ex, loc) !=
+            NULL);
+}
+
+/* Single extensions */
+
+int OCSP_ONEREQ_get_ext_count(OCSP_ONEREQ *x)
+{
+    return X509v3_get_ext_count(x->singleRequestExtensions);
+}
+
+int OCSP_ONEREQ_get_ext_by_NID(OCSP_ONEREQ *x, int nid, int lastpos)
+{
+    return X509v3_get_ext_by_NID(x->singleRequestExtensions, nid, lastpos);
+}
+
+int OCSP_ONEREQ_get_ext_by_OBJ(OCSP_ONEREQ *x, const ASN1_OBJECT *obj,
+                               int lastpos)
+{
+    return X509v3_get_ext_by_OBJ(x->singleRequestExtensions, obj, lastpos);
+}
+
+int OCSP_ONEREQ_get_ext_by_critical(OCSP_ONEREQ *x, int crit, int lastpos)
+{
+    return (X509v3_get_ext_by_critical
+            (x->singleRequestExtensions, crit, lastpos));
+}
+
+X509_EXTENSION *OCSP_ONEREQ_get_ext(OCSP_ONEREQ *x, int loc)
+{
+    return X509v3_get_ext(x->singleRequestExtensions, loc);
+}
+
+X509_EXTENSION *OCSP_ONEREQ_delete_ext(OCSP_ONEREQ *x, int loc)
+{
+    return X509v3_delete_ext(x->singleRequestExtensions, loc);
+}
+
+void *OCSP_ONEREQ_get1_ext_d2i(OCSP_ONEREQ *x, int nid, int *crit, int *idx)
+{
+    return X509V3_get_d2i(x->singleRequestExtensions, nid, crit, idx);
+}
+
+int OCSP_ONEREQ_add1_ext_i2d(OCSP_ONEREQ *x, int nid, void *value, int crit,
+                             unsigned long flags)
+{
+    return X509V3_add1_i2d(&x->singleRequestExtensions, nid, value, crit,
+                           flags);
+}
+
+int OCSP_ONEREQ_add_ext(OCSP_ONEREQ *x, X509_EXTENSION *ex, int loc)
+{
+    return (X509v3_add_ext(&(x->singleRequestExtensions), ex, loc) != NULL);
+}
+
+/* OCSP Basic response */
+
+int OCSP_BASICRESP_get_ext_count(OCSP_BASICRESP *x)
+{
+    return X509v3_get_ext_count(x->tbsResponseData.responseExtensions);
+}
+
+int OCSP_BASICRESP_get_ext_by_NID(OCSP_BASICRESP *x, int nid, int lastpos)
+{
+    return (X509v3_get_ext_by_NID
+            (x->tbsResponseData.responseExtensions, nid, lastpos));
+}
+
+int OCSP_BASICRESP_get_ext_by_OBJ(OCSP_BASICRESP *x, const ASN1_OBJECT *obj,
+                                  int lastpos)
+{
+    return (X509v3_get_ext_by_OBJ
+            (x->tbsResponseData.responseExtensions, obj, lastpos));
+}
+
+int OCSP_BASICRESP_get_ext_by_critical(OCSP_BASICRESP *x, int crit,
+                                       int lastpos)
+{
+    return (X509v3_get_ext_by_critical
+            (x->tbsResponseData.responseExtensions, crit, lastpos));
+}
+
+X509_EXTENSION *OCSP_BASICRESP_get_ext(OCSP_BASICRESP *x, int loc)
+{
+    return X509v3_get_ext(x->tbsResponseData.responseExtensions, loc);
+}
+
+X509_EXTENSION *OCSP_BASICRESP_delete_ext(OCSP_BASICRESP *x, int loc)
+{
+    return X509v3_delete_ext(x->tbsResponseData.responseExtensions, loc);
+}
+
+void *OCSP_BASICRESP_get1_ext_d2i(OCSP_BASICRESP *x, int nid, int *crit,
+                                  int *idx)
+{
+    return X509V3_get_d2i(x->tbsResponseData.responseExtensions, nid, crit,
+                          idx);
+}
+
+int OCSP_BASICRESP_add1_ext_i2d(OCSP_BASICRESP *x, int nid, void *value,
+                                int crit, unsigned long flags)
+{
+    return X509V3_add1_i2d(&x->tbsResponseData.responseExtensions, nid,
+                           value, crit, flags);
+}
+
+int OCSP_BASICRESP_add_ext(OCSP_BASICRESP *x, X509_EXTENSION *ex, int loc)
+{
+    return (X509v3_add_ext(&(x->tbsResponseData.responseExtensions), ex, loc)
+            != NULL);
+}
+
+/* OCSP single response extensions */
+
+int OCSP_SINGLERESP_get_ext_count(OCSP_SINGLERESP *x)
+{
+    return X509v3_get_ext_count(x->singleExtensions);
+}
+
+int OCSP_SINGLERESP_get_ext_by_NID(OCSP_SINGLERESP *x, int nid, int lastpos)
+{
+    return X509v3_get_ext_by_NID(x->singleExtensions, nid, lastpos);
+}
+
+int OCSP_SINGLERESP_get_ext_by_OBJ(OCSP_SINGLERESP *x, const ASN1_OBJECT *obj,
+                                   int lastpos)
+{
+    return X509v3_get_ext_by_OBJ(x->singleExtensions, obj, lastpos);
+}
+
+int OCSP_SINGLERESP_get_ext_by_critical(OCSP_SINGLERESP *x, int crit,
+                                        int lastpos)
+{
+    return X509v3_get_ext_by_critical(x->singleExtensions, crit, lastpos);
+}
+
+X509_EXTENSION *OCSP_SINGLERESP_get_ext(OCSP_SINGLERESP *x, int loc)
+{
+    return X509v3_get_ext(x->singleExtensions, loc);
+}
+
+X509_EXTENSION *OCSP_SINGLERESP_delete_ext(OCSP_SINGLERESP *x, int loc)
+{
+    return X509v3_delete_ext(x->singleExtensions, loc);
+}
+
+void *OCSP_SINGLERESP_get1_ext_d2i(OCSP_SINGLERESP *x, int nid, int *crit,
+                                   int *idx)
+{
+    return X509V3_get_d2i(x->singleExtensions, nid, crit, idx);
+}
+
+int OCSP_SINGLERESP_add1_ext_i2d(OCSP_SINGLERESP *x, int nid, void *value,
+                                 int crit, unsigned long flags)
+{
+    return X509V3_add1_i2d(&x->singleExtensions, nid, value, crit, flags);
+}
+
+int OCSP_SINGLERESP_add_ext(OCSP_SINGLERESP *x, X509_EXTENSION *ex, int loc)
+{
+    return (X509v3_add_ext(&(x->singleExtensions), ex, loc) != NULL);
+}
+
+/* also CRL Entry Extensions */
+
+/* Nonce handling functions */
+
+/*
+ * Add a nonce to an extension stack. A nonce can be specified or if NULL a
+ * random nonce will be generated. Note: OpenSSL 0.9.7d and later create an
+ * OCTET STRING containing the nonce, previous versions used the raw nonce.
+ */
+
+static int ocsp_add1_nonce(STACK_OF(X509_EXTENSION) **exts,
+                           unsigned char *val, int len)
+{
+    unsigned char *tmpval;
+    ASN1_OCTET_STRING os;
+    int ret = 0;
+    if (len <= 0)
+        len = OCSP_DEFAULT_NONCE_LENGTH;
+    /*
+     * Create the OCTET STRING manually by writing out the header and
+     * appending the content octets. This avoids an extra memory allocation
+     * operation in some cases. Applications should *NOT* do this because it
+     * relies on library internals.
+     */
+    os.length = ASN1_object_size(0, len, V_ASN1_OCTET_STRING);
+    if (os.length < 0)
+        return 0;
+
+    os.data = OPENSSL_malloc(os.length);
+    if (os.data == NULL)
+        goto err;
+    tmpval = os.data;
+    ASN1_put_object(&tmpval, 0, len, V_ASN1_OCTET_STRING, V_ASN1_UNIVERSAL);
+    if (val)
+        memcpy(tmpval, val, len);
+    else if (RAND_bytes(tmpval, len) <= 0)
+        goto err;
+    if (!X509V3_add1_i2d(exts, NID_id_pkix_OCSP_Nonce,
+                         &os, 0, X509V3_ADD_REPLACE))
+        goto err;
+    ret = 1;
+ err:
+    OPENSSL_free(os.data);
+    return ret;
+}
+
+/* Add nonce to an OCSP request */
+
+int OCSP_request_add1_nonce(OCSP_REQUEST *req, unsigned char *val, int len)
+{
+    return ocsp_add1_nonce(&req->tbsRequest.requestExtensions, val, len);
+}
+
+/* Same as above but for a response */
+
+int OCSP_basic_add1_nonce(OCSP_BASICRESP *resp, unsigned char *val, int len)
+{
+    return ocsp_add1_nonce(&resp->tbsResponseData.responseExtensions, val,
+                           len);
+}
+
+/*-
+ * Check nonce validity in a request and response.
+ * Return value reflects result:
+ *  1: nonces present and equal.
+ *  2: nonces both absent.
+ *  3: nonce present in response only.
+ *  0: nonces both present and not equal.
+ * -1: nonce in request only.
+ *
+ *  For most responders clients can check return > 0.
+ *  If responder doesn't handle nonces return != 0 may be
+ *  necessary. return == 0 is always an error.
+ */
+
+int OCSP_check_nonce(OCSP_REQUEST *req, OCSP_BASICRESP *bs)
+{
+    /*
+     * Since we are only interested in the presence or absence of
+     * the nonce and comparing its value there is no need to use
+     * the X509V3 routines: this way we can avoid them allocating an
+     * ASN1_OCTET_STRING structure for the value which would be
+     * freed immediately anyway.
+     */
+
+    int req_idx, resp_idx;
+    X509_EXTENSION *req_ext, *resp_ext;
+    req_idx = OCSP_REQUEST_get_ext_by_NID(req, NID_id_pkix_OCSP_Nonce, -1);
+    resp_idx = OCSP_BASICRESP_get_ext_by_NID(bs, NID_id_pkix_OCSP_Nonce, -1);
+    /* Check both absent */
+    if ((req_idx < 0) && (resp_idx < 0))
+        return 2;
+    /* Check in request only */
+    if ((req_idx >= 0) && (resp_idx < 0))
+        return -1;
+    /* Check in response but not request */
+    if ((req_idx < 0) && (resp_idx >= 0))
+        return 3;
+    /*
+     * Otherwise nonce in request and response so retrieve the extensions
+     */
+    req_ext = OCSP_REQUEST_get_ext(req, req_idx);
+    resp_ext = OCSP_BASICRESP_get_ext(bs, resp_idx);
+    if (ASN1_OCTET_STRING_cmp(X509_EXTENSION_get_data(req_ext),
+                              X509_EXTENSION_get_data(resp_ext)))
+        return 0;
+    return 1;
+}
+
+/*
+ * Copy the nonce value (if any) from an OCSP request to a response.
+ */
+
+int OCSP_copy_nonce(OCSP_BASICRESP *resp, OCSP_REQUEST *req)
+{
+    X509_EXTENSION *req_ext;
+    int req_idx;
+    /* Check for nonce in request */
+    req_idx = OCSP_REQUEST_get_ext_by_NID(req, NID_id_pkix_OCSP_Nonce, -1);
+    /* If no nonce that's OK */
+    if (req_idx < 0)
+        return 2;
+    req_ext = OCSP_REQUEST_get_ext(req, req_idx);
+    return OCSP_BASICRESP_add_ext(resp, req_ext, -1);
+}
+
+X509_EXTENSION *OCSP_crlID_new(const char *url, long *n, char *tim)
+{
+    X509_EXTENSION *x = NULL;
+    OCSP_CRLID *cid = NULL;
+
+    if ((cid = OCSP_CRLID_new()) == NULL)
+        goto err;
+    if (url) {
+        if ((cid->crlUrl = ASN1_IA5STRING_new()) == NULL)
+            goto err;
+        if (!(ASN1_STRING_set(cid->crlUrl, url, -1)))
+            goto err;
+    }
+    if (n) {
+        if ((cid->crlNum = ASN1_INTEGER_new()) == NULL)
+            goto err;
+        if (!(ASN1_INTEGER_set(cid->crlNum, *n)))
+            goto err;
+    }
+    if (tim) {
+        if ((cid->crlTime = ASN1_GENERALIZEDTIME_new()) == NULL)
+            goto err;
+        if (!(ASN1_GENERALIZEDTIME_set_string(cid->crlTime, tim)))
+            goto err;
+    }
+    x = X509V3_EXT_i2d(NID_id_pkix_OCSP_CrlID, 0, cid);
+ err:
+    OCSP_CRLID_free(cid);
+    return x;
+}
+
+/*   AcceptableResponses ::= SEQUENCE OF OBJECT IDENTIFIER */
+X509_EXTENSION *OCSP_accept_responses_new(char **oids)
+{
+    int nid;
+    STACK_OF(ASN1_OBJECT) *sk = NULL;
+    ASN1_OBJECT *o = NULL;
+    X509_EXTENSION *x = NULL;
+
+    if ((sk = sk_ASN1_OBJECT_new_null()) == NULL)
+        goto err;
+    while (oids && *oids) {
+        if ((nid = OBJ_txt2nid(*oids)) != NID_undef && (o = OBJ_nid2obj(nid)))
+            sk_ASN1_OBJECT_push(sk, o);
+        oids++;
+    }
+    x = X509V3_EXT_i2d(NID_id_pkix_OCSP_acceptableResponses, 0, sk);
+ err:
+    sk_ASN1_OBJECT_pop_free(sk, ASN1_OBJECT_free);
+    return x;
+}
+
+/*  ArchiveCutoff ::= GeneralizedTime */
+X509_EXTENSION *OCSP_archive_cutoff_new(char *tim)
+{
+    X509_EXTENSION *x = NULL;
+    ASN1_GENERALIZEDTIME *gt = NULL;
+
+    if ((gt = ASN1_GENERALIZEDTIME_new()) == NULL)
+        goto err;
+    if (!(ASN1_GENERALIZEDTIME_set_string(gt, tim)))
+        goto err;
+    x = X509V3_EXT_i2d(NID_id_pkix_OCSP_archiveCutoff, 0, gt);
+ err:
+    ASN1_GENERALIZEDTIME_free(gt);
+    return x;
+}
+
+/*
+ * per ACCESS_DESCRIPTION parameter are oids, of which there are currently
+ * two--NID_ad_ocsp, NID_id_ad_caIssuers--and GeneralName value.  This method
+ * forces NID_ad_ocsp and uniformResourceLocator [6] IA5String.
+ */
+X509_EXTENSION *OCSP_url_svcloc_new(X509_NAME *issuer, const char **urls)
+{
+    X509_EXTENSION *x = NULL;
+    ASN1_IA5STRING *ia5 = NULL;
+    OCSP_SERVICELOC *sloc = NULL;
+    ACCESS_DESCRIPTION *ad = NULL;
+
+    if ((sloc = OCSP_SERVICELOC_new()) == NULL)
+        goto err;
+    if ((sloc->issuer = X509_NAME_dup(issuer)) == NULL)
+        goto err;
+    if (urls && *urls
+        && (sloc->locator = sk_ACCESS_DESCRIPTION_new_null()) == NULL)
+        goto err;
+    while (urls && *urls) {
+        if ((ad = ACCESS_DESCRIPTION_new()) == NULL)
+            goto err;
+        if ((ad->method = OBJ_nid2obj(NID_ad_OCSP)) == NULL)
+            goto err;
+        if ((ad->location = GENERAL_NAME_new()) == NULL)
+            goto err;
+        if ((ia5 = ASN1_IA5STRING_new()) == NULL)
+            goto err;
+        if (!ASN1_STRING_set((ASN1_STRING *)ia5, *urls, -1))
+            goto err;
+        ad->location->type = GEN_URI;
+        ad->location->d.ia5 = ia5;
+        ia5 = NULL;
+        if (!sk_ACCESS_DESCRIPTION_push(sloc->locator, ad))
+            goto err;
+        ad = NULL;
+        urls++;
+    }
+    x = X509V3_EXT_i2d(NID_id_pkix_OCSP_serviceLocator, 0, sloc);
+ err:
+    ASN1_IA5STRING_free(ia5);
+    ACCESS_DESCRIPTION_free(ad);
+    OCSP_SERVICELOC_free(sloc);
+    return x;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_ht.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_ht.c
new file mode 100644
index 000000000..42c368643
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_ht.c
@@ -0,0 +1,502 @@
+/*
+ * Copyright 2001-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include <stdio.h>
+#include <stdlib.h>
+#include "internal/ctype.h"
+#include <string.h>
+#include <openssl/asn1.h>
+#include <openssl/ocsp.h>
+#include <openssl/err.h>
+#include <openssl/buffer.h>
+
+/* Stateful OCSP request code, supporting non-blocking I/O */
+
+/* Opaque OCSP request status structure */
+
+struct ocsp_req_ctx_st {
+    int state;                  /* Current I/O state */
+    unsigned char *iobuf;       /* Line buffer */
+    int iobuflen;               /* Line buffer length */
+    BIO *io;                    /* BIO to perform I/O with */
+    BIO *mem;                   /* Memory BIO response is built into */
+    unsigned long asn1_len;     /* ASN1 length of response */
+    unsigned long max_resp_len; /* Maximum length of response */
+};
+
+#define OCSP_MAX_RESP_LENGTH    (100 * 1024)
+#define OCSP_MAX_LINE_LEN       4096;
+
+/* OCSP states */
+
+/* If set no reading should be performed */
+#define OHS_NOREAD              0x1000
+/* Error condition */
+#define OHS_ERROR               (0 | OHS_NOREAD)
+/* First line being read */
+#define OHS_FIRSTLINE           1
+/* MIME headers being read */
+#define OHS_HEADERS             2
+/* OCSP initial header (tag + length) being read */
+#define OHS_ASN1_HEADER         3
+/* OCSP content octets being read */
+#define OHS_ASN1_CONTENT        4
+/* First call: ready to start I/O */
+#define OHS_ASN1_WRITE_INIT     (5 | OHS_NOREAD)
+/* Request being sent */
+#define OHS_ASN1_WRITE          (6 | OHS_NOREAD)
+/* Request being flushed */
+#define OHS_ASN1_FLUSH          (7 | OHS_NOREAD)
+/* Completed */
+#define OHS_DONE                (8 | OHS_NOREAD)
+/* Headers set, no final \r\n included */
+#define OHS_HTTP_HEADER         (9 | OHS_NOREAD)
+
+static int parse_http_line1(char *line);
+
+OCSP_REQ_CTX *OCSP_REQ_CTX_new(BIO *io, int maxline)
+{
+    OCSP_REQ_CTX *rctx = OPENSSL_zalloc(sizeof(*rctx));
+
+    if (rctx == NULL)
+        return NULL;
+    rctx->state = OHS_ERROR;
+    rctx->max_resp_len = OCSP_MAX_RESP_LENGTH;
+    rctx->mem = BIO_new(BIO_s_mem());
+    rctx->io = io;
+    if (maxline > 0)
+        rctx->iobuflen = maxline;
+    else
+        rctx->iobuflen = OCSP_MAX_LINE_LEN;
+    rctx->iobuf = OPENSSL_malloc(rctx->iobuflen);
+    if (rctx->iobuf == NULL || rctx->mem == NULL) {
+        OCSP_REQ_CTX_free(rctx);
+        return NULL;
+    }
+    return rctx;
+}
+
+void OCSP_REQ_CTX_free(OCSP_REQ_CTX *rctx)
+{
+    if (!rctx)
+        return;
+    BIO_free(rctx->mem);
+    OPENSSL_free(rctx->iobuf);
+    OPENSSL_free(rctx);
+}
+
+BIO *OCSP_REQ_CTX_get0_mem_bio(OCSP_REQ_CTX *rctx)
+{
+    return rctx->mem;
+}
+
+void OCSP_set_max_response_length(OCSP_REQ_CTX *rctx, unsigned long len)
+{
+    if (len == 0)
+        rctx->max_resp_len = OCSP_MAX_RESP_LENGTH;
+    else
+        rctx->max_resp_len = len;
+}
+
+int OCSP_REQ_CTX_i2d(OCSP_REQ_CTX *rctx, const ASN1_ITEM *it, ASN1_VALUE *val)
+{
+    static const char req_hdr[] =
+        "Content-Type: application/ocsp-request\r\n"
+        "Content-Length: %d\r\n\r\n";
+    int reqlen = ASN1_item_i2d(val, NULL, it);
+    if (BIO_printf(rctx->mem, req_hdr, reqlen) <= 0)
+        return 0;
+    if (ASN1_item_i2d_bio(it, rctx->mem, val) <= 0)
+        return 0;
+    rctx->state = OHS_ASN1_WRITE_INIT;
+    return 1;
+}
+
+int OCSP_REQ_CTX_nbio_d2i(OCSP_REQ_CTX *rctx,
+                          ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    int rv, len;
+    const unsigned char *p;
+
+    rv = OCSP_REQ_CTX_nbio(rctx);
+    if (rv != 1)
+        return rv;
+
+    len = BIO_get_mem_data(rctx->mem, &p);
+    *pval = ASN1_item_d2i(NULL, &p, len, it);
+    if (*pval == NULL) {
+        rctx->state = OHS_ERROR;
+        return 0;
+    }
+    return 1;
+}
+
+int OCSP_REQ_CTX_http(OCSP_REQ_CTX *rctx, const char *op, const char *path)
+{
+    static const char http_hdr[] = "%s %s HTTP/1.0\r\n";
+
+    if (!path)
+        path = "/";
+
+    if (BIO_printf(rctx->mem, http_hdr, op, path) <= 0)
+        return 0;
+    rctx->state = OHS_HTTP_HEADER;
+    return 1;
+}
+
+int OCSP_REQ_CTX_set1_req(OCSP_REQ_CTX *rctx, OCSP_REQUEST *req)
+{
+    return OCSP_REQ_CTX_i2d(rctx, ASN1_ITEM_rptr(OCSP_REQUEST),
+                            (ASN1_VALUE *)req);
+}
+
+int OCSP_REQ_CTX_add1_header(OCSP_REQ_CTX *rctx,
+                             const char *name, const char *value)
+{
+    if (!name)
+        return 0;
+    if (BIO_puts(rctx->mem, name) <= 0)
+        return 0;
+    if (value) {
+        if (BIO_write(rctx->mem, ": ", 2) != 2)
+            return 0;
+        if (BIO_puts(rctx->mem, value) <= 0)
+            return 0;
+    }
+    if (BIO_write(rctx->mem, "\r\n", 2) != 2)
+        return 0;
+    rctx->state = OHS_HTTP_HEADER;
+    return 1;
+}
+
+OCSP_REQ_CTX *OCSP_sendreq_new(BIO *io, const char *path, OCSP_REQUEST *req,
+                               int maxline)
+{
+
+    OCSP_REQ_CTX *rctx = NULL;
+    rctx = OCSP_REQ_CTX_new(io, maxline);
+    if (rctx == NULL)
+        return NULL;
+
+    if (!OCSP_REQ_CTX_http(rctx, "POST", path))
+        goto err;
+
+    if (req && !OCSP_REQ_CTX_set1_req(rctx, req))
+        goto err;
+
+    return rctx;
+
+ err:
+    OCSP_REQ_CTX_free(rctx);
+    return NULL;
+}
+
+/*
+ * Parse the HTTP response. This will look like this: "HTTP/1.0 200 OK". We
+ * need to obtain the numeric code and (optional) informational message.
+ */
+
+static int parse_http_line1(char *line)
+{
+    int retcode;
+    char *p, *q, *r;
+    /* Skip to first white space (passed protocol info) */
+
+    for (p = line; *p && !ossl_isspace(*p); p++)
+        continue;
+    if (!*p) {
+        OCSPerr(OCSP_F_PARSE_HTTP_LINE1, OCSP_R_SERVER_RESPONSE_PARSE_ERROR);
+        return 0;
+    }
+
+    /* Skip past white space to start of response code */
+    while (*p && ossl_isspace(*p))
+        p++;
+
+    if (!*p) {
+        OCSPerr(OCSP_F_PARSE_HTTP_LINE1, OCSP_R_SERVER_RESPONSE_PARSE_ERROR);
+        return 0;
+    }
+
+    /* Find end of response code: first whitespace after start of code */
+    for (q = p; *q && !ossl_isspace(*q); q++)
+        continue;
+
+    if (!*q) {
+        OCSPerr(OCSP_F_PARSE_HTTP_LINE1, OCSP_R_SERVER_RESPONSE_PARSE_ERROR);
+        return 0;
+    }
+
+    /* Set end of response code and start of message */
+    *q++ = 0;
+
+    /* Attempt to parse numeric code */
+    retcode = strtoul(p, &r, 10);
+
+    if (*r)
+        return 0;
+
+    /* Skip over any leading white space in message */
+    while (*q && ossl_isspace(*q))
+        q++;
+
+    if (*q) {
+        /*
+         * Finally zap any trailing white space in message (include CRLF)
+         */
+
+        /* We know q has a non white space character so this is OK */
+        for (r = q + strlen(q) - 1; ossl_isspace(*r); r--)
+            *r = 0;
+    }
+    if (retcode != 200) {
+        OCSPerr(OCSP_F_PARSE_HTTP_LINE1, OCSP_R_SERVER_RESPONSE_ERROR);
+        if (!*q)
+            ERR_add_error_data(2, "Code=", p);
+        else
+            ERR_add_error_data(4, "Code=", p, ",Reason=", q);
+        return 0;
+    }
+
+    return 1;
+
+}
+
+int OCSP_REQ_CTX_nbio(OCSP_REQ_CTX *rctx)
+{
+    int i, n;
+    const unsigned char *p;
+ next_io:
+    if (!(rctx->state & OHS_NOREAD)) {
+        n = BIO_read(rctx->io, rctx->iobuf, rctx->iobuflen);
+
+        if (n <= 0) {
+            if (BIO_should_retry(rctx->io))
+                return -1;
+            return 0;
+        }
+
+        /* Write data to memory BIO */
+
+        if (BIO_write(rctx->mem, rctx->iobuf, n) != n)
+            return 0;
+    }
+
+    switch (rctx->state) {
+    case OHS_HTTP_HEADER:
+        /* Last operation was adding headers: need a final \r\n */
+        if (BIO_write(rctx->mem, "\r\n", 2) != 2) {
+            rctx->state = OHS_ERROR;
+            return 0;
+        }
+        rctx->state = OHS_ASN1_WRITE_INIT;
+
+        /* fall thru */
+    case OHS_ASN1_WRITE_INIT:
+        rctx->asn1_len = BIO_get_mem_data(rctx->mem, NULL);
+        rctx->state = OHS_ASN1_WRITE;
+
+        /* fall thru */
+    case OHS_ASN1_WRITE:
+        n = BIO_get_mem_data(rctx->mem, &p);
+
+        i = BIO_write(rctx->io, p + (n - rctx->asn1_len), rctx->asn1_len);
+
+        if (i <= 0) {
+            if (BIO_should_retry(rctx->io))
+                return -1;
+            rctx->state = OHS_ERROR;
+            return 0;
+        }
+
+        rctx->asn1_len -= i;
+
+        if (rctx->asn1_len > 0)
+            goto next_io;
+
+        rctx->state = OHS_ASN1_FLUSH;
+
+        (void)BIO_reset(rctx->mem);
+
+        /* fall thru */
+    case OHS_ASN1_FLUSH:
+
+        i = BIO_flush(rctx->io);
+
+        if (i > 0) {
+            rctx->state = OHS_FIRSTLINE;
+            goto next_io;
+        }
+
+        if (BIO_should_retry(rctx->io))
+            return -1;
+
+        rctx->state = OHS_ERROR;
+        return 0;
+
+    case OHS_ERROR:
+        return 0;
+
+    case OHS_FIRSTLINE:
+    case OHS_HEADERS:
+
+        /* Attempt to read a line in */
+
+ next_line:
+        /*
+         * Due to &%^*$" memory BIO behaviour with BIO_gets we have to check
+         * there's a complete line in there before calling BIO_gets or we'll
+         * just get a partial read.
+         */
+        n = BIO_get_mem_data(rctx->mem, &p);
+        if ((n <= 0) || !memchr(p, '\n', n)) {
+            if (n >= rctx->iobuflen) {
+                rctx->state = OHS_ERROR;
+                return 0;
+            }
+            goto next_io;
+        }
+        n = BIO_gets(rctx->mem, (char *)rctx->iobuf, rctx->iobuflen);
+
+        if (n <= 0) {
+            if (BIO_should_retry(rctx->mem))
+                goto next_io;
+            rctx->state = OHS_ERROR;
+            return 0;
+        }
+
+        /* Don't allow excessive lines */
+        if (n == rctx->iobuflen) {
+            rctx->state = OHS_ERROR;
+            return 0;
+        }
+
+        /* First line */
+        if (rctx->state == OHS_FIRSTLINE) {
+            if (parse_http_line1((char *)rctx->iobuf)) {
+                rctx->state = OHS_HEADERS;
+                goto next_line;
+            } else {
+                rctx->state = OHS_ERROR;
+                return 0;
+            }
+        } else {
+            /* Look for blank line: end of headers */
+            for (p = rctx->iobuf; *p; p++) {
+                if ((*p != '\r') && (*p != '\n'))
+                    break;
+            }
+            if (*p)
+                goto next_line;
+
+            rctx->state = OHS_ASN1_HEADER;
+
+        }
+
+        /* Fall thru */
+
+    case OHS_ASN1_HEADER:
+        /*
+         * Now reading ASN1 header: can read at least 2 bytes which is enough
+         * for ASN1 SEQUENCE header and either length field or at least the
+         * length of the length field.
+         */
+        n = BIO_get_mem_data(rctx->mem, &p);
+        if (n < 2)
+            goto next_io;
+
+        /* Check it is an ASN1 SEQUENCE */
+        if (*p++ != (V_ASN1_SEQUENCE | V_ASN1_CONSTRUCTED)) {
+            rctx->state = OHS_ERROR;
+            return 0;
+        }
+
+        /* Check out length field */
+        if (*p & 0x80) {
+            /*
+             * If MSB set on initial length octet we can now always read 6
+             * octets: make sure we have them.
+             */
+            if (n < 6)
+                goto next_io;
+            n = *p & 0x7F;
+            /* Not NDEF or excessive length */
+            if (!n || (n > 4)) {
+                rctx->state = OHS_ERROR;
+                return 0;
+            }
+            p++;
+            rctx->asn1_len = 0;
+            for (i = 0; i < n; i++) {
+                rctx->asn1_len <<= 8;
+                rctx->asn1_len |= *p++;
+            }
+
+            if (rctx->asn1_len > rctx->max_resp_len) {
+                rctx->state = OHS_ERROR;
+                return 0;
+            }
+
+            rctx->asn1_len += n + 2;
+        } else
+            rctx->asn1_len = *p + 2;
+
+        rctx->state = OHS_ASN1_CONTENT;
+
+        /* Fall thru */
+
+    case OHS_ASN1_CONTENT:
+        n = BIO_get_mem_data(rctx->mem, NULL);
+        if (n < (int)rctx->asn1_len)
+            goto next_io;
+
+        rctx->state = OHS_DONE;
+        return 1;
+
+    case OHS_DONE:
+        return 1;
+
+    }
+
+    return 0;
+
+}
+
+int OCSP_sendreq_nbio(OCSP_RESPONSE **presp, OCSP_REQ_CTX *rctx)
+{
+    return OCSP_REQ_CTX_nbio_d2i(rctx,
+                                 (ASN1_VALUE **)presp,
+                                 ASN1_ITEM_rptr(OCSP_RESPONSE));
+}
+
+/* Blocking OCSP request handler: now a special case of non-blocking I/O */
+
+OCSP_RESPONSE *OCSP_sendreq_bio(BIO *b, const char *path, OCSP_REQUEST *req)
+{
+    OCSP_RESPONSE *resp = NULL;
+    OCSP_REQ_CTX *ctx;
+    int rv;
+
+    ctx = OCSP_sendreq_new(b, path, req, -1);
+
+    if (ctx == NULL)
+        return NULL;
+
+    do {
+        rv = OCSP_sendreq_nbio(&resp, ctx);
+    } while ((rv == -1) && BIO_should_retry(b));
+
+    OCSP_REQ_CTX_free(ctx);
+
+    if (rv)
+        return resp;
+
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_lcl.h
new file mode 100644
index 000000000..36646fdfc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_lcl.h
@@ -0,0 +1,236 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*-  CertID ::= SEQUENCE {
+ *       hashAlgorithm            AlgorithmIdentifier,
+ *       issuerNameHash     OCTET STRING, -- Hash of Issuer's DN
+ *       issuerKeyHash      OCTET STRING, -- Hash of Issuers public key (excluding the tag & length fields)
+ *       serialNumber       CertificateSerialNumber }
+ */
+struct ocsp_cert_id_st {
+    X509_ALGOR hashAlgorithm;
+    ASN1_OCTET_STRING issuerNameHash;
+    ASN1_OCTET_STRING issuerKeyHash;
+    ASN1_INTEGER serialNumber;
+};
+
+/*-  Request ::=     SEQUENCE {
+ *       reqCert                    CertID,
+ *       singleRequestExtensions    [0] EXPLICIT Extensions OPTIONAL }
+ */
+struct ocsp_one_request_st {
+    OCSP_CERTID *reqCert;
+    STACK_OF(X509_EXTENSION) *singleRequestExtensions;
+};
+
+/*-  TBSRequest      ::=     SEQUENCE {
+ *       version             [0] EXPLICIT Version DEFAULT v1,
+ *       requestorName       [1] EXPLICIT GeneralName OPTIONAL,
+ *       requestList             SEQUENCE OF Request,
+ *       requestExtensions   [2] EXPLICIT Extensions OPTIONAL }
+ */
+struct ocsp_req_info_st {
+    ASN1_INTEGER *version;
+    GENERAL_NAME *requestorName;
+    STACK_OF(OCSP_ONEREQ) *requestList;
+    STACK_OF(X509_EXTENSION) *requestExtensions;
+};
+
+/*-  Signature       ::=     SEQUENCE {
+ *       signatureAlgorithm   AlgorithmIdentifier,
+ *       signature            BIT STRING,
+ *       certs                [0] EXPLICIT SEQUENCE OF Certificate OPTIONAL }
+ */
+struct ocsp_signature_st {
+    X509_ALGOR signatureAlgorithm;
+    ASN1_BIT_STRING *signature;
+    STACK_OF(X509) *certs;
+};
+
+/*-  OCSPRequest     ::=     SEQUENCE {
+ *       tbsRequest                  TBSRequest,
+ *       optionalSignature   [0]     EXPLICIT Signature OPTIONAL }
+ */
+struct ocsp_request_st {
+    OCSP_REQINFO tbsRequest;
+    OCSP_SIGNATURE *optionalSignature; /* OPTIONAL */
+};
+
+/*-  OCSPResponseStatus ::= ENUMERATED {
+ *       successful            (0),      --Response has valid confirmations
+ *       malformedRequest      (1),      --Illegal confirmation request
+ *       internalError         (2),      --Internal error in issuer
+ *       tryLater              (3),      --Try again later
+ *                                       --(4) is not used
+ *       sigRequired           (5),      --Must sign the request
+ *       unauthorized          (6)       --Request unauthorized
+ *   }
+ */
+
+/*-  ResponseBytes ::=       SEQUENCE {
+ *       responseType   OBJECT IDENTIFIER,
+ *       response       OCTET STRING }
+ */
+struct ocsp_resp_bytes_st {
+    ASN1_OBJECT *responseType;
+    ASN1_OCTET_STRING *response;
+};
+
+/*-  OCSPResponse ::= SEQUENCE {
+ *      responseStatus         OCSPResponseStatus,
+ *      responseBytes          [0] EXPLICIT ResponseBytes OPTIONAL }
+ */
+struct ocsp_response_st {
+    ASN1_ENUMERATED *responseStatus;
+    OCSP_RESPBYTES *responseBytes;
+};
+
+/*-  ResponderID ::= CHOICE {
+ *      byName   [1] Name,
+ *      byKey    [2] KeyHash }
+ */
+struct ocsp_responder_id_st {
+    int type;
+    union {
+        X509_NAME *byName;
+        ASN1_OCTET_STRING *byKey;
+    } value;
+};
+
+/*-  KeyHash ::= OCTET STRING --SHA-1 hash of responder's public key
+ *                            --(excluding the tag and length fields)
+ */
+
+/*-  RevokedInfo ::= SEQUENCE {
+ *       revocationTime              GeneralizedTime,
+ *       revocationReason    [0]     EXPLICIT CRLReason OPTIONAL }
+ */
+struct ocsp_revoked_info_st {
+    ASN1_GENERALIZEDTIME *revocationTime;
+    ASN1_ENUMERATED *revocationReason;
+};
+
+/*-  CertStatus ::= CHOICE {
+ *       good                [0]     IMPLICIT NULL,
+ *       revoked             [1]     IMPLICIT RevokedInfo,
+ *       unknown             [2]     IMPLICIT UnknownInfo }
+ */
+struct ocsp_cert_status_st {
+    int type;
+    union {
+        ASN1_NULL *good;
+        OCSP_REVOKEDINFO *revoked;
+        ASN1_NULL *unknown;
+    } value;
+};
+
+/*-  SingleResponse ::= SEQUENCE {
+ *      certID                       CertID,
+ *      certStatus                   CertStatus,
+ *      thisUpdate                   GeneralizedTime,
+ *      nextUpdate           [0]     EXPLICIT GeneralizedTime OPTIONAL,
+ *      singleExtensions     [1]     EXPLICIT Extensions OPTIONAL }
+ */
+struct ocsp_single_response_st {
+    OCSP_CERTID *certId;
+    OCSP_CERTSTATUS *certStatus;
+    ASN1_GENERALIZEDTIME *thisUpdate;
+    ASN1_GENERALIZEDTIME *nextUpdate;
+    STACK_OF(X509_EXTENSION) *singleExtensions;
+};
+
+/*-  ResponseData ::= SEQUENCE {
+ *      version              [0] EXPLICIT Version DEFAULT v1,
+ *      responderID              ResponderID,
+ *      producedAt               GeneralizedTime,
+ *      responses                SEQUENCE OF SingleResponse,
+ *      responseExtensions   [1] EXPLICIT Extensions OPTIONAL }
+ */
+struct ocsp_response_data_st {
+    ASN1_INTEGER *version;
+    OCSP_RESPID responderId;
+    ASN1_GENERALIZEDTIME *producedAt;
+    STACK_OF(OCSP_SINGLERESP) *responses;
+    STACK_OF(X509_EXTENSION) *responseExtensions;
+};
+
+/*-  BasicOCSPResponse       ::= SEQUENCE {
+ *      tbsResponseData      ResponseData,
+ *      signatureAlgorithm   AlgorithmIdentifier,
+ *      signature            BIT STRING,
+ *      certs                [0] EXPLICIT SEQUENCE OF Certificate OPTIONAL }
+ */
+  /*
+   * Note 1: The value for "signature" is specified in the OCSP rfc2560 as
+   * follows: "The value for the signature SHALL be computed on the hash of
+   * the DER encoding ResponseData." This means that you must hash the
+   * DER-encoded tbsResponseData, and then run it through a crypto-signing
+   * function, which will (at least w/RSA) do a hash-'n'-private-encrypt
+   * operation.  This seems a bit odd, but that's the spec.  Also note that
+   * the data structures do not leave anywhere to independently specify the
+   * algorithm used for the initial hash. So, we look at the
+   * signature-specification algorithm, and try to do something intelligent.
+   * -- Kathy Weinhold, CertCo
+   */
+  /*
+   * Note 2: It seems that the mentioned passage from RFC 2560 (section
+   * 4.2.1) is open for interpretation.  I've done tests against another
+   * responder, and found that it doesn't do the double hashing that the RFC
+   * seems to say one should.  Therefore, all relevant functions take a flag
+   * saying which variant should be used.  -- Richard Levitte, OpenSSL team
+   * and CeloCom
+   */
+struct ocsp_basic_response_st {
+    OCSP_RESPDATA tbsResponseData;
+    X509_ALGOR signatureAlgorithm;
+    ASN1_BIT_STRING *signature;
+    STACK_OF(X509) *certs;
+};
+
+/*-
+ * CrlID ::= SEQUENCE {
+ *     crlUrl               [0]     EXPLICIT IA5String OPTIONAL,
+ *     crlNum               [1]     EXPLICIT INTEGER OPTIONAL,
+ *     crlTime              [2]     EXPLICIT GeneralizedTime OPTIONAL }
+ */
+struct ocsp_crl_id_st {
+    ASN1_IA5STRING *crlUrl;
+    ASN1_INTEGER *crlNum;
+    ASN1_GENERALIZEDTIME *crlTime;
+};
+
+/*-
+ * ServiceLocator ::= SEQUENCE {
+ *      issuer    Name,
+ *      locator   AuthorityInfoAccessSyntax OPTIONAL }
+ */
+struct ocsp_service_locator_st {
+    X509_NAME *issuer;
+    STACK_OF(ACCESS_DESCRIPTION) *locator;
+};
+
+#  define OCSP_REQUEST_sign(o,pkey,md) \
+        ASN1_item_sign(ASN1_ITEM_rptr(OCSP_REQINFO),\
+                &(o)->optionalSignature->signatureAlgorithm,NULL,\
+                (o)->optionalSignature->signature,&(o)->tbsRequest,pkey,md)
+
+#  define OCSP_BASICRESP_sign(o,pkey,md,d) \
+        ASN1_item_sign(ASN1_ITEM_rptr(OCSP_RESPDATA),&(o)->signatureAlgorithm,\
+                NULL,(o)->signature,&(o)->tbsResponseData,pkey,md)
+
+#  define OCSP_BASICRESP_sign_ctx(o,ctx,d) \
+        ASN1_item_sign_ctx(ASN1_ITEM_rptr(OCSP_RESPDATA),&(o)->signatureAlgorithm,\
+                NULL,(o)->signature,&(o)->tbsResponseData,ctx)
+
+#  define OCSP_REQUEST_verify(a,r) ASN1_item_verify(ASN1_ITEM_rptr(OCSP_REQINFO),\
+        &(a)->optionalSignature->signatureAlgorithm,\
+        (a)->optionalSignature->signature,&(a)->tbsRequest,r)
+
+#  define OCSP_BASICRESP_verify(a,r,d) ASN1_item_verify(ASN1_ITEM_rptr(OCSP_RESPDATA),\
+        &(a)->signatureAlgorithm,(a)->signature,&(a)->tbsResponseData,r)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_lib.c
new file mode 100644
index 000000000..8edd70ac8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_lib.c
@@ -0,0 +1,222 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include <openssl/pem.h>
+#include <openssl/x509v3.h>
+#include <openssl/ocsp.h>
+#include "ocsp_lcl.h"
+#include <openssl/asn1t.h>
+
+/* Convert a certificate and its issuer to an OCSP_CERTID */
+
+OCSP_CERTID *OCSP_cert_to_id(const EVP_MD *dgst, const X509 *subject,
+                             const X509 *issuer)
+{
+    X509_NAME *iname;
+    const ASN1_INTEGER *serial;
+    ASN1_BIT_STRING *ikey;
+    if (!dgst)
+        dgst = EVP_sha1();
+    if (subject) {
+        iname = X509_get_issuer_name(subject);
+        serial = X509_get0_serialNumber(subject);
+    } else {
+        iname = X509_get_subject_name(issuer);
+        serial = NULL;
+    }
+    ikey = X509_get0_pubkey_bitstr(issuer);
+    return OCSP_cert_id_new(dgst, iname, ikey, serial);
+}
+
+OCSP_CERTID *OCSP_cert_id_new(const EVP_MD *dgst,
+                              const X509_NAME *issuerName,
+                              const ASN1_BIT_STRING *issuerKey,
+                              const ASN1_INTEGER *serialNumber)
+{
+    int nid;
+    unsigned int i;
+    X509_ALGOR *alg;
+    OCSP_CERTID *cid = NULL;
+    unsigned char md[EVP_MAX_MD_SIZE];
+
+    if ((cid = OCSP_CERTID_new()) == NULL)
+        goto err;
+
+    alg = &cid->hashAlgorithm;
+    ASN1_OBJECT_free(alg->algorithm);
+    if ((nid = EVP_MD_type(dgst)) == NID_undef) {
+        OCSPerr(OCSP_F_OCSP_CERT_ID_NEW, OCSP_R_UNKNOWN_NID);
+        goto err;
+    }
+    if ((alg->algorithm = OBJ_nid2obj(nid)) == NULL)
+        goto err;
+    if ((alg->parameter = ASN1_TYPE_new()) == NULL)
+        goto err;
+    alg->parameter->type = V_ASN1_NULL;
+
+    if (!X509_NAME_digest(issuerName, dgst, md, &i))
+        goto digerr;
+    if (!(ASN1_OCTET_STRING_set(&cid->issuerNameHash, md, i)))
+        goto err;
+
+    /* Calculate the issuerKey hash, excluding tag and length */
+    if (!EVP_Digest(issuerKey->data, issuerKey->length, md, &i, dgst, NULL))
+        goto err;
+
+    if (!(ASN1_OCTET_STRING_set(&cid->issuerKeyHash, md, i)))
+        goto err;
+
+    if (serialNumber) {
+        if (ASN1_STRING_copy(&cid->serialNumber, serialNumber) == 0)
+            goto err;
+    }
+    return cid;
+ digerr:
+    OCSPerr(OCSP_F_OCSP_CERT_ID_NEW, OCSP_R_DIGEST_ERR);
+ err:
+    OCSP_CERTID_free(cid);
+    return NULL;
+}
+
+int OCSP_id_issuer_cmp(OCSP_CERTID *a, OCSP_CERTID *b)
+{
+    int ret;
+    ret = OBJ_cmp(a->hashAlgorithm.algorithm, b->hashAlgorithm.algorithm);
+    if (ret)
+        return ret;
+    ret = ASN1_OCTET_STRING_cmp(&a->issuerNameHash, &b->issuerNameHash);
+    if (ret)
+        return ret;
+    return ASN1_OCTET_STRING_cmp(&a->issuerKeyHash, &b->issuerKeyHash);
+}
+
+int OCSP_id_cmp(OCSP_CERTID *a, OCSP_CERTID *b)
+{
+    int ret;
+    ret = OCSP_id_issuer_cmp(a, b);
+    if (ret)
+        return ret;
+    return ASN1_INTEGER_cmp(&a->serialNumber, &b->serialNumber);
+}
+
+/*
+ * Parse a URL and split it up into host, port and path components and
+ * whether it is SSL.
+ */
+
+int OCSP_parse_url(const char *url, char **phost, char **pport, char **ppath,
+                   int *pssl)
+{
+    char *p, *buf;
+
+    char *host, *port;
+
+    *phost = NULL;
+    *pport = NULL;
+    *ppath = NULL;
+
+    /* dup the buffer since we are going to mess with it */
+    buf = OPENSSL_strdup(url);
+    if (!buf)
+        goto mem_err;
+
+    /* Check for initial colon */
+    p = strchr(buf, ':');
+
+    if (!p)
+        goto parse_err;
+
+    *(p++) = '\0';
+
+    if (strcmp(buf, "http") == 0) {
+        *pssl = 0;
+        port = "80";
+    } else if (strcmp(buf, "https") == 0) {
+        *pssl = 1;
+        port = "443";
+    } else
+        goto parse_err;
+
+    /* Check for double slash */
+    if ((p[0] != '/') || (p[1] != '/'))
+        goto parse_err;
+
+    p += 2;
+
+    host = p;
+
+    /* Check for trailing part of path */
+
+    p = strchr(p, '/');
+
+    if (!p)
+        *ppath = OPENSSL_strdup("/");
+    else {
+        *ppath = OPENSSL_strdup(p);
+        /* Set start of path to 0 so hostname is valid */
+        *p = '\0';
+    }
+
+    if (!*ppath)
+        goto mem_err;
+
+    p = host;
+    if (host[0] == '[') {
+        /* ipv6 literal */
+        host++;
+        p = strchr(host, ']');
+        if (!p)
+            goto parse_err;
+        *p = '\0';
+        p++;
+    }
+
+    /* Look for optional ':' for port number */
+    if ((p = strchr(p, ':'))) {
+        *p = 0;
+        port = p + 1;
+    }
+
+    *pport = OPENSSL_strdup(port);
+    if (!*pport)
+        goto mem_err;
+
+    *phost = OPENSSL_strdup(host);
+
+    if (!*phost)
+        goto mem_err;
+
+    OPENSSL_free(buf);
+
+    return 1;
+
+ mem_err:
+    OCSPerr(OCSP_F_OCSP_PARSE_URL, ERR_R_MALLOC_FAILURE);
+    goto err;
+
+ parse_err:
+    OCSPerr(OCSP_F_OCSP_PARSE_URL, OCSP_R_ERROR_PARSING_URL);
+
+ err:
+    OPENSSL_free(buf);
+    OPENSSL_free(*ppath);
+    *ppath = NULL;
+    OPENSSL_free(*pport);
+    *pport = NULL;
+    OPENSSL_free(*phost);
+    *phost = NULL;
+    return 0;
+
+}
+
+IMPLEMENT_ASN1_DUP_FUNCTION(OCSP_CERTID)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_prn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_prn.c
new file mode 100644
index 000000000..5605812ef
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_prn.c
@@ -0,0 +1,246 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/bio.h>
+#include <openssl/err.h>
+#include <openssl/ocsp.h>
+#include "ocsp_lcl.h"
+#include "internal/cryptlib.h"
+#include <openssl/pem.h>
+
+static int ocsp_certid_print(BIO *bp, OCSP_CERTID *a, int indent)
+{
+    BIO_printf(bp, "%*sCertificate ID:\n", indent, "");
+    indent += 2;
+    BIO_printf(bp, "%*sHash Algorithm: ", indent, "");
+    i2a_ASN1_OBJECT(bp, a->hashAlgorithm.algorithm);
+    BIO_printf(bp, "\n%*sIssuer Name Hash: ", indent, "");
+    i2a_ASN1_STRING(bp, &a->issuerNameHash, 0);
+    BIO_printf(bp, "\n%*sIssuer Key Hash: ", indent, "");
+    i2a_ASN1_STRING(bp, &a->issuerKeyHash, 0);
+    BIO_printf(bp, "\n%*sSerial Number: ", indent, "");
+    i2a_ASN1_INTEGER(bp, &a->serialNumber);
+    BIO_printf(bp, "\n");
+    return 1;
+}
+
+typedef struct {
+    long t;
+    const char *m;
+} OCSP_TBLSTR;
+
+static const char *do_table2string(long s, const OCSP_TBLSTR *ts, size_t len)
+{
+    size_t i;
+    for (i = 0; i < len; i++, ts++)
+        if (ts->t == s)
+            return ts->m;
+    return "(UNKNOWN)";
+}
+
+#define table2string(s, tbl) do_table2string(s, tbl, OSSL_NELEM(tbl))
+
+const char *OCSP_response_status_str(long s)
+{
+    static const OCSP_TBLSTR rstat_tbl[] = {
+        {OCSP_RESPONSE_STATUS_SUCCESSFUL, "successful"},
+        {OCSP_RESPONSE_STATUS_MALFORMEDREQUEST, "malformedrequest"},
+        {OCSP_RESPONSE_STATUS_INTERNALERROR, "internalerror"},
+        {OCSP_RESPONSE_STATUS_TRYLATER, "trylater"},
+        {OCSP_RESPONSE_STATUS_SIGREQUIRED, "sigrequired"},
+        {OCSP_RESPONSE_STATUS_UNAUTHORIZED, "unauthorized"}
+    };
+    return table2string(s, rstat_tbl);
+}
+
+const char *OCSP_cert_status_str(long s)
+{
+    static const OCSP_TBLSTR cstat_tbl[] = {
+        {V_OCSP_CERTSTATUS_GOOD, "good"},
+        {V_OCSP_CERTSTATUS_REVOKED, "revoked"},
+        {V_OCSP_CERTSTATUS_UNKNOWN, "unknown"}
+    };
+    return table2string(s, cstat_tbl);
+}
+
+const char *OCSP_crl_reason_str(long s)
+{
+    static const OCSP_TBLSTR reason_tbl[] = {
+        {OCSP_REVOKED_STATUS_UNSPECIFIED, "unspecified"},
+        {OCSP_REVOKED_STATUS_KEYCOMPROMISE, "keyCompromise"},
+        {OCSP_REVOKED_STATUS_CACOMPROMISE, "cACompromise"},
+        {OCSP_REVOKED_STATUS_AFFILIATIONCHANGED, "affiliationChanged"},
+        {OCSP_REVOKED_STATUS_SUPERSEDED, "superseded"},
+        {OCSP_REVOKED_STATUS_CESSATIONOFOPERATION, "cessationOfOperation"},
+        {OCSP_REVOKED_STATUS_CERTIFICATEHOLD, "certificateHold"},
+        {OCSP_REVOKED_STATUS_REMOVEFROMCRL, "removeFromCRL"}
+    };
+    return table2string(s, reason_tbl);
+}
+
+int OCSP_REQUEST_print(BIO *bp, OCSP_REQUEST *o, unsigned long flags)
+{
+    int i;
+    long l;
+    OCSP_CERTID *cid = NULL;
+    OCSP_ONEREQ *one = NULL;
+    OCSP_REQINFO *inf = &o->tbsRequest;
+    OCSP_SIGNATURE *sig = o->optionalSignature;
+
+    if (BIO_write(bp, "OCSP Request Data:\n", 19) <= 0)
+        goto err;
+    l = ASN1_INTEGER_get(inf->version);
+    if (BIO_printf(bp, "    Version: %lu (0x%lx)", l + 1, l) <= 0)
+        goto err;
+    if (inf->requestorName != NULL) {
+        if (BIO_write(bp, "\n    Requestor Name: ", 21) <= 0)
+            goto err;
+        GENERAL_NAME_print(bp, inf->requestorName);
+    }
+    if (BIO_write(bp, "\n    Requestor List:\n", 21) <= 0)
+        goto err;
+    for (i = 0; i < sk_OCSP_ONEREQ_num(inf->requestList); i++) {
+        one = sk_OCSP_ONEREQ_value(inf->requestList, i);
+        cid = one->reqCert;
+        ocsp_certid_print(bp, cid, 8);
+        if (!X509V3_extensions_print(bp,
+                                     "Request Single Extensions",
+                                     one->singleRequestExtensions, flags, 8))
+            goto err;
+    }
+    if (!X509V3_extensions_print(bp, "Request Extensions",
+                                 inf->requestExtensions, flags, 4))
+        goto err;
+    if (sig) {
+        X509_signature_print(bp, &sig->signatureAlgorithm, sig->signature);
+        for (i = 0; i < sk_X509_num(sig->certs); i++) {
+            X509_print(bp, sk_X509_value(sig->certs, i));
+            PEM_write_bio_X509(bp, sk_X509_value(sig->certs, i));
+        }
+    }
+    return 1;
+ err:
+    return 0;
+}
+
+int OCSP_RESPONSE_print(BIO *bp, OCSP_RESPONSE *o, unsigned long flags)
+{
+    int i, ret = 0;
+    long l;
+    OCSP_CERTID *cid = NULL;
+    OCSP_BASICRESP *br = NULL;
+    OCSP_RESPID *rid = NULL;
+    OCSP_RESPDATA *rd = NULL;
+    OCSP_CERTSTATUS *cst = NULL;
+    OCSP_REVOKEDINFO *rev = NULL;
+    OCSP_SINGLERESP *single = NULL;
+    OCSP_RESPBYTES *rb = o->responseBytes;
+
+    if (BIO_puts(bp, "OCSP Response Data:\n") <= 0)
+        goto err;
+    l = ASN1_ENUMERATED_get(o->responseStatus);
+    if (BIO_printf(bp, "    OCSP Response Status: %s (0x%lx)\n",
+                   OCSP_response_status_str(l), l) <= 0)
+        goto err;
+    if (rb == NULL)
+        return 1;
+    if (BIO_puts(bp, "    Response Type: ") <= 0)
+        goto err;
+    if (i2a_ASN1_OBJECT(bp, rb->responseType) <= 0)
+        goto err;
+    if (OBJ_obj2nid(rb->responseType) != NID_id_pkix_OCSP_basic) {
+        BIO_puts(bp, " (unknown response type)\n");
+        return 1;
+    }
+
+    if ((br = OCSP_response_get1_basic(o)) == NULL)
+        goto err;
+    rd = &br->tbsResponseData;
+    l = ASN1_INTEGER_get(rd->version);
+    if (BIO_printf(bp, "\n    Version: %lu (0x%lx)\n", l + 1, l) <= 0)
+        goto err;
+    if (BIO_puts(bp, "    Responder Id: ") <= 0)
+        goto err;
+
+    rid = &rd->responderId;
+    switch (rid->type) {
+    case V_OCSP_RESPID_NAME:
+        X509_NAME_print_ex(bp, rid->value.byName, 0, XN_FLAG_ONELINE);
+        break;
+    case V_OCSP_RESPID_KEY:
+        i2a_ASN1_STRING(bp, rid->value.byKey, 0);
+        break;
+    }
+
+    if (BIO_printf(bp, "\n    Produced At: ") <= 0)
+        goto err;
+    if (!ASN1_GENERALIZEDTIME_print(bp, rd->producedAt))
+        goto err;
+    if (BIO_printf(bp, "\n    Responses:\n") <= 0)
+        goto err;
+    for (i = 0; i < sk_OCSP_SINGLERESP_num(rd->responses); i++) {
+        if (!sk_OCSP_SINGLERESP_value(rd->responses, i))
+            continue;
+        single = sk_OCSP_SINGLERESP_value(rd->responses, i);
+        cid = single->certId;
+        if (ocsp_certid_print(bp, cid, 4) <= 0)
+            goto err;
+        cst = single->certStatus;
+        if (BIO_printf(bp, "    Cert Status: %s",
+                       OCSP_cert_status_str(cst->type)) <= 0)
+            goto err;
+        if (cst->type == V_OCSP_CERTSTATUS_REVOKED) {
+            rev = cst->value.revoked;
+            if (BIO_printf(bp, "\n    Revocation Time: ") <= 0)
+                goto err;
+            if (!ASN1_GENERALIZEDTIME_print(bp, rev->revocationTime))
+                goto err;
+            if (rev->revocationReason) {
+                l = ASN1_ENUMERATED_get(rev->revocationReason);
+                if (BIO_printf(bp,
+                               "\n    Revocation Reason: %s (0x%lx)",
+                               OCSP_crl_reason_str(l), l) <= 0)
+                    goto err;
+            }
+        }
+        if (BIO_printf(bp, "\n    This Update: ") <= 0)
+            goto err;
+        if (!ASN1_GENERALIZEDTIME_print(bp, single->thisUpdate))
+            goto err;
+        if (single->nextUpdate) {
+            if (BIO_printf(bp, "\n    Next Update: ") <= 0)
+                goto err;
+            if (!ASN1_GENERALIZEDTIME_print(bp, single->nextUpdate))
+                goto err;
+        }
+        if (BIO_write(bp, "\n", 1) <= 0)
+            goto err;
+        if (!X509V3_extensions_print(bp,
+                                     "Response Single Extensions",
+                                     single->singleExtensions, flags, 8))
+            goto err;
+        if (BIO_write(bp, "\n", 1) <= 0)
+            goto err;
+    }
+    if (!X509V3_extensions_print(bp, "Response Extensions",
+                                 rd->responseExtensions, flags, 4))
+        goto err;
+    if (X509_signature_print(bp, &br->signatureAlgorithm, br->signature) <= 0)
+        goto err;
+
+    for (i = 0; i < sk_X509_num(br->certs); i++) {
+        X509_print(bp, sk_X509_value(br->certs, i));
+        PEM_write_bio_X509(bp, sk_X509_value(br->certs, i));
+    }
+
+    ret = 1;
+ err:
+    OCSP_BASICRESP_free(br);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_srv.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_srv.c
new file mode 100644
index 000000000..6bd6f7b6d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_srv.c
@@ -0,0 +1,310 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include <openssl/pem.h>
+#include <openssl/x509v3.h>
+#include <openssl/ocsp.h>
+#include "ocsp_lcl.h"
+
+/*
+ * Utility functions related to sending OCSP responses and extracting
+ * relevant information from the request.
+ */
+
+int OCSP_request_onereq_count(OCSP_REQUEST *req)
+{
+    return sk_OCSP_ONEREQ_num(req->tbsRequest.requestList);
+}
+
+OCSP_ONEREQ *OCSP_request_onereq_get0(OCSP_REQUEST *req, int i)
+{
+    return sk_OCSP_ONEREQ_value(req->tbsRequest.requestList, i);
+}
+
+OCSP_CERTID *OCSP_onereq_get0_id(OCSP_ONEREQ *one)
+{
+    return one->reqCert;
+}
+
+int OCSP_id_get0_info(ASN1_OCTET_STRING **piNameHash, ASN1_OBJECT **pmd,
+                      ASN1_OCTET_STRING **pikeyHash,
+                      ASN1_INTEGER **pserial, OCSP_CERTID *cid)
+{
+    if (!cid)
+        return 0;
+    if (pmd)
+        *pmd = cid->hashAlgorithm.algorithm;
+    if (piNameHash)
+        *piNameHash = &cid->issuerNameHash;
+    if (pikeyHash)
+        *pikeyHash = &cid->issuerKeyHash;
+    if (pserial)
+        *pserial = &cid->serialNumber;
+    return 1;
+}
+
+int OCSP_request_is_signed(OCSP_REQUEST *req)
+{
+    if (req->optionalSignature)
+        return 1;
+    return 0;
+}
+
+/* Create an OCSP response and encode an optional basic response */
+OCSP_RESPONSE *OCSP_response_create(int status, OCSP_BASICRESP *bs)
+{
+    OCSP_RESPONSE *rsp = NULL;
+
+    if ((rsp = OCSP_RESPONSE_new()) == NULL)
+        goto err;
+    if (!(ASN1_ENUMERATED_set(rsp->responseStatus, status)))
+        goto err;
+    if (!bs)
+        return rsp;
+    if ((rsp->responseBytes = OCSP_RESPBYTES_new()) == NULL)
+        goto err;
+    rsp->responseBytes->responseType = OBJ_nid2obj(NID_id_pkix_OCSP_basic);
+    if (!ASN1_item_pack
+        (bs, ASN1_ITEM_rptr(OCSP_BASICRESP), &rsp->responseBytes->response))
+         goto err;
+    return rsp;
+ err:
+    OCSP_RESPONSE_free(rsp);
+    return NULL;
+}
+
+OCSP_SINGLERESP *OCSP_basic_add1_status(OCSP_BASICRESP *rsp,
+                                        OCSP_CERTID *cid,
+                                        int status, int reason,
+                                        ASN1_TIME *revtime,
+                                        ASN1_TIME *thisupd,
+                                        ASN1_TIME *nextupd)
+{
+    OCSP_SINGLERESP *single = NULL;
+    OCSP_CERTSTATUS *cs;
+    OCSP_REVOKEDINFO *ri;
+
+    if (rsp->tbsResponseData.responses == NULL
+        && (rsp->tbsResponseData.responses
+                = sk_OCSP_SINGLERESP_new_null()) == NULL)
+        goto err;
+
+    if ((single = OCSP_SINGLERESP_new()) == NULL)
+        goto err;
+
+    if (!ASN1_TIME_to_generalizedtime(thisupd, &single->thisUpdate))
+        goto err;
+    if (nextupd &&
+        !ASN1_TIME_to_generalizedtime(nextupd, &single->nextUpdate))
+        goto err;
+
+    OCSP_CERTID_free(single->certId);
+
+    if ((single->certId = OCSP_CERTID_dup(cid)) == NULL)
+        goto err;
+
+    cs = single->certStatus;
+    switch (cs->type = status) {
+    case V_OCSP_CERTSTATUS_REVOKED:
+        if (!revtime) {
+            OCSPerr(OCSP_F_OCSP_BASIC_ADD1_STATUS, OCSP_R_NO_REVOKED_TIME);
+            goto err;
+        }
+        if ((cs->value.revoked = ri = OCSP_REVOKEDINFO_new()) == NULL)
+            goto err;
+        if (!ASN1_TIME_to_generalizedtime(revtime, &ri->revocationTime))
+            goto err;
+        if (reason != OCSP_REVOKED_STATUS_NOSTATUS) {
+            if ((ri->revocationReason = ASN1_ENUMERATED_new()) == NULL)
+                goto err;
+            if (!(ASN1_ENUMERATED_set(ri->revocationReason, reason)))
+                goto err;
+        }
+        break;
+
+    case V_OCSP_CERTSTATUS_GOOD:
+        if ((cs->value.good = ASN1_NULL_new()) == NULL)
+            goto err;
+        break;
+
+    case V_OCSP_CERTSTATUS_UNKNOWN:
+        if ((cs->value.unknown = ASN1_NULL_new()) == NULL)
+            goto err;
+        break;
+
+    default:
+        goto err;
+
+    }
+    if (!(sk_OCSP_SINGLERESP_push(rsp->tbsResponseData.responses, single)))
+        goto err;
+    return single;
+ err:
+    OCSP_SINGLERESP_free(single);
+    return NULL;
+}
+
+/* Add a certificate to an OCSP request */
+
+int OCSP_basic_add1_cert(OCSP_BASICRESP *resp, X509 *cert)
+{
+    if (resp->certs == NULL
+        && (resp->certs = sk_X509_new_null()) == NULL)
+        return 0;
+
+    if (!sk_X509_push(resp->certs, cert))
+        return 0;
+    X509_up_ref(cert);
+    return 1;
+}
+
+/*
+ * Sign an OCSP response using the parameters contained in the digest context,
+ * set the responderID to the subject name in the signer's certificate, and
+ * include one or more optional certificates in the response.
+ */
+
+int OCSP_basic_sign_ctx(OCSP_BASICRESP *brsp,
+                    X509 *signer, EVP_MD_CTX *ctx,
+                    STACK_OF(X509) *certs, unsigned long flags)
+{
+    int i;
+    OCSP_RESPID *rid;
+    EVP_PKEY *pkey;
+
+    if (ctx == NULL || EVP_MD_CTX_pkey_ctx(ctx) == NULL) {
+        OCSPerr(OCSP_F_OCSP_BASIC_SIGN_CTX, OCSP_R_NO_SIGNER_KEY);
+        goto err;
+    }
+
+    pkey = EVP_PKEY_CTX_get0_pkey(EVP_MD_CTX_pkey_ctx(ctx));
+    if (pkey == NULL || !X509_check_private_key(signer, pkey)) {
+        OCSPerr(OCSP_F_OCSP_BASIC_SIGN_CTX,
+                OCSP_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE);
+        goto err;
+    }
+
+    if (!(flags & OCSP_NOCERTS)) {
+        if (!OCSP_basic_add1_cert(brsp, signer))
+            goto err;
+        for (i = 0; i < sk_X509_num(certs); i++) {
+            X509 *tmpcert = sk_X509_value(certs, i);
+            if (!OCSP_basic_add1_cert(brsp, tmpcert))
+                goto err;
+        }
+    }
+
+    rid = &brsp->tbsResponseData.responderId;
+    if (flags & OCSP_RESPID_KEY) {
+        if (!OCSP_RESPID_set_by_key(rid, signer))
+            goto err;
+    } else if (!OCSP_RESPID_set_by_name(rid, signer)) {
+        goto err;
+    }
+
+    if (!(flags & OCSP_NOTIME) &&
+        !X509_gmtime_adj(brsp->tbsResponseData.producedAt, 0))
+        goto err;
+
+    /*
+     * Right now, I think that not doing double hashing is the right thing.
+     * -- Richard Levitte
+     */
+
+    if (!OCSP_BASICRESP_sign_ctx(brsp, ctx, 0))
+        goto err;
+
+    return 1;
+ err:
+    return 0;
+}
+
+int OCSP_basic_sign(OCSP_BASICRESP *brsp,
+                    X509 *signer, EVP_PKEY *key, const EVP_MD *dgst,
+                    STACK_OF(X509) *certs, unsigned long flags)
+{
+    EVP_MD_CTX *ctx = EVP_MD_CTX_new();
+    EVP_PKEY_CTX *pkctx = NULL;
+    int i;
+
+    if (ctx == NULL)
+        return 0;
+
+    if (!EVP_DigestSignInit(ctx, &pkctx, dgst, NULL, key)) {
+        EVP_MD_CTX_free(ctx);
+        return 0;
+    }
+    i = OCSP_basic_sign_ctx(brsp, signer, ctx, certs, flags);
+    EVP_MD_CTX_free(ctx);
+    return i;
+}
+
+int OCSP_RESPID_set_by_name(OCSP_RESPID *respid, X509 *cert)
+{
+    if (!X509_NAME_set(&respid->value.byName, X509_get_subject_name(cert)))
+        return 0;
+
+    respid->type = V_OCSP_RESPID_NAME;
+
+    return 1;
+}
+
+int OCSP_RESPID_set_by_key(OCSP_RESPID *respid, X509 *cert)
+{
+    ASN1_OCTET_STRING *byKey = NULL;
+    unsigned char md[SHA_DIGEST_LENGTH];
+
+    /* RFC2560 requires SHA1 */
+    if (!X509_pubkey_digest(cert, EVP_sha1(), md, NULL))
+        return 0;
+
+    byKey = ASN1_OCTET_STRING_new();
+    if (byKey == NULL)
+        return 0;
+
+    if (!(ASN1_OCTET_STRING_set(byKey, md, SHA_DIGEST_LENGTH))) {
+        ASN1_OCTET_STRING_free(byKey);
+        return 0;
+    }
+
+    respid->type = V_OCSP_RESPID_KEY;
+    respid->value.byKey = byKey;
+
+    return 1;
+}
+
+int OCSP_RESPID_match(OCSP_RESPID *respid, X509 *cert)
+{
+    if (respid->type == V_OCSP_RESPID_KEY) {
+        unsigned char md[SHA_DIGEST_LENGTH];
+
+        if (respid->value.byKey == NULL)
+            return 0;
+
+        /* RFC2560 requires SHA1 */
+        if (!X509_pubkey_digest(cert, EVP_sha1(), md, NULL))
+            return 0;
+
+        return (ASN1_STRING_length(respid->value.byKey) == SHA_DIGEST_LENGTH)
+            && (memcmp(ASN1_STRING_get0_data(respid->value.byKey), md,
+                       SHA_DIGEST_LENGTH) == 0);
+    } else if (respid->type == V_OCSP_RESPID_NAME) {
+        if (respid->value.byName == NULL)
+            return 0;
+
+        return X509_NAME_cmp(respid->value.byName,
+                             X509_get_subject_name(cert)) == 0;
+    }
+
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_vfy.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_vfy.c
new file mode 100644
index 000000000..9a8d34386
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/ocsp_vfy.c
@@ -0,0 +1,435 @@
+/*
+ * Copyright 2001-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/ocsp.h>
+#include "ocsp_lcl.h"
+#include <openssl/err.h>
+#include <string.h>
+
+static int ocsp_find_signer(X509 **psigner, OCSP_BASICRESP *bs,
+                            STACK_OF(X509) *certs, unsigned long flags);
+static X509 *ocsp_find_signer_sk(STACK_OF(X509) *certs, OCSP_RESPID *id);
+static int ocsp_check_issuer(OCSP_BASICRESP *bs, STACK_OF(X509) *chain);
+static int ocsp_check_ids(STACK_OF(OCSP_SINGLERESP) *sresp,
+                          OCSP_CERTID **ret);
+static int ocsp_match_issuerid(X509 *cert, OCSP_CERTID *cid,
+                               STACK_OF(OCSP_SINGLERESP) *sresp);
+static int ocsp_check_delegated(X509 *x);
+static int ocsp_req_find_signer(X509 **psigner, OCSP_REQUEST *req,
+                                X509_NAME *nm, STACK_OF(X509) *certs,
+                                unsigned long flags);
+
+/* Verify a basic response message */
+
+int OCSP_basic_verify(OCSP_BASICRESP *bs, STACK_OF(X509) *certs,
+                      X509_STORE *st, unsigned long flags)
+{
+    X509 *signer, *x;
+    STACK_OF(X509) *chain = NULL;
+    STACK_OF(X509) *untrusted = NULL;
+    X509_STORE_CTX *ctx = NULL;
+    int i, ret = ocsp_find_signer(&signer, bs, certs, flags);
+
+    if (!ret) {
+        OCSPerr(OCSP_F_OCSP_BASIC_VERIFY,
+                OCSP_R_SIGNER_CERTIFICATE_NOT_FOUND);
+        goto end;
+    }
+    ctx = X509_STORE_CTX_new();
+    if (ctx == NULL) {
+        OCSPerr(OCSP_F_OCSP_BASIC_VERIFY, ERR_R_MALLOC_FAILURE);
+        goto f_err;
+    }
+    if ((ret == 2) && (flags & OCSP_TRUSTOTHER))
+        flags |= OCSP_NOVERIFY;
+    if (!(flags & OCSP_NOSIGS)) {
+        EVP_PKEY *skey;
+        skey = X509_get0_pubkey(signer);
+        if (skey == NULL) {
+            OCSPerr(OCSP_F_OCSP_BASIC_VERIFY, OCSP_R_NO_SIGNER_KEY);
+            goto err;
+        }
+        ret = OCSP_BASICRESP_verify(bs, skey, 0);
+        if (ret <= 0) {
+            OCSPerr(OCSP_F_OCSP_BASIC_VERIFY, OCSP_R_SIGNATURE_FAILURE);
+            goto end;
+        }
+    }
+    if (!(flags & OCSP_NOVERIFY)) {
+        int init_res;
+        if (flags & OCSP_NOCHAIN) {
+            untrusted = NULL;
+        } else if (bs->certs && certs) {
+            untrusted = sk_X509_dup(bs->certs);
+            for (i = 0; i < sk_X509_num(certs); i++) {
+                if (!sk_X509_push(untrusted, sk_X509_value(certs, i))) {
+                    OCSPerr(OCSP_F_OCSP_BASIC_VERIFY, ERR_R_MALLOC_FAILURE);
+                    goto f_err;
+                }
+            }
+        } else if (certs != NULL) {
+            untrusted = certs;
+        } else {
+            untrusted = bs->certs;
+        }
+        init_res = X509_STORE_CTX_init(ctx, st, signer, untrusted);
+        if (!init_res) {
+            OCSPerr(OCSP_F_OCSP_BASIC_VERIFY, ERR_R_X509_LIB);
+            goto f_err;
+        }
+
+        X509_STORE_CTX_set_purpose(ctx, X509_PURPOSE_OCSP_HELPER);
+        ret = X509_verify_cert(ctx);
+        chain = X509_STORE_CTX_get1_chain(ctx);
+        if (ret <= 0) {
+            i = X509_STORE_CTX_get_error(ctx);
+            OCSPerr(OCSP_F_OCSP_BASIC_VERIFY,
+                    OCSP_R_CERTIFICATE_VERIFY_ERROR);
+            ERR_add_error_data(2, "Verify error:",
+                               X509_verify_cert_error_string(i));
+            goto end;
+        }
+        if (flags & OCSP_NOCHECKS) {
+            ret = 1;
+            goto end;
+        }
+        /*
+         * At this point we have a valid certificate chain need to verify it
+         * against the OCSP issuer criteria.
+         */
+        ret = ocsp_check_issuer(bs, chain);
+
+        /* If fatal error or valid match then finish */
+        if (ret != 0)
+            goto end;
+
+        /*
+         * Easy case: explicitly trusted. Get root CA and check for explicit
+         * trust
+         */
+        if (flags & OCSP_NOEXPLICIT)
+            goto end;
+
+        x = sk_X509_value(chain, sk_X509_num(chain) - 1);
+        if (X509_check_trust(x, NID_OCSP_sign, 0) != X509_TRUST_TRUSTED) {
+            OCSPerr(OCSP_F_OCSP_BASIC_VERIFY, OCSP_R_ROOT_CA_NOT_TRUSTED);
+            goto err;
+        }
+        ret = 1;
+    }
+ end:
+    X509_STORE_CTX_free(ctx);
+    sk_X509_pop_free(chain, X509_free);
+    if (bs->certs && certs)
+        sk_X509_free(untrusted);
+    return ret;
+
+ err:
+    ret = 0;
+    goto end;
+ f_err:
+    ret = -1;
+    goto end;
+}
+
+int OCSP_resp_get0_signer(OCSP_BASICRESP *bs, X509 **signer,
+                          STACK_OF(X509) *extra_certs)
+{
+    int ret;
+
+    ret = ocsp_find_signer(signer, bs, extra_certs, 0);
+    return (ret > 0) ? 1 : 0;
+}
+
+static int ocsp_find_signer(X509 **psigner, OCSP_BASICRESP *bs,
+                            STACK_OF(X509) *certs, unsigned long flags)
+{
+    X509 *signer;
+    OCSP_RESPID *rid = &bs->tbsResponseData.responderId;
+    if ((signer = ocsp_find_signer_sk(certs, rid))) {
+        *psigner = signer;
+        return 2;
+    }
+    if (!(flags & OCSP_NOINTERN) &&
+        (signer = ocsp_find_signer_sk(bs->certs, rid))) {
+        *psigner = signer;
+        return 1;
+    }
+    /* Maybe lookup from store if by subject name */
+
+    *psigner = NULL;
+    return 0;
+}
+
+static X509 *ocsp_find_signer_sk(STACK_OF(X509) *certs, OCSP_RESPID *id)
+{
+    int i;
+    unsigned char tmphash[SHA_DIGEST_LENGTH], *keyhash;
+    X509 *x;
+
+    /* Easy if lookup by name */
+    if (id->type == V_OCSP_RESPID_NAME)
+        return X509_find_by_subject(certs, id->value.byName);
+
+    /* Lookup by key hash */
+
+    /* If key hash isn't SHA1 length then forget it */
+    if (id->value.byKey->length != SHA_DIGEST_LENGTH)
+        return NULL;
+    keyhash = id->value.byKey->data;
+    /* Calculate hash of each key and compare */
+    for (i = 0; i < sk_X509_num(certs); i++) {
+        x = sk_X509_value(certs, i);
+        X509_pubkey_digest(x, EVP_sha1(), tmphash, NULL);
+        if (!memcmp(keyhash, tmphash, SHA_DIGEST_LENGTH))
+            return x;
+    }
+    return NULL;
+}
+
+static int ocsp_check_issuer(OCSP_BASICRESP *bs, STACK_OF(X509) *chain)
+{
+    STACK_OF(OCSP_SINGLERESP) *sresp;
+    X509 *signer, *sca;
+    OCSP_CERTID *caid = NULL;
+    int i;
+    sresp = bs->tbsResponseData.responses;
+
+    if (sk_X509_num(chain) <= 0) {
+        OCSPerr(OCSP_F_OCSP_CHECK_ISSUER, OCSP_R_NO_CERTIFICATES_IN_CHAIN);
+        return -1;
+    }
+
+    /* See if the issuer IDs match. */
+    i = ocsp_check_ids(sresp, &caid);
+
+    /* If ID mismatch or other error then return */
+    if (i <= 0)
+        return i;
+
+    signer = sk_X509_value(chain, 0);
+    /* Check to see if OCSP responder CA matches request CA */
+    if (sk_X509_num(chain) > 1) {
+        sca = sk_X509_value(chain, 1);
+        i = ocsp_match_issuerid(sca, caid, sresp);
+        if (i < 0)
+            return i;
+        if (i) {
+            /* We have a match, if extensions OK then success */
+            if (ocsp_check_delegated(signer))
+                return 1;
+            return 0;
+        }
+    }
+
+    /* Otherwise check if OCSP request signed directly by request CA */
+    return ocsp_match_issuerid(signer, caid, sresp);
+}
+
+/*
+ * Check the issuer certificate IDs for equality. If there is a mismatch with
+ * the same algorithm then there's no point trying to match any certificates
+ * against the issuer. If the issuer IDs all match then we just need to check
+ * equality against one of them.
+ */
+
+static int ocsp_check_ids(STACK_OF(OCSP_SINGLERESP) *sresp, OCSP_CERTID **ret)
+{
+    OCSP_CERTID *tmpid, *cid;
+    int i, idcount;
+
+    idcount = sk_OCSP_SINGLERESP_num(sresp);
+    if (idcount <= 0) {
+        OCSPerr(OCSP_F_OCSP_CHECK_IDS,
+                OCSP_R_RESPONSE_CONTAINS_NO_REVOCATION_DATA);
+        return -1;
+    }
+
+    cid = sk_OCSP_SINGLERESP_value(sresp, 0)->certId;
+
+    *ret = NULL;
+
+    for (i = 1; i < idcount; i++) {
+        tmpid = sk_OCSP_SINGLERESP_value(sresp, i)->certId;
+        /* Check to see if IDs match */
+        if (OCSP_id_issuer_cmp(cid, tmpid)) {
+            /* If algorithm mismatch let caller deal with it */
+            if (OBJ_cmp(tmpid->hashAlgorithm.algorithm,
+                        cid->hashAlgorithm.algorithm))
+                return 2;
+            /* Else mismatch */
+            return 0;
+        }
+    }
+
+    /* All IDs match: only need to check one ID */
+    *ret = cid;
+    return 1;
+}
+
+static int ocsp_match_issuerid(X509 *cert, OCSP_CERTID *cid,
+                               STACK_OF(OCSP_SINGLERESP) *sresp)
+{
+    /* If only one ID to match then do it */
+    if (cid) {
+        const EVP_MD *dgst;
+        X509_NAME *iname;
+        int mdlen;
+        unsigned char md[EVP_MAX_MD_SIZE];
+        if ((dgst = EVP_get_digestbyobj(cid->hashAlgorithm.algorithm))
+                == NULL) {
+            OCSPerr(OCSP_F_OCSP_MATCH_ISSUERID,
+                    OCSP_R_UNKNOWN_MESSAGE_DIGEST);
+            return -1;
+        }
+
+        mdlen = EVP_MD_size(dgst);
+        if (mdlen < 0)
+            return -1;
+        if ((cid->issuerNameHash.length != mdlen) ||
+            (cid->issuerKeyHash.length != mdlen))
+            return 0;
+        iname = X509_get_subject_name(cert);
+        if (!X509_NAME_digest(iname, dgst, md, NULL))
+            return -1;
+        if (memcmp(md, cid->issuerNameHash.data, mdlen))
+            return 0;
+        X509_pubkey_digest(cert, dgst, md, NULL);
+        if (memcmp(md, cid->issuerKeyHash.data, mdlen))
+            return 0;
+
+        return 1;
+
+    } else {
+        /* We have to match the whole lot */
+        int i, ret;
+        OCSP_CERTID *tmpid;
+        for (i = 0; i < sk_OCSP_SINGLERESP_num(sresp); i++) {
+            tmpid = sk_OCSP_SINGLERESP_value(sresp, i)->certId;
+            ret = ocsp_match_issuerid(cert, tmpid, NULL);
+            if (ret <= 0)
+                return ret;
+        }
+        return 1;
+    }
+
+}
+
+static int ocsp_check_delegated(X509 *x)
+{
+    if ((X509_get_extension_flags(x) & EXFLAG_XKUSAGE)
+        && (X509_get_extended_key_usage(x) & XKU_OCSP_SIGN))
+        return 1;
+    OCSPerr(OCSP_F_OCSP_CHECK_DELEGATED, OCSP_R_MISSING_OCSPSIGNING_USAGE);
+    return 0;
+}
+
+/*
+ * Verify an OCSP request. This is fortunately much easier than OCSP response
+ * verify. Just find the signers certificate and verify it against a given
+ * trust value.
+ */
+
+int OCSP_request_verify(OCSP_REQUEST *req, STACK_OF(X509) *certs,
+                        X509_STORE *store, unsigned long flags)
+{
+    X509 *signer;
+    X509_NAME *nm;
+    GENERAL_NAME *gen;
+    int ret = 0;
+    X509_STORE_CTX *ctx = X509_STORE_CTX_new();
+
+    if (ctx == NULL) {
+        OCSPerr(OCSP_F_OCSP_REQUEST_VERIFY, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (!req->optionalSignature) {
+        OCSPerr(OCSP_F_OCSP_REQUEST_VERIFY, OCSP_R_REQUEST_NOT_SIGNED);
+        goto err;
+    }
+    gen = req->tbsRequest.requestorName;
+    if (!gen || gen->type != GEN_DIRNAME) {
+        OCSPerr(OCSP_F_OCSP_REQUEST_VERIFY,
+                OCSP_R_UNSUPPORTED_REQUESTORNAME_TYPE);
+        goto err;
+    }
+    nm = gen->d.directoryName;
+    ret = ocsp_req_find_signer(&signer, req, nm, certs, flags);
+    if (ret <= 0) {
+        OCSPerr(OCSP_F_OCSP_REQUEST_VERIFY,
+                OCSP_R_SIGNER_CERTIFICATE_NOT_FOUND);
+        goto err;
+    }
+    if ((ret == 2) && (flags & OCSP_TRUSTOTHER))
+        flags |= OCSP_NOVERIFY;
+    if (!(flags & OCSP_NOSIGS)) {
+        EVP_PKEY *skey;
+        skey = X509_get0_pubkey(signer);
+        ret = OCSP_REQUEST_verify(req, skey);
+        if (ret <= 0) {
+            OCSPerr(OCSP_F_OCSP_REQUEST_VERIFY, OCSP_R_SIGNATURE_FAILURE);
+            goto err;
+        }
+    }
+    if (!(flags & OCSP_NOVERIFY)) {
+        int init_res;
+        if (flags & OCSP_NOCHAIN)
+            init_res = X509_STORE_CTX_init(ctx, store, signer, NULL);
+        else
+            init_res = X509_STORE_CTX_init(ctx, store, signer,
+                                           req->optionalSignature->certs);
+        if (!init_res) {
+            OCSPerr(OCSP_F_OCSP_REQUEST_VERIFY, ERR_R_X509_LIB);
+            goto err;
+        }
+
+        X509_STORE_CTX_set_purpose(ctx, X509_PURPOSE_OCSP_HELPER);
+        X509_STORE_CTX_set_trust(ctx, X509_TRUST_OCSP_REQUEST);
+        ret = X509_verify_cert(ctx);
+        if (ret <= 0) {
+            ret = X509_STORE_CTX_get_error(ctx);
+            OCSPerr(OCSP_F_OCSP_REQUEST_VERIFY,
+                    OCSP_R_CERTIFICATE_VERIFY_ERROR);
+            ERR_add_error_data(2, "Verify error:",
+                               X509_verify_cert_error_string(ret));
+            goto err;
+        }
+    }
+    ret = 1;
+    goto end;
+
+err:
+    ret = 0;
+end:
+    X509_STORE_CTX_free(ctx);
+    return ret;
+
+}
+
+static int ocsp_req_find_signer(X509 **psigner, OCSP_REQUEST *req,
+                                X509_NAME *nm, STACK_OF(X509) *certs,
+                                unsigned long flags)
+{
+    X509 *signer;
+    if (!(flags & OCSP_NOINTERN)) {
+        signer = X509_find_by_subject(req->optionalSignature->certs, nm);
+        if (signer) {
+            *psigner = signer;
+            return 1;
+        }
+    }
+
+    signer = X509_find_by_subject(certs, nm);
+    if (signer) {
+        *psigner = signer;
+        return 2;
+    }
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/v3_ocsp.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/v3_ocsp.c
new file mode 100644
index 000000000..2d425a895
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ocsp/v3_ocsp.c
@@ -0,0 +1,264 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+# include <stdio.h>
+# include "internal/cryptlib.h"
+# include <openssl/conf.h>
+# include <openssl/asn1.h>
+# include <openssl/ocsp.h>
+# include "ocsp_lcl.h"
+# include <openssl/x509v3.h>
+# include "../x509v3/ext_dat.h"
+
+/*
+ * OCSP extensions and a couple of CRL entry extensions
+ */
+
+static int i2r_ocsp_crlid(const X509V3_EXT_METHOD *method, void *nonce,
+                          BIO *out, int indent);
+static int i2r_ocsp_acutoff(const X509V3_EXT_METHOD *method, void *nonce,
+                            BIO *out, int indent);
+static int i2r_object(const X509V3_EXT_METHOD *method, void *obj, BIO *out,
+                      int indent);
+
+static void *ocsp_nonce_new(void);
+static int i2d_ocsp_nonce(void *a, unsigned char **pp);
+static void *d2i_ocsp_nonce(void *a, const unsigned char **pp, long length);
+static void ocsp_nonce_free(void *a);
+static int i2r_ocsp_nonce(const X509V3_EXT_METHOD *method, void *nonce,
+                          BIO *out, int indent);
+
+static int i2r_ocsp_nocheck(const X509V3_EXT_METHOD *method,
+                            void *nocheck, BIO *out, int indent);
+static void *s2i_ocsp_nocheck(const X509V3_EXT_METHOD *method,
+                              X509V3_CTX *ctx, const char *str);
+static int i2r_ocsp_serviceloc(const X509V3_EXT_METHOD *method, void *in,
+                               BIO *bp, int ind);
+
+const X509V3_EXT_METHOD v3_ocsp_crlid = {
+    NID_id_pkix_OCSP_CrlID, 0, ASN1_ITEM_ref(OCSP_CRLID),
+    0, 0, 0, 0,
+    0, 0,
+    0, 0,
+    i2r_ocsp_crlid, 0,
+    NULL
+};
+
+const X509V3_EXT_METHOD v3_ocsp_acutoff = {
+    NID_id_pkix_OCSP_archiveCutoff, 0, ASN1_ITEM_ref(ASN1_GENERALIZEDTIME),
+    0, 0, 0, 0,
+    0, 0,
+    0, 0,
+    i2r_ocsp_acutoff, 0,
+    NULL
+};
+
+const X509V3_EXT_METHOD v3_crl_invdate = {
+    NID_invalidity_date, 0, ASN1_ITEM_ref(ASN1_GENERALIZEDTIME),
+    0, 0, 0, 0,
+    0, 0,
+    0, 0,
+    i2r_ocsp_acutoff, 0,
+    NULL
+};
+
+const X509V3_EXT_METHOD v3_crl_hold = {
+    NID_hold_instruction_code, 0, ASN1_ITEM_ref(ASN1_OBJECT),
+    0, 0, 0, 0,
+    0, 0,
+    0, 0,
+    i2r_object, 0,
+    NULL
+};
+
+const X509V3_EXT_METHOD v3_ocsp_nonce = {
+    NID_id_pkix_OCSP_Nonce, 0, NULL,
+    ocsp_nonce_new,
+    ocsp_nonce_free,
+    d2i_ocsp_nonce,
+    i2d_ocsp_nonce,
+    0, 0,
+    0, 0,
+    i2r_ocsp_nonce, 0,
+    NULL
+};
+
+const X509V3_EXT_METHOD v3_ocsp_nocheck = {
+    NID_id_pkix_OCSP_noCheck, 0, ASN1_ITEM_ref(ASN1_NULL),
+    0, 0, 0, 0,
+    0, s2i_ocsp_nocheck,
+    0, 0,
+    i2r_ocsp_nocheck, 0,
+    NULL
+};
+
+const X509V3_EXT_METHOD v3_ocsp_serviceloc = {
+    NID_id_pkix_OCSP_serviceLocator, 0, ASN1_ITEM_ref(OCSP_SERVICELOC),
+    0, 0, 0, 0,
+    0, 0,
+    0, 0,
+    i2r_ocsp_serviceloc, 0,
+    NULL
+};
+
+static int i2r_ocsp_crlid(const X509V3_EXT_METHOD *method, void *in, BIO *bp,
+                          int ind)
+{
+    OCSP_CRLID *a = in;
+    if (a->crlUrl) {
+        if (BIO_printf(bp, "%*scrlUrl: ", ind, "") <= 0)
+            goto err;
+        if (!ASN1_STRING_print(bp, (ASN1_STRING *)a->crlUrl))
+            goto err;
+        if (BIO_write(bp, "\n", 1) <= 0)
+            goto err;
+    }
+    if (a->crlNum) {
+        if (BIO_printf(bp, "%*scrlNum: ", ind, "") <= 0)
+            goto err;
+        if (i2a_ASN1_INTEGER(bp, a->crlNum) <= 0)
+            goto err;
+        if (BIO_write(bp, "\n", 1) <= 0)
+            goto err;
+    }
+    if (a->crlTime) {
+        if (BIO_printf(bp, "%*scrlTime: ", ind, "") <= 0)
+            goto err;
+        if (!ASN1_GENERALIZEDTIME_print(bp, a->crlTime))
+            goto err;
+        if (BIO_write(bp, "\n", 1) <= 0)
+            goto err;
+    }
+    return 1;
+ err:
+    return 0;
+}
+
+static int i2r_ocsp_acutoff(const X509V3_EXT_METHOD *method, void *cutoff,
+                            BIO *bp, int ind)
+{
+    if (BIO_printf(bp, "%*s", ind, "") <= 0)
+        return 0;
+    if (!ASN1_GENERALIZEDTIME_print(bp, cutoff))
+        return 0;
+    return 1;
+}
+
+static int i2r_object(const X509V3_EXT_METHOD *method, void *oid, BIO *bp,
+                      int ind)
+{
+    if (BIO_printf(bp, "%*s", ind, "") <= 0)
+        return 0;
+    if (i2a_ASN1_OBJECT(bp, oid) <= 0)
+        return 0;
+    return 1;
+}
+
+/*
+ * OCSP nonce. This is needs special treatment because it doesn't have an
+ * ASN1 encoding at all: it just contains arbitrary data.
+ */
+
+static void *ocsp_nonce_new(void)
+{
+    return ASN1_OCTET_STRING_new();
+}
+
+static int i2d_ocsp_nonce(void *a, unsigned char **pp)
+{
+    ASN1_OCTET_STRING *os = a;
+    if (pp) {
+        memcpy(*pp, os->data, os->length);
+        *pp += os->length;
+    }
+    return os->length;
+}
+
+static void *d2i_ocsp_nonce(void *a, const unsigned char **pp, long length)
+{
+    ASN1_OCTET_STRING *os, **pos;
+    pos = a;
+    if (pos == NULL || *pos == NULL) {
+        os = ASN1_OCTET_STRING_new();
+        if (os == NULL)
+            goto err;
+    } else {
+        os = *pos;
+    }
+    if (!ASN1_OCTET_STRING_set(os, *pp, length))
+        goto err;
+
+    *pp += length;
+
+    if (pos)
+        *pos = os;
+    return os;
+
+ err:
+    if ((pos == NULL) || (*pos != os))
+        ASN1_OCTET_STRING_free(os);
+    OCSPerr(OCSP_F_D2I_OCSP_NONCE, ERR_R_MALLOC_FAILURE);
+    return NULL;
+}
+
+static void ocsp_nonce_free(void *a)
+{
+    ASN1_OCTET_STRING_free(a);
+}
+
+static int i2r_ocsp_nonce(const X509V3_EXT_METHOD *method, void *nonce,
+                          BIO *out, int indent)
+{
+    if (BIO_printf(out, "%*s", indent, "") <= 0)
+        return 0;
+    if (i2a_ASN1_STRING(out, nonce, V_ASN1_OCTET_STRING) <= 0)
+        return 0;
+    return 1;
+}
+
+/* Nocheck is just a single NULL. Don't print anything and always set it */
+
+static int i2r_ocsp_nocheck(const X509V3_EXT_METHOD *method, void *nocheck,
+                            BIO *out, int indent)
+{
+    return 1;
+}
+
+static void *s2i_ocsp_nocheck(const X509V3_EXT_METHOD *method,
+                              X509V3_CTX *ctx, const char *str)
+{
+    return ASN1_NULL_new();
+}
+
+static int i2r_ocsp_serviceloc(const X509V3_EXT_METHOD *method, void *in,
+                               BIO *bp, int ind)
+{
+    int i;
+    OCSP_SERVICELOC *a = in;
+    ACCESS_DESCRIPTION *ad;
+
+    if (BIO_printf(bp, "%*sIssuer: ", ind, "") <= 0)
+        goto err;
+    if (X509_NAME_print_ex(bp, a->issuer, 0, XN_FLAG_ONELINE) <= 0)
+        goto err;
+    for (i = 0; i < sk_ACCESS_DESCRIPTION_num(a->locator); i++) {
+        ad = sk_ACCESS_DESCRIPTION_value(a->locator, i);
+        if (BIO_printf(bp, "\n%*s", (2 * ind), "") <= 0)
+            goto err;
+        if (i2a_ASN1_OBJECT(bp, ad->method) <= 0)
+            goto err;
+        if (BIO_puts(bp, " - ") <= 0)
+            goto err;
+        if (GENERAL_NAME_print(bp, ad->location) <= 0)
+            goto err;
+    }
+    return 1;
+ err:
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pariscid.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/pariscid.pl
new file mode 100644
index 000000000..5a231c49f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pariscid.pl
@@ -0,0 +1,276 @@
+#! /usr/bin/env perl
+# Copyright 2009-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+$flavour = shift;
+$output = shift;
+open STDOUT,">$output";
+
+if ($flavour =~ /64/) {
+	$LEVEL		="2.0W";
+	$SIZE_T		=8;
+	$ST		="std";
+} else {
+	$LEVEL		="1.1";
+	$SIZE_T		=4;
+	$ST		="stw";
+}
+
+$rp="%r2";
+$sp="%r30";
+$rv="%r28";
+
+$code=<<___;
+	.LEVEL	$LEVEL
+	.SPACE	\$TEXT\$
+	.SUBSPA	\$CODE\$,QUAD=0,ALIGN=8,ACCESS=0x2C,CODE_ONLY
+
+	.EXPORT	OPENSSL_cpuid_setup,ENTRY
+	.ALIGN	8
+OPENSSL_cpuid_setup
+	.PROC
+	.CALLINFO	NO_CALLS
+	.ENTRY
+	bv	($rp)
+	.EXIT
+	nop
+	.PROCEND
+
+	.EXPORT	OPENSSL_rdtsc,ENTRY
+	.ALIGN	8
+OPENSSL_rdtsc
+	.PROC
+	.CALLINFO	NO_CALLS
+	.ENTRY
+	mfctl	%cr16,$rv
+	bv	($rp)
+	.EXIT
+	nop
+	.PROCEND
+
+	.EXPORT	OPENSSL_wipe_cpu,ENTRY
+	.ALIGN	8
+OPENSSL_wipe_cpu
+	.PROC
+	.CALLINFO	NO_CALLS
+	.ENTRY
+	xor		%r0,%r0,%r1
+	fcpy,dbl	%fr0,%fr4
+	xor		%r0,%r0,%r19
+	fcpy,dbl	%fr0,%fr5
+	xor		%r0,%r0,%r20
+	fcpy,dbl	%fr0,%fr6
+	xor		%r0,%r0,%r21
+	fcpy,dbl	%fr0,%fr7
+	xor		%r0,%r0,%r22
+	fcpy,dbl	%fr0,%fr8
+	xor		%r0,%r0,%r23
+	fcpy,dbl	%fr0,%fr9
+	xor		%r0,%r0,%r24
+	fcpy,dbl	%fr0,%fr10
+	xor		%r0,%r0,%r25
+	fcpy,dbl	%fr0,%fr11
+	xor		%r0,%r0,%r26
+	fcpy,dbl	%fr0,%fr22
+	xor		%r0,%r0,%r29
+	fcpy,dbl	%fr0,%fr23
+	xor		%r0,%r0,%r31
+	fcpy,dbl	%fr0,%fr24
+	fcpy,dbl	%fr0,%fr25
+	fcpy,dbl	%fr0,%fr26
+	fcpy,dbl	%fr0,%fr27
+	fcpy,dbl	%fr0,%fr28
+	fcpy,dbl	%fr0,%fr29
+	fcpy,dbl	%fr0,%fr30
+	fcpy,dbl	%fr0,%fr31
+	bv		($rp)
+	.EXIT
+	ldo		0($sp),$rv
+	.PROCEND
+___
+{
+my $inp="%r26";
+my $len="%r25";
+
+$code.=<<___;
+	.EXPORT	OPENSSL_cleanse,ENTRY,ARGW0=GR,ARGW1=GR
+	.ALIGN	8
+OPENSSL_cleanse
+	.PROC
+	.CALLINFO	NO_CALLS
+	.ENTRY
+	cmpib,*=	0,$len,L\$done
+	nop
+	cmpib,*>>=	15,$len,L\$ittle
+	ldi		$SIZE_T-1,%r1
+
+L\$align
+	and,*<>		$inp,%r1,%r28
+	b,n		L\$aligned
+	stb		%r0,0($inp)
+	ldo		-1($len),$len
+	b		L\$align
+	ldo		1($inp),$inp
+
+L\$aligned
+	andcm		$len,%r1,%r28
+L\$ot
+	$ST		%r0,0($inp)
+	addib,*<>	-$SIZE_T,%r28,L\$ot
+	ldo		$SIZE_T($inp),$inp
+
+	and,*<>		$len,%r1,$len
+	b,n		L\$done
+L\$ittle
+	stb		%r0,0($inp)
+	addib,*<>	-1,$len,L\$ittle
+	ldo		1($inp),$inp
+L\$done
+	bv		($rp)
+	.EXIT
+	nop
+	.PROCEND
+___
+}
+{
+my ($in1,$in2,$len)=("%r26","%r25","%r24");
+
+$code.=<<___;
+	.EXPORT	CRYPTO_memcmp,ENTRY,ARGW0=GR,ARGW1=GR,ARGW1=GR
+	.ALIGN	8
+CRYPTO_memcmp
+	.PROC
+	.CALLINFO	NO_CALLS
+	.ENTRY
+	cmpib,*=	0,$len,L\$no_data
+	xor		$rv,$rv,$rv
+
+L\$oop_cmp
+	ldb		0($in1),%r19
+	ldb		0($in2),%r20
+	ldo		1($in1),$in1
+	ldo		1($in2),$in2
+	xor		%r19,%r20,%r29
+	addib,*<>	-1,$len,L\$oop_cmp
+	or		%r29,$rv,$rv
+
+	sub		%r0,$rv,%r29
+	extru		%r29,0,1,$rv
+L\$no_data
+	bv		($rp)
+	.EXIT
+	nop
+	.PROCEND
+___
+}
+{
+my ($out,$cnt,$max)=("%r26","%r25","%r24");
+my ($tick,$lasttick)=("%r23","%r22");
+my ($diff,$lastdiff)=("%r21","%r20");
+
+$code.=<<___;
+	.EXPORT	OPENSSL_instrument_bus,ENTRY,ARGW0=GR,ARGW1=GR
+	.ALIGN	8
+OPENSSL_instrument_bus
+	.PROC
+	.CALLINFO	NO_CALLS
+	.ENTRY
+	copy		$cnt,$rv
+	mfctl		%cr16,$tick
+	copy		$tick,$lasttick
+	ldi		0,$diff
+
+	fdc		0($out)
+	ldw		0($out),$tick
+	add		$diff,$tick,$tick
+	stw		$tick,0($out)
+L\$oop
+	mfctl		%cr16,$tick
+	sub		$tick,$lasttick,$diff
+	copy		$tick,$lasttick
+
+	fdc		0($out)
+	ldw		0($out),$tick
+	add		$diff,$tick,$tick
+	stw		$tick,0($out)
+
+	addib,<>	-1,$cnt,L\$oop
+	addi		4,$out,$out
+
+	bv		($rp)
+	.EXIT
+	sub		$rv,$cnt,$rv
+	.PROCEND
+
+	.EXPORT	OPENSSL_instrument_bus2,ENTRY,ARGW0=GR,ARGW1=GR
+	.ALIGN	8
+OPENSSL_instrument_bus2
+	.PROC
+	.CALLINFO	NO_CALLS
+	.ENTRY
+	copy		$cnt,$rv
+	sub		%r0,$cnt,$cnt
+
+	mfctl		%cr16,$tick
+	copy		$tick,$lasttick
+	ldi		0,$diff
+
+	fdc		0($out)
+	ldw		0($out),$tick
+	add		$diff,$tick,$tick
+	stw		$tick,0($out)
+
+	mfctl		%cr16,$tick
+	sub		$tick,$lasttick,$diff
+	copy		$tick,$lasttick
+L\$oop2
+	copy		$diff,$lastdiff
+	fdc		0($out)
+	ldw		0($out),$tick
+	add		$diff,$tick,$tick
+	stw		$tick,0($out)
+
+	addib,=		-1,$max,L\$done2
+	nop
+
+	mfctl		%cr16,$tick
+	sub		$tick,$lasttick,$diff
+	copy		$tick,$lasttick
+	cmpclr,<>	$lastdiff,$diff,$tick
+	ldi		1,$tick
+
+	ldi		1,%r1
+	xor		%r1,$tick,$tick
+	addb,<>		$tick,$cnt,L\$oop2
+	shladd,l	$tick,2,$out,$out
+L\$done2
+	bv		($rp)
+	.EXIT
+	add		$rv,$cnt,$rv
+	.PROCEND
+___
+}
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+	=~ /GNU assembler/) {
+    $gnuas = 1;
+}
+
+foreach(split("\n",$code)) {
+
+	s/(\.LEVEL\s+2\.0)W/$1w/	if ($gnuas && $SIZE_T==8);
+	s/\.SPACE\s+\$TEXT\$/.text/	if ($gnuas && $SIZE_T==8);
+	s/\.SUBSPA.*//			if ($gnuas && $SIZE_T==8);
+	s/cmpib,\*/comib,/		if ($SIZE_T==4);
+	s/,\*/,/			if ($SIZE_T==4);
+	s/\bbv\b/bve/			if ($SIZE_T==8);
+
+	print $_,"\n";
+}
+close STDOUT;
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pem/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/build.info
new file mode 100644
index 000000000..357b32833
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/build.info
@@ -0,0 +1,4 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        pem_sign.c pem_info.c pem_lib.c pem_all.c pem_err.c \
+        pem_x509.c pem_xaux.c pem_oth.c pem_pk8.c pem_pkey.c pvkfmt.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_all.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_all.c
new file mode 100644
index 000000000..0e7181311
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_all.c
@@ -0,0 +1,181 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bio.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/pkcs7.h>
+#include <openssl/pem.h>
+#include <openssl/rsa.h>
+#include <openssl/dsa.h>
+#include <openssl/dh.h>
+
+#ifndef OPENSSL_NO_RSA
+static RSA *pkey_get_rsa(EVP_PKEY *key, RSA **rsa);
+#endif
+#ifndef OPENSSL_NO_DSA
+static DSA *pkey_get_dsa(EVP_PKEY *key, DSA **dsa);
+#endif
+
+#ifndef OPENSSL_NO_EC
+static EC_KEY *pkey_get_eckey(EVP_PKEY *key, EC_KEY **eckey);
+#endif
+
+IMPLEMENT_PEM_rw(X509_REQ, X509_REQ, PEM_STRING_X509_REQ, X509_REQ)
+
+IMPLEMENT_PEM_write(X509_REQ_NEW, X509_REQ, PEM_STRING_X509_REQ_OLD, X509_REQ)
+IMPLEMENT_PEM_rw(X509_CRL, X509_CRL, PEM_STRING_X509_CRL, X509_CRL)
+IMPLEMENT_PEM_rw(PKCS7, PKCS7, PEM_STRING_PKCS7, PKCS7)
+
+IMPLEMENT_PEM_rw(NETSCAPE_CERT_SEQUENCE, NETSCAPE_CERT_SEQUENCE,
+                 PEM_STRING_X509, NETSCAPE_CERT_SEQUENCE)
+#ifndef OPENSSL_NO_RSA
+/*
+ * We treat RSA or DSA private keys as a special case. For private keys we
+ * read in an EVP_PKEY structure with PEM_read_bio_PrivateKey() and extract
+ * the relevant private key: this means can handle "traditional" and PKCS#8
+ * formats transparently.
+ */
+static RSA *pkey_get_rsa(EVP_PKEY *key, RSA **rsa)
+{
+    RSA *rtmp;
+    if (!key)
+        return NULL;
+    rtmp = EVP_PKEY_get1_RSA(key);
+    EVP_PKEY_free(key);
+    if (!rtmp)
+        return NULL;
+    if (rsa) {
+        RSA_free(*rsa);
+        *rsa = rtmp;
+    }
+    return rtmp;
+}
+
+RSA *PEM_read_bio_RSAPrivateKey(BIO *bp, RSA **rsa, pem_password_cb *cb,
+                                void *u)
+{
+    EVP_PKEY *pktmp;
+    pktmp = PEM_read_bio_PrivateKey(bp, NULL, cb, u);
+    return pkey_get_rsa(pktmp, rsa);
+}
+
+# ifndef OPENSSL_NO_STDIO
+
+RSA *PEM_read_RSAPrivateKey(FILE *fp, RSA **rsa, pem_password_cb *cb, void *u)
+{
+    EVP_PKEY *pktmp;
+    pktmp = PEM_read_PrivateKey(fp, NULL, cb, u);
+    return pkey_get_rsa(pktmp, rsa);
+}
+
+# endif
+
+IMPLEMENT_PEM_write_cb_const(RSAPrivateKey, RSA, PEM_STRING_RSA,
+                             RSAPrivateKey)
+
+
+IMPLEMENT_PEM_rw_const(RSAPublicKey, RSA, PEM_STRING_RSA_PUBLIC,
+                       RSAPublicKey) IMPLEMENT_PEM_rw(RSA_PUBKEY, RSA,
+                                                      PEM_STRING_PUBLIC,
+                                                      RSA_PUBKEY)
+#endif
+#ifndef OPENSSL_NO_DSA
+static DSA *pkey_get_dsa(EVP_PKEY *key, DSA **dsa)
+{
+    DSA *dtmp;
+    if (!key)
+        return NULL;
+    dtmp = EVP_PKEY_get1_DSA(key);
+    EVP_PKEY_free(key);
+    if (!dtmp)
+        return NULL;
+    if (dsa) {
+        DSA_free(*dsa);
+        *dsa = dtmp;
+    }
+    return dtmp;
+}
+
+DSA *PEM_read_bio_DSAPrivateKey(BIO *bp, DSA **dsa, pem_password_cb *cb,
+                                void *u)
+{
+    EVP_PKEY *pktmp;
+    pktmp = PEM_read_bio_PrivateKey(bp, NULL, cb, u);
+    return pkey_get_dsa(pktmp, dsa); /* will free pktmp */
+}
+
+IMPLEMENT_PEM_write_cb_const(DSAPrivateKey, DSA, PEM_STRING_DSA,
+                             DSAPrivateKey)
+    IMPLEMENT_PEM_rw(DSA_PUBKEY, DSA, PEM_STRING_PUBLIC, DSA_PUBKEY)
+# ifndef OPENSSL_NO_STDIO
+DSA *PEM_read_DSAPrivateKey(FILE *fp, DSA **dsa, pem_password_cb *cb, void *u)
+{
+    EVP_PKEY *pktmp;
+    pktmp = PEM_read_PrivateKey(fp, NULL, cb, u);
+    return pkey_get_dsa(pktmp, dsa); /* will free pktmp */
+}
+
+# endif
+
+IMPLEMENT_PEM_rw_const(DSAparams, DSA, PEM_STRING_DSAPARAMS, DSAparams)
+#endif
+#ifndef OPENSSL_NO_EC
+static EC_KEY *pkey_get_eckey(EVP_PKEY *key, EC_KEY **eckey)
+{
+    EC_KEY *dtmp;
+    if (!key)
+        return NULL;
+    dtmp = EVP_PKEY_get1_EC_KEY(key);
+    EVP_PKEY_free(key);
+    if (!dtmp)
+        return NULL;
+    if (eckey) {
+        EC_KEY_free(*eckey);
+        *eckey = dtmp;
+    }
+    return dtmp;
+}
+
+EC_KEY *PEM_read_bio_ECPrivateKey(BIO *bp, EC_KEY **key, pem_password_cb *cb,
+                                  void *u)
+{
+    EVP_PKEY *pktmp;
+    pktmp = PEM_read_bio_PrivateKey(bp, NULL, cb, u);
+    return pkey_get_eckey(pktmp, key); /* will free pktmp */
+}
+
+IMPLEMENT_PEM_rw_const(ECPKParameters, EC_GROUP, PEM_STRING_ECPARAMETERS,
+                       ECPKParameters)
+
+
+IMPLEMENT_PEM_write_cb(ECPrivateKey, EC_KEY, PEM_STRING_ECPRIVATEKEY,
+                       ECPrivateKey)
+IMPLEMENT_PEM_rw(EC_PUBKEY, EC_KEY, PEM_STRING_PUBLIC, EC_PUBKEY)
+# ifndef OPENSSL_NO_STDIO
+EC_KEY *PEM_read_ECPrivateKey(FILE *fp, EC_KEY **eckey, pem_password_cb *cb,
+                              void *u)
+{
+    EVP_PKEY *pktmp;
+    pktmp = PEM_read_PrivateKey(fp, NULL, cb, u);
+    return pkey_get_eckey(pktmp, eckey); /* will free pktmp */
+}
+
+# endif
+
+#endif
+
+#ifndef OPENSSL_NO_DH
+
+IMPLEMENT_PEM_write_const(DHparams, DH, PEM_STRING_DHPARAMS, DHparams)
+    IMPLEMENT_PEM_write_const(DHxparams, DH, PEM_STRING_DHXPARAMS, DHxparams)
+#endif
+IMPLEMENT_PEM_rw(PUBKEY, EVP_PKEY, PEM_STRING_PUBLIC, PUBKEY)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_err.c
new file mode 100644
index 000000000..f642030aa
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_err.c
@@ -0,0 +1,126 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/pemerr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA PEM_str_functs[] = {
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_B2I_DSS, 0), "b2i_dss"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_B2I_PVK_BIO, 0), "b2i_PVK_bio"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_B2I_RSA, 0), "b2i_rsa"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_CHECK_BITLEN_DSA, 0), "check_bitlen_dsa"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_CHECK_BITLEN_RSA, 0), "check_bitlen_rsa"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_D2I_PKCS8PRIVATEKEY_BIO, 0),
+     "d2i_PKCS8PrivateKey_bio"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_D2I_PKCS8PRIVATEKEY_FP, 0),
+     "d2i_PKCS8PrivateKey_fp"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_DO_B2I, 0), "do_b2i"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_DO_B2I_BIO, 0), "do_b2i_bio"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_DO_BLOB_HEADER, 0), "do_blob_header"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_DO_I2B, 0), "do_i2b"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_DO_PK8PKEY, 0), "do_pk8pkey"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_DO_PK8PKEY_FP, 0), "do_pk8pkey_fp"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_DO_PVK_BODY, 0), "do_PVK_body"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_DO_PVK_HEADER, 0), "do_PVK_header"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_GET_HEADER_AND_DATA, 0),
+     "get_header_and_data"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_GET_NAME, 0), "get_name"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_I2B_PVK, 0), "i2b_PVK"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_I2B_PVK_BIO, 0), "i2b_PVK_bio"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_LOAD_IV, 0), "load_iv"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_ASN1_READ, 0), "PEM_ASN1_read"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_ASN1_READ_BIO, 0), "PEM_ASN1_read_bio"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_ASN1_WRITE, 0), "PEM_ASN1_write"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_ASN1_WRITE_BIO, 0), "PEM_ASN1_write_bio"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_DEF_CALLBACK, 0), "PEM_def_callback"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_DO_HEADER, 0), "PEM_do_header"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_GET_EVP_CIPHER_INFO, 0),
+     "PEM_get_EVP_CIPHER_INFO"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_READ, 0), "PEM_read"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_READ_BIO, 0), "PEM_read_bio"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_READ_BIO_DHPARAMS, 0),
+     "PEM_read_bio_DHparams"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_READ_BIO_EX, 0), "PEM_read_bio_ex"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_READ_BIO_PARAMETERS, 0),
+     "PEM_read_bio_Parameters"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_READ_BIO_PRIVATEKEY, 0),
+     "PEM_read_bio_PrivateKey"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_READ_DHPARAMS, 0), "PEM_read_DHparams"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_READ_PRIVATEKEY, 0),
+     "PEM_read_PrivateKey"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_SIGNFINAL, 0), "PEM_SignFinal"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_WRITE, 0), "PEM_write"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_WRITE_BIO, 0), "PEM_write_bio"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_WRITE_PRIVATEKEY, 0),
+     "PEM_write_PrivateKey"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_X509_INFO_READ, 0), "PEM_X509_INFO_read"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_X509_INFO_READ_BIO, 0),
+     "PEM_X509_INFO_read_bio"},
+    {ERR_PACK(ERR_LIB_PEM, PEM_F_PEM_X509_INFO_WRITE_BIO, 0),
+     "PEM_X509_INFO_write_bio"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA PEM_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_BAD_BASE64_DECODE), "bad base64 decode"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_BAD_DECRYPT), "bad decrypt"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_BAD_END_LINE), "bad end line"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_BAD_IV_CHARS), "bad iv chars"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_BAD_MAGIC_NUMBER), "bad magic number"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_BAD_PASSWORD_READ), "bad password read"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_BAD_VERSION_NUMBER), "bad version number"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_BIO_WRITE_FAILURE), "bio write failure"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_CIPHER_IS_NULL), "cipher is null"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_ERROR_CONVERTING_PRIVATE_KEY),
+    "error converting private key"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_EXPECTING_PRIVATE_KEY_BLOB),
+    "expecting private key blob"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_EXPECTING_PUBLIC_KEY_BLOB),
+    "expecting public key blob"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_HEADER_TOO_LONG), "header too long"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_INCONSISTENT_HEADER),
+    "inconsistent header"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_KEYBLOB_HEADER_PARSE_ERROR),
+    "keyblob header parse error"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_KEYBLOB_TOO_SHORT), "keyblob too short"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_MISSING_DEK_IV), "missing dek iv"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_NOT_DEK_INFO), "not dek info"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_NOT_ENCRYPTED), "not encrypted"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_NOT_PROC_TYPE), "not proc type"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_NO_START_LINE), "no start line"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_PROBLEMS_GETTING_PASSWORD),
+    "problems getting password"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_PVK_DATA_TOO_SHORT), "pvk data too short"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_PVK_TOO_SHORT), "pvk too short"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_READ_KEY), "read key"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_SHORT_HEADER), "short header"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_UNEXPECTED_DEK_IV), "unexpected dek iv"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_UNSUPPORTED_CIPHER), "unsupported cipher"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_UNSUPPORTED_ENCRYPTION),
+    "unsupported encryption"},
+    {ERR_PACK(ERR_LIB_PEM, 0, PEM_R_UNSUPPORTED_KEY_COMPONENTS),
+    "unsupported key components"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_PEM_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(PEM_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(PEM_str_functs);
+        ERR_load_strings_const(PEM_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_info.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_info.c
new file mode 100644
index 000000000..f90cb4465
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_info.c
@@ -0,0 +1,337 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/pem.h>
+#include <openssl/rsa.h>
+#include <openssl/dsa.h>
+
+#ifndef OPENSSL_NO_STDIO
+STACK_OF(X509_INFO) *PEM_X509_INFO_read(FILE *fp, STACK_OF(X509_INFO) *sk,
+                                        pem_password_cb *cb, void *u)
+{
+    BIO *b;
+    STACK_OF(X509_INFO) *ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        PEMerr(PEM_F_PEM_X509_INFO_READ, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = PEM_X509_INFO_read_bio(b, sk, cb, u);
+    BIO_free(b);
+    return ret;
+}
+#endif
+
+STACK_OF(X509_INFO) *PEM_X509_INFO_read_bio(BIO *bp, STACK_OF(X509_INFO) *sk,
+                                            pem_password_cb *cb, void *u)
+{
+    X509_INFO *xi = NULL;
+    char *name = NULL, *header = NULL;
+    void *pp;
+    unsigned char *data = NULL;
+    const unsigned char *p;
+    long len, error = 0;
+    int ok = 0;
+    STACK_OF(X509_INFO) *ret = NULL;
+    unsigned int i, raw, ptype;
+    d2i_of_void *d2i = 0;
+
+    if (sk == NULL) {
+        if ((ret = sk_X509_INFO_new_null()) == NULL) {
+            PEMerr(PEM_F_PEM_X509_INFO_READ_BIO, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    } else
+        ret = sk;
+
+    if ((xi = X509_INFO_new()) == NULL)
+        goto err;
+    for (;;) {
+        raw = 0;
+        ptype = 0;
+        i = PEM_read_bio(bp, &name, &header, &data, &len);
+        if (i == 0) {
+            error = ERR_GET_REASON(ERR_peek_last_error());
+            if (error == PEM_R_NO_START_LINE) {
+                ERR_clear_error();
+                break;
+            }
+            goto err;
+        }
+ start:
+        if ((strcmp(name, PEM_STRING_X509) == 0) ||
+            (strcmp(name, PEM_STRING_X509_OLD) == 0)) {
+            d2i = (D2I_OF(void)) d2i_X509;
+            if (xi->x509 != NULL) {
+                if (!sk_X509_INFO_push(ret, xi))
+                    goto err;
+                if ((xi = X509_INFO_new()) == NULL)
+                    goto err;
+                goto start;
+            }
+            pp = &(xi->x509);
+        } else if ((strcmp(name, PEM_STRING_X509_TRUSTED) == 0)) {
+            d2i = (D2I_OF(void)) d2i_X509_AUX;
+            if (xi->x509 != NULL) {
+                if (!sk_X509_INFO_push(ret, xi))
+                    goto err;
+                if ((xi = X509_INFO_new()) == NULL)
+                    goto err;
+                goto start;
+            }
+            pp = &(xi->x509);
+        } else if (strcmp(name, PEM_STRING_X509_CRL) == 0) {
+            d2i = (D2I_OF(void)) d2i_X509_CRL;
+            if (xi->crl != NULL) {
+                if (!sk_X509_INFO_push(ret, xi))
+                    goto err;
+                if ((xi = X509_INFO_new()) == NULL)
+                    goto err;
+                goto start;
+            }
+            pp = &(xi->crl);
+        } else
+#ifndef OPENSSL_NO_RSA
+        if (strcmp(name, PEM_STRING_RSA) == 0) {
+            d2i = (D2I_OF(void)) d2i_RSAPrivateKey;
+            if (xi->x_pkey != NULL) {
+                if (!sk_X509_INFO_push(ret, xi))
+                    goto err;
+                if ((xi = X509_INFO_new()) == NULL)
+                    goto err;
+                goto start;
+            }
+
+            xi->enc_data = NULL;
+            xi->enc_len = 0;
+
+            xi->x_pkey = X509_PKEY_new();
+            if (xi->x_pkey == NULL)
+                goto err;
+            ptype = EVP_PKEY_RSA;
+            pp = &xi->x_pkey->dec_pkey;
+            if ((int)strlen(header) > 10) /* assume encrypted */
+                raw = 1;
+        } else
+#endif
+#ifndef OPENSSL_NO_DSA
+        if (strcmp(name, PEM_STRING_DSA) == 0) {
+            d2i = (D2I_OF(void)) d2i_DSAPrivateKey;
+            if (xi->x_pkey != NULL) {
+                if (!sk_X509_INFO_push(ret, xi))
+                    goto err;
+                if ((xi = X509_INFO_new()) == NULL)
+                    goto err;
+                goto start;
+            }
+
+            xi->enc_data = NULL;
+            xi->enc_len = 0;
+
+            xi->x_pkey = X509_PKEY_new();
+            if (xi->x_pkey == NULL)
+                goto err;
+            ptype = EVP_PKEY_DSA;
+            pp = &xi->x_pkey->dec_pkey;
+            if ((int)strlen(header) > 10) /* assume encrypted */
+                raw = 1;
+        } else
+#endif
+#ifndef OPENSSL_NO_EC
+        if (strcmp(name, PEM_STRING_ECPRIVATEKEY) == 0) {
+            d2i = (D2I_OF(void)) d2i_ECPrivateKey;
+            if (xi->x_pkey != NULL) {
+                if (!sk_X509_INFO_push(ret, xi))
+                    goto err;
+                if ((xi = X509_INFO_new()) == NULL)
+                    goto err;
+                goto start;
+            }
+
+            xi->enc_data = NULL;
+            xi->enc_len = 0;
+
+            xi->x_pkey = X509_PKEY_new();
+            if (xi->x_pkey == NULL)
+                goto err;
+            ptype = EVP_PKEY_EC;
+            pp = &xi->x_pkey->dec_pkey;
+            if ((int)strlen(header) > 10) /* assume encrypted */
+                raw = 1;
+        } else
+#endif
+        {
+            d2i = NULL;
+            pp = NULL;
+        }
+
+        if (d2i != NULL) {
+            if (!raw) {
+                EVP_CIPHER_INFO cipher;
+
+                if (!PEM_get_EVP_CIPHER_INFO(header, &cipher))
+                    goto err;
+                if (!PEM_do_header(&cipher, data, &len, cb, u))
+                    goto err;
+                p = data;
+                if (ptype) {
+                    if (!d2i_PrivateKey(ptype, pp, &p, len)) {
+                        PEMerr(PEM_F_PEM_X509_INFO_READ_BIO, ERR_R_ASN1_LIB);
+                        goto err;
+                    }
+                } else if (d2i(pp, &p, len) == NULL) {
+                    PEMerr(PEM_F_PEM_X509_INFO_READ_BIO, ERR_R_ASN1_LIB);
+                    goto err;
+                }
+            } else {            /* encrypted RSA data */
+                if (!PEM_get_EVP_CIPHER_INFO(header, &xi->enc_cipher))
+                    goto err;
+                xi->enc_data = (char *)data;
+                xi->enc_len = (int)len;
+                data = NULL;
+            }
+        } else {
+            /* unknown */
+        }
+        OPENSSL_free(name);
+        name = NULL;
+        OPENSSL_free(header);
+        header = NULL;
+        OPENSSL_free(data);
+        data = NULL;
+    }
+
+    /*
+     * if the last one hasn't been pushed yet and there is anything in it
+     * then add it to the stack ...
+     */
+    if ((xi->x509 != NULL) || (xi->crl != NULL) ||
+        (xi->x_pkey != NULL) || (xi->enc_data != NULL)) {
+        if (!sk_X509_INFO_push(ret, xi))
+            goto err;
+        xi = NULL;
+    }
+    ok = 1;
+ err:
+    X509_INFO_free(xi);
+    if (!ok) {
+        for (i = 0; ((int)i) < sk_X509_INFO_num(ret); i++) {
+            xi = sk_X509_INFO_value(ret, i);
+            X509_INFO_free(xi);
+        }
+        if (ret != sk)
+            sk_X509_INFO_free(ret);
+        ret = NULL;
+    }
+
+    OPENSSL_free(name);
+    OPENSSL_free(header);
+    OPENSSL_free(data);
+    return ret;
+}
+
+/* A TJH addition */
+int PEM_X509_INFO_write_bio(BIO *bp, X509_INFO *xi, EVP_CIPHER *enc,
+                            unsigned char *kstr, int klen,
+                            pem_password_cb *cb, void *u)
+{
+    int i, ret = 0;
+    unsigned char *data = NULL;
+    const char *objstr = NULL;
+    char buf[PEM_BUFSIZE];
+    unsigned char *iv = NULL;
+
+    if (enc != NULL) {
+        objstr = OBJ_nid2sn(EVP_CIPHER_nid(enc));
+        if (objstr == NULL
+                   /*
+                    * Check "Proc-Type: 4,Encrypted\nDEK-Info: objstr,hex-iv\n"
+                    * fits into buf
+                    */
+                || (strlen(objstr) + 23 + 2 * EVP_CIPHER_iv_length(enc) + 13)
+                   > sizeof(buf)) {
+            PEMerr(PEM_F_PEM_X509_INFO_WRITE_BIO, PEM_R_UNSUPPORTED_CIPHER);
+            goto err;
+        }
+    }
+
+    /*
+     * now for the fun part ... if we have a private key then we have to be
+     * able to handle a not-yet-decrypted key being written out correctly ...
+     * if it is decrypted or it is non-encrypted then we use the base code
+     */
+    if (xi->x_pkey != NULL) {
+        if ((xi->enc_data != NULL) && (xi->enc_len > 0)) {
+            if (enc == NULL) {
+                PEMerr(PEM_F_PEM_X509_INFO_WRITE_BIO, PEM_R_CIPHER_IS_NULL);
+                goto err;
+            }
+
+            /* copy from weirdo names into more normal things */
+            iv = xi->enc_cipher.iv;
+            data = (unsigned char *)xi->enc_data;
+            i = xi->enc_len;
+
+            /*
+             * we take the encryption data from the internal stuff rather
+             * than what the user has passed us ... as we have to match
+             * exactly for some strange reason
+             */
+            objstr = OBJ_nid2sn(EVP_CIPHER_nid(xi->enc_cipher.cipher));
+            if (objstr == NULL) {
+                PEMerr(PEM_F_PEM_X509_INFO_WRITE_BIO,
+                       PEM_R_UNSUPPORTED_CIPHER);
+                goto err;
+            }
+
+            /* Create the right magic header stuff */
+            buf[0] = '\0';
+            PEM_proc_type(buf, PEM_TYPE_ENCRYPTED);
+            PEM_dek_info(buf, objstr, EVP_CIPHER_iv_length(enc),
+                         (char *)iv);
+
+            /* use the normal code to write things out */
+            i = PEM_write_bio(bp, PEM_STRING_RSA, buf, data, i);
+            if (i <= 0)
+                goto err;
+        } else {
+            /* Add DSA/DH */
+#ifndef OPENSSL_NO_RSA
+            /* normal optionally encrypted stuff */
+            if (PEM_write_bio_RSAPrivateKey(bp,
+                                            EVP_PKEY_get0_RSA(xi->x_pkey->dec_pkey),
+                                            enc, kstr, klen, cb, u) <= 0)
+                goto err;
+#endif
+        }
+    }
+
+    /* if we have a certificate then write it out now */
+    if ((xi->x509 != NULL) && (PEM_write_bio_X509(bp, xi->x509) <= 0))
+        goto err;
+
+    /*
+     * we are ignoring anything else that is loaded into the X509_INFO
+     * structure for the moment ... as I don't need it so I'm not coding it
+     * here and Eric can do it when this makes it into the base library --tjh
+     */
+
+    ret = 1;
+
+ err:
+    OPENSSL_cleanse(buf, PEM_BUFSIZE);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_lib.c
new file mode 100644
index 000000000..4bb86463f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_lib.c
@@ -0,0 +1,988 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/ctype.h"
+#include <string.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/rand.h>
+#include <openssl/x509.h>
+#include <openssl/pem.h>
+#include <openssl/pkcs12.h>
+#include "internal/asn1_int.h"
+#include <openssl/des.h>
+#include <openssl/engine.h>
+
+#define MIN_LENGTH      4
+
+static int load_iv(char **fromp, unsigned char *to, int num);
+static int check_pem(const char *nm, const char *name);
+int pem_check_suffix(const char *pem_str, const char *suffix);
+
+int PEM_def_callback(char *buf, int num, int rwflag, void *userdata)
+{
+    int i, min_len;
+    const char *prompt;
+
+    /* We assume that the user passes a default password as userdata */
+    if (userdata) {
+        i = strlen(userdata);
+        i = (i > num) ? num : i;
+        memcpy(buf, userdata, i);
+        return i;
+    }
+
+    prompt = EVP_get_pw_prompt();
+    if (prompt == NULL)
+        prompt = "Enter PEM pass phrase:";
+
+    /*
+     * rwflag == 0 means decryption
+     * rwflag == 1 means encryption
+     *
+     * We assume that for encryption, we want a minimum length, while for
+     * decryption, we cannot know any minimum length, so we assume zero.
+     */
+    min_len = rwflag ? MIN_LENGTH : 0;
+
+    i = EVP_read_pw_string_min(buf, min_len, num, prompt, rwflag);
+    if (i != 0) {
+        PEMerr(PEM_F_PEM_DEF_CALLBACK, PEM_R_PROBLEMS_GETTING_PASSWORD);
+        memset(buf, 0, (unsigned int)num);
+        return -1;
+    }
+    return strlen(buf);
+}
+
+void PEM_proc_type(char *buf, int type)
+{
+    const char *str;
+    char *p = buf + strlen(buf);
+
+    if (type == PEM_TYPE_ENCRYPTED)
+        str = "ENCRYPTED";
+    else if (type == PEM_TYPE_MIC_CLEAR)
+        str = "MIC-CLEAR";
+    else if (type == PEM_TYPE_MIC_ONLY)
+        str = "MIC-ONLY";
+    else
+        str = "BAD-TYPE";
+
+    BIO_snprintf(p, PEM_BUFSIZE - (size_t)(p - buf), "Proc-Type: 4,%s\n", str);
+}
+
+void PEM_dek_info(char *buf, const char *type, int len, char *str)
+{
+    long i;
+    char *p = buf + strlen(buf);
+    int j = PEM_BUFSIZE - (size_t)(p - buf), n;
+
+    n = BIO_snprintf(p, j, "DEK-Info: %s,", type);
+    if (n > 0) {
+        j -= n;
+        p += n;
+        for (i = 0; i < len; i++) {
+            n = BIO_snprintf(p, j, "%02X", 0xff & str[i]);
+            if (n <= 0)
+                return;
+            j -= n;
+            p += n;
+        }
+        if (j > 1)
+            strcpy(p, "\n");
+    }
+}
+
+#ifndef OPENSSL_NO_STDIO
+void *PEM_ASN1_read(d2i_of_void *d2i, const char *name, FILE *fp, void **x,
+                    pem_password_cb *cb, void *u)
+{
+    BIO *b;
+    void *ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        PEMerr(PEM_F_PEM_ASN1_READ, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = PEM_ASN1_read_bio(d2i, name, b, x, cb, u);
+    BIO_free(b);
+    return ret;
+}
+#endif
+
+static int check_pem(const char *nm, const char *name)
+{
+    /* Normal matching nm and name */
+    if (strcmp(nm, name) == 0)
+        return 1;
+
+    /* Make PEM_STRING_EVP_PKEY match any private key */
+
+    if (strcmp(name, PEM_STRING_EVP_PKEY) == 0) {
+        int slen;
+        const EVP_PKEY_ASN1_METHOD *ameth;
+        if (strcmp(nm, PEM_STRING_PKCS8) == 0)
+            return 1;
+        if (strcmp(nm, PEM_STRING_PKCS8INF) == 0)
+            return 1;
+        slen = pem_check_suffix(nm, "PRIVATE KEY");
+        if (slen > 0) {
+            /*
+             * NB: ENGINE implementations won't contain a deprecated old
+             * private key decode function so don't look for them.
+             */
+            ameth = EVP_PKEY_asn1_find_str(NULL, nm, slen);
+            if (ameth && ameth->old_priv_decode)
+                return 1;
+        }
+        return 0;
+    }
+
+    if (strcmp(name, PEM_STRING_PARAMETERS) == 0) {
+        int slen;
+        const EVP_PKEY_ASN1_METHOD *ameth;
+        slen = pem_check_suffix(nm, "PARAMETERS");
+        if (slen > 0) {
+            ENGINE *e;
+            ameth = EVP_PKEY_asn1_find_str(&e, nm, slen);
+            if (ameth) {
+                int r;
+                if (ameth->param_decode)
+                    r = 1;
+                else
+                    r = 0;
+#ifndef OPENSSL_NO_ENGINE
+                ENGINE_finish(e);
+#endif
+                return r;
+            }
+        }
+        return 0;
+    }
+    /* If reading DH parameters handle X9.42 DH format too */
+    if (strcmp(nm, PEM_STRING_DHXPARAMS) == 0
+        && strcmp(name, PEM_STRING_DHPARAMS) == 0)
+        return 1;
+
+    /* Permit older strings */
+
+    if (strcmp(nm, PEM_STRING_X509_OLD) == 0
+        && strcmp(name, PEM_STRING_X509) == 0)
+        return 1;
+
+    if (strcmp(nm, PEM_STRING_X509_REQ_OLD) == 0
+        && strcmp(name, PEM_STRING_X509_REQ) == 0)
+        return 1;
+
+    /* Allow normal certs to be read as trusted certs */
+    if (strcmp(nm, PEM_STRING_X509) == 0
+        && strcmp(name, PEM_STRING_X509_TRUSTED) == 0)
+        return 1;
+
+    if (strcmp(nm, PEM_STRING_X509_OLD) == 0
+        && strcmp(name, PEM_STRING_X509_TRUSTED) == 0)
+        return 1;
+
+    /* Some CAs use PKCS#7 with CERTIFICATE headers */
+    if (strcmp(nm, PEM_STRING_X509) == 0
+        && strcmp(name, PEM_STRING_PKCS7) == 0)
+        return 1;
+
+    if (strcmp(nm, PEM_STRING_PKCS7_SIGNED) == 0
+        && strcmp(name, PEM_STRING_PKCS7) == 0)
+        return 1;
+
+#ifndef OPENSSL_NO_CMS
+    if (strcmp(nm, PEM_STRING_X509) == 0
+        && strcmp(name, PEM_STRING_CMS) == 0)
+        return 1;
+    /* Allow CMS to be read from PKCS#7 headers */
+    if (strcmp(nm, PEM_STRING_PKCS7) == 0
+        && strcmp(name, PEM_STRING_CMS) == 0)
+        return 1;
+#endif
+
+    return 0;
+}
+
+static void pem_free(void *p, unsigned int flags, size_t num)
+{
+    if (flags & PEM_FLAG_SECURE)
+        OPENSSL_secure_clear_free(p, num);
+    else
+        OPENSSL_free(p);
+}
+
+static void *pem_malloc(int num, unsigned int flags)
+{
+    return (flags & PEM_FLAG_SECURE) ? OPENSSL_secure_malloc(num)
+                                     : OPENSSL_malloc(num);
+}
+
+static int pem_bytes_read_bio_flags(unsigned char **pdata, long *plen,
+                                    char **pnm, const char *name, BIO *bp,
+                                    pem_password_cb *cb, void *u,
+                                    unsigned int flags)
+{
+    EVP_CIPHER_INFO cipher;
+    char *nm = NULL, *header = NULL;
+    unsigned char *data = NULL;
+    long len = 0;
+    int ret = 0;
+
+    do {
+        pem_free(nm, flags, 0);
+        pem_free(header, flags, 0);
+        pem_free(data, flags, len);
+        if (!PEM_read_bio_ex(bp, &nm, &header, &data, &len, flags)) {
+            if (ERR_GET_REASON(ERR_peek_error()) == PEM_R_NO_START_LINE)
+                ERR_add_error_data(2, "Expecting: ", name);
+            return 0;
+        }
+    } while (!check_pem(nm, name));
+    if (!PEM_get_EVP_CIPHER_INFO(header, &cipher))
+        goto err;
+    if (!PEM_do_header(&cipher, data, &len, cb, u))
+        goto err;
+
+    *pdata = data;
+    *plen = len;
+
+    if (pnm != NULL)
+        *pnm = nm;
+
+    ret = 1;
+
+ err:
+    if (!ret || pnm == NULL)
+        pem_free(nm, flags, 0);
+    pem_free(header, flags, 0);
+    if (!ret)
+        pem_free(data, flags, len);
+    return ret;
+}
+
+int PEM_bytes_read_bio(unsigned char **pdata, long *plen, char **pnm,
+                       const char *name, BIO *bp, pem_password_cb *cb,
+                       void *u) {
+    return pem_bytes_read_bio_flags(pdata, plen, pnm, name, bp, cb, u,
+                                    PEM_FLAG_EAY_COMPATIBLE);
+}
+
+int PEM_bytes_read_bio_secmem(unsigned char **pdata, long *plen, char **pnm,
+                              const char *name, BIO *bp, pem_password_cb *cb,
+                              void *u) {
+    return pem_bytes_read_bio_flags(pdata, plen, pnm, name, bp, cb, u,
+                                    PEM_FLAG_SECURE | PEM_FLAG_EAY_COMPATIBLE);
+}
+
+#ifndef OPENSSL_NO_STDIO
+int PEM_ASN1_write(i2d_of_void *i2d, const char *name, FILE *fp,
+                   void *x, const EVP_CIPHER *enc, unsigned char *kstr,
+                   int klen, pem_password_cb *callback, void *u)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        PEMerr(PEM_F_PEM_ASN1_WRITE, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = PEM_ASN1_write_bio(i2d, name, b, x, enc, kstr, klen, callback, u);
+    BIO_free(b);
+    return ret;
+}
+#endif
+
+int PEM_ASN1_write_bio(i2d_of_void *i2d, const char *name, BIO *bp,
+                       void *x, const EVP_CIPHER *enc, unsigned char *kstr,
+                       int klen, pem_password_cb *callback, void *u)
+{
+    EVP_CIPHER_CTX *ctx = NULL;
+    int dsize = 0, i = 0, j = 0, ret = 0;
+    unsigned char *p, *data = NULL;
+    const char *objstr = NULL;
+    char buf[PEM_BUFSIZE];
+    unsigned char key[EVP_MAX_KEY_LENGTH];
+    unsigned char iv[EVP_MAX_IV_LENGTH];
+
+    if (enc != NULL) {
+        objstr = OBJ_nid2sn(EVP_CIPHER_nid(enc));
+        if (objstr == NULL || EVP_CIPHER_iv_length(enc) == 0
+                || EVP_CIPHER_iv_length(enc) > (int)sizeof(iv)
+                   /*
+                    * Check "Proc-Type: 4,Encrypted\nDEK-Info: objstr,hex-iv\n"
+                    * fits into buf
+                    */
+                || (strlen(objstr) + 23 + 2 * EVP_CIPHER_iv_length(enc) + 13)
+                   > sizeof(buf)) {
+            PEMerr(PEM_F_PEM_ASN1_WRITE_BIO, PEM_R_UNSUPPORTED_CIPHER);
+            goto err;
+        }
+    }
+
+    if ((dsize = i2d(x, NULL)) < 0) {
+        PEMerr(PEM_F_PEM_ASN1_WRITE_BIO, ERR_R_ASN1_LIB);
+        dsize = 0;
+        goto err;
+    }
+    /* dsize + 8 bytes are needed */
+    /* actually it needs the cipher block size extra... */
+    data = OPENSSL_malloc((unsigned int)dsize + 20);
+    if (data == NULL) {
+        PEMerr(PEM_F_PEM_ASN1_WRITE_BIO, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    p = data;
+    i = i2d(x, &p);
+
+    if (enc != NULL) {
+        if (kstr == NULL) {
+            if (callback == NULL)
+                klen = PEM_def_callback(buf, PEM_BUFSIZE, 1, u);
+            else
+                klen = (*callback) (buf, PEM_BUFSIZE, 1, u);
+            if (klen <= 0) {
+                PEMerr(PEM_F_PEM_ASN1_WRITE_BIO, PEM_R_READ_KEY);
+                goto err;
+            }
+#ifdef CHARSET_EBCDIC
+            /* Convert the pass phrase from EBCDIC */
+            ebcdic2ascii(buf, buf, klen);
+#endif
+            kstr = (unsigned char *)buf;
+        }
+        if (RAND_bytes(iv, EVP_CIPHER_iv_length(enc)) <= 0) /* Generate a salt */
+            goto err;
+        /*
+         * The 'iv' is used as the iv and as a salt.  It is NOT taken from
+         * the BytesToKey function
+         */
+        if (!EVP_BytesToKey(enc, EVP_md5(), iv, kstr, klen, 1, key, NULL))
+            goto err;
+
+        if (kstr == (unsigned char *)buf)
+            OPENSSL_cleanse(buf, PEM_BUFSIZE);
+
+        buf[0] = '\0';
+        PEM_proc_type(buf, PEM_TYPE_ENCRYPTED);
+        PEM_dek_info(buf, objstr, EVP_CIPHER_iv_length(enc), (char *)iv);
+        /* k=strlen(buf); */
+
+        ret = 1;
+        if ((ctx = EVP_CIPHER_CTX_new()) == NULL
+            || !EVP_EncryptInit_ex(ctx, enc, NULL, key, iv)
+            || !EVP_EncryptUpdate(ctx, data, &j, data, i)
+            || !EVP_EncryptFinal_ex(ctx, &(data[j]), &i))
+            ret = 0;
+        if (ret == 0)
+            goto err;
+        i += j;
+    } else {
+        ret = 1;
+        buf[0] = '\0';
+    }
+    i = PEM_write_bio(bp, name, buf, data, i);
+    if (i <= 0)
+        ret = 0;
+ err:
+    OPENSSL_cleanse(key, sizeof(key));
+    OPENSSL_cleanse(iv, sizeof(iv));
+    EVP_CIPHER_CTX_free(ctx);
+    OPENSSL_cleanse(buf, PEM_BUFSIZE);
+    OPENSSL_clear_free(data, (unsigned int)dsize);
+    return ret;
+}
+
+int PEM_do_header(EVP_CIPHER_INFO *cipher, unsigned char *data, long *plen,
+                  pem_password_cb *callback, void *u)
+{
+    int ok;
+    int keylen;
+    long len = *plen;
+    int ilen = (int) len;       /* EVP_DecryptUpdate etc. take int lengths */
+    EVP_CIPHER_CTX *ctx;
+    unsigned char key[EVP_MAX_KEY_LENGTH];
+    char buf[PEM_BUFSIZE];
+
+#if LONG_MAX > INT_MAX
+    /* Check that we did not truncate the length */
+    if (len > INT_MAX) {
+        PEMerr(PEM_F_PEM_DO_HEADER, PEM_R_HEADER_TOO_LONG);
+        return 0;
+    }
+#endif
+
+    if (cipher->cipher == NULL)
+        return 1;
+    if (callback == NULL)
+        keylen = PEM_def_callback(buf, PEM_BUFSIZE, 0, u);
+    else
+        keylen = callback(buf, PEM_BUFSIZE, 0, u);
+    if (keylen < 0) {
+        PEMerr(PEM_F_PEM_DO_HEADER, PEM_R_BAD_PASSWORD_READ);
+        return 0;
+    }
+#ifdef CHARSET_EBCDIC
+    /* Convert the pass phrase from EBCDIC */
+    ebcdic2ascii(buf, buf, keylen);
+#endif
+
+    if (!EVP_BytesToKey(cipher->cipher, EVP_md5(), &(cipher->iv[0]),
+                        (unsigned char *)buf, keylen, 1, key, NULL))
+        return 0;
+
+    ctx = EVP_CIPHER_CTX_new();
+    if (ctx == NULL)
+        return 0;
+
+    ok = EVP_DecryptInit_ex(ctx, cipher->cipher, NULL, key, &(cipher->iv[0]));
+    if (ok)
+        ok = EVP_DecryptUpdate(ctx, data, &ilen, data, ilen);
+    if (ok) {
+        /* Squirrel away the length of data decrypted so far. */
+        *plen = ilen;
+        ok = EVP_DecryptFinal_ex(ctx, &(data[ilen]), &ilen);
+    }
+    if (ok)
+        *plen += ilen;
+    else
+        PEMerr(PEM_F_PEM_DO_HEADER, PEM_R_BAD_DECRYPT);
+
+    EVP_CIPHER_CTX_free(ctx);
+    OPENSSL_cleanse((char *)buf, sizeof(buf));
+    OPENSSL_cleanse((char *)key, sizeof(key));
+    return ok;
+}
+
+/*
+ * This implements a very limited PEM header parser that does not support the
+ * full grammar of rfc1421.  In particular, folded headers are not supported,
+ * nor is additional whitespace.
+ *
+ * A robust implementation would make use of a library that turns the headers
+ * into a BIO from which one folded line is read at a time, and is then split
+ * into a header label and content.  We would then parse the content of the
+ * headers we care about.  This is overkill for just this limited use-case, but
+ * presumably we also parse rfc822-style headers for S/MIME, so a common
+ * abstraction might well be more generally useful.
+ */
+int PEM_get_EVP_CIPHER_INFO(char *header, EVP_CIPHER_INFO *cipher)
+{
+    static const char ProcType[] = "Proc-Type:";
+    static const char ENCRYPTED[] = "ENCRYPTED";
+    static const char DEKInfo[] = "DEK-Info:";
+    const EVP_CIPHER *enc = NULL;
+    int ivlen;
+    char *dekinfostart, c;
+
+    cipher->cipher = NULL;
+    memset(cipher->iv, 0, sizeof(cipher->iv));
+    if ((header == NULL) || (*header == '\0') || (*header == '\n'))
+        return 1;
+
+    if (strncmp(header, ProcType, sizeof(ProcType)-1) != 0) {
+        PEMerr(PEM_F_PEM_GET_EVP_CIPHER_INFO, PEM_R_NOT_PROC_TYPE);
+        return 0;
+    }
+    header += sizeof(ProcType)-1;
+    header += strspn(header, " \t");
+
+    if (*header++ != '4' || *header++ != ',')
+        return 0;
+    header += strspn(header, " \t");
+
+    /* We expect "ENCRYPTED" followed by optional white-space + line break */
+    if (strncmp(header, ENCRYPTED, sizeof(ENCRYPTED)-1) != 0 ||
+        strspn(header+sizeof(ENCRYPTED)-1, " \t\r\n") == 0) {
+        PEMerr(PEM_F_PEM_GET_EVP_CIPHER_INFO, PEM_R_NOT_ENCRYPTED);
+        return 0;
+    }
+    header += sizeof(ENCRYPTED)-1;
+    header += strspn(header, " \t\r");
+    if (*header++ != '\n') {
+        PEMerr(PEM_F_PEM_GET_EVP_CIPHER_INFO, PEM_R_SHORT_HEADER);
+        return 0;
+    }
+
+    /*-
+     * https://tools.ietf.org/html/rfc1421#section-4.6.1.3
+     * We expect "DEK-Info: algo[,hex-parameters]"
+     */
+    if (strncmp(header, DEKInfo, sizeof(DEKInfo)-1) != 0) {
+        PEMerr(PEM_F_PEM_GET_EVP_CIPHER_INFO, PEM_R_NOT_DEK_INFO);
+        return 0;
+    }
+    header += sizeof(DEKInfo)-1;
+    header += strspn(header, " \t");
+
+    /*
+     * DEK-INFO is a comma-separated combination of algorithm name and optional
+     * parameters.
+     */
+    dekinfostart = header;
+    header += strcspn(header, " \t,");
+    c = *header;
+    *header = '\0';
+    cipher->cipher = enc = EVP_get_cipherbyname(dekinfostart);
+    *header = c;
+    header += strspn(header, " \t");
+
+    if (enc == NULL) {
+        PEMerr(PEM_F_PEM_GET_EVP_CIPHER_INFO, PEM_R_UNSUPPORTED_ENCRYPTION);
+        return 0;
+    }
+    ivlen = EVP_CIPHER_iv_length(enc);
+    if (ivlen > 0 && *header++ != ',') {
+        PEMerr(PEM_F_PEM_GET_EVP_CIPHER_INFO, PEM_R_MISSING_DEK_IV);
+        return 0;
+    } else if (ivlen == 0 && *header == ',') {
+        PEMerr(PEM_F_PEM_GET_EVP_CIPHER_INFO, PEM_R_UNEXPECTED_DEK_IV);
+        return 0;
+    }
+
+    if (!load_iv(&header, cipher->iv, EVP_CIPHER_iv_length(enc)))
+        return 0;
+
+    return 1;
+}
+
+static int load_iv(char **fromp, unsigned char *to, int num)
+{
+    int v, i;
+    char *from;
+
+    from = *fromp;
+    for (i = 0; i < num; i++)
+        to[i] = 0;
+    num *= 2;
+    for (i = 0; i < num; i++) {
+        v = OPENSSL_hexchar2int(*from);
+        if (v < 0) {
+            PEMerr(PEM_F_LOAD_IV, PEM_R_BAD_IV_CHARS);
+            return 0;
+        }
+        from++;
+        to[i / 2] |= v << (long)((!(i & 1)) * 4);
+    }
+
+    *fromp = from;
+    return 1;
+}
+
+#ifndef OPENSSL_NO_STDIO
+int PEM_write(FILE *fp, const char *name, const char *header,
+              const unsigned char *data, long len)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        PEMerr(PEM_F_PEM_WRITE, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = PEM_write_bio(b, name, header, data, len);
+    BIO_free(b);
+    return ret;
+}
+#endif
+
+int PEM_write_bio(BIO *bp, const char *name, const char *header,
+                  const unsigned char *data, long len)
+{
+    int nlen, n, i, j, outl;
+    unsigned char *buf = NULL;
+    EVP_ENCODE_CTX *ctx = EVP_ENCODE_CTX_new();
+    int reason = ERR_R_BUF_LIB;
+    int retval = 0;
+
+    if (ctx == NULL) {
+        reason = ERR_R_MALLOC_FAILURE;
+        goto err;
+    }
+
+    EVP_EncodeInit(ctx);
+    nlen = strlen(name);
+
+    if ((BIO_write(bp, "-----BEGIN ", 11) != 11) ||
+        (BIO_write(bp, name, nlen) != nlen) ||
+        (BIO_write(bp, "-----\n", 6) != 6))
+        goto err;
+
+    i = strlen(header);
+    if (i > 0) {
+        if ((BIO_write(bp, header, i) != i) || (BIO_write(bp, "\n", 1) != 1))
+            goto err;
+    }
+
+    buf = OPENSSL_malloc(PEM_BUFSIZE * 8);
+    if (buf == NULL) {
+        reason = ERR_R_MALLOC_FAILURE;
+        goto err;
+    }
+
+    i = j = 0;
+    while (len > 0) {
+        n = (int)((len > (PEM_BUFSIZE * 5)) ? (PEM_BUFSIZE * 5) : len);
+        if (!EVP_EncodeUpdate(ctx, buf, &outl, &(data[j]), n))
+            goto err;
+        if ((outl) && (BIO_write(bp, (char *)buf, outl) != outl))
+            goto err;
+        i += outl;
+        len -= n;
+        j += n;
+    }
+    EVP_EncodeFinal(ctx, buf, &outl);
+    if ((outl > 0) && (BIO_write(bp, (char *)buf, outl) != outl))
+        goto err;
+    if ((BIO_write(bp, "-----END ", 9) != 9) ||
+        (BIO_write(bp, name, nlen) != nlen) ||
+        (BIO_write(bp, "-----\n", 6) != 6))
+        goto err;
+    retval = i + outl;
+
+ err:
+    if (retval == 0)
+        PEMerr(PEM_F_PEM_WRITE_BIO, reason);
+    EVP_ENCODE_CTX_free(ctx);
+    OPENSSL_clear_free(buf, PEM_BUFSIZE * 8);
+    return retval;
+}
+
+#ifndef OPENSSL_NO_STDIO
+int PEM_read(FILE *fp, char **name, char **header, unsigned char **data,
+             long *len)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        PEMerr(PEM_F_PEM_READ, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = PEM_read_bio(b, name, header, data, len);
+    BIO_free(b);
+    return ret;
+}
+#endif
+
+/* Some helpers for PEM_read_bio_ex(). */
+static int sanitize_line(char *linebuf, int len, unsigned int flags)
+{
+    int i;
+
+    if (flags & PEM_FLAG_EAY_COMPATIBLE) {
+        /* Strip trailing whitespace */
+        while ((len >= 0) && (linebuf[len] <= ' '))
+            len--;
+        /* Go back to whitespace before applying uniform line ending. */
+        len++;
+    } else if (flags & PEM_FLAG_ONLY_B64) {
+        for (i = 0; i < len; ++i) {
+            if (!ossl_isbase64(linebuf[i]) || linebuf[i] == '\n'
+                || linebuf[i] == '\r')
+                break;
+        }
+        len = i;
+    } else {
+        /* EVP_DecodeBlock strips leading and trailing whitespace, so just strip
+         * control characters in-place and let everything through. */
+        for (i = 0; i < len; ++i) {
+            if (linebuf[i] == '\n' || linebuf[i] == '\r')
+                break;
+            if (ossl_iscntrl(linebuf[i]))
+                linebuf[i] = ' ';
+        }
+        len = i;
+    }
+    /* The caller allocated LINESIZE+1, so this is safe. */
+    linebuf[len++] = '\n';
+    linebuf[len] = '\0';
+    return len;
+}
+
+#define LINESIZE 255
+/* Note trailing spaces for begin and end. */
+static const char beginstr[] = "-----BEGIN ";
+static const char endstr[] = "-----END ";
+static const char tailstr[] = "-----\n";
+#define BEGINLEN ((int)(sizeof(beginstr) - 1))
+#define ENDLEN ((int)(sizeof(endstr) - 1))
+#define TAILLEN ((int)(sizeof(tailstr) - 1))
+static int get_name(BIO *bp, char **name, unsigned int flags)
+{
+    char *linebuf;
+    int ret = 0;
+    int len;
+
+    /*
+     * Need to hold trailing NUL (accounted for by BIO_gets() and the newline
+     * that will be added by sanitize_line() (the extra '1').
+     */
+    linebuf = pem_malloc(LINESIZE + 1, flags);
+    if (linebuf == NULL) {
+        PEMerr(PEM_F_GET_NAME, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    do {
+        len = BIO_gets(bp, linebuf, LINESIZE);
+
+        if (len <= 0) {
+            PEMerr(PEM_F_GET_NAME, PEM_R_NO_START_LINE);
+            goto err;
+        }
+
+        /* Strip trailing garbage and standardize ending. */
+        len = sanitize_line(linebuf, len, flags & ~PEM_FLAG_ONLY_B64);
+
+        /* Allow leading empty or non-matching lines. */
+    } while (strncmp(linebuf, beginstr, BEGINLEN) != 0
+             || len < TAILLEN
+             || strncmp(linebuf + len - TAILLEN, tailstr, TAILLEN) != 0);
+    linebuf[len - TAILLEN] = '\0';
+    len = len - BEGINLEN - TAILLEN + 1;
+    *name = pem_malloc(len, flags);
+    if (*name == NULL) {
+        PEMerr(PEM_F_GET_NAME, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    memcpy(*name, linebuf + BEGINLEN, len);
+    ret = 1;
+
+err:
+    pem_free(linebuf, flags, LINESIZE + 1);
+    return ret;
+}
+
+/* Keep track of how much of a header we've seen. */
+enum header_status {
+    MAYBE_HEADER,
+    IN_HEADER,
+    POST_HEADER
+};
+
+/**
+ * Extract the optional PEM header, with details on the type of content and
+ * any encryption used on the contents, and the bulk of the data from the bio.
+ * The end of the header is marked by a blank line; if the end-of-input marker
+ * is reached prior to a blank line, there is no header.
+ *
+ * The header and data arguments are BIO** since we may have to swap them
+ * if there is no header, for efficiency.
+ *
+ * We need the name of the PEM-encoded type to verify the end string.
+ */
+static int get_header_and_data(BIO *bp, BIO **header, BIO **data, char *name,
+                               unsigned int flags)
+{
+    BIO *tmp = *header;
+    char *linebuf, *p;
+    int len, line, ret = 0, end = 0;
+    /* 0 if not seen (yet), 1 if reading header, 2 if finished header */
+    enum header_status got_header = MAYBE_HEADER;
+    unsigned int flags_mask;
+    size_t namelen;
+
+    /* Need to hold trailing NUL (accounted for by BIO_gets() and the newline
+     * that will be added by sanitize_line() (the extra '1'). */
+    linebuf = pem_malloc(LINESIZE + 1, flags);
+    if (linebuf == NULL) {
+        PEMerr(PEM_F_GET_HEADER_AND_DATA, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    for (line = 0; ; line++) {
+        flags_mask = ~0u;
+        len = BIO_gets(bp, linebuf, LINESIZE);
+        if (len <= 0) {
+            PEMerr(PEM_F_GET_HEADER_AND_DATA, PEM_R_SHORT_HEADER);
+            goto err;
+        }
+
+        if (got_header == MAYBE_HEADER) {
+            if (memchr(linebuf, ':', len) != NULL)
+                got_header = IN_HEADER;
+        }
+        if (!strncmp(linebuf, endstr, ENDLEN) || got_header == IN_HEADER)
+            flags_mask &= ~PEM_FLAG_ONLY_B64;
+        len = sanitize_line(linebuf, len, flags & flags_mask);
+
+        /* Check for end of header. */
+        if (linebuf[0] == '\n') {
+            if (got_header == POST_HEADER) {
+                /* Another blank line is an error. */
+                PEMerr(PEM_F_GET_HEADER_AND_DATA, PEM_R_BAD_END_LINE);
+                goto err;
+            }
+            got_header = POST_HEADER;
+            tmp = *data;
+            continue;
+        }
+
+        /* Check for end of stream (which means there is no header). */
+        if (strncmp(linebuf, endstr, ENDLEN) == 0) {
+            p = linebuf + ENDLEN;
+            namelen = strlen(name);
+            if (strncmp(p, name, namelen) != 0 ||
+                strncmp(p + namelen, tailstr, TAILLEN) != 0) {
+                PEMerr(PEM_F_GET_HEADER_AND_DATA, PEM_R_BAD_END_LINE);
+                goto err;
+            }
+            if (got_header == MAYBE_HEADER) {
+                *header = *data;
+                *data = tmp;
+            }
+            break;
+        } else if (end) {
+            /* Malformed input; short line not at end of data. */
+            PEMerr(PEM_F_GET_HEADER_AND_DATA, PEM_R_BAD_END_LINE);
+            goto err;
+        }
+        /*
+         * Else, a line of text -- could be header or data; we don't
+         * know yet.  Just pass it through.
+         */
+        if (BIO_puts(tmp, linebuf) < 0)
+            goto err;
+        /*
+         * Only encrypted files need the line length check applied.
+         */
+        if (got_header == POST_HEADER) {
+            /* 65 includes the trailing newline */
+            if (len > 65)
+                goto err;
+            if (len < 65)
+                end = 1;
+        }
+    }
+
+    ret = 1;
+err:
+    pem_free(linebuf, flags, LINESIZE + 1);
+    return ret;
+}
+
+/**
+ * Read in PEM-formatted data from the given BIO.
+ *
+ * By nature of the PEM format, all content must be printable ASCII (except
+ * for line endings).  Other characters are malformed input and will be rejected.
+ */
+int PEM_read_bio_ex(BIO *bp, char **name_out, char **header,
+                    unsigned char **data, long *len_out, unsigned int flags)
+{
+    EVP_ENCODE_CTX *ctx = EVP_ENCODE_CTX_new();
+    const BIO_METHOD *bmeth;
+    BIO *headerB = NULL, *dataB = NULL;
+    char *name = NULL;
+    int len, taillen, headerlen, ret = 0;
+    BUF_MEM * buf_mem;
+
+    if (ctx == NULL) {
+        PEMerr(PEM_F_PEM_READ_BIO_EX, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    *len_out = 0;
+    *name_out = *header = NULL;
+    *data = NULL;
+    if ((flags & PEM_FLAG_EAY_COMPATIBLE) && (flags & PEM_FLAG_ONLY_B64)) {
+        /* These two are mutually incompatible; bail out. */
+        PEMerr(PEM_F_PEM_READ_BIO_EX, ERR_R_PASSED_INVALID_ARGUMENT);
+        goto end;
+    }
+    bmeth = (flags & PEM_FLAG_SECURE) ? BIO_s_secmem() : BIO_s_mem();
+
+    headerB = BIO_new(bmeth);
+    dataB = BIO_new(bmeth);
+    if (headerB == NULL || dataB == NULL) {
+        PEMerr(PEM_F_PEM_READ_BIO_EX, ERR_R_MALLOC_FAILURE);
+        goto end;
+    }
+
+    if (!get_name(bp, &name, flags))
+        goto end;
+    if (!get_header_and_data(bp, &headerB, &dataB, name, flags))
+        goto end;
+
+    EVP_DecodeInit(ctx);
+    BIO_get_mem_ptr(dataB, &buf_mem);
+    len = buf_mem->length;
+    if (EVP_DecodeUpdate(ctx, (unsigned char*)buf_mem->data, &len,
+                         (unsigned char*)buf_mem->data, len) < 0
+            || EVP_DecodeFinal(ctx, (unsigned char*)&(buf_mem->data[len]),
+                               &taillen) < 0) {
+        PEMerr(PEM_F_PEM_READ_BIO_EX, PEM_R_BAD_BASE64_DECODE);
+        goto end;
+    }
+    len += taillen;
+    buf_mem->length = len;
+
+    /* There was no data in the PEM file; avoid malloc(0). */
+    if (len == 0)
+        goto end;
+    headerlen = BIO_get_mem_data(headerB, NULL);
+    *header = pem_malloc(headerlen + 1, flags);
+    *data = pem_malloc(len, flags);
+    if (*header == NULL || *data == NULL) {
+        pem_free(*header, flags, 0);
+        pem_free(*data, flags, 0);
+        goto end;
+    }
+    BIO_read(headerB, *header, headerlen);
+    (*header)[headerlen] = '\0';
+    BIO_read(dataB, *data, len);
+    *len_out = len;
+    *name_out = name;
+    name = NULL;
+    ret = 1;
+
+end:
+    EVP_ENCODE_CTX_free(ctx);
+    pem_free(name, flags, 0);
+    BIO_free(headerB);
+    BIO_free(dataB);
+    return ret;
+}
+
+int PEM_read_bio(BIO *bp, char **name, char **header, unsigned char **data,
+                 long *len)
+{
+    return PEM_read_bio_ex(bp, name, header, data, len, PEM_FLAG_EAY_COMPATIBLE);
+}
+
+/*
+ * Check pem string and return prefix length. If for example the pem_str ==
+ * "RSA PRIVATE KEY" and suffix = "PRIVATE KEY" the return value is 3 for the
+ * string "RSA".
+ */
+
+int pem_check_suffix(const char *pem_str, const char *suffix)
+{
+    int pem_len = strlen(pem_str);
+    int suffix_len = strlen(suffix);
+    const char *p;
+    if (suffix_len + 1 >= pem_len)
+        return 0;
+    p = pem_str + pem_len - suffix_len;
+    if (strcmp(p, suffix))
+        return 0;
+    p--;
+    if (*p != ' ')
+        return 0;
+    return p - pem_str;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_oth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_oth.c
new file mode 100644
index 000000000..566205331
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_oth.c
@@ -0,0 +1,36 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/pem.h>
+
+/* Handle 'other' PEMs: not private keys */
+
+void *PEM_ASN1_read_bio(d2i_of_void *d2i, const char *name, BIO *bp, void **x,
+                        pem_password_cb *cb, void *u)
+{
+    const unsigned char *p = NULL;
+    unsigned char *data = NULL;
+    long len;
+    char *ret = NULL;
+
+    if (!PEM_bytes_read_bio(&data, &len, NULL, name, bp, cb, u))
+        return NULL;
+    p = data;
+    ret = d2i(x, &p, len);
+    if (ret == NULL)
+        PEMerr(PEM_F_PEM_ASN1_READ_BIO, ERR_R_ASN1_LIB);
+    OPENSSL_free(data);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_pk8.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_pk8.c
new file mode 100644
index 000000000..ab6c4c6bd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_pk8.c
@@ -0,0 +1,214 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/pkcs12.h>
+#include <openssl/pem.h>
+
+static int do_pk8pkey(BIO *bp, EVP_PKEY *x, int isder,
+                      int nid, const EVP_CIPHER *enc,
+                      char *kstr, int klen, pem_password_cb *cb, void *u);
+
+#ifndef OPENSSL_NO_STDIO
+static int do_pk8pkey_fp(FILE *bp, EVP_PKEY *x, int isder,
+                         int nid, const EVP_CIPHER *enc,
+                         char *kstr, int klen, pem_password_cb *cb, void *u);
+#endif
+/*
+ * These functions write a private key in PKCS#8 format: it is a "drop in"
+ * replacement for PEM_write_bio_PrivateKey() and friends. As usual if 'enc'
+ * is NULL then it uses the unencrypted private key form. The 'nid' versions
+ * uses PKCS#5 v1.5 PBE algorithms whereas the others use PKCS#5 v2.0.
+ */
+
+int PEM_write_bio_PKCS8PrivateKey_nid(BIO *bp, EVP_PKEY *x, int nid,
+                                      char *kstr, int klen,
+                                      pem_password_cb *cb, void *u)
+{
+    return do_pk8pkey(bp, x, 0, nid, NULL, kstr, klen, cb, u);
+}
+
+int PEM_write_bio_PKCS8PrivateKey(BIO *bp, EVP_PKEY *x, const EVP_CIPHER *enc,
+                                  char *kstr, int klen,
+                                  pem_password_cb *cb, void *u)
+{
+    return do_pk8pkey(bp, x, 0, -1, enc, kstr, klen, cb, u);
+}
+
+int i2d_PKCS8PrivateKey_bio(BIO *bp, EVP_PKEY *x, const EVP_CIPHER *enc,
+                            char *kstr, int klen,
+                            pem_password_cb *cb, void *u)
+{
+    return do_pk8pkey(bp, x, 1, -1, enc, kstr, klen, cb, u);
+}
+
+int i2d_PKCS8PrivateKey_nid_bio(BIO *bp, EVP_PKEY *x, int nid,
+                                char *kstr, int klen,
+                                pem_password_cb *cb, void *u)
+{
+    return do_pk8pkey(bp, x, 1, nid, NULL, kstr, klen, cb, u);
+}
+
+static int do_pk8pkey(BIO *bp, EVP_PKEY *x, int isder, int nid,
+                      const EVP_CIPHER *enc, char *kstr, int klen,
+                      pem_password_cb *cb, void *u)
+{
+    X509_SIG *p8;
+    PKCS8_PRIV_KEY_INFO *p8inf;
+    char buf[PEM_BUFSIZE];
+    int ret;
+
+    if ((p8inf = EVP_PKEY2PKCS8(x)) == NULL) {
+        PEMerr(PEM_F_DO_PK8PKEY, PEM_R_ERROR_CONVERTING_PRIVATE_KEY);
+        return 0;
+    }
+    if (enc || (nid != -1)) {
+        if (!kstr) {
+            if (!cb)
+                klen = PEM_def_callback(buf, PEM_BUFSIZE, 1, u);
+            else
+                klen = cb(buf, PEM_BUFSIZE, 1, u);
+            if (klen <= 0) {
+                PEMerr(PEM_F_DO_PK8PKEY, PEM_R_READ_KEY);
+                PKCS8_PRIV_KEY_INFO_free(p8inf);
+                return 0;
+            }
+
+            kstr = buf;
+        }
+        p8 = PKCS8_encrypt(nid, enc, kstr, klen, NULL, 0, 0, p8inf);
+        if (kstr == buf)
+            OPENSSL_cleanse(buf, klen);
+        PKCS8_PRIV_KEY_INFO_free(p8inf);
+        if (p8 == NULL)
+            return 0;
+        if (isder)
+            ret = i2d_PKCS8_bio(bp, p8);
+        else
+            ret = PEM_write_bio_PKCS8(bp, p8);
+        X509_SIG_free(p8);
+        return ret;
+    } else {
+        if (isder)
+            ret = i2d_PKCS8_PRIV_KEY_INFO_bio(bp, p8inf);
+        else
+            ret = PEM_write_bio_PKCS8_PRIV_KEY_INFO(bp, p8inf);
+        PKCS8_PRIV_KEY_INFO_free(p8inf);
+        return ret;
+    }
+}
+
+EVP_PKEY *d2i_PKCS8PrivateKey_bio(BIO *bp, EVP_PKEY **x, pem_password_cb *cb,
+                                  void *u)
+{
+    PKCS8_PRIV_KEY_INFO *p8inf = NULL;
+    X509_SIG *p8 = NULL;
+    int klen;
+    EVP_PKEY *ret;
+    char psbuf[PEM_BUFSIZE];
+    p8 = d2i_PKCS8_bio(bp, NULL);
+    if (!p8)
+        return NULL;
+    if (cb)
+        klen = cb(psbuf, PEM_BUFSIZE, 0, u);
+    else
+        klen = PEM_def_callback(psbuf, PEM_BUFSIZE, 0, u);
+    if (klen < 0) {
+        PEMerr(PEM_F_D2I_PKCS8PRIVATEKEY_BIO, PEM_R_BAD_PASSWORD_READ);
+        X509_SIG_free(p8);
+        return NULL;
+    }
+    p8inf = PKCS8_decrypt(p8, psbuf, klen);
+    X509_SIG_free(p8);
+    OPENSSL_cleanse(psbuf, klen);
+    if (!p8inf)
+        return NULL;
+    ret = EVP_PKCS82PKEY(p8inf);
+    PKCS8_PRIV_KEY_INFO_free(p8inf);
+    if (!ret)
+        return NULL;
+    if (x) {
+        EVP_PKEY_free(*x);
+        *x = ret;
+    }
+    return ret;
+}
+
+#ifndef OPENSSL_NO_STDIO
+
+int i2d_PKCS8PrivateKey_fp(FILE *fp, EVP_PKEY *x, const EVP_CIPHER *enc,
+                           char *kstr, int klen, pem_password_cb *cb, void *u)
+{
+    return do_pk8pkey_fp(fp, x, 1, -1, enc, kstr, klen, cb, u);
+}
+
+int i2d_PKCS8PrivateKey_nid_fp(FILE *fp, EVP_PKEY *x, int nid,
+                               char *kstr, int klen,
+                               pem_password_cb *cb, void *u)
+{
+    return do_pk8pkey_fp(fp, x, 1, nid, NULL, kstr, klen, cb, u);
+}
+
+int PEM_write_PKCS8PrivateKey_nid(FILE *fp, EVP_PKEY *x, int nid,
+                                  char *kstr, int klen,
+                                  pem_password_cb *cb, void *u)
+{
+    return do_pk8pkey_fp(fp, x, 0, nid, NULL, kstr, klen, cb, u);
+}
+
+int PEM_write_PKCS8PrivateKey(FILE *fp, EVP_PKEY *x, const EVP_CIPHER *enc,
+                              char *kstr, int klen, pem_password_cb *cb,
+                              void *u)
+{
+    return do_pk8pkey_fp(fp, x, 0, -1, enc, kstr, klen, cb, u);
+}
+
+static int do_pk8pkey_fp(FILE *fp, EVP_PKEY *x, int isder, int nid,
+                         const EVP_CIPHER *enc, char *kstr, int klen,
+                         pem_password_cb *cb, void *u)
+{
+    BIO *bp;
+    int ret;
+
+    if ((bp = BIO_new_fp(fp, BIO_NOCLOSE)) == NULL) {
+        PEMerr(PEM_F_DO_PK8PKEY_FP, ERR_R_BUF_LIB);
+        return 0;
+    }
+    ret = do_pk8pkey(bp, x, isder, nid, enc, kstr, klen, cb, u);
+    BIO_free(bp);
+    return ret;
+}
+
+EVP_PKEY *d2i_PKCS8PrivateKey_fp(FILE *fp, EVP_PKEY **x, pem_password_cb *cb,
+                                 void *u)
+{
+    BIO *bp;
+    EVP_PKEY *ret;
+
+    if ((bp = BIO_new_fp(fp, BIO_NOCLOSE)) == NULL) {
+        PEMerr(PEM_F_D2I_PKCS8PRIVATEKEY_FP, ERR_R_BUF_LIB);
+        return NULL;
+    }
+    ret = d2i_PKCS8PrivateKey_bio(bp, x, cb, u);
+    BIO_free(bp);
+    return ret;
+}
+
+#endif
+
+IMPLEMENT_PEM_rw(PKCS8, X509_SIG, PEM_STRING_PKCS8, X509_SIG)
+
+
+IMPLEMENT_PEM_rw(PKCS8_PRIV_KEY_INFO, PKCS8_PRIV_KEY_INFO, PEM_STRING_PKCS8INF,
+             PKCS8_PRIV_KEY_INFO)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_pkey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_pkey.c
new file mode 100644
index 000000000..aa032d2b1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_pkey.c
@@ -0,0 +1,245 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/pkcs12.h>
+#include <openssl/pem.h>
+#include <openssl/engine.h>
+#include <openssl/dh.h>
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+
+int pem_check_suffix(const char *pem_str, const char *suffix);
+
+EVP_PKEY *PEM_read_bio_PrivateKey(BIO *bp, EVP_PKEY **x, pem_password_cb *cb,
+                                  void *u)
+{
+    char *nm = NULL;
+    const unsigned char *p = NULL;
+    unsigned char *data = NULL;
+    long len;
+    int slen;
+    EVP_PKEY *ret = NULL;
+
+    if (!PEM_bytes_read_bio_secmem(&data, &len, &nm, PEM_STRING_EVP_PKEY, bp,
+                                   cb, u))
+        return NULL;
+    p = data;
+
+    if (strcmp(nm, PEM_STRING_PKCS8INF) == 0) {
+        PKCS8_PRIV_KEY_INFO *p8inf;
+        p8inf = d2i_PKCS8_PRIV_KEY_INFO(NULL, &p, len);
+        if (!p8inf)
+            goto p8err;
+        ret = EVP_PKCS82PKEY(p8inf);
+        if (x) {
+            EVP_PKEY_free((EVP_PKEY *)*x);
+            *x = ret;
+        }
+        PKCS8_PRIV_KEY_INFO_free(p8inf);
+    } else if (strcmp(nm, PEM_STRING_PKCS8) == 0) {
+        PKCS8_PRIV_KEY_INFO *p8inf;
+        X509_SIG *p8;
+        int klen;
+        char psbuf[PEM_BUFSIZE];
+        p8 = d2i_X509_SIG(NULL, &p, len);
+        if (!p8)
+            goto p8err;
+        if (cb)
+            klen = cb(psbuf, PEM_BUFSIZE, 0, u);
+        else
+            klen = PEM_def_callback(psbuf, PEM_BUFSIZE, 0, u);
+        if (klen < 0) {
+            PEMerr(PEM_F_PEM_READ_BIO_PRIVATEKEY, PEM_R_BAD_PASSWORD_READ);
+            X509_SIG_free(p8);
+            goto err;
+        }
+        p8inf = PKCS8_decrypt(p8, psbuf, klen);
+        X509_SIG_free(p8);
+        OPENSSL_cleanse(psbuf, klen);
+        if (!p8inf)
+            goto p8err;
+        ret = EVP_PKCS82PKEY(p8inf);
+        if (x) {
+            EVP_PKEY_free((EVP_PKEY *)*x);
+            *x = ret;
+        }
+        PKCS8_PRIV_KEY_INFO_free(p8inf);
+    } else if ((slen = pem_check_suffix(nm, "PRIVATE KEY")) > 0) {
+        const EVP_PKEY_ASN1_METHOD *ameth;
+        ameth = EVP_PKEY_asn1_find_str(NULL, nm, slen);
+        if (!ameth || !ameth->old_priv_decode)
+            goto p8err;
+        ret = d2i_PrivateKey(ameth->pkey_id, x, &p, len);
+    }
+ p8err:
+    if (ret == NULL)
+        PEMerr(PEM_F_PEM_READ_BIO_PRIVATEKEY, ERR_R_ASN1_LIB);
+ err:
+    OPENSSL_secure_free(nm);
+    OPENSSL_secure_clear_free(data, len);
+    return ret;
+}
+
+int PEM_write_bio_PrivateKey(BIO *bp, EVP_PKEY *x, const EVP_CIPHER *enc,
+                             unsigned char *kstr, int klen,
+                             pem_password_cb *cb, void *u)
+{
+    if (x->ameth == NULL || x->ameth->priv_encode != NULL)
+        return PEM_write_bio_PKCS8PrivateKey(bp, x, enc,
+                                             (char *)kstr, klen, cb, u);
+    return PEM_write_bio_PrivateKey_traditional(bp, x, enc, kstr, klen, cb, u);
+}
+
+int PEM_write_bio_PrivateKey_traditional(BIO *bp, EVP_PKEY *x,
+                                         const EVP_CIPHER *enc,
+                                         unsigned char *kstr, int klen,
+                                         pem_password_cb *cb, void *u)
+{
+    char pem_str[80];
+    BIO_snprintf(pem_str, 80, "%s PRIVATE KEY", x->ameth->pem_str);
+    return PEM_ASN1_write_bio((i2d_of_void *)i2d_PrivateKey,
+                              pem_str, bp, x, enc, kstr, klen, cb, u);
+}
+
+EVP_PKEY *PEM_read_bio_Parameters(BIO *bp, EVP_PKEY **x)
+{
+    char *nm = NULL;
+    const unsigned char *p = NULL;
+    unsigned char *data = NULL;
+    long len;
+    int slen;
+    EVP_PKEY *ret = NULL;
+
+    if (!PEM_bytes_read_bio(&data, &len, &nm, PEM_STRING_PARAMETERS,
+                            bp, 0, NULL))
+        return NULL;
+    p = data;
+
+    if ((slen = pem_check_suffix(nm, "PARAMETERS")) > 0) {
+        ret = EVP_PKEY_new();
+        if (ret == NULL)
+            goto err;
+        if (!EVP_PKEY_set_type_str(ret, nm, slen)
+            || !ret->ameth->param_decode
+            || !ret->ameth->param_decode(ret, &p, len)) {
+            EVP_PKEY_free(ret);
+            ret = NULL;
+            goto err;
+        }
+        if (x) {
+            EVP_PKEY_free((EVP_PKEY *)*x);
+            *x = ret;
+        }
+    }
+ err:
+    if (ret == NULL)
+        PEMerr(PEM_F_PEM_READ_BIO_PARAMETERS, ERR_R_ASN1_LIB);
+    OPENSSL_free(nm);
+    OPENSSL_free(data);
+    return ret;
+}
+
+int PEM_write_bio_Parameters(BIO *bp, EVP_PKEY *x)
+{
+    char pem_str[80];
+    if (!x->ameth || !x->ameth->param_encode)
+        return 0;
+
+    BIO_snprintf(pem_str, 80, "%s PARAMETERS", x->ameth->pem_str);
+    return PEM_ASN1_write_bio((i2d_of_void *)x->ameth->param_encode,
+                              pem_str, bp, x, NULL, NULL, 0, 0, NULL);
+}
+
+#ifndef OPENSSL_NO_STDIO
+EVP_PKEY *PEM_read_PrivateKey(FILE *fp, EVP_PKEY **x, pem_password_cb *cb,
+                              void *u)
+{
+    BIO *b;
+    EVP_PKEY *ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        PEMerr(PEM_F_PEM_READ_PRIVATEKEY, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = PEM_read_bio_PrivateKey(b, x, cb, u);
+    BIO_free(b);
+    return ret;
+}
+
+int PEM_write_PrivateKey(FILE *fp, EVP_PKEY *x, const EVP_CIPHER *enc,
+                         unsigned char *kstr, int klen,
+                         pem_password_cb *cb, void *u)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new_fp(fp, BIO_NOCLOSE)) == NULL) {
+        PEMerr(PEM_F_PEM_WRITE_PRIVATEKEY, ERR_R_BUF_LIB);
+        return 0;
+    }
+    ret = PEM_write_bio_PrivateKey(b, x, enc, kstr, klen, cb, u);
+    BIO_free(b);
+    return ret;
+}
+
+#endif
+
+#ifndef OPENSSL_NO_DH
+
+/* Transparently read in PKCS#3 or X9.42 DH parameters */
+
+DH *PEM_read_bio_DHparams(BIO *bp, DH **x, pem_password_cb *cb, void *u)
+{
+    char *nm = NULL;
+    const unsigned char *p = NULL;
+    unsigned char *data = NULL;
+    long len;
+    DH *ret = NULL;
+
+    if (!PEM_bytes_read_bio(&data, &len, &nm, PEM_STRING_DHPARAMS, bp, cb, u))
+        return NULL;
+    p = data;
+
+    if (strcmp(nm, PEM_STRING_DHXPARAMS) == 0)
+        ret = d2i_DHxparams(x, &p, len);
+    else
+        ret = d2i_DHparams(x, &p, len);
+
+    if (ret == NULL)
+        PEMerr(PEM_F_PEM_READ_BIO_DHPARAMS, ERR_R_ASN1_LIB);
+    OPENSSL_free(nm);
+    OPENSSL_free(data);
+    return ret;
+}
+
+# ifndef OPENSSL_NO_STDIO
+DH *PEM_read_DHparams(FILE *fp, DH **x, pem_password_cb *cb, void *u)
+{
+    BIO *b;
+    DH *ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        PEMerr(PEM_F_PEM_READ_DHPARAMS, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = PEM_read_bio_DHparams(b, x, cb, u);
+    BIO_free(b);
+    return ret;
+}
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_sign.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_sign.c
new file mode 100644
index 000000000..9662eb14d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_sign.c
@@ -0,0 +1,50 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include <openssl/pem.h>
+
+int PEM_SignInit(EVP_MD_CTX *ctx, EVP_MD *type)
+{
+    return EVP_DigestInit_ex(ctx, type, NULL);
+}
+
+int PEM_SignUpdate(EVP_MD_CTX *ctx, unsigned char *data, unsigned int count)
+{
+    return EVP_DigestUpdate(ctx, data, count);
+}
+
+int PEM_SignFinal(EVP_MD_CTX *ctx, unsigned char *sigret,
+                  unsigned int *siglen, EVP_PKEY *pkey)
+{
+    unsigned char *m;
+    int i, ret = 0;
+    unsigned int m_len;
+
+    m = OPENSSL_malloc(EVP_PKEY_size(pkey) + 2);
+    if (m == NULL) {
+        PEMerr(PEM_F_PEM_SIGNFINAL, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (EVP_SignFinal(ctx, m, &m_len, pkey) <= 0)
+        goto err;
+
+    i = EVP_EncodeBlock(sigret, m, m_len);
+    *siglen = i;
+    ret = 1;
+ err:
+    /* ctx has been zeroed by EVP_SignFinal() */
+    OPENSSL_free(m);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_x509.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_x509.c
new file mode 100644
index 000000000..3a997564a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_x509.c
@@ -0,0 +1,18 @@
+/*
+ * Copyright 2001-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bio.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/pkcs7.h>
+#include <openssl/pem.h>
+
+IMPLEMENT_PEM_rw(X509, X509, PEM_STRING_X509, X509)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_xaux.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_xaux.c
new file mode 100644
index 000000000..6d7e1db21
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pem_xaux.c
@@ -0,0 +1,18 @@
+/*
+ * Copyright 2001-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bio.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/pkcs7.h>
+#include <openssl/pem.h>
+
+IMPLEMENT_PEM_rw(X509_AUX, X509, PEM_STRING_X509_TRUSTED, X509_AUX)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pvkfmt.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pvkfmt.c
new file mode 100644
index 000000000..e39c24381
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pem/pvkfmt.c
@@ -0,0 +1,883 @@
+/*
+ * Copyright 2005-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Support for PVK format keys and related structures (such a PUBLICKEYBLOB
+ * and PRIVATEKEYBLOB).
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/pem.h>
+#include <openssl/rand.h>
+#include <openssl/bn.h>
+#if !defined(OPENSSL_NO_RSA) && !defined(OPENSSL_NO_DSA)
+# include <openssl/dsa.h>
+# include <openssl/rsa.h>
+
+/*
+ * Utility function: read a DWORD (4 byte unsigned integer) in little endian
+ * format
+ */
+
+static unsigned int read_ledword(const unsigned char **in)
+{
+    const unsigned char *p = *in;
+    unsigned int ret;
+    ret = *p++;
+    ret |= (*p++ << 8);
+    ret |= (*p++ << 16);
+    ret |= (*p++ << 24);
+    *in = p;
+    return ret;
+}
+
+/*
+ * Read a BIGNUM in little endian format. The docs say that this should take
+ * up bitlen/8 bytes.
+ */
+
+static int read_lebn(const unsigned char **in, unsigned int nbyte, BIGNUM **r)
+{
+    *r = BN_lebin2bn(*in, nbyte, NULL);
+    if (*r == NULL)
+        return 0;
+    *in += nbyte;
+    return 1;
+}
+
+/* Convert private key blob to EVP_PKEY: RSA and DSA keys supported */
+
+# define MS_PUBLICKEYBLOB        0x6
+# define MS_PRIVATEKEYBLOB       0x7
+# define MS_RSA1MAGIC            0x31415352L
+# define MS_RSA2MAGIC            0x32415352L
+# define MS_DSS1MAGIC            0x31535344L
+# define MS_DSS2MAGIC            0x32535344L
+
+# define MS_KEYALG_RSA_KEYX      0xa400
+# define MS_KEYALG_DSS_SIGN      0x2200
+
+# define MS_KEYTYPE_KEYX         0x1
+# define MS_KEYTYPE_SIGN         0x2
+
+/* Maximum length of a blob after header */
+# define BLOB_MAX_LENGTH          102400
+
+/* The PVK file magic number: seems to spell out "bobsfile", who is Bob? */
+# define MS_PVKMAGIC             0xb0b5f11eL
+/* Salt length for PVK files */
+# define PVK_SALTLEN             0x10
+/* Maximum length in PVK header */
+# define PVK_MAX_KEYLEN          102400
+/* Maximum salt length */
+# define PVK_MAX_SALTLEN         10240
+
+static EVP_PKEY *b2i_rsa(const unsigned char **in,
+                         unsigned int bitlen, int ispub);
+static EVP_PKEY *b2i_dss(const unsigned char **in,
+                         unsigned int bitlen, int ispub);
+
+static int do_blob_header(const unsigned char **in, unsigned int length,
+                          unsigned int *pmagic, unsigned int *pbitlen,
+                          int *pisdss, int *pispub)
+{
+    const unsigned char *p = *in;
+    if (length < 16)
+        return 0;
+    /* bType */
+    if (*p == MS_PUBLICKEYBLOB) {
+        if (*pispub == 0) {
+            PEMerr(PEM_F_DO_BLOB_HEADER, PEM_R_EXPECTING_PRIVATE_KEY_BLOB);
+            return 0;
+        }
+        *pispub = 1;
+    } else if (*p == MS_PRIVATEKEYBLOB) {
+        if (*pispub == 1) {
+            PEMerr(PEM_F_DO_BLOB_HEADER, PEM_R_EXPECTING_PUBLIC_KEY_BLOB);
+            return 0;
+        }
+        *pispub = 0;
+    } else
+        return 0;
+    p++;
+    /* Version */
+    if (*p++ != 0x2) {
+        PEMerr(PEM_F_DO_BLOB_HEADER, PEM_R_BAD_VERSION_NUMBER);
+        return 0;
+    }
+    /* Ignore reserved, aiKeyAlg */
+    p += 6;
+    *pmagic = read_ledword(&p);
+    *pbitlen = read_ledword(&p);
+    *pisdss = 0;
+    switch (*pmagic) {
+
+    case MS_DSS1MAGIC:
+        *pisdss = 1;
+        /* fall thru */
+    case MS_RSA1MAGIC:
+        if (*pispub == 0) {
+            PEMerr(PEM_F_DO_BLOB_HEADER, PEM_R_EXPECTING_PRIVATE_KEY_BLOB);
+            return 0;
+        }
+        break;
+
+    case MS_DSS2MAGIC:
+        *pisdss = 1;
+        /* fall thru */
+    case MS_RSA2MAGIC:
+        if (*pispub == 1) {
+            PEMerr(PEM_F_DO_BLOB_HEADER, PEM_R_EXPECTING_PUBLIC_KEY_BLOB);
+            return 0;
+        }
+        break;
+
+    default:
+        PEMerr(PEM_F_DO_BLOB_HEADER, PEM_R_BAD_MAGIC_NUMBER);
+        return -1;
+    }
+    *in = p;
+    return 1;
+}
+
+static unsigned int blob_length(unsigned bitlen, int isdss, int ispub)
+{
+    unsigned int nbyte, hnbyte;
+    nbyte = (bitlen + 7) >> 3;
+    hnbyte = (bitlen + 15) >> 4;
+    if (isdss) {
+
+        /*
+         * Expected length: 20 for q + 3 components bitlen each + 24 for seed
+         * structure.
+         */
+        if (ispub)
+            return 44 + 3 * nbyte;
+        /*
+         * Expected length: 20 for q, priv, 2 bitlen components + 24 for seed
+         * structure.
+         */
+        else
+            return 64 + 2 * nbyte;
+    } else {
+        /* Expected length: 4 for 'e' + 'n' */
+        if (ispub)
+            return 4 + nbyte;
+        else
+            /*
+             * Expected length: 4 for 'e' and 7 other components. 2
+             * components are bitlen size, 5 are bitlen/2
+             */
+            return 4 + 2 * nbyte + 5 * hnbyte;
+    }
+
+}
+
+static EVP_PKEY *do_b2i(const unsigned char **in, unsigned int length,
+                        int ispub)
+{
+    const unsigned char *p = *in;
+    unsigned int bitlen, magic;
+    int isdss;
+    if (do_blob_header(&p, length, &magic, &bitlen, &isdss, &ispub) <= 0) {
+        PEMerr(PEM_F_DO_B2I, PEM_R_KEYBLOB_HEADER_PARSE_ERROR);
+        return NULL;
+    }
+    length -= 16;
+    if (length < blob_length(bitlen, isdss, ispub)) {
+        PEMerr(PEM_F_DO_B2I, PEM_R_KEYBLOB_TOO_SHORT);
+        return NULL;
+    }
+    if (isdss)
+        return b2i_dss(&p, bitlen, ispub);
+    else
+        return b2i_rsa(&p, bitlen, ispub);
+}
+
+static EVP_PKEY *do_b2i_bio(BIO *in, int ispub)
+{
+    const unsigned char *p;
+    unsigned char hdr_buf[16], *buf = NULL;
+    unsigned int bitlen, magic, length;
+    int isdss;
+    EVP_PKEY *ret = NULL;
+    if (BIO_read(in, hdr_buf, 16) != 16) {
+        PEMerr(PEM_F_DO_B2I_BIO, PEM_R_KEYBLOB_TOO_SHORT);
+        return NULL;
+    }
+    p = hdr_buf;
+    if (do_blob_header(&p, 16, &magic, &bitlen, &isdss, &ispub) <= 0)
+        return NULL;
+
+    length = blob_length(bitlen, isdss, ispub);
+    if (length > BLOB_MAX_LENGTH) {
+        PEMerr(PEM_F_DO_B2I_BIO, PEM_R_HEADER_TOO_LONG);
+        return NULL;
+    }
+    buf = OPENSSL_malloc(length);
+    if (buf == NULL) {
+        PEMerr(PEM_F_DO_B2I_BIO, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    p = buf;
+    if (BIO_read(in, buf, length) != (int)length) {
+        PEMerr(PEM_F_DO_B2I_BIO, PEM_R_KEYBLOB_TOO_SHORT);
+        goto err;
+    }
+
+    if (isdss)
+        ret = b2i_dss(&p, bitlen, ispub);
+    else
+        ret = b2i_rsa(&p, bitlen, ispub);
+
+ err:
+    OPENSSL_free(buf);
+    return ret;
+}
+
+static EVP_PKEY *b2i_dss(const unsigned char **in,
+                         unsigned int bitlen, int ispub)
+{
+    const unsigned char *p = *in;
+    EVP_PKEY *ret = NULL;
+    DSA *dsa = NULL;
+    BN_CTX *ctx = NULL;
+    unsigned int nbyte;
+    BIGNUM *pbn = NULL, *qbn = NULL, *gbn = NULL, *priv_key = NULL;
+    BIGNUM *pub_key = NULL;
+
+    nbyte = (bitlen + 7) >> 3;
+
+    dsa = DSA_new();
+    ret = EVP_PKEY_new();
+    if (dsa == NULL || ret == NULL)
+        goto memerr;
+    if (!read_lebn(&p, nbyte, &pbn))
+        goto memerr;
+
+    if (!read_lebn(&p, 20, &qbn))
+        goto memerr;
+
+    if (!read_lebn(&p, nbyte, &gbn))
+        goto memerr;
+
+    if (ispub) {
+        if (!read_lebn(&p, nbyte, &pub_key))
+            goto memerr;
+    } else {
+        if (!read_lebn(&p, 20, &priv_key))
+            goto memerr;
+
+        /* Calculate public key */
+        pub_key = BN_new();
+        if (pub_key == NULL)
+            goto memerr;
+        if ((ctx = BN_CTX_new()) == NULL)
+            goto memerr;
+
+        if (!BN_mod_exp(pub_key, gbn, priv_key, pbn, ctx))
+            goto memerr;
+
+        BN_CTX_free(ctx);
+        ctx = NULL;
+    }
+    if (!DSA_set0_pqg(dsa, pbn, qbn, gbn))
+        goto memerr;
+    pbn = qbn = gbn = NULL;
+    if (!DSA_set0_key(dsa, pub_key, priv_key))
+        goto memerr;
+    pub_key = priv_key = NULL;
+
+    if (!EVP_PKEY_set1_DSA(ret, dsa))
+        goto memerr;
+    DSA_free(dsa);
+    *in = p;
+    return ret;
+
+ memerr:
+    PEMerr(PEM_F_B2I_DSS, ERR_R_MALLOC_FAILURE);
+    DSA_free(dsa);
+    BN_free(pbn);
+    BN_free(qbn);
+    BN_free(gbn);
+    BN_free(pub_key);
+    BN_free(priv_key);
+    EVP_PKEY_free(ret);
+    BN_CTX_free(ctx);
+    return NULL;
+}
+
+static EVP_PKEY *b2i_rsa(const unsigned char **in,
+                         unsigned int bitlen, int ispub)
+{
+    const unsigned char *pin = *in;
+    EVP_PKEY *ret = NULL;
+    BIGNUM *e = NULL, *n = NULL, *d = NULL;
+    BIGNUM *p = NULL, *q = NULL, *dmp1 = NULL, *dmq1 = NULL, *iqmp = NULL;
+    RSA *rsa = NULL;
+    unsigned int nbyte, hnbyte;
+    nbyte = (bitlen + 7) >> 3;
+    hnbyte = (bitlen + 15) >> 4;
+    rsa = RSA_new();
+    ret = EVP_PKEY_new();
+    if (rsa == NULL || ret == NULL)
+        goto memerr;
+    e = BN_new();
+    if (e == NULL)
+        goto memerr;
+    if (!BN_set_word(e, read_ledword(&pin)))
+        goto memerr;
+    if (!read_lebn(&pin, nbyte, &n))
+        goto memerr;
+    if (!ispub) {
+        if (!read_lebn(&pin, hnbyte, &p))
+            goto memerr;
+        if (!read_lebn(&pin, hnbyte, &q))
+            goto memerr;
+        if (!read_lebn(&pin, hnbyte, &dmp1))
+            goto memerr;
+        if (!read_lebn(&pin, hnbyte, &dmq1))
+            goto memerr;
+        if (!read_lebn(&pin, hnbyte, &iqmp))
+            goto memerr;
+        if (!read_lebn(&pin, nbyte, &d))
+            goto memerr;
+        if (!RSA_set0_factors(rsa, p, q))
+            goto memerr;
+        p = q = NULL;
+        if (!RSA_set0_crt_params(rsa, dmp1, dmq1, iqmp))
+            goto memerr;
+        dmp1 = dmq1 = iqmp = NULL;
+    }
+    if (!RSA_set0_key(rsa, n, e, d))
+        goto memerr;
+    n = e = d = NULL;
+
+    if (!EVP_PKEY_set1_RSA(ret, rsa))
+        goto memerr;
+    RSA_free(rsa);
+    *in = pin;
+    return ret;
+ memerr:
+    PEMerr(PEM_F_B2I_RSA, ERR_R_MALLOC_FAILURE);
+    BN_free(e);
+    BN_free(n);
+    BN_free(p);
+    BN_free(q);
+    BN_free(dmp1);
+    BN_free(dmq1);
+    BN_free(iqmp);
+    BN_free(d);
+    RSA_free(rsa);
+    EVP_PKEY_free(ret);
+    return NULL;
+}
+
+EVP_PKEY *b2i_PrivateKey(const unsigned char **in, long length)
+{
+    return do_b2i(in, length, 0);
+}
+
+EVP_PKEY *b2i_PublicKey(const unsigned char **in, long length)
+{
+    return do_b2i(in, length, 1);
+}
+
+EVP_PKEY *b2i_PrivateKey_bio(BIO *in)
+{
+    return do_b2i_bio(in, 0);
+}
+
+EVP_PKEY *b2i_PublicKey_bio(BIO *in)
+{
+    return do_b2i_bio(in, 1);
+}
+
+static void write_ledword(unsigned char **out, unsigned int dw)
+{
+    unsigned char *p = *out;
+    *p++ = dw & 0xff;
+    *p++ = (dw >> 8) & 0xff;
+    *p++ = (dw >> 16) & 0xff;
+    *p++ = (dw >> 24) & 0xff;
+    *out = p;
+}
+
+static void write_lebn(unsigned char **out, const BIGNUM *bn, int len)
+{
+    BN_bn2lebinpad(bn, *out, len);
+    *out += len;
+}
+
+static int check_bitlen_rsa(RSA *rsa, int ispub, unsigned int *magic);
+static int check_bitlen_dsa(DSA *dsa, int ispub, unsigned int *magic);
+
+static void write_rsa(unsigned char **out, RSA *rsa, int ispub);
+static void write_dsa(unsigned char **out, DSA *dsa, int ispub);
+
+static int do_i2b(unsigned char **out, EVP_PKEY *pk, int ispub)
+{
+    unsigned char *p;
+    unsigned int bitlen, magic = 0, keyalg;
+    int outlen, noinc = 0;
+    int pktype = EVP_PKEY_id(pk);
+    if (pktype == EVP_PKEY_DSA) {
+        bitlen = check_bitlen_dsa(EVP_PKEY_get0_DSA(pk), ispub, &magic);
+        keyalg = MS_KEYALG_DSS_SIGN;
+    } else if (pktype == EVP_PKEY_RSA) {
+        bitlen = check_bitlen_rsa(EVP_PKEY_get0_RSA(pk), ispub, &magic);
+        keyalg = MS_KEYALG_RSA_KEYX;
+    } else
+        return -1;
+    if (bitlen == 0)
+        return -1;
+    outlen = 16 + blob_length(bitlen,
+                              keyalg == MS_KEYALG_DSS_SIGN ? 1 : 0, ispub);
+    if (out == NULL)
+        return outlen;
+    if (*out)
+        p = *out;
+    else {
+        if ((p = OPENSSL_malloc(outlen)) == NULL) {
+            PEMerr(PEM_F_DO_I2B, ERR_R_MALLOC_FAILURE);
+            return -1;
+        }
+        *out = p;
+        noinc = 1;
+    }
+    if (ispub)
+        *p++ = MS_PUBLICKEYBLOB;
+    else
+        *p++ = MS_PRIVATEKEYBLOB;
+    *p++ = 0x2;
+    *p++ = 0;
+    *p++ = 0;
+    write_ledword(&p, keyalg);
+    write_ledword(&p, magic);
+    write_ledword(&p, bitlen);
+    if (keyalg == MS_KEYALG_DSS_SIGN)
+        write_dsa(&p, EVP_PKEY_get0_DSA(pk), ispub);
+    else
+        write_rsa(&p, EVP_PKEY_get0_RSA(pk), ispub);
+    if (!noinc)
+        *out += outlen;
+    return outlen;
+}
+
+static int do_i2b_bio(BIO *out, EVP_PKEY *pk, int ispub)
+{
+    unsigned char *tmp = NULL;
+    int outlen, wrlen;
+    outlen = do_i2b(&tmp, pk, ispub);
+    if (outlen < 0)
+        return -1;
+    wrlen = BIO_write(out, tmp, outlen);
+    OPENSSL_free(tmp);
+    if (wrlen == outlen)
+        return outlen;
+    return -1;
+}
+
+static int check_bitlen_dsa(DSA *dsa, int ispub, unsigned int *pmagic)
+{
+    int bitlen;
+    const BIGNUM *p = NULL, *q = NULL, *g = NULL;
+    const BIGNUM *pub_key = NULL, *priv_key = NULL;
+
+    DSA_get0_pqg(dsa, &p, &q, &g);
+    DSA_get0_key(dsa, &pub_key, &priv_key);
+    bitlen = BN_num_bits(p);
+    if ((bitlen & 7) || (BN_num_bits(q) != 160)
+        || (BN_num_bits(g) > bitlen))
+        goto badkey;
+    if (ispub) {
+        if (BN_num_bits(pub_key) > bitlen)
+            goto badkey;
+        *pmagic = MS_DSS1MAGIC;
+    } else {
+        if (BN_num_bits(priv_key) > 160)
+            goto badkey;
+        *pmagic = MS_DSS2MAGIC;
+    }
+
+    return bitlen;
+ badkey:
+    PEMerr(PEM_F_CHECK_BITLEN_DSA, PEM_R_UNSUPPORTED_KEY_COMPONENTS);
+    return 0;
+}
+
+static int check_bitlen_rsa(RSA *rsa, int ispub, unsigned int *pmagic)
+{
+    int nbyte, hnbyte, bitlen;
+    const BIGNUM *e;
+
+    RSA_get0_key(rsa, NULL, &e, NULL);
+    if (BN_num_bits(e) > 32)
+        goto badkey;
+    bitlen = RSA_bits(rsa);
+    nbyte = RSA_size(rsa);
+    hnbyte = (bitlen + 15) >> 4;
+    if (ispub) {
+        *pmagic = MS_RSA1MAGIC;
+        return bitlen;
+    } else {
+        const BIGNUM *d, *p, *q, *iqmp, *dmp1, *dmq1;
+
+        *pmagic = MS_RSA2MAGIC;
+
+        /*
+         * For private key each component must fit within nbyte or hnbyte.
+         */
+        RSA_get0_key(rsa, NULL, NULL, &d);
+        if (BN_num_bytes(d) > nbyte)
+            goto badkey;
+        RSA_get0_factors(rsa, &p, &q);
+        RSA_get0_crt_params(rsa, &dmp1, &dmq1, &iqmp);
+        if ((BN_num_bytes(iqmp) > hnbyte)
+            || (BN_num_bytes(p) > hnbyte)
+            || (BN_num_bytes(q) > hnbyte)
+            || (BN_num_bytes(dmp1) > hnbyte)
+            || (BN_num_bytes(dmq1) > hnbyte))
+            goto badkey;
+    }
+    return bitlen;
+ badkey:
+    PEMerr(PEM_F_CHECK_BITLEN_RSA, PEM_R_UNSUPPORTED_KEY_COMPONENTS);
+    return 0;
+}
+
+static void write_rsa(unsigned char **out, RSA *rsa, int ispub)
+{
+    int nbyte, hnbyte;
+    const BIGNUM *n, *d, *e, *p, *q, *iqmp, *dmp1, *dmq1;
+
+    nbyte = RSA_size(rsa);
+    hnbyte = (RSA_bits(rsa) + 15) >> 4;
+    RSA_get0_key(rsa, &n, &e, &d);
+    write_lebn(out, e, 4);
+    write_lebn(out, n, nbyte);
+    if (ispub)
+        return;
+    RSA_get0_factors(rsa, &p, &q);
+    RSA_get0_crt_params(rsa, &dmp1, &dmq1, &iqmp);
+    write_lebn(out, p, hnbyte);
+    write_lebn(out, q, hnbyte);
+    write_lebn(out, dmp1, hnbyte);
+    write_lebn(out, dmq1, hnbyte);
+    write_lebn(out, iqmp, hnbyte);
+    write_lebn(out, d, nbyte);
+}
+
+static void write_dsa(unsigned char **out, DSA *dsa, int ispub)
+{
+    int nbyte;
+    const BIGNUM *p = NULL, *q = NULL, *g = NULL;
+    const BIGNUM *pub_key = NULL, *priv_key = NULL;
+
+    DSA_get0_pqg(dsa, &p, &q, &g);
+    DSA_get0_key(dsa, &pub_key, &priv_key);
+    nbyte = BN_num_bytes(p);
+    write_lebn(out, p, nbyte);
+    write_lebn(out, q, 20);
+    write_lebn(out, g, nbyte);
+    if (ispub)
+        write_lebn(out, pub_key, nbyte);
+    else
+        write_lebn(out, priv_key, 20);
+    /* Set "invalid" for seed structure values */
+    memset(*out, 0xff, 24);
+    *out += 24;
+    return;
+}
+
+int i2b_PrivateKey_bio(BIO *out, EVP_PKEY *pk)
+{
+    return do_i2b_bio(out, pk, 0);
+}
+
+int i2b_PublicKey_bio(BIO *out, EVP_PKEY *pk)
+{
+    return do_i2b_bio(out, pk, 1);
+}
+
+# ifndef OPENSSL_NO_RC4
+
+static int do_PVK_header(const unsigned char **in, unsigned int length,
+                         int skip_magic,
+                         unsigned int *psaltlen, unsigned int *pkeylen)
+{
+    const unsigned char *p = *in;
+    unsigned int pvk_magic, is_encrypted;
+    if (skip_magic) {
+        if (length < 20) {
+            PEMerr(PEM_F_DO_PVK_HEADER, PEM_R_PVK_TOO_SHORT);
+            return 0;
+        }
+    } else {
+        if (length < 24) {
+            PEMerr(PEM_F_DO_PVK_HEADER, PEM_R_PVK_TOO_SHORT);
+            return 0;
+        }
+        pvk_magic = read_ledword(&p);
+        if (pvk_magic != MS_PVKMAGIC) {
+            PEMerr(PEM_F_DO_PVK_HEADER, PEM_R_BAD_MAGIC_NUMBER);
+            return 0;
+        }
+    }
+    /* Skip reserved */
+    p += 4;
+    /*
+     * keytype =
+     */ read_ledword(&p);
+    is_encrypted = read_ledword(&p);
+    *psaltlen = read_ledword(&p);
+    *pkeylen = read_ledword(&p);
+
+    if (*pkeylen > PVK_MAX_KEYLEN || *psaltlen > PVK_MAX_SALTLEN)
+        return 0;
+
+    if (is_encrypted && !*psaltlen) {
+        PEMerr(PEM_F_DO_PVK_HEADER, PEM_R_INCONSISTENT_HEADER);
+        return 0;
+    }
+
+    *in = p;
+    return 1;
+}
+
+static int derive_pvk_key(unsigned char *key,
+                          const unsigned char *salt, unsigned int saltlen,
+                          const unsigned char *pass, int passlen)
+{
+    EVP_MD_CTX *mctx = EVP_MD_CTX_new();
+    int rv = 1;
+    if (mctx == NULL
+        || !EVP_DigestInit_ex(mctx, EVP_sha1(), NULL)
+        || !EVP_DigestUpdate(mctx, salt, saltlen)
+        || !EVP_DigestUpdate(mctx, pass, passlen)
+        || !EVP_DigestFinal_ex(mctx, key, NULL))
+        rv = 0;
+
+    EVP_MD_CTX_free(mctx);
+    return rv;
+}
+
+static EVP_PKEY *do_PVK_body(const unsigned char **in,
+                             unsigned int saltlen, unsigned int keylen,
+                             pem_password_cb *cb, void *u)
+{
+    EVP_PKEY *ret = NULL;
+    const unsigned char *p = *in;
+    unsigned int magic;
+    unsigned char *enctmp = NULL, *q;
+    unsigned char keybuf[20];
+
+    EVP_CIPHER_CTX *cctx = EVP_CIPHER_CTX_new();
+    if (saltlen) {
+        char psbuf[PEM_BUFSIZE];
+        int enctmplen, inlen;
+        if (cb)
+            inlen = cb(psbuf, PEM_BUFSIZE, 0, u);
+        else
+            inlen = PEM_def_callback(psbuf, PEM_BUFSIZE, 0, u);
+        if (inlen < 0) {
+            PEMerr(PEM_F_DO_PVK_BODY, PEM_R_BAD_PASSWORD_READ);
+            goto err;
+        }
+        enctmp = OPENSSL_malloc(keylen + 8);
+        if (enctmp == NULL) {
+            PEMerr(PEM_F_DO_PVK_BODY, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        if (!derive_pvk_key(keybuf, p, saltlen,
+                            (unsigned char *)psbuf, inlen))
+            goto err;
+        p += saltlen;
+        /* Copy BLOBHEADER across, decrypt rest */
+        memcpy(enctmp, p, 8);
+        p += 8;
+        if (keylen < 8) {
+            PEMerr(PEM_F_DO_PVK_BODY, PEM_R_PVK_TOO_SHORT);
+            goto err;
+        }
+        inlen = keylen - 8;
+        q = enctmp + 8;
+        if (!EVP_DecryptInit_ex(cctx, EVP_rc4(), NULL, keybuf, NULL))
+            goto err;
+        if (!EVP_DecryptUpdate(cctx, q, &enctmplen, p, inlen))
+            goto err;
+        if (!EVP_DecryptFinal_ex(cctx, q + enctmplen, &enctmplen))
+            goto err;
+        magic = read_ledword((const unsigned char **)&q);
+        if (magic != MS_RSA2MAGIC && magic != MS_DSS2MAGIC) {
+            q = enctmp + 8;
+            memset(keybuf + 5, 0, 11);
+            if (!EVP_DecryptInit_ex(cctx, EVP_rc4(), NULL, keybuf, NULL))
+                goto err;
+            if (!EVP_DecryptUpdate(cctx, q, &enctmplen, p, inlen))
+                goto err;
+            if (!EVP_DecryptFinal_ex(cctx, q + enctmplen, &enctmplen))
+                goto err;
+            magic = read_ledword((const unsigned char **)&q);
+            if (magic != MS_RSA2MAGIC && magic != MS_DSS2MAGIC) {
+                PEMerr(PEM_F_DO_PVK_BODY, PEM_R_BAD_DECRYPT);
+                goto err;
+            }
+        }
+        p = enctmp;
+    }
+
+    ret = b2i_PrivateKey(&p, keylen);
+ err:
+    EVP_CIPHER_CTX_free(cctx);
+    if (enctmp != NULL) {
+        OPENSSL_cleanse(keybuf, sizeof(keybuf));
+        OPENSSL_free(enctmp);
+    }
+    return ret;
+}
+
+EVP_PKEY *b2i_PVK_bio(BIO *in, pem_password_cb *cb, void *u)
+{
+    unsigned char pvk_hdr[24], *buf = NULL;
+    const unsigned char *p;
+    int buflen;
+    EVP_PKEY *ret = NULL;
+    unsigned int saltlen, keylen;
+    if (BIO_read(in, pvk_hdr, 24) != 24) {
+        PEMerr(PEM_F_B2I_PVK_BIO, PEM_R_PVK_DATA_TOO_SHORT);
+        return NULL;
+    }
+    p = pvk_hdr;
+
+    if (!do_PVK_header(&p, 24, 0, &saltlen, &keylen))
+        return 0;
+    buflen = (int)keylen + saltlen;
+    buf = OPENSSL_malloc(buflen);
+    if (buf == NULL) {
+        PEMerr(PEM_F_B2I_PVK_BIO, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    p = buf;
+    if (BIO_read(in, buf, buflen) != buflen) {
+        PEMerr(PEM_F_B2I_PVK_BIO, PEM_R_PVK_DATA_TOO_SHORT);
+        goto err;
+    }
+    ret = do_PVK_body(&p, saltlen, keylen, cb, u);
+
+ err:
+    OPENSSL_clear_free(buf, buflen);
+    return ret;
+}
+
+static int i2b_PVK(unsigned char **out, EVP_PKEY *pk, int enclevel,
+                   pem_password_cb *cb, void *u)
+{
+    int outlen = 24, pklen;
+    unsigned char *p = NULL, *start = NULL, *salt = NULL;
+    EVP_CIPHER_CTX *cctx = NULL;
+    if (enclevel)
+        outlen += PVK_SALTLEN;
+    pklen = do_i2b(NULL, pk, 0);
+    if (pklen < 0)
+        return -1;
+    outlen += pklen;
+    if (out == NULL)
+        return outlen;
+    if (*out != NULL) {
+        p = *out;
+    } else {
+        start = p = OPENSSL_malloc(outlen);
+        if (p == NULL) {
+            PEMerr(PEM_F_I2B_PVK, ERR_R_MALLOC_FAILURE);
+            return -1;
+        }
+    }
+
+    cctx = EVP_CIPHER_CTX_new();
+    if (cctx == NULL)
+        goto error;
+
+    write_ledword(&p, MS_PVKMAGIC);
+    write_ledword(&p, 0);
+    if (EVP_PKEY_id(pk) == EVP_PKEY_DSA)
+        write_ledword(&p, MS_KEYTYPE_SIGN);
+    else
+        write_ledword(&p, MS_KEYTYPE_KEYX);
+    write_ledword(&p, enclevel ? 1 : 0);
+    write_ledword(&p, enclevel ? PVK_SALTLEN : 0);
+    write_ledword(&p, pklen);
+    if (enclevel) {
+        if (RAND_bytes(p, PVK_SALTLEN) <= 0)
+            goto error;
+        salt = p;
+        p += PVK_SALTLEN;
+    }
+    do_i2b(&p, pk, 0);
+    if (enclevel != 0) {
+        char psbuf[PEM_BUFSIZE];
+        unsigned char keybuf[20];
+        int enctmplen, inlen;
+        if (cb)
+            inlen = cb(psbuf, PEM_BUFSIZE, 1, u);
+        else
+            inlen = PEM_def_callback(psbuf, PEM_BUFSIZE, 1, u);
+        if (inlen <= 0) {
+            PEMerr(PEM_F_I2B_PVK, PEM_R_BAD_PASSWORD_READ);
+            goto error;
+        }
+        if (!derive_pvk_key(keybuf, salt, PVK_SALTLEN,
+                            (unsigned char *)psbuf, inlen))
+            goto error;
+        if (enclevel == 1)
+            memset(keybuf + 5, 0, 11);
+        p = salt + PVK_SALTLEN + 8;
+        if (!EVP_EncryptInit_ex(cctx, EVP_rc4(), NULL, keybuf, NULL))
+            goto error;
+        OPENSSL_cleanse(keybuf, 20);
+        if (!EVP_DecryptUpdate(cctx, p, &enctmplen, p, pklen - 8))
+            goto error;
+        if (!EVP_DecryptFinal_ex(cctx, p + enctmplen, &enctmplen))
+            goto error;
+    }
+
+    EVP_CIPHER_CTX_free(cctx);
+
+    if (*out == NULL)
+        *out = start;
+
+    return outlen;
+
+ error:
+    EVP_CIPHER_CTX_free(cctx);
+    if (*out == NULL)
+        OPENSSL_free(start);
+    return -1;
+}
+
+int i2b_PVK_bio(BIO *out, EVP_PKEY *pk, int enclevel,
+                pem_password_cb *cb, void *u)
+{
+    unsigned char *tmp = NULL;
+    int outlen, wrlen;
+    outlen = i2b_PVK(&tmp, pk, enclevel, cb, u);
+    if (outlen < 0)
+        return -1;
+    wrlen = BIO_write(out, tmp, outlen);
+    OPENSSL_free(tmp);
+    if (wrlen == outlen) {
+        PEMerr(PEM_F_I2B_PVK_BIO, PEM_R_BIO_WRITE_FAILURE);
+        return outlen;
+    }
+    return -1;
+}
+
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/README b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/README
new file mode 100644
index 000000000..3177c3716
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/README
@@ -0,0 +1,124 @@
+The perl scripts in this directory are my 'hack' to generate
+multiple different assembler formats via the one original script.
+
+The way to use this library is to start with adding the path to this directory
+and then include it.
+
+push(@INC,"perlasm","../../perlasm");
+require "x86asm.pl";
+
+The first thing we do is setup the file and type of assembler
+
+&asm_init($ARGV[0]);
+
+The first argument is the 'type'.  Currently
+'cpp', 'sol', 'a.out', 'elf' or 'win32'.
+Argument 2 is the file name.
+
+The reciprocal function is
+&asm_finish() which should be called at the end.
+
+There are 2 main 'packages'. x86ms.pl, which is the Microsoft assembler,
+and x86unix.pl which is the unix (gas) version.
+
+Functions of interest are:
+&external_label("des_SPtrans");	declare and external variable
+&LB(reg);			Low byte for a register
+&HB(reg);			High byte for a register
+&BP(off,base,index,scale)	Byte pointer addressing
+&DWP(off,base,index,scale)	Word pointer addressing
+&stack_push(num)		Basically a 'sub esp, num*4' with extra
+&stack_pop(num)			inverse of stack_push
+&function_begin(name,extra)	Start a function with pushing of
+				edi, esi, ebx and ebp.  extra is extra win32
+				external info that may be required.
+&function_begin_B(name,extra)	Same as normal function_begin but no pushing.
+&function_end(name)		Call at end of function.
+&function_end_A(name)		Standard pop and ret, for use inside functions
+&function_end_B(name)		Call at end but with poping or 'ret'.
+&swtmp(num)			Address on stack temp word.
+&wparam(num)			Parameter number num, that was push
+				in C convention.  This all works over pushes
+				and pops.
+&comment("hello there")		Put in a comment.
+&label("loop")			Refer to a label, normally a jmp target.
+&set_label("loop")		Set a label at this point.
+&data_word(word)		Put in a word of data.
+
+So how does this all hold together?  Given
+
+int calc(int len, int *data)
+	{
+	int i,j=0;
+
+	for (i=0; i<len; i++)
+		{
+		j+=other(data[i]);
+		}
+	}
+
+So a very simple version of this function could be coded as
+
+	push(@INC,"perlasm","../../perlasm");
+	require "x86asm.pl";
+	
+	&asm_init($ARGV[0]);
+
+	&external_label("other");
+
+	$tmp1=	"eax";
+	$j=	"edi";
+	$data=	"esi";
+	$i=	"ebp";
+
+	&comment("a simple function");
+	&function_begin("calc");
+	&mov(	$data,		&wparam(1)); # data
+	&xor(	$j,		$j);
+	&xor(	$i,		$i);
+
+	&set_label("loop");
+	&cmp(	$i,		&wparam(0));
+	&jge(	&label("end"));
+
+	&mov(	$tmp1,		&DWP(0,$data,$i,4));
+	&push(	$tmp1);
+	&call(	"other");
+	&add(	$j,		"eax");
+	&pop(	$tmp1);
+	&inc(	$i);
+	&jmp(	&label("loop"));
+
+	&set_label("end");
+	&mov(	"eax",		$j);
+
+	&function_end("calc");
+
+	&asm_finish();
+
+The above example is very very unoptimised but gives an idea of how
+things work.
+
+There is also a cbc mode function generator in cbc.pl
+
+&cbc(	$name,
+	$encrypt_function_name,
+	$decrypt_function_name,
+	$true_if_byte_swap_needed,
+	$parameter_number_for_iv,
+	$parameter_number_for_encrypt_flag,
+	$first_parameter_to_pass,
+	$second_parameter_to_pass,
+	$third_parameter_to_pass);
+
+So for example, given
+void BF_encrypt(BF_LONG *data,BF_KEY *key);
+void BF_decrypt(BF_LONG *data,BF_KEY *key);
+void BF_cbc_encrypt(unsigned char *in, unsigned char *out, long length,
+        BF_KEY *ks, unsigned char *iv, int enc);
+
+&cbc("BF_cbc_encrypt","BF_encrypt","BF_encrypt",1,4,5,3,-1,-1);
+
+&cbc("des_ncbc_encrypt","des_encrypt","des_encrypt",0,4,5,3,5,-1);
+&cbc("des_ede3_cbc_encrypt","des_encrypt3","des_decrypt3",0,6,7,3,4,5);
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/arm-xlate.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/arm-xlate.pl
new file mode 100755
index 000000000..ca2f8b990
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/arm-xlate.pl
@@ -0,0 +1,177 @@
+#! /usr/bin/env perl
+# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+
+my $flavour = shift;
+my $output = shift;
+open STDOUT,">$output" || die "can't open $output: $!";
+
+$flavour = "linux32" if (!$flavour or $flavour eq "void");
+
+my %GLOBALS;
+my $dotinlocallabels=($flavour=~/linux/)?1:0;
+
+################################################################
+# directives which need special treatment on different platforms
+################################################################
+my $arch = sub {
+    if ($flavour =~ /linux/)	{ ".arch\t".join(',',@_); }
+    else			{ ""; }
+};
+my $fpu = sub {
+    if ($flavour =~ /linux/)	{ ".fpu\t".join(',',@_); }
+    else			{ ""; }
+};
+my $hidden = sub {
+    if ($flavour =~ /ios/)	{ ".private_extern\t".join(',',@_); }
+    else			{ ".hidden\t".join(',',@_); }
+};
+my $comm = sub {
+    my @args = split(/,\s*/,shift);
+    my $name = @args[0];
+    my $global = \$GLOBALS{$name};
+    my $ret;
+
+    if ($flavour =~ /ios32/)	{
+	$ret = ".comm\t_$name,@args[1]\n";
+	$ret .= ".non_lazy_symbol_pointer\n";
+	$ret .= "$name:\n";
+	$ret .= ".indirect_symbol\t_$name\n";
+	$ret .= ".long\t0";
+	$name = "_$name";
+    } else			{ $ret = ".comm\t".join(',',@args); }
+
+    $$global = $name;
+    $ret;
+};
+my $globl = sub {
+    my $name = shift;
+    my $global = \$GLOBALS{$name};
+    my $ret;
+
+    SWITCH: for ($flavour) {
+	/ios/		&& do { $name = "_$name";
+				last;
+			      };
+    }
+
+    $ret = ".globl	$name" if (!$ret);
+    $$global = $name;
+    $ret;
+};
+my $global = $globl;
+my $extern = sub {
+    &$globl(@_);
+    return;	# return nothing
+};
+my $type = sub {
+    if ($flavour =~ /linux/)	{ ".type\t".join(',',@_); }
+    elsif ($flavour =~ /ios32/)	{ if (join(',',@_) =~ /(\w+),%function/) {
+					"#ifdef __thumb2__\n".
+					".thumb_func	$1\n".
+					"#endif";
+				  }
+			        }
+    else			{ ""; }
+};
+my $size = sub {
+    if ($flavour =~ /linux/)	{ ".size\t".join(',',@_); }
+    else			{ ""; }
+};
+my $inst = sub {
+    if ($flavour =~ /linux/)    { ".inst\t".join(',',@_); }
+    else                        { ".long\t".join(',',@_); }
+};
+my $asciz = sub {
+    my $line = join(",",@_);
+    if ($line =~ /^"(.*)"$/)
+    {	".byte	" . join(",",unpack("C*",$1),0) . "\n.align	2";	}
+    else
+    {	"";	}
+};
+
+sub range {
+  my ($r,$sfx,$start,$end) = @_;
+
+    join(",",map("$r$_$sfx",($start..$end)));
+}
+
+sub expand_line {
+  my $line = shift;
+  my @ret = ();
+
+    pos($line)=0;
+
+    while ($line =~ m/\G[^@\/\{\"]*/g) {
+	if ($line =~ m/\G(@|\/\/|$)/gc) {
+	    last;
+	}
+	elsif ($line =~ m/\G\{/gc) {
+	    my $saved_pos = pos($line);
+	    $line =~ s/\G([rdqv])([0-9]+)([^\-]*)\-\1([0-9]+)\3/range($1,$3,$2,$4)/e;
+	    pos($line) = $saved_pos;
+	    $line =~ m/\G[^\}]*\}/g;
+	}
+	elsif ($line =~ m/\G\"/gc) {
+	    $line =~ m/\G[^\"]*\"/g;
+	}
+    }
+
+    $line =~ s/\b(\w+)/$GLOBALS{$1} or $1/ge;
+
+    return $line;
+}
+
+while(my $line=<>) {
+
+    if ($line =~ m/^\s*(#|@|\/\/)/)	{ print $line; next; }
+
+    $line =~ s|/\*.*\*/||;	# get rid of C-style comments...
+    $line =~ s|^\s+||;		# ... and skip white spaces in beginning...
+    $line =~ s|\s+$||;		# ... and at the end
+
+    {
+	$line =~ s|[\b\.]L(\w{2,})|L$1|g;	# common denominator for Locallabel
+	$line =~ s|\bL(\w{2,})|\.L$1|g	if ($dotinlocallabels);
+    }
+
+    {
+	$line =~ s|(^[\.\w]+)\:\s*||;
+	my $label = $1;
+	if ($label) {
+	    printf "%s:",($GLOBALS{$label} or $label);
+	}
+    }
+
+    if ($line !~ m/^[#@]/) {
+	$line =~ s|^\s*(\.?)(\S+)\s*||;
+	my $c = $1; $c = "\t" if ($c eq "");
+	my $mnemonic = $2;
+	my $opcode;
+	if ($mnemonic =~ m/([^\.]+)\.([^\.]+)/) {
+	    $opcode = eval("\$$1_$2");
+	} else {
+	    $opcode = eval("\$$mnemonic");
+	}
+
+	my $arg=expand_line($line);
+
+	if (ref($opcode) eq 'CODE') {
+		$line = &$opcode($arg);
+	} elsif ($mnemonic)         {
+		$line = $c.$mnemonic;
+		$line.= "\t$arg" if ($arg ne "");
+	}
+    }
+
+    print $line if ($line);
+    print "\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/cbc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/cbc.pl
new file mode 100644
index 000000000..01bafe457
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/cbc.pl
@@ -0,0 +1,356 @@
+#! /usr/bin/env perl
+# Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# void des_ncbc_encrypt(input, output, length, schedule, ivec, enc)
+# des_cblock (*input);
+# des_cblock (*output);
+# long length;
+# des_key_schedule schedule;
+# des_cblock (*ivec);
+# int enc;
+#
+# calls
+# des_encrypt((DES_LONG *)tin,schedule,DES_ENCRYPT);
+#
+
+#&cbc("des_ncbc_encrypt","des_encrypt",0);
+#&cbc("BF_cbc_encrypt","BF_encrypt","BF_encrypt",
+#	1,4,5,3,5,-1);
+#&cbc("des_ncbc_encrypt","des_encrypt","des_encrypt",
+#	0,4,5,3,5,-1);
+#&cbc("des_ede3_cbc_encrypt","des_encrypt3","des_decrypt3",
+#	0,6,7,3,4,5);
+#
+# When doing a cipher that needs bigendian order,
+# for encrypt, the iv is kept in bigendian form,
+# while for decrypt, it is kept in little endian.
+sub cbc
+	{
+	local($name,$enc_func,$dec_func,$swap,$iv_off,$enc_off,$p1,$p2,$p3)=@_;
+	# name is the function name
+	# enc_func and dec_func and the functions to call for encrypt/decrypt
+	# swap is true if byte order needs to be reversed
+	# iv_off is parameter number for the iv
+	# enc_off is parameter number for the encrypt/decrypt flag
+	# p1,p2,p3 are the offsets for parameters to be passed to the
+	# underlying calls.
+
+	&function_begin_B($name,"");
+	&comment("");
+
+	$in="esi";
+	$out="edi";
+	$count="ebp";
+
+	&push("ebp");
+	&push("ebx");
+	&push("esi");
+	&push("edi");
+
+	$data_off=4;
+	$data_off+=4 if ($p1 > 0);
+	$data_off+=4 if ($p2 > 0);
+	$data_off+=4 if ($p3 > 0);
+
+	&mov($count,	&wparam(2));	# length
+
+	&comment("getting iv ptr from parameter $iv_off");
+	&mov("ebx",	&wparam($iv_off));	# Get iv ptr
+
+	&mov($in,	&DWP(0,"ebx","",0));#	iv[0]
+	&mov($out,	&DWP(4,"ebx","",0));#	iv[1]
+
+	&push($out);
+	&push($in);
+	&push($out);	# used in decrypt for iv[1]
+	&push($in);	# used in decrypt for iv[0]
+
+	&mov("ebx",	"esp");		# This is the address of tin[2]
+
+	&mov($in,	&wparam(0));	# in
+	&mov($out,	&wparam(1));	# out
+
+	# We have loaded them all, how lets push things
+	&comment("getting encrypt flag from parameter $enc_off");
+	&mov("ecx",	&wparam($enc_off));	# Get enc flag
+	if ($p3 > 0)
+		{
+		&comment("get and push parameter $p3");
+		if ($enc_off != $p3)
+			{ &mov("eax",	&wparam($p3)); &push("eax"); }
+		else	{ &push("ecx"); }
+		}
+	if ($p2 > 0)
+		{
+		&comment("get and push parameter $p2");
+		if ($enc_off != $p2)
+			{ &mov("eax",	&wparam($p2)); &push("eax"); }
+		else	{ &push("ecx"); }
+		}
+	if ($p1 > 0)
+		{
+		&comment("get and push parameter $p1");
+		if ($enc_off != $p1)
+			{ &mov("eax",	&wparam($p1)); &push("eax"); }
+		else	{ &push("ecx"); }
+		}
+	&push("ebx");		# push data/iv
+
+	&cmp("ecx",0);
+	&jz(&label("decrypt"));
+
+	&and($count,0xfffffff8);
+	&mov("eax",	&DWP($data_off,"esp","",0));	# load iv[0]
+	&mov("ebx",	&DWP($data_off+4,"esp","",0));	# load iv[1]
+
+	&jz(&label("encrypt_finish"));
+
+	#############################################################
+
+	&set_label("encrypt_loop");
+	# encrypt start
+	# "eax" and "ebx" hold iv (or the last cipher text)
+
+	&mov("ecx",	&DWP(0,$in,"",0));	# load first 4 bytes
+	&mov("edx",	&DWP(4,$in,"",0));	# second 4 bytes
+
+	&xor("eax",	"ecx");
+	&xor("ebx",	"edx");
+
+	&bswap("eax")	if $swap;
+	&bswap("ebx")	if $swap;
+
+	&mov(&DWP($data_off,"esp","",0),	"eax");	# put in array for call
+	&mov(&DWP($data_off+4,"esp","",0),	"ebx");	#
+
+	&call($enc_func);
+
+	&mov("eax",	&DWP($data_off,"esp","",0));
+	&mov("ebx",	&DWP($data_off+4,"esp","",0));
+
+	&bswap("eax")	if $swap;
+	&bswap("ebx")	if $swap;
+
+	&mov(&DWP(0,$out,"",0),"eax");
+	&mov(&DWP(4,$out,"",0),"ebx");
+
+	# eax and ebx are the next iv.
+
+	&add($in,	8);
+	&add($out,	8);
+
+	&sub($count,	8);
+	&jnz(&label("encrypt_loop"));
+
+###################################################################3
+	&set_label("encrypt_finish");
+	&mov($count,	&wparam(2));	# length
+	&and($count,	7);
+	&jz(&label("finish"));
+	&call(&label("PIC_point"));
+&set_label("PIC_point");
+	&blindpop("edx");
+	&lea("ecx",&DWP(&label("cbc_enc_jmp_table")."-".&label("PIC_point"),"edx"));
+	&mov($count,&DWP(0,"ecx",$count,4));
+	&add($count,"edx");
+	&xor("ecx","ecx");
+	&xor("edx","edx");
+	#&mov($count,&DWP(&label("cbc_enc_jmp_table"),"",$count,4));
+	&jmp_ptr($count);
+
+&set_label("ej7");
+	&movb(&HB("edx"),	&BP(6,$in,"",0));
+	&shl("edx",8);
+&set_label("ej6");
+	&movb(&HB("edx"),	&BP(5,$in,"",0));
+&set_label("ej5");
+	&movb(&LB("edx"),	&BP(4,$in,"",0));
+&set_label("ej4");
+	&mov("ecx",		&DWP(0,$in,"",0));
+	&jmp(&label("ejend"));
+&set_label("ej3");
+	&movb(&HB("ecx"),	&BP(2,$in,"",0));
+	&shl("ecx",8);
+&set_label("ej2");
+	&movb(&HB("ecx"),	&BP(1,$in,"",0));
+&set_label("ej1");
+	&movb(&LB("ecx"),	&BP(0,$in,"",0));
+&set_label("ejend");
+
+	&xor("eax",	"ecx");
+	&xor("ebx",	"edx");
+
+	&bswap("eax")	if $swap;
+	&bswap("ebx")	if $swap;
+
+	&mov(&DWP($data_off,"esp","",0),	"eax");	# put in array for call
+	&mov(&DWP($data_off+4,"esp","",0),	"ebx");	#
+
+	&call($enc_func);
+
+	&mov("eax",	&DWP($data_off,"esp","",0));
+	&mov("ebx",	&DWP($data_off+4,"esp","",0));
+
+	&bswap("eax")	if $swap;
+	&bswap("ebx")	if $swap;
+
+	&mov(&DWP(0,$out,"",0),"eax");
+	&mov(&DWP(4,$out,"",0),"ebx");
+
+	&jmp(&label("finish"));
+
+	#############################################################
+	#############################################################
+	&set_label("decrypt",1);
+	# decrypt start
+	&and($count,0xfffffff8);
+	# The next 2 instructions are only for if the jz is taken
+	&mov("eax",	&DWP($data_off+8,"esp","",0));	# get iv[0]
+	&mov("ebx",	&DWP($data_off+12,"esp","",0));	# get iv[1]
+	&jz(&label("decrypt_finish"));
+
+	&set_label("decrypt_loop");
+	&mov("eax",	&DWP(0,$in,"",0));	# load first 4 bytes
+	&mov("ebx",	&DWP(4,$in,"",0));	# second 4 bytes
+
+	&bswap("eax")	if $swap;
+	&bswap("ebx")	if $swap;
+
+	&mov(&DWP($data_off,"esp","",0),	"eax");	# put back
+	&mov(&DWP($data_off+4,"esp","",0),	"ebx");	#
+
+	&call($dec_func);
+
+	&mov("eax",	&DWP($data_off,"esp","",0));	# get return
+	&mov("ebx",	&DWP($data_off+4,"esp","",0));	#
+
+	&bswap("eax")	if $swap;
+	&bswap("ebx")	if $swap;
+
+	&mov("ecx",	&DWP($data_off+8,"esp","",0));	# get iv[0]
+	&mov("edx",	&DWP($data_off+12,"esp","",0));	# get iv[1]
+
+	&xor("ecx",	"eax");
+	&xor("edx",	"ebx");
+
+	&mov("eax",	&DWP(0,$in,"",0));	# get old cipher text,
+	&mov("ebx",	&DWP(4,$in,"",0));	# next iv actually
+
+	&mov(&DWP(0,$out,"",0),"ecx");
+	&mov(&DWP(4,$out,"",0),"edx");
+
+	&mov(&DWP($data_off+8,"esp","",0),	"eax");	# save iv
+	&mov(&DWP($data_off+12,"esp","",0),	"ebx");	#
+
+	&add($in,	8);
+	&add($out,	8);
+
+	&sub($count,	8);
+	&jnz(&label("decrypt_loop"));
+############################ ENDIT #######################3
+	&set_label("decrypt_finish");
+	&mov($count,	&wparam(2));	# length
+	&and($count,	7);
+	&jz(&label("finish"));
+
+	&mov("eax",	&DWP(0,$in,"",0));	# load first 4 bytes
+	&mov("ebx",	&DWP(4,$in,"",0));	# second 4 bytes
+
+	&bswap("eax")	if $swap;
+	&bswap("ebx")	if $swap;
+
+	&mov(&DWP($data_off,"esp","",0),	"eax");	# put back
+	&mov(&DWP($data_off+4,"esp","",0),	"ebx");	#
+
+	&call($dec_func);
+
+	&mov("eax",	&DWP($data_off,"esp","",0));	# get return
+	&mov("ebx",	&DWP($data_off+4,"esp","",0));	#
+
+	&bswap("eax")	if $swap;
+	&bswap("ebx")	if $swap;
+
+	&mov("ecx",	&DWP($data_off+8,"esp","",0));	# get iv[0]
+	&mov("edx",	&DWP($data_off+12,"esp","",0));	# get iv[1]
+
+	&xor("ecx",	"eax");
+	&xor("edx",	"ebx");
+
+	# this is for when we exit
+	&mov("eax",	&DWP(0,$in,"",0));	# get old cipher text,
+	&mov("ebx",	&DWP(4,$in,"",0));	# next iv actually
+
+&set_label("dj7");
+	&rotr("edx",	16);
+	&movb(&BP(6,$out,"",0),	&LB("edx"));
+	&shr("edx",16);
+&set_label("dj6");
+	&movb(&BP(5,$out,"",0),	&HB("edx"));
+&set_label("dj5");
+	&movb(&BP(4,$out,"",0),	&LB("edx"));
+&set_label("dj4");
+	&mov(&DWP(0,$out,"",0),	"ecx");
+	&jmp(&label("djend"));
+&set_label("dj3");
+	&rotr("ecx",	16);
+	&movb(&BP(2,$out,"",0),	&LB("ecx"));
+	&shl("ecx",16);
+&set_label("dj2");
+	&movb(&BP(1,$in,"",0),	&HB("ecx"));
+&set_label("dj1");
+	&movb(&BP(0,$in,"",0),	&LB("ecx"));
+&set_label("djend");
+
+	# final iv is still in eax:ebx
+	&jmp(&label("finish"));
+
+
+############################ FINISH #######################3
+	&set_label("finish",1);
+	&mov("ecx",	&wparam($iv_off));	# Get iv ptr
+
+	#################################################
+	$total=16+4;
+	$total+=4 if ($p1 > 0);
+	$total+=4 if ($p2 > 0);
+	$total+=4 if ($p3 > 0);
+	&add("esp",$total);
+
+	&mov(&DWP(0,"ecx","",0),	"eax");	# save iv
+	&mov(&DWP(4,"ecx","",0),	"ebx");	# save iv
+
+	&function_end_A($name);
+
+	&align(64);
+	&set_label("cbc_enc_jmp_table");
+	&data_word("0");
+	&data_word(&label("ej1")."-".&label("PIC_point"));
+	&data_word(&label("ej2")."-".&label("PIC_point"));
+	&data_word(&label("ej3")."-".&label("PIC_point"));
+	&data_word(&label("ej4")."-".&label("PIC_point"));
+	&data_word(&label("ej5")."-".&label("PIC_point"));
+	&data_word(&label("ej6")."-".&label("PIC_point"));
+	&data_word(&label("ej7")."-".&label("PIC_point"));
+	# not used
+	#&set_label("cbc_dec_jmp_table",1);
+	#&data_word("0");
+	#&data_word(&label("dj1")."-".&label("PIC_point"));
+	#&data_word(&label("dj2")."-".&label("PIC_point"));
+	#&data_word(&label("dj3")."-".&label("PIC_point"));
+	#&data_word(&label("dj4")."-".&label("PIC_point"));
+	#&data_word(&label("dj5")."-".&label("PIC_point"));
+	#&data_word(&label("dj6")."-".&label("PIC_point"));
+	#&data_word(&label("dj7")."-".&label("PIC_point"));
+	&align(64);
+
+	&function_end_B($name);
+
+	}
+
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/ppc-xlate.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/ppc-xlate.pl
new file mode 100755
index 000000000..d220c6245
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/ppc-xlate.pl
@@ -0,0 +1,344 @@
+#! /usr/bin/env perl
+# Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+my $flavour = shift;
+my $output = shift;
+open STDOUT,">$output" || die "can't open $output: $!";
+
+my %GLOBALS;
+my %TYPES;
+my $dotinlocallabels=($flavour=~/linux/)?1:0;
+
+################################################################
+# directives which need special treatment on different platforms
+################################################################
+my $type = sub {
+    my ($dir,$name,$type) = @_;
+
+    $TYPES{$name} = $type;
+    if ($flavour =~ /linux/) {
+	$name =~ s|^\.||;
+	".type	$name,$type";
+    } else {
+	"";
+    }
+};
+my $globl = sub {
+    my $junk = shift;
+    my $name = shift;
+    my $global = \$GLOBALS{$name};
+    my $type = \$TYPES{$name};
+    my $ret;
+
+    $name =~ s|^\.||;
+
+    SWITCH: for ($flavour) {
+	/aix/		&& do { if (!$$type) {
+				    $$type = "\@function";
+				}
+				if ($$type =~ /function/) {
+				    $name = ".$name";
+				}
+				last;
+			      };
+	/osx/		&& do { $name = "_$name";
+				last;
+			      };
+	/linux.*(32|64le)/
+			&& do {	$ret .= ".globl	$name";
+				if (!$$type) {
+				    $ret .= "\n.type	$name,\@function";
+				    $$type = "\@function";
+				}
+				last;
+			      };
+	/linux.*64/	&& do {	$ret .= ".globl	$name";
+				if (!$$type) {
+				    $ret .= "\n.type	$name,\@function";
+				    $$type = "\@function";
+				}
+				if ($$type =~ /function/) {
+				    $ret .= "\n.section	\".opd\",\"aw\"";
+				    $ret .= "\n.align	3";
+				    $ret .= "\n$name:";
+				    $ret .= "\n.quad	.$name,.TOC.\@tocbase,0";
+				    $ret .= "\n.previous";
+				    $name = ".$name";
+				}
+				last;
+			      };
+    }
+
+    $ret = ".globl	$name" if (!$ret);
+    $$global = $name;
+    $ret;
+};
+my $text = sub {
+    my $ret = ($flavour =~ /aix/) ? ".csect\t.text[PR],7" : ".text";
+    $ret = ".abiversion	2\n".$ret	if ($flavour =~ /linux.*64le/);
+    $ret;
+};
+my $machine = sub {
+    my $junk = shift;
+    my $arch = shift;
+    if ($flavour =~ /osx/)
+    {	$arch =~ s/\"//g;
+	$arch = ($flavour=~/64/) ? "ppc970-64" : "ppc970" if ($arch eq "any");
+    }
+    ".machine	$arch";
+};
+my $size = sub {
+    if ($flavour =~ /linux/)
+    {	shift;
+	my $name = shift;
+	my $real = $GLOBALS{$name} ? \$GLOBALS{$name} : \$name;
+	my $ret  = ".size	$$real,.-$$real";
+	$name =~ s|^\.||;
+	if ($$real ne $name) {
+	    $ret .= "\n.size	$name,.-$$real";
+	}
+	$ret;
+    }
+    else
+    {	"";	}
+};
+my $asciz = sub {
+    shift;
+    my $line = join(",",@_);
+    if ($line =~ /^"(.*)"$/)
+    {	".byte	" . join(",",unpack("C*",$1),0) . "\n.align	2";	}
+    else
+    {	"";	}
+};
+my $quad = sub {
+    shift;
+    my @ret;
+    my ($hi,$lo);
+    for (@_) {
+	if (/^0x([0-9a-f]*?)([0-9a-f]{1,8})$/io)
+	{  $hi=$1?"0x$1":"0"; $lo="0x$2";  }
+	elsif (/^([0-9]+)$/o)
+	{  $hi=$1>>32; $lo=$1&0xffffffff;  } # error-prone with 32-bit perl
+	else
+	{  $hi=undef; $lo=$_; }
+
+	if (defined($hi))
+	{  push(@ret,$flavour=~/le$/o?".long\t$lo,$hi":".long\t$hi,$lo");  }
+	else
+	{  push(@ret,".quad	$lo");  }
+    }
+    join("\n",@ret);
+};
+
+################################################################
+# simplified mnemonics not handled by at least one assembler
+################################################################
+my $cmplw = sub {
+    my $f = shift;
+    my $cr = 0; $cr = shift if ($#_>1);
+    # Some out-of-date 32-bit GNU assembler just can't handle cmplw...
+    ($flavour =~ /linux.*32/) ?
+	"	.long	".sprintf "0x%x",31<<26|$cr<<23|$_[0]<<16|$_[1]<<11|64 :
+	"	cmplw	".join(',',$cr,@_);
+};
+my $bdnz = sub {
+    my $f = shift;
+    my $bo = $f=~/[\+\-]/ ? 16+9 : 16;	# optional "to be taken" hint
+    "	bc	$bo,0,".shift;
+} if ($flavour!~/linux/);
+my $bltlr = sub {
+    my $f = shift;
+    my $bo = $f=~/\-/ ? 12+2 : 12;	# optional "not to be taken" hint
+    ($flavour =~ /linux/) ?		# GNU as doesn't allow most recent hints
+	"	.long	".sprintf "0x%x",19<<26|$bo<<21|16<<1 :
+	"	bclr	$bo,0";
+};
+my $bnelr = sub {
+    my $f = shift;
+    my $bo = $f=~/\-/ ? 4+2 : 4;	# optional "not to be taken" hint
+    ($flavour =~ /linux/) ?		# GNU as doesn't allow most recent hints
+	"	.long	".sprintf "0x%x",19<<26|$bo<<21|2<<16|16<<1 :
+	"	bclr	$bo,2";
+};
+my $beqlr = sub {
+    my $f = shift;
+    my $bo = $f=~/-/ ? 12+2 : 12;	# optional "not to be taken" hint
+    ($flavour =~ /linux/) ?		# GNU as doesn't allow most recent hints
+	"	.long	".sprintf "0x%X",19<<26|$bo<<21|2<<16|16<<1 :
+	"	bclr	$bo,2";
+};
+# GNU assembler can't handle extrdi rA,rS,16,48, or when sum of last two
+# arguments is 64, with "operand out of range" error.
+my $extrdi = sub {
+    my ($f,$ra,$rs,$n,$b) = @_;
+    $b = ($b+$n)&63; $n = 64-$n;
+    "	rldicl	$ra,$rs,$b,$n";
+};
+my $vmr = sub {
+    my ($f,$vx,$vy) = @_;
+    "	vor	$vx,$vy,$vy";
+};
+
+# Some ABIs specify vrsave, special-purpose register #256, as reserved
+# for system use.
+my $no_vrsave = ($flavour =~ /aix|linux64le/);
+my $mtspr = sub {
+    my ($f,$idx,$ra) = @_;
+    if ($idx == 256 && $no_vrsave) {
+	"	or	$ra,$ra,$ra";
+    } else {
+	"	mtspr	$idx,$ra";
+    }
+};
+my $mfspr = sub {
+    my ($f,$rd,$idx) = @_;
+    if ($idx == 256 && $no_vrsave) {
+	"	li	$rd,-1";
+    } else {
+	"	mfspr	$rd,$idx";
+    }
+};
+
+# PowerISA 2.06 stuff
+sub vsxmem_op {
+    my ($f, $vrt, $ra, $rb, $op) = @_;
+    "	.long	".sprintf "0x%X",(31<<26)|($vrt<<21)|($ra<<16)|($rb<<11)|($op*2+1);
+}
+# made-up unaligned memory reference AltiVec/VMX instructions
+my $lvx_u	= sub {	vsxmem_op(@_, 844); };	# lxvd2x
+my $stvx_u	= sub {	vsxmem_op(@_, 972); };	# stxvd2x
+my $lvdx_u	= sub {	vsxmem_op(@_, 588); };	# lxsdx
+my $stvdx_u	= sub {	vsxmem_op(@_, 716); };	# stxsdx
+my $lvx_4w	= sub { vsxmem_op(@_, 780); };	# lxvw4x
+my $stvx_4w	= sub { vsxmem_op(@_, 908); };	# stxvw4x
+my $lvx_splt	= sub { vsxmem_op(@_, 332); };	# lxvdsx
+# VSX instruction[s] masqueraded as made-up AltiVec/VMX
+my $vpermdi	= sub {				# xxpermdi
+    my ($f, $vrt, $vra, $vrb, $dm) = @_;
+    $dm = oct($dm) if ($dm =~ /^0/);
+    "	.long	".sprintf "0x%X",(60<<26)|($vrt<<21)|($vra<<16)|($vrb<<11)|($dm<<8)|(10<<3)|7;
+};
+
+# PowerISA 2.07 stuff
+sub vcrypto_op {
+    my ($f, $vrt, $vra, $vrb, $op) = @_;
+    "	.long	".sprintf "0x%X",(4<<26)|($vrt<<21)|($vra<<16)|($vrb<<11)|$op;
+}
+sub vfour {
+    my ($f, $vrt, $vra, $vrb, $vrc, $op) = @_;
+    "	.long	".sprintf "0x%X",(4<<26)|($vrt<<21)|($vra<<16)|($vrb<<11)|($vrc<<6)|$op;
+};
+my $vcipher	= sub { vcrypto_op(@_, 1288); };
+my $vcipherlast	= sub { vcrypto_op(@_, 1289); };
+my $vncipher	= sub { vcrypto_op(@_, 1352); };
+my $vncipherlast= sub { vcrypto_op(@_, 1353); };
+my $vsbox	= sub { vcrypto_op(@_, 0, 1480); };
+my $vshasigmad	= sub { my ($st,$six)=splice(@_,-2); vcrypto_op(@_, $st<<4|$six, 1730); };
+my $vshasigmaw	= sub { my ($st,$six)=splice(@_,-2); vcrypto_op(@_, $st<<4|$six, 1666); };
+my $vpmsumb	= sub { vcrypto_op(@_, 1032); };
+my $vpmsumd	= sub { vcrypto_op(@_, 1224); };
+my $vpmsubh	= sub { vcrypto_op(@_, 1096); };
+my $vpmsumw	= sub { vcrypto_op(@_, 1160); };
+# These are not really crypto, but vcrypto_op template works
+my $vaddudm	= sub { vcrypto_op(@_, 192);  };
+my $vadduqm	= sub { vcrypto_op(@_, 256);  };
+my $vmuleuw	= sub { vcrypto_op(@_, 648);  };
+my $vmulouw	= sub { vcrypto_op(@_, 136);  };
+my $vrld	= sub { vcrypto_op(@_, 196);  };
+my $vsld	= sub { vcrypto_op(@_, 1476); };
+my $vsrd	= sub { vcrypto_op(@_, 1732); };
+my $vsubudm	= sub { vcrypto_op(@_, 1216); };
+my $vaddcuq	= sub { vcrypto_op(@_, 320);  };
+my $vaddeuqm	= sub { vfour(@_,60); };
+my $vaddecuq	= sub { vfour(@_,61); };
+my $vmrgew	= sub { vfour(@_,0,1932); };
+my $vmrgow	= sub { vfour(@_,0,1676); };
+
+my $mtsle	= sub {
+    my ($f, $arg) = @_;
+    "	.long	".sprintf "0x%X",(31<<26)|($arg<<21)|(147*2);
+};
+
+# VSX instructions masqueraded as AltiVec/VMX
+my $mtvrd	= sub {
+    my ($f, $vrt, $ra) = @_;
+    "	.long	".sprintf "0x%X",(31<<26)|($vrt<<21)|($ra<<16)|(179<<1)|1;
+};
+my $mtvrwz	= sub {
+    my ($f, $vrt, $ra) = @_;
+    "	.long	".sprintf "0x%X",(31<<26)|($vrt<<21)|($ra<<16)|(243<<1)|1;
+};
+
+# PowerISA 3.0 stuff
+my $maddhdu	= sub { vfour(@_,49); };
+my $maddld	= sub { vfour(@_,51); };
+my $darn = sub {
+    my ($f, $rt, $l) = @_;
+    "	.long	".sprintf "0x%X",(31<<26)|($rt<<21)|($l<<16)|(755<<1);
+};
+my $iseleq = sub {
+    my ($f, $rt, $ra, $rb) = @_;
+    "	.long	".sprintf "0x%X",(31<<26)|($rt<<21)|($ra<<16)|($rb<<11)|(2<<6)|30;
+};
+# VSX instruction[s] masqueraded as made-up AltiVec/VMX
+my $vspltib	= sub {				# xxspltib
+    my ($f, $vrt, $imm8) = @_;
+    $imm8 = oct($imm8) if ($imm8 =~ /^0/);
+    $imm8 &= 0xff;
+    "	.long	".sprintf "0x%X",(60<<26)|($vrt<<21)|($imm8<<11)|(360<<1)|1;
+};
+
+# PowerISA 3.0B stuff
+my $addex = sub {
+    my ($f, $rt, $ra, $rb, $cy) = @_;	# only cy==0 is specified in 3.0B
+    "	.long	".sprintf "0x%X",(31<<26)|($rt<<21)|($ra<<16)|($rb<<11)|($cy<<9)|(170<<1);
+};
+my $vmsumudm	= sub { vfour(@_,35); };
+
+while($line=<>) {
+
+    $line =~ s|[#!;].*$||;	# get rid of asm-style comments...
+    $line =~ s|/\*.*\*/||;	# ... and C-style comments...
+    $line =~ s|^\s+||;		# ... and skip white spaces in beginning...
+    $line =~ s|\s+$||;		# ... and at the end
+
+    {
+	$line =~ s|\.L(\w+)|L$1|g;	# common denominator for Locallabel
+	$line =~ s|\bL(\w+)|\.L$1|g	if ($dotinlocallabels);
+    }
+
+    {
+	$line =~ s|(^[\.\w]+)\:\s*||;
+	my $label = $1;
+	if ($label) {
+	    my $xlated = ($GLOBALS{$label} or $label);
+	    print "$xlated:";
+	    if ($flavour =~ /linux.*64le/) {
+		if ($TYPES{$label} =~ /function/) {
+		    printf "\n.localentry	%s,0\n",$xlated;
+		}
+	    }
+	}
+    }
+
+    {
+	$line =~ s|^\s*(\.?)(\w+)([\.\+\-]?)\s*||;
+	my $c = $1; $c = "\t" if ($c eq "");
+	my $mnemonic = $2;
+	my $f = $3;
+	my $opcode = eval("\$$mnemonic");
+	$line =~ s/\b(c?[rf]|v|vs)([0-9]+)\b/$2/g if ($c ne "." and $flavour !~ /osx/);
+	if (ref($opcode) eq 'CODE') { $line = &$opcode($f,split(/,\s*/,$line)); }
+	elsif ($mnemonic)           { $line = $c.$mnemonic.$f."\t".$line; }
+    }
+
+    print $line if ($line);
+    print "\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/sparcv9_modes.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/sparcv9_modes.pl
new file mode 100644
index 000000000..b9922e031
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/sparcv9_modes.pl
@@ -0,0 +1,1702 @@
+#! /usr/bin/env perl
+# Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# Specific modes implementations for SPARC Architecture 2011. There
+# is T4 dependency though, an ASI value that is not specified in the
+# Architecture Manual. But as SPARC universe is rather monocultural,
+# we imply that processor capable of executing crypto instructions
+# can handle the ASI in question as well. This means that we ought to
+# keep eyes open when new processors emerge...
+#
+# As for above mentioned ASI. It's so called "block initializing
+# store" which cancels "read" in "read-update-write" on cache lines.
+# This is "cooperative" optimization, as it reduces overall pressure
+# on memory interface. Benefits can't be observed/quantified with
+# usual benchmarks, on the contrary you can notice that single-thread
+# performance for parallelizable modes is ~1.5% worse for largest
+# block sizes [though few percent better for not so long ones]. All
+# this based on suggestions from David Miller.
+
+$::bias="STACK_BIAS";
+$::frame="STACK_FRAME";
+$::size_t_cc="SIZE_T_CC";
+
+sub asm_init {		# to be called with @ARGV as argument
+    for (@_)		{ $::abibits=64 if (/\-m64/ || /\-xarch\=v9/); }
+    if ($::abibits==64)	{ $::bias=2047; $::frame=192; $::size_t_cc="%xcc"; }
+    else		{ $::bias=0;    $::frame=112; $::size_t_cc="%icc"; }
+}
+
+# unified interface
+my ($inp,$out,$len,$key,$ivec)=map("%i$_",(0..5));
+# local variables
+my ($ileft,$iright,$ooff,$omask,$ivoff,$blk_init)=map("%l$_",(0..7));
+
+sub alg_cbc_encrypt_implement {
+my ($alg,$bits) = @_;
+
+$::code.=<<___;
+.globl	${alg}${bits}_t4_cbc_encrypt
+.align	32
+${alg}${bits}_t4_cbc_encrypt:
+	save		%sp, -$::frame, %sp
+	cmp		$len, 0
+	be,pn		$::size_t_cc, .L${bits}_cbc_enc_abort
+	srln		$len, 0, $len		! needed on v8+, "nop" on v9
+	sub		$inp, $out, $blk_init	! $inp!=$out
+___
+$::code.=<<___ if (!$::evp);
+	andcc		$ivec, 7, $ivoff
+	alignaddr	$ivec, %g0, $ivec
+
+	ldd		[$ivec + 0], %f0	! load ivec
+	bz,pt		%icc, 1f
+	ldd		[$ivec + 8], %f2
+	ldd		[$ivec + 16], %f4
+	faligndata	%f0, %f2, %f0
+	faligndata	%f2, %f4, %f2
+1:
+___
+$::code.=<<___ if ($::evp);
+	ld		[$ivec + 0], %f0
+	ld		[$ivec + 4], %f1
+	ld		[$ivec + 8], %f2
+	ld		[$ivec + 12], %f3
+___
+$::code.=<<___;
+	prefetch	[$inp], 20
+	prefetch	[$inp + 63], 20
+	call		_${alg}${bits}_load_enckey
+	and		$inp, 7, $ileft
+	andn		$inp, 7, $inp
+	sll		$ileft, 3, $ileft
+	mov		64, $iright
+	mov		0xff, $omask
+	sub		$iright, $ileft, $iright
+	and		$out, 7, $ooff
+	cmp		$len, 127
+	movrnz		$ooff, 0, $blk_init		! if (	$out&7 ||
+	movleu		$::size_t_cc, 0, $blk_init	!	$len<128 ||
+	brnz,pn		$blk_init, .L${bits}cbc_enc_blk	!	$inp==$out)
+	srl		$omask, $ooff, $omask
+
+	alignaddrl	$out, %g0, $out
+	srlx		$len, 4, $len
+	prefetch	[$out], 22
+
+.L${bits}_cbc_enc_loop:
+	ldx		[$inp + 0], %o0
+	brz,pt		$ileft, 4f
+	ldx		[$inp + 8], %o1
+
+	ldx		[$inp + 16], %o2
+	sllx		%o0, $ileft, %o0
+	srlx		%o1, $iright, %g1
+	sllx		%o1, $ileft, %o1
+	or		%g1, %o0, %o0
+	srlx		%o2, $iright, %o2
+	or		%o2, %o1, %o1
+4:
+	xor		%g4, %o0, %o0		! ^= rk[0]
+	xor		%g5, %o1, %o1
+	movxtod		%o0, %f12
+	movxtod		%o1, %f14
+
+	fxor		%f12, %f0, %f0		! ^= ivec
+	fxor		%f14, %f2, %f2
+	prefetch	[$out + 63], 22
+	prefetch	[$inp + 16+63], 20
+	call		_${alg}${bits}_encrypt_1x
+	add		$inp, 16, $inp
+
+	brnz,pn		$ooff, 2f
+	sub		$len, 1, $len
+
+	std		%f0, [$out + 0]
+	std		%f2, [$out + 8]
+	brnz,pt		$len, .L${bits}_cbc_enc_loop
+	add		$out, 16, $out
+___
+$::code.=<<___ if ($::evp);
+	st		%f0, [$ivec + 0]
+	st		%f1, [$ivec + 4]
+	st		%f2, [$ivec + 8]
+	st		%f3, [$ivec + 12]
+___
+$::code.=<<___ if (!$::evp);
+	brnz,pn		$ivoff, 3f
+	nop
+
+	std		%f0, [$ivec + 0]	! write out ivec
+	std		%f2, [$ivec + 8]
+___
+$::code.=<<___;
+.L${bits}_cbc_enc_abort:
+	ret
+	restore
+
+.align	16
+2:	ldxa		[$inp]0x82, %o0		! avoid read-after-write hazard
+						! and ~3x deterioration
+						! in inp==out case
+	faligndata	%f0, %f0, %f4		! handle unaligned output
+	faligndata	%f0, %f2, %f6
+	faligndata	%f2, %f2, %f8
+
+	stda		%f4, [$out + $omask]0xc0	! partial store
+	std		%f6, [$out + 8]
+	add		$out, 16, $out
+	orn		%g0, $omask, $omask
+	stda		%f8, [$out + $omask]0xc0	! partial store
+
+	brnz,pt		$len, .L${bits}_cbc_enc_loop+4
+	orn		%g0, $omask, $omask
+___
+$::code.=<<___ if ($::evp);
+	st		%f0, [$ivec + 0]
+	st		%f1, [$ivec + 4]
+	st		%f2, [$ivec + 8]
+	st		%f3, [$ivec + 12]
+___
+$::code.=<<___ if (!$::evp);
+	brnz,pn		$ivoff, 3f
+	nop
+
+	std		%f0, [$ivec + 0]	! write out ivec
+	std		%f2, [$ivec + 8]
+	ret
+	restore
+
+.align	16
+3:	alignaddrl	$ivec, $ivoff, %g0	! handle unaligned ivec
+	mov		0xff, $omask
+	srl		$omask, $ivoff, $omask
+	faligndata	%f0, %f0, %f4
+	faligndata	%f0, %f2, %f6
+	faligndata	%f2, %f2, %f8
+	stda		%f4, [$ivec + $omask]0xc0
+	std		%f6, [$ivec + 8]
+	add		$ivec, 16, $ivec
+	orn		%g0, $omask, $omask
+	stda		%f8, [$ivec + $omask]0xc0
+___
+$::code.=<<___;
+	ret
+	restore
+
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+.align	32
+.L${bits}cbc_enc_blk:
+	add	$out, $len, $blk_init
+	and	$blk_init, 63, $blk_init	! tail
+	sub	$len, $blk_init, $len
+	add	$blk_init, 15, $blk_init	! round up to 16n
+	srlx	$len, 4, $len
+	srl	$blk_init, 4, $blk_init
+
+.L${bits}_cbc_enc_blk_loop:
+	ldx		[$inp + 0], %o0
+	brz,pt		$ileft, 5f
+	ldx		[$inp + 8], %o1
+
+	ldx		[$inp + 16], %o2
+	sllx		%o0, $ileft, %o0
+	srlx		%o1, $iright, %g1
+	sllx		%o1, $ileft, %o1
+	or		%g1, %o0, %o0
+	srlx		%o2, $iright, %o2
+	or		%o2, %o1, %o1
+5:
+	xor		%g4, %o0, %o0		! ^= rk[0]
+	xor		%g5, %o1, %o1
+	movxtod		%o0, %f12
+	movxtod		%o1, %f14
+
+	fxor		%f12, %f0, %f0		! ^= ivec
+	fxor		%f14, %f2, %f2
+	prefetch	[$inp + 16+63], 20
+	call		_${alg}${bits}_encrypt_1x
+	add		$inp, 16, $inp
+	sub		$len, 1, $len
+
+	stda		%f0, [$out]0xe2		! ASI_BLK_INIT, T4-specific
+	add		$out, 8, $out
+	stda		%f2, [$out]0xe2		! ASI_BLK_INIT, T4-specific
+	brnz,pt		$len, .L${bits}_cbc_enc_blk_loop
+	add		$out, 8, $out
+
+	membar		#StoreLoad|#StoreStore
+	brnz,pt		$blk_init, .L${bits}_cbc_enc_loop
+	mov		$blk_init, $len
+___
+$::code.=<<___ if ($::evp);
+	st		%f0, [$ivec + 0]
+	st		%f1, [$ivec + 4]
+	st		%f2, [$ivec + 8]
+	st		%f3, [$ivec + 12]
+___
+$::code.=<<___ if (!$::evp);
+	brnz,pn		$ivoff, 3b
+	nop
+
+	std		%f0, [$ivec + 0]	! write out ivec
+	std		%f2, [$ivec + 8]
+___
+$::code.=<<___;
+	ret
+	restore
+.type	${alg}${bits}_t4_cbc_encrypt,#function
+.size	${alg}${bits}_t4_cbc_encrypt,.-${alg}${bits}_t4_cbc_encrypt
+___
+}
+
+sub alg_cbc_decrypt_implement {
+my ($alg,$bits) = @_;
+
+$::code.=<<___;
+.globl	${alg}${bits}_t4_cbc_decrypt
+.align	32
+${alg}${bits}_t4_cbc_decrypt:
+	save		%sp, -$::frame, %sp
+	cmp		$len, 0
+	be,pn		$::size_t_cc, .L${bits}_cbc_dec_abort
+	srln		$len, 0, $len		! needed on v8+, "nop" on v9
+	sub		$inp, $out, $blk_init	! $inp!=$out
+___
+$::code.=<<___ if (!$::evp);
+	andcc		$ivec, 7, $ivoff
+	alignaddr	$ivec, %g0, $ivec
+
+	ldd		[$ivec + 0], %f12	! load ivec
+	bz,pt		%icc, 1f
+	ldd		[$ivec + 8], %f14
+	ldd		[$ivec + 16], %f0
+	faligndata	%f12, %f14, %f12
+	faligndata	%f14, %f0, %f14
+1:
+___
+$::code.=<<___ if ($::evp);
+	ld		[$ivec + 0], %f12	! load ivec
+	ld		[$ivec + 4], %f13
+	ld		[$ivec + 8], %f14
+	ld		[$ivec + 12], %f15
+___
+$::code.=<<___;
+	prefetch	[$inp], 20
+	prefetch	[$inp + 63], 20
+	call		_${alg}${bits}_load_deckey
+	and		$inp, 7, $ileft
+	andn		$inp, 7, $inp
+	sll		$ileft, 3, $ileft
+	mov		64, $iright
+	mov		0xff, $omask
+	sub		$iright, $ileft, $iright
+	and		$out, 7, $ooff
+	cmp		$len, 255
+	movrnz		$ooff, 0, $blk_init		! if (	$out&7 ||
+	movleu		$::size_t_cc, 0, $blk_init	!	$len<256 ||
+	brnz,pn		$blk_init, .L${bits}cbc_dec_blk	!	$inp==$out)
+	srl		$omask, $ooff, $omask
+
+	andcc		$len, 16, %g0		! is number of blocks even?
+	srlx		$len, 4, $len
+	alignaddrl	$out, %g0, $out
+	bz		%icc, .L${bits}_cbc_dec_loop2x
+	prefetch	[$out], 22
+.L${bits}_cbc_dec_loop:
+	ldx		[$inp + 0], %o0
+	brz,pt		$ileft, 4f
+	ldx		[$inp + 8], %o1
+
+	ldx		[$inp + 16], %o2
+	sllx		%o0, $ileft, %o0
+	srlx		%o1, $iright, %g1
+	sllx		%o1, $ileft, %o1
+	or		%g1, %o0, %o0
+	srlx		%o2, $iright, %o2
+	or		%o2, %o1, %o1
+4:
+	xor		%g4, %o0, %o2		! ^= rk[0]
+	xor		%g5, %o1, %o3
+	movxtod		%o2, %f0
+	movxtod		%o3, %f2
+
+	prefetch	[$out + 63], 22
+	prefetch	[$inp + 16+63], 20
+	call		_${alg}${bits}_decrypt_1x
+	add		$inp, 16, $inp
+
+	fxor		%f12, %f0, %f0		! ^= ivec
+	fxor		%f14, %f2, %f2
+	movxtod		%o0, %f12
+	movxtod		%o1, %f14
+
+	brnz,pn		$ooff, 2f
+	sub		$len, 1, $len
+
+	std		%f0, [$out + 0]
+	std		%f2, [$out + 8]
+	brnz,pt		$len, .L${bits}_cbc_dec_loop2x
+	add		$out, 16, $out
+___
+$::code.=<<___ if ($::evp);
+	st		%f12, [$ivec + 0]
+	st		%f13, [$ivec + 4]
+	st		%f14, [$ivec + 8]
+	st		%f15, [$ivec + 12]
+___
+$::code.=<<___ if (!$::evp);
+	brnz,pn		$ivoff, .L${bits}_cbc_dec_unaligned_ivec
+	nop
+
+	std		%f12, [$ivec + 0]	! write out ivec
+	std		%f14, [$ivec + 8]
+___
+$::code.=<<___;
+.L${bits}_cbc_dec_abort:
+	ret
+	restore
+
+.align	16
+2:	ldxa		[$inp]0x82, %o0		! avoid read-after-write hazard
+						! and ~3x deterioration
+						! in inp==out case
+	faligndata	%f0, %f0, %f4		! handle unaligned output
+	faligndata	%f0, %f2, %f6
+	faligndata	%f2, %f2, %f8
+
+	stda		%f4, [$out + $omask]0xc0	! partial store
+	std		%f6, [$out + 8]
+	add		$out, 16, $out
+	orn		%g0, $omask, $omask
+	stda		%f8, [$out + $omask]0xc0	! partial store
+
+	brnz,pt		$len, .L${bits}_cbc_dec_loop2x+4
+	orn		%g0, $omask, $omask
+___
+$::code.=<<___ if ($::evp);
+	st		%f12, [$ivec + 0]
+	st		%f13, [$ivec + 4]
+	st		%f14, [$ivec + 8]
+	st		%f15, [$ivec + 12]
+___
+$::code.=<<___ if (!$::evp);
+	brnz,pn		$ivoff, .L${bits}_cbc_dec_unaligned_ivec
+	nop
+
+	std		%f12, [$ivec + 0]	! write out ivec
+	std		%f14, [$ivec + 8]
+___
+$::code.=<<___;
+	ret
+	restore
+
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+.align	32
+.L${bits}_cbc_dec_loop2x:
+	ldx		[$inp + 0], %o0
+	ldx		[$inp + 8], %o1
+	ldx		[$inp + 16], %o2
+	brz,pt		$ileft, 4f
+	ldx		[$inp + 24], %o3
+
+	ldx		[$inp + 32], %o4
+	sllx		%o0, $ileft, %o0
+	srlx		%o1, $iright, %g1
+	or		%g1, %o0, %o0
+	sllx		%o1, $ileft, %o1
+	srlx		%o2, $iright, %g1
+	or		%g1, %o1, %o1
+	sllx		%o2, $ileft, %o2
+	srlx		%o3, $iright, %g1
+	or		%g1, %o2, %o2
+	sllx		%o3, $ileft, %o3
+	srlx		%o4, $iright, %o4
+	or		%o4, %o3, %o3
+4:
+	xor		%g4, %o0, %o4		! ^= rk[0]
+	xor		%g5, %o1, %o5
+	movxtod		%o4, %f0
+	movxtod		%o5, %f2
+	xor		%g4, %o2, %o4
+	xor		%g5, %o3, %o5
+	movxtod		%o4, %f4
+	movxtod		%o5, %f6
+
+	prefetch	[$out + 63], 22
+	prefetch	[$inp + 32+63], 20
+	call		_${alg}${bits}_decrypt_2x
+	add		$inp, 32, $inp
+
+	movxtod		%o0, %f8
+	movxtod		%o1, %f10
+	fxor		%f12, %f0, %f0		! ^= ivec
+	fxor		%f14, %f2, %f2
+	movxtod		%o2, %f12
+	movxtod		%o3, %f14
+	fxor		%f8, %f4, %f4
+	fxor		%f10, %f6, %f6
+
+	brnz,pn		$ooff, 2f
+	sub		$len, 2, $len
+
+	std		%f0, [$out + 0]
+	std		%f2, [$out + 8]
+	std		%f4, [$out + 16]
+	std		%f6, [$out + 24]
+	brnz,pt		$len, .L${bits}_cbc_dec_loop2x
+	add		$out, 32, $out
+___
+$::code.=<<___ if ($::evp);
+	st		%f12, [$ivec + 0]
+	st		%f13, [$ivec + 4]
+	st		%f14, [$ivec + 8]
+	st		%f15, [$ivec + 12]
+___
+$::code.=<<___ if (!$::evp);
+	brnz,pn		$ivoff, .L${bits}_cbc_dec_unaligned_ivec
+	nop
+
+	std		%f12, [$ivec + 0]	! write out ivec
+	std		%f14, [$ivec + 8]
+___
+$::code.=<<___;
+	ret
+	restore
+
+.align	16
+2:	ldxa		[$inp]0x82, %o0		! avoid read-after-write hazard
+						! and ~3x deterioration
+						! in inp==out case
+	faligndata	%f0, %f0, %f8		! handle unaligned output
+	faligndata	%f0, %f2, %f0
+	faligndata	%f2, %f4, %f2
+	faligndata	%f4, %f6, %f4
+	faligndata	%f6, %f6, %f6
+	stda		%f8, [$out + $omask]0xc0	! partial store
+	std		%f0, [$out + 8]
+	std		%f2, [$out + 16]
+	std		%f4, [$out + 24]
+	add		$out, 32, $out
+	orn		%g0, $omask, $omask
+	stda		%f6, [$out + $omask]0xc0	! partial store
+
+	brnz,pt		$len, .L${bits}_cbc_dec_loop2x+4
+	orn		%g0, $omask, $omask
+___
+$::code.=<<___ if ($::evp);
+	st		%f12, [$ivec + 0]
+	st		%f13, [$ivec + 4]
+	st		%f14, [$ivec + 8]
+	st		%f15, [$ivec + 12]
+___
+$::code.=<<___ if (!$::evp);
+	brnz,pn		$ivoff, .L${bits}_cbc_dec_unaligned_ivec
+	nop
+
+	std		%f12, [$ivec + 0]	! write out ivec
+	std		%f14, [$ivec + 8]
+	ret
+	restore
+
+.align	16
+.L${bits}_cbc_dec_unaligned_ivec:
+	alignaddrl	$ivec, $ivoff, %g0	! handle unaligned ivec
+	mov		0xff, $omask
+	srl		$omask, $ivoff, $omask
+	faligndata	%f12, %f12, %f0
+	faligndata	%f12, %f14, %f2
+	faligndata	%f14, %f14, %f4
+	stda		%f0, [$ivec + $omask]0xc0
+	std		%f2, [$ivec + 8]
+	add		$ivec, 16, $ivec
+	orn		%g0, $omask, $omask
+	stda		%f4, [$ivec + $omask]0xc0
+___
+$::code.=<<___;
+	ret
+	restore
+
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+.align	32
+.L${bits}cbc_dec_blk:
+	add	$out, $len, $blk_init
+	and	$blk_init, 63, $blk_init	! tail
+	sub	$len, $blk_init, $len
+	add	$blk_init, 15, $blk_init	! round up to 16n
+	srlx	$len, 4, $len
+	srl	$blk_init, 4, $blk_init
+	sub	$len, 1, $len
+	add	$blk_init, 1, $blk_init
+
+.L${bits}_cbc_dec_blk_loop2x:
+	ldx		[$inp + 0], %o0
+	ldx		[$inp + 8], %o1
+	ldx		[$inp + 16], %o2
+	brz,pt		$ileft, 5f
+	ldx		[$inp + 24], %o3
+
+	ldx		[$inp + 32], %o4
+	sllx		%o0, $ileft, %o0
+	srlx		%o1, $iright, %g1
+	or		%g1, %o0, %o0
+	sllx		%o1, $ileft, %o1
+	srlx		%o2, $iright, %g1
+	or		%g1, %o1, %o1
+	sllx		%o2, $ileft, %o2
+	srlx		%o3, $iright, %g1
+	or		%g1, %o2, %o2
+	sllx		%o3, $ileft, %o3
+	srlx		%o4, $iright, %o4
+	or		%o4, %o3, %o3
+5:
+	xor		%g4, %o0, %o4		! ^= rk[0]
+	xor		%g5, %o1, %o5
+	movxtod		%o4, %f0
+	movxtod		%o5, %f2
+	xor		%g4, %o2, %o4
+	xor		%g5, %o3, %o5
+	movxtod		%o4, %f4
+	movxtod		%o5, %f6
+
+	prefetch	[$inp + 32+63], 20
+	call		_${alg}${bits}_decrypt_2x
+	add		$inp, 32, $inp
+	subcc		$len, 2, $len
+
+	movxtod		%o0, %f8
+	movxtod		%o1, %f10
+	fxor		%f12, %f0, %f0		! ^= ivec
+	fxor		%f14, %f2, %f2
+	movxtod		%o2, %f12
+	movxtod		%o3, %f14
+	fxor		%f8, %f4, %f4
+	fxor		%f10, %f6, %f6
+
+	stda		%f0, [$out]0xe2		! ASI_BLK_INIT, T4-specific
+	add		$out, 8, $out
+	stda		%f2, [$out]0xe2		! ASI_BLK_INIT, T4-specific
+	add		$out, 8, $out
+	stda		%f4, [$out]0xe2		! ASI_BLK_INIT, T4-specific
+	add		$out, 8, $out
+	stda		%f6, [$out]0xe2		! ASI_BLK_INIT, T4-specific
+	bgu,pt		$::size_t_cc, .L${bits}_cbc_dec_blk_loop2x
+	add		$out, 8, $out
+
+	add		$blk_init, $len, $len
+	andcc		$len, 1, %g0		! is number of blocks even?
+	membar		#StoreLoad|#StoreStore
+	bnz,pt		%icc, .L${bits}_cbc_dec_loop
+	srl		$len, 0, $len
+	brnz,pn		$len, .L${bits}_cbc_dec_loop2x
+	nop
+___
+$::code.=<<___ if ($::evp);
+	st		%f12, [$ivec + 0]	! write out ivec
+	st		%f13, [$ivec + 4]
+	st		%f14, [$ivec + 8]
+	st		%f15, [$ivec + 12]
+___
+$::code.=<<___ if (!$::evp);
+	brnz,pn		$ivoff, 3b
+	nop
+
+	std		%f12, [$ivec + 0]	! write out ivec
+	std		%f14, [$ivec + 8]
+___
+$::code.=<<___;
+	ret
+	restore
+.type	${alg}${bits}_t4_cbc_decrypt,#function
+.size	${alg}${bits}_t4_cbc_decrypt,.-${alg}${bits}_t4_cbc_decrypt
+___
+}
+
+sub alg_ctr32_implement {
+my ($alg,$bits) = @_;
+
+$::code.=<<___;
+.globl	${alg}${bits}_t4_ctr32_encrypt
+.align	32
+${alg}${bits}_t4_ctr32_encrypt:
+	save		%sp, -$::frame, %sp
+	srln		$len, 0, $len		! needed on v8+, "nop" on v9
+
+	prefetch	[$inp], 20
+	prefetch	[$inp + 63], 20
+	call		_${alg}${bits}_load_enckey
+	sllx		$len, 4, $len
+
+	ld		[$ivec + 0], %l4	! counter
+	ld		[$ivec + 4], %l5
+	ld		[$ivec + 8], %l6
+	ld		[$ivec + 12], %l7
+
+	sllx		%l4, 32, %o5
+	or		%l5, %o5, %o5
+	sllx		%l6, 32, %g1
+	xor		%o5, %g4, %g4		! ^= rk[0]
+	xor		%g1, %g5, %g5
+	movxtod		%g4, %f14		! most significant 64 bits
+
+	sub		$inp, $out, $blk_init	! $inp!=$out
+	and		$inp, 7, $ileft
+	andn		$inp, 7, $inp
+	sll		$ileft, 3, $ileft
+	mov		64, $iright
+	mov		0xff, $omask
+	sub		$iright, $ileft, $iright
+	and		$out, 7, $ooff
+	cmp		$len, 255
+	movrnz		$ooff, 0, $blk_init		! if (	$out&7 ||
+	movleu		$::size_t_cc, 0, $blk_init	!	$len<256 ||
+	brnz,pn		$blk_init, .L${bits}_ctr32_blk	!	$inp==$out)
+	srl		$omask, $ooff, $omask
+
+	andcc		$len, 16, %g0		! is number of blocks even?
+	alignaddrl	$out, %g0, $out
+	bz		%icc, .L${bits}_ctr32_loop2x
+	srlx		$len, 4, $len
+.L${bits}_ctr32_loop:
+	ldx		[$inp + 0], %o0
+	brz,pt		$ileft, 4f
+	ldx		[$inp + 8], %o1
+
+	ldx		[$inp + 16], %o2
+	sllx		%o0, $ileft, %o0
+	srlx		%o1, $iright, %g1
+	sllx		%o1, $ileft, %o1
+	or		%g1, %o0, %o0
+	srlx		%o2, $iright, %o2
+	or		%o2, %o1, %o1
+4:
+	xor		%g5, %l7, %g1		! ^= rk[0]
+	add		%l7, 1, %l7
+	movxtod		%g1, %f2
+	srl		%l7, 0, %l7		! clruw
+	prefetch	[$out + 63], 22
+	prefetch	[$inp + 16+63], 20
+___
+$::code.=<<___ if ($alg eq "aes");
+	aes_eround01	%f16, %f14, %f2, %f4
+	aes_eround23	%f18, %f14, %f2, %f2
+___
+$::code.=<<___ if ($alg eq "cmll");
+	camellia_f	%f16, %f2, %f14, %f2
+	camellia_f	%f18, %f14, %f2, %f0
+___
+$::code.=<<___;
+	call		_${alg}${bits}_encrypt_1x+8
+	add		$inp, 16, $inp
+
+	movxtod		%o0, %f10
+	movxtod		%o1, %f12
+	fxor		%f10, %f0, %f0		! ^= inp
+	fxor		%f12, %f2, %f2
+
+	brnz,pn		$ooff, 2f
+	sub		$len, 1, $len
+
+	std		%f0, [$out + 0]
+	std		%f2, [$out + 8]
+	brnz,pt		$len, .L${bits}_ctr32_loop2x
+	add		$out, 16, $out
+
+	ret
+	restore
+
+.align	16
+2:	ldxa		[$inp]0x82, %o0		! avoid read-after-write hazard
+						! and ~3x deterioration
+						! in inp==out case
+	faligndata	%f0, %f0, %f4		! handle unaligned output
+	faligndata	%f0, %f2, %f6
+	faligndata	%f2, %f2, %f8
+	stda		%f4, [$out + $omask]0xc0	! partial store
+	std		%f6, [$out + 8]
+	add		$out, 16, $out
+	orn		%g0, $omask, $omask
+	stda		%f8, [$out + $omask]0xc0	! partial store
+
+	brnz,pt		$len, .L${bits}_ctr32_loop2x+4
+	orn		%g0, $omask, $omask
+
+	ret
+	restore
+
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+.align	32
+.L${bits}_ctr32_loop2x:
+	ldx		[$inp + 0], %o0
+	ldx		[$inp + 8], %o1
+	ldx		[$inp + 16], %o2
+	brz,pt		$ileft, 4f
+	ldx		[$inp + 24], %o3
+
+	ldx		[$inp + 32], %o4
+	sllx		%o0, $ileft, %o0
+	srlx		%o1, $iright, %g1
+	or		%g1, %o0, %o0
+	sllx		%o1, $ileft, %o1
+	srlx		%o2, $iright, %g1
+	or		%g1, %o1, %o1
+	sllx		%o2, $ileft, %o2
+	srlx		%o3, $iright, %g1
+	or		%g1, %o2, %o2
+	sllx		%o3, $ileft, %o3
+	srlx		%o4, $iright, %o4
+	or		%o4, %o3, %o3
+4:
+	xor		%g5, %l7, %g1		! ^= rk[0]
+	add		%l7, 1, %l7
+	movxtod		%g1, %f2
+	srl		%l7, 0, %l7		! clruw
+	xor		%g5, %l7, %g1
+	add		%l7, 1, %l7
+	movxtod		%g1, %f6
+	srl		%l7, 0, %l7		! clruw
+	prefetch	[$out + 63], 22
+	prefetch	[$inp + 32+63], 20
+___
+$::code.=<<___ if ($alg eq "aes");
+	aes_eround01	%f16, %f14, %f2, %f8
+	aes_eround23	%f18, %f14, %f2, %f2
+	aes_eround01	%f16, %f14, %f6, %f10
+	aes_eround23	%f18, %f14, %f6, %f6
+___
+$::code.=<<___ if ($alg eq "cmll");
+	camellia_f	%f16, %f2, %f14, %f2
+	camellia_f	%f16, %f6, %f14, %f6
+	camellia_f	%f18, %f14, %f2, %f0
+	camellia_f	%f18, %f14, %f6, %f4
+___
+$::code.=<<___;
+	call		_${alg}${bits}_encrypt_2x+16
+	add		$inp, 32, $inp
+
+	movxtod		%o0, %f8
+	movxtod		%o1, %f10
+	movxtod		%o2, %f12
+	fxor		%f8, %f0, %f0		! ^= inp
+	movxtod		%o3, %f8
+	fxor		%f10, %f2, %f2
+	fxor		%f12, %f4, %f4
+	fxor		%f8, %f6, %f6
+
+	brnz,pn		$ooff, 2f
+	sub		$len, 2, $len
+
+	std		%f0, [$out + 0]
+	std		%f2, [$out + 8]
+	std		%f4, [$out + 16]
+	std		%f6, [$out + 24]
+	brnz,pt		$len, .L${bits}_ctr32_loop2x
+	add		$out, 32, $out
+
+	ret
+	restore
+
+.align	16
+2:	ldxa		[$inp]0x82, %o0		! avoid read-after-write hazard
+						! and ~3x deterioration
+						! in inp==out case
+	faligndata	%f0, %f0, %f8		! handle unaligned output
+	faligndata	%f0, %f2, %f0
+	faligndata	%f2, %f4, %f2
+	faligndata	%f4, %f6, %f4
+	faligndata	%f6, %f6, %f6
+
+	stda		%f8, [$out + $omask]0xc0	! partial store
+	std		%f0, [$out + 8]
+	std		%f2, [$out + 16]
+	std		%f4, [$out + 24]
+	add		$out, 32, $out
+	orn		%g0, $omask, $omask
+	stda		%f6, [$out + $omask]0xc0	! partial store
+
+	brnz,pt		$len, .L${bits}_ctr32_loop2x+4
+	orn		%g0, $omask, $omask
+
+	ret
+	restore
+
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+.align	32
+.L${bits}_ctr32_blk:
+	add	$out, $len, $blk_init
+	and	$blk_init, 63, $blk_init	! tail
+	sub	$len, $blk_init, $len
+	add	$blk_init, 15, $blk_init	! round up to 16n
+	srlx	$len, 4, $len
+	srl	$blk_init, 4, $blk_init
+	sub	$len, 1, $len
+	add	$blk_init, 1, $blk_init
+
+.L${bits}_ctr32_blk_loop2x:
+	ldx		[$inp + 0], %o0
+	ldx		[$inp + 8], %o1
+	ldx		[$inp + 16], %o2
+	brz,pt		$ileft, 5f
+	ldx		[$inp + 24], %o3
+
+	ldx		[$inp + 32], %o4
+	sllx		%o0, $ileft, %o0
+	srlx		%o1, $iright, %g1
+	or		%g1, %o0, %o0
+	sllx		%o1, $ileft, %o1
+	srlx		%o2, $iright, %g1
+	or		%g1, %o1, %o1
+	sllx		%o2, $ileft, %o2
+	srlx		%o3, $iright, %g1
+	or		%g1, %o2, %o2
+	sllx		%o3, $ileft, %o3
+	srlx		%o4, $iright, %o4
+	or		%o4, %o3, %o3
+5:
+	xor		%g5, %l7, %g1		! ^= rk[0]
+	add		%l7, 1, %l7
+	movxtod		%g1, %f2
+	srl		%l7, 0, %l7		! clruw
+	xor		%g5, %l7, %g1
+	add		%l7, 1, %l7
+	movxtod		%g1, %f6
+	srl		%l7, 0, %l7		! clruw
+	prefetch	[$inp + 32+63], 20
+___
+$::code.=<<___ if ($alg eq "aes");
+	aes_eround01	%f16, %f14, %f2, %f8
+	aes_eround23	%f18, %f14, %f2, %f2
+	aes_eround01	%f16, %f14, %f6, %f10
+	aes_eround23	%f18, %f14, %f6, %f6
+___
+$::code.=<<___ if ($alg eq "cmll");
+	camellia_f	%f16, %f2, %f14, %f2
+	camellia_f	%f16, %f6, %f14, %f6
+	camellia_f	%f18, %f14, %f2, %f0
+	camellia_f	%f18, %f14, %f6, %f4
+___
+$::code.=<<___;
+	call		_${alg}${bits}_encrypt_2x+16
+	add		$inp, 32, $inp
+	subcc		$len, 2, $len
+
+	movxtod		%o0, %f8
+	movxtod		%o1, %f10
+	movxtod		%o2, %f12
+	fxor		%f8, %f0, %f0		! ^= inp
+	movxtod		%o3, %f8
+	fxor		%f10, %f2, %f2
+	fxor		%f12, %f4, %f4
+	fxor		%f8, %f6, %f6
+
+	stda		%f0, [$out]0xe2		! ASI_BLK_INIT, T4-specific
+	add		$out, 8, $out
+	stda		%f2, [$out]0xe2		! ASI_BLK_INIT, T4-specific
+	add		$out, 8, $out
+	stda		%f4, [$out]0xe2		! ASI_BLK_INIT, T4-specific
+	add		$out, 8, $out
+	stda		%f6, [$out]0xe2		! ASI_BLK_INIT, T4-specific
+	bgu,pt		$::size_t_cc, .L${bits}_ctr32_blk_loop2x
+	add		$out, 8, $out
+
+	add		$blk_init, $len, $len
+	andcc		$len, 1, %g0		! is number of blocks even?
+	membar		#StoreLoad|#StoreStore
+	bnz,pt		%icc, .L${bits}_ctr32_loop
+	srl		$len, 0, $len
+	brnz,pn		$len, .L${bits}_ctr32_loop2x
+	nop
+
+	ret
+	restore
+.type	${alg}${bits}_t4_ctr32_encrypt,#function
+.size	${alg}${bits}_t4_ctr32_encrypt,.-${alg}${bits}_t4_ctr32_encrypt
+___
+}
+
+sub alg_xts_implement {
+my ($alg,$bits,$dir) = @_;
+my ($inp,$out,$len,$key1,$key2,$ivec)=map("%i$_",(0..5));
+my $rem=$ivec;
+
+$::code.=<<___;
+.globl	${alg}${bits}_t4_xts_${dir}crypt
+.align	32
+${alg}${bits}_t4_xts_${dir}crypt:
+	save		%sp, -$::frame-16, %sp
+	srln		$len, 0, $len		! needed on v8+, "nop" on v9
+
+	mov		$ivec, %o0
+	add		%fp, $::bias-16, %o1
+	call		${alg}_t4_encrypt
+	mov		$key2, %o2
+
+	add		%fp, $::bias-16, %l7
+	ldxa		[%l7]0x88, %g2
+	add		%fp, $::bias-8, %l7
+	ldxa		[%l7]0x88, %g3		! %g3:%g2 is tweak
+
+	sethi		%hi(0x76543210), %l7
+	or		%l7, %lo(0x76543210), %l7
+	bmask		%l7, %g0, %g0		! byte swap mask
+
+	prefetch	[$inp], 20
+	prefetch	[$inp + 63], 20
+	call		_${alg}${bits}_load_${dir}ckey
+	and		$len, 15,  $rem
+	and		$len, -16, $len
+___
+$code.=<<___ if ($dir eq "de");
+	mov		0, %l7
+	movrnz		$rem, 16,  %l7
+	sub		$len, %l7, $len
+___
+$code.=<<___;
+
+	sub		$inp, $out, $blk_init	! $inp!=$out
+	and		$inp, 7, $ileft
+	andn		$inp, 7, $inp
+	sll		$ileft, 3, $ileft
+	mov		64, $iright
+	mov		0xff, $omask
+	sub		$iright, $ileft, $iright
+	and		$out, 7, $ooff
+	cmp		$len, 255
+	movrnz		$ooff, 0, $blk_init		! if (	$out&7 ||
+	movleu		$::size_t_cc, 0, $blk_init	!	$len<256 ||
+	brnz,pn		$blk_init, .L${bits}_xts_${dir}blk !	$inp==$out)
+	srl		$omask, $ooff, $omask
+
+	andcc		$len, 16, %g0		! is number of blocks even?
+___
+$code.=<<___ if ($dir eq "de");
+	brz,pn		$len, .L${bits}_xts_${dir}steal
+___
+$code.=<<___;
+	alignaddrl	$out, %g0, $out
+	bz		%icc, .L${bits}_xts_${dir}loop2x
+	srlx		$len, 4, $len
+.L${bits}_xts_${dir}loop:
+	ldx		[$inp + 0], %o0
+	brz,pt		$ileft, 4f
+	ldx		[$inp + 8], %o1
+
+	ldx		[$inp + 16], %o2
+	sllx		%o0, $ileft, %o0
+	srlx		%o1, $iright, %g1
+	sllx		%o1, $ileft, %o1
+	or		%g1, %o0, %o0
+	srlx		%o2, $iright, %o2
+	or		%o2, %o1, %o1
+4:
+	movxtod		%g2, %f12
+	movxtod		%g3, %f14
+	bshuffle	%f12, %f12, %f12
+	bshuffle	%f14, %f14, %f14
+
+	xor		%g4, %o0, %o0		! ^= rk[0]
+	xor		%g5, %o1, %o1
+	movxtod		%o0, %f0
+	movxtod		%o1, %f2
+
+	fxor		%f12, %f0, %f0		! ^= tweak[0]
+	fxor		%f14, %f2, %f2
+
+	prefetch	[$out + 63], 22
+	prefetch	[$inp + 16+63], 20
+	call		_${alg}${bits}_${dir}crypt_1x
+	add		$inp, 16, $inp
+
+	fxor		%f12, %f0, %f0		! ^= tweak[0]
+	fxor		%f14, %f2, %f2
+
+	srax		%g3, 63, %l7		! next tweak value
+	addcc		%g2, %g2, %g2
+	and		%l7, 0x87, %l7
+	addxc		%g3, %g3, %g3
+	xor		%l7, %g2, %g2
+
+	brnz,pn		$ooff, 2f
+	sub		$len, 1, $len
+
+	std		%f0, [$out + 0]
+	std		%f2, [$out + 8]
+	brnz,pt		$len, .L${bits}_xts_${dir}loop2x
+	add		$out, 16, $out
+
+	brnz,pn		$rem, .L${bits}_xts_${dir}steal
+	nop
+
+	ret
+	restore
+
+.align	16
+2:	ldxa		[$inp]0x82, %o0		! avoid read-after-write hazard
+						! and ~3x deterioration
+						! in inp==out case
+	faligndata	%f0, %f0, %f4		! handle unaligned output
+	faligndata	%f0, %f2, %f6
+	faligndata	%f2, %f2, %f8
+	stda		%f4, [$out + $omask]0xc0	! partial store
+	std		%f6, [$out + 8]
+	add		$out, 16, $out
+	orn		%g0, $omask, $omask
+	stda		%f8, [$out + $omask]0xc0	! partial store
+
+	brnz,pt		$len, .L${bits}_xts_${dir}loop2x+4
+	orn		%g0, $omask, $omask
+
+	brnz,pn		$rem, .L${bits}_xts_${dir}steal
+	nop
+
+	ret
+	restore
+
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+.align	32
+.L${bits}_xts_${dir}loop2x:
+	ldx		[$inp + 0], %o0
+	ldx		[$inp + 8], %o1
+	ldx		[$inp + 16], %o2
+	brz,pt		$ileft, 4f
+	ldx		[$inp + 24], %o3
+
+	ldx		[$inp + 32], %o4
+	sllx		%o0, $ileft, %o0
+	srlx		%o1, $iright, %g1
+	or		%g1, %o0, %o0
+	sllx		%o1, $ileft, %o1
+	srlx		%o2, $iright, %g1
+	or		%g1, %o1, %o1
+	sllx		%o2, $ileft, %o2
+	srlx		%o3, $iright, %g1
+	or		%g1, %o2, %o2
+	sllx		%o3, $ileft, %o3
+	srlx		%o4, $iright, %o4
+	or		%o4, %o3, %o3
+4:
+	movxtod		%g2, %f12
+	movxtod		%g3, %f14
+	bshuffle	%f12, %f12, %f12
+	bshuffle	%f14, %f14, %f14
+
+	srax		%g3, 63, %l7		! next tweak value
+	addcc		%g2, %g2, %g2
+	and		%l7, 0x87, %l7
+	addxc		%g3, %g3, %g3
+	xor		%l7, %g2, %g2
+
+	movxtod		%g2, %f8
+	movxtod		%g3, %f10
+	bshuffle	%f8,  %f8,  %f8
+	bshuffle	%f10, %f10, %f10
+
+	xor		%g4, %o0, %o0		! ^= rk[0]
+	xor		%g5, %o1, %o1
+	xor		%g4, %o2, %o2		! ^= rk[0]
+	xor		%g5, %o3, %o3
+	movxtod		%o0, %f0
+	movxtod		%o1, %f2
+	movxtod		%o2, %f4
+	movxtod		%o3, %f6
+
+	fxor		%f12, %f0, %f0		! ^= tweak[0]
+	fxor		%f14, %f2, %f2
+	fxor		%f8,  %f4, %f4		! ^= tweak[0]
+	fxor		%f10, %f6, %f6
+
+	prefetch	[$out + 63], 22
+	prefetch	[$inp + 32+63], 20
+	call		_${alg}${bits}_${dir}crypt_2x
+	add		$inp, 32, $inp
+
+	movxtod		%g2, %f8
+	movxtod		%g3, %f10
+
+	srax		%g3, 63, %l7		! next tweak value
+	addcc		%g2, %g2, %g2
+	and		%l7, 0x87, %l7
+	addxc		%g3, %g3, %g3
+	xor		%l7, %g2, %g2
+
+	bshuffle	%f8,  %f8,  %f8
+	bshuffle	%f10, %f10, %f10
+
+	fxor		%f12, %f0, %f0		! ^= tweak[0]
+	fxor		%f14, %f2, %f2
+	fxor		%f8,  %f4, %f4
+	fxor		%f10, %f6, %f6
+
+	brnz,pn		$ooff, 2f
+	sub		$len, 2, $len
+
+	std		%f0, [$out + 0]
+	std		%f2, [$out + 8]
+	std		%f4, [$out + 16]
+	std		%f6, [$out + 24]
+	brnz,pt		$len, .L${bits}_xts_${dir}loop2x
+	add		$out, 32, $out
+
+	fsrc2		%f4, %f0
+	fsrc2		%f6, %f2
+	brnz,pn		$rem, .L${bits}_xts_${dir}steal
+	nop
+
+	ret
+	restore
+
+.align	16
+2:	ldxa		[$inp]0x82, %o0		! avoid read-after-write hazard
+						! and ~3x deterioration
+						! in inp==out case
+	faligndata	%f0, %f0, %f8		! handle unaligned output
+	faligndata	%f0, %f2, %f10
+	faligndata	%f2, %f4, %f12
+	faligndata	%f4, %f6, %f14
+	faligndata	%f6, %f6, %f0
+
+	stda		%f8, [$out + $omask]0xc0	! partial store
+	std		%f10, [$out + 8]
+	std		%f12, [$out + 16]
+	std		%f14, [$out + 24]
+	add		$out, 32, $out
+	orn		%g0, $omask, $omask
+	stda		%f0, [$out + $omask]0xc0	! partial store
+
+	brnz,pt		$len, .L${bits}_xts_${dir}loop2x+4
+	orn		%g0, $omask, $omask
+
+	fsrc2		%f4, %f0
+	fsrc2		%f6, %f2
+	brnz,pn		$rem, .L${bits}_xts_${dir}steal
+	nop
+
+	ret
+	restore
+
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+.align	32
+.L${bits}_xts_${dir}blk:
+	add	$out, $len, $blk_init
+	and	$blk_init, 63, $blk_init	! tail
+	sub	$len, $blk_init, $len
+	add	$blk_init, 15, $blk_init	! round up to 16n
+	srlx	$len, 4, $len
+	srl	$blk_init, 4, $blk_init
+	sub	$len, 1, $len
+	add	$blk_init, 1, $blk_init
+
+.L${bits}_xts_${dir}blk2x:
+	ldx		[$inp + 0], %o0
+	ldx		[$inp + 8], %o1
+	ldx		[$inp + 16], %o2
+	brz,pt		$ileft, 5f
+	ldx		[$inp + 24], %o3
+
+	ldx		[$inp + 32], %o4
+	sllx		%o0, $ileft, %o0
+	srlx		%o1, $iright, %g1
+	or		%g1, %o0, %o0
+	sllx		%o1, $ileft, %o1
+	srlx		%o2, $iright, %g1
+	or		%g1, %o1, %o1
+	sllx		%o2, $ileft, %o2
+	srlx		%o3, $iright, %g1
+	or		%g1, %o2, %o2
+	sllx		%o3, $ileft, %o3
+	srlx		%o4, $iright, %o4
+	or		%o4, %o3, %o3
+5:
+	movxtod		%g2, %f12
+	movxtod		%g3, %f14
+	bshuffle	%f12, %f12, %f12
+	bshuffle	%f14, %f14, %f14
+
+	srax		%g3, 63, %l7		! next tweak value
+	addcc		%g2, %g2, %g2
+	and		%l7, 0x87, %l7
+	addxc		%g3, %g3, %g3
+	xor		%l7, %g2, %g2
+
+	movxtod		%g2, %f8
+	movxtod		%g3, %f10
+	bshuffle	%f8,  %f8,  %f8
+	bshuffle	%f10, %f10, %f10
+
+	xor		%g4, %o0, %o0		! ^= rk[0]
+	xor		%g5, %o1, %o1
+	xor		%g4, %o2, %o2		! ^= rk[0]
+	xor		%g5, %o3, %o3
+	movxtod		%o0, %f0
+	movxtod		%o1, %f2
+	movxtod		%o2, %f4
+	movxtod		%o3, %f6
+
+	fxor		%f12, %f0, %f0		! ^= tweak[0]
+	fxor		%f14, %f2, %f2
+	fxor		%f8,  %f4, %f4		! ^= tweak[0]
+	fxor		%f10, %f6, %f6
+
+	prefetch	[$inp + 32+63], 20
+	call		_${alg}${bits}_${dir}crypt_2x
+	add		$inp, 32, $inp
+
+	movxtod		%g2, %f8
+	movxtod		%g3, %f10
+
+	srax		%g3, 63, %l7		! next tweak value
+	addcc		%g2, %g2, %g2
+	and		%l7, 0x87, %l7
+	addxc		%g3, %g3, %g3
+	xor		%l7, %g2, %g2
+
+	bshuffle	%f8,  %f8,  %f8
+	bshuffle	%f10, %f10, %f10
+
+	fxor		%f12, %f0, %f0		! ^= tweak[0]
+	fxor		%f14, %f2, %f2
+	fxor		%f8,  %f4, %f4
+	fxor		%f10, %f6, %f6
+
+	subcc		$len, 2, $len
+	stda		%f0, [$out]0xe2		! ASI_BLK_INIT, T4-specific
+	add		$out, 8, $out
+	stda		%f2, [$out]0xe2		! ASI_BLK_INIT, T4-specific
+	add		$out, 8, $out
+	stda		%f4, [$out]0xe2		! ASI_BLK_INIT, T4-specific
+	add		$out, 8, $out
+	stda		%f6, [$out]0xe2		! ASI_BLK_INIT, T4-specific
+	bgu,pt		$::size_t_cc, .L${bits}_xts_${dir}blk2x
+	add		$out, 8, $out
+
+	add		$blk_init, $len, $len
+	andcc		$len, 1, %g0		! is number of blocks even?
+	membar		#StoreLoad|#StoreStore
+	bnz,pt		%icc, .L${bits}_xts_${dir}loop
+	srl		$len, 0, $len
+	brnz,pn		$len, .L${bits}_xts_${dir}loop2x
+	nop
+
+	fsrc2		%f4, %f0
+	fsrc2		%f6, %f2
+	brnz,pn		$rem, .L${bits}_xts_${dir}steal
+	nop
+
+	ret
+	restore
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+___
+$code.=<<___ if ($dir eq "en");
+.align	32
+.L${bits}_xts_${dir}steal:
+	std		%f0, [%fp + $::bias-16]	! copy of output
+	std		%f2, [%fp + $::bias-8]
+
+	srl		$ileft, 3, $ileft
+	add		%fp, $::bias-16, %l7
+	add		$inp, $ileft, $inp	! original $inp+$len&-15
+	add		$out, $ooff, $out	! original $out+$len&-15
+	mov		0, $ileft
+	nop					! align
+
+.L${bits}_xts_${dir}stealing:
+	ldub		[$inp + $ileft], %o0
+	ldub		[%l7  + $ileft], %o1
+	dec		$rem
+	stb		%o0, [%l7  + $ileft]
+	stb		%o1, [$out + $ileft]
+	brnz		$rem, .L${bits}_xts_${dir}stealing
+	inc		$ileft
+
+	mov		%l7, $inp
+	sub		$out, 16, $out
+	mov		0, $ileft
+	sub		$out, $ooff, $out
+	ba		.L${bits}_xts_${dir}loop	! one more time
+	mov		1, $len				! $rem is 0
+___
+$code.=<<___ if ($dir eq "de");
+.align	32
+.L${bits}_xts_${dir}steal:
+	ldx		[$inp + 0], %o0
+	brz,pt		$ileft, 8f
+	ldx		[$inp + 8], %o1
+
+	ldx		[$inp + 16], %o2
+	sllx		%o0, $ileft, %o0
+	srlx		%o1, $iright, %g1
+	sllx		%o1, $ileft, %o1
+	or		%g1, %o0, %o0
+	srlx		%o2, $iright, %o2
+	or		%o2, %o1, %o1
+8:
+	srax		%g3, 63, %l7		! next tweak value
+	addcc		%g2, %g2, %o2
+	and		%l7, 0x87, %l7
+	addxc		%g3, %g3, %o3
+	xor		%l7, %o2, %o2
+
+	movxtod		%o2, %f12
+	movxtod		%o3, %f14
+	bshuffle	%f12, %f12, %f12
+	bshuffle	%f14, %f14, %f14
+
+	xor		%g4, %o0, %o0		! ^= rk[0]
+	xor		%g5, %o1, %o1
+	movxtod		%o0, %f0
+	movxtod		%o1, %f2
+
+	fxor		%f12, %f0, %f0		! ^= tweak[0]
+	fxor		%f14, %f2, %f2
+
+	call		_${alg}${bits}_${dir}crypt_1x
+	add		$inp, 16, $inp
+
+	fxor		%f12, %f0, %f0		! ^= tweak[0]
+	fxor		%f14, %f2, %f2
+
+	std		%f0, [%fp + $::bias-16]
+	std		%f2, [%fp + $::bias-8]
+
+	srl		$ileft, 3, $ileft
+	add		%fp, $::bias-16, %l7
+	add		$inp, $ileft, $inp	! original $inp+$len&-15
+	add		$out, $ooff, $out	! original $out+$len&-15
+	mov		0, $ileft
+	add		$out, 16, $out
+	nop					! align
+
+.L${bits}_xts_${dir}stealing:
+	ldub		[$inp + $ileft], %o0
+	ldub		[%l7  + $ileft], %o1
+	dec		$rem
+	stb		%o0, [%l7  + $ileft]
+	stb		%o1, [$out + $ileft]
+	brnz		$rem, .L${bits}_xts_${dir}stealing
+	inc		$ileft
+
+	mov		%l7, $inp
+	sub		$out, 16, $out
+	mov		0, $ileft
+	sub		$out, $ooff, $out
+	ba		.L${bits}_xts_${dir}loop	! one more time
+	mov		1, $len				! $rem is 0
+___
+$code.=<<___;
+	ret
+	restore
+.type	${alg}${bits}_t4_xts_${dir}crypt,#function
+.size	${alg}${bits}_t4_xts_${dir}crypt,.-${alg}${bits}_t4_xts_${dir}crypt
+___
+}
+
+# Purpose of these subroutines is to explicitly encode VIS instructions,
+# so that one can compile the module without having to specify VIS
+# extensions on compiler command line, e.g. -xarch=v9 vs. -xarch=v9a.
+# Idea is to reserve for option to produce "universal" binary and let
+# programmer detect if current CPU is VIS capable at run-time.
+sub unvis {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my ($ref,$opf);
+my %visopf = (	"faligndata"	=> 0x048,
+		"bshuffle"	=> 0x04c,
+		"fnot2"		=> 0x066,
+		"fxor"		=> 0x06c,
+		"fsrc2"		=> 0x078	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rd";
+
+    if ($opf=$visopf{$mnemonic}) {
+	foreach ($rs1,$rs2,$rd) {
+	    return $ref if (!/%f([0-9]{1,2})/);
+	    $_=$1;
+	    if ($1>=32) {
+		return $ref if ($1&1);
+		# re-encode for upper double register addressing
+		$_=($1|$1>>5)&31;
+	    }
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			0x81b00000|$rd<<25|$rs1<<14|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+
+sub unvis3 {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my %bias = ( "g" => 0, "o" => 8, "l" => 16, "i" => 24 );
+my ($ref,$opf);
+my %visopf = (	"addxc"		=> 0x011,
+		"addxccc"	=> 0x013,
+		"umulxhi"	=> 0x016,
+		"alignaddr"	=> 0x018,
+		"bmask"		=> 0x019,
+		"alignaddrl"	=> 0x01a	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rd";
+
+    if ($opf=$visopf{$mnemonic}) {
+	foreach ($rs1,$rs2,$rd) {
+	    return $ref if (!/%([goli])([0-9])/);
+	    $_=$bias{$1}+$2;
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			0x81b00000|$rd<<25|$rs1<<14|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+
+sub unaes_round {	# 4-argument instructions
+my ($mnemonic,$rs1,$rs2,$rs3,$rd)=@_;
+my ($ref,$opf);
+my %aesopf = (	"aes_eround01"	=> 0,
+		"aes_eround23"	=> 1,
+		"aes_dround01"	=> 2,
+		"aes_dround23"	=> 3,
+		"aes_eround01_l"=> 4,
+		"aes_eround23_l"=> 5,
+		"aes_dround01_l"=> 6,
+		"aes_dround23_l"=> 7,
+		"aes_kexpand1"	=> 8	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rs3,$rd";
+
+    if (defined($opf=$aesopf{$mnemonic})) {
+	$rs3 = ($rs3 =~ /%f([0-6]*[02468])/) ? (($1|$1>>5)&31) : $rs3;
+	foreach ($rs1,$rs2,$rd) {
+	    return $ref if (!/%f([0-9]{1,2})/);
+	    $_=$1;
+	    if ($1>=32) {
+		return $ref if ($1&1);
+		# re-encode for upper double register addressing
+		$_=($1|$1>>5)&31;
+	    }
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			2<<30|$rd<<25|0x19<<19|$rs1<<14|$rs3<<9|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+
+sub unaes_kexpand {	# 3-argument instructions
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my ($ref,$opf);
+my %aesopf = (	"aes_kexpand0"	=> 0x130,
+		"aes_kexpand2"	=> 0x131	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rd";
+
+    if (defined($opf=$aesopf{$mnemonic})) {
+	foreach ($rs1,$rs2,$rd) {
+	    return $ref if (!/%f([0-9]{1,2})/);
+	    $_=$1;
+	    if ($1>=32) {
+		return $ref if ($1&1);
+		# re-encode for upper double register addressing
+		$_=($1|$1>>5)&31;
+	    }
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			2<<30|$rd<<25|0x36<<19|$rs1<<14|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+
+sub uncamellia_f {	# 4-argument instructions
+my ($mnemonic,$rs1,$rs2,$rs3,$rd)=@_;
+my ($ref,$opf);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rs3,$rd";
+
+    if (1) {
+	$rs3 = ($rs3 =~ /%f([0-6]*[02468])/) ? (($1|$1>>5)&31) : $rs3;
+	foreach ($rs1,$rs2,$rd) {
+	    return $ref if (!/%f([0-9]{1,2})/);
+	    $_=$1;
+	    if ($1>=32) {
+		return $ref if ($1&1);
+		# re-encode for upper double register addressing
+		$_=($1|$1>>5)&31;
+	    }
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			2<<30|$rd<<25|0x19<<19|$rs1<<14|$rs3<<9|0xc<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+
+sub uncamellia3 {	# 3-argument instructions
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my ($ref,$opf);
+my %cmllopf = (	"camellia_fl"	=> 0x13c,
+		"camellia_fli"	=> 0x13d	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rd";
+
+    if (defined($opf=$cmllopf{$mnemonic})) {
+	foreach ($rs1,$rs2,$rd) {
+	    return $ref if (!/%f([0-9]{1,2})/);
+	    $_=$1;
+	    if ($1>=32) {
+		return $ref if ($1&1);
+		# re-encode for upper double register addressing
+		$_=($1|$1>>5)&31;
+	    }
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			2<<30|$rd<<25|0x36<<19|$rs1<<14|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+
+sub unmovxtox {		# 2-argument instructions
+my ($mnemonic,$rs,$rd)=@_;
+my %bias = ( "g" => 0, "o" => 8, "l" => 16, "i" => 24, "f" => 0 );
+my ($ref,$opf);
+my %movxopf = (	"movdtox"	=> 0x110,
+		"movstouw"	=> 0x111,
+		"movstosw"	=> 0x113,
+		"movxtod"	=> 0x118,
+		"movwtos"	=> 0x119	);
+
+    $ref = "$mnemonic\t$rs,$rd";
+
+    if (defined($opf=$movxopf{$mnemonic})) {
+	foreach ($rs,$rd) {
+	    return $ref if (!/%([fgoli])([0-9]{1,2})/);
+	    $_=$bias{$1}+$2;
+	    if ($2>=32) {
+		return $ref if ($2&1);
+		# re-encode for upper double register addressing
+		$_=($2|$2>>5)&31;
+	    }
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			2<<30|$rd<<25|0x36<<19|$opf<<5|$rs,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+
+sub undes {
+my ($mnemonic)=shift;
+my @args=@_;
+my ($ref,$opf);
+my %desopf = (	"des_round"	=> 0b1001,
+		"des_ip"	=> 0b100110100,
+		"des_iip"	=> 0b100110101,
+		"des_kexpand"	=> 0b100110110	);
+
+    $ref = "$mnemonic\t".join(",",@_);
+
+    if (defined($opf=$desopf{$mnemonic})) {	# 4-arg
+	if ($mnemonic eq "des_round") {
+	    foreach (@args[0..3]) {
+		return $ref if (!/%f([0-9]{1,2})/);
+		$_=$1;
+		if ($1>=32) {
+		    return $ref if ($1&1);
+		    # re-encode for upper double register addressing
+		    $_=($1|$1>>5)&31;
+		}
+	    }
+	    return  sprintf ".word\t0x%08x !%s",
+			    2<<30|0b011001<<19|$opf<<5|$args[0]<<14|$args[1]|$args[2]<<9|$args[3]<<25,
+			    $ref;
+	} elsif ($mnemonic eq "des_kexpand") {	# 3-arg
+	    foreach (@args[0..2]) {
+		return $ref if (!/(%f)?([0-9]{1,2})/);
+		$_=$2;
+		if ($2>=32) {
+		    return $ref if ($2&1);
+		    # re-encode for upper double register addressing
+		    $_=($2|$2>>5)&31;
+		}
+	    }
+	    return  sprintf ".word\t0x%08x !%s",
+			    2<<30|0b110110<<19|$opf<<5|$args[0]<<14|$args[1]|$args[2]<<25,
+			    $ref;
+	} else {				# 2-arg
+	    foreach (@args[0..1]) {
+		return $ref if (!/%f([0-9]{1,2})/);
+		$_=$1;
+		if ($1>=32) {
+		    return $ref if ($2&1);
+		    # re-encode for upper double register addressing
+		    $_=($1|$1>>5)&31;
+		}
+	    }
+	    return  sprintf ".word\t0x%08x !%s",
+			    2<<30|0b110110<<19|$opf<<5|$args[0]<<14|$args[1]<<25,
+			    $ref;
+	}
+    } else {
+	return $ref;
+    }
+}
+
+sub emit_assembler {
+    foreach (split("\n",$::code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	s/\b(f[a-z]+2[sd]*)\s+(%f[0-9]{1,2}),\s*(%f[0-9]{1,2})\s*$/$1\t%f0,$2,$3/go;
+
+	s/\b(aes_[edk][^\s]*)\s+(%f[0-9]{1,2}),\s*(%f[0-9]{1,2}),\s*([%fx0-9]+),\s*(%f[0-9]{1,2})/
+		&unaes_round($1,$2,$3,$4,$5)
+	 /geo or
+	s/\b(aes_kexpand[02])\s+(%f[0-9]{1,2}),\s*(%f[0-9]{1,2}),\s*(%f[0-9]{1,2})/
+		&unaes_kexpand($1,$2,$3,$4)
+	 /geo or
+	s/\b(camellia_f)\s+(%f[0-9]{1,2}),\s*(%f[0-9]{1,2}),\s*([%fx0-9]+),\s*(%f[0-9]{1,2})/
+		&uncamellia_f($1,$2,$3,$4,$5)
+	 /geo or
+	s/\b(camellia_[^s]+)\s+(%f[0-9]{1,2}),\s*(%f[0-9]{1,2}),\s*(%f[0-9]{1,2})/
+		&uncamellia3($1,$2,$3,$4)
+	 /geo or
+	s/\b(des_\w+)\s+(%f[0-9]{1,2}),\s*([%fx0-9]+)(?:,\s*(%f[0-9]{1,2})(?:,\s*(%f[0-9]{1,2}))?)?/
+		&undes($1,$2,$3,$4,$5)
+	 /geo or
+	s/\b(mov[ds]to\w+)\s+(%f[0-9]{1,2}),\s*(%[goli][0-7])/
+		&unmovxtox($1,$2,$3)
+	 /geo or
+	s/\b(mov[xw]to[ds])\s+(%[goli][0-7]),\s*(%f[0-9]{1,2})/
+		&unmovxtox($1,$2,$3)
+	 /geo or
+	s/\b([fb][^\s]*)\s+(%f[0-9]{1,2}),\s*(%f[0-9]{1,2}),\s*(%f[0-9]{1,2})/
+		&unvis($1,$2,$3,$4)
+	 /geo or
+	s/\b(umulxhi|bmask|addxc[c]{0,2}|alignaddr[l]*)\s+(%[goli][0-7]),\s*(%[goli][0-7]),\s*(%[goli][0-7])/
+		&unvis3($1,$2,$3,$4)
+	 /geo;
+
+	print $_,"\n";
+    }
+}
+
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86_64-xlate.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86_64-xlate.pl
new file mode 100755
index 000000000..29a0eacfd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86_64-xlate.pl
@@ -0,0 +1,1447 @@
+#! /usr/bin/env perl
+# Copyright 2005-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# Ascetic x86_64 AT&T to MASM/NASM assembler translator by <appro>.
+#
+# Why AT&T to MASM and not vice versa? Several reasons. Because AT&T
+# format is way easier to parse. Because it's simpler to "gear" from
+# Unix ABI to Windows one [see cross-reference "card" at the end of
+# file]. Because Linux targets were available first...
+#
+# In addition the script also "distills" code suitable for GNU
+# assembler, so that it can be compiled with more rigid assemblers,
+# such as Solaris /usr/ccs/bin/as.
+#
+# This translator is not designed to convert *arbitrary* assembler
+# code from AT&T format to MASM one. It's designed to convert just
+# enough to provide for dual-ABI OpenSSL modules development...
+# There *are* limitations and you might have to modify your assembler
+# code or this script to achieve the desired result...
+#
+# Currently recognized limitations:
+#
+# - can't use multiple ops per line;
+#
+# Dual-ABI styling rules.
+#
+# 1. Adhere to Unix register and stack layout [see cross-reference
+#    ABI "card" at the end for explanation].
+# 2. Forget about "red zone," stick to more traditional blended
+#    stack frame allocation. If volatile storage is actually required
+#    that is. If not, just leave the stack as is.
+# 3. Functions tagged with ".type name,@function" get crafted with
+#    unified Win64 prologue and epilogue automatically. If you want
+#    to take care of ABI differences yourself, tag functions as
+#    ".type name,@abi-omnipotent" instead.
+# 4. To optimize the Win64 prologue you can specify number of input
+#    arguments as ".type name,@function,N." Keep in mind that if N is
+#    larger than 6, then you *have to* write "abi-omnipotent" code,
+#    because >6 cases can't be addressed with unified prologue.
+# 5. Name local labels as .L*, do *not* use dynamic labels such as 1:
+#    (sorry about latter).
+# 6. Don't use [or hand-code with .byte] "rep ret." "ret" mnemonic is
+#    required to identify the spots, where to inject Win64 epilogue!
+#    But on the pros, it's then prefixed with rep automatically:-)
+# 7. Stick to explicit ip-relative addressing. If you have to use
+#    GOTPCREL addressing, stick to mov symbol@GOTPCREL(%rip),%r??.
+#    Both are recognized and translated to proper Win64 addressing
+#    modes.
+#
+# 8. In order to provide for structured exception handling unified
+#    Win64 prologue copies %rsp value to %rax. For further details
+#    see SEH paragraph at the end.
+# 9. .init segment is allowed to contain calls to functions only.
+# a. If function accepts more than 4 arguments *and* >4th argument
+#    is declared as non 64-bit value, do clear its upper part.
+
+
+use strict;
+
+my $flavour = shift;
+my $output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+open STDOUT,">$output" || die "can't open $output: $!"
+	if (defined($output));
+
+my $gas=1;	$gas=0 if ($output =~ /\.asm$/);
+my $elf=1;	$elf=0 if (!$gas);
+my $win64=0;
+my $prefix="";
+my $decor=".L";
+
+my $masmref=8 + 50727*2**-32;	# 8.00.50727 shipped with VS2005
+my $masm=0;
+my $PTR=" PTR";
+
+my $nasmref=2.03;
+my $nasm=0;
+
+if    ($flavour eq "mingw64")	{ $gas=1; $elf=0; $win64=1;
+				  $prefix=`echo __USER_LABEL_PREFIX__ | $ENV{CC} -E -P -`;
+				  $prefix =~ s|\R$||; # Better chomp
+				}
+elsif ($flavour eq "macosx")	{ $gas=1; $elf=0; $prefix="_"; $decor="L\$"; }
+elsif ($flavour eq "masm")	{ $gas=0; $elf=0; $masm=$masmref; $win64=1; $decor="\$L\$"; }
+elsif ($flavour eq "nasm")	{ $gas=0; $elf=0; $nasm=$nasmref; $win64=1; $decor="\$L\$"; $PTR=""; }
+elsif (!$gas)
+{   if ($ENV{ASM} =~ m/nasm/ && `nasm -v` =~ m/version ([0-9]+)\.([0-9]+)/i)
+    {	$nasm = $1 + $2*0.01; $PTR="";  }
+    elsif (`ml64 2>&1` =~ m/Version ([0-9]+)\.([0-9]+)(\.([0-9]+))?/)
+    {	$masm = $1 + $2*2**-16 + $4*2**-32;   }
+    die "no assembler found on %PATH%" if (!($nasm || $masm));
+    $win64=1;
+    $elf=0;
+    $decor="\$L\$";
+}
+
+my $current_segment;
+my $current_function;
+my %globals;
+
+{ package opcode;	# pick up opcodes
+    sub re {
+	my	($class, $line) = @_;
+	my	$self = {};
+	my	$ret;
+
+	if ($$line =~ /^([a-z][a-z0-9]*)/i) {
+	    bless $self,$class;
+	    $self->{op} = $1;
+	    $ret = $self;
+	    $$line = substr($$line,@+[0]); $$line =~ s/^\s+//;
+
+	    undef $self->{sz};
+	    if ($self->{op} =~ /^(movz)x?([bw]).*/) {	# movz is pain...
+		$self->{op} = $1;
+		$self->{sz} = $2;
+	    } elsif ($self->{op} =~ /call|jmp/) {
+		$self->{sz} = "";
+	    } elsif ($self->{op} =~ /^p/ && $' !~ /^(ush|op|insrw)/) { # SSEn
+		$self->{sz} = "";
+	    } elsif ($self->{op} =~ /^[vk]/) { # VEX or k* such as kmov
+		$self->{sz} = "";
+	    } elsif ($self->{op} =~ /mov[dq]/ && $$line =~ /%xmm/) {
+		$self->{sz} = "";
+	    } elsif ($self->{op} =~ /([a-z]{3,})([qlwb])$/) {
+		$self->{op} = $1;
+		$self->{sz} = $2;
+	    }
+	}
+	$ret;
+    }
+    sub size {
+	my ($self, $sz) = @_;
+	$self->{sz} = $sz if (defined($sz) && !defined($self->{sz}));
+	$self->{sz};
+    }
+    sub out {
+	my $self = shift;
+	if ($gas) {
+	    if ($self->{op} eq "movz") {	# movz is pain...
+		sprintf "%s%s%s",$self->{op},$self->{sz},shift;
+	    } elsif ($self->{op} =~ /^set/) {
+		"$self->{op}";
+	    } elsif ($self->{op} eq "ret") {
+		my $epilogue = "";
+		if ($win64 && $current_function->{abi} eq "svr4") {
+		    $epilogue = "movq	8(%rsp),%rdi\n\t" .
+				"movq	16(%rsp),%rsi\n\t";
+		}
+	    	$epilogue . ".byte	0xf3,0xc3";
+	    } elsif ($self->{op} eq "call" && !$elf && $current_segment eq ".init") {
+		".p2align\t3\n\t.quad";
+	    } else {
+		"$self->{op}$self->{sz}";
+	    }
+	} else {
+	    $self->{op} =~ s/^movz/movzx/;
+	    if ($self->{op} eq "ret") {
+		$self->{op} = "";
+		if ($win64 && $current_function->{abi} eq "svr4") {
+		    $self->{op} = "mov	rdi,QWORD$PTR\[8+rsp\]\t;WIN64 epilogue\n\t".
+				  "mov	rsi,QWORD$PTR\[16+rsp\]\n\t";
+	    	}
+		$self->{op} .= "DB\t0F3h,0C3h\t\t;repret";
+	    } elsif ($self->{op} =~ /^(pop|push)f/) {
+		$self->{op} .= $self->{sz};
+	    } elsif ($self->{op} eq "call" && $current_segment eq ".CRT\$XCU") {
+		$self->{op} = "\tDQ";
+	    }
+	    $self->{op};
+	}
+    }
+    sub mnemonic {
+	my ($self, $op) = @_;
+	$self->{op}=$op if (defined($op));
+	$self->{op};
+    }
+}
+{ package const;	# pick up constants, which start with $
+    sub re {
+	my	($class, $line) = @_;
+	my	$self = {};
+	my	$ret;
+
+	if ($$line =~ /^\$([^,]+)/) {
+	    bless $self, $class;
+	    $self->{value} = $1;
+	    $ret = $self;
+	    $$line = substr($$line,@+[0]); $$line =~ s/^\s+//;
+	}
+	$ret;
+    }
+    sub out {
+    	my $self = shift;
+
+	$self->{value} =~ s/\b(0b[0-1]+)/oct($1)/eig;
+	if ($gas) {
+	    # Solaris /usr/ccs/bin/as can't handle multiplications
+	    # in $self->{value}
+	    my $value = $self->{value};
+	    no warnings;    # oct might complain about overflow, ignore here...
+	    $value =~ s/(?<![\w\$\.])(0x?[0-9a-f]+)/oct($1)/egi;
+	    if ($value =~ s/([0-9]+\s*[\*\/\%]\s*[0-9]+)/eval($1)/eg) {
+		$self->{value} = $value;
+	    }
+	    sprintf "\$%s",$self->{value};
+	} else {
+	    my $value = $self->{value};
+	    $value =~ s/0x([0-9a-f]+)/0$1h/ig if ($masm);
+	    sprintf "%s",$value;
+	}
+    }
+}
+{ package ea;		# pick up effective addresses: expr(%reg,%reg,scale)
+
+    my %szmap = (	b=>"BYTE$PTR",    w=>"WORD$PTR",
+			l=>"DWORD$PTR",   d=>"DWORD$PTR",
+			q=>"QWORD$PTR",   o=>"OWORD$PTR",
+			x=>"XMMWORD$PTR", y=>"YMMWORD$PTR",
+			z=>"ZMMWORD$PTR" ) if (!$gas);
+
+    sub re {
+	my	($class, $line, $opcode) = @_;
+	my	$self = {};
+	my	$ret;
+
+	# optional * ----vvv--- appears in indirect jmp/call
+	if ($$line =~ /^(\*?)([^\(,]*)\(([%\w,]+)\)((?:{[^}]+})*)/) {
+	    bless $self, $class;
+	    $self->{asterisk} = $1;
+	    $self->{label} = $2;
+	    ($self->{base},$self->{index},$self->{scale})=split(/,/,$3);
+	    $self->{scale} = 1 if (!defined($self->{scale}));
+	    $self->{opmask} = $4;
+	    $ret = $self;
+	    $$line = substr($$line,@+[0]); $$line =~ s/^\s+//;
+
+	    if ($win64 && $self->{label} =~ s/\@GOTPCREL//) {
+		die if ($opcode->mnemonic() ne "mov");
+		$opcode->mnemonic("lea");
+	    }
+	    $self->{base}  =~ s/^%//;
+	    $self->{index} =~ s/^%// if (defined($self->{index}));
+	    $self->{opcode} = $opcode;
+	}
+	$ret;
+    }
+    sub size {}
+    sub out {
+	my ($self, $sz) = @_;
+
+	$self->{label} =~ s/([_a-z][_a-z0-9]*)/$globals{$1} or $1/gei;
+	$self->{label} =~ s/\.L/$decor/g;
+
+	# Silently convert all EAs to 64-bit. This is required for
+	# elder GNU assembler and results in more compact code,
+	# *but* most importantly AES module depends on this feature!
+	$self->{index} =~ s/^[er](.?[0-9xpi])[d]?$/r\1/;
+	$self->{base}  =~ s/^[er](.?[0-9xpi])[d]?$/r\1/;
+
+	# Solaris /usr/ccs/bin/as can't handle multiplications
+	# in $self->{label}...
+	use integer;
+	$self->{label} =~ s/(?<![\w\$\.])(0x?[0-9a-f]+)/oct($1)/egi;
+	$self->{label} =~ s/\b([0-9]+\s*[\*\/\%]\s*[0-9]+)\b/eval($1)/eg;
+
+	# Some assemblers insist on signed presentation of 32-bit
+	# offsets, but sign extension is a tricky business in perl...
+	if ((1<<31)<<1) {
+	    $self->{label} =~ s/\b([0-9]+)\b/$1<<32>>32/eg;
+	} else {
+	    $self->{label} =~ s/\b([0-9]+)\b/$1>>0/eg;
+	}
+
+	# if base register is %rbp or %r13, see if it's possible to
+	# flip base and index registers [for better performance]
+	if (!$self->{label} && $self->{index} && $self->{scale}==1 &&
+	    $self->{base} =~ /(rbp|r13)/) {
+		$self->{base} = $self->{index}; $self->{index} = $1;
+	}
+
+	if ($gas) {
+	    $self->{label} =~ s/^___imp_/__imp__/   if ($flavour eq "mingw64");
+
+	    if (defined($self->{index})) {
+		sprintf "%s%s(%s,%%%s,%d)%s",
+					$self->{asterisk},$self->{label},
+					$self->{base}?"%$self->{base}":"",
+					$self->{index},$self->{scale},
+					$self->{opmask};
+	    } else {
+		sprintf "%s%s(%%%s)%s",	$self->{asterisk},$self->{label},
+					$self->{base},$self->{opmask};
+	    }
+	} else {
+	    $self->{label} =~ s/\./\$/g;
+	    $self->{label} =~ s/(?<![\w\$\.])0x([0-9a-f]+)/0$1h/ig;
+	    $self->{label} = "($self->{label})" if ($self->{label} =~ /[\*\+\-\/]/);
+
+	    my $mnemonic = $self->{opcode}->mnemonic();
+	    ($self->{asterisk})				&& ($sz="q") ||
+	    ($mnemonic =~ /^v?mov([qd])$/)		&& ($sz=$1)  ||
+	    ($mnemonic =~ /^v?pinsr([qdwb])$/)		&& ($sz=$1)  ||
+	    ($mnemonic =~ /^vpbroadcast([qdwb])$/)	&& ($sz=$1)  ||
+	    ($mnemonic =~ /^v(?!perm)[a-z]+[fi]128$/)	&& ($sz="x");
+
+	    $self->{opmask}  =~ s/%(k[0-7])/$1/;
+
+	    if (defined($self->{index})) {
+		sprintf "%s[%s%s*%d%s]%s",$szmap{$sz},
+					$self->{label}?"$self->{label}+":"",
+					$self->{index},$self->{scale},
+					$self->{base}?"+$self->{base}":"",
+					$self->{opmask};
+	    } elsif ($self->{base} eq "rip") {
+		sprintf "%s[%s]",$szmap{$sz},$self->{label};
+	    } else {
+		sprintf "%s[%s%s]%s",	$szmap{$sz},
+					$self->{label}?"$self->{label}+":"",
+					$self->{base},$self->{opmask};
+	    }
+	}
+    }
+}
+{ package register;	# pick up registers, which start with %.
+    sub re {
+	my	($class, $line, $opcode) = @_;
+	my	$self = {};
+	my	$ret;
+
+	# optional * ----vvv--- appears in indirect jmp/call
+	if ($$line =~ /^(\*?)%(\w+)((?:{[^}]+})*)/) {
+	    bless $self,$class;
+	    $self->{asterisk} = $1;
+	    $self->{value} = $2;
+	    $self->{opmask} = $3;
+	    $opcode->size($self->size());
+	    $ret = $self;
+	    $$line = substr($$line,@+[0]); $$line =~ s/^\s+//;
+	}
+	$ret;
+    }
+    sub size {
+	my	$self = shift;
+	my	$ret;
+
+	if    ($self->{value} =~ /^r[\d]+b$/i)	{ $ret="b"; }
+	elsif ($self->{value} =~ /^r[\d]+w$/i)	{ $ret="w"; }
+	elsif ($self->{value} =~ /^r[\d]+d$/i)	{ $ret="l"; }
+	elsif ($self->{value} =~ /^r[\w]+$/i)	{ $ret="q"; }
+	elsif ($self->{value} =~ /^[a-d][hl]$/i){ $ret="b"; }
+	elsif ($self->{value} =~ /^[\w]{2}l$/i)	{ $ret="b"; }
+	elsif ($self->{value} =~ /^[\w]{2}$/i)	{ $ret="w"; }
+	elsif ($self->{value} =~ /^e[a-z]{2}$/i){ $ret="l"; }
+
+	$ret;
+    }
+    sub out {
+    	my $self = shift;
+	if ($gas)	{ sprintf "%s%%%s%s",	$self->{asterisk},
+						$self->{value},
+						$self->{opmask}; }
+	else		{ $self->{opmask} =~ s/%(k[0-7])/$1/;
+			  $self->{value}.$self->{opmask}; }
+    }
+}
+{ package label;	# pick up labels, which end with :
+    sub re {
+	my	($class, $line) = @_;
+	my	$self = {};
+	my	$ret;
+
+	if ($$line =~ /(^[\.\w]+)\:/) {
+	    bless $self,$class;
+	    $self->{value} = $1;
+	    $ret = $self;
+	    $$line = substr($$line,@+[0]); $$line =~ s/^\s+//;
+
+	    $self->{value} =~ s/^\.L/$decor/;
+	}
+	$ret;
+    }
+    sub out {
+	my $self = shift;
+
+	if ($gas) {
+	    my $func = ($globals{$self->{value}} or $self->{value}) . ":";
+	    if ($win64	&& $current_function->{name} eq $self->{value}
+			&& $current_function->{abi} eq "svr4") {
+		$func .= "\n";
+		$func .= "	movq	%rdi,8(%rsp)\n";
+		$func .= "	movq	%rsi,16(%rsp)\n";
+		$func .= "	movq	%rsp,%rax\n";
+		$func .= "${decor}SEH_begin_$current_function->{name}:\n";
+		my $narg = $current_function->{narg};
+		$narg=6 if (!defined($narg));
+		$func .= "	movq	%rcx,%rdi\n" if ($narg>0);
+		$func .= "	movq	%rdx,%rsi\n" if ($narg>1);
+		$func .= "	movq	%r8,%rdx\n"  if ($narg>2);
+		$func .= "	movq	%r9,%rcx\n"  if ($narg>3);
+		$func .= "	movq	40(%rsp),%r8\n" if ($narg>4);
+		$func .= "	movq	48(%rsp),%r9\n" if ($narg>5);
+	    }
+	    $func;
+	} elsif ($self->{value} ne "$current_function->{name}") {
+	    # Make all labels in masm global.
+	    $self->{value} .= ":" if ($masm);
+	    $self->{value} . ":";
+	} elsif ($win64 && $current_function->{abi} eq "svr4") {
+	    my $func =	"$current_function->{name}" .
+			($nasm ? ":" : "\tPROC $current_function->{scope}") .
+			"\n";
+	    $func .= "	mov	QWORD$PTR\[8+rsp\],rdi\t;WIN64 prologue\n";
+	    $func .= "	mov	QWORD$PTR\[16+rsp\],rsi\n";
+	    $func .= "	mov	rax,rsp\n";
+	    $func .= "${decor}SEH_begin_$current_function->{name}:";
+	    $func .= ":" if ($masm);
+	    $func .= "\n";
+	    my $narg = $current_function->{narg};
+	    $narg=6 if (!defined($narg));
+	    $func .= "	mov	rdi,rcx\n" if ($narg>0);
+	    $func .= "	mov	rsi,rdx\n" if ($narg>1);
+	    $func .= "	mov	rdx,r8\n"  if ($narg>2);
+	    $func .= "	mov	rcx,r9\n"  if ($narg>3);
+	    $func .= "	mov	r8,QWORD$PTR\[40+rsp\]\n" if ($narg>4);
+	    $func .= "	mov	r9,QWORD$PTR\[48+rsp\]\n" if ($narg>5);
+	    $func .= "\n";
+	} else {
+	   "$current_function->{name}".
+			($nasm ? ":" : "\tPROC $current_function->{scope}");
+	}
+    }
+}
+{ package expr;		# pick up expressions
+    sub re {
+	my	($class, $line, $opcode) = @_;
+	my	$self = {};
+	my	$ret;
+
+	if ($$line =~ /(^[^,]+)/) {
+	    bless $self,$class;
+	    $self->{value} = $1;
+	    $ret = $self;
+	    $$line = substr($$line,@+[0]); $$line =~ s/^\s+//;
+
+	    $self->{value} =~ s/\@PLT// if (!$elf);
+	    $self->{value} =~ s/([_a-z][_a-z0-9]*)/$globals{$1} or $1/gei;
+	    $self->{value} =~ s/\.L/$decor/g;
+	    $self->{opcode} = $opcode;
+	}
+	$ret;
+    }
+    sub out {
+	my $self = shift;
+	if ($nasm && $self->{opcode}->mnemonic()=~m/^j(?![re]cxz)/) {
+	    "NEAR ".$self->{value};
+	} else {
+	    $self->{value};
+	}
+    }
+}
+{ package cfi_directive;
+    # CFI directives annotate instructions that are significant for
+    # stack unwinding procedure compliant with DWARF specification,
+    # see http://dwarfstd.org/. Besides naturally expected for this
+    # script platform-specific filtering function, this module adds
+    # three auxiliary synthetic directives not recognized by [GNU]
+    # assembler:
+    #
+    # - .cfi_push to annotate push instructions in prologue, which
+    #   translates to .cfi_adjust_cfa_offset (if needed) and
+    #   .cfi_offset;
+    # - .cfi_pop to annotate pop instructions in epilogue, which
+    #   translates to .cfi_adjust_cfa_offset (if needed) and
+    #   .cfi_restore;
+    # - [and most notably] .cfi_cfa_expression which encodes
+    #   DW_CFA_def_cfa_expression and passes it to .cfi_escape as
+    #   byte vector;
+    #
+    # CFA expressions were introduced in DWARF specification version
+    # 3 and describe how to deduce CFA, Canonical Frame Address. This
+    # becomes handy if your stack frame is variable and you can't
+    # spare register for [previous] frame pointer. Suggested directive
+    # syntax is made-up mix of DWARF operator suffixes [subset of]
+    # and references to registers with optional bias. Following example
+    # describes offloaded *original* stack pointer at specific offset
+    # from *current* stack pointer:
+    #
+    #   .cfi_cfa_expression     %rsp+40,deref,+8
+    #
+    # Final +8 has everything to do with the fact that CFA is defined
+    # as reference to top of caller's stack, and on x86_64 call to
+    # subroutine pushes 8-byte return address. In other words original
+    # stack pointer upon entry to a subroutine is 8 bytes off from CFA.
+
+    # Below constants are taken from "DWARF Expressions" section of the
+    # DWARF specification, section is numbered 7.7 in versions 3 and 4.
+    my %DW_OP_simple = (	# no-arg operators, mapped directly
+	deref	=> 0x06,	dup	=> 0x12,
+	drop	=> 0x13,	over	=> 0x14,
+	pick	=> 0x15,	swap	=> 0x16,
+	rot	=> 0x17,	xderef	=> 0x18,
+
+	abs	=> 0x19,	and	=> 0x1a,
+	div	=> 0x1b,	minus	=> 0x1c,
+	mod	=> 0x1d,	mul	=> 0x1e,
+	neg	=> 0x1f,	not	=> 0x20,
+	or	=> 0x21,	plus	=> 0x22,
+	shl	=> 0x24,	shr	=> 0x25,
+	shra	=> 0x26,	xor	=> 0x27,
+	);
+
+    my %DW_OP_complex = (	# used in specific subroutines
+	constu		=> 0x10,	# uleb128
+	consts		=> 0x11,	# sleb128
+	plus_uconst	=> 0x23,	# uleb128
+	lit0 		=> 0x30,	# add 0-31 to opcode
+	reg0		=> 0x50,	# add 0-31 to opcode
+	breg0		=> 0x70,	# add 0-31 to opcole, sleb128
+	regx		=> 0x90,	# uleb28
+	fbreg		=> 0x91,	# sleb128
+	bregx		=> 0x92,	# uleb128, sleb128
+	piece		=> 0x93,	# uleb128
+	);
+
+    # Following constants are defined in x86_64 ABI supplement, for
+    # example available at https://www.uclibc.org/docs/psABI-x86_64.pdf,
+    # see section 3.7 "Stack Unwind Algorithm".
+    my %DW_reg_idx = (
+	"%rax"=>0,  "%rdx"=>1,  "%rcx"=>2,  "%rbx"=>3,
+	"%rsi"=>4,  "%rdi"=>5,  "%rbp"=>6,  "%rsp"=>7,
+	"%r8" =>8,  "%r9" =>9,  "%r10"=>10, "%r11"=>11,
+	"%r12"=>12, "%r13"=>13, "%r14"=>14, "%r15"=>15
+	);
+
+    my ($cfa_reg, $cfa_rsp);
+    my @cfa_stack;
+
+    # [us]leb128 format is variable-length integer representation base
+    # 2^128, with most significant bit of each byte being 0 denoting
+    # *last* most significant digit. See "Variable Length Data" in the
+    # DWARF specification, numbered 7.6 at least in versions 3 and 4.
+    sub sleb128 {
+	use integer;	# get right shift extend sign
+
+	my $val = shift;
+	my $sign = ($val < 0) ? -1 : 0;
+	my @ret = ();
+
+	while(1) {
+	    push @ret, $val&0x7f;
+
+	    # see if remaining bits are same and equal to most
+	    # significant bit of the current digit, if so, it's
+	    # last digit...
+	    last if (($val>>6) == $sign);
+
+	    @ret[-1] |= 0x80;
+	    $val >>= 7;
+	}
+
+	return @ret;
+    }
+    sub uleb128 {
+	my $val = shift;
+	my @ret = ();
+
+	while(1) {
+	    push @ret, $val&0x7f;
+
+	    # see if it's last significant digit...
+	    last if (($val >>= 7) == 0);
+
+	    @ret[-1] |= 0x80;
+	}
+
+	return @ret;
+    }
+    sub const {
+	my $val = shift;
+
+	if ($val >= 0 && $val < 32) {
+            return ($DW_OP_complex{lit0}+$val);
+	}
+	return ($DW_OP_complex{consts}, sleb128($val));
+    }
+    sub reg {
+	my $val = shift;
+
+	return if ($val !~ m/^(%r\w+)(?:([\+\-])((?:0x)?[0-9a-f]+))?/);
+
+	my $reg = $DW_reg_idx{$1};
+	my $off = eval ("0 $2 $3");
+
+	return (($DW_OP_complex{breg0} + $reg), sleb128($off));
+	# Yes, we use DW_OP_bregX+0 to push register value and not
+	# DW_OP_regX, because latter would require even DW_OP_piece,
+	# which would be a waste under the circumstances. If you have
+	# to use DWP_OP_reg, use "regx:N"...
+    }
+    sub cfa_expression {
+	my $line = shift;
+	my @ret;
+
+	foreach my $token (split(/,\s*/,$line)) {
+	    if ($token =~ /^%r/) {
+		push @ret,reg($token);
+	    } elsif ($token =~ /((?:0x)?[0-9a-f]+)\((%r\w+)\)/) {
+		push @ret,reg("$2+$1");
+	    } elsif ($token =~ /(\w+):(\-?(?:0x)?[0-9a-f]+)(U?)/i) {
+		my $i = 1*eval($2);
+		push @ret,$DW_OP_complex{$1}, ($3 ? uleb128($i) : sleb128($i));
+	    } elsif (my $i = 1*eval($token) or $token eq "0") {
+		if ($token =~ /^\+/) {
+		    push @ret,$DW_OP_complex{plus_uconst},uleb128($i);
+		} else {
+		    push @ret,const($i);
+		}
+	    } else {
+		push @ret,$DW_OP_simple{$token};
+	    }
+	}
+
+	# Finally we return DW_CFA_def_cfa_expression, 15, followed by
+	# length of the expression and of course the expression itself.
+	return (15,scalar(@ret),@ret);
+    }
+    sub re {
+	my	($class, $line) = @_;
+	my	$self = {};
+	my	$ret;
+
+	if ($$line =~ s/^\s*\.cfi_(\w+)\s*//) {
+	    bless $self,$class;
+	    $ret = $self;
+	    undef $self->{value};
+	    my $dir = $1;
+
+	    SWITCH: for ($dir) {
+	    # What is $cfa_rsp? Effectively it's difference between %rsp
+	    # value and current CFA, Canonical Frame Address, which is
+	    # why it starts with -8. Recall that CFA is top of caller's
+	    # stack...
+	    /startproc/	&& do {	($cfa_reg, $cfa_rsp) = ("%rsp", -8); last; };
+	    /endproc/	&& do {	($cfa_reg, $cfa_rsp) = ("%rsp",  0);
+				# .cfi_remember_state directives that are not
+				# matched with .cfi_restore_state are
+				# unnecessary.
+				die "unpaired .cfi_remember_state" if (@cfa_stack);
+				last;
+			      };
+	    /def_cfa_register/
+			&& do {	$cfa_reg = $$line; last; };
+	    /def_cfa_offset/
+			&& do {	$cfa_rsp = -1*eval($$line) if ($cfa_reg eq "%rsp");
+				last;
+			      };
+	    /adjust_cfa_offset/
+			&& do {	$cfa_rsp -= 1*eval($$line) if ($cfa_reg eq "%rsp");
+				last;
+			      };
+	    /def_cfa/	&& do {	if ($$line =~ /(%r\w+)\s*,\s*(.+)/) {
+				    $cfa_reg = $1;
+				    $cfa_rsp = -1*eval($2) if ($cfa_reg eq "%rsp");
+				}
+				last;
+			      };
+	    /push/	&& do {	$dir = undef;
+				$cfa_rsp -= 8;
+				if ($cfa_reg eq "%rsp") {
+				    $self->{value} = ".cfi_adjust_cfa_offset\t8\n";
+				}
+				$self->{value} .= ".cfi_offset\t$$line,$cfa_rsp";
+				last;
+			      };
+	    /pop/	&& do {	$dir = undef;
+				$cfa_rsp += 8;
+				if ($cfa_reg eq "%rsp") {
+				    $self->{value} = ".cfi_adjust_cfa_offset\t-8\n";
+				}
+				$self->{value} .= ".cfi_restore\t$$line";
+				last;
+			      };
+	    /cfa_expression/
+			&& do {	$dir = undef;
+				$self->{value} = ".cfi_escape\t" .
+					join(",", map(sprintf("0x%02x", $_),
+						      cfa_expression($$line)));
+				last;
+			      };
+	    /remember_state/
+			&& do {	push @cfa_stack, [$cfa_reg, $cfa_rsp];
+				last;
+			      };
+	    /restore_state/
+			&& do {	($cfa_reg, $cfa_rsp) = @{pop @cfa_stack};
+				last;
+			      };
+	    }
+
+	    $self->{value} = ".cfi_$dir\t$$line" if ($dir);
+
+	    $$line = "";
+	}
+
+	return $ret;
+    }
+    sub out {
+	my $self = shift;
+	return ($elf ? $self->{value} : undef);
+    }
+}
+{ package directive;	# pick up directives, which start with .
+    sub re {
+	my	($class, $line) = @_;
+	my	$self = {};
+	my	$ret;
+	my	$dir;
+
+	# chain-call to cfi_directive
+	$ret = cfi_directive->re($line) and return $ret;
+
+	if ($$line =~ /^\s*(\.\w+)/) {
+	    bless $self,$class;
+	    $dir = $1;
+	    $ret = $self;
+	    undef $self->{value};
+	    $$line = substr($$line,@+[0]); $$line =~ s/^\s+//;
+
+	    SWITCH: for ($dir) {
+		/\.global|\.globl|\.extern/
+			    && do { $globals{$$line} = $prefix . $$line;
+				    $$line = $globals{$$line} if ($prefix);
+				    last;
+				  };
+		/\.type/    && do { my ($sym,$type,$narg) = split(',',$$line);
+				    if ($type eq "\@function") {
+					undef $current_function;
+					$current_function->{name} = $sym;
+					$current_function->{abi}  = "svr4";
+					$current_function->{narg} = $narg;
+					$current_function->{scope} = defined($globals{$sym})?"PUBLIC":"PRIVATE";
+				    } elsif ($type eq "\@abi-omnipotent") {
+					undef $current_function;
+					$current_function->{name} = $sym;
+					$current_function->{scope} = defined($globals{$sym})?"PUBLIC":"PRIVATE";
+				    }
+				    $$line =~ s/\@abi\-omnipotent/\@function/;
+				    $$line =~ s/\@function.*/\@function/;
+				    last;
+				  };
+		/\.asciz/   && do { if ($$line =~ /^"(.*)"$/) {
+					$dir  = ".byte";
+					$$line = join(",",unpack("C*",$1),0);
+				    }
+				    last;
+				  };
+		/\.rva|\.long|\.quad/
+			    && do { $$line =~ s/([_a-z][_a-z0-9]*)/$globals{$1} or $1/gei;
+				    $$line =~ s/\.L/$decor/g;
+				    last;
+				  };
+	    }
+
+	    if ($gas) {
+		$self->{value} = $dir . "\t" . $$line;
+
+		if ($dir =~ /\.extern/) {
+		    $self->{value} = ""; # swallow extern
+		} elsif (!$elf && $dir =~ /\.type/) {
+		    $self->{value} = "";
+		    $self->{value} = ".def\t" . ($globals{$1} or $1) . ";\t" .
+				(defined($globals{$1})?".scl 2;":".scl 3;") .
+				"\t.type 32;\t.endef"
+				if ($win64 && $$line =~ /([^,]+),\@function/);
+		} elsif (!$elf && $dir =~ /\.size/) {
+		    $self->{value} = "";
+		    if (defined($current_function)) {
+			$self->{value} .= "${decor}SEH_end_$current_function->{name}:"
+				if ($win64 && $current_function->{abi} eq "svr4");
+			undef $current_function;
+		    }
+		} elsif (!$elf && $dir =~ /\.align/) {
+		    $self->{value} = ".p2align\t" . (log($$line)/log(2));
+		} elsif ($dir eq ".section") {
+		    $current_segment=$$line;
+		    if (!$elf && $current_segment eq ".init") {
+			if	($flavour eq "macosx")	{ $self->{value} = ".mod_init_func"; }
+			elsif	($flavour eq "mingw64")	{ $self->{value} = ".section\t.ctors"; }
+		    }
+		} elsif ($dir =~ /\.(text|data)/) {
+		    $current_segment=".$1";
+		} elsif ($dir =~ /\.hidden/) {
+		    if    ($flavour eq "macosx")  { $self->{value} = ".private_extern\t$prefix$$line"; }
+		    elsif ($flavour eq "mingw64") { $self->{value} = ""; }
+		} elsif ($dir =~ /\.comm/) {
+		    $self->{value} = "$dir\t$prefix$$line";
+		    $self->{value} =~ s|,([0-9]+),([0-9]+)$|",$1,".log($2)/log(2)|e if ($flavour eq "macosx");
+		}
+		$$line = "";
+		return $self;
+	    }
+
+	    # non-gas case or nasm/masm
+	    SWITCH: for ($dir) {
+		/\.text/    && do { my $v=undef;
+				    if ($nasm) {
+					$v="section	.text code align=64\n";
+				    } else {
+					$v="$current_segment\tENDS\n" if ($current_segment);
+					$current_segment = ".text\$";
+					$v.="$current_segment\tSEGMENT ";
+					$v.=$masm>=$masmref ? "ALIGN(256)" : "PAGE";
+					$v.=" 'CODE'";
+				    }
+				    $self->{value} = $v;
+				    last;
+				  };
+		/\.data/    && do { my $v=undef;
+				    if ($nasm) {
+					$v="section	.data data align=8\n";
+				    } else {
+					$v="$current_segment\tENDS\n" if ($current_segment);
+					$current_segment = "_DATA";
+					$v.="$current_segment\tSEGMENT";
+				    }
+				    $self->{value} = $v;
+				    last;
+				  };
+		/\.section/ && do { my $v=undef;
+				    $$line =~ s/([^,]*).*/$1/;
+				    $$line = ".CRT\$XCU" if ($$line eq ".init");
+				    if ($nasm) {
+					$v="section	$$line";
+					if ($$line=~/\.([px])data/) {
+					    $v.=" rdata align=";
+					    $v.=$1 eq "p"? 4 : 8;
+					} elsif ($$line=~/\.CRT\$/i) {
+					    $v.=" rdata align=8";
+					}
+				    } else {
+					$v="$current_segment\tENDS\n" if ($current_segment);
+					$v.="$$line\tSEGMENT";
+					if ($$line=~/\.([px])data/) {
+					    $v.=" READONLY";
+					    $v.=" ALIGN(".($1 eq "p" ? 4 : 8).")" if ($masm>=$masmref);
+					} elsif ($$line=~/\.CRT\$/i) {
+					    $v.=" READONLY ";
+					    $v.=$masm>=$masmref ? "ALIGN(8)" : "DWORD";
+					}
+				    }
+				    $current_segment = $$line;
+				    $self->{value} = $v;
+				    last;
+				  };
+		/\.extern/  && do { $self->{value}  = "EXTERN\t".$$line;
+				    $self->{value} .= ":NEAR" if ($masm);
+				    last;
+				  };
+		/\.globl|.global/
+			    && do { $self->{value}  = $masm?"PUBLIC":"global";
+				    $self->{value} .= "\t".$$line;
+				    last;
+				  };
+		/\.size/    && do { if (defined($current_function)) {
+					undef $self->{value};
+					if ($current_function->{abi} eq "svr4") {
+					    $self->{value}="${decor}SEH_end_$current_function->{name}:";
+					    $self->{value}.=":\n" if($masm);
+					}
+					$self->{value}.="$current_function->{name}\tENDP" if($masm && $current_function->{name});
+					undef $current_function;
+				    }
+				    last;
+				  };
+		/\.align/   && do { my $max = ($masm && $masm>=$masmref) ? 256 : 4096;
+				    $self->{value} = "ALIGN\t".($$line>$max?$max:$$line);
+				    last;
+				  };
+		/\.(value|long|rva|quad)/
+			    && do { my $sz  = substr($1,0,1);
+				    my @arr = split(/,\s*/,$$line);
+				    my $last = pop(@arr);
+				    my $conv = sub  {	my $var=shift;
+							$var=~s/^(0b[0-1]+)/oct($1)/eig;
+							$var=~s/^0x([0-9a-f]+)/0$1h/ig if ($masm);
+							if ($sz eq "D" && ($current_segment=~/.[px]data/ || $dir eq ".rva"))
+							{ $var=~s/^([_a-z\$\@][_a-z0-9\$\@]*)/$nasm?"$1 wrt ..imagebase":"imagerel $1"/egi; }
+							$var;
+						    };
+
+				    $sz =~ tr/bvlrq/BWDDQ/;
+				    $self->{value} = "\tD$sz\t";
+				    for (@arr) { $self->{value} .= &$conv($_).","; }
+				    $self->{value} .= &$conv($last);
+				    last;
+				  };
+		/\.byte/    && do { my @str=split(/,\s*/,$$line);
+				    map(s/(0b[0-1]+)/oct($1)/eig,@str);
+				    map(s/0x([0-9a-f]+)/0$1h/ig,@str) if ($masm);
+				    while ($#str>15) {
+					$self->{value}.="DB\t"
+						.join(",",@str[0..15])."\n";
+					foreach (0..15) { shift @str; }
+				    }
+				    $self->{value}.="DB\t"
+						.join(",",@str) if (@str);
+				    last;
+				  };
+		/\.comm/    && do { my @str=split(/,\s*/,$$line);
+				    my $v=undef;
+				    if ($nasm) {
+					$v.="common	$prefix@str[0] @str[1]";
+				    } else {
+					$v="$current_segment\tENDS\n" if ($current_segment);
+					$current_segment = "_DATA";
+					$v.="$current_segment\tSEGMENT\n";
+					$v.="COMM	@str[0]:DWORD:".@str[1]/4;
+				    }
+				    $self->{value} = $v;
+				    last;
+				  };
+	    }
+	    $$line = "";
+	}
+
+	$ret;
+    }
+    sub out {
+	my $self = shift;
+	$self->{value};
+    }
+}
+
+# Upon initial x86_64 introduction SSE>2 extensions were not introduced
+# yet. In order not to be bothered by tracing exact assembler versions,
+# but at the same time to provide a bare security minimum of AES-NI, we
+# hard-code some instructions. Extensions past AES-NI on the other hand
+# are traced by examining assembler version in individual perlasm
+# modules...
+
+my %regrm = (	"%eax"=>0, "%ecx"=>1, "%edx"=>2, "%ebx"=>3,
+		"%esp"=>4, "%ebp"=>5, "%esi"=>6, "%edi"=>7	);
+
+sub rex {
+ my $opcode=shift;
+ my ($dst,$src,$rex)=@_;
+
+   $rex|=0x04 if($dst>=8);
+   $rex|=0x01 if($src>=8);
+   push @$opcode,($rex|0x40) if ($rex);
+}
+
+my $movq = sub {	# elderly gas can't handle inter-register movq
+  my $arg = shift;
+  my @opcode=(0x66);
+    if ($arg =~ /%xmm([0-9]+),\s*%r(\w+)/) {
+	my ($src,$dst)=($1,$2);
+	if ($dst !~ /[0-9]+/)	{ $dst = $regrm{"%e$dst"}; }
+	rex(\@opcode,$src,$dst,0x8);
+	push @opcode,0x0f,0x7e;
+	push @opcode,0xc0|(($src&7)<<3)|($dst&7);	# ModR/M
+	@opcode;
+    } elsif ($arg =~ /%r(\w+),\s*%xmm([0-9]+)/) {
+	my ($src,$dst)=($2,$1);
+	if ($dst !~ /[0-9]+/)	{ $dst = $regrm{"%e$dst"}; }
+	rex(\@opcode,$src,$dst,0x8);
+	push @opcode,0x0f,0x6e;
+	push @opcode,0xc0|(($src&7)<<3)|($dst&7);	# ModR/M
+	@opcode;
+    } else {
+	();
+    }
+};
+
+my $pextrd = sub {
+    if (shift =~ /\$([0-9]+),\s*%xmm([0-9]+),\s*(%\w+)/) {
+      my @opcode=(0x66);
+	my $imm=$1;
+	my $src=$2;
+	my $dst=$3;
+	if ($dst =~ /%r([0-9]+)d/)	{ $dst = $1; }
+	elsif ($dst =~ /%e/)		{ $dst = $regrm{$dst}; }
+	rex(\@opcode,$src,$dst);
+	push @opcode,0x0f,0x3a,0x16;
+	push @opcode,0xc0|(($src&7)<<3)|($dst&7);	# ModR/M
+	push @opcode,$imm;
+	@opcode;
+    } else {
+	();
+    }
+};
+
+my $pinsrd = sub {
+    if (shift =~ /\$([0-9]+),\s*(%\w+),\s*%xmm([0-9]+)/) {
+      my @opcode=(0x66);
+	my $imm=$1;
+	my $src=$2;
+	my $dst=$3;
+	if ($src =~ /%r([0-9]+)/)	{ $src = $1; }
+	elsif ($src =~ /%e/)		{ $src = $regrm{$src}; }
+	rex(\@opcode,$dst,$src);
+	push @opcode,0x0f,0x3a,0x22;
+	push @opcode,0xc0|(($dst&7)<<3)|($src&7);	# ModR/M
+	push @opcode,$imm;
+	@opcode;
+    } else {
+	();
+    }
+};
+
+my $pshufb = sub {
+    if (shift =~ /%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+      my @opcode=(0x66);
+	rex(\@opcode,$2,$1);
+	push @opcode,0x0f,0x38,0x00;
+	push @opcode,0xc0|($1&7)|(($2&7)<<3);		# ModR/M
+	@opcode;
+    } else {
+	();
+    }
+};
+
+my $palignr = sub {
+    if (shift =~ /\$([0-9]+),\s*%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+      my @opcode=(0x66);
+	rex(\@opcode,$3,$2);
+	push @opcode,0x0f,0x3a,0x0f;
+	push @opcode,0xc0|($2&7)|(($3&7)<<3);		# ModR/M
+	push @opcode,$1;
+	@opcode;
+    } else {
+	();
+    }
+};
+
+my $pclmulqdq = sub {
+    if (shift =~ /\$([x0-9a-f]+),\s*%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+      my @opcode=(0x66);
+	rex(\@opcode,$3,$2);
+	push @opcode,0x0f,0x3a,0x44;
+	push @opcode,0xc0|($2&7)|(($3&7)<<3);		# ModR/M
+	my $c=$1;
+	push @opcode,$c=~/^0/?oct($c):$c;
+	@opcode;
+    } else {
+	();
+    }
+};
+
+my $rdrand = sub {
+    if (shift =~ /%[er](\w+)/) {
+      my @opcode=();
+      my $dst=$1;
+	if ($dst !~ /[0-9]+/) { $dst = $regrm{"%e$dst"}; }
+	rex(\@opcode,0,$dst,8);
+	push @opcode,0x0f,0xc7,0xf0|($dst&7);
+	@opcode;
+    } else {
+	();
+    }
+};
+
+my $rdseed = sub {
+    if (shift =~ /%[er](\w+)/) {
+      my @opcode=();
+      my $dst=$1;
+	if ($dst !~ /[0-9]+/) { $dst = $regrm{"%e$dst"}; }
+	rex(\@opcode,0,$dst,8);
+	push @opcode,0x0f,0xc7,0xf8|($dst&7);
+	@opcode;
+    } else {
+	();
+    }
+};
+
+# Not all AVX-capable assemblers recognize AMD XOP extension. Since we
+# are using only two instructions hand-code them in order to be excused
+# from chasing assembler versions...
+
+sub rxb {
+ my $opcode=shift;
+ my ($dst,$src1,$src2,$rxb)=@_;
+
+   $rxb|=0x7<<5;
+   $rxb&=~(0x04<<5) if($dst>=8);
+   $rxb&=~(0x01<<5) if($src1>=8);
+   $rxb&=~(0x02<<5) if($src2>=8);
+   push @$opcode,$rxb;
+}
+
+my $vprotd = sub {
+    if (shift =~ /\$([x0-9a-f]+),\s*%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+      my @opcode=(0x8f);
+	rxb(\@opcode,$3,$2,-1,0x08);
+	push @opcode,0x78,0xc2;
+	push @opcode,0xc0|($2&7)|(($3&7)<<3);		# ModR/M
+	my $c=$1;
+	push @opcode,$c=~/^0/?oct($c):$c;
+	@opcode;
+    } else {
+	();
+    }
+};
+
+my $vprotq = sub {
+    if (shift =~ /\$([x0-9a-f]+),\s*%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+      my @opcode=(0x8f);
+	rxb(\@opcode,$3,$2,-1,0x08);
+	push @opcode,0x78,0xc3;
+	push @opcode,0xc0|($2&7)|(($3&7)<<3);		# ModR/M
+	my $c=$1;
+	push @opcode,$c=~/^0/?oct($c):$c;
+	@opcode;
+    } else {
+	();
+    }
+};
+
+# Intel Control-flow Enforcement Technology extension. All functions and
+# indirect branch targets will have to start with this instruction...
+
+my $endbranch = sub {
+    (0xf3,0x0f,0x1e,0xfa);
+};
+
+########################################################################
+
+if ($nasm) {
+    print <<___;
+default	rel
+%define XMMWORD
+%define YMMWORD
+%define ZMMWORD
+___
+} elsif ($masm) {
+    print <<___;
+OPTION	DOTNAME
+___
+}
+while(defined(my $line=<>)) {
+
+    $line =~ s|\R$||;           # Better chomp
+
+    $line =~ s|[#!].*$||;	# get rid of asm-style comments...
+    $line =~ s|/\*.*\*/||;	# ... and C-style comments...
+    $line =~ s|^\s+||;		# ... and skip white spaces in beginning
+    $line =~ s|\s+$||;		# ... and at the end
+
+    if (my $label=label->re(\$line))	{ print $label->out(); }
+
+    if (my $directive=directive->re(\$line)) {
+	printf "%s",$directive->out();
+    } elsif (my $opcode=opcode->re(\$line)) {
+	my $asm = eval("\$".$opcode->mnemonic());
+
+	if ((ref($asm) eq 'CODE') && scalar(my @bytes=&$asm($line))) {
+	    print $gas?".byte\t":"DB\t",join(',',@bytes),"\n";
+	    next;
+	}
+
+	my @args;
+	ARGUMENT: while (1) {
+	    my $arg;
+
+	    ($arg=register->re(\$line, $opcode))||
+	    ($arg=const->re(\$line))		||
+	    ($arg=ea->re(\$line, $opcode))	||
+	    ($arg=expr->re(\$line, $opcode))	||
+	    last ARGUMENT;
+
+	    push @args,$arg;
+
+	    last ARGUMENT if ($line !~ /^,/);
+
+	    $line =~ s/^,\s*//;
+	} # ARGUMENT:
+
+	if ($#args>=0) {
+	    my $insn;
+	    my $sz=$opcode->size();
+
+	    if ($gas) {
+		$insn = $opcode->out($#args>=1?$args[$#args]->size():$sz);
+		@args = map($_->out($sz),@args);
+		printf "\t%s\t%s",$insn,join(",",@args);
+	    } else {
+		$insn = $opcode->out();
+		foreach (@args) {
+		    my $arg = $_->out();
+		    # $insn.=$sz compensates for movq, pinsrw, ...
+		    if ($arg =~ /^xmm[0-9]+$/) { $insn.=$sz; $sz="x" if(!$sz); last; }
+		    if ($arg =~ /^ymm[0-9]+$/) { $insn.=$sz; $sz="y" if(!$sz); last; }
+		    if ($arg =~ /^zmm[0-9]+$/) { $insn.=$sz; $sz="z" if(!$sz); last; }
+		    if ($arg =~ /^mm[0-9]+$/)  { $insn.=$sz; $sz="q" if(!$sz); last; }
+		}
+		@args = reverse(@args);
+		undef $sz if ($nasm && $opcode->mnemonic() eq "lea");
+		printf "\t%s\t%s",$insn,join(",",map($_->out($sz),@args));
+	    }
+	} else {
+	    printf "\t%s",$opcode->out();
+	}
+    }
+
+    print $line,"\n";
+}
+
+print "\n$current_segment\tENDS\n"	if ($current_segment && $masm);
+print "END\n"				if ($masm);
+
+close STDOUT;
+
+#################################################
+# Cross-reference x86_64 ABI "card"
+#
+# 		Unix		Win64
+# %rax		*		*
+# %rbx		-		-
+# %rcx		#4		#1
+# %rdx		#3		#2
+# %rsi		#2		-
+# %rdi		#1		-
+# %rbp		-		-
+# %rsp		-		-
+# %r8		#5		#3
+# %r9		#6		#4
+# %r10		*		*
+# %r11		*		*
+# %r12		-		-
+# %r13		-		-
+# %r14		-		-
+# %r15		-		-
+#
+# (*)	volatile register
+# (-)	preserved by callee
+# (#)	Nth argument, volatile
+#
+# In Unix terms top of stack is argument transfer area for arguments
+# which could not be accommodated in registers. Or in other words 7th
+# [integer] argument resides at 8(%rsp) upon function entry point.
+# 128 bytes above %rsp constitute a "red zone" which is not touched
+# by signal handlers and can be used as temporal storage without
+# allocating a frame.
+#
+# In Win64 terms N*8 bytes on top of stack is argument transfer area,
+# which belongs to/can be overwritten by callee. N is the number of
+# arguments passed to callee, *but* not less than 4! This means that
+# upon function entry point 5th argument resides at 40(%rsp), as well
+# as that 32 bytes from 8(%rsp) can always be used as temporal
+# storage [without allocating a frame]. One can actually argue that
+# one can assume a "red zone" above stack pointer under Win64 as well.
+# Point is that at apparently no occasion Windows kernel would alter
+# the area above user stack pointer in true asynchronous manner...
+#
+# All the above means that if assembler programmer adheres to Unix
+# register and stack layout, but disregards the "red zone" existence,
+# it's possible to use following prologue and epilogue to "gear" from
+# Unix to Win64 ABI in leaf functions with not more than 6 arguments.
+#
+# omnipotent_function:
+# ifdef WIN64
+#	movq	%rdi,8(%rsp)
+#	movq	%rsi,16(%rsp)
+#	movq	%rcx,%rdi	; if 1st argument is actually present
+#	movq	%rdx,%rsi	; if 2nd argument is actually ...
+#	movq	%r8,%rdx	; if 3rd argument is ...
+#	movq	%r9,%rcx	; if 4th argument ...
+#	movq	40(%rsp),%r8	; if 5th ...
+#	movq	48(%rsp),%r9	; if 6th ...
+# endif
+#	...
+# ifdef WIN64
+#	movq	8(%rsp),%rdi
+#	movq	16(%rsp),%rsi
+# endif
+#	ret
+#
+#################################################
+# Win64 SEH, Structured Exception Handling.
+#
+# Unlike on Unix systems(*) lack of Win64 stack unwinding information
+# has undesired side-effect at run-time: if an exception is raised in
+# assembler subroutine such as those in question (basically we're
+# referring to segmentation violations caused by malformed input
+# parameters), the application is briskly terminated without invoking
+# any exception handlers, most notably without generating memory dump
+# or any user notification whatsoever. This poses a problem. It's
+# possible to address it by registering custom language-specific
+# handler that would restore processor context to the state at
+# subroutine entry point and return "exception is not handled, keep
+# unwinding" code. Writing such handler can be a challenge... But it's
+# doable, though requires certain coding convention. Consider following
+# snippet:
+#
+# .type	function,@function
+# function:
+#	movq	%rsp,%rax	# copy rsp to volatile register
+#	pushq	%r15		# save non-volatile registers
+#	pushq	%rbx
+#	pushq	%rbp
+#	movq	%rsp,%r11
+#	subq	%rdi,%r11	# prepare [variable] stack frame
+#	andq	$-64,%r11
+#	movq	%rax,0(%r11)	# check for exceptions
+#	movq	%r11,%rsp	# allocate [variable] stack frame
+#	movq	%rax,0(%rsp)	# save original rsp value
+# magic_point:
+#	...
+#	movq	0(%rsp),%rcx	# pull original rsp value
+#	movq	-24(%rcx),%rbp	# restore non-volatile registers
+#	movq	-16(%rcx),%rbx
+#	movq	-8(%rcx),%r15
+#	movq	%rcx,%rsp	# restore original rsp
+# magic_epilogue:
+#	ret
+# .size function,.-function
+#
+# The key is that up to magic_point copy of original rsp value remains
+# in chosen volatile register and no non-volatile register, except for
+# rsp, is modified. While past magic_point rsp remains constant till
+# the very end of the function. In this case custom language-specific
+# exception handler would look like this:
+#
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+# {	ULONG64 *rsp = (ULONG64 *)context->Rax;
+#	ULONG64  rip = context->Rip;
+#
+#	if (rip >= magic_point)
+#	{   rsp = (ULONG64 *)context->Rsp;
+#	    if (rip < magic_epilogue)
+#	    {	rsp = (ULONG64 *)rsp[0];
+#		context->Rbp = rsp[-3];
+#		context->Rbx = rsp[-2];
+#		context->R15 = rsp[-1];
+#	    }
+#	}
+#	context->Rsp = (ULONG64)rsp;
+#	context->Rdi = rsp[1];
+#	context->Rsi = rsp[2];
+#
+#	memcpy (disp->ContextRecord,context,sizeof(CONTEXT));
+#	RtlVirtualUnwind(UNW_FLAG_NHANDLER,disp->ImageBase,
+#		dips->ControlPc,disp->FunctionEntry,disp->ContextRecord,
+#		&disp->HandlerData,&disp->EstablisherFrame,NULL);
+#	return ExceptionContinueSearch;
+# }
+#
+# It's appropriate to implement this handler in assembler, directly in
+# function's module. In order to do that one has to know members'
+# offsets in CONTEXT and DISPATCHER_CONTEXT structures and some constant
+# values. Here they are:
+#
+#	CONTEXT.Rax				120
+#	CONTEXT.Rcx				128
+#	CONTEXT.Rdx				136
+#	CONTEXT.Rbx				144
+#	CONTEXT.Rsp				152
+#	CONTEXT.Rbp				160
+#	CONTEXT.Rsi				168
+#	CONTEXT.Rdi				176
+#	CONTEXT.R8				184
+#	CONTEXT.R9				192
+#	CONTEXT.R10				200
+#	CONTEXT.R11				208
+#	CONTEXT.R12				216
+#	CONTEXT.R13				224
+#	CONTEXT.R14				232
+#	CONTEXT.R15				240
+#	CONTEXT.Rip				248
+#	CONTEXT.Xmm6				512
+#	sizeof(CONTEXT)				1232
+#	DISPATCHER_CONTEXT.ControlPc		0
+#	DISPATCHER_CONTEXT.ImageBase		8
+#	DISPATCHER_CONTEXT.FunctionEntry	16
+#	DISPATCHER_CONTEXT.EstablisherFrame	24
+#	DISPATCHER_CONTEXT.TargetIp		32
+#	DISPATCHER_CONTEXT.ContextRecord	40
+#	DISPATCHER_CONTEXT.LanguageHandler	48
+#	DISPATCHER_CONTEXT.HandlerData		56
+#	UNW_FLAG_NHANDLER			0
+#	ExceptionContinueSearch			1
+#
+# In order to tie the handler to the function one has to compose
+# couple of structures: one for .xdata segment and one for .pdata.
+#
+# UNWIND_INFO structure for .xdata segment would be
+#
+# function_unwind_info:
+#	.byte	9,0,0,0
+#	.rva	handler
+#
+# This structure designates exception handler for a function with
+# zero-length prologue, no stack frame or frame register.
+#
+# To facilitate composing of .pdata structures, auto-generated "gear"
+# prologue copies rsp value to rax and denotes next instruction with
+# .LSEH_begin_{function_name} label. This essentially defines the SEH
+# styling rule mentioned in the beginning. Position of this label is
+# chosen in such manner that possible exceptions raised in the "gear"
+# prologue would be accounted to caller and unwound from latter's frame.
+# End of function is marked with respective .LSEH_end_{function_name}
+# label. To summarize, .pdata segment would contain
+#
+#	.rva	.LSEH_begin_function
+#	.rva	.LSEH_end_function
+#	.rva	function_unwind_info
+#
+# Reference to function_unwind_info from .xdata segment is the anchor.
+# In case you wonder why references are 32-bit .rvas and not 64-bit
+# .quads. References put into these two segments are required to be
+# *relative* to the base address of the current binary module, a.k.a.
+# image base. No Win64 module, be it .exe or .dll, can be larger than
+# 2GB and thus such relative references can be and are accommodated in
+# 32 bits.
+#
+# Having reviewed the example function code, one can argue that "movq
+# %rsp,%rax" above is redundant. It is not! Keep in mind that on Unix
+# rax would contain an undefined value. If this "offends" you, use
+# another register and refrain from modifying rax till magic_point is
+# reached, i.e. as if it was a non-volatile register. If more registers
+# are required prior [variable] frame setup is completed, note that
+# nobody says that you can have only one "magic point." You can
+# "liberate" non-volatile registers by denoting last stack off-load
+# instruction and reflecting it in finer grade unwind logic in handler.
+# After all, isn't it why it's called *language-specific* handler...
+#
+# SE handlers are also involved in unwinding stack when executable is
+# profiled or debugged. Profiling implies additional limitations that
+# are too subtle to discuss here. For now it's sufficient to say that
+# in order to simplify handlers one should either a) offload original
+# %rsp to stack (like discussed above); or b) if you have a register to
+# spare for frame pointer, choose volatile one.
+#
+# (*)	Note that we're talking about run-time, not debug-time. Lack of
+#	unwind information makes debugging hard on both Windows and
+#	Unix. "Unlike" refers to the fact that on Unix signal handler
+#	will always be invoked, core dumped and appropriate exit code
+#	returned to parent (for user notification).
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86asm.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86asm.pl
new file mode 100644
index 000000000..29dc1a2cf
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86asm.pl
@@ -0,0 +1,303 @@
+#! /usr/bin/env perl
+# Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# require 'x86asm.pl';
+# &asm_init(<flavor>[,$i386only]);
+# &function_begin("foo");
+# ...
+# &function_end("foo");
+# &asm_finish
+
+$out=();
+$i386=0;
+
+# AUTOLOAD is this context has quite unpleasant side effect, namely
+# that typos in function calls effectively go to assembler output,
+# but on the pros side we don't have to implement one subroutine per
+# each opcode...
+sub ::AUTOLOAD
+{ my $opcode = $AUTOLOAD;
+
+    die "more than 4 arguments passed to $opcode" if ($#_>3);
+
+    $opcode =~ s/.*:://;
+    if    ($opcode =~ /^push/) { $stack+=4; }
+    elsif ($opcode =~ /^pop/)  { $stack-=4; }
+
+    &generic($opcode,@_) or die "undefined subroutine \&$AUTOLOAD";
+}
+
+sub ::emit
+{ my $opcode=shift;
+
+    if ($#_==-1)    { push(@out,"\t$opcode\n");				}
+    else            { push(@out,"\t$opcode\t".join(',',@_)."\n");	}
+}
+
+sub ::LB
+{   $_[0] =~ m/^e?([a-d])x$/o or die "$_[0] does not have a 'low byte'";
+  $1."l";
+}
+sub ::HB
+{   $_[0] =~ m/^e?([a-d])x$/o or die "$_[0] does not have a 'high byte'";
+  $1."h";
+}
+sub ::stack_push{ my $num=$_[0]*4; $stack+=$num; &sub("esp",$num);	}
+sub ::stack_pop	{ my $num=$_[0]*4; $stack-=$num; &add("esp",$num);	}
+sub ::blindpop	{ &pop($_[0]); $stack+=4;				}
+sub ::wparam	{ &DWP($stack+4*$_[0],"esp");				}
+sub ::swtmp	{ &DWP(4*$_[0],"esp");					}
+
+sub ::bswap
+{   if ($i386)	# emulate bswap for i386
+    {	&comment("bswap @_");
+	&xchg(&HB(@_),&LB(@_));
+	&ror (@_,16);
+	&xchg(&HB(@_),&LB(@_));
+    }
+    else
+    {	&generic("bswap",@_);	}
+}
+# These are made-up opcodes introduced over the years essentially
+# by ignorance, just alias them to real ones...
+sub ::movb	{ &mov(@_);	}
+sub ::xorb	{ &xor(@_);	}
+sub ::rotl	{ &rol(@_);	}
+sub ::rotr	{ &ror(@_);	}
+sub ::exch	{ &xchg(@_);	}
+sub ::halt	{ &hlt;		}
+sub ::movz	{ &movzx(@_);	}
+sub ::pushf	{ &pushfd;	}
+sub ::popf	{ &popfd;	}
+
+# 3 argument instructions
+sub ::movq
+{ my($p1,$p2,$optimize)=@_;
+
+    if ($optimize && $p1=~/^mm[0-7]$/ && $p2=~/^mm[0-7]$/)
+    # movq between mmx registers can sink Intel CPUs
+    {	&::pshufw($p1,$p2,0xe4);		}
+    else
+    {	&::generic("movq",@_);			}
+}
+
+# SSE>2 instructions
+my %regrm = (	"eax"=>0, "ecx"=>1, "edx"=>2, "ebx"=>3,
+		"esp"=>4, "ebp"=>5, "esi"=>6, "edi"=>7	);
+sub ::pextrd
+{ my($dst,$src,$imm)=@_;
+    if ("$dst:$src" =~ /(e[a-dsd][ixp]):xmm([0-7])/)
+    {	&::data_byte(0x66,0x0f,0x3a,0x16,0xc0|($2<<3)|$regrm{$1},$imm);	}
+    else
+    {	&::generic("pextrd",@_);		}
+}
+
+sub ::pinsrd
+{ my($dst,$src,$imm)=@_;
+    if ("$dst:$src" =~ /xmm([0-7]):(e[a-dsd][ixp])/)
+    {	&::data_byte(0x66,0x0f,0x3a,0x22,0xc0|($1<<3)|$regrm{$2},$imm);	}
+    else
+    {	&::generic("pinsrd",@_);		}
+}
+
+sub ::pshufb
+{ my($dst,$src)=@_;
+    if ("$dst:$src" =~ /xmm([0-7]):xmm([0-7])/)
+    {	&data_byte(0x66,0x0f,0x38,0x00,0xc0|($1<<3)|$2);	}
+    else
+    {	&::generic("pshufb",@_);		}
+}
+
+sub ::palignr
+{ my($dst,$src,$imm)=@_;
+    if ("$dst:$src" =~ /xmm([0-7]):xmm([0-7])/)
+    {	&::data_byte(0x66,0x0f,0x3a,0x0f,0xc0|($1<<3)|$2,$imm);	}
+    else
+    {	&::generic("palignr",@_);		}
+}
+
+sub ::pclmulqdq
+{ my($dst,$src,$imm)=@_;
+    if ("$dst:$src" =~ /xmm([0-7]):xmm([0-7])/)
+    {	&::data_byte(0x66,0x0f,0x3a,0x44,0xc0|($1<<3)|$2,$imm);	}
+    else
+    {	&::generic("pclmulqdq",@_);		}
+}
+
+sub ::rdrand
+{ my ($dst)=@_;
+    if ($dst =~ /(e[a-dsd][ixp])/)
+    {	&::data_byte(0x0f,0xc7,0xf0|$regrm{$dst});	}
+    else
+    {	&::generic("rdrand",@_);	}
+}
+
+sub ::rdseed
+{ my ($dst)=@_;
+    if ($dst =~ /(e[a-dsd][ixp])/)
+    {	&::data_byte(0x0f,0xc7,0xf8|$regrm{$dst});	}
+    else
+    {	&::generic("rdrand",@_);	}
+}
+
+sub rxb {
+ local *opcode=shift;
+ my ($dst,$src1,$src2,$rxb)=@_;
+
+   $rxb|=0x7<<5;
+   $rxb&=~(0x04<<5) if($dst>=8);
+   $rxb&=~(0x01<<5) if($src1>=8);
+   $rxb&=~(0x02<<5) if($src2>=8);
+   push @opcode,$rxb;
+}
+
+sub ::vprotd
+{ my $args=join(',',@_);
+    if ($args =~ /xmm([0-7]),xmm([0-7]),([x0-9a-f]+)/)
+    { my @opcode=(0x8f);
+	rxb(\@opcode,$1,$2,-1,0x08);
+	push @opcode,0x78,0xc2;
+	push @opcode,0xc0|($2&7)|(($1&7)<<3);		# ModR/M
+	my $c=$3;
+	push @opcode,$c=~/^0/?oct($c):$c;
+	&::data_byte(@opcode);
+    }
+    else
+    {	&::generic("vprotd",@_);	}
+}
+
+sub ::endbranch
+{
+    &::data_byte(0xf3,0x0f,0x1e,0xfb);
+}
+
+# label management
+$lbdecor="L";		# local label decoration, set by package
+$label="000";
+
+sub ::islabel		# see is argument is a known label
+{ my $i;
+    foreach $i (values %label) { return $i if ($i eq $_[0]); }
+  $label{$_[0]};	# can be undef
+}
+
+sub ::label		# instantiate a function-scope label
+{   if (!defined($label{$_[0]}))
+    {	$label{$_[0]}="${lbdecor}${label}${_[0]}"; $label++;   }
+  $label{$_[0]};
+}
+
+sub ::LABEL		# instantiate a file-scope label
+{   $label{$_[0]}=$_[1] if (!defined($label{$_[0]}));
+  $label{$_[0]};
+}
+
+sub ::static_label	{ &::LABEL($_[0],$lbdecor.$_[0]); }
+
+sub ::set_label_B	{ push(@out,"@_:\n"); }
+sub ::set_label
+{ my $label=&::label($_[0]);
+    &::align($_[1]) if ($_[1]>1);
+    &::set_label_B($label);
+  $label;
+}
+
+sub ::wipe_labels	# wipes function-scope labels
+{   foreach $i (keys %label)
+    {	delete $label{$i} if ($label{$i} =~ /^\Q${lbdecor}\E[0-9]{3}/);	}
+}
+
+# subroutine management
+sub ::function_begin
+{   &function_begin_B(@_);
+    $stack=4;
+    &push("ebp");
+    &push("ebx");
+    &push("esi");
+    &push("edi");
+}
+
+sub ::function_end
+{   &pop("edi");
+    &pop("esi");
+    &pop("ebx");
+    &pop("ebp");
+    &ret();
+    &function_end_B(@_);
+    $stack=0;
+    &wipe_labels();
+}
+
+sub ::function_end_A
+{   &pop("edi");
+    &pop("esi");
+    &pop("ebx");
+    &pop("ebp");
+    &ret();
+    $stack+=16;	# readjust esp as if we didn't pop anything
+}
+
+sub ::asciz
+{ my @str=unpack("C*",shift);
+    push @str,0;
+    while ($#str>15) {
+	&data_byte(@str[0..15]);
+	foreach (0..15) { shift @str; }
+    }
+    &data_byte(@str) if (@str);
+}
+
+sub ::asm_finish
+{   &file_end();
+    print @out;
+}
+
+sub ::asm_init
+{ my ($type,$cpu)=@_;
+
+    $i386=$cpu;
+
+    $elf=$cpp=$coff=$aout=$macosx=$win32=$mwerks=$android=0;
+    if    (($type eq "elf"))
+    {	$elf=1;			require "x86gas.pl";	}
+    elsif (($type eq "elf-1"))
+    {	$elf=-1;		require "x86gas.pl";	}
+    elsif (($type eq "a\.out"))
+    {	$aout=1;		require "x86gas.pl";	}
+    elsif (($type eq "coff" or $type eq "gaswin"))
+    {	$coff=1;		require "x86gas.pl";	}
+    elsif (($type eq "win32n"))
+    {	$win32=1;		require "x86nasm.pl";	}
+    elsif (($type eq "win32"))
+    {	$win32=1;		require "x86masm.pl";	}
+    elsif (($type eq "macosx"))
+    {	$aout=1; $macosx=1;	require "x86gas.pl";	}
+    elsif (($type eq "android"))
+    {	$elf=1; $android=1;	require "x86gas.pl";	}
+    else
+    {	print STDERR <<"EOF";
+Pick one target type from
+	elf	- Linux, FreeBSD, Solaris x86, etc.
+	a.out	- DJGPP, elder OpenBSD, etc.
+	coff	- GAS/COFF such as Win32 targets
+	win32n	- Windows 95/Windows NT NASM format
+	macosx	- Mac OS X
+EOF
+	exit(1);
+    }
+
+    $pic=0;
+    for (@ARGV) { $pic=1 if (/\-[fK]PIC/i); }
+
+    &file();
+}
+
+sub ::hidden {}
+
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86gas.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86gas.pl
new file mode 100644
index 000000000..5c7ea3880
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86gas.pl
@@ -0,0 +1,265 @@
+#! /usr/bin/env perl
+# Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+package x86gas;
+
+*out=\@::out;
+
+$::lbdecor=$::aout?"L":".L";		# local label decoration
+$nmdecor=($::aout or $::coff)?"_":"";	# external name decoration
+
+$initseg="";
+
+$align=16;
+$align=log($align)/log(2) if ($::aout);
+$com_start="#" if ($::aout or $::coff);
+
+sub opsize()
+{ my $reg=shift;
+    if    ($reg =~ m/^%e/o)		{ "l"; }
+    elsif ($reg =~ m/^%[a-d][hl]$/o)	{ "b"; }
+    elsif ($reg =~ m/^%[yxm]/o)		{ undef; }
+    else				{ "w"; }
+}
+
+# swap arguments;
+# expand opcode with size suffix;
+# prefix numeric constants with $;
+sub ::generic
+{ my($opcode,@arg)=@_;
+  my($suffix,$dst,$src);
+
+    @arg=reverse(@arg);
+
+    for (@arg)
+    {	s/^(\*?)(e?[a-dsixphl]{2})$/$1%$2/o;	# gp registers
+	s/^([xy]?mm[0-7])$/%$1/o;		# xmm/mmx registers
+	s/^(\-?[0-9]+)$/\$$1/o;			# constants
+	s/^(\-?0x[0-9a-f]+)$/\$$1/o;		# constants
+    }
+
+    $dst = $arg[$#arg]		if ($#arg>=0);
+    $src = $arg[$#arg-1]	if ($#arg>=1);
+    if    ($dst =~ m/^%/o)	{ $suffix=&opsize($dst); }
+    elsif ($src =~ m/^%/o)	{ $suffix=&opsize($src); }
+    else			{ $suffix="l";           }
+    undef $suffix if ($dst =~ m/^%[xm]/o || $src =~ m/^%[xm]/o);
+
+    if ($#_==0)				{ &::emit($opcode);		}
+    elsif ($#_==1 && $opcode =~ m/^(call|clflush|j|loop|set)/o)
+					{ &::emit($opcode,@arg);	}
+    else				{ &::emit($opcode.$suffix,@arg);}
+
+  1;
+}
+#
+# opcodes not covered by ::generic above, mostly inconsistent namings...
+#
+sub ::movzx	{ &::movzb(@_);			}
+sub ::pushfd	{ &::pushfl;			}
+sub ::popfd	{ &::popfl;			}
+sub ::cpuid	{ &::emit(".byte\t0x0f,0xa2");	}
+sub ::rdtsc	{ &::emit(".byte\t0x0f,0x31");	}
+
+sub ::call	{ &::emit("call",(&::islabel($_[0]) or "$nmdecor$_[0]")); }
+sub ::call_ptr	{ &::generic("call","*$_[0]");	}
+sub ::jmp_ptr	{ &::generic("jmp","*$_[0]");	}
+
+*::bswap = sub	{ &::emit("bswap","%$_[0]");	} if (!$::i386);
+
+sub ::DWP
+{ my($addr,$reg1,$reg2,$idx)=@_;
+  my $ret="";
+
+    if (!defined($idx) && 1*$reg2) { $idx=$reg2; $reg2=$reg1; undef $reg1; }
+
+    $addr =~ s/^\s+//;
+    # prepend global references with optional underscore
+    $addr =~ s/^([^\+\-0-9][^\+\-]*)/&::islabel($1) or "$nmdecor$1"/ige;
+
+    $reg1 = "%$reg1" if ($reg1);
+    $reg2 = "%$reg2" if ($reg2);
+
+    $ret .= $addr if (($addr ne "") && ($addr ne 0));
+
+    if ($reg2)
+    {	$idx!= 0 or $idx=1;
+	$ret .= "($reg1,$reg2,$idx)";
+    }
+    elsif ($reg1)
+    {	$ret .= "($reg1)";	}
+
+  $ret;
+}
+sub ::QWP	{ &::DWP(@_);	}
+sub ::BP	{ &::DWP(@_);	}
+sub ::WP	{ &::DWP(@_);	}
+sub ::BC	{ @_;		}
+sub ::DWC	{ @_;		}
+
+sub ::file
+{   push(@out,".text\n");	}
+
+sub ::function_begin_B
+{ my $func=shift;
+  my $global=($func !~ /^_/);
+  my $begin="${::lbdecor}_${func}_begin";
+
+    &::LABEL($func,$global?"$begin":"$nmdecor$func");
+    $func=$nmdecor.$func;
+
+    push(@out,".globl\t$func\n")	if ($global);
+    if ($::coff)
+    {	push(@out,".def\t$func;\t.scl\t".(3-$global).";\t.type\t32;\t.endef\n"); }
+    elsif (($::aout and !$::pic) or $::macosx)
+    { }
+    else
+    {	push(@out,".type	$func,\@function\n"); }
+    push(@out,".align\t$align\n");
+    push(@out,"$func:\n");
+    push(@out,"$begin:\n")		if ($global);
+    $::stack=4;
+}
+
+sub ::function_end_B
+{ my $func=shift;
+    push(@out,".size\t$nmdecor$func,.-".&::LABEL($func)."\n") if ($::elf);
+    $::stack=0;
+    &::wipe_labels();
+}
+
+sub ::comment
+	{
+	if (!defined($com_start) or $::elf)
+		{	# Regarding $::elf above...
+			# GNU and SVR4 as'es use different comment delimiters,
+		push(@out,"\n");	# so we just skip ELF comments...
+		return;
+		}
+	foreach (@_)
+		{
+		if (/^\s*$/)
+			{ push(@out,"\n"); }
+		else
+			{ push(@out,"\t$com_start $_ $com_end\n"); }
+		}
+	}
+
+sub ::external_label
+{   foreach(@_) { &::LABEL($_,$nmdecor.$_); }   }
+
+sub ::public_label
+{   push(@out,".globl\t".&::LABEL($_[0],$nmdecor.$_[0])."\n");   }
+
+sub ::file_end
+{   if ($::macosx)
+    {	if (%non_lazy_ptr)
+    	{   push(@out,".section __IMPORT,__pointers,non_lazy_symbol_pointers\n");
+	    foreach $i (keys %non_lazy_ptr)
+	    {	push(@out,"$non_lazy_ptr{$i}:\n.indirect_symbol\t$i\n.long\t0\n");   }
+	}
+    }
+    if (grep {/\b${nmdecor}OPENSSL_ia32cap_P\b/i} @out) {
+	my $tmp=".comm\t${nmdecor}OPENSSL_ia32cap_P,16";
+	if ($::macosx)	{ push (@out,"$tmp,2\n"); }
+	elsif ($::elf)	{ push (@out,"$tmp,4\n"); }
+	else		{ push (@out,"$tmp\n"); }
+    }
+    push(@out,$initseg) if ($initseg);
+}
+
+sub ::data_byte	{   push(@out,".byte\t".join(',',@_)."\n");   }
+sub ::data_short{   push(@out,".value\t".join(',',@_)."\n");  }
+sub ::data_word {   push(@out,".long\t".join(',',@_)."\n");   }
+
+sub ::align
+{ my $val=$_[0];
+    if ($::aout)
+    {	$val=int(log($val)/log(2));
+	$val.=",0x90";
+    }
+    push(@out,".align\t$val\n");
+}
+
+sub ::picmeup
+{ my($dst,$sym,$base,$reflabel)=@_;
+
+    if (($::pic && ($::elf || $::aout)) || $::macosx)
+    {	if (!defined($base))
+	{   &::call(&::label("PIC_me_up"));
+	    &::set_label("PIC_me_up");
+	    &::blindpop($dst);
+	    $base=$dst;
+	    $reflabel=&::label("PIC_me_up");
+	}
+	if ($::macosx)
+	{   my $indirect=&::static_label("$nmdecor$sym\$non_lazy_ptr");
+	    &::mov($dst,&::DWP("$indirect-$reflabel",$base));
+	    $non_lazy_ptr{"$nmdecor$sym"}=$indirect;
+	}
+	elsif ($sym eq "OPENSSL_ia32cap_P" && $::elf>0)
+	{   &::lea($dst,&::DWP("$sym-$reflabel",$base));   }
+	else
+	{   &::lea($dst,&::DWP("_GLOBAL_OFFSET_TABLE_+[.-$reflabel]",
+			    $base));
+	    &::mov($dst,&::DWP("$sym\@GOT",$dst));
+	}
+    }
+    else
+    {	&::lea($dst,&::DWP($sym));	}
+}
+
+sub ::initseg
+{ my $f=$nmdecor.shift;
+
+    if ($::android)
+    {	$initseg.=<<___;
+.section	.init_array
+.align	4
+.long	$f
+___
+    }
+    elsif ($::elf)
+    {	$initseg.=<<___;
+.section	.init
+	call	$f
+___
+    }
+    elsif ($::coff)
+    {   $initseg.=<<___;	# applies to both Cygwin and Mingw
+.section	.ctors
+.long	$f
+___
+    }
+    elsif ($::macosx)
+    {	$initseg.=<<___;
+.mod_init_func
+.align 2
+.long   $f
+___
+    }
+    elsif ($::aout)
+    {	my $ctor="${nmdecor}_GLOBAL_\$I\$$f";
+	$initseg.=".text\n";
+	$initseg.=".type	$ctor,\@function\n" if ($::pic);
+	$initseg.=<<___;	# OpenBSD way...
+.globl	$ctor
+.align	2
+$ctor:
+	jmp	$f
+___
+    }
+}
+
+sub ::dataseg
+{   push(@out,".data\n");   }
+
+*::hidden = sub { push(@out,".hidden\t$nmdecor$_[0]\n"); } if ($::elf);
+
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86masm.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86masm.pl
new file mode 100644
index 000000000..dffee7621
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86masm.pl
@@ -0,0 +1,206 @@
+#! /usr/bin/env perl
+# Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+package x86masm;
+
+*out=\@::out;
+
+$::lbdecor="\$L";	# local label decoration
+$nmdecor="_";		# external name decoration
+
+$initseg="";
+$segment="";
+
+sub ::generic
+{ my ($opcode,@arg)=@_;
+
+    # fix hexadecimal constants
+    for (@arg) { s/(?<![\w\$\.])0x([0-9a-f]+)/0$1h/oi; }
+
+    if ($opcode =~ /lea/ && @arg[1] =~ s/.*PTR\s+(\(.*\))$/OFFSET $1/)	# no []
+    {	$opcode="mov";	}
+    elsif ($opcode !~ /mov[dq]$/)
+    {	# fix xmm references
+	$arg[0] =~ s/\b[A-Z]+WORD\s+PTR/XMMWORD PTR/i if ($arg[-1]=~/\bxmm[0-7]\b/i);
+	$arg[-1] =~ s/\b[A-Z]+WORD\s+PTR/XMMWORD PTR/i if ($arg[0]=~/\bxmm[0-7]\b/i);
+    }
+
+    &::emit($opcode,@arg);
+  1;
+}
+#
+# opcodes not covered by ::generic above, mostly inconsistent namings...
+#
+sub ::call	{ &::emit("call",(&::islabel($_[0]) or "$nmdecor$_[0]")); }
+sub ::call_ptr	{ &::emit("call",@_);	}
+sub ::jmp_ptr	{ &::emit("jmp",@_);	}
+sub ::lock	{ &::data_byte(0xf0);	}
+
+sub get_mem
+{ my($size,$addr,$reg1,$reg2,$idx)=@_;
+  my($post,$ret);
+
+    if (!defined($idx) && 1*$reg2) { $idx=$reg2; $reg2=$reg1; undef $reg1; }
+
+    $ret .= "$size PTR " if ($size ne "");
+
+    $addr =~ s/^\s+//;
+    # prepend global references with optional underscore
+    $addr =~ s/^([^\+\-0-9][^\+\-]*)/&::islabel($1) or "$nmdecor$1"/ige;
+    # put address arithmetic expression in parenthesis
+    $addr="($addr)" if ($addr =~ /^.+[\-\+].+$/);
+
+    if (($addr ne "") && ($addr ne 0))
+    {	if ($addr !~ /^-/)	{ $ret .= "$addr";  }
+	else			{ $post=$addr;      }
+    }
+    $ret .= "[";
+
+    if ($reg2 ne "")
+    {	$idx!=0 or $idx=1;
+	$ret .= "$reg2*$idx";
+	$ret .= "+$reg1" if ($reg1 ne "");
+    }
+    else
+    {	$ret .= "$reg1";   }
+
+    $ret .= "$post]";
+    $ret =~ s/\+\]/]/; # in case $addr was the only argument
+    $ret =~ s/\[\s*\]//;
+
+  $ret;
+}
+sub ::BP	{ &get_mem("BYTE",@_);  }
+sub ::WP	{ &get_mem("WORD",@_);	}
+sub ::DWP	{ &get_mem("DWORD",@_); }
+sub ::QWP	{ &get_mem("QWORD",@_); }
+sub ::BC	{ "@_";  }
+sub ::DWC	{ "@_"; }
+
+sub ::file
+{ my $tmp=<<___;
+IF \@Version LT 800
+ECHO MASM version 8.00 or later is strongly recommended.
+ENDIF
+.686
+.MODEL	FLAT
+OPTION	DOTNAME
+IF \@Version LT 800
+.text\$	SEGMENT PAGE 'CODE'
+ELSE
+.text\$	SEGMENT ALIGN(64) 'CODE'
+ENDIF
+___
+    push(@out,$tmp);
+    $segment = ".text\$";
+}
+
+sub ::function_begin_B
+{ my $func=shift;
+  my $global=($func !~ /^_/);
+  my $begin="${::lbdecor}_${func}_begin";
+
+    &::LABEL($func,$global?"$begin":"$nmdecor$func");
+    $func="ALIGN\t16\n".$nmdecor.$func."\tPROC";
+
+    if ($global)    { $func.=" PUBLIC\n${begin}::\n"; }
+    else	    { $func.=" PRIVATE\n";            }
+    push(@out,$func);
+    $::stack=4;
+}
+sub ::function_end_B
+{ my $func=shift;
+
+    push(@out,"$nmdecor$func ENDP\n");
+    $::stack=0;
+    &::wipe_labels();
+}
+
+sub ::file_end
+{ my $xmmheader=<<___;
+.686
+.XMM
+IF \@Version LT 800
+XMMWORD STRUCT 16
+DQ	2 dup (?)
+XMMWORD	ENDS
+ENDIF
+___
+    if (grep {/\b[x]?mm[0-7]\b/i} @out) {
+	grep {s/\.[3-7]86/$xmmheader/} @out;
+    }
+
+    push(@out,"$segment	ENDS\n");
+
+    if (grep {/\b${nmdecor}OPENSSL_ia32cap_P\b/i} @out)
+    {	my $comm=<<___;
+.bss	SEGMENT 'BSS'
+COMM	${nmdecor}OPENSSL_ia32cap_P:DWORD:4
+.bss	ENDS
+___
+	# comment out OPENSSL_ia32cap_P declarations
+	grep {s/(^EXTERN\s+${nmdecor}OPENSSL_ia32cap_P)/\;$1/} @out;
+	push (@out,$comm);
+    }
+    push (@out,$initseg) if ($initseg);
+    push (@out,"END\n");
+}
+
+sub ::comment {   foreach (@_) { push(@out,"\t; $_\n"); }   }
+
+*::set_label_B = sub
+{ my $l=shift; push(@out,$l.($l=~/^\Q${::lbdecor}\E[0-9]{3}/?":\n":"::\n")); };
+
+sub ::external_label
+{   foreach(@_)
+    {	push(@out, "EXTERN\t".&::LABEL($_,$nmdecor.$_).":NEAR\n");   }
+}
+
+sub ::public_label
+{   push(@out,"PUBLIC\t".&::LABEL($_[0],$nmdecor.$_[0])."\n");   }
+
+sub ::data_byte
+{   push(@out,("DB\t").join(',',splice(@_,0,16))."\n") while(@_);	}
+
+sub ::data_short
+{   push(@out,("DW\t").join(',',splice(@_,0,8))."\n") while(@_);	}
+
+sub ::data_word
+{   push(@out,("DD\t").join(',',splice(@_,0,4))."\n") while(@_);	}
+
+sub ::align
+{   push(@out,"ALIGN\t$_[0]\n");	}
+
+sub ::picmeup
+{ my($dst,$sym)=@_;
+    &::lea($dst,&::DWP($sym));
+}
+
+sub ::initseg
+{ my $f=$nmdecor.shift;
+
+    $initseg.=<<___;
+.CRT\$XCU	SEGMENT DWORD PUBLIC 'DATA'
+EXTERN	$f:NEAR
+DD	$f
+.CRT\$XCU	ENDS
+___
+}
+
+sub ::dataseg
+{   push(@out,"$segment\tENDS\n_DATA\tSEGMENT\n"); $segment="_DATA";   }
+
+sub ::safeseh
+{ my $nm=shift;
+    push(@out,"IF \@Version GE 710\n");
+    push(@out,".SAFESEH	".&::LABEL($nm,$nmdecor.$nm)."\n");
+    push(@out,"ENDIF\n");
+}
+
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86nasm.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86nasm.pl
new file mode 100644
index 000000000..4e64dad92
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/perlasm/x86nasm.pl
@@ -0,0 +1,186 @@
+#! /usr/bin/env perl
+# Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+package x86nasm;
+
+*out=\@::out;
+
+$::lbdecor="L\$";		# local label decoration
+$nmdecor="_";			# external name decoration
+$drdecor=$::mwerks?".":"";	# directive decoration
+
+$initseg="";
+
+sub ::generic
+{ my $opcode=shift;
+  my $tmp;
+
+    if (!$::mwerks)
+    {   if    ($opcode =~ m/^j/o && $#_==0) # optimize jumps
+	{   $_[0] = "NEAR $_[0]";   	}
+	elsif ($opcode eq "lea" && $#_==1)  # wipe storage qualifier from lea
+	{   $_[1] =~ s/^[^\[]*\[/\[/o;	}
+	elsif ($opcode eq "clflush" && $#_==0)
+	{   $_[0] =~ s/^[^\[]*\[/\[/o;	}
+    }
+    &::emit($opcode,@_);
+  1;
+}
+#
+# opcodes not covered by ::generic above, mostly inconsistent namings...
+#
+sub ::call	{ &::emit("call",(&::islabel($_[0]) or "$nmdecor$_[0]")); }
+sub ::call_ptr	{ &::emit("call",@_);	}
+sub ::jmp_ptr	{ &::emit("jmp",@_);	}
+
+sub get_mem
+{ my($size,$addr,$reg1,$reg2,$idx)=@_;
+  my($post,$ret);
+
+    if (!defined($idx) && 1*$reg2) { $idx=$reg2; $reg2=$reg1; undef $reg1; }
+
+    if ($size ne "")
+    {	$ret .= "$size";
+	$ret .= " PTR" if ($::mwerks);
+	$ret .= " ";
+    }
+    $ret .= "[";
+
+    $addr =~ s/^\s+//;
+    # prepend global references with optional underscore
+    $addr =~ s/^([^\+\-0-9][^\+\-]*)/::islabel($1) or "$nmdecor$1"/ige;
+    # put address arithmetic expression in parenthesis
+    $addr="($addr)" if ($addr =~ /^.+[\-\+].+$/);
+
+    if (($addr ne "") && ($addr ne 0))
+    {	if ($addr !~ /^-/)	{ $ret .= "$addr+"; }
+	else			{ $post=$addr;      }
+    }
+
+    if ($reg2 ne "")
+    {	$idx!=0 or $idx=1;
+	$ret .= "$reg2*$idx";
+	$ret .= "+$reg1" if ($reg1 ne "");
+    }
+    else
+    {	$ret .= "$reg1";   }
+
+    $ret .= "$post]";
+    $ret =~ s/\+\]/]/; # in case $addr was the only argument
+
+  $ret;
+}
+sub ::BP	{ &get_mem("BYTE",@_);  }
+sub ::DWP	{ &get_mem("DWORD",@_); }
+sub ::WP	{ &get_mem("WORD",@_);	}
+sub ::QWP	{ &get_mem("",@_);      }
+sub ::BC	{ (($::mwerks)?"":"BYTE ")."@_";  }
+sub ::DWC	{ (($::mwerks)?"":"DWORD ")."@_"; }
+
+sub ::file
+{   if ($::mwerks)	{ push(@out,".section\t.text,64\n"); }
+    else
+    { my $tmp=<<___;
+%ifidn __OUTPUT_FORMAT__,obj
+section	code	use32 class=code align=64
+%elifidn __OUTPUT_FORMAT__,win32
+\$\@feat.00 equ 1
+section	.text	code align=64
+%else
+section	.text	code
+%endif
+___
+	push(@out,$tmp);
+    }
+}
+
+sub ::function_begin_B
+{ my $func=shift;
+  my $global=($func !~ /^_/);
+  my $begin="${::lbdecor}_${func}_begin";
+
+    $begin =~ s/^\@/./ if ($::mwerks);	# the torture never stops
+
+    &::LABEL($func,$global?"$begin":"$nmdecor$func");
+    $func=$nmdecor.$func;
+
+    push(@out,"${drdecor}global	$func\n")	if ($global);
+    push(@out,"${drdecor}align	16\n");
+    push(@out,"$func:\n");
+    push(@out,"$begin:\n")			if ($global);
+    $::stack=4;
+}
+
+sub ::function_end_B
+{   $::stack=0;
+    &::wipe_labels();
+}
+
+sub ::file_end
+{   if (grep {/\b${nmdecor}OPENSSL_ia32cap_P\b/i} @out)
+    {	my $comm=<<___;
+${drdecor}segment	.bss
+${drdecor}common	${nmdecor}OPENSSL_ia32cap_P 16
+___
+	# comment out OPENSSL_ia32cap_P declarations
+	grep {s/(^extern\s+${nmdecor}OPENSSL_ia32cap_P)/\;$1/} @out;
+	push (@out,$comm)
+    }
+    push (@out,$initseg) if ($initseg);
+}
+
+sub ::comment {   foreach (@_) { push(@out,"\t; $_\n"); }   }
+
+sub ::external_label
+{   foreach(@_)
+    {	push(@out,"${drdecor}extern\t".&::LABEL($_,$nmdecor.$_)."\n");   }
+}
+
+sub ::public_label
+{   push(@out,"${drdecor}global\t".&::LABEL($_[0],$nmdecor.$_[0])."\n");  }
+
+sub ::data_byte
+{   push(@out,(($::mwerks)?".byte\t":"db\t").join(',',@_)."\n");	}
+sub ::data_short
+{   push(@out,(($::mwerks)?".word\t":"dw\t").join(',',@_)."\n");	}
+sub ::data_word
+{   push(@out,(($::mwerks)?".long\t":"dd\t").join(',',@_)."\n");	}
+
+sub ::align
+{   push(@out,"${drdecor}align\t$_[0]\n");	}
+
+sub ::picmeup
+{ my($dst,$sym)=@_;
+    &::lea($dst,&::DWP($sym));
+}
+
+sub ::initseg
+{ my $f=$nmdecor.shift;
+    if ($::win32)
+    {	$initseg=<<___;
+segment	.CRT\$XCU data align=4
+extern	$f
+dd	$f
+___
+    }
+}
+
+sub ::dataseg
+{   if ($mwerks)	{ push(@out,".section\t.data,4\n");   }
+    else		{ push(@out,"section\t.data align=4\n"); }
+}
+
+sub ::safeseh
+{ my $nm=shift;
+    push(@out,"%if	__NASM_VERSION_ID__ >= 0x02030000\n");
+    push(@out,"safeseh	".&::LABEL($nm,$nmdecor.$nm)."\n");
+    push(@out,"%endif\n");
+}
+
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/build.info
new file mode 100644
index 000000000..b87299e6c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/build.info
@@ -0,0 +1,5 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        p12_add.c p12_asn.c p12_attr.c p12_crpt.c p12_crt.c p12_decr.c \
+        p12_init.c p12_key.c p12_kiss.c p12_mutl.c p12_sbag.c \
+        p12_utl.c p12_npas.c pk12err.c p12_p8d.c p12_p8e.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_add.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_add.c
new file mode 100644
index 000000000..193ed8097
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_add.c
@@ -0,0 +1,164 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/pkcs12.h>
+#include "p12_lcl.h"
+
+/* Pack an object into an OCTET STRING and turn into a safebag */
+
+PKCS12_SAFEBAG *PKCS12_item_pack_safebag(void *obj, const ASN1_ITEM *it,
+                                         int nid1, int nid2)
+{
+    PKCS12_BAGS *bag;
+    PKCS12_SAFEBAG *safebag;
+
+    if ((bag = PKCS12_BAGS_new()) == NULL) {
+        PKCS12err(PKCS12_F_PKCS12_ITEM_PACK_SAFEBAG, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    bag->type = OBJ_nid2obj(nid1);
+    if (!ASN1_item_pack(obj, it, &bag->value.octet)) {
+        PKCS12err(PKCS12_F_PKCS12_ITEM_PACK_SAFEBAG, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if ((safebag = PKCS12_SAFEBAG_new()) == NULL) {
+        PKCS12err(PKCS12_F_PKCS12_ITEM_PACK_SAFEBAG, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    safebag->value.bag = bag;
+    safebag->type = OBJ_nid2obj(nid2);
+    return safebag;
+
+ err:
+    PKCS12_BAGS_free(bag);
+    return NULL;
+}
+
+/* Turn a stack of SAFEBAGS into a PKCS#7 data Contentinfo */
+PKCS7 *PKCS12_pack_p7data(STACK_OF(PKCS12_SAFEBAG) *sk)
+{
+    PKCS7 *p7;
+
+    if ((p7 = PKCS7_new()) == NULL) {
+        PKCS12err(PKCS12_F_PKCS12_PACK_P7DATA, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    p7->type = OBJ_nid2obj(NID_pkcs7_data);
+    if ((p7->d.data = ASN1_OCTET_STRING_new()) == NULL) {
+        PKCS12err(PKCS12_F_PKCS12_PACK_P7DATA, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (!ASN1_item_pack(sk, ASN1_ITEM_rptr(PKCS12_SAFEBAGS), &p7->d.data)) {
+        PKCS12err(PKCS12_F_PKCS12_PACK_P7DATA, PKCS12_R_CANT_PACK_STRUCTURE);
+        goto err;
+    }
+    return p7;
+
+ err:
+    PKCS7_free(p7);
+    return NULL;
+}
+
+/* Unpack SAFEBAGS from PKCS#7 data ContentInfo */
+STACK_OF(PKCS12_SAFEBAG) *PKCS12_unpack_p7data(PKCS7 *p7)
+{
+    if (!PKCS7_type_is_data(p7)) {
+        PKCS12err(PKCS12_F_PKCS12_UNPACK_P7DATA,
+                  PKCS12_R_CONTENT_TYPE_NOT_DATA);
+        return NULL;
+    }
+    return ASN1_item_unpack(p7->d.data, ASN1_ITEM_rptr(PKCS12_SAFEBAGS));
+}
+
+/* Turn a stack of SAFEBAGS into a PKCS#7 encrypted data ContentInfo */
+
+PKCS7 *PKCS12_pack_p7encdata(int pbe_nid, const char *pass, int passlen,
+                             unsigned char *salt, int saltlen, int iter,
+                             STACK_OF(PKCS12_SAFEBAG) *bags)
+{
+    PKCS7 *p7;
+    X509_ALGOR *pbe;
+    const EVP_CIPHER *pbe_ciph;
+
+    if ((p7 = PKCS7_new()) == NULL) {
+        PKCS12err(PKCS12_F_PKCS12_PACK_P7ENCDATA, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    if (!PKCS7_set_type(p7, NID_pkcs7_encrypted)) {
+        PKCS12err(PKCS12_F_PKCS12_PACK_P7ENCDATA,
+                  PKCS12_R_ERROR_SETTING_ENCRYPTED_DATA_TYPE);
+        goto err;
+    }
+
+    pbe_ciph = EVP_get_cipherbynid(pbe_nid);
+
+    if (pbe_ciph)
+        pbe = PKCS5_pbe2_set(pbe_ciph, iter, salt, saltlen);
+    else
+        pbe = PKCS5_pbe_set(pbe_nid, iter, salt, saltlen);
+
+    if (!pbe) {
+        PKCS12err(PKCS12_F_PKCS12_PACK_P7ENCDATA, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    X509_ALGOR_free(p7->d.encrypted->enc_data->algorithm);
+    p7->d.encrypted->enc_data->algorithm = pbe;
+    ASN1_OCTET_STRING_free(p7->d.encrypted->enc_data->enc_data);
+    if (!(p7->d.encrypted->enc_data->enc_data =
+          PKCS12_item_i2d_encrypt(pbe, ASN1_ITEM_rptr(PKCS12_SAFEBAGS), pass,
+                                  passlen, bags, 1))) {
+        PKCS12err(PKCS12_F_PKCS12_PACK_P7ENCDATA, PKCS12_R_ENCRYPT_ERROR);
+        goto err;
+    }
+
+    return p7;
+
+ err:
+    PKCS7_free(p7);
+    return NULL;
+}
+
+STACK_OF(PKCS12_SAFEBAG) *PKCS12_unpack_p7encdata(PKCS7 *p7, const char *pass,
+                                                  int passlen)
+{
+    if (!PKCS7_type_is_encrypted(p7))
+        return NULL;
+    return PKCS12_item_decrypt_d2i(p7->d.encrypted->enc_data->algorithm,
+                                   ASN1_ITEM_rptr(PKCS12_SAFEBAGS),
+                                   pass, passlen,
+                                   p7->d.encrypted->enc_data->enc_data, 1);
+}
+
+PKCS8_PRIV_KEY_INFO *PKCS12_decrypt_skey(const PKCS12_SAFEBAG *bag,
+                                         const char *pass, int passlen)
+{
+    return PKCS8_decrypt(bag->value.shkeybag, pass, passlen);
+}
+
+int PKCS12_pack_authsafes(PKCS12 *p12, STACK_OF(PKCS7) *safes)
+{
+    if (ASN1_item_pack(safes, ASN1_ITEM_rptr(PKCS12_AUTHSAFES),
+                       &p12->authsafes->d.data))
+        return 1;
+    return 0;
+}
+
+STACK_OF(PKCS7) *PKCS12_unpack_authsafes(const PKCS12 *p12)
+{
+    if (!PKCS7_type_is_data(p12->authsafes)) {
+        PKCS12err(PKCS12_F_PKCS12_UNPACK_AUTHSAFES,
+                  PKCS12_R_CONTENT_TYPE_NOT_DATA);
+        return NULL;
+    }
+    return ASN1_item_unpack(p12->authsafes->d.data,
+                            ASN1_ITEM_rptr(PKCS12_AUTHSAFES));
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_asn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_asn.c
new file mode 100644
index 000000000..422dfc398
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_asn.c
@@ -0,0 +1,76 @@
+/*
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/pkcs12.h>
+#include "p12_lcl.h"
+
+/* PKCS#12 ASN1 module */
+
+ASN1_SEQUENCE(PKCS12) = {
+        ASN1_SIMPLE(PKCS12, version, ASN1_INTEGER),
+        ASN1_SIMPLE(PKCS12, authsafes, PKCS7),
+        ASN1_OPT(PKCS12, mac, PKCS12_MAC_DATA)
+} ASN1_SEQUENCE_END(PKCS12)
+
+IMPLEMENT_ASN1_FUNCTIONS(PKCS12)
+
+ASN1_SEQUENCE(PKCS12_MAC_DATA) = {
+        ASN1_SIMPLE(PKCS12_MAC_DATA, dinfo, X509_SIG),
+        ASN1_SIMPLE(PKCS12_MAC_DATA, salt, ASN1_OCTET_STRING),
+        ASN1_OPT(PKCS12_MAC_DATA, iter, ASN1_INTEGER)
+} ASN1_SEQUENCE_END(PKCS12_MAC_DATA)
+
+IMPLEMENT_ASN1_FUNCTIONS(PKCS12_MAC_DATA)
+
+ASN1_ADB_TEMPLATE(bag_default) = ASN1_EXP(PKCS12_BAGS, value.other, ASN1_ANY, 0);
+
+ASN1_ADB(PKCS12_BAGS) = {
+        ADB_ENTRY(NID_x509Certificate, ASN1_EXP(PKCS12_BAGS, value.x509cert, ASN1_OCTET_STRING, 0)),
+        ADB_ENTRY(NID_x509Crl, ASN1_EXP(PKCS12_BAGS, value.x509crl, ASN1_OCTET_STRING, 0)),
+        ADB_ENTRY(NID_sdsiCertificate, ASN1_EXP(PKCS12_BAGS, value.sdsicert, ASN1_IA5STRING, 0)),
+} ASN1_ADB_END(PKCS12_BAGS, 0, type, 0, &bag_default_tt, NULL);
+
+ASN1_SEQUENCE(PKCS12_BAGS) = {
+        ASN1_SIMPLE(PKCS12_BAGS, type, ASN1_OBJECT),
+        ASN1_ADB_OBJECT(PKCS12_BAGS),
+} ASN1_SEQUENCE_END(PKCS12_BAGS)
+
+IMPLEMENT_ASN1_FUNCTIONS(PKCS12_BAGS)
+
+ASN1_ADB_TEMPLATE(safebag_default) = ASN1_EXP(PKCS12_SAFEBAG, value.other, ASN1_ANY, 0);
+
+ASN1_ADB(PKCS12_SAFEBAG) = {
+        ADB_ENTRY(NID_keyBag, ASN1_EXP(PKCS12_SAFEBAG, value.keybag, PKCS8_PRIV_KEY_INFO, 0)),
+        ADB_ENTRY(NID_pkcs8ShroudedKeyBag, ASN1_EXP(PKCS12_SAFEBAG, value.shkeybag, X509_SIG, 0)),
+        ADB_ENTRY(NID_safeContentsBag, ASN1_EXP_SEQUENCE_OF(PKCS12_SAFEBAG, value.safes, PKCS12_SAFEBAG, 0)),
+        ADB_ENTRY(NID_certBag, ASN1_EXP(PKCS12_SAFEBAG, value.bag, PKCS12_BAGS, 0)),
+        ADB_ENTRY(NID_crlBag, ASN1_EXP(PKCS12_SAFEBAG, value.bag, PKCS12_BAGS, 0)),
+        ADB_ENTRY(NID_secretBag, ASN1_EXP(PKCS12_SAFEBAG, value.bag, PKCS12_BAGS, 0))
+} ASN1_ADB_END(PKCS12_SAFEBAG, 0, type, 0, &safebag_default_tt, NULL);
+
+ASN1_SEQUENCE(PKCS12_SAFEBAG) = {
+        ASN1_SIMPLE(PKCS12_SAFEBAG, type, ASN1_OBJECT),
+        ASN1_ADB_OBJECT(PKCS12_SAFEBAG),
+        ASN1_SET_OF_OPT(PKCS12_SAFEBAG, attrib, X509_ATTRIBUTE)
+} ASN1_SEQUENCE_END(PKCS12_SAFEBAG)
+
+IMPLEMENT_ASN1_FUNCTIONS(PKCS12_SAFEBAG)
+
+/* SEQUENCE OF SafeBag */
+ASN1_ITEM_TEMPLATE(PKCS12_SAFEBAGS) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, PKCS12_SAFEBAGS, PKCS12_SAFEBAG)
+ASN1_ITEM_TEMPLATE_END(PKCS12_SAFEBAGS)
+
+/* Authsafes: SEQUENCE OF PKCS7 */
+ASN1_ITEM_TEMPLATE(PKCS12_AUTHSAFES) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, PKCS12_AUTHSAFES, PKCS7)
+ASN1_ITEM_TEMPLATE_END(PKCS12_AUTHSAFES)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_attr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_attr.c
new file mode 100644
index 000000000..c324f5051
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_attr.c
@@ -0,0 +1,103 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/pkcs12.h>
+#include "p12_lcl.h"
+
+/* Add a local keyid to a safebag */
+
+int PKCS12_add_localkeyid(PKCS12_SAFEBAG *bag, unsigned char *name,
+                          int namelen)
+{
+    if (X509at_add1_attr_by_NID(&bag->attrib, NID_localKeyID,
+                                V_ASN1_OCTET_STRING, name, namelen))
+        return 1;
+    else
+        return 0;
+}
+
+/* Add key usage to PKCS#8 structure */
+
+int PKCS8_add_keyusage(PKCS8_PRIV_KEY_INFO *p8, int usage)
+{
+    unsigned char us_val = (unsigned char)usage;
+    return PKCS8_pkey_add1_attr_by_NID(p8, NID_key_usage,
+                                       V_ASN1_BIT_STRING, &us_val, 1);
+}
+
+/* Add a friendlyname to a safebag */
+
+int PKCS12_add_friendlyname_asc(PKCS12_SAFEBAG *bag, const char *name,
+                                int namelen)
+{
+    if (X509at_add1_attr_by_NID(&bag->attrib, NID_friendlyName,
+                                MBSTRING_ASC, (unsigned char *)name, namelen))
+        return 1;
+    else
+        return 0;
+}
+
+int PKCS12_add_friendlyname_utf8(PKCS12_SAFEBAG *bag, const char *name,
+                                int namelen)
+{
+    if (X509at_add1_attr_by_NID(&bag->attrib, NID_friendlyName,
+                                MBSTRING_UTF8, (unsigned char *)name, namelen))
+        return 1;
+    else
+        return 0;
+}
+
+int PKCS12_add_friendlyname_uni(PKCS12_SAFEBAG *bag,
+                                const unsigned char *name, int namelen)
+{
+    if (X509at_add1_attr_by_NID(&bag->attrib, NID_friendlyName,
+                                MBSTRING_BMP, name, namelen))
+        return 1;
+    else
+        return 0;
+}
+
+int PKCS12_add_CSPName_asc(PKCS12_SAFEBAG *bag, const char *name, int namelen)
+{
+    if (X509at_add1_attr_by_NID(&bag->attrib, NID_ms_csp_name,
+                                MBSTRING_ASC, (unsigned char *)name, namelen))
+        return 1;
+    else
+        return 0;
+}
+
+ASN1_TYPE *PKCS12_get_attr_gen(const STACK_OF(X509_ATTRIBUTE) *attrs,
+                               int attr_nid)
+{
+    X509_ATTRIBUTE *attrib;
+    int i;
+    i = X509at_get_attr_by_NID(attrs, attr_nid, -1);
+    attrib = X509at_get_attr(attrs, i);
+    return X509_ATTRIBUTE_get0_type(attrib, 0);
+}
+
+char *PKCS12_get_friendlyname(PKCS12_SAFEBAG *bag)
+{
+    const ASN1_TYPE *atype;
+
+    if ((atype = PKCS12_SAFEBAG_get0_attr(bag, NID_friendlyName)) == NULL)
+        return NULL;
+    if (atype->type != V_ASN1_BMPSTRING)
+        return NULL;
+    return OPENSSL_uni2utf8(atype->value.bmpstring->data,
+                            atype->value.bmpstring->length);
+}
+
+const STACK_OF(X509_ATTRIBUTE) *
+PKCS12_SAFEBAG_get0_attrs(const PKCS12_SAFEBAG *bag)
+{
+    return bag->attrib;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_crpt.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_crpt.c
new file mode 100644
index 000000000..feef9d1fc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_crpt.c
@@ -0,0 +1,70 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/pkcs12.h>
+
+/* PKCS#12 PBE algorithms now in static table */
+
+void PKCS12_PBE_add(void)
+{
+}
+
+int PKCS12_PBE_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass, int passlen,
+                        ASN1_TYPE *param, const EVP_CIPHER *cipher,
+                        const EVP_MD *md, int en_de)
+{
+    PBEPARAM *pbe;
+    int saltlen, iter, ret;
+    unsigned char *salt;
+    unsigned char key[EVP_MAX_KEY_LENGTH], iv[EVP_MAX_IV_LENGTH];
+    int (*pkcs12_key_gen)(const char *pass, int passlen,
+                          unsigned char *salt, int slen,
+                          int id, int iter, int n,
+                          unsigned char *out,
+                          const EVP_MD *md_type);
+
+    pkcs12_key_gen = PKCS12_key_gen_utf8;
+
+    if (cipher == NULL)
+        return 0;
+
+    /* Extract useful info from parameter */
+
+    pbe = ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(PBEPARAM), param);
+    if (pbe == NULL) {
+        PKCS12err(PKCS12_F_PKCS12_PBE_KEYIVGEN, PKCS12_R_DECODE_ERROR);
+        return 0;
+    }
+
+    if (!pbe->iter)
+        iter = 1;
+    else
+        iter = ASN1_INTEGER_get(pbe->iter);
+    salt = pbe->salt->data;
+    saltlen = pbe->salt->length;
+    if (!(*pkcs12_key_gen)(pass, passlen, salt, saltlen, PKCS12_KEY_ID,
+                           iter, EVP_CIPHER_key_length(cipher), key, md)) {
+        PKCS12err(PKCS12_F_PKCS12_PBE_KEYIVGEN, PKCS12_R_KEY_GEN_ERROR);
+        PBEPARAM_free(pbe);
+        return 0;
+    }
+    if (!(*pkcs12_key_gen)(pass, passlen, salt, saltlen, PKCS12_IV_ID,
+                           iter, EVP_CIPHER_iv_length(cipher), iv, md)) {
+        PKCS12err(PKCS12_F_PKCS12_PBE_KEYIVGEN, PKCS12_R_IV_GEN_ERROR);
+        PBEPARAM_free(pbe);
+        return 0;
+    }
+    PBEPARAM_free(pbe);
+    ret = EVP_CipherInit_ex(ctx, cipher, NULL, key, iv, en_de);
+    OPENSSL_cleanse(key, EVP_MAX_KEY_LENGTH);
+    OPENSSL_cleanse(iv, EVP_MAX_IV_LENGTH);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_crt.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_crt.c
new file mode 100644
index 000000000..10cf8dd58
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_crt.c
@@ -0,0 +1,291 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/pkcs12.h>
+#include "p12_lcl.h"
+
+static int pkcs12_add_bag(STACK_OF(PKCS12_SAFEBAG) **pbags,
+                          PKCS12_SAFEBAG *bag);
+
+static int copy_bag_attr(PKCS12_SAFEBAG *bag, EVP_PKEY *pkey, int nid)
+{
+    int idx;
+    X509_ATTRIBUTE *attr;
+    idx = EVP_PKEY_get_attr_by_NID(pkey, nid, -1);
+    if (idx < 0)
+        return 1;
+    attr = EVP_PKEY_get_attr(pkey, idx);
+    if (!X509at_add1_attr(&bag->attrib, attr))
+        return 0;
+    return 1;
+}
+
+PKCS12 *PKCS12_create(const char *pass, const char *name, EVP_PKEY *pkey, X509 *cert,
+                      STACK_OF(X509) *ca, int nid_key, int nid_cert, int iter,
+                      int mac_iter, int keytype)
+{
+    PKCS12 *p12 = NULL;
+    STACK_OF(PKCS7) *safes = NULL;
+    STACK_OF(PKCS12_SAFEBAG) *bags = NULL;
+    PKCS12_SAFEBAG *bag = NULL;
+    int i;
+    unsigned char keyid[EVP_MAX_MD_SIZE];
+    unsigned int keyidlen = 0;
+
+    /* Set defaults */
+    if (!nid_cert)
+#ifdef OPENSSL_NO_RC2
+        nid_cert = NID_pbe_WithSHA1And3_Key_TripleDES_CBC;
+#else
+        nid_cert = NID_pbe_WithSHA1And40BitRC2_CBC;
+#endif
+    if (!nid_key)
+        nid_key = NID_pbe_WithSHA1And3_Key_TripleDES_CBC;
+    if (!iter)
+        iter = PKCS12_DEFAULT_ITER;
+    if (!mac_iter)
+        mac_iter = 1;
+
+    if (!pkey && !cert && !ca) {
+        PKCS12err(PKCS12_F_PKCS12_CREATE, PKCS12_R_INVALID_NULL_ARGUMENT);
+        return NULL;
+    }
+
+    if (pkey && cert) {
+        if (!X509_check_private_key(cert, pkey))
+            return NULL;
+        X509_digest(cert, EVP_sha1(), keyid, &keyidlen);
+    }
+
+    if (cert) {
+        bag = PKCS12_add_cert(&bags, cert);
+        if (name && !PKCS12_add_friendlyname(bag, name, -1))
+            goto err;
+        if (keyidlen && !PKCS12_add_localkeyid(bag, keyid, keyidlen))
+            goto err;
+    }
+
+    /* Add all other certificates */
+    for (i = 0; i < sk_X509_num(ca); i++) {
+        if (!PKCS12_add_cert(&bags, sk_X509_value(ca, i)))
+            goto err;
+    }
+
+    if (bags && !PKCS12_add_safe(&safes, bags, nid_cert, iter, pass))
+        goto err;
+
+    sk_PKCS12_SAFEBAG_pop_free(bags, PKCS12_SAFEBAG_free);
+    bags = NULL;
+
+    if (pkey) {
+        bag = PKCS12_add_key(&bags, pkey, keytype, iter, nid_key, pass);
+
+        if (!bag)
+            goto err;
+
+        if (!copy_bag_attr(bag, pkey, NID_ms_csp_name))
+            goto err;
+        if (!copy_bag_attr(bag, pkey, NID_LocalKeySet))
+            goto err;
+
+        if (name && !PKCS12_add_friendlyname(bag, name, -1))
+            goto err;
+        if (keyidlen && !PKCS12_add_localkeyid(bag, keyid, keyidlen))
+            goto err;
+    }
+
+    if (bags && !PKCS12_add_safe(&safes, bags, -1, 0, NULL))
+        goto err;
+
+    sk_PKCS12_SAFEBAG_pop_free(bags, PKCS12_SAFEBAG_free);
+    bags = NULL;
+
+    p12 = PKCS12_add_safes(safes, 0);
+
+    if (!p12)
+        goto err;
+
+    sk_PKCS7_pop_free(safes, PKCS7_free);
+
+    safes = NULL;
+
+    if ((mac_iter != -1) &&
+        !PKCS12_set_mac(p12, pass, -1, NULL, 0, mac_iter, NULL))
+        goto err;
+
+    return p12;
+
+ err:
+    PKCS12_free(p12);
+    sk_PKCS7_pop_free(safes, PKCS7_free);
+    sk_PKCS12_SAFEBAG_pop_free(bags, PKCS12_SAFEBAG_free);
+    return NULL;
+
+}
+
+PKCS12_SAFEBAG *PKCS12_add_cert(STACK_OF(PKCS12_SAFEBAG) **pbags, X509 *cert)
+{
+    PKCS12_SAFEBAG *bag = NULL;
+    char *name;
+    int namelen = -1;
+    unsigned char *keyid;
+    int keyidlen = -1;
+
+    /* Add user certificate */
+    if ((bag = PKCS12_SAFEBAG_create_cert(cert)) == NULL)
+        goto err;
+
+    /*
+     * Use friendlyName and localKeyID in certificate. (if present)
+     */
+
+    name = (char *)X509_alias_get0(cert, &namelen);
+
+    if (name && !PKCS12_add_friendlyname(bag, name, namelen))
+        goto err;
+
+    keyid = X509_keyid_get0(cert, &keyidlen);
+
+    if (keyid && !PKCS12_add_localkeyid(bag, keyid, keyidlen))
+        goto err;
+
+    if (!pkcs12_add_bag(pbags, bag))
+        goto err;
+
+    return bag;
+
+ err:
+    PKCS12_SAFEBAG_free(bag);
+    return NULL;
+
+}
+
+PKCS12_SAFEBAG *PKCS12_add_key(STACK_OF(PKCS12_SAFEBAG) **pbags,
+                               EVP_PKEY *key, int key_usage, int iter,
+                               int nid_key, const char *pass)
+{
+
+    PKCS12_SAFEBAG *bag = NULL;
+    PKCS8_PRIV_KEY_INFO *p8 = NULL;
+
+    /* Make a PKCS#8 structure */
+    if ((p8 = EVP_PKEY2PKCS8(key)) == NULL)
+        goto err;
+    if (key_usage && !PKCS8_add_keyusage(p8, key_usage))
+        goto err;
+    if (nid_key != -1) {
+        bag = PKCS12_SAFEBAG_create_pkcs8_encrypt(nid_key, pass, -1, NULL, 0,
+                                                  iter, p8);
+        PKCS8_PRIV_KEY_INFO_free(p8);
+    } else
+        bag = PKCS12_SAFEBAG_create0_p8inf(p8);
+
+    if (!bag)
+        goto err;
+
+    if (!pkcs12_add_bag(pbags, bag))
+        goto err;
+
+    return bag;
+
+ err:
+    PKCS12_SAFEBAG_free(bag);
+    return NULL;
+
+}
+
+int PKCS12_add_safe(STACK_OF(PKCS7) **psafes, STACK_OF(PKCS12_SAFEBAG) *bags,
+                    int nid_safe, int iter, const char *pass)
+{
+    PKCS7 *p7 = NULL;
+    int free_safes = 0;
+
+    if (!*psafes) {
+        *psafes = sk_PKCS7_new_null();
+        if (!*psafes)
+            return 0;
+        free_safes = 1;
+    } else
+        free_safes = 0;
+
+    if (nid_safe == 0)
+#ifdef OPENSSL_NO_RC2
+        nid_safe = NID_pbe_WithSHA1And3_Key_TripleDES_CBC;
+#else
+        nid_safe = NID_pbe_WithSHA1And40BitRC2_CBC;
+#endif
+
+    if (nid_safe == -1)
+        p7 = PKCS12_pack_p7data(bags);
+    else
+        p7 = PKCS12_pack_p7encdata(nid_safe, pass, -1, NULL, 0, iter, bags);
+    if (!p7)
+        goto err;
+
+    if (!sk_PKCS7_push(*psafes, p7))
+        goto err;
+
+    return 1;
+
+ err:
+    if (free_safes) {
+        sk_PKCS7_free(*psafes);
+        *psafes = NULL;
+    }
+    PKCS7_free(p7);
+    return 0;
+
+}
+
+static int pkcs12_add_bag(STACK_OF(PKCS12_SAFEBAG) **pbags,
+                          PKCS12_SAFEBAG *bag)
+{
+    int free_bags;
+    if (!pbags)
+        return 1;
+    if (!*pbags) {
+        *pbags = sk_PKCS12_SAFEBAG_new_null();
+        if (!*pbags)
+            return 0;
+        free_bags = 1;
+    } else
+        free_bags = 0;
+
+    if (!sk_PKCS12_SAFEBAG_push(*pbags, bag)) {
+        if (free_bags) {
+            sk_PKCS12_SAFEBAG_free(*pbags);
+            *pbags = NULL;
+        }
+        return 0;
+    }
+
+    return 1;
+
+}
+
+PKCS12 *PKCS12_add_safes(STACK_OF(PKCS7) *safes, int nid_p7)
+{
+    PKCS12 *p12;
+    if (nid_p7 <= 0)
+        nid_p7 = NID_pkcs7_data;
+    p12 = PKCS12_init(nid_p7);
+
+    if (!p12)
+        return NULL;
+
+    if (!PKCS12_pack_authsafes(p12, safes)) {
+        PKCS12_free(p12);
+        return NULL;
+    }
+
+    return p12;
+
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_decr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_decr.c
new file mode 100644
index 000000000..3c860584e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_decr.c
@@ -0,0 +1,155 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/pkcs12.h>
+
+/* Define this to dump decrypted output to files called DERnnn */
+/*
+ * #define OPENSSL_DEBUG_DECRYPT
+ */
+
+/*
+ * Encrypt/Decrypt a buffer based on password and algor, result in a
+ * OPENSSL_malloc'ed buffer
+ */
+unsigned char *PKCS12_pbe_crypt(const X509_ALGOR *algor,
+                                const char *pass, int passlen,
+                                const unsigned char *in, int inlen,
+                                unsigned char **data, int *datalen, int en_de)
+{
+    unsigned char *out = NULL;
+    int outlen, i;
+    EVP_CIPHER_CTX *ctx = EVP_CIPHER_CTX_new();
+
+    if (ctx == NULL) {
+        PKCS12err(PKCS12_F_PKCS12_PBE_CRYPT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    /* Decrypt data */
+    if (!EVP_PBE_CipherInit(algor->algorithm, pass, passlen,
+                            algor->parameter, ctx, en_de)) {
+        PKCS12err(PKCS12_F_PKCS12_PBE_CRYPT,
+                  PKCS12_R_PKCS12_ALGOR_CIPHERINIT_ERROR);
+        goto err;
+    }
+
+    if ((out = OPENSSL_malloc(inlen + EVP_CIPHER_CTX_block_size(ctx)))
+            == NULL) {
+        PKCS12err(PKCS12_F_PKCS12_PBE_CRYPT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (!EVP_CipherUpdate(ctx, out, &i, in, inlen)) {
+        OPENSSL_free(out);
+        out = NULL;
+        PKCS12err(PKCS12_F_PKCS12_PBE_CRYPT, ERR_R_EVP_LIB);
+        goto err;
+    }
+
+    outlen = i;
+    if (!EVP_CipherFinal_ex(ctx, out + i, &i)) {
+        OPENSSL_free(out);
+        out = NULL;
+        PKCS12err(PKCS12_F_PKCS12_PBE_CRYPT,
+                  PKCS12_R_PKCS12_CIPHERFINAL_ERROR);
+        goto err;
+    }
+    outlen += i;
+    if (datalen)
+        *datalen = outlen;
+    if (data)
+        *data = out;
+ err:
+    EVP_CIPHER_CTX_free(ctx);
+    return out;
+
+}
+
+/*
+ * Decrypt an OCTET STRING and decode ASN1 structure if zbuf set zero buffer
+ * after use.
+ */
+
+void *PKCS12_item_decrypt_d2i(const X509_ALGOR *algor, const ASN1_ITEM *it,
+                              const char *pass, int passlen,
+                              const ASN1_OCTET_STRING *oct, int zbuf)
+{
+    unsigned char *out;
+    const unsigned char *p;
+    void *ret;
+    int outlen;
+
+    if (!PKCS12_pbe_crypt(algor, pass, passlen, oct->data, oct->length,
+                          &out, &outlen, 0)) {
+        PKCS12err(PKCS12_F_PKCS12_ITEM_DECRYPT_D2I,
+                  PKCS12_R_PKCS12_PBE_CRYPT_ERROR);
+        return NULL;
+    }
+    p = out;
+#ifdef OPENSSL_DEBUG_DECRYPT
+    {
+        FILE *op;
+
+        char fname[30];
+        static int fnm = 1;
+        sprintf(fname, "DER%d", fnm++);
+        op = fopen(fname, "wb");
+        fwrite(p, 1, outlen, op);
+        fclose(op);
+    }
+#endif
+    ret = ASN1_item_d2i(NULL, &p, outlen, it);
+    if (zbuf)
+        OPENSSL_cleanse(out, outlen);
+    if (!ret)
+        PKCS12err(PKCS12_F_PKCS12_ITEM_DECRYPT_D2I, PKCS12_R_DECODE_ERROR);
+    OPENSSL_free(out);
+    return ret;
+}
+
+/*
+ * Encode ASN1 structure and encrypt, return OCTET STRING if zbuf set zero
+ * encoding.
+ */
+
+ASN1_OCTET_STRING *PKCS12_item_i2d_encrypt(X509_ALGOR *algor,
+                                           const ASN1_ITEM *it,
+                                           const char *pass, int passlen,
+                                           void *obj, int zbuf)
+{
+    ASN1_OCTET_STRING *oct = NULL;
+    unsigned char *in = NULL;
+    int inlen;
+
+    if ((oct = ASN1_OCTET_STRING_new()) == NULL) {
+        PKCS12err(PKCS12_F_PKCS12_ITEM_I2D_ENCRYPT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    inlen = ASN1_item_i2d(obj, &in, it);
+    if (!in) {
+        PKCS12err(PKCS12_F_PKCS12_ITEM_I2D_ENCRYPT, PKCS12_R_ENCODE_ERROR);
+        goto err;
+    }
+    if (!PKCS12_pbe_crypt(algor, pass, passlen, in, inlen, &oct->data,
+                          &oct->length, 1)) {
+        PKCS12err(PKCS12_F_PKCS12_ITEM_I2D_ENCRYPT, PKCS12_R_ENCRYPT_ERROR);
+        OPENSSL_free(in);
+        goto err;
+    }
+    if (zbuf)
+        OPENSSL_cleanse(in, inlen);
+    OPENSSL_free(in);
+    return oct;
+ err:
+    ASN1_OCTET_STRING_free(oct);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_init.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_init.c
new file mode 100644
index 000000000..88db0f2dc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_init.c
@@ -0,0 +1,44 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/pkcs12.h>
+#include "p12_lcl.h"
+
+/* Initialise a PKCS12 structure to take data */
+
+PKCS12 *PKCS12_init(int mode)
+{
+    PKCS12 *pkcs12;
+
+    if ((pkcs12 = PKCS12_new()) == NULL) {
+        PKCS12err(PKCS12_F_PKCS12_INIT, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    if (!ASN1_INTEGER_set(pkcs12->version, 3))
+        goto err;
+    pkcs12->authsafes->type = OBJ_nid2obj(mode);
+    switch (mode) {
+    case NID_pkcs7_data:
+        if ((pkcs12->authsafes->d.data = ASN1_OCTET_STRING_new()) == NULL) {
+            PKCS12err(PKCS12_F_PKCS12_INIT, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        break;
+    default:
+        PKCS12err(PKCS12_F_PKCS12_INIT, PKCS12_R_UNSUPPORTED_PKCS12_MODE);
+        goto err;
+    }
+    return pkcs12;
+
+ err:
+    PKCS12_free(pkcs12);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_key.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_key.c
new file mode 100644
index 000000000..ab31a6129
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_key.c
@@ -0,0 +1,183 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/pkcs12.h>
+#include <openssl/bn.h>
+
+/* Uncomment out this line to get debugging info about key generation */
+/*
+ * #define OPENSSL_DEBUG_KEYGEN
+ */
+#ifdef OPENSSL_DEBUG_KEYGEN
+# include <openssl/bio.h>
+extern BIO *bio_err;
+void h__dump(unsigned char *p, int len);
+#endif
+
+/* PKCS12 compatible key/IV generation */
+#ifndef min
+# define min(a,b) ((a) < (b) ? (a) : (b))
+#endif
+
+int PKCS12_key_gen_asc(const char *pass, int passlen, unsigned char *salt,
+                       int saltlen, int id, int iter, int n,
+                       unsigned char *out, const EVP_MD *md_type)
+{
+    int ret;
+    unsigned char *unipass;
+    int uniplen;
+
+    if (!pass) {
+        unipass = NULL;
+        uniplen = 0;
+    } else if (!OPENSSL_asc2uni(pass, passlen, &unipass, &uniplen)) {
+        PKCS12err(PKCS12_F_PKCS12_KEY_GEN_ASC, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ret = PKCS12_key_gen_uni(unipass, uniplen, salt, saltlen,
+                             id, iter, n, out, md_type);
+    if (ret <= 0)
+        return 0;
+    OPENSSL_clear_free(unipass, uniplen);
+    return ret;
+}
+
+int PKCS12_key_gen_utf8(const char *pass, int passlen, unsigned char *salt,
+                        int saltlen, int id, int iter, int n,
+                        unsigned char *out, const EVP_MD *md_type)
+{
+    int ret;
+    unsigned char *unipass;
+    int uniplen;
+
+    if (!pass) {
+        unipass = NULL;
+        uniplen = 0;
+    } else if (!OPENSSL_utf82uni(pass, passlen, &unipass, &uniplen)) {
+        PKCS12err(PKCS12_F_PKCS12_KEY_GEN_UTF8, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ret = PKCS12_key_gen_uni(unipass, uniplen, salt, saltlen,
+                             id, iter, n, out, md_type);
+    if (ret <= 0)
+        return 0;
+    OPENSSL_clear_free(unipass, uniplen);
+    return ret;
+}
+
+int PKCS12_key_gen_uni(unsigned char *pass, int passlen, unsigned char *salt,
+                       int saltlen, int id, int iter, int n,
+                       unsigned char *out, const EVP_MD *md_type)
+{
+    unsigned char *B = NULL, *D = NULL, *I = NULL, *p = NULL, *Ai = NULL;
+    int Slen, Plen, Ilen;
+    int i, j, u, v;
+    int ret = 0;
+    EVP_MD_CTX *ctx = NULL;
+#ifdef  OPENSSL_DEBUG_KEYGEN
+    unsigned char *tmpout = out;
+    int tmpn = n;
+#endif
+
+    ctx = EVP_MD_CTX_new();
+    if (ctx == NULL)
+        goto err;
+
+#ifdef  OPENSSL_DEBUG_KEYGEN
+    fprintf(stderr, "KEYGEN DEBUG\n");
+    fprintf(stderr, "ID %d, ITER %d\n", id, iter);
+    fprintf(stderr, "Password (length %d):\n", passlen);
+    h__dump(pass, passlen);
+    fprintf(stderr, "Salt (length %d):\n", saltlen);
+    h__dump(salt, saltlen);
+#endif
+    v = EVP_MD_block_size(md_type);
+    u = EVP_MD_size(md_type);
+    if (u < 0 || v <= 0)
+        goto err;
+    D = OPENSSL_malloc(v);
+    Ai = OPENSSL_malloc(u);
+    B = OPENSSL_malloc(v + 1);
+    Slen = v * ((saltlen + v - 1) / v);
+    if (passlen)
+        Plen = v * ((passlen + v - 1) / v);
+    else
+        Plen = 0;
+    Ilen = Slen + Plen;
+    I = OPENSSL_malloc(Ilen);
+    if (D == NULL || Ai == NULL || B == NULL || I == NULL)
+        goto err;
+    for (i = 0; i < v; i++)
+        D[i] = id;
+    p = I;
+    for (i = 0; i < Slen; i++)
+        *p++ = salt[i % saltlen];
+    for (i = 0; i < Plen; i++)
+        *p++ = pass[i % passlen];
+    for (;;) {
+        if (!EVP_DigestInit_ex(ctx, md_type, NULL)
+            || !EVP_DigestUpdate(ctx, D, v)
+            || !EVP_DigestUpdate(ctx, I, Ilen)
+            || !EVP_DigestFinal_ex(ctx, Ai, NULL))
+            goto err;
+        for (j = 1; j < iter; j++) {
+            if (!EVP_DigestInit_ex(ctx, md_type, NULL)
+                || !EVP_DigestUpdate(ctx, Ai, u)
+                || !EVP_DigestFinal_ex(ctx, Ai, NULL))
+                goto err;
+        }
+        memcpy(out, Ai, min(n, u));
+        if (u >= n) {
+#ifdef OPENSSL_DEBUG_KEYGEN
+            fprintf(stderr, "Output KEY (length %d)\n", tmpn);
+            h__dump(tmpout, tmpn);
+#endif
+            ret = 1;
+            goto end;
+        }
+        n -= u;
+        out += u;
+        for (j = 0; j < v; j++)
+            B[j] = Ai[j % u];
+        for (j = 0; j < Ilen; j += v) {
+            int k;
+            unsigned char *Ij = I + j;
+            uint16_t c = 1;
+
+            /* Work out Ij = Ij + B + 1 */
+            for (k = v - 1; k >= 0; k--) {
+                c += Ij[k] + B[k];
+                Ij[k] = (unsigned char)c;
+                c >>= 8;
+            }
+        }
+    }
+
+ err:
+    PKCS12err(PKCS12_F_PKCS12_KEY_GEN_UNI, ERR_R_MALLOC_FAILURE);
+
+ end:
+    OPENSSL_free(Ai);
+    OPENSSL_free(B);
+    OPENSSL_free(D);
+    OPENSSL_free(I);
+    EVP_MD_CTX_free(ctx);
+    return ret;
+}
+
+#ifdef OPENSSL_DEBUG_KEYGEN
+void h__dump(unsigned char *p, int len)
+{
+    for (; len--; p++)
+        fprintf(stderr, "%02X", *p);
+    fprintf(stderr, "\n");
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_kiss.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_kiss.c
new file mode 100644
index 000000000..7ab98385a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_kiss.c
@@ -0,0 +1,250 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/pkcs12.h>
+
+/* Simplified PKCS#12 routines */
+
+static int parse_pk12(PKCS12 *p12, const char *pass, int passlen,
+                      EVP_PKEY **pkey, STACK_OF(X509) *ocerts);
+
+static int parse_bags(const STACK_OF(PKCS12_SAFEBAG) *bags, const char *pass,
+                      int passlen, EVP_PKEY **pkey, STACK_OF(X509) *ocerts);
+
+static int parse_bag(PKCS12_SAFEBAG *bag, const char *pass, int passlen,
+                     EVP_PKEY **pkey, STACK_OF(X509) *ocerts);
+
+/*
+ * Parse and decrypt a PKCS#12 structure returning user key, user cert and
+ * other (CA) certs. Note either ca should be NULL, *ca should be NULL, or it
+ * should point to a valid STACK structure. pkey and cert can be passed
+ * uninitialised.
+ */
+
+int PKCS12_parse(PKCS12 *p12, const char *pass, EVP_PKEY **pkey, X509 **cert,
+                 STACK_OF(X509) **ca)
+{
+    STACK_OF(X509) *ocerts = NULL;
+    X509 *x = NULL;
+
+    if (pkey)
+        *pkey = NULL;
+    if (cert)
+        *cert = NULL;
+
+    /* Check for NULL PKCS12 structure */
+
+    if (!p12) {
+        PKCS12err(PKCS12_F_PKCS12_PARSE,
+                  PKCS12_R_INVALID_NULL_PKCS12_POINTER);
+        return 0;
+    }
+
+    /* Check the mac */
+
+    /*
+     * If password is zero length or NULL then try verifying both cases to
+     * determine which password is correct. The reason for this is that under
+     * PKCS#12 password based encryption no password and a zero length
+     * password are two different things...
+     */
+
+    if (!pass || !*pass) {
+        if (PKCS12_verify_mac(p12, NULL, 0))
+            pass = NULL;
+        else if (PKCS12_verify_mac(p12, "", 0))
+            pass = "";
+        else {
+            PKCS12err(PKCS12_F_PKCS12_PARSE, PKCS12_R_MAC_VERIFY_FAILURE);
+            goto err;
+        }
+    } else if (!PKCS12_verify_mac(p12, pass, -1)) {
+        PKCS12err(PKCS12_F_PKCS12_PARSE, PKCS12_R_MAC_VERIFY_FAILURE);
+        goto err;
+    }
+
+    /* Allocate stack for other certificates */
+    ocerts = sk_X509_new_null();
+
+    if (!ocerts) {
+        PKCS12err(PKCS12_F_PKCS12_PARSE, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (!parse_pk12(p12, pass, -1, pkey, ocerts)) {
+        PKCS12err(PKCS12_F_PKCS12_PARSE, PKCS12_R_PARSE_ERROR);
+        goto err;
+    }
+
+    while ((x = sk_X509_pop(ocerts))) {
+        if (pkey && *pkey && cert && !*cert) {
+            ERR_set_mark();
+            if (X509_check_private_key(x, *pkey)) {
+                *cert = x;
+                x = NULL;
+            }
+            ERR_pop_to_mark();
+        }
+
+        if (ca && x) {
+            if (!*ca)
+                *ca = sk_X509_new_null();
+            if (!*ca)
+                goto err;
+            if (!sk_X509_push(*ca, x))
+                goto err;
+            x = NULL;
+        }
+        X509_free(x);
+    }
+
+    sk_X509_pop_free(ocerts, X509_free);
+
+    return 1;
+
+ err:
+
+    if (pkey) {
+        EVP_PKEY_free(*pkey);
+        *pkey = NULL;
+    }
+    if (cert) {
+        X509_free(*cert);
+        *cert = NULL;
+    }
+    X509_free(x);
+    sk_X509_pop_free(ocerts, X509_free);
+    return 0;
+
+}
+
+/* Parse the outer PKCS#12 structure */
+
+static int parse_pk12(PKCS12 *p12, const char *pass, int passlen,
+                      EVP_PKEY **pkey, STACK_OF(X509) *ocerts)
+{
+    STACK_OF(PKCS7) *asafes;
+    STACK_OF(PKCS12_SAFEBAG) *bags;
+    int i, bagnid;
+    PKCS7 *p7;
+
+    if ((asafes = PKCS12_unpack_authsafes(p12)) == NULL)
+        return 0;
+    for (i = 0; i < sk_PKCS7_num(asafes); i++) {
+        p7 = sk_PKCS7_value(asafes, i);
+        bagnid = OBJ_obj2nid(p7->type);
+        if (bagnid == NID_pkcs7_data) {
+            bags = PKCS12_unpack_p7data(p7);
+        } else if (bagnid == NID_pkcs7_encrypted) {
+            bags = PKCS12_unpack_p7encdata(p7, pass, passlen);
+        } else
+            continue;
+        if (!bags) {
+            sk_PKCS7_pop_free(asafes, PKCS7_free);
+            return 0;
+        }
+        if (!parse_bags(bags, pass, passlen, pkey, ocerts)) {
+            sk_PKCS12_SAFEBAG_pop_free(bags, PKCS12_SAFEBAG_free);
+            sk_PKCS7_pop_free(asafes, PKCS7_free);
+            return 0;
+        }
+        sk_PKCS12_SAFEBAG_pop_free(bags, PKCS12_SAFEBAG_free);
+    }
+    sk_PKCS7_pop_free(asafes, PKCS7_free);
+    return 1;
+}
+
+static int parse_bags(const STACK_OF(PKCS12_SAFEBAG) *bags, const char *pass,
+                      int passlen, EVP_PKEY **pkey, STACK_OF(X509) *ocerts)
+{
+    int i;
+    for (i = 0; i < sk_PKCS12_SAFEBAG_num(bags); i++) {
+        if (!parse_bag(sk_PKCS12_SAFEBAG_value(bags, i),
+                       pass, passlen, pkey, ocerts))
+            return 0;
+    }
+    return 1;
+}
+
+static int parse_bag(PKCS12_SAFEBAG *bag, const char *pass, int passlen,
+                     EVP_PKEY **pkey, STACK_OF(X509) *ocerts)
+{
+    PKCS8_PRIV_KEY_INFO *p8;
+    X509 *x509;
+    const ASN1_TYPE *attrib;
+    ASN1_BMPSTRING *fname = NULL;
+    ASN1_OCTET_STRING *lkid = NULL;
+
+    if ((attrib = PKCS12_SAFEBAG_get0_attr(bag, NID_friendlyName)))
+        fname = attrib->value.bmpstring;
+
+    if ((attrib = PKCS12_SAFEBAG_get0_attr(bag, NID_localKeyID)))
+        lkid = attrib->value.octet_string;
+
+    switch (PKCS12_SAFEBAG_get_nid(bag)) {
+    case NID_keyBag:
+        if (!pkey || *pkey)
+            return 1;
+        *pkey = EVP_PKCS82PKEY(PKCS12_SAFEBAG_get0_p8inf(bag));
+        if (*pkey == NULL)
+            return 0;
+        break;
+
+    case NID_pkcs8ShroudedKeyBag:
+        if (!pkey || *pkey)
+            return 1;
+        if ((p8 = PKCS12_decrypt_skey(bag, pass, passlen)) == NULL)
+            return 0;
+        *pkey = EVP_PKCS82PKEY(p8);
+        PKCS8_PRIV_KEY_INFO_free(p8);
+        if (!(*pkey))
+            return 0;
+        break;
+
+    case NID_certBag:
+        if (PKCS12_SAFEBAG_get_bag_nid(bag) != NID_x509Certificate)
+            return 1;
+        if ((x509 = PKCS12_SAFEBAG_get1_cert(bag)) == NULL)
+            return 0;
+        if (lkid && !X509_keyid_set1(x509, lkid->data, lkid->length)) {
+            X509_free(x509);
+            return 0;
+        }
+        if (fname) {
+            int len, r;
+            unsigned char *data;
+            len = ASN1_STRING_to_UTF8(&data, fname);
+            if (len >= 0) {
+                r = X509_alias_set1(x509, data, len);
+                OPENSSL_free(data);
+                if (!r) {
+                    X509_free(x509);
+                    return 0;
+                }
+            }
+        }
+
+        if (!sk_X509_push(ocerts, x509)) {
+            X509_free(x509);
+            return 0;
+        }
+
+        break;
+
+    case NID_safeContentsBag:
+        return parse_bags(PKCS12_SAFEBAG_get0_safes(bag), pass, passlen, pkey,
+                          ocerts);
+
+    default:
+        return 1;
+    }
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_lcl.h
new file mode 100644
index 000000000..0b52f1e1f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_lcl.h
@@ -0,0 +1,43 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+struct PKCS12_MAC_DATA_st {
+    X509_SIG *dinfo;
+    ASN1_OCTET_STRING *salt;
+    ASN1_INTEGER *iter;         /* defaults to 1 */
+};
+
+struct PKCS12_st {
+    ASN1_INTEGER *version;
+    PKCS12_MAC_DATA *mac;
+    PKCS7 *authsafes;
+};
+
+struct PKCS12_SAFEBAG_st {
+    ASN1_OBJECT *type;
+    union {
+        struct pkcs12_bag_st *bag; /* secret, crl and certbag */
+        struct pkcs8_priv_key_info_st *keybag; /* keybag */
+        X509_SIG *shkeybag;     /* shrouded key bag */
+        STACK_OF(PKCS12_SAFEBAG) *safes;
+        ASN1_TYPE *other;
+    } value;
+    STACK_OF(X509_ATTRIBUTE) *attrib;
+};
+
+struct pkcs12_bag_st {
+    ASN1_OBJECT *type;
+    union {
+        ASN1_OCTET_STRING *x509cert;
+        ASN1_OCTET_STRING *x509crl;
+        ASN1_OCTET_STRING *octet;
+        ASN1_IA5STRING *sdsicert;
+        ASN1_TYPE *other;       /* Secret or other bag */
+    } value;
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_mutl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_mutl.c
new file mode 100644
index 000000000..0cbbed364
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_mutl.c
@@ -0,0 +1,246 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/crypto.h>
+#include <openssl/hmac.h>
+#include <openssl/rand.h>
+#include <openssl/pkcs12.h>
+#include "p12_lcl.h"
+
+int PKCS12_mac_present(const PKCS12 *p12)
+{
+    return p12->mac ? 1 : 0;
+}
+
+void PKCS12_get0_mac(const ASN1_OCTET_STRING **pmac,
+                     const X509_ALGOR **pmacalg,
+                     const ASN1_OCTET_STRING **psalt,
+                     const ASN1_INTEGER **piter,
+                     const PKCS12 *p12)
+{
+    if (p12->mac) {
+        X509_SIG_get0(p12->mac->dinfo, pmacalg, pmac);
+        if (psalt)
+            *psalt = p12->mac->salt;
+        if (piter)
+            *piter = p12->mac->iter;
+    } else {
+        if (pmac)
+            *pmac = NULL;
+        if (pmacalg)
+            *pmacalg = NULL;
+        if (psalt)
+            *psalt = NULL;
+        if (piter)
+            *piter = NULL;
+    }
+}
+
+#define TK26_MAC_KEY_LEN 32
+
+static int pkcs12_gen_gost_mac_key(const char *pass, int passlen,
+                                   const unsigned char *salt, int saltlen,
+                                   int iter, int keylen, unsigned char *key,
+                                   const EVP_MD *digest)
+{
+    unsigned char out[96];
+
+    if (keylen != TK26_MAC_KEY_LEN) {
+        return 0;
+    }
+
+    if (!PKCS5_PBKDF2_HMAC(pass, passlen, salt, saltlen, iter,
+                           digest, sizeof(out), out)) {
+        return 0;
+    }
+    memcpy(key, out + sizeof(out) - TK26_MAC_KEY_LEN, TK26_MAC_KEY_LEN);
+    OPENSSL_cleanse(out, sizeof(out));
+    return 1;
+}
+
+/* Generate a MAC */
+static int pkcs12_gen_mac(PKCS12 *p12, const char *pass, int passlen,
+                          unsigned char *mac, unsigned int *maclen,
+                          int (*pkcs12_key_gen)(const char *pass, int passlen,
+                                                unsigned char *salt, int slen,
+                                                int id, int iter, int n,
+                                                unsigned char *out,
+                                                const EVP_MD *md_type))
+{
+    int ret = 0;
+    const EVP_MD *md_type;
+    HMAC_CTX *hmac = NULL;
+    unsigned char key[EVP_MAX_MD_SIZE], *salt;
+    int saltlen, iter;
+    int md_size = 0;
+    int md_type_nid;
+    const X509_ALGOR *macalg;
+    const ASN1_OBJECT *macoid;
+
+    if (pkcs12_key_gen == NULL)
+        pkcs12_key_gen = PKCS12_key_gen_utf8;
+
+    if (!PKCS7_type_is_data(p12->authsafes)) {
+        PKCS12err(PKCS12_F_PKCS12_GEN_MAC, PKCS12_R_CONTENT_TYPE_NOT_DATA);
+        return 0;
+    }
+
+    salt = p12->mac->salt->data;
+    saltlen = p12->mac->salt->length;
+    if (!p12->mac->iter)
+        iter = 1;
+    else
+        iter = ASN1_INTEGER_get(p12->mac->iter);
+    X509_SIG_get0(p12->mac->dinfo, &macalg, NULL);
+    X509_ALGOR_get0(&macoid, NULL, NULL, macalg);
+    if ((md_type = EVP_get_digestbyobj(macoid)) == NULL) {
+        PKCS12err(PKCS12_F_PKCS12_GEN_MAC, PKCS12_R_UNKNOWN_DIGEST_ALGORITHM);
+        return 0;
+    }
+    md_size = EVP_MD_size(md_type);
+    md_type_nid = EVP_MD_type(md_type);
+    if (md_size < 0)
+        return 0;
+    if ((md_type_nid == NID_id_GostR3411_94
+         || md_type_nid == NID_id_GostR3411_2012_256
+         || md_type_nid == NID_id_GostR3411_2012_512)
+        && ossl_safe_getenv("LEGACY_GOST_PKCS12") == NULL) {
+        md_size = TK26_MAC_KEY_LEN;
+        if (!pkcs12_gen_gost_mac_key(pass, passlen, salt, saltlen, iter,
+                                     md_size, key, md_type)) {
+            PKCS12err(PKCS12_F_PKCS12_GEN_MAC, PKCS12_R_KEY_GEN_ERROR);
+            goto err;
+        }
+    } else
+        if (!(*pkcs12_key_gen)(pass, passlen, salt, saltlen, PKCS12_MAC_ID,
+                               iter, md_size, key, md_type)) {
+        PKCS12err(PKCS12_F_PKCS12_GEN_MAC, PKCS12_R_KEY_GEN_ERROR);
+        goto err;
+    }
+    if ((hmac = HMAC_CTX_new()) == NULL
+        || !HMAC_Init_ex(hmac, key, md_size, md_type, NULL)
+        || !HMAC_Update(hmac, p12->authsafes->d.data->data,
+                        p12->authsafes->d.data->length)
+        || !HMAC_Final(hmac, mac, maclen)) {
+        goto err;
+    }
+    ret = 1;
+
+err:
+    OPENSSL_cleanse(key, sizeof(key));
+    HMAC_CTX_free(hmac);
+    return ret;
+}
+
+int PKCS12_gen_mac(PKCS12 *p12, const char *pass, int passlen,
+                   unsigned char *mac, unsigned int *maclen)
+{
+    return pkcs12_gen_mac(p12, pass, passlen, mac, maclen, NULL);
+}
+
+/* Verify the mac */
+int PKCS12_verify_mac(PKCS12 *p12, const char *pass, int passlen)
+{
+    unsigned char mac[EVP_MAX_MD_SIZE];
+    unsigned int maclen;
+    const ASN1_OCTET_STRING *macoct;
+
+    if (p12->mac == NULL) {
+        PKCS12err(PKCS12_F_PKCS12_VERIFY_MAC, PKCS12_R_MAC_ABSENT);
+        return 0;
+    }
+    if (!pkcs12_gen_mac(p12, pass, passlen, mac, &maclen,
+                        PKCS12_key_gen_utf8)) {
+        PKCS12err(PKCS12_F_PKCS12_VERIFY_MAC, PKCS12_R_MAC_GENERATION_ERROR);
+        return 0;
+    }
+    X509_SIG_get0(p12->mac->dinfo, NULL, &macoct);
+    if ((maclen != (unsigned int)ASN1_STRING_length(macoct))
+        || CRYPTO_memcmp(mac, ASN1_STRING_get0_data(macoct), maclen) != 0)
+        return 0;
+
+    return 1;
+}
+
+/* Set a mac */
+
+int PKCS12_set_mac(PKCS12 *p12, const char *pass, int passlen,
+                   unsigned char *salt, int saltlen, int iter,
+                   const EVP_MD *md_type)
+{
+    unsigned char mac[EVP_MAX_MD_SIZE];
+    unsigned int maclen;
+    ASN1_OCTET_STRING *macoct;
+
+    if (!md_type)
+        md_type = EVP_sha1();
+    if (PKCS12_setup_mac(p12, iter, salt, saltlen, md_type) == PKCS12_ERROR) {
+        PKCS12err(PKCS12_F_PKCS12_SET_MAC, PKCS12_R_MAC_SETUP_ERROR);
+        return 0;
+    }
+    /*
+     * Note that output mac is forced to UTF-8...
+     */
+    if (!pkcs12_gen_mac(p12, pass, passlen, mac, &maclen,
+                        PKCS12_key_gen_utf8)) {
+        PKCS12err(PKCS12_F_PKCS12_SET_MAC, PKCS12_R_MAC_GENERATION_ERROR);
+        return 0;
+    }
+    X509_SIG_getm(p12->mac->dinfo, NULL, &macoct);
+    if (!ASN1_OCTET_STRING_set(macoct, mac, maclen)) {
+        PKCS12err(PKCS12_F_PKCS12_SET_MAC, PKCS12_R_MAC_STRING_SET_ERROR);
+        return 0;
+    }
+    return 1;
+}
+
+/* Set up a mac structure */
+int PKCS12_setup_mac(PKCS12 *p12, int iter, unsigned char *salt, int saltlen,
+                     const EVP_MD *md_type)
+{
+    X509_ALGOR *macalg;
+
+    PKCS12_MAC_DATA_free(p12->mac);
+    p12->mac = NULL;
+
+    if ((p12->mac = PKCS12_MAC_DATA_new()) == NULL)
+        return PKCS12_ERROR;
+    if (iter > 1) {
+        if ((p12->mac->iter = ASN1_INTEGER_new()) == NULL) {
+            PKCS12err(PKCS12_F_PKCS12_SETUP_MAC, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        if (!ASN1_INTEGER_set(p12->mac->iter, iter)) {
+            PKCS12err(PKCS12_F_PKCS12_SETUP_MAC, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+    }
+    if (!saltlen)
+        saltlen = PKCS12_SALT_LEN;
+    if ((p12->mac->salt->data = OPENSSL_malloc(saltlen)) == NULL) {
+        PKCS12err(PKCS12_F_PKCS12_SETUP_MAC, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    p12->mac->salt->length = saltlen;
+    if (!salt) {
+        if (RAND_bytes(p12->mac->salt->data, saltlen) <= 0)
+            return 0;
+    } else
+        memcpy(p12->mac->salt->data, salt, saltlen);
+    X509_SIG_getm(p12->mac->dinfo, &macalg, NULL);
+    if (!X509_ALGOR_set0(macalg, OBJ_nid2obj(EVP_MD_type(md_type)),
+                         V_ASN1_NULL, NULL)) {
+        PKCS12err(PKCS12_F_PKCS12_SETUP_MAC, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_npas.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_npas.c
new file mode 100644
index 000000000..0ce75ed33
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_npas.c
@@ -0,0 +1,184 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <openssl/pem.h>
+#include <openssl/err.h>
+#include <openssl/pkcs12.h>
+#include "p12_lcl.h"
+
+/* PKCS#12 password change routine */
+
+static int newpass_p12(PKCS12 *p12, const char *oldpass, const char *newpass);
+static int newpass_bags(STACK_OF(PKCS12_SAFEBAG) *bags, const char *oldpass,
+                        const char *newpass);
+static int newpass_bag(PKCS12_SAFEBAG *bag, const char *oldpass,
+                        const char *newpass);
+static int alg_get(const X509_ALGOR *alg, int *pnid, int *piter,
+                   int *psaltlen);
+
+/*
+ * Change the password on a PKCS#12 structure.
+ */
+
+int PKCS12_newpass(PKCS12 *p12, const char *oldpass, const char *newpass)
+{
+    /* Check for NULL PKCS12 structure */
+
+    if (!p12) {
+        PKCS12err(PKCS12_F_PKCS12_NEWPASS,
+                  PKCS12_R_INVALID_NULL_PKCS12_POINTER);
+        return 0;
+    }
+
+    /* Check the mac */
+
+    if (!PKCS12_verify_mac(p12, oldpass, -1)) {
+        PKCS12err(PKCS12_F_PKCS12_NEWPASS, PKCS12_R_MAC_VERIFY_FAILURE);
+        return 0;
+    }
+
+    if (!newpass_p12(p12, oldpass, newpass)) {
+        PKCS12err(PKCS12_F_PKCS12_NEWPASS, PKCS12_R_PARSE_ERROR);
+        return 0;
+    }
+
+    return 1;
+}
+
+/* Parse the outer PKCS#12 structure */
+
+static int newpass_p12(PKCS12 *p12, const char *oldpass, const char *newpass)
+{
+    STACK_OF(PKCS7) *asafes = NULL, *newsafes = NULL;
+    STACK_OF(PKCS12_SAFEBAG) *bags = NULL;
+    int i, bagnid, pbe_nid = 0, pbe_iter = 0, pbe_saltlen = 0;
+    PKCS7 *p7, *p7new;
+    ASN1_OCTET_STRING *p12_data_tmp = NULL, *macoct = NULL;
+    unsigned char mac[EVP_MAX_MD_SIZE];
+    unsigned int maclen;
+    int rv = 0;
+
+    if ((asafes = PKCS12_unpack_authsafes(p12)) == NULL)
+        goto err;
+    if ((newsafes = sk_PKCS7_new_null()) == NULL)
+        goto err;
+    for (i = 0; i < sk_PKCS7_num(asafes); i++) {
+        p7 = sk_PKCS7_value(asafes, i);
+        bagnid = OBJ_obj2nid(p7->type);
+        if (bagnid == NID_pkcs7_data) {
+            bags = PKCS12_unpack_p7data(p7);
+        } else if (bagnid == NID_pkcs7_encrypted) {
+            bags = PKCS12_unpack_p7encdata(p7, oldpass, -1);
+            if (!alg_get(p7->d.encrypted->enc_data->algorithm,
+                         &pbe_nid, &pbe_iter, &pbe_saltlen))
+                goto err;
+        } else {
+            continue;
+        }
+        if (bags == NULL)
+            goto err;
+        if (!newpass_bags(bags, oldpass, newpass))
+            goto err;
+        /* Repack bag in same form with new password */
+        if (bagnid == NID_pkcs7_data)
+            p7new = PKCS12_pack_p7data(bags);
+        else
+            p7new = PKCS12_pack_p7encdata(pbe_nid, newpass, -1, NULL,
+                                          pbe_saltlen, pbe_iter, bags);
+        if (!p7new || !sk_PKCS7_push(newsafes, p7new))
+            goto err;
+        sk_PKCS12_SAFEBAG_pop_free(bags, PKCS12_SAFEBAG_free);
+        bags = NULL;
+    }
+
+    /* Repack safe: save old safe in case of error */
+
+    p12_data_tmp = p12->authsafes->d.data;
+    if ((p12->authsafes->d.data = ASN1_OCTET_STRING_new()) == NULL)
+        goto err;
+    if (!PKCS12_pack_authsafes(p12, newsafes))
+        goto err;
+
+    if (!PKCS12_gen_mac(p12, newpass, -1, mac, &maclen))
+        goto err;
+    X509_SIG_getm(p12->mac->dinfo, NULL, &macoct);
+    if (!ASN1_OCTET_STRING_set(macoct, mac, maclen))
+        goto err;
+
+    rv = 1;
+
+err:
+    /* Restore old safe if necessary */
+    if (rv == 1) {
+        ASN1_OCTET_STRING_free(p12_data_tmp);
+    } else if (p12_data_tmp != NULL) {
+        ASN1_OCTET_STRING_free(p12->authsafes->d.data);
+        p12->authsafes->d.data = p12_data_tmp;
+    }
+    sk_PKCS12_SAFEBAG_pop_free(bags, PKCS12_SAFEBAG_free);
+    sk_PKCS7_pop_free(asafes, PKCS7_free);
+    sk_PKCS7_pop_free(newsafes, PKCS7_free);
+    return rv;
+}
+
+static int newpass_bags(STACK_OF(PKCS12_SAFEBAG) *bags, const char *oldpass,
+                        const char *newpass)
+{
+    int i;
+    for (i = 0; i < sk_PKCS12_SAFEBAG_num(bags); i++) {
+        if (!newpass_bag(sk_PKCS12_SAFEBAG_value(bags, i), oldpass, newpass))
+            return 0;
+    }
+    return 1;
+}
+
+/* Change password of safebag: only needs handle shrouded keybags */
+
+static int newpass_bag(PKCS12_SAFEBAG *bag, const char *oldpass,
+                       const char *newpass)
+{
+    PKCS8_PRIV_KEY_INFO *p8;
+    X509_SIG *p8new;
+    int p8_nid, p8_saltlen, p8_iter;
+    const X509_ALGOR *shalg;
+
+    if (PKCS12_SAFEBAG_get_nid(bag) != NID_pkcs8ShroudedKeyBag)
+        return 1;
+
+    if ((p8 = PKCS8_decrypt(bag->value.shkeybag, oldpass, -1)) == NULL)
+        return 0;
+    X509_SIG_get0(bag->value.shkeybag, &shalg, NULL);
+    if (!alg_get(shalg, &p8_nid, &p8_iter, &p8_saltlen))
+        return 0;
+    p8new = PKCS8_encrypt(p8_nid, NULL, newpass, -1, NULL, p8_saltlen,
+                          p8_iter, p8);
+    PKCS8_PRIV_KEY_INFO_free(p8);
+    if (p8new == NULL)
+        return 0;
+    X509_SIG_free(bag->value.shkeybag);
+    bag->value.shkeybag = p8new;
+    return 1;
+}
+
+static int alg_get(const X509_ALGOR *alg, int *pnid, int *piter,
+                   int *psaltlen)
+{
+    PBEPARAM *pbe;
+    pbe = ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(PBEPARAM), alg->parameter);
+    if (!pbe)
+        return 0;
+    *pnid = OBJ_obj2nid(alg->algorithm);
+    *piter = ASN1_INTEGER_get(pbe->iter);
+    *psaltlen = pbe->salt->length;
+    PBEPARAM_free(pbe);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_p8d.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_p8d.c
new file mode 100644
index 000000000..d926a77df
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_p8d.c
@@ -0,0 +1,23 @@
+/*
+ * Copyright 2001-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/pkcs12.h>
+
+PKCS8_PRIV_KEY_INFO *PKCS8_decrypt(const X509_SIG *p8, const char *pass,
+                                   int passlen)
+{
+    const X509_ALGOR *dalg;
+    const ASN1_OCTET_STRING *doct;
+    X509_SIG_get0(p8, &dalg, &doct);
+    return PKCS12_item_decrypt_d2i(dalg,
+                                   ASN1_ITEM_rptr(PKCS8_PRIV_KEY_INFO), pass,
+                                   passlen, doct, 1);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_p8e.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_p8e.c
new file mode 100644
index 000000000..86a07e133
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_p8e.c
@@ -0,0 +1,69 @@
+/*
+ * Copyright 2001-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/pkcs12.h>
+#include "internal/x509_int.h"
+
+X509_SIG *PKCS8_encrypt(int pbe_nid, const EVP_CIPHER *cipher,
+                        const char *pass, int passlen,
+                        unsigned char *salt, int saltlen, int iter,
+                        PKCS8_PRIV_KEY_INFO *p8inf)
+{
+    X509_SIG *p8 = NULL;
+    X509_ALGOR *pbe;
+
+    if (pbe_nid == -1)
+        pbe = PKCS5_pbe2_set(cipher, iter, salt, saltlen);
+    else if (EVP_PBE_find(EVP_PBE_TYPE_PRF, pbe_nid, NULL, NULL, 0))
+        pbe = PKCS5_pbe2_set_iv(cipher, iter, salt, saltlen, NULL, pbe_nid);
+    else {
+        ERR_clear_error();
+        pbe = PKCS5_pbe_set(pbe_nid, iter, salt, saltlen);
+    }
+    if (!pbe) {
+        PKCS12err(PKCS12_F_PKCS8_ENCRYPT, ERR_R_ASN1_LIB);
+        return NULL;
+    }
+    p8 = PKCS8_set0_pbe(pass, passlen, p8inf, pbe);
+    if (p8 == NULL) {
+        X509_ALGOR_free(pbe);
+        return NULL;
+    }
+
+    return p8;
+}
+
+X509_SIG *PKCS8_set0_pbe(const char *pass, int passlen,
+                         PKCS8_PRIV_KEY_INFO *p8inf, X509_ALGOR *pbe)
+{
+    X509_SIG *p8;
+    ASN1_OCTET_STRING *enckey;
+
+    enckey =
+        PKCS12_item_i2d_encrypt(pbe, ASN1_ITEM_rptr(PKCS8_PRIV_KEY_INFO),
+                                pass, passlen, p8inf, 1);
+    if (!enckey) {
+        PKCS12err(PKCS12_F_PKCS8_SET0_PBE, PKCS12_R_ENCRYPT_ERROR);
+        return NULL;
+    }
+
+    p8 = OPENSSL_zalloc(sizeof(*p8));
+
+    if (p8 == NULL) {
+        PKCS12err(PKCS12_F_PKCS8_SET0_PBE, ERR_R_MALLOC_FAILURE);
+        ASN1_OCTET_STRING_free(enckey);
+        return NULL;
+    }
+    p8->algor = pbe;
+    p8->digest = enckey;
+
+    return p8;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_sbag.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_sbag.c
new file mode 100644
index 000000000..a09c5b931
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_sbag.c
@@ -0,0 +1,162 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/pkcs12.h>
+#include "p12_lcl.h"
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+ASN1_TYPE *PKCS12_get_attr(const PKCS12_SAFEBAG *bag, int attr_nid)
+{
+    return PKCS12_get_attr_gen(bag->attrib, attr_nid);
+}
+#endif
+
+const ASN1_TYPE *PKCS12_SAFEBAG_get0_attr(const PKCS12_SAFEBAG *bag,
+                                          int attr_nid)
+{
+    return PKCS12_get_attr_gen(bag->attrib, attr_nid);
+}
+
+ASN1_TYPE *PKCS8_get_attr(PKCS8_PRIV_KEY_INFO *p8, int attr_nid)
+{
+    return PKCS12_get_attr_gen(PKCS8_pkey_get0_attrs(p8), attr_nid);
+}
+
+const PKCS8_PRIV_KEY_INFO *PKCS12_SAFEBAG_get0_p8inf(const PKCS12_SAFEBAG *bag)
+{
+    if (PKCS12_SAFEBAG_get_nid(bag) != NID_keyBag)
+        return NULL;
+    return bag->value.keybag;
+}
+
+const X509_SIG *PKCS12_SAFEBAG_get0_pkcs8(const PKCS12_SAFEBAG *bag)
+{
+    if (OBJ_obj2nid(bag->type) != NID_pkcs8ShroudedKeyBag)
+        return NULL;
+    return bag->value.shkeybag;
+}
+
+const STACK_OF(PKCS12_SAFEBAG) *
+PKCS12_SAFEBAG_get0_safes(const PKCS12_SAFEBAG *bag)
+{
+    if (OBJ_obj2nid(bag->type) != NID_safeContentsBag)
+        return NULL;
+    return bag->value.safes;
+}
+
+const ASN1_OBJECT *PKCS12_SAFEBAG_get0_type(const PKCS12_SAFEBAG *bag)
+{
+    return bag->type;
+}
+
+int PKCS12_SAFEBAG_get_nid(const PKCS12_SAFEBAG *bag)
+{
+    return OBJ_obj2nid(bag->type);
+}
+
+int PKCS12_SAFEBAG_get_bag_nid(const PKCS12_SAFEBAG *bag)
+{
+    int btype = PKCS12_SAFEBAG_get_nid(bag);
+
+    if (btype != NID_certBag && btype != NID_crlBag && btype != NID_secretBag)
+        return -1;
+    return OBJ_obj2nid(bag->value.bag->type);
+}
+
+X509 *PKCS12_SAFEBAG_get1_cert(const PKCS12_SAFEBAG *bag)
+{
+    if (PKCS12_SAFEBAG_get_nid(bag) != NID_certBag)
+        return NULL;
+    if (OBJ_obj2nid(bag->value.bag->type) != NID_x509Certificate)
+        return NULL;
+    return ASN1_item_unpack(bag->value.bag->value.octet,
+                            ASN1_ITEM_rptr(X509));
+}
+
+X509_CRL *PKCS12_SAFEBAG_get1_crl(const PKCS12_SAFEBAG *bag)
+{
+    if (PKCS12_SAFEBAG_get_nid(bag) != NID_crlBag)
+        return NULL;
+    if (OBJ_obj2nid(bag->value.bag->type) != NID_x509Crl)
+        return NULL;
+    return ASN1_item_unpack(bag->value.bag->value.octet,
+                            ASN1_ITEM_rptr(X509_CRL));
+}
+
+PKCS12_SAFEBAG *PKCS12_SAFEBAG_create_cert(X509 *x509)
+{
+    return PKCS12_item_pack_safebag(x509, ASN1_ITEM_rptr(X509),
+                                    NID_x509Certificate, NID_certBag);
+}
+
+PKCS12_SAFEBAG *PKCS12_SAFEBAG_create_crl(X509_CRL *crl)
+{
+    return PKCS12_item_pack_safebag(crl, ASN1_ITEM_rptr(X509_CRL),
+                                    NID_x509Crl, NID_crlBag);
+}
+
+/* Turn PKCS8 object into a keybag */
+
+PKCS12_SAFEBAG *PKCS12_SAFEBAG_create0_p8inf(PKCS8_PRIV_KEY_INFO *p8)
+{
+    PKCS12_SAFEBAG *bag = PKCS12_SAFEBAG_new();
+
+    if (bag == NULL) {
+        PKCS12err(PKCS12_F_PKCS12_SAFEBAG_CREATE0_P8INF, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    bag->type = OBJ_nid2obj(NID_keyBag);
+    bag->value.keybag = p8;
+    return bag;
+}
+
+/* Turn PKCS8 object into a shrouded keybag */
+
+PKCS12_SAFEBAG *PKCS12_SAFEBAG_create0_pkcs8(X509_SIG *p8)
+{
+    PKCS12_SAFEBAG *bag = PKCS12_SAFEBAG_new();
+
+    /* Set up the safe bag */
+    if (bag == NULL) {
+        PKCS12err(PKCS12_F_PKCS12_SAFEBAG_CREATE0_PKCS8, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    bag->type = OBJ_nid2obj(NID_pkcs8ShroudedKeyBag);
+    bag->value.shkeybag = p8;
+    return bag;
+}
+
+PKCS12_SAFEBAG *PKCS12_SAFEBAG_create_pkcs8_encrypt(int pbe_nid,
+                                                    const char *pass,
+                                                    int passlen,
+                                                    unsigned char *salt,
+                                                    int saltlen, int iter,
+                                                    PKCS8_PRIV_KEY_INFO *p8inf)
+{
+    PKCS12_SAFEBAG *bag;
+    const EVP_CIPHER *pbe_ciph;
+    X509_SIG *p8;
+
+    pbe_ciph = EVP_get_cipherbynid(pbe_nid);
+    if (pbe_ciph)
+        pbe_nid = -1;
+
+    p8 = PKCS8_encrypt(pbe_nid, pbe_ciph, pass, passlen, salt, saltlen, iter,
+                       p8inf);
+    if (p8 == NULL)
+        return NULL;
+
+    bag = PKCS12_SAFEBAG_create0_pkcs8(p8);
+    if (bag == NULL)
+        X509_SIG_free(p8);
+
+    return bag;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_utl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_utl.c
new file mode 100644
index 000000000..43b9e3a59
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/p12_utl.c
@@ -0,0 +1,244 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/pkcs12.h>
+
+/* Cheap and nasty Unicode stuff */
+
+unsigned char *OPENSSL_asc2uni(const char *asc, int asclen,
+                               unsigned char **uni, int *unilen)
+{
+    int ulen, i;
+    unsigned char *unitmp;
+
+    if (asclen == -1)
+        asclen = strlen(asc);
+    ulen = asclen * 2 + 2;
+    if ((unitmp = OPENSSL_malloc(ulen)) == NULL) {
+        PKCS12err(PKCS12_F_OPENSSL_ASC2UNI, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    for (i = 0; i < ulen - 2; i += 2) {
+        unitmp[i] = 0;
+        unitmp[i + 1] = asc[i >> 1];
+    }
+    /* Make result double null terminated */
+    unitmp[ulen - 2] = 0;
+    unitmp[ulen - 1] = 0;
+    if (unilen)
+        *unilen = ulen;
+    if (uni)
+        *uni = unitmp;
+    return unitmp;
+}
+
+char *OPENSSL_uni2asc(const unsigned char *uni, int unilen)
+{
+    int asclen, i;
+    char *asctmp;
+    /* string must contain an even number of bytes */
+    if (unilen & 1)
+        return NULL;
+    asclen = unilen / 2;
+    /* If no terminating zero allow for one */
+    if (!unilen || uni[unilen - 1])
+        asclen++;
+    uni++;
+    if ((asctmp = OPENSSL_malloc(asclen)) == NULL) {
+        PKCS12err(PKCS12_F_OPENSSL_UNI2ASC, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    for (i = 0; i < unilen; i += 2)
+        asctmp[i >> 1] = uni[i];
+    asctmp[asclen - 1] = 0;
+    return asctmp;
+}
+
+/*
+ * OPENSSL_{utf82uni|uni2utf8} perform conversion between UTF-8 and
+ * PKCS#12 BMPString format, which is specified as big-endian UTF-16.
+ * One should keep in mind that even though BMPString is passed as
+ * unsigned char *, it's not the kind of string you can exercise e.g.
+ * strlen on. Caller also has to keep in mind that its length is
+ * expressed not in number of UTF-16 characters, but in number of
+ * bytes the string occupies, and treat it, the length, accordingly.
+ */
+unsigned char *OPENSSL_utf82uni(const char *asc, int asclen,
+                                unsigned char **uni, int *unilen)
+{
+    int ulen, i, j;
+    unsigned char *unitmp, *ret;
+    unsigned long utf32chr = 0;
+
+    if (asclen == -1)
+        asclen = strlen(asc);
+
+    for (ulen = 0, i = 0; i < asclen; i += j) {
+        j = UTF8_getc((const unsigned char *)asc+i, asclen-i, &utf32chr);
+
+        /*
+         * Following condition is somewhat opportunistic is sense that
+         * decoding failure is used as *indirect* indication that input
+         * string might in fact be extended ASCII/ANSI/ISO-8859-X. The
+         * fallback is taken in hope that it would allow to process
+         * files created with previous OpenSSL version, which used the
+         * naive OPENSSL_asc2uni all along. It might be worth noting
+         * that probability of false positive depends on language. In
+         * cases covered by ISO Latin 1 probability is very low, because
+         * any printable non-ASCII alphabet letter followed by another
+         * or any ASCII character will trigger failure and fallback.
+         * In other cases situation can be intensified by the fact that
+         * English letters are not part of alternative keyboard layout,
+         * but even then there should be plenty of pairs that trigger
+         * decoding failure...
+         */
+        if (j < 0)
+            return OPENSSL_asc2uni(asc, asclen, uni, unilen);
+
+        if (utf32chr > 0x10FFFF)        /* UTF-16 cap */
+            return NULL;
+
+        if (utf32chr >= 0x10000)        /* pair of UTF-16 characters */
+            ulen += 2*2;
+        else                            /* or just one */
+            ulen += 2;
+    }
+
+    ulen += 2;  /* for trailing UTF16 zero */
+
+    if ((ret = OPENSSL_malloc(ulen)) == NULL) {
+        PKCS12err(PKCS12_F_OPENSSL_UTF82UNI, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    /* re-run the loop writing down UTF-16 characters in big-endian order */
+    for (unitmp = ret, i = 0; i < asclen; i += j) {
+        j = UTF8_getc((const unsigned char *)asc+i, asclen-i, &utf32chr);
+        if (utf32chr >= 0x10000) {      /* pair if UTF-16 characters */
+            unsigned int hi, lo;
+
+            utf32chr -= 0x10000;
+            hi = 0xD800 + (utf32chr>>10);
+            lo = 0xDC00 + (utf32chr&0x3ff);
+            *unitmp++ = (unsigned char)(hi>>8);
+            *unitmp++ = (unsigned char)(hi);
+            *unitmp++ = (unsigned char)(lo>>8);
+            *unitmp++ = (unsigned char)(lo);
+        } else {                        /* or just one */
+            *unitmp++ = (unsigned char)(utf32chr>>8);
+            *unitmp++ = (unsigned char)(utf32chr);
+        }
+    }
+    /* Make result double null terminated */
+    *unitmp++ = 0;
+    *unitmp++ = 0;
+    if (unilen)
+        *unilen = ulen;
+    if (uni)
+        *uni = ret;
+    return ret;
+}
+
+static int bmp_to_utf8(char *str, const unsigned char *utf16, int len)
+{
+    unsigned long utf32chr;
+
+    if (len == 0) return 0;
+
+    if (len < 2) return -1;
+
+    /* pull UTF-16 character in big-endian order */
+    utf32chr = (utf16[0]<<8) | utf16[1];
+
+    if (utf32chr >= 0xD800 && utf32chr < 0xE000) {   /* two chars */
+        unsigned int lo;
+
+        if (len < 4) return -1;
+
+        utf32chr -= 0xD800;
+        utf32chr <<= 10;
+        lo = (utf16[2]<<8) | utf16[3];
+        if (lo < 0xDC00 || lo >= 0xE000) return -1;
+        utf32chr |= lo-0xDC00;
+        utf32chr += 0x10000;
+    }
+
+    return UTF8_putc((unsigned char *)str, len > 4 ? 4 : len, utf32chr);
+}
+
+char *OPENSSL_uni2utf8(const unsigned char *uni, int unilen)
+{
+    int asclen, i, j;
+    char *asctmp;
+
+    /* string must contain an even number of bytes */
+    if (unilen & 1)
+        return NULL;
+
+    for (asclen = 0, i = 0; i < unilen; ) {
+        j = bmp_to_utf8(NULL, uni+i, unilen-i);
+        /*
+         * falling back to OPENSSL_uni2asc makes lesser sense [than
+         * falling back to OPENSSL_asc2uni in OPENSSL_utf82uni above],
+         * it's done rather to maintain symmetry...
+         */
+        if (j < 0) return OPENSSL_uni2asc(uni, unilen);
+        if (j == 4) i += 4;
+        else        i += 2;
+        asclen += j;
+    }
+
+    /* If no terminating zero allow for one */
+    if (!unilen || (uni[unilen-2]||uni[unilen - 1]))
+        asclen++;
+
+    if ((asctmp = OPENSSL_malloc(asclen)) == NULL) {
+        PKCS12err(PKCS12_F_OPENSSL_UNI2UTF8, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    /* re-run the loop emitting UTF-8 string */
+    for (asclen = 0, i = 0; i < unilen; ) {
+        j = bmp_to_utf8(asctmp+asclen, uni+i, unilen-i);
+        if (j == 4) i += 4;
+        else        i += 2;
+        asclen += j;
+    }
+
+    /* If no terminating zero write one */
+    if (!unilen || (uni[unilen-2]||uni[unilen - 1]))
+        asctmp[asclen] = '\0';
+
+    return asctmp;
+}
+
+int i2d_PKCS12_bio(BIO *bp, PKCS12 *p12)
+{
+    return ASN1_item_i2d_bio(ASN1_ITEM_rptr(PKCS12), bp, p12);
+}
+
+#ifndef OPENSSL_NO_STDIO
+int i2d_PKCS12_fp(FILE *fp, PKCS12 *p12)
+{
+    return ASN1_item_i2d_fp(ASN1_ITEM_rptr(PKCS12), fp, p12);
+}
+#endif
+
+PKCS12 *d2i_PKCS12_bio(BIO *bp, PKCS12 **p12)
+{
+    return ASN1_item_d2i_bio(ASN1_ITEM_rptr(PKCS12), bp, p12);
+}
+
+#ifndef OPENSSL_NO_STDIO
+PKCS12 *d2i_PKCS12_fp(FILE *fp, PKCS12 **p12)
+{
+    return ASN1_item_d2i_fp(ASN1_ITEM_rptr(PKCS12), fp, p12);
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/pk12err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/pk12err.c
new file mode 100644
index 000000000..38ce5197e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs12/pk12err.c
@@ -0,0 +1,117 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/pkcs12err.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA PKCS12_str_functs[] = {
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_OPENSSL_ASC2UNI, 0), "OPENSSL_asc2uni"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_OPENSSL_UNI2ASC, 0), "OPENSSL_uni2asc"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_OPENSSL_UNI2UTF8, 0),
+     "OPENSSL_uni2utf8"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_OPENSSL_UTF82UNI, 0),
+     "OPENSSL_utf82uni"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_CREATE, 0), "PKCS12_create"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_GEN_MAC, 0), "PKCS12_gen_mac"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_INIT, 0), "PKCS12_init"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_ITEM_DECRYPT_D2I, 0),
+     "PKCS12_item_decrypt_d2i"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_ITEM_I2D_ENCRYPT, 0),
+     "PKCS12_item_i2d_encrypt"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_ITEM_PACK_SAFEBAG, 0),
+     "PKCS12_item_pack_safebag"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_KEY_GEN_ASC, 0),
+     "PKCS12_key_gen_asc"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_KEY_GEN_UNI, 0),
+     "PKCS12_key_gen_uni"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_KEY_GEN_UTF8, 0),
+     "PKCS12_key_gen_utf8"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_NEWPASS, 0), "PKCS12_newpass"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_PACK_P7DATA, 0),
+     "PKCS12_pack_p7data"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_PACK_P7ENCDATA, 0),
+     "PKCS12_pack_p7encdata"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_PARSE, 0), "PKCS12_parse"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_PBE_CRYPT, 0),
+     "PKCS12_pbe_crypt"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_PBE_KEYIVGEN, 0),
+     "PKCS12_PBE_keyivgen"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_SAFEBAG_CREATE0_P8INF, 0),
+     "PKCS12_SAFEBAG_create0_p8inf"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_SAFEBAG_CREATE0_PKCS8, 0),
+     "PKCS12_SAFEBAG_create0_pkcs8"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_SAFEBAG_CREATE_PKCS8_ENCRYPT, 0),
+     "PKCS12_SAFEBAG_create_pkcs8_encrypt"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_SETUP_MAC, 0),
+     "PKCS12_setup_mac"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_SET_MAC, 0), "PKCS12_set_mac"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_UNPACK_AUTHSAFES, 0),
+     "PKCS12_unpack_authsafes"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_UNPACK_P7DATA, 0),
+     "PKCS12_unpack_p7data"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS12_VERIFY_MAC, 0),
+     "PKCS12_verify_mac"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS8_ENCRYPT, 0), "PKCS8_encrypt"},
+    {ERR_PACK(ERR_LIB_PKCS12, PKCS12_F_PKCS8_SET0_PBE, 0), "PKCS8_set0_pbe"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA PKCS12_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_CANT_PACK_STRUCTURE),
+    "cant pack structure"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_CONTENT_TYPE_NOT_DATA),
+    "content type not data"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_DECODE_ERROR), "decode error"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_ENCODE_ERROR), "encode error"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_ENCRYPT_ERROR), "encrypt error"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_ERROR_SETTING_ENCRYPTED_DATA_TYPE),
+    "error setting encrypted data type"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_INVALID_NULL_ARGUMENT),
+    "invalid null argument"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_INVALID_NULL_PKCS12_POINTER),
+    "invalid null pkcs12 pointer"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_IV_GEN_ERROR), "iv gen error"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_KEY_GEN_ERROR), "key gen error"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_MAC_ABSENT), "mac absent"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_MAC_GENERATION_ERROR),
+    "mac generation error"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_MAC_SETUP_ERROR), "mac setup error"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_MAC_STRING_SET_ERROR),
+    "mac string set error"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_MAC_VERIFY_FAILURE),
+    "mac verify failure"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_PARSE_ERROR), "parse error"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_PKCS12_ALGOR_CIPHERINIT_ERROR),
+    "pkcs12 algor cipherinit error"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_PKCS12_CIPHERFINAL_ERROR),
+    "pkcs12 cipherfinal error"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_PKCS12_PBE_CRYPT_ERROR),
+    "pkcs12 pbe crypt error"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_UNKNOWN_DIGEST_ALGORITHM),
+    "unknown digest algorithm"},
+    {ERR_PACK(ERR_LIB_PKCS12, 0, PKCS12_R_UNSUPPORTED_PKCS12_MODE),
+    "unsupported pkcs12 mode"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_PKCS12_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(PKCS12_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(PKCS12_str_functs);
+        ERR_load_strings_const(PKCS12_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/bio_pk7.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/bio_pk7.c
new file mode 100644
index 000000000..29feaa354
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/bio_pk7.c
@@ -0,0 +1,24 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/asn1.h>
+#include <openssl/pkcs7.h>
+#include <openssl/bio.h>
+
+#if !defined(OPENSSL_SYS_VXWORKS)
+# include <memory.h>
+#endif
+#include <stdio.h>
+
+/* Streaming encode support for PKCS#7 */
+
+BIO *BIO_new_PKCS7(BIO *out, PKCS7 *p7)
+{
+    return BIO_new_NDEF(out, (ASN1_VALUE *)p7, ASN1_ITEM_rptr(PKCS7));
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/build.info
new file mode 100644
index 000000000..2029d538f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/build.info
@@ -0,0 +1,4 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        pk7_asn1.c pk7_lib.c pkcs7err.c pk7_doit.c pk7_smime.c pk7_attr.c \
+        pk7_mime.c bio_pk7.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_asn1.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_asn1.c
new file mode 100644
index 000000000..cd9fb4f50
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_asn1.c
@@ -0,0 +1,202 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/pkcs7.h>
+#include <openssl/x509.h>
+
+/* PKCS#7 ASN1 module */
+
+/* This is the ANY DEFINED BY table for the top level PKCS#7 structure */
+
+ASN1_ADB_TEMPLATE(p7default) = ASN1_EXP_OPT(PKCS7, d.other, ASN1_ANY, 0);
+
+ASN1_ADB(PKCS7) = {
+        ADB_ENTRY(NID_pkcs7_data, ASN1_NDEF_EXP_OPT(PKCS7, d.data, ASN1_OCTET_STRING_NDEF, 0)),
+        ADB_ENTRY(NID_pkcs7_signed, ASN1_NDEF_EXP_OPT(PKCS7, d.sign, PKCS7_SIGNED, 0)),
+        ADB_ENTRY(NID_pkcs7_enveloped, ASN1_NDEF_EXP_OPT(PKCS7, d.enveloped, PKCS7_ENVELOPE, 0)),
+        ADB_ENTRY(NID_pkcs7_signedAndEnveloped, ASN1_NDEF_EXP_OPT(PKCS7, d.signed_and_enveloped, PKCS7_SIGN_ENVELOPE, 0)),
+        ADB_ENTRY(NID_pkcs7_digest, ASN1_NDEF_EXP_OPT(PKCS7, d.digest, PKCS7_DIGEST, 0)),
+        ADB_ENTRY(NID_pkcs7_encrypted, ASN1_NDEF_EXP_OPT(PKCS7, d.encrypted, PKCS7_ENCRYPT, 0))
+} ASN1_ADB_END(PKCS7, 0, type, 0, &p7default_tt, NULL);
+
+/* PKCS#7 streaming support */
+static int pk7_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                  void *exarg)
+{
+    ASN1_STREAM_ARG *sarg = exarg;
+    PKCS7 **pp7 = (PKCS7 **)pval;
+
+    switch (operation) {
+
+    case ASN1_OP_STREAM_PRE:
+        if (PKCS7_stream(&sarg->boundary, *pp7) <= 0)
+            return 0;
+        /* fall thru */
+    case ASN1_OP_DETACHED_PRE:
+        sarg->ndef_bio = PKCS7_dataInit(*pp7, sarg->out);
+        if (!sarg->ndef_bio)
+            return 0;
+        break;
+
+    case ASN1_OP_STREAM_POST:
+    case ASN1_OP_DETACHED_POST:
+        if (PKCS7_dataFinal(*pp7, sarg->ndef_bio) <= 0)
+            return 0;
+        break;
+
+    }
+    return 1;
+}
+
+ASN1_NDEF_SEQUENCE_cb(PKCS7, pk7_cb) = {
+        ASN1_SIMPLE(PKCS7, type, ASN1_OBJECT),
+        ASN1_ADB_OBJECT(PKCS7)
+}ASN1_NDEF_SEQUENCE_END_cb(PKCS7, PKCS7)
+
+IMPLEMENT_ASN1_FUNCTIONS(PKCS7)
+
+IMPLEMENT_ASN1_NDEF_FUNCTION(PKCS7)
+
+IMPLEMENT_ASN1_DUP_FUNCTION(PKCS7)
+
+ASN1_NDEF_SEQUENCE(PKCS7_SIGNED) = {
+        ASN1_SIMPLE(PKCS7_SIGNED, version, ASN1_INTEGER),
+        ASN1_SET_OF(PKCS7_SIGNED, md_algs, X509_ALGOR),
+        ASN1_SIMPLE(PKCS7_SIGNED, contents, PKCS7),
+        ASN1_IMP_SEQUENCE_OF_OPT(PKCS7_SIGNED, cert, X509, 0),
+        ASN1_IMP_SET_OF_OPT(PKCS7_SIGNED, crl, X509_CRL, 1),
+        ASN1_SET_OF(PKCS7_SIGNED, signer_info, PKCS7_SIGNER_INFO)
+} ASN1_NDEF_SEQUENCE_END(PKCS7_SIGNED)
+
+IMPLEMENT_ASN1_FUNCTIONS(PKCS7_SIGNED)
+
+/* Minor tweak to operation: free up EVP_PKEY */
+static int si_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                 void *exarg)
+{
+    if (operation == ASN1_OP_FREE_POST) {
+        PKCS7_SIGNER_INFO *si = (PKCS7_SIGNER_INFO *)*pval;
+        EVP_PKEY_free(si->pkey);
+    }
+    return 1;
+}
+
+ASN1_SEQUENCE_cb(PKCS7_SIGNER_INFO, si_cb) = {
+        ASN1_SIMPLE(PKCS7_SIGNER_INFO, version, ASN1_INTEGER),
+        ASN1_SIMPLE(PKCS7_SIGNER_INFO, issuer_and_serial, PKCS7_ISSUER_AND_SERIAL),
+        ASN1_SIMPLE(PKCS7_SIGNER_INFO, digest_alg, X509_ALGOR),
+        /* NB this should be a SET OF but we use a SEQUENCE OF so the
+         * original order * is retained when the structure is reencoded.
+         * Since the attributes are implicitly tagged this will not affect
+         * the encoding.
+         */
+        ASN1_IMP_SEQUENCE_OF_OPT(PKCS7_SIGNER_INFO, auth_attr, X509_ATTRIBUTE, 0),
+        ASN1_SIMPLE(PKCS7_SIGNER_INFO, digest_enc_alg, X509_ALGOR),
+        ASN1_SIMPLE(PKCS7_SIGNER_INFO, enc_digest, ASN1_OCTET_STRING),
+        ASN1_IMP_SET_OF_OPT(PKCS7_SIGNER_INFO, unauth_attr, X509_ATTRIBUTE, 1)
+} ASN1_SEQUENCE_END_cb(PKCS7_SIGNER_INFO, PKCS7_SIGNER_INFO)
+
+IMPLEMENT_ASN1_FUNCTIONS(PKCS7_SIGNER_INFO)
+
+ASN1_SEQUENCE(PKCS7_ISSUER_AND_SERIAL) = {
+        ASN1_SIMPLE(PKCS7_ISSUER_AND_SERIAL, issuer, X509_NAME),
+        ASN1_SIMPLE(PKCS7_ISSUER_AND_SERIAL, serial, ASN1_INTEGER)
+} ASN1_SEQUENCE_END(PKCS7_ISSUER_AND_SERIAL)
+
+IMPLEMENT_ASN1_FUNCTIONS(PKCS7_ISSUER_AND_SERIAL)
+
+ASN1_NDEF_SEQUENCE(PKCS7_ENVELOPE) = {
+        ASN1_SIMPLE(PKCS7_ENVELOPE, version, ASN1_INTEGER),
+        ASN1_SET_OF(PKCS7_ENVELOPE, recipientinfo, PKCS7_RECIP_INFO),
+        ASN1_SIMPLE(PKCS7_ENVELOPE, enc_data, PKCS7_ENC_CONTENT)
+} ASN1_NDEF_SEQUENCE_END(PKCS7_ENVELOPE)
+
+IMPLEMENT_ASN1_FUNCTIONS(PKCS7_ENVELOPE)
+
+/* Minor tweak to operation: free up X509 */
+static int ri_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                 void *exarg)
+{
+    if (operation == ASN1_OP_FREE_POST) {
+        PKCS7_RECIP_INFO *ri = (PKCS7_RECIP_INFO *)*pval;
+        X509_free(ri->cert);
+    }
+    return 1;
+}
+
+ASN1_SEQUENCE_cb(PKCS7_RECIP_INFO, ri_cb) = {
+        ASN1_SIMPLE(PKCS7_RECIP_INFO, version, ASN1_INTEGER),
+        ASN1_SIMPLE(PKCS7_RECIP_INFO, issuer_and_serial, PKCS7_ISSUER_AND_SERIAL),
+        ASN1_SIMPLE(PKCS7_RECIP_INFO, key_enc_algor, X509_ALGOR),
+        ASN1_SIMPLE(PKCS7_RECIP_INFO, enc_key, ASN1_OCTET_STRING)
+} ASN1_SEQUENCE_END_cb(PKCS7_RECIP_INFO, PKCS7_RECIP_INFO)
+
+IMPLEMENT_ASN1_FUNCTIONS(PKCS7_RECIP_INFO)
+
+ASN1_NDEF_SEQUENCE(PKCS7_ENC_CONTENT) = {
+        ASN1_SIMPLE(PKCS7_ENC_CONTENT, content_type, ASN1_OBJECT),
+        ASN1_SIMPLE(PKCS7_ENC_CONTENT, algorithm, X509_ALGOR),
+        ASN1_IMP_OPT(PKCS7_ENC_CONTENT, enc_data, ASN1_OCTET_STRING_NDEF, 0)
+} ASN1_NDEF_SEQUENCE_END(PKCS7_ENC_CONTENT)
+
+IMPLEMENT_ASN1_FUNCTIONS(PKCS7_ENC_CONTENT)
+
+ASN1_NDEF_SEQUENCE(PKCS7_SIGN_ENVELOPE) = {
+        ASN1_SIMPLE(PKCS7_SIGN_ENVELOPE, version, ASN1_INTEGER),
+        ASN1_SET_OF(PKCS7_SIGN_ENVELOPE, recipientinfo, PKCS7_RECIP_INFO),
+        ASN1_SET_OF(PKCS7_SIGN_ENVELOPE, md_algs, X509_ALGOR),
+        ASN1_SIMPLE(PKCS7_SIGN_ENVELOPE, enc_data, PKCS7_ENC_CONTENT),
+        ASN1_IMP_SET_OF_OPT(PKCS7_SIGN_ENVELOPE, cert, X509, 0),
+        ASN1_IMP_SET_OF_OPT(PKCS7_SIGN_ENVELOPE, crl, X509_CRL, 1),
+        ASN1_SET_OF(PKCS7_SIGN_ENVELOPE, signer_info, PKCS7_SIGNER_INFO)
+} ASN1_NDEF_SEQUENCE_END(PKCS7_SIGN_ENVELOPE)
+
+IMPLEMENT_ASN1_FUNCTIONS(PKCS7_SIGN_ENVELOPE)
+
+ASN1_NDEF_SEQUENCE(PKCS7_ENCRYPT) = {
+        ASN1_SIMPLE(PKCS7_ENCRYPT, version, ASN1_INTEGER),
+        ASN1_SIMPLE(PKCS7_ENCRYPT, enc_data, PKCS7_ENC_CONTENT)
+} ASN1_NDEF_SEQUENCE_END(PKCS7_ENCRYPT)
+
+IMPLEMENT_ASN1_FUNCTIONS(PKCS7_ENCRYPT)
+
+ASN1_NDEF_SEQUENCE(PKCS7_DIGEST) = {
+        ASN1_SIMPLE(PKCS7_DIGEST, version, ASN1_INTEGER),
+        ASN1_SIMPLE(PKCS7_DIGEST, md, X509_ALGOR),
+        ASN1_SIMPLE(PKCS7_DIGEST, contents, PKCS7),
+        ASN1_SIMPLE(PKCS7_DIGEST, digest, ASN1_OCTET_STRING)
+} ASN1_NDEF_SEQUENCE_END(PKCS7_DIGEST)
+
+IMPLEMENT_ASN1_FUNCTIONS(PKCS7_DIGEST)
+
+/* Specials for authenticated attributes */
+
+/*
+ * When signing attributes we want to reorder them to match the sorted
+ * encoding.
+ */
+
+ASN1_ITEM_TEMPLATE(PKCS7_ATTR_SIGN) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SET_ORDER, 0, PKCS7_ATTRIBUTES, X509_ATTRIBUTE)
+ASN1_ITEM_TEMPLATE_END(PKCS7_ATTR_SIGN)
+
+/*
+ * When verifying attributes we need to use the received order. So we use
+ * SEQUENCE OF and tag it to SET OF
+ */
+
+ASN1_ITEM_TEMPLATE(PKCS7_ATTR_VERIFY) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF | ASN1_TFLG_IMPTAG | ASN1_TFLG_UNIVERSAL,
+                                V_ASN1_SET, PKCS7_ATTRIBUTES, X509_ATTRIBUTE)
+ASN1_ITEM_TEMPLATE_END(PKCS7_ATTR_VERIFY)
+
+IMPLEMENT_ASN1_PRINT_FUNCTION(PKCS7)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_attr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_attr.c
new file mode 100644
index 000000000..e90bf03c5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_attr.c
@@ -0,0 +1,121 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <openssl/bio.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/pem.h>
+#include <openssl/pkcs7.h>
+#include <openssl/x509.h>
+#include <openssl/err.h>
+
+int PKCS7_add_attrib_smimecap(PKCS7_SIGNER_INFO *si,
+                              STACK_OF(X509_ALGOR) *cap)
+{
+    ASN1_STRING *seq;
+
+    if ((seq = ASN1_STRING_new()) == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_ADD_ATTRIB_SMIMECAP, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    seq->length = ASN1_item_i2d((ASN1_VALUE *)cap, &seq->data,
+                                ASN1_ITEM_rptr(X509_ALGORS));
+    return PKCS7_add_signed_attribute(si, NID_SMIMECapabilities,
+                                      V_ASN1_SEQUENCE, seq);
+}
+
+STACK_OF(X509_ALGOR) *PKCS7_get_smimecap(PKCS7_SIGNER_INFO *si)
+{
+    ASN1_TYPE *cap;
+    const unsigned char *p;
+
+    cap = PKCS7_get_signed_attribute(si, NID_SMIMECapabilities);
+    if (cap == NULL || (cap->type != V_ASN1_SEQUENCE))
+        return NULL;
+    p = cap->value.sequence->data;
+    return (STACK_OF(X509_ALGOR) *)
+        ASN1_item_d2i(NULL, &p, cap->value.sequence->length,
+                      ASN1_ITEM_rptr(X509_ALGORS));
+}
+
+/* Basic smime-capabilities OID and optional integer arg */
+int PKCS7_simple_smimecap(STACK_OF(X509_ALGOR) *sk, int nid, int arg)
+{
+    ASN1_INTEGER *nbit = NULL;
+    X509_ALGOR *alg;
+
+    if ((alg = X509_ALGOR_new()) == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_SIMPLE_SMIMECAP, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ASN1_OBJECT_free(alg->algorithm);
+    alg->algorithm = OBJ_nid2obj(nid);
+    if (arg > 0) {
+        if ((alg->parameter = ASN1_TYPE_new()) == NULL) {
+            goto err;
+        }
+        if ((nbit = ASN1_INTEGER_new()) == NULL) {
+            goto err;
+        }
+        if (!ASN1_INTEGER_set(nbit, arg)) {
+            goto err;
+        }
+        alg->parameter->value.integer = nbit;
+        alg->parameter->type = V_ASN1_INTEGER;
+        nbit = NULL;
+    }
+    if (!sk_X509_ALGOR_push(sk, alg)) {
+        goto err;
+    }
+    return 1;
+err:
+    PKCS7err(PKCS7_F_PKCS7_SIMPLE_SMIMECAP, ERR_R_MALLOC_FAILURE);
+    ASN1_INTEGER_free(nbit);
+    X509_ALGOR_free(alg);
+    return 0;
+}
+
+int PKCS7_add_attrib_content_type(PKCS7_SIGNER_INFO *si, ASN1_OBJECT *coid)
+{
+    if (PKCS7_get_signed_attribute(si, NID_pkcs9_contentType))
+        return 0;
+    if (!coid)
+        coid = OBJ_nid2obj(NID_pkcs7_data);
+    return PKCS7_add_signed_attribute(si, NID_pkcs9_contentType,
+                                      V_ASN1_OBJECT, coid);
+}
+
+int PKCS7_add0_attrib_signing_time(PKCS7_SIGNER_INFO *si, ASN1_TIME *t)
+{
+    if (t == NULL && (t = X509_gmtime_adj(NULL, 0)) == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_ADD0_ATTRIB_SIGNING_TIME,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    return PKCS7_add_signed_attribute(si, NID_pkcs9_signingTime,
+                                      V_ASN1_UTCTIME, t);
+}
+
+int PKCS7_add1_attrib_digest(PKCS7_SIGNER_INFO *si,
+                             const unsigned char *md, int mdlen)
+{
+    ASN1_OCTET_STRING *os;
+    os = ASN1_OCTET_STRING_new();
+    if (os == NULL)
+        return 0;
+    if (!ASN1_STRING_set(os, md, mdlen)
+        || !PKCS7_add_signed_attribute(si, NID_pkcs9_messageDigest,
+                                       V_ASN1_OCTET_STRING, os)) {
+        ASN1_OCTET_STRING_free(os);
+        return 0;
+    }
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_doit.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_doit.c
new file mode 100644
index 000000000..ee08e602a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_doit.c
@@ -0,0 +1,1180 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/rand.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/err.h>
+
+static int add_attribute(STACK_OF(X509_ATTRIBUTE) **sk, int nid, int atrtype,
+                         void *value);
+static ASN1_TYPE *get_attribute(STACK_OF(X509_ATTRIBUTE) *sk, int nid);
+
+static int PKCS7_type_is_other(PKCS7 *p7)
+{
+    int isOther = 1;
+
+    int nid = OBJ_obj2nid(p7->type);
+
+    switch (nid) {
+    case NID_pkcs7_data:
+    case NID_pkcs7_signed:
+    case NID_pkcs7_enveloped:
+    case NID_pkcs7_signedAndEnveloped:
+    case NID_pkcs7_digest:
+    case NID_pkcs7_encrypted:
+        isOther = 0;
+        break;
+    default:
+        isOther = 1;
+    }
+
+    return isOther;
+
+}
+
+static ASN1_OCTET_STRING *PKCS7_get_octet_string(PKCS7 *p7)
+{
+    if (PKCS7_type_is_data(p7))
+        return p7->d.data;
+    if (PKCS7_type_is_other(p7) && p7->d.other
+        && (p7->d.other->type == V_ASN1_OCTET_STRING))
+        return p7->d.other->value.octet_string;
+    return NULL;
+}
+
+static int PKCS7_bio_add_digest(BIO **pbio, X509_ALGOR *alg)
+{
+    BIO *btmp;
+    const EVP_MD *md;
+    if ((btmp = BIO_new(BIO_f_md())) == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_BIO_ADD_DIGEST, ERR_R_BIO_LIB);
+        goto err;
+    }
+
+    md = EVP_get_digestbyobj(alg->algorithm);
+    if (md == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_BIO_ADD_DIGEST, PKCS7_R_UNKNOWN_DIGEST_TYPE);
+        goto err;
+    }
+
+    BIO_set_md(btmp, md);
+    if (*pbio == NULL)
+        *pbio = btmp;
+    else if (!BIO_push(*pbio, btmp)) {
+        PKCS7err(PKCS7_F_PKCS7_BIO_ADD_DIGEST, ERR_R_BIO_LIB);
+        goto err;
+    }
+    btmp = NULL;
+
+    return 1;
+
+ err:
+    BIO_free(btmp);
+    return 0;
+
+}
+
+static int pkcs7_encode_rinfo(PKCS7_RECIP_INFO *ri,
+                              unsigned char *key, int keylen)
+{
+    EVP_PKEY_CTX *pctx = NULL;
+    EVP_PKEY *pkey = NULL;
+    unsigned char *ek = NULL;
+    int ret = 0;
+    size_t eklen;
+
+    pkey = X509_get0_pubkey(ri->cert);
+
+    if (!pkey)
+        return 0;
+
+    pctx = EVP_PKEY_CTX_new(pkey, NULL);
+    if (!pctx)
+        return 0;
+
+    if (EVP_PKEY_encrypt_init(pctx) <= 0)
+        goto err;
+
+    if (EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_ENCRYPT,
+                          EVP_PKEY_CTRL_PKCS7_ENCRYPT, 0, ri) <= 0) {
+        PKCS7err(PKCS7_F_PKCS7_ENCODE_RINFO, PKCS7_R_CTRL_ERROR);
+        goto err;
+    }
+
+    if (EVP_PKEY_encrypt(pctx, NULL, &eklen, key, keylen) <= 0)
+        goto err;
+
+    ek = OPENSSL_malloc(eklen);
+
+    if (ek == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_ENCODE_RINFO, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (EVP_PKEY_encrypt(pctx, ek, &eklen, key, keylen) <= 0)
+        goto err;
+
+    ASN1_STRING_set0(ri->enc_key, ek, eklen);
+    ek = NULL;
+
+    ret = 1;
+
+ err:
+    EVP_PKEY_CTX_free(pctx);
+    OPENSSL_free(ek);
+    return ret;
+
+}
+
+static int pkcs7_decrypt_rinfo(unsigned char **pek, int *peklen,
+                               PKCS7_RECIP_INFO *ri, EVP_PKEY *pkey)
+{
+    EVP_PKEY_CTX *pctx = NULL;
+    unsigned char *ek = NULL;
+    size_t eklen;
+
+    int ret = -1;
+
+    pctx = EVP_PKEY_CTX_new(pkey, NULL);
+    if (!pctx)
+        return -1;
+
+    if (EVP_PKEY_decrypt_init(pctx) <= 0)
+        goto err;
+
+    if (EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_DECRYPT,
+                          EVP_PKEY_CTRL_PKCS7_DECRYPT, 0, ri) <= 0) {
+        PKCS7err(PKCS7_F_PKCS7_DECRYPT_RINFO, PKCS7_R_CTRL_ERROR);
+        goto err;
+    }
+
+    if (EVP_PKEY_decrypt(pctx, NULL, &eklen,
+                         ri->enc_key->data, ri->enc_key->length) <= 0)
+        goto err;
+
+    ek = OPENSSL_malloc(eklen);
+
+    if (ek == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_DECRYPT_RINFO, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (EVP_PKEY_decrypt(pctx, ek, &eklen,
+                         ri->enc_key->data, ri->enc_key->length) <= 0) {
+        ret = 0;
+        PKCS7err(PKCS7_F_PKCS7_DECRYPT_RINFO, ERR_R_EVP_LIB);
+        goto err;
+    }
+
+    ret = 1;
+
+    OPENSSL_clear_free(*pek, *peklen);
+    *pek = ek;
+    *peklen = eklen;
+
+ err:
+    EVP_PKEY_CTX_free(pctx);
+    if (!ret)
+        OPENSSL_free(ek);
+
+    return ret;
+}
+
+BIO *PKCS7_dataInit(PKCS7 *p7, BIO *bio)
+{
+    int i;
+    BIO *out = NULL, *btmp = NULL;
+    X509_ALGOR *xa = NULL;
+    const EVP_CIPHER *evp_cipher = NULL;
+    STACK_OF(X509_ALGOR) *md_sk = NULL;
+    STACK_OF(PKCS7_RECIP_INFO) *rsk = NULL;
+    X509_ALGOR *xalg = NULL;
+    PKCS7_RECIP_INFO *ri = NULL;
+    ASN1_OCTET_STRING *os = NULL;
+
+    if (p7 == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_DATAINIT, PKCS7_R_INVALID_NULL_POINTER);
+        return NULL;
+    }
+    /*
+     * The content field in the PKCS7 ContentInfo is optional, but that really
+     * only applies to inner content (precisely, detached signatures).
+     *
+     * When reading content, missing outer content is therefore treated as an
+     * error.
+     *
+     * When creating content, PKCS7_content_new() must be called before
+     * calling this method, so a NULL p7->d is always an error.
+     */
+    if (p7->d.ptr == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_DATAINIT, PKCS7_R_NO_CONTENT);
+        return NULL;
+    }
+
+    i = OBJ_obj2nid(p7->type);
+    p7->state = PKCS7_S_HEADER;
+
+    switch (i) {
+    case NID_pkcs7_signed:
+        md_sk = p7->d.sign->md_algs;
+        os = PKCS7_get_octet_string(p7->d.sign->contents);
+        break;
+    case NID_pkcs7_signedAndEnveloped:
+        rsk = p7->d.signed_and_enveloped->recipientinfo;
+        md_sk = p7->d.signed_and_enveloped->md_algs;
+        xalg = p7->d.signed_and_enveloped->enc_data->algorithm;
+        evp_cipher = p7->d.signed_and_enveloped->enc_data->cipher;
+        if (evp_cipher == NULL) {
+            PKCS7err(PKCS7_F_PKCS7_DATAINIT, PKCS7_R_CIPHER_NOT_INITIALIZED);
+            goto err;
+        }
+        break;
+    case NID_pkcs7_enveloped:
+        rsk = p7->d.enveloped->recipientinfo;
+        xalg = p7->d.enveloped->enc_data->algorithm;
+        evp_cipher = p7->d.enveloped->enc_data->cipher;
+        if (evp_cipher == NULL) {
+            PKCS7err(PKCS7_F_PKCS7_DATAINIT, PKCS7_R_CIPHER_NOT_INITIALIZED);
+            goto err;
+        }
+        break;
+    case NID_pkcs7_digest:
+        xa = p7->d.digest->md;
+        os = PKCS7_get_octet_string(p7->d.digest->contents);
+        break;
+    case NID_pkcs7_data:
+        break;
+    default:
+        PKCS7err(PKCS7_F_PKCS7_DATAINIT, PKCS7_R_UNSUPPORTED_CONTENT_TYPE);
+        goto err;
+    }
+
+    for (i = 0; i < sk_X509_ALGOR_num(md_sk); i++)
+        if (!PKCS7_bio_add_digest(&out, sk_X509_ALGOR_value(md_sk, i)))
+            goto err;
+
+    if (xa && !PKCS7_bio_add_digest(&out, xa))
+        goto err;
+
+    if (evp_cipher != NULL) {
+        unsigned char key[EVP_MAX_KEY_LENGTH];
+        unsigned char iv[EVP_MAX_IV_LENGTH];
+        int keylen, ivlen;
+        EVP_CIPHER_CTX *ctx;
+
+        if ((btmp = BIO_new(BIO_f_cipher())) == NULL) {
+            PKCS7err(PKCS7_F_PKCS7_DATAINIT, ERR_R_BIO_LIB);
+            goto err;
+        }
+        BIO_get_cipher_ctx(btmp, &ctx);
+        keylen = EVP_CIPHER_key_length(evp_cipher);
+        ivlen = EVP_CIPHER_iv_length(evp_cipher);
+        xalg->algorithm = OBJ_nid2obj(EVP_CIPHER_type(evp_cipher));
+        if (ivlen > 0)
+            if (RAND_bytes(iv, ivlen) <= 0)
+                goto err;
+        if (EVP_CipherInit_ex(ctx, evp_cipher, NULL, NULL, NULL, 1) <= 0)
+            goto err;
+        if (EVP_CIPHER_CTX_rand_key(ctx, key) <= 0)
+            goto err;
+        if (EVP_CipherInit_ex(ctx, NULL, NULL, key, iv, 1) <= 0)
+            goto err;
+
+        if (ivlen > 0) {
+            if (xalg->parameter == NULL) {
+                xalg->parameter = ASN1_TYPE_new();
+                if (xalg->parameter == NULL)
+                    goto err;
+            }
+            if (EVP_CIPHER_param_to_asn1(ctx, xalg->parameter) < 0)
+                goto err;
+        }
+
+        /* Lets do the pub key stuff :-) */
+        for (i = 0; i < sk_PKCS7_RECIP_INFO_num(rsk); i++) {
+            ri = sk_PKCS7_RECIP_INFO_value(rsk, i);
+            if (pkcs7_encode_rinfo(ri, key, keylen) <= 0)
+                goto err;
+        }
+        OPENSSL_cleanse(key, keylen);
+
+        if (out == NULL)
+            out = btmp;
+        else
+            BIO_push(out, btmp);
+        btmp = NULL;
+    }
+
+    if (bio == NULL) {
+        if (PKCS7_is_detached(p7)) {
+            bio = BIO_new(BIO_s_null());
+        } else if (os && os->length > 0) {
+            bio = BIO_new_mem_buf(os->data, os->length);
+        } else {
+            bio = BIO_new(BIO_s_mem());
+            if (bio == NULL)
+                goto err;
+            BIO_set_mem_eof_return(bio, 0);
+        }
+        if (bio == NULL)
+            goto err;
+    }
+    if (out)
+        BIO_push(out, bio);
+    else
+        out = bio;
+    return out;
+
+ err:
+    BIO_free_all(out);
+    BIO_free_all(btmp);
+    return NULL;
+}
+
+static int pkcs7_cmp_ri(PKCS7_RECIP_INFO *ri, X509 *pcert)
+{
+    int ret;
+    ret = X509_NAME_cmp(ri->issuer_and_serial->issuer,
+                        X509_get_issuer_name(pcert));
+    if (ret)
+        return ret;
+    return ASN1_INTEGER_cmp(X509_get_serialNumber(pcert),
+                            ri->issuer_and_serial->serial);
+}
+
+/* int */
+BIO *PKCS7_dataDecode(PKCS7 *p7, EVP_PKEY *pkey, BIO *in_bio, X509 *pcert)
+{
+    int i, j;
+    BIO *out = NULL, *btmp = NULL, *etmp = NULL, *bio = NULL;
+    X509_ALGOR *xa;
+    ASN1_OCTET_STRING *data_body = NULL;
+    const EVP_MD *evp_md;
+    const EVP_CIPHER *evp_cipher = NULL;
+    EVP_CIPHER_CTX *evp_ctx = NULL;
+    X509_ALGOR *enc_alg = NULL;
+    STACK_OF(X509_ALGOR) *md_sk = NULL;
+    STACK_OF(PKCS7_RECIP_INFO) *rsk = NULL;
+    PKCS7_RECIP_INFO *ri = NULL;
+    unsigned char *ek = NULL, *tkey = NULL;
+    int eklen = 0, tkeylen = 0;
+
+    if (p7 == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_DATADECODE, PKCS7_R_INVALID_NULL_POINTER);
+        return NULL;
+    }
+
+    if (p7->d.ptr == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_DATADECODE, PKCS7_R_NO_CONTENT);
+        return NULL;
+    }
+
+    i = OBJ_obj2nid(p7->type);
+    p7->state = PKCS7_S_HEADER;
+
+    switch (i) {
+    case NID_pkcs7_signed:
+        /*
+         * p7->d.sign->contents is a PKCS7 structure consisting of a contentType
+         * field and optional content.
+         * data_body is NULL if that structure has no (=detached) content
+         * or if the contentType is wrong (i.e., not "data").
+         */
+        data_body = PKCS7_get_octet_string(p7->d.sign->contents);
+        if (!PKCS7_is_detached(p7) && data_body == NULL) {
+            PKCS7err(PKCS7_F_PKCS7_DATADECODE,
+                     PKCS7_R_INVALID_SIGNED_DATA_TYPE);
+            goto err;
+        }
+        md_sk = p7->d.sign->md_algs;
+        break;
+    case NID_pkcs7_signedAndEnveloped:
+        rsk = p7->d.signed_and_enveloped->recipientinfo;
+        md_sk = p7->d.signed_and_enveloped->md_algs;
+        /* data_body is NULL if the optional EncryptedContent is missing. */
+        data_body = p7->d.signed_and_enveloped->enc_data->enc_data;
+        enc_alg = p7->d.signed_and_enveloped->enc_data->algorithm;
+        evp_cipher = EVP_get_cipherbyobj(enc_alg->algorithm);
+        if (evp_cipher == NULL) {
+            PKCS7err(PKCS7_F_PKCS7_DATADECODE,
+                     PKCS7_R_UNSUPPORTED_CIPHER_TYPE);
+            goto err;
+        }
+        break;
+    case NID_pkcs7_enveloped:
+        rsk = p7->d.enveloped->recipientinfo;
+        enc_alg = p7->d.enveloped->enc_data->algorithm;
+        /* data_body is NULL if the optional EncryptedContent is missing. */
+        data_body = p7->d.enveloped->enc_data->enc_data;
+        evp_cipher = EVP_get_cipherbyobj(enc_alg->algorithm);
+        if (evp_cipher == NULL) {
+            PKCS7err(PKCS7_F_PKCS7_DATADECODE,
+                     PKCS7_R_UNSUPPORTED_CIPHER_TYPE);
+            goto err;
+        }
+        break;
+    default:
+        PKCS7err(PKCS7_F_PKCS7_DATADECODE, PKCS7_R_UNSUPPORTED_CONTENT_TYPE);
+        goto err;
+    }
+
+    /* Detached content must be supplied via in_bio instead. */
+    if (data_body == NULL && in_bio == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_DATADECODE, PKCS7_R_NO_CONTENT);
+        goto err;
+    }
+
+    /* We will be checking the signature */
+    if (md_sk != NULL) {
+        for (i = 0; i < sk_X509_ALGOR_num(md_sk); i++) {
+            xa = sk_X509_ALGOR_value(md_sk, i);
+            if ((btmp = BIO_new(BIO_f_md())) == NULL) {
+                PKCS7err(PKCS7_F_PKCS7_DATADECODE, ERR_R_BIO_LIB);
+                goto err;
+            }
+
+            j = OBJ_obj2nid(xa->algorithm);
+            evp_md = EVP_get_digestbynid(j);
+            if (evp_md == NULL) {
+                PKCS7err(PKCS7_F_PKCS7_DATADECODE,
+                         PKCS7_R_UNKNOWN_DIGEST_TYPE);
+                goto err;
+            }
+
+            BIO_set_md(btmp, evp_md);
+            if (out == NULL)
+                out = btmp;
+            else
+                BIO_push(out, btmp);
+            btmp = NULL;
+        }
+    }
+
+    if (evp_cipher != NULL) {
+        if ((etmp = BIO_new(BIO_f_cipher())) == NULL) {
+            PKCS7err(PKCS7_F_PKCS7_DATADECODE, ERR_R_BIO_LIB);
+            goto err;
+        }
+
+        /*
+         * It was encrypted, we need to decrypt the secret key with the
+         * private key
+         */
+
+        /*
+         * Find the recipientInfo which matches the passed certificate (if
+         * any)
+         */
+
+        if (pcert) {
+            for (i = 0; i < sk_PKCS7_RECIP_INFO_num(rsk); i++) {
+                ri = sk_PKCS7_RECIP_INFO_value(rsk, i);
+                if (!pkcs7_cmp_ri(ri, pcert))
+                    break;
+                ri = NULL;
+            }
+            if (ri == NULL) {
+                PKCS7err(PKCS7_F_PKCS7_DATADECODE,
+                         PKCS7_R_NO_RECIPIENT_MATCHES_CERTIFICATE);
+                goto err;
+            }
+        }
+
+        /* If we haven't got a certificate try each ri in turn */
+        if (pcert == NULL) {
+            /*
+             * Always attempt to decrypt all rinfo even after success as a
+             * defence against MMA timing attacks.
+             */
+            for (i = 0; i < sk_PKCS7_RECIP_INFO_num(rsk); i++) {
+                ri = sk_PKCS7_RECIP_INFO_value(rsk, i);
+
+                if (pkcs7_decrypt_rinfo(&ek, &eklen, ri, pkey) < 0)
+                    goto err;
+                ERR_clear_error();
+            }
+        } else {
+            /* Only exit on fatal errors, not decrypt failure */
+            if (pkcs7_decrypt_rinfo(&ek, &eklen, ri, pkey) < 0)
+                goto err;
+            ERR_clear_error();
+        }
+
+        evp_ctx = NULL;
+        BIO_get_cipher_ctx(etmp, &evp_ctx);
+        if (EVP_CipherInit_ex(evp_ctx, evp_cipher, NULL, NULL, NULL, 0) <= 0)
+            goto err;
+        if (EVP_CIPHER_asn1_to_param(evp_ctx, enc_alg->parameter) < 0)
+            goto err;
+        /* Generate random key as MMA defence */
+        tkeylen = EVP_CIPHER_CTX_key_length(evp_ctx);
+        tkey = OPENSSL_malloc(tkeylen);
+        if (tkey == NULL)
+            goto err;
+        if (EVP_CIPHER_CTX_rand_key(evp_ctx, tkey) <= 0)
+            goto err;
+        if (ek == NULL) {
+            ek = tkey;
+            eklen = tkeylen;
+            tkey = NULL;
+        }
+
+        if (eklen != EVP_CIPHER_CTX_key_length(evp_ctx)) {
+            /*
+             * Some S/MIME clients don't use the same key and effective key
+             * length. The key length is determined by the size of the
+             * decrypted RSA key.
+             */
+            if (!EVP_CIPHER_CTX_set_key_length(evp_ctx, eklen)) {
+                /* Use random key as MMA defence */
+                OPENSSL_clear_free(ek, eklen);
+                ek = tkey;
+                eklen = tkeylen;
+                tkey = NULL;
+            }
+        }
+        /* Clear errors so we don't leak information useful in MMA */
+        ERR_clear_error();
+        if (EVP_CipherInit_ex(evp_ctx, NULL, NULL, ek, NULL, 0) <= 0)
+            goto err;
+
+        OPENSSL_clear_free(ek, eklen);
+        ek = NULL;
+        OPENSSL_clear_free(tkey, tkeylen);
+        tkey = NULL;
+
+        if (out == NULL)
+            out = etmp;
+        else
+            BIO_push(out, etmp);
+        etmp = NULL;
+    }
+    if (in_bio != NULL) {
+        bio = in_bio;
+    } else {
+        if (data_body->length > 0)
+            bio = BIO_new_mem_buf(data_body->data, data_body->length);
+        else {
+            bio = BIO_new(BIO_s_mem());
+            if (bio == NULL)
+                goto err;
+            BIO_set_mem_eof_return(bio, 0);
+        }
+        if (bio == NULL)
+            goto err;
+    }
+    BIO_push(out, bio);
+    bio = NULL;
+    return out;
+
+ err:
+    OPENSSL_clear_free(ek, eklen);
+    OPENSSL_clear_free(tkey, tkeylen);
+    BIO_free_all(out);
+    BIO_free_all(btmp);
+    BIO_free_all(etmp);
+    BIO_free_all(bio);
+    return NULL;
+}
+
+static BIO *PKCS7_find_digest(EVP_MD_CTX **pmd, BIO *bio, int nid)
+{
+    for (;;) {
+        bio = BIO_find_type(bio, BIO_TYPE_MD);
+        if (bio == NULL) {
+            PKCS7err(PKCS7_F_PKCS7_FIND_DIGEST,
+                     PKCS7_R_UNABLE_TO_FIND_MESSAGE_DIGEST);
+            return NULL;
+        }
+        BIO_get_md_ctx(bio, pmd);
+        if (*pmd == NULL) {
+            PKCS7err(PKCS7_F_PKCS7_FIND_DIGEST, ERR_R_INTERNAL_ERROR);
+            return NULL;
+        }
+        if (EVP_MD_CTX_type(*pmd) == nid)
+            return bio;
+        bio = BIO_next(bio);
+    }
+    return NULL;
+}
+
+static int do_pkcs7_signed_attrib(PKCS7_SIGNER_INFO *si, EVP_MD_CTX *mctx)
+{
+    unsigned char md_data[EVP_MAX_MD_SIZE];
+    unsigned int md_len;
+
+    /* Add signing time if not already present */
+    if (!PKCS7_get_signed_attribute(si, NID_pkcs9_signingTime)) {
+        if (!PKCS7_add0_attrib_signing_time(si, NULL)) {
+            PKCS7err(PKCS7_F_DO_PKCS7_SIGNED_ATTRIB, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+    }
+
+    /* Add digest */
+    if (!EVP_DigestFinal_ex(mctx, md_data, &md_len)) {
+        PKCS7err(PKCS7_F_DO_PKCS7_SIGNED_ATTRIB, ERR_R_EVP_LIB);
+        return 0;
+    }
+    if (!PKCS7_add1_attrib_digest(si, md_data, md_len)) {
+        PKCS7err(PKCS7_F_DO_PKCS7_SIGNED_ATTRIB, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    /* Now sign the attributes */
+    if (!PKCS7_SIGNER_INFO_sign(si))
+        return 0;
+
+    return 1;
+}
+
+int PKCS7_dataFinal(PKCS7 *p7, BIO *bio)
+{
+    int ret = 0;
+    int i, j;
+    BIO *btmp;
+    PKCS7_SIGNER_INFO *si;
+    EVP_MD_CTX *mdc, *ctx_tmp;
+    STACK_OF(X509_ATTRIBUTE) *sk;
+    STACK_OF(PKCS7_SIGNER_INFO) *si_sk = NULL;
+    ASN1_OCTET_STRING *os = NULL;
+
+    if (p7 == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_DATAFINAL, PKCS7_R_INVALID_NULL_POINTER);
+        return 0;
+    }
+
+    if (p7->d.ptr == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_DATAFINAL, PKCS7_R_NO_CONTENT);
+        return 0;
+    }
+
+    ctx_tmp = EVP_MD_CTX_new();
+    if (ctx_tmp == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_DATAFINAL, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    i = OBJ_obj2nid(p7->type);
+    p7->state = PKCS7_S_HEADER;
+
+    switch (i) {
+    case NID_pkcs7_data:
+        os = p7->d.data;
+        break;
+    case NID_pkcs7_signedAndEnveloped:
+        /* XXXXXXXXXXXXXXXX */
+        si_sk = p7->d.signed_and_enveloped->signer_info;
+        os = p7->d.signed_and_enveloped->enc_data->enc_data;
+        if (os == NULL) {
+            os = ASN1_OCTET_STRING_new();
+            if (os == NULL) {
+                PKCS7err(PKCS7_F_PKCS7_DATAFINAL, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            p7->d.signed_and_enveloped->enc_data->enc_data = os;
+        }
+        break;
+    case NID_pkcs7_enveloped:
+        /* XXXXXXXXXXXXXXXX */
+        os = p7->d.enveloped->enc_data->enc_data;
+        if (os == NULL) {
+            os = ASN1_OCTET_STRING_new();
+            if (os == NULL) {
+                PKCS7err(PKCS7_F_PKCS7_DATAFINAL, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            p7->d.enveloped->enc_data->enc_data = os;
+        }
+        break;
+    case NID_pkcs7_signed:
+        si_sk = p7->d.sign->signer_info;
+        os = PKCS7_get_octet_string(p7->d.sign->contents);
+        /* If detached data then the content is excluded */
+        if (PKCS7_type_is_data(p7->d.sign->contents) && p7->detached) {
+            ASN1_OCTET_STRING_free(os);
+            os = NULL;
+            p7->d.sign->contents->d.data = NULL;
+        }
+        break;
+
+    case NID_pkcs7_digest:
+        os = PKCS7_get_octet_string(p7->d.digest->contents);
+        /* If detached data then the content is excluded */
+        if (PKCS7_type_is_data(p7->d.digest->contents) && p7->detached) {
+            ASN1_OCTET_STRING_free(os);
+            os = NULL;
+            p7->d.digest->contents->d.data = NULL;
+        }
+        break;
+
+    default:
+        PKCS7err(PKCS7_F_PKCS7_DATAFINAL, PKCS7_R_UNSUPPORTED_CONTENT_TYPE);
+        goto err;
+    }
+
+    if (si_sk != NULL) {
+        for (i = 0; i < sk_PKCS7_SIGNER_INFO_num(si_sk); i++) {
+            si = sk_PKCS7_SIGNER_INFO_value(si_sk, i);
+            if (si->pkey == NULL)
+                continue;
+
+            j = OBJ_obj2nid(si->digest_alg->algorithm);
+
+            btmp = bio;
+
+            btmp = PKCS7_find_digest(&mdc, btmp, j);
+
+            if (btmp == NULL)
+                goto err;
+
+            /*
+             * We now have the EVP_MD_CTX, lets do the signing.
+             */
+            if (!EVP_MD_CTX_copy_ex(ctx_tmp, mdc))
+                goto err;
+
+            sk = si->auth_attr;
+
+            /*
+             * If there are attributes, we add the digest attribute and only
+             * sign the attributes
+             */
+            if (sk_X509_ATTRIBUTE_num(sk) > 0) {
+                if (!do_pkcs7_signed_attrib(si, ctx_tmp))
+                    goto err;
+            } else {
+                unsigned char *abuf = NULL;
+                unsigned int abuflen;
+                abuflen = EVP_PKEY_size(si->pkey);
+                abuf = OPENSSL_malloc(abuflen);
+                if (abuf == NULL)
+                    goto err;
+
+                if (!EVP_SignFinal(ctx_tmp, abuf, &abuflen, si->pkey)) {
+                    OPENSSL_free(abuf);
+                    PKCS7err(PKCS7_F_PKCS7_DATAFINAL, ERR_R_EVP_LIB);
+                    goto err;
+                }
+                ASN1_STRING_set0(si->enc_digest, abuf, abuflen);
+            }
+        }
+    } else if (i == NID_pkcs7_digest) {
+        unsigned char md_data[EVP_MAX_MD_SIZE];
+        unsigned int md_len;
+        if (!PKCS7_find_digest(&mdc, bio,
+                               OBJ_obj2nid(p7->d.digest->md->algorithm)))
+            goto err;
+        if (!EVP_DigestFinal_ex(mdc, md_data, &md_len))
+            goto err;
+        if (!ASN1_OCTET_STRING_set(p7->d.digest->digest, md_data, md_len))
+            goto err;
+    }
+
+    if (!PKCS7_is_detached(p7)) {
+        /*
+         * NOTE(emilia): I think we only reach os == NULL here because detached
+         * digested data support is broken.
+         */
+        if (os == NULL)
+            goto err;
+        if (!(os->flags & ASN1_STRING_FLAG_NDEF)) {
+            char *cont;
+            long contlen;
+            btmp = BIO_find_type(bio, BIO_TYPE_MEM);
+            if (btmp == NULL) {
+                PKCS7err(PKCS7_F_PKCS7_DATAFINAL, PKCS7_R_UNABLE_TO_FIND_MEM_BIO);
+                goto err;
+            }
+            contlen = BIO_get_mem_data(btmp, &cont);
+            /*
+             * Mark the BIO read only then we can use its copy of the data
+             * instead of making an extra copy.
+             */
+            BIO_set_flags(btmp, BIO_FLAGS_MEM_RDONLY);
+            BIO_set_mem_eof_return(btmp, 0);
+            ASN1_STRING_set0(os, (unsigned char *)cont, contlen);
+        }
+    }
+    ret = 1;
+ err:
+    EVP_MD_CTX_free(ctx_tmp);
+    return ret;
+}
+
+int PKCS7_SIGNER_INFO_sign(PKCS7_SIGNER_INFO *si)
+{
+    EVP_MD_CTX *mctx;
+    EVP_PKEY_CTX *pctx = NULL;
+    unsigned char *abuf = NULL;
+    int alen;
+    size_t siglen;
+    const EVP_MD *md = NULL;
+
+    md = EVP_get_digestbyobj(si->digest_alg->algorithm);
+    if (md == NULL)
+        return 0;
+
+    mctx = EVP_MD_CTX_new();
+    if (mctx == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_SIGNER_INFO_SIGN, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (EVP_DigestSignInit(mctx, &pctx, md, NULL, si->pkey) <= 0)
+        goto err;
+
+    if (EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_SIGN,
+                          EVP_PKEY_CTRL_PKCS7_SIGN, 0, si) <= 0) {
+        PKCS7err(PKCS7_F_PKCS7_SIGNER_INFO_SIGN, PKCS7_R_CTRL_ERROR);
+        goto err;
+    }
+
+    alen = ASN1_item_i2d((ASN1_VALUE *)si->auth_attr, &abuf,
+                         ASN1_ITEM_rptr(PKCS7_ATTR_SIGN));
+    if (!abuf)
+        goto err;
+    if (EVP_DigestSignUpdate(mctx, abuf, alen) <= 0)
+        goto err;
+    OPENSSL_free(abuf);
+    abuf = NULL;
+    if (EVP_DigestSignFinal(mctx, NULL, &siglen) <= 0)
+        goto err;
+    abuf = OPENSSL_malloc(siglen);
+    if (abuf == NULL)
+        goto err;
+    if (EVP_DigestSignFinal(mctx, abuf, &siglen) <= 0)
+        goto err;
+
+    if (EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_SIGN,
+                          EVP_PKEY_CTRL_PKCS7_SIGN, 1, si) <= 0) {
+        PKCS7err(PKCS7_F_PKCS7_SIGNER_INFO_SIGN, PKCS7_R_CTRL_ERROR);
+        goto err;
+    }
+
+    EVP_MD_CTX_free(mctx);
+
+    ASN1_STRING_set0(si->enc_digest, abuf, siglen);
+
+    return 1;
+
+ err:
+    OPENSSL_free(abuf);
+    EVP_MD_CTX_free(mctx);
+    return 0;
+
+}
+
+int PKCS7_dataVerify(X509_STORE *cert_store, X509_STORE_CTX *ctx, BIO *bio,
+                     PKCS7 *p7, PKCS7_SIGNER_INFO *si)
+{
+    PKCS7_ISSUER_AND_SERIAL *ias;
+    int ret = 0, i;
+    STACK_OF(X509) *cert;
+    X509 *x509;
+
+    if (p7 == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_DATAVERIFY, PKCS7_R_INVALID_NULL_POINTER);
+        return 0;
+    }
+
+    if (p7->d.ptr == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_DATAVERIFY, PKCS7_R_NO_CONTENT);
+        return 0;
+    }
+
+    if (PKCS7_type_is_signed(p7)) {
+        cert = p7->d.sign->cert;
+    } else if (PKCS7_type_is_signedAndEnveloped(p7)) {
+        cert = p7->d.signed_and_enveloped->cert;
+    } else {
+        PKCS7err(PKCS7_F_PKCS7_DATAVERIFY, PKCS7_R_WRONG_PKCS7_TYPE);
+        goto err;
+    }
+    /* XXXXXXXXXXXXXXXXXXXXXXX */
+    ias = si->issuer_and_serial;
+
+    x509 = X509_find_by_issuer_and_serial(cert, ias->issuer, ias->serial);
+
+    /* were we able to find the cert in passed to us */
+    if (x509 == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_DATAVERIFY,
+                 PKCS7_R_UNABLE_TO_FIND_CERTIFICATE);
+        goto err;
+    }
+
+    /* Lets verify */
+    if (!X509_STORE_CTX_init(ctx, cert_store, x509, cert)) {
+        PKCS7err(PKCS7_F_PKCS7_DATAVERIFY, ERR_R_X509_LIB);
+        goto err;
+    }
+    X509_STORE_CTX_set_purpose(ctx, X509_PURPOSE_SMIME_SIGN);
+    i = X509_verify_cert(ctx);
+    if (i <= 0) {
+        PKCS7err(PKCS7_F_PKCS7_DATAVERIFY, ERR_R_X509_LIB);
+        X509_STORE_CTX_cleanup(ctx);
+        goto err;
+    }
+    X509_STORE_CTX_cleanup(ctx);
+
+    return PKCS7_signatureVerify(bio, p7, si, x509);
+ err:
+    return ret;
+}
+
+int PKCS7_signatureVerify(BIO *bio, PKCS7 *p7, PKCS7_SIGNER_INFO *si,
+                          X509 *x509)
+{
+    ASN1_OCTET_STRING *os;
+    EVP_MD_CTX *mdc_tmp, *mdc;
+    int ret = 0, i;
+    int md_type;
+    STACK_OF(X509_ATTRIBUTE) *sk;
+    BIO *btmp;
+    EVP_PKEY *pkey;
+
+    mdc_tmp = EVP_MD_CTX_new();
+    if (mdc_tmp == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_SIGNATUREVERIFY, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (!PKCS7_type_is_signed(p7) && !PKCS7_type_is_signedAndEnveloped(p7)) {
+        PKCS7err(PKCS7_F_PKCS7_SIGNATUREVERIFY, PKCS7_R_WRONG_PKCS7_TYPE);
+        goto err;
+    }
+
+    md_type = OBJ_obj2nid(si->digest_alg->algorithm);
+
+    btmp = bio;
+    for (;;) {
+        if ((btmp == NULL) ||
+            ((btmp = BIO_find_type(btmp, BIO_TYPE_MD)) == NULL)) {
+            PKCS7err(PKCS7_F_PKCS7_SIGNATUREVERIFY,
+                     PKCS7_R_UNABLE_TO_FIND_MESSAGE_DIGEST);
+            goto err;
+        }
+        BIO_get_md_ctx(btmp, &mdc);
+        if (mdc == NULL) {
+            PKCS7err(PKCS7_F_PKCS7_SIGNATUREVERIFY, ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        if (EVP_MD_CTX_type(mdc) == md_type)
+            break;
+        /*
+         * Workaround for some broken clients that put the signature OID
+         * instead of the digest OID in digest_alg->algorithm
+         */
+        if (EVP_MD_pkey_type(EVP_MD_CTX_md(mdc)) == md_type)
+            break;
+        btmp = BIO_next(btmp);
+    }
+
+    /*
+     * mdc is the digest ctx that we want, unless there are attributes, in
+     * which case the digest is the signed attributes
+     */
+    if (!EVP_MD_CTX_copy_ex(mdc_tmp, mdc))
+        goto err;
+
+    sk = si->auth_attr;
+    if ((sk != NULL) && (sk_X509_ATTRIBUTE_num(sk) != 0)) {
+        unsigned char md_dat[EVP_MAX_MD_SIZE], *abuf = NULL;
+        unsigned int md_len;
+        int alen;
+        ASN1_OCTET_STRING *message_digest;
+
+        if (!EVP_DigestFinal_ex(mdc_tmp, md_dat, &md_len))
+            goto err;
+        message_digest = PKCS7_digest_from_attributes(sk);
+        if (!message_digest) {
+            PKCS7err(PKCS7_F_PKCS7_SIGNATUREVERIFY,
+                     PKCS7_R_UNABLE_TO_FIND_MESSAGE_DIGEST);
+            goto err;
+        }
+        if ((message_digest->length != (int)md_len) ||
+            (memcmp(message_digest->data, md_dat, md_len))) {
+            PKCS7err(PKCS7_F_PKCS7_SIGNATUREVERIFY, PKCS7_R_DIGEST_FAILURE);
+            ret = -1;
+            goto err;
+        }
+
+        if (!EVP_VerifyInit_ex(mdc_tmp, EVP_get_digestbynid(md_type), NULL))
+            goto err;
+
+        alen = ASN1_item_i2d((ASN1_VALUE *)sk, &abuf,
+                             ASN1_ITEM_rptr(PKCS7_ATTR_VERIFY));
+        if (alen <= 0) {
+            PKCS7err(PKCS7_F_PKCS7_SIGNATUREVERIFY, ERR_R_ASN1_LIB);
+            ret = -1;
+            goto err;
+        }
+        if (!EVP_VerifyUpdate(mdc_tmp, abuf, alen))
+            goto err;
+
+        OPENSSL_free(abuf);
+    }
+
+    os = si->enc_digest;
+    pkey = X509_get0_pubkey(x509);
+    if (!pkey) {
+        ret = -1;
+        goto err;
+    }
+
+    i = EVP_VerifyFinal(mdc_tmp, os->data, os->length, pkey);
+    if (i <= 0) {
+        PKCS7err(PKCS7_F_PKCS7_SIGNATUREVERIFY, PKCS7_R_SIGNATURE_FAILURE);
+        ret = -1;
+        goto err;
+    }
+    ret = 1;
+ err:
+    EVP_MD_CTX_free(mdc_tmp);
+    return ret;
+}
+
+PKCS7_ISSUER_AND_SERIAL *PKCS7_get_issuer_and_serial(PKCS7 *p7, int idx)
+{
+    STACK_OF(PKCS7_RECIP_INFO) *rsk;
+    PKCS7_RECIP_INFO *ri;
+    int i;
+
+    i = OBJ_obj2nid(p7->type);
+    if (i != NID_pkcs7_signedAndEnveloped)
+        return NULL;
+    if (p7->d.signed_and_enveloped == NULL)
+        return NULL;
+    rsk = p7->d.signed_and_enveloped->recipientinfo;
+    if (rsk == NULL)
+        return NULL;
+    if (sk_PKCS7_RECIP_INFO_num(rsk) <= idx)
+        return NULL;
+    ri = sk_PKCS7_RECIP_INFO_value(rsk, idx);
+    return ri->issuer_and_serial;
+}
+
+ASN1_TYPE *PKCS7_get_signed_attribute(PKCS7_SIGNER_INFO *si, int nid)
+{
+    return get_attribute(si->auth_attr, nid);
+}
+
+ASN1_TYPE *PKCS7_get_attribute(PKCS7_SIGNER_INFO *si, int nid)
+{
+    return get_attribute(si->unauth_attr, nid);
+}
+
+static ASN1_TYPE *get_attribute(STACK_OF(X509_ATTRIBUTE) *sk, int nid)
+{
+    int idx;
+    X509_ATTRIBUTE *xa;
+    idx = X509at_get_attr_by_NID(sk, nid, -1);
+    xa = X509at_get_attr(sk, idx);
+    return X509_ATTRIBUTE_get0_type(xa, 0);
+}
+
+ASN1_OCTET_STRING *PKCS7_digest_from_attributes(STACK_OF(X509_ATTRIBUTE) *sk)
+{
+    ASN1_TYPE *astype;
+    if ((astype = get_attribute(sk, NID_pkcs9_messageDigest)) == NULL)
+        return NULL;
+    return astype->value.octet_string;
+}
+
+int PKCS7_set_signed_attributes(PKCS7_SIGNER_INFO *p7si,
+                                STACK_OF(X509_ATTRIBUTE) *sk)
+{
+    int i;
+
+    sk_X509_ATTRIBUTE_pop_free(p7si->auth_attr, X509_ATTRIBUTE_free);
+    p7si->auth_attr = sk_X509_ATTRIBUTE_dup(sk);
+    if (p7si->auth_attr == NULL)
+        return 0;
+    for (i = 0; i < sk_X509_ATTRIBUTE_num(sk); i++) {
+        if ((sk_X509_ATTRIBUTE_set(p7si->auth_attr, i,
+                                   X509_ATTRIBUTE_dup(sk_X509_ATTRIBUTE_value
+                                                      (sk, i))))
+            == NULL)
+            return 0;
+    }
+    return 1;
+}
+
+int PKCS7_set_attributes(PKCS7_SIGNER_INFO *p7si,
+                         STACK_OF(X509_ATTRIBUTE) *sk)
+{
+    int i;
+
+    sk_X509_ATTRIBUTE_pop_free(p7si->unauth_attr, X509_ATTRIBUTE_free);
+    p7si->unauth_attr = sk_X509_ATTRIBUTE_dup(sk);
+    if (p7si->unauth_attr == NULL)
+        return 0;
+    for (i = 0; i < sk_X509_ATTRIBUTE_num(sk); i++) {
+        if ((sk_X509_ATTRIBUTE_set(p7si->unauth_attr, i,
+                                   X509_ATTRIBUTE_dup(sk_X509_ATTRIBUTE_value
+                                                      (sk, i))))
+            == NULL)
+            return 0;
+    }
+    return 1;
+}
+
+int PKCS7_add_signed_attribute(PKCS7_SIGNER_INFO *p7si, int nid, int atrtype,
+                               void *value)
+{
+    return add_attribute(&(p7si->auth_attr), nid, atrtype, value);
+}
+
+int PKCS7_add_attribute(PKCS7_SIGNER_INFO *p7si, int nid, int atrtype,
+                        void *value)
+{
+    return add_attribute(&(p7si->unauth_attr), nid, atrtype, value);
+}
+
+static int add_attribute(STACK_OF(X509_ATTRIBUTE) **sk, int nid, int atrtype,
+                         void *value)
+{
+    X509_ATTRIBUTE *attr = NULL;
+
+    if (*sk == NULL) {
+        if ((*sk = sk_X509_ATTRIBUTE_new_null()) == NULL)
+            return 0;
+ new_attrib:
+        if ((attr = X509_ATTRIBUTE_create(nid, atrtype, value)) == NULL)
+            return 0;
+        if (!sk_X509_ATTRIBUTE_push(*sk, attr)) {
+            X509_ATTRIBUTE_free(attr);
+            return 0;
+        }
+    } else {
+        int i;
+
+        for (i = 0; i < sk_X509_ATTRIBUTE_num(*sk); i++) {
+            attr = sk_X509_ATTRIBUTE_value(*sk, i);
+            if (OBJ_obj2nid(X509_ATTRIBUTE_get0_object(attr)) == nid) {
+                X509_ATTRIBUTE_free(attr);
+                attr = X509_ATTRIBUTE_create(nid, atrtype, value);
+                if (attr == NULL)
+                    return 0;
+                if (!sk_X509_ATTRIBUTE_set(*sk, i, attr)) {
+                    X509_ATTRIBUTE_free(attr);
+                    return 0;
+                }
+                goto end;
+            }
+        }
+        goto new_attrib;
+    }
+ end:
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_lib.c
new file mode 100644
index 000000000..16b76431d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_lib.c
@@ -0,0 +1,588 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+
+long PKCS7_ctrl(PKCS7 *p7, int cmd, long larg, char *parg)
+{
+    int nid;
+    long ret;
+
+    nid = OBJ_obj2nid(p7->type);
+
+    switch (cmd) {
+    /* NOTE(emilia): does not support detached digested data. */
+    case PKCS7_OP_SET_DETACHED_SIGNATURE:
+        if (nid == NID_pkcs7_signed) {
+            ret = p7->detached = (int)larg;
+            if (ret && PKCS7_type_is_data(p7->d.sign->contents)) {
+                ASN1_OCTET_STRING *os;
+                os = p7->d.sign->contents->d.data;
+                ASN1_OCTET_STRING_free(os);
+                p7->d.sign->contents->d.data = NULL;
+            }
+        } else {
+            PKCS7err(PKCS7_F_PKCS7_CTRL,
+                     PKCS7_R_OPERATION_NOT_SUPPORTED_ON_THIS_TYPE);
+            ret = 0;
+        }
+        break;
+    case PKCS7_OP_GET_DETACHED_SIGNATURE:
+        if (nid == NID_pkcs7_signed) {
+            if (!p7->d.sign || !p7->d.sign->contents->d.ptr)
+                ret = 1;
+            else
+                ret = 0;
+
+            p7->detached = ret;
+        } else {
+            PKCS7err(PKCS7_F_PKCS7_CTRL,
+                     PKCS7_R_OPERATION_NOT_SUPPORTED_ON_THIS_TYPE);
+            ret = 0;
+        }
+
+        break;
+    default:
+        PKCS7err(PKCS7_F_PKCS7_CTRL, PKCS7_R_UNKNOWN_OPERATION);
+        ret = 0;
+    }
+    return ret;
+}
+
+int PKCS7_content_new(PKCS7 *p7, int type)
+{
+    PKCS7 *ret = NULL;
+
+    if ((ret = PKCS7_new()) == NULL)
+        goto err;
+    if (!PKCS7_set_type(ret, type))
+        goto err;
+    if (!PKCS7_set_content(p7, ret))
+        goto err;
+
+    return 1;
+ err:
+    PKCS7_free(ret);
+    return 0;
+}
+
+int PKCS7_set_content(PKCS7 *p7, PKCS7 *p7_data)
+{
+    int i;
+
+    i = OBJ_obj2nid(p7->type);
+    switch (i) {
+    case NID_pkcs7_signed:
+        PKCS7_free(p7->d.sign->contents);
+        p7->d.sign->contents = p7_data;
+        break;
+    case NID_pkcs7_digest:
+        PKCS7_free(p7->d.digest->contents);
+        p7->d.digest->contents = p7_data;
+        break;
+    case NID_pkcs7_data:
+    case NID_pkcs7_enveloped:
+    case NID_pkcs7_signedAndEnveloped:
+    case NID_pkcs7_encrypted:
+    default:
+        PKCS7err(PKCS7_F_PKCS7_SET_CONTENT, PKCS7_R_UNSUPPORTED_CONTENT_TYPE);
+        goto err;
+    }
+    return 1;
+ err:
+    return 0;
+}
+
+int PKCS7_set_type(PKCS7 *p7, int type)
+{
+    ASN1_OBJECT *obj;
+
+    /*
+     * PKCS7_content_free(p7);
+     */
+    obj = OBJ_nid2obj(type);    /* will not fail */
+
+    switch (type) {
+    case NID_pkcs7_signed:
+        p7->type = obj;
+        if ((p7->d.sign = PKCS7_SIGNED_new()) == NULL)
+            goto err;
+        if (!ASN1_INTEGER_set(p7->d.sign->version, 1)) {
+            PKCS7_SIGNED_free(p7->d.sign);
+            p7->d.sign = NULL;
+            goto err;
+        }
+        break;
+    case NID_pkcs7_data:
+        p7->type = obj;
+        if ((p7->d.data = ASN1_OCTET_STRING_new()) == NULL)
+            goto err;
+        break;
+    case NID_pkcs7_signedAndEnveloped:
+        p7->type = obj;
+        if ((p7->d.signed_and_enveloped = PKCS7_SIGN_ENVELOPE_new())
+            == NULL)
+            goto err;
+        if (!ASN1_INTEGER_set(p7->d.signed_and_enveloped->version, 1))
+            goto err;
+        p7->d.signed_and_enveloped->enc_data->content_type
+            = OBJ_nid2obj(NID_pkcs7_data);
+        break;
+    case NID_pkcs7_enveloped:
+        p7->type = obj;
+        if ((p7->d.enveloped = PKCS7_ENVELOPE_new())
+            == NULL)
+            goto err;
+        if (!ASN1_INTEGER_set(p7->d.enveloped->version, 0))
+            goto err;
+        p7->d.enveloped->enc_data->content_type = OBJ_nid2obj(NID_pkcs7_data);
+        break;
+    case NID_pkcs7_encrypted:
+        p7->type = obj;
+        if ((p7->d.encrypted = PKCS7_ENCRYPT_new())
+            == NULL)
+            goto err;
+        if (!ASN1_INTEGER_set(p7->d.encrypted->version, 0))
+            goto err;
+        p7->d.encrypted->enc_data->content_type = OBJ_nid2obj(NID_pkcs7_data);
+        break;
+
+    case NID_pkcs7_digest:
+        p7->type = obj;
+        if ((p7->d.digest = PKCS7_DIGEST_new())
+            == NULL)
+            goto err;
+        if (!ASN1_INTEGER_set(p7->d.digest->version, 0))
+            goto err;
+        break;
+    default:
+        PKCS7err(PKCS7_F_PKCS7_SET_TYPE, PKCS7_R_UNSUPPORTED_CONTENT_TYPE);
+        goto err;
+    }
+    return 1;
+ err:
+    return 0;
+}
+
+int PKCS7_set0_type_other(PKCS7 *p7, int type, ASN1_TYPE *other)
+{
+    p7->type = OBJ_nid2obj(type);
+    p7->d.other = other;
+    return 1;
+}
+
+int PKCS7_add_signer(PKCS7 *p7, PKCS7_SIGNER_INFO *psi)
+{
+    int i, j, nid;
+    X509_ALGOR *alg;
+    STACK_OF(PKCS7_SIGNER_INFO) *signer_sk;
+    STACK_OF(X509_ALGOR) *md_sk;
+
+    i = OBJ_obj2nid(p7->type);
+    switch (i) {
+    case NID_pkcs7_signed:
+        signer_sk = p7->d.sign->signer_info;
+        md_sk = p7->d.sign->md_algs;
+        break;
+    case NID_pkcs7_signedAndEnveloped:
+        signer_sk = p7->d.signed_and_enveloped->signer_info;
+        md_sk = p7->d.signed_and_enveloped->md_algs;
+        break;
+    default:
+        PKCS7err(PKCS7_F_PKCS7_ADD_SIGNER, PKCS7_R_WRONG_CONTENT_TYPE);
+        return 0;
+    }
+
+    nid = OBJ_obj2nid(psi->digest_alg->algorithm);
+
+    /* If the digest is not currently listed, add it */
+    j = 0;
+    for (i = 0; i < sk_X509_ALGOR_num(md_sk); i++) {
+        alg = sk_X509_ALGOR_value(md_sk, i);
+        if (OBJ_obj2nid(alg->algorithm) == nid) {
+            j = 1;
+            break;
+        }
+    }
+    if (!j) {                   /* we need to add another algorithm */
+        if ((alg = X509_ALGOR_new()) == NULL
+            || (alg->parameter = ASN1_TYPE_new()) == NULL) {
+            X509_ALGOR_free(alg);
+            PKCS7err(PKCS7_F_PKCS7_ADD_SIGNER, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        alg->algorithm = OBJ_nid2obj(nid);
+        alg->parameter->type = V_ASN1_NULL;
+        if (!sk_X509_ALGOR_push(md_sk, alg)) {
+            X509_ALGOR_free(alg);
+            return 0;
+        }
+    }
+
+    if (!sk_PKCS7_SIGNER_INFO_push(signer_sk, psi))
+        return 0;
+    return 1;
+}
+
+int PKCS7_add_certificate(PKCS7 *p7, X509 *x509)
+{
+    int i;
+    STACK_OF(X509) **sk;
+
+    i = OBJ_obj2nid(p7->type);
+    switch (i) {
+    case NID_pkcs7_signed:
+        sk = &(p7->d.sign->cert);
+        break;
+    case NID_pkcs7_signedAndEnveloped:
+        sk = &(p7->d.signed_and_enveloped->cert);
+        break;
+    default:
+        PKCS7err(PKCS7_F_PKCS7_ADD_CERTIFICATE, PKCS7_R_WRONG_CONTENT_TYPE);
+        return 0;
+    }
+
+    if (*sk == NULL)
+        *sk = sk_X509_new_null();
+    if (*sk == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_ADD_CERTIFICATE, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    X509_up_ref(x509);
+    if (!sk_X509_push(*sk, x509)) {
+        X509_free(x509);
+        return 0;
+    }
+    return 1;
+}
+
+int PKCS7_add_crl(PKCS7 *p7, X509_CRL *crl)
+{
+    int i;
+    STACK_OF(X509_CRL) **sk;
+
+    i = OBJ_obj2nid(p7->type);
+    switch (i) {
+    case NID_pkcs7_signed:
+        sk = &(p7->d.sign->crl);
+        break;
+    case NID_pkcs7_signedAndEnveloped:
+        sk = &(p7->d.signed_and_enveloped->crl);
+        break;
+    default:
+        PKCS7err(PKCS7_F_PKCS7_ADD_CRL, PKCS7_R_WRONG_CONTENT_TYPE);
+        return 0;
+    }
+
+    if (*sk == NULL)
+        *sk = sk_X509_CRL_new_null();
+    if (*sk == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_ADD_CRL, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    X509_CRL_up_ref(crl);
+    if (!sk_X509_CRL_push(*sk, crl)) {
+        X509_CRL_free(crl);
+        return 0;
+    }
+    return 1;
+}
+
+int PKCS7_SIGNER_INFO_set(PKCS7_SIGNER_INFO *p7i, X509 *x509, EVP_PKEY *pkey,
+                          const EVP_MD *dgst)
+{
+    int ret;
+
+    /* We now need to add another PKCS7_SIGNER_INFO entry */
+    if (!ASN1_INTEGER_set(p7i->version, 1))
+        goto err;
+    if (!X509_NAME_set(&p7i->issuer_and_serial->issuer,
+                       X509_get_issuer_name(x509)))
+        goto err;
+
+    /*
+     * because ASN1_INTEGER_set is used to set a 'long' we will do things the
+     * ugly way.
+     */
+    ASN1_INTEGER_free(p7i->issuer_and_serial->serial);
+    if (!(p7i->issuer_and_serial->serial =
+          ASN1_INTEGER_dup(X509_get_serialNumber(x509))))
+        goto err;
+
+    /* lets keep the pkey around for a while */
+    EVP_PKEY_up_ref(pkey);
+    p7i->pkey = pkey;
+
+    /* Set the algorithms */
+
+    X509_ALGOR_set0(p7i->digest_alg, OBJ_nid2obj(EVP_MD_type(dgst)),
+                    V_ASN1_NULL, NULL);
+
+    if (pkey->ameth && pkey->ameth->pkey_ctrl) {
+        ret = pkey->ameth->pkey_ctrl(pkey, ASN1_PKEY_CTRL_PKCS7_SIGN, 0, p7i);
+        if (ret > 0)
+            return 1;
+        if (ret != -2) {
+            PKCS7err(PKCS7_F_PKCS7_SIGNER_INFO_SET,
+                     PKCS7_R_SIGNING_CTRL_FAILURE);
+            return 0;
+        }
+    }
+    PKCS7err(PKCS7_F_PKCS7_SIGNER_INFO_SET,
+             PKCS7_R_SIGNING_NOT_SUPPORTED_FOR_THIS_KEY_TYPE);
+ err:
+    return 0;
+}
+
+PKCS7_SIGNER_INFO *PKCS7_add_signature(PKCS7 *p7, X509 *x509, EVP_PKEY *pkey,
+                                       const EVP_MD *dgst)
+{
+    PKCS7_SIGNER_INFO *si = NULL;
+
+    if (dgst == NULL) {
+        int def_nid;
+        if (EVP_PKEY_get_default_digest_nid(pkey, &def_nid) <= 0)
+            goto err;
+        dgst = EVP_get_digestbynid(def_nid);
+        if (dgst == NULL) {
+            PKCS7err(PKCS7_F_PKCS7_ADD_SIGNATURE, PKCS7_R_NO_DEFAULT_DIGEST);
+            goto err;
+        }
+    }
+
+    if ((si = PKCS7_SIGNER_INFO_new()) == NULL)
+        goto err;
+    if (!PKCS7_SIGNER_INFO_set(si, x509, pkey, dgst))
+        goto err;
+    if (!PKCS7_add_signer(p7, si))
+        goto err;
+    return si;
+ err:
+    PKCS7_SIGNER_INFO_free(si);
+    return NULL;
+}
+
+int PKCS7_set_digest(PKCS7 *p7, const EVP_MD *md)
+{
+    if (PKCS7_type_is_digest(p7)) {
+        if ((p7->d.digest->md->parameter = ASN1_TYPE_new()) == NULL) {
+            PKCS7err(PKCS7_F_PKCS7_SET_DIGEST, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        p7->d.digest->md->parameter->type = V_ASN1_NULL;
+        p7->d.digest->md->algorithm = OBJ_nid2obj(EVP_MD_nid(md));
+        return 1;
+    }
+
+    PKCS7err(PKCS7_F_PKCS7_SET_DIGEST, PKCS7_R_WRONG_CONTENT_TYPE);
+    return 1;
+}
+
+STACK_OF(PKCS7_SIGNER_INFO) *PKCS7_get_signer_info(PKCS7 *p7)
+{
+    if (p7 == NULL || p7->d.ptr == NULL)
+        return NULL;
+    if (PKCS7_type_is_signed(p7)) {
+        return p7->d.sign->signer_info;
+    } else if (PKCS7_type_is_signedAndEnveloped(p7)) {
+        return p7->d.signed_and_enveloped->signer_info;
+    } else
+        return NULL;
+}
+
+void PKCS7_SIGNER_INFO_get0_algs(PKCS7_SIGNER_INFO *si, EVP_PKEY **pk,
+                                 X509_ALGOR **pdig, X509_ALGOR **psig)
+{
+    if (pk)
+        *pk = si->pkey;
+    if (pdig)
+        *pdig = si->digest_alg;
+    if (psig)
+        *psig = si->digest_enc_alg;
+}
+
+void PKCS7_RECIP_INFO_get0_alg(PKCS7_RECIP_INFO *ri, X509_ALGOR **penc)
+{
+    if (penc)
+        *penc = ri->key_enc_algor;
+}
+
+PKCS7_RECIP_INFO *PKCS7_add_recipient(PKCS7 *p7, X509 *x509)
+{
+    PKCS7_RECIP_INFO *ri;
+
+    if ((ri = PKCS7_RECIP_INFO_new()) == NULL)
+        goto err;
+    if (!PKCS7_RECIP_INFO_set(ri, x509))
+        goto err;
+    if (!PKCS7_add_recipient_info(p7, ri))
+        goto err;
+    return ri;
+ err:
+    PKCS7_RECIP_INFO_free(ri);
+    return NULL;
+}
+
+int PKCS7_add_recipient_info(PKCS7 *p7, PKCS7_RECIP_INFO *ri)
+{
+    int i;
+    STACK_OF(PKCS7_RECIP_INFO) *sk;
+
+    i = OBJ_obj2nid(p7->type);
+    switch (i) {
+    case NID_pkcs7_signedAndEnveloped:
+        sk = p7->d.signed_and_enveloped->recipientinfo;
+        break;
+    case NID_pkcs7_enveloped:
+        sk = p7->d.enveloped->recipientinfo;
+        break;
+    default:
+        PKCS7err(PKCS7_F_PKCS7_ADD_RECIPIENT_INFO,
+                 PKCS7_R_WRONG_CONTENT_TYPE);
+        return 0;
+    }
+
+    if (!sk_PKCS7_RECIP_INFO_push(sk, ri))
+        return 0;
+    return 1;
+}
+
+int PKCS7_RECIP_INFO_set(PKCS7_RECIP_INFO *p7i, X509 *x509)
+{
+    int ret;
+    EVP_PKEY *pkey = NULL;
+    if (!ASN1_INTEGER_set(p7i->version, 0))
+        return 0;
+    if (!X509_NAME_set(&p7i->issuer_and_serial->issuer,
+                       X509_get_issuer_name(x509)))
+        return 0;
+
+    ASN1_INTEGER_free(p7i->issuer_and_serial->serial);
+    if (!(p7i->issuer_and_serial->serial =
+          ASN1_INTEGER_dup(X509_get_serialNumber(x509))))
+        return 0;
+
+    pkey = X509_get0_pubkey(x509);
+
+    if (!pkey || !pkey->ameth || !pkey->ameth->pkey_ctrl) {
+        PKCS7err(PKCS7_F_PKCS7_RECIP_INFO_SET,
+                 PKCS7_R_ENCRYPTION_NOT_SUPPORTED_FOR_THIS_KEY_TYPE);
+        goto err;
+    }
+
+    ret = pkey->ameth->pkey_ctrl(pkey, ASN1_PKEY_CTRL_PKCS7_ENCRYPT, 0, p7i);
+    if (ret == -2) {
+        PKCS7err(PKCS7_F_PKCS7_RECIP_INFO_SET,
+                 PKCS7_R_ENCRYPTION_NOT_SUPPORTED_FOR_THIS_KEY_TYPE);
+        goto err;
+    }
+    if (ret <= 0) {
+        PKCS7err(PKCS7_F_PKCS7_RECIP_INFO_SET,
+                 PKCS7_R_ENCRYPTION_CTRL_FAILURE);
+        goto err;
+    }
+
+    X509_up_ref(x509);
+    p7i->cert = x509;
+
+    return 1;
+
+ err:
+    return 0;
+}
+
+X509 *PKCS7_cert_from_signer_info(PKCS7 *p7, PKCS7_SIGNER_INFO *si)
+{
+    if (PKCS7_type_is_signed(p7))
+        return (X509_find_by_issuer_and_serial(p7->d.sign->cert,
+                                               si->issuer_and_serial->issuer,
+                                               si->
+                                               issuer_and_serial->serial));
+    else
+        return NULL;
+}
+
+int PKCS7_set_cipher(PKCS7 *p7, const EVP_CIPHER *cipher)
+{
+    int i;
+    PKCS7_ENC_CONTENT *ec;
+
+    i = OBJ_obj2nid(p7->type);
+    switch (i) {
+    case NID_pkcs7_signedAndEnveloped:
+        ec = p7->d.signed_and_enveloped->enc_data;
+        break;
+    case NID_pkcs7_enveloped:
+        ec = p7->d.enveloped->enc_data;
+        break;
+    default:
+        PKCS7err(PKCS7_F_PKCS7_SET_CIPHER, PKCS7_R_WRONG_CONTENT_TYPE);
+        return 0;
+    }
+
+    /* Check cipher OID exists and has data in it */
+    i = EVP_CIPHER_type(cipher);
+    if (i == NID_undef) {
+        PKCS7err(PKCS7_F_PKCS7_SET_CIPHER,
+                 PKCS7_R_CIPHER_HAS_NO_OBJECT_IDENTIFIER);
+        return 0;
+    }
+
+    ec->cipher = cipher;
+    return 1;
+}
+
+int PKCS7_stream(unsigned char ***boundary, PKCS7 *p7)
+{
+    ASN1_OCTET_STRING *os = NULL;
+
+    switch (OBJ_obj2nid(p7->type)) {
+    case NID_pkcs7_data:
+        os = p7->d.data;
+        break;
+
+    case NID_pkcs7_signedAndEnveloped:
+        os = p7->d.signed_and_enveloped->enc_data->enc_data;
+        if (os == NULL) {
+            os = ASN1_OCTET_STRING_new();
+            p7->d.signed_and_enveloped->enc_data->enc_data = os;
+        }
+        break;
+
+    case NID_pkcs7_enveloped:
+        os = p7->d.enveloped->enc_data->enc_data;
+        if (os == NULL) {
+            os = ASN1_OCTET_STRING_new();
+            p7->d.enveloped->enc_data->enc_data = os;
+        }
+        break;
+
+    case NID_pkcs7_signed:
+        os = p7->d.sign->contents->d.data;
+        break;
+
+    default:
+        os = NULL;
+        break;
+    }
+
+    if (os == NULL)
+        return 0;
+
+    os->flags |= ASN1_STRING_FLAG_NDEF;
+    *boundary = &os->data;
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_mime.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_mime.c
new file mode 100644
index 000000000..19e686814
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_mime.c
@@ -0,0 +1,48 @@
+/*
+ * Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/asn1.h>
+
+/* PKCS#7 wrappers round generalised stream and MIME routines */
+
+int i2d_PKCS7_bio_stream(BIO *out, PKCS7 *p7, BIO *in, int flags)
+{
+    return i2d_ASN1_bio_stream(out, (ASN1_VALUE *)p7, in, flags,
+                               ASN1_ITEM_rptr(PKCS7));
+}
+
+int PEM_write_bio_PKCS7_stream(BIO *out, PKCS7 *p7, BIO *in, int flags)
+{
+    return PEM_write_bio_ASN1_stream(out, (ASN1_VALUE *)p7, in, flags,
+                                     "PKCS7", ASN1_ITEM_rptr(PKCS7));
+}
+
+int SMIME_write_PKCS7(BIO *bio, PKCS7 *p7, BIO *data, int flags)
+{
+    STACK_OF(X509_ALGOR) *mdalgs;
+    int ctype_nid = OBJ_obj2nid(p7->type);
+    if (ctype_nid == NID_pkcs7_signed)
+        mdalgs = p7->d.sign->md_algs;
+    else
+        mdalgs = NULL;
+
+    flags ^= SMIME_OLDMIME;
+
+    return SMIME_write_ASN1(bio, (ASN1_VALUE *)p7, data, flags,
+                            ctype_nid, NID_undef, mdalgs,
+                            ASN1_ITEM_rptr(PKCS7));
+}
+
+PKCS7 *SMIME_read_PKCS7(BIO *bio, BIO **bcont)
+{
+    return (PKCS7 *)SMIME_read_ASN1(bio, bcont, ASN1_ITEM_rptr(PKCS7));
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_smime.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_smime.c
new file mode 100644
index 000000000..44187230e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pk7_smime.c
@@ -0,0 +1,549 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* Simple PKCS#7 processing functions */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+
+
+#define BUFFERSIZE 4096
+
+static int pkcs7_copy_existing_digest(PKCS7 *p7, PKCS7_SIGNER_INFO *si);
+
+PKCS7 *PKCS7_sign(X509 *signcert, EVP_PKEY *pkey, STACK_OF(X509) *certs,
+                  BIO *data, int flags)
+{
+    PKCS7 *p7;
+    int i;
+
+    if ((p7 = PKCS7_new()) == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_SIGN, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if (!PKCS7_set_type(p7, NID_pkcs7_signed))
+        goto err;
+
+    if (!PKCS7_content_new(p7, NID_pkcs7_data))
+        goto err;
+
+    if (pkey && !PKCS7_sign_add_signer(p7, signcert, pkey, NULL, flags)) {
+        PKCS7err(PKCS7_F_PKCS7_SIGN, PKCS7_R_PKCS7_ADD_SIGNER_ERROR);
+        goto err;
+    }
+
+    if (!(flags & PKCS7_NOCERTS)) {
+        for (i = 0; i < sk_X509_num(certs); i++) {
+            if (!PKCS7_add_certificate(p7, sk_X509_value(certs, i)))
+                goto err;
+        }
+    }
+
+    if (flags & PKCS7_DETACHED)
+        PKCS7_set_detached(p7, 1);
+
+    if (flags & (PKCS7_STREAM | PKCS7_PARTIAL))
+        return p7;
+
+    if (PKCS7_final(p7, data, flags))
+        return p7;
+
+ err:
+    PKCS7_free(p7);
+    return NULL;
+}
+
+int PKCS7_final(PKCS7 *p7, BIO *data, int flags)
+{
+    BIO *p7bio;
+    int ret = 0;
+
+    if ((p7bio = PKCS7_dataInit(p7, NULL)) == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_FINAL, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    SMIME_crlf_copy(data, p7bio, flags);
+
+    (void)BIO_flush(p7bio);
+
+    if (!PKCS7_dataFinal(p7, p7bio)) {
+        PKCS7err(PKCS7_F_PKCS7_FINAL, PKCS7_R_PKCS7_DATASIGN);
+        goto err;
+    }
+
+    ret = 1;
+
+ err:
+    BIO_free_all(p7bio);
+
+    return ret;
+
+}
+
+/* Check to see if a cipher exists and if so add S/MIME capabilities */
+
+static int add_cipher_smcap(STACK_OF(X509_ALGOR) *sk, int nid, int arg)
+{
+    if (EVP_get_cipherbynid(nid))
+        return PKCS7_simple_smimecap(sk, nid, arg);
+    return 1;
+}
+
+static int add_digest_smcap(STACK_OF(X509_ALGOR) *sk, int nid, int arg)
+{
+    if (EVP_get_digestbynid(nid))
+        return PKCS7_simple_smimecap(sk, nid, arg);
+    return 1;
+}
+
+PKCS7_SIGNER_INFO *PKCS7_sign_add_signer(PKCS7 *p7, X509 *signcert,
+                                         EVP_PKEY *pkey, const EVP_MD *md,
+                                         int flags)
+{
+    PKCS7_SIGNER_INFO *si = NULL;
+    STACK_OF(X509_ALGOR) *smcap = NULL;
+    if (!X509_check_private_key(signcert, pkey)) {
+        PKCS7err(PKCS7_F_PKCS7_SIGN_ADD_SIGNER,
+                 PKCS7_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE);
+        return NULL;
+    }
+
+    if ((si = PKCS7_add_signature(p7, signcert, pkey, md)) == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_SIGN_ADD_SIGNER,
+                 PKCS7_R_PKCS7_ADD_SIGNATURE_ERROR);
+        return NULL;
+    }
+
+    if (!(flags & PKCS7_NOCERTS)) {
+        if (!PKCS7_add_certificate(p7, signcert))
+            goto err;
+    }
+
+    if (!(flags & PKCS7_NOATTR)) {
+        if (!PKCS7_add_attrib_content_type(si, NULL))
+            goto err;
+        /* Add SMIMECapabilities */
+        if (!(flags & PKCS7_NOSMIMECAP)) {
+            if ((smcap = sk_X509_ALGOR_new_null()) == NULL) {
+                PKCS7err(PKCS7_F_PKCS7_SIGN_ADD_SIGNER, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            if (!add_cipher_smcap(smcap, NID_aes_256_cbc, -1)
+                || !add_digest_smcap(smcap, NID_id_GostR3411_2012_256, -1)
+                || !add_digest_smcap(smcap, NID_id_GostR3411_2012_512, -1)
+                || !add_digest_smcap(smcap, NID_id_GostR3411_94, -1)
+                || !add_cipher_smcap(smcap, NID_id_Gost28147_89, -1)
+                || !add_cipher_smcap(smcap, NID_aes_192_cbc, -1)
+                || !add_cipher_smcap(smcap, NID_aes_128_cbc, -1)
+                || !add_cipher_smcap(smcap, NID_des_ede3_cbc, -1)
+                || !add_cipher_smcap(smcap, NID_rc2_cbc, 128)
+                || !add_cipher_smcap(smcap, NID_rc2_cbc, 64)
+                || !add_cipher_smcap(smcap, NID_des_cbc, -1)
+                || !add_cipher_smcap(smcap, NID_rc2_cbc, 40)
+                || !PKCS7_add_attrib_smimecap(si, smcap))
+                goto err;
+            sk_X509_ALGOR_pop_free(smcap, X509_ALGOR_free);
+            smcap = NULL;
+        }
+        if (flags & PKCS7_REUSE_DIGEST) {
+            if (!pkcs7_copy_existing_digest(p7, si))
+                goto err;
+            if (!(flags & PKCS7_PARTIAL) && !PKCS7_SIGNER_INFO_sign(si))
+                goto err;
+        }
+    }
+    return si;
+ err:
+    sk_X509_ALGOR_pop_free(smcap, X509_ALGOR_free);
+    return NULL;
+}
+
+/*
+ * Search for a digest matching SignerInfo digest type and if found copy
+ * across.
+ */
+
+static int pkcs7_copy_existing_digest(PKCS7 *p7, PKCS7_SIGNER_INFO *si)
+{
+    int i;
+    STACK_OF(PKCS7_SIGNER_INFO) *sinfos;
+    PKCS7_SIGNER_INFO *sitmp;
+    ASN1_OCTET_STRING *osdig = NULL;
+    sinfos = PKCS7_get_signer_info(p7);
+    for (i = 0; i < sk_PKCS7_SIGNER_INFO_num(sinfos); i++) {
+        sitmp = sk_PKCS7_SIGNER_INFO_value(sinfos, i);
+        if (si == sitmp)
+            break;
+        if (sk_X509_ATTRIBUTE_num(sitmp->auth_attr) <= 0)
+            continue;
+        if (!OBJ_cmp(si->digest_alg->algorithm, sitmp->digest_alg->algorithm)) {
+            osdig = PKCS7_digest_from_attributes(sitmp->auth_attr);
+            break;
+        }
+
+    }
+
+    if (osdig)
+        return PKCS7_add1_attrib_digest(si, osdig->data, osdig->length);
+
+    PKCS7err(PKCS7_F_PKCS7_COPY_EXISTING_DIGEST,
+             PKCS7_R_NO_MATCHING_DIGEST_TYPE_FOUND);
+    return 0;
+}
+
+int PKCS7_verify(PKCS7 *p7, STACK_OF(X509) *certs, X509_STORE *store,
+                 BIO *indata, BIO *out, int flags)
+{
+    STACK_OF(X509) *signers;
+    X509 *signer;
+    STACK_OF(PKCS7_SIGNER_INFO) *sinfos;
+    PKCS7_SIGNER_INFO *si;
+    X509_STORE_CTX *cert_ctx = NULL;
+    char *buf = NULL;
+    int i, j = 0, k, ret = 0;
+    BIO *p7bio = NULL;
+    BIO *tmpin = NULL, *tmpout = NULL;
+
+    if (!p7) {
+        PKCS7err(PKCS7_F_PKCS7_VERIFY, PKCS7_R_INVALID_NULL_POINTER);
+        return 0;
+    }
+
+    if (!PKCS7_type_is_signed(p7)) {
+        PKCS7err(PKCS7_F_PKCS7_VERIFY, PKCS7_R_WRONG_CONTENT_TYPE);
+        return 0;
+    }
+
+    /* Check for no data and no content: no data to verify signature */
+    if (PKCS7_get_detached(p7) && !indata) {
+        PKCS7err(PKCS7_F_PKCS7_VERIFY, PKCS7_R_NO_CONTENT);
+        return 0;
+    }
+
+    if (flags & PKCS7_NO_DUAL_CONTENT) {
+        /*
+         * This was originally "#if 0" because we thought that only old broken
+         * Netscape did this.  It turns out that Authenticode uses this kind
+         * of "extended" PKCS7 format, and things like UEFI secure boot and
+         * tools like osslsigncode need it.  In Authenticode the verification
+         * process is different, but the existing PKCs7 verification works.
+         */
+        if (!PKCS7_get_detached(p7) && indata) {
+            PKCS7err(PKCS7_F_PKCS7_VERIFY, PKCS7_R_CONTENT_AND_DATA_PRESENT);
+            return 0;
+        }
+    }
+
+    sinfos = PKCS7_get_signer_info(p7);
+
+    if (!sinfos || !sk_PKCS7_SIGNER_INFO_num(sinfos)) {
+        PKCS7err(PKCS7_F_PKCS7_VERIFY, PKCS7_R_NO_SIGNATURES_ON_DATA);
+        return 0;
+    }
+
+    signers = PKCS7_get0_signers(p7, certs, flags);
+    if (!signers)
+        return 0;
+
+    /* Now verify the certificates */
+
+    cert_ctx = X509_STORE_CTX_new();
+    if (cert_ctx == NULL)
+        goto err;
+    if (!(flags & PKCS7_NOVERIFY))
+        for (k = 0; k < sk_X509_num(signers); k++) {
+            signer = sk_X509_value(signers, k);
+            if (!(flags & PKCS7_NOCHAIN)) {
+                if (!X509_STORE_CTX_init(cert_ctx, store, signer,
+                                         p7->d.sign->cert)) {
+                    PKCS7err(PKCS7_F_PKCS7_VERIFY, ERR_R_X509_LIB);
+                    goto err;
+                }
+                X509_STORE_CTX_set_default(cert_ctx, "smime_sign");
+            } else if (!X509_STORE_CTX_init(cert_ctx, store, signer, NULL)) {
+                PKCS7err(PKCS7_F_PKCS7_VERIFY, ERR_R_X509_LIB);
+                goto err;
+            }
+            if (!(flags & PKCS7_NOCRL))
+                X509_STORE_CTX_set0_crls(cert_ctx, p7->d.sign->crl);
+            i = X509_verify_cert(cert_ctx);
+            if (i <= 0)
+                j = X509_STORE_CTX_get_error(cert_ctx);
+            X509_STORE_CTX_cleanup(cert_ctx);
+            if (i <= 0) {
+                PKCS7err(PKCS7_F_PKCS7_VERIFY,
+                         PKCS7_R_CERTIFICATE_VERIFY_ERROR);
+                ERR_add_error_data(2, "Verify error:",
+                                   X509_verify_cert_error_string(j));
+                goto err;
+            }
+            /* Check for revocation status here */
+        }
+
+    /*
+     * Performance optimization: if the content is a memory BIO then store
+     * its contents in a temporary read only memory BIO. This avoids
+     * potentially large numbers of slow copies of data which will occur when
+     * reading from a read write memory BIO when signatures are calculated.
+     */
+
+    if (indata && (BIO_method_type(indata) == BIO_TYPE_MEM)) {
+        char *ptr;
+        long len;
+        len = BIO_get_mem_data(indata, &ptr);
+        tmpin = BIO_new_mem_buf(ptr, len);
+        if (tmpin == NULL) {
+            PKCS7err(PKCS7_F_PKCS7_VERIFY, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    } else
+        tmpin = indata;
+
+    if ((p7bio = PKCS7_dataInit(p7, tmpin)) == NULL)
+        goto err;
+
+    if (flags & PKCS7_TEXT) {
+        if ((tmpout = BIO_new(BIO_s_mem())) == NULL) {
+            PKCS7err(PKCS7_F_PKCS7_VERIFY, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        BIO_set_mem_eof_return(tmpout, 0);
+    } else
+        tmpout = out;
+
+    /* We now have to 'read' from p7bio to calculate digests etc. */
+    if ((buf = OPENSSL_malloc(BUFFERSIZE)) == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_VERIFY, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    for (;;) {
+        i = BIO_read(p7bio, buf, BUFFERSIZE);
+        if (i <= 0)
+            break;
+        if (tmpout)
+            BIO_write(tmpout, buf, i);
+    }
+
+    if (flags & PKCS7_TEXT) {
+        if (!SMIME_text(tmpout, out)) {
+            PKCS7err(PKCS7_F_PKCS7_VERIFY, PKCS7_R_SMIME_TEXT_ERROR);
+            BIO_free(tmpout);
+            goto err;
+        }
+        BIO_free(tmpout);
+    }
+
+    /* Now Verify All Signatures */
+    if (!(flags & PKCS7_NOSIGS))
+        for (i = 0; i < sk_PKCS7_SIGNER_INFO_num(sinfos); i++) {
+            si = sk_PKCS7_SIGNER_INFO_value(sinfos, i);
+            signer = sk_X509_value(signers, i);
+            j = PKCS7_signatureVerify(p7bio, p7, si, signer);
+            if (j <= 0) {
+                PKCS7err(PKCS7_F_PKCS7_VERIFY, PKCS7_R_SIGNATURE_FAILURE);
+                goto err;
+            }
+        }
+
+    ret = 1;
+
+ err:
+    X509_STORE_CTX_free(cert_ctx);
+    OPENSSL_free(buf);
+    if (tmpin == indata) {
+        if (indata)
+            BIO_pop(p7bio);
+    }
+    BIO_free_all(p7bio);
+    sk_X509_free(signers);
+    return ret;
+}
+
+STACK_OF(X509) *PKCS7_get0_signers(PKCS7 *p7, STACK_OF(X509) *certs,
+                                   int flags)
+{
+    STACK_OF(X509) *signers;
+    STACK_OF(PKCS7_SIGNER_INFO) *sinfos;
+    PKCS7_SIGNER_INFO *si;
+    PKCS7_ISSUER_AND_SERIAL *ias;
+    X509 *signer;
+    int i;
+
+    if (!p7) {
+        PKCS7err(PKCS7_F_PKCS7_GET0_SIGNERS, PKCS7_R_INVALID_NULL_POINTER);
+        return NULL;
+    }
+
+    if (!PKCS7_type_is_signed(p7)) {
+        PKCS7err(PKCS7_F_PKCS7_GET0_SIGNERS, PKCS7_R_WRONG_CONTENT_TYPE);
+        return NULL;
+    }
+
+    /* Collect all the signers together */
+
+    sinfos = PKCS7_get_signer_info(p7);
+
+    if (sk_PKCS7_SIGNER_INFO_num(sinfos) <= 0) {
+        PKCS7err(PKCS7_F_PKCS7_GET0_SIGNERS, PKCS7_R_NO_SIGNERS);
+        return 0;
+    }
+
+    if ((signers = sk_X509_new_null()) == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_GET0_SIGNERS, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    for (i = 0; i < sk_PKCS7_SIGNER_INFO_num(sinfos); i++) {
+        si = sk_PKCS7_SIGNER_INFO_value(sinfos, i);
+        ias = si->issuer_and_serial;
+        signer = NULL;
+        /* If any certificates passed they take priority */
+        if (certs)
+            signer = X509_find_by_issuer_and_serial(certs,
+                                                    ias->issuer, ias->serial);
+        if (!signer && !(flags & PKCS7_NOINTERN)
+            && p7->d.sign->cert)
+            signer =
+                X509_find_by_issuer_and_serial(p7->d.sign->cert,
+                                               ias->issuer, ias->serial);
+        if (!signer) {
+            PKCS7err(PKCS7_F_PKCS7_GET0_SIGNERS,
+                     PKCS7_R_SIGNER_CERTIFICATE_NOT_FOUND);
+            sk_X509_free(signers);
+            return 0;
+        }
+
+        if (!sk_X509_push(signers, signer)) {
+            sk_X509_free(signers);
+            return NULL;
+        }
+    }
+    return signers;
+}
+
+/* Build a complete PKCS#7 enveloped data */
+
+PKCS7 *PKCS7_encrypt(STACK_OF(X509) *certs, BIO *in, const EVP_CIPHER *cipher,
+                     int flags)
+{
+    PKCS7 *p7;
+    BIO *p7bio = NULL;
+    int i;
+    X509 *x509;
+    if ((p7 = PKCS7_new()) == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_ENCRYPT, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if (!PKCS7_set_type(p7, NID_pkcs7_enveloped))
+        goto err;
+    if (!PKCS7_set_cipher(p7, cipher)) {
+        PKCS7err(PKCS7_F_PKCS7_ENCRYPT, PKCS7_R_ERROR_SETTING_CIPHER);
+        goto err;
+    }
+
+    for (i = 0; i < sk_X509_num(certs); i++) {
+        x509 = sk_X509_value(certs, i);
+        if (!PKCS7_add_recipient(p7, x509)) {
+            PKCS7err(PKCS7_F_PKCS7_ENCRYPT, PKCS7_R_ERROR_ADDING_RECIPIENT);
+            goto err;
+        }
+    }
+
+    if (flags & PKCS7_STREAM)
+        return p7;
+
+    if (PKCS7_final(p7, in, flags))
+        return p7;
+
+ err:
+
+    BIO_free_all(p7bio);
+    PKCS7_free(p7);
+    return NULL;
+
+}
+
+int PKCS7_decrypt(PKCS7 *p7, EVP_PKEY *pkey, X509 *cert, BIO *data, int flags)
+{
+    BIO *tmpmem;
+    int ret = 0, i;
+    char *buf = NULL;
+
+    if (!p7) {
+        PKCS7err(PKCS7_F_PKCS7_DECRYPT, PKCS7_R_INVALID_NULL_POINTER);
+        return 0;
+    }
+
+    if (!PKCS7_type_is_enveloped(p7)) {
+        PKCS7err(PKCS7_F_PKCS7_DECRYPT, PKCS7_R_WRONG_CONTENT_TYPE);
+        return 0;
+    }
+
+    if (cert && !X509_check_private_key(cert, pkey)) {
+        PKCS7err(PKCS7_F_PKCS7_DECRYPT,
+                 PKCS7_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE);
+        return 0;
+    }
+
+    if ((tmpmem = PKCS7_dataDecode(p7, pkey, NULL, cert)) == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_DECRYPT, PKCS7_R_DECRYPT_ERROR);
+        return 0;
+    }
+
+    if (flags & PKCS7_TEXT) {
+        BIO *tmpbuf, *bread;
+        /* Encrypt BIOs can't do BIO_gets() so add a buffer BIO */
+        if ((tmpbuf = BIO_new(BIO_f_buffer())) == NULL) {
+            PKCS7err(PKCS7_F_PKCS7_DECRYPT, ERR_R_MALLOC_FAILURE);
+            BIO_free_all(tmpmem);
+            return 0;
+        }
+        if ((bread = BIO_push(tmpbuf, tmpmem)) == NULL) {
+            PKCS7err(PKCS7_F_PKCS7_DECRYPT, ERR_R_MALLOC_FAILURE);
+            BIO_free_all(tmpbuf);
+            BIO_free_all(tmpmem);
+            return 0;
+        }
+        ret = SMIME_text(bread, data);
+        if (ret > 0 && BIO_method_type(tmpmem) == BIO_TYPE_CIPHER) {
+            if (!BIO_get_cipher_status(tmpmem))
+                ret = 0;
+        }
+        BIO_free_all(bread);
+        return ret;
+    }
+    if ((buf = OPENSSL_malloc(BUFFERSIZE)) == NULL) {
+        PKCS7err(PKCS7_F_PKCS7_DECRYPT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    for (;;) {
+        i = BIO_read(tmpmem, buf, BUFFERSIZE);
+        if (i <= 0) {
+            ret = 1;
+            if (BIO_method_type(tmpmem) == BIO_TYPE_CIPHER) {
+                if (!BIO_get_cipher_status(tmpmem))
+                    ret = 0;
+            }
+
+            break;
+        }
+        if (BIO_write(data, buf, i) != i) {
+            break;
+        }
+    }
+err:
+    OPENSSL_free(buf);
+    BIO_free_all(tmpmem);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pkcs7err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pkcs7err.c
new file mode 100644
index 000000000..07490c1a5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/pkcs7/pkcs7err.c
@@ -0,0 +1,156 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/pkcs7err.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA PKCS7_str_functs[] = {
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_DO_PKCS7_SIGNED_ATTRIB, 0),
+     "do_pkcs7_signed_attrib"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_ADD0_ATTRIB_SIGNING_TIME, 0),
+     "PKCS7_add0_attrib_signing_time"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_ADD_ATTRIB_SMIMECAP, 0),
+     "PKCS7_add_attrib_smimecap"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_ADD_CERTIFICATE, 0),
+     "PKCS7_add_certificate"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_ADD_CRL, 0), "PKCS7_add_crl"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_ADD_RECIPIENT_INFO, 0),
+     "PKCS7_add_recipient_info"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_ADD_SIGNATURE, 0),
+     "PKCS7_add_signature"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_ADD_SIGNER, 0), "PKCS7_add_signer"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_BIO_ADD_DIGEST, 0),
+     "PKCS7_bio_add_digest"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_COPY_EXISTING_DIGEST, 0),
+     "pkcs7_copy_existing_digest"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_CTRL, 0), "PKCS7_ctrl"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_DATADECODE, 0), "PKCS7_dataDecode"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_DATAFINAL, 0), "PKCS7_dataFinal"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_DATAINIT, 0), "PKCS7_dataInit"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_DATAVERIFY, 0), "PKCS7_dataVerify"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_DECRYPT, 0), "PKCS7_decrypt"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_DECRYPT_RINFO, 0),
+     "pkcs7_decrypt_rinfo"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_ENCODE_RINFO, 0),
+     "pkcs7_encode_rinfo"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_ENCRYPT, 0), "PKCS7_encrypt"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_FINAL, 0), "PKCS7_final"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_FIND_DIGEST, 0),
+     "PKCS7_find_digest"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_GET0_SIGNERS, 0),
+     "PKCS7_get0_signers"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_RECIP_INFO_SET, 0),
+     "PKCS7_RECIP_INFO_set"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_SET_CIPHER, 0), "PKCS7_set_cipher"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_SET_CONTENT, 0),
+     "PKCS7_set_content"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_SET_DIGEST, 0), "PKCS7_set_digest"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_SET_TYPE, 0), "PKCS7_set_type"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_SIGN, 0), "PKCS7_sign"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_SIGNATUREVERIFY, 0),
+     "PKCS7_signatureVerify"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_SIGNER_INFO_SET, 0),
+     "PKCS7_SIGNER_INFO_set"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_SIGNER_INFO_SIGN, 0),
+     "PKCS7_SIGNER_INFO_sign"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_SIGN_ADD_SIGNER, 0),
+     "PKCS7_sign_add_signer"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_SIMPLE_SMIMECAP, 0),
+     "PKCS7_simple_smimecap"},
+    {ERR_PACK(ERR_LIB_PKCS7, PKCS7_F_PKCS7_VERIFY, 0), "PKCS7_verify"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA PKCS7_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_CERTIFICATE_VERIFY_ERROR),
+    "certificate verify error"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_CIPHER_HAS_NO_OBJECT_IDENTIFIER),
+    "cipher has no object identifier"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_CIPHER_NOT_INITIALIZED),
+    "cipher not initialized"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_CONTENT_AND_DATA_PRESENT),
+    "content and data present"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_CTRL_ERROR), "ctrl error"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_DECRYPT_ERROR), "decrypt error"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_DIGEST_FAILURE), "digest failure"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_ENCRYPTION_CTRL_FAILURE),
+    "encryption ctrl failure"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_ENCRYPTION_NOT_SUPPORTED_FOR_THIS_KEY_TYPE),
+    "encryption not supported for this key type"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_ERROR_ADDING_RECIPIENT),
+    "error adding recipient"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_ERROR_SETTING_CIPHER),
+    "error setting cipher"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_INVALID_NULL_POINTER),
+    "invalid null pointer"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_INVALID_SIGNED_DATA_TYPE),
+    "invalid signed data type"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_NO_CONTENT), "no content"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_NO_DEFAULT_DIGEST),
+    "no default digest"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_NO_MATCHING_DIGEST_TYPE_FOUND),
+    "no matching digest type found"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_NO_RECIPIENT_MATCHES_CERTIFICATE),
+    "no recipient matches certificate"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_NO_SIGNATURES_ON_DATA),
+    "no signatures on data"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_NO_SIGNERS), "no signers"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_OPERATION_NOT_SUPPORTED_ON_THIS_TYPE),
+    "operation not supported on this type"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_PKCS7_ADD_SIGNATURE_ERROR),
+    "pkcs7 add signature error"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_PKCS7_ADD_SIGNER_ERROR),
+    "pkcs7 add signer error"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_PKCS7_DATASIGN), "pkcs7 datasign"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE),
+    "private key does not match certificate"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_SIGNATURE_FAILURE),
+    "signature failure"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_SIGNER_CERTIFICATE_NOT_FOUND),
+    "signer certificate not found"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_SIGNING_CTRL_FAILURE),
+    "signing ctrl failure"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_SIGNING_NOT_SUPPORTED_FOR_THIS_KEY_TYPE),
+    "signing not supported for this key type"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_SMIME_TEXT_ERROR), "smime text error"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_UNABLE_TO_FIND_CERTIFICATE),
+    "unable to find certificate"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_UNABLE_TO_FIND_MEM_BIO),
+    "unable to find mem bio"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_UNABLE_TO_FIND_MESSAGE_DIGEST),
+    "unable to find message digest"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_UNKNOWN_DIGEST_TYPE),
+    "unknown digest type"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_UNKNOWN_OPERATION),
+    "unknown operation"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_UNSUPPORTED_CIPHER_TYPE),
+    "unsupported cipher type"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_UNSUPPORTED_CONTENT_TYPE),
+    "unsupported content type"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_WRONG_CONTENT_TYPE),
+    "wrong content type"},
+    {ERR_PACK(ERR_LIB_PKCS7, 0, PKCS7_R_WRONG_PKCS7_TYPE), "wrong pkcs7 type"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_PKCS7_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(PKCS7_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(PKCS7_str_functs);
+        ERR_load_strings_const(PKCS7_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-armv4.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-armv4.pl
new file mode 100755
index 000000000..5cdb6be05
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-armv4.pl
@@ -0,0 +1,1253 @@
+#! /usr/bin/env perl
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+#			IALU(*)/gcc-4.4		NEON
+#
+# ARM11xx(ARMv6)	7.78/+100%		-
+# Cortex-A5		6.35/+130%		3.00
+# Cortex-A8		6.25/+115%		2.36
+# Cortex-A9		5.10/+95%		2.55
+# Cortex-A15		3.85/+85%		1.25(**)
+# Snapdragon S4		5.70/+100%		1.48(**)
+#
+# (*)	this is for -march=armv6, i.e. with bunch of ldrb loading data;
+# (**)	these are trade-off results, they can be improved by ~8% but at
+#	the cost of 15/12% regression on Cortex-A5/A7, it's even possible
+#	to improve Cortex-A9 result, but then A5/A7 loose more than 20%;
+
+$flavour = shift;
+if ($flavour=~/\w[\w\-]*\.\w+$/) { $output=$flavour; undef $flavour; }
+else { while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {} }
+
+if ($flavour && $flavour ne "void") {
+    $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+    ( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+    ( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+    die "can't locate arm-xlate.pl";
+
+    open STDOUT,"| \"$^X\" $xlate $flavour $output";
+} else {
+    open STDOUT,">$output";
+}
+
+($ctx,$inp,$len,$padbit)=map("r$_",(0..3));
+
+$code.=<<___;
+#include "arm_arch.h"
+
+.text
+#if defined(__thumb2__)
+.syntax	unified
+.thumb
+#else
+.code	32
+#endif
+
+.globl	poly1305_emit
+.globl	poly1305_blocks
+.globl	poly1305_init
+.type	poly1305_init,%function
+.align	5
+poly1305_init:
+.Lpoly1305_init:
+	stmdb	sp!,{r4-r11}
+
+	eor	r3,r3,r3
+	cmp	$inp,#0
+	str	r3,[$ctx,#0]		@ zero hash value
+	str	r3,[$ctx,#4]
+	str	r3,[$ctx,#8]
+	str	r3,[$ctx,#12]
+	str	r3,[$ctx,#16]
+	str	r3,[$ctx,#36]		@ is_base2_26
+	add	$ctx,$ctx,#20
+
+#ifdef	__thumb2__
+	it	eq
+#endif
+	moveq	r0,#0
+	beq	.Lno_key
+
+#if	__ARM_MAX_ARCH__>=7
+	adr	r11,.Lpoly1305_init
+	ldr	r12,.LOPENSSL_armcap
+#endif
+	ldrb	r4,[$inp,#0]
+	mov	r10,#0x0fffffff
+	ldrb	r5,[$inp,#1]
+	and	r3,r10,#-4		@ 0x0ffffffc
+	ldrb	r6,[$inp,#2]
+	ldrb	r7,[$inp,#3]
+	orr	r4,r4,r5,lsl#8
+	ldrb	r5,[$inp,#4]
+	orr	r4,r4,r6,lsl#16
+	ldrb	r6,[$inp,#5]
+	orr	r4,r4,r7,lsl#24
+	ldrb	r7,[$inp,#6]
+	and	r4,r4,r10
+
+#if	__ARM_MAX_ARCH__>=7
+	ldr	r12,[r11,r12]		@ OPENSSL_armcap_P
+# ifdef	__APPLE__
+	ldr	r12,[r12]
+# endif
+#endif
+	ldrb	r8,[$inp,#7]
+	orr	r5,r5,r6,lsl#8
+	ldrb	r6,[$inp,#8]
+	orr	r5,r5,r7,lsl#16
+	ldrb	r7,[$inp,#9]
+	orr	r5,r5,r8,lsl#24
+	ldrb	r8,[$inp,#10]
+	and	r5,r5,r3
+
+#if	__ARM_MAX_ARCH__>=7
+	tst	r12,#ARMV7_NEON		@ check for NEON
+# ifdef	__APPLE__
+	adr	r9,poly1305_blocks_neon
+	adr	r11,poly1305_blocks
+#  ifdef __thumb2__
+	it	ne
+#  endif
+	movne	r11,r9
+	adr	r12,poly1305_emit
+	adr	r10,poly1305_emit_neon
+#  ifdef __thumb2__
+	it	ne
+#  endif
+	movne	r12,r10
+# else
+#  ifdef __thumb2__
+	itete	eq
+#  endif
+	addeq	r12,r11,#(poly1305_emit-.Lpoly1305_init)
+	addne	r12,r11,#(poly1305_emit_neon-.Lpoly1305_init)
+	addeq	r11,r11,#(poly1305_blocks-.Lpoly1305_init)
+	addne	r11,r11,#(poly1305_blocks_neon-.Lpoly1305_init)
+# endif
+# ifdef	__thumb2__
+	orr	r12,r12,#1	@ thumb-ify address
+	orr	r11,r11,#1
+# endif
+#endif
+	ldrb	r9,[$inp,#11]
+	orr	r6,r6,r7,lsl#8
+	ldrb	r7,[$inp,#12]
+	orr	r6,r6,r8,lsl#16
+	ldrb	r8,[$inp,#13]
+	orr	r6,r6,r9,lsl#24
+	ldrb	r9,[$inp,#14]
+	and	r6,r6,r3
+
+	ldrb	r10,[$inp,#15]
+	orr	r7,r7,r8,lsl#8
+	str	r4,[$ctx,#0]
+	orr	r7,r7,r9,lsl#16
+	str	r5,[$ctx,#4]
+	orr	r7,r7,r10,lsl#24
+	str	r6,[$ctx,#8]
+	and	r7,r7,r3
+	str	r7,[$ctx,#12]
+#if	__ARM_MAX_ARCH__>=7
+	stmia	r2,{r11,r12}		@ fill functions table
+	mov	r0,#1
+#else
+	mov	r0,#0
+#endif
+.Lno_key:
+	ldmia	sp!,{r4-r11}
+#if	__ARM_ARCH__>=5
+	ret				@ bx	lr
+#else
+	tst	lr,#1
+	moveq	pc,lr			@ be binary compatible with V4, yet
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	poly1305_init,.-poly1305_init
+___
+{
+my ($h0,$h1,$h2,$h3,$h4,$r0,$r1,$r2,$r3)=map("r$_",(4..12));
+my ($s1,$s2,$s3)=($r1,$r2,$r3);
+
+$code.=<<___;
+.type	poly1305_blocks,%function
+.align	5
+poly1305_blocks:
+.Lpoly1305_blocks:
+	stmdb	sp!,{r3-r11,lr}
+
+	ands	$len,$len,#-16
+	beq	.Lno_data
+
+	cmp	$padbit,#0
+	add	$len,$len,$inp		@ end pointer
+	sub	sp,sp,#32
+
+	ldmia	$ctx,{$h0-$r3}		@ load context
+
+	str	$ctx,[sp,#12]		@ offload stuff
+	mov	lr,$inp
+	str	$len,[sp,#16]
+	str	$r1,[sp,#20]
+	str	$r2,[sp,#24]
+	str	$r3,[sp,#28]
+	b	.Loop
+
+.Loop:
+#if __ARM_ARCH__<7
+	ldrb	r0,[lr],#16		@ load input
+# ifdef	__thumb2__
+	it	hi
+# endif
+	addhi	$h4,$h4,#1		@ 1<<128
+	ldrb	r1,[lr,#-15]
+	ldrb	r2,[lr,#-14]
+	ldrb	r3,[lr,#-13]
+	orr	r1,r0,r1,lsl#8
+	ldrb	r0,[lr,#-12]
+	orr	r2,r1,r2,lsl#16
+	ldrb	r1,[lr,#-11]
+	orr	r3,r2,r3,lsl#24
+	ldrb	r2,[lr,#-10]
+	adds	$h0,$h0,r3		@ accumulate input
+
+	ldrb	r3,[lr,#-9]
+	orr	r1,r0,r1,lsl#8
+	ldrb	r0,[lr,#-8]
+	orr	r2,r1,r2,lsl#16
+	ldrb	r1,[lr,#-7]
+	orr	r3,r2,r3,lsl#24
+	ldrb	r2,[lr,#-6]
+	adcs	$h1,$h1,r3
+
+	ldrb	r3,[lr,#-5]
+	orr	r1,r0,r1,lsl#8
+	ldrb	r0,[lr,#-4]
+	orr	r2,r1,r2,lsl#16
+	ldrb	r1,[lr,#-3]
+	orr	r3,r2,r3,lsl#24
+	ldrb	r2,[lr,#-2]
+	adcs	$h2,$h2,r3
+
+	ldrb	r3,[lr,#-1]
+	orr	r1,r0,r1,lsl#8
+	str	lr,[sp,#8]		@ offload input pointer
+	orr	r2,r1,r2,lsl#16
+	add	$s1,$r1,$r1,lsr#2
+	orr	r3,r2,r3,lsl#24
+#else
+	ldr	r0,[lr],#16		@ load input
+# ifdef	__thumb2__
+	it	hi
+# endif
+	addhi	$h4,$h4,#1		@ padbit
+	ldr	r1,[lr,#-12]
+	ldr	r2,[lr,#-8]
+	ldr	r3,[lr,#-4]
+# ifdef	__ARMEB__
+	rev	r0,r0
+	rev	r1,r1
+	rev	r2,r2
+	rev	r3,r3
+# endif
+	adds	$h0,$h0,r0		@ accumulate input
+	str	lr,[sp,#8]		@ offload input pointer
+	adcs	$h1,$h1,r1
+	add	$s1,$r1,$r1,lsr#2
+	adcs	$h2,$h2,r2
+#endif
+	add	$s2,$r2,$r2,lsr#2
+	adcs	$h3,$h3,r3
+	add	$s3,$r3,$r3,lsr#2
+
+	umull	r2,r3,$h1,$r0
+	 adc	$h4,$h4,#0
+	umull	r0,r1,$h0,$r0
+	umlal	r2,r3,$h4,$s1
+	umlal	r0,r1,$h3,$s1
+	ldr	$r1,[sp,#20]		@ reload $r1
+	umlal	r2,r3,$h2,$s3
+	umlal	r0,r1,$h1,$s3
+	umlal	r2,r3,$h3,$s2
+	umlal	r0,r1,$h2,$s2
+	umlal	r2,r3,$h0,$r1
+	str	r0,[sp,#0]		@ future $h0
+	 mul	r0,$s2,$h4
+	ldr	$r2,[sp,#24]		@ reload $r2
+	adds	r2,r2,r1		@ d1+=d0>>32
+	 eor	r1,r1,r1
+	adc	lr,r3,#0		@ future $h2
+	str	r2,[sp,#4]		@ future $h1
+
+	mul	r2,$s3,$h4
+	eor	r3,r3,r3
+	umlal	r0,r1,$h3,$s3
+	ldr	$r3,[sp,#28]		@ reload $r3
+	umlal	r2,r3,$h3,$r0
+	umlal	r0,r1,$h2,$r0
+	umlal	r2,r3,$h2,$r1
+	umlal	r0,r1,$h1,$r1
+	umlal	r2,r3,$h1,$r2
+	umlal	r0,r1,$h0,$r2
+	umlal	r2,r3,$h0,$r3
+	ldr	$h0,[sp,#0]
+	mul	$h4,$r0,$h4
+	ldr	$h1,[sp,#4]
+
+	adds	$h2,lr,r0		@ d2+=d1>>32
+	ldr	lr,[sp,#8]		@ reload input pointer
+	adc	r1,r1,#0
+	adds	$h3,r2,r1		@ d3+=d2>>32
+	ldr	r0,[sp,#16]		@ reload end pointer
+	adc	r3,r3,#0
+	add	$h4,$h4,r3		@ h4+=d3>>32
+
+	and	r1,$h4,#-4
+	and	$h4,$h4,#3
+	add	r1,r1,r1,lsr#2		@ *=5
+	adds	$h0,$h0,r1
+	adcs	$h1,$h1,#0
+	adcs	$h2,$h2,#0
+	adcs	$h3,$h3,#0
+	adc	$h4,$h4,#0
+
+	cmp	r0,lr			@ done yet?
+	bhi	.Loop
+
+	ldr	$ctx,[sp,#12]
+	add	sp,sp,#32
+	stmia	$ctx,{$h0-$h4}		@ store the result
+
+.Lno_data:
+#if	__ARM_ARCH__>=5
+	ldmia	sp!,{r3-r11,pc}
+#else
+	ldmia	sp!,{r3-r11,lr}
+	tst	lr,#1
+	moveq	pc,lr			@ be binary compatible with V4, yet
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	poly1305_blocks,.-poly1305_blocks
+___
+}
+{
+my ($ctx,$mac,$nonce)=map("r$_",(0..2));
+my ($h0,$h1,$h2,$h3,$h4,$g0,$g1,$g2,$g3)=map("r$_",(3..11));
+my $g4=$h4;
+
+$code.=<<___;
+.type	poly1305_emit,%function
+.align	5
+poly1305_emit:
+	stmdb	sp!,{r4-r11}
+.Lpoly1305_emit_enter:
+
+	ldmia	$ctx,{$h0-$h4}
+	adds	$g0,$h0,#5		@ compare to modulus
+	adcs	$g1,$h1,#0
+	adcs	$g2,$h2,#0
+	adcs	$g3,$h3,#0
+	adc	$g4,$h4,#0
+	tst	$g4,#4			@ did it carry/borrow?
+
+#ifdef	__thumb2__
+	it	ne
+#endif
+	movne	$h0,$g0
+	ldr	$g0,[$nonce,#0]
+#ifdef	__thumb2__
+	it	ne
+#endif
+	movne	$h1,$g1
+	ldr	$g1,[$nonce,#4]
+#ifdef	__thumb2__
+	it	ne
+#endif
+	movne	$h2,$g2
+	ldr	$g2,[$nonce,#8]
+#ifdef	__thumb2__
+	it	ne
+#endif
+	movne	$h3,$g3
+	ldr	$g3,[$nonce,#12]
+
+	adds	$h0,$h0,$g0
+	adcs	$h1,$h1,$g1
+	adcs	$h2,$h2,$g2
+	adc	$h3,$h3,$g3
+
+#if __ARM_ARCH__>=7
+# ifdef __ARMEB__
+	rev	$h0,$h0
+	rev	$h1,$h1
+	rev	$h2,$h2
+	rev	$h3,$h3
+# endif
+	str	$h0,[$mac,#0]
+	str	$h1,[$mac,#4]
+	str	$h2,[$mac,#8]
+	str	$h3,[$mac,#12]
+#else
+	strb	$h0,[$mac,#0]
+	mov	$h0,$h0,lsr#8
+	strb	$h1,[$mac,#4]
+	mov	$h1,$h1,lsr#8
+	strb	$h2,[$mac,#8]
+	mov	$h2,$h2,lsr#8
+	strb	$h3,[$mac,#12]
+	mov	$h3,$h3,lsr#8
+
+	strb	$h0,[$mac,#1]
+	mov	$h0,$h0,lsr#8
+	strb	$h1,[$mac,#5]
+	mov	$h1,$h1,lsr#8
+	strb	$h2,[$mac,#9]
+	mov	$h2,$h2,lsr#8
+	strb	$h3,[$mac,#13]
+	mov	$h3,$h3,lsr#8
+
+	strb	$h0,[$mac,#2]
+	mov	$h0,$h0,lsr#8
+	strb	$h1,[$mac,#6]
+	mov	$h1,$h1,lsr#8
+	strb	$h2,[$mac,#10]
+	mov	$h2,$h2,lsr#8
+	strb	$h3,[$mac,#14]
+	mov	$h3,$h3,lsr#8
+
+	strb	$h0,[$mac,#3]
+	strb	$h1,[$mac,#7]
+	strb	$h2,[$mac,#11]
+	strb	$h3,[$mac,#15]
+#endif
+	ldmia	sp!,{r4-r11}
+#if	__ARM_ARCH__>=5
+	ret				@ bx	lr
+#else
+	tst	lr,#1
+	moveq	pc,lr			@ be binary compatible with V4, yet
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	poly1305_emit,.-poly1305_emit
+___
+{
+my ($R0,$R1,$S1,$R2,$S2,$R3,$S3,$R4,$S4) = map("d$_",(0..9));
+my ($D0,$D1,$D2,$D3,$D4, $H0,$H1,$H2,$H3,$H4) = map("q$_",(5..14));
+my ($T0,$T1,$MASK) = map("q$_",(15,4,0));
+
+my ($in2,$zeros,$tbl0,$tbl1) = map("r$_",(4..7));
+
+$code.=<<___;
+#if	__ARM_MAX_ARCH__>=7
+.fpu	neon
+
+.type	poly1305_init_neon,%function
+.align	5
+poly1305_init_neon:
+	ldr	r4,[$ctx,#20]		@ load key base 2^32
+	ldr	r5,[$ctx,#24]
+	ldr	r6,[$ctx,#28]
+	ldr	r7,[$ctx,#32]
+
+	and	r2,r4,#0x03ffffff	@ base 2^32 -> base 2^26
+	mov	r3,r4,lsr#26
+	mov	r4,r5,lsr#20
+	orr	r3,r3,r5,lsl#6
+	mov	r5,r6,lsr#14
+	orr	r4,r4,r6,lsl#12
+	mov	r6,r7,lsr#8
+	orr	r5,r5,r7,lsl#18
+	and	r3,r3,#0x03ffffff
+	and	r4,r4,#0x03ffffff
+	and	r5,r5,#0x03ffffff
+
+	vdup.32	$R0,r2			@ r^1 in both lanes
+	add	r2,r3,r3,lsl#2		@ *5
+	vdup.32	$R1,r3
+	add	r3,r4,r4,lsl#2
+	vdup.32	$S1,r2
+	vdup.32	$R2,r4
+	add	r4,r5,r5,lsl#2
+	vdup.32	$S2,r3
+	vdup.32	$R3,r5
+	add	r5,r6,r6,lsl#2
+	vdup.32	$S3,r4
+	vdup.32	$R4,r6
+	vdup.32	$S4,r5
+
+	mov	$zeros,#2		@ counter
+
+.Lsquare_neon:
+	@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+	@ d0 = h0*r0 + h4*5*r1 + h3*5*r2 + h2*5*r3 + h1*5*r4
+	@ d1 = h1*r0 + h0*r1   + h4*5*r2 + h3*5*r3 + h2*5*r4
+	@ d2 = h2*r0 + h1*r1   + h0*r2   + h4*5*r3 + h3*5*r4
+	@ d3 = h3*r0 + h2*r1   + h1*r2   + h0*r3   + h4*5*r4
+	@ d4 = h4*r0 + h3*r1   + h2*r2   + h1*r3   + h0*r4
+
+	vmull.u32	$D0,$R0,${R0}[1]
+	vmull.u32	$D1,$R1,${R0}[1]
+	vmull.u32	$D2,$R2,${R0}[1]
+	vmull.u32	$D3,$R3,${R0}[1]
+	vmull.u32	$D4,$R4,${R0}[1]
+
+	vmlal.u32	$D0,$R4,${S1}[1]
+	vmlal.u32	$D1,$R0,${R1}[1]
+	vmlal.u32	$D2,$R1,${R1}[1]
+	vmlal.u32	$D3,$R2,${R1}[1]
+	vmlal.u32	$D4,$R3,${R1}[1]
+
+	vmlal.u32	$D0,$R3,${S2}[1]
+	vmlal.u32	$D1,$R4,${S2}[1]
+	vmlal.u32	$D3,$R1,${R2}[1]
+	vmlal.u32	$D2,$R0,${R2}[1]
+	vmlal.u32	$D4,$R2,${R2}[1]
+
+	vmlal.u32	$D0,$R2,${S3}[1]
+	vmlal.u32	$D3,$R0,${R3}[1]
+	vmlal.u32	$D1,$R3,${S3}[1]
+	vmlal.u32	$D2,$R4,${S3}[1]
+	vmlal.u32	$D4,$R1,${R3}[1]
+
+	vmlal.u32	$D3,$R4,${S4}[1]
+	vmlal.u32	$D0,$R1,${S4}[1]
+	vmlal.u32	$D1,$R2,${S4}[1]
+	vmlal.u32	$D2,$R3,${S4}[1]
+	vmlal.u32	$D4,$R0,${R4}[1]
+
+	@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+	@ lazy reduction as discussed in "NEON crypto" by D.J. Bernstein
+	@ and P. Schwabe
+	@
+	@ H0>>+H1>>+H2>>+H3>>+H4
+	@ H3>>+H4>>*5+H0>>+H1
+	@
+	@ Trivia.
+	@
+	@ Result of multiplication of n-bit number by m-bit number is
+	@ n+m bits wide. However! Even though 2^n is a n+1-bit number,
+	@ m-bit number multiplied by 2^n is still n+m bits wide.
+	@
+	@ Sum of two n-bit numbers is n+1 bits wide, sum of three - n+2,
+	@ and so is sum of four. Sum of 2^m n-m-bit numbers and n-bit
+	@ one is n+1 bits wide.
+	@
+	@ >>+ denotes Hnext += Hn>>26, Hn &= 0x3ffffff. This means that
+	@ H0, H2, H3 are guaranteed to be 26 bits wide, while H1 and H4
+	@ can be 27. However! In cases when their width exceeds 26 bits
+	@ they are limited by 2^26+2^6. This in turn means that *sum*
+	@ of the products with these values can still be viewed as sum
+	@ of 52-bit numbers as long as the amount of addends is not a
+	@ power of 2. For example,
+	@
+	@ H4 = H4*R0 + H3*R1 + H2*R2 + H1*R3 + H0 * R4,
+	@
+	@ which can't be larger than 5 * (2^26 + 2^6) * (2^26 + 2^6), or
+	@ 5 * (2^52 + 2*2^32 + 2^12), which in turn is smaller than
+	@ 8 * (2^52) or 2^55. However, the value is then multiplied by
+	@ by 5, so we should be looking at 5 * 5 * (2^52 + 2^33 + 2^12),
+	@ which is less than 32 * (2^52) or 2^57. And when processing
+	@ data we are looking at triple as many addends...
+	@
+	@ In key setup procedure pre-reduced H0 is limited by 5*4+1 and
+	@ 5*H4 - by 5*5 52-bit addends, or 57 bits. But when hashing the
+	@ input H0 is limited by (5*4+1)*3 addends, or 58 bits, while
+	@ 5*H4 by 5*5*3, or 59[!] bits. How is this relevant? vmlal.u32
+	@ instruction accepts 2x32-bit input and writes 2x64-bit result.
+	@ This means that result of reduction have to be compressed upon
+	@ loop wrap-around. This can be done in the process of reduction
+	@ to minimize amount of instructions [as well as amount of
+	@ 128-bit instructions, which benefits low-end processors], but
+	@ one has to watch for H2 (which is narrower than H0) and 5*H4
+	@ not being wider than 58 bits, so that result of right shift
+	@ by 26 bits fits in 32 bits. This is also useful on x86,
+	@ because it allows to use paddd in place for paddq, which
+	@ benefits Atom, where paddq is ridiculously slow.
+
+	vshr.u64	$T0,$D3,#26
+	vmovn.i64	$D3#lo,$D3
+	 vshr.u64	$T1,$D0,#26
+	 vmovn.i64	$D0#lo,$D0
+	vadd.i64	$D4,$D4,$T0		@ h3 -> h4
+	vbic.i32	$D3#lo,#0xfc000000	@ &=0x03ffffff
+	 vadd.i64	$D1,$D1,$T1		@ h0 -> h1
+	 vbic.i32	$D0#lo,#0xfc000000
+
+	vshrn.u64	$T0#lo,$D4,#26
+	vmovn.i64	$D4#lo,$D4
+	 vshr.u64	$T1,$D1,#26
+	 vmovn.i64	$D1#lo,$D1
+	 vadd.i64	$D2,$D2,$T1		@ h1 -> h2
+	vbic.i32	$D4#lo,#0xfc000000
+	 vbic.i32	$D1#lo,#0xfc000000
+
+	vadd.i32	$D0#lo,$D0#lo,$T0#lo
+	vshl.u32	$T0#lo,$T0#lo,#2
+	 vshrn.u64	$T1#lo,$D2,#26
+	 vmovn.i64	$D2#lo,$D2
+	vadd.i32	$D0#lo,$D0#lo,$T0#lo	@ h4 -> h0
+	 vadd.i32	$D3#lo,$D3#lo,$T1#lo	@ h2 -> h3
+	 vbic.i32	$D2#lo,#0xfc000000
+
+	vshr.u32	$T0#lo,$D0#lo,#26
+	vbic.i32	$D0#lo,#0xfc000000
+	 vshr.u32	$T1#lo,$D3#lo,#26
+	 vbic.i32	$D3#lo,#0xfc000000
+	vadd.i32	$D1#lo,$D1#lo,$T0#lo	@ h0 -> h1
+	 vadd.i32	$D4#lo,$D4#lo,$T1#lo	@ h3 -> h4
+
+	subs		$zeros,$zeros,#1
+	beq		.Lsquare_break_neon
+
+	add		$tbl0,$ctx,#(48+0*9*4)
+	add		$tbl1,$ctx,#(48+1*9*4)
+
+	vtrn.32		$R0,$D0#lo		@ r^2:r^1
+	vtrn.32		$R2,$D2#lo
+	vtrn.32		$R3,$D3#lo
+	vtrn.32		$R1,$D1#lo
+	vtrn.32		$R4,$D4#lo
+
+	vshl.u32	$S2,$R2,#2		@ *5
+	vshl.u32	$S3,$R3,#2
+	vshl.u32	$S1,$R1,#2
+	vshl.u32	$S4,$R4,#2
+	vadd.i32	$S2,$S2,$R2
+	vadd.i32	$S1,$S1,$R1
+	vadd.i32	$S3,$S3,$R3
+	vadd.i32	$S4,$S4,$R4
+
+	vst4.32		{${R0}[0],${R1}[0],${S1}[0],${R2}[0]},[$tbl0]!
+	vst4.32		{${R0}[1],${R1}[1],${S1}[1],${R2}[1]},[$tbl1]!
+	vst4.32		{${S2}[0],${R3}[0],${S3}[0],${R4}[0]},[$tbl0]!
+	vst4.32		{${S2}[1],${R3}[1],${S3}[1],${R4}[1]},[$tbl1]!
+	vst1.32		{${S4}[0]},[$tbl0,:32]
+	vst1.32		{${S4}[1]},[$tbl1,:32]
+
+	b		.Lsquare_neon
+
+.align	4
+.Lsquare_break_neon:
+	add		$tbl0,$ctx,#(48+2*4*9)
+	add		$tbl1,$ctx,#(48+3*4*9)
+
+	vmov		$R0,$D0#lo		@ r^4:r^3
+	vshl.u32	$S1,$D1#lo,#2		@ *5
+	vmov		$R1,$D1#lo
+	vshl.u32	$S2,$D2#lo,#2
+	vmov		$R2,$D2#lo
+	vshl.u32	$S3,$D3#lo,#2
+	vmov		$R3,$D3#lo
+	vshl.u32	$S4,$D4#lo,#2
+	vmov		$R4,$D4#lo
+	vadd.i32	$S1,$S1,$D1#lo
+	vadd.i32	$S2,$S2,$D2#lo
+	vadd.i32	$S3,$S3,$D3#lo
+	vadd.i32	$S4,$S4,$D4#lo
+
+	vst4.32		{${R0}[0],${R1}[0],${S1}[0],${R2}[0]},[$tbl0]!
+	vst4.32		{${R0}[1],${R1}[1],${S1}[1],${R2}[1]},[$tbl1]!
+	vst4.32		{${S2}[0],${R3}[0],${S3}[0],${R4}[0]},[$tbl0]!
+	vst4.32		{${S2}[1],${R3}[1],${S3}[1],${R4}[1]},[$tbl1]!
+	vst1.32		{${S4}[0]},[$tbl0]
+	vst1.32		{${S4}[1]},[$tbl1]
+
+	ret				@ bx	lr
+.size	poly1305_init_neon,.-poly1305_init_neon
+
+.type	poly1305_blocks_neon,%function
+.align	5
+poly1305_blocks_neon:
+	ldr	ip,[$ctx,#36]		@ is_base2_26
+	ands	$len,$len,#-16
+	beq	.Lno_data_neon
+
+	cmp	$len,#64
+	bhs	.Lenter_neon
+	tst	ip,ip			@ is_base2_26?
+	beq	.Lpoly1305_blocks
+
+.Lenter_neon:
+	stmdb	sp!,{r4-r7}
+	vstmdb	sp!,{d8-d15}		@ ABI specification says so
+
+	tst	ip,ip			@ is_base2_26?
+	bne	.Lbase2_26_neon
+
+	stmdb	sp!,{r1-r3,lr}
+	bl	poly1305_init_neon
+
+	ldr	r4,[$ctx,#0]		@ load hash value base 2^32
+	ldr	r5,[$ctx,#4]
+	ldr	r6,[$ctx,#8]
+	ldr	r7,[$ctx,#12]
+	ldr	ip,[$ctx,#16]
+
+	and	r2,r4,#0x03ffffff	@ base 2^32 -> base 2^26
+	mov	r3,r4,lsr#26
+	 veor	$D0#lo,$D0#lo,$D0#lo
+	mov	r4,r5,lsr#20
+	orr	r3,r3,r5,lsl#6
+	 veor	$D1#lo,$D1#lo,$D1#lo
+	mov	r5,r6,lsr#14
+	orr	r4,r4,r6,lsl#12
+	 veor	$D2#lo,$D2#lo,$D2#lo
+	mov	r6,r7,lsr#8
+	orr	r5,r5,r7,lsl#18
+	 veor	$D3#lo,$D3#lo,$D3#lo
+	and	r3,r3,#0x03ffffff
+	orr	r6,r6,ip,lsl#24
+	 veor	$D4#lo,$D4#lo,$D4#lo
+	and	r4,r4,#0x03ffffff
+	mov	r1,#1
+	and	r5,r5,#0x03ffffff
+	str	r1,[$ctx,#36]		@ is_base2_26
+
+	vmov.32	$D0#lo[0],r2
+	vmov.32	$D1#lo[0],r3
+	vmov.32	$D2#lo[0],r4
+	vmov.32	$D3#lo[0],r5
+	vmov.32	$D4#lo[0],r6
+	adr	$zeros,.Lzeros
+
+	ldmia	sp!,{r1-r3,lr}
+	b	.Lbase2_32_neon
+
+.align	4
+.Lbase2_26_neon:
+	@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+	@ load hash value
+
+	veor		$D0#lo,$D0#lo,$D0#lo
+	veor		$D1#lo,$D1#lo,$D1#lo
+	veor		$D2#lo,$D2#lo,$D2#lo
+	veor		$D3#lo,$D3#lo,$D3#lo
+	veor		$D4#lo,$D4#lo,$D4#lo
+	vld4.32		{$D0#lo[0],$D1#lo[0],$D2#lo[0],$D3#lo[0]},[$ctx]!
+	adr		$zeros,.Lzeros
+	vld1.32		{$D4#lo[0]},[$ctx]
+	sub		$ctx,$ctx,#16		@ rewind
+
+.Lbase2_32_neon:
+	add		$in2,$inp,#32
+	mov		$padbit,$padbit,lsl#24
+	tst		$len,#31
+	beq		.Leven
+
+	vld4.32		{$H0#lo[0],$H1#lo[0],$H2#lo[0],$H3#lo[0]},[$inp]!
+	vmov.32		$H4#lo[0],$padbit
+	sub		$len,$len,#16
+	add		$in2,$inp,#32
+
+# ifdef	__ARMEB__
+	vrev32.8	$H0,$H0
+	vrev32.8	$H3,$H3
+	vrev32.8	$H1,$H1
+	vrev32.8	$H2,$H2
+# endif
+	vsri.u32	$H4#lo,$H3#lo,#8	@ base 2^32 -> base 2^26
+	vshl.u32	$H3#lo,$H3#lo,#18
+
+	vsri.u32	$H3#lo,$H2#lo,#14
+	vshl.u32	$H2#lo,$H2#lo,#12
+	vadd.i32	$H4#hi,$H4#lo,$D4#lo	@ add hash value and move to #hi
+
+	vbic.i32	$H3#lo,#0xfc000000
+	vsri.u32	$H2#lo,$H1#lo,#20
+	vshl.u32	$H1#lo,$H1#lo,#6
+
+	vbic.i32	$H2#lo,#0xfc000000
+	vsri.u32	$H1#lo,$H0#lo,#26
+	vadd.i32	$H3#hi,$H3#lo,$D3#lo
+
+	vbic.i32	$H0#lo,#0xfc000000
+	vbic.i32	$H1#lo,#0xfc000000
+	vadd.i32	$H2#hi,$H2#lo,$D2#lo
+
+	vadd.i32	$H0#hi,$H0#lo,$D0#lo
+	vadd.i32	$H1#hi,$H1#lo,$D1#lo
+
+	mov		$tbl1,$zeros
+	add		$tbl0,$ctx,#48
+
+	cmp		$len,$len
+	b		.Long_tail
+
+.align	4
+.Leven:
+	subs		$len,$len,#64
+	it		lo
+	movlo		$in2,$zeros
+
+	vmov.i32	$H4,#1<<24		@ padbit, yes, always
+	vld4.32		{$H0#lo,$H1#lo,$H2#lo,$H3#lo},[$inp]	@ inp[0:1]
+	add		$inp,$inp,#64
+	vld4.32		{$H0#hi,$H1#hi,$H2#hi,$H3#hi},[$in2]	@ inp[2:3] (or 0)
+	add		$in2,$in2,#64
+	itt		hi
+	addhi		$tbl1,$ctx,#(48+1*9*4)
+	addhi		$tbl0,$ctx,#(48+3*9*4)
+
+# ifdef	__ARMEB__
+	vrev32.8	$H0,$H0
+	vrev32.8	$H3,$H3
+	vrev32.8	$H1,$H1
+	vrev32.8	$H2,$H2
+# endif
+	vsri.u32	$H4,$H3,#8		@ base 2^32 -> base 2^26
+	vshl.u32	$H3,$H3,#18
+
+	vsri.u32	$H3,$H2,#14
+	vshl.u32	$H2,$H2,#12
+
+	vbic.i32	$H3,#0xfc000000
+	vsri.u32	$H2,$H1,#20
+	vshl.u32	$H1,$H1,#6
+
+	vbic.i32	$H2,#0xfc000000
+	vsri.u32	$H1,$H0,#26
+
+	vbic.i32	$H0,#0xfc000000
+	vbic.i32	$H1,#0xfc000000
+
+	bls		.Lskip_loop
+
+	vld4.32		{${R0}[1],${R1}[1],${S1}[1],${R2}[1]},[$tbl1]!	@ load r^2
+	vld4.32		{${R0}[0],${R1}[0],${S1}[0],${R2}[0]},[$tbl0]!	@ load r^4
+	vld4.32		{${S2}[1],${R3}[1],${S3}[1],${R4}[1]},[$tbl1]!
+	vld4.32		{${S2}[0],${R3}[0],${S3}[0],${R4}[0]},[$tbl0]!
+	b		.Loop_neon
+
+.align	5
+.Loop_neon:
+	@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+	@ ((inp[0]*r^4+inp[2]*r^2+inp[4])*r^4+inp[6]*r^2
+	@ ((inp[1]*r^4+inp[3]*r^2+inp[5])*r^3+inp[7]*r
+	@   \___________________/
+	@ ((inp[0]*r^4+inp[2]*r^2+inp[4])*r^4+inp[6]*r^2+inp[8])*r^2
+	@ ((inp[1]*r^4+inp[3]*r^2+inp[5])*r^4+inp[7]*r^2+inp[9])*r
+	@   \___________________/ \____________________/
+	@
+	@ Note that we start with inp[2:3]*r^2. This is because it
+	@ doesn't depend on reduction in previous iteration.
+	@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+	@ d4 = h4*r0 + h3*r1   + h2*r2   + h1*r3   + h0*r4
+	@ d3 = h3*r0 + h2*r1   + h1*r2   + h0*r3   + h4*5*r4
+	@ d2 = h2*r0 + h1*r1   + h0*r2   + h4*5*r3 + h3*5*r4
+	@ d1 = h1*r0 + h0*r1   + h4*5*r2 + h3*5*r3 + h2*5*r4
+	@ d0 = h0*r0 + h4*5*r1 + h3*5*r2 + h2*5*r3 + h1*5*r4
+
+	@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+	@ inp[2:3]*r^2
+
+	vadd.i32	$H2#lo,$H2#lo,$D2#lo	@ accumulate inp[0:1]
+	vmull.u32	$D2,$H2#hi,${R0}[1]
+	vadd.i32	$H0#lo,$H0#lo,$D0#lo
+	vmull.u32	$D0,$H0#hi,${R0}[1]
+	vadd.i32	$H3#lo,$H3#lo,$D3#lo
+	vmull.u32	$D3,$H3#hi,${R0}[1]
+	vmlal.u32	$D2,$H1#hi,${R1}[1]
+	vadd.i32	$H1#lo,$H1#lo,$D1#lo
+	vmull.u32	$D1,$H1#hi,${R0}[1]
+
+	vadd.i32	$H4#lo,$H4#lo,$D4#lo
+	vmull.u32	$D4,$H4#hi,${R0}[1]
+	subs		$len,$len,#64
+	vmlal.u32	$D0,$H4#hi,${S1}[1]
+	it		lo
+	movlo		$in2,$zeros
+	vmlal.u32	$D3,$H2#hi,${R1}[1]
+	vld1.32		${S4}[1],[$tbl1,:32]
+	vmlal.u32	$D1,$H0#hi,${R1}[1]
+	vmlal.u32	$D4,$H3#hi,${R1}[1]
+
+	vmlal.u32	$D0,$H3#hi,${S2}[1]
+	vmlal.u32	$D3,$H1#hi,${R2}[1]
+	vmlal.u32	$D4,$H2#hi,${R2}[1]
+	vmlal.u32	$D1,$H4#hi,${S2}[1]
+	vmlal.u32	$D2,$H0#hi,${R2}[1]
+
+	vmlal.u32	$D3,$H0#hi,${R3}[1]
+	vmlal.u32	$D0,$H2#hi,${S3}[1]
+	vmlal.u32	$D4,$H1#hi,${R3}[1]
+	vmlal.u32	$D1,$H3#hi,${S3}[1]
+	vmlal.u32	$D2,$H4#hi,${S3}[1]
+
+	vmlal.u32	$D3,$H4#hi,${S4}[1]
+	vmlal.u32	$D0,$H1#hi,${S4}[1]
+	vmlal.u32	$D4,$H0#hi,${R4}[1]
+	vmlal.u32	$D1,$H2#hi,${S4}[1]
+	vmlal.u32	$D2,$H3#hi,${S4}[1]
+
+	vld4.32		{$H0#hi,$H1#hi,$H2#hi,$H3#hi},[$in2]	@ inp[2:3] (or 0)
+	add		$in2,$in2,#64
+
+	@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+	@ (hash+inp[0:1])*r^4 and accumulate
+
+	vmlal.u32	$D3,$H3#lo,${R0}[0]
+	vmlal.u32	$D0,$H0#lo,${R0}[0]
+	vmlal.u32	$D4,$H4#lo,${R0}[0]
+	vmlal.u32	$D1,$H1#lo,${R0}[0]
+	vmlal.u32	$D2,$H2#lo,${R0}[0]
+	vld1.32		${S4}[0],[$tbl0,:32]
+
+	vmlal.u32	$D3,$H2#lo,${R1}[0]
+	vmlal.u32	$D0,$H4#lo,${S1}[0]
+	vmlal.u32	$D4,$H3#lo,${R1}[0]
+	vmlal.u32	$D1,$H0#lo,${R1}[0]
+	vmlal.u32	$D2,$H1#lo,${R1}[0]
+
+	vmlal.u32	$D3,$H1#lo,${R2}[0]
+	vmlal.u32	$D0,$H3#lo,${S2}[0]
+	vmlal.u32	$D4,$H2#lo,${R2}[0]
+	vmlal.u32	$D1,$H4#lo,${S2}[0]
+	vmlal.u32	$D2,$H0#lo,${R2}[0]
+
+	vmlal.u32	$D3,$H0#lo,${R3}[0]
+	vmlal.u32	$D0,$H2#lo,${S3}[0]
+	vmlal.u32	$D4,$H1#lo,${R3}[0]
+	vmlal.u32	$D1,$H3#lo,${S3}[0]
+	vmlal.u32	$D3,$H4#lo,${S4}[0]
+
+	vmlal.u32	$D2,$H4#lo,${S3}[0]
+	vmlal.u32	$D0,$H1#lo,${S4}[0]
+	vmlal.u32	$D4,$H0#lo,${R4}[0]
+	vmov.i32	$H4,#1<<24		@ padbit, yes, always
+	vmlal.u32	$D1,$H2#lo,${S4}[0]
+	vmlal.u32	$D2,$H3#lo,${S4}[0]
+
+	vld4.32		{$H0#lo,$H1#lo,$H2#lo,$H3#lo},[$inp]	@ inp[0:1]
+	add		$inp,$inp,#64
+# ifdef	__ARMEB__
+	vrev32.8	$H0,$H0
+	vrev32.8	$H1,$H1
+	vrev32.8	$H2,$H2
+	vrev32.8	$H3,$H3
+# endif
+
+	@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+	@ lazy reduction interleaved with base 2^32 -> base 2^26 of
+	@ inp[0:3] previously loaded to $H0-$H3 and smashed to $H0-$H4.
+
+	vshr.u64	$T0,$D3,#26
+	vmovn.i64	$D3#lo,$D3
+	 vshr.u64	$T1,$D0,#26
+	 vmovn.i64	$D0#lo,$D0
+	vadd.i64	$D4,$D4,$T0		@ h3 -> h4
+	vbic.i32	$D3#lo,#0xfc000000
+	  vsri.u32	$H4,$H3,#8		@ base 2^32 -> base 2^26
+	 vadd.i64	$D1,$D1,$T1		@ h0 -> h1
+	  vshl.u32	$H3,$H3,#18
+	 vbic.i32	$D0#lo,#0xfc000000
+
+	vshrn.u64	$T0#lo,$D4,#26
+	vmovn.i64	$D4#lo,$D4
+	 vshr.u64	$T1,$D1,#26
+	 vmovn.i64	$D1#lo,$D1
+	 vadd.i64	$D2,$D2,$T1		@ h1 -> h2
+	  vsri.u32	$H3,$H2,#14
+	vbic.i32	$D4#lo,#0xfc000000
+	  vshl.u32	$H2,$H2,#12
+	 vbic.i32	$D1#lo,#0xfc000000
+
+	vadd.i32	$D0#lo,$D0#lo,$T0#lo
+	vshl.u32	$T0#lo,$T0#lo,#2
+	  vbic.i32	$H3,#0xfc000000
+	 vshrn.u64	$T1#lo,$D2,#26
+	 vmovn.i64	$D2#lo,$D2
+	vaddl.u32	$D0,$D0#lo,$T0#lo	@ h4 -> h0 [widen for a sec]
+	  vsri.u32	$H2,$H1,#20
+	 vadd.i32	$D3#lo,$D3#lo,$T1#lo	@ h2 -> h3
+	  vshl.u32	$H1,$H1,#6
+	 vbic.i32	$D2#lo,#0xfc000000
+	  vbic.i32	$H2,#0xfc000000
+
+	vshrn.u64	$T0#lo,$D0,#26		@ re-narrow
+	vmovn.i64	$D0#lo,$D0
+	  vsri.u32	$H1,$H0,#26
+	  vbic.i32	$H0,#0xfc000000
+	 vshr.u32	$T1#lo,$D3#lo,#26
+	 vbic.i32	$D3#lo,#0xfc000000
+	vbic.i32	$D0#lo,#0xfc000000
+	vadd.i32	$D1#lo,$D1#lo,$T0#lo	@ h0 -> h1
+	 vadd.i32	$D4#lo,$D4#lo,$T1#lo	@ h3 -> h4
+	  vbic.i32	$H1,#0xfc000000
+
+	bhi		.Loop_neon
+
+.Lskip_loop:
+	@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+	@ multiply (inp[0:1]+hash) or inp[2:3] by r^2:r^1
+
+	add		$tbl1,$ctx,#(48+0*9*4)
+	add		$tbl0,$ctx,#(48+1*9*4)
+	adds		$len,$len,#32
+	it		ne
+	movne		$len,#0
+	bne		.Long_tail
+
+	vadd.i32	$H2#hi,$H2#lo,$D2#lo	@ add hash value and move to #hi
+	vadd.i32	$H0#hi,$H0#lo,$D0#lo
+	vadd.i32	$H3#hi,$H3#lo,$D3#lo
+	vadd.i32	$H1#hi,$H1#lo,$D1#lo
+	vadd.i32	$H4#hi,$H4#lo,$D4#lo
+
+.Long_tail:
+	vld4.32		{${R0}[1],${R1}[1],${S1}[1],${R2}[1]},[$tbl1]!	@ load r^1
+	vld4.32		{${R0}[0],${R1}[0],${S1}[0],${R2}[0]},[$tbl0]!	@ load r^2
+
+	vadd.i32	$H2#lo,$H2#lo,$D2#lo	@ can be redundant
+	vmull.u32	$D2,$H2#hi,$R0
+	vadd.i32	$H0#lo,$H0#lo,$D0#lo
+	vmull.u32	$D0,$H0#hi,$R0
+	vadd.i32	$H3#lo,$H3#lo,$D3#lo
+	vmull.u32	$D3,$H3#hi,$R0
+	vadd.i32	$H1#lo,$H1#lo,$D1#lo
+	vmull.u32	$D1,$H1#hi,$R0
+	vadd.i32	$H4#lo,$H4#lo,$D4#lo
+	vmull.u32	$D4,$H4#hi,$R0
+
+	vmlal.u32	$D0,$H4#hi,$S1
+	vld4.32		{${S2}[1],${R3}[1],${S3}[1],${R4}[1]},[$tbl1]!
+	vmlal.u32	$D3,$H2#hi,$R1
+	vld4.32		{${S2}[0],${R3}[0],${S3}[0],${R4}[0]},[$tbl0]!
+	vmlal.u32	$D1,$H0#hi,$R1
+	vmlal.u32	$D4,$H3#hi,$R1
+	vmlal.u32	$D2,$H1#hi,$R1
+
+	vmlal.u32	$D3,$H1#hi,$R2
+	vld1.32		${S4}[1],[$tbl1,:32]
+	vmlal.u32	$D0,$H3#hi,$S2
+	vld1.32		${S4}[0],[$tbl0,:32]
+	vmlal.u32	$D4,$H2#hi,$R2
+	vmlal.u32	$D1,$H4#hi,$S2
+	vmlal.u32	$D2,$H0#hi,$R2
+
+	vmlal.u32	$D3,$H0#hi,$R3
+	 it		ne
+	 addne		$tbl1,$ctx,#(48+2*9*4)
+	vmlal.u32	$D0,$H2#hi,$S3
+	 it		ne
+	 addne		$tbl0,$ctx,#(48+3*9*4)
+	vmlal.u32	$D4,$H1#hi,$R3
+	vmlal.u32	$D1,$H3#hi,$S3
+	vmlal.u32	$D2,$H4#hi,$S3
+
+	vmlal.u32	$D3,$H4#hi,$S4
+	 vorn		$MASK,$MASK,$MASK	@ all-ones, can be redundant
+	vmlal.u32	$D0,$H1#hi,$S4
+	 vshr.u64	$MASK,$MASK,#38
+	vmlal.u32	$D4,$H0#hi,$R4
+	vmlal.u32	$D1,$H2#hi,$S4
+	vmlal.u32	$D2,$H3#hi,$S4
+
+	beq		.Lshort_tail
+
+	@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+	@ (hash+inp[0:1])*r^4:r^3 and accumulate
+
+	vld4.32		{${R0}[1],${R1}[1],${S1}[1],${R2}[1]},[$tbl1]!	@ load r^3
+	vld4.32		{${R0}[0],${R1}[0],${S1}[0],${R2}[0]},[$tbl0]!	@ load r^4
+
+	vmlal.u32	$D2,$H2#lo,$R0
+	vmlal.u32	$D0,$H0#lo,$R0
+	vmlal.u32	$D3,$H3#lo,$R0
+	vmlal.u32	$D1,$H1#lo,$R0
+	vmlal.u32	$D4,$H4#lo,$R0
+
+	vmlal.u32	$D0,$H4#lo,$S1
+	vld4.32		{${S2}[1],${R3}[1],${S3}[1],${R4}[1]},[$tbl1]!
+	vmlal.u32	$D3,$H2#lo,$R1
+	vld4.32		{${S2}[0],${R3}[0],${S3}[0],${R4}[0]},[$tbl0]!
+	vmlal.u32	$D1,$H0#lo,$R1
+	vmlal.u32	$D4,$H3#lo,$R1
+	vmlal.u32	$D2,$H1#lo,$R1
+
+	vmlal.u32	$D3,$H1#lo,$R2
+	vld1.32		${S4}[1],[$tbl1,:32]
+	vmlal.u32	$D0,$H3#lo,$S2
+	vld1.32		${S4}[0],[$tbl0,:32]
+	vmlal.u32	$D4,$H2#lo,$R2
+	vmlal.u32	$D1,$H4#lo,$S2
+	vmlal.u32	$D2,$H0#lo,$R2
+
+	vmlal.u32	$D3,$H0#lo,$R3
+	vmlal.u32	$D0,$H2#lo,$S3
+	vmlal.u32	$D4,$H1#lo,$R3
+	vmlal.u32	$D1,$H3#lo,$S3
+	vmlal.u32	$D2,$H4#lo,$S3
+
+	vmlal.u32	$D3,$H4#lo,$S4
+	 vorn		$MASK,$MASK,$MASK	@ all-ones
+	vmlal.u32	$D0,$H1#lo,$S4
+	 vshr.u64	$MASK,$MASK,#38
+	vmlal.u32	$D4,$H0#lo,$R4
+	vmlal.u32	$D1,$H2#lo,$S4
+	vmlal.u32	$D2,$H3#lo,$S4
+
+.Lshort_tail:
+	@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+	@ horizontal addition
+
+	vadd.i64	$D3#lo,$D3#lo,$D3#hi
+	vadd.i64	$D0#lo,$D0#lo,$D0#hi
+	vadd.i64	$D4#lo,$D4#lo,$D4#hi
+	vadd.i64	$D1#lo,$D1#lo,$D1#hi
+	vadd.i64	$D2#lo,$D2#lo,$D2#hi
+
+	@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+	@ lazy reduction, but without narrowing
+
+	vshr.u64	$T0,$D3,#26
+	vand.i64	$D3,$D3,$MASK
+	 vshr.u64	$T1,$D0,#26
+	 vand.i64	$D0,$D0,$MASK
+	vadd.i64	$D4,$D4,$T0		@ h3 -> h4
+	 vadd.i64	$D1,$D1,$T1		@ h0 -> h1
+
+	vshr.u64	$T0,$D4,#26
+	vand.i64	$D4,$D4,$MASK
+	 vshr.u64	$T1,$D1,#26
+	 vand.i64	$D1,$D1,$MASK
+	 vadd.i64	$D2,$D2,$T1		@ h1 -> h2
+
+	vadd.i64	$D0,$D0,$T0
+	vshl.u64	$T0,$T0,#2
+	 vshr.u64	$T1,$D2,#26
+	 vand.i64	$D2,$D2,$MASK
+	vadd.i64	$D0,$D0,$T0		@ h4 -> h0
+	 vadd.i64	$D3,$D3,$T1		@ h2 -> h3
+
+	vshr.u64	$T0,$D0,#26
+	vand.i64	$D0,$D0,$MASK
+	 vshr.u64	$T1,$D3,#26
+	 vand.i64	$D3,$D3,$MASK
+	vadd.i64	$D1,$D1,$T0		@ h0 -> h1
+	 vadd.i64	$D4,$D4,$T1		@ h3 -> h4
+
+	cmp		$len,#0
+	bne		.Leven
+
+	@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+	@ store hash value
+
+	vst4.32		{$D0#lo[0],$D1#lo[0],$D2#lo[0],$D3#lo[0]},[$ctx]!
+	vst1.32		{$D4#lo[0]},[$ctx]
+
+	vldmia	sp!,{d8-d15}			@ epilogue
+	ldmia	sp!,{r4-r7}
+.Lno_data_neon:
+	ret					@ bx	lr
+.size	poly1305_blocks_neon,.-poly1305_blocks_neon
+
+.type	poly1305_emit_neon,%function
+.align	5
+poly1305_emit_neon:
+	ldr	ip,[$ctx,#36]		@ is_base2_26
+
+	stmdb	sp!,{r4-r11}
+
+	tst	ip,ip
+	beq	.Lpoly1305_emit_enter
+
+	ldmia	$ctx,{$h0-$h4}
+	eor	$g0,$g0,$g0
+
+	adds	$h0,$h0,$h1,lsl#26	@ base 2^26 -> base 2^32
+	mov	$h1,$h1,lsr#6
+	adcs	$h1,$h1,$h2,lsl#20
+	mov	$h2,$h2,lsr#12
+	adcs	$h2,$h2,$h3,lsl#14
+	mov	$h3,$h3,lsr#18
+	adcs	$h3,$h3,$h4,lsl#8
+	adc	$h4,$g0,$h4,lsr#24	@ can be partially reduced ...
+
+	and	$g0,$h4,#-4		@ ... so reduce
+	and	$h4,$h3,#3
+	add	$g0,$g0,$g0,lsr#2	@ *= 5
+	adds	$h0,$h0,$g0
+	adcs	$h1,$h1,#0
+	adcs	$h2,$h2,#0
+	adcs	$h3,$h3,#0
+	adc	$h4,$h4,#0
+
+	adds	$g0,$h0,#5		@ compare to modulus
+	adcs	$g1,$h1,#0
+	adcs	$g2,$h2,#0
+	adcs	$g3,$h3,#0
+	adc	$g4,$h4,#0
+	tst	$g4,#4			@ did it carry/borrow?
+
+	it	ne
+	movne	$h0,$g0
+	ldr	$g0,[$nonce,#0]
+	it	ne
+	movne	$h1,$g1
+	ldr	$g1,[$nonce,#4]
+	it	ne
+	movne	$h2,$g2
+	ldr	$g2,[$nonce,#8]
+	it	ne
+	movne	$h3,$g3
+	ldr	$g3,[$nonce,#12]
+
+	adds	$h0,$h0,$g0		@ accumulate nonce
+	adcs	$h1,$h1,$g1
+	adcs	$h2,$h2,$g2
+	adc	$h3,$h3,$g3
+
+# ifdef __ARMEB__
+	rev	$h0,$h0
+	rev	$h1,$h1
+	rev	$h2,$h2
+	rev	$h3,$h3
+# endif
+	str	$h0,[$mac,#0]		@ store the result
+	str	$h1,[$mac,#4]
+	str	$h2,[$mac,#8]
+	str	$h3,[$mac,#12]
+
+	ldmia	sp!,{r4-r11}
+	ret				@ bx	lr
+.size	poly1305_emit_neon,.-poly1305_emit_neon
+
+.align	5
+.Lzeros:
+.long	0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
+.LOPENSSL_armcap:
+.word	OPENSSL_armcap_P-.Lpoly1305_init
+#endif
+___
+}	}
+$code.=<<___;
+.asciz	"Poly1305 for ARMv4/NEON, CRYPTOGAMS by <appro\@openssl.org>"
+.align	2
+#if	__ARM_MAX_ARCH__>=7
+.comm   OPENSSL_armcap_P,4,4
+#endif
+___
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/geo;
+
+	s/\bq([0-9]+)#(lo|hi)/sprintf "d%d",2*$1+($2 eq "hi")/geo	or
+	s/\bret\b/bx	lr/go						or
+	s/\bbx\s+lr\b/.word\t0xe12fff1e/go;	# make it possible to compile with -march=armv4
+
+	print $_,"\n";
+}
+close STDOUT; # enforce flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-armv8.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-armv8.pl
new file mode 100755
index 000000000..6c6c9bb05
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-armv8.pl
@@ -0,0 +1,946 @@
+#! /usr/bin/env perl
+# Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# This module implements Poly1305 hash for ARMv8.
+#
+# June 2015
+#
+# Numbers are cycles per processed byte with poly1305_blocks alone.
+#
+#		IALU/gcc-4.9	NEON
+#
+# Apple A7	1.86/+5%	0.72
+# Cortex-A53	2.69/+58%	1.47
+# Cortex-A57	2.70/+7%	1.14
+# Denver	1.64/+50%	1.18(*)
+# X-Gene	2.13/+68%	2.27
+# Mongoose	1.77/+75%	1.12
+# Kryo		2.70/+55%	1.13
+#
+# (*)	estimate based on resources availability is less than 1.0,
+#	i.e. measured result is worse than expected, presumably binary
+#	translator is not almighty;
+
+$flavour=shift;
+$output=shift;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+die "can't locate arm-xlate.pl";
+
+open OUT,"| \"$^X\" $xlate $flavour $output";
+*STDOUT=*OUT;
+
+my ($ctx,$inp,$len,$padbit) = map("x$_",(0..3));
+my ($mac,$nonce)=($inp,$len);
+
+my ($h0,$h1,$h2,$r0,$r1,$s1,$t0,$t1,$d0,$d1,$d2) = map("x$_",(4..14));
+
+$code.=<<___;
+#include "arm_arch.h"
+
+.text
+
+// forward "declarations" are required for Apple
+.extern	OPENSSL_armcap_P
+.globl	poly1305_blocks
+.globl	poly1305_emit
+
+.globl	poly1305_init
+.type	poly1305_init,%function
+.align	5
+poly1305_init:
+	cmp	$inp,xzr
+	stp	xzr,xzr,[$ctx]		// zero hash value
+	stp	xzr,xzr,[$ctx,#16]	// [along with is_base2_26]
+
+	csel	x0,xzr,x0,eq
+	b.eq	.Lno_key
+
+#ifdef	__ILP32__
+	ldrsw	$t1,.LOPENSSL_armcap_P
+#else
+	ldr	$t1,.LOPENSSL_armcap_P
+#endif
+	adr	$t0,.LOPENSSL_armcap_P
+
+	ldp	$r0,$r1,[$inp]		// load key
+	mov	$s1,#0xfffffffc0fffffff
+	movk	$s1,#0x0fff,lsl#48
+	ldr	w17,[$t0,$t1]
+#ifdef	__ARMEB__
+	rev	$r0,$r0			// flip bytes
+	rev	$r1,$r1
+#endif
+	and	$r0,$r0,$s1		// &=0ffffffc0fffffff
+	and	$s1,$s1,#-4
+	and	$r1,$r1,$s1		// &=0ffffffc0ffffffc
+	stp	$r0,$r1,[$ctx,#32]	// save key value
+
+	tst	w17,#ARMV7_NEON
+
+	adr	$d0,poly1305_blocks
+	adr	$r0,poly1305_blocks_neon
+	adr	$d1,poly1305_emit
+	adr	$r1,poly1305_emit_neon
+
+	csel	$d0,$d0,$r0,eq
+	csel	$d1,$d1,$r1,eq
+
+#ifdef	__ILP32__
+	stp	w12,w13,[$len]
+#else
+	stp	$d0,$d1,[$len]
+#endif
+
+	mov	x0,#1
+.Lno_key:
+	ret
+.size	poly1305_init,.-poly1305_init
+
+.type	poly1305_blocks,%function
+.align	5
+poly1305_blocks:
+	ands	$len,$len,#-16
+	b.eq	.Lno_data
+
+	ldp	$h0,$h1,[$ctx]		// load hash value
+	ldp	$r0,$r1,[$ctx,#32]	// load key value
+	ldr	$h2,[$ctx,#16]
+	add	$s1,$r1,$r1,lsr#2	// s1 = r1 + (r1 >> 2)
+	b	.Loop
+
+.align	5
+.Loop:
+	ldp	$t0,$t1,[$inp],#16	// load input
+	sub	$len,$len,#16
+#ifdef	__ARMEB__
+	rev	$t0,$t0
+	rev	$t1,$t1
+#endif
+	adds	$h0,$h0,$t0		// accumulate input
+	adcs	$h1,$h1,$t1
+
+	mul	$d0,$h0,$r0		// h0*r0
+	adc	$h2,$h2,$padbit
+	umulh	$d1,$h0,$r0
+
+	mul	$t0,$h1,$s1		// h1*5*r1
+	umulh	$t1,$h1,$s1
+
+	adds	$d0,$d0,$t0
+	mul	$t0,$h0,$r1		// h0*r1
+	adc	$d1,$d1,$t1
+	umulh	$d2,$h0,$r1
+
+	adds	$d1,$d1,$t0
+	mul	$t0,$h1,$r0		// h1*r0
+	adc	$d2,$d2,xzr
+	umulh	$t1,$h1,$r0
+
+	adds	$d1,$d1,$t0
+	mul	$t0,$h2,$s1		// h2*5*r1
+	adc	$d2,$d2,$t1
+	mul	$t1,$h2,$r0		// h2*r0
+
+	adds	$d1,$d1,$t0
+	adc	$d2,$d2,$t1
+
+	and	$t0,$d2,#-4		// final reduction
+	and	$h2,$d2,#3
+	add	$t0,$t0,$d2,lsr#2
+	adds	$h0,$d0,$t0
+	adcs	$h1,$d1,xzr
+	adc	$h2,$h2,xzr
+
+	cbnz	$len,.Loop
+
+	stp	$h0,$h1,[$ctx]		// store hash value
+	str	$h2,[$ctx,#16]
+
+.Lno_data:
+	ret
+.size	poly1305_blocks,.-poly1305_blocks
+
+.type	poly1305_emit,%function
+.align	5
+poly1305_emit:
+	ldp	$h0,$h1,[$ctx]		// load hash base 2^64
+	ldr	$h2,[$ctx,#16]
+	ldp	$t0,$t1,[$nonce]	// load nonce
+
+	adds	$d0,$h0,#5		// compare to modulus
+	adcs	$d1,$h1,xzr
+	adc	$d2,$h2,xzr
+
+	tst	$d2,#-4			// see if it's carried/borrowed
+
+	csel	$h0,$h0,$d0,eq
+	csel	$h1,$h1,$d1,eq
+
+#ifdef	__ARMEB__
+	ror	$t0,$t0,#32		// flip nonce words
+	ror	$t1,$t1,#32
+#endif
+	adds	$h0,$h0,$t0		// accumulate nonce
+	adc	$h1,$h1,$t1
+#ifdef	__ARMEB__
+	rev	$h0,$h0			// flip output bytes
+	rev	$h1,$h1
+#endif
+	stp	$h0,$h1,[$mac]		// write result
+
+	ret
+.size	poly1305_emit,.-poly1305_emit
+___
+my ($R0,$R1,$S1,$R2,$S2,$R3,$S3,$R4,$S4) = map("v$_.4s",(0..8));
+my ($IN01_0,$IN01_1,$IN01_2,$IN01_3,$IN01_4) = map("v$_.2s",(9..13));
+my ($IN23_0,$IN23_1,$IN23_2,$IN23_3,$IN23_4) = map("v$_.2s",(14..18));
+my ($ACC0,$ACC1,$ACC2,$ACC3,$ACC4) = map("v$_.2d",(19..23));
+my ($H0,$H1,$H2,$H3,$H4) = map("v$_.2s",(24..28));
+my ($T0,$T1,$MASK) = map("v$_",(29..31));
+
+my ($in2,$zeros)=("x16","x17");
+my $is_base2_26 = $zeros;		# borrow
+
+$code.=<<___;
+.type	poly1305_mult,%function
+.align	5
+poly1305_mult:
+	mul	$d0,$h0,$r0		// h0*r0
+	umulh	$d1,$h0,$r0
+
+	mul	$t0,$h1,$s1		// h1*5*r1
+	umulh	$t1,$h1,$s1
+
+	adds	$d0,$d0,$t0
+	mul	$t0,$h0,$r1		// h0*r1
+	adc	$d1,$d1,$t1
+	umulh	$d2,$h0,$r1
+
+	adds	$d1,$d1,$t0
+	mul	$t0,$h1,$r0		// h1*r0
+	adc	$d2,$d2,xzr
+	umulh	$t1,$h1,$r0
+
+	adds	$d1,$d1,$t0
+	mul	$t0,$h2,$s1		// h2*5*r1
+	adc	$d2,$d2,$t1
+	mul	$t1,$h2,$r0		// h2*r0
+
+	adds	$d1,$d1,$t0
+	adc	$d2,$d2,$t1
+
+	and	$t0,$d2,#-4		// final reduction
+	and	$h2,$d2,#3
+	add	$t0,$t0,$d2,lsr#2
+	adds	$h0,$d0,$t0
+	adcs	$h1,$d1,xzr
+	adc	$h2,$h2,xzr
+
+	ret
+.size	poly1305_mult,.-poly1305_mult
+
+.type	poly1305_splat,%function
+.align	5
+poly1305_splat:
+	and	x12,$h0,#0x03ffffff	// base 2^64 -> base 2^26
+	ubfx	x13,$h0,#26,#26
+	extr	x14,$h1,$h0,#52
+	and	x14,x14,#0x03ffffff
+	ubfx	x15,$h1,#14,#26
+	extr	x16,$h2,$h1,#40
+
+	str	w12,[$ctx,#16*0]	// r0
+	add	w12,w13,w13,lsl#2	// r1*5
+	str	w13,[$ctx,#16*1]	// r1
+	add	w13,w14,w14,lsl#2	// r2*5
+	str	w12,[$ctx,#16*2]	// s1
+	str	w14,[$ctx,#16*3]	// r2
+	add	w14,w15,w15,lsl#2	// r3*5
+	str	w13,[$ctx,#16*4]	// s2
+	str	w15,[$ctx,#16*5]	// r3
+	add	w15,w16,w16,lsl#2	// r4*5
+	str	w14,[$ctx,#16*6]	// s3
+	str	w16,[$ctx,#16*7]	// r4
+	str	w15,[$ctx,#16*8]	// s4
+
+	ret
+.size	poly1305_splat,.-poly1305_splat
+
+.type	poly1305_blocks_neon,%function
+.align	5
+poly1305_blocks_neon:
+	ldr	$is_base2_26,[$ctx,#24]
+	cmp	$len,#128
+	b.hs	.Lblocks_neon
+	cbz	$is_base2_26,poly1305_blocks
+
+.Lblocks_neon:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-80]!
+	add	x29,sp,#0
+
+	ands	$len,$len,#-16
+	b.eq	.Lno_data_neon
+
+	cbz	$is_base2_26,.Lbase2_64_neon
+
+	ldp	w10,w11,[$ctx]		// load hash value base 2^26
+	ldp	w12,w13,[$ctx,#8]
+	ldr	w14,[$ctx,#16]
+
+	tst	$len,#31
+	b.eq	.Leven_neon
+
+	ldp	$r0,$r1,[$ctx,#32]	// load key value
+
+	add	$h0,x10,x11,lsl#26	// base 2^26 -> base 2^64
+	lsr	$h1,x12,#12
+	adds	$h0,$h0,x12,lsl#52
+	add	$h1,$h1,x13,lsl#14
+	adc	$h1,$h1,xzr
+	lsr	$h2,x14,#24
+	adds	$h1,$h1,x14,lsl#40
+	adc	$d2,$h2,xzr		// can be partially reduced...
+
+	ldp	$d0,$d1,[$inp],#16	// load input
+	sub	$len,$len,#16
+	add	$s1,$r1,$r1,lsr#2	// s1 = r1 + (r1 >> 2)
+
+	and	$t0,$d2,#-4		// ... so reduce
+	and	$h2,$d2,#3
+	add	$t0,$t0,$d2,lsr#2
+	adds	$h0,$h0,$t0
+	adcs	$h1,$h1,xzr
+	adc	$h2,$h2,xzr
+
+#ifdef	__ARMEB__
+	rev	$d0,$d0
+	rev	$d1,$d1
+#endif
+	adds	$h0,$h0,$d0		// accumulate input
+	adcs	$h1,$h1,$d1
+	adc	$h2,$h2,$padbit
+
+	bl	poly1305_mult
+	ldr	x30,[sp,#8]
+
+	cbz	$padbit,.Lstore_base2_64_neon
+
+	and	x10,$h0,#0x03ffffff	// base 2^64 -> base 2^26
+	ubfx	x11,$h0,#26,#26
+	extr	x12,$h1,$h0,#52
+	and	x12,x12,#0x03ffffff
+	ubfx	x13,$h1,#14,#26
+	extr	x14,$h2,$h1,#40
+
+	cbnz	$len,.Leven_neon
+
+	stp	w10,w11,[$ctx]		// store hash value base 2^26
+	stp	w12,w13,[$ctx,#8]
+	str	w14,[$ctx,#16]
+	b	.Lno_data_neon
+
+.align	4
+.Lstore_base2_64_neon:
+	stp	$h0,$h1,[$ctx]		// store hash value base 2^64
+	stp	$h2,xzr,[$ctx,#16]	// note that is_base2_26 is zeroed
+	b	.Lno_data_neon
+
+.align	4
+.Lbase2_64_neon:
+	ldp	$r0,$r1,[$ctx,#32]	// load key value
+
+	ldp	$h0,$h1,[$ctx]		// load hash value base 2^64
+	ldr	$h2,[$ctx,#16]
+
+	tst	$len,#31
+	b.eq	.Linit_neon
+
+	ldp	$d0,$d1,[$inp],#16	// load input
+	sub	$len,$len,#16
+	add	$s1,$r1,$r1,lsr#2	// s1 = r1 + (r1 >> 2)
+#ifdef	__ARMEB__
+	rev	$d0,$d0
+	rev	$d1,$d1
+#endif
+	adds	$h0,$h0,$d0		// accumulate input
+	adcs	$h1,$h1,$d1
+	adc	$h2,$h2,$padbit
+
+	bl	poly1305_mult
+
+.Linit_neon:
+	and	x10,$h0,#0x03ffffff	// base 2^64 -> base 2^26
+	ubfx	x11,$h0,#26,#26
+	extr	x12,$h1,$h0,#52
+	and	x12,x12,#0x03ffffff
+	ubfx	x13,$h1,#14,#26
+	extr	x14,$h2,$h1,#40
+
+	stp	d8,d9,[sp,#16]		// meet ABI requirements
+	stp	d10,d11,[sp,#32]
+	stp	d12,d13,[sp,#48]
+	stp	d14,d15,[sp,#64]
+
+	fmov	${H0},x10
+	fmov	${H1},x11
+	fmov	${H2},x12
+	fmov	${H3},x13
+	fmov	${H4},x14
+
+	////////////////////////////////// initialize r^n table
+	mov	$h0,$r0			// r^1
+	add	$s1,$r1,$r1,lsr#2	// s1 = r1 + (r1 >> 2)
+	mov	$h1,$r1
+	mov	$h2,xzr
+	add	$ctx,$ctx,#48+12
+	bl	poly1305_splat
+
+	bl	poly1305_mult		// r^2
+	sub	$ctx,$ctx,#4
+	bl	poly1305_splat
+
+	bl	poly1305_mult		// r^3
+	sub	$ctx,$ctx,#4
+	bl	poly1305_splat
+
+	bl	poly1305_mult		// r^4
+	sub	$ctx,$ctx,#4
+	bl	poly1305_splat
+	ldr	x30,[sp,#8]
+
+	add	$in2,$inp,#32
+	adr	$zeros,.Lzeros
+	subs	$len,$len,#64
+	csel	$in2,$zeros,$in2,lo
+
+	mov	x4,#1
+	str	x4,[$ctx,#-24]		// set is_base2_26
+	sub	$ctx,$ctx,#48		// restore original $ctx
+	b	.Ldo_neon
+
+.align	4
+.Leven_neon:
+	add	$in2,$inp,#32
+	adr	$zeros,.Lzeros
+	subs	$len,$len,#64
+	csel	$in2,$zeros,$in2,lo
+
+	stp	d8,d9,[sp,#16]		// meet ABI requirements
+	stp	d10,d11,[sp,#32]
+	stp	d12,d13,[sp,#48]
+	stp	d14,d15,[sp,#64]
+
+	fmov	${H0},x10
+	fmov	${H1},x11
+	fmov	${H2},x12
+	fmov	${H3},x13
+	fmov	${H4},x14
+
+.Ldo_neon:
+	ldp	x8,x12,[$in2],#16	// inp[2:3] (or zero)
+	ldp	x9,x13,[$in2],#48
+
+	lsl	$padbit,$padbit,#24
+	add	x15,$ctx,#48
+
+#ifdef	__ARMEB__
+	rev	x8,x8
+	rev	x12,x12
+	rev	x9,x9
+	rev	x13,x13
+#endif
+	and	x4,x8,#0x03ffffff	// base 2^64 -> base 2^26
+	and	x5,x9,#0x03ffffff
+	ubfx	x6,x8,#26,#26
+	ubfx	x7,x9,#26,#26
+	add	x4,x4,x5,lsl#32		// bfi	x4,x5,#32,#32
+	extr	x8,x12,x8,#52
+	extr	x9,x13,x9,#52
+	add	x6,x6,x7,lsl#32		// bfi	x6,x7,#32,#32
+	fmov	$IN23_0,x4
+	and	x8,x8,#0x03ffffff
+	and	x9,x9,#0x03ffffff
+	ubfx	x10,x12,#14,#26
+	ubfx	x11,x13,#14,#26
+	add	x12,$padbit,x12,lsr#40
+	add	x13,$padbit,x13,lsr#40
+	add	x8,x8,x9,lsl#32		// bfi	x8,x9,#32,#32
+	fmov	$IN23_1,x6
+	add	x10,x10,x11,lsl#32	// bfi	x10,x11,#32,#32
+	add	x12,x12,x13,lsl#32	// bfi	x12,x13,#32,#32
+	fmov	$IN23_2,x8
+	fmov	$IN23_3,x10
+	fmov	$IN23_4,x12
+
+	ldp	x8,x12,[$inp],#16	// inp[0:1]
+	ldp	x9,x13,[$inp],#48
+
+	ld1	{$R0,$R1,$S1,$R2},[x15],#64
+	ld1	{$S2,$R3,$S3,$R4},[x15],#64
+	ld1	{$S4},[x15]
+
+#ifdef	__ARMEB__
+	rev	x8,x8
+	rev	x12,x12
+	rev	x9,x9
+	rev	x13,x13
+#endif
+	and	x4,x8,#0x03ffffff	// base 2^64 -> base 2^26
+	and	x5,x9,#0x03ffffff
+	ubfx	x6,x8,#26,#26
+	ubfx	x7,x9,#26,#26
+	add	x4,x4,x5,lsl#32		// bfi	x4,x5,#32,#32
+	extr	x8,x12,x8,#52
+	extr	x9,x13,x9,#52
+	add	x6,x6,x7,lsl#32		// bfi	x6,x7,#32,#32
+	fmov	$IN01_0,x4
+	and	x8,x8,#0x03ffffff
+	and	x9,x9,#0x03ffffff
+	ubfx	x10,x12,#14,#26
+	ubfx	x11,x13,#14,#26
+	add	x12,$padbit,x12,lsr#40
+	add	x13,$padbit,x13,lsr#40
+	add	x8,x8,x9,lsl#32		// bfi	x8,x9,#32,#32
+	fmov	$IN01_1,x6
+	add	x10,x10,x11,lsl#32	// bfi	x10,x11,#32,#32
+	add	x12,x12,x13,lsl#32	// bfi	x12,x13,#32,#32
+	movi	$MASK.2d,#-1
+	fmov	$IN01_2,x8
+	fmov	$IN01_3,x10
+	fmov	$IN01_4,x12
+	ushr	$MASK.2d,$MASK.2d,#38
+
+	b.ls	.Lskip_loop
+
+.align	4
+.Loop_neon:
+	////////////////////////////////////////////////////////////////
+	// ((inp[0]*r^4+inp[2]*r^2+inp[4])*r^4+inp[6]*r^2
+	// ((inp[1]*r^4+inp[3]*r^2+inp[5])*r^3+inp[7]*r
+	//   \___________________/
+	// ((inp[0]*r^4+inp[2]*r^2+inp[4])*r^4+inp[6]*r^2+inp[8])*r^2
+	// ((inp[1]*r^4+inp[3]*r^2+inp[5])*r^4+inp[7]*r^2+inp[9])*r
+	//   \___________________/ \____________________/
+	//
+	// Note that we start with inp[2:3]*r^2. This is because it
+	// doesn't depend on reduction in previous iteration.
+	////////////////////////////////////////////////////////////////
+	// d4 = h0*r4 + h1*r3   + h2*r2   + h3*r1   + h4*r0
+	// d3 = h0*r3 + h1*r2   + h2*r1   + h3*r0   + h4*5*r4
+	// d2 = h0*r2 + h1*r1   + h2*r0   + h3*5*r4 + h4*5*r3
+	// d1 = h0*r1 + h1*r0   + h2*5*r4 + h3*5*r3 + h4*5*r2
+	// d0 = h0*r0 + h1*5*r4 + h2*5*r3 + h3*5*r2 + h4*5*r1
+
+	subs	$len,$len,#64
+	umull	$ACC4,$IN23_0,${R4}[2]
+	csel	$in2,$zeros,$in2,lo
+	umull	$ACC3,$IN23_0,${R3}[2]
+	umull	$ACC2,$IN23_0,${R2}[2]
+	 ldp	x8,x12,[$in2],#16	// inp[2:3] (or zero)
+	umull	$ACC1,$IN23_0,${R1}[2]
+	 ldp	x9,x13,[$in2],#48
+	umull	$ACC0,$IN23_0,${R0}[2]
+#ifdef	__ARMEB__
+	 rev	x8,x8
+	 rev	x12,x12
+	 rev	x9,x9
+	 rev	x13,x13
+#endif
+
+	umlal	$ACC4,$IN23_1,${R3}[2]
+	 and	x4,x8,#0x03ffffff	// base 2^64 -> base 2^26
+	umlal	$ACC3,$IN23_1,${R2}[2]
+	 and	x5,x9,#0x03ffffff
+	umlal	$ACC2,$IN23_1,${R1}[2]
+	 ubfx	x6,x8,#26,#26
+	umlal	$ACC1,$IN23_1,${R0}[2]
+	 ubfx	x7,x9,#26,#26
+	umlal	$ACC0,$IN23_1,${S4}[2]
+	 add	x4,x4,x5,lsl#32		// bfi	x4,x5,#32,#32
+
+	umlal	$ACC4,$IN23_2,${R2}[2]
+	 extr	x8,x12,x8,#52
+	umlal	$ACC3,$IN23_2,${R1}[2]
+	 extr	x9,x13,x9,#52
+	umlal	$ACC2,$IN23_2,${R0}[2]
+	 add	x6,x6,x7,lsl#32		// bfi	x6,x7,#32,#32
+	umlal	$ACC1,$IN23_2,${S4}[2]
+	 fmov	$IN23_0,x4
+	umlal	$ACC0,$IN23_2,${S3}[2]
+	 and	x8,x8,#0x03ffffff
+
+	umlal	$ACC4,$IN23_3,${R1}[2]
+	 and	x9,x9,#0x03ffffff
+	umlal	$ACC3,$IN23_3,${R0}[2]
+	 ubfx	x10,x12,#14,#26
+	umlal	$ACC2,$IN23_3,${S4}[2]
+	 ubfx	x11,x13,#14,#26
+	umlal	$ACC1,$IN23_3,${S3}[2]
+	 add	x8,x8,x9,lsl#32		// bfi	x8,x9,#32,#32
+	umlal	$ACC0,$IN23_3,${S2}[2]
+	 fmov	$IN23_1,x6
+
+	add	$IN01_2,$IN01_2,$H2
+	 add	x12,$padbit,x12,lsr#40
+	umlal	$ACC4,$IN23_4,${R0}[2]
+	 add	x13,$padbit,x13,lsr#40
+	umlal	$ACC3,$IN23_4,${S4}[2]
+	 add	x10,x10,x11,lsl#32	// bfi	x10,x11,#32,#32
+	umlal	$ACC2,$IN23_4,${S3}[2]
+	 add	x12,x12,x13,lsl#32	// bfi	x12,x13,#32,#32
+	umlal	$ACC1,$IN23_4,${S2}[2]
+	 fmov	$IN23_2,x8
+	umlal	$ACC0,$IN23_4,${S1}[2]
+	 fmov	$IN23_3,x10
+
+	////////////////////////////////////////////////////////////////
+	// (hash+inp[0:1])*r^4 and accumulate
+
+	add	$IN01_0,$IN01_0,$H0
+	 fmov	$IN23_4,x12
+	umlal	$ACC3,$IN01_2,${R1}[0]
+	 ldp	x8,x12,[$inp],#16	// inp[0:1]
+	umlal	$ACC0,$IN01_2,${S3}[0]
+	 ldp	x9,x13,[$inp],#48
+	umlal	$ACC4,$IN01_2,${R2}[0]
+	umlal	$ACC1,$IN01_2,${S4}[0]
+	umlal	$ACC2,$IN01_2,${R0}[0]
+#ifdef	__ARMEB__
+	 rev	x8,x8
+	 rev	x12,x12
+	 rev	x9,x9
+	 rev	x13,x13
+#endif
+
+	add	$IN01_1,$IN01_1,$H1
+	umlal	$ACC3,$IN01_0,${R3}[0]
+	umlal	$ACC4,$IN01_0,${R4}[0]
+	 and	x4,x8,#0x03ffffff	// base 2^64 -> base 2^26
+	umlal	$ACC2,$IN01_0,${R2}[0]
+	 and	x5,x9,#0x03ffffff
+	umlal	$ACC0,$IN01_0,${R0}[0]
+	 ubfx	x6,x8,#26,#26
+	umlal	$ACC1,$IN01_0,${R1}[0]
+	 ubfx	x7,x9,#26,#26
+
+	add	$IN01_3,$IN01_3,$H3
+	 add	x4,x4,x5,lsl#32		// bfi	x4,x5,#32,#32
+	umlal	$ACC3,$IN01_1,${R2}[0]
+	 extr	x8,x12,x8,#52
+	umlal	$ACC4,$IN01_1,${R3}[0]
+	 extr	x9,x13,x9,#52
+	umlal	$ACC0,$IN01_1,${S4}[0]
+	 add	x6,x6,x7,lsl#32		// bfi	x6,x7,#32,#32
+	umlal	$ACC2,$IN01_1,${R1}[0]
+	 fmov	$IN01_0,x4
+	umlal	$ACC1,$IN01_1,${R0}[0]
+	 and	x8,x8,#0x03ffffff
+
+	add	$IN01_4,$IN01_4,$H4
+	 and	x9,x9,#0x03ffffff
+	umlal	$ACC3,$IN01_3,${R0}[0]
+	 ubfx	x10,x12,#14,#26
+	umlal	$ACC0,$IN01_3,${S2}[0]
+	 ubfx	x11,x13,#14,#26
+	umlal	$ACC4,$IN01_3,${R1}[0]
+	 add	x8,x8,x9,lsl#32		// bfi	x8,x9,#32,#32
+	umlal	$ACC1,$IN01_3,${S3}[0]
+	 fmov	$IN01_1,x6
+	umlal	$ACC2,$IN01_3,${S4}[0]
+	 add	x12,$padbit,x12,lsr#40
+
+	umlal	$ACC3,$IN01_4,${S4}[0]
+	 add	x13,$padbit,x13,lsr#40
+	umlal	$ACC0,$IN01_4,${S1}[0]
+	 add	x10,x10,x11,lsl#32	// bfi	x10,x11,#32,#32
+	umlal	$ACC4,$IN01_4,${R0}[0]
+	 add	x12,x12,x13,lsl#32	// bfi	x12,x13,#32,#32
+	umlal	$ACC1,$IN01_4,${S2}[0]
+	 fmov	$IN01_2,x8
+	umlal	$ACC2,$IN01_4,${S3}[0]
+	 fmov	$IN01_3,x10
+	 fmov	$IN01_4,x12
+
+	/////////////////////////////////////////////////////////////////
+	// lazy reduction as discussed in "NEON crypto" by D.J. Bernstein
+	// and P. Schwabe
+	//
+	// [see discussion in poly1305-armv4 module]
+
+	ushr	$T0.2d,$ACC3,#26
+	xtn	$H3,$ACC3
+	 ushr	$T1.2d,$ACC0,#26
+	 and	$ACC0,$ACC0,$MASK.2d
+	add	$ACC4,$ACC4,$T0.2d	// h3 -> h4
+	bic	$H3,#0xfc,lsl#24	// &=0x03ffffff
+	 add	$ACC1,$ACC1,$T1.2d	// h0 -> h1
+
+	ushr	$T0.2d,$ACC4,#26
+	xtn	$H4,$ACC4
+	 ushr	$T1.2d,$ACC1,#26
+	 xtn	$H1,$ACC1
+	bic	$H4,#0xfc,lsl#24
+	 add	$ACC2,$ACC2,$T1.2d	// h1 -> h2
+
+	add	$ACC0,$ACC0,$T0.2d
+	shl	$T0.2d,$T0.2d,#2
+	 shrn	$T1.2s,$ACC2,#26
+	 xtn	$H2,$ACC2
+	add	$ACC0,$ACC0,$T0.2d	// h4 -> h0
+	 bic	$H1,#0xfc,lsl#24
+	 add	$H3,$H3,$T1.2s		// h2 -> h3
+	 bic	$H2,#0xfc,lsl#24
+
+	shrn	$T0.2s,$ACC0,#26
+	xtn	$H0,$ACC0
+	 ushr	$T1.2s,$H3,#26
+	 bic	$H3,#0xfc,lsl#24
+	 bic	$H0,#0xfc,lsl#24
+	add	$H1,$H1,$T0.2s		// h0 -> h1
+	 add	$H4,$H4,$T1.2s		// h3 -> h4
+
+	b.hi	.Loop_neon
+
+.Lskip_loop:
+	dup	$IN23_2,${IN23_2}[0]
+	add	$IN01_2,$IN01_2,$H2
+
+	////////////////////////////////////////////////////////////////
+	// multiply (inp[0:1]+hash) or inp[2:3] by r^2:r^1
+
+	adds	$len,$len,#32
+	b.ne	.Long_tail
+
+	dup	$IN23_2,${IN01_2}[0]
+	add	$IN23_0,$IN01_0,$H0
+	add	$IN23_3,$IN01_3,$H3
+	add	$IN23_1,$IN01_1,$H1
+	add	$IN23_4,$IN01_4,$H4
+
+.Long_tail:
+	dup	$IN23_0,${IN23_0}[0]
+	umull2	$ACC0,$IN23_2,${S3}
+	umull2	$ACC3,$IN23_2,${R1}
+	umull2	$ACC4,$IN23_2,${R2}
+	umull2	$ACC2,$IN23_2,${R0}
+	umull2	$ACC1,$IN23_2,${S4}
+
+	dup	$IN23_1,${IN23_1}[0]
+	umlal2	$ACC0,$IN23_0,${R0}
+	umlal2	$ACC2,$IN23_0,${R2}
+	umlal2	$ACC3,$IN23_0,${R3}
+	umlal2	$ACC4,$IN23_0,${R4}
+	umlal2	$ACC1,$IN23_0,${R1}
+
+	dup	$IN23_3,${IN23_3}[0]
+	umlal2	$ACC0,$IN23_1,${S4}
+	umlal2	$ACC3,$IN23_1,${R2}
+	umlal2	$ACC2,$IN23_1,${R1}
+	umlal2	$ACC4,$IN23_1,${R3}
+	umlal2	$ACC1,$IN23_1,${R0}
+
+	dup	$IN23_4,${IN23_4}[0]
+	umlal2	$ACC3,$IN23_3,${R0}
+	umlal2	$ACC4,$IN23_3,${R1}
+	umlal2	$ACC0,$IN23_3,${S2}
+	umlal2	$ACC1,$IN23_3,${S3}
+	umlal2	$ACC2,$IN23_3,${S4}
+
+	umlal2	$ACC3,$IN23_4,${S4}
+	umlal2	$ACC0,$IN23_4,${S1}
+	umlal2	$ACC4,$IN23_4,${R0}
+	umlal2	$ACC1,$IN23_4,${S2}
+	umlal2	$ACC2,$IN23_4,${S3}
+
+	b.eq	.Lshort_tail
+
+	////////////////////////////////////////////////////////////////
+	// (hash+inp[0:1])*r^4:r^3 and accumulate
+
+	add	$IN01_0,$IN01_0,$H0
+	umlal	$ACC3,$IN01_2,${R1}
+	umlal	$ACC0,$IN01_2,${S3}
+	umlal	$ACC4,$IN01_2,${R2}
+	umlal	$ACC1,$IN01_2,${S4}
+	umlal	$ACC2,$IN01_2,${R0}
+
+	add	$IN01_1,$IN01_1,$H1
+	umlal	$ACC3,$IN01_0,${R3}
+	umlal	$ACC0,$IN01_0,${R0}
+	umlal	$ACC4,$IN01_0,${R4}
+	umlal	$ACC1,$IN01_0,${R1}
+	umlal	$ACC2,$IN01_0,${R2}
+
+	add	$IN01_3,$IN01_3,$H3
+	umlal	$ACC3,$IN01_1,${R2}
+	umlal	$ACC0,$IN01_1,${S4}
+	umlal	$ACC4,$IN01_1,${R3}
+	umlal	$ACC1,$IN01_1,${R0}
+	umlal	$ACC2,$IN01_1,${R1}
+
+	add	$IN01_4,$IN01_4,$H4
+	umlal	$ACC3,$IN01_3,${R0}
+	umlal	$ACC0,$IN01_3,${S2}
+	umlal	$ACC4,$IN01_3,${R1}
+	umlal	$ACC1,$IN01_3,${S3}
+	umlal	$ACC2,$IN01_3,${S4}
+
+	umlal	$ACC3,$IN01_4,${S4}
+	umlal	$ACC0,$IN01_4,${S1}
+	umlal	$ACC4,$IN01_4,${R0}
+	umlal	$ACC1,$IN01_4,${S2}
+	umlal	$ACC2,$IN01_4,${S3}
+
+.Lshort_tail:
+	////////////////////////////////////////////////////////////////
+	// horizontal add
+
+	addp	$ACC3,$ACC3,$ACC3
+	 ldp	d8,d9,[sp,#16]		// meet ABI requirements
+	addp	$ACC0,$ACC0,$ACC0
+	 ldp	d10,d11,[sp,#32]
+	addp	$ACC4,$ACC4,$ACC4
+	 ldp	d12,d13,[sp,#48]
+	addp	$ACC1,$ACC1,$ACC1
+	 ldp	d14,d15,[sp,#64]
+	addp	$ACC2,$ACC2,$ACC2
+
+	////////////////////////////////////////////////////////////////
+	// lazy reduction, but without narrowing
+
+	ushr	$T0.2d,$ACC3,#26
+	and	$ACC3,$ACC3,$MASK.2d
+	 ushr	$T1.2d,$ACC0,#26
+	 and	$ACC0,$ACC0,$MASK.2d
+
+	add	$ACC4,$ACC4,$T0.2d	// h3 -> h4
+	 add	$ACC1,$ACC1,$T1.2d	// h0 -> h1
+
+	ushr	$T0.2d,$ACC4,#26
+	and	$ACC4,$ACC4,$MASK.2d
+	 ushr	$T1.2d,$ACC1,#26
+	 and	$ACC1,$ACC1,$MASK.2d
+	 add	$ACC2,$ACC2,$T1.2d	// h1 -> h2
+
+	add	$ACC0,$ACC0,$T0.2d
+	shl	$T0.2d,$T0.2d,#2
+	 ushr	$T1.2d,$ACC2,#26
+	 and	$ACC2,$ACC2,$MASK.2d
+	add	$ACC0,$ACC0,$T0.2d	// h4 -> h0
+	 add	$ACC3,$ACC3,$T1.2d	// h2 -> h3
+
+	ushr	$T0.2d,$ACC0,#26
+	and	$ACC0,$ACC0,$MASK.2d
+	 ushr	$T1.2d,$ACC3,#26
+	 and	$ACC3,$ACC3,$MASK.2d
+	add	$ACC1,$ACC1,$T0.2d	// h0 -> h1
+	 add	$ACC4,$ACC4,$T1.2d	// h3 -> h4
+
+	////////////////////////////////////////////////////////////////
+	// write the result, can be partially reduced
+
+	st4	{$ACC0,$ACC1,$ACC2,$ACC3}[0],[$ctx],#16
+	st1	{$ACC4}[0],[$ctx]
+
+.Lno_data_neon:
+	.inst	0xd50323bf		// autiasp
+	ldr	x29,[sp],#80
+	ret
+.size	poly1305_blocks_neon,.-poly1305_blocks_neon
+
+.type	poly1305_emit_neon,%function
+.align	5
+poly1305_emit_neon:
+	ldr	$is_base2_26,[$ctx,#24]
+	cbz	$is_base2_26,poly1305_emit
+
+	ldp	w10,w11,[$ctx]		// load hash value base 2^26
+	ldp	w12,w13,[$ctx,#8]
+	ldr	w14,[$ctx,#16]
+
+	add	$h0,x10,x11,lsl#26	// base 2^26 -> base 2^64
+	lsr	$h1,x12,#12
+	adds	$h0,$h0,x12,lsl#52
+	add	$h1,$h1,x13,lsl#14
+	adc	$h1,$h1,xzr
+	lsr	$h2,x14,#24
+	adds	$h1,$h1,x14,lsl#40
+	adc	$h2,$h2,xzr		// can be partially reduced...
+
+	ldp	$t0,$t1,[$nonce]	// load nonce
+
+	and	$d0,$h2,#-4		// ... so reduce
+	add	$d0,$d0,$h2,lsr#2
+	and	$h2,$h2,#3
+	adds	$h0,$h0,$d0
+	adcs	$h1,$h1,xzr
+	adc	$h2,$h2,xzr
+
+	adds	$d0,$h0,#5		// compare to modulus
+	adcs	$d1,$h1,xzr
+	adc	$d2,$h2,xzr
+
+	tst	$d2,#-4			// see if it's carried/borrowed
+
+	csel	$h0,$h0,$d0,eq
+	csel	$h1,$h1,$d1,eq
+
+#ifdef	__ARMEB__
+	ror	$t0,$t0,#32		// flip nonce words
+	ror	$t1,$t1,#32
+#endif
+	adds	$h0,$h0,$t0		// accumulate nonce
+	adc	$h1,$h1,$t1
+#ifdef	__ARMEB__
+	rev	$h0,$h0			// flip output bytes
+	rev	$h1,$h1
+#endif
+	stp	$h0,$h1,[$mac]		// write result
+
+	ret
+.size	poly1305_emit_neon,.-poly1305_emit_neon
+
+.align	5
+.Lzeros:
+.long	0,0,0,0,0,0,0,0
+.LOPENSSL_armcap_P:
+#ifdef	__ILP32__
+.long	OPENSSL_armcap_P-.
+#else
+.quad	OPENSSL_armcap_P-.
+#endif
+.asciz	"Poly1305 for ARMv8, CRYPTOGAMS by <appro\@openssl.org>"
+.align	2
+___
+
+foreach (split("\n",$code)) {
+	s/\b(shrn\s+v[0-9]+)\.[24]d/$1.2s/			or
+	s/\b(fmov\s+)v([0-9]+)[^,]*,\s*x([0-9]+)/$1d$2,x$3/	or
+	(m/\bdup\b/ and (s/\.[24]s/.2d/g or 1))			or
+	(m/\b(eor|and)/ and (s/\.[248][sdh]/.16b/g or 1))	or
+	(m/\bum(ul|la)l\b/ and (s/\.4s/.2s/g or 1))		or
+	(m/\bum(ul|la)l2\b/ and (s/\.2s/.4s/g or 1))		or
+	(m/\bst[1-4]\s+{[^}]+}\[/ and (s/\.[24]d/.s/g or 1));
+
+	s/\.[124]([sd])\[/.$1\[/;
+
+	print $_,"\n";
+}
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-c64xplus.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-c64xplus.pl
new file mode 100755
index 000000000..93fef37e6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-c64xplus.pl
@@ -0,0 +1,331 @@
+#! /usr/bin/env perl
+# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# Poly1305 hash for C64x+.
+#
+# October 2015
+#
+# Performance is [incredible for a 32-bit processor] 1.82 cycles per
+# processed byte. Comparison to compiler-generated code is problematic,
+# because results were observed to vary from 2.1 to 7.6 cpb depending
+# on compiler's ability to inline small functions. Compiler also
+# disables interrupts for some reason, thus making interrupt response
+# time dependent on input length. This module on the other hand is free
+# from such limitation.
+
+$output=pop;
+open STDOUT,">$output";
+
+($CTXA,$INPB,$LEN,$PADBIT)=("A4","B4","A6","B6");
+($H0,$H1,$H2,$H3,$H4,$H4a)=("A8","B8","A10","B10","B2",$LEN);
+($D0,$D1,$D2,$D3)=         ("A9","B9","A11","B11");
+($R0,$R1,$R2,$R3,$S1,$S2,$S3,$S3b)=("A0","B0","A1","B1","A12","B12","A13","B13");
+($THREE,$R0b,$S2a)=("B7","B5","A5");
+
+$code.=<<___;
+	.text
+
+	.if	.ASSEMBLER_VERSION<7000000
+	.asg	0,__TI_EABI__
+	.endif
+	.if	__TI_EABI__
+	.asg	poly1305_init,_poly1305_init
+	.asg	poly1305_blocks,_poly1305_blocks
+	.asg	poly1305_emit,_poly1305_emit
+	.endif
+
+	.asg	B3,RA
+	.asg	A15,FP
+	.asg	B15,SP
+
+	.if	.LITTLE_ENDIAN
+	.asg	MV,SWAP2
+	.asg	MV.L,SWAP4
+	.endif
+
+	.global	_poly1305_init
+_poly1305_init:
+	.asmfunc
+	LDNDW	*${INPB}[0],B17:B16	; load key material
+	LDNDW	*${INPB}[1],A17:A16
+
+||	ZERO	B9:B8
+||	MVK	-1,B0
+	STDW	B9:B8,*${CTXA}[0]	; initialize h1:h0
+||	SHRU	B0,4,B0			; 0x0fffffff
+||	MVK	-4,B1
+	STDW	B9:B8,*${CTXA}[1]	; initialize h3:h2
+||	AND	B0,B1,B1		; 0x0ffffffc
+	STW	B8,*${CTXA}[4]		; initialize h4
+
+	.if	.BIG_ENDIAN
+	SWAP2	B16,B17
+||	SWAP2	B17,B16
+	SWAP2	A16,A17
+||	SWAP2	A17,A16
+	SWAP4	B16,B16
+||	SWAP4	A16,A16
+	SWAP4	B17,B17
+||	SWAP4	A17,A17
+	.endif
+
+	AND	B16,B0,B20		; r0 = key[0] & 0x0fffffff
+||	AND	B17,B1,B22		; r1 = key[1] & 0x0ffffffc
+||	EXTU	B17,4,6,B16		; r1>>2
+	AND	A16,B1,B21		; r2 = key[2] & 0x0ffffffc
+||	AND	A17,B1,A23		; r3 = key[3] & 0x0ffffffc
+||	BNOP	RA
+	SHRU	B21,2,B18
+||	ADD	B22,B16,B16		; s1 = r1 + r1>>2
+
+	STDW	B21:B20,*${CTXA}[3]	; save r2:r0
+||	ADD	B21,B18,B18		; s2 = r2 + r2>>2
+||	SHRU	A23,2,B17
+||	MV	A23,B23
+	STDW	B23:B22,*${CTXA}[4]	; save r3:r1
+||	ADD	B23,B17,B19		; s3 = r3 + r3>>2
+||	ADD	B23,B17,B17		; s3 = r3 + r3>>2
+	STDW	B17:B16,*${CTXA}[5]	; save s3:s1
+	STDW	B19:B18,*${CTXA}[6]	; save s3:s2
+||	ZERO	A4			; return 0
+	.endasmfunc
+
+	.global	_poly1305_blocks
+	.align	32
+_poly1305_blocks:
+	.asmfunc	stack_usage(40)
+	SHRU	$LEN,4,A2		; A2 is loop counter, number of blocks
+  [!A2]	BNOP	RA			; no data
+|| [A2]	STW	FP,*SP--(40)		; save frame pointer and alloca(40)
+|| [A2]	MV	SP,FP
+   [A2]	STDW	B13:B12,*SP[4]		; ABI says so
+|| [A2]	MV	$CTXA,$S3b		; borrow $S3b
+   [A2]	STDW	B11:B10,*SP[3]
+|| [A2]	STDW	A13:A12,*FP[-3]
+   [A2]	STDW	A11:A10,*FP[-4]
+
+|| [A2]	LDDW	*${S3b}[0],B25:B24	; load h1:h0
+   [A2]	LDNW	*${INPB}++[4],$D0	; load inp[0]
+   [A2]	LDNW	*${INPB}[-3],$D1	; load inp[1]
+
+	LDDW	*${CTXA}[1],B29:B28	; load h3:h2, B28 is h2
+	LDNW	*${INPB}[-2],$D2	; load inp[2]
+	LDNW	*${INPB}[-1],$D3	; load inp[3]
+
+	LDDW	*${CTXA}[3],$R2:$R0	; load r2:r0
+||	LDDW	*${S3b}[4],$R3:$R1	; load r3:r1
+||	SWAP2	$D0,$D0
+
+	LDDW	*${CTXA}[5],$S3:$S1	; load s3:s1
+||	LDDW	*${S3b}[6],$S3b:$S2	; load s3:s2
+||	SWAP4	$D0,$D0
+||	SWAP2	$D1,$D1
+
+	ADDU	$D0,B24,$D0:$H0		; h0+=inp[0]
+||	ADD	$D0,B24,B27		; B-copy of h0+inp[0]
+||	SWAP4	$D1,$D1
+	ADDU	$D1,B25,$D1:$H1		; h1+=inp[1]
+||	MVK	3,$THREE
+||	SWAP2	$D2,$D2
+	LDW	*${CTXA}[4],$H4		; load h4
+||	SWAP4	$D2,$D2
+||	MV	B29,B30			; B30 is h3
+	MV	$R0,$R0b
+
+loop?:
+	MPY32U	$H0,$R0,A17:A16
+||	MPY32U	B27,$R1,B17:B16		; MPY32U	$H0,$R1,B17:B16
+||	ADDU	$D0,$D1:$H1,B25:B24	; ADDU		$D0,$D1:$H1,$D1:$H1
+||	ADDU	$D2,B28,$D2:$H2		; h2+=inp[2]
+||	SWAP2	$D3,$D3
+	MPY32U	$H0,$R2,A19:A18
+||	MPY32U	B27,$R3,B19:B18		; MPY32U	$H0,$R3,B19:B18
+||	ADD	$D0,$H1,A24		; A-copy of B24
+||	SWAP4	$D3,$D3
+|| [A2]	SUB	A2,1,A2			; decrement loop counter
+
+	MPY32U	A24,$S3,A21:A20		; MPY32U	$H1,$S3,A21:A20
+||	MPY32U	B24,$R0b,B21:B20	; MPY32U	$H1,$R0,B21:B20
+||	ADDU	B25,$D2:$H2,$D2:$H2	; ADDU		$D1,$D2:$H2,$D2:$H2
+||	ADDU	$D3,B30,$D3:$H3		; h3+=inp[3]
+||	ADD	B25,$H2,B25		; B-copy of $H2
+	MPY32U	A24,$R1,A23:A22		; MPY32U	$H1,$R1,A23:A22
+||	MPY32U	B24,$R2,B23:B22		; MPY32U	$H1,$R2,B23:B22
+
+	MPY32U	$H2,$S2,A25:A24
+||	MPY32U	B25,$S3b,B25:B24	; MPY32U	$H2,$S3,B25:B24
+||	ADDU	$D2,$D3:$H3,$D3:$H3
+||	ADD	$PADBIT,$H4,$H4		; h4+=padbit
+	MPY32U	$H2,$R0,A27:A26
+||	MPY32U	$H2,$R1,B27:B26
+||	ADD	$D3,$H4,$H4
+||	MV	$S2,$S2a
+
+	MPY32U	$H3,$S1,A29:A28
+||	MPY32U	$H3,$S2,B29:B28
+||	ADD	A21,A17,A21		; start accumulating "d3:d0"
+||	ADD	B21,B17,B21
+||	ADDU	A20,A16,A17:A16
+||	ADDU	B20,B16,B17:B16
+|| [A2]	LDNW	*${INPB}++[4],$D0	; load inp[0]
+	MPY32U	$H3,$S3,A31:A30
+||	MPY32U	$H3,$R0b,B31:B30
+||	ADD	A23,A19,A23
+||	ADD	B23,B19,B23
+||	ADDU	A22,A18,A19:A18
+||	ADDU	B22,B18,B19:B18
+|| [A2]	LDNW	*${INPB}[-3],$D1	; load inp[1]
+
+	MPY32	$H4,$S1,B20
+||	MPY32	$H4,$S2a,A20
+||	ADD	A25,A21,A21
+||	ADD	B25,B21,B21
+||	ADDU	A24,A17:A16,A17:A16
+||	ADDU	B24,B17:B16,B17:B16
+|| [A2]	LDNW	*${INPB}[-2],$D2	; load inp[2]
+	MPY32	$H4,$S3b,B22
+||	ADD	A27,A23,A23
+||	ADD	B27,B23,B23
+||	ADDU	A26,A19:A18,A19:A18
+||	ADDU	B26,B19:B18,B19:B18
+|| [A2]	LDNW	*${INPB}[-1],$D3	; load inp[3]
+
+	MPY32	$H4,$R0b,$H4
+||	ADD	A29,A21,A21		; final hi("d0")
+||	ADD	B29,B21,B21		; final hi("d1")
+||	ADDU	A28,A17:A16,A17:A16	; final lo("d0")
+||	ADDU	B28,B17:B16,B17:B16
+	ADD	A31,A23,A23		; final hi("d2")
+||	ADD	B31,B23,B23		; final hi("d3")
+||	ADDU	A30,A19:A18,A19:A18
+||	ADDU	B30,B19:B18,B19:B18
+	ADDU	B20,B17:B16,B17:B16	; final lo("d1")
+||	ADDU	A20,A19:A18,A19:A18	; final lo("d2")
+	ADDU	B22,B19:B18,B19:B18	; final lo("d3")
+
+||	ADD	A17,A21,A21		; "flatten" "d3:d0"
+	MV	A19,B29			; move to avoid cross-path stalls
+	ADDU	A21,B17:B16,B27:B26	; B26 is h1
+	ADD	B21,B27,B27
+||	DMV	B29,A18,B29:B28		; move to avoid cross-path stalls
+	ADDU	B27,B29:B28,B29:B28	; B28 is h2
+|| [A2]	SWAP2	$D0,$D0
+	ADD	A23,B29,B29
+|| [A2]	SWAP4	$D0,$D0
+	ADDU	B29,B19:B18,B31:B30	; B30 is h3
+	ADD	B23,B31,B31
+||	MV	A16,B24			; B24 is h0
+|| [A2]	SWAP2	$D1,$D1
+	ADD	B31,$H4,$H4
+|| [A2]	SWAP4	$D1,$D1
+
+	SHRU	$H4,2,B16		; last reduction step
+||	AND	$H4,$THREE,$H4
+	ADDAW	B16,B16,B16		; 5*(h4>>2)
+|| [A2]	BNOP	loop?
+
+	ADDU	B24,B16,B25:B24		; B24 is h0
+|| [A2]	SWAP2	$D2,$D2
+	ADDU	B26,B25,B27:B26		; B26 is h1
+|| [A2]	SWAP4	$D2,$D2
+	ADDU	B28,B27,B29:B28		; B28 is h2
+|| [A2]	ADDU	$D0,B24,$D0:$H0		; h0+=inp[0]
+|| [A2]	ADD	$D0,B24,B27		; B-copy of h0+inp[0]
+	ADDU	B30,B29,B31:B30		; B30 is h3
+	ADD	B31,$H4,$H4
+|| [A2]	ADDU	$D1,B26,$D1:$H1		; h1+=inp[1]
+;;===== branch to loop? is taken here
+
+	LDDW	*FP[-4],A11:A10		; ABI says so
+	LDDW	*FP[-3],A13:A12
+||	LDDW	*SP[3],B11:B10
+	LDDW	*SP[4],B13:B12
+||	MV	B26,B25
+||	BNOP	RA
+	LDW	*++SP(40),FP		; restore frame pointer
+||	MV	B30,B29
+	STDW	B25:B24,*${CTXA}[0]	; save h1:h0
+	STDW	B29:B28,*${CTXA}[1]	; save h3:h2
+	STW	$H4,*${CTXA}[4]		; save h4
+	NOP	1
+	.endasmfunc
+___
+{
+my ($MAC,$NONCEA,$NONCEB)=($INPB,$LEN,$PADBIT);
+
+$code.=<<___;
+	.global	_poly1305_emit
+	.align	32
+_poly1305_emit:
+	.asmfunc
+	LDDW	*${CTXA}[0],A17:A16	; load h1:h0
+	LDDW	*${CTXA}[1],A19:A18	; load h3:h2
+	LDW	*${CTXA}[4],A20		; load h4
+	MV	$NONCEA,$NONCEB
+
+	MVK	5,A22			; compare to modulus
+	ADDU	A16,A22,A23:A22
+||	LDW	*${NONCEA}[0],A8
+||	LDW	*${NONCEB}[1],B8
+	ADDU	A17,A23,A25:A24
+||	LDW	*${NONCEA}[2],A9
+||	LDW	*${NONCEB}[3],B9
+	ADDU	A19,A25,A27:A26
+	ADDU	A19,A27,A29:A28
+	ADD	A20,A29,A29
+
+	SHRU	A29,2,A2		; check for overflow in 130-th bit
+
+   [A2]	MV	A22,A16			; select
+|| [A2]	MV	A24,A17
+   [A2]	MV	A26,A18
+|| [A2]	MV	A28,A19
+
+||	ADDU	A8,A16,A23:A22		; accumulate nonce
+	ADDU	B8,A17,A25:A24
+||	SWAP2	A22,A22
+	ADDU	A23,A25:A24,A25:A24
+	ADDU	A9,A18,A27:A26
+||	SWAP2	A24,A24
+	ADDU	A25,A27:A26,A27:A26
+||	ADD	B9,A19,A28
+	ADD	A27,A28,A28
+||	SWAP2	A26,A26
+
+	.if	.BIG_ENDIAN
+	SWAP2	A28,A28
+||	SWAP4	A22,A22
+||	SWAP4	A24,B24
+	SWAP4	A26,A26
+	SWAP4	A28,A28
+||	MV	B24,A24
+	.endif
+
+	BNOP	RA,1
+	STNW	A22,*${MAC}[0]		; write the result
+	STNW	A24,*${MAC}[1]
+	STNW	A26,*${MAC}[2]
+	STNW	A28,*${MAC}[3]
+	.endasmfunc
+___
+}
+$code.=<<___;
+	.sect	.const
+	.cstring "Poly1305 for C64x+, CRYPTOGAMS by <appro\@openssl.org>"
+	.align	4
+___
+
+print $code;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-mips.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-mips.pl
new file mode 100755
index 000000000..28b6772ee
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-mips.pl
@@ -0,0 +1,437 @@
+#! /usr/bin/env perl
+# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# Poly1305 hash for MIPS64.
+#
+# May 2016
+#
+# Numbers are cycles per processed byte with poly1305_blocks alone.
+#
+#		IALU/gcc
+# R1x000	5.64/+120%	(big-endian)
+# Octeon II	3.80/+280%	(little-endian)
+
+######################################################################
+# There is a number of MIPS ABI in use, O32 and N32/64 are most
+# widely used. Then there is a new contender: NUBI. It appears that if
+# one picks the latter, it's possible to arrange code in ABI neutral
+# manner. Therefore let's stick to NUBI register layout:
+#
+($zero,$at,$t0,$t1,$t2)=map("\$$_",(0..2,24,25));
+($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("\$$_",(4..11));
+($s0,$s1,$s2,$s3,$s4,$s5,$s6,$s7,$s8,$s9,$s10,$s11)=map("\$$_",(12..23));
+($gp,$tp,$sp,$fp,$ra)=map("\$$_",(3,28..31));
+#
+# The return value is placed in $a0. Following coding rules facilitate
+# interoperability:
+#
+# - never ever touch $tp, "thread pointer", former $gp [o32 can be
+#   excluded from the rule, because it's specified volatile];
+# - copy return value to $t0, former $v0 [or to $a0 if you're adapting
+#   old code];
+# - on O32 populate $a4-$a7 with 'lw $aN,4*N($sp)' if necessary;
+#
+# For reference here is register layout for N32/64 MIPS ABIs:
+#
+# ($zero,$at,$v0,$v1)=map("\$$_",(0..3));
+# ($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("\$$_",(4..11));
+# ($t0,$t1,$t2,$t3,$t8,$t9)=map("\$$_",(12..15,24,25));
+# ($s0,$s1,$s2,$s3,$s4,$s5,$s6,$s7)=map("\$$_",(16..23));
+# ($gp,$sp,$fp,$ra)=map("\$$_",(28..31));
+#
+# <appro@openssl.org>
+#
+######################################################################
+
+$flavour = shift || "o32"; # supported flavours are o32,n32,64,nubi32,nubi64
+
+die "MIPS64 only" unless ($flavour =~ /64|n32/i);
+
+$v0 = ($flavour =~ /nubi/i) ? $a0 : $t0;
+$SAVED_REGS_MASK = ($flavour =~ /nubi/i) ? "0x0003f000" : "0x00030000";
+
+($ctx,$inp,$len,$padbit) = ($a0,$a1,$a2,$a3);
+($in0,$in1,$tmp0,$tmp1,$tmp2,$tmp3,$tmp4) = ($a4,$a5,$a6,$a7,$at,$t0,$t1);
+
+$code.=<<___;
+#include "mips_arch.h"
+
+#ifdef MIPSEB
+# define MSB 0
+# define LSB 7
+#else
+# define MSB 7
+# define LSB 0
+#endif
+
+.text
+.set	noat
+.set	noreorder
+
+.align	5
+.globl	poly1305_init
+.ent	poly1305_init
+poly1305_init:
+	.frame	$sp,0,$ra
+	.set	reorder
+
+	sd	$zero,0($ctx)
+	sd	$zero,8($ctx)
+	sd	$zero,16($ctx)
+
+	beqz	$inp,.Lno_key
+
+#if defined(_MIPS_ARCH_MIPS64R6)
+	ld	$in0,0($inp)
+	ld	$in1,8($inp)
+#else
+	ldl	$in0,0+MSB($inp)
+	ldl	$in1,8+MSB($inp)
+	ldr	$in0,0+LSB($inp)
+	ldr	$in1,8+LSB($inp)
+#endif
+#ifdef	MIPSEB
+# if defined(_MIPS_ARCH_MIPS64R2)
+	dsbh	$in0,$in0		# byte swap
+	 dsbh	$in1,$in1
+	dshd	$in0,$in0
+	 dshd	$in1,$in1
+# else
+	ori	$tmp0,$zero,0xFF
+	dsll	$tmp2,$tmp0,32
+	or	$tmp0,$tmp2		# 0x000000FF000000FF
+
+	and	$tmp1,$in0,$tmp0	# byte swap
+	 and	$tmp3,$in1,$tmp0
+	dsrl	$tmp2,$in0,24
+	 dsrl	$tmp4,$in1,24
+	dsll	$tmp1,24
+	 dsll	$tmp3,24
+	and	$tmp2,$tmp0
+	 and	$tmp4,$tmp0
+	dsll	$tmp0,8			# 0x0000FF000000FF00
+	or	$tmp1,$tmp2
+	 or	$tmp3,$tmp4
+	and	$tmp2,$in0,$tmp0
+	 and	$tmp4,$in1,$tmp0
+	dsrl	$in0,8
+	 dsrl	$in1,8
+	dsll	$tmp2,8
+	 dsll	$tmp4,8
+	and	$in0,$tmp0
+	 and	$in1,$tmp0
+	or	$tmp1,$tmp2
+	 or	$tmp3,$tmp4
+	or	$in0,$tmp1
+	 or	$in1,$tmp3
+	dsrl	$tmp1,$in0,32
+	 dsrl	$tmp3,$in1,32
+	dsll	$in0,32
+	 dsll	$in1,32
+	or	$in0,$tmp1
+	 or	$in1,$tmp3
+# endif
+#endif
+	li	$tmp0,1
+	dsll	$tmp0,32
+	daddiu	$tmp0,-63
+	dsll	$tmp0,28
+	daddiu	$tmp0,-1		# 0ffffffc0fffffff
+
+	and	$in0,$tmp0
+	daddiu	$tmp0,-3		# 0ffffffc0ffffffc
+	and	$in1,$tmp0
+
+	sd	$in0,24($ctx)
+	dsrl	$tmp0,$in1,2
+	sd	$in1,32($ctx)
+	daddu	$tmp0,$in1		# s1 = r1 + (r1 >> 2)
+	sd	$tmp0,40($ctx)
+
+.Lno_key:
+	li	$v0,0			# return 0
+	jr	$ra
+.end	poly1305_init
+___
+{
+my ($h0,$h1,$h2,$r0,$r1,$s1,$d0,$d1,$d2) =
+   ($s0,$s1,$s2,$s3,$s4,$s5,$in0,$in1,$t2);
+
+$code.=<<___;
+.align	5
+.globl	poly1305_blocks
+.ent	poly1305_blocks
+poly1305_blocks:
+	.set	noreorder
+	dsrl	$len,4			# number of complete blocks
+	bnez	$len,poly1305_blocks_internal
+	nop
+	jr	$ra
+	nop
+.end	poly1305_blocks
+
+.align	5
+.ent	poly1305_blocks_internal
+poly1305_blocks_internal:
+	.frame	$sp,6*8,$ra
+	.mask	$SAVED_REGS_MASK,-8
+	.set	noreorder
+	dsubu	$sp,6*8
+	sd	$s5,40($sp)
+	sd	$s4,32($sp)
+___
+$code.=<<___ if ($flavour =~ /nubi/i);	# optimize non-nubi prologue
+	sd	$s3,24($sp)
+	sd	$s2,16($sp)
+	sd	$s1,8($sp)
+	sd	$s0,0($sp)
+___
+$code.=<<___;
+	.set	reorder
+
+	ld	$h0,0($ctx)		# load hash value
+	ld	$h1,8($ctx)
+	ld	$h2,16($ctx)
+
+	ld	$r0,24($ctx)		# load key
+	ld	$r1,32($ctx)
+	ld	$s1,40($ctx)
+
+.Loop:
+#if defined(_MIPS_ARCH_MIPS64R6)
+	ld	$in0,0($inp)		# load input
+	ld	$in1,8($inp)
+#else
+	ldl	$in0,0+MSB($inp)	# load input
+	ldl	$in1,8+MSB($inp)
+	ldr	$in0,0+LSB($inp)
+	ldr	$in1,8+LSB($inp)
+#endif
+	daddiu	$len,-1
+	daddiu	$inp,16
+#ifdef	MIPSEB
+# if defined(_MIPS_ARCH_MIPS64R2)
+	dsbh	$in0,$in0		# byte swap
+	 dsbh	$in1,$in1
+	dshd	$in0,$in0
+	 dshd	$in1,$in1
+# else
+	ori	$tmp0,$zero,0xFF
+	dsll	$tmp2,$tmp0,32
+	or	$tmp0,$tmp2		# 0x000000FF000000FF
+
+	and	$tmp1,$in0,$tmp0	# byte swap
+	 and	$tmp3,$in1,$tmp0
+	dsrl	$tmp2,$in0,24
+	 dsrl	$tmp4,$in1,24
+	dsll	$tmp1,24
+	 dsll	$tmp3,24
+	and	$tmp2,$tmp0
+	 and	$tmp4,$tmp0
+	dsll	$tmp0,8			# 0x0000FF000000FF00
+	or	$tmp1,$tmp2
+	 or	$tmp3,$tmp4
+	and	$tmp2,$in0,$tmp0
+	 and	$tmp4,$in1,$tmp0
+	dsrl	$in0,8
+	 dsrl	$in1,8
+	dsll	$tmp2,8
+	 dsll	$tmp4,8
+	and	$in0,$tmp0
+	 and	$in1,$tmp0
+	or	$tmp1,$tmp2
+	 or	$tmp3,$tmp4
+	or	$in0,$tmp1
+	 or	$in1,$tmp3
+	dsrl	$tmp1,$in0,32
+	 dsrl	$tmp3,$in1,32
+	dsll	$in0,32
+	 dsll	$in1,32
+	or	$in0,$tmp1
+	 or	$in1,$tmp3
+# endif
+#endif
+	daddu	$h0,$in0		# accumulate input
+	daddu	$h1,$in1
+	sltu	$tmp0,$h0,$in0
+	sltu	$tmp1,$h1,$in1
+	daddu	$h1,$tmp0
+
+	dmultu	($r0,$h0)		# h0*r0
+	 daddu	$h2,$padbit
+	 sltu	$tmp0,$h1,$tmp0
+	mflo	($d0,$r0,$h0)
+	mfhi	($d1,$r0,$h0)
+
+	dmultu	($s1,$h1)		# h1*5*r1
+	 daddu	$tmp0,$tmp1
+	 daddu	$h2,$tmp0
+	mflo	($tmp0,$s1,$h1)
+	mfhi	($tmp1,$s1,$h1)
+
+	dmultu	($r1,$h0)		# h0*r1
+	 daddu	$d0,$tmp0
+	 daddu	$d1,$tmp1
+	mflo	($tmp2,$r1,$h0)
+	mfhi	($d2,$r1,$h0)
+	 sltu	$tmp0,$d0,$tmp0
+	 daddu	$d1,$tmp0
+
+	dmultu	($r0,$h1)		# h1*r0
+	 daddu	$d1,$tmp2
+	 sltu	$tmp2,$d1,$tmp2
+	mflo	($tmp0,$r0,$h1)
+	mfhi	($tmp1,$r0,$h1)
+	 daddu	$d2,$tmp2
+
+	dmultu	($s1,$h2)		# h2*5*r1
+	 daddu	$d1,$tmp0
+	 daddu	$d2,$tmp1
+	mflo	($tmp2,$s1,$h2)
+
+	dmultu	($r0,$h2)		# h2*r0
+	 sltu	$tmp0,$d1,$tmp0
+	 daddu	$d2,$tmp0
+	mflo	($tmp3,$r0,$h2)
+
+	daddu	$d1,$tmp2
+	daddu	$d2,$tmp3
+	sltu	$tmp2,$d1,$tmp2
+	daddu	$d2,$tmp2
+
+	li	$tmp0,-4		# final reduction
+	and	$tmp0,$d2
+	dsrl	$tmp1,$d2,2
+	andi	$h2,$d2,3
+	daddu	$tmp0,$tmp1
+	daddu	$h0,$d0,$tmp0
+	sltu	$tmp0,$h0,$tmp0
+	daddu	$h1,$d1,$tmp0
+	sltu	$tmp0,$h1,$tmp0
+	daddu	$h2,$h2,$tmp0
+
+	bnez	$len,.Loop
+
+	sd	$h0,0($ctx)		# store hash value
+	sd	$h1,8($ctx)
+	sd	$h2,16($ctx)
+
+	.set	noreorder
+	ld	$s5,40($sp)		# epilogue
+	ld	$s4,32($sp)
+___
+$code.=<<___ if ($flavour =~ /nubi/i);	# optimize non-nubi epilogue
+	ld	$s3,24($sp)
+	ld	$s2,16($sp)
+	ld	$s1,8($sp)
+	ld	$s0,0($sp)
+___
+$code.=<<___;
+	jr	$ra
+	daddu	$sp,6*8
+.end	poly1305_blocks_internal
+___
+}
+{
+my ($ctx,$mac,$nonce) = ($a0,$a1,$a2);
+
+$code.=<<___;
+.align	5
+.globl	poly1305_emit
+.ent	poly1305_emit
+poly1305_emit:
+	.frame	$sp,0,$ra
+	.set	reorder
+
+	ld	$tmp0,0($ctx)
+	ld	$tmp1,8($ctx)
+	ld	$tmp2,16($ctx)
+
+	daddiu	$in0,$tmp0,5		# compare to modulus
+	sltiu	$tmp3,$in0,5
+	daddu	$in1,$tmp1,$tmp3
+	sltu	$tmp3,$in1,$tmp3
+	daddu	$tmp2,$tmp2,$tmp3
+
+	dsrl	$tmp2,2			# see if it carried/borrowed
+	dsubu	$tmp2,$zero,$tmp2
+	nor	$tmp3,$zero,$tmp2
+
+	and	$in0,$tmp2
+	and	$tmp0,$tmp3
+	and	$in1,$tmp2
+	and	$tmp1,$tmp3
+	or	$in0,$tmp0
+	or	$in1,$tmp1
+
+	lwu	$tmp0,0($nonce)		# load nonce
+	lwu	$tmp1,4($nonce)
+	lwu	$tmp2,8($nonce)
+	lwu	$tmp3,12($nonce)
+	dsll	$tmp1,32
+	dsll	$tmp3,32
+	or	$tmp0,$tmp1
+	or	$tmp2,$tmp3
+
+	daddu	$in0,$tmp0		# accumulate nonce
+	daddu	$in1,$tmp2
+	sltu	$tmp0,$in0,$tmp0
+	daddu	$in1,$tmp0
+
+	dsrl	$tmp0,$in0,8		# write mac value
+	dsrl	$tmp1,$in0,16
+	dsrl	$tmp2,$in0,24
+	sb	$in0,0($mac)
+	dsrl	$tmp3,$in0,32
+	sb	$tmp0,1($mac)
+	dsrl	$tmp0,$in0,40
+	sb	$tmp1,2($mac)
+	dsrl	$tmp1,$in0,48
+	sb	$tmp2,3($mac)
+	dsrl	$tmp2,$in0,56
+	sb	$tmp3,4($mac)
+	dsrl	$tmp3,$in1,8
+	sb	$tmp0,5($mac)
+	dsrl	$tmp0,$in1,16
+	sb	$tmp1,6($mac)
+	dsrl	$tmp1,$in1,24
+	sb	$tmp2,7($mac)
+
+	sb	$in1,8($mac)
+	dsrl	$tmp2,$in1,32
+	sb	$tmp3,9($mac)
+	dsrl	$tmp3,$in1,40
+	sb	$tmp0,10($mac)
+	dsrl	$tmp0,$in1,48
+	sb	$tmp1,11($mac)
+	dsrl	$tmp1,$in1,56
+	sb	$tmp2,12($mac)
+	sb	$tmp3,13($mac)
+	sb	$tmp0,14($mac)
+	sb	$tmp1,15($mac)
+
+	jr	$ra
+.end	poly1305_emit
+.rdata
+.asciiz	"Poly1305 for MIPS64, CRYPTOGAMS by <appro\@openssl.org>"
+.align	2
+___
+}
+
+$output=pop and open STDOUT,">$output";
+print $code;
+close STDOUT;
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-ppc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-ppc.pl
new file mode 100755
index 000000000..0c6d015d5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-ppc.pl
@@ -0,0 +1,645 @@
+#! /usr/bin/env perl
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# This module implements Poly1305 hash for PowerPC.
+#
+# June 2015
+#
+# Numbers are cycles per processed byte with poly1305_blocks alone,
+# and improvement coefficients relative to gcc-generated code.
+#
+#			-m32		-m64
+#
+# Freescale e300	14.8/+80%	-
+# PPC74x0		7.60/+60%	-
+# PPC970		7.00/+114%	3.51/+205%
+# POWER7		3.75/+260%	1.93/+100%
+# POWER8		-		2.03/+200%
+# POWER9		-		2.00/+150%
+#
+# Do we need floating-point implementation for PPC? Results presented
+# in poly1305_ieee754.c are tricky to compare to, because they are for
+# compiler-generated code. On the other hand it's known that floating-
+# point performance can be dominated by FPU latency, which means that
+# there is limit even for ideally optimized (and even vectorized) code.
+# And this limit is estimated to be higher than above -m64 results. Or
+# in other words floating-point implementation can be meaningful to
+# consider only in 32-bit application context. We probably have to
+# recognize that 32-bit builds are getting less popular on high-end
+# systems and therefore tend to target embedded ones, which might not
+# even have FPU...
+#
+# On side note, Power ISA 2.07 enables vector base 2^26 implementation,
+# and POWER8 might have capacity to break 1.0 cycle per byte barrier...
+
+$flavour = shift;
+
+if ($flavour =~ /64/) {
+	$SIZE_T	=8;
+	$LRSAVE	=2*$SIZE_T;
+	$UCMP	="cmpld";
+	$STU	="stdu";
+	$POP	="ld";
+	$PUSH	="std";
+} elsif ($flavour =~ /32/) {
+	$SIZE_T	=4;
+	$LRSAVE	=$SIZE_T;
+	$UCMP	="cmplw";
+	$STU	="stwu";
+	$POP	="lwz";
+	$PUSH	="stw";
+} else { die "nonsense $flavour"; }
+
+# Define endianness based on flavour
+# i.e.: linux64le
+$LITTLE_ENDIAN = ($flavour=~/le$/) ? $SIZE_T : 0;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open STDOUT,"| $^X $xlate $flavour ".shift || die "can't call $xlate: $!";
+
+$FRAME=24*$SIZE_T;
+
+$sp="r1";
+my ($ctx,$inp,$len,$padbit) = map("r$_",(3..6));
+my ($mac,$nonce)=($inp,$len);
+my $mask = "r0";
+
+$code=<<___;
+.machine	"any"
+.text
+___
+							if ($flavour =~ /64/) {
+###############################################################################
+# base 2^64 implementation
+
+my ($h0,$h1,$h2,$d0,$d1,$d2, $r0,$r1,$s1, $t0,$t1) = map("r$_",(7..12,27..31));
+
+$code.=<<___;
+.globl	.poly1305_init_int
+.align	4
+.poly1305_init_int:
+	xor	r0,r0,r0
+	std	r0,0($ctx)		# zero hash value
+	std	r0,8($ctx)
+	std	r0,16($ctx)
+
+	$UCMP	$inp,r0
+	beq-	Lno_key
+___
+$code.=<<___	if ($LITTLE_ENDIAN);
+	ld	$d0,0($inp)		# load key material
+	ld	$d1,8($inp)
+___
+$code.=<<___	if (!$LITTLE_ENDIAN);
+	li	$h0,4
+	lwbrx	$d0,0,$inp		# load key material
+	li	$d1,8
+	lwbrx	$h0,$h0,$inp
+	li	$h1,12
+	lwbrx	$d1,$d1,$inp
+	lwbrx	$h1,$h1,$inp
+	insrdi	$d0,$h0,32,0
+	insrdi	$d1,$h1,32,0
+___
+$code.=<<___;
+	lis	$h1,0xfff		# 0x0fff0000
+	ori	$h1,$h1,0xfffc		# 0x0ffffffc
+	insrdi	$h1,$h1,32,0		# 0x0ffffffc0ffffffc
+	ori	$h0,$h1,3		# 0x0ffffffc0fffffff
+
+	and	$d0,$d0,$h0
+	and	$d1,$d1,$h1
+
+	std	$d0,32($ctx)		# store key
+	std	$d1,40($ctx)
+
+Lno_key:
+	xor	r3,r3,r3
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,2,0
+.size	.poly1305_init_int,.-.poly1305_init_int
+
+.globl	.poly1305_blocks
+.align	4
+.poly1305_blocks:
+	srdi.	$len,$len,4
+	beq-	Labort
+
+	$STU	$sp,-$FRAME($sp)
+	mflr	r0
+	$PUSH	r27,`$FRAME-$SIZE_T*5`($sp)
+	$PUSH	r28,`$FRAME-$SIZE_T*4`($sp)
+	$PUSH	r29,`$FRAME-$SIZE_T*3`($sp)
+	$PUSH	r30,`$FRAME-$SIZE_T*2`($sp)
+	$PUSH	r31,`$FRAME-$SIZE_T*1`($sp)
+	$PUSH	r0,`$FRAME+$LRSAVE`($sp)
+
+	ld	$r0,32($ctx)		# load key
+	ld	$r1,40($ctx)
+
+	ld	$h0,0($ctx)		# load hash value
+	ld	$h1,8($ctx)
+	ld	$h2,16($ctx)
+
+	srdi	$s1,$r1,2
+	mtctr	$len
+	add	$s1,$s1,$r1		# s1 = r1 + r1>>2
+	li	$mask,3
+	b	Loop
+
+.align	4
+Loop:
+___
+$code.=<<___	if ($LITTLE_ENDIAN);
+	ld	$t0,0($inp)		# load input
+	ld	$t1,8($inp)
+___
+$code.=<<___	if (!$LITTLE_ENDIAN);
+	li	$d0,4
+	lwbrx	$t0,0,$inp		# load input
+	li	$t1,8
+	lwbrx	$d0,$d0,$inp
+	li	$d1,12
+	lwbrx	$t1,$t1,$inp
+	lwbrx	$d1,$d1,$inp
+	insrdi	$t0,$d0,32,0
+	insrdi	$t1,$d1,32,0
+___
+$code.=<<___;
+	addi	$inp,$inp,16
+
+	addc	$h0,$h0,$t0		# accumulate input
+	adde	$h1,$h1,$t1
+
+	mulld	$d0,$h0,$r0		# h0*r0
+	mulhdu	$d1,$h0,$r0
+	adde	$h2,$h2,$padbit
+
+	mulld	$t0,$h1,$s1		# h1*5*r1
+	mulhdu	$t1,$h1,$s1
+	addc	$d0,$d0,$t0
+	adde	$d1,$d1,$t1
+
+	mulld	$t0,$h0,$r1		# h0*r1
+	mulhdu	$d2,$h0,$r1
+	addc	$d1,$d1,$t0
+	addze	$d2,$d2
+
+	mulld	$t0,$h1,$r0		# h1*r0
+	mulhdu	$t1,$h1,$r0
+	addc	$d1,$d1,$t0
+	adde	$d2,$d2,$t1
+
+	mulld	$t0,$h2,$s1		# h2*5*r1
+	mulld	$t1,$h2,$r0		# h2*r0
+	addc	$d1,$d1,$t0
+	adde	$d2,$d2,$t1
+
+	andc	$t0,$d2,$mask		# final reduction step
+	and	$h2,$d2,$mask
+	srdi	$t1,$t0,2
+	add	$t0,$t0,$t1
+	addc	$h0,$d0,$t0
+	addze	$h1,$d1
+	addze	$h2,$h2
+
+	bdnz	Loop
+
+	std	$h0,0($ctx)		# store hash value
+	std	$h1,8($ctx)
+	std	$h2,16($ctx)
+
+	$POP	r27,`$FRAME-$SIZE_T*5`($sp)
+	$POP	r28,`$FRAME-$SIZE_T*4`($sp)
+	$POP	r29,`$FRAME-$SIZE_T*3`($sp)
+	$POP	r30,`$FRAME-$SIZE_T*2`($sp)
+	$POP	r31,`$FRAME-$SIZE_T*1`($sp)
+	addi	$sp,$sp,$FRAME
+Labort:
+	blr
+	.long	0
+	.byte	0,12,4,1,0x80,5,4,0
+.size	.poly1305_blocks,.-.poly1305_blocks
+
+.globl	.poly1305_emit
+.align	4
+.poly1305_emit:
+	ld	$h0,0($ctx)		# load hash
+	ld	$h1,8($ctx)
+	ld	$h2,16($ctx)
+	ld	$padbit,0($nonce)	# load nonce
+	ld	$nonce,8($nonce)
+
+	addic	$d0,$h0,5		# compare to modulus
+	addze	$d1,$h1
+	addze	$d2,$h2
+
+	srdi	$mask,$d2,2		# did it carry/borrow?
+	neg	$mask,$mask
+
+	andc	$h0,$h0,$mask
+	and	$d0,$d0,$mask
+	andc	$h1,$h1,$mask
+	and	$d1,$d1,$mask
+	or	$h0,$h0,$d0
+	or	$h1,$h1,$d1
+___
+$code.=<<___	if (!$LITTLE_ENDIAN);
+	rotldi	$padbit,$padbit,32	# flip nonce words
+	rotldi	$nonce,$nonce,32
+___
+$code.=<<___;
+	addc	$h0,$h0,$padbit		# accumulate nonce
+	adde	$h1,$h1,$nonce
+___
+$code.=<<___	if ($LITTLE_ENDIAN);
+	std	$h0,0($mac)		# write result
+	std	$h1,8($mac)
+___
+$code.=<<___	if (!$LITTLE_ENDIAN);
+	extrdi	r0,$h0,32,0
+	li	$d0,4
+	stwbrx	$h0,0,$mac		# write result
+	extrdi	$h0,$h1,32,0
+	li	$d1,8
+	stwbrx	r0,$d0,$mac
+	li	$d2,12
+	stwbrx	$h1,$d1,$mac
+	stwbrx	$h0,$d2,$mac
+___
+$code.=<<___;
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+.size	.poly1305_emit,.-.poly1305_emit
+___
+							} else {
+###############################################################################
+# base 2^32 implementation
+
+my ($h0,$h1,$h2,$h3,$h4, $r0,$r1,$r2,$r3, $s1,$s2,$s3,
+    $t0,$t1,$t2,$t3, $D0,$D1,$D2,$D3, $d0,$d1,$d2,$d3
+   ) = map("r$_",(7..12,14..31));
+
+$code.=<<___;
+.globl	.poly1305_init_int
+.align	4
+.poly1305_init_int:
+	xor	r0,r0,r0
+	stw	r0,0($ctx)		# zero hash value
+	stw	r0,4($ctx)
+	stw	r0,8($ctx)
+	stw	r0,12($ctx)
+	stw	r0,16($ctx)
+
+	$UCMP	$inp,r0
+	beq-	Lno_key
+___
+$code.=<<___	if ($LITTLE_ENDIAN);
+	lw	$h0,0($inp)		# load key material
+	lw	$h1,4($inp)
+	lw	$h2,8($inp)
+	lw	$h3,12($inp)
+___
+$code.=<<___	if (!$LITTLE_ENDIAN);
+	li	$h1,4
+	lwbrx	$h0,0,$inp		# load key material
+	li	$h2,8
+	lwbrx	$h1,$h1,$inp
+	li	$h3,12
+	lwbrx	$h2,$h2,$inp
+	lwbrx	$h3,$h3,$inp
+___
+$code.=<<___;
+	lis	$mask,0xf000		# 0xf0000000
+	li	$r0,-4
+	andc	$r0,$r0,$mask		# 0x0ffffffc
+
+	andc	$h0,$h0,$mask
+	and	$h1,$h1,$r0
+	and	$h2,$h2,$r0
+	and	$h3,$h3,$r0
+
+	stw	$h0,32($ctx)		# store key
+	stw	$h1,36($ctx)
+	stw	$h2,40($ctx)
+	stw	$h3,44($ctx)
+
+Lno_key:
+	xor	r3,r3,r3
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,2,0
+.size	.poly1305_init_int,.-.poly1305_init_int
+
+.globl	.poly1305_blocks
+.align	4
+.poly1305_blocks:
+	srwi.	$len,$len,4
+	beq-	Labort
+
+	$STU	$sp,-$FRAME($sp)
+	mflr	r0
+	$PUSH	r14,`$FRAME-$SIZE_T*18`($sp)
+	$PUSH	r15,`$FRAME-$SIZE_T*17`($sp)
+	$PUSH	r16,`$FRAME-$SIZE_T*16`($sp)
+	$PUSH	r17,`$FRAME-$SIZE_T*15`($sp)
+	$PUSH	r18,`$FRAME-$SIZE_T*14`($sp)
+	$PUSH	r19,`$FRAME-$SIZE_T*13`($sp)
+	$PUSH	r20,`$FRAME-$SIZE_T*12`($sp)
+	$PUSH	r21,`$FRAME-$SIZE_T*11`($sp)
+	$PUSH	r22,`$FRAME-$SIZE_T*10`($sp)
+	$PUSH	r23,`$FRAME-$SIZE_T*9`($sp)
+	$PUSH	r24,`$FRAME-$SIZE_T*8`($sp)
+	$PUSH	r25,`$FRAME-$SIZE_T*7`($sp)
+	$PUSH	r26,`$FRAME-$SIZE_T*6`($sp)
+	$PUSH	r27,`$FRAME-$SIZE_T*5`($sp)
+	$PUSH	r28,`$FRAME-$SIZE_T*4`($sp)
+	$PUSH	r29,`$FRAME-$SIZE_T*3`($sp)
+	$PUSH	r30,`$FRAME-$SIZE_T*2`($sp)
+	$PUSH	r31,`$FRAME-$SIZE_T*1`($sp)
+	$PUSH	r0,`$FRAME+$LRSAVE`($sp)
+
+	lwz	$r0,32($ctx)		# load key
+	lwz	$r1,36($ctx)
+	lwz	$r2,40($ctx)
+	lwz	$r3,44($ctx)
+
+	lwz	$h0,0($ctx)		# load hash value
+	lwz	$h1,4($ctx)
+	lwz	$h2,8($ctx)
+	lwz	$h3,12($ctx)
+	lwz	$h4,16($ctx)
+
+	srwi	$s1,$r1,2
+	srwi	$s2,$r2,2
+	srwi	$s3,$r3,2
+	add	$s1,$s1,$r1		# si = ri + ri>>2
+	add	$s2,$s2,$r2
+	add	$s3,$s3,$r3
+	mtctr	$len
+	li	$mask,3
+	b	Loop
+
+.align	4
+Loop:
+___
+$code.=<<___	if ($LITTLE_ENDIAN);
+	lwz	$d0,0($inp)		# load input
+	lwz	$d1,4($inp)
+	lwz	$d2,8($inp)
+	lwz	$d3,12($inp)
+___
+$code.=<<___	if (!$LITTLE_ENDIAN);
+	li	$d1,4
+	lwbrx	$d0,0,$inp		# load input
+	li	$d2,8
+	lwbrx	$d1,$d1,$inp
+	li	$d3,12
+	lwbrx	$d2,$d2,$inp
+	lwbrx	$d3,$d3,$inp
+___
+$code.=<<___;
+	addi	$inp,$inp,16
+
+	addc	$h0,$h0,$d0		# accumulate input
+	adde	$h1,$h1,$d1
+	adde	$h2,$h2,$d2
+
+	mullw	$d0,$h0,$r0		# h0*r0
+	mulhwu	$D0,$h0,$r0
+
+	mullw	$d1,$h0,$r1		# h0*r1
+	mulhwu	$D1,$h0,$r1
+
+	mullw	$d2,$h0,$r2		# h0*r2
+	mulhwu	$D2,$h0,$r2
+
+	 adde	$h3,$h3,$d3
+	 adde	$h4,$h4,$padbit
+
+	mullw	$d3,$h0,$r3		# h0*r3
+	mulhwu	$D3,$h0,$r3
+
+	mullw	$t0,$h1,$s3		# h1*s3
+	mulhwu	$t1,$h1,$s3
+
+	mullw	$t2,$h1,$r0		# h1*r0
+	mulhwu	$t3,$h1,$r0
+	 addc	$d0,$d0,$t0
+	 adde	$D0,$D0,$t1
+
+	mullw	$t0,$h1,$r1		# h1*r1
+	mulhwu	$t1,$h1,$r1
+	 addc	$d1,$d1,$t2
+	 adde	$D1,$D1,$t3
+
+	mullw	$t2,$h1,$r2		# h1*r2
+	mulhwu	$t3,$h1,$r2
+	 addc	$d2,$d2,$t0
+	 adde	$D2,$D2,$t1
+
+	mullw	$t0,$h2,$s2		# h2*s2
+	mulhwu	$t1,$h2,$s2
+	 addc	$d3,$d3,$t2
+	 adde	$D3,$D3,$t3
+
+	mullw	$t2,$h2,$s3		# h2*s3
+	mulhwu	$t3,$h2,$s3
+	 addc	$d0,$d0,$t0
+	 adde	$D0,$D0,$t1
+
+	mullw	$t0,$h2,$r0		# h2*r0
+	mulhwu	$t1,$h2,$r0
+	 addc	$d1,$d1,$t2
+	 adde	$D1,$D1,$t3
+
+	mullw	$t2,$h2,$r1		# h2*r1
+	mulhwu	$t3,$h2,$r1
+	 addc	$d2,$d2,$t0
+	 adde	$D2,$D2,$t1
+
+	mullw	$t0,$h3,$s1		# h3*s1
+	mulhwu	$t1,$h3,$s1
+	 addc	$d3,$d3,$t2
+	 adde	$D3,$D3,$t3
+
+	mullw	$t2,$h3,$s2		# h3*s2
+	mulhwu	$t3,$h3,$s2
+	 addc	$d0,$d0,$t0
+	 adde	$D0,$D0,$t1
+
+	mullw	$t0,$h3,$s3		# h3*s3
+	mulhwu	$t1,$h3,$s3
+	 addc	$d1,$d1,$t2
+	 adde	$D1,$D1,$t3
+
+	mullw	$t2,$h3,$r0		# h3*r0
+	mulhwu	$t3,$h3,$r0
+	 addc	$d2,$d2,$t0
+	 adde	$D2,$D2,$t1
+
+	mullw	$t0,$h4,$s1		# h4*s1
+	 addc	$d3,$d3,$t2
+	 adde	$D3,$D3,$t3
+	addc	$d1,$d1,$t0
+
+	mullw	$t1,$h4,$s2		# h4*s2
+	 addze	$D1,$D1
+	addc	$d2,$d2,$t1
+	addze	$D2,$D2
+
+	mullw	$t2,$h4,$s3		# h4*s3
+	addc	$d3,$d3,$t2
+	addze	$D3,$D3
+
+	mullw	$h4,$h4,$r0		# h4*r0
+
+	addc	$h1,$d1,$D0
+	adde	$h2,$d2,$D1
+	adde	$h3,$d3,$D2
+	adde	$h4,$h4,$D3
+
+	andc	$D0,$h4,$mask		# final reduction step
+	and	$h4,$h4,$mask
+	srwi	$D1,$D0,2
+	add	$D0,$D0,$D1
+	addc	$h0,$d0,$D0
+	addze	$h1,$h1
+	addze	$h2,$h2
+	addze	$h3,$h3
+	addze	$h4,$h4
+
+	bdnz	Loop
+
+	stw	$h0,0($ctx)		# store hash value
+	stw	$h1,4($ctx)
+	stw	$h2,8($ctx)
+	stw	$h3,12($ctx)
+	stw	$h4,16($ctx)
+
+	$POP	r14,`$FRAME-$SIZE_T*18`($sp)
+	$POP	r15,`$FRAME-$SIZE_T*17`($sp)
+	$POP	r16,`$FRAME-$SIZE_T*16`($sp)
+	$POP	r17,`$FRAME-$SIZE_T*15`($sp)
+	$POP	r18,`$FRAME-$SIZE_T*14`($sp)
+	$POP	r19,`$FRAME-$SIZE_T*13`($sp)
+	$POP	r20,`$FRAME-$SIZE_T*12`($sp)
+	$POP	r21,`$FRAME-$SIZE_T*11`($sp)
+	$POP	r22,`$FRAME-$SIZE_T*10`($sp)
+	$POP	r23,`$FRAME-$SIZE_T*9`($sp)
+	$POP	r24,`$FRAME-$SIZE_T*8`($sp)
+	$POP	r25,`$FRAME-$SIZE_T*7`($sp)
+	$POP	r26,`$FRAME-$SIZE_T*6`($sp)
+	$POP	r27,`$FRAME-$SIZE_T*5`($sp)
+	$POP	r28,`$FRAME-$SIZE_T*4`($sp)
+	$POP	r29,`$FRAME-$SIZE_T*3`($sp)
+	$POP	r30,`$FRAME-$SIZE_T*2`($sp)
+	$POP	r31,`$FRAME-$SIZE_T*1`($sp)
+	addi	$sp,$sp,$FRAME
+Labort:
+	blr
+	.long	0
+	.byte	0,12,4,1,0x80,18,4,0
+.size	.poly1305_blocks,.-.poly1305_blocks
+
+.globl	.poly1305_emit
+.align	4
+.poly1305_emit:
+	$STU	$sp,-$FRAME($sp)
+	mflr	r0
+	$PUSH	r28,`$FRAME-$SIZE_T*4`($sp)
+	$PUSH	r29,`$FRAME-$SIZE_T*3`($sp)
+	$PUSH	r30,`$FRAME-$SIZE_T*2`($sp)
+	$PUSH	r31,`$FRAME-$SIZE_T*1`($sp)
+	$PUSH	r0,`$FRAME+$LRSAVE`($sp)
+
+	lwz	$h0,0($ctx)		# load hash
+	lwz	$h1,4($ctx)
+	lwz	$h2,8($ctx)
+	lwz	$h3,12($ctx)
+	lwz	$h4,16($ctx)
+
+	addic	$d0,$h0,5		# compare to modulus
+	addze	$d1,$h1
+	addze	$d2,$h2
+	addze	$d3,$h3
+	addze	$mask,$h4
+
+	srwi	$mask,$mask,2		# did it carry/borrow?
+	neg	$mask,$mask
+
+	andc	$h0,$h0,$mask
+	and	$d0,$d0,$mask
+	andc	$h1,$h1,$mask
+	and	$d1,$d1,$mask
+	or	$h0,$h0,$d0
+	lwz	$d0,0($nonce)		# load nonce
+	andc	$h2,$h2,$mask
+	and	$d2,$d2,$mask
+	or	$h1,$h1,$d1
+	lwz	$d1,4($nonce)
+	andc	$h3,$h3,$mask
+	and	$d3,$d3,$mask
+	or	$h2,$h2,$d2
+	lwz	$d2,8($nonce)
+	or	$h3,$h3,$d3
+	lwz	$d3,12($nonce)
+
+	addc	$h0,$h0,$d0		# accumulate nonce
+	adde	$h1,$h1,$d1
+	adde	$h2,$h2,$d2
+	adde	$h3,$h3,$d3
+___
+$code.=<<___	if ($LITTLE_ENDIAN);
+	stw	$h0,0($mac)		# write result
+	stw	$h1,4($mac)
+	stw	$h2,8($mac)
+	stw	$h3,12($mac)
+___
+$code.=<<___	if (!$LITTLE_ENDIAN);
+	li	$d1,4
+	stwbrx	$h0,0,$mac		# write result
+	li	$d2,8
+	stwbrx	$h1,$d1,$mac
+	li	$d3,12
+	stwbrx	$h2,$d2,$mac
+	stwbrx	$h3,$d3,$mac
+___
+$code.=<<___;
+	$POP	r28,`$FRAME-$SIZE_T*4`($sp)
+	$POP	r29,`$FRAME-$SIZE_T*3`($sp)
+	$POP	r30,`$FRAME-$SIZE_T*2`($sp)
+	$POP	r31,`$FRAME-$SIZE_T*1`($sp)
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,4,1,0x80,4,3,0
+.size	.poly1305_emit,.-.poly1305_emit
+___
+							}
+$code.=<<___;
+.asciz	"Poly1305 for PPC, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-ppcfp.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-ppcfp.pl
new file mode 100755
index 000000000..09f818584
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-ppcfp.pl
@@ -0,0 +1,739 @@
+#! /usr/bin/env perl
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# This module implements Poly1305 hash for PowerPC FPU.
+#
+# June 2015
+#
+# Numbers are cycles per processed byte with poly1305_blocks alone,
+# and improvement coefficients relative to gcc-generated code.
+#
+# Freescale e300	9.78/+30%
+# PPC74x0		6.92/+50%
+# PPC970		6.03/+80%
+# POWER7		3.50/+30%
+# POWER8		3.75/+10%
+
+$flavour = shift;
+
+if ($flavour =~ /64/) {
+	$SIZE_T	=8;
+	$LRSAVE	=2*$SIZE_T;
+	$UCMP	="cmpld";
+	$STU	="stdu";
+	$POP	="ld";
+	$PUSH	="std";
+} elsif ($flavour =~ /32/) {
+	$SIZE_T	=4;
+	$LRSAVE	=$SIZE_T;
+	$UCMP	="cmplw";
+	$STU	="stwu";
+	$POP	="lwz";
+	$PUSH	="stw";
+} else { die "nonsense $flavour"; }
+
+$LITTLE_ENDIAN = ($flavour=~/le$/) ? 4 : 0;
+
+$LWXLE = $LITTLE_ENDIAN ? "lwzx" : "lwbrx";
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open STDOUT,"| $^X $xlate $flavour ".shift || die "can't call $xlate: $!";
+
+$LOCALS=6*$SIZE_T;
+$FRAME=$LOCALS+6*8+18*8;
+
+my $sp="r1";
+
+my ($ctx,$inp,$len,$padbit) = map("r$_",(3..6));
+my ($in0,$in1,$in2,$in3,$i1,$i2,$i3) = map("r$_",(7..12,6));
+
+my ($h0lo,$h0hi,$h1lo,$h1hi,$h2lo,$h2hi,$h3lo,$h3hi,
+    $two0,$two32,$two64,$two96,$two130,$five_two130,
+    $r0lo,$r0hi,$r1lo,$r1hi,$r2lo,$r2hi,
+    $s2lo,$s2hi,$s3lo,$s3hi,
+    $c0lo,$c0hi,$c1lo,$c1hi,$c2lo,$c2hi,$c3lo,$c3hi) = map("f$_",(0..31));
+# borrowings
+my ($r3lo,$r3hi,$s1lo,$s1hi) = ($c0lo,$c0hi,$c1lo,$c1hi);
+my ($x0,$x1,$x2,$x3) = ($c2lo,$c2hi,$c3lo,$c3hi);
+my ($y0,$y1,$y2,$y3) = ($c3lo,$c3hi,$c1lo,$c1hi);
+
+$code.=<<___;
+.machine	"any"
+.text
+
+.globl	.poly1305_init_fpu
+.align	6
+.poly1305_init_fpu:
+	$STU	$sp,-$LOCALS($sp)		# minimal frame
+	mflr	$padbit
+	$PUSH	$padbit,`$LOCALS+$LRSAVE`($sp)
+
+	bl	LPICmeup
+
+	xor	r0,r0,r0
+	mtlr	$padbit				# restore lr
+
+	lfd	$two0,8*0($len)			# load constants
+	lfd	$two32,8*1($len)
+	lfd	$two64,8*2($len)
+	lfd	$two96,8*3($len)
+	lfd	$two130,8*4($len)
+	lfd	$five_two130,8*5($len)
+
+	stfd	$two0,8*0($ctx)			# initial hash value, biased 0
+	stfd	$two32,8*1($ctx)
+	stfd	$two64,8*2($ctx)
+	stfd	$two96,8*3($ctx)
+
+	$UCMP	$inp,r0
+	beq-	Lno_key
+
+	lfd	$h3lo,8*13($len)		# new fpscr
+	mffs	$h3hi				# old fpscr
+
+	stfd	$two0,8*4($ctx)			# key "template"
+	stfd	$two32,8*5($ctx)
+	stfd	$two64,8*6($ctx)
+	stfd	$two96,8*7($ctx)
+
+	li	$in1,4
+	li	$in2,8
+	li	$in3,12
+	$LWXLE	$in0,0,$inp			# load key
+	$LWXLE	$in1,$in1,$inp
+	$LWXLE	$in2,$in2,$inp
+	$LWXLE	$in3,$in3,$inp
+
+	lis	$i1,0xf000			#   0xf0000000
+	ori	$i2,$i1,3			#   0xf0000003
+	andc	$in0,$in0,$i1			# &=0x0fffffff
+	andc	$in1,$in1,$i2			# &=0x0ffffffc
+	andc	$in2,$in2,$i2
+	andc	$in3,$in3,$i2
+
+	stw	$in0,`8*4+(4^$LITTLE_ENDIAN)`($ctx)	# fill "template"
+	stw	$in1,`8*5+(4^$LITTLE_ENDIAN)`($ctx)
+	stw	$in2,`8*6+(4^$LITTLE_ENDIAN)`($ctx)
+	stw	$in3,`8*7+(4^$LITTLE_ENDIAN)`($ctx)
+
+	mtfsf	255,$h3lo			# fpscr
+	stfd	$two0,8*18($ctx)		# copy constants to context
+	stfd	$two32,8*19($ctx)
+	stfd	$two64,8*20($ctx)
+	stfd	$two96,8*21($ctx)
+	stfd	$two130,8*22($ctx)
+	stfd	$five_two130,8*23($ctx)
+
+	lfd	$h0lo,8*4($ctx)			# load [biased] key
+	lfd	$h1lo,8*5($ctx)
+	lfd	$h2lo,8*6($ctx)
+	lfd	$h3lo,8*7($ctx)
+
+	fsub	$h0lo,$h0lo,$two0		# r0
+	fsub	$h1lo,$h1lo,$two32		# r1
+	fsub	$h2lo,$h2lo,$two64		# r2
+	fsub	$h3lo,$h3lo,$two96		# r3
+
+	lfd	$two0,8*6($len)			# more constants
+	lfd	$two32,8*7($len)
+	lfd	$two64,8*8($len)
+	lfd	$two96,8*9($len)
+
+	fmul	$h1hi,$h1lo,$five_two130	# s1
+	fmul	$h2hi,$h2lo,$five_two130	# s2
+	 stfd	$h3hi,8*15($ctx)		# borrow slot for original fpscr
+	fmul	$h3hi,$h3lo,$five_two130	# s3
+
+	fadd	$h0hi,$h0lo,$two0
+	 stfd	$h1hi,8*12($ctx)		# put aside for now
+	fadd	$h1hi,$h1lo,$two32
+	 stfd	$h2hi,8*13($ctx)
+	fadd	$h2hi,$h2lo,$two64
+	 stfd	$h3hi,8*14($ctx)
+	fadd	$h3hi,$h3lo,$two96
+
+	fsub	$h0hi,$h0hi,$two0
+	fsub	$h1hi,$h1hi,$two32
+	fsub	$h2hi,$h2hi,$two64
+	fsub	$h3hi,$h3hi,$two96
+
+	lfd	$two0,8*10($len)		# more constants
+	lfd	$two32,8*11($len)
+	lfd	$two64,8*12($len)
+
+	fsub	$h0lo,$h0lo,$h0hi
+	fsub	$h1lo,$h1lo,$h1hi
+	fsub	$h2lo,$h2lo,$h2hi
+	fsub	$h3lo,$h3lo,$h3hi
+
+	stfd	$h0hi,8*5($ctx)			# r0hi
+	stfd	$h1hi,8*7($ctx)			# r1hi
+	stfd	$h2hi,8*9($ctx)			# r2hi
+	stfd	$h3hi,8*11($ctx)		# r3hi
+
+	stfd	$h0lo,8*4($ctx)			# r0lo
+	stfd	$h1lo,8*6($ctx)			# r1lo
+	stfd	$h2lo,8*8($ctx)			# r2lo
+	stfd	$h3lo,8*10($ctx)		# r3lo
+
+	lfd	$h1lo,8*12($ctx)		# s1
+	lfd	$h2lo,8*13($ctx)		# s2
+	lfd	$h3lo,8*14($ctx)		# s3
+	lfd	$h0lo,8*15($ctx)		# pull original fpscr
+
+	fadd	$h1hi,$h1lo,$two0
+	fadd	$h2hi,$h2lo,$two32
+	fadd	$h3hi,$h3lo,$two64
+
+	fsub	$h1hi,$h1hi,$two0
+	fsub	$h2hi,$h2hi,$two32
+	fsub	$h3hi,$h3hi,$two64
+
+	fsub	$h1lo,$h1lo,$h1hi
+	fsub	$h2lo,$h2lo,$h2hi
+	fsub	$h3lo,$h3lo,$h3hi
+
+	stfd	$h1hi,8*13($ctx)		# s1hi
+	stfd	$h2hi,8*15($ctx)		# s2hi
+	stfd	$h3hi,8*17($ctx)		# s3hi
+
+	stfd	$h1lo,8*12($ctx)		# s1lo
+	stfd	$h2lo,8*14($ctx)		# s2lo
+	stfd	$h3lo,8*16($ctx)		# s3lo
+
+	mtfsf	255,$h0lo			# restore fpscr
+Lno_key:
+	xor	r3,r3,r3
+	addi	$sp,$sp,$LOCALS
+	blr
+	.long	0
+	.byte	0,12,4,1,0x80,0,2,0
+.size	.poly1305_init_fpu,.-.poly1305_init_fpu
+
+.globl	.poly1305_blocks_fpu
+.align	4
+.poly1305_blocks_fpu:
+	srwi.	$len,$len,4
+	beq-	Labort
+
+	$STU	$sp,-$FRAME($sp)
+	mflr	r0
+	stfd	f14,`$FRAME-8*18`($sp)
+	stfd	f15,`$FRAME-8*17`($sp)
+	stfd	f16,`$FRAME-8*16`($sp)
+	stfd	f17,`$FRAME-8*15`($sp)
+	stfd	f18,`$FRAME-8*14`($sp)
+	stfd	f19,`$FRAME-8*13`($sp)
+	stfd	f20,`$FRAME-8*12`($sp)
+	stfd	f21,`$FRAME-8*11`($sp)
+	stfd	f22,`$FRAME-8*10`($sp)
+	stfd	f23,`$FRAME-8*9`($sp)
+	stfd	f24,`$FRAME-8*8`($sp)
+	stfd	f25,`$FRAME-8*7`($sp)
+	stfd	f26,`$FRAME-8*6`($sp)
+	stfd	f27,`$FRAME-8*5`($sp)
+	stfd	f28,`$FRAME-8*4`($sp)
+	stfd	f29,`$FRAME-8*3`($sp)
+	stfd	f30,`$FRAME-8*2`($sp)
+	stfd	f31,`$FRAME-8*1`($sp)
+	$PUSH	r0,`$FRAME+$LRSAVE`($sp)
+
+	xor	r0,r0,r0
+	li	$in3,1
+	mtctr	$len
+	neg	$len,$len
+	stw	r0,`$LOCALS+8*4+(0^$LITTLE_ENDIAN)`($sp)
+	stw	$in3,`$LOCALS+8*4+(4^$LITTLE_ENDIAN)`($sp)
+
+	lfd	$two0,8*18($ctx)		# load constants
+	lfd	$two32,8*19($ctx)
+	lfd	$two64,8*20($ctx)
+	lfd	$two96,8*21($ctx)
+	lfd	$two130,8*22($ctx)
+	lfd	$five_two130,8*23($ctx)
+
+	lfd	$h0lo,8*0($ctx)			# load [biased] hash value
+	lfd	$h1lo,8*1($ctx)
+	lfd	$h2lo,8*2($ctx)
+	lfd	$h3lo,8*3($ctx)
+
+	stfd	$two0,`$LOCALS+8*0`($sp)	# input "template"
+	oris	$in3,$padbit,`(1023+52+96)<<4`
+	stfd	$two32,`$LOCALS+8*1`($sp)
+	stfd	$two64,`$LOCALS+8*2`($sp)
+	stw	$in3,`$LOCALS+8*3+(0^$LITTLE_ENDIAN)`($sp)
+
+	li	$i1,4
+	li	$i2,8
+	li	$i3,12
+	$LWXLE	$in0,0,$inp			# load input
+	$LWXLE	$in1,$i1,$inp
+	$LWXLE	$in2,$i2,$inp
+	$LWXLE	$in3,$i3,$inp
+	addi	$inp,$inp,16
+
+	stw	$in0,`$LOCALS+8*0+(4^$LITTLE_ENDIAN)`($sp)	# fill "template"
+	stw	$in1,`$LOCALS+8*1+(4^$LITTLE_ENDIAN)`($sp)
+	stw	$in2,`$LOCALS+8*2+(4^$LITTLE_ENDIAN)`($sp)
+	stw	$in3,`$LOCALS+8*3+(4^$LITTLE_ENDIAN)`($sp)
+
+	mffs	$x0				# original fpscr
+	lfd	$x1,`$LOCALS+8*4`($sp)		# new fpscr
+	lfd	$r0lo,8*4($ctx)			# load key
+	lfd	$r0hi,8*5($ctx)
+	lfd	$r1lo,8*6($ctx)
+	lfd	$r1hi,8*7($ctx)
+	lfd	$r2lo,8*8($ctx)
+	lfd	$r2hi,8*9($ctx)
+	lfd	$r3lo,8*10($ctx)
+	lfd	$r3hi,8*11($ctx)
+	lfd	$s1lo,8*12($ctx)
+	lfd	$s1hi,8*13($ctx)
+	lfd	$s2lo,8*14($ctx)
+	lfd	$s2hi,8*15($ctx)
+	lfd	$s3lo,8*16($ctx)
+	lfd	$s3hi,8*17($ctx)
+
+	stfd	$x0,`$LOCALS+8*4`($sp)		# save original fpscr
+	mtfsf	255,$x1
+
+	addic	$len,$len,1
+	addze	r0,r0
+	slwi.	r0,r0,4
+	sub	$inp,$inp,r0			# conditional rewind
+
+	lfd	$x0,`$LOCALS+8*0`($sp)
+	lfd	$x1,`$LOCALS+8*1`($sp)
+	lfd	$x2,`$LOCALS+8*2`($sp)
+	lfd	$x3,`$LOCALS+8*3`($sp)
+
+	fsub	$h0lo,$h0lo,$two0		# de-bias hash value
+	 $LWXLE	$in0,0,$inp			# modulo-scheduled input load
+	fsub	$h1lo,$h1lo,$two32
+	 $LWXLE	$in1,$i1,$inp
+	fsub	$h2lo,$h2lo,$two64
+	 $LWXLE	$in2,$i2,$inp
+	fsub	$h3lo,$h3lo,$two96
+	 $LWXLE	$in3,$i3,$inp
+
+	fsub	$x0,$x0,$two0			# de-bias input
+	 addi	$inp,$inp,16
+	fsub	$x1,$x1,$two32
+	fsub	$x2,$x2,$two64
+	fsub	$x3,$x3,$two96
+
+	fadd	$x0,$x0,$h0lo			# accumulate input
+	 stw	$in0,`$LOCALS+8*0+(4^$LITTLE_ENDIAN)`($sp)
+	fadd	$x1,$x1,$h1lo
+	 stw	$in1,`$LOCALS+8*1+(4^$LITTLE_ENDIAN)`($sp)
+	fadd	$x2,$x2,$h2lo
+	 stw	$in2,`$LOCALS+8*2+(4^$LITTLE_ENDIAN)`($sp)
+	fadd	$x3,$x3,$h3lo
+	 stw	$in3,`$LOCALS+8*3+(4^$LITTLE_ENDIAN)`($sp)
+
+	b	Lentry
+
+.align	4
+Loop:
+	fsub	$y0,$y0,$two0			# de-bias input
+	 addic	$len,$len,1
+	fsub	$y1,$y1,$two32
+	 addze	r0,r0
+	fsub	$y2,$y2,$two64
+	 slwi.	r0,r0,4
+	fsub	$y3,$y3,$two96
+	 sub	$inp,$inp,r0			# conditional rewind
+
+	fadd	$h0lo,$h0lo,$y0			# accumulate input
+	fadd	$h0hi,$h0hi,$y1
+	fadd	$h2lo,$h2lo,$y2
+	fadd	$h2hi,$h2hi,$y3
+
+	######################################### base 2^48 -> base 2^32
+	fadd	$c1lo,$h1lo,$two64
+	 $LWXLE	$in0,0,$inp			# modulo-scheduled input load
+	fadd	$c1hi,$h1hi,$two64
+	 $LWXLE	$in1,$i1,$inp
+	fadd	$c3lo,$h3lo,$two130
+	 $LWXLE	$in2,$i2,$inp
+	fadd	$c3hi,$h3hi,$two130
+	 $LWXLE	$in3,$i3,$inp
+	fadd	$c0lo,$h0lo,$two32
+	 addi	$inp,$inp,16
+	fadd	$c0hi,$h0hi,$two32
+	fadd	$c2lo,$h2lo,$two96
+	fadd	$c2hi,$h2hi,$two96
+
+	fsub	$c1lo,$c1lo,$two64
+	 stw	$in0,`$LOCALS+8*0+(4^$LITTLE_ENDIAN)`($sp)	# fill "template"
+	fsub	$c1hi,$c1hi,$two64
+	 stw	$in1,`$LOCALS+8*1+(4^$LITTLE_ENDIAN)`($sp)
+	fsub	$c3lo,$c3lo,$two130
+	 stw	$in2,`$LOCALS+8*2+(4^$LITTLE_ENDIAN)`($sp)
+	fsub	$c3hi,$c3hi,$two130
+	 stw	$in3,`$LOCALS+8*3+(4^$LITTLE_ENDIAN)`($sp)
+	fsub	$c0lo,$c0lo,$two32
+	fsub	$c0hi,$c0hi,$two32
+	fsub	$c2lo,$c2lo,$two96
+	fsub	$c2hi,$c2hi,$two96
+
+	fsub	$h1lo,$h1lo,$c1lo
+	fsub	$h1hi,$h1hi,$c1hi
+	fsub	$h3lo,$h3lo,$c3lo
+	fsub	$h3hi,$h3hi,$c3hi
+	fsub	$h2lo,$h2lo,$c2lo
+	fsub	$h2hi,$h2hi,$c2hi
+	fsub	$h0lo,$h0lo,$c0lo
+	fsub	$h0hi,$h0hi,$c0hi
+
+	fadd	$h1lo,$h1lo,$c0lo
+	fadd	$h1hi,$h1hi,$c0hi
+	fadd	$h3lo,$h3lo,$c2lo
+	fadd	$h3hi,$h3hi,$c2hi
+	fadd	$h2lo,$h2lo,$c1lo
+	fadd	$h2hi,$h2hi,$c1hi
+	fmadd	$h0lo,$c3lo,$five_two130,$h0lo
+	fmadd	$h0hi,$c3hi,$five_two130,$h0hi
+
+	fadd	$x1,$h1lo,$h1hi
+	 lfd	$s1lo,8*12($ctx)		# reload constants
+	fadd	$x3,$h3lo,$h3hi
+	 lfd	$s1hi,8*13($ctx)
+	fadd	$x2,$h2lo,$h2hi
+	 lfd	$r3lo,8*10($ctx)
+	fadd	$x0,$h0lo,$h0hi
+	 lfd	$r3hi,8*11($ctx)
+Lentry:
+	fmul	$h0lo,$s3lo,$x1
+	fmul	$h0hi,$s3hi,$x1
+	fmul	$h2lo,$r1lo,$x1
+	fmul	$h2hi,$r1hi,$x1
+	fmul	$h1lo,$r0lo,$x1
+	fmul	$h1hi,$r0hi,$x1
+	fmul	$h3lo,$r2lo,$x1
+	fmul	$h3hi,$r2hi,$x1
+
+	fmadd	$h0lo,$s1lo,$x3,$h0lo
+	fmadd	$h0hi,$s1hi,$x3,$h0hi
+	fmadd	$h2lo,$s3lo,$x3,$h2lo
+	fmadd	$h2hi,$s3hi,$x3,$h2hi
+	fmadd	$h1lo,$s2lo,$x3,$h1lo
+	fmadd	$h1hi,$s2hi,$x3,$h1hi
+	fmadd	$h3lo,$r0lo,$x3,$h3lo
+	fmadd	$h3hi,$r0hi,$x3,$h3hi
+
+	fmadd	$h0lo,$s2lo,$x2,$h0lo
+	fmadd	$h0hi,$s2hi,$x2,$h0hi
+	fmadd	$h2lo,$r0lo,$x2,$h2lo
+	fmadd	$h2hi,$r0hi,$x2,$h2hi
+	fmadd	$h1lo,$s3lo,$x2,$h1lo
+	fmadd	$h1hi,$s3hi,$x2,$h1hi
+	fmadd	$h3lo,$r1lo,$x2,$h3lo
+	fmadd	$h3hi,$r1hi,$x2,$h3hi
+
+	fmadd	$h0lo,$r0lo,$x0,$h0lo
+	 lfd	$y0,`$LOCALS+8*0`($sp)		# load [biased] input
+	fmadd	$h0hi,$r0hi,$x0,$h0hi
+	 lfd	$y1,`$LOCALS+8*1`($sp)
+	fmadd	$h2lo,$r2lo,$x0,$h2lo
+	 lfd	$y2,`$LOCALS+8*2`($sp)
+	fmadd	$h2hi,$r2hi,$x0,$h2hi
+	 lfd	$y3,`$LOCALS+8*3`($sp)
+	fmadd	$h1lo,$r1lo,$x0,$h1lo
+	fmadd	$h1hi,$r1hi,$x0,$h1hi
+	fmadd	$h3lo,$r3lo,$x0,$h3lo
+	fmadd	$h3hi,$r3hi,$x0,$h3hi
+
+	bdnz	Loop
+
+	######################################### base 2^48 -> base 2^32
+	fadd	$c0lo,$h0lo,$two32
+	fadd	$c0hi,$h0hi,$two32
+	fadd	$c2lo,$h2lo,$two96
+	fadd	$c2hi,$h2hi,$two96
+	fadd	$c1lo,$h1lo,$two64
+	fadd	$c1hi,$h1hi,$two64
+	fadd	$c3lo,$h3lo,$two130
+	fadd	$c3hi,$h3hi,$two130
+
+	fsub	$c0lo,$c0lo,$two32
+	fsub	$c0hi,$c0hi,$two32
+	fsub	$c2lo,$c2lo,$two96
+	fsub	$c2hi,$c2hi,$two96
+	fsub	$c1lo,$c1lo,$two64
+	fsub	$c1hi,$c1hi,$two64
+	fsub	$c3lo,$c3lo,$two130
+	fsub	$c3hi,$c3hi,$two130
+
+	fsub	$h1lo,$h1lo,$c1lo
+	fsub	$h1hi,$h1hi,$c1hi
+	fsub	$h3lo,$h3lo,$c3lo
+	fsub	$h3hi,$h3hi,$c3hi
+	fsub	$h2lo,$h2lo,$c2lo
+	fsub	$h2hi,$h2hi,$c2hi
+	fsub	$h0lo,$h0lo,$c0lo
+	fsub	$h0hi,$h0hi,$c0hi
+
+	fadd	$h1lo,$h1lo,$c0lo
+	fadd	$h1hi,$h1hi,$c0hi
+	fadd	$h3lo,$h3lo,$c2lo
+	fadd	$h3hi,$h3hi,$c2hi
+	fadd	$h2lo,$h2lo,$c1lo
+	fadd	$h2hi,$h2hi,$c1hi
+	fmadd	$h0lo,$c3lo,$five_two130,$h0lo
+	fmadd	$h0hi,$c3hi,$five_two130,$h0hi
+
+	fadd	$x1,$h1lo,$h1hi
+	fadd	$x3,$h3lo,$h3hi
+	fadd	$x2,$h2lo,$h2hi
+	fadd	$x0,$h0lo,$h0hi
+
+	lfd	$h0lo,`$LOCALS+8*4`($sp)	# pull saved fpscr
+	fadd	$x1,$x1,$two32			# bias
+	fadd	$x3,$x3,$two96
+	fadd	$x2,$x2,$two64
+	fadd	$x0,$x0,$two0
+
+	stfd	$x1,8*1($ctx)			# store [biased] hash value
+	stfd	$x3,8*3($ctx)
+	stfd	$x2,8*2($ctx)
+	stfd	$x0,8*0($ctx)
+
+	mtfsf	255,$h0lo			# restore original fpscr
+	lfd	f14,`$FRAME-8*18`($sp)
+	lfd	f15,`$FRAME-8*17`($sp)
+	lfd	f16,`$FRAME-8*16`($sp)
+	lfd	f17,`$FRAME-8*15`($sp)
+	lfd	f18,`$FRAME-8*14`($sp)
+	lfd	f19,`$FRAME-8*13`($sp)
+	lfd	f20,`$FRAME-8*12`($sp)
+	lfd	f21,`$FRAME-8*11`($sp)
+	lfd	f22,`$FRAME-8*10`($sp)
+	lfd	f23,`$FRAME-8*9`($sp)
+	lfd	f24,`$FRAME-8*8`($sp)
+	lfd	f25,`$FRAME-8*7`($sp)
+	lfd	f26,`$FRAME-8*6`($sp)
+	lfd	f27,`$FRAME-8*5`($sp)
+	lfd	f28,`$FRAME-8*4`($sp)
+	lfd	f29,`$FRAME-8*3`($sp)
+	lfd	f30,`$FRAME-8*2`($sp)
+	lfd	f31,`$FRAME-8*1`($sp)
+	addi	$sp,$sp,$FRAME
+Labort:
+	blr
+	.long	0
+	.byte	0,12,4,1,0x80,0,4,0
+.size	.poly1305_blocks_fpu,.-.poly1305_blocks_fpu
+___
+{
+my ($mac,$nonce)=($inp,$len);
+
+my ($h0,$h1,$h2,$h3,$h4, $d0,$d1,$d2,$d3
+   ) = map("r$_",(7..11,28..31));
+my $mask = "r0";
+my $FRAME = (6+4)*$SIZE_T;
+
+$code.=<<___;
+.globl	.poly1305_emit_fpu
+.align	4
+.poly1305_emit_fpu:
+	$STU	$sp,-$FRAME($sp)
+	mflr	r0
+	$PUSH	r28,`$FRAME-$SIZE_T*4`($sp)
+	$PUSH	r29,`$FRAME-$SIZE_T*3`($sp)
+	$PUSH	r30,`$FRAME-$SIZE_T*2`($sp)
+	$PUSH	r31,`$FRAME-$SIZE_T*1`($sp)
+	$PUSH	r0,`$FRAME+$LRSAVE`($sp)
+
+	lwz	$d0,`8*0+(0^$LITTLE_ENDIAN)`($ctx)	# load hash
+	lwz	$h0,`8*0+(4^$LITTLE_ENDIAN)`($ctx)
+	lwz	$d1,`8*1+(0^$LITTLE_ENDIAN)`($ctx)
+	lwz	$h1,`8*1+(4^$LITTLE_ENDIAN)`($ctx)
+	lwz	$d2,`8*2+(0^$LITTLE_ENDIAN)`($ctx)
+	lwz	$h2,`8*2+(4^$LITTLE_ENDIAN)`($ctx)
+	lwz	$d3,`8*3+(0^$LITTLE_ENDIAN)`($ctx)
+	lwz	$h3,`8*3+(4^$LITTLE_ENDIAN)`($ctx)
+
+	lis	$mask,0xfff0
+	andc	$d0,$d0,$mask			# mask exponent
+	andc	$d1,$d1,$mask
+	andc	$d2,$d2,$mask
+	andc	$d3,$d3,$mask			# can be partially reduced...
+	li	$mask,3
+
+	srwi	$padbit,$d3,2			# ... so reduce
+	and	$h4,$d3,$mask
+	andc	$d3,$d3,$mask
+	add	$d3,$d3,$padbit
+___
+						if ($SIZE_T==4) {
+$code.=<<___;
+	addc	$h0,$h0,$d3
+	adde	$h1,$h1,$d0
+	adde	$h2,$h2,$d1
+	adde	$h3,$h3,$d2
+	addze	$h4,$h4
+
+	addic	$d0,$h0,5			# compare to modulus
+	addze	$d1,$h1
+	addze	$d2,$h2
+	addze	$d3,$h3
+	addze	$mask,$h4
+
+	srwi	$mask,$mask,2			# did it carry/borrow?
+	neg	$mask,$mask
+	srawi	$mask,$mask,31			# mask
+
+	andc	$h0,$h0,$mask
+	and	$d0,$d0,$mask
+	andc	$h1,$h1,$mask
+	and	$d1,$d1,$mask
+	or	$h0,$h0,$d0
+	lwz	$d0,0($nonce)			# load nonce
+	andc	$h2,$h2,$mask
+	and	$d2,$d2,$mask
+	or	$h1,$h1,$d1
+	lwz	$d1,4($nonce)
+	andc	$h3,$h3,$mask
+	and	$d3,$d3,$mask
+	or	$h2,$h2,$d2
+	lwz	$d2,8($nonce)
+	or	$h3,$h3,$d3
+	lwz	$d3,12($nonce)
+
+	addc	$h0,$h0,$d0			# accumulate nonce
+	adde	$h1,$h1,$d1
+	adde	$h2,$h2,$d2
+	adde	$h3,$h3,$d3
+___
+						} else {
+$code.=<<___;
+	add	$h0,$h0,$d3
+	add	$h1,$h1,$d0
+	add	$h2,$h2,$d1
+	add	$h3,$h3,$d2
+
+	srdi	$d0,$h0,32
+	add	$h1,$h1,$d0
+	srdi	$d1,$h1,32
+	add	$h2,$h2,$d1
+	srdi	$d2,$h2,32
+	add	$h3,$h3,$d2
+	srdi	$d3,$h3,32
+	add	$h4,$h4,$d3
+
+	insrdi	$h0,$h1,32,0
+	insrdi	$h2,$h3,32,0
+
+	addic	$d0,$h0,5			# compare to modulus
+	addze	$d1,$h2
+	addze	$d2,$h4
+
+	srdi	$mask,$d2,2			# did it carry/borrow?
+	neg	$mask,$mask
+	sradi	$mask,$mask,63			# mask
+	ld	$d2,0($nonce)			# load nonce
+	ld	$d3,8($nonce)
+
+	andc	$h0,$h0,$mask
+	and	$d0,$d0,$mask
+	andc	$h2,$h2,$mask
+	and	$d1,$d1,$mask
+	or	$h0,$h0,$d0
+	or	$h2,$h2,$d1
+___
+$code.=<<___	if (!$LITTLE_ENDIAN);
+	rotldi	$d2,$d2,32			# flip nonce words
+	rotldi	$d3,$d3,32
+___
+$code.=<<___;
+	addc	$h0,$h0,$d2			# accumulate nonce
+	adde	$h2,$h2,$d3
+
+	srdi	$h1,$h0,32
+	srdi	$h3,$h2,32
+___
+						}
+$code.=<<___	if ($LITTLE_ENDIAN);
+	stw	$h0,0($mac)			# write result
+	stw	$h1,4($mac)
+	stw	$h2,8($mac)
+	stw	$h3,12($mac)
+___
+$code.=<<___	if (!$LITTLE_ENDIAN);
+	li	$d1,4
+	stwbrx	$h0,0,$mac			# write result
+	li	$d2,8
+	stwbrx	$h1,$d1,$mac
+	li	$d3,12
+	stwbrx	$h2,$d2,$mac
+	stwbrx	$h3,$d3,$mac
+___
+$code.=<<___;
+	$POP	r28,`$FRAME-$SIZE_T*4`($sp)
+	$POP	r29,`$FRAME-$SIZE_T*3`($sp)
+	$POP	r30,`$FRAME-$SIZE_T*2`($sp)
+	$POP	r31,`$FRAME-$SIZE_T*1`($sp)
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,4,1,0x80,4,3,0
+.size	.poly1305_emit_fpu,.-.poly1305_emit_fpu
+___
+}
+# Ugly hack here, because PPC assembler syntax seem to vary too
+# much from platforms to platform...
+$code.=<<___;
+.align	6
+LPICmeup:
+	mflr	r0
+	bcl	20,31,\$+4
+	mflr	$len	# vvvvvv "distance" between . and 1st data entry
+	addi	$len,$len,`64-8`	# borrow $len
+	mtlr	r0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+	.space	`64-9*4`
+
+.quad	0x4330000000000000		# 2^(52+0)
+.quad	0x4530000000000000		# 2^(52+32)
+.quad	0x4730000000000000		# 2^(52+64)
+.quad	0x4930000000000000		# 2^(52+96)
+.quad	0x4b50000000000000		# 2^(52+130)
+
+.quad	0x37f4000000000000		# 5/2^130
+
+.quad	0x4430000000000000		# 2^(52+16+0)
+.quad	0x4630000000000000		# 2^(52+16+32)
+.quad	0x4830000000000000		# 2^(52+16+64)
+.quad	0x4a30000000000000		# 2^(52+16+96)
+.quad	0x3e30000000000000		# 2^(52+16+0-96)
+.quad	0x4030000000000000		# 2^(52+16+32-96)
+.quad	0x4230000000000000		# 2^(52+16+64-96)
+
+.quad	0x0000000000000001		# fpscr: truncate, no exceptions
+.asciz	"Poly1305 for PPC FPU, CRYPTOGAMS by <appro\@openssl.org>"
+.align	4
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-s390x.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-s390x.pl
new file mode 100755
index 000000000..82d757d9a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-s390x.pl
@@ -0,0 +1,227 @@
+#! /usr/bin/env perl
+# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# This module implements Poly1305 hash for s390x.
+#
+# June 2015
+#
+# ~6.6/2.3 cpb on z10/z196+, >2x improvement over compiler-generated
+# code. For older compiler improvement coefficient is >3x, because
+# then base 2^64 and base 2^32 implementations are compared.
+#
+# On side note, z13 enables vector base 2^26 implementation...
+
+$flavour = shift;
+
+if ($flavour =~ /3[12]/) {
+	$SIZE_T=4;
+	$g="";
+} else {
+	$SIZE_T=8;
+	$g="g";
+}
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+$sp="%r15";
+
+my ($ctx,$inp,$len,$padbit) = map("%r$_",(2..5));
+
+$code.=<<___;
+.text
+
+.globl	poly1305_init
+.type	poly1305_init,\@function
+.align	16
+poly1305_init:
+	lghi	%r0,0
+	lghi	%r1,-1
+	stg	%r0,0($ctx)		# zero hash value
+	stg	%r0,8($ctx)
+	stg	%r0,16($ctx)
+
+	cl${g}r	$inp,%r0
+	je	.Lno_key
+
+	lrvg	%r4,0($inp)		# load little-endian key
+	lrvg	%r5,8($inp)
+
+	nihl	%r1,0xffc0		# 0xffffffc0ffffffff
+	srlg	%r0,%r1,4		# 0x0ffffffc0fffffff
+	srlg	%r1,%r1,4
+	nill	%r1,0xfffc		# 0x0ffffffc0ffffffc
+
+	ngr	%r4,%r0
+	ngr	%r5,%r1
+
+	stg	%r4,32($ctx)
+	stg	%r5,40($ctx)
+
+.Lno_key:
+	lghi	%r2,0
+	br	%r14
+.size	poly1305_init,.-poly1305_init
+___
+{
+my ($d0hi,$d0lo,$d1hi,$d1lo,$t0,$h0,$t1,$h1,$h2) = map("%r$_",(6..14));
+my ($r0,$r1,$s1) = map("%r$_",(0..2));
+
+$code.=<<___;
+.globl	poly1305_blocks
+.type	poly1305_blocks,\@function
+.align	16
+poly1305_blocks:
+	srl${g}	$len,4			# fixed-up in 64-bit build
+	lghi	%r0,0
+	cl${g}r	$len,%r0
+	je	.Lno_data
+
+	stm${g}	%r6,%r14,`6*$SIZE_T`($sp)
+
+	llgfr   $padbit,$padbit		# clear upper half, much needed with
+					# non-64-bit ABI
+	lg	$r0,32($ctx)		# load key
+	lg	$r1,40($ctx)
+
+	lg	$h0,0($ctx)		# load hash value
+	lg	$h1,8($ctx)
+	lg	$h2,16($ctx)
+
+	st$g	$ctx,`2*$SIZE_T`($sp)	# off-load $ctx
+	srlg	$s1,$r1,2
+	algr	$s1,$r1			# s1 = r1 + r1>>2
+	j	.Loop
+
+.align	16
+.Loop:
+	lrvg	$d0lo,0($inp)		# load little-endian input
+	lrvg	$d1lo,8($inp)
+	la	$inp,16($inp)
+
+	algr	$d0lo,$h0		# accumulate input
+	alcgr	$d1lo,$h1
+
+	lgr	$h0,$d0lo
+	mlgr	$d0hi,$r0		# h0*r0	  -> $d0hi:$d0lo
+	lgr	$h1,$d1lo
+	mlgr	$d1hi,$s1		# h1*5*r1 -> $d1hi:$d1lo
+
+	mlgr	$t0,$r1			# h0*r1   -> $t0:$h0
+	mlgr	$t1,$r0			# h1*r0   -> $t1:$h1
+	alcgr	$h2,$padbit
+
+	algr	$d0lo,$d1lo
+	lgr	$d1lo,$h2
+	alcgr	$d0hi,$d1hi
+	lghi	$d1hi,0
+
+	algr	$h1,$h0
+	alcgr	$t1,$t0
+
+	msgr	$d1lo,$s1		# h2*s1
+	msgr	$h2,$r0			# h2*r0
+
+	algr	$h1,$d1lo
+	alcgr	$t1,$d1hi		# $d1hi is zero
+
+	algr	$h1,$d0hi
+	alcgr	$h2,$t1
+
+	lghi	$h0,-4			# final reduction step
+	ngr	$h0,$h2
+	srlg	$t0,$h2,2
+	algr	$h0,$t0
+	lghi	$t1,3
+	ngr	$h2,$t1
+
+	algr	$h0,$d0lo
+	alcgr	$h1,$d1hi		# $d1hi is still zero
+	alcgr	$h2,$d1hi		# $d1hi is still zero
+
+	brct$g	$len,.Loop
+
+	l$g	$ctx,`2*$SIZE_T`($sp)	# restore $ctx
+
+	stg	$h0,0($ctx)		# store hash value
+	stg	$h1,8($ctx)
+	stg	$h2,16($ctx)
+
+	lm${g}	%r6,%r14,`6*$SIZE_T`($sp)
+.Lno_data:
+	br	%r14
+.size	poly1305_blocks,.-poly1305_blocks
+___
+}
+{
+my ($mac,$nonce)=($inp,$len);
+my ($h0,$h1,$h2,$d0,$d1)=map("%r$_",(5..9));
+
+$code.=<<___;
+.globl	poly1305_emit
+.type	poly1305_emit,\@function
+.align	16
+poly1305_emit:
+	stm${g}	%r6,%r9,`6*$SIZE_T`($sp)
+
+	lg	$h0,0($ctx)
+	lg	$h1,8($ctx)
+	lg	$h2,16($ctx)
+
+	lghi	%r0,5
+	lghi	%r1,0
+	lgr	$d0,$h0
+	lgr	$d1,$h1
+
+	algr	$h0,%r0			# compare to modulus
+	alcgr	$h1,%r1
+	alcgr	$h2,%r1
+
+	srlg	$h2,$h2,2		# did it borrow/carry?
+	slgr	%r1,$h2			# 0-$h2>>2
+	lg	$h2,0($nonce)		# load nonce
+	lghi	%r0,-1
+	lg	$ctx,8($nonce)
+	xgr	%r0,%r1			# ~%r1
+
+	ngr	$h0,%r1
+	ngr	$d0,%r0
+	ngr	$h1,%r1
+	ngr	$d1,%r0
+	ogr	$h0,$d0
+	rllg	$d0,$h2,32		# flip nonce words
+	ogr	$h1,$d1
+	rllg	$d1,$ctx,32
+
+	algr	$h0,$d0			# accumulate nonce
+	alcgr	$h1,$d1
+
+	strvg	$h0,0($mac)		# write little-endian result
+	strvg	$h1,8($mac)
+
+	lm${g}	%r6,%r9,`6*$SIZE_T`($sp)
+	br	%r14
+.size	poly1305_emit,.-poly1305_emit
+
+.string	"Poly1305 for s390x, CRYPTOGAMS by <appro\@openssl.org>"
+___
+}
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+$code =~ s/\b(srlg\s+)(%r[0-9]+\s*,)\s*([0-9]+)/$1$2$2$3/gm;
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-sparcv9.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-sparcv9.pl
new file mode 100755
index 000000000..0bdd04892
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-sparcv9.pl
@@ -0,0 +1,1120 @@
+#! /usr/bin/env perl
+# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# This module implements Poly1305 hash for SPARCv9, vanilla, as well
+# as VIS3 and FMA extensions.
+#
+# May, August 2015
+#
+# Numbers are cycles per processed byte with poly1305_blocks alone.
+#
+#			IALU(*)		FMA
+#
+# UltraSPARC III	12.3(**)
+# SPARC T3		7.92
+# SPARC T4		1.70(***)	6.55
+# SPARC64 X		5.60		3.64
+#
+# (*)	Comparison to compiler-generated code is really problematic,
+#	because latter's performance varies too much depending on too
+#	many variables. For example, one can measure from 5x to 15x
+#	improvement on T4 for gcc-4.6. Well, in T4 case it's a bit
+#	unfair comparison, because compiler doesn't use VIS3, but
+#	given same initial conditions coefficient varies from 3x to 9x.
+# (**)	Pre-III performance should be even worse; floating-point
+#	performance for UltraSPARC I-IV on the other hand is reported
+#	to be 4.25 for hand-coded assembly, but they are just too old
+#	to care about.
+# (***)	Multi-process benchmark saturates at ~12.5x single-process
+#	result on 8-core processor, or ~21GBps per 2.85GHz socket.
+
+my $output = pop;
+open STDOUT,">$output";
+
+my ($ctx,$inp,$len,$padbit,$shl,$shr)	= map("%i$_",(0..5));
+my ($r0,$r1,$r2,$r3,$s1,$s2,$s3,$h4)	= map("%l$_",(0..7));
+my ($h0,$h1,$h2,$h3, $t0,$t1,$t2)	= map("%o$_",(0..5,7));
+my ($d0,$d1,$d2,$d3)			= map("%g$_",(1..4));
+
+my $output = pop;
+open STDOUT,">$stdout";
+
+$code.=<<___;
+#include "sparc_arch.h"
+
+#ifdef	__arch64__
+.register	%g2,#scratch
+.register	%g3,#scratch
+# define	STPTR	stx
+# define	SIZE_T	8
+#else
+# define	STPTR	st
+# define	SIZE_T	4
+#endif
+#define	LOCALS	(STACK_BIAS+STACK_FRAME)
+
+.section	".text",#alloc,#execinstr
+
+#ifdef __PIC__
+SPARC_PIC_THUNK(%g1)
+#endif
+
+.globl	poly1305_init
+.align	32
+poly1305_init:
+	save	%sp,-STACK_FRAME-16,%sp
+	nop
+
+	SPARC_LOAD_ADDRESS(OPENSSL_sparcv9cap_P,%g1)
+	ld	[%g1],%g1
+
+	and	%g1,SPARCV9_FMADD|SPARCV9_VIS3,%g1
+	cmp	%g1,SPARCV9_FMADD
+	be	.Lpoly1305_init_fma
+	nop
+
+	stx	%g0,[$ctx+0]
+	stx	%g0,[$ctx+8]		! zero hash value
+	brz,pn	$inp,.Lno_key
+	stx	%g0,[$ctx+16]
+
+	and	$inp,7,$shr		! alignment factor
+	andn	$inp,7,$inp
+	sll	$shr,3,$shr		! *8
+	neg	$shr,$shl
+
+	sethi	%hi(0x0ffffffc),$t0
+	set	8,$h1
+	or	$t0,%lo(0x0ffffffc),$t0
+	set	16,$h2
+	sllx	$t0,32,$t1
+	or	$t0,$t1,$t1		! 0x0ffffffc0ffffffc
+	or	$t1,3,$t0		! 0x0ffffffc0fffffff
+
+	ldxa	[$inp+%g0]0x88,$h0	! load little-endian key
+	brz,pt	$shr,.Lkey_aligned
+	ldxa	[$inp+$h1]0x88,$h1
+
+	ldxa	[$inp+$h2]0x88,$h2
+	srlx	$h0,$shr,$h0
+	sllx	$h1,$shl,$t2
+	srlx	$h1,$shr,$h1
+	or	$t2,$h0,$h0
+	sllx	$h2,$shl,$h2
+	or	$h2,$h1,$h1
+
+.Lkey_aligned:
+	and	$t0,$h0,$h0
+	and	$t1,$h1,$h1
+	stx	$h0,[$ctx+32+0]		! store key
+	stx	$h1,[$ctx+32+8]
+
+	andcc	%g1,SPARCV9_VIS3,%g0
+	be	.Lno_key
+	nop
+
+1:	call	.+8
+	add	%o7,poly1305_blocks_vis3-1b,%o7
+
+	add	%o7,poly1305_emit-poly1305_blocks_vis3,%o5
+	STPTR	%o7,[%i2]
+	STPTR	%o5,[%i2+SIZE_T]
+
+	ret
+	restore	%g0,1,%o0		! return 1
+
+.Lno_key:
+	ret
+	restore	%g0,%g0,%o0		! return 0
+.type	poly1305_init,#function
+.size	poly1305_init,.-poly1305_init
+
+.globl	poly1305_blocks
+.align	32
+poly1305_blocks:
+	save	%sp,-STACK_FRAME,%sp
+	srln	$len,4,$len
+
+	brz,pn	$len,.Lno_data
+	nop
+
+	ld	[$ctx+32+0],$r1		! load key
+	ld	[$ctx+32+4],$r0
+	ld	[$ctx+32+8],$r3
+	ld	[$ctx+32+12],$r2
+
+	ld	[$ctx+0],$h1		! load hash value
+	ld	[$ctx+4],$h0
+	ld	[$ctx+8],$h3
+	ld	[$ctx+12],$h2
+	ld	[$ctx+16],$h4
+
+	and	$inp,7,$shr		! alignment factor
+	andn	$inp,7,$inp
+	set	8,$d1
+	sll	$shr,3,$shr		! *8
+	set	16,$d2
+	neg	$shr,$shl
+
+	srl	$r1,2,$s1
+	srl	$r2,2,$s2
+	add	$r1,$s1,$s1
+	srl	$r3,2,$s3
+	add	$r2,$s2,$s2
+	add	$r3,$s3,$s3
+
+.Loop:
+	ldxa	[$inp+%g0]0x88,$d0	! load little-endian input
+	brz,pt	$shr,.Linp_aligned
+	ldxa	[$inp+$d1]0x88,$d1
+
+	ldxa	[$inp+$d2]0x88,$d2
+	srlx	$d0,$shr,$d0
+	sllx	$d1,$shl,$t1
+	srlx	$d1,$shr,$d1
+	or	$t1,$d0,$d0
+	sllx	$d2,$shl,$d2
+	or	$d2,$d1,$d1
+
+.Linp_aligned:
+	srlx	$d0,32,$t0
+	addcc	$d0,$h0,$h0		! accumulate input
+	srlx	$d1,32,$t1
+	addccc	$t0,$h1,$h1
+	addccc	$d1,$h2,$h2
+	addccc	$t1,$h3,$h3
+	addc	$padbit,$h4,$h4
+
+	umul	$r0,$h0,$d0
+	umul	$r1,$h0,$d1
+	umul	$r2,$h0,$d2
+	umul	$r3,$h0,$d3
+	 sub	$len,1,$len
+	 add	$inp,16,$inp
+
+	umul	$s3,$h1,$t0
+	umul	$r0,$h1,$t1
+	umul	$r1,$h1,$t2
+	add	$t0,$d0,$d0
+	add	$t1,$d1,$d1
+	umul	$r2,$h1,$t0
+	add	$t2,$d2,$d2
+	add	$t0,$d3,$d3
+
+	umul	$s2,$h2,$t1
+	umul	$s3,$h2,$t2
+	umul	$r0,$h2,$t0
+	add	$t1,$d0,$d0
+	add	$t2,$d1,$d1
+	umul	$r1,$h2,$t1
+	add	$t0,$d2,$d2
+	add	$t1,$d3,$d3
+
+	umul	$s1,$h3,$t2
+	umul	$s2,$h3,$t0
+	umul	$s3,$h3,$t1
+	add	$t2,$d0,$d0
+	add	$t0,$d1,$d1
+	umul	$r0,$h3,$t2
+	add	$t1,$d2,$d2
+	add	$t2,$d3,$d3
+
+	umul	$s1,$h4,$t0
+	umul	$s2,$h4,$t1
+	umul	$s3,$h4,$t2
+	umul	$r0,$h4,$h4
+	add	$t0,$d1,$d1
+	add	$t1,$d2,$d2
+	srlx	$d0,32,$h1
+	add	$t2,$d3,$d3
+	srlx	$d1,32,$h2
+
+	addcc	$d1,$h1,$h1
+	srlx	$d2,32,$h3
+	 set	8,$d1
+	addccc	$d2,$h2,$h2
+	srlx	$d3,32,$t0
+	 set	16,$d2
+	addccc	$d3,$h3,$h3
+	addc	$t0,$h4,$h4
+
+	srl	$h4,2,$t0		! final reduction step
+	andn	$h4,3,$t1
+	and	$h4,3,$h4
+	add	$t1,$t0,$t0
+
+	addcc	$t0,$d0,$h0
+	addccc	%g0,$h1,$h1
+	addccc	%g0,$h2,$h2
+	addccc	%g0,$h3,$h3
+	brnz,pt	$len,.Loop
+	addc	%g0,$h4,$h4
+
+	st	$h1,[$ctx+0]		! store hash value
+	st	$h0,[$ctx+4]
+	st	$h3,[$ctx+8]
+	st	$h2,[$ctx+12]
+	st	$h4,[$ctx+16]
+
+.Lno_data:
+	ret
+	restore
+.type	poly1305_blocks,#function
+.size	poly1305_blocks,.-poly1305_blocks
+___
+########################################################################
+# VIS3 has umulxhi and addxc...
+{
+my ($H0,$H1,$H2,$R0,$R1,$S1,$T1) = map("%o$_",(0..5,7));
+my ($D0,$D1,$D2,$T0) = map("%g$_",(1..4));
+
+$code.=<<___;
+.align	32
+poly1305_blocks_vis3:
+	save	%sp,-STACK_FRAME,%sp
+	srln	$len,4,$len
+
+	brz,pn	$len,.Lno_data
+	nop
+
+	ldx	[$ctx+32+0],$R0		! load key
+	ldx	[$ctx+32+8],$R1
+
+	ldx	[$ctx+0],$H0		! load hash value
+	ldx	[$ctx+8],$H1
+	ld	[$ctx+16],$H2
+
+	and	$inp,7,$shr		! alignment factor
+	andn	$inp,7,$inp
+	set	8,$r1
+	sll	$shr,3,$shr		! *8
+	set	16,$r2
+	neg	$shr,$shl
+
+	srlx	$R1,2,$S1
+	b	.Loop_vis3
+	add	$R1,$S1,$S1
+
+.Loop_vis3:
+	ldxa	[$inp+%g0]0x88,$D0	! load little-endian input
+	brz,pt	$shr,.Linp_aligned_vis3
+	ldxa	[$inp+$r1]0x88,$D1
+
+	ldxa	[$inp+$r2]0x88,$D2
+	srlx	$D0,$shr,$D0
+	sllx	$D1,$shl,$T1
+	srlx	$D1,$shr,$D1
+	or	$T1,$D0,$D0
+	sllx	$D2,$shl,$D2
+	or	$D2,$D1,$D1
+
+.Linp_aligned_vis3:
+	addcc	$D0,$H0,$H0		! accumulate input
+	 sub	$len,1,$len
+	addxccc	$D1,$H1,$H1
+	 add	$inp,16,$inp
+
+	mulx	$R0,$H0,$D0		! r0*h0
+	addxc	$padbit,$H2,$H2
+	umulxhi	$R0,$H0,$D1
+	mulx	$S1,$H1,$T0		! s1*h1
+	umulxhi	$S1,$H1,$T1
+	addcc	$T0,$D0,$D0
+	mulx	$R1,$H0,$T0		! r1*h0
+	addxc	$T1,$D1,$D1
+	umulxhi	$R1,$H0,$D2
+	addcc	$T0,$D1,$D1
+	mulx	$R0,$H1,$T0		! r0*h1
+	addxc	%g0,$D2,$D2
+	umulxhi	$R0,$H1,$T1
+	addcc	$T0,$D1,$D1
+	mulx	$S1,$H2,$T0		! s1*h2
+	addxc	$T1,$D2,$D2
+	mulx	$R0,$H2,$T1		! r0*h2
+	addcc	$T0,$D1,$D1
+	addxc	$T1,$D2,$D2
+
+	srlx	$D2,2,$T0		! final reduction step
+	andn	$D2,3,$T1
+	and	$D2,3,$H2
+	add	$T1,$T0,$T0
+
+	addcc	$T0,$D0,$H0
+	addxccc	%g0,$D1,$H1
+	brnz,pt	$len,.Loop_vis3
+	addxc	%g0,$H2,$H2
+
+	stx	$H0,[$ctx+0]		! store hash value
+	stx	$H1,[$ctx+8]
+	st	$H2,[$ctx+16]
+
+	ret
+	restore
+.type	poly1305_blocks_vis3,#function
+.size	poly1305_blocks_vis3,.-poly1305_blocks_vis3
+___
+}
+my ($mac,$nonce) = ($inp,$len);
+
+$code.=<<___;
+.globl	poly1305_emit
+.align	32
+poly1305_emit:
+	save	%sp,-STACK_FRAME,%sp
+
+	ld	[$ctx+0],$h1		! load hash value
+	ld	[$ctx+4],$h0
+	ld	[$ctx+8],$h3
+	ld	[$ctx+12],$h2
+	ld	[$ctx+16],$h4
+
+	addcc	$h0,5,$r0		! compare to modulus
+	addccc	$h1,0,$r1
+	addccc	$h2,0,$r2
+	addccc	$h3,0,$r3
+	addc	$h4,0,$h4
+	andcc	$h4,4,%g0		! did it carry/borrow?
+
+	movnz	%icc,$r0,$h0
+	ld	[$nonce+0],$r0		! load nonce
+	movnz	%icc,$r1,$h1
+	ld	[$nonce+4],$r1
+	movnz	%icc,$r2,$h2
+	ld	[$nonce+8],$r2
+	movnz	%icc,$r3,$h3
+	ld	[$nonce+12],$r3
+
+	addcc	$r0,$h0,$h0		! accumulate nonce
+	addccc	$r1,$h1,$h1
+	addccc	$r2,$h2,$h2
+	addc	$r3,$h3,$h3
+
+	srl	$h0,8,$r0
+	stb	$h0,[$mac+0]		! store little-endian result
+	srl	$h0,16,$r1
+	stb	$r0,[$mac+1]
+	srl	$h0,24,$r2
+	stb	$r1,[$mac+2]
+	stb	$r2,[$mac+3]
+
+	srl	$h1,8,$r0
+	stb	$h1,[$mac+4]
+	srl	$h1,16,$r1
+	stb	$r0,[$mac+5]
+	srl	$h1,24,$r2
+	stb	$r1,[$mac+6]
+	stb	$r2,[$mac+7]
+
+	srl	$h2,8,$r0
+	stb	$h2,[$mac+8]
+	srl	$h2,16,$r1
+	stb	$r0,[$mac+9]
+	srl	$h2,24,$r2
+	stb	$r1,[$mac+10]
+	stb	$r2,[$mac+11]
+
+	srl	$h3,8,$r0
+	stb	$h3,[$mac+12]
+	srl	$h3,16,$r1
+	stb	$r0,[$mac+13]
+	srl	$h3,24,$r2
+	stb	$r1,[$mac+14]
+	stb	$r2,[$mac+15]
+
+	ret
+	restore
+.type	poly1305_emit,#function
+.size	poly1305_emit,.-poly1305_emit
+___
+
+{
+my ($ctx,$inp,$len,$padbit) = map("%i$_",(0..3));
+my ($in0,$in1,$in2,$in3,$in4) = map("%o$_",(0..4));
+my ($i1,$step,$shr,$shl) = map("%l$_",(0..7));
+my $i2=$step;
+
+my ($h0lo,$h0hi,$h1lo,$h1hi,$h2lo,$h2hi,$h3lo,$h3hi,
+    $two0,$two32,$two64,$two96,$two130,$five_two130,
+    $r0lo,$r0hi,$r1lo,$r1hi,$r2lo,$r2hi,
+    $s2lo,$s2hi,$s3lo,$s3hi,
+    $c0lo,$c0hi,$c1lo,$c1hi,$c2lo,$c2hi,$c3lo,$c3hi) = map("%f".2*$_,(0..31));
+# borrowings
+my ($r3lo,$r3hi,$s1lo,$s1hi) = ($c0lo,$c0hi,$c1lo,$c1hi);
+my ($x0,$x1,$x2,$x3) = ($c2lo,$c2hi,$c3lo,$c3hi);
+my ($y0,$y1,$y2,$y3) = ($c1lo,$c1hi,$c3hi,$c3lo);
+
+$code.=<<___;
+.align	32
+poly1305_init_fma:
+	save	%sp,-STACK_FRAME-16,%sp
+	nop
+
+.Lpoly1305_init_fma:
+1:	call	.+8
+	add	%o7,.Lconsts_fma-1b,%o7
+
+	ldd	[%o7+8*0],$two0			! load constants
+	ldd	[%o7+8*1],$two32
+	ldd	[%o7+8*2],$two64
+	ldd	[%o7+8*3],$two96
+	ldd	[%o7+8*5],$five_two130
+
+	std	$two0,[$ctx+8*0]		! initial hash value, biased 0
+	std	$two32,[$ctx+8*1]
+	std	$two64,[$ctx+8*2]
+	std	$two96,[$ctx+8*3]
+
+	brz,pn	$inp,.Lno_key_fma
+	nop
+
+	stx	%fsr,[%sp+LOCALS]		! save original %fsr
+	ldx	[%o7+8*6],%fsr			! load new %fsr
+
+	std	$two0,[$ctx+8*4] 		! key "template"
+	std	$two32,[$ctx+8*5]
+	std	$two64,[$ctx+8*6]
+	std	$two96,[$ctx+8*7]
+
+	and	$inp,7,$shr
+	andn	$inp,7,$inp			! align pointer
+	mov	8,$i1
+	sll	$shr,3,$shr
+	mov	16,$i2
+	neg	$shr,$shl
+
+	ldxa	[$inp+%g0]0x88,$in0		! load little-endian key
+	ldxa	[$inp+$i1]0x88,$in2
+
+	brz	$shr,.Lkey_aligned_fma
+	sethi	%hi(0xf0000000),$i1		!   0xf0000000
+
+	ldxa	[$inp+$i2]0x88,$in4
+
+	srlx	$in0,$shr,$in0			! align data
+	sllx	$in2,$shl,$in1
+	srlx	$in2,$shr,$in2
+	or	$in1,$in0,$in0
+	sllx	$in4,$shl,$in3
+	or	$in3,$in2,$in2
+
+.Lkey_aligned_fma:
+	or	$i1,3,$i2			!   0xf0000003
+	srlx	$in0,32,$in1
+	andn	$in0,$i1,$in0			! &=0x0fffffff
+	andn	$in1,$i2,$in1			! &=0x0ffffffc
+	srlx	$in2,32,$in3
+	andn	$in2,$i2,$in2
+	andn	$in3,$i2,$in3
+
+	st	$in0,[$ctx+`8*4+4`]		! fill "template"
+	st	$in1,[$ctx+`8*5+4`]
+	st	$in2,[$ctx+`8*6+4`]
+	st	$in3,[$ctx+`8*7+4`]
+
+	ldd	[$ctx+8*4],$h0lo 		! load [biased] key
+	ldd	[$ctx+8*5],$h1lo
+	ldd	[$ctx+8*6],$h2lo
+	ldd	[$ctx+8*7],$h3lo
+
+	fsubd	$h0lo,$two0, $h0lo		! r0
+	 ldd	[%o7+8*7],$two0 		! more constants
+	fsubd	$h1lo,$two32,$h1lo		! r1
+	 ldd	[%o7+8*8],$two32
+	fsubd	$h2lo,$two64,$h2lo		! r2
+	 ldd	[%o7+8*9],$two64
+	fsubd	$h3lo,$two96,$h3lo		! r3
+	 ldd	[%o7+8*10],$two96
+
+	fmuld	$five_two130,$h1lo,$s1lo	! s1
+	fmuld	$five_two130,$h2lo,$s2lo	! s2
+	fmuld	$five_two130,$h3lo,$s3lo	! s3
+
+	faddd	$h0lo,$two0, $h0hi
+	faddd	$h1lo,$two32,$h1hi
+	faddd	$h2lo,$two64,$h2hi
+	faddd	$h3lo,$two96,$h3hi
+
+	fsubd	$h0hi,$two0, $h0hi
+	 ldd	[%o7+8*11],$two0		! more constants
+	fsubd	$h1hi,$two32,$h1hi
+	 ldd	[%o7+8*12],$two32
+	fsubd	$h2hi,$two64,$h2hi
+	 ldd	[%o7+8*13],$two64
+	fsubd	$h3hi,$two96,$h3hi
+
+	fsubd	$h0lo,$h0hi,$h0lo
+	 std	$h0hi,[$ctx+8*5] 		! r0hi
+	fsubd	$h1lo,$h1hi,$h1lo
+	 std	$h1hi,[$ctx+8*7] 		! r1hi
+	fsubd	$h2lo,$h2hi,$h2lo
+	 std	$h2hi,[$ctx+8*9] 		! r2hi
+	fsubd	$h3lo,$h3hi,$h3lo
+	 std	$h3hi,[$ctx+8*11]		! r3hi
+
+	faddd	$s1lo,$two0, $s1hi
+	faddd	$s2lo,$two32,$s2hi
+	faddd	$s3lo,$two64,$s3hi
+
+	fsubd	$s1hi,$two0, $s1hi
+	fsubd	$s2hi,$two32,$s2hi
+	fsubd	$s3hi,$two64,$s3hi
+
+	fsubd	$s1lo,$s1hi,$s1lo
+	fsubd	$s2lo,$s2hi,$s2lo
+	fsubd	$s3lo,$s3hi,$s3lo
+
+	ldx	[%sp+LOCALS],%fsr		! restore %fsr
+
+	std	$h0lo,[$ctx+8*4] 		! r0lo
+	std	$h1lo,[$ctx+8*6] 		! r1lo
+	std	$h2lo,[$ctx+8*8] 		! r2lo
+	std	$h3lo,[$ctx+8*10]		! r3lo
+
+	std	$s1hi,[$ctx+8*13]
+	std	$s2hi,[$ctx+8*15]
+	std	$s3hi,[$ctx+8*17]
+
+	std	$s1lo,[$ctx+8*12]
+	std	$s2lo,[$ctx+8*14]
+	std	$s3lo,[$ctx+8*16]
+
+	add	%o7,poly1305_blocks_fma-.Lconsts_fma,%o0
+	add	%o7,poly1305_emit_fma-.Lconsts_fma,%o1
+	STPTR	%o0,[%i2]
+	STPTR	%o1,[%i2+SIZE_T]
+
+	ret
+	restore	%g0,1,%o0			! return 1
+
+.Lno_key_fma:
+	ret
+	restore	%g0,%g0,%o0			! return 0
+.type	poly1305_init_fma,#function
+.size	poly1305_init_fma,.-poly1305_init_fma
+
+.align	32
+poly1305_blocks_fma:
+	save	%sp,-STACK_FRAME-48,%sp
+	srln	$len,4,$len
+
+	brz,pn	$len,.Labort
+	sub	$len,1,$len
+
+1:	call	.+8
+	add	%o7,.Lconsts_fma-1b,%o7
+
+	ldd	[%o7+8*0],$two0			! load constants
+	ldd	[%o7+8*1],$two32
+	ldd	[%o7+8*2],$two64
+	ldd	[%o7+8*3],$two96
+	ldd	[%o7+8*4],$two130
+	ldd	[%o7+8*5],$five_two130
+
+	ldd	[$ctx+8*0],$h0lo 		! load [biased] hash value
+	ldd	[$ctx+8*1],$h1lo
+	ldd	[$ctx+8*2],$h2lo
+	ldd	[$ctx+8*3],$h3lo
+
+	std	$two0,[%sp+LOCALS+8*0]		! input "template"
+	sethi	%hi((1023+52+96)<<20),$in3
+	std	$two32,[%sp+LOCALS+8*1]
+	or	$padbit,$in3,$in3
+	std	$two64,[%sp+LOCALS+8*2]
+	st	$in3,[%sp+LOCALS+8*3]
+
+	and	$inp,7,$shr
+	andn	$inp,7,$inp			! align pointer
+	mov	8,$i1
+	sll	$shr,3,$shr
+	mov	16,$step
+	neg	$shr,$shl
+
+	ldxa	[$inp+%g0]0x88,$in0		! load little-endian input
+	brz	$shr,.Linp_aligned_fma
+	ldxa	[$inp+$i1]0x88,$in2
+
+	ldxa	[$inp+$step]0x88,$in4
+	add	$inp,8,$inp
+
+	srlx	$in0,$shr,$in0			! align data
+	sllx	$in2,$shl,$in1
+	srlx	$in2,$shr,$in2
+	or	$in1,$in0,$in0
+	sllx	$in4,$shl,$in3
+	srlx	$in4,$shr,$in4			! pre-shift
+	or	$in3,$in2,$in2
+
+.Linp_aligned_fma:
+	srlx	$in0,32,$in1
+	movrz	$len,0,$step
+	srlx	$in2,32,$in3
+	add	$step,$inp,$inp			! conditional advance
+
+	st	$in0,[%sp+LOCALS+8*0+4]		! fill "template"
+	st	$in1,[%sp+LOCALS+8*1+4]
+	st	$in2,[%sp+LOCALS+8*2+4]
+	st	$in3,[%sp+LOCALS+8*3+4]
+
+	ldd	[$ctx+8*4],$r0lo 		! load key
+	ldd	[$ctx+8*5],$r0hi
+	ldd	[$ctx+8*6],$r1lo
+	ldd	[$ctx+8*7],$r1hi
+	ldd	[$ctx+8*8],$r2lo
+	ldd	[$ctx+8*9],$r2hi
+	ldd	[$ctx+8*10],$r3lo
+	ldd	[$ctx+8*11],$r3hi
+	ldd	[$ctx+8*12],$s1lo
+	ldd	[$ctx+8*13],$s1hi
+	ldd	[$ctx+8*14],$s2lo
+	ldd	[$ctx+8*15],$s2hi
+	ldd	[$ctx+8*16],$s3lo
+	ldd	[$ctx+8*17],$s3hi
+
+	stx	%fsr,[%sp+LOCALS+8*4]		! save original %fsr
+	ldx	[%o7+8*6],%fsr			! load new %fsr
+
+	subcc	$len,1,$len
+	movrz	$len,0,$step
+
+	ldd	[%sp+LOCALS+8*0],$x0		! load biased input
+	ldd	[%sp+LOCALS+8*1],$x1
+	ldd	[%sp+LOCALS+8*2],$x2
+	ldd	[%sp+LOCALS+8*3],$x3
+
+	fsubd	$h0lo,$two0, $h0lo		! de-bias hash value
+	fsubd	$h1lo,$two32,$h1lo
+	 ldxa	[$inp+%g0]0x88,$in0		! modulo-scheduled input load
+	fsubd	$h2lo,$two64,$h2lo
+	fsubd	$h3lo,$two96,$h3lo
+	 ldxa	[$inp+$i1]0x88,$in2
+
+	fsubd	$x0,$two0, $x0  		! de-bias input
+	fsubd	$x1,$two32,$x1
+	fsubd	$x2,$two64,$x2
+	fsubd	$x3,$two96,$x3
+
+	brz	$shr,.Linp_aligned_fma2
+	add	$step,$inp,$inp			! conditional advance
+
+	sllx	$in0,$shl,$in1			! align data
+	srlx	$in0,$shr,$in3
+	or	$in1,$in4,$in0
+	sllx	$in2,$shl,$in1
+	srlx	$in2,$shr,$in4			! pre-shift
+	or	$in3,$in1,$in2
+.Linp_aligned_fma2:
+	srlx	$in0,32,$in1
+	srlx	$in2,32,$in3
+
+	faddd	$h0lo,$x0,$x0			! accumulate input
+	 stw	$in0,[%sp+LOCALS+8*0+4]
+	faddd	$h1lo,$x1,$x1
+	 stw	$in1,[%sp+LOCALS+8*1+4]
+	faddd	$h2lo,$x2,$x2
+	 stw	$in2,[%sp+LOCALS+8*2+4]
+	faddd	$h3lo,$x3,$x3
+	 stw	$in3,[%sp+LOCALS+8*3+4]
+
+	b	.Lentry_fma
+	nop
+
+.align	16
+.Loop_fma:
+	ldxa	[$inp+%g0]0x88,$in0		! modulo-scheduled input load
+	ldxa	[$inp+$i1]0x88,$in2
+	movrz	$len,0,$step
+
+	faddd	$y0,$h0lo,$h0lo 		! accumulate input
+	faddd	$y1,$h0hi,$h0hi
+	faddd	$y2,$h2lo,$h2lo
+	faddd	$y3,$h2hi,$h2hi
+
+	brz,pn	$shr,.Linp_aligned_fma3
+	add	$step,$inp,$inp			! conditional advance
+
+	sllx	$in0,$shl,$in1			! align data
+	srlx	$in0,$shr,$in3
+	or	$in1,$in4,$in0
+	sllx	$in2,$shl,$in1
+	srlx	$in2,$shr,$in4			! pre-shift
+	or	$in3,$in1,$in2
+
+.Linp_aligned_fma3:
+	!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! base 2^48 -> base 2^32
+	faddd	$two64,$h1lo,$c1lo
+	 srlx	$in0,32,$in1
+	faddd	$two64,$h1hi,$c1hi
+	 srlx	$in2,32,$in3
+	faddd	$two130,$h3lo,$c3lo
+	 st	$in0,[%sp+LOCALS+8*0+4]		! fill "template"
+	faddd	$two130,$h3hi,$c3hi
+	 st	$in1,[%sp+LOCALS+8*1+4]
+	faddd	$two32,$h0lo,$c0lo
+	 st	$in2,[%sp+LOCALS+8*2+4]
+	faddd	$two32,$h0hi,$c0hi
+	 st	$in3,[%sp+LOCALS+8*3+4]
+	faddd	$two96,$h2lo,$c2lo
+	faddd	$two96,$h2hi,$c2hi
+
+	fsubd	$c1lo,$two64,$c1lo
+	fsubd	$c1hi,$two64,$c1hi
+	fsubd	$c3lo,$two130,$c3lo
+	fsubd	$c3hi,$two130,$c3hi
+	fsubd	$c0lo,$two32,$c0lo
+	fsubd	$c0hi,$two32,$c0hi
+	fsubd	$c2lo,$two96,$c2lo
+	fsubd	$c2hi,$two96,$c2hi
+
+	fsubd	$h1lo,$c1lo,$h1lo
+	fsubd	$h1hi,$c1hi,$h1hi
+	fsubd	$h3lo,$c3lo,$h3lo
+	fsubd	$h3hi,$c3hi,$h3hi
+	fsubd	$h2lo,$c2lo,$h2lo
+	fsubd	$h2hi,$c2hi,$h2hi
+	fsubd	$h0lo,$c0lo,$h0lo
+	fsubd	$h0hi,$c0hi,$h0hi
+
+	faddd	$h1lo,$c0lo,$h1lo
+	faddd	$h1hi,$c0hi,$h1hi
+	faddd	$h3lo,$c2lo,$h3lo
+	faddd	$h3hi,$c2hi,$h3hi
+	faddd	$h2lo,$c1lo,$h2lo
+	faddd	$h2hi,$c1hi,$h2hi
+	fmaddd	$five_two130,$c3lo,$h0lo,$h0lo
+	fmaddd	$five_two130,$c3hi,$h0hi,$h0hi
+
+	faddd	$h1lo,$h1hi,$x1
+	 ldd	[$ctx+8*12],$s1lo		! reload constants
+	faddd	$h3lo,$h3hi,$x3
+	 ldd	[$ctx+8*13],$s1hi
+	faddd	$h2lo,$h2hi,$x2
+	 ldd	[$ctx+8*10],$r3lo
+	faddd	$h0lo,$h0hi,$x0
+	 ldd	[$ctx+8*11],$r3hi
+
+.Lentry_fma:
+	fmuld	$x1,$s3lo,$h0lo
+	fmuld	$x1,$s3hi,$h0hi
+	fmuld	$x1,$r1lo,$h2lo
+	fmuld	$x1,$r1hi,$h2hi
+	fmuld	$x1,$r0lo,$h1lo
+	fmuld	$x1,$r0hi,$h1hi
+	fmuld	$x1,$r2lo,$h3lo
+	fmuld	$x1,$r2hi,$h3hi
+
+	fmaddd	$x3,$s1lo,$h0lo,$h0lo
+	fmaddd	$x3,$s1hi,$h0hi,$h0hi
+	fmaddd	$x3,$s3lo,$h2lo,$h2lo
+	fmaddd	$x3,$s3hi,$h2hi,$h2hi
+	fmaddd	$x3,$s2lo,$h1lo,$h1lo
+	fmaddd	$x3,$s2hi,$h1hi,$h1hi
+	fmaddd	$x3,$r0lo,$h3lo,$h3lo
+	fmaddd	$x3,$r0hi,$h3hi,$h3hi
+
+	fmaddd	$x2,$s2lo,$h0lo,$h0lo
+	fmaddd	$x2,$s2hi,$h0hi,$h0hi
+	fmaddd	$x2,$r0lo,$h2lo,$h2lo
+	fmaddd	$x2,$r0hi,$h2hi,$h2hi
+	fmaddd	$x2,$s3lo,$h1lo,$h1lo
+	 ldd	[%sp+LOCALS+8*0],$y0		! load [biased] input
+	fmaddd	$x2,$s3hi,$h1hi,$h1hi
+	 ldd	[%sp+LOCALS+8*1],$y1
+	fmaddd	$x2,$r1lo,$h3lo,$h3lo
+	 ldd	[%sp+LOCALS+8*2],$y2
+	fmaddd	$x2,$r1hi,$h3hi,$h3hi
+	 ldd	[%sp+LOCALS+8*3],$y3
+
+	fmaddd	$x0,$r0lo,$h0lo,$h0lo
+	 fsubd	$y0,$two0, $y0  		! de-bias input
+	fmaddd	$x0,$r0hi,$h0hi,$h0hi
+	 fsubd	$y1,$two32,$y1
+	fmaddd	$x0,$r2lo,$h2lo,$h2lo
+	 fsubd	$y2,$two64,$y2
+	fmaddd	$x0,$r2hi,$h2hi,$h2hi
+	 fsubd	$y3,$two96,$y3
+	fmaddd	$x0,$r1lo,$h1lo,$h1lo
+	fmaddd	$x0,$r1hi,$h1hi,$h1hi
+	fmaddd	$x0,$r3lo,$h3lo,$h3lo
+	fmaddd	$x0,$r3hi,$h3hi,$h3hi
+
+	bcc	SIZE_T_CC,.Loop_fma
+	subcc	$len,1,$len
+
+	!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! base 2^48 -> base 2^32
+	faddd	$h0lo,$two32,$c0lo
+	faddd	$h0hi,$two32,$c0hi
+	faddd	$h2lo,$two96,$c2lo
+	faddd	$h2hi,$two96,$c2hi
+	faddd	$h1lo,$two64,$c1lo
+	faddd	$h1hi,$two64,$c1hi
+	faddd	$h3lo,$two130,$c3lo
+	faddd	$h3hi,$two130,$c3hi
+
+	fsubd	$c0lo,$two32,$c0lo
+	fsubd	$c0hi,$two32,$c0hi
+	fsubd	$c2lo,$two96,$c2lo
+	fsubd	$c2hi,$two96,$c2hi
+	fsubd	$c1lo,$two64,$c1lo
+	fsubd	$c1hi,$two64,$c1hi
+	fsubd	$c3lo,$two130,$c3lo
+	fsubd	$c3hi,$two130,$c3hi
+
+	fsubd	$h1lo,$c1lo,$h1lo
+	fsubd	$h1hi,$c1hi,$h1hi
+	fsubd	$h3lo,$c3lo,$h3lo
+	fsubd	$h3hi,$c3hi,$h3hi
+	fsubd	$h2lo,$c2lo,$h2lo
+	fsubd	$h2hi,$c2hi,$h2hi
+	fsubd	$h0lo,$c0lo,$h0lo
+	fsubd	$h0hi,$c0hi,$h0hi
+
+	faddd	$h1lo,$c0lo,$h1lo
+	faddd	$h1hi,$c0hi,$h1hi
+	faddd	$h3lo,$c2lo,$h3lo
+	faddd	$h3hi,$c2hi,$h3hi
+	faddd	$h2lo,$c1lo,$h2lo
+	faddd	$h2hi,$c1hi,$h2hi
+	fmaddd	$five_two130,$c3lo,$h0lo,$h0lo
+	fmaddd	$five_two130,$c3hi,$h0hi,$h0hi
+
+	faddd	$h1lo,$h1hi,$x1
+	faddd	$h3lo,$h3hi,$x3
+	faddd	$h2lo,$h2hi,$x2
+	faddd	$h0lo,$h0hi,$x0
+
+	faddd	$x1,$two32,$x1  		! bias
+	faddd	$x3,$two96,$x3
+	faddd	$x2,$two64,$x2
+	faddd	$x0,$two0, $x0
+
+	ldx	[%sp+LOCALS+8*4],%fsr		! restore saved %fsr
+
+	std	$x1,[$ctx+8*1]			! store [biased] hash value
+	std	$x3,[$ctx+8*3]
+	std	$x2,[$ctx+8*2]
+	std	$x0,[$ctx+8*0]
+
+.Labort:
+	ret
+	restore
+.type	poly1305_blocks_fma,#function
+.size	poly1305_blocks_fma,.-poly1305_blocks_fma
+___
+{
+my ($mac,$nonce)=($inp,$len);
+
+my ($h0,$h1,$h2,$h3,$h4, $d0,$d1,$d2,$d3, $mask
+   ) = (map("%l$_",(0..5)),map("%o$_",(0..4)));
+
+$code.=<<___;
+.align	32
+poly1305_emit_fma:
+	save	%sp,-STACK_FRAME,%sp
+
+	ld	[$ctx+8*0+0],$d0		! load hash
+	ld	[$ctx+8*0+4],$h0
+	ld	[$ctx+8*1+0],$d1
+	ld	[$ctx+8*1+4],$h1
+	ld	[$ctx+8*2+0],$d2
+	ld	[$ctx+8*2+4],$h2
+	ld	[$ctx+8*3+0],$d3
+	ld	[$ctx+8*3+4],$h3
+
+	sethi	%hi(0xfff00000),$mask
+	andn	$d0,$mask,$d0			! mask exponent
+	andn	$d1,$mask,$d1
+	andn	$d2,$mask,$d2
+	andn	$d3,$mask,$d3			! can be partially reduced...
+	mov	3,$mask
+
+	srl	$d3,2,$padbit			! ... so reduce
+	and	$d3,$mask,$h4
+	andn	$d3,$mask,$d3
+	add	$padbit,$d3,$d3
+
+	addcc	$d3,$h0,$h0
+	addccc	$d0,$h1,$h1
+	addccc	$d1,$h2,$h2
+	addccc	$d2,$h3,$h3
+	addc	%g0,$h4,$h4
+
+	addcc	$h0,5,$d0			! compare to modulus
+	addccc	$h1,0,$d1
+	addccc	$h2,0,$d2
+	addccc	$h3,0,$d3
+	addc	$h4,0,$mask
+
+	srl	$mask,2,$mask			! did it carry/borrow?
+	neg	$mask,$mask
+	sra	$mask,31,$mask			! mask
+
+	andn	$h0,$mask,$h0
+	and	$d0,$mask,$d0
+	andn	$h1,$mask,$h1
+	and	$d1,$mask,$d1
+	or	$d0,$h0,$h0
+	ld	[$nonce+0],$d0			! load nonce
+	andn	$h2,$mask,$h2
+	and	$d2,$mask,$d2
+	or	$d1,$h1,$h1
+	ld	[$nonce+4],$d1
+	andn	$h3,$mask,$h3
+	and	$d3,$mask,$d3
+	or	$d2,$h2,$h2
+	ld	[$nonce+8],$d2
+	or	$d3,$h3,$h3
+	ld	[$nonce+12],$d3
+
+	addcc	$d0,$h0,$h0			! accumulate nonce
+	addccc	$d1,$h1,$h1
+	addccc	$d2,$h2,$h2
+	addc	$d3,$h3,$h3
+
+	stb	$h0,[$mac+0]			! write little-endian result
+	srl	$h0,8,$h0
+	stb	$h1,[$mac+4]
+	srl	$h1,8,$h1
+	stb	$h2,[$mac+8]
+	srl	$h2,8,$h2
+	stb	$h3,[$mac+12]
+	srl	$h3,8,$h3
+
+	stb	$h0,[$mac+1]
+	srl	$h0,8,$h0
+	stb	$h1,[$mac+5]
+	srl	$h1,8,$h1
+	stb	$h2,[$mac+9]
+	srl	$h2,8,$h2
+	stb	$h3,[$mac+13]
+	srl	$h3,8,$h3
+
+	stb	$h0,[$mac+2]
+	srl	$h0,8,$h0
+	stb	$h1,[$mac+6]
+	srl	$h1,8,$h1
+	stb	$h2,[$mac+10]
+	srl	$h2,8,$h2
+	stb	$h3,[$mac+14]
+	srl	$h3,8,$h3
+
+	stb	$h0,[$mac+3]
+	stb	$h1,[$mac+7]
+	stb	$h2,[$mac+11]
+	stb	$h3,[$mac+15]
+
+	ret
+	restore
+.type	poly1305_emit_fma,#function
+.size	poly1305_emit_fma,.-poly1305_emit_fma
+___
+}
+
+$code.=<<___;
+.align	64
+.Lconsts_fma:
+.word	0x43300000,0x00000000		! 2^(52+0)
+.word	0x45300000,0x00000000		! 2^(52+32)
+.word	0x47300000,0x00000000		! 2^(52+64)
+.word	0x49300000,0x00000000		! 2^(52+96)
+.word	0x4b500000,0x00000000		! 2^(52+130)
+
+.word	0x37f40000,0x00000000		! 5/2^130
+.word	0,1<<30				! fsr: truncate, no exceptions
+
+.word	0x44300000,0x00000000		! 2^(52+16+0)
+.word	0x46300000,0x00000000		! 2^(52+16+32)
+.word	0x48300000,0x00000000		! 2^(52+16+64)
+.word	0x4a300000,0x00000000		! 2^(52+16+96)
+.word	0x3e300000,0x00000000		! 2^(52+16+0-96)
+.word	0x40300000,0x00000000		! 2^(52+16+32-96)
+.word	0x42300000,0x00000000		! 2^(52+16+64-96)
+.asciz	"Poly1305 for SPARCv9/VIS3/FMA, CRYPTOGAMS by <appro\@openssl.org>"
+.align	4
+___
+}
+
+# Purpose of these subroutines is to explicitly encode VIS instructions,
+# so that one can compile the module without having to specify VIS
+# extensions on compiler command line, e.g. -xarch=v9 vs. -xarch=v9a.
+# Idea is to reserve for option to produce "universal" binary and let
+# programmer detect if current CPU is VIS capable at run-time.
+sub unvis3 {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my %bias = ( "g" => 0, "o" => 8, "l" => 16, "i" => 24 );
+my ($ref,$opf);
+my %visopf = (	"addxc"		=> 0x011,
+		"addxccc"	=> 0x013,
+		"umulxhi"	=> 0x016	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rd";
+
+    if ($opf=$visopf{$mnemonic}) {
+	foreach ($rs1,$rs2,$rd) {
+	    return $ref if (!/%([goli])([0-9])/);
+	    $_=$bias{$1}+$2;
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			0x81b00000|$rd<<25|$rs1<<14|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+
+sub unfma {
+my ($mnemonic,$rs1,$rs2,$rs3,$rd)=@_;
+my ($ref,$opf);
+my %fmaopf = (	"fmadds"	=> 0x1,
+		"fmaddd"	=> 0x2,
+		"fmsubs"	=> 0x5,
+		"fmsubd"	=> 0x6		);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rs3,$rd";
+
+    if ($opf=$fmaopf{$mnemonic}) {
+	foreach ($rs1,$rs2,$rs3,$rd) {
+	    return $ref if (!/%f([0-9]{1,2})/);
+	    $_=$1;
+	    if ($1>=32) {
+		return $ref if ($1&1);
+		# re-encode for upper double register addressing
+		$_=($1|$1>>5)&31;
+	    }
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			0x81b80000|$rd<<25|$rs1<<14|$rs3<<9|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	s/\b(umulxhi|addxc[c]{0,2})\s+(%[goli][0-7]),\s*(%[goli][0-7]),\s*(%[goli][0-7])/
+		&unvis3($1,$2,$3,$4)
+	 /ge	or
+	s/\b(fmadd[sd])\s+(%f[0-9]+),\s*(%f[0-9]+),\s*(%f[0-9]+),\s*(%f[0-9]+)/
+		&unfma($1,$2,$3,$4,$5)
+	 /ge;
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-x86.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-x86.pl
new file mode 100755
index 000000000..1e09ddcc1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-x86.pl
@@ -0,0 +1,1815 @@
+#! /usr/bin/env perl
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# This module implements Poly1305 hash for x86.
+#
+# April 2015
+#
+# Numbers are cycles per processed byte with poly1305_blocks alone,
+# measured with rdtsc at fixed clock frequency.
+#
+#		IALU/gcc-3.4(*)	SSE2(**)	AVX2
+# Pentium	15.7/+80%	-
+# PIII		6.21/+90%	-
+# P4		19.8/+40%	3.24
+# Core 2	4.85/+90%	1.80
+# Westmere	4.58/+100%	1.43
+# Sandy Bridge	3.90/+100%	1.36
+# Haswell	3.88/+70%	1.18		0.72
+# Skylake	3.10/+60%	1.14		0.62
+# Silvermont	11.0/+40%	4.80
+# Goldmont	4.10/+200%	2.10
+# VIA Nano	6.71/+90%	2.47
+# Sledgehammer	3.51/+180%	4.27
+# Bulldozer	4.53/+140%	1.31
+#
+# (*)	gcc 4.8 for some reason generated worse code;
+# (**)	besides SSE2 there are floating-point and AVX options; FP
+#	is deemed unnecessary, because pre-SSE2 processor are too
+#	old to care about, while it's not the fastest option on
+#	SSE2-capable ones; AVX is omitted, because it doesn't give
+#	a lot of improvement, 5-10% depending on processor;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output=pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0],$ARGV[$#ARGV] eq "386");
+
+$sse2=$avx=0;
+for (@ARGV) { $sse2=1 if (/-DOPENSSL_IA32_SSE2/); }
+
+if ($sse2) {
+	&static_label("const_sse2");
+	&static_label("enter_blocks");
+	&static_label("enter_emit");
+	&external_label("OPENSSL_ia32cap_P");
+
+	if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+			=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+		$avx = ($1>=2.19) + ($1>=2.22);
+	}
+
+	if (!$avx && $ARGV[0] eq "win32n" &&
+	   `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.09) + ($1>=2.10);
+	}
+
+	if (!$avx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|based on LLVM) ([3-9]\.[0-9]+)/) {
+		$avx = ($2>=3.0) + ($2>3.0);
+	}
+}
+
+########################################################################
+# Layout of opaque area is following.
+#
+#	unsigned __int32 h[5];		# current hash value base 2^32
+#	unsigned __int32 pad;		# is_base2_26 in vector context
+#	unsigned __int32 r[4];		# key value base 2^32
+
+&align(64);
+&function_begin("poly1305_init");
+	&mov	("edi",&wparam(0));		# context
+	&mov	("esi",&wparam(1));		# key
+	&mov	("ebp",&wparam(2));		# function table
+
+	&xor	("eax","eax");
+	&mov	(&DWP(4*0,"edi"),"eax");	# zero hash value
+	&mov	(&DWP(4*1,"edi"),"eax");
+	&mov	(&DWP(4*2,"edi"),"eax");
+	&mov	(&DWP(4*3,"edi"),"eax");
+	&mov	(&DWP(4*4,"edi"),"eax");
+	&mov	(&DWP(4*5,"edi"),"eax");	# is_base2_26
+
+	&cmp	("esi",0);
+	&je	(&label("nokey"));
+
+    if ($sse2) {
+	&call	(&label("pic_point"));
+    &set_label("pic_point");
+	&blindpop("ebx");
+
+	&lea	("eax",&DWP("poly1305_blocks-".&label("pic_point"),"ebx"));
+	&lea	("edx",&DWP("poly1305_emit-".&label("pic_point"),"ebx"));
+
+	&picmeup("edi","OPENSSL_ia32cap_P","ebx",&label("pic_point"));
+	&mov	("ecx",&DWP(0,"edi"));
+	&and	("ecx",1<<26|1<<24);
+	&cmp	("ecx",1<<26|1<<24);		# SSE2 and XMM?
+	&jne	(&label("no_sse2"));
+
+	&lea	("eax",&DWP("_poly1305_blocks_sse2-".&label("pic_point"),"ebx"));
+	&lea	("edx",&DWP("_poly1305_emit_sse2-".&label("pic_point"),"ebx"));
+
+      if ($avx>1) {
+	&mov	("ecx",&DWP(8,"edi"));
+	&test	("ecx",1<<5);			# AVX2?
+	&jz	(&label("no_sse2"));
+
+	&lea	("eax",&DWP("_poly1305_blocks_avx2-".&label("pic_point"),"ebx"));
+      }
+    &set_label("no_sse2");
+	&mov	("edi",&wparam(0));		# reload context
+	&mov	(&DWP(0,"ebp"),"eax");		# fill function table
+	&mov	(&DWP(4,"ebp"),"edx");
+    }
+
+	&mov	("eax",&DWP(4*0,"esi"));	# load input key
+	&mov	("ebx",&DWP(4*1,"esi"));
+	&mov	("ecx",&DWP(4*2,"esi"));
+	&mov	("edx",&DWP(4*3,"esi"));
+	&and	("eax",0x0fffffff);
+	&and	("ebx",0x0ffffffc);
+	&and	("ecx",0x0ffffffc);
+	&and	("edx",0x0ffffffc);
+	&mov	(&DWP(4*6,"edi"),"eax");
+	&mov	(&DWP(4*7,"edi"),"ebx");
+	&mov	(&DWP(4*8,"edi"),"ecx");
+	&mov	(&DWP(4*9,"edi"),"edx");
+
+	&mov	("eax",$sse2);
+&set_label("nokey");
+&function_end("poly1305_init");
+
+($h0,$h1,$h2,$h3,$h4,
+ $d0,$d1,$d2,$d3,
+ $r0,$r1,$r2,$r3,
+     $s1,$s2,$s3)=map(4*$_,(0..15));
+
+&function_begin("poly1305_blocks");
+	&mov	("edi",&wparam(0));		# ctx
+	&mov	("esi",&wparam(1));		# inp
+	&mov	("ecx",&wparam(2));		# len
+&set_label("enter_blocks");
+	&and	("ecx",-15);
+	&jz	(&label("nodata"));
+
+	&stack_push(16);
+	&mov	("eax",&DWP(4*6,"edi"));	# r0
+	&mov	("ebx",&DWP(4*7,"edi"));	# r1
+	 &lea	("ebp",&DWP(0,"esi","ecx"));	# end of input
+	&mov	("ecx",&DWP(4*8,"edi"));	# r2
+	&mov	("edx",&DWP(4*9,"edi"));	# r3
+
+	&mov	(&wparam(2),"ebp");
+	&mov	("ebp","esi");
+
+	&mov	(&DWP($r0,"esp"),"eax");	# r0
+	&mov	("eax","ebx");
+	&shr	("eax",2);
+	&mov	(&DWP($r1,"esp"),"ebx");	# r1
+	&add	("eax","ebx");			# s1
+	&mov	("ebx","ecx");
+	&shr	("ebx",2);
+	&mov	(&DWP($r2,"esp"),"ecx");	# r2
+	&add	("ebx","ecx");			# s2
+	&mov	("ecx","edx");
+	&shr	("ecx",2);
+	&mov	(&DWP($r3,"esp"),"edx");	# r3
+	&add	("ecx","edx");			# s3
+	&mov	(&DWP($s1,"esp"),"eax");	# s1
+	&mov	(&DWP($s2,"esp"),"ebx");	# s2
+	&mov	(&DWP($s3,"esp"),"ecx");	# s3
+
+	&mov	("eax",&DWP(4*0,"edi"));	# load hash value
+	&mov	("ebx",&DWP(4*1,"edi"));
+	&mov	("ecx",&DWP(4*2,"edi"));
+	&mov	("esi",&DWP(4*3,"edi"));
+	&mov	("edi",&DWP(4*4,"edi"));
+	&jmp	(&label("loop"));
+
+&set_label("loop",32);
+	&add	("eax",&DWP(4*0,"ebp"));	# accumulate input
+	&adc	("ebx",&DWP(4*1,"ebp"));
+	&adc	("ecx",&DWP(4*2,"ebp"));
+	&adc	("esi",&DWP(4*3,"ebp"));
+	&lea	("ebp",&DWP(4*4,"ebp"));
+	&adc	("edi",&wparam(3));		# padbit
+
+	&mov	(&DWP($h0,"esp"),"eax");	# put aside hash[+inp]
+	&mov	(&DWP($h3,"esp"),"esi");
+
+	&mul	(&DWP($r0,"esp"));		# h0*r0
+	 &mov	(&DWP($h4,"esp"),"edi");
+	&mov	("edi","eax");
+	&mov	("eax","ebx");			# h1
+	&mov	("esi","edx");
+	&mul	(&DWP($s3,"esp"));		# h1*s3
+	&add	("edi","eax");
+	&mov	("eax","ecx");			# h2
+	&adc	("esi","edx");
+	&mul	(&DWP($s2,"esp"));		# h2*s2
+	&add	("edi","eax");
+	&mov	("eax",&DWP($h3,"esp"));
+	&adc	("esi","edx");
+	&mul	(&DWP($s1,"esp"));		# h3*s1
+	&add	("edi","eax");
+	 &mov	("eax",&DWP($h0,"esp"));
+	&adc	("esi","edx");
+
+	&mul	(&DWP($r1,"esp"));		# h0*r1
+	 &mov	(&DWP($d0,"esp"),"edi");
+	&xor	("edi","edi");
+	&add	("esi","eax");
+	&mov	("eax","ebx");			# h1
+	&adc	("edi","edx");
+	&mul	(&DWP($r0,"esp"));		# h1*r0
+	&add	("esi","eax");
+	&mov	("eax","ecx");			# h2
+	&adc	("edi","edx");
+	&mul	(&DWP($s3,"esp"));		# h2*s3
+	&add	("esi","eax");
+	&mov	("eax",&DWP($h3,"esp"));
+	&adc	("edi","edx");
+	&mul	(&DWP($s2,"esp"));		# h3*s2
+	&add	("esi","eax");
+	&mov	("eax",&DWP($h4,"esp"));
+	&adc	("edi","edx");
+	&imul	("eax",&DWP($s1,"esp"));	# h4*s1
+	&add	("esi","eax");
+	 &mov	("eax",&DWP($h0,"esp"));
+	&adc	("edi",0);
+
+	&mul	(&DWP($r2,"esp"));		# h0*r2
+	 &mov	(&DWP($d1,"esp"),"esi");
+	&xor	("esi","esi");
+	&add	("edi","eax");
+	&mov	("eax","ebx");			# h1
+	&adc	("esi","edx");
+	&mul	(&DWP($r1,"esp"));		# h1*r1
+	&add	("edi","eax");
+	&mov	("eax","ecx");			# h2
+	&adc	("esi","edx");
+	&mul	(&DWP($r0,"esp"));		# h2*r0
+	&add	("edi","eax");
+	&mov	("eax",&DWP($h3,"esp"));
+	&adc	("esi","edx");
+	&mul	(&DWP($s3,"esp"));		# h3*s3
+	&add	("edi","eax");
+	&mov	("eax",&DWP($h4,"esp"));
+	&adc	("esi","edx");
+	&imul	("eax",&DWP($s2,"esp"));	# h4*s2
+	&add	("edi","eax");
+	 &mov	("eax",&DWP($h0,"esp"));
+	&adc	("esi",0);
+
+	&mul	(&DWP($r3,"esp"));		# h0*r3
+	 &mov	(&DWP($d2,"esp"),"edi");
+	&xor	("edi","edi");
+	&add	("esi","eax");
+	&mov	("eax","ebx");			# h1
+	&adc	("edi","edx");
+	&mul	(&DWP($r2,"esp"));		# h1*r2
+	&add	("esi","eax");
+	&mov	("eax","ecx");			# h2
+	&adc	("edi","edx");
+	&mul	(&DWP($r1,"esp"));		# h2*r1
+	&add	("esi","eax");
+	&mov	("eax",&DWP($h3,"esp"));
+	&adc	("edi","edx");
+	&mul	(&DWP($r0,"esp"));		# h3*r0
+	&add	("esi","eax");
+	 &mov	("ecx",&DWP($h4,"esp"));
+	&adc	("edi","edx");
+
+	&mov	("edx","ecx");
+	&imul	("ecx",&DWP($s3,"esp"));	# h4*s3
+	&add	("esi","ecx");
+	 &mov	("eax",&DWP($d0,"esp"));
+	&adc	("edi",0);
+
+	&imul	("edx",&DWP($r0,"esp"));	# h4*r0
+	&add	("edx","edi");
+
+	&mov	("ebx",&DWP($d1,"esp"));
+	&mov	("ecx",&DWP($d2,"esp"));
+
+	&mov	("edi","edx");			# last reduction step
+	&shr	("edx",2);
+	&and	("edi",3);
+	&lea	("edx",&DWP(0,"edx","edx",4));	# *5
+	&add	("eax","edx");
+	&adc	("ebx",0);
+	&adc	("ecx",0);
+	&adc	("esi",0);
+	&adc	("edi",0);
+
+	&cmp	("ebp",&wparam(2));		# done yet?
+	&jne	(&label("loop"));
+
+	&mov	("edx",&wparam(0));		# ctx
+	&stack_pop(16);
+	&mov	(&DWP(4*0,"edx"),"eax");	# store hash value
+	&mov	(&DWP(4*1,"edx"),"ebx");
+	&mov	(&DWP(4*2,"edx"),"ecx");
+	&mov	(&DWP(4*3,"edx"),"esi");
+	&mov	(&DWP(4*4,"edx"),"edi");
+&set_label("nodata");
+&function_end("poly1305_blocks");
+
+&function_begin("poly1305_emit");
+	&mov	("ebp",&wparam(0));		# context
+&set_label("enter_emit");
+	&mov	("edi",&wparam(1));		# output
+	&mov	("eax",&DWP(4*0,"ebp"));	# load hash value
+	&mov	("ebx",&DWP(4*1,"ebp"));
+	&mov	("ecx",&DWP(4*2,"ebp"));
+	&mov	("edx",&DWP(4*3,"ebp"));
+	&mov	("esi",&DWP(4*4,"ebp"));
+
+	&add	("eax",5);			# compare to modulus
+	&adc	("ebx",0);
+	&adc	("ecx",0);
+	&adc	("edx",0);
+	&adc	("esi",0);
+	&shr	("esi",2);			# did it carry/borrow?
+	&neg	("esi");			# do we choose hash-modulus?
+
+	&and	("eax","esi");
+	&and	("ebx","esi");
+	&and	("ecx","esi");
+	&and	("edx","esi");
+	&mov	(&DWP(4*0,"edi"),"eax");
+	&mov	(&DWP(4*1,"edi"),"ebx");
+	&mov	(&DWP(4*2,"edi"),"ecx");
+	&mov	(&DWP(4*3,"edi"),"edx");
+
+	&not	("esi");			# or original hash value?
+	&mov	("eax",&DWP(4*0,"ebp"));
+	&mov	("ebx",&DWP(4*1,"ebp"));
+	&mov	("ecx",&DWP(4*2,"ebp"));
+	&mov	("edx",&DWP(4*3,"ebp"));
+	&mov	("ebp",&wparam(2));
+	&and	("eax","esi");
+	&and	("ebx","esi");
+	&and	("ecx","esi");
+	&and	("edx","esi");
+	&or	("eax",&DWP(4*0,"edi"));
+	&or	("ebx",&DWP(4*1,"edi"));
+	&or	("ecx",&DWP(4*2,"edi"));
+	&or	("edx",&DWP(4*3,"edi"));
+
+	&add	("eax",&DWP(4*0,"ebp"));	# accumulate key
+	&adc	("ebx",&DWP(4*1,"ebp"));
+	&adc	("ecx",&DWP(4*2,"ebp"));
+	&adc	("edx",&DWP(4*3,"ebp"));
+
+	&mov	(&DWP(4*0,"edi"),"eax");
+	&mov	(&DWP(4*1,"edi"),"ebx");
+	&mov	(&DWP(4*2,"edi"),"ecx");
+	&mov	(&DWP(4*3,"edi"),"edx");
+&function_end("poly1305_emit");
+
+if ($sse2) {
+########################################################################
+# Layout of opaque area is following.
+#
+#	unsigned __int32 h[5];		# current hash value base 2^26
+#	unsigned __int32 is_base2_26;
+#	unsigned __int32 r[4];		# key value base 2^32
+#	unsigned __int32 pad[2];
+#	struct { unsigned __int32 r^4, r^3, r^2, r^1; } r[9];
+#
+# where r^n are base 2^26 digits of degrees of multiplier key. There are
+# 5 digits, but last four are interleaved with multiples of 5, totalling
+# in 9 elements: r0, r1, 5*r1, r2, 5*r2, r3, 5*r3, r4, 5*r4.
+
+my ($D0,$D1,$D2,$D3,$D4,$T0,$T1,$T2)=map("xmm$_",(0..7));
+my $MASK=$T2;	# borrow and keep in mind
+
+&align	(32);
+&function_begin_B("_poly1305_init_sse2");
+	&movdqu		($D4,&QWP(4*6,"edi"));		# key base 2^32
+	&lea		("edi",&DWP(16*3,"edi"));	# size optimization
+	&mov		("ebp","esp");
+	&sub		("esp",16*(9+5));
+	&and		("esp",-16);
+
+	#&pand		($D4,&QWP(96,"ebx"));		# magic mask
+	&movq		($MASK,&QWP(64,"ebx"));
+
+	&movdqa		($D0,$D4);
+	&movdqa		($D1,$D4);
+	&movdqa		($D2,$D4);
+
+	&pand		($D0,$MASK);			# -> base 2^26
+	&psrlq		($D1,26);
+	&psrldq		($D2,6);
+	&pand		($D1,$MASK);
+	&movdqa		($D3,$D2);
+	&psrlq		($D2,4)
+	&psrlq		($D3,30);
+	&pand		($D2,$MASK);
+	&pand		($D3,$MASK);
+	&psrldq		($D4,13);
+
+	&lea		("edx",&DWP(16*9,"esp"));	# size optimization
+	&mov		("ecx",2);
+&set_label("square");
+	&movdqa		(&QWP(16*0,"esp"),$D0);
+	&movdqa		(&QWP(16*1,"esp"),$D1);
+	&movdqa		(&QWP(16*2,"esp"),$D2);
+	&movdqa		(&QWP(16*3,"esp"),$D3);
+	&movdqa		(&QWP(16*4,"esp"),$D4);
+
+	&movdqa		($T1,$D1);
+	&movdqa		($T0,$D2);
+	&pslld		($T1,2);
+	&pslld		($T0,2);
+	&paddd		($T1,$D1);			# *5
+	&paddd		($T0,$D2);			# *5
+	&movdqa		(&QWP(16*5,"esp"),$T1);
+	&movdqa		(&QWP(16*6,"esp"),$T0);
+	&movdqa		($T1,$D3);
+	&movdqa		($T0,$D4);
+	&pslld		($T1,2);
+	&pslld		($T0,2);
+	&paddd		($T1,$D3);			# *5
+	&paddd		($T0,$D4);			# *5
+	&movdqa		(&QWP(16*7,"esp"),$T1);
+	&movdqa		(&QWP(16*8,"esp"),$T0);
+
+	&pshufd		($T1,$D0,0b01000100);
+	&movdqa		($T0,$D1);
+	&pshufd		($D1,$D1,0b01000100);
+	&pshufd		($D2,$D2,0b01000100);
+	&pshufd		($D3,$D3,0b01000100);
+	&pshufd		($D4,$D4,0b01000100);
+	&movdqa		(&QWP(16*0,"edx"),$T1);
+	&movdqa		(&QWP(16*1,"edx"),$D1);
+	&movdqa		(&QWP(16*2,"edx"),$D2);
+	&movdqa		(&QWP(16*3,"edx"),$D3);
+	&movdqa		(&QWP(16*4,"edx"),$D4);
+
+	################################################################
+	# d4 = h4*r0 + h3*r1   + h2*r2   + h1*r3   + h0*r4
+	# d3 = h3*r0 + h2*r1   + h1*r2   + h0*r3   + h4*5*r4
+	# d2 = h2*r0 + h1*r1   + h0*r2   + h4*5*r3 + h3*5*r4
+	# d1 = h1*r0 + h0*r1   + h4*5*r2 + h3*5*r3 + h2*5*r4
+	# d0 = h0*r0 + h4*5*r1 + h3*5*r2 + h2*5*r3 + h1*5*r4
+
+	&pmuludq	($D4,$D0);			# h4*r0
+	&pmuludq	($D3,$D0);			# h3*r0
+	&pmuludq	($D2,$D0);			# h2*r0
+	&pmuludq	($D1,$D0);			# h1*r0
+	&pmuludq	($D0,$T1);			# h0*r0
+
+sub pmuladd {
+my $load = shift;
+my $base = shift; $base = "esp" if (!defined($base));
+
+	################################################################
+	# As for choice to "rotate" $T0-$T2 in order to move paddq
+	# past next multiplication. While it makes code harder to read
+	# and doesn't have significant effect on most processors, it
+	# makes a lot of difference on Atom, up to 30% improvement.
+
+	&movdqa		($T1,$T0);
+	&pmuludq	($T0,&QWP(16*3,$base));		# r1*h3
+	&movdqa		($T2,$T1);
+	&pmuludq	($T1,&QWP(16*2,$base));		# r1*h2
+	&paddq		($D4,$T0);
+	&movdqa		($T0,$T2);
+	&pmuludq	($T2,&QWP(16*1,$base));		# r1*h1
+	&paddq		($D3,$T1);
+	&$load		($T1,5);			# s1
+	&pmuludq	($T0,&QWP(16*0,$base));		# r1*h0
+	&paddq		($D2,$T2);
+	&pmuludq	($T1,&QWP(16*4,$base));		# s1*h4
+	 &$load		($T2,2);			# r2^n
+	&paddq		($D1,$T0);
+
+	&movdqa		($T0,$T2);
+	&pmuludq	($T2,&QWP(16*2,$base));		# r2*h2
+	 &paddq		($D0,$T1);
+	&movdqa		($T1,$T0);
+	&pmuludq	($T0,&QWP(16*1,$base));		# r2*h1
+	&paddq		($D4,$T2);
+	&$load		($T2,6);			# s2^n
+	&pmuludq	($T1,&QWP(16*0,$base));		# r2*h0
+	&paddq		($D3,$T0);
+	&movdqa		($T0,$T2);
+	&pmuludq	($T2,&QWP(16*4,$base));		# s2*h4
+	&paddq		($D2,$T1);
+	&pmuludq	($T0,&QWP(16*3,$base));		# s2*h3
+	 &$load		($T1,3);			# r3^n
+	&paddq		($D1,$T2);
+
+	&movdqa		($T2,$T1);
+	&pmuludq	($T1,&QWP(16*1,$base));		# r3*h1
+	 &paddq		($D0,$T0);
+	&$load		($T0,7);			# s3^n
+	&pmuludq	($T2,&QWP(16*0,$base));		# r3*h0
+	&paddq		($D4,$T1);
+	&movdqa		($T1,$T0);
+	&pmuludq	($T0,&QWP(16*4,$base));		# s3*h4
+	&paddq		($D3,$T2);
+	&movdqa		($T2,$T1);
+	&pmuludq	($T1,&QWP(16*3,$base));		# s3*h3
+	&paddq		($D2,$T0);
+	&pmuludq	($T2,&QWP(16*2,$base));		# s3*h2
+	 &$load		($T0,4);			# r4^n
+	&paddq		($D1,$T1);
+
+	&$load		($T1,8);			# s4^n
+	&pmuludq	($T0,&QWP(16*0,$base));		# r4*h0
+	 &paddq		($D0,$T2);
+	&movdqa		($T2,$T1);
+	&pmuludq	($T1,&QWP(16*4,$base));		# s4*h4
+	&paddq		($D4,$T0);
+	&movdqa		($T0,$T2);
+	&pmuludq	($T2,&QWP(16*1,$base));		# s4*h1
+	&paddq		($D3,$T1);
+	&movdqa		($T1,$T0);
+	&pmuludq	($T0,&QWP(16*2,$base));		# s4*h2
+	&paddq		($D0,$T2);
+	&pmuludq	($T1,&QWP(16*3,$base));		# s4*h3
+	 &movdqa	($MASK,&QWP(64,"ebx"));
+	&paddq		($D1,$T0);
+	&paddq		($D2,$T1);
+}
+	&pmuladd	(sub {	my ($reg,$i)=@_;
+				&movdqa ($reg,&QWP(16*$i,"esp"));
+			     },"edx");
+
+sub lazy_reduction {
+my $extra = shift;
+
+	################################################################
+	# lazy reduction as discussed in "NEON crypto" by D.J. Bernstein
+	# and P. Schwabe
+	#
+	# [(*) see discussion in poly1305-armv4 module]
+
+	 &movdqa	($T0,$D3);
+	 &pand		($D3,$MASK);
+	 &psrlq		($T0,26);
+	 &$extra	()				if (defined($extra));
+	 &paddq		($T0,$D4);			# h3 -> h4
+	&movdqa		($T1,$D0);
+	&pand		($D0,$MASK);
+	&psrlq		($T1,26);
+	 &movdqa	($D4,$T0);
+	&paddq		($T1,$D1);			# h0 -> h1
+	 &psrlq		($T0,26);
+	 &pand		($D4,$MASK);
+	&movdqa		($D1,$T1);
+	&psrlq		($T1,26);
+	 &paddd		($D0,$T0);			# favour paddd when
+							# possible, because
+							# paddq is "broken"
+							# on Atom
+	 &psllq		($T0,2);
+	&paddq		($T1,$D2);			# h1 -> h2
+	 &paddq		($T0,$D0);			# h4 -> h0 (*)
+	&pand		($D1,$MASK);
+	&movdqa		($D2,$T1);
+	&psrlq		($T1,26);
+	&pand		($D2,$MASK);
+	&paddd		($T1,$D3);			# h2 -> h3
+	 &movdqa	($D0,$T0);
+	 &psrlq		($T0,26);
+	&movdqa		($D3,$T1);
+	&psrlq		($T1,26);
+	 &pand		($D0,$MASK);
+	 &paddd		($D1,$T0);			# h0 -> h1
+	&pand		($D3,$MASK);
+	&paddd		($D4,$T1);			# h3 -> h4
+}
+	&lazy_reduction	();
+
+	&dec		("ecx");
+	&jz		(&label("square_break"));
+
+	&punpcklqdq	($D0,&QWP(16*0,"esp"));		# 0:r^1:0:r^2
+	&punpcklqdq	($D1,&QWP(16*1,"esp"));
+	&punpcklqdq	($D2,&QWP(16*2,"esp"));
+	&punpcklqdq	($D3,&QWP(16*3,"esp"));
+	&punpcklqdq	($D4,&QWP(16*4,"esp"));
+	&jmp		(&label("square"));
+
+&set_label("square_break");
+	&psllq		($D0,32);			# -> r^3:0:r^4:0
+	&psllq		($D1,32);
+	&psllq		($D2,32);
+	&psllq		($D3,32);
+	&psllq		($D4,32);
+	&por		($D0,&QWP(16*0,"esp"));		# r^3:r^1:r^4:r^2
+	&por		($D1,&QWP(16*1,"esp"));
+	&por		($D2,&QWP(16*2,"esp"));
+	&por		($D3,&QWP(16*3,"esp"));
+	&por		($D4,&QWP(16*4,"esp"));
+
+	&pshufd		($D0,$D0,0b10001101);		# -> r^1:r^2:r^3:r^4
+	&pshufd		($D1,$D1,0b10001101);
+	&pshufd		($D2,$D2,0b10001101);
+	&pshufd		($D3,$D3,0b10001101);
+	&pshufd		($D4,$D4,0b10001101);
+
+	&movdqu		(&QWP(16*0,"edi"),$D0);		# save the table
+	&movdqu		(&QWP(16*1,"edi"),$D1);
+	&movdqu		(&QWP(16*2,"edi"),$D2);
+	&movdqu		(&QWP(16*3,"edi"),$D3);
+	&movdqu		(&QWP(16*4,"edi"),$D4);
+
+	&movdqa		($T1,$D1);
+	&movdqa		($T0,$D2);
+	&pslld		($T1,2);
+	&pslld		($T0,2);
+	&paddd		($T1,$D1);			# *5
+	&paddd		($T0,$D2);			# *5
+	&movdqu		(&QWP(16*5,"edi"),$T1);
+	&movdqu		(&QWP(16*6,"edi"),$T0);
+	&movdqa		($T1,$D3);
+	&movdqa		($T0,$D4);
+	&pslld		($T1,2);
+	&pslld		($T0,2);
+	&paddd		($T1,$D3);			# *5
+	&paddd		($T0,$D4);			# *5
+	&movdqu		(&QWP(16*7,"edi"),$T1);
+	&movdqu		(&QWP(16*8,"edi"),$T0);
+
+	&mov		("esp","ebp");
+	&lea		("edi",&DWP(-16*3,"edi"));	# size de-optimization
+	&ret		();
+&function_end_B("_poly1305_init_sse2");
+
+&align	(32);
+&function_begin("_poly1305_blocks_sse2");
+	&mov	("edi",&wparam(0));			# ctx
+	&mov	("esi",&wparam(1));			# inp
+	&mov	("ecx",&wparam(2));			# len
+
+	&mov	("eax",&DWP(4*5,"edi"));		# is_base2_26
+	&and	("ecx",-16);
+	&jz	(&label("nodata"));
+	&cmp	("ecx",64);
+	&jae	(&label("enter_sse2"));
+	&test	("eax","eax");				# is_base2_26?
+	&jz	(&label("enter_blocks"));
+
+&set_label("enter_sse2",16);
+	&call	(&label("pic_point"));
+&set_label("pic_point");
+	&blindpop("ebx");
+	&lea	("ebx",&DWP(&label("const_sse2")."-".&label("pic_point"),"ebx"));
+
+	&test	("eax","eax");				# is_base2_26?
+	&jnz	(&label("base2_26"));
+
+	&call	("_poly1305_init_sse2");
+
+	################################################# base 2^32 -> base 2^26
+	&mov	("eax",&DWP(0,"edi"));
+	&mov	("ecx",&DWP(3,"edi"));
+	&mov	("edx",&DWP(6,"edi"));
+	&mov	("esi",&DWP(9,"edi"));
+	&mov	("ebp",&DWP(13,"edi"));
+	&mov	(&DWP(4*5,"edi"),1);			# is_base2_26
+
+	&shr	("ecx",2);
+	&and	("eax",0x3ffffff);
+	&shr	("edx",4);
+	&and	("ecx",0x3ffffff);
+	&shr	("esi",6);
+	&and	("edx",0x3ffffff);
+
+	&movd	($D0,"eax");
+	&movd	($D1,"ecx");
+	&movd	($D2,"edx");
+	&movd	($D3,"esi");
+	&movd	($D4,"ebp");
+
+	&mov	("esi",&wparam(1));			# [reload] inp
+	&mov	("ecx",&wparam(2));			# [reload] len
+	&jmp	(&label("base2_32"));
+
+&set_label("base2_26",16);
+	&movd	($D0,&DWP(4*0,"edi"));			# load hash value
+	&movd	($D1,&DWP(4*1,"edi"));
+	&movd	($D2,&DWP(4*2,"edi"));
+	&movd	($D3,&DWP(4*3,"edi"));
+	&movd	($D4,&DWP(4*4,"edi"));
+	&movdqa	($MASK,&QWP(64,"ebx"));
+
+&set_label("base2_32");
+	&mov	("eax",&wparam(3));			# padbit
+	&mov	("ebp","esp");
+
+	&sub	("esp",16*(5+5+5+9+9));
+	&and	("esp",-16);
+
+	&lea	("edi",&DWP(16*3,"edi"));		# size optimization
+	&shl	("eax",24);				# padbit
+
+	&test	("ecx",31);
+	&jz	(&label("even"));
+
+	################################################################
+	# process single block, with SSE2, because it's still faster
+	# even though half of result is discarded
+
+	&movdqu		($T1,&QWP(0,"esi"));		# input
+	&lea		("esi",&DWP(16,"esi"));
+
+	&movdqa		($T0,$T1);			# -> base 2^26 ...
+	&pand		($T1,$MASK);
+	&paddd		($D0,$T1);			# ... and accumulate
+
+	&movdqa		($T1,$T0);
+	&psrlq		($T0,26);
+	&psrldq		($T1,6);
+	&pand		($T0,$MASK);
+	&paddd		($D1,$T0);
+
+	&movdqa		($T0,$T1);
+	&psrlq		($T1,4);
+	&pand		($T1,$MASK);
+	&paddd		($D2,$T1);
+
+	&movdqa		($T1,$T0);
+	&psrlq		($T0,30);
+	&pand		($T0,$MASK);
+	&psrldq		($T1,7);
+	&paddd		($D3,$T0);
+
+	&movd		($T0,"eax");			# padbit
+	&paddd		($D4,$T1);
+	 &movd		($T1,&DWP(16*0+12,"edi"));	# r0
+	&paddd		($D4,$T0);
+
+	&movdqa		(&QWP(16*0,"esp"),$D0);
+	&movdqa		(&QWP(16*1,"esp"),$D1);
+	&movdqa		(&QWP(16*2,"esp"),$D2);
+	&movdqa		(&QWP(16*3,"esp"),$D3);
+	&movdqa		(&QWP(16*4,"esp"),$D4);
+
+	################################################################
+	# d4 = h4*r0 + h3*r1   + h2*r2   + h1*r3   + h0*r4
+	# d3 = h3*r0 + h2*r1   + h1*r2   + h0*r3   + h4*5*r4
+	# d2 = h2*r0 + h1*r1   + h0*r2   + h4*5*r3 + h3*5*r4
+	# d1 = h1*r0 + h0*r1   + h4*5*r2 + h3*5*r3 + h2*5*r4
+	# d0 = h0*r0 + h4*5*r1 + h3*5*r2 + h2*5*r3 + h1*5*r4
+
+	&pmuludq	($D0,$T1);			# h4*r0
+	&pmuludq	($D1,$T1);			# h3*r0
+	&pmuludq	($D2,$T1);			# h2*r0
+	 &movd		($T0,&DWP(16*1+12,"edi"));	# r1
+	&pmuludq	($D3,$T1);			# h1*r0
+	&pmuludq	($D4,$T1);			# h0*r0
+
+	&pmuladd	(sub {	my ($reg,$i)=@_;
+				&movd ($reg,&DWP(16*$i+12,"edi"));
+			     });
+
+	&lazy_reduction	();
+
+	&sub		("ecx",16);
+	&jz		(&label("done"));
+
+&set_label("even");
+	&lea		("edx",&DWP(16*(5+5+5+9),"esp"));# size optimization
+	&lea		("eax",&DWP(-16*2,"esi"));
+	&sub		("ecx",64);
+
+	################################################################
+	# expand and copy pre-calculated table to stack
+
+	&movdqu		($T0,&QWP(16*0,"edi"));		# r^1:r^2:r^3:r^4
+	&pshufd		($T1,$T0,0b01000100);		# duplicate r^3:r^4
+	&cmovb		("esi","eax");
+	&pshufd		($T0,$T0,0b11101110);		# duplicate r^1:r^2
+	&movdqa		(&QWP(16*0,"edx"),$T1);
+	&lea		("eax",&DWP(16*10,"esp"));
+	&movdqu		($T1,&QWP(16*1,"edi"));
+	&movdqa		(&QWP(16*(0-9),"edx"),$T0);
+	&pshufd		($T0,$T1,0b01000100);
+	&pshufd		($T1,$T1,0b11101110);
+	&movdqa		(&QWP(16*1,"edx"),$T0);
+	&movdqu		($T0,&QWP(16*2,"edi"));
+	&movdqa		(&QWP(16*(1-9),"edx"),$T1);
+	&pshufd		($T1,$T0,0b01000100);
+	&pshufd		($T0,$T0,0b11101110);
+	&movdqa		(&QWP(16*2,"edx"),$T1);
+	&movdqu		($T1,&QWP(16*3,"edi"));
+	&movdqa		(&QWP(16*(2-9),"edx"),$T0);
+	&pshufd		($T0,$T1,0b01000100);
+	&pshufd		($T1,$T1,0b11101110);
+	&movdqa		(&QWP(16*3,"edx"),$T0);
+	&movdqu		($T0,&QWP(16*4,"edi"));
+	&movdqa		(&QWP(16*(3-9),"edx"),$T1);
+	&pshufd		($T1,$T0,0b01000100);
+	&pshufd		($T0,$T0,0b11101110);
+	&movdqa		(&QWP(16*4,"edx"),$T1);
+	&movdqu		($T1,&QWP(16*5,"edi"));
+	&movdqa		(&QWP(16*(4-9),"edx"),$T0);
+	&pshufd		($T0,$T1,0b01000100);
+	&pshufd		($T1,$T1,0b11101110);
+	&movdqa		(&QWP(16*5,"edx"),$T0);
+	&movdqu		($T0,&QWP(16*6,"edi"));
+	&movdqa		(&QWP(16*(5-9),"edx"),$T1);
+	&pshufd		($T1,$T0,0b01000100);
+	&pshufd		($T0,$T0,0b11101110);
+	&movdqa		(&QWP(16*6,"edx"),$T1);
+	&movdqu		($T1,&QWP(16*7,"edi"));
+	&movdqa		(&QWP(16*(6-9),"edx"),$T0);
+	&pshufd		($T0,$T1,0b01000100);
+	&pshufd		($T1,$T1,0b11101110);
+	&movdqa		(&QWP(16*7,"edx"),$T0);
+	&movdqu		($T0,&QWP(16*8,"edi"));
+	&movdqa		(&QWP(16*(7-9),"edx"),$T1);
+	&pshufd		($T1,$T0,0b01000100);
+	&pshufd		($T0,$T0,0b11101110);
+	&movdqa		(&QWP(16*8,"edx"),$T1);
+	&movdqa		(&QWP(16*(8-9),"edx"),$T0);
+
+sub load_input {
+my ($inpbase,$offbase)=@_;
+
+	&movdqu		($T0,&QWP($inpbase+0,"esi"));	# load input
+	&movdqu		($T1,&QWP($inpbase+16,"esi"));
+	&lea		("esi",&DWP(16*2,"esi"));
+
+	&movdqa		(&QWP($offbase+16*2,"esp"),$D2);
+	&movdqa		(&QWP($offbase+16*3,"esp"),$D3);
+	&movdqa		(&QWP($offbase+16*4,"esp"),$D4);
+
+	&movdqa		($D2,$T0);			# splat input
+	&movdqa		($D3,$T1);
+	&psrldq		($D2,6);
+	&psrldq		($D3,6);
+	&movdqa		($D4,$T0);
+	&punpcklqdq	($D2,$D3);			# 2:3
+	&punpckhqdq	($D4,$T1);			# 4
+	&punpcklqdq	($T0,$T1);			# 0:1
+
+	&movdqa		($D3,$D2);
+	&psrlq		($D2,4);
+	&psrlq		($D3,30);
+	&movdqa		($T1,$T0);
+	&psrlq		($D4,40);			# 4
+	&psrlq		($T1,26);
+	&pand		($T0,$MASK);			# 0
+	&pand		($T1,$MASK);			# 1
+	&pand		($D2,$MASK);			# 2
+	&pand		($D3,$MASK);			# 3
+	&por		($D4,&QWP(0,"ebx"));		# padbit, yes, always
+
+	&movdqa		(&QWP($offbase+16*0,"esp"),$D0)	if ($offbase);
+	&movdqa		(&QWP($offbase+16*1,"esp"),$D1)	if ($offbase);
+}
+	&load_input	(16*2,16*5);
+
+	&jbe		(&label("skip_loop"));
+	&jmp		(&label("loop"));
+
+&set_label("loop",32);
+	################################################################
+	# ((inp[0]*r^4+inp[2]*r^2+inp[4])*r^4+inp[6]*r^2
+	# ((inp[1]*r^4+inp[3]*r^2+inp[5])*r^3+inp[7]*r
+	#   \___________________/
+	# ((inp[0]*r^4+inp[2]*r^2+inp[4])*r^4+inp[6]*r^2+inp[8])*r^2
+	# ((inp[1]*r^4+inp[3]*r^2+inp[5])*r^4+inp[7]*r^2+inp[9])*r
+	#   \___________________/ \____________________/
+	################################################################
+
+	&movdqa		($T2,&QWP(16*(0-9),"edx"));	# r0^2
+	&movdqa		(&QWP(16*1,"eax"),$T1);
+	&movdqa		(&QWP(16*2,"eax"),$D2);
+	&movdqa		(&QWP(16*3,"eax"),$D3);
+	&movdqa		(&QWP(16*4,"eax"),$D4);
+
+	################################################################
+	# d4 = h4*r0 + h0*r4   + h1*r3   + h2*r2   + h3*r1
+	# d3 = h3*r0 + h0*r3   + h1*r2   + h2*r1   + h4*5*r4
+	# d2 = h2*r0 + h0*r2   + h1*r1   + h3*5*r4 + h4*5*r3
+	# d1 = h1*r0 + h0*r1   + h2*5*r4 + h3*5*r3 + h4*5*r2
+	# d0 = h0*r0 + h1*5*r4 + h2*5*r3 + h3*5*r2 + h4*5*r1
+
+	&movdqa		($D1,$T0);
+	&pmuludq	($T0,$T2);			# h0*r0
+	&movdqa		($D0,$T1);
+	&pmuludq	($T1,$T2);			# h1*r0
+	&pmuludq	($D2,$T2);			# h2*r0
+	&pmuludq	($D3,$T2);			# h3*r0
+	&pmuludq	($D4,$T2);			# h4*r0
+
+sub pmuladd_alt {
+my $addr = shift;
+
+	&pmuludq	($D0,&$addr(8));		# h1*s4
+	&movdqa		($T2,$D1);
+	&pmuludq	($D1,&$addr(1));		# h0*r1
+	&paddq		($D0,$T0);
+	&movdqa		($T0,$T2);
+	&pmuludq	($T2,&$addr(2));		# h0*r2
+	&paddq		($D1,$T1);
+	&movdqa		($T1,$T0);
+	&pmuludq	($T0,&$addr(3));		# h0*r3
+	&paddq		($D2,$T2);
+	 &movdqa	($T2,&QWP(16*1,"eax"));		# pull h1
+	&pmuludq	($T1,&$addr(4));		# h0*r4
+	&paddq		($D3,$T0);
+
+	&movdqa		($T0,$T2);
+	&pmuludq	($T2,&$addr(1));		# h1*r1
+	 &paddq		($D4,$T1);
+	&movdqa		($T1,$T0);
+	&pmuludq	($T0,&$addr(2));		# h1*r2
+	&paddq		($D2,$T2);
+	&movdqa		($T2,&QWP(16*2,"eax"));		# pull h2
+	&pmuludq	($T1,&$addr(3));		# h1*r3
+	&paddq		($D3,$T0);
+	&movdqa		($T0,$T2);
+	&pmuludq	($T2,&$addr(7));		# h2*s3
+	&paddq		($D4,$T1);
+	&movdqa		($T1,$T0);
+	&pmuludq	($T0,&$addr(8));		# h2*s4
+	&paddq		($D0,$T2);
+
+	&movdqa		($T2,$T1);
+	&pmuludq	($T1,&$addr(1));		# h2*r1
+	 &paddq		($D1,$T0);
+	&movdqa		($T0,&QWP(16*3,"eax"));		# pull h3
+	&pmuludq	($T2,&$addr(2));		# h2*r2
+	&paddq		($D3,$T1);
+	&movdqa		($T1,$T0);
+	&pmuludq	($T0,&$addr(6));		# h3*s2
+	&paddq		($D4,$T2);
+	&movdqa		($T2,$T1);
+	&pmuludq	($T1,&$addr(7));		# h3*s3
+	&paddq		($D0,$T0);
+	&movdqa		($T0,$T2);
+	&pmuludq	($T2,&$addr(8));		# h3*s4
+	&paddq		($D1,$T1);
+
+	&movdqa		($T1,&QWP(16*4,"eax"));		# pull h4
+	&pmuludq	($T0,&$addr(1));		# h3*r1
+	 &paddq		($D2,$T2);
+	&movdqa		($T2,$T1);
+	&pmuludq	($T1,&$addr(8));		# h4*s4
+	&paddq		($D4,$T0);
+	&movdqa		($T0,$T2);
+	&pmuludq	($T2,&$addr(5));		# h4*s1
+	&paddq		($D3,$T1);
+	&movdqa		($T1,$T0);
+	&pmuludq	($T0,&$addr(6));		# h4*s2
+	&paddq		($D0,$T2);
+	 &movdqa	($MASK,&QWP(64,"ebx"));
+	&pmuludq	($T1,&$addr(7));		# h4*s3
+	&paddq		($D1,$T0);
+	&paddq		($D2,$T1);
+}
+	&pmuladd_alt	(sub {	my $i=shift; &QWP(16*($i-9),"edx");	});
+
+	&load_input	(-16*2,0);
+	&lea		("eax",&DWP(-16*2,"esi"));
+	&sub		("ecx",64);
+
+	&paddd		($T0,&QWP(16*(5+0),"esp"));	# add hash value
+	&paddd		($T1,&QWP(16*(5+1),"esp"));
+	&paddd		($D2,&QWP(16*(5+2),"esp"));
+	&paddd		($D3,&QWP(16*(5+3),"esp"));
+	&paddd		($D4,&QWP(16*(5+4),"esp"));
+
+	&cmovb		("esi","eax");
+	&lea		("eax",&DWP(16*10,"esp"));
+
+	&movdqa		($T2,&QWP(16*0,"edx"));		# r0^4
+	&movdqa		(&QWP(16*1,"esp"),$D1);
+	&movdqa		(&QWP(16*1,"eax"),$T1);
+	&movdqa		(&QWP(16*2,"eax"),$D2);
+	&movdqa		(&QWP(16*3,"eax"),$D3);
+	&movdqa		(&QWP(16*4,"eax"),$D4);
+
+	################################################################
+	# d4 += h4*r0 + h0*r4   + h1*r3   + h2*r2   + h3*r1
+	# d3 += h3*r0 + h0*r3   + h1*r2   + h2*r1   + h4*5*r4
+	# d2 += h2*r0 + h0*r2   + h1*r1   + h3*5*r4 + h4*5*r3
+	# d1 += h1*r0 + h0*r1   + h2*5*r4 + h3*5*r3 + h4*5*r2
+	# d0 += h0*r0 + h1*5*r4 + h2*5*r3 + h3*5*r2 + h4*5*r1
+
+	&movdqa		($D1,$T0);
+	&pmuludq	($T0,$T2);			# h0*r0
+	&paddq		($T0,$D0);
+	&movdqa		($D0,$T1);
+	&pmuludq	($T1,$T2);			# h1*r0
+	&pmuludq	($D2,$T2);			# h2*r0
+	&pmuludq	($D3,$T2);			# h3*r0
+	&pmuludq	($D4,$T2);			# h4*r0
+
+	&paddq		($T1,&QWP(16*1,"esp"));
+	&paddq		($D2,&QWP(16*2,"esp"));
+	&paddq		($D3,&QWP(16*3,"esp"));
+	&paddq		($D4,&QWP(16*4,"esp"));
+
+	&pmuladd_alt	(sub {	my $i=shift; &QWP(16*$i,"edx");	});
+
+	&lazy_reduction	();
+
+	&load_input	(16*2,16*5);
+
+	&ja		(&label("loop"));
+
+&set_label("skip_loop");
+	################################################################
+	# multiply (inp[0:1]+hash) or inp[2:3] by r^2:r^1
+
+	 &pshufd	($T2,&QWP(16*(0-9),"edx"),0x10);# r0^n
+	&add		("ecx",32);
+	&jnz		(&label("long_tail"));
+
+	&paddd		($T0,$D0);			# add hash value
+	&paddd		($T1,$D1);
+	&paddd		($D2,&QWP(16*7,"esp"));
+	&paddd		($D3,&QWP(16*8,"esp"));
+	&paddd		($D4,&QWP(16*9,"esp"));
+
+&set_label("long_tail");
+
+	&movdqa		(&QWP(16*0,"eax"),$T0);
+	&movdqa		(&QWP(16*1,"eax"),$T1);
+	&movdqa		(&QWP(16*2,"eax"),$D2);
+	&movdqa		(&QWP(16*3,"eax"),$D3);
+	&movdqa		(&QWP(16*4,"eax"),$D4);
+
+	################################################################
+	# d4 = h4*r0 + h3*r1   + h2*r2   + h1*r3   + h0*r4
+	# d3 = h3*r0 + h2*r1   + h1*r2   + h0*r3   + h4*5*r4
+	# d2 = h2*r0 + h1*r1   + h0*r2   + h4*5*r3 + h3*5*r4
+	# d1 = h1*r0 + h0*r1   + h4*5*r2 + h3*5*r3 + h2*5*r4
+	# d0 = h0*r0 + h4*5*r1 + h3*5*r2 + h2*5*r3 + h1*5*r4
+
+	&pmuludq	($T0,$T2);			# h0*r0
+	&pmuludq	($T1,$T2);			# h1*r0
+	&pmuludq	($D2,$T2);			# h2*r0
+	&movdqa		($D0,$T0);
+	 &pshufd	($T0,&QWP(16*(1-9),"edx"),0x10);# r1^n
+	&pmuludq	($D3,$T2);			# h3*r0
+	&movdqa		($D1,$T1);
+	&pmuludq	($D4,$T2);			# h4*r0
+
+	&pmuladd	(sub {	my ($reg,$i)=@_;
+				&pshufd ($reg,&QWP(16*($i-9),"edx"),0x10);
+			     },"eax");
+
+	&jz		(&label("short_tail"));
+
+	&load_input	(-16*2,0);
+
+	 &pshufd	($T2,&QWP(16*0,"edx"),0x10);	# r0^n
+	&paddd		($T0,&QWP(16*5,"esp"));		# add hash value
+	&paddd		($T1,&QWP(16*6,"esp"));
+	&paddd		($D2,&QWP(16*7,"esp"));
+	&paddd		($D3,&QWP(16*8,"esp"));
+	&paddd		($D4,&QWP(16*9,"esp"));
+
+	################################################################
+	# multiply inp[0:1] by r^4:r^3 and accumulate
+
+	&movdqa		(&QWP(16*0,"esp"),$T0);
+	&pmuludq	($T0,$T2);			# h0*r0
+	&movdqa		(&QWP(16*1,"esp"),$T1);
+	&pmuludq	($T1,$T2);			# h1*r0
+	&paddq		($D0,$T0);
+	&movdqa		($T0,$D2);
+	&pmuludq	($D2,$T2);			# h2*r0
+	&paddq		($D1,$T1);
+	&movdqa		($T1,$D3);
+	&pmuludq	($D3,$T2);			# h3*r0
+	&paddq		($D2,&QWP(16*2,"esp"));
+	&movdqa		(&QWP(16*2,"esp"),$T0);
+	 &pshufd	($T0,&QWP(16*1,"edx"),0x10);	# r1^n
+	&paddq		($D3,&QWP(16*3,"esp"));
+	&movdqa		(&QWP(16*3,"esp"),$T1);
+	&movdqa		($T1,$D4);
+	&pmuludq	($D4,$T2);			# h4*r0
+	&paddq		($D4,&QWP(16*4,"esp"));
+	&movdqa		(&QWP(16*4,"esp"),$T1);
+
+	&pmuladd	(sub {	my ($reg,$i)=@_;
+				&pshufd ($reg,&QWP(16*$i,"edx"),0x10);
+			     });
+
+&set_label("short_tail");
+
+	################################################################
+	# horizontal addition
+
+	&pshufd		($T1,$D4,0b01001110);
+	&pshufd		($T0,$D3,0b01001110);
+	&paddq		($D4,$T1);
+	&paddq		($D3,$T0);
+	&pshufd		($T1,$D0,0b01001110);
+	&pshufd		($T0,$D1,0b01001110);
+	&paddq		($D0,$T1);
+	&paddq		($D1,$T0);
+	&pshufd		($T1,$D2,0b01001110);
+	#&paddq		($D2,$T1);
+
+	&lazy_reduction	(sub { &paddq ($D2,$T1) });
+
+&set_label("done");
+	&movd		(&DWP(-16*3+4*0,"edi"),$D0);	# store hash value
+	&movd		(&DWP(-16*3+4*1,"edi"),$D1);
+	&movd		(&DWP(-16*3+4*2,"edi"),$D2);
+	&movd		(&DWP(-16*3+4*3,"edi"),$D3);
+	&movd		(&DWP(-16*3+4*4,"edi"),$D4);
+	&mov	("esp","ebp");
+&set_label("nodata");
+&function_end("_poly1305_blocks_sse2");
+
+&align	(32);
+&function_begin("_poly1305_emit_sse2");
+	&mov	("ebp",&wparam(0));		# context
+
+	&cmp	(&DWP(4*5,"ebp"),0);		# is_base2_26?
+	&je	(&label("enter_emit"));
+
+	&mov	("eax",&DWP(4*0,"ebp"));	# load hash value
+	&mov	("edi",&DWP(4*1,"ebp"));
+	&mov	("ecx",&DWP(4*2,"ebp"));
+	&mov	("edx",&DWP(4*3,"ebp"));
+	&mov	("esi",&DWP(4*4,"ebp"));
+
+	&mov	("ebx","edi");			# base 2^26 -> base 2^32
+	&shl	("edi",26);
+	&shr	("ebx",6);
+	&add	("eax","edi");
+	&mov	("edi","ecx");
+	&adc	("ebx",0);
+
+	&shl	("edi",20);
+	&shr	("ecx",12);
+	&add	("ebx","edi");
+	&mov	("edi","edx");
+	&adc	("ecx",0);
+
+	&shl	("edi",14);
+	&shr	("edx",18);
+	&add	("ecx","edi");
+	&mov	("edi","esi");
+	&adc	("edx",0);
+
+	&shl	("edi",8);
+	&shr	("esi",24);
+	&add	("edx","edi");
+	&adc	("esi",0);			# can be partially reduced
+
+	&mov	("edi","esi");			# final reduction
+	&and	("esi",3);
+	&shr	("edi",2);
+	&lea	("ebp",&DWP(0,"edi","edi",4));	# *5
+	 &mov	("edi",&wparam(1));		# output
+	&add	("eax","ebp");
+	 &mov	("ebp",&wparam(2));		# key
+	&adc	("ebx",0);
+	&adc	("ecx",0);
+	&adc	("edx",0);
+	&adc	("esi",0);
+
+	&movd	($D0,"eax");			# offload original hash value
+	&add	("eax",5);			# compare to modulus
+	&movd	($D1,"ebx");
+	&adc	("ebx",0);
+	&movd	($D2,"ecx");
+	&adc	("ecx",0);
+	&movd	($D3,"edx");
+	&adc	("edx",0);
+	&adc	("esi",0);
+	&shr	("esi",2);			# did it carry/borrow?
+
+	&neg	("esi");			# do we choose (hash-modulus) ...
+	&and	("eax","esi");
+	&and	("ebx","esi");
+	&and	("ecx","esi");
+	&and	("edx","esi");
+	&mov	(&DWP(4*0,"edi"),"eax");
+	&movd	("eax",$D0);
+	&mov	(&DWP(4*1,"edi"),"ebx");
+	&movd	("ebx",$D1);
+	&mov	(&DWP(4*2,"edi"),"ecx");
+	&movd	("ecx",$D2);
+	&mov	(&DWP(4*3,"edi"),"edx");
+	&movd	("edx",$D3);
+
+	&not	("esi");			# ... or original hash value?
+	&and	("eax","esi");
+	&and	("ebx","esi");
+	&or	("eax",&DWP(4*0,"edi"));
+	&and	("ecx","esi");
+	&or	("ebx",&DWP(4*1,"edi"));
+	&and	("edx","esi");
+	&or	("ecx",&DWP(4*2,"edi"));
+	&or	("edx",&DWP(4*3,"edi"));
+
+	&add	("eax",&DWP(4*0,"ebp"));	# accumulate key
+	&adc	("ebx",&DWP(4*1,"ebp"));
+	&mov	(&DWP(4*0,"edi"),"eax");
+	&adc	("ecx",&DWP(4*2,"ebp"));
+	&mov	(&DWP(4*1,"edi"),"ebx");
+	&adc	("edx",&DWP(4*3,"ebp"));
+	&mov	(&DWP(4*2,"edi"),"ecx");
+	&mov	(&DWP(4*3,"edi"),"edx");
+&function_end("_poly1305_emit_sse2");
+
+if ($avx>1) {
+########################################################################
+# Note that poly1305_init_avx2 operates on %xmm, I could have used
+# poly1305_init_sse2...
+
+&align	(32);
+&function_begin_B("_poly1305_init_avx2");
+	&vmovdqu	($D4,&QWP(4*6,"edi"));		# key base 2^32
+	&lea		("edi",&DWP(16*3,"edi"));	# size optimization
+	&mov		("ebp","esp");
+	&sub		("esp",16*(9+5));
+	&and		("esp",-16);
+
+	#&vpand		($D4,$D4,&QWP(96,"ebx"));	# magic mask
+	&vmovdqa	($MASK,&QWP(64,"ebx"));
+
+	&vpand		($D0,$D4,$MASK);		# -> base 2^26
+	&vpsrlq		($D1,$D4,26);
+	&vpsrldq	($D3,$D4,6);
+	&vpand		($D1,$D1,$MASK);
+	&vpsrlq		($D2,$D3,4)
+	&vpsrlq		($D3,$D3,30);
+	&vpand		($D2,$D2,$MASK);
+	&vpand		($D3,$D3,$MASK);
+	&vpsrldq	($D4,$D4,13);
+
+	&lea		("edx",&DWP(16*9,"esp"));	# size optimization
+	&mov		("ecx",2);
+&set_label("square");
+	&vmovdqa	(&QWP(16*0,"esp"),$D0);
+	&vmovdqa	(&QWP(16*1,"esp"),$D1);
+	&vmovdqa	(&QWP(16*2,"esp"),$D2);
+	&vmovdqa	(&QWP(16*3,"esp"),$D3);
+	&vmovdqa	(&QWP(16*4,"esp"),$D4);
+
+	&vpslld		($T1,$D1,2);
+	&vpslld		($T0,$D2,2);
+	&vpaddd		($T1,$T1,$D1);			# *5
+	&vpaddd		($T0,$T0,$D2);			# *5
+	&vmovdqa	(&QWP(16*5,"esp"),$T1);
+	&vmovdqa	(&QWP(16*6,"esp"),$T0);
+	&vpslld		($T1,$D3,2);
+	&vpslld		($T0,$D4,2);
+	&vpaddd		($T1,$T1,$D3);			# *5
+	&vpaddd		($T0,$T0,$D4);			# *5
+	&vmovdqa	(&QWP(16*7,"esp"),$T1);
+	&vmovdqa	(&QWP(16*8,"esp"),$T0);
+
+	&vpshufd	($T0,$D0,0b01000100);
+	&vmovdqa	($T1,$D1);
+	&vpshufd	($D1,$D1,0b01000100);
+	&vpshufd	($D2,$D2,0b01000100);
+	&vpshufd	($D3,$D3,0b01000100);
+	&vpshufd	($D4,$D4,0b01000100);
+	&vmovdqa	(&QWP(16*0,"edx"),$T0);
+	&vmovdqa	(&QWP(16*1,"edx"),$D1);
+	&vmovdqa	(&QWP(16*2,"edx"),$D2);
+	&vmovdqa	(&QWP(16*3,"edx"),$D3);
+	&vmovdqa	(&QWP(16*4,"edx"),$D4);
+
+	################################################################
+	# d4 = h4*r0 + h3*r1   + h2*r2   + h1*r3   + h0*r4
+	# d3 = h3*r0 + h2*r1   + h1*r2   + h0*r3   + h4*5*r4
+	# d2 = h2*r0 + h1*r1   + h0*r2   + h4*5*r3 + h3*5*r4
+	# d1 = h1*r0 + h0*r1   + h4*5*r2 + h3*5*r3 + h2*5*r4
+	# d0 = h0*r0 + h4*5*r1 + h3*5*r2 + h2*5*r3 + h1*5*r4
+
+	&vpmuludq	($D4,$D4,$D0);			# h4*r0
+	&vpmuludq	($D3,$D3,$D0);			# h3*r0
+	&vpmuludq	($D2,$D2,$D0);			# h2*r0
+	&vpmuludq	($D1,$D1,$D0);			# h1*r0
+	&vpmuludq	($D0,$T0,$D0);			# h0*r0
+
+	&vpmuludq	($T0,$T1,&QWP(16*3,"edx"));	# r1*h3
+	&vpaddq		($D4,$D4,$T0);
+	&vpmuludq	($T2,$T1,&QWP(16*2,"edx"));	# r1*h2
+	&vpaddq		($D3,$D3,$T2);
+	&vpmuludq	($T0,$T1,&QWP(16*1,"edx"));	# r1*h1
+	&vpaddq		($D2,$D2,$T0);
+	&vmovdqa	($T2,&QWP(16*5,"esp"));		# s1
+	&vpmuludq	($T1,$T1,&QWP(16*0,"edx"));	# r1*h0
+	&vpaddq		($D1,$D1,$T1);
+	 &vmovdqa	($T0,&QWP(16*2,"esp"));		# r2
+	&vpmuludq	($T2,$T2,&QWP(16*4,"edx"));	# s1*h4
+	&vpaddq		($D0,$D0,$T2);
+
+	&vpmuludq	($T1,$T0,&QWP(16*2,"edx"));	# r2*h2
+	&vpaddq		($D4,$D4,$T1);
+	&vpmuludq	($T2,$T0,&QWP(16*1,"edx"));	# r2*h1
+	&vpaddq		($D3,$D3,$T2);
+	&vmovdqa	($T1,&QWP(16*6,"esp"));		# s2
+	&vpmuludq	($T0,$T0,&QWP(16*0,"edx"));	# r2*h0
+	&vpaddq		($D2,$D2,$T0);
+	&vpmuludq	($T2,$T1,&QWP(16*4,"edx"));	# s2*h4
+	&vpaddq		($D1,$D1,$T2);
+	 &vmovdqa	($T0,&QWP(16*3,"esp"));		# r3
+	&vpmuludq	($T1,$T1,&QWP(16*3,"edx"));	# s2*h3
+	&vpaddq		($D0,$D0,$T1);
+
+	&vpmuludq	($T2,$T0,&QWP(16*1,"edx"));	# r3*h1
+	&vpaddq		($D4,$D4,$T2);
+	&vmovdqa	($T1,&QWP(16*7,"esp"));		# s3
+	&vpmuludq	($T0,$T0,&QWP(16*0,"edx"));	# r3*h0
+	&vpaddq		($D3,$D3,$T0);
+	&vpmuludq	($T2,$T1,&QWP(16*4,"edx"));	# s3*h4
+	&vpaddq		($D2,$D2,$T2);
+	&vpmuludq	($T0,$T1,&QWP(16*3,"edx"));	# s3*h3
+	&vpaddq		($D1,$D1,$T0);
+	 &vmovdqa	($T2,&QWP(16*4,"esp"));		# r4
+	&vpmuludq	($T1,$T1,&QWP(16*2,"edx"));	# s3*h2
+	&vpaddq		($D0,$D0,$T1);
+
+	&vmovdqa	($T0,&QWP(16*8,"esp"));		# s4
+	&vpmuludq	($T2,$T2,&QWP(16*0,"edx"));	# r4*h0
+	&vpaddq		($D4,$D4,$T2);
+	&vpmuludq	($T1,$T0,&QWP(16*4,"edx"));	# s4*h4
+	&vpaddq		($D3,$D3,$T1);
+	&vpmuludq	($T2,$T0,&QWP(16*1,"edx"));	# s4*h1
+	&vpaddq		($D0,$D0,$T2);
+	&vpmuludq	($T1,$T0,&QWP(16*2,"edx"));	# s4*h2
+	&vpaddq		($D1,$D1,$T1);
+	 &vmovdqa	($MASK,&QWP(64,"ebx"));
+	&vpmuludq	($T0,$T0,&QWP(16*3,"edx"));	# s4*h3
+	&vpaddq		($D2,$D2,$T0);
+
+	################################################################
+	# lazy reduction
+	 &vpsrlq	($T0,$D3,26);
+	 &vpand		($D3,$D3,$MASK);
+	&vpsrlq		($T1,$D0,26);
+	&vpand		($D0,$D0,$MASK);
+	 &vpaddq	($D4,$D4,$T0);			# h3 -> h4
+	&vpaddq		($D1,$D1,$T1);			# h0 -> h1
+	 &vpsrlq	($T0,$D4,26);
+	 &vpand		($D4,$D4,$MASK);
+	&vpsrlq		($T1,$D1,26);
+	&vpand		($D1,$D1,$MASK);
+	&vpaddq		($D2,$D2,$T1);			# h1 -> h2
+	 &vpaddd	($D0,$D0,$T0);
+	 &vpsllq	($T0,$T0,2);
+	&vpsrlq		($T1,$D2,26);
+	&vpand		($D2,$D2,$MASK);
+	 &vpaddd	($D0,$D0,$T0);			# h4 -> h0
+	&vpaddd		($D3,$D3,$T1);			# h2 -> h3
+	&vpsrlq		($T1,$D3,26);
+	 &vpsrlq	($T0,$D0,26);
+	 &vpand		($D0,$D0,$MASK);
+	&vpand		($D3,$D3,$MASK);
+	 &vpaddd	($D1,$D1,$T0);			# h0 -> h1
+	&vpaddd		($D4,$D4,$T1);			# h3 -> h4
+
+	&dec		("ecx");
+	&jz		(&label("square_break"));
+
+	&vpunpcklqdq	($D0,$D0,&QWP(16*0,"esp"));	# 0:r^1:0:r^2
+	&vpunpcklqdq	($D1,$D1,&QWP(16*1,"esp"));
+	&vpunpcklqdq	($D2,$D2,&QWP(16*2,"esp"));
+	&vpunpcklqdq	($D3,$D3,&QWP(16*3,"esp"));
+	&vpunpcklqdq	($D4,$D4,&QWP(16*4,"esp"));
+	&jmp		(&label("square"));
+
+&set_label("square_break");
+	&vpsllq		($D0,$D0,32);			# -> r^3:0:r^4:0
+	&vpsllq		($D1,$D1,32);
+	&vpsllq		($D2,$D2,32);
+	&vpsllq		($D3,$D3,32);
+	&vpsllq		($D4,$D4,32);
+	&vpor		($D0,$D0,&QWP(16*0,"esp"));	# r^3:r^1:r^4:r^2
+	&vpor		($D1,$D1,&QWP(16*1,"esp"));
+	&vpor		($D2,$D2,&QWP(16*2,"esp"));
+	&vpor		($D3,$D3,&QWP(16*3,"esp"));
+	&vpor		($D4,$D4,&QWP(16*4,"esp"));
+
+	&vpshufd	($D0,$D0,0b10001101);		# -> r^1:r^2:r^3:r^4
+	&vpshufd	($D1,$D1,0b10001101);
+	&vpshufd	($D2,$D2,0b10001101);
+	&vpshufd	($D3,$D3,0b10001101);
+	&vpshufd	($D4,$D4,0b10001101);
+
+	&vmovdqu	(&QWP(16*0,"edi"),$D0);		# save the table
+	&vmovdqu	(&QWP(16*1,"edi"),$D1);
+	&vmovdqu	(&QWP(16*2,"edi"),$D2);
+	&vmovdqu	(&QWP(16*3,"edi"),$D3);
+	&vmovdqu	(&QWP(16*4,"edi"),$D4);
+
+	&vpslld		($T1,$D1,2);
+	&vpslld		($T0,$D2,2);
+	&vpaddd		($T1,$T1,$D1);			# *5
+	&vpaddd		($T0,$T0,$D2);			# *5
+	&vmovdqu	(&QWP(16*5,"edi"),$T1);
+	&vmovdqu	(&QWP(16*6,"edi"),$T0);
+	&vpslld		($T1,$D3,2);
+	&vpslld		($T0,$D4,2);
+	&vpaddd		($T1,$T1,$D3);			# *5
+	&vpaddd		($T0,$T0,$D4);			# *5
+	&vmovdqu	(&QWP(16*7,"edi"),$T1);
+	&vmovdqu	(&QWP(16*8,"edi"),$T0);
+
+	&mov		("esp","ebp");
+	&lea		("edi",&DWP(-16*3,"edi"));	# size de-optimization
+	&ret		();
+&function_end_B("_poly1305_init_avx2");
+
+########################################################################
+# now it's time to switch to %ymm
+
+my ($D0,$D1,$D2,$D3,$D4,$T0,$T1,$T2)=map("ymm$_",(0..7));
+my $MASK=$T2;
+
+sub X { my $reg=shift; $reg=~s/^ymm/xmm/; $reg; }
+
+&align	(32);
+&function_begin("_poly1305_blocks_avx2");
+	&mov	("edi",&wparam(0));			# ctx
+	&mov	("esi",&wparam(1));			# inp
+	&mov	("ecx",&wparam(2));			# len
+
+	&mov	("eax",&DWP(4*5,"edi"));		# is_base2_26
+	&and	("ecx",-16);
+	&jz	(&label("nodata"));
+	&cmp	("ecx",64);
+	&jae	(&label("enter_avx2"));
+	&test	("eax","eax");				# is_base2_26?
+	&jz	(&label("enter_blocks"));
+
+&set_label("enter_avx2");
+	&vzeroupper	();
+
+	&call	(&label("pic_point"));
+&set_label("pic_point");
+	&blindpop("ebx");
+	&lea	("ebx",&DWP(&label("const_sse2")."-".&label("pic_point"),"ebx"));
+
+	&test	("eax","eax");				# is_base2_26?
+	&jnz	(&label("base2_26"));
+
+	&call	("_poly1305_init_avx2");
+
+	################################################# base 2^32 -> base 2^26
+	&mov	("eax",&DWP(0,"edi"));
+	&mov	("ecx",&DWP(3,"edi"));
+	&mov	("edx",&DWP(6,"edi"));
+	&mov	("esi",&DWP(9,"edi"));
+	&mov	("ebp",&DWP(13,"edi"));
+
+	&shr	("ecx",2);
+	&and	("eax",0x3ffffff);
+	&shr	("edx",4);
+	&and	("ecx",0x3ffffff);
+	&shr	("esi",6);
+	&and	("edx",0x3ffffff);
+
+	&mov	(&DWP(4*0,"edi"),"eax");
+	&mov	(&DWP(4*1,"edi"),"ecx");
+	&mov	(&DWP(4*2,"edi"),"edx");
+	&mov	(&DWP(4*3,"edi"),"esi");
+	&mov	(&DWP(4*4,"edi"),"ebp");
+	&mov	(&DWP(4*5,"edi"),1);			# is_base2_26
+
+	&mov	("esi",&wparam(1));			# [reload] inp
+	&mov	("ecx",&wparam(2));			# [reload] len
+
+&set_label("base2_26");
+	&mov	("eax",&wparam(3));			# padbit
+	&mov	("ebp","esp");
+
+	&sub	("esp",32*(5+9));
+	&and	("esp",-512);				# ensure that frame
+							# doesn't cross page
+							# boundary, which is
+							# essential for
+							# misaligned 32-byte
+							# loads
+
+	################################################################
+        # expand and copy pre-calculated table to stack
+
+	&vmovdqu	(&X($D0),&QWP(16*(3+0),"edi"));
+	&lea		("edx",&DWP(32*5+128,"esp"));	# +128 size optimization
+	&vmovdqu	(&X($D1),&QWP(16*(3+1),"edi"));
+	&vmovdqu	(&X($D2),&QWP(16*(3+2),"edi"));
+	&vmovdqu	(&X($D3),&QWP(16*(3+3),"edi"));
+	&vmovdqu	(&X($D4),&QWP(16*(3+4),"edi"));
+	&lea		("edi",&DWP(16*3,"edi"));	# size optimization
+	&vpermq		($D0,$D0,0b01000000);		# 00001234 -> 12343434
+	&vpermq		($D1,$D1,0b01000000);
+	&vpermq		($D2,$D2,0b01000000);
+	&vpermq		($D3,$D3,0b01000000);
+	&vpermq		($D4,$D4,0b01000000);
+	&vpshufd	($D0,$D0,0b11001000);		# 12343434 -> 14243444
+	&vpshufd	($D1,$D1,0b11001000);
+	&vpshufd	($D2,$D2,0b11001000);
+	&vpshufd	($D3,$D3,0b11001000);
+	&vpshufd	($D4,$D4,0b11001000);
+	&vmovdqa	(&QWP(32*0-128,"edx"),$D0);
+	&vmovdqu	(&X($D0),&QWP(16*5,"edi"));
+	&vmovdqa	(&QWP(32*1-128,"edx"),$D1);
+	&vmovdqu	(&X($D1),&QWP(16*6,"edi"));
+	&vmovdqa	(&QWP(32*2-128,"edx"),$D2);
+	&vmovdqu	(&X($D2),&QWP(16*7,"edi"));
+	&vmovdqa	(&QWP(32*3-128,"edx"),$D3);
+	&vmovdqu	(&X($D3),&QWP(16*8,"edi"));
+	&vmovdqa	(&QWP(32*4-128,"edx"),$D4);
+	&vpermq		($D0,$D0,0b01000000);
+	&vpermq		($D1,$D1,0b01000000);
+	&vpermq		($D2,$D2,0b01000000);
+	&vpermq		($D3,$D3,0b01000000);
+	&vpshufd	($D0,$D0,0b11001000);
+	&vpshufd	($D1,$D1,0b11001000);
+	&vpshufd	($D2,$D2,0b11001000);
+	&vpshufd	($D3,$D3,0b11001000);
+	&vmovdqa	(&QWP(32*5-128,"edx"),$D0);
+	&vmovd		(&X($D0),&DWP(-16*3+4*0,"edi"));# load hash value
+	&vmovdqa	(&QWP(32*6-128,"edx"),$D1);
+	&vmovd		(&X($D1),&DWP(-16*3+4*1,"edi"));
+	&vmovdqa	(&QWP(32*7-128,"edx"),$D2);
+	&vmovd		(&X($D2),&DWP(-16*3+4*2,"edi"));
+	&vmovdqa	(&QWP(32*8-128,"edx"),$D3);
+	&vmovd		(&X($D3),&DWP(-16*3+4*3,"edi"));
+	&vmovd		(&X($D4),&DWP(-16*3+4*4,"edi"));
+	&vmovdqa	($MASK,&QWP(64,"ebx"));
+	&neg		("eax");			# padbit
+
+	&test		("ecx",63);
+	&jz		(&label("even"));
+
+	&mov		("edx","ecx");
+	&and		("ecx",-64);
+	&and		("edx",63);
+
+	&vmovdqu	(&X($T0),&QWP(16*0,"esi"));
+	&cmp		("edx",32);
+	&jb		(&label("one"));
+
+	&vmovdqu	(&X($T1),&QWP(16*1,"esi"));
+	&je		(&label("two"));
+
+	&vinserti128	($T0,$T0,&QWP(16*2,"esi"),1);
+	&lea		("esi",&DWP(16*3,"esi"));
+	&lea		("ebx",&DWP(8,"ebx"));		# three padbits
+	&lea		("edx",&DWP(32*5+128+8,"esp"));	# --:r^1:r^2:r^3 (*)
+	&jmp		(&label("tail"));
+
+&set_label("two");
+	&lea		("esi",&DWP(16*2,"esi"));
+	&lea		("ebx",&DWP(16,"ebx"));		# two padbits
+	&lea		("edx",&DWP(32*5+128+16,"esp"));# --:--:r^1:r^2 (*)
+	&jmp		(&label("tail"));
+
+&set_label("one");
+	&lea		("esi",&DWP(16*1,"esi"));
+	&vpxor		($T1,$T1,$T1);
+	&lea		("ebx",&DWP(32,"ebx","eax",8));	# one or no padbits
+	&lea		("edx",&DWP(32*5+128+24,"esp"));# --:--:--:r^1 (*)
+	&jmp		(&label("tail"));
+
+# (*)	spots marked with '--' are data from next table entry, but they
+#	are multiplied by 0 and therefore rendered insignificant
+
+&set_label("even",32);
+	&vmovdqu	(&X($T0),&QWP(16*0,"esi"));	# load input
+	&vmovdqu	(&X($T1),&QWP(16*1,"esi"));
+	&vinserti128	($T0,$T0,&QWP(16*2,"esi"),1);
+	&vinserti128	($T1,$T1,&QWP(16*3,"esi"),1);
+	&lea		("esi",&DWP(16*4,"esi"));
+	&sub		("ecx",64);
+	&jz		(&label("tail"));
+
+&set_label("loop");
+	################################################################
+	# ((inp[0]*r^4+r[4])*r^4+r[8])*r^4
+	# ((inp[1]*r^4+r[5])*r^4+r[9])*r^3
+	# ((inp[2]*r^4+r[6])*r^4+r[10])*r^2
+	# ((inp[3]*r^4+r[7])*r^4+r[11])*r^1
+	#   \________/ \_______/
+	################################################################
+
+sub vsplat_input {
+	&vmovdqa	(&QWP(32*2,"esp"),$D2);
+	&vpsrldq	($D2,$T0,6);			# splat input
+	&vmovdqa	(&QWP(32*0,"esp"),$D0);
+	&vpsrldq	($D0,$T1,6);
+	&vmovdqa	(&QWP(32*1,"esp"),$D1);
+	&vpunpckhqdq	($D1,$T0,$T1);			# 4
+	&vpunpcklqdq	($T0,$T0,$T1);			# 0:1
+	&vpunpcklqdq	($D2,$D2,$D0);			# 2:3
+
+	&vpsrlq		($D0,$D2,30);
+	&vpsrlq		($D2,$D2,4);
+	&vpsrlq		($T1,$T0,26);
+	&vpsrlq		($D1,$D1,40);			# 4
+	&vpand		($D2,$D2,$MASK);		# 2
+	&vpand		($T0,$T0,$MASK);		# 0
+	&vpand		($T1,$T1,$MASK);		# 1
+	&vpand		($D0,$D0,$MASK);		# 3 (*)
+	&vpor		($D1,$D1,&QWP(0,"ebx"));	# padbit, yes, always
+
+	# (*)	note that output is counterintuitive, inp[3:4] is
+	#	returned in $D1-2, while $D3-4 are preserved;
+}
+	&vsplat_input	();
+
+sub vpmuladd {
+my $addr = shift;
+
+	&vpaddq		($D2,$D2,&QWP(32*2,"esp"));	# add hash value
+	&vpaddq		($T0,$T0,&QWP(32*0,"esp"));
+	&vpaddq		($T1,$T1,&QWP(32*1,"esp"));
+	&vpaddq		($D0,$D0,$D3);
+	&vpaddq		($D1,$D1,$D4);
+
+	################################################################
+	# d3 = h2*r1   + h0*r3 + h1*r2   + h3*r0   + h4*5*r4
+	# d4 = h2*r2   + h0*r4 + h1*r3   + h3*r1   + h4*r0
+	# d0 = h2*5*r3 + h0*r0 + h1*5*r4 + h3*5*r2 + h4*5*r1
+	# d1 = h2*5*r4 + h0*r1 + h1*r0   + h3*5*r3 + h4*5*r2
+	# d2 = h2*r0   + h0*r2 + h1*r1   + h3*5*r4 + h4*5*r3
+
+	&vpmuludq	($D3,$D2,&$addr(1));		# d3 = h2*r1
+	 &vmovdqa	(QWP(32*1,"esp"),$T1);
+	&vpmuludq	($D4,$D2,&$addr(2));		# d4 = h2*r2
+	 &vmovdqa	(QWP(32*3,"esp"),$D0);
+	&vpmuludq	($D0,$D2,&$addr(7));		# d0 = h2*s3
+	 &vmovdqa	(QWP(32*4,"esp"),$D1);
+	&vpmuludq	($D1,$D2,&$addr(8));		# d1 = h2*s4
+	&vpmuludq	($D2,$D2,&$addr(0));		# d2 = h2*r0
+
+	&vpmuludq	($T2,$T0,&$addr(3));		# h0*r3
+	&vpaddq		($D3,$D3,$T2);			# d3 += h0*r3
+	&vpmuludq	($T1,$T0,&$addr(4));		# h0*r4
+	&vpaddq		($D4,$D4,$T1);			# d4 + h0*r4
+	&vpmuludq	($T2,$T0,&$addr(0));		# h0*r0
+	&vpaddq		($D0,$D0,$T2);			# d0 + h0*r0
+	 &vmovdqa	($T2,&QWP(32*1,"esp"));		# h1
+	&vpmuludq	($T1,$T0,&$addr(1));		# h0*r1
+	&vpaddq		($D1,$D1,$T1);			# d1 += h0*r1
+	&vpmuludq	($T0,$T0,&$addr(2));		# h0*r2
+	&vpaddq		($D2,$D2,$T0);			# d2 += h0*r2
+
+	&vpmuludq	($T1,$T2,&$addr(2));		# h1*r2
+	&vpaddq		($D3,$D3,$T1);			# d3 += h1*r2
+	&vpmuludq	($T0,$T2,&$addr(3));		# h1*r3
+	&vpaddq		($D4,$D4,$T0);			# d4 += h1*r3
+	&vpmuludq	($T1,$T2,&$addr(8));		# h1*s4
+	&vpaddq		($D0,$D0,$T1);			# d0 += h1*s4
+	 &vmovdqa	($T1,&QWP(32*3,"esp"));		# h3
+	&vpmuludq	($T0,$T2,&$addr(0));		# h1*r0
+	&vpaddq		($D1,$D1,$T0);			# d1 += h1*r0
+	&vpmuludq	($T2,$T2,&$addr(1));		# h1*r1
+	&vpaddq		($D2,$D2,$T2);			# d2 += h1*r1
+
+	&vpmuludq	($T0,$T1,&$addr(0));		# h3*r0
+	&vpaddq		($D3,$D3,$T0);			# d3 += h3*r0
+	&vpmuludq	($T2,$T1,&$addr(1));		# h3*r1
+	&vpaddq		($D4,$D4,$T2);			# d4 += h3*r1
+	&vpmuludq	($T0,$T1,&$addr(6));		# h3*s2
+	&vpaddq		($D0,$D0,$T0);			# d0 += h3*s2
+	 &vmovdqa	($T0,&QWP(32*4,"esp"));		# h4
+	&vpmuludq	($T2,$T1,&$addr(7));		# h3*s3
+	&vpaddq		($D1,$D1,$T2);			# d1+= h3*s3
+	&vpmuludq	($T1,$T1,&$addr(8));		# h3*s4
+	&vpaddq		($D2,$D2,$T1);			# d2 += h3*s4
+
+	&vpmuludq	($T2,$T0,&$addr(8));		# h4*s4
+	&vpaddq		($D3,$D3,$T2);			# d3 += h4*s4
+	&vpmuludq	($T1,$T0,&$addr(5));		# h4*s1
+	&vpaddq		($D0,$D0,$T1);			# d0 += h4*s1
+	&vpmuludq	($T2,$T0,&$addr(0));		# h4*r0
+	&vpaddq		($D4,$D4,$T2);			# d4 += h4*r0
+	 &vmovdqa	($MASK,&QWP(64,"ebx"));
+	&vpmuludq	($T1,$T0,&$addr(6));		# h4*s2
+	&vpaddq		($D1,$D1,$T1);			# d1 += h4*s2
+	&vpmuludq	($T0,$T0,&$addr(7));		# h4*s3
+	&vpaddq		($D2,$D2,$T0);			# d2 += h4*s3
+}
+	&vpmuladd	(sub {	my $i=shift; &QWP(32*$i-128,"edx");	});
+
+sub vlazy_reduction {
+	################################################################
+	# lazy reduction
+
+	 &vpsrlq	($T0,$D3,26);
+	 &vpand		($D3,$D3,$MASK);
+	&vpsrlq		($T1,$D0,26);
+	&vpand		($D0,$D0,$MASK);
+	 &vpaddq	($D4,$D4,$T0);			# h3 -> h4
+	&vpaddq		($D1,$D1,$T1);			# h0 -> h1
+	 &vpsrlq	($T0,$D4,26);
+	 &vpand		($D4,$D4,$MASK);
+	&vpsrlq		($T1,$D1,26);
+	&vpand		($D1,$D1,$MASK);
+	&vpaddq		($D2,$D2,$T1);			# h1 -> h2
+	 &vpaddq	($D0,$D0,$T0);
+	 &vpsllq	($T0,$T0,2);
+	&vpsrlq		($T1,$D2,26);
+	&vpand		($D2,$D2,$MASK);
+	 &vpaddq	($D0,$D0,$T0);			# h4 -> h0
+	&vpaddq		($D3,$D3,$T1);			# h2 -> h3
+	&vpsrlq		($T1,$D3,26);
+	 &vpsrlq	($T0,$D0,26);
+	 &vpand		($D0,$D0,$MASK);
+	&vpand		($D3,$D3,$MASK);
+	 &vpaddq	($D1,$D1,$T0);			# h0 -> h1
+	&vpaddq		($D4,$D4,$T1);			# h3 -> h4
+}
+	&vlazy_reduction();
+
+	&vmovdqu	(&X($T0),&QWP(16*0,"esi"));	# load input
+	&vmovdqu	(&X($T1),&QWP(16*1,"esi"));
+	&vinserti128	($T0,$T0,&QWP(16*2,"esi"),1);
+	&vinserti128	($T1,$T1,&QWP(16*3,"esi"),1);
+	&lea		("esi",&DWP(16*4,"esi"));
+	&sub		("ecx",64);
+	&jnz		(&label("loop"));
+
+&set_label("tail");
+	&vsplat_input	();
+	&and		("ebx",-64);			# restore pointer
+
+	&vpmuladd	(sub {	my $i=shift; &QWP(4+32*$i-128,"edx");	});
+
+	################################################################
+	# horizontal addition
+
+	&vpsrldq	($T0,$D4,8);
+	&vpsrldq	($T1,$D3,8);
+	&vpaddq		($D4,$D4,$T0);
+	&vpsrldq	($T0,$D0,8);
+	&vpaddq		($D3,$D3,$T1);
+	&vpsrldq	($T1,$D1,8);
+	&vpaddq		($D0,$D0,$T0);
+	&vpsrldq	($T0,$D2,8);
+	&vpaddq		($D1,$D1,$T1);
+	&vpermq		($T1,$D4,2);			# keep folding
+	&vpaddq		($D2,$D2,$T0);
+	&vpermq		($T0,$D3,2);
+	&vpaddq		($D4,$D4,$T1);
+	&vpermq		($T1,$D0,2);
+	&vpaddq		($D3,$D3,$T0);
+	&vpermq		($T0,$D1,2);
+	&vpaddq		($D0,$D0,$T1);
+	&vpermq		($T1,$D2,2);
+	&vpaddq		($D1,$D1,$T0);
+	&vpaddq		($D2,$D2,$T1);
+
+	&vlazy_reduction();
+
+	&cmp		("ecx",0);
+	&je		(&label("done"));
+
+	################################################################
+	# clear all but single word
+
+	&vpshufd	(&X($D0),&X($D0),0b11111100);
+	&lea		("edx",&DWP(32*5+128,"esp"));	# restore pointer
+	&vpshufd	(&X($D1),&X($D1),0b11111100);
+	&vpshufd	(&X($D2),&X($D2),0b11111100);
+	&vpshufd	(&X($D3),&X($D3),0b11111100);
+	&vpshufd	(&X($D4),&X($D4),0b11111100);
+	&jmp		(&label("even"));
+
+&set_label("done",16);
+	&vmovd		(&DWP(-16*3+4*0,"edi"),&X($D0));# store hash value
+	&vmovd		(&DWP(-16*3+4*1,"edi"),&X($D1));
+	&vmovd		(&DWP(-16*3+4*2,"edi"),&X($D2));
+	&vmovd		(&DWP(-16*3+4*3,"edi"),&X($D3));
+	&vmovd		(&DWP(-16*3+4*4,"edi"),&X($D4));
+	&vzeroupper	();
+	&mov	("esp","ebp");
+&set_label("nodata");
+&function_end("_poly1305_blocks_avx2");
+}
+&set_label("const_sse2",64);
+	&data_word(1<<24,0,	1<<24,0,	1<<24,0,	1<<24,0);
+	&data_word(0,0,		0,0,		0,0,		0,0);
+	&data_word(0x03ffffff,0,0x03ffffff,0,	0x03ffffff,0,	0x03ffffff,0);
+	&data_word(0x0fffffff,0x0ffffffc,0x0ffffffc,0x0ffffffc);
+}
+&asciz	("Poly1305 for x86, CRYPTOGAMS by <appro\@openssl.org>");
+&align	(4);
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-x86_64.pl
new file mode 100755
index 000000000..342ad7f18
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/asm/poly1305-x86_64.pl
@@ -0,0 +1,4159 @@
+#! /usr/bin/env perl
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# This module implements Poly1305 hash for x86_64.
+#
+# March 2015
+#
+# Initial release.
+#
+# December 2016
+#
+# Add AVX512F+VL+BW code path.
+#
+# November 2017
+#
+# Convert AVX512F+VL+BW code path to pure AVX512F, so that it can be
+# executed even on Knights Landing. Trigger for modification was
+# observation that AVX512 code paths can negatively affect overall
+# Skylake-X system performance. Since we are likely to suppress
+# AVX512F capability flag [at least on Skylake-X], conversion serves
+# as kind of "investment protection". Note that next *lake processor,
+# Cannolake, has AVX512IFMA code path to execute...
+#
+# Numbers are cycles per processed byte with poly1305_blocks alone,
+# measured with rdtsc at fixed clock frequency.
+#
+#		IALU/gcc-4.8(*)	AVX(**)		AVX2	AVX-512
+# P4		4.46/+120%	-
+# Core 2	2.41/+90%	-
+# Westmere	1.88/+120%	-
+# Sandy Bridge	1.39/+140%	1.10
+# Haswell	1.14/+175%	1.11		0.65
+# Skylake[-X]	1.13/+120%	0.96		0.51	[0.35]
+# Silvermont	2.83/+95%	-
+# Knights L	3.60/?		1.65		1.10	0.41(***)
+# Goldmont	1.70/+180%	-
+# VIA Nano	1.82/+150%	-
+# Sledgehammer	1.38/+160%	-
+# Bulldozer	2.30/+130%	0.97
+# Ryzen		1.15/+200%	1.08		1.18
+#
+# (*)	improvement coefficients relative to clang are more modest and
+#	are ~50% on most processors, in both cases we are comparing to
+#	__int128 code;
+# (**)	SSE2 implementation was attempted, but among non-AVX processors
+#	it was faster than integer-only code only on older Intel P4 and
+#	Core processors, 50-30%, less newer processor is, but slower on
+#	contemporary ones, for example almost 2x slower on Atom, and as
+#	former are naturally disappearing, SSE2 is deemed unnecessary;
+# (***)	strangely enough performance seems to vary from core to core,
+#	listed result is best case;
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.19) + ($1>=2.22) + ($1>=2.25) + ($1>=2.26);
+}
+
+if (!$avx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	   `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)(?:\.([0-9]+))?/) {
+	$avx = ($1>=2.09) + ($1>=2.10) + 2 * ($1>=2.12);
+	$avx += 2 if ($1==2.11 && $2>=8);
+}
+
+if (!$avx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	   `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$avx = ($1>=10) + ($1>=12);
+}
+
+if (!$avx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([3-9]\.[0-9]+)/) {
+	$avx = ($2>=3.0) + ($2>3.0);
+}
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+my ($ctx,$inp,$len,$padbit)=("%rdi","%rsi","%rdx","%rcx");
+my ($mac,$nonce)=($inp,$len);	# *_emit arguments
+my ($d1,$d2,$d3, $r0,$r1,$s1)=map("%r$_",(8..13));
+my ($h0,$h1,$h2)=("%r14","%rbx","%rbp");
+
+sub poly1305_iteration {
+# input:	copy of $r1 in %rax, $h0-$h2, $r0-$r1
+# output:	$h0-$h2 *= $r0-$r1
+$code.=<<___;
+	mulq	$h0			# h0*r1
+	mov	%rax,$d2
+	 mov	$r0,%rax
+	mov	%rdx,$d3
+
+	mulq	$h0			# h0*r0
+	mov	%rax,$h0		# future $h0
+	 mov	$r0,%rax
+	mov	%rdx,$d1
+
+	mulq	$h1			# h1*r0
+	add	%rax,$d2
+	 mov	$s1,%rax
+	adc	%rdx,$d3
+
+	mulq	$h1			# h1*s1
+	 mov	$h2,$h1			# borrow $h1
+	add	%rax,$h0
+	adc	%rdx,$d1
+
+	imulq	$s1,$h1			# h2*s1
+	add	$h1,$d2
+	 mov	$d1,$h1
+	adc	\$0,$d3
+
+	imulq	$r0,$h2			# h2*r0
+	add	$d2,$h1
+	mov	\$-4,%rax		# mask value
+	adc	$h2,$d3
+
+	and	$d3,%rax		# last reduction step
+	mov	$d3,$h2
+	shr	\$2,$d3
+	and	\$3,$h2
+	add	$d3,%rax
+	add	%rax,$h0
+	adc	\$0,$h1
+	adc	\$0,$h2
+___
+}
+
+########################################################################
+# Layout of opaque area is following.
+#
+#	unsigned __int64 h[3];		# current hash value base 2^64
+#	unsigned __int64 r[2];		# key value base 2^64
+
+$code.=<<___;
+.text
+
+.extern	OPENSSL_ia32cap_P
+
+.globl	poly1305_init
+.hidden	poly1305_init
+.globl	poly1305_blocks
+.hidden	poly1305_blocks
+.globl	poly1305_emit
+.hidden	poly1305_emit
+
+.type	poly1305_init,\@function,3
+.align	32
+poly1305_init:
+	xor	%rax,%rax
+	mov	%rax,0($ctx)		# initialize hash value
+	mov	%rax,8($ctx)
+	mov	%rax,16($ctx)
+
+	cmp	\$0,$inp
+	je	.Lno_key
+
+	lea	poly1305_blocks(%rip),%r10
+	lea	poly1305_emit(%rip),%r11
+___
+$code.=<<___	if ($avx);
+	mov	OPENSSL_ia32cap_P+4(%rip),%r9
+	lea	poly1305_blocks_avx(%rip),%rax
+	lea	poly1305_emit_avx(%rip),%rcx
+	bt	\$`60-32`,%r9		# AVX?
+	cmovc	%rax,%r10
+	cmovc	%rcx,%r11
+___
+$code.=<<___	if ($avx>1);
+	lea	poly1305_blocks_avx2(%rip),%rax
+	bt	\$`5+32`,%r9		# AVX2?
+	cmovc	%rax,%r10
+___
+$code.=<<___	if ($avx>3);
+	mov	\$`(1<<31|1<<21|1<<16)`,%rax
+	shr	\$32,%r9
+	and	%rax,%r9
+	cmp	%rax,%r9
+	je	.Linit_base2_44
+___
+$code.=<<___;
+	mov	\$0x0ffffffc0fffffff,%rax
+	mov	\$0x0ffffffc0ffffffc,%rcx
+	and	0($inp),%rax
+	and	8($inp),%rcx
+	mov	%rax,24($ctx)
+	mov	%rcx,32($ctx)
+___
+$code.=<<___	if ($flavour !~ /elf32/);
+	mov	%r10,0(%rdx)
+	mov	%r11,8(%rdx)
+___
+$code.=<<___	if ($flavour =~ /elf32/);
+	mov	%r10d,0(%rdx)
+	mov	%r11d,4(%rdx)
+___
+$code.=<<___;
+	mov	\$1,%eax
+.Lno_key:
+	ret
+.size	poly1305_init,.-poly1305_init
+
+.type	poly1305_blocks,\@function,4
+.align	32
+poly1305_blocks:
+.cfi_startproc
+.Lblocks:
+	shr	\$4,$len
+	jz	.Lno_data		# too short
+
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lblocks_body:
+
+	mov	$len,%r15		# reassign $len
+
+	mov	24($ctx),$r0		# load r
+	mov	32($ctx),$s1
+
+	mov	0($ctx),$h0		# load hash value
+	mov	8($ctx),$h1
+	mov	16($ctx),$h2
+
+	mov	$s1,$r1
+	shr	\$2,$s1
+	mov	$r1,%rax
+	add	$r1,$s1			# s1 = r1 + (r1 >> 2)
+	jmp	.Loop
+
+.align	32
+.Loop:
+	add	0($inp),$h0		# accumulate input
+	adc	8($inp),$h1
+	lea	16($inp),$inp
+	adc	$padbit,$h2
+___
+	&poly1305_iteration();
+$code.=<<___;
+	mov	$r1,%rax
+	dec	%r15			# len-=16
+	jnz	.Loop
+
+	mov	$h0,0($ctx)		# store hash value
+	mov	$h1,8($ctx)
+	mov	$h2,16($ctx)
+
+	mov	0(%rsp),%r15
+.cfi_restore	%r15
+	mov	8(%rsp),%r14
+.cfi_restore	%r14
+	mov	16(%rsp),%r13
+.cfi_restore	%r13
+	mov	24(%rsp),%r12
+.cfi_restore	%r12
+	mov	32(%rsp),%rbp
+.cfi_restore	%rbp
+	mov	40(%rsp),%rbx
+.cfi_restore	%rbx
+	lea	48(%rsp),%rsp
+.cfi_adjust_cfa_offset	-48
+.Lno_data:
+.Lblocks_epilogue:
+	ret
+.cfi_endproc
+.size	poly1305_blocks,.-poly1305_blocks
+
+.type	poly1305_emit,\@function,3
+.align	32
+poly1305_emit:
+.Lemit:
+	mov	0($ctx),%r8	# load hash value
+	mov	8($ctx),%r9
+	mov	16($ctx),%r10
+
+	mov	%r8,%rax
+	add	\$5,%r8		# compare to modulus
+	mov	%r9,%rcx
+	adc	\$0,%r9
+	adc	\$0,%r10
+	shr	\$2,%r10	# did 130-bit value overflow?
+	cmovnz	%r8,%rax
+	cmovnz	%r9,%rcx
+
+	add	0($nonce),%rax	# accumulate nonce
+	adc	8($nonce),%rcx
+	mov	%rax,0($mac)	# write result
+	mov	%rcx,8($mac)
+
+	ret
+.size	poly1305_emit,.-poly1305_emit
+___
+if ($avx) {
+
+########################################################################
+# Layout of opaque area is following.
+#
+#	unsigned __int32 h[5];		# current hash value base 2^26
+#	unsigned __int32 is_base2_26;
+#	unsigned __int64 r[2];		# key value base 2^64
+#	unsigned __int64 pad;
+#	struct { unsigned __int32 r^2, r^1, r^4, r^3; } r[9];
+#
+# where r^n are base 2^26 digits of degrees of multiplier key. There are
+# 5 digits, but last four are interleaved with multiples of 5, totalling
+# in 9 elements: r0, r1, 5*r1, r2, 5*r2, r3, 5*r3, r4, 5*r4.
+
+my ($H0,$H1,$H2,$H3,$H4, $T0,$T1,$T2,$T3,$T4, $D0,$D1,$D2,$D3,$D4, $MASK) =
+    map("%xmm$_",(0..15));
+
+$code.=<<___;
+.type	__poly1305_block,\@abi-omnipotent
+.align	32
+__poly1305_block:
+___
+	&poly1305_iteration();
+$code.=<<___;
+	ret
+.size	__poly1305_block,.-__poly1305_block
+
+.type	__poly1305_init_avx,\@abi-omnipotent
+.align	32
+__poly1305_init_avx:
+	mov	$r0,$h0
+	mov	$r1,$h1
+	xor	$h2,$h2
+
+	lea	48+64($ctx),$ctx	# size optimization
+
+	mov	$r1,%rax
+	call	__poly1305_block	# r^2
+
+	mov	\$0x3ffffff,%eax	# save interleaved r^2 and r base 2^26
+	mov	\$0x3ffffff,%edx
+	mov	$h0,$d1
+	and	$h0#d,%eax
+	mov	$r0,$d2
+	and	$r0#d,%edx
+	mov	%eax,`16*0+0-64`($ctx)
+	shr	\$26,$d1
+	mov	%edx,`16*0+4-64`($ctx)
+	shr	\$26,$d2
+
+	mov	\$0x3ffffff,%eax
+	mov	\$0x3ffffff,%edx
+	and	$d1#d,%eax
+	and	$d2#d,%edx
+	mov	%eax,`16*1+0-64`($ctx)
+	lea	(%rax,%rax,4),%eax	# *5
+	mov	%edx,`16*1+4-64`($ctx)
+	lea	(%rdx,%rdx,4),%edx	# *5
+	mov	%eax,`16*2+0-64`($ctx)
+	shr	\$26,$d1
+	mov	%edx,`16*2+4-64`($ctx)
+	shr	\$26,$d2
+
+	mov	$h1,%rax
+	mov	$r1,%rdx
+	shl	\$12,%rax
+	shl	\$12,%rdx
+	or	$d1,%rax
+	or	$d2,%rdx
+	and	\$0x3ffffff,%eax
+	and	\$0x3ffffff,%edx
+	mov	%eax,`16*3+0-64`($ctx)
+	lea	(%rax,%rax,4),%eax	# *5
+	mov	%edx,`16*3+4-64`($ctx)
+	lea	(%rdx,%rdx,4),%edx	# *5
+	mov	%eax,`16*4+0-64`($ctx)
+	mov	$h1,$d1
+	mov	%edx,`16*4+4-64`($ctx)
+	mov	$r1,$d2
+
+	mov	\$0x3ffffff,%eax
+	mov	\$0x3ffffff,%edx
+	shr	\$14,$d1
+	shr	\$14,$d2
+	and	$d1#d,%eax
+	and	$d2#d,%edx
+	mov	%eax,`16*5+0-64`($ctx)
+	lea	(%rax,%rax,4),%eax	# *5
+	mov	%edx,`16*5+4-64`($ctx)
+	lea	(%rdx,%rdx,4),%edx	# *5
+	mov	%eax,`16*6+0-64`($ctx)
+	shr	\$26,$d1
+	mov	%edx,`16*6+4-64`($ctx)
+	shr	\$26,$d2
+
+	mov	$h2,%rax
+	shl	\$24,%rax
+	or	%rax,$d1
+	mov	$d1#d,`16*7+0-64`($ctx)
+	lea	($d1,$d1,4),$d1		# *5
+	mov	$d2#d,`16*7+4-64`($ctx)
+	lea	($d2,$d2,4),$d2		# *5
+	mov	$d1#d,`16*8+0-64`($ctx)
+	mov	$d2#d,`16*8+4-64`($ctx)
+
+	mov	$r1,%rax
+	call	__poly1305_block	# r^3
+
+	mov	\$0x3ffffff,%eax	# save r^3 base 2^26
+	mov	$h0,$d1
+	and	$h0#d,%eax
+	shr	\$26,$d1
+	mov	%eax,`16*0+12-64`($ctx)
+
+	mov	\$0x3ffffff,%edx
+	and	$d1#d,%edx
+	mov	%edx,`16*1+12-64`($ctx)
+	lea	(%rdx,%rdx,4),%edx	# *5
+	shr	\$26,$d1
+	mov	%edx,`16*2+12-64`($ctx)
+
+	mov	$h1,%rax
+	shl	\$12,%rax
+	or	$d1,%rax
+	and	\$0x3ffffff,%eax
+	mov	%eax,`16*3+12-64`($ctx)
+	lea	(%rax,%rax,4),%eax	# *5
+	mov	$h1,$d1
+	mov	%eax,`16*4+12-64`($ctx)
+
+	mov	\$0x3ffffff,%edx
+	shr	\$14,$d1
+	and	$d1#d,%edx
+	mov	%edx,`16*5+12-64`($ctx)
+	lea	(%rdx,%rdx,4),%edx	# *5
+	shr	\$26,$d1
+	mov	%edx,`16*6+12-64`($ctx)
+
+	mov	$h2,%rax
+	shl	\$24,%rax
+	or	%rax,$d1
+	mov	$d1#d,`16*7+12-64`($ctx)
+	lea	($d1,$d1,4),$d1		# *5
+	mov	$d1#d,`16*8+12-64`($ctx)
+
+	mov	$r1,%rax
+	call	__poly1305_block	# r^4
+
+	mov	\$0x3ffffff,%eax	# save r^4 base 2^26
+	mov	$h0,$d1
+	and	$h0#d,%eax
+	shr	\$26,$d1
+	mov	%eax,`16*0+8-64`($ctx)
+
+	mov	\$0x3ffffff,%edx
+	and	$d1#d,%edx
+	mov	%edx,`16*1+8-64`($ctx)
+	lea	(%rdx,%rdx,4),%edx	# *5
+	shr	\$26,$d1
+	mov	%edx,`16*2+8-64`($ctx)
+
+	mov	$h1,%rax
+	shl	\$12,%rax
+	or	$d1,%rax
+	and	\$0x3ffffff,%eax
+	mov	%eax,`16*3+8-64`($ctx)
+	lea	(%rax,%rax,4),%eax	# *5
+	mov	$h1,$d1
+	mov	%eax,`16*4+8-64`($ctx)
+
+	mov	\$0x3ffffff,%edx
+	shr	\$14,$d1
+	and	$d1#d,%edx
+	mov	%edx,`16*5+8-64`($ctx)
+	lea	(%rdx,%rdx,4),%edx	# *5
+	shr	\$26,$d1
+	mov	%edx,`16*6+8-64`($ctx)
+
+	mov	$h2,%rax
+	shl	\$24,%rax
+	or	%rax,$d1
+	mov	$d1#d,`16*7+8-64`($ctx)
+	lea	($d1,$d1,4),$d1		# *5
+	mov	$d1#d,`16*8+8-64`($ctx)
+
+	lea	-48-64($ctx),$ctx	# size [de-]optimization
+	ret
+.size	__poly1305_init_avx,.-__poly1305_init_avx
+
+.type	poly1305_blocks_avx,\@function,4
+.align	32
+poly1305_blocks_avx:
+.cfi_startproc
+	mov	20($ctx),%r8d		# is_base2_26
+	cmp	\$128,$len
+	jae	.Lblocks_avx
+	test	%r8d,%r8d
+	jz	.Lblocks
+
+.Lblocks_avx:
+	and	\$-16,$len
+	jz	.Lno_data_avx
+
+	vzeroupper
+
+	test	%r8d,%r8d
+	jz	.Lbase2_64_avx
+
+	test	\$31,$len
+	jz	.Leven_avx
+
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lblocks_avx_body:
+
+	mov	$len,%r15		# reassign $len
+
+	mov	0($ctx),$d1		# load hash value
+	mov	8($ctx),$d2
+	mov	16($ctx),$h2#d
+
+	mov	24($ctx),$r0		# load r
+	mov	32($ctx),$s1
+
+	################################# base 2^26 -> base 2^64
+	mov	$d1#d,$h0#d
+	and	\$`-1*(1<<31)`,$d1
+	mov	$d2,$r1			# borrow $r1
+	mov	$d2#d,$h1#d
+	and	\$`-1*(1<<31)`,$d2
+
+	shr	\$6,$d1
+	shl	\$52,$r1
+	add	$d1,$h0
+	shr	\$12,$h1
+	shr	\$18,$d2
+	add	$r1,$h0
+	adc	$d2,$h1
+
+	mov	$h2,$d1
+	shl	\$40,$d1
+	shr	\$24,$h2
+	add	$d1,$h1
+	adc	\$0,$h2			# can be partially reduced...
+
+	mov	\$-4,$d2		# ... so reduce
+	mov	$h2,$d1
+	and	$h2,$d2
+	shr	\$2,$d1
+	and	\$3,$h2
+	add	$d2,$d1			# =*5
+	add	$d1,$h0
+	adc	\$0,$h1
+	adc	\$0,$h2
+
+	mov	$s1,$r1
+	mov	$s1,%rax
+	shr	\$2,$s1
+	add	$r1,$s1			# s1 = r1 + (r1 >> 2)
+
+	add	0($inp),$h0		# accumulate input
+	adc	8($inp),$h1
+	lea	16($inp),$inp
+	adc	$padbit,$h2
+
+	call	__poly1305_block
+
+	test	$padbit,$padbit		# if $padbit is zero,
+	jz	.Lstore_base2_64_avx	# store hash in base 2^64 format
+
+	################################# base 2^64 -> base 2^26
+	mov	$h0,%rax
+	mov	$h0,%rdx
+	shr	\$52,$h0
+	mov	$h1,$r0
+	mov	$h1,$r1
+	shr	\$26,%rdx
+	and	\$0x3ffffff,%rax	# h[0]
+	shl	\$12,$r0
+	and	\$0x3ffffff,%rdx	# h[1]
+	shr	\$14,$h1
+	or	$r0,$h0
+	shl	\$24,$h2
+	and	\$0x3ffffff,$h0		# h[2]
+	shr	\$40,$r1
+	and	\$0x3ffffff,$h1		# h[3]
+	or	$r1,$h2			# h[4]
+
+	sub	\$16,%r15
+	jz	.Lstore_base2_26_avx
+
+	vmovd	%rax#d,$H0
+	vmovd	%rdx#d,$H1
+	vmovd	$h0#d,$H2
+	vmovd	$h1#d,$H3
+	vmovd	$h2#d,$H4
+	jmp	.Lproceed_avx
+
+.align	32
+.Lstore_base2_64_avx:
+	mov	$h0,0($ctx)
+	mov	$h1,8($ctx)
+	mov	$h2,16($ctx)		# note that is_base2_26 is zeroed
+	jmp	.Ldone_avx
+
+.align	16
+.Lstore_base2_26_avx:
+	mov	%rax#d,0($ctx)		# store hash value base 2^26
+	mov	%rdx#d,4($ctx)
+	mov	$h0#d,8($ctx)
+	mov	$h1#d,12($ctx)
+	mov	$h2#d,16($ctx)
+.align	16
+.Ldone_avx:
+	mov	0(%rsp),%r15
+.cfi_restore	%r15
+	mov	8(%rsp),%r14
+.cfi_restore	%r14
+	mov	16(%rsp),%r13
+.cfi_restore	%r13
+	mov	24(%rsp),%r12
+.cfi_restore	%r12
+	mov	32(%rsp),%rbp
+.cfi_restore	%rbp
+	mov	40(%rsp),%rbx
+.cfi_restore	%rbx
+	lea	48(%rsp),%rsp
+.cfi_adjust_cfa_offset	-48
+.Lno_data_avx:
+.Lblocks_avx_epilogue:
+	ret
+.cfi_endproc
+
+.align	32
+.Lbase2_64_avx:
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lbase2_64_avx_body:
+
+	mov	$len,%r15		# reassign $len
+
+	mov	24($ctx),$r0		# load r
+	mov	32($ctx),$s1
+
+	mov	0($ctx),$h0		# load hash value
+	mov	8($ctx),$h1
+	mov	16($ctx),$h2#d
+
+	mov	$s1,$r1
+	mov	$s1,%rax
+	shr	\$2,$s1
+	add	$r1,$s1			# s1 = r1 + (r1 >> 2)
+
+	test	\$31,$len
+	jz	.Linit_avx
+
+	add	0($inp),$h0		# accumulate input
+	adc	8($inp),$h1
+	lea	16($inp),$inp
+	adc	$padbit,$h2
+	sub	\$16,%r15
+
+	call	__poly1305_block
+
+.Linit_avx:
+	################################# base 2^64 -> base 2^26
+	mov	$h0,%rax
+	mov	$h0,%rdx
+	shr	\$52,$h0
+	mov	$h1,$d1
+	mov	$h1,$d2
+	shr	\$26,%rdx
+	and	\$0x3ffffff,%rax	# h[0]
+	shl	\$12,$d1
+	and	\$0x3ffffff,%rdx	# h[1]
+	shr	\$14,$h1
+	or	$d1,$h0
+	shl	\$24,$h2
+	and	\$0x3ffffff,$h0		# h[2]
+	shr	\$40,$d2
+	and	\$0x3ffffff,$h1		# h[3]
+	or	$d2,$h2			# h[4]
+
+	vmovd	%rax#d,$H0
+	vmovd	%rdx#d,$H1
+	vmovd	$h0#d,$H2
+	vmovd	$h1#d,$H3
+	vmovd	$h2#d,$H4
+	movl	\$1,20($ctx)		# set is_base2_26
+
+	call	__poly1305_init_avx
+
+.Lproceed_avx:
+	mov	%r15,$len
+
+	mov	0(%rsp),%r15
+.cfi_restore	%r15
+	mov	8(%rsp),%r14
+.cfi_restore	%r14
+	mov	16(%rsp),%r13
+.cfi_restore	%r13
+	mov	24(%rsp),%r12
+.cfi_restore	%r12
+	mov	32(%rsp),%rbp
+.cfi_restore	%rbp
+	mov	40(%rsp),%rbx
+.cfi_restore	%rbx
+	lea	48(%rsp),%rax
+	lea	48(%rsp),%rsp
+.cfi_adjust_cfa_offset	-48
+.Lbase2_64_avx_epilogue:
+	jmp	.Ldo_avx
+.cfi_endproc
+
+.align	32
+.Leven_avx:
+.cfi_startproc
+	vmovd		4*0($ctx),$H0		# load hash value
+	vmovd		4*1($ctx),$H1
+	vmovd		4*2($ctx),$H2
+	vmovd		4*3($ctx),$H3
+	vmovd		4*4($ctx),$H4
+
+.Ldo_avx:
+___
+$code.=<<___	if (!$win64);
+	lea		-0x58(%rsp),%r11
+.cfi_def_cfa		%r11,0x60
+	sub		\$0x178,%rsp
+___
+$code.=<<___	if ($win64);
+	lea		-0xf8(%rsp),%r11
+	sub		\$0x218,%rsp
+	vmovdqa		%xmm6,0x50(%r11)
+	vmovdqa		%xmm7,0x60(%r11)
+	vmovdqa		%xmm8,0x70(%r11)
+	vmovdqa		%xmm9,0x80(%r11)
+	vmovdqa		%xmm10,0x90(%r11)
+	vmovdqa		%xmm11,0xa0(%r11)
+	vmovdqa		%xmm12,0xb0(%r11)
+	vmovdqa		%xmm13,0xc0(%r11)
+	vmovdqa		%xmm14,0xd0(%r11)
+	vmovdqa		%xmm15,0xe0(%r11)
+.Ldo_avx_body:
+___
+$code.=<<___;
+	sub		\$64,$len
+	lea		-32($inp),%rax
+	cmovc		%rax,$inp
+
+	vmovdqu		`16*3`($ctx),$D4	# preload r0^2
+	lea		`16*3+64`($ctx),$ctx	# size optimization
+	lea		.Lconst(%rip),%rcx
+
+	################################################################
+	# load input
+	vmovdqu		16*2($inp),$T0
+	vmovdqu		16*3($inp),$T1
+	vmovdqa		64(%rcx),$MASK		# .Lmask26
+
+	vpsrldq		\$6,$T0,$T2		# splat input
+	vpsrldq		\$6,$T1,$T3
+	vpunpckhqdq	$T1,$T0,$T4		# 4
+	vpunpcklqdq	$T1,$T0,$T0		# 0:1
+	vpunpcklqdq	$T3,$T2,$T3		# 2:3
+
+	vpsrlq		\$40,$T4,$T4		# 4
+	vpsrlq		\$26,$T0,$T1
+	vpand		$MASK,$T0,$T0		# 0
+	vpsrlq		\$4,$T3,$T2
+	vpand		$MASK,$T1,$T1		# 1
+	vpsrlq		\$30,$T3,$T3
+	vpand		$MASK,$T2,$T2		# 2
+	vpand		$MASK,$T3,$T3		# 3
+	vpor		32(%rcx),$T4,$T4	# padbit, yes, always
+
+	jbe		.Lskip_loop_avx
+
+	# expand and copy pre-calculated table to stack
+	vmovdqu		`16*1-64`($ctx),$D1
+	vmovdqu		`16*2-64`($ctx),$D2
+	vpshufd		\$0xEE,$D4,$D3		# 34xx -> 3434
+	vpshufd		\$0x44,$D4,$D0		# xx12 -> 1212
+	vmovdqa		$D3,-0x90(%r11)
+	vmovdqa		$D0,0x00(%rsp)
+	vpshufd		\$0xEE,$D1,$D4
+	vmovdqu		`16*3-64`($ctx),$D0
+	vpshufd		\$0x44,$D1,$D1
+	vmovdqa		$D4,-0x80(%r11)
+	vmovdqa		$D1,0x10(%rsp)
+	vpshufd		\$0xEE,$D2,$D3
+	vmovdqu		`16*4-64`($ctx),$D1
+	vpshufd		\$0x44,$D2,$D2
+	vmovdqa		$D3,-0x70(%r11)
+	vmovdqa		$D2,0x20(%rsp)
+	vpshufd		\$0xEE,$D0,$D4
+	vmovdqu		`16*5-64`($ctx),$D2
+	vpshufd		\$0x44,$D0,$D0
+	vmovdqa		$D4,-0x60(%r11)
+	vmovdqa		$D0,0x30(%rsp)
+	vpshufd		\$0xEE,$D1,$D3
+	vmovdqu		`16*6-64`($ctx),$D0
+	vpshufd		\$0x44,$D1,$D1
+	vmovdqa		$D3,-0x50(%r11)
+	vmovdqa		$D1,0x40(%rsp)
+	vpshufd		\$0xEE,$D2,$D4
+	vmovdqu		`16*7-64`($ctx),$D1
+	vpshufd		\$0x44,$D2,$D2
+	vmovdqa		$D4,-0x40(%r11)
+	vmovdqa		$D2,0x50(%rsp)
+	vpshufd		\$0xEE,$D0,$D3
+	vmovdqu		`16*8-64`($ctx),$D2
+	vpshufd		\$0x44,$D0,$D0
+	vmovdqa		$D3,-0x30(%r11)
+	vmovdqa		$D0,0x60(%rsp)
+	vpshufd		\$0xEE,$D1,$D4
+	vpshufd		\$0x44,$D1,$D1
+	vmovdqa		$D4,-0x20(%r11)
+	vmovdqa		$D1,0x70(%rsp)
+	vpshufd		\$0xEE,$D2,$D3
+	 vmovdqa	0x00(%rsp),$D4		# preload r0^2
+	vpshufd		\$0x44,$D2,$D2
+	vmovdqa		$D3,-0x10(%r11)
+	vmovdqa		$D2,0x80(%rsp)
+
+	jmp		.Loop_avx
+
+.align	32
+.Loop_avx:
+	################################################################
+	# ((inp[0]*r^4+inp[2]*r^2+inp[4])*r^4+inp[6]*r^2
+	# ((inp[1]*r^4+inp[3]*r^2+inp[5])*r^3+inp[7]*r
+	#   \___________________/
+	# ((inp[0]*r^4+inp[2]*r^2+inp[4])*r^4+inp[6]*r^2+inp[8])*r^2
+	# ((inp[1]*r^4+inp[3]*r^2+inp[5])*r^4+inp[7]*r^2+inp[9])*r
+	#   \___________________/ \____________________/
+	#
+	# Note that we start with inp[2:3]*r^2. This is because it
+	# doesn't depend on reduction in previous iteration.
+	################################################################
+	# d4 = h4*r0 + h3*r1   + h2*r2   + h1*r3   + h0*r4
+	# d3 = h3*r0 + h2*r1   + h1*r2   + h0*r3   + h4*5*r4
+	# d2 = h2*r0 + h1*r1   + h0*r2   + h4*5*r3 + h3*5*r4
+	# d1 = h1*r0 + h0*r1   + h4*5*r2 + h3*5*r3 + h2*5*r4
+	# d0 = h0*r0 + h4*5*r1 + h3*5*r2 + h2*5*r3 + h1*5*r4
+	#
+	# though note that $Tx and $Hx are "reversed" in this section,
+	# and $D4 is preloaded with r0^2...
+
+	vpmuludq	$T0,$D4,$D0		# d0 = h0*r0
+	vpmuludq	$T1,$D4,$D1		# d1 = h1*r0
+	  vmovdqa	$H2,0x20(%r11)				# offload hash
+	vpmuludq	$T2,$D4,$D2		# d3 = h2*r0
+	 vmovdqa	0x10(%rsp),$H2		# r1^2
+	vpmuludq	$T3,$D4,$D3		# d3 = h3*r0
+	vpmuludq	$T4,$D4,$D4		# d4 = h4*r0
+
+	  vmovdqa	$H0,0x00(%r11)				#
+	vpmuludq	0x20(%rsp),$T4,$H0	# h4*s1
+	  vmovdqa	$H1,0x10(%r11)				#
+	vpmuludq	$T3,$H2,$H1		# h3*r1
+	vpaddq		$H0,$D0,$D0		# d0 += h4*s1
+	vpaddq		$H1,$D4,$D4		# d4 += h3*r1
+	  vmovdqa	$H3,0x30(%r11)				#
+	vpmuludq	$T2,$H2,$H0		# h2*r1
+	vpmuludq	$T1,$H2,$H1		# h1*r1
+	vpaddq		$H0,$D3,$D3		# d3 += h2*r1
+	 vmovdqa	0x30(%rsp),$H3		# r2^2
+	vpaddq		$H1,$D2,$D2		# d2 += h1*r1
+	  vmovdqa	$H4,0x40(%r11)				#
+	vpmuludq	$T0,$H2,$H2		# h0*r1
+	 vpmuludq	$T2,$H3,$H0		# h2*r2
+	vpaddq		$H2,$D1,$D1		# d1 += h0*r1
+
+	 vmovdqa	0x40(%rsp),$H4		# s2^2
+	vpaddq		$H0,$D4,$D4		# d4 += h2*r2
+	vpmuludq	$T1,$H3,$H1		# h1*r2
+	vpmuludq	$T0,$H3,$H3		# h0*r2
+	vpaddq		$H1,$D3,$D3		# d3 += h1*r2
+	 vmovdqa	0x50(%rsp),$H2		# r3^2
+	vpaddq		$H3,$D2,$D2		# d2 += h0*r2
+	vpmuludq	$T4,$H4,$H0		# h4*s2
+	vpmuludq	$T3,$H4,$H4		# h3*s2
+	vpaddq		$H0,$D1,$D1		# d1 += h4*s2
+	 vmovdqa	0x60(%rsp),$H3		# s3^2
+	vpaddq		$H4,$D0,$D0		# d0 += h3*s2
+
+	 vmovdqa	0x80(%rsp),$H4		# s4^2
+	vpmuludq	$T1,$H2,$H1		# h1*r3
+	vpmuludq	$T0,$H2,$H2		# h0*r3
+	vpaddq		$H1,$D4,$D4		# d4 += h1*r3
+	vpaddq		$H2,$D3,$D3		# d3 += h0*r3
+	vpmuludq	$T4,$H3,$H0		# h4*s3
+	vpmuludq	$T3,$H3,$H1		# h3*s3
+	vpaddq		$H0,$D2,$D2		# d2 += h4*s3
+	 vmovdqu	16*0($inp),$H0				# load input
+	vpaddq		$H1,$D1,$D1		# d1 += h3*s3
+	vpmuludq	$T2,$H3,$H3		# h2*s3
+	 vpmuludq	$T2,$H4,$T2		# h2*s4
+	vpaddq		$H3,$D0,$D0		# d0 += h2*s3
+
+	 vmovdqu	16*1($inp),$H1				#
+	vpaddq		$T2,$D1,$D1		# d1 += h2*s4
+	vpmuludq	$T3,$H4,$T3		# h3*s4
+	vpmuludq	$T4,$H4,$T4		# h4*s4
+	 vpsrldq	\$6,$H0,$H2				# splat input
+	vpaddq		$T3,$D2,$D2		# d2 += h3*s4
+	vpaddq		$T4,$D3,$D3		# d3 += h4*s4
+	 vpsrldq	\$6,$H1,$H3				#
+	vpmuludq	0x70(%rsp),$T0,$T4	# h0*r4
+	vpmuludq	$T1,$H4,$T0		# h1*s4
+	 vpunpckhqdq	$H1,$H0,$H4		# 4
+	vpaddq		$T4,$D4,$D4		# d4 += h0*r4
+	 vmovdqa	-0x90(%r11),$T4		# r0^4
+	vpaddq		$T0,$D0,$D0		# d0 += h1*s4
+
+	vpunpcklqdq	$H1,$H0,$H0		# 0:1
+	vpunpcklqdq	$H3,$H2,$H3		# 2:3
+
+	#vpsrlq		\$40,$H4,$H4		# 4
+	vpsrldq		\$`40/8`,$H4,$H4	# 4
+	vpsrlq		\$26,$H0,$H1
+	vpand		$MASK,$H0,$H0		# 0
+	vpsrlq		\$4,$H3,$H2
+	vpand		$MASK,$H1,$H1		# 1
+	vpand		0(%rcx),$H4,$H4		# .Lmask24
+	vpsrlq		\$30,$H3,$H3
+	vpand		$MASK,$H2,$H2		# 2
+	vpand		$MASK,$H3,$H3		# 3
+	vpor		32(%rcx),$H4,$H4	# padbit, yes, always
+
+	vpaddq		0x00(%r11),$H0,$H0	# add hash value
+	vpaddq		0x10(%r11),$H1,$H1
+	vpaddq		0x20(%r11),$H2,$H2
+	vpaddq		0x30(%r11),$H3,$H3
+	vpaddq		0x40(%r11),$H4,$H4
+
+	lea		16*2($inp),%rax
+	lea		16*4($inp),$inp
+	sub		\$64,$len
+	cmovc		%rax,$inp
+
+	################################################################
+	# Now we accumulate (inp[0:1]+hash)*r^4
+	################################################################
+	# d4 = h4*r0 + h3*r1   + h2*r2   + h1*r3   + h0*r4
+	# d3 = h3*r0 + h2*r1   + h1*r2   + h0*r3   + h4*5*r4
+	# d2 = h2*r0 + h1*r1   + h0*r2   + h4*5*r3 + h3*5*r4
+	# d1 = h1*r0 + h0*r1   + h4*5*r2 + h3*5*r3 + h2*5*r4
+	# d0 = h0*r0 + h4*5*r1 + h3*5*r2 + h2*5*r3 + h1*5*r4
+
+	vpmuludq	$H0,$T4,$T0		# h0*r0
+	vpmuludq	$H1,$T4,$T1		# h1*r0
+	vpaddq		$T0,$D0,$D0
+	vpaddq		$T1,$D1,$D1
+	 vmovdqa	-0x80(%r11),$T2		# r1^4
+	vpmuludq	$H2,$T4,$T0		# h2*r0
+	vpmuludq	$H3,$T4,$T1		# h3*r0
+	vpaddq		$T0,$D2,$D2
+	vpaddq		$T1,$D3,$D3
+	vpmuludq	$H4,$T4,$T4		# h4*r0
+	 vpmuludq	-0x70(%r11),$H4,$T0	# h4*s1
+	vpaddq		$T4,$D4,$D4
+
+	vpaddq		$T0,$D0,$D0		# d0 += h4*s1
+	vpmuludq	$H2,$T2,$T1		# h2*r1
+	vpmuludq	$H3,$T2,$T0		# h3*r1
+	vpaddq		$T1,$D3,$D3		# d3 += h2*r1
+	 vmovdqa	-0x60(%r11),$T3		# r2^4
+	vpaddq		$T0,$D4,$D4		# d4 += h3*r1
+	vpmuludq	$H1,$T2,$T1		# h1*r1
+	vpmuludq	$H0,$T2,$T2		# h0*r1
+	vpaddq		$T1,$D2,$D2		# d2 += h1*r1
+	vpaddq		$T2,$D1,$D1		# d1 += h0*r1
+
+	 vmovdqa	-0x50(%r11),$T4		# s2^4
+	vpmuludq	$H2,$T3,$T0		# h2*r2
+	vpmuludq	$H1,$T3,$T1		# h1*r2
+	vpaddq		$T0,$D4,$D4		# d4 += h2*r2
+	vpaddq		$T1,$D3,$D3		# d3 += h1*r2
+	 vmovdqa	-0x40(%r11),$T2		# r3^4
+	vpmuludq	$H0,$T3,$T3		# h0*r2
+	vpmuludq	$H4,$T4,$T0		# h4*s2
+	vpaddq		$T3,$D2,$D2		# d2 += h0*r2
+	vpaddq		$T0,$D1,$D1		# d1 += h4*s2
+	 vmovdqa	-0x30(%r11),$T3		# s3^4
+	vpmuludq	$H3,$T4,$T4		# h3*s2
+	 vpmuludq	$H1,$T2,$T1		# h1*r3
+	vpaddq		$T4,$D0,$D0		# d0 += h3*s2
+
+	 vmovdqa	-0x10(%r11),$T4		# s4^4
+	vpaddq		$T1,$D4,$D4		# d4 += h1*r3
+	vpmuludq	$H0,$T2,$T2		# h0*r3
+	vpmuludq	$H4,$T3,$T0		# h4*s3
+	vpaddq		$T2,$D3,$D3		# d3 += h0*r3
+	vpaddq		$T0,$D2,$D2		# d2 += h4*s3
+	 vmovdqu	16*2($inp),$T0				# load input
+	vpmuludq	$H3,$T3,$T2		# h3*s3
+	vpmuludq	$H2,$T3,$T3		# h2*s3
+	vpaddq		$T2,$D1,$D1		# d1 += h3*s3
+	 vmovdqu	16*3($inp),$T1				#
+	vpaddq		$T3,$D0,$D0		# d0 += h2*s3
+
+	vpmuludq	$H2,$T4,$H2		# h2*s4
+	vpmuludq	$H3,$T4,$H3		# h3*s4
+	 vpsrldq	\$6,$T0,$T2				# splat input
+	vpaddq		$H2,$D1,$D1		# d1 += h2*s4
+	vpmuludq	$H4,$T4,$H4		# h4*s4
+	 vpsrldq	\$6,$T1,$T3				#
+	vpaddq		$H3,$D2,$H2		# h2 = d2 + h3*s4
+	vpaddq		$H4,$D3,$H3		# h3 = d3 + h4*s4
+	vpmuludq	-0x20(%r11),$H0,$H4	# h0*r4
+	vpmuludq	$H1,$T4,$H0
+	 vpunpckhqdq	$T1,$T0,$T4		# 4
+	vpaddq		$H4,$D4,$H4		# h4 = d4 + h0*r4
+	vpaddq		$H0,$D0,$H0		# h0 = d0 + h1*s4
+
+	vpunpcklqdq	$T1,$T0,$T0		# 0:1
+	vpunpcklqdq	$T3,$T2,$T3		# 2:3
+
+	#vpsrlq		\$40,$T4,$T4		# 4
+	vpsrldq		\$`40/8`,$T4,$T4	# 4
+	vpsrlq		\$26,$T0,$T1
+	 vmovdqa	0x00(%rsp),$D4		# preload r0^2
+	vpand		$MASK,$T0,$T0		# 0
+	vpsrlq		\$4,$T3,$T2
+	vpand		$MASK,$T1,$T1		# 1
+	vpand		0(%rcx),$T4,$T4		# .Lmask24
+	vpsrlq		\$30,$T3,$T3
+	vpand		$MASK,$T2,$T2		# 2
+	vpand		$MASK,$T3,$T3		# 3
+	vpor		32(%rcx),$T4,$T4	# padbit, yes, always
+
+	################################################################
+	# lazy reduction as discussed in "NEON crypto" by D.J. Bernstein
+	# and P. Schwabe
+
+	vpsrlq		\$26,$H3,$D3
+	vpand		$MASK,$H3,$H3
+	vpaddq		$D3,$H4,$H4		# h3 -> h4
+
+	vpsrlq		\$26,$H0,$D0
+	vpand		$MASK,$H0,$H0
+	vpaddq		$D0,$D1,$H1		# h0 -> h1
+
+	vpsrlq		\$26,$H4,$D0
+	vpand		$MASK,$H4,$H4
+
+	vpsrlq		\$26,$H1,$D1
+	vpand		$MASK,$H1,$H1
+	vpaddq		$D1,$H2,$H2		# h1 -> h2
+
+	vpaddq		$D0,$H0,$H0
+	vpsllq		\$2,$D0,$D0
+	vpaddq		$D0,$H0,$H0		# h4 -> h0
+
+	vpsrlq		\$26,$H2,$D2
+	vpand		$MASK,$H2,$H2
+	vpaddq		$D2,$H3,$H3		# h2 -> h3
+
+	vpsrlq		\$26,$H0,$D0
+	vpand		$MASK,$H0,$H0
+	vpaddq		$D0,$H1,$H1		# h0 -> h1
+
+	vpsrlq		\$26,$H3,$D3
+	vpand		$MASK,$H3,$H3
+	vpaddq		$D3,$H4,$H4		# h3 -> h4
+
+	ja		.Loop_avx
+
+.Lskip_loop_avx:
+	################################################################
+	# multiply (inp[0:1]+hash) or inp[2:3] by r^2:r^1
+
+	vpshufd		\$0x10,$D4,$D4		# r0^n, xx12 -> x1x2
+	add		\$32,$len
+	jnz		.Long_tail_avx
+
+	vpaddq		$H2,$T2,$T2
+	vpaddq		$H0,$T0,$T0
+	vpaddq		$H1,$T1,$T1
+	vpaddq		$H3,$T3,$T3
+	vpaddq		$H4,$T4,$T4
+
+.Long_tail_avx:
+	vmovdqa		$H2,0x20(%r11)
+	vmovdqa		$H0,0x00(%r11)
+	vmovdqa		$H1,0x10(%r11)
+	vmovdqa		$H3,0x30(%r11)
+	vmovdqa		$H4,0x40(%r11)
+
+	# d4 = h4*r0 + h3*r1   + h2*r2   + h1*r3   + h0*r4
+	# d3 = h3*r0 + h2*r1   + h1*r2   + h0*r3   + h4*5*r4
+	# d2 = h2*r0 + h1*r1   + h0*r2   + h4*5*r3 + h3*5*r4
+	# d1 = h1*r0 + h0*r1   + h4*5*r2 + h3*5*r3 + h2*5*r4
+	# d0 = h0*r0 + h4*5*r1 + h3*5*r2 + h2*5*r3 + h1*5*r4
+
+	vpmuludq	$T2,$D4,$D2		# d2 = h2*r0
+	vpmuludq	$T0,$D4,$D0		# d0 = h0*r0
+	 vpshufd	\$0x10,`16*1-64`($ctx),$H2		# r1^n
+	vpmuludq	$T1,$D4,$D1		# d1 = h1*r0
+	vpmuludq	$T3,$D4,$D3		# d3 = h3*r0
+	vpmuludq	$T4,$D4,$D4		# d4 = h4*r0
+
+	vpmuludq	$T3,$H2,$H0		# h3*r1
+	vpaddq		$H0,$D4,$D4		# d4 += h3*r1
+	 vpshufd	\$0x10,`16*2-64`($ctx),$H3		# s1^n
+	vpmuludq	$T2,$H2,$H1		# h2*r1
+	vpaddq		$H1,$D3,$D3		# d3 += h2*r1
+	 vpshufd	\$0x10,`16*3-64`($ctx),$H4		# r2^n
+	vpmuludq	$T1,$H2,$H0		# h1*r1
+	vpaddq		$H0,$D2,$D2		# d2 += h1*r1
+	vpmuludq	$T0,$H2,$H2		# h0*r1
+	vpaddq		$H2,$D1,$D1		# d1 += h0*r1
+	vpmuludq	$T4,$H3,$H3		# h4*s1
+	vpaddq		$H3,$D0,$D0		# d0 += h4*s1
+
+	 vpshufd	\$0x10,`16*4-64`($ctx),$H2		# s2^n
+	vpmuludq	$T2,$H4,$H1		# h2*r2
+	vpaddq		$H1,$D4,$D4		# d4 += h2*r2
+	vpmuludq	$T1,$H4,$H0		# h1*r2
+	vpaddq		$H0,$D3,$D3		# d3 += h1*r2
+	 vpshufd	\$0x10,`16*5-64`($ctx),$H3		# r3^n
+	vpmuludq	$T0,$H4,$H4		# h0*r2
+	vpaddq		$H4,$D2,$D2		# d2 += h0*r2
+	vpmuludq	$T4,$H2,$H1		# h4*s2
+	vpaddq		$H1,$D1,$D1		# d1 += h4*s2
+	 vpshufd	\$0x10,`16*6-64`($ctx),$H4		# s3^n
+	vpmuludq	$T3,$H2,$H2		# h3*s2
+	vpaddq		$H2,$D0,$D0		# d0 += h3*s2
+
+	vpmuludq	$T1,$H3,$H0		# h1*r3
+	vpaddq		$H0,$D4,$D4		# d4 += h1*r3
+	vpmuludq	$T0,$H3,$H3		# h0*r3
+	vpaddq		$H3,$D3,$D3		# d3 += h0*r3
+	 vpshufd	\$0x10,`16*7-64`($ctx),$H2		# r4^n
+	vpmuludq	$T4,$H4,$H1		# h4*s3
+	vpaddq		$H1,$D2,$D2		# d2 += h4*s3
+	 vpshufd	\$0x10,`16*8-64`($ctx),$H3		# s4^n
+	vpmuludq	$T3,$H4,$H0		# h3*s3
+	vpaddq		$H0,$D1,$D1		# d1 += h3*s3
+	vpmuludq	$T2,$H4,$H4		# h2*s3
+	vpaddq		$H4,$D0,$D0		# d0 += h2*s3
+
+	vpmuludq	$T0,$H2,$H2		# h0*r4
+	vpaddq		$H2,$D4,$D4		# h4 = d4 + h0*r4
+	vpmuludq	$T4,$H3,$H1		# h4*s4
+	vpaddq		$H1,$D3,$D3		# h3 = d3 + h4*s4
+	vpmuludq	$T3,$H3,$H0		# h3*s4
+	vpaddq		$H0,$D2,$D2		# h2 = d2 + h3*s4
+	vpmuludq	$T2,$H3,$H1		# h2*s4
+	vpaddq		$H1,$D1,$D1		# h1 = d1 + h2*s4
+	vpmuludq	$T1,$H3,$H3		# h1*s4
+	vpaddq		$H3,$D0,$D0		# h0 = d0 + h1*s4
+
+	jz		.Lshort_tail_avx
+
+	vmovdqu		16*0($inp),$H0		# load input
+	vmovdqu		16*1($inp),$H1
+
+	vpsrldq		\$6,$H0,$H2		# splat input
+	vpsrldq		\$6,$H1,$H3
+	vpunpckhqdq	$H1,$H0,$H4		# 4
+	vpunpcklqdq	$H1,$H0,$H0		# 0:1
+	vpunpcklqdq	$H3,$H2,$H3		# 2:3
+
+	vpsrlq		\$40,$H4,$H4		# 4
+	vpsrlq		\$26,$H0,$H1
+	vpand		$MASK,$H0,$H0		# 0
+	vpsrlq		\$4,$H3,$H2
+	vpand		$MASK,$H1,$H1		# 1
+	vpsrlq		\$30,$H3,$H3
+	vpand		$MASK,$H2,$H2		# 2
+	vpand		$MASK,$H3,$H3		# 3
+	vpor		32(%rcx),$H4,$H4	# padbit, yes, always
+
+	vpshufd		\$0x32,`16*0-64`($ctx),$T4	# r0^n, 34xx -> x3x4
+	vpaddq		0x00(%r11),$H0,$H0
+	vpaddq		0x10(%r11),$H1,$H1
+	vpaddq		0x20(%r11),$H2,$H2
+	vpaddq		0x30(%r11),$H3,$H3
+	vpaddq		0x40(%r11),$H4,$H4
+
+	################################################################
+	# multiply (inp[0:1]+hash) by r^4:r^3 and accumulate
+
+	vpmuludq	$H0,$T4,$T0		# h0*r0
+	vpaddq		$T0,$D0,$D0		# d0 += h0*r0
+	vpmuludq	$H1,$T4,$T1		# h1*r0
+	vpaddq		$T1,$D1,$D1		# d1 += h1*r0
+	vpmuludq	$H2,$T4,$T0		# h2*r0
+	vpaddq		$T0,$D2,$D2		# d2 += h2*r0
+	 vpshufd	\$0x32,`16*1-64`($ctx),$T2		# r1^n
+	vpmuludq	$H3,$T4,$T1		# h3*r0
+	vpaddq		$T1,$D3,$D3		# d3 += h3*r0
+	vpmuludq	$H4,$T4,$T4		# h4*r0
+	vpaddq		$T4,$D4,$D4		# d4 += h4*r0
+
+	vpmuludq	$H3,$T2,$T0		# h3*r1
+	vpaddq		$T0,$D4,$D4		# d4 += h3*r1
+	 vpshufd	\$0x32,`16*2-64`($ctx),$T3		# s1
+	vpmuludq	$H2,$T2,$T1		# h2*r1
+	vpaddq		$T1,$D3,$D3		# d3 += h2*r1
+	 vpshufd	\$0x32,`16*3-64`($ctx),$T4		# r2
+	vpmuludq	$H1,$T2,$T0		# h1*r1
+	vpaddq		$T0,$D2,$D2		# d2 += h1*r1
+	vpmuludq	$H0,$T2,$T2		# h0*r1
+	vpaddq		$T2,$D1,$D1		# d1 += h0*r1
+	vpmuludq	$H4,$T3,$T3		# h4*s1
+	vpaddq		$T3,$D0,$D0		# d0 += h4*s1
+
+	 vpshufd	\$0x32,`16*4-64`($ctx),$T2		# s2
+	vpmuludq	$H2,$T4,$T1		# h2*r2
+	vpaddq		$T1,$D4,$D4		# d4 += h2*r2
+	vpmuludq	$H1,$T4,$T0		# h1*r2
+	vpaddq		$T0,$D3,$D3		# d3 += h1*r2
+	 vpshufd	\$0x32,`16*5-64`($ctx),$T3		# r3
+	vpmuludq	$H0,$T4,$T4		# h0*r2
+	vpaddq		$T4,$D2,$D2		# d2 += h0*r2
+	vpmuludq	$H4,$T2,$T1		# h4*s2
+	vpaddq		$T1,$D1,$D1		# d1 += h4*s2
+	 vpshufd	\$0x32,`16*6-64`($ctx),$T4		# s3
+	vpmuludq	$H3,$T2,$T2		# h3*s2
+	vpaddq		$T2,$D0,$D0		# d0 += h3*s2
+
+	vpmuludq	$H1,$T3,$T0		# h1*r3
+	vpaddq		$T0,$D4,$D4		# d4 += h1*r3
+	vpmuludq	$H0,$T3,$T3		# h0*r3
+	vpaddq		$T3,$D3,$D3		# d3 += h0*r3
+	 vpshufd	\$0x32,`16*7-64`($ctx),$T2		# r4
+	vpmuludq	$H4,$T4,$T1		# h4*s3
+	vpaddq		$T1,$D2,$D2		# d2 += h4*s3
+	 vpshufd	\$0x32,`16*8-64`($ctx),$T3		# s4
+	vpmuludq	$H3,$T4,$T0		# h3*s3
+	vpaddq		$T0,$D1,$D1		# d1 += h3*s3
+	vpmuludq	$H2,$T4,$T4		# h2*s3
+	vpaddq		$T4,$D0,$D0		# d0 += h2*s3
+
+	vpmuludq	$H0,$T2,$T2		# h0*r4
+	vpaddq		$T2,$D4,$D4		# d4 += h0*r4
+	vpmuludq	$H4,$T3,$T1		# h4*s4
+	vpaddq		$T1,$D3,$D3		# d3 += h4*s4
+	vpmuludq	$H3,$T3,$T0		# h3*s4
+	vpaddq		$T0,$D2,$D2		# d2 += h3*s4
+	vpmuludq	$H2,$T3,$T1		# h2*s4
+	vpaddq		$T1,$D1,$D1		# d1 += h2*s4
+	vpmuludq	$H1,$T3,$T3		# h1*s4
+	vpaddq		$T3,$D0,$D0		# d0 += h1*s4
+
+.Lshort_tail_avx:
+	################################################################
+	# horizontal addition
+
+	vpsrldq		\$8,$D4,$T4
+	vpsrldq		\$8,$D3,$T3
+	vpsrldq		\$8,$D1,$T1
+	vpsrldq		\$8,$D0,$T0
+	vpsrldq		\$8,$D2,$T2
+	vpaddq		$T3,$D3,$D3
+	vpaddq		$T4,$D4,$D4
+	vpaddq		$T0,$D0,$D0
+	vpaddq		$T1,$D1,$D1
+	vpaddq		$T2,$D2,$D2
+
+	################################################################
+	# lazy reduction
+
+	vpsrlq		\$26,$D3,$H3
+	vpand		$MASK,$D3,$D3
+	vpaddq		$H3,$D4,$D4		# h3 -> h4
+
+	vpsrlq		\$26,$D0,$H0
+	vpand		$MASK,$D0,$D0
+	vpaddq		$H0,$D1,$D1		# h0 -> h1
+
+	vpsrlq		\$26,$D4,$H4
+	vpand		$MASK,$D4,$D4
+
+	vpsrlq		\$26,$D1,$H1
+	vpand		$MASK,$D1,$D1
+	vpaddq		$H1,$D2,$D2		# h1 -> h2
+
+	vpaddq		$H4,$D0,$D0
+	vpsllq		\$2,$H4,$H4
+	vpaddq		$H4,$D0,$D0		# h4 -> h0
+
+	vpsrlq		\$26,$D2,$H2
+	vpand		$MASK,$D2,$D2
+	vpaddq		$H2,$D3,$D3		# h2 -> h3
+
+	vpsrlq		\$26,$D0,$H0
+	vpand		$MASK,$D0,$D0
+	vpaddq		$H0,$D1,$D1		# h0 -> h1
+
+	vpsrlq		\$26,$D3,$H3
+	vpand		$MASK,$D3,$D3
+	vpaddq		$H3,$D4,$D4		# h3 -> h4
+
+	vmovd		$D0,`4*0-48-64`($ctx)	# save partially reduced
+	vmovd		$D1,`4*1-48-64`($ctx)
+	vmovd		$D2,`4*2-48-64`($ctx)
+	vmovd		$D3,`4*3-48-64`($ctx)
+	vmovd		$D4,`4*4-48-64`($ctx)
+___
+$code.=<<___	if ($win64);
+	vmovdqa		0x50(%r11),%xmm6
+	vmovdqa		0x60(%r11),%xmm7
+	vmovdqa		0x70(%r11),%xmm8
+	vmovdqa		0x80(%r11),%xmm9
+	vmovdqa		0x90(%r11),%xmm10
+	vmovdqa		0xa0(%r11),%xmm11
+	vmovdqa		0xb0(%r11),%xmm12
+	vmovdqa		0xc0(%r11),%xmm13
+	vmovdqa		0xd0(%r11),%xmm14
+	vmovdqa		0xe0(%r11),%xmm15
+	lea		0xf8(%r11),%rsp
+.Ldo_avx_epilogue:
+___
+$code.=<<___	if (!$win64);
+	lea		0x58(%r11),%rsp
+.cfi_def_cfa		%rsp,8
+___
+$code.=<<___;
+	vzeroupper
+	ret
+.cfi_endproc
+.size	poly1305_blocks_avx,.-poly1305_blocks_avx
+
+.type	poly1305_emit_avx,\@function,3
+.align	32
+poly1305_emit_avx:
+	cmpl	\$0,20($ctx)	# is_base2_26?
+	je	.Lemit
+
+	mov	0($ctx),%eax	# load hash value base 2^26
+	mov	4($ctx),%ecx
+	mov	8($ctx),%r8d
+	mov	12($ctx),%r11d
+	mov	16($ctx),%r10d
+
+	shl	\$26,%rcx	# base 2^26 -> base 2^64
+	mov	%r8,%r9
+	shl	\$52,%r8
+	add	%rcx,%rax
+	shr	\$12,%r9
+	add	%rax,%r8	# h0
+	adc	\$0,%r9
+
+	shl	\$14,%r11
+	mov	%r10,%rax
+	shr	\$24,%r10
+	add	%r11,%r9
+	shl	\$40,%rax
+	add	%rax,%r9	# h1
+	adc	\$0,%r10	# h2
+
+	mov	%r10,%rax	# could be partially reduced, so reduce
+	mov	%r10,%rcx
+	and	\$3,%r10
+	shr	\$2,%rax
+	and	\$-4,%rcx
+	add	%rcx,%rax
+	add	%rax,%r8
+	adc	\$0,%r9
+	adc	\$0,%r10
+
+	mov	%r8,%rax
+	add	\$5,%r8		# compare to modulus
+	mov	%r9,%rcx
+	adc	\$0,%r9
+	adc	\$0,%r10
+	shr	\$2,%r10	# did 130-bit value overflow?
+	cmovnz	%r8,%rax
+	cmovnz	%r9,%rcx
+
+	add	0($nonce),%rax	# accumulate nonce
+	adc	8($nonce),%rcx
+	mov	%rax,0($mac)	# write result
+	mov	%rcx,8($mac)
+
+	ret
+.size	poly1305_emit_avx,.-poly1305_emit_avx
+___
+
+if ($avx>1) {
+my ($H0,$H1,$H2,$H3,$H4, $MASK, $T4,$T0,$T1,$T2,$T3, $D0,$D1,$D2,$D3,$D4) =
+    map("%ymm$_",(0..15));
+my $S4=$MASK;
+
+$code.=<<___;
+.type	poly1305_blocks_avx2,\@function,4
+.align	32
+poly1305_blocks_avx2:
+.cfi_startproc
+	mov	20($ctx),%r8d		# is_base2_26
+	cmp	\$128,$len
+	jae	.Lblocks_avx2
+	test	%r8d,%r8d
+	jz	.Lblocks
+
+.Lblocks_avx2:
+	and	\$-16,$len
+	jz	.Lno_data_avx2
+
+	vzeroupper
+
+	test	%r8d,%r8d
+	jz	.Lbase2_64_avx2
+
+	test	\$63,$len
+	jz	.Leven_avx2
+
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lblocks_avx2_body:
+
+	mov	$len,%r15		# reassign $len
+
+	mov	0($ctx),$d1		# load hash value
+	mov	8($ctx),$d2
+	mov	16($ctx),$h2#d
+
+	mov	24($ctx),$r0		# load r
+	mov	32($ctx),$s1
+
+	################################# base 2^26 -> base 2^64
+	mov	$d1#d,$h0#d
+	and	\$`-1*(1<<31)`,$d1
+	mov	$d2,$r1			# borrow $r1
+	mov	$d2#d,$h1#d
+	and	\$`-1*(1<<31)`,$d2
+
+	shr	\$6,$d1
+	shl	\$52,$r1
+	add	$d1,$h0
+	shr	\$12,$h1
+	shr	\$18,$d2
+	add	$r1,$h0
+	adc	$d2,$h1
+
+	mov	$h2,$d1
+	shl	\$40,$d1
+	shr	\$24,$h2
+	add	$d1,$h1
+	adc	\$0,$h2			# can be partially reduced...
+
+	mov	\$-4,$d2		# ... so reduce
+	mov	$h2,$d1
+	and	$h2,$d2
+	shr	\$2,$d1
+	and	\$3,$h2
+	add	$d2,$d1			# =*5
+	add	$d1,$h0
+	adc	\$0,$h1
+	adc	\$0,$h2
+
+	mov	$s1,$r1
+	mov	$s1,%rax
+	shr	\$2,$s1
+	add	$r1,$s1			# s1 = r1 + (r1 >> 2)
+
+.Lbase2_26_pre_avx2:
+	add	0($inp),$h0		# accumulate input
+	adc	8($inp),$h1
+	lea	16($inp),$inp
+	adc	$padbit,$h2
+	sub	\$16,%r15
+
+	call	__poly1305_block
+	mov	$r1,%rax
+
+	test	\$63,%r15
+	jnz	.Lbase2_26_pre_avx2
+
+	test	$padbit,$padbit		# if $padbit is zero,
+	jz	.Lstore_base2_64_avx2	# store hash in base 2^64 format
+
+	################################# base 2^64 -> base 2^26
+	mov	$h0,%rax
+	mov	$h0,%rdx
+	shr	\$52,$h0
+	mov	$h1,$r0
+	mov	$h1,$r1
+	shr	\$26,%rdx
+	and	\$0x3ffffff,%rax	# h[0]
+	shl	\$12,$r0
+	and	\$0x3ffffff,%rdx	# h[1]
+	shr	\$14,$h1
+	or	$r0,$h0
+	shl	\$24,$h2
+	and	\$0x3ffffff,$h0		# h[2]
+	shr	\$40,$r1
+	and	\$0x3ffffff,$h1		# h[3]
+	or	$r1,$h2			# h[4]
+
+	test	%r15,%r15
+	jz	.Lstore_base2_26_avx2
+
+	vmovd	%rax#d,%x#$H0
+	vmovd	%rdx#d,%x#$H1
+	vmovd	$h0#d,%x#$H2
+	vmovd	$h1#d,%x#$H3
+	vmovd	$h2#d,%x#$H4
+	jmp	.Lproceed_avx2
+
+.align	32
+.Lstore_base2_64_avx2:
+	mov	$h0,0($ctx)
+	mov	$h1,8($ctx)
+	mov	$h2,16($ctx)		# note that is_base2_26 is zeroed
+	jmp	.Ldone_avx2
+
+.align	16
+.Lstore_base2_26_avx2:
+	mov	%rax#d,0($ctx)		# store hash value base 2^26
+	mov	%rdx#d,4($ctx)
+	mov	$h0#d,8($ctx)
+	mov	$h1#d,12($ctx)
+	mov	$h2#d,16($ctx)
+.align	16
+.Ldone_avx2:
+	mov	0(%rsp),%r15
+.cfi_restore	%r15
+	mov	8(%rsp),%r14
+.cfi_restore	%r14
+	mov	16(%rsp),%r13
+.cfi_restore	%r13
+	mov	24(%rsp),%r12
+.cfi_restore	%r12
+	mov	32(%rsp),%rbp
+.cfi_restore	%rbp
+	mov	40(%rsp),%rbx
+.cfi_restore	%rbx
+	lea	48(%rsp),%rsp
+.cfi_adjust_cfa_offset	-48
+.Lno_data_avx2:
+.Lblocks_avx2_epilogue:
+	ret
+.cfi_endproc
+
+.align	32
+.Lbase2_64_avx2:
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+.Lbase2_64_avx2_body:
+
+	mov	$len,%r15		# reassign $len
+
+	mov	24($ctx),$r0		# load r
+	mov	32($ctx),$s1
+
+	mov	0($ctx),$h0		# load hash value
+	mov	8($ctx),$h1
+	mov	16($ctx),$h2#d
+
+	mov	$s1,$r1
+	mov	$s1,%rax
+	shr	\$2,$s1
+	add	$r1,$s1			# s1 = r1 + (r1 >> 2)
+
+	test	\$63,$len
+	jz	.Linit_avx2
+
+.Lbase2_64_pre_avx2:
+	add	0($inp),$h0		# accumulate input
+	adc	8($inp),$h1
+	lea	16($inp),$inp
+	adc	$padbit,$h2
+	sub	\$16,%r15
+
+	call	__poly1305_block
+	mov	$r1,%rax
+
+	test	\$63,%r15
+	jnz	.Lbase2_64_pre_avx2
+
+.Linit_avx2:
+	################################# base 2^64 -> base 2^26
+	mov	$h0,%rax
+	mov	$h0,%rdx
+	shr	\$52,$h0
+	mov	$h1,$d1
+	mov	$h1,$d2
+	shr	\$26,%rdx
+	and	\$0x3ffffff,%rax	# h[0]
+	shl	\$12,$d1
+	and	\$0x3ffffff,%rdx	# h[1]
+	shr	\$14,$h1
+	or	$d1,$h0
+	shl	\$24,$h2
+	and	\$0x3ffffff,$h0		# h[2]
+	shr	\$40,$d2
+	and	\$0x3ffffff,$h1		# h[3]
+	or	$d2,$h2			# h[4]
+
+	vmovd	%rax#d,%x#$H0
+	vmovd	%rdx#d,%x#$H1
+	vmovd	$h0#d,%x#$H2
+	vmovd	$h1#d,%x#$H3
+	vmovd	$h2#d,%x#$H4
+	movl	\$1,20($ctx)		# set is_base2_26
+
+	call	__poly1305_init_avx
+
+.Lproceed_avx2:
+	mov	%r15,$len			# restore $len
+	mov	OPENSSL_ia32cap_P+8(%rip),%r10d
+	mov	\$`(1<<31|1<<30|1<<16)`,%r11d
+
+	mov	0(%rsp),%r15
+.cfi_restore	%r15
+	mov	8(%rsp),%r14
+.cfi_restore	%r14
+	mov	16(%rsp),%r13
+.cfi_restore	%r13
+	mov	24(%rsp),%r12
+.cfi_restore	%r12
+	mov	32(%rsp),%rbp
+.cfi_restore	%rbp
+	mov	40(%rsp),%rbx
+.cfi_restore	%rbx
+	lea	48(%rsp),%rax
+	lea	48(%rsp),%rsp
+.cfi_adjust_cfa_offset	-48
+.Lbase2_64_avx2_epilogue:
+	jmp	.Ldo_avx2
+.cfi_endproc
+
+.align	32
+.Leven_avx2:
+.cfi_startproc
+	mov		OPENSSL_ia32cap_P+8(%rip),%r10d
+	vmovd		4*0($ctx),%x#$H0	# load hash value base 2^26
+	vmovd		4*1($ctx),%x#$H1
+	vmovd		4*2($ctx),%x#$H2
+	vmovd		4*3($ctx),%x#$H3
+	vmovd		4*4($ctx),%x#$H4
+
+.Ldo_avx2:
+___
+$code.=<<___		if ($avx>2);
+	cmp		\$512,$len
+	jb		.Lskip_avx512
+	and		%r11d,%r10d
+	test		\$`1<<16`,%r10d		# check for AVX512F
+	jnz		.Lblocks_avx512
+.Lskip_avx512:
+___
+$code.=<<___	if (!$win64);
+	lea		-8(%rsp),%r11
+.cfi_def_cfa		%r11,16
+	sub		\$0x128,%rsp
+___
+$code.=<<___	if ($win64);
+	lea		-0xf8(%rsp),%r11
+	sub		\$0x1c8,%rsp
+	vmovdqa		%xmm6,0x50(%r11)
+	vmovdqa		%xmm7,0x60(%r11)
+	vmovdqa		%xmm8,0x70(%r11)
+	vmovdqa		%xmm9,0x80(%r11)
+	vmovdqa		%xmm10,0x90(%r11)
+	vmovdqa		%xmm11,0xa0(%r11)
+	vmovdqa		%xmm12,0xb0(%r11)
+	vmovdqa		%xmm13,0xc0(%r11)
+	vmovdqa		%xmm14,0xd0(%r11)
+	vmovdqa		%xmm15,0xe0(%r11)
+.Ldo_avx2_body:
+___
+$code.=<<___;
+	lea		.Lconst(%rip),%rcx
+	lea		48+64($ctx),$ctx	# size optimization
+	vmovdqa		96(%rcx),$T0		# .Lpermd_avx2
+
+	# expand and copy pre-calculated table to stack
+	vmovdqu		`16*0-64`($ctx),%x#$T2
+	and		\$-512,%rsp
+	vmovdqu		`16*1-64`($ctx),%x#$T3
+	vmovdqu		`16*2-64`($ctx),%x#$T4
+	vmovdqu		`16*3-64`($ctx),%x#$D0
+	vmovdqu		`16*4-64`($ctx),%x#$D1
+	vmovdqu		`16*5-64`($ctx),%x#$D2
+	lea		0x90(%rsp),%rax		# size optimization
+	vmovdqu		`16*6-64`($ctx),%x#$D3
+	vpermd		$T2,$T0,$T2		# 00003412 -> 14243444
+	vmovdqu		`16*7-64`($ctx),%x#$D4
+	vpermd		$T3,$T0,$T3
+	vmovdqu		`16*8-64`($ctx),%x#$MASK
+	vpermd		$T4,$T0,$T4
+	vmovdqa		$T2,0x00(%rsp)
+	vpermd		$D0,$T0,$D0
+	vmovdqa		$T3,0x20-0x90(%rax)
+	vpermd		$D1,$T0,$D1
+	vmovdqa		$T4,0x40-0x90(%rax)
+	vpermd		$D2,$T0,$D2
+	vmovdqa		$D0,0x60-0x90(%rax)
+	vpermd		$D3,$T0,$D3
+	vmovdqa		$D1,0x80-0x90(%rax)
+	vpermd		$D4,$T0,$D4
+	vmovdqa		$D2,0xa0-0x90(%rax)
+	vpermd		$MASK,$T0,$MASK
+	vmovdqa		$D3,0xc0-0x90(%rax)
+	vmovdqa		$D4,0xe0-0x90(%rax)
+	vmovdqa		$MASK,0x100-0x90(%rax)
+	vmovdqa		64(%rcx),$MASK		# .Lmask26
+
+	################################################################
+	# load input
+	vmovdqu		16*0($inp),%x#$T0
+	vmovdqu		16*1($inp),%x#$T1
+	vinserti128	\$1,16*2($inp),$T0,$T0
+	vinserti128	\$1,16*3($inp),$T1,$T1
+	lea		16*4($inp),$inp
+
+	vpsrldq		\$6,$T0,$T2		# splat input
+	vpsrldq		\$6,$T1,$T3
+	vpunpckhqdq	$T1,$T0,$T4		# 4
+	vpunpcklqdq	$T3,$T2,$T2		# 2:3
+	vpunpcklqdq	$T1,$T0,$T0		# 0:1
+
+	vpsrlq		\$30,$T2,$T3
+	vpsrlq		\$4,$T2,$T2
+	vpsrlq		\$26,$T0,$T1
+	vpsrlq		\$40,$T4,$T4		# 4
+	vpand		$MASK,$T2,$T2		# 2
+	vpand		$MASK,$T0,$T0		# 0
+	vpand		$MASK,$T1,$T1		# 1
+	vpand		$MASK,$T3,$T3		# 3
+	vpor		32(%rcx),$T4,$T4	# padbit, yes, always
+
+	vpaddq		$H2,$T2,$H2		# accumulate input
+	sub		\$64,$len
+	jz		.Ltail_avx2
+	jmp		.Loop_avx2
+
+.align	32
+.Loop_avx2:
+	################################################################
+	# ((inp[0]*r^4+inp[4])*r^4+inp[ 8])*r^4
+	# ((inp[1]*r^4+inp[5])*r^4+inp[ 9])*r^3
+	# ((inp[2]*r^4+inp[6])*r^4+inp[10])*r^2
+	# ((inp[3]*r^4+inp[7])*r^4+inp[11])*r^1
+	#   \________/\__________/
+	################################################################
+	#vpaddq		$H2,$T2,$H2		# accumulate input
+	vpaddq		$H0,$T0,$H0
+	vmovdqa		`32*0`(%rsp),$T0	# r0^4
+	vpaddq		$H1,$T1,$H1
+	vmovdqa		`32*1`(%rsp),$T1	# r1^4
+	vpaddq		$H3,$T3,$H3
+	vmovdqa		`32*3`(%rsp),$T2	# r2^4
+	vpaddq		$H4,$T4,$H4
+	vmovdqa		`32*6-0x90`(%rax),$T3	# s3^4
+	vmovdqa		`32*8-0x90`(%rax),$S4	# s4^4
+
+	# d4 = h4*r0 + h3*r1   + h2*r2   + h1*r3   + h0*r4
+	# d3 = h3*r0 + h2*r1   + h1*r2   + h0*r3   + h4*5*r4
+	# d2 = h2*r0 + h1*r1   + h0*r2   + h4*5*r3 + h3*5*r4
+	# d1 = h1*r0 + h0*r1   + h4*5*r2 + h3*5*r3 + h2*5*r4
+	# d0 = h0*r0 + h4*5*r1 + h3*5*r2 + h2*5*r3 + h1*5*r4
+	#
+	# however, as h2 is "chronologically" first one available pull
+	# corresponding operations up, so it's
+	#
+	# d4 = h2*r2   + h4*r0 + h3*r1             + h1*r3   + h0*r4
+	# d3 = h2*r1   + h3*r0           + h1*r2   + h0*r3   + h4*5*r4
+	# d2 = h2*r0           + h1*r1   + h0*r2   + h4*5*r3 + h3*5*r4
+	# d1 = h2*5*r4 + h1*r0 + h0*r1   + h4*5*r2 + h3*5*r3
+	# d0 = h2*5*r3 + h0*r0 + h4*5*r1 + h3*5*r2           + h1*5*r4
+
+	vpmuludq	$H2,$T0,$D2		# d2 = h2*r0
+	vpmuludq	$H2,$T1,$D3		# d3 = h2*r1
+	vpmuludq	$H2,$T2,$D4		# d4 = h2*r2
+	vpmuludq	$H2,$T3,$D0		# d0 = h2*s3
+	vpmuludq	$H2,$S4,$D1		# d1 = h2*s4
+
+	vpmuludq	$H0,$T1,$T4		# h0*r1
+	vpmuludq	$H1,$T1,$H2		# h1*r1, borrow $H2 as temp
+	vpaddq		$T4,$D1,$D1		# d1 += h0*r1
+	vpaddq		$H2,$D2,$D2		# d2 += h1*r1
+	vpmuludq	$H3,$T1,$T4		# h3*r1
+	vpmuludq	`32*2`(%rsp),$H4,$H2	# h4*s1
+	vpaddq		$T4,$D4,$D4		# d4 += h3*r1
+	vpaddq		$H2,$D0,$D0		# d0 += h4*s1
+	 vmovdqa	`32*4-0x90`(%rax),$T1	# s2
+
+	vpmuludq	$H0,$T0,$T4		# h0*r0
+	vpmuludq	$H1,$T0,$H2		# h1*r0
+	vpaddq		$T4,$D0,$D0		# d0 += h0*r0
+	vpaddq		$H2,$D1,$D1		# d1 += h1*r0
+	vpmuludq	$H3,$T0,$T4		# h3*r0
+	vpmuludq	$H4,$T0,$H2		# h4*r0
+	 vmovdqu	16*0($inp),%x#$T0	# load input
+	vpaddq		$T4,$D3,$D3		# d3 += h3*r0
+	vpaddq		$H2,$D4,$D4		# d4 += h4*r0
+	 vinserti128	\$1,16*2($inp),$T0,$T0
+
+	vpmuludq	$H3,$T1,$T4		# h3*s2
+	vpmuludq	$H4,$T1,$H2		# h4*s2
+	 vmovdqu	16*1($inp),%x#$T1
+	vpaddq		$T4,$D0,$D0		# d0 += h3*s2
+	vpaddq		$H2,$D1,$D1		# d1 += h4*s2
+	 vmovdqa	`32*5-0x90`(%rax),$H2	# r3
+	vpmuludq	$H1,$T2,$T4		# h1*r2
+	vpmuludq	$H0,$T2,$T2		# h0*r2
+	vpaddq		$T4,$D3,$D3		# d3 += h1*r2
+	vpaddq		$T2,$D2,$D2		# d2 += h0*r2
+	 vinserti128	\$1,16*3($inp),$T1,$T1
+	 lea		16*4($inp),$inp
+
+	vpmuludq	$H1,$H2,$T4		# h1*r3
+	vpmuludq	$H0,$H2,$H2		# h0*r3
+	 vpsrldq	\$6,$T0,$T2		# splat input
+	vpaddq		$T4,$D4,$D4		# d4 += h1*r3
+	vpaddq		$H2,$D3,$D3		# d3 += h0*r3
+	vpmuludq	$H3,$T3,$T4		# h3*s3
+	vpmuludq	$H4,$T3,$H2		# h4*s3
+	 vpsrldq	\$6,$T1,$T3
+	vpaddq		$T4,$D1,$D1		# d1 += h3*s3
+	vpaddq		$H2,$D2,$D2		# d2 += h4*s3
+	 vpunpckhqdq	$T1,$T0,$T4		# 4
+
+	vpmuludq	$H3,$S4,$H3		# h3*s4
+	vpmuludq	$H4,$S4,$H4		# h4*s4
+	 vpunpcklqdq	$T1,$T0,$T0		# 0:1
+	vpaddq		$H3,$D2,$H2		# h2 = d2 + h3*r4
+	vpaddq		$H4,$D3,$H3		# h3 = d3 + h4*r4
+	 vpunpcklqdq	$T3,$T2,$T3		# 2:3
+	vpmuludq	`32*7-0x90`(%rax),$H0,$H4	# h0*r4
+	vpmuludq	$H1,$S4,$H0		# h1*s4
+	vmovdqa		64(%rcx),$MASK		# .Lmask26
+	vpaddq		$H4,$D4,$H4		# h4 = d4 + h0*r4
+	vpaddq		$H0,$D0,$H0		# h0 = d0 + h1*s4
+
+	################################################################
+	# lazy reduction (interleaved with tail of input splat)
+
+	vpsrlq		\$26,$H3,$D3
+	vpand		$MASK,$H3,$H3
+	vpaddq		$D3,$H4,$H4		# h3 -> h4
+
+	vpsrlq		\$26,$H0,$D0
+	vpand		$MASK,$H0,$H0
+	vpaddq		$D0,$D1,$H1		# h0 -> h1
+
+	vpsrlq		\$26,$H4,$D4
+	vpand		$MASK,$H4,$H4
+
+	 vpsrlq		\$4,$T3,$T2
+
+	vpsrlq		\$26,$H1,$D1
+	vpand		$MASK,$H1,$H1
+	vpaddq		$D1,$H2,$H2		# h1 -> h2
+
+	vpaddq		$D4,$H0,$H0
+	vpsllq		\$2,$D4,$D4
+	vpaddq		$D4,$H0,$H0		# h4 -> h0
+
+	 vpand		$MASK,$T2,$T2		# 2
+	 vpsrlq		\$26,$T0,$T1
+
+	vpsrlq		\$26,$H2,$D2
+	vpand		$MASK,$H2,$H2
+	vpaddq		$D2,$H3,$H3		# h2 -> h3
+
+	 vpaddq		$T2,$H2,$H2		# modulo-scheduled
+	 vpsrlq		\$30,$T3,$T3
+
+	vpsrlq		\$26,$H0,$D0
+	vpand		$MASK,$H0,$H0
+	vpaddq		$D0,$H1,$H1		# h0 -> h1
+
+	 vpsrlq		\$40,$T4,$T4		# 4
+
+	vpsrlq		\$26,$H3,$D3
+	vpand		$MASK,$H3,$H3
+	vpaddq		$D3,$H4,$H4		# h3 -> h4
+
+	 vpand		$MASK,$T0,$T0		# 0
+	 vpand		$MASK,$T1,$T1		# 1
+	 vpand		$MASK,$T3,$T3		# 3
+	 vpor		32(%rcx),$T4,$T4	# padbit, yes, always
+
+	sub		\$64,$len
+	jnz		.Loop_avx2
+
+	.byte		0x66,0x90
+.Ltail_avx2:
+	################################################################
+	# while above multiplications were by r^4 in all lanes, in last
+	# iteration we multiply least significant lane by r^4 and most
+	# significant one by r, so copy of above except that references
+	# to the precomputed table are displaced by 4...
+
+	#vpaddq		$H2,$T2,$H2		# accumulate input
+	vpaddq		$H0,$T0,$H0
+	vmovdqu		`32*0+4`(%rsp),$T0	# r0^4
+	vpaddq		$H1,$T1,$H1
+	vmovdqu		`32*1+4`(%rsp),$T1	# r1^4
+	vpaddq		$H3,$T3,$H3
+	vmovdqu		`32*3+4`(%rsp),$T2	# r2^4
+	vpaddq		$H4,$T4,$H4
+	vmovdqu		`32*6+4-0x90`(%rax),$T3	# s3^4
+	vmovdqu		`32*8+4-0x90`(%rax),$S4	# s4^4
+
+	vpmuludq	$H2,$T0,$D2		# d2 = h2*r0
+	vpmuludq	$H2,$T1,$D3		# d3 = h2*r1
+	vpmuludq	$H2,$T2,$D4		# d4 = h2*r2
+	vpmuludq	$H2,$T3,$D0		# d0 = h2*s3
+	vpmuludq	$H2,$S4,$D1		# d1 = h2*s4
+
+	vpmuludq	$H0,$T1,$T4		# h0*r1
+	vpmuludq	$H1,$T1,$H2		# h1*r1
+	vpaddq		$T4,$D1,$D1		# d1 += h0*r1
+	vpaddq		$H2,$D2,$D2		# d2 += h1*r1
+	vpmuludq	$H3,$T1,$T4		# h3*r1
+	vpmuludq	`32*2+4`(%rsp),$H4,$H2	# h4*s1
+	vpaddq		$T4,$D4,$D4		# d4 += h3*r1
+	vpaddq		$H2,$D0,$D0		# d0 += h4*s1
+
+	vpmuludq	$H0,$T0,$T4		# h0*r0
+	vpmuludq	$H1,$T0,$H2		# h1*r0
+	vpaddq		$T4,$D0,$D0		# d0 += h0*r0
+	 vmovdqu	`32*4+4-0x90`(%rax),$T1	# s2
+	vpaddq		$H2,$D1,$D1		# d1 += h1*r0
+	vpmuludq	$H3,$T0,$T4		# h3*r0
+	vpmuludq	$H4,$T0,$H2		# h4*r0
+	vpaddq		$T4,$D3,$D3		# d3 += h3*r0
+	vpaddq		$H2,$D4,$D4		# d4 += h4*r0
+
+	vpmuludq	$H3,$T1,$T4		# h3*s2
+	vpmuludq	$H4,$T1,$H2		# h4*s2
+	vpaddq		$T4,$D0,$D0		# d0 += h3*s2
+	vpaddq		$H2,$D1,$D1		# d1 += h4*s2
+	 vmovdqu	`32*5+4-0x90`(%rax),$H2	# r3
+	vpmuludq	$H1,$T2,$T4		# h1*r2
+	vpmuludq	$H0,$T2,$T2		# h0*r2
+	vpaddq		$T4,$D3,$D3		# d3 += h1*r2
+	vpaddq		$T2,$D2,$D2		# d2 += h0*r2
+
+	vpmuludq	$H1,$H2,$T4		# h1*r3
+	vpmuludq	$H0,$H2,$H2		# h0*r3
+	vpaddq		$T4,$D4,$D4		# d4 += h1*r3
+	vpaddq		$H2,$D3,$D3		# d3 += h0*r3
+	vpmuludq	$H3,$T3,$T4		# h3*s3
+	vpmuludq	$H4,$T3,$H2		# h4*s3
+	vpaddq		$T4,$D1,$D1		# d1 += h3*s3
+	vpaddq		$H2,$D2,$D2		# d2 += h4*s3
+
+	vpmuludq	$H3,$S4,$H3		# h3*s4
+	vpmuludq	$H4,$S4,$H4		# h4*s4
+	vpaddq		$H3,$D2,$H2		# h2 = d2 + h3*r4
+	vpaddq		$H4,$D3,$H3		# h3 = d3 + h4*r4
+	vpmuludq	`32*7+4-0x90`(%rax),$H0,$H4		# h0*r4
+	vpmuludq	$H1,$S4,$H0		# h1*s4
+	vmovdqa		64(%rcx),$MASK		# .Lmask26
+	vpaddq		$H4,$D4,$H4		# h4 = d4 + h0*r4
+	vpaddq		$H0,$D0,$H0		# h0 = d0 + h1*s4
+
+	################################################################
+	# horizontal addition
+
+	vpsrldq		\$8,$D1,$T1
+	vpsrldq		\$8,$H2,$T2
+	vpsrldq		\$8,$H3,$T3
+	vpsrldq		\$8,$H4,$T4
+	vpsrldq		\$8,$H0,$T0
+	vpaddq		$T1,$D1,$D1
+	vpaddq		$T2,$H2,$H2
+	vpaddq		$T3,$H3,$H3
+	vpaddq		$T4,$H4,$H4
+	vpaddq		$T0,$H0,$H0
+
+	vpermq		\$0x2,$H3,$T3
+	vpermq		\$0x2,$H4,$T4
+	vpermq		\$0x2,$H0,$T0
+	vpermq		\$0x2,$D1,$T1
+	vpermq		\$0x2,$H2,$T2
+	vpaddq		$T3,$H3,$H3
+	vpaddq		$T4,$H4,$H4
+	vpaddq		$T0,$H0,$H0
+	vpaddq		$T1,$D1,$D1
+	vpaddq		$T2,$H2,$H2
+
+	################################################################
+	# lazy reduction
+
+	vpsrlq		\$26,$H3,$D3
+	vpand		$MASK,$H3,$H3
+	vpaddq		$D3,$H4,$H4		# h3 -> h4
+
+	vpsrlq		\$26,$H0,$D0
+	vpand		$MASK,$H0,$H0
+	vpaddq		$D0,$D1,$H1		# h0 -> h1
+
+	vpsrlq		\$26,$H4,$D4
+	vpand		$MASK,$H4,$H4
+
+	vpsrlq		\$26,$H1,$D1
+	vpand		$MASK,$H1,$H1
+	vpaddq		$D1,$H2,$H2		# h1 -> h2
+
+	vpaddq		$D4,$H0,$H0
+	vpsllq		\$2,$D4,$D4
+	vpaddq		$D4,$H0,$H0		# h4 -> h0
+
+	vpsrlq		\$26,$H2,$D2
+	vpand		$MASK,$H2,$H2
+	vpaddq		$D2,$H3,$H3		# h2 -> h3
+
+	vpsrlq		\$26,$H0,$D0
+	vpand		$MASK,$H0,$H0
+	vpaddq		$D0,$H1,$H1		# h0 -> h1
+
+	vpsrlq		\$26,$H3,$D3
+	vpand		$MASK,$H3,$H3
+	vpaddq		$D3,$H4,$H4		# h3 -> h4
+
+	vmovd		%x#$H0,`4*0-48-64`($ctx)# save partially reduced
+	vmovd		%x#$H1,`4*1-48-64`($ctx)
+	vmovd		%x#$H2,`4*2-48-64`($ctx)
+	vmovd		%x#$H3,`4*3-48-64`($ctx)
+	vmovd		%x#$H4,`4*4-48-64`($ctx)
+___
+$code.=<<___	if ($win64);
+	vmovdqa		0x50(%r11),%xmm6
+	vmovdqa		0x60(%r11),%xmm7
+	vmovdqa		0x70(%r11),%xmm8
+	vmovdqa		0x80(%r11),%xmm9
+	vmovdqa		0x90(%r11),%xmm10
+	vmovdqa		0xa0(%r11),%xmm11
+	vmovdqa		0xb0(%r11),%xmm12
+	vmovdqa		0xc0(%r11),%xmm13
+	vmovdqa		0xd0(%r11),%xmm14
+	vmovdqa		0xe0(%r11),%xmm15
+	lea		0xf8(%r11),%rsp
+.Ldo_avx2_epilogue:
+___
+$code.=<<___	if (!$win64);
+	lea		8(%r11),%rsp
+.cfi_def_cfa		%rsp,8
+___
+$code.=<<___;
+	vzeroupper
+	ret
+.cfi_endproc
+.size	poly1305_blocks_avx2,.-poly1305_blocks_avx2
+___
+#######################################################################
+if ($avx>2) {
+# On entry we have input length divisible by 64. But since inner loop
+# processes 128 bytes per iteration, cases when length is not divisible
+# by 128 are handled by passing tail 64 bytes to .Ltail_avx2. For this
+# reason stack layout is kept identical to poly1305_blocks_avx2. If not
+# for this tail, we wouldn't have to even allocate stack frame...
+
+my ($R0,$R1,$R2,$R3,$R4, $S1,$S2,$S3,$S4) = map("%zmm$_",(16..24));
+my ($M0,$M1,$M2,$M3,$M4) = map("%zmm$_",(25..29));
+my $PADBIT="%zmm30";
+
+map(s/%y/%z/,($T4,$T0,$T1,$T2,$T3));		# switch to %zmm domain
+map(s/%y/%z/,($D0,$D1,$D2,$D3,$D4));
+map(s/%y/%z/,($H0,$H1,$H2,$H3,$H4));
+map(s/%y/%z/,($MASK));
+
+$code.=<<___;
+.type	poly1305_blocks_avx512,\@function,4
+.align	32
+poly1305_blocks_avx512:
+.cfi_startproc
+.Lblocks_avx512:
+	mov		\$15,%eax
+	kmovw		%eax,%k2
+___
+$code.=<<___	if (!$win64);
+	lea		-8(%rsp),%r11
+.cfi_def_cfa		%r11,16
+	sub		\$0x128,%rsp
+___
+$code.=<<___	if ($win64);
+	lea		-0xf8(%rsp),%r11
+	sub		\$0x1c8,%rsp
+	vmovdqa		%xmm6,0x50(%r11)
+	vmovdqa		%xmm7,0x60(%r11)
+	vmovdqa		%xmm8,0x70(%r11)
+	vmovdqa		%xmm9,0x80(%r11)
+	vmovdqa		%xmm10,0x90(%r11)
+	vmovdqa		%xmm11,0xa0(%r11)
+	vmovdqa		%xmm12,0xb0(%r11)
+	vmovdqa		%xmm13,0xc0(%r11)
+	vmovdqa		%xmm14,0xd0(%r11)
+	vmovdqa		%xmm15,0xe0(%r11)
+.Ldo_avx512_body:
+___
+$code.=<<___;
+	lea		.Lconst(%rip),%rcx
+	lea		48+64($ctx),$ctx	# size optimization
+	vmovdqa		96(%rcx),%y#$T2		# .Lpermd_avx2
+
+	# expand pre-calculated table
+	vmovdqu		`16*0-64`($ctx),%x#$D0	# will become expanded ${R0}
+	and		\$-512,%rsp
+	vmovdqu		`16*1-64`($ctx),%x#$D1	# will become ... ${R1}
+	mov		\$0x20,%rax
+	vmovdqu		`16*2-64`($ctx),%x#$T0	# ... ${S1}
+	vmovdqu		`16*3-64`($ctx),%x#$D2	# ... ${R2}
+	vmovdqu		`16*4-64`($ctx),%x#$T1	# ... ${S2}
+	vmovdqu		`16*5-64`($ctx),%x#$D3	# ... ${R3}
+	vmovdqu		`16*6-64`($ctx),%x#$T3	# ... ${S3}
+	vmovdqu		`16*7-64`($ctx),%x#$D4	# ... ${R4}
+	vmovdqu		`16*8-64`($ctx),%x#$T4	# ... ${S4}
+	vpermd		$D0,$T2,$R0		# 00003412 -> 14243444
+	vpbroadcastq	64(%rcx),$MASK		# .Lmask26
+	vpermd		$D1,$T2,$R1
+	vpermd		$T0,$T2,$S1
+	vpermd		$D2,$T2,$R2
+	vmovdqa64	$R0,0x00(%rsp){%k2}	# save in case $len%128 != 0
+	 vpsrlq		\$32,$R0,$T0		# 14243444 -> 01020304
+	vpermd		$T1,$T2,$S2
+	vmovdqu64	$R1,0x00(%rsp,%rax){%k2}
+	 vpsrlq		\$32,$R1,$T1
+	vpermd		$D3,$T2,$R3
+	vmovdqa64	$S1,0x40(%rsp){%k2}
+	vpermd		$T3,$T2,$S3
+	vpermd		$D4,$T2,$R4
+	vmovdqu64	$R2,0x40(%rsp,%rax){%k2}
+	vpermd		$T4,$T2,$S4
+	vmovdqa64	$S2,0x80(%rsp){%k2}
+	vmovdqu64	$R3,0x80(%rsp,%rax){%k2}
+	vmovdqa64	$S3,0xc0(%rsp){%k2}
+	vmovdqu64	$R4,0xc0(%rsp,%rax){%k2}
+	vmovdqa64	$S4,0x100(%rsp){%k2}
+
+	################################################################
+	# calculate 5th through 8th powers of the key
+	#
+	# d0 = r0'*r0 + r1'*5*r4 + r2'*5*r3 + r3'*5*r2 + r4'*5*r1
+	# d1 = r0'*r1 + r1'*r0   + r2'*5*r4 + r3'*5*r3 + r4'*5*r2
+	# d2 = r0'*r2 + r1'*r1   + r2'*r0   + r3'*5*r4 + r4'*5*r3
+	# d3 = r0'*r3 + r1'*r2   + r2'*r1   + r3'*r0   + r4'*5*r4
+	# d4 = r0'*r4 + r1'*r3   + r2'*r2   + r3'*r1   + r4'*r0
+
+	vpmuludq	$T0,$R0,$D0		# d0 = r0'*r0
+	vpmuludq	$T0,$R1,$D1		# d1 = r0'*r1
+	vpmuludq	$T0,$R2,$D2		# d2 = r0'*r2
+	vpmuludq	$T0,$R3,$D3		# d3 = r0'*r3
+	vpmuludq	$T0,$R4,$D4		# d4 = r0'*r4
+	 vpsrlq		\$32,$R2,$T2
+
+	vpmuludq	$T1,$S4,$M0
+	vpmuludq	$T1,$R0,$M1
+	vpmuludq	$T1,$R1,$M2
+	vpmuludq	$T1,$R2,$M3
+	vpmuludq	$T1,$R3,$M4
+	 vpsrlq		\$32,$R3,$T3
+	vpaddq		$M0,$D0,$D0		# d0 += r1'*5*r4
+	vpaddq		$M1,$D1,$D1		# d1 += r1'*r0
+	vpaddq		$M2,$D2,$D2		# d2 += r1'*r1
+	vpaddq		$M3,$D3,$D3		# d3 += r1'*r2
+	vpaddq		$M4,$D4,$D4		# d4 += r1'*r3
+
+	vpmuludq	$T2,$S3,$M0
+	vpmuludq	$T2,$S4,$M1
+	vpmuludq	$T2,$R1,$M3
+	vpmuludq	$T2,$R2,$M4
+	vpmuludq	$T2,$R0,$M2
+	 vpsrlq		\$32,$R4,$T4
+	vpaddq		$M0,$D0,$D0		# d0 += r2'*5*r3
+	vpaddq		$M1,$D1,$D1		# d1 += r2'*5*r4
+	vpaddq		$M3,$D3,$D3		# d3 += r2'*r1
+	vpaddq		$M4,$D4,$D4		# d4 += r2'*r2
+	vpaddq		$M2,$D2,$D2		# d2 += r2'*r0
+
+	vpmuludq	$T3,$S2,$M0
+	vpmuludq	$T3,$R0,$M3
+	vpmuludq	$T3,$R1,$M4
+	vpmuludq	$T3,$S3,$M1
+	vpmuludq	$T3,$S4,$M2
+	vpaddq		$M0,$D0,$D0		# d0 += r3'*5*r2
+	vpaddq		$M3,$D3,$D3		# d3 += r3'*r0
+	vpaddq		$M4,$D4,$D4		# d4 += r3'*r1
+	vpaddq		$M1,$D1,$D1		# d1 += r3'*5*r3
+	vpaddq		$M2,$D2,$D2		# d2 += r3'*5*r4
+
+	vpmuludq	$T4,$S4,$M3
+	vpmuludq	$T4,$R0,$M4
+	vpmuludq	$T4,$S1,$M0
+	vpmuludq	$T4,$S2,$M1
+	vpmuludq	$T4,$S3,$M2
+	vpaddq		$M3,$D3,$D3		# d3 += r2'*5*r4
+	vpaddq		$M4,$D4,$D4		# d4 += r2'*r0
+	vpaddq		$M0,$D0,$D0		# d0 += r2'*5*r1
+	vpaddq		$M1,$D1,$D1		# d1 += r2'*5*r2
+	vpaddq		$M2,$D2,$D2		# d2 += r2'*5*r3
+
+	################################################################
+	# load input
+	vmovdqu64	16*0($inp),%z#$T3
+	vmovdqu64	16*4($inp),%z#$T4
+	lea		16*8($inp),$inp
+
+	################################################################
+	# lazy reduction
+
+	vpsrlq		\$26,$D3,$M3
+	vpandq		$MASK,$D3,$D3
+	vpaddq		$M3,$D4,$D4		# d3 -> d4
+
+	vpsrlq		\$26,$D0,$M0
+	vpandq		$MASK,$D0,$D0
+	vpaddq		$M0,$D1,$D1		# d0 -> d1
+
+	vpsrlq		\$26,$D4,$M4
+	vpandq		$MASK,$D4,$D4
+
+	vpsrlq		\$26,$D1,$M1
+	vpandq		$MASK,$D1,$D1
+	vpaddq		$M1,$D2,$D2		# d1 -> d2
+
+	vpaddq		$M4,$D0,$D0
+	vpsllq		\$2,$M4,$M4
+	vpaddq		$M4,$D0,$D0		# d4 -> d0
+
+	vpsrlq		\$26,$D2,$M2
+	vpandq		$MASK,$D2,$D2
+	vpaddq		$M2,$D3,$D3		# d2 -> d3
+
+	vpsrlq		\$26,$D0,$M0
+	vpandq		$MASK,$D0,$D0
+	vpaddq		$M0,$D1,$D1		# d0 -> d1
+
+	vpsrlq		\$26,$D3,$M3
+	vpandq		$MASK,$D3,$D3
+	vpaddq		$M3,$D4,$D4		# d3 -> d4
+
+	################################################################
+	# at this point we have 14243444 in $R0-$S4 and 05060708 in
+	# $D0-$D4, ...
+
+	vpunpcklqdq	$T4,$T3,$T0	# transpose input
+	vpunpckhqdq	$T4,$T3,$T4
+
+	# ... since input 64-bit lanes are ordered as 73625140, we could
+	# "vperm" it to 76543210 (here and in each loop iteration), *or*
+	# we could just flow along, hence the goal for $R0-$S4 is
+	# 1858286838784888 ...
+
+	vmovdqa32	128(%rcx),$M0		# .Lpermd_avx512:
+	mov		\$0x7777,%eax
+	kmovw		%eax,%k1
+
+	vpermd		$R0,$M0,$R0		# 14243444 -> 1---2---3---4---
+	vpermd		$R1,$M0,$R1
+	vpermd		$R2,$M0,$R2
+	vpermd		$R3,$M0,$R3
+	vpermd		$R4,$M0,$R4
+
+	vpermd		$D0,$M0,${R0}{%k1}	# 05060708 -> 1858286838784888
+	vpermd		$D1,$M0,${R1}{%k1}
+	vpermd		$D2,$M0,${R2}{%k1}
+	vpermd		$D3,$M0,${R3}{%k1}
+	vpermd		$D4,$M0,${R4}{%k1}
+
+	vpslld		\$2,$R1,$S1		# *5
+	vpslld		\$2,$R2,$S2
+	vpslld		\$2,$R3,$S3
+	vpslld		\$2,$R4,$S4
+	vpaddd		$R1,$S1,$S1
+	vpaddd		$R2,$S2,$S2
+	vpaddd		$R3,$S3,$S3
+	vpaddd		$R4,$S4,$S4
+
+	vpbroadcastq	32(%rcx),$PADBIT	# .L129
+
+	vpsrlq		\$52,$T0,$T2		# splat input
+	vpsllq		\$12,$T4,$T3
+	vporq		$T3,$T2,$T2
+	vpsrlq		\$26,$T0,$T1
+	vpsrlq		\$14,$T4,$T3
+	vpsrlq		\$40,$T4,$T4		# 4
+	vpandq		$MASK,$T2,$T2		# 2
+	vpandq		$MASK,$T0,$T0		# 0
+	#vpandq		$MASK,$T1,$T1		# 1
+	#vpandq		$MASK,$T3,$T3		# 3
+	#vporq		$PADBIT,$T4,$T4		# padbit, yes, always
+
+	vpaddq		$H2,$T2,$H2		# accumulate input
+	sub		\$192,$len
+	jbe		.Ltail_avx512
+	jmp		.Loop_avx512
+
+.align	32
+.Loop_avx512:
+	################################################################
+	# ((inp[0]*r^8+inp[ 8])*r^8+inp[16])*r^8
+	# ((inp[1]*r^8+inp[ 9])*r^8+inp[17])*r^7
+	# ((inp[2]*r^8+inp[10])*r^8+inp[18])*r^6
+	# ((inp[3]*r^8+inp[11])*r^8+inp[19])*r^5
+	# ((inp[4]*r^8+inp[12])*r^8+inp[20])*r^4
+	# ((inp[5]*r^8+inp[13])*r^8+inp[21])*r^3
+	# ((inp[6]*r^8+inp[14])*r^8+inp[22])*r^2
+	# ((inp[7]*r^8+inp[15])*r^8+inp[23])*r^1
+	#   \________/\___________/
+	################################################################
+	#vpaddq		$H2,$T2,$H2		# accumulate input
+
+	# d4 = h4*r0 + h3*r1   + h2*r2   + h1*r3   + h0*r4
+	# d3 = h3*r0 + h2*r1   + h1*r2   + h0*r3   + h4*5*r4
+	# d2 = h2*r0 + h1*r1   + h0*r2   + h4*5*r3 + h3*5*r4
+	# d1 = h1*r0 + h0*r1   + h4*5*r2 + h3*5*r3 + h2*5*r4
+	# d0 = h0*r0 + h4*5*r1 + h3*5*r2 + h2*5*r3 + h1*5*r4
+	#
+	# however, as h2 is "chronologically" first one available pull
+	# corresponding operations up, so it's
+	#
+	# d3 = h2*r1   + h0*r3 + h1*r2   + h3*r0 + h4*5*r4
+	# d4 = h2*r2   + h0*r4 + h1*r3   + h3*r1 + h4*r0
+	# d0 = h2*5*r3 + h0*r0 + h1*5*r4         + h3*5*r2 + h4*5*r1
+	# d1 = h2*5*r4 + h0*r1           + h1*r0 + h3*5*r3 + h4*5*r2
+	# d2 = h2*r0           + h0*r2   + h1*r1 + h3*5*r4 + h4*5*r3
+
+	vpmuludq	$H2,$R1,$D3		# d3 = h2*r1
+	 vpaddq		$H0,$T0,$H0
+	vpmuludq	$H2,$R2,$D4		# d4 = h2*r2
+	 vpandq		$MASK,$T1,$T1		# 1
+	vpmuludq	$H2,$S3,$D0		# d0 = h2*s3
+	 vpandq		$MASK,$T3,$T3		# 3
+	vpmuludq	$H2,$S4,$D1		# d1 = h2*s4
+	 vporq		$PADBIT,$T4,$T4		# padbit, yes, always
+	vpmuludq	$H2,$R0,$D2		# d2 = h2*r0
+	 vpaddq		$H1,$T1,$H1		# accumulate input
+	 vpaddq		$H3,$T3,$H3
+	 vpaddq		$H4,$T4,$H4
+
+	  vmovdqu64	16*0($inp),$T3		# load input
+	  vmovdqu64	16*4($inp),$T4
+	  lea		16*8($inp),$inp
+	vpmuludq	$H0,$R3,$M3
+	vpmuludq	$H0,$R4,$M4
+	vpmuludq	$H0,$R0,$M0
+	vpmuludq	$H0,$R1,$M1
+	vpaddq		$M3,$D3,$D3		# d3 += h0*r3
+	vpaddq		$M4,$D4,$D4		# d4 += h0*r4
+	vpaddq		$M0,$D0,$D0		# d0 += h0*r0
+	vpaddq		$M1,$D1,$D1		# d1 += h0*r1
+
+	vpmuludq	$H1,$R2,$M3
+	vpmuludq	$H1,$R3,$M4
+	vpmuludq	$H1,$S4,$M0
+	vpmuludq	$H0,$R2,$M2
+	vpaddq		$M3,$D3,$D3		# d3 += h1*r2
+	vpaddq		$M4,$D4,$D4		# d4 += h1*r3
+	vpaddq		$M0,$D0,$D0		# d0 += h1*s4
+	vpaddq		$M2,$D2,$D2		# d2 += h0*r2
+
+	  vpunpcklqdq	$T4,$T3,$T0		# transpose input
+	  vpunpckhqdq	$T4,$T3,$T4
+
+	vpmuludq	$H3,$R0,$M3
+	vpmuludq	$H3,$R1,$M4
+	vpmuludq	$H1,$R0,$M1
+	vpmuludq	$H1,$R1,$M2
+	vpaddq		$M3,$D3,$D3		# d3 += h3*r0
+	vpaddq		$M4,$D4,$D4		# d4 += h3*r1
+	vpaddq		$M1,$D1,$D1		# d1 += h1*r0
+	vpaddq		$M2,$D2,$D2		# d2 += h1*r1
+
+	vpmuludq	$H4,$S4,$M3
+	vpmuludq	$H4,$R0,$M4
+	vpmuludq	$H3,$S2,$M0
+	vpmuludq	$H3,$S3,$M1
+	vpaddq		$M3,$D3,$D3		# d3 += h4*s4
+	vpmuludq	$H3,$S4,$M2
+	vpaddq		$M4,$D4,$D4		# d4 += h4*r0
+	vpaddq		$M0,$D0,$D0		# d0 += h3*s2
+	vpaddq		$M1,$D1,$D1		# d1 += h3*s3
+	vpaddq		$M2,$D2,$D2		# d2 += h3*s4
+
+	vpmuludq	$H4,$S1,$M0
+	vpmuludq	$H4,$S2,$M1
+	vpmuludq	$H4,$S3,$M2
+	vpaddq		$M0,$D0,$H0		# h0 = d0 + h4*s1
+	vpaddq		$M1,$D1,$H1		# h1 = d2 + h4*s2
+	vpaddq		$M2,$D2,$H2		# h2 = d3 + h4*s3
+
+	################################################################
+	# lazy reduction (interleaved with input splat)
+
+	 vpsrlq		\$52,$T0,$T2		# splat input
+	 vpsllq		\$12,$T4,$T3
+
+	vpsrlq		\$26,$D3,$H3
+	vpandq		$MASK,$D3,$D3
+	vpaddq		$H3,$D4,$H4		# h3 -> h4
+
+	 vporq		$T3,$T2,$T2
+
+	vpsrlq		\$26,$H0,$D0
+	vpandq		$MASK,$H0,$H0
+	vpaddq		$D0,$H1,$H1		# h0 -> h1
+
+	 vpandq		$MASK,$T2,$T2		# 2
+
+	vpsrlq		\$26,$H4,$D4
+	vpandq		$MASK,$H4,$H4
+
+	vpsrlq		\$26,$H1,$D1
+	vpandq		$MASK,$H1,$H1
+	vpaddq		$D1,$H2,$H2		# h1 -> h2
+
+	vpaddq		$D4,$H0,$H0
+	vpsllq		\$2,$D4,$D4
+	vpaddq		$D4,$H0,$H0		# h4 -> h0
+
+	 vpaddq		$T2,$H2,$H2		# modulo-scheduled
+	 vpsrlq		\$26,$T0,$T1
+
+	vpsrlq		\$26,$H2,$D2
+	vpandq		$MASK,$H2,$H2
+	vpaddq		$D2,$D3,$H3		# h2 -> h3
+
+	 vpsrlq		\$14,$T4,$T3
+
+	vpsrlq		\$26,$H0,$D0
+	vpandq		$MASK,$H0,$H0
+	vpaddq		$D0,$H1,$H1		# h0 -> h1
+
+	 vpsrlq		\$40,$T4,$T4		# 4
+
+	vpsrlq		\$26,$H3,$D3
+	vpandq		$MASK,$H3,$H3
+	vpaddq		$D3,$H4,$H4		# h3 -> h4
+
+	 vpandq		$MASK,$T0,$T0		# 0
+	 #vpandq	$MASK,$T1,$T1		# 1
+	 #vpandq	$MASK,$T3,$T3		# 3
+	 #vporq		$PADBIT,$T4,$T4		# padbit, yes, always
+
+	sub		\$128,$len
+	ja		.Loop_avx512
+
+.Ltail_avx512:
+	################################################################
+	# while above multiplications were by r^8 in all lanes, in last
+	# iteration we multiply least significant lane by r^8 and most
+	# significant one by r, that's why table gets shifted...
+
+	vpsrlq		\$32,$R0,$R0		# 0105020603070408
+	vpsrlq		\$32,$R1,$R1
+	vpsrlq		\$32,$R2,$R2
+	vpsrlq		\$32,$S3,$S3
+	vpsrlq		\$32,$S4,$S4
+	vpsrlq		\$32,$R3,$R3
+	vpsrlq		\$32,$R4,$R4
+	vpsrlq		\$32,$S1,$S1
+	vpsrlq		\$32,$S2,$S2
+
+	################################################################
+	# load either next or last 64 byte of input
+	lea		($inp,$len),$inp
+
+	#vpaddq		$H2,$T2,$H2		# accumulate input
+	vpaddq		$H0,$T0,$H0
+
+	vpmuludq	$H2,$R1,$D3		# d3 = h2*r1
+	vpmuludq	$H2,$R2,$D4		# d4 = h2*r2
+	vpmuludq	$H2,$S3,$D0		# d0 = h2*s3
+	 vpandq		$MASK,$T1,$T1		# 1
+	vpmuludq	$H2,$S4,$D1		# d1 = h2*s4
+	 vpandq		$MASK,$T3,$T3		# 3
+	vpmuludq	$H2,$R0,$D2		# d2 = h2*r0
+	 vporq		$PADBIT,$T4,$T4		# padbit, yes, always
+	 vpaddq		$H1,$T1,$H1		# accumulate input
+	 vpaddq		$H3,$T3,$H3
+	 vpaddq		$H4,$T4,$H4
+
+	  vmovdqu	16*0($inp),%x#$T0
+	vpmuludq	$H0,$R3,$M3
+	vpmuludq	$H0,$R4,$M4
+	vpmuludq	$H0,$R0,$M0
+	vpmuludq	$H0,$R1,$M1
+	vpaddq		$M3,$D3,$D3		# d3 += h0*r3
+	vpaddq		$M4,$D4,$D4		# d4 += h0*r4
+	vpaddq		$M0,$D0,$D0		# d0 += h0*r0
+	vpaddq		$M1,$D1,$D1		# d1 += h0*r1
+
+	  vmovdqu	16*1($inp),%x#$T1
+	vpmuludq	$H1,$R2,$M3
+	vpmuludq	$H1,$R3,$M4
+	vpmuludq	$H1,$S4,$M0
+	vpmuludq	$H0,$R2,$M2
+	vpaddq		$M3,$D3,$D3		# d3 += h1*r2
+	vpaddq		$M4,$D4,$D4		# d4 += h1*r3
+	vpaddq		$M0,$D0,$D0		# d0 += h1*s4
+	vpaddq		$M2,$D2,$D2		# d2 += h0*r2
+
+	  vinserti128	\$1,16*2($inp),%y#$T0,%y#$T0
+	vpmuludq	$H3,$R0,$M3
+	vpmuludq	$H3,$R1,$M4
+	vpmuludq	$H1,$R0,$M1
+	vpmuludq	$H1,$R1,$M2
+	vpaddq		$M3,$D3,$D3		# d3 += h3*r0
+	vpaddq		$M4,$D4,$D4		# d4 += h3*r1
+	vpaddq		$M1,$D1,$D1		# d1 += h1*r0
+	vpaddq		$M2,$D2,$D2		# d2 += h1*r1
+
+	  vinserti128	\$1,16*3($inp),%y#$T1,%y#$T1
+	vpmuludq	$H4,$S4,$M3
+	vpmuludq	$H4,$R0,$M4
+	vpmuludq	$H3,$S2,$M0
+	vpmuludq	$H3,$S3,$M1
+	vpmuludq	$H3,$S4,$M2
+	vpaddq		$M3,$D3,$H3		# h3 = d3 + h4*s4
+	vpaddq		$M4,$D4,$D4		# d4 += h4*r0
+	vpaddq		$M0,$D0,$D0		# d0 += h3*s2
+	vpaddq		$M1,$D1,$D1		# d1 += h3*s3
+	vpaddq		$M2,$D2,$D2		# d2 += h3*s4
+
+	vpmuludq	$H4,$S1,$M0
+	vpmuludq	$H4,$S2,$M1
+	vpmuludq	$H4,$S3,$M2
+	vpaddq		$M0,$D0,$H0		# h0 = d0 + h4*s1
+	vpaddq		$M1,$D1,$H1		# h1 = d2 + h4*s2
+	vpaddq		$M2,$D2,$H2		# h2 = d3 + h4*s3
+
+	################################################################
+	# horizontal addition
+
+	mov		\$1,%eax
+	vpermq		\$0xb1,$H3,$D3
+	vpermq		\$0xb1,$D4,$H4
+	vpermq		\$0xb1,$H0,$D0
+	vpermq		\$0xb1,$H1,$D1
+	vpermq		\$0xb1,$H2,$D2
+	vpaddq		$D3,$H3,$H3
+	vpaddq		$D4,$H4,$H4
+	vpaddq		$D0,$H0,$H0
+	vpaddq		$D1,$H1,$H1
+	vpaddq		$D2,$H2,$H2
+
+	kmovw		%eax,%k3
+	vpermq		\$0x2,$H3,$D3
+	vpermq		\$0x2,$H4,$D4
+	vpermq		\$0x2,$H0,$D0
+	vpermq		\$0x2,$H1,$D1
+	vpermq		\$0x2,$H2,$D2
+	vpaddq		$D3,$H3,$H3
+	vpaddq		$D4,$H4,$H4
+	vpaddq		$D0,$H0,$H0
+	vpaddq		$D1,$H1,$H1
+	vpaddq		$D2,$H2,$H2
+
+	vextracti64x4	\$0x1,$H3,%y#$D3
+	vextracti64x4	\$0x1,$H4,%y#$D4
+	vextracti64x4	\$0x1,$H0,%y#$D0
+	vextracti64x4	\$0x1,$H1,%y#$D1
+	vextracti64x4	\$0x1,$H2,%y#$D2
+	vpaddq		$D3,$H3,${H3}{%k3}{z}	# keep single qword in case
+	vpaddq		$D4,$H4,${H4}{%k3}{z}	# it's passed to .Ltail_avx2
+	vpaddq		$D0,$H0,${H0}{%k3}{z}
+	vpaddq		$D1,$H1,${H1}{%k3}{z}
+	vpaddq		$D2,$H2,${H2}{%k3}{z}
+___
+map(s/%z/%y/,($T0,$T1,$T2,$T3,$T4, $PADBIT));
+map(s/%z/%y/,($H0,$H1,$H2,$H3,$H4, $D0,$D1,$D2,$D3,$D4, $MASK));
+$code.=<<___;
+	################################################################
+	# lazy reduction (interleaved with input splat)
+
+	vpsrlq		\$26,$H3,$D3
+	vpand		$MASK,$H3,$H3
+	 vpsrldq	\$6,$T0,$T2		# splat input
+	 vpsrldq	\$6,$T1,$T3
+	 vpunpckhqdq	$T1,$T0,$T4		# 4
+	vpaddq		$D3,$H4,$H4		# h3 -> h4
+
+	vpsrlq		\$26,$H0,$D0
+	vpand		$MASK,$H0,$H0
+	 vpunpcklqdq	$T3,$T2,$T2		# 2:3
+	 vpunpcklqdq	$T1,$T0,$T0		# 0:1
+	vpaddq		$D0,$H1,$H1		# h0 -> h1
+
+	vpsrlq		\$26,$H4,$D4
+	vpand		$MASK,$H4,$H4
+
+	vpsrlq		\$26,$H1,$D1
+	vpand		$MASK,$H1,$H1
+	 vpsrlq		\$30,$T2,$T3
+	 vpsrlq		\$4,$T2,$T2
+	vpaddq		$D1,$H2,$H2		# h1 -> h2
+
+	vpaddq		$D4,$H0,$H0
+	vpsllq		\$2,$D4,$D4
+	 vpsrlq		\$26,$T0,$T1
+	 vpsrlq		\$40,$T4,$T4		# 4
+	vpaddq		$D4,$H0,$H0		# h4 -> h0
+
+	vpsrlq		\$26,$H2,$D2
+	vpand		$MASK,$H2,$H2
+	 vpand		$MASK,$T2,$T2		# 2
+	 vpand		$MASK,$T0,$T0		# 0
+	vpaddq		$D2,$H3,$H3		# h2 -> h3
+
+	vpsrlq		\$26,$H0,$D0
+	vpand		$MASK,$H0,$H0
+	 vpaddq		$H2,$T2,$H2		# accumulate input for .Ltail_avx2
+	 vpand		$MASK,$T1,$T1		# 1
+	vpaddq		$D0,$H1,$H1		# h0 -> h1
+
+	vpsrlq		\$26,$H3,$D3
+	vpand		$MASK,$H3,$H3
+	 vpand		$MASK,$T3,$T3		# 3
+	 vpor		32(%rcx),$T4,$T4	# padbit, yes, always
+	vpaddq		$D3,$H4,$H4		# h3 -> h4
+
+	lea		0x90(%rsp),%rax		# size optimization for .Ltail_avx2
+	add		\$64,$len
+	jnz		.Ltail_avx2
+
+	vpsubq		$T2,$H2,$H2		# undo input accumulation
+	vmovd		%x#$H0,`4*0-48-64`($ctx)# save partially reduced
+	vmovd		%x#$H1,`4*1-48-64`($ctx)
+	vmovd		%x#$H2,`4*2-48-64`($ctx)
+	vmovd		%x#$H3,`4*3-48-64`($ctx)
+	vmovd		%x#$H4,`4*4-48-64`($ctx)
+	vzeroall
+___
+$code.=<<___	if ($win64);
+	movdqa		0x50(%r11),%xmm6
+	movdqa		0x60(%r11),%xmm7
+	movdqa		0x70(%r11),%xmm8
+	movdqa		0x80(%r11),%xmm9
+	movdqa		0x90(%r11),%xmm10
+	movdqa		0xa0(%r11),%xmm11
+	movdqa		0xb0(%r11),%xmm12
+	movdqa		0xc0(%r11),%xmm13
+	movdqa		0xd0(%r11),%xmm14
+	movdqa		0xe0(%r11),%xmm15
+	lea		0xf8(%r11),%rsp
+.Ldo_avx512_epilogue:
+___
+$code.=<<___	if (!$win64);
+	lea		8(%r11),%rsp
+.cfi_def_cfa		%rsp,8
+___
+$code.=<<___;
+	ret
+.cfi_endproc
+.size	poly1305_blocks_avx512,.-poly1305_blocks_avx512
+___
+if ($avx>3) {
+########################################################################
+# VPMADD52 version using 2^44 radix.
+#
+# One can argue that base 2^52 would be more natural. Well, even though
+# some operations would be more natural, one has to recognize couple of
+# things. Base 2^52 doesn't provide advantage over base 2^44 if you look
+# at amount of multiply-n-accumulate operations. Secondly, it makes it
+# impossible to pre-compute multiples of 5 [referred to as s[]/sN in
+# reference implementations], which means that more such operations
+# would have to be performed in inner loop, which in turn makes critical
+# path longer. In other words, even though base 2^44 reduction might
+# look less elegant, overall critical path is actually shorter...
+
+########################################################################
+# Layout of opaque area is following.
+#
+#	unsigned __int64 h[3];		# current hash value base 2^44
+#	unsigned __int64 s[2];		# key value*20 base 2^44
+#	unsigned __int64 r[3];		# key value base 2^44
+#	struct { unsigned __int64 r^1, r^3, r^2, r^4; } R[4];
+#					# r^n positions reflect
+#					# placement in register, not
+#					# memory, R[3] is R[1]*20
+
+$code.=<<___;
+.type	poly1305_init_base2_44,\@function,3
+.align	32
+poly1305_init_base2_44:
+	xor	%rax,%rax
+	mov	%rax,0($ctx)		# initialize hash value
+	mov	%rax,8($ctx)
+	mov	%rax,16($ctx)
+
+.Linit_base2_44:
+	lea	poly1305_blocks_vpmadd52(%rip),%r10
+	lea	poly1305_emit_base2_44(%rip),%r11
+
+	mov	\$0x0ffffffc0fffffff,%rax
+	mov	\$0x0ffffffc0ffffffc,%rcx
+	and	0($inp),%rax
+	mov	\$0x00000fffffffffff,%r8
+	and	8($inp),%rcx
+	mov	\$0x00000fffffffffff,%r9
+	and	%rax,%r8
+	shrd	\$44,%rcx,%rax
+	mov	%r8,40($ctx)		# r0
+	and	%r9,%rax
+	shr	\$24,%rcx
+	mov	%rax,48($ctx)		# r1
+	lea	(%rax,%rax,4),%rax	# *5
+	mov	%rcx,56($ctx)		# r2
+	shl	\$2,%rax		# magic <<2
+	lea	(%rcx,%rcx,4),%rcx	# *5
+	shl	\$2,%rcx		# magic <<2
+	mov	%rax,24($ctx)		# s1
+	mov	%rcx,32($ctx)		# s2
+	movq	\$-1,64($ctx)		# write impossible value
+___
+$code.=<<___	if ($flavour !~ /elf32/);
+	mov	%r10,0(%rdx)
+	mov	%r11,8(%rdx)
+___
+$code.=<<___	if ($flavour =~ /elf32/);
+	mov	%r10d,0(%rdx)
+	mov	%r11d,4(%rdx)
+___
+$code.=<<___;
+	mov	\$1,%eax
+	ret
+.size	poly1305_init_base2_44,.-poly1305_init_base2_44
+___
+{
+my ($H0,$H1,$H2,$r2r1r0,$r1r0s2,$r0s2s1,$Dlo,$Dhi) = map("%ymm$_",(0..5,16,17));
+my ($T0,$inp_permd,$inp_shift,$PAD) = map("%ymm$_",(18..21));
+my ($reduc_mask,$reduc_rght,$reduc_left) = map("%ymm$_",(22..25));
+
+$code.=<<___;
+.type	poly1305_blocks_vpmadd52,\@function,4
+.align	32
+poly1305_blocks_vpmadd52:
+	shr	\$4,$len
+	jz	.Lno_data_vpmadd52		# too short
+
+	shl	\$40,$padbit
+	mov	64($ctx),%r8			# peek on power of the key
+
+	# if powers of the key are not calculated yet, process up to 3
+	# blocks with this single-block subroutine, otherwise ensure that
+	# length is divisible by 2 blocks and pass the rest down to next
+	# subroutine...
+
+	mov	\$3,%rax
+	mov	\$1,%r10
+	cmp	\$4,$len			# is input long
+	cmovae	%r10,%rax
+	test	%r8,%r8				# is power value impossible?
+	cmovns	%r10,%rax
+
+	and	$len,%rax			# is input of favourable length?
+	jz	.Lblocks_vpmadd52_4x
+
+	sub		%rax,$len
+	mov		\$7,%r10d
+	mov		\$1,%r11d
+	kmovw		%r10d,%k7
+	lea		.L2_44_inp_permd(%rip),%r10
+	kmovw		%r11d,%k1
+
+	vmovq		$padbit,%x#$PAD
+	vmovdqa64	0(%r10),$inp_permd	# .L2_44_inp_permd
+	vmovdqa64	32(%r10),$inp_shift	# .L2_44_inp_shift
+	vpermq		\$0xcf,$PAD,$PAD
+	vmovdqa64	64(%r10),$reduc_mask	# .L2_44_mask
+
+	vmovdqu64	0($ctx),${Dlo}{%k7}{z}		# load hash value
+	vmovdqu64	40($ctx),${r2r1r0}{%k7}{z}	# load keys
+	vmovdqu64	32($ctx),${r1r0s2}{%k7}{z}
+	vmovdqu64	24($ctx),${r0s2s1}{%k7}{z}
+
+	vmovdqa64	96(%r10),$reduc_rght	# .L2_44_shift_rgt
+	vmovdqa64	128(%r10),$reduc_left	# .L2_44_shift_lft
+
+	jmp		.Loop_vpmadd52
+
+.align	32
+.Loop_vpmadd52:
+	vmovdqu32	0($inp),%x#$T0		# load input as ----3210
+	lea		16($inp),$inp
+
+	vpermd		$T0,$inp_permd,$T0	# ----3210 -> --322110
+	vpsrlvq		$inp_shift,$T0,$T0
+	vpandq		$reduc_mask,$T0,$T0
+	vporq		$PAD,$T0,$T0
+
+	vpaddq		$T0,$Dlo,$Dlo		# accumulate input
+
+	vpermq		\$0,$Dlo,${H0}{%k7}{z}	# smash hash value
+	vpermq		\$0b01010101,$Dlo,${H1}{%k7}{z}
+	vpermq		\$0b10101010,$Dlo,${H2}{%k7}{z}
+
+	vpxord		$Dlo,$Dlo,$Dlo
+	vpxord		$Dhi,$Dhi,$Dhi
+
+	vpmadd52luq	$r2r1r0,$H0,$Dlo
+	vpmadd52huq	$r2r1r0,$H0,$Dhi
+
+	vpmadd52luq	$r1r0s2,$H1,$Dlo
+	vpmadd52huq	$r1r0s2,$H1,$Dhi
+
+	vpmadd52luq	$r0s2s1,$H2,$Dlo
+	vpmadd52huq	$r0s2s1,$H2,$Dhi
+
+	vpsrlvq		$reduc_rght,$Dlo,$T0	# 0 in topmost qword
+	vpsllvq		$reduc_left,$Dhi,$Dhi	# 0 in topmost qword
+	vpandq		$reduc_mask,$Dlo,$Dlo
+
+	vpaddq		$T0,$Dhi,$Dhi
+
+	vpermq		\$0b10010011,$Dhi,$Dhi	# 0 in lowest qword
+
+	vpaddq		$Dhi,$Dlo,$Dlo		# note topmost qword :-)
+
+	vpsrlvq		$reduc_rght,$Dlo,$T0	# 0 in topmost word
+	vpandq		$reduc_mask,$Dlo,$Dlo
+
+	vpermq		\$0b10010011,$T0,$T0
+
+	vpaddq		$T0,$Dlo,$Dlo
+
+	vpermq		\$0b10010011,$Dlo,${T0}{%k1}{z}
+
+	vpaddq		$T0,$Dlo,$Dlo
+	vpsllq		\$2,$T0,$T0
+
+	vpaddq		$T0,$Dlo,$Dlo
+
+	dec		%rax			# len-=16
+	jnz		.Loop_vpmadd52
+
+	vmovdqu64	$Dlo,0($ctx){%k7}	# store hash value
+
+	test		$len,$len
+	jnz		.Lblocks_vpmadd52_4x
+
+.Lno_data_vpmadd52:
+	ret
+.size	poly1305_blocks_vpmadd52,.-poly1305_blocks_vpmadd52
+___
+}
+{
+########################################################################
+# As implied by its name 4x subroutine processes 4 blocks in parallel
+# (but handles even 4*n+2 blocks lengths). It takes up to 4th key power
+# and is handled in 256-bit %ymm registers.
+
+my ($H0,$H1,$H2,$R0,$R1,$R2,$S1,$S2) = map("%ymm$_",(0..5,16,17));
+my ($D0lo,$D0hi,$D1lo,$D1hi,$D2lo,$D2hi) = map("%ymm$_",(18..23));
+my ($T0,$T1,$T2,$T3,$mask44,$mask42,$tmp,$PAD) = map("%ymm$_",(24..31));
+
+$code.=<<___;
+.type	poly1305_blocks_vpmadd52_4x,\@function,4
+.align	32
+poly1305_blocks_vpmadd52_4x:
+	shr	\$4,$len
+	jz	.Lno_data_vpmadd52_4x		# too short
+
+	shl	\$40,$padbit
+	mov	64($ctx),%r8			# peek on power of the key
+
+.Lblocks_vpmadd52_4x:
+	vpbroadcastq	$padbit,$PAD
+
+	vmovdqa64	.Lx_mask44(%rip),$mask44
+	mov		\$5,%eax
+	vmovdqa64	.Lx_mask42(%rip),$mask42
+	kmovw		%eax,%k1		# used in 2x path
+
+	test		%r8,%r8			# is power value impossible?
+	js		.Linit_vpmadd52		# if it is, then init R[4]
+
+	vmovq		0($ctx),%x#$H0		# load current hash value
+	vmovq		8($ctx),%x#$H1
+	vmovq		16($ctx),%x#$H2
+
+	test		\$3,$len		# is length 4*n+2?
+	jnz		.Lblocks_vpmadd52_2x_do
+
+.Lblocks_vpmadd52_4x_do:
+	vpbroadcastq	64($ctx),$R0		# load 4th power of the key
+	vpbroadcastq	96($ctx),$R1
+	vpbroadcastq	128($ctx),$R2
+	vpbroadcastq	160($ctx),$S1
+
+.Lblocks_vpmadd52_4x_key_loaded:
+	vpsllq		\$2,$R2,$S2		# S2 = R2*5*4
+	vpaddq		$R2,$S2,$S2
+	vpsllq		\$2,$S2,$S2
+
+	test		\$7,$len		# is len 8*n?
+	jz		.Lblocks_vpmadd52_8x
+
+	vmovdqu64	16*0($inp),$T2		# load data
+	vmovdqu64	16*2($inp),$T3
+	lea		16*4($inp),$inp
+
+	vpunpcklqdq	$T3,$T2,$T1		# transpose data
+	vpunpckhqdq	$T3,$T2,$T3
+
+	# at this point 64-bit lanes are ordered as 3-1-2-0
+
+	vpsrlq		\$24,$T3,$T2		# splat the data
+	vporq		$PAD,$T2,$T2
+	 vpaddq		$T2,$H2,$H2		# accumulate input
+	vpandq		$mask44,$T1,$T0
+	vpsrlq		\$44,$T1,$T1
+	vpsllq		\$20,$T3,$T3
+	vporq		$T3,$T1,$T1
+	vpandq		$mask44,$T1,$T1
+
+	sub		\$4,$len
+	jz		.Ltail_vpmadd52_4x
+	jmp		.Loop_vpmadd52_4x
+	ud2
+
+.align	32
+.Linit_vpmadd52:
+	vmovq		24($ctx),%x#$S1		# load key
+	vmovq		56($ctx),%x#$H2
+	vmovq		32($ctx),%x#$S2
+	vmovq		40($ctx),%x#$R0
+	vmovq		48($ctx),%x#$R1
+
+	vmovdqa		$R0,$H0
+	vmovdqa		$R1,$H1
+	vmovdqa		$H2,$R2
+
+	mov		\$2,%eax
+
+.Lmul_init_vpmadd52:
+	vpxorq		$D0lo,$D0lo,$D0lo
+	vpmadd52luq	$H2,$S1,$D0lo
+	vpxorq		$D0hi,$D0hi,$D0hi
+	vpmadd52huq	$H2,$S1,$D0hi
+	vpxorq		$D1lo,$D1lo,$D1lo
+	vpmadd52luq	$H2,$S2,$D1lo
+	vpxorq		$D1hi,$D1hi,$D1hi
+	vpmadd52huq	$H2,$S2,$D1hi
+	vpxorq		$D2lo,$D2lo,$D2lo
+	vpmadd52luq	$H2,$R0,$D2lo
+	vpxorq		$D2hi,$D2hi,$D2hi
+	vpmadd52huq	$H2,$R0,$D2hi
+
+	vpmadd52luq	$H0,$R0,$D0lo
+	vpmadd52huq	$H0,$R0,$D0hi
+	vpmadd52luq	$H0,$R1,$D1lo
+	vpmadd52huq	$H0,$R1,$D1hi
+	vpmadd52luq	$H0,$R2,$D2lo
+	vpmadd52huq	$H0,$R2,$D2hi
+
+	vpmadd52luq	$H1,$S2,$D0lo
+	vpmadd52huq	$H1,$S2,$D0hi
+	vpmadd52luq	$H1,$R0,$D1lo
+	vpmadd52huq	$H1,$R0,$D1hi
+	vpmadd52luq	$H1,$R1,$D2lo
+	vpmadd52huq	$H1,$R1,$D2hi
+
+	################################################################
+	# partial reduction
+	vpsrlq		\$44,$D0lo,$tmp
+	vpsllq		\$8,$D0hi,$D0hi
+	vpandq		$mask44,$D0lo,$H0
+	vpaddq		$tmp,$D0hi,$D0hi
+
+	vpaddq		$D0hi,$D1lo,$D1lo
+
+	vpsrlq		\$44,$D1lo,$tmp
+	vpsllq		\$8,$D1hi,$D1hi
+	vpandq		$mask44,$D1lo,$H1
+	vpaddq		$tmp,$D1hi,$D1hi
+
+	vpaddq		$D1hi,$D2lo,$D2lo
+
+	vpsrlq		\$42,$D2lo,$tmp
+	vpsllq		\$10,$D2hi,$D2hi
+	vpandq		$mask42,$D2lo,$H2
+	vpaddq		$tmp,$D2hi,$D2hi
+
+	vpaddq		$D2hi,$H0,$H0
+	vpsllq		\$2,$D2hi,$D2hi
+
+	vpaddq		$D2hi,$H0,$H0
+
+	vpsrlq		\$44,$H0,$tmp		# additional step
+	vpandq		$mask44,$H0,$H0
+
+	vpaddq		$tmp,$H1,$H1
+
+	dec		%eax
+	jz		.Ldone_init_vpmadd52
+
+	vpunpcklqdq	$R1,$H1,$R1		# 1,2
+	vpbroadcastq	%x#$H1,%x#$H1		# 2,2
+	vpunpcklqdq	$R2,$H2,$R2
+	vpbroadcastq	%x#$H2,%x#$H2
+	vpunpcklqdq	$R0,$H0,$R0
+	vpbroadcastq	%x#$H0,%x#$H0
+
+	vpsllq		\$2,$R1,$S1		# S1 = R1*5*4
+	vpsllq		\$2,$R2,$S2		# S2 = R2*5*4
+	vpaddq		$R1,$S1,$S1
+	vpaddq		$R2,$S2,$S2
+	vpsllq		\$2,$S1,$S1
+	vpsllq		\$2,$S2,$S2
+
+	jmp		.Lmul_init_vpmadd52
+	ud2
+
+.align	32
+.Ldone_init_vpmadd52:
+	vinserti128	\$1,%x#$R1,$H1,$R1	# 1,2,3,4
+	vinserti128	\$1,%x#$R2,$H2,$R2
+	vinserti128	\$1,%x#$R0,$H0,$R0
+
+	vpermq		\$0b11011000,$R1,$R1	# 1,3,2,4
+	vpermq		\$0b11011000,$R2,$R2
+	vpermq		\$0b11011000,$R0,$R0
+
+	vpsllq		\$2,$R1,$S1		# S1 = R1*5*4
+	vpaddq		$R1,$S1,$S1
+	vpsllq		\$2,$S1,$S1
+
+	vmovq		0($ctx),%x#$H0		# load current hash value
+	vmovq		8($ctx),%x#$H1
+	vmovq		16($ctx),%x#$H2
+
+	test		\$3,$len		# is length 4*n+2?
+	jnz		.Ldone_init_vpmadd52_2x
+
+	vmovdqu64	$R0,64($ctx)		# save key powers
+	vpbroadcastq	%x#$R0,$R0		# broadcast 4th power
+	vmovdqu64	$R1,96($ctx)
+	vpbroadcastq	%x#$R1,$R1
+	vmovdqu64	$R2,128($ctx)
+	vpbroadcastq	%x#$R2,$R2
+	vmovdqu64	$S1,160($ctx)
+	vpbroadcastq	%x#$S1,$S1
+
+	jmp		.Lblocks_vpmadd52_4x_key_loaded
+	ud2
+
+.align	32
+.Ldone_init_vpmadd52_2x:
+	vmovdqu64	$R0,64($ctx)		# save key powers
+	vpsrldq		\$8,$R0,$R0		# 0-1-0-2
+	vmovdqu64	$R1,96($ctx)
+	vpsrldq		\$8,$R1,$R1
+	vmovdqu64	$R2,128($ctx)
+	vpsrldq		\$8,$R2,$R2
+	vmovdqu64	$S1,160($ctx)
+	vpsrldq		\$8,$S1,$S1
+	jmp		.Lblocks_vpmadd52_2x_key_loaded
+	ud2
+
+.align	32
+.Lblocks_vpmadd52_2x_do:
+	vmovdqu64	128+8($ctx),${R2}{%k1}{z}# load 2nd and 1st key powers
+	vmovdqu64	160+8($ctx),${S1}{%k1}{z}
+	vmovdqu64	64+8($ctx),${R0}{%k1}{z}
+	vmovdqu64	96+8($ctx),${R1}{%k1}{z}
+
+.Lblocks_vpmadd52_2x_key_loaded:
+	vmovdqu64	16*0($inp),$T2		# load data
+	vpxorq		$T3,$T3,$T3
+	lea		16*2($inp),$inp
+
+	vpunpcklqdq	$T3,$T2,$T1		# transpose data
+	vpunpckhqdq	$T3,$T2,$T3
+
+	# at this point 64-bit lanes are ordered as x-1-x-0
+
+	vpsrlq		\$24,$T3,$T2		# splat the data
+	vporq		$PAD,$T2,$T2
+	 vpaddq		$T2,$H2,$H2		# accumulate input
+	vpandq		$mask44,$T1,$T0
+	vpsrlq		\$44,$T1,$T1
+	vpsllq		\$20,$T3,$T3
+	vporq		$T3,$T1,$T1
+	vpandq		$mask44,$T1,$T1
+
+	jmp		.Ltail_vpmadd52_2x
+	ud2
+
+.align	32
+.Loop_vpmadd52_4x:
+	#vpaddq		$T2,$H2,$H2		# accumulate input
+	vpaddq		$T0,$H0,$H0
+	vpaddq		$T1,$H1,$H1
+
+	vpxorq		$D0lo,$D0lo,$D0lo
+	vpmadd52luq	$H2,$S1,$D0lo
+	vpxorq		$D0hi,$D0hi,$D0hi
+	vpmadd52huq	$H2,$S1,$D0hi
+	vpxorq		$D1lo,$D1lo,$D1lo
+	vpmadd52luq	$H2,$S2,$D1lo
+	vpxorq		$D1hi,$D1hi,$D1hi
+	vpmadd52huq	$H2,$S2,$D1hi
+	vpxorq		$D2lo,$D2lo,$D2lo
+	vpmadd52luq	$H2,$R0,$D2lo
+	vpxorq		$D2hi,$D2hi,$D2hi
+	vpmadd52huq	$H2,$R0,$D2hi
+
+	 vmovdqu64	16*0($inp),$T2		# load data
+	 vmovdqu64	16*2($inp),$T3
+	 lea		16*4($inp),$inp
+	vpmadd52luq	$H0,$R0,$D0lo
+	vpmadd52huq	$H0,$R0,$D0hi
+	vpmadd52luq	$H0,$R1,$D1lo
+	vpmadd52huq	$H0,$R1,$D1hi
+	vpmadd52luq	$H0,$R2,$D2lo
+	vpmadd52huq	$H0,$R2,$D2hi
+
+	 vpunpcklqdq	$T3,$T2,$T1		# transpose data
+	 vpunpckhqdq	$T3,$T2,$T3
+	vpmadd52luq	$H1,$S2,$D0lo
+	vpmadd52huq	$H1,$S2,$D0hi
+	vpmadd52luq	$H1,$R0,$D1lo
+	vpmadd52huq	$H1,$R0,$D1hi
+	vpmadd52luq	$H1,$R1,$D2lo
+	vpmadd52huq	$H1,$R1,$D2hi
+
+	################################################################
+	# partial reduction (interleaved with data splat)
+	vpsrlq		\$44,$D0lo,$tmp
+	vpsllq		\$8,$D0hi,$D0hi
+	vpandq		$mask44,$D0lo,$H0
+	vpaddq		$tmp,$D0hi,$D0hi
+
+	 vpsrlq		\$24,$T3,$T2
+	 vporq		$PAD,$T2,$T2
+	vpaddq		$D0hi,$D1lo,$D1lo
+
+	vpsrlq		\$44,$D1lo,$tmp
+	vpsllq		\$8,$D1hi,$D1hi
+	vpandq		$mask44,$D1lo,$H1
+	vpaddq		$tmp,$D1hi,$D1hi
+
+	 vpandq		$mask44,$T1,$T0
+	 vpsrlq		\$44,$T1,$T1
+	 vpsllq		\$20,$T3,$T3
+	vpaddq		$D1hi,$D2lo,$D2lo
+
+	vpsrlq		\$42,$D2lo,$tmp
+	vpsllq		\$10,$D2hi,$D2hi
+	vpandq		$mask42,$D2lo,$H2
+	vpaddq		$tmp,$D2hi,$D2hi
+
+	  vpaddq	$T2,$H2,$H2		# accumulate input
+	vpaddq		$D2hi,$H0,$H0
+	vpsllq		\$2,$D2hi,$D2hi
+
+	vpaddq		$D2hi,$H0,$H0
+	 vporq		$T3,$T1,$T1
+	 vpandq		$mask44,$T1,$T1
+
+	vpsrlq		\$44,$H0,$tmp		# additional step
+	vpandq		$mask44,$H0,$H0
+
+	vpaddq		$tmp,$H1,$H1
+
+	sub		\$4,$len		# len-=64
+	jnz		.Loop_vpmadd52_4x
+
+.Ltail_vpmadd52_4x:
+	vmovdqu64	128($ctx),$R2		# load all key powers
+	vmovdqu64	160($ctx),$S1
+	vmovdqu64	64($ctx),$R0
+	vmovdqu64	96($ctx),$R1
+
+.Ltail_vpmadd52_2x:
+	vpsllq		\$2,$R2,$S2		# S2 = R2*5*4
+	vpaddq		$R2,$S2,$S2
+	vpsllq		\$2,$S2,$S2
+
+	#vpaddq		$T2,$H2,$H2		# accumulate input
+	vpaddq		$T0,$H0,$H0
+	vpaddq		$T1,$H1,$H1
+
+	vpxorq		$D0lo,$D0lo,$D0lo
+	vpmadd52luq	$H2,$S1,$D0lo
+	vpxorq		$D0hi,$D0hi,$D0hi
+	vpmadd52huq	$H2,$S1,$D0hi
+	vpxorq		$D1lo,$D1lo,$D1lo
+	vpmadd52luq	$H2,$S2,$D1lo
+	vpxorq		$D1hi,$D1hi,$D1hi
+	vpmadd52huq	$H2,$S2,$D1hi
+	vpxorq		$D2lo,$D2lo,$D2lo
+	vpmadd52luq	$H2,$R0,$D2lo
+	vpxorq		$D2hi,$D2hi,$D2hi
+	vpmadd52huq	$H2,$R0,$D2hi
+
+	vpmadd52luq	$H0,$R0,$D0lo
+	vpmadd52huq	$H0,$R0,$D0hi
+	vpmadd52luq	$H0,$R1,$D1lo
+	vpmadd52huq	$H0,$R1,$D1hi
+	vpmadd52luq	$H0,$R2,$D2lo
+	vpmadd52huq	$H0,$R2,$D2hi
+
+	vpmadd52luq	$H1,$S2,$D0lo
+	vpmadd52huq	$H1,$S2,$D0hi
+	vpmadd52luq	$H1,$R0,$D1lo
+	vpmadd52huq	$H1,$R0,$D1hi
+	vpmadd52luq	$H1,$R1,$D2lo
+	vpmadd52huq	$H1,$R1,$D2hi
+
+	################################################################
+	# horizontal addition
+
+	mov		\$1,%eax
+	kmovw		%eax,%k1
+	vpsrldq		\$8,$D0lo,$T0
+	vpsrldq		\$8,$D0hi,$H0
+	vpsrldq		\$8,$D1lo,$T1
+	vpsrldq		\$8,$D1hi,$H1
+	vpaddq		$T0,$D0lo,$D0lo
+	vpaddq		$H0,$D0hi,$D0hi
+	vpsrldq		\$8,$D2lo,$T2
+	vpsrldq		\$8,$D2hi,$H2
+	vpaddq		$T1,$D1lo,$D1lo
+	vpaddq		$H1,$D1hi,$D1hi
+	 vpermq		\$0x2,$D0lo,$T0
+	 vpermq		\$0x2,$D0hi,$H0
+	vpaddq		$T2,$D2lo,$D2lo
+	vpaddq		$H2,$D2hi,$D2hi
+
+	vpermq		\$0x2,$D1lo,$T1
+	vpermq		\$0x2,$D1hi,$H1
+	vpaddq		$T0,$D0lo,${D0lo}{%k1}{z}
+	vpaddq		$H0,$D0hi,${D0hi}{%k1}{z}
+	vpermq		\$0x2,$D2lo,$T2
+	vpermq		\$0x2,$D2hi,$H2
+	vpaddq		$T1,$D1lo,${D1lo}{%k1}{z}
+	vpaddq		$H1,$D1hi,${D1hi}{%k1}{z}
+	vpaddq		$T2,$D2lo,${D2lo}{%k1}{z}
+	vpaddq		$H2,$D2hi,${D2hi}{%k1}{z}
+
+	################################################################
+	# partial reduction
+	vpsrlq		\$44,$D0lo,$tmp
+	vpsllq		\$8,$D0hi,$D0hi
+	vpandq		$mask44,$D0lo,$H0
+	vpaddq		$tmp,$D0hi,$D0hi
+
+	vpaddq		$D0hi,$D1lo,$D1lo
+
+	vpsrlq		\$44,$D1lo,$tmp
+	vpsllq		\$8,$D1hi,$D1hi
+	vpandq		$mask44,$D1lo,$H1
+	vpaddq		$tmp,$D1hi,$D1hi
+
+	vpaddq		$D1hi,$D2lo,$D2lo
+
+	vpsrlq		\$42,$D2lo,$tmp
+	vpsllq		\$10,$D2hi,$D2hi
+	vpandq		$mask42,$D2lo,$H2
+	vpaddq		$tmp,$D2hi,$D2hi
+
+	vpaddq		$D2hi,$H0,$H0
+	vpsllq		\$2,$D2hi,$D2hi
+
+	vpaddq		$D2hi,$H0,$H0
+
+	vpsrlq		\$44,$H0,$tmp		# additional step
+	vpandq		$mask44,$H0,$H0
+
+	vpaddq		$tmp,$H1,$H1
+						# at this point $len is
+						# either 4*n+2 or 0...
+	sub		\$2,$len		# len-=32
+	ja		.Lblocks_vpmadd52_4x_do
+
+	vmovq		%x#$H0,0($ctx)
+	vmovq		%x#$H1,8($ctx)
+	vmovq		%x#$H2,16($ctx)
+	vzeroall
+
+.Lno_data_vpmadd52_4x:
+	ret
+.size	poly1305_blocks_vpmadd52_4x,.-poly1305_blocks_vpmadd52_4x
+___
+}
+{
+########################################################################
+# As implied by its name 8x subroutine processes 8 blocks in parallel...
+# This is intermediate version, as it's used only in cases when input
+# length is either 8*n, 8*n+1 or 8*n+2...
+
+my ($H0,$H1,$H2,$R0,$R1,$R2,$S1,$S2) = map("%ymm$_",(0..5,16,17));
+my ($D0lo,$D0hi,$D1lo,$D1hi,$D2lo,$D2hi) = map("%ymm$_",(18..23));
+my ($T0,$T1,$T2,$T3,$mask44,$mask42,$tmp,$PAD) = map("%ymm$_",(24..31));
+my ($RR0,$RR1,$RR2,$SS1,$SS2) = map("%ymm$_",(6..10));
+
+$code.=<<___;
+.type	poly1305_blocks_vpmadd52_8x,\@function,4
+.align	32
+poly1305_blocks_vpmadd52_8x:
+	shr	\$4,$len
+	jz	.Lno_data_vpmadd52_8x		# too short
+
+	shl	\$40,$padbit
+	mov	64($ctx),%r8			# peek on power of the key
+
+	vmovdqa64	.Lx_mask44(%rip),$mask44
+	vmovdqa64	.Lx_mask42(%rip),$mask42
+
+	test	%r8,%r8				# is power value impossible?
+	js	.Linit_vpmadd52			# if it is, then init R[4]
+
+	vmovq	0($ctx),%x#$H0			# load current hash value
+	vmovq	8($ctx),%x#$H1
+	vmovq	16($ctx),%x#$H2
+
+.Lblocks_vpmadd52_8x:
+	################################################################
+	# fist we calculate more key powers
+
+	vmovdqu64	128($ctx),$R2		# load 1-3-2-4 powers
+	vmovdqu64	160($ctx),$S1
+	vmovdqu64	64($ctx),$R0
+	vmovdqu64	96($ctx),$R1
+
+	vpsllq		\$2,$R2,$S2		# S2 = R2*5*4
+	vpaddq		$R2,$S2,$S2
+	vpsllq		\$2,$S2,$S2
+
+	vpbroadcastq	%x#$R2,$RR2		# broadcast 4th power
+	vpbroadcastq	%x#$R0,$RR0
+	vpbroadcastq	%x#$R1,$RR1
+
+	vpxorq		$D0lo,$D0lo,$D0lo
+	vpmadd52luq	$RR2,$S1,$D0lo
+	vpxorq		$D0hi,$D0hi,$D0hi
+	vpmadd52huq	$RR2,$S1,$D0hi
+	vpxorq		$D1lo,$D1lo,$D1lo
+	vpmadd52luq	$RR2,$S2,$D1lo
+	vpxorq		$D1hi,$D1hi,$D1hi
+	vpmadd52huq	$RR2,$S2,$D1hi
+	vpxorq		$D2lo,$D2lo,$D2lo
+	vpmadd52luq	$RR2,$R0,$D2lo
+	vpxorq		$D2hi,$D2hi,$D2hi
+	vpmadd52huq	$RR2,$R0,$D2hi
+
+	vpmadd52luq	$RR0,$R0,$D0lo
+	vpmadd52huq	$RR0,$R0,$D0hi
+	vpmadd52luq	$RR0,$R1,$D1lo
+	vpmadd52huq	$RR0,$R1,$D1hi
+	vpmadd52luq	$RR0,$R2,$D2lo
+	vpmadd52huq	$RR0,$R2,$D2hi
+
+	vpmadd52luq	$RR1,$S2,$D0lo
+	vpmadd52huq	$RR1,$S2,$D0hi
+	vpmadd52luq	$RR1,$R0,$D1lo
+	vpmadd52huq	$RR1,$R0,$D1hi
+	vpmadd52luq	$RR1,$R1,$D2lo
+	vpmadd52huq	$RR1,$R1,$D2hi
+
+	################################################################
+	# partial reduction
+	vpsrlq		\$44,$D0lo,$tmp
+	vpsllq		\$8,$D0hi,$D0hi
+	vpandq		$mask44,$D0lo,$RR0
+	vpaddq		$tmp,$D0hi,$D0hi
+
+	vpaddq		$D0hi,$D1lo,$D1lo
+
+	vpsrlq		\$44,$D1lo,$tmp
+	vpsllq		\$8,$D1hi,$D1hi
+	vpandq		$mask44,$D1lo,$RR1
+	vpaddq		$tmp,$D1hi,$D1hi
+
+	vpaddq		$D1hi,$D2lo,$D2lo
+
+	vpsrlq		\$42,$D2lo,$tmp
+	vpsllq		\$10,$D2hi,$D2hi
+	vpandq		$mask42,$D2lo,$RR2
+	vpaddq		$tmp,$D2hi,$D2hi
+
+	vpaddq		$D2hi,$RR0,$RR0
+	vpsllq		\$2,$D2hi,$D2hi
+
+	vpaddq		$D2hi,$RR0,$RR0
+
+	vpsrlq		\$44,$RR0,$tmp		# additional step
+	vpandq		$mask44,$RR0,$RR0
+
+	vpaddq		$tmp,$RR1,$RR1
+
+	################################################################
+	# At this point Rx holds 1324 powers, RRx - 5768, and the goal
+	# is 15263748, which reflects how data is loaded...
+
+	vpunpcklqdq	$R2,$RR2,$T2		# 3748
+	vpunpckhqdq	$R2,$RR2,$R2		# 1526
+	vpunpcklqdq	$R0,$RR0,$T0
+	vpunpckhqdq	$R0,$RR0,$R0
+	vpunpcklqdq	$R1,$RR1,$T1
+	vpunpckhqdq	$R1,$RR1,$R1
+___
+######## switch to %zmm
+map(s/%y/%z/, $H0,$H1,$H2,$R0,$R1,$R2,$S1,$S2);
+map(s/%y/%z/, $D0lo,$D0hi,$D1lo,$D1hi,$D2lo,$D2hi);
+map(s/%y/%z/, $T0,$T1,$T2,$T3,$mask44,$mask42,$tmp,$PAD);
+map(s/%y/%z/, $RR0,$RR1,$RR2,$SS1,$SS2);
+
+$code.=<<___;
+	vshufi64x2	\$0x44,$R2,$T2,$RR2	# 15263748
+	vshufi64x2	\$0x44,$R0,$T0,$RR0
+	vshufi64x2	\$0x44,$R1,$T1,$RR1
+
+	vmovdqu64	16*0($inp),$T2		# load data
+	vmovdqu64	16*4($inp),$T3
+	lea		16*8($inp),$inp
+
+	vpsllq		\$2,$RR2,$SS2		# S2 = R2*5*4
+	vpsllq		\$2,$RR1,$SS1		# S1 = R1*5*4
+	vpaddq		$RR2,$SS2,$SS2
+	vpaddq		$RR1,$SS1,$SS1
+	vpsllq		\$2,$SS2,$SS2
+	vpsllq		\$2,$SS1,$SS1
+
+	vpbroadcastq	$padbit,$PAD
+	vpbroadcastq	%x#$mask44,$mask44
+	vpbroadcastq	%x#$mask42,$mask42
+
+	vpbroadcastq	%x#$SS1,$S1		# broadcast 8th power
+	vpbroadcastq	%x#$SS2,$S2
+	vpbroadcastq	%x#$RR0,$R0
+	vpbroadcastq	%x#$RR1,$R1
+	vpbroadcastq	%x#$RR2,$R2
+
+	vpunpcklqdq	$T3,$T2,$T1		# transpose data
+	vpunpckhqdq	$T3,$T2,$T3
+
+	# at this point 64-bit lanes are ordered as 73625140
+
+	vpsrlq		\$24,$T3,$T2		# splat the data
+	vporq		$PAD,$T2,$T2
+	 vpaddq		$T2,$H2,$H2		# accumulate input
+	vpandq		$mask44,$T1,$T0
+	vpsrlq		\$44,$T1,$T1
+	vpsllq		\$20,$T3,$T3
+	vporq		$T3,$T1,$T1
+	vpandq		$mask44,$T1,$T1
+
+	sub		\$8,$len
+	jz		.Ltail_vpmadd52_8x
+	jmp		.Loop_vpmadd52_8x
+
+.align	32
+.Loop_vpmadd52_8x:
+	#vpaddq		$T2,$H2,$H2		# accumulate input
+	vpaddq		$T0,$H0,$H0
+	vpaddq		$T1,$H1,$H1
+
+	vpxorq		$D0lo,$D0lo,$D0lo
+	vpmadd52luq	$H2,$S1,$D0lo
+	vpxorq		$D0hi,$D0hi,$D0hi
+	vpmadd52huq	$H2,$S1,$D0hi
+	vpxorq		$D1lo,$D1lo,$D1lo
+	vpmadd52luq	$H2,$S2,$D1lo
+	vpxorq		$D1hi,$D1hi,$D1hi
+	vpmadd52huq	$H2,$S2,$D1hi
+	vpxorq		$D2lo,$D2lo,$D2lo
+	vpmadd52luq	$H2,$R0,$D2lo
+	vpxorq		$D2hi,$D2hi,$D2hi
+	vpmadd52huq	$H2,$R0,$D2hi
+
+	 vmovdqu64	16*0($inp),$T2		# load data
+	 vmovdqu64	16*4($inp),$T3
+	 lea		16*8($inp),$inp
+	vpmadd52luq	$H0,$R0,$D0lo
+	vpmadd52huq	$H0,$R0,$D0hi
+	vpmadd52luq	$H0,$R1,$D1lo
+	vpmadd52huq	$H0,$R1,$D1hi
+	vpmadd52luq	$H0,$R2,$D2lo
+	vpmadd52huq	$H0,$R2,$D2hi
+
+	 vpunpcklqdq	$T3,$T2,$T1		# transpose data
+	 vpunpckhqdq	$T3,$T2,$T3
+	vpmadd52luq	$H1,$S2,$D0lo
+	vpmadd52huq	$H1,$S2,$D0hi
+	vpmadd52luq	$H1,$R0,$D1lo
+	vpmadd52huq	$H1,$R0,$D1hi
+	vpmadd52luq	$H1,$R1,$D2lo
+	vpmadd52huq	$H1,$R1,$D2hi
+
+	################################################################
+	# partial reduction (interleaved with data splat)
+	vpsrlq		\$44,$D0lo,$tmp
+	vpsllq		\$8,$D0hi,$D0hi
+	vpandq		$mask44,$D0lo,$H0
+	vpaddq		$tmp,$D0hi,$D0hi
+
+	 vpsrlq		\$24,$T3,$T2
+	 vporq		$PAD,$T2,$T2
+	vpaddq		$D0hi,$D1lo,$D1lo
+
+	vpsrlq		\$44,$D1lo,$tmp
+	vpsllq		\$8,$D1hi,$D1hi
+	vpandq		$mask44,$D1lo,$H1
+	vpaddq		$tmp,$D1hi,$D1hi
+
+	 vpandq		$mask44,$T1,$T0
+	 vpsrlq		\$44,$T1,$T1
+	 vpsllq		\$20,$T3,$T3
+	vpaddq		$D1hi,$D2lo,$D2lo
+
+	vpsrlq		\$42,$D2lo,$tmp
+	vpsllq		\$10,$D2hi,$D2hi
+	vpandq		$mask42,$D2lo,$H2
+	vpaddq		$tmp,$D2hi,$D2hi
+
+	  vpaddq	$T2,$H2,$H2		# accumulate input
+	vpaddq		$D2hi,$H0,$H0
+	vpsllq		\$2,$D2hi,$D2hi
+
+	vpaddq		$D2hi,$H0,$H0
+	 vporq		$T3,$T1,$T1
+	 vpandq		$mask44,$T1,$T1
+
+	vpsrlq		\$44,$H0,$tmp		# additional step
+	vpandq		$mask44,$H0,$H0
+
+	vpaddq		$tmp,$H1,$H1
+
+	sub		\$8,$len		# len-=128
+	jnz		.Loop_vpmadd52_8x
+
+.Ltail_vpmadd52_8x:
+	#vpaddq		$T2,$H2,$H2		# accumulate input
+	vpaddq		$T0,$H0,$H0
+	vpaddq		$T1,$H1,$H1
+
+	vpxorq		$D0lo,$D0lo,$D0lo
+	vpmadd52luq	$H2,$SS1,$D0lo
+	vpxorq		$D0hi,$D0hi,$D0hi
+	vpmadd52huq	$H2,$SS1,$D0hi
+	vpxorq		$D1lo,$D1lo,$D1lo
+	vpmadd52luq	$H2,$SS2,$D1lo
+	vpxorq		$D1hi,$D1hi,$D1hi
+	vpmadd52huq	$H2,$SS2,$D1hi
+	vpxorq		$D2lo,$D2lo,$D2lo
+	vpmadd52luq	$H2,$RR0,$D2lo
+	vpxorq		$D2hi,$D2hi,$D2hi
+	vpmadd52huq	$H2,$RR0,$D2hi
+
+	vpmadd52luq	$H0,$RR0,$D0lo
+	vpmadd52huq	$H0,$RR0,$D0hi
+	vpmadd52luq	$H0,$RR1,$D1lo
+	vpmadd52huq	$H0,$RR1,$D1hi
+	vpmadd52luq	$H0,$RR2,$D2lo
+	vpmadd52huq	$H0,$RR2,$D2hi
+
+	vpmadd52luq	$H1,$SS2,$D0lo
+	vpmadd52huq	$H1,$SS2,$D0hi
+	vpmadd52luq	$H1,$RR0,$D1lo
+	vpmadd52huq	$H1,$RR0,$D1hi
+	vpmadd52luq	$H1,$RR1,$D2lo
+	vpmadd52huq	$H1,$RR1,$D2hi
+
+	################################################################
+	# horizontal addition
+
+	mov		\$1,%eax
+	kmovw		%eax,%k1
+	vpsrldq		\$8,$D0lo,$T0
+	vpsrldq		\$8,$D0hi,$H0
+	vpsrldq		\$8,$D1lo,$T1
+	vpsrldq		\$8,$D1hi,$H1
+	vpaddq		$T0,$D0lo,$D0lo
+	vpaddq		$H0,$D0hi,$D0hi
+	vpsrldq		\$8,$D2lo,$T2
+	vpsrldq		\$8,$D2hi,$H2
+	vpaddq		$T1,$D1lo,$D1lo
+	vpaddq		$H1,$D1hi,$D1hi
+	 vpermq		\$0x2,$D0lo,$T0
+	 vpermq		\$0x2,$D0hi,$H0
+	vpaddq		$T2,$D2lo,$D2lo
+	vpaddq		$H2,$D2hi,$D2hi
+
+	vpermq		\$0x2,$D1lo,$T1
+	vpermq		\$0x2,$D1hi,$H1
+	vpaddq		$T0,$D0lo,$D0lo
+	vpaddq		$H0,$D0hi,$D0hi
+	vpermq		\$0x2,$D2lo,$T2
+	vpermq		\$0x2,$D2hi,$H2
+	vpaddq		$T1,$D1lo,$D1lo
+	vpaddq		$H1,$D1hi,$D1hi
+	 vextracti64x4	\$1,$D0lo,%y#$T0
+	 vextracti64x4	\$1,$D0hi,%y#$H0
+	vpaddq		$T2,$D2lo,$D2lo
+	vpaddq		$H2,$D2hi,$D2hi
+
+	vextracti64x4	\$1,$D1lo,%y#$T1
+	vextracti64x4	\$1,$D1hi,%y#$H1
+	vextracti64x4	\$1,$D2lo,%y#$T2
+	vextracti64x4	\$1,$D2hi,%y#$H2
+___
+######## switch back to %ymm
+map(s/%z/%y/, $H0,$H1,$H2,$R0,$R1,$R2,$S1,$S2);
+map(s/%z/%y/, $D0lo,$D0hi,$D1lo,$D1hi,$D2lo,$D2hi);
+map(s/%z/%y/, $T0,$T1,$T2,$T3,$mask44,$mask42,$tmp,$PAD);
+
+$code.=<<___;
+	vpaddq		$T0,$D0lo,${D0lo}{%k1}{z}
+	vpaddq		$H0,$D0hi,${D0hi}{%k1}{z}
+	vpaddq		$T1,$D1lo,${D1lo}{%k1}{z}
+	vpaddq		$H1,$D1hi,${D1hi}{%k1}{z}
+	vpaddq		$T2,$D2lo,${D2lo}{%k1}{z}
+	vpaddq		$H2,$D2hi,${D2hi}{%k1}{z}
+
+	################################################################
+	# partial reduction
+	vpsrlq		\$44,$D0lo,$tmp
+	vpsllq		\$8,$D0hi,$D0hi
+	vpandq		$mask44,$D0lo,$H0
+	vpaddq		$tmp,$D0hi,$D0hi
+
+	vpaddq		$D0hi,$D1lo,$D1lo
+
+	vpsrlq		\$44,$D1lo,$tmp
+	vpsllq		\$8,$D1hi,$D1hi
+	vpandq		$mask44,$D1lo,$H1
+	vpaddq		$tmp,$D1hi,$D1hi
+
+	vpaddq		$D1hi,$D2lo,$D2lo
+
+	vpsrlq		\$42,$D2lo,$tmp
+	vpsllq		\$10,$D2hi,$D2hi
+	vpandq		$mask42,$D2lo,$H2
+	vpaddq		$tmp,$D2hi,$D2hi
+
+	vpaddq		$D2hi,$H0,$H0
+	vpsllq		\$2,$D2hi,$D2hi
+
+	vpaddq		$D2hi,$H0,$H0
+
+	vpsrlq		\$44,$H0,$tmp		# additional step
+	vpandq		$mask44,$H0,$H0
+
+	vpaddq		$tmp,$H1,$H1
+
+	################################################################
+
+	vmovq		%x#$H0,0($ctx)
+	vmovq		%x#$H1,8($ctx)
+	vmovq		%x#$H2,16($ctx)
+	vzeroall
+
+.Lno_data_vpmadd52_8x:
+	ret
+.size	poly1305_blocks_vpmadd52_8x,.-poly1305_blocks_vpmadd52_8x
+___
+}
+$code.=<<___;
+.type	poly1305_emit_base2_44,\@function,3
+.align	32
+poly1305_emit_base2_44:
+	mov	0($ctx),%r8	# load hash value
+	mov	8($ctx),%r9
+	mov	16($ctx),%r10
+
+	mov	%r9,%rax
+	shr	\$20,%r9
+	shl	\$44,%rax
+	mov	%r10,%rcx
+	shr	\$40,%r10
+	shl	\$24,%rcx
+
+	add	%rax,%r8
+	adc	%rcx,%r9
+	adc	\$0,%r10
+
+	mov	%r8,%rax
+	add	\$5,%r8		# compare to modulus
+	mov	%r9,%rcx
+	adc	\$0,%r9
+	adc	\$0,%r10
+	shr	\$2,%r10	# did 130-bit value overflow?
+	cmovnz	%r8,%rax
+	cmovnz	%r9,%rcx
+
+	add	0($nonce),%rax	# accumulate nonce
+	adc	8($nonce),%rcx
+	mov	%rax,0($mac)	# write result
+	mov	%rcx,8($mac)
+
+	ret
+.size	poly1305_emit_base2_44,.-poly1305_emit_base2_44
+___
+}	}	}
+$code.=<<___;
+.align	64
+.Lconst:
+.Lmask24:
+.long	0x0ffffff,0,0x0ffffff,0,0x0ffffff,0,0x0ffffff,0
+.L129:
+.long	`1<<24`,0,`1<<24`,0,`1<<24`,0,`1<<24`,0
+.Lmask26:
+.long	0x3ffffff,0,0x3ffffff,0,0x3ffffff,0,0x3ffffff,0
+.Lpermd_avx2:
+.long	2,2,2,3,2,0,2,1
+.Lpermd_avx512:
+.long	0,0,0,1, 0,2,0,3, 0,4,0,5, 0,6,0,7
+
+.L2_44_inp_permd:
+.long	0,1,1,2,2,3,7,7
+.L2_44_inp_shift:
+.quad	0,12,24,64
+.L2_44_mask:
+.quad	0xfffffffffff,0xfffffffffff,0x3ffffffffff,0xffffffffffffffff
+.L2_44_shift_rgt:
+.quad	44,44,42,64
+.L2_44_shift_lft:
+.quad	8,8,10,64
+
+.align	64
+.Lx_mask44:
+.quad	0xfffffffffff,0xfffffffffff,0xfffffffffff,0xfffffffffff
+.quad	0xfffffffffff,0xfffffffffff,0xfffffffffff,0xfffffffffff
+.Lx_mask42:
+.quad	0x3ffffffffff,0x3ffffffffff,0x3ffffffffff,0x3ffffffffff
+.quad	0x3ffffffffff,0x3ffffffffff,0x3ffffffffff,0x3ffffffffff
+___
+}
+$code.=<<___;
+.asciz	"Poly1305 for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+.align	16
+___
+
+{	# chacha20-poly1305 helpers
+my ($out,$inp,$otp,$len)=$win64 ? ("%rcx","%rdx","%r8", "%r9") :  # Win64 order
+                                  ("%rdi","%rsi","%rdx","%rcx");  # Unix order
+$code.=<<___;
+.globl	xor128_encrypt_n_pad
+.type	xor128_encrypt_n_pad,\@abi-omnipotent
+.align	16
+xor128_encrypt_n_pad:
+	sub	$otp,$inp
+	sub	$otp,$out
+	mov	$len,%r10		# put len aside
+	shr	\$4,$len		# len / 16
+	jz	.Ltail_enc
+	nop
+.Loop_enc_xmm:
+	movdqu	($inp,$otp),%xmm0
+	pxor	($otp),%xmm0
+	movdqu	%xmm0,($out,$otp)
+	movdqa	%xmm0,($otp)
+	lea	16($otp),$otp
+	dec	$len
+	jnz	.Loop_enc_xmm
+
+	and	\$15,%r10		# len % 16
+	jz	.Ldone_enc
+
+.Ltail_enc:
+	mov	\$16,$len
+	sub	%r10,$len
+	xor	%eax,%eax
+.Loop_enc_byte:
+	mov	($inp,$otp),%al
+	xor	($otp),%al
+	mov	%al,($out,$otp)
+	mov	%al,($otp)
+	lea	1($otp),$otp
+	dec	%r10
+	jnz	.Loop_enc_byte
+
+	xor	%eax,%eax
+.Loop_enc_pad:
+	mov	%al,($otp)
+	lea	1($otp),$otp
+	dec	$len
+	jnz	.Loop_enc_pad
+
+.Ldone_enc:
+	mov	$otp,%rax
+	ret
+.size	xor128_encrypt_n_pad,.-xor128_encrypt_n_pad
+
+.globl	xor128_decrypt_n_pad
+.type	xor128_decrypt_n_pad,\@abi-omnipotent
+.align	16
+xor128_decrypt_n_pad:
+	sub	$otp,$inp
+	sub	$otp,$out
+	mov	$len,%r10		# put len aside
+	shr	\$4,$len		# len / 16
+	jz	.Ltail_dec
+	nop
+.Loop_dec_xmm:
+	movdqu	($inp,$otp),%xmm0
+	movdqa	($otp),%xmm1
+	pxor	%xmm0,%xmm1
+	movdqu	%xmm1,($out,$otp)
+	movdqa	%xmm0,($otp)
+	lea	16($otp),$otp
+	dec	$len
+	jnz	.Loop_dec_xmm
+
+	pxor	%xmm1,%xmm1
+	and	\$15,%r10		# len % 16
+	jz	.Ldone_dec
+
+.Ltail_dec:
+	mov	\$16,$len
+	sub	%r10,$len
+	xor	%eax,%eax
+	xor	%r11,%r11
+.Loop_dec_byte:
+	mov	($inp,$otp),%r11b
+	mov	($otp),%al
+	xor	%r11b,%al
+	mov	%al,($out,$otp)
+	mov	%r11b,($otp)
+	lea	1($otp),$otp
+	dec	%r10
+	jnz	.Loop_dec_byte
+
+	xor	%eax,%eax
+.Loop_dec_pad:
+	mov	%al,($otp)
+	lea	1($otp),$otp
+	dec	$len
+	jnz	.Loop_dec_pad
+
+.Ldone_dec:
+	mov	$otp,%rax
+	ret
+.size	xor128_decrypt_n_pad,.-xor128_decrypt_n_pad
+___
+}
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	se_handler,\@abi-omnipotent
+.align	16
+se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<.Lprologue
+	jb	.Lcommon_seh_tail
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=.Lepilogue
+	jae	.Lcommon_seh_tail
+
+	lea	48(%rax),%rax
+
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R14
+
+	jmp	.Lcommon_seh_tail
+.size	se_handler,.-se_handler
+
+.type	avx_handler,\@abi-omnipotent
+.align	16
+avx_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lcommon_seh_tail
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lcommon_seh_tail
+
+	mov	208($context),%rax	# pull context->R11
+
+	lea	0x50(%rax),%rsi
+	lea	0xf8(%rax),%rax
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$20,%ecx
+	.long	0xa548f3fc		# cld; rep movsq
+
+.Lcommon_seh_tail:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	avx_handler,.-avx_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_poly1305_init
+	.rva	.LSEH_end_poly1305_init
+	.rva	.LSEH_info_poly1305_init
+
+	.rva	.LSEH_begin_poly1305_blocks
+	.rva	.LSEH_end_poly1305_blocks
+	.rva	.LSEH_info_poly1305_blocks
+
+	.rva	.LSEH_begin_poly1305_emit
+	.rva	.LSEH_end_poly1305_emit
+	.rva	.LSEH_info_poly1305_emit
+___
+$code.=<<___ if ($avx);
+	.rva	.LSEH_begin_poly1305_blocks_avx
+	.rva	.Lbase2_64_avx
+	.rva	.LSEH_info_poly1305_blocks_avx_1
+
+	.rva	.Lbase2_64_avx
+	.rva	.Leven_avx
+	.rva	.LSEH_info_poly1305_blocks_avx_2
+
+	.rva	.Leven_avx
+	.rva	.LSEH_end_poly1305_blocks_avx
+	.rva	.LSEH_info_poly1305_blocks_avx_3
+
+	.rva	.LSEH_begin_poly1305_emit_avx
+	.rva	.LSEH_end_poly1305_emit_avx
+	.rva	.LSEH_info_poly1305_emit_avx
+___
+$code.=<<___ if ($avx>1);
+	.rva	.LSEH_begin_poly1305_blocks_avx2
+	.rva	.Lbase2_64_avx2
+	.rva	.LSEH_info_poly1305_blocks_avx2_1
+
+	.rva	.Lbase2_64_avx2
+	.rva	.Leven_avx2
+	.rva	.LSEH_info_poly1305_blocks_avx2_2
+
+	.rva	.Leven_avx2
+	.rva	.LSEH_end_poly1305_blocks_avx2
+	.rva	.LSEH_info_poly1305_blocks_avx2_3
+___
+$code.=<<___ if ($avx>2);
+	.rva	.LSEH_begin_poly1305_blocks_avx512
+	.rva	.LSEH_end_poly1305_blocks_avx512
+	.rva	.LSEH_info_poly1305_blocks_avx512
+___
+$code.=<<___;
+.section	.xdata
+.align	8
+.LSEH_info_poly1305_init:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.LSEH_begin_poly1305_init,.LSEH_begin_poly1305_init
+
+.LSEH_info_poly1305_blocks:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lblocks_body,.Lblocks_epilogue
+
+.LSEH_info_poly1305_emit:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.LSEH_begin_poly1305_emit,.LSEH_begin_poly1305_emit
+___
+$code.=<<___ if ($avx);
+.LSEH_info_poly1305_blocks_avx_1:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lblocks_avx_body,.Lblocks_avx_epilogue		# HandlerData[]
+
+.LSEH_info_poly1305_blocks_avx_2:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lbase2_64_avx_body,.Lbase2_64_avx_epilogue	# HandlerData[]
+
+.LSEH_info_poly1305_blocks_avx_3:
+	.byte	9,0,0,0
+	.rva	avx_handler
+	.rva	.Ldo_avx_body,.Ldo_avx_epilogue			# HandlerData[]
+
+.LSEH_info_poly1305_emit_avx:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.LSEH_begin_poly1305_emit_avx,.LSEH_begin_poly1305_emit_avx
+___
+$code.=<<___ if ($avx>1);
+.LSEH_info_poly1305_blocks_avx2_1:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lblocks_avx2_body,.Lblocks_avx2_epilogue	# HandlerData[]
+
+.LSEH_info_poly1305_blocks_avx2_2:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lbase2_64_avx2_body,.Lbase2_64_avx2_epilogue	# HandlerData[]
+
+.LSEH_info_poly1305_blocks_avx2_3:
+	.byte	9,0,0,0
+	.rva	avx_handler
+	.rva	.Ldo_avx2_body,.Ldo_avx2_epilogue		# HandlerData[]
+___
+$code.=<<___ if ($avx>2);
+.LSEH_info_poly1305_blocks_avx512:
+	.byte	9,0,0,0
+	.rva	avx_handler
+	.rva	.Ldo_avx512_body,.Ldo_avx512_epilogue		# HandlerData[]
+___
+}
+
+foreach (split('\n',$code)) {
+	s/\`([^\`]*)\`/eval($1)/ge;
+	s/%r([a-z]+)#d/%e$1/g;
+	s/%r([0-9]+)#d/%r$1d/g;
+	s/%x#%[yz]/%x/g or s/%y#%z/%y/g or s/%z#%[yz]/%z/g;
+
+	print $_,"\n";
+}
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/build.info
new file mode 100644
index 000000000..631b32b8e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/build.info
@@ -0,0 +1,24 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        poly1305_pmeth.c \
+        poly1305_ameth.c \
+        poly1305.c {- $target{poly1305_asm_src} -}
+
+GENERATE[poly1305-sparcv9.S]=asm/poly1305-sparcv9.pl $(PERLASM_SCHEME)
+INCLUDE[poly1305-sparcv9.o]=..
+GENERATE[poly1305-x86.s]=asm/poly1305-x86.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+GENERATE[poly1305-x86_64.s]=asm/poly1305-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[poly1305-ppc.s]=asm/poly1305-ppc.pl $(PERLASM_SCHEME)
+GENERATE[poly1305-ppcfp.s]=asm/poly1305-ppcfp.pl $(PERLASM_SCHEME)
+GENERATE[poly1305-armv4.S]=asm/poly1305-armv4.pl $(PERLASM_SCHEME)
+INCLUDE[poly1305-armv4.o]=..
+GENERATE[poly1305-armv8.S]=asm/poly1305-armv8.pl $(PERLASM_SCHEME)
+INCLUDE[poly1305-armv8.o]=..
+GENERATE[poly1305-mips.S]=asm/poly1305-mips.pl $(PERLASM_SCHEME)
+INCLUDE[poly1305-mips.o]=..
+
+BEGINRAW[Makefile(unix)]
+{- $builddir -}/poly1305-%.S:	{- $sourcedir -}/asm/poly1305-%.pl
+	CC="$(CC)" $(PERL) $< $(PERLASM_SCHEME) $@
+ENDRAW[Makefile(unix)]
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305.c b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305.c
new file mode 100644
index 000000000..1d182364a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305.c
@@ -0,0 +1,531 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdlib.h>
+#include <string.h>
+#include <openssl/crypto.h>
+
+#include "internal/poly1305.h"
+#include "poly1305_local.h"
+
+size_t Poly1305_ctx_size(void)
+{
+    return sizeof(struct poly1305_context);
+}
+
+/* pick 32-bit unsigned integer in little endian order */
+static unsigned int U8TOU32(const unsigned char *p)
+{
+    return (((unsigned int)(p[0] & 0xff)) |
+            ((unsigned int)(p[1] & 0xff) << 8) |
+            ((unsigned int)(p[2] & 0xff) << 16) |
+            ((unsigned int)(p[3] & 0xff) << 24));
+}
+
+/*
+ * Implementations can be classified by amount of significant bits in
+ * words making up the multi-precision value, or in other words radix
+ * or base of numerical representation, e.g. base 2^64, base 2^32,
+ * base 2^26. Complementary characteristic is how wide is the result of
+ * multiplication of pair of digits, e.g. it would take 128 bits to
+ * accommodate multiplication result in base 2^64 case. These are used
+ * interchangeably. To describe implementation that is. But interface
+ * is designed to isolate this so that low-level primitives implemented
+ * in assembly can be self-contained/self-coherent.
+ */
+#ifndef POLY1305_ASM
+/*
+ * Even though there is __int128 reference implementation targeting
+ * 64-bit platforms provided below, it's not obvious that it's optimal
+ * choice for every one of them. Depending on instruction set overall
+ * amount of instructions can be comparable to one in __int64
+ * implementation. Amount of multiplication instructions would be lower,
+ * but not necessarily overall. And in out-of-order execution context,
+ * it is the latter that can be crucial...
+ *
+ * On related note. Poly1305 author, D. J. Bernstein, discusses and
+ * provides floating-point implementations of the algorithm in question.
+ * It made a lot of sense by the time of introduction, because most
+ * then-modern processors didn't have pipelined integer multiplier.
+ * [Not to mention that some had non-constant timing for integer
+ * multiplications.] Floating-point instructions on the other hand could
+ * be issued every cycle, which allowed to achieve better performance.
+ * Nowadays, with SIMD and/or out-or-order execution, shared or
+ * even emulated FPU, it's more complicated, and floating-point
+ * implementation is not necessarily optimal choice in every situation,
+ * rather contrary...
+ *
+ *                                              <appro@openssl.org>
+ */
+
+typedef unsigned int u32;
+
+/*
+ * poly1305_blocks processes a multiple of POLY1305_BLOCK_SIZE blocks
+ * of |inp| no longer than |len|. Behaviour for |len| not divisible by
+ * block size is unspecified in general case, even though in reference
+ * implementation the trailing chunk is simply ignored. Per algorithm
+ * specification, every input block, complete or last partial, is to be
+ * padded with a bit past most significant byte. The latter kind is then
+ * padded with zeros till block size. This last partial block padding
+ * is caller(*)'s responsibility, and because of this the last partial
+ * block is always processed with separate call with |len| set to
+ * POLY1305_BLOCK_SIZE and |padbit| to 0. In all other cases |padbit|
+ * should be set to 1 to perform implicit padding with 128th bit.
+ * poly1305_blocks does not actually check for this constraint though,
+ * it's caller(*)'s responsibility to comply.
+ *
+ * (*)  In the context "caller" is not application code, but higher
+ *      level Poly1305_* from this very module, so that quirks are
+ *      handled locally.
+ */
+static void
+poly1305_blocks(void *ctx, const unsigned char *inp, size_t len, u32 padbit);
+
+/*
+ * Type-agnostic "rip-off" from constant_time_locl.h
+ */
+# define CONSTANT_TIME_CARRY(a,b) ( \
+         (a ^ ((a ^ b) | ((a - b) ^ b))) >> (sizeof(a) * 8 - 1) \
+         )
+
+# if (defined(__SIZEOF_INT128__) && __SIZEOF_INT128__==16) && \
+     (defined(__SIZEOF_LONG__) && __SIZEOF_LONG__==8)
+
+typedef unsigned long u64;
+typedef __uint128_t u128;
+
+typedef struct {
+    u64 h[3];
+    u64 r[2];
+} poly1305_internal;
+
+/* pick 32-bit unsigned integer in little endian order */
+static u64 U8TOU64(const unsigned char *p)
+{
+    return (((u64)(p[0] & 0xff)) |
+            ((u64)(p[1] & 0xff) << 8) |
+            ((u64)(p[2] & 0xff) << 16) |
+            ((u64)(p[3] & 0xff) << 24) |
+            ((u64)(p[4] & 0xff) << 32) |
+            ((u64)(p[5] & 0xff) << 40) |
+            ((u64)(p[6] & 0xff) << 48) |
+            ((u64)(p[7] & 0xff) << 56));
+}
+
+/* store a 32-bit unsigned integer in little endian */
+static void U64TO8(unsigned char *p, u64 v)
+{
+    p[0] = (unsigned char)((v) & 0xff);
+    p[1] = (unsigned char)((v >> 8) & 0xff);
+    p[2] = (unsigned char)((v >> 16) & 0xff);
+    p[3] = (unsigned char)((v >> 24) & 0xff);
+    p[4] = (unsigned char)((v >> 32) & 0xff);
+    p[5] = (unsigned char)((v >> 40) & 0xff);
+    p[6] = (unsigned char)((v >> 48) & 0xff);
+    p[7] = (unsigned char)((v >> 56) & 0xff);
+}
+
+static void poly1305_init(void *ctx, const unsigned char key[16])
+{
+    poly1305_internal *st = (poly1305_internal *) ctx;
+
+    /* h = 0 */
+    st->h[0] = 0;
+    st->h[1] = 0;
+    st->h[2] = 0;
+
+    /* r &= 0xffffffc0ffffffc0ffffffc0fffffff */
+    st->r[0] = U8TOU64(&key[0]) & 0x0ffffffc0fffffff;
+    st->r[1] = U8TOU64(&key[8]) & 0x0ffffffc0ffffffc;
+}
+
+static void
+poly1305_blocks(void *ctx, const unsigned char *inp, size_t len, u32 padbit)
+{
+    poly1305_internal *st = (poly1305_internal *)ctx;
+    u64 r0, r1;
+    u64 s1;
+    u64 h0, h1, h2, c;
+    u128 d0, d1;
+
+    r0 = st->r[0];
+    r1 = st->r[1];
+
+    s1 = r1 + (r1 >> 2);
+
+    h0 = st->h[0];
+    h1 = st->h[1];
+    h2 = st->h[2];
+
+    while (len >= POLY1305_BLOCK_SIZE) {
+        /* h += m[i] */
+        h0 = (u64)(d0 = (u128)h0 + U8TOU64(inp + 0));
+        h1 = (u64)(d1 = (u128)h1 + (d0 >> 64) + U8TOU64(inp + 8));
+        /*
+         * padbit can be zero only when original len was
+         * POLY1306_BLOCK_SIZE, but we don't check
+         */
+        h2 += (u64)(d1 >> 64) + padbit;
+
+        /* h *= r "%" p, where "%" stands for "partial remainder" */
+        d0 = ((u128)h0 * r0) +
+             ((u128)h1 * s1);
+        d1 = ((u128)h0 * r1) +
+             ((u128)h1 * r0) +
+             (h2 * s1);
+        h2 = (h2 * r0);
+
+        /* last reduction step: */
+        /* a) h2:h0 = h2<<128 + d1<<64 + d0 */
+        h0 = (u64)d0;
+        h1 = (u64)(d1 += d0 >> 64);
+        h2 += (u64)(d1 >> 64);
+        /* b) (h2:h0 += (h2:h0>>130) * 5) %= 2^130 */
+        c = (h2 >> 2) + (h2 & ~3UL);
+        h2 &= 3;
+        h0 += c;
+        h1 += (c = CONSTANT_TIME_CARRY(h0,c));
+        h2 += CONSTANT_TIME_CARRY(h1,c);
+        /*
+         * Occasional overflows to 3rd bit of h2 are taken care of
+         * "naturally". If after this point we end up at the top of
+         * this loop, then the overflow bit will be accounted for
+         * in next iteration. If we end up in poly1305_emit, then
+         * comparison to modulus below will still count as "carry
+         * into 131st bit", so that properly reduced value will be
+         * picked in conditional move.
+         */
+
+        inp += POLY1305_BLOCK_SIZE;
+        len -= POLY1305_BLOCK_SIZE;
+    }
+
+    st->h[0] = h0;
+    st->h[1] = h1;
+    st->h[2] = h2;
+}
+
+static void poly1305_emit(void *ctx, unsigned char mac[16],
+                          const u32 nonce[4])
+{
+    poly1305_internal *st = (poly1305_internal *) ctx;
+    u64 h0, h1, h2;
+    u64 g0, g1, g2;
+    u128 t;
+    u64 mask;
+
+    h0 = st->h[0];
+    h1 = st->h[1];
+    h2 = st->h[2];
+
+    /* compare to modulus by computing h + -p */
+    g0 = (u64)(t = (u128)h0 + 5);
+    g1 = (u64)(t = (u128)h1 + (t >> 64));
+    g2 = h2 + (u64)(t >> 64);
+
+    /* if there was carry into 131st bit, h1:h0 = g1:g0 */
+    mask = 0 - (g2 >> 2);
+    g0 &= mask;
+    g1 &= mask;
+    mask = ~mask;
+    h0 = (h0 & mask) | g0;
+    h1 = (h1 & mask) | g1;
+
+    /* mac = (h + nonce) % (2^128) */
+    h0 = (u64)(t = (u128)h0 + nonce[0] + ((u64)nonce[1]<<32));
+    h1 = (u64)(t = (u128)h1 + nonce[2] + ((u64)nonce[3]<<32) + (t >> 64));
+
+    U64TO8(mac + 0, h0);
+    U64TO8(mac + 8, h1);
+}
+
+# else
+
+#  if defined(_WIN32) && !defined(__MINGW32__)
+typedef unsigned __int64 u64;
+#  elif defined(__arch64__)
+typedef unsigned long u64;
+#  else
+typedef unsigned long long u64;
+#  endif
+
+typedef struct {
+    u32 h[5];
+    u32 r[4];
+} poly1305_internal;
+
+/* store a 32-bit unsigned integer in little endian */
+static void U32TO8(unsigned char *p, unsigned int v)
+{
+    p[0] = (unsigned char)((v) & 0xff);
+    p[1] = (unsigned char)((v >> 8) & 0xff);
+    p[2] = (unsigned char)((v >> 16) & 0xff);
+    p[3] = (unsigned char)((v >> 24) & 0xff);
+}
+
+static void poly1305_init(void *ctx, const unsigned char key[16])
+{
+    poly1305_internal *st = (poly1305_internal *) ctx;
+
+    /* h = 0 */
+    st->h[0] = 0;
+    st->h[1] = 0;
+    st->h[2] = 0;
+    st->h[3] = 0;
+    st->h[4] = 0;
+
+    /* r &= 0xffffffc0ffffffc0ffffffc0fffffff */
+    st->r[0] = U8TOU32(&key[0]) & 0x0fffffff;
+    st->r[1] = U8TOU32(&key[4]) & 0x0ffffffc;
+    st->r[2] = U8TOU32(&key[8]) & 0x0ffffffc;
+    st->r[3] = U8TOU32(&key[12]) & 0x0ffffffc;
+}
+
+static void
+poly1305_blocks(void *ctx, const unsigned char *inp, size_t len, u32 padbit)
+{
+    poly1305_internal *st = (poly1305_internal *)ctx;
+    u32 r0, r1, r2, r3;
+    u32 s1, s2, s3;
+    u32 h0, h1, h2, h3, h4, c;
+    u64 d0, d1, d2, d3;
+
+    r0 = st->r[0];
+    r1 = st->r[1];
+    r2 = st->r[2];
+    r3 = st->r[3];
+
+    s1 = r1 + (r1 >> 2);
+    s2 = r2 + (r2 >> 2);
+    s3 = r3 + (r3 >> 2);
+
+    h0 = st->h[0];
+    h1 = st->h[1];
+    h2 = st->h[2];
+    h3 = st->h[3];
+    h4 = st->h[4];
+
+    while (len >= POLY1305_BLOCK_SIZE) {
+        /* h += m[i] */
+        h0 = (u32)(d0 = (u64)h0 + U8TOU32(inp + 0));
+        h1 = (u32)(d1 = (u64)h1 + (d0 >> 32) + U8TOU32(inp + 4));
+        h2 = (u32)(d2 = (u64)h2 + (d1 >> 32) + U8TOU32(inp + 8));
+        h3 = (u32)(d3 = (u64)h3 + (d2 >> 32) + U8TOU32(inp + 12));
+        h4 += (u32)(d3 >> 32) + padbit;
+
+        /* h *= r "%" p, where "%" stands for "partial remainder" */
+        d0 = ((u64)h0 * r0) +
+             ((u64)h1 * s3) +
+             ((u64)h2 * s2) +
+             ((u64)h3 * s1);
+        d1 = ((u64)h0 * r1) +
+             ((u64)h1 * r0) +
+             ((u64)h2 * s3) +
+             ((u64)h3 * s2) +
+             (h4 * s1);
+        d2 = ((u64)h0 * r2) +
+             ((u64)h1 * r1) +
+             ((u64)h2 * r0) +
+             ((u64)h3 * s3) +
+             (h4 * s2);
+        d3 = ((u64)h0 * r3) +
+             ((u64)h1 * r2) +
+             ((u64)h2 * r1) +
+             ((u64)h3 * r0) +
+             (h4 * s3);
+        h4 = (h4 * r0);
+
+        /* last reduction step: */
+        /* a) h4:h0 = h4<<128 + d3<<96 + d2<<64 + d1<<32 + d0 */
+        h0 = (u32)d0;
+        h1 = (u32)(d1 += d0 >> 32);
+        h2 = (u32)(d2 += d1 >> 32);
+        h3 = (u32)(d3 += d2 >> 32);
+        h4 += (u32)(d3 >> 32);
+        /* b) (h4:h0 += (h4:h0>>130) * 5) %= 2^130 */
+        c = (h4 >> 2) + (h4 & ~3U);
+        h4 &= 3;
+        h0 += c;
+        h1 += (c = CONSTANT_TIME_CARRY(h0,c));
+        h2 += (c = CONSTANT_TIME_CARRY(h1,c));
+        h3 += (c = CONSTANT_TIME_CARRY(h2,c));
+        h4 += CONSTANT_TIME_CARRY(h3,c);
+        /*
+         * Occasional overflows to 3rd bit of h4 are taken care of
+         * "naturally". If after this point we end up at the top of
+         * this loop, then the overflow bit will be accounted for
+         * in next iteration. If we end up in poly1305_emit, then
+         * comparison to modulus below will still count as "carry
+         * into 131st bit", so that properly reduced value will be
+         * picked in conditional move.
+         */
+
+        inp += POLY1305_BLOCK_SIZE;
+        len -= POLY1305_BLOCK_SIZE;
+    }
+
+    st->h[0] = h0;
+    st->h[1] = h1;
+    st->h[2] = h2;
+    st->h[3] = h3;
+    st->h[4] = h4;
+}
+
+static void poly1305_emit(void *ctx, unsigned char mac[16],
+                          const u32 nonce[4])
+{
+    poly1305_internal *st = (poly1305_internal *) ctx;
+    u32 h0, h1, h2, h3, h4;
+    u32 g0, g1, g2, g3, g4;
+    u64 t;
+    u32 mask;
+
+    h0 = st->h[0];
+    h1 = st->h[1];
+    h2 = st->h[2];
+    h3 = st->h[3];
+    h4 = st->h[4];
+
+    /* compare to modulus by computing h + -p */
+    g0 = (u32)(t = (u64)h0 + 5);
+    g1 = (u32)(t = (u64)h1 + (t >> 32));
+    g2 = (u32)(t = (u64)h2 + (t >> 32));
+    g3 = (u32)(t = (u64)h3 + (t >> 32));
+    g4 = h4 + (u32)(t >> 32);
+
+    /* if there was carry into 131st bit, h3:h0 = g3:g0 */
+    mask = 0 - (g4 >> 2);
+    g0 &= mask;
+    g1 &= mask;
+    g2 &= mask;
+    g3 &= mask;
+    mask = ~mask;
+    h0 = (h0 & mask) | g0;
+    h1 = (h1 & mask) | g1;
+    h2 = (h2 & mask) | g2;
+    h3 = (h3 & mask) | g3;
+
+    /* mac = (h + nonce) % (2^128) */
+    h0 = (u32)(t = (u64)h0 + nonce[0]);
+    h1 = (u32)(t = (u64)h1 + (t >> 32) + nonce[1]);
+    h2 = (u32)(t = (u64)h2 + (t >> 32) + nonce[2]);
+    h3 = (u32)(t = (u64)h3 + (t >> 32) + nonce[3]);
+
+    U32TO8(mac + 0, h0);
+    U32TO8(mac + 4, h1);
+    U32TO8(mac + 8, h2);
+    U32TO8(mac + 12, h3);
+}
+# endif
+#else
+int poly1305_init(void *ctx, const unsigned char key[16], void *func);
+void poly1305_blocks(void *ctx, const unsigned char *inp, size_t len,
+                     unsigned int padbit);
+void poly1305_emit(void *ctx, unsigned char mac[16],
+                   const unsigned int nonce[4]);
+#endif
+
+void Poly1305_Init(POLY1305 *ctx, const unsigned char key[32])
+{
+    ctx->nonce[0] = U8TOU32(&key[16]);
+    ctx->nonce[1] = U8TOU32(&key[20]);
+    ctx->nonce[2] = U8TOU32(&key[24]);
+    ctx->nonce[3] = U8TOU32(&key[28]);
+
+#ifndef POLY1305_ASM
+    poly1305_init(ctx->opaque, key);
+#else
+    /*
+     * Unlike reference poly1305_init assembly counterpart is expected
+     * to return a value: non-zero if it initializes ctx->func, and zero
+     * otherwise. Latter is to simplify assembly in cases when there no
+     * multiple code paths to switch between.
+     */
+    if (!poly1305_init(ctx->opaque, key, &ctx->func)) {
+        ctx->func.blocks = poly1305_blocks;
+        ctx->func.emit = poly1305_emit;
+    }
+#endif
+
+    ctx->num = 0;
+
+}
+
+#ifdef POLY1305_ASM
+/*
+ * This "eclipses" poly1305_blocks and poly1305_emit, but it's
+ * conscious choice imposed by -Wshadow compiler warnings.
+ */
+# define poly1305_blocks (*poly1305_blocks_p)
+# define poly1305_emit   (*poly1305_emit_p)
+#endif
+
+void Poly1305_Update(POLY1305 *ctx, const unsigned char *inp, size_t len)
+{
+#ifdef POLY1305_ASM
+    /*
+     * As documented, poly1305_blocks is never called with input
+     * longer than single block and padbit argument set to 0. This
+     * property is fluently used in assembly modules to optimize
+     * padbit handling on loop boundary.
+     */
+    poly1305_blocks_f poly1305_blocks_p = ctx->func.blocks;
+#endif
+    size_t rem, num;
+
+    if ((num = ctx->num)) {
+        rem = POLY1305_BLOCK_SIZE - num;
+        if (len >= rem) {
+            memcpy(ctx->data + num, inp, rem);
+            poly1305_blocks(ctx->opaque, ctx->data, POLY1305_BLOCK_SIZE, 1);
+            inp += rem;
+            len -= rem;
+        } else {
+            /* Still not enough data to process a block. */
+            memcpy(ctx->data + num, inp, len);
+            ctx->num = num + len;
+            return;
+        }
+    }
+
+    rem = len % POLY1305_BLOCK_SIZE;
+    len -= rem;
+
+    if (len >= POLY1305_BLOCK_SIZE) {
+        poly1305_blocks(ctx->opaque, inp, len, 1);
+        inp += len;
+    }
+
+    if (rem)
+        memcpy(ctx->data, inp, rem);
+
+    ctx->num = rem;
+}
+
+void Poly1305_Final(POLY1305 *ctx, unsigned char mac[16])
+{
+#ifdef POLY1305_ASM
+    poly1305_blocks_f poly1305_blocks_p = ctx->func.blocks;
+    poly1305_emit_f poly1305_emit_p = ctx->func.emit;
+#endif
+    size_t num;
+
+    if ((num = ctx->num)) {
+        ctx->data[num++] = 1;   /* pad bit */
+        while (num < POLY1305_BLOCK_SIZE)
+            ctx->data[num++] = 0;
+        poly1305_blocks(ctx->opaque, ctx->data, POLY1305_BLOCK_SIZE, 0);
+    }
+
+    poly1305_emit(ctx->opaque, mac, ctx->nonce);
+
+    /* zero out the state */
+    OPENSSL_cleanse(ctx, sizeof(*ctx));
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_ameth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_ameth.c
new file mode 100644
index 000000000..033ee8cd9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_ameth.c
@@ -0,0 +1,122 @@
+/*
+ * Copyright 2007-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include "internal/asn1_int.h"
+#include "internal/poly1305.h"
+#include "poly1305_local.h"
+#include "internal/evp_int.h"
+
+/*
+ * POLY1305 "ASN1" method. This is just here to indicate the maximum
+ * POLY1305 output length and to free up a POLY1305 key.
+ */
+
+static int poly1305_size(const EVP_PKEY *pkey)
+{
+    return POLY1305_DIGEST_SIZE;
+}
+
+static void poly1305_key_free(EVP_PKEY *pkey)
+{
+    ASN1_OCTET_STRING *os = EVP_PKEY_get0(pkey);
+    if (os != NULL) {
+        if (os->data != NULL)
+            OPENSSL_cleanse(os->data, os->length);
+        ASN1_OCTET_STRING_free(os);
+    }
+}
+
+static int poly1305_pkey_ctrl(EVP_PKEY *pkey, int op, long arg1, void *arg2)
+{
+    /* nothing, (including ASN1_PKEY_CTRL_DEFAULT_MD_NID), is supported */
+    return -2;
+}
+
+static int poly1305_pkey_public_cmp(const EVP_PKEY *a, const EVP_PKEY *b)
+{
+    return ASN1_OCTET_STRING_cmp(EVP_PKEY_get0(a), EVP_PKEY_get0(b));
+}
+
+static int poly1305_set_priv_key(EVP_PKEY *pkey, const unsigned char *priv,
+                                 size_t len)
+{
+    ASN1_OCTET_STRING *os;
+
+    if (pkey->pkey.ptr != NULL || len != POLY1305_KEY_SIZE)
+        return 0;
+
+    os = ASN1_OCTET_STRING_new();
+    if (os == NULL)
+        return 0;
+
+    if (!ASN1_OCTET_STRING_set(os, priv, len)) {
+        ASN1_OCTET_STRING_free(os);
+        return 0;
+    }
+
+    pkey->pkey.ptr = os;
+    return 1;
+}
+
+static int poly1305_get_priv_key(const EVP_PKEY *pkey, unsigned char *priv,
+                                 size_t *len)
+{
+    ASN1_OCTET_STRING *os = (ASN1_OCTET_STRING *)pkey->pkey.ptr;
+
+    if (priv == NULL) {
+        *len = POLY1305_KEY_SIZE;
+        return 1;
+    }
+
+    if (os == NULL || *len < POLY1305_KEY_SIZE)
+        return 0;
+
+    memcpy(priv, ASN1_STRING_get0_data(os), ASN1_STRING_length(os));
+    *len = POLY1305_KEY_SIZE;
+
+    return 1;
+}
+
+const EVP_PKEY_ASN1_METHOD poly1305_asn1_meth = {
+    EVP_PKEY_POLY1305,
+    EVP_PKEY_POLY1305,
+    0,
+
+    "POLY1305",
+    "OpenSSL POLY1305 method",
+
+    0, 0, poly1305_pkey_public_cmp, 0,
+
+    0, 0, 0,
+
+    poly1305_size,
+    0, 0,
+    0, 0, 0, 0, 0, 0, 0,
+
+    poly1305_key_free,
+    poly1305_pkey_ctrl,
+    NULL,
+    NULL,
+
+    NULL,
+    NULL,
+    NULL,
+
+    NULL,
+    NULL,
+    NULL,
+
+    poly1305_set_priv_key,
+    NULL,
+    poly1305_get_priv_key,
+    NULL,
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_base2_44.c b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_base2_44.c
new file mode 100644
index 000000000..b6313d01b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_base2_44.c
@@ -0,0 +1,171 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This module is meant to be used as template for base 2^44 assembly
+ * implementation[s]. On side note compiler-generated code is not
+ * slower than compiler-generated base 2^64 code on [high-end] x86_64,
+ * even though amount of multiplications is 50% higher. Go figure...
+ */
+#include <stdlib.h>
+
+typedef unsigned char u8;
+typedef unsigned int u32;
+typedef unsigned long u64;
+typedef unsigned __int128 u128;
+
+typedef struct {
+    u64 h[3];
+    u64 s[2];
+    u64 r[3];
+} poly1305_internal;
+
+#define POLY1305_BLOCK_SIZE 16
+
+/* pick 64-bit unsigned integer in little endian order */
+static u64 U8TOU64(const unsigned char *p)
+{
+    return (((u64)(p[0] & 0xff)) |
+            ((u64)(p[1] & 0xff) << 8) |
+            ((u64)(p[2] & 0xff) << 16) |
+            ((u64)(p[3] & 0xff) << 24) |
+            ((u64)(p[4] & 0xff) << 32) |
+            ((u64)(p[5] & 0xff) << 40) |
+            ((u64)(p[6] & 0xff) << 48) |
+            ((u64)(p[7] & 0xff) << 56));
+}
+
+/* store a 64-bit unsigned integer in little endian */
+static void U64TO8(unsigned char *p, u64 v)
+{
+    p[0] = (unsigned char)((v) & 0xff);
+    p[1] = (unsigned char)((v >> 8) & 0xff);
+    p[2] = (unsigned char)((v >> 16) & 0xff);
+    p[3] = (unsigned char)((v >> 24) & 0xff);
+    p[4] = (unsigned char)((v >> 32) & 0xff);
+    p[5] = (unsigned char)((v >> 40) & 0xff);
+    p[6] = (unsigned char)((v >> 48) & 0xff);
+    p[7] = (unsigned char)((v >> 56) & 0xff);
+}
+
+int poly1305_init(void *ctx, const unsigned char key[16])
+{
+    poly1305_internal *st = (poly1305_internal *)ctx;
+    u64 r0, r1;
+
+    /* h = 0 */
+    st->h[0] = 0;
+    st->h[1] = 0;
+    st->h[2] = 0;
+
+    r0 = U8TOU64(&key[0]) & 0x0ffffffc0fffffff;
+    r1 = U8TOU64(&key[8]) & 0x0ffffffc0ffffffc;
+
+    /* break r1:r0 to three 44-bit digits, masks are 1<<44-1 */
+    st->r[0] = r0 & 0x0fffffffffff;
+    st->r[1] = ((r0 >> 44) | (r1 << 20))  & 0x0fffffffffff;
+    st->r[2] = (r1 >> 24);
+
+    st->s[0] = (st->r[1] + (st->r[1] << 2)) << 2;
+    st->s[1] = (st->r[2] + (st->r[2] << 2)) << 2;
+
+    return 0;
+}
+
+void poly1305_blocks(void *ctx, const unsigned char *inp, size_t len,
+                     u32 padbit)
+{
+    poly1305_internal *st = (poly1305_internal *)ctx;
+    u64 r0, r1, r2;
+    u64 s1, s2;
+    u64 h0, h1, h2, c;
+    u128 d0, d1, d2;
+    u64 pad = (u64)padbit << 40;
+
+    r0 = st->r[0];
+    r1 = st->r[1];
+    r2 = st->r[2];
+
+    s1 = st->s[0];
+    s2 = st->s[1];
+
+    h0 = st->h[0];
+    h1 = st->h[1];
+    h2 = st->h[2];
+
+    while (len >= POLY1305_BLOCK_SIZE) {
+        u64 m0, m1;
+
+        m0 = U8TOU64(inp + 0);
+        m1 = U8TOU64(inp + 8);
+
+        /* h += m[i], m[i] is broken to 44-bit digits */
+        h0 += m0 & 0x0fffffffffff;
+        h1 += ((m0 >> 44) | (m1 << 20))  & 0x0fffffffffff;
+        h2 +=  (m1 >> 24) + pad;
+
+        /* h *= r "%" p, where "%" stands for "partial remainder" */
+        d0 = ((u128)h0 * r0) + ((u128)h1 * s2) + ((u128)h2 * s1);
+        d1 = ((u128)h0 * r1) + ((u128)h1 * r0) + ((u128)h2 * s2);
+        d2 = ((u128)h0 * r2) + ((u128)h1 * r1) + ((u128)h2 * r0);
+
+        /* "lazy" reduction step */
+        h0 = (u64)d0 & 0x0fffffffffff;
+        h1 = (u64)(d1 += (u64)(d0 >> 44)) & 0x0fffffffffff;
+        h2 = (u64)(d2 += (u64)(d1 >> 44)) & 0x03ffffffffff; /* last 42 bits */
+
+        c = (d2 >> 42);
+        h0 += c + (c << 2);
+
+        inp += POLY1305_BLOCK_SIZE;
+        len -= POLY1305_BLOCK_SIZE;
+    }
+
+    st->h[0] = h0;
+    st->h[1] = h1;
+    st->h[2] = h2;
+}
+
+void poly1305_emit(void *ctx, unsigned char mac[16], const u32 nonce[4])
+{
+    poly1305_internal *st = (poly1305_internal *) ctx;
+    u64 h0, h1, h2;
+    u64 g0, g1, g2;
+    u128 t;
+    u64 mask;
+
+    h0 = st->h[0];
+    h1 = st->h[1];
+    h2 = st->h[2];
+
+    /* after "lazy" reduction, convert 44+bit digits to 64-bit ones */
+    h0 = (u64)(t = (u128)h0 + (h1 << 44));              h1 >>= 20;
+    h1 = (u64)(t = (u128)h1 + (h2 << 24) + (t >> 64));  h2 >>= 40;
+    h2 += (u64)(t >> 64);
+
+    /* compare to modulus by computing h + -p */
+    g0 = (u64)(t = (u128)h0 + 5);
+    g1 = (u64)(t = (u128)h1 + (t >> 64));
+    g2 = h2 + (u64)(t >> 64);
+
+    /* if there was carry into 131st bit, h1:h0 = g1:g0 */
+    mask = 0 - (g2 >> 2);
+    g0 &= mask;
+    g1 &= mask;
+    mask = ~mask;
+    h0 = (h0 & mask) | g0;
+    h1 = (h1 & mask) | g1;
+
+    /* mac = (h + nonce) % (2^128) */
+    h0 = (u64)(t = (u128)h0 + nonce[0] + ((u64)nonce[1]<<32));
+    h1 = (u64)(t = (u128)h1 + nonce[2] + ((u64)nonce[3]<<32) + (t >> 64));
+
+    U64TO8(mac + 0, h0);
+    U64TO8(mac + 8, h1);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_ieee754.c b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_ieee754.c
new file mode 100644
index 000000000..7cfd96864
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_ieee754.c
@@ -0,0 +1,488 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This module is meant to be used as template for non-x87 floating-
+ * point assembly modules. The template itself is x86_64-specific
+ * though, as it was debugged on x86_64. So that implementor would
+ * have to recognize platform-specific parts, UxTOy and inline asm,
+ * and act accordingly.
+ *
+ * Huh? x86_64-specific code as template for non-x87? Note seven, which
+ * is not a typo, but reference to 80-bit precision. This module on the
+ * other hand relies on 64-bit precision operations, which are default
+ * for x86_64 code. And since we are at it, just for sense of it,
+ * large-block performance in cycles per processed byte for *this* code
+ * is:
+ *                      gcc-4.8         icc-15.0        clang-3.4(*)
+ *
+ * Westmere             4.96            5.09            4.37
+ * Sandy Bridge         4.95            4.90            4.17
+ * Haswell              4.92            4.87            3.78
+ * Bulldozer            4.67            4.49            4.68
+ * VIA Nano             7.07            7.05            5.98
+ * Silvermont           10.6            9.61            12.6
+ *
+ * (*)  clang managed to discover parallelism and deployed SIMD;
+ *
+ * And for range of other platforms with unspecified gcc versions:
+ *
+ * Freescale e300       12.5
+ * PPC74x0              10.8
+ * POWER6               4.92
+ * POWER7               4.50
+ * POWER8               4.10
+ *
+ * z10                  11.2
+ * z196+                7.30
+ *
+ * UltraSPARC III       16.0
+ * SPARC T4             16.1
+ */
+
+#if !(defined(__GNUC__) && __GNUC__>=2)
+# error "this is gcc-specific template"
+#endif
+
+#include <stdlib.h>
+
+typedef unsigned char u8;
+typedef unsigned int u32;
+typedef unsigned long long u64;
+typedef union { double d; u64 u; } elem64;
+
+#define TWO(p)          ((double)(1ULL<<(p)))
+#define TWO0            TWO(0)
+#define TWO32           TWO(32)
+#define TWO64           (TWO32*TWO(32))
+#define TWO96           (TWO64*TWO(32))
+#define TWO130          (TWO96*TWO(34))
+
+#define EXP(p)          ((1023ULL+(p))<<52)
+
+#if defined(__x86_64__) || (defined(__PPC__) && defined(__LITTLE_ENDIAN__))
+# define U8TOU32(p)     (*(const u32 *)(p))
+# define U32TO8(p,v)    (*(u32 *)(p) = (v))
+#elif defined(__PPC__)
+# define U8TOU32(p)     ({u32 ret; asm ("lwbrx	%0,0,%1":"=r"(ret):"b"(p)); ret; })
+# define U32TO8(p,v)    asm ("stwbrx %0,0,%1"::"r"(v),"b"(p):"memory")
+#elif defined(__s390x__)
+# define U8TOU32(p)     ({u32 ret; asm ("lrv	%0,%1":"=d"(ret):"m"(*(u32 *)(p))); ret; })
+# define U32TO8(p,v)    asm ("strv	%1,%0":"=m"(*(u32 *)(p)):"d"(v))
+#endif
+
+#ifndef U8TOU32
+# define U8TOU32(p)     ((u32)(p)[0]     | (u32)(p)[1]<<8 |     \
+                         (u32)(p)[2]<<16 | (u32)(p)[3]<<24  )
+#endif
+#ifndef U32TO8
+# define U32TO8(p,v)    ((p)[0] = (u8)(v),       (p)[1] = (u8)((v)>>8), \
+                         (p)[2] = (u8)((v)>>16), (p)[3] = (u8)((v)>>24) )
+#endif
+
+typedef struct {
+    elem64 h[4];
+    double r[8];
+    double s[6];
+} poly1305_internal;
+
+/* "round toward zero (truncate), mask all exceptions" */
+#if defined(__x86_64__)
+static const u32 mxcsr = 0x7f80;
+#elif defined(__PPC__)
+static const u64 one = 1;
+#elif defined(__s390x__)
+static const u32 fpc = 1;
+#elif defined(__sparc__)
+static const u64 fsr = 1ULL<<30;
+#elif defined(__mips__)
+static const u32 fcsr = 1;
+#else
+#error "unrecognized platform"
+#endif
+
+int poly1305_init(void *ctx, const unsigned char key[16])
+{
+    poly1305_internal *st = (poly1305_internal *) ctx;
+    elem64 r0, r1, r2, r3;
+
+    /* h = 0, biased */
+#if 0
+    st->h[0].d = TWO(52)*TWO0;
+    st->h[1].d = TWO(52)*TWO32;
+    st->h[2].d = TWO(52)*TWO64;
+    st->h[3].d = TWO(52)*TWO96;
+#else
+    st->h[0].u = EXP(52+0);
+    st->h[1].u = EXP(52+32);
+    st->h[2].u = EXP(52+64);
+    st->h[3].u = EXP(52+96);
+#endif
+
+    if (key) {
+        /*
+         * set "truncate" rounding mode
+         */
+#if defined(__x86_64__)
+        u32 mxcsr_orig;
+
+        asm volatile ("stmxcsr	%0":"=m"(mxcsr_orig));
+        asm volatile ("ldmxcsr	%0"::"m"(mxcsr));
+#elif defined(__PPC__)
+        double fpscr_orig, fpscr = *(double *)&one;
+
+        asm volatile ("mffs	%0":"=f"(fpscr_orig));
+        asm volatile ("mtfsf	255,%0"::"f"(fpscr));
+#elif defined(__s390x__)
+        u32 fpc_orig;
+
+        asm volatile ("stfpc	%0":"=m"(fpc_orig));
+        asm volatile ("lfpc	%0"::"m"(fpc));
+#elif defined(__sparc__)
+        u64 fsr_orig;
+
+        asm volatile ("stx	%%fsr,%0":"=m"(fsr_orig));
+        asm volatile ("ldx	%0,%%fsr"::"m"(fsr));
+#elif defined(__mips__)
+        u32 fcsr_orig;
+
+        asm volatile ("cfc1	%0,$31":"=r"(fcsr_orig));
+        asm volatile ("ctc1	%0,$31"::"r"(fcsr));
+#endif
+
+        /* r &= 0xffffffc0ffffffc0ffffffc0fffffff */
+        r0.u = EXP(52+0)  | (U8TOU32(&key[0])  & 0x0fffffff);
+        r1.u = EXP(52+32) | (U8TOU32(&key[4])  & 0x0ffffffc);
+        r2.u = EXP(52+64) | (U8TOU32(&key[8])  & 0x0ffffffc);
+        r3.u = EXP(52+96) | (U8TOU32(&key[12]) & 0x0ffffffc);
+
+        st->r[0] = r0.d - TWO(52)*TWO0;
+        st->r[2] = r1.d - TWO(52)*TWO32;
+        st->r[4] = r2.d - TWO(52)*TWO64;
+        st->r[6] = r3.d - TWO(52)*TWO96;
+
+        st->s[0] = st->r[2] * (5.0/TWO130);
+        st->s[2] = st->r[4] * (5.0/TWO130);
+        st->s[4] = st->r[6] * (5.0/TWO130);
+
+        /*
+         * base 2^32 -> base 2^16
+         */
+        st->r[1] = (st->r[0] + TWO(52)*TWO(16)*TWO0) -
+                               TWO(52)*TWO(16)*TWO0;
+        st->r[0] -= st->r[1];
+
+        st->r[3] = (st->r[2] + TWO(52)*TWO(16)*TWO32) -
+                               TWO(52)*TWO(16)*TWO32;
+        st->r[2] -= st->r[3];
+
+        st->r[5] = (st->r[4] + TWO(52)*TWO(16)*TWO64) -
+                               TWO(52)*TWO(16)*TWO64;
+        st->r[4] -= st->r[5];
+
+        st->r[7] = (st->r[6] + TWO(52)*TWO(16)*TWO96) -
+                               TWO(52)*TWO(16)*TWO96;
+        st->r[6] -= st->r[7];
+
+        st->s[1] = (st->s[0] + TWO(52)*TWO(16)*TWO0/TWO96) -
+                               TWO(52)*TWO(16)*TWO0/TWO96;
+        st->s[0] -= st->s[1];
+
+        st->s[3] = (st->s[2] + TWO(52)*TWO(16)*TWO32/TWO96) -
+                               TWO(52)*TWO(16)*TWO32/TWO96;
+        st->s[2] -= st->s[3];
+
+        st->s[5] = (st->s[4] + TWO(52)*TWO(16)*TWO64/TWO96) -
+                               TWO(52)*TWO(16)*TWO64/TWO96;
+        st->s[4] -= st->s[5];
+
+        /*
+         * restore original FPU control register
+         */
+#if defined(__x86_64__)
+        asm volatile ("ldmxcsr	%0"::"m"(mxcsr_orig));
+#elif defined(__PPC__)
+        asm volatile ("mtfsf	255,%0"::"f"(fpscr_orig));
+#elif defined(__s390x__)
+        asm volatile ("lfpc	%0"::"m"(fpc_orig));
+#elif defined(__sparc__)
+        asm volatile ("ldx	%0,%%fsr"::"m"(fsr_orig));
+#elif defined(__mips__)
+        asm volatile ("ctc1	%0,$31"::"r"(fcsr_orig));
+#endif
+    }
+
+    return 0;
+}
+
+void poly1305_blocks(void *ctx, const unsigned char *inp, size_t len,
+                     int padbit)
+{
+    poly1305_internal *st = (poly1305_internal *)ctx;
+    elem64 in0, in1, in2, in3;
+    u64 pad = (u64)padbit<<32;
+
+    double x0, x1, x2, x3;
+    double h0lo, h0hi, h1lo, h1hi, h2lo, h2hi, h3lo, h3hi;
+    double c0lo, c0hi, c1lo, c1hi, c2lo, c2hi, c3lo, c3hi;
+
+    const double r0lo = st->r[0];
+    const double r0hi = st->r[1];
+    const double r1lo = st->r[2];
+    const double r1hi = st->r[3];
+    const double r2lo = st->r[4];
+    const double r2hi = st->r[5];
+    const double r3lo = st->r[6];
+    const double r3hi = st->r[7];
+
+    const double s1lo = st->s[0];
+    const double s1hi = st->s[1];
+    const double s2lo = st->s[2];
+    const double s2hi = st->s[3];
+    const double s3lo = st->s[4];
+    const double s3hi = st->s[5];
+
+    /*
+     * set "truncate" rounding mode
+     */
+#if defined(__x86_64__)
+    u32 mxcsr_orig;
+
+    asm volatile ("stmxcsr	%0":"=m"(mxcsr_orig));
+    asm volatile ("ldmxcsr	%0"::"m"(mxcsr));
+#elif defined(__PPC__)
+    double fpscr_orig, fpscr = *(double *)&one;
+
+    asm volatile ("mffs		%0":"=f"(fpscr_orig));
+    asm volatile ("mtfsf	255,%0"::"f"(fpscr));
+#elif defined(__s390x__)
+    u32 fpc_orig;
+
+    asm volatile ("stfpc	%0":"=m"(fpc_orig));
+    asm volatile ("lfpc		%0"::"m"(fpc));
+#elif defined(__sparc__)
+    u64 fsr_orig;
+
+    asm volatile ("stx		%%fsr,%0":"=m"(fsr_orig));
+    asm volatile ("ldx		%0,%%fsr"::"m"(fsr));
+#elif defined(__mips__)
+    u32 fcsr_orig;
+
+    asm volatile ("cfc1		%0,$31":"=r"(fcsr_orig));
+    asm volatile ("ctc1		%0,$31"::"r"(fcsr));
+#endif
+
+    /*
+     * load base 2^32 and de-bias
+     */
+    h0lo = st->h[0].d - TWO(52)*TWO0;
+    h1lo = st->h[1].d - TWO(52)*TWO32;
+    h2lo = st->h[2].d - TWO(52)*TWO64;
+    h3lo = st->h[3].d - TWO(52)*TWO96;
+
+#ifdef __clang__
+    h0hi = 0;
+    h1hi = 0;
+    h2hi = 0;
+    h3hi = 0;
+#else
+    in0.u = EXP(52+0)  | U8TOU32(&inp[0]);
+    in1.u = EXP(52+32) | U8TOU32(&inp[4]);
+    in2.u = EXP(52+64) | U8TOU32(&inp[8]);
+    in3.u = EXP(52+96) | U8TOU32(&inp[12]) | pad;
+
+    x0 = in0.d - TWO(52)*TWO0;
+    x1 = in1.d - TWO(52)*TWO32;
+    x2 = in2.d - TWO(52)*TWO64;
+    x3 = in3.d - TWO(52)*TWO96;
+
+    x0 += h0lo;
+    x1 += h1lo;
+    x2 += h2lo;
+    x3 += h3lo;
+
+    goto fast_entry;
+#endif
+
+    do {
+        in0.u = EXP(52+0)  | U8TOU32(&inp[0]);
+        in1.u = EXP(52+32) | U8TOU32(&inp[4]);
+        in2.u = EXP(52+64) | U8TOU32(&inp[8]);
+        in3.u = EXP(52+96) | U8TOU32(&inp[12]) | pad;
+
+        x0 = in0.d - TWO(52)*TWO0;
+        x1 = in1.d - TWO(52)*TWO32;
+        x2 = in2.d - TWO(52)*TWO64;
+        x3 = in3.d - TWO(52)*TWO96;
+
+        /*
+         * note that there are multiple ways to accumulate input, e.g.
+         * one can as well accumulate to h0lo-h1lo-h1hi-h2hi...
+         */
+        h0lo += x0;
+        h0hi += x1;
+        h2lo += x2;
+        h2hi += x3;
+
+        /*
+         * carries that cross 32n-bit (and 130-bit) boundaries
+         */
+        c0lo = (h0lo + TWO(52)*TWO32)  - TWO(52)*TWO32;
+        c1lo = (h1lo + TWO(52)*TWO64)  - TWO(52)*TWO64;
+        c2lo = (h2lo + TWO(52)*TWO96)  - TWO(52)*TWO96;
+        c3lo = (h3lo + TWO(52)*TWO130) - TWO(52)*TWO130;
+
+        c0hi = (h0hi + TWO(52)*TWO32)  - TWO(52)*TWO32;
+        c1hi = (h1hi + TWO(52)*TWO64)  - TWO(52)*TWO64;
+        c2hi = (h2hi + TWO(52)*TWO96)  - TWO(52)*TWO96;
+        c3hi = (h3hi + TWO(52)*TWO130) - TWO(52)*TWO130;
+
+        /*
+         * base 2^48 -> base 2^32 with last reduction step
+         */
+        x1 =  (h1lo - c1lo) + c0lo;
+        x2 =  (h2lo - c2lo) + c1lo;
+        x3 =  (h3lo - c3lo) + c2lo;
+        x0 =  (h0lo - c0lo) + c3lo * (5.0/TWO130);
+
+        x1 += (h1hi - c1hi) + c0hi;
+        x2 += (h2hi - c2hi) + c1hi;
+        x3 += (h3hi - c3hi) + c2hi;
+        x0 += (h0hi - c0hi) + c3hi * (5.0/TWO130);
+
+#ifndef __clang__
+    fast_entry:
+#endif
+        /*
+         * base 2^32 * base 2^16 = base 2^48
+         */
+        h0lo = s3lo * x1 + s2lo * x2 + s1lo * x3 + r0lo * x0;
+        h1lo = r0lo * x1 + s3lo * x2 + s2lo * x3 + r1lo * x0;
+        h2lo = r1lo * x1 + r0lo * x2 + s3lo * x3 + r2lo * x0;
+        h3lo = r2lo * x1 + r1lo * x2 + r0lo * x3 + r3lo * x0;
+
+        h0hi = s3hi * x1 + s2hi * x2 + s1hi * x3 + r0hi * x0;
+        h1hi = r0hi * x1 + s3hi * x2 + s2hi * x3 + r1hi * x0;
+        h2hi = r1hi * x1 + r0hi * x2 + s3hi * x3 + r2hi * x0;
+        h3hi = r2hi * x1 + r1hi * x2 + r0hi * x3 + r3hi * x0;
+
+        inp += 16;
+        len -= 16;
+
+    } while (len >= 16);
+
+    /*
+     * carries that cross 32n-bit (and 130-bit) boundaries
+     */
+    c0lo = (h0lo + TWO(52)*TWO32)  - TWO(52)*TWO32;
+    c1lo = (h1lo + TWO(52)*TWO64)  - TWO(52)*TWO64;
+    c2lo = (h2lo + TWO(52)*TWO96)  - TWO(52)*TWO96;
+    c3lo = (h3lo + TWO(52)*TWO130) - TWO(52)*TWO130;
+
+    c0hi = (h0hi + TWO(52)*TWO32)  - TWO(52)*TWO32;
+    c1hi = (h1hi + TWO(52)*TWO64)  - TWO(52)*TWO64;
+    c2hi = (h2hi + TWO(52)*TWO96)  - TWO(52)*TWO96;
+    c3hi = (h3hi + TWO(52)*TWO130) - TWO(52)*TWO130;
+
+    /*
+     * base 2^48 -> base 2^32 with last reduction step
+     */
+    x1 =  (h1lo - c1lo) + c0lo;
+    x2 =  (h2lo - c2lo) + c1lo;
+    x3 =  (h3lo - c3lo) + c2lo;
+    x0 =  (h0lo - c0lo) + c3lo * (5.0/TWO130);
+
+    x1 += (h1hi - c1hi) + c0hi;
+    x2 += (h2hi - c2hi) + c1hi;
+    x3 += (h3hi - c3hi) + c2hi;
+    x0 += (h0hi - c0hi) + c3hi * (5.0/TWO130);
+
+    /*
+     * store base 2^32, with bias
+     */
+    st->h[1].d = x1 + TWO(52)*TWO32;
+    st->h[2].d = x2 + TWO(52)*TWO64;
+    st->h[3].d = x3 + TWO(52)*TWO96;
+    st->h[0].d = x0 + TWO(52)*TWO0;
+
+    /*
+     * restore original FPU control register
+     */
+#if defined(__x86_64__)
+    asm volatile ("ldmxcsr	%0"::"m"(mxcsr_orig));
+#elif defined(__PPC__)
+    asm volatile ("mtfsf	255,%0"::"f"(fpscr_orig));
+#elif defined(__s390x__)
+    asm volatile ("lfpc		%0"::"m"(fpc_orig));
+#elif defined(__sparc__)
+    asm volatile ("ldx		%0,%%fsr"::"m"(fsr_orig));
+#elif defined(__mips__)
+    asm volatile ("ctc1		%0,$31"::"r"(fcsr_orig));
+#endif
+}
+
+void poly1305_emit(void *ctx, unsigned char mac[16], const u32 nonce[4])
+{
+    poly1305_internal *st = (poly1305_internal *) ctx;
+    u64 h0, h1, h2, h3, h4;
+    u32 g0, g1, g2, g3, g4;
+    u64 t;
+    u32 mask;
+
+    /*
+     * thanks to bias masking exponent gives integer result
+     */
+    h0 = st->h[0].u & 0x000fffffffffffffULL;
+    h1 = st->h[1].u & 0x000fffffffffffffULL;
+    h2 = st->h[2].u & 0x000fffffffffffffULL;
+    h3 = st->h[3].u & 0x000fffffffffffffULL;
+
+    /*
+     * can be partially reduced, so reduce...
+     */
+    h4 = h3>>32; h3 &= 0xffffffffU;
+    g4 = h4&-4;
+    h4 &= 3;
+    g4 += g4>>2;
+
+    h0 += g4;
+    h1 += h0>>32; h0 &= 0xffffffffU;
+    h2 += h1>>32; h1 &= 0xffffffffU;
+    h3 += h2>>32; h2 &= 0xffffffffU;
+
+    /* compute h + -p */
+    g0 = (u32)(t = h0 + 5);
+    g1 = (u32)(t = h1 + (t >> 32));
+    g2 = (u32)(t = h2 + (t >> 32));
+    g3 = (u32)(t = h3 + (t >> 32));
+    g4 = h4 + (u32)(t >> 32);
+
+    /* if there was carry, select g0-g3 */
+    mask = 0 - (g4 >> 2);
+    g0 &= mask;
+    g1 &= mask;
+    g2 &= mask;
+    g3 &= mask;
+    mask = ~mask;
+    g0 |= (h0 & mask);
+    g1 |= (h1 & mask);
+    g2 |= (h2 & mask);
+    g3 |= (h3 & mask);
+
+    /* mac = (h + nonce) % (2^128) */
+    g0 = (u32)(t = (u64)g0 + nonce[0]);
+    g1 = (u32)(t = (u64)g1 + (t >> 32) + nonce[1]);
+    g2 = (u32)(t = (u64)g2 + (t >> 32) + nonce[2]);
+    g3 = (u32)(t = (u64)g3 + (t >> 32) + nonce[3]);
+
+    U32TO8(mac + 0, g0);
+    U32TO8(mac + 4, g1);
+    U32TO8(mac + 8, g2);
+    U32TO8(mac + 12, g3);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_local.h b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_local.h
new file mode 100644
index 000000000..6d4d9dc5b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_local.h
@@ -0,0 +1,27 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+typedef void (*poly1305_blocks_f) (void *ctx, const unsigned char *inp,
+                                   size_t len, unsigned int padbit);
+typedef void (*poly1305_emit_f) (void *ctx, unsigned char mac[16],
+                                 const unsigned int nonce[4]);
+
+struct poly1305_context {
+    double opaque[24];  /* large enough to hold internal state, declared
+                         * 'double' to ensure at least 64-bit invariant
+                         * alignment across all platforms and
+                         * configurations */
+    unsigned int nonce[4];
+    unsigned char data[POLY1305_BLOCK_SIZE];
+    size_t num;
+    struct {
+        poly1305_blocks_f blocks;
+        poly1305_emit_f emit;
+    } func;
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_pmeth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_pmeth.c
new file mode 100644
index 000000000..3bc24c98c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/poly1305/poly1305_pmeth.c
@@ -0,0 +1,194 @@
+/*
+ * Copyright 2007-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/evp.h>
+#include <openssl/err.h>
+#include "internal/poly1305.h"
+#include "poly1305_local.h"
+#include "internal/evp_int.h"
+
+/* POLY1305 pkey context structure */
+
+typedef struct {
+    ASN1_OCTET_STRING ktmp;     /* Temp storage for key */
+    POLY1305 ctx;
+} POLY1305_PKEY_CTX;
+
+static int pkey_poly1305_init(EVP_PKEY_CTX *ctx)
+{
+    POLY1305_PKEY_CTX *pctx;
+
+    if ((pctx = OPENSSL_zalloc(sizeof(*pctx))) == NULL) {
+        CRYPTOerr(CRYPTO_F_PKEY_POLY1305_INIT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    pctx->ktmp.type = V_ASN1_OCTET_STRING;
+
+    EVP_PKEY_CTX_set_data(ctx, pctx);
+    EVP_PKEY_CTX_set0_keygen_info(ctx, NULL, 0);
+    return 1;
+}
+
+static void pkey_poly1305_cleanup(EVP_PKEY_CTX *ctx)
+{
+    POLY1305_PKEY_CTX *pctx = EVP_PKEY_CTX_get_data(ctx);
+
+    if (pctx != NULL) {
+        OPENSSL_clear_free(pctx->ktmp.data, pctx->ktmp.length);
+        OPENSSL_clear_free(pctx, sizeof(*pctx));
+        EVP_PKEY_CTX_set_data(ctx, NULL);
+    }
+}
+
+static int pkey_poly1305_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src)
+{
+    POLY1305_PKEY_CTX *sctx, *dctx;
+
+    /* allocate memory for dst->data and a new POLY1305_CTX in dst->data->ctx */
+    if (!pkey_poly1305_init(dst))
+        return 0;
+    sctx = EVP_PKEY_CTX_get_data(src);
+    dctx = EVP_PKEY_CTX_get_data(dst);
+    if (ASN1_STRING_get0_data(&sctx->ktmp) != NULL &&
+        !ASN1_STRING_copy(&dctx->ktmp, &sctx->ktmp)) {
+        /* cleanup and free the POLY1305_PKEY_CTX in dst->data */
+        pkey_poly1305_cleanup(dst);
+        return 0;
+    }
+    memcpy(&dctx->ctx, &sctx->ctx, sizeof(POLY1305));
+    return 1;
+}
+
+static int pkey_poly1305_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
+{
+    ASN1_OCTET_STRING *key;
+    POLY1305_PKEY_CTX *pctx = EVP_PKEY_CTX_get_data(ctx);
+
+    if (ASN1_STRING_get0_data(&pctx->ktmp) == NULL)
+        return 0;
+    key = ASN1_OCTET_STRING_dup(&pctx->ktmp);
+    if (key == NULL)
+        return 0;
+    return EVP_PKEY_assign_POLY1305(pkey, key);
+}
+
+static int int_update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    POLY1305_PKEY_CTX *pctx = EVP_PKEY_CTX_get_data(EVP_MD_CTX_pkey_ctx(ctx));
+
+    Poly1305_Update(&pctx->ctx, data, count);
+    return 1;
+}
+
+static int poly1305_signctx_init(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx)
+{
+    POLY1305_PKEY_CTX *pctx = ctx->data;
+    ASN1_OCTET_STRING *key = (ASN1_OCTET_STRING *)ctx->pkey->pkey.ptr;
+
+    if (key->length != POLY1305_KEY_SIZE)
+        return 0;
+    EVP_MD_CTX_set_flags(mctx, EVP_MD_CTX_FLAG_NO_INIT);
+    EVP_MD_CTX_set_update_fn(mctx, int_update);
+    Poly1305_Init(&pctx->ctx, key->data);
+    return 1;
+}
+static int poly1305_signctx(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
+                            EVP_MD_CTX *mctx)
+{
+    POLY1305_PKEY_CTX *pctx = ctx->data;
+
+    *siglen = POLY1305_DIGEST_SIZE;
+    if (sig != NULL)
+        Poly1305_Final(&pctx->ctx, sig);
+    return 1;
+}
+
+static int pkey_poly1305_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
+{
+    POLY1305_PKEY_CTX *pctx = EVP_PKEY_CTX_get_data(ctx);
+    const unsigned char *key;
+    size_t len;
+
+    switch (type) {
+
+    case EVP_PKEY_CTRL_MD:
+        /* ignore */
+        break;
+
+    case EVP_PKEY_CTRL_SET_MAC_KEY:
+    case EVP_PKEY_CTRL_DIGESTINIT:
+        if (type == EVP_PKEY_CTRL_SET_MAC_KEY) {
+            /* user explicitly setting the key */
+            key = p2;
+            len = p1;
+        } else {
+            /* user indirectly setting the key via EVP_DigestSignInit */
+            key = EVP_PKEY_get0_poly1305(EVP_PKEY_CTX_get0_pkey(ctx), &len);
+        }
+        if (key == NULL || len != POLY1305_KEY_SIZE ||
+            !ASN1_OCTET_STRING_set(&pctx->ktmp, key, len))
+            return 0;
+        Poly1305_Init(&pctx->ctx, ASN1_STRING_get0_data(&pctx->ktmp));
+        break;
+
+    default:
+        return -2;
+
+    }
+    return 1;
+}
+
+static int pkey_poly1305_ctrl_str(EVP_PKEY_CTX *ctx,
+                                  const char *type, const char *value)
+{
+    if (value == NULL)
+        return 0;
+    if (strcmp(type, "key") == 0)
+        return EVP_PKEY_CTX_str2ctrl(ctx, EVP_PKEY_CTRL_SET_MAC_KEY, value);
+    if (strcmp(type, "hexkey") == 0)
+        return EVP_PKEY_CTX_hex2ctrl(ctx, EVP_PKEY_CTRL_SET_MAC_KEY, value);
+    return -2;
+}
+
+const EVP_PKEY_METHOD poly1305_pkey_meth = {
+    EVP_PKEY_POLY1305,
+    EVP_PKEY_FLAG_SIGCTX_CUSTOM, /* we don't deal with a separate MD */
+    pkey_poly1305_init,
+    pkey_poly1305_copy,
+    pkey_poly1305_cleanup,
+
+    0, 0,
+
+    0,
+    pkey_poly1305_keygen,
+
+    0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    poly1305_signctx_init,
+    poly1305_signctx,
+
+    0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    pkey_poly1305_ctrl,
+    pkey_poly1305_ctrl_str
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ppc_arch.h b/trunk/3rdparty/openssl-1.1-fit/crypto/ppc_arch.h
new file mode 100644
index 000000000..72bd74687
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ppc_arch.h
@@ -0,0 +1,28 @@
+/*
+ * Copyright 2014-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_PPC_ARCH_H
+# define HEADER_PPC_ARCH_H
+
+extern unsigned int OPENSSL_ppccap_P;
+
+/*
+ * Flags' usage can appear ambiguous, because they are set rather
+ * to reflect OpenSSL performance preferences than actual processor
+ * capabilities.
+ */
+# define PPC_FPU64       (1<<0)
+# define PPC_ALTIVEC     (1<<1)
+# define PPC_CRYPTO207   (1<<2)
+# define PPC_FPU         (1<<3)
+# define PPC_MADD300     (1<<4)
+# define PPC_MFTB        (1<<5)
+# define PPC_MFSPR268    (1<<6)
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ppccap.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ppccap.c
new file mode 100644
index 000000000..afb9e31b0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ppccap.c
@@ -0,0 +1,408 @@
+/*
+ * Copyright 2009-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <setjmp.h>
+#include <signal.h>
+#include <unistd.h>
+#if defined(__linux) || defined(_AIX)
+# include <sys/utsname.h>
+#endif
+#if defined(_AIX53)     /* defined even on post-5.3 */
+# include <sys/systemcfg.h>
+# if !defined(__power_set)
+#  define __power_set(a) (_system_configuration.implementation & (a))
+# endif
+#endif
+#if defined(__APPLE__) && defined(__MACH__)
+# include <sys/types.h>
+# include <sys/sysctl.h>
+#endif
+#include <openssl/crypto.h>
+#include <openssl/bn.h>
+#include <internal/cryptlib.h>
+#include <internal/chacha.h>
+#include "bn/bn_lcl.h"
+
+#include "ppc_arch.h"
+
+unsigned int OPENSSL_ppccap_P = 0;
+
+static sigset_t all_masked;
+
+#ifdef OPENSSL_BN_ASM_MONT
+int bn_mul_mont(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp,
+                const BN_ULONG *np, const BN_ULONG *n0, int num)
+{
+    int bn_mul_mont_int(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp,
+                        const BN_ULONG *np, const BN_ULONG *n0, int num);
+    int bn_mul4x_mont_int(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp,
+                          const BN_ULONG *np, const BN_ULONG *n0, int num);
+
+    if (num < 4)
+        return 0;
+
+    if ((num & 3) == 0)
+        return bn_mul4x_mont_int(rp, ap, bp, np, n0, num);
+
+    /*
+     * There used to be [optional] call to bn_mul_mont_fpu64 here,
+     * but above subroutine is faster on contemporary processors.
+     * Formulation means that there might be old processors where
+     * FPU code path would be faster, POWER6 perhaps, but there was
+     * no opportunity to figure it out...
+     */
+
+    return bn_mul_mont_int(rp, ap, bp, np, n0, num);
+}
+#endif
+
+void sha256_block_p8(void *ctx, const void *inp, size_t len);
+void sha256_block_ppc(void *ctx, const void *inp, size_t len);
+void sha256_block_data_order(void *ctx, const void *inp, size_t len);
+void sha256_block_data_order(void *ctx, const void *inp, size_t len)
+{
+    OPENSSL_ppccap_P & PPC_CRYPTO207 ? sha256_block_p8(ctx, inp, len) :
+        sha256_block_ppc(ctx, inp, len);
+}
+
+void sha512_block_p8(void *ctx, const void *inp, size_t len);
+void sha512_block_ppc(void *ctx, const void *inp, size_t len);
+void sha512_block_data_order(void *ctx, const void *inp, size_t len);
+void sha512_block_data_order(void *ctx, const void *inp, size_t len)
+{
+    OPENSSL_ppccap_P & PPC_CRYPTO207 ? sha512_block_p8(ctx, inp, len) :
+        sha512_block_ppc(ctx, inp, len);
+}
+
+#ifndef OPENSSL_NO_CHACHA
+void ChaCha20_ctr32_int(unsigned char *out, const unsigned char *inp,
+                        size_t len, const unsigned int key[8],
+                        const unsigned int counter[4]);
+void ChaCha20_ctr32_vmx(unsigned char *out, const unsigned char *inp,
+                        size_t len, const unsigned int key[8],
+                        const unsigned int counter[4]);
+void ChaCha20_ctr32_vsx(unsigned char *out, const unsigned char *inp,
+                        size_t len, const unsigned int key[8],
+                        const unsigned int counter[4]);
+void ChaCha20_ctr32(unsigned char *out, const unsigned char *inp,
+                    size_t len, const unsigned int key[8],
+                    const unsigned int counter[4])
+{
+    OPENSSL_ppccap_P & PPC_CRYPTO207
+        ? ChaCha20_ctr32_vsx(out, inp, len, key, counter)
+        : OPENSSL_ppccap_P & PPC_ALTIVEC
+            ? ChaCha20_ctr32_vmx(out, inp, len, key, counter)
+            : ChaCha20_ctr32_int(out, inp, len, key, counter);
+}
+#endif
+
+#ifndef OPENSSL_NO_POLY1305
+void poly1305_init_int(void *ctx, const unsigned char key[16]);
+void poly1305_blocks(void *ctx, const unsigned char *inp, size_t len,
+                         unsigned int padbit);
+void poly1305_emit(void *ctx, unsigned char mac[16],
+                       const unsigned int nonce[4]);
+void poly1305_init_fpu(void *ctx, const unsigned char key[16]);
+void poly1305_blocks_fpu(void *ctx, const unsigned char *inp, size_t len,
+                         unsigned int padbit);
+void poly1305_emit_fpu(void *ctx, unsigned char mac[16],
+                       const unsigned int nonce[4]);
+int poly1305_init(void *ctx, const unsigned char key[16], void *func[2]);
+int poly1305_init(void *ctx, const unsigned char key[16], void *func[2])
+{
+    if (sizeof(size_t) == 4 && (OPENSSL_ppccap_P & PPC_FPU)) {
+        poly1305_init_fpu(ctx, key);
+        func[0] = (void*)(uintptr_t)poly1305_blocks_fpu;
+        func[1] = (void*)(uintptr_t)poly1305_emit_fpu;
+    } else {
+        poly1305_init_int(ctx, key);
+        func[0] = (void*)(uintptr_t)poly1305_blocks;
+        func[1] = (void*)(uintptr_t)poly1305_emit;
+    }
+    return 1;
+}
+#endif
+
+#ifdef ECP_NISTZ256_ASM
+void ecp_nistz256_mul_mont(unsigned long res[4], const unsigned long a[4],
+                           const unsigned long b[4]);
+
+void ecp_nistz256_to_mont(unsigned long res[4], const unsigned long in[4]);
+void ecp_nistz256_to_mont(unsigned long res[4], const unsigned long in[4])
+{
+    static const unsigned long RR[] = { 0x0000000000000003U,
+                                        0xfffffffbffffffffU,
+                                        0xfffffffffffffffeU,
+                                        0x00000004fffffffdU };
+
+    ecp_nistz256_mul_mont(res, in, RR);
+}
+
+void ecp_nistz256_from_mont(unsigned long res[4], const unsigned long in[4]);
+void ecp_nistz256_from_mont(unsigned long res[4], const unsigned long in[4])
+{
+    static const unsigned long one[] = { 1, 0, 0, 0 };
+
+    ecp_nistz256_mul_mont(res, in, one);
+}
+#endif
+
+static sigjmp_buf ill_jmp;
+static void ill_handler(int sig)
+{
+    siglongjmp(ill_jmp, sig);
+}
+
+void OPENSSL_fpu_probe(void);
+void OPENSSL_ppc64_probe(void);
+void OPENSSL_altivec_probe(void);
+void OPENSSL_crypto207_probe(void);
+void OPENSSL_madd300_probe(void);
+
+long OPENSSL_rdtsc_mftb(void);
+long OPENSSL_rdtsc_mfspr268(void);
+
+uint32_t OPENSSL_rdtsc(void)
+{
+    if (OPENSSL_ppccap_P & PPC_MFTB)
+        return OPENSSL_rdtsc_mftb();
+    else if (OPENSSL_ppccap_P & PPC_MFSPR268)
+        return OPENSSL_rdtsc_mfspr268();
+    else
+        return 0;
+}
+
+size_t OPENSSL_instrument_bus_mftb(unsigned int *, size_t);
+size_t OPENSSL_instrument_bus_mfspr268(unsigned int *, size_t);
+
+size_t OPENSSL_instrument_bus(unsigned int *out, size_t cnt)
+{
+    if (OPENSSL_ppccap_P & PPC_MFTB)
+        return OPENSSL_instrument_bus_mftb(out, cnt);
+    else if (OPENSSL_ppccap_P & PPC_MFSPR268)
+        return OPENSSL_instrument_bus_mfspr268(out, cnt);
+    else
+        return 0;
+}
+
+size_t OPENSSL_instrument_bus2_mftb(unsigned int *, size_t, size_t);
+size_t OPENSSL_instrument_bus2_mfspr268(unsigned int *, size_t, size_t);
+
+size_t OPENSSL_instrument_bus2(unsigned int *out, size_t cnt, size_t max)
+{
+    if (OPENSSL_ppccap_P & PPC_MFTB)
+        return OPENSSL_instrument_bus2_mftb(out, cnt, max);
+    else if (OPENSSL_ppccap_P & PPC_MFSPR268)
+        return OPENSSL_instrument_bus2_mfspr268(out, cnt, max);
+    else
+        return 0;
+}
+
+#if defined(__GLIBC__) && defined(__GLIBC_PREREQ)
+# if __GLIBC_PREREQ(2, 16)
+#  include <sys/auxv.h>
+#  define OSSL_IMPLEMENT_GETAUXVAL
+# endif
+#endif
+
+/* I wish <sys/auxv.h> was universally available */
+#define HWCAP                   16      /* AT_HWCAP */
+#define HWCAP_PPC64             (1U << 30)
+#define HWCAP_ALTIVEC           (1U << 28)
+#define HWCAP_FPU               (1U << 27)
+#define HWCAP_POWER6_EXT        (1U << 9)
+#define HWCAP_VSX               (1U << 7)
+
+#define HWCAP2                  26      /* AT_HWCAP2 */
+#define HWCAP_VEC_CRYPTO        (1U << 25)
+#define HWCAP_ARCH_3_00         (1U << 23)
+
+# if defined(__GNUC__) && __GNUC__>=2
+__attribute__ ((constructor))
+# endif
+void OPENSSL_cpuid_setup(void)
+{
+    char *e;
+    struct sigaction ill_oact, ill_act;
+    sigset_t oset;
+    static int trigger = 0;
+
+    if (trigger)
+        return;
+    trigger = 1;
+
+    if ((e = getenv("OPENSSL_ppccap"))) {
+        OPENSSL_ppccap_P = strtoul(e, NULL, 0);
+        return;
+    }
+
+    OPENSSL_ppccap_P = 0;
+
+#if defined(_AIX)
+    OPENSSL_ppccap_P |= PPC_FPU;
+
+    if (sizeof(size_t) == 4) {
+        struct utsname uts;
+# if defined(_SC_AIX_KERNEL_BITMODE)
+        if (sysconf(_SC_AIX_KERNEL_BITMODE) != 64)
+            return;
+# endif
+        if (uname(&uts) != 0 || atoi(uts.version) < 6)
+            return;
+    }
+
+# if defined(__power_set)
+    /*
+     * Value used in __power_set is a single-bit 1<<n one denoting
+     * specific processor class. Incidentally 0xffffffff<<n can be
+     * used to denote specific processor and its successors.
+     */
+    if (sizeof(size_t) == 4) {
+        /* In 32-bit case PPC_FPU64 is always fastest [if option] */
+        if (__power_set(0xffffffffU<<13))       /* POWER5 and later */
+            OPENSSL_ppccap_P |= PPC_FPU64;
+    } else {
+        /* In 64-bit case PPC_FPU64 is fastest only on POWER6 */
+        if (__power_set(0x1U<<14))              /* POWER6 */
+            OPENSSL_ppccap_P |= PPC_FPU64;
+    }
+
+    if (__power_set(0xffffffffU<<14))           /* POWER6 and later */
+        OPENSSL_ppccap_P |= PPC_ALTIVEC;
+
+    if (__power_set(0xffffffffU<<16))           /* POWER8 and later */
+        OPENSSL_ppccap_P |= PPC_CRYPTO207;
+
+    if (__power_set(0xffffffffU<<17))           /* POWER9 and later */
+        OPENSSL_ppccap_P |= PPC_MADD300;
+
+    return;
+# endif
+#endif
+
+#if defined(__APPLE__) && defined(__MACH__)
+    OPENSSL_ppccap_P |= PPC_FPU;
+
+    {
+        int val;
+        size_t len = sizeof(val);
+
+        if (sysctlbyname("hw.optional.64bitops", &val, &len, NULL, 0) == 0) {
+            if (val)
+                OPENSSL_ppccap_P |= PPC_FPU64;
+        }
+
+        len = sizeof(val);
+        if (sysctlbyname("hw.optional.altivec", &val, &len, NULL, 0) == 0) {
+            if (val)
+                OPENSSL_ppccap_P |= PPC_ALTIVEC;
+        }
+
+        return;
+    }
+#endif
+
+#ifdef OSSL_IMPLEMENT_GETAUXVAL
+    {
+        unsigned long hwcap = getauxval(HWCAP);
+
+        if (hwcap & HWCAP_FPU) {
+            OPENSSL_ppccap_P |= PPC_FPU;
+
+            if (sizeof(size_t) == 4) {
+                /* In 32-bit case PPC_FPU64 is always fastest [if option] */
+                if (hwcap & HWCAP_PPC64)
+                    OPENSSL_ppccap_P |= PPC_FPU64;
+            } else {
+                /* In 64-bit case PPC_FPU64 is fastest only on POWER6 */
+                if (hwcap & HWCAP_POWER6_EXT)
+                    OPENSSL_ppccap_P |= PPC_FPU64;
+            }
+        }
+
+        if (hwcap & HWCAP_ALTIVEC) {
+            OPENSSL_ppccap_P |= PPC_ALTIVEC;
+
+            if ((hwcap & HWCAP_VSX) && (getauxval(HWCAP2) & HWCAP_VEC_CRYPTO))
+                OPENSSL_ppccap_P |= PPC_CRYPTO207;
+        }
+
+        if (hwcap & HWCAP_ARCH_3_00) {
+            OPENSSL_ppccap_P |= PPC_MADD300;
+        }
+    }
+#endif
+
+    sigfillset(&all_masked);
+    sigdelset(&all_masked, SIGILL);
+    sigdelset(&all_masked, SIGTRAP);
+#ifdef SIGEMT
+    sigdelset(&all_masked, SIGEMT);
+#endif
+    sigdelset(&all_masked, SIGFPE);
+    sigdelset(&all_masked, SIGBUS);
+    sigdelset(&all_masked, SIGSEGV);
+
+    memset(&ill_act, 0, sizeof(ill_act));
+    ill_act.sa_handler = ill_handler;
+    ill_act.sa_mask = all_masked;
+
+    sigprocmask(SIG_SETMASK, &ill_act.sa_mask, &oset);
+    sigaction(SIGILL, &ill_act, &ill_oact);
+
+#ifndef OSSL_IMPLEMENT_GETAUXVAL
+    if (sigsetjmp(ill_jmp,1) == 0) {
+        OPENSSL_fpu_probe();
+        OPENSSL_ppccap_P |= PPC_FPU;
+
+        if (sizeof(size_t) == 4) {
+# ifdef __linux
+            struct utsname uts;
+            if (uname(&uts) == 0 && strcmp(uts.machine, "ppc64") == 0)
+# endif
+                if (sigsetjmp(ill_jmp, 1) == 0) {
+                    OPENSSL_ppc64_probe();
+                    OPENSSL_ppccap_P |= PPC_FPU64;
+                }
+        } else {
+            /*
+             * Wanted code detecting POWER6 CPU and setting PPC_FPU64
+             */
+        }
+    }
+
+    if (sigsetjmp(ill_jmp, 1) == 0) {
+        OPENSSL_altivec_probe();
+        OPENSSL_ppccap_P |= PPC_ALTIVEC;
+        if (sigsetjmp(ill_jmp, 1) == 0) {
+            OPENSSL_crypto207_probe();
+            OPENSSL_ppccap_P |= PPC_CRYPTO207;
+        }
+    }
+
+    if (sigsetjmp(ill_jmp, 1) == 0) {
+        OPENSSL_madd300_probe();
+        OPENSSL_ppccap_P |= PPC_MADD300;
+    }
+#endif
+
+    if (sigsetjmp(ill_jmp, 1) == 0) {
+        OPENSSL_rdtsc_mftb();
+        OPENSSL_ppccap_P |= PPC_MFTB;
+    } else if (sigsetjmp(ill_jmp, 1) == 0) {
+        OPENSSL_rdtsc_mfspr268();
+        OPENSSL_ppccap_P |= PPC_MFSPR268;
+    }
+
+    sigaction(SIGILL, &ill_oact, NULL);
+    sigprocmask(SIG_SETMASK, &oset, NULL);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ppccpuid.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/ppccpuid.pl
new file mode 100755
index 000000000..a38445fd3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ppccpuid.pl
@@ -0,0 +1,382 @@
+#! /usr/bin/env perl
+# Copyright 2007-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+$flavour = shift;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open STDOUT,"| $^X $xlate $flavour ".shift || die "can't call $xlate: $!";
+
+if ($flavour=~/64/) {
+    $CMPLI="cmpldi";
+    $SHRLI="srdi";
+    $SIGNX="extsw";
+} else {
+    $CMPLI="cmplwi";
+    $SHRLI="srwi";
+    $SIGNX="mr";
+}
+
+$code=<<___;
+.machine	"any"
+.text
+
+.globl	.OPENSSL_fpu_probe
+.align	4
+.OPENSSL_fpu_probe:
+	fmr	f0,f0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+.size	.OPENSSL_fpu_probe,.-.OPENSSL_fpu_probe
+.globl	.OPENSSL_ppc64_probe
+.align	4
+.OPENSSL_ppc64_probe:
+	fcfid	f1,f1
+	extrdi	r0,r0,32,0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+.size	.OPENSSL_ppc64_probe,.-.OPENSSL_ppc64_probe
+
+.globl	.OPENSSL_altivec_probe
+.align	4
+.OPENSSL_altivec_probe:
+	.long	0x10000484	# vor	v0,v0,v0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+.size	.OPENSSL_altivec_probe,.-..OPENSSL_altivec_probe
+
+.globl	.OPENSSL_crypto207_probe
+.align	4
+.OPENSSL_crypto207_probe:
+	lvx_u	v0,0,r1
+	vcipher	v0,v0,v0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+.size	.OPENSSL_crypto207_probe,.-.OPENSSL_crypto207_probe
+
+.globl	.OPENSSL_madd300_probe
+.align	4
+.OPENSSL_madd300_probe:
+	xor	r0,r0,r0
+	maddld	r3,r0,r0,r0
+	maddhdu	r3,r0,r0,r0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+
+.globl	.OPENSSL_wipe_cpu
+.align	4
+.OPENSSL_wipe_cpu:
+	xor	r0,r0,r0
+	fmr	f0,f31
+	fmr	f1,f31
+	fmr	f2,f31
+	mr	r3,r1
+	fmr	f3,f31
+	xor	r4,r4,r4
+	fmr	f4,f31
+	xor	r5,r5,r5
+	fmr	f5,f31
+	xor	r6,r6,r6
+	fmr	f6,f31
+	xor	r7,r7,r7
+	fmr	f7,f31
+	xor	r8,r8,r8
+	fmr	f8,f31
+	xor	r9,r9,r9
+	fmr	f9,f31
+	xor	r10,r10,r10
+	fmr	f10,f31
+	xor	r11,r11,r11
+	fmr	f11,f31
+	xor	r12,r12,r12
+	fmr	f12,f31
+	fmr	f13,f31
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+.size	.OPENSSL_wipe_cpu,.-.OPENSSL_wipe_cpu
+
+.globl	.OPENSSL_atomic_add
+.align	4
+.OPENSSL_atomic_add:
+Ladd:	lwarx	r5,0,r3
+	add	r0,r4,r5
+	stwcx.	r0,0,r3
+	bne-	Ladd
+	$SIGNX	r3,r0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,2,0
+	.long	0
+.size	.OPENSSL_atomic_add,.-.OPENSSL_atomic_add
+
+.globl	.OPENSSL_rdtsc_mftb
+.align	4
+.OPENSSL_rdtsc_mftb:
+	mftb	r3
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+.size	.OPENSSL_rdtsc_mftb,.-.OPENSSL_rdtsc_mftb
+
+.globl	.OPENSSL_rdtsc_mfspr268
+.align	4
+.OPENSSL_rdtsc_mfspr268:
+	mfspr	r3,268
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+.size	.OPENSSL_rdtsc_mfspr268,.-.OPENSSL_rdtsc_mfspr268
+
+.globl	.OPENSSL_cleanse
+.align	4
+.OPENSSL_cleanse:
+	$CMPLI	r4,7
+	li	r0,0
+	bge	Lot
+	$CMPLI	r4,0
+	beqlr-
+Little:	mtctr	r4
+	stb	r0,0(r3)
+	addi	r3,r3,1
+	bdnz	\$-8
+	blr
+Lot:	andi.	r5,r3,3
+	beq	Laligned
+	stb	r0,0(r3)
+	subi	r4,r4,1
+	addi	r3,r3,1
+	b	Lot
+Laligned:
+	$SHRLI	r5,r4,2
+	mtctr	r5
+	stw	r0,0(r3)
+	addi	r3,r3,4
+	bdnz	\$-8
+	andi.	r4,r4,3
+	bne	Little
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,2,0
+	.long	0
+.size	.OPENSSL_cleanse,.-.OPENSSL_cleanse
+
+globl	.CRYPTO_memcmp
+.align	4
+.CRYPTO_memcmp:
+	$CMPLI	r5,0
+	li	r0,0
+	beq	Lno_data
+	mtctr	r5
+Loop_cmp:
+	lbz	r6,0(r3)
+	addi	r3,r3,1
+	lbz	r7,0(r4)
+	addi	r4,r4,1
+	xor	r6,r6,r7
+	or	r0,r0,r6
+	bdnz	Loop_cmp
+
+Lno_data:
+	li	r3,0
+	sub	r3,r3,r0
+	extrwi	r3,r3,1,0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+	.long	0
+.size	.CRYPTO_memcmp,.-.CRYPTO_memcmp
+___
+{
+my ($out,$cnt,$max)=("r3","r4","r5");
+my ($tick,$lasttick)=("r6","r7");
+my ($diff,$lastdiff)=("r8","r9");
+
+$code.=<<___;
+.globl	.OPENSSL_instrument_bus_mftb
+.align	4
+.OPENSSL_instrument_bus_mftb:
+	mtctr	$cnt
+
+	mftb	$lasttick		# collect 1st tick
+	li	$diff,0
+
+	dcbf	0,$out			# flush cache line
+	lwarx	$tick,0,$out		# load and lock
+	add	$tick,$tick,$diff
+	stwcx.	$tick,0,$out
+	stwx	$tick,0,$out
+
+Loop:	mftb	$tick
+	sub	$diff,$tick,$lasttick
+	mr	$lasttick,$tick
+	dcbf	0,$out			# flush cache line
+	lwarx	$tick,0,$out		# load and lock
+	add	$tick,$tick,$diff
+	stwcx.	$tick,0,$out
+	stwx	$tick,0,$out
+	addi	$out,$out,4		# ++$out
+	bdnz	Loop
+
+	mr	r3,$cnt
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,2,0
+	.long	0
+.size	.OPENSSL_instrument_bus_mftb,.-.OPENSSL_instrument_bus_mftb
+
+.globl	.OPENSSL_instrument_bus2_mftb
+.align	4
+.OPENSSL_instrument_bus2_mftb:
+	mr	r0,$cnt
+	slwi	$cnt,$cnt,2
+
+	mftb	$lasttick		# collect 1st tick
+	li	$diff,0
+
+	dcbf	0,$out			# flush cache line
+	lwarx	$tick,0,$out		# load and lock
+	add	$tick,$tick,$diff
+	stwcx.	$tick,0,$out
+	stwx	$tick,0,$out
+
+	mftb	$tick			# collect 1st diff
+	sub	$diff,$tick,$lasttick
+	mr	$lasttick,$tick
+	mr	$lastdiff,$diff
+Loop2:
+	dcbf	0,$out			# flush cache line
+	lwarx	$tick,0,$out		# load and lock
+	add	$tick,$tick,$diff
+	stwcx.	$tick,0,$out
+	stwx	$tick,0,$out
+
+	addic.	$max,$max,-1
+	beq	Ldone2
+
+	mftb	$tick
+	sub	$diff,$tick,$lasttick
+	mr	$lasttick,$tick
+	cmplw	7,$diff,$lastdiff
+	mr	$lastdiff,$diff
+
+	mfcr	$tick			# pull cr
+	not	$tick,$tick		# flip bits
+	rlwinm	$tick,$tick,1,29,29	# isolate flipped eq bit and scale
+
+	sub.	$cnt,$cnt,$tick		# conditional --$cnt
+	add	$out,$out,$tick		# conditional ++$out
+	bne	Loop2
+
+Ldone2:
+	srwi	$cnt,$cnt,2
+	sub	r3,r0,$cnt
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+	.long	0
+.size	.OPENSSL_instrument_bus2_mftb,.-.OPENSSL_instrument_bus2_mftb
+
+.globl	.OPENSSL_instrument_bus_mfspr268
+.align	4
+.OPENSSL_instrument_bus_mfspr268:
+	mtctr	$cnt
+
+	mfspr	$lasttick,268		# collect 1st tick
+	li	$diff,0
+
+	dcbf	0,$out			# flush cache line
+	lwarx	$tick,0,$out		# load and lock
+	add	$tick,$tick,$diff
+	stwcx.	$tick,0,$out
+	stwx	$tick,0,$out
+
+Loop3:	mfspr	$tick,268
+	sub	$diff,$tick,$lasttick
+	mr	$lasttick,$tick
+	dcbf	0,$out			# flush cache line
+	lwarx	$tick,0,$out		# load and lock
+	add	$tick,$tick,$diff
+	stwcx.	$tick,0,$out
+	stwx	$tick,0,$out
+	addi	$out,$out,4		# ++$out
+	bdnz	Loop3
+
+	mr	r3,$cnt
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,2,0
+	.long	0
+.size	.OPENSSL_instrument_bus_mfspr268,.-.OPENSSL_instrument_bus_mfspr268
+
+.globl	.OPENSSL_instrument_bus2_mfspr268
+.align	4
+.OPENSSL_instrument_bus2_mfspr268:
+	mr	r0,$cnt
+	slwi	$cnt,$cnt,2
+
+	mfspr	$lasttick,268		# collect 1st tick
+	li	$diff,0
+
+	dcbf	0,$out			# flush cache line
+	lwarx	$tick,0,$out		# load and lock
+	add	$tick,$tick,$diff
+	stwcx.	$tick,0,$out
+	stwx	$tick,0,$out
+
+	mfspr	$tick,268		# collect 1st diff
+	sub	$diff,$tick,$lasttick
+	mr	$lasttick,$tick
+	mr	$lastdiff,$diff
+Loop4:
+	dcbf	0,$out			# flush cache line
+	lwarx	$tick,0,$out		# load and lock
+	add	$tick,$tick,$diff
+	stwcx.	$tick,0,$out
+	stwx	$tick,0,$out
+
+	addic.	$max,$max,-1
+	beq	Ldone4
+
+	mfspr	$tick,268
+	sub	$diff,$tick,$lasttick
+	mr	$lasttick,$tick
+	cmplw	7,$diff,$lastdiff
+	mr	$lastdiff,$diff
+
+	mfcr	$tick			# pull cr
+	not	$tick,$tick		# flip bits
+	rlwinm	$tick,$tick,1,29,29	# isolate flipped eq bit and scale
+
+	sub.	$cnt,$cnt,$tick		# conditional --$cnt
+	add	$out,$out,$tick		# conditional ++$out
+	bne	Loop4
+
+Ldone4:
+	srwi	$cnt,$cnt,2
+	sub	r3,r0,$cnt
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,3,0
+	.long	0
+.size	.OPENSSL_instrument_bus2_mfspr268,.-.OPENSSL_instrument_bus2_mfspr268
+___
+}
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rand/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/build.info
new file mode 100644
index 000000000..df9bac67f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/build.info
@@ -0,0 +1,4 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        randfile.c rand_lib.c rand_err.c rand_egd.c \
+        rand_win.c rand_unix.c rand_vms.c drbg_lib.c drbg_ctr.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rand/drbg_ctr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/drbg_ctr.c
new file mode 100644
index 000000000..a243361b5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/drbg_ctr.c
@@ -0,0 +1,438 @@
+/*
+ * Copyright 2011-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdlib.h>
+#include <string.h>
+#include <openssl/crypto.h>
+#include <openssl/err.h>
+#include <openssl/rand.h>
+#include "internal/thread_once.h"
+#include "internal/thread_once.h"
+#include "rand_lcl.h"
+/*
+ * Implementation of NIST SP 800-90A CTR DRBG.
+ */
+
+static void inc_128(RAND_DRBG_CTR *ctr)
+{
+    int i;
+    unsigned char c;
+    unsigned char *p = &ctr->V[15];
+
+    for (i = 0; i < 16; i++, p--) {
+        c = *p;
+        c++;
+        *p = c;
+        if (c != 0) {
+            /* If we didn't wrap around, we're done. */
+            break;
+        }
+    }
+}
+
+static void ctr_XOR(RAND_DRBG_CTR *ctr, const unsigned char *in, size_t inlen)
+{
+    size_t i, n;
+
+    if (in == NULL || inlen == 0)
+        return;
+
+    /*
+     * Any zero padding will have no effect on the result as we
+     * are XORing. So just process however much input we have.
+     */
+    n = inlen < ctr->keylen ? inlen : ctr->keylen;
+    for (i = 0; i < n; i++)
+        ctr->K[i] ^= in[i];
+    if (inlen <= ctr->keylen)
+        return;
+
+    n = inlen - ctr->keylen;
+    if (n > 16) {
+        /* Should never happen */
+        n = 16;
+    }
+    for (i = 0; i < n; i++)
+        ctr->V[i] ^= in[i + ctr->keylen];
+}
+
+/*
+ * Process a complete block using BCC algorithm of SP 800-90A 10.3.3
+ */
+__owur static int ctr_BCC_block(RAND_DRBG_CTR *ctr, unsigned char *out,
+                                const unsigned char *in)
+{
+    int i, outlen = AES_BLOCK_SIZE;
+
+    for (i = 0; i < 16; i++)
+        out[i] ^= in[i];
+
+    if (!EVP_CipherUpdate(ctr->ctx_df, out, &outlen, out, AES_BLOCK_SIZE)
+        || outlen != AES_BLOCK_SIZE)
+        return 0;
+    return 1;
+}
+
+
+/*
+ * Handle several BCC operations for as much data as we need for K and X
+ */
+__owur static int ctr_BCC_blocks(RAND_DRBG_CTR *ctr, const unsigned char *in)
+{
+    if (!ctr_BCC_block(ctr, ctr->KX, in)
+        || !ctr_BCC_block(ctr, ctr->KX + 16, in))
+        return 0;
+    if (ctr->keylen != 16 && !ctr_BCC_block(ctr, ctr->KX + 32, in))
+        return 0;
+    return 1;
+}
+
+/*
+ * Initialise BCC blocks: these have the value 0,1,2 in leftmost positions:
+ * see 10.3.1 stage 7.
+ */
+__owur static int ctr_BCC_init(RAND_DRBG_CTR *ctr)
+{
+    memset(ctr->KX, 0, 48);
+    memset(ctr->bltmp, 0, 16);
+    if (!ctr_BCC_block(ctr, ctr->KX, ctr->bltmp))
+        return 0;
+    ctr->bltmp[3] = 1;
+    if (!ctr_BCC_block(ctr, ctr->KX + 16, ctr->bltmp))
+        return 0;
+    if (ctr->keylen != 16) {
+        ctr->bltmp[3] = 2;
+        if (!ctr_BCC_block(ctr, ctr->KX + 32, ctr->bltmp))
+            return 0;
+    }
+    return 1;
+}
+
+/*
+ * Process several blocks into BCC algorithm, some possibly partial
+ */
+__owur static int ctr_BCC_update(RAND_DRBG_CTR *ctr,
+                                 const unsigned char *in, size_t inlen)
+{
+    if (in == NULL || inlen == 0)
+        return 1;
+
+    /* If we have partial block handle it first */
+    if (ctr->bltmp_pos) {
+        size_t left = 16 - ctr->bltmp_pos;
+
+        /* If we now have a complete block process it */
+        if (inlen >= left) {
+            memcpy(ctr->bltmp + ctr->bltmp_pos, in, left);
+            if (!ctr_BCC_blocks(ctr, ctr->bltmp))
+                return 0;
+            ctr->bltmp_pos = 0;
+            inlen -= left;
+            in += left;
+        }
+    }
+
+    /* Process zero or more complete blocks */
+    for (; inlen >= 16; in += 16, inlen -= 16) {
+        if (!ctr_BCC_blocks(ctr, in))
+            return 0;
+    }
+
+    /* Copy any remaining partial block to the temporary buffer */
+    if (inlen > 0) {
+        memcpy(ctr->bltmp + ctr->bltmp_pos, in, inlen);
+        ctr->bltmp_pos += inlen;
+    }
+    return 1;
+}
+
+__owur static int ctr_BCC_final(RAND_DRBG_CTR *ctr)
+{
+    if (ctr->bltmp_pos) {
+        memset(ctr->bltmp + ctr->bltmp_pos, 0, 16 - ctr->bltmp_pos);
+        if (!ctr_BCC_blocks(ctr, ctr->bltmp))
+            return 0;
+    }
+    return 1;
+}
+
+__owur static int ctr_df(RAND_DRBG_CTR *ctr,
+                         const unsigned char *in1, size_t in1len,
+                         const unsigned char *in2, size_t in2len,
+                         const unsigned char *in3, size_t in3len)
+{
+    static unsigned char c80 = 0x80;
+    size_t inlen;
+    unsigned char *p = ctr->bltmp;
+    int outlen = AES_BLOCK_SIZE;
+
+    if (!ctr_BCC_init(ctr))
+        return 0;
+    if (in1 == NULL)
+        in1len = 0;
+    if (in2 == NULL)
+        in2len = 0;
+    if (in3 == NULL)
+        in3len = 0;
+    inlen = in1len + in2len + in3len;
+    /* Initialise L||N in temporary block */
+    *p++ = (inlen >> 24) & 0xff;
+    *p++ = (inlen >> 16) & 0xff;
+    *p++ = (inlen >> 8) & 0xff;
+    *p++ = inlen & 0xff;
+
+    /* NB keylen is at most 32 bytes */
+    *p++ = 0;
+    *p++ = 0;
+    *p++ = 0;
+    *p = (unsigned char)((ctr->keylen + 16) & 0xff);
+    ctr->bltmp_pos = 8;
+    if (!ctr_BCC_update(ctr, in1, in1len)
+        || !ctr_BCC_update(ctr, in2, in2len)
+        || !ctr_BCC_update(ctr, in3, in3len)
+        || !ctr_BCC_update(ctr, &c80, 1)
+        || !ctr_BCC_final(ctr))
+        return 0;
+    /* Set up key K */
+    if (!EVP_CipherInit_ex(ctr->ctx, ctr->cipher, NULL, ctr->KX, NULL, 1))
+        return 0;
+    /* X follows key K */
+    if (!EVP_CipherUpdate(ctr->ctx, ctr->KX, &outlen, ctr->KX + ctr->keylen,
+                          AES_BLOCK_SIZE)
+        || outlen != AES_BLOCK_SIZE)
+        return 0;
+    if (!EVP_CipherUpdate(ctr->ctx, ctr->KX + 16, &outlen, ctr->KX,
+                          AES_BLOCK_SIZE)
+        || outlen != AES_BLOCK_SIZE)
+        return 0;
+    if (ctr->keylen != 16)
+        if (!EVP_CipherUpdate(ctr->ctx, ctr->KX + 32, &outlen, ctr->KX + 16,
+                              AES_BLOCK_SIZE)
+            || outlen != AES_BLOCK_SIZE)
+            return 0;
+    return 1;
+}
+
+/*
+ * NB the no-df Update in SP800-90A specifies a constant input length
+ * of seedlen, however other uses of this algorithm pad the input with
+ * zeroes if necessary and have up to two parameters XORed together,
+ * so we handle both cases in this function instead.
+ */
+__owur static int ctr_update(RAND_DRBG *drbg,
+                             const unsigned char *in1, size_t in1len,
+                             const unsigned char *in2, size_t in2len,
+                             const unsigned char *nonce, size_t noncelen)
+{
+    RAND_DRBG_CTR *ctr = &drbg->data.ctr;
+    int outlen = AES_BLOCK_SIZE;
+
+    /* correct key is already set up. */
+    inc_128(ctr);
+    if (!EVP_CipherUpdate(ctr->ctx, ctr->K, &outlen, ctr->V, AES_BLOCK_SIZE)
+        || outlen != AES_BLOCK_SIZE)
+        return 0;
+
+    /* If keylen longer than 128 bits need extra encrypt */
+    if (ctr->keylen != 16) {
+        inc_128(ctr);
+        if (!EVP_CipherUpdate(ctr->ctx, ctr->K+16, &outlen, ctr->V,
+                              AES_BLOCK_SIZE)
+            || outlen != AES_BLOCK_SIZE)
+            return 0;
+    }
+    inc_128(ctr);
+    if (!EVP_CipherUpdate(ctr->ctx, ctr->V, &outlen, ctr->V, AES_BLOCK_SIZE)
+        || outlen != AES_BLOCK_SIZE)
+        return 0;
+
+    /* If 192 bit key part of V is on end of K */
+    if (ctr->keylen == 24) {
+        memcpy(ctr->V + 8, ctr->V, 8);
+        memcpy(ctr->V, ctr->K + 24, 8);
+    }
+
+    if ((drbg->flags & RAND_DRBG_FLAG_CTR_NO_DF) == 0) {
+        /* If no input reuse existing derived value */
+        if (in1 != NULL || nonce != NULL || in2 != NULL)
+            if (!ctr_df(ctr, in1, in1len, nonce, noncelen, in2, in2len))
+                return 0;
+        /* If this a reuse input in1len != 0 */
+        if (in1len)
+            ctr_XOR(ctr, ctr->KX, drbg->seedlen);
+    } else {
+        ctr_XOR(ctr, in1, in1len);
+        ctr_XOR(ctr, in2, in2len);
+    }
+
+    if (!EVP_CipherInit_ex(ctr->ctx, ctr->cipher, NULL, ctr->K, NULL, 1))
+        return 0;
+    return 1;
+}
+
+__owur static int drbg_ctr_instantiate(RAND_DRBG *drbg,
+                                       const unsigned char *entropy, size_t entropylen,
+                                       const unsigned char *nonce, size_t noncelen,
+                                       const unsigned char *pers, size_t perslen)
+{
+    RAND_DRBG_CTR *ctr = &drbg->data.ctr;
+
+    if (entropy == NULL)
+        return 0;
+
+    memset(ctr->K, 0, sizeof(ctr->K));
+    memset(ctr->V, 0, sizeof(ctr->V));
+    if (!EVP_CipherInit_ex(ctr->ctx, ctr->cipher, NULL, ctr->K, NULL, 1))
+        return 0;
+    if (!ctr_update(drbg, entropy, entropylen, pers, perslen, nonce, noncelen))
+        return 0;
+    return 1;
+}
+
+__owur static int drbg_ctr_reseed(RAND_DRBG *drbg,
+                                  const unsigned char *entropy, size_t entropylen,
+                                  const unsigned char *adin, size_t adinlen)
+{
+    if (entropy == NULL)
+        return 0;
+    if (!ctr_update(drbg, entropy, entropylen, adin, adinlen, NULL, 0))
+        return 0;
+    return 1;
+}
+
+__owur static int drbg_ctr_generate(RAND_DRBG *drbg,
+                                    unsigned char *out, size_t outlen,
+                                    const unsigned char *adin, size_t adinlen)
+{
+    RAND_DRBG_CTR *ctr = &drbg->data.ctr;
+
+    if (adin != NULL && adinlen != 0) {
+        if (!ctr_update(drbg, adin, adinlen, NULL, 0, NULL, 0))
+            return 0;
+        /* This means we reuse derived value */
+        if ((drbg->flags & RAND_DRBG_FLAG_CTR_NO_DF) == 0) {
+            adin = NULL;
+            adinlen = 1;
+        }
+    } else {
+        adinlen = 0;
+    }
+
+    for ( ; ; ) {
+        int outl = AES_BLOCK_SIZE;
+
+        inc_128(ctr);
+        if (outlen < 16) {
+            /* Use K as temp space as it will be updated */
+            if (!EVP_CipherUpdate(ctr->ctx, ctr->K, &outl, ctr->V,
+                                  AES_BLOCK_SIZE)
+                || outl != AES_BLOCK_SIZE)
+                return 0;
+            memcpy(out, ctr->K, outlen);
+            break;
+        }
+        if (!EVP_CipherUpdate(ctr->ctx, out, &outl, ctr->V, AES_BLOCK_SIZE)
+            || outl != AES_BLOCK_SIZE)
+            return 0;
+        out += 16;
+        outlen -= 16;
+        if (outlen == 0)
+            break;
+    }
+
+    if (!ctr_update(drbg, adin, adinlen, NULL, 0, NULL, 0))
+        return 0;
+    return 1;
+}
+
+static int drbg_ctr_uninstantiate(RAND_DRBG *drbg)
+{
+    EVP_CIPHER_CTX_free(drbg->data.ctr.ctx);
+    EVP_CIPHER_CTX_free(drbg->data.ctr.ctx_df);
+    OPENSSL_cleanse(&drbg->data.ctr, sizeof(drbg->data.ctr));
+    return 1;
+}
+
+static RAND_DRBG_METHOD drbg_ctr_meth = {
+    drbg_ctr_instantiate,
+    drbg_ctr_reseed,
+    drbg_ctr_generate,
+    drbg_ctr_uninstantiate
+};
+
+int drbg_ctr_init(RAND_DRBG *drbg)
+{
+    RAND_DRBG_CTR *ctr = &drbg->data.ctr;
+    size_t keylen;
+
+    switch (drbg->type) {
+    default:
+        /* This can't happen, but silence the compiler warning. */
+        return 0;
+    case NID_aes_128_ctr:
+        keylen = 16;
+        ctr->cipher = EVP_aes_128_ecb();
+        break;
+    case NID_aes_192_ctr:
+        keylen = 24;
+        ctr->cipher = EVP_aes_192_ecb();
+        break;
+    case NID_aes_256_ctr:
+        keylen = 32;
+        ctr->cipher = EVP_aes_256_ecb();
+        break;
+    }
+
+    drbg->meth = &drbg_ctr_meth;
+
+    ctr->keylen = keylen;
+    if (ctr->ctx == NULL)
+        ctr->ctx = EVP_CIPHER_CTX_new();
+    if (ctr->ctx == NULL)
+        return 0;
+    drbg->strength = keylen * 8;
+    drbg->seedlen = keylen + 16;
+
+    if ((drbg->flags & RAND_DRBG_FLAG_CTR_NO_DF) == 0) {
+        /* df initialisation */
+        static const unsigned char df_key[32] = {
+            0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+            0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
+            0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
+            0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f
+        };
+
+        if (ctr->ctx_df == NULL)
+            ctr->ctx_df = EVP_CIPHER_CTX_new();
+        if (ctr->ctx_df == NULL)
+            return 0;
+        /* Set key schedule for df_key */
+        if (!EVP_CipherInit_ex(ctr->ctx_df, ctr->cipher, NULL, df_key, NULL, 1))
+            return 0;
+
+        drbg->min_entropylen = ctr->keylen;
+        drbg->max_entropylen = DRBG_MAX_LENGTH;
+        drbg->min_noncelen = drbg->min_entropylen / 2;
+        drbg->max_noncelen = DRBG_MAX_LENGTH;
+        drbg->max_perslen = DRBG_MAX_LENGTH;
+        drbg->max_adinlen = DRBG_MAX_LENGTH;
+    } else {
+        drbg->min_entropylen = drbg->seedlen;
+        drbg->max_entropylen = drbg->seedlen;
+        /* Nonce not used */
+        drbg->min_noncelen = 0;
+        drbg->max_noncelen = 0;
+        drbg->max_perslen = drbg->seedlen;
+        drbg->max_adinlen = drbg->seedlen;
+    }
+
+    drbg->max_request = 1 << 16;
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rand/drbg_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/drbg_lib.c
new file mode 100644
index 000000000..a13282181
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/drbg_lib.c
@@ -0,0 +1,1159 @@
+/*
+ * Copyright 2011-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include <openssl/crypto.h>
+#include <openssl/err.h>
+#include <openssl/rand.h>
+#include "rand_lcl.h"
+#include "internal/thread_once.h"
+#include "internal/rand_int.h"
+#include "internal/cryptlib_int.h"
+
+/*
+ * Support framework for NIST SP 800-90A DRBG
+ *
+ * See manual page RAND_DRBG(7) for a general overview.
+ *
+ * The OpenSSL model is to have new and free functions, and that new
+ * does all initialization.  That is not the NIST model, which has
+ * instantiation and un-instantiate, and re-use within a new/free
+ * lifecycle.  (No doubt this comes from the desire to support hardware
+ * DRBG, where allocation of resources on something like an HSM is
+ * a much bigger deal than just re-setting an allocated resource.)
+ */
+
+/*
+ * The three shared DRBG instances
+ *
+ * There are three shared DRBG instances: <master>, <public>, and <private>.
+ */
+
+/*
+ * The <master> DRBG
+ *
+ * Not used directly by the application, only for reseeding the two other
+ * DRBGs. It reseeds itself by pulling either randomness from os entropy
+ * sources or by consuming randomness which was added by RAND_add().
+ *
+ * The <master> DRBG is a global instance which is accessed concurrently by
+ * all threads. The necessary locking is managed automatically by its child
+ * DRBG instances during reseeding.
+ */
+static RAND_DRBG *master_drbg;
+/*
+ * The <public> DRBG
+ *
+ * Used by default for generating random bytes using RAND_bytes().
+ *
+ * The <public> DRBG is thread-local, i.e., there is one instance per thread.
+ */
+static CRYPTO_THREAD_LOCAL public_drbg;
+/*
+ * The <private> DRBG
+ *
+ * Used by default for generating private keys using RAND_priv_bytes()
+ *
+ * The <private> DRBG is thread-local, i.e., there is one instance per thread.
+ */
+static CRYPTO_THREAD_LOCAL private_drbg;
+
+
+
+/* NIST SP 800-90A DRBG recommends the use of a personalization string. */
+static const char ossl_pers_string[] = "OpenSSL NIST SP 800-90A DRBG";
+
+static CRYPTO_ONCE rand_drbg_init = CRYPTO_ONCE_STATIC_INIT;
+
+
+
+static int rand_drbg_type = RAND_DRBG_TYPE;
+static unsigned int rand_drbg_flags = RAND_DRBG_FLAGS;
+
+static unsigned int master_reseed_interval = MASTER_RESEED_INTERVAL;
+static unsigned int slave_reseed_interval  = SLAVE_RESEED_INTERVAL;
+
+static time_t master_reseed_time_interval = MASTER_RESEED_TIME_INTERVAL;
+static time_t slave_reseed_time_interval  = SLAVE_RESEED_TIME_INTERVAL;
+
+/* A logical OR of all used DRBG flag bits (currently there is only one) */
+static const unsigned int rand_drbg_used_flags =
+    RAND_DRBG_FLAG_CTR_NO_DF;
+
+static RAND_DRBG *drbg_setup(RAND_DRBG *parent);
+
+static RAND_DRBG *rand_drbg_new(int secure,
+                                int type,
+                                unsigned int flags,
+                                RAND_DRBG *parent);
+
+/*
+ * Set/initialize |drbg| to be of type |type|, with optional |flags|.
+ *
+ * If |type| and |flags| are zero, use the defaults
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+int RAND_DRBG_set(RAND_DRBG *drbg, int type, unsigned int flags)
+{
+    int ret = 1;
+
+    if (type == 0 && flags == 0) {
+        type = rand_drbg_type;
+        flags = rand_drbg_flags;
+    }
+
+    /* If set is called multiple times - clear the old one */
+    if (drbg->type != 0 && (type != drbg->type || flags != drbg->flags)) {
+        drbg->meth->uninstantiate(drbg);
+        rand_pool_free(drbg->adin_pool);
+        drbg->adin_pool = NULL;
+    }
+
+    drbg->state = DRBG_UNINITIALISED;
+    drbg->flags = flags;
+    drbg->type = type;
+
+    switch (type) {
+    default:
+        drbg->type = 0;
+        drbg->flags = 0;
+        drbg->meth = NULL;
+        RANDerr(RAND_F_RAND_DRBG_SET, RAND_R_UNSUPPORTED_DRBG_TYPE);
+        return 0;
+    case 0:
+        /* Uninitialized; that's okay. */
+        drbg->meth = NULL;
+        return 1;
+    case NID_aes_128_ctr:
+    case NID_aes_192_ctr:
+    case NID_aes_256_ctr:
+        ret = drbg_ctr_init(drbg);
+        break;
+    }
+
+    if (ret == 0) {
+        drbg->state = DRBG_ERROR;
+        RANDerr(RAND_F_RAND_DRBG_SET, RAND_R_ERROR_INITIALISING_DRBG);
+    }
+    return ret;
+}
+
+/*
+ * Set/initialize default |type| and |flag| for new drbg instances.
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+int RAND_DRBG_set_defaults(int type, unsigned int flags)
+{
+    int ret = 1;
+
+    switch (type) {
+    default:
+        RANDerr(RAND_F_RAND_DRBG_SET_DEFAULTS, RAND_R_UNSUPPORTED_DRBG_TYPE);
+        return 0;
+    case NID_aes_128_ctr:
+    case NID_aes_192_ctr:
+    case NID_aes_256_ctr:
+        break;
+    }
+
+    if ((flags & ~rand_drbg_used_flags) != 0) {
+        RANDerr(RAND_F_RAND_DRBG_SET_DEFAULTS, RAND_R_UNSUPPORTED_DRBG_FLAGS);
+        return 0;
+    }
+
+    rand_drbg_type  = type;
+    rand_drbg_flags = flags;
+
+    return ret;
+}
+
+
+/*
+ * Allocate memory and initialize a new DRBG. The DRBG is allocated on
+ * the secure heap if |secure| is nonzero and the secure heap is enabled.
+ * The |parent|, if not NULL, will be used as random source for reseeding.
+ *
+ * Returns a pointer to the new DRBG instance on success, NULL on failure.
+ */
+static RAND_DRBG *rand_drbg_new(int secure,
+                                int type,
+                                unsigned int flags,
+                                RAND_DRBG *parent)
+{
+    RAND_DRBG *drbg = secure ?
+        OPENSSL_secure_zalloc(sizeof(*drbg)) : OPENSSL_zalloc(sizeof(*drbg));
+
+    if (drbg == NULL) {
+        RANDerr(RAND_F_RAND_DRBG_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    drbg->secure = secure && CRYPTO_secure_allocated(drbg);
+    drbg->fork_count = rand_fork_count;
+    drbg->parent = parent;
+
+    if (parent == NULL) {
+        drbg->get_entropy = rand_drbg_get_entropy;
+        drbg->cleanup_entropy = rand_drbg_cleanup_entropy;
+#ifndef RAND_DRBG_GET_RANDOM_NONCE
+        drbg->get_nonce = rand_drbg_get_nonce;
+        drbg->cleanup_nonce = rand_drbg_cleanup_nonce;
+#endif
+
+        drbg->reseed_interval = master_reseed_interval;
+        drbg->reseed_time_interval = master_reseed_time_interval;
+    } else {
+        drbg->get_entropy = rand_drbg_get_entropy;
+        drbg->cleanup_entropy = rand_drbg_cleanup_entropy;
+        /*
+         * Do not provide nonce callbacks, the child DRBGs will
+         * obtain their nonce using random bits from the parent.
+         */
+
+        drbg->reseed_interval = slave_reseed_interval;
+        drbg->reseed_time_interval = slave_reseed_time_interval;
+    }
+
+    if (RAND_DRBG_set(drbg, type, flags) == 0)
+        goto err;
+
+    if (parent != NULL) {
+        rand_drbg_lock(parent);
+        if (drbg->strength > parent->strength) {
+            /*
+             * We currently don't support the algorithm from NIST SP 800-90C
+             * 10.1.2 to use a weaker DRBG as source
+             */
+            rand_drbg_unlock(parent);
+            RANDerr(RAND_F_RAND_DRBG_NEW, RAND_R_PARENT_STRENGTH_TOO_WEAK);
+            goto err;
+        }
+        rand_drbg_unlock(parent);
+    }
+
+    return drbg;
+
+ err:
+    RAND_DRBG_free(drbg);
+
+    return NULL;
+}
+
+RAND_DRBG *RAND_DRBG_new(int type, unsigned int flags, RAND_DRBG *parent)
+{
+    return rand_drbg_new(0, type, flags, parent);
+}
+
+RAND_DRBG *RAND_DRBG_secure_new(int type, unsigned int flags, RAND_DRBG *parent)
+{
+    return rand_drbg_new(1, type, flags, parent);
+}
+
+/*
+ * Uninstantiate |drbg| and free all memory.
+ */
+void RAND_DRBG_free(RAND_DRBG *drbg)
+{
+    if (drbg == NULL)
+        return;
+
+    if (drbg->meth != NULL)
+        drbg->meth->uninstantiate(drbg);
+    rand_pool_free(drbg->adin_pool);
+    CRYPTO_THREAD_lock_free(drbg->lock);
+    CRYPTO_free_ex_data(CRYPTO_EX_INDEX_DRBG, drbg, &drbg->ex_data);
+
+    if (drbg->secure)
+        OPENSSL_secure_clear_free(drbg, sizeof(*drbg));
+    else
+        OPENSSL_clear_free(drbg, sizeof(*drbg));
+}
+
+/*
+ * Instantiate |drbg|, after it has been initialized.  Use |pers| and
+ * |perslen| as prediction-resistance input.
+ *
+ * Requires that drbg->lock is already locked for write, if non-null.
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+int RAND_DRBG_instantiate(RAND_DRBG *drbg,
+                          const unsigned char *pers, size_t perslen)
+{
+    unsigned char *nonce = NULL, *entropy = NULL;
+    size_t noncelen = 0, entropylen = 0;
+    size_t min_entropy = drbg->strength;
+    size_t min_entropylen = drbg->min_entropylen;
+    size_t max_entropylen = drbg->max_entropylen;
+
+    if (perslen > drbg->max_perslen) {
+        RANDerr(RAND_F_RAND_DRBG_INSTANTIATE,
+                RAND_R_PERSONALISATION_STRING_TOO_LONG);
+        goto end;
+    }
+
+    if (drbg->meth == NULL) {
+        RANDerr(RAND_F_RAND_DRBG_INSTANTIATE,
+                RAND_R_NO_DRBG_IMPLEMENTATION_SELECTED);
+        goto end;
+    }
+
+    if (drbg->state != DRBG_UNINITIALISED) {
+        RANDerr(RAND_F_RAND_DRBG_INSTANTIATE,
+                drbg->state == DRBG_ERROR ? RAND_R_IN_ERROR_STATE
+                                          : RAND_R_ALREADY_INSTANTIATED);
+        goto end;
+    }
+
+    drbg->state = DRBG_ERROR;
+
+    /*
+     * NIST SP800-90Ar1 section 9.1 says you can combine getting the entropy
+     * and nonce in 1 call by increasing the entropy with 50% and increasing
+     * the minimum length to accomadate the length of the nonce.
+     * We do this in case a nonce is require and get_nonce is NULL.
+     */
+    if (drbg->min_noncelen > 0 && drbg->get_nonce == NULL) {
+        min_entropy += drbg->strength / 2;
+        min_entropylen += drbg->min_noncelen;
+        max_entropylen += drbg->max_noncelen;
+    }
+
+    drbg->reseed_next_counter = tsan_load(&drbg->reseed_prop_counter);
+    if (drbg->reseed_next_counter) {
+        drbg->reseed_next_counter++;
+        if(!drbg->reseed_next_counter)
+            drbg->reseed_next_counter = 1;
+    }
+
+    if (drbg->get_entropy != NULL)
+        entropylen = drbg->get_entropy(drbg, &entropy, min_entropy,
+                                       min_entropylen, max_entropylen, 0);
+    if (entropylen < min_entropylen
+            || entropylen > max_entropylen) {
+        RANDerr(RAND_F_RAND_DRBG_INSTANTIATE, RAND_R_ERROR_RETRIEVING_ENTROPY);
+        goto end;
+    }
+
+    if (drbg->min_noncelen > 0 && drbg->get_nonce != NULL) {
+        noncelen = drbg->get_nonce(drbg, &nonce, drbg->strength / 2,
+                                   drbg->min_noncelen, drbg->max_noncelen);
+        if (noncelen < drbg->min_noncelen || noncelen > drbg->max_noncelen) {
+            RANDerr(RAND_F_RAND_DRBG_INSTANTIATE, RAND_R_ERROR_RETRIEVING_NONCE);
+            goto end;
+        }
+    }
+
+    if (!drbg->meth->instantiate(drbg, entropy, entropylen,
+                         nonce, noncelen, pers, perslen)) {
+        RANDerr(RAND_F_RAND_DRBG_INSTANTIATE, RAND_R_ERROR_INSTANTIATING_DRBG);
+        goto end;
+    }
+
+    drbg->state = DRBG_READY;
+    drbg->reseed_gen_counter = 1;
+    drbg->reseed_time = time(NULL);
+    tsan_store(&drbg->reseed_prop_counter, drbg->reseed_next_counter);
+
+ end:
+    if (entropy != NULL && drbg->cleanup_entropy != NULL)
+        drbg->cleanup_entropy(drbg, entropy, entropylen);
+    if (nonce != NULL && drbg->cleanup_nonce != NULL)
+        drbg->cleanup_nonce(drbg, nonce, noncelen);
+    if (drbg->state == DRBG_READY)
+        return 1;
+    return 0;
+}
+
+/*
+ * Uninstantiate |drbg|. Must be instantiated before it can be used.
+ *
+ * Requires that drbg->lock is already locked for write, if non-null.
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+int RAND_DRBG_uninstantiate(RAND_DRBG *drbg)
+{
+    if (drbg->meth == NULL) {
+        drbg->state = DRBG_ERROR;
+        RANDerr(RAND_F_RAND_DRBG_UNINSTANTIATE,
+                RAND_R_NO_DRBG_IMPLEMENTATION_SELECTED);
+        return 0;
+    }
+
+    /* Clear the entire drbg->ctr struct, then reset some important
+     * members of the drbg->ctr struct (e.g. keysize, df_ks) to their
+     * initial values.
+     */
+    drbg->meth->uninstantiate(drbg);
+    return RAND_DRBG_set(drbg, drbg->type, drbg->flags);
+}
+
+/*
+ * Reseed |drbg|, mixing in the specified data
+ *
+ * Requires that drbg->lock is already locked for write, if non-null.
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+int RAND_DRBG_reseed(RAND_DRBG *drbg,
+                     const unsigned char *adin, size_t adinlen,
+                     int prediction_resistance)
+{
+    unsigned char *entropy = NULL;
+    size_t entropylen = 0;
+
+    if (drbg->state == DRBG_ERROR) {
+        RANDerr(RAND_F_RAND_DRBG_RESEED, RAND_R_IN_ERROR_STATE);
+        return 0;
+    }
+    if (drbg->state == DRBG_UNINITIALISED) {
+        RANDerr(RAND_F_RAND_DRBG_RESEED, RAND_R_NOT_INSTANTIATED);
+        return 0;
+    }
+
+    if (adin == NULL) {
+        adinlen = 0;
+    } else if (adinlen > drbg->max_adinlen) {
+        RANDerr(RAND_F_RAND_DRBG_RESEED, RAND_R_ADDITIONAL_INPUT_TOO_LONG);
+        return 0;
+    }
+
+    drbg->state = DRBG_ERROR;
+
+    drbg->reseed_next_counter = tsan_load(&drbg->reseed_prop_counter);
+    if (drbg->reseed_next_counter) {
+        drbg->reseed_next_counter++;
+        if(!drbg->reseed_next_counter)
+            drbg->reseed_next_counter = 1;
+    }
+
+    if (drbg->get_entropy != NULL)
+        entropylen = drbg->get_entropy(drbg, &entropy, drbg->strength,
+                                       drbg->min_entropylen,
+                                       drbg->max_entropylen,
+                                       prediction_resistance);
+    if (entropylen < drbg->min_entropylen
+            || entropylen > drbg->max_entropylen) {
+        RANDerr(RAND_F_RAND_DRBG_RESEED, RAND_R_ERROR_RETRIEVING_ENTROPY);
+        goto end;
+    }
+
+    if (!drbg->meth->reseed(drbg, entropy, entropylen, adin, adinlen))
+        goto end;
+
+    drbg->state = DRBG_READY;
+    drbg->reseed_gen_counter = 1;
+    drbg->reseed_time = time(NULL);
+    tsan_store(&drbg->reseed_prop_counter, drbg->reseed_next_counter);
+
+ end:
+    if (entropy != NULL && drbg->cleanup_entropy != NULL)
+        drbg->cleanup_entropy(drbg, entropy, entropylen);
+    if (drbg->state == DRBG_READY)
+        return 1;
+    return 0;
+}
+
+/*
+ * Restart |drbg|, using the specified entropy or additional input
+ *
+ * Tries its best to get the drbg instantiated by all means,
+ * regardless of its current state.
+ *
+ * Optionally, a |buffer| of |len| random bytes can be passed,
+ * which is assumed to contain at least |entropy| bits of entropy.
+ *
+ * If |entropy| > 0, the buffer content is used as entropy input.
+ *
+ * If |entropy| == 0, the buffer content is used as additional input
+ *
+ * Returns 1 on success, 0 on failure.
+ *
+ * This function is used internally only.
+ */
+int rand_drbg_restart(RAND_DRBG *drbg,
+                      const unsigned char *buffer, size_t len, size_t entropy)
+{
+    int reseeded = 0;
+    const unsigned char *adin = NULL;
+    size_t adinlen = 0;
+
+    if (drbg->seed_pool != NULL) {
+        RANDerr(RAND_F_RAND_DRBG_RESTART, ERR_R_INTERNAL_ERROR);
+        drbg->state = DRBG_ERROR;
+        rand_pool_free(drbg->seed_pool);
+        drbg->seed_pool = NULL;
+        return 0;
+    }
+
+    if (buffer != NULL) {
+        if (entropy > 0) {
+            if (drbg->max_entropylen < len) {
+                RANDerr(RAND_F_RAND_DRBG_RESTART,
+                    RAND_R_ENTROPY_INPUT_TOO_LONG);
+                drbg->state = DRBG_ERROR;
+                return 0;
+            }
+
+            if (entropy > 8 * len) {
+                RANDerr(RAND_F_RAND_DRBG_RESTART, RAND_R_ENTROPY_OUT_OF_RANGE);
+                drbg->state = DRBG_ERROR;
+                return 0;
+            }
+
+            /* will be picked up by the rand_drbg_get_entropy() callback */
+            drbg->seed_pool = rand_pool_attach(buffer, len, entropy);
+            if (drbg->seed_pool == NULL)
+                return 0;
+        } else {
+            if (drbg->max_adinlen < len) {
+                RANDerr(RAND_F_RAND_DRBG_RESTART,
+                        RAND_R_ADDITIONAL_INPUT_TOO_LONG);
+                drbg->state = DRBG_ERROR;
+                return 0;
+            }
+            adin = buffer;
+            adinlen = len;
+        }
+    }
+
+    /* repair error state */
+    if (drbg->state == DRBG_ERROR)
+        RAND_DRBG_uninstantiate(drbg);
+
+    /* repair uninitialized state */
+    if (drbg->state == DRBG_UNINITIALISED) {
+        /* reinstantiate drbg */
+        RAND_DRBG_instantiate(drbg,
+                              (const unsigned char *) ossl_pers_string,
+                              sizeof(ossl_pers_string) - 1);
+        /* already reseeded. prevent second reseeding below */
+        reseeded = (drbg->state == DRBG_READY);
+    }
+
+    /* refresh current state if entropy or additional input has been provided */
+    if (drbg->state == DRBG_READY) {
+        if (adin != NULL) {
+            /*
+             * mix in additional input without reseeding
+             *
+             * Similar to RAND_DRBG_reseed(), but the provided additional
+             * data |adin| is mixed into the current state without pulling
+             * entropy from the trusted entropy source using get_entropy().
+             * This is not a reseeding in the strict sense of NIST SP 800-90A.
+             */
+            drbg->meth->reseed(drbg, adin, adinlen, NULL, 0);
+        } else if (reseeded == 0) {
+            /* do a full reseeding if it has not been done yet above */
+            RAND_DRBG_reseed(drbg, NULL, 0, 0);
+        }
+    }
+
+    rand_pool_free(drbg->seed_pool);
+    drbg->seed_pool = NULL;
+
+    return drbg->state == DRBG_READY;
+}
+
+/*
+ * Generate |outlen| bytes into the buffer at |out|.  Reseed if we need
+ * to or if |prediction_resistance| is set.  Additional input can be
+ * sent in |adin| and |adinlen|.
+ *
+ * Requires that drbg->lock is already locked for write, if non-null.
+ *
+ * Returns 1 on success, 0 on failure.
+ *
+ */
+int RAND_DRBG_generate(RAND_DRBG *drbg, unsigned char *out, size_t outlen,
+                       int prediction_resistance,
+                       const unsigned char *adin, size_t adinlen)
+{
+    int reseed_required = 0;
+
+    if (drbg->state != DRBG_READY) {
+        /* try to recover from previous errors */
+        rand_drbg_restart(drbg, NULL, 0, 0);
+
+        if (drbg->state == DRBG_ERROR) {
+            RANDerr(RAND_F_RAND_DRBG_GENERATE, RAND_R_IN_ERROR_STATE);
+            return 0;
+        }
+        if (drbg->state == DRBG_UNINITIALISED) {
+            RANDerr(RAND_F_RAND_DRBG_GENERATE, RAND_R_NOT_INSTANTIATED);
+            return 0;
+        }
+    }
+
+    if (outlen > drbg->max_request) {
+        RANDerr(RAND_F_RAND_DRBG_GENERATE, RAND_R_REQUEST_TOO_LARGE_FOR_DRBG);
+        return 0;
+    }
+    if (adinlen > drbg->max_adinlen) {
+        RANDerr(RAND_F_RAND_DRBG_GENERATE, RAND_R_ADDITIONAL_INPUT_TOO_LONG);
+        return 0;
+    }
+
+    if (drbg->fork_count != rand_fork_count) {
+        drbg->fork_count = rand_fork_count;
+        reseed_required = 1;
+    }
+
+    if (drbg->reseed_interval > 0) {
+        if (drbg->reseed_gen_counter >= drbg->reseed_interval)
+            reseed_required = 1;
+    }
+    if (drbg->reseed_time_interval > 0) {
+        time_t now = time(NULL);
+        if (now < drbg->reseed_time
+            || now - drbg->reseed_time >= drbg->reseed_time_interval)
+            reseed_required = 1;
+    }
+    if (drbg->parent != NULL) {
+        unsigned int reseed_counter = tsan_load(&drbg->reseed_prop_counter);
+        if (reseed_counter > 0
+                && tsan_load(&drbg->parent->reseed_prop_counter)
+                   != reseed_counter)
+            reseed_required = 1;
+    }
+
+    if (reseed_required || prediction_resistance) {
+        if (!RAND_DRBG_reseed(drbg, adin, adinlen, prediction_resistance)) {
+            RANDerr(RAND_F_RAND_DRBG_GENERATE, RAND_R_RESEED_ERROR);
+            return 0;
+        }
+        adin = NULL;
+        adinlen = 0;
+    }
+
+    if (!drbg->meth->generate(drbg, out, outlen, adin, adinlen)) {
+        drbg->state = DRBG_ERROR;
+        RANDerr(RAND_F_RAND_DRBG_GENERATE, RAND_R_GENERATE_ERROR);
+        return 0;
+    }
+
+    drbg->reseed_gen_counter++;
+
+    return 1;
+}
+
+/*
+ * Generates |outlen| random bytes and stores them in |out|. It will
+ * using the given |drbg| to generate the bytes.
+ *
+ * Requires that drbg->lock is already locked for write, if non-null.
+ *
+ * Returns 1 on success 0 on failure.
+ */
+int RAND_DRBG_bytes(RAND_DRBG *drbg, unsigned char *out, size_t outlen)
+{
+    unsigned char *additional = NULL;
+    size_t additional_len;
+    size_t chunk;
+    size_t ret = 0;
+
+    if (drbg->adin_pool == NULL) {
+        if (drbg->type == 0)
+            goto err;
+        drbg->adin_pool = rand_pool_new(0, 0, drbg->max_adinlen);
+        if (drbg->adin_pool == NULL)
+            goto err;
+    }
+
+    additional_len = rand_drbg_get_additional_data(drbg->adin_pool,
+                                                   &additional);
+
+    for ( ; outlen > 0; outlen -= chunk, out += chunk) {
+        chunk = outlen;
+        if (chunk > drbg->max_request)
+            chunk = drbg->max_request;
+        ret = RAND_DRBG_generate(drbg, out, chunk, 0, additional, additional_len);
+        if (!ret)
+            goto err;
+    }
+    ret = 1;
+
+ err:
+    if (additional != NULL)
+        rand_drbg_cleanup_additional_data(drbg->adin_pool, additional);
+
+    return ret;
+}
+
+/*
+ * Set the RAND_DRBG callbacks for obtaining entropy and nonce.
+ *
+ * Setting the callbacks is allowed only if the drbg has not been
+ * initialized yet. Otherwise, the operation will fail.
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+int RAND_DRBG_set_callbacks(RAND_DRBG *drbg,
+                            RAND_DRBG_get_entropy_fn get_entropy,
+                            RAND_DRBG_cleanup_entropy_fn cleanup_entropy,
+                            RAND_DRBG_get_nonce_fn get_nonce,
+                            RAND_DRBG_cleanup_nonce_fn cleanup_nonce)
+{
+    if (drbg->state != DRBG_UNINITIALISED
+            || drbg->parent != NULL)
+        return 0;
+    drbg->get_entropy = get_entropy;
+    drbg->cleanup_entropy = cleanup_entropy;
+    drbg->get_nonce = get_nonce;
+    drbg->cleanup_nonce = cleanup_nonce;
+    return 1;
+}
+
+/*
+ * Set the reseed interval.
+ *
+ * The drbg will reseed automatically whenever the number of generate
+ * requests exceeds the given reseed interval. If the reseed interval
+ * is 0, then this feature is disabled.
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+int RAND_DRBG_set_reseed_interval(RAND_DRBG *drbg, unsigned int interval)
+{
+    if (interval > MAX_RESEED_INTERVAL)
+        return 0;
+    drbg->reseed_interval = interval;
+    return 1;
+}
+
+/*
+ * Set the reseed time interval.
+ *
+ * The drbg will reseed automatically whenever the time elapsed since
+ * the last reseeding exceeds the given reseed time interval. For safety,
+ * a reseeding will also occur if the clock has been reset to a smaller
+ * value.
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+int RAND_DRBG_set_reseed_time_interval(RAND_DRBG *drbg, time_t interval)
+{
+    if (interval > MAX_RESEED_TIME_INTERVAL)
+        return 0;
+    drbg->reseed_time_interval = interval;
+    return 1;
+}
+
+/*
+ * Set the default values for reseed (time) intervals of new DRBG instances
+ *
+ * The default values can be set independently for master DRBG instances
+ * (without a parent) and slave DRBG instances (with parent).
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+
+int RAND_DRBG_set_reseed_defaults(
+                                  unsigned int _master_reseed_interval,
+                                  unsigned int _slave_reseed_interval,
+                                  time_t _master_reseed_time_interval,
+                                  time_t _slave_reseed_time_interval
+                                  )
+{
+    if (_master_reseed_interval > MAX_RESEED_INTERVAL
+        || _slave_reseed_interval > MAX_RESEED_INTERVAL)
+        return 0;
+
+    if (_master_reseed_time_interval > MAX_RESEED_TIME_INTERVAL
+        || _slave_reseed_time_interval > MAX_RESEED_TIME_INTERVAL)
+        return 0;
+
+    master_reseed_interval = _master_reseed_interval;
+    slave_reseed_interval = _slave_reseed_interval;
+
+    master_reseed_time_interval = _master_reseed_time_interval;
+    slave_reseed_time_interval = _slave_reseed_time_interval;
+
+    return 1;
+}
+
+/*
+ * Locks the given drbg. Locking a drbg which does not have locking
+ * enabled is considered a successful no-op.
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+int rand_drbg_lock(RAND_DRBG *drbg)
+{
+    if (drbg->lock != NULL)
+        return CRYPTO_THREAD_write_lock(drbg->lock);
+
+    return 1;
+}
+
+/*
+ * Unlocks the given drbg. Unlocking a drbg which does not have locking
+ * enabled is considered a successful no-op.
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+int rand_drbg_unlock(RAND_DRBG *drbg)
+{
+    if (drbg->lock != NULL)
+        return CRYPTO_THREAD_unlock(drbg->lock);
+
+    return 1;
+}
+
+/*
+ * Enables locking for the given drbg
+ *
+ * Locking can only be enabled if the random generator
+ * is in the uninitialized state.
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+int rand_drbg_enable_locking(RAND_DRBG *drbg)
+{
+    if (drbg->state != DRBG_UNINITIALISED) {
+        RANDerr(RAND_F_RAND_DRBG_ENABLE_LOCKING,
+                RAND_R_DRBG_ALREADY_INITIALIZED);
+        return 0;
+    }
+
+    if (drbg->lock == NULL) {
+        if (drbg->parent != NULL && drbg->parent->lock == NULL) {
+            RANDerr(RAND_F_RAND_DRBG_ENABLE_LOCKING,
+                    RAND_R_PARENT_LOCKING_NOT_ENABLED);
+            return 0;
+        }
+
+        drbg->lock = CRYPTO_THREAD_lock_new();
+        if (drbg->lock == NULL) {
+            RANDerr(RAND_F_RAND_DRBG_ENABLE_LOCKING,
+                    RAND_R_FAILED_TO_CREATE_LOCK);
+            return 0;
+        }
+    }
+
+    return 1;
+}
+
+/*
+ * Get and set the EXDATA
+ */
+int RAND_DRBG_set_ex_data(RAND_DRBG *drbg, int idx, void *arg)
+{
+    return CRYPTO_set_ex_data(&drbg->ex_data, idx, arg);
+}
+
+void *RAND_DRBG_get_ex_data(const RAND_DRBG *drbg, int idx)
+{
+    return CRYPTO_get_ex_data(&drbg->ex_data, idx);
+}
+
+
+/*
+ * The following functions provide a RAND_METHOD that works on the
+ * global DRBG.  They lock.
+ */
+
+/*
+ * Allocates a new global DRBG on the secure heap (if enabled) and
+ * initializes it with default settings.
+ *
+ * Returns a pointer to the new DRBG instance on success, NULL on failure.
+ */
+static RAND_DRBG *drbg_setup(RAND_DRBG *parent)
+{
+    RAND_DRBG *drbg;
+
+    drbg = RAND_DRBG_secure_new(rand_drbg_type, rand_drbg_flags, parent);
+    if (drbg == NULL)
+        return NULL;
+
+    /* Only the master DRBG needs to have a lock */
+    if (parent == NULL && rand_drbg_enable_locking(drbg) == 0)
+        goto err;
+
+    /* enable seed propagation */
+    tsan_store(&drbg->reseed_prop_counter, 1);
+
+    /*
+     * Ignore instantiation error to support just-in-time instantiation.
+     *
+     * The state of the drbg will be checked in RAND_DRBG_generate() and
+     * an automatic recovery is attempted.
+     */
+    (void)RAND_DRBG_instantiate(drbg,
+                                (const unsigned char *) ossl_pers_string,
+                                sizeof(ossl_pers_string) - 1);
+    return drbg;
+
+err:
+    RAND_DRBG_free(drbg);
+    return NULL;
+}
+
+/*
+ * Initialize the global DRBGs on first use.
+ * Returns 1 on success, 0 on failure.
+ */
+DEFINE_RUN_ONCE_STATIC(do_rand_drbg_init)
+{
+    /*
+     * ensure that libcrypto is initialized, otherwise the
+     * DRBG locks are not cleaned up properly
+     */
+    if (!OPENSSL_init_crypto(0, NULL))
+        return 0;
+
+    if (!CRYPTO_THREAD_init_local(&private_drbg, NULL))
+        return 0;
+
+    if (!CRYPTO_THREAD_init_local(&public_drbg, NULL))
+        goto err1;
+
+    master_drbg = drbg_setup(NULL);
+    if (master_drbg == NULL)
+        goto err2;
+
+    return 1;
+
+err2:
+    CRYPTO_THREAD_cleanup_local(&public_drbg);
+err1:
+    CRYPTO_THREAD_cleanup_local(&private_drbg);
+    return 0;
+}
+
+/* Clean up the global DRBGs before exit */
+void rand_drbg_cleanup_int(void)
+{
+    if (master_drbg != NULL) {
+        RAND_DRBG_free(master_drbg);
+        master_drbg = NULL;
+
+        CRYPTO_THREAD_cleanup_local(&private_drbg);
+        CRYPTO_THREAD_cleanup_local(&public_drbg);
+    }
+}
+
+void drbg_delete_thread_state(void)
+{
+    RAND_DRBG *drbg;
+
+    drbg = CRYPTO_THREAD_get_local(&public_drbg);
+    CRYPTO_THREAD_set_local(&public_drbg, NULL);
+    RAND_DRBG_free(drbg);
+
+    drbg = CRYPTO_THREAD_get_local(&private_drbg);
+    CRYPTO_THREAD_set_local(&private_drbg, NULL);
+    RAND_DRBG_free(drbg);
+}
+
+/* Implements the default OpenSSL RAND_bytes() method */
+static int drbg_bytes(unsigned char *out, int count)
+{
+    int ret;
+    RAND_DRBG *drbg = RAND_DRBG_get0_public();
+
+    if (drbg == NULL)
+        return 0;
+
+    ret = RAND_DRBG_bytes(drbg, out, count);
+
+    return ret;
+}
+
+/*
+ * Calculates the minimum length of a full entropy buffer
+ * which is necessary to seed (i.e. instantiate) the DRBG
+ * successfully.
+ */
+size_t rand_drbg_seedlen(RAND_DRBG *drbg)
+{
+    /*
+     * If no os entropy source is available then RAND_seed(buffer, bufsize)
+     * is expected to succeed if and only if the buffer length satisfies
+     * the following requirements, which follow from the calculations
+     * in RAND_DRBG_instantiate().
+     */
+    size_t min_entropy = drbg->strength;
+    size_t min_entropylen = drbg->min_entropylen;
+
+    /*
+     * Extra entropy for the random nonce in the absence of a
+     * get_nonce callback, see comment in RAND_DRBG_instantiate().
+     */
+    if (drbg->min_noncelen > 0 && drbg->get_nonce == NULL) {
+        min_entropy += drbg->strength / 2;
+        min_entropylen += drbg->min_noncelen;
+    }
+
+    /*
+     * Convert entropy requirement from bits to bytes
+     * (dividing by 8 without rounding upwards, because
+     * all entropy requirements are divisible by 8).
+     */
+    min_entropy >>= 3;
+
+    /* Return a value that satisfies both requirements */
+    return min_entropy > min_entropylen ? min_entropy : min_entropylen;
+}
+
+/* Implements the default OpenSSL RAND_add() method */
+static int drbg_add(const void *buf, int num, double randomness)
+{
+    int ret = 0;
+    RAND_DRBG *drbg = RAND_DRBG_get0_master();
+    size_t buflen;
+    size_t seedlen;
+
+    if (drbg == NULL)
+        return 0;
+
+    if (num < 0 || randomness < 0.0)
+        return 0;
+
+    rand_drbg_lock(drbg);
+    seedlen = rand_drbg_seedlen(drbg);
+
+    buflen = (size_t)num;
+
+    if (buflen < seedlen || randomness < (double) seedlen) {
+#if defined(OPENSSL_RAND_SEED_NONE)
+        /*
+         * If no os entropy source is available, a reseeding will fail
+         * inevitably. So we use a trick to mix the buffer contents into
+         * the DRBG state without forcing a reseeding: we generate a
+         * dummy random byte, using the buffer content as additional data.
+         * Note: This won't work with RAND_DRBG_FLAG_CTR_NO_DF.
+         */
+        unsigned char dummy[1];
+
+        ret = RAND_DRBG_generate(drbg, dummy, sizeof(dummy), 0, buf, buflen);
+        rand_drbg_unlock(drbg);
+        return ret;
+#else
+        /*
+         * If an os entropy source is avaible then we declare the buffer content
+         * as additional data by setting randomness to zero and trigger a regular
+         * reseeding.
+         */
+        randomness = 0.0;
+#endif
+    }
+
+
+    if (randomness > (double)seedlen) {
+        /*
+         * The purpose of this check is to bound |randomness| by a
+         * relatively small value in order to prevent an integer
+         * overflow when multiplying by 8 in the rand_drbg_restart()
+         * call below. Note that randomness is measured in bytes,
+         * not bits, so this value corresponds to eight times the
+         * security strength.
+         */
+        randomness = (double)seedlen;
+    }
+
+    ret = rand_drbg_restart(drbg, buf, buflen, (size_t)(8 * randomness));
+    rand_drbg_unlock(drbg);
+
+    return ret;
+}
+
+/* Implements the default OpenSSL RAND_seed() method */
+static int drbg_seed(const void *buf, int num)
+{
+    return drbg_add(buf, num, num);
+}
+
+/* Implements the default OpenSSL RAND_status() method */
+static int drbg_status(void)
+{
+    int ret;
+    RAND_DRBG *drbg = RAND_DRBG_get0_master();
+
+    if (drbg == NULL)
+        return 0;
+
+    rand_drbg_lock(drbg);
+    ret = drbg->state == DRBG_READY ? 1 : 0;
+    rand_drbg_unlock(drbg);
+    return ret;
+}
+
+/*
+ * Get the master DRBG.
+ * Returns pointer to the DRBG on success, NULL on failure.
+ *
+ */
+RAND_DRBG *RAND_DRBG_get0_master(void)
+{
+    if (!RUN_ONCE(&rand_drbg_init, do_rand_drbg_init))
+        return NULL;
+
+    return master_drbg;
+}
+
+/*
+ * Get the public DRBG.
+ * Returns pointer to the DRBG on success, NULL on failure.
+ */
+RAND_DRBG *RAND_DRBG_get0_public(void)
+{
+    RAND_DRBG *drbg;
+
+    if (!RUN_ONCE(&rand_drbg_init, do_rand_drbg_init))
+        return NULL;
+
+    drbg = CRYPTO_THREAD_get_local(&public_drbg);
+    if (drbg == NULL) {
+        if (!ossl_init_thread_start(OPENSSL_INIT_THREAD_RAND))
+            return NULL;
+        drbg = drbg_setup(master_drbg);
+        CRYPTO_THREAD_set_local(&public_drbg, drbg);
+    }
+    return drbg;
+}
+
+/*
+ * Get the private DRBG.
+ * Returns pointer to the DRBG on success, NULL on failure.
+ */
+RAND_DRBG *RAND_DRBG_get0_private(void)
+{
+    RAND_DRBG *drbg;
+
+    if (!RUN_ONCE(&rand_drbg_init, do_rand_drbg_init))
+        return NULL;
+
+    drbg = CRYPTO_THREAD_get_local(&private_drbg);
+    if (drbg == NULL) {
+        if (!ossl_init_thread_start(OPENSSL_INIT_THREAD_RAND))
+            return NULL;
+        drbg = drbg_setup(master_drbg);
+        CRYPTO_THREAD_set_local(&private_drbg, drbg);
+    }
+    return drbg;
+}
+
+RAND_METHOD rand_meth = {
+    drbg_seed,
+    drbg_bytes,
+    NULL,
+    drbg_add,
+    drbg_bytes,
+    drbg_status
+};
+
+RAND_METHOD *RAND_OpenSSL(void)
+{
+    return &rand_meth;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_egd.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_egd.c
new file mode 100644
index 000000000..da3017df3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_egd.c
@@ -0,0 +1,158 @@
+/*
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+#ifdef OPENSSL_NO_EGD
+NON_EMPTY_TRANSLATION_UNIT
+#else
+
+# include <openssl/crypto.h>
+# include <openssl/e_os2.h>
+# include <openssl/rand.h>
+
+/*
+ * Query an EGD
+ */
+
+# if defined(OPENSSL_SYS_WIN32) || defined(OPENSSL_SYS_VMS) || defined(OPENSSL_SYS_MSDOS) || defined(OPENSSL_SYS_VXWORKS) || defined(OPENSSL_SYS_VOS) || defined(OPENSSL_SYS_UEFI)
+int RAND_query_egd_bytes(const char *path, unsigned char *buf, int bytes)
+{
+    return -1;
+}
+
+int RAND_egd(const char *path)
+{
+    return -1;
+}
+
+int RAND_egd_bytes(const char *path, int bytes)
+{
+    return -1;
+}
+
+# else
+
+#  include OPENSSL_UNISTD
+#  include <stddef.h>
+#  include <sys/types.h>
+#  include <sys/socket.h>
+#  ifndef NO_SYS_UN_H
+#   ifdef OPENSSL_SYS_VXWORKS
+#    include <streams/un.h>
+#   else
+#    include <sys/un.h>
+#   endif
+#  else
+struct sockaddr_un {
+    short sun_family;           /* AF_UNIX */
+    char sun_path[108];         /* path name (gag) */
+};
+#  endif                         /* NO_SYS_UN_H */
+#  include <string.h>
+#  include <errno.h>
+
+int RAND_query_egd_bytes(const char *path, unsigned char *buf, int bytes)
+{
+    FILE *fp = NULL;
+    struct sockaddr_un addr;
+    int mybuffer, ret = -1, i, numbytes, fd;
+    unsigned char tempbuf[255];
+
+    if (bytes > (int)sizeof(tempbuf))
+        return -1;
+
+    /* Make socket. */
+    memset(&addr, 0, sizeof(addr));
+    addr.sun_family = AF_UNIX;
+    if (strlen(path) >= sizeof(addr.sun_path))
+        return -1;
+    strcpy(addr.sun_path, path);
+    i = offsetof(struct sockaddr_un, sun_path) + strlen(path);
+    fd = socket(AF_UNIX, SOCK_STREAM, 0);
+    if (fd == -1 || (fp = fdopen(fd, "r+")) == NULL)
+        return -1;
+    setbuf(fp, NULL);
+
+    /* Try to connect */
+    for ( ; ; ) {
+        if (connect(fd, (struct sockaddr *)&addr, i) == 0)
+            break;
+#  ifdef EISCONN
+        if (errno == EISCONN)
+            break;
+#  endif
+        switch (errno) {
+#  ifdef EINTR
+        case EINTR:
+#  endif
+#  ifdef EAGAIN
+        case EAGAIN:
+#  endif
+#  ifdef EINPROGRESS
+        case EINPROGRESS:
+#  endif
+#  ifdef EALREADY
+        case EALREADY:
+#  endif
+            /* No error, try again */
+            break;
+        default:
+            ret = -1;
+            goto err;
+        }
+    }
+
+    /* Make request, see how many bytes we can get back. */
+    tempbuf[0] = 1;
+    tempbuf[1] = bytes;
+    if (fwrite(tempbuf, sizeof(char), 2, fp) != 2 || fflush(fp) == EOF)
+        goto err;
+    if (fread(tempbuf, sizeof(char), 1, fp) != 1 || tempbuf[0] == 0)
+        goto err;
+    numbytes = tempbuf[0];
+
+    /* Which buffer are we using? */
+    mybuffer = buf == NULL;
+    if (mybuffer)
+        buf = tempbuf;
+
+    /* Read bytes. */
+    i = fread(buf, sizeof(char), numbytes, fp);
+    if (i < numbytes)
+        goto err;
+    ret = numbytes;
+    if (mybuffer)
+        RAND_add(tempbuf, i, i);
+
+ err:
+    if (fp != NULL)
+        fclose(fp);
+    return ret;
+}
+
+int RAND_egd_bytes(const char *path, int bytes)
+{
+    int num;
+
+    num = RAND_query_egd_bytes(path, NULL, bytes);
+    if (num < 0)
+        return -1;
+    if (RAND_status() != 1)
+        return -1;
+    return num;
+}
+
+int RAND_egd(const char *path)
+{
+    return RAND_egd_bytes(path, 255);
+}
+
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_err.c
new file mode 100644
index 000000000..6a870455d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_err.c
@@ -0,0 +1,135 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/randerr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA RAND_str_functs[] = {
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_DRBG_BYTES, 0), "drbg_bytes"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_DRBG_GET_ENTROPY, 0), "drbg_get_entropy"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_DRBG_SETUP, 0), "drbg_setup"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_GET_ENTROPY, 0), "get_entropy"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_BYTES, 0), "RAND_bytes"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_ENABLE_LOCKING, 0),
+     "rand_drbg_enable_locking"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_GENERATE, 0),
+     "RAND_DRBG_generate"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_GET_ENTROPY, 0),
+     "rand_drbg_get_entropy"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_GET_NONCE, 0),
+     "rand_drbg_get_nonce"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_INSTANTIATE, 0),
+     "RAND_DRBG_instantiate"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_NEW, 0), "RAND_DRBG_new"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_RESEED, 0), "RAND_DRBG_reseed"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_RESTART, 0), "rand_drbg_restart"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_SET, 0), "RAND_DRBG_set"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_SET_DEFAULTS, 0),
+     "RAND_DRBG_set_defaults"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_UNINSTANTIATE, 0),
+     "RAND_DRBG_uninstantiate"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_LOAD_FILE, 0), "RAND_load_file"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_POOL_ACQUIRE_ENTROPY, 0),
+     "rand_pool_acquire_entropy"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_POOL_ADD, 0), "rand_pool_add"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_POOL_ADD_BEGIN, 0),
+     "rand_pool_add_begin"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_POOL_ADD_END, 0), "rand_pool_add_end"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_POOL_ATTACH, 0), "rand_pool_attach"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_POOL_BYTES_NEEDED, 0),
+     "rand_pool_bytes_needed"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_POOL_NEW, 0), "rand_pool_new"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_WRITE_FILE, 0), "RAND_write_file"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA RAND_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_ADDITIONAL_INPUT_TOO_LONG),
+    "additional input too long"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_ALREADY_INSTANTIATED),
+    "already instantiated"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_ARGUMENT_OUT_OF_RANGE),
+    "argument out of range"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_CANNOT_OPEN_FILE), "Cannot open file"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_DRBG_ALREADY_INITIALIZED),
+    "drbg already initialized"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_DRBG_NOT_INITIALISED),
+    "drbg not initialised"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_ENTROPY_INPUT_TOO_LONG),
+    "entropy input too long"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_ENTROPY_OUT_OF_RANGE),
+    "entropy out of range"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_ERROR_ENTROPY_POOL_WAS_IGNORED),
+    "error entropy pool was ignored"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_ERROR_INITIALISING_DRBG),
+    "error initialising drbg"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_ERROR_INSTANTIATING_DRBG),
+    "error instantiating drbg"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_ERROR_RETRIEVING_ADDITIONAL_INPUT),
+    "error retrieving additional input"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_ERROR_RETRIEVING_ENTROPY),
+    "error retrieving entropy"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_ERROR_RETRIEVING_NONCE),
+    "error retrieving nonce"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_FAILED_TO_CREATE_LOCK),
+    "failed to create lock"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_FUNC_NOT_IMPLEMENTED),
+    "Function not implemented"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_FWRITE_ERROR), "Error writing file"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_GENERATE_ERROR), "generate error"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_INTERNAL_ERROR), "internal error"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_IN_ERROR_STATE), "in error state"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_NOT_A_REGULAR_FILE),
+    "Not a regular file"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_NOT_INSTANTIATED), "not instantiated"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_NO_DRBG_IMPLEMENTATION_SELECTED),
+    "no drbg implementation selected"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_PARENT_LOCKING_NOT_ENABLED),
+    "parent locking not enabled"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_PARENT_STRENGTH_TOO_WEAK),
+    "parent strength too weak"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_PERSONALISATION_STRING_TOO_LONG),
+    "personalisation string too long"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_PREDICTION_RESISTANCE_NOT_SUPPORTED),
+    "prediction resistance not supported"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_PRNG_NOT_SEEDED), "PRNG not seeded"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_RANDOM_POOL_OVERFLOW),
+    "random pool overflow"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_RANDOM_POOL_UNDERFLOW),
+    "random pool underflow"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_REQUEST_TOO_LARGE_FOR_DRBG),
+    "request too large for drbg"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_RESEED_ERROR), "reseed error"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_SELFTEST_FAILURE), "selftest failure"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_TOO_LITTLE_NONCE_REQUESTED),
+    "too little nonce requested"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_TOO_MUCH_NONCE_REQUESTED),
+    "too much nonce requested"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_UNSUPPORTED_DRBG_FLAGS),
+    "unsupported drbg flags"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_UNSUPPORTED_DRBG_TYPE),
+    "unsupported drbg type"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_RAND_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(RAND_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(RAND_str_functs);
+        ERR_load_strings_const(RAND_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_lcl.h
new file mode 100644
index 000000000..c3e9804dc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_lcl.h
@@ -0,0 +1,293 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_RAND_LCL_H
+# define HEADER_RAND_LCL_H
+
+# include <openssl/aes.h>
+# include <openssl/evp.h>
+# include <openssl/sha.h>
+# include <openssl/hmac.h>
+# include <openssl/ec.h>
+# include <openssl/rand_drbg.h>
+# include "internal/tsan_assist.h"
+
+# include "internal/numbers.h"
+
+/* How many times to read the TSC as a randomness source. */
+# define TSC_READ_COUNT                 4
+
+/* Maximum reseed intervals */
+# define MAX_RESEED_INTERVAL                     (1 << 24)
+# define MAX_RESEED_TIME_INTERVAL                (1 << 20) /* approx. 12 days */
+
+/* Default reseed intervals */
+# define MASTER_RESEED_INTERVAL                  (1 << 8)
+# define SLAVE_RESEED_INTERVAL                   (1 << 16)
+# define MASTER_RESEED_TIME_INTERVAL             (60*60)   /* 1 hour */
+# define SLAVE_RESEED_TIME_INTERVAL              (7*60)    /* 7 minutes */
+
+
+
+/*
+ * Maximum input size for the DRBG (entropy, nonce, personalization string)
+ *
+ * NIST SP800 90Ar1 allows a maximum of (1 << 35) bits i.e., (1 << 32) bytes.
+ *
+ * We lower it to 'only' INT32_MAX bytes, which is equivalent to 2 gigabytes.
+ */
+# define DRBG_MAX_LENGTH                         INT32_MAX
+
+
+
+/*
+ * Maximum allocation size for RANDOM_POOL buffers
+ *
+ * The max_len value for the buffer provided to the rand_drbg_get_entropy()
+ * callback is currently 2^31 bytes (2 gigabytes), if a derivation function
+ * is used. Since this is much too large to be allocated, the rand_pool_new()
+ * function chooses more modest values as default pool length, bounded
+ * by RAND_POOL_MIN_LENGTH and RAND_POOL_MAX_LENGTH
+ *
+ * The choice of the RAND_POOL_FACTOR is large enough such that the
+ * RAND_POOL can store a random input which has a lousy entropy rate of
+ * 8/256 (= 0.03125) bits per byte. This input will be sent through the
+ * derivation function which 'compresses' the low quality input into a
+ * high quality output.
+ *
+ * The factor 1.5 below is the pessimistic estimate for the extra amount
+ * of entropy required when no get_nonce() callback is defined.
+ */
+# define RAND_POOL_FACTOR        256
+# define RAND_POOL_MAX_LENGTH    (RAND_POOL_FACTOR * \
+                                  3 * (RAND_DRBG_STRENGTH / 16))
+/*
+ *                             = (RAND_POOL_FACTOR * \
+ *                                1.5 * (RAND_DRBG_STRENGTH / 8))
+ */
+
+
+/* DRBG status values */
+typedef enum drbg_status_e {
+    DRBG_UNINITIALISED,
+    DRBG_READY,
+    DRBG_ERROR
+} DRBG_STATUS;
+
+
+/* instantiate */
+typedef int (*RAND_DRBG_instantiate_fn)(RAND_DRBG *ctx,
+                                        const unsigned char *ent,
+                                        size_t entlen,
+                                        const unsigned char *nonce,
+                                        size_t noncelen,
+                                        const unsigned char *pers,
+                                        size_t perslen);
+/* reseed */
+typedef int (*RAND_DRBG_reseed_fn)(RAND_DRBG *ctx,
+                                   const unsigned char *ent,
+                                   size_t entlen,
+                                   const unsigned char *adin,
+                                   size_t adinlen);
+/* generate output */
+typedef int (*RAND_DRBG_generate_fn)(RAND_DRBG *ctx,
+                                     unsigned char *out,
+                                     size_t outlen,
+                                     const unsigned char *adin,
+                                     size_t adinlen);
+/* uninstantiate */
+typedef int (*RAND_DRBG_uninstantiate_fn)(RAND_DRBG *ctx);
+
+
+/*
+ * The DRBG methods
+ */
+
+typedef struct rand_drbg_method_st {
+    RAND_DRBG_instantiate_fn instantiate;
+    RAND_DRBG_reseed_fn reseed;
+    RAND_DRBG_generate_fn generate;
+    RAND_DRBG_uninstantiate_fn uninstantiate;
+} RAND_DRBG_METHOD;
+
+
+/*
+ * The state of a DRBG AES-CTR.
+ */
+typedef struct rand_drbg_ctr_st {
+    EVP_CIPHER_CTX *ctx;
+    EVP_CIPHER_CTX *ctx_df;
+    const EVP_CIPHER *cipher;
+    size_t keylen;
+    unsigned char K[32];
+    unsigned char V[16];
+    /* Temporary block storage used by ctr_df */
+    unsigned char bltmp[16];
+    size_t bltmp_pos;
+    unsigned char KX[48];
+} RAND_DRBG_CTR;
+
+
+/*
+ * The 'random pool' acts as a dumb container for collecting random
+ * input from various entropy sources. The pool has no knowledge about
+ * whether its randomness is fed into a legacy RAND_METHOD via RAND_add()
+ * or into a new style RAND_DRBG. It is the callers duty to 1) initialize the
+ * random pool, 2) pass it to the polling callbacks, 3) seed the RNG, and
+ * 4) cleanup the random pool again.
+ *
+ * The random pool contains no locking mechanism because its scope and
+ * lifetime is intended to be restricted to a single stack frame.
+ */
+struct rand_pool_st {
+    unsigned char *buffer;  /* points to the beginning of the random pool */
+    size_t len; /* current number of random bytes contained in the pool */
+
+    int attached;  /* true pool was attached to existing buffer */
+
+    size_t min_len; /* minimum number of random bytes requested */
+    size_t max_len; /* maximum number of random bytes (allocated buffer size) */
+    size_t entropy; /* current entropy count in bits */
+    size_t entropy_requested; /* requested entropy count in bits */
+};
+
+/*
+ * The state of all types of DRBGs, even though we only have CTR mode
+ * right now.
+ */
+struct rand_drbg_st {
+    CRYPTO_RWLOCK *lock;
+    RAND_DRBG *parent;
+    int secure; /* 1: allocated on the secure heap, 0: otherwise */
+    int type; /* the nid of the underlying algorithm */
+    /*
+     * Stores the value of the rand_fork_count global as of when we last
+     * reseeded.  The DRBG reseeds automatically whenever drbg->fork_count !=
+     * rand_fork_count.  Used to provide fork-safety and reseed this DRBG in
+     * the child process.
+     */
+    int fork_count;
+    unsigned short flags; /* various external flags */
+
+    /*
+     * The random_data is used by RAND_add()/drbg_add() to attach random
+     * data to the global drbg, such that the rand_drbg_get_entropy() callback
+     * can pull it during instantiation and reseeding. This is necessary to
+     * reconcile the different philosophies of the RAND and the RAND_DRBG
+     * with respect to how randomness is added to the RNG during reseeding
+     * (see PR #4328).
+     */
+    struct rand_pool_st *seed_pool;
+
+    /*
+     * Auxiliary pool for additional data.
+     */
+    struct rand_pool_st *adin_pool;
+
+    /*
+     * The following parameters are setup by the per-type "init" function.
+     *
+     * Currently the only type is CTR_DRBG, its init function is drbg_ctr_init().
+     *
+     * The parameters are closely related to the ones described in
+     * section '10.2.1 CTR_DRBG' of [NIST SP 800-90Ar1], with one
+     * crucial difference: In the NIST standard, all counts are given
+     * in bits, whereas in OpenSSL entropy counts are given in bits
+     * and buffer lengths are given in bytes.
+     *
+     * Since this difference has lead to some confusion in the past,
+     * (see [GitHub Issue #2443], formerly [rt.openssl.org #4055])
+     * the 'len' suffix has been added to all buffer sizes for
+     * clarification.
+     */
+
+    int strength;
+    size_t max_request;
+    size_t min_entropylen, max_entropylen;
+    size_t min_noncelen, max_noncelen;
+    size_t max_perslen, max_adinlen;
+
+    /* Counts the number of generate requests since the last reseed. */
+    unsigned int reseed_gen_counter;
+    /*
+     * Maximum number of generate requests until a reseed is required.
+     * This value is ignored if it is zero.
+     */
+    unsigned int reseed_interval;
+    /* Stores the time when the last reseeding occurred */
+    time_t reseed_time;
+    /*
+     * Specifies the maximum time interval (in seconds) between reseeds.
+     * This value is ignored if it is zero.
+     */
+    time_t reseed_time_interval;
+    /*
+     * Counts the number of reseeds since instantiation.
+     * This value is ignored if it is zero.
+     *
+     * This counter is used only for seed propagation from the <master> DRBG
+     * to its two children, the <public> and <private> DRBG. This feature is
+     * very special and its sole purpose is to ensure that any randomness which
+     * is added by RAND_add() or RAND_seed() will have an immediate effect on
+     * the output of RAND_bytes() resp. RAND_priv_bytes().
+     */
+    TSAN_QUALIFIER unsigned int reseed_prop_counter;
+    unsigned int reseed_next_counter;
+
+    size_t seedlen;
+    DRBG_STATUS state;
+
+    /* Application data, mainly used in the KATs. */
+    CRYPTO_EX_DATA ex_data;
+
+    /* Implementation specific data (currently only one implementation) */
+    union {
+        RAND_DRBG_CTR ctr;
+    } data;
+
+    /* Implementation specific methods */
+    RAND_DRBG_METHOD *meth;
+
+    /* Callback functions.  See comments in rand_lib.c */
+    RAND_DRBG_get_entropy_fn get_entropy;
+    RAND_DRBG_cleanup_entropy_fn cleanup_entropy;
+    RAND_DRBG_get_nonce_fn get_nonce;
+    RAND_DRBG_cleanup_nonce_fn cleanup_nonce;
+};
+
+/* The global RAND method, and the global buffer and DRBG instance. */
+extern RAND_METHOD rand_meth;
+
+/*
+ * A "generation count" of forks.  Incremented in the child process after a
+ * fork.  Since rand_fork_count is increment-only, and only ever written to in
+ * the child process of the fork, which is guaranteed to be single-threaded, no
+ * locking is needed for normal (read) accesses; the rest of pthread fork
+ * processing is assumed to introduce the necessary memory barriers.  Sibling
+ * children of a given parent will produce duplicate values, but this is not
+ * problematic because the reseeding process pulls input from the system CSPRNG
+ * and/or other global sources, so the siblings will end up generating
+ * different output streams.
+ */
+extern int rand_fork_count;
+
+/* DRBG helpers */
+int rand_drbg_restart(RAND_DRBG *drbg,
+                      const unsigned char *buffer, size_t len, size_t entropy);
+size_t rand_drbg_seedlen(RAND_DRBG *drbg);
+/* locking api */
+int rand_drbg_lock(RAND_DRBG *drbg);
+int rand_drbg_unlock(RAND_DRBG *drbg);
+int rand_drbg_enable_locking(RAND_DRBG *drbg);
+
+
+/* initializes the AES-CTR DRBG implementation */
+int drbg_ctr_init(RAND_DRBG *drbg);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_lib.c
new file mode 100644
index 000000000..d8639c4a0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_lib.c
@@ -0,0 +1,859 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include "internal/cryptlib.h"
+#include <openssl/opensslconf.h>
+#include "internal/rand_int.h"
+#include <openssl/engine.h>
+#include "internal/thread_once.h"
+#include "rand_lcl.h"
+#include "e_os.h"
+
+#ifndef OPENSSL_NO_ENGINE
+/* non-NULL if default_RAND_meth is ENGINE-provided */
+static ENGINE *funct_ref;
+static CRYPTO_RWLOCK *rand_engine_lock;
+#endif
+static CRYPTO_RWLOCK *rand_meth_lock;
+static const RAND_METHOD *default_RAND_meth;
+static CRYPTO_ONCE rand_init = CRYPTO_ONCE_STATIC_INIT;
+
+int rand_fork_count;
+
+static CRYPTO_RWLOCK *rand_nonce_lock;
+static int rand_nonce_count;
+
+static int rand_inited = 0;
+
+#ifdef OPENSSL_RAND_SEED_RDTSC
+/*
+ * IMPORTANT NOTE:  It is not currently possible to use this code
+ * because we are not sure about the amount of randomness it provides.
+ * Some SP900 tests have been run, but there is internal skepticism.
+ * So for now this code is not used.
+ */
+# error "RDTSC enabled?  Should not be possible!"
+
+/*
+ * Acquire entropy from high-speed clock
+ *
+ * Since we get some randomness from the low-order bits of the
+ * high-speed clock, it can help.
+ *
+ * Returns the total entropy count, if it exceeds the requested
+ * entropy count. Otherwise, returns an entropy count of 0.
+ */
+size_t rand_acquire_entropy_from_tsc(RAND_POOL *pool)
+{
+    unsigned char c;
+    int i;
+
+    if ((OPENSSL_ia32cap_P[0] & (1 << 4)) != 0) {
+        for (i = 0; i < TSC_READ_COUNT; i++) {
+            c = (unsigned char)(OPENSSL_rdtsc() & 0xFF);
+            rand_pool_add(pool, &c, 1, 4);
+        }
+    }
+    return rand_pool_entropy_available(pool);
+}
+#endif
+
+#ifdef OPENSSL_RAND_SEED_RDCPU
+size_t OPENSSL_ia32_rdseed_bytes(unsigned char *buf, size_t len);
+size_t OPENSSL_ia32_rdrand_bytes(unsigned char *buf, size_t len);
+
+extern unsigned int OPENSSL_ia32cap_P[];
+
+/*
+ * Acquire entropy using Intel-specific cpu instructions
+ *
+ * Uses the RDSEED instruction if available, otherwise uses
+ * RDRAND if available.
+ *
+ * For the differences between RDSEED and RDRAND, and why RDSEED
+ * is the preferred choice, see https://goo.gl/oK3KcN
+ *
+ * Returns the total entropy count, if it exceeds the requested
+ * entropy count. Otherwise, returns an entropy count of 0.
+ */
+size_t rand_acquire_entropy_from_cpu(RAND_POOL *pool)
+{
+    size_t bytes_needed;
+    unsigned char *buffer;
+
+    bytes_needed = rand_pool_bytes_needed(pool, 1 /*entropy_factor*/);
+    if (bytes_needed > 0) {
+        buffer = rand_pool_add_begin(pool, bytes_needed);
+
+        if (buffer != NULL) {
+            /* Whichever comes first, use RDSEED, RDRAND or nothing */
+            if ((OPENSSL_ia32cap_P[2] & (1 << 18)) != 0) {
+                if (OPENSSL_ia32_rdseed_bytes(buffer, bytes_needed)
+                    == bytes_needed) {
+                    rand_pool_add_end(pool, bytes_needed, 8 * bytes_needed);
+                }
+            } else if ((OPENSSL_ia32cap_P[1] & (1 << (62 - 32))) != 0) {
+                if (OPENSSL_ia32_rdrand_bytes(buffer, bytes_needed)
+                    == bytes_needed) {
+                    rand_pool_add_end(pool, bytes_needed, 8 * bytes_needed);
+                }
+            } else {
+                rand_pool_add_end(pool, 0, 0);
+            }
+        }
+    }
+
+    return rand_pool_entropy_available(pool);
+}
+#endif
+
+
+/*
+ * Implements the get_entropy() callback (see RAND_DRBG_set_callbacks())
+ *
+ * If the DRBG has a parent, then the required amount of entropy input
+ * is fetched using the parent's RAND_DRBG_generate().
+ *
+ * Otherwise, the entropy is polled from the system entropy sources
+ * using rand_pool_acquire_entropy().
+ *
+ * If a random pool has been added to the DRBG using RAND_add(), then
+ * its entropy will be used up first.
+ */
+size_t rand_drbg_get_entropy(RAND_DRBG *drbg,
+                             unsigned char **pout,
+                             int entropy, size_t min_len, size_t max_len,
+                             int prediction_resistance)
+{
+    size_t ret = 0;
+    size_t entropy_available = 0;
+    RAND_POOL *pool;
+
+    if (drbg->parent && drbg->strength > drbg->parent->strength) {
+        /*
+         * We currently don't support the algorithm from NIST SP 800-90C
+         * 10.1.2 to use a weaker DRBG as source
+         */
+        RANDerr(RAND_F_RAND_DRBG_GET_ENTROPY, RAND_R_PARENT_STRENGTH_TOO_WEAK);
+        return 0;
+    }
+
+    if (drbg->seed_pool != NULL) {
+        pool = drbg->seed_pool;
+        pool->entropy_requested = entropy;
+    } else {
+        pool = rand_pool_new(entropy, min_len, max_len);
+        if (pool == NULL)
+            return 0;
+    }
+
+    if (drbg->parent) {
+        size_t bytes_needed = rand_pool_bytes_needed(pool, 1 /*entropy_factor*/);
+        unsigned char *buffer = rand_pool_add_begin(pool, bytes_needed);
+
+        if (buffer != NULL) {
+            size_t bytes = 0;
+
+            /*
+             * Get random from parent, include our state as additional input.
+             * Our lock is already held, but we need to lock our parent before
+             * generating bits from it. (Note: taking the lock will be a no-op
+             * if locking if drbg->parent->lock == NULL.)
+             */
+            rand_drbg_lock(drbg->parent);
+            if (RAND_DRBG_generate(drbg->parent,
+                                   buffer, bytes_needed,
+                                   prediction_resistance,
+                                   NULL, 0) != 0)
+                bytes = bytes_needed;
+            drbg->reseed_next_counter
+                = tsan_load(&drbg->parent->reseed_prop_counter);
+            rand_drbg_unlock(drbg->parent);
+
+            rand_pool_add_end(pool, bytes, 8 * bytes);
+            entropy_available = rand_pool_entropy_available(pool);
+        }
+
+    } else {
+        if (prediction_resistance) {
+            /*
+             * We don't have any entropy sources that comply with the NIST
+             * standard to provide prediction resistance (see NIST SP 800-90C,
+             * Section 5.4).
+             */
+            RANDerr(RAND_F_RAND_DRBG_GET_ENTROPY,
+                    RAND_R_PREDICTION_RESISTANCE_NOT_SUPPORTED);
+            goto err;
+        }
+
+        /* Get entropy by polling system entropy sources. */
+        entropy_available = rand_pool_acquire_entropy(pool);
+    }
+
+    if (entropy_available > 0) {
+        ret   = rand_pool_length(pool);
+        *pout = rand_pool_detach(pool);
+    }
+
+ err:
+    if (drbg->seed_pool == NULL)
+        rand_pool_free(pool);
+    return ret;
+}
+
+/*
+ * Implements the cleanup_entropy() callback (see RAND_DRBG_set_callbacks())
+ *
+ */
+void rand_drbg_cleanup_entropy(RAND_DRBG *drbg,
+                               unsigned char *out, size_t outlen)
+{
+    if (drbg->seed_pool == NULL)
+        OPENSSL_secure_clear_free(out, outlen);
+}
+
+
+/*
+ * Implements the get_nonce() callback (see RAND_DRBG_set_callbacks())
+ *
+ */
+size_t rand_drbg_get_nonce(RAND_DRBG *drbg,
+                           unsigned char **pout,
+                           int entropy, size_t min_len, size_t max_len)
+{
+    size_t ret = 0;
+    RAND_POOL *pool;
+
+    struct {
+        void * instance;
+        int count;
+    } data = { 0 };
+
+    pool = rand_pool_new(0, min_len, max_len);
+    if (pool == NULL)
+        return 0;
+
+    if (rand_pool_add_nonce_data(pool) == 0)
+        goto err;
+
+    data.instance = drbg;
+    CRYPTO_atomic_add(&rand_nonce_count, 1, &data.count, rand_nonce_lock);
+
+    if (rand_pool_add(pool, (unsigned char *)&data, sizeof(data), 0) == 0)
+        goto err;
+
+    ret   = rand_pool_length(pool);
+    *pout = rand_pool_detach(pool);
+
+ err:
+    rand_pool_free(pool);
+
+    return ret;
+}
+
+/*
+ * Implements the cleanup_nonce() callback (see RAND_DRBG_set_callbacks())
+ *
+ */
+void rand_drbg_cleanup_nonce(RAND_DRBG *drbg,
+                             unsigned char *out, size_t outlen)
+{
+    OPENSSL_secure_clear_free(out, outlen);
+}
+
+/*
+ * Generate additional data that can be used for the drbg. The data does
+ * not need to contain entropy, but it's useful if it contains at least
+ * some bits that are unpredictable.
+ *
+ * Returns 0 on failure.
+ *
+ * On success it allocates a buffer at |*pout| and returns the length of
+ * the data. The buffer should get freed using OPENSSL_secure_clear_free().
+ */
+size_t rand_drbg_get_additional_data(RAND_POOL *pool, unsigned char **pout)
+{
+    size_t ret = 0;
+
+    if (rand_pool_add_additional_data(pool) == 0)
+        goto err;
+
+    ret = rand_pool_length(pool);
+    *pout = rand_pool_detach(pool);
+
+ err:
+    return ret;
+}
+
+void rand_drbg_cleanup_additional_data(RAND_POOL *pool, unsigned char *out)
+{
+    rand_pool_reattach(pool, out);
+}
+
+void rand_fork(void)
+{
+    rand_fork_count++;
+}
+
+DEFINE_RUN_ONCE_STATIC(do_rand_init)
+{
+#ifndef OPENSSL_NO_ENGINE
+    rand_engine_lock = CRYPTO_THREAD_lock_new();
+    if (rand_engine_lock == NULL)
+        return 0;
+#endif
+
+    rand_meth_lock = CRYPTO_THREAD_lock_new();
+    if (rand_meth_lock == NULL)
+        goto err1;
+
+    rand_nonce_lock = CRYPTO_THREAD_lock_new();
+    if (rand_nonce_lock == NULL)
+        goto err2;
+
+    if (!rand_pool_init())
+        goto err3;
+
+    rand_inited = 1;
+    return 1;
+
+err3:
+    CRYPTO_THREAD_lock_free(rand_nonce_lock);
+    rand_nonce_lock = NULL;
+err2:
+    CRYPTO_THREAD_lock_free(rand_meth_lock);
+    rand_meth_lock = NULL;
+err1:
+#ifndef OPENSSL_NO_ENGINE
+    CRYPTO_THREAD_lock_free(rand_engine_lock);
+    rand_engine_lock = NULL;
+#endif
+    return 0;
+}
+
+void rand_cleanup_int(void)
+{
+    const RAND_METHOD *meth = default_RAND_meth;
+
+    if (!rand_inited)
+        return;
+
+    if (meth != NULL && meth->cleanup != NULL)
+        meth->cleanup();
+    RAND_set_rand_method(NULL);
+    rand_pool_cleanup();
+#ifndef OPENSSL_NO_ENGINE
+    CRYPTO_THREAD_lock_free(rand_engine_lock);
+    rand_engine_lock = NULL;
+#endif
+    CRYPTO_THREAD_lock_free(rand_meth_lock);
+    rand_meth_lock = NULL;
+    CRYPTO_THREAD_lock_free(rand_nonce_lock);
+    rand_nonce_lock = NULL;
+    rand_inited = 0;
+}
+
+/*
+ * RAND_close_seed_files() ensures that any seed file decriptors are
+ * closed after use.
+ */
+void RAND_keep_random_devices_open(int keep)
+{
+    if (RUN_ONCE(&rand_init, do_rand_init))
+        rand_pool_keep_random_devices_open(keep);
+}
+
+/*
+ * RAND_poll() reseeds the default RNG using random input
+ *
+ * The random input is obtained from polling various entropy
+ * sources which depend on the operating system and are
+ * configurable via the --with-rand-seed configure option.
+ */
+int RAND_poll(void)
+{
+    int ret = 0;
+
+    RAND_POOL *pool = NULL;
+
+    const RAND_METHOD *meth = RAND_get_rand_method();
+
+    if (meth == RAND_OpenSSL()) {
+        /* fill random pool and seed the master DRBG */
+        RAND_DRBG *drbg = RAND_DRBG_get0_master();
+
+        if (drbg == NULL)
+            return 0;
+
+        rand_drbg_lock(drbg);
+        ret = rand_drbg_restart(drbg, NULL, 0, 0);
+        rand_drbg_unlock(drbg);
+
+        return ret;
+
+    } else {
+        /* fill random pool and seed the current legacy RNG */
+        pool = rand_pool_new(RAND_DRBG_STRENGTH,
+                             RAND_DRBG_STRENGTH / 8,
+                             RAND_POOL_MAX_LENGTH);
+        if (pool == NULL)
+            return 0;
+
+        if (rand_pool_acquire_entropy(pool) == 0)
+            goto err;
+
+        if (meth->add == NULL
+            || meth->add(rand_pool_buffer(pool),
+                         rand_pool_length(pool),
+                         (rand_pool_entropy(pool) / 8.0)) == 0)
+            goto err;
+
+        ret = 1;
+    }
+
+err:
+    rand_pool_free(pool);
+    return ret;
+}
+
+/*
+ * Allocate memory and initialize a new random pool
+ */
+
+RAND_POOL *rand_pool_new(int entropy_requested, size_t min_len, size_t max_len)
+{
+    RAND_POOL *pool = OPENSSL_zalloc(sizeof(*pool));
+
+    if (pool == NULL) {
+        RANDerr(RAND_F_RAND_POOL_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    pool->min_len = min_len;
+    pool->max_len = (max_len > RAND_POOL_MAX_LENGTH) ?
+        RAND_POOL_MAX_LENGTH : max_len;
+
+    pool->buffer = OPENSSL_secure_zalloc(pool->max_len);
+    if (pool->buffer == NULL) {
+        RANDerr(RAND_F_RAND_POOL_NEW, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    pool->entropy_requested = entropy_requested;
+
+    return pool;
+
+err:
+    OPENSSL_free(pool);
+    return NULL;
+}
+
+/*
+ * Attach new random pool to the given buffer
+ *
+ * This function is intended to be used only for feeding random data
+ * provided by RAND_add() and RAND_seed() into the <master> DRBG.
+ */
+RAND_POOL *rand_pool_attach(const unsigned char *buffer, size_t len,
+                            size_t entropy)
+{
+    RAND_POOL *pool = OPENSSL_zalloc(sizeof(*pool));
+
+    if (pool == NULL) {
+        RANDerr(RAND_F_RAND_POOL_ATTACH, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    /*
+     * The const needs to be cast away, but attached buffers will not be
+     * modified (in contrary to allocated buffers which are zeroed and
+     * freed in the end).
+     */
+    pool->buffer = (unsigned char *) buffer;
+    pool->len = len;
+
+    pool->attached = 1;
+
+    pool->min_len = pool->max_len = pool->len;
+    pool->entropy = entropy;
+
+    return pool;
+}
+
+/*
+ * Free |pool|, securely erasing its buffer.
+ */
+void rand_pool_free(RAND_POOL *pool)
+{
+    if (pool == NULL)
+        return;
+
+    /*
+     * Although it would be advisable from a cryptographical viewpoint,
+     * we are not allowed to clear attached buffers, since they are passed
+     * to rand_pool_attach() as `const unsigned char*`.
+     * (see corresponding comment in rand_pool_attach()).
+     */
+    if (!pool->attached)
+        OPENSSL_secure_clear_free(pool->buffer, pool->max_len);
+    OPENSSL_free(pool);
+}
+
+/*
+ * Return the |pool|'s buffer to the caller (readonly).
+ */
+const unsigned char *rand_pool_buffer(RAND_POOL *pool)
+{
+    return pool->buffer;
+}
+
+/*
+ * Return the |pool|'s entropy to the caller.
+ */
+size_t rand_pool_entropy(RAND_POOL *pool)
+{
+    return pool->entropy;
+}
+
+/*
+ * Return the |pool|'s buffer length to the caller.
+ */
+size_t rand_pool_length(RAND_POOL *pool)
+{
+    return pool->len;
+}
+
+/*
+ * Detach the |pool| buffer and return it to the caller.
+ * It's the responsibility of the caller to free the buffer
+ * using OPENSSL_secure_clear_free() or to re-attach it
+ * again to the pool using rand_pool_reattach().
+ */
+unsigned char *rand_pool_detach(RAND_POOL *pool)
+{
+    unsigned char *ret = pool->buffer;
+    pool->buffer = NULL;
+    pool->entropy = 0;
+    return ret;
+}
+
+/*
+ * Re-attach the |pool| buffer. It is only allowed to pass
+ * the |buffer| which was previously detached from the same pool.
+ */
+void rand_pool_reattach(RAND_POOL *pool, unsigned char *buffer)
+{
+    pool->buffer = buffer;
+    OPENSSL_cleanse(pool->buffer, pool->len);
+    pool->len = 0;
+}
+
+/*
+ * If |entropy_factor| bits contain 1 bit of entropy, how many bytes does one
+ * need to obtain at least |bits| bits of entropy?
+ */
+#define ENTROPY_TO_BYTES(bits, entropy_factor) \
+    (((bits) * (entropy_factor) + 7) / 8)
+
+
+/*
+ * Checks whether the |pool|'s entropy is available to the caller.
+ * This is the case when entropy count and buffer length are high enough.
+ * Returns
+ *
+ *  |entropy|  if the entropy count and buffer size is large enough
+ *      0      otherwise
+ */
+size_t rand_pool_entropy_available(RAND_POOL *pool)
+{
+    if (pool->entropy < pool->entropy_requested)
+        return 0;
+
+    if (pool->len < pool->min_len)
+        return 0;
+
+    return pool->entropy;
+}
+
+/*
+ * Returns the (remaining) amount of entropy needed to fill
+ * the random pool.
+ */
+
+size_t rand_pool_entropy_needed(RAND_POOL *pool)
+{
+    if (pool->entropy < pool->entropy_requested)
+        return pool->entropy_requested - pool->entropy;
+
+    return 0;
+}
+
+/*
+ * Returns the number of bytes needed to fill the pool, assuming
+ * the input has 1 / |entropy_factor| entropy bits per data bit.
+ * In case of an error, 0 is returned.
+ */
+
+size_t rand_pool_bytes_needed(RAND_POOL *pool, unsigned int entropy_factor)
+{
+    size_t bytes_needed;
+    size_t entropy_needed = rand_pool_entropy_needed(pool);
+
+    if (entropy_factor < 1) {
+        RANDerr(RAND_F_RAND_POOL_BYTES_NEEDED, RAND_R_ARGUMENT_OUT_OF_RANGE);
+        return 0;
+    }
+
+    bytes_needed = ENTROPY_TO_BYTES(entropy_needed, entropy_factor);
+
+    if (bytes_needed > pool->max_len - pool->len) {
+        /* not enough space left */
+        RANDerr(RAND_F_RAND_POOL_BYTES_NEEDED, RAND_R_RANDOM_POOL_OVERFLOW);
+        return 0;
+    }
+
+    if (pool->len < pool->min_len &&
+        bytes_needed < pool->min_len - pool->len)
+        /* to meet the min_len requirement */
+        bytes_needed = pool->min_len - pool->len;
+
+    return bytes_needed;
+}
+
+/* Returns the remaining number of bytes available */
+size_t rand_pool_bytes_remaining(RAND_POOL *pool)
+{
+    return pool->max_len - pool->len;
+}
+
+/*
+ * Add random bytes to the random pool.
+ *
+ * It is expected that the |buffer| contains |len| bytes of
+ * random input which contains at least |entropy| bits of
+ * randomness.
+ *
+ * Returns 1 if the added amount is adequate, otherwise 0
+ */
+int rand_pool_add(RAND_POOL *pool,
+                  const unsigned char *buffer, size_t len, size_t entropy)
+{
+    if (len > pool->max_len - pool->len) {
+        RANDerr(RAND_F_RAND_POOL_ADD, RAND_R_ENTROPY_INPUT_TOO_LONG);
+        return 0;
+    }
+
+    if (pool->buffer == NULL) {
+        RANDerr(RAND_F_RAND_POOL_ADD, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (len > 0) {
+        memcpy(pool->buffer + pool->len, buffer, len);
+        pool->len += len;
+        pool->entropy += entropy;
+    }
+
+    return 1;
+}
+
+/*
+ * Start to add random bytes to the random pool in-place.
+ *
+ * Reserves the next |len| bytes for adding random bytes in-place
+ * and returns a pointer to the buffer.
+ * The caller is allowed to copy up to |len| bytes into the buffer.
+ * If |len| == 0 this is considered a no-op and a NULL pointer
+ * is returned without producing an error message.
+ *
+ * After updating the buffer, rand_pool_add_end() needs to be called
+ * to finish the udpate operation (see next comment).
+ */
+unsigned char *rand_pool_add_begin(RAND_POOL *pool, size_t len)
+{
+    if (len == 0)
+        return NULL;
+
+    if (len > pool->max_len - pool->len) {
+        RANDerr(RAND_F_RAND_POOL_ADD_BEGIN, RAND_R_RANDOM_POOL_OVERFLOW);
+        return NULL;
+    }
+
+    if (pool->buffer == NULL) {
+        RANDerr(RAND_F_RAND_POOL_ADD_BEGIN, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    return pool->buffer + pool->len;
+}
+
+/*
+ * Finish to add random bytes to the random pool in-place.
+ *
+ * Finishes an in-place update of the random pool started by
+ * rand_pool_add_begin() (see previous comment).
+ * It is expected that |len| bytes of random input have been added
+ * to the buffer which contain at least |entropy| bits of randomness.
+ * It is allowed to add less bytes than originally reserved.
+ */
+int rand_pool_add_end(RAND_POOL *pool, size_t len, size_t entropy)
+{
+    if (len > pool->max_len - pool->len) {
+        RANDerr(RAND_F_RAND_POOL_ADD_END, RAND_R_RANDOM_POOL_OVERFLOW);
+        return 0;
+    }
+
+    if (len > 0) {
+        pool->len += len;
+        pool->entropy += entropy;
+    }
+
+    return 1;
+}
+
+int RAND_set_rand_method(const RAND_METHOD *meth)
+{
+    if (!RUN_ONCE(&rand_init, do_rand_init))
+        return 0;
+
+    CRYPTO_THREAD_write_lock(rand_meth_lock);
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_finish(funct_ref);
+    funct_ref = NULL;
+#endif
+    default_RAND_meth = meth;
+    CRYPTO_THREAD_unlock(rand_meth_lock);
+    return 1;
+}
+
+const RAND_METHOD *RAND_get_rand_method(void)
+{
+    const RAND_METHOD *tmp_meth = NULL;
+
+    if (!RUN_ONCE(&rand_init, do_rand_init))
+        return NULL;
+
+    CRYPTO_THREAD_write_lock(rand_meth_lock);
+    if (default_RAND_meth == NULL) {
+#ifndef OPENSSL_NO_ENGINE
+        ENGINE *e;
+
+        /* If we have an engine that can do RAND, use it. */
+        if ((e = ENGINE_get_default_RAND()) != NULL
+                && (tmp_meth = ENGINE_get_RAND(e)) != NULL) {
+            funct_ref = e;
+            default_RAND_meth = tmp_meth;
+        } else {
+            ENGINE_finish(e);
+            default_RAND_meth = &rand_meth;
+        }
+#else
+        default_RAND_meth = &rand_meth;
+#endif
+    }
+    tmp_meth = default_RAND_meth;
+    CRYPTO_THREAD_unlock(rand_meth_lock);
+    return tmp_meth;
+}
+
+#ifndef OPENSSL_NO_ENGINE
+int RAND_set_rand_engine(ENGINE *engine)
+{
+    const RAND_METHOD *tmp_meth = NULL;
+
+    if (!RUN_ONCE(&rand_init, do_rand_init))
+        return 0;
+
+    if (engine != NULL) {
+        if (!ENGINE_init(engine))
+            return 0;
+        tmp_meth = ENGINE_get_RAND(engine);
+        if (tmp_meth == NULL) {
+            ENGINE_finish(engine);
+            return 0;
+        }
+    }
+    CRYPTO_THREAD_write_lock(rand_engine_lock);
+    /* This function releases any prior ENGINE so call it first */
+    RAND_set_rand_method(tmp_meth);
+    funct_ref = engine;
+    CRYPTO_THREAD_unlock(rand_engine_lock);
+    return 1;
+}
+#endif
+
+void RAND_seed(const void *buf, int num)
+{
+    const RAND_METHOD *meth = RAND_get_rand_method();
+
+    if (meth->seed != NULL)
+        meth->seed(buf, num);
+}
+
+void RAND_add(const void *buf, int num, double randomness)
+{
+    const RAND_METHOD *meth = RAND_get_rand_method();
+
+    if (meth->add != NULL)
+        meth->add(buf, num, randomness);
+}
+
+/*
+ * This function is not part of RAND_METHOD, so if we're not using
+ * the default method, then just call RAND_bytes().  Otherwise make
+ * sure we're instantiated and use the private DRBG.
+ */
+int RAND_priv_bytes(unsigned char *buf, int num)
+{
+    const RAND_METHOD *meth = RAND_get_rand_method();
+    RAND_DRBG *drbg;
+    int ret;
+
+    if (meth != RAND_OpenSSL())
+        return RAND_bytes(buf, num);
+
+    drbg = RAND_DRBG_get0_private();
+    if (drbg == NULL)
+        return 0;
+
+    ret = RAND_DRBG_bytes(drbg, buf, num);
+    return ret;
+}
+
+int RAND_bytes(unsigned char *buf, int num)
+{
+    const RAND_METHOD *meth = RAND_get_rand_method();
+
+    if (meth->bytes != NULL)
+        return meth->bytes(buf, num);
+    RANDerr(RAND_F_RAND_BYTES, RAND_R_FUNC_NOT_IMPLEMENTED);
+    return -1;
+}
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+int RAND_pseudo_bytes(unsigned char *buf, int num)
+{
+    const RAND_METHOD *meth = RAND_get_rand_method();
+
+    if (meth->pseudorand != NULL)
+        return meth->pseudorand(buf, num);
+    return -1;
+}
+#endif
+
+int RAND_status(void)
+{
+    const RAND_METHOD *meth = RAND_get_rand_method();
+
+    if (meth->status != NULL)
+        return meth->status();
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_unix.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_unix.c
new file mode 100644
index 000000000..9cbc9ade7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_unix.c
@@ -0,0 +1,707 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef _GNU_SOURCE
+# define _GNU_SOURCE
+#endif
+#include "e_os.h"
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/rand.h>
+#include "rand_lcl.h"
+#include "internal/rand_int.h"
+#include <stdio.h>
+#include "internal/dso.h"
+#if defined(__linux)
+# include <sys/syscall.h>
+#endif
+#if defined(__FreeBSD__)
+# include <sys/types.h>
+# include <sys/sysctl.h>
+# include <sys/param.h>
+#endif
+#if defined(__OpenBSD__) || defined(__NetBSD__)
+# include <sys/param.h>
+#endif
+
+#if defined(OPENSSL_SYS_UNIX) || defined(__DJGPP__)
+# include <sys/types.h>
+# include <sys/stat.h>
+# include <fcntl.h>
+# include <unistd.h>
+# include <sys/time.h>
+
+static uint64_t get_time_stamp(void);
+static uint64_t get_timer_bits(void);
+
+/* Macro to convert two thirty two bit values into a sixty four bit one */
+# define TWO32TO64(a, b) ((((uint64_t)(a)) << 32) + (b))
+
+/*
+ * Check for the existence and support of POSIX timers.  The standard
+ * says that the _POSIX_TIMERS macro will have a positive value if they
+ * are available.
+ *
+ * However, we want an additional constraint: that the timer support does
+ * not require an extra library dependency.  Early versions of glibc
+ * require -lrt to be specified on the link line to access the timers,
+ * so this needs to be checked for.
+ *
+ * It is worse because some libraries define __GLIBC__ but don't
+ * support the version testing macro (e.g. uClibc).  This means
+ * an extra check is needed.
+ *
+ * The final condition is:
+ *      "have posix timers and either not glibc or glibc without -lrt"
+ *
+ * The nested #if sequences are required to avoid using a parameterised
+ * macro that might be undefined.
+ */
+# undef OSSL_POSIX_TIMER_OKAY
+# if defined(_POSIX_TIMERS) && _POSIX_TIMERS > 0
+#  if defined(__GLIBC__)
+#   if defined(__GLIBC_PREREQ)
+#    if __GLIBC_PREREQ(2, 17)
+#     define OSSL_POSIX_TIMER_OKAY
+#    endif
+#   endif
+#  else
+#   define OSSL_POSIX_TIMER_OKAY
+#  endif
+# endif
+#endif /* defined(OPENSSL_SYS_UNIX) || defined(__DJGPP__) */
+
+#if defined(OPENSSL_RAND_SEED_NONE)
+/* none means none. this simplifies the following logic */
+# undef OPENSSL_RAND_SEED_OS
+# undef OPENSSL_RAND_SEED_GETRANDOM
+# undef OPENSSL_RAND_SEED_LIBRANDOM
+# undef OPENSSL_RAND_SEED_DEVRANDOM
+# undef OPENSSL_RAND_SEED_RDTSC
+# undef OPENSSL_RAND_SEED_RDCPU
+# undef OPENSSL_RAND_SEED_EGD
+#endif
+
+#if (defined(OPENSSL_SYS_VXWORKS) || defined(OPENSSL_SYS_UEFI)) && \
+        !defined(OPENSSL_RAND_SEED_NONE)
+# error "UEFI and VXWorks only support seeding NONE"
+#endif
+
+#if defined(OPENSSL_SYS_VXWORKS)
+/* empty implementation */
+int rand_pool_init(void)
+{
+    return 1;
+}
+
+void rand_pool_cleanup(void)
+{
+}
+
+void rand_pool_keep_random_devices_open(int keep)
+{
+}
+
+size_t rand_pool_acquire_entropy(RAND_POOL *pool)
+{
+    return rand_pool_entropy_available(pool);
+}
+#endif
+
+#if !(defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_WIN32) \
+    || defined(OPENSSL_SYS_VMS) || defined(OPENSSL_SYS_VXWORKS) \
+    || defined(OPENSSL_SYS_UEFI))
+
+# if defined(OPENSSL_SYS_VOS)
+
+#  ifndef OPENSSL_RAND_SEED_OS
+#   error "Unsupported seeding method configured; must be os"
+#  endif
+
+#  if defined(OPENSSL_SYS_VOS_HPPA) && defined(OPENSSL_SYS_VOS_IA32)
+#   error "Unsupported HP-PA and IA32 at the same time."
+#  endif
+#  if !defined(OPENSSL_SYS_VOS_HPPA) && !defined(OPENSSL_SYS_VOS_IA32)
+#   error "Must have one of HP-PA or IA32"
+#  endif
+
+/*
+ * The following algorithm repeatedly samples the real-time clock (RTC) to
+ * generate a sequence of unpredictable data.  The algorithm relies upon the
+ * uneven execution speed of the code (due to factors such as cache misses,
+ * interrupts, bus activity, and scheduling) and upon the rather large
+ * relative difference between the speed of the clock and the rate at which
+ * it can be read.  If it is ported to an environment where execution speed
+ * is more constant or where the RTC ticks at a much slower rate, or the
+ * clock can be read with fewer instructions, it is likely that the results
+ * would be far more predictable.  This should only be used for legacy
+ * platforms.
+ *
+ * As a precaution, we assume only 2 bits of entropy per byte.
+ */
+size_t rand_pool_acquire_entropy(RAND_POOL *pool)
+{
+    short int code;
+    int i, k;
+    size_t bytes_needed;
+    struct timespec ts;
+    unsigned char v;
+#  ifdef OPENSSL_SYS_VOS_HPPA
+    long duration;
+    extern void s$sleep(long *_duration, short int *_code);
+#  else
+    long long duration;
+    extern void s$sleep2(long long *_duration, short int *_code);
+#  endif
+
+    bytes_needed = rand_pool_bytes_needed(pool, 4 /*entropy_factor*/);
+
+    for (i = 0; i < bytes_needed; i++) {
+        /*
+         * burn some cpu; hope for interrupts, cache collisions, bus
+         * interference, etc.
+         */
+        for (k = 0; k < 99; k++)
+            ts.tv_nsec = random();
+
+#  ifdef OPENSSL_SYS_VOS_HPPA
+        /* sleep for 1/1024 of a second (976 us).  */
+        duration = 1;
+        s$sleep(&duration, &code);
+#  else
+        /* sleep for 1/65536 of a second (15 us).  */
+        duration = 1;
+        s$sleep2(&duration, &code);
+#  endif
+
+        /* Get wall clock time, take 8 bits. */
+        clock_gettime(CLOCK_REALTIME, &ts);
+        v = (unsigned char)(ts.tv_nsec & 0xFF);
+        rand_pool_add(pool, arg, &v, sizeof(v) , 2);
+    }
+    return rand_pool_entropy_available(pool);
+}
+
+void rand_pool_cleanup(void)
+{
+}
+
+void rand_pool_keep_random_devices_open(int keep)
+{
+}
+
+# else
+
+#  if defined(OPENSSL_RAND_SEED_EGD) && \
+        (defined(OPENSSL_NO_EGD) || !defined(DEVRANDOM_EGD))
+#   error "Seeding uses EGD but EGD is turned off or no device given"
+#  endif
+
+#  if defined(OPENSSL_RAND_SEED_DEVRANDOM) && !defined(DEVRANDOM)
+#   error "Seeding uses urandom but DEVRANDOM is not configured"
+#  endif
+
+#  if defined(OPENSSL_RAND_SEED_OS)
+#   if !defined(DEVRANDOM)
+#    error "OS seeding requires DEVRANDOM to be configured"
+#   endif
+#   define OPENSSL_RAND_SEED_GETRANDOM
+#   define OPENSSL_RAND_SEED_DEVRANDOM
+#  endif
+
+#  if defined(OPENSSL_RAND_SEED_LIBRANDOM)
+#   error "librandom not (yet) supported"
+#  endif
+
+#  if (defined(__FreeBSD__) || defined(__NetBSD__)) && defined(KERN_ARND)
+/*
+ * sysctl_random(): Use sysctl() to read a random number from the kernel
+ * Returns the number of bytes returned in buf on success, -1 on failure.
+ */
+static ssize_t sysctl_random(char *buf, size_t buflen)
+{
+    int mib[2];
+    size_t done = 0;
+    size_t len;
+
+    /*
+     * Note: sign conversion between size_t and ssize_t is safe even
+     * without a range check, see comment in syscall_random()
+     */
+
+    /*
+     * On FreeBSD old implementations returned longs, newer versions support
+     * variable sizes up to 256 byte. The code below would not work properly
+     * when the sysctl returns long and we want to request something not a
+     * multiple of longs, which should never be the case.
+     */
+    if (!ossl_assert(buflen % sizeof(long) == 0)) {
+        errno = EINVAL;
+        return -1;
+    }
+
+    /*
+     * On NetBSD before 4.0 KERN_ARND was an alias for KERN_URND, and only
+     * filled in an int, leaving the rest uninitialized. Since NetBSD 4.0
+     * it returns a variable number of bytes with the current version supporting
+     * up to 256 bytes.
+     * Just return an error on older NetBSD versions.
+     */
+#if   defined(__NetBSD__) && __NetBSD_Version__ < 400000000
+    errno = ENOSYS;
+    return -1;
+#endif
+
+    mib[0] = CTL_KERN;
+    mib[1] = KERN_ARND;
+
+    do {
+        len = buflen;
+        if (sysctl(mib, 2, buf, &len, NULL, 0) == -1)
+            return done > 0 ? done : -1;
+        done += len;
+        buf += len;
+        buflen -= len;
+    } while (buflen > 0);
+
+    return done;
+}
+#  endif
+
+#  if defined(OPENSSL_RAND_SEED_GETRANDOM)
+/*
+ * syscall_random(): Try to get random data using a system call
+ * returns the number of bytes returned in buf, or < 0 on error.
+ */
+static ssize_t syscall_random(void *buf, size_t buflen)
+{
+    /*
+     * Note: 'buflen' equals the size of the buffer which is used by the
+     * get_entropy() callback of the RAND_DRBG. It is roughly bounded by
+     *
+     *   2 * RAND_POOL_FACTOR * (RAND_DRBG_STRENGTH / 8) = 2^14
+     *
+     * which is way below the OSSL_SSIZE_MAX limit. Therefore sign conversion
+     * between size_t and ssize_t is safe even without a range check.
+     */
+
+    /*
+     * Do runtime detection to find getentropy().
+     *
+     * Known OSs that should support this:
+     * - Darwin since 16 (OSX 10.12, IOS 10.0).
+     * - Solaris since 11.3
+     * - OpenBSD since 5.6
+     * - Linux since 3.17 with glibc 2.25
+     * - FreeBSD since 12.0 (1200061)
+     */
+#  if defined(__GNUC__) && __GNUC__>=2 && defined(__ELF__) && !defined(__hpux)
+    extern int getentropy(void *buffer, size_t length) __attribute__((weak));
+
+    if (getentropy != NULL)
+        return getentropy(buf, buflen) == 0 ? (ssize_t)buflen : -1;
+#  else
+    union {
+        void *p;
+        int (*f)(void *buffer, size_t length);
+    } p_getentropy;
+
+    /*
+     * We could cache the result of the lookup, but we normally don't
+     * call this function often.
+     */
+    ERR_set_mark();
+    p_getentropy.p = DSO_global_lookup("getentropy");
+    ERR_pop_to_mark();
+    if (p_getentropy.p != NULL)
+        return p_getentropy.f(buf, buflen) == 0 ? (ssize_t)buflen : -1;
+#  endif
+
+    /* Linux supports this since version 3.17 */
+#  if defined(__linux) && defined(SYS_getrandom)
+    return syscall(SYS_getrandom, buf, buflen, 0);
+#  elif (defined(__FreeBSD__) || defined(__NetBSD__)) && defined(KERN_ARND)
+    return sysctl_random(buf, buflen);
+#  else
+    errno = ENOSYS;
+    return -1;
+#  endif
+}
+#  endif    /* defined(OPENSSL_RAND_SEED_GETRANDOM) */
+
+#  if defined(OPENSSL_RAND_SEED_DEVRANDOM)
+static const char *random_device_paths[] = { DEVRANDOM };
+static struct random_device {
+    int fd;
+    dev_t dev;
+    ino_t ino;
+    mode_t mode;
+    dev_t rdev;
+} random_devices[OSSL_NELEM(random_device_paths)];
+static int keep_random_devices_open = 1;
+
+/*
+ * Verify that the file descriptor associated with the random source is
+ * still valid. The rationale for doing this is the fact that it is not
+ * uncommon for daemons to close all open file handles when daemonizing.
+ * So the handle might have been closed or even reused for opening
+ * another file.
+ */
+static int check_random_device(struct random_device * rd)
+{
+    struct stat st;
+
+    return rd->fd != -1
+           && fstat(rd->fd, &st) != -1
+           && rd->dev == st.st_dev
+           && rd->ino == st.st_ino
+           && ((rd->mode ^ st.st_mode) & ~(S_IRWXU | S_IRWXG | S_IRWXO)) == 0
+           && rd->rdev == st.st_rdev;
+}
+
+/*
+ * Open a random device if required and return its file descriptor or -1 on error
+ */
+static int get_random_device(size_t n)
+{
+    struct stat st;
+    struct random_device * rd = &random_devices[n];
+
+    /* reuse existing file descriptor if it is (still) valid */
+    if (check_random_device(rd))
+        return rd->fd;
+
+    /* open the random device ... */
+    if ((rd->fd = open(random_device_paths[n], O_RDONLY)) == -1)
+        return rd->fd;
+
+    /* ... and cache its relevant stat(2) data */
+    if (fstat(rd->fd, &st) != -1) {
+        rd->dev = st.st_dev;
+        rd->ino = st.st_ino;
+        rd->mode = st.st_mode;
+        rd->rdev = st.st_rdev;
+    } else {
+        close(rd->fd);
+        rd->fd = -1;
+    }
+
+    return rd->fd;
+}
+
+/*
+ * Close a random device making sure it is a random device
+ */
+static void close_random_device(size_t n)
+{
+    struct random_device * rd = &random_devices[n];
+
+    if (check_random_device(rd))
+        close(rd->fd);
+    rd->fd = -1;
+}
+
+int rand_pool_init(void)
+{
+    size_t i;
+
+    for (i = 0; i < OSSL_NELEM(random_devices); i++)
+        random_devices[i].fd = -1;
+
+    return 1;
+}
+
+void rand_pool_cleanup(void)
+{
+    size_t i;
+
+    for (i = 0; i < OSSL_NELEM(random_devices); i++)
+        close_random_device(i);
+}
+
+void rand_pool_keep_random_devices_open(int keep)
+{
+    if (!keep)
+        rand_pool_cleanup();
+
+    keep_random_devices_open = keep;
+}
+
+#  else     /* !defined(OPENSSL_RAND_SEED_DEVRANDOM) */
+
+int rand_pool_init(void)
+{
+    return 1;
+}
+
+void rand_pool_cleanup(void)
+{
+}
+
+void rand_pool_keep_random_devices_open(int keep)
+{
+}
+
+#  endif    /* defined(OPENSSL_RAND_SEED_DEVRANDOM) */
+
+/*
+ * Try the various seeding methods in turn, exit when successful.
+ *
+ * TODO(DRBG): If more than one entropy source is available, is it
+ * preferable to stop as soon as enough entropy has been collected
+ * (as favored by @rsalz) or should one rather be defensive and add
+ * more entropy than requested and/or from different sources?
+ *
+ * Currently, the user can select multiple entropy sources in the
+ * configure step, yet in practice only the first available source
+ * will be used. A more flexible solution has been requested, but
+ * currently it is not clear how this can be achieved without
+ * overengineering the problem. There are many parameters which
+ * could be taken into account when selecting the order and amount
+ * of input from the different entropy sources (trust, quality,
+ * possibility of blocking).
+ */
+size_t rand_pool_acquire_entropy(RAND_POOL *pool)
+{
+#  if defined(OPENSSL_RAND_SEED_NONE)
+    return rand_pool_entropy_available(pool);
+#  else
+    size_t bytes_needed;
+    size_t entropy_available = 0;
+    unsigned char *buffer;
+
+#   if defined(OPENSSL_RAND_SEED_GETRANDOM)
+    {
+        ssize_t bytes;
+        /* Maximum allowed number of consecutive unsuccessful attempts */
+        int attempts = 3;
+
+        bytes_needed = rand_pool_bytes_needed(pool, 1 /*entropy_factor*/);
+        while (bytes_needed != 0 && attempts-- > 0) {
+            buffer = rand_pool_add_begin(pool, bytes_needed);
+            bytes = syscall_random(buffer, bytes_needed);
+            if (bytes > 0) {
+                rand_pool_add_end(pool, bytes, 8 * bytes);
+                bytes_needed -= bytes;
+                attempts = 3; /* reset counter after successful attempt */
+            } else if (bytes < 0 && errno != EINTR) {
+                break;
+            }
+        }
+    }
+    entropy_available = rand_pool_entropy_available(pool);
+    if (entropy_available > 0)
+        return entropy_available;
+#   endif
+
+#   if defined(OPENSSL_RAND_SEED_LIBRANDOM)
+    {
+        /* Not yet implemented. */
+    }
+#   endif
+
+#   if defined(OPENSSL_RAND_SEED_DEVRANDOM)
+    bytes_needed = rand_pool_bytes_needed(pool, 1 /*entropy_factor*/);
+    {
+        size_t i;
+
+        for (i = 0; bytes_needed > 0 && i < OSSL_NELEM(random_device_paths); i++) {
+            ssize_t bytes = 0;
+            /* Maximum allowed number of consecutive unsuccessful attempts */
+            int attempts = 3;
+            const int fd = get_random_device(i);
+
+            if (fd == -1)
+                continue;
+
+            while (bytes_needed != 0 && attempts-- > 0) {
+                buffer = rand_pool_add_begin(pool, bytes_needed);
+                bytes = read(fd, buffer, bytes_needed);
+
+                if (bytes > 0) {
+                    rand_pool_add_end(pool, bytes, 8 * bytes);
+                    bytes_needed -= bytes;
+                    attempts = 3; /* reset counter after successful attempt */
+                } else if (bytes < 0 && errno != EINTR) {
+                    break;
+                }
+            }
+            if (bytes < 0 || !keep_random_devices_open)
+                close_random_device(i);
+
+            bytes_needed = rand_pool_bytes_needed(pool, 1 /*entropy_factor*/);
+        }
+        entropy_available = rand_pool_entropy_available(pool);
+        if (entropy_available > 0)
+            return entropy_available;
+    }
+#   endif
+
+#   if defined(OPENSSL_RAND_SEED_RDTSC)
+    entropy_available = rand_acquire_entropy_from_tsc(pool);
+    if (entropy_available > 0)
+        return entropy_available;
+#   endif
+
+#   if defined(OPENSSL_RAND_SEED_RDCPU)
+    entropy_available = rand_acquire_entropy_from_cpu(pool);
+    if (entropy_available > 0)
+        return entropy_available;
+#   endif
+
+#   if defined(OPENSSL_RAND_SEED_EGD)
+    bytes_needed = rand_pool_bytes_needed(pool, 1 /*entropy_factor*/);
+    if (bytes_needed > 0) {
+        static const char *paths[] = { DEVRANDOM_EGD, NULL };
+        int i;
+
+        for (i = 0; paths[i] != NULL; i++) {
+            buffer = rand_pool_add_begin(pool, bytes_needed);
+            if (buffer != NULL) {
+                size_t bytes = 0;
+                int num = RAND_query_egd_bytes(paths[i],
+                                               buffer, (int)bytes_needed);
+                if (num == (int)bytes_needed)
+                    bytes = bytes_needed;
+
+                rand_pool_add_end(pool, bytes, 8 * bytes);
+                entropy_available = rand_pool_entropy_available(pool);
+            }
+            if (entropy_available > 0)
+                return entropy_available;
+        }
+    }
+#   endif
+
+    return rand_pool_entropy_available(pool);
+#  endif
+}
+# endif
+#endif
+
+#if defined(OPENSSL_SYS_UNIX) || defined(__DJGPP__)
+int rand_pool_add_nonce_data(RAND_POOL *pool)
+{
+    struct {
+        pid_t pid;
+        CRYPTO_THREAD_ID tid;
+        uint64_t time;
+    } data = { 0 };
+
+    /*
+     * Add process id, thread id, and a high resolution timestamp to
+     * ensure that the nonce is unique with high probability for
+     * different process instances.
+     */
+    data.pid = getpid();
+    data.tid = CRYPTO_THREAD_get_current_id();
+    data.time = get_time_stamp();
+
+    return rand_pool_add(pool, (unsigned char *)&data, sizeof(data), 0);
+}
+
+int rand_pool_add_additional_data(RAND_POOL *pool)
+{
+    struct {
+        CRYPTO_THREAD_ID tid;
+        uint64_t time;
+    } data = { 0 };
+
+    /*
+     * Add some noise from the thread id and a high resolution timer.
+     * The thread id adds a little randomness if the drbg is accessed
+     * concurrently (which is the case for the <master> drbg).
+     */
+    data.tid = CRYPTO_THREAD_get_current_id();
+    data.time = get_timer_bits();
+
+    return rand_pool_add(pool, (unsigned char *)&data, sizeof(data), 0);
+}
+
+
+/*
+ * Get the current time with the highest possible resolution
+ *
+ * The time stamp is added to the nonce, so it is optimized for not repeating.
+ * The current time is ideal for this purpose, provided the computer's clock
+ * is synchronized.
+ */
+static uint64_t get_time_stamp(void)
+{
+# if defined(OSSL_POSIX_TIMER_OKAY)
+    {
+        struct timespec ts;
+
+        if (clock_gettime(CLOCK_REALTIME, &ts) == 0)
+            return TWO32TO64(ts.tv_sec, ts.tv_nsec);
+    }
+# endif
+# if defined(__unix__) \
+     || (defined(_POSIX_C_SOURCE) && _POSIX_C_SOURCE >= 200112L)
+    {
+        struct timeval tv;
+
+        if (gettimeofday(&tv, NULL) == 0)
+            return TWO32TO64(tv.tv_sec, tv.tv_usec);
+    }
+# endif
+    return time(NULL);
+}
+
+/*
+ * Get an arbitrary timer value of the highest possible resolution
+ *
+ * The timer value is added as random noise to the additional data,
+ * which is not considered a trusted entropy sourec, so any result
+ * is acceptable.
+ */
+static uint64_t get_timer_bits(void)
+{
+    uint64_t res = OPENSSL_rdtsc();
+
+    if (res != 0)
+        return res;
+
+# if defined(__sun) || defined(__hpux)
+    return gethrtime();
+# elif defined(_AIX)
+    {
+        timebasestruct_t t;
+
+        read_wall_time(&t, TIMEBASE_SZ);
+        return TWO32TO64(t.tb_high, t.tb_low);
+    }
+# elif defined(OSSL_POSIX_TIMER_OKAY)
+    {
+        struct timespec ts;
+
+#  ifdef CLOCK_BOOTTIME
+#   define CLOCK_TYPE CLOCK_BOOTTIME
+#  elif defined(_POSIX_MONOTONIC_CLOCK)
+#   define CLOCK_TYPE CLOCK_MONOTONIC
+#  else
+#   define CLOCK_TYPE CLOCK_REALTIME
+#  endif
+
+        if (clock_gettime(CLOCK_TYPE, &ts) == 0)
+            return TWO32TO64(ts.tv_sec, ts.tv_nsec);
+    }
+# endif
+# if defined(__unix__) \
+     || (defined(_POSIX_C_SOURCE) && _POSIX_C_SOURCE >= 200112L)
+    {
+        struct timeval tv;
+
+        if (gettimeofday(&tv, NULL) == 0)
+            return TWO32TO64(tv.tv_sec, tv.tv_usec);
+    }
+# endif
+    return time(NULL);
+}
+#endif /* defined(OPENSSL_SYS_UNIX) || defined(__DJGPP__) */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_vms.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_vms.c
new file mode 100644
index 000000000..bfcf6f0a8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_vms.c
@@ -0,0 +1,528 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+
+#if defined(OPENSSL_SYS_VMS)
+# define __NEW_STARLET 1         /* New starlet definitions since VMS 7.0 */
+# include <unistd.h>
+# include "internal/cryptlib.h"
+# include <openssl/rand.h>
+# include "internal/rand_int.h"
+# include "rand_lcl.h"
+# include <descrip.h>
+# include <dvidef.h>
+# include <jpidef.h>
+# include <rmidef.h>
+# include <syidef.h>
+# include <ssdef.h>
+# include <starlet.h>
+# include <efndef.h>
+# include <gen64def.h>
+# include <iosbdef.h>
+# include <iledef.h>
+# include <lib$routines.h>
+# ifdef __DECC
+#  pragma message disable DOLLARID
+# endif
+
+# ifndef OPENSSL_RAND_SEED_OS
+#  error "Unsupported seeding method configured; must be os"
+# endif
+
+/* We need to make sure we have the right size pointer in some cases */
+# if __INITIAL_POINTER_SIZE == 64
+#  pragma pointer_size save
+#  pragma pointer_size 32
+# endif
+typedef uint32_t *uint32_t__ptr32;
+# if __INITIAL_POINTER_SIZE == 64
+#  pragma pointer_size restore
+# endif
+
+struct item_st {
+    short length, code;         /* length is number of bytes */
+};
+
+static const struct item_st DVI_item_data[] = {
+    {4,   DVI$_ERRCNT},
+    {4,   DVI$_REFCNT},
+};
+
+static const struct item_st JPI_item_data[] = {
+    {4,   JPI$_BUFIO},
+    {4,   JPI$_CPUTIM},
+    {4,   JPI$_DIRIO},
+    {4,   JPI$_IMAGECOUNT},
+    {4,   JPI$_PAGEFLTS},
+    {4,   JPI$_PID},
+    {4,   JPI$_PPGCNT},
+    {4,   JPI$_WSPEAK},
+    /*
+     * Note: the direct result is just a 32-bit address.  However, it points
+     * to a list of 4 32-bit words, so we make extra space for them so we can
+     * do in-place replacement of values
+     */
+    {16,  JPI$_FINALEXC},
+};
+
+static const struct item_st JPI_item_data_64bit[] = {
+    {8,   JPI$_LAST_LOGIN_I},
+    {8,   JPI$_LOGINTIM},
+};
+
+static const struct item_st RMI_item_data[] = {
+    {4,   RMI$_COLPG},
+    {4,   RMI$_MWAIT},
+    {4,   RMI$_CEF},
+    {4,   RMI$_PFW},
+    {4,   RMI$_LEF},
+    {4,   RMI$_LEFO},
+    {4,   RMI$_HIB},
+    {4,   RMI$_HIBO},
+    {4,   RMI$_SUSP},
+    {4,   RMI$_SUSPO},
+    {4,   RMI$_FPG},
+    {4,   RMI$_COM},
+    {4,   RMI$_COMO},
+    {4,   RMI$_CUR},
+#if defined __alpha
+    {4,   RMI$_FRLIST},
+    {4,   RMI$_MODLIST},
+#endif
+    {4,   RMI$_FAULTS},
+    {4,   RMI$_PREADS},
+    {4,   RMI$_PWRITES},
+    {4,   RMI$_PWRITIO},
+    {4,   RMI$_PREADIO},
+    {4,   RMI$_GVALFLTS},
+    {4,   RMI$_WRTINPROG},
+    {4,   RMI$_FREFLTS},
+    {4,   RMI$_DZROFLTS},
+    {4,   RMI$_SYSFAULTS},
+    {4,   RMI$_ISWPCNT},
+    {4,   RMI$_DIRIO},
+    {4,   RMI$_BUFIO},
+    {4,   RMI$_MBREADS},
+    {4,   RMI$_MBWRITES},
+    {4,   RMI$_LOGNAM},
+    {4,   RMI$_FCPCALLS},
+    {4,   RMI$_FCPREAD},
+    {4,   RMI$_FCPWRITE},
+    {4,   RMI$_FCPCACHE},
+    {4,   RMI$_FCPCPU},
+    {4,   RMI$_FCPHIT},
+    {4,   RMI$_FCPSPLIT},
+    {4,   RMI$_FCPFAULT},
+    {4,   RMI$_ENQNEW},
+    {4,   RMI$_ENQCVT},
+    {4,   RMI$_DEQ},
+    {4,   RMI$_BLKAST},
+    {4,   RMI$_ENQWAIT},
+    {4,   RMI$_ENQNOTQD},
+    {4,   RMI$_DLCKSRCH},
+    {4,   RMI$_DLCKFND},
+    {4,   RMI$_NUMLOCKS},
+    {4,   RMI$_NUMRES},
+    {4,   RMI$_ARRLOCPK},
+    {4,   RMI$_DEPLOCPK},
+    {4,   RMI$_ARRTRAPK},
+    {4,   RMI$_TRCNGLOS},
+    {4,   RMI$_RCVBUFFL},
+    {4,   RMI$_ENQNEWLOC},
+    {4,   RMI$_ENQNEWIN},
+    {4,   RMI$_ENQNEWOUT},
+    {4,   RMI$_ENQCVTLOC},
+    {4,   RMI$_ENQCVTIN},
+    {4,   RMI$_ENQCVTOUT},
+    {4,   RMI$_DEQLOC},
+    {4,   RMI$_DEQIN},
+    {4,   RMI$_DEQOUT},
+    {4,   RMI$_BLKLOC},
+    {4,   RMI$_BLKIN},
+    {4,   RMI$_BLKOUT},
+    {4,   RMI$_DIRIN},
+    {4,   RMI$_DIROUT},
+    /* We currently get a fault when trying these.  TODO: To be figured out. */
+#if 0
+    {140, RMI$_MSCP_EVERYTHING},   /* 35 32-bit words */
+    {152, RMI$_DDTM_ALL},          /* 38 32-bit words */
+    {80,  RMI$_TMSCP_EVERYTHING}   /* 20 32-bit words */
+#endif
+    {4,   RMI$_LPZ_PAGCNT},
+    {4,   RMI$_LPZ_HITS},
+    {4,   RMI$_LPZ_MISSES},
+    {4,   RMI$_LPZ_EXPCNT},
+    {4,   RMI$_LPZ_ALLOCF},
+    {4,   RMI$_LPZ_ALLOC2},
+    {4,   RMI$_ACCESS},
+    {4,   RMI$_ALLOC},
+    {4,   RMI$_FCPCREATE},
+    {4,   RMI$_VOLWAIT},
+    {4,   RMI$_FCPTURN},
+    {4,   RMI$_FCPERASE},
+    {4,   RMI$_OPENS},
+    {4,   RMI$_FIDHIT},
+    {4,   RMI$_FIDMISS},
+    {4,   RMI$_FILHDR_HIT},
+    {4,   RMI$_DIRFCB_HIT},
+    {4,   RMI$_DIRFCB_MISS},
+    {4,   RMI$_DIRDATA_HIT},
+    {4,   RMI$_EXTHIT},
+    {4,   RMI$_EXTMISS},
+    {4,   RMI$_QUOHIT},
+    {4,   RMI$_QUOMISS},
+    {4,   RMI$_STORAGMAP_HIT},
+    {4,   RMI$_VOLLCK},
+    {4,   RMI$_SYNCHLCK},
+    {4,   RMI$_SYNCHWAIT},
+    {4,   RMI$_ACCLCK},
+    {4,   RMI$_XQPCACHEWAIT},
+    {4,   RMI$_DIRDATA_MISS},
+    {4,   RMI$_FILHDR_MISS},
+    {4,   RMI$_STORAGMAP_MISS},
+    {4,   RMI$_PROCCNTMAX},
+    {4,   RMI$_PROCBATCNT},
+    {4,   RMI$_PROCINTCNT},
+    {4,   RMI$_PROCNETCNT},
+    {4,   RMI$_PROCSWITCHCNT},
+    {4,   RMI$_PROCBALSETCNT},
+    {4,   RMI$_PROCLOADCNT},
+    {4,   RMI$_BADFLTS},
+    {4,   RMI$_EXEFAULTS},
+    {4,   RMI$_HDRINSWAPS},
+    {4,   RMI$_HDROUTSWAPS},
+    {4,   RMI$_IOPAGCNT},
+    {4,   RMI$_ISWPCNTPG},
+    {4,   RMI$_OSWPCNT},
+    {4,   RMI$_OSWPCNTPG},
+    {4,   RMI$_RDFAULTS},
+    {4,   RMI$_TRANSFLTS},
+    {4,   RMI$_WRTFAULTS},
+#if defined __alpha
+    {4,   RMI$_USERPAGES},
+#endif
+    {4,   RMI$_VMSPAGES},
+    {4,   RMI$_TTWRITES},
+    {4,   RMI$_BUFOBJPAG},
+    {4,   RMI$_BUFOBJPAGPEAK},
+    {4,   RMI$_BUFOBJPAGS01},
+    {4,   RMI$_BUFOBJPAGS2},
+    {4,   RMI$_BUFOBJPAGMAXS01},
+    {4,   RMI$_BUFOBJPAGMAXS2},
+    {4,   RMI$_BUFOBJPAGPEAKS01},
+    {4,   RMI$_BUFOBJPAGPEAKS2},
+    {4,   RMI$_BUFOBJPGLTMAXS01},
+    {4,   RMI$_BUFOBJPGLTMAXS2},
+    {4,   RMI$_DLCK_INCMPLT},
+    {4,   RMI$_DLCKMSGS_IN},
+    {4,   RMI$_DLCKMSGS_OUT},
+    {4,   RMI$_MCHKERRS},
+    {4,   RMI$_MEMERRS},
+};
+
+static const struct item_st RMI_item_data_64bit[] = {
+#if defined __ia64
+    {8,   RMI$_FRLIST},
+    {8,   RMI$_MODLIST},
+#endif
+    {8,   RMI$_LCKMGR_REQCNT},
+    {8,   RMI$_LCKMGR_REQTIME},
+    {8,   RMI$_LCKMGR_SPINCNT},
+    {8,   RMI$_LCKMGR_SPINTIME},
+    {8,   RMI$_CPUINTSTK},
+    {8,   RMI$_CPUMPSYNCH},
+    {8,   RMI$_CPUKERNEL},
+    {8,   RMI$_CPUEXEC},
+    {8,   RMI$_CPUSUPER},
+    {8,   RMI$_CPUUSER},
+#if defined __ia64
+    {8,   RMI$_USERPAGES},
+#endif
+    {8,   RMI$_TQETOTAL},
+    {8,   RMI$_TQESYSUB},
+    {8,   RMI$_TQEUSRTIMR},
+    {8,   RMI$_TQEUSRWAKE},
+};
+
+static const struct item_st SYI_item_data[] = {
+    {4,   SYI$_PAGEFILE_FREE},
+};
+
+/*
+ * Input:
+ * items_data           - an array of lengths and codes
+ * items_data_num       - number of elements in that array
+ *
+ * Output:
+ * items                - pre-allocated ILE3 array to be filled.
+ *                        It's assumed to have items_data_num elements plus
+ *                        one extra for the terminating NULL element
+ * databuffer           - pre-allocated 32-bit word array.
+ *
+ * Returns the number of elements used in databuffer
+ */
+static size_t prepare_item_list(const struct item_st *items_input,
+                                size_t items_input_num,
+                                ILE3 *items,
+                                uint32_t__ptr32 databuffer)
+{
+    size_t data_sz = 0;
+
+    for (; items_input_num-- > 0; items_input++, items++) {
+
+        items->ile3$w_code = items_input->code;
+        /* Special treatment of JPI$_FINALEXC */
+        if (items->ile3$w_code == JPI$_FINALEXC)
+            items->ile3$w_length = 4;
+        else
+            items->ile3$w_length = items_input->length;
+
+        items->ile3$ps_bufaddr = databuffer;
+        items->ile3$ps_retlen_addr = 0;
+
+        databuffer += items_input->length / sizeof(databuffer[0]);
+        data_sz += items_input->length;
+    }
+    /* Terminating NULL entry */
+    items->ile3$w_length = items->ile3$w_code = 0;
+    items->ile3$ps_bufaddr = items->ile3$ps_retlen_addr = NULL;
+
+    return data_sz / sizeof(databuffer[0]);
+}
+
+static void massage_JPI(ILE3 *items)
+{
+    /*
+     * Special treatment of JPI$_FINALEXC
+     * The result of that item's data buffer is a 32-bit address to a list of
+     * 4 32-bit words.
+     */
+    for (; items->ile3$w_length != 0; items++) {
+        if (items->ile3$w_code == JPI$_FINALEXC) {
+            uint32_t *data = items->ile3$ps_bufaddr;
+            uint32_t *ptr = (uint32_t *)*data;
+            size_t j;
+
+            /*
+             * We know we made space for 4 32-bit words, so we can do in-place
+             * replacement.
+             */
+            for (j = 0; j < 4; j++)
+                data[j] = ptr[j];
+
+            break;
+        }
+    }
+}
+
+/*
+ * This number expresses how many bits of data contain 1 bit of entropy.
+ *
+ * For the moment, we assume about 0.05 entropy bits per data bit, or 1
+ * bit of entropy per 20 data bits.
+ */
+#define ENTROPY_FACTOR  20
+
+size_t rand_pool_acquire_entropy(RAND_POOL *pool)
+{
+    ILE3 JPI_items_64bit[OSSL_NELEM(JPI_item_data_64bit) + 1];
+    ILE3 RMI_items_64bit[OSSL_NELEM(RMI_item_data_64bit) + 1];
+    ILE3 DVI_items[OSSL_NELEM(DVI_item_data) + 1];
+    ILE3 JPI_items[OSSL_NELEM(JPI_item_data) + 1];
+    ILE3 RMI_items[OSSL_NELEM(RMI_item_data) + 1];
+    ILE3 SYI_items[OSSL_NELEM(SYI_item_data) + 1];
+    union {
+        /* This ensures buffer starts at 64 bit boundary */
+        uint64_t dummy;
+        uint32_t buffer[OSSL_NELEM(JPI_item_data_64bit) * 2
+                        + OSSL_NELEM(RMI_item_data_64bit) * 2
+                        + OSSL_NELEM(DVI_item_data)
+                        + OSSL_NELEM(JPI_item_data)
+                        + OSSL_NELEM(RMI_item_data)
+                        + OSSL_NELEM(SYI_item_data)
+                        + 4 /* For JPI$_FINALEXC */];
+    } data;
+    size_t total_elems = 0;
+    size_t total_length = 0;
+    size_t bytes_needed = rand_pool_bytes_needed(pool, ENTROPY_FACTOR);
+    size_t bytes_remaining = rand_pool_bytes_remaining(pool);
+
+    /* Take all the 64-bit items first, to ensure proper alignment of data */
+    total_elems +=
+        prepare_item_list(JPI_item_data_64bit, OSSL_NELEM(JPI_item_data_64bit),
+                          JPI_items_64bit, &data.buffer[total_elems]);
+    total_elems +=
+        prepare_item_list(RMI_item_data_64bit, OSSL_NELEM(RMI_item_data_64bit),
+                          RMI_items_64bit, &data.buffer[total_elems]);
+    /* Now the 32-bit items */
+    total_elems += prepare_item_list(DVI_item_data, OSSL_NELEM(DVI_item_data),
+                                     DVI_items, &data.buffer[total_elems]);
+    total_elems += prepare_item_list(JPI_item_data, OSSL_NELEM(JPI_item_data),
+                                     JPI_items, &data.buffer[total_elems]);
+    total_elems += prepare_item_list(RMI_item_data, OSSL_NELEM(RMI_item_data),
+                                     RMI_items, &data.buffer[total_elems]);
+    total_elems += prepare_item_list(SYI_item_data, OSSL_NELEM(SYI_item_data),
+                                     SYI_items, &data.buffer[total_elems]);
+    total_length = total_elems * sizeof(data.buffer[0]);
+
+    /* Fill data.buffer with various info bits from this process */
+    {
+        uint32_t status;
+        uint32_t efn;
+        IOSB iosb;
+        $DESCRIPTOR(SYSDEVICE,"SYS$SYSDEVICE:");
+
+        if ((status = sys$getdviw(EFN$C_ENF, 0, &SYSDEVICE, DVI_items,
+                                  0, 0, 0, 0, 0)) != SS$_NORMAL) {
+            lib$signal(status);
+            return 0;
+        }
+        if ((status = sys$getjpiw(EFN$C_ENF, 0, 0, JPI_items_64bit, 0, 0, 0))
+            != SS$_NORMAL) {
+            lib$signal(status);
+            return 0;
+        }
+        if ((status = sys$getjpiw(EFN$C_ENF, 0, 0, JPI_items, 0, 0, 0))
+            != SS$_NORMAL) {
+            lib$signal(status);
+            return 0;
+        }
+        if ((status = sys$getsyiw(EFN$C_ENF, 0, 0, SYI_items, 0, 0, 0))
+            != SS$_NORMAL) {
+            lib$signal(status);
+            return 0;
+        }
+        /*
+         * The RMI service is a bit special, as there is no synchronous
+         * variant, so we MUST create an event flag to synchronise on.
+         */
+        if ((status = lib$get_ef(&efn)) != SS$_NORMAL) {
+            lib$signal(status);
+            return 0;
+        }
+        if ((status = sys$getrmi(efn, 0, 0, RMI_items_64bit, &iosb, 0, 0))
+            != SS$_NORMAL) {
+            lib$signal(status);
+            return 0;
+        }
+        if ((status = sys$synch(efn, &iosb)) != SS$_NORMAL) {
+            lib$signal(status);
+            return 0;
+        }
+        if (iosb.iosb$l_getxxi_status != SS$_NORMAL) {
+            lib$signal(iosb.iosb$l_getxxi_status);
+            return 0;
+        }
+        if ((status = sys$getrmi(efn, 0, 0, RMI_items, &iosb, 0, 0))
+            != SS$_NORMAL) {
+            lib$signal(status);
+            return 0;
+        }
+        if ((status = sys$synch(efn, &iosb)) != SS$_NORMAL) {
+            lib$signal(status);
+            return 0;
+        }
+        if (iosb.iosb$l_getxxi_status != SS$_NORMAL) {
+            lib$signal(iosb.iosb$l_getxxi_status);
+            return 0;
+        }
+        if ((status = lib$free_ef(&efn)) != SS$_NORMAL) {
+            lib$signal(status);
+            return 0;
+        }
+    }
+
+    massage_JPI(JPI_items);
+
+    /*
+     * If we can't feed the requirements from the caller, we're in deep trouble.
+     */
+    if (!ossl_assert(total_length >= bytes_needed)) {
+        char neededstr[20];
+        char availablestr[20];
+
+        BIO_snprintf(neededstr, sizeof(neededstr), "%zu", bytes_needed);
+        BIO_snprintf(availablestr, sizeof(availablestr), "%zu", total_length);
+        RANDerr(RAND_F_RAND_POOL_ACQUIRE_ENTROPY,
+                RAND_R_RANDOM_POOL_UNDERFLOW);
+        ERR_add_error_data(4, "Needed: ", neededstr, ", Available: ",
+                           availablestr);
+        return 0;
+    }
+
+    /*
+     * Try not to overfeed the pool
+     */
+    if (total_length > bytes_remaining)
+        total_length = bytes_remaining;
+
+    /* We give the pessimistic value for the amount of entropy */
+    rand_pool_add(pool, (unsigned char *)data.buffer, total_length,
+                  8 * total_length / ENTROPY_FACTOR);
+    return rand_pool_entropy_available(pool);
+}
+
+int rand_pool_add_nonce_data(RAND_POOL *pool)
+{
+    struct {
+        pid_t pid;
+        CRYPTO_THREAD_ID tid;
+        uint64_t time;
+    } data = { 0 };
+
+    /*
+     * Add process id, thread id, and a high resolution timestamp
+     * (where available, which is OpenVMS v8.4 and up) to ensure that
+     * the nonce is unique whith high probability for different process
+     * instances.
+     */
+    data.pid = getpid();
+    data.tid = CRYPTO_THREAD_get_current_id();
+#if __CRTL_VER >= 80400000
+    sys$gettim_prec(&data.time);
+#else
+    sys$gettim((void*)&data.time);
+#endif
+
+    return rand_pool_add(pool, (unsigned char *)&data, sizeof(data), 0);
+}
+
+int rand_pool_add_additional_data(RAND_POOL *pool)
+{
+    struct {
+        CRYPTO_THREAD_ID tid;
+        uint64_t time;
+    } data = { 0 };
+
+    /*
+     * Add some noise from the thread id and a high resolution timer.
+     * The thread id adds a little randomness if the drbg is accessed
+     * concurrently (which is the case for the <master> drbg).
+     */
+    data.tid = CRYPTO_THREAD_get_current_id();
+    sys$gettim_prec(&data.time);
+
+    return rand_pool_add(pool, (unsigned char *)&data, sizeof(data), 0);
+}
+
+int rand_pool_init(void)
+{
+    return 1;
+}
+
+void rand_pool_cleanup(void)
+{
+}
+
+void rand_pool_keep_random_devices_open(int keep)
+{
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_win.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_win.c
new file mode 100644
index 000000000..d2039eb22
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/rand_win.c
@@ -0,0 +1,185 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/rand.h>
+#include "rand_lcl.h"
+#include "internal/rand_int.h"
+#if defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_WIN32)
+
+# ifndef OPENSSL_RAND_SEED_OS
+#  error "Unsupported seeding method configured; must be os"
+# endif
+
+# include <windows.h>
+/* On Windows 7 or higher use BCrypt instead of the legacy CryptoAPI */
+# if defined(_MSC_VER) && defined(_WIN32_WINNT) && _WIN32_WINNT >= 0x0601
+#  define USE_BCRYPTGENRANDOM
+# endif
+
+# ifdef USE_BCRYPTGENRANDOM
+#  include <bcrypt.h>
+#  pragma comment(lib, "bcrypt.lib")
+#  ifndef STATUS_SUCCESS
+#   define STATUS_SUCCESS ((NTSTATUS)0x00000000L)
+#  endif
+# else
+#  include <wincrypt.h>
+/*
+ * Intel hardware RNG CSP -- available from
+ * http://developer.intel.com/design/security/rng/redist_license.htm
+ */
+#  define PROV_INTEL_SEC 22
+#  define INTEL_DEF_PROV L"Intel Hardware Cryptographic Service Provider"
+# endif
+
+size_t rand_pool_acquire_entropy(RAND_POOL *pool)
+{
+# ifndef USE_BCRYPTGENRANDOM
+    HCRYPTPROV hProvider;
+# endif
+    unsigned char *buffer;
+    size_t bytes_needed;
+    size_t entropy_available = 0;
+
+
+# ifdef OPENSSL_RAND_SEED_RDTSC
+    entropy_available = rand_acquire_entropy_from_tsc(pool);
+    if (entropy_available > 0)
+        return entropy_available;
+# endif
+
+# ifdef OPENSSL_RAND_SEED_RDCPU
+    entropy_available = rand_acquire_entropy_from_cpu(pool);
+    if (entropy_available > 0)
+        return entropy_available;
+# endif
+
+# ifdef USE_BCRYPTGENRANDOM
+    bytes_needed = rand_pool_bytes_needed(pool, 1 /*entropy_factor*/);
+    buffer = rand_pool_add_begin(pool, bytes_needed);
+    if (buffer != NULL) {
+        size_t bytes = 0;
+        if (BCryptGenRandom(NULL, buffer, bytes_needed,
+                            BCRYPT_USE_SYSTEM_PREFERRED_RNG) == STATUS_SUCCESS)
+            bytes = bytes_needed;
+
+        rand_pool_add_end(pool, bytes, 8 * bytes);
+        entropy_available = rand_pool_entropy_available(pool);
+    }
+    if (entropy_available > 0)
+        return entropy_available;
+# else
+    bytes_needed = rand_pool_bytes_needed(pool, 1 /*entropy_factor*/);
+    buffer = rand_pool_add_begin(pool, bytes_needed);
+    if (buffer != NULL) {
+        size_t bytes = 0;
+        /* poll the CryptoAPI PRNG */
+        if (CryptAcquireContextW(&hProvider, NULL, NULL, PROV_RSA_FULL,
+                                 CRYPT_VERIFYCONTEXT | CRYPT_SILENT) != 0) {
+            if (CryptGenRandom(hProvider, bytes_needed, buffer) != 0)
+                bytes = bytes_needed;
+
+            CryptReleaseContext(hProvider, 0);
+        }
+
+        rand_pool_add_end(pool, bytes, 8 * bytes);
+        entropy_available = rand_pool_entropy_available(pool);
+    }
+    if (entropy_available > 0)
+        return entropy_available;
+
+    bytes_needed = rand_pool_bytes_needed(pool, 1 /*entropy_factor*/);
+    buffer = rand_pool_add_begin(pool, bytes_needed);
+    if (buffer != NULL) {
+        size_t bytes = 0;
+        /* poll the Pentium PRG with CryptoAPI */
+        if (CryptAcquireContextW(&hProvider, NULL,
+                                 INTEL_DEF_PROV, PROV_INTEL_SEC,
+                                 CRYPT_VERIFYCONTEXT | CRYPT_SILENT) != 0) {
+            if (CryptGenRandom(hProvider, bytes_needed, buffer) != 0)
+                bytes = bytes_needed;
+
+            CryptReleaseContext(hProvider, 0);
+        }
+        rand_pool_add_end(pool, bytes, 8 * bytes);
+        entropy_available = rand_pool_entropy_available(pool);
+    }
+    if (entropy_available > 0)
+        return entropy_available;
+# endif
+
+    return rand_pool_entropy_available(pool);
+}
+
+
+int rand_pool_add_nonce_data(RAND_POOL *pool)
+{
+    struct {
+        DWORD pid;
+        DWORD tid;
+        FILETIME time;
+    } data = { 0 };
+
+    /*
+     * Add process id, thread id, and a high resolution timestamp to
+     * ensure that the nonce is unique whith high probability for
+     * different process instances.
+     */
+    data.pid = GetCurrentProcessId();
+    data.tid = GetCurrentThreadId();
+    GetSystemTimeAsFileTime(&data.time);
+
+    return rand_pool_add(pool, (unsigned char *)&data, sizeof(data), 0);
+}
+
+int rand_pool_add_additional_data(RAND_POOL *pool)
+{
+    struct {
+        DWORD tid;
+        LARGE_INTEGER time;
+    } data = { 0 };
+
+    /*
+     * Add some noise from the thread id and a high resolution timer.
+     * The thread id adds a little randomness if the drbg is accessed
+     * concurrently (which is the case for the <master> drbg).
+     */
+    data.tid = GetCurrentThreadId();
+    QueryPerformanceCounter(&data.time);
+    return rand_pool_add(pool, (unsigned char *)&data, sizeof(data), 0);
+}
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+int RAND_event(UINT iMsg, WPARAM wParam, LPARAM lParam)
+{
+    RAND_poll();
+    return RAND_status();
+}
+
+void RAND_screen(void)
+{
+    RAND_poll();
+}
+# endif
+
+int rand_pool_init(void)
+{
+    return 1;
+}
+
+void rand_pool_cleanup(void)
+{
+}
+
+void rand_pool_keep_random_devices_open(int keep)
+{
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rand/randfile.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/randfile.c
new file mode 100644
index 000000000..1b737d1ba
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rand/randfile.c
@@ -0,0 +1,314 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+
+#include <errno.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include <openssl/crypto.h>
+#include <openssl/rand.h>
+#include <openssl/rand_drbg.h>
+#include <openssl/buffer.h>
+
+#ifdef OPENSSL_SYS_VMS
+# include <unixio.h>
+#endif
+#include <sys/types.h>
+#ifndef OPENSSL_NO_POSIX_IO
+# include <sys/stat.h>
+# include <fcntl.h>
+# ifdef _WIN32
+#  include <windows.h>
+#  include <io.h>
+#  define stat    _stat
+#  define chmod   _chmod
+#  define open    _open
+#  define fdopen  _fdopen
+#  define fstat   _fstat
+#  define fileno  _fileno
+# endif
+#endif
+
+/*
+ * Following should not be needed, and we could have been stricter
+ * and demand S_IS*. But some systems just don't comply... Formally
+ * below macros are "anatomically incorrect", because normally they
+ * would look like ((m) & MASK == TYPE), but since MASK availability
+ * is as questionable, we settle for this poor-man fallback...
+ */
+# if !defined(S_ISREG)
+#   define S_ISREG(m) ((m) & S_IFREG)
+# endif
+
+#define RAND_BUF_SIZE 1024
+#define RFILE ".rnd"
+
+#ifdef OPENSSL_SYS_VMS
+/*
+ * __FILE_ptr32 is a type provided by DEC C headers (types.h specifically)
+ * to make sure the FILE* is a 32-bit pointer no matter what.  We know that
+ * stdio functions return this type (a study of stdio.h proves it).
+ *
+ * This declaration is a nasty hack to get around vms' extension to fopen for
+ * passing in sharing options being disabled by /STANDARD=ANSI89
+ */
+static __FILE_ptr32 (*const vms_fopen)(const char *, const char *, ...) =
+        (__FILE_ptr32 (*)(const char *, const char *, ...))fopen;
+# define VMS_OPEN_ATTRS \
+        "shr=get,put,upd,del","ctx=bin,stm","rfm=stm","rat=none","mrs=0"
+# define openssl_fopen(fname, mode) vms_fopen((fname), (mode), VMS_OPEN_ATTRS)
+#endif
+
+/*
+ * Note that these functions are intended for seed files only. Entropy
+ * devices and EGD sockets are handled in rand_unix.c  If |bytes| is
+ * -1 read the complete file; otherwise read the specified amount.
+ */
+int RAND_load_file(const char *file, long bytes)
+{
+    /*
+     * The load buffer size exceeds the chunk size by the comfortable amount
+     * of 'RAND_DRBG_STRENGTH' bytes (not bits!). This is done on purpose
+     * to avoid calling RAND_add() with a small final chunk. Instead, such
+     * a small final chunk will be added together with the previous chunk
+     * (unless it's the only one).
+     */
+#define RAND_LOAD_BUF_SIZE (RAND_BUF_SIZE + RAND_DRBG_STRENGTH)
+    unsigned char buf[RAND_LOAD_BUF_SIZE];
+
+#ifndef OPENSSL_NO_POSIX_IO
+    struct stat sb;
+#endif
+    int i, n, ret = 0;
+    FILE *in;
+
+    if (bytes == 0)
+        return 0;
+
+    if ((in = openssl_fopen(file, "rb")) == NULL) {
+        RANDerr(RAND_F_RAND_LOAD_FILE, RAND_R_CANNOT_OPEN_FILE);
+        ERR_add_error_data(2, "Filename=", file);
+        return -1;
+    }
+
+#ifndef OPENSSL_NO_POSIX_IO
+    if (fstat(fileno(in), &sb) < 0) {
+        RANDerr(RAND_F_RAND_LOAD_FILE, RAND_R_INTERNAL_ERROR);
+        ERR_add_error_data(2, "Filename=", file);
+        fclose(in);
+        return -1;
+    }
+
+    if (bytes < 0) {
+        if (S_ISREG(sb.st_mode))
+            bytes = sb.st_size;
+        else
+            bytes = RAND_DRBG_STRENGTH;
+    }
+#endif
+    /*
+     * On VMS, setbuf() will only take 32-bit pointers, and a compilation
+     * with /POINTER_SIZE=64 will give off a MAYLOSEDATA2 warning here.
+     * However, we trust that the C RTL will never give us a FILE pointer
+     * above the first 4 GB of memory, so we simply turn off the warning
+     * temporarily.
+     */
+#if defined(OPENSSL_SYS_VMS) && defined(__DECC)
+# pragma environment save
+# pragma message disable maylosedata2
+#endif
+    /*
+     * Don't buffer, because even if |file| is regular file, we have
+     * no control over the buffer, so why would we want a copy of its
+     * contents lying around?
+     */
+    setbuf(in, NULL);
+#if defined(OPENSSL_SYS_VMS) && defined(__DECC)
+# pragma environment restore
+#endif
+
+    for ( ; ; ) {
+        if (bytes > 0)
+            n = (bytes <= RAND_LOAD_BUF_SIZE) ? (int)bytes : RAND_BUF_SIZE;
+        else
+            n = RAND_LOAD_BUF_SIZE;
+        i = fread(buf, 1, n, in);
+#ifdef EINTR
+        if (ferror(in) && errno == EINTR){
+            clearerr(in);
+            if (i == 0)
+                continue;
+        }
+#endif
+        if (i == 0)
+            break;
+
+        RAND_add(buf, i, (double)i);
+        ret += i;
+
+        /* If given a bytecount, and we did it, break. */
+        if (bytes > 0 && (bytes -= i) <= 0)
+            break;
+    }
+
+    OPENSSL_cleanse(buf, sizeof(buf));
+    fclose(in);
+    if (!RAND_status()) {
+        RANDerr(RAND_F_RAND_LOAD_FILE, RAND_R_RESEED_ERROR);
+        ERR_add_error_data(2, "Filename=", file);
+        return -1;
+    }
+
+    return ret;
+}
+
+int RAND_write_file(const char *file)
+{
+    unsigned char buf[RAND_BUF_SIZE];
+    int ret = -1;
+    FILE *out = NULL;
+#ifndef OPENSSL_NO_POSIX_IO
+    struct stat sb;
+
+    if (stat(file, &sb) >= 0 && !S_ISREG(sb.st_mode)) {
+        RANDerr(RAND_F_RAND_WRITE_FILE, RAND_R_NOT_A_REGULAR_FILE);
+        ERR_add_error_data(2, "Filename=", file);
+        return -1;
+    }
+#endif
+
+    /* Collect enough random data. */
+    if (RAND_priv_bytes(buf, (int)sizeof(buf)) != 1)
+        return  -1;
+
+#if defined(O_CREAT) && !defined(OPENSSL_NO_POSIX_IO) && \
+    !defined(OPENSSL_SYS_VMS) && !defined(OPENSSL_SYS_WINDOWS)
+    {
+# ifndef O_BINARY
+#  define O_BINARY 0
+# endif
+        /*
+         * chmod(..., 0600) is too late to protect the file, permissions
+         * should be restrictive from the start
+         */
+        int fd = open(file, O_WRONLY | O_CREAT | O_BINARY, 0600);
+        if (fd != -1)
+            out = fdopen(fd, "wb");
+    }
+#endif
+
+#ifdef OPENSSL_SYS_VMS
+    /*
+     * VMS NOTE: Prior versions of this routine created a _new_ version of
+     * the rand file for each call into this routine, then deleted all
+     * existing versions named ;-1, and finally renamed the current version
+     * as ';1'. Under concurrent usage, this resulted in an RMS race
+     * condition in rename() which could orphan files (see vms message help
+     * for RMS$_REENT). With the fopen() calls below, openssl/VMS now shares
+     * the top-level version of the rand file. Note that there may still be
+     * conditions where the top-level rand file is locked. If so, this code
+     * will then create a new version of the rand file. Without the delete
+     * and rename code, this can result in ascending file versions that stop
+     * at version 32767, and this routine will then return an error. The
+     * remedy for this is to recode the calling application to avoid
+     * concurrent use of the rand file, or synchronize usage at the
+     * application level. Also consider whether or not you NEED a persistent
+     * rand file in a concurrent use situation.
+     */
+    out = openssl_fopen(file, "rb+");
+#endif
+
+    if (out == NULL)
+        out = openssl_fopen(file, "wb");
+    if (out == NULL) {
+        RANDerr(RAND_F_RAND_WRITE_FILE, RAND_R_CANNOT_OPEN_FILE);
+        ERR_add_error_data(2, "Filename=", file);
+        return -1;
+    }
+
+#if !defined(NO_CHMOD) && !defined(OPENSSL_NO_POSIX_IO)
+    /*
+     * Yes it's late to do this (see above comment), but better than nothing.
+     */
+    chmod(file, 0600);
+#endif
+
+    ret = fwrite(buf, 1, RAND_BUF_SIZE, out);
+    fclose(out);
+    OPENSSL_cleanse(buf, RAND_BUF_SIZE);
+    return ret;
+}
+
+const char *RAND_file_name(char *buf, size_t size)
+{
+    char *s = NULL;
+    size_t len;
+    int use_randfile = 1;
+
+#if defined(_WIN32) && defined(CP_UTF8)
+    DWORD envlen;
+    WCHAR *var;
+
+    /* Look up various environment variables. */
+    if ((envlen = GetEnvironmentVariableW(var = L"RANDFILE", NULL, 0)) == 0) {
+        use_randfile = 0;
+        if ((envlen = GetEnvironmentVariableW(var = L"HOME", NULL, 0)) == 0
+                && (envlen = GetEnvironmentVariableW(var = L"USERPROFILE",
+                                                  NULL, 0)) == 0)
+            envlen = GetEnvironmentVariableW(var = L"SYSTEMROOT", NULL, 0);
+    }
+
+    /* If we got a value, allocate space to hold it and then get it. */
+    if (envlen != 0) {
+        int sz;
+        WCHAR *val = _alloca(envlen * sizeof(WCHAR));
+
+        if (GetEnvironmentVariableW(var, val, envlen) < envlen
+                && (sz = WideCharToMultiByte(CP_UTF8, 0, val, -1, NULL, 0,
+                                             NULL, NULL)) != 0) {
+            s = _alloca(sz);
+            if (WideCharToMultiByte(CP_UTF8, 0, val, -1, s, sz,
+                                    NULL, NULL) == 0)
+                s = NULL;
+        }
+    }
+#else
+    if ((s = ossl_safe_getenv("RANDFILE")) == NULL || *s == '\0') {
+        use_randfile = 0;
+        s = ossl_safe_getenv("HOME");
+    }
+#endif
+
+#ifdef DEFAULT_HOME
+    if (!use_randfile && s == NULL)
+        s = DEFAULT_HOME;
+#endif
+    if (s == NULL || *s == '\0')
+        return NULL;
+
+    len = strlen(s);
+    if (use_randfile) {
+        if (len + 1 >= size)
+            return NULL;
+        strcpy(buf, s);
+    } else {
+        if (len + 1 + strlen(RFILE) + 1 >= size)
+            return NULL;
+        strcpy(buf, s);
+#ifndef OPENSSL_SYS_VMS
+        strcat(buf, "/");
+#endif
+        strcat(buf, RFILE);
+    }
+
+    return buf;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/build.info
new file mode 100644
index 000000000..47a3fd0d4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/build.info
@@ -0,0 +1,3 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        rc2_ecb.c rc2_skey.c rc2_cbc.c rc2cfb64.c rc2ofb64.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2_cbc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2_cbc.c
new file mode 100644
index 000000000..2b59353b1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2_cbc.c
@@ -0,0 +1,179 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/rc2.h>
+#include "rc2_locl.h"
+
+void RC2_cbc_encrypt(const unsigned char *in, unsigned char *out, long length,
+                     RC2_KEY *ks, unsigned char *iv, int encrypt)
+{
+    register unsigned long tin0, tin1;
+    register unsigned long tout0, tout1, xor0, xor1;
+    register long l = length;
+    unsigned long tin[2];
+
+    if (encrypt) {
+        c2l(iv, tout0);
+        c2l(iv, tout1);
+        iv -= 8;
+        for (l -= 8; l >= 0; l -= 8) {
+            c2l(in, tin0);
+            c2l(in, tin1);
+            tin0 ^= tout0;
+            tin1 ^= tout1;
+            tin[0] = tin0;
+            tin[1] = tin1;
+            RC2_encrypt(tin, ks);
+            tout0 = tin[0];
+            l2c(tout0, out);
+            tout1 = tin[1];
+            l2c(tout1, out);
+        }
+        if (l != -8) {
+            c2ln(in, tin0, tin1, l + 8);
+            tin0 ^= tout0;
+            tin1 ^= tout1;
+            tin[0] = tin0;
+            tin[1] = tin1;
+            RC2_encrypt(tin, ks);
+            tout0 = tin[0];
+            l2c(tout0, out);
+            tout1 = tin[1];
+            l2c(tout1, out);
+        }
+        l2c(tout0, iv);
+        l2c(tout1, iv);
+    } else {
+        c2l(iv, xor0);
+        c2l(iv, xor1);
+        iv -= 8;
+        for (l -= 8; l >= 0; l -= 8) {
+            c2l(in, tin0);
+            tin[0] = tin0;
+            c2l(in, tin1);
+            tin[1] = tin1;
+            RC2_decrypt(tin, ks);
+            tout0 = tin[0] ^ xor0;
+            tout1 = tin[1] ^ xor1;
+            l2c(tout0, out);
+            l2c(tout1, out);
+            xor0 = tin0;
+            xor1 = tin1;
+        }
+        if (l != -8) {
+            c2l(in, tin0);
+            tin[0] = tin0;
+            c2l(in, tin1);
+            tin[1] = tin1;
+            RC2_decrypt(tin, ks);
+            tout0 = tin[0] ^ xor0;
+            tout1 = tin[1] ^ xor1;
+            l2cn(tout0, tout1, out, l + 8);
+            xor0 = tin0;
+            xor1 = tin1;
+        }
+        l2c(xor0, iv);
+        l2c(xor1, iv);
+    }
+    tin0 = tin1 = tout0 = tout1 = xor0 = xor1 = 0;
+    tin[0] = tin[1] = 0;
+}
+
+void RC2_encrypt(unsigned long *d, RC2_KEY *key)
+{
+    int i, n;
+    register RC2_INT *p0, *p1;
+    register RC2_INT x0, x1, x2, x3, t;
+    unsigned long l;
+
+    l = d[0];
+    x0 = (RC2_INT) l & 0xffff;
+    x1 = (RC2_INT) (l >> 16L);
+    l = d[1];
+    x2 = (RC2_INT) l & 0xffff;
+    x3 = (RC2_INT) (l >> 16L);
+
+    n = 3;
+    i = 5;
+
+    p0 = p1 = &(key->data[0]);
+    for (;;) {
+        t = (x0 + (x1 & ~x3) + (x2 & x3) + *(p0++)) & 0xffff;
+        x0 = (t << 1) | (t >> 15);
+        t = (x1 + (x2 & ~x0) + (x3 & x0) + *(p0++)) & 0xffff;
+        x1 = (t << 2) | (t >> 14);
+        t = (x2 + (x3 & ~x1) + (x0 & x1) + *(p0++)) & 0xffff;
+        x2 = (t << 3) | (t >> 13);
+        t = (x3 + (x0 & ~x2) + (x1 & x2) + *(p0++)) & 0xffff;
+        x3 = (t << 5) | (t >> 11);
+
+        if (--i == 0) {
+            if (--n == 0)
+                break;
+            i = (n == 2) ? 6 : 5;
+
+            x0 += p1[x3 & 0x3f];
+            x1 += p1[x0 & 0x3f];
+            x2 += p1[x1 & 0x3f];
+            x3 += p1[x2 & 0x3f];
+        }
+    }
+
+    d[0] =
+        (unsigned long)(x0 & 0xffff) | ((unsigned long)(x1 & 0xffff) << 16L);
+    d[1] =
+        (unsigned long)(x2 & 0xffff) | ((unsigned long)(x3 & 0xffff) << 16L);
+}
+
+void RC2_decrypt(unsigned long *d, RC2_KEY *key)
+{
+    int i, n;
+    register RC2_INT *p0, *p1;
+    register RC2_INT x0, x1, x2, x3, t;
+    unsigned long l;
+
+    l = d[0];
+    x0 = (RC2_INT) l & 0xffff;
+    x1 = (RC2_INT) (l >> 16L);
+    l = d[1];
+    x2 = (RC2_INT) l & 0xffff;
+    x3 = (RC2_INT) (l >> 16L);
+
+    n = 3;
+    i = 5;
+
+    p0 = &(key->data[63]);
+    p1 = &(key->data[0]);
+    for (;;) {
+        t = ((x3 << 11) | (x3 >> 5)) & 0xffff;
+        x3 = (t - (x0 & ~x2) - (x1 & x2) - *(p0--)) & 0xffff;
+        t = ((x2 << 13) | (x2 >> 3)) & 0xffff;
+        x2 = (t - (x3 & ~x1) - (x0 & x1) - *(p0--)) & 0xffff;
+        t = ((x1 << 14) | (x1 >> 2)) & 0xffff;
+        x1 = (t - (x2 & ~x0) - (x3 & x0) - *(p0--)) & 0xffff;
+        t = ((x0 << 15) | (x0 >> 1)) & 0xffff;
+        x0 = (t - (x1 & ~x3) - (x2 & x3) - *(p0--)) & 0xffff;
+
+        if (--i == 0) {
+            if (--n == 0)
+                break;
+            i = (n == 2) ? 6 : 5;
+
+            x3 = (x3 - p1[x2 & 0x3f]) & 0xffff;
+            x2 = (x2 - p1[x1 & 0x3f]) & 0xffff;
+            x1 = (x1 - p1[x0 & 0x3f]) & 0xffff;
+            x0 = (x0 - p1[x3 & 0x3f]) & 0xffff;
+        }
+    }
+
+    d[0] =
+        (unsigned long)(x0 & 0xffff) | ((unsigned long)(x1 & 0xffff) << 16L);
+    d[1] =
+        (unsigned long)(x2 & 0xffff) | ((unsigned long)(x3 & 0xffff) << 16L);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2_ecb.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2_ecb.c
new file mode 100644
index 000000000..fb2f78273
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2_ecb.c
@@ -0,0 +1,40 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/rc2.h>
+#include "rc2_locl.h"
+#include <openssl/opensslv.h>
+
+/*-
+ * RC2 as implemented frm a posting from
+ * Newsgroups: sci.crypt
+ * Subject: Specification for Ron Rivests Cipher No.2
+ * Message-ID: <4fk39f$f70@net.auckland.ac.nz>
+ * Date: 11 Feb 1996 06:45:03 GMT
+ */
+
+void RC2_ecb_encrypt(const unsigned char *in, unsigned char *out, RC2_KEY *ks,
+                     int encrypt)
+{
+    unsigned long l, d[2];
+
+    c2l(in, l);
+    d[0] = l;
+    c2l(in, l);
+    d[1] = l;
+    if (encrypt)
+        RC2_encrypt(d, ks);
+    else
+        RC2_decrypt(d, ks);
+    l = d[0];
+    l2c(l, out);
+    l = d[1];
+    l2c(l, out);
+    l = d[0] = d[1] = 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2_locl.h
new file mode 100644
index 000000000..e4dad9478
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2_locl.h
@@ -0,0 +1,134 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#undef c2l
+#define c2l(c,l)        (l =((unsigned long)(*((c)++)))    , \
+                         l|=((unsigned long)(*((c)++)))<< 8L, \
+                         l|=((unsigned long)(*((c)++)))<<16L, \
+                         l|=((unsigned long)(*((c)++)))<<24L)
+
+/* NOTE - c is not incremented as per c2l */
+#undef c2ln
+#define c2ln(c,l1,l2,n) { \
+                        c+=n; \
+                        l1=l2=0; \
+                        switch (n) { \
+                        case 8: l2 =((unsigned long)(*(--(c))))<<24L; \
+                        /* fall thru */                               \
+                        case 7: l2|=((unsigned long)(*(--(c))))<<16L; \
+                        /* fall thru */                               \
+                        case 6: l2|=((unsigned long)(*(--(c))))<< 8L; \
+                        /* fall thru */                               \
+                        case 5: l2|=((unsigned long)(*(--(c))));      \
+                        /* fall thru */                               \
+                        case 4: l1 =((unsigned long)(*(--(c))))<<24L; \
+                        /* fall thru */                               \
+                        case 3: l1|=((unsigned long)(*(--(c))))<<16L; \
+                        /* fall thru */                               \
+                        case 2: l1|=((unsigned long)(*(--(c))))<< 8L; \
+                        /* fall thru */                               \
+                        case 1: l1|=((unsigned long)(*(--(c))));      \
+                                } \
+                        }
+
+#undef l2c
+#define l2c(l,c)        (*((c)++)=(unsigned char)(((l)     )&0xff), \
+                         *((c)++)=(unsigned char)(((l)>> 8L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>16L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>24L)&0xff))
+
+/* NOTE - c is not incremented as per l2c */
+#undef l2cn
+#define l2cn(l1,l2,c,n) { \
+                        c+=n; \
+                        switch (n) { \
+                        case 8: *(--(c))=(unsigned char)(((l2)>>24L)&0xff); \
+                        /* fall thru */                                     \
+                        case 7: *(--(c))=(unsigned char)(((l2)>>16L)&0xff); \
+                        /* fall thru */                                     \
+                        case 6: *(--(c))=(unsigned char)(((l2)>> 8L)&0xff); \
+                        /* fall thru */                                     \
+                        case 5: *(--(c))=(unsigned char)(((l2)     )&0xff); \
+                        /* fall thru */                                     \
+                        case 4: *(--(c))=(unsigned char)(((l1)>>24L)&0xff); \
+                        /* fall thru */                                     \
+                        case 3: *(--(c))=(unsigned char)(((l1)>>16L)&0xff); \
+                        /* fall thru */                                     \
+                        case 2: *(--(c))=(unsigned char)(((l1)>> 8L)&0xff); \
+                        /* fall thru */                                     \
+                        case 1: *(--(c))=(unsigned char)(((l1)     )&0xff); \
+                                } \
+                        }
+
+/* NOTE - c is not incremented as per n2l */
+#define n2ln(c,l1,l2,n) { \
+                        c+=n; \
+                        l1=l2=0; \
+                        switch (n) { \
+                        case 8: l2 =((unsigned long)(*(--(c))))    ; \
+                        /* fall thru */                              \
+                        case 7: l2|=((unsigned long)(*(--(c))))<< 8; \
+                        /* fall thru */                              \
+                        case 6: l2|=((unsigned long)(*(--(c))))<<16; \
+                        /* fall thru */                              \
+                        case 5: l2|=((unsigned long)(*(--(c))))<<24; \
+                        /* fall thru */                              \
+                        case 4: l1 =((unsigned long)(*(--(c))))    ; \
+                        /* fall thru */                              \
+                        case 3: l1|=((unsigned long)(*(--(c))))<< 8; \
+                        /* fall thru */                              \
+                        case 2: l1|=((unsigned long)(*(--(c))))<<16; \
+                        /* fall thru */                              \
+                        case 1: l1|=((unsigned long)(*(--(c))))<<24; \
+                                } \
+                        }
+
+/* NOTE - c is not incremented as per l2n */
+#define l2nn(l1,l2,c,n) { \
+                        c+=n; \
+                        switch (n) { \
+                        case 8: *(--(c))=(unsigned char)(((l2)    )&0xff); \
+                        /* fall thru */                                    \
+                        case 7: *(--(c))=(unsigned char)(((l2)>> 8)&0xff); \
+                        /* fall thru */                                    \
+                        case 6: *(--(c))=(unsigned char)(((l2)>>16)&0xff); \
+                        /* fall thru */                                    \
+                        case 5: *(--(c))=(unsigned char)(((l2)>>24)&0xff); \
+                        /* fall thru */                                    \
+                        case 4: *(--(c))=(unsigned char)(((l1)    )&0xff); \
+                        /* fall thru */                                    \
+                        case 3: *(--(c))=(unsigned char)(((l1)>> 8)&0xff); \
+                        /* fall thru */                                    \
+                        case 2: *(--(c))=(unsigned char)(((l1)>>16)&0xff); \
+                        /* fall thru */                                    \
+                        case 1: *(--(c))=(unsigned char)(((l1)>>24)&0xff); \
+                                } \
+                        }
+
+#undef n2l
+#define n2l(c,l)        (l =((unsigned long)(*((c)++)))<<24L, \
+                         l|=((unsigned long)(*((c)++)))<<16L, \
+                         l|=((unsigned long)(*((c)++)))<< 8L, \
+                         l|=((unsigned long)(*((c)++))))
+
+#undef l2n
+#define l2n(l,c)        (*((c)++)=(unsigned char)(((l)>>24L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>16L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>> 8L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)     )&0xff))
+
+#define C_RC2(n) \
+        t=(x0+(x1& ~x3)+(x2&x3)+ *(p0++))&0xffff; \
+        x0=(t<<1)|(t>>15); \
+        t=(x1+(x2& ~x0)+(x3&x0)+ *(p0++))&0xffff; \
+        x1=(t<<2)|(t>>14); \
+        t=(x2+(x3& ~x1)+(x0&x1)+ *(p0++))&0xffff; \
+        x2=(t<<3)|(t>>13); \
+        t=(x3+(x0& ~x2)+(x1&x2)+ *(p0++))&0xffff; \
+        x3=(t<<5)|(t>>11);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2_skey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2_skey.c
new file mode 100644
index 000000000..55d8ba371
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2_skey.c
@@ -0,0 +1,98 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/rc2.h>
+#include "rc2_locl.h"
+
+static const unsigned char key_table[256] = {
+    0xd9, 0x78, 0xf9, 0xc4, 0x19, 0xdd, 0xb5, 0xed, 0x28, 0xe9, 0xfd, 0x79,
+    0x4a, 0xa0, 0xd8, 0x9d, 0xc6, 0x7e, 0x37, 0x83, 0x2b, 0x76, 0x53, 0x8e,
+    0x62, 0x4c, 0x64, 0x88, 0x44, 0x8b, 0xfb, 0xa2, 0x17, 0x9a, 0x59, 0xf5,
+    0x87, 0xb3, 0x4f, 0x13, 0x61, 0x45, 0x6d, 0x8d, 0x09, 0x81, 0x7d, 0x32,
+    0xbd, 0x8f, 0x40, 0xeb, 0x86, 0xb7, 0x7b, 0x0b, 0xf0, 0x95, 0x21, 0x22,
+    0x5c, 0x6b, 0x4e, 0x82, 0x54, 0xd6, 0x65, 0x93, 0xce, 0x60, 0xb2, 0x1c,
+    0x73, 0x56, 0xc0, 0x14, 0xa7, 0x8c, 0xf1, 0xdc, 0x12, 0x75, 0xca, 0x1f,
+    0x3b, 0xbe, 0xe4, 0xd1, 0x42, 0x3d, 0xd4, 0x30, 0xa3, 0x3c, 0xb6, 0x26,
+    0x6f, 0xbf, 0x0e, 0xda, 0x46, 0x69, 0x07, 0x57, 0x27, 0xf2, 0x1d, 0x9b,
+    0xbc, 0x94, 0x43, 0x03, 0xf8, 0x11, 0xc7, 0xf6, 0x90, 0xef, 0x3e, 0xe7,
+    0x06, 0xc3, 0xd5, 0x2f, 0xc8, 0x66, 0x1e, 0xd7, 0x08, 0xe8, 0xea, 0xde,
+    0x80, 0x52, 0xee, 0xf7, 0x84, 0xaa, 0x72, 0xac, 0x35, 0x4d, 0x6a, 0x2a,
+    0x96, 0x1a, 0xd2, 0x71, 0x5a, 0x15, 0x49, 0x74, 0x4b, 0x9f, 0xd0, 0x5e,
+    0x04, 0x18, 0xa4, 0xec, 0xc2, 0xe0, 0x41, 0x6e, 0x0f, 0x51, 0xcb, 0xcc,
+    0x24, 0x91, 0xaf, 0x50, 0xa1, 0xf4, 0x70, 0x39, 0x99, 0x7c, 0x3a, 0x85,
+    0x23, 0xb8, 0xb4, 0x7a, 0xfc, 0x02, 0x36, 0x5b, 0x25, 0x55, 0x97, 0x31,
+    0x2d, 0x5d, 0xfa, 0x98, 0xe3, 0x8a, 0x92, 0xae, 0x05, 0xdf, 0x29, 0x10,
+    0x67, 0x6c, 0xba, 0xc9, 0xd3, 0x00, 0xe6, 0xcf, 0xe1, 0x9e, 0xa8, 0x2c,
+    0x63, 0x16, 0x01, 0x3f, 0x58, 0xe2, 0x89, 0xa9, 0x0d, 0x38, 0x34, 0x1b,
+    0xab, 0x33, 0xff, 0xb0, 0xbb, 0x48, 0x0c, 0x5f, 0xb9, 0xb1, 0xcd, 0x2e,
+    0xc5, 0xf3, 0xdb, 0x47, 0xe5, 0xa5, 0x9c, 0x77, 0x0a, 0xa6, 0x20, 0x68,
+    0xfe, 0x7f, 0xc1, 0xad,
+};
+
+#if defined(_MSC_VER) && defined(_ARM_)
+# pragma optimize("g",off)
+#endif
+
+/*
+ * It has come to my attention that there are 2 versions of the RC2 key
+ * schedule.  One which is normal, and anther which has a hook to use a
+ * reduced key length. BSAFE uses the 'retarded' version.  What I previously
+ * shipped is the same as specifying 1024 for the 'bits' parameter.  Bsafe
+ * uses a version where the bits parameter is the same as len*8
+ */
+void RC2_set_key(RC2_KEY *key, int len, const unsigned char *data, int bits)
+{
+    int i, j;
+    unsigned char *k;
+    RC2_INT *ki;
+    unsigned int c, d;
+
+    k = (unsigned char *)&(key->data[0]);
+    *k = 0;                     /* for if there is a zero length key */
+
+    if (len > 128)
+        len = 128;
+    if (bits <= 0)
+        bits = 1024;
+    if (bits > 1024)
+        bits = 1024;
+
+    for (i = 0; i < len; i++)
+        k[i] = data[i];
+
+    /* expand table */
+    d = k[len - 1];
+    j = 0;
+    for (i = len; i < 128; i++, j++) {
+        d = key_table[(k[j] + d) & 0xff];
+        k[i] = d;
+    }
+
+    /* hmm.... key reduction to 'bits' bits */
+
+    j = (bits + 7) >> 3;
+    i = 128 - j;
+    c = (0xff >> (-bits & 0x07));
+
+    d = key_table[k[i] & c];
+    k[i] = d;
+    while (i--) {
+        d = key_table[k[i + j] ^ d];
+        k[i] = d;
+    }
+
+    /* copy from bytes into RC2_INT's */
+    ki = &(key->data[63]);
+    for (i = 127; i >= 0; i -= 2)
+        *(ki--) = ((k[i] << 8) | k[i - 1]) & 0xffff;
+}
+
+#if defined(_MSC_VER)
+# pragma optimize("",on)
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2cfb64.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2cfb64.c
new file mode 100644
index 000000000..e11093db9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2cfb64.c
@@ -0,0 +1,74 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/rc2.h>
+#include "rc2_locl.h"
+
+/*
+ * The input and output encrypted as though 64bit cfb mode is being used.
+ * The extra state information to record how much of the 64bit block we have
+ * used is contained in *num;
+ */
+
+void RC2_cfb64_encrypt(const unsigned char *in, unsigned char *out,
+                       long length, RC2_KEY *schedule, unsigned char *ivec,
+                       int *num, int encrypt)
+{
+    register unsigned long v0, v1, t;
+    register int n = *num;
+    register long l = length;
+    unsigned long ti[2];
+    unsigned char *iv, c, cc;
+
+    iv = (unsigned char *)ivec;
+    if (encrypt) {
+        while (l--) {
+            if (n == 0) {
+                c2l(iv, v0);
+                ti[0] = v0;
+                c2l(iv, v1);
+                ti[1] = v1;
+                RC2_encrypt((unsigned long *)ti, schedule);
+                iv = (unsigned char *)ivec;
+                t = ti[0];
+                l2c(t, iv);
+                t = ti[1];
+                l2c(t, iv);
+                iv = (unsigned char *)ivec;
+            }
+            c = *(in++) ^ iv[n];
+            *(out++) = c;
+            iv[n] = c;
+            n = (n + 1) & 0x07;
+        }
+    } else {
+        while (l--) {
+            if (n == 0) {
+                c2l(iv, v0);
+                ti[0] = v0;
+                c2l(iv, v1);
+                ti[1] = v1;
+                RC2_encrypt((unsigned long *)ti, schedule);
+                iv = (unsigned char *)ivec;
+                t = ti[0];
+                l2c(t, iv);
+                t = ti[1];
+                l2c(t, iv);
+                iv = (unsigned char *)ivec;
+            }
+            cc = *(in++);
+            c = iv[n];
+            iv[n] = cc;
+            *(out++) = c ^ cc;
+            n = (n + 1) & 0x07;
+        }
+    }
+    v0 = v1 = ti[0] = ti[1] = t = c = cc = 0;
+    *num = n;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2ofb64.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2ofb64.c
new file mode 100644
index 000000000..d610278a9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc2/rc2ofb64.c
@@ -0,0 +1,61 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/rc2.h>
+#include "rc2_locl.h"
+
+/*
+ * The input and output encrypted as though 64bit ofb mode is being used.
+ * The extra state information to record how much of the 64bit block we have
+ * used is contained in *num;
+ */
+void RC2_ofb64_encrypt(const unsigned char *in, unsigned char *out,
+                       long length, RC2_KEY *schedule, unsigned char *ivec,
+                       int *num)
+{
+    register unsigned long v0, v1, t;
+    register int n = *num;
+    register long l = length;
+    unsigned char d[8];
+    register char *dp;
+    unsigned long ti[2];
+    unsigned char *iv;
+    int save = 0;
+
+    iv = (unsigned char *)ivec;
+    c2l(iv, v0);
+    c2l(iv, v1);
+    ti[0] = v0;
+    ti[1] = v1;
+    dp = (char *)d;
+    l2c(v0, dp);
+    l2c(v1, dp);
+    while (l--) {
+        if (n == 0) {
+            RC2_encrypt((unsigned long *)ti, schedule);
+            dp = (char *)d;
+            t = ti[0];
+            l2c(t, dp);
+            t = ti[1];
+            l2c(t, dp);
+            save++;
+        }
+        *(out++) = *(in++) ^ d[n];
+        n = (n + 1) & 0x07;
+    }
+    if (save) {
+        v0 = ti[0];
+        v1 = ti[1];
+        iv = (unsigned char *)ivec;
+        l2c(v0, iv);
+        l2c(v1, iv);
+    }
+    t = v0 = v1 = ti[0] = ti[1] = 0;
+    *num = n;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-586.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-586.pl
new file mode 100644
index 000000000..8c5cf87d0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-586.pl
@@ -0,0 +1,426 @@
+#! /usr/bin/env perl
+# Copyright 1998-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# [Re]written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# At some point it became apparent that the original SSLeay RC4
+# assembler implementation performs suboptimally on latest IA-32
+# microarchitectures. After re-tuning performance has changed as
+# following:
+#
+# Pentium	-10%
+# Pentium III	+12%
+# AMD		+50%(*)
+# P4		+250%(**)
+#
+# (*)	This number is actually a trade-off:-) It's possible to
+#	achieve	+72%, but at the cost of -48% off PIII performance.
+#	In other words code performing further 13% faster on AMD
+#	would perform almost 2 times slower on Intel PIII...
+#	For reference! This code delivers ~80% of rc4-amd64.pl
+#	performance on the same Opteron machine.
+# (**)	This number requires compressed key schedule set up by
+#	RC4_set_key [see commentary below for further details].
+
+# May 2011
+#
+# Optimize for Core2 and Westmere [and incidentally Opteron]. Current
+# performance in cycles per processed byte (less is better) and
+# improvement relative to previous version of this module is:
+#
+# Pentium	10.2			# original numbers
+# Pentium III	7.8(*)
+# Intel P4	7.5
+#
+# Opteron	6.1/+20%		# new MMX numbers
+# Core2		5.3/+67%(**)
+# Westmere	5.1/+94%(**)
+# Sandy Bridge	5.0/+8%
+# Atom		12.6/+6%
+# VIA Nano	6.4/+9%
+# Ivy Bridge	4.9/±0%
+# Bulldozer	4.9/+15%
+#
+# (*)	PIII can actually deliver 6.6 cycles per byte with MMX code,
+#	but this specific code performs poorly on Core2. And vice
+#	versa, below MMX/SSE code delivering 5.8/7.1 on Core2 performs
+#	poorly on PIII, at 8.0/14.5:-( As PIII is not a "hot" CPU
+#	[anymore], I chose to discard PIII-specific code path and opt
+#	for original IALU-only code, which is why MMX/SSE code path
+#	is guarded by SSE2 bit (see below), not MMX/SSE.
+# (**)	Performance vs. block size on Core2 and Westmere had a maximum
+#	at ... 64 bytes block size. And it was quite a maximum, 40-60%
+#	in comparison to largest 8KB block size. Above improvement
+#	coefficients are for the largest block size.
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output=pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0],$x86only = $ARGV[$#ARGV] eq "386");
+
+$xx="eax";
+$yy="ebx";
+$tx="ecx";
+$ty="edx";
+$inp="esi";
+$out="ebp";
+$dat="edi";
+
+sub RC4_loop {
+  my $i=shift;
+  my $func = ($i==0)?*mov:*or;
+
+	&add	(&LB($yy),&LB($tx));
+	&mov	($ty,&DWP(0,$dat,$yy,4));
+	&mov	(&DWP(0,$dat,$yy,4),$tx);
+	&mov	(&DWP(0,$dat,$xx,4),$ty);
+	&add	($ty,$tx);
+	&inc	(&LB($xx));
+	&and	($ty,0xff);
+	&ror	($out,8)	if ($i!=0);
+	if ($i<3) {
+	  &mov	($tx,&DWP(0,$dat,$xx,4));
+	} else {
+	  &mov	($tx,&wparam(3));	# reload [re-biased] out
+	}
+	&$func	($out,&DWP(0,$dat,$ty,4));
+}
+
+if ($alt=0) {
+  # >20% faster on Atom and Sandy Bridge[!], 8% faster on Opteron,
+  # but ~40% slower on Core2 and Westmere... Attempt to add movz
+  # brings down Opteron by 25%, Atom and Sandy Bridge by 15%, yet
+  # on Core2 with movz it's almost 20% slower than below alternative
+  # code... Yes, it's a total mess...
+  my @XX=($xx,$out);
+  $RC4_loop_mmx = sub {		# SSE actually...
+    my $i=shift;
+    my $j=$i<=0?0:$i>>1;
+    my $mm=$i<=0?"mm0":"mm".($i&1);
+
+	&add	(&LB($yy),&LB($tx));
+	&lea	(@XX[1],&DWP(1,@XX[0]));
+	&pxor	("mm2","mm0")				if ($i==0);
+	&psllq	("mm1",8)				if ($i==0);
+	&and	(@XX[1],0xff);
+	&pxor	("mm0","mm0")				if ($i<=0);
+	&mov	($ty,&DWP(0,$dat,$yy,4));
+	&mov	(&DWP(0,$dat,$yy,4),$tx);
+	&pxor	("mm1","mm2")				if ($i==0);
+	&mov	(&DWP(0,$dat,$XX[0],4),$ty);
+	&add	(&LB($ty),&LB($tx));
+	&movd	(@XX[0],"mm7")				if ($i==0);
+	&mov	($tx,&DWP(0,$dat,@XX[1],4));
+	&pxor	("mm1","mm1")				if ($i==1);
+	&movq	("mm2",&QWP(0,$inp))			if ($i==1);
+	&movq	(&QWP(-8,(@XX[0],$inp)),"mm1")		if ($i==0);
+	&pinsrw	($mm,&DWP(0,$dat,$ty,4),$j);
+
+	push	(@XX,shift(@XX))			if ($i>=0);
+  }
+} else {
+  # Using pinsrw here improves performance on Intel CPUs by 2-3%, but
+  # brings down AMD by 7%...
+  $RC4_loop_mmx = sub {
+    my $i=shift;
+
+	&add	(&LB($yy),&LB($tx));
+	&psllq	("mm1",8*(($i-1)&7))			if (abs($i)!=1);
+	&mov	($ty,&DWP(0,$dat,$yy,4));
+	&mov	(&DWP(0,$dat,$yy,4),$tx);
+	&mov	(&DWP(0,$dat,$xx,4),$ty);
+	&inc	($xx);
+	&add	($ty,$tx);
+	&movz	($xx,&LB($xx));				# (*)
+	&movz	($ty,&LB($ty));				# (*)
+	&pxor	("mm2",$i==1?"mm0":"mm1")		if ($i>=0);
+	&movq	("mm0",&QWP(0,$inp))			if ($i<=0);
+	&movq	(&QWP(-8,($out,$inp)),"mm2")		if ($i==0);
+	&mov	($tx,&DWP(0,$dat,$xx,4));
+	&movd	($i>0?"mm1":"mm2",&DWP(0,$dat,$ty,4));
+
+	# (*)	This is the key to Core2 and Westmere performance.
+	#	Without movz out-of-order execution logic confuses
+	#	itself and fails to reorder loads and stores. Problem
+	#	appears to be fixed in Sandy Bridge...
+  }
+}
+
+&external_label("OPENSSL_ia32cap_P");
+
+# void RC4(RC4_KEY *key,size_t len,const unsigned char *inp,unsigned char *out);
+&function_begin("RC4");
+	&mov	($dat,&wparam(0));	# load key schedule pointer
+	&mov	($ty, &wparam(1));	# load len
+	&mov	($inp,&wparam(2));	# load inp
+	&mov	($out,&wparam(3));	# load out
+
+	&xor	($xx,$xx);		# avoid partial register stalls
+	&xor	($yy,$yy);
+
+	&cmp	($ty,0);		# safety net
+	&je	(&label("abort"));
+
+	&mov	(&LB($xx),&BP(0,$dat));	# load key->x
+	&mov	(&LB($yy),&BP(4,$dat));	# load key->y
+	&add	($dat,8);
+
+	&lea	($tx,&DWP(0,$inp,$ty));
+	&sub	($out,$inp);		# re-bias out
+	&mov	(&wparam(1),$tx);	# save input+len
+
+	&inc	(&LB($xx));
+
+	# detect compressed key schedule...
+	&cmp	(&DWP(256,$dat),-1);
+	&je	(&label("RC4_CHAR"));
+
+	&mov	($tx,&DWP(0,$dat,$xx,4));
+
+	&and	($ty,-4);		# how many 4-byte chunks?
+	&jz	(&label("loop1"));
+
+	&mov	(&wparam(3),$out);	# $out as accumulator in these loops
+					if ($x86only) {
+	&jmp	(&label("go4loop4"));
+					} else {
+	&test	($ty,-8);
+	&jz	(&label("go4loop4"));
+
+	&picmeup($out,"OPENSSL_ia32cap_P");
+	&bt	(&DWP(0,$out),26);	# check SSE2 bit [could have been MMX]
+	&jnc	(&label("go4loop4"));
+
+	&mov	($out,&wparam(3))	if (!$alt);
+	&movd	("mm7",&wparam(3))	if ($alt);
+	&and	($ty,-8);
+	&lea	($ty,&DWP(-8,$inp,$ty));
+	&mov	(&DWP(-4,$dat),$ty);	# save input+(len/8)*8-8
+
+	&$RC4_loop_mmx(-1);
+	&jmp(&label("loop_mmx_enter"));
+
+	&set_label("loop_mmx",16);
+		&$RC4_loop_mmx(0);
+	&set_label("loop_mmx_enter");
+		for 	($i=1;$i<8;$i++) { &$RC4_loop_mmx($i); }
+		&mov	($ty,$yy);
+		&xor	($yy,$yy);		# this is second key to Core2
+		&mov	(&LB($yy),&LB($ty));	# and Westmere performance...
+		&cmp	($inp,&DWP(-4,$dat));
+		&lea	($inp,&DWP(8,$inp));
+	&jb	(&label("loop_mmx"));
+
+    if ($alt) {
+	&movd	($out,"mm7");
+	&pxor	("mm2","mm0");
+	&psllq	("mm1",8);
+	&pxor	("mm1","mm2");
+	&movq	(&QWP(-8,$out,$inp),"mm1");
+    } else {
+	&psllq	("mm1",56);
+	&pxor	("mm2","mm1");
+	&movq	(&QWP(-8,$out,$inp),"mm2");
+    }
+	&emms	();
+
+	&cmp	($inp,&wparam(1));	# compare to input+len
+	&je	(&label("done"));
+	&jmp	(&label("loop1"));
+					}
+
+&set_label("go4loop4",16);
+	&lea	($ty,&DWP(-4,$inp,$ty));
+	&mov	(&wparam(2),$ty);	# save input+(len/4)*4-4
+
+	&set_label("loop4");
+		for ($i=0;$i<4;$i++) { RC4_loop($i); }
+		&ror	($out,8);
+		&xor	($out,&DWP(0,$inp));
+		&cmp	($inp,&wparam(2));	# compare to input+(len/4)*4-4
+		&mov	(&DWP(0,$tx,$inp),$out);# $tx holds re-biased out here
+		&lea	($inp,&DWP(4,$inp));
+		&mov	($tx,&DWP(0,$dat,$xx,4));
+	&jb	(&label("loop4"));
+
+	&cmp	($inp,&wparam(1));	# compare to input+len
+	&je	(&label("done"));
+	&mov	($out,&wparam(3));	# restore $out
+
+	&set_label("loop1",16);
+		&add	(&LB($yy),&LB($tx));
+		&mov	($ty,&DWP(0,$dat,$yy,4));
+		&mov	(&DWP(0,$dat,$yy,4),$tx);
+		&mov	(&DWP(0,$dat,$xx,4),$ty);
+		&add	($ty,$tx);
+		&inc	(&LB($xx));
+		&and	($ty,0xff);
+		&mov	($ty,&DWP(0,$dat,$ty,4));
+		&xor	(&LB($ty),&BP(0,$inp));
+		&lea	($inp,&DWP(1,$inp));
+		&mov	($tx,&DWP(0,$dat,$xx,4));
+		&cmp	($inp,&wparam(1));	# compare to input+len
+		&mov	(&BP(-1,$out,$inp),&LB($ty));
+	&jb	(&label("loop1"));
+
+	&jmp	(&label("done"));
+
+# this is essentially Intel P4 specific codepath...
+&set_label("RC4_CHAR",16);
+	&movz	($tx,&BP(0,$dat,$xx));
+	# strangely enough unrolled loop performs over 20% slower...
+	&set_label("cloop1");
+		&add	(&LB($yy),&LB($tx));
+		&movz	($ty,&BP(0,$dat,$yy));
+		&mov	(&BP(0,$dat,$yy),&LB($tx));
+		&mov	(&BP(0,$dat,$xx),&LB($ty));
+		&add	(&LB($ty),&LB($tx));
+		&movz	($ty,&BP(0,$dat,$ty));
+		&add	(&LB($xx),1);
+		&xor	(&LB($ty),&BP(0,$inp));
+		&lea	($inp,&DWP(1,$inp));
+		&movz	($tx,&BP(0,$dat,$xx));
+		&cmp	($inp,&wparam(1));
+		&mov	(&BP(-1,$out,$inp),&LB($ty));
+	&jb	(&label("cloop1"));
+
+&set_label("done");
+	&dec	(&LB($xx));
+	&mov	(&DWP(-4,$dat),$yy);		# save key->y
+	&mov	(&BP(-8,$dat),&LB($xx));	# save key->x
+&set_label("abort");
+&function_end("RC4");
+
+########################################################################
+
+$inp="esi";
+$out="edi";
+$idi="ebp";
+$ido="ecx";
+$idx="edx";
+
+# void RC4_set_key(RC4_KEY *key,int len,const unsigned char *data);
+&function_begin("RC4_set_key");
+	&mov	($out,&wparam(0));		# load key
+	&mov	($idi,&wparam(1));		# load len
+	&mov	($inp,&wparam(2));		# load data
+	&picmeup($idx,"OPENSSL_ia32cap_P");
+
+	&lea	($out,&DWP(2*4,$out));		# &key->data
+	&lea	($inp,&DWP(0,$inp,$idi));	# $inp to point at the end
+	&neg	($idi);
+	&xor	("eax","eax");
+	&mov	(&DWP(-4,$out),$idi);		# borrow key->y
+
+	&bt	(&DWP(0,$idx),20);		# check for bit#20
+	&jc	(&label("c1stloop"));
+
+&set_label("w1stloop",16);
+	&mov	(&DWP(0,$out,"eax",4),"eax");	# key->data[i]=i;
+	&add	(&LB("eax"),1);			# i++;
+	&jnc	(&label("w1stloop"));
+
+	&xor	($ido,$ido);
+	&xor	($idx,$idx);
+
+&set_label("w2ndloop",16);
+	&mov	("eax",&DWP(0,$out,$ido,4));
+	&add	(&LB($idx),&BP(0,$inp,$idi));
+	&add	(&LB($idx),&LB("eax"));
+	&add	($idi,1);
+	&mov	("ebx",&DWP(0,$out,$idx,4));
+	&jnz	(&label("wnowrap"));
+	  &mov	($idi,&DWP(-4,$out));
+	&set_label("wnowrap");
+	&mov	(&DWP(0,$out,$idx,4),"eax");
+	&mov	(&DWP(0,$out,$ido,4),"ebx");
+	&add	(&LB($ido),1);
+	&jnc	(&label("w2ndloop"));
+&jmp	(&label("exit"));
+
+# Unlike all other x86 [and x86_64] implementations, Intel P4 core
+# [including EM64T] was found to perform poorly with above "32-bit" key
+# schedule, a.k.a. RC4_INT. Performance improvement for IA-32 hand-coded
+# assembler turned out to be 3.5x if re-coded for compressed 8-bit one,
+# a.k.a. RC4_CHAR! It's however inappropriate to just switch to 8-bit
+# schedule for x86[_64], because non-P4 implementations suffer from
+# significant performance losses then, e.g. PIII exhibits >2x
+# deterioration, and so does Opteron. In order to assure optimal
+# all-round performance, we detect P4 at run-time and set up compressed
+# key schedule, which is recognized by RC4 procedure.
+
+&set_label("c1stloop",16);
+	&mov	(&BP(0,$out,"eax"),&LB("eax"));	# key->data[i]=i;
+	&add	(&LB("eax"),1);			# i++;
+	&jnc	(&label("c1stloop"));
+
+	&xor	($ido,$ido);
+	&xor	($idx,$idx);
+	&xor	("ebx","ebx");
+
+&set_label("c2ndloop",16);
+	&mov	(&LB("eax"),&BP(0,$out,$ido));
+	&add	(&LB($idx),&BP(0,$inp,$idi));
+	&add	(&LB($idx),&LB("eax"));
+	&add	($idi,1);
+	&mov	(&LB("ebx"),&BP(0,$out,$idx));
+	&jnz	(&label("cnowrap"));
+	  &mov	($idi,&DWP(-4,$out));
+	&set_label("cnowrap");
+	&mov	(&BP(0,$out,$idx),&LB("eax"));
+	&mov	(&BP(0,$out,$ido),&LB("ebx"));
+	&add	(&LB($ido),1);
+	&jnc	(&label("c2ndloop"));
+
+	&mov	(&DWP(256,$out),-1);		# mark schedule as compressed
+
+&set_label("exit");
+	&xor	("eax","eax");
+	&mov	(&DWP(-8,$out),"eax");		# key->x=0;
+	&mov	(&DWP(-4,$out),"eax");		# key->y=0;
+&function_end("RC4_set_key");
+
+# const char *RC4_options(void);
+&function_begin_B("RC4_options");
+	&call	(&label("pic_point"));
+&set_label("pic_point");
+	&blindpop("eax");
+	&lea	("eax",&DWP(&label("opts")."-".&label("pic_point"),"eax"));
+	&picmeup("edx","OPENSSL_ia32cap_P");
+	&mov	("edx",&DWP(0,"edx"));
+	&bt	("edx",20);
+	&jc	(&label("1xchar"));
+	&bt	("edx",26);
+	&jnc	(&label("ret"));
+	&add	("eax",25);
+	&ret	();
+&set_label("1xchar");
+	&add	("eax",12);
+&set_label("ret");
+	&ret	();
+&set_label("opts",64);
+&asciz	("rc4(4x,int)");
+&asciz	("rc4(1x,char)");
+&asciz	("rc4(8x,mmx)");
+&asciz	("RC4 for x86, CRYPTOGAMS by <appro\@openssl.org>");
+&align	(64);
+&function_end_B("RC4_options");
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-c64xplus.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-c64xplus.pl
new file mode 100644
index 000000000..1354d1821
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-c64xplus.pl
@@ -0,0 +1,192 @@
+#! /usr/bin/env perl
+# Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# RC4 for C64x+.
+#
+# April 2014
+#
+# RC4 subroutine processes one byte in 7.0 cycles, which is 3x faster
+# than TI CGT-generated code. Loop is scheduled in such way that
+# there is only one reference to memory in each cycle. This is done
+# to avoid L1D memory banking conflicts, see SPRU871 TI publication
+# for further details. Otherwise it should be possible to schedule
+# the loop for iteration interval of 6...
+
+($KEY,$LEN,$INP,$OUT)=("A4","B4","A6","B6");
+
+($KEYA,$XX,$TY,$xx,$ONE,$ret)=map("A$_",(5,7,8,9,1,2));
+($KEYB,$YY,$TX,$tx,$SUM,$dat)=map("B$_",(5,7,8,9,1,2));
+
+$code.=<<___;
+	.text
+
+	.if	.ASSEMBLER_VERSION<7000000
+	.asg	0,__TI_EABI__
+	.endif
+	.if	__TI_EABI__
+	.nocmp
+	.asg	RC4,_RC4
+	.asg	RC4_set_key,_RC4_set_key
+	.asg	RC4_options,_RC4_options
+	.endif
+
+	.global	_RC4
+	.align	16
+_RC4:
+	.asmfunc
+	MV	$LEN,B0
+  [!B0]	BNOP	B3			; if (len==0) return;
+||[B0]	ADD	$KEY,2,$KEYA
+||[B0]	ADD	$KEY,2,$KEYB
+  [B0]	MVK	1,$ONE
+||[B0]	LDBU	*${KEYA}[-2],$XX	; key->x
+  [B0]	LDBU	*${KEYB}[-1],$YY	; key->y
+||	NOP	4
+
+	ADD4	$ONE,$XX,$XX
+	LDBU	*${KEYA}[$XX],$TX
+||	MVC	$LEN,ILC
+	NOP	4
+;;==================================================
+	SPLOOP	7
+||	ADD4	$TX,$YY,$YY
+
+	LDBU	*${KEYB}[$YY],$TY
+||	MVD	$XX,$xx
+||	ADD4	$ONE,$XX,$XX
+	LDBU	*${KEYA}[$XX],$tx
+	CMPEQ	$YY,$XX,B0
+||	NOP	3
+	STB	$TX,*${KEYB}[$YY]
+||[B0]	ADD4	$TX,$YY,$YY
+	STB	$TY,*${KEYA}[$xx]
+||[!B0]	ADD4	$tx,$YY,$YY
+||[!B0]	MVD	$tx,$TX
+	ADD4	$TY,$TX,$SUM		; [0,0] $TX is not replaced by $tx yet!
+||	NOP	2
+	LDBU	*$INP++,$dat
+||	NOP	2
+	LDBU	*${KEYB}[$SUM],$ret
+||	NOP	5
+	XOR.L	$dat,$ret,$ret
+	SPKERNEL
+||	STB	$ret,*$OUT++
+;;==================================================
+	SUB4	$XX,$ONE,$XX
+||	NOP	5
+	STB	$XX,*${KEYA}[-2]	; key->x
+||	SUB4	$YY,$TX,$YY
+||	BNOP	B3
+	STB	$YY,*${KEYB}[-1]	; key->y
+||	NOP	5
+	.endasmfunc
+
+	.global	_RC4_set_key
+	.align	16
+_RC4_set_key:
+	.asmfunc
+	.if	.BIG_ENDIAN
+	MVK	0x00000404,$ONE
+||	MVK	0x00000203,B0
+	MVKH	0x04040000,$ONE
+||	MVKH	0x00010000,B0
+	.else
+	MVK	0x00000404,$ONE
+||	MVK	0x00000100,B0
+	MVKH	0x04040000,$ONE
+||	MVKH	0x03020000,B0
+	.endif
+	ADD	$KEY,2,$KEYA
+||	ADD	$KEY,2,$KEYB
+||	ADD	$INP,$LEN,$ret		; end of input
+	LDBU	*${INP}++,$dat
+||	MVK	0,$TX
+	STH	$TX,*${KEY}++		; key->x=key->y=0
+||	MV	B0,A0
+||	MVK	64-4,B0
+
+;;==================================================
+	SPLOOPD	1
+||	MVC	B0,ILC
+
+	STNW	A0,*${KEY}++
+||	ADD4	$ONE,A0,A0
+	SPKERNEL
+;;==================================================
+
+	MVK	0,$YY
+||	MVK	0,$XX
+	MVK	1,$ONE
+||	MVK	256-1,B0
+
+;;==================================================
+	SPLOOPD	8
+||	MVC	B0,ILC
+
+	ADD4	$dat,$YY,$YY
+||	CMPEQ	$INP,$ret,A0		; end of input?
+	LDBU	*${KEYB}[$YY],$TY
+||	MVD	$XX,$xx
+||	ADD4	$ONE,$XX,$XX
+	LDBU	*${KEYA}[$XX],$tx
+||[A0]	SUB	$INP,$LEN,$INP		; rewind
+	LDBU	*${INP}++,$dat
+||	CMPEQ	$YY,$XX,B0
+||	NOP	3
+	STB	$TX,*${KEYB}[$YY]
+||[B0]	ADD4	$TX,$YY,$YY
+	STB	$TY,*${KEYA}[$xx]
+||[!B0]	ADD4	$tx,$YY,$YY
+||[!B0]	MV	$tx,$TX
+	SPKERNEL
+;;==================================================
+
+	BNOP	B3,5
+	.endasmfunc
+
+	.global	_RC4_options
+	.align	16
+_RC4_options:
+_rc4_options:
+	.asmfunc
+	BNOP	B3,1
+	ADDKPC	_rc4_options,B4
+	.if	__TI_EABI__
+	MVKL	\$PCR_OFFSET(rc4_options,_rc4_options),A4
+	MVKH	\$PCR_OFFSET(rc4_options,_rc4_options),A4
+	.else
+	MVKL	(rc4_options-_rc4_options),A4
+	MVKH	(rc4_options-_rc4_options),A4
+	.endif
+	ADD	B4,A4,A4
+	.endasmfunc
+
+	.if	__TI_EABI__
+	.sect	".text:rc4_options.const"
+	.else
+	.sect	".const:rc4_options"
+	.endif
+	.align	4
+rc4_options:
+	.cstring "rc4(sploop,char)"
+	.cstring "RC4 for C64+, CRYPTOGAMS by <appro\@openssl.org>"
+	.align	4
+___
+
+$output=pop;
+open STDOUT,">$output";
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-md5-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-md5-x86_64.pl
new file mode 100644
index 000000000..74e519105
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-md5-x86_64.pl
@@ -0,0 +1,661 @@
+#! /usr/bin/env perl
+# Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# June 2011
+#
+# This is RC4+MD5 "stitch" implementation. The idea, as spelled in
+# http://download.intel.com/design/intarch/papers/323686.pdf, is that
+# since both algorithms exhibit instruction-level parallelism, ILP,
+# below theoretical maximum, interleaving them would allow to utilize
+# processor resources better and achieve better performance. RC4
+# instruction sequence is virtually identical to rc4-x86_64.pl, which
+# is heavily based on submission by Maxim Perminov, Maxim Locktyukhin
+# and Jim Guilford of Intel. MD5 is fresh implementation aiming to
+# minimize register usage, which was used as "main thread" with RC4
+# weaved into it, one RC4 round per one MD5 round. In addition to the
+# stiched subroutine the script can generate standalone replacement
+# md5_block_asm_data_order and RC4. Below are performance numbers in
+# cycles per processed byte, less is better, for these the standalone
+# subroutines, sum of them, and stitched one:
+#
+#		RC4	MD5	RC4+MD5	stitch	gain
+# Opteron	6.5(*)	5.4	11.9	7.0	+70%(*)
+# Core2		6.5	5.8	12.3	7.7	+60%
+# Westmere	4.3	5.2	9.5	7.0	+36%
+# Sandy Bridge	4.2	5.5	9.7	6.8	+43%
+# Ivy Bridge	4.1	5.2	9.3	6.0	+54%
+# Haswell	4.0	5.0	9.0	5.7	+60%
+# Skylake	6.3(**)	5.0	11.3	5.3	+110%
+# Atom		9.3	6.5	15.8	11.1	+42%
+# VIA Nano	6.3	5.4	11.7	8.6	+37%
+# Bulldozer	4.5	5.4	9.9	7.7	+29%
+#
+# (*)	rc4-x86_64.pl delivers 5.3 on Opteron, so real improvement
+#	is +53%...
+# (**)	unidentified anomaly;
+
+my ($rc4,$md5)=(1,1);	# what to generate?
+my $D="#" if (!$md5);	# if set to "#", MD5 is stitched into RC4(),
+			# but its result is discarded. Idea here is
+			# to be able to use 'openssl speed rc4' for
+			# benchmarking the stitched subroutine...
+
+my $flavour = shift;
+my $output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+my $win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; my $dir=$1; my $xlate;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+my ($dat,$in0,$out,$ctx,$inp,$len, $func,$nargs);
+
+if ($rc4 && !$md5) {
+  ($dat,$len,$in0,$out) = ("%rdi","%rsi","%rdx","%rcx");
+  $func="RC4";				$nargs=4;
+} elsif ($md5 && !$rc4) {
+  ($ctx,$inp,$len) = ("%rdi","%rsi","%rdx");
+  $func="md5_block_asm_data_order";	$nargs=3;
+} else {
+  ($dat,$in0,$out,$ctx,$inp,$len) = ("%rdi","%rsi","%rdx","%rcx","%r8","%r9");
+  $func="rc4_md5_enc";			$nargs=6;
+  # void rc4_md5_enc(
+  #		RC4_KEY *key,		#
+  #		const void *in0,	# RC4 input
+  #		void *out,		# RC4 output
+  #		MD5_CTX *ctx,		#
+  #		const void *inp,	# MD5 input
+  #		size_t len);		# number of 64-byte blocks
+}
+
+my @K=(	0xd76aa478,0xe8c7b756,0x242070db,0xc1bdceee,
+	0xf57c0faf,0x4787c62a,0xa8304613,0xfd469501,
+	0x698098d8,0x8b44f7af,0xffff5bb1,0x895cd7be,
+	0x6b901122,0xfd987193,0xa679438e,0x49b40821,
+
+	0xf61e2562,0xc040b340,0x265e5a51,0xe9b6c7aa,
+	0xd62f105d,0x02441453,0xd8a1e681,0xe7d3fbc8,
+	0x21e1cde6,0xc33707d6,0xf4d50d87,0x455a14ed,
+	0xa9e3e905,0xfcefa3f8,0x676f02d9,0x8d2a4c8a,
+
+	0xfffa3942,0x8771f681,0x6d9d6122,0xfde5380c,
+	0xa4beea44,0x4bdecfa9,0xf6bb4b60,0xbebfbc70,
+	0x289b7ec6,0xeaa127fa,0xd4ef3085,0x04881d05,
+	0xd9d4d039,0xe6db99e5,0x1fa27cf8,0xc4ac5665,
+
+	0xf4292244,0x432aff97,0xab9423a7,0xfc93a039,
+	0x655b59c3,0x8f0ccc92,0xffeff47d,0x85845dd1,
+	0x6fa87e4f,0xfe2ce6e0,0xa3014314,0x4e0811a1,
+	0xf7537e82,0xbd3af235,0x2ad7d2bb,0xeb86d391	);
+
+my @V=("%r8d","%r9d","%r10d","%r11d");	# MD5 registers
+my $tmp="%r12d";
+
+my @XX=("%rbp","%rsi");			# RC4 registers
+my @TX=("%rax","%rbx");
+my $YY="%rcx";
+my $TY="%rdx";
+
+my $MOD=32;				# 16, 32 or 64
+
+$code.=<<___;
+.text
+.align 16
+
+.globl	$func
+.type	$func,\@function,$nargs
+$func:
+.cfi_startproc
+	cmp	\$0,$len
+	je	.Labort
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	sub	\$40,%rsp
+.cfi_adjust_cfa_offset	40
+.Lbody:
+___
+if ($rc4) {
+$code.=<<___;
+$D#md5#	mov	$ctx,%r11		# reassign arguments
+	mov	$len,%r12
+	mov	$in0,%r13
+	mov	$out,%r14
+$D#md5#	mov	$inp,%r15
+___
+    $ctx="%r11"	if ($md5);		# reassign arguments
+    $len="%r12";
+    $in0="%r13";
+    $out="%r14";
+    $inp="%r15"	if ($md5);
+    $inp=$in0	if (!$md5);
+$code.=<<___;
+	xor	$XX[0],$XX[0]
+	xor	$YY,$YY
+
+	lea	8($dat),$dat
+	mov	-8($dat),$XX[0]#b
+	mov	-4($dat),$YY#b
+
+	inc	$XX[0]#b
+	sub	$in0,$out
+	movl	($dat,$XX[0],4),$TX[0]#d
+___
+$code.=<<___ if (!$md5);
+	xor	$TX[1],$TX[1]
+	test	\$-128,$len
+	jz	.Loop1
+	sub	$XX[0],$TX[1]
+	and	\$`$MOD-1`,$TX[1]
+	jz	.Loop${MOD}_is_hot
+	sub	$TX[1],$len
+.Loop${MOD}_warmup:
+	add	$TX[0]#b,$YY#b
+	movl	($dat,$YY,4),$TY#d
+	movl	$TX[0]#d,($dat,$YY,4)
+	movl	$TY#d,($dat,$XX[0],4)
+	add	$TY#b,$TX[0]#b
+	inc	$XX[0]#b
+	movl	($dat,$TX[0],4),$TY#d
+	movl	($dat,$XX[0],4),$TX[0]#d
+	xorb	($in0),$TY#b
+	movb	$TY#b,($out,$in0)
+	lea	1($in0),$in0
+	dec	$TX[1]
+	jnz	.Loop${MOD}_warmup
+
+	mov	$YY,$TX[1]
+	xor	$YY,$YY
+	mov	$TX[1]#b,$YY#b
+
+.Loop${MOD}_is_hot:
+	mov	$len,32(%rsp)		# save original $len
+	shr	\$6,$len		# number of 64-byte blocks
+___
+  if ($D && !$md5) {			# stitch in dummy MD5
+    $md5=1;
+    $ctx="%r11";
+    $inp="%r15";
+    $code.=<<___;
+	mov	%rsp,$ctx
+	mov	$in0,$inp
+___
+  }
+}
+$code.=<<___;
+#rc4#	add	$TX[0]#b,$YY#b
+#rc4#	lea	($dat,$XX[0],4),$XX[1]
+	shl	\$6,$len
+	add	$inp,$len		# pointer to the end of input
+	mov	$len,16(%rsp)
+
+#md5#	mov	$ctx,24(%rsp)		# save pointer to MD5_CTX
+#md5#	mov	0*4($ctx),$V[0]		# load current hash value from MD5_CTX
+#md5#	mov	1*4($ctx),$V[1]
+#md5#	mov	2*4($ctx),$V[2]
+#md5#	mov	3*4($ctx),$V[3]
+	jmp	.Loop
+
+.align	16
+.Loop:
+#md5#	mov	$V[0],0*4(%rsp)		# put aside current hash value
+#md5#	mov	$V[1],1*4(%rsp)
+#md5#	mov	$V[2],2*4(%rsp)
+#md5#	mov	$V[3],$tmp		# forward reference
+#md5#	mov	$V[3],3*4(%rsp)
+___
+
+sub R0 {
+  my ($i,$a,$b,$c,$d)=@_;
+  my @rot0=(7,12,17,22);
+  my $j=$i%16;
+  my $k=$i%$MOD;
+  my $xmm="%xmm".($j&1);
+    $code.="	movdqu	($in0),%xmm2\n"		if ($rc4 && $j==15);
+    $code.="	add	\$$MOD,$XX[0]#b\n"	if ($rc4 && $j==15 && $k==$MOD-1);
+    $code.="	pxor	$xmm,$xmm\n"		if ($rc4 && $j<=1);
+    $code.=<<___;
+#rc4#	movl	($dat,$YY,4),$TY#d
+#md5#	xor	$c,$tmp
+#rc4#	movl	$TX[0]#d,($dat,$YY,4)
+#md5#	and	$b,$tmp
+#md5#	add	4*`$j`($inp),$a
+#rc4#	add	$TY#b,$TX[0]#b
+#rc4#	movl	`4*(($k+1)%$MOD)`(`$k==$MOD-1?"$dat,$XX[0],4":"$XX[1]"`),$TX[1]#d
+#md5#	add	\$$K[$i],$a
+#md5#	xor	$d,$tmp
+#rc4#	movz	$TX[0]#b,$TX[0]#d
+#rc4#	movl	$TY#d,4*$k($XX[1])
+#md5#	add	$tmp,$a
+#rc4#	add	$TX[1]#b,$YY#b
+#md5#	rol	\$$rot0[$j%4],$a
+#md5#	mov	`$j==15?"$b":"$c"`,$tmp		# forward reference
+#rc4#	pinsrw	\$`($j>>1)&7`,($dat,$TX[0],4),$xmm\n
+#md5#	add	$b,$a
+___
+    $code.=<<___ if ($rc4 && $j==15 && $k==$MOD-1);
+	mov	$YY,$XX[1]
+	xor	$YY,$YY				# keyword to partial register
+	mov	$XX[1]#b,$YY#b
+	lea	($dat,$XX[0],4),$XX[1]
+___
+    $code.=<<___ if ($rc4 && $j==15);
+	psllq	\$8,%xmm1
+	pxor	%xmm0,%xmm2
+	pxor	%xmm1,%xmm2
+___
+}
+sub R1 {
+  my ($i,$a,$b,$c,$d)=@_;
+  my @rot1=(5,9,14,20);
+  my $j=$i%16;
+  my $k=$i%$MOD;
+  my $xmm="%xmm".($j&1);
+    $code.="	movdqu	16($in0),%xmm3\n"	if ($rc4 && $j==15);
+    $code.="	add	\$$MOD,$XX[0]#b\n"	if ($rc4 && $j==15 && $k==$MOD-1);
+    $code.="	pxor	$xmm,$xmm\n"		if ($rc4 && $j<=1);
+    $code.=<<___;
+#rc4#	movl	($dat,$YY,4),$TY#d
+#md5#	xor	$b,$tmp
+#rc4#	movl	$TX[0]#d,($dat,$YY,4)
+#md5#	and	$d,$tmp
+#md5#	add	4*`((1+5*$j)%16)`($inp),$a
+#rc4#	add	$TY#b,$TX[0]#b
+#rc4#	movl	`4*(($k+1)%$MOD)`(`$k==$MOD-1?"$dat,$XX[0],4":"$XX[1]"`),$TX[1]#d
+#md5#	add	\$$K[$i],$a
+#md5#	xor	$c,$tmp
+#rc4#	movz	$TX[0]#b,$TX[0]#d
+#rc4#	movl	$TY#d,4*$k($XX[1])
+#md5#	add	$tmp,$a
+#rc4#	add	$TX[1]#b,$YY#b
+#md5#	rol	\$$rot1[$j%4],$a
+#md5#	mov	`$j==15?"$c":"$b"`,$tmp		# forward reference
+#rc4#	pinsrw	\$`($j>>1)&7`,($dat,$TX[0],4),$xmm\n
+#md5#	add	$b,$a
+___
+    $code.=<<___ if ($rc4 && $j==15 && $k==$MOD-1);
+	mov	$YY,$XX[1]
+	xor	$YY,$YY				# keyword to partial register
+	mov	$XX[1]#b,$YY#b
+	lea	($dat,$XX[0],4),$XX[1]
+___
+    $code.=<<___ if ($rc4 && $j==15);
+	psllq	\$8,%xmm1
+	pxor	%xmm0,%xmm3
+	pxor	%xmm1,%xmm3
+___
+}
+sub R2 {
+  my ($i,$a,$b,$c,$d)=@_;
+  my @rot2=(4,11,16,23);
+  my $j=$i%16;
+  my $k=$i%$MOD;
+  my $xmm="%xmm".($j&1);
+    $code.="	movdqu	32($in0),%xmm4\n"	if ($rc4 && $j==15);
+    $code.="	add	\$$MOD,$XX[0]#b\n"	if ($rc4 && $j==15 && $k==$MOD-1);
+    $code.="	pxor	$xmm,$xmm\n"		if ($rc4 && $j<=1);
+    $code.=<<___;
+#rc4#	movl	($dat,$YY,4),$TY#d
+#md5#	xor	$c,$tmp
+#rc4#	movl	$TX[0]#d,($dat,$YY,4)
+#md5#	xor	$b,$tmp
+#md5#	add	4*`((5+3*$j)%16)`($inp),$a
+#rc4#	add	$TY#b,$TX[0]#b
+#rc4#	movl	`4*(($k+1)%$MOD)`(`$k==$MOD-1?"$dat,$XX[0],4":"$XX[1]"`),$TX[1]#d
+#md5#	add	\$$K[$i],$a
+#rc4#	movz	$TX[0]#b,$TX[0]#d
+#md5#	add	$tmp,$a
+#rc4#	movl	$TY#d,4*$k($XX[1])
+#rc4#	add	$TX[1]#b,$YY#b
+#md5#	rol	\$$rot2[$j%4],$a
+#md5#	mov	`$j==15?"\\\$-1":"$c"`,$tmp	# forward reference
+#rc4#	pinsrw	\$`($j>>1)&7`,($dat,$TX[0],4),$xmm\n
+#md5#	add	$b,$a
+___
+    $code.=<<___ if ($rc4 && $j==15 && $k==$MOD-1);
+	mov	$YY,$XX[1]
+	xor	$YY,$YY				# keyword to partial register
+	mov	$XX[1]#b,$YY#b
+	lea	($dat,$XX[0],4),$XX[1]
+___
+    $code.=<<___ if ($rc4 && $j==15);
+	psllq	\$8,%xmm1
+	pxor	%xmm0,%xmm4
+	pxor	%xmm1,%xmm4
+___
+}
+sub R3 {
+  my ($i,$a,$b,$c,$d)=@_;
+  my @rot3=(6,10,15,21);
+  my $j=$i%16;
+  my $k=$i%$MOD;
+  my $xmm="%xmm".($j&1);
+    $code.="	movdqu	48($in0),%xmm5\n"	if ($rc4 && $j==15);
+    $code.="	add	\$$MOD,$XX[0]#b\n"	if ($rc4 && $j==15 && $k==$MOD-1);
+    $code.="	pxor	$xmm,$xmm\n"		if ($rc4 && $j<=1);
+    $code.=<<___;
+#rc4#	movl	($dat,$YY,4),$TY#d
+#md5#	xor	$d,$tmp
+#rc4#	movl	$TX[0]#d,($dat,$YY,4)
+#md5#	or	$b,$tmp
+#md5#	add	4*`((7*$j)%16)`($inp),$a
+#rc4#	add	$TY#b,$TX[0]#b
+#rc4#	movl	`4*(($k+1)%$MOD)`(`$k==$MOD-1?"$dat,$XX[0],4":"$XX[1]"`),$TX[1]#d
+#md5#	add	\$$K[$i],$a
+#rc4#	movz	$TX[0]#b,$TX[0]#d
+#md5#	xor	$c,$tmp
+#rc4#	movl	$TY#d,4*$k($XX[1])
+#md5#	add	$tmp,$a
+#rc4#	add	$TX[1]#b,$YY#b
+#md5#	rol	\$$rot3[$j%4],$a
+#md5#	mov	\$-1,$tmp			# forward reference
+#rc4#	pinsrw	\$`($j>>1)&7`,($dat,$TX[0],4),$xmm\n
+#md5#	add	$b,$a
+___
+    $code.=<<___ if ($rc4 && $j==15);
+	mov	$XX[0],$XX[1]
+	xor	$XX[0],$XX[0]			# keyword to partial register
+	mov	$XX[1]#b,$XX[0]#b
+	mov	$YY,$XX[1]
+	xor	$YY,$YY				# keyword to partial register
+	mov	$XX[1]#b,$YY#b
+	lea	($dat,$XX[0],4),$XX[1]
+	psllq	\$8,%xmm1
+	pxor	%xmm0,%xmm5
+	pxor	%xmm1,%xmm5
+___
+}
+
+my $i=0;
+for(;$i<16;$i++) { R0($i,@V); unshift(@V,pop(@V)); push(@TX,shift(@TX)); }
+for(;$i<32;$i++) { R1($i,@V); unshift(@V,pop(@V)); push(@TX,shift(@TX)); }
+for(;$i<48;$i++) { R2($i,@V); unshift(@V,pop(@V)); push(@TX,shift(@TX)); }
+for(;$i<64;$i++) { R3($i,@V); unshift(@V,pop(@V)); push(@TX,shift(@TX)); }
+
+$code.=<<___;
+#md5#	add	0*4(%rsp),$V[0]		# accumulate hash value
+#md5#	add	1*4(%rsp),$V[1]
+#md5#	add	2*4(%rsp),$V[2]
+#md5#	add	3*4(%rsp),$V[3]
+
+#rc4#	movdqu	%xmm2,($out,$in0)	# write RC4 output
+#rc4#	movdqu	%xmm3,16($out,$in0)
+#rc4#	movdqu	%xmm4,32($out,$in0)
+#rc4#	movdqu	%xmm5,48($out,$in0)
+#md5#	lea	64($inp),$inp
+#rc4#	lea	64($in0),$in0
+	cmp	16(%rsp),$inp		# are we done?
+	jb	.Loop
+
+#md5#	mov	24(%rsp),$len		# restore pointer to MD5_CTX
+#rc4#	sub	$TX[0]#b,$YY#b		# correct $YY
+#md5#	mov	$V[0],0*4($len)		# write MD5_CTX
+#md5#	mov	$V[1],1*4($len)
+#md5#	mov	$V[2],2*4($len)
+#md5#	mov	$V[3],3*4($len)
+___
+$code.=<<___ if ($rc4 && (!$md5 || $D));
+	mov	32(%rsp),$len		# restore original $len
+	and	\$63,$len		# remaining bytes
+	jnz	.Loop1
+	jmp	.Ldone
+
+.align	16
+.Loop1:
+	add	$TX[0]#b,$YY#b
+	movl	($dat,$YY,4),$TY#d
+	movl	$TX[0]#d,($dat,$YY,4)
+	movl	$TY#d,($dat,$XX[0],4)
+	add	$TY#b,$TX[0]#b
+	inc	$XX[0]#b
+	movl	($dat,$TX[0],4),$TY#d
+	movl	($dat,$XX[0],4),$TX[0]#d
+	xorb	($in0),$TY#b
+	movb	$TY#b,($out,$in0)
+	lea	1($in0),$in0
+	dec	$len
+	jnz	.Loop1
+
+.Ldone:
+___
+$code.=<<___;
+#rc4#	sub	\$1,$XX[0]#b
+#rc4#	movl	$XX[0]#d,-8($dat)
+#rc4#	movl	$YY#d,-4($dat)
+
+	mov	40(%rsp),%r15
+.cfi_restore	%r15
+	mov	48(%rsp),%r14
+.cfi_restore	%r14
+	mov	56(%rsp),%r13
+.cfi_restore	%r13
+	mov	64(%rsp),%r12
+.cfi_restore	%r12
+	mov	72(%rsp),%rbp
+.cfi_restore	%rbp
+	mov	80(%rsp),%rbx
+.cfi_restore	%rbx
+	lea	88(%rsp),%rsp
+.cfi_adjust_cfa_offset	-88
+.Lepilogue:
+.Labort:
+	ret
+.cfi_endproc
+.size $func,.-$func
+___
+
+if ($rc4 && $D) {	# sole purpose of this section is to provide
+			# option to use the generated module as drop-in
+			# replacement for rc4-x86_64.pl for debugging
+			# and testing purposes...
+my ($idx,$ido)=("%r8","%r9");
+my ($dat,$len,$inp)=("%rdi","%rsi","%rdx");
+
+$code.=<<___;
+.globl	RC4_set_key
+.type	RC4_set_key,\@function,3
+.align	16
+RC4_set_key:
+	lea	8($dat),$dat
+	lea	($inp,$len),$inp
+	neg	$len
+	mov	$len,%rcx
+	xor	%eax,%eax
+	xor	$ido,$ido
+	xor	%r10,%r10
+	xor	%r11,%r11
+	jmp	.Lw1stloop
+
+.align	16
+.Lw1stloop:
+	mov	%eax,($dat,%rax,4)
+	add	\$1,%al
+	jnc	.Lw1stloop
+
+	xor	$ido,$ido
+	xor	$idx,$idx
+.align	16
+.Lw2ndloop:
+	mov	($dat,$ido,4),%r10d
+	add	($inp,$len,1),$idx#b
+	add	%r10b,$idx#b
+	add	\$1,$len
+	mov	($dat,$idx,4),%r11d
+	cmovz	%rcx,$len
+	mov	%r10d,($dat,$idx,4)
+	mov	%r11d,($dat,$ido,4)
+	add	\$1,$ido#b
+	jnc	.Lw2ndloop
+
+	xor	%eax,%eax
+	mov	%eax,-8($dat)
+	mov	%eax,-4($dat)
+	ret
+.size	RC4_set_key,.-RC4_set_key
+
+.globl	RC4_options
+.type	RC4_options,\@abi-omnipotent
+.align	16
+RC4_options:
+	lea	.Lopts(%rip),%rax
+	ret
+.align	64
+.Lopts:
+.asciz	"rc4(64x,int)"
+.align	64
+.size	RC4_options,.-RC4_options
+___
+}
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+my $rec="%rcx";
+my $frame="%rdx";
+my $context="%r8";
+my $disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	se_handler,\@abi-omnipotent
+.align	16
+se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	lea	.Lbody(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<.Lbody
+	jb	.Lin_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	lea	.Lepilogue(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip>=.Lepilogue
+	jae	.Lin_prologue
+
+	mov	40(%rax),%r15
+	mov	48(%rax),%r14
+	mov	56(%rax),%r13
+	mov	64(%rax),%r12
+	mov	72(%rax),%rbp
+	mov	80(%rax),%rbx
+	lea	88(%rax),%rax
+
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R12
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+.Lin_prologue:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	se_handler,.-se_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_$func
+	.rva	.LSEH_end_$func
+	.rva	.LSEH_info_$func
+
+.section	.xdata
+.align	8
+.LSEH_info_$func:
+	.byte	9,0,0,0
+	.rva	se_handler
+___
+}
+
+sub reg_part {
+my ($reg,$conv)=@_;
+    if ($reg =~ /%r[0-9]+/)     { $reg .= $conv; }
+    elsif ($conv eq "b")        { $reg =~ s/%[er]([^x]+)x?/%$1l/;       }
+    elsif ($conv eq "w")        { $reg =~ s/%[er](.+)/%$1/;             }
+    elsif ($conv eq "d")        { $reg =~ s/%[er](.+)/%e$1/;            }
+    return $reg;
+}
+
+$code =~ s/(%[a-z0-9]+)#([bwd])/reg_part($1,$2)/gem;
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+$code =~ s/pinsrw\s+\$0,/movd	/gm;
+
+$code =~ s/#md5#//gm	if ($md5);
+$code =~ s/#rc4#//gm	if ($rc4);
+
+print $code;
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-parisc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-parisc.pl
new file mode 100644
index 000000000..4111f339d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-parisc.pl
@@ -0,0 +1,333 @@
+#! /usr/bin/env perl
+# Copyright 2009-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# RC4 for PA-RISC.
+
+# June 2009.
+#
+# Performance is 33% better than gcc 3.2 generated code on PA-7100LC.
+# For reference, [4x] unrolled loop is >40% faster than folded one.
+# It's possible to unroll loop 8 times on PA-RISC 2.0, but improvement
+# is believed to be not sufficient to justify the effort...
+#
+# Special thanks to polarhome.com for providing HP-UX account.
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+
+$flavour = shift;
+$output = shift;
+open STDOUT,">$output";
+
+if ($flavour =~ /64/) {
+	$LEVEL		="2.0W";
+	$SIZE_T		=8;
+	$FRAME_MARKER	=80;
+	$SAVED_RP	=16;
+	$PUSH		="std";
+	$PUSHMA		="std,ma";
+	$POP		="ldd";
+	$POPMB		="ldd,mb";
+} else {
+	$LEVEL		="1.0";
+	$SIZE_T		=4;
+	$FRAME_MARKER	=48;
+	$SAVED_RP	=20;
+	$PUSH		="stw";
+	$PUSHMA		="stwm";
+	$POP		="ldw";
+	$POPMB		="ldwm";
+}
+
+$FRAME=4*$SIZE_T+$FRAME_MARKER;	# 4 saved regs + frame marker
+				#                [+ argument transfer]
+$SZ=1;				# defaults to RC4_CHAR
+if (open CONF,"<${dir}../../opensslconf.h") {
+    while(<CONF>) {
+	if (m/#\s*define\s+RC4_INT\s+(.*)/) {
+	    $SZ = ($1=~/char$/) ? 1 : 4;
+	    last;
+	}
+    }
+    close CONF;
+}
+
+if ($SZ==1) {	# RC4_CHAR
+    $LD="ldb";
+    $LDX="ldbx";
+    $MKX="addl";
+    $ST="stb";
+} else {	# RC4_INT (~5% faster than RC4_CHAR on PA-7100LC)
+    $LD="ldw";
+    $LDX="ldwx,s";
+    $MKX="sh2addl";
+    $ST="stw";
+}
+
+$key="%r26";
+$len="%r25";
+$inp="%r24";
+$out="%r23";
+
+@XX=("%r19","%r20");
+@TX=("%r21","%r22");
+$YY="%r28";
+$TY="%r29";
+
+$acc="%r1";
+$ix="%r2";
+$iy="%r3";
+$dat0="%r4";
+$dat1="%r5";
+$rem="%r6";
+$mask="%r31";
+
+sub unrolledloopbody {
+for ($i=0;$i<4;$i++) {
+$code.=<<___;
+	ldo	1($XX[0]),$XX[1]
+	`sprintf("$LDX	%$TY(%$key),%$dat1") if ($i>0)`
+	and	$mask,$XX[1],$XX[1]
+	$LDX	$YY($key),$TY
+	$MKX	$YY,$key,$ix
+	$LDX	$XX[1]($key),$TX[1]
+	$MKX	$XX[0],$key,$iy
+	$ST	$TX[0],0($ix)
+	comclr,<> $XX[1],$YY,%r0	; conditional
+	copy	$TX[0],$TX[1]		; move
+	`sprintf("%sdep	%$dat1,%d,8,%$acc",$i==1?"z":"",8*($i-1)+7) if ($i>0)`
+	$ST	$TY,0($iy)
+	addl	$TX[0],$TY,$TY
+	addl	$TX[1],$YY,$YY
+	and	$mask,$TY,$TY
+	and	$mask,$YY,$YY
+___
+push(@TX,shift(@TX)); push(@XX,shift(@XX));	# "rotate" registers
+} }
+
+sub foldedloop {
+my ($label,$count)=@_;
+$code.=<<___;
+$label
+	$MKX	$YY,$key,$iy
+	$LDX	$YY($key),$TY
+	$MKX	$XX[0],$key,$ix
+	$ST	$TX[0],0($iy)
+	ldo	1($XX[0]),$XX[0]
+	$ST	$TY,0($ix)
+	addl	$TX[0],$TY,$TY
+	ldbx	$inp($out),$dat1
+	and	$mask,$TY,$TY
+	and	$mask,$XX[0],$XX[0]
+	$LDX	$TY($key),$acc
+	$LDX	$XX[0]($key),$TX[0]
+	ldo	1($out),$out
+	xor	$dat1,$acc,$acc
+	addl	$TX[0],$YY,$YY
+	stb	$acc,-1($out)
+	addib,<> -1,$count,$label	; $count is always small
+	and	$mask,$YY,$YY
+___
+}
+
+$code=<<___;
+	.LEVEL	$LEVEL
+	.SPACE	\$TEXT\$
+	.SUBSPA	\$CODE\$,QUAD=0,ALIGN=8,ACCESS=0x2C,CODE_ONLY
+
+	.EXPORT	RC4,ENTRY,ARGW0=GR,ARGW1=GR,ARGW2=GR,ARGW3=GR
+RC4
+	.PROC
+	.CALLINFO	FRAME=`$FRAME-4*$SIZE_T`,NO_CALLS,SAVE_RP,ENTRY_GR=6
+	.ENTRY
+	$PUSH	%r2,-$SAVED_RP(%sp)	; standard prologue
+	$PUSHMA	%r3,$FRAME(%sp)
+	$PUSH	%r4,`-$FRAME+1*$SIZE_T`(%sp)
+	$PUSH	%r5,`-$FRAME+2*$SIZE_T`(%sp)
+	$PUSH	%r6,`-$FRAME+3*$SIZE_T`(%sp)
+
+	cmpib,*= 0,$len,L\$abort
+	sub	$inp,$out,$inp		; distance between $inp and $out
+
+	$LD	`0*$SZ`($key),$XX[0]
+	$LD	`1*$SZ`($key),$YY
+	ldo	`2*$SZ`($key),$key
+
+	ldi	0xff,$mask
+	ldi	3,$dat0
+
+	ldo	1($XX[0]),$XX[0]	; warm up loop
+	and	$mask,$XX[0],$XX[0]
+	$LDX	$XX[0]($key),$TX[0]
+	addl	$TX[0],$YY,$YY
+	cmpib,*>>= 6,$len,L\$oop1	; is $len large enough to bother?
+	and	$mask,$YY,$YY
+
+	and,<>	$out,$dat0,$rem		; is $out aligned?
+	b	L\$alignedout
+	subi	4,$rem,$rem
+	sub	$len,$rem,$len
+___
+&foldedloop("L\$alignout",$rem);	# process till $out is aligned
+
+$code.=<<___;
+L\$alignedout				; $len is at least 4 here
+	and,<>	$inp,$dat0,$acc		; is $inp aligned?
+	b	L\$oop4
+	sub	$inp,$acc,$rem		; align $inp
+
+	sh3addl	$acc,%r0,$acc
+	subi	32,$acc,$acc
+	mtctl	$acc,%cr11		; load %sar with vshd align factor
+	ldwx	$rem($out),$dat0
+	ldo	4($rem),$rem
+L\$oop4misalignedinp
+___
+&unrolledloopbody();
+$code.=<<___;
+	$LDX	$TY($key),$ix
+	ldwx	$rem($out),$dat1
+	ldo	-4($len),$len
+	or	$ix,$acc,$acc		; last piece, no need to dep
+	vshd	$dat0,$dat1,$iy		; align data
+	copy	$dat1,$dat0
+	xor	$iy,$acc,$acc
+	stw	$acc,0($out)
+	cmpib,*<< 3,$len,L\$oop4misalignedinp
+	ldo	4($out),$out
+	cmpib,*= 0,$len,L\$done
+	nop
+	b	L\$oop1
+	nop
+
+	.ALIGN	8
+L\$oop4
+___
+&unrolledloopbody();
+$code.=<<___;
+	$LDX	$TY($key),$ix
+	ldwx	$inp($out),$dat0
+	ldo	-4($len),$len
+	or	$ix,$acc,$acc		; last piece, no need to dep
+	xor	$dat0,$acc,$acc
+	stw	$acc,0($out)
+	cmpib,*<< 3,$len,L\$oop4
+	ldo	4($out),$out
+	cmpib,*= 0,$len,L\$done
+	nop
+___
+&foldedloop("L\$oop1",$len);
+$code.=<<___;
+L\$done
+	$POP	`-$FRAME-$SAVED_RP`(%sp),%r2
+	ldo	-1($XX[0]),$XX[0]	; chill out loop
+	sub	$YY,$TX[0],$YY
+	and	$mask,$XX[0],$XX[0]
+	and	$mask,$YY,$YY
+	$ST	$XX[0],`-2*$SZ`($key)
+	$ST	$YY,`-1*$SZ`($key)
+	$POP	`-$FRAME+1*$SIZE_T`(%sp),%r4
+	$POP	`-$FRAME+2*$SIZE_T`(%sp),%r5
+	$POP	`-$FRAME+3*$SIZE_T`(%sp),%r6
+L\$abort
+	bv	(%r2)
+	.EXIT
+	$POPMB	-$FRAME(%sp),%r3
+	.PROCEND
+___
+
+$code.=<<___;
+
+	.EXPORT	RC4_set_key,ENTRY,ARGW0=GR,ARGW1=GR,ARGW2=GR
+	.ALIGN	8
+RC4_set_key
+	.PROC
+	.CALLINFO	NO_CALLS
+	.ENTRY
+	$ST	%r0,`0*$SZ`($key)
+	$ST	%r0,`1*$SZ`($key)
+	ldo	`2*$SZ`($key),$key
+	copy	%r0,@XX[0]
+L\$1st
+	$ST	@XX[0],0($key)
+	ldo	1(@XX[0]),@XX[0]
+	bb,>=	@XX[0],`31-8`,L\$1st	; @XX[0]<256
+	ldo	$SZ($key),$key
+
+	ldo	`-256*$SZ`($key),$key	; rewind $key
+	addl	$len,$inp,$inp		; $inp to point at the end
+	sub	%r0,$len,%r23		; inverse index
+	copy	%r0,@XX[0]
+	copy	%r0,@XX[1]
+	ldi	0xff,$mask
+
+L\$2nd
+	$LDX	@XX[0]($key),@TX[0]
+	ldbx	%r23($inp),@TX[1]
+	addi,nuv 1,%r23,%r23		; increment and conditional
+	sub	%r0,$len,%r23		; inverse index
+	addl	@TX[0],@XX[1],@XX[1]
+	addl	@TX[1],@XX[1],@XX[1]
+	and	$mask,@XX[1],@XX[1]
+	$MKX	@XX[0],$key,$TY
+	$LDX	@XX[1]($key),@TX[1]
+	$MKX	@XX[1],$key,$YY
+	ldo	1(@XX[0]),@XX[0]
+	$ST	@TX[0],0($YY)
+	bb,>=	@XX[0],`31-8`,L\$2nd	; @XX[0]<256
+	$ST	@TX[1],0($TY)
+
+	bv,n	(%r2)
+	.EXIT
+	nop
+	.PROCEND
+
+	.EXPORT	RC4_options,ENTRY
+	.ALIGN	8
+RC4_options
+	.PROC
+	.CALLINFO	NO_CALLS
+	.ENTRY
+	blr	%r0,%r28
+	ldi	3,%r1
+L\$pic
+	andcm	%r28,%r1,%r28
+	bv	(%r2)
+	.EXIT
+	ldo	L\$opts-L\$pic(%r28),%r28
+	.PROCEND
+	.ALIGN	8
+L\$opts
+	.STRINGZ "rc4(4x,`$SZ==1?"char":"int"`)"
+	.STRINGZ "RC4 for PA-RISC, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+	=~ /GNU assembler/) {
+    $gnuas = 1;
+}
+
+foreach(split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	s/(\.LEVEL\s+2\.0)W/$1w/	if ($gnuas && $SIZE_T==8);
+	s/\.SPACE\s+\$TEXT\$/.text/	if ($gnuas && $SIZE_T==8);
+	s/\.SUBSPA.*//			if ($gnuas && $SIZE_T==8);
+	s/cmpib,\*/comib,/		if ($SIZE_T==4);
+	s/\bbv\b/bve/			if ($SIZE_T==8);
+
+	print $_,"\n";
+}
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-s390x.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-s390x.pl
new file mode 100644
index 000000000..469f110fa
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-s390x.pl
@@ -0,0 +1,241 @@
+#! /usr/bin/env perl
+# Copyright 2009-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# February 2009
+#
+# Performance is 2x of gcc 3.4.6 on z10. Coding "secret" is to
+# "cluster" Address Generation Interlocks, so that one pipeline stall
+# resolves several dependencies.
+
+# November 2010.
+#
+# Adapt for -m31 build. If kernel supports what's called "highgprs"
+# feature on Linux [see /proc/cpuinfo], it's possible to use 64-bit
+# instructions and achieve "64-bit" performance even in 31-bit legacy
+# application context. The feature is not specific to any particular
+# processor, as long as it's "z-CPU". Latter implies that the code
+# remains z/Architecture specific. On z990 it was measured to perform
+# 50% better than code generated by gcc 4.3.
+
+$flavour = shift;
+
+if ($flavour =~ /3[12]/) {
+	$SIZE_T=4;
+	$g="";
+} else {
+	$SIZE_T=8;
+	$g="g";
+}
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+$rp="%r14";
+$sp="%r15";
+$code=<<___;
+.text
+
+___
+
+# void RC4(RC4_KEY *key,size_t len,const void *inp,void *out)
+{
+$acc="%r0";
+$cnt="%r1";
+$key="%r2";
+$len="%r3";
+$inp="%r4";
+$out="%r5";
+
+@XX=("%r6","%r7");
+@TX=("%r8","%r9");
+$YY="%r10";
+$TY="%r11";
+
+$code.=<<___;
+.globl	RC4
+.type	RC4,\@function
+.align	64
+RC4:
+	stm${g}	%r6,%r11,6*$SIZE_T($sp)
+___
+$code.=<<___ if ($flavour =~ /3[12]/);
+	llgfr	$len,$len
+___
+$code.=<<___;
+	llgc	$XX[0],0($key)
+	llgc	$YY,1($key)
+	la	$XX[0],1($XX[0])
+	nill	$XX[0],0xff
+	srlg	$cnt,$len,3
+	ltgr	$cnt,$cnt
+	llgc	$TX[0],2($XX[0],$key)
+	jz	.Lshort
+	j	.Loop8
+
+.align	64
+.Loop8:
+___
+for ($i=0;$i<8;$i++) {
+$code.=<<___;
+	la	$YY,0($YY,$TX[0])	# $i
+	nill	$YY,255
+	la	$XX[1],1($XX[0])
+	nill	$XX[1],255
+___
+$code.=<<___ if ($i==1);
+	llgc	$acc,2($TY,$key)
+___
+$code.=<<___ if ($i>1);
+	sllg	$acc,$acc,8
+	ic	$acc,2($TY,$key)
+___
+$code.=<<___;
+	llgc	$TY,2($YY,$key)
+	stc	$TX[0],2($YY,$key)
+	llgc	$TX[1],2($XX[1],$key)
+	stc	$TY,2($XX[0],$key)
+	cr	$XX[1],$YY
+	jne	.Lcmov$i
+	la	$TX[1],0($TX[0])
+.Lcmov$i:
+	la	$TY,0($TY,$TX[0])
+	nill	$TY,255
+___
+push(@TX,shift(@TX)); push(@XX,shift(@XX));     # "rotate" registers
+}
+
+$code.=<<___;
+	lg	$TX[1],0($inp)
+	sllg	$acc,$acc,8
+	la	$inp,8($inp)
+	ic	$acc,2($TY,$key)
+	xgr	$acc,$TX[1]
+	stg	$acc,0($out)
+	la	$out,8($out)
+	brctg	$cnt,.Loop8
+
+.Lshort:
+	lghi	$acc,7
+	ngr	$len,$acc
+	jz	.Lexit
+	j	.Loop1
+
+.align	16
+.Loop1:
+	la	$YY,0($YY,$TX[0])
+	nill	$YY,255
+	llgc	$TY,2($YY,$key)
+	stc	$TX[0],2($YY,$key)
+	stc	$TY,2($XX[0],$key)
+	ar	$TY,$TX[0]
+	ahi	$XX[0],1
+	nill	$TY,255
+	nill	$XX[0],255
+	llgc	$acc,0($inp)
+	la	$inp,1($inp)
+	llgc	$TY,2($TY,$key)
+	llgc	$TX[0],2($XX[0],$key)
+	xr	$acc,$TY
+	stc	$acc,0($out)
+	la	$out,1($out)
+	brct	$len,.Loop1
+
+.Lexit:
+	ahi	$XX[0],-1
+	stc	$XX[0],0($key)
+	stc	$YY,1($key)
+	lm${g}	%r6,%r11,6*$SIZE_T($sp)
+	br	$rp
+.size	RC4,.-RC4
+.string	"RC4 for s390x, CRYPTOGAMS by <appro\@openssl.org>"
+
+___
+}
+
+# void RC4_set_key(RC4_KEY *key,unsigned int len,const void *inp)
+{
+$cnt="%r0";
+$idx="%r1";
+$key="%r2";
+$len="%r3";
+$inp="%r4";
+$acc="%r5";
+$dat="%r6";
+$ikey="%r7";
+$iinp="%r8";
+
+$code.=<<___;
+.globl	RC4_set_key
+.type	RC4_set_key,\@function
+.align	64
+RC4_set_key:
+	stm${g}	%r6,%r8,6*$SIZE_T($sp)
+	lhi	$cnt,256
+	la	$idx,0(%r0)
+	sth	$idx,0($key)
+.align	4
+.L1stloop:
+	stc	$idx,2($idx,$key)
+	la	$idx,1($idx)
+	brct	$cnt,.L1stloop
+
+	lghi	$ikey,-256
+	lr	$cnt,$len
+	la	$iinp,0(%r0)
+	la	$idx,0(%r0)
+.align	16
+.L2ndloop:
+	llgc	$acc,2+256($ikey,$key)
+	llgc	$dat,0($iinp,$inp)
+	la	$idx,0($idx,$acc)
+	la	$ikey,1($ikey)
+	la	$idx,0($idx,$dat)
+	nill	$idx,255
+	la	$iinp,1($iinp)
+	tml	$ikey,255
+	llgc	$dat,2($idx,$key)
+	stc	$dat,2+256-1($ikey,$key)
+	stc	$acc,2($idx,$key)
+	jz	.Ldone
+	brct	$cnt,.L2ndloop
+	lr	$cnt,$len
+	la	$iinp,0(%r0)
+	j	.L2ndloop
+.Ldone:
+	lm${g}	%r6,%r8,6*$SIZE_T($sp)
+	br	$rp
+.size	RC4_set_key,.-RC4_set_key
+
+___
+}
+
+# const char *RC4_options()
+$code.=<<___;
+.globl	RC4_options
+.type	RC4_options,\@function
+.align	16
+RC4_options:
+	larl	%r2,.Loptions
+	br	%r14
+.size	RC4_options,.-RC4_options
+.section	.rodata
+.Loptions:
+.align	8
+.string	"rc4(8x,char)"
+___
+
+print $code;
+close STDOUT;	# force flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-x86_64.pl
new file mode 100755
index 000000000..1a9cc47d7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/asm/rc4-x86_64.pl
@@ -0,0 +1,696 @@
+#! /usr/bin/env perl
+# Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# July 2004
+#
+# 2.22x RC4 tune-up:-) It should be noted though that my hand [as in
+# "hand-coded assembler"] doesn't stand for the whole improvement
+# coefficient. It turned out that eliminating RC4_CHAR from config
+# line results in ~40% improvement (yes, even for C implementation).
+# Presumably it has everything to do with AMD cache architecture and
+# RAW or whatever penalties. Once again! The module *requires* config
+# line *without* RC4_CHAR! As for coding "secret," I bet on partial
+# register arithmetics. For example instead of 'inc %r8; and $255,%r8'
+# I simply 'inc %r8b'. Even though optimization manual discourages
+# to operate on partial registers, it turned out to be the best bet.
+# At least for AMD... How IA32E would perform remains to be seen...
+
+# November 2004
+#
+# As was shown by Marc Bevand reordering of couple of load operations
+# results in even higher performance gain of 3.3x:-) At least on
+# Opteron... For reference, 1x in this case is RC4_CHAR C-code
+# compiled with gcc 3.3.2, which performs at ~54MBps per 1GHz clock.
+# Latter means that if you want to *estimate* what to expect from
+# *your* Opteron, then multiply 54 by 3.3 and clock frequency in GHz.
+
+# November 2004
+#
+# Intel P4 EM64T core was found to run the AMD64 code really slow...
+# The only way to achieve comparable performance on P4 was to keep
+# RC4_CHAR. Kind of ironic, huh? As it's apparently impossible to
+# compose blended code, which would perform even within 30% marginal
+# on either AMD and Intel platforms, I implement both cases. See
+# rc4_skey.c for further details...
+
+# April 2005
+#
+# P4 EM64T core appears to be "allergic" to 64-bit inc/dec. Replacing
+# those with add/sub results in 50% performance improvement of folded
+# loop...
+
+# May 2005
+#
+# As was shown by Zou Nanhai loop unrolling can improve Intel EM64T
+# performance by >30% [unlike P4 32-bit case that is]. But this is
+# provided that loads are reordered even more aggressively! Both code
+# paths, AMD64 and EM64T, reorder loads in essentially same manner
+# as my IA-64 implementation. On Opteron this resulted in modest 5%
+# improvement [I had to test it], while final Intel P4 performance
+# achieves respectful 432MBps on 2.8GHz processor now. For reference.
+# If executed on Xeon, current RC4_CHAR code-path is 2.7x faster than
+# RC4_INT code-path. While if executed on Opteron, it's only 25%
+# slower than the RC4_INT one [meaning that if CPU µ-arch detection
+# is not implemented, then this final RC4_CHAR code-path should be
+# preferred, as it provides better *all-round* performance].
+
+# March 2007
+#
+# Intel Core2 was observed to perform poorly on both code paths:-( It
+# apparently suffers from some kind of partial register stall, which
+# occurs in 64-bit mode only [as virtually identical 32-bit loop was
+# observed to outperform 64-bit one by almost 50%]. Adding two movzb to
+# cloop1 boosts its performance by 80%! This loop appears to be optimal
+# fit for Core2 and therefore the code was modified to skip cloop8 on
+# this CPU.
+
+# May 2010
+#
+# Intel Westmere was observed to perform suboptimally. Adding yet
+# another movzb to cloop1 improved performance by almost 50%! Core2
+# performance is improved too, but nominally...
+
+# May 2011
+#
+# The only code path that was not modified is P4-specific one. Non-P4
+# Intel code path optimization is heavily based on submission by Maxim
+# Perminov, Maxim Locktyukhin and Jim Guilford of Intel. I've used
+# some of the ideas even in attempt to optimize the original RC4_INT
+# code path... Current performance in cycles per processed byte (less
+# is better) and improvement coefficients relative to previous
+# version of this module are:
+#
+# Opteron	5.3/+0%(*)
+# P4		6.5
+# Core2		6.2/+15%(**)
+# Westmere	4.2/+60%
+# Sandy Bridge	4.2/+120%
+# Atom		9.3/+80%
+# VIA Nano	6.4/+4%
+# Ivy Bridge	4.1/+30%
+# Bulldozer	4.5/+30%(*)
+#
+# (*)	But corresponding loop has less instructions, which should have
+#	positive effect on upcoming Bulldozer, which has one less ALU.
+#	For reference, Intel code runs at 6.8 cpb rate on Opteron.
+# (**)	Note that Core2 result is ~15% lower than corresponding result
+#	for 32-bit code, meaning that it's possible to improve it,
+#	but more than likely at the cost of the others (see rc4-586.pl
+#	to get the idea)...
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+$dat="%rdi";	    # arg1
+$len="%rsi";	    # arg2
+$inp="%rdx";	    # arg3
+$out="%rcx";	    # arg4
+
+{
+$code=<<___;
+.text
+.extern	OPENSSL_ia32cap_P
+
+.globl	RC4
+.type	RC4,\@function,4
+.align	16
+RC4:	or	$len,$len
+	jne	.Lentry
+	ret
+.Lentry:
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+.Lprologue:
+	mov	$len,%r11
+	mov	$inp,%r12
+	mov	$out,%r13
+___
+my $len="%r11";		# reassign input arguments
+my $inp="%r12";
+my $out="%r13";
+
+my @XX=("%r10","%rsi");
+my @TX=("%rax","%rbx");
+my $YY="%rcx";
+my $TY="%rdx";
+
+$code.=<<___;
+	xor	$XX[0],$XX[0]
+	xor	$YY,$YY
+
+	lea	8($dat),$dat
+	mov	-8($dat),$XX[0]#b
+	mov	-4($dat),$YY#b
+	cmpl	\$-1,256($dat)
+	je	.LRC4_CHAR
+	mov	OPENSSL_ia32cap_P(%rip),%r8d
+	xor	$TX[1],$TX[1]
+	inc	$XX[0]#b
+	sub	$XX[0],$TX[1]
+	sub	$inp,$out
+	movl	($dat,$XX[0],4),$TX[0]#d
+	test	\$-16,$len
+	jz	.Lloop1
+	bt	\$30,%r8d	# Intel CPU?
+	jc	.Lintel
+	and	\$7,$TX[1]
+	lea	1($XX[0]),$XX[1]
+	jz	.Loop8
+	sub	$TX[1],$len
+.Loop8_warmup:
+	add	$TX[0]#b,$YY#b
+	movl	($dat,$YY,4),$TY#d
+	movl	$TX[0]#d,($dat,$YY,4)
+	movl	$TY#d,($dat,$XX[0],4)
+	add	$TY#b,$TX[0]#b
+	inc	$XX[0]#b
+	movl	($dat,$TX[0],4),$TY#d
+	movl	($dat,$XX[0],4),$TX[0]#d
+	xorb	($inp),$TY#b
+	movb	$TY#b,($out,$inp)
+	lea	1($inp),$inp
+	dec	$TX[1]
+	jnz	.Loop8_warmup
+
+	lea	1($XX[0]),$XX[1]
+	jmp	.Loop8
+.align	16
+.Loop8:
+___
+for ($i=0;$i<8;$i++) {
+$code.=<<___ if ($i==7);
+	add	\$8,$XX[1]#b
+___
+$code.=<<___;
+	add	$TX[0]#b,$YY#b
+	movl	($dat,$YY,4),$TY#d
+	movl	$TX[0]#d,($dat,$YY,4)
+	movl	`4*($i==7?-1:$i)`($dat,$XX[1],4),$TX[1]#d
+	ror	\$8,%r8				# ror is redundant when $i=0
+	movl	$TY#d,4*$i($dat,$XX[0],4)
+	add	$TX[0]#b,$TY#b
+	movb	($dat,$TY,4),%r8b
+___
+push(@TX,shift(@TX)); #push(@XX,shift(@XX));	# "rotate" registers
+}
+$code.=<<___;
+	add	\$8,$XX[0]#b
+	ror	\$8,%r8
+	sub	\$8,$len
+
+	xor	($inp),%r8
+	mov	%r8,($out,$inp)
+	lea	8($inp),$inp
+
+	test	\$-8,$len
+	jnz	.Loop8
+	cmp	\$0,$len
+	jne	.Lloop1
+	jmp	.Lexit
+
+.align	16
+.Lintel:
+	test	\$-32,$len
+	jz	.Lloop1
+	and	\$15,$TX[1]
+	jz	.Loop16_is_hot
+	sub	$TX[1],$len
+.Loop16_warmup:
+	add	$TX[0]#b,$YY#b
+	movl	($dat,$YY,4),$TY#d
+	movl	$TX[0]#d,($dat,$YY,4)
+	movl	$TY#d,($dat,$XX[0],4)
+	add	$TY#b,$TX[0]#b
+	inc	$XX[0]#b
+	movl	($dat,$TX[0],4),$TY#d
+	movl	($dat,$XX[0],4),$TX[0]#d
+	xorb	($inp),$TY#b
+	movb	$TY#b,($out,$inp)
+	lea	1($inp),$inp
+	dec	$TX[1]
+	jnz	.Loop16_warmup
+
+	mov	$YY,$TX[1]
+	xor	$YY,$YY
+	mov	$TX[1]#b,$YY#b
+
+.Loop16_is_hot:
+	lea	($dat,$XX[0],4),$XX[1]
+___
+sub RC4_loop {
+  my $i=shift;
+  my $j=$i<0?0:$i;
+  my $xmm="%xmm".($j&1);
+
+    $code.="	add	\$16,$XX[0]#b\n"		if ($i==15);
+    $code.="	movdqu	($inp),%xmm2\n"			if ($i==15);
+    $code.="	add	$TX[0]#b,$YY#b\n"		if ($i<=0);
+    $code.="	movl	($dat,$YY,4),$TY#d\n";
+    $code.="	pxor	%xmm0,%xmm2\n"			if ($i==0);
+    $code.="	psllq	\$8,%xmm1\n"			if ($i==0);
+    $code.="	pxor	$xmm,$xmm\n"			if ($i<=1);
+    $code.="	movl	$TX[0]#d,($dat,$YY,4)\n";
+    $code.="	add	$TY#b,$TX[0]#b\n";
+    $code.="	movl	`4*($j+1)`($XX[1]),$TX[1]#d\n"	if ($i<15);
+    $code.="	movz	$TX[0]#b,$TX[0]#d\n";
+    $code.="	movl	$TY#d,4*$j($XX[1])\n";
+    $code.="	pxor	%xmm1,%xmm2\n"			if ($i==0);
+    $code.="	lea	($dat,$XX[0],4),$XX[1]\n"	if ($i==15);
+    $code.="	add	$TX[1]#b,$YY#b\n"		if ($i<15);
+    $code.="	pinsrw	\$`($j>>1)&7`,($dat,$TX[0],4),$xmm\n";
+    $code.="	movdqu	%xmm2,($out,$inp)\n"		if ($i==0);
+    $code.="	lea	16($inp),$inp\n"		if ($i==0);
+    $code.="	movl	($XX[1]),$TX[1]#d\n"		if ($i==15);
+}
+	RC4_loop(-1);
+$code.=<<___;
+	jmp	.Loop16_enter
+.align	16
+.Loop16:
+___
+
+for ($i=0;$i<16;$i++) {
+    $code.=".Loop16_enter:\n"		if ($i==1);
+	RC4_loop($i);
+	push(@TX,shift(@TX)); 		# "rotate" registers
+}
+$code.=<<___;
+	mov	$YY,$TX[1]
+	xor	$YY,$YY			# keyword to partial register
+	sub	\$16,$len
+	mov	$TX[1]#b,$YY#b
+	test	\$-16,$len
+	jnz	.Loop16
+
+	psllq	\$8,%xmm1
+	pxor	%xmm0,%xmm2
+	pxor	%xmm1,%xmm2
+	movdqu	%xmm2,($out,$inp)
+	lea	16($inp),$inp
+
+	cmp	\$0,$len
+	jne	.Lloop1
+	jmp	.Lexit
+
+.align	16
+.Lloop1:
+	add	$TX[0]#b,$YY#b
+	movl	($dat,$YY,4),$TY#d
+	movl	$TX[0]#d,($dat,$YY,4)
+	movl	$TY#d,($dat,$XX[0],4)
+	add	$TY#b,$TX[0]#b
+	inc	$XX[0]#b
+	movl	($dat,$TX[0],4),$TY#d
+	movl	($dat,$XX[0],4),$TX[0]#d
+	xorb	($inp),$TY#b
+	movb	$TY#b,($out,$inp)
+	lea	1($inp),$inp
+	dec	$len
+	jnz	.Lloop1
+	jmp	.Lexit
+
+.align	16
+.LRC4_CHAR:
+	add	\$1,$XX[0]#b
+	movzb	($dat,$XX[0]),$TX[0]#d
+	test	\$-8,$len
+	jz	.Lcloop1
+	jmp	.Lcloop8
+.align	16
+.Lcloop8:
+	mov	($inp),%r8d
+	mov	4($inp),%r9d
+___
+# unroll 2x4-wise, because 64-bit rotates kill Intel P4...
+for ($i=0;$i<4;$i++) {
+$code.=<<___;
+	add	$TX[0]#b,$YY#b
+	lea	1($XX[0]),$XX[1]
+	movzb	($dat,$YY),$TY#d
+	movzb	$XX[1]#b,$XX[1]#d
+	movzb	($dat,$XX[1]),$TX[1]#d
+	movb	$TX[0]#b,($dat,$YY)
+	cmp	$XX[1],$YY
+	movb	$TY#b,($dat,$XX[0])
+	jne	.Lcmov$i			# Intel cmov is sloooow...
+	mov	$TX[0],$TX[1]
+.Lcmov$i:
+	add	$TX[0]#b,$TY#b
+	xor	($dat,$TY),%r8b
+	ror	\$8,%r8d
+___
+push(@TX,shift(@TX)); push(@XX,shift(@XX));	# "rotate" registers
+}
+for ($i=4;$i<8;$i++) {
+$code.=<<___;
+	add	$TX[0]#b,$YY#b
+	lea	1($XX[0]),$XX[1]
+	movzb	($dat,$YY),$TY#d
+	movzb	$XX[1]#b,$XX[1]#d
+	movzb	($dat,$XX[1]),$TX[1]#d
+	movb	$TX[0]#b,($dat,$YY)
+	cmp	$XX[1],$YY
+	movb	$TY#b,($dat,$XX[0])
+	jne	.Lcmov$i			# Intel cmov is sloooow...
+	mov	$TX[0],$TX[1]
+.Lcmov$i:
+	add	$TX[0]#b,$TY#b
+	xor	($dat,$TY),%r9b
+	ror	\$8,%r9d
+___
+push(@TX,shift(@TX)); push(@XX,shift(@XX));	# "rotate" registers
+}
+$code.=<<___;
+	lea	-8($len),$len
+	mov	%r8d,($out)
+	lea	8($inp),$inp
+	mov	%r9d,4($out)
+	lea	8($out),$out
+
+	test	\$-8,$len
+	jnz	.Lcloop8
+	cmp	\$0,$len
+	jne	.Lcloop1
+	jmp	.Lexit
+___
+$code.=<<___;
+.align	16
+.Lcloop1:
+	add	$TX[0]#b,$YY#b
+	movzb	$YY#b,$YY#d
+	movzb	($dat,$YY),$TY#d
+	movb	$TX[0]#b,($dat,$YY)
+	movb	$TY#b,($dat,$XX[0])
+	add	$TX[0]#b,$TY#b
+	add	\$1,$XX[0]#b
+	movzb	$TY#b,$TY#d
+	movzb	$XX[0]#b,$XX[0]#d
+	movzb	($dat,$TY),$TY#d
+	movzb	($dat,$XX[0]),$TX[0]#d
+	xorb	($inp),$TY#b
+	lea	1($inp),$inp
+	movb	$TY#b,($out)
+	lea	1($out),$out
+	sub	\$1,$len
+	jnz	.Lcloop1
+	jmp	.Lexit
+
+.align	16
+.Lexit:
+	sub	\$1,$XX[0]#b
+	movl	$XX[0]#d,-8($dat)
+	movl	$YY#d,-4($dat)
+
+	mov	(%rsp),%r13
+.cfi_restore	%r13
+	mov	8(%rsp),%r12
+.cfi_restore	%r12
+	mov	16(%rsp),%rbx
+.cfi_restore	%rbx
+	add	\$24,%rsp
+.cfi_adjust_cfa_offset	-24
+.Lepilogue:
+	ret
+.cfi_endproc
+.size	RC4,.-RC4
+___
+}
+
+$idx="%r8";
+$ido="%r9";
+
+$code.=<<___;
+.globl	RC4_set_key
+.type	RC4_set_key,\@function,3
+.align	16
+RC4_set_key:
+	lea	8($dat),$dat
+	lea	($inp,$len),$inp
+	neg	$len
+	mov	$len,%rcx
+	xor	%eax,%eax
+	xor	$ido,$ido
+	xor	%r10,%r10
+	xor	%r11,%r11
+
+	mov	OPENSSL_ia32cap_P(%rip),$idx#d
+	bt	\$20,$idx#d	# RC4_CHAR?
+	jc	.Lc1stloop
+	jmp	.Lw1stloop
+
+.align	16
+.Lw1stloop:
+	mov	%eax,($dat,%rax,4)
+	add	\$1,%al
+	jnc	.Lw1stloop
+
+	xor	$ido,$ido
+	xor	$idx,$idx
+.align	16
+.Lw2ndloop:
+	mov	($dat,$ido,4),%r10d
+	add	($inp,$len,1),$idx#b
+	add	%r10b,$idx#b
+	add	\$1,$len
+	mov	($dat,$idx,4),%r11d
+	cmovz	%rcx,$len
+	mov	%r10d,($dat,$idx,4)
+	mov	%r11d,($dat,$ido,4)
+	add	\$1,$ido#b
+	jnc	.Lw2ndloop
+	jmp	.Lexit_key
+
+.align	16
+.Lc1stloop:
+	mov	%al,($dat,%rax)
+	add	\$1,%al
+	jnc	.Lc1stloop
+
+	xor	$ido,$ido
+	xor	$idx,$idx
+.align	16
+.Lc2ndloop:
+	mov	($dat,$ido),%r10b
+	add	($inp,$len),$idx#b
+	add	%r10b,$idx#b
+	add	\$1,$len
+	mov	($dat,$idx),%r11b
+	jnz	.Lcnowrap
+	mov	%rcx,$len
+.Lcnowrap:
+	mov	%r10b,($dat,$idx)
+	mov	%r11b,($dat,$ido)
+	add	\$1,$ido#b
+	jnc	.Lc2ndloop
+	movl	\$-1,256($dat)
+
+.align	16
+.Lexit_key:
+	xor	%eax,%eax
+	mov	%eax,-8($dat)
+	mov	%eax,-4($dat)
+	ret
+.size	RC4_set_key,.-RC4_set_key
+
+.globl	RC4_options
+.type	RC4_options,\@abi-omnipotent
+.align	16
+RC4_options:
+	lea	.Lopts(%rip),%rax
+	mov	OPENSSL_ia32cap_P(%rip),%edx
+	bt	\$20,%edx
+	jc	.L8xchar
+	bt	\$30,%edx
+	jnc	.Ldone
+	add	\$25,%rax
+	ret
+.L8xchar:
+	add	\$12,%rax
+.Ldone:
+	ret
+.align	64
+.Lopts:
+.asciz	"rc4(8x,int)"
+.asciz	"rc4(8x,char)"
+.asciz	"rc4(16x,int)"
+.asciz	"RC4 for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+.align	64
+.size	RC4_options,.-RC4_options
+___
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	stream_se_handler,\@abi-omnipotent
+.align	16
+stream_se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	lea	.Lprologue(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lin_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	lea	.Lepilogue(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lin_prologue
+
+	lea	24(%rax),%rax
+
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%r12
+	mov	-24(%rax),%r13
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+
+.Lin_prologue:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	jmp	.Lcommon_seh_exit
+.size	stream_se_handler,.-stream_se_handler
+
+.type	key_se_handler,\@abi-omnipotent
+.align	16
+key_se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	152($context),%rax	# pull context->Rsp
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+.Lcommon_seh_exit:
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	key_se_handler,.-key_se_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_RC4
+	.rva	.LSEH_end_RC4
+	.rva	.LSEH_info_RC4
+
+	.rva	.LSEH_begin_RC4_set_key
+	.rva	.LSEH_end_RC4_set_key
+	.rva	.LSEH_info_RC4_set_key
+
+.section	.xdata
+.align	8
+.LSEH_info_RC4:
+	.byte	9,0,0,0
+	.rva	stream_se_handler
+.LSEH_info_RC4_set_key:
+	.byte	9,0,0,0
+	.rva	key_se_handler
+___
+}
+
+sub reg_part {
+my ($reg,$conv)=@_;
+    if ($reg =~ /%r[0-9]+/)	{ $reg .= $conv; }
+    elsif ($conv eq "b")	{ $reg =~ s/%[er]([^x]+)x?/%$1l/;	}
+    elsif ($conv eq "w")	{ $reg =~ s/%[er](.+)/%$1/;		}
+    elsif ($conv eq "d")	{ $reg =~ s/%[er](.+)/%e$1/;		}
+    return $reg;
+}
+
+$code =~ s/(%[a-z0-9]+)#([bwd])/reg_part($1,$2)/gem;
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+
+print $code;
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/build.info
new file mode 100644
index 000000000..46ee66b61
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/build.info
@@ -0,0 +1,18 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        {- $target{rc4_asm_src} -}
+
+GENERATE[rc4-586.s]=asm/rc4-586.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+DEPEND[rc4-586.s]=../perlasm/x86asm.pl
+
+GENERATE[rc4-x86_64.s]=asm/rc4-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[rc4-md5-x86_64.s]=asm/rc4-md5-x86_64.pl $(PERLASM_SCHEME)
+
+GENERATE[rc4-parisc.s]=asm/rc4-parisc.pl $(PERLASM_SCHEME)
+
+BEGINRAW[Makefile]
+# GNU make "catch all"
+{- $builddir -}/rc4-%.s:	{- $sourcedir -}/asm/rc4-%.pl
+	CC="$(CC)" $(PERL) $< $(PERLASM_SCHEME) $@
+ENDRAW[Makefile]
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/rc4_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/rc4_enc.c
new file mode 100644
index 000000000..638a75bb0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/rc4_enc.c
@@ -0,0 +1,85 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/rc4.h>
+#include "rc4_locl.h"
+
+/*-
+ * RC4 as implemented from a posting from
+ * Newsgroups: sci.crypt
+ * Subject: RC4 Algorithm revealed.
+ * Message-ID: <sternCvKL4B.Hyy@netcom.com>
+ * Date: Wed, 14 Sep 1994 06:35:31 GMT
+ */
+
+void RC4(RC4_KEY *key, size_t len, const unsigned char *indata,
+         unsigned char *outdata)
+{
+    register RC4_INT *d;
+    register RC4_INT x, y, tx, ty;
+    size_t i;
+
+    x = key->x;
+    y = key->y;
+    d = key->data;
+
+#define LOOP(in,out) \
+                x=((x+1)&0xff); \
+                tx=d[x]; \
+                y=(tx+y)&0xff; \
+                d[x]=ty=d[y]; \
+                d[y]=tx; \
+                (out) = d[(tx+ty)&0xff]^ (in);
+
+    i = len >> 3;
+    if (i) {
+        for (;;) {
+            LOOP(indata[0], outdata[0]);
+            LOOP(indata[1], outdata[1]);
+            LOOP(indata[2], outdata[2]);
+            LOOP(indata[3], outdata[3]);
+            LOOP(indata[4], outdata[4]);
+            LOOP(indata[5], outdata[5]);
+            LOOP(indata[6], outdata[6]);
+            LOOP(indata[7], outdata[7]);
+            indata += 8;
+            outdata += 8;
+            if (--i == 0)
+                break;
+        }
+    }
+    i = len & 0x07;
+    if (i) {
+        for (;;) {
+            LOOP(indata[0], outdata[0]);
+            if (--i == 0)
+                break;
+            LOOP(indata[1], outdata[1]);
+            if (--i == 0)
+                break;
+            LOOP(indata[2], outdata[2]);
+            if (--i == 0)
+                break;
+            LOOP(indata[3], outdata[3]);
+            if (--i == 0)
+                break;
+            LOOP(indata[4], outdata[4]);
+            if (--i == 0)
+                break;
+            LOOP(indata[5], outdata[5]);
+            if (--i == 0)
+                break;
+            LOOP(indata[6], outdata[6]);
+            if (--i == 0)
+                break;
+        }
+    }
+    key->x = x;
+    key->y = y;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/rc4_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/rc4_locl.h
new file mode 100644
index 000000000..4380addbc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/rc4_locl.h
@@ -0,0 +1,16 @@
+/*
+ * Copyright 1998-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_RC4_LOCL_H
+# define HEADER_RC4_LOCL_H
+
+# include <openssl/opensslconf.h>
+# include "internal/cryptlib.h"
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/rc4_skey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/rc4_skey.c
new file mode 100644
index 000000000..e9007331e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc4/rc4_skey.c
@@ -0,0 +1,57 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/rc4.h>
+#include "rc4_locl.h"
+#include <openssl/opensslv.h>
+
+const char *RC4_options(void)
+{
+    if (sizeof(RC4_INT) == 1)
+        return "rc4(char)";
+    else
+        return "rc4(int)";
+}
+
+/*-
+ * RC4 as implemented from a posting from
+ * Newsgroups: sci.crypt
+ * Subject: RC4 Algorithm revealed.
+ * Message-ID: <sternCvKL4B.Hyy@netcom.com>
+ * Date: Wed, 14 Sep 1994 06:35:31 GMT
+ */
+
+void RC4_set_key(RC4_KEY *key, int len, const unsigned char *data)
+{
+    register RC4_INT tmp;
+    register int id1, id2;
+    register RC4_INT *d;
+    unsigned int i;
+
+    d = &(key->data[0]);
+    key->x = 0;
+    key->y = 0;
+    id1 = id2 = 0;
+
+#define SK_LOOP(d,n) { \
+                tmp=d[(n)]; \
+                id2 = (data[id1] + tmp + id2) & 0xff; \
+                if (++id1 == len) id1=0; \
+                d[(n)]=d[id2]; \
+                d[id2]=tmp; }
+
+    for (i = 0; i < 256; i++)
+        d[i] = i;
+    for (i = 0; i < 256; i += 4) {
+        SK_LOOP(d, i + 0);
+        SK_LOOP(d, i + 1);
+        SK_LOOP(d, i + 2);
+        SK_LOOP(d, i + 3);
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/asm/rc5-586.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/asm/rc5-586.pl
new file mode 100644
index 000000000..e58a98bc8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/asm/rc5-586.pl
@@ -0,0 +1,122 @@
+#! /usr/bin/env perl
+# Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+require "cbc.pl";
+
+$output = pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0]);
+
+$RC5_MAX_ROUNDS=16;
+$RC5_32_OFF=($RC5_MAX_ROUNDS+2)*4;
+$A="edi";
+$B="esi";
+$S="ebp";
+$tmp1="eax";
+$r="ebx";
+$tmpc="ecx";
+$tmp4="edx";
+
+&RC5_32_encrypt("RC5_32_encrypt",1);
+&RC5_32_encrypt("RC5_32_decrypt",0);
+&cbc("RC5_32_cbc_encrypt","RC5_32_encrypt","RC5_32_decrypt",0,4,5,3,-1,-1);
+&asm_finish();
+
+close STDOUT;
+
+sub RC5_32_encrypt
+	{
+	local($name,$enc)=@_;
+
+	&function_begin_B($name,"");
+
+	&comment("");
+
+	&push("ebp");
+	 &push("esi");
+	&push("edi");
+	 &mov($tmp4,&wparam(0));
+	&mov($S,&wparam(1));
+
+	&comment("Load the 2 words");
+	 &mov($A,&DWP(0,$tmp4,"",0));
+	&mov($B,&DWP(4,$tmp4,"",0));
+
+	&push($r);
+	 &mov($r,	&DWP(0,$S,"",0));
+
+	# encrypting part
+
+	if ($enc)
+		{
+		 &add($A,	&DWP(4+0,$S,"",0));
+		&add($B,	&DWP(4+4,$S,"",0));
+
+		for ($i=0; $i<$RC5_MAX_ROUNDS; $i++)
+			{
+			 &xor($A,	$B);
+			&mov($tmp1,	&DWP(12+$i*8,$S,"",0));
+			 &mov($tmpc,	$B);
+			&rotl($A,	&LB("ecx"));
+			&add($A,	$tmp1);
+
+			 &xor($B,	$A);
+			&mov($tmp1,	&DWP(16+$i*8,$S,"",0));
+			 &mov($tmpc,	$A);
+			&rotl($B,	&LB("ecx"));
+			&add($B,	$tmp1);
+			if (($i == 7) || ($i == 11))
+				{
+			 &cmp($r,	$i+1);
+			&je(&label("rc5_exit"));
+				}
+			}
+		}
+	else
+		{
+		 &cmp($r,	12);
+		&je(&label("rc5_dec_12"));
+		 &cmp($r,	8);
+		&je(&label("rc5_dec_8"));
+		for ($i=$RC5_MAX_ROUNDS; $i > 0; $i--)
+			{
+			&set_label("rc5_dec_$i") if ($i == 12) || ($i == 8);
+			 &mov($tmp1,	&DWP($i*8+8,$S,"",0));
+			&sub($B,	$tmp1);
+			 &mov($tmpc,	$A);
+			&rotr($B,	&LB("ecx"));
+			&xor($B,	$A);
+
+			 &mov($tmp1,	&DWP($i*8+4,$S,"",0));
+			&sub($A,	$tmp1);
+			 &mov($tmpc,	$B);
+			&rotr($A,	&LB("ecx"));
+			&xor($A,	$B);
+			}
+		 &sub($B,	&DWP(4+4,$S,"",0));
+		&sub($A,	&DWP(4+0,$S,"",0));
+		}
+
+	&set_label("rc5_exit");
+	 &mov(&DWP(0,$tmp4,"",0),$A);
+	&mov(&DWP(4,$tmp4,"",0),$B);
+
+	 &pop("ebx");
+	&pop("edi");
+	 &pop("esi");
+	&pop("ebp");
+	 &ret();
+	&function_end_B($name);
+	}
+
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/build.info
new file mode 100644
index 000000000..928a62cd8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/build.info
@@ -0,0 +1,7 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        rc5_skey.c rc5_ecb.c {- $target{rc5_asm_src} -} rc5cfb64.c rc5ofb64.c
+
+GENERATE[rc5-586.s]=asm/rc5-586.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS)
+DEPEND[rc5-586.s]=../perlasm/x86asm.pl ../perlasm/cbc.pl
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5_ecb.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5_ecb.c
new file mode 100644
index 000000000..c32f38e47
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5_ecb.c
@@ -0,0 +1,32 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/rc5.h>
+#include "rc5_locl.h"
+#include <openssl/opensslv.h>
+
+void RC5_32_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                        RC5_32_KEY *ks, int encrypt)
+{
+    unsigned long l, d[2];
+
+    c2l(in, l);
+    d[0] = l;
+    c2l(in, l);
+    d[1] = l;
+    if (encrypt)
+        RC5_32_encrypt(d, ks);
+    else
+        RC5_32_decrypt(d, ks);
+    l = d[0];
+    l2c(l, out);
+    l = d[1];
+    l2c(l, out);
+    l = d[0] = d[1] = 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5_enc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5_enc.c
new file mode 100644
index 000000000..58631dee2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5_enc.c
@@ -0,0 +1,160 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <openssl/rc5.h>
+#include "rc5_locl.h"
+
+void RC5_32_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                        long length, RC5_32_KEY *ks, unsigned char *iv,
+                        int encrypt)
+{
+    register unsigned long tin0, tin1;
+    register unsigned long tout0, tout1, xor0, xor1;
+    register long l = length;
+    unsigned long tin[2];
+
+    if (encrypt) {
+        c2l(iv, tout0);
+        c2l(iv, tout1);
+        iv -= 8;
+        for (l -= 8; l >= 0; l -= 8) {
+            c2l(in, tin0);
+            c2l(in, tin1);
+            tin0 ^= tout0;
+            tin1 ^= tout1;
+            tin[0] = tin0;
+            tin[1] = tin1;
+            RC5_32_encrypt(tin, ks);
+            tout0 = tin[0];
+            l2c(tout0, out);
+            tout1 = tin[1];
+            l2c(tout1, out);
+        }
+        if (l != -8) {
+            c2ln(in, tin0, tin1, l + 8);
+            tin0 ^= tout0;
+            tin1 ^= tout1;
+            tin[0] = tin0;
+            tin[1] = tin1;
+            RC5_32_encrypt(tin, ks);
+            tout0 = tin[0];
+            l2c(tout0, out);
+            tout1 = tin[1];
+            l2c(tout1, out);
+        }
+        l2c(tout0, iv);
+        l2c(tout1, iv);
+    } else {
+        c2l(iv, xor0);
+        c2l(iv, xor1);
+        iv -= 8;
+        for (l -= 8; l >= 0; l -= 8) {
+            c2l(in, tin0);
+            tin[0] = tin0;
+            c2l(in, tin1);
+            tin[1] = tin1;
+            RC5_32_decrypt(tin, ks);
+            tout0 = tin[0] ^ xor0;
+            tout1 = tin[1] ^ xor1;
+            l2c(tout0, out);
+            l2c(tout1, out);
+            xor0 = tin0;
+            xor1 = tin1;
+        }
+        if (l != -8) {
+            c2l(in, tin0);
+            tin[0] = tin0;
+            c2l(in, tin1);
+            tin[1] = tin1;
+            RC5_32_decrypt(tin, ks);
+            tout0 = tin[0] ^ xor0;
+            tout1 = tin[1] ^ xor1;
+            l2cn(tout0, tout1, out, l + 8);
+            xor0 = tin0;
+            xor1 = tin1;
+        }
+        l2c(xor0, iv);
+        l2c(xor1, iv);
+    }
+    tin0 = tin1 = tout0 = tout1 = xor0 = xor1 = 0;
+    tin[0] = tin[1] = 0;
+}
+
+void RC5_32_encrypt(unsigned long *d, RC5_32_KEY *key)
+{
+    RC5_32_INT a, b, *s;
+
+    s = key->data;
+
+    a = d[0] + s[0];
+    b = d[1] + s[1];
+    E_RC5_32(a, b, s, 2);
+    E_RC5_32(a, b, s, 4);
+    E_RC5_32(a, b, s, 6);
+    E_RC5_32(a, b, s, 8);
+    E_RC5_32(a, b, s, 10);
+    E_RC5_32(a, b, s, 12);
+    E_RC5_32(a, b, s, 14);
+    E_RC5_32(a, b, s, 16);
+    if (key->rounds == 12) {
+        E_RC5_32(a, b, s, 18);
+        E_RC5_32(a, b, s, 20);
+        E_RC5_32(a, b, s, 22);
+        E_RC5_32(a, b, s, 24);
+    } else if (key->rounds == 16) {
+        /* Do a full expansion to avoid a jump */
+        E_RC5_32(a, b, s, 18);
+        E_RC5_32(a, b, s, 20);
+        E_RC5_32(a, b, s, 22);
+        E_RC5_32(a, b, s, 24);
+        E_RC5_32(a, b, s, 26);
+        E_RC5_32(a, b, s, 28);
+        E_RC5_32(a, b, s, 30);
+        E_RC5_32(a, b, s, 32);
+    }
+    d[0] = a;
+    d[1] = b;
+}
+
+void RC5_32_decrypt(unsigned long *d, RC5_32_KEY *key)
+{
+    RC5_32_INT a, b, *s;
+
+    s = key->data;
+
+    a = d[0];
+    b = d[1];
+    if (key->rounds == 16) {
+        D_RC5_32(a, b, s, 32);
+        D_RC5_32(a, b, s, 30);
+        D_RC5_32(a, b, s, 28);
+        D_RC5_32(a, b, s, 26);
+        /* Do a full expansion to avoid a jump */
+        D_RC5_32(a, b, s, 24);
+        D_RC5_32(a, b, s, 22);
+        D_RC5_32(a, b, s, 20);
+        D_RC5_32(a, b, s, 18);
+    } else if (key->rounds == 12) {
+        D_RC5_32(a, b, s, 24);
+        D_RC5_32(a, b, s, 22);
+        D_RC5_32(a, b, s, 20);
+        D_RC5_32(a, b, s, 18);
+    }
+    D_RC5_32(a, b, s, 16);
+    D_RC5_32(a, b, s, 14);
+    D_RC5_32(a, b, s, 12);
+    D_RC5_32(a, b, s, 10);
+    D_RC5_32(a, b, s, 8);
+    D_RC5_32(a, b, s, 6);
+    D_RC5_32(a, b, s, 4);
+    D_RC5_32(a, b, s, 2);
+    d[0] = a - s[0];
+    d[1] = b - s[1];
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5_locl.h
new file mode 100644
index 000000000..41130fe33
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5_locl.h
@@ -0,0 +1,186 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdlib.h>
+
+#undef c2l
+#define c2l(c,l)        (l =((unsigned long)(*((c)++)))    , \
+                         l|=((unsigned long)(*((c)++)))<< 8L, \
+                         l|=((unsigned long)(*((c)++)))<<16L, \
+                         l|=((unsigned long)(*((c)++)))<<24L)
+
+/* NOTE - c is not incremented as per c2l */
+#undef c2ln
+#define c2ln(c,l1,l2,n) { \
+                        c+=n; \
+                        l1=l2=0; \
+                        switch (n) { \
+                        case 8: l2 =((unsigned long)(*(--(c))))<<24L; \
+                        /* fall thru */                               \
+                        case 7: l2|=((unsigned long)(*(--(c))))<<16L; \
+                        /* fall thru */                               \
+                        case 6: l2|=((unsigned long)(*(--(c))))<< 8L; \
+                        /* fall thru */                               \
+                        case 5: l2|=((unsigned long)(*(--(c))));      \
+                        /* fall thru */                               \
+                        case 4: l1 =((unsigned long)(*(--(c))))<<24L; \
+                        /* fall thru */                               \
+                        case 3: l1|=((unsigned long)(*(--(c))))<<16L; \
+                        /* fall thru */                               \
+                        case 2: l1|=((unsigned long)(*(--(c))))<< 8L; \
+                        /* fall thru */                               \
+                        case 1: l1|=((unsigned long)(*(--(c))));      \
+                                } \
+                        }
+
+#undef l2c
+#define l2c(l,c)        (*((c)++)=(unsigned char)(((l)     )&0xff), \
+                         *((c)++)=(unsigned char)(((l)>> 8L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>16L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>24L)&0xff))
+
+/* NOTE - c is not incremented as per l2c */
+#undef l2cn
+#define l2cn(l1,l2,c,n) { \
+                        c+=n; \
+                        switch (n) { \
+                        case 8: *(--(c))=(unsigned char)(((l2)>>24L)&0xff); \
+                        /* fall thru */                                     \
+                        case 7: *(--(c))=(unsigned char)(((l2)>>16L)&0xff); \
+                        /* fall thru */                                     \
+                        case 6: *(--(c))=(unsigned char)(((l2)>> 8L)&0xff); \
+                        /* fall thru */                                     \
+                        case 5: *(--(c))=(unsigned char)(((l2)     )&0xff); \
+                        /* fall thru */                                     \
+                        case 4: *(--(c))=(unsigned char)(((l1)>>24L)&0xff); \
+                        /* fall thru */                                     \
+                        case 3: *(--(c))=(unsigned char)(((l1)>>16L)&0xff); \
+                        /* fall thru */                                     \
+                        case 2: *(--(c))=(unsigned char)(((l1)>> 8L)&0xff); \
+                        /* fall thru */                                     \
+                        case 1: *(--(c))=(unsigned char)(((l1)     )&0xff); \
+                                } \
+                        }
+
+/* NOTE - c is not incremented as per n2l */
+#define n2ln(c,l1,l2,n) { \
+                        c+=n; \
+                        l1=l2=0; \
+                        switch (n) { \
+                        case 8: l2 =((unsigned long)(*(--(c))))    ; \
+                        /* fall thru */                              \
+                        case 7: l2|=((unsigned long)(*(--(c))))<< 8; \
+                        /* fall thru */                              \
+                        case 6: l2|=((unsigned long)(*(--(c))))<<16; \
+                        /* fall thru */                              \
+                        case 5: l2|=((unsigned long)(*(--(c))))<<24; \
+                        /* fall thru */                              \
+                        case 4: l1 =((unsigned long)(*(--(c))))    ; \
+                        /* fall thru */                              \
+                        case 3: l1|=((unsigned long)(*(--(c))))<< 8; \
+                        /* fall thru */                              \
+                        case 2: l1|=((unsigned long)(*(--(c))))<<16; \
+                        /* fall thru */                              \
+                        case 1: l1|=((unsigned long)(*(--(c))))<<24; \
+                                } \
+                        }
+
+/* NOTE - c is not incremented as per l2n */
+#define l2nn(l1,l2,c,n) { \
+                        c+=n; \
+                        switch (n) { \
+                        case 8: *(--(c))=(unsigned char)(((l2)    )&0xff); \
+                        /* fall thru */                                    \
+                        case 7: *(--(c))=(unsigned char)(((l2)>> 8)&0xff); \
+                        /* fall thru */                                    \
+                        case 6: *(--(c))=(unsigned char)(((l2)>>16)&0xff); \
+                        /* fall thru */                                    \
+                        case 5: *(--(c))=(unsigned char)(((l2)>>24)&0xff); \
+                        /* fall thru */                                    \
+                        case 4: *(--(c))=(unsigned char)(((l1)    )&0xff); \
+                        /* fall thru */                                    \
+                        case 3: *(--(c))=(unsigned char)(((l1)>> 8)&0xff); \
+                        /* fall thru */                                    \
+                        case 2: *(--(c))=(unsigned char)(((l1)>>16)&0xff); \
+                        /* fall thru */                                    \
+                        case 1: *(--(c))=(unsigned char)(((l1)>>24)&0xff); \
+                                } \
+                        }
+
+#undef n2l
+#define n2l(c,l)        (l =((unsigned long)(*((c)++)))<<24L, \
+                         l|=((unsigned long)(*((c)++)))<<16L, \
+                         l|=((unsigned long)(*((c)++)))<< 8L, \
+                         l|=((unsigned long)(*((c)++))))
+
+#undef l2n
+#define l2n(l,c)        (*((c)++)=(unsigned char)(((l)>>24L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>16L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>> 8L)&0xff), \
+                         *((c)++)=(unsigned char)(((l)     )&0xff))
+
+#if (defined(OPENSSL_SYS_WIN32) && defined(_MSC_VER))
+# define ROTATE_l32(a,n)     _lrotl(a,n)
+# define ROTATE_r32(a,n)     _lrotr(a,n)
+#elif defined(__ICC)
+# define ROTATE_l32(a,n)     _rotl(a,n)
+# define ROTATE_r32(a,n)     _rotr(a,n)
+#elif defined(__GNUC__) && __GNUC__>=2 && !defined(__STRICT_ANSI__) && !defined(OPENSSL_NO_ASM) && !defined(OPENSSL_NO_INLINE_ASM) && !defined(PEDANTIC)
+# if defined(__i386) || defined(__i386__) || defined(__x86_64) || defined(__x86_64__)
+#  define ROTATE_l32(a,n)       ({ register unsigned int ret;   \
+                                        asm ("roll %%cl,%0"     \
+                                                : "=r"(ret)     \
+                                                : "c"(n),"0"((unsigned int)(a)) \
+                                                : "cc");        \
+                                        ret;                    \
+                                })
+#  define ROTATE_r32(a,n)       ({ register unsigned int ret;   \
+                                        asm ("rorl %%cl,%0"     \
+                                                : "=r"(ret)     \
+                                                : "c"(n),"0"((unsigned int)(a)) \
+                                                : "cc");        \
+                                        ret;                    \
+                                })
+# endif
+#endif
+#ifndef ROTATE_l32
+# define ROTATE_l32(a,n)     (((a)<<(n&0x1f))|(((a)&0xffffffff)>>((32-n)&0x1f)))
+#endif
+#ifndef ROTATE_r32
+# define ROTATE_r32(a,n)     (((a)<<((32-n)&0x1f))|(((a)&0xffffffff)>>(n&0x1f)))
+#endif
+
+#define RC5_32_MASK     0xffffffffL
+
+#define RC5_16_P        0xB7E1
+#define RC5_16_Q        0x9E37
+#define RC5_32_P        0xB7E15163L
+#define RC5_32_Q        0x9E3779B9L
+#define RC5_64_P        0xB7E151628AED2A6BLL
+#define RC5_64_Q        0x9E3779B97F4A7C15LL
+
+#define E_RC5_32(a,b,s,n) \
+        a^=b; \
+        a=ROTATE_l32(a,b); \
+        a+=s[n]; \
+        a&=RC5_32_MASK; \
+        b^=a; \
+        b=ROTATE_l32(b,a); \
+        b+=s[n+1]; \
+        b&=RC5_32_MASK;
+
+#define D_RC5_32(a,b,s,n) \
+        b-=s[n+1]; \
+        b&=RC5_32_MASK; \
+        b=ROTATE_r32(b,a); \
+        b^=a; \
+        a-=s[n]; \
+        a&=RC5_32_MASK; \
+        a=ROTATE_r32(a,b); \
+        a^=b;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5_skey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5_skey.c
new file mode 100644
index 000000000..943a7849b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5_skey.c
@@ -0,0 +1,61 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/rc5.h>
+#include "rc5_locl.h"
+
+void RC5_32_set_key(RC5_32_KEY *key, int len, const unsigned char *data,
+                    int rounds)
+{
+    RC5_32_INT L[64], l, ll, A, B, *S, k;
+    int i, j, m, c, t, ii, jj;
+
+    if ((rounds != RC5_16_ROUNDS) &&
+        (rounds != RC5_12_ROUNDS) && (rounds != RC5_8_ROUNDS))
+        rounds = RC5_16_ROUNDS;
+
+    key->rounds = rounds;
+    S = &(key->data[0]);
+    j = 0;
+    for (i = 0; i <= (len - 8); i += 8) {
+        c2l(data, l);
+        L[j++] = l;
+        c2l(data, l);
+        L[j++] = l;
+    }
+    ii = len - i;
+    if (ii) {
+        k = len & 0x07;
+        c2ln(data, l, ll, k);
+        L[j + 0] = l;
+        L[j + 1] = ll;
+    }
+
+    c = (len + 3) / 4;
+    t = (rounds + 1) * 2;
+    S[0] = RC5_32_P;
+    for (i = 1; i < t; i++)
+        S[i] = (S[i - 1] + RC5_32_Q) & RC5_32_MASK;
+
+    j = (t > c) ? t : c;
+    j *= 3;
+    ii = jj = 0;
+    A = B = 0;
+    for (i = 0; i < j; i++) {
+        k = (S[ii] + A + B) & RC5_32_MASK;
+        A = S[ii] = ROTATE_l32(k, 3);
+        m = (int)(A + B);
+        k = (L[jj] + A + B) & RC5_32_MASK;
+        B = L[jj] = ROTATE_l32(k, m);
+        if (++ii >= t)
+            ii = 0;
+        if (++jj >= c)
+            jj = 0;
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5cfb64.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5cfb64.c
new file mode 100644
index 000000000..9a8aa6b24
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5cfb64.c
@@ -0,0 +1,74 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/rc5.h>
+#include "rc5_locl.h"
+
+/*
+ * The input and output encrypted as though 64bit cfb mode is being used.
+ * The extra state information to record how much of the 64bit block we have
+ * used is contained in *num;
+ */
+
+void RC5_32_cfb64_encrypt(const unsigned char *in, unsigned char *out,
+                          long length, RC5_32_KEY *schedule,
+                          unsigned char *ivec, int *num, int encrypt)
+{
+    register unsigned long v0, v1, t;
+    register int n = *num;
+    register long l = length;
+    unsigned long ti[2];
+    unsigned char *iv, c, cc;
+
+    iv = (unsigned char *)ivec;
+    if (encrypt) {
+        while (l--) {
+            if (n == 0) {
+                c2l(iv, v0);
+                ti[0] = v0;
+                c2l(iv, v1);
+                ti[1] = v1;
+                RC5_32_encrypt((unsigned long *)ti, schedule);
+                iv = (unsigned char *)ivec;
+                t = ti[0];
+                l2c(t, iv);
+                t = ti[1];
+                l2c(t, iv);
+                iv = (unsigned char *)ivec;
+            }
+            c = *(in++) ^ iv[n];
+            *(out++) = c;
+            iv[n] = c;
+            n = (n + 1) & 0x07;
+        }
+    } else {
+        while (l--) {
+            if (n == 0) {
+                c2l(iv, v0);
+                ti[0] = v0;
+                c2l(iv, v1);
+                ti[1] = v1;
+                RC5_32_encrypt((unsigned long *)ti, schedule);
+                iv = (unsigned char *)ivec;
+                t = ti[0];
+                l2c(t, iv);
+                t = ti[1];
+                l2c(t, iv);
+                iv = (unsigned char *)ivec;
+            }
+            cc = *(in++);
+            c = iv[n];
+            iv[n] = cc;
+            *(out++) = c ^ cc;
+            n = (n + 1) & 0x07;
+        }
+    }
+    v0 = v1 = ti[0] = ti[1] = t = c = cc = 0;
+    *num = n;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5ofb64.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5ofb64.c
new file mode 100644
index 000000000..3a41d773c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rc5/rc5ofb64.c
@@ -0,0 +1,61 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/rc5.h>
+#include "rc5_locl.h"
+
+/*
+ * The input and output encrypted as though 64bit ofb mode is being used.
+ * The extra state information to record how much of the 64bit block we have
+ * used is contained in *num;
+ */
+void RC5_32_ofb64_encrypt(const unsigned char *in, unsigned char *out,
+                          long length, RC5_32_KEY *schedule,
+                          unsigned char *ivec, int *num)
+{
+    register unsigned long v0, v1, t;
+    register int n = *num;
+    register long l = length;
+    unsigned char d[8];
+    register char *dp;
+    unsigned long ti[2];
+    unsigned char *iv;
+    int save = 0;
+
+    iv = (unsigned char *)ivec;
+    c2l(iv, v0);
+    c2l(iv, v1);
+    ti[0] = v0;
+    ti[1] = v1;
+    dp = (char *)d;
+    l2c(v0, dp);
+    l2c(v1, dp);
+    while (l--) {
+        if (n == 0) {
+            RC5_32_encrypt((unsigned long *)ti, schedule);
+            dp = (char *)d;
+            t = ti[0];
+            l2c(t, dp);
+            t = ti[1];
+            l2c(t, dp);
+            save++;
+        }
+        *(out++) = *(in++) ^ d[n];
+        n = (n + 1) & 0x07;
+    }
+    if (save) {
+        v0 = ti[0];
+        v1 = ti[1];
+        iv = (unsigned char *)ivec;
+        l2c(v0, iv);
+        l2c(v1, iv);
+    }
+    t = v0 = v1 = ti[0] = ti[1] = 0;
+    *num = n;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/asm/rmd-586.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/asm/rmd-586.pl
new file mode 100644
index 000000000..84aa7ced1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/asm/rmd-586.pl
@@ -0,0 +1,602 @@
+#! /usr/bin/env perl
+# Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# Normal is the
+# ripemd160_block_asm_data_order(RIPEMD160_CTX *c, ULONG *X,int blocks);
+
+$normal=0;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output=pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0]);
+
+$A="ecx";
+$B="esi";
+$C="edi";
+$D="ebx";
+$E="ebp";
+$tmp1="eax";
+$tmp2="edx";
+
+$KL1=0x5A827999;
+$KL2=0x6ED9EBA1;
+$KL3=0x8F1BBCDC;
+$KL4=0xA953FD4E;
+$KR0=0x50A28BE6;
+$KR1=0x5C4DD124;
+$KR2=0x6D703EF3;
+$KR3=0x7A6D76E9;
+
+
+@wl=(	 0, 1, 2, 3, 4, 5, 6, 7, 8, 9,10,11,12,13,14,15,
+	 7, 4,13, 1,10, 6,15, 3,12, 0, 9, 5, 2,14,11, 8,
+	 3,10,14, 4, 9,15, 8, 1, 2, 7, 0, 6,13,11, 5,12,
+	 1, 9,11,10, 0, 8,12, 4,13, 3, 7,15,14, 5, 6, 2,
+	 4, 0, 5, 9, 7,12, 2,10,14, 1, 3, 8,11, 6,15,13,
+	 );
+
+@wr=(	 5,14, 7, 0, 9, 2,11, 4,13, 6,15, 8, 1,10, 3,12,
+	 6,11, 3, 7, 0,13, 5,10,14,15, 8,12, 4, 9, 1, 2,
+	15, 5, 1, 3, 7,14, 6, 9,11, 8,12, 2,10, 0, 4,13,
+	 8, 6, 4, 1, 3,11,15, 0, 5,12, 2,13, 9, 7,10,14,
+	12,15,10, 4, 1, 5, 8, 7, 6, 2,13,14, 0, 3, 9,11,
+	);
+
+@sl=(	11,14,15,12, 5, 8, 7, 9,11,13,14,15, 6, 7, 9, 8,
+	 7, 6, 8,13,11, 9, 7,15, 7,12,15, 9,11, 7,13,12,
+	11,13, 6, 7,14, 9,13,15,14, 8,13, 6, 5,12, 7, 5,
+	11,12,14,15,14,15, 9, 8, 9,14, 5, 6, 8, 6, 5,12,
+	 9,15, 5,11, 6, 8,13,12, 5,12,13,14,11, 8, 5, 6,
+	 );
+
+@sr=(	 8, 9, 9,11,13,15,15, 5, 7, 7, 8,11,14,14,12, 6,
+	 9,13,15, 7,12, 8, 9,11, 7, 7,12, 7, 6,15,13,11,
+	 9, 7,15,11, 8, 6, 6,14,12,13, 5,14,13,13, 7, 5,
+	15, 5, 8,11,14,14, 6,14, 6, 9,12, 9,12, 5,15, 8,
+	 8, 5,12, 9,12, 5,14, 6, 8,13, 6, 5,15,13,11,11,
+ 	);
+
+&ripemd160_block("ripemd160_block_asm_data_order");
+&asm_finish();
+
+close STDOUT;
+
+sub Xv
+	{
+	local($n)=@_;
+	return(&swtmp($n));
+	# tmp on stack
+	}
+
+sub Np
+	{
+	local($p)=@_;
+	local(%n)=($A,$E,$B,$A,$C,$B,$D,$C,$E,$D);
+	return($n{$p});
+	}
+
+sub RIP1
+	{
+	local($a,$b,$c,$d,$e,$pos,$s,$o,$pos2)=@_;
+
+	&comment($p++);
+	if ($p & 1)
+		{
+	 #&mov($tmp1,	$c) if $o == -1;
+	&xor($tmp1,	$d) if $o == -1;
+	 &mov($tmp2,	&Xv($pos));
+	&xor($tmp1,	$b);
+	 &add($a,	$tmp2);
+	&rotl($c,	10);
+	&add($a,	$tmp1);
+	 &mov($tmp1,	&Np($c));	# NEXT
+	 # XXX
+	&rotl($a,	$s);
+	&add($a,	$e);
+		}
+	else
+		{
+	 &xor($tmp1,	$d);
+	&mov($tmp2,	&Xv($pos));
+	 &xor($tmp1,	$b);
+	&add($a,	$tmp1);
+	 &mov($tmp1,	&Np($c)) if $o <= 0;
+	 &mov($tmp1,	-1) if $o == 1;
+	 # XXX if $o == 2;
+	&rotl($c,	10);
+	&add($a,	$tmp2);
+	 &xor($tmp1,	&Np($d)) if $o <= 0;
+	 &mov($tmp2,	&Xv($pos2)) if $o == 1;
+	 &mov($tmp2,	&wparam(0)) if $o == 2;
+	&rotl($a,	$s);
+	&add($a,	$e);
+		}
+	}
+
+sub RIP2
+	{
+	local($a,$b,$c,$d,$e,$pos,$pos2,$s,$K,$o)=@_;
+
+# XXXXXX
+	&comment($p++);
+	if ($p & 1)
+		{
+#	 &mov($tmp2,	&Xv($pos)) if $o < -1;
+#	&mov($tmp1,	-1) if $o < -1;
+
+	 &add($a,	$tmp2);
+	&mov($tmp2,	$c);
+	 &sub($tmp1,	$b);
+	&and($tmp2,	$b);
+	 &and($tmp1,	$d);
+	&or($tmp2,	$tmp1);
+	 &mov($tmp1,	&Xv($pos2)) if $o <= 0; # XXXXXXXXXXXXXX
+	 # XXX
+	&rotl($c,	10);
+	&lea($a,	&DWP($K,$a,$tmp2,1));
+	 &mov($tmp2,	-1) if $o <= 0;
+	 # XXX
+	&rotl($a,	$s);
+	&add($a,	$e);
+		}
+	else
+		{
+	 # XXX
+	 &add($a,	$tmp1);
+	&mov($tmp1,	$c);
+	 &sub($tmp2,	$b);
+	&and($tmp1,	$b);
+	 &and($tmp2,	$d);
+	if ($o != 2)
+		{
+	&or($tmp1,	$tmp2);
+	 &mov($tmp2,	&Xv($pos2)) if $o <= 0;
+	 &mov($tmp2,	-1) if $o == 1;
+	&rotl($c,	10);
+	&lea($a,	&DWP($K,$a,$tmp1,1));
+	 &mov($tmp1,	-1) if $o <= 0;
+	 &sub($tmp2,	&Np($c)) if $o == 1;
+		} else {
+	&or($tmp2,	$tmp1);
+	 &mov($tmp1,	&Np($c));
+	&rotl($c,	10);
+	&lea($a,	&DWP($K,$a,$tmp2,1));
+	 &xor($tmp1,	&Np($d));
+		}
+	&rotl($a,	$s);
+	&add($a,	$e);
+		}
+	}
+
+sub RIP3
+	{
+	local($a,$b,$c,$d,$e,$pos,$s,$K,$o,$pos2)=@_;
+
+	&comment($p++);
+	if ($p & 1)
+		{
+#	 &mov($tmp2,	-1) if $o < -1;
+#	&sub($tmp2,	$c) if $o < -1;
+	 &mov($tmp1,	&Xv($pos));
+	&or($tmp2,	$b);
+	 &add($a,	$tmp1);
+	&xor($tmp2,	$d);
+	 &mov($tmp1,	-1) if $o <= 0;		# NEXT
+	 # XXX
+	&rotl($c,	10);
+	&lea($a,	&DWP($K,$a,$tmp2,1));
+	 &sub($tmp1,	&Np($c)) if $o <= 0;	# NEXT
+	 # XXX
+	&rotl($a,	$s);
+	&add($a,	$e);
+		}
+	else
+		{
+	 &mov($tmp2,	&Xv($pos));
+	&or($tmp1,	$b);
+	 &add($a,	$tmp2);
+	&xor($tmp1,	$d);
+	 &mov($tmp2,	-1) if $o <= 0;		# NEXT
+	 &mov($tmp2,	-1) if $o == 1;
+	 &mov($tmp2,	&Xv($pos2)) if $o == 2;
+	&rotl($c,	10);
+	&lea($a,	&DWP($K,$a,$tmp1,1));
+	 &sub($tmp2,	&Np($c)) if $o <= 0;	# NEXT
+	 &mov($tmp1,	&Np($d)) if $o == 1;
+	 &mov($tmp1,	-1) if $o == 2;
+	&rotl($a,	$s);
+	&add($a,	$e);
+		}
+	}
+
+sub RIP4
+	{
+	local($a,$b,$c,$d,$e,$pos,$s,$K,$o)=@_;
+
+	&comment($p++);
+	if ($p & 1)
+		{
+#	 &mov($tmp2,	-1) if $o == -2;
+#	&mov($tmp1,	$d) if $o == -2;
+	 &sub($tmp2,	$d);
+	&and($tmp1,	$b);
+	 &and($tmp2,	$c);
+	&or($tmp2,	$tmp1);
+	 &mov($tmp1,	&Xv($pos));
+	&rotl($c,	10);
+	&lea($a,	&DWP($K,$a,$tmp2));
+	 &mov($tmp2,	-1) unless $o > 0;	# NEXT
+	 # XXX
+	&add($a,	$tmp1);
+	 &mov($tmp1,	&Np($d)) unless $o > 0; # NEXT
+	 # XXX
+	&rotl($a,	$s);
+	&add($a,	$e);
+		}
+	else
+		{
+	 &sub($tmp2,	$d);
+	&and($tmp1,	$b);
+	 &and($tmp2,	$c);
+	&or($tmp2,	$tmp1);
+	 &mov($tmp1,	&Xv($pos));
+	&rotl($c,	10);
+	&lea($a,	&DWP($K,$a,$tmp2));
+	 &mov($tmp2,	-1) if $o == 0;	# NEXT
+	 &mov($tmp2,	-1) if $o == 1;
+	 &mov($tmp2,	-1) if $o == 2;
+	 # XXX
+	&add($a,	$tmp1);
+	 &mov($tmp1,	&Np($d)) if $o == 0;	# NEXT
+	 &sub($tmp2,	&Np($d)) if $o == 1;
+	 &sub($tmp2,	&Np($c)) if $o == 2;
+	 # XXX
+	&rotl($a,	$s);
+	&add($a,	$e);
+		}
+	}
+
+sub RIP5
+	{
+	local($a,$b,$c,$d,$e,$pos,$s,$K,$o)=@_;
+
+	&comment($p++);
+	if ($p & 1)
+		{
+	 &mov($tmp2,	-1) if $o == -2;
+	&sub($tmp2,	$d) if $o == -2;
+	 &mov($tmp1,	&Xv($pos));
+	&or($tmp2,	$c);
+	 &add($a,	$tmp1);
+	&xor($tmp2,	$b);
+	 &mov($tmp1,	-1) if $o <= 0;
+	 # XXX
+	&rotl($c,	10);
+	&lea($a,	&DWP($K,$a,$tmp2,1));
+	 &sub($tmp1,	&Np($d)) if $o <= 0;
+	 # XXX
+	&rotl($a,	$s);
+	&add($a,	$e);
+		}
+	else
+		{
+	 &mov($tmp2,	&Xv($pos));
+	&or($tmp1,	$c);
+	 &add($a,	$tmp2);
+	&xor($tmp1,	$b);
+	 &mov($tmp2,	-1) if $o <= 0;
+	 &mov($tmp2,	&wparam(0)) if $o == 1;	# Middle code
+	 &mov($tmp2,	-1) if $o == 2;
+	&rotl($c,	10);
+	&lea($a,	&DWP($K,$a,$tmp1,1));
+	 &sub($tmp2,	&Np($d)) if $o <= 0;
+	 &mov(&swtmp(16),	$A) if $o == 1;
+	 &mov($tmp1,	&Np($d)) if $o == 2;
+	&rotl($a,	$s);
+	&add($a,	$e);
+		}
+	}
+
+sub ripemd160_block
+	{
+	local($name)=@_;
+
+	&function_begin_B($name,"",3);
+
+	# parameter 1 is the RIPEMD160_CTX structure.
+	# A	0
+	# B	4
+	# C	8
+	# D 	12
+	# E 	16
+
+	&mov($tmp2,	&wparam(0));
+	 &mov($tmp1,	&wparam(1));
+	&push("esi");
+	 &mov($A,	&DWP( 0,$tmp2,"",0));
+	&push("edi");
+	 &mov($B,	&DWP( 4,$tmp2,"",0));
+	&push("ebp");
+	 &mov($C,	&DWP( 8,$tmp2,"",0));
+	&push("ebx");
+	 &stack_push(16+5+6);
+			  # Special comment about the figure of 6.
+			  # Idea is to pad the current frame so
+			  # that the top of the stack gets fairly
+			  # aligned. Well, as you realize it would
+			  # always depend on how the frame below is
+			  # aligned. The good news are that gcc-2.95
+			  # and later does keep first argument at
+			  # least double-wise aligned.
+
+	&set_label("start") unless $normal;
+	&comment("");
+
+	# &mov($tmp1,	&wparam(1)); # Done at end of loop
+	# &mov($tmp2,	&wparam(0)); # Done at end of loop
+
+	for ($z=0; $z<16; $z+=2)
+		{
+		&mov($D,		&DWP( $z*4,$tmp1,"",0));
+		 &mov($E,		&DWP( ($z+1)*4,$tmp1,"",0));
+		&mov(&swtmp($z),	$D);
+		 &mov(&swtmp($z+1),	$E);
+		}
+	&mov($tmp1,	$C);
+	 &mov($D,	&DWP(12,$tmp2,"",0));
+	&mov($E,	&DWP(16,$tmp2,"",0));
+
+	&RIP1($A,$B,$C,$D,$E,$wl[ 0],$sl[ 0],-1);
+	&RIP1($E,$A,$B,$C,$D,$wl[ 1],$sl[ 1],0);
+	&RIP1($D,$E,$A,$B,$C,$wl[ 2],$sl[ 2],0);
+	&RIP1($C,$D,$E,$A,$B,$wl[ 3],$sl[ 3],0);
+	&RIP1($B,$C,$D,$E,$A,$wl[ 4],$sl[ 4],0);
+	&RIP1($A,$B,$C,$D,$E,$wl[ 5],$sl[ 5],0);
+	&RIP1($E,$A,$B,$C,$D,$wl[ 6],$sl[ 6],0);
+	&RIP1($D,$E,$A,$B,$C,$wl[ 7],$sl[ 7],0);
+	&RIP1($C,$D,$E,$A,$B,$wl[ 8],$sl[ 8],0);
+	&RIP1($B,$C,$D,$E,$A,$wl[ 9],$sl[ 9],0);
+	&RIP1($A,$B,$C,$D,$E,$wl[10],$sl[10],0);
+	&RIP1($E,$A,$B,$C,$D,$wl[11],$sl[11],0);
+	&RIP1($D,$E,$A,$B,$C,$wl[12],$sl[12],0);
+	&RIP1($C,$D,$E,$A,$B,$wl[13],$sl[13],0);
+	&RIP1($B,$C,$D,$E,$A,$wl[14],$sl[14],0);
+	&RIP1($A,$B,$C,$D,$E,$wl[15],$sl[15],1,$wl[16]);
+
+	&RIP2($E,$A,$B,$C,$D,$wl[16],$wl[17],$sl[16],$KL1,-1);
+	&RIP2($D,$E,$A,$B,$C,$wl[17],$wl[18],$sl[17],$KL1,0);
+	&RIP2($C,$D,$E,$A,$B,$wl[18],$wl[19],$sl[18],$KL1,0);
+	&RIP2($B,$C,$D,$E,$A,$wl[19],$wl[20],$sl[19],$KL1,0);
+	&RIP2($A,$B,$C,$D,$E,$wl[20],$wl[21],$sl[20],$KL1,0);
+	&RIP2($E,$A,$B,$C,$D,$wl[21],$wl[22],$sl[21],$KL1,0);
+	&RIP2($D,$E,$A,$B,$C,$wl[22],$wl[23],$sl[22],$KL1,0);
+	&RIP2($C,$D,$E,$A,$B,$wl[23],$wl[24],$sl[23],$KL1,0);
+	&RIP2($B,$C,$D,$E,$A,$wl[24],$wl[25],$sl[24],$KL1,0);
+	&RIP2($A,$B,$C,$D,$E,$wl[25],$wl[26],$sl[25],$KL1,0);
+	&RIP2($E,$A,$B,$C,$D,$wl[26],$wl[27],$sl[26],$KL1,0);
+	&RIP2($D,$E,$A,$B,$C,$wl[27],$wl[28],$sl[27],$KL1,0);
+	&RIP2($C,$D,$E,$A,$B,$wl[28],$wl[29],$sl[28],$KL1,0);
+	&RIP2($B,$C,$D,$E,$A,$wl[29],$wl[30],$sl[29],$KL1,0);
+	&RIP2($A,$B,$C,$D,$E,$wl[30],$wl[31],$sl[30],$KL1,0);
+	&RIP2($E,$A,$B,$C,$D,$wl[31],$wl[32],$sl[31],$KL1,1);
+
+	&RIP3($D,$E,$A,$B,$C,$wl[32],$sl[32],$KL2,-1);
+	&RIP3($C,$D,$E,$A,$B,$wl[33],$sl[33],$KL2,0);
+	&RIP3($B,$C,$D,$E,$A,$wl[34],$sl[34],$KL2,0);
+	&RIP3($A,$B,$C,$D,$E,$wl[35],$sl[35],$KL2,0);
+	&RIP3($E,$A,$B,$C,$D,$wl[36],$sl[36],$KL2,0);
+	&RIP3($D,$E,$A,$B,$C,$wl[37],$sl[37],$KL2,0);
+	&RIP3($C,$D,$E,$A,$B,$wl[38],$sl[38],$KL2,0);
+	&RIP3($B,$C,$D,$E,$A,$wl[39],$sl[39],$KL2,0);
+	&RIP3($A,$B,$C,$D,$E,$wl[40],$sl[40],$KL2,0);
+	&RIP3($E,$A,$B,$C,$D,$wl[41],$sl[41],$KL2,0);
+	&RIP3($D,$E,$A,$B,$C,$wl[42],$sl[42],$KL2,0);
+	&RIP3($C,$D,$E,$A,$B,$wl[43],$sl[43],$KL2,0);
+	&RIP3($B,$C,$D,$E,$A,$wl[44],$sl[44],$KL2,0);
+	&RIP3($A,$B,$C,$D,$E,$wl[45],$sl[45],$KL2,0);
+	&RIP3($E,$A,$B,$C,$D,$wl[46],$sl[46],$KL2,0);
+	&RIP3($D,$E,$A,$B,$C,$wl[47],$sl[47],$KL2,1);
+
+	&RIP4($C,$D,$E,$A,$B,$wl[48],$sl[48],$KL3,-1);
+	&RIP4($B,$C,$D,$E,$A,$wl[49],$sl[49],$KL3,0);
+	&RIP4($A,$B,$C,$D,$E,$wl[50],$sl[50],$KL3,0);
+	&RIP4($E,$A,$B,$C,$D,$wl[51],$sl[51],$KL3,0);
+	&RIP4($D,$E,$A,$B,$C,$wl[52],$sl[52],$KL3,0);
+	&RIP4($C,$D,$E,$A,$B,$wl[53],$sl[53],$KL3,0);
+	&RIP4($B,$C,$D,$E,$A,$wl[54],$sl[54],$KL3,0);
+	&RIP4($A,$B,$C,$D,$E,$wl[55],$sl[55],$KL3,0);
+	&RIP4($E,$A,$B,$C,$D,$wl[56],$sl[56],$KL3,0);
+	&RIP4($D,$E,$A,$B,$C,$wl[57],$sl[57],$KL3,0);
+	&RIP4($C,$D,$E,$A,$B,$wl[58],$sl[58],$KL3,0);
+	&RIP4($B,$C,$D,$E,$A,$wl[59],$sl[59],$KL3,0);
+	&RIP4($A,$B,$C,$D,$E,$wl[60],$sl[60],$KL3,0);
+	&RIP4($E,$A,$B,$C,$D,$wl[61],$sl[61],$KL3,0);
+	&RIP4($D,$E,$A,$B,$C,$wl[62],$sl[62],$KL3,0);
+	&RIP4($C,$D,$E,$A,$B,$wl[63],$sl[63],$KL3,1);
+
+	&RIP5($B,$C,$D,$E,$A,$wl[64],$sl[64],$KL4,-1);
+	&RIP5($A,$B,$C,$D,$E,$wl[65],$sl[65],$KL4,0);
+	&RIP5($E,$A,$B,$C,$D,$wl[66],$sl[66],$KL4,0);
+	&RIP5($D,$E,$A,$B,$C,$wl[67],$sl[67],$KL4,0);
+	&RIP5($C,$D,$E,$A,$B,$wl[68],$sl[68],$KL4,0);
+	&RIP5($B,$C,$D,$E,$A,$wl[69],$sl[69],$KL4,0);
+	&RIP5($A,$B,$C,$D,$E,$wl[70],$sl[70],$KL4,0);
+	&RIP5($E,$A,$B,$C,$D,$wl[71],$sl[71],$KL4,0);
+	&RIP5($D,$E,$A,$B,$C,$wl[72],$sl[72],$KL4,0);
+	&RIP5($C,$D,$E,$A,$B,$wl[73],$sl[73],$KL4,0);
+	&RIP5($B,$C,$D,$E,$A,$wl[74],$sl[74],$KL4,0);
+	&RIP5($A,$B,$C,$D,$E,$wl[75],$sl[75],$KL4,0);
+	&RIP5($E,$A,$B,$C,$D,$wl[76],$sl[76],$KL4,0);
+	&RIP5($D,$E,$A,$B,$C,$wl[77],$sl[77],$KL4,0);
+	&RIP5($C,$D,$E,$A,$B,$wl[78],$sl[78],$KL4,0);
+	&RIP5($B,$C,$D,$E,$A,$wl[79],$sl[79],$KL4,1);
+
+	# &mov($tmp2,	&wparam(0)); # moved into last RIP5
+	# &mov(&swtmp(16),	$A);
+	 &mov($A,	&DWP( 0,$tmp2,"",0));
+	&mov(&swtmp(16+1),	$B);
+	 &mov(&swtmp(16+2),	$C);
+	&mov($B,	&DWP( 4,$tmp2,"",0));
+	 &mov(&swtmp(16+3),	$D);
+	&mov($C,	&DWP( 8,$tmp2,"",0));
+	 &mov(&swtmp(16+4),	$E);
+	&mov($D,	&DWP(12,$tmp2,"",0));
+	 &mov($E,	&DWP(16,$tmp2,"",0));
+
+	&RIP5($A,$B,$C,$D,$E,$wr[ 0],$sr[ 0],$KR0,-2);
+	&RIP5($E,$A,$B,$C,$D,$wr[ 1],$sr[ 1],$KR0,0);
+	&RIP5($D,$E,$A,$B,$C,$wr[ 2],$sr[ 2],$KR0,0);
+	&RIP5($C,$D,$E,$A,$B,$wr[ 3],$sr[ 3],$KR0,0);
+	&RIP5($B,$C,$D,$E,$A,$wr[ 4],$sr[ 4],$KR0,0);
+	&RIP5($A,$B,$C,$D,$E,$wr[ 5],$sr[ 5],$KR0,0);
+	&RIP5($E,$A,$B,$C,$D,$wr[ 6],$sr[ 6],$KR0,0);
+	&RIP5($D,$E,$A,$B,$C,$wr[ 7],$sr[ 7],$KR0,0);
+	&RIP5($C,$D,$E,$A,$B,$wr[ 8],$sr[ 8],$KR0,0);
+	&RIP5($B,$C,$D,$E,$A,$wr[ 9],$sr[ 9],$KR0,0);
+	&RIP5($A,$B,$C,$D,$E,$wr[10],$sr[10],$KR0,0);
+	&RIP5($E,$A,$B,$C,$D,$wr[11],$sr[11],$KR0,0);
+	&RIP5($D,$E,$A,$B,$C,$wr[12],$sr[12],$KR0,0);
+	&RIP5($C,$D,$E,$A,$B,$wr[13],$sr[13],$KR0,0);
+	&RIP5($B,$C,$D,$E,$A,$wr[14],$sr[14],$KR0,0);
+	&RIP5($A,$B,$C,$D,$E,$wr[15],$sr[15],$KR0,2);
+
+	&RIP4($E,$A,$B,$C,$D,$wr[16],$sr[16],$KR1,-2);
+	&RIP4($D,$E,$A,$B,$C,$wr[17],$sr[17],$KR1,0);
+	&RIP4($C,$D,$E,$A,$B,$wr[18],$sr[18],$KR1,0);
+	&RIP4($B,$C,$D,$E,$A,$wr[19],$sr[19],$KR1,0);
+	&RIP4($A,$B,$C,$D,$E,$wr[20],$sr[20],$KR1,0);
+	&RIP4($E,$A,$B,$C,$D,$wr[21],$sr[21],$KR1,0);
+	&RIP4($D,$E,$A,$B,$C,$wr[22],$sr[22],$KR1,0);
+	&RIP4($C,$D,$E,$A,$B,$wr[23],$sr[23],$KR1,0);
+	&RIP4($B,$C,$D,$E,$A,$wr[24],$sr[24],$KR1,0);
+	&RIP4($A,$B,$C,$D,$E,$wr[25],$sr[25],$KR1,0);
+	&RIP4($E,$A,$B,$C,$D,$wr[26],$sr[26],$KR1,0);
+	&RIP4($D,$E,$A,$B,$C,$wr[27],$sr[27],$KR1,0);
+	&RIP4($C,$D,$E,$A,$B,$wr[28],$sr[28],$KR1,0);
+	&RIP4($B,$C,$D,$E,$A,$wr[29],$sr[29],$KR1,0);
+	&RIP4($A,$B,$C,$D,$E,$wr[30],$sr[30],$KR1,0);
+	&RIP4($E,$A,$B,$C,$D,$wr[31],$sr[31],$KR1,2);
+
+	&RIP3($D,$E,$A,$B,$C,$wr[32],$sr[32],$KR2,-2);
+	&RIP3($C,$D,$E,$A,$B,$wr[33],$sr[33],$KR2,0);
+	&RIP3($B,$C,$D,$E,$A,$wr[34],$sr[34],$KR2,0);
+	&RIP3($A,$B,$C,$D,$E,$wr[35],$sr[35],$KR2,0);
+	&RIP3($E,$A,$B,$C,$D,$wr[36],$sr[36],$KR2,0);
+	&RIP3($D,$E,$A,$B,$C,$wr[37],$sr[37],$KR2,0);
+	&RIP3($C,$D,$E,$A,$B,$wr[38],$sr[38],$KR2,0);
+	&RIP3($B,$C,$D,$E,$A,$wr[39],$sr[39],$KR2,0);
+	&RIP3($A,$B,$C,$D,$E,$wr[40],$sr[40],$KR2,0);
+	&RIP3($E,$A,$B,$C,$D,$wr[41],$sr[41],$KR2,0);
+	&RIP3($D,$E,$A,$B,$C,$wr[42],$sr[42],$KR2,0);
+	&RIP3($C,$D,$E,$A,$B,$wr[43],$sr[43],$KR2,0);
+	&RIP3($B,$C,$D,$E,$A,$wr[44],$sr[44],$KR2,0);
+	&RIP3($A,$B,$C,$D,$E,$wr[45],$sr[45],$KR2,0);
+	&RIP3($E,$A,$B,$C,$D,$wr[46],$sr[46],$KR2,0);
+	&RIP3($D,$E,$A,$B,$C,$wr[47],$sr[47],$KR2,2,$wr[48]);
+
+	&RIP2($C,$D,$E,$A,$B,$wr[48],$wr[49],$sr[48],$KR3,-2);
+	&RIP2($B,$C,$D,$E,$A,$wr[49],$wr[50],$sr[49],$KR3,0);
+	&RIP2($A,$B,$C,$D,$E,$wr[50],$wr[51],$sr[50],$KR3,0);
+	&RIP2($E,$A,$B,$C,$D,$wr[51],$wr[52],$sr[51],$KR3,0);
+	&RIP2($D,$E,$A,$B,$C,$wr[52],$wr[53],$sr[52],$KR3,0);
+	&RIP2($C,$D,$E,$A,$B,$wr[53],$wr[54],$sr[53],$KR3,0);
+	&RIP2($B,$C,$D,$E,$A,$wr[54],$wr[55],$sr[54],$KR3,0);
+	&RIP2($A,$B,$C,$D,$E,$wr[55],$wr[56],$sr[55],$KR3,0);
+	&RIP2($E,$A,$B,$C,$D,$wr[56],$wr[57],$sr[56],$KR3,0);
+	&RIP2($D,$E,$A,$B,$C,$wr[57],$wr[58],$sr[57],$KR3,0);
+	&RIP2($C,$D,$E,$A,$B,$wr[58],$wr[59],$sr[58],$KR3,0);
+	&RIP2($B,$C,$D,$E,$A,$wr[59],$wr[60],$sr[59],$KR3,0);
+	&RIP2($A,$B,$C,$D,$E,$wr[60],$wr[61],$sr[60],$KR3,0);
+	&RIP2($E,$A,$B,$C,$D,$wr[61],$wr[62],$sr[61],$KR3,0);
+	&RIP2($D,$E,$A,$B,$C,$wr[62],$wr[63],$sr[62],$KR3,0);
+	&RIP2($C,$D,$E,$A,$B,$wr[63],$wr[64],$sr[63],$KR3,2);
+
+	&RIP1($B,$C,$D,$E,$A,$wr[64],$sr[64],-2);
+	&RIP1($A,$B,$C,$D,$E,$wr[65],$sr[65],0);
+	&RIP1($E,$A,$B,$C,$D,$wr[66],$sr[66],0);
+	&RIP1($D,$E,$A,$B,$C,$wr[67],$sr[67],0);
+	&RIP1($C,$D,$E,$A,$B,$wr[68],$sr[68],0);
+	&RIP1($B,$C,$D,$E,$A,$wr[69],$sr[69],0);
+	&RIP1($A,$B,$C,$D,$E,$wr[70],$sr[70],0);
+	&RIP1($E,$A,$B,$C,$D,$wr[71],$sr[71],0);
+	&RIP1($D,$E,$A,$B,$C,$wr[72],$sr[72],0);
+	&RIP1($C,$D,$E,$A,$B,$wr[73],$sr[73],0);
+	&RIP1($B,$C,$D,$E,$A,$wr[74],$sr[74],0);
+	&RIP1($A,$B,$C,$D,$E,$wr[75],$sr[75],0);
+	&RIP1($E,$A,$B,$C,$D,$wr[76],$sr[76],0);
+	&RIP1($D,$E,$A,$B,$C,$wr[77],$sr[77],0);
+	&RIP1($C,$D,$E,$A,$B,$wr[78],$sr[78],0);
+	&RIP1($B,$C,$D,$E,$A,$wr[79],$sr[79],2);
+
+	# &mov($tmp2,	&wparam(0)); # Moved into last round
+
+	 &mov($tmp1,	&DWP( 4,$tmp2,"",0));	# ctx->B
+ 	&add($D,	$tmp1);
+	 &mov($tmp1,	&swtmp(16+2));		# $c
+	&add($D,	$tmp1);
+
+	 &mov($tmp1,	&DWP( 8,$tmp2,"",0));	# ctx->C
+	&add($E,	$tmp1);
+	 &mov($tmp1,	&swtmp(16+3));		# $d
+	&add($E,	$tmp1);
+
+	 &mov($tmp1,	&DWP(12,$tmp2,"",0));	# ctx->D
+	&add($A,	$tmp1);
+	 &mov($tmp1,	&swtmp(16+4));		# $e
+	&add($A,	$tmp1);
+
+
+	 &mov($tmp1,	&DWP(16,$tmp2,"",0));	# ctx->E
+	&add($B,	$tmp1);
+	 &mov($tmp1,	&swtmp(16+0));		# $a
+	&add($B,	$tmp1);
+
+	 &mov($tmp1,	&DWP( 0,$tmp2,"",0));	# ctx->A
+	&add($C,	$tmp1);
+	 &mov($tmp1,	&swtmp(16+1));		# $b
+	&add($C,	$tmp1);
+
+	 &mov($tmp1,	&wparam(2));
+
+	&mov(&DWP( 0,$tmp2,"",0),	$D);
+	 &mov(&DWP( 4,$tmp2,"",0),	$E);
+	&mov(&DWP( 8,$tmp2,"",0),	$A);
+	 &sub($tmp1,1);
+	&mov(&DWP(12,$tmp2,"",0),	$B);
+	 &mov(&DWP(16,$tmp2,"",0),	$C);
+
+	&jle(&label("get_out"));
+
+	&mov(&wparam(2),$tmp1);
+	 &mov($C,	$A);
+	&mov($tmp1,	&wparam(1));
+	 &mov($A,	$D);
+	&add($tmp1,	64);
+	 &mov($B,	$E);
+	&mov(&wparam(1),$tmp1);
+
+	&jmp(&label("start"));
+
+	&set_label("get_out");
+
+	&stack_pop(16+5+6);
+
+	&pop("ebx");
+	&pop("ebp");
+	&pop("edi");
+	&pop("esi");
+	&ret();
+	&function_end_B($name);
+	}
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/build.info
new file mode 100644
index 000000000..a4a894e2d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/build.info
@@ -0,0 +1,7 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        rmd_dgst.c rmd_one.c {- $target{rmd160_asm_src} -}
+
+GENERATE[rmd-586.s]=asm/rmd-586.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS)
+DEPEND[rmd-586.s]=../perlasm/x86asm.pl
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/rmd_dgst.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/rmd_dgst.c
new file mode 100644
index 000000000..a1670c7fb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/rmd_dgst.c
@@ -0,0 +1,282 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "rmd_locl.h"
+#include <openssl/opensslv.h>
+
+#ifdef RMD160_ASM
+void ripemd160_block_x86(RIPEMD160_CTX *c, unsigned long *p, size_t num);
+# define ripemd160_block ripemd160_block_x86
+#else
+void ripemd160_block(RIPEMD160_CTX *c, unsigned long *p, size_t num);
+#endif
+
+int RIPEMD160_Init(RIPEMD160_CTX *c)
+{
+    memset(c, 0, sizeof(*c));
+    c->A = RIPEMD160_A;
+    c->B = RIPEMD160_B;
+    c->C = RIPEMD160_C;
+    c->D = RIPEMD160_D;
+    c->E = RIPEMD160_E;
+    return 1;
+}
+
+#ifndef ripemd160_block_data_order
+# ifdef X
+#  undef X
+# endif
+void ripemd160_block_data_order(RIPEMD160_CTX *ctx, const void *p, size_t num)
+{
+    const unsigned char *data = p;
+    register unsigned MD32_REG_T A, B, C, D, E;
+    unsigned MD32_REG_T a, b, c, d, e, l;
+# ifndef MD32_XARRAY
+    /* See comment in crypto/sha/sha_locl.h for details. */
+    unsigned MD32_REG_T XX0, XX1, XX2, XX3, XX4, XX5, XX6, XX7,
+        XX8, XX9, XX10, XX11, XX12, XX13, XX14, XX15;
+#  define X(i)   XX##i
+# else
+    RIPEMD160_LONG XX[16];
+#  define X(i)   XX[i]
+# endif
+
+    for (; num--;) {
+
+        A = ctx->A;
+        B = ctx->B;
+        C = ctx->C;
+        D = ctx->D;
+        E = ctx->E;
+
+        (void)HOST_c2l(data, l);
+        X(0) = l;
+        (void)HOST_c2l(data, l);
+        X(1) = l;
+        RIP1(A, B, C, D, E, WL00, SL00);
+        (void)HOST_c2l(data, l);
+        X(2) = l;
+        RIP1(E, A, B, C, D, WL01, SL01);
+        (void)HOST_c2l(data, l);
+        X(3) = l;
+        RIP1(D, E, A, B, C, WL02, SL02);
+        (void)HOST_c2l(data, l);
+        X(4) = l;
+        RIP1(C, D, E, A, B, WL03, SL03);
+        (void)HOST_c2l(data, l);
+        X(5) = l;
+        RIP1(B, C, D, E, A, WL04, SL04);
+        (void)HOST_c2l(data, l);
+        X(6) = l;
+        RIP1(A, B, C, D, E, WL05, SL05);
+        (void)HOST_c2l(data, l);
+        X(7) = l;
+        RIP1(E, A, B, C, D, WL06, SL06);
+        (void)HOST_c2l(data, l);
+        X(8) = l;
+        RIP1(D, E, A, B, C, WL07, SL07);
+        (void)HOST_c2l(data, l);
+        X(9) = l;
+        RIP1(C, D, E, A, B, WL08, SL08);
+        (void)HOST_c2l(data, l);
+        X(10) = l;
+        RIP1(B, C, D, E, A, WL09, SL09);
+        (void)HOST_c2l(data, l);
+        X(11) = l;
+        RIP1(A, B, C, D, E, WL10, SL10);
+        (void)HOST_c2l(data, l);
+        X(12) = l;
+        RIP1(E, A, B, C, D, WL11, SL11);
+        (void)HOST_c2l(data, l);
+        X(13) = l;
+        RIP1(D, E, A, B, C, WL12, SL12);
+        (void)HOST_c2l(data, l);
+        X(14) = l;
+        RIP1(C, D, E, A, B, WL13, SL13);
+        (void)HOST_c2l(data, l);
+        X(15) = l;
+        RIP1(B, C, D, E, A, WL14, SL14);
+        RIP1(A, B, C, D, E, WL15, SL15);
+
+        RIP2(E, A, B, C, D, WL16, SL16, KL1);
+        RIP2(D, E, A, B, C, WL17, SL17, KL1);
+        RIP2(C, D, E, A, B, WL18, SL18, KL1);
+        RIP2(B, C, D, E, A, WL19, SL19, KL1);
+        RIP2(A, B, C, D, E, WL20, SL20, KL1);
+        RIP2(E, A, B, C, D, WL21, SL21, KL1);
+        RIP2(D, E, A, B, C, WL22, SL22, KL1);
+        RIP2(C, D, E, A, B, WL23, SL23, KL1);
+        RIP2(B, C, D, E, A, WL24, SL24, KL1);
+        RIP2(A, B, C, D, E, WL25, SL25, KL1);
+        RIP2(E, A, B, C, D, WL26, SL26, KL1);
+        RIP2(D, E, A, B, C, WL27, SL27, KL1);
+        RIP2(C, D, E, A, B, WL28, SL28, KL1);
+        RIP2(B, C, D, E, A, WL29, SL29, KL1);
+        RIP2(A, B, C, D, E, WL30, SL30, KL1);
+        RIP2(E, A, B, C, D, WL31, SL31, KL1);
+
+        RIP3(D, E, A, B, C, WL32, SL32, KL2);
+        RIP3(C, D, E, A, B, WL33, SL33, KL2);
+        RIP3(B, C, D, E, A, WL34, SL34, KL2);
+        RIP3(A, B, C, D, E, WL35, SL35, KL2);
+        RIP3(E, A, B, C, D, WL36, SL36, KL2);
+        RIP3(D, E, A, B, C, WL37, SL37, KL2);
+        RIP3(C, D, E, A, B, WL38, SL38, KL2);
+        RIP3(B, C, D, E, A, WL39, SL39, KL2);
+        RIP3(A, B, C, D, E, WL40, SL40, KL2);
+        RIP3(E, A, B, C, D, WL41, SL41, KL2);
+        RIP3(D, E, A, B, C, WL42, SL42, KL2);
+        RIP3(C, D, E, A, B, WL43, SL43, KL2);
+        RIP3(B, C, D, E, A, WL44, SL44, KL2);
+        RIP3(A, B, C, D, E, WL45, SL45, KL2);
+        RIP3(E, A, B, C, D, WL46, SL46, KL2);
+        RIP3(D, E, A, B, C, WL47, SL47, KL2);
+
+        RIP4(C, D, E, A, B, WL48, SL48, KL3);
+        RIP4(B, C, D, E, A, WL49, SL49, KL3);
+        RIP4(A, B, C, D, E, WL50, SL50, KL3);
+        RIP4(E, A, B, C, D, WL51, SL51, KL3);
+        RIP4(D, E, A, B, C, WL52, SL52, KL3);
+        RIP4(C, D, E, A, B, WL53, SL53, KL3);
+        RIP4(B, C, D, E, A, WL54, SL54, KL3);
+        RIP4(A, B, C, D, E, WL55, SL55, KL3);
+        RIP4(E, A, B, C, D, WL56, SL56, KL3);
+        RIP4(D, E, A, B, C, WL57, SL57, KL3);
+        RIP4(C, D, E, A, B, WL58, SL58, KL3);
+        RIP4(B, C, D, E, A, WL59, SL59, KL3);
+        RIP4(A, B, C, D, E, WL60, SL60, KL3);
+        RIP4(E, A, B, C, D, WL61, SL61, KL3);
+        RIP4(D, E, A, B, C, WL62, SL62, KL3);
+        RIP4(C, D, E, A, B, WL63, SL63, KL3);
+
+        RIP5(B, C, D, E, A, WL64, SL64, KL4);
+        RIP5(A, B, C, D, E, WL65, SL65, KL4);
+        RIP5(E, A, B, C, D, WL66, SL66, KL4);
+        RIP5(D, E, A, B, C, WL67, SL67, KL4);
+        RIP5(C, D, E, A, B, WL68, SL68, KL4);
+        RIP5(B, C, D, E, A, WL69, SL69, KL4);
+        RIP5(A, B, C, D, E, WL70, SL70, KL4);
+        RIP5(E, A, B, C, D, WL71, SL71, KL4);
+        RIP5(D, E, A, B, C, WL72, SL72, KL4);
+        RIP5(C, D, E, A, B, WL73, SL73, KL4);
+        RIP5(B, C, D, E, A, WL74, SL74, KL4);
+        RIP5(A, B, C, D, E, WL75, SL75, KL4);
+        RIP5(E, A, B, C, D, WL76, SL76, KL4);
+        RIP5(D, E, A, B, C, WL77, SL77, KL4);
+        RIP5(C, D, E, A, B, WL78, SL78, KL4);
+        RIP5(B, C, D, E, A, WL79, SL79, KL4);
+
+        a = A;
+        b = B;
+        c = C;
+        d = D;
+        e = E;
+        /* Do other half */
+        A = ctx->A;
+        B = ctx->B;
+        C = ctx->C;
+        D = ctx->D;
+        E = ctx->E;
+
+        RIP5(A, B, C, D, E, WR00, SR00, KR0);
+        RIP5(E, A, B, C, D, WR01, SR01, KR0);
+        RIP5(D, E, A, B, C, WR02, SR02, KR0);
+        RIP5(C, D, E, A, B, WR03, SR03, KR0);
+        RIP5(B, C, D, E, A, WR04, SR04, KR0);
+        RIP5(A, B, C, D, E, WR05, SR05, KR0);
+        RIP5(E, A, B, C, D, WR06, SR06, KR0);
+        RIP5(D, E, A, B, C, WR07, SR07, KR0);
+        RIP5(C, D, E, A, B, WR08, SR08, KR0);
+        RIP5(B, C, D, E, A, WR09, SR09, KR0);
+        RIP5(A, B, C, D, E, WR10, SR10, KR0);
+        RIP5(E, A, B, C, D, WR11, SR11, KR0);
+        RIP5(D, E, A, B, C, WR12, SR12, KR0);
+        RIP5(C, D, E, A, B, WR13, SR13, KR0);
+        RIP5(B, C, D, E, A, WR14, SR14, KR0);
+        RIP5(A, B, C, D, E, WR15, SR15, KR0);
+
+        RIP4(E, A, B, C, D, WR16, SR16, KR1);
+        RIP4(D, E, A, B, C, WR17, SR17, KR1);
+        RIP4(C, D, E, A, B, WR18, SR18, KR1);
+        RIP4(B, C, D, E, A, WR19, SR19, KR1);
+        RIP4(A, B, C, D, E, WR20, SR20, KR1);
+        RIP4(E, A, B, C, D, WR21, SR21, KR1);
+        RIP4(D, E, A, B, C, WR22, SR22, KR1);
+        RIP4(C, D, E, A, B, WR23, SR23, KR1);
+        RIP4(B, C, D, E, A, WR24, SR24, KR1);
+        RIP4(A, B, C, D, E, WR25, SR25, KR1);
+        RIP4(E, A, B, C, D, WR26, SR26, KR1);
+        RIP4(D, E, A, B, C, WR27, SR27, KR1);
+        RIP4(C, D, E, A, B, WR28, SR28, KR1);
+        RIP4(B, C, D, E, A, WR29, SR29, KR1);
+        RIP4(A, B, C, D, E, WR30, SR30, KR1);
+        RIP4(E, A, B, C, D, WR31, SR31, KR1);
+
+        RIP3(D, E, A, B, C, WR32, SR32, KR2);
+        RIP3(C, D, E, A, B, WR33, SR33, KR2);
+        RIP3(B, C, D, E, A, WR34, SR34, KR2);
+        RIP3(A, B, C, D, E, WR35, SR35, KR2);
+        RIP3(E, A, B, C, D, WR36, SR36, KR2);
+        RIP3(D, E, A, B, C, WR37, SR37, KR2);
+        RIP3(C, D, E, A, B, WR38, SR38, KR2);
+        RIP3(B, C, D, E, A, WR39, SR39, KR2);
+        RIP3(A, B, C, D, E, WR40, SR40, KR2);
+        RIP3(E, A, B, C, D, WR41, SR41, KR2);
+        RIP3(D, E, A, B, C, WR42, SR42, KR2);
+        RIP3(C, D, E, A, B, WR43, SR43, KR2);
+        RIP3(B, C, D, E, A, WR44, SR44, KR2);
+        RIP3(A, B, C, D, E, WR45, SR45, KR2);
+        RIP3(E, A, B, C, D, WR46, SR46, KR2);
+        RIP3(D, E, A, B, C, WR47, SR47, KR2);
+
+        RIP2(C, D, E, A, B, WR48, SR48, KR3);
+        RIP2(B, C, D, E, A, WR49, SR49, KR3);
+        RIP2(A, B, C, D, E, WR50, SR50, KR3);
+        RIP2(E, A, B, C, D, WR51, SR51, KR3);
+        RIP2(D, E, A, B, C, WR52, SR52, KR3);
+        RIP2(C, D, E, A, B, WR53, SR53, KR3);
+        RIP2(B, C, D, E, A, WR54, SR54, KR3);
+        RIP2(A, B, C, D, E, WR55, SR55, KR3);
+        RIP2(E, A, B, C, D, WR56, SR56, KR3);
+        RIP2(D, E, A, B, C, WR57, SR57, KR3);
+        RIP2(C, D, E, A, B, WR58, SR58, KR3);
+        RIP2(B, C, D, E, A, WR59, SR59, KR3);
+        RIP2(A, B, C, D, E, WR60, SR60, KR3);
+        RIP2(E, A, B, C, D, WR61, SR61, KR3);
+        RIP2(D, E, A, B, C, WR62, SR62, KR3);
+        RIP2(C, D, E, A, B, WR63, SR63, KR3);
+
+        RIP1(B, C, D, E, A, WR64, SR64);
+        RIP1(A, B, C, D, E, WR65, SR65);
+        RIP1(E, A, B, C, D, WR66, SR66);
+        RIP1(D, E, A, B, C, WR67, SR67);
+        RIP1(C, D, E, A, B, WR68, SR68);
+        RIP1(B, C, D, E, A, WR69, SR69);
+        RIP1(A, B, C, D, E, WR70, SR70);
+        RIP1(E, A, B, C, D, WR71, SR71);
+        RIP1(D, E, A, B, C, WR72, SR72);
+        RIP1(C, D, E, A, B, WR73, SR73);
+        RIP1(B, C, D, E, A, WR74, SR74);
+        RIP1(A, B, C, D, E, WR75, SR75);
+        RIP1(E, A, B, C, D, WR76, SR76);
+        RIP1(D, E, A, B, C, WR77, SR77);
+        RIP1(C, D, E, A, B, WR78, SR78);
+        RIP1(B, C, D, E, A, WR79, SR79);
+
+        D = ctx->B + c + D;
+        ctx->B = ctx->C + d + E;
+        ctx->C = ctx->D + e + A;
+        ctx->D = ctx->E + a + B;
+        ctx->E = ctx->A + b + C;
+        ctx->A = D;
+
+    }
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/rmd_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/rmd_locl.h
new file mode 100644
index 000000000..f1ae4323c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/rmd_locl.h
@@ -0,0 +1,87 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdlib.h>
+#include <string.h>
+#include <openssl/opensslconf.h>
+#include <openssl/ripemd.h>
+
+/*
+ * DO EXAMINE COMMENTS IN crypto/md5/md5_locl.h & crypto/md5/md5_dgst.c
+ * FOR EXPLANATIONS ON FOLLOWING "CODE."
+ */
+#ifdef RMD160_ASM
+# if defined(__i386) || defined(__i386__) || defined(_M_IX86)
+#  define ripemd160_block_data_order ripemd160_block_asm_data_order
+# endif
+#endif
+
+void ripemd160_block_data_order(RIPEMD160_CTX *c, const void *p, size_t num);
+
+#define DATA_ORDER_IS_LITTLE_ENDIAN
+
+#define HASH_LONG               RIPEMD160_LONG
+#define HASH_CTX                RIPEMD160_CTX
+#define HASH_CBLOCK             RIPEMD160_CBLOCK
+#define HASH_UPDATE             RIPEMD160_Update
+#define HASH_TRANSFORM          RIPEMD160_Transform
+#define HASH_FINAL              RIPEMD160_Final
+#define HASH_MAKE_STRING(c,s)   do {    \
+        unsigned long ll;               \
+        ll=(c)->A; (void)HOST_l2c(ll,(s));      \
+        ll=(c)->B; (void)HOST_l2c(ll,(s));      \
+        ll=(c)->C; (void)HOST_l2c(ll,(s));      \
+        ll=(c)->D; (void)HOST_l2c(ll,(s));      \
+        ll=(c)->E; (void)HOST_l2c(ll,(s));      \
+        } while (0)
+#define HASH_BLOCK_DATA_ORDER   ripemd160_block_data_order
+
+#include "internal/md32_common.h"
+
+/*
+ * Transformed F2 and F4 are courtesy of Wei Dai
+ */
+#define F1(x,y,z)       ((x) ^ (y) ^ (z))
+#define F2(x,y,z)       ((((y) ^ (z)) & (x)) ^ (z))
+#define F3(x,y,z)       (((~(y)) | (x)) ^ (z))
+#define F4(x,y,z)       ((((x) ^ (y)) & (z)) ^ (y))
+#define F5(x,y,z)       (((~(z)) | (y)) ^ (x))
+
+#define RIPEMD160_A     0x67452301L
+#define RIPEMD160_B     0xEFCDAB89L
+#define RIPEMD160_C     0x98BADCFEL
+#define RIPEMD160_D     0x10325476L
+#define RIPEMD160_E     0xC3D2E1F0L
+
+#include "rmdconst.h"
+
+#define RIP1(a,b,c,d,e,w,s) { \
+        a+=F1(b,c,d)+X(w); \
+        a=ROTATE(a,s)+e; \
+        c=ROTATE(c,10); }
+
+#define RIP2(a,b,c,d,e,w,s,K) { \
+        a+=F2(b,c,d)+X(w)+K; \
+        a=ROTATE(a,s)+e; \
+        c=ROTATE(c,10); }
+
+#define RIP3(a,b,c,d,e,w,s,K) { \
+        a+=F3(b,c,d)+X(w)+K; \
+        a=ROTATE(a,s)+e; \
+        c=ROTATE(c,10); }
+
+#define RIP4(a,b,c,d,e,w,s,K) { \
+        a+=F4(b,c,d)+X(w)+K; \
+        a=ROTATE(a,s)+e; \
+        c=ROTATE(c,10); }
+
+#define RIP5(a,b,c,d,e,w,s,K) { \
+        a+=F5(b,c,d)+X(w)+K; \
+        a=ROTATE(a,s)+e; \
+        c=ROTATE(c,10); }
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/rmd_one.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/rmd_one.c
new file mode 100644
index 000000000..cc01f15c7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/rmd_one.c
@@ -0,0 +1,28 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include <openssl/ripemd.h>
+#include <openssl/crypto.h>
+
+unsigned char *RIPEMD160(const unsigned char *d, size_t n, unsigned char *md)
+{
+    RIPEMD160_CTX c;
+    static unsigned char m[RIPEMD160_DIGEST_LENGTH];
+
+    if (md == NULL)
+        md = m;
+    if (!RIPEMD160_Init(&c))
+        return NULL;
+    RIPEMD160_Update(&c, d, n);
+    RIPEMD160_Final(md, &c);
+    OPENSSL_cleanse(&c, sizeof(c)); /* security consideration */
+    return md;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/rmdconst.h b/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/rmdconst.h
new file mode 100644
index 000000000..b81013239
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ripemd/rmdconst.h
@@ -0,0 +1,350 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#define KL0 0x00000000L
+#define KL1 0x5A827999L
+#define KL2 0x6ED9EBA1L
+#define KL3 0x8F1BBCDCL
+#define KL4 0xA953FD4EL
+
+#define KR0 0x50A28BE6L
+#define KR1 0x5C4DD124L
+#define KR2 0x6D703EF3L
+#define KR3 0x7A6D76E9L
+#define KR4 0x00000000L
+
+#define WL00  0
+#define SL00 11
+#define WL01  1
+#define SL01 14
+#define WL02  2
+#define SL02 15
+#define WL03  3
+#define SL03 12
+#define WL04  4
+#define SL04  5
+#define WL05  5
+#define SL05  8
+#define WL06  6
+#define SL06  7
+#define WL07  7
+#define SL07  9
+#define WL08  8
+#define SL08 11
+#define WL09  9
+#define SL09 13
+#define WL10 10
+#define SL10 14
+#define WL11 11
+#define SL11 15
+#define WL12 12
+#define SL12  6
+#define WL13 13
+#define SL13  7
+#define WL14 14
+#define SL14  9
+#define WL15 15
+#define SL15  8
+
+#define WL16  7
+#define SL16  7
+#define WL17  4
+#define SL17  6
+#define WL18 13
+#define SL18  8
+#define WL19  1
+#define SL19 13
+#define WL20 10
+#define SL20 11
+#define WL21  6
+#define SL21  9
+#define WL22 15
+#define SL22  7
+#define WL23  3
+#define SL23 15
+#define WL24 12
+#define SL24  7
+#define WL25  0
+#define SL25 12
+#define WL26  9
+#define SL26 15
+#define WL27  5
+#define SL27  9
+#define WL28  2
+#define SL28 11
+#define WL29 14
+#define SL29  7
+#define WL30 11
+#define SL30 13
+#define WL31  8
+#define SL31 12
+
+#define WL32  3
+#define SL32 11
+#define WL33 10
+#define SL33 13
+#define WL34 14
+#define SL34  6
+#define WL35  4
+#define SL35  7
+#define WL36  9
+#define SL36 14
+#define WL37 15
+#define SL37  9
+#define WL38  8
+#define SL38 13
+#define WL39  1
+#define SL39 15
+#define WL40  2
+#define SL40 14
+#define WL41  7
+#define SL41  8
+#define WL42  0
+#define SL42 13
+#define WL43  6
+#define SL43  6
+#define WL44 13
+#define SL44  5
+#define WL45 11
+#define SL45 12
+#define WL46  5
+#define SL46  7
+#define WL47 12
+#define SL47  5
+
+#define WL48  1
+#define SL48 11
+#define WL49  9
+#define SL49 12
+#define WL50 11
+#define SL50 14
+#define WL51 10
+#define SL51 15
+#define WL52  0
+#define SL52 14
+#define WL53  8
+#define SL53 15
+#define WL54 12
+#define SL54  9
+#define WL55  4
+#define SL55  8
+#define WL56 13
+#define SL56  9
+#define WL57  3
+#define SL57 14
+#define WL58  7
+#define SL58  5
+#define WL59 15
+#define SL59  6
+#define WL60 14
+#define SL60  8
+#define WL61  5
+#define SL61  6
+#define WL62  6
+#define SL62  5
+#define WL63  2
+#define SL63 12
+
+#define WL64  4
+#define SL64  9
+#define WL65  0
+#define SL65 15
+#define WL66  5
+#define SL66  5
+#define WL67  9
+#define SL67 11
+#define WL68  7
+#define SL68  6
+#define WL69 12
+#define SL69  8
+#define WL70  2
+#define SL70 13
+#define WL71 10
+#define SL71 12
+#define WL72 14
+#define SL72  5
+#define WL73  1
+#define SL73 12
+#define WL74  3
+#define SL74 13
+#define WL75  8
+#define SL75 14
+#define WL76 11
+#define SL76 11
+#define WL77  6
+#define SL77  8
+#define WL78 15
+#define SL78  5
+#define WL79 13
+#define SL79  6
+
+#define WR00  5
+#define SR00  8
+#define WR01 14
+#define SR01  9
+#define WR02  7
+#define SR02  9
+#define WR03  0
+#define SR03 11
+#define WR04  9
+#define SR04 13
+#define WR05  2
+#define SR05 15
+#define WR06 11
+#define SR06 15
+#define WR07  4
+#define SR07  5
+#define WR08 13
+#define SR08  7
+#define WR09  6
+#define SR09  7
+#define WR10 15
+#define SR10  8
+#define WR11  8
+#define SR11 11
+#define WR12  1
+#define SR12 14
+#define WR13 10
+#define SR13 14
+#define WR14  3
+#define SR14 12
+#define WR15 12
+#define SR15  6
+
+#define WR16  6
+#define SR16  9
+#define WR17 11
+#define SR17 13
+#define WR18  3
+#define SR18 15
+#define WR19  7
+#define SR19  7
+#define WR20  0
+#define SR20 12
+#define WR21 13
+#define SR21  8
+#define WR22  5
+#define SR22  9
+#define WR23 10
+#define SR23 11
+#define WR24 14
+#define SR24  7
+#define WR25 15
+#define SR25  7
+#define WR26  8
+#define SR26 12
+#define WR27 12
+#define SR27  7
+#define WR28  4
+#define SR28  6
+#define WR29  9
+#define SR29 15
+#define WR30  1
+#define SR30 13
+#define WR31  2
+#define SR31 11
+
+#define WR32 15
+#define SR32  9
+#define WR33  5
+#define SR33  7
+#define WR34  1
+#define SR34 15
+#define WR35  3
+#define SR35 11
+#define WR36  7
+#define SR36  8
+#define WR37 14
+#define SR37  6
+#define WR38  6
+#define SR38  6
+#define WR39  9
+#define SR39 14
+#define WR40 11
+#define SR40 12
+#define WR41  8
+#define SR41 13
+#define WR42 12
+#define SR42  5
+#define WR43  2
+#define SR43 14
+#define WR44 10
+#define SR44 13
+#define WR45  0
+#define SR45 13
+#define WR46  4
+#define SR46  7
+#define WR47 13
+#define SR47  5
+
+#define WR48  8
+#define SR48 15
+#define WR49  6
+#define SR49  5
+#define WR50  4
+#define SR50  8
+#define WR51  1
+#define SR51 11
+#define WR52  3
+#define SR52 14
+#define WR53 11
+#define SR53 14
+#define WR54 15
+#define SR54  6
+#define WR55  0
+#define SR55 14
+#define WR56  5
+#define SR56  6
+#define WR57 12
+#define SR57  9
+#define WR58  2
+#define SR58 12
+#define WR59 13
+#define SR59  9
+#define WR60  9
+#define SR60 12
+#define WR61  7
+#define SR61  5
+#define WR62 10
+#define SR62 15
+#define WR63 14
+#define SR63  8
+
+#define WR64 12
+#define SR64  8
+#define WR65 15
+#define SR65  5
+#define WR66 10
+#define SR66 12
+#define WR67  4
+#define SR67  9
+#define WR68  1
+#define SR68 12
+#define WR69  5
+#define SR69  5
+#define WR70  8
+#define SR70 14
+#define WR71  7
+#define SR71  6
+#define WR72  6
+#define SR72  8
+#define WR73  2
+#define SR73 13
+#define WR74 13
+#define SR74  6
+#define WR75 14
+#define SR75  5
+#define WR76  0
+#define SR76 15
+#define WR77  3
+#define SR77 13
+#define WR78  9
+#define SR78 11
+#define WR79 11
+#define SR79 11
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/build.info
new file mode 100644
index 000000000..87f924922
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/build.info
@@ -0,0 +1,6 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        rsa_ossl.c rsa_gen.c rsa_lib.c rsa_sign.c rsa_saos.c rsa_err.c \
+        rsa_pk1.c rsa_ssl.c rsa_none.c rsa_oaep.c rsa_chk.c \
+        rsa_pss.c rsa_x931.c rsa_asn1.c rsa_depr.c rsa_ameth.c rsa_prn.c \
+        rsa_pmeth.c rsa_crpt.c rsa_x931g.c rsa_meth.c rsa_mp.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_ameth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_ameth.c
new file mode 100644
index 000000000..75debb3e0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_ameth.c
@@ -0,0 +1,1105 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include <openssl/bn.h>
+#include <openssl/cms.h>
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+#include "rsa_locl.h"
+
+#ifndef OPENSSL_NO_CMS
+static int rsa_cms_sign(CMS_SignerInfo *si);
+static int rsa_cms_verify(CMS_SignerInfo *si);
+static int rsa_cms_decrypt(CMS_RecipientInfo *ri);
+static int rsa_cms_encrypt(CMS_RecipientInfo *ri);
+#endif
+
+static RSA_PSS_PARAMS *rsa_pss_decode(const X509_ALGOR *alg);
+
+/* Set any parameters associated with pkey */
+static int rsa_param_encode(const EVP_PKEY *pkey,
+                            ASN1_STRING **pstr, int *pstrtype)
+{
+    const RSA *rsa = pkey->pkey.rsa;
+
+    *pstr = NULL;
+    /* If RSA it's just NULL type */
+    if (pkey->ameth->pkey_id != EVP_PKEY_RSA_PSS) {
+        *pstrtype = V_ASN1_NULL;
+        return 1;
+    }
+    /* If no PSS parameters we omit parameters entirely */
+    if (rsa->pss == NULL) {
+        *pstrtype = V_ASN1_UNDEF;
+        return 1;
+    }
+    /* Encode PSS parameters */
+    if (ASN1_item_pack(rsa->pss, ASN1_ITEM_rptr(RSA_PSS_PARAMS), pstr) == NULL)
+        return 0;
+
+    *pstrtype = V_ASN1_SEQUENCE;
+    return 1;
+}
+/* Decode any parameters and set them in RSA structure */
+static int rsa_param_decode(RSA *rsa, const X509_ALGOR *alg)
+{
+    const ASN1_OBJECT *algoid;
+    const void *algp;
+    int algptype;
+
+    X509_ALGOR_get0(&algoid, &algptype, &algp, alg);
+    if (OBJ_obj2nid(algoid) != EVP_PKEY_RSA_PSS)
+        return 1;
+    if (algptype == V_ASN1_UNDEF)
+        return 1;
+    if (algptype != V_ASN1_SEQUENCE) {
+        RSAerr(RSA_F_RSA_PARAM_DECODE, RSA_R_INVALID_PSS_PARAMETERS);
+        return 0;
+    }
+    rsa->pss = rsa_pss_decode(alg);
+    if (rsa->pss == NULL)
+        return 0;
+    return 1;
+}
+
+static int rsa_pub_encode(X509_PUBKEY *pk, const EVP_PKEY *pkey)
+{
+    unsigned char *penc = NULL;
+    int penclen;
+    ASN1_STRING *str;
+    int strtype;
+
+    if (!rsa_param_encode(pkey, &str, &strtype))
+        return 0;
+    penclen = i2d_RSAPublicKey(pkey->pkey.rsa, &penc);
+    if (penclen <= 0)
+        return 0;
+    if (X509_PUBKEY_set0_param(pk, OBJ_nid2obj(pkey->ameth->pkey_id),
+                               strtype, str, penc, penclen))
+        return 1;
+
+    OPENSSL_free(penc);
+    return 0;
+}
+
+static int rsa_pub_decode(EVP_PKEY *pkey, X509_PUBKEY *pubkey)
+{
+    const unsigned char *p;
+    int pklen;
+    X509_ALGOR *alg;
+    RSA *rsa = NULL;
+
+    if (!X509_PUBKEY_get0_param(NULL, &p, &pklen, &alg, pubkey))
+        return 0;
+    if ((rsa = d2i_RSAPublicKey(NULL, &p, pklen)) == NULL) {
+        RSAerr(RSA_F_RSA_PUB_DECODE, ERR_R_RSA_LIB);
+        return 0;
+    }
+    if (!rsa_param_decode(rsa, alg)) {
+        RSA_free(rsa);
+        return 0;
+    }
+    if (!EVP_PKEY_assign(pkey, pkey->ameth->pkey_id, rsa)) {
+        RSA_free(rsa);
+        return 0;
+    }
+    return 1;
+}
+
+static int rsa_pub_cmp(const EVP_PKEY *a, const EVP_PKEY *b)
+{
+    if (BN_cmp(b->pkey.rsa->n, a->pkey.rsa->n) != 0
+        || BN_cmp(b->pkey.rsa->e, a->pkey.rsa->e) != 0)
+        return 0;
+    return 1;
+}
+
+static int old_rsa_priv_decode(EVP_PKEY *pkey,
+                               const unsigned char **pder, int derlen)
+{
+    RSA *rsa;
+
+    if ((rsa = d2i_RSAPrivateKey(NULL, pder, derlen)) == NULL) {
+        RSAerr(RSA_F_OLD_RSA_PRIV_DECODE, ERR_R_RSA_LIB);
+        return 0;
+    }
+    EVP_PKEY_assign(pkey, pkey->ameth->pkey_id, rsa);
+    return 1;
+}
+
+static int old_rsa_priv_encode(const EVP_PKEY *pkey, unsigned char **pder)
+{
+    return i2d_RSAPrivateKey(pkey->pkey.rsa, pder);
+}
+
+static int rsa_priv_encode(PKCS8_PRIV_KEY_INFO *p8, const EVP_PKEY *pkey)
+{
+    unsigned char *rk = NULL;
+    int rklen;
+    ASN1_STRING *str;
+    int strtype;
+
+    if (!rsa_param_encode(pkey, &str, &strtype))
+        return 0;
+    rklen = i2d_RSAPrivateKey(pkey->pkey.rsa, &rk);
+
+    if (rklen <= 0) {
+        RSAerr(RSA_F_RSA_PRIV_ENCODE, ERR_R_MALLOC_FAILURE);
+        ASN1_STRING_free(str);
+        return 0;
+    }
+
+    if (!PKCS8_pkey_set0(p8, OBJ_nid2obj(pkey->ameth->pkey_id), 0,
+                         strtype, str, rk, rklen)) {
+        RSAerr(RSA_F_RSA_PRIV_ENCODE, ERR_R_MALLOC_FAILURE);
+        ASN1_STRING_free(str);
+        return 0;
+    }
+
+    return 1;
+}
+
+static int rsa_priv_decode(EVP_PKEY *pkey, const PKCS8_PRIV_KEY_INFO *p8)
+{
+    const unsigned char *p;
+    RSA *rsa;
+    int pklen;
+    const X509_ALGOR *alg;
+
+    if (!PKCS8_pkey_get0(NULL, &p, &pklen, &alg, p8))
+        return 0;
+    rsa = d2i_RSAPrivateKey(NULL, &p, pklen);
+    if (rsa == NULL) {
+        RSAerr(RSA_F_RSA_PRIV_DECODE, ERR_R_RSA_LIB);
+        return 0;
+    }
+    if (!rsa_param_decode(rsa, alg)) {
+        RSA_free(rsa);
+        return 0;
+    }
+    EVP_PKEY_assign(pkey, pkey->ameth->pkey_id, rsa);
+    return 1;
+}
+
+static int int_rsa_size(const EVP_PKEY *pkey)
+{
+    return RSA_size(pkey->pkey.rsa);
+}
+
+static int rsa_bits(const EVP_PKEY *pkey)
+{
+    return BN_num_bits(pkey->pkey.rsa->n);
+}
+
+static int rsa_security_bits(const EVP_PKEY *pkey)
+{
+    return RSA_security_bits(pkey->pkey.rsa);
+}
+
+static void int_rsa_free(EVP_PKEY *pkey)
+{
+    RSA_free(pkey->pkey.rsa);
+}
+
+static X509_ALGOR *rsa_mgf1_decode(X509_ALGOR *alg)
+{
+    if (OBJ_obj2nid(alg->algorithm) != NID_mgf1)
+        return NULL;
+    return ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(X509_ALGOR),
+                                     alg->parameter);
+}
+
+static int rsa_pss_param_print(BIO *bp, int pss_key, RSA_PSS_PARAMS *pss,
+                               int indent)
+{
+    int rv = 0;
+    X509_ALGOR *maskHash = NULL;
+
+    if (!BIO_indent(bp, indent, 128))
+        goto err;
+    if (pss_key) {
+        if (pss == NULL) {
+            if (BIO_puts(bp, "No PSS parameter restrictions\n") <= 0)
+                return 0;
+            return 1;
+        } else {
+            if (BIO_puts(bp, "PSS parameter restrictions:") <= 0)
+                return 0;
+        }
+    } else if (pss == NULL) {
+        if (BIO_puts(bp,"(INVALID PSS PARAMETERS)\n") <= 0)
+            return 0;
+        return 1;
+    }
+    if (BIO_puts(bp, "\n") <= 0)
+        goto err;
+    if (pss_key)
+        indent += 2;
+    if (!BIO_indent(bp, indent, 128))
+        goto err;
+    if (BIO_puts(bp, "Hash Algorithm: ") <= 0)
+        goto err;
+
+    if (pss->hashAlgorithm) {
+        if (i2a_ASN1_OBJECT(bp, pss->hashAlgorithm->algorithm) <= 0)
+            goto err;
+    } else if (BIO_puts(bp, "sha1 (default)") <= 0) {
+        goto err;
+    }
+
+    if (BIO_puts(bp, "\n") <= 0)
+        goto err;
+
+    if (!BIO_indent(bp, indent, 128))
+        goto err;
+
+    if (BIO_puts(bp, "Mask Algorithm: ") <= 0)
+        goto err;
+    if (pss->maskGenAlgorithm) {
+        if (i2a_ASN1_OBJECT(bp, pss->maskGenAlgorithm->algorithm) <= 0)
+            goto err;
+        if (BIO_puts(bp, " with ") <= 0)
+            goto err;
+        maskHash = rsa_mgf1_decode(pss->maskGenAlgorithm);
+        if (maskHash != NULL) {
+            if (i2a_ASN1_OBJECT(bp, maskHash->algorithm) <= 0)
+                goto err;
+        } else if (BIO_puts(bp, "INVALID") <= 0) {
+            goto err;
+        }
+    } else if (BIO_puts(bp, "mgf1 with sha1 (default)") <= 0) {
+        goto err;
+    }
+    BIO_puts(bp, "\n");
+
+    if (!BIO_indent(bp, indent, 128))
+        goto err;
+    if (BIO_printf(bp, "%s Salt Length: 0x", pss_key ? "Minimum" : "") <= 0)
+        goto err;
+    if (pss->saltLength) {
+        if (i2a_ASN1_INTEGER(bp, pss->saltLength) <= 0)
+            goto err;
+    } else if (BIO_puts(bp, "14 (default)") <= 0) {
+        goto err;
+    }
+    BIO_puts(bp, "\n");
+
+    if (!BIO_indent(bp, indent, 128))
+        goto err;
+    if (BIO_puts(bp, "Trailer Field: 0x") <= 0)
+        goto err;
+    if (pss->trailerField) {
+        if (i2a_ASN1_INTEGER(bp, pss->trailerField) <= 0)
+            goto err;
+    } else if (BIO_puts(bp, "BC (default)") <= 0) {
+        goto err;
+    }
+    BIO_puts(bp, "\n");
+
+    rv = 1;
+
+ err:
+    X509_ALGOR_free(maskHash);
+    return rv;
+
+}
+
+static int pkey_rsa_print(BIO *bp, const EVP_PKEY *pkey, int off, int priv)
+{
+    const RSA *x = pkey->pkey.rsa;
+    char *str;
+    const char *s;
+    int ret = 0, mod_len = 0, ex_primes;
+
+    if (x->n != NULL)
+        mod_len = BN_num_bits(x->n);
+    ex_primes = sk_RSA_PRIME_INFO_num(x->prime_infos);
+
+    if (!BIO_indent(bp, off, 128))
+        goto err;
+
+    if (BIO_printf(bp, "%s ", pkey_is_pss(pkey) ?  "RSA-PSS" : "RSA") <= 0)
+        goto err;
+
+    if (priv && x->d) {
+        if (BIO_printf(bp, "Private-Key: (%d bit, %d primes)\n",
+                       mod_len, ex_primes <= 0 ? 2 : ex_primes + 2) <= 0)
+            goto err;
+        str = "modulus:";
+        s = "publicExponent:";
+    } else {
+        if (BIO_printf(bp, "Public-Key: (%d bit)\n", mod_len) <= 0)
+            goto err;
+        str = "Modulus:";
+        s = "Exponent:";
+    }
+    if (!ASN1_bn_print(bp, str, x->n, NULL, off))
+        goto err;
+    if (!ASN1_bn_print(bp, s, x->e, NULL, off))
+        goto err;
+    if (priv) {
+        int i;
+
+        if (!ASN1_bn_print(bp, "privateExponent:", x->d, NULL, off))
+            goto err;
+        if (!ASN1_bn_print(bp, "prime1:", x->p, NULL, off))
+            goto err;
+        if (!ASN1_bn_print(bp, "prime2:", x->q, NULL, off))
+            goto err;
+        if (!ASN1_bn_print(bp, "exponent1:", x->dmp1, NULL, off))
+            goto err;
+        if (!ASN1_bn_print(bp, "exponent2:", x->dmq1, NULL, off))
+            goto err;
+        if (!ASN1_bn_print(bp, "coefficient:", x->iqmp, NULL, off))
+            goto err;
+        for (i = 0; i < sk_RSA_PRIME_INFO_num(x->prime_infos); i++) {
+            /* print multi-prime info */
+            BIGNUM *bn = NULL;
+            RSA_PRIME_INFO *pinfo;
+            int j;
+
+            pinfo = sk_RSA_PRIME_INFO_value(x->prime_infos, i);
+            for (j = 0; j < 3; j++) {
+                if (!BIO_indent(bp, off, 128))
+                    goto err;
+                switch (j) {
+                case 0:
+                    if (BIO_printf(bp, "prime%d:", i + 3) <= 0)
+                        goto err;
+                    bn = pinfo->r;
+                    break;
+                case 1:
+                    if (BIO_printf(bp, "exponent%d:", i + 3) <= 0)
+                        goto err;
+                    bn = pinfo->d;
+                    break;
+                case 2:
+                    if (BIO_printf(bp, "coefficient%d:", i + 3) <= 0)
+                        goto err;
+                    bn = pinfo->t;
+                    break;
+                default:
+                    break;
+                }
+                if (!ASN1_bn_print(bp, "", bn, NULL, off))
+                    goto err;
+            }
+        }
+    }
+    if (pkey_is_pss(pkey) && !rsa_pss_param_print(bp, 1, x->pss, off))
+        goto err;
+    ret = 1;
+ err:
+    return ret;
+}
+
+static int rsa_pub_print(BIO *bp, const EVP_PKEY *pkey, int indent,
+                         ASN1_PCTX *ctx)
+{
+    return pkey_rsa_print(bp, pkey, indent, 0);
+}
+
+static int rsa_priv_print(BIO *bp, const EVP_PKEY *pkey, int indent,
+                          ASN1_PCTX *ctx)
+{
+    return pkey_rsa_print(bp, pkey, indent, 1);
+}
+
+static RSA_PSS_PARAMS *rsa_pss_decode(const X509_ALGOR *alg)
+{
+    RSA_PSS_PARAMS *pss;
+
+    pss = ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(RSA_PSS_PARAMS),
+                                    alg->parameter);
+
+    if (pss == NULL)
+        return NULL;
+
+    if (pss->maskGenAlgorithm != NULL) {
+        pss->maskHash = rsa_mgf1_decode(pss->maskGenAlgorithm);
+        if (pss->maskHash == NULL) {
+            RSA_PSS_PARAMS_free(pss);
+            return NULL;
+        }
+    }
+
+    return pss;
+}
+
+static int rsa_sig_print(BIO *bp, const X509_ALGOR *sigalg,
+                         const ASN1_STRING *sig, int indent, ASN1_PCTX *pctx)
+{
+    if (OBJ_obj2nid(sigalg->algorithm) == EVP_PKEY_RSA_PSS) {
+        int rv;
+        RSA_PSS_PARAMS *pss = rsa_pss_decode(sigalg);
+
+        rv = rsa_pss_param_print(bp, 0, pss, indent);
+        RSA_PSS_PARAMS_free(pss);
+        if (!rv)
+            return 0;
+    } else if (!sig && BIO_puts(bp, "\n") <= 0) {
+        return 0;
+    }
+    if (sig)
+        return X509_signature_dump(bp, sig, indent);
+    return 1;
+}
+
+static int rsa_pkey_ctrl(EVP_PKEY *pkey, int op, long arg1, void *arg2)
+{
+    X509_ALGOR *alg = NULL;
+
+    switch (op) {
+
+    case ASN1_PKEY_CTRL_PKCS7_SIGN:
+        if (arg1 == 0)
+            PKCS7_SIGNER_INFO_get0_algs(arg2, NULL, NULL, &alg);
+        break;
+
+    case ASN1_PKEY_CTRL_PKCS7_ENCRYPT:
+        if (pkey_is_pss(pkey))
+            return -2;
+        if (arg1 == 0)
+            PKCS7_RECIP_INFO_get0_alg(arg2, &alg);
+        break;
+#ifndef OPENSSL_NO_CMS
+    case ASN1_PKEY_CTRL_CMS_SIGN:
+        if (arg1 == 0)
+            return rsa_cms_sign(arg2);
+        else if (arg1 == 1)
+            return rsa_cms_verify(arg2);
+        break;
+
+    case ASN1_PKEY_CTRL_CMS_ENVELOPE:
+        if (pkey_is_pss(pkey))
+            return -2;
+        if (arg1 == 0)
+            return rsa_cms_encrypt(arg2);
+        else if (arg1 == 1)
+            return rsa_cms_decrypt(arg2);
+        break;
+
+    case ASN1_PKEY_CTRL_CMS_RI_TYPE:
+        if (pkey_is_pss(pkey))
+            return -2;
+        *(int *)arg2 = CMS_RECIPINFO_TRANS;
+        return 1;
+#endif
+
+    case ASN1_PKEY_CTRL_DEFAULT_MD_NID:
+        *(int *)arg2 = NID_sha256;
+        return 1;
+
+    default:
+        return -2;
+
+    }
+
+    if (alg)
+        X509_ALGOR_set0(alg, OBJ_nid2obj(NID_rsaEncryption), V_ASN1_NULL, 0);
+
+    return 1;
+
+}
+
+/* allocate and set algorithm ID from EVP_MD, default SHA1 */
+static int rsa_md_to_algor(X509_ALGOR **palg, const EVP_MD *md)
+{
+    if (md == NULL || EVP_MD_type(md) == NID_sha1)
+        return 1;
+    *palg = X509_ALGOR_new();
+    if (*palg == NULL)
+        return 0;
+    X509_ALGOR_set_md(*palg, md);
+    return 1;
+}
+
+/* Allocate and set MGF1 algorithm ID from EVP_MD */
+static int rsa_md_to_mgf1(X509_ALGOR **palg, const EVP_MD *mgf1md)
+{
+    X509_ALGOR *algtmp = NULL;
+    ASN1_STRING *stmp = NULL;
+
+    *palg = NULL;
+    if (mgf1md == NULL || EVP_MD_type(mgf1md) == NID_sha1)
+        return 1;
+    /* need to embed algorithm ID inside another */
+    if (!rsa_md_to_algor(&algtmp, mgf1md))
+        goto err;
+    if (ASN1_item_pack(algtmp, ASN1_ITEM_rptr(X509_ALGOR), &stmp) == NULL)
+         goto err;
+    *palg = X509_ALGOR_new();
+    if (*palg == NULL)
+        goto err;
+    X509_ALGOR_set0(*palg, OBJ_nid2obj(NID_mgf1), V_ASN1_SEQUENCE, stmp);
+    stmp = NULL;
+ err:
+    ASN1_STRING_free(stmp);
+    X509_ALGOR_free(algtmp);
+    if (*palg)
+        return 1;
+    return 0;
+}
+
+/* convert algorithm ID to EVP_MD, default SHA1 */
+static const EVP_MD *rsa_algor_to_md(X509_ALGOR *alg)
+{
+    const EVP_MD *md;
+
+    if (!alg)
+        return EVP_sha1();
+    md = EVP_get_digestbyobj(alg->algorithm);
+    if (md == NULL)
+        RSAerr(RSA_F_RSA_ALGOR_TO_MD, RSA_R_UNKNOWN_DIGEST);
+    return md;
+}
+
+/*
+ * Convert EVP_PKEY_CTX in PSS mode into corresponding algorithm parameter,
+ * suitable for setting an AlgorithmIdentifier.
+ */
+
+static RSA_PSS_PARAMS *rsa_ctx_to_pss(EVP_PKEY_CTX *pkctx)
+{
+    const EVP_MD *sigmd, *mgf1md;
+    EVP_PKEY *pk = EVP_PKEY_CTX_get0_pkey(pkctx);
+    int saltlen;
+
+    if (EVP_PKEY_CTX_get_signature_md(pkctx, &sigmd) <= 0)
+        return NULL;
+    if (EVP_PKEY_CTX_get_rsa_mgf1_md(pkctx, &mgf1md) <= 0)
+        return NULL;
+    if (!EVP_PKEY_CTX_get_rsa_pss_saltlen(pkctx, &saltlen))
+        return NULL;
+    if (saltlen == -1) {
+        saltlen = EVP_MD_size(sigmd);
+    } else if (saltlen == -2) {
+        saltlen = EVP_PKEY_size(pk) - EVP_MD_size(sigmd) - 2;
+        if ((EVP_PKEY_bits(pk) & 0x7) == 1)
+            saltlen--;
+    }
+
+    return rsa_pss_params_create(sigmd, mgf1md, saltlen);
+}
+
+RSA_PSS_PARAMS *rsa_pss_params_create(const EVP_MD *sigmd,
+                                      const EVP_MD *mgf1md, int saltlen)
+{
+    RSA_PSS_PARAMS *pss = RSA_PSS_PARAMS_new();
+
+    if (pss == NULL)
+        goto err;
+    if (saltlen != 20) {
+        pss->saltLength = ASN1_INTEGER_new();
+        if (pss->saltLength == NULL)
+            goto err;
+        if (!ASN1_INTEGER_set(pss->saltLength, saltlen))
+            goto err;
+    }
+    if (!rsa_md_to_algor(&pss->hashAlgorithm, sigmd))
+        goto err;
+    if (mgf1md == NULL)
+        mgf1md = sigmd;
+    if (!rsa_md_to_mgf1(&pss->maskGenAlgorithm, mgf1md))
+        goto err;
+    if (!rsa_md_to_algor(&pss->maskHash, mgf1md))
+        goto err;
+    return pss;
+ err:
+    RSA_PSS_PARAMS_free(pss);
+    return NULL;
+}
+
+static ASN1_STRING *rsa_ctx_to_pss_string(EVP_PKEY_CTX *pkctx)
+{
+    RSA_PSS_PARAMS *pss = rsa_ctx_to_pss(pkctx);
+    ASN1_STRING *os;
+
+    if (pss == NULL)
+        return NULL;
+
+    os = ASN1_item_pack(pss, ASN1_ITEM_rptr(RSA_PSS_PARAMS), NULL);
+    RSA_PSS_PARAMS_free(pss);
+    return os;
+}
+
+/*
+ * From PSS AlgorithmIdentifier set public key parameters. If pkey isn't NULL
+ * then the EVP_MD_CTX is setup and initialised. If it is NULL parameters are
+ * passed to pkctx instead.
+ */
+
+static int rsa_pss_to_ctx(EVP_MD_CTX *ctx, EVP_PKEY_CTX *pkctx,
+                          X509_ALGOR *sigalg, EVP_PKEY *pkey)
+{
+    int rv = -1;
+    int saltlen;
+    const EVP_MD *mgf1md = NULL, *md = NULL;
+    RSA_PSS_PARAMS *pss;
+
+    /* Sanity check: make sure it is PSS */
+    if (OBJ_obj2nid(sigalg->algorithm) != EVP_PKEY_RSA_PSS) {
+        RSAerr(RSA_F_RSA_PSS_TO_CTX, RSA_R_UNSUPPORTED_SIGNATURE_TYPE);
+        return -1;
+    }
+    /* Decode PSS parameters */
+    pss = rsa_pss_decode(sigalg);
+
+    if (!rsa_pss_get_param(pss, &md, &mgf1md, &saltlen)) {
+        RSAerr(RSA_F_RSA_PSS_TO_CTX, RSA_R_INVALID_PSS_PARAMETERS);
+        goto err;
+    }
+
+    /* We have all parameters now set up context */
+    if (pkey) {
+        if (!EVP_DigestVerifyInit(ctx, &pkctx, md, NULL, pkey))
+            goto err;
+    } else {
+        const EVP_MD *checkmd;
+        if (EVP_PKEY_CTX_get_signature_md(pkctx, &checkmd) <= 0)
+            goto err;
+        if (EVP_MD_type(md) != EVP_MD_type(checkmd)) {
+            RSAerr(RSA_F_RSA_PSS_TO_CTX, RSA_R_DIGEST_DOES_NOT_MATCH);
+            goto err;
+        }
+    }
+
+    if (EVP_PKEY_CTX_set_rsa_padding(pkctx, RSA_PKCS1_PSS_PADDING) <= 0)
+        goto err;
+
+    if (EVP_PKEY_CTX_set_rsa_pss_saltlen(pkctx, saltlen) <= 0)
+        goto err;
+
+    if (EVP_PKEY_CTX_set_rsa_mgf1_md(pkctx, mgf1md) <= 0)
+        goto err;
+    /* Carry on */
+    rv = 1;
+
+ err:
+    RSA_PSS_PARAMS_free(pss);
+    return rv;
+}
+
+int rsa_pss_get_param(const RSA_PSS_PARAMS *pss, const EVP_MD **pmd,
+                      const EVP_MD **pmgf1md, int *psaltlen)
+{
+    if (pss == NULL)
+        return 0;
+    *pmd = rsa_algor_to_md(pss->hashAlgorithm);
+    if (*pmd == NULL)
+        return 0;
+    *pmgf1md = rsa_algor_to_md(pss->maskHash);
+    if (*pmgf1md == NULL)
+        return 0;
+    if (pss->saltLength) {
+        *psaltlen = ASN1_INTEGER_get(pss->saltLength);
+        if (*psaltlen < 0) {
+            RSAerr(RSA_F_RSA_PSS_GET_PARAM, RSA_R_INVALID_SALT_LENGTH);
+            return 0;
+        }
+    } else {
+        *psaltlen = 20;
+    }
+
+    /*
+     * low-level routines support only trailer field 0xbc (value 1) and
+     * PKCS#1 says we should reject any other value anyway.
+     */
+    if (pss->trailerField && ASN1_INTEGER_get(pss->trailerField) != 1) {
+        RSAerr(RSA_F_RSA_PSS_GET_PARAM, RSA_R_INVALID_TRAILER);
+        return 0;
+    }
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_CMS
+static int rsa_cms_verify(CMS_SignerInfo *si)
+{
+    int nid, nid2;
+    X509_ALGOR *alg;
+    EVP_PKEY_CTX *pkctx = CMS_SignerInfo_get0_pkey_ctx(si);
+
+    CMS_SignerInfo_get0_algs(si, NULL, NULL, NULL, &alg);
+    nid = OBJ_obj2nid(alg->algorithm);
+    if (nid == EVP_PKEY_RSA_PSS)
+        return rsa_pss_to_ctx(NULL, pkctx, alg, NULL);
+    /* Only PSS allowed for PSS keys */
+    if (pkey_ctx_is_pss(pkctx)) {
+        RSAerr(RSA_F_RSA_CMS_VERIFY, RSA_R_ILLEGAL_OR_UNSUPPORTED_PADDING_MODE);
+        return 0;
+    }
+    if (nid == NID_rsaEncryption)
+        return 1;
+    /* Workaround for some implementation that use a signature OID */
+    if (OBJ_find_sigid_algs(nid, NULL, &nid2)) {
+        if (nid2 == NID_rsaEncryption)
+            return 1;
+    }
+    return 0;
+}
+#endif
+
+/*
+ * Customised RSA item verification routine. This is called when a signature
+ * is encountered requiring special handling. We currently only handle PSS.
+ */
+
+static int rsa_item_verify(EVP_MD_CTX *ctx, const ASN1_ITEM *it, void *asn,
+                           X509_ALGOR *sigalg, ASN1_BIT_STRING *sig,
+                           EVP_PKEY *pkey)
+{
+    /* Sanity check: make sure it is PSS */
+    if (OBJ_obj2nid(sigalg->algorithm) != EVP_PKEY_RSA_PSS) {
+        RSAerr(RSA_F_RSA_ITEM_VERIFY, RSA_R_UNSUPPORTED_SIGNATURE_TYPE);
+        return -1;
+    }
+    if (rsa_pss_to_ctx(ctx, NULL, sigalg, pkey) > 0) {
+        /* Carry on */
+        return 2;
+    }
+    return -1;
+}
+
+#ifndef OPENSSL_NO_CMS
+static int rsa_cms_sign(CMS_SignerInfo *si)
+{
+    int pad_mode = RSA_PKCS1_PADDING;
+    X509_ALGOR *alg;
+    EVP_PKEY_CTX *pkctx = CMS_SignerInfo_get0_pkey_ctx(si);
+    ASN1_STRING *os = NULL;
+
+    CMS_SignerInfo_get0_algs(si, NULL, NULL, NULL, &alg);
+    if (pkctx) {
+        if (EVP_PKEY_CTX_get_rsa_padding(pkctx, &pad_mode) <= 0)
+            return 0;
+    }
+    if (pad_mode == RSA_PKCS1_PADDING) {
+        X509_ALGOR_set0(alg, OBJ_nid2obj(NID_rsaEncryption), V_ASN1_NULL, 0);
+        return 1;
+    }
+    /* We don't support it */
+    if (pad_mode != RSA_PKCS1_PSS_PADDING)
+        return 0;
+    os = rsa_ctx_to_pss_string(pkctx);
+    if (!os)
+        return 0;
+    X509_ALGOR_set0(alg, OBJ_nid2obj(EVP_PKEY_RSA_PSS), V_ASN1_SEQUENCE, os);
+    return 1;
+}
+#endif
+
+static int rsa_item_sign(EVP_MD_CTX *ctx, const ASN1_ITEM *it, void *asn,
+                         X509_ALGOR *alg1, X509_ALGOR *alg2,
+                         ASN1_BIT_STRING *sig)
+{
+    int pad_mode;
+    EVP_PKEY_CTX *pkctx = EVP_MD_CTX_pkey_ctx(ctx);
+
+    if (EVP_PKEY_CTX_get_rsa_padding(pkctx, &pad_mode) <= 0)
+        return 0;
+    if (pad_mode == RSA_PKCS1_PADDING)
+        return 2;
+    if (pad_mode == RSA_PKCS1_PSS_PADDING) {
+        ASN1_STRING *os1 = NULL;
+        os1 = rsa_ctx_to_pss_string(pkctx);
+        if (!os1)
+            return 0;
+        /* Duplicate parameters if we have to */
+        if (alg2) {
+            ASN1_STRING *os2 = ASN1_STRING_dup(os1);
+            if (!os2) {
+                ASN1_STRING_free(os1);
+                return 0;
+            }
+            X509_ALGOR_set0(alg2, OBJ_nid2obj(EVP_PKEY_RSA_PSS),
+                            V_ASN1_SEQUENCE, os2);
+        }
+        X509_ALGOR_set0(alg1, OBJ_nid2obj(EVP_PKEY_RSA_PSS),
+                        V_ASN1_SEQUENCE, os1);
+        return 3;
+    }
+    return 2;
+}
+
+static int rsa_sig_info_set(X509_SIG_INFO *siginf, const X509_ALGOR *sigalg,
+                            const ASN1_STRING *sig)
+{
+    int rv = 0;
+    int mdnid, saltlen;
+    uint32_t flags;
+    const EVP_MD *mgf1md = NULL, *md = NULL;
+    RSA_PSS_PARAMS *pss;
+
+    /* Sanity check: make sure it is PSS */
+    if (OBJ_obj2nid(sigalg->algorithm) != EVP_PKEY_RSA_PSS)
+        return 0;
+    /* Decode PSS parameters */
+    pss = rsa_pss_decode(sigalg);
+    if (!rsa_pss_get_param(pss, &md, &mgf1md, &saltlen))
+        goto err;
+    mdnid = EVP_MD_type(md);
+    /*
+     * For TLS need SHA256, SHA384 or SHA512, digest and MGF1 digest must
+     * match and salt length must equal digest size
+     */
+    if ((mdnid == NID_sha256 || mdnid == NID_sha384 || mdnid == NID_sha512)
+            && mdnid == EVP_MD_type(mgf1md) && saltlen == EVP_MD_size(md))
+        flags = X509_SIG_INFO_TLS;
+    else
+        flags = 0;
+    /* Note: security bits half number of digest bits */
+    X509_SIG_INFO_set(siginf, mdnid, EVP_PKEY_RSA_PSS, EVP_MD_size(md) * 4,
+                      flags);
+    rv = 1;
+    err:
+    RSA_PSS_PARAMS_free(pss);
+    return rv;
+}
+
+#ifndef OPENSSL_NO_CMS
+static RSA_OAEP_PARAMS *rsa_oaep_decode(const X509_ALGOR *alg)
+{
+    RSA_OAEP_PARAMS *oaep;
+
+    oaep = ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(RSA_OAEP_PARAMS),
+                                     alg->parameter);
+
+    if (oaep == NULL)
+        return NULL;
+
+    if (oaep->maskGenFunc != NULL) {
+        oaep->maskHash = rsa_mgf1_decode(oaep->maskGenFunc);
+        if (oaep->maskHash == NULL) {
+            RSA_OAEP_PARAMS_free(oaep);
+            return NULL;
+        }
+    }
+    return oaep;
+}
+
+static int rsa_cms_decrypt(CMS_RecipientInfo *ri)
+{
+    EVP_PKEY_CTX *pkctx;
+    X509_ALGOR *cmsalg;
+    int nid;
+    int rv = -1;
+    unsigned char *label = NULL;
+    int labellen = 0;
+    const EVP_MD *mgf1md = NULL, *md = NULL;
+    RSA_OAEP_PARAMS *oaep;
+
+    pkctx = CMS_RecipientInfo_get0_pkey_ctx(ri);
+    if (pkctx == NULL)
+        return 0;
+    if (!CMS_RecipientInfo_ktri_get0_algs(ri, NULL, NULL, &cmsalg))
+        return -1;
+    nid = OBJ_obj2nid(cmsalg->algorithm);
+    if (nid == NID_rsaEncryption)
+        return 1;
+    if (nid != NID_rsaesOaep) {
+        RSAerr(RSA_F_RSA_CMS_DECRYPT, RSA_R_UNSUPPORTED_ENCRYPTION_TYPE);
+        return -1;
+    }
+    /* Decode OAEP parameters */
+    oaep = rsa_oaep_decode(cmsalg);
+
+    if (oaep == NULL) {
+        RSAerr(RSA_F_RSA_CMS_DECRYPT, RSA_R_INVALID_OAEP_PARAMETERS);
+        goto err;
+    }
+
+    mgf1md = rsa_algor_to_md(oaep->maskHash);
+    if (mgf1md == NULL)
+        goto err;
+    md = rsa_algor_to_md(oaep->hashFunc);
+    if (md == NULL)
+        goto err;
+
+    if (oaep->pSourceFunc != NULL) {
+        X509_ALGOR *plab = oaep->pSourceFunc;
+
+        if (OBJ_obj2nid(plab->algorithm) != NID_pSpecified) {
+            RSAerr(RSA_F_RSA_CMS_DECRYPT, RSA_R_UNSUPPORTED_LABEL_SOURCE);
+            goto err;
+        }
+        if (plab->parameter->type != V_ASN1_OCTET_STRING) {
+            RSAerr(RSA_F_RSA_CMS_DECRYPT, RSA_R_INVALID_LABEL);
+            goto err;
+        }
+
+        label = plab->parameter->value.octet_string->data;
+        /* Stop label being freed when OAEP parameters are freed */
+        plab->parameter->value.octet_string->data = NULL;
+        labellen = plab->parameter->value.octet_string->length;
+    }
+
+    if (EVP_PKEY_CTX_set_rsa_padding(pkctx, RSA_PKCS1_OAEP_PADDING) <= 0)
+        goto err;
+    if (EVP_PKEY_CTX_set_rsa_oaep_md(pkctx, md) <= 0)
+        goto err;
+    if (EVP_PKEY_CTX_set_rsa_mgf1_md(pkctx, mgf1md) <= 0)
+        goto err;
+    if (EVP_PKEY_CTX_set0_rsa_oaep_label(pkctx, label, labellen) <= 0)
+        goto err;
+    /* Carry on */
+    rv = 1;
+
+ err:
+    RSA_OAEP_PARAMS_free(oaep);
+    return rv;
+}
+
+static int rsa_cms_encrypt(CMS_RecipientInfo *ri)
+{
+    const EVP_MD *md, *mgf1md;
+    RSA_OAEP_PARAMS *oaep = NULL;
+    ASN1_STRING *os = NULL;
+    X509_ALGOR *alg;
+    EVP_PKEY_CTX *pkctx = CMS_RecipientInfo_get0_pkey_ctx(ri);
+    int pad_mode = RSA_PKCS1_PADDING, rv = 0, labellen;
+    unsigned char *label;
+
+    if (CMS_RecipientInfo_ktri_get0_algs(ri, NULL, NULL, &alg) <= 0)
+        return 0;
+    if (pkctx) {
+        if (EVP_PKEY_CTX_get_rsa_padding(pkctx, &pad_mode) <= 0)
+            return 0;
+    }
+    if (pad_mode == RSA_PKCS1_PADDING) {
+        X509_ALGOR_set0(alg, OBJ_nid2obj(NID_rsaEncryption), V_ASN1_NULL, 0);
+        return 1;
+    }
+    /* Not supported */
+    if (pad_mode != RSA_PKCS1_OAEP_PADDING)
+        return 0;
+    if (EVP_PKEY_CTX_get_rsa_oaep_md(pkctx, &md) <= 0)
+        goto err;
+    if (EVP_PKEY_CTX_get_rsa_mgf1_md(pkctx, &mgf1md) <= 0)
+        goto err;
+    labellen = EVP_PKEY_CTX_get0_rsa_oaep_label(pkctx, &label);
+    if (labellen < 0)
+        goto err;
+    oaep = RSA_OAEP_PARAMS_new();
+    if (oaep == NULL)
+        goto err;
+    if (!rsa_md_to_algor(&oaep->hashFunc, md))
+        goto err;
+    if (!rsa_md_to_mgf1(&oaep->maskGenFunc, mgf1md))
+        goto err;
+    if (labellen > 0) {
+        ASN1_OCTET_STRING *los;
+        oaep->pSourceFunc = X509_ALGOR_new();
+        if (oaep->pSourceFunc == NULL)
+            goto err;
+        los = ASN1_OCTET_STRING_new();
+        if (los == NULL)
+            goto err;
+        if (!ASN1_OCTET_STRING_set(los, label, labellen)) {
+            ASN1_OCTET_STRING_free(los);
+            goto err;
+        }
+        X509_ALGOR_set0(oaep->pSourceFunc, OBJ_nid2obj(NID_pSpecified),
+                        V_ASN1_OCTET_STRING, los);
+    }
+    /* create string with pss parameter encoding. */
+    if (!ASN1_item_pack(oaep, ASN1_ITEM_rptr(RSA_OAEP_PARAMS), &os))
+         goto err;
+    X509_ALGOR_set0(alg, OBJ_nid2obj(NID_rsaesOaep), V_ASN1_SEQUENCE, os);
+    os = NULL;
+    rv = 1;
+ err:
+    RSA_OAEP_PARAMS_free(oaep);
+    ASN1_STRING_free(os);
+    return rv;
+}
+#endif
+
+static int rsa_pkey_check(const EVP_PKEY *pkey)
+{
+    return RSA_check_key_ex(pkey->pkey.rsa, NULL);
+}
+
+const EVP_PKEY_ASN1_METHOD rsa_asn1_meths[2] = {
+    {
+     EVP_PKEY_RSA,
+     EVP_PKEY_RSA,
+     ASN1_PKEY_SIGPARAM_NULL,
+
+     "RSA",
+     "OpenSSL RSA method",
+
+     rsa_pub_decode,
+     rsa_pub_encode,
+     rsa_pub_cmp,
+     rsa_pub_print,
+
+     rsa_priv_decode,
+     rsa_priv_encode,
+     rsa_priv_print,
+
+     int_rsa_size,
+     rsa_bits,
+     rsa_security_bits,
+
+     0, 0, 0, 0, 0, 0,
+
+     rsa_sig_print,
+     int_rsa_free,
+     rsa_pkey_ctrl,
+     old_rsa_priv_decode,
+     old_rsa_priv_encode,
+     rsa_item_verify,
+     rsa_item_sign,
+     rsa_sig_info_set,
+     rsa_pkey_check
+    },
+
+    {
+     EVP_PKEY_RSA2,
+     EVP_PKEY_RSA,
+     ASN1_PKEY_ALIAS}
+};
+
+const EVP_PKEY_ASN1_METHOD rsa_pss_asn1_meth = {
+     EVP_PKEY_RSA_PSS,
+     EVP_PKEY_RSA_PSS,
+     ASN1_PKEY_SIGPARAM_NULL,
+
+     "RSA-PSS",
+     "OpenSSL RSA-PSS method",
+
+     rsa_pub_decode,
+     rsa_pub_encode,
+     rsa_pub_cmp,
+     rsa_pub_print,
+
+     rsa_priv_decode,
+     rsa_priv_encode,
+     rsa_priv_print,
+
+     int_rsa_size,
+     rsa_bits,
+     rsa_security_bits,
+
+     0, 0, 0, 0, 0, 0,
+
+     rsa_sig_print,
+     int_rsa_free,
+     rsa_pkey_ctrl,
+     0, 0,
+     rsa_item_verify,
+     rsa_item_sign,
+     0,
+     rsa_pkey_check
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_asn1.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_asn1.c
new file mode 100644
index 000000000..9fe62c82e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_asn1.c
@@ -0,0 +1,121 @@
+/*
+ * Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include <openssl/x509.h>
+#include <openssl/asn1t.h>
+#include "rsa_locl.h"
+
+/*
+ * Override the default free and new methods,
+ * and calculate helper products for multi-prime
+ * RSA keys.
+ */
+static int rsa_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                  void *exarg)
+{
+    if (operation == ASN1_OP_NEW_PRE) {
+        *pval = (ASN1_VALUE *)RSA_new();
+        if (*pval != NULL)
+            return 2;
+        return 0;
+    } else if (operation == ASN1_OP_FREE_PRE) {
+        RSA_free((RSA *)*pval);
+        *pval = NULL;
+        return 2;
+    } else if (operation == ASN1_OP_D2I_POST) {
+        if (((RSA *)*pval)->version != RSA_ASN1_VERSION_MULTI) {
+            /* not a multi-prime key, skip */
+            return 1;
+        }
+        return (rsa_multip_calc_product((RSA *)*pval) == 1) ? 2 : 0;
+    }
+    return 1;
+}
+
+/* Based on definitions in RFC 8017 appendix A.1.2 */
+ASN1_SEQUENCE(RSA_PRIME_INFO) = {
+        ASN1_SIMPLE(RSA_PRIME_INFO, r, CBIGNUM),
+        ASN1_SIMPLE(RSA_PRIME_INFO, d, CBIGNUM),
+        ASN1_SIMPLE(RSA_PRIME_INFO, t, CBIGNUM),
+} ASN1_SEQUENCE_END(RSA_PRIME_INFO)
+
+ASN1_SEQUENCE_cb(RSAPrivateKey, rsa_cb) = {
+        ASN1_EMBED(RSA, version, INT32),
+        ASN1_SIMPLE(RSA, n, BIGNUM),
+        ASN1_SIMPLE(RSA, e, BIGNUM),
+        ASN1_SIMPLE(RSA, d, CBIGNUM),
+        ASN1_SIMPLE(RSA, p, CBIGNUM),
+        ASN1_SIMPLE(RSA, q, CBIGNUM),
+        ASN1_SIMPLE(RSA, dmp1, CBIGNUM),
+        ASN1_SIMPLE(RSA, dmq1, CBIGNUM),
+        ASN1_SIMPLE(RSA, iqmp, CBIGNUM),
+        ASN1_SEQUENCE_OF_OPT(RSA, prime_infos, RSA_PRIME_INFO)
+} ASN1_SEQUENCE_END_cb(RSA, RSAPrivateKey)
+
+
+ASN1_SEQUENCE_cb(RSAPublicKey, rsa_cb) = {
+        ASN1_SIMPLE(RSA, n, BIGNUM),
+        ASN1_SIMPLE(RSA, e, BIGNUM),
+} ASN1_SEQUENCE_END_cb(RSA, RSAPublicKey)
+
+/* Free up maskHash */
+static int rsa_pss_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                      void *exarg)
+{
+    if (operation == ASN1_OP_FREE_PRE) {
+        RSA_PSS_PARAMS *pss = (RSA_PSS_PARAMS *)*pval;
+        X509_ALGOR_free(pss->maskHash);
+    }
+    return 1;
+}
+
+ASN1_SEQUENCE_cb(RSA_PSS_PARAMS, rsa_pss_cb) = {
+        ASN1_EXP_OPT(RSA_PSS_PARAMS, hashAlgorithm, X509_ALGOR,0),
+        ASN1_EXP_OPT(RSA_PSS_PARAMS, maskGenAlgorithm, X509_ALGOR,1),
+        ASN1_EXP_OPT(RSA_PSS_PARAMS, saltLength, ASN1_INTEGER,2),
+        ASN1_EXP_OPT(RSA_PSS_PARAMS, trailerField, ASN1_INTEGER,3)
+} ASN1_SEQUENCE_END_cb(RSA_PSS_PARAMS, RSA_PSS_PARAMS)
+
+IMPLEMENT_ASN1_FUNCTIONS(RSA_PSS_PARAMS)
+
+/* Free up maskHash */
+static int rsa_oaep_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                       void *exarg)
+{
+    if (operation == ASN1_OP_FREE_PRE) {
+        RSA_OAEP_PARAMS *oaep = (RSA_OAEP_PARAMS *)*pval;
+        X509_ALGOR_free(oaep->maskHash);
+    }
+    return 1;
+}
+
+ASN1_SEQUENCE_cb(RSA_OAEP_PARAMS, rsa_oaep_cb) = {
+        ASN1_EXP_OPT(RSA_OAEP_PARAMS, hashFunc, X509_ALGOR, 0),
+        ASN1_EXP_OPT(RSA_OAEP_PARAMS, maskGenFunc, X509_ALGOR, 1),
+        ASN1_EXP_OPT(RSA_OAEP_PARAMS, pSourceFunc, X509_ALGOR, 2),
+} ASN1_SEQUENCE_END_cb(RSA_OAEP_PARAMS, RSA_OAEP_PARAMS)
+
+IMPLEMENT_ASN1_FUNCTIONS(RSA_OAEP_PARAMS)
+
+IMPLEMENT_ASN1_ENCODE_FUNCTIONS_const_fname(RSA, RSAPrivateKey, RSAPrivateKey)
+
+IMPLEMENT_ASN1_ENCODE_FUNCTIONS_const_fname(RSA, RSAPublicKey, RSAPublicKey)
+
+RSA *RSAPublicKey_dup(RSA *rsa)
+{
+    return ASN1_item_dup(ASN1_ITEM_rptr(RSAPublicKey), rsa);
+}
+
+RSA *RSAPrivateKey_dup(RSA *rsa)
+{
+    return ASN1_item_dup(ASN1_ITEM_rptr(RSAPrivateKey), rsa);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_chk.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_chk.c
new file mode 100644
index 000000000..1b69be30c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_chk.c
@@ -0,0 +1,228 @@
+/*
+ * Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/bn.h>
+#include <openssl/err.h>
+#include "rsa_locl.h"
+
+int RSA_check_key(const RSA *key)
+{
+    return RSA_check_key_ex(key, NULL);
+}
+
+int RSA_check_key_ex(const RSA *key, BN_GENCB *cb)
+{
+    BIGNUM *i, *j, *k, *l, *m;
+    BN_CTX *ctx;
+    int ret = 1, ex_primes = 0, idx;
+    RSA_PRIME_INFO *pinfo;
+
+    if (key->p == NULL || key->q == NULL || key->n == NULL
+            || key->e == NULL || key->d == NULL) {
+        RSAerr(RSA_F_RSA_CHECK_KEY_EX, RSA_R_VALUE_MISSING);
+        return 0;
+    }
+
+    /* multi-prime? */
+    if (key->version == RSA_ASN1_VERSION_MULTI) {
+        ex_primes = sk_RSA_PRIME_INFO_num(key->prime_infos);
+        if (ex_primes <= 0
+                || (ex_primes + 2) > rsa_multip_cap(BN_num_bits(key->n))) {
+            RSAerr(RSA_F_RSA_CHECK_KEY_EX, RSA_R_INVALID_MULTI_PRIME_KEY);
+            return 0;
+        }
+    }
+
+    i = BN_new();
+    j = BN_new();
+    k = BN_new();
+    l = BN_new();
+    m = BN_new();
+    ctx = BN_CTX_new();
+    if (i == NULL || j == NULL || k == NULL || l == NULL
+            || m == NULL || ctx == NULL) {
+        ret = -1;
+        RSAerr(RSA_F_RSA_CHECK_KEY_EX, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (BN_is_one(key->e)) {
+        ret = 0;
+        RSAerr(RSA_F_RSA_CHECK_KEY_EX, RSA_R_BAD_E_VALUE);
+    }
+    if (!BN_is_odd(key->e)) {
+        ret = 0;
+        RSAerr(RSA_F_RSA_CHECK_KEY_EX, RSA_R_BAD_E_VALUE);
+    }
+
+    /* p prime? */
+    if (BN_is_prime_ex(key->p, BN_prime_checks, NULL, cb) != 1) {
+        ret = 0;
+        RSAerr(RSA_F_RSA_CHECK_KEY_EX, RSA_R_P_NOT_PRIME);
+    }
+
+    /* q prime? */
+    if (BN_is_prime_ex(key->q, BN_prime_checks, NULL, cb) != 1) {
+        ret = 0;
+        RSAerr(RSA_F_RSA_CHECK_KEY_EX, RSA_R_Q_NOT_PRIME);
+    }
+
+    /* r_i prime? */
+    for (idx = 0; idx < ex_primes; idx++) {
+        pinfo = sk_RSA_PRIME_INFO_value(key->prime_infos, idx);
+        if (BN_is_prime_ex(pinfo->r, BN_prime_checks, NULL, cb) != 1) {
+            ret = 0;
+            RSAerr(RSA_F_RSA_CHECK_KEY_EX, RSA_R_MP_R_NOT_PRIME);
+        }
+    }
+
+    /* n = p*q * r_3...r_i? */
+    if (!BN_mul(i, key->p, key->q, ctx)) {
+        ret = -1;
+        goto err;
+    }
+    for (idx = 0; idx < ex_primes; idx++) {
+        pinfo = sk_RSA_PRIME_INFO_value(key->prime_infos, idx);
+        if (!BN_mul(i, i, pinfo->r, ctx)) {
+            ret = -1;
+            goto err;
+        }
+    }
+    if (BN_cmp(i, key->n) != 0) {
+        ret = 0;
+        if (ex_primes)
+            RSAerr(RSA_F_RSA_CHECK_KEY_EX,
+                   RSA_R_N_DOES_NOT_EQUAL_PRODUCT_OF_PRIMES);
+        else
+            RSAerr(RSA_F_RSA_CHECK_KEY_EX, RSA_R_N_DOES_NOT_EQUAL_P_Q);
+    }
+
+    /* d*e = 1  mod \lambda(n)? */
+    if (!BN_sub(i, key->p, BN_value_one())) {
+        ret = -1;
+        goto err;
+    }
+    if (!BN_sub(j, key->q, BN_value_one())) {
+        ret = -1;
+        goto err;
+    }
+
+    /* now compute k = \lambda(n) = LCM(i, j, r_3 - 1...) */
+    if (!BN_mul(l, i, j, ctx)) {
+        ret = -1;
+        goto err;
+    }
+    if (!BN_gcd(m, i, j, ctx)) {
+        ret = -1;
+        goto err;
+    }
+    for (idx = 0; idx < ex_primes; idx++) {
+        pinfo = sk_RSA_PRIME_INFO_value(key->prime_infos, idx);
+        if (!BN_sub(k, pinfo->r, BN_value_one())) {
+            ret = -1;
+            goto err;
+        }
+        if (!BN_mul(l, l, k, ctx)) {
+            ret = -1;
+            goto err;
+        }
+        if (!BN_gcd(m, m, k, ctx)) {
+            ret = -1;
+            goto err;
+        }
+    }
+    if (!BN_div(k, NULL, l, m, ctx)) { /* remainder is 0 */
+        ret = -1;
+        goto err;
+    }
+    if (!BN_mod_mul(i, key->d, key->e, k, ctx)) {
+        ret = -1;
+        goto err;
+    }
+
+    if (!BN_is_one(i)) {
+        ret = 0;
+        RSAerr(RSA_F_RSA_CHECK_KEY_EX, RSA_R_D_E_NOT_CONGRUENT_TO_1);
+    }
+
+    if (key->dmp1 != NULL && key->dmq1 != NULL && key->iqmp != NULL) {
+        /* dmp1 = d mod (p-1)? */
+        if (!BN_sub(i, key->p, BN_value_one())) {
+            ret = -1;
+            goto err;
+        }
+        if (!BN_mod(j, key->d, i, ctx)) {
+            ret = -1;
+            goto err;
+        }
+        if (BN_cmp(j, key->dmp1) != 0) {
+            ret = 0;
+            RSAerr(RSA_F_RSA_CHECK_KEY_EX, RSA_R_DMP1_NOT_CONGRUENT_TO_D);
+        }
+
+        /* dmq1 = d mod (q-1)? */
+        if (!BN_sub(i, key->q, BN_value_one())) {
+            ret = -1;
+            goto err;
+        }
+        if (!BN_mod(j, key->d, i, ctx)) {
+            ret = -1;
+            goto err;
+        }
+        if (BN_cmp(j, key->dmq1) != 0) {
+            ret = 0;
+            RSAerr(RSA_F_RSA_CHECK_KEY_EX, RSA_R_DMQ1_NOT_CONGRUENT_TO_D);
+        }
+
+        /* iqmp = q^-1 mod p? */
+        if (!BN_mod_inverse(i, key->q, key->p, ctx)) {
+            ret = -1;
+            goto err;
+        }
+        if (BN_cmp(i, key->iqmp) != 0) {
+            ret = 0;
+            RSAerr(RSA_F_RSA_CHECK_KEY_EX, RSA_R_IQMP_NOT_INVERSE_OF_Q);
+        }
+    }
+
+    for (idx = 0; idx < ex_primes; idx++) {
+        pinfo = sk_RSA_PRIME_INFO_value(key->prime_infos, idx);
+        /* d_i = d mod (r_i - 1)? */
+        if (!BN_sub(i, pinfo->r, BN_value_one())) {
+            ret = -1;
+            goto err;
+        }
+        if (!BN_mod(j, key->d, i, ctx)) {
+            ret = -1;
+            goto err;
+        }
+        if (BN_cmp(j, pinfo->d) != 0) {
+            ret = 0;
+            RSAerr(RSA_F_RSA_CHECK_KEY_EX, RSA_R_MP_EXPONENT_NOT_CONGRUENT_TO_D);
+        }
+        /* t_i = R_i ^ -1 mod r_i ? */
+        if (!BN_mod_inverse(i, pinfo->pp, pinfo->r, ctx)) {
+            ret = -1;
+            goto err;
+        }
+        if (BN_cmp(i, pinfo->t) != 0) {
+            ret = 0;
+            RSAerr(RSA_F_RSA_CHECK_KEY_EX, RSA_R_MP_COEFFICIENT_NOT_INVERSE_OF_R);
+        }
+    }
+
+ err:
+    BN_free(i);
+    BN_free(j);
+    BN_free(k);
+    BN_free(l);
+    BN_free(m);
+    BN_CTX_free(ctx);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_crpt.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_crpt.c
new file mode 100644
index 000000000..f4ef8b438
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_crpt.c
@@ -0,0 +1,169 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <openssl/crypto.h>
+#include "internal/cryptlib.h"
+#include "internal/bn_int.h"
+#include <openssl/rand.h>
+#include "rsa_locl.h"
+
+int RSA_bits(const RSA *r)
+{
+    return BN_num_bits(r->n);
+}
+
+int RSA_size(const RSA *r)
+{
+    return BN_num_bytes(r->n);
+}
+
+int RSA_public_encrypt(int flen, const unsigned char *from, unsigned char *to,
+                       RSA *rsa, int padding)
+{
+    return rsa->meth->rsa_pub_enc(flen, from, to, rsa, padding);
+}
+
+int RSA_private_encrypt(int flen, const unsigned char *from,
+                        unsigned char *to, RSA *rsa, int padding)
+{
+    return rsa->meth->rsa_priv_enc(flen, from, to, rsa, padding);
+}
+
+int RSA_private_decrypt(int flen, const unsigned char *from,
+                        unsigned char *to, RSA *rsa, int padding)
+{
+    return rsa->meth->rsa_priv_dec(flen, from, to, rsa, padding);
+}
+
+int RSA_public_decrypt(int flen, const unsigned char *from, unsigned char *to,
+                       RSA *rsa, int padding)
+{
+    return rsa->meth->rsa_pub_dec(flen, from, to, rsa, padding);
+}
+
+int RSA_flags(const RSA *r)
+{
+    return r == NULL ? 0 : r->meth->flags;
+}
+
+void RSA_blinding_off(RSA *rsa)
+{
+    BN_BLINDING_free(rsa->blinding);
+    rsa->blinding = NULL;
+    rsa->flags &= ~RSA_FLAG_BLINDING;
+    rsa->flags |= RSA_FLAG_NO_BLINDING;
+}
+
+int RSA_blinding_on(RSA *rsa, BN_CTX *ctx)
+{
+    int ret = 0;
+
+    if (rsa->blinding != NULL)
+        RSA_blinding_off(rsa);
+
+    rsa->blinding = RSA_setup_blinding(rsa, ctx);
+    if (rsa->blinding == NULL)
+        goto err;
+
+    rsa->flags |= RSA_FLAG_BLINDING;
+    rsa->flags &= ~RSA_FLAG_NO_BLINDING;
+    ret = 1;
+ err:
+    return ret;
+}
+
+static BIGNUM *rsa_get_public_exp(const BIGNUM *d, const BIGNUM *p,
+                                  const BIGNUM *q, BN_CTX *ctx)
+{
+    BIGNUM *ret = NULL, *r0, *r1, *r2;
+
+    if (d == NULL || p == NULL || q == NULL)
+        return NULL;
+
+    BN_CTX_start(ctx);
+    r0 = BN_CTX_get(ctx);
+    r1 = BN_CTX_get(ctx);
+    r2 = BN_CTX_get(ctx);
+    if (r2 == NULL)
+        goto err;
+
+    if (!BN_sub(r1, p, BN_value_one()))
+        goto err;
+    if (!BN_sub(r2, q, BN_value_one()))
+        goto err;
+    if (!BN_mul(r0, r1, r2, ctx))
+        goto err;
+
+    ret = BN_mod_inverse(NULL, d, r0, ctx);
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+BN_BLINDING *RSA_setup_blinding(RSA *rsa, BN_CTX *in_ctx)
+{
+    BIGNUM *e;
+    BN_CTX *ctx;
+    BN_BLINDING *ret = NULL;
+
+    if (in_ctx == NULL) {
+        if ((ctx = BN_CTX_new()) == NULL)
+            return 0;
+    } else {
+        ctx = in_ctx;
+    }
+
+    BN_CTX_start(ctx);
+    e = BN_CTX_get(ctx);
+    if (e == NULL) {
+        RSAerr(RSA_F_RSA_SETUP_BLINDING, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (rsa->e == NULL) {
+        e = rsa_get_public_exp(rsa->d, rsa->p, rsa->q, ctx);
+        if (e == NULL) {
+            RSAerr(RSA_F_RSA_SETUP_BLINDING, RSA_R_NO_PUBLIC_EXPONENT);
+            goto err;
+        }
+    } else {
+        e = rsa->e;
+    }
+
+    {
+        BIGNUM *n = BN_new();
+
+        if (n == NULL) {
+            RSAerr(RSA_F_RSA_SETUP_BLINDING, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        BN_with_flags(n, rsa->n, BN_FLG_CONSTTIME);
+
+        ret = BN_BLINDING_create_param(NULL, e, n, ctx, rsa->meth->bn_mod_exp,
+                                       rsa->_method_mod_n);
+        /* We MUST free n before any further use of rsa->n */
+        BN_free(n);
+    }
+    if (ret == NULL) {
+        RSAerr(RSA_F_RSA_SETUP_BLINDING, ERR_R_BN_LIB);
+        goto err;
+    }
+
+    BN_BLINDING_set_current_thread(ret);
+
+ err:
+    BN_CTX_end(ctx);
+    if (ctx != in_ctx)
+        BN_CTX_free(ctx);
+    if (e != rsa->e)
+        BN_free(e);
+
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_depr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_depr.c
new file mode 100644
index 000000000..21e056252
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_depr.c
@@ -0,0 +1,61 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * NB: This file contains deprecated functions (compatibility wrappers to the
+ * "new" versions).
+ */
+
+#include <openssl/opensslconf.h>
+#if OPENSSL_API_COMPAT >= 0x00908000L
+NON_EMPTY_TRANSLATION_UNIT
+
+#else
+
+# include <stdio.h>
+# include <time.h>
+# include "internal/cryptlib.h"
+# include <openssl/bn.h>
+# include <openssl/rsa.h>
+
+RSA *RSA_generate_key(int bits, unsigned long e_value,
+                      void (*callback) (int, int, void *), void *cb_arg)
+{
+    int i;
+    BN_GENCB *cb = BN_GENCB_new();
+    RSA *rsa = RSA_new();
+    BIGNUM *e = BN_new();
+
+    if (cb == NULL || rsa == NULL || e == NULL)
+        goto err;
+
+    /*
+     * The problem is when building with 8, 16, or 32 BN_ULONG, unsigned long
+     * can be larger
+     */
+    for (i = 0; i < (int)sizeof(unsigned long) * 8; i++) {
+        if (e_value & (1UL << i))
+            if (BN_set_bit(e, i) == 0)
+                goto err;
+    }
+
+    BN_GENCB_set_old(cb, callback, cb_arg);
+
+    if (RSA_generate_key_ex(rsa, bits, e, cb)) {
+        BN_free(e);
+        BN_GENCB_free(cb);
+        return rsa;
+    }
+ err:
+    BN_free(e);
+    RSA_free(rsa);
+    BN_GENCB_free(cb);
+    return 0;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_err.c
new file mode 100644
index 000000000..62fd9e0b1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_err.c
@@ -0,0 +1,246 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/rsaerr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA RSA_str_functs[] = {
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_CHECK_PADDING_MD, 0), "check_padding_md"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_ENCODE_PKCS1, 0), "encode_pkcs1"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_INT_RSA_VERIFY, 0), "int_rsa_verify"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_OLD_RSA_PRIV_DECODE, 0),
+     "old_rsa_priv_decode"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_PKEY_PSS_INIT, 0), "pkey_pss_init"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_PKEY_RSA_CTRL, 0), "pkey_rsa_ctrl"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_PKEY_RSA_CTRL_STR, 0), "pkey_rsa_ctrl_str"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_PKEY_RSA_SIGN, 0), "pkey_rsa_sign"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_PKEY_RSA_VERIFY, 0), "pkey_rsa_verify"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_PKEY_RSA_VERIFYRECOVER, 0),
+     "pkey_rsa_verifyrecover"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_ALGOR_TO_MD, 0), "rsa_algor_to_md"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_BUILTIN_KEYGEN, 0), "rsa_builtin_keygen"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_CHECK_KEY, 0), "RSA_check_key"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_CHECK_KEY_EX, 0), "RSA_check_key_ex"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_CMS_DECRYPT, 0), "rsa_cms_decrypt"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_CMS_VERIFY, 0), "rsa_cms_verify"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_ITEM_VERIFY, 0), "rsa_item_verify"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_METH_DUP, 0), "RSA_meth_dup"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_METH_NEW, 0), "RSA_meth_new"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_METH_SET1_NAME, 0), "RSA_meth_set1_name"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_MGF1_TO_MD, 0), ""},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_MULTIP_INFO_NEW, 0),
+     "rsa_multip_info_new"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_NEW_METHOD, 0), "RSA_new_method"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_NULL, 0), ""},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_NULL_PRIVATE_DECRYPT, 0), ""},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_NULL_PRIVATE_ENCRYPT, 0), ""},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_NULL_PUBLIC_DECRYPT, 0), ""},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_NULL_PUBLIC_ENCRYPT, 0), ""},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_OSSL_PRIVATE_DECRYPT, 0),
+     "rsa_ossl_private_decrypt"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_OSSL_PRIVATE_ENCRYPT, 0),
+     "rsa_ossl_private_encrypt"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_OSSL_PUBLIC_DECRYPT, 0),
+     "rsa_ossl_public_decrypt"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_OSSL_PUBLIC_ENCRYPT, 0),
+     "rsa_ossl_public_encrypt"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PADDING_ADD_NONE, 0),
+     "RSA_padding_add_none"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PADDING_ADD_PKCS1_OAEP, 0),
+     "RSA_padding_add_PKCS1_OAEP"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1, 0),
+     "RSA_padding_add_PKCS1_OAEP_mgf1"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PADDING_ADD_PKCS1_PSS, 0),
+     "RSA_padding_add_PKCS1_PSS"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PADDING_ADD_PKCS1_PSS_MGF1, 0),
+     "RSA_padding_add_PKCS1_PSS_mgf1"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PADDING_ADD_PKCS1_TYPE_1, 0),
+     "RSA_padding_add_PKCS1_type_1"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PADDING_ADD_PKCS1_TYPE_2, 0),
+     "RSA_padding_add_PKCS1_type_2"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PADDING_ADD_SSLV23, 0),
+     "RSA_padding_add_SSLv23"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PADDING_ADD_X931, 0),
+     "RSA_padding_add_X931"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PADDING_CHECK_NONE, 0),
+     "RSA_padding_check_none"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PADDING_CHECK_PKCS1_OAEP, 0),
+     "RSA_padding_check_PKCS1_OAEP"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PADDING_CHECK_PKCS1_OAEP_MGF1, 0),
+     "RSA_padding_check_PKCS1_OAEP_mgf1"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_1, 0),
+     "RSA_padding_check_PKCS1_type_1"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_2, 0),
+     "RSA_padding_check_PKCS1_type_2"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PADDING_CHECK_SSLV23, 0),
+     "RSA_padding_check_SSLv23"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PADDING_CHECK_X931, 0),
+     "RSA_padding_check_X931"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PARAM_DECODE, 0), "rsa_param_decode"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PRINT, 0), "RSA_print"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PRINT_FP, 0), "RSA_print_fp"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PRIV_DECODE, 0), "rsa_priv_decode"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PRIV_ENCODE, 0), "rsa_priv_encode"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PSS_GET_PARAM, 0), "rsa_pss_get_param"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PSS_TO_CTX, 0), "rsa_pss_to_ctx"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_PUB_DECODE, 0), "rsa_pub_decode"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_SETUP_BLINDING, 0), "RSA_setup_blinding"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_SIGN, 0), "RSA_sign"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_SIGN_ASN1_OCTET_STRING, 0),
+     "RSA_sign_ASN1_OCTET_STRING"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_VERIFY, 0), "RSA_verify"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_VERIFY_ASN1_OCTET_STRING, 0),
+     "RSA_verify_ASN1_OCTET_STRING"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_RSA_VERIFY_PKCS1_PSS_MGF1, 0),
+     "RSA_verify_PKCS1_PSS_mgf1"},
+    {ERR_PACK(ERR_LIB_RSA, RSA_F_SETUP_TBUF, 0), "setup_tbuf"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA RSA_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_ALGORITHM_MISMATCH), "algorithm mismatch"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_BAD_E_VALUE), "bad e value"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_BAD_FIXED_HEADER_DECRYPT),
+    "bad fixed header decrypt"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_BAD_PAD_BYTE_COUNT), "bad pad byte count"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_BAD_SIGNATURE), "bad signature"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_BLOCK_TYPE_IS_NOT_01),
+    "block type is not 01"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_BLOCK_TYPE_IS_NOT_02),
+    "block type is not 02"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_DATA_GREATER_THAN_MOD_LEN),
+    "data greater than mod len"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_DATA_TOO_LARGE), "data too large"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE),
+    "data too large for key size"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_DATA_TOO_LARGE_FOR_MODULUS),
+    "data too large for modulus"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_DATA_TOO_SMALL), "data too small"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_DATA_TOO_SMALL_FOR_KEY_SIZE),
+    "data too small for key size"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_DIGEST_DOES_NOT_MATCH),
+    "digest does not match"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_DIGEST_NOT_ALLOWED), "digest not allowed"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_DIGEST_TOO_BIG_FOR_RSA_KEY),
+    "digest too big for rsa key"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_DMP1_NOT_CONGRUENT_TO_D),
+    "dmp1 not congruent to d"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_DMQ1_NOT_CONGRUENT_TO_D),
+    "dmq1 not congruent to d"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_D_E_NOT_CONGRUENT_TO_1),
+    "d e not congruent to 1"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_FIRST_OCTET_INVALID),
+    "first octet invalid"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_ILLEGAL_OR_UNSUPPORTED_PADDING_MODE),
+    "illegal or unsupported padding mode"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_INVALID_DIGEST), "invalid digest"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_INVALID_DIGEST_LENGTH),
+    "invalid digest length"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_INVALID_HEADER), "invalid header"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_INVALID_LABEL), "invalid label"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_INVALID_MESSAGE_LENGTH),
+    "invalid message length"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_INVALID_MGF1_MD), "invalid mgf1 md"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_INVALID_MULTI_PRIME_KEY),
+    "invalid multi prime key"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_INVALID_OAEP_PARAMETERS),
+    "invalid oaep parameters"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_INVALID_PADDING), "invalid padding"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_INVALID_PADDING_MODE),
+    "invalid padding mode"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_INVALID_PSS_PARAMETERS),
+    "invalid pss parameters"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_INVALID_PSS_SALTLEN),
+    "invalid pss saltlen"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_INVALID_SALT_LENGTH),
+    "invalid salt length"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_INVALID_TRAILER), "invalid trailer"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_INVALID_X931_DIGEST),
+    "invalid x931 digest"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_IQMP_NOT_INVERSE_OF_Q),
+    "iqmp not inverse of q"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_KEY_PRIME_NUM_INVALID),
+    "key prime num invalid"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_KEY_SIZE_TOO_SMALL), "key size too small"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_LAST_OCTET_INVALID), "last octet invalid"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_MGF1_DIGEST_NOT_ALLOWED),
+    "mgf1 digest not allowed"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_MODULUS_TOO_LARGE), "modulus too large"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_MP_COEFFICIENT_NOT_INVERSE_OF_R),
+    "mp coefficient not inverse of r"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_MP_EXPONENT_NOT_CONGRUENT_TO_D),
+    "mp exponent not congruent to d"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_MP_R_NOT_PRIME), "mp r not prime"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_NO_PUBLIC_EXPONENT), "no public exponent"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_NULL_BEFORE_BLOCK_MISSING),
+    "null before block missing"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_N_DOES_NOT_EQUAL_PRODUCT_OF_PRIMES),
+    "n does not equal product of primes"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_N_DOES_NOT_EQUAL_P_Q),
+    "n does not equal p q"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_OAEP_DECODING_ERROR),
+    "oaep decoding error"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE),
+    "operation not supported for this keytype"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_PADDING_CHECK_FAILED),
+    "padding check failed"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_PKCS_DECODING_ERROR),
+    "pkcs decoding error"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_PSS_SALTLEN_TOO_SMALL),
+    "pss saltlen too small"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_P_NOT_PRIME), "p not prime"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_Q_NOT_PRIME), "q not prime"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_RSA_OPERATIONS_NOT_SUPPORTED),
+    "rsa operations not supported"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_SLEN_CHECK_FAILED),
+    "salt length check failed"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_SLEN_RECOVERY_FAILED),
+    "salt length recovery failed"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_SSLV3_ROLLBACK_ATTACK),
+    "sslv3 rollback attack"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_THE_ASN1_OBJECT_IDENTIFIER_IS_NOT_KNOWN_FOR_THIS_MD),
+    "the asn1 object identifier is not known for this md"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_UNKNOWN_ALGORITHM_TYPE),
+    "unknown algorithm type"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_UNKNOWN_DIGEST), "unknown digest"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_UNKNOWN_MASK_DIGEST),
+    "unknown mask digest"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_UNKNOWN_PADDING_TYPE),
+    "unknown padding type"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_UNSUPPORTED_ENCRYPTION_TYPE),
+    "unsupported encryption type"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_UNSUPPORTED_LABEL_SOURCE),
+    "unsupported label source"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_UNSUPPORTED_MASK_ALGORITHM),
+    "unsupported mask algorithm"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_UNSUPPORTED_MASK_PARAMETER),
+    "unsupported mask parameter"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_UNSUPPORTED_SIGNATURE_TYPE),
+    "unsupported signature type"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_VALUE_MISSING), "value missing"},
+    {ERR_PACK(ERR_LIB_RSA, 0, RSA_R_WRONG_SIGNATURE_LENGTH),
+    "wrong signature length"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_RSA_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(RSA_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(RSA_str_functs);
+        ERR_load_strings_const(RSA_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_gen.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_gen.c
new file mode 100644
index 000000000..7f0a25648
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_gen.c
@@ -0,0 +1,394 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * NB: these functions have been "upgraded", the deprecated versions (which
+ * are compatibility wrappers using these functions) are in rsa_depr.c. -
+ * Geoff
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include "rsa_locl.h"
+
+static int rsa_builtin_keygen(RSA *rsa, int bits, int primes, BIGNUM *e_value,
+                              BN_GENCB *cb);
+
+/*
+ * NB: this wrapper would normally be placed in rsa_lib.c and the static
+ * implementation would probably be in rsa_eay.c. Nonetheless, is kept here
+ * so that we don't introduce a new linker dependency. Eg. any application
+ * that wasn't previously linking object code related to key-generation won't
+ * have to now just because key-generation is part of RSA_METHOD.
+ */
+int RSA_generate_key_ex(RSA *rsa, int bits, BIGNUM *e_value, BN_GENCB *cb)
+{
+    if (rsa->meth->rsa_keygen != NULL)
+        return rsa->meth->rsa_keygen(rsa, bits, e_value, cb);
+
+    return RSA_generate_multi_prime_key(rsa, bits, RSA_DEFAULT_PRIME_NUM,
+                                        e_value, cb);
+}
+
+int RSA_generate_multi_prime_key(RSA *rsa, int bits, int primes,
+                                 BIGNUM *e_value, BN_GENCB *cb)
+{
+    /* multi-prime is only supported with the builtin key generation */
+    if (rsa->meth->rsa_multi_prime_keygen != NULL) {
+        return rsa->meth->rsa_multi_prime_keygen(rsa, bits, primes,
+                                                 e_value, cb);
+    } else if (rsa->meth->rsa_keygen != NULL) {
+        /*
+         * However, if rsa->meth implements only rsa_keygen, then we
+         * have to honour it in 2-prime case and assume that it wouldn't
+         * know what to do with multi-prime key generated by builtin
+         * subroutine...
+         */
+        if (primes == 2)
+            return rsa->meth->rsa_keygen(rsa, bits, e_value, cb);
+        else
+            return 0;
+    }
+
+    return rsa_builtin_keygen(rsa, bits, primes, e_value, cb);
+}
+
+static int rsa_builtin_keygen(RSA *rsa, int bits, int primes, BIGNUM *e_value,
+                              BN_GENCB *cb)
+{
+    BIGNUM *r0 = NULL, *r1 = NULL, *r2 = NULL, *tmp, *prime;
+    int ok = -1, n = 0, bitsr[RSA_MAX_PRIME_NUM], bitse = 0;
+    int i = 0, quo = 0, rmd = 0, adj = 0, retries = 0;
+    RSA_PRIME_INFO *pinfo = NULL;
+    STACK_OF(RSA_PRIME_INFO) *prime_infos = NULL;
+    BN_CTX *ctx = NULL;
+    BN_ULONG bitst = 0;
+    unsigned long error = 0;
+
+    if (bits < RSA_MIN_MODULUS_BITS) {
+        ok = 0;             /* we set our own err */
+        RSAerr(RSA_F_RSA_BUILTIN_KEYGEN, RSA_R_KEY_SIZE_TOO_SMALL);
+        goto err;
+    }
+
+    if (primes < RSA_DEFAULT_PRIME_NUM || primes > rsa_multip_cap(bits)) {
+        ok = 0;             /* we set our own err */
+        RSAerr(RSA_F_RSA_BUILTIN_KEYGEN, RSA_R_KEY_PRIME_NUM_INVALID);
+        goto err;
+    }
+
+    ctx = BN_CTX_new();
+    if (ctx == NULL)
+        goto err;
+    BN_CTX_start(ctx);
+    r0 = BN_CTX_get(ctx);
+    r1 = BN_CTX_get(ctx);
+    r2 = BN_CTX_get(ctx);
+    if (r2 == NULL)
+        goto err;
+
+    /* divide bits into 'primes' pieces evenly */
+    quo = bits / primes;
+    rmd = bits % primes;
+
+    for (i = 0; i < primes; i++)
+        bitsr[i] = (i < rmd) ? quo + 1 : quo;
+
+    /* We need the RSA components non-NULL */
+    if (!rsa->n && ((rsa->n = BN_new()) == NULL))
+        goto err;
+    if (!rsa->d && ((rsa->d = BN_secure_new()) == NULL))
+        goto err;
+    if (!rsa->e && ((rsa->e = BN_new()) == NULL))
+        goto err;
+    if (!rsa->p && ((rsa->p = BN_secure_new()) == NULL))
+        goto err;
+    if (!rsa->q && ((rsa->q = BN_secure_new()) == NULL))
+        goto err;
+    if (!rsa->dmp1 && ((rsa->dmp1 = BN_secure_new()) == NULL))
+        goto err;
+    if (!rsa->dmq1 && ((rsa->dmq1 = BN_secure_new()) == NULL))
+        goto err;
+    if (!rsa->iqmp && ((rsa->iqmp = BN_secure_new()) == NULL))
+        goto err;
+
+    /* initialize multi-prime components */
+    if (primes > RSA_DEFAULT_PRIME_NUM) {
+        rsa->version = RSA_ASN1_VERSION_MULTI;
+        prime_infos = sk_RSA_PRIME_INFO_new_reserve(NULL, primes - 2);
+        if (prime_infos == NULL)
+            goto err;
+        if (rsa->prime_infos != NULL) {
+            /* could this happen? */
+            sk_RSA_PRIME_INFO_pop_free(rsa->prime_infos, rsa_multip_info_free);
+        }
+        rsa->prime_infos = prime_infos;
+
+        /* prime_info from 2 to |primes| -1 */
+        for (i = 2; i < primes; i++) {
+            pinfo = rsa_multip_info_new();
+            if (pinfo == NULL)
+                goto err;
+            (void)sk_RSA_PRIME_INFO_push(prime_infos, pinfo);
+        }
+    }
+
+    if (BN_copy(rsa->e, e_value) == NULL)
+        goto err;
+
+    /* generate p, q and other primes (if any) */
+    for (i = 0; i < primes; i++) {
+        adj = 0;
+        retries = 0;
+
+        if (i == 0) {
+            prime = rsa->p;
+        } else if (i == 1) {
+            prime = rsa->q;
+        } else {
+            pinfo = sk_RSA_PRIME_INFO_value(prime_infos, i - 2);
+            prime = pinfo->r;
+        }
+        BN_set_flags(prime, BN_FLG_CONSTTIME);
+
+        for (;;) {
+ redo:
+            if (!BN_generate_prime_ex(prime, bitsr[i] + adj, 0, NULL, NULL, cb))
+                goto err;
+            /*
+             * prime should not be equal to p, q, r_3...
+             * (those primes prior to this one)
+             */
+            {
+                int j;
+
+                for (j = 0; j < i; j++) {
+                    BIGNUM *prev_prime;
+
+                    if (j == 0)
+                        prev_prime = rsa->p;
+                    else if (j == 1)
+                        prev_prime = rsa->q;
+                    else
+                        prev_prime = sk_RSA_PRIME_INFO_value(prime_infos,
+                                                             j - 2)->r;
+
+                    if (!BN_cmp(prime, prev_prime)) {
+                        goto redo;
+                    }
+                }
+            }
+            if (!BN_sub(r2, prime, BN_value_one()))
+                goto err;
+            ERR_set_mark();
+            BN_set_flags(r2, BN_FLG_CONSTTIME);
+            if (BN_mod_inverse(r1, r2, rsa->e, ctx) != NULL) {
+               /* GCD == 1 since inverse exists */
+                break;
+            }
+            error = ERR_peek_last_error();
+            if (ERR_GET_LIB(error) == ERR_LIB_BN
+                && ERR_GET_REASON(error) == BN_R_NO_INVERSE) {
+                /* GCD != 1 */
+                ERR_pop_to_mark();
+            } else {
+                goto err;
+            }
+            if (!BN_GENCB_call(cb, 2, n++))
+                goto err;
+        }
+
+        bitse += bitsr[i];
+
+        /* calculate n immediately to see if it's sufficient */
+        if (i == 1) {
+            /* we get at least 2 primes */
+            if (!BN_mul(r1, rsa->p, rsa->q, ctx))
+                goto err;
+        } else if (i != 0) {
+            /* modulus n = p * q * r_3 * r_4 ... */
+            if (!BN_mul(r1, rsa->n, prime, ctx))
+                goto err;
+        } else {
+            /* i == 0, do nothing */
+            if (!BN_GENCB_call(cb, 3, i))
+                goto err;
+            continue;
+        }
+        /*
+         * if |r1|, product of factors so far, is not as long as expected
+         * (by checking the first 4 bits are less than 0x9 or greater than
+         * 0xF). If so, re-generate the last prime.
+         *
+         * NOTE: This actually can't happen in two-prime case, because of
+         * the way factors are generated.
+         *
+         * Besides, another consideration is, for multi-prime case, even the
+         * length modulus is as long as expected, the modulus could start at
+         * 0x8, which could be utilized to distinguish a multi-prime private
+         * key by using the modulus in a certificate. This is also covered
+         * by checking the length should not be less than 0x9.
+         */
+        if (!BN_rshift(r2, r1, bitse - 4))
+            goto err;
+        bitst = BN_get_word(r2);
+
+        if (bitst < 0x9 || bitst > 0xF) {
+            /*
+             * For keys with more than 4 primes, we attempt longer factor to
+             * meet length requirement.
+             *
+             * Otherwise, we just re-generate the prime with the same length.
+             *
+             * This strategy has the following goals:
+             *
+             * 1. 1024-bit factors are effcient when using 3072 and 4096-bit key
+             * 2. stay the same logic with normal 2-prime key
+             */
+            bitse -= bitsr[i];
+            if (!BN_GENCB_call(cb, 2, n++))
+                goto err;
+            if (primes > 4) {
+                if (bitst < 0x9)
+                    adj++;
+                else
+                    adj--;
+            } else if (retries == 4) {
+                /*
+                 * re-generate all primes from scratch, mainly used
+                 * in 4 prime case to avoid long loop. Max retry times
+                 * is set to 4.
+                 */
+                i = -1;
+                bitse = 0;
+                continue;
+            }
+            retries++;
+            goto redo;
+        }
+        /* save product of primes for further use, for multi-prime only */
+        if (i > 1 && BN_copy(pinfo->pp, rsa->n) == NULL)
+            goto err;
+        if (BN_copy(rsa->n, r1) == NULL)
+            goto err;
+        if (!BN_GENCB_call(cb, 3, i))
+            goto err;
+    }
+
+    if (BN_cmp(rsa->p, rsa->q) < 0) {
+        tmp = rsa->p;
+        rsa->p = rsa->q;
+        rsa->q = tmp;
+    }
+
+    /* calculate d */
+
+    /* p - 1 */
+    if (!BN_sub(r1, rsa->p, BN_value_one()))
+        goto err;
+    /* q - 1 */
+    if (!BN_sub(r2, rsa->q, BN_value_one()))
+        goto err;
+    /* (p - 1)(q - 1) */
+    if (!BN_mul(r0, r1, r2, ctx))
+        goto err;
+    /* multi-prime */
+    for (i = 2; i < primes; i++) {
+        pinfo = sk_RSA_PRIME_INFO_value(prime_infos, i - 2);
+        /* save r_i - 1 to pinfo->d temporarily */
+        if (!BN_sub(pinfo->d, pinfo->r, BN_value_one()))
+            goto err;
+        if (!BN_mul(r0, r0, pinfo->d, ctx))
+            goto err;
+    }
+
+    {
+        BIGNUM *pr0 = BN_new();
+
+        if (pr0 == NULL)
+            goto err;
+
+        BN_with_flags(pr0, r0, BN_FLG_CONSTTIME);
+        if (!BN_mod_inverse(rsa->d, rsa->e, pr0, ctx)) {
+            BN_free(pr0);
+            goto err;               /* d */
+        }
+        /* We MUST free pr0 before any further use of r0 */
+        BN_free(pr0);
+    }
+
+    {
+        BIGNUM *d = BN_new();
+
+        if (d == NULL)
+            goto err;
+
+        BN_with_flags(d, rsa->d, BN_FLG_CONSTTIME);
+
+        /* calculate d mod (p-1) and d mod (q - 1) */
+        if (!BN_mod(rsa->dmp1, d, r1, ctx)
+            || !BN_mod(rsa->dmq1, d, r2, ctx)) {
+            BN_free(d);
+            goto err;
+        }
+
+        /* calculate CRT exponents */
+        for (i = 2; i < primes; i++) {
+            pinfo = sk_RSA_PRIME_INFO_value(prime_infos, i - 2);
+            /* pinfo->d == r_i - 1 */
+            if (!BN_mod(pinfo->d, d, pinfo->d, ctx)) {
+                BN_free(d);
+                goto err;
+            }
+        }
+
+        /* We MUST free d before any further use of rsa->d */
+        BN_free(d);
+    }
+
+    {
+        BIGNUM *p = BN_new();
+
+        if (p == NULL)
+            goto err;
+        BN_with_flags(p, rsa->p, BN_FLG_CONSTTIME);
+
+        /* calculate inverse of q mod p */
+        if (!BN_mod_inverse(rsa->iqmp, rsa->q, p, ctx)) {
+            BN_free(p);
+            goto err;
+        }
+
+        /* calculate CRT coefficient for other primes */
+        for (i = 2; i < primes; i++) {
+            pinfo = sk_RSA_PRIME_INFO_value(prime_infos, i - 2);
+            BN_with_flags(p, pinfo->r, BN_FLG_CONSTTIME);
+            if (!BN_mod_inverse(pinfo->t, pinfo->pp, p, ctx)) {
+                BN_free(p);
+                goto err;
+            }
+        }
+
+        /* We MUST free p before any further use of rsa->p */
+        BN_free(p);
+    }
+
+    ok = 1;
+ err:
+    if (ok == -1) {
+        RSAerr(RSA_F_RSA_BUILTIN_KEYGEN, ERR_LIB_BN);
+        ok = 0;
+    }
+    if (ctx != NULL)
+        BN_CTX_end(ctx);
+    BN_CTX_free(ctx);
+    return ok;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_lib.c
new file mode 100644
index 000000000..49c34b7c3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_lib.c
@@ -0,0 +1,479 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <openssl/crypto.h>
+#include "internal/cryptlib.h"
+#include "internal/refcount.h"
+#include "internal/bn_int.h"
+#include <openssl/engine.h>
+#include <openssl/evp.h>
+#include "internal/evp_int.h"
+#include "rsa_locl.h"
+
+RSA *RSA_new(void)
+{
+    return RSA_new_method(NULL);
+}
+
+const RSA_METHOD *RSA_get_method(const RSA *rsa)
+{
+    return rsa->meth;
+}
+
+int RSA_set_method(RSA *rsa, const RSA_METHOD *meth)
+{
+    /*
+     * NB: The caller is specifically setting a method, so it's not up to us
+     * to deal with which ENGINE it comes from.
+     */
+    const RSA_METHOD *mtmp;
+    mtmp = rsa->meth;
+    if (mtmp->finish)
+        mtmp->finish(rsa);
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_finish(rsa->engine);
+    rsa->engine = NULL;
+#endif
+    rsa->meth = meth;
+    if (meth->init)
+        meth->init(rsa);
+    return 1;
+}
+
+RSA *RSA_new_method(ENGINE *engine)
+{
+    RSA *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        RSAerr(RSA_F_RSA_NEW_METHOD, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ret->references = 1;
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        RSAerr(RSA_F_RSA_NEW_METHOD, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+
+    ret->meth = RSA_get_default_method();
+#ifndef OPENSSL_NO_ENGINE
+    ret->flags = ret->meth->flags & ~RSA_FLAG_NON_FIPS_ALLOW;
+    if (engine) {
+        if (!ENGINE_init(engine)) {
+            RSAerr(RSA_F_RSA_NEW_METHOD, ERR_R_ENGINE_LIB);
+            goto err;
+        }
+        ret->engine = engine;
+    } else {
+        ret->engine = ENGINE_get_default_RSA();
+    }
+    if (ret->engine) {
+        ret->meth = ENGINE_get_RSA(ret->engine);
+        if (ret->meth == NULL) {
+            RSAerr(RSA_F_RSA_NEW_METHOD, ERR_R_ENGINE_LIB);
+            goto err;
+        }
+    }
+#endif
+
+    ret->flags = ret->meth->flags & ~RSA_FLAG_NON_FIPS_ALLOW;
+    if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_RSA, ret, &ret->ex_data)) {
+        goto err;
+    }
+
+    if ((ret->meth->init != NULL) && !ret->meth->init(ret)) {
+        RSAerr(RSA_F_RSA_NEW_METHOD, ERR_R_INIT_FAIL);
+        goto err;
+    }
+
+    return ret;
+
+ err:
+    RSA_free(ret);
+    return NULL;
+}
+
+void RSA_free(RSA *r)
+{
+    int i;
+
+    if (r == NULL)
+        return;
+
+    CRYPTO_DOWN_REF(&r->references, &i, r->lock);
+    REF_PRINT_COUNT("RSA", r);
+    if (i > 0)
+        return;
+    REF_ASSERT_ISNT(i < 0);
+
+    if (r->meth != NULL && r->meth->finish != NULL)
+        r->meth->finish(r);
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_finish(r->engine);
+#endif
+
+    CRYPTO_free_ex_data(CRYPTO_EX_INDEX_RSA, r, &r->ex_data);
+
+    CRYPTO_THREAD_lock_free(r->lock);
+
+    BN_free(r->n);
+    BN_free(r->e);
+    BN_clear_free(r->d);
+    BN_clear_free(r->p);
+    BN_clear_free(r->q);
+    BN_clear_free(r->dmp1);
+    BN_clear_free(r->dmq1);
+    BN_clear_free(r->iqmp);
+    RSA_PSS_PARAMS_free(r->pss);
+    sk_RSA_PRIME_INFO_pop_free(r->prime_infos, rsa_multip_info_free);
+    BN_BLINDING_free(r->blinding);
+    BN_BLINDING_free(r->mt_blinding);
+    OPENSSL_free(r->bignum_data);
+    OPENSSL_free(r);
+}
+
+int RSA_up_ref(RSA *r)
+{
+    int i;
+
+    if (CRYPTO_UP_REF(&r->references, &i, r->lock) <= 0)
+        return 0;
+
+    REF_PRINT_COUNT("RSA", r);
+    REF_ASSERT_ISNT(i < 2);
+    return i > 1 ? 1 : 0;
+}
+
+int RSA_set_ex_data(RSA *r, int idx, void *arg)
+{
+    return CRYPTO_set_ex_data(&r->ex_data, idx, arg);
+}
+
+void *RSA_get_ex_data(const RSA *r, int idx)
+{
+    return CRYPTO_get_ex_data(&r->ex_data, idx);
+}
+
+int RSA_security_bits(const RSA *rsa)
+{
+    int bits = BN_num_bits(rsa->n);
+
+    if (rsa->version == RSA_ASN1_VERSION_MULTI) {
+        /* This ought to mean that we have private key at hand. */
+        int ex_primes = sk_RSA_PRIME_INFO_num(rsa->prime_infos);
+
+        if (ex_primes <= 0 || (ex_primes + 2) > rsa_multip_cap(bits))
+            return 0;
+    }
+    return BN_security_bits(bits, -1);
+}
+
+int RSA_set0_key(RSA *r, BIGNUM *n, BIGNUM *e, BIGNUM *d)
+{
+    /* If the fields n and e in r are NULL, the corresponding input
+     * parameters MUST be non-NULL for n and e.  d may be
+     * left NULL (in case only the public key is used).
+     */
+    if ((r->n == NULL && n == NULL)
+        || (r->e == NULL && e == NULL))
+        return 0;
+
+    if (n != NULL) {
+        BN_free(r->n);
+        r->n = n;
+    }
+    if (e != NULL) {
+        BN_free(r->e);
+        r->e = e;
+    }
+    if (d != NULL) {
+        BN_clear_free(r->d);
+        r->d = d;
+    }
+
+    return 1;
+}
+
+int RSA_set0_factors(RSA *r, BIGNUM *p, BIGNUM *q)
+{
+    /* If the fields p and q in r are NULL, the corresponding input
+     * parameters MUST be non-NULL.
+     */
+    if ((r->p == NULL && p == NULL)
+        || (r->q == NULL && q == NULL))
+        return 0;
+
+    if (p != NULL) {
+        BN_clear_free(r->p);
+        r->p = p;
+    }
+    if (q != NULL) {
+        BN_clear_free(r->q);
+        r->q = q;
+    }
+
+    return 1;
+}
+
+int RSA_set0_crt_params(RSA *r, BIGNUM *dmp1, BIGNUM *dmq1, BIGNUM *iqmp)
+{
+    /* If the fields dmp1, dmq1 and iqmp in r are NULL, the corresponding input
+     * parameters MUST be non-NULL.
+     */
+    if ((r->dmp1 == NULL && dmp1 == NULL)
+        || (r->dmq1 == NULL && dmq1 == NULL)
+        || (r->iqmp == NULL && iqmp == NULL))
+        return 0;
+
+    if (dmp1 != NULL) {
+        BN_clear_free(r->dmp1);
+        r->dmp1 = dmp1;
+    }
+    if (dmq1 != NULL) {
+        BN_clear_free(r->dmq1);
+        r->dmq1 = dmq1;
+    }
+    if (iqmp != NULL) {
+        BN_clear_free(r->iqmp);
+        r->iqmp = iqmp;
+    }
+
+    return 1;
+}
+
+/*
+ * Is it better to export RSA_PRIME_INFO structure
+ * and related functions to let user pass a triplet?
+ */
+int RSA_set0_multi_prime_params(RSA *r, BIGNUM *primes[], BIGNUM *exps[],
+                                BIGNUM *coeffs[], int pnum)
+{
+    STACK_OF(RSA_PRIME_INFO) *prime_infos, *old = NULL;
+    RSA_PRIME_INFO *pinfo;
+    int i;
+
+    if (primes == NULL || exps == NULL || coeffs == NULL || pnum == 0)
+        return 0;
+
+    prime_infos = sk_RSA_PRIME_INFO_new_reserve(NULL, pnum);
+    if (prime_infos == NULL)
+        return 0;
+
+    if (r->prime_infos != NULL)
+        old = r->prime_infos;
+
+    for (i = 0; i < pnum; i++) {
+        pinfo = rsa_multip_info_new();
+        if (pinfo == NULL)
+            goto err;
+        if (primes[i] != NULL && exps[i] != NULL && coeffs[i] != NULL) {
+            BN_free(pinfo->r);
+            BN_free(pinfo->d);
+            BN_free(pinfo->t);
+            pinfo->r = primes[i];
+            pinfo->d = exps[i];
+            pinfo->t = coeffs[i];
+        } else {
+            rsa_multip_info_free(pinfo);
+            goto err;
+        }
+        (void)sk_RSA_PRIME_INFO_push(prime_infos, pinfo);
+    }
+
+    r->prime_infos = prime_infos;
+
+    if (!rsa_multip_calc_product(r)) {
+        r->prime_infos = old;
+        goto err;
+    }
+
+    if (old != NULL) {
+        /*
+         * This is hard to deal with, since the old infos could
+         * also be set by this function and r, d, t should not
+         * be freed in that case. So currently, stay consistent
+         * with other *set0* functions: just free it...
+         */
+        sk_RSA_PRIME_INFO_pop_free(old, rsa_multip_info_free);
+    }
+
+    r->version = RSA_ASN1_VERSION_MULTI;
+
+    return 1;
+ err:
+    /* r, d, t should not be freed */
+    sk_RSA_PRIME_INFO_pop_free(prime_infos, rsa_multip_info_free_ex);
+    return 0;
+}
+
+void RSA_get0_key(const RSA *r,
+                  const BIGNUM **n, const BIGNUM **e, const BIGNUM **d)
+{
+    if (n != NULL)
+        *n = r->n;
+    if (e != NULL)
+        *e = r->e;
+    if (d != NULL)
+        *d = r->d;
+}
+
+void RSA_get0_factors(const RSA *r, const BIGNUM **p, const BIGNUM **q)
+{
+    if (p != NULL)
+        *p = r->p;
+    if (q != NULL)
+        *q = r->q;
+}
+
+int RSA_get_multi_prime_extra_count(const RSA *r)
+{
+    int pnum;
+
+    pnum = sk_RSA_PRIME_INFO_num(r->prime_infos);
+    if (pnum <= 0)
+        pnum = 0;
+    return pnum;
+}
+
+int RSA_get0_multi_prime_factors(const RSA *r, const BIGNUM *primes[])
+{
+    int pnum, i;
+    RSA_PRIME_INFO *pinfo;
+
+    if ((pnum = RSA_get_multi_prime_extra_count(r)) == 0)
+        return 0;
+
+    /*
+     * return other primes
+     * it's caller's responsibility to allocate oth_primes[pnum]
+     */
+    for (i = 0; i < pnum; i++) {
+        pinfo = sk_RSA_PRIME_INFO_value(r->prime_infos, i);
+        primes[i] = pinfo->r;
+    }
+
+    return 1;
+}
+
+void RSA_get0_crt_params(const RSA *r,
+                         const BIGNUM **dmp1, const BIGNUM **dmq1,
+                         const BIGNUM **iqmp)
+{
+    if (dmp1 != NULL)
+        *dmp1 = r->dmp1;
+    if (dmq1 != NULL)
+        *dmq1 = r->dmq1;
+    if (iqmp != NULL)
+        *iqmp = r->iqmp;
+}
+
+int RSA_get0_multi_prime_crt_params(const RSA *r, const BIGNUM *exps[],
+                                    const BIGNUM *coeffs[])
+{
+    int pnum;
+
+    if ((pnum = RSA_get_multi_prime_extra_count(r)) == 0)
+        return 0;
+
+    /* return other primes */
+    if (exps != NULL || coeffs != NULL) {
+        RSA_PRIME_INFO *pinfo;
+        int i;
+
+        /* it's the user's job to guarantee the buffer length */
+        for (i = 0; i < pnum; i++) {
+            pinfo = sk_RSA_PRIME_INFO_value(r->prime_infos, i);
+            if (exps != NULL)
+                exps[i] = pinfo->d;
+            if (coeffs != NULL)
+                coeffs[i] = pinfo->t;
+        }
+    }
+
+    return 1;
+}
+
+const BIGNUM *RSA_get0_n(const RSA *r)
+{
+    return r->n;
+}
+
+const BIGNUM *RSA_get0_e(const RSA *r)
+{
+    return r->e;
+}
+
+const BIGNUM *RSA_get0_d(const RSA *r)
+{
+    return r->d;
+}
+
+const BIGNUM *RSA_get0_p(const RSA *r)
+{
+    return r->p;
+}
+
+const BIGNUM *RSA_get0_q(const RSA *r)
+{
+    return r->q;
+}
+
+const BIGNUM *RSA_get0_dmp1(const RSA *r)
+{
+    return r->dmp1;
+}
+
+const BIGNUM *RSA_get0_dmq1(const RSA *r)
+{
+    return r->dmq1;
+}
+
+const BIGNUM *RSA_get0_iqmp(const RSA *r)
+{
+    return r->iqmp;
+}
+
+void RSA_clear_flags(RSA *r, int flags)
+{
+    r->flags &= ~flags;
+}
+
+int RSA_test_flags(const RSA *r, int flags)
+{
+    return r->flags & flags;
+}
+
+void RSA_set_flags(RSA *r, int flags)
+{
+    r->flags |= flags;
+}
+
+int RSA_get_version(RSA *r)
+{
+    /* { two-prime(0), multi(1) } */
+    return r->version;
+}
+
+ENGINE *RSA_get0_engine(const RSA *r)
+{
+    return r->engine;
+}
+
+int RSA_pkey_ctx_ctrl(EVP_PKEY_CTX *ctx, int optype, int cmd, int p1, void *p2)
+{
+    /* If key type not RSA or RSA-PSS return error */
+    if (ctx != NULL && ctx->pmeth != NULL
+        && ctx->pmeth->pkey_id != EVP_PKEY_RSA
+        && ctx->pmeth->pkey_id != EVP_PKEY_RSA_PSS)
+        return -1;
+     return EVP_PKEY_CTX_ctrl(ctx, -1, optype, cmd, p1, p2);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_locl.h
new file mode 100644
index 000000000..2b94462a9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_locl.h
@@ -0,0 +1,132 @@
+/*
+ * Copyright 2006-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/rsa.h>
+#include "internal/refcount.h"
+
+#define RSA_MAX_PRIME_NUM       5
+#define RSA_MIN_MODULUS_BITS    512
+
+typedef struct rsa_prime_info_st {
+    BIGNUM *r;
+    BIGNUM *d;
+    BIGNUM *t;
+    /* save product of primes prior to this one */
+    BIGNUM *pp;
+    BN_MONT_CTX *m;
+} RSA_PRIME_INFO;
+
+DECLARE_ASN1_ITEM(RSA_PRIME_INFO)
+DEFINE_STACK_OF(RSA_PRIME_INFO)
+
+struct rsa_st {
+    /*
+     * The first parameter is used to pickup errors where this is passed
+     * instead of an EVP_PKEY, it is set to 0
+     */
+    int pad;
+    int32_t version;
+    const RSA_METHOD *meth;
+    /* functional reference if 'meth' is ENGINE-provided */
+    ENGINE *engine;
+    BIGNUM *n;
+    BIGNUM *e;
+    BIGNUM *d;
+    BIGNUM *p;
+    BIGNUM *q;
+    BIGNUM *dmp1;
+    BIGNUM *dmq1;
+    BIGNUM *iqmp;
+    /* for multi-prime RSA, defined in RFC 8017 */
+    STACK_OF(RSA_PRIME_INFO) *prime_infos;
+    /* If a PSS only key this contains the parameter restrictions */
+    RSA_PSS_PARAMS *pss;
+    /* be careful using this if the RSA structure is shared */
+    CRYPTO_EX_DATA ex_data;
+    CRYPTO_REF_COUNT references;
+    int flags;
+    /* Used to cache montgomery values */
+    BN_MONT_CTX *_method_mod_n;
+    BN_MONT_CTX *_method_mod_p;
+    BN_MONT_CTX *_method_mod_q;
+    /*
+     * all BIGNUM values are actually in the following data, if it is not
+     * NULL
+     */
+    char *bignum_data;
+    BN_BLINDING *blinding;
+    BN_BLINDING *mt_blinding;
+    CRYPTO_RWLOCK *lock;
+};
+
+struct rsa_meth_st {
+    char *name;
+    int (*rsa_pub_enc) (int flen, const unsigned char *from,
+                        unsigned char *to, RSA *rsa, int padding);
+    int (*rsa_pub_dec) (int flen, const unsigned char *from,
+                        unsigned char *to, RSA *rsa, int padding);
+    int (*rsa_priv_enc) (int flen, const unsigned char *from,
+                         unsigned char *to, RSA *rsa, int padding);
+    int (*rsa_priv_dec) (int flen, const unsigned char *from,
+                         unsigned char *to, RSA *rsa, int padding);
+    /* Can be null */
+    int (*rsa_mod_exp) (BIGNUM *r0, const BIGNUM *I, RSA *rsa, BN_CTX *ctx);
+    /* Can be null */
+    int (*bn_mod_exp) (BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
+                       const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *m_ctx);
+    /* called at new */
+    int (*init) (RSA *rsa);
+    /* called at free */
+    int (*finish) (RSA *rsa);
+    /* RSA_METHOD_FLAG_* things */
+    int flags;
+    /* may be needed! */
+    char *app_data;
+    /*
+     * New sign and verify functions: some libraries don't allow arbitrary
+     * data to be signed/verified: this allows them to be used. Note: for
+     * this to work the RSA_public_decrypt() and RSA_private_encrypt() should
+     * *NOT* be used RSA_sign(), RSA_verify() should be used instead.
+     */
+    int (*rsa_sign) (int type,
+                     const unsigned char *m, unsigned int m_length,
+                     unsigned char *sigret, unsigned int *siglen,
+                     const RSA *rsa);
+    int (*rsa_verify) (int dtype, const unsigned char *m,
+                       unsigned int m_length, const unsigned char *sigbuf,
+                       unsigned int siglen, const RSA *rsa);
+    /*
+     * If this callback is NULL, the builtin software RSA key-gen will be
+     * used. This is for behavioural compatibility whilst the code gets
+     * rewired, but one day it would be nice to assume there are no such
+     * things as "builtin software" implementations.
+     */
+    int (*rsa_keygen) (RSA *rsa, int bits, BIGNUM *e, BN_GENCB *cb);
+    int (*rsa_multi_prime_keygen) (RSA *rsa, int bits, int primes,
+                                   BIGNUM *e, BN_GENCB *cb);
+};
+
+extern int int_rsa_verify(int dtype, const unsigned char *m,
+                          unsigned int m_len, unsigned char *rm,
+                          size_t *prm_len, const unsigned char *sigbuf,
+                          size_t siglen, RSA *rsa);
+/* Macros to test if a pkey or ctx is for a PSS key */
+#define pkey_is_pss(pkey) (pkey->ameth->pkey_id == EVP_PKEY_RSA_PSS)
+#define pkey_ctx_is_pss(ctx) (ctx->pmeth->pkey_id == EVP_PKEY_RSA_PSS)
+
+RSA_PSS_PARAMS *rsa_pss_params_create(const EVP_MD *sigmd,
+                                      const EVP_MD *mgf1md, int saltlen);
+int rsa_pss_get_param(const RSA_PSS_PARAMS *pss, const EVP_MD **pmd,
+                      const EVP_MD **pmgf1md, int *psaltlen);
+/* internal function to clear and free multi-prime parameters */
+void rsa_multip_info_free_ex(RSA_PRIME_INFO *pinfo);
+void rsa_multip_info_free(RSA_PRIME_INFO *pinfo);
+RSA_PRIME_INFO *rsa_multip_info_new(void);
+int rsa_multip_calc_product(RSA *rsa);
+int rsa_multip_cap(int bits);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_meth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_meth.c
new file mode 100644
index 000000000..def19f375
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_meth.c
@@ -0,0 +1,287 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include "rsa_locl.h"
+#include <openssl/err.h>
+
+RSA_METHOD *RSA_meth_new(const char *name, int flags)
+{
+    RSA_METHOD *meth = OPENSSL_zalloc(sizeof(*meth));
+
+    if (meth != NULL) {
+        meth->flags = flags;
+
+        meth->name = OPENSSL_strdup(name);
+        if (meth->name != NULL)
+            return meth;
+
+        OPENSSL_free(meth);
+    }
+
+    RSAerr(RSA_F_RSA_METH_NEW, ERR_R_MALLOC_FAILURE);
+    return NULL;
+}
+
+void RSA_meth_free(RSA_METHOD *meth)
+{
+    if (meth != NULL) {
+        OPENSSL_free(meth->name);
+        OPENSSL_free(meth);
+    }
+}
+
+RSA_METHOD *RSA_meth_dup(const RSA_METHOD *meth)
+{
+    RSA_METHOD *ret = OPENSSL_malloc(sizeof(*ret));
+
+    if (ret != NULL) {
+        memcpy(ret, meth, sizeof(*meth));
+
+        ret->name = OPENSSL_strdup(meth->name);
+        if (ret->name != NULL)
+            return ret;
+
+        OPENSSL_free(ret);
+    }
+
+    RSAerr(RSA_F_RSA_METH_DUP, ERR_R_MALLOC_FAILURE);
+    return NULL;
+}
+
+const char *RSA_meth_get0_name(const RSA_METHOD *meth)
+{
+    return meth->name;
+}
+
+int RSA_meth_set1_name(RSA_METHOD *meth, const char *name)
+{
+    char *tmpname = OPENSSL_strdup(name);
+
+    if (tmpname == NULL) {
+        RSAerr(RSA_F_RSA_METH_SET1_NAME, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    OPENSSL_free(meth->name);
+    meth->name = tmpname;
+
+    return 1;
+}
+
+int RSA_meth_get_flags(const RSA_METHOD *meth)
+{
+    return meth->flags;
+}
+
+int RSA_meth_set_flags(RSA_METHOD *meth, int flags)
+{
+    meth->flags = flags;
+    return 1;
+}
+
+void *RSA_meth_get0_app_data(const RSA_METHOD *meth)
+{
+    return meth->app_data;
+}
+
+int RSA_meth_set0_app_data(RSA_METHOD *meth, void *app_data)
+{
+    meth->app_data = app_data;
+    return 1;
+}
+
+int (*RSA_meth_get_pub_enc(const RSA_METHOD *meth))
+    (int flen, const unsigned char *from,
+     unsigned char *to, RSA *rsa, int padding)
+{
+    return meth->rsa_pub_enc;
+}
+
+int RSA_meth_set_pub_enc(RSA_METHOD *meth,
+                         int (*pub_enc) (int flen, const unsigned char *from,
+                                         unsigned char *to, RSA *rsa,
+                                         int padding))
+{
+    meth->rsa_pub_enc = pub_enc;
+    return 1;
+}
+
+int (*RSA_meth_get_pub_dec(const RSA_METHOD *meth))
+    (int flen, const unsigned char *from,
+     unsigned char *to, RSA *rsa, int padding)
+{
+    return meth->rsa_pub_dec;
+}
+
+int RSA_meth_set_pub_dec(RSA_METHOD *meth,
+                         int (*pub_dec) (int flen, const unsigned char *from,
+                                         unsigned char *to, RSA *rsa,
+                                         int padding))
+{
+    meth->rsa_pub_dec = pub_dec;
+    return 1;
+}
+
+int (*RSA_meth_get_priv_enc(const RSA_METHOD *meth))
+    (int flen, const unsigned char *from,
+     unsigned char *to, RSA *rsa, int padding)
+{
+    return meth->rsa_priv_enc;
+}
+
+int RSA_meth_set_priv_enc(RSA_METHOD *meth,
+                          int (*priv_enc) (int flen, const unsigned char *from,
+                                           unsigned char *to, RSA *rsa,
+                                           int padding))
+{
+    meth->rsa_priv_enc = priv_enc;
+    return 1;
+}
+
+int (*RSA_meth_get_priv_dec(const RSA_METHOD *meth))
+    (int flen, const unsigned char *from,
+     unsigned char *to, RSA *rsa, int padding)
+{
+    return meth->rsa_priv_dec;
+}
+
+int RSA_meth_set_priv_dec(RSA_METHOD *meth,
+                          int (*priv_dec) (int flen, const unsigned char *from,
+                                           unsigned char *to, RSA *rsa,
+                                           int padding))
+{
+    meth->rsa_priv_dec = priv_dec;
+    return 1;
+}
+
+    /* Can be null */
+int (*RSA_meth_get_mod_exp(const RSA_METHOD *meth))
+    (BIGNUM *r0, const BIGNUM *i, RSA *rsa, BN_CTX *ctx)
+{
+    return meth->rsa_mod_exp;
+}
+
+int RSA_meth_set_mod_exp(RSA_METHOD *meth,
+                         int (*mod_exp) (BIGNUM *r0, const BIGNUM *i, RSA *rsa,
+                                         BN_CTX *ctx))
+{
+    meth->rsa_mod_exp = mod_exp;
+    return 1;
+}
+
+    /* Can be null */
+int (*RSA_meth_get_bn_mod_exp(const RSA_METHOD *meth))
+    (BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
+     const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *m_ctx)
+{
+    return meth->bn_mod_exp;
+}
+
+int RSA_meth_set_bn_mod_exp(RSA_METHOD *meth,
+                            int (*bn_mod_exp) (BIGNUM *r,
+                                               const BIGNUM *a,
+                                               const BIGNUM *p,
+                                               const BIGNUM *m,
+                                               BN_CTX *ctx,
+                                               BN_MONT_CTX *m_ctx))
+{
+    meth->bn_mod_exp = bn_mod_exp;
+    return 1;
+}
+
+    /* called at new */
+int (*RSA_meth_get_init(const RSA_METHOD *meth)) (RSA *rsa)
+{
+    return meth->init;
+}
+
+int RSA_meth_set_init(RSA_METHOD *meth, int (*init) (RSA *rsa))
+{
+    meth->init = init;
+    return 1;
+}
+
+    /* called at free */
+int (*RSA_meth_get_finish(const RSA_METHOD *meth)) (RSA *rsa)
+{
+    return meth->finish;
+}
+
+int RSA_meth_set_finish(RSA_METHOD *meth, int (*finish) (RSA *rsa))
+{
+    meth->finish = finish;
+    return 1;
+}
+
+int (*RSA_meth_get_sign(const RSA_METHOD *meth))
+    (int type,
+     const unsigned char *m, unsigned int m_length,
+     unsigned char *sigret, unsigned int *siglen,
+     const RSA *rsa)
+{
+    return meth->rsa_sign;
+}
+
+int RSA_meth_set_sign(RSA_METHOD *meth,
+                      int (*sign) (int type, const unsigned char *m,
+                                   unsigned int m_length,
+                                   unsigned char *sigret, unsigned int *siglen,
+                                   const RSA *rsa))
+{
+    meth->rsa_sign = sign;
+    return 1;
+}
+
+int (*RSA_meth_get_verify(const RSA_METHOD *meth))
+    (int dtype, const unsigned char *m,
+     unsigned int m_length, const unsigned char *sigbuf,
+     unsigned int siglen, const RSA *rsa)
+{
+    return meth->rsa_verify;
+}
+
+int RSA_meth_set_verify(RSA_METHOD *meth,
+                        int (*verify) (int dtype, const unsigned char *m,
+                                       unsigned int m_length,
+                                       const unsigned char *sigbuf,
+                                       unsigned int siglen, const RSA *rsa))
+{
+    meth->rsa_verify = verify;
+    return 1;
+}
+
+int (*RSA_meth_get_keygen(const RSA_METHOD *meth))
+    (RSA *rsa, int bits, BIGNUM *e, BN_GENCB *cb)
+{
+    return meth->rsa_keygen;
+}
+
+int RSA_meth_set_keygen(RSA_METHOD *meth,
+                        int (*keygen) (RSA *rsa, int bits, BIGNUM *e,
+                                       BN_GENCB *cb))
+{
+    meth->rsa_keygen = keygen;
+    return 1;
+}
+
+int (*RSA_meth_get_multi_prime_keygen(const RSA_METHOD *meth))
+    (RSA *rsa, int bits, int primes, BIGNUM *e, BN_GENCB *cb)
+{
+    return meth->rsa_multi_prime_keygen;
+}
+
+int RSA_meth_set_multi_prime_keygen(RSA_METHOD *meth,
+                                    int (*keygen) (RSA *rsa, int bits,
+                                                   int primes, BIGNUM *e,
+                                                   BN_GENCB *cb))
+{
+    meth->rsa_multi_prime_keygen = keygen;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_mp.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_mp.c
new file mode 100644
index 000000000..e7e810823
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_mp.c
@@ -0,0 +1,115 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017 BaishanCloud. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/bn.h>
+#include <openssl/err.h>
+#include "rsa_locl.h"
+
+void rsa_multip_info_free_ex(RSA_PRIME_INFO *pinfo)
+{
+    /* free pp and pinfo only */
+    BN_clear_free(pinfo->pp);
+    OPENSSL_free(pinfo);
+}
+
+void rsa_multip_info_free(RSA_PRIME_INFO *pinfo)
+{
+    /* free a RSA_PRIME_INFO structure */
+    BN_clear_free(pinfo->r);
+    BN_clear_free(pinfo->d);
+    BN_clear_free(pinfo->t);
+    rsa_multip_info_free_ex(pinfo);
+}
+
+RSA_PRIME_INFO *rsa_multip_info_new(void)
+{
+    RSA_PRIME_INFO *pinfo;
+
+    /* create a RSA_PRIME_INFO structure */
+    if ((pinfo = OPENSSL_zalloc(sizeof(RSA_PRIME_INFO))) == NULL) {
+        RSAerr(RSA_F_RSA_MULTIP_INFO_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    if ((pinfo->r = BN_secure_new()) == NULL)
+        goto err;
+    if ((pinfo->d = BN_secure_new()) == NULL)
+        goto err;
+    if ((pinfo->t = BN_secure_new()) == NULL)
+        goto err;
+    if ((pinfo->pp = BN_secure_new()) == NULL)
+        goto err;
+
+    return pinfo;
+
+ err:
+    BN_free(pinfo->r);
+    BN_free(pinfo->d);
+    BN_free(pinfo->t);
+    BN_free(pinfo->pp);
+    OPENSSL_free(pinfo);
+    return NULL;
+}
+
+/* Refill products of primes */
+int rsa_multip_calc_product(RSA *rsa)
+{
+    RSA_PRIME_INFO *pinfo;
+    BIGNUM *p1 = NULL, *p2 = NULL;
+    BN_CTX *ctx = NULL;
+    int i, rv = 0, ex_primes;
+
+    if ((ex_primes = sk_RSA_PRIME_INFO_num(rsa->prime_infos)) <= 0) {
+        /* invalid */
+        goto err;
+    }
+
+    if ((ctx = BN_CTX_new()) == NULL)
+        goto err;
+
+    /* calculate pinfo->pp = p * q for first 'extra' prime */
+    p1 = rsa->p;
+    p2 = rsa->q;
+
+    for (i = 0; i < ex_primes; i++) {
+        pinfo = sk_RSA_PRIME_INFO_value(rsa->prime_infos, i);
+        if (pinfo->pp == NULL) {
+            pinfo->pp = BN_secure_new();
+            if (pinfo->pp == NULL)
+                goto err;
+        }
+        if (!BN_mul(pinfo->pp, p1, p2, ctx))
+            goto err;
+        /* save previous one */
+        p1 = pinfo->pp;
+        p2 = pinfo->r;
+    }
+
+    rv = 1;
+ err:
+    BN_CTX_free(ctx);
+    return rv;
+}
+
+int rsa_multip_cap(int bits)
+{
+    int cap = 5;
+
+    if (bits < 1024)
+        cap = 2;
+    else if (bits < 4096)
+        cap = 3;
+    else if (bits < 8192)
+        cap = 4;
+
+    if (cap > RSA_MAX_PRIME_NUM)
+        cap = RSA_MAX_PRIME_NUM;
+
+    return cap;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_none.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_none.c
new file mode 100644
index 000000000..f16cc6706
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_none.c
@@ -0,0 +1,43 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include <openssl/rsa.h>
+
+int RSA_padding_add_none(unsigned char *to, int tlen,
+                         const unsigned char *from, int flen)
+{
+    if (flen > tlen) {
+        RSAerr(RSA_F_RSA_PADDING_ADD_NONE, RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE);
+        return 0;
+    }
+
+    if (flen < tlen) {
+        RSAerr(RSA_F_RSA_PADDING_ADD_NONE, RSA_R_DATA_TOO_SMALL_FOR_KEY_SIZE);
+        return 0;
+    }
+
+    memcpy(to, from, (unsigned int)flen);
+    return 1;
+}
+
+int RSA_padding_check_none(unsigned char *to, int tlen,
+                           const unsigned char *from, int flen, int num)
+{
+
+    if (flen > tlen) {
+        RSAerr(RSA_F_RSA_PADDING_CHECK_NONE, RSA_R_DATA_TOO_LARGE);
+        return -1;
+    }
+
+    memset(to, 0, tlen - flen);
+    memcpy(to + tlen - flen, from, flen);
+    return tlen;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_oaep.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_oaep.c
new file mode 100644
index 000000000..689e6dc22
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_oaep.c
@@ -0,0 +1,313 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* EME-OAEP as defined in RFC 2437 (PKCS #1 v2.0) */
+
+/*
+ * See Victor Shoup, "OAEP reconsidered," Nov. 2000, <URL:
+ * http://www.shoup.net/papers/oaep.ps.Z> for problems with the security
+ * proof for the original OAEP scheme, which EME-OAEP is based on. A new
+ * proof can be found in E. Fujisaki, T. Okamoto, D. Pointcheval, J. Stern,
+ * "RSA-OEAP is Still Alive!", Dec. 2000, <URL:
+ * http://eprint.iacr.org/2000/061/>. The new proof has stronger requirements
+ * for the underlying permutation: "partial-one-wayness" instead of
+ * one-wayness.  For the RSA function, this is an equivalent notion.
+ */
+
+#include "internal/constant_time_locl.h"
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include <openssl/evp.h>
+#include <openssl/rand.h>
+#include <openssl/sha.h>
+#include "rsa_locl.h"
+
+int RSA_padding_add_PKCS1_OAEP(unsigned char *to, int tlen,
+                               const unsigned char *from, int flen,
+                               const unsigned char *param, int plen)
+{
+    return RSA_padding_add_PKCS1_OAEP_mgf1(to, tlen, from, flen,
+                                           param, plen, NULL, NULL);
+}
+
+int RSA_padding_add_PKCS1_OAEP_mgf1(unsigned char *to, int tlen,
+                                    const unsigned char *from, int flen,
+                                    const unsigned char *param, int plen,
+                                    const EVP_MD *md, const EVP_MD *mgf1md)
+{
+    int rv = 0;
+    int i, emlen = tlen - 1;
+    unsigned char *db, *seed;
+    unsigned char *dbmask = NULL;
+    unsigned char seedmask[EVP_MAX_MD_SIZE];
+    int mdlen, dbmask_len = 0;
+
+    if (md == NULL)
+        md = EVP_sha1();
+    if (mgf1md == NULL)
+        mgf1md = md;
+
+    mdlen = EVP_MD_size(md);
+
+    if (flen > emlen - 2 * mdlen - 1) {
+        RSAerr(RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1,
+               RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE);
+        return 0;
+    }
+
+    if (emlen < 2 * mdlen + 1) {
+        RSAerr(RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1,
+               RSA_R_KEY_SIZE_TOO_SMALL);
+        return 0;
+    }
+
+    to[0] = 0;
+    seed = to + 1;
+    db = to + mdlen + 1;
+
+    if (!EVP_Digest((void *)param, plen, db, NULL, md, NULL))
+        goto err;
+    memset(db + mdlen, 0, emlen - flen - 2 * mdlen - 1);
+    db[emlen - flen - mdlen - 1] = 0x01;
+    memcpy(db + emlen - flen - mdlen, from, (unsigned int)flen);
+    if (RAND_bytes(seed, mdlen) <= 0)
+        goto err;
+
+    dbmask_len = emlen - mdlen;
+    dbmask = OPENSSL_malloc(dbmask_len);
+    if (dbmask == NULL) {
+        RSAerr(RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (PKCS1_MGF1(dbmask, dbmask_len, seed, mdlen, mgf1md) < 0)
+        goto err;
+    for (i = 0; i < dbmask_len; i++)
+        db[i] ^= dbmask[i];
+
+    if (PKCS1_MGF1(seedmask, mdlen, db, dbmask_len, mgf1md) < 0)
+        goto err;
+    for (i = 0; i < mdlen; i++)
+        seed[i] ^= seedmask[i];
+    rv = 1;
+
+ err:
+    OPENSSL_cleanse(seedmask, sizeof(seedmask));
+    OPENSSL_clear_free(dbmask, dbmask_len);
+    return rv;
+}
+
+int RSA_padding_check_PKCS1_OAEP(unsigned char *to, int tlen,
+                                 const unsigned char *from, int flen, int num,
+                                 const unsigned char *param, int plen)
+{
+    return RSA_padding_check_PKCS1_OAEP_mgf1(to, tlen, from, flen, num,
+                                             param, plen, NULL, NULL);
+}
+
+int RSA_padding_check_PKCS1_OAEP_mgf1(unsigned char *to, int tlen,
+                                      const unsigned char *from, int flen,
+                                      int num, const unsigned char *param,
+                                      int plen, const EVP_MD *md,
+                                      const EVP_MD *mgf1md)
+{
+    int i, dblen = 0, mlen = -1, one_index = 0, msg_index;
+    unsigned int good = 0, found_one_byte, mask;
+    const unsigned char *maskedseed, *maskeddb;
+    /*
+     * |em| is the encoded message, zero-padded to exactly |num| bytes: em =
+     * Y || maskedSeed || maskedDB
+     */
+    unsigned char *db = NULL, *em = NULL, seed[EVP_MAX_MD_SIZE],
+        phash[EVP_MAX_MD_SIZE];
+    int mdlen;
+
+    if (md == NULL)
+        md = EVP_sha1();
+    if (mgf1md == NULL)
+        mgf1md = md;
+
+    mdlen = EVP_MD_size(md);
+
+    if (tlen <= 0 || flen <= 0)
+        return -1;
+    /*
+     * |num| is the length of the modulus; |flen| is the length of the
+     * encoded message. Therefore, for any |from| that was obtained by
+     * decrypting a ciphertext, we must have |flen| <= |num|. Similarly,
+     * num < 2 * mdlen + 2 must hold for the modulus irrespective of
+     * the ciphertext, see PKCS #1 v2.2, section 7.1.2.
+     * This does not leak any side-channel information.
+     */
+    if (num < flen || num < 2 * mdlen + 2) {
+        RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_OAEP_MGF1,
+               RSA_R_OAEP_DECODING_ERROR);
+        return -1;
+    }
+
+    dblen = num - mdlen - 1;
+    db = OPENSSL_malloc(dblen);
+    if (db == NULL) {
+        RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_OAEP_MGF1, ERR_R_MALLOC_FAILURE);
+        goto cleanup;
+    }
+
+    em = OPENSSL_malloc(num);
+    if (em == NULL) {
+        RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_OAEP_MGF1,
+               ERR_R_MALLOC_FAILURE);
+        goto cleanup;
+    }
+
+    /*
+     * Caller is encouraged to pass zero-padded message created with
+     * BN_bn2binpad. Trouble is that since we can't read out of |from|'s
+     * bounds, it's impossible to have an invariant memory access pattern
+     * in case |from| was not zero-padded in advance.
+     */
+    for (from += flen, em += num, i = 0; i < num; i++) {
+        mask = ~constant_time_is_zero(flen);
+        flen -= 1 & mask;
+        from -= 1 & mask;
+        *--em = *from & mask;
+    }
+    from = em;
+
+    /*
+     * The first byte must be zero, however we must not leak if this is
+     * true. See James H. Manger, "A Chosen Ciphertext  Attack on RSA
+     * Optimal Asymmetric Encryption Padding (OAEP) [...]", CRYPTO 2001).
+     */
+    good = constant_time_is_zero(from[0]);
+
+    maskedseed = from + 1;
+    maskeddb = from + 1 + mdlen;
+
+    if (PKCS1_MGF1(seed, mdlen, maskeddb, dblen, mgf1md))
+        goto cleanup;
+    for (i = 0; i < mdlen; i++)
+        seed[i] ^= maskedseed[i];
+
+    if (PKCS1_MGF1(db, dblen, seed, mdlen, mgf1md))
+        goto cleanup;
+    for (i = 0; i < dblen; i++)
+        db[i] ^= maskeddb[i];
+
+    if (!EVP_Digest((void *)param, plen, phash, NULL, md, NULL))
+        goto cleanup;
+
+    good &= constant_time_is_zero(CRYPTO_memcmp(db, phash, mdlen));
+
+    found_one_byte = 0;
+    for (i = mdlen; i < dblen; i++) {
+        /*
+         * Padding consists of a number of 0-bytes, followed by a 1.
+         */
+        unsigned int equals1 = constant_time_eq(db[i], 1);
+        unsigned int equals0 = constant_time_is_zero(db[i]);
+        one_index = constant_time_select_int(~found_one_byte & equals1,
+                                             i, one_index);
+        found_one_byte |= equals1;
+        good &= (found_one_byte | equals0);
+    }
+
+    good &= found_one_byte;
+
+    /*
+     * At this point |good| is zero unless the plaintext was valid,
+     * so plaintext-awareness ensures timing side-channels are no longer a
+     * concern.
+     */
+    msg_index = one_index + 1;
+    mlen = dblen - msg_index;
+
+    /*
+     * For good measure, do this check in constant tine as well.
+     */
+    good &= constant_time_ge(tlen, mlen);
+
+    /*
+     * Even though we can't fake result's length, we can pretend copying
+     * |tlen| bytes where |mlen| bytes would be real. Last |tlen| of |dblen|
+     * bytes are viewed as circular buffer with start at |tlen|-|mlen'|,
+     * where |mlen'| is "saturated" |mlen| value. Deducing information
+     * about failure or |mlen| would take attacker's ability to observe
+     * memory access pattern with byte granularity *as it occurs*. It
+     * should be noted that failure is indistinguishable from normal
+     * operation if |tlen| is fixed by protocol.
+     */
+    tlen = constant_time_select_int(constant_time_lt(dblen, tlen), dblen, tlen);
+    msg_index = constant_time_select_int(good, msg_index, dblen - tlen);
+    mlen = dblen - msg_index;
+    for (from = db + msg_index, mask = good, i = 0; i < tlen; i++) {
+        unsigned int equals = constant_time_eq(i, mlen);
+
+        from -= dblen & equals; /* if (i == dblen) rewind   */
+        mask &= mask ^ equals;  /* if (i == dblen) mask = 0 */
+        to[i] = constant_time_select_8(mask, from[i], to[i]);
+    }
+
+    /*
+     * To avoid chosen ciphertext attacks, the error message should not
+     * reveal which kind of decoding error happened.
+     */
+    RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_OAEP_MGF1,
+           RSA_R_OAEP_DECODING_ERROR);
+    err_clear_last_constant_time(1 & good);
+ cleanup:
+    OPENSSL_cleanse(seed, sizeof(seed));
+    OPENSSL_clear_free(db, dblen);
+    OPENSSL_clear_free(em, num);
+
+    return constant_time_select_int(good, mlen, -1);
+}
+
+int PKCS1_MGF1(unsigned char *mask, long len,
+               const unsigned char *seed, long seedlen, const EVP_MD *dgst)
+{
+    long i, outlen = 0;
+    unsigned char cnt[4];
+    EVP_MD_CTX *c = EVP_MD_CTX_new();
+    unsigned char md[EVP_MAX_MD_SIZE];
+    int mdlen;
+    int rv = -1;
+
+    if (c == NULL)
+        goto err;
+    mdlen = EVP_MD_size(dgst);
+    if (mdlen < 0)
+        goto err;
+    for (i = 0; outlen < len; i++) {
+        cnt[0] = (unsigned char)((i >> 24) & 255);
+        cnt[1] = (unsigned char)((i >> 16) & 255);
+        cnt[2] = (unsigned char)((i >> 8)) & 255;
+        cnt[3] = (unsigned char)(i & 255);
+        if (!EVP_DigestInit_ex(c, dgst, NULL)
+            || !EVP_DigestUpdate(c, seed, seedlen)
+            || !EVP_DigestUpdate(c, cnt, 4))
+            goto err;
+        if (outlen + mdlen <= len) {
+            if (!EVP_DigestFinal_ex(c, mask + outlen, NULL))
+                goto err;
+            outlen += mdlen;
+        } else {
+            if (!EVP_DigestFinal_ex(c, md, NULL))
+                goto err;
+            memcpy(mask + outlen, md, len - outlen);
+            outlen = len;
+        }
+    }
+    rv = 0;
+ err:
+    OPENSSL_cleanse(md, sizeof(md));
+    EVP_MD_CTX_free(c);
+    return rv;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_ossl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_ossl.c
new file mode 100644
index 000000000..465134257
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_ossl.c
@@ -0,0 +1,970 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "internal/bn_int.h"
+#include "rsa_locl.h"
+#include "internal/constant_time_locl.h"
+
+static int rsa_ossl_public_encrypt(int flen, const unsigned char *from,
+                                  unsigned char *to, RSA *rsa, int padding);
+static int rsa_ossl_private_encrypt(int flen, const unsigned char *from,
+                                   unsigned char *to, RSA *rsa, int padding);
+static int rsa_ossl_public_decrypt(int flen, const unsigned char *from,
+                                  unsigned char *to, RSA *rsa, int padding);
+static int rsa_ossl_private_decrypt(int flen, const unsigned char *from,
+                                   unsigned char *to, RSA *rsa, int padding);
+static int rsa_ossl_mod_exp(BIGNUM *r0, const BIGNUM *i, RSA *rsa,
+                           BN_CTX *ctx);
+static int rsa_ossl_init(RSA *rsa);
+static int rsa_ossl_finish(RSA *rsa);
+static RSA_METHOD rsa_pkcs1_ossl_meth = {
+    "OpenSSL PKCS#1 RSA",
+    rsa_ossl_public_encrypt,
+    rsa_ossl_public_decrypt,     /* signature verification */
+    rsa_ossl_private_encrypt,    /* signing */
+    rsa_ossl_private_decrypt,
+    rsa_ossl_mod_exp,
+    BN_mod_exp_mont,            /* XXX probably we should not use Montgomery
+                                 * if e == 3 */
+    rsa_ossl_init,
+    rsa_ossl_finish,
+    RSA_FLAG_FIPS_METHOD,       /* flags */
+    NULL,
+    0,                          /* rsa_sign */
+    0,                          /* rsa_verify */
+    NULL,                       /* rsa_keygen */
+    NULL                        /* rsa_multi_prime_keygen */
+};
+
+static const RSA_METHOD *default_RSA_meth = &rsa_pkcs1_ossl_meth;
+
+void RSA_set_default_method(const RSA_METHOD *meth)
+{
+    default_RSA_meth = meth;
+}
+
+const RSA_METHOD *RSA_get_default_method(void)
+{
+    return default_RSA_meth;
+}
+
+const RSA_METHOD *RSA_PKCS1_OpenSSL(void)
+{
+    return &rsa_pkcs1_ossl_meth;
+}
+
+const RSA_METHOD *RSA_null_method(void)
+{
+    return NULL;
+}
+
+static int rsa_ossl_public_encrypt(int flen, const unsigned char *from,
+                                  unsigned char *to, RSA *rsa, int padding)
+{
+    BIGNUM *f, *ret;
+    int i, num = 0, r = -1;
+    unsigned char *buf = NULL;
+    BN_CTX *ctx = NULL;
+
+    if (BN_num_bits(rsa->n) > OPENSSL_RSA_MAX_MODULUS_BITS) {
+        RSAerr(RSA_F_RSA_OSSL_PUBLIC_ENCRYPT, RSA_R_MODULUS_TOO_LARGE);
+        return -1;
+    }
+
+    if (BN_ucmp(rsa->n, rsa->e) <= 0) {
+        RSAerr(RSA_F_RSA_OSSL_PUBLIC_ENCRYPT, RSA_R_BAD_E_VALUE);
+        return -1;
+    }
+
+    /* for large moduli, enforce exponent limit */
+    if (BN_num_bits(rsa->n) > OPENSSL_RSA_SMALL_MODULUS_BITS) {
+        if (BN_num_bits(rsa->e) > OPENSSL_RSA_MAX_PUBEXP_BITS) {
+            RSAerr(RSA_F_RSA_OSSL_PUBLIC_ENCRYPT, RSA_R_BAD_E_VALUE);
+            return -1;
+        }
+    }
+
+    if ((ctx = BN_CTX_new()) == NULL)
+        goto err;
+    BN_CTX_start(ctx);
+    f = BN_CTX_get(ctx);
+    ret = BN_CTX_get(ctx);
+    num = BN_num_bytes(rsa->n);
+    buf = OPENSSL_malloc(num);
+    if (ret == NULL || buf == NULL) {
+        RSAerr(RSA_F_RSA_OSSL_PUBLIC_ENCRYPT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    switch (padding) {
+    case RSA_PKCS1_PADDING:
+        i = RSA_padding_add_PKCS1_type_2(buf, num, from, flen);
+        break;
+    case RSA_PKCS1_OAEP_PADDING:
+        i = RSA_padding_add_PKCS1_OAEP(buf, num, from, flen, NULL, 0);
+        break;
+    case RSA_SSLV23_PADDING:
+        i = RSA_padding_add_SSLv23(buf, num, from, flen);
+        break;
+    case RSA_NO_PADDING:
+        i = RSA_padding_add_none(buf, num, from, flen);
+        break;
+    default:
+        RSAerr(RSA_F_RSA_OSSL_PUBLIC_ENCRYPT, RSA_R_UNKNOWN_PADDING_TYPE);
+        goto err;
+    }
+    if (i <= 0)
+        goto err;
+
+    if (BN_bin2bn(buf, num, f) == NULL)
+        goto err;
+
+    if (BN_ucmp(f, rsa->n) >= 0) {
+        /* usually the padding functions would catch this */
+        RSAerr(RSA_F_RSA_OSSL_PUBLIC_ENCRYPT,
+               RSA_R_DATA_TOO_LARGE_FOR_MODULUS);
+        goto err;
+    }
+
+    if (rsa->flags & RSA_FLAG_CACHE_PUBLIC)
+        if (!BN_MONT_CTX_set_locked(&rsa->_method_mod_n, rsa->lock,
+                                    rsa->n, ctx))
+            goto err;
+
+    if (!rsa->meth->bn_mod_exp(ret, f, rsa->e, rsa->n, ctx,
+                               rsa->_method_mod_n))
+        goto err;
+
+    /*
+     * BN_bn2binpad puts in leading 0 bytes if the number is less than
+     * the length of the modulus.
+     */
+    r = BN_bn2binpad(ret, to, num);
+ err:
+    if (ctx != NULL)
+        BN_CTX_end(ctx);
+    BN_CTX_free(ctx);
+    OPENSSL_clear_free(buf, num);
+    return r;
+}
+
+static BN_BLINDING *rsa_get_blinding(RSA *rsa, int *local, BN_CTX *ctx)
+{
+    BN_BLINDING *ret;
+
+    CRYPTO_THREAD_write_lock(rsa->lock);
+
+    if (rsa->blinding == NULL) {
+        rsa->blinding = RSA_setup_blinding(rsa, ctx);
+    }
+
+    ret = rsa->blinding;
+    if (ret == NULL)
+        goto err;
+
+    if (BN_BLINDING_is_current_thread(ret)) {
+        /* rsa->blinding is ours! */
+
+        *local = 1;
+    } else {
+        /* resort to rsa->mt_blinding instead */
+
+        /*
+         * instructs rsa_blinding_convert(), rsa_blinding_invert() that the
+         * BN_BLINDING is shared, meaning that accesses require locks, and
+         * that the blinding factor must be stored outside the BN_BLINDING
+         */
+        *local = 0;
+
+        if (rsa->mt_blinding == NULL) {
+            rsa->mt_blinding = RSA_setup_blinding(rsa, ctx);
+        }
+        ret = rsa->mt_blinding;
+    }
+
+ err:
+    CRYPTO_THREAD_unlock(rsa->lock);
+    return ret;
+}
+
+static int rsa_blinding_convert(BN_BLINDING *b, BIGNUM *f, BIGNUM *unblind,
+                                BN_CTX *ctx)
+{
+    if (unblind == NULL) {
+        /*
+         * Local blinding: store the unblinding factor in BN_BLINDING.
+         */
+        return BN_BLINDING_convert_ex(f, NULL, b, ctx);
+    } else {
+        /*
+         * Shared blinding: store the unblinding factor outside BN_BLINDING.
+         */
+        int ret;
+
+        BN_BLINDING_lock(b);
+        ret = BN_BLINDING_convert_ex(f, unblind, b, ctx);
+        BN_BLINDING_unlock(b);
+
+        return ret;
+    }
+}
+
+static int rsa_blinding_invert(BN_BLINDING *b, BIGNUM *f, BIGNUM *unblind,
+                               BN_CTX *ctx)
+{
+    /*
+     * For local blinding, unblind is set to NULL, and BN_BLINDING_invert_ex
+     * will use the unblinding factor stored in BN_BLINDING. If BN_BLINDING
+     * is shared between threads, unblind must be non-null:
+     * BN_BLINDING_invert_ex will then use the local unblinding factor, and
+     * will only read the modulus from BN_BLINDING. In both cases it's safe
+     * to access the blinding without a lock.
+     */
+    return BN_BLINDING_invert_ex(f, unblind, b, ctx);
+}
+
+/* signing */
+static int rsa_ossl_private_encrypt(int flen, const unsigned char *from,
+                                   unsigned char *to, RSA *rsa, int padding)
+{
+    BIGNUM *f, *ret, *res;
+    int i, num = 0, r = -1;
+    unsigned char *buf = NULL;
+    BN_CTX *ctx = NULL;
+    int local_blinding = 0;
+    /*
+     * Used only if the blinding structure is shared. A non-NULL unblind
+     * instructs rsa_blinding_convert() and rsa_blinding_invert() to store
+     * the unblinding factor outside the blinding structure.
+     */
+    BIGNUM *unblind = NULL;
+    BN_BLINDING *blinding = NULL;
+
+    if ((ctx = BN_CTX_new()) == NULL)
+        goto err;
+    BN_CTX_start(ctx);
+    f = BN_CTX_get(ctx);
+    ret = BN_CTX_get(ctx);
+    num = BN_num_bytes(rsa->n);
+    buf = OPENSSL_malloc(num);
+    if (ret == NULL || buf == NULL) {
+        RSAerr(RSA_F_RSA_OSSL_PRIVATE_ENCRYPT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    switch (padding) {
+    case RSA_PKCS1_PADDING:
+        i = RSA_padding_add_PKCS1_type_1(buf, num, from, flen);
+        break;
+    case RSA_X931_PADDING:
+        i = RSA_padding_add_X931(buf, num, from, flen);
+        break;
+    case RSA_NO_PADDING:
+        i = RSA_padding_add_none(buf, num, from, flen);
+        break;
+    case RSA_SSLV23_PADDING:
+    default:
+        RSAerr(RSA_F_RSA_OSSL_PRIVATE_ENCRYPT, RSA_R_UNKNOWN_PADDING_TYPE);
+        goto err;
+    }
+    if (i <= 0)
+        goto err;
+
+    if (BN_bin2bn(buf, num, f) == NULL)
+        goto err;
+
+    if (BN_ucmp(f, rsa->n) >= 0) {
+        /* usually the padding functions would catch this */
+        RSAerr(RSA_F_RSA_OSSL_PRIVATE_ENCRYPT,
+               RSA_R_DATA_TOO_LARGE_FOR_MODULUS);
+        goto err;
+    }
+
+    if (rsa->flags & RSA_FLAG_CACHE_PUBLIC)
+        if (!BN_MONT_CTX_set_locked(&rsa->_method_mod_n, rsa->lock,
+                                    rsa->n, ctx))
+            goto err;
+
+    if (!(rsa->flags & RSA_FLAG_NO_BLINDING)) {
+        blinding = rsa_get_blinding(rsa, &local_blinding, ctx);
+        if (blinding == NULL) {
+            RSAerr(RSA_F_RSA_OSSL_PRIVATE_ENCRYPT, ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+    }
+
+    if (blinding != NULL) {
+        if (!local_blinding && ((unblind = BN_CTX_get(ctx)) == NULL)) {
+            RSAerr(RSA_F_RSA_OSSL_PRIVATE_ENCRYPT, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        if (!rsa_blinding_convert(blinding, f, unblind, ctx))
+            goto err;
+    }
+
+    if ((rsa->flags & RSA_FLAG_EXT_PKEY) ||
+        (rsa->version == RSA_ASN1_VERSION_MULTI) ||
+        ((rsa->p != NULL) &&
+         (rsa->q != NULL) &&
+         (rsa->dmp1 != NULL) && (rsa->dmq1 != NULL) && (rsa->iqmp != NULL))) {
+        if (!rsa->meth->rsa_mod_exp(ret, f, rsa, ctx))
+            goto err;
+    } else {
+        BIGNUM *d = BN_new();
+        if (d == NULL) {
+            RSAerr(RSA_F_RSA_OSSL_PRIVATE_ENCRYPT, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        BN_with_flags(d, rsa->d, BN_FLG_CONSTTIME);
+
+        if (!rsa->meth->bn_mod_exp(ret, f, d, rsa->n, ctx,
+                                   rsa->_method_mod_n)) {
+            BN_free(d);
+            goto err;
+        }
+        /* We MUST free d before any further use of rsa->d */
+        BN_free(d);
+    }
+
+    if (blinding)
+        if (!rsa_blinding_invert(blinding, ret, unblind, ctx))
+            goto err;
+
+    if (padding == RSA_X931_PADDING) {
+        if (!BN_sub(f, rsa->n, ret))
+            goto err;
+        if (BN_cmp(ret, f) > 0)
+            res = f;
+        else
+            res = ret;
+    } else {
+        res = ret;
+    }
+
+    /*
+     * BN_bn2binpad puts in leading 0 bytes if the number is less than
+     * the length of the modulus.
+     */
+    r = BN_bn2binpad(res, to, num);
+ err:
+    if (ctx != NULL)
+        BN_CTX_end(ctx);
+    BN_CTX_free(ctx);
+    OPENSSL_clear_free(buf, num);
+    return r;
+}
+
+static int rsa_ossl_private_decrypt(int flen, const unsigned char *from,
+                                   unsigned char *to, RSA *rsa, int padding)
+{
+    BIGNUM *f, *ret;
+    int j, num = 0, r = -1;
+    unsigned char *buf = NULL;
+    BN_CTX *ctx = NULL;
+    int local_blinding = 0;
+    /*
+     * Used only if the blinding structure is shared. A non-NULL unblind
+     * instructs rsa_blinding_convert() and rsa_blinding_invert() to store
+     * the unblinding factor outside the blinding structure.
+     */
+    BIGNUM *unblind = NULL;
+    BN_BLINDING *blinding = NULL;
+
+    if ((ctx = BN_CTX_new()) == NULL)
+        goto err;
+    BN_CTX_start(ctx);
+    f = BN_CTX_get(ctx);
+    ret = BN_CTX_get(ctx);
+    num = BN_num_bytes(rsa->n);
+    buf = OPENSSL_malloc(num);
+    if (ret == NULL || buf == NULL) {
+        RSAerr(RSA_F_RSA_OSSL_PRIVATE_DECRYPT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    /*
+     * This check was for equality but PGP does evil things and chops off the
+     * top '0' bytes
+     */
+    if (flen > num) {
+        RSAerr(RSA_F_RSA_OSSL_PRIVATE_DECRYPT,
+               RSA_R_DATA_GREATER_THAN_MOD_LEN);
+        goto err;
+    }
+
+    /* make data into a big number */
+    if (BN_bin2bn(from, (int)flen, f) == NULL)
+        goto err;
+
+    if (BN_ucmp(f, rsa->n) >= 0) {
+        RSAerr(RSA_F_RSA_OSSL_PRIVATE_DECRYPT,
+               RSA_R_DATA_TOO_LARGE_FOR_MODULUS);
+        goto err;
+    }
+
+    if (!(rsa->flags & RSA_FLAG_NO_BLINDING)) {
+        blinding = rsa_get_blinding(rsa, &local_blinding, ctx);
+        if (blinding == NULL) {
+            RSAerr(RSA_F_RSA_OSSL_PRIVATE_DECRYPT, ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+    }
+
+    if (blinding != NULL) {
+        if (!local_blinding && ((unblind = BN_CTX_get(ctx)) == NULL)) {
+            RSAerr(RSA_F_RSA_OSSL_PRIVATE_DECRYPT, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        if (!rsa_blinding_convert(blinding, f, unblind, ctx))
+            goto err;
+    }
+
+    /* do the decrypt */
+    if ((rsa->flags & RSA_FLAG_EXT_PKEY) ||
+        (rsa->version == RSA_ASN1_VERSION_MULTI) ||
+        ((rsa->p != NULL) &&
+         (rsa->q != NULL) &&
+         (rsa->dmp1 != NULL) && (rsa->dmq1 != NULL) && (rsa->iqmp != NULL))) {
+        if (!rsa->meth->rsa_mod_exp(ret, f, rsa, ctx))
+            goto err;
+    } else {
+        BIGNUM *d = BN_new();
+        if (d == NULL) {
+            RSAerr(RSA_F_RSA_OSSL_PRIVATE_DECRYPT, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        BN_with_flags(d, rsa->d, BN_FLG_CONSTTIME);
+
+        if (rsa->flags & RSA_FLAG_CACHE_PUBLIC)
+            if (!BN_MONT_CTX_set_locked(&rsa->_method_mod_n, rsa->lock,
+                                        rsa->n, ctx)) {
+                BN_free(d);
+                goto err;
+            }
+        if (!rsa->meth->bn_mod_exp(ret, f, d, rsa->n, ctx,
+                                   rsa->_method_mod_n)) {
+            BN_free(d);
+            goto err;
+        }
+        /* We MUST free d before any further use of rsa->d */
+        BN_free(d);
+    }
+
+    if (blinding)
+        if (!rsa_blinding_invert(blinding, ret, unblind, ctx))
+            goto err;
+
+    j = BN_bn2binpad(ret, buf, num);
+
+    switch (padding) {
+    case RSA_PKCS1_PADDING:
+        r = RSA_padding_check_PKCS1_type_2(to, num, buf, j, num);
+        break;
+    case RSA_PKCS1_OAEP_PADDING:
+        r = RSA_padding_check_PKCS1_OAEP(to, num, buf, j, num, NULL, 0);
+        break;
+    case RSA_SSLV23_PADDING:
+        r = RSA_padding_check_SSLv23(to, num, buf, j, num);
+        break;
+    case RSA_NO_PADDING:
+        memcpy(to, buf, (r = j));
+        break;
+    default:
+        RSAerr(RSA_F_RSA_OSSL_PRIVATE_DECRYPT, RSA_R_UNKNOWN_PADDING_TYPE);
+        goto err;
+    }
+    RSAerr(RSA_F_RSA_OSSL_PRIVATE_DECRYPT, RSA_R_PADDING_CHECK_FAILED);
+    err_clear_last_constant_time(r >= 0);
+
+ err:
+    if (ctx != NULL)
+        BN_CTX_end(ctx);
+    BN_CTX_free(ctx);
+    OPENSSL_clear_free(buf, num);
+    return r;
+}
+
+/* signature verification */
+static int rsa_ossl_public_decrypt(int flen, const unsigned char *from,
+                                  unsigned char *to, RSA *rsa, int padding)
+{
+    BIGNUM *f, *ret;
+    int i, num = 0, r = -1;
+    unsigned char *buf = NULL;
+    BN_CTX *ctx = NULL;
+
+    if (BN_num_bits(rsa->n) > OPENSSL_RSA_MAX_MODULUS_BITS) {
+        RSAerr(RSA_F_RSA_OSSL_PUBLIC_DECRYPT, RSA_R_MODULUS_TOO_LARGE);
+        return -1;
+    }
+
+    if (BN_ucmp(rsa->n, rsa->e) <= 0) {
+        RSAerr(RSA_F_RSA_OSSL_PUBLIC_DECRYPT, RSA_R_BAD_E_VALUE);
+        return -1;
+    }
+
+    /* for large moduli, enforce exponent limit */
+    if (BN_num_bits(rsa->n) > OPENSSL_RSA_SMALL_MODULUS_BITS) {
+        if (BN_num_bits(rsa->e) > OPENSSL_RSA_MAX_PUBEXP_BITS) {
+            RSAerr(RSA_F_RSA_OSSL_PUBLIC_DECRYPT, RSA_R_BAD_E_VALUE);
+            return -1;
+        }
+    }
+
+    if ((ctx = BN_CTX_new()) == NULL)
+        goto err;
+    BN_CTX_start(ctx);
+    f = BN_CTX_get(ctx);
+    ret = BN_CTX_get(ctx);
+    num = BN_num_bytes(rsa->n);
+    buf = OPENSSL_malloc(num);
+    if (ret == NULL || buf == NULL) {
+        RSAerr(RSA_F_RSA_OSSL_PUBLIC_DECRYPT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    /*
+     * This check was for equality but PGP does evil things and chops off the
+     * top '0' bytes
+     */
+    if (flen > num) {
+        RSAerr(RSA_F_RSA_OSSL_PUBLIC_DECRYPT, RSA_R_DATA_GREATER_THAN_MOD_LEN);
+        goto err;
+    }
+
+    if (BN_bin2bn(from, flen, f) == NULL)
+        goto err;
+
+    if (BN_ucmp(f, rsa->n) >= 0) {
+        RSAerr(RSA_F_RSA_OSSL_PUBLIC_DECRYPT,
+               RSA_R_DATA_TOO_LARGE_FOR_MODULUS);
+        goto err;
+    }
+
+    if (rsa->flags & RSA_FLAG_CACHE_PUBLIC)
+        if (!BN_MONT_CTX_set_locked(&rsa->_method_mod_n, rsa->lock,
+                                    rsa->n, ctx))
+            goto err;
+
+    if (!rsa->meth->bn_mod_exp(ret, f, rsa->e, rsa->n, ctx,
+                               rsa->_method_mod_n))
+        goto err;
+
+    if ((padding == RSA_X931_PADDING) && ((bn_get_words(ret)[0] & 0xf) != 12))
+        if (!BN_sub(ret, rsa->n, ret))
+            goto err;
+
+    i = BN_bn2binpad(ret, buf, num);
+
+    switch (padding) {
+    case RSA_PKCS1_PADDING:
+        r = RSA_padding_check_PKCS1_type_1(to, num, buf, i, num);
+        break;
+    case RSA_X931_PADDING:
+        r = RSA_padding_check_X931(to, num, buf, i, num);
+        break;
+    case RSA_NO_PADDING:
+        memcpy(to, buf, (r = i));
+        break;
+    default:
+        RSAerr(RSA_F_RSA_OSSL_PUBLIC_DECRYPT, RSA_R_UNKNOWN_PADDING_TYPE);
+        goto err;
+    }
+    if (r < 0)
+        RSAerr(RSA_F_RSA_OSSL_PUBLIC_DECRYPT, RSA_R_PADDING_CHECK_FAILED);
+
+ err:
+    if (ctx != NULL)
+        BN_CTX_end(ctx);
+    BN_CTX_free(ctx);
+    OPENSSL_clear_free(buf, num);
+    return r;
+}
+
+static int rsa_ossl_mod_exp(BIGNUM *r0, const BIGNUM *I, RSA *rsa, BN_CTX *ctx)
+{
+    BIGNUM *r1, *m1, *vrfy, *r2, *m[RSA_MAX_PRIME_NUM - 2];
+    int ret = 0, i, ex_primes = 0, smooth = 0;
+    RSA_PRIME_INFO *pinfo;
+
+    BN_CTX_start(ctx);
+
+    r1 = BN_CTX_get(ctx);
+    r2 = BN_CTX_get(ctx);
+    m1 = BN_CTX_get(ctx);
+    vrfy = BN_CTX_get(ctx);
+    if (vrfy == NULL)
+        goto err;
+
+    if (rsa->version == RSA_ASN1_VERSION_MULTI
+        && ((ex_primes = sk_RSA_PRIME_INFO_num(rsa->prime_infos)) <= 0
+             || ex_primes > RSA_MAX_PRIME_NUM - 2))
+        goto err;
+
+    if (rsa->flags & RSA_FLAG_CACHE_PRIVATE) {
+        BIGNUM *factor = BN_new();
+
+        if (factor == NULL)
+            goto err;
+
+        /*
+         * Make sure BN_mod_inverse in Montgomery initialization uses the
+         * BN_FLG_CONSTTIME flag
+         */
+        if (!(BN_with_flags(factor, rsa->p, BN_FLG_CONSTTIME),
+              BN_MONT_CTX_set_locked(&rsa->_method_mod_p, rsa->lock,
+                                     factor, ctx))
+            || !(BN_with_flags(factor, rsa->q, BN_FLG_CONSTTIME),
+                 BN_MONT_CTX_set_locked(&rsa->_method_mod_q, rsa->lock,
+                                        factor, ctx))) {
+            BN_free(factor);
+            goto err;
+        }
+        for (i = 0; i < ex_primes; i++) {
+            pinfo = sk_RSA_PRIME_INFO_value(rsa->prime_infos, i);
+            BN_with_flags(factor, pinfo->r, BN_FLG_CONSTTIME);
+            if (!BN_MONT_CTX_set_locked(&pinfo->m, rsa->lock, factor, ctx)) {
+                BN_free(factor);
+                goto err;
+            }
+        }
+        /*
+         * We MUST free |factor| before any further use of the prime factors
+         */
+        BN_free(factor);
+
+        smooth = (ex_primes == 0)
+                 && (rsa->meth->bn_mod_exp == BN_mod_exp_mont)
+                 && (BN_num_bits(rsa->q) == BN_num_bits(rsa->p));
+    }
+
+    if (rsa->flags & RSA_FLAG_CACHE_PUBLIC)
+        if (!BN_MONT_CTX_set_locked(&rsa->_method_mod_n, rsa->lock,
+                                    rsa->n, ctx))
+            goto err;
+
+    if (smooth) {
+        /*
+         * Conversion from Montgomery domain, a.k.a. Montgomery reduction,
+         * accepts values in [0-m*2^w) range. w is m's bit width rounded up
+         * to limb width. So that at the very least if |I| is fully reduced,
+         * i.e. less than p*q, we can count on from-to round to perform
+         * below modulo operations on |I|. Unlike BN_mod it's constant time.
+         */
+        if (/* m1 = I moq q */
+            !bn_from_mont_fixed_top(m1, I, rsa->_method_mod_q, ctx)
+            || !bn_to_mont_fixed_top(m1, m1, rsa->_method_mod_q, ctx)
+            /* m1 = m1^dmq1 mod q */
+            || !BN_mod_exp_mont_consttime(m1, m1, rsa->dmq1, rsa->q, ctx,
+                                          rsa->_method_mod_q)
+            /* r1 = I mod p */
+            || !bn_from_mont_fixed_top(r1, I, rsa->_method_mod_p, ctx)
+            || !bn_to_mont_fixed_top(r1, r1, rsa->_method_mod_p, ctx)
+            /* r1 = r1^dmp1 mod p */
+            || !BN_mod_exp_mont_consttime(r1, r1, rsa->dmp1, rsa->p, ctx,
+                                          rsa->_method_mod_p)
+            /* r1 = (r1 - m1) mod p */
+            /*
+             * bn_mod_sub_fixed_top is not regular modular subtraction,
+             * it can tolerate subtrahend to be larger than modulus, but
+             * not bit-wise wider. This makes up for uncommon q>p case,
+             * when |m1| can be larger than |rsa->p|.
+             */
+            || !bn_mod_sub_fixed_top(r1, r1, m1, rsa->p)
+
+            /* r1 = r1 * iqmp mod p */
+            || !bn_to_mont_fixed_top(r1, r1, rsa->_method_mod_p, ctx)
+            || !bn_mul_mont_fixed_top(r1, r1, rsa->iqmp, rsa->_method_mod_p,
+                                      ctx)
+            /* r0 = r1 * q + m1 */
+            || !bn_mul_fixed_top(r0, r1, rsa->q, ctx)
+            || !bn_mod_add_fixed_top(r0, r0, m1, rsa->n))
+            goto err;
+
+        goto tail;
+    }
+
+    /* compute I mod q */
+    {
+        BIGNUM *c = BN_new();
+        if (c == NULL)
+            goto err;
+        BN_with_flags(c, I, BN_FLG_CONSTTIME);
+
+        if (!BN_mod(r1, c, rsa->q, ctx)) {
+            BN_free(c);
+            goto err;
+        }
+
+        {
+            BIGNUM *dmq1 = BN_new();
+            if (dmq1 == NULL) {
+                BN_free(c);
+                goto err;
+            }
+            BN_with_flags(dmq1, rsa->dmq1, BN_FLG_CONSTTIME);
+
+            /* compute r1^dmq1 mod q */
+            if (!rsa->meth->bn_mod_exp(m1, r1, dmq1, rsa->q, ctx,
+                                       rsa->_method_mod_q)) {
+                BN_free(c);
+                BN_free(dmq1);
+                goto err;
+            }
+            /* We MUST free dmq1 before any further use of rsa->dmq1 */
+            BN_free(dmq1);
+        }
+
+        /* compute I mod p */
+        if (!BN_mod(r1, c, rsa->p, ctx)) {
+            BN_free(c);
+            goto err;
+        }
+        /* We MUST free c before any further use of I */
+        BN_free(c);
+    }
+
+    {
+        BIGNUM *dmp1 = BN_new();
+        if (dmp1 == NULL)
+            goto err;
+        BN_with_flags(dmp1, rsa->dmp1, BN_FLG_CONSTTIME);
+
+        /* compute r1^dmp1 mod p */
+        if (!rsa->meth->bn_mod_exp(r0, r1, dmp1, rsa->p, ctx,
+                                   rsa->_method_mod_p)) {
+            BN_free(dmp1);
+            goto err;
+        }
+        /* We MUST free dmp1 before any further use of rsa->dmp1 */
+        BN_free(dmp1);
+    }
+
+    /*
+     * calculate m_i in multi-prime case
+     *
+     * TODO:
+     * 1. squash the following two loops and calculate |m_i| there.
+     * 2. remove cc and reuse |c|.
+     * 3. remove |dmq1| and |dmp1| in previous block and use |di|.
+     *
+     * If these things are done, the code will be more readable.
+     */
+    if (ex_primes > 0) {
+        BIGNUM *di = BN_new(), *cc = BN_new();
+
+        if (cc == NULL || di == NULL) {
+            BN_free(cc);
+            BN_free(di);
+            goto err;
+        }
+
+        for (i = 0; i < ex_primes; i++) {
+            /* prepare m_i */
+            if ((m[i] = BN_CTX_get(ctx)) == NULL) {
+                BN_free(cc);
+                BN_free(di);
+                goto err;
+            }
+
+            pinfo = sk_RSA_PRIME_INFO_value(rsa->prime_infos, i);
+
+            /* prepare c and d_i */
+            BN_with_flags(cc, I, BN_FLG_CONSTTIME);
+            BN_with_flags(di, pinfo->d, BN_FLG_CONSTTIME);
+
+            if (!BN_mod(r1, cc, pinfo->r, ctx)) {
+                BN_free(cc);
+                BN_free(di);
+                goto err;
+            }
+            /* compute r1 ^ d_i mod r_i */
+            if (!rsa->meth->bn_mod_exp(m[i], r1, di, pinfo->r, ctx, pinfo->m)) {
+                BN_free(cc);
+                BN_free(di);
+                goto err;
+            }
+        }
+
+        BN_free(cc);
+        BN_free(di);
+    }
+
+    if (!BN_sub(r0, r0, m1))
+        goto err;
+    /*
+     * This will help stop the size of r0 increasing, which does affect the
+     * multiply if it optimised for a power of 2 size
+     */
+    if (BN_is_negative(r0))
+        if (!BN_add(r0, r0, rsa->p))
+            goto err;
+
+    if (!BN_mul(r1, r0, rsa->iqmp, ctx))
+        goto err;
+
+    {
+        BIGNUM *pr1 = BN_new();
+        if (pr1 == NULL)
+            goto err;
+        BN_with_flags(pr1, r1, BN_FLG_CONSTTIME);
+
+        if (!BN_mod(r0, pr1, rsa->p, ctx)) {
+            BN_free(pr1);
+            goto err;
+        }
+        /* We MUST free pr1 before any further use of r1 */
+        BN_free(pr1);
+    }
+
+    /*
+     * If p < q it is occasionally possible for the correction of adding 'p'
+     * if r0 is negative above to leave the result still negative. This can
+     * break the private key operations: the following second correction
+     * should *always* correct this rare occurrence. This will *never* happen
+     * with OpenSSL generated keys because they ensure p > q [steve]
+     */
+    if (BN_is_negative(r0))
+        if (!BN_add(r0, r0, rsa->p))
+            goto err;
+    if (!BN_mul(r1, r0, rsa->q, ctx))
+        goto err;
+    if (!BN_add(r0, r1, m1))
+        goto err;
+
+    /* add m_i to m in multi-prime case */
+    if (ex_primes > 0) {
+        BIGNUM *pr2 = BN_new();
+
+        if (pr2 == NULL)
+            goto err;
+
+        for (i = 0; i < ex_primes; i++) {
+            pinfo = sk_RSA_PRIME_INFO_value(rsa->prime_infos, i);
+            if (!BN_sub(r1, m[i], r0)) {
+                BN_free(pr2);
+                goto err;
+            }
+
+            if (!BN_mul(r2, r1, pinfo->t, ctx)) {
+                BN_free(pr2);
+                goto err;
+            }
+
+            BN_with_flags(pr2, r2, BN_FLG_CONSTTIME);
+
+            if (!BN_mod(r1, pr2, pinfo->r, ctx)) {
+                BN_free(pr2);
+                goto err;
+            }
+
+            if (BN_is_negative(r1))
+                if (!BN_add(r1, r1, pinfo->r)) {
+                    BN_free(pr2);
+                    goto err;
+                }
+            if (!BN_mul(r1, r1, pinfo->pp, ctx)) {
+                BN_free(pr2);
+                goto err;
+            }
+            if (!BN_add(r0, r0, r1)) {
+                BN_free(pr2);
+                goto err;
+            }
+        }
+        BN_free(pr2);
+    }
+
+ tail:
+    if (rsa->e && rsa->n) {
+        if (rsa->meth->bn_mod_exp == BN_mod_exp_mont) {
+            if (!BN_mod_exp_mont(vrfy, r0, rsa->e, rsa->n, ctx,
+                                 rsa->_method_mod_n))
+                goto err;
+        } else {
+            bn_correct_top(r0);
+            if (!rsa->meth->bn_mod_exp(vrfy, r0, rsa->e, rsa->n, ctx,
+                                       rsa->_method_mod_n))
+                goto err;
+        }
+        /*
+         * If 'I' was greater than (or equal to) rsa->n, the operation will
+         * be equivalent to using 'I mod n'. However, the result of the
+         * verify will *always* be less than 'n' so we don't check for
+         * absolute equality, just congruency.
+         */
+        if (!BN_sub(vrfy, vrfy, I))
+            goto err;
+        if (BN_is_zero(vrfy)) {
+            bn_correct_top(r0);
+            ret = 1;
+            goto err;   /* not actually error */
+        }
+        if (!BN_mod(vrfy, vrfy, rsa->n, ctx))
+            goto err;
+        if (BN_is_negative(vrfy))
+            if (!BN_add(vrfy, vrfy, rsa->n))
+                goto err;
+        if (!BN_is_zero(vrfy)) {
+            /*
+             * 'I' and 'vrfy' aren't congruent mod n. Don't leak
+             * miscalculated CRT output, just do a raw (slower) mod_exp and
+             * return that instead.
+             */
+
+            BIGNUM *d = BN_new();
+            if (d == NULL)
+                goto err;
+            BN_with_flags(d, rsa->d, BN_FLG_CONSTTIME);
+
+            if (!rsa->meth->bn_mod_exp(r0, I, d, rsa->n, ctx,
+                                       rsa->_method_mod_n)) {
+                BN_free(d);
+                goto err;
+            }
+            /* We MUST free d before any further use of rsa->d */
+            BN_free(d);
+        }
+    }
+    /*
+     * It's unfortunate that we have to bn_correct_top(r0). What hopefully
+     * saves the day is that correction is highly unlike, and private key
+     * operations are customarily performed on blinded message. Which means
+     * that attacker won't observe correlation with chosen plaintext.
+     * Secondly, remaining code would still handle it in same computational
+     * time and even conceal memory access pattern around corrected top.
+     */
+    bn_correct_top(r0);
+    ret = 1;
+ err:
+    BN_CTX_end(ctx);
+    return ret;
+}
+
+static int rsa_ossl_init(RSA *rsa)
+{
+    rsa->flags |= RSA_FLAG_CACHE_PUBLIC | RSA_FLAG_CACHE_PRIVATE;
+    return 1;
+}
+
+static int rsa_ossl_finish(RSA *rsa)
+{
+    int i;
+    RSA_PRIME_INFO *pinfo;
+
+    BN_MONT_CTX_free(rsa->_method_mod_n);
+    BN_MONT_CTX_free(rsa->_method_mod_p);
+    BN_MONT_CTX_free(rsa->_method_mod_q);
+    for (i = 0; i < sk_RSA_PRIME_INFO_num(rsa->prime_infos); i++) {
+        pinfo = sk_RSA_PRIME_INFO_value(rsa->prime_infos, i);
+        BN_MONT_CTX_free(pinfo->m);
+    }
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_pk1.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_pk1.c
new file mode 100644
index 000000000..062690741
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_pk1.c
@@ -0,0 +1,255 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/constant_time_locl.h"
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include <openssl/rsa.h>
+#include <openssl/rand.h>
+
+int RSA_padding_add_PKCS1_type_1(unsigned char *to, int tlen,
+                                 const unsigned char *from, int flen)
+{
+    int j;
+    unsigned char *p;
+
+    if (flen > (tlen - RSA_PKCS1_PADDING_SIZE)) {
+        RSAerr(RSA_F_RSA_PADDING_ADD_PKCS1_TYPE_1,
+               RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE);
+        return 0;
+    }
+
+    p = (unsigned char *)to;
+
+    *(p++) = 0;
+    *(p++) = 1;                 /* Private Key BT (Block Type) */
+
+    /* pad out with 0xff data */
+    j = tlen - 3 - flen;
+    memset(p, 0xff, j);
+    p += j;
+    *(p++) = '\0';
+    memcpy(p, from, (unsigned int)flen);
+    return 1;
+}
+
+int RSA_padding_check_PKCS1_type_1(unsigned char *to, int tlen,
+                                   const unsigned char *from, int flen,
+                                   int num)
+{
+    int i, j;
+    const unsigned char *p;
+
+    p = from;
+
+    /*
+     * The format is
+     * 00 || 01 || PS || 00 || D
+     * PS - padding string, at least 8 bytes of FF
+     * D  - data.
+     */
+
+    if (num < 11)
+        return -1;
+
+    /* Accept inputs with and without the leading 0-byte. */
+    if (num == flen) {
+        if ((*p++) != 0x00) {
+            RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_1,
+                   RSA_R_INVALID_PADDING);
+            return -1;
+        }
+        flen--;
+    }
+
+    if ((num != (flen + 1)) || (*(p++) != 0x01)) {
+        RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_1,
+               RSA_R_BLOCK_TYPE_IS_NOT_01);
+        return -1;
+    }
+
+    /* scan over padding data */
+    j = flen - 1;               /* one for type. */
+    for (i = 0; i < j; i++) {
+        if (*p != 0xff) {       /* should decrypt to 0xff */
+            if (*p == 0) {
+                p++;
+                break;
+            } else {
+                RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_1,
+                       RSA_R_BAD_FIXED_HEADER_DECRYPT);
+                return -1;
+            }
+        }
+        p++;
+    }
+
+    if (i == j) {
+        RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_1,
+               RSA_R_NULL_BEFORE_BLOCK_MISSING);
+        return -1;
+    }
+
+    if (i < 8) {
+        RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_1,
+               RSA_R_BAD_PAD_BYTE_COUNT);
+        return -1;
+    }
+    i++;                        /* Skip over the '\0' */
+    j -= i;
+    if (j > tlen) {
+        RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_1, RSA_R_DATA_TOO_LARGE);
+        return -1;
+    }
+    memcpy(to, p, (unsigned int)j);
+
+    return j;
+}
+
+int RSA_padding_add_PKCS1_type_2(unsigned char *to, int tlen,
+                                 const unsigned char *from, int flen)
+{
+    int i, j;
+    unsigned char *p;
+
+    if (flen > (tlen - 11)) {
+        RSAerr(RSA_F_RSA_PADDING_ADD_PKCS1_TYPE_2,
+               RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE);
+        return 0;
+    }
+
+    p = (unsigned char *)to;
+
+    *(p++) = 0;
+    *(p++) = 2;                 /* Public Key BT (Block Type) */
+
+    /* pad out with non-zero random data */
+    j = tlen - 3 - flen;
+
+    if (RAND_bytes(p, j) <= 0)
+        return 0;
+    for (i = 0; i < j; i++) {
+        if (*p == '\0')
+            do {
+                if (RAND_bytes(p, 1) <= 0)
+                    return 0;
+            } while (*p == '\0');
+        p++;
+    }
+
+    *(p++) = '\0';
+
+    memcpy(p, from, (unsigned int)flen);
+    return 1;
+}
+
+int RSA_padding_check_PKCS1_type_2(unsigned char *to, int tlen,
+                                   const unsigned char *from, int flen,
+                                   int num)
+{
+    int i;
+    /* |em| is the encoded message, zero-padded to exactly |num| bytes */
+    unsigned char *em = NULL;
+    unsigned int good, found_zero_byte, mask;
+    int zero_index = 0, msg_index, mlen = -1;
+
+    if (tlen <= 0 || flen <= 0)
+        return -1;
+
+    /*
+     * PKCS#1 v1.5 decryption. See "PKCS #1 v2.2: RSA Cryptography Standard",
+     * section 7.2.2.
+     */
+
+    if (flen > num || num < 11) {
+        RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_2,
+               RSA_R_PKCS_DECODING_ERROR);
+        return -1;
+    }
+
+    em = OPENSSL_malloc(num);
+    if (em == NULL) {
+        RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_2, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+    /*
+     * Caller is encouraged to pass zero-padded message created with
+     * BN_bn2binpad. Trouble is that since we can't read out of |from|'s
+     * bounds, it's impossible to have an invariant memory access pattern
+     * in case |from| was not zero-padded in advance.
+     */
+    for (from += flen, em += num, i = 0; i < num; i++) {
+        mask = ~constant_time_is_zero(flen);
+        flen -= 1 & mask;
+        from -= 1 & mask;
+        *--em = *from & mask;
+    }
+    from = em;
+
+    good = constant_time_is_zero(from[0]);
+    good &= constant_time_eq(from[1], 2);
+
+    /* scan over padding data */
+    found_zero_byte = 0;
+    for (i = 2; i < num; i++) {
+        unsigned int equals0 = constant_time_is_zero(from[i]);
+
+        zero_index = constant_time_select_int(~found_zero_byte & equals0,
+                                              i, zero_index);
+        found_zero_byte |= equals0;
+    }
+
+    /*
+     * PS must be at least 8 bytes long, and it starts two bytes into |from|.
+     * If we never found a 0-byte, then |zero_index| is 0 and the check
+     * also fails.
+     */
+    good &= constant_time_ge(zero_index, 2 + 8);
+
+    /*
+     * Skip the zero byte. This is incorrect if we never found a zero-byte
+     * but in this case we also do not copy the message out.
+     */
+    msg_index = zero_index + 1;
+    mlen = num - msg_index;
+
+    /*
+     * For good measure, do this check in constant time as well.
+     */
+    good &= constant_time_ge(tlen, mlen);
+
+    /*
+     * Even though we can't fake result's length, we can pretend copying
+     * |tlen| bytes where |mlen| bytes would be real. Last |tlen| of |num|
+     * bytes are viewed as circular buffer with start at |tlen|-|mlen'|,
+     * where |mlen'| is "saturated" |mlen| value. Deducing information
+     * about failure or |mlen| would take attacker's ability to observe
+     * memory access pattern with byte granularity *as it occurs*. It
+     * should be noted that failure is indistinguishable from normal
+     * operation if |tlen| is fixed by protocol.
+     */
+    tlen = constant_time_select_int(constant_time_lt(num, tlen), num, tlen);
+    msg_index = constant_time_select_int(good, msg_index, num - tlen);
+    mlen = num - msg_index;
+    for (from += msg_index, mask = good, i = 0; i < tlen; i++) {
+        unsigned int equals = constant_time_eq(i, mlen);
+
+        from -= tlen & equals;  /* if (i == mlen) rewind   */
+        mask &= mask ^ equals;  /* if (i == mlen) mask = 0 */
+        to[i] = constant_time_select_8(mask, from[i], to[i]);
+    }
+
+    OPENSSL_clear_free(em, num);
+    RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_2, RSA_R_PKCS_DECODING_ERROR);
+    err_clear_last_constant_time(1 & good);
+
+    return constant_time_select_int(good, mlen, -1);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_pmeth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_pmeth.c
new file mode 100644
index 000000000..c10669f8a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_pmeth.c
@@ -0,0 +1,860 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include <openssl/rsa.h>
+#include <openssl/bn.h>
+#include <openssl/evp.h>
+#include <openssl/x509v3.h>
+#include <openssl/cms.h>
+#include "internal/evp_int.h"
+#include "rsa_locl.h"
+
+/* RSA pkey context structure */
+
+typedef struct {
+    /* Key gen parameters */
+    int nbits;
+    BIGNUM *pub_exp;
+    int primes;
+    /* Keygen callback info */
+    int gentmp[2];
+    /* RSA padding mode */
+    int pad_mode;
+    /* message digest */
+    const EVP_MD *md;
+    /* message digest for MGF1 */
+    const EVP_MD *mgf1md;
+    /* PSS salt length */
+    int saltlen;
+    /* Minimum salt length or -1 if no PSS parameter restriction */
+    int min_saltlen;
+    /* Temp buffer */
+    unsigned char *tbuf;
+    /* OAEP label */
+    unsigned char *oaep_label;
+    size_t oaep_labellen;
+} RSA_PKEY_CTX;
+
+/* True if PSS parameters are restricted */
+#define rsa_pss_restricted(rctx) (rctx->min_saltlen != -1)
+
+static int pkey_rsa_init(EVP_PKEY_CTX *ctx)
+{
+    RSA_PKEY_CTX *rctx = OPENSSL_zalloc(sizeof(*rctx));
+
+    if (rctx == NULL)
+        return 0;
+    rctx->nbits = 1024;
+    rctx->primes = RSA_DEFAULT_PRIME_NUM;
+    if (pkey_ctx_is_pss(ctx))
+        rctx->pad_mode = RSA_PKCS1_PSS_PADDING;
+    else
+        rctx->pad_mode = RSA_PKCS1_PADDING;
+    /* Maximum for sign, auto for verify */
+    rctx->saltlen = RSA_PSS_SALTLEN_AUTO;
+    rctx->min_saltlen = -1;
+    ctx->data = rctx;
+    ctx->keygen_info = rctx->gentmp;
+    ctx->keygen_info_count = 2;
+
+    return 1;
+}
+
+static int pkey_rsa_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src)
+{
+    RSA_PKEY_CTX *dctx, *sctx;
+
+    if (!pkey_rsa_init(dst))
+        return 0;
+    sctx = src->data;
+    dctx = dst->data;
+    dctx->nbits = sctx->nbits;
+    if (sctx->pub_exp) {
+        dctx->pub_exp = BN_dup(sctx->pub_exp);
+        if (!dctx->pub_exp)
+            return 0;
+    }
+    dctx->pad_mode = sctx->pad_mode;
+    dctx->md = sctx->md;
+    dctx->mgf1md = sctx->mgf1md;
+    if (sctx->oaep_label) {
+        OPENSSL_free(dctx->oaep_label);
+        dctx->oaep_label = OPENSSL_memdup(sctx->oaep_label, sctx->oaep_labellen);
+        if (!dctx->oaep_label)
+            return 0;
+        dctx->oaep_labellen = sctx->oaep_labellen;
+    }
+    return 1;
+}
+
+static int setup_tbuf(RSA_PKEY_CTX *ctx, EVP_PKEY_CTX *pk)
+{
+    if (ctx->tbuf != NULL)
+        return 1;
+    if ((ctx->tbuf = OPENSSL_malloc(EVP_PKEY_size(pk->pkey))) == NULL) {
+        RSAerr(RSA_F_SETUP_TBUF, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    return 1;
+}
+
+static void pkey_rsa_cleanup(EVP_PKEY_CTX *ctx)
+{
+    RSA_PKEY_CTX *rctx = ctx->data;
+    if (rctx) {
+        BN_free(rctx->pub_exp);
+        OPENSSL_free(rctx->tbuf);
+        OPENSSL_free(rctx->oaep_label);
+        OPENSSL_free(rctx);
+    }
+}
+
+static int pkey_rsa_sign(EVP_PKEY_CTX *ctx, unsigned char *sig,
+                         size_t *siglen, const unsigned char *tbs,
+                         size_t tbslen)
+{
+    int ret;
+    RSA_PKEY_CTX *rctx = ctx->data;
+    RSA *rsa = ctx->pkey->pkey.rsa;
+
+    if (rctx->md) {
+        if (tbslen != (size_t)EVP_MD_size(rctx->md)) {
+            RSAerr(RSA_F_PKEY_RSA_SIGN, RSA_R_INVALID_DIGEST_LENGTH);
+            return -1;
+        }
+
+        if (EVP_MD_type(rctx->md) == NID_mdc2) {
+            unsigned int sltmp;
+            if (rctx->pad_mode != RSA_PKCS1_PADDING)
+                return -1;
+            ret = RSA_sign_ASN1_OCTET_STRING(0,
+                                             tbs, tbslen, sig, &sltmp, rsa);
+
+            if (ret <= 0)
+                return ret;
+            ret = sltmp;
+        } else if (rctx->pad_mode == RSA_X931_PADDING) {
+            if ((size_t)EVP_PKEY_size(ctx->pkey) < tbslen + 1) {
+                RSAerr(RSA_F_PKEY_RSA_SIGN, RSA_R_KEY_SIZE_TOO_SMALL);
+                return -1;
+            }
+            if (!setup_tbuf(rctx, ctx)) {
+                RSAerr(RSA_F_PKEY_RSA_SIGN, ERR_R_MALLOC_FAILURE);
+                return -1;
+            }
+            memcpy(rctx->tbuf, tbs, tbslen);
+            rctx->tbuf[tbslen] = RSA_X931_hash_id(EVP_MD_type(rctx->md));
+            ret = RSA_private_encrypt(tbslen + 1, rctx->tbuf,
+                                      sig, rsa, RSA_X931_PADDING);
+        } else if (rctx->pad_mode == RSA_PKCS1_PADDING) {
+            unsigned int sltmp;
+            ret = RSA_sign(EVP_MD_type(rctx->md),
+                           tbs, tbslen, sig, &sltmp, rsa);
+            if (ret <= 0)
+                return ret;
+            ret = sltmp;
+        } else if (rctx->pad_mode == RSA_PKCS1_PSS_PADDING) {
+            if (!setup_tbuf(rctx, ctx))
+                return -1;
+            if (!RSA_padding_add_PKCS1_PSS_mgf1(rsa,
+                                                rctx->tbuf, tbs,
+                                                rctx->md, rctx->mgf1md,
+                                                rctx->saltlen))
+                return -1;
+            ret = RSA_private_encrypt(RSA_size(rsa), rctx->tbuf,
+                                      sig, rsa, RSA_NO_PADDING);
+        } else {
+            return -1;
+        }
+    } else {
+        ret = RSA_private_encrypt(tbslen, tbs, sig, ctx->pkey->pkey.rsa,
+                                  rctx->pad_mode);
+    }
+    if (ret < 0)
+        return ret;
+    *siglen = ret;
+    return 1;
+}
+
+static int pkey_rsa_verifyrecover(EVP_PKEY_CTX *ctx,
+                                  unsigned char *rout, size_t *routlen,
+                                  const unsigned char *sig, size_t siglen)
+{
+    int ret;
+    RSA_PKEY_CTX *rctx = ctx->data;
+
+    if (rctx->md) {
+        if (rctx->pad_mode == RSA_X931_PADDING) {
+            if (!setup_tbuf(rctx, ctx))
+                return -1;
+            ret = RSA_public_decrypt(siglen, sig,
+                                     rctx->tbuf, ctx->pkey->pkey.rsa,
+                                     RSA_X931_PADDING);
+            if (ret < 1)
+                return 0;
+            ret--;
+            if (rctx->tbuf[ret] != RSA_X931_hash_id(EVP_MD_type(rctx->md))) {
+                RSAerr(RSA_F_PKEY_RSA_VERIFYRECOVER,
+                       RSA_R_ALGORITHM_MISMATCH);
+                return 0;
+            }
+            if (ret != EVP_MD_size(rctx->md)) {
+                RSAerr(RSA_F_PKEY_RSA_VERIFYRECOVER,
+                       RSA_R_INVALID_DIGEST_LENGTH);
+                return 0;
+            }
+            if (rout)
+                memcpy(rout, rctx->tbuf, ret);
+        } else if (rctx->pad_mode == RSA_PKCS1_PADDING) {
+            size_t sltmp;
+            ret = int_rsa_verify(EVP_MD_type(rctx->md),
+                                 NULL, 0, rout, &sltmp,
+                                 sig, siglen, ctx->pkey->pkey.rsa);
+            if (ret <= 0)
+                return 0;
+            ret = sltmp;
+        } else {
+            return -1;
+        }
+    } else {
+        ret = RSA_public_decrypt(siglen, sig, rout, ctx->pkey->pkey.rsa,
+                                 rctx->pad_mode);
+    }
+    if (ret < 0)
+        return ret;
+    *routlen = ret;
+    return 1;
+}
+
+static int pkey_rsa_verify(EVP_PKEY_CTX *ctx,
+                           const unsigned char *sig, size_t siglen,
+                           const unsigned char *tbs, size_t tbslen)
+{
+    RSA_PKEY_CTX *rctx = ctx->data;
+    RSA *rsa = ctx->pkey->pkey.rsa;
+    size_t rslen;
+
+    if (rctx->md) {
+        if (rctx->pad_mode == RSA_PKCS1_PADDING)
+            return RSA_verify(EVP_MD_type(rctx->md), tbs, tbslen,
+                              sig, siglen, rsa);
+        if (tbslen != (size_t)EVP_MD_size(rctx->md)) {
+            RSAerr(RSA_F_PKEY_RSA_VERIFY, RSA_R_INVALID_DIGEST_LENGTH);
+            return -1;
+        }
+        if (rctx->pad_mode == RSA_X931_PADDING) {
+            if (pkey_rsa_verifyrecover(ctx, NULL, &rslen, sig, siglen) <= 0)
+                return 0;
+        } else if (rctx->pad_mode == RSA_PKCS1_PSS_PADDING) {
+            int ret;
+            if (!setup_tbuf(rctx, ctx))
+                return -1;
+            ret = RSA_public_decrypt(siglen, sig, rctx->tbuf,
+                                     rsa, RSA_NO_PADDING);
+            if (ret <= 0)
+                return 0;
+            ret = RSA_verify_PKCS1_PSS_mgf1(rsa, tbs,
+                                            rctx->md, rctx->mgf1md,
+                                            rctx->tbuf, rctx->saltlen);
+            if (ret <= 0)
+                return 0;
+            return 1;
+        } else {
+            return -1;
+        }
+    } else {
+        if (!setup_tbuf(rctx, ctx))
+            return -1;
+        rslen = RSA_public_decrypt(siglen, sig, rctx->tbuf,
+                                   rsa, rctx->pad_mode);
+        if (rslen == 0)
+            return 0;
+    }
+
+    if ((rslen != tbslen) || memcmp(tbs, rctx->tbuf, rslen))
+        return 0;
+
+    return 1;
+
+}
+
+static int pkey_rsa_encrypt(EVP_PKEY_CTX *ctx,
+                            unsigned char *out, size_t *outlen,
+                            const unsigned char *in, size_t inlen)
+{
+    int ret;
+    RSA_PKEY_CTX *rctx = ctx->data;
+
+    if (rctx->pad_mode == RSA_PKCS1_OAEP_PADDING) {
+        int klen = RSA_size(ctx->pkey->pkey.rsa);
+        if (!setup_tbuf(rctx, ctx))
+            return -1;
+        if (!RSA_padding_add_PKCS1_OAEP_mgf1(rctx->tbuf, klen,
+                                             in, inlen,
+                                             rctx->oaep_label,
+                                             rctx->oaep_labellen,
+                                             rctx->md, rctx->mgf1md))
+            return -1;
+        ret = RSA_public_encrypt(klen, rctx->tbuf, out,
+                                 ctx->pkey->pkey.rsa, RSA_NO_PADDING);
+    } else {
+        ret = RSA_public_encrypt(inlen, in, out, ctx->pkey->pkey.rsa,
+                                 rctx->pad_mode);
+    }
+    if (ret < 0)
+        return ret;
+    *outlen = ret;
+    return 1;
+}
+
+static int pkey_rsa_decrypt(EVP_PKEY_CTX *ctx,
+                            unsigned char *out, size_t *outlen,
+                            const unsigned char *in, size_t inlen)
+{
+    int ret;
+    RSA_PKEY_CTX *rctx = ctx->data;
+
+    if (rctx->pad_mode == RSA_PKCS1_OAEP_PADDING) {
+        if (!setup_tbuf(rctx, ctx))
+            return -1;
+        ret = RSA_private_decrypt(inlen, in, rctx->tbuf,
+                                  ctx->pkey->pkey.rsa, RSA_NO_PADDING);
+        if (ret <= 0)
+            return ret;
+        ret = RSA_padding_check_PKCS1_OAEP_mgf1(out, ret, rctx->tbuf,
+                                                ret, ret,
+                                                rctx->oaep_label,
+                                                rctx->oaep_labellen,
+                                                rctx->md, rctx->mgf1md);
+    } else {
+        ret = RSA_private_decrypt(inlen, in, out, ctx->pkey->pkey.rsa,
+                                  rctx->pad_mode);
+    }
+    if (ret < 0)
+        return ret;
+    *outlen = ret;
+    return 1;
+}
+
+static int check_padding_md(const EVP_MD *md, int padding)
+{
+    int mdnid;
+
+    if (!md)
+        return 1;
+
+    mdnid = EVP_MD_type(md);
+
+    if (padding == RSA_NO_PADDING) {
+        RSAerr(RSA_F_CHECK_PADDING_MD, RSA_R_INVALID_PADDING_MODE);
+        return 0;
+    }
+
+    if (padding == RSA_X931_PADDING) {
+        if (RSA_X931_hash_id(mdnid) == -1) {
+            RSAerr(RSA_F_CHECK_PADDING_MD, RSA_R_INVALID_X931_DIGEST);
+            return 0;
+        }
+    } else {
+        switch(mdnid) {
+        /* List of all supported RSA digests */
+        case NID_sha1:
+        case NID_sha224:
+        case NID_sha256:
+        case NID_sha384:
+        case NID_sha512:
+        case NID_md5:
+        case NID_md5_sha1:
+        case NID_md2:
+        case NID_md4:
+        case NID_mdc2:
+        case NID_ripemd160:
+        case NID_sha3_224:
+        case NID_sha3_256:
+        case NID_sha3_384:
+        case NID_sha3_512:
+            return 1;
+
+        default:
+            RSAerr(RSA_F_CHECK_PADDING_MD, RSA_R_INVALID_DIGEST);
+            return 0;
+
+        }
+    }
+
+    return 1;
+}
+
+static int pkey_rsa_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
+{
+    RSA_PKEY_CTX *rctx = ctx->data;
+
+    switch (type) {
+    case EVP_PKEY_CTRL_RSA_PADDING:
+        if ((p1 >= RSA_PKCS1_PADDING) && (p1 <= RSA_PKCS1_PSS_PADDING)) {
+            if (!check_padding_md(rctx->md, p1))
+                return 0;
+            if (p1 == RSA_PKCS1_PSS_PADDING) {
+                if (!(ctx->operation &
+                      (EVP_PKEY_OP_SIGN | EVP_PKEY_OP_VERIFY)))
+                    goto bad_pad;
+                if (!rctx->md)
+                    rctx->md = EVP_sha1();
+            } else if (pkey_ctx_is_pss(ctx)) {
+                goto bad_pad;
+            }
+            if (p1 == RSA_PKCS1_OAEP_PADDING) {
+                if (!(ctx->operation & EVP_PKEY_OP_TYPE_CRYPT))
+                    goto bad_pad;
+                if (!rctx->md)
+                    rctx->md = EVP_sha1();
+            }
+            rctx->pad_mode = p1;
+            return 1;
+        }
+ bad_pad:
+        RSAerr(RSA_F_PKEY_RSA_CTRL,
+               RSA_R_ILLEGAL_OR_UNSUPPORTED_PADDING_MODE);
+        return -2;
+
+    case EVP_PKEY_CTRL_GET_RSA_PADDING:
+        *(int *)p2 = rctx->pad_mode;
+        return 1;
+
+    case EVP_PKEY_CTRL_RSA_PSS_SALTLEN:
+    case EVP_PKEY_CTRL_GET_RSA_PSS_SALTLEN:
+        if (rctx->pad_mode != RSA_PKCS1_PSS_PADDING) {
+            RSAerr(RSA_F_PKEY_RSA_CTRL, RSA_R_INVALID_PSS_SALTLEN);
+            return -2;
+        }
+        if (type == EVP_PKEY_CTRL_GET_RSA_PSS_SALTLEN) {
+            *(int *)p2 = rctx->saltlen;
+        } else {
+            if (p1 < RSA_PSS_SALTLEN_MAX)
+                return -2;
+            if (rsa_pss_restricted(rctx)) {
+                if (p1 == RSA_PSS_SALTLEN_AUTO
+                    && ctx->operation == EVP_PKEY_OP_VERIFY) {
+                    RSAerr(RSA_F_PKEY_RSA_CTRL, RSA_R_INVALID_PSS_SALTLEN);
+                    return -2;
+                }
+                if ((p1 == RSA_PSS_SALTLEN_DIGEST
+                     && rctx->min_saltlen > EVP_MD_size(rctx->md))
+                    || (p1 >= 0 && p1 < rctx->min_saltlen)) {
+                    RSAerr(RSA_F_PKEY_RSA_CTRL, RSA_R_PSS_SALTLEN_TOO_SMALL);
+                    return 0;
+                }
+            }
+            rctx->saltlen = p1;
+        }
+        return 1;
+
+    case EVP_PKEY_CTRL_RSA_KEYGEN_BITS:
+        if (p1 < RSA_MIN_MODULUS_BITS) {
+            RSAerr(RSA_F_PKEY_RSA_CTRL, RSA_R_KEY_SIZE_TOO_SMALL);
+            return -2;
+        }
+        rctx->nbits = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_RSA_KEYGEN_PUBEXP:
+        if (p2 == NULL || !BN_is_odd((BIGNUM *)p2) || BN_is_one((BIGNUM *)p2)) {
+            RSAerr(RSA_F_PKEY_RSA_CTRL, RSA_R_BAD_E_VALUE);
+            return -2;
+        }
+        BN_free(rctx->pub_exp);
+        rctx->pub_exp = p2;
+        return 1;
+
+    case EVP_PKEY_CTRL_RSA_KEYGEN_PRIMES:
+        if (p1 < RSA_DEFAULT_PRIME_NUM || p1 > RSA_MAX_PRIME_NUM) {
+            RSAerr(RSA_F_PKEY_RSA_CTRL, RSA_R_KEY_PRIME_NUM_INVALID);
+            return -2;
+        }
+        rctx->primes = p1;
+        return 1;
+
+    case EVP_PKEY_CTRL_RSA_OAEP_MD:
+    case EVP_PKEY_CTRL_GET_RSA_OAEP_MD:
+        if (rctx->pad_mode != RSA_PKCS1_OAEP_PADDING) {
+            RSAerr(RSA_F_PKEY_RSA_CTRL, RSA_R_INVALID_PADDING_MODE);
+            return -2;
+        }
+        if (type == EVP_PKEY_CTRL_GET_RSA_OAEP_MD)
+            *(const EVP_MD **)p2 = rctx->md;
+        else
+            rctx->md = p2;
+        return 1;
+
+    case EVP_PKEY_CTRL_MD:
+        if (!check_padding_md(p2, rctx->pad_mode))
+            return 0;
+        if (rsa_pss_restricted(rctx)) {
+            if (EVP_MD_type(rctx->md) == EVP_MD_type(p2))
+                return 1;
+            RSAerr(RSA_F_PKEY_RSA_CTRL, RSA_R_DIGEST_NOT_ALLOWED);
+            return 0;
+        }
+        rctx->md = p2;
+        return 1;
+
+    case EVP_PKEY_CTRL_GET_MD:
+        *(const EVP_MD **)p2 = rctx->md;
+        return 1;
+
+    case EVP_PKEY_CTRL_RSA_MGF1_MD:
+    case EVP_PKEY_CTRL_GET_RSA_MGF1_MD:
+        if (rctx->pad_mode != RSA_PKCS1_PSS_PADDING
+            && rctx->pad_mode != RSA_PKCS1_OAEP_PADDING) {
+            RSAerr(RSA_F_PKEY_RSA_CTRL, RSA_R_INVALID_MGF1_MD);
+            return -2;
+        }
+        if (type == EVP_PKEY_CTRL_GET_RSA_MGF1_MD) {
+            if (rctx->mgf1md)
+                *(const EVP_MD **)p2 = rctx->mgf1md;
+            else
+                *(const EVP_MD **)p2 = rctx->md;
+        } else {
+            if (rsa_pss_restricted(rctx)) {
+                if (EVP_MD_type(rctx->mgf1md) == EVP_MD_type(p2))
+                    return 1;
+                RSAerr(RSA_F_PKEY_RSA_CTRL, RSA_R_MGF1_DIGEST_NOT_ALLOWED);
+                return 0;
+            }
+            rctx->mgf1md = p2;
+        }
+        return 1;
+
+    case EVP_PKEY_CTRL_RSA_OAEP_LABEL:
+        if (rctx->pad_mode != RSA_PKCS1_OAEP_PADDING) {
+            RSAerr(RSA_F_PKEY_RSA_CTRL, RSA_R_INVALID_PADDING_MODE);
+            return -2;
+        }
+        OPENSSL_free(rctx->oaep_label);
+        if (p2 && p1 > 0) {
+            rctx->oaep_label = p2;
+            rctx->oaep_labellen = p1;
+        } else {
+            rctx->oaep_label = NULL;
+            rctx->oaep_labellen = 0;
+        }
+        return 1;
+
+    case EVP_PKEY_CTRL_GET_RSA_OAEP_LABEL:
+        if (rctx->pad_mode != RSA_PKCS1_OAEP_PADDING) {
+            RSAerr(RSA_F_PKEY_RSA_CTRL, RSA_R_INVALID_PADDING_MODE);
+            return -2;
+        }
+        *(unsigned char **)p2 = rctx->oaep_label;
+        return rctx->oaep_labellen;
+
+    case EVP_PKEY_CTRL_DIGESTINIT:
+    case EVP_PKEY_CTRL_PKCS7_SIGN:
+#ifndef OPENSSL_NO_CMS
+    case EVP_PKEY_CTRL_CMS_SIGN:
+#endif
+    return 1;
+
+    case EVP_PKEY_CTRL_PKCS7_ENCRYPT:
+    case EVP_PKEY_CTRL_PKCS7_DECRYPT:
+#ifndef OPENSSL_NO_CMS
+    case EVP_PKEY_CTRL_CMS_DECRYPT:
+    case EVP_PKEY_CTRL_CMS_ENCRYPT:
+#endif
+    if (!pkey_ctx_is_pss(ctx))
+        return 1;
+    /* fall through */
+    case EVP_PKEY_CTRL_PEER_KEY:
+        RSAerr(RSA_F_PKEY_RSA_CTRL,
+               RSA_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
+        return -2;
+
+    default:
+        return -2;
+
+    }
+}
+
+static int pkey_rsa_ctrl_str(EVP_PKEY_CTX *ctx,
+                             const char *type, const char *value)
+{
+    if (value == NULL) {
+        RSAerr(RSA_F_PKEY_RSA_CTRL_STR, RSA_R_VALUE_MISSING);
+        return 0;
+    }
+    if (strcmp(type, "rsa_padding_mode") == 0) {
+        int pm;
+
+        if (strcmp(value, "pkcs1") == 0) {
+            pm = RSA_PKCS1_PADDING;
+        } else if (strcmp(value, "sslv23") == 0) {
+            pm = RSA_SSLV23_PADDING;
+        } else if (strcmp(value, "none") == 0) {
+            pm = RSA_NO_PADDING;
+        } else if (strcmp(value, "oeap") == 0) {
+            pm = RSA_PKCS1_OAEP_PADDING;
+        } else if (strcmp(value, "oaep") == 0) {
+            pm = RSA_PKCS1_OAEP_PADDING;
+        } else if (strcmp(value, "x931") == 0) {
+            pm = RSA_X931_PADDING;
+        } else if (strcmp(value, "pss") == 0) {
+            pm = RSA_PKCS1_PSS_PADDING;
+        } else {
+            RSAerr(RSA_F_PKEY_RSA_CTRL_STR, RSA_R_UNKNOWN_PADDING_TYPE);
+            return -2;
+        }
+        return EVP_PKEY_CTX_set_rsa_padding(ctx, pm);
+    }
+
+    if (strcmp(type, "rsa_pss_saltlen") == 0) {
+        int saltlen;
+
+        if (!strcmp(value, "digest"))
+            saltlen = RSA_PSS_SALTLEN_DIGEST;
+        else if (!strcmp(value, "max"))
+            saltlen = RSA_PSS_SALTLEN_MAX;
+        else if (!strcmp(value, "auto"))
+            saltlen = RSA_PSS_SALTLEN_AUTO;
+        else
+            saltlen = atoi(value);
+        return EVP_PKEY_CTX_set_rsa_pss_saltlen(ctx, saltlen);
+    }
+
+    if (strcmp(type, "rsa_keygen_bits") == 0) {
+        int nbits = atoi(value);
+
+        return EVP_PKEY_CTX_set_rsa_keygen_bits(ctx, nbits);
+    }
+
+    if (strcmp(type, "rsa_keygen_pubexp") == 0) {
+        int ret;
+
+        BIGNUM *pubexp = NULL;
+        if (!BN_asc2bn(&pubexp, value))
+            return 0;
+        ret = EVP_PKEY_CTX_set_rsa_keygen_pubexp(ctx, pubexp);
+        if (ret <= 0)
+            BN_free(pubexp);
+        return ret;
+    }
+
+    if (strcmp(type, "rsa_keygen_primes") == 0) {
+        int nprimes = atoi(value);
+
+        return EVP_PKEY_CTX_set_rsa_keygen_primes(ctx, nprimes);
+    }
+
+    if (strcmp(type, "rsa_mgf1_md") == 0)
+        return EVP_PKEY_CTX_md(ctx,
+                               EVP_PKEY_OP_TYPE_SIG | EVP_PKEY_OP_TYPE_CRYPT,
+                               EVP_PKEY_CTRL_RSA_MGF1_MD, value);
+
+    if (pkey_ctx_is_pss(ctx)) {
+
+        if (strcmp(type, "rsa_pss_keygen_mgf1_md") == 0)
+            return EVP_PKEY_CTX_md(ctx, EVP_PKEY_OP_KEYGEN,
+                                   EVP_PKEY_CTRL_RSA_MGF1_MD, value);
+
+        if (strcmp(type, "rsa_pss_keygen_md") == 0)
+            return EVP_PKEY_CTX_md(ctx, EVP_PKEY_OP_KEYGEN,
+                                   EVP_PKEY_CTRL_MD, value);
+
+        if (strcmp(type, "rsa_pss_keygen_saltlen") == 0) {
+            int saltlen = atoi(value);
+
+            return EVP_PKEY_CTX_set_rsa_pss_keygen_saltlen(ctx, saltlen);
+        }
+    }
+
+    if (strcmp(type, "rsa_oaep_md") == 0)
+        return EVP_PKEY_CTX_md(ctx, EVP_PKEY_OP_TYPE_CRYPT,
+                               EVP_PKEY_CTRL_RSA_OAEP_MD, value);
+
+    if (strcmp(type, "rsa_oaep_label") == 0) {
+        unsigned char *lab;
+        long lablen;
+        int ret;
+
+        lab = OPENSSL_hexstr2buf(value, &lablen);
+        if (!lab)
+            return 0;
+        ret = EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, lab, lablen);
+        if (ret <= 0)
+            OPENSSL_free(lab);
+        return ret;
+    }
+
+    return -2;
+}
+
+/* Set PSS parameters when generating a key, if necessary */
+static int rsa_set_pss_param(RSA *rsa, EVP_PKEY_CTX *ctx)
+{
+    RSA_PKEY_CTX *rctx = ctx->data;
+
+    if (!pkey_ctx_is_pss(ctx))
+        return 1;
+    /* If all parameters are default values don't set pss */
+    if (rctx->md == NULL && rctx->mgf1md == NULL && rctx->saltlen == -2)
+        return 1;
+    rsa->pss = rsa_pss_params_create(rctx->md, rctx->mgf1md,
+                                     rctx->saltlen == -2 ? 0 : rctx->saltlen);
+    if (rsa->pss == NULL)
+        return 0;
+    return 1;
+}
+
+static int pkey_rsa_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
+{
+    RSA *rsa = NULL;
+    RSA_PKEY_CTX *rctx = ctx->data;
+    BN_GENCB *pcb;
+    int ret;
+
+    if (rctx->pub_exp == NULL) {
+        rctx->pub_exp = BN_new();
+        if (rctx->pub_exp == NULL || !BN_set_word(rctx->pub_exp, RSA_F4))
+            return 0;
+    }
+    rsa = RSA_new();
+    if (rsa == NULL)
+        return 0;
+    if (ctx->pkey_gencb) {
+        pcb = BN_GENCB_new();
+        if (pcb == NULL) {
+            RSA_free(rsa);
+            return 0;
+        }
+        evp_pkey_set_cb_translate(pcb, ctx);
+    } else {
+        pcb = NULL;
+    }
+    ret = RSA_generate_multi_prime_key(rsa, rctx->nbits, rctx->primes,
+                                       rctx->pub_exp, pcb);
+    BN_GENCB_free(pcb);
+    if (ret > 0 && !rsa_set_pss_param(rsa, ctx)) {
+        RSA_free(rsa);
+        return 0;
+    }
+    if (ret > 0)
+        EVP_PKEY_assign(pkey, ctx->pmeth->pkey_id, rsa);
+    else
+        RSA_free(rsa);
+    return ret;
+}
+
+const EVP_PKEY_METHOD rsa_pkey_meth = {
+    EVP_PKEY_RSA,
+    EVP_PKEY_FLAG_AUTOARGLEN,
+    pkey_rsa_init,
+    pkey_rsa_copy,
+    pkey_rsa_cleanup,
+
+    0, 0,
+
+    0,
+    pkey_rsa_keygen,
+
+    0,
+    pkey_rsa_sign,
+
+    0,
+    pkey_rsa_verify,
+
+    0,
+    pkey_rsa_verifyrecover,
+
+    0, 0, 0, 0,
+
+    0,
+    pkey_rsa_encrypt,
+
+    0,
+    pkey_rsa_decrypt,
+
+    0, 0,
+
+    pkey_rsa_ctrl,
+    pkey_rsa_ctrl_str
+};
+
+/*
+ * Called for PSS sign or verify initialisation: checks PSS parameter
+ * sanity and sets any restrictions on key usage.
+ */
+
+static int pkey_pss_init(EVP_PKEY_CTX *ctx)
+{
+    RSA *rsa;
+    RSA_PKEY_CTX *rctx = ctx->data;
+    const EVP_MD *md;
+    const EVP_MD *mgf1md;
+    int min_saltlen, max_saltlen;
+
+    /* Should never happen */
+    if (!pkey_ctx_is_pss(ctx))
+        return 0;
+    rsa = ctx->pkey->pkey.rsa;
+    /* If no restrictions just return */
+    if (rsa->pss == NULL)
+        return 1;
+    /* Get and check parameters */
+    if (!rsa_pss_get_param(rsa->pss, &md, &mgf1md, &min_saltlen))
+        return 0;
+
+    /* See if minimum salt length exceeds maximum possible */
+    max_saltlen = RSA_size(rsa) - EVP_MD_size(md);
+    if ((RSA_bits(rsa) & 0x7) == 1)
+        max_saltlen--;
+    if (min_saltlen > max_saltlen) {
+        RSAerr(RSA_F_PKEY_PSS_INIT, RSA_R_INVALID_SALT_LENGTH);
+        return 0;
+    }
+
+    rctx->min_saltlen = min_saltlen;
+
+    /*
+     * Set PSS restrictions as defaults: we can then block any attempt to
+     * use invalid values in pkey_rsa_ctrl
+     */
+
+    rctx->md = md;
+    rctx->mgf1md = mgf1md;
+    rctx->saltlen = min_saltlen;
+
+    return 1;
+}
+
+const EVP_PKEY_METHOD rsa_pss_pkey_meth = {
+    EVP_PKEY_RSA_PSS,
+    EVP_PKEY_FLAG_AUTOARGLEN,
+    pkey_rsa_init,
+    pkey_rsa_copy,
+    pkey_rsa_cleanup,
+
+    0, 0,
+
+    0,
+    pkey_rsa_keygen,
+
+    pkey_pss_init,
+    pkey_rsa_sign,
+
+    pkey_pss_init,
+    pkey_rsa_verify,
+
+    0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+
+    pkey_rsa_ctrl,
+    pkey_rsa_ctrl_str
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_prn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_prn.c
new file mode 100644
index 000000000..b5f4bce2a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_prn.c
@@ -0,0 +1,42 @@
+/*
+ * Copyright 2006-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/rsa.h>
+#include <openssl/evp.h>
+
+#ifndef OPENSSL_NO_STDIO
+int RSA_print_fp(FILE *fp, const RSA *x, int off)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        RSAerr(RSA_F_RSA_PRINT_FP, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = RSA_print(b, x, off);
+    BIO_free(b);
+    return ret;
+}
+#endif
+
+int RSA_print(BIO *bp, const RSA *x, int off)
+{
+    EVP_PKEY *pk;
+    int ret;
+    pk = EVP_PKEY_new();
+    if (pk == NULL || !EVP_PKEY_set1_RSA(pk, (RSA *)x))
+        return 0;
+    ret = EVP_PKEY_print_private(bp, pk, off, NULL);
+    EVP_PKEY_free(pk);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_pss.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_pss.c
new file mode 100644
index 000000000..f7c575d00
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_pss.c
@@ -0,0 +1,255 @@
+/*
+ * Copyright 2005-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include <openssl/rsa.h>
+#include <openssl/evp.h>
+#include <openssl/rand.h>
+#include <openssl/sha.h>
+#include "rsa_locl.h"
+
+static const unsigned char zeroes[] = { 0, 0, 0, 0, 0, 0, 0, 0 };
+
+#if defined(_MSC_VER) && defined(_ARM_)
+# pragma optimize("g", off)
+#endif
+
+int RSA_verify_PKCS1_PSS(RSA *rsa, const unsigned char *mHash,
+                         const EVP_MD *Hash, const unsigned char *EM,
+                         int sLen)
+{
+    return RSA_verify_PKCS1_PSS_mgf1(rsa, mHash, Hash, NULL, EM, sLen);
+}
+
+int RSA_verify_PKCS1_PSS_mgf1(RSA *rsa, const unsigned char *mHash,
+                              const EVP_MD *Hash, const EVP_MD *mgf1Hash,
+                              const unsigned char *EM, int sLen)
+{
+    int i;
+    int ret = 0;
+    int hLen, maskedDBLen, MSBits, emLen;
+    const unsigned char *H;
+    unsigned char *DB = NULL;
+    EVP_MD_CTX *ctx = EVP_MD_CTX_new();
+    unsigned char H_[EVP_MAX_MD_SIZE];
+
+    if (ctx == NULL)
+        goto err;
+
+    if (mgf1Hash == NULL)
+        mgf1Hash = Hash;
+
+    hLen = EVP_MD_size(Hash);
+    if (hLen < 0)
+        goto err;
+    /*-
+     * Negative sLen has special meanings:
+     *      -1      sLen == hLen
+     *      -2      salt length is autorecovered from signature
+     *      -3      salt length is maximized
+     *      -N      reserved
+     */
+    if (sLen == RSA_PSS_SALTLEN_DIGEST) {
+        sLen = hLen;
+    } else if (sLen < RSA_PSS_SALTLEN_MAX) {
+        RSAerr(RSA_F_RSA_VERIFY_PKCS1_PSS_MGF1, RSA_R_SLEN_CHECK_FAILED);
+        goto err;
+    }
+
+    MSBits = (BN_num_bits(rsa->n) - 1) & 0x7;
+    emLen = RSA_size(rsa);
+    if (EM[0] & (0xFF << MSBits)) {
+        RSAerr(RSA_F_RSA_VERIFY_PKCS1_PSS_MGF1, RSA_R_FIRST_OCTET_INVALID);
+        goto err;
+    }
+    if (MSBits == 0) {
+        EM++;
+        emLen--;
+    }
+    if (emLen < hLen + 2) {
+        RSAerr(RSA_F_RSA_VERIFY_PKCS1_PSS_MGF1, RSA_R_DATA_TOO_LARGE);
+        goto err;
+    }
+    if (sLen == RSA_PSS_SALTLEN_MAX) {
+        sLen = emLen - hLen - 2;
+    } else if (sLen > emLen - hLen - 2) { /* sLen can be small negative */
+        RSAerr(RSA_F_RSA_VERIFY_PKCS1_PSS_MGF1, RSA_R_DATA_TOO_LARGE);
+        goto err;
+    }
+    if (EM[emLen - 1] != 0xbc) {
+        RSAerr(RSA_F_RSA_VERIFY_PKCS1_PSS_MGF1, RSA_R_LAST_OCTET_INVALID);
+        goto err;
+    }
+    maskedDBLen = emLen - hLen - 1;
+    H = EM + maskedDBLen;
+    DB = OPENSSL_malloc(maskedDBLen);
+    if (DB == NULL) {
+        RSAerr(RSA_F_RSA_VERIFY_PKCS1_PSS_MGF1, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if (PKCS1_MGF1(DB, maskedDBLen, H, hLen, mgf1Hash) < 0)
+        goto err;
+    for (i = 0; i < maskedDBLen; i++)
+        DB[i] ^= EM[i];
+    if (MSBits)
+        DB[0] &= 0xFF >> (8 - MSBits);
+    for (i = 0; DB[i] == 0 && i < (maskedDBLen - 1); i++) ;
+    if (DB[i++] != 0x1) {
+        RSAerr(RSA_F_RSA_VERIFY_PKCS1_PSS_MGF1, RSA_R_SLEN_RECOVERY_FAILED);
+        goto err;
+    }
+    if (sLen != RSA_PSS_SALTLEN_AUTO && (maskedDBLen - i) != sLen) {
+        RSAerr(RSA_F_RSA_VERIFY_PKCS1_PSS_MGF1, RSA_R_SLEN_CHECK_FAILED);
+        goto err;
+    }
+    if (!EVP_DigestInit_ex(ctx, Hash, NULL)
+        || !EVP_DigestUpdate(ctx, zeroes, sizeof(zeroes))
+        || !EVP_DigestUpdate(ctx, mHash, hLen))
+        goto err;
+    if (maskedDBLen - i) {
+        if (!EVP_DigestUpdate(ctx, DB + i, maskedDBLen - i))
+            goto err;
+    }
+    if (!EVP_DigestFinal_ex(ctx, H_, NULL))
+        goto err;
+    if (memcmp(H_, H, hLen)) {
+        RSAerr(RSA_F_RSA_VERIFY_PKCS1_PSS_MGF1, RSA_R_BAD_SIGNATURE);
+        ret = 0;
+    } else {
+        ret = 1;
+    }
+
+ err:
+    OPENSSL_free(DB);
+    EVP_MD_CTX_free(ctx);
+
+    return ret;
+
+}
+
+int RSA_padding_add_PKCS1_PSS(RSA *rsa, unsigned char *EM,
+                              const unsigned char *mHash,
+                              const EVP_MD *Hash, int sLen)
+{
+    return RSA_padding_add_PKCS1_PSS_mgf1(rsa, EM, mHash, Hash, NULL, sLen);
+}
+
+int RSA_padding_add_PKCS1_PSS_mgf1(RSA *rsa, unsigned char *EM,
+                                   const unsigned char *mHash,
+                                   const EVP_MD *Hash, const EVP_MD *mgf1Hash,
+                                   int sLen)
+{
+    int i;
+    int ret = 0;
+    int hLen, maskedDBLen, MSBits, emLen;
+    unsigned char *H, *salt = NULL, *p;
+    EVP_MD_CTX *ctx = NULL;
+
+    if (mgf1Hash == NULL)
+        mgf1Hash = Hash;
+
+    hLen = EVP_MD_size(Hash);
+    if (hLen < 0)
+        goto err;
+    /*-
+     * Negative sLen has special meanings:
+     *      -1      sLen == hLen
+     *      -2      salt length is maximized
+     *      -3      same as above (on signing)
+     *      -N      reserved
+     */
+    if (sLen == RSA_PSS_SALTLEN_DIGEST) {
+        sLen = hLen;
+    } else if (sLen == RSA_PSS_SALTLEN_MAX_SIGN) {
+        sLen = RSA_PSS_SALTLEN_MAX;
+    } else if (sLen < RSA_PSS_SALTLEN_MAX) {
+        RSAerr(RSA_F_RSA_PADDING_ADD_PKCS1_PSS_MGF1, RSA_R_SLEN_CHECK_FAILED);
+        goto err;
+    }
+
+    MSBits = (BN_num_bits(rsa->n) - 1) & 0x7;
+    emLen = RSA_size(rsa);
+    if (MSBits == 0) {
+        *EM++ = 0;
+        emLen--;
+    }
+    if (emLen < hLen + 2) {
+        RSAerr(RSA_F_RSA_PADDING_ADD_PKCS1_PSS_MGF1,
+               RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE);
+        goto err;
+    }
+    if (sLen == RSA_PSS_SALTLEN_MAX) {
+        sLen = emLen - hLen - 2;
+    } else if (sLen > emLen - hLen - 2) {
+        RSAerr(RSA_F_RSA_PADDING_ADD_PKCS1_PSS_MGF1,
+               RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE);
+        goto err;
+    }
+    if (sLen > 0) {
+        salt = OPENSSL_malloc(sLen);
+        if (salt == NULL) {
+            RSAerr(RSA_F_RSA_PADDING_ADD_PKCS1_PSS_MGF1,
+                   ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        if (RAND_bytes(salt, sLen) <= 0)
+            goto err;
+    }
+    maskedDBLen = emLen - hLen - 1;
+    H = EM + maskedDBLen;
+    ctx = EVP_MD_CTX_new();
+    if (ctx == NULL)
+        goto err;
+    if (!EVP_DigestInit_ex(ctx, Hash, NULL)
+        || !EVP_DigestUpdate(ctx, zeroes, sizeof(zeroes))
+        || !EVP_DigestUpdate(ctx, mHash, hLen))
+        goto err;
+    if (sLen && !EVP_DigestUpdate(ctx, salt, sLen))
+        goto err;
+    if (!EVP_DigestFinal_ex(ctx, H, NULL))
+        goto err;
+
+    /* Generate dbMask in place then perform XOR on it */
+    if (PKCS1_MGF1(EM, maskedDBLen, H, hLen, mgf1Hash))
+        goto err;
+
+    p = EM;
+
+    /*
+     * Initial PS XORs with all zeroes which is a NOP so just update pointer.
+     * Note from a test above this value is guaranteed to be non-negative.
+     */
+    p += emLen - sLen - hLen - 2;
+    *p++ ^= 0x1;
+    if (sLen > 0) {
+        for (i = 0; i < sLen; i++)
+            *p++ ^= salt[i];
+    }
+    if (MSBits)
+        EM[0] &= 0xFF >> (8 - MSBits);
+
+    /* H is already in place so just set final 0xbc */
+
+    EM[emLen - 1] = 0xbc;
+
+    ret = 1;
+
+ err:
+    EVP_MD_CTX_free(ctx);
+    OPENSSL_clear_free(salt, (size_t)sLen); /* salt != NULL implies sLen > 0 */
+
+    return ret;
+
+}
+
+#if defined(_MSC_VER)
+# pragma optimize("",on)
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_saos.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_saos.c
new file mode 100644
index 000000000..8336f32f1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_saos.c
@@ -0,0 +1,95 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include <openssl/rsa.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+
+int RSA_sign_ASN1_OCTET_STRING(int type,
+                               const unsigned char *m, unsigned int m_len,
+                               unsigned char *sigret, unsigned int *siglen,
+                               RSA *rsa)
+{
+    ASN1_OCTET_STRING sig;
+    int i, j, ret = 1;
+    unsigned char *p, *s;
+
+    sig.type = V_ASN1_OCTET_STRING;
+    sig.length = m_len;
+    sig.data = (unsigned char *)m;
+
+    i = i2d_ASN1_OCTET_STRING(&sig, NULL);
+    j = RSA_size(rsa);
+    if (i > (j - RSA_PKCS1_PADDING_SIZE)) {
+        RSAerr(RSA_F_RSA_SIGN_ASN1_OCTET_STRING,
+               RSA_R_DIGEST_TOO_BIG_FOR_RSA_KEY);
+        return 0;
+    }
+    s = OPENSSL_malloc((unsigned int)j + 1);
+    if (s == NULL) {
+        RSAerr(RSA_F_RSA_SIGN_ASN1_OCTET_STRING, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    p = s;
+    i2d_ASN1_OCTET_STRING(&sig, &p);
+    i = RSA_private_encrypt(i, s, sigret, rsa, RSA_PKCS1_PADDING);
+    if (i <= 0)
+        ret = 0;
+    else
+        *siglen = i;
+
+    OPENSSL_clear_free(s, (unsigned int)j + 1);
+    return ret;
+}
+
+int RSA_verify_ASN1_OCTET_STRING(int dtype,
+                                 const unsigned char *m,
+                                 unsigned int m_len, unsigned char *sigbuf,
+                                 unsigned int siglen, RSA *rsa)
+{
+    int i, ret = 0;
+    unsigned char *s;
+    const unsigned char *p;
+    ASN1_OCTET_STRING *sig = NULL;
+
+    if (siglen != (unsigned int)RSA_size(rsa)) {
+        RSAerr(RSA_F_RSA_VERIFY_ASN1_OCTET_STRING,
+               RSA_R_WRONG_SIGNATURE_LENGTH);
+        return 0;
+    }
+
+    s = OPENSSL_malloc((unsigned int)siglen);
+    if (s == NULL) {
+        RSAerr(RSA_F_RSA_VERIFY_ASN1_OCTET_STRING, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    i = RSA_public_decrypt((int)siglen, sigbuf, s, rsa, RSA_PKCS1_PADDING);
+
+    if (i <= 0)
+        goto err;
+
+    p = s;
+    sig = d2i_ASN1_OCTET_STRING(NULL, &p, (long)i);
+    if (sig == NULL)
+        goto err;
+
+    if (((unsigned int)sig->length != m_len) ||
+        (memcmp(m, sig->data, m_len) != 0)) {
+        RSAerr(RSA_F_RSA_VERIFY_ASN1_OCTET_STRING, RSA_R_BAD_SIGNATURE);
+    } else {
+        ret = 1;
+    }
+ err:
+    ASN1_OCTET_STRING_free(sig);
+    OPENSSL_clear_free(s, (unsigned int)siglen);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_sign.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_sign.c
new file mode 100644
index 000000000..952d24fb8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_sign.c
@@ -0,0 +1,248 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include <openssl/rsa.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+#include "rsa_locl.h"
+
+/* Size of an SSL signature: MD5+SHA1 */
+#define SSL_SIG_LENGTH  36
+
+/*
+ * encode_pkcs1 encodes a DigestInfo prefix of hash |type| and digest |m|, as
+ * described in EMSA-PKCS1-v1_5-ENCODE, RFC 3447 section 9.2 step 2. This
+ * encodes the DigestInfo (T and tLen) but does not add the padding.
+ *
+ * On success, it returns one and sets |*out| to a newly allocated buffer
+ * containing the result and |*out_len| to its length. The caller must free
+ * |*out| with |OPENSSL_free|. Otherwise, it returns zero.
+ */
+static int encode_pkcs1(unsigned char **out, int *out_len, int type,
+                        const unsigned char *m, unsigned int m_len)
+{
+    X509_SIG sig;
+    X509_ALGOR algor;
+    ASN1_TYPE parameter;
+    ASN1_OCTET_STRING digest;
+    uint8_t *der = NULL;
+    int len;
+
+    sig.algor = &algor;
+    sig.algor->algorithm = OBJ_nid2obj(type);
+    if (sig.algor->algorithm == NULL) {
+        RSAerr(RSA_F_ENCODE_PKCS1, RSA_R_UNKNOWN_ALGORITHM_TYPE);
+        return 0;
+    }
+    if (OBJ_length(sig.algor->algorithm) == 0) {
+        RSAerr(RSA_F_ENCODE_PKCS1,
+               RSA_R_THE_ASN1_OBJECT_IDENTIFIER_IS_NOT_KNOWN_FOR_THIS_MD);
+        return 0;
+    }
+    parameter.type = V_ASN1_NULL;
+    parameter.value.ptr = NULL;
+    sig.algor->parameter = &parameter;
+
+    sig.digest = &digest;
+    sig.digest->data = (unsigned char *)m;
+    sig.digest->length = m_len;
+
+    len = i2d_X509_SIG(&sig, &der);
+    if (len < 0)
+        return 0;
+
+    *out = der;
+    *out_len = len;
+    return 1;
+}
+
+int RSA_sign(int type, const unsigned char *m, unsigned int m_len,
+             unsigned char *sigret, unsigned int *siglen, RSA *rsa)
+{
+    int encrypt_len, encoded_len = 0, ret = 0;
+    unsigned char *tmps = NULL;
+    const unsigned char *encoded = NULL;
+
+    if (rsa->meth->rsa_sign) {
+        return rsa->meth->rsa_sign(type, m, m_len, sigret, siglen, rsa);
+    }
+
+    /* Compute the encoded digest. */
+    if (type == NID_md5_sha1) {
+        /*
+         * NID_md5_sha1 corresponds to the MD5/SHA1 combination in TLS 1.1 and
+         * earlier. It has no DigestInfo wrapper but otherwise is
+         * RSASSA-PKCS1-v1_5.
+         */
+        if (m_len != SSL_SIG_LENGTH) {
+            RSAerr(RSA_F_RSA_SIGN, RSA_R_INVALID_MESSAGE_LENGTH);
+            return 0;
+        }
+        encoded_len = SSL_SIG_LENGTH;
+        encoded = m;
+    } else {
+        if (!encode_pkcs1(&tmps, &encoded_len, type, m, m_len))
+            goto err;
+        encoded = tmps;
+    }
+
+    if (encoded_len > RSA_size(rsa) - RSA_PKCS1_PADDING_SIZE) {
+        RSAerr(RSA_F_RSA_SIGN, RSA_R_DIGEST_TOO_BIG_FOR_RSA_KEY);
+        goto err;
+    }
+    encrypt_len = RSA_private_encrypt(encoded_len, encoded, sigret, rsa,
+                                      RSA_PKCS1_PADDING);
+    if (encrypt_len <= 0)
+        goto err;
+
+    *siglen = encrypt_len;
+    ret = 1;
+
+err:
+    OPENSSL_clear_free(tmps, (size_t)encoded_len);
+    return ret;
+}
+
+/*
+ * int_rsa_verify verifies an RSA signature in |sigbuf| using |rsa|. It may be
+ * called in two modes. If |rm| is NULL, it verifies the signature for digest
+ * |m|. Otherwise, it recovers the digest from the signature, writing the digest
+ * to |rm| and the length to |*prm_len|. |type| is the NID of the digest
+ * algorithm to use. It returns one on successful verification and zero
+ * otherwise.
+ */
+int int_rsa_verify(int type, const unsigned char *m, unsigned int m_len,
+                   unsigned char *rm, size_t *prm_len,
+                   const unsigned char *sigbuf, size_t siglen, RSA *rsa)
+{
+    int decrypt_len, ret = 0, encoded_len = 0;
+    unsigned char *decrypt_buf = NULL, *encoded = NULL;
+
+    if (siglen != (size_t)RSA_size(rsa)) {
+        RSAerr(RSA_F_INT_RSA_VERIFY, RSA_R_WRONG_SIGNATURE_LENGTH);
+        return 0;
+    }
+
+    /* Recover the encoded digest. */
+    decrypt_buf = OPENSSL_malloc(siglen);
+    if (decrypt_buf == NULL) {
+        RSAerr(RSA_F_INT_RSA_VERIFY, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    decrypt_len = RSA_public_decrypt((int)siglen, sigbuf, decrypt_buf, rsa,
+                                     RSA_PKCS1_PADDING);
+    if (decrypt_len <= 0)
+        goto err;
+
+    if (type == NID_md5_sha1) {
+        /*
+         * NID_md5_sha1 corresponds to the MD5/SHA1 combination in TLS 1.1 and
+         * earlier. It has no DigestInfo wrapper but otherwise is
+         * RSASSA-PKCS1-v1_5.
+         */
+        if (decrypt_len != SSL_SIG_LENGTH) {
+            RSAerr(RSA_F_INT_RSA_VERIFY, RSA_R_BAD_SIGNATURE);
+            goto err;
+        }
+
+        if (rm != NULL) {
+            memcpy(rm, decrypt_buf, SSL_SIG_LENGTH);
+            *prm_len = SSL_SIG_LENGTH;
+        } else {
+            if (m_len != SSL_SIG_LENGTH) {
+                RSAerr(RSA_F_INT_RSA_VERIFY, RSA_R_INVALID_MESSAGE_LENGTH);
+                goto err;
+            }
+
+            if (memcmp(decrypt_buf, m, SSL_SIG_LENGTH) != 0) {
+                RSAerr(RSA_F_INT_RSA_VERIFY, RSA_R_BAD_SIGNATURE);
+                goto err;
+            }
+        }
+    } else if (type == NID_mdc2 && decrypt_len == 2 + 16
+               && decrypt_buf[0] == 0x04 && decrypt_buf[1] == 0x10) {
+        /*
+         * Oddball MDC2 case: signature can be OCTET STRING. check for correct
+         * tag and length octets.
+         */
+        if (rm != NULL) {
+            memcpy(rm, decrypt_buf + 2, 16);
+            *prm_len = 16;
+        } else {
+            if (m_len != 16) {
+                RSAerr(RSA_F_INT_RSA_VERIFY, RSA_R_INVALID_MESSAGE_LENGTH);
+                goto err;
+            }
+
+            if (memcmp(m, decrypt_buf + 2, 16) != 0) {
+                RSAerr(RSA_F_INT_RSA_VERIFY, RSA_R_BAD_SIGNATURE);
+                goto err;
+            }
+        }
+    } else {
+        /*
+         * If recovering the digest, extract a digest-sized output from the end
+         * of |decrypt_buf| for |encode_pkcs1|, then compare the decryption
+         * output as in a standard verification.
+         */
+        if (rm != NULL) {
+            const EVP_MD *md = EVP_get_digestbynid(type);
+            if (md == NULL) {
+                RSAerr(RSA_F_INT_RSA_VERIFY, RSA_R_UNKNOWN_ALGORITHM_TYPE);
+                goto err;
+            }
+
+            m_len = EVP_MD_size(md);
+            if (m_len > (size_t)decrypt_len) {
+                RSAerr(RSA_F_INT_RSA_VERIFY, RSA_R_INVALID_DIGEST_LENGTH);
+                goto err;
+            }
+            m = decrypt_buf + decrypt_len - m_len;
+        }
+
+        /* Construct the encoded digest and ensure it matches. */
+        if (!encode_pkcs1(&encoded, &encoded_len, type, m, m_len))
+            goto err;
+
+        if (encoded_len != decrypt_len
+            || memcmp(encoded, decrypt_buf, encoded_len) != 0) {
+            RSAerr(RSA_F_INT_RSA_VERIFY, RSA_R_BAD_SIGNATURE);
+            goto err;
+        }
+
+        /* Output the recovered digest. */
+        if (rm != NULL) {
+            memcpy(rm, m, m_len);
+            *prm_len = m_len;
+        }
+    }
+
+    ret = 1;
+
+err:
+    OPENSSL_clear_free(encoded, (size_t)encoded_len);
+    OPENSSL_clear_free(decrypt_buf, siglen);
+    return ret;
+}
+
+int RSA_verify(int type, const unsigned char *m, unsigned int m_len,
+               const unsigned char *sigbuf, unsigned int siglen, RSA *rsa)
+{
+
+    if (rsa->meth->rsa_verify) {
+        return rsa->meth->rsa_verify(type, m, m_len, sigbuf, siglen, rsa);
+    }
+
+    return int_rsa_verify(type, m, m_len, NULL, NULL, sigbuf, siglen, rsa);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_ssl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_ssl.c
new file mode 100644
index 000000000..c5654595f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_ssl.c
@@ -0,0 +1,167 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include <openssl/rsa.h>
+#include <openssl/rand.h>
+#include "internal/constant_time_locl.h"
+
+int RSA_padding_add_SSLv23(unsigned char *to, int tlen,
+                           const unsigned char *from, int flen)
+{
+    int i, j;
+    unsigned char *p;
+
+    if (flen > (tlen - 11)) {
+        RSAerr(RSA_F_RSA_PADDING_ADD_SSLV23,
+               RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE);
+        return 0;
+    }
+
+    p = (unsigned char *)to;
+
+    *(p++) = 0;
+    *(p++) = 2;                 /* Public Key BT (Block Type) */
+
+    /* pad out with non-zero random data */
+    j = tlen - 3 - 8 - flen;
+
+    if (RAND_bytes(p, j) <= 0)
+        return 0;
+    for (i = 0; i < j; i++) {
+        if (*p == '\0')
+            do {
+                if (RAND_bytes(p, 1) <= 0)
+                    return 0;
+            } while (*p == '\0');
+        p++;
+    }
+
+    memset(p, 3, 8);
+    p += 8;
+    *(p++) = '\0';
+
+    memcpy(p, from, (unsigned int)flen);
+    return 1;
+}
+
+/*
+ * Copy of RSA_padding_check_PKCS1_type_2 with a twist that rejects padding
+ * if nul delimiter is preceded by 8 consecutive 0x03 bytes. It also
+ * preserves error code reporting for backward compatibility.
+ */
+int RSA_padding_check_SSLv23(unsigned char *to, int tlen,
+                             const unsigned char *from, int flen, int num)
+{
+    int i;
+    /* |em| is the encoded message, zero-padded to exactly |num| bytes */
+    unsigned char *em = NULL;
+    unsigned int good, found_zero_byte, mask, threes_in_row;
+    int zero_index = 0, msg_index, mlen = -1, err;
+
+    if (flen < 10) {
+        RSAerr(RSA_F_RSA_PADDING_CHECK_SSLV23, RSA_R_DATA_TOO_SMALL);
+        return -1;
+    }
+
+    em = OPENSSL_malloc(num);
+    if (em == NULL) {
+        RSAerr(RSA_F_RSA_PADDING_CHECK_SSLV23, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+    /*
+     * Caller is encouraged to pass zero-padded message created with
+     * BN_bn2binpad. Trouble is that since we can't read out of |from|'s
+     * bounds, it's impossible to have an invariant memory access pattern
+     * in case |from| was not zero-padded in advance.
+     */
+    for (from += flen, em += num, i = 0; i < num; i++) {
+        mask = ~constant_time_is_zero(flen);
+        flen -= 1 & mask;
+        from -= 1 & mask;
+        *--em = *from & mask;
+    }
+    from = em;
+
+    good = constant_time_is_zero(from[0]);
+    good &= constant_time_eq(from[1], 2);
+    err = constant_time_select_int(good, 0, RSA_R_BLOCK_TYPE_IS_NOT_02);
+    mask = ~good;
+
+    /* scan over padding data */
+    found_zero_byte = 0;
+    threes_in_row = 0;
+    for (i = 2; i < num; i++) {
+        unsigned int equals0 = constant_time_is_zero(from[i]);
+
+        zero_index = constant_time_select_int(~found_zero_byte & equals0,
+                                              i, zero_index);
+        found_zero_byte |= equals0;
+
+        threes_in_row += 1 & ~found_zero_byte;
+        threes_in_row &= found_zero_byte | constant_time_eq(from[i], 3);
+    }
+
+    /*
+     * PS must be at least 8 bytes long, and it starts two bytes into |from|.
+     * If we never found a 0-byte, then |zero_index| is 0 and the check
+     * also fails.
+     */
+    good &= constant_time_ge(zero_index, 2 + 8);
+    err = constant_time_select_int(mask | good, err,
+                                   RSA_R_NULL_BEFORE_BLOCK_MISSING);
+    mask = ~good;
+
+    good &= constant_time_lt(threes_in_row, 8);
+    err = constant_time_select_int(mask | good, err,
+                                   RSA_R_SSLV3_ROLLBACK_ATTACK);
+    mask = ~good;
+
+    /*
+     * Skip the zero byte. This is incorrect if we never found a zero-byte
+     * but in this case we also do not copy the message out.
+     */
+    msg_index = zero_index + 1;
+    mlen = num - msg_index;
+
+    /*
+     * For good measure, do this check in constant time as well.
+     */
+    good &= constant_time_ge(tlen, mlen);
+    err = constant_time_select_int(mask | good, err, RSA_R_DATA_TOO_LARGE);
+
+    /*
+     * Even though we can't fake result's length, we can pretend copying
+     * |tlen| bytes where |mlen| bytes would be real. Last |tlen| of |num|
+     * bytes are viewed as circular buffer with start at |tlen|-|mlen'|,
+     * where |mlen'| is "saturated" |mlen| value. Deducing information
+     * about failure or |mlen| would take attacker's ability to observe
+     * memory access pattern with byte granularity *as it occurs*. It
+     * should be noted that failure is indistinguishable from normal
+     * operation if |tlen| is fixed by protocol.
+     */
+    tlen = constant_time_select_int(constant_time_lt(num, tlen), num, tlen);
+    msg_index = constant_time_select_int(good, msg_index, num - tlen);
+    mlen = num - msg_index;
+    for (from += msg_index, mask = good, i = 0; i < tlen; i++) {
+        unsigned int equals = constant_time_eq(i, mlen);
+
+        from -= tlen & equals;  /* if (i == mlen) rewind   */
+        mask &= mask ^ equals;  /* if (i == mlen) mask = 0 */
+        to[i] = constant_time_select_8(mask, from[i], to[i]);
+    }
+
+    OPENSSL_clear_free(em, num);
+    RSAerr(RSA_F_RSA_PADDING_CHECK_SSLV23, err);
+    err_clear_last_constant_time(1 & good);
+
+    return constant_time_select_int(good, mlen, -1);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_x931.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_x931.c
new file mode 100644
index 000000000..7b0486c0f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_x931.c
@@ -0,0 +1,117 @@
+/*
+ * Copyright 2005-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include <openssl/rsa.h>
+#include <openssl/objects.h>
+
+int RSA_padding_add_X931(unsigned char *to, int tlen,
+                         const unsigned char *from, int flen)
+{
+    int j;
+    unsigned char *p;
+
+    /*
+     * Absolute minimum amount of padding is 1 header nibble, 1 padding
+     * nibble and 2 trailer bytes: but 1 hash if is already in 'from'.
+     */
+
+    j = tlen - flen - 2;
+
+    if (j < 0) {
+        RSAerr(RSA_F_RSA_PADDING_ADD_X931, RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE);
+        return -1;
+    }
+
+    p = (unsigned char *)to;
+
+    /* If no padding start and end nibbles are in one byte */
+    if (j == 0) {
+        *p++ = 0x6A;
+    } else {
+        *p++ = 0x6B;
+        if (j > 1) {
+            memset(p, 0xBB, j - 1);
+            p += j - 1;
+        }
+        *p++ = 0xBA;
+    }
+    memcpy(p, from, (unsigned int)flen);
+    p += flen;
+    *p = 0xCC;
+    return 1;
+}
+
+int RSA_padding_check_X931(unsigned char *to, int tlen,
+                           const unsigned char *from, int flen, int num)
+{
+    int i = 0, j;
+    const unsigned char *p;
+
+    p = from;
+    if ((num != flen) || ((*p != 0x6A) && (*p != 0x6B))) {
+        RSAerr(RSA_F_RSA_PADDING_CHECK_X931, RSA_R_INVALID_HEADER);
+        return -1;
+    }
+
+    if (*p++ == 0x6B) {
+        j = flen - 3;
+        for (i = 0; i < j; i++) {
+            unsigned char c = *p++;
+            if (c == 0xBA)
+                break;
+            if (c != 0xBB) {
+                RSAerr(RSA_F_RSA_PADDING_CHECK_X931, RSA_R_INVALID_PADDING);
+                return -1;
+            }
+        }
+
+        j -= i;
+
+        if (i == 0) {
+            RSAerr(RSA_F_RSA_PADDING_CHECK_X931, RSA_R_INVALID_PADDING);
+            return -1;
+        }
+
+    } else {
+        j = flen - 2;
+    }
+
+    if (p[j] != 0xCC) {
+        RSAerr(RSA_F_RSA_PADDING_CHECK_X931, RSA_R_INVALID_TRAILER);
+        return -1;
+    }
+
+    memcpy(to, p, (unsigned int)j);
+
+    return j;
+}
+
+/* Translate between X931 hash ids and NIDs */
+
+int RSA_X931_hash_id(int nid)
+{
+    switch (nid) {
+    case NID_sha1:
+        return 0x33;
+
+    case NID_sha256:
+        return 0x34;
+
+    case NID_sha384:
+        return 0x36;
+
+    case NID_sha512:
+        return 0x35;
+
+    }
+    return -1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_x931g.c b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_x931g.c
new file mode 100644
index 000000000..15e40e8d1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/rsa/rsa_x931g.c
@@ -0,0 +1,200 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include <time.h>
+#include <openssl/err.h>
+#include <openssl/bn.h>
+#include "rsa_locl.h"
+
+/* X9.31 RSA key derivation and generation */
+
+int RSA_X931_derive_ex(RSA *rsa, BIGNUM *p1, BIGNUM *p2, BIGNUM *q1,
+                       BIGNUM *q2, const BIGNUM *Xp1, const BIGNUM *Xp2,
+                       const BIGNUM *Xp, const BIGNUM *Xq1, const BIGNUM *Xq2,
+                       const BIGNUM *Xq, const BIGNUM *e, BN_GENCB *cb)
+{
+    BIGNUM *r0 = NULL, *r1 = NULL, *r2 = NULL, *r3 = NULL;
+    BN_CTX *ctx = NULL, *ctx2 = NULL;
+    int ret = 0;
+
+    if (!rsa)
+        goto err;
+
+    ctx = BN_CTX_new();
+    if (ctx == NULL)
+        goto err;
+    BN_CTX_start(ctx);
+
+    r0 = BN_CTX_get(ctx);
+    r1 = BN_CTX_get(ctx);
+    r2 = BN_CTX_get(ctx);
+    r3 = BN_CTX_get(ctx);
+
+    if (r3 == NULL)
+        goto err;
+    if (!rsa->e) {
+        rsa->e = BN_dup(e);
+        if (!rsa->e)
+            goto err;
+    } else {
+        e = rsa->e;
+    }
+
+    /*
+     * If not all parameters present only calculate what we can. This allows
+     * test programs to output selective parameters.
+     */
+
+    if (Xp && rsa->p == NULL) {
+        rsa->p = BN_new();
+        if (rsa->p == NULL)
+            goto err;
+
+        if (!BN_X931_derive_prime_ex(rsa->p, p1, p2,
+                                     Xp, Xp1, Xp2, e, ctx, cb))
+            goto err;
+    }
+
+    if (Xq && rsa->q == NULL) {
+        rsa->q = BN_new();
+        if (rsa->q == NULL)
+            goto err;
+        if (!BN_X931_derive_prime_ex(rsa->q, q1, q2,
+                                     Xq, Xq1, Xq2, e, ctx, cb))
+            goto err;
+    }
+
+    if (rsa->p == NULL || rsa->q == NULL) {
+        BN_CTX_end(ctx);
+        BN_CTX_free(ctx);
+        return 2;
+    }
+
+    /*
+     * Since both primes are set we can now calculate all remaining
+     * components.
+     */
+
+    /* calculate n */
+    rsa->n = BN_new();
+    if (rsa->n == NULL)
+        goto err;
+    if (!BN_mul(rsa->n, rsa->p, rsa->q, ctx))
+        goto err;
+
+    /* calculate d */
+    if (!BN_sub(r1, rsa->p, BN_value_one()))
+        goto err;               /* p-1 */
+    if (!BN_sub(r2, rsa->q, BN_value_one()))
+        goto err;               /* q-1 */
+    if (!BN_mul(r0, r1, r2, ctx))
+        goto err;               /* (p-1)(q-1) */
+
+    if (!BN_gcd(r3, r1, r2, ctx))
+        goto err;
+
+    if (!BN_div(r0, NULL, r0, r3, ctx))
+        goto err;               /* LCM((p-1)(q-1)) */
+
+    ctx2 = BN_CTX_new();
+    if (ctx2 == NULL)
+        goto err;
+
+    rsa->d = BN_mod_inverse(NULL, rsa->e, r0, ctx2); /* d */
+    if (rsa->d == NULL)
+        goto err;
+
+    /* calculate d mod (p-1) */
+    rsa->dmp1 = BN_new();
+    if (rsa->dmp1 == NULL)
+        goto err;
+    if (!BN_mod(rsa->dmp1, rsa->d, r1, ctx))
+        goto err;
+
+    /* calculate d mod (q-1) */
+    rsa->dmq1 = BN_new();
+    if (rsa->dmq1 == NULL)
+        goto err;
+    if (!BN_mod(rsa->dmq1, rsa->d, r2, ctx))
+        goto err;
+
+    /* calculate inverse of q mod p */
+    rsa->iqmp = BN_mod_inverse(NULL, rsa->q, rsa->p, ctx2);
+    if (rsa->iqmp == NULL)
+        goto err;
+
+    ret = 1;
+ err:
+    if (ctx)
+        BN_CTX_end(ctx);
+    BN_CTX_free(ctx);
+    BN_CTX_free(ctx2);
+
+    return ret;
+
+}
+
+int RSA_X931_generate_key_ex(RSA *rsa, int bits, const BIGNUM *e,
+                             BN_GENCB *cb)
+{
+    int ok = 0;
+    BIGNUM *Xp = NULL, *Xq = NULL;
+    BN_CTX *ctx = NULL;
+
+    ctx = BN_CTX_new();
+    if (ctx == NULL)
+        goto error;
+
+    BN_CTX_start(ctx);
+    Xp = BN_CTX_get(ctx);
+    Xq = BN_CTX_get(ctx);
+    if (Xq == NULL)
+        goto error;
+    if (!BN_X931_generate_Xpq(Xp, Xq, bits, ctx))
+        goto error;
+
+    rsa->p = BN_new();
+    rsa->q = BN_new();
+    if (rsa->p == NULL || rsa->q == NULL)
+        goto error;
+
+    /* Generate two primes from Xp, Xq */
+
+    if (!BN_X931_generate_prime_ex(rsa->p, NULL, NULL, NULL, NULL, Xp,
+                                   e, ctx, cb))
+        goto error;
+
+    if (!BN_X931_generate_prime_ex(rsa->q, NULL, NULL, NULL, NULL, Xq,
+                                   e, ctx, cb))
+        goto error;
+
+    /*
+     * Since rsa->p and rsa->q are valid this call will just derive remaining
+     * RSA components.
+     */
+
+    if (!RSA_X931_derive_ex(rsa, NULL, NULL, NULL, NULL,
+                            NULL, NULL, NULL, NULL, NULL, NULL, e, cb))
+        goto error;
+
+    ok = 1;
+
+ error:
+    if (ctx)
+        BN_CTX_end(ctx);
+    BN_CTX_free(ctx);
+
+    if (ok)
+        return 1;
+
+    return 0;
+
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/s390x_arch.h b/trunk/3rdparty/openssl-1.1-fit/crypto/s390x_arch.h
new file mode 100644
index 000000000..4a775a927
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/s390x_arch.h
@@ -0,0 +1,103 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef S390X_ARCH_H
+# define S390X_ARCH_H
+
+# ifndef __ASSEMBLER__
+
+void s390x_kimd(const unsigned char *in, size_t len, unsigned int fc,
+                void *param);
+void s390x_klmd(const unsigned char *in, size_t inlen, unsigned char *out,
+                size_t outlen, unsigned int fc, void *param);
+void s390x_km(const unsigned char *in, size_t len, unsigned char *out,
+              unsigned int fc, void *param);
+void s390x_kmac(const unsigned char *in, size_t len, unsigned int fc,
+                void *param);
+void s390x_kmo(const unsigned char *in, size_t len, unsigned char *out,
+               unsigned int fc, void *param);
+void s390x_kmf(const unsigned char *in, size_t len, unsigned char *out,
+               unsigned int fc, void *param);
+void s390x_kma(const unsigned char *aad, size_t alen, const unsigned char *in,
+               size_t len, unsigned char *out, unsigned int fc, void *param);
+
+/*
+ * The field elements of OPENSSL_s390xcap_P are the 64-bit words returned by
+ * the STFLE instruction followed by the 64-bit word pairs returned by
+ * instructions' QUERY functions. If STFLE returns fewer data or an instruction
+ * is not supported, the corresponding field elements are zero.
+ */
+struct OPENSSL_s390xcap_st {
+    unsigned long long stfle[4];
+    unsigned long long kimd[2];
+    unsigned long long klmd[2];
+    unsigned long long km[2];
+    unsigned long long kmc[2];
+    unsigned long long kmac[2];
+    unsigned long long kmctr[2];
+    unsigned long long kmo[2];
+    unsigned long long kmf[2];
+    unsigned long long prno[2];
+    unsigned long long kma[2];
+};
+
+extern struct OPENSSL_s390xcap_st OPENSSL_s390xcap_P;
+
+/* convert facility bit number or function code to bit mask */
+#  define S390X_CAPBIT(i)	(1ULL << (63 - (i) % 64))
+
+# endif
+
+/* OPENSSL_s390xcap_P offsets [bytes] */
+# define S390X_STFLE		0x00
+# define S390X_KIMD		0x20
+# define S390X_KLMD		0x30
+# define S390X_KM		0x40
+# define S390X_KMC		0x50
+# define S390X_KMAC		0x60
+# define S390X_KMCTR		0x70
+# define S390X_KMO		0x80
+# define S390X_KMF		0x90
+# define S390X_PRNO		0xa0
+# define S390X_KMA		0xb0
+
+/* Facility Bit Numbers */
+# define S390X_VX		129
+# define S390X_VXD		134
+# define S390X_VXE		135
+
+/* Function Codes */
+
+/* all instructions */
+# define S390X_QUERY		0
+
+/* kimd/klmd */
+# define S390X_SHA3_224		32
+# define S390X_SHA3_256		33
+# define S390X_SHA3_384		34
+# define S390X_SHA3_512		35
+# define S390X_SHAKE_128	36
+# define S390X_SHAKE_256	37
+# define S390X_GHASH		65
+
+/* km/kmc/kmac/kmctr/kmo/kmf/kma */
+# define S390X_AES_128		18
+# define S390X_AES_192		19
+# define S390X_AES_256		20
+
+/* prno */
+# define S390X_TRNG		114
+
+/* Register 0 Flags */
+# define S390X_DECRYPT		0x80
+# define S390X_KMA_LPC		0x100
+# define S390X_KMA_LAAD		0x200
+# define S390X_KMA_HS		0x400
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/s390xcap.c b/trunk/3rdparty/openssl-1.1-fit/crypto/s390xcap.c
new file mode 100644
index 000000000..e7c7f0a35
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/s390xcap.c
@@ -0,0 +1,67 @@
+/*
+ * Copyright 2010-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <setjmp.h>
+#include <signal.h>
+#include "internal/cryptlib.h"
+#include "s390x_arch.h"
+
+static sigjmp_buf ill_jmp;
+static void ill_handler(int sig)
+{
+    siglongjmp(ill_jmp, sig);
+}
+
+void OPENSSL_s390x_facilities(void);
+void OPENSSL_vx_probe(void);
+
+struct OPENSSL_s390xcap_st OPENSSL_s390xcap_P;
+
+void OPENSSL_cpuid_setup(void)
+{
+    sigset_t oset;
+    struct sigaction ill_act, oact;
+
+    if (OPENSSL_s390xcap_P.stfle[0])
+        return;
+
+    /* set a bit that will not be tested later */
+    OPENSSL_s390xcap_P.stfle[0] |= S390X_CAPBIT(0);
+
+    memset(&ill_act, 0, sizeof(ill_act));
+    ill_act.sa_handler = ill_handler;
+    sigfillset(&ill_act.sa_mask);
+    sigdelset(&ill_act.sa_mask, SIGILL);
+    sigdelset(&ill_act.sa_mask, SIGFPE);
+    sigdelset(&ill_act.sa_mask, SIGTRAP);
+    sigprocmask(SIG_SETMASK, &ill_act.sa_mask, &oset);
+    sigaction(SIGILL, &ill_act, &oact);
+    sigaction(SIGFPE, &ill_act, &oact);
+
+    /* protection against missing store-facility-list-extended */
+    if (sigsetjmp(ill_jmp, 1) == 0)
+        OPENSSL_s390x_facilities();
+
+    /* protection against disabled vector facility */
+    if ((OPENSSL_s390xcap_P.stfle[2] & S390X_CAPBIT(S390X_VX))
+        && (sigsetjmp(ill_jmp, 1) == 0)) {
+        OPENSSL_vx_probe();
+    } else {
+        OPENSSL_s390xcap_P.stfle[2] &= ~(S390X_CAPBIT(S390X_VX)
+                                         | S390X_CAPBIT(S390X_VXD)
+                                         | S390X_CAPBIT(S390X_VXE));
+    }
+
+    sigaction(SIGFPE, &oact, NULL);
+    sigaction(SIGILL, &oact, NULL);
+    sigprocmask(SIG_SETMASK, &oset, NULL);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/s390xcpuid.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/s390xcpuid.pl
new file mode 100755
index 000000000..ec700a47d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/s390xcpuid.pl
@@ -0,0 +1,421 @@
+#! /usr/bin/env perl
+# Copyright 2009-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+$flavour = shift;
+
+if ($flavour =~ /3[12]/) {
+	$SIZE_T=4;
+	$g="";
+} else {
+	$SIZE_T=8;
+	$g="g";
+}
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+$ra="%r14";
+$sp="%r15";
+$stdframe=16*$SIZE_T+4*8;
+
+$code=<<___;
+#include "s390x_arch.h"
+
+.text
+
+.globl	OPENSSL_s390x_facilities
+.type	OPENSSL_s390x_facilities,\@function
+.align	16
+OPENSSL_s390x_facilities:
+	lghi	%r0,0
+	larl	%r4,OPENSSL_s390xcap_P
+
+	stg	%r0,S390X_STFLE+8(%r4)	# wipe capability vectors
+	stg	%r0,S390X_STFLE+16(%r4)
+	stg	%r0,S390X_STFLE+24(%r4)
+	stg	%r0,S390X_KIMD(%r4)
+	stg	%r0,S390X_KIMD+8(%r4)
+	stg	%r0,S390X_KLMD(%r4)
+	stg	%r0,S390X_KLMD+8(%r4)
+	stg	%r0,S390X_KM(%r4)
+	stg	%r0,S390X_KM+8(%r4)
+	stg	%r0,S390X_KMC(%r4)
+	stg	%r0,S390X_KMC+8(%r4)
+	stg	%r0,S390X_KMAC(%r4)
+	stg	%r0,S390X_KMAC+8(%r4)
+	stg	%r0,S390X_KMCTR(%r4)
+	stg	%r0,S390X_KMCTR+8(%r4)
+	stg	%r0,S390X_KMO(%r4)
+	stg	%r0,S390X_KMO+8(%r4)
+	stg	%r0,S390X_KMF(%r4)
+	stg	%r0,S390X_KMF+8(%r4)
+	stg	%r0,S390X_PRNO(%r4)
+	stg	%r0,S390X_PRNO+8(%r4)
+	stg	%r0,S390X_KMA(%r4)
+	stg	%r0,S390X_KMA+8(%r4)
+
+	.long	0xb2b04000		# stfle	0(%r4)
+	brc	8,.Ldone
+	lghi	%r0,1
+	.long	0xb2b04000		# stfle 0(%r4)
+	brc	8,.Ldone
+	lghi	%r0,2
+	.long	0xb2b04000		# stfle 0(%r4)
+.Ldone:
+	lmg	%r2,%r3,S390X_STFLE(%r4)
+	tmhl	%r2,0x4000		# check for message-security-assist
+	jz	.Lret
+
+	lghi	%r0,S390X_QUERY		# query kimd capabilities
+	la	%r1,S390X_KIMD(%r4)
+	.long	0xb93e0002		# kimd %r0,%r2
+
+	lghi	%r0,S390X_QUERY		# query klmd capabilities
+	la	%r1,S390X_KLMD(%r4)
+	.long	0xb93f0002		# klmd %r0,%r2
+
+	lghi	%r0,S390X_QUERY		# query km capability vector
+	la	%r1,S390X_KM(%r4)
+	.long	0xb92e0042		# km %r4,%r2
+
+	lghi	%r0,S390X_QUERY		# query kmc capability vector
+	la	%r1,S390X_KMC(%r4)
+	.long	0xb92f0042		# kmc %r4,%r2
+
+	lghi	%r0,S390X_QUERY		# query kmac capability vector
+	la	%r1,S390X_KMAC(%r4)
+	.long	0xb91e0042		# kmac %r4,%r2
+
+	tmhh	%r3,0x0004		# check for message-security-assist-4
+	jz	.Lret
+
+	lghi	%r0,S390X_QUERY		# query kmctr capability vector
+	la	%r1,S390X_KMCTR(%r4)
+	.long	0xb92d2042		# kmctr %r4,%r2,%r2
+
+	lghi	%r0,S390X_QUERY		# query kmo capability vector
+	la	%r1,S390X_KMO(%r4)
+	.long	0xb92b0042		# kmo %r4,%r2
+
+	lghi	%r0,S390X_QUERY		# query kmf capability vector
+	la	%r1,S390X_KMF(%r4)
+	.long	0xb92a0042		# kmf %r4,%r2
+
+	tml	%r2,0x40		# check for message-security-assist-5
+	jz	.Lret
+
+	lghi	%r0,S390X_QUERY		# query prno capability vector
+	la	%r1,S390X_PRNO(%r4)
+	.long	0xb93c0042		# prno %r4,%r2
+
+	lg	%r2,S390X_STFLE+16(%r4)
+	tmhl	%r2,0x2000		# check for message-security-assist-8
+	jz	.Lret
+
+	lghi	%r0,S390X_QUERY		# query kma capability vector
+	la	%r1,S390X_KMA(%r4)
+	.long	0xb9294022		# kma %r2,%r4,%r2
+
+.Lret:
+	br	$ra
+.size	OPENSSL_s390x_facilities,.-OPENSSL_s390x_facilities
+
+.globl	OPENSSL_rdtsc
+.type	OPENSSL_rdtsc,\@function
+.align	16
+OPENSSL_rdtsc:
+	larl	%r4,OPENSSL_s390xcap_P
+	tm	S390X_STFLE+3(%r4),0x40	# check for store-clock-fast facility
+	jz	.Lstck
+
+	.long	0xb27cf010	# stckf 16($sp)
+	lg	%r2,16($sp)
+	br	$ra
+.Lstck:
+	stck	16($sp)
+	lg	%r2,16($sp)
+	br	$ra
+.size	OPENSSL_rdtsc,.-OPENSSL_rdtsc
+
+.globl	OPENSSL_atomic_add
+.type	OPENSSL_atomic_add,\@function
+.align	16
+OPENSSL_atomic_add:
+	l	%r1,0(%r2)
+.Lspin:	lr	%r0,%r1
+	ar	%r0,%r3
+	cs	%r1,%r0,0(%r2)
+	brc	4,.Lspin
+	lgfr	%r2,%r0		# OpenSSL expects the new value
+	br	$ra
+.size	OPENSSL_atomic_add,.-OPENSSL_atomic_add
+
+.globl	OPENSSL_wipe_cpu
+.type	OPENSSL_wipe_cpu,\@function
+.align	16
+OPENSSL_wipe_cpu:
+	xgr	%r0,%r0
+	xgr	%r1,%r1
+	lgr	%r2,$sp
+	xgr	%r3,%r3
+	xgr	%r4,%r4
+	lzdr	%f0
+	lzdr	%f1
+	lzdr	%f2
+	lzdr	%f3
+	lzdr	%f4
+	lzdr	%f5
+	lzdr	%f6
+	lzdr	%f7
+	br	$ra
+.size	OPENSSL_wipe_cpu,.-OPENSSL_wipe_cpu
+
+.globl	OPENSSL_cleanse
+.type	OPENSSL_cleanse,\@function
+.align	16
+OPENSSL_cleanse:
+#if !defined(__s390x__) && !defined(__s390x)
+	llgfr	%r3,%r3
+#endif
+	lghi	%r4,15
+	lghi	%r0,0
+	clgr	%r3,%r4
+	jh	.Lot
+	clgr	%r3,%r0
+	bcr	8,%r14
+.Little:
+	stc	%r0,0(%r2)
+	la	%r2,1(%r2)
+	brctg	%r3,.Little
+	br	%r14
+.align	4
+.Lot:	tmll	%r2,7
+	jz	.Laligned
+	stc	%r0,0(%r2)
+	la	%r2,1(%r2)
+	brctg	%r3,.Lot
+.Laligned:
+	srlg	%r4,%r3,3
+.Loop:	stg	%r0,0(%r2)
+	la	%r2,8(%r2)
+	brctg	%r4,.Loop
+	lghi	%r4,7
+	ngr	%r3,%r4
+	jnz	.Little
+	br	$ra
+.size	OPENSSL_cleanse,.-OPENSSL_cleanse
+
+.globl	CRYPTO_memcmp
+.type	CRYPTO_memcmp,\@function
+.align	16
+CRYPTO_memcmp:
+#if !defined(__s390x__) && !defined(__s390x)
+	llgfr	%r4,%r4
+#endif
+	lghi	%r5,0
+	clgr	%r4,%r5
+	je	.Lno_data
+
+.Loop_cmp:
+	llgc	%r0,0(%r2)
+	la	%r2,1(%r2)
+	llgc	%r1,0(%r3)
+	la	%r3,1(%r3)
+	xr	%r1,%r0
+	or	%r5,%r1
+	brctg	%r4,.Loop_cmp
+
+	lnr	%r5,%r5
+	srl	%r5,31
+.Lno_data:
+	lgr	%r2,%r5
+	br	$ra
+.size	CRYPTO_memcmp,.-CRYPTO_memcmp
+
+.globl	OPENSSL_instrument_bus
+.type	OPENSSL_instrument_bus,\@function
+.align	16
+OPENSSL_instrument_bus:
+	lghi	%r2,0
+	br	%r14
+.size	OPENSSL_instrument_bus,.-OPENSSL_instrument_bus
+
+.globl	OPENSSL_instrument_bus2
+.type	OPENSSL_instrument_bus2,\@function
+.align	16
+OPENSSL_instrument_bus2:
+	lghi	%r2,0
+	br	$ra
+.size	OPENSSL_instrument_bus2,.-OPENSSL_instrument_bus2
+
+.globl	OPENSSL_vx_probe
+.type	OPENSSL_vx_probe,\@function
+.align	16
+OPENSSL_vx_probe:
+	.word	0xe700,0x0000,0x0044	# vzero %v0
+	br	$ra
+.size	OPENSSL_vx_probe,.-OPENSSL_vx_probe
+___
+
+{
+################
+# void s390x_kimd(const unsigned char *in, size_t len, unsigned int fc,
+#                 void *param)
+my ($in,$len,$fc,$param) = map("%r$_",(2..5));
+$code.=<<___;
+.globl	s390x_kimd
+.type	s390x_kimd,\@function
+.align	16
+s390x_kimd:
+	llgfr	%r0,$fc
+	lgr	%r1,$param
+
+	.long	0xb93e0002	# kimd %r0,%r2
+	brc	1,.-4		# pay attention to "partial completion"
+
+	br	$ra
+.size	s390x_kimd,.-s390x_kimd
+___
+}
+
+{
+################
+# void s390x_klmd(const unsigned char *in, size_t inlen, unsigned char *out,
+#                 size_t outlen, unsigned int fc, void *param)
+my ($in,$inlen,$out,$outlen,$fc) = map("%r$_",(2..6));
+$code.=<<___;
+.globl	s390x_klmd
+.type	s390x_klmd,\@function
+.align	32
+s390x_klmd:
+	llgfr	%r0,$fc
+	l${g}	%r1,$stdframe($sp)
+
+	.long	0xb93f0042	# klmd %r4,%r2
+	brc	1,.-4		# pay attention to "partial completion"
+
+	br	$ra
+.size	s390x_klmd,.-s390x_klmd
+___
+}
+
+################
+# void s390x_km(const unsigned char *in, size_t len, unsigned char *out,
+#               unsigned int fc, void *param)
+{
+my ($in,$len,$out,$fc,$param) = map("%r$_",(2..6));
+$code.=<<___;
+.globl	s390x_km
+.type	s390x_km,\@function
+.align	16
+s390x_km:
+	lr	%r0,$fc
+	l${g}r	%r1,$param
+
+	.long	0xb92e0042	# km $out,$in
+	brc	1,.-4		# pay attention to "partial completion"
+
+	br	$ra
+.size	s390x_km,.-s390x_km
+___
+}
+
+################
+# void s390x_kmac(const unsigned char *in, size_t len, unsigned int fc,
+#                 void *param)
+{
+my ($in,$len,$fc,$param) = map("%r$_",(2..5));
+$code.=<<___;
+.globl	s390x_kmac
+.type	s390x_kmac,\@function
+.align	16
+s390x_kmac:
+	lr	%r0,$fc
+	l${g}r	%r1,$param
+
+	.long	0xb91e0002	# kmac %r0,$in
+	brc	1,.-4		# pay attention to "partial completion"
+
+	br	$ra
+.size	s390x_kmac,.-s390x_kmac
+___
+}
+
+################
+# void s390x_kmo(const unsigned char *in, size_t len, unsigned char *out,
+#                unsigned int fc, void *param)
+{
+my ($in,$len,$out,$fc,$param) = map("%r$_",(2..6));
+$code.=<<___;
+.globl	s390x_kmo
+.type	s390x_kmo,\@function
+.align	16
+s390x_kmo:
+	lr	%r0,$fc
+	l${g}r	%r1,$param
+
+	.long	0xb92b0042	# kmo $out,$in
+	brc	1,.-4		# pay attention to "partial completion"
+
+	br	$ra
+.size	s390x_kmo,.-s390x_kmo
+___
+}
+
+################
+# void s390x_kmf(const unsigned char *in, size_t len, unsigned char *out,
+#                unsigned int fc, void *param)
+{
+my ($in,$len,$out,$fc,$param) = map("%r$_",(2..6));
+$code.=<<___;
+.globl	s390x_kmf
+.type	s390x_kmf,\@function
+.align	16
+s390x_kmf:
+	lr	%r0,$fc
+	l${g}r	%r1,$param
+
+	.long	0xb92a0042	# kmf $out,$in
+	brc	1,.-4		# pay attention to "partial completion"
+
+	br	$ra
+.size	s390x_kmf,.-s390x_kmf
+___
+}
+
+################
+# void s390x_kma(const unsigned char *aad, size_t alen,
+#                const unsigned char *in, size_t len,
+#                unsigned char *out, unsigned int fc, void *param)
+{
+my ($aad,$alen,$in,$len,$out) = map("%r$_",(2..6));
+$code.=<<___;
+.globl	s390x_kma
+.type	s390x_kma,\@function
+.align	16
+s390x_kma:
+	st${g}	$out,6*$SIZE_T($sp)
+	lm${g}	%r0,%r1,$stdframe($sp)
+
+	.long	0xb9292064	# kma $out,$aad,$in
+	brc	1,.-4		# pay attention to "partial completion"
+
+	l${g}	$out,6*$SIZE_T($sp)
+	br	$ra
+.size	s390x_kma,.-s390x_kma
+___
+}
+
+$code.=<<___;
+.section	.init
+	brasl	$ra,OPENSSL_cpuid_setup
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;	# force flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/seed/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/seed/build.info
new file mode 100644
index 000000000..abdcbcaa9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/seed/build.info
@@ -0,0 +1,2 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=seed.c seed_ecb.c seed_cbc.c seed_cfb.c seed_ofb.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed.c b/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed.c
new file mode 100644
index 000000000..d62da91ed
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed.c
@@ -0,0 +1,590 @@
+/*
+ * Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Copyright (c) 2007 KISA(Korea Information Security Agency). All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Neither the name of author nor the names of its contributors may
+ *    be used to endorse or promote products derived from this software
+ *    without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ */
+#ifndef OPENSSL_NO_SEED
+
+# include <stdio.h>
+# include <stdlib.h>
+# include <string.h>
+# ifdef _WIN32
+#  include <memory.h>
+# endif
+
+# include <openssl/seed.h>
+# include "seed_locl.h"
+
+# ifdef SS                      /* can get defined on Solaris by inclusion of
+                                 * <stdlib.h> */
+#  undef SS
+# endif
+
+# if !defined(OPENSSL_SMALL_FOOTPRINT)
+
+#  define G_FUNC(v)       \
+        SS[0][(unsigned char)      (v) & 0xff] ^ \
+        SS[1][(unsigned char) ((v)>>8) & 0xff] ^ \
+        SS[2][(unsigned char)((v)>>16) & 0xff] ^ \
+        SS[3][(unsigned char)((v)>>24) & 0xff]
+
+static const seed_word SS[4][256] = {
+    { 0x2989a1a8, 0x05858184, 0x16c6d2d4, 0x13c3d3d0,
+      0x14445054, 0x1d0d111c, 0x2c8ca0ac, 0x25052124,
+      0x1d4d515c, 0x03434340, 0x18081018, 0x1e0e121c,
+      0x11415150, 0x3cccf0fc, 0x0acac2c8, 0x23436360,
+      0x28082028, 0x04444044, 0x20002020, 0x1d8d919c,
+      0x20c0e0e0, 0x22c2e2e0, 0x08c8c0c8, 0x17071314,
+      0x2585a1a4, 0x0f8f838c, 0x03030300, 0x3b4b7378,
+      0x3b8bb3b8, 0x13031310, 0x12c2d2d0, 0x2ecee2ec,
+      0x30407070, 0x0c8c808c, 0x3f0f333c, 0x2888a0a8,
+      0x32023230, 0x1dcdd1dc, 0x36c6f2f4, 0x34447074,
+      0x2ccce0ec, 0x15859194, 0x0b0b0308, 0x17475354,
+      0x1c4c505c, 0x1b4b5358, 0x3d8db1bc, 0x01010100,
+      0x24042024, 0x1c0c101c, 0x33437370, 0x18889098,
+      0x10001010, 0x0cccc0cc, 0x32c2f2f0, 0x19c9d1d8,
+      0x2c0c202c, 0x27c7e3e4, 0x32427270, 0x03838380,
+      0x1b8b9398, 0x11c1d1d0, 0x06868284, 0x09c9c1c8,
+      0x20406060, 0x10405050, 0x2383a3a0, 0x2bcbe3e8,
+      0x0d0d010c, 0x3686b2b4, 0x1e8e929c, 0x0f4f434c,
+      0x3787b3b4, 0x1a4a5258, 0x06c6c2c4, 0x38487078,
+      0x2686a2a4, 0x12021210, 0x2f8fa3ac, 0x15c5d1d4,
+      0x21416160, 0x03c3c3c0, 0x3484b0b4, 0x01414140,
+      0x12425250, 0x3d4d717c, 0x0d8d818c, 0x08080008,
+      0x1f0f131c, 0x19899198, 0x00000000, 0x19091118,
+      0x04040004, 0x13435350, 0x37c7f3f4, 0x21c1e1e0,
+      0x3dcdf1fc, 0x36467274, 0x2f0f232c, 0x27072324,
+      0x3080b0b0, 0x0b8b8388, 0x0e0e020c, 0x2b8ba3a8,
+      0x2282a2a0, 0x2e4e626c, 0x13839390, 0x0d4d414c,
+      0x29496168, 0x3c4c707c, 0x09090108, 0x0a0a0208,
+      0x3f8fb3bc, 0x2fcfe3ec, 0x33c3f3f0, 0x05c5c1c4,
+      0x07878384, 0x14041014, 0x3ecef2fc, 0x24446064,
+      0x1eced2dc, 0x2e0e222c, 0x0b4b4348, 0x1a0a1218,
+      0x06060204, 0x21012120, 0x2b4b6368, 0x26466264,
+      0x02020200, 0x35c5f1f4, 0x12829290, 0x0a8a8288,
+      0x0c0c000c, 0x3383b3b0, 0x3e4e727c, 0x10c0d0d0,
+      0x3a4a7278, 0x07474344, 0x16869294, 0x25c5e1e4,
+      0x26062224, 0x00808080, 0x2d8da1ac, 0x1fcfd3dc,
+      0x2181a1a0, 0x30003030, 0x37073334, 0x2e8ea2ac,
+      0x36063234, 0x15051114, 0x22022220, 0x38083038,
+      0x34c4f0f4, 0x2787a3a4, 0x05454144, 0x0c4c404c,
+      0x01818180, 0x29c9e1e8, 0x04848084, 0x17879394,
+      0x35053134, 0x0bcbc3c8, 0x0ecec2cc, 0x3c0c303c,
+      0x31417170, 0x11011110, 0x07c7c3c4, 0x09898188,
+      0x35457174, 0x3bcbf3f8, 0x1acad2d8, 0x38c8f0f8,
+      0x14849094, 0x19495158, 0x02828280, 0x04c4c0c4,
+      0x3fcff3fc, 0x09494148, 0x39093138, 0x27476364,
+      0x00c0c0c0, 0x0fcfc3cc, 0x17c7d3d4, 0x3888b0b8,
+      0x0f0f030c, 0x0e8e828c, 0x02424240, 0x23032320,
+      0x11819190, 0x2c4c606c, 0x1bcbd3d8, 0x2484a0a4,
+      0x34043034, 0x31c1f1f0, 0x08484048, 0x02c2c2c0,
+      0x2f4f636c, 0x3d0d313c, 0x2d0d212c, 0x00404040,
+      0x3e8eb2bc, 0x3e0e323c, 0x3c8cb0bc, 0x01c1c1c0,
+      0x2a8aa2a8, 0x3a8ab2b8, 0x0e4e424c, 0x15455154,
+      0x3b0b3338, 0x1cccd0dc, 0x28486068, 0x3f4f737c,
+      0x1c8c909c, 0x18c8d0d8, 0x0a4a4248, 0x16465254,
+      0x37477374, 0x2080a0a0, 0x2dcde1ec, 0x06464244,
+      0x3585b1b4, 0x2b0b2328, 0x25456164, 0x3acaf2f8,
+      0x23c3e3e0, 0x3989b1b8, 0x3181b1b0, 0x1f8f939c,
+      0x1e4e525c, 0x39c9f1f8, 0x26c6e2e4, 0x3282b2b0,
+      0x31013130, 0x2acae2e8, 0x2d4d616c, 0x1f4f535c,
+      0x24c4e0e4, 0x30c0f0f0, 0x0dcdc1cc, 0x08888088,
+      0x16061214, 0x3a0a3238, 0x18485058, 0x14c4d0d4,
+      0x22426260, 0x29092128, 0x07070304, 0x33033330,
+      0x28c8e0e8, 0x1b0b1318, 0x05050104, 0x39497178,
+      0x10809090, 0x2a4a6268, 0x2a0a2228, 0x1a8a9298
+    },
+    { 0x38380830, 0xe828c8e0, 0x2c2d0d21, 0xa42686a2,
+      0xcc0fcfc3, 0xdc1eced2, 0xb03383b3, 0xb83888b0,
+      0xac2f8fa3, 0x60204060, 0x54154551, 0xc407c7c3,
+      0x44044440, 0x6c2f4f63, 0x682b4b63, 0x581b4b53,
+      0xc003c3c3, 0x60224262, 0x30330333, 0xb43585b1,
+      0x28290921, 0xa02080a0, 0xe022c2e2, 0xa42787a3,
+      0xd013c3d3, 0x90118191, 0x10110111, 0x04060602,
+      0x1c1c0c10, 0xbc3c8cb0, 0x34360632, 0x480b4b43,
+      0xec2fcfe3, 0x88088880, 0x6c2c4c60, 0xa82888a0,
+      0x14170713, 0xc404c4c0, 0x14160612, 0xf434c4f0,
+      0xc002c2c2, 0x44054541, 0xe021c1e1, 0xd416c6d2,
+      0x3c3f0f33, 0x3c3d0d31, 0x8c0e8e82, 0x98188890,
+      0x28280820, 0x4c0e4e42, 0xf436c6f2, 0x3c3e0e32,
+      0xa42585a1, 0xf839c9f1, 0x0c0d0d01, 0xdc1fcfd3,
+      0xd818c8d0, 0x282b0b23, 0x64264662, 0x783a4a72,
+      0x24270723, 0x2c2f0f23, 0xf031c1f1, 0x70324272,
+      0x40024242, 0xd414c4d0, 0x40014141, 0xc000c0c0,
+      0x70334373, 0x64274763, 0xac2c8ca0, 0x880b8b83,
+      0xf437c7f3, 0xac2d8da1, 0x80008080, 0x1c1f0f13,
+      0xc80acac2, 0x2c2c0c20, 0xa82a8aa2, 0x34340430,
+      0xd012c2d2, 0x080b0b03, 0xec2ecee2, 0xe829c9e1,
+      0x5c1d4d51, 0x94148490, 0x18180810, 0xf838c8f0,
+      0x54174753, 0xac2e8ea2, 0x08080800, 0xc405c5c1,
+      0x10130313, 0xcc0dcdc1, 0x84068682, 0xb83989b1,
+      0xfc3fcff3, 0x7c3d4d71, 0xc001c1c1, 0x30310131,
+      0xf435c5f1, 0x880a8a82, 0x682a4a62, 0xb03181b1,
+      0xd011c1d1, 0x20200020, 0xd417c7d3, 0x00020202,
+      0x20220222, 0x04040400, 0x68284860, 0x70314171,
+      0x04070703, 0xd81bcbd3, 0x9c1d8d91, 0x98198991,
+      0x60214161, 0xbc3e8eb2, 0xe426c6e2, 0x58194951,
+      0xdc1dcdd1, 0x50114151, 0x90108090, 0xdc1cccd0,
+      0x981a8a92, 0xa02383a3, 0xa82b8ba3, 0xd010c0d0,
+      0x80018181, 0x0c0f0f03, 0x44074743, 0x181a0a12,
+      0xe023c3e3, 0xec2ccce0, 0x8c0d8d81, 0xbc3f8fb3,
+      0x94168692, 0x783b4b73, 0x5c1c4c50, 0xa02282a2,
+      0xa02181a1, 0x60234363, 0x20230323, 0x4c0d4d41,
+      0xc808c8c0, 0x9c1e8e92, 0x9c1c8c90, 0x383a0a32,
+      0x0c0c0c00, 0x2c2e0e22, 0xb83a8ab2, 0x6c2e4e62,
+      0x9c1f8f93, 0x581a4a52, 0xf032c2f2, 0x90128292,
+      0xf033c3f3, 0x48094941, 0x78384870, 0xcc0cccc0,
+      0x14150511, 0xf83bcbf3, 0x70304070, 0x74354571,
+      0x7c3f4f73, 0x34350531, 0x10100010, 0x00030303,
+      0x64244460, 0x6c2d4d61, 0xc406c6c2, 0x74344470,
+      0xd415c5d1, 0xb43484b0, 0xe82acae2, 0x08090901,
+      0x74364672, 0x18190911, 0xfc3ecef2, 0x40004040,
+      0x10120212, 0xe020c0e0, 0xbc3d8db1, 0x04050501,
+      0xf83acaf2, 0x00010101, 0xf030c0f0, 0x282a0a22,
+      0x5c1e4e52, 0xa82989a1, 0x54164652, 0x40034343,
+      0x84058581, 0x14140410, 0x88098981, 0x981b8b93,
+      0xb03080b0, 0xe425c5e1, 0x48084840, 0x78394971,
+      0x94178793, 0xfc3cccf0, 0x1c1e0e12, 0x80028282,
+      0x20210121, 0x8c0c8c80, 0x181b0b13, 0x5c1f4f53,
+      0x74374773, 0x54144450, 0xb03282b2, 0x1c1d0d11,
+      0x24250521, 0x4c0f4f43, 0x00000000, 0x44064642,
+      0xec2dcde1, 0x58184850, 0x50124252, 0xe82bcbe3,
+      0x7c3e4e72, 0xd81acad2, 0xc809c9c1, 0xfc3dcdf1,
+      0x30300030, 0x94158591, 0x64254561, 0x3c3c0c30,
+      0xb43686b2, 0xe424c4e0, 0xb83b8bb3, 0x7c3c4c70,
+      0x0c0e0e02, 0x50104050, 0x38390931, 0x24260622,
+      0x30320232, 0x84048480, 0x68294961, 0x90138393,
+      0x34370733, 0xe427c7e3, 0x24240420, 0xa42484a0,
+      0xc80bcbc3, 0x50134353, 0x080a0a02, 0x84078783,
+      0xd819c9d1, 0x4c0c4c40, 0x80038383, 0x8c0f8f83,
+      0xcc0ecec2, 0x383b0b33, 0x480a4a42, 0xb43787b3
+    },
+    { 0xa1a82989, 0x81840585, 0xd2d416c6, 0xd3d013c3,
+      0x50541444, 0x111c1d0d, 0xa0ac2c8c, 0x21242505,
+      0x515c1d4d, 0x43400343, 0x10181808, 0x121c1e0e,
+      0x51501141, 0xf0fc3ccc, 0xc2c80aca, 0x63602343,
+      0x20282808, 0x40440444, 0x20202000, 0x919c1d8d,
+      0xe0e020c0, 0xe2e022c2, 0xc0c808c8, 0x13141707,
+      0xa1a42585, 0x838c0f8f, 0x03000303, 0x73783b4b,
+      0xb3b83b8b, 0x13101303, 0xd2d012c2, 0xe2ec2ece,
+      0x70703040, 0x808c0c8c, 0x333c3f0f, 0xa0a82888,
+      0x32303202, 0xd1dc1dcd, 0xf2f436c6, 0x70743444,
+      0xe0ec2ccc, 0x91941585, 0x03080b0b, 0x53541747,
+      0x505c1c4c, 0x53581b4b, 0xb1bc3d8d, 0x01000101,
+      0x20242404, 0x101c1c0c, 0x73703343, 0x90981888,
+      0x10101000, 0xc0cc0ccc, 0xf2f032c2, 0xd1d819c9,
+      0x202c2c0c, 0xe3e427c7, 0x72703242, 0x83800383,
+      0x93981b8b, 0xd1d011c1, 0x82840686, 0xc1c809c9,
+      0x60602040, 0x50501040, 0xa3a02383, 0xe3e82bcb,
+      0x010c0d0d, 0xb2b43686, 0x929c1e8e, 0x434c0f4f,
+      0xb3b43787, 0x52581a4a, 0xc2c406c6, 0x70783848,
+      0xa2a42686, 0x12101202, 0xa3ac2f8f, 0xd1d415c5,
+      0x61602141, 0xc3c003c3, 0xb0b43484, 0x41400141,
+      0x52501242, 0x717c3d4d, 0x818c0d8d, 0x00080808,
+      0x131c1f0f, 0x91981989, 0x00000000, 0x11181909,
+      0x00040404, 0x53501343, 0xf3f437c7, 0xe1e021c1,
+      0xf1fc3dcd, 0x72743646, 0x232c2f0f, 0x23242707,
+      0xb0b03080, 0x83880b8b, 0x020c0e0e, 0xa3a82b8b,
+      0xa2a02282, 0x626c2e4e, 0x93901383, 0x414c0d4d,
+      0x61682949, 0x707c3c4c, 0x01080909, 0x02080a0a,
+      0xb3bc3f8f, 0xe3ec2fcf, 0xf3f033c3, 0xc1c405c5,
+      0x83840787, 0x10141404, 0xf2fc3ece, 0x60642444,
+      0xd2dc1ece, 0x222c2e0e, 0x43480b4b, 0x12181a0a,
+      0x02040606, 0x21202101, 0x63682b4b, 0x62642646,
+      0x02000202, 0xf1f435c5, 0x92901282, 0x82880a8a,
+      0x000c0c0c, 0xb3b03383, 0x727c3e4e, 0xd0d010c0,
+      0x72783a4a, 0x43440747, 0x92941686, 0xe1e425c5,
+      0x22242606, 0x80800080, 0xa1ac2d8d, 0xd3dc1fcf,
+      0xa1a02181, 0x30303000, 0x33343707, 0xa2ac2e8e,
+      0x32343606, 0x11141505, 0x22202202, 0x30383808,
+      0xf0f434c4, 0xa3a42787, 0x41440545, 0x404c0c4c,
+      0x81800181, 0xe1e829c9, 0x80840484, 0x93941787,
+      0x31343505, 0xc3c80bcb, 0xc2cc0ece, 0x303c3c0c,
+      0x71703141, 0x11101101, 0xc3c407c7, 0x81880989,
+      0x71743545, 0xf3f83bcb, 0xd2d81aca, 0xf0f838c8,
+      0x90941484, 0x51581949, 0x82800282, 0xc0c404c4,
+      0xf3fc3fcf, 0x41480949, 0x31383909, 0x63642747,
+      0xc0c000c0, 0xc3cc0fcf, 0xd3d417c7, 0xb0b83888,
+      0x030c0f0f, 0x828c0e8e, 0x42400242, 0x23202303,
+      0x91901181, 0x606c2c4c, 0xd3d81bcb, 0xa0a42484,
+      0x30343404, 0xf1f031c1, 0x40480848, 0xc2c002c2,
+      0x636c2f4f, 0x313c3d0d, 0x212c2d0d, 0x40400040,
+      0xb2bc3e8e, 0x323c3e0e, 0xb0bc3c8c, 0xc1c001c1,
+      0xa2a82a8a, 0xb2b83a8a, 0x424c0e4e, 0x51541545,
+      0x33383b0b, 0xd0dc1ccc, 0x60682848, 0x737c3f4f,
+      0x909c1c8c, 0xd0d818c8, 0x42480a4a, 0x52541646,
+      0x73743747, 0xa0a02080, 0xe1ec2dcd, 0x42440646,
+      0xb1b43585, 0x23282b0b, 0x61642545, 0xf2f83aca,
+      0xe3e023c3, 0xb1b83989, 0xb1b03181, 0x939c1f8f,
+      0x525c1e4e, 0xf1f839c9, 0xe2e426c6, 0xb2b03282,
+      0x31303101, 0xe2e82aca, 0x616c2d4d, 0x535c1f4f,
+      0xe0e424c4, 0xf0f030c0, 0xc1cc0dcd, 0x80880888,
+      0x12141606, 0x32383a0a, 0x50581848, 0xd0d414c4,
+      0x62602242, 0x21282909, 0x03040707, 0x33303303,
+      0xe0e828c8, 0x13181b0b, 0x01040505, 0x71783949,
+      0x90901080, 0x62682a4a, 0x22282a0a, 0x92981a8a
+    },
+    { 0x08303838, 0xc8e0e828, 0x0d212c2d, 0x86a2a426,
+      0xcfc3cc0f, 0xced2dc1e, 0x83b3b033, 0x88b0b838,
+      0x8fa3ac2f, 0x40606020, 0x45515415, 0xc7c3c407,
+      0x44404404, 0x4f636c2f, 0x4b63682b, 0x4b53581b,
+      0xc3c3c003, 0x42626022, 0x03333033, 0x85b1b435,
+      0x09212829, 0x80a0a020, 0xc2e2e022, 0x87a3a427,
+      0xc3d3d013, 0x81919011, 0x01111011, 0x06020406,
+      0x0c101c1c, 0x8cb0bc3c, 0x06323436, 0x4b43480b,
+      0xcfe3ec2f, 0x88808808, 0x4c606c2c, 0x88a0a828,
+      0x07131417, 0xc4c0c404, 0x06121416, 0xc4f0f434,
+      0xc2c2c002, 0x45414405, 0xc1e1e021, 0xc6d2d416,
+      0x0f333c3f, 0x0d313c3d, 0x8e828c0e, 0x88909818,
+      0x08202828, 0x4e424c0e, 0xc6f2f436, 0x0e323c3e,
+      0x85a1a425, 0xc9f1f839, 0x0d010c0d, 0xcfd3dc1f,
+      0xc8d0d818, 0x0b23282b, 0x46626426, 0x4a72783a,
+      0x07232427, 0x0f232c2f, 0xc1f1f031, 0x42727032,
+      0x42424002, 0xc4d0d414, 0x41414001, 0xc0c0c000,
+      0x43737033, 0x47636427, 0x8ca0ac2c, 0x8b83880b,
+      0xc7f3f437, 0x8da1ac2d, 0x80808000, 0x0f131c1f,
+      0xcac2c80a, 0x0c202c2c, 0x8aa2a82a, 0x04303434,
+      0xc2d2d012, 0x0b03080b, 0xcee2ec2e, 0xc9e1e829,
+      0x4d515c1d, 0x84909414, 0x08101818, 0xc8f0f838,
+      0x47535417, 0x8ea2ac2e, 0x08000808, 0xc5c1c405,
+      0x03131013, 0xcdc1cc0d, 0x86828406, 0x89b1b839,
+      0xcff3fc3f, 0x4d717c3d, 0xc1c1c001, 0x01313031,
+      0xc5f1f435, 0x8a82880a, 0x4a62682a, 0x81b1b031,
+      0xc1d1d011, 0x00202020, 0xc7d3d417, 0x02020002,
+      0x02222022, 0x04000404, 0x48606828, 0x41717031,
+      0x07030407, 0xcbd3d81b, 0x8d919c1d, 0x89919819,
+      0x41616021, 0x8eb2bc3e, 0xc6e2e426, 0x49515819,
+      0xcdd1dc1d, 0x41515011, 0x80909010, 0xccd0dc1c,
+      0x8a92981a, 0x83a3a023, 0x8ba3a82b, 0xc0d0d010,
+      0x81818001, 0x0f030c0f, 0x47434407, 0x0a12181a,
+      0xc3e3e023, 0xcce0ec2c, 0x8d818c0d, 0x8fb3bc3f,
+      0x86929416, 0x4b73783b, 0x4c505c1c, 0x82a2a022,
+      0x81a1a021, 0x43636023, 0x03232023, 0x4d414c0d,
+      0xc8c0c808, 0x8e929c1e, 0x8c909c1c, 0x0a32383a,
+      0x0c000c0c, 0x0e222c2e, 0x8ab2b83a, 0x4e626c2e,
+      0x8f939c1f, 0x4a52581a, 0xc2f2f032, 0x82929012,
+      0xc3f3f033, 0x49414809, 0x48707838, 0xccc0cc0c,
+      0x05111415, 0xcbf3f83b, 0x40707030, 0x45717435,
+      0x4f737c3f, 0x05313435, 0x00101010, 0x03030003,
+      0x44606424, 0x4d616c2d, 0xc6c2c406, 0x44707434,
+      0xc5d1d415, 0x84b0b434, 0xcae2e82a, 0x09010809,
+      0x46727436, 0x09111819, 0xcef2fc3e, 0x40404000,
+      0x02121012, 0xc0e0e020, 0x8db1bc3d, 0x05010405,
+      0xcaf2f83a, 0x01010001, 0xc0f0f030, 0x0a22282a,
+      0x4e525c1e, 0x89a1a829, 0x46525416, 0x43434003,
+      0x85818405, 0x04101414, 0x89818809, 0x8b93981b,
+      0x80b0b030, 0xc5e1e425, 0x48404808, 0x49717839,
+      0x87939417, 0xccf0fc3c, 0x0e121c1e, 0x82828002,
+      0x01212021, 0x8c808c0c, 0x0b13181b, 0x4f535c1f,
+      0x47737437, 0x44505414, 0x82b2b032, 0x0d111c1d,
+      0x05212425, 0x4f434c0f, 0x00000000, 0x46424406,
+      0xcde1ec2d, 0x48505818, 0x42525012, 0xcbe3e82b,
+      0x4e727c3e, 0xcad2d81a, 0xc9c1c809, 0xcdf1fc3d,
+      0x00303030, 0x85919415, 0x45616425, 0x0c303c3c,
+      0x86b2b436, 0xc4e0e424, 0x8bb3b83b, 0x4c707c3c,
+      0x0e020c0e, 0x40505010, 0x09313839, 0x06222426,
+      0x02323032, 0x84808404, 0x49616829, 0x83939013,
+      0x07333437, 0xc7e3e427, 0x04202424, 0x84a0a424,
+      0xcbc3c80b, 0x43535013, 0x0a02080a, 0x87838407,
+      0xc9d1d819, 0x4c404c0c, 0x83838003, 0x8f838c0f,
+      0xcec2cc0e, 0x0b33383b, 0x4a42480a, 0x87b3b437
+    }
+};
+
+#else
+
+/* on x86_64 >5x size reduction at 40% performance penalty */
+static const unsigned char SEED_Sbox[2][256] = {
+{
+      0xA9, 0x85, 0xD6, 0xD3, 0x54, 0x1D, 0xAC, 0x25,
+      0x5D, 0x43, 0x18, 0x1E, 0x51, 0xFC, 0xCA, 0x63,
+      0x28, 0x44, 0x20, 0x9D, 0xE0, 0xE2, 0xC8, 0x17,
+      0xA5, 0x8F, 0x03, 0x7B, 0xBB, 0x13, 0xD2, 0xEE,
+      0x70, 0x8C, 0x3F, 0xA8, 0x32, 0xDD, 0xF6, 0x74,
+      0xEC, 0x95, 0x0B, 0x57, 0x5C, 0x5B, 0xBD, 0x01,
+      0x24, 0x1C, 0x73, 0x98, 0x10, 0xCC, 0xF2, 0xD9,
+      0x2C, 0xE7, 0x72, 0x83, 0x9B, 0xD1, 0x86, 0xC9,
+      0x60, 0x50, 0xA3, 0xEB, 0x0D, 0xB6, 0x9E, 0x4F,
+      0xB7, 0x5A, 0xC6, 0x78, 0xA6, 0x12, 0xAF, 0xD5,
+      0x61, 0xC3, 0xB4, 0x41, 0x52, 0x7D, 0x8D, 0x08,
+      0x1F, 0x99, 0x00, 0x19, 0x04, 0x53, 0xF7, 0xE1,
+      0xFD, 0x76, 0x2F, 0x27, 0xB0, 0x8B, 0x0E, 0xAB,
+      0xA2, 0x6E, 0x93, 0x4D, 0x69, 0x7C, 0x09, 0x0A,
+      0xBF, 0xEF, 0xF3, 0xC5, 0x87, 0x14, 0xFE, 0x64,
+      0xDE, 0x2E, 0x4B, 0x1A, 0x06, 0x21, 0x6B, 0x66,
+      0x02, 0xF5, 0x92, 0x8A, 0x0C, 0xB3, 0x7E, 0xD0,
+      0x7A, 0x47, 0x96, 0xE5, 0x26, 0x80, 0xAD, 0xDF,
+      0xA1, 0x30, 0x37, 0xAE, 0x36, 0x15, 0x22, 0x38,
+      0xF4, 0xA7, 0x45, 0x4C, 0x81, 0xE9, 0x84, 0x97,
+      0x35, 0xCB, 0xCE, 0x3C, 0x71, 0x11, 0xC7, 0x89,
+      0x75, 0xFB, 0xDA, 0xF8, 0x94, 0x59, 0x82, 0xC4,
+      0xFF, 0x49, 0x39, 0x67, 0xC0, 0xCF, 0xD7, 0xB8,
+      0x0F, 0x8E, 0x42, 0x23, 0x91, 0x6C, 0xDB, 0xA4,
+      0x34, 0xF1, 0x48, 0xC2, 0x6F, 0x3D, 0x2D, 0x40,
+      0xBE, 0x3E, 0xBC, 0xC1, 0xAA, 0xBA, 0x4E, 0x55,
+      0x3B, 0xDC, 0x68, 0x7F, 0x9C, 0xD8, 0x4A, 0x56,
+      0x77, 0xA0, 0xED, 0x46, 0xB5, 0x2B, 0x65, 0xFA,
+      0xE3, 0xB9, 0xB1, 0x9F, 0x5E, 0xF9, 0xE6, 0xB2,
+      0x31, 0xEA, 0x6D, 0x5F, 0xE4, 0xF0, 0xCD, 0x88,
+      0x16, 0x3A, 0x58, 0xD4, 0x62, 0x29, 0x07, 0x33,
+      0xE8, 0x1B, 0x05, 0x79, 0x90, 0x6A, 0x2A, 0x9A
+    },
+    {
+      0x38, 0xE8, 0x2D, 0xA6, 0xCF, 0xDE, 0xB3, 0xB8,
+      0xAF, 0x60, 0x55, 0xC7, 0x44, 0x6F, 0x6B, 0x5B,
+      0xC3, 0x62, 0x33, 0xB5, 0x29, 0xA0, 0xE2, 0xA7,
+      0xD3, 0x91, 0x11, 0x06, 0x1C, 0xBC, 0x36, 0x4B,
+      0xEF, 0x88, 0x6C, 0xA8, 0x17, 0xC4, 0x16, 0xF4,
+      0xC2, 0x45, 0xE1, 0xD6, 0x3F, 0x3D, 0x8E, 0x98,
+      0x28, 0x4E, 0xF6, 0x3E, 0xA5, 0xF9, 0x0D, 0xDF,
+      0xD8, 0x2B, 0x66, 0x7A, 0x27, 0x2F, 0xF1, 0x72,
+      0x42, 0xD4, 0x41, 0xC0, 0x73, 0x67, 0xAC, 0x8B,
+      0xF7, 0xAD, 0x80, 0x1F, 0xCA, 0x2C, 0xAA, 0x34,
+      0xD2, 0x0B, 0xEE, 0xE9, 0x5D, 0x94, 0x18, 0xF8,
+      0x57, 0xAE, 0x08, 0xC5, 0x13, 0xCD, 0x86, 0xB9,
+      0xFF, 0x7D, 0xC1, 0x31, 0xF5, 0x8A, 0x6A, 0xB1,
+      0xD1, 0x20, 0xD7, 0x02, 0x22, 0x04, 0x68, 0x71,
+      0x07, 0xDB, 0x9D, 0x99, 0x61, 0xBE, 0xE6, 0x59,
+      0xDD, 0x51, 0x90, 0xDC, 0x9A, 0xA3, 0xAB, 0xD0,
+      0x81, 0x0F, 0x47, 0x1A, 0xE3, 0xEC, 0x8D, 0xBF,
+      0x96, 0x7B, 0x5C, 0xA2, 0xA1, 0x63, 0x23, 0x4D,
+      0xC8, 0x9E, 0x9C, 0x3A, 0x0C, 0x2E, 0xBA, 0x6E,
+      0x9F, 0x5A, 0xF2, 0x92, 0xF3, 0x49, 0x78, 0xCC,
+      0x15, 0xFB, 0x70, 0x75, 0x7F, 0x35, 0x10, 0x03,
+      0x64, 0x6D, 0xC6, 0x74, 0xD5, 0xB4, 0xEA, 0x09,
+      0x76, 0x19, 0xFE, 0x40, 0x12, 0xE0, 0xBD, 0x05,
+      0xFA, 0x01, 0xF0, 0x2A, 0x5E, 0xA9, 0x56, 0x43,
+      0x85, 0x14, 0x89, 0x9B, 0xB0, 0xE5, 0x48, 0x79,
+      0x97, 0xFC, 0x1E, 0x82, 0x21, 0x8C, 0x1B, 0x5F,
+      0x77, 0x54, 0xB2, 0x1D, 0x25, 0x4F, 0x00, 0x46,
+      0xED, 0x58, 0x52, 0xEB, 0x7E, 0xDA, 0xC9, 0xFD,
+      0x30, 0x95, 0x65, 0x3C, 0xB6, 0xE4, 0xBB, 0x7C,
+      0x0E, 0x50, 0x39, 0x26, 0x32, 0x84, 0x69, 0x93,
+      0x37, 0xE7, 0x24, 0xA4, 0xCB, 0x53, 0x0A, 0x87,
+      0xD9, 0x4C, 0x83, 0x8F, 0xCE, 0x3B, 0x4A, 0xB7
+    }
+};
+
+static unsigned int G_FUNC(unsigned int v)
+{
+    unsigned int s0, s1, s2, s3, ret;
+
+    s0 = SEED_Sbox[0][(unsigned char)      (v) & 0xff];
+    s1 = SEED_Sbox[1][(unsigned char)((v)>> 8) & 0xff];
+    s2 = SEED_Sbox[0][(unsigned char)((v)>>16) & 0xff];
+    s3 = SEED_Sbox[1][(unsigned char)((v)>>24) & 0xff];
+
+    ret  = ((s0 & 0xFC) ^ (s1 & 0xF3) ^ (s2 & 0xCF) ^ (s3 & 0x3F));
+    ret |= ((s0 & 0xF3) ^ (s1 & 0xCF) ^ (s2 & 0x3F) ^ (s3 & 0xFC)) << 8;
+    ret |= ((s0 & 0xCF) ^ (s1 & 0x3F) ^ (s2 & 0xFC) ^ (s3 & 0xF3)) << 16;
+    ret |= ((s0 & 0x3F) ^ (s1 & 0xFC) ^ (s2 & 0xF3) ^ (s3 & 0xCF)) << 24;
+
+    return ret;
+}
+# endif
+
+/* key schedule constants - golden ratio */
+# define KC0     0x9e3779b9
+# define KC1     0x3c6ef373
+# define KC2     0x78dde6e6
+# define KC3     0xf1bbcdcc
+# define KC4     0xe3779b99
+# define KC5     0xc6ef3733
+# define KC6     0x8dde6e67
+# define KC7     0x1bbcdccf
+# define KC8     0x3779b99e
+# define KC9     0x6ef3733c
+# define KC10    0xdde6e678
+# define KC11    0xbbcdccf1
+# define KC12    0x779b99e3
+# define KC13    0xef3733c6
+# define KC14    0xde6e678d
+# define KC15    0xbcdccf1b
+
+# if defined(OPENSSL_SMALL_FOOTPRINT)
+static const seed_word KC[] = {
+    KC0, KC1, KC2, KC3, KC4, KC5, KC6, KC7,
+    KC8, KC9, KC10, KC11, KC12, KC13, KC14, KC15
+};
+# endif
+
+void SEED_set_key(const unsigned char rawkey[SEED_KEY_LENGTH],
+                  SEED_KEY_SCHEDULE *ks)
+{
+    seed_word x1, x2, x3, x4;
+    seed_word t0, t1;
+
+    char2word(rawkey, x1);
+    char2word(rawkey + 4, x2);
+    char2word(rawkey + 8, x3);
+    char2word(rawkey + 12, x4);
+
+    t0 = (x1 + x3 - KC0) & 0xffffffff;
+    t1 = (x2 - x4 + KC0) & 0xffffffff;
+    KEYUPDATE_TEMP(t0, t1, &ks->data[0]);
+    KEYSCHEDULE_UPDATE1(t0, t1, x1, x2, x3, x4, KC1);
+    KEYUPDATE_TEMP(t0, t1, &ks->data[2]);
+
+# if !defined(OPENSSL_SMALL_FOOTPRINT)
+    KEYSCHEDULE_UPDATE0(t0, t1, x1, x2, x3, x4, KC2);
+    KEYUPDATE_TEMP(t0, t1, &ks->data[4]);
+    KEYSCHEDULE_UPDATE1(t0, t1, x1, x2, x3, x4, KC3);
+    KEYUPDATE_TEMP(t0, t1, &ks->data[6]);
+    KEYSCHEDULE_UPDATE0(t0, t1, x1, x2, x3, x4, KC4);
+    KEYUPDATE_TEMP(t0, t1, &ks->data[8]);
+    KEYSCHEDULE_UPDATE1(t0, t1, x1, x2, x3, x4, KC5);
+    KEYUPDATE_TEMP(t0, t1, &ks->data[10]);
+    KEYSCHEDULE_UPDATE0(t0, t1, x1, x2, x3, x4, KC6);
+    KEYUPDATE_TEMP(t0, t1, &ks->data[12]);
+    KEYSCHEDULE_UPDATE1(t0, t1, x1, x2, x3, x4, KC7);
+    KEYUPDATE_TEMP(t0, t1, &ks->data[14]);
+    KEYSCHEDULE_UPDATE0(t0, t1, x1, x2, x3, x4, KC8);
+    KEYUPDATE_TEMP(t0, t1, &ks->data[16]);
+    KEYSCHEDULE_UPDATE1(t0, t1, x1, x2, x3, x4, KC9);
+    KEYUPDATE_TEMP(t0, t1, &ks->data[18]);
+    KEYSCHEDULE_UPDATE0(t0, t1, x1, x2, x3, x4, KC10);
+    KEYUPDATE_TEMP(t0, t1, &ks->data[20]);
+    KEYSCHEDULE_UPDATE1(t0, t1, x1, x2, x3, x4, KC11);
+    KEYUPDATE_TEMP(t0, t1, &ks->data[22]);
+    KEYSCHEDULE_UPDATE0(t0, t1, x1, x2, x3, x4, KC12);
+    KEYUPDATE_TEMP(t0, t1, &ks->data[24]);
+    KEYSCHEDULE_UPDATE1(t0, t1, x1, x2, x3, x4, KC13);
+    KEYUPDATE_TEMP(t0, t1, &ks->data[26]);
+    KEYSCHEDULE_UPDATE0(t0, t1, x1, x2, x3, x4, KC14);
+    KEYUPDATE_TEMP(t0, t1, &ks->data[28]);
+    KEYSCHEDULE_UPDATE1(t0, t1, x1, x2, x3, x4, KC15);
+    KEYUPDATE_TEMP(t0, t1, &ks->data[30]);
+# else
+    {
+        int i;
+        for (i = 2; i < 16; i += 2) {
+            KEYSCHEDULE_UPDATE0(t0, t1, x1, x2, x3, x4, KC[i]);
+            KEYUPDATE_TEMP(t0, t1, &ks->data[i * 2]);
+            KEYSCHEDULE_UPDATE1(t0, t1, x1, x2, x3, x4, KC[i + 1]);
+            KEYUPDATE_TEMP(t0, t1, &ks->data[i * 2 + 2]);
+        }
+    }
+# endif
+}
+
+void SEED_encrypt(const unsigned char s[SEED_BLOCK_SIZE],
+                  unsigned char d[SEED_BLOCK_SIZE],
+                  const SEED_KEY_SCHEDULE *ks)
+{
+    seed_word x1, x2, x3, x4;
+    seed_word t0, t1;
+
+    char2word(s, x1);
+    char2word(s + 4, x2);
+    char2word(s + 8, x3);
+    char2word(s + 12, x4);
+
+# if !defined(OPENSSL_SMALL_FOOTPRINT)
+    E_SEED(t0, t1, x1, x2, x3, x4, 0);
+    E_SEED(t0, t1, x3, x4, x1, x2, 2);
+    E_SEED(t0, t1, x1, x2, x3, x4, 4);
+    E_SEED(t0, t1, x3, x4, x1, x2, 6);
+    E_SEED(t0, t1, x1, x2, x3, x4, 8);
+    E_SEED(t0, t1, x3, x4, x1, x2, 10);
+    E_SEED(t0, t1, x1, x2, x3, x4, 12);
+    E_SEED(t0, t1, x3, x4, x1, x2, 14);
+    E_SEED(t0, t1, x1, x2, x3, x4, 16);
+    E_SEED(t0, t1, x3, x4, x1, x2, 18);
+    E_SEED(t0, t1, x1, x2, x3, x4, 20);
+    E_SEED(t0, t1, x3, x4, x1, x2, 22);
+    E_SEED(t0, t1, x1, x2, x3, x4, 24);
+    E_SEED(t0, t1, x3, x4, x1, x2, 26);
+    E_SEED(t0, t1, x1, x2, x3, x4, 28);
+    E_SEED(t0, t1, x3, x4, x1, x2, 30);
+# else
+    {
+        int i;
+        for (i = 0; i < 30; i += 4) {
+            E_SEED(t0, t1, x1, x2, x3, x4, i);
+            E_SEED(t0, t1, x3, x4, x1, x2, i + 2);
+        }
+    }
+# endif
+
+    word2char(x3, d);
+    word2char(x4, d + 4);
+    word2char(x1, d + 8);
+    word2char(x2, d + 12);
+}
+
+void SEED_decrypt(const unsigned char s[SEED_BLOCK_SIZE],
+                  unsigned char d[SEED_BLOCK_SIZE],
+                  const SEED_KEY_SCHEDULE *ks)
+{
+    seed_word x1, x2, x3, x4;
+    seed_word t0, t1;
+
+    char2word(s, x1);
+    char2word(s + 4, x2);
+    char2word(s + 8, x3);
+    char2word(s + 12, x4);
+
+# if !defined(OPENSSL_SMALL_FOOTPRINT)
+    E_SEED(t0, t1, x1, x2, x3, x4, 30);
+    E_SEED(t0, t1, x3, x4, x1, x2, 28);
+    E_SEED(t0, t1, x1, x2, x3, x4, 26);
+    E_SEED(t0, t1, x3, x4, x1, x2, 24);
+    E_SEED(t0, t1, x1, x2, x3, x4, 22);
+    E_SEED(t0, t1, x3, x4, x1, x2, 20);
+    E_SEED(t0, t1, x1, x2, x3, x4, 18);
+    E_SEED(t0, t1, x3, x4, x1, x2, 16);
+    E_SEED(t0, t1, x1, x2, x3, x4, 14);
+    E_SEED(t0, t1, x3, x4, x1, x2, 12);
+    E_SEED(t0, t1, x1, x2, x3, x4, 10);
+    E_SEED(t0, t1, x3, x4, x1, x2, 8);
+    E_SEED(t0, t1, x1, x2, x3, x4, 6);
+    E_SEED(t0, t1, x3, x4, x1, x2, 4);
+    E_SEED(t0, t1, x1, x2, x3, x4, 2);
+    E_SEED(t0, t1, x3, x4, x1, x2, 0);
+# else
+    {
+        int i;
+        for (i = 30; i > 0; i -= 4) {
+            E_SEED(t0, t1, x1, x2, x3, x4, i);
+            E_SEED(t0, t1, x3, x4, x1, x2, i - 2);
+
+        }
+    }
+# endif
+
+    word2char(x3, d);
+    word2char(x4, d + 4);
+    word2char(x1, d + 8);
+    word2char(x2, d + 12);
+}
+
+#endif                          /* OPENSSL_NO_SEED */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_cbc.c b/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_cbc.c
new file mode 100644
index 000000000..c9a4fe217
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_cbc.c
@@ -0,0 +1,23 @@
+/*
+ * Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/seed.h>
+#include <openssl/modes.h>
+
+void SEED_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                      size_t len, const SEED_KEY_SCHEDULE *ks,
+                      unsigned char ivec[SEED_BLOCK_SIZE], int enc)
+{
+    if (enc)
+        CRYPTO_cbc128_encrypt(in, out, len, ks, ivec,
+                              (block128_f) SEED_encrypt);
+    else
+        CRYPTO_cbc128_decrypt(in, out, len, ks, ivec,
+                              (block128_f) SEED_decrypt);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_cfb.c b/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_cfb.c
new file mode 100644
index 000000000..2aee1ffe3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_cfb.c
@@ -0,0 +1,20 @@
+/*
+ * Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/seed.h>
+#include <openssl/modes.h>
+
+void SEED_cfb128_encrypt(const unsigned char *in, unsigned char *out,
+                         size_t len, const SEED_KEY_SCHEDULE *ks,
+                         unsigned char ivec[SEED_BLOCK_SIZE], int *num,
+                         int enc)
+{
+    CRYPTO_cfb128_encrypt(in, out, len, ks, ivec, num, enc,
+                          (block128_f) SEED_encrypt);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_ecb.c b/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_ecb.c
new file mode 100644
index 000000000..b6e301ccd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_ecb.c
@@ -0,0 +1,19 @@
+/*
+ * Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/seed.h>
+
+void SEED_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                      const SEED_KEY_SCHEDULE *ks, int enc)
+{
+    if (enc)
+        SEED_encrypt(in, out, ks);
+    else
+        SEED_decrypt(in, out, ks);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_locl.h
new file mode 100644
index 000000000..ac2950d97
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_locl.h
@@ -0,0 +1,112 @@
+/*
+ * Copyright 2007-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Copyright (c) 2007 KISA(Korea Information Security Agency). All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Neither the name of author nor the names of its contributors may
+ *    be used to endorse or promote products derived from this software
+ *    without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ */
+#ifndef HEADER_SEED_LOCL_H
+# define HEADER_SEED_LOCL_H
+
+# include "openssl/e_os2.h"
+# include <openssl/seed.h>
+
+# ifdef SEED_LONG               /* need 32-bit type */
+typedef unsigned long seed_word;
+# else
+typedef unsigned int seed_word;
+# endif
+
+
+# define char2word(c, i)  \
+        (i) = ((((seed_word)(c)[0]) << 24) | (((seed_word)(c)[1]) << 16) | (((seed_word)(c)[2]) << 8) | ((seed_word)(c)[3]))
+
+# define word2char(l, c)  \
+        *((c)+0) = (unsigned char)((l)>>24) & 0xff; \
+        *((c)+1) = (unsigned char)((l)>>16) & 0xff; \
+        *((c)+2) = (unsigned char)((l)>> 8) & 0xff; \
+        *((c)+3) = (unsigned char)((l))     & 0xff
+
+# define KEYSCHEDULE_UPDATE0(T0, T1, X1, X2, X3, X4, KC)  \
+        (T0) = (X3);                                     \
+        (X3) = (((X3)<<8) ^ ((X4)>>24)) & 0xffffffff;    \
+        (X4) = (((X4)<<8) ^ ((T0)>>24)) & 0xffffffff;    \
+        (T0) = ((X1) + (X3) - (KC))     & 0xffffffff;    \
+        (T1) = ((X2) + (KC) - (X4))     & 0xffffffff
+
+# define KEYSCHEDULE_UPDATE1(T0, T1, X1, X2, X3, X4, KC)  \
+        (T0) = (X1);                                     \
+        (X1) = (((X1)>>8) ^ ((X2)<<24)) & 0xffffffff;    \
+        (X2) = (((X2)>>8) ^ ((T0)<<24)) & 0xffffffff;    \
+        (T0) = ((X1) + (X3) - (KC))     & 0xffffffff;     \
+        (T1) = ((X2) + (KC) - (X4))     & 0xffffffff
+
+# define KEYUPDATE_TEMP(T0, T1, K)   \
+        (K)[0] = G_FUNC((T0));      \
+        (K)[1] = G_FUNC((T1))
+
+# define XOR_SEEDBLOCK(DST, SRC)      \
+        ((DST))[0] ^= ((SRC))[0];    \
+        ((DST))[1] ^= ((SRC))[1];    \
+        ((DST))[2] ^= ((SRC))[2];    \
+        ((DST))[3] ^= ((SRC))[3]
+
+# define MOV_SEEDBLOCK(DST, SRC)      \
+        ((DST))[0] = ((SRC))[0];     \
+        ((DST))[1] = ((SRC))[1];     \
+        ((DST))[2] = ((SRC))[2];     \
+        ((DST))[3] = ((SRC))[3]
+
+# define CHAR2WORD(C, I)              \
+        char2word((C),    (I)[0]);    \
+        char2word((C+4),  (I)[1]);    \
+        char2word((C+8),  (I)[2]);    \
+        char2word((C+12), (I)[3])
+
+# define WORD2CHAR(I, C)              \
+        word2char((I)[0], (C));       \
+        word2char((I)[1], (C+4));     \
+        word2char((I)[2], (C+8));     \
+        word2char((I)[3], (C+12))
+
+# define E_SEED(T0, T1, X1, X2, X3, X4, rbase)   \
+        (T0) = (X3) ^ (ks->data)[(rbase)];       \
+        (T1) = (X4) ^ (ks->data)[(rbase)+1];     \
+        (T1) ^= (T0);                            \
+        (T1) = G_FUNC((T1));                     \
+        (T0) = ((T0) + (T1)) & 0xffffffff;       \
+        (T0) = G_FUNC((T0));                     \
+        (T1) = ((T1) + (T0)) & 0xffffffff;       \
+        (T1) = G_FUNC((T1));                     \
+        (T0) = ((T0) + (T1)) & 0xffffffff;       \
+        (X1) ^= (T0);                            \
+        (X2) ^= (T1)
+
+#endif                          /* HEADER_SEED_LOCL_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_ofb.c b/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_ofb.c
new file mode 100644
index 000000000..b45554058
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/seed/seed_ofb.c
@@ -0,0 +1,19 @@
+/*
+ * Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/seed.h>
+#include <openssl/modes.h>
+
+void SEED_ofb128_encrypt(const unsigned char *in, unsigned char *out,
+                         size_t len, const SEED_KEY_SCHEDULE *ks,
+                         unsigned char ivec[SEED_BLOCK_SIZE], int *num)
+{
+    CRYPTO_ofb128_encrypt(in, out, len, ks, ivec, num,
+                          (block128_f) SEED_encrypt);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-armv4.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-armv4.pl
new file mode 100755
index 000000000..8bf665c8b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-armv4.pl
@@ -0,0 +1,1606 @@
+#!/usr/bin/env perl
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# Keccak-1600 for ARMv4.
+#
+# June 2017.
+#
+# Non-NEON code is KECCAK_1X variant (see sha/keccak1600.c) with bit
+# interleaving. How does it compare to Keccak Code Package? It's as
+# fast, but several times smaller, and is endian- and ISA-neutral. ISA
+# neutrality means that minimum ISA requirement is ARMv4, yet it can
+# be assembled even as Thumb-2. NEON code path is KECCAK_1X_ALT with
+# register layout taken from Keccak Code Package. It's also as fast,
+# in fact faster by 10-15% on some processors, and endian-neutral.
+#
+# August 2017.
+#
+# Switch to KECCAK_2X variant for non-NEON code and merge almost 1/2
+# of rotate instructions with logical ones. This resulted in ~10%
+# improvement on most processors. Switch to KECCAK_2X effectively
+# minimizes re-loads from temporary storage, and merged rotates just
+# eliminate corresponding instructions. As for latter. When examining
+# code you'll notice commented ror instructions. These are eliminated
+# ones, and you should trace destination register below to see what's
+# going on. Just in case, why not all rotates are eliminated. Trouble
+# is that you have operations that require both inputs to be rotated,
+# e.g. 'eor a,b>>>x,c>>>y'. This conundrum is resolved by using
+# 'eor a,b,c>>>(x-y)' and then merge-rotating 'a' in next operation
+# that takes 'a' as input. And thing is that this next operation can
+# be in next round. It's totally possible to "carry" rotate "factors"
+# to the next round, but it makes code more complex. And the last word
+# is the keyword, i.e. "almost 1/2" is kind of complexity cap [for the
+# time being]...
+#
+# Reduce per-round instruction count in Thumb-2 case by 16%. This is
+# achieved by folding ldr/str pairs to their double-word counterparts.
+# Theoretically this should have improved performance on single-issue
+# cores, such as Cortex-A5/A7, by 19%. Reality is a bit different, as
+# usual...
+#
+########################################################################
+# Numbers are cycles per processed byte. Non-NEON results account even
+# for input bit interleaving.
+#
+#		r=1088(*)   Thumb-2(**) NEON
+#
+# ARM11xx	82/+150%
+# Cortex-A5	88/+160%,   86,         36
+# Cortex-A7	78/+160%,   68,         34
+# Cortex-A8	51/+230%,   57,         30
+# Cortex-A9	53/+210%,   51,         26
+# Cortex-A15	42/+160%,   38,         18
+# Snapdragon S4	43/+210%,   38,         24
+#
+# (*)	Corresponds to SHA3-256. Percentage after slash is improvement
+#	over compiler-generated KECCAK_2X reference code.
+# (**)	Thumb-2 results for Cortex-A5/A7 are likely to apply even to
+#	Cortex-Mx, x>=3. Otherwise, non-NEON results for NEON-capable
+#	processors are presented mostly for reference purposes.
+
+$flavour = shift;
+if ($flavour=~/\w[\w\-]*\.\w+$/) { $output=$flavour; undef $flavour; }
+else { while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {} }
+
+if ($flavour && $flavour ne "void") {
+    $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+    ( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+    ( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+    die "can't locate arm-xlate.pl";
+
+    open STDOUT,"| \"$^X\" $xlate $flavour $output";
+} else {
+    open STDOUT,">$output";
+}
+
+my @C = map("r$_",(0..9));
+my @E = map("r$_",(10..12,14));
+
+########################################################################
+# Stack layout
+# ----->+-----------------------+
+#       | uint64_t A[5][5]      |
+#       | ...                   |
+# +200->+-----------------------+
+#       | uint64_t D[5]         |
+#       | ...                   |
+# +240->+-----------------------+
+#       | uint64_t T[5][5]      |
+#       | ...                   |
+# +440->+-----------------------+
+#       | saved lr              |
+# +444->+-----------------------+
+#       | loop counter          |
+# +448->+-----------------------+
+#       | ...
+
+my @A = map([ 8*$_, 8*($_+1), 8*($_+2), 8*($_+3), 8*($_+4) ], (0,5,10,15,20));
+my @D = map(8*$_, (25..29));
+my @T = map([ 8*$_, 8*($_+1), 8*($_+2), 8*($_+3), 8*($_+4) ], (30,35,40,45,50));
+
+$code.=<<___;
+#include "arm_arch.h"
+
+.text
+
+#if defined(__thumb2__)
+.syntax	unified
+.thumb
+#else
+.code	32
+#endif
+
+.type	iotas32, %object
+.align	5
+iotas32:
+	.long	0x00000001, 0x00000000
+	.long	0x00000000, 0x00000089
+	.long	0x00000000, 0x8000008b
+	.long	0x00000000, 0x80008080
+	.long	0x00000001, 0x0000008b
+	.long	0x00000001, 0x00008000
+	.long	0x00000001, 0x80008088
+	.long	0x00000001, 0x80000082
+	.long	0x00000000, 0x0000000b
+	.long	0x00000000, 0x0000000a
+	.long	0x00000001, 0x00008082
+	.long	0x00000000, 0x00008003
+	.long	0x00000001, 0x0000808b
+	.long	0x00000001, 0x8000000b
+	.long	0x00000001, 0x8000008a
+	.long	0x00000001, 0x80000081
+	.long	0x00000000, 0x80000081
+	.long	0x00000000, 0x80000008
+	.long	0x00000000, 0x00000083
+	.long	0x00000000, 0x80008003
+	.long	0x00000001, 0x80008088
+	.long	0x00000000, 0x80000088
+	.long	0x00000001, 0x00008000
+	.long	0x00000000, 0x80008082
+.size	iotas32,.-iotas32
+
+.type	KeccakF1600_int, %function
+.align	5
+KeccakF1600_int:
+	add	@C[9],sp,#$A[4][2]
+	add	@E[2],sp,#$A[0][0]
+	add	@E[0],sp,#$A[1][0]
+	ldmia	@C[9],{@C[4]-@C[9]}		@ A[4][2..4]
+KeccakF1600_enter:
+	str	lr,[sp,#440]
+	eor	@E[1],@E[1],@E[1]
+	str	@E[1],[sp,#444]
+	b	.Lround2x
+
+.align	4
+.Lround2x:
+___
+sub Round {
+my (@A,@R); (@A[0..4],@R) = @_;
+
+$code.=<<___;
+	ldmia	@E[2],{@C[0]-@C[3]}		@ A[0][0..1]
+	ldmia	@E[0],{@E[0]-@E[2],@E[3]}	@ A[1][0..1]
+#ifdef	__thumb2__
+	eor	@C[0],@C[0],@E[0]
+	eor	@C[1],@C[1],@E[1]
+	eor	@C[2],@C[2],@E[2]
+	ldrd	@E[0],@E[1],[sp,#$A[1][2]]
+	eor	@C[3],@C[3],@E[3]
+	ldrd	@E[2],@E[3],[sp,#$A[1][3]]
+	eor	@C[4],@C[4],@E[0]
+	eor	@C[5],@C[5],@E[1]
+	eor	@C[6],@C[6],@E[2]
+	ldrd	@E[0],@E[1],[sp,#$A[1][4]]
+	eor	@C[7],@C[7],@E[3]
+	ldrd	@E[2],@E[3],[sp,#$A[2][0]]
+	eor	@C[8],@C[8],@E[0]
+	eor	@C[9],@C[9],@E[1]
+	eor	@C[0],@C[0],@E[2]
+	ldrd	@E[0],@E[1],[sp,#$A[2][1]]
+	eor	@C[1],@C[1],@E[3]
+	ldrd	@E[2],@E[3],[sp,#$A[2][2]]
+	eor	@C[2],@C[2],@E[0]
+	eor	@C[3],@C[3],@E[1]
+	eor	@C[4],@C[4],@E[2]
+	ldrd	@E[0],@E[1],[sp,#$A[2][3]]
+	eor	@C[5],@C[5],@E[3]
+	ldrd	@E[2],@E[3],[sp,#$A[2][4]]
+	eor	@C[6],@C[6],@E[0]
+	eor	@C[7],@C[7],@E[1]
+	eor	@C[8],@C[8],@E[2]
+	ldrd	@E[0],@E[1],[sp,#$A[3][0]]
+	eor	@C[9],@C[9],@E[3]
+	ldrd	@E[2],@E[3],[sp,#$A[3][1]]
+	eor	@C[0],@C[0],@E[0]
+	eor	@C[1],@C[1],@E[1]
+	eor	@C[2],@C[2],@E[2]
+	ldrd	@E[0],@E[1],[sp,#$A[3][2]]
+	eor	@C[3],@C[3],@E[3]
+	ldrd	@E[2],@E[3],[sp,#$A[3][3]]
+	eor	@C[4],@C[4],@E[0]
+	eor	@C[5],@C[5],@E[1]
+	eor	@C[6],@C[6],@E[2]
+	ldrd	@E[0],@E[1],[sp,#$A[3][4]]
+	eor	@C[7],@C[7],@E[3]
+	ldrd	@E[2],@E[3],[sp,#$A[4][0]]
+	eor	@C[8],@C[8],@E[0]
+	eor	@C[9],@C[9],@E[1]
+	eor	@C[0],@C[0],@E[2]
+	ldrd	@E[0],@E[1],[sp,#$A[4][1]]
+	eor	@C[1],@C[1],@E[3]
+	ldrd	@E[2],@E[3],[sp,#$A[0][2]]
+	eor	@C[2],@C[2],@E[0]
+	eor	@C[3],@C[3],@E[1]
+	eor	@C[4],@C[4],@E[2]
+	ldrd	@E[0],@E[1],[sp,#$A[0][3]]
+	eor	@C[5],@C[5],@E[3]
+	ldrd	@E[2],@E[3],[sp,#$A[0][4]]
+#else
+	eor	@C[0],@C[0],@E[0]
+	 add	@E[0],sp,#$A[1][2]
+	eor	@C[1],@C[1],@E[1]
+	eor	@C[2],@C[2],@E[2]
+	eor	@C[3],@C[3],@E[3]
+	ldmia	@E[0],{@E[0]-@E[2],@E[3]}	@ A[1][2..3]
+	eor	@C[4],@C[4],@E[0]
+	 add	@E[0],sp,#$A[1][4]
+	eor	@C[5],@C[5],@E[1]
+	eor	@C[6],@C[6],@E[2]
+	eor	@C[7],@C[7],@E[3]
+	ldmia	@E[0],{@E[0]-@E[2],@E[3]}	@ A[1][4]..A[2][0]
+	eor	@C[8],@C[8],@E[0]
+	 add	@E[0],sp,#$A[2][1]
+	eor	@C[9],@C[9],@E[1]
+	eor	@C[0],@C[0],@E[2]
+	eor	@C[1],@C[1],@E[3]
+	ldmia	@E[0],{@E[0]-@E[2],@E[3]}	@ A[2][1..2]
+	eor	@C[2],@C[2],@E[0]
+	 add	@E[0],sp,#$A[2][3]
+	eor	@C[3],@C[3],@E[1]
+	eor	@C[4],@C[4],@E[2]
+	eor	@C[5],@C[5],@E[3]
+	ldmia	@E[0],{@E[0]-@E[2],@E[3]}	@ A[2][3..4]
+	eor	@C[6],@C[6],@E[0]
+	 add	@E[0],sp,#$A[3][0]
+	eor	@C[7],@C[7],@E[1]
+	eor	@C[8],@C[8],@E[2]
+	eor	@C[9],@C[9],@E[3]
+	ldmia	@E[0],{@E[0]-@E[2],@E[3]}	@ A[3][0..1]
+	eor	@C[0],@C[0],@E[0]
+	 add	@E[0],sp,#$A[3][2]
+	eor	@C[1],@C[1],@E[1]
+	eor	@C[2],@C[2],@E[2]
+	eor	@C[3],@C[3],@E[3]
+	ldmia	@E[0],{@E[0]-@E[2],@E[3]}	@ A[3][2..3]
+	eor	@C[4],@C[4],@E[0]
+	 add	@E[0],sp,#$A[3][4]
+	eor	@C[5],@C[5],@E[1]
+	eor	@C[6],@C[6],@E[2]
+	eor	@C[7],@C[7],@E[3]
+	ldmia	@E[0],{@E[0]-@E[2],@E[3]}	@ A[3][4]..A[4][0]
+	eor	@C[8],@C[8],@E[0]
+	ldr	@E[0],[sp,#$A[4][1]]		@ A[4][1]
+	eor	@C[9],@C[9],@E[1]
+	ldr	@E[1],[sp,#$A[4][1]+4]
+	eor	@C[0],@C[0],@E[2]
+	ldr	@E[2],[sp,#$A[0][2]]		@ A[0][2]
+	eor	@C[1],@C[1],@E[3]
+	ldr	@E[3],[sp,#$A[0][2]+4]
+	eor	@C[2],@C[2],@E[0]
+	 add	@E[0],sp,#$A[0][3]
+	eor	@C[3],@C[3],@E[1]
+	eor	@C[4],@C[4],@E[2]
+	eor	@C[5],@C[5],@E[3]
+	ldmia	@E[0],{@E[0]-@E[2],@E[3]}	@ A[0][3..4]
+#endif
+	eor	@C[6],@C[6],@E[0]
+	eor	@C[7],@C[7],@E[1]
+	eor	@C[8],@C[8],@E[2]
+	eor	@C[9],@C[9],@E[3]
+
+	eor	@E[0],@C[0],@C[5],ror#32-1	@ E[0] = ROL64(C[2], 1) ^ C[0];
+	str.l	@E[0],[sp,#$D[1]]		@ D[1] = E[0]
+	eor	@E[1],@C[1],@C[4]
+	str.h	@E[1],[sp,#$D[1]+4]
+	eor	@E[2],@C[6],@C[1],ror#32-1	@ E[1] = ROL64(C[0], 1) ^ C[3];
+	eor	@E[3],@C[7],@C[0]
+	str.l	@E[2],[sp,#$D[4]]		@ D[4] = E[1]
+	eor	@C[0],@C[8],@C[3],ror#32-1	@ C[0] = ROL64(C[1], 1) ^ C[4];
+	str.h	@E[3],[sp,#$D[4]+4]
+	eor	@C[1],@C[9],@C[2]
+	str.l	@C[0],[sp,#$D[0]]		@ D[0] = C[0]
+	eor	@C[2],@C[2],@C[7],ror#32-1	@ C[1] = ROL64(C[3], 1) ^ C[1];
+	 ldr.l	@C[7],[sp,#$A[3][3]]
+	eor	@C[3],@C[3],@C[6]
+	str.h	@C[1],[sp,#$D[0]+4]
+	 ldr.h	@C[6],[sp,#$A[3][3]+4]
+	str.l	@C[2],[sp,#$D[2]]		@ D[2] = C[1]
+	eor	@C[4],@C[4],@C[9],ror#32-1	@ C[2] = ROL64(C[4], 1) ^ C[2];
+	str.h	@C[3],[sp,#$D[2]+4]
+	eor	@C[5],@C[5],@C[8]
+
+	ldr.l	@C[8],[sp,#$A[4][4]]
+	ldr.h	@C[9],[sp,#$A[4][4]+4]
+	 str.l	@C[4],[sp,#$D[3]]		@ D[3] = C[2]
+	eor	@C[7],@C[7],@C[4]
+	 str.h	@C[5],[sp,#$D[3]+4]
+	eor	@C[6],@C[6],@C[5]
+	ldr.l	@C[4],[sp,#$A[0][0]]
+	@ ror	@C[7],@C[7],#32-10		@ C[3] = ROL64(A[3][3] ^ C[2], rhotates[3][3]);   /* D[3] */
+	@ ror	@C[6],@C[6],#32-11
+	ldr.h	@C[5],[sp,#$A[0][0]+4]
+	eor	@C[8],@C[8],@E[2]
+	eor	@C[9],@C[9],@E[3]
+	ldr.l	@E[2],[sp,#$A[2][2]]
+	eor	@C[0],@C[0],@C[4]
+	ldr.h	@E[3],[sp,#$A[2][2]+4]
+	@ ror	@C[8],@C[8],#32-7		@ C[4] = ROL64(A[4][4] ^ E[1], rhotates[4][4]);   /* D[4] */
+	@ ror	@C[9],@C[9],#32-7
+	eor	@C[1],@C[1],@C[5]		@ C[0] =       A[0][0] ^ C[0]; /* rotate by 0 */  /* D[0] */
+	eor	@E[2],@E[2],@C[2]
+	ldr.l	@C[2],[sp,#$A[1][1]]
+	eor	@E[3],@E[3],@C[3]
+	ldr.h	@C[3],[sp,#$A[1][1]+4]
+	ror	@C[5],@E[2],#32-21		@ C[2] = ROL64(A[2][2] ^ C[1], rhotates[2][2]);   /* D[2] */
+	 ldr	@E[2],[sp,#444]			@ load counter
+	eor	@C[2],@C[2],@E[0]
+	 adr	@E[0],iotas32
+	ror	@C[4],@E[3],#32-22
+	 add	@E[3],@E[0],@E[2]
+	eor	@C[3],@C[3],@E[1]
+___
+$code.=<<___	if ($A[0][0] != $T[0][0]);
+	ldmia	@E[3],{@E[0],@E[1]}		@ iotas[i]
+___
+$code.=<<___	if ($A[0][0] == $T[0][0]);
+	ldr.l	@E[0],[@E[3],#8]		@ iotas[i].lo
+	add	@E[2],@E[2],#16
+	ldr.h	@E[1],[@E[3],#12]		@ iotas[i].hi
+	cmp	@E[2],#192
+	str	@E[2],[sp,#444]			@ store counter
+___
+$code.=<<___;
+	bic	@E[2],@C[4],@C[2],ror#32-22
+	bic	@E[3],@C[5],@C[3],ror#32-22
+	 ror	@C[2],@C[2],#32-22		@ C[1] = ROL64(A[1][1] ^ E[0], rhotates[1][1]);   /* D[1] */
+	 ror	@C[3],@C[3],#32-22
+	eor	@E[2],@E[2],@C[0]
+	eor	@E[3],@E[3],@C[1]
+	eor	@E[0],@E[0],@E[2]
+	eor	@E[1],@E[1],@E[3]
+	str.l	@E[0],[sp,#$R[0][0]]		@ R[0][0] = C[0] ^ (~C[1] & C[2]) ^ iotas[i];
+	bic	@E[2],@C[6],@C[4],ror#11
+	str.h	@E[1],[sp,#$R[0][0]+4]
+	bic	@E[3],@C[7],@C[5],ror#10
+	bic	@E[0],@C[8],@C[6],ror#32-(11-7)
+	bic	@E[1],@C[9],@C[7],ror#32-(10-7)
+	eor	@E[2],@C[2],@E[2],ror#32-11
+	str.l	@E[2],[sp,#$R[0][1]]		@ R[0][1] = C[1] ^ (~C[2] & C[3]);
+	eor	@E[3],@C[3],@E[3],ror#32-10
+	str.h	@E[3],[sp,#$R[0][1]+4]
+	eor	@E[0],@C[4],@E[0],ror#32-7
+	eor	@E[1],@C[5],@E[1],ror#32-7
+	str.l	@E[0],[sp,#$R[0][2]]		@ R[0][2] = C[2] ^ (~C[3] & C[4]);
+	bic	@E[2],@C[0],@C[8],ror#32-7
+	str.h	@E[1],[sp,#$R[0][2]+4]
+	bic	@E[3],@C[1],@C[9],ror#32-7
+	eor	@E[2],@E[2],@C[6],ror#32-11
+	str.l	@E[2],[sp,#$R[0][3]]		@ R[0][3] = C[3] ^ (~C[4] & C[0]);
+	eor	@E[3],@E[3],@C[7],ror#32-10
+	str.h	@E[3],[sp,#$R[0][3]+4]
+	bic	@E[0],@C[2],@C[0]
+	 add	@E[3],sp,#$D[3]
+	 ldr.l	@C[0],[sp,#$A[0][3]]		@ A[0][3]
+	bic	@E[1],@C[3],@C[1]
+	 ldr.h	@C[1],[sp,#$A[0][3]+4]
+	eor	@E[0],@E[0],@C[8],ror#32-7
+	eor	@E[1],@E[1],@C[9],ror#32-7
+	str.l	@E[0],[sp,#$R[0][4]]		@ R[0][4] = C[4] ^ (~C[0] & C[1]);
+	 add	@C[9],sp,#$D[0]
+	str.h	@E[1],[sp,#$R[0][4]+4]
+
+	ldmia	@E[3],{@E[0]-@E[2],@E[3]}	@ D[3..4]
+	ldmia	@C[9],{@C[6]-@C[9]}		@ D[0..1]
+
+	ldr.l	@C[2],[sp,#$A[1][4]]		@ A[1][4]
+	eor	@C[0],@C[0],@E[0]
+	ldr.h	@C[3],[sp,#$A[1][4]+4]
+	eor	@C[1],@C[1],@E[1]
+	@ ror	@C[0],@C[0],#32-14		@ C[0] = ROL64(A[0][3] ^ D[3], rhotates[0][3]);
+	ldr.l	@E[0],[sp,#$A[3][1]]		@ A[3][1]
+	@ ror	@C[1],@C[1],#32-14
+	ldr.h	@E[1],[sp,#$A[3][1]+4]
+
+	eor	@C[2],@C[2],@E[2]
+	ldr.l	@C[4],[sp,#$A[2][0]]		@ A[2][0]
+	eor	@C[3],@C[3],@E[3]
+	ldr.h	@C[5],[sp,#$A[2][0]+4]
+	@ ror	@C[2],@C[2],#32-10		@ C[1] = ROL64(A[1][4] ^ D[4], rhotates[1][4]);
+	@ ror	@C[3],@C[3],#32-10
+
+	eor	@C[6],@C[6],@C[4]
+	ldr.l	@E[2],[sp,#$D[2]]		@ D[2]
+	eor	@C[7],@C[7],@C[5]
+	ldr.h	@E[3],[sp,#$D[2]+4]
+	ror	@C[5],@C[6],#32-1		@ C[2] = ROL64(A[2][0] ^ D[0], rhotates[2][0]);
+	ror	@C[4],@C[7],#32-2
+
+	eor	@E[0],@E[0],@C[8]
+	ldr.l	@C[8],[sp,#$A[4][2]]		@ A[4][2]
+	eor	@E[1],@E[1],@C[9]
+	ldr.h	@C[9],[sp,#$A[4][2]+4]
+	ror	@C[7],@E[0],#32-22		@ C[3] = ROL64(A[3][1] ^ D[1], rhotates[3][1]);
+	ror	@C[6],@E[1],#32-23
+
+	bic	@E[0],@C[4],@C[2],ror#32-10
+	bic	@E[1],@C[5],@C[3],ror#32-10
+	 eor	@E[2],@E[2],@C[8]
+	 eor	@E[3],@E[3],@C[9]
+	 ror	@C[9],@E[2],#32-30		@ C[4] = ROL64(A[4][2] ^ D[2], rhotates[4][2]);
+	 ror	@C[8],@E[3],#32-31
+	eor	@E[0],@E[0],@C[0],ror#32-14
+	eor	@E[1],@E[1],@C[1],ror#32-14
+	str.l	@E[0],[sp,#$R[1][0]]		@ R[1][0] = C[0] ^ (~C[1] & C[2])
+	bic	@E[2],@C[6],@C[4]
+	str.h	@E[1],[sp,#$R[1][0]+4]
+	bic	@E[3],@C[7],@C[5]
+	eor	@E[2],@E[2],@C[2],ror#32-10
+	str.l	@E[2],[sp,#$R[1][1]]		@ R[1][1] = C[1] ^ (~C[2] & C[3]);
+	eor	@E[3],@E[3],@C[3],ror#32-10
+	str.h	@E[3],[sp,#$R[1][1]+4]
+	bic	@E[0],@C[8],@C[6]
+	bic	@E[1],@C[9],@C[7]
+	bic	@E[2],@C[0],@C[8],ror#14
+	bic	@E[3],@C[1],@C[9],ror#14
+	eor	@E[0],@E[0],@C[4]
+	eor	@E[1],@E[1],@C[5]
+	str.l	@E[0],[sp,#$R[1][2]]		@ R[1][2] = C[2] ^ (~C[3] & C[4]);
+	bic	@C[2],@C[2],@C[0],ror#32-(14-10)
+	str.h	@E[1],[sp,#$R[1][2]+4]
+	eor	@E[2],@C[6],@E[2],ror#32-14
+	bic	@E[1],@C[3],@C[1],ror#32-(14-10)
+	str.l	@E[2],[sp,#$R[1][3]]		@ R[1][3] = C[3] ^ (~C[4] & C[0]);
+	eor	@E[3],@C[7],@E[3],ror#32-14
+	str.h	@E[3],[sp,#$R[1][3]+4]
+	 add	@E[2],sp,#$D[1]
+	 ldr.l	@C[1],[sp,#$A[0][1]]		@ A[0][1]
+	eor	@E[0],@C[8],@C[2],ror#32-10
+	 ldr.h	@C[0],[sp,#$A[0][1]+4]
+	eor	@E[1],@C[9],@E[1],ror#32-10
+	str.l	@E[0],[sp,#$R[1][4]]		@ R[1][4] = C[4] ^ (~C[0] & C[1]);
+	str.h	@E[1],[sp,#$R[1][4]+4]
+
+	add	@C[9],sp,#$D[3]
+	ldmia	@E[2],{@E[0]-@E[2],@E[3]}	@ D[1..2]
+	ldr.l	@C[2],[sp,#$A[1][2]]		@ A[1][2]
+	ldr.h	@C[3],[sp,#$A[1][2]+4]
+	ldmia	@C[9],{@C[6]-@C[9]}		@ D[3..4]
+
+	eor	@C[1],@C[1],@E[0]
+	ldr.l	@C[4],[sp,#$A[2][3]]		@ A[2][3]
+	eor	@C[0],@C[0],@E[1]
+	ldr.h	@C[5],[sp,#$A[2][3]+4]
+	ror	@C[0],@C[0],#32-1		@ C[0] = ROL64(A[0][1] ^ D[1], rhotates[0][1]);
+
+	eor	@C[2],@C[2],@E[2]
+	ldr.l	@E[0],[sp,#$A[3][4]]		@ A[3][4]
+	eor	@C[3],@C[3],@E[3]
+	ldr.h	@E[1],[sp,#$A[3][4]+4]
+	@ ror	@C[2],@C[2],#32-3		@ C[1] = ROL64(A[1][2] ^ D[2], rhotates[1][2]);
+	ldr.l	@E[2],[sp,#$D[0]]		@ D[0]
+	@ ror	@C[3],@C[3],#32-3
+	ldr.h	@E[3],[sp,#$D[0]+4]
+
+	eor	@C[4],@C[4],@C[6]
+	eor	@C[5],@C[5],@C[7]
+	@ ror	@C[5],@C[6],#32-12		@ C[2] = ROL64(A[2][3] ^ D[3], rhotates[2][3]);
+	@ ror	@C[4],@C[7],#32-13		@ [track reverse order below]
+
+	eor	@E[0],@E[0],@C[8]
+	ldr.l	@C[8],[sp,#$A[4][0]]		@ A[4][0]
+	eor	@E[1],@E[1],@C[9]
+	ldr.h	@C[9],[sp,#$A[4][0]+4]
+	ror	@C[6],@E[0],#32-4		@ C[3] = ROL64(A[3][4] ^ D[4], rhotates[3][4]);
+	ror	@C[7],@E[1],#32-4
+
+	eor	@E[2],@E[2],@C[8]
+	eor	@E[3],@E[3],@C[9]
+	ror	@C[8],@E[2],#32-9		@ C[4] = ROL64(A[4][0] ^ D[0], rhotates[4][0]);
+	ror	@C[9],@E[3],#32-9
+
+	bic	@E[0],@C[5],@C[2],ror#13-3
+	bic	@E[1],@C[4],@C[3],ror#12-3
+	bic	@E[2],@C[6],@C[5],ror#32-13
+	bic	@E[3],@C[7],@C[4],ror#32-12
+	eor	@E[0],@C[0],@E[0],ror#32-13
+	eor	@E[1],@C[1],@E[1],ror#32-12
+	str.l	@E[0],[sp,#$R[2][0]]		@ R[2][0] = C[0] ^ (~C[1] & C[2])
+	eor	@E[2],@E[2],@C[2],ror#32-3
+	str.h	@E[1],[sp,#$R[2][0]+4]
+	eor	@E[3],@E[3],@C[3],ror#32-3
+	str.l	@E[2],[sp,#$R[2][1]]		@ R[2][1] = C[1] ^ (~C[2] & C[3]);
+	bic	@E[0],@C[8],@C[6]
+	bic	@E[1],@C[9],@C[7]
+	str.h	@E[3],[sp,#$R[2][1]+4]
+	eor	@E[0],@E[0],@C[5],ror#32-13
+	eor	@E[1],@E[1],@C[4],ror#32-12
+	str.l	@E[0],[sp,#$R[2][2]]		@ R[2][2] = C[2] ^ (~C[3] & C[4]);
+	bic	@E[2],@C[0],@C[8]
+	str.h	@E[1],[sp,#$R[2][2]+4]
+	bic	@E[3],@C[1],@C[9]
+	eor	@E[2],@E[2],@C[6]
+	eor	@E[3],@E[3],@C[7]
+	str.l	@E[2],[sp,#$R[2][3]]		@ R[2][3] = C[3] ^ (~C[4] & C[0]);
+	bic	@E[0],@C[2],@C[0],ror#3
+	str.h	@E[3],[sp,#$R[2][3]+4]
+	bic	@E[1],@C[3],@C[1],ror#3
+	 ldr.l	@C[1],[sp,#$A[0][4]]		@ A[0][4] [in reverse order]
+	eor	@E[0],@C[8],@E[0],ror#32-3
+	 ldr.h	@C[0],[sp,#$A[0][4]+4]
+	eor	@E[1],@C[9],@E[1],ror#32-3
+	str.l	@E[0],[sp,#$R[2][4]]		@ R[2][4] = C[4] ^ (~C[0] & C[1]);
+	 add	@C[9],sp,#$D[1]
+	str.h	@E[1],[sp,#$R[2][4]+4]
+
+	ldr.l	@E[0],[sp,#$D[4]]		@ D[4]
+	ldr.h	@E[1],[sp,#$D[4]+4]
+	ldr.l	@E[2],[sp,#$D[0]]		@ D[0]
+	ldr.h	@E[3],[sp,#$D[0]+4]
+
+	ldmia	@C[9],{@C[6]-@C[9]}		@ D[1..2]
+
+	eor	@C[1],@C[1],@E[0]
+	ldr.l	@C[2],[sp,#$A[1][0]]		@ A[1][0]
+	eor	@C[0],@C[0],@E[1]
+	ldr.h	@C[3],[sp,#$A[1][0]+4]
+	@ ror	@C[1],@E[0],#32-13		@ C[0] = ROL64(A[0][4] ^ D[4], rhotates[0][4]);
+	ldr.l	@C[4],[sp,#$A[2][1]]		@ A[2][1]
+	@ ror	@C[0],@E[1],#32-14		@ [was loaded in reverse order]
+	ldr.h	@C[5],[sp,#$A[2][1]+4]
+
+	eor	@C[2],@C[2],@E[2]
+	ldr.l	@E[0],[sp,#$A[3][2]]		@ A[3][2]
+	eor	@C[3],@C[3],@E[3]
+	ldr.h	@E[1],[sp,#$A[3][2]+4]
+	@ ror	@C[2],@C[2],#32-18		@ C[1] = ROL64(A[1][0] ^ D[0], rhotates[1][0]);
+	ldr.l	@E[2],[sp,#$D[3]]		@ D[3]
+	@ ror	@C[3],@C[3],#32-18
+	ldr.h	@E[3],[sp,#$D[3]+4]
+
+	eor	@C[6],@C[6],@C[4]
+	eor	@C[7],@C[7],@C[5]
+	ror	@C[4],@C[6],#32-5		@ C[2] = ROL64(A[2][1] ^ D[1], rhotates[2][1]);
+	ror	@C[5],@C[7],#32-5
+
+	eor	@E[0],@E[0],@C[8]
+	ldr.l	@C[8],[sp,#$A[4][3]]		@ A[4][3]
+	eor	@E[1],@E[1],@C[9]
+	ldr.h	@C[9],[sp,#$A[4][3]+4]
+	ror	@C[7],@E[0],#32-7		@ C[3] = ROL64(A[3][2] ^ D[2], rhotates[3][2]);
+	ror	@C[6],@E[1],#32-8
+
+	eor	@E[2],@E[2],@C[8]
+	eor	@E[3],@E[3],@C[9]
+	ror	@C[8],@E[2],#32-28		@ C[4] = ROL64(A[4][3] ^ D[3], rhotates[4][3]);
+	ror	@C[9],@E[3],#32-28
+
+	bic	@E[0],@C[4],@C[2],ror#32-18
+	bic	@E[1],@C[5],@C[3],ror#32-18
+	eor	@E[0],@E[0],@C[0],ror#32-14
+	eor	@E[1],@E[1],@C[1],ror#32-13
+	str.l	@E[0],[sp,#$R[3][0]]		@ R[3][0] = C[0] ^ (~C[1] & C[2])
+	bic	@E[2],@C[6],@C[4]
+	str.h	@E[1],[sp,#$R[3][0]+4]
+	bic	@E[3],@C[7],@C[5]
+	eor	@E[2],@E[2],@C[2],ror#32-18
+	str.l	@E[2],[sp,#$R[3][1]]		@ R[3][1] = C[1] ^ (~C[2] & C[3]);
+	eor	@E[3],@E[3],@C[3],ror#32-18
+	str.h	@E[3],[sp,#$R[3][1]+4]
+	bic	@E[0],@C[8],@C[6]
+	bic	@E[1],@C[9],@C[7]
+	bic	@E[2],@C[0],@C[8],ror#14
+	bic	@E[3],@C[1],@C[9],ror#13
+	eor	@E[0],@E[0],@C[4]
+	eor	@E[1],@E[1],@C[5]
+	str.l	@E[0],[sp,#$R[3][2]]		@ R[3][2] = C[2] ^ (~C[3] & C[4]);
+	bic	@C[2],@C[2],@C[0],ror#18-14
+	str.h	@E[1],[sp,#$R[3][2]+4]
+	eor	@E[2],@C[6],@E[2],ror#32-14
+	bic	@E[1],@C[3],@C[1],ror#18-13
+	eor	@E[3],@C[7],@E[3],ror#32-13
+	str.l	@E[2],[sp,#$R[3][3]]		@ R[3][3] = C[3] ^ (~C[4] & C[0]);
+	str.h	@E[3],[sp,#$R[3][3]+4]
+	 add	@E[3],sp,#$D[2]
+	 ldr.l	@C[0],[sp,#$A[0][2]]		@ A[0][2]
+	eor	@E[0],@C[8],@C[2],ror#32-18
+	 ldr.h	@C[1],[sp,#$A[0][2]+4]
+	eor	@E[1],@C[9],@E[1],ror#32-18
+	str.l	@E[0],[sp,#$R[3][4]]		@ R[3][4] = C[4] ^ (~C[0] & C[1]);
+	str.h	@E[1],[sp,#$R[3][4]+4]
+
+	ldmia	@E[3],{@E[0]-@E[2],@E[3]}	@ D[2..3]
+	ldr.l	@C[2],[sp,#$A[1][3]]		@ A[1][3]
+	ldr.h	@C[3],[sp,#$A[1][3]+4]
+	ldr.l	@C[6],[sp,#$D[4]]		@ D[4]
+	ldr.h	@C[7],[sp,#$D[4]+4]
+
+	eor	@C[0],@C[0],@E[0]
+	ldr.l	@C[4],[sp,#$A[2][4]]		@ A[2][4]
+	eor	@C[1],@C[1],@E[1]
+	ldr.h	@C[5],[sp,#$A[2][4]+4]
+	@ ror	@C[0],@C[0],#32-31		@ C[0] = ROL64(A[0][2] ^ D[2], rhotates[0][2]);
+	ldr.l	@C[8],[sp,#$D[0]]		@ D[0]
+	@ ror	@C[1],@C[1],#32-31
+	ldr.h	@C[9],[sp,#$D[0]+4]
+
+	eor	@E[2],@E[2],@C[2]
+	ldr.l	@E[0],[sp,#$A[3][0]]		@ A[3][0]
+	eor	@E[3],@E[3],@C[3]
+	ldr.h	@E[1],[sp,#$A[3][0]+4]
+	ror	@C[3],@E[2],#32-27		@ C[1] = ROL64(A[1][3] ^ D[3], rhotates[1][3]);
+	ldr.l	@E[2],[sp,#$D[1]]		@ D[1]
+	ror	@C[2],@E[3],#32-28
+	ldr.h	@E[3],[sp,#$D[1]+4]
+
+	eor	@C[6],@C[6],@C[4]
+	eor	@C[7],@C[7],@C[5]
+	ror	@C[5],@C[6],#32-19		@ C[2] = ROL64(A[2][4] ^ D[4], rhotates[2][4]);
+	ror	@C[4],@C[7],#32-20
+
+	eor	@E[0],@E[0],@C[8]
+	ldr.l	@C[8],[sp,#$A[4][1]]		@ A[4][1]
+	eor	@E[1],@E[1],@C[9]
+	ldr.h	@C[9],[sp,#$A[4][1]+4]
+	ror	@C[7],@E[0],#32-20		@ C[3] = ROL64(A[3][0] ^ D[0], rhotates[3][0]);
+	ror	@C[6],@E[1],#32-21
+
+	eor	@C[8],@C[8],@E[2]
+	eor	@C[9],@C[9],@E[3]
+	@ ror	@C[8],@C[2],#32-1		@ C[4] = ROL64(A[4][1] ^ D[1], rhotates[4][1]);
+	@ ror	@C[9],@C[3],#32-1
+
+	bic	@E[0],@C[4],@C[2]
+	bic	@E[1],@C[5],@C[3]
+	eor	@E[0],@E[0],@C[0],ror#32-31
+	str.l	@E[0],[sp,#$R[4][0]]		@ R[4][0] = C[0] ^ (~C[1] & C[2])
+	eor	@E[1],@E[1],@C[1],ror#32-31
+	str.h	@E[1],[sp,#$R[4][0]+4]
+	bic	@E[2],@C[6],@C[4]
+	bic	@E[3],@C[7],@C[5]
+	eor	@E[2],@E[2],@C[2]
+	eor	@E[3],@E[3],@C[3]
+	str.l	@E[2],[sp,#$R[4][1]]		@ R[4][1] = C[1] ^ (~C[2] & C[3]);
+	bic	@E[0],@C[8],@C[6],ror#1
+	str.h	@E[3],[sp,#$R[4][1]+4]
+	bic	@E[1],@C[9],@C[7],ror#1
+	bic	@E[2],@C[0],@C[8],ror#31-1
+	bic	@E[3],@C[1],@C[9],ror#31-1
+	eor	@C[4],@C[4],@E[0],ror#32-1
+	str.l	@C[4],[sp,#$R[4][2]]		@ R[4][2] = C[2] ^= (~C[3] & C[4]);
+	eor	@C[5],@C[5],@E[1],ror#32-1
+	str.h	@C[5],[sp,#$R[4][2]+4]
+	eor	@C[6],@C[6],@E[2],ror#32-31
+	eor	@C[7],@C[7],@E[3],ror#32-31
+	str.l	@C[6],[sp,#$R[4][3]]		@ R[4][3] = C[3] ^= (~C[4] & C[0]);
+	bic	@E[0],@C[2],@C[0],ror#32-31
+	str.h	@C[7],[sp,#$R[4][3]+4]
+	bic	@E[1],@C[3],@C[1],ror#32-31
+	 add	@E[2],sp,#$R[0][0]
+	eor	@C[8],@E[0],@C[8],ror#32-1
+	 add	@E[0],sp,#$R[1][0]
+	eor	@C[9],@E[1],@C[9],ror#32-1
+	str.l	@C[8],[sp,#$R[4][4]]		@ R[4][4] = C[4] ^= (~C[0] & C[1]);
+	str.h	@C[9],[sp,#$R[4][4]+4]
+___
+}
+	Round(@A,@T);
+	Round(@T,@A);
+$code.=<<___;
+	blo	.Lround2x
+
+	ldr	pc,[sp,#440]
+.size	KeccakF1600_int,.-KeccakF1600_int
+
+.type	KeccakF1600, %function
+.align	5
+KeccakF1600:
+	stmdb	sp!,{r0,r4-r11,lr}
+	sub	sp,sp,#440+16			@ space for A[5][5],D[5],T[5][5],...
+
+	add	@E[0],r0,#$A[1][0]
+	add	@E[1],sp,#$A[1][0]
+	ldmia	r0,    {@C[0]-@C[9]}		@ copy A[5][5] to stack
+	stmia	sp,    {@C[0]-@C[9]}
+	ldmia	@E[0]!,{@C[0]-@C[9]}
+	stmia	@E[1]!,{@C[0]-@C[9]}
+	ldmia	@E[0]!,{@C[0]-@C[9]}
+	stmia	@E[1]!,{@C[0]-@C[9]}
+	ldmia	@E[0]!,{@C[0]-@C[9]}
+	stmia	@E[1]!,{@C[0]-@C[9]}
+	ldmia	@E[0], {@C[0]-@C[9]}
+	add	@E[2],sp,#$A[0][0]
+	add	@E[0],sp,#$A[1][0]
+	stmia	@E[1], {@C[0]-@C[9]}
+
+	bl	KeccakF1600_enter
+
+	ldr	@E[1], [sp,#440+16]		@ restore pointer to A
+	ldmia	sp,    {@C[0]-@C[9]}
+	stmia	@E[1]!,{@C[0]-@C[9]}		@ return A[5][5]
+	ldmia	@E[0]!,{@C[0]-@C[9]}
+	stmia	@E[1]!,{@C[0]-@C[9]}
+	ldmia	@E[0]!,{@C[0]-@C[9]}
+	stmia	@E[1]!,{@C[0]-@C[9]}
+	ldmia	@E[0]!,{@C[0]-@C[9]}
+	stmia	@E[1]!,{@C[0]-@C[9]}
+	ldmia	@E[0], {@C[0]-@C[9]}
+	stmia	@E[1], {@C[0]-@C[9]}
+
+	add	sp,sp,#440+20
+	ldmia	sp!,{r4-r11,pc}
+.size	KeccakF1600,.-KeccakF1600
+___
+{ my ($A_flat,$inp,$len,$bsz) = map("r$_",(10..12,14));
+
+########################################################################
+# Stack layout
+# ----->+-----------------------+
+#       | uint64_t A[5][5]      |
+#       | ...                   |
+#       | ...                   |
+# +456->+-----------------------+
+#       | 0x55555555            |
+# +460->+-----------------------+
+#       | 0x33333333            |
+# +464->+-----------------------+
+#       | 0x0f0f0f0f            |
+# +468->+-----------------------+
+#       | 0x00ff00ff            |
+# +472->+-----------------------+
+#       | uint64_t *A           |
+# +476->+-----------------------+
+#       | const void *inp       |
+# +480->+-----------------------+
+#       | size_t len            |
+# +484->+-----------------------+
+#       | size_t bs             |
+# +488->+-----------------------+
+#       | ....
+
+$code.=<<___;
+.global	SHA3_absorb
+.type	SHA3_absorb,%function
+.align	5
+SHA3_absorb:
+	stmdb	sp!,{r0-r12,lr}
+	sub	sp,sp,#456+16
+
+	add	$A_flat,r0,#$A[1][0]
+	@ mov	$inp,r1
+	mov	$len,r2
+	mov	$bsz,r3
+	cmp	r2,r3
+	blo	.Labsorb_abort
+
+	add	$inp,sp,#0
+	ldmia	r0,      {@C[0]-@C[9]}	@ copy A[5][5] to stack
+	stmia	$inp!,   {@C[0]-@C[9]}
+	ldmia	$A_flat!,{@C[0]-@C[9]}
+	stmia	$inp!,   {@C[0]-@C[9]}
+	ldmia	$A_flat!,{@C[0]-@C[9]}
+	stmia	$inp!,   {@C[0]-@C[9]}
+	ldmia	$A_flat!,{@C[0]-@C[9]}
+	stmia	$inp!,   {@C[0]-@C[9]}
+	ldmia	$A_flat!,{@C[0]-@C[9]}
+	stmia	$inp,    {@C[0]-@C[9]}
+
+	ldr	$inp,[sp,#476]		@ restore $inp
+#ifdef	__thumb2__
+	mov	r9,#0x00ff00ff
+	mov	r8,#0x0f0f0f0f
+	mov	r7,#0x33333333
+	mov	r6,#0x55555555
+#else
+	mov	r6,#0x11		@ compose constants
+	mov	r8,#0x0f
+	mov	r9,#0xff
+	orr	r6,r6,r6,lsl#8
+	orr	r8,r8,r8,lsl#8
+	orr	r6,r6,r6,lsl#16		@ 0x11111111
+	orr	r9,r9,r9,lsl#16		@ 0x00ff00ff
+	orr	r8,r8,r8,lsl#16		@ 0x0f0f0f0f
+	orr	r7,r6,r6,lsl#1		@ 0x33333333
+	orr	r6,r6,r6,lsl#2		@ 0x55555555
+#endif
+	str	r9,[sp,#468]
+	str	r8,[sp,#464]
+	str	r7,[sp,#460]
+	str	r6,[sp,#456]
+	b	.Loop_absorb
+
+.align	4
+.Loop_absorb:
+	subs	r0,$len,$bsz
+	blo	.Labsorbed
+	add	$A_flat,sp,#0
+	str	r0,[sp,#480]		@ save len - bsz
+
+.align	4
+.Loop_block:
+	ldrb	r0,[$inp],#1
+	ldrb	r1,[$inp],#1
+	ldrb	r2,[$inp],#1
+	ldrb	r3,[$inp],#1
+	ldrb	r4,[$inp],#1
+	orr	r0,r0,r1,lsl#8
+	ldrb	r1,[$inp],#1
+	orr	r0,r0,r2,lsl#16
+	ldrb	r2,[$inp],#1
+	orr	r0,r0,r3,lsl#24		@ lo
+	ldrb	r3,[$inp],#1
+	orr	r1,r4,r1,lsl#8
+	orr	r1,r1,r2,lsl#16
+	orr	r1,r1,r3,lsl#24		@ hi
+
+	and	r2,r0,r6		@ &=0x55555555
+	and	r0,r0,r6,lsl#1		@ &=0xaaaaaaaa
+	and	r3,r1,r6		@ &=0x55555555
+	and	r1,r1,r6,lsl#1		@ &=0xaaaaaaaa
+	orr	r2,r2,r2,lsr#1
+	orr	r0,r0,r0,lsl#1
+	orr	r3,r3,r3,lsr#1
+	orr	r1,r1,r1,lsl#1
+	and	r2,r2,r7		@ &=0x33333333
+	and	r0,r0,r7,lsl#2		@ &=0xcccccccc
+	and	r3,r3,r7		@ &=0x33333333
+	and	r1,r1,r7,lsl#2		@ &=0xcccccccc
+	orr	r2,r2,r2,lsr#2
+	orr	r0,r0,r0,lsl#2
+	orr	r3,r3,r3,lsr#2
+	orr	r1,r1,r1,lsl#2
+	and	r2,r2,r8		@ &=0x0f0f0f0f
+	and	r0,r0,r8,lsl#4		@ &=0xf0f0f0f0
+	and	r3,r3,r8		@ &=0x0f0f0f0f
+	and	r1,r1,r8,lsl#4		@ &=0xf0f0f0f0
+	ldmia	$A_flat,{r4-r5}		@ A_flat[i]
+	orr	r2,r2,r2,lsr#4
+	orr	r0,r0,r0,lsl#4
+	orr	r3,r3,r3,lsr#4
+	orr	r1,r1,r1,lsl#4
+	and	r2,r2,r9		@ &=0x00ff00ff
+	and	r0,r0,r9,lsl#8		@ &=0xff00ff00
+	and	r3,r3,r9		@ &=0x00ff00ff
+	and	r1,r1,r9,lsl#8		@ &=0xff00ff00
+	orr	r2,r2,r2,lsr#8
+	orr	r0,r0,r0,lsl#8
+	orr	r3,r3,r3,lsr#8
+	orr	r1,r1,r1,lsl#8
+
+	lsl	r2,r2,#16
+	lsr	r1,r1,#16
+	eor	r4,r4,r3,lsl#16
+	eor	r5,r5,r0,lsr#16
+	eor	r4,r4,r2,lsr#16
+	eor	r5,r5,r1,lsl#16
+	stmia	$A_flat!,{r4-r5}	@ A_flat[i++] ^= BitInterleave(inp[0..7])
+
+	subs	$bsz,$bsz,#8
+	bhi	.Loop_block
+
+	str	$inp,[sp,#476]
+
+	bl	KeccakF1600_int
+
+	add	r14,sp,#456
+	ldmia	r14,{r6-r12,r14}	@ restore constants and variables
+	b	.Loop_absorb
+
+.align	4
+.Labsorbed:
+	add	$inp,sp,#$A[1][0]
+	ldmia	sp,      {@C[0]-@C[9]}
+	stmia	$A_flat!,{@C[0]-@C[9]}	@ return A[5][5]
+	ldmia	$inp!,   {@C[0]-@C[9]}
+	stmia	$A_flat!,{@C[0]-@C[9]}
+	ldmia	$inp!,   {@C[0]-@C[9]}
+	stmia	$A_flat!,{@C[0]-@C[9]}
+	ldmia	$inp!,   {@C[0]-@C[9]}
+	stmia	$A_flat!,{@C[0]-@C[9]}
+	ldmia	$inp,    {@C[0]-@C[9]}
+	stmia	$A_flat, {@C[0]-@C[9]}
+
+.Labsorb_abort:
+	add	sp,sp,#456+32
+	mov	r0,$len			@ return value
+	ldmia	sp!,{r4-r12,pc}
+.size	SHA3_absorb,.-SHA3_absorb
+___
+}
+{ my ($out,$len,$A_flat,$bsz) = map("r$_", (4,5,10,12));
+
+$code.=<<___;
+.global	SHA3_squeeze
+.type	SHA3_squeeze,%function
+.align	5
+SHA3_squeeze:
+	stmdb	sp!,{r0,r3-r10,lr}
+
+	mov	$A_flat,r0
+	mov	$out,r1
+	mov	$len,r2
+	mov	$bsz,r3
+
+#ifdef	__thumb2__
+	mov	r9,#0x00ff00ff
+	mov	r8,#0x0f0f0f0f
+	mov	r7,#0x33333333
+	mov	r6,#0x55555555
+#else
+	mov	r6,#0x11		@ compose constants
+	mov	r8,#0x0f
+	mov	r9,#0xff
+	orr	r6,r6,r6,lsl#8
+	orr	r8,r8,r8,lsl#8
+	orr	r6,r6,r6,lsl#16		@ 0x11111111
+	orr	r9,r9,r9,lsl#16		@ 0x00ff00ff
+	orr	r8,r8,r8,lsl#16		@ 0x0f0f0f0f
+	orr	r7,r6,r6,lsl#1		@ 0x33333333
+	orr	r6,r6,r6,lsl#2		@ 0x55555555
+#endif
+	stmdb	sp!,{r6-r9}
+
+	mov	r14,$A_flat
+	b	.Loop_squeeze
+
+.align	4
+.Loop_squeeze:
+	ldmia	$A_flat!,{r0,r1}	@ A_flat[i++]
+
+	lsl	r2,r0,#16
+	lsl	r3,r1,#16		@ r3 = r1 << 16
+	lsr	r2,r2,#16		@ r2 = r0 & 0x0000ffff
+	lsr	r1,r1,#16
+	lsr	r0,r0,#16		@ r0 = r0 >> 16
+	lsl	r1,r1,#16		@ r1 = r1 & 0xffff0000
+
+	orr	r2,r2,r2,lsl#8
+	orr	r3,r3,r3,lsr#8
+	orr	r0,r0,r0,lsl#8
+	orr	r1,r1,r1,lsr#8
+	and	r2,r2,r9		@ &=0x00ff00ff
+	and	r3,r3,r9,lsl#8		@ &=0xff00ff00
+	and	r0,r0,r9		@ &=0x00ff00ff
+	and	r1,r1,r9,lsl#8		@ &=0xff00ff00
+	orr	r2,r2,r2,lsl#4
+	orr	r3,r3,r3,lsr#4
+	orr	r0,r0,r0,lsl#4
+	orr	r1,r1,r1,lsr#4
+	and	r2,r2,r8		@ &=0x0f0f0f0f
+	and	r3,r3,r8,lsl#4		@ &=0xf0f0f0f0
+	and	r0,r0,r8		@ &=0x0f0f0f0f
+	and	r1,r1,r8,lsl#4		@ &=0xf0f0f0f0
+	orr	r2,r2,r2,lsl#2
+	orr	r3,r3,r3,lsr#2
+	orr	r0,r0,r0,lsl#2
+	orr	r1,r1,r1,lsr#2
+	and	r2,r2,r7		@ &=0x33333333
+	and	r3,r3,r7,lsl#2		@ &=0xcccccccc
+	and	r0,r0,r7		@ &=0x33333333
+	and	r1,r1,r7,lsl#2		@ &=0xcccccccc
+	orr	r2,r2,r2,lsl#1
+	orr	r3,r3,r3,lsr#1
+	orr	r0,r0,r0,lsl#1
+	orr	r1,r1,r1,lsr#1
+	and	r2,r2,r6		@ &=0x55555555
+	and	r3,r3,r6,lsl#1		@ &=0xaaaaaaaa
+	and	r0,r0,r6		@ &=0x55555555
+	and	r1,r1,r6,lsl#1		@ &=0xaaaaaaaa
+
+	orr	r2,r2,r3
+	orr	r0,r0,r1
+
+	cmp	$len,#8
+	blo	.Lsqueeze_tail
+	lsr	r1,r2,#8
+	strb	r2,[$out],#1
+	lsr	r3,r2,#16
+	strb	r1,[$out],#1
+	lsr	r2,r2,#24
+	strb	r3,[$out],#1
+	strb	r2,[$out],#1
+
+	lsr	r1,r0,#8
+	strb	r0,[$out],#1
+	lsr	r3,r0,#16
+	strb	r1,[$out],#1
+	lsr	r0,r0,#24
+	strb	r3,[$out],#1
+	strb	r0,[$out],#1
+	subs	$len,$len,#8
+	beq	.Lsqueeze_done
+
+	subs	$bsz,$bsz,#8		@ bsz -= 8
+	bhi	.Loop_squeeze
+
+	mov	r0,r14			@ original $A_flat
+
+	bl	KeccakF1600
+
+	ldmia	sp,{r6-r10,r12}		@ restore constants and variables
+	mov	r14,$A_flat
+	b	.Loop_squeeze
+
+.align	4
+.Lsqueeze_tail:
+	strb	r2,[$out],#1
+	lsr	r2,r2,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done
+	strb	r2,[$out],#1
+	lsr	r2,r2,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done
+	strb	r2,[$out],#1
+	lsr	r2,r2,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done
+	strb	r2,[$out],#1
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done
+
+	strb	r0,[$out],#1
+	lsr	r0,r0,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done
+	strb	r0,[$out],#1
+	lsr	r0,r0,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done
+	strb	r0,[$out]
+	b	.Lsqueeze_done
+
+.align	4
+.Lsqueeze_done:
+	add	sp,sp,#24
+	ldmia	sp!,{r4-r10,pc}
+.size	SHA3_squeeze,.-SHA3_squeeze
+___
+}
+
+$code.=<<___;
+#if __ARM_MAX_ARCH__>=7
+.fpu	neon
+
+.type	iotas64, %object
+.align 5
+iotas64:
+	.quad	0x0000000000000001
+	.quad	0x0000000000008082
+	.quad	0x800000000000808a
+	.quad	0x8000000080008000
+	.quad	0x000000000000808b
+	.quad	0x0000000080000001
+	.quad	0x8000000080008081
+	.quad	0x8000000000008009
+	.quad	0x000000000000008a
+	.quad	0x0000000000000088
+	.quad	0x0000000080008009
+	.quad	0x000000008000000a
+	.quad	0x000000008000808b
+	.quad	0x800000000000008b
+	.quad	0x8000000000008089
+	.quad	0x8000000000008003
+	.quad	0x8000000000008002
+	.quad	0x8000000000000080
+	.quad	0x000000000000800a
+	.quad	0x800000008000000a
+	.quad	0x8000000080008081
+	.quad	0x8000000000008080
+	.quad	0x0000000080000001
+	.quad	0x8000000080008008
+.size	iotas64,.-iotas64
+
+.type	KeccakF1600_neon, %function
+.align	5
+KeccakF1600_neon:
+	add	r1, r0, #16
+	adr	r2, iotas64
+	mov	r3, #24			@ loop counter
+	b	.Loop_neon
+
+.align	4
+.Loop_neon:
+	@ Theta
+	vst1.64		{q4},  [r0:64]		@ offload A[0..1][4]
+	veor		q13, q0,  q5		@ A[0..1][0]^A[2..3][0]
+	vst1.64		{d18}, [r1:64]		@ offload A[2][4]
+	veor		q14, q1,  q6		@ A[0..1][1]^A[2..3][1]
+	veor		q15, q2,  q7		@ A[0..1][2]^A[2..3][2]
+	veor		d26, d26, d27		@ C[0]=A[0][0]^A[1][0]^A[2][0]^A[3][0]
+	veor		d27, d28, d29		@ C[1]=A[0][1]^A[1][1]^A[2][1]^A[3][1]
+	veor		q14, q3,  q8		@ A[0..1][3]^A[2..3][3]
+	veor		q4,  q4,  q9		@ A[0..1][4]^A[2..3][4]
+	veor		d30, d30, d31		@ C[2]=A[0][2]^A[1][2]^A[2][2]^A[3][2]
+	veor		d31, d28, d29		@ C[3]=A[0][3]^A[1][3]^A[2][3]^A[3][3]
+	veor		d25, d8,  d9		@ C[4]=A[0][4]^A[1][4]^A[2][4]^A[3][4]
+	veor		q13, q13, q10		@ C[0..1]^=A[4][0..1]
+	veor		q14, q15, q11		@ C[2..3]^=A[4][2..3]
+	veor		d25, d25, d24		@ C[4]^=A[4][4]
+
+	vadd.u64	q4,  q13, q13		@ C[0..1]<<1
+	vadd.u64	q15, q14, q14		@ C[2..3]<<1
+	vadd.u64	d18, d25, d25		@ C[4]<<1
+	vsri.u64	q4,  q13, #63		@ ROL64(C[0..1],1)
+	vsri.u64	q15, q14, #63		@ ROL64(C[2..3],1)
+	vsri.u64	d18, d25, #63		@ ROL64(C[4],1)
+	veor		d25, d25, d9		@ D[0] = C[4] ^= ROL64(C[1],1)
+	veor		q13, q13, q15		@ D[1..2] = C[0..1] ^ ROL64(C[2..3],1)
+	veor		d28, d28, d18		@ D[3] = C[2] ^= ROL64(C[4],1)
+	veor		d29, d29, d8		@ D[4] = C[3] ^= ROL64(C[0],1)
+
+	veor		d0,  d0,  d25		@ A[0][0] ^= C[4]
+	veor		d1,  d1,  d25		@ A[1][0] ^= C[4]
+	veor		d10, d10, d25		@ A[2][0] ^= C[4]
+	veor		d11, d11, d25		@ A[3][0] ^= C[4]
+	veor		d20, d20, d25		@ A[4][0] ^= C[4]
+
+	veor		d2,  d2,  d26		@ A[0][1] ^= D[1]
+	veor		d3,  d3,  d26		@ A[1][1] ^= D[1]
+	veor		d12, d12, d26		@ A[2][1] ^= D[1]
+	veor		d13, d13, d26		@ A[3][1] ^= D[1]
+	veor		d21, d21, d26		@ A[4][1] ^= D[1]
+	vmov		d26, d27
+
+	veor		d6,  d6,  d28		@ A[0][3] ^= C[2]
+	veor		d7,  d7,  d28		@ A[1][3] ^= C[2]
+	veor		d16, d16, d28		@ A[2][3] ^= C[2]
+	veor		d17, d17, d28		@ A[3][3] ^= C[2]
+	veor		d23, d23, d28		@ A[4][3] ^= C[2]
+	vld1.64		{q4},  [r0:64]		@ restore A[0..1][4]
+	vmov		d28, d29
+
+	vld1.64		{d18}, [r1:64]		@ restore A[2][4]
+	veor		q2,  q2,  q13		@ A[0..1][2] ^= D[2]
+	veor		q7,  q7,  q13		@ A[2..3][2] ^= D[2]
+	veor		d22, d22, d27		@ A[4][2]    ^= D[2]
+
+	veor		q4,  q4,  q14		@ A[0..1][4] ^= C[3]
+	veor		q9,  q9,  q14		@ A[2..3][4] ^= C[3]
+	veor		d24, d24, d29		@ A[4][4]    ^= C[3]
+
+	@ Rho + Pi
+	vmov		d26, d2			@ C[1] = A[0][1]
+	vshl.u64	d2,  d3,  #44
+	vmov		d27, d4			@ C[2] = A[0][2]
+	vshl.u64	d4,  d14, #43
+	vmov		d28, d6			@ C[3] = A[0][3]
+	vshl.u64	d6,  d17, #21
+	vmov		d29, d8			@ C[4] = A[0][4]
+	vshl.u64	d8,  d24, #14
+	vsri.u64	d2,  d3,  #64-44	@ A[0][1] = ROL64(A[1][1], rhotates[1][1])
+	vsri.u64	d4,  d14, #64-43	@ A[0][2] = ROL64(A[2][2], rhotates[2][2])
+	vsri.u64	d6,  d17, #64-21	@ A[0][3] = ROL64(A[3][3], rhotates[3][3])
+	vsri.u64	d8,  d24, #64-14	@ A[0][4] = ROL64(A[4][4], rhotates[4][4])
+
+	vshl.u64	d3,  d9,  #20
+	vshl.u64	d14, d16, #25
+	vshl.u64	d17, d15, #15
+	vshl.u64	d24, d21, #2
+	vsri.u64	d3,  d9,  #64-20	@ A[1][1] = ROL64(A[1][4], rhotates[1][4])
+	vsri.u64	d14, d16, #64-25	@ A[2][2] = ROL64(A[2][3], rhotates[2][3])
+	vsri.u64	d17, d15, #64-15	@ A[3][3] = ROL64(A[3][2], rhotates[3][2])
+	vsri.u64	d24, d21, #64-2		@ A[4][4] = ROL64(A[4][1], rhotates[4][1])
+
+	vshl.u64	d9,  d22, #61
+	@ vshl.u64	d16, d19, #8
+	vshl.u64	d15, d12, #10
+	vshl.u64	d21, d7,  #55
+	vsri.u64	d9,  d22, #64-61	@ A[1][4] = ROL64(A[4][2], rhotates[4][2])
+	vext.8		d16, d19, d19, #8-1	@ A[2][3] = ROL64(A[3][4], rhotates[3][4])
+	vsri.u64	d15, d12, #64-10	@ A[3][2] = ROL64(A[2][1], rhotates[2][1])
+	vsri.u64	d21, d7,  #64-55	@ A[4][1] = ROL64(A[1][3], rhotates[1][3])
+
+	vshl.u64	d22, d18, #39
+	@ vshl.u64	d19, d23, #56
+	vshl.u64	d12, d5,  #6
+	vshl.u64	d7,  d13, #45
+	vsri.u64	d22, d18, #64-39	@ A[4][2] = ROL64(A[2][4], rhotates[2][4])
+	vext.8		d19, d23, d23, #8-7	@ A[3][4] = ROL64(A[4][3], rhotates[4][3])
+	vsri.u64	d12, d5,  #64-6		@ A[2][1] = ROL64(A[1][2], rhotates[1][2])
+	vsri.u64	d7,  d13, #64-45	@ A[1][3] = ROL64(A[3][1], rhotates[3][1])
+
+	vshl.u64	d18, d20, #18
+	vshl.u64	d23, d11, #41
+	vshl.u64	d5,  d10, #3
+	vshl.u64	d13, d1,  #36
+	vsri.u64	d18, d20, #64-18	@ A[2][4] = ROL64(A[4][0], rhotates[4][0])
+	vsri.u64	d23, d11, #64-41	@ A[4][3] = ROL64(A[3][0], rhotates[3][0])
+	vsri.u64	d5,  d10, #64-3		@ A[1][2] = ROL64(A[2][0], rhotates[2][0])
+	vsri.u64	d13, d1,  #64-36	@ A[3][1] = ROL64(A[1][0], rhotates[1][0])
+
+	vshl.u64	d1,  d28, #28
+	vshl.u64	d10, d26, #1
+	vshl.u64	d11, d29, #27
+	vshl.u64	d20, d27, #62
+	vsri.u64	d1,  d28, #64-28	@ A[1][0] = ROL64(C[3],    rhotates[0][3])
+	vsri.u64	d10, d26, #64-1		@ A[2][0] = ROL64(C[1],    rhotates[0][1])
+	vsri.u64	d11, d29, #64-27	@ A[3][0] = ROL64(C[4],    rhotates[0][4])
+	vsri.u64	d20, d27, #64-62	@ A[4][0] = ROL64(C[2],    rhotates[0][2])
+
+	@ Chi + Iota
+	vbic		q13, q2,  q1
+	vbic		q14, q3,  q2
+	vbic		q15, q4,  q3
+	veor		q13, q13, q0		@ A[0..1][0] ^ (~A[0..1][1] & A[0..1][2])
+	veor		q14, q14, q1		@ A[0..1][1] ^ (~A[0..1][2] & A[0..1][3])
+	veor		q2,  q2,  q15		@ A[0..1][2] ^= (~A[0..1][3] & A[0..1][4])
+	vst1.64		{q13}, [r0:64]		@ offload A[0..1][0]
+	vbic		q13, q0,  q4
+	vbic		q15, q1,  q0
+	vmov		q1,  q14		@ A[0..1][1]
+	veor		q3,  q3,  q13		@ A[0..1][3] ^= (~A[0..1][4] & A[0..1][0])
+	veor		q4,  q4,  q15		@ A[0..1][4] ^= (~A[0..1][0] & A[0..1][1])
+
+	vbic		q13, q7,  q6
+	vmov		q0,  q5			@ A[2..3][0]
+	vbic		q14, q8,  q7
+	vmov		q15, q6			@ A[2..3][1]
+	veor		q5,  q5,  q13		@ A[2..3][0] ^= (~A[2..3][1] & A[2..3][2])
+	vbic		q13, q9,  q8
+	veor		q6,  q6,  q14		@ A[2..3][1] ^= (~A[2..3][2] & A[2..3][3])
+	vbic		q14, q0,  q9
+	veor		q7,  q7,  q13		@ A[2..3][2] ^= (~A[2..3][3] & A[2..3][4])
+	vbic		q13, q15, q0
+	veor		q8,  q8,  q14		@ A[2..3][3] ^= (~A[2..3][4] & A[2..3][0])
+	vmov		q14, q10		@ A[4][0..1]
+	veor		q9,  q9,  q13		@ A[2..3][4] ^= (~A[2..3][0] & A[2..3][1])
+
+	vld1.64		d25, [r2:64]!		@ Iota[i++]
+	vbic		d26, d22, d21
+	vbic		d27, d23, d22
+	vld1.64		{q0}, [r0:64]		@ restore A[0..1][0]
+	veor		d20, d20, d26		@ A[4][0] ^= (~A[4][1] & A[4][2])
+	vbic		d26, d24, d23
+	veor		d21, d21, d27		@ A[4][1] ^= (~A[4][2] & A[4][3])
+	vbic		d27, d28, d24
+	veor		d22, d22, d26		@ A[4][2] ^= (~A[4][3] & A[4][4])
+	vbic		d26, d29, d28
+	veor		d23, d23, d27		@ A[4][3] ^= (~A[4][4] & A[4][0])
+	veor		d0,  d0,  d25		@ A[0][0] ^= Iota[i]
+	veor		d24, d24, d26		@ A[4][4] ^= (~A[4][0] & A[4][1])
+
+	subs	r3, r3, #1
+	bne	.Loop_neon
+
+	bx	lr
+.size	KeccakF1600_neon,.-KeccakF1600_neon
+
+.global	SHA3_absorb_neon
+.type	SHA3_absorb_neon, %function
+.align	5
+SHA3_absorb_neon:
+	stmdb	sp!, {r4-r6,lr}
+	vstmdb	sp!, {d8-d15}
+
+	mov	r4, r1			@ inp
+	mov	r5, r2			@ len
+	mov	r6, r3			@ bsz
+
+	vld1.32	{d0}, [r0:64]!		@ A[0][0]
+	vld1.32	{d2}, [r0:64]!		@ A[0][1]
+	vld1.32	{d4}, [r0:64]!		@ A[0][2]
+	vld1.32	{d6}, [r0:64]!		@ A[0][3]
+	vld1.32	{d8}, [r0:64]!		@ A[0][4]
+
+	vld1.32	{d1}, [r0:64]!		@ A[1][0]
+	vld1.32	{d3}, [r0:64]!		@ A[1][1]
+	vld1.32	{d5}, [r0:64]!		@ A[1][2]
+	vld1.32	{d7}, [r0:64]!		@ A[1][3]
+	vld1.32	{d9}, [r0:64]!		@ A[1][4]
+
+	vld1.32	{d10}, [r0:64]!		@ A[2][0]
+	vld1.32	{d12}, [r0:64]!		@ A[2][1]
+	vld1.32	{d14}, [r0:64]!		@ A[2][2]
+	vld1.32	{d16}, [r0:64]!		@ A[2][3]
+	vld1.32	{d18}, [r0:64]!		@ A[2][4]
+
+	vld1.32	{d11}, [r0:64]!		@ A[3][0]
+	vld1.32	{d13}, [r0:64]!		@ A[3][1]
+	vld1.32	{d15}, [r0:64]!		@ A[3][2]
+	vld1.32	{d17}, [r0:64]!		@ A[3][3]
+	vld1.32	{d19}, [r0:64]!		@ A[3][4]
+
+	vld1.32	{d20-d23}, [r0:64]!	@ A[4][0..3]
+	vld1.32	{d24}, [r0:64]		@ A[4][4]
+	sub	r0, r0, #24*8		@ rewind
+	b	.Loop_absorb_neon
+
+.align	4
+.Loop_absorb_neon:
+	subs	r12, r5, r6		@ len - bsz
+	blo	.Labsorbed_neon
+	mov	r5, r12
+
+	vld1.8	{d31}, [r4]!		@ endian-neutral loads...
+	cmp	r6, #8*2
+	veor	d0, d0, d31		@ A[0][0] ^= *inp++
+	blo	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	veor	d2, d2, d31		@ A[0][1] ^= *inp++
+	beq	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	cmp	r6, #8*4
+	veor	d4, d4, d31		@ A[0][2] ^= *inp++
+	blo	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	veor	d6, d6, d31		@ A[0][3] ^= *inp++
+	beq	.Lprocess_neon
+	vld1.8	{d31},[r4]!
+	cmp	r6, #8*6
+	veor	d8, d8, d31		@ A[0][4] ^= *inp++
+	blo	.Lprocess_neon
+
+	vld1.8	{d31}, [r4]!
+	veor	d1, d1, d31		@ A[1][0] ^= *inp++
+	beq	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	cmp	r6, #8*8
+	veor	d3, d3, d31		@ A[1][1] ^= *inp++
+	blo	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	veor	d5, d5, d31		@ A[1][2] ^= *inp++
+	beq	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	cmp	r6, #8*10
+	veor	d7, d7, d31		@ A[1][3] ^= *inp++
+	blo	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	veor	d9, d9, d31		@ A[1][4] ^= *inp++
+	beq	.Lprocess_neon
+
+	vld1.8	{d31}, [r4]!
+	cmp	r6, #8*12
+	veor	d10, d10, d31		@ A[2][0] ^= *inp++
+	blo	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	veor	d12, d12, d31		@ A[2][1] ^= *inp++
+	beq	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	cmp	r6, #8*14
+	veor	d14, d14, d31		@ A[2][2] ^= *inp++
+	blo	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	veor	d16, d16, d31		@ A[2][3] ^= *inp++
+	beq	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	cmp	r6, #8*16
+	veor	d18, d18, d31		@ A[2][4] ^= *inp++
+	blo	.Lprocess_neon
+
+	vld1.8	{d31}, [r4]!
+	veor	d11, d11, d31		@ A[3][0] ^= *inp++
+	beq	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	cmp	r6, #8*18
+	veor	d13, d13, d31		@ A[3][1] ^= *inp++
+	blo	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	veor	d15, d15, d31		@ A[3][2] ^= *inp++
+	beq	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	cmp	r6, #8*20
+	veor	d17, d17, d31		@ A[3][3] ^= *inp++
+	blo	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	veor	d19, d19, d31		@ A[3][4] ^= *inp++
+	beq	.Lprocess_neon
+
+	vld1.8	{d31}, [r4]!
+	cmp	r6, #8*22
+	veor	d20, d20, d31		@ A[4][0] ^= *inp++
+	blo	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	veor	d21, d21, d31		@ A[4][1] ^= *inp++
+	beq	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	cmp	r6, #8*24
+	veor	d22, d22, d31		@ A[4][2] ^= *inp++
+	blo	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	veor	d23, d23, d31		@ A[4][3] ^= *inp++
+	beq	.Lprocess_neon
+	vld1.8	{d31}, [r4]!
+	veor	d24, d24, d31		@ A[4][4] ^= *inp++
+
+.Lprocess_neon:
+	bl	KeccakF1600_neon
+	b 	.Loop_absorb_neon
+
+.align	4
+.Labsorbed_neon:
+	vst1.32	{d0}, [r0:64]!		@ A[0][0..4]
+	vst1.32	{d2}, [r0:64]!
+	vst1.32	{d4}, [r0:64]!
+	vst1.32	{d6}, [r0:64]!
+	vst1.32	{d8}, [r0:64]!
+
+	vst1.32	{d1}, [r0:64]!		@ A[1][0..4]
+	vst1.32	{d3}, [r0:64]!
+	vst1.32	{d5}, [r0:64]!
+	vst1.32	{d7}, [r0:64]!
+	vst1.32	{d9}, [r0:64]!
+
+	vst1.32	{d10}, [r0:64]!		@ A[2][0..4]
+	vst1.32	{d12}, [r0:64]!
+	vst1.32	{d14}, [r0:64]!
+	vst1.32	{d16}, [r0:64]!
+	vst1.32	{d18}, [r0:64]!
+
+	vst1.32	{d11}, [r0:64]!		@ A[3][0..4]
+	vst1.32	{d13}, [r0:64]!
+	vst1.32	{d15}, [r0:64]!
+	vst1.32	{d17}, [r0:64]!
+	vst1.32	{d19}, [r0:64]!
+
+	vst1.32	{d20-d23}, [r0:64]!	@ A[4][0..4]
+	vst1.32	{d24}, [r0:64]
+
+	mov	r0, r5			@ return value
+	vldmia	sp!, {d8-d15}
+	ldmia	sp!, {r4-r6,pc}
+.size	SHA3_absorb_neon,.-SHA3_absorb_neon
+
+.global	SHA3_squeeze_neon
+.type	SHA3_squeeze_neon, %function
+.align	5
+SHA3_squeeze_neon:
+	stmdb	sp!, {r4-r6,lr}
+
+	mov	r4, r1			@ out
+	mov	r5, r2			@ len
+	mov	r6, r3			@ bsz
+	mov	r12, r0			@ A_flat
+	mov	r14, r3			@ bsz
+	b	.Loop_squeeze_neon
+
+.align	4
+.Loop_squeeze_neon:
+	cmp	r5, #8
+	blo	.Lsqueeze_neon_tail
+	vld1.32	{d0}, [r12]!
+	vst1.8	{d0}, [r4]!		@ endian-neutral store
+
+	subs	r5, r5, #8		@ len -= 8
+	beq	.Lsqueeze_neon_done
+
+	subs	r14, r14, #8		@ bsz -= 8
+	bhi	.Loop_squeeze_neon
+
+	vstmdb	sp!,  {d8-d15}
+
+	vld1.32	{d0}, [r0:64]!		@ A[0][0..4]
+	vld1.32	{d2}, [r0:64]!
+	vld1.32	{d4}, [r0:64]!
+	vld1.32	{d6}, [r0:64]!
+	vld1.32	{d8}, [r0:64]!
+
+	vld1.32	{d1}, [r0:64]!		@ A[1][0..4]
+	vld1.32	{d3}, [r0:64]!
+	vld1.32	{d5}, [r0:64]!
+	vld1.32	{d7}, [r0:64]!
+	vld1.32	{d9}, [r0:64]!
+
+	vld1.32	{d10}, [r0:64]!		@ A[2][0..4]
+	vld1.32	{d12}, [r0:64]!
+	vld1.32	{d14}, [r0:64]!
+	vld1.32	{d16}, [r0:64]!
+	vld1.32	{d18}, [r0:64]!
+
+	vld1.32	{d11}, [r0:64]!		@ A[3][0..4]
+	vld1.32	{d13}, [r0:64]!
+	vld1.32	{d15}, [r0:64]!
+	vld1.32	{d17}, [r0:64]!
+	vld1.32	{d19}, [r0:64]!
+
+	vld1.32	{d20-d23}, [r0:64]!	@ A[4][0..4]
+	vld1.32	{d24}, [r0:64]
+	sub	r0, r0, #24*8		@ rewind
+
+	bl	KeccakF1600_neon
+
+	mov	r12, r0			@ A_flat
+	vst1.32	{d0}, [r0:64]!		@ A[0][0..4]
+	vst1.32	{d2}, [r0:64]!
+	vst1.32	{d4}, [r0:64]!
+	vst1.32	{d6}, [r0:64]!
+	vst1.32	{d8}, [r0:64]!
+
+	vst1.32	{d1}, [r0:64]!		@ A[1][0..4]
+	vst1.32	{d3}, [r0:64]!
+	vst1.32	{d5}, [r0:64]!
+	vst1.32	{d7}, [r0:64]!
+	vst1.32	{d9}, [r0:64]!
+
+	vst1.32	{d10}, [r0:64]!		@ A[2][0..4]
+	vst1.32	{d12}, [r0:64]!
+	vst1.32	{d14}, [r0:64]!
+	vst1.32	{d16}, [r0:64]!
+	vst1.32	{d18}, [r0:64]!
+
+	vst1.32	{d11}, [r0:64]!		@ A[3][0..4]
+	vst1.32	{d13}, [r0:64]!
+	vst1.32	{d15}, [r0:64]!
+	vst1.32	{d17}, [r0:64]!
+	vst1.32	{d19}, [r0:64]!
+
+	vst1.32	{d20-d23}, [r0:64]!	@ A[4][0..4]
+	mov	r14, r6			@ bsz
+	vst1.32	{d24}, [r0:64]
+	mov	r0,  r12		@ rewind
+
+	vldmia	sp!, {d8-d15}
+	b	.Loop_squeeze_neon
+
+.align	4
+.Lsqueeze_neon_tail:
+	ldmia	r12, {r2,r3}
+	cmp	r5, #2
+	strb	r2, [r4],#1		@ endian-neutral store
+	lsr	r2, r2, #8
+	blo	.Lsqueeze_neon_done
+	strb	r2, [r4], #1
+	lsr	r2, r2, #8
+	beq	.Lsqueeze_neon_done
+	strb	r2, [r4], #1
+	lsr	r2, r2, #8
+	cmp	r5, #4
+	blo	.Lsqueeze_neon_done
+	strb	r2, [r4], #1
+	beq	.Lsqueeze_neon_done
+
+	strb	r3, [r4], #1
+	lsr	r3, r3, #8
+	cmp	r5, #6
+	blo	.Lsqueeze_neon_done
+	strb	r3, [r4], #1
+	lsr	r3, r3, #8
+	beq	.Lsqueeze_neon_done
+	strb	r3, [r4], #1
+
+.Lsqueeze_neon_done:
+	ldmia	sp!, {r4-r6,pc}
+.size	SHA3_squeeze_neon,.-SHA3_squeeze_neon
+#endif
+.asciz	"Keccak-1600 absorb and squeeze for ARMv4/NEON, CRYPTOGAMS by <appro\@openssl.org>"
+.align	2
+___
+
+{
+    my %ldr, %str;
+
+    sub ldrd {
+	my ($mnemonic,$half,$reg,$ea) = @_;
+	my $op = $mnemonic eq "ldr" ? \%ldr : \%str;
+
+	if ($half eq "l") {
+	    $$op{reg} = $reg;
+	    $$op{ea}  = $ea;
+	    sprintf "#ifndef	__thumb2__\n"	.
+		    "	%s\t%s,%s\n"		.
+		    "#endif", $mnemonic,$reg,$ea;
+	} else {
+	    sprintf "#ifndef	__thumb2__\n"	.
+		    "	%s\t%s,%s\n"		.
+		    "#else\n"			.
+		    "	%sd\t%s,%s,%s\n"	.
+		    "#endif",	$mnemonic,$reg,$ea,
+				$mnemonic,$$op{reg},$reg,$$op{ea};
+	}
+    }
+}
+
+foreach (split($/,$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	s/^\s+(ldr|str)\.([lh])\s+(r[0-9]+),\s*(\[.*)/ldrd($1,$2,$3,$4)/ge or
+	s/\b(ror|ls[rl])\s+(r[0-9]+.*)#/mov	$2$1#/g or
+	s/\bret\b/bx	lr/g		or
+	s/\bbx\s+lr\b/.word\t0xe12fff1e/g;	# make it possible to compile with -march=armv4
+
+	print $_,"\n";
+}
+
+close STDOUT; # enforce flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-armv8.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-armv8.pl
new file mode 100755
index 000000000..a3117bd75
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-armv8.pl
@@ -0,0 +1,880 @@
+#!/usr/bin/env perl
+# Copyright 2017-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# Keccak-1600 for ARMv8.
+#
+# June 2017.
+#
+# This is straightforward KECCAK_1X_ALT implementation. It makes no
+# sense to attempt SIMD/NEON implementation for following reason.
+# 64-bit lanes of vector registers can't be addressed as easily as in
+# 32-bit mode. This means that 64-bit NEON is bound to be slower than
+# 32-bit NEON, and this implementation is faster than 32-bit NEON on
+# same processor. Even though it takes more scalar xor's and andn's,
+# it gets compensated by availability of rotate. Not to forget that
+# most processors achieve higher issue rate with scalar instructions.
+#
+# February 2018.
+#
+# Add hardware-assisted ARMv8.2 implementation. It's KECCAK_1X_ALT
+# variant with register permutation/rotation twist that allows to
+# eliminate copies to temporary registers. If you look closely you'll
+# notice that it uses only one lane of vector registers. The new
+# instructions effectively facilitate parallel hashing, which we don't
+# support [yet?]. But lowest-level core procedure is prepared for it.
+# The inner round is 67 [vector] instructions, so it's not actually
+# obvious that it will provide performance improvement [in serial
+# hash] as long as vector instructions issue rate is limited to 1 per
+# cycle...
+#
+######################################################################
+# Numbers are cycles per processed byte.
+#
+#		r=1088(*)
+#
+# Cortex-A53	13
+# Cortex-A57	12
+# X-Gene	14
+# Mongoose	10
+# Kryo		12
+# Denver	7.8
+# Apple A7	7.2
+#
+# (*)	Corresponds to SHA3-256. No improvement coefficients are listed
+#	because they vary too much from compiler to compiler. Newer
+#	compiler does much better and improvement varies from 5% on
+#	Cortex-A57 to 25% on Cortex-A53. While in comparison to older
+#	compiler this code is at least 2x faster...
+
+$flavour = shift;
+$output  = shift;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+die "can't locate arm-xlate.pl";
+
+open OUT,"| \"$^X\" $xlate $flavour $output";
+*STDOUT=*OUT;
+
+my @rhotates = ([  0,  1, 62, 28, 27 ],
+                [ 36, 44,  6, 55, 20 ],
+                [  3, 10, 43, 25, 39 ],
+                [ 41, 45, 15, 21,  8 ],
+                [ 18,  2, 61, 56, 14 ]);
+
+$code.=<<___;
+.text
+
+.align 8	// strategic alignment and padding that allows to use
+		// address value as loop termination condition...
+	.quad	0,0,0,0,0,0,0,0
+.type	iotas,%object
+iotas:
+	.quad	0x0000000000000001
+	.quad	0x0000000000008082
+	.quad	0x800000000000808a
+	.quad	0x8000000080008000
+	.quad	0x000000000000808b
+	.quad	0x0000000080000001
+	.quad	0x8000000080008081
+	.quad	0x8000000000008009
+	.quad	0x000000000000008a
+	.quad	0x0000000000000088
+	.quad	0x0000000080008009
+	.quad	0x000000008000000a
+	.quad	0x000000008000808b
+	.quad	0x800000000000008b
+	.quad	0x8000000000008089
+	.quad	0x8000000000008003
+	.quad	0x8000000000008002
+	.quad	0x8000000000000080
+	.quad	0x000000000000800a
+	.quad	0x800000008000000a
+	.quad	0x8000000080008081
+	.quad	0x8000000000008080
+	.quad	0x0000000080000001
+	.quad	0x8000000080008008
+.size	iotas,.-iotas
+___
+								{{{
+my @A = map([ "x$_", "x".($_+1), "x".($_+2), "x".($_+3), "x".($_+4) ],
+            (0, 5, 10, 15, 20));
+   $A[3][3] = "x25"; # x18 is reserved
+
+my @C = map("x$_", (26,27,28,30));
+
+$code.=<<___;
+.type	KeccakF1600_int,%function
+.align	5
+KeccakF1600_int:
+	adr	$C[2],iotas
+	.inst	0xd503233f			// paciasp
+	stp	$C[2],x30,[sp,#16]		// 32 bytes on top are mine
+	b	.Loop
+.align	4
+.Loop:
+	////////////////////////////////////////// Theta
+	eor	$C[0],$A[0][0],$A[1][0]
+	stp	$A[0][4],$A[1][4],[sp,#0]	// offload pair...
+	eor	$C[1],$A[0][1],$A[1][1]
+	eor	$C[2],$A[0][2],$A[1][2]
+	eor	$C[3],$A[0][3],$A[1][3]
+___
+	$C[4]=$A[0][4];
+	$C[5]=$A[1][4];
+$code.=<<___;
+	eor	$C[4],$A[0][4],$A[1][4]
+	eor	$C[0],$C[0],$A[2][0]
+	eor	$C[1],$C[1],$A[2][1]
+	eor	$C[2],$C[2],$A[2][2]
+	eor	$C[3],$C[3],$A[2][3]
+	eor	$C[4],$C[4],$A[2][4]
+	eor	$C[0],$C[0],$A[3][0]
+	eor	$C[1],$C[1],$A[3][1]
+	eor	$C[2],$C[2],$A[3][2]
+	eor	$C[3],$C[3],$A[3][3]
+	eor	$C[4],$C[4],$A[3][4]
+	eor	$C[0],$C[0],$A[4][0]
+	eor	$C[2],$C[2],$A[4][2]
+	eor	$C[1],$C[1],$A[4][1]
+	eor	$C[3],$C[3],$A[4][3]
+	eor	$C[4],$C[4],$A[4][4]
+
+	eor	$C[5],$C[0],$C[2],ror#63
+
+	eor	$A[0][1],$A[0][1],$C[5]
+	eor	$A[1][1],$A[1][1],$C[5]
+	eor	$A[2][1],$A[2][1],$C[5]
+	eor	$A[3][1],$A[3][1],$C[5]
+	eor	$A[4][1],$A[4][1],$C[5]
+
+	eor	$C[5],$C[1],$C[3],ror#63
+	eor	$C[2],$C[2],$C[4],ror#63
+	eor	$C[3],$C[3],$C[0],ror#63
+	eor	$C[4],$C[4],$C[1],ror#63
+
+	eor	$C[1],   $A[0][2],$C[5]		// mov	$C[1],$A[0][2]
+	eor	$A[1][2],$A[1][2],$C[5]
+	eor	$A[2][2],$A[2][2],$C[5]
+	eor	$A[3][2],$A[3][2],$C[5]
+	eor	$A[4][2],$A[4][2],$C[5]
+
+	eor	$A[0][0],$A[0][0],$C[4]
+	eor	$A[1][0],$A[1][0],$C[4]
+	eor	$A[2][0],$A[2][0],$C[4]
+	eor	$A[3][0],$A[3][0],$C[4]
+	eor	$A[4][0],$A[4][0],$C[4]
+___
+	$C[4]=undef;
+	$C[5]=undef;
+$code.=<<___;
+	ldp	$A[0][4],$A[1][4],[sp,#0]	// re-load offloaded data
+	eor	$C[0],   $A[0][3],$C[2]		// mov	$C[0],$A[0][3]
+	eor	$A[1][3],$A[1][3],$C[2]
+	eor	$A[2][3],$A[2][3],$C[2]
+	eor	$A[3][3],$A[3][3],$C[2]
+	eor	$A[4][3],$A[4][3],$C[2]
+
+	eor	$C[2],   $A[0][4],$C[3]		// mov	$C[2],$A[0][4]
+	eor	$A[1][4],$A[1][4],$C[3]
+	eor	$A[2][4],$A[2][4],$C[3]
+	eor	$A[3][4],$A[3][4],$C[3]
+	eor	$A[4][4],$A[4][4],$C[3]
+
+	////////////////////////////////////////// Rho+Pi
+	mov	$C[3],$A[0][1]
+	ror	$A[0][1],$A[1][1],#64-$rhotates[1][1]
+	//mov	$C[1],$A[0][2]
+	ror	$A[0][2],$A[2][2],#64-$rhotates[2][2]
+	//mov	$C[0],$A[0][3]
+	ror	$A[0][3],$A[3][3],#64-$rhotates[3][3]
+	//mov	$C[2],$A[0][4]
+	ror	$A[0][4],$A[4][4],#64-$rhotates[4][4]
+
+	ror	$A[1][1],$A[1][4],#64-$rhotates[1][4]
+	ror	$A[2][2],$A[2][3],#64-$rhotates[2][3]
+	ror	$A[3][3],$A[3][2],#64-$rhotates[3][2]
+	ror	$A[4][4],$A[4][1],#64-$rhotates[4][1]
+
+	ror	$A[1][4],$A[4][2],#64-$rhotates[4][2]
+	ror	$A[2][3],$A[3][4],#64-$rhotates[3][4]
+	ror	$A[3][2],$A[2][1],#64-$rhotates[2][1]
+	ror	$A[4][1],$A[1][3],#64-$rhotates[1][3]
+
+	ror	$A[4][2],$A[2][4],#64-$rhotates[2][4]
+	ror	$A[3][4],$A[4][3],#64-$rhotates[4][3]
+	ror	$A[2][1],$A[1][2],#64-$rhotates[1][2]
+	ror	$A[1][3],$A[3][1],#64-$rhotates[3][1]
+
+	ror	$A[2][4],$A[4][0],#64-$rhotates[4][0]
+	ror	$A[4][3],$A[3][0],#64-$rhotates[3][0]
+	ror	$A[1][2],$A[2][0],#64-$rhotates[2][0]
+	ror	$A[3][1],$A[1][0],#64-$rhotates[1][0]
+
+	ror	$A[1][0],$C[0],#64-$rhotates[0][3]
+	ror	$A[2][0],$C[3],#64-$rhotates[0][1]
+	ror	$A[3][0],$C[2],#64-$rhotates[0][4]
+	ror	$A[4][0],$C[1],#64-$rhotates[0][2]
+
+	////////////////////////////////////////// Chi+Iota
+	bic	$C[0],$A[0][2],$A[0][1]
+	bic	$C[1],$A[0][3],$A[0][2]
+	bic	$C[2],$A[0][0],$A[0][4]
+	bic	$C[3],$A[0][1],$A[0][0]
+	eor	$A[0][0],$A[0][0],$C[0]
+	bic	$C[0],$A[0][4],$A[0][3]
+	eor	$A[0][1],$A[0][1],$C[1]
+	 ldr	$C[1],[sp,#16]
+	eor	$A[0][3],$A[0][3],$C[2]
+	eor	$A[0][4],$A[0][4],$C[3]
+	eor	$A[0][2],$A[0][2],$C[0]
+	 ldr	$C[3],[$C[1]],#8		// Iota[i++]
+
+	bic	$C[0],$A[1][2],$A[1][1]
+	 tst	$C[1],#255			// are we done?
+	 str	$C[1],[sp,#16]
+	bic	$C[1],$A[1][3],$A[1][2]
+	bic	$C[2],$A[1][0],$A[1][4]
+	 eor	$A[0][0],$A[0][0],$C[3]		// A[0][0] ^= Iota
+	bic	$C[3],$A[1][1],$A[1][0]
+	eor	$A[1][0],$A[1][0],$C[0]
+	bic	$C[0],$A[1][4],$A[1][3]
+	eor	$A[1][1],$A[1][1],$C[1]
+	eor	$A[1][3],$A[1][3],$C[2]
+	eor	$A[1][4],$A[1][4],$C[3]
+	eor	$A[1][2],$A[1][2],$C[0]
+
+	bic	$C[0],$A[2][2],$A[2][1]
+	bic	$C[1],$A[2][3],$A[2][2]
+	bic	$C[2],$A[2][0],$A[2][4]
+	bic	$C[3],$A[2][1],$A[2][0]
+	eor	$A[2][0],$A[2][0],$C[0]
+	bic	$C[0],$A[2][4],$A[2][3]
+	eor	$A[2][1],$A[2][1],$C[1]
+	eor	$A[2][3],$A[2][3],$C[2]
+	eor	$A[2][4],$A[2][4],$C[3]
+	eor	$A[2][2],$A[2][2],$C[0]
+
+	bic	$C[0],$A[3][2],$A[3][1]
+	bic	$C[1],$A[3][3],$A[3][2]
+	bic	$C[2],$A[3][0],$A[3][4]
+	bic	$C[3],$A[3][1],$A[3][0]
+	eor	$A[3][0],$A[3][0],$C[0]
+	bic	$C[0],$A[3][4],$A[3][3]
+	eor	$A[3][1],$A[3][1],$C[1]
+	eor	$A[3][3],$A[3][3],$C[2]
+	eor	$A[3][4],$A[3][4],$C[3]
+	eor	$A[3][2],$A[3][2],$C[0]
+
+	bic	$C[0],$A[4][2],$A[4][1]
+	bic	$C[1],$A[4][3],$A[4][2]
+	bic	$C[2],$A[4][0],$A[4][4]
+	bic	$C[3],$A[4][1],$A[4][0]
+	eor	$A[4][0],$A[4][0],$C[0]
+	bic	$C[0],$A[4][4],$A[4][3]
+	eor	$A[4][1],$A[4][1],$C[1]
+	eor	$A[4][3],$A[4][3],$C[2]
+	eor	$A[4][4],$A[4][4],$C[3]
+	eor	$A[4][2],$A[4][2],$C[0]
+
+	bne	.Loop
+
+	ldr	x30,[sp,#24]
+	.inst	0xd50323bf			// autiasp
+	ret
+.size	KeccakF1600_int,.-KeccakF1600_int
+
+.type	KeccakF1600,%function
+.align	5
+KeccakF1600:
+	.inst	0xd503233f			// paciasp
+	stp	x29,x30,[sp,#-128]!
+	add	x29,sp,#0
+	stp	x19,x20,[sp,#16]
+	stp	x21,x22,[sp,#32]
+	stp	x23,x24,[sp,#48]
+	stp	x25,x26,[sp,#64]
+	stp	x27,x28,[sp,#80]
+	sub	sp,sp,#48
+
+	str	x0,[sp,#32]			// offload argument
+	mov	$C[0],x0
+	ldp	$A[0][0],$A[0][1],[x0,#16*0]
+	ldp	$A[0][2],$A[0][3],[$C[0],#16*1]
+	ldp	$A[0][4],$A[1][0],[$C[0],#16*2]
+	ldp	$A[1][1],$A[1][2],[$C[0],#16*3]
+	ldp	$A[1][3],$A[1][4],[$C[0],#16*4]
+	ldp	$A[2][0],$A[2][1],[$C[0],#16*5]
+	ldp	$A[2][2],$A[2][3],[$C[0],#16*6]
+	ldp	$A[2][4],$A[3][0],[$C[0],#16*7]
+	ldp	$A[3][1],$A[3][2],[$C[0],#16*8]
+	ldp	$A[3][3],$A[3][4],[$C[0],#16*9]
+	ldp	$A[4][0],$A[4][1],[$C[0],#16*10]
+	ldp	$A[4][2],$A[4][3],[$C[0],#16*11]
+	ldr	$A[4][4],[$C[0],#16*12]
+
+	bl	KeccakF1600_int
+
+	ldr	$C[0],[sp,#32]
+	stp	$A[0][0],$A[0][1],[$C[0],#16*0]
+	stp	$A[0][2],$A[0][3],[$C[0],#16*1]
+	stp	$A[0][4],$A[1][0],[$C[0],#16*2]
+	stp	$A[1][1],$A[1][2],[$C[0],#16*3]
+	stp	$A[1][3],$A[1][4],[$C[0],#16*4]
+	stp	$A[2][0],$A[2][1],[$C[0],#16*5]
+	stp	$A[2][2],$A[2][3],[$C[0],#16*6]
+	stp	$A[2][4],$A[3][0],[$C[0],#16*7]
+	stp	$A[3][1],$A[3][2],[$C[0],#16*8]
+	stp	$A[3][3],$A[3][4],[$C[0],#16*9]
+	stp	$A[4][0],$A[4][1],[$C[0],#16*10]
+	stp	$A[4][2],$A[4][3],[$C[0],#16*11]
+	str	$A[4][4],[$C[0],#16*12]
+
+	ldp	x19,x20,[x29,#16]
+	add	sp,sp,#48
+	ldp	x21,x22,[x29,#32]
+	ldp	x23,x24,[x29,#48]
+	ldp	x25,x26,[x29,#64]
+	ldp	x27,x28,[x29,#80]
+	ldp	x29,x30,[sp],#128
+	.inst	0xd50323bf			// autiasp
+	ret
+.size	KeccakF1600,.-KeccakF1600
+
+.globl	SHA3_absorb
+.type	SHA3_absorb,%function
+.align	5
+SHA3_absorb:
+	.inst	0xd503233f			// paciasp
+	stp	x29,x30,[sp,#-128]!
+	add	x29,sp,#0
+	stp	x19,x20,[sp,#16]
+	stp	x21,x22,[sp,#32]
+	stp	x23,x24,[sp,#48]
+	stp	x25,x26,[sp,#64]
+	stp	x27,x28,[sp,#80]
+	sub	sp,sp,#64
+
+	stp	x0,x1,[sp,#32]			// offload arguments
+	stp	x2,x3,[sp,#48]
+
+	mov	$C[0],x0			// uint64_t A[5][5]
+	mov	$C[1],x1			// const void *inp
+	mov	$C[2],x2			// size_t len
+	mov	$C[3],x3			// size_t bsz
+	ldp	$A[0][0],$A[0][1],[$C[0],#16*0]
+	ldp	$A[0][2],$A[0][3],[$C[0],#16*1]
+	ldp	$A[0][4],$A[1][0],[$C[0],#16*2]
+	ldp	$A[1][1],$A[1][2],[$C[0],#16*3]
+	ldp	$A[1][3],$A[1][4],[$C[0],#16*4]
+	ldp	$A[2][0],$A[2][1],[$C[0],#16*5]
+	ldp	$A[2][2],$A[2][3],[$C[0],#16*6]
+	ldp	$A[2][4],$A[3][0],[$C[0],#16*7]
+	ldp	$A[3][1],$A[3][2],[$C[0],#16*8]
+	ldp	$A[3][3],$A[3][4],[$C[0],#16*9]
+	ldp	$A[4][0],$A[4][1],[$C[0],#16*10]
+	ldp	$A[4][2],$A[4][3],[$C[0],#16*11]
+	ldr	$A[4][4],[$C[0],#16*12]
+	b	.Loop_absorb
+
+.align	4
+.Loop_absorb:
+	subs	$C[0],$C[2],$C[3]		// len - bsz
+	blo	.Labsorbed
+
+	str	$C[0],[sp,#48]			// save len - bsz
+___
+for (my $i=0; $i<24; $i+=2) {
+my $j = $i+1;
+$code.=<<___;
+	ldr	$C[0],[$C[1]],#8		// *inp++
+#ifdef	__AARCH64EB__
+	rev	$C[0],$C[0]
+#endif
+	eor	$A[$i/5][$i%5],$A[$i/5][$i%5],$C[0]
+	cmp	$C[3],#8*($i+2)
+	blo	.Lprocess_block
+	ldr	$C[0],[$C[1]],#8		// *inp++
+#ifdef	__AARCH64EB__
+	rev	$C[0],$C[0]
+#endif
+	eor	$A[$j/5][$j%5],$A[$j/5][$j%5],$C[0]
+	beq	.Lprocess_block
+___
+}
+$code.=<<___;
+	ldr	$C[0],[$C[1]],#8		// *inp++
+#ifdef	__AARCH64EB__
+	rev	$C[0],$C[0]
+#endif
+	eor	$A[4][4],$A[4][4],$C[0]
+
+.Lprocess_block:
+	str	$C[1],[sp,#40]			// save inp
+
+	bl	KeccakF1600_int
+
+	ldr	$C[1],[sp,#40]			// restore arguments
+	ldp	$C[2],$C[3],[sp,#48]
+	b	.Loop_absorb
+
+.align	4
+.Labsorbed:
+	ldr	$C[1],[sp,#32]
+	stp	$A[0][0],$A[0][1],[$C[1],#16*0]
+	stp	$A[0][2],$A[0][3],[$C[1],#16*1]
+	stp	$A[0][4],$A[1][0],[$C[1],#16*2]
+	stp	$A[1][1],$A[1][2],[$C[1],#16*3]
+	stp	$A[1][3],$A[1][4],[$C[1],#16*4]
+	stp	$A[2][0],$A[2][1],[$C[1],#16*5]
+	stp	$A[2][2],$A[2][3],[$C[1],#16*6]
+	stp	$A[2][4],$A[3][0],[$C[1],#16*7]
+	stp	$A[3][1],$A[3][2],[$C[1],#16*8]
+	stp	$A[3][3],$A[3][4],[$C[1],#16*9]
+	stp	$A[4][0],$A[4][1],[$C[1],#16*10]
+	stp	$A[4][2],$A[4][3],[$C[1],#16*11]
+	str	$A[4][4],[$C[1],#16*12]
+
+	mov	x0,$C[2]			// return value
+	ldp	x19,x20,[x29,#16]
+	add	sp,sp,#64
+	ldp	x21,x22,[x29,#32]
+	ldp	x23,x24,[x29,#48]
+	ldp	x25,x26,[x29,#64]
+	ldp	x27,x28,[x29,#80]
+	ldp	x29,x30,[sp],#128
+	.inst	0xd50323bf			// autiasp
+	ret
+.size	SHA3_absorb,.-SHA3_absorb
+___
+{
+my ($A_flat,$out,$len,$bsz) = map("x$_",(19..22));
+$code.=<<___;
+.globl	SHA3_squeeze
+.type	SHA3_squeeze,%function
+.align	5
+SHA3_squeeze:
+	.inst	0xd503233f			// paciasp
+	stp	x29,x30,[sp,#-48]!
+	add	x29,sp,#0
+	stp	x19,x20,[sp,#16]
+	stp	x21,x22,[sp,#32]
+
+	mov	$A_flat,x0			// put aside arguments
+	mov	$out,x1
+	mov	$len,x2
+	mov	$bsz,x3
+
+.Loop_squeeze:
+	ldr	x4,[x0],#8
+	cmp	$len,#8
+	blo	.Lsqueeze_tail
+#ifdef	__AARCH64EB__
+	rev	x4,x4
+#endif
+	str	x4,[$out],#8
+	subs	$len,$len,#8
+	beq	.Lsqueeze_done
+
+	subs	x3,x3,#8
+	bhi	.Loop_squeeze
+
+	mov	x0,$A_flat
+	bl	KeccakF1600
+	mov	x0,$A_flat
+	mov	x3,$bsz
+	b	.Loop_squeeze
+
+.align	4
+.Lsqueeze_tail:
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done
+	strb	w4,[$out],#1
+
+.Lsqueeze_done:
+	ldp	x19,x20,[sp,#16]
+	ldp	x21,x22,[sp,#32]
+	ldp	x29,x30,[sp],#48
+	.inst	0xd50323bf			// autiasp
+	ret
+.size	SHA3_squeeze,.-SHA3_squeeze
+___
+}								}}}
+								{{{
+my @A = map([ "v".$_.".16b", "v".($_+1).".16b", "v".($_+2).".16b",
+                             "v".($_+3).".16b", "v".($_+4).".16b" ],
+            (0, 5, 10, 15, 20));
+
+my @C = map("v$_.16b", (25..31));
+
+$code.=<<___;
+.type	KeccakF1600_ce,%function
+.align	5
+KeccakF1600_ce:
+	mov	x9,#12
+	adr	x10,iotas
+	b	.Loop_ce
+.align	4
+.Loop_ce:
+___
+for($i=0; $i<2; $i++) {
+$code.=<<___;
+	////////////////////////////////////////////////// Theta
+	eor3	$C[0],$A[0][0],$A[1][0],$A[2][0]
+	eor3	$C[1],$A[0][1],$A[1][1],$A[2][1]
+	eor3	$C[2],$A[0][2],$A[1][2],$A[2][2]
+	eor3	$C[3],$A[0][3],$A[1][3],$A[2][3]
+	eor3	$C[4],$A[0][4],$A[1][4],$A[2][4]
+	eor3	$C[0],$C[0],   $A[3][0],$A[4][0]
+	eor3	$C[1],$C[1],   $A[3][1],$A[4][1]
+	eor3	$C[2],$C[2],   $A[3][2],$A[4][2]
+	eor3	$C[3],$C[3],   $A[3][3],$A[4][3]
+	eor3	$C[4],$C[4],   $A[3][4],$A[4][4]
+
+	rax1	$C[5],$C[0],$C[2]			// D[1]
+	rax1	$C[6],$C[1],$C[3]			// D[2]
+	rax1	$C[2],$C[2],$C[4]			// D[3]
+	rax1	$C[3],$C[3],$C[0]			// D[4]
+	rax1	$C[4],$C[4],$C[1]			// D[0]
+
+	////////////////////////////////////////////////// Theta+Rho+Pi
+	xar	$C[0],   $A[1][1],$C[5],#64-$rhotates[1][1]	// C[0]=A[0][1]
+	xar	$A[1][1],$A[1][4],$C[3],#64-$rhotates[1][4]
+	xar	$A[1][4],$A[4][2],$C[6],#64-$rhotates[4][2]
+	xar	$A[4][2],$A[2][4],$C[3],#64-$rhotates[2][4]
+	xar	$A[2][4],$A[4][0],$C[4],#64-$rhotates[4][0]
+
+	xar	$A[4][0],$A[0][2],$C[6],#64-$rhotates[0][2]
+
+	xar	$A[0][2],$A[2][2],$C[6],#64-$rhotates[2][2]
+	xar	$A[2][2],$A[2][3],$C[2],#64-$rhotates[2][3]
+	xar	$A[2][3],$A[3][4],$C[3],#64-$rhotates[3][4]
+	xar	$A[3][4],$A[4][3],$C[2],#64-$rhotates[4][3]
+	xar	$A[4][3],$A[3][0],$C[4],#64-$rhotates[3][0]
+
+	xar	$A[3][0],$A[0][4],$C[3],#64-$rhotates[0][4]
+
+	eor	$A[0][0],$A[0][0],$C[4]
+	ldr	x11,[x10],#8
+
+	xar	$C[1],   $A[3][3],$C[2],#64-$rhotates[3][3]	// C[1]=A[0][3]
+	xar	$A[3][3],$A[3][2],$C[6],#64-$rhotates[3][2]
+	xar	$A[3][2],$A[2][1],$C[5],#64-$rhotates[2][1]
+	xar	$A[2][1],$A[1][2],$C[6],#64-$rhotates[1][2]
+	xar	$A[1][2],$A[2][0],$C[4],#64-$rhotates[2][0]
+
+	xar	$A[2][0],$A[0][1],$C[5],#64-$rhotates[0][1]	// *
+
+	xar	$A[0][4],$A[4][4],$C[3],#64-$rhotates[4][4]
+	xar	$A[4][4],$A[4][1],$C[5],#64-$rhotates[4][1]
+	xar	$A[4][1],$A[1][3],$C[2],#64-$rhotates[1][3]
+	xar	$A[1][3],$A[3][1],$C[5],#64-$rhotates[3][1]
+	xar	$A[3][1],$A[1][0],$C[4],#64-$rhotates[1][0]
+
+	xar	$C[2],   $A[0][3],$C[2],#64-$rhotates[0][3]	// C[2]=A[1][0]
+
+	////////////////////////////////////////////////// Chi+Iota
+	dup	$C[6],x11				// borrow C[6]
+	bcax	$C[3],   $A[0][0],$A[0][2],$C[0]	// *
+	bcax	$A[0][1],$C[0],   $C[1],   $A[0][2]	// *
+	bcax	$A[0][2],$A[0][2],$A[0][4],$C[1]
+	bcax	$A[0][3],$C[1],   $A[0][0],$A[0][4]
+	bcax	$A[0][4],$A[0][4],$C[0],   $A[0][0]
+
+	bcax	$A[1][0],$C[2],   $A[1][2],$A[1][1]	// *
+	bcax	$C[0],   $A[1][1],$A[1][3],$A[1][2]	// *
+	bcax	$A[1][2],$A[1][2],$A[1][4],$A[1][3]
+	bcax	$A[1][3],$A[1][3],$C[2],   $A[1][4]
+	bcax	$A[1][4],$A[1][4],$A[1][1],$C[2]
+
+	eor	$A[0][0],$C[3],$C[6]			// Iota
+
+	bcax	$C[1],   $A[2][0],$A[2][2],$A[2][1]	// *
+	bcax	$C[2],   $A[2][1],$A[2][3],$A[2][2]	// *
+	bcax	$A[2][2],$A[2][2],$A[2][4],$A[2][3]
+	bcax	$A[2][3],$A[2][3],$A[2][0],$A[2][4]
+	bcax	$A[2][4],$A[2][4],$A[2][1],$A[2][0]
+
+	bcax	$C[3],   $A[3][0],$A[3][2],$A[3][1]	// *
+	bcax	$C[4],   $A[3][1],$A[3][3],$A[3][2]	// *
+	bcax	$A[3][2],$A[3][2],$A[3][4],$A[3][3]
+	bcax	$A[3][3],$A[3][3],$A[3][0],$A[3][4]
+	bcax	$A[3][4],$A[3][4],$A[3][1],$A[3][0]
+
+	bcax	$C[5],   $A[4][0],$A[4][2],$A[4][1]	// *
+	bcax	$C[6],   $A[4][1],$A[4][3],$A[4][2]	// *
+	bcax	$A[4][2],$A[4][2],$A[4][4],$A[4][3]
+	bcax	$A[4][3],$A[4][3],$A[4][0],$A[4][4]
+	bcax	$A[4][4],$A[4][4],$A[4][1],$A[4][0]
+___
+	(         $A[1][1],       $C[0]) = (      $C[0],          $A[1][1]);
+	($A[2][0],$A[2][1], $C[1],$C[2]) = ($C[1],$C[2], $A[2][0],$A[2][1]);
+	($A[3][0],$A[3][1], $C[3],$C[4]) = ($C[3],$C[4], $A[3][0],$A[3][1]);
+	($A[4][0],$A[4][1], $C[5],$C[6]) = ($C[5],$C[6], $A[4][0],$A[4][1]);
+}
+$code.=<<___;
+	subs	x9,x9,#1
+	bne	.Loop_ce
+
+	ret
+.size	KeccakF1600_ce,.-KeccakF1600_ce
+
+.type	KeccakF1600_cext,%function
+.align	5
+KeccakF1600_cext:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-80]!
+	add	x29,sp,#0
+	stp	d8,d9,[sp,#16]		// per ABI requirement
+	stp	d10,d11,[sp,#32]
+	stp	d12,d13,[sp,#48]
+	stp	d14,d15,[sp,#64]
+___
+for($i=0; $i<24; $i+=2) {		# load A[5][5]
+my $j=$i+1;
+$code.=<<___;
+	ldp	d$i,d$j,[x0,#8*$i]
+___
+}
+$code.=<<___;
+	ldr	d24,[x0,#8*$i]
+	bl	KeccakF1600_ce
+	ldr	x30,[sp,#8]
+___
+for($i=0; $i<24; $i+=2) {		# store A[5][5]
+my $j=$i+1;
+$code.=<<___;
+	stp	d$i,d$j,[x0,#8*$i]
+___
+}
+$code.=<<___;
+	str	d24,[x0,#8*$i]
+
+	ldp	d8,d9,[sp,#16]
+	ldp	d10,d11,[sp,#32]
+	ldp	d12,d13,[sp,#48]
+	ldp	d14,d15,[sp,#64]
+	ldr	x29,[sp],#80
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	KeccakF1600_cext,.-KeccakF1600_cext
+___
+
+{
+my ($ctx,$inp,$len,$bsz) = map("x$_",(0..3));
+
+$code.=<<___;
+.globl	SHA3_absorb_cext
+.type	SHA3_absorb_cext,%function
+.align	5
+SHA3_absorb_cext:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-80]!
+	add	x29,sp,#0
+	stp	d8,d9,[sp,#16]		// per ABI requirement
+	stp	d10,d11,[sp,#32]
+	stp	d12,d13,[sp,#48]
+	stp	d14,d15,[sp,#64]
+___
+for($i=0; $i<24; $i+=2) {		# load A[5][5]
+my $j=$i+1;
+$code.=<<___;
+	ldp	d$i,d$j,[x0,#8*$i]
+___
+}
+$code.=<<___;
+	ldr	d24,[x0,#8*$i]
+	b	.Loop_absorb_ce
+
+.align	4
+.Loop_absorb_ce:
+	subs	$len,$len,$bsz		// len - bsz
+	blo	.Labsorbed_ce
+___
+for (my $i=0; $i<24; $i+=2) {
+my $j = $i+1;
+$code.=<<___;
+	ldr	d31,[$inp],#8		// *inp++
+#ifdef	__AARCH64EB__
+	rev64	v31.16b,v31.16b
+#endif
+	eor	$A[$i/5][$i%5],$A[$i/5][$i%5],v31.16b
+	cmp	$bsz,#8*($i+2)
+	blo	.Lprocess_block_ce
+	ldr	d31,[$inp],#8		// *inp++
+#ifdef	__AARCH64EB__
+	rev	v31.16b,v31.16b
+#endif
+	eor	$A[$j/5][$j%5],$A[$j/5][$j%5],v31.16b
+	beq	.Lprocess_block_ce
+___
+}
+$code.=<<___;
+	ldr	d31,[$inp],#8		// *inp++
+#ifdef	__AARCH64EB__
+	rev	v31.16b,v31.16b
+#endif
+	eor	$A[4][4],$A[4][4],v31.16b
+
+.Lprocess_block_ce:
+
+	bl	KeccakF1600_ce
+
+	b	.Loop_absorb_ce
+
+.align	4
+.Labsorbed_ce:
+___
+for($i=0; $i<24; $i+=2) {		# store A[5][5]
+my $j=$i+1;
+$code.=<<___;
+	stp	d$i,d$j,[x0,#8*$i]
+___
+}
+$code.=<<___;
+	str	d24,[x0,#8*$i]
+	add	x0,$len,$bsz		// return value
+
+	ldp	d8,d9,[sp,#16]
+	ldp	d10,d11,[sp,#32]
+	ldp	d12,d13,[sp,#48]
+	ldp	d14,d15,[sp,#64]
+	ldp	x29,x30,[sp],#80
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	SHA3_absorb_cext,.-SHA3_absorb_cext
+___
+}
+{
+my ($ctx,$out,$len,$bsz) = map("x$_",(0..3));
+$code.=<<___;
+.globl	SHA3_squeeze_cext
+.type	SHA3_squeeze_cext,%function
+.align	5
+SHA3_squeeze_cext:
+	.inst	0xd503233f		// paciasp
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+	mov	x9,$ctx
+	mov	x10,$bsz
+
+.Loop_squeeze_ce:
+	ldr	x4,[x9],#8
+	cmp	$len,#8
+	blo	.Lsqueeze_tail_ce
+#ifdef	__AARCH64EB__
+	rev	x4,x4
+#endif
+	str	x4,[$out],#8
+	beq	.Lsqueeze_done_ce
+
+	sub	$len,$len,#8
+	subs	x10,x10,#8
+	bhi	.Loop_squeeze_ce
+
+	bl	KeccakF1600_cext
+	ldr	x30,[sp,#8]
+	mov	x9,$ctx
+	mov	x10,$bsz
+	b	.Loop_squeeze_ce
+
+.align	4
+.Lsqueeze_tail_ce:
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done_ce
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done_ce
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done_ce
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done_ce
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done_ce
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done_ce
+	strb	w4,[$out],#1
+
+.Lsqueeze_done_ce:
+	ldr	x29,[sp],#16
+	.inst	0xd50323bf		// autiasp
+	ret
+.size	SHA3_squeeze_cext,.-SHA3_squeeze_cext
+___
+}								}}}
+$code.=<<___;
+.asciz	"Keccak-1600 absorb and squeeze for ARMv8, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+{   my  %opcode = (
+	"rax1"	=> 0xce608c00,	"eor3"	=> 0xce000000,
+	"bcax"	=> 0xce200000,	"xar"	=> 0xce800000	);
+
+    sub unsha3 {
+	my ($mnemonic,$arg)=@_;
+
+	$arg =~ m/[qv]([0-9]+)[^,]*,\s*[qv]([0-9]+)[^,]*(?:,\s*[qv]([0-9]+)[^,]*(?:,\s*[qv#]([0-9\-]+))?)?/
+	&&
+	sprintf ".inst\t0x%08x\t//%s %s",
+			$opcode{$mnemonic}|$1|($2<<5)|($3<<16)|(eval($4)<<10),
+			$mnemonic,$arg;
+    }
+}
+
+foreach(split("\n",$code)) {
+
+	s/\`([^\`]*)\`/eval($1)/ge;
+
+	m/\bdup\b/ and s/\.16b/.2d/g	or
+	s/\b(eor3|rax1|xar|bcax)\s+(v.*)/unsha3($1,$2)/ge;
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-avx2.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-avx2.pl
new file mode 100755
index 000000000..d9fc1c59e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-avx2.pl
@@ -0,0 +1,482 @@
+#!/usr/bin/env perl
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# Keccak-1600 for AVX2.
+#
+# July 2017.
+#
+# To paraphrase Gilles Van Assche, if you contemplate Fig. 2.3 on page
+# 20 of The Keccak reference [or Fig. 5 of FIPS PUB 202], and load data
+# other than A[0][0] in magic order into 6 [256-bit] registers, *each
+# dedicated to one axis*, Pi permutation is reduced to intra-register
+# shuffles...
+#
+# It makes other steps more intricate, but overall, is it a win? To be
+# more specific index permutations organized by quadruples are:
+#
+#       [4][4] [3][3] [2][2] [1][1]<-+
+#       [0][4] [0][3] [0][2] [0][1]<-+
+#       [3][0] [1][0] [4][0] [2][0]  |
+#       [4][3] [3][1] [2][4] [1][2]  |
+#       [3][4] [1][3] [4][2] [2][1]  |
+#       [2][3] [4][1] [1][4] [3][2]  |
+#       [2][2] [4][4] [1][1] [3][3] -+
+#
+# This however is highly impractical for Theta and Chi. What would help
+# Theta is if x indices were aligned column-wise, or in other words:
+#
+#       [0][4] [0][3] [0][2] [0][1]
+#       [3][0] [1][0] [4][0] [2][0]
+#vpermq([4][3] [3][1] [2][4] [1][2], 0b01110010)
+#       [2][4] [4][3] [1][2] [3][1]
+#vpermq([4][2] [3][4] [2][1] [1][3], 0b10001101)
+#       [3][4] [1][3] [4][2] [2][1]
+#vpermq([2][3] [4][1] [1][4] [3][2], 0b01110010)
+#       [1][4] [2][3] [3][2] [4][1]
+#vpermq([1][1] [2][2] [3][3] [4][4], 0b00011011)
+#       [4][4] [3][3] [2][2] [1][1]
+#
+# So here we have it, lines not marked with vpermq() represent the magic
+# order in which data is to be loaded and maintained. [And lines marked
+# with vpermq() represent Pi circular permutation in chosen layout. Note
+# that first step is permutation-free.] A[0][0] is loaded to register of
+# its own, to all lanes. [A[0][0] is not part of Pi permutation or Rho.]
+# Digits in variables' names denote right-most coordinates:
+
+my ($A00,	# [0][0] [0][0] [0][0] [0][0]		# %ymm0
+    $A01,	# [0][4] [0][3] [0][2] [0][1]		# %ymm1
+    $A20,	# [3][0] [1][0] [4][0] [2][0]		# %ymm2
+    $A31,	# [2][4] [4][3] [1][2] [3][1]		# %ymm3
+    $A21,	# [3][4] [1][3] [4][2] [2][1]		# %ymm4
+    $A41,	# [1][4] [2][3] [3][2] [4][1]		# %ymm5
+    $A11) =	# [4][4] [3][3] [2][2] [1][1]		# %ymm6
+    map("%ymm$_",(0..6));
+
+# We also need to map the magic order into offsets within structure:
+
+my @A_jagged = ([0,0], [1,0], [1,1], [1,2], [1,3],	# [0][0..4]
+		[2,2], [6,0], [3,1], [4,2], [5,3],	# [1][0..4]
+		[2,0], [4,0], [6,1], [5,2], [3,3],	# [2][0..4]
+		[2,3], [3,0], [5,1], [6,2], [4,3],	# [3][0..4]
+		[2,1], [5,0], [4,1], [3,2], [6,3]);	# [4][0..4]
+   @A_jagged = map(8*($$_[0]*4+$$_[1]), @A_jagged);	# ... and now linear
+
+# But on the other hand Chi is much better off if y indices were aligned
+# column-wise, not x. For this reason we have to shuffle data prior
+# Chi and revert it afterwards. Prior shuffle is naturally merged with
+# Pi itself:
+#
+#       [0][4] [0][3] [0][2] [0][1]
+#       [3][0] [1][0] [4][0] [2][0]
+#vpermq([4][3] [3][1] [2][4] [1][2], 0b01110010)
+#vpermq([2][4] [4][3] [1][2] [3][1], 0b00011011) = 0b10001101
+#       [3][1] [1][2] [4][3] [2][4]
+#vpermq([4][2] [3][4] [2][1] [1][3], 0b10001101)
+#vpermq([3][4] [1][3] [4][2] [2][1], 0b11100100) = 0b10001101
+#       [3][4] [1][3] [4][2] [2][1]
+#vpermq([2][3] [4][1] [1][4] [3][2], 0b01110010)
+#vpermq([1][4] [2][3] [3][2] [4][1], 0b01110010) = 0b00011011
+#       [3][2] [1][4] [4][1] [2][3]
+#vpermq([1][1] [2][2] [3][3] [4][4], 0b00011011)
+#vpermq([4][4] [3][3] [2][2] [1][1], 0b10001101) = 0b01110010
+#       [3][3] [1][1] [4][4] [2][2]
+#
+# And reverse post-Chi permutation:
+#
+#       [0][4] [0][3] [0][2] [0][1]
+#       [3][0] [1][0] [4][0] [2][0]
+#vpermq([3][1] [1][2] [4][3] [2][4], 0b00011011)
+#       [2][4] [4][3] [1][2] [3][1]
+#vpermq([3][4] [1][3] [4][2] [2][1], 0b11100100) = nop :-)
+#       [3][4] [1][3] [4][2] [2][1]
+#vpermq([3][2] [1][4] [4][1] [2][3], 0b10001101)
+#       [1][4] [2][3] [3][2] [4][1]
+#vpermq([3][3] [1][1] [4][4] [2][2], 0b01110010)
+#       [4][4] [3][3] [2][2] [1][1]
+#
+########################################################################
+# Numbers are cycles per processed byte out of large message.
+#
+#			r=1088(*)
+#
+# Haswell		8.7/+10%
+# Skylake		7.8/+20%
+# Ryzen			17(**)
+#
+# (*)	Corresponds to SHA3-256. Percentage after slash is improvement
+#	coefficient in comparison to scalar keccak1600-x86_64.pl.
+# (**)	It's expected that Ryzen performs poorly, because instruction
+#	issue rate is limited to two AVX2 instructions per cycle and
+#	in addition vpblendd is reportedly bound to specific port.
+#	Obviously this code path should not be executed on Ryzen.
+
+my @T = map("%ymm$_",(7..15));
+my ($C14,$C00,$D00,$D14) = @T[5..8];
+
+$code.=<<___;
+.text
+
+.type	__KeccakF1600,\@function
+.align	32
+__KeccakF1600:
+	lea		rhotates_left+96(%rip),%r8
+	lea		rhotates_right+96(%rip),%r9
+	lea		iotas(%rip),%r10
+	mov		\$24,%eax
+	jmp		.Loop_avx2
+
+.align	32
+.Loop_avx2:
+	######################################### Theta
+	vpshufd		\$0b01001110,$A20,$C00
+	vpxor		$A31,$A41,$C14
+	vpxor		$A11,$A21,@T[2]
+	vpxor		$A01,$C14,$C14
+	vpxor		@T[2],$C14,$C14		# C[1..4]
+
+	vpermq		\$0b10010011,$C14,@T[4]
+	vpxor		$A20,$C00,$C00
+	vpermq		\$0b01001110,$C00,@T[0]
+
+	vpsrlq		\$63,$C14,@T[1]
+	vpaddq		$C14,$C14,@T[2]
+	vpor		@T[2],@T[1],@T[1]	# ROL64(C[1..4],1)
+
+	vpermq		\$0b00111001,@T[1],$D14
+	vpxor		@T[4],@T[1],$D00
+	vpermq		\$0b00000000,$D00,$D00	# D[0..0] = ROL64(C[1],1) ^ C[4]
+
+	vpxor		$A00,$C00,$C00
+	vpxor		@T[0],$C00,$C00		# C[0..0]
+
+	vpsrlq		\$63,$C00,@T[0]
+	vpaddq		$C00,$C00,@T[1]
+	vpor		@T[0],@T[1],@T[1]	# ROL64(C[0..0],1)
+
+	vpxor		$D00,$A20,$A20		# ^= D[0..0]
+	vpxor		$D00,$A00,$A00		# ^= D[0..0]
+
+	vpblendd	\$0b11000000,@T[1],$D14,$D14
+	vpblendd	\$0b00000011,$C00,@T[4],@T[4]
+	vpxor		@T[4],$D14,$D14		# D[1..4] = ROL64(C[2..4,0),1) ^ C[0..3]
+
+	######################################### Rho + Pi + pre-Chi shuffle
+	vpsllvq		0*32-96(%r8),$A20,@T[3]
+	vpsrlvq		0*32-96(%r9),$A20,$A20
+	vpor		@T[3],$A20,$A20
+
+	 vpxor		$D14,$A31,$A31		# ^= D[1..4] from Theta
+	vpsllvq		2*32-96(%r8),$A31,@T[4]
+	vpsrlvq		2*32-96(%r9),$A31,$A31
+	vpor		@T[4],$A31,$A31
+
+	 vpxor		$D14,$A21,$A21		# ^= D[1..4] from Theta
+	vpsllvq		3*32-96(%r8),$A21,@T[5]
+	vpsrlvq		3*32-96(%r9),$A21,$A21
+	vpor		@T[5],$A21,$A21
+
+	 vpxor		$D14,$A41,$A41		# ^= D[1..4] from Theta
+	vpsllvq		4*32-96(%r8),$A41,@T[6]
+	vpsrlvq		4*32-96(%r9),$A41,$A41
+	vpor		@T[6],$A41,$A41
+
+	 vpxor		$D14,$A11,$A11		# ^= D[1..4] from Theta
+	 vpermq		\$0b10001101,$A20,@T[3]	# $A20 -> future $A31
+	 vpermq		\$0b10001101,$A31,@T[4]	# $A31 -> future $A21
+	vpsllvq		5*32-96(%r8),$A11,@T[7]
+	vpsrlvq		5*32-96(%r9),$A11,@T[1]
+	vpor		@T[7],@T[1],@T[1]	# $A11 -> future $A01
+
+	 vpxor		$D14,$A01,$A01		# ^= D[1..4] from Theta
+	 vpermq		\$0b00011011,$A21,@T[5]	# $A21 -> future $A41
+	 vpermq		\$0b01110010,$A41,@T[6]	# $A41 -> future $A11
+	vpsllvq		1*32-96(%r8),$A01,@T[8]
+	vpsrlvq		1*32-96(%r9),$A01,@T[2]
+	vpor		@T[8],@T[2],@T[2]	# $A01 -> future $A20
+
+	######################################### Chi
+	vpsrldq		\$8,@T[1],@T[7]
+	vpandn		@T[7],@T[1],@T[0]	# tgting  [0][0] [0][0] [0][0] [0][0]
+
+	vpblendd	\$0b00001100,@T[6],@T[2],$A31	#               [4][4] [2][0]
+	vpblendd	\$0b00001100,@T[2],@T[4],@T[8]	#               [4][0] [2][1]
+	 vpblendd	\$0b00001100,@T[4],@T[3],$A41	#               [4][2] [2][4]
+	 vpblendd	\$0b00001100,@T[3],@T[2],@T[7]	#               [4][3] [2][0]
+	vpblendd	\$0b00110000,@T[4],$A31,$A31	#        [1][3] [4][4] [2][0]
+	vpblendd	\$0b00110000,@T[5],@T[8],@T[8]	#        [1][4] [4][0] [2][1]
+	 vpblendd	\$0b00110000,@T[2],$A41,$A41	#        [1][0] [4][2] [2][4]
+	 vpblendd	\$0b00110000,@T[6],@T[7],@T[7]	#        [1][1] [4][3] [2][0]
+	vpblendd	\$0b11000000,@T[5],$A31,$A31	# [3][2] [1][3] [4][4] [2][0]
+	vpblendd	\$0b11000000,@T[6],@T[8],@T[8]	# [3][3] [1][4] [4][0] [2][1]
+	 vpblendd	\$0b11000000,@T[6],$A41,$A41	# [3][3] [1][0] [4][2] [2][4]
+	 vpblendd	\$0b11000000,@T[4],@T[7],@T[7]	# [3][4] [1][1] [4][3] [2][0]
+	vpandn		@T[8],$A31,$A31		# tgting  [3][1] [1][2] [4][3] [2][4]
+	 vpandn		@T[7],$A41,$A41		# tgting  [3][2] [1][4] [4][1] [2][3]
+
+	vpblendd	\$0b00001100,@T[2],@T[5],$A11	#               [4][0] [2][3]
+	vpblendd	\$0b00001100,@T[5],@T[3],@T[8]	#               [4][1] [2][4]
+	 vpxor		@T[3],$A31,$A31
+	vpblendd	\$0b00110000,@T[3],$A11,$A11	#        [1][2] [4][0] [2][3]
+	vpblendd	\$0b00110000,@T[4],@T[8],@T[8]	#        [1][3] [4][1] [2][4]
+	 vpxor		@T[5],$A41,$A41
+	vpblendd	\$0b11000000,@T[4],$A11,$A11	# [3][4] [1][2] [4][0] [2][3]
+	vpblendd	\$0b11000000,@T[2],@T[8],@T[8]	# [3][0] [1][3] [4][1] [2][4]
+	vpandn		@T[8],$A11,$A11		# tgting  [3][3] [1][1] [4][4] [2][2]
+	vpxor		@T[6],$A11,$A11
+
+	  vpermq	\$0b00011110,@T[1],$A21		# [0][1] [0][2] [0][4] [0][3]
+	  vpblendd	\$0b00110000,$A00,$A21,@T[8]	# [0][1] [0][0] [0][4] [0][3]
+	  vpermq	\$0b00111001,@T[1],$A01		# [0][1] [0][4] [0][3] [0][2]
+	  vpblendd	\$0b11000000,$A00,$A01,$A01	# [0][0] [0][4] [0][3] [0][2]
+	  vpandn	@T[8],$A01,$A01		# tgting  [0][4] [0][3] [0][2] [0][1]
+
+	vpblendd	\$0b00001100,@T[5],@T[4],$A20	#               [4][1] [2][1]
+	vpblendd	\$0b00001100,@T[4],@T[6],@T[7]	#               [4][2] [2][2]
+	vpblendd	\$0b00110000,@T[6],$A20,$A20	#        [1][1] [4][1] [2][1]
+	vpblendd	\$0b00110000,@T[3],@T[7],@T[7]	#        [1][2] [4][2] [2][2]
+	vpblendd	\$0b11000000,@T[3],$A20,$A20	# [3][1] [1][1] [4][1] [2][1]
+	vpblendd	\$0b11000000,@T[5],@T[7],@T[7]	# [3][2] [1][2] [4][2] [2][2]
+	vpandn		@T[7],$A20,$A20		# tgting  [3][0] [1][0] [4][0] [2][0]
+	vpxor		@T[2],$A20,$A20
+
+	 vpermq		\$0b00000000,@T[0],@T[0]	# [0][0] [0][0] [0][0] [0][0]
+	 vpermq		\$0b00011011,$A31,$A31	# post-Chi shuffle
+	 vpermq		\$0b10001101,$A41,$A41
+	 vpermq		\$0b01110010,$A11,$A11
+
+	vpblendd	\$0b00001100,@T[3],@T[6],$A21	#               [4][3] [2][2]
+	vpblendd	\$0b00001100,@T[6],@T[5],@T[7]	#               [4][4] [2][3]
+	vpblendd	\$0b00110000,@T[5],$A21,$A21	#        [1][4] [4][3] [2][2]
+	vpblendd	\$0b00110000,@T[2],@T[7],@T[7]	#        [1][0] [4][4] [2][3]
+	vpblendd	\$0b11000000,@T[2],$A21,$A21	# [3][0] [1][4] [4][3] [2][2]
+	vpblendd	\$0b11000000,@T[3],@T[7],@T[7]	# [3][1] [1][0] [4][4] [2][3]
+	vpandn		@T[7],$A21,$A21		# tgting  [3][4] [1][3] [4][2] [2][1]
+
+	vpxor		@T[0],$A00,$A00
+	vpxor		@T[1],$A01,$A01
+	vpxor		@T[4],$A21,$A21
+
+	######################################### Iota
+	vpxor		(%r10),$A00,$A00
+	lea		32(%r10),%r10
+
+	dec		%eax
+	jnz		.Loop_avx2
+
+	ret
+.size	__KeccakF1600,.-__KeccakF1600
+___
+my ($A_flat,$inp,$len,$bsz) = ("%rdi","%rsi","%rdx","%rcx");
+my  $out = $inp;	# in squeeze
+
+$code.=<<___;
+.globl	SHA3_absorb
+.type	SHA3_absorb,\@function
+.align	32
+SHA3_absorb:
+	mov	%rsp,%r11
+
+	lea	-240(%rsp),%rsp
+	and	\$-32,%rsp
+
+	lea	96($A_flat),$A_flat
+	lea	96($inp),$inp
+	lea	96(%rsp),%r10
+
+	vzeroupper
+
+	vpbroadcastq	-96($A_flat),$A00	# load A[5][5]
+	vmovdqu		8+32*0-96($A_flat),$A01
+	vmovdqu		8+32*1-96($A_flat),$A20
+	vmovdqu		8+32*2-96($A_flat),$A31
+	vmovdqu		8+32*3-96($A_flat),$A21
+	vmovdqu		8+32*4-96($A_flat),$A41
+	vmovdqu		8+32*5-96($A_flat),$A11
+
+	vpxor		@T[0],@T[0],@T[0]
+	vmovdqa		@T[0],32*2-96(%r10)	# zero transfer area on stack
+	vmovdqa		@T[0],32*3-96(%r10)
+	vmovdqa		@T[0],32*4-96(%r10)
+	vmovdqa		@T[0],32*5-96(%r10)
+	vmovdqa		@T[0],32*6-96(%r10)
+
+.Loop_absorb_avx2:
+	mov		$bsz,%rax
+	sub		$bsz,$len
+	jc		.Ldone_absorb_avx2
+
+	shr		\$3,%eax
+	vpbroadcastq	0-96($inp),@T[0]
+	vmovdqu		8-96($inp),@T[1]
+	sub		\$4,%eax
+___
+for(my $i=5; $i<25; $i++) {
+$code.=<<___
+	dec	%eax
+	jz	.Labsorved_avx2
+	mov	8*$i-96($inp),%r8
+	mov	%r8,$A_jagged[$i]-96(%r10)
+___
+}
+$code.=<<___;
+.Labsorved_avx2:
+	lea	($inp,$bsz),$inp
+
+	vpxor	@T[0],$A00,$A00
+	vpxor	@T[1],$A01,$A01
+	vpxor	32*2-96(%r10),$A20,$A20
+	vpxor	32*3-96(%r10),$A31,$A31
+	vpxor	32*4-96(%r10),$A21,$A21
+	vpxor	32*5-96(%r10),$A41,$A41
+	vpxor	32*6-96(%r10),$A11,$A11
+
+	call	__KeccakF1600
+
+	lea	96(%rsp),%r10
+	jmp	.Loop_absorb_avx2
+
+.Ldone_absorb_avx2:
+	vmovq	%xmm0,-96($A_flat)
+	vmovdqu	$A01,8+32*0-96($A_flat)
+	vmovdqu	$A20,8+32*1-96($A_flat)
+	vmovdqu	$A31,8+32*2-96($A_flat)
+	vmovdqu	$A21,8+32*3-96($A_flat)
+	vmovdqu	$A41,8+32*4-96($A_flat)
+	vmovdqu	$A11,8+32*5-96($A_flat)
+
+	vzeroupper
+
+	lea	(%r11),%rsp
+	lea	($len,$bsz),%rax		# return value
+	ret
+.size	SHA3_absorb,.-SHA3_absorb
+
+.globl	SHA3_squeeze
+.type	SHA3_squeeze,\@function
+.align	32
+SHA3_squeeze:
+	mov	%rsp,%r11
+
+	lea	96($A_flat),$A_flat
+	shr	\$3,$bsz
+
+	vzeroupper
+
+	vpbroadcastq	-96($A_flat),$A00
+	vpxor		@T[0],@T[0],@T[0]
+	vmovdqu		8+32*0-96($A_flat),$A01
+	vmovdqu		8+32*1-96($A_flat),$A20
+	vmovdqu		8+32*2-96($A_flat),$A31
+	vmovdqu		8+32*3-96($A_flat),$A21
+	vmovdqu		8+32*4-96($A_flat),$A41
+	vmovdqu		8+32*5-96($A_flat),$A11
+
+	mov	$bsz,%rax
+
+.Loop_squeeze_avx2:
+	mov	@A_jagged[$i]-96($A_flat),%r8
+___
+for (my $i=0; $i<25; $i++) {
+$code.=<<___;
+	sub	\$8,$len
+	jc	.Ltail_squeeze_avx2
+	mov	%r8,($out)
+	lea	8($out),$out
+	je	.Ldone_squeeze_avx2
+	dec	%eax
+	je	.Lextend_output_avx2
+	mov	@A_jagged[$i+1]-120($A_flat),%r8
+___
+}
+$code.=<<___;
+.Lextend_output_avx2:
+	call	__KeccakF1600
+
+	vmovq	%xmm0,-96($A_flat)
+	vmovdqu	$A01,8+32*0-96($A_flat)
+	vmovdqu	$A20,8+32*1-96($A_flat)
+	vmovdqu	$A31,8+32*2-96($A_flat)
+	vmovdqu	$A21,8+32*3-96($A_flat)
+	vmovdqu	$A41,8+32*4-96($A_flat)
+	vmovdqu	$A11,8+32*5-96($A_flat)
+
+	mov	$bsz,%rax
+	jmp	.Loop_squeeze_avx2
+
+
+.Ltail_squeeze_avx2:
+	add	\$8,$len
+.Loop_tail_avx2:
+	mov	%r8b,($out)
+	lea	1($out),$out
+	shr	\$8,%r8
+	dec	$len
+	jnz	.Loop_tail_avx2
+
+.Ldone_squeeze_avx2:
+	vzeroupper
+
+	lea	(%r11),%rsp
+	ret
+.size	SHA3_squeeze,.-SHA3_squeeze
+
+.align	64
+rhotates_left:
+	.quad	3,	18,	36,	41	# [2][0] [4][0] [1][0] [3][0]
+	.quad	1,	62,	28,	27	# [0][1] [0][2] [0][3] [0][4]
+	.quad	45,	6,	56,	39	# [3][1] [1][2] [4][3] [2][4]
+	.quad	10,	61,	55,	8	# [2][1] [4][2] [1][3] [3][4]
+	.quad	2,	15,	25,	20	# [4][1] [3][2] [2][3] [1][4]
+	.quad	44,	43,	21,	14	# [1][1] [2][2] [3][3] [4][4]
+rhotates_right:
+	.quad	64-3,	64-18,	64-36,	64-41
+	.quad	64-1,	64-62,	64-28,	64-27
+	.quad	64-45,	64-6,	64-56,	64-39
+	.quad	64-10,	64-61,	64-55,	64-8
+	.quad	64-2,	64-15,	64-25,	64-20
+	.quad	64-44,	64-43,	64-21,	64-14
+iotas:
+	.quad	0x0000000000000001, 0x0000000000000001, 0x0000000000000001, 0x0000000000000001
+	.quad	0x0000000000008082, 0x0000000000008082, 0x0000000000008082, 0x0000000000008082
+	.quad	0x800000000000808a, 0x800000000000808a, 0x800000000000808a, 0x800000000000808a
+	.quad	0x8000000080008000, 0x8000000080008000, 0x8000000080008000, 0x8000000080008000
+	.quad	0x000000000000808b, 0x000000000000808b, 0x000000000000808b, 0x000000000000808b
+	.quad	0x0000000080000001, 0x0000000080000001, 0x0000000080000001, 0x0000000080000001
+	.quad	0x8000000080008081, 0x8000000080008081, 0x8000000080008081, 0x8000000080008081
+	.quad	0x8000000000008009, 0x8000000000008009, 0x8000000000008009, 0x8000000000008009
+	.quad	0x000000000000008a, 0x000000000000008a, 0x000000000000008a, 0x000000000000008a
+	.quad	0x0000000000000088, 0x0000000000000088, 0x0000000000000088, 0x0000000000000088
+	.quad	0x0000000080008009, 0x0000000080008009, 0x0000000080008009, 0x0000000080008009
+	.quad	0x000000008000000a, 0x000000008000000a, 0x000000008000000a, 0x000000008000000a
+	.quad	0x000000008000808b, 0x000000008000808b, 0x000000008000808b, 0x000000008000808b
+	.quad	0x800000000000008b, 0x800000000000008b, 0x800000000000008b, 0x800000000000008b
+	.quad	0x8000000000008089, 0x8000000000008089, 0x8000000000008089, 0x8000000000008089
+	.quad	0x8000000000008003, 0x8000000000008003, 0x8000000000008003, 0x8000000000008003
+	.quad	0x8000000000008002, 0x8000000000008002, 0x8000000000008002, 0x8000000000008002
+	.quad	0x8000000000000080, 0x8000000000000080, 0x8000000000000080, 0x8000000000000080
+	.quad	0x000000000000800a, 0x000000000000800a, 0x000000000000800a, 0x000000000000800a
+	.quad	0x800000008000000a, 0x800000008000000a, 0x800000008000000a, 0x800000008000000a
+	.quad	0x8000000080008081, 0x8000000080008081, 0x8000000080008081, 0x8000000080008081
+	.quad	0x8000000000008080, 0x8000000000008080, 0x8000000000008080, 0x8000000000008080
+	.quad	0x0000000080000001, 0x0000000080000001, 0x0000000080000001, 0x0000000080000001
+	.quad	0x8000000080008008, 0x8000000080008008, 0x8000000080008008, 0x8000000080008008
+
+.asciz	"Keccak-1600 absorb and squeeze for AVX2, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+$output=pop;
+open STDOUT,">$output";
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-avx512.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-avx512.pl
new file mode 100755
index 000000000..9074ff02d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-avx512.pl
@@ -0,0 +1,551 @@
+#!/usr/bin/env perl
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# Keccak-1600 for AVX-512F.
+#
+# July 2017.
+#
+# Below code is KECCAK_1X_ALT implementation (see sha/keccak1600.c).
+# Pretty straightforward, the only "magic" is data layout in registers.
+# It's impossible to have one that is optimal for every step, hence
+# it's changing as algorithm progresses. Data is saved in linear order,
+# but in-register order morphs between rounds. Even rounds take in
+# linear layout, and odd rounds - transposed, or "verticaly-shaped"...
+#
+########################################################################
+# Numbers are cycles per processed byte out of large message.
+#
+#			r=1088(*)
+#
+# Knights Landing	7.6
+# Skylake-X		5.7
+#
+# (*)	Corresponds to SHA3-256.
+
+########################################################################
+# Below code is combination of two ideas. One is taken from Keccak Code
+# Package, hereafter KCP, and another one from initial version of this
+# module. What is common is observation that Pi's input and output are
+# "mostly transposed", i.e. if input is aligned by x coordinate, then
+# output is [mostly] aligned by y. Both versions, KCP and predecessor,
+# were trying to use one of them from round to round, which resulted in
+# some kind of transposition in each round. This version still does
+# transpose data, but only every second round. Another essential factor
+# is that KCP transposition has to be performed with instructions that
+# turned to be rather expensive on Knights Landing, both latency- and
+# throughput-wise. Not to mention that some of them have to depend on
+# each other. On the other hand initial version of this module was
+# relying heavily on blend instructions. There were lots of them,
+# resulting in higher instruction count, yet it performed better on
+# Knights Landing, because processor can execute pair of them each
+# cycle and they have minimal latency. This module is an attempt to
+# bring best parts together:-)
+#
+# Coordinates below correspond to those in sha/keccak1600.c. Input
+# layout is straight linear:
+#
+# [0][4] [0][3] [0][2] [0][1] [0][0]
+# [1][4] [1][3] [1][2] [1][1] [1][0]
+# [2][4] [2][3] [2][2] [2][1] [2][0]
+# [3][4] [3][3] [3][2] [3][1] [3][0]
+# [4][4] [4][3] [4][2] [4][1] [4][0]
+#
+# It's perfect for Theta, while Pi is reduced to intra-register
+# permutations which yield layout perfect for Chi:
+#
+# [4][0] [3][0] [2][0] [1][0] [0][0]
+# [4][1] [3][1] [2][1] [1][1] [0][1]
+# [4][2] [3][2] [2][2] [1][2] [0][2]
+# [4][3] [3][3] [2][3] [1][3] [0][3]
+# [4][4] [3][4] [2][4] [1][4] [0][4]
+#
+# Now instead of performing full transposition and feeding it to next
+# identical round, we perform kind of diagonal transposition to layout
+# from initial version of this module, and make it suitable for Theta:
+#
+# [4][4] [3][3] [2][2] [1][1] [0][0]>4.3.2.1.0>[4][4] [3][3] [2][2] [1][1] [0][0]
+# [4][0] [3][4] [2][3] [1][2] [0][1]>3.2.1.0.4>[3][4] [2][3] [1][2] [0][1] [4][0]
+# [4][1] [3][0] [2][4] [1][3] [0][2]>2.1.0.4.3>[2][4] [1][3] [0][2] [4][1] [3][0]
+# [4][2] [3][1] [2][0] [1][4] [0][3]>1.0.4.3.2>[1][4] [0][3] [4][2] [3][1] [2][0]
+# [4][3] [3][2] [2][1] [1][0] [0][4]>0.4.3.2.1>[0][4] [4][3] [3][2] [2][1] [1][0]
+#
+# Now intra-register permutations yield initial [almost] straight
+# linear layout:
+#
+# [4][4] [3][3] [2][2] [1][1] [0][0]
+##[0][4] [0][3] [0][2] [0][1] [0][0]
+# [3][4] [2][3] [1][2] [0][1] [4][0]
+##[2][3] [2][2] [2][1] [2][0] [2][4]
+# [2][4] [1][3] [0][2] [4][1] [3][0]
+##[4][2] [4][1] [4][0] [4][4] [4][3]
+# [1][4] [0][3] [4][2] [3][1] [2][0]
+##[1][1] [1][0] [1][4] [1][3] [1][2]
+# [0][4] [4][3] [3][2] [2][1] [1][0]
+##[3][0] [3][4] [3][3] [3][2] [3][1]
+#
+# This means that odd round Chi is performed in less suitable layout,
+# with a number of additional permutations. But overall it turned to be
+# a win. Permutations are fastest possible on Knights Landing and they
+# are laid down to be independent of each other. In the essence I traded
+# 20 blend instructions for 3 permutations. The result is 13% faster
+# than KCP on Skylake-X, and >40% on Knights Landing.
+#
+# As implied, data is loaded in straight linear order. Digits in
+# variables' names represent coordinates of right-most element of
+# loaded data chunk:
+
+my ($A00,	# [0][4] [0][3] [0][2] [0][1] [0][0]
+    $A10,	# [1][4] [1][3] [1][2] [1][1] [1][0]
+    $A20,	# [2][4] [2][3] [2][2] [2][1] [2][0]
+    $A30,	# [3][4] [3][3] [3][2] [3][1] [3][0]
+    $A40) =	# [4][4] [4][3] [4][2] [4][1] [4][0]
+    map("%zmm$_",(0..4));
+
+# We also need to map the magic order into offsets within structure:
+
+my @A_jagged = ([0,0], [0,1], [0,2], [0,3], [0,4],
+		[1,0], [1,1], [1,2], [1,3], [1,4],
+		[2,0], [2,1], [2,2], [2,3], [2,4],
+		[3,0], [3,1], [3,2], [3,3], [3,4],
+		[4,0], [4,1], [4,2], [4,3], [4,4]);
+   @A_jagged = map(8*($$_[0]*8+$$_[1]), @A_jagged);	# ... and now linear
+
+my @T        = map("%zmm$_",(5..12));
+my @Theta    = map("%zmm$_",(33,13..16));	# invalid @Theta[0] is not typo
+my @Pi0      = map("%zmm$_",(17..21));
+my @Rhotate0 = map("%zmm$_",(22..26));
+my @Rhotate1 = map("%zmm$_",(27..31));
+
+my ($C00,$D00) = @T[0..1];
+my ($k00001,$k00010,$k00100,$k01000,$k10000,$k11111) = map("%k$_",(1..6));
+
+$code.=<<___;
+.text
+
+.type	__KeccakF1600,\@function
+.align	32
+__KeccakF1600:
+	lea		iotas(%rip),%r10
+	mov		\$12,%eax
+	jmp		.Loop_avx512
+
+.align	32
+.Loop_avx512:
+	######################################### Theta, even round
+	vmovdqa64	$A00,@T[0]		# put aside original A00
+	vpternlogq	\$0x96,$A20,$A10,$A00	# and use it as "C00"
+	vpternlogq	\$0x96,$A40,$A30,$A00
+
+	vprolq		\$1,$A00,$D00
+	vpermq		$A00,@Theta[1],$A00
+	vpermq		$D00,@Theta[4],$D00
+
+	vpternlogq	\$0x96,$A00,$D00,@T[0]	# T[0] is original A00
+	vpternlogq	\$0x96,$A00,$D00,$A10
+	vpternlogq	\$0x96,$A00,$D00,$A20
+	vpternlogq	\$0x96,$A00,$D00,$A30
+	vpternlogq	\$0x96,$A00,$D00,$A40
+
+	######################################### Rho
+	vprolvq		@Rhotate0[0],@T[0],$A00	# T[0] is original A00
+	vprolvq		@Rhotate0[1],$A10,$A10
+	vprolvq		@Rhotate0[2],$A20,$A20
+	vprolvq		@Rhotate0[3],$A30,$A30
+	vprolvq		@Rhotate0[4],$A40,$A40
+
+	######################################### Pi
+	vpermq		$A00,@Pi0[0],$A00
+	vpermq		$A10,@Pi0[1],$A10
+	vpermq		$A20,@Pi0[2],$A20
+	vpermq		$A30,@Pi0[3],$A30
+	vpermq		$A40,@Pi0[4],$A40
+
+	######################################### Chi
+	vmovdqa64	$A00,@T[0]
+	vmovdqa64	$A10,@T[1]
+	vpternlogq	\$0xD2,$A20,$A10,$A00
+	vpternlogq	\$0xD2,$A30,$A20,$A10
+	vpternlogq	\$0xD2,$A40,$A30,$A20
+	vpternlogq	\$0xD2,@T[0],$A40,$A30
+	vpternlogq	\$0xD2,@T[1],@T[0],$A40
+
+	######################################### Iota
+	vpxorq		(%r10),$A00,${A00}{$k00001}
+	lea		16(%r10),%r10
+
+	######################################### Harmonize rounds
+	vpblendmq	$A20,$A10,@{T[1]}{$k00010}
+	vpblendmq	$A30,$A20,@{T[2]}{$k00010}
+	vpblendmq	$A40,$A30,@{T[3]}{$k00010}
+	 vpblendmq	$A10,$A00,@{T[0]}{$k00010}
+	vpblendmq	$A00,$A40,@{T[4]}{$k00010}
+
+	vpblendmq	$A30,@T[1],@{T[1]}{$k00100}
+	vpblendmq	$A40,@T[2],@{T[2]}{$k00100}
+	 vpblendmq	$A20,@T[0],@{T[0]}{$k00100}
+	vpblendmq	$A00,@T[3],@{T[3]}{$k00100}
+	vpblendmq	$A10,@T[4],@{T[4]}{$k00100}
+
+	vpblendmq	$A40,@T[1],@{T[1]}{$k01000}
+	 vpblendmq	$A30,@T[0],@{T[0]}{$k01000}
+	vpblendmq	$A00,@T[2],@{T[2]}{$k01000}
+	vpblendmq	$A10,@T[3],@{T[3]}{$k01000}
+	vpblendmq	$A20,@T[4],@{T[4]}{$k01000}
+
+	vpblendmq	$A40,@T[0],@{T[0]}{$k10000}
+	vpblendmq	$A00,@T[1],@{T[1]}{$k10000}
+	vpblendmq	$A10,@T[2],@{T[2]}{$k10000}
+	vpblendmq	$A20,@T[3],@{T[3]}{$k10000}
+	vpblendmq	$A30,@T[4],@{T[4]}{$k10000}
+
+	#vpermq		@T[0],@Theta[0],$A00	# doesn't actually change order
+	vpermq		@T[1],@Theta[1],$A10
+	vpermq		@T[2],@Theta[2],$A20
+	vpermq		@T[3],@Theta[3],$A30
+	vpermq		@T[4],@Theta[4],$A40
+
+	######################################### Theta, odd round
+	vmovdqa64	$T[0],$A00		# real A00
+	vpternlogq	\$0x96,$A20,$A10,$C00	# C00 is @T[0]'s alias
+	vpternlogq	\$0x96,$A40,$A30,$C00
+
+	vprolq		\$1,$C00,$D00
+	vpermq		$C00,@Theta[1],$C00
+	vpermq		$D00,@Theta[4],$D00
+
+	vpternlogq	\$0x96,$C00,$D00,$A00
+	vpternlogq	\$0x96,$C00,$D00,$A30
+	vpternlogq	\$0x96,$C00,$D00,$A10
+	vpternlogq	\$0x96,$C00,$D00,$A40
+	vpternlogq	\$0x96,$C00,$D00,$A20
+
+	######################################### Rho
+	vprolvq		@Rhotate1[0],$A00,$A00
+	vprolvq		@Rhotate1[3],$A30,@T[1]
+	vprolvq		@Rhotate1[1],$A10,@T[2]
+	vprolvq		@Rhotate1[4],$A40,@T[3]
+	vprolvq		@Rhotate1[2],$A20,@T[4]
+
+	 vpermq		$A00,@Theta[4],@T[5]
+	 vpermq		$A00,@Theta[3],@T[6]
+
+	######################################### Iota
+	vpxorq		-8(%r10),$A00,${A00}{$k00001}
+
+	######################################### Pi
+	vpermq		@T[1],@Theta[2],$A10
+	vpermq		@T[2],@Theta[4],$A20
+	vpermq		@T[3],@Theta[1],$A30
+	vpermq		@T[4],@Theta[3],$A40
+
+	######################################### Chi
+	vpternlogq	\$0xD2,@T[6],@T[5],$A00
+
+	vpermq		@T[1],@Theta[1],@T[7]
+	#vpermq		@T[1],@Theta[0],@T[1]
+	vpternlogq	\$0xD2,@T[1],@T[7],$A10
+
+	vpermq		@T[2],@Theta[3],@T[0]
+	vpermq		@T[2],@Theta[2],@T[2]
+	vpternlogq	\$0xD2,@T[2],@T[0],$A20
+
+	#vpermq		@T[3],@Theta[0],@T[3]
+	vpermq		@T[3],@Theta[4],@T[1]
+	vpternlogq	\$0xD2,@T[1],@T[3],$A30
+
+	vpermq		@T[4],@Theta[2],@T[0]
+	vpermq		@T[4],@Theta[1],@T[4]
+	vpternlogq	\$0xD2,@T[4],@T[0],$A40
+
+	dec		%eax
+	jnz		.Loop_avx512
+
+	ret
+.size	__KeccakF1600,.-__KeccakF1600
+___
+
+my ($A_flat,$inp,$len,$bsz) = ("%rdi","%rsi","%rdx","%rcx");
+my  $out = $inp;	# in squeeze
+
+$code.=<<___;
+.globl	SHA3_absorb
+.type	SHA3_absorb,\@function
+.align	32
+SHA3_absorb:
+	mov	%rsp,%r11
+
+	lea	-320(%rsp),%rsp
+	and	\$-64,%rsp
+
+	lea	96($A_flat),$A_flat
+	lea	96($inp),$inp
+	lea	128(%rsp),%r9
+
+	lea		theta_perm(%rip),%r8
+
+	kxnorw		$k11111,$k11111,$k11111
+	kshiftrw	\$15,$k11111,$k00001
+	kshiftrw	\$11,$k11111,$k11111
+	kshiftlw	\$1,$k00001,$k00010
+	kshiftlw	\$2,$k00001,$k00100
+	kshiftlw	\$3,$k00001,$k01000
+	kshiftlw	\$4,$k00001,$k10000
+
+	#vmovdqa64	64*0(%r8),@Theta[0]
+	vmovdqa64	64*1(%r8),@Theta[1]
+	vmovdqa64	64*2(%r8),@Theta[2]
+	vmovdqa64	64*3(%r8),@Theta[3]
+	vmovdqa64	64*4(%r8),@Theta[4]
+
+	vmovdqa64	64*5(%r8),@Rhotate1[0]
+	vmovdqa64	64*6(%r8),@Rhotate1[1]
+	vmovdqa64	64*7(%r8),@Rhotate1[2]
+	vmovdqa64	64*8(%r8),@Rhotate1[3]
+	vmovdqa64	64*9(%r8),@Rhotate1[4]
+
+	vmovdqa64	64*10(%r8),@Rhotate0[0]
+	vmovdqa64	64*11(%r8),@Rhotate0[1]
+	vmovdqa64	64*12(%r8),@Rhotate0[2]
+	vmovdqa64	64*13(%r8),@Rhotate0[3]
+	vmovdqa64	64*14(%r8),@Rhotate0[4]
+
+	vmovdqa64	64*15(%r8),@Pi0[0]
+	vmovdqa64	64*16(%r8),@Pi0[1]
+	vmovdqa64	64*17(%r8),@Pi0[2]
+	vmovdqa64	64*18(%r8),@Pi0[3]
+	vmovdqa64	64*19(%r8),@Pi0[4]
+
+	vmovdqu64	40*0-96($A_flat),${A00}{$k11111}{z}
+	vpxorq		@T[0],@T[0],@T[0]
+	vmovdqu64	40*1-96($A_flat),${A10}{$k11111}{z}
+	vmovdqu64	40*2-96($A_flat),${A20}{$k11111}{z}
+	vmovdqu64	40*3-96($A_flat),${A30}{$k11111}{z}
+	vmovdqu64	40*4-96($A_flat),${A40}{$k11111}{z}
+
+	vmovdqa64	@T[0],0*64-128(%r9)	# zero transfer area on stack
+	vmovdqa64	@T[0],1*64-128(%r9)
+	vmovdqa64	@T[0],2*64-128(%r9)
+	vmovdqa64	@T[0],3*64-128(%r9)
+	vmovdqa64	@T[0],4*64-128(%r9)
+	jmp		.Loop_absorb_avx512
+
+.align	32
+.Loop_absorb_avx512:
+	mov		$bsz,%rax
+	sub		$bsz,$len
+	jc		.Ldone_absorb_avx512
+
+	shr		\$3,%eax
+___
+for(my $i=0; $i<25; $i++) {
+$code.=<<___
+	mov	8*$i-96($inp),%r8
+	mov	%r8,$A_jagged[$i]-128(%r9)
+	dec	%eax
+	jz	.Labsorved_avx512
+___
+}
+$code.=<<___;
+.Labsorved_avx512:
+	lea	($inp,$bsz),$inp
+
+	vpxorq	64*0-128(%r9),$A00,$A00
+	vpxorq	64*1-128(%r9),$A10,$A10
+	vpxorq	64*2-128(%r9),$A20,$A20
+	vpxorq	64*3-128(%r9),$A30,$A30
+	vpxorq	64*4-128(%r9),$A40,$A40
+
+	call	__KeccakF1600
+
+	jmp	.Loop_absorb_avx512
+
+.align	32
+.Ldone_absorb_avx512:
+	vmovdqu64	$A00,40*0-96($A_flat){$k11111}
+	vmovdqu64	$A10,40*1-96($A_flat){$k11111}
+	vmovdqu64	$A20,40*2-96($A_flat){$k11111}
+	vmovdqu64	$A30,40*3-96($A_flat){$k11111}
+	vmovdqu64	$A40,40*4-96($A_flat){$k11111}
+
+	vzeroupper
+
+	lea	(%r11),%rsp
+	lea	($len,$bsz),%rax		# return value
+	ret
+.size	SHA3_absorb,.-SHA3_absorb
+
+.globl	SHA3_squeeze
+.type	SHA3_squeeze,\@function
+.align	32
+SHA3_squeeze:
+	mov	%rsp,%r11
+
+	lea	96($A_flat),$A_flat
+	cmp	$bsz,$len
+	jbe	.Lno_output_extension_avx512
+
+	lea		theta_perm(%rip),%r8
+
+	kxnorw		$k11111,$k11111,$k11111
+	kshiftrw	\$15,$k11111,$k00001
+	kshiftrw	\$11,$k11111,$k11111
+	kshiftlw	\$1,$k00001,$k00010
+	kshiftlw	\$2,$k00001,$k00100
+	kshiftlw	\$3,$k00001,$k01000
+	kshiftlw	\$4,$k00001,$k10000
+
+	#vmovdqa64	64*0(%r8),@Theta[0]
+	vmovdqa64	64*1(%r8),@Theta[1]
+	vmovdqa64	64*2(%r8),@Theta[2]
+	vmovdqa64	64*3(%r8),@Theta[3]
+	vmovdqa64	64*4(%r8),@Theta[4]
+
+	vmovdqa64	64*5(%r8),@Rhotate1[0]
+	vmovdqa64	64*6(%r8),@Rhotate1[1]
+	vmovdqa64	64*7(%r8),@Rhotate1[2]
+	vmovdqa64	64*8(%r8),@Rhotate1[3]
+	vmovdqa64	64*9(%r8),@Rhotate1[4]
+
+	vmovdqa64	64*10(%r8),@Rhotate0[0]
+	vmovdqa64	64*11(%r8),@Rhotate0[1]
+	vmovdqa64	64*12(%r8),@Rhotate0[2]
+	vmovdqa64	64*13(%r8),@Rhotate0[3]
+	vmovdqa64	64*14(%r8),@Rhotate0[4]
+
+	vmovdqa64	64*15(%r8),@Pi0[0]
+	vmovdqa64	64*16(%r8),@Pi0[1]
+	vmovdqa64	64*17(%r8),@Pi0[2]
+	vmovdqa64	64*18(%r8),@Pi0[3]
+	vmovdqa64	64*19(%r8),@Pi0[4]
+
+	vmovdqu64	40*0-96($A_flat),${A00}{$k11111}{z}
+	vmovdqu64	40*1-96($A_flat),${A10}{$k11111}{z}
+	vmovdqu64	40*2-96($A_flat),${A20}{$k11111}{z}
+	vmovdqu64	40*3-96($A_flat),${A30}{$k11111}{z}
+	vmovdqu64	40*4-96($A_flat),${A40}{$k11111}{z}
+
+.Lno_output_extension_avx512:
+	shr	\$3,$bsz
+	lea	-96($A_flat),%r9
+	mov	$bsz,%rax
+	jmp	.Loop_squeeze_avx512
+
+.align	32
+.Loop_squeeze_avx512:
+	cmp	\$8,$len
+	jb	.Ltail_squeeze_avx512
+
+	mov	(%r9),%r8
+	lea	8(%r9),%r9
+	mov	%r8,($out)
+	lea	8($out),$out
+	sub	\$8,$len		# len -= 8
+	jz	.Ldone_squeeze_avx512
+
+	sub	\$1,%rax		# bsz--
+	jnz	.Loop_squeeze_avx512
+
+	#vpermq		@Theta[4],@Theta[4],@Theta[3]
+	#vpermq		@Theta[3],@Theta[4],@Theta[2]
+	#vpermq		@Theta[3],@Theta[3],@Theta[1]
+
+	call		__KeccakF1600
+
+	vmovdqu64	$A00,40*0-96($A_flat){$k11111}
+	vmovdqu64	$A10,40*1-96($A_flat){$k11111}
+	vmovdqu64	$A20,40*2-96($A_flat){$k11111}
+	vmovdqu64	$A30,40*3-96($A_flat){$k11111}
+	vmovdqu64	$A40,40*4-96($A_flat){$k11111}
+
+	lea	-96($A_flat),%r9
+	mov	$bsz,%rax
+	jmp	.Loop_squeeze_avx512
+
+.Ltail_squeeze_avx512:
+	mov	$out,%rdi
+	mov	%r9,%rsi
+	mov	$len,%rcx
+	.byte	0xf3,0xa4		# rep movsb
+
+.Ldone_squeeze_avx512:
+	vzeroupper
+
+	lea	(%r11),%rsp
+	ret
+.size	SHA3_squeeze,.-SHA3_squeeze
+
+.align	64
+theta_perm:
+	.quad	0, 1, 2, 3, 4, 5, 6, 7		# [not used]
+	.quad	4, 0, 1, 2, 3, 5, 6, 7
+	.quad	3, 4, 0, 1, 2, 5, 6, 7
+	.quad	2, 3, 4, 0, 1, 5, 6, 7
+	.quad	1, 2, 3, 4, 0, 5, 6, 7
+
+rhotates1:
+	.quad	0,  44, 43, 21, 14, 0, 0, 0	# [0][0] [1][1] [2][2] [3][3] [4][4]
+	.quad	18, 1,  6,  25, 8,  0, 0, 0	# [4][0] [0][1] [1][2] [2][3] [3][4]
+	.quad	41, 2,	62, 55, 39, 0, 0, 0	# [3][0] [4][1] [0][2] [1][3] [2][4]
+	.quad	3,  45, 61, 28, 20, 0, 0, 0	# [2][0] [3][1] [4][2] [0][3] [1][4]
+	.quad	36, 10, 15, 56, 27, 0, 0, 0	# [1][0] [2][1] [3][2] [4][3] [0][4]
+
+rhotates0:
+	.quad	 0,  1, 62, 28, 27, 0, 0, 0
+	.quad	36, 44,  6, 55, 20, 0, 0, 0
+	.quad	 3, 10, 43, 25, 39, 0, 0, 0
+	.quad	41, 45, 15, 21,  8, 0, 0, 0
+	.quad	18,  2, 61, 56, 14, 0, 0, 0
+
+pi0_perm:
+	.quad	0, 3, 1, 4, 2, 5, 6, 7
+	.quad	1, 4, 2, 0, 3, 5, 6, 7
+	.quad	2, 0, 3, 1, 4, 5, 6, 7
+	.quad	3, 1, 4, 2, 0, 5, 6, 7
+	.quad	4, 2, 0, 3, 1, 5, 6, 7
+
+
+iotas:
+	.quad	0x0000000000000001
+	.quad	0x0000000000008082
+	.quad	0x800000000000808a
+	.quad	0x8000000080008000
+	.quad	0x000000000000808b
+	.quad	0x0000000080000001
+	.quad	0x8000000080008081
+	.quad	0x8000000000008009
+	.quad	0x000000000000008a
+	.quad	0x0000000000000088
+	.quad	0x0000000080008009
+	.quad	0x000000008000000a
+	.quad	0x000000008000808b
+	.quad	0x800000000000008b
+	.quad	0x8000000000008089
+	.quad	0x8000000000008003
+	.quad	0x8000000000008002
+	.quad	0x8000000000000080
+	.quad	0x000000000000800a
+	.quad	0x800000008000000a
+	.quad	0x8000000080008081
+	.quad	0x8000000000008080
+	.quad	0x0000000080000001
+	.quad	0x8000000080008008
+
+.asciz	"Keccak-1600 absorb and squeeze for AVX-512F, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+$output=pop;
+open STDOUT,">$output";
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-avx512vl.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-avx512vl.pl
new file mode 100755
index 000000000..a21bb8615
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-avx512vl.pl
@@ -0,0 +1,392 @@
+#!/usr/bin/env perl
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# Keccak-1600 for AVX512VL.
+#
+# December 2017.
+#
+# This is an adaptation of AVX2 module that reuses register data
+# layout, but utilizes new 256-bit AVX512VL instructions. See AVX2
+# module for further information on layout.
+#
+########################################################################
+# Numbers are cycles per processed byte out of large message.
+#
+#			r=1088(*)
+#
+# Skylake-X		6.4/+47%
+#
+# (*)	Corresponds to SHA3-256. Percentage after slash is improvement
+#	coefficient in comparison to scalar keccak1600-x86_64.pl.
+
+# Digits in variables' names denote right-most coordinates:
+
+my ($A00,	# [0][0] [0][0] [0][0] [0][0]		# %ymm0
+    $A01,	# [0][4] [0][3] [0][2] [0][1]		# %ymm1
+    $A20,	# [3][0] [1][0] [4][0] [2][0]		# %ymm2
+    $A31,	# [2][4] [4][3] [1][2] [3][1]		# %ymm3
+    $A21,	# [3][4] [1][3] [4][2] [2][1]		# %ymm4
+    $A41,	# [1][4] [2][3] [3][2] [4][1]		# %ymm5
+    $A11) =	# [4][4] [3][3] [2][2] [1][1]		# %ymm6
+    map("%ymm$_",(0..6));
+
+# We also need to map the magic order into offsets within structure:
+
+my @A_jagged = ([0,0], [1,0], [1,1], [1,2], [1,3],	# [0][0..4]
+		[2,2], [6,0], [3,1], [4,2], [5,3],	# [1][0..4]
+		[2,0], [4,0], [6,1], [5,2], [3,3],	# [2][0..4]
+		[2,3], [3,0], [5,1], [6,2], [4,3],	# [3][0..4]
+		[2,1], [5,0], [4,1], [3,2], [6,3]);	# [4][0..4]
+   @A_jagged = map(8*($$_[0]*4+$$_[1]), @A_jagged);	# ... and now linear
+
+my @T = map("%ymm$_",(7..15));
+my ($C14,$C00,$D00,$D14) = @T[5..8];
+my ($R20,$R01,$R31,$R21,$R41,$R11) = map("%ymm$_",(16..21));
+
+$code.=<<___;
+.text
+
+.type	__KeccakF1600,\@function
+.align	32
+__KeccakF1600:
+	lea		iotas(%rip),%r10
+	mov		\$24,%eax
+	jmp		.Loop_avx512vl
+
+.align	32
+.Loop_avx512vl:
+	######################################### Theta
+	vpshufd		\$0b01001110,$A20,$C00
+	vpxor		$A31,$A41,$C14
+	vpxor		$A11,$A21,@T[2]
+	vpternlogq	\$0x96,$A01,$T[2],$C14	# C[1..4]
+
+	vpxor		$A20,$C00,$C00
+	vpermq		\$0b01001110,$C00,@T[0]
+
+	vpermq		\$0b10010011,$C14,@T[4]
+	vprolq		\$1,$C14,@T[1]		# ROL64(C[1..4],1)
+
+	vpermq		\$0b00111001,@T[1],$D14
+	vpxor		@T[4],@T[1],$D00
+	vpermq		\$0b00000000,$D00,$D00	# D[0..0] = ROL64(C[1],1) ^ C[4]
+
+	vpternlogq	\$0x96,@T[0],$A00,$C00	# C[0..0]
+	vprolq		\$1,$C00,@T[1]		# ROL64(C[0..0],1)
+
+	vpxor		$D00,$A00,$A00		# ^= D[0..0]
+
+	vpblendd	\$0b11000000,@T[1],$D14,$D14
+	vpblendd	\$0b00000011,$C00,@T[4],@T[0]
+
+	######################################### Rho + Pi + pre-Chi shuffle
+	 vpxor		$D00,$A20,$A20		# ^= D[0..0] from Theta
+	vprolvq		$R20,$A20,$A20
+
+	 vpternlogq	\$0x96,@T[0],$D14,$A31	# ^= D[1..4] from Theta
+	vprolvq		$R31,$A31,$A31
+
+	 vpternlogq	\$0x96,@T[0],$D14,$A21	# ^= D[1..4] from Theta
+	vprolvq		$R21,$A21,$A21
+
+	 vpternlogq	\$0x96,@T[0],$D14,$A41	# ^= D[1..4] from Theta
+	vprolvq		$R41,$A41,$A41
+
+	 vpermq		\$0b10001101,$A20,@T[3]	# $A20 -> future $A31
+	 vpermq		\$0b10001101,$A31,@T[4]	# $A31 -> future $A21
+	 vpternlogq	\$0x96,@T[0],$D14,$A11	# ^= D[1..4] from Theta
+	vprolvq		$R11,$A11,@T[1]		# $A11 -> future $A01
+
+	 vpermq		\$0b00011011,$A21,@T[5]	# $A21 -> future $A41
+	 vpermq		\$0b01110010,$A41,@T[6]	# $A41 -> future $A11
+	 vpternlogq	\$0x96,@T[0],$D14,$A01	# ^= D[1..4] from Theta
+	vprolvq		$R01,$A01,@T[2]		# $A01 -> future $A20
+
+	######################################### Chi
+	vpblendd	\$0b00001100,@T[6],@T[2],$A31	#               [4][4] [2][0]
+	vpblendd	\$0b00001100,@T[2],@T[4],@T[8]	#               [4][0] [2][1]
+	 vpblendd	\$0b00001100,@T[4],@T[3],$A41	#               [4][2] [2][4]
+	 vpblendd	\$0b00001100,@T[3],@T[2],@T[7]	#               [4][3] [2][0]
+	vpblendd	\$0b00110000,@T[4],$A31,$A31	#        [1][3] [4][4] [2][0]
+	vpblendd	\$0b00110000,@T[5],@T[8],@T[8]	#        [1][4] [4][0] [2][1]
+	 vpblendd	\$0b00110000,@T[2],$A41,$A41	#        [1][0] [4][2] [2][4]
+	 vpblendd	\$0b00110000,@T[6],@T[7],@T[7]	#        [1][1] [4][3] [2][0]
+	vpblendd	\$0b11000000,@T[5],$A31,$A31	# [3][2] [1][3] [4][4] [2][0]
+	vpblendd	\$0b11000000,@T[6],@T[8],@T[8]	# [3][3] [1][4] [4][0] [2][1]
+	 vpblendd	\$0b11000000,@T[6],$A41,$A41	# [3][3] [1][0] [4][2] [2][4]
+	 vpblendd	\$0b11000000,@T[4],@T[7],@T[7]	# [3][4] [1][1] [4][3] [2][0]
+	vpternlogq	\$0xC6,@T[8],@T[3],$A31		# [3][1] [1][2] [4][3] [2][4]
+	 vpternlogq	\$0xC6,@T[7],@T[5],$A41		# [3][2] [1][4] [4][1] [2][3]
+
+	vpsrldq		\$8,@T[1],@T[0]
+	vpandn		@T[0],@T[1],@T[0]	# tgting  [0][0] [0][0] [0][0] [0][0]
+
+	vpblendd	\$0b00001100,@T[2],@T[5],$A11	#               [4][0] [2][3]
+	vpblendd	\$0b00001100,@T[5],@T[3],@T[8]	#               [4][1] [2][4]
+	vpblendd	\$0b00110000,@T[3],$A11,$A11	#        [1][2] [4][0] [2][3]
+	vpblendd	\$0b00110000,@T[4],@T[8],@T[8]	#        [1][3] [4][1] [2][4]
+	vpblendd	\$0b11000000,@T[4],$A11,$A11	# [3][4] [1][2] [4][0] [2][3]
+	vpblendd	\$0b11000000,@T[2],@T[8],@T[8]	# [3][0] [1][3] [4][1] [2][4]
+	vpternlogq	\$0xC6,@T[8],@T[6],$A11		# [3][3] [1][1] [4][4] [2][2]
+
+	  vpermq	\$0b00011110,@T[1],$A21		# [0][1] [0][2] [0][4] [0][3]
+	  vpblendd	\$0b00110000,$A00,$A21,@T[8]	# [0][1] [0][0] [0][4] [0][3]
+	  vpermq	\$0b00111001,@T[1],$A01		# [0][1] [0][4] [0][3] [0][2]
+	  vpblendd	\$0b11000000,$A00,$A01,$A01	# [0][0] [0][4] [0][3] [0][2]
+
+	vpblendd	\$0b00001100,@T[5],@T[4],$A20	#               [4][1] [2][1]
+	vpblendd	\$0b00001100,@T[4],@T[6],@T[7]	#               [4][2] [2][2]
+	vpblendd	\$0b00110000,@T[6],$A20,$A20	#        [1][1] [4][1] [2][1]
+	vpblendd	\$0b00110000,@T[3],@T[7],@T[7]	#        [1][2] [4][2] [2][2]
+	vpblendd	\$0b11000000,@T[3],$A20,$A20	# [3][1] [1][1] [4][1] [2][1]
+	vpblendd	\$0b11000000,@T[5],@T[7],@T[7]	# [3][2] [1][2] [4][2] [2][2]
+	vpternlogq	\$0xC6,@T[7],@T[2],$A20		# [3][0] [1][0] [4][0] [2][0]
+
+	 vpermq		\$0b00000000,@T[0],@T[0]	# [0][0] [0][0] [0][0] [0][0]
+	 vpermq		\$0b00011011,$A31,$A31		# post-Chi shuffle
+	 vpermq		\$0b10001101,$A41,$A41
+	 vpermq		\$0b01110010,$A11,$A11
+
+	vpblendd	\$0b00001100,@T[3],@T[6],$A21	#               [4][3] [2][2]
+	vpblendd	\$0b00001100,@T[6],@T[5],@T[7]	#               [4][4] [2][3]
+	vpblendd	\$0b00110000,@T[5],$A21,$A21	#        [1][4] [4][3] [2][2]
+	vpblendd	\$0b00110000,@T[2],@T[7],@T[7]	#        [1][0] [4][4] [2][3]
+	vpblendd	\$0b11000000,@T[2],$A21,$A21	# [3][0] [1][4] [4][3] [2][2]
+	vpblendd	\$0b11000000,@T[3],@T[7],@T[7]	# [3][1] [1][0] [4][4] [2][3]
+
+	vpternlogq	\$0xC6,@T[8],@T[1],$A01		# [0][4] [0][3] [0][2] [0][1]
+	vpternlogq	\$0xC6,@T[7],@T[4],$A21		# [3][4] [1][3] [4][2] [2][1]
+
+	######################################### Iota
+	vpternlogq	\$0x96,(%r10),@T[0],$A00
+	lea		32(%r10),%r10
+
+	dec		%eax
+	jnz		.Loop_avx512vl
+
+	ret
+.size	__KeccakF1600,.-__KeccakF1600
+___
+my ($A_flat,$inp,$len,$bsz) = ("%rdi","%rsi","%rdx","%rcx");
+my  $out = $inp;	# in squeeze
+
+$code.=<<___;
+.globl	SHA3_absorb
+.type	SHA3_absorb,\@function
+.align	32
+SHA3_absorb:
+	mov	%rsp,%r11
+
+	lea	-240(%rsp),%rsp
+	and	\$-32,%rsp
+
+	lea	96($A_flat),$A_flat
+	lea	96($inp),$inp
+	lea	96(%rsp),%r10
+	lea	rhotates_left(%rip),%r8
+
+	vzeroupper
+
+	vpbroadcastq	-96($A_flat),$A00	# load A[5][5]
+	vmovdqu		8+32*0-96($A_flat),$A01
+	vmovdqu		8+32*1-96($A_flat),$A20
+	vmovdqu		8+32*2-96($A_flat),$A31
+	vmovdqu		8+32*3-96($A_flat),$A21
+	vmovdqu		8+32*4-96($A_flat),$A41
+	vmovdqu		8+32*5-96($A_flat),$A11
+
+	vmovdqa64	0*32(%r8),$R20		# load "rhotate" indices
+	vmovdqa64	1*32(%r8),$R01
+	vmovdqa64	2*32(%r8),$R31
+	vmovdqa64	3*32(%r8),$R21
+	vmovdqa64	4*32(%r8),$R41
+	vmovdqa64	5*32(%r8),$R11
+
+	vpxor		@T[0],@T[0],@T[0]
+	vmovdqa		@T[0],32*2-96(%r10)	# zero transfer area on stack
+	vmovdqa		@T[0],32*3-96(%r10)
+	vmovdqa		@T[0],32*4-96(%r10)
+	vmovdqa		@T[0],32*5-96(%r10)
+	vmovdqa		@T[0],32*6-96(%r10)
+
+.Loop_absorb_avx512vl:
+	mov		$bsz,%rax
+	sub		$bsz,$len
+	jc		.Ldone_absorb_avx512vl
+
+	shr		\$3,%eax
+	vpbroadcastq	0-96($inp),@T[0]
+	vmovdqu		8-96($inp),@T[1]
+	sub		\$4,%eax
+___
+for(my $i=5; $i<25; $i++) {
+$code.=<<___
+	dec	%eax
+	jz	.Labsorved_avx512vl
+	mov	8*$i-96($inp),%r8
+	mov	%r8,$A_jagged[$i]-96(%r10)
+___
+}
+$code.=<<___;
+.Labsorved_avx512vl:
+	lea	($inp,$bsz),$inp
+
+	vpxor	@T[0],$A00,$A00
+	vpxor	@T[1],$A01,$A01
+	vpxor	32*2-96(%r10),$A20,$A20
+	vpxor	32*3-96(%r10),$A31,$A31
+	vpxor	32*4-96(%r10),$A21,$A21
+	vpxor	32*5-96(%r10),$A41,$A41
+	vpxor	32*6-96(%r10),$A11,$A11
+
+	call	__KeccakF1600
+
+	lea	96(%rsp),%r10
+	jmp	.Loop_absorb_avx512vl
+
+.Ldone_absorb_avx512vl:
+	vmovq	%xmm0,-96($A_flat)
+	vmovdqu	$A01,8+32*0-96($A_flat)
+	vmovdqu	$A20,8+32*1-96($A_flat)
+	vmovdqu	$A31,8+32*2-96($A_flat)
+	vmovdqu	$A21,8+32*3-96($A_flat)
+	vmovdqu	$A41,8+32*4-96($A_flat)
+	vmovdqu	$A11,8+32*5-96($A_flat)
+
+	vzeroupper
+
+	lea	(%r11),%rsp
+	lea	($len,$bsz),%rax		# return value
+	ret
+.size	SHA3_absorb,.-SHA3_absorb
+
+.globl	SHA3_squeeze
+.type	SHA3_squeeze,\@function
+.align	32
+SHA3_squeeze:
+	mov	%rsp,%r11
+
+	lea	96($A_flat),$A_flat
+	lea	rhotates_left(%rip),%r8
+	shr	\$3,$bsz
+
+	vzeroupper
+
+	vpbroadcastq	-96($A_flat),$A00
+	vpxor		@T[0],@T[0],@T[0]
+	vmovdqu		8+32*0-96($A_flat),$A01
+	vmovdqu		8+32*1-96($A_flat),$A20
+	vmovdqu		8+32*2-96($A_flat),$A31
+	vmovdqu		8+32*3-96($A_flat),$A21
+	vmovdqu		8+32*4-96($A_flat),$A41
+	vmovdqu		8+32*5-96($A_flat),$A11
+
+	vmovdqa64	0*32(%r8),$R20		# load "rhotate" indices
+	vmovdqa64	1*32(%r8),$R01
+	vmovdqa64	2*32(%r8),$R31
+	vmovdqa64	3*32(%r8),$R21
+	vmovdqa64	4*32(%r8),$R41
+	vmovdqa64	5*32(%r8),$R11
+
+	mov	$bsz,%rax
+
+.Loop_squeeze_avx512vl:
+	mov	@A_jagged[$i]-96($A_flat),%r8
+___
+for (my $i=0; $i<25; $i++) {
+$code.=<<___;
+	sub	\$8,$len
+	jc	.Ltail_squeeze_avx512vl
+	mov	%r8,($out)
+	lea	8($out),$out
+	je	.Ldone_squeeze_avx512vl
+	dec	%eax
+	je	.Lextend_output_avx512vl
+	mov	@A_jagged[$i+1]-120($A_flat),%r8
+___
+}
+$code.=<<___;
+.Lextend_output_avx512vl:
+	call	__KeccakF1600
+
+	vmovq	%xmm0,-96($A_flat)
+	vmovdqu	$A01,8+32*0-96($A_flat)
+	vmovdqu	$A20,8+32*1-96($A_flat)
+	vmovdqu	$A31,8+32*2-96($A_flat)
+	vmovdqu	$A21,8+32*3-96($A_flat)
+	vmovdqu	$A41,8+32*4-96($A_flat)
+	vmovdqu	$A11,8+32*5-96($A_flat)
+
+	mov	$bsz,%rax
+	jmp	.Loop_squeeze_avx512vl
+
+
+.Ltail_squeeze_avx512vl:
+	add	\$8,$len
+.Loop_tail_avx512vl:
+	mov	%r8b,($out)
+	lea	1($out),$out
+	shr	\$8,%r8
+	dec	$len
+	jnz	.Loop_tail_avx512vl
+
+.Ldone_squeeze_avx512vl:
+	vzeroupper
+
+	lea	(%r11),%rsp
+	ret
+.size	SHA3_squeeze,.-SHA3_squeeze
+
+.align	64
+rhotates_left:
+	.quad	3,	18,	36,	41	# [2][0] [4][0] [1][0] [3][0]
+	.quad	1,	62,	28,	27	# [0][1] [0][2] [0][3] [0][4]
+	.quad	45,	6,	56,	39	# [3][1] [1][2] [4][3] [2][4]
+	.quad	10,	61,	55,	8	# [2][1] [4][2] [1][3] [3][4]
+	.quad	2,	15,	25,	20	# [4][1] [3][2] [2][3] [1][4]
+	.quad	44,	43,	21,	14	# [1][1] [2][2] [3][3] [4][4]
+iotas:
+	.quad	0x0000000000000001, 0x0000000000000001, 0x0000000000000001, 0x0000000000000001
+	.quad	0x0000000000008082, 0x0000000000008082, 0x0000000000008082, 0x0000000000008082
+	.quad	0x800000000000808a, 0x800000000000808a, 0x800000000000808a, 0x800000000000808a
+	.quad	0x8000000080008000, 0x8000000080008000, 0x8000000080008000, 0x8000000080008000
+	.quad	0x000000000000808b, 0x000000000000808b, 0x000000000000808b, 0x000000000000808b
+	.quad	0x0000000080000001, 0x0000000080000001, 0x0000000080000001, 0x0000000080000001
+	.quad	0x8000000080008081, 0x8000000080008081, 0x8000000080008081, 0x8000000080008081
+	.quad	0x8000000000008009, 0x8000000000008009, 0x8000000000008009, 0x8000000000008009
+	.quad	0x000000000000008a, 0x000000000000008a, 0x000000000000008a, 0x000000000000008a
+	.quad	0x0000000000000088, 0x0000000000000088, 0x0000000000000088, 0x0000000000000088
+	.quad	0x0000000080008009, 0x0000000080008009, 0x0000000080008009, 0x0000000080008009
+	.quad	0x000000008000000a, 0x000000008000000a, 0x000000008000000a, 0x000000008000000a
+	.quad	0x000000008000808b, 0x000000008000808b, 0x000000008000808b, 0x000000008000808b
+	.quad	0x800000000000008b, 0x800000000000008b, 0x800000000000008b, 0x800000000000008b
+	.quad	0x8000000000008089, 0x8000000000008089, 0x8000000000008089, 0x8000000000008089
+	.quad	0x8000000000008003, 0x8000000000008003, 0x8000000000008003, 0x8000000000008003
+	.quad	0x8000000000008002, 0x8000000000008002, 0x8000000000008002, 0x8000000000008002
+	.quad	0x8000000000000080, 0x8000000000000080, 0x8000000000000080, 0x8000000000000080
+	.quad	0x000000000000800a, 0x000000000000800a, 0x000000000000800a, 0x000000000000800a
+	.quad	0x800000008000000a, 0x800000008000000a, 0x800000008000000a, 0x800000008000000a
+	.quad	0x8000000080008081, 0x8000000080008081, 0x8000000080008081, 0x8000000080008081
+	.quad	0x8000000000008080, 0x8000000000008080, 0x8000000000008080, 0x8000000000008080
+	.quad	0x0000000080000001, 0x0000000080000001, 0x0000000080000001, 0x0000000080000001
+	.quad	0x8000000080008008, 0x8000000080008008, 0x8000000080008008, 0x8000000080008008
+
+.asciz	"Keccak-1600 absorb and squeeze for AVX512VL, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+$output=pop;
+open STDOUT,">$output";
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-c64x.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-c64x.pl
new file mode 100755
index 000000000..b00af9af9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-c64x.pl
@@ -0,0 +1,885 @@
+#!/usr/bin/env perl
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# [ABI- and endian-neutral] Keccak-1600 for C64x.
+#
+# June 2017.
+#
+# This is straightforward KECCAK_1X_ALT variant (see sha/keccak1600.c)
+# with bit interleaving. 64-bit values are simply split between A- and
+# B-files, with A-file holding least significant halves. This works
+# out perfectly, because all operations including cross-communications
+# [in rotate operations] are always complementary. Performance is
+# [incredible for a 32-bit processor] 10.9 cycles per processed byte
+# for r=1088, which corresponds to SHA3-256. This is >15x faster than
+# compiler-generated KECCAK_1X_ALT code, and >10x than other variants.
+# On average processor ends up issuing ~4.5 instructions per cycle...
+
+my @A = map([ $_, ($_+1), ($_+2), ($_+3), ($_+4) ], (5,10,16,21,26));
+   $A[1][4] = 31;	# B14 is reserved, A14 is used as iota[]
+   ($A[3][0],$A[4][1]) = ($A[4][1],$A[3][0]);
+my @C = (0..4,$A[3][0],$A[4][0]);
+my $iotas = "A14";
+
+my @rhotates = ([  0,  1, 62, 28, 27 ],
+                [ 36, 44,  6, 55, 20 ],
+                [  3, 10, 43, 25, 39 ],
+                [ 41, 45, 15, 21,  8 ],
+                [ 18,  2, 61, 56, 14 ]);
+
+sub ROL64 {
+    my ($src,$rot,$dst,$p) = @_;
+
+    if ($rot&1) {
+$code.=<<___;
+$p	ROTL	B$src,$rot/2+1,A$dst
+||	ROTL	A$src,$rot/2,  B$dst
+___
+    } else {
+$code.=<<___;
+$p	ROTL	A$src,$rot/2,A$dst
+||	ROTL	B$src,$rot/2,B$dst
+___
+    }
+}
+
+########################################################################
+# Stack frame layout
+#
+# SP--->+------+------+
+#       |      |      |
+# +1--->+------+------+<- -9	below 4 slots are used by KeccakF1600_int
+#       |      |      |
+# +2--->+------+------+<- -8
+#       |      |      |
+# +3--->+------+------+<- -7
+#       | A2   | A3   |		A3:A2 are preserved by KeccakF1600_int
+# +4--->+------+------+<- -6
+#       | B2   | B3   |		B3:B2 are preserved by KeccakF1600_int
+# +5--->+------+------+<- -5	below is ABI-compliant layout
+#       | A10  | A11  |
+# +6--->+------+------+<- -4
+#       | A12  | A13  |
+# +7--->+------+------+<- -3
+#       | A14  | B3   |
+# +8--->+------+------+<- -2
+#       | B10  | B11  |
+# +9--->+------+------+<- -1
+#       | B12  | B13  |
+#       +------+------+<---FP
+#       | A15  |
+#       +------+--
+
+$code.=<<___;
+	.text
+
+	.if	.ASSEMBLER_VERSION<7000000
+	.asg	0,__TI_EABI__
+	.endif
+	.if	__TI_EABI__
+	.nocmp
+	.asg	KeccakF1600,_KeccakF1600
+	.asg	SHA3_absorb,_SHA3_absorb
+	.asg	SHA3_squeeze,_SHA3_squeeze
+	.endif
+
+	.asg	B3,RA
+	.asg	A15,FP
+	.asg	B15,SP
+
+	.align	32
+_KeccakF1600_int:
+	.asmfunc
+	STDW	A3:A2,*FP[-7]
+||	STDW	B3:B2,*SP[4]
+_KeccakF1600_cheat:
+	.if	__TI_EABI__
+	ADDKPC	_KeccakF1600_int,B0
+||	MVKL	\$PCR_OFFSET(iotas,_KeccakF1600_int),$iotas
+	MVKH	\$PCR_OFFSET(iotas,_KeccakF1600_int),$iotas
+	.else
+	ADDKPC	_KeccakF1600_int,B0
+||	MVKL	(iotas-_KeccakF1600_int),$iotas
+	MVKH	(iotas-_KeccakF1600_int),$iotas
+	.endif
+	ADD	B0,$iotas,$iotas
+loop?:
+	XOR	A$A[0][2],A$A[1][2],A$C[2]	; Theta
+||	XOR	B$A[0][2],B$A[1][2],B$C[2]
+||	XOR	A$A[0][3],A$A[1][3],A$C[3]
+||	XOR	B$A[0][3],B$A[1][3],B$C[3]
+||	XOR	A$A[0][0],A$A[1][0],A$C[0]
+||	XOR	B$A[0][0],B$A[1][0],B$C[0]
+	XOR	A$A[2][2],A$C[2],A$C[2]
+||	XOR	B$A[2][2],B$C[2],B$C[2]
+||	XOR	A$A[2][3],A$C[3],A$C[3]
+||	XOR	B$A[2][3],B$C[3],B$C[3]
+||	XOR	A$A[2][0],A$C[0],A$C[0]
+||	XOR	B$A[2][0],B$C[0],B$C[0]
+	XOR	A$A[3][2],A$C[2],A$C[2]
+||	XOR	B$A[3][2],B$C[2],B$C[2]
+||	XOR	A$A[3][3],A$C[3],A$C[3]
+||	XOR	B$A[3][3],B$C[3],B$C[3]
+||	XOR	A$A[3][0],A$C[0],A$C[0]
+||	XOR	B$A[3][0],B$C[0],B$C[0]
+	XOR	A$A[4][2],A$C[2],A$C[2]
+||	XOR	B$A[4][2],B$C[2],B$C[2]
+||	XOR	A$A[4][3],A$C[3],A$C[3]
+||	XOR	B$A[4][3],B$C[3],B$C[3]
+||	XOR	A$A[4][0],A$C[0],A$C[0]
+||	XOR	B$A[4][0],B$C[0],B$C[0]
+	XOR	A$A[0][4],A$A[1][4],A$C[4]
+||	XOR	B$A[0][4],B$A[1][4],B$C[4]
+||	XOR	A$A[0][1],A$A[1][1],A$C[1]
+||	XOR	B$A[0][1],B$A[1][1],B$C[1]
+||	STDW	A$A[3][0]:A$A[4][0],*SP[1]	; offload some data
+	STDW	B$A[3][0]:B$A[4][0],*SP[2]
+||	XOR	A$A[2][4],A$C[4],A$C[4]
+||	XOR	B$A[2][4],B$C[4],B$C[4]
+||	XOR	A$A[2][1],A$C[1],A$C[1]
+||	XOR	B$A[2][1],B$C[1],B$C[1]
+||	ROTL	B$C[2],1,A$C[5]			; ROL64(C[2],1)
+||	ROTL	A$C[2],0,B$C[5]
+	XOR	A$A[3][4],A$C[4],A$C[4]
+||	XOR	B$A[3][4],B$C[4],B$C[4]
+||	XOR	A$A[3][1],A$C[1],A$C[1]
+||	XOR	B$A[3][1],B$C[1],B$C[1]
+||	ROTL	B$C[3],1,A$C[6]			; ROL64(C[3],1)
+||	ROTL	A$C[3],0,B$C[6]
+	XOR	A$A[4][4],A$C[4],A$C[4]
+||	XOR	B$A[4][4],B$C[4],B$C[4]
+||	XOR	A$A[4][1],A$C[1],A$C[1]
+||	XOR	B$A[4][1],B$C[1],B$C[1]
+||	XOR	A$C[0],A$C[5],A$C[5]		; C[0] ^ ROL64(C[2],1)
+||	XOR	B$C[0],B$C[5],B$C[5]
+	XOR	A$C[5],A$A[0][1],A$A[0][1]
+||	XOR	B$C[5],B$A[0][1],B$A[0][1]
+||	XOR	A$C[5],A$A[1][1],A$A[1][1]
+||	XOR	B$C[5],B$A[1][1],B$A[1][1]
+||	XOR	A$C[5],A$A[2][1],A$A[2][1]
+||	XOR	B$C[5],B$A[2][1],B$A[2][1]
+	XOR	A$C[5],A$A[3][1],A$A[3][1]
+||	XOR	B$C[5],B$A[3][1],B$A[3][1]
+||	XOR	A$C[5],A$A[4][1],A$A[4][1]
+||	XOR	B$C[5],B$A[4][1],B$A[4][1]
+||	ROTL	B$C[4],1,A$C[5]			; ROL64(C[4],1)
+||	ROTL	A$C[4],0,B$C[5]
+||	XOR	A$C[1],A$C[6],A$C[6]		; C[1] ^ ROL64(C[3],1)
+||	XOR	B$C[1],B$C[6],B$C[6]
+	XOR	A$C[6],A$A[0][2],A$A[0][2]
+||	XOR	B$C[6],B$A[0][2],B$A[0][2]
+||	XOR	A$C[6],A$A[1][2],A$A[1][2]
+||	XOR	B$C[6],B$A[1][2],B$A[1][2]
+||	XOR	A$C[6],A$A[2][2],A$A[2][2]
+||	XOR	B$C[6],B$A[2][2],B$A[2][2]
+||	ROTL	B$C[1],1,A$C[1]			; ROL64(C[1],1)
+||	ROTL	A$C[1],0,B$C[1]
+	XOR	A$C[6],A$A[3][2],A$A[3][2]
+||	XOR	B$C[6],B$A[3][2],B$A[3][2]
+||	XOR	A$C[6],A$A[4][2],A$A[4][2]
+||	XOR	B$C[6],B$A[4][2],B$A[4][2]
+||	ROTL	B$C[0],1,A$C[6]			; ROL64(C[0],1)
+||	ROTL	A$C[0],0,B$C[6]
+||	XOR	A$C[5],A$C[2],A$C[2]		; C[2] ^= ROL64(C[4],1)
+||	XOR	B$C[5],B$C[2],B$C[2]
+	XOR	A$C[2],A$A[0][3],A$A[0][3]
+||	XOR	B$C[2],B$A[0][3],B$A[0][3]
+||	XOR	A$C[2],A$A[1][3],A$A[1][3]
+||	XOR	B$C[2],B$A[1][3],B$A[1][3]
+||	XOR	A$C[2],A$A[2][3],A$A[2][3]
+||	XOR	B$C[2],B$A[2][3],B$A[2][3]
+	XOR	A$C[6],A$C[3],A$C[3]		; C[3] ^= ROL64(C[0],1)
+||	XOR	B$C[6],B$C[3],B$C[3]
+||	LDDW	*FP[-9],A$A[3][0]:A$A[4][0]	; restore offloaded data
+||	LDDW	*SP[2],B$A[3][0]:B$A[4][0]
+||	XOR	A$C[2],A$A[3][3],A$A[3][3]
+||	XOR	B$C[2],B$A[3][3],B$A[3][3]
+	XOR	A$C[2],A$A[4][3],A$A[4][3]
+||	XOR	B$C[2],B$A[4][3],B$A[4][3]
+||	XOR	A$C[3],A$A[0][4],A$A[0][4]
+||	XOR	B$C[3],B$A[0][4],B$A[0][4]
+||	XOR	A$C[3],A$A[1][4],A$A[1][4]
+||	XOR	B$C[3],B$A[1][4],B$A[1][4]
+	XOR	A$C[3],A$A[2][4],A$A[2][4]
+||	XOR	B$C[3],B$A[2][4],B$A[2][4]
+||	XOR	A$C[3],A$A[3][4],A$A[3][4]
+||	XOR	B$C[3],B$A[3][4],B$A[3][4]
+||	XOR	A$C[3],A$A[4][4],A$A[4][4]
+||	XOR	B$C[3],B$A[4][4],B$A[4][4]
+	XOR	A$C[1],A$C[4],A$C[4]		; C[4] ^= ROL64(C[1],1)
+||	XOR	B$C[1],B$C[4],B$C[4]
+||	MV	A$A[0][1],A$C[1]		; Rho+Pi, "early start"
+||	MV	B$A[0][1],B$C[1]
+___
+	&ROL64	($A[1][1],$rhotates[1][1],$A[0][1],"||");
+$code.=<<___;
+	XOR	A$C[4],A$A[0][0],A$A[0][0]
+||	XOR	B$C[4],B$A[0][0],B$A[0][0]
+||	XOR	A$C[4],A$A[1][0],A$A[1][0]
+||	XOR	B$C[4],B$A[1][0],B$A[1][0]
+||	MV	A$A[0][3],A$C[3]
+||	MV	B$A[0][3],B$C[3]
+___
+	&ROL64	($A[3][3],$rhotates[3][3],$A[0][3],"||");
+$code.=<<___;
+	XOR	A$C[4],A$A[2][0],A$A[2][0]
+||	XOR	B$C[4],B$A[2][0],B$A[2][0]
+||	XOR	A$C[4],A$A[3][0],A$A[3][0]
+||	XOR	B$C[4],B$A[3][0],B$A[3][0]
+||	MV	A$A[0][2],A$C[2]
+||	MV	B$A[0][2],B$C[2]
+___
+	&ROL64	($A[2][2],$rhotates[2][2],$A[0][2],"||");
+$code.=<<___;
+	XOR	A$C[4],A$A[4][0],A$A[4][0]
+||	XOR	B$C[4],B$A[4][0],B$A[4][0]
+||	MV	A$A[0][4],A$C[4]
+||	MV	B$A[0][4],B$C[4]
+___
+	&ROL64	($A[4][4],$rhotates[4][4],$A[0][4],"||");
+
+	&ROL64	($A[1][4],$rhotates[1][4],$A[1][1]);
+$code.=<<___;
+||	LDW	*${iotas}++[2],A$C[0]
+___
+	&ROL64	($A[2][3],$rhotates[2][3],$A[2][2]);
+$code.=<<___;
+||	LDW	*${iotas}[-1],B$C[0]
+___
+	&ROL64	($A[3][2],$rhotates[3][2],$A[3][3]);
+	&ROL64	($A[4][1],$rhotates[4][1],$A[4][4]);
+
+	&ROL64	($A[4][2],$rhotates[4][2],$A[1][4]);
+	&ROL64	($A[3][4],$rhotates[3][4],$A[2][3]);
+	&ROL64	($A[2][1],$rhotates[2][1],$A[3][2]);
+	&ROL64	($A[1][3],$rhotates[1][3],$A[4][1]);
+
+	&ROL64	($A[2][4],$rhotates[2][4],$A[4][2]);
+	&ROL64	($A[4][3],$rhotates[4][3],$A[3][4]);
+	&ROL64	($A[1][2],$rhotates[1][2],$A[2][1]);
+	&ROL64	($A[3][1],$rhotates[3][1],$A[1][3]);
+
+	&ROL64	($A[4][0],$rhotates[4][0],$A[2][4]);
+	&ROL64	($A[3][0],$rhotates[3][0],$A[4][3]);
+	&ROL64	($A[2][0],$rhotates[2][0],$A[1][2]);
+	&ROL64	($A[1][0],$rhotates[1][0],$A[3][1]);
+
+	#&ROL64	($C[3],   $rhotates[0][3],$A[1][0]);	# moved below
+	&ROL64	($C[1],   $rhotates[0][1],$A[2][0]);
+	&ROL64	($C[4],   $rhotates[0][4],$A[3][0]);
+	&ROL64	($C[2],   $rhotates[0][2],$A[4][0]);
+$code.=<<___;
+||	ANDN	A$A[0][2],A$A[0][1],A$C[4]	; Chi+Iota
+||	ANDN	B$A[0][2],B$A[0][1],B$C[4]
+||	ANDN	A$A[0][3],A$A[0][2],A$C[1]
+||	ANDN	B$A[0][3],B$A[0][2],B$C[1]
+||	ANDN	A$A[0][4],A$A[0][3],A$C[2]
+||	ANDN	B$A[0][4],B$A[0][3],B$C[2]
+___
+	&ROL64	($C[3],   $rhotates[0][3],$A[1][0]);
+$code.=<<___;
+||	ANDN	A$A[0][0],A$A[0][4],A$C[3]
+||	ANDN	B$A[0][0],B$A[0][4],B$C[3]
+||	XOR	A$C[4],A$A[0][0],A$A[0][0]
+||	XOR	B$C[4],B$A[0][0],B$A[0][0]
+||	ANDN	A$A[0][1],A$A[0][0],A$C[4]
+||	ANDN	B$A[0][1],B$A[0][0],B$C[4]
+	XOR	A$C[1],A$A[0][1],A$A[0][1]
+||	XOR	B$C[1],B$A[0][1],B$A[0][1]
+||	XOR	A$C[2],A$A[0][2],A$A[0][2]
+||	XOR	B$C[2],B$A[0][2],B$A[0][2]
+||	XOR	A$C[3],A$A[0][3],A$A[0][3]
+||	XOR	B$C[3],B$A[0][3],B$A[0][3]
+	XOR	A$C[4],A$A[0][4],A$A[0][4]
+||	XOR	B$C[4],B$A[0][4],B$A[0][4]
+||	XOR	A$C[0],A$A[0][0],A$A[0][0]	; A[0][0] ^= iotas[i++];
+||	XOR	B$C[0],B$A[0][0],B$A[0][0]
+||	EXTU	$iotas,24,24,A0			; A0 is A$C[0], as we done?
+
+	ANDN	A$A[1][2],A$A[1][1],A$C[4]
+||	ANDN	B$A[1][2],B$A[1][1],B$C[4]
+||	ANDN	A$A[1][3],A$A[1][2],A$C[1]
+||	ANDN	B$A[1][3],B$A[1][2],B$C[1]
+||	ANDN	A$A[1][4],A$A[1][3],A$C[2]
+||	ANDN	B$A[1][4],B$A[1][3],B$C[2]
+	ANDN	A$A[1][0],A$A[1][4],A$C[3]
+||	ANDN	B$A[1][0],B$A[1][4],B$C[3]
+||	XOR	A$C[4],A$A[1][0],A$A[1][0]
+||	XOR	B$C[4],B$A[1][0],B$A[1][0]
+||	ANDN	A$A[1][1],A$A[1][0],A$C[4]
+||	ANDN	B$A[1][1],B$A[1][0],B$C[4]
+	XOR	A$C[1],A$A[1][1],A$A[1][1]
+||	XOR	B$C[1],B$A[1][1],B$A[1][1]
+||	XOR	A$C[2],A$A[1][2],A$A[1][2]
+||	XOR	B$C[2],B$A[1][2],B$A[1][2]
+||	XOR	A$C[3],A$A[1][3],A$A[1][3]
+||	XOR	B$C[3],B$A[1][3],B$A[1][3]
+	XOR	A$C[4],A$A[1][4],A$A[1][4]
+||	XOR	B$C[4],B$A[1][4],B$A[1][4]
+
+||	ANDN	A$A[2][2],A$A[2][1],A$C[4]
+||	ANDN	B$A[2][2],B$A[2][1],B$C[4]
+||	ANDN	A$A[2][3],A$A[2][2],A$C[1]
+||	ANDN	B$A[2][3],B$A[2][2],B$C[1]
+	ANDN	A$A[2][4],A$A[2][3],A$C[2]
+||	ANDN	B$A[2][4],B$A[2][3],B$C[2]
+||	ANDN	A$A[2][0],A$A[2][4],A$C[3]
+||	ANDN	B$A[2][0],B$A[2][4],B$C[3]
+||	XOR	A$C[4],A$A[2][0],A$A[2][0]
+||	XOR	B$C[4],B$A[2][0],B$A[2][0]
+	ANDN	A$A[2][1],A$A[2][0],A$C[4]
+||	ANDN	B$A[2][1],B$A[2][0],B$C[4]
+||	XOR	A$C[1],A$A[2][1],A$A[2][1]
+||	XOR	B$C[1],B$A[2][1],B$A[2][1]
+||	XOR	A$C[2],A$A[2][2],A$A[2][2]
+||	XOR	B$C[2],B$A[2][2],B$A[2][2]
+	XOR	A$C[3],A$A[2][3],A$A[2][3]
+||	XOR	B$C[3],B$A[2][3],B$A[2][3]
+||	XOR	A$C[4],A$A[2][4],A$A[2][4]
+||	XOR	B$C[4],B$A[2][4],B$A[2][4]
+
+	ANDN	A$A[3][2],A$A[3][1],A$C[4]
+||	ANDN	B$A[3][2],B$A[3][1],B$C[4]
+||	ANDN	A$A[3][3],A$A[3][2],A$C[1]
+||	ANDN	B$A[3][3],B$A[3][2],B$C[1]
+||	ANDN	A$A[3][4],A$A[3][3],A$C[2]
+||	ANDN	B$A[3][4],B$A[3][3],B$C[2]
+	ANDN	A$A[3][0],A$A[3][4],A$C[3]
+||	ANDN	B$A[3][0],B$A[3][4],B$C[3]
+||	XOR	A$C[4],A$A[3][0],A$A[3][0]
+||	XOR	B$C[4],B$A[3][0],B$A[3][0]
+||	ANDN	A$A[3][1],A$A[3][0],A$C[4]
+||	ANDN	B$A[3][1],B$A[3][0],B$C[4]
+	XOR	A$C[1],A$A[3][1],A$A[3][1]
+||	XOR	B$C[1],B$A[3][1],B$A[3][1]
+||	XOR	A$C[2],A$A[3][2],A$A[3][2]
+||	XOR	B$C[2],B$A[3][2],B$A[3][2]
+||	XOR	A$C[3],A$A[3][3],A$A[3][3]
+||[A0]	BNOP	loop?
+	XOR	B$C[3],B$A[3][3],B$A[3][3]
+||	XOR	A$C[4],A$A[3][4],A$A[3][4]
+||	XOR	B$C[4],B$A[3][4],B$A[3][4]
+||[!A0]	LDDW	*FP[-7],A3:A2
+||[!A0]	LDDW	*SP[4], RA:B2
+
+	ANDN	A$A[4][2],A$A[4][1],A$C[4]
+||	ANDN	B$A[4][2],B$A[4][1],B$C[4]
+||	ANDN	A$A[4][3],A$A[4][2],A$C[1]
+||	ANDN	B$A[4][3],B$A[4][2],B$C[1]
+||	ANDN	A$A[4][4],A$A[4][3],A$C[2]
+||	ANDN	B$A[4][4],B$A[4][3],B$C[2]
+	ANDN	A$A[4][0],A$A[4][4],A$C[3]
+||	ANDN	B$A[4][0],B$A[4][4],B$C[3]
+||	XOR	A$C[4],A$A[4][0],A$A[4][0]
+||	XOR	B$C[4],B$A[4][0],B$A[4][0]
+||	ANDN	A$A[4][1],A$A[4][0],A$C[4]
+||	ANDN	B$A[4][1],B$A[4][0],B$C[4]
+	XOR	A$C[1],A$A[4][1],A$A[4][1]
+||	XOR	B$C[1],B$A[4][1],B$A[4][1]
+||	XOR	A$C[2],A$A[4][2],A$A[4][2]
+||	XOR	B$C[2],B$A[4][2],B$A[4][2]
+||	XOR	A$C[3],A$A[4][3],A$A[4][3]
+||	XOR	B$C[3],B$A[4][3],B$A[4][3]
+	XOR	A$C[4],A$A[4][4],A$A[4][4]
+||	XOR	B$C[4],B$A[4][4],B$A[4][4]
+;;===== branch to loop? is taken here
+
+	BNOP	RA,5
+	.endasmfunc
+
+	.newblock
+	.global	_KeccakF1600
+	.align	32
+_KeccakF1600:
+	.asmfunc stack_usage(80)
+	STW	FP,*SP--(80)			; save frame pointer
+||	MV	SP,FP
+	STDW	B13:B12,*SP[9]
+||	STDW	A13:A12,*FP[-4]
+	STDW	B11:B10,*SP[8]
+||	STDW	A11:A10,*FP[-5]
+	STW	RA, *SP[15]
+||	STW	A14,*FP[-6]
+||	MV	A4,A2
+||	ADD	4,A4,B2
+
+	LDW	*A2++[2],A$A[0][0]		; load A[5][5]
+||	LDW	*B2++[2],B$A[0][0]
+	LDW	*A2++[2],A$A[0][1]
+||	LDW	*B2++[2],B$A[0][1]
+	LDW	*A2++[2],A$A[0][2]
+||	LDW	*B2++[2],B$A[0][2]
+	LDW	*A2++[2],A$A[0][3]
+||	LDW	*B2++[2],B$A[0][3]
+	LDW	*A2++[2],A$A[0][4]
+||	LDW	*B2++[2],B$A[0][4]
+
+	LDW	*A2++[2],A$A[1][0]
+||	LDW	*B2++[2],B$A[1][0]
+	LDW	*A2++[2],A$A[1][1]
+||	LDW	*B2++[2],B$A[1][1]
+	LDW	*A2++[2],A$A[1][2]
+||	LDW	*B2++[2],B$A[1][2]
+	LDW	*A2++[2],A$A[1][3]
+||	LDW	*B2++[2],B$A[1][3]
+	LDW	*A2++[2],A$A[1][4]
+||	LDW	*B2++[2],B$A[1][4]
+
+	LDW	*A2++[2],A$A[2][0]
+||	LDW	*B2++[2],B$A[2][0]
+	LDW	*A2++[2],A$A[2][1]
+||	LDW	*B2++[2],B$A[2][1]
+	LDW	*A2++[2],A$A[2][2]
+||	LDW	*B2++[2],B$A[2][2]
+	LDW	*A2++[2],A$A[2][3]
+||	LDW	*B2++[2],B$A[2][3]
+	LDW	*A2++[2],A$A[2][4]
+||	LDW	*B2++[2],B$A[2][4]
+
+	LDW	*A2++[2],A$A[3][0]
+||	LDW	*B2++[2],B$A[3][0]
+	LDW	*A2++[2],A$A[3][1]
+||	LDW	*B2++[2],B$A[3][1]
+	LDW	*A2++[2],A$A[3][2]
+||	LDW	*B2++[2],B$A[3][2]
+	LDW	*A2++[2],A$A[3][3]
+||	LDW	*B2++[2],B$A[3][3]
+	LDW	*A2++[2],A$A[3][4]
+||	LDW	*B2++[2],B$A[3][4]
+||	BNOP	_KeccakF1600_int
+
+	ADDKPC	ret?,RA
+||	LDW	*A2++[2],A$A[4][0]
+||	LDW	*B2++[2],B$A[4][0]
+	LDW	*A2++[2],A$A[4][1]
+||	LDW	*B2++[2],B$A[4][1]
+	LDW	*A2++[2],A$A[4][2]
+||	LDW	*B2++[2],B$A[4][2]
+	LDW	*A2++[2],A$A[4][3]
+||	LDW	*B2++[2],B$A[4][3]
+	LDW	*A2,A$A[4][4]
+||	LDW	*B2,B$A[4][4]
+||	ADDK	-192,A2				; rewind
+||	ADDK	-192,B2
+
+	.align	16
+ret?:
+	STW	A$A[0][0],*A2++[2]		; store A[5][5]
+||	STW	B$A[0][0],*B2++[2]
+	STW	A$A[0][1],*A2++[2]
+||	STW	B$A[0][1],*B2++[2]
+	STW	A$A[0][2],*A2++[2]
+||	STW	B$A[0][2],*B2++[2]
+	STW	A$A[0][3],*A2++[2]
+||	STW	B$A[0][3],*B2++[2]
+	STW	A$A[0][4],*A2++[2]
+||	STW	B$A[0][4],*B2++[2]
+
+	STW	A$A[1][0],*A2++[2]
+||	STW	B$A[1][0],*B2++[2]
+	STW	A$A[1][1],*A2++[2]
+||	STW	B$A[1][1],*B2++[2]
+	STW	A$A[1][2],*A2++[2]
+||	STW	B$A[1][2],*B2++[2]
+	STW	A$A[1][3],*A2++[2]
+||	STW	B$A[1][3],*B2++[2]
+	STW	A$A[1][4],*A2++[2]
+||	STW	B$A[1][4],*B2++[2]
+
+	STW	A$A[2][0],*A2++[2]
+||	STW	B$A[2][0],*B2++[2]
+	STW	A$A[2][1],*A2++[2]
+||	STW	B$A[2][1],*B2++[2]
+	STW	A$A[2][2],*A2++[2]
+||	STW	B$A[2][2],*B2++[2]
+	STW	A$A[2][3],*A2++[2]
+||	STW	B$A[2][3],*B2++[2]
+	STW	A$A[2][4],*A2++[2]
+||	STW	B$A[2][4],*B2++[2]
+
+	STW	A$A[3][0],*A2++[2]
+||	STW	B$A[3][0],*B2++[2]
+	STW	A$A[3][1],*A2++[2]
+||	STW	B$A[3][1],*B2++[2]
+	STW	A$A[3][2],*A2++[2]
+||	STW	B$A[3][2],*B2++[2]
+	STW	A$A[3][3],*A2++[2]
+||	STW	B$A[3][3],*B2++[2]
+	STW	A$A[3][4],*A2++[2]
+||	STW	B$A[3][4],*B2++[2]
+
+	LDW	*SP[15],RA
+||	LDW	*FP[-6],A14
+
+	STW	A$A[4][0],*A2++[2]
+||	STW	B$A[4][0],*B2++[2]
+	STW	A$A[4][1],*A2++[2]
+||	STW	B$A[4][1],*B2++[2]
+	STW	A$A[4][2],*A2++[2]
+||	STW	B$A[4][2],*B2++[2]
+	STW	A$A[4][3],*A2++[2]
+||	STW	B$A[4][3],*B2++[2]
+	STW	A$A[4][4],*A2
+||	STW	B$A[4][4],*B2
+||	ADDK	-192,A2				; rewind
+
+	MV	A2,A4				; return original A4
+||	LDDW	*SP[8], B11:B10
+||	LDDW	*FP[-5],A11:A10
+	LDDW	*SP[9], B13:B12
+||	LDDW	*FP[-4],A13:A12
+||	BNOP	RA
+	LDW	*++SP(80),FP			; restore frame pointer
+	NOP	4				; wait till FP is committed
+	.endasmfunc
+
+	.newblock
+	.asg	B2,BSZ
+	.asg	A2,INP
+	.asg	A3,LEN
+	.global	_SHA3_absorb
+	.align	32
+_SHA3_absorb:
+	.asmfunc stack_usage(80)
+	STW	FP,*SP--(80)			; save frame pointer
+||	MV	SP,FP
+	STDW	B13:B12,*SP[9]
+||	STDW	A13:A12,*FP[-4]
+	STDW	B11:B10,*SP[8]
+||	STDW	A11:A10,*FP[-5]
+	STW	RA, *SP[15]
+||	STW	A14,*FP[-6]
+
+	STW	A4,*SP[1]			; save A[][]
+||	MV	B4,INP				; reassign arguments
+||	MV	A6,LEN
+||	MV	B6,BSZ
+||	ADD	4,A4,B4
+
+	LDW	*A4++[2],A$A[0][0]		; load A[5][5]
+||	LDW	*B4++[2],B$A[0][0]
+	LDW	*A4++[2],A$A[0][1]
+||	LDW	*B4++[2],B$A[0][1]
+	LDW	*A4++[2],A$A[0][2]
+||	LDW	*B4++[2],B$A[0][2]
+	LDW	*A4++[2],A$A[0][3]
+||	LDW	*B4++[2],B$A[0][3]
+	LDW	*A4++[2],A$A[0][4]
+||	LDW	*B4++[2],B$A[0][4]
+
+	LDW	*A4++[2],A$A[1][0]
+||	LDW	*B4++[2],B$A[1][0]
+	LDW	*A4++[2],A$A[1][1]
+||	LDW	*B4++[2],B$A[1][1]
+	LDW	*A4++[2],A$A[1][2]
+||	LDW	*B4++[2],B$A[1][2]
+	LDW	*A4++[2],A$A[1][3]
+||	LDW	*B4++[2],B$A[1][3]
+	LDW	*A4++[2],A$A[1][4]
+||	LDW	*B4++[2],B$A[1][4]
+
+	LDW	*A4++[2],A$A[2][0]
+||	LDW	*B4++[2],B$A[2][0]
+	LDW	*A4++[2],A$A[2][1]
+||	LDW	*B4++[2],B$A[2][1]
+	LDW	*A4++[2],A$A[2][2]
+||	LDW	*B4++[2],B$A[2][2]
+	LDW	*A4++[2],A$A[2][3]
+||	LDW	*B4++[2],B$A[2][3]
+	LDW	*A4++[2],A$A[2][4]
+||	LDW	*B4++[2],B$A[2][4]
+
+	LDW	*A4++[2],A$A[3][0]
+||	LDW	*B4++[2],B$A[3][0]
+	LDW	*A4++[2],A$A[3][1]
+||	LDW	*B4++[2],B$A[3][1]
+	LDW	*A4++[2],A$A[3][2]
+||	LDW	*B4++[2],B$A[3][2]
+	LDW	*A4++[2],A$A[3][3]
+||	LDW	*B4++[2],B$A[3][3]
+	LDW	*A4++[2],A$A[3][4]
+||	LDW	*B4++[2],B$A[3][4]
+
+	LDW	*A4++[2],A$A[4][0]
+||	LDW	*B4++[2],B$A[4][0]
+	LDW	*A4++[2],A$A[4][1]
+||	LDW	*B4++[2],B$A[4][1]
+	LDW	*A4++[2],A$A[4][2]
+||	LDW	*B4++[2],B$A[4][2]
+	LDW	*A4++[2],A$A[4][3]
+||	LDW	*B4++[2],B$A[4][3]
+	LDW	*A4,A$A[4][4]
+||	LDW	*B4,B$A[4][4]
+||	ADDKPC	loop?,RA
+	STDW	RA:BSZ,*SP[4]
+
+loop?:
+	CMPLTU	LEN,BSZ,A0			; len < bsz?
+||	SHRU	BSZ,3,BSZ
+  [A0]	BNOP	ret?
+||[A0]	ZERO	BSZ
+||[A0]	LDW	*SP[1],A2			; pull A[][]
+  [BSZ]	LDNDW	*INP++,A1:A0
+||[BSZ]	SUB	LEN,8,LEN
+||[BSZ]	SUB	BSZ,1,BSZ
+	NOP	4
+___
+for ($y = 0; $y < 5; $y++) {
+    for ($x = 0; $x < ($y<4 ? 5 : 4); $x++) {
+$code.=<<___;
+	.if	.BIG_ENDIAN
+	SWAP2	A0,A1
+||	SWAP2	A1,A0
+	SWAP4	A0,A0
+	SWAP4	A1,A1
+||[!BSZ]BNOP	_KeccakF1600_cheat
+||[!BSZ]STDW	LEN:INP,*SP[3]
+||	DEAL	A0,A0
+	.else
+  [!BSZ]BNOP	_KeccakF1600_cheat
+||[!BSZ]STDW	LEN:INP,*SP[3]
+||	DEAL	A0,A0
+	.endif
+  [BSZ]	LDNDW	*INP++,A1:A0
+||	DEAL	A1,A1
+  [BSZ]	SUB	LEN,8,LEN
+||[BSZ]	SUB	BSZ,1,BSZ
+	PACK2	A1,A0,A0
+||	PACKH2	A1,A0,A1
+	XOR	A0,A$A[$y][$x],A$A[$y][$x]
+	XOR	A1,B$A[$y][$x],B$A[$y][$x]
+___
+    }
+}
+$code.=<<___;
+	.if	.BIG_ENDIAN
+	SWAP2	A0,A1
+||	SWAP2	A1,A0
+	SWAP4	A0,A0
+	SWAP4	A1,A1
+	.endif
+	BNOP	_KeccakF1600_cheat
+||	STDW	LEN:INP,*SP[3]
+||	DEAL	A0,A0
+	DEAL	A1,A1
+	NOP
+	PACK2	A1,A0,A0
+||	PACKH2	A1,A0,A1
+	XOR	A0,A$A[4][4],A$A[4][4]
+	XOR	A1,B$A[4][4],B$A[4][4]
+
+	.align	16
+ret?:
+	MV	LEN,A4				; return value
+||	ADD	4,A2,B2
+
+	STW	A$A[0][0],*A2++[2]		; store A[5][5]
+||	STW	B$A[0][0],*B2++[2]
+	STW	A$A[0][1],*A2++[2]
+||	STW	B$A[0][1],*B2++[2]
+	STW	A$A[0][2],*A2++[2]
+||	STW	B$A[0][2],*B2++[2]
+	STW	A$A[0][3],*A2++[2]
+||	STW	B$A[0][3],*B2++[2]
+	STW	A$A[0][4],*A2++[2]
+||	STW	B$A[0][4],*B2++[2]
+
+	STW	A$A[1][0],*A2++[2]
+||	STW	B$A[1][0],*B2++[2]
+	STW	A$A[1][1],*A2++[2]
+||	STW	B$A[1][1],*B2++[2]
+	STW	A$A[1][2],*A2++[2]
+||	STW	B$A[1][2],*B2++[2]
+	STW	A$A[1][3],*A2++[2]
+||	STW	B$A[1][3],*B2++[2]
+	STW	A$A[1][4],*A2++[2]
+||	STW	B$A[1][4],*B2++[2]
+
+	STW	A$A[2][0],*A2++[2]
+||	STW	B$A[2][0],*B2++[2]
+	STW	A$A[2][1],*A2++[2]
+||	STW	B$A[2][1],*B2++[2]
+	STW	A$A[2][2],*A2++[2]
+||	STW	B$A[2][2],*B2++[2]
+	STW	A$A[2][3],*A2++[2]
+||	STW	B$A[2][3],*B2++[2]
+	STW	A$A[2][4],*A2++[2]
+||	STW	B$A[2][4],*B2++[2]
+
+	LDW	*SP[15],RA
+||	LDW	*FP[-6],A14
+
+	STW	A$A[3][0],*A2++[2]
+||	STW	B$A[3][0],*B2++[2]
+	STW	A$A[3][1],*A2++[2]
+||	STW	B$A[3][1],*B2++[2]
+	STW	A$A[3][2],*A2++[2]
+||	STW	B$A[3][2],*B2++[2]
+	STW	A$A[3][3],*A2++[2]
+||	STW	B$A[3][3],*B2++[2]
+	STW	A$A[3][4],*A2++[2]
+||	STW	B$A[3][4],*B2++[2]
+
+	LDDW	*SP[8], B11:B10
+||	LDDW	*FP[-5],A11:A10
+	LDDW	*SP[9], B13:B12
+||	LDDW	*FP[-4],A13:A12
+	BNOP	RA
+||	LDW	*++SP(80),FP			; restore frame pointer
+
+	STW	A$A[4][0],*A2++[2]
+||	STW	B$A[4][0],*B2++[2]
+	STW	A$A[4][1],*A2++[2]
+||	STW	B$A[4][1],*B2++[2]
+	STW	A$A[4][2],*A2++[2]
+||	STW	B$A[4][2],*B2++[2]
+	STW	A$A[4][3],*A2++[2]
+||	STW	B$A[4][3],*B2++[2]
+	STW	A$A[4][4],*A2++[2]
+||	STW	B$A[4][4],*B2++[2]
+	.endasmfunc
+
+	.newblock
+	.global	_SHA3_squeeze
+	.asg	A12,OUT
+	.asg	A13,LEN
+	.asg	A14,BSZ
+	.align	32
+_SHA3_squeeze:
+	.asmfunc stack_usage(24)
+	STW	FP,*SP--(24)			; save frame pointer
+||	MV	SP,FP
+	STW	RA, *SP[5]
+||	STW	A14,*FP[-2]
+	STDW	A13:A12,*FP[-2]
+||	MV	B4,OUT				; reassign arguments
+	MV	A6,LEN
+||	MV	B6,BSZ
+
+loop?:
+	LDW	*SP[5],RA			; reload RA
+||	SHRU	BSZ,3,A1
+||	MV	A4,A8
+||	ADD	4,A4,B8
+block?:
+	CMPLTU	LEN,8,A0			; len < 8?
+  [A0]	BNOP	tail?
+	LDW	*A8++[2],A9
+||	LDW	*B8++[2],B9
+||	SUB	LEN,8,LEN			; len -= 8
+	MV	LEN,A0
+||	SUB	A1,1,A1				; bsz--
+||	NOP	4
+	.if	.BIG_ENDIAN
+	SWAP4	A9,A9
+||	SWAP4	B9,B9
+	SWAP2	A9,A9
+||	SWAP2	B9,B9
+	.endif
+  [!A0]	BNOP	ret?
+||[!A0]	ZERO	A1
+	PACK2	B9,A9,B7
+||[A1]	BNOP	block?
+	PACKH2	B9,A9,B9
+||	SHFL	B7,B7
+	SHFL	B9,B9
+	STNW	B7,*OUT++
+	STNW	B9,*OUT++
+	NOP
+
+	BNOP	_KeccakF1600,4
+	ADDKPC	loop?,RA
+
+	.align	16
+tail?:
+	.if	.BIG_ENDIAN
+	SWAP4	A9,A9
+||	SWAP4	B9,B9
+	SWAP2	A9,A9
+||	SWAP2	B9,B9
+	.endif
+	PACK2	B9,A9,B7
+	PACKH2	B9,A9,B9
+||	SHFL	B7,B7
+	SHFL	B9,B9
+
+	STB	B7,*OUT++
+||	SHRU	B7,8,B7
+||	ADD	LEN,7,A0
+  [A0]	STB	B7,*OUT++
+||[A0]	SHRU	B7,8,B7
+||[A0]	SUB	A0,1,A0
+  [A0]	STB	B7,*OUT++
+||[A0]	SHRU	B7,8,B7
+||[A0]	SUB	A0,1,A0
+  [A0]	STB	B7,*OUT++
+||[A0]	SUB	A0,1,A0
+  [A0]	STB	B9,*OUT++
+||[A0]	SHRU	B9,8,B9
+||[A0]	SUB	A0,1,A0
+  [A0]	STB	B9,*OUT++
+||[A0]	SHRU	B9,8,B9
+||[A0]	SUB	A0,1,A0
+  [A0]	STB	B9,*OUT++
+
+ret?:
+	LDDW	*FP[-2],A13:A12
+	BNOP	RA
+||	LDW	*FP[-2],A14
+	LDW	*++SP(24),FP			; restore frame pointer
+	NOP	4				; wait till FP is committed
+	.endasmfunc
+
+	.if	__TI_EABI__
+	.sect	".text:sha_asm.const"
+	.else
+	.sect	".const:sha_asm"
+	.endif
+	.align	256
+	.uword	0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
+iotas:
+	.uword	0x00000001, 0x00000000
+	.uword	0x00000000, 0x00000089
+	.uword	0x00000000, 0x8000008b
+	.uword	0x00000000, 0x80008080
+	.uword	0x00000001, 0x0000008b
+	.uword	0x00000001, 0x00008000
+	.uword	0x00000001, 0x80008088
+	.uword	0x00000001, 0x80000082
+	.uword	0x00000000, 0x0000000b
+	.uword	0x00000000, 0x0000000a
+	.uword	0x00000001, 0x00008082
+	.uword	0x00000000, 0x00008003
+	.uword	0x00000001, 0x0000808b
+	.uword	0x00000001, 0x8000000b
+	.uword	0x00000001, 0x8000008a
+	.uword	0x00000001, 0x80000081
+	.uword	0x00000000, 0x80000081
+	.uword	0x00000000, 0x80000008
+	.uword	0x00000000, 0x00000083
+	.uword	0x00000000, 0x80008003
+	.uword	0x00000001, 0x80008088
+	.uword	0x00000000, 0x80000088
+	.uword	0x00000001, 0x00008000
+	.uword	0x00000000, 0x80008082
+
+	.cstring "Keccak-1600 absorb and squeeze for C64x, CRYPTOGAMS by <appro\@openssl.org>"
+	.align	4
+___
+
+$output=pop;
+open STDOUT,">$output";
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-mmx.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-mmx.pl
new file mode 100755
index 000000000..c7685add7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-mmx.pl
@@ -0,0 +1,440 @@
+#!/usr/bin/env perl
+# Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# Keccak-1600 for x86 MMX.
+#
+# June 2017.
+#
+# Below code is KECCAK_2X implementation (see sha/keccak1600.c) with
+# C[5] held in register bank and D[5] offloaded to memory. Though
+# instead of actually unrolling the loop pair-wise I simply flip
+# pointers to T[][] and A[][] and the end of round. Since number of
+# rounds is even, last round writes to A[][] and everything works out.
+# It's argued that MMX is the only code path meaningful to implement
+# for x86. This is because non-MMX-capable processors is an extinct
+# breed, and they as well can lurk executing compiler-generated code.
+# For reference gcc-5.x-generated KECCAK_2X code takes 89 cycles per
+# processed byte on Pentium. Which is fair result. But older compilers
+# produce worse code. On the other hand one can wonder why not 128-bit
+# SSE2? Well, SSE2 won't provide double improvement, rather far from
+# that, if any at all on some processors, because it will take extra
+# permutations and inter-bank data trasfers. Besides, contemporary
+# CPUs are better off executing 64-bit code, and it makes lesser sense
+# to invest into fancy 32-bit code. And the decision doesn't seem to
+# be inadequate, if one compares below results to "64-bit platforms in
+# 32-bit mode" SIMD data points available at
+# http://keccak.noekeon.org/sw_performance.html.
+#
+########################################################################
+# Numbers are cycles per processed byte out of large message.
+#
+#			r=1088(i)
+#
+# PIII			30/+150%
+# Pentium M		27/+150%
+# P4			40/+85%
+# Core 2		19/+170%
+# Sandy Bridge(ii)	18/+140%
+# Atom			33/+180%
+# Silvermont(ii)	30/+180%
+# VIA Nano(ii)		43/+60%
+# Sledgehammer(ii)(iii)	24/+130%
+#
+# (i)	Corresponds to SHA3-256. Numbers after slash are improvement
+#	coefficients over KECCAK_2X [with bit interleave and lane
+#	complementing] position-independent *scalar* code generated
+#	by gcc-5.x. It's not exactly fair comparison, but it's a
+#	datapoint...
+# (ii)	64-bit processor executing 32-bit code.
+# (iii)	Result is considered to be representative even for older AMD
+#	processors.
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output=pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0],$ARGV[$#ARGV] eq "386");
+
+my @C = map("mm$_",(0..4));
+my @T = map("mm$_",(5..7));
+my @A = map([ 8*$_-100, 8*($_+1)-100, 8*($_+2)-100,
+              8*($_+3)-100, 8*($_+4)-100 ], (0,5,10,15,20));
+my @D = map(8*$_+4, (0..4));
+my @rhotates = ([  0,  1, 62, 28, 27 ],
+                [ 36, 44,  6, 55, 20 ],
+                [  3, 10, 43, 25, 39 ],
+                [ 41, 45, 15, 21,  8 ],
+                [ 18,  2, 61, 56, 14 ]);
+
+&static_label("iotas");
+
+&function_begin_B("_KeccakF1600");
+	&movq	(@C[0],&QWP($A[4][0],"esi"));
+	&movq	(@C[1],&QWP($A[4][1],"esi"));
+	&movq	(@C[2],&QWP($A[4][2],"esi"));
+	&movq	(@C[3],&QWP($A[4][3],"esi"));
+	&movq	(@C[4],&QWP($A[4][4],"esi"));
+
+	&mov	("ecx",24);			# loop counter
+	&jmp	(&label("loop"));
+
+    &set_label("loop",16);
+	######################################### Theta
+	&pxor	(@C[0],&QWP($A[0][0],"esi"));
+	&pxor	(@C[1],&QWP($A[0][1],"esi"));
+	&pxor	(@C[2],&QWP($A[0][2],"esi"));
+	&pxor	(@C[3],&QWP($A[0][3],"esi"));
+	&pxor	(@C[4],&QWP($A[0][4],"esi"));
+
+	&pxor	(@C[0],&QWP($A[1][0],"esi"));
+	&pxor	(@C[1],&QWP($A[1][1],"esi"));
+	&pxor	(@C[2],&QWP($A[1][2],"esi"));
+	&pxor	(@C[3],&QWP($A[1][3],"esi"));
+	&pxor	(@C[4],&QWP($A[1][4],"esi"));
+
+	&pxor	(@C[0],&QWP($A[2][0],"esi"));
+	&pxor	(@C[1],&QWP($A[2][1],"esi"));
+	&pxor	(@C[2],&QWP($A[2][2],"esi"));
+	&pxor	(@C[3],&QWP($A[2][3],"esi"));
+	&pxor	(@C[4],&QWP($A[2][4],"esi"));
+
+	&pxor	(@C[2],&QWP($A[3][2],"esi"));
+	&pxor	(@C[0],&QWP($A[3][0],"esi"));
+	&pxor	(@C[1],&QWP($A[3][1],"esi"));
+	&pxor	(@C[3],&QWP($A[3][3],"esi"));
+	 &movq	(@T[0],@C[2]);
+	&pxor	(@C[4],&QWP($A[3][4],"esi"));
+
+	 &movq	(@T[2],@C[2]);
+	 &psrlq	(@T[0],63);
+	&movq	(@T[1],@C[0]);
+	 &psllq	(@T[2],1);
+	 &pxor	(@T[0],@C[0]);
+	&psrlq	(@C[0],63);
+	 &pxor	(@T[0],@T[2]);
+	&psllq	(@T[1],1);
+	 &movq	(@T[2],@C[1]);
+	 &movq	(&QWP(@D[1],"esp"),@T[0]);	# D[1] = E[0] = ROL64(C[2], 1) ^ C[0];
+
+	&pxor	(@T[1],@C[0]);
+	 &psrlq	(@T[2],63);
+	&pxor	(@T[1],@C[3]);
+	 &movq	(@C[0],@C[1]);
+	&movq	(&QWP(@D[4],"esp"),@T[1]);	# D[4] = E[1] = ROL64(C[0], 1) ^ C[3];
+
+	 &psllq	(@C[0],1);
+	 &pxor	(@T[2],@C[4]);
+	 &pxor	(@C[0],@T[2]);
+
+	&movq	(@T[2],@C[3]);
+	&psrlq	(@C[3],63);
+	 &movq	(&QWP(@D[0],"esp"),@C[0]);	# D[0] = C[0] = ROL64(C[1], 1) ^ C[4];
+	&psllq	(@T[2],1);
+	 &movq	(@T[0],@C[4]);
+	 &psrlq	(@C[4],63);
+	&pxor	(@C[1],@C[3]);
+	 &psllq	(@T[0],1);
+	&pxor	(@C[1],@T[2]);
+	 &pxor	(@C[2],@C[4]);
+	&movq	(&QWP(@D[2],"esp"),@C[1]);	# D[2] = C[1] = ROL64(C[3], 1) ^ C[1];
+	 &pxor	(@C[2],@T[0]);
+
+	######################################### first Rho(0) is special
+	&movq	(@C[3],&QWP($A[3][3],"esi"));
+	 &movq	(&QWP(@D[3],"esp"),@C[2]);	# D[3] = C[2] = ROL64(C[4], 1) ^ C[2];
+	&pxor	(@C[3],@C[2]);
+	 &movq	(@C[4],&QWP($A[4][4],"esi"));
+	&movq	(@T[2],@C[3]);
+	&psrlq	(@C[3],64-$rhotates[3][3]);
+	 &pxor	(@C[4],@T[1]);
+	&psllq	(@T[2],$rhotates[3][3]);
+	 &movq	(@T[1],@C[4]);
+	 &psrlq	(@C[4],64-$rhotates[4][4]);
+	&por	(@C[3],@T[2]);		# C[3] = ROL64(A[3][3] ^ C[2], rhotates[3][3]);   /* D[3] */
+	 &psllq	(@T[1],$rhotates[4][4]);
+
+	&movq	(@C[2],&QWP($A[2][2],"esi"));
+	 &por	(@C[4],@T[1]);		# C[4] = ROL64(A[4][4] ^ E[1], rhotates[4][4]);   /* D[4] */
+	&pxor	(@C[2],@C[1]);
+	 &movq	(@C[1],&QWP($A[1][1],"esi"));
+	&movq	(@T[1],@C[2]);
+	&psrlq	(@C[2],64-$rhotates[2][2]);
+	 &pxor	(@C[1],&QWP(@D[1],"esp"));
+	&psllq	(@T[1],$rhotates[2][2]);
+
+	 &movq	(@T[2],@C[1]);
+	 &psrlq	(@C[1],64-$rhotates[1][1]);
+	&por	(@C[2],@T[1]);		# C[2] = ROL64(A[2][2] ^ C[1], rhotates[2][2]);   /* D[2] */
+	 &psllq	(@T[2],$rhotates[1][1]);
+	&pxor	(@C[0],&QWP($A[0][0],"esi")); # /* rotate by 0 */  /* D[0] */
+	 &por	(@C[1],@T[2]);		# C[1] = ROL64(A[1][1] ^ D[1], rhotates[1][1]);
+
+sub Chi() {				######### regular Chi step
+    my ($y,$xrho) = @_;
+
+	&movq	(@T[0],@C[1]);
+	 &movq	(@T[1],@C[2]);
+	&pandn	(@T[0],@C[2]);
+	 &pandn	(@C[2],@C[3]);
+	&pxor	(@T[0],@C[0]);
+	 &pxor	(@C[2],@C[1]);
+	&pxor	(@T[0],&QWP(0,"ebx"))		if ($y == 0);
+	&lea	("ebx",&DWP(8,"ebx"))		if ($y == 0);
+
+	&movq	(@T[2],@C[3]);
+	&movq	(&QWP($A[$y][0],"edi"),@T[0]);	# R[0][0] = C[0] ^ (~C[1] & C[2]) ^ iotas[i];
+	 &movq	(@T[0],@C[4]);
+	&pandn	(@C[3],@C[4]);
+	 &pandn	(@C[4],@C[0]);
+	&pxor	(@C[3],@T[1]);
+	 &movq	(&QWP($A[$y][1],"edi"),@C[2]);	# R[0][1] = C[1] ^ (~C[2] & C[3]);
+	 &pxor	(@C[4],@T[2]);
+	  &movq	(@T[2],&QWP($A[0][$xrho],"esi"))	if (defined($xrho));
+
+	 &movq	(&QWP($A[$y][2],"edi"),@C[3]);	# R[0][2] = C[2] ^ (~C[3] & C[4]);
+	&pandn	(@C[0],@C[1]);
+	 &movq	(&QWP($A[$y][3],"edi"),@C[4]);	# R[0][3] = C[3] ^ (~C[4] & C[0]);
+	&pxor	(@C[0],@T[0]);
+	  &pxor	(@T[2],&QWP(@D[$xrho],"esp"))		if (defined($xrho));
+	&movq	(&QWP($A[$y][4],"edi"),@C[0]);	# R[0][4] = C[4] ^ (~C[0] & C[1]);
+}
+	&Chi	(0, 3);
+
+sub Rho() {				######### regular Rho step
+    my $x = shift;
+
+	#&movq	(@T[2],&QWP($A[0][$x],"esi"));	# moved to Chi
+	#&pxor	(@T[2],&QWP(@D[$x],"esp"));	# moved to Chi
+	&movq	(@C[0],@T[2]);
+	&psrlq	(@T[2],64-$rhotates[0][$x]);
+	 &movq	(@C[1],&QWP($A[1][($x+1)%5],"esi"));
+	&psllq	(@C[0],$rhotates[0][$x]);
+	 &pxor	(@C[1],&QWP(@D[($x+1)%5],"esp"));
+	&por	(@C[0],@T[2]);		# C[0] = ROL64(A[0][3] ^ D[3], rhotates[0][3]);
+
+	 &movq	(@T[1],@C[1]);
+	 &psrlq	(@C[1],64-$rhotates[1][($x+1)%5]);
+	&movq	(@C[2],&QWP($A[2][($x+2)%5],"esi"));
+	 &psllq	(@T[1],$rhotates[1][($x+1)%5]);
+	&pxor	(@C[2],&QWP(@D[($x+2)%5],"esp"));
+	 &por	(@C[1],@T[1]);		# C[1] = ROL64(A[1][4] ^ D[4], rhotates[1][4]);
+
+	&movq	(@T[2],@C[2]);
+	&psrlq	(@C[2],64-$rhotates[2][($x+2)%5]);
+	 &movq	(@C[3],&QWP($A[3][($x+3)%5],"esi"));
+	&psllq	(@T[2],$rhotates[2][($x+2)%5]);
+	 &pxor	(@C[3],&QWP(@D[($x+3)%5],"esp"));
+	&por	(@C[2],@T[2]);		# C[2] = ROL64(A[2][0] ^ D[0], rhotates[2][0]);
+
+	 &movq	(@T[0],@C[3]);
+	 &psrlq	(@C[3],64-$rhotates[3][($x+3)%5]);
+	&movq	(@C[4],&QWP($A[4][($x+4)%5],"esi"));
+	 &psllq	(@T[0],$rhotates[3][($x+3)%5]);
+	&pxor	(@C[4],&QWP(@D[($x+4)%5],"esp"));
+	 &por	(@C[3],@T[0]);		# C[3] = ROL64(A[3][1] ^ D[1], rhotates[3][1]);
+
+	&movq	(@T[1],@C[4]);
+	&psrlq	(@C[4],64-$rhotates[4][($x+4)%5]);
+	&psllq	(@T[1],$rhotates[4][($x+4)%5]);
+	&por	(@C[4],@T[1]);		# C[4] = ROL64(A[4][2] ^ D[2], rhotates[4][2]);
+}
+	&Rho	(3);	&Chi	(1, 1);
+	&Rho	(1);	&Chi	(2, 4);
+	&Rho	(4);	&Chi	(3, 2);
+	&Rho	(2);	###&Chi	(4);
+
+	&movq	(@T[0],@C[0]);		######### last Chi(4) is special
+	 &xor	("edi","esi");		# &xchg	("esi","edi");
+	&movq	(&QWP(@D[1],"esp"),@C[1]);
+	 &xor	("esi","edi");
+	 &xor	("edi","esi");
+
+	&movq	(@T[1],@C[1]);
+	 &movq	(@T[2],@C[2]);
+	&pandn	(@T[1],@C[2]);
+	 &pandn	(@T[2],@C[3]);
+	&pxor	(@C[0],@T[1]);
+	 &pxor	(@C[1],@T[2]);
+
+	&movq	(@T[1],@C[3]);
+	 &movq	(&QWP($A[4][0],"esi"),@C[0]);	# R[4][0] = C[0] ^= (~C[1] & C[2]);
+	&pandn	(@T[1],@C[4]);
+	 &movq	(&QWP($A[4][1],"esi"),@C[1]);	# R[4][1] = C[1] ^= (~C[2] & C[3]);
+	&pxor	(@C[2],@T[1]);
+	 &movq	(@T[2],@C[4]);
+	&movq	(&QWP($A[4][2],"esi"),@C[2]);	# R[4][2] = C[2] ^= (~C[3] & C[4]);
+
+	&pandn	(@T[2],@T[0]);
+	 &pandn	(@T[0],&QWP(@D[1],"esp"));
+	&pxor	(@C[3],@T[2]);
+	 &pxor	(@C[4],@T[0]);
+	&movq	(&QWP($A[4][3],"esi"),@C[3]);	# R[4][3] = C[3] ^= (~C[4] & D[0]);
+	&sub	("ecx",1);
+	 &movq	(&QWP($A[4][4],"esi"),@C[4]);	# R[4][4] = C[4] ^= (~D[0] & D[1]);
+	&jnz	(&label("loop"));
+
+	&lea	("ebx",&DWP(-192,"ebx"));	# rewind iotas
+	&ret	();
+&function_end_B("_KeccakF1600");
+
+&function_begin("KeccakF1600");
+	&mov	("esi",&wparam(0));
+	&mov	("ebp","esp");
+	&sub	("esp",240);
+	&call	(&label("pic_point"));
+    &set_label("pic_point");
+	&blindpop("ebx");
+	&lea	("ebx",&DWP(&label("iotas")."-".&label("pic_point"),"ebx"));
+	&and	("esp",-8);
+	&lea	("esi",&DWP(100,"esi"));	# size optimization
+	&lea	("edi",&DWP(8*5+100,"esp"));	# size optimization
+
+	&call	("_KeccakF1600");
+
+	&mov	("esp","ebp");
+	&emms	();
+&function_end("KeccakF1600");
+
+&function_begin("SHA3_absorb");
+	&mov	("esi",&wparam(0));		# A[][]
+	&mov	("eax",&wparam(1));		# inp
+	&mov	("ecx",&wparam(2));		# len
+	&mov	("edx",&wparam(3));		# bsz
+	&mov	("ebp","esp");
+	&sub	("esp",240+8);
+	&call	(&label("pic_point"));
+    &set_label("pic_point");
+	&blindpop("ebx");
+	&lea	("ebx",&DWP(&label("iotas")."-".&label("pic_point"),"ebx"));
+	&and	("esp",-8);
+
+	&mov	("edi","esi");
+	&lea	("esi",&DWP(100,"esi"));	# size optimization
+	&mov	(&DWP(-4,"ebp"),"edx");		# save bsz
+	&jmp	(&label("loop"));
+
+&set_label("loop",16);
+	&cmp	("ecx","edx");			# len < bsz?
+	&jc	(&label("absorbed"));
+
+	&shr	("edx",3);			# bsz /= 8
+&set_label("block");
+	&movq	("mm0",&QWP(0,"eax"));
+	&lea	("eax",&DWP(8,"eax"));
+	&pxor	("mm0",&QWP(0,"edi"));
+	&lea	("edi",&DWP(8,"edi"));
+	&sub	("ecx",8);			# len -= 8
+	&movq	(&QWP(-8,"edi"),"mm0");
+	&dec	("edx");			# bsz--
+	&jnz	(&label("block"));
+
+	&lea	("edi",&DWP(8*5+100,"esp"));	# size optimization
+	&mov	(&DWP(-8,"ebp"),"ecx");		# save len
+	&call	("_KeccakF1600");
+	&mov	("ecx",&DWP(-8,"ebp"));		# pull len
+	&mov	("edx",&DWP(-4,"ebp"));		# pull bsz
+	&lea	("edi",&DWP(-100,"esi"));
+	&jmp	(&label("loop"));
+
+&set_label("absorbed",16);
+	&mov	("eax","ecx");			# return value
+	&mov	("esp","ebp");
+	&emms	();
+&function_end("SHA3_absorb");
+
+&function_begin("SHA3_squeeze");
+	&mov	("esi",&wparam(0));		# A[][]
+	&mov	("eax",&wparam(1));		# out
+	&mov	("ecx",&wparam(2));		# len
+	&mov	("edx",&wparam(3));		# bsz
+	&mov	("ebp","esp");
+	&sub	("esp",240+8);
+	&call	(&label("pic_point"));
+    &set_label("pic_point");
+	&blindpop("ebx");
+	&lea	("ebx",&DWP(&label("iotas")."-".&label("pic_point"),"ebx"));
+	&and	("esp",-8);
+
+	&shr	("edx",3);			# bsz /= 8
+	&mov	("edi","esi");
+	&lea	("esi",&DWP(100,"esi"));	# size optimization
+	&mov	(&DWP(-4,"ebp"),"edx");		# save bsz
+	&jmp	(&label("loop"));
+
+&set_label("loop",16);
+	&cmp	("ecx",8);			# len < 8?
+	&jc	(&label("tail"));
+
+	&movq	("mm0",&QWP(0,"edi"));
+	&lea	("edi",&DWP(8,"edi"));
+	&movq	(&QWP(0,"eax"),"mm0");
+	&lea	("eax",&DWP(8,"eax"));
+	&sub	("ecx",8);			# len -= 8
+	&jz	(&label("done"));
+
+	&dec	("edx");			# bsz--
+	&jnz	(&label("loop"));
+
+	&lea	("edi",&DWP(8*5+100,"esp"));	# size optimization
+	&mov	(&DWP(-8,"ebp"),"ecx");		# save len
+	&call	("_KeccakF1600");
+	&mov	("ecx",&DWP(-8,"ebp"));		# pull len
+	&mov	("edx",&DWP(-4,"ebp"));		# pull bsz
+	&lea	("edi",&DWP(-100,"esi"));
+	&jmp	(&label("loop"));
+
+&set_label("tail",16);
+	&mov	("esi","edi");
+	&mov	("edi","eax");
+	&data_word("0xA4F39066");		# rep movsb
+
+&set_label("done");
+	&mov	("esp","ebp");
+	&emms	();
+&function_end("SHA3_squeeze");
+
+&set_label("iotas",32);
+	&data_word(0x00000001,0x00000000);
+	&data_word(0x00008082,0x00000000);
+	&data_word(0x0000808a,0x80000000);
+	&data_word(0x80008000,0x80000000);
+	&data_word(0x0000808b,0x00000000);
+	&data_word(0x80000001,0x00000000);
+	&data_word(0x80008081,0x80000000);
+	&data_word(0x00008009,0x80000000);
+	&data_word(0x0000008a,0x00000000);
+	&data_word(0x00000088,0x00000000);
+	&data_word(0x80008009,0x00000000);
+	&data_word(0x8000000a,0x00000000);
+	&data_word(0x8000808b,0x00000000);
+	&data_word(0x0000008b,0x80000000);
+	&data_word(0x00008089,0x80000000);
+	&data_word(0x00008003,0x80000000);
+	&data_word(0x00008002,0x80000000);
+	&data_word(0x00000080,0x80000000);
+	&data_word(0x0000800a,0x00000000);
+	&data_word(0x8000000a,0x80000000);
+	&data_word(0x80008081,0x80000000);
+	&data_word(0x00008080,0x80000000);
+	&data_word(0x80000001,0x00000000);
+	&data_word(0x80008008,0x80000000);
+&asciz("Keccak-1600 absorb and squeeze for MMX, CRYPTOGAMS by <appro\@openssl.org>");
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-ppc64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-ppc64.pl
new file mode 100755
index 000000000..30e70c5d6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-ppc64.pl
@@ -0,0 +1,758 @@
+#!/usr/bin/env perl
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# Keccak-1600 for PPC64.
+#
+# June 2017.
+#
+# This is straightforward KECCAK_1X_ALT implementation that works on
+# *any* PPC64. Then PowerISA 2.07 adds 2x64-bit vector rotate, and
+# it's possible to achieve performance better than below, but that is
+# naturally option only for POWER8 and successors...
+#
+######################################################################
+# Numbers are cycles per processed byte.
+#
+#		r=1088(*)
+#
+# PPC970/G5	14.6/+120%
+# POWER7	10.3/+100%
+# POWER8	11.5/+85%
+# POWER9	9.4/+45%
+#
+# (*)	Corresponds to SHA3-256. Percentage after slash is improvement
+#	over gcc-4.x-generated KECCAK_1X_ALT code. Newer compilers do
+#	much better (but watch out for them generating code specific
+#	to processor they execute on).
+
+$flavour = shift;
+
+if ($flavour =~ /64/) {
+	$SIZE_T	=8;
+	$LRSAVE	=2*$SIZE_T;
+	$UCMP	="cmpld";
+	$STU	="stdu";
+	$POP	="ld";
+	$PUSH	="std";
+} else { die "nonsense $flavour"; }
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open STDOUT,"| $^X $xlate $flavour ".shift || die "can't call $xlate: $!";
+
+$FRAME=24*$SIZE_T+6*$SIZE_T+32;
+$LOCALS=6*$SIZE_T;
+$TEMP=$LOCALS+6*$SIZE_T;
+
+my $sp ="r1";
+
+my @A = map([ "r$_", "r".($_+1), "r".($_+2), "r".($_+3), "r".($_+4) ],
+            (7, 12, 17, 22, 27));
+   $A[1][1] = "r6"; # r13 is reserved
+
+my @C = map("r$_", (0,3,4,5));
+
+my @rhotates = ([  0,  1, 62, 28, 27 ],
+                [ 36, 44,  6, 55, 20 ],
+                [  3, 10, 43, 25, 39 ],
+                [ 41, 45, 15, 21,  8 ],
+                [ 18,  2, 61, 56, 14 ]);
+
+$code.=<<___;
+.text
+
+.type	KeccakF1600_int,\@function
+.align	5
+KeccakF1600_int:
+	li	r0,24
+	mtctr	r0
+	b	.Loop
+.align	4
+.Loop:
+	xor	$C[0],$A[0][0],$A[1][0]		; Theta
+	std	$A[0][4],`$TEMP+0`($sp)
+	xor	$C[1],$A[0][1],$A[1][1]
+	std	$A[1][4],`$TEMP+8`($sp)
+	xor	$C[2],$A[0][2],$A[1][2]
+	std	$A[2][4],`$TEMP+16`($sp)
+	xor	$C[3],$A[0][3],$A[1][3]
+	std	$A[3][4],`$TEMP+24`($sp)
+___
+	$C[4]=$A[0][4];
+	$C[5]=$A[1][4];
+	$C[6]=$A[2][4];
+	$C[7]=$A[3][4];
+$code.=<<___;
+	xor	$C[4],$A[0][4],$A[1][4]
+	xor	$C[0],$C[0],$A[2][0]
+	xor	$C[1],$C[1],$A[2][1]
+	xor	$C[2],$C[2],$A[2][2]
+	xor	$C[3],$C[3],$A[2][3]
+	xor	$C[4],$C[4],$A[2][4]
+	xor	$C[0],$C[0],$A[3][0]
+	xor	$C[1],$C[1],$A[3][1]
+	xor	$C[2],$C[2],$A[3][2]
+	xor	$C[3],$C[3],$A[3][3]
+	xor	$C[4],$C[4],$A[3][4]
+	xor	$C[0],$C[0],$A[4][0]
+	xor	$C[2],$C[2],$A[4][2]
+	xor	$C[1],$C[1],$A[4][1]
+	xor	$C[3],$C[3],$A[4][3]
+	rotldi	$C[5],$C[2],1
+	xor	$C[4],$C[4],$A[4][4]
+	rotldi	$C[6],$C[3],1
+	xor	$C[5],$C[5],$C[0]
+	rotldi	$C[7],$C[4],1
+
+	xor	$A[0][1],$A[0][1],$C[5]
+	xor	$A[1][1],$A[1][1],$C[5]
+	xor	$A[2][1],$A[2][1],$C[5]
+	xor	$A[3][1],$A[3][1],$C[5]
+	xor	$A[4][1],$A[4][1],$C[5]
+
+	rotldi	$C[5],$C[0],1
+	xor	$C[6],$C[6],$C[1]
+	xor	$C[2],$C[2],$C[7]
+	rotldi	$C[7],$C[1],1
+	xor	$C[3],$C[3],$C[5]
+	xor	$C[4],$C[4],$C[7]
+
+	xor	$C[1],   $A[0][2],$C[6]			;mr	$C[1],$A[0][2]
+	xor	$A[1][2],$A[1][2],$C[6]
+	xor	$A[2][2],$A[2][2],$C[6]
+	xor	$A[3][2],$A[3][2],$C[6]
+	xor	$A[4][2],$A[4][2],$C[6]
+
+	xor	$A[0][0],$A[0][0],$C[4]
+	xor	$A[1][0],$A[1][0],$C[4]
+	xor	$A[2][0],$A[2][0],$C[4]
+	xor	$A[3][0],$A[3][0],$C[4]
+	xor	$A[4][0],$A[4][0],$C[4]
+___
+	$C[4]=undef;
+	$C[5]=undef;
+	$C[6]=undef;
+	$C[7]=undef;
+$code.=<<___;
+	ld	$A[0][4],`$TEMP+0`($sp)
+	xor	$C[0],   $A[0][3],$C[2]			;mr	$C[0],$A[0][3]
+	ld	$A[1][4],`$TEMP+8`($sp)
+	xor	$A[1][3],$A[1][3],$C[2]
+	ld	$A[2][4],`$TEMP+16`($sp)
+	xor	$A[2][3],$A[2][3],$C[2]
+	ld	$A[3][4],`$TEMP+24`($sp)
+	xor	$A[3][3],$A[3][3],$C[2]
+	xor	$A[4][3],$A[4][3],$C[2]
+
+	xor	$C[2],   $A[0][4],$C[3]			;mr	$C[2],$A[0][4]
+	xor	$A[1][4],$A[1][4],$C[3]
+	xor	$A[2][4],$A[2][4],$C[3]
+	xor	$A[3][4],$A[3][4],$C[3]
+	xor	$A[4][4],$A[4][4],$C[3]
+
+	mr	$C[3],$A[0][1]				; Rho+Pi
+	rotldi	$A[0][1],$A[1][1],$rhotates[1][1]
+	;mr	$C[1],$A[0][2]
+	rotldi	$A[0][2],$A[2][2],$rhotates[2][2]
+	;mr	$C[0],$A[0][3]
+	rotldi	$A[0][3],$A[3][3],$rhotates[3][3]
+	;mr	$C[2],$A[0][4]
+	rotldi	$A[0][4],$A[4][4],$rhotates[4][4]
+
+	rotldi	$A[1][1],$A[1][4],$rhotates[1][4]
+	rotldi	$A[2][2],$A[2][3],$rhotates[2][3]
+	rotldi	$A[3][3],$A[3][2],$rhotates[3][2]
+	rotldi	$A[4][4],$A[4][1],$rhotates[4][1]
+
+	rotldi	$A[1][4],$A[4][2],$rhotates[4][2]
+	rotldi	$A[2][3],$A[3][4],$rhotates[3][4]
+	rotldi	$A[3][2],$A[2][1],$rhotates[2][1]
+	rotldi	$A[4][1],$A[1][3],$rhotates[1][3]
+
+	rotldi	$A[4][2],$A[2][4],$rhotates[2][4]
+	rotldi	$A[3][4],$A[4][3],$rhotates[4][3]
+	rotldi	$A[2][1],$A[1][2],$rhotates[1][2]
+	rotldi	$A[1][3],$A[3][1],$rhotates[3][1]
+
+	rotldi	$A[2][4],$A[4][0],$rhotates[4][0]
+	rotldi	$A[4][3],$A[3][0],$rhotates[3][0]
+	rotldi	$A[1][2],$A[2][0],$rhotates[2][0]
+	rotldi	$A[3][1],$A[1][0],$rhotates[1][0]
+
+	rotldi	$A[1][0],$C[0],$rhotates[0][3]
+	rotldi	$A[2][0],$C[3],$rhotates[0][1]
+	rotldi	$A[3][0],$C[2],$rhotates[0][4]
+	rotldi	$A[4][0],$C[1],$rhotates[0][2]
+
+	andc	$C[0],$A[0][2],$A[0][1]			; Chi+Iota
+	andc	$C[1],$A[0][3],$A[0][2]
+	andc	$C[2],$A[0][0],$A[0][4]
+	andc	$C[3],$A[0][1],$A[0][0]
+	xor	$A[0][0],$A[0][0],$C[0]
+	andc	$C[0],$A[0][4],$A[0][3]
+	xor	$A[0][1],$A[0][1],$C[1]
+	 ld	$C[1],`$LOCALS+4*$SIZE_T`($sp)
+	xor	$A[0][3],$A[0][3],$C[2]
+	xor	$A[0][4],$A[0][4],$C[3]
+	xor	$A[0][2],$A[0][2],$C[0]
+	 ldu	$C[3],8($C[1])				; Iota[i++]
+
+	andc	$C[0],$A[1][2],$A[1][1]
+	 std	$C[1],`$LOCALS+4*$SIZE_T`($sp)
+	andc	$C[1],$A[1][3],$A[1][2]
+	andc	$C[2],$A[1][0],$A[1][4]
+	 xor	$A[0][0],$A[0][0],$C[3]			; A[0][0] ^= Iota
+	andc	$C[3],$A[1][1],$A[1][0]
+	xor	$A[1][0],$A[1][0],$C[0]
+	andc	$C[0],$A[1][4],$A[1][3]
+	xor	$A[1][1],$A[1][1],$C[1]
+	xor	$A[1][3],$A[1][3],$C[2]
+	xor	$A[1][4],$A[1][4],$C[3]
+	xor	$A[1][2],$A[1][2],$C[0]
+
+	andc	$C[0],$A[2][2],$A[2][1]
+	andc	$C[1],$A[2][3],$A[2][2]
+	andc	$C[2],$A[2][0],$A[2][4]
+	andc	$C[3],$A[2][1],$A[2][0]
+	xor	$A[2][0],$A[2][0],$C[0]
+	andc	$C[0],$A[2][4],$A[2][3]
+	xor	$A[2][1],$A[2][1],$C[1]
+	xor	$A[2][3],$A[2][3],$C[2]
+	xor	$A[2][4],$A[2][4],$C[3]
+	xor	$A[2][2],$A[2][2],$C[0]
+
+	andc	$C[0],$A[3][2],$A[3][1]
+	andc	$C[1],$A[3][3],$A[3][2]
+	andc	$C[2],$A[3][0],$A[3][4]
+	andc	$C[3],$A[3][1],$A[3][0]
+	xor	$A[3][0],$A[3][0],$C[0]
+	andc	$C[0],$A[3][4],$A[3][3]
+	xor	$A[3][1],$A[3][1],$C[1]
+	xor	$A[3][3],$A[3][3],$C[2]
+	xor	$A[3][4],$A[3][4],$C[3]
+	xor	$A[3][2],$A[3][2],$C[0]
+
+	andc	$C[0],$A[4][2],$A[4][1]
+	andc	$C[1],$A[4][3],$A[4][2]
+	andc	$C[2],$A[4][0],$A[4][4]
+	andc	$C[3],$A[4][1],$A[4][0]
+	xor	$A[4][0],$A[4][0],$C[0]
+	andc	$C[0],$A[4][4],$A[4][3]
+	xor	$A[4][1],$A[4][1],$C[1]
+	xor	$A[4][3],$A[4][3],$C[2]
+	xor	$A[4][4],$A[4][4],$C[3]
+	xor	$A[4][2],$A[4][2],$C[0]
+
+	bdnz	.Loop
+
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+.size	KeccakF1600_int,.-KeccakF1600_int
+
+.type	KeccakF1600,\@function
+.align	5
+KeccakF1600:
+	$STU	$sp,-$FRAME($sp)
+	mflr	r0
+	$PUSH	r14,`$FRAME-$SIZE_T*18`($sp)
+	$PUSH	r15,`$FRAME-$SIZE_T*17`($sp)
+	$PUSH	r16,`$FRAME-$SIZE_T*16`($sp)
+	$PUSH	r17,`$FRAME-$SIZE_T*15`($sp)
+	$PUSH	r18,`$FRAME-$SIZE_T*14`($sp)
+	$PUSH	r19,`$FRAME-$SIZE_T*13`($sp)
+	$PUSH	r20,`$FRAME-$SIZE_T*12`($sp)
+	$PUSH	r21,`$FRAME-$SIZE_T*11`($sp)
+	$PUSH	r22,`$FRAME-$SIZE_T*10`($sp)
+	$PUSH	r23,`$FRAME-$SIZE_T*9`($sp)
+	$PUSH	r24,`$FRAME-$SIZE_T*8`($sp)
+	$PUSH	r25,`$FRAME-$SIZE_T*7`($sp)
+	$PUSH	r26,`$FRAME-$SIZE_T*6`($sp)
+	$PUSH	r27,`$FRAME-$SIZE_T*5`($sp)
+	$PUSH	r28,`$FRAME-$SIZE_T*4`($sp)
+	$PUSH	r29,`$FRAME-$SIZE_T*3`($sp)
+	$PUSH	r30,`$FRAME-$SIZE_T*2`($sp)
+	$PUSH	r31,`$FRAME-$SIZE_T*1`($sp)
+	$PUSH	r0,`$FRAME+$LRSAVE`($sp)
+
+	bl	PICmeup
+	subi	r12,r12,8			; prepare for ldu
+
+	$PUSH	r3,`$LOCALS+0*$SIZE_T`($sp)
+	;$PUSH	r4,`$LOCALS+1*$SIZE_T`($sp)
+	;$PUSH	r5,`$LOCALS+2*$SIZE_T`($sp)
+	;$PUSH	r6,`$LOCALS+3*$SIZE_T`($sp)
+	$PUSH	r12,`$LOCALS+4*$SIZE_T`($sp)
+
+	ld	$A[0][0],`8*0`(r3)		; load A[5][5]
+	ld	$A[0][1],`8*1`(r3)
+	ld	$A[0][2],`8*2`(r3)
+	ld	$A[0][3],`8*3`(r3)
+	ld	$A[0][4],`8*4`(r3)
+	ld	$A[1][0],`8*5`(r3)
+	ld	$A[1][1],`8*6`(r3)
+	ld	$A[1][2],`8*7`(r3)
+	ld	$A[1][3],`8*8`(r3)
+	ld	$A[1][4],`8*9`(r3)
+	ld	$A[2][0],`8*10`(r3)
+	ld	$A[2][1],`8*11`(r3)
+	ld	$A[2][2],`8*12`(r3)
+	ld	$A[2][3],`8*13`(r3)
+	ld	$A[2][4],`8*14`(r3)
+	ld	$A[3][0],`8*15`(r3)
+	ld	$A[3][1],`8*16`(r3)
+	ld	$A[3][2],`8*17`(r3)
+	ld	$A[3][3],`8*18`(r3)
+	ld	$A[3][4],`8*19`(r3)
+	ld	$A[4][0],`8*20`(r3)
+	ld	$A[4][1],`8*21`(r3)
+	ld	$A[4][2],`8*22`(r3)
+	ld	$A[4][3],`8*23`(r3)
+	ld	$A[4][4],`8*24`(r3)
+
+	bl	KeccakF1600_int
+
+	$POP	r3,`$LOCALS+0*$SIZE_T`($sp)
+	std	$A[0][0],`8*0`(r3)		; return A[5][5]
+	std	$A[0][1],`8*1`(r3)
+	std	$A[0][2],`8*2`(r3)
+	std	$A[0][3],`8*3`(r3)
+	std	$A[0][4],`8*4`(r3)
+	std	$A[1][0],`8*5`(r3)
+	std	$A[1][1],`8*6`(r3)
+	std	$A[1][2],`8*7`(r3)
+	std	$A[1][3],`8*8`(r3)
+	std	$A[1][4],`8*9`(r3)
+	std	$A[2][0],`8*10`(r3)
+	std	$A[2][1],`8*11`(r3)
+	std	$A[2][2],`8*12`(r3)
+	std	$A[2][3],`8*13`(r3)
+	std	$A[2][4],`8*14`(r3)
+	std	$A[3][0],`8*15`(r3)
+	std	$A[3][1],`8*16`(r3)
+	std	$A[3][2],`8*17`(r3)
+	std	$A[3][3],`8*18`(r3)
+	std	$A[3][4],`8*19`(r3)
+	std	$A[4][0],`8*20`(r3)
+	std	$A[4][1],`8*21`(r3)
+	std	$A[4][2],`8*22`(r3)
+	std	$A[4][3],`8*23`(r3)
+	std	$A[4][4],`8*24`(r3)
+
+	$POP	r0,`$FRAME+$LRSAVE`($sp)
+	$POP	r14,`$FRAME-$SIZE_T*18`($sp)
+	$POP	r15,`$FRAME-$SIZE_T*17`($sp)
+	$POP	r16,`$FRAME-$SIZE_T*16`($sp)
+	$POP	r17,`$FRAME-$SIZE_T*15`($sp)
+	$POP	r18,`$FRAME-$SIZE_T*14`($sp)
+	$POP	r19,`$FRAME-$SIZE_T*13`($sp)
+	$POP	r20,`$FRAME-$SIZE_T*12`($sp)
+	$POP	r21,`$FRAME-$SIZE_T*11`($sp)
+	$POP	r22,`$FRAME-$SIZE_T*10`($sp)
+	$POP	r23,`$FRAME-$SIZE_T*9`($sp)
+	$POP	r24,`$FRAME-$SIZE_T*8`($sp)
+	$POP	r25,`$FRAME-$SIZE_T*7`($sp)
+	$POP	r26,`$FRAME-$SIZE_T*6`($sp)
+	$POP	r27,`$FRAME-$SIZE_T*5`($sp)
+	$POP	r28,`$FRAME-$SIZE_T*4`($sp)
+	$POP	r29,`$FRAME-$SIZE_T*3`($sp)
+	$POP	r30,`$FRAME-$SIZE_T*2`($sp)
+	$POP	r31,`$FRAME-$SIZE_T*1`($sp)
+	mtlr	r0
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,4,1,0x80,18,1,0
+	.long	0
+.size	KeccakF1600,.-KeccakF1600
+
+.type	dword_le_load,\@function
+.align	5
+dword_le_load:
+	lbzu	r0,1(r3)
+	lbzu	r4,1(r3)
+	lbzu	r5,1(r3)
+	insrdi	r0,r4,8,48
+	lbzu	r4,1(r3)
+	insrdi	r0,r5,8,40
+	lbzu	r5,1(r3)
+	insrdi	r0,r4,8,32
+	lbzu	r4,1(r3)
+	insrdi	r0,r5,8,24
+	lbzu	r5,1(r3)
+	insrdi	r0,r4,8,16
+	lbzu	r4,1(r3)
+	insrdi	r0,r5,8,8
+	insrdi	r0,r4,8,0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,1,0
+	.long	0
+.size	dword_le_load,.-dword_le_load
+
+.globl	SHA3_absorb
+.type	SHA3_absorb,\@function
+.align	5
+SHA3_absorb:
+	$STU	$sp,-$FRAME($sp)
+	mflr	r0
+	$PUSH	r14,`$FRAME-$SIZE_T*18`($sp)
+	$PUSH	r15,`$FRAME-$SIZE_T*17`($sp)
+	$PUSH	r16,`$FRAME-$SIZE_T*16`($sp)
+	$PUSH	r17,`$FRAME-$SIZE_T*15`($sp)
+	$PUSH	r18,`$FRAME-$SIZE_T*14`($sp)
+	$PUSH	r19,`$FRAME-$SIZE_T*13`($sp)
+	$PUSH	r20,`$FRAME-$SIZE_T*12`($sp)
+	$PUSH	r21,`$FRAME-$SIZE_T*11`($sp)
+	$PUSH	r22,`$FRAME-$SIZE_T*10`($sp)
+	$PUSH	r23,`$FRAME-$SIZE_T*9`($sp)
+	$PUSH	r24,`$FRAME-$SIZE_T*8`($sp)
+	$PUSH	r25,`$FRAME-$SIZE_T*7`($sp)
+	$PUSH	r26,`$FRAME-$SIZE_T*6`($sp)
+	$PUSH	r27,`$FRAME-$SIZE_T*5`($sp)
+	$PUSH	r28,`$FRAME-$SIZE_T*4`($sp)
+	$PUSH	r29,`$FRAME-$SIZE_T*3`($sp)
+	$PUSH	r30,`$FRAME-$SIZE_T*2`($sp)
+	$PUSH	r31,`$FRAME-$SIZE_T*1`($sp)
+	$PUSH	r0,`$FRAME+$LRSAVE`($sp)
+
+	bl	PICmeup
+	subi	r4,r4,1				; prepare for lbzu
+	subi	r12,r12,8			; prepare for ldu
+
+	$PUSH	r3,`$LOCALS+0*$SIZE_T`($sp)	; save A[][]
+	$PUSH	r4,`$LOCALS+1*$SIZE_T`($sp)	; save inp
+	$PUSH	r5,`$LOCALS+2*$SIZE_T`($sp)	; save len
+	$PUSH	r6,`$LOCALS+3*$SIZE_T`($sp)	; save bsz
+	mr	r0,r6
+	$PUSH	r12,`$LOCALS+4*$SIZE_T`($sp)
+
+	ld	$A[0][0],`8*0`(r3)		; load A[5][5]
+	ld	$A[0][1],`8*1`(r3)
+	ld	$A[0][2],`8*2`(r3)
+	ld	$A[0][3],`8*3`(r3)
+	ld	$A[0][4],`8*4`(r3)
+	ld	$A[1][0],`8*5`(r3)
+	ld	$A[1][1],`8*6`(r3)
+	ld	$A[1][2],`8*7`(r3)
+	ld	$A[1][3],`8*8`(r3)
+	ld	$A[1][4],`8*9`(r3)
+	ld	$A[2][0],`8*10`(r3)
+	ld	$A[2][1],`8*11`(r3)
+	ld	$A[2][2],`8*12`(r3)
+	ld	$A[2][3],`8*13`(r3)
+	ld	$A[2][4],`8*14`(r3)
+	ld	$A[3][0],`8*15`(r3)
+	ld	$A[3][1],`8*16`(r3)
+	ld	$A[3][2],`8*17`(r3)
+	ld	$A[3][3],`8*18`(r3)
+	ld	$A[3][4],`8*19`(r3)
+	ld	$A[4][0],`8*20`(r3)
+	ld	$A[4][1],`8*21`(r3)
+	ld	$A[4][2],`8*22`(r3)
+	ld	$A[4][3],`8*23`(r3)
+	ld	$A[4][4],`8*24`(r3)
+
+	mr	r3,r4
+	mr	r4,r5
+	mr	r5,r0
+
+	b	.Loop_absorb
+
+.align	4
+.Loop_absorb:
+	$UCMP	r4,r5				; len < bsz?
+	blt	.Labsorbed
+
+	sub	r4,r4,r5			; len -= bsz
+	srwi	r5,r5,3
+	$PUSH	r4,`$LOCALS+2*$SIZE_T`($sp)	; save len
+	mtctr	r5
+	bl	dword_le_load			; *inp++
+	xor	$A[0][0],$A[0][0],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[0][1],$A[0][1],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[0][2],$A[0][2],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[0][3],$A[0][3],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[0][4],$A[0][4],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[1][0],$A[1][0],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[1][1],$A[1][1],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[1][2],$A[1][2],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[1][3],$A[1][3],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[1][4],$A[1][4],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[2][0],$A[2][0],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[2][1],$A[2][1],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[2][2],$A[2][2],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[2][3],$A[2][3],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[2][4],$A[2][4],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[3][0],$A[3][0],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[3][1],$A[3][1],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[3][2],$A[3][2],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[3][3],$A[3][3],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[3][4],$A[3][4],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[4][0],$A[4][0],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[4][1],$A[4][1],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[4][2],$A[4][2],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[4][3],$A[4][3],r0
+	bdz	.Lprocess_block
+	bl	dword_le_load			; *inp++
+	xor	$A[4][4],$A[4][4],r0
+
+.Lprocess_block:
+	$PUSH	r3,`$LOCALS+1*$SIZE_T`($sp)	; save inp
+
+	bl	KeccakF1600_int
+
+	$POP	r0,`$LOCALS+4*$SIZE_T`($sp)	; pull iotas[24]
+	$POP	r5,`$LOCALS+3*$SIZE_T`($sp)	; restore bsz
+	$POP	r4,`$LOCALS+2*$SIZE_T`($sp)	; restore len
+	$POP	r3,`$LOCALS+1*$SIZE_T`($sp)	; restore inp
+	addic	r0,r0,`-8*24`			; rewind iotas
+	$PUSH	r0,`$LOCALS+4*$SIZE_T`($sp)
+
+	b	.Loop_absorb
+
+.align	4
+.Labsorbed:
+	$POP	r3,`$LOCALS+0*$SIZE_T`($sp)
+	std	$A[0][0],`8*0`(r3)		; return A[5][5]
+	std	$A[0][1],`8*1`(r3)
+	std	$A[0][2],`8*2`(r3)
+	std	$A[0][3],`8*3`(r3)
+	std	$A[0][4],`8*4`(r3)
+	std	$A[1][0],`8*5`(r3)
+	std	$A[1][1],`8*6`(r3)
+	std	$A[1][2],`8*7`(r3)
+	std	$A[1][3],`8*8`(r3)
+	std	$A[1][4],`8*9`(r3)
+	std	$A[2][0],`8*10`(r3)
+	std	$A[2][1],`8*11`(r3)
+	std	$A[2][2],`8*12`(r3)
+	std	$A[2][3],`8*13`(r3)
+	std	$A[2][4],`8*14`(r3)
+	std	$A[3][0],`8*15`(r3)
+	std	$A[3][1],`8*16`(r3)
+	std	$A[3][2],`8*17`(r3)
+	std	$A[3][3],`8*18`(r3)
+	std	$A[3][4],`8*19`(r3)
+	std	$A[4][0],`8*20`(r3)
+	std	$A[4][1],`8*21`(r3)
+	std	$A[4][2],`8*22`(r3)
+	std	$A[4][3],`8*23`(r3)
+	std	$A[4][4],`8*24`(r3)
+
+	mr	r3,r4				; return value
+	$POP	r0,`$FRAME+$LRSAVE`($sp)
+	$POP	r14,`$FRAME-$SIZE_T*18`($sp)
+	$POP	r15,`$FRAME-$SIZE_T*17`($sp)
+	$POP	r16,`$FRAME-$SIZE_T*16`($sp)
+	$POP	r17,`$FRAME-$SIZE_T*15`($sp)
+	$POP	r18,`$FRAME-$SIZE_T*14`($sp)
+	$POP	r19,`$FRAME-$SIZE_T*13`($sp)
+	$POP	r20,`$FRAME-$SIZE_T*12`($sp)
+	$POP	r21,`$FRAME-$SIZE_T*11`($sp)
+	$POP	r22,`$FRAME-$SIZE_T*10`($sp)
+	$POP	r23,`$FRAME-$SIZE_T*9`($sp)
+	$POP	r24,`$FRAME-$SIZE_T*8`($sp)
+	$POP	r25,`$FRAME-$SIZE_T*7`($sp)
+	$POP	r26,`$FRAME-$SIZE_T*6`($sp)
+	$POP	r27,`$FRAME-$SIZE_T*5`($sp)
+	$POP	r28,`$FRAME-$SIZE_T*4`($sp)
+	$POP	r29,`$FRAME-$SIZE_T*3`($sp)
+	$POP	r30,`$FRAME-$SIZE_T*2`($sp)
+	$POP	r31,`$FRAME-$SIZE_T*1`($sp)
+	mtlr	r0
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,4,1,0x80,18,4,0
+	.long	0
+.size	SHA3_absorb,.-SHA3_absorb
+___
+{
+my ($A_flat,$out,$len,$bsz) = map("r$_",(28..31));
+$code.=<<___;
+.globl	SHA3_squeeze
+.type	SHA3_squeeze,\@function
+.align	5
+SHA3_squeeze:
+	$STU	$sp,`-10*$SIZE_T`($sp)
+	mflr	r0
+	$PUSH	r28,`6*$SIZE_T`($sp)
+	$PUSH	r29,`7*$SIZE_T`($sp)
+	$PUSH	r30,`8*$SIZE_T`($sp)
+	$PUSH	r31,`9*$SIZE_T`($sp)
+	$PUSH	r0,`10*$SIZE_T+$LRSAVE`($sp)
+
+	mr	$A_flat,r3
+	subi	r3,r3,8			; prepare for ldu
+	subi	$out,r4,1		; prepare for stbu
+	mr	$len,r5
+	mr	$bsz,r6
+	b	.Loop_squeeze
+
+.align	4
+.Loop_squeeze:
+	ldu	r0,8(r3)
+	${UCMP}i $len,8
+	blt	.Lsqueeze_tail
+
+	stbu	r0,1($out)
+	srdi	r0,r0,8
+	stbu	r0,1($out)
+	srdi	r0,r0,8
+	stbu	r0,1($out)
+	srdi	r0,r0,8
+	stbu	r0,1($out)
+	srdi	r0,r0,8
+	stbu	r0,1($out)
+	srdi	r0,r0,8
+	stbu	r0,1($out)
+	srdi	r0,r0,8
+	stbu	r0,1($out)
+	srdi	r0,r0,8
+	stbu	r0,1($out)
+
+	subic.	$len,$len,8
+	beq	.Lsqueeze_done
+
+	subic.	r6,r6,8
+	bgt	.Loop_squeeze
+
+	mr	r3,$A_flat
+	bl	KeccakF1600
+	subi	r3,$A_flat,8		; prepare for ldu
+	mr	r6,$bsz
+	b	.Loop_squeeze
+
+.align	4
+.Lsqueeze_tail:
+	mtctr	$len
+.Loop_tail:
+	stbu	r0,1($out)
+	srdi	r0,r0,8
+	bdnz	.Loop_tail
+
+.Lsqueeze_done:
+	$POP	r0,`10*$SIZE_T+$LRSAVE`($sp)
+	$POP	r28,`6*$SIZE_T`($sp)
+	$POP	r29,`7*$SIZE_T`($sp)
+	$POP	r30,`8*$SIZE_T`($sp)
+	$POP	r31,`9*$SIZE_T`($sp)
+	mtlr	r0
+	addi	$sp,$sp,`10*$SIZE_T`
+	blr
+	.long	0
+	.byte	0,12,4,1,0x80,4,4,0
+	.long	0
+.size	SHA3_squeeze,.-SHA3_squeeze
+___
+}
+
+# Ugly hack here, because PPC assembler syntax seem to vary too
+# much from platforms to platform...
+$code.=<<___;
+.align	6
+PICmeup:
+	mflr	r0
+	bcl	20,31,\$+4
+	mflr	r12   ; vvvvvv "distance" between . and 1st data entry
+	addi	r12,r12,`64-8`
+	mtlr	r0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+	.space	`64-9*4`
+.type	iotas,\@object
+iotas:
+	.quad	0x0000000000000001
+	.quad	0x0000000000008082
+	.quad	0x800000000000808a
+	.quad	0x8000000080008000
+	.quad	0x000000000000808b
+	.quad	0x0000000080000001
+	.quad	0x8000000080008081
+	.quad	0x8000000000008009
+	.quad	0x000000000000008a
+	.quad	0x0000000000000088
+	.quad	0x0000000080008009
+	.quad	0x000000008000000a
+	.quad	0x000000008000808b
+	.quad	0x800000000000008b
+	.quad	0x8000000000008089
+	.quad	0x8000000000008003
+	.quad	0x8000000000008002
+	.quad	0x8000000000000080
+	.quad	0x000000000000800a
+	.quad	0x800000008000000a
+	.quad	0x8000000080008081
+	.quad	0x8000000000008080
+	.quad	0x0000000080000001
+	.quad	0x8000000080008008
+.size	iotas,.-iotas
+.asciz	"Keccak-1600 absorb and squeeze for PPC64, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-s390x.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-s390x.pl
new file mode 100755
index 000000000..1184cf233
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-s390x.pl
@@ -0,0 +1,560 @@
+#!/usr/bin/env perl
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# Keccak-1600 for s390x.
+#
+# June 2017.
+#
+# Below code is [lane complementing] KECCAK_2X implementation (see
+# sha/keccak1600.c) with C[5] and D[5] held in register bank. Though
+# instead of actually unrolling the loop pair-wise I simply flip
+# pointers to T[][] and A[][] at the end of round. Since number of
+# rounds is even, last round writes to A[][] and everything works out.
+# In the nutshell it's transliteration of x86_64 module, because both
+# architectures have similar capabilities/limitations. Performance
+# measurement is problematic as I don't have access to an idle system.
+# It looks like z13 processes one byte [out of long message] in ~14
+# cycles. At least the result is consistent with estimate based on
+# amount of instruction and assumed instruction issue rate. It's ~2.5x
+# faster than compiler-generated code.
+
+$flavour = shift;
+
+if ($flavour =~ /3[12]/) {
+	$SIZE_T=4;
+	$g="";
+} else {
+	$SIZE_T=8;
+	$g="g";
+}
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+my @A = map([ 8*$_, 8*($_+1), 8*($_+2), 8*($_+3), 8*($_+4) ], (0,5,10,15,20));
+
+my @C = map("%r$_",(0,1,5..7));
+my @D = map("%r$_",(8..12));
+my @T = map("%r$_",(13..14));
+my ($src,$dst,$iotas) = map("%r$_",(2..4));
+my $sp = "%r15";
+
+$stdframe=16*$SIZE_T+4*8;
+$frame=$stdframe+25*8;
+
+my @rhotates = ([  0,  1, 62, 28, 27 ],
+                [ 36, 44,  6, 55, 20 ],
+                [  3, 10, 43, 25, 39 ],
+                [ 41, 45, 15, 21,  8 ],
+                [ 18,  2, 61, 56, 14 ]);
+
+{ my @C = @C;	# copy, because we mess them up...
+  my @D = @D;
+
+$code.=<<___;
+.text
+
+.type	__KeccakF1600,\@function
+.align	32
+__KeccakF1600:
+	st${g}	%r14,$SIZE_T*14($sp)
+	lg	@C[0],$A[4][0]($src)
+	lg	@C[1],$A[4][1]($src)
+	lg	@C[2],$A[4][2]($src)
+	lg	@C[3],$A[4][3]($src)
+	lg	@C[4],$A[4][4]($src)
+	larl	$iotas,iotas
+	j	.Loop
+
+.align	16
+.Loop:
+	lg	@D[0],$A[0][0]($src)
+	lg	@D[1],$A[1][1]($src)
+	lg	@D[2],$A[2][2]($src)
+	lg	@D[3],$A[3][3]($src)
+
+	xgr	@C[0],@D[0]
+	xg	@C[1],$A[0][1]($src)
+	xg	@C[2],$A[0][2]($src)
+	xg	@C[3],$A[0][3]($src)
+	lgr	@D[4],@C[4]
+	xg	@C[4],$A[0][4]($src)
+
+	xg	@C[0],$A[1][0]($src)
+	xgr	@C[1],@D[1]
+	xg	@C[2],$A[1][2]($src)
+	xg	@C[3],$A[1][3]($src)
+	xg	@C[4],$A[1][4]($src)
+
+	xg	@C[0],$A[2][0]($src)
+	xg	@C[1],$A[2][1]($src)
+	xgr	@C[2],@D[2]
+	xg	@C[3],$A[2][3]($src)
+	xg	@C[4],$A[2][4]($src)
+
+	xg	@C[0],$A[3][0]($src)
+	xg	@C[1],$A[3][1]($src)
+	xg	@C[2],$A[3][2]($src)
+	xgr	@C[3],@D[3]
+	xg	@C[4],$A[3][4]($src)
+
+	lgr	@T[0],@C[2]
+	rllg	@C[2],@C[2],1
+	xgr	@C[2],@C[0]		# D[1] = ROL64(C[2], 1) ^ C[0]
+
+	rllg	@C[0],@C[0],1
+	xgr	@C[0],@C[3]		# D[4] = ROL64(C[0], 1) ^ C[3]
+
+	rllg	@C[3],@C[3],1
+	xgr	@C[3],@C[1]		# D[2] = ROL64(C[3], 1) ^ C[1]
+
+	rllg	@C[1],@C[1],1
+	xgr	@C[1],@C[4]		# D[0] = ROL64(C[1], 1) ^ C[4]
+
+	rllg	@C[4],@C[4],1
+	xgr	@C[4],@T[0]		# D[3] = ROL64(C[4], 1) ^ C[2]
+___
+	(@D[0..4], @C) = (@C[1..4,0], @D);
+$code.=<<___;
+	xgr	@C[1],@D[1]
+	xgr	@C[2],@D[2]
+	xgr	@C[3],@D[3]
+	 rllg	@C[1],@C[1],$rhotates[1][1]
+	xgr	@C[4],@D[4]
+	 rllg	@C[2],@C[2],$rhotates[2][2]
+	xgr	@C[0],@D[0]
+
+	lgr	@T[0],@C[1]
+	ogr	@C[1],@C[2]
+	 rllg	@C[3],@C[3],$rhotates[3][3]
+	xgr	@C[1],@C[0]		#	    C[0] ^ ( C[1] | C[2])
+	 rllg	@C[4],@C[4],$rhotates[4][4]
+	xg	@C[1],0($iotas)
+	la	$iotas,8($iotas)
+	stg	@C[1],$A[0][0]($dst)	# R[0][0] = C[0] ^ ( C[1] | C[2]) ^ iotas[i]
+
+	lgr	@T[1],@C[4]
+	ngr	@C[4],@C[3]
+	 lghi	@C[1],-1		# no 'not' instruction :-(
+	xgr	@C[4],@C[2]		#	    C[2] ^ ( C[4] & C[3])
+	 xgr	@C[2],@C[1]		# not	@C[2]
+	stg	@C[4],$A[0][2]($dst)	# R[0][2] = C[2] ^ ( C[4] & C[3])
+	 ogr	@C[2],@C[3]
+	 xgr	@C[2],@T[0]		#	    C[1] ^ (~C[2] | C[3])
+
+	ngr	@T[0],@C[0]
+	 stg	@C[2],$A[0][1]($dst)	# R[0][1] = C[1] ^ (~C[2] | C[3])
+	xgr	@T[0],@T[1]		#	    C[4] ^ ( C[1] & C[0])
+	 ogr	@T[1],@C[0]
+	stg	@T[0],$A[0][4]($dst)	# R[0][4] = C[4] ^ ( C[1] & C[0])
+	 xgr	@T[1],@C[3]		#	    C[3] ^ ( C[4] | C[0])
+	 stg	@T[1],$A[0][3]($dst)	# R[0][3] = C[3] ^ ( C[4] | C[0])
+
+
+	lg	@C[0],$A[0][3]($src)
+	lg	@C[4],$A[4][2]($src)
+	lg	@C[3],$A[3][1]($src)
+	lg	@C[1],$A[1][4]($src)
+	lg	@C[2],$A[2][0]($src)
+
+	xgr	@C[0],@D[3]
+	xgr	@C[4],@D[2]
+	 rllg	@C[0],@C[0],$rhotates[0][3]
+	xgr	@C[3],@D[1]
+	 rllg	@C[4],@C[4],$rhotates[4][2]
+	xgr	@C[1],@D[4]
+	 rllg	@C[3],@C[3],$rhotates[3][1]
+	xgr	@C[2],@D[0]
+
+	lgr	@T[0],@C[0]
+	ogr	@C[0],@C[4]
+	 rllg	@C[1],@C[1],$rhotates[1][4]
+	xgr	@C[0],@C[3]		#	    C[3] ^ (C[0] |  C[4])
+	 rllg	@C[2],@C[2],$rhotates[2][0]
+	stg	@C[0],$A[1][3]($dst)	# R[1][3] = C[3] ^ (C[0] |  C[4])
+
+	lgr	@T[1],@C[1]
+	ngr	@C[1],@T[0]
+	 lghi	@C[0],-1		# no 'not' instruction :-(
+	xgr	@C[1],@C[4]		#	    C[4] ^ (C[1] &  C[0])
+	 xgr	@C[4],@C[0]		# not	@C[4]
+	stg	@C[1],$A[1][4]($dst)	# R[1][4] = C[4] ^ (C[1] &  C[0])
+
+	 ogr	@C[4],@C[3]
+	 xgr	@C[4],@C[2]		#	    C[2] ^ (~C[4] | C[3])
+
+	ngr	@C[3],@C[2]
+	 stg	@C[4],$A[1][2]($dst)	# R[1][2] = C[2] ^ (~C[4] | C[3])
+	xgr	@C[3],@T[1]		#	    C[1] ^ (C[3] &  C[2])
+	 ogr	@T[1],@C[2]
+	stg	@C[3],$A[1][1]($dst)	# R[1][1] = C[1] ^ (C[3] &  C[2])
+	 xgr	@T[1],@T[0]		#	    C[0] ^ (C[1] |  C[2])
+	 stg	@T[1],$A[1][0]($dst)	# R[1][0] = C[0] ^ (C[1] |  C[2])
+
+
+	lg	@C[2],$A[2][3]($src)
+	lg	@C[3],$A[3][4]($src)
+	lg	@C[1],$A[1][2]($src)
+	lg	@C[4],$A[4][0]($src)
+	lg	@C[0],$A[0][1]($src)
+
+	xgr	@C[2],@D[3]
+	xgr	@C[3],@D[4]
+	 rllg	@C[2],@C[2],$rhotates[2][3]
+	xgr	@C[1],@D[2]
+	 rllg	@C[3],@C[3],$rhotates[3][4]
+	xgr	@C[4],@D[0]
+	 rllg	@C[1],@C[1],$rhotates[1][2]
+	xgr	@C[0],@D[1]
+
+	lgr	@T[0],@C[2]
+	ngr	@C[2],@C[3]
+	 rllg	@C[4],@C[4],$rhotates[4][0]
+	xgr	@C[2],@C[1]		#	     C[1] ^ ( C[2] & C[3])
+	lghi	@T[1],-1		# no 'not' instruction :-(
+	stg	@C[2],$A[2][1]($dst)	# R[2][1] =  C[1] ^ ( C[2] & C[3])
+
+	xgr	@C[3],@T[1]		# not	@C[3]
+	lgr	@T[1],@C[4]
+	ngr	@C[4],@C[3]
+	 rllg	@C[0],@C[0],$rhotates[0][1]
+	xgr	@C[4],@T[0]		#	     C[2] ^ ( C[4] & ~C[3])
+	 ogr	@T[0],@C[1]
+	stg	@C[4],$A[2][2]($dst)	# R[2][2] =  C[2] ^ ( C[4] & ~C[3])
+	 xgr	@T[0],@C[0]		#	     C[0] ^ ( C[2] | C[1])
+
+	ngr	@C[1],@C[0]
+	 stg	@T[0],$A[2][0]($dst)	# R[2][0] =  C[0] ^ ( C[2] | C[1])
+	xgr	@C[1],@T[1]		#	     C[4] ^ ( C[1] & C[0])
+	 ogr	@C[0],@T[1]
+	stg	@C[1],$A[2][4]($dst)	# R[2][4] =  C[4] ^ ( C[1] & C[0])
+	 xgr	@C[0],@C[3]		#	    ~C[3] ^ ( C[0] | C[4])
+	 stg	@C[0],$A[2][3]($dst)	# R[2][3] = ~C[3] ^ ( C[0] | C[4])
+
+
+	lg	@C[2],$A[2][1]($src)
+	lg	@C[3],$A[3][2]($src)
+	lg	@C[1],$A[1][0]($src)
+	lg	@C[4],$A[4][3]($src)
+	lg	@C[0],$A[0][4]($src)
+
+	xgr	@C[2],@D[1]
+	xgr	@C[3],@D[2]
+	 rllg	@C[2],@C[2],$rhotates[2][1]
+	xgr	@C[1],@D[0]
+	 rllg	@C[3],@C[3],$rhotates[3][2]
+	xgr	@C[4],@D[3]
+	 rllg	@C[1],@C[1],$rhotates[1][0]
+	xgr	@C[0],@D[4]
+	 rllg	@C[4],@C[4],$rhotates[4][3]
+
+	lgr	@T[0],@C[2]
+	ogr	@C[2],@C[3]
+	lghi	@T[1],-1		# no 'not' instruction :-(
+	xgr	@C[2],@C[1]		#	     C[1] ^ ( C[2] | C[3])
+	xgr	@C[3],@T[1]		# not	@C[3]
+	stg	@C[2],$A[3][1]($dst)	# R[3][1] =  C[1] ^ ( C[2] | C[3])
+
+	lgr	@T[1],@C[4]
+	ogr	@C[4],@C[3]
+	 rllg	@C[0],@C[0],$rhotates[0][4]
+	xgr	@C[4],@T[0]		#	     C[2] ^ ( C[4] | ~C[3])
+	 ngr	@T[0],@C[1]
+	stg	@C[4],$A[3][2]($dst)	# R[3][2] =  C[2] ^ ( C[4] | ~C[3])
+	 xgr	@T[0],@C[0]		#	     C[0] ^ ( C[2] & C[1])
+
+	ogr	@C[1],@C[0]
+	 stg	@T[0],$A[3][0]($dst)	# R[3][0] =  C[0] ^ ( C[2] & C[1])
+	xgr	@C[1],@T[1]		#	     C[4] ^ ( C[1] | C[0])
+	 ngr	@C[0],@T[1]
+	stg	@C[1],$A[3][4]($dst)	# R[3][4] =  C[4] ^ ( C[1] | C[0])
+	 xgr	@C[0],@C[3]		#	    ~C[3] ^ ( C[0] & C[4])
+	 stg	@C[0],$A[3][3]($dst)	# R[3][3] = ~C[3] ^ ( C[0] & C[4])
+
+
+	xg	@D[2],$A[0][2]($src)
+	xg	@D[3],$A[1][3]($src)
+	xg	@D[1],$A[4][1]($src)
+	xg	@D[4],$A[2][4]($src)
+	xgr	$dst,$src		# xchg	$dst,$src
+	 rllg	@D[2],@D[2],$rhotates[0][2]
+	xg	@D[0],$A[3][0]($src)
+	 rllg	@D[3],@D[3],$rhotates[1][3]
+	xgr	$src,$dst
+	 rllg	@D[1],@D[1],$rhotates[4][1]
+	xgr	$dst,$src
+	 rllg	@D[4],@D[4],$rhotates[2][4]
+___
+	@C = @D[2..4,0,1];
+$code.=<<___;
+	lgr	@T[0],@C[0]
+	ngr	@C[0],@C[1]
+	lghi	@T[1],-1		# no 'not' instruction :-(
+	xgr	@C[0],@C[4]		#	     C[4] ^ ( C[0] & C[1])
+	xgr	@C[1],@T[1]		# not	@C[1]
+	stg	@C[0],$A[4][4]($src)	# R[4][4] =  C[4] ^ ( C[0] & C[1])
+
+	lgr	@T[1],@C[2]
+	ngr	@C[2],@C[1]
+	 rllg	@D[0],@D[0],$rhotates[3][0]
+	xgr	@C[2],@T[0]		#	     C[0] ^ ( C[2] & ~C[1])
+	 ogr	@T[0],@C[4]
+	stg	@C[2],$A[4][0]($src)	# R[4][0] =  C[0] ^ ( C[2] & ~C[1])
+	 xgr	@T[0],@C[3]		#	     C[3] ^ ( C[0] | C[4])
+
+	ngr	@C[4],@C[3]
+	 stg	@T[0],$A[4][3]($src)	# R[4][3] =  C[3] ^ ( C[0] | C[4])
+	xgr	@C[4],@T[1]		#	     C[2] ^ ( C[4] & C[3])
+	 ogr	@C[3],@T[1]
+	stg	@C[4],$A[4][2]($src)	# R[4][2] =  C[2] ^ ( C[4] & C[3])
+	 xgr	@C[3],@C[1]		#	    ~C[1] ^ ( C[2] | C[3])
+
+	lgr	@C[1],@C[0]		# harmonize with the loop top
+	lgr	@C[0],@T[0]
+	 stg	@C[3],$A[4][1]($src)	# R[4][1] = ~C[1] ^ ( C[2] | C[3])
+
+	tmll	$iotas,255
+	jnz	.Loop
+
+	l${g}	%r14,$SIZE_T*14($sp)
+	br	%r14
+.size	__KeccakF1600,.-__KeccakF1600
+___
+}
+{
+$code.=<<___;
+.type	KeccakF1600,\@function
+.align	32
+KeccakF1600:
+.LKeccakF1600:
+	lghi	%r1,-$frame
+	stm${g}	%r6,%r15,$SIZE_T*6($sp)
+	lgr	%r0,$sp
+	la	$sp,0(%r1,$sp)
+	st${g}	%r0,0($sp)
+
+	lghi	@D[0],-1		# no 'not' instruction :-(
+	lghi	@D[1],-1
+	lghi	@D[2],-1
+	lghi	@D[3],-1
+	lghi	@D[4],-1
+	lghi	@T[0],-1
+	xg	@D[0],$A[0][1]($src)
+	xg	@D[1],$A[0][2]($src)
+	xg	@D[2],$A[1][3]($src)
+	xg	@D[3],$A[2][2]($src)
+	xg	@D[4],$A[3][2]($src)
+	xg	@T[0],$A[4][0]($src)
+	stmg	@D[0],@D[1],$A[0][1]($src)
+	stg	@D[2],$A[1][3]($src)
+	stg	@D[3],$A[2][2]($src)
+	stg	@D[4],$A[3][2]($src)
+	stg	@T[0],$A[4][0]($src)
+
+	la	$dst,$stdframe($sp)
+
+	bras	%r14,__KeccakF1600
+
+	lghi	@D[0],-1		# no 'not' instruction :-(
+	lghi	@D[1],-1
+	lghi	@D[2],-1
+	lghi	@D[3],-1
+	lghi	@D[4],-1
+	lghi	@T[0],-1
+	xg	@D[0],$A[0][1]($src)
+	xg	@D[1],$A[0][2]($src)
+	xg	@D[2],$A[1][3]($src)
+	xg	@D[3],$A[2][2]($src)
+	xg	@D[4],$A[3][2]($src)
+	xg	@T[0],$A[4][0]($src)
+	stmg	@D[0],@D[1],$A[0][1]($src)
+	stg	@D[2],$A[1][3]($src)
+	stg	@D[3],$A[2][2]($src)
+	stg	@D[4],$A[3][2]($src)
+	stg	@T[0],$A[4][0]($src)
+
+	lm${g}	%r6,%r15,$frame+6*$SIZE_T($sp)
+	br	%r14
+.size	KeccakF1600,.-KeccakF1600
+___
+}
+{ my ($A_flat,$inp,$len,$bsz) = map("%r$_",(2..5));
+
+$code.=<<___;
+.globl	SHA3_absorb
+.type	SHA3_absorb,\@function
+.align	32
+SHA3_absorb:
+	lghi	%r1,-$frame
+	stm${g}	%r5,%r15,$SIZE_T*5($sp)
+	lgr	%r0,$sp
+	la	$sp,0(%r1,$sp)
+	st${g}	%r0,0($sp)
+
+	lghi	@D[0],-1		# no 'not' instruction :-(
+	lghi	@D[1],-1
+	lghi	@D[2],-1
+	lghi	@D[3],-1
+	lghi	@D[4],-1
+	lghi	@T[0],-1
+	xg	@D[0],$A[0][1]($src)
+	xg	@D[1],$A[0][2]($src)
+	xg	@D[2],$A[1][3]($src)
+	xg	@D[3],$A[2][2]($src)
+	xg	@D[4],$A[3][2]($src)
+	xg	@T[0],$A[4][0]($src)
+	stmg	@D[0],@D[1],$A[0][1]($src)
+	stg	@D[2],$A[1][3]($src)
+	stg	@D[3],$A[2][2]($src)
+	stg	@D[4],$A[3][2]($src)
+	stg	@T[0],$A[4][0]($src)
+
+.Loop_absorb:
+	cl${g}r	$len,$bsz
+	jl	.Ldone_absorb
+
+	srl${g}	$bsz,3
+	la	%r1,0($A_flat)
+
+.Lblock_absorb:
+	lrvg	%r0,0($inp)
+	la	$inp,8($inp)
+	xg	%r0,0(%r1)
+	a${g}hi	$len,-8
+	stg	%r0,0(%r1)
+	la	%r1,8(%r1)
+	brct	$bsz,.Lblock_absorb
+
+	stm${g}	$inp,$len,$frame+3*$SIZE_T($sp)
+	la	$dst,$stdframe($sp)
+	bras	%r14,__KeccakF1600
+	lm${g}	$inp,$bsz,$frame+3*$SIZE_T($sp)
+	j	.Loop_absorb
+
+.align	16
+.Ldone_absorb:
+	lghi	@D[0],-1		# no 'not' instruction :-(
+	lghi	@D[1],-1
+	lghi	@D[2],-1
+	lghi	@D[3],-1
+	lghi	@D[4],-1
+	lghi	@T[0],-1
+	xg	@D[0],$A[0][1]($src)
+	xg	@D[1],$A[0][2]($src)
+	xg	@D[2],$A[1][3]($src)
+	xg	@D[3],$A[2][2]($src)
+	xg	@D[4],$A[3][2]($src)
+	xg	@T[0],$A[4][0]($src)
+	stmg	@D[0],@D[1],$A[0][1]($src)
+	stg	@D[2],$A[1][3]($src)
+	stg	@D[3],$A[2][2]($src)
+	stg	@D[4],$A[3][2]($src)
+	stg	@T[0],$A[4][0]($src)
+
+	lgr	%r2,$len		# return value
+
+	lm${g}	%r6,%r15,$frame+6*$SIZE_T($sp)
+	br	%r14
+.size	SHA3_absorb,.-SHA3_absorb
+___
+}
+{ my ($A_flat,$out,$len,$bsz) = map("%r$_",(2..5));
+
+$code.=<<___;
+.globl	SHA3_squeeze
+.type	SHA3_squeeze,\@function
+.align	32
+SHA3_squeeze:
+	srl${g}	$bsz,3
+	st${g}	%r14,2*$SIZE_T($sp)
+	lghi	%r14,8
+	st${g}	$bsz,5*$SIZE_T($sp)
+	la	%r1,0($A_flat)
+
+	j	.Loop_squeeze
+
+.align	16
+.Loop_squeeze:
+	cl${g}r $len,%r14
+	jl	.Ltail_squeeze
+
+	lrvg	%r0,0(%r1)
+	la	%r1,8(%r1)
+	stg	%r0,0($out)
+	la	$out,8($out)
+	a${g}hi	$len,-8			# len -= 8
+	jz	.Ldone_squeeze
+
+	brct	$bsz,.Loop_squeeze	# bsz--
+
+	stm${g}	$out,$len,3*$SIZE_T($sp)
+	bras	%r14,.LKeccakF1600
+	lm${g}	$out,$bsz,3*$SIZE_T($sp)
+	lghi	%r14,8
+	la	%r1,0($A_flat)
+	j	.Loop_squeeze
+
+.Ltail_squeeze:
+	lg	%r0,0(%r1)
+.Loop_tail_squeeze:
+	stc	%r0,0($out)
+	la	$out,1($out)
+	srlg	%r0,8
+	brct	$len,.Loop_tail_squeeze
+
+.Ldone_squeeze:
+	l${g}	%r14,2*$SIZE_T($sp)
+	br	%r14
+.size	SHA3_squeeze,.-SHA3_squeeze
+___
+}
+$code.=<<___;
+.align	256
+	.quad	0,0,0,0,0,0,0,0
+.type	iotas,\@object
+iotas:
+	.quad	0x0000000000000001
+	.quad	0x0000000000008082
+	.quad	0x800000000000808a
+	.quad	0x8000000080008000
+	.quad	0x000000000000808b
+	.quad	0x0000000080000001
+	.quad	0x8000000080008081
+	.quad	0x8000000000008009
+	.quad	0x000000000000008a
+	.quad	0x0000000000000088
+	.quad	0x0000000080008009
+	.quad	0x000000008000000a
+	.quad	0x000000008000808b
+	.quad	0x800000000000008b
+	.quad	0x8000000000008089
+	.quad	0x8000000000008003
+	.quad	0x8000000000008002
+	.quad	0x8000000000000080
+	.quad	0x000000000000800a
+	.quad	0x800000008000000a
+	.quad	0x8000000080008081
+	.quad	0x8000000000008080
+	.quad	0x0000000080000001
+	.quad	0x8000000080008008
+.size	iotas,.-iotas
+.asciz	"Keccak-1600 absorb and squeeze for s390x, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+# unlike 32-bit shift 64-bit one takes three arguments
+$code =~ s/(srlg\s+)(%r[0-9]+),/$1$2,$2,/gm;
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-x86_64.pl
new file mode 100755
index 000000000..42de5bf12
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600-x86_64.pl
@@ -0,0 +1,607 @@
+#!/usr/bin/env perl
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# Keccak-1600 for x86_64.
+#
+# June 2017.
+#
+# Below code is [lane complementing] KECCAK_2X implementation (see
+# sha/keccak1600.c) with C[5] and D[5] held in register bank. Though
+# instead of actually unrolling the loop pair-wise I simply flip
+# pointers to T[][] and A[][] at the end of round. Since number of
+# rounds is even, last round writes to A[][] and everything works out.
+# How does it compare to x86_64 assembly module in Keccak Code Package?
+# Depending on processor it's either as fast or faster by up to 15%...
+#
+########################################################################
+# Numbers are cycles per processed byte out of large message.
+#
+#			r=1088(*)
+#
+# P4			25.8
+# Core 2		12.9
+# Westmere		13.7
+# Sandy Bridge		12.9(**)
+# Haswell		9.6
+# Skylake		9.4
+# Silvermont		22.8
+# Goldmont		15.8
+# VIA Nano		17.3
+# Sledgehammer		13.3
+# Bulldozer		16.5
+# Ryzen			8.8
+#
+# (*)	Corresponds to SHA3-256. Improvement over compiler-generate
+#	varies a lot, most commont coefficient is 15% in comparison to
+#	gcc-5.x, 50% for gcc-4.x, 90% for gcc-3.x.
+# (**)	Sandy Bridge has broken rotate instruction. Performance can be
+#	improved by 14% by replacing rotates with double-precision
+#	shift with same register as source and destination.
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+my @A = map([ 8*$_-100, 8*($_+1)-100, 8*($_+2)-100,
+              8*($_+3)-100, 8*($_+4)-100 ], (0,5,10,15,20));
+
+my @C = ("%rax","%rbx","%rcx","%rdx","%rbp");
+my @D = map("%r$_",(8..12));
+my @T = map("%r$_",(13..14));
+my $iotas = "%r15";
+
+my @rhotates = ([  0,  1, 62, 28, 27 ],
+                [ 36, 44,  6, 55, 20 ],
+                [  3, 10, 43, 25, 39 ],
+                [ 41, 45, 15, 21,  8 ],
+                [ 18,  2, 61, 56, 14 ]);
+
+$code.=<<___;
+.text
+
+.type	__KeccakF1600,\@abi-omnipotent
+.align	32
+__KeccakF1600:
+	mov	$A[4][0](%rdi),@C[0]
+	mov	$A[4][1](%rdi),@C[1]
+	mov	$A[4][2](%rdi),@C[2]
+	mov	$A[4][3](%rdi),@C[3]
+	mov	$A[4][4](%rdi),@C[4]
+	jmp	.Loop
+
+.align	32
+.Loop:
+	mov	$A[0][0](%rdi),@D[0]
+	mov	$A[1][1](%rdi),@D[1]
+	mov	$A[2][2](%rdi),@D[2]
+	mov	$A[3][3](%rdi),@D[3]
+
+	xor	$A[0][2](%rdi),@C[2]
+	xor	$A[0][3](%rdi),@C[3]
+	xor	@D[0],         @C[0]
+	xor	$A[0][1](%rdi),@C[1]
+	 xor	$A[1][2](%rdi),@C[2]
+	 xor	$A[1][0](%rdi),@C[0]
+	mov	@C[4],@D[4]
+	xor	$A[0][4](%rdi),@C[4]
+
+	xor	@D[2],         @C[2]
+	xor	$A[2][0](%rdi),@C[0]
+	 xor	$A[1][3](%rdi),@C[3]
+	 xor	@D[1],         @C[1]
+	 xor	$A[1][4](%rdi),@C[4]
+
+	xor	$A[3][2](%rdi),@C[2]
+	xor	$A[3][0](%rdi),@C[0]
+	 xor	$A[2][3](%rdi),@C[3]
+	 xor	$A[2][1](%rdi),@C[1]
+	 xor	$A[2][4](%rdi),@C[4]
+
+	mov	@C[2],@T[0]
+	rol	\$1,@C[2]
+	xor	@C[0],@C[2]		# D[1] = ROL64(C[2], 1) ^ C[0]
+	 xor	@D[3],         @C[3]
+
+	rol	\$1,@C[0]
+	xor	@C[3],@C[0]		# D[4] = ROL64(C[0], 1) ^ C[3]
+	 xor	$A[3][1](%rdi),@C[1]
+
+	rol	\$1,@C[3]
+	xor	@C[1],@C[3]		# D[2] = ROL64(C[3], 1) ^ C[1]
+	 xor	$A[3][4](%rdi),@C[4]
+
+	rol	\$1,@C[1]
+	xor	@C[4],@C[1]		# D[0] = ROL64(C[1], 1) ^ C[4]
+
+	rol	\$1,@C[4]
+	xor	@T[0],@C[4]		# D[3] = ROL64(C[4], 1) ^ C[2]
+___
+	(@D[0..4], @C) = (@C[1..4,0], @D);
+$code.=<<___;
+	xor	@D[1],@C[1]
+	xor	@D[2],@C[2]
+	rol	\$$rhotates[1][1],@C[1]
+	xor	@D[3],@C[3]
+	xor	@D[4],@C[4]
+	rol	\$$rhotates[2][2],@C[2]
+	xor	@D[0],@C[0]
+	 mov	@C[1],@T[0]
+	rol	\$$rhotates[3][3],@C[3]
+	 or	@C[2],@C[1]
+	 xor	@C[0],@C[1]		#           C[0] ^ ( C[1] | C[2])
+	rol	\$$rhotates[4][4],@C[4]
+
+	 xor	($iotas),@C[1]
+	 lea	8($iotas),$iotas
+
+	mov	@C[4],@T[1]
+	and	@C[3],@C[4]
+	 mov	@C[1],$A[0][0](%rsi)	# R[0][0] = C[0] ^ ( C[1] | C[2]) ^ iotas[i]
+	xor	@C[2],@C[4]		#           C[2] ^ ( C[4] & C[3])
+	not	@C[2]
+	mov	@C[4],$A[0][2](%rsi)	# R[0][2] = C[2] ^ ( C[4] & C[3])
+
+	or	@C[3],@C[2]
+	  mov	$A[4][2](%rdi),@C[4]
+	xor	@T[0],@C[2]		#           C[1] ^ (~C[2] | C[3])
+	mov	@C[2],$A[0][1](%rsi)	# R[0][1] = C[1] ^ (~C[2] | C[3])
+
+	and	@C[0],@T[0]
+	  mov	$A[1][4](%rdi),@C[1]
+	xor	@T[1],@T[0]		#           C[4] ^ ( C[1] & C[0])
+	  mov	$A[2][0](%rdi),@C[2]
+	mov	@T[0],$A[0][4](%rsi)	# R[0][4] = C[4] ^ ( C[1] & C[0])
+
+	or	@C[0],@T[1]
+	  mov	$A[0][3](%rdi),@C[0]
+	xor	@C[3],@T[1]		#           C[3] ^ ( C[4] | C[0])
+	  mov	$A[3][1](%rdi),@C[3]
+	mov	@T[1],$A[0][3](%rsi)	# R[0][3] = C[3] ^ ( C[4] | C[0])
+
+
+	xor	@D[3],@C[0]
+	xor	@D[2],@C[4]
+	rol	\$$rhotates[0][3],@C[0]
+	xor	@D[1],@C[3]
+	xor	@D[4],@C[1]
+	rol	\$$rhotates[4][2],@C[4]
+	rol	\$$rhotates[3][1],@C[3]
+	xor	@D[0],@C[2]
+	rol	\$$rhotates[1][4],@C[1]
+	 mov	@C[0],@T[0]
+	 or	@C[4],@C[0]
+	rol	\$$rhotates[2][0],@C[2]
+
+	xor	@C[3],@C[0]		#           C[3] ^ (C[0] |  C[4])
+	mov	@C[0],$A[1][3](%rsi)	# R[1][3] = C[3] ^ (C[0] |  C[4])
+
+	mov	@C[1],@T[1]
+	and	@T[0],@C[1]
+	  mov	$A[0][1](%rdi),@C[0]
+	xor	@C[4],@C[1]		#           C[4] ^ (C[1] &  C[0])
+	not	@C[4]
+	mov	@C[1],$A[1][4](%rsi)	# R[1][4] = C[4] ^ (C[1] &  C[0])
+
+	or	@C[3],@C[4]
+	  mov	$A[1][2](%rdi),@C[1]
+	xor	@C[2],@C[4]		#           C[2] ^ (~C[4] | C[3])
+	mov	@C[4],$A[1][2](%rsi)	# R[1][2] = C[2] ^ (~C[4] | C[3])
+
+	and	@C[2],@C[3]
+	  mov	$A[4][0](%rdi),@C[4]
+	xor	@T[1],@C[3]		#           C[1] ^ (C[3] &  C[2])
+	mov	@C[3],$A[1][1](%rsi)	# R[1][1] = C[1] ^ (C[3] &  C[2])
+
+	or	@C[2],@T[1]
+	  mov	$A[2][3](%rdi),@C[2]
+	xor	@T[0],@T[1]		#           C[0] ^ (C[1] |  C[2])
+	  mov	$A[3][4](%rdi),@C[3]
+	mov	@T[1],$A[1][0](%rsi)	# R[1][0] = C[0] ^ (C[1] |  C[2])
+
+
+	xor	@D[3],@C[2]
+	xor	@D[4],@C[3]
+	rol	\$$rhotates[2][3],@C[2]
+	xor	@D[2],@C[1]
+	rol	\$$rhotates[3][4],@C[3]
+	xor	@D[0],@C[4]
+	rol	\$$rhotates[1][2],@C[1]
+	xor	@D[1],@C[0]
+	rol	\$$rhotates[4][0],@C[4]
+	 mov	@C[2],@T[0]
+	 and	@C[3],@C[2]
+	rol	\$$rhotates[0][1],@C[0]
+
+	not	@C[3]
+	xor	@C[1],@C[2]		#            C[1] ^ ( C[2] & C[3])
+	mov	@C[2],$A[2][1](%rsi)	# R[2][1] =  C[1] ^ ( C[2] & C[3])
+
+	mov	@C[4],@T[1]
+	and	@C[3],@C[4]
+	  mov	$A[2][1](%rdi),@C[2]
+	xor	@T[0],@C[4]		#            C[2] ^ ( C[4] & ~C[3])
+	mov	@C[4],$A[2][2](%rsi)	# R[2][2] =  C[2] ^ ( C[4] & ~C[3])
+
+	or	@C[1],@T[0]
+	  mov	$A[4][3](%rdi),@C[4]
+	xor	@C[0],@T[0]		#            C[0] ^ ( C[2] | C[1])
+	mov	@T[0],$A[2][0](%rsi)	# R[2][0] =  C[0] ^ ( C[2] | C[1])
+
+	and	@C[0],@C[1]
+	xor	@T[1],@C[1]		#            C[4] ^ ( C[1] & C[0])
+	mov	@C[1],$A[2][4](%rsi)	# R[2][4] =  C[4] ^ ( C[1] & C[0])
+
+	or	@C[0],@T[1]
+	  mov	$A[1][0](%rdi),@C[1]
+	xor	@C[3],@T[1]		#           ~C[3] ^ ( C[0] | C[4])
+	  mov	$A[3][2](%rdi),@C[3]
+	mov	@T[1],$A[2][3](%rsi)	# R[2][3] = ~C[3] ^ ( C[0] | C[4])
+
+
+	mov	$A[0][4](%rdi),@C[0]
+
+	xor	@D[1],@C[2]
+	xor	@D[2],@C[3]
+	rol	\$$rhotates[2][1],@C[2]
+	xor	@D[0],@C[1]
+	rol	\$$rhotates[3][2],@C[3]
+	xor	@D[3],@C[4]
+	rol	\$$rhotates[1][0],@C[1]
+	xor	@D[4],@C[0]
+	rol	\$$rhotates[4][3],@C[4]
+	 mov	@C[2],@T[0]
+	 or	@C[3],@C[2]
+	rol	\$$rhotates[0][4],@C[0]
+
+	not	@C[3]
+	xor	@C[1],@C[2]		#            C[1] ^ ( C[2] | C[3])
+	mov	@C[2],$A[3][1](%rsi)	# R[3][1] =  C[1] ^ ( C[2] | C[3])
+
+	mov	@C[4],@T[1]
+	or	@C[3],@C[4]
+	xor	@T[0],@C[4]		#            C[2] ^ ( C[4] | ~C[3])
+	mov	@C[4],$A[3][2](%rsi)	# R[3][2] =  C[2] ^ ( C[4] | ~C[3])
+
+	and	@C[1],@T[0]
+	xor	@C[0],@T[0]		#            C[0] ^ ( C[2] & C[1])
+	mov	@T[0],$A[3][0](%rsi)	# R[3][0] =  C[0] ^ ( C[2] & C[1])
+
+	or	@C[0],@C[1]
+	xor	@T[1],@C[1]		#            C[4] ^ ( C[1] | C[0])
+	mov	@C[1],$A[3][4](%rsi)	# R[3][4] =  C[4] ^ ( C[1] | C[0])
+
+	and	@T[1],@C[0]
+	xor	@C[3],@C[0]		#           ~C[3] ^ ( C[0] & C[4])
+	mov	@C[0],$A[3][3](%rsi)	# R[3][3] = ~C[3] ^ ( C[0] & C[4])
+
+
+	xor	$A[0][2](%rdi),@D[2]
+	xor	$A[1][3](%rdi),@D[3]
+	rol	\$$rhotates[0][2],@D[2]
+	xor	$A[4][1](%rdi),@D[1]
+	rol	\$$rhotates[1][3],@D[3]
+	xor	$A[2][4](%rdi),@D[4]
+	rol	\$$rhotates[4][1],@D[1]
+	xor	$A[3][0](%rdi),@D[0]
+	xchg	%rsi,%rdi
+	rol	\$$rhotates[2][4],@D[4]
+	rol	\$$rhotates[3][0],@D[0]
+___
+	@C = @D[2..4,0,1];
+$code.=<<___;
+	mov	@C[0],@T[0]
+	and	@C[1],@C[0]
+	not	@C[1]
+	xor	@C[4],@C[0]		#            C[4] ^ ( C[0] & C[1])
+	mov	@C[0],$A[4][4](%rdi)	# R[4][4] =  C[4] ^ ( C[0] & C[1])
+
+	mov	@C[2],@T[1]
+	and	@C[1],@C[2]
+	xor	@T[0],@C[2]		#            C[0] ^ ( C[2] & ~C[1])
+	mov	@C[2],$A[4][0](%rdi)	# R[4][0] =  C[0] ^ ( C[2] & ~C[1])
+
+	or	@C[4],@T[0]
+	xor	@C[3],@T[0]		#            C[3] ^ ( C[0] | C[4])
+	mov	@T[0],$A[4][3](%rdi)	# R[4][3] =  C[3] ^ ( C[0] | C[4])
+
+	and	@C[3],@C[4]
+	xor	@T[1],@C[4]		#            C[2] ^ ( C[4] & C[3])
+	mov	@C[4],$A[4][2](%rdi)	# R[4][2] =  C[2] ^ ( C[4] & C[3])
+
+	or	@T[1],@C[3]
+	xor	@C[1],@C[3]		#           ~C[1] ^ ( C[2] | C[3])
+	mov	@C[3],$A[4][1](%rdi)	# R[4][1] = ~C[1] ^ ( C[2] | C[3])
+
+	mov	@C[0],@C[1]		# harmonize with the loop top
+	mov	@T[0],@C[0]
+
+	test	\$255,$iotas
+	jnz	.Loop
+
+	lea	-192($iotas),$iotas	# rewind iotas
+	ret
+.size	__KeccakF1600,.-__KeccakF1600
+
+.type	KeccakF1600,\@abi-omnipotent
+.align	32
+KeccakF1600:
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+
+	lea	100(%rdi),%rdi		# size optimization
+	sub	\$200,%rsp
+.cfi_adjust_cfa_offset	200
+
+	notq	$A[0][1](%rdi)
+	notq	$A[0][2](%rdi)
+	notq	$A[1][3](%rdi)
+	notq	$A[2][2](%rdi)
+	notq	$A[3][2](%rdi)
+	notq	$A[4][0](%rdi)
+
+	lea	iotas(%rip),$iotas
+	lea	100(%rsp),%rsi		# size optimization
+
+	call	__KeccakF1600
+
+	notq	$A[0][1](%rdi)
+	notq	$A[0][2](%rdi)
+	notq	$A[1][3](%rdi)
+	notq	$A[2][2](%rdi)
+	notq	$A[3][2](%rdi)
+	notq	$A[4][0](%rdi)
+	lea	-100(%rdi),%rdi		# preserve A[][]
+
+	add	\$200,%rsp
+.cfi_adjust_cfa_offset	-200
+
+	pop	%r15
+.cfi_pop	%r15
+	pop	%r14
+.cfi_pop	%r14
+	pop	%r13
+.cfi_pop	%r13
+	pop	%r12
+.cfi_pop	%r12
+	pop	%rbp
+.cfi_pop	%rbp
+	pop	%rbx
+.cfi_pop	%rbx
+	ret
+.cfi_endproc
+.size	KeccakF1600,.-KeccakF1600
+___
+
+{ my ($A_flat,$inp,$len,$bsz) = ("%rdi","%rsi","%rdx","%rcx");
+     ($A_flat,$inp) = ("%r8","%r9");
+$code.=<<___;
+.globl	SHA3_absorb
+.type	SHA3_absorb,\@function,4
+.align	32
+SHA3_absorb:
+.cfi_startproc
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+
+	lea	100(%rdi),%rdi		# size optimization
+	sub	\$232,%rsp
+.cfi_adjust_cfa_offset	232
+
+	mov	%rsi,$inp
+	lea	100(%rsp),%rsi		# size optimization
+
+	notq	$A[0][1](%rdi)
+	notq	$A[0][2](%rdi)
+	notq	$A[1][3](%rdi)
+	notq	$A[2][2](%rdi)
+	notq	$A[3][2](%rdi)
+	notq	$A[4][0](%rdi)
+	lea	iotas(%rip),$iotas
+
+	mov	$bsz,216-100(%rsi)	# save bsz
+
+.Loop_absorb:
+	cmp	$bsz,$len
+	jc	.Ldone_absorb
+
+	shr	\$3,$bsz
+	lea	-100(%rdi),$A_flat
+
+.Lblock_absorb:
+	mov	($inp),%rax
+	lea	8($inp),$inp
+	xor	($A_flat),%rax
+	lea	8($A_flat),$A_flat
+	sub	\$8,$len
+	mov	%rax,-8($A_flat)
+	sub	\$1,$bsz
+	jnz	.Lblock_absorb
+
+	mov	$inp,200-100(%rsi)	# save inp
+	mov	$len,208-100(%rsi)	# save len
+	call	__KeccakF1600
+	mov	200-100(%rsi),$inp	# pull inp
+	mov	208-100(%rsi),$len	# pull len
+	mov	216-100(%rsi),$bsz	# pull bsz
+	jmp	.Loop_absorb
+
+.align	32
+.Ldone_absorb:
+	mov	$len,%rax		# return value
+
+	notq	$A[0][1](%rdi)
+	notq	$A[0][2](%rdi)
+	notq	$A[1][3](%rdi)
+	notq	$A[2][2](%rdi)
+	notq	$A[3][2](%rdi)
+	notq	$A[4][0](%rdi)
+
+	add	\$232,%rsp
+.cfi_adjust_cfa_offset	-232
+
+	pop	%r15
+.cfi_pop	%r15
+	pop	%r14
+.cfi_pop	%r14
+	pop	%r13
+.cfi_pop	%r13
+	pop	%r12
+.cfi_pop	%r12
+	pop	%rbp
+.cfi_pop	%rbp
+	pop	%rbx
+.cfi_pop	%rbx
+	ret
+.cfi_endproc
+.size	SHA3_absorb,.-SHA3_absorb
+___
+}
+{ my ($A_flat,$out,$len,$bsz) = ("%rdi","%rsi","%rdx","%rcx");
+     ($out,$len,$bsz) = ("%r12","%r13","%r14");
+
+$code.=<<___;
+.globl	SHA3_squeeze
+.type	SHA3_squeeze,\@function,4
+.align	32
+SHA3_squeeze:
+.cfi_startproc
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+
+	shr	\$3,%rcx
+	mov	$A_flat,%r8
+	mov	%rsi,$out
+	mov	%rdx,$len
+	mov	%rcx,$bsz
+	jmp	.Loop_squeeze
+
+.align	32
+.Loop_squeeze:
+	cmp	\$8,$len
+	jb	.Ltail_squeeze
+
+	mov	(%r8),%rax
+	lea	8(%r8),%r8
+	mov	%rax,($out)
+	lea	8($out),$out
+	sub	\$8,$len		# len -= 8
+	jz	.Ldone_squeeze
+
+	sub	\$1,%rcx		# bsz--
+	jnz	.Loop_squeeze
+
+	call	KeccakF1600
+	mov	$A_flat,%r8
+	mov	$bsz,%rcx
+	jmp	.Loop_squeeze
+
+.Ltail_squeeze:
+	mov	%r8, %rsi
+	mov	$out,%rdi
+	mov	$len,%rcx
+	.byte	0xf3,0xa4		# rep	movsb
+
+.Ldone_squeeze:
+	pop	%r14
+.cfi_pop	%r14
+	pop	%r13
+.cfi_pop	%r13
+	pop	%r12
+.cfi_pop	%r13
+	ret
+.cfi_endproc
+.size	SHA3_squeeze,.-SHA3_squeeze
+___
+}
+$code.=<<___;
+.align	256
+	.quad	0,0,0,0,0,0,0,0
+.type	iotas,\@object
+iotas:
+	.quad	0x0000000000000001
+	.quad	0x0000000000008082
+	.quad	0x800000000000808a
+	.quad	0x8000000080008000
+	.quad	0x000000000000808b
+	.quad	0x0000000080000001
+	.quad	0x8000000080008081
+	.quad	0x8000000000008009
+	.quad	0x000000000000008a
+	.quad	0x0000000000000088
+	.quad	0x0000000080008009
+	.quad	0x000000008000000a
+	.quad	0x000000008000808b
+	.quad	0x800000000000008b
+	.quad	0x8000000000008089
+	.quad	0x8000000000008003
+	.quad	0x8000000000008002
+	.quad	0x8000000000000080
+	.quad	0x000000000000800a
+	.quad	0x800000008000000a
+	.quad	0x8000000080008081
+	.quad	0x8000000000008080
+	.quad	0x0000000080000001
+	.quad	0x8000000080008008
+.size	iotas,.-iotas
+.asciz	"Keccak-1600 absorb and squeeze for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+foreach (split("\n",$code)) {
+	# Below replacement results in 11.2 on Sandy Bridge, 9.4 on
+	# Haswell, but it hurts other processors by up to 2-3-4x...
+	#s/rol\s+(\$[0-9]+),(%[a-z][a-z0-9]+)/shld\t$1,$2,$2/;
+	# Below replacement results in 9.3 on Haswell [as well as
+	# on Ryzen, i.e. it *hurts* Ryzen]...
+	#s/rol\s+\$([0-9]+),(%[a-z][a-z0-9]+)/rorx\t\$64-$1,$2,$2/;
+
+	print $_, "\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600p8-ppc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600p8-ppc.pl
new file mode 100755
index 000000000..de2bcd660
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/keccak1600p8-ppc.pl
@@ -0,0 +1,850 @@
+#!/usr/bin/env perl
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# Keccak-1600 for PowerISA 2.07.
+#
+# June 2017.
+#
+# This is straightforward KECCAK_1X_ALT SIMD implementation, but with
+# disjoint Rho and Pi. The module is ABI-bitness- and endian-neutral.
+# POWER8 processor spends 9.8 cycles to process byte out of large
+# buffer for r=1088, which matches SHA3-256. This is 17% better than
+# scalar PPC64 code. It probably should be noted that if POWER8's
+# successor can achieve higher scalar instruction issue rate, then
+# this module will loose... And it does on POWER9 with 12.0 vs. 9.4.
+
+$flavour = shift;
+
+if ($flavour =~ /64/) {
+	$SIZE_T	=8;
+	$LRSAVE	=2*$SIZE_T;
+	$UCMP	="cmpld";
+	$STU	="stdu";
+	$POP	="ld";
+	$PUSH	="std";
+} elsif ($flavour =~ /32/) {
+	$SIZE_T	=4;
+	$LRSAVE	=$SIZE_T;
+	$STU	="stwu";
+	$POP	="lwz";
+	$PUSH	="stw";
+	$UCMP	="cmplw";
+} else { die "nonsense $flavour"; }
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open STDOUT,"| $^X $xlate $flavour ".shift || die "can't call $xlate: $!";
+
+$FRAME=6*$SIZE_T+13*16;	# 13*16 is for v20-v31 offload
+
+my $sp ="r1";
+
+my $iotas = "r12";
+
+########################################################################
+# Register layout:
+#
+# v0		A[0][0] A[1][0]
+# v1		A[0][1] A[1][1]
+# v2		A[0][2] A[1][2]
+# v3		A[0][3] A[1][3]
+# v4		A[0][4] A[1][4]
+#
+# v5		A[2][0] A[3][0]
+# v6		A[2][1] A[3][1]
+# v7		A[2][2] A[3][2]
+# v8		A[2][3] A[3][3]
+# v9		A[2][4] A[3][4]
+#
+# v10		A[4][0] A[4][1]
+# v11		A[4][2] A[4][3]
+# v12		A[4][4] A[4][4]
+#
+# v13..25	rhotates[][]
+# v26..31	volatile
+#
+$code.=<<___;
+.machine	"any"
+.text
+
+.type	KeccakF1600_int,\@function
+.align	5
+KeccakF1600_int:
+	li	r0,24
+	mtctr	r0
+	li	r0,0
+	b	.Loop
+
+.align	4
+.Loop:
+	;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; Theta
+	vxor	v26,v0, v5		; A[0..1][0]^A[2..3][0]
+	vxor	v27,v1, v6		; A[0..1][1]^A[2..3][1]
+	vxor	v28,v2, v7		; A[0..1][2]^A[2..3][2]
+	vxor	v29,v3, v8		; A[0..1][3]^A[2..3][3]
+	vxor	v30,v4, v9		; A[0..1][4]^A[2..3][4]
+	vpermdi	v31,v26,v27,0b00	; A[0][0..1]^A[2][0..1]
+	vpermdi	v26,v26,v27,0b11	; A[1][0..1]^A[3][0..1]
+	vpermdi	v27,v28,v29,0b00	; A[0][2..3]^A[2][2..3]
+	vpermdi	v28,v28,v29,0b11	; A[1][2..3]^A[3][2..3]
+	vpermdi	v29,v30,v30,0b10	; A[1..0][4]^A[3..2][4]
+	vxor	v26,v26,v31		; C[0..1]
+	vxor	v27,v27,v28		; C[2..3]
+	vxor	v28,v29,v30		; C[4..4]
+	vspltisb v31,1
+	vxor	v26,v26,v10		; C[0..1] ^= A[4][0..1]
+	vxor	v27,v27,v11		; C[2..3] ^= A[4][2..3]
+	vxor	v28,v28,v12		; C[4..4] ^= A[4][4..4], low!
+
+	vrld	v29,v26,v31		; ROL64(C[0..1],1)
+	vrld	v30,v27,v31		; ROL64(C[2..3],1)
+	vrld	v31,v28,v31		; ROL64(C[4..4],1)
+	vpermdi	v31,v31,v29,0b10
+	vxor	v26,v26,v30		; C[0..1] ^= ROL64(C[2..3],1)
+	vxor	v27,v27,v31		; C[2..3] ^= ROL64(C[4..0],1)
+	vxor	v28,v28,v29		; C[4..4] ^= ROL64(C[0..1],1), low!
+
+	vpermdi	v29,v26,v26,0b00	; C[0..0]
+	vpermdi	v30,v28,v26,0b10	; C[4..0]
+	vpermdi	v31,v28,v28,0b11	; C[4..4]
+	vxor	v1, v1, v29		; A[0..1][1] ^= C[0..0]
+	vxor	v6, v6, v29		; A[2..3][1] ^= C[0..0]
+	vxor	v10,v10,v30		; A[4][0..1] ^= C[4..0]
+	vxor	v0, v0, v31		; A[0..1][0] ^= C[4..4]
+	vxor	v5, v5, v31		; A[2..3][0] ^= C[4..4]
+
+	vpermdi	v29,v27,v27,0b00	; C[2..2]
+	vpermdi	v30,v26,v26,0b11	; C[1..1]
+	vpermdi	v31,v26,v27,0b10	; C[1..2]
+	vxor	v3, v3, v29		; A[0..1][3] ^= C[2..2]
+	vxor	v8, v8, v29		; A[2..3][3] ^= C[2..2]
+	vxor	v2, v2, v30		; A[0..1][2] ^= C[1..1]
+	vxor	v7, v7, v30		; A[2..3][2] ^= C[1..1]
+	vxor	v11,v11,v31		; A[4][2..3] ^= C[1..2]
+
+	vpermdi	v29,v27,v27,0b11	; C[3..3]
+	vxor	v4, v4, v29		; A[0..1][4] ^= C[3..3]
+	vxor	v9, v9, v29		; A[2..3][4] ^= C[3..3]
+	vxor	v12,v12,v29		; A[4..4][4] ^= C[3..3]
+
+	;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; Rho
+	vrld	v26,v0, v13		; v0
+	vrld	v1, v1, v14
+	vrld	v27,v2, v15		; v2
+	vrld	v28,v3, v16		; v3
+	vrld	v4, v4, v17
+	vrld	v5, v5, v18
+	vrld	v6, v6, v19
+	vrld	v29,v7, v20		; v7
+	vrld	v8, v8, v21
+	vrld	v9, v9, v22
+	vrld	v10,v10,v23
+	vrld	v30,v11,v24		; v11
+	vrld	v12,v12,v25
+
+	;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; Pi
+	vpermdi	v0, v26,v28,0b00	; [0][0] [1][0] < [0][0] [0][3]
+	vpermdi	v2, v29,v5, 0b00	; [0][2] [1][2] < [2][2] [2][0]
+	vpermdi	v11,v9, v5, 0b01	; [4][2] [4][3] < [2][4] [3][0]
+	vpermdi	v5, v1, v4, 0b00	; [2][0] [3][0] < [0][1] [0][4]
+	vpermdi	v1, v1, v4, 0b11	; [0][1] [1][1] < [1][1] [1][4]
+	vpermdi	v3, v8, v6, 0b11	; [0][3] [1][3] < [3][3] [3][1]
+	vpermdi	v4, v12,v30,0b10	; [0][4] [1][4] < [4][4] [4][2]
+	vpermdi	v7, v8, v6, 0b00	; [2][2] [3][2] < [2][3] [2][1]
+	vpermdi	v6, v27,v26,0b11	; [2][1] [3][1] < [1][2] [1][0]
+	vpermdi	v8, v9, v29,0b11	; [2][3] [3][3] < [3][4] [3][2]
+	vpermdi	v12,v10,v10,0b11	; [4][4] [4][4] < [4][1] [4][1]
+	vpermdi	v9, v10,v30,0b01	; [2][4] [3][4] < [4][0] [4][3]
+	vpermdi	v10,v27,v28,0b01	; [4][0] [4][1] < [0][2] [1][3]
+
+	;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; Chi + Iota
+	lvx_u	v31,$iotas,r0		; iotas[index]
+	addic	r0,r0,16		; index++
+
+	vandc	v26,v2, v1		; (~A[0..1][1] & A[0..1][2])
+	vandc	v27,v3, v2		; (~A[0..1][2] & A[0..1][3])
+	vandc	v28,v4, v3		; (~A[0..1][3] & A[0..1][4])
+	vandc	v29,v0, v4		; (~A[0..1][4] & A[0..1][0])
+	vandc	v30,v1, v0		; (~A[0..1][0] & A[0..1][1])
+	vxor	v0, v0, v26		; A[0..1][0] ^= (~A[0..1][1] & A[0..1][2])
+	vxor	v1, v1, v27		; A[0..1][1] ^= (~A[0..1][2] & A[0..1][3])
+	vxor	v2, v2, v28		; A[0..1][2] ^= (~A[0..1][3] & A[0..1][4])
+	vxor	v3, v3, v29		; A[0..1][3] ^= (~A[0..1][4] & A[0..1][0])
+	vxor	v4, v4, v30		; A[0..1][4] ^= (~A[0..1][0] & A[0..1][1])
+
+	vandc	v26,v7, v6		; (~A[2..3][1] & A[2..3][2])
+	vandc	v27,v8, v7		; (~A[2..3][2] & A[2..3][3])
+	vandc	v28,v9, v8		; (~A[2..3][3] & A[2..3][4])
+	vandc	v29,v5, v9		; (~A[2..3][4] & A[2..3][0])
+	vandc	v30,v6, v5		; (~A[2..3][0] & A[2..3][1])
+	vxor	v5, v5, v26		; A[2..3][0] ^= (~A[2..3][1] & A[2..3][2])
+	vxor	v6, v6, v27		; A[2..3][1] ^= (~A[2..3][2] & A[2..3][3])
+	vxor	v7, v7, v28		; A[2..3][2] ^= (~A[2..3][3] & A[2..3][4])
+	vxor	v8, v8, v29		; A[2..3][3] ^= (~A[2..3][4] & A[2..3][0])
+	vxor	v9, v9, v30		; A[2..3][4] ^= (~A[2..3][0] & A[2..3][1])
+
+	vxor	v0, v0, v31		; A[0][0] ^= iotas[index++]
+
+	vpermdi	v26,v10,v11,0b10	; A[4][1..2]
+	vpermdi	v27,v12,v10,0b00	; A[4][4..0]
+	vpermdi	v28,v11,v12,0b10	; A[4][3..4]
+	vpermdi	v29,v10,v10,0b10	; A[4][1..0]
+	vandc	v26,v11,v26		; (~A[4][1..2] & A[4][2..3])
+	vandc	v27,v27,v28		; (~A[4][3..4] & A[4][4..0])
+	vandc	v28,v10,v29		; (~A[4][1..0] & A[4][0..1])
+	vxor	v10,v10,v26		; A[4][0..1] ^= (~A[4][1..2] & A[4][2..3])
+	vxor	v11,v11,v27		; A[4][2..3] ^= (~A[4][3..4] & A[4][4..0])
+	vxor	v12,v12,v28		; A[4][4..4] ^= (~A[4][0..1] & A[4][1..0])
+
+	bdnz	.Loop
+
+	vpermdi	v12,v12,v12,0b11	; broadcast A[4][4]
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+.size	KeccakF1600_int,.-KeccakF1600_int
+
+.type	KeccakF1600,\@function
+.align	5
+KeccakF1600:
+	$STU	$sp,-$FRAME($sp)
+	li	r10,`15+6*$SIZE_T`
+	li	r11,`31+6*$SIZE_T`
+	mflr	r8
+	mfspr	r7, 256			; save vrsave
+	stvx	v20,r10,$sp
+	addi	r10,r10,32
+	stvx	v21,r11,$sp
+	addi	r11,r11,32
+	stvx	v22,r10,$sp
+	addi	r10,r10,32
+	stvx	v23,r11,$sp
+	addi	r11,r11,32
+	stvx	v24,r10,$sp
+	addi	r10,r10,32
+	stvx	v25,r11,$sp
+	addi	r11,r11,32
+	stvx	v26,r10,$sp
+	addi	r10,r10,32
+	stvx	v27,r11,$sp
+	addi	r11,r11,32
+	stvx	v28,r10,$sp
+	addi	r10,r10,32
+	stvx	v29,r11,$sp
+	addi	r11,r11,32
+	stvx	v30,r10,$sp
+	stvx	v31,r11,$sp
+	stw	r7,`$FRAME-4`($sp)	; save vrsave
+	li	r0, -1
+	$PUSH	r8,`$FRAME+$LRSAVE`($sp)
+	mtspr	256, r0			; preserve all AltiVec registers
+
+	li	r11,16
+	lvx_4w	v0,0,r3			; load A[5][5]
+	li	r10,32
+	lvx_4w	v1,r11,r3
+	addi	r11,r11,32
+	lvx_4w	v2,r10,r3
+	addi	r10,r10,32
+	lvx_4w	v3,r11,r3
+	addi	r11,r11,32
+	lvx_4w	v4,r10,r3
+	addi	r10,r10,32
+	lvx_4w	v5,r11,r3
+	addi	r11,r11,32
+	lvx_4w	v6,r10,r3
+	addi	r10,r10,32
+	lvx_4w	v7,r11,r3
+	addi	r11,r11,32
+	lvx_4w	v8,r10,r3
+	addi	r10,r10,32
+	lvx_4w	v9,r11,r3
+	addi	r11,r11,32
+	lvx_4w	v10,r10,r3
+	addi	r10,r10,32
+	lvx_4w	v11,r11,r3
+	lvx_splt v12,r10,r3
+
+	bl	PICmeup
+
+	li	r11,16
+	lvx_u	v13,0,r12		; load rhotates
+	li	r10,32
+	lvx_u	v14,r11,r12
+	addi	r11,r11,32
+	lvx_u	v15,r10,r12
+	addi	r10,r10,32
+	lvx_u	v16,r11,r12
+	addi	r11,r11,32
+	lvx_u	v17,r10,r12
+	addi	r10,r10,32
+	lvx_u	v18,r11,r12
+	addi	r11,r11,32
+	lvx_u	v19,r10,r12
+	addi	r10,r10,32
+	lvx_u	v20,r11,r12
+	addi	r11,r11,32
+	lvx_u	v21,r10,r12
+	addi	r10,r10,32
+	lvx_u	v22,r11,r12
+	addi	r11,r11,32
+	lvx_u	v23,r10,r12
+	addi	r10,r10,32
+	lvx_u	v24,r11,r12
+	lvx_u	v25,r10,r12
+	addi	r12,r12,`16*16`		; points at iotas
+
+	bl	KeccakF1600_int
+
+	li	r11,16
+	stvx_4w	v0,0,r3			; return A[5][5]
+	li	r10,32
+	stvx_4w	v1,r11,r3
+	addi	r11,r11,32
+	stvx_4w	v2,r10,r3
+	addi	r10,r10,32
+	stvx_4w	v3,r11,r3
+	addi	r11,r11,32
+	stvx_4w	v4,r10,r3
+	addi	r10,r10,32
+	stvx_4w	v5,r11,r3
+	addi	r11,r11,32
+	stvx_4w	v6,r10,r3
+	addi	r10,r10,32
+	stvx_4w	v7,r11,r3
+	addi	r11,r11,32
+	stvx_4w	v8,r10,r3
+	addi	r10,r10,32
+	stvx_4w	v9,r11,r3
+	addi	r11,r11,32
+	stvx_4w	v10,r10,r3
+	addi	r10,r10,32
+	stvx_4w	v11,r11,r3
+	stvdx_u v12,r10,r3
+
+	li	r10,`15+6*$SIZE_T`
+	li	r11,`31+6*$SIZE_T`
+	mtlr	r8
+	mtspr	256, r7			; restore vrsave
+	lvx	v20,r10,$sp
+	addi	r10,r10,32
+	lvx	v21,r11,$sp
+	addi	r11,r11,32
+	lvx	v22,r10,$sp
+	addi	r10,r10,32
+	lvx	v23,r11,$sp
+	addi	r11,r11,32
+	lvx	v24,r10,$sp
+	addi	r10,r10,32
+	lvx	v25,r11,$sp
+	addi	r11,r11,32
+	lvx	v26,r10,$sp
+	addi	r10,r10,32
+	lvx	v27,r11,$sp
+	addi	r11,r11,32
+	lvx	v28,r10,$sp
+	addi	r10,r10,32
+	lvx	v29,r11,$sp
+	addi	r11,r11,32
+	lvx	v30,r10,$sp
+	lvx	v31,r11,$sp
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,0x04,1,0x80,0,1,0
+	.long	0
+.size	KeccakF1600,.-KeccakF1600
+___
+{
+my ($A_jagged,$inp,$len,$bsz) = map("r$_",(3..6));
+
+$code.=<<___;
+.globl	SHA3_absorb
+.type	SHA3_absorb,\@function
+.align	5
+SHA3_absorb:
+	$STU	$sp,-$FRAME($sp)
+	li	r10,`15+6*$SIZE_T`
+	li	r11,`31+6*$SIZE_T`
+	mflr	r8
+	mfspr	r7, 256			; save vrsave
+	stvx	v20,r10,$sp
+	addi	r10,r10,32
+	stvx	v21,r11,$sp
+	addi	r11,r11,32
+	stvx	v22,r10,$sp
+	addi	r10,r10,32
+	stvx	v23,r11,$sp
+	addi	r11,r11,32
+	stvx	v24,r10,$sp
+	addi	r10,r10,32
+	stvx	v25,r11,$sp
+	addi	r11,r11,32
+	stvx	v26,r10,$sp
+	addi	r10,r10,32
+	stvx	v27,r11,$sp
+	addi	r11,r11,32
+	stvx	v28,r10,$sp
+	addi	r10,r10,32
+	stvx	v29,r11,$sp
+	addi	r11,r11,32
+	stvx	v30,r10,$sp
+	stvx	v31,r11,$sp
+	stw	r7,`$FRAME-4`($sp)	; save vrsave
+	li	r0, -1
+	$PUSH	r8,`$FRAME+$LRSAVE`($sp)
+	mtspr	256, r0			; preserve all AltiVec registers
+
+	li	r11,16
+	lvx_4w	v0,0,$A_jagged		; load A[5][5]
+	li	r10,32
+	lvx_4w	v1,r11,$A_jagged
+	addi	r11,r11,32
+	lvx_4w	v2,r10,$A_jagged
+	addi	r10,r10,32
+	lvx_4w	v3,r11,$A_jagged
+	addi	r11,r11,32
+	lvx_4w	v4,r10,$A_jagged
+	addi	r10,r10,32
+	lvx_4w	v5,r11,$A_jagged
+	addi	r11,r11,32
+	lvx_4w	v6,r10,$A_jagged
+	addi	r10,r10,32
+	lvx_4w	v7,r11,$A_jagged
+	addi	r11,r11,32
+	lvx_4w	v8,r10,$A_jagged
+	addi	r10,r10,32
+	lvx_4w	v9,r11,$A_jagged
+	addi	r11,r11,32
+	lvx_4w	v10,r10,$A_jagged
+	addi	r10,r10,32
+	lvx_4w	v11,r11,$A_jagged
+	lvx_splt v12,r10,$A_jagged
+
+	bl	PICmeup
+
+	li	r11,16
+	lvx_u	v13,0,r12		; load rhotates
+	li	r10,32
+	lvx_u	v14,r11,r12
+	addi	r11,r11,32
+	lvx_u	v15,r10,r12
+	addi	r10,r10,32
+	lvx_u	v16,r11,r12
+	addi	r11,r11,32
+	lvx_u	v17,r10,r12
+	addi	r10,r10,32
+	lvx_u	v18,r11,r12
+	addi	r11,r11,32
+	lvx_u	v19,r10,r12
+	addi	r10,r10,32
+	lvx_u	v20,r11,r12
+	addi	r11,r11,32
+	lvx_u	v21,r10,r12
+	addi	r10,r10,32
+	lvx_u	v22,r11,r12
+	addi	r11,r11,32
+	lvx_u	v23,r10,r12
+	addi	r10,r10,32
+	lvx_u	v24,r11,r12
+	lvx_u	v25,r10,r12
+	li	r10,-32
+	li	r11,-16
+	addi	r12,r12,`16*16`		; points at iotas
+	b	.Loop_absorb
+
+.align	4
+.Loop_absorb:
+	$UCMP	$len,$bsz		; len < bsz?
+	blt	.Labsorbed
+
+	sub	$len,$len,$bsz		; len -= bsz
+	srwi	r0,$bsz,3
+	mtctr	r0
+
+	lvx_u	v30,r10,r12		; permutation masks
+	lvx_u	v31,r11,r12
+	?vspltisb v27,7			; prepare masks for byte swap
+	?vxor	v30,v30,v27		; on big-endian
+	?vxor	v31,v31,v27
+
+	vxor	v27,v27,v27		; zero
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v30
+	vxor	v0, v0, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v30
+	vxor	v1, v1, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v30
+	vxor	v2, v2, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v30
+	vxor	v3, v3, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v30
+	vxor	v4, v4, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v31
+	vxor	v0, v0, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v31
+	vxor	v1, v1, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v31
+	vxor	v2, v2, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v31
+	vxor	v3, v3, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v31
+	vxor	v4, v4, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v30
+	vxor	v5, v5, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v30
+	vxor	v6, v6, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v30
+	vxor	v7, v7, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v30
+	vxor	v8, v8, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v30
+	vxor	v9, v9, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v31
+	vxor	v5, v5, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v31
+	vxor	v6, v6, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v31
+	vxor	v7, v7, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v31
+	vxor	v8, v8, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v31
+	vxor	v9, v9, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v30
+	vxor	v10, v10, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v31
+	vxor	v10, v10, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v30
+	vxor	v11, v11, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v31
+	vxor	v11, v11, v26
+	bdz	.Lprocess_block
+	lvdx_u	v26,0,$inp
+	addi	$inp,$inp,8
+	vperm	v26,v26,v27,v31
+	vxor	v12, v12, v26
+
+.Lprocess_block:
+	bl	KeccakF1600_int
+
+	b	.Loop_absorb
+
+.align	4
+.Labsorbed:
+	li	r11,16
+	stvx_4w	v0,0,$A_jagged		; return A[5][5]
+	li	r10,32
+	stvx_4w	v1,r11,$A_jagged
+	addi	r11,r11,32
+	stvx_4w	v2,r10,$A_jagged
+	addi	r10,r10,32
+	stvx_4w	v3,r11,$A_jagged
+	addi	r11,r11,32
+	stvx_4w	v4,r10,$A_jagged
+	addi	r10,r10,32
+	stvx_4w	v5,r11,$A_jagged
+	addi	r11,r11,32
+	stvx_4w	v6,r10,$A_jagged
+	addi	r10,r10,32
+	stvx_4w	v7,r11,$A_jagged
+	addi	r11,r11,32
+	stvx_4w	v8,r10,$A_jagged
+	addi	r10,r10,32
+	stvx_4w	v9,r11,$A_jagged
+	addi	r11,r11,32
+	stvx_4w	v10,r10,$A_jagged
+	addi	r10,r10,32
+	stvx_4w	v11,r11,$A_jagged
+	stvdx_u v12,r10,$A_jagged
+
+	mr	r3,$len			; return value
+	li	r10,`15+6*$SIZE_T`
+	li	r11,`31+6*$SIZE_T`
+	mtlr	r8
+	mtspr	256, r7			; restore vrsave
+	lvx	v20,r10,$sp
+	addi	r10,r10,32
+	lvx	v21,r11,$sp
+	addi	r11,r11,32
+	lvx	v22,r10,$sp
+	addi	r10,r10,32
+	lvx	v23,r11,$sp
+	addi	r11,r11,32
+	lvx	v24,r10,$sp
+	addi	r10,r10,32
+	lvx	v25,r11,$sp
+	addi	r11,r11,32
+	lvx	v26,r10,$sp
+	addi	r10,r10,32
+	lvx	v27,r11,$sp
+	addi	r11,r11,32
+	lvx	v28,r10,$sp
+	addi	r10,r10,32
+	lvx	v29,r11,$sp
+	addi	r11,r11,32
+	lvx	v30,r10,$sp
+	lvx	v31,r11,$sp
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,0x04,1,0x80,0,4,0
+	.long	0
+.size	SHA3_absorb,.-SHA3_absorb
+___
+}
+{
+my ($A_jagged,$out,$len,$bsz) = map("r$_",(3..6));
+
+$code.=<<___;
+.globl	SHA3_squeeze
+.type	SHA3_squeeze,\@function
+.align	5
+SHA3_squeeze:
+	mflr	r9			; r9 is not touched by KeccakF1600
+	subi	$out,$out,1		; prepare for stbu
+	addi	r8,$A_jagged,4		; prepare volatiles
+	mr	r10,$bsz
+	li	r11,0
+	b	.Loop_squeeze
+.align	4
+.Loop_squeeze:
+	lwzx	r7,r11,r8		; lo
+	lwzx	r0,r11,$A_jagged	; hi
+	${UCMP}i $len,8
+	blt	.Lsqueeze_tail
+
+	stbu	r7,1($out)		; write lo
+	srwi	r7,r7,8
+	stbu	r7,1($out)
+	srwi	r7,r7,8
+	stbu	r7,1($out)
+	srwi	r7,r7,8
+	stbu	r7,1($out)
+	stbu	r0,1($out)		; write hi
+	srwi	r0,r0,8
+	stbu	r0,1($out)
+	srwi	r0,r0,8
+	stbu	r0,1($out)
+	srwi	r0,r0,8
+	stbu	r0,1($out)
+
+	subic.	$len,$len,8
+	beqlr				; return if done
+
+	subic.	r10,r10,8
+	ble	.Loutput_expand
+
+	addi	r11,r11,16		; calculate jagged index
+	cmplwi	r11,`16*5`
+	blt	.Loop_squeeze
+	subi	r11,r11,72
+	beq	.Loop_squeeze
+	addi	r11,r11,72
+	cmplwi	r11,`16*5+8`
+	subi	r11,r11,8
+	beq	.Loop_squeeze
+	addi	r11,r11,8
+	cmplwi	r11,`16*10`
+	subi	r11,r11,72
+	beq	.Loop_squeeze
+	addi	r11,r11,72
+	blt	.Loop_squeeze
+	subi	r11,r11,8
+	b	.Loop_squeeze
+
+.align	4
+.Loutput_expand:
+	bl	KeccakF1600
+	mtlr	r9
+
+	addi	r8,$A_jagged,4		; restore volatiles
+	mr	r10,$bsz
+	li	r11,0
+	b	.Loop_squeeze
+
+.align	4
+.Lsqueeze_tail:
+	mtctr	$len
+	subic.	$len,$len,4
+	ble	.Loop_tail_lo
+	li	r8,4
+	mtctr	r8
+.Loop_tail_lo:
+	stbu	r7,1($out)
+	srdi	r7,r7,8
+	bdnz	.Loop_tail_lo
+	ble	.Lsqueeze_done
+	mtctr	$len
+.Loop_tail_hi:
+	stbu	r0,1($out)
+	srdi	r0,r0,8
+	bdnz	.Loop_tail_hi
+
+.Lsqueeze_done:
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,4,0
+	.long	0
+.size	SHA3_squeeze,.-SHA3_squeeze
+___
+}
+$code.=<<___;
+.align	6
+PICmeup:
+	mflr	r0
+	bcl	20,31,\$+4
+	mflr	r12   ; vvvvvv "distance" between . and 1st data entry
+	addi	r12,r12,`64-8`
+	mtlr	r0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+	.space	`64-9*4`
+.type	rhotates,\@object
+.align	6
+rhotates:
+	.quad	0,  36
+	.quad	1,  44
+	.quad	62,  6
+	.quad	28, 55
+	.quad	27, 20
+	.quad	3,  41
+	.quad	10, 45
+	.quad	43, 15
+	.quad	25, 21
+	.quad	39,  8
+	.quad	18,  2
+	.quad	61, 56
+	.quad	14, 14
+.size	rhotates,.-rhotates
+	.quad	0,0
+	.quad	0x0001020304050607,0x1011121314151617
+	.quad	0x1011121314151617,0x0001020304050607
+.type	iotas,\@object
+iotas:
+	.quad	0x0000000000000001,0
+	.quad	0x0000000000008082,0
+	.quad	0x800000000000808a,0
+	.quad	0x8000000080008000,0
+	.quad	0x000000000000808b,0
+	.quad	0x0000000080000001,0
+	.quad	0x8000000080008081,0
+	.quad	0x8000000000008009,0
+	.quad	0x000000000000008a,0
+	.quad	0x0000000000000088,0
+	.quad	0x0000000080008009,0
+	.quad	0x000000008000000a,0
+	.quad	0x000000008000808b,0
+	.quad	0x800000000000008b,0
+	.quad	0x8000000000008089,0
+	.quad	0x8000000000008003,0
+	.quad	0x8000000000008002,0
+	.quad	0x8000000000000080,0
+	.quad	0x000000000000800a,0
+	.quad	0x800000008000000a,0
+	.quad	0x8000000080008081,0
+	.quad	0x8000000000008080,0
+	.quad	0x0000000080000001,0
+	.quad	0x8000000080008008,0
+.size	iotas,.-iotas
+.asciz	"Keccak-1600 absorb and squeeze for PowerISA 2.07, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+foreach  (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	if ($flavour =~ /le$/) {	# little-endian
+	    s/\?([a-z]+)/;$1/;
+	} else {			# big-endian
+	    s/\?([a-z]+)/$1/;
+	}
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-586.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-586.pl
new file mode 100644
index 000000000..9d4ff7f39
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-586.pl
@@ -0,0 +1,1491 @@
+#! /usr/bin/env perl
+# Copyright 1998-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# [Re]written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# "[Re]written" was achieved in two major overhauls. In 2004 BODY_*
+# functions were re-implemented to address P4 performance issue [see
+# commentary below], and in 2006 the rest was rewritten in order to
+# gain freedom to liberate licensing terms.
+
+# January, September 2004.
+#
+# It was noted that Intel IA-32 C compiler generates code which
+# performs ~30% *faster* on P4 CPU than original *hand-coded*
+# SHA1 assembler implementation. To address this problem (and
+# prove that humans are still better than machines:-), the
+# original code was overhauled, which resulted in following
+# performance changes:
+#
+#		compared with original	compared with Intel cc
+#		assembler impl.		generated code
+# Pentium	-16%			+48%
+# PIII/AMD	+8%			+16%
+# P4		+85%(!)			+45%
+#
+# As you can see Pentium came out as looser:-( Yet I reckoned that
+# improvement on P4 outweighs the loss and incorporate this
+# re-tuned code to 0.9.7 and later.
+# ----------------------------------------------------------------
+
+# August 2009.
+#
+# George Spelvin has tipped that F_40_59(b,c,d) can be rewritten as
+# '(c&d) + (b&(c^d))', which allows to accumulate partial results
+# and lighten "pressure" on scratch registers. This resulted in
+# >12% performance improvement on contemporary AMD cores (with no
+# degradation on other CPUs:-). Also, the code was revised to maximize
+# "distance" between instructions producing input to 'lea' instruction
+# and the 'lea' instruction itself, which is essential for Intel Atom
+# core and resulted in ~15% improvement.
+
+# October 2010.
+#
+# Add SSSE3, Supplemental[!] SSE3, implementation. The idea behind it
+# is to offload message schedule denoted by Wt in NIST specification,
+# or Xupdate in OpenSSL source, to SIMD unit. The idea is not novel,
+# and in SSE2 context was first explored by Dean Gaudet in 2004, see
+# http://arctic.org/~dean/crypto/sha1.html. Since then several things
+# have changed that made it interesting again:
+#
+# a) XMM units became faster and wider;
+# b) instruction set became more versatile;
+# c) an important observation was made by Max Locktykhin, which made
+#    it possible to reduce amount of instructions required to perform
+#    the operation in question, for further details see
+#    http://software.intel.com/en-us/articles/improving-the-performance-of-the-secure-hash-algorithm-1/.
+
+# April 2011.
+#
+# Add AVX code path, probably most controversial... The thing is that
+# switch to AVX alone improves performance by as little as 4% in
+# comparison to SSSE3 code path. But below result doesn't look like
+# 4% improvement... Trouble is that Sandy Bridge decodes 'ro[rl]' as
+# pair of µ-ops, and it's the additional µ-ops, two per round, that
+# make it run slower than Core2 and Westmere. But 'sh[rl]d' is decoded
+# as single µ-op by Sandy Bridge and it's replacing 'ro[rl]' with
+# equivalent 'sh[rl]d' that is responsible for the impressive 5.1
+# cycles per processed byte. But 'sh[rl]d' is not something that used
+# to be fast, nor does it appear to be fast in upcoming Bulldozer
+# [according to its optimization manual]. Which is why AVX code path
+# is guarded by *both* AVX and synthetic bit denoting Intel CPUs.
+# One can argue that it's unfair to AMD, but without 'sh[rl]d' it
+# makes no sense to keep the AVX code path. If somebody feels that
+# strongly, it's probably more appropriate to discuss possibility of
+# using vector rotate XOP on AMD...
+
+# March 2014.
+#
+# Add support for Intel SHA Extensions.
+
+######################################################################
+# Current performance is summarized in following table. Numbers are
+# CPU clock cycles spent to process single byte (less is better).
+#
+#		x86		SSSE3		AVX
+# Pentium	15.7		-
+# PIII		11.5		-
+# P4		10.6		-
+# AMD K8	7.1		-
+# Core2		7.3		6.0/+22%	-
+# Westmere	7.3		5.5/+33%	-
+# Sandy Bridge	8.8		6.2/+40%	5.1(**)/+73%
+# Ivy Bridge	7.2		4.8/+51%	4.7(**)/+53%
+# Haswell	6.5		4.3/+51%	4.1(**)/+58%
+# Skylake	6.4		4.1/+55%	4.1(**)/+55%
+# Bulldozer	11.6		6.0/+92%
+# VIA Nano	10.6		7.5/+41%
+# Atom		12.5		9.3(*)/+35%
+# Silvermont	14.5		9.9(*)/+46%
+# Goldmont	8.8		6.7/+30%	1.7(***)/+415%
+#
+# (*)	Loop is 1056 instructions long and expected result is ~8.25.
+#	The discrepancy is because of front-end limitations, so
+#	called MS-ROM penalties, and on Silvermont even rotate's
+#	limited parallelism.
+#
+# (**)	As per above comment, the result is for AVX *plus* sh[rl]d.
+#
+# (***)	SHAEXT result
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output=pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0],$ARGV[$#ARGV] eq "386");
+
+$xmm=$ymm=0;
+for (@ARGV) { $xmm=1 if (/-DOPENSSL_IA32_SSE2/); }
+
+$ymm=1 if ($xmm &&
+		`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+			=~ /GNU assembler version ([2-9]\.[0-9]+)/ &&
+		$1>=2.19);	# first version supporting AVX
+
+$ymm=1 if ($xmm && !$ymm && $ARGV[0] eq "win32n" &&
+		`nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/ &&
+		$1>=2.03);	# first version supporting AVX
+
+$ymm=1 if ($xmm && !$ymm && $ARGV[0] eq "win32" &&
+		`ml 2>&1` =~ /Version ([0-9]+)\./ &&
+		$1>=10);	# first version supporting AVX
+
+$ymm=1 if ($xmm && !$ymm && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|based on LLVM) ([3-9]\.[0-9]+)/ &&
+		$2>=3.0);	# first version supporting AVX
+
+$shaext=$xmm;	### set to zero if compiling for 1.0.1
+
+&external_label("OPENSSL_ia32cap_P") if ($xmm);
+
+
+$A="eax";
+$B="ebx";
+$C="ecx";
+$D="edx";
+$E="edi";
+$T="esi";
+$tmp1="ebp";
+
+@V=($A,$B,$C,$D,$E,$T);
+
+$alt=0;	# 1 denotes alternative IALU implementation, which performs
+	# 8% *worse* on P4, same on Westmere and Atom, 2% better on
+	# Sandy Bridge...
+
+sub BODY_00_15
+	{
+	local($n,$a,$b,$c,$d,$e,$f)=@_;
+
+	&comment("00_15 $n");
+
+	&mov($f,$c);			# f to hold F_00_19(b,c,d)
+	 if ($n==0)  { &mov($tmp1,$a); }
+	 else        { &mov($a,$tmp1); }
+	&rotl($tmp1,5);			# tmp1=ROTATE(a,5)
+	 &xor($f,$d);
+	&add($tmp1,$e);			# tmp1+=e;
+	 &mov($e,&swtmp($n%16));	# e becomes volatile and is loaded
+	 				# with xi, also note that e becomes
+					# f in next round...
+	&and($f,$b);
+	&rotr($b,2);			# b=ROTATE(b,30)
+	 &xor($f,$d);			# f holds F_00_19(b,c,d)
+	&lea($tmp1,&DWP(0x5a827999,$tmp1,$e));	# tmp1+=K_00_19+xi
+
+	if ($n==15) { &mov($e,&swtmp(($n+1)%16));# pre-fetch f for next round
+		      &add($f,$tmp1); }	# f+=tmp1
+	else        { &add($tmp1,$f); }	# f becomes a in next round
+	&mov($tmp1,$a)			if ($alt && $n==15);
+	}
+
+sub BODY_16_19
+	{
+	local($n,$a,$b,$c,$d,$e,$f)=@_;
+
+	&comment("16_19 $n");
+
+if ($alt) {
+	&xor($c,$d);
+	 &xor($f,&swtmp(($n+2)%16));	# f to hold Xupdate(xi,xa,xb,xc,xd)
+	&and($tmp1,$c);			# tmp1 to hold F_00_19(b,c,d), b&=c^d
+	 &xor($f,&swtmp(($n+8)%16));
+	&xor($tmp1,$d);			# tmp1=F_00_19(b,c,d)
+	 &xor($f,&swtmp(($n+13)%16));	# f holds xa^xb^xc^xd
+	&rotl($f,1);			# f=ROTATE(f,1)
+	 &add($e,$tmp1);		# e+=F_00_19(b,c,d)
+	&xor($c,$d);			# restore $c
+	 &mov($tmp1,$a);		# b in next round
+	&rotr($b,$n==16?2:7);		# b=ROTATE(b,30)
+	 &mov(&swtmp($n%16),$f);	# xi=f
+	&rotl($a,5);			# ROTATE(a,5)
+	 &lea($f,&DWP(0x5a827999,$f,$e));# f+=F_00_19(b,c,d)+e
+	&mov($e,&swtmp(($n+1)%16));	# pre-fetch f for next round
+	 &add($f,$a);			# f+=ROTATE(a,5)
+} else {
+	&mov($tmp1,$c);			# tmp1 to hold F_00_19(b,c,d)
+	 &xor($f,&swtmp(($n+2)%16));	# f to hold Xupdate(xi,xa,xb,xc,xd)
+	&xor($tmp1,$d);
+	 &xor($f,&swtmp(($n+8)%16));
+	&and($tmp1,$b);
+	 &xor($f,&swtmp(($n+13)%16));	# f holds xa^xb^xc^xd
+	&rotl($f,1);			# f=ROTATE(f,1)
+	 &xor($tmp1,$d);		# tmp1=F_00_19(b,c,d)
+	&add($e,$tmp1);			# e+=F_00_19(b,c,d)
+	 &mov($tmp1,$a);
+	&rotr($b,2);			# b=ROTATE(b,30)
+	 &mov(&swtmp($n%16),$f);	# xi=f
+	&rotl($tmp1,5);			# ROTATE(a,5)
+	 &lea($f,&DWP(0x5a827999,$f,$e));# f+=F_00_19(b,c,d)+e
+	&mov($e,&swtmp(($n+1)%16));	# pre-fetch f for next round
+	 &add($f,$tmp1);		# f+=ROTATE(a,5)
+}
+	}
+
+sub BODY_20_39
+	{
+	local($n,$a,$b,$c,$d,$e,$f)=@_;
+	local $K=($n<40)?0x6ed9eba1:0xca62c1d6;
+
+	&comment("20_39 $n");
+
+if ($alt) {
+	&xor($tmp1,$c);			# tmp1 to hold F_20_39(b,c,d), b^=c
+	 &xor($f,&swtmp(($n+2)%16));	# f to hold Xupdate(xi,xa,xb,xc,xd)
+	&xor($tmp1,$d);			# tmp1 holds F_20_39(b,c,d)
+	 &xor($f,&swtmp(($n+8)%16));
+	&add($e,$tmp1);			# e+=F_20_39(b,c,d)
+	 &xor($f,&swtmp(($n+13)%16));	# f holds xa^xb^xc^xd
+	&rotl($f,1);			# f=ROTATE(f,1)
+	 &mov($tmp1,$a);		# b in next round
+	&rotr($b,7);			# b=ROTATE(b,30)
+	 &mov(&swtmp($n%16),$f)		if($n<77);# xi=f
+	&rotl($a,5);			# ROTATE(a,5)
+	 &xor($b,$c)			if($n==39);# warm up for BODY_40_59
+	&and($tmp1,$b)			if($n==39);
+	 &lea($f,&DWP($K,$f,$e));	# f+=e+K_XX_YY
+	&mov($e,&swtmp(($n+1)%16))	if($n<79);# pre-fetch f for next round
+	 &add($f,$a);			# f+=ROTATE(a,5)
+	&rotr($a,5)			if ($n==79);
+} else {
+	&mov($tmp1,$b);			# tmp1 to hold F_20_39(b,c,d)
+	 &xor($f,&swtmp(($n+2)%16));	# f to hold Xupdate(xi,xa,xb,xc,xd)
+	&xor($tmp1,$c);
+	 &xor($f,&swtmp(($n+8)%16));
+	&xor($tmp1,$d);			# tmp1 holds F_20_39(b,c,d)
+	 &xor($f,&swtmp(($n+13)%16));	# f holds xa^xb^xc^xd
+	&rotl($f,1);			# f=ROTATE(f,1)
+	 &add($e,$tmp1);		# e+=F_20_39(b,c,d)
+	&rotr($b,2);			# b=ROTATE(b,30)
+	 &mov($tmp1,$a);
+	&rotl($tmp1,5);			# ROTATE(a,5)
+	 &mov(&swtmp($n%16),$f) if($n<77);# xi=f
+	&lea($f,&DWP($K,$f,$e));	# f+=e+K_XX_YY
+	 &mov($e,&swtmp(($n+1)%16)) if($n<79);# pre-fetch f for next round
+	&add($f,$tmp1);			# f+=ROTATE(a,5)
+}
+	}
+
+sub BODY_40_59
+	{
+	local($n,$a,$b,$c,$d,$e,$f)=@_;
+
+	&comment("40_59 $n");
+
+if ($alt) {
+	&add($e,$tmp1);			# e+=b&(c^d)
+	 &xor($f,&swtmp(($n+2)%16));	# f to hold Xupdate(xi,xa,xb,xc,xd)
+	&mov($tmp1,$d);
+	 &xor($f,&swtmp(($n+8)%16));
+	&xor($c,$d);			# restore $c
+	 &xor($f,&swtmp(($n+13)%16));	# f holds xa^xb^xc^xd
+	&rotl($f,1);			# f=ROTATE(f,1)
+	 &and($tmp1,$c);
+	&rotr($b,7);			# b=ROTATE(b,30)
+	 &add($e,$tmp1);		# e+=c&d
+	&mov($tmp1,$a);			# b in next round
+	 &mov(&swtmp($n%16),$f);	# xi=f
+	&rotl($a,5);			# ROTATE(a,5)
+	 &xor($b,$c)			if ($n<59);
+	&and($tmp1,$b)			if ($n<59);# tmp1 to hold F_40_59(b,c,d)
+	 &lea($f,&DWP(0x8f1bbcdc,$f,$e));# f+=K_40_59+e+(b&(c^d))
+	&mov($e,&swtmp(($n+1)%16));	# pre-fetch f for next round
+	 &add($f,$a);			# f+=ROTATE(a,5)
+} else {
+	&mov($tmp1,$c);			# tmp1 to hold F_40_59(b,c,d)
+	 &xor($f,&swtmp(($n+2)%16));	# f to hold Xupdate(xi,xa,xb,xc,xd)
+	&xor($tmp1,$d);
+	 &xor($f,&swtmp(($n+8)%16));
+	&and($tmp1,$b);
+	 &xor($f,&swtmp(($n+13)%16));	# f holds xa^xb^xc^xd
+	&rotl($f,1);			# f=ROTATE(f,1)
+	 &add($tmp1,$e);		# b&(c^d)+=e
+	&rotr($b,2);			# b=ROTATE(b,30)
+	 &mov($e,$a);			# e becomes volatile
+	&rotl($e,5);			# ROTATE(a,5)
+	 &mov(&swtmp($n%16),$f);	# xi=f
+	&lea($f,&DWP(0x8f1bbcdc,$f,$tmp1));# f+=K_40_59+e+(b&(c^d))
+	 &mov($tmp1,$c);
+	&add($f,$e);			# f+=ROTATE(a,5)
+	 &and($tmp1,$d);
+	&mov($e,&swtmp(($n+1)%16));	# pre-fetch f for next round
+	 &add($f,$tmp1);		# f+=c&d
+}
+	}
+
+&function_begin("sha1_block_data_order");
+if ($xmm) {
+  &static_label("shaext_shortcut")	if ($shaext);
+  &static_label("ssse3_shortcut");
+  &static_label("avx_shortcut")		if ($ymm);
+  &static_label("K_XX_XX");
+
+	&call	(&label("pic_point"));	# make it PIC!
+  &set_label("pic_point");
+	&blindpop($tmp1);
+	&picmeup($T,"OPENSSL_ia32cap_P",$tmp1,&label("pic_point"));
+	&lea	($tmp1,&DWP(&label("K_XX_XX")."-".&label("pic_point"),$tmp1));
+
+	&mov	($A,&DWP(0,$T));
+	&mov	($D,&DWP(4,$T));
+	&test	($D,1<<9);		# check SSSE3 bit
+	&jz	(&label("x86"));
+	&mov	($C,&DWP(8,$T));
+	&test	($A,1<<24);		# check FXSR bit
+	&jz	(&label("x86"));
+	if ($shaext) {
+		&test	($C,1<<29);		# check SHA bit
+		&jnz	(&label("shaext_shortcut"));
+	}
+	if ($ymm) {
+		&and	($D,1<<28);		# mask AVX bit
+		&and	($A,1<<30);		# mask "Intel CPU" bit
+		&or	($A,$D);
+		&cmp	($A,1<<28|1<<30);
+		&je	(&label("avx_shortcut"));
+	}
+	&jmp	(&label("ssse3_shortcut"));
+  &set_label("x86",16);
+}
+	&mov($tmp1,&wparam(0));	# SHA_CTX *c
+	&mov($T,&wparam(1));	# const void *input
+	&mov($A,&wparam(2));	# size_t num
+	&stack_push(16+3);	# allocate X[16]
+	&shl($A,6);
+	&add($A,$T);
+	&mov(&wparam(2),$A);	# pointer beyond the end of input
+	&mov($E,&DWP(16,$tmp1));# pre-load E
+	&jmp(&label("loop"));
+
+&set_label("loop",16);
+
+	# copy input chunk to X, but reversing byte order!
+	for ($i=0; $i<16; $i+=4)
+		{
+		&mov($A,&DWP(4*($i+0),$T));
+		&mov($B,&DWP(4*($i+1),$T));
+		&mov($C,&DWP(4*($i+2),$T));
+		&mov($D,&DWP(4*($i+3),$T));
+		&bswap($A);
+		&bswap($B);
+		&bswap($C);
+		&bswap($D);
+		&mov(&swtmp($i+0),$A);
+		&mov(&swtmp($i+1),$B);
+		&mov(&swtmp($i+2),$C);
+		&mov(&swtmp($i+3),$D);
+		}
+	&mov(&wparam(1),$T);	# redundant in 1st spin
+
+	&mov($A,&DWP(0,$tmp1));	# load SHA_CTX
+	&mov($B,&DWP(4,$tmp1));
+	&mov($C,&DWP(8,$tmp1));
+	&mov($D,&DWP(12,$tmp1));
+	# E is pre-loaded
+
+	for($i=0;$i<16;$i++)	{ &BODY_00_15($i,@V); unshift(@V,pop(@V)); }
+	for(;$i<20;$i++)	{ &BODY_16_19($i,@V); unshift(@V,pop(@V)); }
+	for(;$i<40;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+	for(;$i<60;$i++)	{ &BODY_40_59($i,@V); unshift(@V,pop(@V)); }
+	for(;$i<80;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+
+	(($V[5] eq $D) and ($V[0] eq $E)) or die;	# double-check
+
+	&mov($tmp1,&wparam(0));	# re-load SHA_CTX*
+	&mov($D,&wparam(1));	# D is last "T" and is discarded
+
+	&add($E,&DWP(0,$tmp1));	# E is last "A"...
+	&add($T,&DWP(4,$tmp1));
+	&add($A,&DWP(8,$tmp1));
+	&add($B,&DWP(12,$tmp1));
+	&add($C,&DWP(16,$tmp1));
+
+	&mov(&DWP(0,$tmp1),$E);	# update SHA_CTX
+	 &add($D,64);		# advance input pointer
+	&mov(&DWP(4,$tmp1),$T);
+	 &cmp($D,&wparam(2));	# have we reached the end yet?
+	&mov(&DWP(8,$tmp1),$A);
+	 &mov($E,$C);		# C is last "E" which needs to be "pre-loaded"
+	&mov(&DWP(12,$tmp1),$B);
+	 &mov($T,$D);		# input pointer
+	&mov(&DWP(16,$tmp1),$C);
+	&jb(&label("loop"));
+
+	&stack_pop(16+3);
+&function_end("sha1_block_data_order");
+
+if ($xmm) {
+if ($shaext) {
+######################################################################
+# Intel SHA Extensions implementation of SHA1 update function.
+#
+my ($ctx,$inp,$num)=("edi","esi","ecx");
+my ($ABCD,$E,$E_,$BSWAP)=map("xmm$_",(0..3));
+my @MSG=map("xmm$_",(4..7));
+
+sub sha1rnds4 {
+ my ($dst,$src,$imm)=@_;
+    if ("$dst:$src" =~ /xmm([0-7]):xmm([0-7])/)
+    {	&data_byte(0x0f,0x3a,0xcc,0xc0|($1<<3)|$2,$imm);	}
+}
+sub sha1op38 {
+ my ($opcodelet,$dst,$src)=@_;
+    if ("$dst:$src" =~ /xmm([0-7]):xmm([0-7])/)
+    {	&data_byte(0x0f,0x38,$opcodelet,0xc0|($1<<3)|$2);	}
+}
+sub sha1nexte	{ sha1op38(0xc8,@_); }
+sub sha1msg1	{ sha1op38(0xc9,@_); }
+sub sha1msg2	{ sha1op38(0xca,@_); }
+
+&function_begin("_sha1_block_data_order_shaext");
+	&call	(&label("pic_point"));	# make it PIC!
+	&set_label("pic_point");
+	&blindpop($tmp1);
+	&lea	($tmp1,&DWP(&label("K_XX_XX")."-".&label("pic_point"),$tmp1));
+&set_label("shaext_shortcut");
+	&mov	($ctx,&wparam(0));
+	&mov	("ebx","esp");
+	&mov	($inp,&wparam(1));
+	&mov	($num,&wparam(2));
+	&sub	("esp",32);
+
+	&movdqu	($ABCD,&QWP(0,$ctx));
+	&movd	($E,&DWP(16,$ctx));
+	&and	("esp",-32);
+	&movdqa	($BSWAP,&QWP(0x50,$tmp1));	# byte-n-word swap
+
+	&movdqu	(@MSG[0],&QWP(0,$inp));
+	&pshufd	($ABCD,$ABCD,0b00011011);	# flip word order
+	&movdqu	(@MSG[1],&QWP(0x10,$inp));
+	&pshufd	($E,$E,0b00011011);		# flip word order
+	&movdqu	(@MSG[2],&QWP(0x20,$inp));
+	&pshufb	(@MSG[0],$BSWAP);
+	&movdqu	(@MSG[3],&QWP(0x30,$inp));
+	&pshufb	(@MSG[1],$BSWAP);
+	&pshufb	(@MSG[2],$BSWAP);
+	&pshufb	(@MSG[3],$BSWAP);
+	&jmp	(&label("loop_shaext"));
+
+&set_label("loop_shaext",16);
+	&dec		($num);
+	&lea		("eax",&DWP(0x40,$inp));
+	&movdqa		(&QWP(0,"esp"),$E);	# offload $E
+	&paddd		($E,@MSG[0]);
+	&cmovne		($inp,"eax");
+	&movdqa		(&QWP(16,"esp"),$ABCD);	# offload $ABCD
+
+for($i=0;$i<20-4;$i+=2) {
+	&sha1msg1	(@MSG[0],@MSG[1]);
+	&movdqa		($E_,$ABCD);
+	&sha1rnds4	($ABCD,$E,int($i/5));	# 0-3...
+	&sha1nexte	($E_,@MSG[1]);
+	&pxor		(@MSG[0],@MSG[2]);
+	&sha1msg1	(@MSG[1],@MSG[2]);
+	&sha1msg2	(@MSG[0],@MSG[3]);
+
+	&movdqa		($E,$ABCD);
+	&sha1rnds4	($ABCD,$E_,int(($i+1)/5));
+	&sha1nexte	($E,@MSG[2]);
+	&pxor		(@MSG[1],@MSG[3]);
+	&sha1msg2	(@MSG[1],@MSG[0]);
+
+	push(@MSG,shift(@MSG));	push(@MSG,shift(@MSG));
+}
+	&movdqu		(@MSG[0],&QWP(0,$inp));
+	&movdqa		($E_,$ABCD);
+	&sha1rnds4	($ABCD,$E,3);		# 64-67
+	&sha1nexte	($E_,@MSG[1]);
+	&movdqu		(@MSG[1],&QWP(0x10,$inp));
+	&pshufb		(@MSG[0],$BSWAP);
+
+	&movdqa		($E,$ABCD);
+	&sha1rnds4	($ABCD,$E_,3);		# 68-71
+	&sha1nexte	($E,@MSG[2]);
+	&movdqu		(@MSG[2],&QWP(0x20,$inp));
+	&pshufb		(@MSG[1],$BSWAP);
+
+	&movdqa		($E_,$ABCD);
+	&sha1rnds4	($ABCD,$E,3);		# 72-75
+	&sha1nexte	($E_,@MSG[3]);
+	&movdqu		(@MSG[3],&QWP(0x30,$inp));
+	&pshufb		(@MSG[2],$BSWAP);
+
+	&movdqa		($E,$ABCD);
+	&sha1rnds4	($ABCD,$E_,3);		# 76-79
+	&movdqa		($E_,&QWP(0,"esp"));
+	&pshufb		(@MSG[3],$BSWAP);
+	&sha1nexte	($E,$E_);
+	&paddd		($ABCD,&QWP(16,"esp"));
+
+	&jnz		(&label("loop_shaext"));
+
+	&pshufd	($ABCD,$ABCD,0b00011011);
+	&pshufd	($E,$E,0b00011011);
+	&movdqu	(&QWP(0,$ctx),$ABCD)
+	&movd	(&DWP(16,$ctx),$E);
+	&mov	("esp","ebx");
+&function_end("_sha1_block_data_order_shaext");
+}
+######################################################################
+# The SSSE3 implementation.
+#
+# %xmm[0-7] are used as ring @X[] buffer containing quadruples of last
+# 32 elements of the message schedule or Xupdate outputs. First 4
+# quadruples are simply byte-swapped input, next 4 are calculated
+# according to method originally suggested by Dean Gaudet (modulo
+# being implemented in SSSE3). Once 8 quadruples or 32 elements are
+# collected, it switches to routine proposed by Max Locktyukhin.
+#
+# Calculations inevitably require temporary registers, and there are
+# no %xmm registers left to spare. For this reason part of the ring
+# buffer, X[2..4] to be specific, is offloaded to 3 quadriples ring
+# buffer on the stack. Keep in mind that X[2] is alias X[-6], X[3] -
+# X[-5], and X[4] - X[-4]...
+#
+# Another notable optimization is aggressive stack frame compression
+# aiming to minimize amount of 9-byte instructions...
+#
+# Yet another notable optimization is "jumping" $B variable. It means
+# that there is no register permanently allocated for $B value. This
+# allowed to eliminate one instruction from body_20_39...
+#
+my $Xi=4;			# 4xSIMD Xupdate round, start pre-seeded
+my @X=map("xmm$_",(4..7,0..3));	# pre-seeded for $Xi=4
+my @V=($A,$B,$C,$D,$E);
+my $j=0;			# hash round
+my $rx=0;
+my @T=($T,$tmp1);
+my $inp;
+
+my $_rol=sub { &rol(@_) };
+my $_ror=sub { &ror(@_) };
+
+&function_begin("_sha1_block_data_order_ssse3");
+	&call	(&label("pic_point"));	# make it PIC!
+	&set_label("pic_point");
+	&blindpop($tmp1);
+	&lea	($tmp1,&DWP(&label("K_XX_XX")."-".&label("pic_point"),$tmp1));
+&set_label("ssse3_shortcut");
+
+	&movdqa	(@X[3],&QWP(0,$tmp1));		# K_00_19
+	&movdqa	(@X[4],&QWP(16,$tmp1));		# K_20_39
+	&movdqa	(@X[5],&QWP(32,$tmp1));		# K_40_59
+	&movdqa	(@X[6],&QWP(48,$tmp1));		# K_60_79
+	&movdqa	(@X[2],&QWP(64,$tmp1));		# pbswap mask
+
+	&mov	($E,&wparam(0));		# load argument block
+	&mov	($inp=@T[1],&wparam(1));
+	&mov	($D,&wparam(2));
+	&mov	(@T[0],"esp");
+
+	# stack frame layout
+	#
+	# +0	X[0]+K	X[1]+K	X[2]+K	X[3]+K	# XMM->IALU xfer area
+	#	X[4]+K	X[5]+K	X[6]+K	X[7]+K
+	#	X[8]+K	X[9]+K	X[10]+K	X[11]+K
+	#	X[12]+K	X[13]+K	X[14]+K	X[15]+K
+	#
+	# +64	X[0]	X[1]	X[2]	X[3]	# XMM->XMM backtrace area
+	#	X[4]	X[5]	X[6]	X[7]
+	#	X[8]	X[9]	X[10]	X[11]	# even borrowed for K_00_19
+	#
+	# +112	K_20_39	K_20_39	K_20_39	K_20_39	# constants
+	#	K_40_59	K_40_59	K_40_59	K_40_59
+	#	K_60_79	K_60_79	K_60_79	K_60_79
+	#	K_00_19	K_00_19	K_00_19	K_00_19
+	#	pbswap mask
+	#
+	# +192	ctx				# argument block
+	# +196	inp
+	# +200	end
+	# +204	esp
+	&sub	("esp",208);
+	&and	("esp",-64);
+
+	&movdqa	(&QWP(112+0,"esp"),@X[4]);	# copy constants
+	&movdqa	(&QWP(112+16,"esp"),@X[5]);
+	&movdqa	(&QWP(112+32,"esp"),@X[6]);
+	&shl	($D,6);				# len*64
+	&movdqa	(&QWP(112+48,"esp"),@X[3]);
+	&add	($D,$inp);			# end of input
+	&movdqa	(&QWP(112+64,"esp"),@X[2]);
+	&add	($inp,64);
+	&mov	(&DWP(192+0,"esp"),$E);		# save argument block
+	&mov	(&DWP(192+4,"esp"),$inp);
+	&mov	(&DWP(192+8,"esp"),$D);
+	&mov	(&DWP(192+12,"esp"),@T[0]);	# save original %esp
+
+	&mov	($A,&DWP(0,$E));		# load context
+	&mov	($B,&DWP(4,$E));
+	&mov	($C,&DWP(8,$E));
+	&mov	($D,&DWP(12,$E));
+	&mov	($E,&DWP(16,$E));
+	&mov	(@T[0],$B);			# magic seed
+
+	&movdqu	(@X[-4&7],&QWP(-64,$inp));	# load input to %xmm[0-3]
+	&movdqu	(@X[-3&7],&QWP(-48,$inp));
+	&movdqu	(@X[-2&7],&QWP(-32,$inp));
+	&movdqu	(@X[-1&7],&QWP(-16,$inp));
+	&pshufb	(@X[-4&7],@X[2]);		# byte swap
+	&pshufb	(@X[-3&7],@X[2]);
+	&pshufb	(@X[-2&7],@X[2]);
+	&movdqa	(&QWP(112-16,"esp"),@X[3]);	# borrow last backtrace slot
+	&pshufb	(@X[-1&7],@X[2]);
+	&paddd	(@X[-4&7],@X[3]);		# add K_00_19
+	&paddd	(@X[-3&7],@X[3]);
+	&paddd	(@X[-2&7],@X[3]);
+	&movdqa	(&QWP(0,"esp"),@X[-4&7]);	# X[]+K xfer to IALU
+	&psubd	(@X[-4&7],@X[3]);		# restore X[]
+	&movdqa	(&QWP(0+16,"esp"),@X[-3&7]);
+	&psubd	(@X[-3&7],@X[3]);
+	&movdqa	(&QWP(0+32,"esp"),@X[-2&7]);
+	&mov	(@T[1],$C);
+	&psubd	(@X[-2&7],@X[3]);
+	&xor	(@T[1],$D);
+	&pshufd	(@X[0],@X[-4&7],0xee);		# was &movdqa	(@X[0],@X[-3&7]);
+	&and	(@T[0],@T[1]);
+	&jmp	(&label("loop"));
+
+######################################################################
+# SSE instruction sequence is first broken to groups of independent
+# instructions, independent in respect to their inputs and shifter
+# (not all architectures have more than one). Then IALU instructions
+# are "knitted in" between the SSE groups. Distance is maintained for
+# SSE latency of 2 in hope that it fits better upcoming AMD Bulldozer
+# [which allegedly also implements SSSE3]...
+#
+# Temporary registers usage. X[2] is volatile at the entry and at the
+# end is restored from backtrace ring buffer. X[3] is expected to
+# contain current K_XX_XX constant and is used to calculate X[-1]+K
+# from previous round, it becomes volatile the moment the value is
+# saved to stack for transfer to IALU. X[4] becomes volatile whenever
+# X[-4] is accumulated and offloaded to backtrace ring buffer, at the
+# end it is loaded with next K_XX_XX [which becomes X[3] in next
+# round]...
+#
+sub Xupdate_ssse3_16_31()		# recall that $Xi starts with 4
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 40 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));		# ror
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&punpcklqdq(@X[0],@X[-3&7]);	# compose "X[-14]" in "X[0]", was &palignr(@X[0],@X[-4&7],8);
+	&movdqa	(@X[2],@X[-1&7]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	  &paddd	(@X[3],@X[-1&7]);
+	  &movdqa	(&QWP(64+16*(($Xi-4)%3),"esp"),@X[-4&7]);# save X[] to backtrace buffer
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	&psrldq	(@X[2],4);		# "X[-3]", 3 dwords
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&pxor	(@X[0],@X[-4&7]);	# "X[0]"^="X[-16]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+
+	&pxor	(@X[2],@X[-2&7]);	# "X[-3]"^"X[-8]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&pxor	(@X[0],@X[2]);		# "X[0]"^="X[-3]"^"X[-8]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	  &movdqa	(&QWP(0+16*(($Xi-1)&3),"esp"),@X[3]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&movdqa	(@X[4],@X[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	&movdqa (@X[2],@X[0]);
+	 eval(shift(@insns));
+
+	&pslldq	(@X[4],12);		# "X[0]"<<96, extract one dword
+	&paddd	(@X[0],@X[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&psrld	(@X[2],31);
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	&movdqa	(@X[3],@X[4]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&psrld	(@X[4],30);
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	&por	(@X[0],@X[2]);		# "X[0]"<<<=1
+	 eval(shift(@insns));
+	  &movdqa	(@X[2],&QWP(64+16*(($Xi-6)%3),"esp")) if ($Xi>5);	# restore X[] from backtrace buffer
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&pslld	(@X[3],2);
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	&pxor   (@X[0],@X[4]);
+	  &movdqa	(@X[4],&QWP(112-16+16*(($Xi)/5),"esp"));	# K_XX_XX
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&pxor	(@X[0],@X[3]);		# "X[0]"^=("X[0]"<<96)<<<2
+	  &pshufd	(@X[1],@X[-3&7],0xee)	if ($Xi<7);	# was &movdqa	(@X[1],@X[-2&7])
+	  &pshufd	(@X[3],@X[-1&7],0xee)	if ($Xi==7);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	 foreach (@insns) { eval; }	# remaining instructions [if any]
+
+  $Xi++;	push(@X,shift(@X));	# "rotate" X[]
+}
+
+sub Xupdate_ssse3_32_79()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 to 44 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));		# body_20_39
+	&pxor	(@X[0],@X[-4&7]);	# "X[0]"="X[-32]"^"X[-16]"
+	&punpcklqdq(@X[2],@X[-1&7]);	# compose "X[-6]", was &palignr(@X[2],@X[-2&7],8)
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+
+	&pxor	(@X[0],@X[-7&7]);	# "X[0]"^="X[-28]"
+	  &movdqa	(&QWP(64+16*(($Xi-4)%3),"esp"),@X[-4&7]);	# save X[] to backtrace buffer
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns))		if (@insns[0] =~ /_rol/);
+	 if ($Xi%5) {
+	  &movdqa	(@X[4],@X[3]);	# "perpetuate" K_XX_XX...
+	 } else {			# ... or load next one
+	  &movdqa	(@X[4],&QWP(112-16+16*($Xi/5),"esp"));
+	 }
+	 eval(shift(@insns));		# ror
+	  &paddd	(@X[3],@X[-1&7]);
+	 eval(shift(@insns));
+
+	&pxor	(@X[0],@X[2]);		# "X[0]"^="X[-6]"
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+
+	&movdqa	(@X[2],@X[0]);
+	  &movdqa	(&QWP(0+16*(($Xi-1)&3),"esp"),@X[3]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	 eval(shift(@insns));
+	 eval(shift(@insns))		if (@insns[0] =~ /_rol/);
+
+	&pslld	(@X[0],2);
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	&psrld	(@X[2],30);
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	 eval(shift(@insns));
+	 eval(shift(@insns))		if (@insns[1] =~ /_rol/);
+	 eval(shift(@insns))		if (@insns[0] =~ /_rol/);
+
+	&por	(@X[0],@X[2]);		# "X[0]"<<<=2
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	  &movdqa	(@X[2],&QWP(64+16*(($Xi-6)%3),"esp")) if($Xi<19);	# restore X[] from backtrace buffer
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	  &pshufd	(@X[3],@X[-1],0xee)	if ($Xi<19);	# was &movdqa	(@X[3],@X[0])
+	 eval(shift(@insns));
+
+	 foreach (@insns) { eval; }	# remaining instructions
+
+  $Xi++;	push(@X,shift(@X));	# "rotate" X[]
+}
+
+sub Xuplast_ssse3_80()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &paddd	(@X[3],@X[-1&7]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	  &movdqa	(&QWP(0+16*(($Xi-1)&3),"esp"),@X[3]);	# X[]+K xfer IALU
+
+	 foreach (@insns) { eval; }		# remaining instructions
+
+	&mov	($inp=@T[1],&DWP(192+4,"esp"));
+	&cmp	($inp,&DWP(192+8,"esp"));
+	&je	(&label("done"));
+
+	&movdqa	(@X[3],&QWP(112+48,"esp"));	# K_00_19
+	&movdqa	(@X[2],&QWP(112+64,"esp"));	# pbswap mask
+	&movdqu	(@X[-4&7],&QWP(0,$inp));	# load input
+	&movdqu	(@X[-3&7],&QWP(16,$inp));
+	&movdqu	(@X[-2&7],&QWP(32,$inp));
+	&movdqu	(@X[-1&7],&QWP(48,$inp));
+	&add	($inp,64);
+	&pshufb	(@X[-4&7],@X[2]);		# byte swap
+	&mov	(&DWP(192+4,"esp"),$inp);
+	&movdqa	(&QWP(112-16,"esp"),@X[3]);	# borrow last backtrace slot
+
+  $Xi=0;
+}
+
+sub Xloop_ssse3()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&pshufb	(@X[($Xi-3)&7],@X[2]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&paddd	(@X[($Xi-4)&7],@X[3]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&movdqa	(&QWP(0+16*$Xi,"esp"),@X[($Xi-4)&7]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&psubd	(@X[($Xi-4)&7],@X[3]);
+
+	foreach (@insns) { eval; }
+  $Xi++;
+}
+
+sub Xtail_ssse3()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	foreach (@insns) { eval; }
+}
+
+sub body_00_19 () {	# ((c^d)&b)^d
+	# on start @T[0]=(c^d)&b
+	return &body_20_39()	if ($rx==19);	$rx++;
+	(
+	'($a,$b,$c,$d,$e)=@V;'.
+	'&$_ror	($b,$j?7:2);',	# $b>>>2
+	'&xor	(@T[0],$d);',
+	'&mov	(@T[1],$a);',	# $b in next round
+
+	'&add	($e,&DWP(4*($j&15),"esp"));',	# X[]+K xfer
+	'&xor	($b,$c);',	# $c^$d for next round
+
+	'&$_rol	($a,5);',
+	'&add	($e,@T[0]);',
+	'&and	(@T[1],$b);',	# ($b&($c^$d)) for next round
+
+	'&xor	($b,$c);',	# restore $b
+	'&add	($e,$a);'	.'$j++; unshift(@V,pop(@V)); unshift(@T,pop(@T));'
+	);
+}
+
+sub body_20_39 () {	# b^d^c
+	# on entry @T[0]=b^d
+	return &body_40_59()	if ($rx==39);	$rx++;
+	(
+	'($a,$b,$c,$d,$e)=@V;'.
+	'&add	($e,&DWP(4*($j&15),"esp"));',	# X[]+K xfer
+	'&xor	(@T[0],$d)	if($j==19);'.
+	'&xor	(@T[0],$c)	if($j> 19);',	# ($b^$d^$c)
+	'&mov	(@T[1],$a);',	# $b in next round
+
+	'&$_rol	($a,5);',
+	'&add	($e,@T[0]);',
+	'&xor	(@T[1],$c)	if ($j< 79);',	# $b^$d for next round
+
+	'&$_ror	($b,7);',	# $b>>>2
+	'&add	($e,$a);'	.'$j++; unshift(@V,pop(@V)); unshift(@T,pop(@T));'
+	);
+}
+
+sub body_40_59 () {	# ((b^c)&(c^d))^c
+	# on entry @T[0]=(b^c), (c^=d)
+	$rx++;
+	(
+	'($a,$b,$c,$d,$e)=@V;'.
+	'&add	($e,&DWP(4*($j&15),"esp"));',	# X[]+K xfer
+	'&and	(@T[0],$c)	if ($j>=40);',	# (b^c)&(c^d)
+	'&xor	($c,$d)		if ($j>=40);',	# restore $c
+
+	'&$_ror	($b,7);',	# $b>>>2
+	'&mov	(@T[1],$a);',	# $b for next round
+	'&xor	(@T[0],$c);',
+
+	'&$_rol	($a,5);',
+	'&add	($e,@T[0]);',
+	'&xor	(@T[1],$c)	if ($j==59);'.
+	'&xor	(@T[1],$b)	if ($j< 59);',	# b^c for next round
+
+	'&xor	($b,$c)		if ($j< 59);',	# c^d for next round
+	'&add	($e,$a);'	.'$j++; unshift(@V,pop(@V)); unshift(@T,pop(@T));'
+	);
+}
+######
+sub bodyx_00_19 () {	# ((c^d)&b)^d
+	# on start @T[0]=(b&c)^(~b&d), $e+=X[]+K
+	return &bodyx_20_39()	if ($rx==19);	$rx++;
+	(
+	'($a,$b,$c,$d,$e)=@V;'.
+
+	'&rorx	($b,$b,2)			if ($j==0);'.	# $b>>>2
+	'&rorx	($b,@T[1],7)			if ($j!=0);',	# $b>>>2
+	'&lea	($e,&DWP(0,$e,@T[0]));',
+	'&rorx	(@T[0],$a,5);',
+
+	'&andn	(@T[1],$a,$c);',
+	'&and	($a,$b)',
+	'&add	($d,&DWP(4*(($j+1)&15),"esp"));',	# X[]+K xfer
+
+	'&xor	(@T[1],$a)',
+	'&add	($e,@T[0]);'	.'$j++; unshift(@V,pop(@V)); unshift(@T,pop(@T));'
+	);
+}
+
+sub bodyx_20_39 () {	# b^d^c
+	# on start $b=b^c^d
+	return &bodyx_40_59()	if ($rx==39);	$rx++;
+	(
+	'($a,$b,$c,$d,$e)=@V;'.
+
+	'&add	($e,($j==19?@T[0]:$b))',
+	'&rorx	($b,@T[1],7);',	# $b>>>2
+	'&rorx	(@T[0],$a,5);',
+
+	'&xor	($a,$b)				if ($j<79);',
+	'&add	($d,&DWP(4*(($j+1)&15),"esp"))	if ($j<79);',	# X[]+K xfer
+	'&xor	($a,$c)				if ($j<79);',
+	'&add	($e,@T[0]);'	.'$j++; unshift(@V,pop(@V)); unshift(@T,pop(@T));'
+	);
+}
+
+sub bodyx_40_59 () {	# ((b^c)&(c^d))^c
+	# on start $b=((b^c)&(c^d))^c
+	return &bodyx_20_39()	if ($rx==59);	$rx++;
+	(
+	'($a,$b,$c,$d,$e)=@V;'.
+
+	'&rorx	(@T[0],$a,5)',
+	'&lea	($e,&DWP(0,$e,$b))',
+	'&rorx	($b,@T[1],7)',	# $b>>>2
+	'&add	($d,&DWP(4*(($j+1)&15),"esp"))',	# X[]+K xfer
+
+	'&mov	(@T[1],$c)',
+	'&xor	($a,$b)',	# b^c for next round
+	'&xor	(@T[1],$b)',	# c^d for next round
+
+	'&and	($a,@T[1])',
+	'&add	($e,@T[0])',
+	'&xor	($a,$b)'	.'$j++; unshift(@V,pop(@V)); unshift(@T,pop(@T));'
+	);
+}
+
+&set_label("loop",16);
+	&Xupdate_ssse3_16_31(\&body_00_19);
+	&Xupdate_ssse3_16_31(\&body_00_19);
+	&Xupdate_ssse3_16_31(\&body_00_19);
+	&Xupdate_ssse3_16_31(\&body_00_19);
+	&Xupdate_ssse3_32_79(\&body_00_19);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xupdate_ssse3_32_79(\&body_40_59);
+	&Xupdate_ssse3_32_79(\&body_40_59);
+	&Xupdate_ssse3_32_79(\&body_40_59);
+	&Xupdate_ssse3_32_79(\&body_40_59);
+	&Xupdate_ssse3_32_79(\&body_40_59);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xuplast_ssse3_80(\&body_20_39);	# can jump to "done"
+
+				$saved_j=$j; @saved_V=@V;
+
+	&Xloop_ssse3(\&body_20_39);
+	&Xloop_ssse3(\&body_20_39);
+	&Xloop_ssse3(\&body_20_39);
+
+	&mov	(@T[1],&DWP(192,"esp"));	# update context
+	&add	($A,&DWP(0,@T[1]));
+	&add	(@T[0],&DWP(4,@T[1]));		# $b
+	&add	($C,&DWP(8,@T[1]));
+	&mov	(&DWP(0,@T[1]),$A);
+	&add	($D,&DWP(12,@T[1]));
+	&mov	(&DWP(4,@T[1]),@T[0]);
+	&add	($E,&DWP(16,@T[1]));
+	&mov	(&DWP(8,@T[1]),$C);
+	&mov	($B,$C);
+	&mov	(&DWP(12,@T[1]),$D);
+	&xor	($B,$D);
+	&mov	(&DWP(16,@T[1]),$E);
+	&mov	(@T[1],@T[0]);
+	&pshufd	(@X[0],@X[-4&7],0xee);		# was &movdqa	(@X[0],@X[-3&7]);
+	&and	(@T[0],$B);
+	&mov	($B,$T[1]);
+
+	&jmp	(&label("loop"));
+
+&set_label("done",16);		$j=$saved_j; @V=@saved_V;
+
+	&Xtail_ssse3(\&body_20_39);
+	&Xtail_ssse3(\&body_20_39);
+	&Xtail_ssse3(\&body_20_39);
+
+	&mov	(@T[1],&DWP(192,"esp"));	# update context
+	&add	($A,&DWP(0,@T[1]));
+	&mov	("esp",&DWP(192+12,"esp"));	# restore %esp
+	&add	(@T[0],&DWP(4,@T[1]));		# $b
+	&add	($C,&DWP(8,@T[1]));
+	&mov	(&DWP(0,@T[1]),$A);
+	&add	($D,&DWP(12,@T[1]));
+	&mov	(&DWP(4,@T[1]),@T[0]);
+	&add	($E,&DWP(16,@T[1]));
+	&mov	(&DWP(8,@T[1]),$C);
+	&mov	(&DWP(12,@T[1]),$D);
+	&mov	(&DWP(16,@T[1]),$E);
+
+&function_end("_sha1_block_data_order_ssse3");
+
+$rx=0;	# reset
+
+if ($ymm) {
+my $Xi=4;			# 4xSIMD Xupdate round, start pre-seeded
+my @X=map("xmm$_",(4..7,0..3));	# pre-seeded for $Xi=4
+my @V=($A,$B,$C,$D,$E);
+my $j=0;			# hash round
+my @T=($T,$tmp1);
+my $inp;
+
+my $_rol=sub { &shld(@_[0],@_) };
+my $_ror=sub { &shrd(@_[0],@_) };
+
+&function_begin("_sha1_block_data_order_avx");
+	&call	(&label("pic_point"));	# make it PIC!
+	&set_label("pic_point");
+	&blindpop($tmp1);
+	&lea	($tmp1,&DWP(&label("K_XX_XX")."-".&label("pic_point"),$tmp1));
+&set_label("avx_shortcut");
+	&vzeroall();
+
+	&vmovdqa(@X[3],&QWP(0,$tmp1));		# K_00_19
+	&vmovdqa(@X[4],&QWP(16,$tmp1));		# K_20_39
+	&vmovdqa(@X[5],&QWP(32,$tmp1));		# K_40_59
+	&vmovdqa(@X[6],&QWP(48,$tmp1));		# K_60_79
+	&vmovdqa(@X[2],&QWP(64,$tmp1));		# pbswap mask
+
+	&mov	($E,&wparam(0));		# load argument block
+	&mov	($inp=@T[1],&wparam(1));
+	&mov	($D,&wparam(2));
+	&mov	(@T[0],"esp");
+
+	# stack frame layout
+	#
+	# +0	X[0]+K	X[1]+K	X[2]+K	X[3]+K	# XMM->IALU xfer area
+	#	X[4]+K	X[5]+K	X[6]+K	X[7]+K
+	#	X[8]+K	X[9]+K	X[10]+K	X[11]+K
+	#	X[12]+K	X[13]+K	X[14]+K	X[15]+K
+	#
+	# +64	X[0]	X[1]	X[2]	X[3]	# XMM->XMM backtrace area
+	#	X[4]	X[5]	X[6]	X[7]
+	#	X[8]	X[9]	X[10]	X[11]	# even borrowed for K_00_19
+	#
+	# +112	K_20_39	K_20_39	K_20_39	K_20_39	# constants
+	#	K_40_59	K_40_59	K_40_59	K_40_59
+	#	K_60_79	K_60_79	K_60_79	K_60_79
+	#	K_00_19	K_00_19	K_00_19	K_00_19
+	#	pbswap mask
+	#
+	# +192	ctx				# argument block
+	# +196	inp
+	# +200	end
+	# +204	esp
+	&sub	("esp",208);
+	&and	("esp",-64);
+
+	&vmovdqa(&QWP(112+0,"esp"),@X[4]);	# copy constants
+	&vmovdqa(&QWP(112+16,"esp"),@X[5]);
+	&vmovdqa(&QWP(112+32,"esp"),@X[6]);
+	&shl	($D,6);				# len*64
+	&vmovdqa(&QWP(112+48,"esp"),@X[3]);
+	&add	($D,$inp);			# end of input
+	&vmovdqa(&QWP(112+64,"esp"),@X[2]);
+	&add	($inp,64);
+	&mov	(&DWP(192+0,"esp"),$E);		# save argument block
+	&mov	(&DWP(192+4,"esp"),$inp);
+	&mov	(&DWP(192+8,"esp"),$D);
+	&mov	(&DWP(192+12,"esp"),@T[0]);	# save original %esp
+
+	&mov	($A,&DWP(0,$E));		# load context
+	&mov	($B,&DWP(4,$E));
+	&mov	($C,&DWP(8,$E));
+	&mov	($D,&DWP(12,$E));
+	&mov	($E,&DWP(16,$E));
+	&mov	(@T[0],$B);			# magic seed
+
+	&vmovdqu(@X[-4&7],&QWP(-64,$inp));	# load input to %xmm[0-3]
+	&vmovdqu(@X[-3&7],&QWP(-48,$inp));
+	&vmovdqu(@X[-2&7],&QWP(-32,$inp));
+	&vmovdqu(@X[-1&7],&QWP(-16,$inp));
+	&vpshufb(@X[-4&7],@X[-4&7],@X[2]);	# byte swap
+	&vpshufb(@X[-3&7],@X[-3&7],@X[2]);
+	&vpshufb(@X[-2&7],@X[-2&7],@X[2]);
+	&vmovdqa(&QWP(112-16,"esp"),@X[3]);	# borrow last backtrace slot
+	&vpshufb(@X[-1&7],@X[-1&7],@X[2]);
+	&vpaddd	(@X[0],@X[-4&7],@X[3]);		# add K_00_19
+	&vpaddd	(@X[1],@X[-3&7],@X[3]);
+	&vpaddd	(@X[2],@X[-2&7],@X[3]);
+	&vmovdqa(&QWP(0,"esp"),@X[0]);		# X[]+K xfer to IALU
+	&mov	(@T[1],$C);
+	&vmovdqa(&QWP(0+16,"esp"),@X[1]);
+	&xor	(@T[1],$D);
+	&vmovdqa(&QWP(0+32,"esp"),@X[2]);
+	&and	(@T[0],@T[1]);
+	&jmp	(&label("loop"));
+
+sub Xupdate_avx_16_31()		# recall that $Xi starts with 4
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 40 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vpalignr(@X[0],@X[-3&7],@X[-4&7],8);	# compose "X[-14]" in "X[0]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	  &vpaddd	(@X[3],@X[3],@X[-1&7]);
+	  &vmovdqa	(&QWP(64+16*(($Xi-4)%3),"esp"),@X[-4&7]);# save X[] to backtrace buffer
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vpsrldq(@X[2],@X[-1&7],4);		# "X[-3]", 3 dwords
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vpxor	(@X[0],@X[0],@X[-4&7]);		# "X[0]"^="X[-16]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpxor	(@X[2],@X[2],@X[-2&7]);		# "X[-3]"^"X[-8]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vmovdqa	(&QWP(0+16*(($Xi-1)&3),"esp"),@X[3]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpxor	(@X[0],@X[0],@X[2]);		# "X[0]"^="X[-3]"^"X[-8]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpsrld	(@X[2],@X[0],31);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpslldq(@X[4],@X[0],12);		# "X[0]"<<96, extract one dword
+	&vpaddd	(@X[0],@X[0],@X[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpsrld	(@X[3],@X[4],30);
+	&vpor	(@X[0],@X[0],@X[2]);		# "X[0]"<<<=1
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpslld	(@X[4],@X[4],2);
+	  &vmovdqa	(@X[2],&QWP(64+16*(($Xi-6)%3),"esp")) if ($Xi>5);	# restore X[] from backtrace buffer
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vpxor	(@X[0],@X[0],@X[3]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpxor	(@X[0],@X[0],@X[4]);		# "X[0]"^=("X[0]"<<96)<<<2
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vmovdqa	(@X[4],&QWP(112-16+16*(($Xi)/5),"esp"));	# K_XX_XX
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	 foreach (@insns) { eval; }	# remaining instructions [if any]
+
+  $Xi++;	push(@X,shift(@X));	# "rotate" X[]
+}
+
+sub Xupdate_avx_32_79()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 to 44 instructions
+  my ($a,$b,$c,$d,$e);
+
+	&vpalignr(@X[2],@X[-1&7],@X[-2&7],8);	# compose "X[-6]"
+	&vpxor	(@X[0],@X[0],@X[-4&7]);	# "X[0]"="X[-32]"^"X[-16]"
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+
+	&vpxor	(@X[0],@X[0],@X[-7&7]);	# "X[0]"^="X[-28]"
+	  &vmovdqa	(&QWP(64+16*(($Xi-4)%3),"esp"),@X[-4&7]);	# save X[] to backtrace buffer
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 if ($Xi%5) {
+	  &vmovdqa	(@X[4],@X[3]);	# "perpetuate" K_XX_XX...
+	 } else {			# ... or load next one
+	  &vmovdqa	(@X[4],&QWP(112-16+16*($Xi/5),"esp"));
+	 }
+	  &vpaddd	(@X[3],@X[3],@X[-1&7]);
+	 eval(shift(@insns));		# ror
+	 eval(shift(@insns));
+
+	&vpxor	(@X[0],@X[0],@X[2]);		# "X[0]"^="X[-6]"
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+
+	&vpsrld	(@X[2],@X[0],30);
+	  &vmovdqa	(&QWP(0+16*(($Xi-1)&3),"esp"),@X[3]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	 eval(shift(@insns));
+
+	&vpslld	(@X[0],@X[0],2);
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	 eval(shift(@insns));
+
+	&vpor	(@X[0],@X[0],@X[2]);	# "X[0]"<<<=2
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	  &vmovdqa	(@X[2],&QWP(64+16*(($Xi-6)%3),"esp")) if($Xi<19);	# restore X[] from backtrace buffer
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	 eval(shift(@insns));
+
+	 foreach (@insns) { eval; }	# remaining instructions
+
+  $Xi++;	push(@X,shift(@X));	# "rotate" X[]
+}
+
+sub Xuplast_avx_80()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));
+	  &vpaddd	(@X[3],@X[3],@X[-1&7]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	  &vmovdqa	(&QWP(0+16*(($Xi-1)&3),"esp"),@X[3]);	# X[]+K xfer IALU
+
+	 foreach (@insns) { eval; }		# remaining instructions
+
+	&mov	($inp=@T[1],&DWP(192+4,"esp"));
+	&cmp	($inp,&DWP(192+8,"esp"));
+	&je	(&label("done"));
+
+	&vmovdqa(@X[3],&QWP(112+48,"esp"));	# K_00_19
+	&vmovdqa(@X[2],&QWP(112+64,"esp"));	# pbswap mask
+	&vmovdqu(@X[-4&7],&QWP(0,$inp));	# load input
+	&vmovdqu(@X[-3&7],&QWP(16,$inp));
+	&vmovdqu(@X[-2&7],&QWP(32,$inp));
+	&vmovdqu(@X[-1&7],&QWP(48,$inp));
+	&add	($inp,64);
+	&vpshufb(@X[-4&7],@X[-4&7],@X[2]);		# byte swap
+	&mov	(&DWP(192+4,"esp"),$inp);
+	&vmovdqa(&QWP(112-16,"esp"),@X[3]);	# borrow last backtrace slot
+
+  $Xi=0;
+}
+
+sub Xloop_avx()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vpshufb	(@X[($Xi-3)&7],@X[($Xi-3)&7],@X[2]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vpaddd	(@X[$Xi&7],@X[($Xi-4)&7],@X[3]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vmovdqa	(&QWP(0+16*$Xi,"esp"),@X[$Xi&7]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	foreach (@insns) { eval; }
+  $Xi++;
+}
+
+sub Xtail_avx()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	foreach (@insns) { eval; }
+}
+
+&set_label("loop",16);
+	&Xupdate_avx_16_31(\&body_00_19);
+	&Xupdate_avx_16_31(\&body_00_19);
+	&Xupdate_avx_16_31(\&body_00_19);
+	&Xupdate_avx_16_31(\&body_00_19);
+	&Xupdate_avx_32_79(\&body_00_19);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xupdate_avx_32_79(\&body_40_59);
+	&Xupdate_avx_32_79(\&body_40_59);
+	&Xupdate_avx_32_79(\&body_40_59);
+	&Xupdate_avx_32_79(\&body_40_59);
+	&Xupdate_avx_32_79(\&body_40_59);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xuplast_avx_80(\&body_20_39);	# can jump to "done"
+
+				$saved_j=$j; @saved_V=@V;
+
+	&Xloop_avx(\&body_20_39);
+	&Xloop_avx(\&body_20_39);
+	&Xloop_avx(\&body_20_39);
+
+	&mov	(@T[1],&DWP(192,"esp"));	# update context
+	&add	($A,&DWP(0,@T[1]));
+	&add	(@T[0],&DWP(4,@T[1]));		# $b
+	&add	($C,&DWP(8,@T[1]));
+	&mov	(&DWP(0,@T[1]),$A);
+	&add	($D,&DWP(12,@T[1]));
+	&mov	(&DWP(4,@T[1]),@T[0]);
+	&add	($E,&DWP(16,@T[1]));
+	&mov	($B,$C);
+	&mov	(&DWP(8,@T[1]),$C);
+	&xor	($B,$D);
+	&mov	(&DWP(12,@T[1]),$D);
+	&mov	(&DWP(16,@T[1]),$E);
+	&mov	(@T[1],@T[0]);
+	&and	(@T[0],$B);
+	&mov	($B,@T[1]);
+
+	&jmp	(&label("loop"));
+
+&set_label("done",16);		$j=$saved_j; @V=@saved_V;
+
+	&Xtail_avx(\&body_20_39);
+	&Xtail_avx(\&body_20_39);
+	&Xtail_avx(\&body_20_39);
+
+	&vzeroall();
+
+	&mov	(@T[1],&DWP(192,"esp"));	# update context
+	&add	($A,&DWP(0,@T[1]));
+	&mov	("esp",&DWP(192+12,"esp"));	# restore %esp
+	&add	(@T[0],&DWP(4,@T[1]));		# $b
+	&add	($C,&DWP(8,@T[1]));
+	&mov	(&DWP(0,@T[1]),$A);
+	&add	($D,&DWP(12,@T[1]));
+	&mov	(&DWP(4,@T[1]),@T[0]);
+	&add	($E,&DWP(16,@T[1]));
+	&mov	(&DWP(8,@T[1]),$C);
+	&mov	(&DWP(12,@T[1]),$D);
+	&mov	(&DWP(16,@T[1]),$E);
+&function_end("_sha1_block_data_order_avx");
+}
+&set_label("K_XX_XX",64);
+&data_word(0x5a827999,0x5a827999,0x5a827999,0x5a827999);	# K_00_19
+&data_word(0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1);	# K_20_39
+&data_word(0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc);	# K_40_59
+&data_word(0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6);	# K_60_79
+&data_word(0x00010203,0x04050607,0x08090a0b,0x0c0d0e0f);	# pbswap mask
+&data_byte(0xf,0xe,0xd,0xc,0xb,0xa,0x9,0x8,0x7,0x6,0x5,0x4,0x3,0x2,0x1,0x0);
+}
+&asciz("SHA1 block transform for x86, CRYPTOGAMS by <appro\@openssl.org>");
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-alpha.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-alpha.pl
new file mode 100644
index 000000000..c1a0b0c69
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-alpha.pl
@@ -0,0 +1,329 @@
+#! /usr/bin/env perl
+# Copyright 2009-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# SHA1 block procedure for Alpha.
+
+# On 21264 performance is 33% better than code generated by vendor
+# compiler, and 75% better than GCC [3.4], and in absolute terms is
+# 8.7 cycles per processed byte. Implementation features vectorized
+# byte swap, but not Xupdate.
+
+@X=(	"\$0",	"\$1",	"\$2",	"\$3",	"\$4",	"\$5",	"\$6",	"\$7",
+	"\$8",	"\$9",	"\$10",	"\$11",	"\$12",	"\$13",	"\$14",	"\$15");
+$ctx="a0";	# $16
+$inp="a1";
+$num="a2";
+$A="a3";
+$B="a4";	# 20
+$C="a5";
+$D="t8";
+$E="t9";	@V=($A,$B,$C,$D,$E);
+$t0="t10";	# 24
+$t1="t11";
+$t2="ra";
+$t3="t12";
+$K="AT";	# 28
+
+sub BODY_00_19 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+$code.=<<___ if ($i==0);
+	ldq_u	@X[0],0+0($inp)
+	ldq_u	@X[1],0+7($inp)
+___
+$code.=<<___ if (!($i&1) && $i<14);
+	ldq_u	@X[$i+2],($i+2)*4+0($inp)
+	ldq_u	@X[$i+3],($i+2)*4+7($inp)
+___
+$code.=<<___ if (!($i&1) && $i<15);
+	extql	@X[$i],$inp,@X[$i]
+	extqh	@X[$i+1],$inp,@X[$i+1]
+
+	or	@X[$i+1],@X[$i],@X[$i]	# pair of 32-bit values are fetched
+
+	srl	@X[$i],24,$t0		# vectorized byte swap
+	srl	@X[$i],8,$t2
+
+	sll	@X[$i],8,$t3
+	sll	@X[$i],24,@X[$i]
+	zapnot	$t0,0x11,$t0
+	zapnot	$t2,0x22,$t2
+
+	zapnot	@X[$i],0x88,@X[$i]
+	or	$t0,$t2,$t0
+	zapnot	$t3,0x44,$t3
+	sll	$a,5,$t1
+
+	or	@X[$i],$t0,@X[$i]
+	addl	$K,$e,$e
+	and	$b,$c,$t2
+	zapnot	$a,0xf,$a
+
+	or	@X[$i],$t3,@X[$i]
+	srl	$a,27,$t0
+	bic	$d,$b,$t3
+	sll	$b,30,$b
+
+	extll	@X[$i],4,@X[$i+1]	# extract upper half
+	or	$t2,$t3,$t2
+	addl	@X[$i],$e,$e
+
+	addl	$t1,$e,$e
+	srl	$b,32,$t3
+	zapnot	@X[$i],0xf,@X[$i]
+
+	addl	$t0,$e,$e
+	addl	$t2,$e,$e
+	or	$t3,$b,$b
+___
+$code.=<<___ if (($i&1) && $i<15);
+	sll	$a,5,$t1
+	addl	$K,$e,$e
+	and	$b,$c,$t2
+	zapnot	$a,0xf,$a
+
+	srl	$a,27,$t0
+	addl	@X[$i%16],$e,$e
+	bic	$d,$b,$t3
+	sll	$b,30,$b
+
+	or	$t2,$t3,$t2
+	addl	$t1,$e,$e
+	srl	$b,32,$t3
+	zapnot	@X[$i],0xf,@X[$i]
+
+	addl	$t0,$e,$e
+	addl	$t2,$e,$e
+	or	$t3,$b,$b
+___
+$code.=<<___ if ($i>=15);	# with forward Xupdate
+	sll	$a,5,$t1
+	addl	$K,$e,$e
+	and	$b,$c,$t2
+	xor	@X[($j+2)%16],@X[$j%16],@X[$j%16]
+
+	zapnot	$a,0xf,$a
+	addl	@X[$i%16],$e,$e
+	bic	$d,$b,$t3
+	xor	@X[($j+8)%16],@X[$j%16],@X[$j%16]
+
+	srl	$a,27,$t0
+	addl	$t1,$e,$e
+	or	$t2,$t3,$t2
+	xor	@X[($j+13)%16],@X[$j%16],@X[$j%16]
+
+	sll	$b,30,$b
+	addl	$t0,$e,$e
+	srl	@X[$j%16],31,$t1
+
+	addl	$t2,$e,$e
+	srl	$b,32,$t3
+	addl	@X[$j%16],@X[$j%16],@X[$j%16]
+
+	or	$t3,$b,$b
+	zapnot	@X[$i%16],0xf,@X[$i%16]
+	or	$t1,@X[$j%16],@X[$j%16]
+___
+}
+
+sub BODY_20_39 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+$code.=<<___ if ($i<79);	# with forward Xupdate
+	sll	$a,5,$t1
+	addl	$K,$e,$e
+	zapnot	$a,0xf,$a
+	xor	@X[($j+2)%16],@X[$j%16],@X[$j%16]
+
+	sll	$b,30,$t3
+	addl	$t1,$e,$e
+	xor	$b,$c,$t2
+	xor	@X[($j+8)%16],@X[$j%16],@X[$j%16]
+
+	srl	$b,2,$b
+	addl	@X[$i%16],$e,$e
+	xor	$d,$t2,$t2
+	xor	@X[($j+13)%16],@X[$j%16],@X[$j%16]
+
+	srl	@X[$j%16],31,$t1
+	addl	$t2,$e,$e
+	srl	$a,27,$t0
+	addl	@X[$j%16],@X[$j%16],@X[$j%16]
+
+	or	$t3,$b,$b
+	addl	$t0,$e,$e
+	or	$t1,@X[$j%16],@X[$j%16]
+___
+$code.=<<___ if ($i<77);
+	zapnot	@X[$i%16],0xf,@X[$i%16]
+___
+$code.=<<___ if ($i==79);	# with context fetch
+	sll	$a,5,$t1
+	addl	$K,$e,$e
+	zapnot	$a,0xf,$a
+	ldl	@X[0],0($ctx)
+
+	sll	$b,30,$t3
+	addl	$t1,$e,$e
+	xor	$b,$c,$t2
+	ldl	@X[1],4($ctx)
+
+	srl	$b,2,$b
+	addl	@X[$i%16],$e,$e
+	xor	$d,$t2,$t2
+	ldl	@X[2],8($ctx)
+
+	srl	$a,27,$t0
+	addl	$t2,$e,$e
+	ldl	@X[3],12($ctx)
+
+	or	$t3,$b,$b
+	addl	$t0,$e,$e
+	ldl	@X[4],16($ctx)
+___
+}
+
+sub BODY_40_59 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+$code.=<<___;	# with forward Xupdate
+	sll	$a,5,$t1
+	addl	$K,$e,$e
+	zapnot	$a,0xf,$a
+	xor	@X[($j+2)%16],@X[$j%16],@X[$j%16]
+
+	srl	$a,27,$t0
+	and	$b,$c,$t2
+	and	$b,$d,$t3
+	xor	@X[($j+8)%16],@X[$j%16],@X[$j%16]
+
+	sll	$b,30,$b
+	addl	$t1,$e,$e
+	xor	@X[($j+13)%16],@X[$j%16],@X[$j%16]
+
+	srl	@X[$j%16],31,$t1
+	addl	$t0,$e,$e
+	or	$t2,$t3,$t2
+	and	$c,$d,$t3
+
+	or	$t2,$t3,$t2
+	srl	$b,32,$t3
+	addl	@X[$i%16],$e,$e
+	addl	@X[$j%16],@X[$j%16],@X[$j%16]
+
+	or	$t3,$b,$b
+	addl	$t2,$e,$e
+	or	$t1,@X[$j%16],@X[$j%16]
+	zapnot	@X[$i%16],0xf,@X[$i%16]
+___
+}
+
+$code=<<___;
+#ifdef __linux__
+#include <asm/regdef.h>
+#else
+#include <asm.h>
+#include <regdef.h>
+#endif
+
+.text
+
+.set	noat
+.set	noreorder
+.globl	sha1_block_data_order
+.align	5
+.ent	sha1_block_data_order
+sha1_block_data_order:
+	lda	sp,-64(sp)
+	stq	ra,0(sp)
+	stq	s0,8(sp)
+	stq	s1,16(sp)
+	stq	s2,24(sp)
+	stq	s3,32(sp)
+	stq	s4,40(sp)
+	stq	s5,48(sp)
+	stq	fp,56(sp)
+	.mask	0x0400fe00,-64
+	.frame	sp,64,ra
+	.prologue 0
+
+	ldl	$A,0($ctx)
+	ldl	$B,4($ctx)
+	sll	$num,6,$num
+	ldl	$C,8($ctx)
+	ldl	$D,12($ctx)
+	ldl	$E,16($ctx)
+	addq	$inp,$num,$num
+
+.Lloop:
+	.set	noreorder
+	ldah	$K,23170(zero)
+	zapnot	$B,0xf,$B
+	lda	$K,31129($K)	# K_00_19
+___
+for ($i=0;$i<20;$i++) { &BODY_00_19($i,@V); unshift(@V,pop(@V)); }
+
+$code.=<<___;
+	ldah	$K,28378(zero)
+	lda	$K,-5215($K)	# K_20_39
+___
+for (;$i<40;$i++) { &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+
+$code.=<<___;
+	ldah	$K,-28900(zero)
+	lda	$K,-17188($K)	# K_40_59
+___
+for (;$i<60;$i++) { &BODY_40_59($i,@V); unshift(@V,pop(@V)); }
+
+$code.=<<___;
+	ldah	$K,-13725(zero)
+	lda	$K,-15914($K)	# K_60_79
+___
+for (;$i<80;$i++) { &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+
+$code.=<<___;
+	addl	@X[0],$A,$A
+	addl	@X[1],$B,$B
+	addl	@X[2],$C,$C
+	addl	@X[3],$D,$D
+	addl	@X[4],$E,$E
+	stl	$A,0($ctx)
+	stl	$B,4($ctx)
+	addq	$inp,64,$inp
+	stl	$C,8($ctx)
+	stl	$D,12($ctx)
+	stl	$E,16($ctx)
+	cmpult	$inp,$num,$t1
+	bne	$t1,.Lloop
+
+	.set	noreorder
+	ldq	ra,0(sp)
+	ldq	s0,8(sp)
+	ldq	s1,16(sp)
+	ldq	s2,24(sp)
+	ldq	s3,32(sp)
+	ldq	s4,40(sp)
+	ldq	s5,48(sp)
+	ldq	fp,56(sp)
+	lda	sp,64(sp)
+	ret	(ra)
+.end	sha1_block_data_order
+.ascii	"SHA1 block transform for Alpha, CRYPTOGAMS by <appro\@openssl.org>"
+.align	2
+___
+$output=pop and open STDOUT,">$output";
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-armv4-large.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-armv4-large.pl
new file mode 100644
index 000000000..7ff5bfbba
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-armv4-large.pl
@@ -0,0 +1,742 @@
+#! /usr/bin/env perl
+# Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# sha1_block procedure for ARMv4.
+#
+# January 2007.
+
+# Size/performance trade-off
+# ====================================================================
+# impl		size in bytes	comp cycles[*]	measured performance
+# ====================================================================
+# thumb		304		3212		4420
+# armv4-small	392/+29%	1958/+64%	2250/+96%
+# armv4-compact	740/+89%	1552/+26%	1840/+22%
+# armv4-large	1420/+92%	1307/+19%	1370/+34%[***]
+# full unroll	~5100/+260%	~1260/+4%	~1300/+5%
+# ====================================================================
+# thumb		= same as 'small' but in Thumb instructions[**] and
+#		  with recurring code in two private functions;
+# small		= detached Xload/update, loops are folded;
+# compact	= detached Xload/update, 5x unroll;
+# large		= interleaved Xload/update, 5x unroll;
+# full unroll	= interleaved Xload/update, full unroll, estimated[!];
+#
+# [*]	Manually counted instructions in "grand" loop body. Measured
+#	performance is affected by prologue and epilogue overhead,
+#	i-cache availability, branch penalties, etc.
+# [**]	While each Thumb instruction is twice smaller, they are not as
+#	diverse as ARM ones: e.g., there are only two arithmetic
+#	instructions with 3 arguments, no [fixed] rotate, addressing
+#	modes are limited. As result it takes more instructions to do
+#	the same job in Thumb, therefore the code is never twice as
+#	small and always slower.
+# [***]	which is also ~35% better than compiler generated code. Dual-
+#	issue Cortex A8 core was measured to process input block in
+#	~990 cycles.
+
+# August 2010.
+#
+# Rescheduling for dual-issue pipeline resulted in 13% improvement on
+# Cortex A8 core and in absolute terms ~870 cycles per input block
+# [or 13.6 cycles per byte].
+
+# February 2011.
+#
+# Profiler-assisted and platform-specific optimization resulted in 10%
+# improvement on Cortex A8 core and 12.2 cycles per byte.
+
+# September 2013.
+#
+# Add NEON implementation (see sha1-586.pl for background info). On
+# Cortex A8 it was measured to process one byte in 6.7 cycles or >80%
+# faster than integer-only code. Because [fully unrolled] NEON code
+# is ~2.5x larger and there are some redundant instructions executed
+# when processing last block, improvement is not as big for smallest
+# blocks, only ~30%. Snapdragon S4 is a tad faster, 6.4 cycles per
+# byte, which is also >80% faster than integer-only code. Cortex-A15
+# is even faster spending 5.6 cycles per byte outperforming integer-
+# only code by factor of 2.
+
+# May 2014.
+#
+# Add ARMv8 code path performing at 2.35 cpb on Apple A7.
+
+$flavour = shift;
+if ($flavour=~/\w[\w\-]*\.\w+$/) { $output=$flavour; undef $flavour; }
+else { while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {} }
+
+if ($flavour && $flavour ne "void") {
+    $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+    ( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+    ( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+    die "can't locate arm-xlate.pl";
+
+    open STDOUT,"| \"$^X\" $xlate $flavour $output";
+} else {
+    open STDOUT,">$output";
+}
+
+$ctx="r0";
+$inp="r1";
+$len="r2";
+$a="r3";
+$b="r4";
+$c="r5";
+$d="r6";
+$e="r7";
+$K="r8";
+$t0="r9";
+$t1="r10";
+$t2="r11";
+$t3="r12";
+$Xi="r14";
+@V=($a,$b,$c,$d,$e);
+
+sub Xupdate {
+my ($a,$b,$c,$d,$e,$opt1,$opt2)=@_;
+$code.=<<___;
+	ldr	$t0,[$Xi,#15*4]
+	ldr	$t1,[$Xi,#13*4]
+	ldr	$t2,[$Xi,#7*4]
+	add	$e,$K,$e,ror#2			@ E+=K_xx_xx
+	ldr	$t3,[$Xi,#2*4]
+	eor	$t0,$t0,$t1
+	eor	$t2,$t2,$t3			@ 1 cycle stall
+	eor	$t1,$c,$d			@ F_xx_xx
+	mov	$t0,$t0,ror#31
+	add	$e,$e,$a,ror#27			@ E+=ROR(A,27)
+	eor	$t0,$t0,$t2,ror#31
+	str	$t0,[$Xi,#-4]!
+	$opt1					@ F_xx_xx
+	$opt2					@ F_xx_xx
+	add	$e,$e,$t0			@ E+=X[i]
+___
+}
+
+sub BODY_00_15 {
+my ($a,$b,$c,$d,$e)=@_;
+$code.=<<___;
+#if __ARM_ARCH__<7
+	ldrb	$t1,[$inp,#2]
+	ldrb	$t0,[$inp,#3]
+	ldrb	$t2,[$inp,#1]
+	add	$e,$K,$e,ror#2			@ E+=K_00_19
+	ldrb	$t3,[$inp],#4
+	orr	$t0,$t0,$t1,lsl#8
+	eor	$t1,$c,$d			@ F_xx_xx
+	orr	$t0,$t0,$t2,lsl#16
+	add	$e,$e,$a,ror#27			@ E+=ROR(A,27)
+	orr	$t0,$t0,$t3,lsl#24
+#else
+	ldr	$t0,[$inp],#4			@ handles unaligned
+	add	$e,$K,$e,ror#2			@ E+=K_00_19
+	eor	$t1,$c,$d			@ F_xx_xx
+	add	$e,$e,$a,ror#27			@ E+=ROR(A,27)
+#ifdef __ARMEL__
+	rev	$t0,$t0				@ byte swap
+#endif
+#endif
+	and	$t1,$b,$t1,ror#2
+	add	$e,$e,$t0			@ E+=X[i]
+	eor	$t1,$t1,$d,ror#2		@ F_00_19(B,C,D)
+	str	$t0,[$Xi,#-4]!
+	add	$e,$e,$t1			@ E+=F_00_19(B,C,D)
+___
+}
+
+sub BODY_16_19 {
+my ($a,$b,$c,$d,$e)=@_;
+	&Xupdate(@_,"and $t1,$b,$t1,ror#2");
+$code.=<<___;
+	eor	$t1,$t1,$d,ror#2		@ F_00_19(B,C,D)
+	add	$e,$e,$t1			@ E+=F_00_19(B,C,D)
+___
+}
+
+sub BODY_20_39 {
+my ($a,$b,$c,$d,$e)=@_;
+	&Xupdate(@_,"eor $t1,$b,$t1,ror#2");
+$code.=<<___;
+	add	$e,$e,$t1			@ E+=F_20_39(B,C,D)
+___
+}
+
+sub BODY_40_59 {
+my ($a,$b,$c,$d,$e)=@_;
+	&Xupdate(@_,"and $t1,$b,$t1,ror#2","and $t2,$c,$d");
+$code.=<<___;
+	add	$e,$e,$t1			@ E+=F_40_59(B,C,D)
+	add	$e,$e,$t2,ror#2
+___
+}
+
+$code=<<___;
+#include "arm_arch.h"
+
+.text
+#if defined(__thumb2__)
+.syntax	unified
+.thumb
+#else
+.code	32
+#endif
+
+.global	sha1_block_data_order
+.type	sha1_block_data_order,%function
+
+.align	5
+sha1_block_data_order:
+#if __ARM_MAX_ARCH__>=7
+.Lsha1_block:
+	adr	r3,.Lsha1_block
+	ldr	r12,.LOPENSSL_armcap
+	ldr	r12,[r3,r12]		@ OPENSSL_armcap_P
+#ifdef	__APPLE__
+	ldr	r12,[r12]
+#endif
+	tst	r12,#ARMV8_SHA1
+	bne	.LARMv8
+	tst	r12,#ARMV7_NEON
+	bne	.LNEON
+#endif
+	stmdb	sp!,{r4-r12,lr}
+	add	$len,$inp,$len,lsl#6	@ $len to point at the end of $inp
+	ldmia	$ctx,{$a,$b,$c,$d,$e}
+.Lloop:
+	ldr	$K,.LK_00_19
+	mov	$Xi,sp
+	sub	sp,sp,#15*4
+	mov	$c,$c,ror#30
+	mov	$d,$d,ror#30
+	mov	$e,$e,ror#30		@ [6]
+.L_00_15:
+___
+for($i=0;$i<5;$i++) {
+	&BODY_00_15(@V);	unshift(@V,pop(@V));
+}
+$code.=<<___;
+#if defined(__thumb2__)
+	mov	$t3,sp
+	teq	$Xi,$t3
+#else
+	teq	$Xi,sp
+#endif
+	bne	.L_00_15		@ [((11+4)*5+2)*3]
+	sub	sp,sp,#25*4
+___
+	&BODY_00_15(@V);	unshift(@V,pop(@V));
+	&BODY_16_19(@V);	unshift(@V,pop(@V));
+	&BODY_16_19(@V);	unshift(@V,pop(@V));
+	&BODY_16_19(@V);	unshift(@V,pop(@V));
+	&BODY_16_19(@V);	unshift(@V,pop(@V));
+$code.=<<___;
+
+	ldr	$K,.LK_20_39		@ [+15+16*4]
+	cmn	sp,#0			@ [+3], clear carry to denote 20_39
+.L_20_39_or_60_79:
+___
+for($i=0;$i<5;$i++) {
+	&BODY_20_39(@V);	unshift(@V,pop(@V));
+}
+$code.=<<___;
+#if defined(__thumb2__)
+	mov	$t3,sp
+	teq	$Xi,$t3
+#else
+	teq	$Xi,sp			@ preserve carry
+#endif
+	bne	.L_20_39_or_60_79	@ [+((12+3)*5+2)*4]
+	bcs	.L_done			@ [+((12+3)*5+2)*4], spare 300 bytes
+
+	ldr	$K,.LK_40_59
+	sub	sp,sp,#20*4		@ [+2]
+.L_40_59:
+___
+for($i=0;$i<5;$i++) {
+	&BODY_40_59(@V);	unshift(@V,pop(@V));
+}
+$code.=<<___;
+#if defined(__thumb2__)
+	mov	$t3,sp
+	teq	$Xi,$t3
+#else
+	teq	$Xi,sp
+#endif
+	bne	.L_40_59		@ [+((12+5)*5+2)*4]
+
+	ldr	$K,.LK_60_79
+	sub	sp,sp,#20*4
+	cmp	sp,#0			@ set carry to denote 60_79
+	b	.L_20_39_or_60_79	@ [+4], spare 300 bytes
+.L_done:
+	add	sp,sp,#80*4		@ "deallocate" stack frame
+	ldmia	$ctx,{$K,$t0,$t1,$t2,$t3}
+	add	$a,$K,$a
+	add	$b,$t0,$b
+	add	$c,$t1,$c,ror#2
+	add	$d,$t2,$d,ror#2
+	add	$e,$t3,$e,ror#2
+	stmia	$ctx,{$a,$b,$c,$d,$e}
+	teq	$inp,$len
+	bne	.Lloop			@ [+18], total 1307
+
+#if __ARM_ARCH__>=5
+	ldmia	sp!,{r4-r12,pc}
+#else
+	ldmia	sp!,{r4-r12,lr}
+	tst	lr,#1
+	moveq	pc,lr			@ be binary compatible with V4, yet
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	sha1_block_data_order,.-sha1_block_data_order
+
+.align	5
+.LK_00_19:	.word	0x5a827999
+.LK_20_39:	.word	0x6ed9eba1
+.LK_40_59:	.word	0x8f1bbcdc
+.LK_60_79:	.word	0xca62c1d6
+#if __ARM_MAX_ARCH__>=7
+.LOPENSSL_armcap:
+.word	OPENSSL_armcap_P-.Lsha1_block
+#endif
+.asciz	"SHA1 block transform for ARMv4/NEON/ARMv8, CRYPTOGAMS by <appro\@openssl.org>"
+.align	5
+___
+#####################################################################
+# NEON stuff
+#
+{{{
+my @V=($a,$b,$c,$d,$e);
+my ($K_XX_XX,$Ki,$t0,$t1,$Xfer,$saved_sp)=map("r$_",(8..12,14));
+my $Xi=4;
+my @X=map("q$_",(8..11,0..3));
+my @Tx=("q12","q13");
+my ($K,$zero)=("q14","q15");
+my $j=0;
+
+sub AUTOLOAD()          # thunk [simplified] x86-style perlasm
+{ my $opcode = $AUTOLOAD; $opcode =~ s/.*:://; $opcode =~ s/_/\./;
+  my $arg = pop;
+    $arg = "#$arg" if ($arg*1 eq $arg);
+    $code .= "\t$opcode\t".join(',',@_,$arg)."\n";
+}
+
+sub body_00_19 () {
+	(
+	'($a,$b,$c,$d,$e)=@V;'.		# '$code.="@ $j\n";'.
+	'&bic	($t0,$d,$b)',
+	'&add	($e,$e,$Ki)',		# e+=X[i]+K
+	'&and	($t1,$c,$b)',
+	'&ldr	($Ki,sprintf "[sp,#%d]",4*(($j+1)&15))',
+	'&add	($e,$e,$a,"ror#27")',	# e+=ROR(A,27)
+	'&eor	($t1,$t1,$t0)',		# F_00_19
+	'&mov	($b,$b,"ror#2")',	# b=ROR(b,2)
+	'&add	($e,$e,$t1);'.		# e+=F_00_19
+	'$j++;	unshift(@V,pop(@V));'
+	)
+}
+sub body_20_39 () {
+	(
+	'($a,$b,$c,$d,$e)=@V;'.		# '$code.="@ $j\n";'.
+	'&eor	($t0,$b,$d)',
+	'&add	($e,$e,$Ki)',		# e+=X[i]+K
+	'&ldr	($Ki,sprintf "[sp,#%d]",4*(($j+1)&15)) if ($j<79)',
+	'&eor	($t1,$t0,$c)',		# F_20_39
+	'&add	($e,$e,$a,"ror#27")',	# e+=ROR(A,27)
+	'&mov	($b,$b,"ror#2")',	# b=ROR(b,2)
+	'&add	($e,$e,$t1);'.		# e+=F_20_39
+	'$j++;	unshift(@V,pop(@V));'
+	)
+}
+sub body_40_59 () {
+	(
+	'($a,$b,$c,$d,$e)=@V;'.		# '$code.="@ $j\n";'.
+	'&add	($e,$e,$Ki)',		# e+=X[i]+K
+	'&and	($t0,$c,$d)',
+	'&ldr	($Ki,sprintf "[sp,#%d]",4*(($j+1)&15))',
+	'&add	($e,$e,$a,"ror#27")',	# e+=ROR(A,27)
+	'&eor	($t1,$c,$d)',
+	'&add	($e,$e,$t0)',
+	'&and	($t1,$t1,$b)',
+	'&mov	($b,$b,"ror#2")',	# b=ROR(b,2)
+	'&add	($e,$e,$t1);'.		# e+=F_40_59
+	'$j++;	unshift(@V,pop(@V));'
+	)
+}
+
+sub Xupdate_16_31 ()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);
+  my ($a,$b,$c,$d,$e);
+
+	&vext_8		(@X[0],@X[-4&7],@X[-3&7],8);	# compose "X[-14]" in "X[0]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vadd_i32	(@Tx[1],@X[-1&7],$K);
+	 eval(shift(@insns));
+	  &vld1_32	("{$K\[]}","[$K_XX_XX,:32]!")	if ($Xi%5==0);
+	 eval(shift(@insns));
+	&vext_8		(@Tx[0],@X[-1&7],$zero,4);	# "X[-3]", 3 words
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&veor		(@X[0],@X[0],@X[-4&7]);		# "X[0]"^="X[-16]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&veor		(@Tx[0],@Tx[0],@X[-2&7]);	# "X[-3]"^"X[-8]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&veor		(@Tx[0],@Tx[0],@X[0]);		# "X[0]"^="X[-3]"^"X[-8]
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vst1_32	("{@Tx[1]}","[$Xfer,:128]!");	# X[]+K xfer
+	  &sub		($Xfer,$Xfer,64)		if ($Xi%4==0);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vext_8		(@Tx[1],$zero,@Tx[0],4);	# "X[0]"<<96, extract one dword
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vadd_i32	(@X[0],@Tx[0],@Tx[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vsri_32	(@X[0],@Tx[0],31);		# "X[0]"<<<=1
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vshr_u32	(@Tx[0],@Tx[1],30);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vshl_u32	(@Tx[1],@Tx[1],2);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&veor		(@X[0],@X[0],@Tx[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&veor		(@X[0],@X[0],@Tx[1]);		# "X[0]"^=("X[0]">>96)<<<2
+
+	foreach (@insns) { eval; }	# remaining instructions [if any]
+
+  $Xi++;	push(@X,shift(@X));	# "rotate" X[]
+}
+
+sub Xupdate_32_79 ()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);
+  my ($a,$b,$c,$d,$e);
+
+	&vext_8		(@Tx[0],@X[-2&7],@X[-1&7],8);	# compose "X[-6]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&veor		(@X[0],@X[0],@X[-4&7]);		# "X[0]"="X[-32]"^"X[-16]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&veor		(@X[0],@X[0],@X[-7&7]);		# "X[0]"^="X[-28]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vadd_i32	(@Tx[1],@X[-1&7],$K);
+	 eval(shift(@insns));
+	  &vld1_32	("{$K\[]}","[$K_XX_XX,:32]!")	if ($Xi%5==0);
+	 eval(shift(@insns));
+	&veor		(@Tx[0],@Tx[0],@X[0]);		# "X[-6]"^="X[0]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vshr_u32	(@X[0],@Tx[0],30);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vst1_32	("{@Tx[1]}","[$Xfer,:128]!");	# X[]+K xfer
+	  &sub		($Xfer,$Xfer,64)		if ($Xi%4==0);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vsli_32	(@X[0],@Tx[0],2);		# "X[0]"="X[-6]"<<<2
+
+	foreach (@insns) { eval; }	# remaining instructions [if any]
+
+  $Xi++;	push(@X,shift(@X));	# "rotate" X[]
+}
+
+sub Xuplast_80 ()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);
+  my ($a,$b,$c,$d,$e);
+
+	&vadd_i32	(@Tx[1],@X[-1&7],$K);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vst1_32	("{@Tx[1]}","[$Xfer,:128]!");
+	&sub		($Xfer,$Xfer,64);
+
+	&teq		($inp,$len);
+	&sub		($K_XX_XX,$K_XX_XX,16);	# rewind $K_XX_XX
+	&it		("eq");
+	&subeq		($inp,$inp,64);		# reload last block to avoid SEGV
+	&vld1_8		("{@X[-4&7]-@X[-3&7]}","[$inp]!");
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vld1_8		("{@X[-2&7]-@X[-1&7]}","[$inp]!");
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vld1_32	("{$K\[]}","[$K_XX_XX,:32]!");	# load K_00_19
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vrev32_8	(@X[-4&7],@X[-4&7]);
+
+	foreach (@insns) { eval; }		# remaining instructions
+
+   $Xi=0;
+}
+
+sub Xloop()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);
+  my ($a,$b,$c,$d,$e);
+
+	&vrev32_8	(@X[($Xi-3)&7],@X[($Xi-3)&7]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vadd_i32	(@X[$Xi&7],@X[($Xi-4)&7],$K);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vst1_32	("{@X[$Xi&7]}","[$Xfer,:128]!");# X[]+K xfer to IALU
+
+	foreach (@insns) { eval; }
+
+  $Xi++;
+}
+
+$code.=<<___;
+#if __ARM_MAX_ARCH__>=7
+.arch	armv7-a
+.fpu	neon
+
+.type	sha1_block_data_order_neon,%function
+.align	4
+sha1_block_data_order_neon:
+.LNEON:
+	stmdb	sp!,{r4-r12,lr}
+	add	$len,$inp,$len,lsl#6	@ $len to point at the end of $inp
+	@ dmb				@ errata #451034 on early Cortex A8
+	@ vstmdb	sp!,{d8-d15}	@ ABI specification says so
+	mov	$saved_sp,sp
+	sub	$Xfer,sp,#64
+	adr	$K_XX_XX,.LK_00_19
+	bic	$Xfer,$Xfer,#15		@ align for 128-bit stores
+
+	ldmia	$ctx,{$a,$b,$c,$d,$e}	@ load context
+	mov	sp,$Xfer		@ alloca
+
+	vld1.8		{@X[-4&7]-@X[-3&7]},[$inp]!	@ handles unaligned
+	veor		$zero,$zero,$zero
+	vld1.8		{@X[-2&7]-@X[-1&7]},[$inp]!
+	vld1.32		{${K}\[]},[$K_XX_XX,:32]!	@ load K_00_19
+	vrev32.8	@X[-4&7],@X[-4&7]		@ yes, even on
+	vrev32.8	@X[-3&7],@X[-3&7]		@ big-endian...
+	vrev32.8	@X[-2&7],@X[-2&7]
+	vadd.i32	@X[0],@X[-4&7],$K
+	vrev32.8	@X[-1&7],@X[-1&7]
+	vadd.i32	@X[1],@X[-3&7],$K
+	vst1.32		{@X[0]},[$Xfer,:128]!
+	vadd.i32	@X[2],@X[-2&7],$K
+	vst1.32		{@X[1]},[$Xfer,:128]!
+	vst1.32		{@X[2]},[$Xfer,:128]!
+	ldr		$Ki,[sp]			@ big RAW stall
+
+.Loop_neon:
+___
+	&Xupdate_16_31(\&body_00_19);
+	&Xupdate_16_31(\&body_00_19);
+	&Xupdate_16_31(\&body_00_19);
+	&Xupdate_16_31(\&body_00_19);
+	&Xupdate_32_79(\&body_00_19);
+	&Xupdate_32_79(\&body_20_39);
+	&Xupdate_32_79(\&body_20_39);
+	&Xupdate_32_79(\&body_20_39);
+	&Xupdate_32_79(\&body_20_39);
+	&Xupdate_32_79(\&body_20_39);
+	&Xupdate_32_79(\&body_40_59);
+	&Xupdate_32_79(\&body_40_59);
+	&Xupdate_32_79(\&body_40_59);
+	&Xupdate_32_79(\&body_40_59);
+	&Xupdate_32_79(\&body_40_59);
+	&Xupdate_32_79(\&body_20_39);
+	&Xuplast_80(\&body_20_39);
+	&Xloop(\&body_20_39);
+	&Xloop(\&body_20_39);
+	&Xloop(\&body_20_39);
+$code.=<<___;
+	ldmia	$ctx,{$Ki,$t0,$t1,$Xfer}	@ accumulate context
+	add	$a,$a,$Ki
+	ldr	$Ki,[$ctx,#16]
+	add	$b,$b,$t0
+	add	$c,$c,$t1
+	add	$d,$d,$Xfer
+	it	eq
+	moveq	sp,$saved_sp
+	add	$e,$e,$Ki
+	it	ne
+	ldrne	$Ki,[sp]
+	stmia	$ctx,{$a,$b,$c,$d,$e}
+	itt	ne
+	addne	$Xfer,sp,#3*16
+	bne	.Loop_neon
+
+	@ vldmia	sp!,{d8-d15}
+	ldmia	sp!,{r4-r12,pc}
+.size	sha1_block_data_order_neon,.-sha1_block_data_order_neon
+#endif
+___
+}}}
+#####################################################################
+# ARMv8 stuff
+#
+{{{
+my ($ABCD,$E,$E0,$E1)=map("q$_",(0..3));
+my @MSG=map("q$_",(4..7));
+my @Kxx=map("q$_",(8..11));
+my ($W0,$W1,$ABCD_SAVE)=map("q$_",(12..14));
+
+$code.=<<___;
+#if __ARM_MAX_ARCH__>=7
+
+# if defined(__thumb2__)
+#  define INST(a,b,c,d)	.byte	c,d|0xf,a,b
+# else
+#  define INST(a,b,c,d)	.byte	a,b,c,d|0x10
+# endif
+
+.type	sha1_block_data_order_armv8,%function
+.align	5
+sha1_block_data_order_armv8:
+.LARMv8:
+	vstmdb	sp!,{d8-d15}		@ ABI specification says so
+
+	veor	$E,$E,$E
+	adr	r3,.LK_00_19
+	vld1.32	{$ABCD},[$ctx]!
+	vld1.32	{$E\[0]},[$ctx]
+	sub	$ctx,$ctx,#16
+	vld1.32	{@Kxx[0]\[]},[r3,:32]!
+	vld1.32	{@Kxx[1]\[]},[r3,:32]!
+	vld1.32	{@Kxx[2]\[]},[r3,:32]!
+	vld1.32	{@Kxx[3]\[]},[r3,:32]
+
+.Loop_v8:
+	vld1.8		{@MSG[0]-@MSG[1]},[$inp]!
+	vld1.8		{@MSG[2]-@MSG[3]},[$inp]!
+	vrev32.8	@MSG[0],@MSG[0]
+	vrev32.8	@MSG[1],@MSG[1]
+
+	vadd.i32	$W0,@Kxx[0],@MSG[0]
+	vrev32.8	@MSG[2],@MSG[2]
+	vmov		$ABCD_SAVE,$ABCD	@ offload
+	subs		$len,$len,#1
+
+	vadd.i32	$W1,@Kxx[0],@MSG[1]
+	vrev32.8	@MSG[3],@MSG[3]
+	sha1h		$E1,$ABCD		@ 0
+	sha1c		$ABCD,$E,$W0
+	vadd.i32	$W0,@Kxx[$j],@MSG[2]
+	sha1su0		@MSG[0],@MSG[1],@MSG[2]
+___
+for ($j=0,$i=1;$i<20-3;$i++) {
+my $f=("c","p","m","p")[$i/5];
+$code.=<<___;
+	sha1h		$E0,$ABCD		@ $i
+	sha1$f		$ABCD,$E1,$W1
+	vadd.i32	$W1,@Kxx[$j],@MSG[3]
+	sha1su1		@MSG[0],@MSG[3]
+___
+$code.=<<___ if ($i<20-4);
+	sha1su0		@MSG[1],@MSG[2],@MSG[3]
+___
+	($E0,$E1)=($E1,$E0);	($W0,$W1)=($W1,$W0);
+	push(@MSG,shift(@MSG));	$j++ if ((($i+3)%5)==0);
+}
+$code.=<<___;
+	sha1h		$E0,$ABCD		@ $i
+	sha1p		$ABCD,$E1,$W1
+	vadd.i32	$W1,@Kxx[$j],@MSG[3]
+
+	sha1h		$E1,$ABCD		@ 18
+	sha1p		$ABCD,$E0,$W0
+
+	sha1h		$E0,$ABCD		@ 19
+	sha1p		$ABCD,$E1,$W1
+
+	vadd.i32	$E,$E,$E0
+	vadd.i32	$ABCD,$ABCD,$ABCD_SAVE
+	bne		.Loop_v8
+
+	vst1.32		{$ABCD},[$ctx]!
+	vst1.32		{$E\[0]},[$ctx]
+
+	vldmia	sp!,{d8-d15}
+	ret					@ bx lr
+.size	sha1_block_data_order_armv8,.-sha1_block_data_order_armv8
+#endif
+___
+}}}
+$code.=<<___;
+#if __ARM_MAX_ARCH__>=7
+.comm	OPENSSL_armcap_P,4,4
+#endif
+___
+
+{   my  %opcode = (
+	"sha1c"		=> 0xf2000c40,	"sha1p"		=> 0xf2100c40,
+	"sha1m"		=> 0xf2200c40,	"sha1su0"	=> 0xf2300c40,
+	"sha1h"		=> 0xf3b902c0,	"sha1su1"	=> 0xf3ba0380	);
+
+    sub unsha1 {
+	my ($mnemonic,$arg)=@_;
+
+	if ($arg =~ m/q([0-9]+)(?:,\s*q([0-9]+))?,\s*q([0-9]+)/o) {
+	    my $word = $opcode{$mnemonic}|(($1&7)<<13)|(($1&8)<<19)
+					 |(($2&7)<<17)|(($2&8)<<4)
+					 |(($3&7)<<1) |(($3&8)<<2);
+	    # since ARMv7 instructions are always encoded little-endian.
+	    # correct solution is to use .inst directive, but older
+	    # assemblers don't implement it:-(
+
+	    # this fix-up provides Thumb encoding in conjunction with INST
+	    $word &= ~0x10000000 if (($word & 0x0f000000) == 0x02000000);
+	    sprintf "INST(0x%02x,0x%02x,0x%02x,0x%02x)\t@ %s %s",
+			$word&0xff,($word>>8)&0xff,
+			($word>>16)&0xff,($word>>24)&0xff,
+			$mnemonic,$arg;
+	}
+    }
+}
+
+foreach (split($/,$code)) {
+	s/{q([0-9]+)\[\]}/sprintf "{d%d[],d%d[]}",2*$1,2*$1+1/eo	or
+	s/{q([0-9]+)\[0\]}/sprintf "{d%d[0]}",2*$1/eo;
+
+	s/\b(sha1\w+)\s+(q.*)/unsha1($1,$2)/geo;
+
+	s/\bret\b/bx	lr/o		or
+	s/\bbx\s+lr\b/.word\t0xe12fff1e/o;	# make it possible to compile with -march=armv4
+
+	print $_,$/;
+}
+
+close STDOUT; # enforce flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-armv8.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-armv8.pl
new file mode 100644
index 000000000..3ba871fed
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-armv8.pl
@@ -0,0 +1,364 @@
+#! /usr/bin/env perl
+# Copyright 2014-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# SHA1 for ARMv8.
+#
+# Performance in cycles per processed byte and improvement coefficient
+# over code generated with "default" compiler:
+#
+#		hardware-assisted	software(*)
+# Apple A7	2.31			4.13 (+14%)
+# Cortex-A53	2.24			8.03 (+97%)
+# Cortex-A57	2.35			7.88 (+74%)
+# Denver	2.13			3.97 (+0%)(**)
+# X-Gene				8.80 (+200%)
+# Mongoose	2.05			6.50 (+160%)
+# Kryo		1.88			8.00 (+90%)
+#
+# (*)	Software results are presented mostly for reference purposes.
+# (**)	Keep in mind that Denver relies on binary translation, which
+#	optimizes compiler output at run-time.
+
+$flavour = shift;
+$output  = shift;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+die "can't locate arm-xlate.pl";
+
+open OUT,"| \"$^X\" $xlate $flavour $output";
+*STDOUT=*OUT;
+
+($ctx,$inp,$num)=("x0","x1","x2");
+@Xw=map("w$_",(3..17,19));
+@Xx=map("x$_",(3..17,19));
+@V=($A,$B,$C,$D,$E)=map("w$_",(20..24));
+($t0,$t1,$t2,$K)=map("w$_",(25..28));
+
+
+sub BODY_00_19 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=($i+2)&15;
+
+$code.=<<___ if ($i<15 && !($i&1));
+	lsr	@Xx[$i+1],@Xx[$i],#32
+___
+$code.=<<___ if ($i<14 && !($i&1));
+	ldr	@Xx[$i+2],[$inp,#`($i+2)*4-64`]
+___
+$code.=<<___ if ($i<14 && ($i&1));
+#ifdef	__ARMEB__
+	ror	@Xx[$i+1],@Xx[$i+1],#32
+#else
+	rev32	@Xx[$i+1],@Xx[$i+1]
+#endif
+___
+$code.=<<___ if ($i<14);
+	bic	$t0,$d,$b
+	and	$t1,$c,$b
+	ror	$t2,$a,#27
+	add	$d,$d,$K		// future e+=K
+	orr	$t0,$t0,$t1
+	add	$e,$e,$t2		// e+=rot(a,5)
+	ror	$b,$b,#2
+	add	$d,$d,@Xw[($i+1)&15]	// future e+=X[i]
+	add	$e,$e,$t0		// e+=F(b,c,d)
+___
+$code.=<<___ if ($i==19);
+	movz	$K,#0xeba1
+	movk	$K,#0x6ed9,lsl#16
+___
+$code.=<<___ if ($i>=14);
+	 eor	@Xw[$j],@Xw[$j],@Xw[($j+2)&15]
+	bic	$t0,$d,$b
+	and	$t1,$c,$b
+	ror	$t2,$a,#27
+	 eor	@Xw[$j],@Xw[$j],@Xw[($j+8)&15]
+	add	$d,$d,$K		// future e+=K
+	orr	$t0,$t0,$t1
+	add	$e,$e,$t2		// e+=rot(a,5)
+	 eor	@Xw[$j],@Xw[$j],@Xw[($j+13)&15]
+	ror	$b,$b,#2
+	add	$d,$d,@Xw[($i+1)&15]	// future e+=X[i]
+	add	$e,$e,$t0		// e+=F(b,c,d)
+	 ror	@Xw[$j],@Xw[$j],#31
+___
+}
+
+sub BODY_40_59 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=($i+2)&15;
+
+$code.=<<___ if ($i==59);
+	movz	$K,#0xc1d6
+	movk	$K,#0xca62,lsl#16
+___
+$code.=<<___;
+	orr	$t0,$b,$c
+	and	$t1,$b,$c
+	 eor	@Xw[$j],@Xw[$j],@Xw[($j+2)&15]
+	ror	$t2,$a,#27
+	and	$t0,$t0,$d
+	add	$d,$d,$K		// future e+=K
+	 eor	@Xw[$j],@Xw[$j],@Xw[($j+8)&15]
+	add	$e,$e,$t2		// e+=rot(a,5)
+	orr	$t0,$t0,$t1
+	ror	$b,$b,#2
+	 eor	@Xw[$j],@Xw[$j],@Xw[($j+13)&15]
+	add	$d,$d,@Xw[($i+1)&15]	// future e+=X[i]
+	add	$e,$e,$t0		// e+=F(b,c,d)
+	 ror	@Xw[$j],@Xw[$j],#31
+___
+}
+
+sub BODY_20_39 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=($i+2)&15;
+
+$code.=<<___ if ($i==39);
+	movz	$K,#0xbcdc
+	movk	$K,#0x8f1b,lsl#16
+___
+$code.=<<___ if ($i<78);
+	 eor	@Xw[$j],@Xw[$j],@Xw[($j+2)&15]
+	eor	$t0,$d,$b
+	ror	$t2,$a,#27
+	add	$d,$d,$K		// future e+=K
+	 eor	@Xw[$j],@Xw[$j],@Xw[($j+8)&15]
+	eor	$t0,$t0,$c
+	add	$e,$e,$t2		// e+=rot(a,5)
+	ror	$b,$b,#2
+	 eor	@Xw[$j],@Xw[$j],@Xw[($j+13)&15]
+	add	$d,$d,@Xw[($i+1)&15]	// future e+=X[i]
+	add	$e,$e,$t0		// e+=F(b,c,d)
+	 ror	@Xw[$j],@Xw[$j],#31
+___
+$code.=<<___ if ($i==78);
+	ldp	@Xw[1],@Xw[2],[$ctx]
+	eor	$t0,$d,$b
+	ror	$t2,$a,#27
+	add	$d,$d,$K		// future e+=K
+	eor	$t0,$t0,$c
+	add	$e,$e,$t2		// e+=rot(a,5)
+	ror	$b,$b,#2
+	add	$d,$d,@Xw[($i+1)&15]	// future e+=X[i]
+	add	$e,$e,$t0		// e+=F(b,c,d)
+___
+$code.=<<___ if ($i==79);
+	ldp	@Xw[3],@Xw[4],[$ctx,#8]
+	eor	$t0,$d,$b
+	ror	$t2,$a,#27
+	eor	$t0,$t0,$c
+	add	$e,$e,$t2		// e+=rot(a,5)
+	ror	$b,$b,#2
+	ldr	@Xw[5],[$ctx,#16]
+	add	$e,$e,$t0		// e+=F(b,c,d)
+___
+}
+
+$code.=<<___;
+#include "arm_arch.h"
+
+.text
+
+.extern	OPENSSL_armcap_P
+.globl	sha1_block_data_order
+.type	sha1_block_data_order,%function
+.align	6
+sha1_block_data_order:
+#ifdef	__ILP32__
+	ldrsw	x16,.LOPENSSL_armcap_P
+#else
+	ldr	x16,.LOPENSSL_armcap_P
+#endif
+	adr	x17,.LOPENSSL_armcap_P
+	add	x16,x16,x17
+	ldr	w16,[x16]
+	tst	w16,#ARMV8_SHA1
+	b.ne	.Lv8_entry
+
+	stp	x29,x30,[sp,#-96]!
+	add	x29,sp,#0
+	stp	x19,x20,[sp,#16]
+	stp	x21,x22,[sp,#32]
+	stp	x23,x24,[sp,#48]
+	stp	x25,x26,[sp,#64]
+	stp	x27,x28,[sp,#80]
+
+	ldp	$A,$B,[$ctx]
+	ldp	$C,$D,[$ctx,#8]
+	ldr	$E,[$ctx,#16]
+
+.Loop:
+	ldr	@Xx[0],[$inp],#64
+	movz	$K,#0x7999
+	sub	$num,$num,#1
+	movk	$K,#0x5a82,lsl#16
+#ifdef	__ARMEB__
+	ror	$Xx[0],@Xx[0],#32
+#else
+	rev32	@Xx[0],@Xx[0]
+#endif
+	add	$E,$E,$K		// warm it up
+	add	$E,$E,@Xw[0]
+___
+for($i=0;$i<20;$i++)	{ &BODY_00_19($i,@V); unshift(@V,pop(@V)); }
+for(;$i<40;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+for(;$i<60;$i++)	{ &BODY_40_59($i,@V); unshift(@V,pop(@V)); }
+for(;$i<80;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	add	$B,$B,@Xw[2]
+	add	$C,$C,@Xw[3]
+	add	$A,$A,@Xw[1]
+	add	$D,$D,@Xw[4]
+	add	$E,$E,@Xw[5]
+	stp	$A,$B,[$ctx]
+	stp	$C,$D,[$ctx,#8]
+	str	$E,[$ctx,#16]
+	cbnz	$num,.Loop
+
+	ldp	x19,x20,[sp,#16]
+	ldp	x21,x22,[sp,#32]
+	ldp	x23,x24,[sp,#48]
+	ldp	x25,x26,[sp,#64]
+	ldp	x27,x28,[sp,#80]
+	ldr	x29,[sp],#96
+	ret
+.size	sha1_block_data_order,.-sha1_block_data_order
+___
+{{{
+my ($ABCD,$E,$E0,$E1)=map("v$_.16b",(0..3));
+my @MSG=map("v$_.16b",(4..7));
+my @Kxx=map("v$_.4s",(16..19));
+my ($W0,$W1)=("v20.4s","v21.4s");
+my $ABCD_SAVE="v22.16b";
+
+$code.=<<___;
+.type	sha1_block_armv8,%function
+.align	6
+sha1_block_armv8:
+.Lv8_entry:
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+
+	adr	x4,.Lconst
+	eor	$E,$E,$E
+	ld1.32	{$ABCD},[$ctx],#16
+	ld1.32	{$E}[0],[$ctx]
+	sub	$ctx,$ctx,#16
+	ld1.32	{@Kxx[0]-@Kxx[3]},[x4]
+
+.Loop_hw:
+	ld1	{@MSG[0]-@MSG[3]},[$inp],#64
+	sub	$num,$num,#1
+	rev32	@MSG[0],@MSG[0]
+	rev32	@MSG[1],@MSG[1]
+
+	add.i32	$W0,@Kxx[0],@MSG[0]
+	rev32	@MSG[2],@MSG[2]
+	orr	$ABCD_SAVE,$ABCD,$ABCD	// offload
+
+	add.i32	$W1,@Kxx[0],@MSG[1]
+	rev32	@MSG[3],@MSG[3]
+	sha1h	$E1,$ABCD
+	sha1c	$ABCD,$E,$W0		// 0
+	add.i32	$W0,@Kxx[$j],@MSG[2]
+	sha1su0	@MSG[0],@MSG[1],@MSG[2]
+___
+for ($j=0,$i=1;$i<20-3;$i++) {
+my $f=("c","p","m","p")[$i/5];
+$code.=<<___;
+	sha1h	$E0,$ABCD		// $i
+	sha1$f	$ABCD,$E1,$W1
+	add.i32	$W1,@Kxx[$j],@MSG[3]
+	sha1su1	@MSG[0],@MSG[3]
+___
+$code.=<<___ if ($i<20-4);
+	sha1su0	@MSG[1],@MSG[2],@MSG[3]
+___
+	($E0,$E1)=($E1,$E0);		($W0,$W1)=($W1,$W0);
+	push(@MSG,shift(@MSG));		$j++ if ((($i+3)%5)==0);
+}
+$code.=<<___;
+	sha1h	$E0,$ABCD		// $i
+	sha1p	$ABCD,$E1,$W1
+	add.i32	$W1,@Kxx[$j],@MSG[3]
+
+	sha1h	$E1,$ABCD		// 18
+	sha1p	$ABCD,$E0,$W0
+
+	sha1h	$E0,$ABCD		// 19
+	sha1p	$ABCD,$E1,$W1
+
+	add.i32	$E,$E,$E0
+	add.i32	$ABCD,$ABCD,$ABCD_SAVE
+
+	cbnz	$num,.Loop_hw
+
+	st1.32	{$ABCD},[$ctx],#16
+	st1.32	{$E}[0],[$ctx]
+
+	ldr	x29,[sp],#16
+	ret
+.size	sha1_block_armv8,.-sha1_block_armv8
+.align	6
+.Lconst:
+.long	0x5a827999,0x5a827999,0x5a827999,0x5a827999	//K_00_19
+.long	0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1	//K_20_39
+.long	0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc	//K_40_59
+.long	0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6	//K_60_79
+.LOPENSSL_armcap_P:
+#ifdef	__ILP32__
+.long	OPENSSL_armcap_P-.
+#else
+.quad	OPENSSL_armcap_P-.
+#endif
+.asciz	"SHA1 block transform for ARMv8, CRYPTOGAMS by <appro\@openssl.org>"
+.align	2
+.comm	OPENSSL_armcap_P,4,4
+___
+}}}
+
+{   my	%opcode = (
+	"sha1c"		=> 0x5e000000,	"sha1p"		=> 0x5e001000,
+	"sha1m"		=> 0x5e002000,	"sha1su0"	=> 0x5e003000,
+	"sha1h"		=> 0x5e280800,	"sha1su1"	=> 0x5e281800	);
+
+    sub unsha1 {
+	my ($mnemonic,$arg)=@_;
+
+	$arg =~ m/[qv]([0-9]+)[^,]*,\s*[qv]([0-9]+)[^,]*(?:,\s*[qv]([0-9]+))?/o
+	&&
+	sprintf ".inst\t0x%08x\t//%s %s",
+			$opcode{$mnemonic}|$1|($2<<5)|($3<<16),
+			$mnemonic,$arg;
+    }
+}
+
+foreach(split("\n",$code)) {
+
+	s/\`([^\`]*)\`/eval($1)/geo;
+
+	s/\b(sha1\w+)\s+([qv].*)/unsha1($1,$2)/geo;
+
+	s/\.\w?32\b//o		and s/\.16b/\.4s/go;
+	m/(ld|st)1[^\[]+\[0\]/o	and s/\.4s/\.s/go;
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-c64xplus.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-c64xplus.pl
new file mode 100644
index 000000000..4db2bcb06
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-c64xplus.pl
@@ -0,0 +1,337 @@
+#! /usr/bin/env perl
+# Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# SHA1 for C64x+.
+#
+# November 2011
+#
+# If compared to compiler-generated code with similar characteristics,
+# i.e. compiled with OPENSSL_SMALL_FOOTPRINT and utilizing SPLOOPs,
+# this implementation is 25% smaller and >2x faster. In absolute terms
+# performance is (quite impressive) ~6.5 cycles per processed byte.
+# Fully unrolled assembler would be ~5x larger and is likely to be
+# ~15% faster. It would be free from references to intermediate ring
+# buffer, but put more pressure on L1P [both because the code would be
+# larger and won't be using SPLOOP buffer]. There are no plans to
+# realize fully unrolled variant though...
+#
+# !!! Note that this module uses AMR, which means that all interrupt
+# service routines are expected to preserve it and for own well-being
+# zero it upon entry.
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+($CTX,$INP,$NUM) = ("A4","B4","A6");		# arguments
+
+($A,$B,$C,$D,$E, $Arot,$F,$F0,$T,$K) = map("A$_",(16..20, 21..25));
+($X0,$X2,$X8,$X13) = ("A26","B26","A27","B27");
+($TX0,$TX1,$TX2,$TX3) = map("B$_",(28..31));
+($XPA,$XPB) = ("A5","B5");			# X circular buffer
+($Actx,$Bctx,$Cctx,$Dctx,$Ectx) = map("A$_",(3,6..9));	# zaps $NUM
+
+$code=<<___;
+	.text
+
+	.if	.ASSEMBLER_VERSION<7000000
+	.asg	0,__TI_EABI__
+	.endif
+	.if	__TI_EABI__
+	.asg	sha1_block_data_order,_sha1_block_data_order
+	.endif
+
+	.asg	B3,RA
+	.asg	A15,FP
+	.asg	B15,SP
+
+	.if	.BIG_ENDIAN
+	.asg	MV,SWAP2
+	.asg	MV,SWAP4
+	.endif
+
+	.global	_sha1_block_data_order
+_sha1_block_data_order:
+	.asmfunc stack_usage(64)
+	MV	$NUM,A0			; reassign $NUM
+||	MVK	-64,B0
+  [!A0]	BNOP	RA			; if ($NUM==0) return;
+|| [A0]	STW	FP,*SP--[16]		; save frame pointer and alloca(64)
+|| [A0]	MV	SP,FP
+   [A0]	LDW	*${CTX}[0],$A		; load A-E...
+|| [A0]	AND	B0,SP,SP		; align stack at 64 bytes
+   [A0]	LDW	*${CTX}[1],$B
+|| [A0]	SUBAW	SP,2,SP			; reserve two words above buffer
+   [A0]	LDW	*${CTX}[2],$C
+|| [A0]	MVK	0x00404,B0
+   [A0]	LDW	*${CTX}[3],$D
+|| [A0]	MVKH	0x50000,B0		; 0x050404, 64 bytes for $XP[AB]
+   [A0]	LDW	*${CTX}[4],$E
+|| [A0]	MVC	B0,AMR			; setup circular addressing
+	LDNW	*${INP}++,$TX1		; pre-fetch input
+	NOP	1
+
+loop?:
+	MVK	0x00007999,$K
+||	ADDAW	SP,2,$XPA
+||	SUB	A0,1,A0
+||	MVK	13,B0
+	MVKH	0x5a820000,$K		; K_00_19
+||	ADDAW	SP,2,$XPB
+||	MV	$A,$Actx
+||	MV	$B,$Bctx
+;;==================================================
+	SPLOOPD	5			; BODY_00_13
+||	MV	$C,$Cctx
+||	MV	$D,$Dctx
+||	MV	$E,$Ectx
+||	MVC	B0,ILC
+
+	ROTL	$A,5,$Arot
+||	AND	$C,$B,$F
+||	ANDN	$D,$B,$F0
+||	ADD	$K,$E,$T		; T=E+K
+
+	XOR	$F0,$F,$F		; F_00_19(B,C,D)
+||	MV	$D,$E			; E=D
+||	MV	$C,$D			; D=C
+||	SWAP2	$TX1,$TX2
+||	LDNW	*${INP}++,$TX1
+
+	ADD	$F,$T,$T		; T+=F_00_19(B,C,D)
+||	ROTL	$B,30,$C		; C=ROL(B,30)
+||	SWAP4	$TX2,$TX3		; byte swap
+
+	ADD	$Arot,$T,$T		; T+=ROL(A,5)
+||	MV	$A,$B			; B=A
+
+	ADD	$TX3,$T,$A		; A=T+Xi
+||	STW	$TX3,*${XPB}++
+	SPKERNEL
+;;==================================================
+	ROTL	$A,5,$Arot		; BODY_14
+||	AND	$C,$B,$F
+||	ANDN	$D,$B,$F0
+||	ADD	$K,$E,$T		; T=E+K
+
+	XOR	$F0,$F,$F		; F_00_19(B,C,D)
+||	MV	$D,$E			; E=D
+||	MV	$C,$D			; D=C
+||	SWAP2	$TX1,$TX2
+||	LDNW	*${INP}++,$TX1
+
+	ADD	$F,$T,$T		; T+=F_00_19(B,C,D)
+||	ROTL	$B,30,$C		; C=ROL(B,30)
+||	SWAP4	$TX2,$TX2		; byte swap
+||	LDW	*${XPA}++,$X0		; fetches from X ring buffer are
+||	LDW	*${XPB}[4],$X2		; 2 iterations ahead
+
+	ADD	$Arot,$T,$T		; T+=ROL(A,5)
+||	MV	$A,$B			; B=A
+||	LDW	*${XPA}[7],$X8
+||	MV	$TX3,$X13		; ||	LDW	*${XPB}[15],$X13
+||	MV	$TX2,$TX3
+
+	ADD	$TX2,$T,$A		; A=T+Xi
+||	STW	$TX2,*${XPB}++
+;;==================================================
+	ROTL	$A,5,$Arot		; BODY_15
+||	AND	$C,$B,$F
+||	ANDN	$D,$B,$F0
+||	ADD	$K,$E,$T		; T=E+K
+
+	XOR	$F0,$F,$F		; F_00_19(B,C,D)
+||	MV	$D,$E			; E=D
+||	MV	$C,$D			; D=C
+||	SWAP2	$TX1,$TX2
+
+	ADD	$F,$T,$T		; T+=F_00_19(B,C,D)
+||	ROTL	$B,30,$C		; C=ROL(B,30)
+||	SWAP4	$TX2,$TX2		; byte swap
+||	XOR	$X0,$X2,$TX0		; Xupdate XORs are 1 iteration ahead
+||	LDW	*${XPA}++,$X0
+||	LDW	*${XPB}[4],$X2
+
+	ADD	$Arot,$T,$T		; T+=ROL(A,5)
+||	MV	$A,$B			; B=A
+||	XOR	$X8,$X13,$TX1
+||	LDW	*${XPA}[7],$X8
+||	MV	$TX3,$X13		; ||	LDW	*${XPB}[15],$X13
+||	MV	$TX2,$TX3
+
+	ADD	$TX2,$T,$A		; A=T+Xi
+||	STW	$TX2,*${XPB}++
+||	XOR	$TX0,$TX1,$TX1
+||	MVK	3,B0
+;;==================================================
+	SPLOOPD	5			; BODY_16_19
+||	MVC	B0,ILC
+
+	ROTL	$A,5,$Arot
+||	AND	$C,$B,$F
+||	ANDN	$D,$B,$F0
+||	ADD	$K,$E,$T		; T=E+K
+||	ROTL	$TX1,1,$TX2		; Xupdate output
+
+	XOR	$F0,$F,$F		; F_00_19(B,C,D)
+||	MV	$D,$E			; E=D
+||	MV	$C,$D			; D=C
+
+	ADD	$F,$T,$T		; T+=F_00_19(B,C,D)
+||	ROTL	$B,30,$C		; C=ROL(B,30)
+||	XOR	$X0,$X2,$TX0
+||	LDW	*${XPA}++,$X0
+||	LDW	*${XPB}[4],$X2
+
+	ADD	$Arot,$T,$T		; T+=ROL(A,5)
+||	MV	$A,$B			; B=A
+||	XOR	$X8,$X13,$TX1
+||	LDW	*${XPA}[7],$X8
+||	MV	$TX3,$X13		; ||	LDW	*${XPB}[15],$X13
+||	MV	$TX2,$TX3
+
+	ADD	$TX2,$T,$A		; A=T+Xi
+||	STW	$TX2,*${XPB}++
+||	XOR	$TX0,$TX1,$TX1
+	SPKERNEL
+
+	MVK	0xffffeba1,$K
+||	MVK	19,B0
+	MVKH	0x6ed90000,$K		; K_20_39
+___
+sub BODY_20_39 {
+$code.=<<___;
+;;==================================================
+	SPLOOPD	5			; BODY_20_39
+||	MVC	B0,ILC
+
+	ROTL	$A,5,$Arot
+||	XOR	$B,$C,$F
+||	ADD	$K,$E,$T		; T=E+K
+||	ROTL	$TX1,1,$TX2		; Xupdate output
+
+	XOR	$D,$F,$F		; F_20_39(B,C,D)
+||	MV	$D,$E			; E=D
+||	MV	$C,$D			; D=C
+
+	ADD	$F,$T,$T		; T+=F_20_39(B,C,D)
+||	ROTL	$B,30,$C		; C=ROL(B,30)
+||	XOR	$X0,$X2,$TX0
+||	LDW	*${XPA}++,$X0
+||	LDW	*${XPB}[4],$X2
+
+	ADD	$Arot,$T,$T		; T+=ROL(A,5)
+||	MV	$A,$B			; B=A
+||	XOR	$X8,$X13,$TX1
+||	LDW	*${XPA}[7],$X8
+||	MV	$TX3,$X13		; ||	LDW	*${XPB}[15],$X13
+||	MV	$TX2,$TX3
+
+	ADD	$TX2,$T,$A		; A=T+Xi
+||	STW	$TX2,*${XPB}++		; last one is redundant
+||	XOR	$TX0,$TX1,$TX1
+	SPKERNEL
+___
+$code.=<<___ if (!shift);
+	MVK	0xffffbcdc,$K
+	MVKH	0x8f1b0000,$K		; K_40_59
+___
+}	&BODY_20_39();
+$code.=<<___;
+;;==================================================
+	SPLOOPD	5			; BODY_40_59
+||	MVC	B0,ILC
+||	AND	$B,$C,$F
+||	AND	$B,$D,$F0
+
+	ROTL	$A,5,$Arot
+||	XOR	$F0,$F,$F
+||	AND	$C,$D,$F0
+||	ADD	$K,$E,$T		; T=E+K
+||	ROTL	$TX1,1,$TX2		; Xupdate output
+
+	XOR	$F0,$F,$F		; F_40_59(B,C,D)
+||	MV	$D,$E			; E=D
+||	MV	$C,$D			; D=C
+
+	ADD	$F,$T,$T		; T+=F_40_59(B,C,D)
+||	ROTL	$B,30,$C		; C=ROL(B,30)
+||	XOR	$X0,$X2,$TX0
+||	LDW	*${XPA}++,$X0
+||	LDW	*${XPB}[4],$X2
+
+	ADD	$Arot,$T,$T		; T+=ROL(A,5)
+||	MV	$A,$B			; B=A
+||	XOR	$X8,$X13,$TX1
+||	LDW	*${XPA}[7],$X8
+||	MV	$TX3,$X13		; ||	LDW	*${XPB}[15],$X13
+||	MV	$TX2,$TX3
+
+	ADD	$TX2,$T,$A		; A=T+Xi
+||	STW	$TX2,*${XPB}++
+||	XOR	$TX0,$TX1,$TX1
+||	AND	$B,$C,$F
+||	AND	$B,$D,$F0
+	SPKERNEL
+
+	MVK	0xffffc1d6,$K
+||	MVK	18,B0
+	MVKH	0xca620000,$K		; K_60_79
+___
+	&BODY_20_39(-1);		# BODY_60_78
+$code.=<<___;
+;;==================================================
+   [A0]	B	loop?
+||	ROTL	$A,5,$Arot		; BODY_79
+||	XOR	$B,$C,$F
+||	ROTL	$TX1,1,$TX2		; Xupdate output
+
+   [A0]	LDNW	*${INP}++,$TX1		; pre-fetch input
+||	ADD	$K,$E,$T		; T=E+K
+||	XOR	$D,$F,$F		; F_20_39(B,C,D)
+
+	ADD	$F,$T,$T		; T+=F_20_39(B,C,D)
+||	ADD	$Ectx,$D,$E		; E=D,E+=Ectx
+||	ADD	$Dctx,$C,$D		; D=C,D+=Dctx
+||	ROTL	$B,30,$C		; C=ROL(B,30)
+
+	ADD	$Arot,$T,$T		; T+=ROL(A,5)
+||	ADD	$Bctx,$A,$B		; B=A,B+=Bctx
+
+	ADD	$TX2,$T,$A		; A=T+Xi
+
+	ADD	$Actx,$A,$A		; A+=Actx
+||	ADD	$Cctx,$C,$C		; C+=Cctx
+;; end of loop?
+
+	BNOP	RA			; return
+||	MV	FP,SP			; restore stack pointer
+||	LDW	*FP[0],FP		; restore frame pointer
+	STW	$A,*${CTX}[0]		; emit A-E...
+||	MVK	0,B0
+	STW	$B,*${CTX}[1]
+||	MVC	B0,AMR			; clear AMR
+	STW	$C,*${CTX}[2]
+	STW	$D,*${CTX}[3]
+	STW	$E,*${CTX}[4]
+	.endasmfunc
+
+	.sect	.const
+	.cstring "SHA1 block transform for C64x+, CRYPTOGAMS by <appro\@openssl.org>"
+	.align	4
+___
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-ia64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-ia64.pl
new file mode 100644
index 000000000..bf1d2ebeb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-ia64.pl
@@ -0,0 +1,314 @@
+#! /usr/bin/env perl
+# Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# Eternal question is what's wrong with compiler generated code? The
+# trick is that it's possible to reduce the number of shifts required
+# to perform rotations by maintaining copy of 32-bit value in upper
+# bits of 64-bit register. Just follow mux2 and shrp instructions...
+# Performance under big-endian OS such as HP-UX is 179MBps*1GHz, which
+# is >50% better than HP C and >2x better than gcc.
+
+$output = pop;
+
+$code=<<___;
+.ident  \"sha1-ia64.s, version 1.3\"
+.ident  \"IA-64 ISA artwork by Andy Polyakov <appro\@fy.chalmers.se>\"
+.explicit
+
+___
+
+
+if ($^O eq "hpux") {
+    $ADDP="addp4";
+    for (@ARGV) { $ADDP="add" if (/[\+DD|\-mlp]64/); }
+} else { $ADDP="add"; }
+
+#$human=1;
+if ($human) {	# useful for visual code auditing...
+	($A,$B,$C,$D,$E)   = ("A","B","C","D","E");
+	($h0,$h1,$h2,$h3,$h4) = ("h0","h1","h2","h3","h4");
+	($K_00_19, $K_20_39, $K_40_59, $K_60_79) =
+	    (	"K_00_19","K_20_39","K_40_59","K_60_79"	);
+	@X= (	"X0", "X1", "X2", "X3", "X4", "X5", "X6", "X7",
+		"X8", "X9","X10","X11","X12","X13","X14","X15"	);
+}
+else {
+	($A,$B,$C,$D,$E)   =    ("loc0","loc1","loc2","loc3","loc4");
+	($h0,$h1,$h2,$h3,$h4) = ("loc5","loc6","loc7","loc8","loc9");
+	($K_00_19, $K_20_39, $K_40_59, $K_60_79) =
+	    (	"r14", "r15", "loc10", "loc11"	);
+	@X= (	"r16", "r17", "r18", "r19", "r20", "r21", "r22", "r23",
+		"r24", "r25", "r26", "r27", "r28", "r29", "r30", "r31"	);
+}
+
+sub BODY_00_15 {
+local	*code=shift;
+my	($i,$a,$b,$c,$d,$e)=@_;
+my	$j=$i+1;
+my	$Xn=@X[$j%16];
+
+$code.=<<___ if ($i==0);
+{ .mmi;	ld1	$X[$i]=[inp],2		    // MSB
+	ld1	tmp2=[tmp3],2		};;
+{ .mmi;	ld1	tmp0=[inp],2
+	ld1	tmp4=[tmp3],2		    // LSB
+	dep	$X[$i]=$X[$i],tmp2,8,8	};;
+___
+if ($i<15) {
+	$code.=<<___;
+{ .mmi;	ld1	$Xn=[inp],2		    // forward Xload
+	nop.m	0x0
+	dep	tmp1=tmp0,tmp4,8,8	};;
+{ .mmi;	ld1	tmp2=[tmp3],2		    // forward Xload
+	and	tmp4=$c,$b
+	dep	$X[$i]=$X[$i],tmp1,16,16} //;;
+{ .mmi;	add	$e=$e,$K_00_19		    // e+=K_00_19
+	andcm	tmp1=$d,$b
+	dep.z	tmp5=$a,5,27		};; // a<<5
+{ .mmi;	add	$e=$e,$X[$i]		    // e+=Xload
+	or	tmp4=tmp4,tmp1		    // F_00_19(b,c,d)=(b&c)|(~b&d)
+	extr.u	tmp1=$a,27,5		};; // a>>27
+{ .mmi;	ld1	tmp0=[inp],2		    // forward Xload
+	add	$e=$e,tmp4		    // e+=F_00_19(b,c,d)
+	shrp	$b=tmp6,tmp6,2		}   // b=ROTATE(b,30)
+{ .mmi;	ld1	tmp4=[tmp3],2		    // forward Xload
+	or	tmp5=tmp1,tmp5		    // ROTATE(a,5)
+	mux2	tmp6=$a,0x44		};; // see b in next iteration
+{ .mii;	add	$e=$e,tmp5		    // e+=ROTATE(a,5)
+	dep	$Xn=$Xn,tmp2,8,8	    // forward Xload
+	mux2	$X[$i]=$X[$i],0x44	} //;;
+
+___
+	}
+else	{
+	$code.=<<___;
+{ .mii;	and	tmp3=$c,$b
+	dep	tmp1=tmp0,tmp4,8,8;;
+	dep	$X[$i]=$X[$i],tmp1,16,16} //;;
+{ .mmi;	add	$e=$e,$K_00_19		    // e+=K_00_19
+	andcm	tmp1=$d,$b
+	dep.z	tmp5=$a,5,27		};; // a<<5
+{ .mmi;	add	$e=$e,$X[$i]		    // e+=Xupdate
+	or	tmp4=tmp3,tmp1		    // F_00_19(b,c,d)=(b&c)|(~b&d)
+	extr.u	tmp1=$a,27,5		}   // a>>27
+{ .mmi;	xor	$Xn=$Xn,$X[($j+2)%16]	    // forward Xupdate
+	xor	tmp3=$X[($j+8)%16],$X[($j+13)%16] // forward Xupdate
+	nop.i	0			};;
+{ .mmi;	add	$e=$e,tmp4		    // e+=F_00_19(b,c,d)
+	xor	$Xn=$Xn,tmp3		    // forward Xupdate
+	shrp	$b=tmp6,tmp6,2		}   // b=ROTATE(b,30)
+{ .mmi; or	tmp1=tmp1,tmp5		    // ROTATE(a,5)
+	mux2	tmp6=$a,0x44		};; // see b in next iteration
+{ .mii;	add	$e=$e,tmp1		    // e+=ROTATE(a,5)
+	shrp	$Xn=$Xn,$Xn,31		    // ROTATE(x[0]^x[2]^x[8]^x[13],1)
+	mux2	$X[$i]=$X[$i],0x44	};;
+
+___
+	}
+}
+
+sub BODY_16_19 {
+local	*code=shift;
+my	($i,$a,$b,$c,$d,$e)=@_;
+my	$j=$i+1;
+my	$Xn=@X[$j%16];
+
+$code.=<<___;
+{ .mib;	add	$e=$e,$K_00_19		    // e+=K_00_19
+	dep.z	tmp5=$a,5,27		}   // a<<5
+{ .mib;	andcm	tmp1=$d,$b
+	and	tmp0=$c,$b		};;
+{ .mmi;	add	$e=$e,$X[$i%16]		    // e+=Xupdate
+	or	tmp0=tmp0,tmp1		    // F_00_19(b,c,d)=(b&c)|(~b&d)
+	extr.u	tmp1=$a,27,5		}   // a>>27
+{ .mmi;	xor	$Xn=$Xn,$X[($j+2)%16]	    // forward Xupdate
+	xor	tmp3=$X[($j+8)%16],$X[($j+13)%16]	// forward Xupdate
+	nop.i	0			};;
+{ .mmi;	add	$e=$e,tmp0		    // f+=F_00_19(b,c,d)
+	xor	$Xn=$Xn,tmp3		    // forward Xupdate
+	shrp	$b=tmp6,tmp6,2		}   // b=ROTATE(b,30)
+{ .mmi;	or	tmp1=tmp1,tmp5		    // ROTATE(a,5)
+	mux2	tmp6=$a,0x44		};; // see b in next iteration
+{ .mii;	add	$e=$e,tmp1		    // e+=ROTATE(a,5)
+	shrp	$Xn=$Xn,$Xn,31		    // ROTATE(x[0]^x[2]^x[8]^x[13],1)
+	nop.i	0			};;
+
+___
+}
+
+sub BODY_20_39 {
+local	*code=shift;
+my	($i,$a,$b,$c,$d,$e,$Konst)=@_;
+	$Konst = $K_20_39 if (!defined($Konst));
+my	$j=$i+1;
+my	$Xn=@X[$j%16];
+
+if ($i<79) {
+$code.=<<___;
+{ .mib;	add	$e=$e,$Konst		    // e+=K_XX_XX
+	dep.z	tmp5=$a,5,27		}   // a<<5
+{ .mib;	xor	tmp0=$c,$b
+	xor	$Xn=$Xn,$X[($j+2)%16]	};; // forward Xupdate
+{ .mib;	add	$e=$e,$X[$i%16]		    // e+=Xupdate
+	extr.u	tmp1=$a,27,5		}   // a>>27
+{ .mib;	xor	tmp0=tmp0,$d		    // F_20_39(b,c,d)=b^c^d
+	xor	$Xn=$Xn,$X[($j+8)%16]	};; // forward Xupdate
+{ .mmi;	add	$e=$e,tmp0		    // e+=F_20_39(b,c,d)
+	xor	$Xn=$Xn,$X[($j+13)%16]	    // forward Xupdate
+	shrp	$b=tmp6,tmp6,2		}   // b=ROTATE(b,30)
+{ .mmi;	or	tmp1=tmp1,tmp5		    // ROTATE(a,5)
+	mux2	tmp6=$a,0x44		};; // see b in next iteration
+{ .mii;	add	$e=$e,tmp1		    // e+=ROTATE(a,5)
+	shrp	$Xn=$Xn,$Xn,31		    // ROTATE(x[0]^x[2]^x[8]^x[13],1)
+	nop.i	0			};;
+
+___
+}
+else {
+$code.=<<___;
+{ .mib;	add	$e=$e,$Konst		    // e+=K_60_79
+	dep.z	tmp5=$a,5,27		}   // a<<5
+{ .mib;	xor	tmp0=$c,$b
+	add	$h1=$h1,$a		};; // wrap up
+{ .mib;	add	$e=$e,$X[$i%16]		    // e+=Xupdate
+	extr.u	tmp1=$a,27,5		}   // a>>27
+{ .mib;	xor	tmp0=tmp0,$d		    // F_20_39(b,c,d)=b^c^d
+	add	$h3=$h3,$c		};; // wrap up
+{ .mmi;	add	$e=$e,tmp0		    // e+=F_20_39(b,c,d)
+	or	tmp1=tmp1,tmp5		    // ROTATE(a,5)
+	shrp	$b=tmp6,tmp6,2		};; // b=ROTATE(b,30) ;;?
+{ .mmi;	add	$e=$e,tmp1		    // e+=ROTATE(a,5)
+	add	tmp3=1,inp		    // used in unaligned codepath
+	add	$h4=$h4,$d		};; // wrap up
+
+___
+}
+}
+
+sub BODY_40_59 {
+local	*code=shift;
+my	($i,$a,$b,$c,$d,$e)=@_;
+my	$j=$i+1;
+my	$Xn=@X[$j%16];
+
+$code.=<<___;
+{ .mib;	add	$e=$e,$K_40_59		    // e+=K_40_59
+	dep.z	tmp5=$a,5,27		}   // a<<5
+{ .mib;	and	tmp1=$c,$d
+	xor	tmp0=$c,$d		};;
+{ .mmi;	add	$e=$e,$X[$i%16]		    // e+=Xupdate
+	add	tmp5=tmp5,tmp1		    // a<<5+(c&d)
+	extr.u	tmp1=$a,27,5		}   // a>>27
+{ .mmi;	and	tmp0=tmp0,$b
+	xor	$Xn=$Xn,$X[($j+2)%16]	    // forward Xupdate
+	xor	tmp3=$X[($j+8)%16],$X[($j+13)%16] };;	// forward Xupdate
+{ .mmi;	add	$e=$e,tmp0		    // e+=b&(c^d)
+	add	tmp5=tmp5,tmp1		    // ROTATE(a,5)+(c&d)
+	shrp	$b=tmp6,tmp6,2		}   // b=ROTATE(b,30)
+{ .mmi;	xor	$Xn=$Xn,tmp3
+	mux2	tmp6=$a,0x44		};; // see b in next iteration
+{ .mii;	add	$e=$e,tmp5		    // e+=ROTATE(a,5)+(c&d)
+	shrp	$Xn=$Xn,$Xn,31		    // ROTATE(x[0]^x[2]^x[8]^x[13],1)
+	nop.i	0x0			};;
+
+___
+}
+sub BODY_60_79	{ &BODY_20_39(@_,$K_60_79); }
+
+$code.=<<___;
+.text
+
+tmp0=r8;
+tmp1=r9;
+tmp2=r10;
+tmp3=r11;
+ctx=r32;	// in0
+inp=r33;	// in1
+
+// void sha1_block_data_order(SHA_CTX *c,const void *p,size_t num);
+.global	sha1_block_data_order#
+.proc	sha1_block_data_order#
+.align	32
+sha1_block_data_order:
+	.prologue
+{ .mmi;	alloc	tmp1=ar.pfs,3,14,0,0
+	$ADDP	tmp0=4,ctx
+	.save	ar.lc,r3
+	mov	r3=ar.lc		}
+{ .mmi;	$ADDP	ctx=0,ctx
+	$ADDP	inp=0,inp
+	mov	r2=pr			};;
+tmp4=in2;
+tmp5=loc12;
+tmp6=loc13;
+	.body
+{ .mlx;	ld4	$h0=[ctx],8
+	movl	$K_00_19=0x5a827999	}
+{ .mlx;	ld4	$h1=[tmp0],8
+	movl	$K_20_39=0x6ed9eba1	};;
+{ .mlx;	ld4	$h2=[ctx],8
+	movl	$K_40_59=0x8f1bbcdc	}
+{ .mlx;	ld4	$h3=[tmp0]
+	movl	$K_60_79=0xca62c1d6	};;
+{ .mmi;	ld4	$h4=[ctx],-16
+	add	in2=-1,in2		    // adjust num for ar.lc
+	mov	ar.ec=1			};;
+{ .mmi;	nop.m	0
+	add	tmp3=1,inp
+	mov	ar.lc=in2		};; // brp.loop.imp: too far
+
+.Ldtop:
+{ .mmi;	mov	$A=$h0
+	mov	$B=$h1
+	mux2	tmp6=$h1,0x44		}
+{ .mmi;	mov	$C=$h2
+	mov	$D=$h3
+	mov	$E=$h4			};;
+
+___
+
+{ my $i;
+  my @V=($A,$B,$C,$D,$E);
+
+	for($i=0;$i<16;$i++)	{ &BODY_00_15(\$code,$i,@V); unshift(@V,pop(@V)); }
+	for(;$i<20;$i++)	{ &BODY_16_19(\$code,$i,@V); unshift(@V,pop(@V)); }
+	for(;$i<40;$i++)	{ &BODY_20_39(\$code,$i,@V); unshift(@V,pop(@V)); }
+	for(;$i<60;$i++)	{ &BODY_40_59(\$code,$i,@V); unshift(@V,pop(@V)); }
+	for(;$i<80;$i++)	{ &BODY_60_79(\$code,$i,@V); unshift(@V,pop(@V)); }
+
+	(($V[0] eq $A) and ($V[4] eq $E)) or die;	# double-check
+}
+
+$code.=<<___;
+{ .mmb;	add	$h0=$h0,$A
+	add	$h2=$h2,$C
+	br.ctop.dptk.many	.Ldtop	};;
+.Ldend:
+{ .mmi;	add	tmp0=4,ctx
+	mov	ar.lc=r3		};;
+{ .mmi;	st4	[ctx]=$h0,8
+	st4	[tmp0]=$h1,8		};;
+{ .mmi;	st4	[ctx]=$h2,8
+	st4	[tmp0]=$h3		};;
+{ .mib;	st4	[ctx]=$h4,-16
+	mov	pr=r2,0x1ffff
+	br.ret.sptk.many	b0	};;
+.endp	sha1_block_data_order#
+stringz	"SHA1 block transform for IA64, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+open STDOUT,">$output" if $output;
+print $code;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-mb-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-mb-x86_64.pl
new file mode 100644
index 000000000..443b64983
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-mb-x86_64.pl
@@ -0,0 +1,1628 @@
+#! /usr/bin/env perl
+# Copyright 2013-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# Multi-buffer SHA1 procedure processes n buffers in parallel by
+# placing buffer data to designated lane of SIMD register. n is
+# naturally limited to 4 on pre-AVX2 processors and to 8 on
+# AVX2-capable processors such as Haswell.
+#
+#		this	+aesni(i)	sha1	aesni-sha1	gain(iv)
+# -------------------------------------------------------------------
+# Westmere(ii)	10.7/n	+1.28=3.96(n=4)	5.30	6.66		+68%
+# Atom(ii)	18.1/n	+3.93=8.46(n=4)	9.37	12.8		+51%
+# Sandy Bridge	(8.16	+5.15=13.3)/n	4.99	5.98		+80%
+# Ivy Bridge	(8.08	+5.14=13.2)/n	4.60	5.54		+68%
+# Haswell(iii)	(8.96	+5.00=14.0)/n	3.57	4.55		+160%
+# Skylake	(8.70	+5.00=13.7)/n	3.64	4.20		+145%
+# Bulldozer	(9.76	+5.76=15.5)/n	5.95	6.37		+64%
+#
+# (i)	multi-block CBC encrypt with 128-bit key;
+# (ii)	(HASH+AES)/n does not apply to Westmere for n>3 and Atom,
+#	because of lower AES-NI instruction throughput;
+# (iii)	"this" is for n=8, when we gather twice as much data, result
+#	for n=4 is 8.00+4.44=12.4;
+# (iv)	presented improvement coefficients are asymptotic limits and
+#	in real-life application are somewhat lower, e.g. for 2KB
+#	fragments they range from 30% to 100% (on Haswell);
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+$avx=0;
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.19) + ($1>=2.22);
+}
+
+if (!$avx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	   `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.09) + ($1>=2.10);
+}
+
+if (!$avx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	   `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$avx = ($1>=10) + ($1>=11);
+}
+
+if (!$avx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([3-9]\.[0-9]+)/) {
+	$avx = ($2>=3.0) + ($2>3.0);
+}
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+# void sha1_multi_block (
+#     struct {	unsigned int A[8];
+#		unsigned int B[8];
+#		unsigned int C[8];
+#		unsigned int D[8];
+#		unsigned int E[8];	} *ctx,
+#     struct {	void *ptr; int blocks;	} inp[8],
+#     int num);		/* 1 or 2 */
+#
+$ctx="%rdi";	# 1st arg
+$inp="%rsi";	# 2nd arg
+$num="%edx";
+@ptr=map("%r$_",(8..11));
+$Tbl="%rbp";
+
+@V=($A,$B,$C,$D,$E)=map("%xmm$_",(0..4));
+($t0,$t1,$t2,$t3,$tx)=map("%xmm$_",(5..9));
+@Xi=map("%xmm$_",(10..14));
+$K="%xmm15";
+
+if (1) {
+    # Atom-specific optimization aiming to eliminate pshufb with high
+    # registers [and thus get rid of 48 cycles accumulated penalty]
+    @Xi=map("%xmm$_",(0..4));
+    ($tx,$t0,$t1,$t2,$t3)=map("%xmm$_",(5..9));
+    @V=($A,$B,$C,$D,$E)=map("%xmm$_",(10..14));
+}
+
+$REG_SZ=16;
+
+sub Xi_off {
+my $off = shift;
+
+    $off %= 16; $off *= $REG_SZ;
+    $off<256 ? "$off-128(%rax)" : "$off-256-128(%rbx)";
+}
+
+sub BODY_00_19 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+my $k=$i+2;
+
+# Loads are performed 2+3/4 iterations in advance. 3/4 means that out
+# of 4 words you would expect to be loaded per given iteration one is
+# spilled to next iteration. In other words indices in four input
+# streams are distributed as following:
+#
+# $i==0:	0,0,0,0,1,1,1,1,2,2,2,
+# $i==1:	2,3,3,3,
+# $i==2:	3,4,4,4,
+# ...
+# $i==13:	14,15,15,15,
+# $i==14:	15
+#
+# Then at $i==15 Xupdate is applied one iteration in advance...
+$code.=<<___ if ($i==0);
+	movd		(@ptr[0]),@Xi[0]
+	 lea		`16*4`(@ptr[0]),@ptr[0]
+	movd		(@ptr[1]),@Xi[2]	# borrow @Xi[2]
+	 lea		`16*4`(@ptr[1]),@ptr[1]
+	movd		(@ptr[2]),@Xi[3]	# borrow @Xi[3]
+	 lea		`16*4`(@ptr[2]),@ptr[2]
+	movd		(@ptr[3]),@Xi[4]	# borrow @Xi[4]
+	 lea		`16*4`(@ptr[3]),@ptr[3]
+	punpckldq	@Xi[3],@Xi[0]
+	 movd		`4*$j-16*4`(@ptr[0]),@Xi[1]
+	punpckldq	@Xi[4],@Xi[2]
+	 movd		`4*$j-16*4`(@ptr[1]),$t3
+	punpckldq	@Xi[2],@Xi[0]
+	 movd		`4*$j-16*4`(@ptr[2]),$t2
+	pshufb		$tx,@Xi[0]
+___
+$code.=<<___ if ($i<14);			# just load input
+	 movd		`4*$j-16*4`(@ptr[3]),$t1
+	 punpckldq	$t2,@Xi[1]
+	movdqa	$a,$t2
+	paddd	$K,$e				# e+=K_00_19
+	 punpckldq	$t1,$t3
+	movdqa	$b,$t1
+	movdqa	$b,$t0
+	pslld	\$5,$t2
+	pandn	$d,$t1
+	pand	$c,$t0
+	 punpckldq	$t3,@Xi[1]
+	movdqa	$a,$t3
+
+	movdqa	@Xi[0],`&Xi_off($i)`
+	paddd	@Xi[0],$e			# e+=X[i]
+	 movd		`4*$k-16*4`(@ptr[0]),@Xi[2]
+	psrld	\$27,$t3
+	pxor	$t1,$t0				# Ch(b,c,d)
+	movdqa	$b,$t1
+
+	por	$t3,$t2				# rol(a,5)
+	 movd		`4*$k-16*4`(@ptr[1]),$t3
+	pslld	\$30,$t1
+	paddd	$t0,$e				# e+=Ch(b,c,d)
+
+	psrld	\$2,$b
+	paddd	$t2,$e				# e+=rol(a,5)
+	 pshufb	$tx,@Xi[1]
+	 movd		`4*$k-16*4`(@ptr[2]),$t2
+	por	$t1,$b				# b=rol(b,30)
+___
+$code.=<<___ if ($i==14);			# just load input
+	 movd		`4*$j-16*4`(@ptr[3]),$t1
+	 punpckldq	$t2,@Xi[1]
+	movdqa	$a,$t2
+	paddd	$K,$e				# e+=K_00_19
+	 punpckldq	$t1,$t3
+	movdqa	$b,$t1
+	movdqa	$b,$t0
+	pslld	\$5,$t2
+	 prefetcht0	63(@ptr[0])
+	pandn	$d,$t1
+	pand	$c,$t0
+	 punpckldq	$t3,@Xi[1]
+	movdqa	$a,$t3
+
+	movdqa	@Xi[0],`&Xi_off($i)`
+	paddd	@Xi[0],$e			# e+=X[i]
+	psrld	\$27,$t3
+	pxor	$t1,$t0				# Ch(b,c,d)
+	movdqa	$b,$t1
+	 prefetcht0	63(@ptr[1])
+
+	por	$t3,$t2				# rol(a,5)
+	pslld	\$30,$t1
+	paddd	$t0,$e				# e+=Ch(b,c,d)
+	 prefetcht0	63(@ptr[2])
+
+	psrld	\$2,$b
+	paddd	$t2,$e				# e+=rol(a,5)
+	 pshufb	$tx,@Xi[1]
+	 prefetcht0	63(@ptr[3])
+	por	$t1,$b				# b=rol(b,30)
+___
+$code.=<<___ if ($i>=13 && $i<15);
+	movdqa	`&Xi_off($j+2)`,@Xi[3]		# preload "X[2]"
+___
+$code.=<<___ if ($i>=15);			# apply Xupdate
+	pxor	@Xi[-2],@Xi[1]			# "X[13]"
+	movdqa	`&Xi_off($j+2)`,@Xi[3]		# "X[2]"
+
+	movdqa	$a,$t2
+	 pxor	`&Xi_off($j+8)`,@Xi[1]
+	paddd	$K,$e				# e+=K_00_19
+	movdqa	$b,$t1
+	pslld	\$5,$t2
+	 pxor	@Xi[3],@Xi[1]
+	movdqa	$b,$t0
+	pandn	$d,$t1
+	 movdqa	@Xi[1],$tx
+	pand	$c,$t0
+	movdqa	$a,$t3
+	 psrld	\$31,$tx
+	 paddd	@Xi[1],@Xi[1]
+
+	movdqa	@Xi[0],`&Xi_off($i)`
+	paddd	@Xi[0],$e			# e+=X[i]
+	psrld	\$27,$t3
+	pxor	$t1,$t0				# Ch(b,c,d)
+
+	movdqa	$b,$t1
+	por	$t3,$t2				# rol(a,5)
+	pslld	\$30,$t1
+	paddd	$t0,$e				# e+=Ch(b,c,d)
+
+	psrld	\$2,$b
+	paddd	$t2,$e				# e+=rol(a,5)
+	 por	$tx,@Xi[1]			# rol	\$1,@Xi[1]
+	por	$t1,$b				# b=rol(b,30)
+___
+push(@Xi,shift(@Xi));
+}
+
+sub BODY_20_39 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+
+$code.=<<___ if ($i<79);
+	pxor	@Xi[-2],@Xi[1]			# "X[13]"
+	movdqa	`&Xi_off($j+2)`,@Xi[3]		# "X[2]"
+
+	movdqa	$a,$t2
+	movdqa	$d,$t0
+	 pxor	`&Xi_off($j+8)`,@Xi[1]
+	paddd	$K,$e				# e+=K_20_39
+	pslld	\$5,$t2
+	pxor	$b,$t0
+
+	movdqa	$a,$t3
+___
+$code.=<<___ if ($i<72);
+	movdqa	@Xi[0],`&Xi_off($i)`
+___
+$code.=<<___ if ($i<79);
+	paddd	@Xi[0],$e			# e+=X[i]
+	 pxor	@Xi[3],@Xi[1]
+	psrld	\$27,$t3
+	pxor	$c,$t0				# Parity(b,c,d)
+	movdqa	$b,$t1
+
+	pslld	\$30,$t1
+	 movdqa	@Xi[1],$tx
+	por	$t3,$t2				# rol(a,5)
+	 psrld	\$31,$tx
+	paddd	$t0,$e				# e+=Parity(b,c,d)
+	 paddd	@Xi[1],@Xi[1]
+
+	psrld	\$2,$b
+	paddd	$t2,$e				# e+=rol(a,5)
+	 por	$tx,@Xi[1]			# rol(@Xi[1],1)
+	por	$t1,$b				# b=rol(b,30)
+___
+$code.=<<___ if ($i==79);
+	movdqa	$a,$t2
+	paddd	$K,$e				# e+=K_20_39
+	movdqa	$d,$t0
+	pslld	\$5,$t2
+	pxor	$b,$t0
+
+	movdqa	$a,$t3
+	paddd	@Xi[0],$e			# e+=X[i]
+	psrld	\$27,$t3
+	movdqa	$b,$t1
+	pxor	$c,$t0				# Parity(b,c,d)
+
+	pslld	\$30,$t1
+	por	$t3,$t2				# rol(a,5)
+	paddd	$t0,$e				# e+=Parity(b,c,d)
+
+	psrld	\$2,$b
+	paddd	$t2,$e				# e+=rol(a,5)
+	por	$t1,$b				# b=rol(b,30)
+___
+push(@Xi,shift(@Xi));
+}
+
+sub BODY_40_59 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+
+$code.=<<___;
+	pxor	@Xi[-2],@Xi[1]			# "X[13]"
+	movdqa	`&Xi_off($j+2)`,@Xi[3]		# "X[2]"
+
+	movdqa	$a,$t2
+	movdqa	$d,$t1
+	 pxor	`&Xi_off($j+8)`,@Xi[1]
+	pxor	@Xi[3],@Xi[1]
+	paddd	$K,$e				# e+=K_40_59
+	pslld	\$5,$t2
+	movdqa	$a,$t3
+	pand	$c,$t1
+
+	movdqa	$d,$t0
+	 movdqa	@Xi[1],$tx
+	psrld	\$27,$t3
+	paddd	$t1,$e
+	pxor	$c,$t0
+
+	movdqa	@Xi[0],`&Xi_off($i)`
+	paddd	@Xi[0],$e			# e+=X[i]
+	por	$t3,$t2				# rol(a,5)
+	 psrld	\$31,$tx
+	pand	$b,$t0
+	movdqa	$b,$t1
+
+	pslld	\$30,$t1
+	 paddd	@Xi[1],@Xi[1]
+	paddd	$t0,$e				# e+=Maj(b,d,c)
+
+	psrld	\$2,$b
+	paddd	$t2,$e				# e+=rol(a,5)
+	 por	$tx,@Xi[1]			# rol(@X[1],1)
+	por	$t1,$b				# b=rol(b,30)
+___
+push(@Xi,shift(@Xi));
+}
+
+$code.=<<___;
+.text
+
+.extern	OPENSSL_ia32cap_P
+
+.globl	sha1_multi_block
+.type	sha1_multi_block,\@function,3
+.align	32
+sha1_multi_block:
+.cfi_startproc
+	mov	OPENSSL_ia32cap_P+4(%rip),%rcx
+	bt	\$61,%rcx			# check SHA bit
+	jc	_shaext_shortcut
+___
+$code.=<<___ if ($avx);
+	test	\$`1<<28`,%ecx
+	jnz	_avx_shortcut
+___
+$code.=<<___;
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbx
+___
+$code.=<<___ if ($win64);
+	lea	-0xa8(%rsp),%rsp
+	movaps	%xmm6,(%rsp)
+	movaps	%xmm7,0x10(%rsp)
+	movaps	%xmm8,0x20(%rsp)
+	movaps	%xmm9,0x30(%rsp)
+	movaps	%xmm10,-0x78(%rax)
+	movaps	%xmm11,-0x68(%rax)
+	movaps	%xmm12,-0x58(%rax)
+	movaps	%xmm13,-0x48(%rax)
+	movaps	%xmm14,-0x38(%rax)
+	movaps	%xmm15,-0x28(%rax)
+___
+$code.=<<___;
+	sub	\$`$REG_SZ*18`,%rsp
+	and	\$-256,%rsp
+	mov	%rax,`$REG_SZ*17`(%rsp)		# original %rsp
+.cfi_cfa_expression	%rsp+`$REG_SZ*17`,deref,+8
+.Lbody:
+	lea	K_XX_XX(%rip),$Tbl
+	lea	`$REG_SZ*16`(%rsp),%rbx
+
+.Loop_grande:
+	mov	$num,`$REG_SZ*17+8`(%rsp)	# original $num
+	xor	$num,$num
+___
+for($i=0;$i<4;$i++) {
+    $code.=<<___;
+	mov	`16*$i+0`($inp),@ptr[$i]	# input pointer
+	mov	`16*$i+8`($inp),%ecx		# number of blocks
+	cmp	$num,%ecx
+	cmovg	%ecx,$num			# find maximum
+	test	%ecx,%ecx
+	mov	%ecx,`4*$i`(%rbx)		# initialize counters
+	cmovle	$Tbl,@ptr[$i]			# cancel input
+___
+}
+$code.=<<___;
+	test	$num,$num
+	jz	.Ldone
+
+	movdqu	0x00($ctx),$A			# load context
+	 lea	128(%rsp),%rax
+	movdqu	0x20($ctx),$B
+	movdqu	0x40($ctx),$C
+	movdqu	0x60($ctx),$D
+	movdqu	0x80($ctx),$E
+	movdqa	0x60($Tbl),$tx			# pbswap_mask
+	movdqa	-0x20($Tbl),$K			# K_00_19
+	jmp	.Loop
+
+.align	32
+.Loop:
+___
+for($i=0;$i<20;$i++)	{ &BODY_00_19($i,@V); unshift(@V,pop(@V)); }
+$code.="	movdqa	0x00($Tbl),$K\n";	# K_20_39
+for(;$i<40;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+$code.="	movdqa	0x20($Tbl),$K\n";	# K_40_59
+for(;$i<60;$i++)	{ &BODY_40_59($i,@V); unshift(@V,pop(@V)); }
+$code.="	movdqa	0x40($Tbl),$K\n";	# K_60_79
+for(;$i<80;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	movdqa	(%rbx),@Xi[0]			# pull counters
+	mov	\$1,%ecx
+	cmp	4*0(%rbx),%ecx			# examine counters
+	pxor	$t2,$t2
+	cmovge	$Tbl,@ptr[0]			# cancel input
+	cmp	4*1(%rbx),%ecx
+	movdqa	@Xi[0],@Xi[1]
+	cmovge	$Tbl,@ptr[1]
+	cmp	4*2(%rbx),%ecx
+	pcmpgtd	$t2,@Xi[1]			# mask value
+	cmovge	$Tbl,@ptr[2]
+	cmp	4*3(%rbx),%ecx
+	paddd	@Xi[1],@Xi[0]			# counters--
+	cmovge	$Tbl,@ptr[3]
+
+	movdqu	0x00($ctx),$t0
+	pand	@Xi[1],$A
+	movdqu	0x20($ctx),$t1
+	pand	@Xi[1],$B
+	paddd	$t0,$A
+	movdqu	0x40($ctx),$t2
+	pand	@Xi[1],$C
+	paddd	$t1,$B
+	movdqu	0x60($ctx),$t3
+	pand	@Xi[1],$D
+	paddd	$t2,$C
+	movdqu	0x80($ctx),$tx
+	pand	@Xi[1],$E
+	movdqu	$A,0x00($ctx)
+	paddd	$t3,$D
+	movdqu	$B,0x20($ctx)
+	paddd	$tx,$E
+	movdqu	$C,0x40($ctx)
+	movdqu	$D,0x60($ctx)
+	movdqu	$E,0x80($ctx)
+
+	movdqa	@Xi[0],(%rbx)			# save counters
+	movdqa	0x60($Tbl),$tx			# pbswap_mask
+	movdqa	-0x20($Tbl),$K			# K_00_19
+	dec	$num
+	jnz	.Loop
+
+	mov	`$REG_SZ*17+8`(%rsp),$num
+	lea	$REG_SZ($ctx),$ctx
+	lea	`16*$REG_SZ/4`($inp),$inp
+	dec	$num
+	jnz	.Loop_grande
+
+.Ldone:
+	mov	`$REG_SZ*17`(%rsp),%rax		# original %rsp
+.cfi_def_cfa	%rax,8
+___
+$code.=<<___ if ($win64);
+	movaps	-0xb8(%rax),%xmm6
+	movaps	-0xa8(%rax),%xmm7
+	movaps	-0x98(%rax),%xmm8
+	movaps	-0x88(%rax),%xmm9
+	movaps	-0x78(%rax),%xmm10
+	movaps	-0x68(%rax),%xmm11
+	movaps	-0x58(%rax),%xmm12
+	movaps	-0x48(%rax),%xmm13
+	movaps	-0x38(%rax),%xmm14
+	movaps	-0x28(%rax),%xmm15
+___
+$code.=<<___;
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue:
+	ret
+.cfi_endproc
+.size	sha1_multi_block,.-sha1_multi_block
+___
+						{{{
+my ($ABCD0,$E0,$E0_,$BSWAP,$ABCD1,$E1,$E1_)=map("%xmm$_",(0..3,8..10));
+my @MSG0=map("%xmm$_",(4..7));
+my @MSG1=map("%xmm$_",(11..14));
+
+$code.=<<___;
+.type	sha1_multi_block_shaext,\@function,3
+.align	32
+sha1_multi_block_shaext:
+.cfi_startproc
+_shaext_shortcut:
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+___
+$code.=<<___ if ($win64);
+	lea	-0xa8(%rsp),%rsp
+	movaps	%xmm6,(%rsp)
+	movaps	%xmm7,0x10(%rsp)
+	movaps	%xmm8,0x20(%rsp)
+	movaps	%xmm9,0x30(%rsp)
+	movaps	%xmm10,-0x78(%rax)
+	movaps	%xmm11,-0x68(%rax)
+	movaps	%xmm12,-0x58(%rax)
+	movaps	%xmm13,-0x48(%rax)
+	movaps	%xmm14,-0x38(%rax)
+	movaps	%xmm15,-0x28(%rax)
+___
+$code.=<<___;
+	sub	\$`$REG_SZ*18`,%rsp
+	shl	\$1,$num			# we process pair at a time
+	and	\$-256,%rsp
+	lea	0x40($ctx),$ctx			# size optimization
+	mov	%rax,`$REG_SZ*17`(%rsp)		# original %rsp
+.Lbody_shaext:
+	lea	`$REG_SZ*16`(%rsp),%rbx
+	movdqa	K_XX_XX+0x80(%rip),$BSWAP	# byte-n-word swap
+
+.Loop_grande_shaext:
+	mov	$num,`$REG_SZ*17+8`(%rsp)	# original $num
+	xor	$num,$num
+___
+for($i=0;$i<2;$i++) {
+    $code.=<<___;
+	mov	`16*$i+0`($inp),@ptr[$i]	# input pointer
+	mov	`16*$i+8`($inp),%ecx		# number of blocks
+	cmp	$num,%ecx
+	cmovg	%ecx,$num			# find maximum
+	test	%ecx,%ecx
+	mov	%ecx,`4*$i`(%rbx)		# initialize counters
+	cmovle	%rsp,@ptr[$i]			# cancel input
+___
+}
+$code.=<<___;
+	test	$num,$num
+	jz	.Ldone_shaext
+
+	movq		0x00-0x40($ctx),$ABCD0	# a1.a0
+	movq		0x20-0x40($ctx),@MSG0[0]# b1.b0
+	movq		0x40-0x40($ctx),@MSG0[1]# c1.c0
+	movq		0x60-0x40($ctx),@MSG0[2]# d1.d0
+	movq		0x80-0x40($ctx),@MSG0[3]# e1.e0
+
+	punpckldq	@MSG0[0],$ABCD0		# b1.a1.b0.a0
+	punpckldq	@MSG0[2],@MSG0[1]	# d1.c1.d0.c0
+
+	movdqa		$ABCD0,$ABCD1
+	punpcklqdq	@MSG0[1],$ABCD0		# d0.c0.b0.a0
+	punpckhqdq	@MSG0[1],$ABCD1		# d1.c1.b1.a1
+
+	pshufd		\$0b00111111,@MSG0[3],$E0
+	pshufd		\$0b01111111,@MSG0[3],$E1
+	pshufd		\$0b00011011,$ABCD0,$ABCD0
+	pshufd		\$0b00011011,$ABCD1,$ABCD1
+	jmp		.Loop_shaext
+
+.align	32
+.Loop_shaext:
+	movdqu		0x00(@ptr[0]),@MSG0[0]
+	 movdqu		0x00(@ptr[1]),@MSG1[0]
+	movdqu		0x10(@ptr[0]),@MSG0[1]
+	 movdqu		0x10(@ptr[1]),@MSG1[1]
+	movdqu		0x20(@ptr[0]),@MSG0[2]
+	pshufb		$BSWAP,@MSG0[0]
+	 movdqu		0x20(@ptr[1]),@MSG1[2]
+	 pshufb		$BSWAP,@MSG1[0]
+	movdqu		0x30(@ptr[0]),@MSG0[3]
+	lea		0x40(@ptr[0]),@ptr[0]
+	pshufb		$BSWAP,@MSG0[1]
+	 movdqu		0x30(@ptr[1]),@MSG1[3]
+	 lea		0x40(@ptr[1]),@ptr[1]
+	 pshufb		$BSWAP,@MSG1[1]
+
+	movdqa		$E0,0x50(%rsp)		# offload
+	paddd		@MSG0[0],$E0
+	 movdqa		$E1,0x70(%rsp)
+	 paddd		@MSG1[0],$E1
+	movdqa		$ABCD0,0x40(%rsp)	# offload
+	movdqa		$ABCD0,$E0_
+	 movdqa		$ABCD1,0x60(%rsp)
+	 movdqa		$ABCD1,$E1_
+	sha1rnds4	\$0,$E0,$ABCD0		# 0-3
+	sha1nexte	@MSG0[1],$E0_
+	 sha1rnds4	\$0,$E1,$ABCD1		# 0-3
+	 sha1nexte	@MSG1[1],$E1_
+	pshufb		$BSWAP,@MSG0[2]
+	prefetcht0	127(@ptr[0])
+	sha1msg1	@MSG0[1],@MSG0[0]
+	 pshufb		$BSWAP,@MSG1[2]
+	 prefetcht0	127(@ptr[1])
+	 sha1msg1	@MSG1[1],@MSG1[0]
+
+	pshufb		$BSWAP,@MSG0[3]
+	movdqa		$ABCD0,$E0
+	 pshufb		$BSWAP,@MSG1[3]
+	 movdqa		$ABCD1,$E1
+	sha1rnds4	\$0,$E0_,$ABCD0		# 4-7
+	sha1nexte	@MSG0[2],$E0
+	 sha1rnds4	\$0,$E1_,$ABCD1		# 4-7
+	 sha1nexte	@MSG1[2],$E1
+	pxor		@MSG0[2],@MSG0[0]
+	sha1msg1	@MSG0[2],@MSG0[1]
+	 pxor		@MSG1[2],@MSG1[0]
+	 sha1msg1	@MSG1[2],@MSG1[1]
+___
+for($i=2;$i<20-4;$i++) {
+$code.=<<___;
+	movdqa		$ABCD0,$E0_
+	 movdqa		$ABCD1,$E1_
+	sha1rnds4	\$`int($i/5)`,$E0,$ABCD0	# 8-11
+	sha1nexte	@MSG0[3],$E0_
+	 sha1rnds4	\$`int($i/5)`,$E1,$ABCD1	# 8-11
+	 sha1nexte	@MSG1[3],$E1_
+	sha1msg2	@MSG0[3],@MSG0[0]
+	 sha1msg2	@MSG1[3],@MSG1[0]
+	pxor		@MSG0[3],@MSG0[1]
+	sha1msg1	@MSG0[3],@MSG0[2]
+	 pxor		@MSG1[3],@MSG1[1]
+	 sha1msg1	@MSG1[3],@MSG1[2]
+___
+	($E0,$E0_)=($E0_,$E0);		($E1,$E1_)=($E1_,$E1);
+	push(@MSG0,shift(@MSG0));	push(@MSG1,shift(@MSG1));
+}
+$code.=<<___;
+	movdqa		$ABCD0,$E0_
+	 movdqa		$ABCD1,$E1_
+	sha1rnds4	\$3,$E0,$ABCD0		# 64-67
+	sha1nexte	@MSG0[3],$E0_
+	 sha1rnds4	\$3,$E1,$ABCD1		# 64-67
+	 sha1nexte	@MSG1[3],$E1_
+	sha1msg2	@MSG0[3],@MSG0[0]
+	 sha1msg2	@MSG1[3],@MSG1[0]
+	pxor		@MSG0[3],@MSG0[1]
+	 pxor		@MSG1[3],@MSG1[1]
+
+	mov		\$1,%ecx
+	pxor		@MSG0[2],@MSG0[2]	# zero
+	cmp		4*0(%rbx),%ecx		# examine counters
+	cmovge		%rsp,@ptr[0]		# cancel input
+
+	movdqa		$ABCD0,$E0
+	 movdqa		$ABCD1,$E1
+	sha1rnds4	\$3,$E0_,$ABCD0		# 68-71
+	sha1nexte	@MSG0[0],$E0
+	 sha1rnds4	\$3,$E1_,$ABCD1		# 68-71
+	 sha1nexte	@MSG1[0],$E1
+	sha1msg2	@MSG0[0],@MSG0[1]
+	 sha1msg2	@MSG1[0],@MSG1[1]
+
+	cmp		4*1(%rbx),%ecx
+	cmovge		%rsp,@ptr[1]
+	movq		(%rbx),@MSG0[0]		# pull counters
+
+	movdqa		$ABCD0,$E0_
+	 movdqa		$ABCD1,$E1_
+	sha1rnds4	\$3,$E0,$ABCD0		# 72-75
+	sha1nexte	@MSG0[1],$E0_
+	 sha1rnds4	\$3,$E1,$ABCD1		# 72-75
+	 sha1nexte	@MSG1[1],$E1_
+
+	pshufd		\$0x00,@MSG0[0],@MSG1[2]
+	pshufd		\$0x55,@MSG0[0],@MSG1[3]
+	movdqa		@MSG0[0],@MSG0[1]
+	pcmpgtd		@MSG0[2],@MSG1[2]
+	pcmpgtd		@MSG0[2],@MSG1[3]
+
+	movdqa		$ABCD0,$E0
+	 movdqa		$ABCD1,$E1
+	sha1rnds4	\$3,$E0_,$ABCD0		# 76-79
+	sha1nexte	$MSG0[2],$E0
+	 sha1rnds4	\$3,$E1_,$ABCD1		# 76-79
+	 sha1nexte	$MSG0[2],$E1
+
+	pcmpgtd		@MSG0[2],@MSG0[1]	# counter mask
+	pand		@MSG1[2],$ABCD0
+	pand		@MSG1[2],$E0
+	 pand		@MSG1[3],$ABCD1
+	 pand		@MSG1[3],$E1
+	paddd		@MSG0[1],@MSG0[0]	# counters--
+
+	paddd		0x40(%rsp),$ABCD0
+	paddd		0x50(%rsp),$E0
+	 paddd		0x60(%rsp),$ABCD1
+	 paddd		0x70(%rsp),$E1
+
+	movq		@MSG0[0],(%rbx)		# save counters
+	dec		$num
+	jnz		.Loop_shaext
+
+	mov		`$REG_SZ*17+8`(%rsp),$num
+
+	pshufd		\$0b00011011,$ABCD0,$ABCD0
+	pshufd		\$0b00011011,$ABCD1,$ABCD1
+
+	movdqa		$ABCD0,@MSG0[0]
+	punpckldq	$ABCD1,$ABCD0		# b1.b0.a1.a0
+	punpckhdq	$ABCD1,@MSG0[0]		# d1.d0.c1.c0
+	punpckhdq	$E1,$E0			# e1.e0.xx.xx
+	movq		$ABCD0,0x00-0x40($ctx)	# a1.a0
+	psrldq		\$8,$ABCD0
+	movq		@MSG0[0],0x40-0x40($ctx)# c1.c0
+	psrldq		\$8,@MSG0[0]
+	movq		$ABCD0,0x20-0x40($ctx)	# b1.b0
+	psrldq		\$8,$E0
+	movq		@MSG0[0],0x60-0x40($ctx)# d1.d0
+	movq		$E0,0x80-0x40($ctx)	# e1.e0
+
+	lea	`$REG_SZ/2`($ctx),$ctx
+	lea	`16*2`($inp),$inp
+	dec	$num
+	jnz	.Loop_grande_shaext
+
+.Ldone_shaext:
+	#mov	`$REG_SZ*17`(%rsp),%rax		# original %rsp
+___
+$code.=<<___ if ($win64);
+	movaps	-0xb8(%rax),%xmm6
+	movaps	-0xa8(%rax),%xmm7
+	movaps	-0x98(%rax),%xmm8
+	movaps	-0x88(%rax),%xmm9
+	movaps	-0x78(%rax),%xmm10
+	movaps	-0x68(%rax),%xmm11
+	movaps	-0x58(%rax),%xmm12
+	movaps	-0x48(%rax),%xmm13
+	movaps	-0x38(%rax),%xmm14
+	movaps	-0x28(%rax),%xmm15
+___
+$code.=<<___;
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue_shaext:
+	ret
+.cfi_endproc
+.size	sha1_multi_block_shaext,.-sha1_multi_block_shaext
+___
+						}}}
+
+						if ($avx) {{{
+sub BODY_00_19_avx {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+my $k=$i+2;
+my $vpack = $REG_SZ==16 ? "vpunpckldq" : "vinserti128";
+my $ptr_n = $REG_SZ==16 ? @ptr[1] : @ptr[4];
+
+$code.=<<___ if ($i==0 && $REG_SZ==16);
+	vmovd		(@ptr[0]),@Xi[0]
+	 lea		`16*4`(@ptr[0]),@ptr[0]
+	vmovd		(@ptr[1]),@Xi[2]	# borrow Xi[2]
+	 lea		`16*4`(@ptr[1]),@ptr[1]
+	vpinsrd		\$1,(@ptr[2]),@Xi[0],@Xi[0]
+	 lea		`16*4`(@ptr[2]),@ptr[2]
+	vpinsrd		\$1,(@ptr[3]),@Xi[2],@Xi[2]
+	 lea		`16*4`(@ptr[3]),@ptr[3]
+	 vmovd		`4*$j-16*4`(@ptr[0]),@Xi[1]
+	vpunpckldq	@Xi[2],@Xi[0],@Xi[0]
+	 vmovd		`4*$j-16*4`($ptr_n),$t3
+	vpshufb		$tx,@Xi[0],@Xi[0]
+___
+$code.=<<___ if ($i<15 && $REG_SZ==16);		# just load input
+	 vpinsrd	\$1,`4*$j-16*4`(@ptr[2]),@Xi[1],@Xi[1]
+	 vpinsrd	\$1,`4*$j-16*4`(@ptr[3]),$t3,$t3
+___
+$code.=<<___ if ($i==0 && $REG_SZ==32);
+	vmovd		(@ptr[0]),@Xi[0]
+	 lea		`16*4`(@ptr[0]),@ptr[0]
+	vmovd		(@ptr[4]),@Xi[2]	# borrow Xi[2]
+	 lea		`16*4`(@ptr[4]),@ptr[4]
+	vmovd		(@ptr[1]),$t2
+	 lea		`16*4`(@ptr[1]),@ptr[1]
+	vmovd		(@ptr[5]),$t1
+	 lea		`16*4`(@ptr[5]),@ptr[5]
+	vpinsrd		\$1,(@ptr[2]),@Xi[0],@Xi[0]
+	 lea		`16*4`(@ptr[2]),@ptr[2]
+	vpinsrd		\$1,(@ptr[6]),@Xi[2],@Xi[2]
+	 lea		`16*4`(@ptr[6]),@ptr[6]
+	vpinsrd		\$1,(@ptr[3]),$t2,$t2
+	 lea		`16*4`(@ptr[3]),@ptr[3]
+	vpunpckldq	$t2,@Xi[0],@Xi[0]
+	vpinsrd		\$1,(@ptr[7]),$t1,$t1
+	 lea		`16*4`(@ptr[7]),@ptr[7]
+	vpunpckldq	$t1,@Xi[2],@Xi[2]
+	 vmovd		`4*$j-16*4`(@ptr[0]),@Xi[1]
+	vinserti128	@Xi[2],@Xi[0],@Xi[0]
+	 vmovd		`4*$j-16*4`($ptr_n),$t3
+	vpshufb		$tx,@Xi[0],@Xi[0]
+___
+$code.=<<___ if ($i<15 && $REG_SZ==32);		# just load input
+	 vmovd		`4*$j-16*4`(@ptr[1]),$t2
+	 vmovd		`4*$j-16*4`(@ptr[5]),$t1
+	 vpinsrd	\$1,`4*$j-16*4`(@ptr[2]),@Xi[1],@Xi[1]
+	 vpinsrd	\$1,`4*$j-16*4`(@ptr[6]),$t3,$t3
+	 vpinsrd	\$1,`4*$j-16*4`(@ptr[3]),$t2,$t2
+	 vpunpckldq	$t2,@Xi[1],@Xi[1]
+	 vpinsrd	\$1,`4*$j-16*4`(@ptr[7]),$t1,$t1
+	 vpunpckldq	$t1,$t3,$t3
+___
+$code.=<<___ if ($i<14);
+	vpaddd	$K,$e,$e			# e+=K_00_19
+	vpslld	\$5,$a,$t2
+	vpandn	$d,$b,$t1
+	vpand	$c,$b,$t0
+
+	vmovdqa	@Xi[0],`&Xi_off($i)`
+	vpaddd	@Xi[0],$e,$e			# e+=X[i]
+	 $vpack		$t3,@Xi[1],@Xi[1]
+	vpsrld	\$27,$a,$t3
+	vpxor	$t1,$t0,$t0			# Ch(b,c,d)
+	 vmovd		`4*$k-16*4`(@ptr[0]),@Xi[2]
+
+	vpslld	\$30,$b,$t1
+	vpor	$t3,$t2,$t2			# rol(a,5)
+	 vmovd		`4*$k-16*4`($ptr_n),$t3
+	vpaddd	$t0,$e,$e			# e+=Ch(b,c,d)
+
+	vpsrld	\$2,$b,$b
+	vpaddd	$t2,$e,$e			# e+=rol(a,5)
+	 vpshufb	$tx,@Xi[1],@Xi[1]
+	vpor	$t1,$b,$b			# b=rol(b,30)
+___
+$code.=<<___ if ($i==14);
+	vpaddd	$K,$e,$e			# e+=K_00_19
+	 prefetcht0	63(@ptr[0])
+	vpslld	\$5,$a,$t2
+	vpandn	$d,$b,$t1
+	vpand	$c,$b,$t0
+
+	vmovdqa	@Xi[0],`&Xi_off($i)`
+	vpaddd	@Xi[0],$e,$e			# e+=X[i]
+	 $vpack		$t3,@Xi[1],@Xi[1]
+	vpsrld	\$27,$a,$t3
+	 prefetcht0	63(@ptr[1])
+	vpxor	$t1,$t0,$t0			# Ch(b,c,d)
+
+	vpslld	\$30,$b,$t1
+	vpor	$t3,$t2,$t2			# rol(a,5)
+	 prefetcht0	63(@ptr[2])
+	vpaddd	$t0,$e,$e			# e+=Ch(b,c,d)
+
+	vpsrld	\$2,$b,$b
+	vpaddd	$t2,$e,$e			# e+=rol(a,5)
+	 prefetcht0	63(@ptr[3])
+	 vpshufb	$tx,@Xi[1],@Xi[1]
+	vpor	$t1,$b,$b			# b=rol(b,30)
+___
+$code.=<<___ if ($i>=13 && $i<15);
+	vmovdqa	`&Xi_off($j+2)`,@Xi[3]		# preload "X[2]"
+___
+$code.=<<___ if ($i>=15);			# apply Xupdate
+	vpxor	@Xi[-2],@Xi[1],@Xi[1]		# "X[13]"
+	vmovdqa	`&Xi_off($j+2)`,@Xi[3]		# "X[2]"
+
+	vpaddd	$K,$e,$e			# e+=K_00_19
+	vpslld	\$5,$a,$t2
+	vpandn	$d,$b,$t1
+	 `"prefetcht0	63(@ptr[4])"		if ($i==15 && $REG_SZ==32)`
+	vpand	$c,$b,$t0
+
+	vmovdqa	@Xi[0],`&Xi_off($i)`
+	vpaddd	@Xi[0],$e,$e			# e+=X[i]
+	 vpxor	`&Xi_off($j+8)`,@Xi[1],@Xi[1]
+	vpsrld	\$27,$a,$t3
+	vpxor	$t1,$t0,$t0			# Ch(b,c,d)
+	 vpxor	@Xi[3],@Xi[1],@Xi[1]
+	 `"prefetcht0	63(@ptr[5])"		if ($i==15 && $REG_SZ==32)`
+
+	vpslld	\$30,$b,$t1
+	vpor	$t3,$t2,$t2			# rol(a,5)
+	vpaddd	$t0,$e,$e			# e+=Ch(b,c,d)
+	 `"prefetcht0	63(@ptr[6])"		if ($i==15 && $REG_SZ==32)`
+	 vpsrld	\$31,@Xi[1],$tx
+	 vpaddd	@Xi[1],@Xi[1],@Xi[1]
+
+	vpsrld	\$2,$b,$b
+	 `"prefetcht0	63(@ptr[7])"		if ($i==15 && $REG_SZ==32)`
+	vpaddd	$t2,$e,$e			# e+=rol(a,5)
+	 vpor	$tx,@Xi[1],@Xi[1]		# rol	\$1,@Xi[1]
+	vpor	$t1,$b,$b			# b=rol(b,30)
+___
+push(@Xi,shift(@Xi));
+}
+
+sub BODY_20_39_avx {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+
+$code.=<<___ if ($i<79);
+	vpxor	@Xi[-2],@Xi[1],@Xi[1]		# "X[13]"
+	vmovdqa	`&Xi_off($j+2)`,@Xi[3]		# "X[2]"
+
+	vpslld	\$5,$a,$t2
+	vpaddd	$K,$e,$e			# e+=K_20_39
+	vpxor	$b,$d,$t0
+___
+$code.=<<___ if ($i<72);
+	vmovdqa	@Xi[0],`&Xi_off($i)`
+___
+$code.=<<___ if ($i<79);
+	vpaddd	@Xi[0],$e,$e			# e+=X[i]
+	 vpxor	`&Xi_off($j+8)`,@Xi[1],@Xi[1]
+	vpsrld	\$27,$a,$t3
+	vpxor	$c,$t0,$t0			# Parity(b,c,d)
+	 vpxor	@Xi[3],@Xi[1],@Xi[1]
+
+	vpslld	\$30,$b,$t1
+	vpor	$t3,$t2,$t2			# rol(a,5)
+	vpaddd	$t0,$e,$e			# e+=Parity(b,c,d)
+	 vpsrld	\$31,@Xi[1],$tx
+	 vpaddd	@Xi[1],@Xi[1],@Xi[1]
+
+	vpsrld	\$2,$b,$b
+	vpaddd	$t2,$e,$e			# e+=rol(a,5)
+	 vpor	$tx,@Xi[1],@Xi[1]		# rol(@Xi[1],1)
+	vpor	$t1,$b,$b			# b=rol(b,30)
+___
+$code.=<<___ if ($i==79);
+	vpslld	\$5,$a,$t2
+	vpaddd	$K,$e,$e			# e+=K_20_39
+	vpxor	$b,$d,$t0
+
+	vpsrld	\$27,$a,$t3
+	vpaddd	@Xi[0],$e,$e			# e+=X[i]
+	vpxor	$c,$t0,$t0			# Parity(b,c,d)
+
+	vpslld	\$30,$b,$t1
+	vpor	$t3,$t2,$t2			# rol(a,5)
+	vpaddd	$t0,$e,$e			# e+=Parity(b,c,d)
+
+	vpsrld	\$2,$b,$b
+	vpaddd	$t2,$e,$e			# e+=rol(a,5)
+	vpor	$t1,$b,$b			# b=rol(b,30)
+___
+push(@Xi,shift(@Xi));
+}
+
+sub BODY_40_59_avx {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+
+$code.=<<___;
+	vpxor	@Xi[-2],@Xi[1],@Xi[1]		# "X[13]"
+	vmovdqa	`&Xi_off($j+2)`,@Xi[3]		# "X[2]"
+
+	vpaddd	$K,$e,$e			# e+=K_40_59
+	vpslld	\$5,$a,$t2
+	vpand	$c,$d,$t1
+	 vpxor	`&Xi_off($j+8)`,@Xi[1],@Xi[1]
+
+	vpaddd	$t1,$e,$e
+	vpsrld	\$27,$a,$t3
+	vpxor	$c,$d,$t0
+	 vpxor	@Xi[3],@Xi[1],@Xi[1]
+
+	vmovdqu	@Xi[0],`&Xi_off($i)`
+	vpaddd	@Xi[0],$e,$e			# e+=X[i]
+	vpor	$t3,$t2,$t2			# rol(a,5)
+	 vpsrld	\$31,@Xi[1],$tx
+	vpand	$b,$t0,$t0
+	 vpaddd	@Xi[1],@Xi[1],@Xi[1]
+
+	vpslld	\$30,$b,$t1
+	vpaddd	$t0,$e,$e			# e+=Maj(b,d,c)
+
+	vpsrld	\$2,$b,$b
+	vpaddd	$t2,$e,$e			# e+=rol(a,5)
+	 vpor	$tx,@Xi[1],@Xi[1]		# rol(@X[1],1)
+	vpor	$t1,$b,$b			# b=rol(b,30)
+___
+push(@Xi,shift(@Xi));
+}
+
+$code.=<<___;
+.type	sha1_multi_block_avx,\@function,3
+.align	32
+sha1_multi_block_avx:
+.cfi_startproc
+_avx_shortcut:
+___
+$code.=<<___ if ($avx>1);
+	shr	\$32,%rcx
+	cmp	\$2,$num
+	jb	.Lavx
+	test	\$`1<<5`,%ecx
+	jnz	_avx2_shortcut
+	jmp	.Lavx
+.align	32
+.Lavx:
+___
+$code.=<<___;
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+___
+$code.=<<___ if ($win64);
+	lea	-0xa8(%rsp),%rsp
+	movaps	%xmm6,(%rsp)
+	movaps	%xmm7,0x10(%rsp)
+	movaps	%xmm8,0x20(%rsp)
+	movaps	%xmm9,0x30(%rsp)
+	movaps	%xmm10,-0x78(%rax)
+	movaps	%xmm11,-0x68(%rax)
+	movaps	%xmm12,-0x58(%rax)
+	movaps	%xmm13,-0x48(%rax)
+	movaps	%xmm14,-0x38(%rax)
+	movaps	%xmm15,-0x28(%rax)
+___
+$code.=<<___;
+	sub	\$`$REG_SZ*18`, %rsp
+	and	\$-256,%rsp
+	mov	%rax,`$REG_SZ*17`(%rsp)		# original %rsp
+.cfi_cfa_expression	%rsp+`$REG_SZ*17`,deref,+8
+.Lbody_avx:
+	lea	K_XX_XX(%rip),$Tbl
+	lea	`$REG_SZ*16`(%rsp),%rbx
+
+	vzeroupper
+.Loop_grande_avx:
+	mov	$num,`$REG_SZ*17+8`(%rsp)	# original $num
+	xor	$num,$num
+___
+for($i=0;$i<4;$i++) {
+    $code.=<<___;
+	mov	`16*$i+0`($inp),@ptr[$i]	# input pointer
+	mov	`16*$i+8`($inp),%ecx		# number of blocks
+	cmp	$num,%ecx
+	cmovg	%ecx,$num			# find maximum
+	test	%ecx,%ecx
+	mov	%ecx,`4*$i`(%rbx)		# initialize counters
+	cmovle	$Tbl,@ptr[$i]			# cancel input
+___
+}
+$code.=<<___;
+	test	$num,$num
+	jz	.Ldone_avx
+
+	vmovdqu	0x00($ctx),$A			# load context
+	 lea	128(%rsp),%rax
+	vmovdqu	0x20($ctx),$B
+	vmovdqu	0x40($ctx),$C
+	vmovdqu	0x60($ctx),$D
+	vmovdqu	0x80($ctx),$E
+	vmovdqu	0x60($Tbl),$tx			# pbswap_mask
+	jmp	.Loop_avx
+
+.align	32
+.Loop_avx:
+___
+$code.="	vmovdqa	-0x20($Tbl),$K\n";	# K_00_19
+for($i=0;$i<20;$i++)	{ &BODY_00_19_avx($i,@V); unshift(@V,pop(@V)); }
+$code.="	vmovdqa	0x00($Tbl),$K\n";	# K_20_39
+for(;$i<40;$i++)	{ &BODY_20_39_avx($i,@V); unshift(@V,pop(@V)); }
+$code.="	vmovdqa	0x20($Tbl),$K\n";	# K_40_59
+for(;$i<60;$i++)	{ &BODY_40_59_avx($i,@V); unshift(@V,pop(@V)); }
+$code.="	vmovdqa	0x40($Tbl),$K\n";	# K_60_79
+for(;$i<80;$i++)	{ &BODY_20_39_avx($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	mov	\$1,%ecx
+___
+for($i=0;$i<4;$i++) {
+    $code.=<<___;
+	cmp	`4*$i`(%rbx),%ecx		# examine counters
+	cmovge	$Tbl,@ptr[$i]			# cancel input
+___
+}
+$code.=<<___;
+	vmovdqu	(%rbx),$t0			# pull counters
+	vpxor	$t2,$t2,$t2
+	vmovdqa	$t0,$t1
+	vpcmpgtd $t2,$t1,$t1			# mask value
+	vpaddd	$t1,$t0,$t0			# counters--
+
+	vpand	$t1,$A,$A
+	vpand	$t1,$B,$B
+	vpaddd	0x00($ctx),$A,$A
+	vpand	$t1,$C,$C
+	vpaddd	0x20($ctx),$B,$B
+	vpand	$t1,$D,$D
+	vpaddd	0x40($ctx),$C,$C
+	vpand	$t1,$E,$E
+	vpaddd	0x60($ctx),$D,$D
+	vpaddd	0x80($ctx),$E,$E
+	vmovdqu	$A,0x00($ctx)
+	vmovdqu	$B,0x20($ctx)
+	vmovdqu	$C,0x40($ctx)
+	vmovdqu	$D,0x60($ctx)
+	vmovdqu	$E,0x80($ctx)
+
+	vmovdqu	$t0,(%rbx)			# save counters
+	vmovdqu	0x60($Tbl),$tx			# pbswap_mask
+	dec	$num
+	jnz	.Loop_avx
+
+	mov	`$REG_SZ*17+8`(%rsp),$num
+	lea	$REG_SZ($ctx),$ctx
+	lea	`16*$REG_SZ/4`($inp),$inp
+	dec	$num
+	jnz	.Loop_grande_avx
+
+.Ldone_avx:
+	mov	`$REG_SZ*17`(%rsp),%rax		# original %rsp
+.cfi_def_cfa	%rax,8
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	movaps	-0xb8(%rax),%xmm6
+	movaps	-0xa8(%rax),%xmm7
+	movaps	-0x98(%rax),%xmm8
+	movaps	-0x88(%rax),%xmm9
+	movaps	-0x78(%rax),%xmm10
+	movaps	-0x68(%rax),%xmm11
+	movaps	-0x58(%rax),%xmm12
+	movaps	-0x48(%rax),%xmm13
+	movaps	-0x38(%rax),%xmm14
+	movaps	-0x28(%rax),%xmm15
+___
+$code.=<<___;
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue_avx:
+	ret
+.cfi_endproc
+.size	sha1_multi_block_avx,.-sha1_multi_block_avx
+___
+
+						if ($avx>1) {
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+
+$REG_SZ=32;
+
+@ptr=map("%r$_",(12..15,8..11));
+
+@V=($A,$B,$C,$D,$E)=map("%ymm$_",(0..4));
+($t0,$t1,$t2,$t3,$tx)=map("%ymm$_",(5..9));
+@Xi=map("%ymm$_",(10..14));
+$K="%ymm15";
+
+$code.=<<___;
+.type	sha1_multi_block_avx2,\@function,3
+.align	32
+sha1_multi_block_avx2:
+.cfi_startproc
+_avx2_shortcut:
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+___
+$code.=<<___ if ($win64);
+	lea	-0xa8(%rsp),%rsp
+	movaps	%xmm6,(%rsp)
+	movaps	%xmm7,0x10(%rsp)
+	movaps	%xmm8,0x20(%rsp)
+	movaps	%xmm9,0x30(%rsp)
+	movaps	%xmm10,0x40(%rsp)
+	movaps	%xmm11,0x50(%rsp)
+	movaps	%xmm12,-0x78(%rax)
+	movaps	%xmm13,-0x68(%rax)
+	movaps	%xmm14,-0x58(%rax)
+	movaps	%xmm15,-0x48(%rax)
+___
+$code.=<<___;
+	sub	\$`$REG_SZ*18`, %rsp
+	and	\$-256,%rsp
+	mov	%rax,`$REG_SZ*17`(%rsp)		# original %rsp
+.cfi_cfa_expression	%rsp+`$REG_SZ*17`,deref,+8
+.Lbody_avx2:
+	lea	K_XX_XX(%rip),$Tbl
+	shr	\$1,$num
+
+	vzeroupper
+.Loop_grande_avx2:
+	mov	$num,`$REG_SZ*17+8`(%rsp)	# original $num
+	xor	$num,$num
+	lea	`$REG_SZ*16`(%rsp),%rbx
+___
+for($i=0;$i<8;$i++) {
+    $code.=<<___;
+	mov	`16*$i+0`($inp),@ptr[$i]	# input pointer
+	mov	`16*$i+8`($inp),%ecx		# number of blocks
+	cmp	$num,%ecx
+	cmovg	%ecx,$num			# find maximum
+	test	%ecx,%ecx
+	mov	%ecx,`4*$i`(%rbx)		# initialize counters
+	cmovle	$Tbl,@ptr[$i]			# cancel input
+___
+}
+$code.=<<___;
+	vmovdqu	0x00($ctx),$A			# load context
+	 lea	128(%rsp),%rax
+	vmovdqu	0x20($ctx),$B
+	 lea	256+128(%rsp),%rbx
+	vmovdqu	0x40($ctx),$C
+	vmovdqu	0x60($ctx),$D
+	vmovdqu	0x80($ctx),$E
+	vmovdqu	0x60($Tbl),$tx			# pbswap_mask
+	jmp	.Loop_avx2
+
+.align	32
+.Loop_avx2:
+___
+$code.="	vmovdqa	-0x20($Tbl),$K\n";	# K_00_19
+for($i=0;$i<20;$i++)	{ &BODY_00_19_avx($i,@V); unshift(@V,pop(@V)); }
+$code.="	vmovdqa	0x00($Tbl),$K\n";	# K_20_39
+for(;$i<40;$i++)	{ &BODY_20_39_avx($i,@V); unshift(@V,pop(@V)); }
+$code.="	vmovdqa	0x20($Tbl),$K\n";	# K_40_59
+for(;$i<60;$i++)	{ &BODY_40_59_avx($i,@V); unshift(@V,pop(@V)); }
+$code.="	vmovdqa	0x40($Tbl),$K\n";	# K_60_79
+for(;$i<80;$i++)	{ &BODY_20_39_avx($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	mov	\$1,%ecx
+	lea	`$REG_SZ*16`(%rsp),%rbx
+___
+for($i=0;$i<8;$i++) {
+    $code.=<<___;
+	cmp	`4*$i`(%rbx),%ecx		# examine counters
+	cmovge	$Tbl,@ptr[$i]			# cancel input
+___
+}
+$code.=<<___;
+	vmovdqu	(%rbx),$t0		# pull counters
+	vpxor	$t2,$t2,$t2
+	vmovdqa	$t0,$t1
+	vpcmpgtd $t2,$t1,$t1			# mask value
+	vpaddd	$t1,$t0,$t0			# counters--
+
+	vpand	$t1,$A,$A
+	vpand	$t1,$B,$B
+	vpaddd	0x00($ctx),$A,$A
+	vpand	$t1,$C,$C
+	vpaddd	0x20($ctx),$B,$B
+	vpand	$t1,$D,$D
+	vpaddd	0x40($ctx),$C,$C
+	vpand	$t1,$E,$E
+	vpaddd	0x60($ctx),$D,$D
+	vpaddd	0x80($ctx),$E,$E
+	vmovdqu	$A,0x00($ctx)
+	vmovdqu	$B,0x20($ctx)
+	vmovdqu	$C,0x40($ctx)
+	vmovdqu	$D,0x60($ctx)
+	vmovdqu	$E,0x80($ctx)
+
+	vmovdqu	$t0,(%rbx)			# save counters
+	lea	256+128(%rsp),%rbx
+	vmovdqu	0x60($Tbl),$tx			# pbswap_mask
+	dec	$num
+	jnz	.Loop_avx2
+
+	#mov	`$REG_SZ*17+8`(%rsp),$num
+	#lea	$REG_SZ($ctx),$ctx
+	#lea	`16*$REG_SZ/4`($inp),$inp
+	#dec	$num
+	#jnz	.Loop_grande_avx2
+
+.Ldone_avx2:
+	mov	`$REG_SZ*17`(%rsp),%rax		# original %rsp
+.cfi_def_cfa	%rax,8
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	movaps	-0xd8(%rax),%xmm6
+	movaps	-0xc8(%rax),%xmm7
+	movaps	-0xb8(%rax),%xmm8
+	movaps	-0xa8(%rax),%xmm9
+	movaps	-0x98(%rax),%xmm10
+	movaps	-0x88(%rax),%xmm11
+	movaps	-0x78(%rax),%xmm12
+	movaps	-0x68(%rax),%xmm13
+	movaps	-0x58(%rax),%xmm14
+	movaps	-0x48(%rax),%xmm15
+___
+$code.=<<___;
+	mov	-48(%rax),%r15
+.cfi_restore	%r15
+	mov	-40(%rax),%r14
+.cfi_restore	%r14
+	mov	-32(%rax),%r13
+.cfi_restore	%r13
+	mov	-24(%rax),%r12
+.cfi_restore	%r12
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue_avx2:
+	ret
+.cfi_endproc
+.size	sha1_multi_block_avx2,.-sha1_multi_block_avx2
+___
+						}	}}}
+$code.=<<___;
+
+.align	256
+	.long	0x5a827999,0x5a827999,0x5a827999,0x5a827999	# K_00_19
+	.long	0x5a827999,0x5a827999,0x5a827999,0x5a827999	# K_00_19
+K_XX_XX:
+	.long	0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1	# K_20_39
+	.long	0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1	# K_20_39
+	.long	0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc	# K_40_59
+	.long	0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc	# K_40_59
+	.long	0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6	# K_60_79
+	.long	0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6	# K_60_79
+	.long	0x00010203,0x04050607,0x08090a0b,0x0c0d0e0f	# pbswap
+	.long	0x00010203,0x04050607,0x08090a0b,0x0c0d0e0f	# pbswap
+	.byte	0xf,0xe,0xd,0xc,0xb,0xa,0x9,0x8,0x7,0x6,0x5,0x4,0x3,0x2,0x1,0x0
+	.asciz	"SHA1 multi-block transform for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+if ($win64) {
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	se_handler,\@abi-omnipotent
+.align	16
+se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# end of prologue label
+	cmp	%r10,%rbx		# context->Rip<.Lbody
+	jb	.Lin_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=.Lepilogue
+	jae	.Lin_prologue
+
+	mov	`16*17`(%rax),%rax	# pull saved stack pointer
+
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+
+	lea	-24-10*16(%rax),%rsi
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$20,%ecx
+	.long	0xa548f3fc		# cld; rep movsq
+
+.Lin_prologue:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	se_handler,.-se_handler
+___
+$code.=<<___ if ($avx>1);
+.type	avx2_handler,\@abi-omnipotent
+.align	16
+avx2_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# end of prologue label
+	cmp	%r10,%rbx		# context->Rip<body label
+	jb	.Lin_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lin_prologue
+
+	mov	`32*17`($context),%rax	# pull saved stack pointer
+
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+	lea	-56-10*16(%rax),%rsi
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$20,%ecx
+	.long	0xa548f3fc		# cld; rep movsq
+
+	jmp	.Lin_prologue
+.size	avx2_handler,.-avx2_handler
+___
+$code.=<<___;
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_sha1_multi_block
+	.rva	.LSEH_end_sha1_multi_block
+	.rva	.LSEH_info_sha1_multi_block
+	.rva	.LSEH_begin_sha1_multi_block_shaext
+	.rva	.LSEH_end_sha1_multi_block_shaext
+	.rva	.LSEH_info_sha1_multi_block_shaext
+___
+$code.=<<___ if ($avx);
+	.rva	.LSEH_begin_sha1_multi_block_avx
+	.rva	.LSEH_end_sha1_multi_block_avx
+	.rva	.LSEH_info_sha1_multi_block_avx
+___
+$code.=<<___ if ($avx>1);
+	.rva	.LSEH_begin_sha1_multi_block_avx2
+	.rva	.LSEH_end_sha1_multi_block_avx2
+	.rva	.LSEH_info_sha1_multi_block_avx2
+___
+$code.=<<___;
+.section	.xdata
+.align	8
+.LSEH_info_sha1_multi_block:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lbody,.Lepilogue			# HandlerData[]
+.LSEH_info_sha1_multi_block_shaext:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lbody_shaext,.Lepilogue_shaext	# HandlerData[]
+___
+$code.=<<___ if ($avx);
+.LSEH_info_sha1_multi_block_avx:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lbody_avx,.Lepilogue_avx		# HandlerData[]
+___
+$code.=<<___ if ($avx>1);
+.LSEH_info_sha1_multi_block_avx2:
+	.byte	9,0,0,0
+	.rva	avx2_handler
+	.rva	.Lbody_avx2,.Lepilogue_avx2		# HandlerData[]
+___
+}
+####################################################################
+
+sub rex {
+  local *opcode=shift;
+  my ($dst,$src)=@_;
+  my $rex=0;
+
+    $rex|=0x04			if ($dst>=8);
+    $rex|=0x01			if ($src>=8);
+    unshift @opcode,$rex|0x40	if ($rex);
+}
+
+sub sha1rnds4 {
+    if (@_[0] =~ /\$([x0-9a-f]+),\s*%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+      my @opcode=(0x0f,0x3a,0xcc);
+	rex(\@opcode,$3,$2);
+	push @opcode,0xc0|($2&7)|(($3&7)<<3);		# ModR/M
+	my $c=$1;
+	push @opcode,$c=~/^0/?oct($c):$c;
+	return ".byte\t".join(',',@opcode);
+    } else {
+	return "sha1rnds4\t".@_[0];
+    }
+}
+
+sub sha1op38 {
+    my $instr = shift;
+    my %opcodelet = (
+		"sha1nexte" => 0xc8,
+  		"sha1msg1"  => 0xc9,
+		"sha1msg2"  => 0xca	);
+
+    if (defined($opcodelet{$instr}) && @_[0] =~ /%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+      my @opcode=(0x0f,0x38);
+	rex(\@opcode,$2,$1);
+	push @opcode,$opcodelet{$instr};
+	push @opcode,0xc0|($1&7)|(($2&7)<<3);		# ModR/M
+	return ".byte\t".join(',',@opcode);
+    } else {
+	return $instr."\t".@_[0];
+    }
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval($1)/ge;
+
+	s/\b(sha1rnds4)\s+(.*)/sha1rnds4($2)/geo		or
+	s/\b(sha1[^\s]*)\s+(.*)/sha1op38($1,$2)/geo		or
+
+	s/\b(vmov[dq])\b(.+)%ymm([0-9]+)/$1$2%xmm$3/go		or
+	s/\b(vmovdqu)\b(.+)%x%ymm([0-9]+)/$1$2%xmm$3/go		or
+	s/\b(vpinsr[qd])\b(.+)%ymm([0-9]+),%ymm([0-9]+)/$1$2%xmm$3,%xmm$4/go	or
+	s/\b(vpextr[qd])\b(.+)%ymm([0-9]+)/$1$2%xmm$3/go	or
+	s/\b(vinserti128)\b(\s+)%ymm/$1$2\$1,%xmm/go		or
+	s/\b(vpbroadcast[qd]\s+)%ymm([0-9]+)/$1%xmm$2/go;
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-mips.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-mips.pl
new file mode 100644
index 000000000..08f84bc3b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-mips.pl
@@ -0,0 +1,461 @@
+#! /usr/bin/env perl
+# Copyright 2009-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# SHA1 block procedure for MIPS.
+
+# Performance improvement is 30% on unaligned input. The "secret" is
+# to deploy lwl/lwr pair to load unaligned input. One could have
+# vectorized Xupdate on MIPSIII/IV, but the goal was to code MIPS32-
+# compatible subroutine. There is room for minor optimization on
+# little-endian platforms...
+
+# September 2012.
+#
+# Add MIPS32r2 code (>25% less instructions).
+
+######################################################################
+# There is a number of MIPS ABI in use, O32 and N32/64 are most
+# widely used. Then there is a new contender: NUBI. It appears that if
+# one picks the latter, it's possible to arrange code in ABI neutral
+# manner. Therefore let's stick to NUBI register layout:
+#
+($zero,$at,$t0,$t1,$t2)=map("\$$_",(0..2,24,25));
+($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("\$$_",(4..11));
+($s0,$s1,$s2,$s3,$s4,$s5,$s6,$s7,$s8,$s9,$s10,$s11)=map("\$$_",(12..23));
+($gp,$tp,$sp,$fp,$ra)=map("\$$_",(3,28..31));
+#
+# The return value is placed in $a0. Following coding rules facilitate
+# interoperability:
+#
+# - never ever touch $tp, "thread pointer", former $gp;
+# - copy return value to $t0, former $v0 [or to $a0 if you're adapting
+#   old code];
+# - on O32 populate $a4-$a7 with 'lw $aN,4*N($sp)' if necessary;
+#
+# For reference here is register layout for N32/64 MIPS ABIs:
+#
+# ($zero,$at,$v0,$v1)=map("\$$_",(0..3));
+# ($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("\$$_",(4..11));
+# ($t0,$t1,$t2,$t3,$t8,$t9)=map("\$$_",(12..15,24,25));
+# ($s0,$s1,$s2,$s3,$s4,$s5,$s6,$s7)=map("\$$_",(16..23));
+# ($gp,$sp,$fp,$ra)=map("\$$_",(28..31));
+#
+$flavour = shift || "o32"; # supported flavours are o32,n32,64,nubi32,nubi64
+
+if ($flavour =~ /64|n32/i) {
+	$PTR_ADD="daddu";	# incidentally works even on n32
+	$PTR_SUB="dsubu";	# incidentally works even on n32
+	$REG_S="sd";
+	$REG_L="ld";
+	$PTR_SLL="dsll";	# incidentally works even on n32
+	$SZREG=8;
+} else {
+	$PTR_ADD="addu";
+	$PTR_SUB="subu";
+	$REG_S="sw";
+	$REG_L="lw";
+	$PTR_SLL="sll";
+	$SZREG=4;
+}
+#
+# <appro@openssl.org>
+#
+######################################################################
+
+$big_endian=(`echo MIPSEB | $ENV{CC} -E -`=~/MIPSEB/)?0:1 if ($ENV{CC});
+
+for (@ARGV) {	$output=$_ if (/\w[\w\-]*\.\w+$/);   }
+open STDOUT,">$output";
+
+if (!defined($big_endian))
+            {   $big_endian=(unpack('L',pack('N',1))==1);   }
+
+# offsets of the Most and Least Significant Bytes
+$MSB=$big_endian?0:3;
+$LSB=3&~$MSB;
+
+@X=map("\$$_",(8..23));	# a4-a7,s0-s11
+
+$ctx=$a0;
+$inp=$a1;
+$num=$a2;
+$A="\$1";
+$B="\$2";
+$C="\$3";
+$D="\$7";
+$E="\$24";	@V=($A,$B,$C,$D,$E);
+$t0="\$25";
+$t1=$num;	# $num is offloaded to stack
+$t2="\$30";	# fp
+$K="\$31";	# ra
+
+sub BODY_00_14 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+$code.=<<___	if (!$big_endian);
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+	wsbh	@X[$i],@X[$i]	# byte swap($i)
+	rotr	@X[$i],@X[$i],16
+#else
+	srl	$t0,@X[$i],24	# byte swap($i)
+	srl	$t1,@X[$i],8
+	andi	$t2,@X[$i],0xFF00
+	sll	@X[$i],@X[$i],24
+	andi	$t1,0xFF00
+	sll	$t2,$t2,8
+	or	@X[$i],$t0
+	or	$t1,$t2
+	or	@X[$i],$t1
+#endif
+___
+$code.=<<___;
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+	addu	$e,$K		# $i
+	xor	$t0,$c,$d
+	rotr	$t1,$a,27
+	and	$t0,$b
+	addu	$e,$t1
+#if defined(_MIPS_ARCH_MIPS32R6) || defined(_MIPS_ARCH_MIPS64R6)
+	 lw	@X[$j],$j*4($inp)
+#else
+	 lwl	@X[$j],$j*4+$MSB($inp)
+	 lwr	@X[$j],$j*4+$LSB($inp)
+#endif
+	xor	$t0,$d
+	addu	$e,@X[$i]
+	rotr	$b,$b,2
+	addu	$e,$t0
+#else
+	 lwl	@X[$j],$j*4+$MSB($inp)
+	sll	$t0,$a,5	# $i
+	addu	$e,$K
+	 lwr	@X[$j],$j*4+$LSB($inp)
+	srl	$t1,$a,27
+	addu	$e,$t0
+	xor	$t0,$c,$d
+	addu	$e,$t1
+	sll	$t2,$b,30
+	and	$t0,$b
+	srl	$b,$b,2
+	xor	$t0,$d
+	addu	$e,@X[$i]
+	or	$b,$t2
+	addu	$e,$t0
+#endif
+___
+}
+
+sub BODY_15_19 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+
+$code.=<<___	if (!$big_endian && $i==15);
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+	wsbh	@X[$i],@X[$i]	# byte swap($i)
+	rotr	@X[$i],@X[$i],16
+#else
+	srl	$t0,@X[$i],24	# byte swap($i)
+	srl	$t1,@X[$i],8
+	andi	$t2,@X[$i],0xFF00
+	sll	@X[$i],@X[$i],24
+	andi	$t1,0xFF00
+	sll	$t2,$t2,8
+	or	@X[$i],$t0
+	or	@X[$i],$t1
+	or	@X[$i],$t2
+#endif
+___
+$code.=<<___;
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+	addu	$e,$K		# $i
+	 xor	@X[$j%16],@X[($j+2)%16]
+	xor	$t0,$c,$d
+	rotr	$t1,$a,27
+	 xor	@X[$j%16],@X[($j+8)%16]
+	and	$t0,$b
+	addu	$e,$t1
+	 xor	@X[$j%16],@X[($j+13)%16]
+	xor	$t0,$d
+	addu	$e,@X[$i%16]
+	 rotr	@X[$j%16],@X[$j%16],31
+	rotr	$b,$b,2
+	addu	$e,$t0
+#else
+	 xor	@X[$j%16],@X[($j+2)%16]
+	sll	$t0,$a,5	# $i
+	addu	$e,$K
+	srl	$t1,$a,27
+	addu	$e,$t0
+	 xor	@X[$j%16],@X[($j+8)%16]
+	xor	$t0,$c,$d
+	addu	$e,$t1
+	 xor	@X[$j%16],@X[($j+13)%16]
+	sll	$t2,$b,30
+	and	$t0,$b
+	 srl	$t1,@X[$j%16],31
+	 addu	@X[$j%16],@X[$j%16]
+	srl	$b,$b,2
+	xor	$t0,$d
+	 or	@X[$j%16],$t1
+	addu	$e,@X[$i%16]
+	or	$b,$t2
+	addu	$e,$t0
+#endif
+___
+}
+
+sub BODY_20_39 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+$code.=<<___ if ($i<79);
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+	 xor	@X[$j%16],@X[($j+2)%16]
+	addu	$e,$K		# $i
+	rotr	$t1,$a,27
+	 xor	@X[$j%16],@X[($j+8)%16]
+	xor	$t0,$c,$d
+	addu	$e,$t1
+	 xor	@X[$j%16],@X[($j+13)%16]
+	xor	$t0,$b
+	addu	$e,@X[$i%16]
+	 rotr	@X[$j%16],@X[$j%16],31
+	rotr	$b,$b,2
+	addu	$e,$t0
+#else
+	 xor	@X[$j%16],@X[($j+2)%16]
+	sll	$t0,$a,5	# $i
+	addu	$e,$K
+	srl	$t1,$a,27
+	addu	$e,$t0
+	 xor	@X[$j%16],@X[($j+8)%16]
+	xor	$t0,$c,$d
+	addu	$e,$t1
+	 xor	@X[$j%16],@X[($j+13)%16]
+	sll	$t2,$b,30
+	xor	$t0,$b
+	 srl	$t1,@X[$j%16],31
+	 addu	@X[$j%16],@X[$j%16]
+	srl	$b,$b,2
+	addu	$e,@X[$i%16]
+	 or	@X[$j%16],$t1
+	or	$b,$t2
+	addu	$e,$t0
+#endif
+___
+$code.=<<___ if ($i==79);
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+	 lw	@X[0],0($ctx)
+	addu	$e,$K		# $i
+	 lw	@X[1],4($ctx)
+	rotr	$t1,$a,27
+	 lw	@X[2],8($ctx)
+	xor	$t0,$c,$d
+	addu	$e,$t1
+	 lw	@X[3],12($ctx)
+	xor	$t0,$b
+	addu	$e,@X[$i%16]
+	 lw	@X[4],16($ctx)
+	rotr	$b,$b,2
+	addu	$e,$t0
+#else
+	 lw	@X[0],0($ctx)
+	sll	$t0,$a,5	# $i
+	addu	$e,$K
+	 lw	@X[1],4($ctx)
+	srl	$t1,$a,27
+	addu	$e,$t0
+	 lw	@X[2],8($ctx)
+	xor	$t0,$c,$d
+	addu	$e,$t1
+	 lw	@X[3],12($ctx)
+	sll	$t2,$b,30
+	xor	$t0,$b
+	 lw	@X[4],16($ctx)
+	srl	$b,$b,2
+	addu	$e,@X[$i%16]
+	or	$b,$t2
+	addu	$e,$t0
+#endif
+___
+}
+
+sub BODY_40_59 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+$code.=<<___ if ($i<79);
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+	addu	$e,$K		# $i
+	and	$t0,$c,$d
+	 xor	@X[$j%16],@X[($j+2)%16]
+	rotr	$t1,$a,27
+	addu	$e,$t0
+	 xor	@X[$j%16],@X[($j+8)%16]
+	xor	$t0,$c,$d
+	addu	$e,$t1
+	 xor	@X[$j%16],@X[($j+13)%16]
+	and	$t0,$b
+	addu	$e,@X[$i%16]
+	 rotr	@X[$j%16],@X[$j%16],31
+	rotr	$b,$b,2
+	addu	$e,$t0
+#else
+	 xor	@X[$j%16],@X[($j+2)%16]
+	sll	$t0,$a,5	# $i
+	addu	$e,$K
+	srl	$t1,$a,27
+	addu	$e,$t0
+	 xor	@X[$j%16],@X[($j+8)%16]
+	and	$t0,$c,$d
+	addu	$e,$t1
+	 xor	@X[$j%16],@X[($j+13)%16]
+	sll	$t2,$b,30
+	addu	$e,$t0
+	 srl	$t1,@X[$j%16],31
+	xor	$t0,$c,$d
+	 addu	@X[$j%16],@X[$j%16]
+	and	$t0,$b
+	srl	$b,$b,2
+	 or	@X[$j%16],$t1
+	addu	$e,@X[$i%16]
+	or	$b,$t2
+	addu	$e,$t0
+#endif
+___
+}
+
+$FRAMESIZE=16;	# large enough to accommodate NUBI saved registers
+$SAVED_REGS_MASK = ($flavour =~ /nubi/i) ? "0xc0fff008" : "0xc0ff0000";
+
+$code=<<___;
+#include "mips_arch.h"
+
+.text
+
+.set	noat
+.set	noreorder
+.align	5
+.globl	sha1_block_data_order
+.ent	sha1_block_data_order
+sha1_block_data_order:
+	.frame	$sp,$FRAMESIZE*$SZREG,$ra
+	.mask	$SAVED_REGS_MASK,-$SZREG
+	.set	noreorder
+	$PTR_SUB $sp,$FRAMESIZE*$SZREG
+	$REG_S	$ra,($FRAMESIZE-1)*$SZREG($sp)
+	$REG_S	$fp,($FRAMESIZE-2)*$SZREG($sp)
+	$REG_S	$s11,($FRAMESIZE-3)*$SZREG($sp)
+	$REG_S	$s10,($FRAMESIZE-4)*$SZREG($sp)
+	$REG_S	$s9,($FRAMESIZE-5)*$SZREG($sp)
+	$REG_S	$s8,($FRAMESIZE-6)*$SZREG($sp)
+	$REG_S	$s7,($FRAMESIZE-7)*$SZREG($sp)
+	$REG_S	$s6,($FRAMESIZE-8)*$SZREG($sp)
+	$REG_S	$s5,($FRAMESIZE-9)*$SZREG($sp)
+	$REG_S	$s4,($FRAMESIZE-10)*$SZREG($sp)
+___
+$code.=<<___ if ($flavour =~ /nubi/i);	# optimize non-nubi prologue
+	$REG_S	$s3,($FRAMESIZE-11)*$SZREG($sp)
+	$REG_S	$s2,($FRAMESIZE-12)*$SZREG($sp)
+	$REG_S	$s1,($FRAMESIZE-13)*$SZREG($sp)
+	$REG_S	$s0,($FRAMESIZE-14)*$SZREG($sp)
+	$REG_S	$gp,($FRAMESIZE-15)*$SZREG($sp)
+___
+$code.=<<___;
+	$PTR_SLL $num,6
+	$PTR_ADD $num,$inp
+	$REG_S	$num,0($sp)
+	lw	$A,0($ctx)
+	lw	$B,4($ctx)
+	lw	$C,8($ctx)
+	lw	$D,12($ctx)
+	b	.Loop
+	lw	$E,16($ctx)
+.align	4
+.Loop:
+	.set	reorder
+#if defined(_MIPS_ARCH_MIPS32R6) || defined(_MIPS_ARCH_MIPS64R6)
+	lui	$K,0x5a82
+	lw	@X[0],($inp)
+	ori	$K,0x7999	# K_00_19
+#else
+	lwl	@X[0],$MSB($inp)
+	lui	$K,0x5a82
+	lwr	@X[0],$LSB($inp)
+	ori	$K,0x7999	# K_00_19
+#endif
+___
+for ($i=0;$i<15;$i++)	{ &BODY_00_14($i,@V); unshift(@V,pop(@V)); }
+for (;$i<20;$i++)	{ &BODY_15_19($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	lui	$K,0x6ed9
+	ori	$K,0xeba1	# K_20_39
+___
+for (;$i<40;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	lui	$K,0x8f1b
+	ori	$K,0xbcdc	# K_40_59
+___
+for (;$i<60;$i++)	{ &BODY_40_59($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	lui	$K,0xca62
+	ori	$K,0xc1d6	# K_60_79
+___
+for (;$i<80;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	$PTR_ADD $inp,64
+	$REG_L	$num,0($sp)
+
+	addu	$A,$X[0]
+	addu	$B,$X[1]
+	sw	$A,0($ctx)
+	addu	$C,$X[2]
+	addu	$D,$X[3]
+	sw	$B,4($ctx)
+	addu	$E,$X[4]
+	sw	$C,8($ctx)
+	sw	$D,12($ctx)
+	sw	$E,16($ctx)
+	.set	noreorder
+	bne	$inp,$num,.Loop
+	nop
+
+	.set	noreorder
+	$REG_L	$ra,($FRAMESIZE-1)*$SZREG($sp)
+	$REG_L	$fp,($FRAMESIZE-2)*$SZREG($sp)
+	$REG_L	$s11,($FRAMESIZE-3)*$SZREG($sp)
+	$REG_L	$s10,($FRAMESIZE-4)*$SZREG($sp)
+	$REG_L	$s9,($FRAMESIZE-5)*$SZREG($sp)
+	$REG_L	$s8,($FRAMESIZE-6)*$SZREG($sp)
+	$REG_L	$s7,($FRAMESIZE-7)*$SZREG($sp)
+	$REG_L	$s6,($FRAMESIZE-8)*$SZREG($sp)
+	$REG_L	$s5,($FRAMESIZE-9)*$SZREG($sp)
+	$REG_L	$s4,($FRAMESIZE-10)*$SZREG($sp)
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	$s3,($FRAMESIZE-11)*$SZREG($sp)
+	$REG_L	$s2,($FRAMESIZE-12)*$SZREG($sp)
+	$REG_L	$s1,($FRAMESIZE-13)*$SZREG($sp)
+	$REG_L	$s0,($FRAMESIZE-14)*$SZREG($sp)
+	$REG_L	$gp,($FRAMESIZE-15)*$SZREG($sp)
+___
+$code.=<<___;
+	jr	$ra
+	$PTR_ADD $sp,$FRAMESIZE*$SZREG
+.end	sha1_block_data_order
+.rdata
+.asciiz	"SHA1 for MIPS, CRYPTOGAMS by <appro\@openssl.org>"
+___
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-parisc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-parisc.pl
new file mode 100644
index 000000000..b001be16a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-parisc.pl
@@ -0,0 +1,279 @@
+#! /usr/bin/env perl
+# Copyright 2009-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# SHA1 block procedure for PA-RISC.
+
+# June 2009.
+#
+# On PA-7100LC performance is >30% better than gcc 3.2 generated code
+# for aligned input and >50% better for unaligned. Compared to vendor
+# compiler on PA-8600 it's almost 60% faster in 64-bit build and just
+# few percent faster in 32-bit one (this for aligned input, data for
+# unaligned input is not available).
+#
+# Special thanks to polarhome.com for providing HP-UX account.
+
+$flavour = shift;
+$output = shift;
+open STDOUT,">$output";
+
+if ($flavour =~ /64/) {
+	$LEVEL		="2.0W";
+	$SIZE_T		=8;
+	$FRAME_MARKER	=80;
+	$SAVED_RP	=16;
+	$PUSH		="std";
+	$PUSHMA		="std,ma";
+	$POP		="ldd";
+	$POPMB		="ldd,mb";
+} else {
+	$LEVEL		="1.0";
+	$SIZE_T		=4;
+	$FRAME_MARKER	=48;
+	$SAVED_RP	=20;
+	$PUSH		="stw";
+	$PUSHMA		="stwm";
+	$POP		="ldw";
+	$POPMB		="ldwm";
+}
+
+$FRAME=14*$SIZE_T+$FRAME_MARKER;# 14 saved regs + frame marker
+				#                 [+ argument transfer]
+$ctx="%r26";		# arg0
+$inp="%r25";		# arg1
+$num="%r24";		# arg2
+
+$t0="%r28";
+$t1="%r29";
+$K="%r31";
+
+@X=("%r1", "%r2", "%r3", "%r4", "%r5", "%r6", "%r7", "%r8",
+    "%r9", "%r10","%r11","%r12","%r13","%r14","%r15","%r16",$t0);
+
+@V=($A,$B,$C,$D,$E)=("%r19","%r20","%r21","%r22","%r23");
+
+sub BODY_00_19 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+$code.=<<___ if ($i<15);
+	addl	$K,$e,$e	; $i
+	shd	$a,$a,27,$t1
+	addl	@X[$i],$e,$e
+	and	$c,$b,$t0
+	addl	$t1,$e,$e
+	andcm	$d,$b,$t1
+	shd	$b,$b,2,$b
+	or	$t1,$t0,$t0
+	addl	$t0,$e,$e
+___
+$code.=<<___ if ($i>=15);	# with forward Xupdate
+	addl	$K,$e,$e	; $i
+	shd	$a,$a,27,$t1
+	xor	@X[($j+2)%16],@X[$j%16],@X[$j%16]
+	addl	@X[$i%16],$e,$e
+	and	$c,$b,$t0
+	xor	@X[($j+8)%16],@X[$j%16],@X[$j%16]
+	addl	$t1,$e,$e
+	andcm	$d,$b,$t1
+	shd	$b,$b,2,$b
+	or	$t1,$t0,$t0
+	xor	@X[($j+13)%16],@X[$j%16],@X[$j%16]
+	add	$t0,$e,$e
+	shd	@X[$j%16],@X[$j%16],31,@X[$j%16]
+___
+}
+
+sub BODY_20_39 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+$code.=<<___ if ($i<79);
+	xor	@X[($j+2)%16],@X[$j%16],@X[$j%16]	; $i
+	addl	$K,$e,$e
+	shd	$a,$a,27,$t1
+	xor	@X[($j+8)%16],@X[$j%16],@X[$j%16]
+	addl	@X[$i%16],$e,$e
+	xor	$b,$c,$t0
+	xor	@X[($j+13)%16],@X[$j%16],@X[$j%16]
+	addl	$t1,$e,$e
+	shd	$b,$b,2,$b
+	xor	$d,$t0,$t0
+	shd	@X[$j%16],@X[$j%16],31,@X[$j%16]
+	addl	$t0,$e,$e
+___
+$code.=<<___ if ($i==79);	# with context load
+	ldw	0($ctx),@X[0]	; $i
+	addl	$K,$e,$e
+	shd	$a,$a,27,$t1
+	ldw	4($ctx),@X[1]
+	addl	@X[$i%16],$e,$e
+	xor	$b,$c,$t0
+	ldw	8($ctx),@X[2]
+	addl	$t1,$e,$e
+	shd	$b,$b,2,$b
+	xor	$d,$t0,$t0
+	ldw	12($ctx),@X[3]
+	addl	$t0,$e,$e
+	ldw	16($ctx),@X[4]
+___
+}
+
+sub BODY_40_59 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+$code.=<<___;
+	shd	$a,$a,27,$t1	; $i
+	addl	$K,$e,$e
+	xor	@X[($j+2)%16],@X[$j%16],@X[$j%16]
+	xor	$d,$c,$t0
+	addl	@X[$i%16],$e,$e
+	xor	@X[($j+8)%16],@X[$j%16],@X[$j%16]
+	and	$b,$t0,$t0
+	addl	$t1,$e,$e
+	shd	$b,$b,2,$b
+	xor	@X[($j+13)%16],@X[$j%16],@X[$j%16]
+	addl	$t0,$e,$e
+	and	$d,$c,$t1
+	shd	@X[$j%16],@X[$j%16],31,@X[$j%16]
+	addl	$t1,$e,$e
+___
+}
+
+$code=<<___;
+	.LEVEL	$LEVEL
+	.SPACE	\$TEXT\$
+	.SUBSPA	\$CODE\$,QUAD=0,ALIGN=8,ACCESS=0x2C,CODE_ONLY
+
+	.EXPORT	sha1_block_data_order,ENTRY,ARGW0=GR,ARGW1=GR,ARGW2=GR
+sha1_block_data_order
+	.PROC
+	.CALLINFO	FRAME=`$FRAME-14*$SIZE_T`,NO_CALLS,SAVE_RP,ENTRY_GR=16
+	.ENTRY
+	$PUSH	%r2,-$SAVED_RP(%sp)	; standard prologue
+	$PUSHMA	%r3,$FRAME(%sp)
+	$PUSH	%r4,`-$FRAME+1*$SIZE_T`(%sp)
+	$PUSH	%r5,`-$FRAME+2*$SIZE_T`(%sp)
+	$PUSH	%r6,`-$FRAME+3*$SIZE_T`(%sp)
+	$PUSH	%r7,`-$FRAME+4*$SIZE_T`(%sp)
+	$PUSH	%r8,`-$FRAME+5*$SIZE_T`(%sp)
+	$PUSH	%r9,`-$FRAME+6*$SIZE_T`(%sp)
+	$PUSH	%r10,`-$FRAME+7*$SIZE_T`(%sp)
+	$PUSH	%r11,`-$FRAME+8*$SIZE_T`(%sp)
+	$PUSH	%r12,`-$FRAME+9*$SIZE_T`(%sp)
+	$PUSH	%r13,`-$FRAME+10*$SIZE_T`(%sp)
+	$PUSH	%r14,`-$FRAME+11*$SIZE_T`(%sp)
+	$PUSH	%r15,`-$FRAME+12*$SIZE_T`(%sp)
+	$PUSH	%r16,`-$FRAME+13*$SIZE_T`(%sp)
+
+	ldw	0($ctx),$A
+	ldw	4($ctx),$B
+	ldw	8($ctx),$C
+	ldw	12($ctx),$D
+	ldw	16($ctx),$E
+
+	extru	$inp,31,2,$t0		; t0=inp&3;
+	sh3addl	$t0,%r0,$t0		; t0*=8;
+	subi	32,$t0,$t0		; t0=32-t0;
+	mtctl	$t0,%cr11		; %sar=t0;
+
+L\$oop
+	ldi	3,$t0
+	andcm	$inp,$t0,$t0		; 64-bit neutral
+___
+	for ($i=0;$i<15;$i++) {		# load input block
+	$code.="\tldw	`4*$i`($t0),@X[$i]\n";		}
+$code.=<<___;
+	cmpb,*=	$inp,$t0,L\$aligned
+	ldw	60($t0),@X[15]
+	ldw	64($t0),@X[16]
+___
+	for ($i=0;$i<16;$i++) {		# align input
+	$code.="\tvshd	@X[$i],@X[$i+1],@X[$i]\n";	}
+$code.=<<___;
+L\$aligned
+	ldil	L'0x5a827000,$K		; K_00_19
+	ldo	0x999($K),$K
+___
+for ($i=0;$i<20;$i++)   { &BODY_00_19($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	ldil	L'0x6ed9e000,$K		; K_20_39
+	ldo	0xba1($K),$K
+___
+
+for (;$i<40;$i++)       { &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	ldil	L'0x8f1bb000,$K		; K_40_59
+	ldo	0xcdc($K),$K
+___
+
+for (;$i<60;$i++)       { &BODY_40_59($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	ldil	L'0xca62c000,$K		; K_60_79
+	ldo	0x1d6($K),$K
+___
+for (;$i<80;$i++)       { &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+
+$code.=<<___;
+	addl	@X[0],$A,$A
+	addl	@X[1],$B,$B
+	addl	@X[2],$C,$C
+	addl	@X[3],$D,$D
+	addl	@X[4],$E,$E
+	stw	$A,0($ctx)
+	stw	$B,4($ctx)
+	stw	$C,8($ctx)
+	stw	$D,12($ctx)
+	stw	$E,16($ctx)
+	addib,*<> -1,$num,L\$oop
+	ldo	64($inp),$inp
+
+	$POP	`-$FRAME-$SAVED_RP`(%sp),%r2	; standard epilogue
+	$POP	`-$FRAME+1*$SIZE_T`(%sp),%r4
+	$POP	`-$FRAME+2*$SIZE_T`(%sp),%r5
+	$POP	`-$FRAME+3*$SIZE_T`(%sp),%r6
+	$POP	`-$FRAME+4*$SIZE_T`(%sp),%r7
+	$POP	`-$FRAME+5*$SIZE_T`(%sp),%r8
+	$POP	`-$FRAME+6*$SIZE_T`(%sp),%r9
+	$POP	`-$FRAME+7*$SIZE_T`(%sp),%r10
+	$POP	`-$FRAME+8*$SIZE_T`(%sp),%r11
+	$POP	`-$FRAME+9*$SIZE_T`(%sp),%r12
+	$POP	`-$FRAME+10*$SIZE_T`(%sp),%r13
+	$POP	`-$FRAME+11*$SIZE_T`(%sp),%r14
+	$POP	`-$FRAME+12*$SIZE_T`(%sp),%r15
+	$POP	`-$FRAME+13*$SIZE_T`(%sp),%r16
+	bv	(%r2)
+	.EXIT
+	$POPMB	-$FRAME(%sp),%r3
+	.PROCEND
+	.STRINGZ "SHA1 block transform for PA-RISC, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+	=~ /GNU assembler/) {
+    $gnuas = 1;
+}
+
+foreach(split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	s/(\.LEVEL\s+2\.0)W/$1w/	if ($gnuas && $SIZE_T==8);
+	s/\.SPACE\s+\$TEXT\$/.text/	if ($gnuas && $SIZE_T==8);
+	s/\.SUBSPA.*//			if ($gnuas && $SIZE_T==8);
+	s/,\*/,/			if ($SIZE_T==4);
+	s/\bbv\b/bve/			if ($SIZE_T==8);
+
+	print $_,"\n";
+}
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-ppc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-ppc.pl
new file mode 100755
index 000000000..0cda0a3e1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-ppc.pl
@@ -0,0 +1,351 @@
+#! /usr/bin/env perl
+# Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# I let hardware handle unaligned input(*), except on page boundaries
+# (see below for details). Otherwise straightforward implementation
+# with X vector in register bank.
+#
+# (*) this means that this module is inappropriate for PPC403? Does
+#     anybody know if pre-POWER3 can sustain unaligned load?
+
+# 			-m64	-m32
+# ----------------------------------
+# PPC970,gcc-4.0.0	+76%	+59%
+# Power6,xlc-7		+68%	+33%
+
+$flavour = shift;
+
+if ($flavour =~ /64/) {
+	$SIZE_T	=8;
+	$LRSAVE	=2*$SIZE_T;
+	$UCMP	="cmpld";
+	$STU	="stdu";
+	$POP	="ld";
+	$PUSH	="std";
+} elsif ($flavour =~ /32/) {
+	$SIZE_T	=4;
+	$LRSAVE	=$SIZE_T;
+	$UCMP	="cmplw";
+	$STU	="stwu";
+	$POP	="lwz";
+	$PUSH	="stw";
+} else { die "nonsense $flavour"; }
+
+# Define endianness based on flavour
+# i.e.: linux64le
+$LITTLE_ENDIAN = ($flavour=~/le$/) ? $SIZE_T : 0;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open STDOUT,"| $^X $xlate $flavour ".shift || die "can't call $xlate: $!";
+
+$FRAME=24*$SIZE_T+64;
+$LOCALS=6*$SIZE_T;
+
+$K  ="r0";
+$sp ="r1";
+$toc="r2";
+$ctx="r3";
+$inp="r4";
+$num="r5";
+$t0 ="r15";
+$t1 ="r6";
+
+$A  ="r7";
+$B  ="r8";
+$C  ="r9";
+$D  ="r10";
+$E  ="r11";
+$T  ="r12";
+
+@V=($A,$B,$C,$D,$E,$T);
+@X=("r16","r17","r18","r19","r20","r21","r22","r23",
+    "r24","r25","r26","r27","r28","r29","r30","r31");
+
+sub loadbe {
+my ($dst, $src, $temp_reg) = @_;
+$code.=<<___ if (!$LITTLE_ENDIAN);
+	lwz	$dst,$src
+___
+$code.=<<___ if ($LITTLE_ENDIAN);
+	lwz	$temp_reg,$src
+	rotlwi	$dst,$temp_reg,8
+	rlwimi	$dst,$temp_reg,24,0,7
+	rlwimi	$dst,$temp_reg,24,16,23
+___
+}
+
+sub BODY_00_19 {
+my ($i,$a,$b,$c,$d,$e,$f)=@_;
+my $j=$i+1;
+
+	# Since the last value of $f is discarded, we can use
+	# it as a temp reg to swap byte-order when needed.
+	loadbe("@X[$i]","`$i*4`($inp)",$f) if ($i==0);
+	loadbe("@X[$j]","`$j*4`($inp)",$f) if ($i<15);
+$code.=<<___ if ($i<15);
+	add	$f,$K,$e
+	rotlwi	$e,$a,5
+	add	$f,$f,@X[$i]
+	and	$t0,$c,$b
+	add	$f,$f,$e
+	andc	$t1,$d,$b
+	rotlwi	$b,$b,30
+	or	$t0,$t0,$t1
+	add	$f,$f,$t0
+___
+$code.=<<___ if ($i>=15);
+	add	$f,$K,$e
+	rotlwi	$e,$a,5
+	xor	@X[$j%16],@X[$j%16],@X[($j+2)%16]
+	add	$f,$f,@X[$i%16]
+	and	$t0,$c,$b
+	xor	@X[$j%16],@X[$j%16],@X[($j+8)%16]
+	add	$f,$f,$e
+	andc	$t1,$d,$b
+	rotlwi	$b,$b,30
+	or	$t0,$t0,$t1
+	xor	@X[$j%16],@X[$j%16],@X[($j+13)%16]
+	add	$f,$f,$t0
+	rotlwi	@X[$j%16],@X[$j%16],1
+___
+}
+
+sub BODY_20_39 {
+my ($i,$a,$b,$c,$d,$e,$f)=@_;
+my $j=$i+1;
+$code.=<<___ if ($i<79);
+	add	$f,$K,$e
+	xor	$t0,$b,$d
+	rotlwi	$e,$a,5
+	xor	@X[$j%16],@X[$j%16],@X[($j+2)%16]
+	add	$f,$f,@X[$i%16]
+	xor	$t0,$t0,$c
+	xor	@X[$j%16],@X[$j%16],@X[($j+8)%16]
+	add	$f,$f,$t0
+	rotlwi	$b,$b,30
+	xor	@X[$j%16],@X[$j%16],@X[($j+13)%16]
+	add	$f,$f,$e
+	rotlwi	@X[$j%16],@X[$j%16],1
+___
+$code.=<<___ if ($i==79);
+	add	$f,$K,$e
+	xor	$t0,$b,$d
+	rotlwi	$e,$a,5
+	lwz	r16,0($ctx)
+	add	$f,$f,@X[$i%16]
+	xor	$t0,$t0,$c
+	lwz	r17,4($ctx)
+	add	$f,$f,$t0
+	rotlwi	$b,$b,30
+	lwz	r18,8($ctx)
+	lwz	r19,12($ctx)
+	add	$f,$f,$e
+	lwz	r20,16($ctx)
+___
+}
+
+sub BODY_40_59 {
+my ($i,$a,$b,$c,$d,$e,$f)=@_;
+my $j=$i+1;
+$code.=<<___;
+	add	$f,$K,$e
+	rotlwi	$e,$a,5
+	xor	@X[$j%16],@X[$j%16],@X[($j+2)%16]
+	add	$f,$f,@X[$i%16]
+	and	$t0,$b,$c
+	xor	@X[$j%16],@X[$j%16],@X[($j+8)%16]
+	add	$f,$f,$e
+	or	$t1,$b,$c
+	rotlwi	$b,$b,30
+	xor	@X[$j%16],@X[$j%16],@X[($j+13)%16]
+	and	$t1,$t1,$d
+	or	$t0,$t0,$t1
+	rotlwi	@X[$j%16],@X[$j%16],1
+	add	$f,$f,$t0
+___
+}
+
+$code=<<___;
+.machine	"any"
+.text
+
+.globl	.sha1_block_data_order
+.align	4
+.sha1_block_data_order:
+	$STU	$sp,-$FRAME($sp)
+	mflr	r0
+	$PUSH	r15,`$FRAME-$SIZE_T*17`($sp)
+	$PUSH	r16,`$FRAME-$SIZE_T*16`($sp)
+	$PUSH	r17,`$FRAME-$SIZE_T*15`($sp)
+	$PUSH	r18,`$FRAME-$SIZE_T*14`($sp)
+	$PUSH	r19,`$FRAME-$SIZE_T*13`($sp)
+	$PUSH	r20,`$FRAME-$SIZE_T*12`($sp)
+	$PUSH	r21,`$FRAME-$SIZE_T*11`($sp)
+	$PUSH	r22,`$FRAME-$SIZE_T*10`($sp)
+	$PUSH	r23,`$FRAME-$SIZE_T*9`($sp)
+	$PUSH	r24,`$FRAME-$SIZE_T*8`($sp)
+	$PUSH	r25,`$FRAME-$SIZE_T*7`($sp)
+	$PUSH	r26,`$FRAME-$SIZE_T*6`($sp)
+	$PUSH	r27,`$FRAME-$SIZE_T*5`($sp)
+	$PUSH	r28,`$FRAME-$SIZE_T*4`($sp)
+	$PUSH	r29,`$FRAME-$SIZE_T*3`($sp)
+	$PUSH	r30,`$FRAME-$SIZE_T*2`($sp)
+	$PUSH	r31,`$FRAME-$SIZE_T*1`($sp)
+	$PUSH	r0,`$FRAME+$LRSAVE`($sp)
+	lwz	$A,0($ctx)
+	lwz	$B,4($ctx)
+	lwz	$C,8($ctx)
+	lwz	$D,12($ctx)
+	lwz	$E,16($ctx)
+	andi.	r0,$inp,3
+	bne	Lunaligned
+Laligned:
+	mtctr	$num
+	bl	Lsha1_block_private
+	b	Ldone
+
+; PowerPC specification allows an implementation to be ill-behaved
+; upon unaligned access which crosses page boundary. "Better safe
+; than sorry" principle makes me treat it specially. But I don't
+; look for particular offending word, but rather for 64-byte input
+; block which crosses the boundary. Once found that block is aligned
+; and hashed separately...
+.align	4
+Lunaligned:
+	subfic	$t1,$inp,4096
+	andi.	$t1,$t1,4095	; distance to closest page boundary
+	srwi.	$t1,$t1,6	; t1/=64
+	beq	Lcross_page
+	$UCMP	$num,$t1
+	ble	Laligned	; didn't cross the page boundary
+	mtctr	$t1
+	subfc	$num,$t1,$num
+	bl	Lsha1_block_private
+Lcross_page:
+	li	$t1,16
+	mtctr	$t1
+	addi	r20,$sp,$LOCALS	; spot within the frame
+Lmemcpy:
+	lbz	r16,0($inp)
+	lbz	r17,1($inp)
+	lbz	r18,2($inp)
+	lbz	r19,3($inp)
+	addi	$inp,$inp,4
+	stb	r16,0(r20)
+	stb	r17,1(r20)
+	stb	r18,2(r20)
+	stb	r19,3(r20)
+	addi	r20,r20,4
+	bdnz	Lmemcpy
+
+	$PUSH	$inp,`$FRAME-$SIZE_T*18`($sp)
+	li	$t1,1
+	addi	$inp,$sp,$LOCALS
+	mtctr	$t1
+	bl	Lsha1_block_private
+	$POP	$inp,`$FRAME-$SIZE_T*18`($sp)
+	addic.	$num,$num,-1
+	bne	Lunaligned
+
+Ldone:
+	$POP	r0,`$FRAME+$LRSAVE`($sp)
+	$POP	r15,`$FRAME-$SIZE_T*17`($sp)
+	$POP	r16,`$FRAME-$SIZE_T*16`($sp)
+	$POP	r17,`$FRAME-$SIZE_T*15`($sp)
+	$POP	r18,`$FRAME-$SIZE_T*14`($sp)
+	$POP	r19,`$FRAME-$SIZE_T*13`($sp)
+	$POP	r20,`$FRAME-$SIZE_T*12`($sp)
+	$POP	r21,`$FRAME-$SIZE_T*11`($sp)
+	$POP	r22,`$FRAME-$SIZE_T*10`($sp)
+	$POP	r23,`$FRAME-$SIZE_T*9`($sp)
+	$POP	r24,`$FRAME-$SIZE_T*8`($sp)
+	$POP	r25,`$FRAME-$SIZE_T*7`($sp)
+	$POP	r26,`$FRAME-$SIZE_T*6`($sp)
+	$POP	r27,`$FRAME-$SIZE_T*5`($sp)
+	$POP	r28,`$FRAME-$SIZE_T*4`($sp)
+	$POP	r29,`$FRAME-$SIZE_T*3`($sp)
+	$POP	r30,`$FRAME-$SIZE_T*2`($sp)
+	$POP	r31,`$FRAME-$SIZE_T*1`($sp)
+	mtlr	r0
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,4,1,0x80,18,3,0
+	.long	0
+___
+
+# This is private block function, which uses tailored calling
+# interface, namely upon entry SHA_CTX is pre-loaded to given
+# registers and counter register contains amount of chunks to
+# digest...
+$code.=<<___;
+.align	4
+Lsha1_block_private:
+___
+$code.=<<___;	# load K_00_19
+	lis	$K,0x5a82
+	ori	$K,$K,0x7999
+___
+for($i=0;$i<20;$i++)	{ &BODY_00_19($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;	# load K_20_39
+	lis	$K,0x6ed9
+	ori	$K,$K,0xeba1
+___
+for(;$i<40;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;	# load K_40_59
+	lis	$K,0x8f1b
+	ori	$K,$K,0xbcdc
+___
+for(;$i<60;$i++)	{ &BODY_40_59($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;	# load K_60_79
+	lis	$K,0xca62
+	ori	$K,$K,0xc1d6
+___
+for(;$i<80;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	add	r16,r16,$E
+	add	r17,r17,$T
+	add	r18,r18,$A
+	add	r19,r19,$B
+	add	r20,r20,$C
+	stw	r16,0($ctx)
+	mr	$A,r16
+	stw	r17,4($ctx)
+	mr	$B,r17
+	stw	r18,8($ctx)
+	mr	$C,r18
+	stw	r19,12($ctx)
+	mr	$D,r19
+	stw	r20,16($ctx)
+	mr	$E,r20
+	addi	$inp,$inp,`16*4`
+	bdnz	Lsha1_block_private
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+.size	.sha1_block_data_order,.-.sha1_block_data_order
+___
+$code.=<<___;
+.asciz	"SHA1 block transform for PPC, CRYPTOGAMS by <appro\@fy.chalmers.se>"
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-s390x.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-s390x.pl
new file mode 100644
index 000000000..5729c3089
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-s390x.pl
@@ -0,0 +1,249 @@
+#! /usr/bin/env perl
+# Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# SHA1 block procedure for s390x.
+
+# April 2007.
+#
+# Performance is >30% better than gcc 3.3 generated code. But the real
+# twist is that SHA1 hardware support is detected and utilized. In
+# which case performance can reach further >4.5x for larger chunks.
+
+# January 2009.
+#
+# Optimize Xupdate for amount of memory references and reschedule
+# instructions to favour dual-issue z10 pipeline. On z10 hardware is
+# "only" ~2.3x faster than software.
+
+# November 2010.
+#
+# Adapt for -m31 build. If kernel supports what's called "highgprs"
+# feature on Linux [see /proc/cpuinfo], it's possible to use 64-bit
+# instructions and achieve "64-bit" performance even in 31-bit legacy
+# application context. The feature is not specific to any particular
+# processor, as long as it's "z-CPU". Latter implies that the code
+# remains z/Architecture specific. On z990 it was measured to perform
+# 23% better than code generated by gcc 4.3.
+
+$kimdfunc=1;	# magic function code for kimd instruction
+
+$flavour = shift;
+
+if ($flavour =~ /3[12]/) {
+	$SIZE_T=4;
+	$g="";
+} else {
+	$SIZE_T=8;
+	$g="g";
+}
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+$K_00_39="%r0"; $K=$K_00_39;
+$K_40_79="%r1";
+$ctx="%r2";	$prefetch="%r2";
+$inp="%r3";
+$len="%r4";
+
+$A="%r5";
+$B="%r6";
+$C="%r7";
+$D="%r8";
+$E="%r9";	@V=($A,$B,$C,$D,$E);
+$t0="%r10";
+$t1="%r11";
+@X=("%r12","%r13","%r14");
+$sp="%r15";
+
+$stdframe=16*$SIZE_T+4*8;
+$frame=$stdframe+16*4;
+
+sub Xupdate {
+my $i=shift;
+
+$code.=<<___ if ($i==15);
+	lg	$prefetch,$stdframe($sp)	### Xupdate(16) warm-up
+	lr	$X[0],$X[2]
+___
+return if ($i&1);	# Xupdate is vectorized and executed every 2nd cycle
+$code.=<<___ if ($i<16);
+	lg	$X[0],`$i*4`($inp)	### Xload($i)
+	rllg	$X[1],$X[0],32
+___
+$code.=<<___ if ($i>=16);
+	xgr	$X[0],$prefetch		### Xupdate($i)
+	lg	$prefetch,`$stdframe+4*(($i+2)%16)`($sp)
+	xg	$X[0],`$stdframe+4*(($i+8)%16)`($sp)
+	xgr	$X[0],$prefetch
+	rll	$X[0],$X[0],1
+	rllg	$X[1],$X[0],32
+	rll	$X[1],$X[1],1
+	rllg	$X[0],$X[1],32
+	lr	$X[2],$X[1]		# feedback
+___
+$code.=<<___ if ($i<=70);
+	stg	$X[0],`$stdframe+4*($i%16)`($sp)
+___
+unshift(@X,pop(@X));
+}
+
+sub BODY_00_19 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $xi=$X[1];
+
+	&Xupdate($i);
+$code.=<<___;
+	alr	$e,$K		### $i
+	rll	$t1,$a,5
+	lr	$t0,$d
+	xr	$t0,$c
+	alr	$e,$t1
+	nr	$t0,$b
+	alr	$e,$xi
+	xr	$t0,$d
+	rll	$b,$b,30
+	alr	$e,$t0
+___
+}
+
+sub BODY_20_39 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $xi=$X[1];
+
+	&Xupdate($i);
+$code.=<<___;
+	alr	$e,$K		### $i
+	rll	$t1,$a,5
+	lr	$t0,$b
+	alr	$e,$t1
+	xr	$t0,$c
+	alr	$e,$xi
+	xr	$t0,$d
+	rll	$b,$b,30
+	alr	$e,$t0
+___
+}
+
+sub BODY_40_59 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $xi=$X[1];
+
+	&Xupdate($i);
+$code.=<<___;
+	alr	$e,$K		### $i
+	rll	$t1,$a,5
+	lr	$t0,$b
+	alr	$e,$t1
+	or	$t0,$c
+	lr	$t1,$b
+	nr	$t0,$d
+	nr	$t1,$c
+	alr	$e,$xi
+	or	$t0,$t1
+	rll	$b,$b,30
+	alr	$e,$t0
+___
+}
+
+$code.=<<___;
+#include "s390x_arch.h"
+
+.text
+.align	64
+.type	Ktable,\@object
+Ktable: .long	0x5a827999,0x6ed9eba1,0x8f1bbcdc,0xca62c1d6
+	.skip	48	#.long	0,0,0,0,0,0,0,0,0,0,0,0
+.size	Ktable,.-Ktable
+.globl	sha1_block_data_order
+.type	sha1_block_data_order,\@function
+sha1_block_data_order:
+___
+$code.=<<___ if ($kimdfunc);
+	larl	%r1,OPENSSL_s390xcap_P
+	lg	%r0,S390X_KIMD(%r1)	# check kimd capabilities
+	tmhh	%r0,`0x8000>>$kimdfunc`
+	jz	.Lsoftware
+	lghi	%r0,$kimdfunc
+	lgr	%r1,$ctx
+	lgr	%r2,$inp
+	sllg	%r3,$len,6
+	.long	0xb93e0002	# kimd %r0,%r2
+	brc	1,.-4		# pay attention to "partial completion"
+	br	%r14
+.align	16
+.Lsoftware:
+___
+$code.=<<___;
+	lghi	%r1,-$frame
+	st${g}	$ctx,`2*$SIZE_T`($sp)
+	stm${g}	%r6,%r15,`6*$SIZE_T`($sp)
+	lgr	%r0,$sp
+	la	$sp,0(%r1,$sp)
+	st${g}	%r0,0($sp)
+
+	larl	$t0,Ktable
+	llgf	$A,0($ctx)
+	llgf	$B,4($ctx)
+	llgf	$C,8($ctx)
+	llgf	$D,12($ctx)
+	llgf	$E,16($ctx)
+
+	lg	$K_00_39,0($t0)
+	lg	$K_40_79,8($t0)
+
+.Lloop:
+	rllg	$K_00_39,$K_00_39,32
+___
+for ($i=0;$i<20;$i++)	{ &BODY_00_19($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	rllg	$K_00_39,$K_00_39,32
+___
+for (;$i<40;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;	$K=$K_40_79;
+	rllg	$K_40_79,$K_40_79,32
+___
+for (;$i<60;$i++)	{ &BODY_40_59($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	rllg	$K_40_79,$K_40_79,32
+___
+for (;$i<80;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+
+	l${g}	$ctx,`$frame+2*$SIZE_T`($sp)
+	la	$inp,64($inp)
+	al	$A,0($ctx)
+	al	$B,4($ctx)
+	al	$C,8($ctx)
+	al	$D,12($ctx)
+	al	$E,16($ctx)
+	st	$A,0($ctx)
+	st	$B,4($ctx)
+	st	$C,8($ctx)
+	st	$D,12($ctx)
+	st	$E,16($ctx)
+	brct${g} $len,.Lloop
+
+	lm${g}	%r6,%r15,`$frame+6*$SIZE_T`($sp)
+	br	%r14
+.size	sha1_block_data_order,.-sha1_block_data_order
+.string	"SHA1 block transform for s390x, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-sparcv9.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-sparcv9.pl
new file mode 100644
index 000000000..3e612e3d5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-sparcv9.pl
@@ -0,0 +1,434 @@
+#! /usr/bin/env perl
+# Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+#
+# Hardware SPARC T4 support by David S. Miller
+# ====================================================================
+
+# Performance improvement is not really impressive on pre-T1 CPU: +8%
+# over Sun C and +25% over gcc [3.3]. While on T1, a.k.a. Niagara, it
+# turned to be 40% faster than 64-bit code generated by Sun C 5.8 and
+# >2x than 64-bit code generated by gcc 3.4. And there is a gimmick.
+# X[16] vector is packed to 8 64-bit registers and as result nothing
+# is spilled on stack. In addition input data is loaded in compact
+# instruction sequence, thus minimizing the window when the code is
+# subject to [inter-thread] cache-thrashing hazard. The goal is to
+# ensure scalability on UltraSPARC T1, or rather to avoid decay when
+# amount of active threads exceeds the number of physical cores.
+
+# SPARC T4 SHA1 hardware achieves 3.72 cycles per byte, which is 3.1x
+# faster than software. Multi-process benchmark saturates at 11x
+# single-process result on 8-core processor, or ~9GBps per 2.85GHz
+# socket.
+
+$output=pop;
+open STDOUT,">$output";
+
+@X=("%o0","%o1","%o2","%o3","%o4","%o5","%g1","%o7");
+$rot1m="%g2";
+$tmp64="%g3";
+$Xi="%g4";
+$A="%l0";
+$B="%l1";
+$C="%l2";
+$D="%l3";
+$E="%l4";
+@V=($A,$B,$C,$D,$E);
+$K_00_19="%l5";
+$K_20_39="%l6";
+$K_40_59="%l7";
+$K_60_79="%g5";
+@K=($K_00_19,$K_20_39,$K_40_59,$K_60_79);
+
+$ctx="%i0";
+$inp="%i1";
+$len="%i2";
+$tmp0="%i3";
+$tmp1="%i4";
+$tmp2="%i5";
+
+sub BODY_00_15 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $xi=($i&1)?@X[($i/2)%8]:$Xi;
+
+$code.=<<___;
+	sll	$a,5,$tmp0		!! $i
+	add	@K[$i/20],$e,$e
+	srl	$a,27,$tmp1
+	add	$tmp0,$e,$e
+	and	$c,$b,$tmp0
+	add	$tmp1,$e,$e
+	sll	$b,30,$tmp2
+	andn	$d,$b,$tmp1
+	srl	$b,2,$b
+	or	$tmp1,$tmp0,$tmp1
+	or	$tmp2,$b,$b
+	add	$xi,$e,$e
+___
+if ($i&1 && $i<15) {
+	$code.=
+	"	srlx	@X[(($i+1)/2)%8],32,$Xi\n";
+}
+$code.=<<___;
+	add	$tmp1,$e,$e
+___
+}
+
+sub Xupdate {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i/2;
+
+if ($i&1) {
+$code.=<<___;
+	sll	$a,5,$tmp0		!! $i
+	add	@K[$i/20],$e,$e
+	srl	$a,27,$tmp1
+___
+} else {
+$code.=<<___;
+	sllx	@X[($j+6)%8],32,$Xi	! Xupdate($i)
+	xor	@X[($j+1)%8],@X[$j%8],@X[$j%8]
+	srlx	@X[($j+7)%8],32,$tmp1
+	xor	@X[($j+4)%8],@X[$j%8],@X[$j%8]
+	sll	$a,5,$tmp0		!! $i
+	or	$tmp1,$Xi,$Xi
+	add	@K[$i/20],$e,$e		!!
+	xor	$Xi,@X[$j%8],@X[$j%8]
+	srlx	@X[$j%8],31,$Xi
+	add	@X[$j%8],@X[$j%8],@X[$j%8]
+	and	$Xi,$rot1m,$Xi
+	andn	@X[$j%8],$rot1m,@X[$j%8]
+	srl	$a,27,$tmp1		!!
+	or	$Xi,@X[$j%8],@X[$j%8]
+___
+}
+}
+
+sub BODY_16_19 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+
+	&Xupdate(@_);
+    if ($i&1) {
+	$xi=@X[($i/2)%8];
+    } else {
+	$xi=$Xi;
+	$code.="\tsrlx	@X[($i/2)%8],32,$xi\n";
+    }
+$code.=<<___;
+	add	$tmp0,$e,$e		!!
+	and	$c,$b,$tmp0
+	add	$tmp1,$e,$e
+	sll	$b,30,$tmp2
+	add	$xi,$e,$e
+	andn	$d,$b,$tmp1
+	srl	$b,2,$b
+	or	$tmp1,$tmp0,$tmp1
+	or	$tmp2,$b,$b
+	add	$tmp1,$e,$e
+___
+}
+
+sub BODY_20_39 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $xi;
+	&Xupdate(@_);
+    if ($i&1) {
+	$xi=@X[($i/2)%8];
+    } else {
+	$xi=$Xi;
+	$code.="\tsrlx	@X[($i/2)%8],32,$xi\n";
+    }
+$code.=<<___;
+	add	$tmp0,$e,$e		!!
+	xor	$c,$b,$tmp0
+	add	$tmp1,$e,$e
+	sll	$b,30,$tmp2
+	xor	$d,$tmp0,$tmp1
+	srl	$b,2,$b
+	add	$tmp1,$e,$e
+	or	$tmp2,$b,$b
+	add	$xi,$e,$e
+___
+}
+
+sub BODY_40_59 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $xi;
+	&Xupdate(@_);
+    if ($i&1) {
+	$xi=@X[($i/2)%8];
+    } else {
+	$xi=$Xi;
+	$code.="\tsrlx	@X[($i/2)%8],32,$xi\n";
+    }
+$code.=<<___;
+	add	$tmp0,$e,$e		!!
+	and	$c,$b,$tmp0
+	add	$tmp1,$e,$e
+	sll	$b,30,$tmp2
+	or	$c,$b,$tmp1
+	srl	$b,2,$b
+	and	$d,$tmp1,$tmp1
+	add	$xi,$e,$e
+	or	$tmp1,$tmp0,$tmp1
+	or	$tmp2,$b,$b
+	add	$tmp1,$e,$e
+___
+}
+
+$code.=<<___;
+#include "sparc_arch.h"
+
+#ifdef __arch64__
+.register	%g2,#scratch
+.register	%g3,#scratch
+#endif
+
+.section	".text",#alloc,#execinstr
+
+#ifdef __PIC__
+SPARC_PIC_THUNK(%g1)
+#endif
+
+.align	32
+.globl	sha1_block_data_order
+sha1_block_data_order:
+	SPARC_LOAD_ADDRESS_LEAF(OPENSSL_sparcv9cap_P,%g1,%g5)
+	ld	[%g1+4],%g1		! OPENSSL_sparcv9cap_P[1]
+
+	andcc	%g1, CFR_SHA1, %g0
+	be	.Lsoftware
+	nop
+
+	ld	[%o0 + 0x00], %f0	! load context
+	ld	[%o0 + 0x04], %f1
+	ld	[%o0 + 0x08], %f2
+	andcc	%o1, 0x7, %g0
+	ld	[%o0 + 0x0c], %f3
+	bne,pn	%icc, .Lhwunaligned
+	 ld	[%o0 + 0x10], %f4
+
+.Lhw_loop:
+	ldd	[%o1 + 0x00], %f8
+	ldd	[%o1 + 0x08], %f10
+	ldd	[%o1 + 0x10], %f12
+	ldd	[%o1 + 0x18], %f14
+	ldd	[%o1 + 0x20], %f16
+	ldd	[%o1 + 0x28], %f18
+	ldd	[%o1 + 0x30], %f20
+	subcc	%o2, 1, %o2		! done yet?
+	ldd	[%o1 + 0x38], %f22
+	add	%o1, 0x40, %o1
+	prefetch [%o1 + 63], 20
+
+	.word	0x81b02820		! SHA1
+
+	bne,pt	SIZE_T_CC, .Lhw_loop
+	nop
+
+.Lhwfinish:
+	st	%f0, [%o0 + 0x00]	! store context
+	st	%f1, [%o0 + 0x04]
+	st	%f2, [%o0 + 0x08]
+	st	%f3, [%o0 + 0x0c]
+	retl
+	st	%f4, [%o0 + 0x10]
+
+.align	8
+.Lhwunaligned:
+	alignaddr %o1, %g0, %o1
+
+	ldd	[%o1 + 0x00], %f10
+.Lhwunaligned_loop:
+	ldd	[%o1 + 0x08], %f12
+	ldd	[%o1 + 0x10], %f14
+	ldd	[%o1 + 0x18], %f16
+	ldd	[%o1 + 0x20], %f18
+	ldd	[%o1 + 0x28], %f20
+	ldd	[%o1 + 0x30], %f22
+	ldd	[%o1 + 0x38], %f24
+	subcc	%o2, 1, %o2		! done yet?
+	ldd	[%o1 + 0x40], %f26
+	add	%o1, 0x40, %o1
+	prefetch [%o1 + 63], 20
+
+	faligndata %f10, %f12, %f8
+	faligndata %f12, %f14, %f10
+	faligndata %f14, %f16, %f12
+	faligndata %f16, %f18, %f14
+	faligndata %f18, %f20, %f16
+	faligndata %f20, %f22, %f18
+	faligndata %f22, %f24, %f20
+	faligndata %f24, %f26, %f22
+
+	.word	0x81b02820		! SHA1
+
+	bne,pt	SIZE_T_CC, .Lhwunaligned_loop
+	for	%f26, %f26, %f10	! %f10=%f26
+
+	ba	.Lhwfinish
+	nop
+
+.align	16
+.Lsoftware:
+	save	%sp,-STACK_FRAME,%sp
+	sllx	$len,6,$len
+	add	$inp,$len,$len
+
+	or	%g0,1,$rot1m
+	sllx	$rot1m,32,$rot1m
+	or	$rot1m,1,$rot1m
+
+	ld	[$ctx+0],$A
+	ld	[$ctx+4],$B
+	ld	[$ctx+8],$C
+	ld	[$ctx+12],$D
+	ld	[$ctx+16],$E
+	andn	$inp,7,$tmp0
+
+	sethi	%hi(0x5a827999),$K_00_19
+	or	$K_00_19,%lo(0x5a827999),$K_00_19
+	sethi	%hi(0x6ed9eba1),$K_20_39
+	or	$K_20_39,%lo(0x6ed9eba1),$K_20_39
+	sethi	%hi(0x8f1bbcdc),$K_40_59
+	or	$K_40_59,%lo(0x8f1bbcdc),$K_40_59
+	sethi	%hi(0xca62c1d6),$K_60_79
+	or	$K_60_79,%lo(0xca62c1d6),$K_60_79
+
+.Lloop:
+	ldx	[$tmp0+0],@X[0]
+	ldx	[$tmp0+16],@X[2]
+	ldx	[$tmp0+32],@X[4]
+	ldx	[$tmp0+48],@X[6]
+	and	$inp,7,$tmp1
+	ldx	[$tmp0+8],@X[1]
+	sll	$tmp1,3,$tmp1
+	ldx	[$tmp0+24],@X[3]
+	subcc	%g0,$tmp1,$tmp2	! should be 64-$tmp1, but -$tmp1 works too
+	ldx	[$tmp0+40],@X[5]
+	bz,pt	%icc,.Laligned
+	ldx	[$tmp0+56],@X[7]
+
+	sllx	@X[0],$tmp1,@X[0]
+	ldx	[$tmp0+64],$tmp64
+___
+for($i=0;$i<7;$i++)
+{   $code.=<<___;
+	srlx	@X[$i+1],$tmp2,$Xi
+	sllx	@X[$i+1],$tmp1,@X[$i+1]
+	or	$Xi,@X[$i],@X[$i]
+___
+}
+$code.=<<___;
+	srlx	$tmp64,$tmp2,$tmp64
+	or	$tmp64,@X[7],@X[7]
+.Laligned:
+	srlx	@X[0],32,$Xi
+___
+for ($i=0;$i<16;$i++)	{ &BODY_00_15($i,@V); unshift(@V,pop(@V)); }
+for (;$i<20;$i++)	{ &BODY_16_19($i,@V); unshift(@V,pop(@V)); }
+for (;$i<40;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+for (;$i<60;$i++)	{ &BODY_40_59($i,@V); unshift(@V,pop(@V)); }
+for (;$i<80;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+
+	ld	[$ctx+0],@X[0]
+	ld	[$ctx+4],@X[1]
+	ld	[$ctx+8],@X[2]
+	ld	[$ctx+12],@X[3]
+	add	$inp,64,$inp
+	ld	[$ctx+16],@X[4]
+	cmp	$inp,$len
+
+	add	$A,@X[0],$A
+	st	$A,[$ctx+0]
+	add	$B,@X[1],$B
+	st	$B,[$ctx+4]
+	add	$C,@X[2],$C
+	st	$C,[$ctx+8]
+	add	$D,@X[3],$D
+	st	$D,[$ctx+12]
+	add	$E,@X[4],$E
+	st	$E,[$ctx+16]
+
+	bne	SIZE_T_CC,.Lloop
+	andn	$inp,7,$tmp0
+
+	ret
+	restore
+.type	sha1_block_data_order,#function
+.size	sha1_block_data_order,(.-sha1_block_data_order)
+.asciz	"SHA1 block transform for SPARCv9, CRYPTOGAMS by <appro\@openssl.org>"
+.align	4
+___
+
+# Purpose of these subroutines is to explicitly encode VIS instructions,
+# so that one can compile the module without having to specify VIS
+# extensions on compiler command line, e.g. -xarch=v9 vs. -xarch=v9a.
+# Idea is to reserve for option to produce "universal" binary and let
+# programmer detect if current CPU is VIS capable at run-time.
+sub unvis {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my $ref,$opf;
+my %visopf = (	"faligndata"	=> 0x048,
+		"for"		=> 0x07c	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rd";
+
+    if ($opf=$visopf{$mnemonic}) {
+	foreach ($rs1,$rs2,$rd) {
+	    return $ref if (!/%f([0-9]{1,2})/);
+	    $_=$1;
+	    if ($1>=32) {
+		return $ref if ($1&1);
+		# re-encode for upper double register addressing
+		$_=($1|$1>>5)&31;
+	    }
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			0x81b00000|$rd<<25|$rs1<<14|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+sub unalignaddr {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my %bias = ( "g" => 0, "o" => 8, "l" => 16, "i" => 24 );
+my $ref="$mnemonic\t$rs1,$rs2,$rd";
+
+    foreach ($rs1,$rs2,$rd) {
+	if (/%([goli])([0-7])/)	{ $_=$bias{$1}+$2; }
+	else			{ return $ref; }
+    }
+    return  sprintf ".word\t0x%08x !%s",
+		    0x81b00300|$rd<<25|$rs1<<14|$rs2,
+		    $ref;
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	s/\b(f[^\s]*)\s+(%f[0-9]{1,2}),\s*(%f[0-9]{1,2}),\s*(%f[0-9]{1,2})/
+		&unvis($1,$2,$3,$4)
+	 /ge;
+	s/\b(alignaddr)\s+(%[goli][0-7]),\s*(%[goli][0-7]),\s*(%[goli][0-7])/
+		&unalignaddr($1,$2,$3,$4)
+	 /ge;
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-sparcv9a.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-sparcv9a.pl
new file mode 100644
index 000000000..50d3e136a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-sparcv9a.pl
@@ -0,0 +1,608 @@
+#! /usr/bin/env perl
+# Copyright 2009-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# January 2009
+#
+# Provided that UltraSPARC VIS instructions are pipe-lined(*) and
+# pairable(*) with IALU ones, offloading of Xupdate to the UltraSPARC
+# Graphic Unit would make it possible to achieve higher instruction-
+# level parallelism, ILP, and thus higher performance. It should be
+# explicitly noted that ILP is the keyword, and it means that this
+# code would be unsuitable for cores like UltraSPARC-Tx. The idea is
+# not really novel, Sun had VIS-powered implementation for a while.
+# Unlike Sun's implementation this one can process multiple unaligned
+# input blocks, and as such works as drop-in replacement for OpenSSL
+# sha1_block_data_order. Performance improvement was measured to be
+# 40% over pure IALU sha1-sparcv9.pl on UltraSPARC-IIi, but 12% on
+# UltraSPARC-III. See below for discussion...
+#
+# The module does not present direct interest for OpenSSL, because
+# it doesn't provide better performance on contemporary SPARCv9 CPUs,
+# UltraSPARC-Tx and SPARC64-V[II] to be specific. Those who feel they
+# absolutely must score on UltraSPARC-I-IV can simply replace
+# crypto/sha/asm/sha1-sparcv9.pl with this module.
+#
+# (*)	"Pipe-lined" means that even if it takes several cycles to
+#	complete, next instruction using same functional unit [but not
+#	depending on the result of the current instruction] can start
+#	execution without having to wait for the unit. "Pairable"
+#	means that two [or more] independent instructions can be
+#	issued at the very same time.
+
+$bits=32;
+for (@ARGV)	{ $bits=64 if (/\-m64/ || /\-xarch\=v9/); }
+if ($bits==64)	{ $bias=2047; $frame=192; }
+else		{ $bias=0;    $frame=112; }
+
+$output=shift;
+open STDOUT,">$output";
+
+$ctx="%i0";
+$inp="%i1";
+$len="%i2";
+$tmp0="%i3";
+$tmp1="%i4";
+$tmp2="%i5";
+$tmp3="%g5";
+
+$base="%g1";
+$align="%g4";
+$Xfer="%o5";
+$nXfer=$tmp3;
+$Xi="%o7";
+
+$A="%l0";
+$B="%l1";
+$C="%l2";
+$D="%l3";
+$E="%l4";
+@V=($A,$B,$C,$D,$E);
+
+$Actx="%o0";
+$Bctx="%o1";
+$Cctx="%o2";
+$Dctx="%o3";
+$Ectx="%o4";
+
+$fmul="%f32";
+$VK_00_19="%f34";
+$VK_20_39="%f36";
+$VK_40_59="%f38";
+$VK_60_79="%f40";
+@VK=($VK_00_19,$VK_20_39,$VK_40_59,$VK_60_79);
+@X=("%f0", "%f1", "%f2", "%f3", "%f4", "%f5", "%f6", "%f7",
+    "%f8", "%f9","%f10","%f11","%f12","%f13","%f14","%f15","%f16");
+
+# This is reference 2x-parallelized VIS-powered Xupdate procedure. It
+# covers even K_NN_MM addition...
+sub Xupdate {
+my ($i)=@_;
+my $K=@VK[($i+16)/20];
+my $j=($i+16)%16;
+
+#	[ provided that GSR.alignaddr_offset is 5, $mul contains
+#	  0x100ULL<<32|0x100 value and K_NN_MM are pre-loaded to
+#	  chosen registers... ]
+$code.=<<___;
+	fxors		@X[($j+13)%16],@X[$j],@X[$j]	!-1/-1/-1:X[0]^=X[13]
+	fxors		@X[($j+14)%16],@X[$j+1],@X[$j+1]! 0/ 0/ 0:X[1]^=X[14]
+	fxor		@X[($j+2)%16],@X[($j+8)%16],%f18! 1/ 1/ 1:Tmp=X[2,3]^X[8,9]
+	fxor		%f18,@X[$j],@X[$j]		! 2/ 4/ 3:X[0,1]^=X[2,3]^X[8,9]
+	faligndata	@X[$j],@X[$j],%f18		! 3/ 7/ 5:Tmp=X[0,1]>>>24
+	fpadd32		@X[$j],@X[$j],@X[$j]		! 4/ 8/ 6:X[0,1]<<=1
+	fmul8ulx16	%f18,$fmul,%f18			! 5/10/ 7:Tmp>>=7, Tmp&=1
+	![fxors		%f15,%f2,%f2]
+	for		%f18,@X[$j],@X[$j]		! 8/14/10:X[0,1]|=Tmp
+	![fxors		%f0,%f3,%f3]			!10/17/12:X[0] dependency
+	fpadd32		$K,@X[$j],%f20
+	std		%f20,[$Xfer+`4*$j`]
+___
+# The numbers delimited with slash are the earliest possible dispatch
+# cycles for given instruction assuming 1 cycle latency for simple VIS
+# instructions, such as on UltraSPARC-I&II, 3 cycles latency, such as
+# on UltraSPARC-III&IV, and 2 cycles latency(*), respectively. Being
+# 2x-parallelized the procedure is "worth" 5, 8.5 or 6 ticks per SHA1
+# round. As [long as] FPU/VIS instructions are perfectly pairable with
+# IALU ones, the round timing is defined by the maximum between VIS
+# and IALU timings. The latter varies from round to round and averages
+# out at 6.25 ticks. This means that USI&II should operate at IALU
+# rate, while USIII&IV - at VIS rate. This explains why performance
+# improvement varies among processors. Well, given that pure IALU
+# sha1-sparcv9.pl module exhibits virtually uniform performance of
+# ~9.3 cycles per SHA1 round. Timings mentioned above are theoretical
+# lower limits. Real-life performance was measured to be 6.6 cycles
+# per SHA1 round on USIIi and 8.3 on USIII. The latter is lower than
+# half-round VIS timing, because there are 16 Xupdate-free rounds,
+# which "push down" average theoretical timing to 8 cycles...
+
+# (*)	SPARC64-V[II] was originally believed to have 2 cycles VIS
+#	latency. Well, it might have, but it doesn't have dedicated
+#	VIS-unit. Instead, VIS instructions are executed by other
+#	functional units, ones used here - by IALU. This doesn't
+#	improve effective ILP...
+}
+
+# The reference Xupdate procedure is then "strained" over *pairs* of
+# BODY_NN_MM and kind of modulo-scheduled in respect to X[n]^=X[n+13]
+# and K_NN_MM addition. It's "running" 15 rounds ahead, which leaves
+# plenty of room to amortize for read-after-write hazard, as well as
+# to fetch and align input for the next spin. The VIS instructions are
+# scheduled for latency of 2 cycles, because there are not enough IALU
+# instructions to schedule for latency of 3, while scheduling for 1
+# would give no gain on USI&II anyway.
+
+sub BODY_00_19 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i&~1;
+my $k=($j+16+2)%16;	# ahead reference
+my $l=($j+16-2)%16;	# behind reference
+my $K=@VK[($j+16-2)/20];
+
+$j=($j+16)%16;
+
+$code.=<<___ if (!($i&1));
+	sll		$a,5,$tmp0			!! $i
+	and		$c,$b,$tmp3
+	ld		[$Xfer+`4*($i%16)`],$Xi
+	 fxors		@X[($j+14)%16],@X[$j+1],@X[$j+1]! 0/ 0/ 0:X[1]^=X[14]
+	srl		$a,27,$tmp1
+	add		$tmp0,$e,$e
+	 fxor		@X[($j+2)%16],@X[($j+8)%16],%f18! 1/ 1/ 1:Tmp=X[2,3]^X[8,9]
+	sll		$b,30,$tmp2
+	add		$tmp1,$e,$e
+	andn		$d,$b,$tmp1
+	add		$Xi,$e,$e
+	 fxor		%f18,@X[$j],@X[$j]		! 2/ 4/ 3:X[0,1]^=X[2,3]^X[8,9]
+	srl		$b,2,$b
+	or		$tmp1,$tmp3,$tmp1
+	or		$tmp2,$b,$b
+	add		$tmp1,$e,$e
+	 faligndata	@X[$j],@X[$j],%f18		! 3/ 7/ 5:Tmp=X[0,1]>>>24
+___
+$code.=<<___ if ($i&1);
+	sll		$a,5,$tmp0			!! $i
+	and		$c,$b,$tmp3
+	ld		[$Xfer+`4*($i%16)`],$Xi
+	 fpadd32	@X[$j],@X[$j],@X[$j]		! 4/ 8/ 6:X[0,1]<<=1
+	srl		$a,27,$tmp1
+	add		$tmp0,$e,$e
+	 fmul8ulx16	%f18,$fmul,%f18			! 5/10/ 7:Tmp>>=7, Tmp&=1
+	sll		$b,30,$tmp2
+	add		$tmp1,$e,$e
+	 fpadd32	$K,@X[$l],%f20			!
+	andn		$d,$b,$tmp1
+	add		$Xi,$e,$e
+	 fxors		@X[($k+13)%16],@X[$k],@X[$k]	!-1/-1/-1:X[0]^=X[13]
+	srl		$b,2,$b
+	or		$tmp1,$tmp3,$tmp1
+	 fxor		%f18,@X[$j],@X[$j]		! 8/14/10:X[0,1]|=Tmp
+	or		$tmp2,$b,$b
+	add		$tmp1,$e,$e
+___
+$code.=<<___ if ($i&1 && $i>=2);
+	 std		%f20,[$Xfer+`4*$l`]		!
+___
+}
+
+sub BODY_20_39 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i&~1;
+my $k=($j+16+2)%16;	# ahead reference
+my $l=($j+16-2)%16;	# behind reference
+my $K=@VK[($j+16-2)/20];
+
+$j=($j+16)%16;
+
+$code.=<<___ if (!($i&1) && $i<64);
+	sll		$a,5,$tmp0			!! $i
+	ld		[$Xfer+`4*($i%16)`],$Xi
+	 fxors		@X[($j+14)%16],@X[$j+1],@X[$j+1]! 0/ 0/ 0:X[1]^=X[14]
+	srl		$a,27,$tmp1
+	add		$tmp0,$e,$e
+	 fxor		@X[($j+2)%16],@X[($j+8)%16],%f18! 1/ 1/ 1:Tmp=X[2,3]^X[8,9]
+	xor		$c,$b,$tmp0
+	add		$tmp1,$e,$e
+	sll		$b,30,$tmp2
+	xor		$d,$tmp0,$tmp1
+	 fxor		%f18,@X[$j],@X[$j]		! 2/ 4/ 3:X[0,1]^=X[2,3]^X[8,9]
+	srl		$b,2,$b
+	add		$tmp1,$e,$e
+	or		$tmp2,$b,$b
+	add		$Xi,$e,$e
+	 faligndata	@X[$j],@X[$j],%f18		! 3/ 7/ 5:Tmp=X[0,1]>>>24
+___
+$code.=<<___ if ($i&1 && $i<64);
+	sll		$a,5,$tmp0			!! $i
+	ld		[$Xfer+`4*($i%16)`],$Xi
+	 fpadd32	@X[$j],@X[$j],@X[$j]		! 4/ 8/ 6:X[0,1]<<=1
+	srl		$a,27,$tmp1
+	add		$tmp0,$e,$e
+	 fmul8ulx16	%f18,$fmul,%f18			! 5/10/ 7:Tmp>>=7, Tmp&=1
+	xor		$c,$b,$tmp0
+	add		$tmp1,$e,$e
+	 fpadd32	$K,@X[$l],%f20			!
+	sll		$b,30,$tmp2
+	xor		$d,$tmp0,$tmp1
+	 fxors		@X[($k+13)%16],@X[$k],@X[$k]	!-1/-1/-1:X[0]^=X[13]
+	srl		$b,2,$b
+	add		$tmp1,$e,$e
+	 fxor		%f18,@X[$j],@X[$j]		! 8/14/10:X[0,1]|=Tmp
+	or		$tmp2,$b,$b
+	add		$Xi,$e,$e
+	 std		%f20,[$Xfer+`4*$l`]		!
+___
+$code.=<<___ if ($i==64);
+	sll		$a,5,$tmp0			!! $i
+	ld		[$Xfer+`4*($i%16)`],$Xi
+	 fpadd32	$K,@X[$l],%f20
+	srl		$a,27,$tmp1
+	add		$tmp0,$e,$e
+	xor		$c,$b,$tmp0
+	add		$tmp1,$e,$e
+	sll		$b,30,$tmp2
+	xor		$d,$tmp0,$tmp1
+	 std		%f20,[$Xfer+`4*$l`]
+	srl		$b,2,$b
+	add		$tmp1,$e,$e
+	or		$tmp2,$b,$b
+	add		$Xi,$e,$e
+___
+$code.=<<___ if ($i>64);
+	sll		$a,5,$tmp0			!! $i
+	ld		[$Xfer+`4*($i%16)`],$Xi
+	srl		$a,27,$tmp1
+	add		$tmp0,$e,$e
+	xor		$c,$b,$tmp0
+	add		$tmp1,$e,$e
+	sll		$b,30,$tmp2
+	xor		$d,$tmp0,$tmp1
+	srl		$b,2,$b
+	add		$tmp1,$e,$e
+	or		$tmp2,$b,$b
+	add		$Xi,$e,$e
+___
+}
+
+sub BODY_40_59 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i&~1;
+my $k=($j+16+2)%16;	# ahead reference
+my $l=($j+16-2)%16;	# behind reference
+my $K=@VK[($j+16-2)/20];
+
+$j=($j+16)%16;
+
+$code.=<<___ if (!($i&1));
+	sll		$a,5,$tmp0			!! $i
+	ld		[$Xfer+`4*($i%16)`],$Xi
+	 fxors		@X[($j+14)%16],@X[$j+1],@X[$j+1]! 0/ 0/ 0:X[1]^=X[14]
+	srl		$a,27,$tmp1
+	add		$tmp0,$e,$e
+	 fxor		@X[($j+2)%16],@X[($j+8)%16],%f18! 1/ 1/ 1:Tmp=X[2,3]^X[8,9]
+	and		$c,$b,$tmp0
+	add		$tmp1,$e,$e
+	sll		$b,30,$tmp2
+	or		$c,$b,$tmp1
+	 fxor		%f18,@X[$j],@X[$j]		! 2/ 4/ 3:X[0,1]^=X[2,3]^X[8,9]
+	srl		$b,2,$b
+	and		$d,$tmp1,$tmp1
+	add		$Xi,$e,$e
+	or		$tmp1,$tmp0,$tmp1
+	 faligndata	@X[$j],@X[$j],%f18		! 3/ 7/ 5:Tmp=X[0,1]>>>24
+	or		$tmp2,$b,$b
+	add		$tmp1,$e,$e
+	 fpadd32	@X[$j],@X[$j],@X[$j]		! 4/ 8/ 6:X[0,1]<<=1
+___
+$code.=<<___ if ($i&1);
+	sll		$a,5,$tmp0			!! $i
+	ld		[$Xfer+`4*($i%16)`],$Xi
+	srl		$a,27,$tmp1
+	add		$tmp0,$e,$e
+	 fmul8ulx16	%f18,$fmul,%f18			! 5/10/ 7:Tmp>>=7, Tmp&=1
+	and		$c,$b,$tmp0
+	add		$tmp1,$e,$e
+	 fpadd32	$K,@X[$l],%f20			!
+	sll		$b,30,$tmp2
+	or		$c,$b,$tmp1
+	 fxors		@X[($k+13)%16],@X[$k],@X[$k]	!-1/-1/-1:X[0]^=X[13]
+	srl		$b,2,$b
+	and		$d,$tmp1,$tmp1
+	 fxor		%f18,@X[$j],@X[$j]		! 8/14/10:X[0,1]|=Tmp
+	add		$Xi,$e,$e
+	or		$tmp1,$tmp0,$tmp1
+	or		$tmp2,$b,$b
+	add		$tmp1,$e,$e
+	 std		%f20,[$Xfer+`4*$l`]		!
+___
+}
+
+# If there is more data to process, then we pre-fetch the data for
+# next iteration in last ten rounds...
+sub BODY_70_79 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i&~1;
+my $m=($i%8)*2;
+
+$j=($j+16)%16;
+
+$code.=<<___ if ($i==70);
+	sll		$a,5,$tmp0			!! $i
+	ld		[$Xfer+`4*($i%16)`],$Xi
+	srl		$a,27,$tmp1
+	add		$tmp0,$e,$e
+	 ldd		[$inp+64],@X[0]
+	xor		$c,$b,$tmp0
+	add		$tmp1,$e,$e
+	sll		$b,30,$tmp2
+	xor		$d,$tmp0,$tmp1
+	srl		$b,2,$b
+	add		$tmp1,$e,$e
+	or		$tmp2,$b,$b
+	add		$Xi,$e,$e
+
+	and		$inp,-64,$nXfer
+	inc		64,$inp
+	and		$nXfer,255,$nXfer
+	alignaddr	%g0,$align,%g0
+	add		$base,$nXfer,$nXfer
+___
+$code.=<<___ if ($i==71);
+	sll		$a,5,$tmp0			!! $i
+	ld		[$Xfer+`4*($i%16)`],$Xi
+	srl		$a,27,$tmp1
+	add		$tmp0,$e,$e
+	xor		$c,$b,$tmp0
+	add		$tmp1,$e,$e
+	sll		$b,30,$tmp2
+	xor		$d,$tmp0,$tmp1
+	srl		$b,2,$b
+	add		$tmp1,$e,$e
+	or		$tmp2,$b,$b
+	add		$Xi,$e,$e
+___
+$code.=<<___ if ($i>=72);
+	 faligndata	@X[$m],@X[$m+2],@X[$m]
+	sll		$a,5,$tmp0			!! $i
+	ld		[$Xfer+`4*($i%16)`],$Xi
+	srl		$a,27,$tmp1
+	add		$tmp0,$e,$e
+	xor		$c,$b,$tmp0
+	add		$tmp1,$e,$e
+	 fpadd32	$VK_00_19,@X[$m],%f20
+	sll		$b,30,$tmp2
+	xor		$d,$tmp0,$tmp1
+	srl		$b,2,$b
+	add		$tmp1,$e,$e
+	or		$tmp2,$b,$b
+	add		$Xi,$e,$e
+___
+$code.=<<___ if ($i<77);
+	 ldd		[$inp+`8*($i+1-70)`],@X[2*($i+1-70)]
+___
+$code.=<<___ if ($i==77);	# redundant if $inp was aligned
+	 add		$align,63,$tmp0
+	 and		$tmp0,-8,$tmp0
+	 ldd		[$inp+$tmp0],@X[16]
+___
+$code.=<<___ if ($i>=72);
+	 std		%f20,[$nXfer+`4*$m`]
+___
+}
+
+$code.=<<___;
+.section	".text",#alloc,#execinstr
+
+.align	64
+vis_const:
+.long	0x5a827999,0x5a827999	! K_00_19
+.long	0x6ed9eba1,0x6ed9eba1	! K_20_39
+.long	0x8f1bbcdc,0x8f1bbcdc	! K_40_59
+.long	0xca62c1d6,0xca62c1d6	! K_60_79
+.long	0x00000100,0x00000100
+.align	64
+.type	vis_const,#object
+.size	vis_const,(.-vis_const)
+
+.globl	sha1_block_data_order
+sha1_block_data_order:
+	save	%sp,-$frame,%sp
+	add	%fp,$bias-256,$base
+
+1:	call	.+8
+	add	%o7,vis_const-1b,$tmp0
+
+	ldd	[$tmp0+0],$VK_00_19
+	ldd	[$tmp0+8],$VK_20_39
+	ldd	[$tmp0+16],$VK_40_59
+	ldd	[$tmp0+24],$VK_60_79
+	ldd	[$tmp0+32],$fmul
+
+	ld	[$ctx+0],$Actx
+	and	$base,-256,$base
+	ld	[$ctx+4],$Bctx
+	sub	$base,$bias+$frame,%sp
+	ld	[$ctx+8],$Cctx
+	and	$inp,7,$align
+	ld	[$ctx+12],$Dctx
+	and	$inp,-8,$inp
+	ld	[$ctx+16],$Ectx
+
+	! X[16] is maintained in FP register bank
+	alignaddr	%g0,$align,%g0
+	ldd		[$inp+0],@X[0]
+	sub		$inp,-64,$Xfer
+	ldd		[$inp+8],@X[2]
+	and		$Xfer,-64,$Xfer
+	ldd		[$inp+16],@X[4]
+	and		$Xfer,255,$Xfer
+	ldd		[$inp+24],@X[6]
+	add		$base,$Xfer,$Xfer
+	ldd		[$inp+32],@X[8]
+	ldd		[$inp+40],@X[10]
+	ldd		[$inp+48],@X[12]
+	brz,pt		$align,.Laligned
+	ldd		[$inp+56],@X[14]
+
+	ldd		[$inp+64],@X[16]
+	faligndata	@X[0],@X[2],@X[0]
+	faligndata	@X[2],@X[4],@X[2]
+	faligndata	@X[4],@X[6],@X[4]
+	faligndata	@X[6],@X[8],@X[6]
+	faligndata	@X[8],@X[10],@X[8]
+	faligndata	@X[10],@X[12],@X[10]
+	faligndata	@X[12],@X[14],@X[12]
+	faligndata	@X[14],@X[16],@X[14]
+
+.Laligned:
+	mov		5,$tmp0
+	dec		1,$len
+	alignaddr	%g0,$tmp0,%g0
+	fpadd32		$VK_00_19,@X[0],%f16
+	fpadd32		$VK_00_19,@X[2],%f18
+	fpadd32		$VK_00_19,@X[4],%f20
+	fpadd32		$VK_00_19,@X[6],%f22
+	fpadd32		$VK_00_19,@X[8],%f24
+	fpadd32		$VK_00_19,@X[10],%f26
+	fpadd32		$VK_00_19,@X[12],%f28
+	fpadd32		$VK_00_19,@X[14],%f30
+	std		%f16,[$Xfer+0]
+	mov		$Actx,$A
+	std		%f18,[$Xfer+8]
+	mov		$Bctx,$B
+	std		%f20,[$Xfer+16]
+	mov		$Cctx,$C
+	std		%f22,[$Xfer+24]
+	mov		$Dctx,$D
+	std		%f24,[$Xfer+32]
+	mov		$Ectx,$E
+	std		%f26,[$Xfer+40]
+	fxors		@X[13],@X[0],@X[0]
+	std		%f28,[$Xfer+48]
+	ba		.Loop
+	std		%f30,[$Xfer+56]
+.align	32
+.Loop:
+___
+for ($i=0;$i<20;$i++)	{ &BODY_00_19($i,@V); unshift(@V,pop(@V)); }
+for (;$i<40;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+for (;$i<60;$i++)	{ &BODY_40_59($i,@V); unshift(@V,pop(@V)); }
+for (;$i<70;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	tst		$len
+	bz,pn		`$bits==32?"%icc":"%xcc"`,.Ltail
+	nop
+___
+for (;$i<80;$i++)	{ &BODY_70_79($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	add		$A,$Actx,$Actx
+	add		$B,$Bctx,$Bctx
+	add		$C,$Cctx,$Cctx
+	add		$D,$Dctx,$Dctx
+	add		$E,$Ectx,$Ectx
+	mov		5,$tmp0
+	fxors		@X[13],@X[0],@X[0]
+	mov		$Actx,$A
+	mov		$Bctx,$B
+	mov		$Cctx,$C
+	mov		$Dctx,$D
+	mov		$Ectx,$E
+	alignaddr	%g0,$tmp0,%g0
+	dec		1,$len
+	ba		.Loop
+	mov		$nXfer,$Xfer
+
+.align	32
+.Ltail:
+___
+for($i=70;$i<80;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	add	$A,$Actx,$Actx
+	add	$B,$Bctx,$Bctx
+	add	$C,$Cctx,$Cctx
+	add	$D,$Dctx,$Dctx
+	add	$E,$Ectx,$Ectx
+
+	st	$Actx,[$ctx+0]
+	st	$Bctx,[$ctx+4]
+	st	$Cctx,[$ctx+8]
+	st	$Dctx,[$ctx+12]
+	st	$Ectx,[$ctx+16]
+
+	ret
+	restore
+.type	sha1_block_data_order,#function
+.size	sha1_block_data_order,(.-sha1_block_data_order)
+.asciz	"SHA1 block transform for SPARCv9a, CRYPTOGAMS by <appro\@openssl.org>"
+.align	4
+___
+
+# Purpose of these subroutines is to explicitly encode VIS instructions,
+# so that one can compile the module without having to specify VIS
+# extensions on compiler command line, e.g. -xarch=v9 vs. -xarch=v9a.
+# Idea is to reserve for option to produce "universal" binary and let
+# programmer detect if current CPU is VIS capable at run-time.
+sub unvis {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my ($ref,$opf);
+my %visopf = (	"fmul8ulx16"	=> 0x037,
+		"faligndata"	=> 0x048,
+		"fpadd32"	=> 0x052,
+		"fxor"		=> 0x06c,
+		"fxors"		=> 0x06d	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rd";
+
+    if ($opf=$visopf{$mnemonic}) {
+	foreach ($rs1,$rs2,$rd) {
+	    return $ref if (!/%f([0-9]{1,2})/);
+	    $_=$1;
+	    if ($1>=32) {
+		return $ref if ($1&1);
+		# re-encode for upper double register addressing
+		$_=($1|$1>>5)&31;
+	    }
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			0x81b00000|$rd<<25|$rs1<<14|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+sub unalignaddr {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my %bias = ( "g" => 0, "o" => 8, "l" => 16, "i" => 24 );
+my $ref="$mnemonic\t$rs1,$rs2,$rd";
+
+    foreach ($rs1,$rs2,$rd) {
+	if (/%([goli])([0-7])/)	{ $_=$bias{$1}+$2; }
+	else			{ return $ref; }
+    }
+    return  sprintf ".word\t0x%08x !%s",
+		    0x81b00300|$rd<<25|$rs1<<14|$rs2,
+		    $ref;
+}
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+$code =~ s/\b(f[^\s]*)\s+(%f[0-9]{1,2}),(%f[0-9]{1,2}),(%f[0-9]{1,2})/
+		&unvis($1,$2,$3,$4)
+	  /gem;
+$code =~ s/\b(alignaddr)\s+(%[goli][0-7]),(%[goli][0-7]),(%[goli][0-7])/
+		&unalignaddr($1,$2,$3,$4)
+	  /gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-thumb.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-thumb.pl
new file mode 100644
index 000000000..ac74a25d6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-thumb.pl
@@ -0,0 +1,266 @@
+#! /usr/bin/env perl
+# Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# sha1_block for Thumb.
+#
+# January 2007.
+#
+# The code does not present direct interest to OpenSSL, because of low
+# performance. Its purpose is to establish _size_ benchmark. Pretty
+# useless one I must say, because 30% or 88 bytes larger ARMv4 code
+# [available on demand] is almost _twice_ as fast. It should also be
+# noted that in-lining of .Lcommon and .Lrotate improves performance
+# by over 40%, while code increases by only 10% or 32 bytes. But once
+# again, the goal was to establish _size_ benchmark, not performance.
+
+$output=shift;
+open STDOUT,">$output";
+
+$inline=0;
+#$cheat_on_binutils=1;
+
+$t0="r0";
+$t1="r1";
+$t2="r2";
+$a="r3";
+$b="r4";
+$c="r5";
+$d="r6";
+$e="r7";
+$K="r8";	# "upper" registers can be used in add/sub and mov insns
+$ctx="r9";
+$inp="r10";
+$len="r11";
+$Xi="r12";
+
+sub common {
+<<___;
+	sub	$t0,#4
+	ldr	$t1,[$t0]
+	add	$e,$K			@ E+=K_xx_xx
+	lsl	$t2,$a,#5
+	add	$t2,$e
+	lsr	$e,$a,#27
+	add	$t2,$e			@ E+=ROR(A,27)
+	add	$t2,$t1			@ E+=X[i]
+___
+}
+sub rotate {
+<<___;
+	mov	$e,$d			@ E=D
+	mov	$d,$c			@ D=C
+	lsl	$c,$b,#30
+	lsr	$b,$b,#2
+	orr	$c,$b			@ C=ROR(B,2)
+	mov	$b,$a			@ B=A
+	add	$a,$t2,$t1		@ A=E+F_xx_xx(B,C,D)
+___
+}
+
+sub BODY_00_19 {
+$code.=$inline?&common():"\tbl	.Lcommon\n";
+$code.=<<___;
+	mov	$t1,$c
+	eor	$t1,$d
+	and	$t1,$b
+	eor	$t1,$d			@ F_00_19(B,C,D)
+___
+$code.=$inline?&rotate():"\tbl	.Lrotate\n";
+}
+
+sub BODY_20_39 {
+$code.=$inline?&common():"\tbl	.Lcommon\n";
+$code.=<<___;
+	mov	$t1,$b
+	eor	$t1,$c
+	eor	$t1,$d			@ F_20_39(B,C,D)
+___
+$code.=$inline?&rotate():"\tbl	.Lrotate\n";
+}
+
+sub BODY_40_59 {
+$code.=$inline?&common():"\tbl	.Lcommon\n";
+$code.=<<___;
+	mov	$t1,$b
+	and	$t1,$c
+	mov	$e,$b
+	orr	$e,$c
+	and	$e,$d
+	orr	$t1,$e			@ F_40_59(B,C,D)
+___
+$code.=$inline?&rotate():"\tbl	.Lrotate\n";
+}
+
+$code=<<___;
+.text
+.code	16
+
+.global	sha1_block_data_order
+.type	sha1_block_data_order,%function
+
+.align	2
+sha1_block_data_order:
+___
+if ($cheat_on_binutils) {
+$code.=<<___;
+.code	32
+	add	r3,pc,#1
+	bx	r3			@ switch to Thumb ISA
+.code	16
+___
+}
+$code.=<<___;
+	push	{r4-r7}
+	mov	r3,r8
+	mov	r4,r9
+	mov	r5,r10
+	mov	r6,r11
+	mov	r7,r12
+	push	{r3-r7,lr}
+	lsl	r2,#6
+	mov	$ctx,r0			@ save context
+	mov	$inp,r1			@ save inp
+	mov	$len,r2			@ save len
+	add	$len,$inp		@ $len to point at inp end
+
+.Lloop:
+	mov	$Xi,sp
+	mov	$t2,sp
+	sub	$t2,#16*4		@ [3]
+.LXload:
+	ldrb	$a,[$t1,#0]		@ $t1 is r1 and holds inp
+	ldrb	$b,[$t1,#1]
+	ldrb	$c,[$t1,#2]
+	ldrb	$d,[$t1,#3]
+	lsl	$a,#24
+	lsl	$b,#16
+	lsl	$c,#8
+	orr	$a,$b
+	orr	$a,$c
+	orr	$a,$d
+	add	$t1,#4
+	push	{$a}
+	cmp	sp,$t2
+	bne	.LXload			@ [+14*16]
+
+	mov	$inp,$t1		@ update $inp
+	sub	$t2,#32*4
+	sub	$t2,#32*4
+	mov	$e,#31			@ [+4]
+.LXupdate:
+	ldr	$a,[sp,#15*4]
+	ldr	$b,[sp,#13*4]
+	ldr	$c,[sp,#7*4]
+	ldr	$d,[sp,#2*4]
+	eor	$a,$b
+	eor	$a,$c
+	eor	$a,$d
+	ror	$a,$e
+	push	{$a}
+	cmp	sp,$t2
+	bne	.LXupdate		@ [+(11+1)*64]
+
+	ldmia	$t0!,{$a,$b,$c,$d,$e}	@ $t0 is r0 and holds ctx
+	mov	$t0,$Xi
+
+	ldr	$t2,.LK_00_19
+	mov	$t1,$t0
+	sub	$t1,#20*4
+	mov	$Xi,$t1
+	mov	$K,$t2			@ [+7+4]
+.L_00_19:
+___
+	&BODY_00_19();
+$code.=<<___;
+	cmp	$Xi,$t0
+	bne	.L_00_19		@ [+(2+9+4+2+8+2)*20]
+
+	ldr	$t2,.LK_20_39
+	mov	$t1,$t0
+	sub	$t1,#20*4
+	mov	$Xi,$t1
+	mov	$K,$t2			@ [+5]
+.L_20_39_or_60_79:
+___
+	&BODY_20_39();
+$code.=<<___;
+	cmp	$Xi,$t0
+	bne	.L_20_39_or_60_79	@ [+(2+9+3+2+8+2)*20*2]
+	cmp	sp,$t0
+	beq	.Ldone			@ [+2]
+
+	ldr	$t2,.LK_40_59
+	mov	$t1,$t0
+	sub	$t1,#20*4
+	mov	$Xi,$t1
+	mov	$K,$t2			@ [+5]
+.L_40_59:
+___
+	&BODY_40_59();
+$code.=<<___;
+	cmp	$Xi,$t0
+	bne	.L_40_59		@ [+(2+9+6+2+8+2)*20]
+
+	ldr	$t2,.LK_60_79
+	mov	$Xi,sp
+	mov	$K,$t2
+	b	.L_20_39_or_60_79	@ [+4]
+.Ldone:
+	mov	$t0,$ctx
+	ldr	$t1,[$t0,#0]
+	ldr	$t2,[$t0,#4]
+	add	$a,$t1
+	ldr	$t1,[$t0,#8]
+	add	$b,$t2
+	ldr	$t2,[$t0,#12]
+	add	$c,$t1
+	ldr	$t1,[$t0,#16]
+	add	$d,$t2
+	add	$e,$t1
+	stmia	$t0!,{$a,$b,$c,$d,$e}	@ [+20]
+
+	add	sp,#80*4		@ deallocate stack frame
+	mov	$t0,$ctx		@ restore ctx
+	mov	$t1,$inp		@ restore inp
+	cmp	$t1,$len
+	beq	.Lexit
+	b	.Lloop			@ [+6] total 3212 cycles
+.Lexit:
+	pop	{r2-r7}
+	mov	r8,r2
+	mov	r9,r3
+	mov	r10,r4
+	mov	r11,r5
+	mov	r12,r6
+	mov	lr,r7
+	pop	{r4-r7}
+	bx	lr
+.align	2
+___
+$code.=".Lcommon:\n".&common()."\tmov	pc,lr\n" if (!$inline);
+$code.=".Lrotate:\n".&rotate()."\tmov	pc,lr\n" if (!$inline);
+$code.=<<___;
+.align	2
+.LK_00_19:	.word	0x5a827999
+.LK_20_39:	.word	0x6ed9eba1
+.LK_40_59:	.word	0x8f1bbcdc
+.LK_60_79:	.word	0xca62c1d6
+.size	sha1_block_data_order,.-sha1_block_data_order
+.asciz	"SHA1 block transform for Thumb, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+print $code;
+close STDOUT; # enforce flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-x86_64.pl
new file mode 100755
index 000000000..60819f618
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha1-x86_64.pl
@@ -0,0 +1,2132 @@
+#! /usr/bin/env perl
+# Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# sha1_block procedure for x86_64.
+#
+# It was brought to my attention that on EM64T compiler-generated code
+# was far behind 32-bit assembler implementation. This is unlike on
+# Opteron where compiler-generated code was only 15% behind 32-bit
+# assembler, which originally made it hard to motivate the effort.
+# There was suggestion to mechanically translate 32-bit code, but I
+# dismissed it, reasoning that x86_64 offers enough register bank
+# capacity to fully utilize SHA-1 parallelism. Therefore this fresh
+# implementation:-) However! While 64-bit code does perform better
+# on Opteron, I failed to beat 32-bit assembler on EM64T core. Well,
+# x86_64 does offer larger *addressable* bank, but out-of-order core
+# reaches for even more registers through dynamic aliasing, and EM64T
+# core must have managed to run-time optimize even 32-bit code just as
+# good as 64-bit one. Performance improvement is summarized in the
+# following table:
+#
+#		gcc 3.4		32-bit asm	cycles/byte
+# Opteron	+45%		+20%		6.8
+# Xeon P4	+65%		+0%		9.9
+# Core2		+60%		+10%		7.0
+
+# August 2009.
+#
+# The code was revised to minimize code size and to maximize
+# "distance" between instructions producing input to 'lea'
+# instruction and the 'lea' instruction itself, which is essential
+# for Intel Atom core.
+
+# October 2010.
+#
+# Add SSSE3, Supplemental[!] SSE3, implementation. The idea behind it
+# is to offload message schedule denoted by Wt in NIST specification,
+# or Xupdate in OpenSSL source, to SIMD unit. See sha1-586.pl module
+# for background and implementation details. The only difference from
+# 32-bit code is that 64-bit code doesn't have to spill @X[] elements
+# to free temporary registers.
+
+# April 2011.
+#
+# Add AVX code path. See sha1-586.pl for further information.
+
+# May 2013.
+#
+# Add AVX2+BMI code path. Initial attempt (utilizing BMI instructions
+# and loading pair of consecutive blocks to 256-bit %ymm registers)
+# did not provide impressive performance improvement till a crucial
+# hint regarding the number of Xupdate iterations to pre-compute in
+# advance was provided by Ilya Albrekht of Intel Corp.
+
+# March 2014.
+#
+# Add support for Intel SHA Extensions.
+
+######################################################################
+# Current performance is summarized in following table. Numbers are
+# CPU clock cycles spent to process single byte (less is better).
+#
+#		x86_64		SSSE3		AVX[2]
+# P4		9.05		-
+# Opteron	6.26		-
+# Core2		6.55		6.05/+8%	-
+# Westmere	6.73		5.30/+27%	-
+# Sandy Bridge	7.70		6.10/+26%	4.99/+54%
+# Ivy Bridge	6.06		4.67/+30%	4.60/+32%
+# Haswell	5.45		4.15/+31%	3.57/+53%
+# Skylake	5.18		4.06/+28%	3.54/+46%
+# Bulldozer	9.11		5.95/+53%
+# Ryzen		4.75		3.80/+24%	1.93/+150%(**)
+# VIA Nano	9.32		7.15/+30%
+# Atom		10.3		9.17/+12%
+# Silvermont	13.1(*)		9.37/+40%
+# Knights L	13.2(*)		9.68/+36%	8.30/+59%
+# Goldmont	8.13		6.42/+27%	1.70/+380%(**)
+#
+# (*)	obviously suboptimal result, nothing was done about it,
+#	because SSSE3 code is compiled unconditionally;
+# (**)	SHAEXT result
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.19) + ($1>=2.22);
+}
+
+if (!$avx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	   `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.09) + ($1>=2.10);
+}
+
+if (!$avx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	   `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$avx = ($1>=10) + ($1>=11);
+}
+
+if (!$avx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([2-9]\.[0-9]+)/) {
+	$avx = ($2>=3.0) + ($2>3.0);
+}
+
+$shaext=1;	### set to zero if compiling for 1.0.1
+$avx=1		if (!$shaext && $avx);
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+$ctx="%rdi";	# 1st arg
+$inp="%rsi";	# 2nd arg
+$num="%rdx";	# 3rd arg
+
+# reassign arguments in order to produce more compact code
+$ctx="%r8";
+$inp="%r9";
+$num="%r10";
+
+$t0="%eax";
+$t1="%ebx";
+$t2="%ecx";
+@xi=("%edx","%ebp","%r14d");
+$A="%esi";
+$B="%edi";
+$C="%r11d";
+$D="%r12d";
+$E="%r13d";
+
+@V=($A,$B,$C,$D,$E);
+
+sub BODY_00_19 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+$code.=<<___ if ($i==0);
+	mov	`4*$i`($inp),$xi[0]
+	bswap	$xi[0]
+___
+$code.=<<___ if ($i<15);
+	mov	`4*$j`($inp),$xi[1]
+	mov	$d,$t0
+	mov	$xi[0],`4*$i`(%rsp)
+	mov	$a,$t2
+	bswap	$xi[1]
+	xor	$c,$t0
+	rol	\$5,$t2
+	and	$b,$t0
+	lea	0x5a827999($xi[0],$e),$e
+	add	$t2,$e
+	xor	$d,$t0
+	rol	\$30,$b
+	add	$t0,$e
+___
+$code.=<<___ if ($i>=15);
+	xor	`4*($j%16)`(%rsp),$xi[1]
+	mov	$d,$t0
+	mov	$xi[0],`4*($i%16)`(%rsp)
+	mov	$a,$t2
+	xor	`4*(($j+2)%16)`(%rsp),$xi[1]
+	xor	$c,$t0
+	rol	\$5,$t2
+	xor	`4*(($j+8)%16)`(%rsp),$xi[1]
+	and	$b,$t0
+	lea	0x5a827999($xi[0],$e),$e
+	rol	\$30,$b
+	xor	$d,$t0
+	add	$t2,$e
+	rol	\$1,$xi[1]
+	add	$t0,$e
+___
+push(@xi,shift(@xi));
+}
+
+sub BODY_20_39 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+my $K=($i<40)?0x6ed9eba1:0xca62c1d6;
+$code.=<<___ if ($i<79);
+	xor	`4*($j%16)`(%rsp),$xi[1]
+	mov	$b,$t0
+	`"mov	$xi[0],".4*($i%16)."(%rsp)"	if ($i<72)`
+	mov	$a,$t2
+	xor	`4*(($j+2)%16)`(%rsp),$xi[1]
+	xor	$d,$t0
+	rol	\$5,$t2
+	xor	`4*(($j+8)%16)`(%rsp),$xi[1]
+	lea	$K($xi[0],$e),$e
+	xor	$c,$t0
+	add	$t2,$e
+	rol	\$30,$b
+	add	$t0,$e
+	rol	\$1,$xi[1]
+___
+$code.=<<___ if ($i==79);
+	mov	$b,$t0
+	mov	$a,$t2
+	xor	$d,$t0
+	lea	$K($xi[0],$e),$e
+	rol	\$5,$t2
+	xor	$c,$t0
+	add	$t2,$e
+	rol	\$30,$b
+	add	$t0,$e
+___
+push(@xi,shift(@xi));
+}
+
+sub BODY_40_59 {
+my ($i,$a,$b,$c,$d,$e)=@_;
+my $j=$i+1;
+$code.=<<___;
+	xor	`4*($j%16)`(%rsp),$xi[1]
+	mov	$d,$t0
+	mov	$xi[0],`4*($i%16)`(%rsp)
+	mov	$d,$t1
+	xor	`4*(($j+2)%16)`(%rsp),$xi[1]
+	and	$c,$t0
+	mov	$a,$t2
+	xor	`4*(($j+8)%16)`(%rsp),$xi[1]
+	lea	0x8f1bbcdc($xi[0],$e),$e
+	xor	$c,$t1
+	rol	\$5,$t2
+	add	$t0,$e
+	rol	\$1,$xi[1]
+	and	$b,$t1
+	add	$t2,$e
+	rol	\$30,$b
+	add	$t1,$e
+___
+push(@xi,shift(@xi));
+}
+
+$code.=<<___;
+.text
+.extern	OPENSSL_ia32cap_P
+
+.globl	sha1_block_data_order
+.type	sha1_block_data_order,\@function,3
+.align	16
+sha1_block_data_order:
+.cfi_startproc
+	mov	OPENSSL_ia32cap_P+0(%rip),%r9d
+	mov	OPENSSL_ia32cap_P+4(%rip),%r8d
+	mov	OPENSSL_ia32cap_P+8(%rip),%r10d
+	test	\$`1<<9`,%r8d		# check SSSE3 bit
+	jz	.Lialu
+___
+$code.=<<___ if ($shaext);
+	test	\$`1<<29`,%r10d		# check SHA bit
+	jnz	_shaext_shortcut
+___
+$code.=<<___ if ($avx>1);
+	and	\$`1<<3|1<<5|1<<8`,%r10d	# check AVX2+BMI1+BMI2
+	cmp	\$`1<<3|1<<5|1<<8`,%r10d
+	je	_avx2_shortcut
+___
+$code.=<<___ if ($avx);
+	and	\$`1<<28`,%r8d		# mask AVX bit
+	and	\$`1<<30`,%r9d		# mask "Intel CPU" bit
+	or	%r9d,%r8d
+	cmp	\$`1<<28|1<<30`,%r8d
+	je	_avx_shortcut
+___
+$code.=<<___;
+	jmp	_ssse3_shortcut
+
+.align	16
+.Lialu:
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	mov	%rdi,$ctx	# reassigned argument
+	sub	\$`8+16*4`,%rsp
+	mov	%rsi,$inp	# reassigned argument
+	and	\$-64,%rsp
+	mov	%rdx,$num	# reassigned argument
+	mov	%rax,`16*4`(%rsp)
+.cfi_cfa_expression	%rsp+64,deref,+8
+.Lprologue:
+
+	mov	0($ctx),$A
+	mov	4($ctx),$B
+	mov	8($ctx),$C
+	mov	12($ctx),$D
+	mov	16($ctx),$E
+	jmp	.Lloop
+
+.align	16
+.Lloop:
+___
+for($i=0;$i<20;$i++)	{ &BODY_00_19($i,@V); unshift(@V,pop(@V)); }
+for(;$i<40;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+for(;$i<60;$i++)	{ &BODY_40_59($i,@V); unshift(@V,pop(@V)); }
+for(;$i<80;$i++)	{ &BODY_20_39($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	add	0($ctx),$A
+	add	4($ctx),$B
+	add	8($ctx),$C
+	add	12($ctx),$D
+	add	16($ctx),$E
+	mov	$A,0($ctx)
+	mov	$B,4($ctx)
+	mov	$C,8($ctx)
+	mov	$D,12($ctx)
+	mov	$E,16($ctx)
+
+	sub	\$1,$num
+	lea	`16*4`($inp),$inp
+	jnz	.Lloop
+
+	mov	`16*4`(%rsp),%rsi
+.cfi_def_cfa	%rsi,8
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue:
+	ret
+.cfi_endproc
+.size	sha1_block_data_order,.-sha1_block_data_order
+___
+if ($shaext) {{{
+######################################################################
+# Intel SHA Extensions implementation of SHA1 update function.
+#
+my ($ctx,$inp,$num)=("%rdi","%rsi","%rdx");
+my ($ABCD,$E,$E_,$BSWAP,$ABCD_SAVE,$E_SAVE)=map("%xmm$_",(0..3,8,9));
+my @MSG=map("%xmm$_",(4..7));
+
+$code.=<<___;
+.type	sha1_block_data_order_shaext,\@function,3
+.align	32
+sha1_block_data_order_shaext:
+_shaext_shortcut:
+.cfi_startproc
+___
+$code.=<<___ if ($win64);
+	lea	`-8-4*16`(%rsp),%rsp
+	movaps	%xmm6,-8-4*16(%rax)
+	movaps	%xmm7,-8-3*16(%rax)
+	movaps	%xmm8,-8-2*16(%rax)
+	movaps	%xmm9,-8-1*16(%rax)
+.Lprologue_shaext:
+___
+$code.=<<___;
+	movdqu	($ctx),$ABCD
+	movd	16($ctx),$E
+	movdqa	K_XX_XX+0xa0(%rip),$BSWAP	# byte-n-word swap
+
+	movdqu	($inp),@MSG[0]
+	pshufd	\$0b00011011,$ABCD,$ABCD	# flip word order
+	movdqu	0x10($inp),@MSG[1]
+	pshufd	\$0b00011011,$E,$E		# flip word order
+	movdqu	0x20($inp),@MSG[2]
+	pshufb	$BSWAP,@MSG[0]
+	movdqu	0x30($inp),@MSG[3]
+	pshufb	$BSWAP,@MSG[1]
+	pshufb	$BSWAP,@MSG[2]
+	movdqa	$E,$E_SAVE			# offload $E
+	pshufb	$BSWAP,@MSG[3]
+	jmp	.Loop_shaext
+
+.align	16
+.Loop_shaext:
+	dec		$num
+	lea		0x40($inp),%r8		# next input block
+	paddd		@MSG[0],$E
+	cmovne		%r8,$inp
+	movdqa		$ABCD,$ABCD_SAVE	# offload $ABCD
+___
+for($i=0;$i<20-4;$i+=2) {
+$code.=<<___;
+	sha1msg1	@MSG[1],@MSG[0]
+	movdqa		$ABCD,$E_
+	sha1rnds4	\$`int($i/5)`,$E,$ABCD	# 0-3...
+	sha1nexte	@MSG[1],$E_
+	pxor		@MSG[2],@MSG[0]
+	sha1msg1	@MSG[2],@MSG[1]
+	sha1msg2	@MSG[3],@MSG[0]
+
+	movdqa		$ABCD,$E
+	sha1rnds4	\$`int(($i+1)/5)`,$E_,$ABCD
+	sha1nexte	@MSG[2],$E
+	pxor		@MSG[3],@MSG[1]
+	sha1msg2	@MSG[0],@MSG[1]
+___
+	push(@MSG,shift(@MSG));	push(@MSG,shift(@MSG));
+}
+$code.=<<___;
+	movdqu		($inp),@MSG[0]
+	movdqa		$ABCD,$E_
+	sha1rnds4	\$3,$E,$ABCD		# 64-67
+	sha1nexte	@MSG[1],$E_
+	movdqu		0x10($inp),@MSG[1]
+	pshufb		$BSWAP,@MSG[0]
+
+	movdqa		$ABCD,$E
+	sha1rnds4	\$3,$E_,$ABCD		# 68-71
+	sha1nexte	@MSG[2],$E
+	movdqu		0x20($inp),@MSG[2]
+	pshufb		$BSWAP,@MSG[1]
+
+	movdqa		$ABCD,$E_
+	sha1rnds4	\$3,$E,$ABCD		# 72-75
+	sha1nexte	@MSG[3],$E_
+	movdqu		0x30($inp),@MSG[3]
+	pshufb		$BSWAP,@MSG[2]
+
+	movdqa		$ABCD,$E
+	sha1rnds4	\$3,$E_,$ABCD		# 76-79
+	sha1nexte	$E_SAVE,$E
+	pshufb		$BSWAP,@MSG[3]
+
+	paddd		$ABCD_SAVE,$ABCD
+	movdqa		$E,$E_SAVE		# offload $E
+
+	jnz		.Loop_shaext
+
+	pshufd	\$0b00011011,$ABCD,$ABCD
+	pshufd	\$0b00011011,$E,$E
+	movdqu	$ABCD,($ctx)
+	movd	$E,16($ctx)
+___
+$code.=<<___ if ($win64);
+	movaps	-8-4*16(%rax),%xmm6
+	movaps	-8-3*16(%rax),%xmm7
+	movaps	-8-2*16(%rax),%xmm8
+	movaps	-8-1*16(%rax),%xmm9
+	mov	%rax,%rsp
+.Lepilogue_shaext:
+___
+$code.=<<___;
+.cfi_endproc
+	ret
+.size	sha1_block_data_order_shaext,.-sha1_block_data_order_shaext
+___
+}}}
+{{{
+my $Xi=4;
+my @X=map("%xmm$_",(4..7,0..3));
+my @Tx=map("%xmm$_",(8..10));
+my $Kx="%xmm11";
+my @V=($A,$B,$C,$D,$E)=("%eax","%ebx","%ecx","%edx","%ebp");	# size optimization
+my @T=("%esi","%edi");
+my $j=0;
+my $rx=0;
+my $K_XX_XX="%r14";
+my $fp="%r11";
+
+my $_rol=sub { &rol(@_) };
+my $_ror=sub { &ror(@_) };
+
+{ my $sn;
+sub align32() {
+  ++$sn;
+$code.=<<___;
+	jmp	.Lalign32_$sn	# see "Decoded ICache" in manual
+.align	32
+.Lalign32_$sn:
+___
+}
+}
+
+$code.=<<___;
+.type	sha1_block_data_order_ssse3,\@function,3
+.align	16
+sha1_block_data_order_ssse3:
+_ssse3_shortcut:
+.cfi_startproc
+	mov	%rsp,$fp	# frame pointer
+.cfi_def_cfa_register	$fp
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13		# redundant, done to share Win64 SE handler
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	lea	`-64-($win64?6*16:0)`(%rsp),%rsp
+___
+$code.=<<___ if ($win64);
+	movaps	%xmm6,-40-6*16($fp)
+	movaps	%xmm7,-40-5*16($fp)
+	movaps	%xmm8,-40-4*16($fp)
+	movaps	%xmm9,-40-3*16($fp)
+	movaps	%xmm10,-40-2*16($fp)
+	movaps	%xmm11,-40-1*16($fp)
+.Lprologue_ssse3:
+___
+$code.=<<___;
+	and	\$-64,%rsp
+	mov	%rdi,$ctx	# reassigned argument
+	mov	%rsi,$inp	# reassigned argument
+	mov	%rdx,$num	# reassigned argument
+
+	shl	\$6,$num
+	add	$inp,$num
+	lea	K_XX_XX+64(%rip),$K_XX_XX
+
+	mov	0($ctx),$A		# load context
+	mov	4($ctx),$B
+	mov	8($ctx),$C
+	mov	12($ctx),$D
+	mov	$B,@T[0]		# magic seed
+	mov	16($ctx),$E
+	mov	$C,@T[1]
+	xor	$D,@T[1]
+	and	@T[1],@T[0]
+
+	movdqa	64($K_XX_XX),@X[2]	# pbswap mask
+	movdqa	-64($K_XX_XX),@Tx[1]	# K_00_19
+	movdqu	0($inp),@X[-4&7]	# load input to %xmm[0-3]
+	movdqu	16($inp),@X[-3&7]
+	movdqu	32($inp),@X[-2&7]
+	movdqu	48($inp),@X[-1&7]
+	pshufb	@X[2],@X[-4&7]		# byte swap
+	pshufb	@X[2],@X[-3&7]
+	pshufb	@X[2],@X[-2&7]
+	add	\$64,$inp
+	paddd	@Tx[1],@X[-4&7]		# add K_00_19
+	pshufb	@X[2],@X[-1&7]
+	paddd	@Tx[1],@X[-3&7]
+	paddd	@Tx[1],@X[-2&7]
+	movdqa	@X[-4&7],0(%rsp)	# X[]+K xfer to IALU
+	psubd	@Tx[1],@X[-4&7]		# restore X[]
+	movdqa	@X[-3&7],16(%rsp)
+	psubd	@Tx[1],@X[-3&7]
+	movdqa	@X[-2&7],32(%rsp)
+	psubd	@Tx[1],@X[-2&7]
+	jmp	.Loop_ssse3
+___
+
+sub AUTOLOAD()		# thunk [simplified] 32-bit style perlasm
+{ my $opcode = $AUTOLOAD; $opcode =~ s/.*:://;
+  my $arg = pop;
+    $arg = "\$$arg" if ($arg*1 eq $arg);
+    $code .= "\t$opcode\t".join(',',$arg,reverse @_)."\n";
+}
+
+sub Xupdate_ssse3_16_31()		# recall that $Xi starts with 4
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 40 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));		# ror
+	&pshufd	(@X[0],@X[-4&7],0xee);	# was &movdqa	(@X[0],@X[-3&7]);
+	 eval(shift(@insns));
+	&movdqa	(@Tx[0],@X[-1&7]);
+	  &paddd	(@Tx[1],@X[-1&7]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&punpcklqdq(@X[0],@X[-3&7]);	# compose "X[-14]" in "X[0]", was &palignr(@X[0],@X[-4&7],8);
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	&psrldq	(@Tx[0],4);		# "X[-3]", 3 dwords
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&pxor	(@X[0],@X[-4&7]);	# "X[0]"^="X[-16]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	&pxor	(@Tx[0],@X[-2&7]);	# "X[-3]"^"X[-8]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&pxor	(@X[0],@Tx[0]);		# "X[0]"^="X[-3]"^"X[-8]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	  &movdqa	(eval(16*(($Xi-1)&3))."(%rsp)",@Tx[1]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&movdqa	(@Tx[2],@X[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	&movdqa	(@Tx[0],@X[0]);
+	 eval(shift(@insns));
+
+	&pslldq	(@Tx[2],12);		# "X[0]"<<96, extract one dword
+	&paddd	(@X[0],@X[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&psrld	(@Tx[0],31);
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	&movdqa	(@Tx[1],@Tx[2]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&psrld	(@Tx[2],30);
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	&por	(@X[0],@Tx[0]);		# "X[0]"<<<=1
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&pslld	(@Tx[1],2);
+	&pxor	(@X[0],@Tx[2]);
+	 eval(shift(@insns));
+	  &movdqa	(@Tx[2],eval(2*16*(($Xi)/5)-64)."($K_XX_XX)");	# K_XX_XX
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&pxor	(@X[0],@Tx[1]);		# "X[0]"^=("X[0]">>96)<<<2
+	&pshufd (@Tx[1],@X[-1&7],0xee)	if ($Xi==7);	# was &movdqa	(@Tx[0],@X[-1&7]) in Xupdate_ssse3_32_79
+
+	 foreach (@insns) { eval; }	# remaining instructions [if any]
+
+  $Xi++;	push(@X,shift(@X));	# "rotate" X[]
+		push(@Tx,shift(@Tx));
+}
+
+sub Xupdate_ssse3_32_79()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 to 44 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns))		if ($Xi==8);
+	&pxor	(@X[0],@X[-4&7]);	# "X[0]"="X[-32]"^"X[-16]"
+	 eval(shift(@insns))		if ($Xi==8);
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	 eval(shift(@insns))		if (@insns[1] =~ /_ror/);
+	 eval(shift(@insns))		if (@insns[0] =~ /_ror/);
+	&punpcklqdq(@Tx[0],@X[-1&7]);	# compose "X[-6]", was &palignr(@Tx[0],@X[-2&7],8);
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+
+	&pxor	(@X[0],@X[-7&7]);	# "X[0]"^="X[-28]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	if ($Xi%5) {
+	  &movdqa	(@Tx[2],@Tx[1]);# "perpetuate" K_XX_XX...
+	} else {			# ... or load next one
+	  &movdqa	(@Tx[2],eval(2*16*($Xi/5)-64)."($K_XX_XX)");
+	}
+	 eval(shift(@insns));		# ror
+	  &paddd	(@Tx[1],@X[-1&7]);
+	 eval(shift(@insns));
+
+	&pxor	(@X[0],@Tx[0]);		# "X[0]"^="X[-6]"
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns))		if (@insns[0] =~ /_ror/);
+
+	&movdqa	(@Tx[0],@X[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &movdqa	(eval(16*(($Xi-1)&3))."(%rsp)",@Tx[1]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));		# ror
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# body_20_39
+
+	&pslld	(@X[0],2);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&psrld	(@Tx[0],30);
+	 eval(shift(@insns))		if (@insns[0] =~ /_rol/);# rol
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+
+	&por	(@X[0],@Tx[0]);		# "X[0]"<<<=2
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns))		if (@insns[1] =~ /_rol/);
+	 eval(shift(@insns))		if (@insns[0] =~ /_rol/);
+	  &pshufd(@Tx[1],@X[-1&7],0xee)	if ($Xi<19);	# was &movdqa	(@Tx[1],@X[0])
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+
+	 foreach (@insns) { eval; }	# remaining instructions
+
+  $Xi++;	push(@X,shift(@X));	# "rotate" X[]
+		push(@Tx,shift(@Tx));
+}
+
+sub Xuplast_ssse3_80()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &paddd	(@Tx[1],@X[-1&7]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	  &movdqa	(eval(16*(($Xi-1)&3))."(%rsp)",@Tx[1]);	# X[]+K xfer IALU
+
+	 foreach (@insns) { eval; }		# remaining instructions
+
+	&cmp	($inp,$num);
+	&je	(".Ldone_ssse3");
+
+	unshift(@Tx,pop(@Tx));
+
+	&movdqa	(@X[2],"64($K_XX_XX)");		# pbswap mask
+	&movdqa	(@Tx[1],"-64($K_XX_XX)");	# K_00_19
+	&movdqu	(@X[-4&7],"0($inp)");		# load input
+	&movdqu	(@X[-3&7],"16($inp)");
+	&movdqu	(@X[-2&7],"32($inp)");
+	&movdqu	(@X[-1&7],"48($inp)");
+	&pshufb	(@X[-4&7],@X[2]);		# byte swap
+	&add	($inp,64);
+
+  $Xi=0;
+}
+
+sub Xloop_ssse3()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&pshufb	(@X[($Xi-3)&7],@X[2]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&paddd	(@X[($Xi-4)&7],@Tx[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&movdqa	(eval(16*$Xi)."(%rsp)",@X[($Xi-4)&7]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&psubd	(@X[($Xi-4)&7],@Tx[1]);
+
+	foreach (@insns) { eval; }
+  $Xi++;
+}
+
+sub Xtail_ssse3()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	foreach (@insns) { eval; }
+}
+
+sub body_00_19 () {	# ((c^d)&b)^d
+	# on start @T[0]=(c^d)&b
+	return &body_20_39() if ($rx==19); $rx++;
+	(
+	'($a,$b,$c,$d,$e)=@V;'.
+	'&$_ror	($b,$j?7:2)',	# $b>>>2
+	'&xor	(@T[0],$d)',
+	'&mov	(@T[1],$a)',	# $b for next round
+
+	'&add	($e,eval(4*($j&15))."(%rsp)")',	# X[]+K xfer
+	'&xor	($b,$c)',	# $c^$d for next round
+
+	'&$_rol	($a,5)',
+	'&add	($e,@T[0])',
+	'&and	(@T[1],$b)',	# ($b&($c^$d)) for next round
+
+	'&xor	($b,$c)',	# restore $b
+	'&add	($e,$a);'	.'$j++; unshift(@V,pop(@V)); unshift(@T,pop(@T));'
+	);
+}
+
+sub body_20_39 () {	# b^d^c
+	# on entry @T[0]=b^d
+	return &body_40_59() if ($rx==39); $rx++;
+	(
+	'($a,$b,$c,$d,$e)=@V;'.
+	'&add	($e,eval(4*($j&15))."(%rsp)")',	# X[]+K xfer
+	'&xor	(@T[0],$d)	if($j==19);'.
+	'&xor	(@T[0],$c)	if($j> 19)',	# ($b^$d^$c)
+	'&mov	(@T[1],$a)',	# $b for next round
+
+	'&$_rol	($a,5)',
+	'&add	($e,@T[0])',
+	'&xor	(@T[1],$c)	if ($j< 79)',	# $b^$d for next round
+
+	'&$_ror	($b,7)',	# $b>>>2
+	'&add	($e,$a);'	.'$j++; unshift(@V,pop(@V)); unshift(@T,pop(@T));'
+	);
+}
+
+sub body_40_59 () {	# ((b^c)&(c^d))^c
+	# on entry @T[0]=(b^c), (c^=d)
+	$rx++;
+	(
+	'($a,$b,$c,$d,$e)=@V;'.
+	'&add	($e,eval(4*($j&15))."(%rsp)")',	# X[]+K xfer
+	'&and	(@T[0],$c)	if ($j>=40)',	# (b^c)&(c^d)
+	'&xor	($c,$d)		if ($j>=40)',	# restore $c
+
+	'&$_ror	($b,7)',	# $b>>>2
+	'&mov	(@T[1],$a)',	# $b for next round
+	'&xor	(@T[0],$c)',
+
+	'&$_rol	($a,5)',
+	'&add	($e,@T[0])',
+	'&xor	(@T[1],$c)	if ($j==59);'.
+	'&xor	(@T[1],$b)	if ($j< 59)',	# b^c for next round
+
+	'&xor	($b,$c)		if ($j< 59)',	# c^d for next round
+	'&add	($e,$a);'	.'$j++; unshift(@V,pop(@V)); unshift(@T,pop(@T));'
+	);
+}
+$code.=<<___;
+.align	16
+.Loop_ssse3:
+___
+	&Xupdate_ssse3_16_31(\&body_00_19);
+	&Xupdate_ssse3_16_31(\&body_00_19);
+	&Xupdate_ssse3_16_31(\&body_00_19);
+	&Xupdate_ssse3_16_31(\&body_00_19);
+	&Xupdate_ssse3_32_79(\&body_00_19);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xupdate_ssse3_32_79(\&body_40_59);
+	&Xupdate_ssse3_32_79(\&body_40_59);
+	&Xupdate_ssse3_32_79(\&body_40_59);
+	&Xupdate_ssse3_32_79(\&body_40_59);
+	&Xupdate_ssse3_32_79(\&body_40_59);
+	&Xupdate_ssse3_32_79(\&body_20_39);
+	&Xuplast_ssse3_80(\&body_20_39);	# can jump to "done"
+
+				$saved_j=$j; @saved_V=@V;
+
+	&Xloop_ssse3(\&body_20_39);
+	&Xloop_ssse3(\&body_20_39);
+	&Xloop_ssse3(\&body_20_39);
+
+$code.=<<___;
+	add	0($ctx),$A			# update context
+	add	4($ctx),@T[0]
+	add	8($ctx),$C
+	add	12($ctx),$D
+	mov	$A,0($ctx)
+	add	16($ctx),$E
+	mov	@T[0],4($ctx)
+	mov	@T[0],$B			# magic seed
+	mov	$C,8($ctx)
+	mov	$C,@T[1]
+	mov	$D,12($ctx)
+	xor	$D,@T[1]
+	mov	$E,16($ctx)
+	and	@T[1],@T[0]
+	jmp	.Loop_ssse3
+
+.align	16
+.Ldone_ssse3:
+___
+				$j=$saved_j; @V=@saved_V;
+
+	&Xtail_ssse3(\&body_20_39);
+	&Xtail_ssse3(\&body_20_39);
+	&Xtail_ssse3(\&body_20_39);
+
+$code.=<<___;
+	add	0($ctx),$A			# update context
+	add	4($ctx),@T[0]
+	add	8($ctx),$C
+	mov	$A,0($ctx)
+	add	12($ctx),$D
+	mov	@T[0],4($ctx)
+	add	16($ctx),$E
+	mov	$C,8($ctx)
+	mov	$D,12($ctx)
+	mov	$E,16($ctx)
+___
+$code.=<<___ if ($win64);
+	movaps	-40-6*16($fp),%xmm6
+	movaps	-40-5*16($fp),%xmm7
+	movaps	-40-4*16($fp),%xmm8
+	movaps	-40-3*16($fp),%xmm9
+	movaps	-40-2*16($fp),%xmm10
+	movaps	-40-1*16($fp),%xmm11
+___
+$code.=<<___;
+	mov	-40($fp),%r14
+.cfi_restore	%r14
+	mov	-32($fp),%r13
+.cfi_restore	%r13
+	mov	-24($fp),%r12
+.cfi_restore	%r12
+	mov	-16($fp),%rbp
+.cfi_restore	%rbp
+	mov	-8($fp),%rbx
+.cfi_restore	%rbx
+	lea	($fp),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue_ssse3:
+	ret
+.cfi_endproc
+.size	sha1_block_data_order_ssse3,.-sha1_block_data_order_ssse3
+___
+
+if ($avx) {
+$Xi=4;				# reset variables
+@X=map("%xmm$_",(4..7,0..3));
+@Tx=map("%xmm$_",(8..10));
+$j=0;
+$rx=0;
+
+my $done_avx_label=".Ldone_avx";
+
+my $_rol=sub { &shld(@_[0],@_) };
+my $_ror=sub { &shrd(@_[0],@_) };
+
+$code.=<<___;
+.type	sha1_block_data_order_avx,\@function,3
+.align	16
+sha1_block_data_order_avx:
+_avx_shortcut:
+.cfi_startproc
+	mov	%rsp,$fp
+.cfi_def_cfa_register	$fp
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13		# redundant, done to share Win64 SE handler
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	lea	`-64-($win64?6*16:0)`(%rsp),%rsp
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	vmovaps	%xmm6,-40-6*16($fp)
+	vmovaps	%xmm7,-40-5*16($fp)
+	vmovaps	%xmm8,-40-4*16($fp)
+	vmovaps	%xmm9,-40-3*16($fp)
+	vmovaps	%xmm10,-40-2*16($fp)
+	vmovaps	%xmm11,-40-1*16($fp)
+.Lprologue_avx:
+___
+$code.=<<___;
+	and	\$-64,%rsp
+	mov	%rdi,$ctx	# reassigned argument
+	mov	%rsi,$inp	# reassigned argument
+	mov	%rdx,$num	# reassigned argument
+
+	shl	\$6,$num
+	add	$inp,$num
+	lea	K_XX_XX+64(%rip),$K_XX_XX
+
+	mov	0($ctx),$A		# load context
+	mov	4($ctx),$B
+	mov	8($ctx),$C
+	mov	12($ctx),$D
+	mov	$B,@T[0]		# magic seed
+	mov	16($ctx),$E
+	mov	$C,@T[1]
+	xor	$D,@T[1]
+	and	@T[1],@T[0]
+
+	vmovdqa	64($K_XX_XX),@X[2]	# pbswap mask
+	vmovdqa	-64($K_XX_XX),$Kx	# K_00_19
+	vmovdqu	0($inp),@X[-4&7]	# load input to %xmm[0-3]
+	vmovdqu	16($inp),@X[-3&7]
+	vmovdqu	32($inp),@X[-2&7]
+	vmovdqu	48($inp),@X[-1&7]
+	vpshufb	@X[2],@X[-4&7],@X[-4&7]	# byte swap
+	add	\$64,$inp
+	vpshufb	@X[2],@X[-3&7],@X[-3&7]
+	vpshufb	@X[2],@X[-2&7],@X[-2&7]
+	vpshufb	@X[2],@X[-1&7],@X[-1&7]
+	vpaddd	$Kx,@X[-4&7],@X[0]	# add K_00_19
+	vpaddd	$Kx,@X[-3&7],@X[1]
+	vpaddd	$Kx,@X[-2&7],@X[2]
+	vmovdqa	@X[0],0(%rsp)		# X[]+K xfer to IALU
+	vmovdqa	@X[1],16(%rsp)
+	vmovdqa	@X[2],32(%rsp)
+	jmp	.Loop_avx
+___
+
+sub Xupdate_avx_16_31()		# recall that $Xi starts with 4
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 40 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vpalignr(@X[0],@X[-3&7],@X[-4&7],8);	# compose "X[-14]" in "X[0]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	  &vpaddd	(@Tx[1],$Kx,@X[-1&7]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vpsrldq(@Tx[0],@X[-1&7],4);		# "X[-3]", 3 dwords
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vpxor	(@X[0],@X[0],@X[-4&7]);		# "X[0]"^="X[-16]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpxor	(@Tx[0],@Tx[0],@X[-2&7]);	# "X[-3]"^"X[-8]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpxor	(@X[0],@X[0],@Tx[0]);		# "X[0]"^="X[-3]"^"X[-8]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vmovdqa	(eval(16*(($Xi-1)&3))."(%rsp)",@Tx[1]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpsrld	(@Tx[0],@X[0],31);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpslldq(@Tx[2],@X[0],12);		# "X[0]"<<96, extract one dword
+	&vpaddd	(@X[0],@X[0],@X[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpsrld	(@Tx[1],@Tx[2],30);
+	&vpor	(@X[0],@X[0],@Tx[0]);		# "X[0]"<<<=1
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpslld	(@Tx[2],@Tx[2],2);
+	&vpxor	(@X[0],@X[0],@Tx[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpxor	(@X[0],@X[0],@Tx[2]);		# "X[0]"^=("X[0]">>96)<<<2
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vmovdqa	($Kx,eval(2*16*(($Xi)/5)-64)."($K_XX_XX)")	if ($Xi%5==0);	# K_XX_XX
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+
+	 foreach (@insns) { eval; }	# remaining instructions [if any]
+
+  $Xi++;	push(@X,shift(@X));	# "rotate" X[]
+}
+
+sub Xupdate_avx_32_79()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 to 44 instructions
+  my ($a,$b,$c,$d,$e);
+
+	&vpalignr(@Tx[0],@X[-1&7],@X[-2&7],8);	# compose "X[-6]"
+	&vpxor	(@X[0],@X[0],@X[-4&7]);		# "X[0]"="X[-32]"^"X[-16]"
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+
+	&vpxor	(@X[0],@X[0],@X[-7&7]);		# "X[0]"^="X[-28]"
+	 eval(shift(@insns));
+	 eval(shift(@insns))	if (@insns[0] !~ /&ro[rl]/);
+	  &vpaddd	(@Tx[1],$Kx,@X[-1&7]);
+	  &vmovdqa	($Kx,eval(2*16*($Xi/5)-64)."($K_XX_XX)")	if ($Xi%5==0);
+	 eval(shift(@insns));		# ror
+	 eval(shift(@insns));
+
+	&vpxor	(@X[0],@X[0],@Tx[0]);		# "X[0]"^="X[-6]"
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+
+	&vpsrld	(@Tx[0],@X[0],30);
+	  &vmovdqa	(eval(16*(($Xi-1)&3))."(%rsp)",@Tx[1]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	 eval(shift(@insns));
+
+	&vpslld	(@X[0],@X[0],2);
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# ror
+	 eval(shift(@insns));
+
+	&vpor	(@X[0],@X[0],@Tx[0]);		# "X[0]"<<<=2
+	 eval(shift(@insns));		# body_20_39
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));		# rol
+	 eval(shift(@insns));
+
+	 foreach (@insns) { eval; }	# remaining instructions
+
+  $Xi++;	push(@X,shift(@X));	# "rotate" X[]
+}
+
+sub Xuplast_avx_80()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));
+	  &vpaddd	(@Tx[1],$Kx,@X[-1&7]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	  &vmovdqa	(eval(16*(($Xi-1)&3))."(%rsp)",@Tx[1]);	# X[]+K xfer IALU
+
+	 foreach (@insns) { eval; }		# remaining instructions
+
+	&cmp	($inp,$num);
+	&je	($done_avx_label);
+
+	&vmovdqa(@X[2],"64($K_XX_XX)");		# pbswap mask
+	&vmovdqa($Kx,"-64($K_XX_XX)");		# K_00_19
+	&vmovdqu(@X[-4&7],"0($inp)");		# load input
+	&vmovdqu(@X[-3&7],"16($inp)");
+	&vmovdqu(@X[-2&7],"32($inp)");
+	&vmovdqu(@X[-1&7],"48($inp)");
+	&vpshufb(@X[-4&7],@X[-4&7],@X[2]);	# byte swap
+	&add	($inp,64);
+
+  $Xi=0;
+}
+
+sub Xloop_avx()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vpshufb(@X[($Xi-3)&7],@X[($Xi-3)&7],@X[2]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vpaddd	(@X[$Xi&7],@X[($Xi-4)&7],$Kx);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vmovdqa(eval(16*$Xi)."(%rsp)",@X[$Xi&7]);	# X[]+K xfer to IALU
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	foreach (@insns) { eval; }
+  $Xi++;
+}
+
+sub Xtail_avx()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	foreach (@insns) { eval; }
+}
+
+$code.=<<___;
+.align	16
+.Loop_avx:
+___
+	&Xupdate_avx_16_31(\&body_00_19);
+	&Xupdate_avx_16_31(\&body_00_19);
+	&Xupdate_avx_16_31(\&body_00_19);
+	&Xupdate_avx_16_31(\&body_00_19);
+	&Xupdate_avx_32_79(\&body_00_19);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xupdate_avx_32_79(\&body_40_59);
+	&Xupdate_avx_32_79(\&body_40_59);
+	&Xupdate_avx_32_79(\&body_40_59);
+	&Xupdate_avx_32_79(\&body_40_59);
+	&Xupdate_avx_32_79(\&body_40_59);
+	&Xupdate_avx_32_79(\&body_20_39);
+	&Xuplast_avx_80(\&body_20_39);	# can jump to "done"
+
+				$saved_j=$j; @saved_V=@V;
+
+	&Xloop_avx(\&body_20_39);
+	&Xloop_avx(\&body_20_39);
+	&Xloop_avx(\&body_20_39);
+
+$code.=<<___;
+	add	0($ctx),$A			# update context
+	add	4($ctx),@T[0]
+	add	8($ctx),$C
+	add	12($ctx),$D
+	mov	$A,0($ctx)
+	add	16($ctx),$E
+	mov	@T[0],4($ctx)
+	mov	@T[0],$B			# magic seed
+	mov	$C,8($ctx)
+	mov	$C,@T[1]
+	mov	$D,12($ctx)
+	xor	$D,@T[1]
+	mov	$E,16($ctx)
+	and	@T[1],@T[0]
+	jmp	.Loop_avx
+
+.align	16
+$done_avx_label:
+___
+				$j=$saved_j; @V=@saved_V;
+
+	&Xtail_avx(\&body_20_39);
+	&Xtail_avx(\&body_20_39);
+	&Xtail_avx(\&body_20_39);
+
+$code.=<<___;
+	vzeroupper
+
+	add	0($ctx),$A			# update context
+	add	4($ctx),@T[0]
+	add	8($ctx),$C
+	mov	$A,0($ctx)
+	add	12($ctx),$D
+	mov	@T[0],4($ctx)
+	add	16($ctx),$E
+	mov	$C,8($ctx)
+	mov	$D,12($ctx)
+	mov	$E,16($ctx)
+___
+$code.=<<___ if ($win64);
+	movaps	-40-6*16($fp),%xmm6
+	movaps	-40-5*16($fp),%xmm7
+	movaps	-40-4*16($fp),%xmm8
+	movaps	-40-3*16($fp),%xmm9
+	movaps	-40-2*16($fp),%xmm10
+	movaps	-40-1*16($fp),%xmm11
+___
+$code.=<<___;
+	mov	-40($fp),%r14
+.cfi_restore	%r14
+	mov	-32($fp),%r13
+.cfi_restore	%r13
+	mov	-24($fp),%r12
+.cfi_restore	%r12
+	mov	-16($fp),%rbp
+.cfi_restore	%rbp
+	mov	-8($fp),%rbx
+.cfi_restore	%rbx
+	lea	($fp),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue_avx:
+	ret
+.cfi_endproc
+.size	sha1_block_data_order_avx,.-sha1_block_data_order_avx
+___
+
+if ($avx>1) {
+use integer;
+$Xi=4;					# reset variables
+@X=map("%ymm$_",(4..7,0..3));
+@Tx=map("%ymm$_",(8..10));
+$Kx="%ymm11";
+$j=0;
+
+my @ROTX=("%eax","%ebp","%ebx","%ecx","%edx","%esi");
+my ($a5,$t0)=("%r12d","%edi");
+
+my ($A,$F,$B,$C,$D,$E)=@ROTX;
+my $rx=0;
+my $frame="%r13";
+
+$code.=<<___;
+.type	sha1_block_data_order_avx2,\@function,3
+.align	16
+sha1_block_data_order_avx2:
+_avx2_shortcut:
+.cfi_startproc
+	mov	%rsp,$fp
+.cfi_def_cfa_register	$fp
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	lea	-6*16(%rsp),%rsp
+	vmovaps	%xmm6,-40-6*16($fp)
+	vmovaps	%xmm7,-40-5*16($fp)
+	vmovaps	%xmm8,-40-4*16($fp)
+	vmovaps	%xmm9,-40-3*16($fp)
+	vmovaps	%xmm10,-40-2*16($fp)
+	vmovaps	%xmm11,-40-1*16($fp)
+.Lprologue_avx2:
+___
+$code.=<<___;
+	mov	%rdi,$ctx		# reassigned argument
+	mov	%rsi,$inp		# reassigned argument
+	mov	%rdx,$num		# reassigned argument
+
+	lea	-640(%rsp),%rsp
+	shl	\$6,$num
+	 lea	64($inp),$frame
+	and	\$-128,%rsp
+	add	$inp,$num
+	lea	K_XX_XX+64(%rip),$K_XX_XX
+
+	mov	0($ctx),$A		# load context
+	 cmp	$num,$frame
+	 cmovae	$inp,$frame		# next or same block
+	mov	4($ctx),$F
+	mov	8($ctx),$C
+	mov	12($ctx),$D
+	mov	16($ctx),$E
+	vmovdqu	64($K_XX_XX),@X[2]	# pbswap mask
+
+	vmovdqu		($inp),%xmm0
+	vmovdqu		16($inp),%xmm1
+	vmovdqu		32($inp),%xmm2
+	vmovdqu		48($inp),%xmm3
+	lea		64($inp),$inp
+	vinserti128	\$1,($frame),@X[-4&7],@X[-4&7]
+	vinserti128	\$1,16($frame),@X[-3&7],@X[-3&7]
+	vpshufb		@X[2],@X[-4&7],@X[-4&7]
+	vinserti128	\$1,32($frame),@X[-2&7],@X[-2&7]
+	vpshufb		@X[2],@X[-3&7],@X[-3&7]
+	vinserti128	\$1,48($frame),@X[-1&7],@X[-1&7]
+	vpshufb		@X[2],@X[-2&7],@X[-2&7]
+	vmovdqu		-64($K_XX_XX),$Kx	# K_00_19
+	vpshufb		@X[2],@X[-1&7],@X[-1&7]
+
+	vpaddd	$Kx,@X[-4&7],@X[0]	# add K_00_19
+	vpaddd	$Kx,@X[-3&7],@X[1]
+	vmovdqu	@X[0],0(%rsp)		# X[]+K xfer to IALU
+	vpaddd	$Kx,@X[-2&7],@X[2]
+	vmovdqu	@X[1],32(%rsp)
+	vpaddd	$Kx,@X[-1&7],@X[3]
+	vmovdqu	@X[2],64(%rsp)
+	vmovdqu	@X[3],96(%rsp)
+___
+for (;$Xi<8;$Xi++) {	# Xupdate_avx2_16_31
+    use integer;
+
+	&vpalignr(@X[0],@X[-3&7],@X[-4&7],8);	# compose "X[-14]" in "X[0]"
+	&vpsrldq(@Tx[0],@X[-1&7],4);		# "X[-3]", 3 dwords
+	&vpxor	(@X[0],@X[0],@X[-4&7]);		# "X[0]"^="X[-16]"
+	&vpxor	(@Tx[0],@Tx[0],@X[-2&7]);	# "X[-3]"^"X[-8]"
+	&vpxor	(@X[0],@X[0],@Tx[0]);		# "X[0]"^="X[-3]"^"X[-8]"
+	&vpsrld	(@Tx[0],@X[0],31);
+	&vmovdqu($Kx,eval(2*16*(($Xi)/5)-64)."($K_XX_XX)")	if ($Xi%5==0);	# K_XX_XX
+	&vpslldq(@Tx[2],@X[0],12);		# "X[0]"<<96, extract one dword
+	&vpaddd	(@X[0],@X[0],@X[0]);
+	&vpsrld	(@Tx[1],@Tx[2],30);
+	&vpor	(@X[0],@X[0],@Tx[0]);		# "X[0]"<<<=1
+	&vpslld	(@Tx[2],@Tx[2],2);
+	&vpxor	(@X[0],@X[0],@Tx[1]);
+	&vpxor	(@X[0],@X[0],@Tx[2]);		# "X[0]"^=("X[0]">>96)<<<2
+	&vpaddd	(@Tx[1],@X[0],$Kx);
+	&vmovdqu("32*$Xi(%rsp)",@Tx[1]);	# X[]+K xfer to IALU
+
+	push(@X,shift(@X));	# "rotate" X[]
+}
+$code.=<<___;
+	lea	128(%rsp),$frame
+	jmp	.Loop_avx2
+.align	32
+.Loop_avx2:
+	rorx	\$2,$F,$B
+	andn	$D,$F,$t0
+	and	$C,$F
+	xor	$t0,$F
+___
+sub bodyx_00_19 () {	# 8 instructions, 3 cycles critical path
+	# at start $f=(b&c)^(~b&d), $b>>>=2
+	return &bodyx_20_39() if ($rx==19); $rx++;
+	(
+	'($a,$f,$b,$c,$d,$e)=@ROTX;'.
+
+	'&add	($e,((32*($j/4)+4*($j%4))%256-128)."($frame)");'.	# e+=X[i]+K
+	 '&lea	($frame,"256($frame)")	if ($j%32==31);',
+	'&andn	($t0,$a,$c)',			# ~b&d for next round
+
+	'&add	($e,$f)',			# e+=(b&c)^(~b&d)
+	'&rorx	($a5,$a,27)',			# a<<<5
+	'&rorx	($f,$a,2)',			# b>>>2 for next round
+	'&and	($a,$b)',			# b&c for next round
+
+	'&add	($e,$a5)',			# e+=a<<<5
+	'&xor	($a,$t0);'.			# f=(b&c)^(~b&d) for next round
+
+	'unshift(@ROTX,pop(@ROTX)); $j++;'
+	)
+}
+
+sub bodyx_20_39 () {	# 7 instructions, 2 cycles critical path
+	# on entry $f=b^c^d, $b>>>=2
+	return &bodyx_40_59() if ($rx==39); $rx++;
+	(
+	'($a,$f,$b,$c,$d,$e)=@ROTX;'.
+
+	'&add	($e,((32*($j/4)+4*($j%4))%256-128)."($frame)");'.	# e+=X[i]+K
+	 '&lea	($frame,"256($frame)")	if ($j%32==31);',
+
+	'&lea	($e,"($e,$f)")',		# e+=b^c^d
+	'&rorx	($a5,$a,27)',			# a<<<5
+	'&rorx	($f,$a,2)	if ($j<79)',	# b>>>2 in next round
+	'&xor	($a,$b)		if ($j<79)',	# b^c for next round
+
+	'&add	($e,$a5)',			# e+=a<<<5
+	'&xor	($a,$c)		if ($j<79);'.	# f=b^c^d for next round
+
+	'unshift(@ROTX,pop(@ROTX)); $j++;'
+	)
+}
+
+sub bodyx_40_59 () {	# 10 instructions, 3 cycles critical path
+	# on entry $f=((b^c)&(c^d)), $b>>>=2
+	$rx++;
+	(
+	'($a,$f,$b,$c,$d,$e)=@ROTX;'.
+
+	'&add	($e,((32*($j/4)+4*($j%4))%256-128)."($frame)");'.	# e+=X[i]+K
+	 '&lea	($frame,"256($frame)")	if ($j%32==31);',
+	'&xor	($f,$c)		if ($j>39)',	# (b^c)&(c^d)^c
+	'&mov	($t0,$b)	if ($j<59)',	# count on zero latency
+	'&xor	($t0,$c)	if ($j<59)',	# c^d for next round
+
+	'&lea	($e,"($e,$f)")',		# e+=(b^c)&(c^d)^c
+	'&rorx	($a5,$a,27)',			# a<<<5
+	'&rorx	($f,$a,2)',			# b>>>2 in next round
+	'&xor	($a,$b)',			# b^c for next round
+
+	'&add	($e,$a5)',			# e+=a<<<5
+	'&and	($a,$t0)	if ($j< 59);'.	# f=(b^c)&(c^d) for next round
+	'&xor	($a,$c)		if ($j==59);'.	# f=b^c^d for next round
+
+	'unshift(@ROTX,pop(@ROTX)); $j++;'
+	)
+}
+
+sub Xupdate_avx2_16_31()		# recall that $Xi starts with 4
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body,&$body);	# 35 instructions
+  my ($a,$b,$c,$d,$e);
+
+	&vpalignr(@X[0],@X[-3&7],@X[-4&7],8);	# compose "X[-14]" in "X[0]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpsrldq(@Tx[0],@X[-1&7],4);		# "X[-3]", 3 dwords
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpxor	(@X[0],@X[0],@X[-4&7]);		# "X[0]"^="X[-16]"
+	&vpxor	(@Tx[0],@Tx[0],@X[-2&7]);	# "X[-3]"^"X[-8]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpxor	(@X[0],@X[0],@Tx[0]);		# "X[0]"^="X[-3]"^"X[-8]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpsrld	(@Tx[0],@X[0],31);
+	&vmovdqu($Kx,eval(2*16*(($Xi)/5)-64)."($K_XX_XX)")	if ($Xi%5==0);	# K_XX_XX
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpslldq(@Tx[2],@X[0],12);		# "X[0]"<<96, extract one dword
+	&vpaddd	(@X[0],@X[0],@X[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpsrld	(@Tx[1],@Tx[2],30);
+	&vpor	(@X[0],@X[0],@Tx[0]);		# "X[0]"<<<=1
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpslld	(@Tx[2],@Tx[2],2);
+	&vpxor	(@X[0],@X[0],@Tx[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpxor	(@X[0],@X[0],@Tx[2]);		# "X[0]"^=("X[0]">>96)<<<2
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpaddd	(@Tx[1],@X[0],$Kx);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vmovdqu(eval(32*($Xi))."(%rsp)",@Tx[1]);	# X[]+K xfer to IALU
+
+	 foreach (@insns) { eval; }	# remaining instructions [if any]
+
+	$Xi++;
+	push(@X,shift(@X));	# "rotate" X[]
+}
+
+sub Xupdate_avx2_32_79()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body,&$body);	# 35 to 50 instructions
+  my ($a,$b,$c,$d,$e);
+
+	&vpalignr(@Tx[0],@X[-1&7],@X[-2&7],8);	# compose "X[-6]"
+	&vpxor	(@X[0],@X[0],@X[-4&7]);		# "X[0]"="X[-32]"^"X[-16]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpxor	(@X[0],@X[0],@X[-7&7]);		# "X[0]"^="X[-28]"
+	&vmovdqu($Kx,eval(2*16*($Xi/5)-64)."($K_XX_XX)")	if ($Xi%5==0);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpxor	(@X[0],@X[0],@Tx[0]);		# "X[0]"^="X[-6]"
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpsrld	(@Tx[0],@X[0],30);
+	&vpslld	(@X[0],@X[0],2);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	#&vpslld	(@X[0],@X[0],2);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpor	(@X[0],@X[0],@Tx[0]);		# "X[0]"<<<=2
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vpaddd	(@Tx[1],@X[0],$Kx);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	&vmovdqu("32*$Xi(%rsp)",@Tx[1]);	# X[]+K xfer to IALU
+
+	 foreach (@insns) { eval; }	# remaining instructions
+
+	$Xi++;
+	push(@X,shift(@X));	# "rotate" X[]
+}
+
+sub Xloop_avx2()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body,&$body);	# 32 instructions
+  my ($a,$b,$c,$d,$e);
+
+	 foreach (@insns) { eval; }
+}
+
+	&align32();
+	&Xupdate_avx2_32_79(\&bodyx_00_19);
+	&Xupdate_avx2_32_79(\&bodyx_00_19);
+	&Xupdate_avx2_32_79(\&bodyx_00_19);
+	&Xupdate_avx2_32_79(\&bodyx_00_19);
+
+	&Xupdate_avx2_32_79(\&bodyx_20_39);
+	&Xupdate_avx2_32_79(\&bodyx_20_39);
+	&Xupdate_avx2_32_79(\&bodyx_20_39);
+	&Xupdate_avx2_32_79(\&bodyx_20_39);
+
+	&align32();
+	&Xupdate_avx2_32_79(\&bodyx_40_59);
+	&Xupdate_avx2_32_79(\&bodyx_40_59);
+	&Xupdate_avx2_32_79(\&bodyx_40_59);
+	&Xupdate_avx2_32_79(\&bodyx_40_59);
+
+	&Xloop_avx2(\&bodyx_20_39);
+	&Xloop_avx2(\&bodyx_20_39);
+	&Xloop_avx2(\&bodyx_20_39);
+	&Xloop_avx2(\&bodyx_20_39);
+
+$code.=<<___;
+	lea	128($inp),$frame
+	lea	128($inp),%rdi			# borrow $t0
+	cmp	$num,$frame
+	cmovae	$inp,$frame			# next or previous block
+
+	# output is d-e-[a]-f-b-c => A=d,F=e,C=f,D=b,E=c
+	add	0($ctx),@ROTX[0]		# update context
+	add	4($ctx),@ROTX[1]
+	add	8($ctx),@ROTX[3]
+	mov	@ROTX[0],0($ctx)
+	add	12($ctx),@ROTX[4]
+	mov	@ROTX[1],4($ctx)
+	 mov	@ROTX[0],$A			# A=d
+	add	16($ctx),@ROTX[5]
+	 mov	@ROTX[3],$a5
+	mov	@ROTX[3],8($ctx)
+	 mov	@ROTX[4],$D			# D=b
+	 #xchg	@ROTX[5],$F			# F=c, C=f
+	mov	@ROTX[4],12($ctx)
+	 mov	@ROTX[1],$F			# F=e
+	mov	@ROTX[5],16($ctx)
+	#mov	$F,16($ctx)
+	 mov	@ROTX[5],$E			# E=c
+	 mov	$a5,$C				# C=f
+	 #xchg	$F,$E				# E=c, F=e
+
+	cmp	$num,$inp
+	je	.Ldone_avx2
+___
+
+$Xi=4;				# reset variables
+@X=map("%ymm$_",(4..7,0..3));
+
+$code.=<<___;
+	vmovdqu	64($K_XX_XX),@X[2]		# pbswap mask
+	cmp	$num,%rdi			# borrowed $t0
+	ja	.Last_avx2
+
+	vmovdqu		-64(%rdi),%xmm0		# low part of @X[-4&7]
+	vmovdqu		-48(%rdi),%xmm1
+	vmovdqu		-32(%rdi),%xmm2
+	vmovdqu		-16(%rdi),%xmm3
+	vinserti128	\$1,0($frame),@X[-4&7],@X[-4&7]
+	vinserti128	\$1,16($frame),@X[-3&7],@X[-3&7]
+	vinserti128	\$1,32($frame),@X[-2&7],@X[-2&7]
+	vinserti128	\$1,48($frame),@X[-1&7],@X[-1&7]
+	jmp	.Last_avx2
+
+.align	32
+.Last_avx2:
+	lea	128+16(%rsp),$frame
+	rorx	\$2,$F,$B
+	andn	$D,$F,$t0
+	and	$C,$F
+	xor	$t0,$F
+	sub	\$-128,$inp
+___
+	$rx=$j=0;	@ROTX=($A,$F,$B,$C,$D,$E);
+
+	&Xloop_avx2	(\&bodyx_00_19);
+	&Xloop_avx2	(\&bodyx_00_19);
+	&Xloop_avx2	(\&bodyx_00_19);
+	&Xloop_avx2	(\&bodyx_00_19);
+
+	&Xloop_avx2	(\&bodyx_20_39);
+	  &vmovdqu	($Kx,"-64($K_XX_XX)");		# K_00_19
+	  &vpshufb	(@X[-4&7],@X[-4&7],@X[2]);	# byte swap
+	&Xloop_avx2	(\&bodyx_20_39);
+	  &vpshufb	(@X[-3&7],@X[-3&7],@X[2]);
+	  &vpaddd	(@Tx[0],@X[-4&7],$Kx);		# add K_00_19
+	&Xloop_avx2	(\&bodyx_20_39);
+	  &vmovdqu	("0(%rsp)",@Tx[0]);
+	  &vpshufb	(@X[-2&7],@X[-2&7],@X[2]);
+	  &vpaddd	(@Tx[1],@X[-3&7],$Kx);
+	&Xloop_avx2	(\&bodyx_20_39);
+	  &vmovdqu	("32(%rsp)",@Tx[1]);
+	  &vpshufb	(@X[-1&7],@X[-1&7],@X[2]);
+	  &vpaddd	(@X[2],@X[-2&7],$Kx);
+
+	&Xloop_avx2	(\&bodyx_40_59);
+	&align32	();
+	  &vmovdqu	("64(%rsp)",@X[2]);
+	  &vpaddd	(@X[3],@X[-1&7],$Kx);
+	&Xloop_avx2	(\&bodyx_40_59);
+	  &vmovdqu	("96(%rsp)",@X[3]);
+	&Xloop_avx2	(\&bodyx_40_59);
+	&Xupdate_avx2_16_31(\&bodyx_40_59);
+
+	&Xupdate_avx2_16_31(\&bodyx_20_39);
+	&Xupdate_avx2_16_31(\&bodyx_20_39);
+	&Xupdate_avx2_16_31(\&bodyx_20_39);
+	&Xloop_avx2	(\&bodyx_20_39);
+
+$code.=<<___;
+	lea	128(%rsp),$frame
+
+	# output is d-e-[a]-f-b-c => A=d,F=e,C=f,D=b,E=c
+	add	0($ctx),@ROTX[0]		# update context
+	add	4($ctx),@ROTX[1]
+	add	8($ctx),@ROTX[3]
+	mov	@ROTX[0],0($ctx)
+	add	12($ctx),@ROTX[4]
+	mov	@ROTX[1],4($ctx)
+	 mov	@ROTX[0],$A			# A=d
+	add	16($ctx),@ROTX[5]
+	 mov	@ROTX[3],$a5
+	mov	@ROTX[3],8($ctx)
+	 mov	@ROTX[4],$D			# D=b
+	 #xchg	@ROTX[5],$F			# F=c, C=f
+	mov	@ROTX[4],12($ctx)
+	 mov	@ROTX[1],$F			# F=e
+	mov	@ROTX[5],16($ctx)
+	#mov	$F,16($ctx)
+	 mov	@ROTX[5],$E			# E=c
+	 mov	$a5,$C				# C=f
+	 #xchg	$F,$E				# E=c, F=e
+
+	cmp	$num,$inp
+	jbe	.Loop_avx2
+
+.Ldone_avx2:
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	movaps	-40-6*16($fp),%xmm6
+	movaps	-40-5*16($fp),%xmm7
+	movaps	-40-4*16($fp),%xmm8
+	movaps	-40-3*16($fp),%xmm9
+	movaps	-40-2*16($fp),%xmm10
+	movaps	-40-1*16($fp),%xmm11
+___
+$code.=<<___;
+	mov	-40($fp),%r14
+.cfi_restore	%r14
+	mov	-32($fp),%r13
+.cfi_restore	%r13
+	mov	-24($fp),%r12
+.cfi_restore	%r12
+	mov	-16($fp),%rbp
+.cfi_restore	%rbp
+	mov	-8($fp),%rbx
+.cfi_restore	%rbx
+	lea	($fp),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue_avx2:
+	ret
+.cfi_endproc
+.size	sha1_block_data_order_avx2,.-sha1_block_data_order_avx2
+___
+}
+}
+$code.=<<___;
+.align	64
+K_XX_XX:
+.long	0x5a827999,0x5a827999,0x5a827999,0x5a827999	# K_00_19
+.long	0x5a827999,0x5a827999,0x5a827999,0x5a827999	# K_00_19
+.long	0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1	# K_20_39
+.long	0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1	# K_20_39
+.long	0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc	# K_40_59
+.long	0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc	# K_40_59
+.long	0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6	# K_60_79
+.long	0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6	# K_60_79
+.long	0x00010203,0x04050607,0x08090a0b,0x0c0d0e0f	# pbswap mask
+.long	0x00010203,0x04050607,0x08090a0b,0x0c0d0e0f	# pbswap mask
+.byte	0xf,0xe,0xd,0xc,0xb,0xa,0x9,0x8,0x7,0x6,0x5,0x4,0x3,0x2,0x1,0x0
+___
+}}}
+$code.=<<___;
+.asciz	"SHA1 block transform for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+.align	64
+___
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	se_handler,\@abi-omnipotent
+.align	16
+se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	lea	.Lprologue(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<.Lprologue
+	jb	.Lcommon_seh_tail
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	lea	.Lepilogue(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip>=.Lepilogue
+	jae	.Lcommon_seh_tail
+
+	mov	`16*4`(%rax),%rax	# pull saved stack pointer
+
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+
+	jmp	.Lcommon_seh_tail
+.size	se_handler,.-se_handler
+___
+
+$code.=<<___ if ($shaext);
+.type	shaext_handler,\@abi-omnipotent
+.align	16
+shaext_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	lea	.Lprologue_shaext(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<.Lprologue
+	jb	.Lcommon_seh_tail
+
+	lea	.Lepilogue_shaext(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip>=.Lepilogue
+	jae	.Lcommon_seh_tail
+
+	lea	-8-4*16(%rax),%rsi
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$8,%ecx
+	.long	0xa548f3fc		# cld; rep movsq
+
+	jmp	.Lcommon_seh_tail
+.size	shaext_handler,.-shaext_handler
+___
+
+$code.=<<___;
+.type	ssse3_handler,\@abi-omnipotent
+.align	16
+ssse3_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lcommon_seh_tail
+
+	mov	208($context),%rax	# pull context->R11
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lcommon_seh_tail
+
+	lea	-40-6*16(%rax),%rsi
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$12,%ecx
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+
+.Lcommon_seh_tail:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	ssse3_handler,.-ssse3_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_sha1_block_data_order
+	.rva	.LSEH_end_sha1_block_data_order
+	.rva	.LSEH_info_sha1_block_data_order
+___
+$code.=<<___ if ($shaext);
+	.rva	.LSEH_begin_sha1_block_data_order_shaext
+	.rva	.LSEH_end_sha1_block_data_order_shaext
+	.rva	.LSEH_info_sha1_block_data_order_shaext
+___
+$code.=<<___;
+	.rva	.LSEH_begin_sha1_block_data_order_ssse3
+	.rva	.LSEH_end_sha1_block_data_order_ssse3
+	.rva	.LSEH_info_sha1_block_data_order_ssse3
+___
+$code.=<<___ if ($avx);
+	.rva	.LSEH_begin_sha1_block_data_order_avx
+	.rva	.LSEH_end_sha1_block_data_order_avx
+	.rva	.LSEH_info_sha1_block_data_order_avx
+___
+$code.=<<___ if ($avx>1);
+	.rva	.LSEH_begin_sha1_block_data_order_avx2
+	.rva	.LSEH_end_sha1_block_data_order_avx2
+	.rva	.LSEH_info_sha1_block_data_order_avx2
+___
+$code.=<<___;
+.section	.xdata
+.align	8
+.LSEH_info_sha1_block_data_order:
+	.byte	9,0,0,0
+	.rva	se_handler
+___
+$code.=<<___ if ($shaext);
+.LSEH_info_sha1_block_data_order_shaext:
+	.byte	9,0,0,0
+	.rva	shaext_handler
+___
+$code.=<<___;
+.LSEH_info_sha1_block_data_order_ssse3:
+	.byte	9,0,0,0
+	.rva	ssse3_handler
+	.rva	.Lprologue_ssse3,.Lepilogue_ssse3	# HandlerData[]
+___
+$code.=<<___ if ($avx);
+.LSEH_info_sha1_block_data_order_avx:
+	.byte	9,0,0,0
+	.rva	ssse3_handler
+	.rva	.Lprologue_avx,.Lepilogue_avx		# HandlerData[]
+___
+$code.=<<___ if ($avx>1);
+.LSEH_info_sha1_block_data_order_avx2:
+	.byte	9,0,0,0
+	.rva	ssse3_handler
+	.rva	.Lprologue_avx2,.Lepilogue_avx2		# HandlerData[]
+___
+}
+
+####################################################################
+
+sub sha1rnds4 {
+    if (@_[0] =~ /\$([x0-9a-f]+),\s*%xmm([0-7]),\s*%xmm([0-7])/) {
+      my @opcode=(0x0f,0x3a,0xcc);
+	push @opcode,0xc0|($2&7)|(($3&7)<<3);		# ModR/M
+	my $c=$1;
+	push @opcode,$c=~/^0/?oct($c):$c;
+	return ".byte\t".join(',',@opcode);
+    } else {
+	return "sha1rnds4\t".@_[0];
+    }
+}
+
+sub sha1op38 {
+    my $instr = shift;
+    my %opcodelet = (
+		"sha1nexte" => 0xc8,
+  		"sha1msg1"  => 0xc9,
+		"sha1msg2"  => 0xca	);
+
+    if (defined($opcodelet{$instr}) && @_[0] =~ /%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+      my @opcode=(0x0f,0x38);
+      my $rex=0;
+	$rex|=0x04			if ($2>=8);
+	$rex|=0x01			if ($1>=8);
+	unshift @opcode,0x40|$rex	if ($rex);
+	push @opcode,$opcodelet{$instr};
+	push @opcode,0xc0|($1&7)|(($2&7)<<3);		# ModR/M
+	return ".byte\t".join(',',@opcode);
+    } else {
+	return $instr."\t".@_[0];
+    }
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/geo;
+
+	s/\b(sha1rnds4)\s+(.*)/sha1rnds4($2)/geo	or
+	s/\b(sha1[^\s]*)\s+(.*)/sha1op38($1,$2)/geo;
+
+	print $_,"\n";
+}
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha256-586.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha256-586.pl
new file mode 100644
index 000000000..dccc771ad
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha256-586.pl
@@ -0,0 +1,1296 @@
+#! /usr/bin/env perl
+# Copyright 2007-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# SHA256 block transform for x86. September 2007.
+#
+# Performance improvement over compiler generated code varies from
+# 10% to 40% [see below]. Not very impressive on some µ-archs, but
+# it's 5 times smaller and optimizes amount of writes.
+#
+# May 2012.
+#
+# Optimization including two of Pavel Semjanov's ideas, alternative
+# Maj and full unroll, resulted in ~20-25% improvement on most CPUs,
+# ~7% on Pentium, ~40% on Atom. As fully unrolled loop body is almost
+# 15x larger, 8KB vs. 560B, it's fired only for longer inputs. But not
+# on P4, where it kills performance, nor Sandy Bridge, where folded
+# loop is approximately as fast...
+#
+# June 2012.
+#
+# Add AMD XOP-specific code path, >30% improvement on Bulldozer over
+# May version, >60% over original. Add AVX+shrd code path, >25%
+# improvement on Sandy Bridge over May version, 60% over original.
+#
+# May 2013.
+#
+# Replace AMD XOP code path with SSSE3 to cover more processors.
+# (Biggest improvement coefficient is on upcoming Atom Silvermont,
+# not shown.) Add AVX+BMI code path.
+#
+# March 2014.
+#
+# Add support for Intel SHA Extensions.
+#
+# Performance in clock cycles per processed byte (less is better):
+#
+#		gcc	icc	x86 asm(*)	SIMD	x86_64 asm(**)
+# Pentium	46	57	40/38		-	-
+# PIII		36	33	27/24		-	-
+# P4		41	38	28		-	17.3
+# AMD K8	27	25	19/15.5		-	14.9
+# Core2		26	23	18/15.6		14.3	13.8
+# Westmere	27	-	19/15.7		13.4	12.3
+# Sandy Bridge	25	-	15.9		12.4	11.6
+# Ivy Bridge	24	-	15.0		11.4	10.3
+# Haswell	22	-	13.9		9.46	7.80
+# Skylake	20	-	14.9		9.50	7.70
+# Bulldozer	36	-	27/22		17.0	13.6
+# VIA Nano	36	-	25/22		16.8	16.5
+# Atom		50	-	30/25		21.9	18.9
+# Silvermont	40	-	34/31		22.9	20.6
+# Goldmont	29	-	20		16.3(***)
+#
+# (*)	numbers after slash are for unrolled loop, where applicable;
+# (**)	x86_64 assembly performance is presented for reference
+#	purposes, results are best-available;
+# (***)	SHAEXT result is 4.1, strangely enough better than 64-bit one;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output=pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0],$ARGV[$#ARGV] eq "386");
+
+$xmm=$avx=0;
+for (@ARGV) { $xmm=1 if (/-DOPENSSL_IA32_SSE2/); }
+
+if ($xmm &&	`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+			=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.19) + ($1>=2.22);
+}
+
+if ($xmm && !$avx && $ARGV[0] eq "win32n" &&
+		`nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.03) + ($1>=2.10);
+}
+
+if ($xmm && !$avx && $ARGV[0] eq "win32" &&
+		`ml 2>&1` =~ /Version ([0-9]+)\./) {
+	$avx = ($1>=10) + ($1>=11);
+}
+
+if ($xmm && !$avx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|based on LLVM) ([3-9]\.[0-9]+)/) {
+	$avx = ($2>=3.0) + ($2>3.0);
+}
+
+$shaext=$xmm;	### set to zero if compiling for 1.0.1
+
+$unroll_after = 64*4;	# If pre-evicted from L1P cache first spin of
+			# fully unrolled loop was measured to run about
+			# 3-4x slower. If slowdown coefficient is N and
+			# unrolled loop is m times faster, then you break
+			# even at (N-1)/(m-1) blocks. Then it needs to be
+			# adjusted for probability of code being evicted,
+			# code size/cache size=1/4. Typical m is 1.15...
+
+$A="eax";
+$E="edx";
+$T="ebx";
+$Aoff=&DWP(4,"esp");
+$Boff=&DWP(8,"esp");
+$Coff=&DWP(12,"esp");
+$Doff=&DWP(16,"esp");
+$Eoff=&DWP(20,"esp");
+$Foff=&DWP(24,"esp");
+$Goff=&DWP(28,"esp");
+$Hoff=&DWP(32,"esp");
+$Xoff=&DWP(36,"esp");
+$K256="ebp";
+
+sub BODY_16_63() {
+	&mov	($T,"ecx");			# "ecx" is preloaded
+	 &mov	("esi",&DWP(4*(9+15+16-14),"esp"));
+	&ror	("ecx",18-7);
+	 &mov	("edi","esi");
+	&ror	("esi",19-17);
+	 &xor	("ecx",$T);
+	 &shr	($T,3);
+	&ror	("ecx",7);
+	 &xor	("esi","edi");
+	 &xor	($T,"ecx");			# T = sigma0(X[-15])
+	&ror	("esi",17);
+	 &add	($T,&DWP(4*(9+15+16),"esp"));	# T += X[-16]
+	&shr	("edi",10);
+	 &add	($T,&DWP(4*(9+15+16-9),"esp"));	# T += X[-7]
+	#&xor	("edi","esi")			# sigma1(X[-2])
+	# &add	($T,"edi");			# T += sigma1(X[-2])
+	# &mov	(&DWP(4*(9+15),"esp"),$T);	# save X[0]
+
+	&BODY_00_15(1);
+}
+sub BODY_00_15() {
+    my $in_16_63=shift;
+
+	&mov	("ecx",$E);
+	 &xor	("edi","esi")			if ($in_16_63);	# sigma1(X[-2])
+	 &mov	("esi",$Foff);
+	&ror	("ecx",25-11);
+	 &add	($T,"edi")			if ($in_16_63);	# T += sigma1(X[-2])
+	 &mov	("edi",$Goff);
+	&xor	("ecx",$E);
+	 &xor	("esi","edi");
+	 &mov	($T,&DWP(4*(9+15),"esp"))	if (!$in_16_63);
+	 &mov	(&DWP(4*(9+15),"esp"),$T)	if ($in_16_63);	# save X[0]
+	&ror	("ecx",11-6);
+	 &and	("esi",$E);
+	 &mov	($Eoff,$E);		# modulo-scheduled
+	&xor	($E,"ecx");
+	 &add	($T,$Hoff);		# T += h
+	 &xor	("esi","edi");		# Ch(e,f,g)
+	&ror	($E,6);			# Sigma1(e)
+	 &mov	("ecx",$A);
+	 &add	($T,"esi");		# T += Ch(e,f,g)
+
+	&ror	("ecx",22-13);
+	 &add	($T,$E);		# T += Sigma1(e)
+	 &mov	("edi",$Boff);
+	&xor	("ecx",$A);
+	 &mov	($Aoff,$A);		# modulo-scheduled
+	 &lea	("esp",&DWP(-4,"esp"));
+	&ror	("ecx",13-2);
+	 &mov	("esi",&DWP(0,$K256));
+	&xor	("ecx",$A);
+	 &mov	($E,$Eoff);		# e in next iteration, d in this one
+	 &xor	($A,"edi");		# a ^= b
+	&ror	("ecx",2);		# Sigma0(a)
+
+	 &add	($T,"esi");		# T+= K[i]
+	 &mov	(&DWP(0,"esp"),$A);	# (b^c) in next round
+	&add	($E,$T);		# d += T
+	 &and	($A,&DWP(4,"esp"));	# a &= (b^c)
+	&add	($T,"ecx");		# T += Sigma0(a)
+	 &xor	($A,"edi");		# h = Maj(a,b,c) = Ch(a^b,c,b)
+	 &mov	("ecx",&DWP(4*(9+15+16-1),"esp"))	if ($in_16_63);	# preload T
+	&add	($K256,4);
+	 &add	($A,$T);		# h += T
+}
+
+&external_label("OPENSSL_ia32cap_P")		if (!$i386);
+
+&function_begin("sha256_block_data_order");
+	&mov	("esi",wparam(0));	# ctx
+	&mov	("edi",wparam(1));	# inp
+	&mov	("eax",wparam(2));	# num
+	&mov	("ebx","esp");		# saved sp
+
+	&call	(&label("pic_point"));	# make it PIC!
+&set_label("pic_point");
+	&blindpop($K256);
+	&lea	($K256,&DWP(&label("K256")."-".&label("pic_point"),$K256));
+
+	&sub	("esp",16);
+	&and	("esp",-64);
+
+	&shl	("eax",6);
+	&add	("eax","edi");
+	&mov	(&DWP(0,"esp"),"esi");	# ctx
+	&mov	(&DWP(4,"esp"),"edi");	# inp
+	&mov	(&DWP(8,"esp"),"eax");	# inp+num*128
+	&mov	(&DWP(12,"esp"),"ebx");	# saved sp
+						if (!$i386 && $xmm) {
+	&picmeup("edx","OPENSSL_ia32cap_P",$K256,&label("K256"));
+	&mov	("ecx",&DWP(0,"edx"));
+	&mov	("ebx",&DWP(4,"edx"));
+	&test	("ecx",1<<20);		# check for P4
+	&jnz	(&label("loop"));
+	&mov	("edx",&DWP(8,"edx"))	if ($xmm);
+	&test	("ecx",1<<24);		# check for FXSR
+	&jz	($unroll_after?&label("no_xmm"):&label("loop"));
+	&and	("ecx",1<<30);		# mask "Intel CPU" bit
+	&and	("ebx",1<<28|1<<9);	# mask AVX and SSSE3 bits
+	&test	("edx",1<<29)		if ($shaext);	# check for SHA
+	&jnz	(&label("shaext"))	if ($shaext);
+	&or	("ecx","ebx");
+	&and	("ecx",1<<28|1<<30);
+	&cmp	("ecx",1<<28|1<<30);
+					if ($xmm) {
+	&je	(&label("AVX"))		if ($avx);
+	&test	("ebx",1<<9);		# check for SSSE3
+	&jnz	(&label("SSSE3"));
+					} else {
+	&je	(&label("loop_shrd"));
+					}
+						if ($unroll_after) {
+&set_label("no_xmm");
+	&sub	("eax","edi");
+	&cmp	("eax",$unroll_after);
+	&jae	(&label("unrolled"));
+						} }
+	&jmp	(&label("loop"));
+
+sub COMPACT_LOOP() {
+my $suffix=shift;
+
+&set_label("loop$suffix",$suffix?32:16);
+    # copy input block to stack reversing byte and dword order
+    for($i=0;$i<4;$i++) {
+	&mov	("eax",&DWP($i*16+0,"edi"));
+	&mov	("ebx",&DWP($i*16+4,"edi"));
+	&mov	("ecx",&DWP($i*16+8,"edi"));
+	&bswap	("eax");
+	&mov	("edx",&DWP($i*16+12,"edi"));
+	&bswap	("ebx");
+	&push	("eax");
+	&bswap	("ecx");
+	&push	("ebx");
+	&bswap	("edx");
+	&push	("ecx");
+	&push	("edx");
+    }
+	&add	("edi",64);
+	&lea	("esp",&DWP(-4*9,"esp"));# place for A,B,C,D,E,F,G,H
+	&mov	(&DWP(4*(9+16)+4,"esp"),"edi");
+
+	# copy ctx->h[0-7] to A,B,C,D,E,F,G,H on stack
+	&mov	($A,&DWP(0,"esi"));
+	&mov	("ebx",&DWP(4,"esi"));
+	&mov	("ecx",&DWP(8,"esi"));
+	&mov	("edi",&DWP(12,"esi"));
+	# &mov	($Aoff,$A);
+	&mov	($Boff,"ebx");
+	&xor	("ebx","ecx");
+	&mov	($Coff,"ecx");
+	&mov	($Doff,"edi");
+	&mov	(&DWP(0,"esp"),"ebx");	# magic
+	&mov	($E,&DWP(16,"esi"));
+	&mov	("ebx",&DWP(20,"esi"));
+	&mov	("ecx",&DWP(24,"esi"));
+	&mov	("edi",&DWP(28,"esi"));
+	# &mov	($Eoff,$E);
+	&mov	($Foff,"ebx");
+	&mov	($Goff,"ecx");
+	&mov	($Hoff,"edi");
+
+&set_label("00_15$suffix",16);
+
+	&BODY_00_15();
+
+	&cmp	("esi",0xc19bf174);
+	&jne	(&label("00_15$suffix"));
+
+	&mov	("ecx",&DWP(4*(9+15+16-1),"esp"));	# preloaded in BODY_00_15(1)
+	&jmp	(&label("16_63$suffix"));
+
+&set_label("16_63$suffix",16);
+
+	&BODY_16_63();
+
+	&cmp	("esi",0xc67178f2);
+	&jne	(&label("16_63$suffix"));
+
+	&mov	("esi",&DWP(4*(9+16+64)+0,"esp"));#ctx
+	# &mov	($A,$Aoff);
+	&mov	("ebx",$Boff);
+	# &mov	("edi",$Coff);
+	&mov	("ecx",$Doff);
+	&add	($A,&DWP(0,"esi"));
+	&add	("ebx",&DWP(4,"esi"));
+	&add	("edi",&DWP(8,"esi"));
+	&add	("ecx",&DWP(12,"esi"));
+	&mov	(&DWP(0,"esi"),$A);
+	&mov	(&DWP(4,"esi"),"ebx");
+	&mov	(&DWP(8,"esi"),"edi");
+	&mov	(&DWP(12,"esi"),"ecx");
+	# &mov	($E,$Eoff);
+	&mov	("eax",$Foff);
+	&mov	("ebx",$Goff);
+	&mov	("ecx",$Hoff);
+	&mov	("edi",&DWP(4*(9+16+64)+4,"esp"));#inp
+	&add	($E,&DWP(16,"esi"));
+	&add	("eax",&DWP(20,"esi"));
+	&add	("ebx",&DWP(24,"esi"));
+	&add	("ecx",&DWP(28,"esi"));
+	&mov	(&DWP(16,"esi"),$E);
+	&mov	(&DWP(20,"esi"),"eax");
+	&mov	(&DWP(24,"esi"),"ebx");
+	&mov	(&DWP(28,"esi"),"ecx");
+
+	&lea	("esp",&DWP(4*(9+16+64),"esp"));# destroy frame
+	&sub	($K256,4*64);			# rewind K
+
+	&cmp	("edi",&DWP(8,"esp"));		# are we done yet?
+	&jb	(&label("loop$suffix"));
+}
+	&COMPACT_LOOP();
+	&mov	("esp",&DWP(12,"esp"));		# restore sp
+&function_end_A();
+						if (!$i386 && !$xmm) {
+	# ~20% improvement on Sandy Bridge
+	local *ror = sub { &shrd(@_[0],@_) };
+	&COMPACT_LOOP("_shrd");
+	&mov	("esp",&DWP(12,"esp"));		# restore sp
+&function_end_A();
+						}
+
+&set_label("K256",64);	# Yes! I keep it in the code segment!
+@K256=(	0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,
+	0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,
+	0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,
+	0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,
+	0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,
+	0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,
+	0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,
+	0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,
+	0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,
+	0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,
+	0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,
+	0xd192e819,0xd6990624,0xf40e3585,0x106aa070,
+	0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,
+	0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,
+	0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,
+	0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2	);
+&data_word(@K256);
+&data_word(0x00010203,0x04050607,0x08090a0b,0x0c0d0e0f);	# byte swap mask
+&asciz("SHA256 block transform for x86, CRYPTOGAMS by <appro\@openssl.org>");
+
+($a,$b,$c,$d,$e,$f,$g,$h)=(0..7);	# offsets
+sub off { &DWP(4*(((shift)-$i)&7),"esp"); }
+
+if (!$i386 && $unroll_after) {
+my @AH=($A,$K256);
+
+&set_label("unrolled",16);
+	&lea	("esp",&DWP(-96,"esp"));
+	# copy ctx->h[0-7] to A,B,C,D,E,F,G,H on stack
+	&mov	($AH[0],&DWP(0,"esi"));
+	&mov	($AH[1],&DWP(4,"esi"));
+	&mov	("ecx",&DWP(8,"esi"));
+	&mov	("ebx",&DWP(12,"esi"));
+	#&mov	(&DWP(0,"esp"),$AH[0]);
+	&mov	(&DWP(4,"esp"),$AH[1]);
+	&xor	($AH[1],"ecx");		# magic
+	&mov	(&DWP(8,"esp"),"ecx");
+	&mov	(&DWP(12,"esp"),"ebx");
+	&mov	($E,&DWP(16,"esi"));
+	&mov	("ebx",&DWP(20,"esi"));
+	&mov	("ecx",&DWP(24,"esi"));
+	&mov	("esi",&DWP(28,"esi"));
+	#&mov	(&DWP(16,"esp"),$E);
+	&mov	(&DWP(20,"esp"),"ebx");
+	&mov	(&DWP(24,"esp"),"ecx");
+	&mov	(&DWP(28,"esp"),"esi");
+	&jmp	(&label("grand_loop"));
+
+&set_label("grand_loop",16);
+    # copy input block to stack reversing byte order
+    for($i=0;$i<5;$i++) {
+	&mov	("ebx",&DWP(12*$i+0,"edi"));
+	&mov	("ecx",&DWP(12*$i+4,"edi"));
+	&bswap	("ebx");
+	&mov	("esi",&DWP(12*$i+8,"edi"));
+	&bswap	("ecx");
+	&mov	(&DWP(32+12*$i+0,"esp"),"ebx");
+	&bswap	("esi");
+	&mov	(&DWP(32+12*$i+4,"esp"),"ecx");
+	&mov	(&DWP(32+12*$i+8,"esp"),"esi");
+    }
+	&mov	("ebx",&DWP($i*12,"edi"));
+	&add	("edi",64);
+	&bswap	("ebx");
+	&mov	(&DWP(96+4,"esp"),"edi");
+	&mov	(&DWP(32+12*$i,"esp"),"ebx");
+
+    my ($t1,$t2) = ("ecx","esi");
+
+    for ($i=0;$i<64;$i++) {
+
+      if ($i>=16) {
+	&mov	($T,$t1);			# $t1 is preloaded
+	# &mov	($t2,&DWP(32+4*(($i+14)&15),"esp"));
+	&ror	($t1,18-7);
+	 &mov	("edi",$t2);
+	&ror	($t2,19-17);
+	 &xor	($t1,$T);
+	 &shr	($T,3);
+	&ror	($t1,7);
+	 &xor	($t2,"edi");
+	 &xor	($T,$t1);			# T = sigma0(X[-15])
+	&ror	($t2,17);
+	 &add	($T,&DWP(32+4*($i&15),"esp"));	# T += X[-16]
+	&shr	("edi",10);
+	 &add	($T,&DWP(32+4*(($i+9)&15),"esp"));	# T += X[-7]
+	#&xor	("edi",$t2)			# sigma1(X[-2])
+	# &add	($T,"edi");			# T += sigma1(X[-2])
+	# &mov	(&DWP(4*(9+15),"esp"),$T);	# save X[0]
+      }
+	&mov	($t1,$E);
+	 &xor	("edi",$t2)			if ($i>=16);	# sigma1(X[-2])
+	 &mov	($t2,&off($f));
+	&ror	($E,25-11);
+	 &add	($T,"edi")			if ($i>=16);	# T += sigma1(X[-2])
+	 &mov	("edi",&off($g));
+	&xor	($E,$t1);
+	 &mov	($T,&DWP(32+4*($i&15),"esp"))	if ($i<16);	# X[i]
+	 &mov	(&DWP(32+4*($i&15),"esp"),$T)	if ($i>=16 && $i<62);	# save X[0]
+	 &xor	($t2,"edi");
+	&ror	($E,11-6);
+	 &and	($t2,$t1);
+	 &mov	(&off($e),$t1);		# save $E, modulo-scheduled
+	&xor	($E,$t1);
+	 &add	($T,&off($h));		# T += h
+	 &xor	("edi",$t2);		# Ch(e,f,g)
+	&ror	($E,6);			# Sigma1(e)
+	 &mov	($t1,$AH[0]);
+	 &add	($T,"edi");		# T += Ch(e,f,g)
+
+	&ror	($t1,22-13);
+	 &mov	($t2,$AH[0]);
+	 &mov	("edi",&off($b));
+	&xor	($t1,$AH[0]);
+	 &mov	(&off($a),$AH[0]);	# save $A, modulo-scheduled
+	 &xor	($AH[0],"edi");		# a ^= b, (b^c) in next round
+	&ror	($t1,13-2);
+	 &and	($AH[1],$AH[0]);	# (b^c) &= (a^b)
+	 &lea	($E,&DWP(@K256[$i],$T,$E));	# T += Sigma1(1)+K[i]
+	&xor	($t1,$t2);
+	 &xor	($AH[1],"edi");		# h = Maj(a,b,c) = Ch(a^b,c,b)
+	 &mov	($t2,&DWP(32+4*(($i+2)&15),"esp"))	if ($i>=15 && $i<63);
+	&ror	($t1,2);		# Sigma0(a)
+
+	 &add	($AH[1],$E);		# h += T
+	 &add	($E,&off($d));		# d += T
+	&add	($AH[1],$t1);		# h += Sigma0(a)
+	 &mov	($t1,&DWP(32+4*(($i+15)&15),"esp"))	if ($i>=15 && $i<63);
+
+	@AH = reverse(@AH);		# rotate(a,h)
+	($t1,$t2) = ($t2,$t1);		# rotate(t1,t2)
+    }
+	&mov	("esi",&DWP(96,"esp"));	#ctx
+					#&mov	($AH[0],&DWP(0,"esp"));
+	&xor	($AH[1],"edi");		#&mov	($AH[1],&DWP(4,"esp"));
+					#&mov	("edi", &DWP(8,"esp"));
+	&mov	("ecx",&DWP(12,"esp"));
+	&add	($AH[0],&DWP(0,"esi"));
+	&add	($AH[1],&DWP(4,"esi"));
+	&add	("edi",&DWP(8,"esi"));
+	&add	("ecx",&DWP(12,"esi"));
+	&mov	(&DWP(0,"esi"),$AH[0]);
+	&mov	(&DWP(4,"esi"),$AH[1]);
+	&mov	(&DWP(8,"esi"),"edi");
+	&mov	(&DWP(12,"esi"),"ecx");
+	 #&mov	(&DWP(0,"esp"),$AH[0]);
+	 &mov	(&DWP(4,"esp"),$AH[1]);
+	 &xor	($AH[1],"edi");		# magic
+	 &mov	(&DWP(8,"esp"),"edi");
+	 &mov	(&DWP(12,"esp"),"ecx");
+	#&mov	($E,&DWP(16,"esp"));
+	&mov	("edi",&DWP(20,"esp"));
+	&mov	("ebx",&DWP(24,"esp"));
+	&mov	("ecx",&DWP(28,"esp"));
+	&add	($E,&DWP(16,"esi"));
+	&add	("edi",&DWP(20,"esi"));
+	&add	("ebx",&DWP(24,"esi"));
+	&add	("ecx",&DWP(28,"esi"));
+	&mov	(&DWP(16,"esi"),$E);
+	&mov	(&DWP(20,"esi"),"edi");
+	&mov	(&DWP(24,"esi"),"ebx");
+	&mov	(&DWP(28,"esi"),"ecx");
+	 #&mov	(&DWP(16,"esp"),$E);
+	 &mov	(&DWP(20,"esp"),"edi");
+	&mov	("edi",&DWP(96+4,"esp"));	# inp
+	 &mov	(&DWP(24,"esp"),"ebx");
+	 &mov	(&DWP(28,"esp"),"ecx");
+
+	&cmp	("edi",&DWP(96+8,"esp"));	# are we done yet?
+	&jb	(&label("grand_loop"));
+
+	&mov	("esp",&DWP(96+12,"esp"));	# restore sp
+&function_end_A();
+}
+						if (!$i386 && $xmm) {{{
+if ($shaext) {
+######################################################################
+# Intel SHA Extensions implementation of SHA256 update function.
+#
+my ($ctx,$inp,$end)=("esi","edi","eax");
+my ($Wi,$ABEF,$CDGH,$TMP)=map("xmm$_",(0..2,7));
+my @MSG=map("xmm$_",(3..6));
+
+sub sha256op38 {
+ my ($opcodelet,$dst,$src)=@_;
+    if ("$dst:$src" =~ /xmm([0-7]):xmm([0-7])/)
+    {	&data_byte(0x0f,0x38,$opcodelet,0xc0|($1<<3)|$2);	}
+}
+sub sha256rnds2	{ sha256op38(0xcb,@_); }
+sub sha256msg1	{ sha256op38(0xcc,@_); }
+sub sha256msg2	{ sha256op38(0xcd,@_); }
+
+&set_label("shaext",32);
+	&sub		("esp",32);
+
+	&movdqu		($ABEF,&QWP(0,$ctx));		# DCBA
+	&lea		($K256,&DWP(0x80,$K256));
+	&movdqu		($CDGH,&QWP(16,$ctx));		# HGFE
+	&movdqa		($TMP,&QWP(0x100-0x80,$K256));	# byte swap mask
+
+	&pshufd		($Wi,$ABEF,0x1b);		# ABCD
+	&pshufd		($ABEF,$ABEF,0xb1);		# CDAB
+	&pshufd		($CDGH,$CDGH,0x1b);		# EFGH
+	&palignr	($ABEF,$CDGH,8);		# ABEF
+	&punpcklqdq	($CDGH,$Wi);			# CDGH
+	&jmp		(&label("loop_shaext"));
+
+&set_label("loop_shaext",16);
+	&movdqu		(@MSG[0],&QWP(0,$inp));
+	&movdqu		(@MSG[1],&QWP(0x10,$inp));
+	&movdqu		(@MSG[2],&QWP(0x20,$inp));
+	&pshufb		(@MSG[0],$TMP);
+	&movdqu		(@MSG[3],&QWP(0x30,$inp));
+	&movdqa		(&QWP(16,"esp"),$CDGH);		# offload
+
+	&movdqa		($Wi,&QWP(0*16-0x80,$K256));
+	&paddd		($Wi,@MSG[0]);
+	&pshufb		(@MSG[1],$TMP);
+	&sha256rnds2	($CDGH,$ABEF);			# 0-3
+	&pshufd		($Wi,$Wi,0x0e);
+	&nop		();
+	&movdqa		(&QWP(0,"esp"),$ABEF);		# offload
+	&sha256rnds2	($ABEF,$CDGH);
+
+	&movdqa		($Wi,&QWP(1*16-0x80,$K256));
+	&paddd		($Wi,@MSG[1]);
+	&pshufb		(@MSG[2],$TMP);
+	&sha256rnds2	($CDGH,$ABEF);			# 4-7
+	&pshufd		($Wi,$Wi,0x0e);
+	&lea		($inp,&DWP(0x40,$inp));
+	&sha256msg1	(@MSG[0],@MSG[1]);
+	&sha256rnds2	($ABEF,$CDGH);
+
+	&movdqa		($Wi,&QWP(2*16-0x80,$K256));
+	&paddd		($Wi,@MSG[2]);
+	&pshufb		(@MSG[3],$TMP);
+	&sha256rnds2	($CDGH,$ABEF);			# 8-11
+	&pshufd		($Wi,$Wi,0x0e);
+	&movdqa		($TMP,@MSG[3]);
+	&palignr	($TMP,@MSG[2],4);
+	&nop		();
+	&paddd		(@MSG[0],$TMP);
+	&sha256msg1	(@MSG[1],@MSG[2]);
+	&sha256rnds2	($ABEF,$CDGH);
+
+	&movdqa		($Wi,&QWP(3*16-0x80,$K256));
+	&paddd		($Wi,@MSG[3]);
+	&sha256msg2	(@MSG[0],@MSG[3]);
+	&sha256rnds2	($CDGH,$ABEF);			# 12-15
+	&pshufd		($Wi,$Wi,0x0e);
+	&movdqa		($TMP,@MSG[0]);
+	&palignr	($TMP,@MSG[3],4);
+	&nop		();
+	&paddd		(@MSG[1],$TMP);
+	&sha256msg1	(@MSG[2],@MSG[3]);
+	&sha256rnds2	($ABEF,$CDGH);
+
+for($i=4;$i<16-3;$i++) {
+	&movdqa		($Wi,&QWP($i*16-0x80,$K256));
+	&paddd		($Wi,@MSG[0]);
+	&sha256msg2	(@MSG[1],@MSG[0]);
+	&sha256rnds2	($CDGH,$ABEF);			# 16-19...
+	&pshufd		($Wi,$Wi,0x0e);
+	&movdqa		($TMP,@MSG[1]);
+	&palignr	($TMP,@MSG[0],4);
+	&nop		();
+	&paddd		(@MSG[2],$TMP);
+	&sha256msg1	(@MSG[3],@MSG[0]);
+	&sha256rnds2	($ABEF,$CDGH);
+
+	push(@MSG,shift(@MSG));
+}
+	&movdqa		($Wi,&QWP(13*16-0x80,$K256));
+	&paddd		($Wi,@MSG[0]);
+	&sha256msg2	(@MSG[1],@MSG[0]);
+	&sha256rnds2	($CDGH,$ABEF);			# 52-55
+	&pshufd		($Wi,$Wi,0x0e);
+	&movdqa		($TMP,@MSG[1])
+	&palignr	($TMP,@MSG[0],4);
+	&sha256rnds2	($ABEF,$CDGH);
+	&paddd		(@MSG[2],$TMP);
+
+	&movdqa		($Wi,&QWP(14*16-0x80,$K256));
+	&paddd		($Wi,@MSG[1]);
+	&sha256rnds2	($CDGH,$ABEF);			# 56-59
+	&pshufd		($Wi,$Wi,0x0e);
+	&sha256msg2	(@MSG[2],@MSG[1]);
+	&movdqa		($TMP,&QWP(0x100-0x80,$K256));	# byte swap mask
+	&sha256rnds2	($ABEF,$CDGH);
+
+	&movdqa		($Wi,&QWP(15*16-0x80,$K256));
+	&paddd		($Wi,@MSG[2]);
+	&nop		();
+	&sha256rnds2	($CDGH,$ABEF);			# 60-63
+	&pshufd		($Wi,$Wi,0x0e);
+	&cmp		($end,$inp);
+	&nop		();
+	&sha256rnds2	($ABEF,$CDGH);
+
+	&paddd		($CDGH,&QWP(16,"esp"));
+	&paddd		($ABEF,&QWP(0,"esp"));
+	&jnz		(&label("loop_shaext"));
+
+	&pshufd		($CDGH,$CDGH,0xb1);		# DCHG
+	&pshufd		($TMP,$ABEF,0x1b);		# FEBA
+	&pshufd		($ABEF,$ABEF,0xb1);		# BAFE
+	&punpckhqdq	($ABEF,$CDGH);			# DCBA
+	&palignr	($CDGH,$TMP,8);			# HGFE
+
+	&mov		("esp",&DWP(32+12,"esp"));
+	&movdqu		(&QWP(0,$ctx),$ABEF);
+	&movdqu		(&QWP(16,$ctx),$CDGH);
+&function_end_A();
+}
+
+my @X = map("xmm$_",(0..3));
+my ($t0,$t1,$t2,$t3) = map("xmm$_",(4..7));
+my @AH = ($A,$T);
+
+&set_label("SSSE3",32);
+	&lea	("esp",&DWP(-96,"esp"));
+	# copy ctx->h[0-7] to A,B,C,D,E,F,G,H on stack
+	&mov	($AH[0],&DWP(0,"esi"));
+	&mov	($AH[1],&DWP(4,"esi"));
+	&mov	("ecx",&DWP(8,"esi"));
+	&mov	("edi",&DWP(12,"esi"));
+	#&mov	(&DWP(0,"esp"),$AH[0]);
+	&mov	(&DWP(4,"esp"),$AH[1]);
+	&xor	($AH[1],"ecx");			# magic
+	&mov	(&DWP(8,"esp"),"ecx");
+	&mov	(&DWP(12,"esp"),"edi");
+	&mov	($E,&DWP(16,"esi"));
+	&mov	("edi",&DWP(20,"esi"));
+	&mov	("ecx",&DWP(24,"esi"));
+	&mov	("esi",&DWP(28,"esi"));
+	#&mov	(&DWP(16,"esp"),$E);
+	&mov	(&DWP(20,"esp"),"edi");
+	&mov	("edi",&DWP(96+4,"esp"));	# inp
+	&mov	(&DWP(24,"esp"),"ecx");
+	&mov	(&DWP(28,"esp"),"esi");
+	&movdqa	($t3,&QWP(256,$K256));
+	&jmp	(&label("grand_ssse3"));
+
+&set_label("grand_ssse3",16);
+	# load input, reverse byte order, add K256[0..15], save to stack
+	&movdqu	(@X[0],&QWP(0,"edi"));
+	&movdqu	(@X[1],&QWP(16,"edi"));
+	&movdqu	(@X[2],&QWP(32,"edi"));
+	&movdqu	(@X[3],&QWP(48,"edi"));
+	&add	("edi",64);
+	&pshufb	(@X[0],$t3);
+	&mov	(&DWP(96+4,"esp"),"edi");
+	&pshufb	(@X[1],$t3);
+	&movdqa	($t0,&QWP(0,$K256));
+	&pshufb	(@X[2],$t3);
+	&movdqa	($t1,&QWP(16,$K256));
+	&paddd	($t0,@X[0]);
+	&pshufb	(@X[3],$t3);
+	&movdqa	($t2,&QWP(32,$K256));
+	&paddd	($t1,@X[1]);
+	&movdqa	($t3,&QWP(48,$K256));
+	&movdqa	(&QWP(32+0,"esp"),$t0);
+	&paddd	($t2,@X[2]);
+	&movdqa	(&QWP(32+16,"esp"),$t1);
+	&paddd	($t3,@X[3]);
+	&movdqa	(&QWP(32+32,"esp"),$t2);
+	&movdqa	(&QWP(32+48,"esp"),$t3);
+	&jmp	(&label("ssse3_00_47"));
+
+&set_label("ssse3_00_47",16);
+	&add		($K256,64);
+
+sub SSSE3_00_47 () {
+my $j = shift;
+my $body = shift;
+my @X = @_;
+my @insns = (&$body,&$body,&$body,&$body);	# 120 instructions
+
+	  eval(shift(@insns));
+	&movdqa		($t0,@X[1]);
+	  eval(shift(@insns));			# @
+	  eval(shift(@insns));
+	&movdqa		($t3,@X[3]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&palignr	($t0,@X[0],4);		# X[1..4]
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	  eval(shift(@insns));
+	 &palignr	($t3,@X[2],4);		# X[9..12]
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&movdqa		($t1,$t0);
+	  eval(shift(@insns));			# @
+	  eval(shift(@insns));
+	&movdqa		($t2,$t0);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&psrld		($t0,3);
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	 &paddd		(@X[0],$t3);		# X[0..3] += X[9..12]
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&psrld		($t2,7);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	  eval(shift(@insns));
+	 &pshufd	($t3,@X[3],0b11111010);	# X[14..15]
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&pslld		($t1,32-18);
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	&pxor		($t0,$t2);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&psrld		($t2,18-7);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	&pxor		($t0,$t1);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&pslld		($t1,18-7);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	&pxor		($t0,$t2);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &movdqa	($t2,$t3);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	&pxor		($t0,$t1);		# sigma0(X[1..4])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &psrld		($t3,10);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	&paddd		(@X[0],$t0);		# X[0..3] += sigma0(X[1..4])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &psrlq		($t2,17);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	 &pxor		($t3,$t2);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &psrlq		($t2,19-17);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	 &pxor		($t3,$t2);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &pshufd	($t3,$t3,0b10000000);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	  eval(shift(@insns));
+	 &psrldq	($t3,8);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&paddd		(@X[0],$t3);		# X[0..1] += sigma1(X[14..15])
+	  eval(shift(@insns));			# @
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	  eval(shift(@insns));
+	 &pshufd	($t3,@X[0],0b01010000);	# X[16..17]
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &movdqa	($t2,$t3);
+	  eval(shift(@insns));			# @
+	 &psrld		($t3,10);
+	  eval(shift(@insns));
+	 &psrlq		($t2,17);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	 &pxor		($t3,$t2);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &psrlq		($t2,19-17);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	 &pxor		($t3,$t2);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &pshufd	($t3,$t3,0b00001000);
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	&movdqa		($t2,&QWP(16*$j,$K256));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &pslldq	($t3,8);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));			# @
+	&paddd		(@X[0],$t3);		# X[2..3] += sigma1(X[16..17])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&paddd		($t2,@X[0]);
+	  eval(shift(@insns));			# @
+
+	foreach (@insns) { eval; }		# remaining instructions
+
+	&movdqa		(&QWP(32+16*$j,"esp"),$t2);
+}
+
+sub body_00_15 () {
+	(
+	'&mov	("ecx",$E);',
+	'&ror	($E,25-11);',
+	 '&mov	("esi",&off($f));',
+	'&xor	($E,"ecx");',
+	 '&mov	("edi",&off($g));',
+	 '&xor	("esi","edi");',
+	'&ror	($E,11-6);',
+	 '&and	("esi","ecx");',
+	 '&mov	(&off($e),"ecx");',	# save $E, modulo-scheduled
+	'&xor	($E,"ecx");',
+	 '&xor	("edi","esi");',	# Ch(e,f,g)
+	'&ror	($E,6);',		# T = Sigma1(e)
+	 '&mov	("ecx",$AH[0]);',
+	 '&add	($E,"edi");',		# T += Ch(e,f,g)
+	 '&mov	("edi",&off($b));',
+	'&mov	("esi",$AH[0]);',
+
+	'&ror	("ecx",22-13);',
+	 '&mov	(&off($a),$AH[0]);',	# save $A, modulo-scheduled
+	'&xor	("ecx",$AH[0]);',
+	 '&xor	($AH[0],"edi");',	# a ^= b, (b^c) in next round
+	 '&add	($E,&off($h));',	# T += h
+	'&ror	("ecx",13-2);',
+	 '&and	($AH[1],$AH[0]);',	# (b^c) &= (a^b)
+	'&xor	("ecx","esi");',
+	 '&add	($E,&DWP(32+4*($i&15),"esp"));',	# T += K[i]+X[i]
+	 '&xor	($AH[1],"edi");',	# h = Maj(a,b,c) = Ch(a^b,c,b)
+	'&ror	("ecx",2);',		# Sigma0(a)
+
+	 '&add	($AH[1],$E);',		# h += T
+	 '&add	($E,&off($d));',	# d += T
+	'&add	($AH[1],"ecx");'.	# h += Sigma0(a)
+
+	'@AH = reverse(@AH); $i++;'	# rotate(a,h)
+	);
+}
+
+    for ($i=0,$j=0; $j<4; $j++) {
+	&SSSE3_00_47($j,\&body_00_15,@X);
+	push(@X,shift(@X));		# rotate(@X)
+    }
+	&cmp	(&DWP(16*$j,$K256),0x00010203);
+	&jne	(&label("ssse3_00_47"));
+
+    for ($i=0; $i<16; ) {
+	foreach(body_00_15()) { eval; }
+    }
+
+	&mov	("esi",&DWP(96,"esp"));	#ctx
+					#&mov	($AH[0],&DWP(0,"esp"));
+	&xor	($AH[1],"edi");		#&mov	($AH[1],&DWP(4,"esp"));
+					#&mov	("edi", &DWP(8,"esp"));
+	&mov	("ecx",&DWP(12,"esp"));
+	&add	($AH[0],&DWP(0,"esi"));
+	&add	($AH[1],&DWP(4,"esi"));
+	&add	("edi",&DWP(8,"esi"));
+	&add	("ecx",&DWP(12,"esi"));
+	&mov	(&DWP(0,"esi"),$AH[0]);
+	&mov	(&DWP(4,"esi"),$AH[1]);
+	&mov	(&DWP(8,"esi"),"edi");
+	&mov	(&DWP(12,"esi"),"ecx");
+	 #&mov	(&DWP(0,"esp"),$AH[0]);
+	 &mov	(&DWP(4,"esp"),$AH[1]);
+	 &xor	($AH[1],"edi");			# magic
+	 &mov	(&DWP(8,"esp"),"edi");
+	 &mov	(&DWP(12,"esp"),"ecx");
+	#&mov	($E,&DWP(16,"esp"));
+	&mov	("edi",&DWP(20,"esp"));
+	&mov	("ecx",&DWP(24,"esp"));
+	&add	($E,&DWP(16,"esi"));
+	&add	("edi",&DWP(20,"esi"));
+	&add	("ecx",&DWP(24,"esi"));
+	&mov	(&DWP(16,"esi"),$E);
+	&mov	(&DWP(20,"esi"),"edi");
+	 &mov	(&DWP(20,"esp"),"edi");
+	&mov	("edi",&DWP(28,"esp"));
+	&mov	(&DWP(24,"esi"),"ecx");
+	 #&mov	(&DWP(16,"esp"),$E);
+	&add	("edi",&DWP(28,"esi"));
+	 &mov	(&DWP(24,"esp"),"ecx");
+	&mov	(&DWP(28,"esi"),"edi");
+	 &mov	(&DWP(28,"esp"),"edi");
+	&mov	("edi",&DWP(96+4,"esp"));	# inp
+
+	&movdqa	($t3,&QWP(64,$K256));
+	&sub	($K256,3*64);			# rewind K
+	&cmp	("edi",&DWP(96+8,"esp"));	# are we done yet?
+	&jb	(&label("grand_ssse3"));
+
+	&mov	("esp",&DWP(96+12,"esp"));	# restore sp
+&function_end_A();
+						if ($avx) {
+&set_label("AVX",32);
+						if ($avx>1) {
+	&and	("edx",1<<8|1<<3);		# check for BMI2+BMI1
+	&cmp	("edx",1<<8|1<<3);
+	&je	(&label("AVX_BMI"));
+						}
+	&lea	("esp",&DWP(-96,"esp"));
+	&vzeroall	();
+	# copy ctx->h[0-7] to A,B,C,D,E,F,G,H on stack
+	&mov	($AH[0],&DWP(0,"esi"));
+	&mov	($AH[1],&DWP(4,"esi"));
+	&mov	("ecx",&DWP(8,"esi"));
+	&mov	("edi",&DWP(12,"esi"));
+	#&mov	(&DWP(0,"esp"),$AH[0]);
+	&mov	(&DWP(4,"esp"),$AH[1]);
+	&xor	($AH[1],"ecx");			# magic
+	&mov	(&DWP(8,"esp"),"ecx");
+	&mov	(&DWP(12,"esp"),"edi");
+	&mov	($E,&DWP(16,"esi"));
+	&mov	("edi",&DWP(20,"esi"));
+	&mov	("ecx",&DWP(24,"esi"));
+	&mov	("esi",&DWP(28,"esi"));
+	#&mov	(&DWP(16,"esp"),$E);
+	&mov	(&DWP(20,"esp"),"edi");
+	&mov	("edi",&DWP(96+4,"esp"));	# inp
+	&mov	(&DWP(24,"esp"),"ecx");
+	&mov	(&DWP(28,"esp"),"esi");
+	&vmovdqa	($t3,&QWP(256,$K256));
+	&jmp	(&label("grand_avx"));
+
+&set_label("grand_avx",32);
+	# load input, reverse byte order, add K256[0..15], save to stack
+	&vmovdqu	(@X[0],&QWP(0,"edi"));
+	&vmovdqu	(@X[1],&QWP(16,"edi"));
+	&vmovdqu	(@X[2],&QWP(32,"edi"));
+	&vmovdqu	(@X[3],&QWP(48,"edi"));
+	&add		("edi",64);
+	&vpshufb	(@X[0],@X[0],$t3);
+	&mov		(&DWP(96+4,"esp"),"edi");
+	&vpshufb	(@X[1],@X[1],$t3);
+	&vpshufb	(@X[2],@X[2],$t3);
+	&vpaddd		($t0,@X[0],&QWP(0,$K256));
+	&vpshufb	(@X[3],@X[3],$t3);
+	&vpaddd		($t1,@X[1],&QWP(16,$K256));
+	&vpaddd		($t2,@X[2],&QWP(32,$K256));
+	&vpaddd		($t3,@X[3],&QWP(48,$K256));
+	&vmovdqa	(&QWP(32+0,"esp"),$t0);
+	&vmovdqa	(&QWP(32+16,"esp"),$t1);
+	&vmovdqa	(&QWP(32+32,"esp"),$t2);
+	&vmovdqa	(&QWP(32+48,"esp"),$t3);
+	&jmp		(&label("avx_00_47"));
+
+&set_label("avx_00_47",16);
+	&add		($K256,64);
+
+sub Xupdate_AVX () {
+	(
+	'&vpalignr	($t0,@X[1],@X[0],4);',	# X[1..4]
+	 '&vpalignr	($t3,@X[3],@X[2],4);',	# X[9..12]
+	'&vpsrld	($t2,$t0,7);',
+	 '&vpaddd	(@X[0],@X[0],$t3);',	# X[0..3] += X[9..16]
+	'&vpsrld	($t3,$t0,3);',
+	'&vpslld	($t1,$t0,14);',
+	'&vpxor		($t0,$t3,$t2);',
+	 '&vpshufd	($t3,@X[3],0b11111010)',# X[14..15]
+	'&vpsrld	($t2,$t2,18-7);',
+	'&vpxor		($t0,$t0,$t1);',
+	'&vpslld	($t1,$t1,25-14);',
+	'&vpxor		($t0,$t0,$t2);',
+	 '&vpsrld	($t2,$t3,10);',
+	'&vpxor		($t0,$t0,$t1);',	# sigma0(X[1..4])
+	 '&vpsrlq	($t1,$t3,17);',
+	'&vpaddd	(@X[0],@X[0],$t0);',	# X[0..3] += sigma0(X[1..4])
+	 '&vpxor	($t2,$t2,$t1);',
+	 '&vpsrlq	($t3,$t3,19);',
+	 '&vpxor	($t2,$t2,$t3);',	# sigma1(X[14..15]
+	 '&vpshufd	($t3,$t2,0b10000100);',
+	'&vpsrldq	($t3,$t3,8);',
+	'&vpaddd	(@X[0],@X[0],$t3);',	# X[0..1] += sigma1(X[14..15])
+	 '&vpshufd	($t3,@X[0],0b01010000)',# X[16..17]
+	 '&vpsrld	($t2,$t3,10);',
+	 '&vpsrlq	($t1,$t3,17);',
+	 '&vpxor	($t2,$t2,$t1);',
+	 '&vpsrlq	($t3,$t3,19);',
+	 '&vpxor	($t2,$t2,$t3);',	# sigma1(X[16..17]
+	 '&vpshufd	($t3,$t2,0b11101000);',
+	'&vpslldq	($t3,$t3,8);',
+	'&vpaddd	(@X[0],@X[0],$t3);'	# X[2..3] += sigma1(X[16..17])
+	);
+}
+
+local *ror = sub { &shrd(@_[0],@_) };
+sub AVX_00_47 () {
+my $j = shift;
+my $body = shift;
+my @X = @_;
+my @insns = (&$body,&$body,&$body,&$body);	# 120 instructions
+my $insn;
+
+	foreach (Xupdate_AVX()) {		# 31 instructions
+	    eval;
+	    eval(shift(@insns));
+	    eval(shift(@insns));
+	    eval($insn = shift(@insns));
+	    eval(shift(@insns)) if ($insn =~ /rorx/ && @insns[0] =~ /rorx/);
+	}
+	&vpaddd		($t2,@X[0],&QWP(16*$j,$K256));
+	foreach (@insns) { eval; }		# remaining instructions
+	&vmovdqa	(&QWP(32+16*$j,"esp"),$t2);
+}
+
+    for ($i=0,$j=0; $j<4; $j++) {
+	&AVX_00_47($j,\&body_00_15,@X);
+	push(@X,shift(@X));		# rotate(@X)
+    }
+	&cmp	(&DWP(16*$j,$K256),0x00010203);
+	&jne	(&label("avx_00_47"));
+
+    for ($i=0; $i<16; ) {
+	foreach(body_00_15()) { eval; }
+    }
+
+	&mov	("esi",&DWP(96,"esp"));	#ctx
+					#&mov	($AH[0],&DWP(0,"esp"));
+	&xor	($AH[1],"edi");		#&mov	($AH[1],&DWP(4,"esp"));
+					#&mov	("edi", &DWP(8,"esp"));
+	&mov	("ecx",&DWP(12,"esp"));
+	&add	($AH[0],&DWP(0,"esi"));
+	&add	($AH[1],&DWP(4,"esi"));
+	&add	("edi",&DWP(8,"esi"));
+	&add	("ecx",&DWP(12,"esi"));
+	&mov	(&DWP(0,"esi"),$AH[0]);
+	&mov	(&DWP(4,"esi"),$AH[1]);
+	&mov	(&DWP(8,"esi"),"edi");
+	&mov	(&DWP(12,"esi"),"ecx");
+	 #&mov	(&DWP(0,"esp"),$AH[0]);
+	 &mov	(&DWP(4,"esp"),$AH[1]);
+	 &xor	($AH[1],"edi");			# magic
+	 &mov	(&DWP(8,"esp"),"edi");
+	 &mov	(&DWP(12,"esp"),"ecx");
+	#&mov	($E,&DWP(16,"esp"));
+	&mov	("edi",&DWP(20,"esp"));
+	&mov	("ecx",&DWP(24,"esp"));
+	&add	($E,&DWP(16,"esi"));
+	&add	("edi",&DWP(20,"esi"));
+	&add	("ecx",&DWP(24,"esi"));
+	&mov	(&DWP(16,"esi"),$E);
+	&mov	(&DWP(20,"esi"),"edi");
+	 &mov	(&DWP(20,"esp"),"edi");
+	&mov	("edi",&DWP(28,"esp"));
+	&mov	(&DWP(24,"esi"),"ecx");
+	 #&mov	(&DWP(16,"esp"),$E);
+	&add	("edi",&DWP(28,"esi"));
+	 &mov	(&DWP(24,"esp"),"ecx");
+	&mov	(&DWP(28,"esi"),"edi");
+	 &mov	(&DWP(28,"esp"),"edi");
+	&mov	("edi",&DWP(96+4,"esp"));	# inp
+
+	&vmovdqa	($t3,&QWP(64,$K256));
+	&sub	($K256,3*64);			# rewind K
+	&cmp	("edi",&DWP(96+8,"esp"));	# are we done yet?
+	&jb	(&label("grand_avx"));
+
+	&mov	("esp",&DWP(96+12,"esp"));	# restore sp
+	&vzeroall	();
+&function_end_A();
+						if ($avx>1) {
+sub bodyx_00_15 () {			# +10%
+	(
+	'&rorx	("ecx",$E,6)',
+	'&rorx	("esi",$E,11)',
+	 '&mov	(&off($e),$E)',		# save $E, modulo-scheduled
+	'&rorx	("edi",$E,25)',
+	'&xor	("ecx","esi")',
+	 '&andn	("esi",$E,&off($g))',
+	'&xor	("ecx","edi")',		# Sigma1(e)
+	 '&and	($E,&off($f))',
+	 '&mov	(&off($a),$AH[0]);',	# save $A, modulo-scheduled
+	 '&or	($E,"esi")',		# T = Ch(e,f,g)
+
+	'&rorx	("edi",$AH[0],2)',
+	'&rorx	("esi",$AH[0],13)',
+	 '&lea	($E,&DWP(0,$E,"ecx"))',	# T += Sigma1(e)
+	'&rorx	("ecx",$AH[0],22)',
+	'&xor	("esi","edi")',
+	 '&mov	("edi",&off($b))',
+	'&xor	("ecx","esi")',		# Sigma0(a)
+
+	 '&xor	($AH[0],"edi")',	# a ^= b, (b^c) in next round
+	 '&add	($E,&off($h))',		# T += h
+	 '&and	($AH[1],$AH[0])',	# (b^c) &= (a^b)
+	 '&add	($E,&DWP(32+4*($i&15),"esp"))',	# T += K[i]+X[i]
+	 '&xor	($AH[1],"edi")',	# h = Maj(a,b,c) = Ch(a^b,c,b)
+
+	 '&add	("ecx",$E)',		# h += T
+	 '&add	($E,&off($d))',		# d += T
+	'&lea	($AH[1],&DWP(0,$AH[1],"ecx"));'.	# h += Sigma0(a)
+
+	'@AH = reverse(@AH); $i++;'	# rotate(a,h)
+	);
+}
+
+&set_label("AVX_BMI",32);
+	&lea	("esp",&DWP(-96,"esp"));
+	&vzeroall	();
+	# copy ctx->h[0-7] to A,B,C,D,E,F,G,H on stack
+	&mov	($AH[0],&DWP(0,"esi"));
+	&mov	($AH[1],&DWP(4,"esi"));
+	&mov	("ecx",&DWP(8,"esi"));
+	&mov	("edi",&DWP(12,"esi"));
+	#&mov	(&DWP(0,"esp"),$AH[0]);
+	&mov	(&DWP(4,"esp"),$AH[1]);
+	&xor	($AH[1],"ecx");			# magic
+	&mov	(&DWP(8,"esp"),"ecx");
+	&mov	(&DWP(12,"esp"),"edi");
+	&mov	($E,&DWP(16,"esi"));
+	&mov	("edi",&DWP(20,"esi"));
+	&mov	("ecx",&DWP(24,"esi"));
+	&mov	("esi",&DWP(28,"esi"));
+	#&mov	(&DWP(16,"esp"),$E);
+	&mov	(&DWP(20,"esp"),"edi");
+	&mov	("edi",&DWP(96+4,"esp"));	# inp
+	&mov	(&DWP(24,"esp"),"ecx");
+	&mov	(&DWP(28,"esp"),"esi");
+	&vmovdqa	($t3,&QWP(256,$K256));
+	&jmp	(&label("grand_avx_bmi"));
+
+&set_label("grand_avx_bmi",32);
+	# load input, reverse byte order, add K256[0..15], save to stack
+	&vmovdqu	(@X[0],&QWP(0,"edi"));
+	&vmovdqu	(@X[1],&QWP(16,"edi"));
+	&vmovdqu	(@X[2],&QWP(32,"edi"));
+	&vmovdqu	(@X[3],&QWP(48,"edi"));
+	&add		("edi",64);
+	&vpshufb	(@X[0],@X[0],$t3);
+	&mov		(&DWP(96+4,"esp"),"edi");
+	&vpshufb	(@X[1],@X[1],$t3);
+	&vpshufb	(@X[2],@X[2],$t3);
+	&vpaddd		($t0,@X[0],&QWP(0,$K256));
+	&vpshufb	(@X[3],@X[3],$t3);
+	&vpaddd		($t1,@X[1],&QWP(16,$K256));
+	&vpaddd		($t2,@X[2],&QWP(32,$K256));
+	&vpaddd		($t3,@X[3],&QWP(48,$K256));
+	&vmovdqa	(&QWP(32+0,"esp"),$t0);
+	&vmovdqa	(&QWP(32+16,"esp"),$t1);
+	&vmovdqa	(&QWP(32+32,"esp"),$t2);
+	&vmovdqa	(&QWP(32+48,"esp"),$t3);
+	&jmp		(&label("avx_bmi_00_47"));
+
+&set_label("avx_bmi_00_47",16);
+	&add		($K256,64);
+
+    for ($i=0,$j=0; $j<4; $j++) {
+	&AVX_00_47($j,\&bodyx_00_15,@X);
+	push(@X,shift(@X));		# rotate(@X)
+    }
+	&cmp	(&DWP(16*$j,$K256),0x00010203);
+	&jne	(&label("avx_bmi_00_47"));
+
+    for ($i=0; $i<16; ) {
+	foreach(bodyx_00_15()) { eval; }
+    }
+
+	&mov	("esi",&DWP(96,"esp"));	#ctx
+					#&mov	($AH[0],&DWP(0,"esp"));
+	&xor	($AH[1],"edi");		#&mov	($AH[1],&DWP(4,"esp"));
+					#&mov	("edi", &DWP(8,"esp"));
+	&mov	("ecx",&DWP(12,"esp"));
+	&add	($AH[0],&DWP(0,"esi"));
+	&add	($AH[1],&DWP(4,"esi"));
+	&add	("edi",&DWP(8,"esi"));
+	&add	("ecx",&DWP(12,"esi"));
+	&mov	(&DWP(0,"esi"),$AH[0]);
+	&mov	(&DWP(4,"esi"),$AH[1]);
+	&mov	(&DWP(8,"esi"),"edi");
+	&mov	(&DWP(12,"esi"),"ecx");
+	 #&mov	(&DWP(0,"esp"),$AH[0]);
+	 &mov	(&DWP(4,"esp"),$AH[1]);
+	 &xor	($AH[1],"edi");			# magic
+	 &mov	(&DWP(8,"esp"),"edi");
+	 &mov	(&DWP(12,"esp"),"ecx");
+	#&mov	($E,&DWP(16,"esp"));
+	&mov	("edi",&DWP(20,"esp"));
+	&mov	("ecx",&DWP(24,"esp"));
+	&add	($E,&DWP(16,"esi"));
+	&add	("edi",&DWP(20,"esi"));
+	&add	("ecx",&DWP(24,"esi"));
+	&mov	(&DWP(16,"esi"),$E);
+	&mov	(&DWP(20,"esi"),"edi");
+	 &mov	(&DWP(20,"esp"),"edi");
+	&mov	("edi",&DWP(28,"esp"));
+	&mov	(&DWP(24,"esi"),"ecx");
+	 #&mov	(&DWP(16,"esp"),$E);
+	&add	("edi",&DWP(28,"esi"));
+	 &mov	(&DWP(24,"esp"),"ecx");
+	&mov	(&DWP(28,"esi"),"edi");
+	 &mov	(&DWP(28,"esp"),"edi");
+	&mov	("edi",&DWP(96+4,"esp"));	# inp
+
+	&vmovdqa	($t3,&QWP(64,$K256));
+	&sub	($K256,3*64);			# rewind K
+	&cmp	("edi",&DWP(96+8,"esp"));	# are we done yet?
+	&jb	(&label("grand_avx_bmi"));
+
+	&mov	("esp",&DWP(96+12,"esp"));	# restore sp
+	&vzeroall	();
+&function_end_A();
+						}
+						}
+						}}}
+&function_end_B("sha256_block_data_order");
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha256-armv4.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha256-armv4.pl
new file mode 100644
index 000000000..edcfc3127
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha256-armv4.pl
@@ -0,0 +1,732 @@
+#! /usr/bin/env perl
+# Copyright 2007-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+#
+# Permission to use under GPL terms is granted.
+# ====================================================================
+
+# SHA256 block procedure for ARMv4. May 2007.
+
+# Performance is ~2x better than gcc 3.4 generated code and in "abso-
+# lute" terms is ~2250 cycles per 64-byte block or ~35 cycles per
+# byte [on single-issue Xscale PXA250 core].
+
+# July 2010.
+#
+# Rescheduling for dual-issue pipeline resulted in 22% improvement on
+# Cortex A8 core and ~20 cycles per processed byte.
+
+# February 2011.
+#
+# Profiler-assisted and platform-specific optimization resulted in 16%
+# improvement on Cortex A8 core and ~15.4 cycles per processed byte.
+
+# September 2013.
+#
+# Add NEON implementation. On Cortex A8 it was measured to process one
+# byte in 12.5 cycles or 23% faster than integer-only code. Snapdragon
+# S4 does it in 12.5 cycles too, but it's 50% faster than integer-only
+# code (meaning that latter performs sub-optimally, nothing was done
+# about it).
+
+# May 2014.
+#
+# Add ARMv8 code path performing at 2.0 cpb on Apple A7.
+
+$flavour = shift;
+if ($flavour=~/\w[\w\-]*\.\w+$/) { $output=$flavour; undef $flavour; }
+else { while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {} }
+
+if ($flavour && $flavour ne "void") {
+    $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+    ( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+    ( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+    die "can't locate arm-xlate.pl";
+
+    open STDOUT,"| \"$^X\" $xlate $flavour $output";
+} else {
+    open STDOUT,">$output";
+}
+
+$ctx="r0";	$t0="r0";
+$inp="r1";	$t4="r1";
+$len="r2";	$t1="r2";
+$T1="r3";	$t3="r3";
+$A="r4";
+$B="r5";
+$C="r6";
+$D="r7";
+$E="r8";
+$F="r9";
+$G="r10";
+$H="r11";
+@V=($A,$B,$C,$D,$E,$F,$G,$H);
+$t2="r12";
+$Ktbl="r14";
+
+@Sigma0=( 2,13,22);
+@Sigma1=( 6,11,25);
+@sigma0=( 7,18, 3);
+@sigma1=(17,19,10);
+
+sub BODY_00_15 {
+my ($i,$a,$b,$c,$d,$e,$f,$g,$h) = @_;
+
+$code.=<<___ if ($i<16);
+#if __ARM_ARCH__>=7
+	@ ldr	$t1,[$inp],#4			@ $i
+# if $i==15
+	str	$inp,[sp,#17*4]			@ make room for $t4
+# endif
+	eor	$t0,$e,$e,ror#`$Sigma1[1]-$Sigma1[0]`
+	add	$a,$a,$t2			@ h+=Maj(a,b,c) from the past
+	eor	$t0,$t0,$e,ror#`$Sigma1[2]-$Sigma1[0]`	@ Sigma1(e)
+# ifndef __ARMEB__
+	rev	$t1,$t1
+# endif
+#else
+	@ ldrb	$t1,[$inp,#3]			@ $i
+	add	$a,$a,$t2			@ h+=Maj(a,b,c) from the past
+	ldrb	$t2,[$inp,#2]
+	ldrb	$t0,[$inp,#1]
+	orr	$t1,$t1,$t2,lsl#8
+	ldrb	$t2,[$inp],#4
+	orr	$t1,$t1,$t0,lsl#16
+# if $i==15
+	str	$inp,[sp,#17*4]			@ make room for $t4
+# endif
+	eor	$t0,$e,$e,ror#`$Sigma1[1]-$Sigma1[0]`
+	orr	$t1,$t1,$t2,lsl#24
+	eor	$t0,$t0,$e,ror#`$Sigma1[2]-$Sigma1[0]`	@ Sigma1(e)
+#endif
+___
+$code.=<<___;
+	ldr	$t2,[$Ktbl],#4			@ *K256++
+	add	$h,$h,$t1			@ h+=X[i]
+	str	$t1,[sp,#`$i%16`*4]
+	eor	$t1,$f,$g
+	add	$h,$h,$t0,ror#$Sigma1[0]	@ h+=Sigma1(e)
+	and	$t1,$t1,$e
+	add	$h,$h,$t2			@ h+=K256[i]
+	eor	$t1,$t1,$g			@ Ch(e,f,g)
+	eor	$t0,$a,$a,ror#`$Sigma0[1]-$Sigma0[0]`
+	add	$h,$h,$t1			@ h+=Ch(e,f,g)
+#if $i==31
+	and	$t2,$t2,#0xff
+	cmp	$t2,#0xf2			@ done?
+#endif
+#if $i<15
+# if __ARM_ARCH__>=7
+	ldr	$t1,[$inp],#4			@ prefetch
+# else
+	ldrb	$t1,[$inp,#3]
+# endif
+	eor	$t2,$a,$b			@ a^b, b^c in next round
+#else
+	ldr	$t1,[sp,#`($i+2)%16`*4]		@ from future BODY_16_xx
+	eor	$t2,$a,$b			@ a^b, b^c in next round
+	ldr	$t4,[sp,#`($i+15)%16`*4]	@ from future BODY_16_xx
+#endif
+	eor	$t0,$t0,$a,ror#`$Sigma0[2]-$Sigma0[0]`	@ Sigma0(a)
+	and	$t3,$t3,$t2			@ (b^c)&=(a^b)
+	add	$d,$d,$h			@ d+=h
+	eor	$t3,$t3,$b			@ Maj(a,b,c)
+	add	$h,$h,$t0,ror#$Sigma0[0]	@ h+=Sigma0(a)
+	@ add	$h,$h,$t3			@ h+=Maj(a,b,c)
+___
+	($t2,$t3)=($t3,$t2);
+}
+
+sub BODY_16_XX {
+my ($i,$a,$b,$c,$d,$e,$f,$g,$h) = @_;
+
+$code.=<<___;
+	@ ldr	$t1,[sp,#`($i+1)%16`*4]		@ $i
+	@ ldr	$t4,[sp,#`($i+14)%16`*4]
+	mov	$t0,$t1,ror#$sigma0[0]
+	add	$a,$a,$t2			@ h+=Maj(a,b,c) from the past
+	mov	$t2,$t4,ror#$sigma1[0]
+	eor	$t0,$t0,$t1,ror#$sigma0[1]
+	eor	$t2,$t2,$t4,ror#$sigma1[1]
+	eor	$t0,$t0,$t1,lsr#$sigma0[2]	@ sigma0(X[i+1])
+	ldr	$t1,[sp,#`($i+0)%16`*4]
+	eor	$t2,$t2,$t4,lsr#$sigma1[2]	@ sigma1(X[i+14])
+	ldr	$t4,[sp,#`($i+9)%16`*4]
+
+	add	$t2,$t2,$t0
+	eor	$t0,$e,$e,ror#`$Sigma1[1]-$Sigma1[0]`	@ from BODY_00_15
+	add	$t1,$t1,$t2
+	eor	$t0,$t0,$e,ror#`$Sigma1[2]-$Sigma1[0]`	@ Sigma1(e)
+	add	$t1,$t1,$t4			@ X[i]
+___
+	&BODY_00_15(@_);
+}
+
+$code=<<___;
+#ifndef __KERNEL__
+# include "arm_arch.h"
+#else
+# define __ARM_ARCH__ __LINUX_ARM_ARCH__
+# define __ARM_MAX_ARCH__ 7
+#endif
+
+.text
+#if defined(__thumb2__)
+.syntax unified
+.thumb
+#else
+.code   32
+#endif
+
+.type	K256,%object
+.align	5
+K256:
+.word	0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5
+.word	0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5
+.word	0xd807aa98,0x12835b01,0x243185be,0x550c7dc3
+.word	0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174
+.word	0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc
+.word	0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da
+.word	0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7
+.word	0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967
+.word	0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13
+.word	0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85
+.word	0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3
+.word	0xd192e819,0xd6990624,0xf40e3585,0x106aa070
+.word	0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5
+.word	0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3
+.word	0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208
+.word	0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2
+.size	K256,.-K256
+.word	0				@ terminator
+#if __ARM_MAX_ARCH__>=7 && !defined(__KERNEL__)
+.LOPENSSL_armcap:
+.word	OPENSSL_armcap_P-.Lsha256_block_data_order
+#endif
+.align	5
+
+.global	sha256_block_data_order
+.type	sha256_block_data_order,%function
+sha256_block_data_order:
+.Lsha256_block_data_order:
+#if __ARM_ARCH__<7 && !defined(__thumb2__)
+	sub	r3,pc,#8		@ sha256_block_data_order
+#else
+	adr	r3,.Lsha256_block_data_order
+#endif
+#if __ARM_MAX_ARCH__>=7 && !defined(__KERNEL__)
+	ldr	r12,.LOPENSSL_armcap
+	ldr	r12,[r3,r12]		@ OPENSSL_armcap_P
+#ifdef	__APPLE__
+	ldr	r12,[r12]
+#endif
+	tst	r12,#ARMV8_SHA256
+	bne	.LARMv8
+	tst	r12,#ARMV7_NEON
+	bne	.LNEON
+#endif
+	add	$len,$inp,$len,lsl#6	@ len to point at the end of inp
+	stmdb	sp!,{$ctx,$inp,$len,r4-r11,lr}
+	ldmia	$ctx,{$A,$B,$C,$D,$E,$F,$G,$H}
+	sub	$Ktbl,r3,#256+32	@ K256
+	sub	sp,sp,#16*4		@ alloca(X[16])
+.Loop:
+# if __ARM_ARCH__>=7
+	ldr	$t1,[$inp],#4
+# else
+	ldrb	$t1,[$inp,#3]
+# endif
+	eor	$t3,$B,$C		@ magic
+	eor	$t2,$t2,$t2
+___
+for($i=0;$i<16;$i++)	{ &BODY_00_15($i,@V); unshift(@V,pop(@V)); }
+$code.=".Lrounds_16_xx:\n";
+for (;$i<32;$i++)	{ &BODY_16_XX($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+#ifdef	__thumb2__
+	ite	eq			@ Thumb2 thing, sanity check in ARM
+#endif
+	ldreq	$t3,[sp,#16*4]		@ pull ctx
+	bne	.Lrounds_16_xx
+
+	add	$A,$A,$t2		@ h+=Maj(a,b,c) from the past
+	ldr	$t0,[$t3,#0]
+	ldr	$t1,[$t3,#4]
+	ldr	$t2,[$t3,#8]
+	add	$A,$A,$t0
+	ldr	$t0,[$t3,#12]
+	add	$B,$B,$t1
+	ldr	$t1,[$t3,#16]
+	add	$C,$C,$t2
+	ldr	$t2,[$t3,#20]
+	add	$D,$D,$t0
+	ldr	$t0,[$t3,#24]
+	add	$E,$E,$t1
+	ldr	$t1,[$t3,#28]
+	add	$F,$F,$t2
+	ldr	$inp,[sp,#17*4]		@ pull inp
+	ldr	$t2,[sp,#18*4]		@ pull inp+len
+	add	$G,$G,$t0
+	add	$H,$H,$t1
+	stmia	$t3,{$A,$B,$C,$D,$E,$F,$G,$H}
+	cmp	$inp,$t2
+	sub	$Ktbl,$Ktbl,#256	@ rewind Ktbl
+	bne	.Loop
+
+	add	sp,sp,#`16+3`*4	@ destroy frame
+#if __ARM_ARCH__>=5
+	ldmia	sp!,{r4-r11,pc}
+#else
+	ldmia	sp!,{r4-r11,lr}
+	tst	lr,#1
+	moveq	pc,lr			@ be binary compatible with V4, yet
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	sha256_block_data_order,.-sha256_block_data_order
+___
+######################################################################
+# NEON stuff
+#
+{{{
+my @X=map("q$_",(0..3));
+my ($T0,$T1,$T2,$T3,$T4,$T5)=("q8","q9","q10","q11","d24","d25");
+my $Xfer=$t4;
+my $j=0;
+
+sub Dlo()   { shift=~m|q([1]?[0-9])|?"d".($1*2):"";     }
+sub Dhi()   { shift=~m|q([1]?[0-9])|?"d".($1*2+1):"";   }
+
+sub AUTOLOAD()          # thunk [simplified] x86-style perlasm
+{ my $opcode = $AUTOLOAD; $opcode =~ s/.*:://; $opcode =~ s/_/\./;
+  my $arg = pop;
+    $arg = "#$arg" if ($arg*1 eq $arg);
+    $code .= "\t$opcode\t".join(',',@_,$arg)."\n";
+}
+
+sub Xupdate()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);
+  my ($a,$b,$c,$d,$e,$f,$g,$h);
+
+	&vext_8		($T0,@X[0],@X[1],4);	# X[1..4]
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vext_8		($T1,@X[2],@X[3],4);	# X[9..12]
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vshr_u32	($T2,$T0,$sigma0[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vadd_i32	(@X[0],@X[0],$T1);	# X[0..3] += X[9..12]
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vshr_u32	($T1,$T0,$sigma0[2]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vsli_32	($T2,$T0,32-$sigma0[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vshr_u32	($T3,$T0,$sigma0[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&veor		($T1,$T1,$T2);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vsli_32	($T3,$T0,32-$sigma0[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vshr_u32	($T4,&Dhi(@X[3]),$sigma1[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&veor		($T1,$T1,$T3);		# sigma0(X[1..4])
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vsli_32	($T4,&Dhi(@X[3]),32-$sigma1[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vshr_u32	($T5,&Dhi(@X[3]),$sigma1[2]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vadd_i32	(@X[0],@X[0],$T1);	# X[0..3] += sigma0(X[1..4])
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &veor		($T5,$T5,$T4);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vshr_u32	($T4,&Dhi(@X[3]),$sigma1[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vsli_32	($T4,&Dhi(@X[3]),32-$sigma1[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &veor		($T5,$T5,$T4);		# sigma1(X[14..15])
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vadd_i32	(&Dlo(@X[0]),&Dlo(@X[0]),$T5);# X[0..1] += sigma1(X[14..15])
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vshr_u32	($T4,&Dlo(@X[0]),$sigma1[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vsli_32	($T4,&Dlo(@X[0]),32-$sigma1[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vshr_u32	($T5,&Dlo(@X[0]),$sigma1[2]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &veor		($T5,$T5,$T4);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vshr_u32	($T4,&Dlo(@X[0]),$sigma1[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vld1_32	("{$T0}","[$Ktbl,:128]!");
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &vsli_32	($T4,&Dlo(@X[0]),32-$sigma1[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &veor		($T5,$T5,$T4);		# sigma1(X[16..17])
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vadd_i32	(&Dhi(@X[0]),&Dhi(@X[0]),$T5);# X[2..3] += sigma1(X[16..17])
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vadd_i32	($T0,$T0,@X[0]);
+	 while($#insns>=2) { eval(shift(@insns)); }
+	&vst1_32	("{$T0}","[$Xfer,:128]!");
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+
+	push(@X,shift(@X));		# "rotate" X[]
+}
+
+sub Xpreload()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);
+  my ($a,$b,$c,$d,$e,$f,$g,$h);
+
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vld1_32	("{$T0}","[$Ktbl,:128]!");
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vrev32_8	(@X[0],@X[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&vadd_i32	($T0,$T0,@X[0]);
+	 foreach (@insns) { eval; }	# remaining instructions
+	&vst1_32	("{$T0}","[$Xfer,:128]!");
+
+	push(@X,shift(@X));		# "rotate" X[]
+}
+
+sub body_00_15 () {
+	(
+	'($a,$b,$c,$d,$e,$f,$g,$h)=@V;'.
+	'&add	($h,$h,$t1)',			# h+=X[i]+K[i]
+	'&eor	($t1,$f,$g)',
+	'&eor	($t0,$e,$e,"ror#".($Sigma1[1]-$Sigma1[0]))',
+	'&add	($a,$a,$t2)',			# h+=Maj(a,b,c) from the past
+	'&and	($t1,$t1,$e)',
+	'&eor	($t2,$t0,$e,"ror#".($Sigma1[2]-$Sigma1[0]))',	# Sigma1(e)
+	'&eor	($t0,$a,$a,"ror#".($Sigma0[1]-$Sigma0[0]))',
+	'&eor	($t1,$t1,$g)',			# Ch(e,f,g)
+	'&add	($h,$h,$t2,"ror#$Sigma1[0]")',	# h+=Sigma1(e)
+	'&eor	($t2,$a,$b)',			# a^b, b^c in next round
+	'&eor	($t0,$t0,$a,"ror#".($Sigma0[2]-$Sigma0[0]))',	# Sigma0(a)
+	'&add	($h,$h,$t1)',			# h+=Ch(e,f,g)
+	'&ldr	($t1,sprintf "[sp,#%d]",4*(($j+1)&15))	if (($j&15)!=15);'.
+	'&ldr	($t1,"[$Ktbl]")				if ($j==15);'.
+	'&ldr	($t1,"[sp,#64]")			if ($j==31)',
+	'&and	($t3,$t3,$t2)',			# (b^c)&=(a^b)
+	'&add	($d,$d,$h)',			# d+=h
+	'&add	($h,$h,$t0,"ror#$Sigma0[0]");'.	# h+=Sigma0(a)
+	'&eor	($t3,$t3,$b)',			# Maj(a,b,c)
+	'$j++;	unshift(@V,pop(@V)); ($t2,$t3)=($t3,$t2);'
+	)
+}
+
+$code.=<<___;
+#if __ARM_MAX_ARCH__>=7
+.arch	armv7-a
+.fpu	neon
+
+.global	sha256_block_data_order_neon
+.type	sha256_block_data_order_neon,%function
+.align	5
+.skip	16
+sha256_block_data_order_neon:
+.LNEON:
+	stmdb	sp!,{r4-r12,lr}
+
+	sub	$H,sp,#16*4+16
+	adr	$Ktbl,K256
+	bic	$H,$H,#15		@ align for 128-bit stores
+	mov	$t2,sp
+	mov	sp,$H			@ alloca
+	add	$len,$inp,$len,lsl#6	@ len to point at the end of inp
+
+	vld1.8		{@X[0]},[$inp]!
+	vld1.8		{@X[1]},[$inp]!
+	vld1.8		{@X[2]},[$inp]!
+	vld1.8		{@X[3]},[$inp]!
+	vld1.32		{$T0},[$Ktbl,:128]!
+	vld1.32		{$T1},[$Ktbl,:128]!
+	vld1.32		{$T2},[$Ktbl,:128]!
+	vld1.32		{$T3},[$Ktbl,:128]!
+	vrev32.8	@X[0],@X[0]		@ yes, even on
+	str		$ctx,[sp,#64]
+	vrev32.8	@X[1],@X[1]		@ big-endian
+	str		$inp,[sp,#68]
+	mov		$Xfer,sp
+	vrev32.8	@X[2],@X[2]
+	str		$len,[sp,#72]
+	vrev32.8	@X[3],@X[3]
+	str		$t2,[sp,#76]		@ save original sp
+	vadd.i32	$T0,$T0,@X[0]
+	vadd.i32	$T1,$T1,@X[1]
+	vst1.32		{$T0},[$Xfer,:128]!
+	vadd.i32	$T2,$T2,@X[2]
+	vst1.32		{$T1},[$Xfer,:128]!
+	vadd.i32	$T3,$T3,@X[3]
+	vst1.32		{$T2},[$Xfer,:128]!
+	vst1.32		{$T3},[$Xfer,:128]!
+
+	ldmia		$ctx,{$A-$H}
+	sub		$Xfer,$Xfer,#64
+	ldr		$t1,[sp,#0]
+	eor		$t2,$t2,$t2
+	eor		$t3,$B,$C
+	b		.L_00_48
+
+.align	4
+.L_00_48:
+___
+	&Xupdate(\&body_00_15);
+	&Xupdate(\&body_00_15);
+	&Xupdate(\&body_00_15);
+	&Xupdate(\&body_00_15);
+$code.=<<___;
+	teq	$t1,#0				@ check for K256 terminator
+	ldr	$t1,[sp,#0]
+	sub	$Xfer,$Xfer,#64
+	bne	.L_00_48
+
+	ldr		$inp,[sp,#68]
+	ldr		$t0,[sp,#72]
+	sub		$Ktbl,$Ktbl,#256	@ rewind $Ktbl
+	teq		$inp,$t0
+	it		eq
+	subeq		$inp,$inp,#64		@ avoid SEGV
+	vld1.8		{@X[0]},[$inp]!		@ load next input block
+	vld1.8		{@X[1]},[$inp]!
+	vld1.8		{@X[2]},[$inp]!
+	vld1.8		{@X[3]},[$inp]!
+	it		ne
+	strne		$inp,[sp,#68]
+	mov		$Xfer,sp
+___
+	&Xpreload(\&body_00_15);
+	&Xpreload(\&body_00_15);
+	&Xpreload(\&body_00_15);
+	&Xpreload(\&body_00_15);
+$code.=<<___;
+	ldr	$t0,[$t1,#0]
+	add	$A,$A,$t2			@ h+=Maj(a,b,c) from the past
+	ldr	$t2,[$t1,#4]
+	ldr	$t3,[$t1,#8]
+	ldr	$t4,[$t1,#12]
+	add	$A,$A,$t0			@ accumulate
+	ldr	$t0,[$t1,#16]
+	add	$B,$B,$t2
+	ldr	$t2,[$t1,#20]
+	add	$C,$C,$t3
+	ldr	$t3,[$t1,#24]
+	add	$D,$D,$t4
+	ldr	$t4,[$t1,#28]
+	add	$E,$E,$t0
+	str	$A,[$t1],#4
+	add	$F,$F,$t2
+	str	$B,[$t1],#4
+	add	$G,$G,$t3
+	str	$C,[$t1],#4
+	add	$H,$H,$t4
+	str	$D,[$t1],#4
+	stmia	$t1,{$E-$H}
+
+	ittte	ne
+	movne	$Xfer,sp
+	ldrne	$t1,[sp,#0]
+	eorne	$t2,$t2,$t2
+	ldreq	sp,[sp,#76]			@ restore original sp
+	itt	ne
+	eorne	$t3,$B,$C
+	bne	.L_00_48
+
+	ldmia	sp!,{r4-r12,pc}
+.size	sha256_block_data_order_neon,.-sha256_block_data_order_neon
+#endif
+___
+}}}
+######################################################################
+# ARMv8 stuff
+#
+{{{
+my ($ABCD,$EFGH,$abcd)=map("q$_",(0..2));
+my @MSG=map("q$_",(8..11));
+my ($W0,$W1,$ABCD_SAVE,$EFGH_SAVE)=map("q$_",(12..15));
+my $Ktbl="r3";
+
+$code.=<<___;
+#if __ARM_MAX_ARCH__>=7 && !defined(__KERNEL__)
+
+# if defined(__thumb2__)
+#  define INST(a,b,c,d)	.byte	c,d|0xc,a,b
+# else
+#  define INST(a,b,c,d)	.byte	a,b,c,d
+# endif
+
+.type	sha256_block_data_order_armv8,%function
+.align	5
+sha256_block_data_order_armv8:
+.LARMv8:
+	vld1.32	{$ABCD,$EFGH},[$ctx]
+	sub	$Ktbl,$Ktbl,#256+32
+	add	$len,$inp,$len,lsl#6	@ len to point at the end of inp
+	b	.Loop_v8
+
+.align	4
+.Loop_v8:
+	vld1.8		{@MSG[0]-@MSG[1]},[$inp]!
+	vld1.8		{@MSG[2]-@MSG[3]},[$inp]!
+	vld1.32		{$W0},[$Ktbl]!
+	vrev32.8	@MSG[0],@MSG[0]
+	vrev32.8	@MSG[1],@MSG[1]
+	vrev32.8	@MSG[2],@MSG[2]
+	vrev32.8	@MSG[3],@MSG[3]
+	vmov		$ABCD_SAVE,$ABCD	@ offload
+	vmov		$EFGH_SAVE,$EFGH
+	teq		$inp,$len
+___
+for($i=0;$i<12;$i++) {
+$code.=<<___;
+	vld1.32		{$W1},[$Ktbl]!
+	vadd.i32	$W0,$W0,@MSG[0]
+	sha256su0	@MSG[0],@MSG[1]
+	vmov		$abcd,$ABCD
+	sha256h		$ABCD,$EFGH,$W0
+	sha256h2	$EFGH,$abcd,$W0
+	sha256su1	@MSG[0],@MSG[2],@MSG[3]
+___
+	($W0,$W1)=($W1,$W0);	push(@MSG,shift(@MSG));
+}
+$code.=<<___;
+	vld1.32		{$W1},[$Ktbl]!
+	vadd.i32	$W0,$W0,@MSG[0]
+	vmov		$abcd,$ABCD
+	sha256h		$ABCD,$EFGH,$W0
+	sha256h2	$EFGH,$abcd,$W0
+
+	vld1.32		{$W0},[$Ktbl]!
+	vadd.i32	$W1,$W1,@MSG[1]
+	vmov		$abcd,$ABCD
+	sha256h		$ABCD,$EFGH,$W1
+	sha256h2	$EFGH,$abcd,$W1
+
+	vld1.32		{$W1},[$Ktbl]
+	vadd.i32	$W0,$W0,@MSG[2]
+	sub		$Ktbl,$Ktbl,#256-16	@ rewind
+	vmov		$abcd,$ABCD
+	sha256h		$ABCD,$EFGH,$W0
+	sha256h2	$EFGH,$abcd,$W0
+
+	vadd.i32	$W1,$W1,@MSG[3]
+	vmov		$abcd,$ABCD
+	sha256h		$ABCD,$EFGH,$W1
+	sha256h2	$EFGH,$abcd,$W1
+
+	vadd.i32	$ABCD,$ABCD,$ABCD_SAVE
+	vadd.i32	$EFGH,$EFGH,$EFGH_SAVE
+	it		ne
+	bne		.Loop_v8
+
+	vst1.32		{$ABCD,$EFGH},[$ctx]
+
+	ret		@ bx lr
+.size	sha256_block_data_order_armv8,.-sha256_block_data_order_armv8
+#endif
+___
+}}}
+$code.=<<___;
+.asciz  "SHA256 block transform for ARMv4/NEON/ARMv8, CRYPTOGAMS by <appro\@openssl.org>"
+.align	2
+#if __ARM_MAX_ARCH__>=7 && !defined(__KERNEL__)
+.comm   OPENSSL_armcap_P,4,4
+#endif
+___
+
+open SELF,$0;
+while(<SELF>) {
+	next if (/^#!/);
+	last if (!s/^#/@/ and !/^$/);
+	print;
+}
+close SELF;
+
+{   my  %opcode = (
+	"sha256h"	=> 0xf3000c40,	"sha256h2"	=> 0xf3100c40,
+	"sha256su0"	=> 0xf3ba03c0,	"sha256su1"	=> 0xf3200c40	);
+
+    sub unsha256 {
+	my ($mnemonic,$arg)=@_;
+
+	if ($arg =~ m/q([0-9]+)(?:,\s*q([0-9]+))?,\s*q([0-9]+)/o) {
+	    my $word = $opcode{$mnemonic}|(($1&7)<<13)|(($1&8)<<19)
+					 |(($2&7)<<17)|(($2&8)<<4)
+					 |(($3&7)<<1) |(($3&8)<<2);
+	    # since ARMv7 instructions are always encoded little-endian.
+	    # correct solution is to use .inst directive, but older
+	    # assemblers don't implement it:-(
+	    sprintf "INST(0x%02x,0x%02x,0x%02x,0x%02x)\t@ %s %s",
+			$word&0xff,($word>>8)&0xff,
+			($word>>16)&0xff,($word>>24)&0xff,
+			$mnemonic,$arg;
+	}
+    }
+}
+
+foreach (split($/,$code)) {
+
+	s/\`([^\`]*)\`/eval $1/geo;
+
+	s/\b(sha256\w+)\s+(q.*)/unsha256($1,$2)/geo;
+
+	s/\bret\b/bx	lr/go		or
+	s/\bbx\s+lr\b/.word\t0xe12fff1e/go;	# make it possible to compile with -march=armv4
+
+	print $_,"\n";
+}
+
+close STDOUT; # enforce flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha256-c64xplus.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha256-c64xplus.pl
new file mode 100644
index 000000000..3ab7d9b68
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha256-c64xplus.pl
@@ -0,0 +1,320 @@
+#! /usr/bin/env perl
+# Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# SHA256 for C64x+.
+#
+# January 2012
+#
+# Performance is just below 10 cycles per processed byte, which is
+# almost 40% faster than compiler-generated code. Unroll is unlikely
+# to give more than ~8% improvement...
+#
+# !!! Note that this module uses AMR, which means that all interrupt
+# service routines are expected to preserve it and for own well-being
+# zero it upon entry.
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+($CTXA,$INP,$NUM) = ("A4","B4","A6");            # arguments
+ $K256="A3";
+
+($A,$Actx,$B,$Bctx,$C,$Cctx,$D,$Dctx,$T2,$S0,$s1,$t0a,$t1a,$t2a,$X9,$X14)
+	=map("A$_",(16..31));
+($E,$Ectx,$F,$Fctx,$G,$Gctx,$H,$Hctx,$T1,$S1,$s0,$t0e,$t1e,$t2e,$X1,$X15)
+	=map("B$_",(16..31));
+
+($Xia,$Xib)=("A5","B5");			# circular/ring buffer
+ $CTXB=$t2e;
+
+($Xn,$X0,$K)=("B7","B8","B9");
+($Maj,$Ch)=($T2,"B6");
+
+$code.=<<___;
+	.text
+
+	.if	.ASSEMBLER_VERSION<7000000
+	.asg	0,__TI_EABI__
+	.endif
+	.if	__TI_EABI__
+	.nocmp
+	.asg	sha256_block_data_order,_sha256_block_data_order
+	.endif
+
+	.asg	B3,RA
+	.asg	A15,FP
+	.asg	B15,SP
+
+	.if	.BIG_ENDIAN
+	.asg	SWAP2,MV
+	.asg	SWAP4,MV
+	.endif
+
+	.global	_sha256_block_data_order
+_sha256_block_data_order:
+__sha256_block:
+	.asmfunc stack_usage(64)
+	MV	$NUM,A0				; reassign $NUM
+||	MVK	-64,B0
+  [!A0]	BNOP	RA				; if ($NUM==0) return;
+|| [A0]	STW	FP,*SP--[16]			; save frame pointer and alloca(64)
+|| [A0]	MV	SP,FP
+   [A0]	ADDKPC	__sha256_block,B2
+|| [A0]	AND	B0,SP,SP			; align stack at 64 bytes
+	.if	__TI_EABI__
+   [A0]	MVK	0x00404,B1
+|| [A0]	MVKL	\$PCR_OFFSET(K256,__sha256_block),$K256
+   [A0]	MVKH	0x50000,B1
+|| [A0]	MVKH	\$PCR_OFFSET(K256,__sha256_block),$K256
+	.else
+   [A0]	MVK	0x00404,B1
+|| [A0]	MVKL	(K256-__sha256_block),$K256
+   [A0]	MVKH	0x50000,B1
+|| [A0]	MVKH	(K256-__sha256_block),$K256
+	.endif
+   [A0]	MVC	B1,AMR				; setup circular addressing
+|| [A0]	MV	SP,$Xia
+   [A0]	MV	SP,$Xib
+|| [A0]	ADD	B2,$K256,$K256
+|| [A0]	MV	$CTXA,$CTXB
+|| [A0]	SUBAW	SP,2,SP				; reserve two words above buffer
+	LDW	*${CTXA}[0],$A			; load ctx
+||	LDW	*${CTXB}[4],$E
+	LDW	*${CTXA}[1],$B
+||	LDW	*${CTXB}[5],$F
+	LDW	*${CTXA}[2],$C
+||	LDW	*${CTXB}[6],$G
+	LDW	*${CTXA}[3],$D
+||	LDW	*${CTXB}[7],$H
+
+	LDNW	*$INP++,$Xn			; pre-fetch input
+	LDW	*$K256++,$K			; pre-fetch K256[0]
+	MVK	14,B0				; loop counters
+	MVK	47,B1
+||	ADDAW	$Xia,9,$Xia
+outerloop?:
+	SUB	A0,1,A0
+||	MV	$A,$Actx
+||	MV	$E,$Ectx
+||	MVD	$B,$Bctx
+||	MVD	$F,$Fctx
+	MV	$C,$Cctx
+||	MV	$G,$Gctx
+||	MVD	$D,$Dctx
+||	MVD	$H,$Hctx
+||	SWAP4	$Xn,$X0
+
+	SPLOOPD	8				; BODY_00_14
+||	MVC	B0,ILC
+||	SWAP2	$X0,$X0
+
+	LDNW	*$INP++,$Xn
+||	ROTL	$A,30,$S0
+||	OR	$A,$B,$Maj
+||	AND	$A,$B,$t2a
+||	ROTL	$E,26,$S1
+||	AND	$F,$E,$Ch
+||	ANDN	$G,$E,$t2e
+	ROTL	$A,19,$t0a
+||	AND	$C,$Maj,$Maj
+||	ROTL	$E,21,$t0e
+||	XOR	$t2e,$Ch,$Ch			; Ch(e,f,g) = (e&f)^(~e&g)
+	ROTL	$A,10,$t1a
+||	OR	$t2a,$Maj,$Maj			; Maj(a,b,c) = ((a|b)&c)|(a&b)
+||	ROTL	$E,7,$t1e
+||	ADD	$K,$H,$T1			; T1 = h + K256[i]
+	ADD	$X0,$T1,$T1			; T1 += X[i];
+||	STW	$X0,*$Xib++
+||	XOR	$t0a,$S0,$S0
+||	XOR	$t0e,$S1,$S1
+	XOR	$t1a,$S0,$S0			; Sigma0(a)
+||	XOR	$t1e,$S1,$S1			; Sigma1(e)
+||	LDW	*$K256++,$K			; pre-fetch K256[i+1]
+||	ADD	$Ch,$T1,$T1			; T1 += Ch(e,f,g)
+	ADD	$S1,$T1,$T1			; T1 += Sigma1(e)
+||	ADD	$S0,$Maj,$T2			; T2 = Sigma0(a) + Maj(a,b,c)
+||	ROTL	$G,0,$H				; h = g
+||	MV	$F,$G				; g = f
+||	MV	$X0,$X14
+||	SWAP4	$Xn,$X0
+	SWAP2	$X0,$X0
+||	MV	$E,$F				; f = e
+||	ADD	$D,$T1,$E			; e = d + T1
+||	MV	$C,$D				; d = c
+	MV	$B,$C				; c = b
+||	MV	$A,$B				; b = a
+||	ADD	$T1,$T2,$A			; a = T1 + T2
+	SPKERNEL
+
+	ROTL	$A,30,$S0			; BODY_15
+||	OR	$A,$B,$Maj
+||	AND	$A,$B,$t2a
+||	ROTL	$E,26,$S1
+||	AND	$F,$E,$Ch
+||	ANDN	$G,$E,$t2e
+||	LDW	*${Xib}[1],$Xn			; modulo-scheduled
+	ROTL	$A,19,$t0a
+||	AND	$C,$Maj,$Maj
+||	ROTL	$E,21,$t0e
+||	XOR	$t2e,$Ch,$Ch			; Ch(e,f,g) = (e&f)^(~e&g)
+||	LDW	*${Xib}[2],$X1			; modulo-scheduled
+	ROTL	$A,10,$t1a
+||	OR	$t2a,$Maj,$Maj			; Maj(a,b,c) = ((a|b)&c)|(a&b)
+||	ROTL	$E,7,$t1e
+||	ADD	$K,$H,$T1			; T1 = h + K256[i]
+	ADD	$X0,$T1,$T1			; T1 += X[i];
+||	STW	$X0,*$Xib++
+||	XOR	$t0a,$S0,$S0
+||	XOR	$t0e,$S1,$S1
+	XOR	$t1a,$S0,$S0			; Sigma0(a)
+||	XOR	$t1e,$S1,$S1			; Sigma1(e)
+||	LDW	*$K256++,$K			; pre-fetch K256[i+1]
+||	ADD	$Ch,$T1,$T1			; T1 += Ch(e,f,g)
+	ADD	$S1,$T1,$T1			; T1 += Sigma1(e)
+||	ADD	$S0,$Maj,$T2			; T2 = Sigma0(a) + Maj(a,b,c)
+||	ROTL	$G,0,$H				; h = g
+||	MV	$F,$G				; g = f
+||	MV	$X0,$X15
+	MV	$E,$F				; f = e
+||	ADD	$D,$T1,$E			; e = d + T1
+||	MV	$C,$D				; d = c
+||	MV	$Xn,$X0				; modulo-scheduled
+||	LDW	*$Xia,$X9			; modulo-scheduled
+||	ROTL	$X1,25,$t0e			; modulo-scheduled
+||	ROTL	$X14,15,$t0a			; modulo-scheduled
+	SHRU	$X1,3,$s0			; modulo-scheduled
+||	SHRU	$X14,10,$s1			; modulo-scheduled
+||	ROTL	$B,0,$C				; c = b
+||	MV	$A,$B				; b = a
+||	ADD	$T1,$T2,$A			; a = T1 + T2
+
+	SPLOOPD	10				; BODY_16_63
+||	MVC	B1,ILC
+||	ROTL	$X1,14,$t1e			; modulo-scheduled
+||	ROTL	$X14,13,$t1a			; modulo-scheduled
+
+	XOR	$t0e,$s0,$s0
+||	XOR	$t0a,$s1,$s1
+||	MV	$X15,$X14
+||	MV	$X1,$Xn
+	XOR	$t1e,$s0,$s0			; sigma0(X[i+1])
+||	XOR	$t1a,$s1,$s1			; sigma1(X[i+14])
+||	LDW	*${Xib}[2],$X1			; module-scheduled
+	ROTL	$A,30,$S0
+||	OR	$A,$B,$Maj
+||	AND	$A,$B,$t2a
+||	ROTL	$E,26,$S1
+||	AND	$F,$E,$Ch
+||	ANDN	$G,$E,$t2e
+||	ADD	$X9,$X0,$X0			; X[i] += X[i+9]
+	ROTL	$A,19,$t0a
+||	AND	$C,$Maj,$Maj
+||	ROTL	$E,21,$t0e
+||	XOR	$t2e,$Ch,$Ch			; Ch(e,f,g) = (e&f)^(~e&g)
+||	ADD	$s0,$X0,$X0			; X[i] += sigma1(X[i+1])
+	ROTL	$A,10,$t1a
+||	OR	$t2a,$Maj,$Maj			; Maj(a,b,c) = ((a|b)&c)|(a&b)
+||	ROTL	$E,7,$t1e
+||	ADD	$H,$K,$T1			; T1 = h + K256[i]
+||	ADD	$s1,$X0,$X0			; X[i] += sigma1(X[i+14])
+	XOR	$t0a,$S0,$S0
+||	XOR	$t0e,$S1,$S1
+||	ADD	$X0,$T1,$T1			; T1 += X[i]
+||	STW	$X0,*$Xib++
+	XOR	$t1a,$S0,$S0			; Sigma0(a)
+||	XOR	$t1e,$S1,$S1			; Sigma1(e)
+||	ADD	$Ch,$T1,$T1			; T1 += Ch(e,f,g)
+||	MV	$X0,$X15
+||	ROTL	$G,0,$H				; h = g
+||	LDW	*$K256++,$K			; pre-fetch K256[i+1]
+	ADD	$S1,$T1,$T1			; T1 += Sigma1(e)
+||	ADD	$S0,$Maj,$T2			; T2 = Sigma0(a) + Maj(a,b,c)
+||	MV	$F,$G				; g = f
+||	MV	$Xn,$X0				; modulo-scheduled
+||	LDW	*++$Xia,$X9			; modulo-scheduled
+||	ROTL	$X1,25,$t0e			; module-scheduled
+||	ROTL	$X14,15,$t0a			; modulo-scheduled
+	ROTL	$X1,14,$t1e			; modulo-scheduled
+||	ROTL	$X14,13,$t1a			; modulo-scheduled
+||	MV	$E,$F				; f = e
+||	ADD	$D,$T1,$E			; e = d + T1
+||	MV	$C,$D				; d = c
+||	MV	$B,$C				; c = b
+	MV	$A,$B				; b = a
+||	ADD	$T1,$T2,$A			; a = T1 + T2
+||	SHRU	$X1,3,$s0			; modulo-scheduled
+||	SHRU	$X14,10,$s1			; modulo-scheduled
+	SPKERNEL
+
+   [A0]	B	outerloop?
+|| [A0]	LDNW	*$INP++,$Xn			; pre-fetch input
+|| [A0]	ADDK	-260,$K256			; rewind K256
+||	ADD	$Actx,$A,$A			; accumulate ctx
+||	ADD	$Ectx,$E,$E
+||	ADD	$Bctx,$B,$B
+	ADD	$Fctx,$F,$F
+||	ADD	$Cctx,$C,$C
+||	ADD	$Gctx,$G,$G
+||	ADD	$Dctx,$D,$D
+||	ADD	$Hctx,$H,$H
+|| [A0]	LDW	*$K256++,$K			; pre-fetch K256[0]
+
+  [!A0]	BNOP	RA
+||[!A0]	MV	$CTXA,$CTXB
+  [!A0]	MV	FP,SP				; restore stack pointer
+||[!A0]	LDW	*FP[0],FP			; restore frame pointer
+  [!A0]	STW	$A,*${CTXA}[0]  		; save ctx
+||[!A0]	STW	$E,*${CTXB}[4]
+||[!A0]	MVK	0,B0
+  [!A0]	STW	$B,*${CTXA}[1]
+||[!A0]	STW	$F,*${CTXB}[5]
+||[!A0]	MVC	B0,AMR				; clear AMR
+	STW	$C,*${CTXA}[2]
+||	STW	$G,*${CTXB}[6]
+	STW	$D,*${CTXA}[3]
+||	STW	$H,*${CTXB}[7]
+	.endasmfunc
+
+	.if	__TI_EABI__
+	.sect	".text:sha_asm.const"
+	.else
+	.sect	".const:sha_asm"
+	.endif
+	.align	128
+K256:
+	.uword	0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5
+	.uword	0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5
+	.uword	0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3
+	.uword	0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174
+	.uword	0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc
+	.uword	0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da
+	.uword	0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7
+	.uword	0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967
+	.uword	0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13
+	.uword	0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85
+	.uword	0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3
+	.uword	0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070
+	.uword	0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5
+	.uword	0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3
+	.uword	0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208
+	.uword	0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2
+	.cstring "SHA256 block transform for C64x+, CRYPTOGAMS by <appro\@openssl.org>"
+	.align	4
+
+___
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha256-mb-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha256-mb-x86_64.pl
new file mode 100644
index 000000000..73978dbd8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha256-mb-x86_64.pl
@@ -0,0 +1,1614 @@
+#! /usr/bin/env perl
+# Copyright 2013-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# Multi-buffer SHA256 procedure processes n buffers in parallel by
+# placing buffer data to designated lane of SIMD register. n is
+# naturally limited to 4 on pre-AVX2 processors and to 8 on
+# AVX2-capable processors such as Haswell.
+#
+#		this	+aesni(i)	sha256	aesni-sha256	gain(iv)
+# -------------------------------------------------------------------
+# Westmere(ii)	23.3/n	+1.28=7.11(n=4)	12.3	+3.75=16.1	+126%
+# Atom(ii)	38.7/n	+3.93=13.6(n=4)	20.8	+5.69=26.5	+95%
+# Sandy Bridge	(20.5	+5.15=25.7)/n	11.6	13.0		+103%
+# Ivy Bridge	(20.4	+5.14=25.5)/n	10.3	11.6		+82%
+# Haswell(iii)	(21.0	+5.00=26.0)/n	7.80	8.79		+170%
+# Skylake	(18.9	+5.00=23.9)/n	7.70	8.17		+170%
+# Bulldozer	(21.6	+5.76=27.4)/n	13.6	13.7		+100%
+#
+# (i)	multi-block CBC encrypt with 128-bit key;
+# (ii)	(HASH+AES)/n does not apply to Westmere for n>3 and Atom,
+#	because of lower AES-NI instruction throughput, nor is there
+#	AES-NI-SHA256 stitch for these processors;
+# (iii)	"this" is for n=8, when we gather twice as much data, result
+#	for n=4 is 20.3+4.44=24.7;
+# (iv)	presented improvement coefficients are asymptotic limits and
+#	in real-life application are somewhat lower, e.g. for 2KB
+#	fragments they range from 75% to 130% (on Haswell);
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+$avx=0;
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.19) + ($1>=2.22);
+}
+
+if (!$avx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	   `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.09) + ($1>=2.10);
+}
+
+if (!$avx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	   `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$avx = ($1>=10) + ($1>=11);
+}
+
+if (!$avx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([3-9]\.[0-9]+)/) {
+	$avx = ($2>=3.0) + ($2>3.0);
+}
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+# void sha256_multi_block (
+#     struct {	unsigned int A[8];
+#		unsigned int B[8];
+#		unsigned int C[8];
+#		unsigned int D[8];
+#		unsigned int E[8];
+#		unsigned int F[8];
+#		unsigned int G[8];
+#		unsigned int H[8];	} *ctx,
+#     struct {	void *ptr; int blocks;	} inp[8],
+#     int num);		/* 1 or 2 */
+#
+$ctx="%rdi";	# 1st arg
+$inp="%rsi";	# 2nd arg
+$num="%edx";	# 3rd arg
+@ptr=map("%r$_",(8..11));
+$Tbl="%rbp";
+
+@V=($A,$B,$C,$D,$E,$F,$G,$H)=map("%xmm$_",(8..15));
+($t1,$t2,$t3,$axb,$bxc,$Xi,$Xn,$sigma)=map("%xmm$_",(0..7));
+
+$REG_SZ=16;
+
+sub Xi_off {
+my $off = shift;
+
+    $off %= 16; $off *= $REG_SZ;
+    $off<256 ? "$off-128(%rax)" : "$off-256-128(%rbx)";
+}
+
+sub ROUND_00_15 {
+my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
+
+$code.=<<___ if ($i<15);
+	movd		`4*$i`(@ptr[0]),$Xi
+	movd		`4*$i`(@ptr[1]),$t1
+	movd		`4*$i`(@ptr[2]),$t2
+	movd		`4*$i`(@ptr[3]),$t3
+	punpckldq	$t2,$Xi
+	punpckldq	$t3,$t1
+	punpckldq	$t1,$Xi
+___
+$code.=<<___ if ($i==15);
+	movd		`4*$i`(@ptr[0]),$Xi
+	 lea		`16*4`(@ptr[0]),@ptr[0]
+	movd		`4*$i`(@ptr[1]),$t1
+	 lea		`16*4`(@ptr[1]),@ptr[1]
+	movd		`4*$i`(@ptr[2]),$t2
+	 lea		`16*4`(@ptr[2]),@ptr[2]
+	movd		`4*$i`(@ptr[3]),$t3
+	 lea		`16*4`(@ptr[3]),@ptr[3]
+	punpckldq	$t2,$Xi
+	punpckldq	$t3,$t1
+	punpckldq	$t1,$Xi
+___
+$code.=<<___;
+	movdqa	$e,$sigma
+	`"pshufb	$Xn,$Xi"		if ($i<=15 && ($i&1)==0)`
+	movdqa	$e,$t3
+	`"pshufb	$Xn,$Xi"		if ($i<=15 && ($i&1)==1)`
+	psrld	\$6,$sigma
+	movdqa	$e,$t2
+	pslld	\$7,$t3
+	movdqa	$Xi,`&Xi_off($i)`
+	 paddd	$h,$Xi				# Xi+=h
+
+	psrld	\$11,$t2
+	pxor	$t3,$sigma
+	pslld	\$21-7,$t3
+	 paddd	`32*($i%8)-128`($Tbl),$Xi	# Xi+=K[round]
+	pxor	$t2,$sigma
+
+	psrld	\$25-11,$t2
+	 movdqa	$e,$t1
+	 `"prefetcht0	63(@ptr[0])"		if ($i==15)`
+	pxor	$t3,$sigma
+	 movdqa	$e,$axb				# borrow $axb
+	pslld	\$26-21,$t3
+	 pandn	$g,$t1
+	 pand	$f,$axb
+	pxor	$t2,$sigma
+
+	 `"prefetcht0	63(@ptr[1])"		if ($i==15)`
+	movdqa	$a,$t2
+	pxor	$t3,$sigma			# Sigma1(e)
+	movdqa	$a,$t3
+	psrld	\$2,$t2
+	paddd	$sigma,$Xi			# Xi+=Sigma1(e)
+	 pxor	$axb,$t1			# Ch(e,f,g)
+	 movdqa	$b,$axb
+	movdqa	$a,$sigma
+	pslld	\$10,$t3
+	 pxor	$a,$axb				# a^b, b^c in next round
+
+	 `"prefetcht0	63(@ptr[2])"		if ($i==15)`
+	psrld	\$13,$sigma
+	pxor	$t3,$t2
+	 paddd	$t1,$Xi				# Xi+=Ch(e,f,g)
+	pslld	\$19-10,$t3
+	 pand	$axb,$bxc
+	pxor	$sigma,$t2
+
+	 `"prefetcht0	63(@ptr[3])"		if ($i==15)`
+	psrld	\$22-13,$sigma
+	pxor	$t3,$t2
+	 movdqa	$b,$h
+	pslld	\$30-19,$t3
+	pxor	$t2,$sigma
+	 pxor	$bxc,$h				# h=Maj(a,b,c)=Ch(a^b,c,b)
+	 paddd	$Xi,$d				# d+=Xi
+	pxor	$t3,$sigma			# Sigma0(a)
+
+	paddd	$Xi,$h				# h+=Xi
+	paddd	$sigma,$h			# h+=Sigma0(a)
+___
+$code.=<<___ if (($i%8)==7);
+	lea	`32*8`($Tbl),$Tbl
+___
+	($axb,$bxc)=($bxc,$axb);
+}
+
+sub ROUND_16_XX {
+my $i=shift;
+
+$code.=<<___;
+	movdqa	`&Xi_off($i+1)`,$Xn
+	paddd	`&Xi_off($i+9)`,$Xi		# Xi+=X[i+9]
+
+	movdqa	$Xn,$sigma
+	movdqa	$Xn,$t2
+	psrld	\$3,$sigma
+	movdqa	$Xn,$t3
+
+	psrld	\$7,$t2
+	movdqa	`&Xi_off($i+14)`,$t1
+	pslld	\$14,$t3
+	pxor	$t2,$sigma
+	psrld	\$18-7,$t2
+	movdqa	$t1,$axb			# borrow $axb
+	pxor	$t3,$sigma
+	pslld	\$25-14,$t3
+	pxor	$t2,$sigma
+	psrld	\$10,$t1
+	movdqa	$axb,$t2
+
+	psrld	\$17,$axb
+	pxor	$t3,$sigma			# sigma0(X[i+1])
+	pslld	\$13,$t2
+	 paddd	$sigma,$Xi			# Xi+=sigma0(e)
+	pxor	$axb,$t1
+	psrld	\$19-17,$axb
+	pxor	$t2,$t1
+	pslld	\$15-13,$t2
+	pxor	$axb,$t1
+	pxor	$t2,$t1				# sigma0(X[i+14])
+	paddd	$t1,$Xi				# Xi+=sigma1(X[i+14])
+___
+	&ROUND_00_15($i,@_);
+	($Xi,$Xn)=($Xn,$Xi);
+}
+
+$code.=<<___;
+.text
+
+.extern	OPENSSL_ia32cap_P
+
+.globl	sha256_multi_block
+.type	sha256_multi_block,\@function,3
+.align	32
+sha256_multi_block:
+.cfi_startproc
+	mov	OPENSSL_ia32cap_P+4(%rip),%rcx
+	bt	\$61,%rcx			# check SHA bit
+	jc	_shaext_shortcut
+___
+$code.=<<___ if ($avx);
+	test	\$`1<<28`,%ecx
+	jnz	_avx_shortcut
+___
+$code.=<<___;
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+___
+$code.=<<___ if ($win64);
+	lea	-0xa8(%rsp),%rsp
+	movaps	%xmm6,(%rsp)
+	movaps	%xmm7,0x10(%rsp)
+	movaps	%xmm8,0x20(%rsp)
+	movaps	%xmm9,0x30(%rsp)
+	movaps	%xmm10,-0x78(%rax)
+	movaps	%xmm11,-0x68(%rax)
+	movaps	%xmm12,-0x58(%rax)
+	movaps	%xmm13,-0x48(%rax)
+	movaps	%xmm14,-0x38(%rax)
+	movaps	%xmm15,-0x28(%rax)
+___
+$code.=<<___;
+	sub	\$`$REG_SZ*18`, %rsp
+	and	\$-256,%rsp
+	mov	%rax,`$REG_SZ*17`(%rsp)		# original %rsp
+.cfi_cfa_expression	%rsp+`$REG_SZ*17`,deref,+8
+.Lbody:
+	lea	K256+128(%rip),$Tbl
+	lea	`$REG_SZ*16`(%rsp),%rbx
+	lea	0x80($ctx),$ctx			# size optimization
+
+.Loop_grande:
+	mov	$num,`$REG_SZ*17+8`(%rsp)	# original $num
+	xor	$num,$num
+___
+for($i=0;$i<4;$i++) {
+    $code.=<<___;
+	mov	`16*$i+0`($inp),@ptr[$i]	# input pointer
+	mov	`16*$i+8`($inp),%ecx		# number of blocks
+	cmp	$num,%ecx
+	cmovg	%ecx,$num			# find maximum
+	test	%ecx,%ecx
+	mov	%ecx,`4*$i`(%rbx)		# initialize counters
+	cmovle	$Tbl,@ptr[$i]			# cancel input
+___
+}
+$code.=<<___;
+	test	$num,$num
+	jz	.Ldone
+
+	movdqu	0x00-0x80($ctx),$A		# load context
+	 lea	128(%rsp),%rax
+	movdqu	0x20-0x80($ctx),$B
+	movdqu	0x40-0x80($ctx),$C
+	movdqu	0x60-0x80($ctx),$D
+	movdqu	0x80-0x80($ctx),$E
+	movdqu	0xa0-0x80($ctx),$F
+	movdqu	0xc0-0x80($ctx),$G
+	movdqu	0xe0-0x80($ctx),$H
+	movdqu	.Lpbswap(%rip),$Xn
+	jmp	.Loop
+
+.align	32
+.Loop:
+	movdqa	$C,$bxc
+	pxor	$B,$bxc				# magic seed
+___
+for($i=0;$i<16;$i++)	{ &ROUND_00_15($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	movdqu	`&Xi_off($i)`,$Xi
+	mov	\$3,%ecx
+	jmp	.Loop_16_xx
+.align	32
+.Loop_16_xx:
+___
+for(;$i<32;$i++)	{ &ROUND_16_XX($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	dec	%ecx
+	jnz	.Loop_16_xx
+
+	mov	\$1,%ecx
+	lea	K256+128(%rip),$Tbl
+
+	movdqa	(%rbx),$sigma			# pull counters
+	cmp	4*0(%rbx),%ecx			# examine counters
+	pxor	$t1,$t1
+	cmovge	$Tbl,@ptr[0]			# cancel input
+	cmp	4*1(%rbx),%ecx
+	movdqa	$sigma,$Xn
+	cmovge	$Tbl,@ptr[1]
+	cmp	4*2(%rbx),%ecx
+	pcmpgtd	$t1,$Xn				# mask value
+	cmovge	$Tbl,@ptr[2]
+	cmp	4*3(%rbx),%ecx
+	paddd	$Xn,$sigma			# counters--
+	cmovge	$Tbl,@ptr[3]
+
+	movdqu	0x00-0x80($ctx),$t1
+	pand	$Xn,$A
+	movdqu	0x20-0x80($ctx),$t2
+	pand	$Xn,$B
+	movdqu	0x40-0x80($ctx),$t3
+	pand	$Xn,$C
+	movdqu	0x60-0x80($ctx),$Xi
+	pand	$Xn,$D
+	paddd	$t1,$A
+	movdqu	0x80-0x80($ctx),$t1
+	pand	$Xn,$E
+	paddd	$t2,$B
+	movdqu	0xa0-0x80($ctx),$t2
+	pand	$Xn,$F
+	paddd	$t3,$C
+	movdqu	0xc0-0x80($ctx),$t3
+	pand	$Xn,$G
+	paddd	$Xi,$D
+	movdqu	0xe0-0x80($ctx),$Xi
+	pand	$Xn,$H
+	paddd	$t1,$E
+	paddd	$t2,$F
+	movdqu	$A,0x00-0x80($ctx)
+	paddd	$t3,$G
+	movdqu	$B,0x20-0x80($ctx)
+	paddd	$Xi,$H
+	movdqu	$C,0x40-0x80($ctx)
+	movdqu	$D,0x60-0x80($ctx)
+	movdqu	$E,0x80-0x80($ctx)
+	movdqu	$F,0xa0-0x80($ctx)
+	movdqu	$G,0xc0-0x80($ctx)
+	movdqu	$H,0xe0-0x80($ctx)
+
+	movdqa	$sigma,(%rbx)			# save counters
+	movdqa	.Lpbswap(%rip),$Xn
+	dec	$num
+	jnz	.Loop
+
+	mov	`$REG_SZ*17+8`(%rsp),$num
+	lea	$REG_SZ($ctx),$ctx
+	lea	`16*$REG_SZ/4`($inp),$inp
+	dec	$num
+	jnz	.Loop_grande
+
+.Ldone:
+	mov	`$REG_SZ*17`(%rsp),%rax		# original %rsp
+.cfi_def_cfa	%rax,8
+___
+$code.=<<___ if ($win64);
+	movaps	-0xb8(%rax),%xmm6
+	movaps	-0xa8(%rax),%xmm7
+	movaps	-0x98(%rax),%xmm8
+	movaps	-0x88(%rax),%xmm9
+	movaps	-0x78(%rax),%xmm10
+	movaps	-0x68(%rax),%xmm11
+	movaps	-0x58(%rax),%xmm12
+	movaps	-0x48(%rax),%xmm13
+	movaps	-0x38(%rax),%xmm14
+	movaps	-0x28(%rax),%xmm15
+___
+$code.=<<___;
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue:
+	ret
+.cfi_endproc
+.size	sha256_multi_block,.-sha256_multi_block
+___
+						{{{
+my ($Wi,$TMP0,$TMP1,$TMPx,$ABEF0,$CDGH0,$ABEF1,$CDGH1)=map("%xmm$_",(0..3,12..15));
+my @MSG0=map("%xmm$_",(4..7));
+my @MSG1=map("%xmm$_",(8..11));
+
+$code.=<<___;
+.type	sha256_multi_block_shaext,\@function,3
+.align	32
+sha256_multi_block_shaext:
+.cfi_startproc
+_shaext_shortcut:
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+___
+$code.=<<___ if ($win64);
+	lea	-0xa8(%rsp),%rsp
+	movaps	%xmm6,(%rsp)
+	movaps	%xmm7,0x10(%rsp)
+	movaps	%xmm8,0x20(%rsp)
+	movaps	%xmm9,0x30(%rsp)
+	movaps	%xmm10,-0x78(%rax)
+	movaps	%xmm11,-0x68(%rax)
+	movaps	%xmm12,-0x58(%rax)
+	movaps	%xmm13,-0x48(%rax)
+	movaps	%xmm14,-0x38(%rax)
+	movaps	%xmm15,-0x28(%rax)
+___
+$code.=<<___;
+	sub	\$`$REG_SZ*18`,%rsp
+	shl	\$1,$num			# we process pair at a time
+	and	\$-256,%rsp
+	lea	0x80($ctx),$ctx			# size optimization
+	mov	%rax,`$REG_SZ*17`(%rsp)		# original %rsp
+.Lbody_shaext:
+	lea	`$REG_SZ*16`(%rsp),%rbx
+	lea	K256_shaext+0x80(%rip),$Tbl
+
+.Loop_grande_shaext:
+	mov	$num,`$REG_SZ*17+8`(%rsp)	# original $num
+	xor	$num,$num
+___
+for($i=0;$i<2;$i++) {
+    $code.=<<___;
+	mov	`16*$i+0`($inp),@ptr[$i]	# input pointer
+	mov	`16*$i+8`($inp),%ecx		# number of blocks
+	cmp	$num,%ecx
+	cmovg	%ecx,$num			# find maximum
+	test	%ecx,%ecx
+	mov	%ecx,`4*$i`(%rbx)		# initialize counters
+	cmovle	%rsp,@ptr[$i]			# cancel input
+___
+}
+$code.=<<___;
+	test	$num,$num
+	jz	.Ldone_shaext
+
+	movq		0x00-0x80($ctx),$ABEF0		# A1.A0
+	movq		0x20-0x80($ctx),@MSG0[0]	# B1.B0
+	movq		0x40-0x80($ctx),$CDGH0		# C1.C0
+	movq		0x60-0x80($ctx),@MSG0[1]	# D1.D0
+	movq		0x80-0x80($ctx),@MSG1[0]	# E1.E0
+	movq		0xa0-0x80($ctx),@MSG1[1]	# F1.F0
+	movq		0xc0-0x80($ctx),@MSG1[2]	# G1.G0
+	movq		0xe0-0x80($ctx),@MSG1[3]	# H1.H0
+
+	punpckldq	@MSG0[0],$ABEF0			# B1.A1.B0.A0
+	punpckldq	@MSG0[1],$CDGH0			# D1.C1.D0.C0
+	punpckldq	@MSG1[1],@MSG1[0]		# F1.E1.F0.E0
+	punpckldq	@MSG1[3],@MSG1[2]		# H1.G1.H0.G0
+	movdqa		K256_shaext-0x10(%rip),$TMPx	# byte swap
+
+	movdqa		$ABEF0,$ABEF1
+	movdqa		$CDGH0,$CDGH1
+	punpcklqdq	@MSG1[0],$ABEF0			# F0.E0.B0.A0
+	punpcklqdq	@MSG1[2],$CDGH0			# H0.G0.D0.C0
+	punpckhqdq	@MSG1[0],$ABEF1			# F1.E1.B1.A1
+	punpckhqdq	@MSG1[2],$CDGH1			# H1.G1.D1.C1
+
+	pshufd		\$0b00011011,$ABEF0,$ABEF0
+	pshufd		\$0b00011011,$CDGH0,$CDGH0
+	pshufd		\$0b00011011,$ABEF1,$ABEF1
+	pshufd		\$0b00011011,$CDGH1,$CDGH1
+	jmp		.Loop_shaext
+
+.align	32
+.Loop_shaext:
+	movdqu		0x00(@ptr[0]),@MSG0[0]
+	 movdqu		0x00(@ptr[1]),@MSG1[0]
+	movdqu		0x10(@ptr[0]),@MSG0[1]
+	 movdqu		0x10(@ptr[1]),@MSG1[1]
+	movdqu		0x20(@ptr[0]),@MSG0[2]
+	pshufb		$TMPx,@MSG0[0]
+	 movdqu		0x20(@ptr[1]),@MSG1[2]
+	 pshufb		$TMPx,@MSG1[0]
+	movdqu		0x30(@ptr[0]),@MSG0[3]
+	lea		0x40(@ptr[0]),@ptr[0]
+	 movdqu		0x30(@ptr[1]),@MSG1[3]
+	 lea		0x40(@ptr[1]),@ptr[1]
+
+	movdqa		0*16-0x80($Tbl),$Wi
+	pshufb		$TMPx,@MSG0[1]
+	paddd		@MSG0[0],$Wi
+	pxor		$ABEF0,@MSG0[0]		# black magic
+	movdqa		$Wi,$TMP0
+	 movdqa		0*16-0x80($Tbl),$TMP1
+	 pshufb		$TMPx,@MSG1[1]
+	 paddd		@MSG1[0],$TMP1
+	movdqa		$CDGH0,0x50(%rsp)	# offload
+	sha256rnds2	$ABEF0,$CDGH0		# 0-3
+	 pxor		$ABEF1,@MSG1[0]		# black magic
+	 movdqa		$TMP1,$Wi
+	 movdqa		$CDGH1,0x70(%rsp)
+	 sha256rnds2	$ABEF1,$CDGH1		# 0-3
+	pshufd		\$0x0e,$TMP0,$Wi
+	pxor		$ABEF0,@MSG0[0]		# black magic
+	movdqa		$ABEF0,0x40(%rsp)	# offload
+	sha256rnds2	$CDGH0,$ABEF0
+	 pshufd		\$0x0e,$TMP1,$Wi
+	 pxor		$ABEF1,@MSG1[0]		# black magic
+	 movdqa		$ABEF1,0x60(%rsp)
+	movdqa		1*16-0x80($Tbl),$TMP0
+	paddd		@MSG0[1],$TMP0
+	pshufb		$TMPx,@MSG0[2]
+	 sha256rnds2	$CDGH1,$ABEF1
+
+	movdqa		$TMP0,$Wi
+	 movdqa		1*16-0x80($Tbl),$TMP1
+	 paddd		@MSG1[1],$TMP1
+	sha256rnds2	$ABEF0,$CDGH0		# 4-7
+	 movdqa		$TMP1,$Wi
+	prefetcht0	127(@ptr[0])
+	pshufb		$TMPx,@MSG0[3]
+	 pshufb		$TMPx,@MSG1[2]
+	 prefetcht0	127(@ptr[1])
+	 sha256rnds2	$ABEF1,$CDGH1		# 4-7
+	pshufd		\$0x0e,$TMP0,$Wi
+	 pshufb		$TMPx,@MSG1[3]
+	sha256msg1	@MSG0[1],@MSG0[0]
+	sha256rnds2	$CDGH0,$ABEF0
+	 pshufd		\$0x0e,$TMP1,$Wi
+	movdqa		2*16-0x80($Tbl),$TMP0
+	paddd		@MSG0[2],$TMP0
+	 sha256rnds2	$CDGH1,$ABEF1
+
+	movdqa		$TMP0,$Wi
+	 movdqa		2*16-0x80($Tbl),$TMP1
+	 paddd		@MSG1[2],$TMP1
+	sha256rnds2	$ABEF0,$CDGH0		# 8-11
+	 sha256msg1	@MSG1[1],@MSG1[0]
+	 movdqa		$TMP1,$Wi
+	movdqa		@MSG0[3],$TMPx
+	 sha256rnds2	$ABEF1,$CDGH1		# 8-11
+	pshufd		\$0x0e,$TMP0,$Wi
+	palignr		\$4,@MSG0[2],$TMPx
+	paddd		$TMPx,@MSG0[0]
+	 movdqa		@MSG1[3],$TMPx
+	 palignr	\$4,@MSG1[2],$TMPx
+	sha256msg1	@MSG0[2],@MSG0[1]
+	sha256rnds2	$CDGH0,$ABEF0
+	 pshufd		\$0x0e,$TMP1,$Wi
+	movdqa		3*16-0x80($Tbl),$TMP0
+	paddd		@MSG0[3],$TMP0
+	 sha256rnds2	$CDGH1,$ABEF1
+	 sha256msg1	@MSG1[2],@MSG1[1]
+
+	movdqa		$TMP0,$Wi
+	 movdqa		3*16-0x80($Tbl),$TMP1
+	 paddd		$TMPx,@MSG1[0]
+	 paddd		@MSG1[3],$TMP1
+	sha256msg2	@MSG0[3],@MSG0[0]
+	sha256rnds2	$ABEF0,$CDGH0		# 12-15
+	 movdqa		$TMP1,$Wi
+	movdqa		@MSG0[0],$TMPx
+	palignr		\$4,@MSG0[3],$TMPx
+	 sha256rnds2	$ABEF1,$CDGH1		# 12-15
+	 sha256msg2	@MSG1[3],@MSG1[0]
+	pshufd		\$0x0e,$TMP0,$Wi
+	paddd		$TMPx,@MSG0[1]
+	 movdqa		@MSG1[0],$TMPx
+	 palignr	\$4,@MSG1[3],$TMPx
+	sha256msg1	@MSG0[3],@MSG0[2]
+	sha256rnds2	$CDGH0,$ABEF0
+	 pshufd		\$0x0e,$TMP1,$Wi
+	movdqa		4*16-0x80($Tbl),$TMP0
+	paddd		@MSG0[0],$TMP0
+	 sha256rnds2	$CDGH1,$ABEF1
+	 sha256msg1	@MSG1[3],@MSG1[2]
+___
+for($i=4;$i<16-3;$i++) {
+$code.=<<___;
+	movdqa		$TMP0,$Wi
+	 movdqa		$i*16-0x80($Tbl),$TMP1
+	 paddd		$TMPx,@MSG1[1]
+	 paddd		@MSG1[0],$TMP1
+	sha256msg2	@MSG0[0],@MSG0[1]
+	sha256rnds2	$ABEF0,$CDGH0		# 16-19...
+	 movdqa		$TMP1,$Wi
+	movdqa		@MSG0[1],$TMPx
+	palignr		\$4,@MSG0[0],$TMPx
+	 sha256rnds2	$ABEF1,$CDGH1		# 16-19...
+	 sha256msg2	@MSG1[0],@MSG1[1]
+	pshufd		\$0x0e,$TMP0,$Wi
+	paddd		$TMPx,@MSG0[2]
+	 movdqa		@MSG1[1],$TMPx
+	 palignr	\$4,@MSG1[0],$TMPx
+	sha256msg1	@MSG0[0],@MSG0[3]
+	sha256rnds2	$CDGH0,$ABEF0
+	 pshufd		\$0x0e,$TMP1,$Wi
+	movdqa		`($i+1)*16`-0x80($Tbl),$TMP0
+	paddd		@MSG0[1],$TMP0
+	 sha256rnds2	$CDGH1,$ABEF1
+	 sha256msg1	@MSG1[0],@MSG1[3]
+___
+	push(@MSG0,shift(@MSG0));	push(@MSG1,shift(@MSG1));
+}
+$code.=<<___;
+	movdqa		$TMP0,$Wi
+	 movdqa		13*16-0x80($Tbl),$TMP1
+	 paddd		$TMPx,@MSG1[1]
+	 paddd		@MSG1[0],$TMP1
+	sha256msg2	@MSG0[0],@MSG0[1]
+	sha256rnds2	$ABEF0,$CDGH0		# 52-55
+	 movdqa		$TMP1,$Wi
+	movdqa		@MSG0[1],$TMPx
+	palignr		\$4,@MSG0[0],$TMPx
+	 sha256rnds2	$ABEF1,$CDGH1		# 52-55
+	 sha256msg2	@MSG1[0],@MSG1[1]
+	pshufd		\$0x0e,$TMP0,$Wi
+	paddd		$TMPx,@MSG0[2]
+	 movdqa		@MSG1[1],$TMPx
+	 palignr	\$4,@MSG1[0],$TMPx
+	nop
+	sha256rnds2	$CDGH0,$ABEF0
+	 pshufd		\$0x0e,$TMP1,$Wi
+	movdqa		14*16-0x80($Tbl),$TMP0
+	paddd		@MSG0[1],$TMP0
+	 sha256rnds2	$CDGH1,$ABEF1
+
+	movdqa		$TMP0,$Wi
+	 movdqa		14*16-0x80($Tbl),$TMP1
+	 paddd		$TMPx,@MSG1[2]
+	 paddd		@MSG1[1],$TMP1
+	sha256msg2	@MSG0[1],@MSG0[2]
+	nop
+	sha256rnds2	$ABEF0,$CDGH0		# 56-59
+	 movdqa		$TMP1,$Wi
+	  mov		\$1,%ecx
+	  pxor		@MSG0[1],@MSG0[1]	# zero
+	 sha256rnds2	$ABEF1,$CDGH1		# 56-59
+	 sha256msg2	@MSG1[1],@MSG1[2]
+	pshufd		\$0x0e,$TMP0,$Wi
+	movdqa		15*16-0x80($Tbl),$TMP0
+	paddd		@MSG0[2],$TMP0
+	  movq		(%rbx),@MSG0[2]		# pull counters
+	  nop
+	sha256rnds2	$CDGH0,$ABEF0
+	 pshufd		\$0x0e,$TMP1,$Wi
+	 movdqa		15*16-0x80($Tbl),$TMP1
+	 paddd		@MSG1[2],$TMP1
+	 sha256rnds2	$CDGH1,$ABEF1
+
+	movdqa		$TMP0,$Wi
+	  cmp		4*0(%rbx),%ecx		# examine counters
+	  cmovge	%rsp,@ptr[0]		# cancel input
+	  cmp		4*1(%rbx),%ecx
+	  cmovge	%rsp,@ptr[1]
+	  pshufd	\$0x00,@MSG0[2],@MSG1[0]
+	sha256rnds2	$ABEF0,$CDGH0		# 60-63
+	 movdqa		$TMP1,$Wi
+	  pshufd	\$0x55,@MSG0[2],@MSG1[1]
+	  movdqa	@MSG0[2],@MSG1[2]
+	 sha256rnds2	$ABEF1,$CDGH1		# 60-63
+	pshufd		\$0x0e,$TMP0,$Wi
+	  pcmpgtd	@MSG0[1],@MSG1[0]
+	  pcmpgtd	@MSG0[1],@MSG1[1]
+	sha256rnds2	$CDGH0,$ABEF0
+	 pshufd		\$0x0e,$TMP1,$Wi
+	  pcmpgtd	@MSG0[1],@MSG1[2]	# counter mask
+	  movdqa	K256_shaext-0x10(%rip),$TMPx
+	 sha256rnds2	$CDGH1,$ABEF1
+
+	pand		@MSG1[0],$CDGH0
+	 pand		@MSG1[1],$CDGH1
+	pand		@MSG1[0],$ABEF0
+	 pand		@MSG1[1],$ABEF1
+	paddd		@MSG0[2],@MSG1[2]	# counters--
+
+	paddd		0x50(%rsp),$CDGH0
+	 paddd		0x70(%rsp),$CDGH1
+	paddd		0x40(%rsp),$ABEF0
+	 paddd		0x60(%rsp),$ABEF1
+
+	movq		@MSG1[2],(%rbx)		# save counters
+	dec		$num
+	jnz		.Loop_shaext
+
+	mov		`$REG_SZ*17+8`(%rsp),$num
+
+	pshufd		\$0b00011011,$ABEF0,$ABEF0
+	pshufd		\$0b00011011,$CDGH0,$CDGH0
+	pshufd		\$0b00011011,$ABEF1,$ABEF1
+	pshufd		\$0b00011011,$CDGH1,$CDGH1
+
+	movdqa		$ABEF0,@MSG0[0]
+	movdqa		$CDGH0,@MSG0[1]
+	punpckldq	$ABEF1,$ABEF0			# B1.B0.A1.A0
+	punpckhdq	$ABEF1,@MSG0[0]			# F1.F0.E1.E0
+	punpckldq	$CDGH1,$CDGH0			# D1.D0.C1.C0
+	punpckhdq	$CDGH1,@MSG0[1]			# H1.H0.G1.G0
+
+	movq		$ABEF0,0x00-0x80($ctx)		# A1.A0
+	psrldq		\$8,$ABEF0
+	movq		@MSG0[0],0x80-0x80($ctx)	# E1.E0
+	psrldq		\$8,@MSG0[0]
+	movq		$ABEF0,0x20-0x80($ctx)		# B1.B0
+	movq		@MSG0[0],0xa0-0x80($ctx)	# F1.F0
+
+	movq		$CDGH0,0x40-0x80($ctx)		# C1.C0
+	psrldq		\$8,$CDGH0
+	movq		@MSG0[1],0xc0-0x80($ctx)	# G1.G0
+	psrldq		\$8,@MSG0[1]
+	movq		$CDGH0,0x60-0x80($ctx)		# D1.D0
+	movq		@MSG0[1],0xe0-0x80($ctx)	# H1.H0
+
+	lea	`$REG_SZ/2`($ctx),$ctx
+	lea	`16*2`($inp),$inp
+	dec	$num
+	jnz	.Loop_grande_shaext
+
+.Ldone_shaext:
+	#mov	`$REG_SZ*17`(%rsp),%rax		# original %rsp
+___
+$code.=<<___ if ($win64);
+	movaps	-0xb8(%rax),%xmm6
+	movaps	-0xa8(%rax),%xmm7
+	movaps	-0x98(%rax),%xmm8
+	movaps	-0x88(%rax),%xmm9
+	movaps	-0x78(%rax),%xmm10
+	movaps	-0x68(%rax),%xmm11
+	movaps	-0x58(%rax),%xmm12
+	movaps	-0x48(%rax),%xmm13
+	movaps	-0x38(%rax),%xmm14
+	movaps	-0x28(%rax),%xmm15
+___
+$code.=<<___;
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue_shaext:
+	ret
+.cfi_endproc
+.size	sha256_multi_block_shaext,.-sha256_multi_block_shaext
+___
+						}}}
+						if ($avx) {{{
+sub ROUND_00_15_avx {
+my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
+
+$code.=<<___ if ($i<15 && $REG_SZ==16);
+	vmovd		`4*$i`(@ptr[0]),$Xi
+	vmovd		`4*$i`(@ptr[1]),$t1
+	vpinsrd		\$1,`4*$i`(@ptr[2]),$Xi,$Xi
+	vpinsrd		\$1,`4*$i`(@ptr[3]),$t1,$t1
+	vpunpckldq	$t1,$Xi,$Xi
+	vpshufb		$Xn,$Xi,$Xi
+___
+$code.=<<___ if ($i==15 && $REG_SZ==16);
+	vmovd		`4*$i`(@ptr[0]),$Xi
+	 lea		`16*4`(@ptr[0]),@ptr[0]
+	vmovd		`4*$i`(@ptr[1]),$t1
+	 lea		`16*4`(@ptr[1]),@ptr[1]
+	vpinsrd		\$1,`4*$i`(@ptr[2]),$Xi,$Xi
+	 lea		`16*4`(@ptr[2]),@ptr[2]
+	vpinsrd		\$1,`4*$i`(@ptr[3]),$t1,$t1
+	 lea		`16*4`(@ptr[3]),@ptr[3]
+	vpunpckldq	$t1,$Xi,$Xi
+	vpshufb		$Xn,$Xi,$Xi
+___
+$code.=<<___ if ($i<15 && $REG_SZ==32);
+	vmovd		`4*$i`(@ptr[0]),$Xi
+	vmovd		`4*$i`(@ptr[4]),$t1
+	vmovd		`4*$i`(@ptr[1]),$t2
+	vmovd		`4*$i`(@ptr[5]),$t3
+	vpinsrd		\$1,`4*$i`(@ptr[2]),$Xi,$Xi
+	vpinsrd		\$1,`4*$i`(@ptr[6]),$t1,$t1
+	vpinsrd		\$1,`4*$i`(@ptr[3]),$t2,$t2
+	vpunpckldq	$t2,$Xi,$Xi
+	vpinsrd		\$1,`4*$i`(@ptr[7]),$t3,$t3
+	vpunpckldq	$t3,$t1,$t1
+	vinserti128	$t1,$Xi,$Xi
+	vpshufb		$Xn,$Xi,$Xi
+___
+$code.=<<___ if ($i==15 && $REG_SZ==32);
+	vmovd		`4*$i`(@ptr[0]),$Xi
+	 lea		`16*4`(@ptr[0]),@ptr[0]
+	vmovd		`4*$i`(@ptr[4]),$t1
+	 lea		`16*4`(@ptr[4]),@ptr[4]
+	vmovd		`4*$i`(@ptr[1]),$t2
+	 lea		`16*4`(@ptr[1]),@ptr[1]
+	vmovd		`4*$i`(@ptr[5]),$t3
+	 lea		`16*4`(@ptr[5]),@ptr[5]
+	vpinsrd		\$1,`4*$i`(@ptr[2]),$Xi,$Xi
+	 lea		`16*4`(@ptr[2]),@ptr[2]
+	vpinsrd		\$1,`4*$i`(@ptr[6]),$t1,$t1
+	 lea		`16*4`(@ptr[6]),@ptr[6]
+	vpinsrd		\$1,`4*$i`(@ptr[3]),$t2,$t2
+	 lea		`16*4`(@ptr[3]),@ptr[3]
+	vpunpckldq	$t2,$Xi,$Xi
+	vpinsrd		\$1,`4*$i`(@ptr[7]),$t3,$t3
+	 lea		`16*4`(@ptr[7]),@ptr[7]
+	vpunpckldq	$t3,$t1,$t1
+	vinserti128	$t1,$Xi,$Xi
+	vpshufb		$Xn,$Xi,$Xi
+___
+$code.=<<___;
+	vpsrld	\$6,$e,$sigma
+	vpslld	\$26,$e,$t3
+	vmovdqu	$Xi,`&Xi_off($i)`
+	 vpaddd	$h,$Xi,$Xi			# Xi+=h
+
+	vpsrld	\$11,$e,$t2
+	vpxor	$t3,$sigma,$sigma
+	vpslld	\$21,$e,$t3
+	 vpaddd	`32*($i%8)-128`($Tbl),$Xi,$Xi	# Xi+=K[round]
+	vpxor	$t2,$sigma,$sigma
+
+	vpsrld	\$25,$e,$t2
+	vpxor	$t3,$sigma,$sigma
+	 `"prefetcht0	63(@ptr[0])"		if ($i==15)`
+	vpslld	\$7,$e,$t3
+	 vpandn	$g,$e,$t1
+	 vpand	$f,$e,$axb			# borrow $axb
+	 `"prefetcht0	63(@ptr[1])"		if ($i==15)`
+	vpxor	$t2,$sigma,$sigma
+
+	vpsrld	\$2,$a,$h			# borrow $h
+	vpxor	$t3,$sigma,$sigma		# Sigma1(e)
+	 `"prefetcht0	63(@ptr[2])"		if ($i==15)`
+	vpslld	\$30,$a,$t2
+	 vpxor	$axb,$t1,$t1			# Ch(e,f,g)
+	 vpxor	$a,$b,$axb			# a^b, b^c in next round
+	 `"prefetcht0	63(@ptr[3])"		if ($i==15)`
+	vpxor	$t2,$h,$h
+	vpaddd	$sigma,$Xi,$Xi			# Xi+=Sigma1(e)
+
+	vpsrld	\$13,$a,$t2
+	 `"prefetcht0	63(@ptr[4])"		if ($i==15 && $REG_SZ==32)`
+	vpslld	\$19,$a,$t3
+	 vpaddd	$t1,$Xi,$Xi			# Xi+=Ch(e,f,g)
+	 vpand	$axb,$bxc,$bxc
+	 `"prefetcht0	63(@ptr[5])"		if ($i==15 && $REG_SZ==32)`
+	vpxor	$t2,$h,$sigma
+
+	vpsrld	\$22,$a,$t2
+	vpxor	$t3,$sigma,$sigma
+	 `"prefetcht0	63(@ptr[6])"		if ($i==15 && $REG_SZ==32)`
+	vpslld	\$10,$a,$t3
+	 vpxor	$bxc,$b,$h			# h=Maj(a,b,c)=Ch(a^b,c,b)
+	 vpaddd	$Xi,$d,$d			# d+=Xi
+	 `"prefetcht0	63(@ptr[7])"		if ($i==15 && $REG_SZ==32)`
+	vpxor	$t2,$sigma,$sigma
+	vpxor	$t3,$sigma,$sigma		# Sigma0(a)
+
+	vpaddd	$Xi,$h,$h			# h+=Xi
+	vpaddd	$sigma,$h,$h			# h+=Sigma0(a)
+___
+$code.=<<___ if (($i%8)==7);
+	add	\$`32*8`,$Tbl
+___
+	($axb,$bxc)=($bxc,$axb);
+}
+
+sub ROUND_16_XX_avx {
+my $i=shift;
+
+$code.=<<___;
+	vmovdqu	`&Xi_off($i+1)`,$Xn
+	vpaddd	`&Xi_off($i+9)`,$Xi,$Xi		# Xi+=X[i+9]
+
+	vpsrld	\$3,$Xn,$sigma
+	vpsrld	\$7,$Xn,$t2
+	vpslld	\$25,$Xn,$t3
+	vpxor	$t2,$sigma,$sigma
+	vpsrld	\$18,$Xn,$t2
+	vpxor	$t3,$sigma,$sigma
+	vpslld	\$14,$Xn,$t3
+	vmovdqu	`&Xi_off($i+14)`,$t1
+	vpsrld	\$10,$t1,$axb			# borrow $axb
+
+	vpxor	$t2,$sigma,$sigma
+	vpsrld	\$17,$t1,$t2
+	vpxor	$t3,$sigma,$sigma		# sigma0(X[i+1])
+	vpslld	\$15,$t1,$t3
+	 vpaddd	$sigma,$Xi,$Xi			# Xi+=sigma0(e)
+	vpxor	$t2,$axb,$sigma
+	vpsrld	\$19,$t1,$t2
+	vpxor	$t3,$sigma,$sigma
+	vpslld	\$13,$t1,$t3
+	vpxor	$t2,$sigma,$sigma
+	vpxor	$t3,$sigma,$sigma		# sigma0(X[i+14])
+	vpaddd	$sigma,$Xi,$Xi			# Xi+=sigma1(X[i+14])
+___
+	&ROUND_00_15_avx($i,@_);
+	($Xi,$Xn)=($Xn,$Xi);
+}
+
+$code.=<<___;
+.type	sha256_multi_block_avx,\@function,3
+.align	32
+sha256_multi_block_avx:
+.cfi_startproc
+_avx_shortcut:
+___
+$code.=<<___ if ($avx>1);
+	shr	\$32,%rcx
+	cmp	\$2,$num
+	jb	.Lavx
+	test	\$`1<<5`,%ecx
+	jnz	_avx2_shortcut
+	jmp	.Lavx
+.align	32
+.Lavx:
+___
+$code.=<<___;
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+___
+$code.=<<___ if ($win64);
+	lea	-0xa8(%rsp),%rsp
+	movaps	%xmm6,(%rsp)
+	movaps	%xmm7,0x10(%rsp)
+	movaps	%xmm8,0x20(%rsp)
+	movaps	%xmm9,0x30(%rsp)
+	movaps	%xmm10,-0x78(%rax)
+	movaps	%xmm11,-0x68(%rax)
+	movaps	%xmm12,-0x58(%rax)
+	movaps	%xmm13,-0x48(%rax)
+	movaps	%xmm14,-0x38(%rax)
+	movaps	%xmm15,-0x28(%rax)
+___
+$code.=<<___;
+	sub	\$`$REG_SZ*18`, %rsp
+	and	\$-256,%rsp
+	mov	%rax,`$REG_SZ*17`(%rsp)		# original %rsp
+.cfi_cfa_expression	%rsp+`$REG_SZ*17`,deref,+8
+.Lbody_avx:
+	lea	K256+128(%rip),$Tbl
+	lea	`$REG_SZ*16`(%rsp),%rbx
+	lea	0x80($ctx),$ctx			# size optimization
+
+.Loop_grande_avx:
+	mov	$num,`$REG_SZ*17+8`(%rsp)	# original $num
+	xor	$num,$num
+___
+for($i=0;$i<4;$i++) {
+    $code.=<<___;
+	mov	`16*$i+0`($inp),@ptr[$i]	# input pointer
+	mov	`16*$i+8`($inp),%ecx		# number of blocks
+	cmp	$num,%ecx
+	cmovg	%ecx,$num			# find maximum
+	test	%ecx,%ecx
+	mov	%ecx,`4*$i`(%rbx)		# initialize counters
+	cmovle	$Tbl,@ptr[$i]			# cancel input
+___
+}
+$code.=<<___;
+	test	$num,$num
+	jz	.Ldone_avx
+
+	vmovdqu	0x00-0x80($ctx),$A		# load context
+	 lea	128(%rsp),%rax
+	vmovdqu	0x20-0x80($ctx),$B
+	vmovdqu	0x40-0x80($ctx),$C
+	vmovdqu	0x60-0x80($ctx),$D
+	vmovdqu	0x80-0x80($ctx),$E
+	vmovdqu	0xa0-0x80($ctx),$F
+	vmovdqu	0xc0-0x80($ctx),$G
+	vmovdqu	0xe0-0x80($ctx),$H
+	vmovdqu	.Lpbswap(%rip),$Xn
+	jmp	.Loop_avx
+
+.align	32
+.Loop_avx:
+	vpxor	$B,$C,$bxc			# magic seed
+___
+for($i=0;$i<16;$i++)	{ &ROUND_00_15_avx($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	vmovdqu	`&Xi_off($i)`,$Xi
+	mov	\$3,%ecx
+	jmp	.Loop_16_xx_avx
+.align	32
+.Loop_16_xx_avx:
+___
+for(;$i<32;$i++)	{ &ROUND_16_XX_avx($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	dec	%ecx
+	jnz	.Loop_16_xx_avx
+
+	mov	\$1,%ecx
+	lea	K256+128(%rip),$Tbl
+___
+for($i=0;$i<4;$i++) {
+    $code.=<<___;
+	cmp	`4*$i`(%rbx),%ecx		# examine counters
+	cmovge	$Tbl,@ptr[$i]			# cancel input
+___
+}
+$code.=<<___;
+	vmovdqa	(%rbx),$sigma			# pull counters
+	vpxor	$t1,$t1,$t1
+	vmovdqa	$sigma,$Xn
+	vpcmpgtd $t1,$Xn,$Xn			# mask value
+	vpaddd	$Xn,$sigma,$sigma		# counters--
+
+	vmovdqu	0x00-0x80($ctx),$t1
+	vpand	$Xn,$A,$A
+	vmovdqu	0x20-0x80($ctx),$t2
+	vpand	$Xn,$B,$B
+	vmovdqu	0x40-0x80($ctx),$t3
+	vpand	$Xn,$C,$C
+	vmovdqu	0x60-0x80($ctx),$Xi
+	vpand	$Xn,$D,$D
+	vpaddd	$t1,$A,$A
+	vmovdqu	0x80-0x80($ctx),$t1
+	vpand	$Xn,$E,$E
+	vpaddd	$t2,$B,$B
+	vmovdqu	0xa0-0x80($ctx),$t2
+	vpand	$Xn,$F,$F
+	vpaddd	$t3,$C,$C
+	vmovdqu	0xc0-0x80($ctx),$t3
+	vpand	$Xn,$G,$G
+	vpaddd	$Xi,$D,$D
+	vmovdqu	0xe0-0x80($ctx),$Xi
+	vpand	$Xn,$H,$H
+	vpaddd	$t1,$E,$E
+	vpaddd	$t2,$F,$F
+	vmovdqu	$A,0x00-0x80($ctx)
+	vpaddd	$t3,$G,$G
+	vmovdqu	$B,0x20-0x80($ctx)
+	vpaddd	$Xi,$H,$H
+	vmovdqu	$C,0x40-0x80($ctx)
+	vmovdqu	$D,0x60-0x80($ctx)
+	vmovdqu	$E,0x80-0x80($ctx)
+	vmovdqu	$F,0xa0-0x80($ctx)
+	vmovdqu	$G,0xc0-0x80($ctx)
+	vmovdqu	$H,0xe0-0x80($ctx)
+
+	vmovdqu	$sigma,(%rbx)			# save counters
+	vmovdqu	.Lpbswap(%rip),$Xn
+	dec	$num
+	jnz	.Loop_avx
+
+	mov	`$REG_SZ*17+8`(%rsp),$num
+	lea	$REG_SZ($ctx),$ctx
+	lea	`16*$REG_SZ/4`($inp),$inp
+	dec	$num
+	jnz	.Loop_grande_avx
+
+.Ldone_avx:
+	mov	`$REG_SZ*17`(%rsp),%rax		# original %rsp
+.cfi_def_cfa	%rax,8
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	movaps	-0xb8(%rax),%xmm6
+	movaps	-0xa8(%rax),%xmm7
+	movaps	-0x98(%rax),%xmm8
+	movaps	-0x88(%rax),%xmm9
+	movaps	-0x78(%rax),%xmm10
+	movaps	-0x68(%rax),%xmm11
+	movaps	-0x58(%rax),%xmm12
+	movaps	-0x48(%rax),%xmm13
+	movaps	-0x38(%rax),%xmm14
+	movaps	-0x28(%rax),%xmm15
+___
+$code.=<<___;
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue_avx:
+	ret
+.cfi_endproc
+.size	sha256_multi_block_avx,.-sha256_multi_block_avx
+___
+						if ($avx>1) {
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+
+$REG_SZ=32;
+@ptr=map("%r$_",(12..15,8..11));
+
+@V=($A,$B,$C,$D,$E,$F,$G,$H)=map("%ymm$_",(8..15));
+($t1,$t2,$t3,$axb,$bxc,$Xi,$Xn,$sigma)=map("%ymm$_",(0..7));
+
+$code.=<<___;
+.type	sha256_multi_block_avx2,\@function,3
+.align	32
+sha256_multi_block_avx2:
+.cfi_startproc
+_avx2_shortcut:
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+___
+$code.=<<___ if ($win64);
+	lea	-0xa8(%rsp),%rsp
+	movaps	%xmm6,(%rsp)
+	movaps	%xmm7,0x10(%rsp)
+	movaps	%xmm8,0x20(%rsp)
+	movaps	%xmm9,0x30(%rsp)
+	movaps	%xmm10,0x40(%rsp)
+	movaps	%xmm11,0x50(%rsp)
+	movaps	%xmm12,-0x78(%rax)
+	movaps	%xmm13,-0x68(%rax)
+	movaps	%xmm14,-0x58(%rax)
+	movaps	%xmm15,-0x48(%rax)
+___
+$code.=<<___;
+	sub	\$`$REG_SZ*18`, %rsp
+	and	\$-256,%rsp
+	mov	%rax,`$REG_SZ*17`(%rsp)		# original %rsp
+.cfi_cfa_expression	%rsp+`$REG_SZ*17`,deref,+8
+.Lbody_avx2:
+	lea	K256+128(%rip),$Tbl
+	lea	0x80($ctx),$ctx			# size optimization
+
+.Loop_grande_avx2:
+	mov	$num,`$REG_SZ*17+8`(%rsp)	# original $num
+	xor	$num,$num
+	lea	`$REG_SZ*16`(%rsp),%rbx
+___
+for($i=0;$i<8;$i++) {
+    $code.=<<___;
+	mov	`16*$i+0`($inp),@ptr[$i]	# input pointer
+	mov	`16*$i+8`($inp),%ecx		# number of blocks
+	cmp	$num,%ecx
+	cmovg	%ecx,$num			# find maximum
+	test	%ecx,%ecx
+	mov	%ecx,`4*$i`(%rbx)		# initialize counters
+	cmovle	$Tbl,@ptr[$i]			# cancel input
+___
+}
+$code.=<<___;
+	vmovdqu	0x00-0x80($ctx),$A		# load context
+	 lea	128(%rsp),%rax
+	vmovdqu	0x20-0x80($ctx),$B
+	 lea	256+128(%rsp),%rbx
+	vmovdqu	0x40-0x80($ctx),$C
+	vmovdqu	0x60-0x80($ctx),$D
+	vmovdqu	0x80-0x80($ctx),$E
+	vmovdqu	0xa0-0x80($ctx),$F
+	vmovdqu	0xc0-0x80($ctx),$G
+	vmovdqu	0xe0-0x80($ctx),$H
+	vmovdqu	.Lpbswap(%rip),$Xn
+	jmp	.Loop_avx2
+
+.align	32
+.Loop_avx2:
+	vpxor	$B,$C,$bxc			# magic seed
+___
+for($i=0;$i<16;$i++)	{ &ROUND_00_15_avx($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	vmovdqu	`&Xi_off($i)`,$Xi
+	mov	\$3,%ecx
+	jmp	.Loop_16_xx_avx2
+.align	32
+.Loop_16_xx_avx2:
+___
+for(;$i<32;$i++)	{ &ROUND_16_XX_avx($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	dec	%ecx
+	jnz	.Loop_16_xx_avx2
+
+	mov	\$1,%ecx
+	lea	`$REG_SZ*16`(%rsp),%rbx
+	lea	K256+128(%rip),$Tbl
+___
+for($i=0;$i<8;$i++) {
+    $code.=<<___;
+	cmp	`4*$i`(%rbx),%ecx		# examine counters
+	cmovge	$Tbl,@ptr[$i]			# cancel input
+___
+}
+$code.=<<___;
+	vmovdqa	(%rbx),$sigma			# pull counters
+	vpxor	$t1,$t1,$t1
+	vmovdqa	$sigma,$Xn
+	vpcmpgtd $t1,$Xn,$Xn			# mask value
+	vpaddd	$Xn,$sigma,$sigma		# counters--
+
+	vmovdqu	0x00-0x80($ctx),$t1
+	vpand	$Xn,$A,$A
+	vmovdqu	0x20-0x80($ctx),$t2
+	vpand	$Xn,$B,$B
+	vmovdqu	0x40-0x80($ctx),$t3
+	vpand	$Xn,$C,$C
+	vmovdqu	0x60-0x80($ctx),$Xi
+	vpand	$Xn,$D,$D
+	vpaddd	$t1,$A,$A
+	vmovdqu	0x80-0x80($ctx),$t1
+	vpand	$Xn,$E,$E
+	vpaddd	$t2,$B,$B
+	vmovdqu	0xa0-0x80($ctx),$t2
+	vpand	$Xn,$F,$F
+	vpaddd	$t3,$C,$C
+	vmovdqu	0xc0-0x80($ctx),$t3
+	vpand	$Xn,$G,$G
+	vpaddd	$Xi,$D,$D
+	vmovdqu	0xe0-0x80($ctx),$Xi
+	vpand	$Xn,$H,$H
+	vpaddd	$t1,$E,$E
+	vpaddd	$t2,$F,$F
+	vmovdqu	$A,0x00-0x80($ctx)
+	vpaddd	$t3,$G,$G
+	vmovdqu	$B,0x20-0x80($ctx)
+	vpaddd	$Xi,$H,$H
+	vmovdqu	$C,0x40-0x80($ctx)
+	vmovdqu	$D,0x60-0x80($ctx)
+	vmovdqu	$E,0x80-0x80($ctx)
+	vmovdqu	$F,0xa0-0x80($ctx)
+	vmovdqu	$G,0xc0-0x80($ctx)
+	vmovdqu	$H,0xe0-0x80($ctx)
+
+	vmovdqu	$sigma,(%rbx)			# save counters
+	lea	256+128(%rsp),%rbx
+	vmovdqu	.Lpbswap(%rip),$Xn
+	dec	$num
+	jnz	.Loop_avx2
+
+	#mov	`$REG_SZ*17+8`(%rsp),$num
+	#lea	$REG_SZ($ctx),$ctx
+	#lea	`16*$REG_SZ/4`($inp),$inp
+	#dec	$num
+	#jnz	.Loop_grande_avx2
+
+.Ldone_avx2:
+	mov	`$REG_SZ*17`(%rsp),%rax		# original %rsp
+.cfi_def_cfa	%rax,8
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	movaps	-0xd8(%rax),%xmm6
+	movaps	-0xc8(%rax),%xmm7
+	movaps	-0xb8(%rax),%xmm8
+	movaps	-0xa8(%rax),%xmm9
+	movaps	-0x98(%rax),%xmm10
+	movaps	-0x88(%rax),%xmm11
+	movaps	-0x78(%rax),%xmm12
+	movaps	-0x68(%rax),%xmm13
+	movaps	-0x58(%rax),%xmm14
+	movaps	-0x48(%rax),%xmm15
+___
+$code.=<<___;
+	mov	-48(%rax),%r15
+.cfi_restore	%r15
+	mov	-40(%rax),%r14
+.cfi_restore	%r14
+	mov	-32(%rax),%r13
+.cfi_restore	%r13
+	mov	-24(%rax),%r12
+.cfi_restore	%r12
+	mov	-16(%rax),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rax),%rbx
+.cfi_restore	%rbx
+	lea	(%rax),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue_avx2:
+	ret
+.cfi_endproc
+.size	sha256_multi_block_avx2,.-sha256_multi_block_avx2
+___
+					}	}}}
+$code.=<<___;
+.align	256
+K256:
+___
+sub TABLE {
+    foreach (@_) {
+	$code.=<<___;
+	.long	$_,$_,$_,$_
+	.long	$_,$_,$_,$_
+___
+    }
+}
+&TABLE(	0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,
+	0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,
+	0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,
+	0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,
+	0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,
+	0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,
+	0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,
+	0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,
+	0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,
+	0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,
+	0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,
+	0xd192e819,0xd6990624,0xf40e3585,0x106aa070,
+	0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,
+	0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,
+	0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,
+	0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2 );
+$code.=<<___;
+.Lpbswap:
+	.long	0x00010203,0x04050607,0x08090a0b,0x0c0d0e0f	# pbswap
+	.long	0x00010203,0x04050607,0x08090a0b,0x0c0d0e0f	# pbswap
+K256_shaext:
+	.long	0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5
+	.long	0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5
+	.long	0xd807aa98,0x12835b01,0x243185be,0x550c7dc3
+	.long	0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174
+	.long	0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc
+	.long	0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da
+	.long	0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7
+	.long	0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967
+	.long	0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13
+	.long	0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85
+	.long	0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3
+	.long	0xd192e819,0xd6990624,0xf40e3585,0x106aa070
+	.long	0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5
+	.long	0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3
+	.long	0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208
+	.long	0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2
+	.asciz	"SHA256 multi-block transform for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+if ($win64) {
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	se_handler,\@abi-omnipotent
+.align	16
+se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# end of prologue label
+	cmp	%r10,%rbx		# context->Rip<.Lbody
+	jb	.Lin_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=.Lepilogue
+	jae	.Lin_prologue
+
+	mov	`16*17`(%rax),%rax	# pull saved stack pointer
+
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+
+	lea	-24-10*16(%rax),%rsi
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$20,%ecx
+	.long	0xa548f3fc		# cld; rep movsq
+
+.Lin_prologue:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	se_handler,.-se_handler
+___
+$code.=<<___ if ($avx>1);
+.type	avx2_handler,\@abi-omnipotent
+.align	16
+avx2_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HandlerData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# end of prologue label
+	cmp	%r10,%rbx		# context->Rip<body label
+	jb	.Lin_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lin_prologue
+
+	mov	`32*17`($context),%rax	# pull saved stack pointer
+
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+	lea	-56-10*16(%rax),%rsi
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$20,%ecx
+	.long	0xa548f3fc		# cld; rep movsq
+
+	jmp	.Lin_prologue
+.size	avx2_handler,.-avx2_handler
+___
+$code.=<<___;
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_sha256_multi_block
+	.rva	.LSEH_end_sha256_multi_block
+	.rva	.LSEH_info_sha256_multi_block
+	.rva	.LSEH_begin_sha256_multi_block_shaext
+	.rva	.LSEH_end_sha256_multi_block_shaext
+	.rva	.LSEH_info_sha256_multi_block_shaext
+___
+$code.=<<___ if ($avx);
+	.rva	.LSEH_begin_sha256_multi_block_avx
+	.rva	.LSEH_end_sha256_multi_block_avx
+	.rva	.LSEH_info_sha256_multi_block_avx
+___
+$code.=<<___ if ($avx>1);
+	.rva	.LSEH_begin_sha256_multi_block_avx2
+	.rva	.LSEH_end_sha256_multi_block_avx2
+	.rva	.LSEH_info_sha256_multi_block_avx2
+___
+$code.=<<___;
+.section	.xdata
+.align	8
+.LSEH_info_sha256_multi_block:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lbody,.Lepilogue			# HandlerData[]
+.LSEH_info_sha256_multi_block_shaext:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lbody_shaext,.Lepilogue_shaext		# HandlerData[]
+___
+$code.=<<___ if ($avx);
+.LSEH_info_sha256_multi_block_avx:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lbody_avx,.Lepilogue_avx		# HandlerData[]
+___
+$code.=<<___ if ($avx>1);
+.LSEH_info_sha256_multi_block_avx2:
+	.byte	9,0,0,0
+	.rva	avx2_handler
+	.rva	.Lbody_avx2,.Lepilogue_avx2		# HandlerData[]
+___
+}
+####################################################################
+
+sub rex {
+  local *opcode=shift;
+  my ($dst,$src)=@_;
+  my $rex=0;
+
+    $rex|=0x04			if ($dst>=8);
+    $rex|=0x01			if ($src>=8);
+    unshift @opcode,$rex|0x40	if ($rex);
+}
+
+sub sha256op38 {
+    my $instr = shift;
+    my %opcodelet = (
+		"sha256rnds2" => 0xcb,
+  		"sha256msg1"  => 0xcc,
+		"sha256msg2"  => 0xcd	);
+
+    if (defined($opcodelet{$instr}) && @_[0] =~ /%xmm([0-9]+),\s*%xmm([0-9]+)/) {
+      my @opcode=(0x0f,0x38);
+	rex(\@opcode,$2,$1);
+	push @opcode,$opcodelet{$instr};
+	push @opcode,0xc0|($1&7)|(($2&7)<<3);		# ModR/M
+	return ".byte\t".join(',',@opcode);
+    } else {
+	return $instr."\t".@_[0];
+    }
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval($1)/ge;
+
+	s/\b(sha256[^\s]*)\s+(.*)/sha256op38($1,$2)/geo		or
+
+	s/\b(vmov[dq])\b(.+)%ymm([0-9]+)/$1$2%xmm$3/go		or
+	s/\b(vmovdqu)\b(.+)%x%ymm([0-9]+)/$1$2%xmm$3/go		or
+	s/\b(vpinsr[qd])\b(.+)%ymm([0-9]+),%ymm([0-9]+)/$1$2%xmm$3,%xmm$4/go	or
+	s/\b(vpextr[qd])\b(.+)%ymm([0-9]+)/$1$2%xmm$3/go	or
+	s/\b(vinserti128)\b(\s+)%ymm/$1$2\$1,%xmm/go		or
+	s/\b(vpbroadcast[qd]\s+)%ymm([0-9]+)/$1%xmm$2/go;
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-586.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-586.pl
new file mode 100644
index 000000000..867ce30b9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-586.pl
@@ -0,0 +1,925 @@
+#! /usr/bin/env perl
+# Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# SHA512 block transform for x86. September 2007.
+#
+# May 2013.
+#
+# Add SSSE3 code path, 20-25% improvement [over original SSE2 code].
+#
+# Performance in clock cycles per processed byte (less is better):
+#
+#		gcc	icc	x86 asm	SIMD(*)	x86_64(**)
+# Pentium	100	97	61	-	-
+# PIII		75	77	56	-	-
+# P4		116	95	82	34.6	30.8
+# AMD K8	54	55	36	20.7	9.57
+# Core2		66	57	40	15.9	9.97
+# Westmere	70	-	38	12.2	9.58
+# Sandy Bridge	58	-	35	11.9	11.2
+# Ivy Bridge	50	-	33	11.5	8.17
+# Haswell	46	-	29	11.3	7.66
+# Skylake	40	-	26	13.3	7.25
+# Bulldozer	121	-	50	14.0	13.5
+# VIA Nano	91	-	52	33	14.7
+# Atom		126	-	68	48(***)	14.7
+# Silvermont	97	-	58	42(***)	17.5
+# Goldmont	80	-	48	19.5	12.0
+#
+# (*)	whichever best applicable.
+# (**)	x86_64 assembler performance is presented for reference
+#	purposes, the results are for integer-only code.
+# (***)	paddq is incredibly slow on Atom.
+#
+# IALU code-path is optimized for elder Pentiums. On vanilla Pentium
+# performance improvement over compiler generated code reaches ~60%,
+# while on PIII - ~35%. On newer µ-archs improvement varies from 15%
+# to 50%, but it's less important as they are expected to execute SSE2
+# code-path, which is commonly ~2-3x faster [than compiler generated
+# code]. SSE2 code-path is as fast as original sha512-sse2.pl, even
+# though it does not use 128-bit operations. The latter means that
+# SSE2-aware kernel is no longer required to execute the code. Another
+# difference is that new code optimizes amount of writes, but at the
+# cost of increased data cache "footprint" by 1/2KB.
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output=pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0],$ARGV[$#ARGV] eq "386");
+
+$sse2=0;
+for (@ARGV) { $sse2=1 if (/-DOPENSSL_IA32_SSE2/); }
+
+&external_label("OPENSSL_ia32cap_P") if ($sse2);
+
+$Tlo=&DWP(0,"esp");	$Thi=&DWP(4,"esp");
+$Alo=&DWP(8,"esp");	$Ahi=&DWP(8+4,"esp");
+$Blo=&DWP(16,"esp");	$Bhi=&DWP(16+4,"esp");
+$Clo=&DWP(24,"esp");	$Chi=&DWP(24+4,"esp");
+$Dlo=&DWP(32,"esp");	$Dhi=&DWP(32+4,"esp");
+$Elo=&DWP(40,"esp");	$Ehi=&DWP(40+4,"esp");
+$Flo=&DWP(48,"esp");	$Fhi=&DWP(48+4,"esp");
+$Glo=&DWP(56,"esp");	$Ghi=&DWP(56+4,"esp");
+$Hlo=&DWP(64,"esp");	$Hhi=&DWP(64+4,"esp");
+$K512="ebp";
+
+$Asse2=&QWP(0,"esp");
+$Bsse2=&QWP(8,"esp");
+$Csse2=&QWP(16,"esp");
+$Dsse2=&QWP(24,"esp");
+$Esse2=&QWP(32,"esp");
+$Fsse2=&QWP(40,"esp");
+$Gsse2=&QWP(48,"esp");
+$Hsse2=&QWP(56,"esp");
+
+$A="mm0";	# B-D and
+$E="mm4";	# F-H are commonly loaded to respectively mm1-mm3 and
+		# mm5-mm7, but it's done on on-demand basis...
+$BxC="mm2";	# ... except for B^C
+
+sub BODY_00_15_sse2 {
+    my $phase=shift;
+
+	#&movq	("mm5",$Fsse2);			# load f
+	#&movq	("mm6",$Gsse2);			# load g
+
+	&movq	("mm1",$E);			# %mm1 is sliding right
+	 &pxor	("mm5","mm6");			# f^=g
+	&psrlq	("mm1",14);
+	 &movq	($Esse2,$E);			# modulo-scheduled save e
+	 &pand	("mm5",$E);			# f&=e
+	&psllq	($E,23);			# $E is sliding left
+	 &movq	($A,"mm3")			if ($phase<2);
+	 &movq	(&QWP(8*9,"esp"),"mm7")		# save X[i]
+	&movq	("mm3","mm1");			# %mm3 is T1
+	 &psrlq	("mm1",4);
+	 &pxor	("mm5","mm6");			# Ch(e,f,g)
+	&pxor	("mm3",$E);
+	 &psllq	($E,23);
+	&pxor	("mm3","mm1");
+	 &movq	($Asse2,$A);			# modulo-scheduled save a
+	 &paddq	("mm7","mm5");			# X[i]+=Ch(e,f,g)
+	&pxor	("mm3",$E);
+	 &psrlq	("mm1",23);
+	 &paddq	("mm7",$Hsse2);			# X[i]+=h
+	&pxor	("mm3","mm1");
+	 &psllq	($E,4);
+	 &paddq	("mm7",QWP(0,$K512));		# X[i]+=K512[i]
+	&pxor	("mm3",$E);			# T1=Sigma1_512(e)
+
+	 &movq	($E,$Dsse2);			# e = load d, e in next round
+	&paddq	("mm3","mm7");			# T1+=X[i]
+	 &movq	("mm5",$A);			# %mm5 is sliding right
+	 &psrlq	("mm5",28);
+	&paddq	($E,"mm3");			# d += T1
+	 &movq	("mm6",$A);			# %mm6 is sliding left
+	 &movq	("mm7","mm5");
+	 &psllq	("mm6",25);
+	&movq	("mm1",$Bsse2);			# load b
+	 &psrlq	("mm5",6);
+	 &pxor	("mm7","mm6");
+	&sub	("esp",8);
+	 &psllq	("mm6",5);
+	 &pxor	("mm7","mm5");
+	&pxor	($A,"mm1");			# a^b, b^c in next round
+	 &psrlq	("mm5",5);
+	 &pxor	("mm7","mm6");
+	&pand	($BxC,$A);			# (b^c)&(a^b)
+	 &psllq	("mm6",6);
+	 &pxor	("mm7","mm5");
+	&pxor	($BxC,"mm1");			# [h=]Maj(a,b,c)
+	 &pxor	("mm6","mm7");			# Sigma0_512(a)
+	 &movq	("mm7",&QWP(8*(9+16-1),"esp"))	if ($phase!=0);	# pre-fetch
+	 &movq	("mm5",$Fsse2)			if ($phase==0);	# load f
+
+    if ($phase>1) {
+	&paddq	($BxC,"mm6");			# h+=Sigma0(a)
+	 &add	($K512,8);
+	#&paddq	($BxC,"mm3");			# h+=T1
+
+	($A,$BxC) = ($BxC,$A);			# rotate registers
+    } else {
+	&paddq	("mm3",$BxC);			# T1+=Maj(a,b,c)
+	 &movq	($BxC,$A);
+	 &add	($K512,8);
+	&paddq	("mm3","mm6");			# T1+=Sigma0(a)
+	 &movq	("mm6",$Gsse2)			if ($phase==0);	# load g
+	#&movq	($A,"mm3");			# h=T1
+    }
+}
+
+sub BODY_00_15_x86 {
+	#define Sigma1(x)	(ROTR((x),14) ^ ROTR((x),18)  ^ ROTR((x),41))
+	#	LO		lo>>14^hi<<18 ^ lo>>18^hi<<14 ^ hi>>9^lo<<23
+	#	HI		hi>>14^lo<<18 ^ hi>>18^lo<<14 ^ lo>>9^hi<<23
+	&mov	("ecx",$Elo);
+	&mov	("edx",$Ehi);
+	&mov	("esi","ecx");
+
+	&shr	("ecx",9);	# lo>>9
+	&mov	("edi","edx");
+	&shr	("edx",9);	# hi>>9
+	&mov	("ebx","ecx");
+	&shl	("esi",14);	# lo<<14
+	&mov	("eax","edx");
+	&shl	("edi",14);	# hi<<14
+	&xor	("ebx","esi");
+
+	&shr	("ecx",14-9);	# lo>>14
+	&xor	("eax","edi");
+	&shr	("edx",14-9);	# hi>>14
+	&xor	("eax","ecx");
+	&shl	("esi",18-14);	# lo<<18
+	&xor	("ebx","edx");
+	&shl	("edi",18-14);	# hi<<18
+	&xor	("ebx","esi");
+
+	&shr	("ecx",18-14);	# lo>>18
+	&xor	("eax","edi");
+	&shr	("edx",18-14);	# hi>>18
+	&xor	("eax","ecx");
+	&shl	("esi",23-18);	# lo<<23
+	&xor	("ebx","edx");
+	&shl	("edi",23-18);	# hi<<23
+	&xor	("eax","esi");
+	&xor	("ebx","edi");			# T1 = Sigma1(e)
+
+	&mov	("ecx",$Flo);
+	&mov	("edx",$Fhi);
+	&mov	("esi",$Glo);
+	&mov	("edi",$Ghi);
+	 &add	("eax",$Hlo);
+	 &adc	("ebx",$Hhi);			# T1 += h
+	&xor	("ecx","esi");
+	&xor	("edx","edi");
+	&and	("ecx",$Elo);
+	&and	("edx",$Ehi);
+	 &add	("eax",&DWP(8*(9+15)+0,"esp"));
+	 &adc	("ebx",&DWP(8*(9+15)+4,"esp"));	# T1 += X[0]
+	&xor	("ecx","esi");
+	&xor	("edx","edi");			# Ch(e,f,g) = (f^g)&e)^g
+
+	&mov	("esi",&DWP(0,$K512));
+	&mov	("edi",&DWP(4,$K512));		# K[i]
+	&add	("eax","ecx");
+	&adc	("ebx","edx");			# T1 += Ch(e,f,g)
+	&mov	("ecx",$Dlo);
+	&mov	("edx",$Dhi);
+	&add	("eax","esi");
+	&adc	("ebx","edi");			# T1 += K[i]
+	&mov	($Tlo,"eax");
+	&mov	($Thi,"ebx");			# put T1 away
+	&add	("eax","ecx");
+	&adc	("ebx","edx");			# d += T1
+
+	#define Sigma0(x)	(ROTR((x),28) ^ ROTR((x),34) ^ ROTR((x),39))
+	#	LO		lo>>28^hi<<4  ^ hi>>2^lo<<30 ^ hi>>7^lo<<25
+	#	HI		hi>>28^lo<<4  ^ lo>>2^hi<<30 ^ lo>>7^hi<<25
+	&mov	("ecx",$Alo);
+	&mov	("edx",$Ahi);
+	&mov	($Dlo,"eax");
+	&mov	($Dhi,"ebx");
+	&mov	("esi","ecx");
+
+	&shr	("ecx",2);	# lo>>2
+	&mov	("edi","edx");
+	&shr	("edx",2);	# hi>>2
+	&mov	("ebx","ecx");
+	&shl	("esi",4);	# lo<<4
+	&mov	("eax","edx");
+	&shl	("edi",4);	# hi<<4
+	&xor	("ebx","esi");
+
+	&shr	("ecx",7-2);	# lo>>7
+	&xor	("eax","edi");
+	&shr	("edx",7-2);	# hi>>7
+	&xor	("ebx","ecx");
+	&shl	("esi",25-4);	# lo<<25
+	&xor	("eax","edx");
+	&shl	("edi",25-4);	# hi<<25
+	&xor	("eax","esi");
+
+	&shr	("ecx",28-7);	# lo>>28
+	&xor	("ebx","edi");
+	&shr	("edx",28-7);	# hi>>28
+	&xor	("eax","ecx");
+	&shl	("esi",30-25);	# lo<<30
+	&xor	("ebx","edx");
+	&shl	("edi",30-25);	# hi<<30
+	&xor	("eax","esi");
+	&xor	("ebx","edi");			# Sigma0(a)
+
+	&mov	("ecx",$Alo);
+	&mov	("edx",$Ahi);
+	&mov	("esi",$Blo);
+	&mov	("edi",$Bhi);
+	&add	("eax",$Tlo);
+	&adc	("ebx",$Thi);			# T1 = Sigma0(a)+T1
+	&or	("ecx","esi");
+	&or	("edx","edi");
+	&and	("ecx",$Clo);
+	&and	("edx",$Chi);
+	&and	("esi",$Alo);
+	&and	("edi",$Ahi);
+	&or	("ecx","esi");
+	&or	("edx","edi");			# Maj(a,b,c) = ((a|b)&c)|(a&b)
+
+	&add	("eax","ecx");
+	&adc	("ebx","edx");			# T1 += Maj(a,b,c)
+	&mov	($Tlo,"eax");
+	&mov	($Thi,"ebx");
+
+	&mov	(&LB("edx"),&BP(0,$K512));	# pre-fetch LSB of *K
+	&sub	("esp",8);
+	&lea	($K512,&DWP(8,$K512));		# K++
+}
+
+
+&function_begin("sha512_block_data_order");
+	&mov	("esi",wparam(0));	# ctx
+	&mov	("edi",wparam(1));	# inp
+	&mov	("eax",wparam(2));	# num
+	&mov	("ebx","esp");		# saved sp
+
+	&call	(&label("pic_point"));	# make it PIC!
+&set_label("pic_point");
+	&blindpop($K512);
+	&lea	($K512,&DWP(&label("K512")."-".&label("pic_point"),$K512));
+
+	&sub	("esp",16);
+	&and	("esp",-64);
+
+	&shl	("eax",7);
+	&add	("eax","edi");
+	&mov	(&DWP(0,"esp"),"esi");	# ctx
+	&mov	(&DWP(4,"esp"),"edi");	# inp
+	&mov	(&DWP(8,"esp"),"eax");	# inp+num*128
+	&mov	(&DWP(12,"esp"),"ebx");	# saved sp
+
+if ($sse2) {
+	&picmeup("edx","OPENSSL_ia32cap_P",$K512,&label("K512"));
+	&mov	("ecx",&DWP(0,"edx"));
+	&test	("ecx",1<<26);
+	&jz	(&label("loop_x86"));
+
+	&mov	("edx",&DWP(4,"edx"));
+
+	# load ctx->h[0-7]
+	&movq	($A,&QWP(0,"esi"));
+	 &and	("ecx",1<<24);		# XMM registers availability
+	&movq	("mm1",&QWP(8,"esi"));
+	 &and	("edx",1<<9);		# SSSE3 bit
+	&movq	($BxC,&QWP(16,"esi"));
+	 &or	("ecx","edx");
+	&movq	("mm3",&QWP(24,"esi"));
+	&movq	($E,&QWP(32,"esi"));
+	&movq	("mm5",&QWP(40,"esi"));
+	&movq	("mm6",&QWP(48,"esi"));
+	&movq	("mm7",&QWP(56,"esi"));
+	&cmp	("ecx",1<<24|1<<9);
+	&je	(&label("SSSE3"));
+	&sub	("esp",8*10);
+	&jmp	(&label("loop_sse2"));
+
+&set_label("loop_sse2",16);
+	#&movq	($Asse2,$A);
+	&movq	($Bsse2,"mm1");
+	&movq	($Csse2,$BxC);
+	&movq	($Dsse2,"mm3");
+	#&movq	($Esse2,$E);
+	&movq	($Fsse2,"mm5");
+	&movq	($Gsse2,"mm6");
+	&pxor	($BxC,"mm1");			# magic
+	&movq	($Hsse2,"mm7");
+	&movq	("mm3",$A);			# magic
+
+	&mov	("eax",&DWP(0,"edi"));
+	&mov	("ebx",&DWP(4,"edi"));
+	&add	("edi",8);
+	&mov	("edx",15);			# counter
+	&bswap	("eax");
+	&bswap	("ebx");
+	&jmp	(&label("00_14_sse2"));
+
+&set_label("00_14_sse2",16);
+	&movd	("mm1","eax");
+	&mov	("eax",&DWP(0,"edi"));
+	&movd	("mm7","ebx");
+	&mov	("ebx",&DWP(4,"edi"));
+	&add	("edi",8);
+	&bswap	("eax");
+	&bswap	("ebx");
+	&punpckldq("mm7","mm1");
+
+	&BODY_00_15_sse2();
+
+	&dec	("edx");
+	&jnz	(&label("00_14_sse2"));
+
+	&movd	("mm1","eax");
+	&movd	("mm7","ebx");
+	&punpckldq("mm7","mm1");
+
+	&BODY_00_15_sse2(1);
+
+	&pxor	($A,$A);			# A is in %mm3
+	&mov	("edx",32);			# counter
+	&jmp	(&label("16_79_sse2"));
+
+&set_label("16_79_sse2",16);
+    for ($j=0;$j<2;$j++) {			# 2x unroll
+	#&movq	("mm7",&QWP(8*(9+16-1),"esp"));	# prefetched in BODY_00_15
+	&movq	("mm5",&QWP(8*(9+16-14),"esp"));
+	&movq	("mm1","mm7");
+	&psrlq	("mm7",1);
+	 &movq	("mm6","mm5");
+	 &psrlq	("mm5",6);
+	&psllq	("mm1",56);
+	 &paddq	($A,"mm3");			# from BODY_00_15
+	 &movq	("mm3","mm7");
+	&psrlq	("mm7",7-1);
+	 &pxor	("mm3","mm1");
+	 &psllq	("mm1",63-56);
+	&pxor	("mm3","mm7");
+	 &psrlq	("mm7",8-7);
+	&pxor	("mm3","mm1");
+	 &movq	("mm1","mm5");
+	 &psrlq	("mm5",19-6);
+	&pxor	("mm7","mm3");			# sigma0
+
+	 &psllq	("mm6",3);
+	 &pxor	("mm1","mm5");
+	&paddq	("mm7",&QWP(8*(9+16),"esp"));
+	 &pxor	("mm1","mm6");
+	 &psrlq	("mm5",61-19);
+	&paddq	("mm7",&QWP(8*(9+16-9),"esp"));
+	 &pxor	("mm1","mm5");
+	 &psllq	("mm6",45-3);
+	&movq	("mm5",$Fsse2);			# load f
+	 &pxor	("mm1","mm6");			# sigma1
+	&movq	("mm6",$Gsse2);			# load g
+
+	&paddq	("mm7","mm1");			# X[i]
+	#&movq	(&QWP(8*9,"esp"),"mm7");	# moved to BODY_00_15
+
+	&BODY_00_15_sse2(2);
+    }
+	&dec	("edx");
+	&jnz	(&label("16_79_sse2"));
+
+	#&movq	($A,$Asse2);
+	&paddq	($A,"mm3");			# from BODY_00_15
+	&movq	("mm1",$Bsse2);
+	#&movq	($BxC,$Csse2);
+	&movq	("mm3",$Dsse2);
+	#&movq	($E,$Esse2);
+	&movq	("mm5",$Fsse2);
+	&movq	("mm6",$Gsse2);
+	&movq	("mm7",$Hsse2);
+
+	&pxor	($BxC,"mm1");			# de-magic
+	&paddq	($A,&QWP(0,"esi"));
+	&paddq	("mm1",&QWP(8,"esi"));
+	&paddq	($BxC,&QWP(16,"esi"));
+	&paddq	("mm3",&QWP(24,"esi"));
+	&paddq	($E,&QWP(32,"esi"));
+	&paddq	("mm5",&QWP(40,"esi"));
+	&paddq	("mm6",&QWP(48,"esi"));
+	&paddq	("mm7",&QWP(56,"esi"));
+
+	&mov	("eax",8*80);
+	&movq	(&QWP(0,"esi"),$A);
+	&movq	(&QWP(8,"esi"),"mm1");
+	&movq	(&QWP(16,"esi"),$BxC);
+	&movq	(&QWP(24,"esi"),"mm3");
+	&movq	(&QWP(32,"esi"),$E);
+	&movq	(&QWP(40,"esi"),"mm5");
+	&movq	(&QWP(48,"esi"),"mm6");
+	&movq	(&QWP(56,"esi"),"mm7");
+
+	&lea	("esp",&DWP(0,"esp","eax"));	# destroy frame
+	&sub	($K512,"eax");			# rewind K
+
+	&cmp	("edi",&DWP(8*10+8,"esp"));	# are we done yet?
+	&jb	(&label("loop_sse2"));
+
+	&mov	("esp",&DWP(8*10+12,"esp"));	# restore sp
+	&emms	();
+&function_end_A();
+
+&set_label("SSSE3",32);
+{ my ($cnt,$frame)=("ecx","edx");
+  my @X=map("xmm$_",(0..7));
+  my $j;
+  my $i=0;
+
+	&lea	($frame,&DWP(-64,"esp"));
+	&sub	("esp",256);
+
+	# fixed stack frame layout
+	#
+	# +0	A B C D E F G H		# backing store
+	# +64	X[0]+K[i] .. X[15]+K[i]	# XMM->MM xfer area
+	# +192				# XMM off-load ring buffer
+	# +256				# saved parameters
+
+	&movdqa		(@X[1],&QWP(80*8,$K512));		# byte swap mask
+	&movdqu		(@X[0],&QWP(0,"edi"));
+	&pshufb		(@X[0],@X[1]);
+    for ($j=0;$j<8;$j++) {
+	&movdqa		(&QWP(16*(($j-1)%4),$frame),@X[3])	if ($j>4); # off-load
+	&movdqa		(@X[3],&QWP(16*($j%8),$K512));
+	&movdqa		(@X[2],@X[1])				if ($j<7); # perpetuate byte swap mask
+	&movdqu		(@X[1],&QWP(16*($j+1),"edi"))		if ($j<7); # next input
+	&movdqa		(@X[1],&QWP(16*(($j+1)%4),$frame))	if ($j==7);# restore @X[0]
+	&paddq		(@X[3],@X[0]);
+	&pshufb		(@X[1],@X[2])				if ($j<7);
+	&movdqa		(&QWP(16*($j%8)-128,$frame),@X[3]);	# xfer X[i]+K[i]
+
+	push(@X,shift(@X));					# rotate(@X)
+    }
+	#&jmp		(&label("loop_ssse3"));
+	&nop		();
+
+&set_label("loop_ssse3",32);
+	&movdqa		(@X[2],&QWP(16*(($j+1)%4),$frame));	# pre-restore @X[1]
+	&movdqa		(&QWP(16*(($j-1)%4),$frame),@X[3]);	# off-load @X[3]
+	&lea		($K512,&DWP(16*8,$K512));
+
+	#&movq	($Asse2,$A);			# off-load A-H
+	&movq	($Bsse2,"mm1");
+	 &mov	("ebx","edi");
+	&movq	($Csse2,$BxC);
+	 &lea	("edi",&DWP(128,"edi"));	# advance input
+	&movq	($Dsse2,"mm3");
+	 &cmp	("edi","eax");
+	#&movq	($Esse2,$E);
+	&movq	($Fsse2,"mm5");
+	 &cmovb	("ebx","edi");
+	&movq	($Gsse2,"mm6");
+	 &mov	("ecx",4);			# loop counter
+	&pxor	($BxC,"mm1");			# magic
+	&movq	($Hsse2,"mm7");
+	&pxor	("mm3","mm3");			# magic
+
+	&jmp		(&label("00_47_ssse3"));
+
+sub BODY_00_15_ssse3 {		# "phase-less" copy of BODY_00_15_sse2
+	(
+	'&movq	("mm1",$E)',				# %mm1 is sliding right
+	'&movq	("mm7",&QWP(((-8*$i)%128)-128,$frame))',# X[i]+K[i]
+	 '&pxor	("mm5","mm6")',				# f^=g
+	'&psrlq	("mm1",14)',
+	 '&movq	(&QWP(8*($i+4)%64,"esp"),$E)',		# modulo-scheduled save e
+	 '&pand	("mm5",$E)',				# f&=e
+	'&psllq	($E,23)',				# $E is sliding left
+	'&paddq	($A,"mm3")',				# [h+=Maj(a,b,c)]
+	'&movq	("mm3","mm1")',				# %mm3 is T1
+	 '&psrlq("mm1",4)',
+	 '&pxor	("mm5","mm6")',				# Ch(e,f,g)
+	'&pxor	("mm3",$E)',
+	 '&psllq($E,23)',
+	'&pxor	("mm3","mm1")',
+	 '&movq	(&QWP(8*$i%64,"esp"),$A)',		# modulo-scheduled save a
+	 '&paddq("mm7","mm5")',				# X[i]+=Ch(e,f,g)
+	'&pxor	("mm3",$E)',
+	 '&psrlq("mm1",23)',
+	 '&paddq("mm7",&QWP(8*($i+7)%64,"esp"))',	# X[i]+=h
+	'&pxor	("mm3","mm1")',
+	 '&psllq($E,4)',
+	'&pxor	("mm3",$E)',				# T1=Sigma1_512(e)
+
+	 '&movq	($E,&QWP(8*($i+3)%64,"esp"))',		# e = load d, e in next round
+	'&paddq	("mm3","mm7")',				# T1+=X[i]
+	 '&movq	("mm5",$A)',				# %mm5 is sliding right
+	 '&psrlq("mm5",28)',
+	'&paddq	($E,"mm3")',				# d += T1
+	 '&movq	("mm6",$A)',				# %mm6 is sliding left
+	 '&movq	("mm7","mm5")',
+	 '&psllq("mm6",25)',
+	'&movq	("mm1",&QWP(8*($i+1)%64,"esp"))',	# load b
+	 '&psrlq("mm5",6)',
+	 '&pxor	("mm7","mm6")',
+	 '&psllq("mm6",5)',
+	 '&pxor	("mm7","mm5")',
+	'&pxor	($A,"mm1")',				# a^b, b^c in next round
+	 '&psrlq("mm5",5)',
+	 '&pxor	("mm7","mm6")',
+	'&pand	($BxC,$A)',				# (b^c)&(a^b)
+	 '&psllq("mm6",6)',
+	 '&pxor	("mm7","mm5")',
+	'&pxor	($BxC,"mm1")',				# [h=]Maj(a,b,c)
+	 '&pxor	("mm6","mm7")',				# Sigma0_512(a)
+	 '&movq	("mm5",&QWP(8*($i+5-1)%64,"esp"))',	# pre-load f
+	'&paddq	($BxC,"mm6")',				# h+=Sigma0(a)
+	 '&movq	("mm6",&QWP(8*($i+6-1)%64,"esp"))',	# pre-load g
+
+	'($A,$BxC) = ($BxC,$A); $i--;'
+	);
+}
+
+&set_label("00_47_ssse3",32);
+
+    for(;$j<16;$j++) {
+	my ($t0,$t2,$t1)=@X[2..4];
+	my @insns = (&BODY_00_15_ssse3(),&BODY_00_15_ssse3());
+
+	&movdqa		($t2,@X[5]);
+	&movdqa		(@X[1],$t0);			# restore @X[1]
+	&palignr	($t0,@X[0],8);			# X[1..2]
+	&movdqa		(&QWP(16*($j%4),$frame),@X[4]);	# off-load @X[4]
+	 &palignr	($t2,@X[4],8);			# X[9..10]
+
+	&movdqa		($t1,$t0);
+	&psrlq		($t0,7);
+	 &paddq		(@X[0],$t2);			# X[0..1] += X[9..10]
+	&movdqa		($t2,$t1);
+	&psrlq		($t1,1);
+	&psllq		($t2,64-8);
+	&pxor		($t0,$t1);
+	&psrlq		($t1,8-1);
+	&pxor		($t0,$t2);
+	&psllq		($t2,8-1);
+	&pxor		($t0,$t1);
+	 &movdqa	($t1,@X[7]);
+	&pxor		($t0,$t2);			# sigma0(X[1..2])
+	 &movdqa	($t2,@X[7]);
+	 &psrlq		($t1,6);
+	&paddq		(@X[0],$t0);			# X[0..1] += sigma0(X[1..2])
+
+	&movdqa		($t0,@X[7]);
+	&psrlq		($t2,19);
+	&psllq		($t0,64-61);
+	&pxor		($t1,$t2);
+	&psrlq		($t2,61-19);
+	&pxor		($t1,$t0);
+	&psllq		($t0,61-19);
+	&pxor		($t1,$t2);
+	&movdqa		($t2,&QWP(16*(($j+2)%4),$frame));# pre-restore @X[1]
+	&pxor		($t1,$t0);			# sigma0(X[1..2])
+	&movdqa		($t0,&QWP(16*($j%8),$K512));
+	 eval(shift(@insns));
+	&paddq		(@X[0],$t1);			# X[0..1] += sigma0(X[14..15])
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&paddq		($t0,@X[0]);
+	 foreach(@insns) { eval; }
+	&movdqa		(&QWP(16*($j%8)-128,$frame),$t0);# xfer X[i]+K[i]
+
+	push(@X,shift(@X));				# rotate(@X)
+    }
+	&lea		($K512,&DWP(16*8,$K512));
+	&dec		("ecx");
+	&jnz		(&label("00_47_ssse3"));
+
+	&movdqa		(@X[1],&QWP(0,$K512));		# byte swap mask
+	&lea		($K512,&DWP(-80*8,$K512));	# rewind
+	&movdqu		(@X[0],&QWP(0,"ebx"));
+	&pshufb		(@X[0],@X[1]);
+
+    for ($j=0;$j<8;$j++) {	# load next or same block
+	my @insns = (&BODY_00_15_ssse3(),&BODY_00_15_ssse3());
+
+	&movdqa		(&QWP(16*(($j-1)%4),$frame),@X[3])	if ($j>4); # off-load
+	&movdqa		(@X[3],&QWP(16*($j%8),$K512));
+	&movdqa		(@X[2],@X[1])				if ($j<7); # perpetuate byte swap mask
+	&movdqu		(@X[1],&QWP(16*($j+1),"ebx"))		if ($j<7); # next input
+	&movdqa		(@X[1],&QWP(16*(($j+1)%4),$frame))	if ($j==7);# restore @X[0]
+	&paddq		(@X[3],@X[0]);
+	&pshufb		(@X[1],@X[2])				if ($j<7);
+	 foreach(@insns) { eval; }
+	&movdqa		(&QWP(16*($j%8)-128,$frame),@X[3]);# xfer X[i]+K[i]
+
+	push(@X,shift(@X));				# rotate(@X)
+    }
+
+	#&movq	($A,$Asse2);			# load A-H
+	&movq	("mm1",$Bsse2);
+	&paddq	($A,"mm3");			# from BODY_00_15
+	#&movq	($BxC,$Csse2);
+	&movq	("mm3",$Dsse2);
+	#&movq	($E,$Esse2);
+	#&movq	("mm5",$Fsse2);
+	#&movq	("mm6",$Gsse2);
+	&movq	("mm7",$Hsse2);
+
+	&pxor	($BxC,"mm1");			# de-magic
+	&paddq	($A,&QWP(0,"esi"));
+	&paddq	("mm1",&QWP(8,"esi"));
+	&paddq	($BxC,&QWP(16,"esi"));
+	&paddq	("mm3",&QWP(24,"esi"));
+	&paddq	($E,&QWP(32,"esi"));
+	&paddq	("mm5",&QWP(40,"esi"));
+	&paddq	("mm6",&QWP(48,"esi"));
+	&paddq	("mm7",&QWP(56,"esi"));
+
+	&movq	(&QWP(0,"esi"),$A);
+	&movq	(&QWP(8,"esi"),"mm1");
+	&movq	(&QWP(16,"esi"),$BxC);
+	&movq	(&QWP(24,"esi"),"mm3");
+	&movq	(&QWP(32,"esi"),$E);
+	&movq	(&QWP(40,"esi"),"mm5");
+	&movq	(&QWP(48,"esi"),"mm6");
+	&movq	(&QWP(56,"esi"),"mm7");
+
+    	&cmp	("edi","eax")			# are we done yet?
+	&jb	(&label("loop_ssse3"));
+
+	&mov	("esp",&DWP(64+12,$frame));	# restore sp
+	&emms	();
+}
+&function_end_A();
+}
+&set_label("loop_x86",16);
+    # copy input block to stack reversing byte and qword order
+    for ($i=0;$i<8;$i++) {
+	&mov	("eax",&DWP($i*16+0,"edi"));
+	&mov	("ebx",&DWP($i*16+4,"edi"));
+	&mov	("ecx",&DWP($i*16+8,"edi"));
+	&mov	("edx",&DWP($i*16+12,"edi"));
+	&bswap	("eax");
+	&bswap	("ebx");
+	&bswap	("ecx");
+	&bswap	("edx");
+	&push	("eax");
+	&push	("ebx");
+	&push	("ecx");
+	&push	("edx");
+    }
+	&add	("edi",128);
+	&sub	("esp",9*8);		# place for T,A,B,C,D,E,F,G,H
+	&mov	(&DWP(8*(9+16)+4,"esp"),"edi");
+
+	# copy ctx->h[0-7] to A,B,C,D,E,F,G,H on stack
+	&lea	("edi",&DWP(8,"esp"));
+	&mov	("ecx",16);
+	&data_word(0xA5F3F689);		# rep movsd
+
+&set_label("00_15_x86",16);
+	&BODY_00_15_x86();
+
+	&cmp	(&LB("edx"),0x94);
+	&jne	(&label("00_15_x86"));
+
+&set_label("16_79_x86",16);
+	#define sigma0(x)	(ROTR((x),1)  ^ ROTR((x),8)  ^ ((x)>>7))
+	#	LO		lo>>1^hi<<31  ^ lo>>8^hi<<24 ^ lo>>7^hi<<25
+	#	HI		hi>>1^lo<<31  ^ hi>>8^lo<<24 ^ hi>>7
+	&mov	("ecx",&DWP(8*(9+15+16-1)+0,"esp"));
+	&mov	("edx",&DWP(8*(9+15+16-1)+4,"esp"));
+	&mov	("esi","ecx");
+
+	&shr	("ecx",1);	# lo>>1
+	&mov	("edi","edx");
+	&shr	("edx",1);	# hi>>1
+	&mov	("eax","ecx");
+	&shl	("esi",24);	# lo<<24
+	&mov	("ebx","edx");
+	&shl	("edi",24);	# hi<<24
+	&xor	("ebx","esi");
+
+	&shr	("ecx",7-1);	# lo>>7
+	&xor	("eax","edi");
+	&shr	("edx",7-1);	# hi>>7
+	&xor	("eax","ecx");
+	&shl	("esi",31-24);	# lo<<31
+	&xor	("ebx","edx");
+	&shl	("edi",25-24);	# hi<<25
+	&xor	("ebx","esi");
+
+	&shr	("ecx",8-7);	# lo>>8
+	&xor	("eax","edi");
+	&shr	("edx",8-7);	# hi>>8
+	&xor	("eax","ecx");
+	&shl	("edi",31-25);	# hi<<31
+	&xor	("ebx","edx");
+	&xor	("eax","edi");			# T1 = sigma0(X[-15])
+
+	&mov	(&DWP(0,"esp"),"eax");
+	&mov	(&DWP(4,"esp"),"ebx");		# put T1 away
+
+	#define sigma1(x)	(ROTR((x),19) ^ ROTR((x),61) ^ ((x)>>6))
+	#	LO		lo>>19^hi<<13 ^ hi>>29^lo<<3 ^ lo>>6^hi<<26
+	#	HI		hi>>19^lo<<13 ^ lo>>29^hi<<3 ^ hi>>6
+	&mov	("ecx",&DWP(8*(9+15+16-14)+0,"esp"));
+	&mov	("edx",&DWP(8*(9+15+16-14)+4,"esp"));
+	&mov	("esi","ecx");
+
+	&shr	("ecx",6);	# lo>>6
+	&mov	("edi","edx");
+	&shr	("edx",6);	# hi>>6
+	&mov	("eax","ecx");
+	&shl	("esi",3);	# lo<<3
+	&mov	("ebx","edx");
+	&shl	("edi",3);	# hi<<3
+	&xor	("eax","esi");
+
+	&shr	("ecx",19-6);	# lo>>19
+	&xor	("ebx","edi");
+	&shr	("edx",19-6);	# hi>>19
+	&xor	("eax","ecx");
+	&shl	("esi",13-3);	# lo<<13
+	&xor	("ebx","edx");
+	&shl	("edi",13-3);	# hi<<13
+	&xor	("ebx","esi");
+
+	&shr	("ecx",29-19);	# lo>>29
+	&xor	("eax","edi");
+	&shr	("edx",29-19);	# hi>>29
+	&xor	("ebx","ecx");
+	&shl	("edi",26-13);	# hi<<26
+	&xor	("eax","edx");
+	&xor	("eax","edi");			# sigma1(X[-2])
+
+	&mov	("ecx",&DWP(8*(9+15+16)+0,"esp"));
+	&mov	("edx",&DWP(8*(9+15+16)+4,"esp"));
+	&add	("eax",&DWP(0,"esp"));
+	&adc	("ebx",&DWP(4,"esp"));		# T1 = sigma1(X[-2])+T1
+	&mov	("esi",&DWP(8*(9+15+16-9)+0,"esp"));
+	&mov	("edi",&DWP(8*(9+15+16-9)+4,"esp"));
+	&add	("eax","ecx");
+	&adc	("ebx","edx");			# T1 += X[-16]
+	&add	("eax","esi");
+	&adc	("ebx","edi");			# T1 += X[-7]
+	&mov	(&DWP(8*(9+15)+0,"esp"),"eax");
+	&mov	(&DWP(8*(9+15)+4,"esp"),"ebx");	# save X[0]
+
+	&BODY_00_15_x86();
+
+	&cmp	(&LB("edx"),0x17);
+	&jne	(&label("16_79_x86"));
+
+	&mov	("esi",&DWP(8*(9+16+80)+0,"esp"));# ctx
+	&mov	("edi",&DWP(8*(9+16+80)+4,"esp"));# inp
+    for($i=0;$i<4;$i++) {
+	&mov	("eax",&DWP($i*16+0,"esi"));
+	&mov	("ebx",&DWP($i*16+4,"esi"));
+	&mov	("ecx",&DWP($i*16+8,"esi"));
+	&mov	("edx",&DWP($i*16+12,"esi"));
+	&add	("eax",&DWP(8+($i*16)+0,"esp"));
+	&adc	("ebx",&DWP(8+($i*16)+4,"esp"));
+	&mov	(&DWP($i*16+0,"esi"),"eax");
+	&mov	(&DWP($i*16+4,"esi"),"ebx");
+	&add	("ecx",&DWP(8+($i*16)+8,"esp"));
+	&adc	("edx",&DWP(8+($i*16)+12,"esp"));
+	&mov	(&DWP($i*16+8,"esi"),"ecx");
+	&mov	(&DWP($i*16+12,"esi"),"edx");
+    }
+	&add	("esp",8*(9+16+80));		# destroy frame
+	&sub	($K512,8*80);			# rewind K
+
+	&cmp	("edi",&DWP(8,"esp"));		# are we done yet?
+	&jb	(&label("loop_x86"));
+
+	&mov	("esp",&DWP(12,"esp"));		# restore sp
+&function_end_A();
+
+&set_label("K512",64);	# Yes! I keep it in the code segment!
+	&data_word(0xd728ae22,0x428a2f98);	# u64
+	&data_word(0x23ef65cd,0x71374491);	# u64
+	&data_word(0xec4d3b2f,0xb5c0fbcf);	# u64
+	&data_word(0x8189dbbc,0xe9b5dba5);	# u64
+	&data_word(0xf348b538,0x3956c25b);	# u64
+	&data_word(0xb605d019,0x59f111f1);	# u64
+	&data_word(0xaf194f9b,0x923f82a4);	# u64
+	&data_word(0xda6d8118,0xab1c5ed5);	# u64
+	&data_word(0xa3030242,0xd807aa98);	# u64
+	&data_word(0x45706fbe,0x12835b01);	# u64
+	&data_word(0x4ee4b28c,0x243185be);	# u64
+	&data_word(0xd5ffb4e2,0x550c7dc3);	# u64
+	&data_word(0xf27b896f,0x72be5d74);	# u64
+	&data_word(0x3b1696b1,0x80deb1fe);	# u64
+	&data_word(0x25c71235,0x9bdc06a7);	# u64
+	&data_word(0xcf692694,0xc19bf174);	# u64
+	&data_word(0x9ef14ad2,0xe49b69c1);	# u64
+	&data_word(0x384f25e3,0xefbe4786);	# u64
+	&data_word(0x8b8cd5b5,0x0fc19dc6);	# u64
+	&data_word(0x77ac9c65,0x240ca1cc);	# u64
+	&data_word(0x592b0275,0x2de92c6f);	# u64
+	&data_word(0x6ea6e483,0x4a7484aa);	# u64
+	&data_word(0xbd41fbd4,0x5cb0a9dc);	# u64
+	&data_word(0x831153b5,0x76f988da);	# u64
+	&data_word(0xee66dfab,0x983e5152);	# u64
+	&data_word(0x2db43210,0xa831c66d);	# u64
+	&data_word(0x98fb213f,0xb00327c8);	# u64
+	&data_word(0xbeef0ee4,0xbf597fc7);	# u64
+	&data_word(0x3da88fc2,0xc6e00bf3);	# u64
+	&data_word(0x930aa725,0xd5a79147);	# u64
+	&data_word(0xe003826f,0x06ca6351);	# u64
+	&data_word(0x0a0e6e70,0x14292967);	# u64
+	&data_word(0x46d22ffc,0x27b70a85);	# u64
+	&data_word(0x5c26c926,0x2e1b2138);	# u64
+	&data_word(0x5ac42aed,0x4d2c6dfc);	# u64
+	&data_word(0x9d95b3df,0x53380d13);	# u64
+	&data_word(0x8baf63de,0x650a7354);	# u64
+	&data_word(0x3c77b2a8,0x766a0abb);	# u64
+	&data_word(0x47edaee6,0x81c2c92e);	# u64
+	&data_word(0x1482353b,0x92722c85);	# u64
+	&data_word(0x4cf10364,0xa2bfe8a1);	# u64
+	&data_word(0xbc423001,0xa81a664b);	# u64
+	&data_word(0xd0f89791,0xc24b8b70);	# u64
+	&data_word(0x0654be30,0xc76c51a3);	# u64
+	&data_word(0xd6ef5218,0xd192e819);	# u64
+	&data_word(0x5565a910,0xd6990624);	# u64
+	&data_word(0x5771202a,0xf40e3585);	# u64
+	&data_word(0x32bbd1b8,0x106aa070);	# u64
+	&data_word(0xb8d2d0c8,0x19a4c116);	# u64
+	&data_word(0x5141ab53,0x1e376c08);	# u64
+	&data_word(0xdf8eeb99,0x2748774c);	# u64
+	&data_word(0xe19b48a8,0x34b0bcb5);	# u64
+	&data_word(0xc5c95a63,0x391c0cb3);	# u64
+	&data_word(0xe3418acb,0x4ed8aa4a);	# u64
+	&data_word(0x7763e373,0x5b9cca4f);	# u64
+	&data_word(0xd6b2b8a3,0x682e6ff3);	# u64
+	&data_word(0x5defb2fc,0x748f82ee);	# u64
+	&data_word(0x43172f60,0x78a5636f);	# u64
+	&data_word(0xa1f0ab72,0x84c87814);	# u64
+	&data_word(0x1a6439ec,0x8cc70208);	# u64
+	&data_word(0x23631e28,0x90befffa);	# u64
+	&data_word(0xde82bde9,0xa4506ceb);	# u64
+	&data_word(0xb2c67915,0xbef9a3f7);	# u64
+	&data_word(0xe372532b,0xc67178f2);	# u64
+	&data_word(0xea26619c,0xca273ece);	# u64
+	&data_word(0x21c0c207,0xd186b8c7);	# u64
+	&data_word(0xcde0eb1e,0xeada7dd6);	# u64
+	&data_word(0xee6ed178,0xf57d4f7f);	# u64
+	&data_word(0x72176fba,0x06f067aa);	# u64
+	&data_word(0xa2c898a6,0x0a637dc5);	# u64
+	&data_word(0xbef90dae,0x113f9804);	# u64
+	&data_word(0x131c471b,0x1b710b35);	# u64
+	&data_word(0x23047d84,0x28db77f5);	# u64
+	&data_word(0x40c72493,0x32caab7b);	# u64
+	&data_word(0x15c9bebc,0x3c9ebe0a);	# u64
+	&data_word(0x9c100d4c,0x431d67c4);	# u64
+	&data_word(0xcb3e42b6,0x4cc5d4be);	# u64
+	&data_word(0xfc657e2a,0x597f299c);	# u64
+	&data_word(0x3ad6faec,0x5fcb6fab);	# u64
+	&data_word(0x4a475817,0x6c44198c);	# u64
+
+	&data_word(0x04050607,0x00010203);	# byte swap
+	&data_word(0x0c0d0e0f,0x08090a0b);	# mask
+&function_end_B("sha512_block_data_order");
+&asciz("SHA512 block transform for x86, CRYPTOGAMS by <appro\@openssl.org>");
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-armv4.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-armv4.pl
new file mode 100644
index 000000000..0b4c5674d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-armv4.pl
@@ -0,0 +1,668 @@
+#! /usr/bin/env perl
+# Copyright 2007-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+#
+# Permission to use under GPL terms is granted.
+# ====================================================================
+
+# SHA512 block procedure for ARMv4. September 2007.
+
+# This code is ~4.5 (four and a half) times faster than code generated
+# by gcc 3.4 and it spends ~72 clock cycles per byte [on single-issue
+# Xscale PXA250 core].
+#
+# July 2010.
+#
+# Rescheduling for dual-issue pipeline resulted in 6% improvement on
+# Cortex A8 core and ~40 cycles per processed byte.
+
+# February 2011.
+#
+# Profiler-assisted and platform-specific optimization resulted in 7%
+# improvement on Coxtex A8 core and ~38 cycles per byte.
+
+# March 2011.
+#
+# Add NEON implementation. On Cortex A8 it was measured to process
+# one byte in 23.3 cycles or ~60% faster than integer-only code.
+
+# August 2012.
+#
+# Improve NEON performance by 12% on Snapdragon S4. In absolute
+# terms it's 22.6 cycles per byte, which is disappointing result.
+# Technical writers asserted that 3-way S4 pipeline can sustain
+# multiple NEON instructions per cycle, but dual NEON issue could
+# not be observed, see http://www.openssl.org/~appro/Snapdragon-S4.html
+# for further details. On side note Cortex-A15 processes one byte in
+# 16 cycles.
+
+# Byte order [in]dependence. =========================================
+#
+# Originally caller was expected to maintain specific *dword* order in
+# h[0-7], namely with most significant dword at *lower* address, which
+# was reflected in below two parameters as 0 and 4. Now caller is
+# expected to maintain native byte order for whole 64-bit values.
+$hi="HI";
+$lo="LO";
+# ====================================================================
+
+$flavour = shift;
+if ($flavour=~/\w[\w\-]*\.\w+$/) { $output=$flavour; undef $flavour; }
+else { while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {} }
+
+if ($flavour && $flavour ne "void") {
+    $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+    ( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+    ( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+    die "can't locate arm-xlate.pl";
+
+    open STDOUT,"| \"$^X\" $xlate $flavour $output";
+} else {
+    open STDOUT,">$output";
+}
+
+$ctx="r0";	# parameter block
+$inp="r1";
+$len="r2";
+
+$Tlo="r3";
+$Thi="r4";
+$Alo="r5";
+$Ahi="r6";
+$Elo="r7";
+$Ehi="r8";
+$t0="r9";
+$t1="r10";
+$t2="r11";
+$t3="r12";
+############	r13 is stack pointer
+$Ktbl="r14";
+############	r15 is program counter
+
+$Aoff=8*0;
+$Boff=8*1;
+$Coff=8*2;
+$Doff=8*3;
+$Eoff=8*4;
+$Foff=8*5;
+$Goff=8*6;
+$Hoff=8*7;
+$Xoff=8*8;
+
+sub BODY_00_15() {
+my $magic = shift;
+$code.=<<___;
+	@ Sigma1(x)	(ROTR((x),14) ^ ROTR((x),18)  ^ ROTR((x),41))
+	@ LO		lo>>14^hi<<18 ^ lo>>18^hi<<14 ^ hi>>9^lo<<23
+	@ HI		hi>>14^lo<<18 ^ hi>>18^lo<<14 ^ lo>>9^hi<<23
+	mov	$t0,$Elo,lsr#14
+	str	$Tlo,[sp,#$Xoff+0]
+	mov	$t1,$Ehi,lsr#14
+	str	$Thi,[sp,#$Xoff+4]
+	eor	$t0,$t0,$Ehi,lsl#18
+	ldr	$t2,[sp,#$Hoff+0]	@ h.lo
+	eor	$t1,$t1,$Elo,lsl#18
+	ldr	$t3,[sp,#$Hoff+4]	@ h.hi
+	eor	$t0,$t0,$Elo,lsr#18
+	eor	$t1,$t1,$Ehi,lsr#18
+	eor	$t0,$t0,$Ehi,lsl#14
+	eor	$t1,$t1,$Elo,lsl#14
+	eor	$t0,$t0,$Ehi,lsr#9
+	eor	$t1,$t1,$Elo,lsr#9
+	eor	$t0,$t0,$Elo,lsl#23
+	eor	$t1,$t1,$Ehi,lsl#23	@ Sigma1(e)
+	adds	$Tlo,$Tlo,$t0
+	ldr	$t0,[sp,#$Foff+0]	@ f.lo
+	adc	$Thi,$Thi,$t1		@ T += Sigma1(e)
+	ldr	$t1,[sp,#$Foff+4]	@ f.hi
+	adds	$Tlo,$Tlo,$t2
+	ldr	$t2,[sp,#$Goff+0]	@ g.lo
+	adc	$Thi,$Thi,$t3		@ T += h
+	ldr	$t3,[sp,#$Goff+4]	@ g.hi
+
+	eor	$t0,$t0,$t2
+	str	$Elo,[sp,#$Eoff+0]
+	eor	$t1,$t1,$t3
+	str	$Ehi,[sp,#$Eoff+4]
+	and	$t0,$t0,$Elo
+	str	$Alo,[sp,#$Aoff+0]
+	and	$t1,$t1,$Ehi
+	str	$Ahi,[sp,#$Aoff+4]
+	eor	$t0,$t0,$t2
+	ldr	$t2,[$Ktbl,#$lo]	@ K[i].lo
+	eor	$t1,$t1,$t3		@ Ch(e,f,g)
+	ldr	$t3,[$Ktbl,#$hi]	@ K[i].hi
+
+	adds	$Tlo,$Tlo,$t0
+	ldr	$Elo,[sp,#$Doff+0]	@ d.lo
+	adc	$Thi,$Thi,$t1		@ T += Ch(e,f,g)
+	ldr	$Ehi,[sp,#$Doff+4]	@ d.hi
+	adds	$Tlo,$Tlo,$t2
+	and	$t0,$t2,#0xff
+	adc	$Thi,$Thi,$t3		@ T += K[i]
+	adds	$Elo,$Elo,$Tlo
+	ldr	$t2,[sp,#$Boff+0]	@ b.lo
+	adc	$Ehi,$Ehi,$Thi		@ d += T
+	teq	$t0,#$magic
+
+	ldr	$t3,[sp,#$Coff+0]	@ c.lo
+#ifdef	__thumb2__
+	it	eq			@ Thumb2 thing, sanity check in ARM
+#endif
+	orreq	$Ktbl,$Ktbl,#1
+	@ Sigma0(x)	(ROTR((x),28) ^ ROTR((x),34) ^ ROTR((x),39))
+	@ LO		lo>>28^hi<<4  ^ hi>>2^lo<<30 ^ hi>>7^lo<<25
+	@ HI		hi>>28^lo<<4  ^ lo>>2^hi<<30 ^ lo>>7^hi<<25
+	mov	$t0,$Alo,lsr#28
+	mov	$t1,$Ahi,lsr#28
+	eor	$t0,$t0,$Ahi,lsl#4
+	eor	$t1,$t1,$Alo,lsl#4
+	eor	$t0,$t0,$Ahi,lsr#2
+	eor	$t1,$t1,$Alo,lsr#2
+	eor	$t0,$t0,$Alo,lsl#30
+	eor	$t1,$t1,$Ahi,lsl#30
+	eor	$t0,$t0,$Ahi,lsr#7
+	eor	$t1,$t1,$Alo,lsr#7
+	eor	$t0,$t0,$Alo,lsl#25
+	eor	$t1,$t1,$Ahi,lsl#25	@ Sigma0(a)
+	adds	$Tlo,$Tlo,$t0
+	and	$t0,$Alo,$t2
+	adc	$Thi,$Thi,$t1		@ T += Sigma0(a)
+
+	ldr	$t1,[sp,#$Boff+4]	@ b.hi
+	orr	$Alo,$Alo,$t2
+	ldr	$t2,[sp,#$Coff+4]	@ c.hi
+	and	$Alo,$Alo,$t3
+	and	$t3,$Ahi,$t1
+	orr	$Ahi,$Ahi,$t1
+	orr	$Alo,$Alo,$t0		@ Maj(a,b,c).lo
+	and	$Ahi,$Ahi,$t2
+	adds	$Alo,$Alo,$Tlo
+	orr	$Ahi,$Ahi,$t3		@ Maj(a,b,c).hi
+	sub	sp,sp,#8
+	adc	$Ahi,$Ahi,$Thi		@ h += T
+	tst	$Ktbl,#1
+	add	$Ktbl,$Ktbl,#8
+___
+}
+$code=<<___;
+#ifndef __KERNEL__
+# include "arm_arch.h"
+# define VFP_ABI_PUSH	vstmdb	sp!,{d8-d15}
+# define VFP_ABI_POP	vldmia	sp!,{d8-d15}
+#else
+# define __ARM_ARCH__ __LINUX_ARM_ARCH__
+# define __ARM_MAX_ARCH__ 7
+# define VFP_ABI_PUSH
+# define VFP_ABI_POP
+#endif
+
+#ifdef __ARMEL__
+# define LO 0
+# define HI 4
+# define WORD64(hi0,lo0,hi1,lo1)	.word	lo0,hi0, lo1,hi1
+#else
+# define HI 0
+# define LO 4
+# define WORD64(hi0,lo0,hi1,lo1)	.word	hi0,lo0, hi1,lo1
+#endif
+
+.text
+#if defined(__thumb2__)
+.syntax unified
+.thumb
+# define adrl adr
+#else
+.code	32
+#endif
+
+.type	K512,%object
+.align	5
+K512:
+WORD64(0x428a2f98,0xd728ae22, 0x71374491,0x23ef65cd)
+WORD64(0xb5c0fbcf,0xec4d3b2f, 0xe9b5dba5,0x8189dbbc)
+WORD64(0x3956c25b,0xf348b538, 0x59f111f1,0xb605d019)
+WORD64(0x923f82a4,0xaf194f9b, 0xab1c5ed5,0xda6d8118)
+WORD64(0xd807aa98,0xa3030242, 0x12835b01,0x45706fbe)
+WORD64(0x243185be,0x4ee4b28c, 0x550c7dc3,0xd5ffb4e2)
+WORD64(0x72be5d74,0xf27b896f, 0x80deb1fe,0x3b1696b1)
+WORD64(0x9bdc06a7,0x25c71235, 0xc19bf174,0xcf692694)
+WORD64(0xe49b69c1,0x9ef14ad2, 0xefbe4786,0x384f25e3)
+WORD64(0x0fc19dc6,0x8b8cd5b5, 0x240ca1cc,0x77ac9c65)
+WORD64(0x2de92c6f,0x592b0275, 0x4a7484aa,0x6ea6e483)
+WORD64(0x5cb0a9dc,0xbd41fbd4, 0x76f988da,0x831153b5)
+WORD64(0x983e5152,0xee66dfab, 0xa831c66d,0x2db43210)
+WORD64(0xb00327c8,0x98fb213f, 0xbf597fc7,0xbeef0ee4)
+WORD64(0xc6e00bf3,0x3da88fc2, 0xd5a79147,0x930aa725)
+WORD64(0x06ca6351,0xe003826f, 0x14292967,0x0a0e6e70)
+WORD64(0x27b70a85,0x46d22ffc, 0x2e1b2138,0x5c26c926)
+WORD64(0x4d2c6dfc,0x5ac42aed, 0x53380d13,0x9d95b3df)
+WORD64(0x650a7354,0x8baf63de, 0x766a0abb,0x3c77b2a8)
+WORD64(0x81c2c92e,0x47edaee6, 0x92722c85,0x1482353b)
+WORD64(0xa2bfe8a1,0x4cf10364, 0xa81a664b,0xbc423001)
+WORD64(0xc24b8b70,0xd0f89791, 0xc76c51a3,0x0654be30)
+WORD64(0xd192e819,0xd6ef5218, 0xd6990624,0x5565a910)
+WORD64(0xf40e3585,0x5771202a, 0x106aa070,0x32bbd1b8)
+WORD64(0x19a4c116,0xb8d2d0c8, 0x1e376c08,0x5141ab53)
+WORD64(0x2748774c,0xdf8eeb99, 0x34b0bcb5,0xe19b48a8)
+WORD64(0x391c0cb3,0xc5c95a63, 0x4ed8aa4a,0xe3418acb)
+WORD64(0x5b9cca4f,0x7763e373, 0x682e6ff3,0xd6b2b8a3)
+WORD64(0x748f82ee,0x5defb2fc, 0x78a5636f,0x43172f60)
+WORD64(0x84c87814,0xa1f0ab72, 0x8cc70208,0x1a6439ec)
+WORD64(0x90befffa,0x23631e28, 0xa4506ceb,0xde82bde9)
+WORD64(0xbef9a3f7,0xb2c67915, 0xc67178f2,0xe372532b)
+WORD64(0xca273ece,0xea26619c, 0xd186b8c7,0x21c0c207)
+WORD64(0xeada7dd6,0xcde0eb1e, 0xf57d4f7f,0xee6ed178)
+WORD64(0x06f067aa,0x72176fba, 0x0a637dc5,0xa2c898a6)
+WORD64(0x113f9804,0xbef90dae, 0x1b710b35,0x131c471b)
+WORD64(0x28db77f5,0x23047d84, 0x32caab7b,0x40c72493)
+WORD64(0x3c9ebe0a,0x15c9bebc, 0x431d67c4,0x9c100d4c)
+WORD64(0x4cc5d4be,0xcb3e42b6, 0x597f299c,0xfc657e2a)
+WORD64(0x5fcb6fab,0x3ad6faec, 0x6c44198c,0x4a475817)
+.size	K512,.-K512
+#if __ARM_MAX_ARCH__>=7 && !defined(__KERNEL__)
+.LOPENSSL_armcap:
+.word	OPENSSL_armcap_P-.Lsha512_block_data_order
+.skip	32-4
+#else
+.skip	32
+#endif
+
+.global	sha512_block_data_order
+.type	sha512_block_data_order,%function
+sha512_block_data_order:
+.Lsha512_block_data_order:
+#if __ARM_ARCH__<7 && !defined(__thumb2__)
+	sub	r3,pc,#8		@ sha512_block_data_order
+#else
+	adr	r3,.Lsha512_block_data_order
+#endif
+#if __ARM_MAX_ARCH__>=7 && !defined(__KERNEL__)
+	ldr	r12,.LOPENSSL_armcap
+	ldr	r12,[r3,r12]		@ OPENSSL_armcap_P
+#ifdef	__APPLE__
+	ldr	r12,[r12]
+#endif
+	tst	r12,#ARMV7_NEON
+	bne	.LNEON
+#endif
+	add	$len,$inp,$len,lsl#7	@ len to point at the end of inp
+	stmdb	sp!,{r4-r12,lr}
+	sub	$Ktbl,r3,#672		@ K512
+	sub	sp,sp,#9*8
+
+	ldr	$Elo,[$ctx,#$Eoff+$lo]
+	ldr	$Ehi,[$ctx,#$Eoff+$hi]
+	ldr	$t0, [$ctx,#$Goff+$lo]
+	ldr	$t1, [$ctx,#$Goff+$hi]
+	ldr	$t2, [$ctx,#$Hoff+$lo]
+	ldr	$t3, [$ctx,#$Hoff+$hi]
+.Loop:
+	str	$t0, [sp,#$Goff+0]
+	str	$t1, [sp,#$Goff+4]
+	str	$t2, [sp,#$Hoff+0]
+	str	$t3, [sp,#$Hoff+4]
+	ldr	$Alo,[$ctx,#$Aoff+$lo]
+	ldr	$Ahi,[$ctx,#$Aoff+$hi]
+	ldr	$Tlo,[$ctx,#$Boff+$lo]
+	ldr	$Thi,[$ctx,#$Boff+$hi]
+	ldr	$t0, [$ctx,#$Coff+$lo]
+	ldr	$t1, [$ctx,#$Coff+$hi]
+	ldr	$t2, [$ctx,#$Doff+$lo]
+	ldr	$t3, [$ctx,#$Doff+$hi]
+	str	$Tlo,[sp,#$Boff+0]
+	str	$Thi,[sp,#$Boff+4]
+	str	$t0, [sp,#$Coff+0]
+	str	$t1, [sp,#$Coff+4]
+	str	$t2, [sp,#$Doff+0]
+	str	$t3, [sp,#$Doff+4]
+	ldr	$Tlo,[$ctx,#$Foff+$lo]
+	ldr	$Thi,[$ctx,#$Foff+$hi]
+	str	$Tlo,[sp,#$Foff+0]
+	str	$Thi,[sp,#$Foff+4]
+
+.L00_15:
+#if __ARM_ARCH__<7
+	ldrb	$Tlo,[$inp,#7]
+	ldrb	$t0, [$inp,#6]
+	ldrb	$t1, [$inp,#5]
+	ldrb	$t2, [$inp,#4]
+	ldrb	$Thi,[$inp,#3]
+	ldrb	$t3, [$inp,#2]
+	orr	$Tlo,$Tlo,$t0,lsl#8
+	ldrb	$t0, [$inp,#1]
+	orr	$Tlo,$Tlo,$t1,lsl#16
+	ldrb	$t1, [$inp],#8
+	orr	$Tlo,$Tlo,$t2,lsl#24
+	orr	$Thi,$Thi,$t3,lsl#8
+	orr	$Thi,$Thi,$t0,lsl#16
+	orr	$Thi,$Thi,$t1,lsl#24
+#else
+	ldr	$Tlo,[$inp,#4]
+	ldr	$Thi,[$inp],#8
+#ifdef __ARMEL__
+	rev	$Tlo,$Tlo
+	rev	$Thi,$Thi
+#endif
+#endif
+___
+	&BODY_00_15(0x94);
+$code.=<<___;
+	tst	$Ktbl,#1
+	beq	.L00_15
+	ldr	$t0,[sp,#`$Xoff+8*(16-1)`+0]
+	ldr	$t1,[sp,#`$Xoff+8*(16-1)`+4]
+	bic	$Ktbl,$Ktbl,#1
+.L16_79:
+	@ sigma0(x)	(ROTR((x),1)  ^ ROTR((x),8)  ^ ((x)>>7))
+	@ LO		lo>>1^hi<<31  ^ lo>>8^hi<<24 ^ lo>>7^hi<<25
+	@ HI		hi>>1^lo<<31  ^ hi>>8^lo<<24 ^ hi>>7
+	mov	$Tlo,$t0,lsr#1
+	ldr	$t2,[sp,#`$Xoff+8*(16-14)`+0]
+	mov	$Thi,$t1,lsr#1
+	ldr	$t3,[sp,#`$Xoff+8*(16-14)`+4]
+	eor	$Tlo,$Tlo,$t1,lsl#31
+	eor	$Thi,$Thi,$t0,lsl#31
+	eor	$Tlo,$Tlo,$t0,lsr#8
+	eor	$Thi,$Thi,$t1,lsr#8
+	eor	$Tlo,$Tlo,$t1,lsl#24
+	eor	$Thi,$Thi,$t0,lsl#24
+	eor	$Tlo,$Tlo,$t0,lsr#7
+	eor	$Thi,$Thi,$t1,lsr#7
+	eor	$Tlo,$Tlo,$t1,lsl#25
+
+	@ sigma1(x)	(ROTR((x),19) ^ ROTR((x),61) ^ ((x)>>6))
+	@ LO		lo>>19^hi<<13 ^ hi>>29^lo<<3 ^ lo>>6^hi<<26
+	@ HI		hi>>19^lo<<13 ^ lo>>29^hi<<3 ^ hi>>6
+	mov	$t0,$t2,lsr#19
+	mov	$t1,$t3,lsr#19
+	eor	$t0,$t0,$t3,lsl#13
+	eor	$t1,$t1,$t2,lsl#13
+	eor	$t0,$t0,$t3,lsr#29
+	eor	$t1,$t1,$t2,lsr#29
+	eor	$t0,$t0,$t2,lsl#3
+	eor	$t1,$t1,$t3,lsl#3
+	eor	$t0,$t0,$t2,lsr#6
+	eor	$t1,$t1,$t3,lsr#6
+	ldr	$t2,[sp,#`$Xoff+8*(16-9)`+0]
+	eor	$t0,$t0,$t3,lsl#26
+
+	ldr	$t3,[sp,#`$Xoff+8*(16-9)`+4]
+	adds	$Tlo,$Tlo,$t0
+	ldr	$t0,[sp,#`$Xoff+8*16`+0]
+	adc	$Thi,$Thi,$t1
+
+	ldr	$t1,[sp,#`$Xoff+8*16`+4]
+	adds	$Tlo,$Tlo,$t2
+	adc	$Thi,$Thi,$t3
+	adds	$Tlo,$Tlo,$t0
+	adc	$Thi,$Thi,$t1
+___
+	&BODY_00_15(0x17);
+$code.=<<___;
+#ifdef	__thumb2__
+	ittt	eq			@ Thumb2 thing, sanity check in ARM
+#endif
+	ldreq	$t0,[sp,#`$Xoff+8*(16-1)`+0]
+	ldreq	$t1,[sp,#`$Xoff+8*(16-1)`+4]
+	beq	.L16_79
+	bic	$Ktbl,$Ktbl,#1
+
+	ldr	$Tlo,[sp,#$Boff+0]
+	ldr	$Thi,[sp,#$Boff+4]
+	ldr	$t0, [$ctx,#$Aoff+$lo]
+	ldr	$t1, [$ctx,#$Aoff+$hi]
+	ldr	$t2, [$ctx,#$Boff+$lo]
+	ldr	$t3, [$ctx,#$Boff+$hi]
+	adds	$t0,$Alo,$t0
+	str	$t0, [$ctx,#$Aoff+$lo]
+	adc	$t1,$Ahi,$t1
+	str	$t1, [$ctx,#$Aoff+$hi]
+	adds	$t2,$Tlo,$t2
+	str	$t2, [$ctx,#$Boff+$lo]
+	adc	$t3,$Thi,$t3
+	str	$t3, [$ctx,#$Boff+$hi]
+
+	ldr	$Alo,[sp,#$Coff+0]
+	ldr	$Ahi,[sp,#$Coff+4]
+	ldr	$Tlo,[sp,#$Doff+0]
+	ldr	$Thi,[sp,#$Doff+4]
+	ldr	$t0, [$ctx,#$Coff+$lo]
+	ldr	$t1, [$ctx,#$Coff+$hi]
+	ldr	$t2, [$ctx,#$Doff+$lo]
+	ldr	$t3, [$ctx,#$Doff+$hi]
+	adds	$t0,$Alo,$t0
+	str	$t0, [$ctx,#$Coff+$lo]
+	adc	$t1,$Ahi,$t1
+	str	$t1, [$ctx,#$Coff+$hi]
+	adds	$t2,$Tlo,$t2
+	str	$t2, [$ctx,#$Doff+$lo]
+	adc	$t3,$Thi,$t3
+	str	$t3, [$ctx,#$Doff+$hi]
+
+	ldr	$Tlo,[sp,#$Foff+0]
+	ldr	$Thi,[sp,#$Foff+4]
+	ldr	$t0, [$ctx,#$Eoff+$lo]
+	ldr	$t1, [$ctx,#$Eoff+$hi]
+	ldr	$t2, [$ctx,#$Foff+$lo]
+	ldr	$t3, [$ctx,#$Foff+$hi]
+	adds	$Elo,$Elo,$t0
+	str	$Elo,[$ctx,#$Eoff+$lo]
+	adc	$Ehi,$Ehi,$t1
+	str	$Ehi,[$ctx,#$Eoff+$hi]
+	adds	$t2,$Tlo,$t2
+	str	$t2, [$ctx,#$Foff+$lo]
+	adc	$t3,$Thi,$t3
+	str	$t3, [$ctx,#$Foff+$hi]
+
+	ldr	$Alo,[sp,#$Goff+0]
+	ldr	$Ahi,[sp,#$Goff+4]
+	ldr	$Tlo,[sp,#$Hoff+0]
+	ldr	$Thi,[sp,#$Hoff+4]
+	ldr	$t0, [$ctx,#$Goff+$lo]
+	ldr	$t1, [$ctx,#$Goff+$hi]
+	ldr	$t2, [$ctx,#$Hoff+$lo]
+	ldr	$t3, [$ctx,#$Hoff+$hi]
+	adds	$t0,$Alo,$t0
+	str	$t0, [$ctx,#$Goff+$lo]
+	adc	$t1,$Ahi,$t1
+	str	$t1, [$ctx,#$Goff+$hi]
+	adds	$t2,$Tlo,$t2
+	str	$t2, [$ctx,#$Hoff+$lo]
+	adc	$t3,$Thi,$t3
+	str	$t3, [$ctx,#$Hoff+$hi]
+
+	add	sp,sp,#640
+	sub	$Ktbl,$Ktbl,#640
+
+	teq	$inp,$len
+	bne	.Loop
+
+	add	sp,sp,#8*9		@ destroy frame
+#if __ARM_ARCH__>=5
+	ldmia	sp!,{r4-r12,pc}
+#else
+	ldmia	sp!,{r4-r12,lr}
+	tst	lr,#1
+	moveq	pc,lr			@ be binary compatible with V4, yet
+	bx	lr			@ interoperable with Thumb ISA:-)
+#endif
+.size	sha512_block_data_order,.-sha512_block_data_order
+___
+
+{
+my @Sigma0=(28,34,39);
+my @Sigma1=(14,18,41);
+my @sigma0=(1, 8, 7);
+my @sigma1=(19,61,6);
+
+my $Ktbl="r3";
+my $cnt="r12";	# volatile register known as ip, intra-procedure-call scratch
+
+my @X=map("d$_",(0..15));
+my @V=($A,$B,$C,$D,$E,$F,$G,$H)=map("d$_",(16..23));
+
+sub NEON_00_15() {
+my $i=shift;
+my ($a,$b,$c,$d,$e,$f,$g,$h)=@_;
+my ($t0,$t1,$t2,$T1,$K,$Ch,$Maj)=map("d$_",(24..31));	# temps
+
+$code.=<<___ if ($i<16 || $i&1);
+	vshr.u64	$t0,$e,#@Sigma1[0]	@ $i
+#if $i<16
+	vld1.64		{@X[$i%16]},[$inp]!	@ handles unaligned
+#endif
+	vshr.u64	$t1,$e,#@Sigma1[1]
+#if $i>0
+	 vadd.i64	$a,$Maj			@ h+=Maj from the past
+#endif
+	vshr.u64	$t2,$e,#@Sigma1[2]
+___
+$code.=<<___;
+	vld1.64		{$K},[$Ktbl,:64]!	@ K[i++]
+	vsli.64		$t0,$e,#`64-@Sigma1[0]`
+	vsli.64		$t1,$e,#`64-@Sigma1[1]`
+	vmov		$Ch,$e
+	vsli.64		$t2,$e,#`64-@Sigma1[2]`
+#if $i<16 && defined(__ARMEL__)
+	vrev64.8	@X[$i],@X[$i]
+#endif
+	veor		$t1,$t0
+	vbsl		$Ch,$f,$g		@ Ch(e,f,g)
+	vshr.u64	$t0,$a,#@Sigma0[0]
+	veor		$t2,$t1			@ Sigma1(e)
+	vadd.i64	$T1,$Ch,$h
+	vshr.u64	$t1,$a,#@Sigma0[1]
+	vsli.64		$t0,$a,#`64-@Sigma0[0]`
+	vadd.i64	$T1,$t2
+	vshr.u64	$t2,$a,#@Sigma0[2]
+	vadd.i64	$K,@X[$i%16]
+	vsli.64		$t1,$a,#`64-@Sigma0[1]`
+	veor		$Maj,$a,$b
+	vsli.64		$t2,$a,#`64-@Sigma0[2]`
+	veor		$h,$t0,$t1
+	vadd.i64	$T1,$K
+	vbsl		$Maj,$c,$b		@ Maj(a,b,c)
+	veor		$h,$t2			@ Sigma0(a)
+	vadd.i64	$d,$T1
+	vadd.i64	$Maj,$T1
+	@ vadd.i64	$h,$Maj
+___
+}
+
+sub NEON_16_79() {
+my $i=shift;
+
+if ($i&1)	{ &NEON_00_15($i,@_); return; }
+
+# 2x-vectorized, therefore runs every 2nd round
+my @X=map("q$_",(0..7));			# view @X as 128-bit vector
+my ($t0,$t1,$s0,$s1) = map("q$_",(12..15));	# temps
+my ($d0,$d1,$d2) = map("d$_",(24..26));		# temps from NEON_00_15
+my $e=@_[4];					# $e from NEON_00_15
+$i /= 2;
+$code.=<<___;
+	vshr.u64	$t0,@X[($i+7)%8],#@sigma1[0]
+	vshr.u64	$t1,@X[($i+7)%8],#@sigma1[1]
+	 vadd.i64	@_[0],d30			@ h+=Maj from the past
+	vshr.u64	$s1,@X[($i+7)%8],#@sigma1[2]
+	vsli.64		$t0,@X[($i+7)%8],#`64-@sigma1[0]`
+	vext.8		$s0,@X[$i%8],@X[($i+1)%8],#8	@ X[i+1]
+	vsli.64		$t1,@X[($i+7)%8],#`64-@sigma1[1]`
+	veor		$s1,$t0
+	vshr.u64	$t0,$s0,#@sigma0[0]
+	veor		$s1,$t1				@ sigma1(X[i+14])
+	vshr.u64	$t1,$s0,#@sigma0[1]
+	vadd.i64	@X[$i%8],$s1
+	vshr.u64	$s1,$s0,#@sigma0[2]
+	vsli.64		$t0,$s0,#`64-@sigma0[0]`
+	vsli.64		$t1,$s0,#`64-@sigma0[1]`
+	vext.8		$s0,@X[($i+4)%8],@X[($i+5)%8],#8	@ X[i+9]
+	veor		$s1,$t0
+	vshr.u64	$d0,$e,#@Sigma1[0]		@ from NEON_00_15
+	vadd.i64	@X[$i%8],$s0
+	vshr.u64	$d1,$e,#@Sigma1[1]		@ from NEON_00_15
+	veor		$s1,$t1				@ sigma0(X[i+1])
+	vshr.u64	$d2,$e,#@Sigma1[2]		@ from NEON_00_15
+	vadd.i64	@X[$i%8],$s1
+___
+	&NEON_00_15(2*$i,@_);
+}
+
+$code.=<<___;
+#if __ARM_MAX_ARCH__>=7
+.arch	armv7-a
+.fpu	neon
+
+.global	sha512_block_data_order_neon
+.type	sha512_block_data_order_neon,%function
+.align	4
+sha512_block_data_order_neon:
+.LNEON:
+	dmb				@ errata #451034 on early Cortex A8
+	add	$len,$inp,$len,lsl#7	@ len to point at the end of inp
+	adr	$Ktbl,K512
+	VFP_ABI_PUSH
+	vldmia	$ctx,{$A-$H}		@ load context
+.Loop_neon:
+___
+for($i=0;$i<16;$i++)	{ &NEON_00_15($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	mov		$cnt,#4
+.L16_79_neon:
+	subs		$cnt,#1
+___
+for(;$i<32;$i++)	{ &NEON_16_79($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	bne		.L16_79_neon
+
+	 vadd.i64	$A,d30		@ h+=Maj from the past
+	vldmia		$ctx,{d24-d31}	@ load context to temp
+	vadd.i64	q8,q12		@ vectorized accumulate
+	vadd.i64	q9,q13
+	vadd.i64	q10,q14
+	vadd.i64	q11,q15
+	vstmia		$ctx,{$A-$H}	@ save context
+	teq		$inp,$len
+	sub		$Ktbl,#640	@ rewind K512
+	bne		.Loop_neon
+
+	VFP_ABI_POP
+	ret				@ bx lr
+.size	sha512_block_data_order_neon,.-sha512_block_data_order_neon
+#endif
+___
+}
+$code.=<<___;
+.asciz	"SHA512 block transform for ARMv4/NEON, CRYPTOGAMS by <appro\@openssl.org>"
+.align	2
+#if __ARM_MAX_ARCH__>=7 && !defined(__KERNEL__)
+.comm	OPENSSL_armcap_P,4,4
+#endif
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+$code =~ s/\bbx\s+lr\b/.word\t0xe12fff1e/gm;	# make it possible to compile with -march=armv4
+$code =~ s/\bret\b/bx	lr/gm;
+
+open SELF,$0;
+while(<SELF>) {
+	next if (/^#!/);
+	last if (!s/^#/@/ and !/^$/);
+	print;
+}
+close SELF;
+
+print $code;
+close STDOUT; # enforce flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-armv8.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-armv8.pl
new file mode 100644
index 000000000..01ffe9f98
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-armv8.pl
@@ -0,0 +1,905 @@
+#! /usr/bin/env perl
+# Copyright 2014-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+#
+# Permission to use under GPLv2 terms is granted.
+# ====================================================================
+#
+# SHA256/512 for ARMv8.
+#
+# Performance in cycles per processed byte and improvement coefficient
+# over code generated with "default" compiler:
+#
+#		SHA256-hw	SHA256(*)	SHA512
+# Apple A7	1.97		10.5 (+33%)	6.73 (-1%(**))
+# Cortex-A53	2.38		15.5 (+115%)	10.0 (+150%(***))
+# Cortex-A57	2.31		11.6 (+86%)	7.51 (+260%(***))
+# Denver	2.01		10.5 (+26%)	6.70 (+8%)
+# X-Gene			20.0 (+100%)	12.8 (+300%(***))
+# Mongoose	2.36		13.0 (+50%)	8.36 (+33%)
+# Kryo		1.92		17.4 (+30%)	11.2 (+8%)
+#
+# (*)	Software SHA256 results are of lesser relevance, presented
+#	mostly for informational purposes.
+# (**)	The result is a trade-off: it's possible to improve it by
+#	10% (or by 1 cycle per round), but at the cost of 20% loss
+#	on Cortex-A53 (or by 4 cycles per round).
+# (***)	Super-impressive coefficients over gcc-generated code are
+#	indication of some compiler "pathology", most notably code
+#	generated with -mgeneral-regs-only is significantly faster
+#	and the gap is only 40-90%.
+#
+# October 2016.
+#
+# Originally it was reckoned that it makes no sense to implement NEON
+# version of SHA256 for 64-bit processors. This is because performance
+# improvement on most wide-spread Cortex-A5x processors was observed
+# to be marginal, same on Cortex-A53 and ~10% on A57. But then it was
+# observed that 32-bit NEON SHA256 performs significantly better than
+# 64-bit scalar version on *some* of the more recent processors. As
+# result 64-bit NEON version of SHA256 was added to provide best
+# all-round performance. For example it executes ~30% faster on X-Gene
+# and Mongoose. [For reference, NEON version of SHA512 is bound to
+# deliver much less improvement, likely *negative* on Cortex-A5x.
+# Which is why NEON support is limited to SHA256.]
+
+$output=pop;
+$flavour=pop;
+
+if ($flavour && $flavour ne "void") {
+    $0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+    ( $xlate="${dir}arm-xlate.pl" and -f $xlate ) or
+    ( $xlate="${dir}../../perlasm/arm-xlate.pl" and -f $xlate) or
+    die "can't locate arm-xlate.pl";
+
+    open OUT,"| \"$^X\" $xlate $flavour $output";
+    *STDOUT=*OUT;
+} else {
+    open STDOUT,">$output";
+}
+
+if ($output =~ /512/) {
+	$BITS=512;
+	$SZ=8;
+	@Sigma0=(28,34,39);
+	@Sigma1=(14,18,41);
+	@sigma0=(1,  8, 7);
+	@sigma1=(19,61, 6);
+	$rounds=80;
+	$reg_t="x";
+} else {
+	$BITS=256;
+	$SZ=4;
+	@Sigma0=( 2,13,22);
+	@Sigma1=( 6,11,25);
+	@sigma0=( 7,18, 3);
+	@sigma1=(17,19,10);
+	$rounds=64;
+	$reg_t="w";
+}
+
+$func="sha${BITS}_block_data_order";
+
+($ctx,$inp,$num,$Ktbl)=map("x$_",(0..2,30));
+
+@X=map("$reg_t$_",(3..15,0..2));
+@V=($A,$B,$C,$D,$E,$F,$G,$H)=map("$reg_t$_",(20..27));
+($t0,$t1,$t2,$t3)=map("$reg_t$_",(16,17,19,28));
+
+sub BODY_00_xx {
+my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
+my $j=($i+1)&15;
+my ($T0,$T1,$T2)=(@X[($i-8)&15],@X[($i-9)&15],@X[($i-10)&15]);
+   $T0=@X[$i+3] if ($i<11);
+
+$code.=<<___	if ($i<16);
+#ifndef	__AARCH64EB__
+	rev	@X[$i],@X[$i]			// $i
+#endif
+___
+$code.=<<___	if ($i<13 && ($i&1));
+	ldp	@X[$i+1],@X[$i+2],[$inp],#2*$SZ
+___
+$code.=<<___	if ($i==13);
+	ldp	@X[14],@X[15],[$inp]
+___
+$code.=<<___	if ($i>=14);
+	ldr	@X[($i-11)&15],[sp,#`$SZ*(($i-11)%4)`]
+___
+$code.=<<___	if ($i>0 && $i<16);
+	add	$a,$a,$t1			// h+=Sigma0(a)
+___
+$code.=<<___	if ($i>=11);
+	str	@X[($i-8)&15],[sp,#`$SZ*(($i-8)%4)`]
+___
+# While ARMv8 specifies merged rotate-n-logical operation such as
+# 'eor x,y,z,ror#n', it was found to negatively affect performance
+# on Apple A7. The reason seems to be that it requires even 'y' to
+# be available earlier. This means that such merged instruction is
+# not necessarily best choice on critical path... On the other hand
+# Cortex-A5x handles merged instructions much better than disjoint
+# rotate and logical... See (**) footnote above.
+$code.=<<___	if ($i<15);
+	ror	$t0,$e,#$Sigma1[0]
+	add	$h,$h,$t2			// h+=K[i]
+	eor	$T0,$e,$e,ror#`$Sigma1[2]-$Sigma1[1]`
+	and	$t1,$f,$e
+	bic	$t2,$g,$e
+	add	$h,$h,@X[$i&15]			// h+=X[i]
+	orr	$t1,$t1,$t2			// Ch(e,f,g)
+	eor	$t2,$a,$b			// a^b, b^c in next round
+	eor	$t0,$t0,$T0,ror#$Sigma1[1]	// Sigma1(e)
+	ror	$T0,$a,#$Sigma0[0]
+	add	$h,$h,$t1			// h+=Ch(e,f,g)
+	eor	$t1,$a,$a,ror#`$Sigma0[2]-$Sigma0[1]`
+	add	$h,$h,$t0			// h+=Sigma1(e)
+	and	$t3,$t3,$t2			// (b^c)&=(a^b)
+	add	$d,$d,$h			// d+=h
+	eor	$t3,$t3,$b			// Maj(a,b,c)
+	eor	$t1,$T0,$t1,ror#$Sigma0[1]	// Sigma0(a)
+	add	$h,$h,$t3			// h+=Maj(a,b,c)
+	ldr	$t3,[$Ktbl],#$SZ		// *K++, $t2 in next round
+	//add	$h,$h,$t1			// h+=Sigma0(a)
+___
+$code.=<<___	if ($i>=15);
+	ror	$t0,$e,#$Sigma1[0]
+	add	$h,$h,$t2			// h+=K[i]
+	ror	$T1,@X[($j+1)&15],#$sigma0[0]
+	and	$t1,$f,$e
+	ror	$T2,@X[($j+14)&15],#$sigma1[0]
+	bic	$t2,$g,$e
+	ror	$T0,$a,#$Sigma0[0]
+	add	$h,$h,@X[$i&15]			// h+=X[i]
+	eor	$t0,$t0,$e,ror#$Sigma1[1]
+	eor	$T1,$T1,@X[($j+1)&15],ror#$sigma0[1]
+	orr	$t1,$t1,$t2			// Ch(e,f,g)
+	eor	$t2,$a,$b			// a^b, b^c in next round
+	eor	$t0,$t0,$e,ror#$Sigma1[2]	// Sigma1(e)
+	eor	$T0,$T0,$a,ror#$Sigma0[1]
+	add	$h,$h,$t1			// h+=Ch(e,f,g)
+	and	$t3,$t3,$t2			// (b^c)&=(a^b)
+	eor	$T2,$T2,@X[($j+14)&15],ror#$sigma1[1]
+	eor	$T1,$T1,@X[($j+1)&15],lsr#$sigma0[2]	// sigma0(X[i+1])
+	add	$h,$h,$t0			// h+=Sigma1(e)
+	eor	$t3,$t3,$b			// Maj(a,b,c)
+	eor	$t1,$T0,$a,ror#$Sigma0[2]	// Sigma0(a)
+	eor	$T2,$T2,@X[($j+14)&15],lsr#$sigma1[2]	// sigma1(X[i+14])
+	add	@X[$j],@X[$j],@X[($j+9)&15]
+	add	$d,$d,$h			// d+=h
+	add	$h,$h,$t3			// h+=Maj(a,b,c)
+	ldr	$t3,[$Ktbl],#$SZ		// *K++, $t2 in next round
+	add	@X[$j],@X[$j],$T1
+	add	$h,$h,$t1			// h+=Sigma0(a)
+	add	@X[$j],@X[$j],$T2
+___
+	($t2,$t3)=($t3,$t2);
+}
+
+$code.=<<___;
+#ifndef	__KERNEL__
+# include "arm_arch.h"
+#endif
+
+.text
+
+.extern	OPENSSL_armcap_P
+.globl	$func
+.type	$func,%function
+.align	6
+$func:
+#ifndef	__KERNEL__
+# ifdef	__ILP32__
+	ldrsw	x16,.LOPENSSL_armcap_P
+# else
+	ldr	x16,.LOPENSSL_armcap_P
+# endif
+	adr	x17,.LOPENSSL_armcap_P
+	add	x16,x16,x17
+	ldr	w16,[x16]
+___
+$code.=<<___	if ($SZ==4);
+	tst	w16,#ARMV8_SHA256
+	b.ne	.Lv8_entry
+	tst	w16,#ARMV7_NEON
+	b.ne	.Lneon_entry
+___
+$code.=<<___	if ($SZ==8);
+	tst	w16,#ARMV8_SHA512
+	b.ne	.Lv8_entry
+___
+$code.=<<___;
+#endif
+	.inst	0xd503233f				// paciasp
+	stp	x29,x30,[sp,#-128]!
+	add	x29,sp,#0
+
+	stp	x19,x20,[sp,#16]
+	stp	x21,x22,[sp,#32]
+	stp	x23,x24,[sp,#48]
+	stp	x25,x26,[sp,#64]
+	stp	x27,x28,[sp,#80]
+	sub	sp,sp,#4*$SZ
+
+	ldp	$A,$B,[$ctx]				// load context
+	ldp	$C,$D,[$ctx,#2*$SZ]
+	ldp	$E,$F,[$ctx,#4*$SZ]
+	add	$num,$inp,$num,lsl#`log(16*$SZ)/log(2)`	// end of input
+	ldp	$G,$H,[$ctx,#6*$SZ]
+	adr	$Ktbl,.LK$BITS
+	stp	$ctx,$num,[x29,#96]
+
+.Loop:
+	ldp	@X[0],@X[1],[$inp],#2*$SZ
+	ldr	$t2,[$Ktbl],#$SZ			// *K++
+	eor	$t3,$B,$C				// magic seed
+	str	$inp,[x29,#112]
+___
+for ($i=0;$i<16;$i++)	{ &BODY_00_xx($i,@V); unshift(@V,pop(@V)); }
+$code.=".Loop_16_xx:\n";
+for (;$i<32;$i++)	{ &BODY_00_xx($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	cbnz	$t2,.Loop_16_xx
+
+	ldp	$ctx,$num,[x29,#96]
+	ldr	$inp,[x29,#112]
+	sub	$Ktbl,$Ktbl,#`$SZ*($rounds+1)`		// rewind
+
+	ldp	@X[0],@X[1],[$ctx]
+	ldp	@X[2],@X[3],[$ctx,#2*$SZ]
+	add	$inp,$inp,#14*$SZ			// advance input pointer
+	ldp	@X[4],@X[5],[$ctx,#4*$SZ]
+	add	$A,$A,@X[0]
+	ldp	@X[6],@X[7],[$ctx,#6*$SZ]
+	add	$B,$B,@X[1]
+	add	$C,$C,@X[2]
+	add	$D,$D,@X[3]
+	stp	$A,$B,[$ctx]
+	add	$E,$E,@X[4]
+	add	$F,$F,@X[5]
+	stp	$C,$D,[$ctx,#2*$SZ]
+	add	$G,$G,@X[6]
+	add	$H,$H,@X[7]
+	cmp	$inp,$num
+	stp	$E,$F,[$ctx,#4*$SZ]
+	stp	$G,$H,[$ctx,#6*$SZ]
+	b.ne	.Loop
+
+	ldp	x19,x20,[x29,#16]
+	add	sp,sp,#4*$SZ
+	ldp	x21,x22,[x29,#32]
+	ldp	x23,x24,[x29,#48]
+	ldp	x25,x26,[x29,#64]
+	ldp	x27,x28,[x29,#80]
+	ldp	x29,x30,[sp],#128
+	.inst	0xd50323bf				// autiasp
+	ret
+.size	$func,.-$func
+
+.align	6
+.type	.LK$BITS,%object
+.LK$BITS:
+___
+$code.=<<___ if ($SZ==8);
+	.quad	0x428a2f98d728ae22,0x7137449123ef65cd
+	.quad	0xb5c0fbcfec4d3b2f,0xe9b5dba58189dbbc
+	.quad	0x3956c25bf348b538,0x59f111f1b605d019
+	.quad	0x923f82a4af194f9b,0xab1c5ed5da6d8118
+	.quad	0xd807aa98a3030242,0x12835b0145706fbe
+	.quad	0x243185be4ee4b28c,0x550c7dc3d5ffb4e2
+	.quad	0x72be5d74f27b896f,0x80deb1fe3b1696b1
+	.quad	0x9bdc06a725c71235,0xc19bf174cf692694
+	.quad	0xe49b69c19ef14ad2,0xefbe4786384f25e3
+	.quad	0x0fc19dc68b8cd5b5,0x240ca1cc77ac9c65
+	.quad	0x2de92c6f592b0275,0x4a7484aa6ea6e483
+	.quad	0x5cb0a9dcbd41fbd4,0x76f988da831153b5
+	.quad	0x983e5152ee66dfab,0xa831c66d2db43210
+	.quad	0xb00327c898fb213f,0xbf597fc7beef0ee4
+	.quad	0xc6e00bf33da88fc2,0xd5a79147930aa725
+	.quad	0x06ca6351e003826f,0x142929670a0e6e70
+	.quad	0x27b70a8546d22ffc,0x2e1b21385c26c926
+	.quad	0x4d2c6dfc5ac42aed,0x53380d139d95b3df
+	.quad	0x650a73548baf63de,0x766a0abb3c77b2a8
+	.quad	0x81c2c92e47edaee6,0x92722c851482353b
+	.quad	0xa2bfe8a14cf10364,0xa81a664bbc423001
+	.quad	0xc24b8b70d0f89791,0xc76c51a30654be30
+	.quad	0xd192e819d6ef5218,0xd69906245565a910
+	.quad	0xf40e35855771202a,0x106aa07032bbd1b8
+	.quad	0x19a4c116b8d2d0c8,0x1e376c085141ab53
+	.quad	0x2748774cdf8eeb99,0x34b0bcb5e19b48a8
+	.quad	0x391c0cb3c5c95a63,0x4ed8aa4ae3418acb
+	.quad	0x5b9cca4f7763e373,0x682e6ff3d6b2b8a3
+	.quad	0x748f82ee5defb2fc,0x78a5636f43172f60
+	.quad	0x84c87814a1f0ab72,0x8cc702081a6439ec
+	.quad	0x90befffa23631e28,0xa4506cebde82bde9
+	.quad	0xbef9a3f7b2c67915,0xc67178f2e372532b
+	.quad	0xca273eceea26619c,0xd186b8c721c0c207
+	.quad	0xeada7dd6cde0eb1e,0xf57d4f7fee6ed178
+	.quad	0x06f067aa72176fba,0x0a637dc5a2c898a6
+	.quad	0x113f9804bef90dae,0x1b710b35131c471b
+	.quad	0x28db77f523047d84,0x32caab7b40c72493
+	.quad	0x3c9ebe0a15c9bebc,0x431d67c49c100d4c
+	.quad	0x4cc5d4becb3e42b6,0x597f299cfc657e2a
+	.quad	0x5fcb6fab3ad6faec,0x6c44198c4a475817
+	.quad	0	// terminator
+___
+$code.=<<___ if ($SZ==4);
+	.long	0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5
+	.long	0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5
+	.long	0xd807aa98,0x12835b01,0x243185be,0x550c7dc3
+	.long	0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174
+	.long	0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc
+	.long	0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da
+	.long	0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7
+	.long	0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967
+	.long	0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13
+	.long	0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85
+	.long	0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3
+	.long	0xd192e819,0xd6990624,0xf40e3585,0x106aa070
+	.long	0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5
+	.long	0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3
+	.long	0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208
+	.long	0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2
+	.long	0	//terminator
+___
+$code.=<<___;
+.size	.LK$BITS,.-.LK$BITS
+#ifndef	__KERNEL__
+.align	3
+.LOPENSSL_armcap_P:
+# ifdef	__ILP32__
+	.long	OPENSSL_armcap_P-.
+# else
+	.quad	OPENSSL_armcap_P-.
+# endif
+#endif
+.asciz	"SHA$BITS block transform for ARMv8, CRYPTOGAMS by <appro\@openssl.org>"
+.align	2
+___
+
+if ($SZ==4) {
+my $Ktbl="x3";
+
+my ($ABCD,$EFGH,$abcd)=map("v$_.16b",(0..2));
+my @MSG=map("v$_.16b",(4..7));
+my ($W0,$W1)=("v16.4s","v17.4s");
+my ($ABCD_SAVE,$EFGH_SAVE)=("v18.16b","v19.16b");
+
+$code.=<<___;
+#ifndef	__KERNEL__
+.type	sha256_block_armv8,%function
+.align	6
+sha256_block_armv8:
+.Lv8_entry:
+	stp		x29,x30,[sp,#-16]!
+	add		x29,sp,#0
+
+	ld1.32		{$ABCD,$EFGH},[$ctx]
+	adr		$Ktbl,.LK256
+
+.Loop_hw:
+	ld1		{@MSG[0]-@MSG[3]},[$inp],#64
+	sub		$num,$num,#1
+	ld1.32		{$W0},[$Ktbl],#16
+	rev32		@MSG[0],@MSG[0]
+	rev32		@MSG[1],@MSG[1]
+	rev32		@MSG[2],@MSG[2]
+	rev32		@MSG[3],@MSG[3]
+	orr		$ABCD_SAVE,$ABCD,$ABCD		// offload
+	orr		$EFGH_SAVE,$EFGH,$EFGH
+___
+for($i=0;$i<12;$i++) {
+$code.=<<___;
+	ld1.32		{$W1},[$Ktbl],#16
+	add.i32		$W0,$W0,@MSG[0]
+	sha256su0	@MSG[0],@MSG[1]
+	orr		$abcd,$ABCD,$ABCD
+	sha256h		$ABCD,$EFGH,$W0
+	sha256h2	$EFGH,$abcd,$W0
+	sha256su1	@MSG[0],@MSG[2],@MSG[3]
+___
+	($W0,$W1)=($W1,$W0);	push(@MSG,shift(@MSG));
+}
+$code.=<<___;
+	ld1.32		{$W1},[$Ktbl],#16
+	add.i32		$W0,$W0,@MSG[0]
+	orr		$abcd,$ABCD,$ABCD
+	sha256h		$ABCD,$EFGH,$W0
+	sha256h2	$EFGH,$abcd,$W0
+
+	ld1.32		{$W0},[$Ktbl],#16
+	add.i32		$W1,$W1,@MSG[1]
+	orr		$abcd,$ABCD,$ABCD
+	sha256h		$ABCD,$EFGH,$W1
+	sha256h2	$EFGH,$abcd,$W1
+
+	ld1.32		{$W1},[$Ktbl]
+	add.i32		$W0,$W0,@MSG[2]
+	sub		$Ktbl,$Ktbl,#$rounds*$SZ-16	// rewind
+	orr		$abcd,$ABCD,$ABCD
+	sha256h		$ABCD,$EFGH,$W0
+	sha256h2	$EFGH,$abcd,$W0
+
+	add.i32		$W1,$W1,@MSG[3]
+	orr		$abcd,$ABCD,$ABCD
+	sha256h		$ABCD,$EFGH,$W1
+	sha256h2	$EFGH,$abcd,$W1
+
+	add.i32		$ABCD,$ABCD,$ABCD_SAVE
+	add.i32		$EFGH,$EFGH,$EFGH_SAVE
+
+	cbnz		$num,.Loop_hw
+
+	st1.32		{$ABCD,$EFGH},[$ctx]
+
+	ldr		x29,[sp],#16
+	ret
+.size	sha256_block_armv8,.-sha256_block_armv8
+#endif
+___
+}
+
+if ($SZ==4) {	######################################### NEON stuff #
+# You'll surely note a lot of similarities with sha256-armv4 module,
+# and of course it's not a coincidence. sha256-armv4 was used as
+# initial template, but was adapted for ARMv8 instruction set and
+# extensively re-tuned for all-round performance.
+
+my @V = ($A,$B,$C,$D,$E,$F,$G,$H) = map("w$_",(3..10));
+my ($t0,$t1,$t2,$t3,$t4) = map("w$_",(11..15));
+my $Ktbl="x16";
+my $Xfer="x17";
+my @X = map("q$_",(0..3));
+my ($T0,$T1,$T2,$T3,$T4,$T5,$T6,$T7) = map("q$_",(4..7,16..19));
+my $j=0;
+
+sub AUTOLOAD()          # thunk [simplified] x86-style perlasm
+{ my $opcode = $AUTOLOAD; $opcode =~ s/.*:://; $opcode =~ s/_/\./;
+  my $arg = pop;
+    $arg = "#$arg" if ($arg*1 eq $arg);
+    $code .= "\t$opcode\t".join(',',@_,$arg)."\n";
+}
+
+sub Dscalar { shift =~ m|[qv]([0-9]+)|?"d$1":""; }
+sub Dlo     { shift =~ m|[qv]([0-9]+)|?"v$1.d[0]":""; }
+sub Dhi     { shift =~ m|[qv]([0-9]+)|?"v$1.d[1]":""; }
+
+sub Xupdate()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);
+  my ($a,$b,$c,$d,$e,$f,$g,$h);
+
+	&ext_8		($T0,@X[0],@X[1],4);	# X[1..4]
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&ext_8		($T3,@X[2],@X[3],4);	# X[9..12]
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&mov		(&Dscalar($T7),&Dhi(@X[3]));	# X[14..15]
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&ushr_32	($T2,$T0,$sigma0[0]);
+	 eval(shift(@insns));
+	&ushr_32	($T1,$T0,$sigma0[2]);
+	 eval(shift(@insns));
+	&add_32 	(@X[0],@X[0],$T3);	# X[0..3] += X[9..12]
+	 eval(shift(@insns));
+	&sli_32		($T2,$T0,32-$sigma0[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&ushr_32	($T3,$T0,$sigma0[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&eor_8		($T1,$T1,$T2);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&sli_32		($T3,$T0,32-$sigma0[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &ushr_32	($T4,$T7,$sigma1[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&eor_8		($T1,$T1,$T3);		# sigma0(X[1..4])
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &sli_32	($T4,$T7,32-$sigma1[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &ushr_32	($T5,$T7,$sigma1[2]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &ushr_32	($T3,$T7,$sigma1[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&add_32		(@X[0],@X[0],$T1);	# X[0..3] += sigma0(X[1..4])
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &sli_u32	($T3,$T7,32-$sigma1[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &eor_8	($T5,$T5,$T4);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &eor_8	($T5,$T5,$T3);		# sigma1(X[14..15])
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&add_32		(@X[0],@X[0],$T5);	# X[0..1] += sigma1(X[14..15])
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &ushr_32	($T6,@X[0],$sigma1[0]);
+	 eval(shift(@insns));
+	  &ushr_32	($T7,@X[0],$sigma1[2]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &sli_32	($T6,@X[0],32-$sigma1[0]);
+	 eval(shift(@insns));
+	  &ushr_32	($T5,@X[0],$sigma1[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &eor_8	($T7,$T7,$T6);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	  &sli_32	($T5,@X[0],32-$sigma1[1]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&ld1_32		("{$T0}","[$Ktbl], #16");
+	 eval(shift(@insns));
+	  &eor_8	($T7,$T7,$T5);		# sigma1(X[16..17])
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&eor_8		($T5,$T5,$T5);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&mov		(&Dhi($T5), &Dlo($T7));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&add_32		(@X[0],@X[0],$T5);	# X[2..3] += sigma1(X[16..17])
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&add_32		($T0,$T0,@X[0]);
+	 while($#insns>=1) { eval(shift(@insns)); }
+	&st1_32		("{$T0}","[$Xfer], #16");
+	 eval(shift(@insns));
+
+	push(@X,shift(@X));		# "rotate" X[]
+}
+
+sub Xpreload()
+{ use integer;
+  my $body = shift;
+  my @insns = (&$body,&$body,&$body,&$body);
+  my ($a,$b,$c,$d,$e,$f,$g,$h);
+
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&ld1_8		("{@X[0]}","[$inp],#16");
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&ld1_32		("{$T0}","[$Ktbl],#16");
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&rev32		(@X[0],@X[0]);
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	 eval(shift(@insns));
+	&add_32		($T0,$T0,@X[0]);
+	 foreach (@insns) { eval; }	# remaining instructions
+	&st1_32		("{$T0}","[$Xfer], #16");
+
+	push(@X,shift(@X));		# "rotate" X[]
+}
+
+sub body_00_15 () {
+	(
+	'($a,$b,$c,$d,$e,$f,$g,$h)=@V;'.
+	'&add	($h,$h,$t1)',			# h+=X[i]+K[i]
+	'&add	($a,$a,$t4);'.			# h+=Sigma0(a) from the past
+	'&and	($t1,$f,$e)',
+	'&bic	($t4,$g,$e)',
+	'&eor	($t0,$e,$e,"ror#".($Sigma1[1]-$Sigma1[0]))',
+	'&add	($a,$a,$t2)',			# h+=Maj(a,b,c) from the past
+	'&orr	($t1,$t1,$t4)',			# Ch(e,f,g)
+	'&eor	($t0,$t0,$e,"ror#".($Sigma1[2]-$Sigma1[0]))',	# Sigma1(e)
+	'&eor	($t4,$a,$a,"ror#".($Sigma0[1]-$Sigma0[0]))',
+	'&add	($h,$h,$t1)',			# h+=Ch(e,f,g)
+	'&ror	($t0,$t0,"#$Sigma1[0]")',
+	'&eor	($t2,$a,$b)',			# a^b, b^c in next round
+	'&eor	($t4,$t4,$a,"ror#".($Sigma0[2]-$Sigma0[0]))',	# Sigma0(a)
+	'&add	($h,$h,$t0)',			# h+=Sigma1(e)
+	'&ldr	($t1,sprintf "[sp,#%d]",4*(($j+1)&15))	if (($j&15)!=15);'.
+	'&ldr	($t1,"[$Ktbl]")				if ($j==15);'.
+	'&and	($t3,$t3,$t2)',			# (b^c)&=(a^b)
+	'&ror	($t4,$t4,"#$Sigma0[0]")',
+	'&add	($d,$d,$h)',			# d+=h
+	'&eor	($t3,$t3,$b)',			# Maj(a,b,c)
+	'$j++;	unshift(@V,pop(@V)); ($t2,$t3)=($t3,$t2);'
+	)
+}
+
+$code.=<<___;
+#ifdef	__KERNEL__
+.globl	sha256_block_neon
+#endif
+.type	sha256_block_neon,%function
+.align	4
+sha256_block_neon:
+.Lneon_entry:
+	stp	x29, x30, [sp, #-16]!
+	mov	x29, sp
+	sub	sp,sp,#16*4
+
+	adr	$Ktbl,.LK256
+	add	$num,$inp,$num,lsl#6	// len to point at the end of inp
+
+	ld1.8	{@X[0]},[$inp], #16
+	ld1.8	{@X[1]},[$inp], #16
+	ld1.8	{@X[2]},[$inp], #16
+	ld1.8	{@X[3]},[$inp], #16
+	ld1.32	{$T0},[$Ktbl], #16
+	ld1.32	{$T1},[$Ktbl], #16
+	ld1.32	{$T2},[$Ktbl], #16
+	ld1.32	{$T3},[$Ktbl], #16
+	rev32	@X[0],@X[0]		// yes, even on
+	rev32	@X[1],@X[1]		// big-endian
+	rev32	@X[2],@X[2]
+	rev32	@X[3],@X[3]
+	mov	$Xfer,sp
+	add.32	$T0,$T0,@X[0]
+	add.32	$T1,$T1,@X[1]
+	add.32	$T2,$T2,@X[2]
+	st1.32	{$T0-$T1},[$Xfer], #32
+	add.32	$T3,$T3,@X[3]
+	st1.32	{$T2-$T3},[$Xfer]
+	sub	$Xfer,$Xfer,#32
+
+	ldp	$A,$B,[$ctx]
+	ldp	$C,$D,[$ctx,#8]
+	ldp	$E,$F,[$ctx,#16]
+	ldp	$G,$H,[$ctx,#24]
+	ldr	$t1,[sp,#0]
+	mov	$t2,wzr
+	eor	$t3,$B,$C
+	mov	$t4,wzr
+	b	.L_00_48
+
+.align	4
+.L_00_48:
+___
+	&Xupdate(\&body_00_15);
+	&Xupdate(\&body_00_15);
+	&Xupdate(\&body_00_15);
+	&Xupdate(\&body_00_15);
+$code.=<<___;
+	cmp	$t1,#0				// check for K256 terminator
+	ldr	$t1,[sp,#0]
+	sub	$Xfer,$Xfer,#64
+	bne	.L_00_48
+
+	sub	$Ktbl,$Ktbl,#256		// rewind $Ktbl
+	cmp	$inp,$num
+	mov	$Xfer, #64
+	csel	$Xfer, $Xfer, xzr, eq
+	sub	$inp,$inp,$Xfer			// avoid SEGV
+	mov	$Xfer,sp
+___
+	&Xpreload(\&body_00_15);
+	&Xpreload(\&body_00_15);
+	&Xpreload(\&body_00_15);
+	&Xpreload(\&body_00_15);
+$code.=<<___;
+	add	$A,$A,$t4			// h+=Sigma0(a) from the past
+	ldp	$t0,$t1,[$ctx,#0]
+	add	$A,$A,$t2			// h+=Maj(a,b,c) from the past
+	ldp	$t2,$t3,[$ctx,#8]
+	add	$A,$A,$t0			// accumulate
+	add	$B,$B,$t1
+	ldp	$t0,$t1,[$ctx,#16]
+	add	$C,$C,$t2
+	add	$D,$D,$t3
+	ldp	$t2,$t3,[$ctx,#24]
+	add	$E,$E,$t0
+	add	$F,$F,$t1
+	 ldr	$t1,[sp,#0]
+	stp	$A,$B,[$ctx,#0]
+	add	$G,$G,$t2
+	 mov	$t2,wzr
+	stp	$C,$D,[$ctx,#8]
+	add	$H,$H,$t3
+	stp	$E,$F,[$ctx,#16]
+	 eor	$t3,$B,$C
+	stp	$G,$H,[$ctx,#24]
+	 mov	$t4,wzr
+	 mov	$Xfer,sp
+	b.ne	.L_00_48
+
+	ldr	x29,[x29]
+	add	sp,sp,#16*4+16
+	ret
+.size	sha256_block_neon,.-sha256_block_neon
+___
+}
+
+if ($SZ==8) {
+my $Ktbl="x3";
+
+my @H = map("v$_.16b",(0..4));
+my ($fg,$de,$m9_10)=map("v$_.16b",(5..7));
+my @MSG=map("v$_.16b",(16..23));
+my ($W0,$W1)=("v24.2d","v25.2d");
+my ($AB,$CD,$EF,$GH)=map("v$_.16b",(26..29));
+
+$code.=<<___;
+#ifndef	__KERNEL__
+.type	sha512_block_armv8,%function
+.align	6
+sha512_block_armv8:
+.Lv8_entry:
+	stp		x29,x30,[sp,#-16]!
+	add		x29,sp,#0
+
+	ld1		{@MSG[0]-@MSG[3]},[$inp],#64	// load input
+	ld1		{@MSG[4]-@MSG[7]},[$inp],#64
+
+	ld1.64		{@H[0]-@H[3]},[$ctx]		// load context
+	adr		$Ktbl,.LK512
+
+	rev64		@MSG[0],@MSG[0]
+	rev64		@MSG[1],@MSG[1]
+	rev64		@MSG[2],@MSG[2]
+	rev64		@MSG[3],@MSG[3]
+	rev64		@MSG[4],@MSG[4]
+	rev64		@MSG[5],@MSG[5]
+	rev64		@MSG[6],@MSG[6]
+	rev64		@MSG[7],@MSG[7]
+	b		.Loop_hw
+
+.align	4
+.Loop_hw:
+	ld1.64		{$W0},[$Ktbl],#16
+	subs		$num,$num,#1
+	sub		x4,$inp,#128
+	orr		$AB,@H[0],@H[0]			// offload
+	orr		$CD,@H[1],@H[1]
+	orr		$EF,@H[2],@H[2]
+	orr		$GH,@H[3],@H[3]
+	csel		$inp,$inp,x4,ne			// conditional rewind
+___
+for($i=0;$i<32;$i++) {
+$code.=<<___;
+	add.i64		$W0,$W0,@MSG[0]
+	ld1.64		{$W1},[$Ktbl],#16
+	ext		$W0,$W0,$W0,#8
+	ext		$fg,@H[2],@H[3],#8
+	ext		$de,@H[1],@H[2],#8
+	add.i64		@H[3],@H[3],$W0			// "T1 + H + K512[i]"
+	 sha512su0	@MSG[0],@MSG[1]
+	 ext		$m9_10,@MSG[4],@MSG[5],#8
+	sha512h		@H[3],$fg,$de
+	 sha512su1	@MSG[0],@MSG[7],$m9_10
+	add.i64		@H[4],@H[1],@H[3]		// "D + T1"
+	sha512h2	@H[3],$H[1],@H[0]
+___
+	($W0,$W1)=($W1,$W0);	push(@MSG,shift(@MSG));
+	@H = (@H[3],@H[0],@H[4],@H[2],@H[1]);
+}
+for(;$i<40;$i++) {
+$code.=<<___	if ($i<39);
+	ld1.64		{$W1},[$Ktbl],#16
+___
+$code.=<<___	if ($i==39);
+	sub		$Ktbl,$Ktbl,#$rounds*$SZ	// rewind
+___
+$code.=<<___;
+	add.i64		$W0,$W0,@MSG[0]
+	 ld1		{@MSG[0]},[$inp],#16		// load next input
+	ext		$W0,$W0,$W0,#8
+	ext		$fg,@H[2],@H[3],#8
+	ext		$de,@H[1],@H[2],#8
+	add.i64		@H[3],@H[3],$W0			// "T1 + H + K512[i]"
+	sha512h		@H[3],$fg,$de
+	 rev64		@MSG[0],@MSG[0]
+	add.i64		@H[4],@H[1],@H[3]		// "D + T1"
+	sha512h2	@H[3],$H[1],@H[0]
+___
+	($W0,$W1)=($W1,$W0);	push(@MSG,shift(@MSG));
+	@H = (@H[3],@H[0],@H[4],@H[2],@H[1]);
+}
+$code.=<<___;
+	add.i64		@H[0],@H[0],$AB			// accumulate
+	add.i64		@H[1],@H[1],$CD
+	add.i64		@H[2],@H[2],$EF
+	add.i64		@H[3],@H[3],$GH
+
+	cbnz		$num,.Loop_hw
+
+	st1.64		{@H[0]-@H[3]},[$ctx]		// store context
+
+	ldr		x29,[sp],#16
+	ret
+.size	sha512_block_armv8,.-sha512_block_armv8
+#endif
+___
+}
+
+$code.=<<___;
+#ifndef	__KERNEL__
+.comm	OPENSSL_armcap_P,4,4
+#endif
+___
+
+{   my  %opcode = (
+	"sha256h"	=> 0x5e004000,	"sha256h2"	=> 0x5e005000,
+	"sha256su0"	=> 0x5e282800,	"sha256su1"	=> 0x5e006000	);
+
+    sub unsha256 {
+	my ($mnemonic,$arg)=@_;
+
+	$arg =~ m/[qv]([0-9]+)[^,]*,\s*[qv]([0-9]+)[^,]*(?:,\s*[qv]([0-9]+))?/o
+	&&
+	sprintf ".inst\t0x%08x\t//%s %s",
+			$opcode{$mnemonic}|$1|($2<<5)|($3<<16),
+			$mnemonic,$arg;
+    }
+}
+
+{   my  %opcode = (
+	"sha512h"	=> 0xce608000,	"sha512h2"	=> 0xce608400,
+	"sha512su0"	=> 0xcec08000,	"sha512su1"	=> 0xce608800	);
+
+    sub unsha512 {
+	my ($mnemonic,$arg)=@_;
+
+	$arg =~ m/[qv]([0-9]+)[^,]*,\s*[qv]([0-9]+)[^,]*(?:,\s*[qv]([0-9]+))?/o
+	&&
+	sprintf ".inst\t0x%08x\t//%s %s",
+			$opcode{$mnemonic}|$1|($2<<5)|($3<<16),
+			$mnemonic,$arg;
+    }
+}
+
+open SELF,$0;
+while(<SELF>) {
+        next if (/^#!/);
+        last if (!s/^#/\/\// and !/^$/);
+        print;
+}
+close SELF;
+
+foreach(split("\n",$code)) {
+
+	s/\`([^\`]*)\`/eval($1)/ge;
+
+	s/\b(sha512\w+)\s+([qv].*)/unsha512($1,$2)/ge	or
+	s/\b(sha256\w+)\s+([qv].*)/unsha256($1,$2)/ge;
+
+	s/\bq([0-9]+)\b/v$1.16b/g;		# old->new registers
+
+	s/\.[ui]?8(\s)/$1/;
+	s/\.\w?64\b//		and s/\.16b/\.2d/g	or
+	s/\.\w?32\b//		and s/\.16b/\.4s/g;
+	m/\bext\b/		and s/\.2d/\.16b/g	or
+	m/(ld|st)1[^\[]+\[0\]/	and s/\.4s/\.s/g;
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-c64xplus.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-c64xplus.pl
new file mode 100644
index 000000000..9ebfc92e2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-c64xplus.pl
@@ -0,0 +1,438 @@
+#! /usr/bin/env perl
+# Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# SHA512 for C64x+.
+#
+# January 2012
+#
+# Performance is 19 cycles per processed byte. Compared to block
+# transform function from sha512.c compiled with cl6x with -mv6400+
+# -o2 -DOPENSSL_SMALL_FOOTPRINT it's almost 7x faster and 2x smaller.
+# Loop unroll won't make it, this implementation, any faster, because
+# it's effectively dominated by SHRU||SHL pairs and you can't schedule
+# more of them.
+#
+# !!! Note that this module uses AMR, which means that all interrupt
+# service routines are expected to preserve it and for own well-being
+# zero it upon entry.
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+($CTXA,$INP,$NUM) = ("A4","B4","A6");            # arguments
+ $K512="A3";
+
+($Ahi,$Actxhi,$Bhi,$Bctxhi,$Chi,$Cctxhi,$Dhi,$Dctxhi,
+ $Ehi,$Ectxhi,$Fhi,$Fctxhi,$Ghi,$Gctxhi,$Hhi,$Hctxhi)=map("A$_",(16..31));
+($Alo,$Actxlo,$Blo,$Bctxlo,$Clo,$Cctxlo,$Dlo,$Dctxlo,
+ $Elo,$Ectxlo,$Flo,$Fctxlo,$Glo,$Gctxlo,$Hlo,$Hctxlo)=map("B$_",(16..31));
+
+($S1hi,$CHhi,$S0hi,$t0hi)=map("A$_",(10..13));
+($S1lo,$CHlo,$S0lo,$t0lo)=map("B$_",(10..13));
+($T1hi,         $T2hi)=         ("A6","A7");
+($T1lo,$T1carry,$T2lo,$T2carry)=("B6","B7","B8","B9");
+($Khi,$Klo)=("A9","A8");
+($MAJhi,$MAJlo)=($T2hi,$T2lo);
+($t1hi,$t1lo)=($Khi,"B2");
+ $CTXB=$t1lo;
+
+($Xihi,$Xilo)=("A5","B5");			# circular/ring buffer
+
+$code.=<<___;
+	.text
+
+	.if	.ASSEMBLER_VERSION<7000000
+	.asg	0,__TI_EABI__
+	.endif
+	.if	__TI_EABI__
+	.nocmp
+	.asg	sha512_block_data_order,_sha512_block_data_order
+	.endif
+
+	.asg	B3,RA
+	.asg	A15,FP
+	.asg	B15,SP
+
+	.if	.BIG_ENDIAN
+	.asg	$Khi,KHI
+	.asg	$Klo,KLO
+	.else
+	.asg	$Khi,KLO
+	.asg	$Klo,KHI
+	.endif
+
+	.global	_sha512_block_data_order
+_sha512_block_data_order:
+__sha512_block:
+	.asmfunc stack_usage(40+128)
+	MV	$NUM,A0				; reassign $NUM
+||	MVK	-128,B0
+  [!A0]	BNOP	RA				; if ($NUM==0) return;
+|| [A0]	STW	FP,*SP--(40)			; save frame pointer
+|| [A0]	MV	SP,FP
+   [A0]	STDW	B13:B12,*SP[4]
+|| [A0]	MVK	0x00404,B1
+   [A0]	STDW	B11:B10,*SP[3]
+|| [A0]	STDW	A13:A12,*FP[-3]
+|| [A0]	MVKH	0x60000,B1
+   [A0]	STDW	A11:A10,*SP[1]
+|| [A0]	MVC	B1,AMR				; setup circular addressing
+|| [A0]	ADD	B0,SP,SP			; alloca(128)
+	.if	__TI_EABI__
+   [A0]	AND	B0,SP,SP			; align stack at 128 bytes
+|| [A0]	ADDKPC	__sha512_block,B1
+|| [A0]	MVKL	\$PCR_OFFSET(K512,__sha512_block),$K512
+   [A0]	MVKH	\$PCR_OFFSET(K512,__sha512_block),$K512
+|| [A0]	SUBAW	SP,2,SP				; reserve two words above buffer
+	.else
+   [A0]	AND	B0,SP,SP			; align stack at 128 bytes
+|| [A0]	ADDKPC	__sha512_block,B1
+|| [A0]	MVKL	(K512-__sha512_block),$K512
+   [A0]	MVKH	(K512-__sha512_block),$K512
+|| [A0]	SUBAW	SP,2,SP				; reserve two words above buffer
+	.endif
+	ADDAW	SP,3,$Xilo
+	ADDAW	SP,2,$Xihi
+
+||	MV	$CTXA,$CTXB
+	LDW	*${CTXA}[0^.LITTLE_ENDIAN],$Ahi	; load ctx
+||	LDW	*${CTXB}[1^.LITTLE_ENDIAN],$Alo
+||	ADD	B1,$K512,$K512
+	LDW	*${CTXA}[2^.LITTLE_ENDIAN],$Bhi
+||	LDW	*${CTXB}[3^.LITTLE_ENDIAN],$Blo
+	LDW	*${CTXA}[4^.LITTLE_ENDIAN],$Chi
+||	LDW	*${CTXB}[5^.LITTLE_ENDIAN],$Clo
+	LDW	*${CTXA}[6^.LITTLE_ENDIAN],$Dhi
+||	LDW	*${CTXB}[7^.LITTLE_ENDIAN],$Dlo
+	LDW	*${CTXA}[8^.LITTLE_ENDIAN],$Ehi
+||	LDW	*${CTXB}[9^.LITTLE_ENDIAN],$Elo
+	LDW	*${CTXA}[10^.LITTLE_ENDIAN],$Fhi
+||	LDW	*${CTXB}[11^.LITTLE_ENDIAN],$Flo
+	LDW	*${CTXA}[12^.LITTLE_ENDIAN],$Ghi
+||	LDW	*${CTXB}[13^.LITTLE_ENDIAN],$Glo
+	LDW	*${CTXA}[14^.LITTLE_ENDIAN],$Hhi
+||	LDW	*${CTXB}[15^.LITTLE_ENDIAN],$Hlo
+
+	LDNDW	*$INP++,B11:B10			; pre-fetch input
+	LDDW	*$K512++,$Khi:$Klo		; pre-fetch K512[0]
+outerloop?:
+	MVK	15,B0				; loop counters
+||	MVK	64,B1
+||	SUB	A0,1,A0
+	MV	$Ahi,$Actxhi
+||	MV	$Alo,$Actxlo
+||	MV	$Bhi,$Bctxhi
+||	MV	$Blo,$Bctxlo
+||	MV	$Chi,$Cctxhi
+||	MV	$Clo,$Cctxlo
+||	MVD	$Dhi,$Dctxhi
+||	MVD	$Dlo,$Dctxlo
+	MV	$Ehi,$Ectxhi
+||	MV	$Elo,$Ectxlo
+||	MV	$Fhi,$Fctxhi
+||	MV	$Flo,$Fctxlo
+||	MV	$Ghi,$Gctxhi
+||	MV	$Glo,$Gctxlo
+||	MVD	$Hhi,$Hctxhi
+||	MVD	$Hlo,$Hctxlo
+loop0_15?:
+	.if	.BIG_ENDIAN
+	MV	B11,$T1hi
+||	MV	B10,$T1lo
+	.else
+	SWAP4	B10,$T1hi
+||	SWAP4	B11,$T1lo
+	SWAP2	$T1hi,$T1hi
+||	SWAP2	$T1lo,$T1lo
+	.endif
+loop16_79?:
+	STW	$T1hi,*$Xihi++[2]
+||	STW	$T1lo,*$Xilo++[2]			; X[i] = T1
+||	ADD	$Hhi,$T1hi,$T1hi
+||	ADDU	$Hlo,$T1lo,$T1carry:$T1lo		; T1 += h
+||	SHRU	$Ehi,14,$S1hi
+||	SHL	$Ehi,32-14,$S1lo
+	XOR	$Fhi,$Ghi,$CHhi
+||	XOR	$Flo,$Glo,$CHlo
+||	ADD	KHI,$T1hi,$T1hi
+||	ADDU	KLO,$T1carry:$T1lo,$T1carry:$T1lo	; T1 += K512[i]
+||	SHRU	$Elo,14,$t0lo
+||	SHL	$Elo,32-14,$t0hi
+	XOR	$t0hi,$S1hi,$S1hi
+||	XOR	$t0lo,$S1lo,$S1lo
+||	AND	$Ehi,$CHhi,$CHhi
+||	AND	$Elo,$CHlo,$CHlo
+||	ROTL	$Ghi,0,$Hhi
+||	ROTL	$Glo,0,$Hlo				; h = g
+||	SHRU	$Ehi,18,$t0hi
+||	SHL	$Ehi,32-18,$t0lo
+	XOR	$t0hi,$S1hi,$S1hi
+||	XOR	$t0lo,$S1lo,$S1lo
+||	XOR	$Ghi,$CHhi,$CHhi
+||	XOR	$Glo,$CHlo,$CHlo			; Ch(e,f,g) = ((f^g)&e)^g
+||	ROTL	$Fhi,0,$Ghi
+||	ROTL	$Flo,0,$Glo				; g = f
+||	SHRU	$Elo,18,$t0lo
+||	SHL	$Elo,32-18,$t0hi
+	XOR	$t0hi,$S1hi,$S1hi
+||	XOR	$t0lo,$S1lo,$S1lo
+||	OR	$Ahi,$Bhi,$MAJhi
+||	OR	$Alo,$Blo,$MAJlo
+||	ROTL	$Ehi,0,$Fhi
+||	ROTL	$Elo,0,$Flo				; f = e
+||	SHRU	$Ehi,41-32,$t0lo
+||	SHL	$Ehi,64-41,$t0hi
+	XOR	$t0hi,$S1hi,$S1hi
+||	XOR	$t0lo,$S1lo,$S1lo
+||	AND	$Chi,$MAJhi,$MAJhi
+||	AND	$Clo,$MAJlo,$MAJlo
+||	ROTL	$Dhi,0,$Ehi
+||	ROTL	$Dlo,0,$Elo				; e = d
+||	SHRU	$Elo,41-32,$t0hi
+||	SHL	$Elo,64-41,$t0lo
+	XOR	$t0hi,$S1hi,$S1hi
+||	XOR	$t0lo,$S1lo,$S1lo			; Sigma1(e)
+||	AND	$Ahi,$Bhi,$t1hi
+||	AND	$Alo,$Blo,$t1lo
+||	ROTL	$Chi,0,$Dhi
+||	ROTL	$Clo,0,$Dlo				; d = c
+||	SHRU	$Ahi,28,$S0hi
+||	SHL	$Ahi,32-28,$S0lo
+	OR	$t1hi,$MAJhi,$MAJhi
+||	OR	$t1lo,$MAJlo,$MAJlo			; Maj(a,b,c) = ((a|b)&c)|(a&b)
+||	ADD	$CHhi,$T1hi,$T1hi
+||	ADDU	$CHlo,$T1carry:$T1lo,$T1carry:$T1lo	; T1 += Ch(e,f,g)
+||	ROTL	$Bhi,0,$Chi
+||	ROTL	$Blo,0,$Clo				; c = b
+||	SHRU	$Alo,28,$t0lo
+||	SHL	$Alo,32-28,$t0hi
+	XOR	$t0hi,$S0hi,$S0hi
+||	XOR	$t0lo,$S0lo,$S0lo
+||	ADD	$S1hi,$T1hi,$T1hi
+||	ADDU	$S1lo,$T1carry:$T1lo,$T1carry:$T1lo	; T1 += Sigma1(e)
+||	ROTL	$Ahi,0,$Bhi
+||	ROTL	$Alo,0,$Blo				; b = a
+||	SHRU	$Ahi,34-32,$t0lo
+||	SHL	$Ahi,64-34,$t0hi
+	XOR	$t0hi,$S0hi,$S0hi
+||	XOR	$t0lo,$S0lo,$S0lo
+||	ADD	$MAJhi,$T1hi,$T2hi
+||	ADDU	$MAJlo,$T1carry:$T1lo,$T2carry:$T2lo	; T2 = T1+Maj(a,b,c)
+||	SHRU	$Alo,34-32,$t0hi
+||	SHL	$Alo,64-34,$t0lo
+	XOR	$t0hi,$S0hi,$S0hi
+||	XOR	$t0lo,$S0lo,$S0lo
+||	ADD	$Ehi,$T1hi,$T1hi
+||	ADDU	$Elo,$T1carry:$T1lo,$T1carry:$T1lo	; T1 += e
+|| [B0]	BNOP	loop0_15?
+||	SHRU	$Ahi,39-32,$t0lo
+||	SHL	$Ahi,64-39,$t0hi
+	XOR	$t0hi,$S0hi,$S0hi
+||	XOR	$t0lo,$S0lo,$S0lo
+|| [B0]	LDNDW	*$INP++,B11:B10				; pre-fetch input
+||[!B1]	BNOP	break?
+||	SHRU	$Alo,39-32,$t0hi
+||	SHL	$Alo,64-39,$t0lo
+	XOR	$t0hi,$S0hi,$S0hi
+||	XOR	$t0lo,$S0lo,$S0lo			; Sigma0(a)
+||	ADD	$T1carry,$T1hi,$Ehi
+||	MV	$T1lo,$Elo				; e = T1
+||[!B0]	LDW	*${Xihi}[28],$T1hi
+||[!B0]	LDW	*${Xilo}[28],$T1lo			; X[i+14]
+	ADD	$S0hi,$T2hi,$T2hi
+||	ADDU	$S0lo,$T2carry:$T2lo,$T2carry:$T2lo	; T2 += Sigma0(a)
+|| [B1]	LDDW	*$K512++,$Khi:$Klo			; pre-fetch K512[i]
+	NOP						; avoid cross-path stall
+	ADD	$T2carry,$T2hi,$Ahi
+||	MV	$T2lo,$Alo				; a = T2
+|| [B0]	SUB	B0,1,B0
+;;===== branch to loop00_15? is taken here
+	NOP
+;;===== branch to break? is taken here
+	LDW	*${Xihi}[2],$T2hi
+||	LDW	*${Xilo}[2],$T2lo			; X[i+1]
+||	SHRU	$T1hi,19,$S1hi
+||	SHL	$T1hi,32-19,$S1lo
+	SHRU	$T1lo,19,$t0lo
+||	SHL	$T1lo,32-19,$t0hi
+	XOR	$t0hi,$S1hi,$S1hi
+||	XOR	$t0lo,$S1lo,$S1lo
+||	SHRU	$T1hi,61-32,$t0lo
+||	SHL	$T1hi,64-61,$t0hi
+	XOR	$t0hi,$S1hi,$S1hi
+||	XOR	$t0lo,$S1lo,$S1lo
+||	SHRU	$T1lo,61-32,$t0hi
+||	SHL	$T1lo,64-61,$t0lo
+	XOR	$t0hi,$S1hi,$S1hi
+||	XOR	$t0lo,$S1lo,$S1lo
+||	SHRU	$T1hi,6,$t0hi
+||	SHL	$T1hi,32-6,$t0lo
+	XOR	$t0hi,$S1hi,$S1hi
+||	XOR	$t0lo,$S1lo,$S1lo
+||	SHRU	$T1lo,6,$t0lo
+||	LDW	*${Xihi}[18],$T1hi
+||	LDW	*${Xilo}[18],$T1lo			; X[i+9]
+	XOR	$t0lo,$S1lo,$S1lo			; sigma1(Xi[i+14])
+
+||	LDW	*${Xihi}[0],$CHhi
+||	LDW	*${Xilo}[0],$CHlo			; X[i]
+||	SHRU	$T2hi,1,$S0hi
+||	SHL	$T2hi,32-1,$S0lo
+	SHRU	$T2lo,1,$t0lo
+||	SHL	$T2lo,32-1,$t0hi
+	XOR	$t0hi,$S0hi,$S0hi
+||	XOR	$t0lo,$S0lo,$S0lo
+||	SHRU	$T2hi,8,$t0hi
+||	SHL	$T2hi,32-8,$t0lo
+	XOR	$t0hi,$S0hi,$S0hi
+||	XOR	$t0lo,$S0lo,$S0lo
+||	SHRU	$T2lo,8,$t0lo
+||	SHL	$T2lo,32-8,$t0hi
+	XOR	$t0hi,$S0hi,$S0hi
+||	XOR	$t0lo,$S0lo,$S0lo
+||	ADD	$S1hi,$T1hi,$T1hi
+||	ADDU	$S1lo,$T1lo,$T1carry:$T1lo		; T1 = X[i+9]+sigma1()
+|| [B1]	BNOP	loop16_79?
+||	SHRU	$T2hi,7,$t0hi
+||	SHL	$T2hi,32-7,$t0lo
+	XOR	$t0hi,$S0hi,$S0hi
+||	XOR	$t0lo,$S0lo,$S0lo
+||	ADD	$CHhi,$T1hi,$T1hi
+||	ADDU	$CHlo,$T1carry:$T1lo,$T1carry:$T1lo	; T1 += X[i]
+||	SHRU	$T2lo,7,$t0lo
+	XOR	$t0lo,$S0lo,$S0lo			; sigma0(Xi[i+1]
+
+	ADD	$S0hi,$T1hi,$T1hi
+||	ADDU	$S0lo,$T1carry:$T1lo,$T1carry:$T1lo	; T1 += sigma0()
+|| [B1]	SUB	B1,1,B1
+	NOP						; avoid cross-path stall
+	ADD	$T1carry,$T1hi,$T1hi
+;;===== branch to loop16_79? is taken here
+
+break?:
+	ADD	$Ahi,$Actxhi,$Ahi		; accumulate ctx
+||	ADDU	$Alo,$Actxlo,$Actxlo:$Alo
+|| [A0]	LDNDW	*$INP++,B11:B10			; pre-fetch input
+|| [A0]	ADDK	-640,$K512			; rewind pointer to K512
+	ADD	$Bhi,$Bctxhi,$Bhi
+||	ADDU	$Blo,$Bctxlo,$Bctxlo:$Blo
+|| [A0]	LDDW	*$K512++,$Khi:$Klo		; pre-fetch K512[0]
+	ADD	$Chi,$Cctxhi,$Chi
+||	ADDU	$Clo,$Cctxlo,$Cctxlo:$Clo
+||	ADD	$Actxlo,$Ahi,$Ahi
+||[!A0]	MV	$CTXA,$CTXB
+	ADD	$Dhi,$Dctxhi,$Dhi
+||	ADDU	$Dlo,$Dctxlo,$Dctxlo:$Dlo
+||	ADD	$Bctxlo,$Bhi,$Bhi
+||[!A0]	STW	$Ahi,*${CTXA}[0^.LITTLE_ENDIAN]	; save ctx
+||[!A0]	STW	$Alo,*${CTXB}[1^.LITTLE_ENDIAN]
+	ADD	$Ehi,$Ectxhi,$Ehi
+||	ADDU	$Elo,$Ectxlo,$Ectxlo:$Elo
+||	ADD	$Cctxlo,$Chi,$Chi
+|| [A0]	BNOP	outerloop?
+||[!A0]	STW	$Bhi,*${CTXA}[2^.LITTLE_ENDIAN]
+||[!A0]	STW	$Blo,*${CTXB}[3^.LITTLE_ENDIAN]
+	ADD	$Fhi,$Fctxhi,$Fhi
+||	ADDU	$Flo,$Fctxlo,$Fctxlo:$Flo
+||	ADD	$Dctxlo,$Dhi,$Dhi
+||[!A0]	STW	$Chi,*${CTXA}[4^.LITTLE_ENDIAN]
+||[!A0]	STW	$Clo,*${CTXB}[5^.LITTLE_ENDIAN]
+	ADD	$Ghi,$Gctxhi,$Ghi
+||	ADDU	$Glo,$Gctxlo,$Gctxlo:$Glo
+||	ADD	$Ectxlo,$Ehi,$Ehi
+||[!A0]	STW	$Dhi,*${CTXA}[6^.LITTLE_ENDIAN]
+||[!A0]	STW	$Dlo,*${CTXB}[7^.LITTLE_ENDIAN]
+	ADD	$Hhi,$Hctxhi,$Hhi
+||	ADDU	$Hlo,$Hctxlo,$Hctxlo:$Hlo
+||	ADD	$Fctxlo,$Fhi,$Fhi
+||[!A0]	STW	$Ehi,*${CTXA}[8^.LITTLE_ENDIAN]
+||[!A0]	STW	$Elo,*${CTXB}[9^.LITTLE_ENDIAN]
+	ADD	$Gctxlo,$Ghi,$Ghi
+||[!A0]	STW	$Fhi,*${CTXA}[10^.LITTLE_ENDIAN]
+||[!A0]	STW	$Flo,*${CTXB}[11^.LITTLE_ENDIAN]
+	ADD	$Hctxlo,$Hhi,$Hhi
+||[!A0]	STW	$Ghi,*${CTXA}[12^.LITTLE_ENDIAN]
+||[!A0]	STW	$Glo,*${CTXB}[13^.LITTLE_ENDIAN]
+;;===== branch to outerloop? is taken here
+
+	STW	$Hhi,*${CTXA}[14^.LITTLE_ENDIAN]
+||	STW	$Hlo,*${CTXB}[15^.LITTLE_ENDIAN]
+||	MVK	-40,B0
+	ADD	FP,B0,SP			; destroy circular buffer
+||	LDDW	*FP[-4],A11:A10
+	LDDW	*SP[2],A13:A12
+||	LDDW	*FP[-2],B11:B10
+	LDDW	*SP[4],B13:B12
+||	BNOP	RA
+	LDW	*++SP(40),FP			; restore frame pointer
+	MVK	0,B0
+	MVC	B0,AMR				; clear AMR
+	NOP	2				; wait till FP is committed
+	.endasmfunc
+
+	.if	__TI_EABI__
+	.sect	".text:sha_asm.const"
+	.else
+	.sect	".const:sha_asm"
+	.endif
+	.align	128
+K512:
+	.uword	0x428a2f98,0xd728ae22, 0x71374491,0x23ef65cd
+	.uword	0xb5c0fbcf,0xec4d3b2f, 0xe9b5dba5,0x8189dbbc
+	.uword	0x3956c25b,0xf348b538, 0x59f111f1,0xb605d019
+	.uword	0x923f82a4,0xaf194f9b, 0xab1c5ed5,0xda6d8118
+	.uword	0xd807aa98,0xa3030242, 0x12835b01,0x45706fbe
+	.uword	0x243185be,0x4ee4b28c, 0x550c7dc3,0xd5ffb4e2
+	.uword	0x72be5d74,0xf27b896f, 0x80deb1fe,0x3b1696b1
+	.uword	0x9bdc06a7,0x25c71235, 0xc19bf174,0xcf692694
+	.uword	0xe49b69c1,0x9ef14ad2, 0xefbe4786,0x384f25e3
+	.uword	0x0fc19dc6,0x8b8cd5b5, 0x240ca1cc,0x77ac9c65
+	.uword	0x2de92c6f,0x592b0275, 0x4a7484aa,0x6ea6e483
+	.uword	0x5cb0a9dc,0xbd41fbd4, 0x76f988da,0x831153b5
+	.uword	0x983e5152,0xee66dfab, 0xa831c66d,0x2db43210
+	.uword	0xb00327c8,0x98fb213f, 0xbf597fc7,0xbeef0ee4
+	.uword	0xc6e00bf3,0x3da88fc2, 0xd5a79147,0x930aa725
+	.uword	0x06ca6351,0xe003826f, 0x14292967,0x0a0e6e70
+	.uword	0x27b70a85,0x46d22ffc, 0x2e1b2138,0x5c26c926
+	.uword	0x4d2c6dfc,0x5ac42aed, 0x53380d13,0x9d95b3df
+	.uword	0x650a7354,0x8baf63de, 0x766a0abb,0x3c77b2a8
+	.uword	0x81c2c92e,0x47edaee6, 0x92722c85,0x1482353b
+	.uword	0xa2bfe8a1,0x4cf10364, 0xa81a664b,0xbc423001
+	.uword	0xc24b8b70,0xd0f89791, 0xc76c51a3,0x0654be30
+	.uword	0xd192e819,0xd6ef5218, 0xd6990624,0x5565a910
+	.uword	0xf40e3585,0x5771202a, 0x106aa070,0x32bbd1b8
+	.uword	0x19a4c116,0xb8d2d0c8, 0x1e376c08,0x5141ab53
+	.uword	0x2748774c,0xdf8eeb99, 0x34b0bcb5,0xe19b48a8
+	.uword	0x391c0cb3,0xc5c95a63, 0x4ed8aa4a,0xe3418acb
+	.uword	0x5b9cca4f,0x7763e373, 0x682e6ff3,0xd6b2b8a3
+	.uword	0x748f82ee,0x5defb2fc, 0x78a5636f,0x43172f60
+	.uword	0x84c87814,0xa1f0ab72, 0x8cc70208,0x1a6439ec
+	.uword	0x90befffa,0x23631e28, 0xa4506ceb,0xde82bde9
+	.uword	0xbef9a3f7,0xb2c67915, 0xc67178f2,0xe372532b
+	.uword	0xca273ece,0xea26619c, 0xd186b8c7,0x21c0c207
+	.uword	0xeada7dd6,0xcde0eb1e, 0xf57d4f7f,0xee6ed178
+	.uword	0x06f067aa,0x72176fba, 0x0a637dc5,0xa2c898a6
+	.uword	0x113f9804,0xbef90dae, 0x1b710b35,0x131c471b
+	.uword	0x28db77f5,0x23047d84, 0x32caab7b,0x40c72493
+	.uword	0x3c9ebe0a,0x15c9bebc, 0x431d67c4,0x9c100d4c
+	.uword	0x4cc5d4be,0xcb3e42b6, 0x597f299c,0xfc657e2a
+	.uword	0x5fcb6fab,0x3ad6faec, 0x6c44198c,0x4a475817
+	.cstring "SHA512 block transform for C64x+, CRYPTOGAMS by <appro\@openssl.org>"
+	.align	4
+___
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-ia64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-ia64.pl
new file mode 100755
index 000000000..356a46ace
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-ia64.pl
@@ -0,0 +1,692 @@
+#! /usr/bin/env perl
+# Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# SHA256/512_Transform for Itanium.
+#
+# sha512_block runs in 1003 cycles on Itanium 2, which is almost 50%
+# faster than gcc and >60%(!) faster than code generated by HP-UX
+# compiler (yes, HP-UX is generating slower code, because unlike gcc,
+# it failed to deploy "shift right pair," 'shrp' instruction, which
+# substitutes for 64-bit rotate).
+#
+# 924 cycles long sha256_block outperforms gcc by over factor of 2(!)
+# and HP-UX compiler - by >40% (yes, gcc won sha512_block, but lost
+# this one big time). Note that "formally" 924 is about 100 cycles
+# too much. I mean it's 64 32-bit rounds vs. 80 virtually identical
+# 64-bit ones and 1003*64/80 gives 802. Extra cycles, 2 per round,
+# are spent on extra work to provide for 32-bit rotations. 32-bit
+# rotations are still handled by 'shrp' instruction and for this
+# reason lower 32 bits are deposited to upper half of 64-bit register
+# prior 'shrp' issue. And in order to minimize the amount of such
+# operations, X[16] values are *maintained* with copies of lower
+# halves in upper halves, which is why you'll spot such instructions
+# as custom 'mux2', "parallel 32-bit add," 'padd4' and "parallel
+# 32-bit unsigned right shift," 'pshr4.u' instructions here.
+#
+# Rules of engagement.
+#
+# There is only one integer shifter meaning that if I have two rotate,
+# deposit or extract instructions in adjacent bundles, they shall
+# split [at run-time if they have to]. But note that variable and
+# parallel shifts are performed by multi-media ALU and *are* pairable
+# with rotates [and alike]. On the backside MMALU is rather slow: it
+# takes 2 extra cycles before the result of integer operation is
+# available *to* MMALU and 2(*) extra cycles before the result of MM
+# operation is available "back" *to* integer ALU, not to mention that
+# MMALU itself has 2 cycles latency. However! I explicitly scheduled
+# these MM instructions to avoid MM stalls, so that all these extra
+# latencies get "hidden" in instruction-level parallelism.
+#
+# (*) 2 cycles on Itanium 1 and 1 cycle on Itanium 2. But I schedule
+#     for 2 in order to provide for best *overall* performance,
+#     because on Itanium 1 stall on MM result is accompanied by
+#     pipeline flush, which takes 6 cycles:-(
+#
+# June 2012
+#
+# Improve performance by 15-20%. Note about "rules of engagement"
+# above. Contemporary cores are equipped with additional shifter,
+# so that they should perform even better than below, presumably
+# by ~10%.
+#
+######################################################################
+# Current performance in cycles per processed byte for Itanium 2
+# pre-9000 series [little-endian] system:
+#
+# SHA1(*)	5.7
+# SHA256	12.6
+# SHA512	6.7
+#
+# (*) SHA1 result is presented purely for reference purposes.
+#
+# To generate code, pass the file name with either 256 or 512 in its
+# name and compiler flags.
+
+$output=pop;
+
+if ($output =~ /512.*\.[s|asm]/) {
+	$SZ=8;
+	$BITS=8*$SZ;
+	$LDW="ld8";
+	$STW="st8";
+	$ADD="add";
+	$SHRU="shr.u";
+	$TABLE="K512";
+	$func="sha512_block_data_order";
+	@Sigma0=(28,34,39);
+	@Sigma1=(14,18,41);
+	@sigma0=(1,  8, 7);
+	@sigma1=(19,61, 6);
+	$rounds=80;
+} elsif ($output =~ /256.*\.[s|asm]/) {
+	$SZ=4;
+	$BITS=8*$SZ;
+	$LDW="ld4";
+	$STW="st4";
+	$ADD="padd4";
+	$SHRU="pshr4.u";
+	$TABLE="K256";
+	$func="sha256_block_data_order";
+	@Sigma0=( 2,13,22);
+	@Sigma1=( 6,11,25);
+	@sigma0=( 7,18, 3);
+	@sigma1=(17,19,10);
+	$rounds=64;
+} else { die "nonsense $output"; }
+
+open STDOUT,">$output" || die "can't open $output: $!";
+
+if ($^O eq "hpux") {
+    $ADDP="addp4";
+    for (@ARGV) { $ADDP="add" if (/[\+DD|\-mlp]64/); }
+} else { $ADDP="add"; }
+for (@ARGV)  {	$big_endian=1 if (/\-DB_ENDIAN/);
+		$big_endian=0 if (/\-DL_ENDIAN/);  }
+if (!defined($big_endian))
+             {	$big_endian=(unpack('L',pack('N',1))==1);  }
+
+$code=<<___;
+.ident  \"$output, version 2.0\"
+.ident  \"IA-64 ISA artwork by Andy Polyakov <appro\@openssl.org>\"
+.explicit
+.text
+
+pfssave=r2;
+lcsave=r3;
+prsave=r14;
+K=r15;
+A_=r16; B_=r17; C_=r18; D_=r19;
+E_=r20; F_=r21; G_=r22; H_=r23;
+T1=r24;	T2=r25;
+s0=r26;	s1=r27;	t0=r28;	t1=r29;
+Ktbl=r30;
+ctx=r31;	// 1st arg
+input=r56;	// 2nd arg
+num=r57;	// 3rd arg
+sgm0=r58;	sgm1=r59;	// small constants
+
+// void $func (SHA_CTX *ctx, const void *in,size_t num[,int host])
+.global	$func#
+.proc	$func#
+.align	32
+.skip	16
+$func:
+	.prologue
+	.save	ar.pfs,pfssave
+{ .mmi;	alloc	pfssave=ar.pfs,3,25,0,24
+	$ADDP	ctx=0,r32		// 1st arg
+	.save	ar.lc,lcsave
+	mov	lcsave=ar.lc	}
+{ .mmi;	$ADDP	input=0,r33		// 2nd arg
+	mov	num=r34			// 3rd arg
+	.save	pr,prsave
+	mov	prsave=pr	};;
+
+	.body
+{ .mib;	add	r8=0*$SZ,ctx
+	add	r9=1*$SZ,ctx	}
+{ .mib;	add	r10=2*$SZ,ctx
+	add	r11=3*$SZ,ctx	};;
+
+// load A-H
+.Lpic_point:
+{ .mmi;	$LDW	A_=[r8],4*$SZ
+	$LDW	B_=[r9],4*$SZ
+	mov	Ktbl=ip		}
+{ .mmi;	$LDW	C_=[r10],4*$SZ
+	$LDW	D_=[r11],4*$SZ
+	mov	sgm0=$sigma0[2]	};;
+{ .mmi;	$LDW	E_=[r8]
+	$LDW	F_=[r9]
+	add	Ktbl=($TABLE#-.Lpic_point),Ktbl		}
+{ .mmi;	$LDW	G_=[r10]
+	$LDW	H_=[r11]
+	cmp.ne	p0,p16=0,r0	};;
+___
+$code.=<<___ if ($BITS==64);
+{ .mii;	and	r8=7,input
+	and	input=~7,input;;
+	cmp.eq	p9,p0=1,r8	}
+{ .mmi;	cmp.eq	p10,p0=2,r8
+	cmp.eq	p11,p0=3,r8
+	cmp.eq	p12,p0=4,r8	}
+{ .mmi;	cmp.eq	p13,p0=5,r8
+	cmp.eq	p14,p0=6,r8
+	cmp.eq	p15,p0=7,r8	};;
+___
+$code.=<<___;
+.L_outer:
+.rotr	R[8],X[16]
+A=R[0]; B=R[1]; C=R[2]; D=R[3]; E=R[4]; F=R[5]; G=R[6]; H=R[7]
+{ .mmi;	ld1	X[15]=[input],$SZ		// eliminated in sha512
+	mov	A=A_
+	mov	ar.lc=14	}
+{ .mmi;	mov	B=B_
+	mov	C=C_
+	mov	D=D_		}
+{ .mmi;	mov	E=E_
+	mov	F=F_
+	mov	ar.ec=2		};;
+{ .mmi;	mov	G=G_
+	mov	H=H_
+	mov	sgm1=$sigma1[2]	}
+{ .mib;	mov	r8=0
+	add	r9=1-$SZ,input
+	brp.loop.imp	.L_first16,.L_first16_end-16	};;
+___
+$t0="A", $t1="E", $code.=<<___ if ($BITS==64);
+// in sha512 case I load whole X[16] at once and take care of alignment...
+{ .mmi;	add	r8=1*$SZ,input
+	add	r9=2*$SZ,input
+	add	r10=3*$SZ,input		};;
+{ .mmb;	$LDW	X[15]=[input],4*$SZ
+	$LDW	X[14]=[r8],4*$SZ
+(p9)	br.cond.dpnt.many	.L1byte	};;
+{ .mmb;	$LDW	X[13]=[r9],4*$SZ
+	$LDW	X[12]=[r10],4*$SZ
+(p10)	br.cond.dpnt.many	.L2byte	};;
+{ .mmb;	$LDW	X[11]=[input],4*$SZ
+	$LDW	X[10]=[r8],4*$SZ
+(p11)	br.cond.dpnt.many	.L3byte	};;
+{ .mmb;	$LDW	X[ 9]=[r9],4*$SZ
+	$LDW	X[ 8]=[r10],4*$SZ
+(p12)	br.cond.dpnt.many	.L4byte	};;
+{ .mmb;	$LDW	X[ 7]=[input],4*$SZ
+	$LDW	X[ 6]=[r8],4*$SZ
+(p13)	br.cond.dpnt.many	.L5byte	};;
+{ .mmb;	$LDW	X[ 5]=[r9],4*$SZ
+	$LDW	X[ 4]=[r10],4*$SZ
+(p14)	br.cond.dpnt.many	.L6byte	};;
+{ .mmb;	$LDW	X[ 3]=[input],4*$SZ
+	$LDW	X[ 2]=[r8],4*$SZ
+(p15)	br.cond.dpnt.many	.L7byte	};;
+{ .mmb;	$LDW	X[ 1]=[r9],4*$SZ
+	$LDW	X[ 0]=[r10],4*$SZ	}
+{ .mib;	mov	r8=0
+	mux1	X[15]=X[15],\@rev		// eliminated on big-endian
+	br.many	.L_first16		};;
+.L1byte:
+{ .mmi;	$LDW	X[13]=[r9],4*$SZ
+	$LDW	X[12]=[r10],4*$SZ
+	shrp	X[15]=X[15],X[14],56	};;
+{ .mmi;	$LDW	X[11]=[input],4*$SZ
+	$LDW	X[10]=[r8],4*$SZ
+	shrp	X[14]=X[14],X[13],56	}
+{ .mmi;	$LDW	X[ 9]=[r9],4*$SZ
+	$LDW	X[ 8]=[r10],4*$SZ
+	shrp	X[13]=X[13],X[12],56	};;
+{ .mmi;	$LDW	X[ 7]=[input],4*$SZ
+	$LDW	X[ 6]=[r8],4*$SZ
+	shrp	X[12]=X[12],X[11],56	}
+{ .mmi;	$LDW	X[ 5]=[r9],4*$SZ
+	$LDW	X[ 4]=[r10],4*$SZ
+	shrp	X[11]=X[11],X[10],56	};;
+{ .mmi;	$LDW	X[ 3]=[input],4*$SZ
+	$LDW	X[ 2]=[r8],4*$SZ
+	shrp	X[10]=X[10],X[ 9],56	}
+{ .mmi;	$LDW	X[ 1]=[r9],4*$SZ
+	$LDW	X[ 0]=[r10],4*$SZ
+	shrp	X[ 9]=X[ 9],X[ 8],56	};;
+{ .mii;	$LDW	T1=[input]
+	shrp	X[ 8]=X[ 8],X[ 7],56
+	shrp	X[ 7]=X[ 7],X[ 6],56	}
+{ .mii;	shrp	X[ 6]=X[ 6],X[ 5],56
+	shrp	X[ 5]=X[ 5],X[ 4],56	};;
+{ .mii;	shrp	X[ 4]=X[ 4],X[ 3],56
+	shrp	X[ 3]=X[ 3],X[ 2],56	}
+{ .mii;	shrp	X[ 2]=X[ 2],X[ 1],56
+	shrp	X[ 1]=X[ 1],X[ 0],56	}
+{ .mib;	shrp	X[ 0]=X[ 0],T1,56	}
+{ .mib;	mov	r8=0
+	mux1	X[15]=X[15],\@rev		// eliminated on big-endian
+	br.many	.L_first16		};;
+.L2byte:
+{ .mmi;	$LDW	X[11]=[input],4*$SZ
+	$LDW	X[10]=[r8],4*$SZ
+	shrp	X[15]=X[15],X[14],48	}
+{ .mmi;	$LDW	X[ 9]=[r9],4*$SZ
+	$LDW	X[ 8]=[r10],4*$SZ
+	shrp	X[14]=X[14],X[13],48	};;
+{ .mmi;	$LDW	X[ 7]=[input],4*$SZ
+	$LDW	X[ 6]=[r8],4*$SZ
+	shrp	X[13]=X[13],X[12],48	}
+{ .mmi;	$LDW	X[ 5]=[r9],4*$SZ
+	$LDW	X[ 4]=[r10],4*$SZ
+	shrp	X[12]=X[12],X[11],48	};;
+{ .mmi;	$LDW	X[ 3]=[input],4*$SZ
+	$LDW	X[ 2]=[r8],4*$SZ
+	shrp	X[11]=X[11],X[10],48	}
+{ .mmi;	$LDW	X[ 1]=[r9],4*$SZ
+	$LDW	X[ 0]=[r10],4*$SZ
+	shrp	X[10]=X[10],X[ 9],48	};;
+{ .mii;	$LDW	T1=[input]
+	shrp	X[ 9]=X[ 9],X[ 8],48
+	shrp	X[ 8]=X[ 8],X[ 7],48	}
+{ .mii;	shrp	X[ 7]=X[ 7],X[ 6],48
+	shrp	X[ 6]=X[ 6],X[ 5],48	};;
+{ .mii;	shrp	X[ 5]=X[ 5],X[ 4],48
+	shrp	X[ 4]=X[ 4],X[ 3],48	}
+{ .mii;	shrp	X[ 3]=X[ 3],X[ 2],48
+	shrp	X[ 2]=X[ 2],X[ 1],48	}
+{ .mii;	shrp	X[ 1]=X[ 1],X[ 0],48
+	shrp	X[ 0]=X[ 0],T1,48	}
+{ .mib;	mov	r8=0
+	mux1	X[15]=X[15],\@rev		// eliminated on big-endian
+	br.many	.L_first16		};;
+.L3byte:
+{ .mmi;	$LDW	X[ 9]=[r9],4*$SZ
+	$LDW	X[ 8]=[r10],4*$SZ
+	shrp	X[15]=X[15],X[14],40	};;
+{ .mmi;	$LDW	X[ 7]=[input],4*$SZ
+	$LDW	X[ 6]=[r8],4*$SZ
+	shrp	X[14]=X[14],X[13],40	}
+{ .mmi;	$LDW	X[ 5]=[r9],4*$SZ
+	$LDW	X[ 4]=[r10],4*$SZ
+	shrp	X[13]=X[13],X[12],40	};;
+{ .mmi;	$LDW	X[ 3]=[input],4*$SZ
+	$LDW	X[ 2]=[r8],4*$SZ
+	shrp	X[12]=X[12],X[11],40	}
+{ .mmi;	$LDW	X[ 1]=[r9],4*$SZ
+	$LDW	X[ 0]=[r10],4*$SZ
+	shrp	X[11]=X[11],X[10],40	};;
+{ .mii;	$LDW	T1=[input]
+	shrp	X[10]=X[10],X[ 9],40
+	shrp	X[ 9]=X[ 9],X[ 8],40	}
+{ .mii;	shrp	X[ 8]=X[ 8],X[ 7],40
+	shrp	X[ 7]=X[ 7],X[ 6],40	};;
+{ .mii;	shrp	X[ 6]=X[ 6],X[ 5],40
+	shrp	X[ 5]=X[ 5],X[ 4],40	}
+{ .mii;	shrp	X[ 4]=X[ 4],X[ 3],40
+	shrp	X[ 3]=X[ 3],X[ 2],40	}
+{ .mii;	shrp	X[ 2]=X[ 2],X[ 1],40
+	shrp	X[ 1]=X[ 1],X[ 0],40	}
+{ .mib;	shrp	X[ 0]=X[ 0],T1,40	}
+{ .mib;	mov	r8=0
+	mux1	X[15]=X[15],\@rev		// eliminated on big-endian
+	br.many	.L_first16		};;
+.L4byte:
+{ .mmi;	$LDW	X[ 7]=[input],4*$SZ
+	$LDW	X[ 6]=[r8],4*$SZ
+	shrp	X[15]=X[15],X[14],32	}
+{ .mmi;	$LDW	X[ 5]=[r9],4*$SZ
+	$LDW	X[ 4]=[r10],4*$SZ
+	shrp	X[14]=X[14],X[13],32	};;
+{ .mmi;	$LDW	X[ 3]=[input],4*$SZ
+	$LDW	X[ 2]=[r8],4*$SZ
+	shrp	X[13]=X[13],X[12],32	}
+{ .mmi;	$LDW	X[ 1]=[r9],4*$SZ
+	$LDW	X[ 0]=[r10],4*$SZ
+	shrp	X[12]=X[12],X[11],32	};;
+{ .mii;	$LDW	T1=[input]
+	shrp	X[11]=X[11],X[10],32
+	shrp	X[10]=X[10],X[ 9],32	}
+{ .mii;	shrp	X[ 9]=X[ 9],X[ 8],32
+	shrp	X[ 8]=X[ 8],X[ 7],32	};;
+{ .mii;	shrp	X[ 7]=X[ 7],X[ 6],32
+	shrp	X[ 6]=X[ 6],X[ 5],32	}
+{ .mii;	shrp	X[ 5]=X[ 5],X[ 4],32
+	shrp	X[ 4]=X[ 4],X[ 3],32	}
+{ .mii;	shrp	X[ 3]=X[ 3],X[ 2],32
+	shrp	X[ 2]=X[ 2],X[ 1],32	}
+{ .mii;	shrp	X[ 1]=X[ 1],X[ 0],32
+	shrp	X[ 0]=X[ 0],T1,32	}
+{ .mib;	mov	r8=0
+	mux1	X[15]=X[15],\@rev		// eliminated on big-endian
+	br.many	.L_first16		};;
+.L5byte:
+{ .mmi;	$LDW	X[ 5]=[r9],4*$SZ
+	$LDW	X[ 4]=[r10],4*$SZ
+	shrp	X[15]=X[15],X[14],24	};;
+{ .mmi;	$LDW	X[ 3]=[input],4*$SZ
+	$LDW	X[ 2]=[r8],4*$SZ
+	shrp	X[14]=X[14],X[13],24	}
+{ .mmi;	$LDW	X[ 1]=[r9],4*$SZ
+	$LDW	X[ 0]=[r10],4*$SZ
+	shrp	X[13]=X[13],X[12],24	};;
+{ .mii;	$LDW	T1=[input]
+	shrp	X[12]=X[12],X[11],24
+	shrp	X[11]=X[11],X[10],24	}
+{ .mii;	shrp	X[10]=X[10],X[ 9],24
+	shrp	X[ 9]=X[ 9],X[ 8],24	};;
+{ .mii;	shrp	X[ 8]=X[ 8],X[ 7],24
+	shrp	X[ 7]=X[ 7],X[ 6],24	}
+{ .mii;	shrp	X[ 6]=X[ 6],X[ 5],24
+	shrp	X[ 5]=X[ 5],X[ 4],24	}
+{ .mii;	shrp	X[ 4]=X[ 4],X[ 3],24
+	shrp	X[ 3]=X[ 3],X[ 2],24	}
+{ .mii;	shrp	X[ 2]=X[ 2],X[ 1],24
+	shrp	X[ 1]=X[ 1],X[ 0],24	}
+{ .mib;	shrp	X[ 0]=X[ 0],T1,24	}
+{ .mib;	mov	r8=0
+	mux1	X[15]=X[15],\@rev		// eliminated on big-endian
+	br.many	.L_first16		};;
+.L6byte:
+{ .mmi;	$LDW	X[ 3]=[input],4*$SZ
+	$LDW	X[ 2]=[r8],4*$SZ
+	shrp	X[15]=X[15],X[14],16	}
+{ .mmi;	$LDW	X[ 1]=[r9],4*$SZ
+	$LDW	X[ 0]=[r10],4*$SZ
+	shrp	X[14]=X[14],X[13],16	};;
+{ .mii;	$LDW	T1=[input]
+	shrp	X[13]=X[13],X[12],16
+	shrp	X[12]=X[12],X[11],16	}
+{ .mii;	shrp	X[11]=X[11],X[10],16
+	shrp	X[10]=X[10],X[ 9],16	};;
+{ .mii;	shrp	X[ 9]=X[ 9],X[ 8],16
+	shrp	X[ 8]=X[ 8],X[ 7],16	}
+{ .mii;	shrp	X[ 7]=X[ 7],X[ 6],16
+	shrp	X[ 6]=X[ 6],X[ 5],16	}
+{ .mii;	shrp	X[ 5]=X[ 5],X[ 4],16
+	shrp	X[ 4]=X[ 4],X[ 3],16	}
+{ .mii;	shrp	X[ 3]=X[ 3],X[ 2],16
+	shrp	X[ 2]=X[ 2],X[ 1],16	}
+{ .mii;	shrp	X[ 1]=X[ 1],X[ 0],16
+	shrp	X[ 0]=X[ 0],T1,16	}
+{ .mib;	mov	r8=0
+	mux1	X[15]=X[15],\@rev		// eliminated on big-endian
+	br.many	.L_first16		};;
+.L7byte:
+{ .mmi;	$LDW	X[ 1]=[r9],4*$SZ
+	$LDW	X[ 0]=[r10],4*$SZ
+	shrp	X[15]=X[15],X[14],8	};;
+{ .mii;	$LDW	T1=[input]
+	shrp	X[14]=X[14],X[13],8
+	shrp	X[13]=X[13],X[12],8	}
+{ .mii;	shrp	X[12]=X[12],X[11],8
+	shrp	X[11]=X[11],X[10],8	};;
+{ .mii;	shrp	X[10]=X[10],X[ 9],8
+	shrp	X[ 9]=X[ 9],X[ 8],8	}
+{ .mii;	shrp	X[ 8]=X[ 8],X[ 7],8
+	shrp	X[ 7]=X[ 7],X[ 6],8	}
+{ .mii;	shrp	X[ 6]=X[ 6],X[ 5],8
+	shrp	X[ 5]=X[ 5],X[ 4],8	}
+{ .mii;	shrp	X[ 4]=X[ 4],X[ 3],8
+	shrp	X[ 3]=X[ 3],X[ 2],8	}
+{ .mii;	shrp	X[ 2]=X[ 2],X[ 1],8
+	shrp	X[ 1]=X[ 1],X[ 0],8	}
+{ .mib;	shrp	X[ 0]=X[ 0],T1,8	}
+{ .mib;	mov	r8=0
+	mux1	X[15]=X[15],\@rev	};;	// eliminated on big-endian
+
+.align	32
+.L_first16:
+{ .mmi;		$LDW	K=[Ktbl],$SZ
+		add	A=A,r8			// H+=Sigma(0) from the past
+		_rotr	r10=$t1,$Sigma1[0]  }	// ROTR(e,14)
+{ .mmi;		and	T1=F,E
+		andcm	r8=G,E
+	(p16)	mux1	X[14]=X[14],\@rev   };;	// eliminated on big-endian
+{ .mmi;		and	T2=A,B
+		and	r9=A,C
+		_rotr	r11=$t1,$Sigma1[1]  }	// ROTR(e,41)
+{ .mmi;		xor	T1=T1,r8		// T1=((e & f) ^ (~e & g))
+		and	r8=B,C		    };;
+___
+$t0="t0", $t1="t1", $code.=<<___ if ($BITS==32);
+.align	32
+.L_first16:
+{ .mmi;		add	A=A,r8			// H+=Sigma(0) from the past
+		add	r10=2-$SZ,input
+		add	r11=3-$SZ,input	};;
+{ .mmi;		ld1	r9=[r9]
+		ld1	r10=[r10]
+		dep.z	$t1=E,32,32	}
+{ .mmi;		ld1	r11=[r11]
+		$LDW	K=[Ktbl],$SZ
+		zxt4	E=E		};;
+{ .mii;		or	$t1=$t1,E
+		dep	X[15]=X[15],r9,8,8
+		mux2	$t0=A,0x44	};;	// copy lower half to upper
+{ .mmi;		and	T1=F,E
+		andcm	r8=G,E
+		dep	r11=r10,r11,8,8	};;
+{ .mmi;		and	T2=A,B
+		and	r9=A,C
+		dep	X[15]=X[15],r11,16,16	};;
+{ .mmi;	(p16)	ld1	X[15-1]=[input],$SZ	// prefetch
+		xor	T1=T1,r8		// T1=((e & f) ^ (~e & g))
+		_rotr	r10=$t1,$Sigma1[0] }	// ROTR(e,14)
+{ .mmi;		and	r8=B,C
+		_rotr	r11=$t1,$Sigma1[1] };;	// ROTR(e,18)
+___
+$code.=<<___;
+{ .mmi;		add	T1=T1,H			// T1=Ch(e,f,g)+h
+		xor	r10=r10,r11
+		_rotr	r11=$t1,$Sigma1[2]  }	// ROTR(e,41)
+{ .mmi;		xor	T2=T2,r9
+		add	K=K,X[15]	    };;
+{ .mmi;		add	T1=T1,K			// T1+=K[i]+X[i]
+		xor	T2=T2,r8		// T2=((a & b) ^ (a & c) ^ (b & c))
+		_rotr	r8=$t0,$Sigma0[0]   }	// ROTR(a,28)
+{ .mmi;		xor	r11=r11,r10		// Sigma1(e)
+		_rotr	r9=$t0,$Sigma0[1]   };;	// ROTR(a,34)
+{ .mmi;		add	T1=T1,r11		// T+=Sigma1(e)
+		xor	r8=r8,r9
+		_rotr	r9=$t0,$Sigma0[2]   };;	// ROTR(a,39)
+{ .mmi;		xor	r8=r8,r9		// Sigma0(a)
+		add	D=D,T1
+		mux2	H=X[15],0x44	    }	// mov H=X[15] in sha512
+{ .mib;	(p16)	add	r9=1-$SZ,input		// not used in sha512
+		add	X[15]=T1,T2		// H=T1+Maj(a,b,c)
+	br.ctop.sptk	.L_first16	    };;
+.L_first16_end:
+
+{ .mib;	mov	ar.lc=$rounds-17
+	brp.loop.imp	.L_rest,.L_rest_end-16		}
+{ .mib;	mov	ar.ec=1
+	br.many	.L_rest			};;
+
+.align	32
+.L_rest:
+{ .mmi;		$LDW	K=[Ktbl],$SZ
+		add	A=A,r8			// H+=Sigma0(a) from the past
+		_rotr	r8=X[15-1],$sigma0[0] }	// ROTR(s0,1)
+{ .mmi; 	add	X[15]=X[15],X[15-9]	// X[i&0xF]+=X[(i+9)&0xF]
+		$SHRU	s0=X[15-1],sgm0	    };;	// s0=X[(i+1)&0xF]>>7
+{ .mib;		and	T1=F,E
+		_rotr	r9=X[15-1],$sigma0[1] }	// ROTR(s0,8)
+{ .mib;		andcm	r10=G,E
+		$SHRU	s1=X[15-14],sgm1    };;	// s1=X[(i+14)&0xF]>>6
+// Pair of mmi; splits on Itanium 1 and prevents pipeline flush
+// upon $SHRU output usage
+{ .mmi;		xor	T1=T1,r10		// T1=((e & f) ^ (~e & g))
+		xor	r9=r8,r9
+		_rotr	r10=X[15-14],$sigma1[0] }// ROTR(s1,19)
+{ .mmi;		and	T2=A,B
+		and	r8=A,C
+		_rotr	r11=X[15-14],$sigma1[1] };;// ROTR(s1,61)
+___
+$t0="t0", $t1="t1", $code.=<<___ if ($BITS==32);
+{ .mib;		xor	s0=s0,r9		// s0=sigma0(X[(i+1)&0xF])
+		dep.z	$t1=E,32,32	    }
+{ .mib;		xor	r10=r11,r10
+		zxt4	E=E		    };;
+{ .mii;		xor	s1=s1,r10		// s1=sigma1(X[(i+14)&0xF])
+		shrp	r9=E,$t1,32+$Sigma1[0]	// ROTR(e,14)
+		mux2	$t0=A,0x44	    };;	// copy lower half to upper
+// Pair of mmi; splits on Itanium 1 and prevents pipeline flush
+// upon mux2 output usage
+{ .mmi;		xor	T2=T2,r8
+		shrp	r8=E,$t1,32+$Sigma1[1]}	// ROTR(e,18)
+{ .mmi;		and	r10=B,C
+		add	T1=T1,H			// T1=Ch(e,f,g)+h
+		or	$t1=$t1,E   	    };;
+___
+$t0="A", $t1="E", $code.=<<___ if ($BITS==64);
+{ .mib;		xor	s0=s0,r9		// s0=sigma0(X[(i+1)&0xF])
+		_rotr	r9=$t1,$Sigma1[0]   }	// ROTR(e,14)
+{ .mib;		xor	r10=r11,r10
+		xor	T2=T2,r8	    };;
+{ .mib;		xor	s1=s1,r10		// s1=sigma1(X[(i+14)&0xF])
+		_rotr	r8=$t1,$Sigma1[1]   }	// ROTR(e,18)
+{ .mib;		and	r10=B,C
+		add	T1=T1,H		    };;	// T1+=H
+___
+$code.=<<___;
+{ .mib;		xor	r9=r9,r8
+		_rotr	r8=$t1,$Sigma1[2]   }	// ROTR(e,41)
+{ .mib;		xor	T2=T2,r10		// T2=((a & b) ^ (a & c) ^ (b & c))
+		add	X[15]=X[15],s0	    };;	// X[i]+=sigma0(X[i+1])
+{ .mmi;		xor	r9=r9,r8		// Sigma1(e)
+		add	X[15]=X[15],s1		// X[i]+=sigma0(X[i+14])
+		_rotr	r8=$t0,$Sigma0[0]   };;	// ROTR(a,28)
+{ .mmi;		add	K=K,X[15]
+		add	T1=T1,r9		// T1+=Sigma1(e)
+		_rotr	r9=$t0,$Sigma0[1]   };;	// ROTR(a,34)
+{ .mmi;		add	T1=T1,K			// T1+=K[i]+X[i]
+		xor	r8=r8,r9
+		_rotr	r9=$t0,$Sigma0[2]   };;	// ROTR(a,39)
+{ .mib;		add	D=D,T1
+		mux2	H=X[15],0x44	    }	// mov H=X[15] in sha512
+{ .mib;		xor	r8=r8,r9		// Sigma0(a)
+		add	X[15]=T1,T2		// H=T1+Maj(a,b,c)
+	br.ctop.sptk	.L_rest		    };;
+.L_rest_end:
+
+{ .mmi;	add	A=A,r8			};;	// H+=Sigma0(a) from the past
+{ .mmi;	add	A_=A_,A
+	add	B_=B_,B
+	add	C_=C_,C			}
+{ .mmi;	add	D_=D_,D
+	add	E_=E_,E
+	cmp.ltu	p16,p0=1,num		};;
+{ .mmi;	add	F_=F_,F
+	add	G_=G_,G
+	add	H_=H_,H			}
+{ .mmb;	add	Ktbl=-$SZ*$rounds,Ktbl
+(p16)	add	num=-1,num
+(p16)	br.dptk.many	.L_outer	};;
+
+{ .mib;	add	r8=0*$SZ,ctx
+	add	r9=1*$SZ,ctx		}
+{ .mib;	add	r10=2*$SZ,ctx
+	add	r11=3*$SZ,ctx		};;
+{ .mmi;	$STW	[r8]=A_,4*$SZ
+	$STW	[r9]=B_,4*$SZ
+	mov	ar.lc=lcsave		}
+{ .mmi;	$STW	[r10]=C_,4*$SZ
+	$STW	[r11]=D_,4*$SZ
+	mov	pr=prsave,0x1ffff	};;
+{ .mmb;	$STW	[r8]=E_
+	$STW	[r9]=F_			}
+{ .mmb;	$STW	[r10]=G_
+	$STW	[r11]=H_
+	br.ret.sptk.many	b0	};;
+.endp	$func#
+___
+
+foreach(split($/,$code)) {
+    s/\`([^\`]*)\`/eval $1/gem;
+    s/_rotr(\s+)([^=]+)=([^,]+),([0-9]+)/shrp$1$2=$3,$3,$4/gm;
+    if ($BITS==64) {
+	s/mux2(\s+)([^=]+)=([^,]+),\S+/mov$1 $2=$3/gm;
+	s/mux1(\s+)\S+/nop.i$1 0x0/gm	if ($big_endian);
+	s/(shrp\s+X\[[^=]+)=([^,]+),([^,]+),([1-9]+)/$1=$3,$2,64-$4/gm
+    						if (!$big_endian);
+	s/ld1(\s+)X\[\S+/nop.m$1 0x0/gm;
+    }
+
+    print $_,"\n";
+}
+
+print<<___ if ($BITS==32);
+.align	64
+.type	K256#,\@object
+K256:	data4	0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5
+	data4	0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5
+	data4	0xd807aa98,0x12835b01,0x243185be,0x550c7dc3
+	data4	0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174
+	data4	0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc
+	data4	0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da
+	data4	0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7
+	data4	0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967
+	data4	0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13
+	data4	0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85
+	data4	0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3
+	data4	0xd192e819,0xd6990624,0xf40e3585,0x106aa070
+	data4	0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5
+	data4	0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3
+	data4	0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208
+	data4	0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2
+.size	K256#,$SZ*$rounds
+stringz	"SHA256 block transform for IA64, CRYPTOGAMS by <appro\@openssl.org>"
+___
+print<<___ if ($BITS==64);
+.align	64
+.type	K512#,\@object
+K512:	data8	0x428a2f98d728ae22,0x7137449123ef65cd
+	data8	0xb5c0fbcfec4d3b2f,0xe9b5dba58189dbbc
+	data8	0x3956c25bf348b538,0x59f111f1b605d019
+	data8	0x923f82a4af194f9b,0xab1c5ed5da6d8118
+	data8	0xd807aa98a3030242,0x12835b0145706fbe
+	data8	0x243185be4ee4b28c,0x550c7dc3d5ffb4e2
+	data8	0x72be5d74f27b896f,0x80deb1fe3b1696b1
+	data8	0x9bdc06a725c71235,0xc19bf174cf692694
+	data8	0xe49b69c19ef14ad2,0xefbe4786384f25e3
+	data8	0x0fc19dc68b8cd5b5,0x240ca1cc77ac9c65
+	data8	0x2de92c6f592b0275,0x4a7484aa6ea6e483
+	data8	0x5cb0a9dcbd41fbd4,0x76f988da831153b5
+	data8	0x983e5152ee66dfab,0xa831c66d2db43210
+	data8	0xb00327c898fb213f,0xbf597fc7beef0ee4
+	data8	0xc6e00bf33da88fc2,0xd5a79147930aa725
+	data8	0x06ca6351e003826f,0x142929670a0e6e70
+	data8	0x27b70a8546d22ffc,0x2e1b21385c26c926
+	data8	0x4d2c6dfc5ac42aed,0x53380d139d95b3df
+	data8	0x650a73548baf63de,0x766a0abb3c77b2a8
+	data8	0x81c2c92e47edaee6,0x92722c851482353b
+	data8	0xa2bfe8a14cf10364,0xa81a664bbc423001
+	data8	0xc24b8b70d0f89791,0xc76c51a30654be30
+	data8	0xd192e819d6ef5218,0xd69906245565a910
+	data8	0xf40e35855771202a,0x106aa07032bbd1b8
+	data8	0x19a4c116b8d2d0c8,0x1e376c085141ab53
+	data8	0x2748774cdf8eeb99,0x34b0bcb5e19b48a8
+	data8	0x391c0cb3c5c95a63,0x4ed8aa4ae3418acb
+	data8	0x5b9cca4f7763e373,0x682e6ff3d6b2b8a3
+	data8	0x748f82ee5defb2fc,0x78a5636f43172f60
+	data8	0x84c87814a1f0ab72,0x8cc702081a6439ec
+	data8	0x90befffa23631e28,0xa4506cebde82bde9
+	data8	0xbef9a3f7b2c67915,0xc67178f2e372532b
+	data8	0xca273eceea26619c,0xd186b8c721c0c207
+	data8	0xeada7dd6cde0eb1e,0xf57d4f7fee6ed178
+	data8	0x06f067aa72176fba,0x0a637dc5a2c898a6
+	data8	0x113f9804bef90dae,0x1b710b35131c471b
+	data8	0x28db77f523047d84,0x32caab7b40c72493
+	data8	0x3c9ebe0a15c9bebc,0x431d67c49c100d4c
+	data8	0x4cc5d4becb3e42b6,0x597f299cfc657e2a
+	data8	0x5fcb6fab3ad6faec,0x6c44198c4a475817
+.size	K512#,$SZ*$rounds
+stringz	"SHA512 block transform for IA64, CRYPTOGAMS by <appro\@openssl.org>"
+___
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-mips.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-mips.pl
new file mode 100644
index 000000000..dab684dde
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-mips.pl
@@ -0,0 +1,521 @@
+#! /usr/bin/env perl
+# Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# SHA2 block procedures for MIPS.
+
+# October 2010.
+#
+# SHA256 performance improvement on MIPS R5000 CPU is ~27% over gcc-
+# generated code in o32 build and ~55% in n32/64 build. SHA512 [which
+# for now can only be compiled for MIPS64 ISA] improvement is modest
+# ~17%, but it comes for free, because it's same instruction sequence.
+# Improvement coefficients are for aligned input.
+
+# September 2012.
+#
+# Add MIPS[32|64]R2 code (>25% less instructions).
+
+######################################################################
+# There is a number of MIPS ABI in use, O32 and N32/64 are most
+# widely used. Then there is a new contender: NUBI. It appears that if
+# one picks the latter, it's possible to arrange code in ABI neutral
+# manner. Therefore let's stick to NUBI register layout:
+#
+($zero,$at,$t0,$t1,$t2)=map("\$$_",(0..2,24,25));
+($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("\$$_",(4..11));
+($s0,$s1,$s2,$s3,$s4,$s5,$s6,$s7,$s8,$s9,$s10,$s11)=map("\$$_",(12..23));
+($gp,$tp,$sp,$fp,$ra)=map("\$$_",(3,28..31));
+#
+# The return value is placed in $a0. Following coding rules facilitate
+# interoperability:
+#
+# - never ever touch $tp, "thread pointer", former $gp [o32 can be
+#   excluded from the rule, because it's specified volatile];
+# - copy return value to $t0, former $v0 [or to $a0 if you're adapting
+#   old code];
+# - on O32 populate $a4-$a7 with 'lw $aN,4*N($sp)' if necessary;
+#
+# For reference here is register layout for N32/64 MIPS ABIs:
+#
+# ($zero,$at,$v0,$v1)=map("\$$_",(0..3));
+# ($a0,$a1,$a2,$a3,$a4,$a5,$a6,$a7)=map("\$$_",(4..11));
+# ($t0,$t1,$t2,$t3,$t8,$t9)=map("\$$_",(12..15,24,25));
+# ($s0,$s1,$s2,$s3,$s4,$s5,$s6,$s7)=map("\$$_",(16..23));
+# ($gp,$sp,$fp,$ra)=map("\$$_",(28..31));
+#
+$flavour = shift || "o32"; # supported flavours are o32,n32,64,nubi32,nubi64
+
+if ($flavour =~ /64|n32/i) {
+	$PTR_LA="dla";
+	$PTR_ADD="daddu";	# incidentally works even on n32
+	$PTR_SUB="dsubu";	# incidentally works even on n32
+	$REG_S="sd";
+	$REG_L="ld";
+	$PTR_SLL="dsll";	# incidentally works even on n32
+	$SZREG=8;
+} else {
+	$PTR_LA="la";
+	$PTR_ADD="addu";
+	$PTR_SUB="subu";
+	$REG_S="sw";
+	$REG_L="lw";
+	$PTR_SLL="sll";
+	$SZREG=4;
+}
+$pf = ($flavour =~ /nubi/i) ? $t0 : $t2;
+#
+# <appro@openssl.org>
+#
+######################################################################
+
+$big_endian=(`echo MIPSEB | $ENV{CC} -E -`=~/MIPSEB/)?0:1 if ($ENV{CC});
+
+for (@ARGV) {	$output=$_ if (/\w[\w\-]*\.\w+$/);	}
+open STDOUT,">$output";
+
+if (!defined($big_endian)) { $big_endian=(unpack('L',pack('N',1))==1); }
+
+if ($output =~ /512/) {
+	$label="512";
+	$SZ=8;
+	$LD="ld";		# load from memory
+	$ST="sd";		# store to memory
+	$SLL="dsll";		# shift left logical
+	$SRL="dsrl";		# shift right logical
+	$ADDU="daddu";
+	$ROTR="drotr";
+	@Sigma0=(28,34,39);
+	@Sigma1=(14,18,41);
+	@sigma0=( 7, 1, 8);	# right shift first
+	@sigma1=( 6,19,61);	# right shift first
+	$lastK=0x817;
+	$rounds=80;
+} else {
+	$label="256";
+	$SZ=4;
+	$LD="lw";		# load from memory
+	$ST="sw";		# store to memory
+	$SLL="sll";		# shift left logical
+	$SRL="srl";		# shift right logical
+	$ADDU="addu";
+	$ROTR="rotr";
+	@Sigma0=( 2,13,22);
+	@Sigma1=( 6,11,25);
+	@sigma0=( 3, 7,18);	# right shift first
+	@sigma1=(10,17,19);	# right shift first
+	$lastK=0x8f2;
+	$rounds=64;
+}
+
+$MSB = $big_endian ? 0 : ($SZ-1);
+$LSB = ($SZ-1)&~$MSB;
+
+@V=($A,$B,$C,$D,$E,$F,$G,$H)=map("\$$_",(1,2,3,7,24,25,30,31));
+@X=map("\$$_",(8..23));
+
+$ctx=$a0;
+$inp=$a1;
+$len=$a2;	$Ktbl=$len;
+
+sub BODY_00_15 {
+my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
+my ($T1,$tmp0,$tmp1,$tmp2)=(@X[4],@X[5],@X[6],@X[7]);
+
+$code.=<<___ if ($i<15);
+#if defined(_MIPS_ARCH_MIPS32R6) || defined(_MIPS_ARCH_MIPS64R6)
+	${LD}	@X[1],`($i+1)*$SZ`($inp)
+#else
+	${LD}l	@X[1],`($i+1)*$SZ+$MSB`($inp)
+	${LD}r	@X[1],`($i+1)*$SZ+$LSB`($inp)
+#endif
+___
+$code.=<<___	if (!$big_endian && $i<16 && $SZ==4);
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+	wsbh	@X[0],@X[0]		# byte swap($i)
+	rotr	@X[0],@X[0],16
+#else
+	srl	$tmp0,@X[0],24		# byte swap($i)
+	srl	$tmp1,@X[0],8
+	andi	$tmp2,@X[0],0xFF00
+	sll	@X[0],@X[0],24
+	andi	$tmp1,0xFF00
+	sll	$tmp2,$tmp2,8
+	or	@X[0],$tmp0
+	or	$tmp1,$tmp2
+	or	@X[0],$tmp1
+#endif
+___
+$code.=<<___	if (!$big_endian && $i<16 && $SZ==8);
+#if defined(_MIPS_ARCH_MIPS64R2)
+	dsbh	@X[0],@X[0]		# byte swap($i)
+	dshd	@X[0],@X[0]
+#else
+	ori	$tmp0,$zero,0xFF
+	dsll	$tmp2,$tmp0,32
+	or	$tmp0,$tmp2		# 0x000000FF000000FF
+	and	$tmp1,@X[0],$tmp0	# byte swap($i)
+	dsrl	$tmp2,@X[0],24
+	dsll	$tmp1,24
+	and	$tmp2,$tmp0
+	dsll	$tmp0,8			# 0x0000FF000000FF00
+	or	$tmp1,$tmp2
+	and	$tmp2,@X[0],$tmp0
+	dsrl	@X[0],8
+	dsll	$tmp2,8
+	and	@X[0],$tmp0
+	or	$tmp1,$tmp2
+	or	@X[0],$tmp1
+	dsrl	$tmp1,@X[0],32
+	dsll	@X[0],32
+	or	@X[0],$tmp1
+#endif
+___
+$code.=<<___;
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+	xor	$tmp2,$f,$g			# $i
+	$ROTR	$tmp0,$e,@Sigma1[0]
+	$ADDU	$T1,$X[0],$h
+	$ROTR	$tmp1,$e,@Sigma1[1]
+	and	$tmp2,$e
+	$ROTR	$h,$e,@Sigma1[2]
+	xor	$tmp0,$tmp1
+	$ROTR	$tmp1,$a,@Sigma0[0]
+	xor	$tmp2,$g			# Ch(e,f,g)
+	xor	$tmp0,$h			# Sigma1(e)
+
+	$ROTR	$h,$a,@Sigma0[1]
+	$ADDU	$T1,$tmp2
+	$LD	$tmp2,`$i*$SZ`($Ktbl)		# K[$i]
+	xor	$h,$tmp1
+	$ROTR	$tmp1,$a,@Sigma0[2]
+	$ADDU	$T1,$tmp0
+	and	$tmp0,$b,$c
+	xor	$h,$tmp1			# Sigma0(a)
+	xor	$tmp1,$b,$c
+#else
+	$ADDU	$T1,$X[0],$h			# $i
+	$SRL	$h,$e,@Sigma1[0]
+	xor	$tmp2,$f,$g
+	$SLL	$tmp1,$e,`$SZ*8-@Sigma1[2]`
+	and	$tmp2,$e
+	$SRL	$tmp0,$e,@Sigma1[1]
+	xor	$h,$tmp1
+	$SLL	$tmp1,$e,`$SZ*8-@Sigma1[1]`
+	xor	$h,$tmp0
+	$SRL	$tmp0,$e,@Sigma1[2]
+	xor	$h,$tmp1
+	$SLL	$tmp1,$e,`$SZ*8-@Sigma1[0]`
+	xor	$h,$tmp0
+	xor	$tmp2,$g			# Ch(e,f,g)
+	xor	$tmp0,$tmp1,$h			# Sigma1(e)
+
+	$SRL	$h,$a,@Sigma0[0]
+	$ADDU	$T1,$tmp2
+	$LD	$tmp2,`$i*$SZ`($Ktbl)		# K[$i]
+	$SLL	$tmp1,$a,`$SZ*8-@Sigma0[2]`
+	$ADDU	$T1,$tmp0
+	$SRL	$tmp0,$a,@Sigma0[1]
+	xor	$h,$tmp1
+	$SLL	$tmp1,$a,`$SZ*8-@Sigma0[1]`
+	xor	$h,$tmp0
+	$SRL	$tmp0,$a,@Sigma0[2]
+	xor	$h,$tmp1
+	$SLL	$tmp1,$a,`$SZ*8-@Sigma0[0]`
+	xor	$h,$tmp0
+	and	$tmp0,$b,$c
+	xor	$h,$tmp1			# Sigma0(a)
+	xor	$tmp1,$b,$c
+#endif
+	$ST	@X[0],`($i%16)*$SZ`($sp)	# offload to ring buffer
+	$ADDU	$h,$tmp0
+	and	$tmp1,$a
+	$ADDU	$T1,$tmp2			# +=K[$i]
+	$ADDU	$h,$tmp1			# +=Maj(a,b,c)
+	$ADDU	$d,$T1
+	$ADDU	$h,$T1
+___
+$code.=<<___ if ($i>=13);
+	$LD	@X[3],`(($i+3)%16)*$SZ`($sp)	# prefetch from ring buffer
+___
+}
+
+sub BODY_16_XX {
+my $i=@_[0];
+my ($tmp0,$tmp1,$tmp2,$tmp3)=(@X[4],@X[5],@X[6],@X[7]);
+
+$code.=<<___;
+#if defined(_MIPS_ARCH_MIPS32R2) || defined(_MIPS_ARCH_MIPS64R2)
+	$SRL	$tmp2,@X[1],@sigma0[0]		# Xupdate($i)
+	$ROTR	$tmp0,@X[1],@sigma0[1]
+	$ADDU	@X[0],@X[9]			# +=X[i+9]
+	xor	$tmp2,$tmp0
+	$ROTR	$tmp0,@X[1],@sigma0[2]
+
+	$SRL	$tmp3,@X[14],@sigma1[0]
+	$ROTR	$tmp1,@X[14],@sigma1[1]
+	xor	$tmp2,$tmp0			# sigma0(X[i+1])
+	$ROTR	$tmp0,@X[14],@sigma1[2]
+	xor	$tmp3,$tmp1
+	$ADDU	@X[0],$tmp2
+#else
+	$SRL	$tmp2,@X[1],@sigma0[0]		# Xupdate($i)
+	$ADDU	@X[0],@X[9]			# +=X[i+9]
+	$SLL	$tmp1,@X[1],`$SZ*8-@sigma0[2]`
+	$SRL	$tmp0,@X[1],@sigma0[1]
+	xor	$tmp2,$tmp1
+	$SLL	$tmp1,`@sigma0[2]-@sigma0[1]`
+	xor	$tmp2,$tmp0
+	$SRL	$tmp0,@X[1],@sigma0[2]
+	xor	$tmp2,$tmp1
+
+	$SRL	$tmp3,@X[14],@sigma1[0]
+	xor	$tmp2,$tmp0			# sigma0(X[i+1])
+	$SLL	$tmp1,@X[14],`$SZ*8-@sigma1[2]`
+	$ADDU	@X[0],$tmp2
+	$SRL	$tmp0,@X[14],@sigma1[1]
+	xor	$tmp3,$tmp1
+	$SLL	$tmp1,`@sigma1[2]-@sigma1[1]`
+	xor	$tmp3,$tmp0
+	$SRL	$tmp0,@X[14],@sigma1[2]
+	xor	$tmp3,$tmp1
+#endif
+	xor	$tmp3,$tmp0			# sigma1(X[i+14])
+	$ADDU	@X[0],$tmp3
+___
+	&BODY_00_15(@_);
+}
+
+$FRAMESIZE=16*$SZ+16*$SZREG;
+$SAVED_REGS_MASK = ($flavour =~ /nubi/i) ? "0xc0fff008" : "0xc0ff0000";
+
+$code.=<<___;
+#include "mips_arch.h"
+
+.text
+.set	noat
+#if !defined(__mips_eabi) && (!defined(__vxworks) || defined(__pic__))
+.option	pic2
+#endif
+
+.align	5
+.globl	sha${label}_block_data_order
+.ent	sha${label}_block_data_order
+sha${label}_block_data_order:
+	.frame	$sp,$FRAMESIZE,$ra
+	.mask	$SAVED_REGS_MASK,-$SZREG
+	.set	noreorder
+___
+$code.=<<___ if ($flavour =~ /o32/i);	# o32 PIC-ification
+	.cpload	$pf
+___
+$code.=<<___;
+	$PTR_SUB $sp,$FRAMESIZE
+	$REG_S	$ra,$FRAMESIZE-1*$SZREG($sp)
+	$REG_S	$fp,$FRAMESIZE-2*$SZREG($sp)
+	$REG_S	$s11,$FRAMESIZE-3*$SZREG($sp)
+	$REG_S	$s10,$FRAMESIZE-4*$SZREG($sp)
+	$REG_S	$s9,$FRAMESIZE-5*$SZREG($sp)
+	$REG_S	$s8,$FRAMESIZE-6*$SZREG($sp)
+	$REG_S	$s7,$FRAMESIZE-7*$SZREG($sp)
+	$REG_S	$s6,$FRAMESIZE-8*$SZREG($sp)
+	$REG_S	$s5,$FRAMESIZE-9*$SZREG($sp)
+	$REG_S	$s4,$FRAMESIZE-10*$SZREG($sp)
+___
+$code.=<<___ if ($flavour =~ /nubi/i);	# optimize non-nubi prologue
+	$REG_S	$s3,$FRAMESIZE-11*$SZREG($sp)
+	$REG_S	$s2,$FRAMESIZE-12*$SZREG($sp)
+	$REG_S	$s1,$FRAMESIZE-13*$SZREG($sp)
+	$REG_S	$s0,$FRAMESIZE-14*$SZREG($sp)
+	$REG_S	$gp,$FRAMESIZE-15*$SZREG($sp)
+___
+$code.=<<___;
+	$PTR_SLL @X[15],$len,`log(16*$SZ)/log(2)`
+___
+$code.=<<___ if ($flavour !~ /o32/i);	# non-o32 PIC-ification
+	.cplocal	$Ktbl
+	.cpsetup	$pf,$zero,sha${label}_block_data_order
+___
+$code.=<<___;
+	.set	reorder
+	$PTR_LA	$Ktbl,K${label}		# PIC-ified 'load address'
+
+	$LD	$A,0*$SZ($ctx)		# load context
+	$LD	$B,1*$SZ($ctx)
+	$LD	$C,2*$SZ($ctx)
+	$LD	$D,3*$SZ($ctx)
+	$LD	$E,4*$SZ($ctx)
+	$LD	$F,5*$SZ($ctx)
+	$LD	$G,6*$SZ($ctx)
+	$LD	$H,7*$SZ($ctx)
+
+	$PTR_ADD @X[15],$inp		# pointer to the end of input
+	$REG_S	@X[15],16*$SZ($sp)
+	b	.Loop
+
+.align	5
+.Loop:
+#if defined(_MIPS_ARCH_MIPS32R6) || defined(_MIPS_ARCH_MIPS64R6)
+	${LD}	@X[0],($inp)
+#else
+	${LD}l	@X[0],$MSB($inp)
+	${LD}r	@X[0],$LSB($inp)
+#endif
+___
+for ($i=0;$i<16;$i++)
+{ &BODY_00_15($i,@V); unshift(@V,pop(@V)); push(@X,shift(@X)); }
+$code.=<<___;
+	b	.L16_xx
+.align	4
+.L16_xx:
+___
+for (;$i<32;$i++)
+{ &BODY_16_XX($i,@V); unshift(@V,pop(@V)); push(@X,shift(@X)); }
+$code.=<<___;
+	and	@X[6],0xfff
+	li	@X[7],$lastK
+	.set	noreorder
+	bne	@X[6],@X[7],.L16_xx
+	$PTR_ADD $Ktbl,16*$SZ		# Ktbl+=16
+
+	$REG_L	@X[15],16*$SZ($sp)	# restore pointer to the end of input
+	$LD	@X[0],0*$SZ($ctx)
+	$LD	@X[1],1*$SZ($ctx)
+	$LD	@X[2],2*$SZ($ctx)
+	$PTR_ADD $inp,16*$SZ
+	$LD	@X[3],3*$SZ($ctx)
+	$ADDU	$A,@X[0]
+	$LD	@X[4],4*$SZ($ctx)
+	$ADDU	$B,@X[1]
+	$LD	@X[5],5*$SZ($ctx)
+	$ADDU	$C,@X[2]
+	$LD	@X[6],6*$SZ($ctx)
+	$ADDU	$D,@X[3]
+	$LD	@X[7],7*$SZ($ctx)
+	$ADDU	$E,@X[4]
+	$ST	$A,0*$SZ($ctx)
+	$ADDU	$F,@X[5]
+	$ST	$B,1*$SZ($ctx)
+	$ADDU	$G,@X[6]
+	$ST	$C,2*$SZ($ctx)
+	$ADDU	$H,@X[7]
+	$ST	$D,3*$SZ($ctx)
+	$ST	$E,4*$SZ($ctx)
+	$ST	$F,5*$SZ($ctx)
+	$ST	$G,6*$SZ($ctx)
+	$ST	$H,7*$SZ($ctx)
+
+	bne	$inp,@X[15],.Loop
+	$PTR_SUB $Ktbl,`($rounds-16)*$SZ`	# rewind $Ktbl
+
+	$REG_L	$ra,$FRAMESIZE-1*$SZREG($sp)
+	$REG_L	$fp,$FRAMESIZE-2*$SZREG($sp)
+	$REG_L	$s11,$FRAMESIZE-3*$SZREG($sp)
+	$REG_L	$s10,$FRAMESIZE-4*$SZREG($sp)
+	$REG_L	$s9,$FRAMESIZE-5*$SZREG($sp)
+	$REG_L	$s8,$FRAMESIZE-6*$SZREG($sp)
+	$REG_L	$s7,$FRAMESIZE-7*$SZREG($sp)
+	$REG_L	$s6,$FRAMESIZE-8*$SZREG($sp)
+	$REG_L	$s5,$FRAMESIZE-9*$SZREG($sp)
+	$REG_L	$s4,$FRAMESIZE-10*$SZREG($sp)
+___
+$code.=<<___ if ($flavour =~ /nubi/i);
+	$REG_L	$s3,$FRAMESIZE-11*$SZREG($sp)
+	$REG_L	$s2,$FRAMESIZE-12*$SZREG($sp)
+	$REG_L	$s1,$FRAMESIZE-13*$SZREG($sp)
+	$REG_L	$s0,$FRAMESIZE-14*$SZREG($sp)
+	$REG_L	$gp,$FRAMESIZE-15*$SZREG($sp)
+___
+$code.=<<___;
+	jr	$ra
+	$PTR_ADD $sp,$FRAMESIZE
+.end	sha${label}_block_data_order
+
+.rdata
+.align	5
+K${label}:
+___
+if ($SZ==4) {
+$code.=<<___;
+	.word	0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5
+	.word	0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5
+	.word	0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3
+	.word	0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174
+	.word	0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc
+	.word	0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da
+	.word	0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7
+	.word	0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967
+	.word	0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13
+	.word	0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85
+	.word	0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3
+	.word	0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070
+	.word	0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5
+	.word	0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3
+	.word	0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208
+	.word	0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2
+___
+} else {
+$code.=<<___;
+	.dword	0x428a2f98d728ae22, 0x7137449123ef65cd
+	.dword	0xb5c0fbcfec4d3b2f, 0xe9b5dba58189dbbc
+	.dword	0x3956c25bf348b538, 0x59f111f1b605d019
+	.dword	0x923f82a4af194f9b, 0xab1c5ed5da6d8118
+	.dword	0xd807aa98a3030242, 0x12835b0145706fbe
+	.dword	0x243185be4ee4b28c, 0x550c7dc3d5ffb4e2
+	.dword	0x72be5d74f27b896f, 0x80deb1fe3b1696b1
+	.dword	0x9bdc06a725c71235, 0xc19bf174cf692694
+	.dword	0xe49b69c19ef14ad2, 0xefbe4786384f25e3
+	.dword	0x0fc19dc68b8cd5b5, 0x240ca1cc77ac9c65
+	.dword	0x2de92c6f592b0275, 0x4a7484aa6ea6e483
+	.dword	0x5cb0a9dcbd41fbd4, 0x76f988da831153b5
+	.dword	0x983e5152ee66dfab, 0xa831c66d2db43210
+	.dword	0xb00327c898fb213f, 0xbf597fc7beef0ee4
+	.dword	0xc6e00bf33da88fc2, 0xd5a79147930aa725
+	.dword	0x06ca6351e003826f, 0x142929670a0e6e70
+	.dword	0x27b70a8546d22ffc, 0x2e1b21385c26c926
+	.dword	0x4d2c6dfc5ac42aed, 0x53380d139d95b3df
+	.dword	0x650a73548baf63de, 0x766a0abb3c77b2a8
+	.dword	0x81c2c92e47edaee6, 0x92722c851482353b
+	.dword	0xa2bfe8a14cf10364, 0xa81a664bbc423001
+	.dword	0xc24b8b70d0f89791, 0xc76c51a30654be30
+	.dword	0xd192e819d6ef5218, 0xd69906245565a910
+	.dword	0xf40e35855771202a, 0x106aa07032bbd1b8
+	.dword	0x19a4c116b8d2d0c8, 0x1e376c085141ab53
+	.dword	0x2748774cdf8eeb99, 0x34b0bcb5e19b48a8
+	.dword	0x391c0cb3c5c95a63, 0x4ed8aa4ae3418acb
+	.dword	0x5b9cca4f7763e373, 0x682e6ff3d6b2b8a3
+	.dword	0x748f82ee5defb2fc, 0x78a5636f43172f60
+	.dword	0x84c87814a1f0ab72, 0x8cc702081a6439ec
+	.dword	0x90befffa23631e28, 0xa4506cebde82bde9
+	.dword	0xbef9a3f7b2c67915, 0xc67178f2e372532b
+	.dword	0xca273eceea26619c, 0xd186b8c721c0c207
+	.dword	0xeada7dd6cde0eb1e, 0xf57d4f7fee6ed178
+	.dword	0x06f067aa72176fba, 0x0a637dc5a2c898a6
+	.dword	0x113f9804bef90dae, 0x1b710b35131c471b
+	.dword	0x28db77f523047d84, 0x32caab7b40c72493
+	.dword	0x3c9ebe0a15c9bebc, 0x431d67c49c100d4c
+	.dword	0x4cc5d4becb3e42b6, 0x597f299cfc657e2a
+	.dword	0x5fcb6fab3ad6faec, 0x6c44198c4a475817
+___
+}
+$code.=<<___;
+.asciiz	"SHA${label} for MIPS, CRYPTOGAMS by <appro\@openssl.org>"
+.align	5
+
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-parisc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-parisc.pl
new file mode 100755
index 000000000..59eb320ab
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-parisc.pl
@@ -0,0 +1,807 @@
+#! /usr/bin/env perl
+# Copyright 2009-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# SHA256/512 block procedure for PA-RISC.
+
+# June 2009.
+#
+# SHA256 performance is >75% better than gcc 3.2 generated code on
+# PA-7100LC. Compared to code generated by vendor compiler this
+# implementation is almost 70% faster in 64-bit build, but delivers
+# virtually same performance in 32-bit build on PA-8600.
+#
+# SHA512 performance is >2.9x better than gcc 3.2 generated code on
+# PA-7100LC, PA-RISC 1.1 processor. Then implementation detects if the
+# code is executed on PA-RISC 2.0 processor and switches to 64-bit
+# code path delivering adequate performance even in "blended" 32-bit
+# build. Though 64-bit code is not any faster than code generated by
+# vendor compiler on PA-8600...
+#
+# Special thanks to polarhome.com for providing HP-UX account.
+
+$flavour = shift;
+$output = shift;
+open STDOUT,">$output";
+
+if ($flavour =~ /64/) {
+	$LEVEL		="2.0W";
+	$SIZE_T		=8;
+	$FRAME_MARKER	=80;
+	$SAVED_RP	=16;
+	$PUSH		="std";
+	$PUSHMA		="std,ma";
+	$POP		="ldd";
+	$POPMB		="ldd,mb";
+} else {
+	$LEVEL		="1.0";
+	$SIZE_T		=4;
+	$FRAME_MARKER	=48;
+	$SAVED_RP	=20;
+	$PUSH		="stw";
+	$PUSHMA		="stwm";
+	$POP		="ldw";
+	$POPMB		="ldwm";
+}
+
+if ($output =~ /512/) {
+	$func="sha512_block_data_order";
+	$SZ=8;
+	@Sigma0=(28,34,39);
+	@Sigma1=(14,18,41);
+	@sigma0=(1,  8, 7);
+	@sigma1=(19,61, 6);
+	$rounds=80;
+	$LAST10BITS=0x017;
+	$LD="ldd";
+	$LDM="ldd,ma";
+	$ST="std";
+} else {
+	$func="sha256_block_data_order";
+	$SZ=4;
+	@Sigma0=( 2,13,22);
+	@Sigma1=( 6,11,25);
+	@sigma0=( 7,18, 3);
+	@sigma1=(17,19,10);
+	$rounds=64;
+	$LAST10BITS=0x0f2;
+	$LD="ldw";
+	$LDM="ldwm";
+	$ST="stw";
+}
+
+$FRAME=16*$SIZE_T+$FRAME_MARKER;# 16 saved regs + frame marker
+				#                 [+ argument transfer]
+$XOFF=16*$SZ+32;		# local variables
+$FRAME+=$XOFF;
+$XOFF+=$FRAME_MARKER;		# distance between %sp and local variables
+
+$ctx="%r26";	# zapped by $a0
+$inp="%r25";	# zapped by $a1
+$num="%r24";	# zapped by $t0
+
+$a0 ="%r26";
+$a1 ="%r25";
+$t0 ="%r24";
+$t1 ="%r29";
+$Tbl="%r31";
+
+@V=($A,$B,$C,$D,$E,$F,$G,$H)=("%r17","%r18","%r19","%r20","%r21","%r22","%r23","%r28");
+
+@X=("%r1", "%r2", "%r3", "%r4", "%r5", "%r6", "%r7", "%r8",
+    "%r9", "%r10","%r11","%r12","%r13","%r14","%r15","%r16",$inp);
+
+sub ROUND_00_15 {
+my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
+$code.=<<___;
+	_ror	$e,$Sigma1[0],$a0
+	and	$f,$e,$t0
+	_ror	$e,$Sigma1[1],$a1
+	addl	$t1,$h,$h
+	andcm	$g,$e,$t1
+	xor	$a1,$a0,$a0
+	_ror	$a1,`$Sigma1[2]-$Sigma1[1]`,$a1
+	or	$t0,$t1,$t1		; Ch(e,f,g)
+	addl	@X[$i%16],$h,$h
+	xor	$a0,$a1,$a1		; Sigma1(e)
+	addl	$t1,$h,$h
+	_ror	$a,$Sigma0[0],$a0
+	addl	$a1,$h,$h
+
+	_ror	$a,$Sigma0[1],$a1
+	and	$a,$b,$t0
+	and	$a,$c,$t1
+	xor	$a1,$a0,$a0
+	_ror	$a1,`$Sigma0[2]-$Sigma0[1]`,$a1
+	xor	$t1,$t0,$t0
+	and	$b,$c,$t1
+	xor	$a0,$a1,$a1		; Sigma0(a)
+	addl	$h,$d,$d
+	xor	$t1,$t0,$t0		; Maj(a,b,c)
+	`"$LDM	$SZ($Tbl),$t1" if ($i<15)`
+	addl	$a1,$h,$h
+	addl	$t0,$h,$h
+
+___
+}
+
+sub ROUND_16_xx {
+my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
+$i-=16;
+$code.=<<___;
+	_ror	@X[($i+1)%16],$sigma0[0],$a0
+	_ror	@X[($i+1)%16],$sigma0[1],$a1
+	addl	@X[($i+9)%16],@X[$i],@X[$i]
+	_ror	@X[($i+14)%16],$sigma1[0],$t0
+	_ror	@X[($i+14)%16],$sigma1[1],$t1
+	xor	$a1,$a0,$a0
+	_shr	@X[($i+1)%16],$sigma0[2],$a1
+	xor	$t1,$t0,$t0
+	_shr	@X[($i+14)%16],$sigma1[2],$t1
+	xor	$a1,$a0,$a0		; sigma0(X[(i+1)&0x0f])
+	xor	$t1,$t0,$t0		; sigma1(X[(i+14)&0x0f])
+	$LDM	$SZ($Tbl),$t1
+	addl	$a0,@X[$i],@X[$i]
+	addl	$t0,@X[$i],@X[$i]
+___
+$code.=<<___ if ($i==15);
+	extru	$t1,31,10,$a1
+	comiclr,<> $LAST10BITS,$a1,%r0
+	ldo	1($Tbl),$Tbl		; signal end of $Tbl
+___
+&ROUND_00_15($i+16,$a,$b,$c,$d,$e,$f,$g,$h);
+}
+
+$code=<<___;
+	.LEVEL	$LEVEL
+	.SPACE	\$TEXT\$
+	.SUBSPA	\$CODE\$,QUAD=0,ALIGN=8,ACCESS=0x2C,CODE_ONLY
+
+	.ALIGN	64
+L\$table
+___
+$code.=<<___ if ($SZ==8);
+	.WORD	0x428a2f98,0xd728ae22,0x71374491,0x23ef65cd
+	.WORD	0xb5c0fbcf,0xec4d3b2f,0xe9b5dba5,0x8189dbbc
+	.WORD	0x3956c25b,0xf348b538,0x59f111f1,0xb605d019
+	.WORD	0x923f82a4,0xaf194f9b,0xab1c5ed5,0xda6d8118
+	.WORD	0xd807aa98,0xa3030242,0x12835b01,0x45706fbe
+	.WORD	0x243185be,0x4ee4b28c,0x550c7dc3,0xd5ffb4e2
+	.WORD	0x72be5d74,0xf27b896f,0x80deb1fe,0x3b1696b1
+	.WORD	0x9bdc06a7,0x25c71235,0xc19bf174,0xcf692694
+	.WORD	0xe49b69c1,0x9ef14ad2,0xefbe4786,0x384f25e3
+	.WORD	0x0fc19dc6,0x8b8cd5b5,0x240ca1cc,0x77ac9c65
+	.WORD	0x2de92c6f,0x592b0275,0x4a7484aa,0x6ea6e483
+	.WORD	0x5cb0a9dc,0xbd41fbd4,0x76f988da,0x831153b5
+	.WORD	0x983e5152,0xee66dfab,0xa831c66d,0x2db43210
+	.WORD	0xb00327c8,0x98fb213f,0xbf597fc7,0xbeef0ee4
+	.WORD	0xc6e00bf3,0x3da88fc2,0xd5a79147,0x930aa725
+	.WORD	0x06ca6351,0xe003826f,0x14292967,0x0a0e6e70
+	.WORD	0x27b70a85,0x46d22ffc,0x2e1b2138,0x5c26c926
+	.WORD	0x4d2c6dfc,0x5ac42aed,0x53380d13,0x9d95b3df
+	.WORD	0x650a7354,0x8baf63de,0x766a0abb,0x3c77b2a8
+	.WORD	0x81c2c92e,0x47edaee6,0x92722c85,0x1482353b
+	.WORD	0xa2bfe8a1,0x4cf10364,0xa81a664b,0xbc423001
+	.WORD	0xc24b8b70,0xd0f89791,0xc76c51a3,0x0654be30
+	.WORD	0xd192e819,0xd6ef5218,0xd6990624,0x5565a910
+	.WORD	0xf40e3585,0x5771202a,0x106aa070,0x32bbd1b8
+	.WORD	0x19a4c116,0xb8d2d0c8,0x1e376c08,0x5141ab53
+	.WORD	0x2748774c,0xdf8eeb99,0x34b0bcb5,0xe19b48a8
+	.WORD	0x391c0cb3,0xc5c95a63,0x4ed8aa4a,0xe3418acb
+	.WORD	0x5b9cca4f,0x7763e373,0x682e6ff3,0xd6b2b8a3
+	.WORD	0x748f82ee,0x5defb2fc,0x78a5636f,0x43172f60
+	.WORD	0x84c87814,0xa1f0ab72,0x8cc70208,0x1a6439ec
+	.WORD	0x90befffa,0x23631e28,0xa4506ceb,0xde82bde9
+	.WORD	0xbef9a3f7,0xb2c67915,0xc67178f2,0xe372532b
+	.WORD	0xca273ece,0xea26619c,0xd186b8c7,0x21c0c207
+	.WORD	0xeada7dd6,0xcde0eb1e,0xf57d4f7f,0xee6ed178
+	.WORD	0x06f067aa,0x72176fba,0x0a637dc5,0xa2c898a6
+	.WORD	0x113f9804,0xbef90dae,0x1b710b35,0x131c471b
+	.WORD	0x28db77f5,0x23047d84,0x32caab7b,0x40c72493
+	.WORD	0x3c9ebe0a,0x15c9bebc,0x431d67c4,0x9c100d4c
+	.WORD	0x4cc5d4be,0xcb3e42b6,0x597f299c,0xfc657e2a
+	.WORD	0x5fcb6fab,0x3ad6faec,0x6c44198c,0x4a475817
+___
+$code.=<<___ if ($SZ==4);
+	.WORD	0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5
+	.WORD	0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5
+	.WORD	0xd807aa98,0x12835b01,0x243185be,0x550c7dc3
+	.WORD	0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174
+	.WORD	0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc
+	.WORD	0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da
+	.WORD	0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7
+	.WORD	0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967
+	.WORD	0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13
+	.WORD	0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85
+	.WORD	0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3
+	.WORD	0xd192e819,0xd6990624,0xf40e3585,0x106aa070
+	.WORD	0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5
+	.WORD	0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3
+	.WORD	0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208
+	.WORD	0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2
+___
+$code.=<<___;
+
+	.EXPORT	$func,ENTRY,ARGW0=GR,ARGW1=GR,ARGW2=GR
+	.ALIGN	64
+$func
+	.PROC
+	.CALLINFO	FRAME=`$FRAME-16*$SIZE_T`,NO_CALLS,SAVE_RP,ENTRY_GR=18
+	.ENTRY
+	$PUSH	%r2,-$SAVED_RP(%sp)	; standard prologue
+	$PUSHMA	%r3,$FRAME(%sp)
+	$PUSH	%r4,`-$FRAME+1*$SIZE_T`(%sp)
+	$PUSH	%r5,`-$FRAME+2*$SIZE_T`(%sp)
+	$PUSH	%r6,`-$FRAME+3*$SIZE_T`(%sp)
+	$PUSH	%r7,`-$FRAME+4*$SIZE_T`(%sp)
+	$PUSH	%r8,`-$FRAME+5*$SIZE_T`(%sp)
+	$PUSH	%r9,`-$FRAME+6*$SIZE_T`(%sp)
+	$PUSH	%r10,`-$FRAME+7*$SIZE_T`(%sp)
+	$PUSH	%r11,`-$FRAME+8*$SIZE_T`(%sp)
+	$PUSH	%r12,`-$FRAME+9*$SIZE_T`(%sp)
+	$PUSH	%r13,`-$FRAME+10*$SIZE_T`(%sp)
+	$PUSH	%r14,`-$FRAME+11*$SIZE_T`(%sp)
+	$PUSH	%r15,`-$FRAME+12*$SIZE_T`(%sp)
+	$PUSH	%r16,`-$FRAME+13*$SIZE_T`(%sp)
+	$PUSH	%r17,`-$FRAME+14*$SIZE_T`(%sp)
+	$PUSH	%r18,`-$FRAME+15*$SIZE_T`(%sp)
+
+	_shl	$num,`log(16*$SZ)/log(2)`,$num
+	addl	$inp,$num,$num		; $num to point at the end of $inp
+
+	$PUSH	$num,`-$FRAME_MARKER-4*$SIZE_T`(%sp)	; save arguments
+	$PUSH	$inp,`-$FRAME_MARKER-3*$SIZE_T`(%sp)
+	$PUSH	$ctx,`-$FRAME_MARKER-2*$SIZE_T`(%sp)
+
+	blr	%r0,$Tbl
+	ldi	3,$t1
+L\$pic
+	andcm	$Tbl,$t1,$Tbl		; wipe privilege level
+	ldo	L\$table-L\$pic($Tbl),$Tbl
+___
+$code.=<<___ if ($SZ==8 && $SIZE_T==4);
+	ldi	31,$t1
+	mtctl	$t1,%cr11
+	extrd,u,*= $t1,%sar,1,$t1	; executes on PA-RISC 1.0
+	b	L\$parisc1
+	nop
+___
+$code.=<<___;
+	$LD	`0*$SZ`($ctx),$A	; load context
+	$LD	`1*$SZ`($ctx),$B
+	$LD	`2*$SZ`($ctx),$C
+	$LD	`3*$SZ`($ctx),$D
+	$LD	`4*$SZ`($ctx),$E
+	$LD	`5*$SZ`($ctx),$F
+	$LD	`6*$SZ`($ctx),$G
+	$LD	`7*$SZ`($ctx),$H
+
+	extru	$inp,31,`log($SZ)/log(2)`,$t0
+	sh3addl	$t0,%r0,$t0
+	subi	`8*$SZ`,$t0,$t0
+	mtctl	$t0,%cr11		; load %sar with align factor
+
+L\$oop
+	ldi	`$SZ-1`,$t0
+	$LDM	$SZ($Tbl),$t1
+	andcm	$inp,$t0,$t0		; align $inp
+___
+	for ($i=0;$i<15;$i++) {		# load input block
+	$code.="\t$LD	`$SZ*$i`($t0),@X[$i]\n";		}
+$code.=<<___;
+	cmpb,*=	$inp,$t0,L\$aligned
+	$LD	`$SZ*15`($t0),@X[15]
+	$LD	`$SZ*16`($t0),@X[16]
+___
+	for ($i=0;$i<16;$i++) {		# align data
+	$code.="\t_align	@X[$i],@X[$i+1],@X[$i]\n";	}
+$code.=<<___;
+L\$aligned
+	nop	; otherwise /usr/ccs/bin/as is confused by below .WORD
+___
+
+for($i=0;$i<16;$i++)	{ &ROUND_00_15($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+L\$rounds
+	nop	; otherwise /usr/ccs/bin/as is confused by below .WORD
+___
+for(;$i<32;$i++)	{ &ROUND_16_xx($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	bb,>=	$Tbl,31,L\$rounds	; end of $Tbl signalled?
+	nop
+
+	$POP	`-$FRAME_MARKER-2*$SIZE_T`(%sp),$ctx	; restore arguments
+	$POP	`-$FRAME_MARKER-3*$SIZE_T`(%sp),$inp
+	$POP	`-$FRAME_MARKER-4*$SIZE_T`(%sp),$num
+	ldo	`-$rounds*$SZ-1`($Tbl),$Tbl		; rewind $Tbl
+
+	$LD	`0*$SZ`($ctx),@X[0]	; load context
+	$LD	`1*$SZ`($ctx),@X[1]
+	$LD	`2*$SZ`($ctx),@X[2]
+	$LD	`3*$SZ`($ctx),@X[3]
+	$LD	`4*$SZ`($ctx),@X[4]
+	$LD	`5*$SZ`($ctx),@X[5]
+	addl	@X[0],$A,$A
+	$LD	`6*$SZ`($ctx),@X[6]
+	addl	@X[1],$B,$B
+	$LD	`7*$SZ`($ctx),@X[7]
+	ldo	`16*$SZ`($inp),$inp	; advance $inp
+
+	$ST	$A,`0*$SZ`($ctx)	; save context
+	addl	@X[2],$C,$C
+	$ST	$B,`1*$SZ`($ctx)
+	addl	@X[3],$D,$D
+	$ST	$C,`2*$SZ`($ctx)
+	addl	@X[4],$E,$E
+	$ST	$D,`3*$SZ`($ctx)
+	addl	@X[5],$F,$F
+	$ST	$E,`4*$SZ`($ctx)
+	addl	@X[6],$G,$G
+	$ST	$F,`5*$SZ`($ctx)
+	addl	@X[7],$H,$H
+	$ST	$G,`6*$SZ`($ctx)
+	$ST	$H,`7*$SZ`($ctx)
+
+	cmpb,*<>,n $inp,$num,L\$oop
+	$PUSH	$inp,`-$FRAME_MARKER-3*$SIZE_T`(%sp)	; save $inp
+___
+if ($SZ==8 && $SIZE_T==4)	# SHA512 for 32-bit PA-RISC 1.0
+{{
+$code.=<<___;
+	b	L\$done
+	nop
+
+	.ALIGN	64
+L\$parisc1
+___
+
+@V=(  $Ahi,  $Alo,  $Bhi,  $Blo,  $Chi,  $Clo,  $Dhi,  $Dlo,
+      $Ehi,  $Elo,  $Fhi,  $Flo,  $Ghi,  $Glo,  $Hhi,  $Hlo) =
+   ( "%r1", "%r2", "%r3", "%r4", "%r5", "%r6", "%r7", "%r8",
+     "%r9","%r10","%r11","%r12","%r13","%r14","%r15","%r16");
+$a0 ="%r17";
+$a1 ="%r18";
+$a2 ="%r19";
+$a3 ="%r20";
+$t0 ="%r21";
+$t1 ="%r22";
+$t2 ="%r28";
+$t3 ="%r29";
+$Tbl="%r31";
+
+@X=("%r23","%r24","%r25","%r26");	# zaps $num,$inp,$ctx
+
+sub ROUND_00_15_pa1 {
+my ($i,$ahi,$alo,$bhi,$blo,$chi,$clo,$dhi,$dlo,
+       $ehi,$elo,$fhi,$flo,$ghi,$glo,$hhi,$hlo,$flag)=@_;
+my ($Xhi,$Xlo,$Xnhi,$Xnlo) = @X;
+
+$code.=<<___ if (!$flag);
+	ldw	`-$XOFF+8*(($i+1)%16)`(%sp),$Xnhi
+	ldw	`-$XOFF+8*(($i+1)%16)+4`(%sp),$Xnlo	; load X[i+1]
+___
+$code.=<<___;
+	shd	$ehi,$elo,$Sigma1[0],$t0
+	 add	$Xlo,$hlo,$hlo
+	shd	$elo,$ehi,$Sigma1[0],$t1
+	 addc	$Xhi,$hhi,$hhi		; h += X[i]
+	shd	$ehi,$elo,$Sigma1[1],$t2
+	 ldwm	8($Tbl),$Xhi
+	shd	$elo,$ehi,$Sigma1[1],$t3
+	 ldw	-4($Tbl),$Xlo		; load K[i]
+	xor	$t2,$t0,$t0
+	xor	$t3,$t1,$t1
+	 and	$flo,$elo,$a0
+	 and	$fhi,$ehi,$a1
+	shd	$ehi,$elo,$Sigma1[2],$t2
+	 andcm	$glo,$elo,$a2
+	shd	$elo,$ehi,$Sigma1[2],$t3
+	 andcm	$ghi,$ehi,$a3
+	xor	$t2,$t0,$t0
+	xor	$t3,$t1,$t1		; Sigma1(e)
+	add	$Xlo,$hlo,$hlo
+	 xor	$a2,$a0,$a0
+	addc	$Xhi,$hhi,$hhi		; h += K[i]
+	 xor	$a3,$a1,$a1		; Ch(e,f,g)
+
+	 add	$t0,$hlo,$hlo
+	shd	$ahi,$alo,$Sigma0[0],$t0
+	 addc	$t1,$hhi,$hhi		; h += Sigma1(e)
+	shd	$alo,$ahi,$Sigma0[0],$t1
+	 add	$a0,$hlo,$hlo
+	shd	$ahi,$alo,$Sigma0[1],$t2
+	 addc	$a1,$hhi,$hhi		; h += Ch(e,f,g)
+	shd	$alo,$ahi,$Sigma0[1],$t3
+
+	xor	$t2,$t0,$t0
+	xor	$t3,$t1,$t1
+	shd	$ahi,$alo,$Sigma0[2],$t2
+	and	$alo,$blo,$a0
+	shd	$alo,$ahi,$Sigma0[2],$t3
+	and	$ahi,$bhi,$a1
+	xor	$t2,$t0,$t0
+	xor	$t3,$t1,$t1		; Sigma0(a)
+
+	and	$alo,$clo,$a2
+	and	$ahi,$chi,$a3
+	xor	$a2,$a0,$a0
+	 add	$hlo,$dlo,$dlo
+	xor	$a3,$a1,$a1
+	 addc	$hhi,$dhi,$dhi		; d += h
+	and	$blo,$clo,$a2
+	 add	$t0,$hlo,$hlo
+	and	$bhi,$chi,$a3
+	 addc	$t1,$hhi,$hhi		; h += Sigma0(a)
+	xor	$a2,$a0,$a0
+	 add	$a0,$hlo,$hlo
+	xor	$a3,$a1,$a1		; Maj(a,b,c)
+	 addc	$a1,$hhi,$hhi		; h += Maj(a,b,c)
+
+___
+$code.=<<___ if ($i==15 && $flag);
+	extru	$Xlo,31,10,$Xlo
+	comiclr,= $LAST10BITS,$Xlo,%r0
+	b	L\$rounds_pa1
+	nop
+___
+push(@X,shift(@X)); push(@X,shift(@X));
+}
+
+sub ROUND_16_xx_pa1 {
+my ($Xhi,$Xlo,$Xnhi,$Xnlo) = @X;
+my ($i)=shift;
+$i-=16;
+$code.=<<___;
+	ldw	`-$XOFF+8*(($i+1)%16)`(%sp),$Xnhi
+	ldw	`-$XOFF+8*(($i+1)%16)+4`(%sp),$Xnlo	; load X[i+1]
+	ldw	`-$XOFF+8*(($i+9)%16)`(%sp),$a1
+	ldw	`-$XOFF+8*(($i+9)%16)+4`(%sp),$a0	; load X[i+9]
+	ldw	`-$XOFF+8*(($i+14)%16)`(%sp),$a3
+	ldw	`-$XOFF+8*(($i+14)%16)+4`(%sp),$a2	; load X[i+14]
+	shd	$Xnhi,$Xnlo,$sigma0[0],$t0
+	shd	$Xnlo,$Xnhi,$sigma0[0],$t1
+	 add	$a0,$Xlo,$Xlo
+	shd	$Xnhi,$Xnlo,$sigma0[1],$t2
+	 addc	$a1,$Xhi,$Xhi
+	shd	$Xnlo,$Xnhi,$sigma0[1],$t3
+	xor	$t2,$t0,$t0
+	shd	$Xnhi,$Xnlo,$sigma0[2],$t2
+	xor	$t3,$t1,$t1
+	extru	$Xnhi,`31-$sigma0[2]`,`32-$sigma0[2]`,$t3
+	xor	$t2,$t0,$t0
+	 shd	$a3,$a2,$sigma1[0],$a0
+	xor	$t3,$t1,$t1		; sigma0(X[i+1)&0x0f])
+	 shd	$a2,$a3,$sigma1[0],$a1
+	add	$t0,$Xlo,$Xlo
+	 shd	$a3,$a2,$sigma1[1],$t2
+	addc	$t1,$Xhi,$Xhi
+	 shd	$a2,$a3,$sigma1[1],$t3
+	xor	$t2,$a0,$a0
+	shd	$a3,$a2,$sigma1[2],$t2
+	xor	$t3,$a1,$a1
+	extru	$a3,`31-$sigma1[2]`,`32-$sigma1[2]`,$t3
+	xor	$t2,$a0,$a0
+	xor	$t3,$a1,$a1		; sigma0(X[i+14)&0x0f])
+	add	$a0,$Xlo,$Xlo
+	addc	$a1,$Xhi,$Xhi
+
+	stw	$Xhi,`-$XOFF+8*($i%16)`(%sp)
+	stw	$Xlo,`-$XOFF+8*($i%16)+4`(%sp)
+___
+&ROUND_00_15_pa1($i,@_,1);
+}
+$code.=<<___;
+	ldw	`0*4`($ctx),$Ahi		; load context
+	ldw	`1*4`($ctx),$Alo
+	ldw	`2*4`($ctx),$Bhi
+	ldw	`3*4`($ctx),$Blo
+	ldw	`4*4`($ctx),$Chi
+	ldw	`5*4`($ctx),$Clo
+	ldw	`6*4`($ctx),$Dhi
+	ldw	`7*4`($ctx),$Dlo
+	ldw	`8*4`($ctx),$Ehi
+	ldw	`9*4`($ctx),$Elo
+	ldw	`10*4`($ctx),$Fhi
+	ldw	`11*4`($ctx),$Flo
+	ldw	`12*4`($ctx),$Ghi
+	ldw	`13*4`($ctx),$Glo
+	ldw	`14*4`($ctx),$Hhi
+	ldw	`15*4`($ctx),$Hlo
+
+	extru	$inp,31,2,$t0
+	sh3addl	$t0,%r0,$t0
+	subi	32,$t0,$t0
+	mtctl	$t0,%cr11		; load %sar with align factor
+
+L\$oop_pa1
+	extru	$inp,31,2,$a3
+	comib,=	0,$a3,L\$aligned_pa1
+	sub	$inp,$a3,$inp
+
+	ldw	`0*4`($inp),$X[0]
+	ldw	`1*4`($inp),$X[1]
+	ldw	`2*4`($inp),$t2
+	ldw	`3*4`($inp),$t3
+	ldw	`4*4`($inp),$a0
+	ldw	`5*4`($inp),$a1
+	ldw	`6*4`($inp),$a2
+	ldw	`7*4`($inp),$a3
+	vshd	$X[0],$X[1],$X[0]
+	vshd	$X[1],$t2,$X[1]
+	stw	$X[0],`-$XOFF+0*4`(%sp)
+	ldw	`8*4`($inp),$t0
+	vshd	$t2,$t3,$t2
+	stw	$X[1],`-$XOFF+1*4`(%sp)
+	ldw	`9*4`($inp),$t1
+	vshd	$t3,$a0,$t3
+___
+{
+my @t=($t2,$t3,$a0,$a1,$a2,$a3,$t0,$t1);
+for ($i=2;$i<=(128/4-8);$i++) {
+$code.=<<___;
+	stw	$t[0],`-$XOFF+$i*4`(%sp)
+	ldw	`(8+$i)*4`($inp),$t[0]
+	vshd	$t[1],$t[2],$t[1]
+___
+push(@t,shift(@t));
+}
+for (;$i<(128/4-1);$i++) {
+$code.=<<___;
+	stw	$t[0],`-$XOFF+$i*4`(%sp)
+	vshd	$t[1],$t[2],$t[1]
+___
+push(@t,shift(@t));
+}
+$code.=<<___;
+	b	L\$collected_pa1
+	stw	$t[0],`-$XOFF+$i*4`(%sp)
+
+___
+}
+$code.=<<___;
+L\$aligned_pa1
+	ldw	`0*4`($inp),$X[0]
+	ldw	`1*4`($inp),$X[1]
+	ldw	`2*4`($inp),$t2
+	ldw	`3*4`($inp),$t3
+	ldw	`4*4`($inp),$a0
+	ldw	`5*4`($inp),$a1
+	ldw	`6*4`($inp),$a2
+	ldw	`7*4`($inp),$a3
+	stw	$X[0],`-$XOFF+0*4`(%sp)
+	ldw	`8*4`($inp),$t0
+	stw	$X[1],`-$XOFF+1*4`(%sp)
+	ldw	`9*4`($inp),$t1
+___
+{
+my @t=($t2,$t3,$a0,$a1,$a2,$a3,$t0,$t1);
+for ($i=2;$i<(128/4-8);$i++) {
+$code.=<<___;
+	stw	$t[0],`-$XOFF+$i*4`(%sp)
+	ldw	`(8+$i)*4`($inp),$t[0]
+___
+push(@t,shift(@t));
+}
+for (;$i<128/4;$i++) {
+$code.=<<___;
+	stw	$t[0],`-$XOFF+$i*4`(%sp)
+___
+push(@t,shift(@t));
+}
+$code.="L\$collected_pa1\n";
+}
+
+for($i=0;$i<16;$i++)	{ &ROUND_00_15_pa1($i,@V); unshift(@V,pop(@V)); unshift(@V,pop(@V)); }
+$code.="L\$rounds_pa1\n";
+for(;$i<32;$i++)	{ &ROUND_16_xx_pa1($i,@V); unshift(@V,pop(@V)); unshift(@V,pop(@V)); }
+
+$code.=<<___;
+	$POP	`-$FRAME_MARKER-2*$SIZE_T`(%sp),$ctx	; restore arguments
+	$POP	`-$FRAME_MARKER-3*$SIZE_T`(%sp),$inp
+	$POP	`-$FRAME_MARKER-4*$SIZE_T`(%sp),$num
+	ldo	`-$rounds*$SZ`($Tbl),$Tbl		; rewind $Tbl
+
+	ldw	`0*4`($ctx),$t1		; update context
+	ldw	`1*4`($ctx),$t0
+	ldw	`2*4`($ctx),$t3
+	ldw	`3*4`($ctx),$t2
+	ldw	`4*4`($ctx),$a1
+	ldw	`5*4`($ctx),$a0
+	ldw	`6*4`($ctx),$a3
+	add	$t0,$Alo,$Alo
+	ldw	`7*4`($ctx),$a2
+	addc	$t1,$Ahi,$Ahi
+	ldw	`8*4`($ctx),$t1
+	add	$t2,$Blo,$Blo
+	ldw	`9*4`($ctx),$t0
+	addc	$t3,$Bhi,$Bhi
+	ldw	`10*4`($ctx),$t3
+	add	$a0,$Clo,$Clo
+	ldw	`11*4`($ctx),$t2
+	addc	$a1,$Chi,$Chi
+	ldw	`12*4`($ctx),$a1
+	add	$a2,$Dlo,$Dlo
+	ldw	`13*4`($ctx),$a0
+	addc	$a3,$Dhi,$Dhi
+	ldw	`14*4`($ctx),$a3
+	add	$t0,$Elo,$Elo
+	ldw	`15*4`($ctx),$a2
+	addc	$t1,$Ehi,$Ehi
+	stw	$Ahi,`0*4`($ctx)
+	add	$t2,$Flo,$Flo
+	stw	$Alo,`1*4`($ctx)
+	addc	$t3,$Fhi,$Fhi
+	stw	$Bhi,`2*4`($ctx)
+	add	$a0,$Glo,$Glo
+	stw	$Blo,`3*4`($ctx)
+	addc	$a1,$Ghi,$Ghi
+	stw	$Chi,`4*4`($ctx)
+	add	$a2,$Hlo,$Hlo
+	stw	$Clo,`5*4`($ctx)
+	addc	$a3,$Hhi,$Hhi
+	stw	$Dhi,`6*4`($ctx)
+	ldo	`16*$SZ`($inp),$inp	; advance $inp
+	stw	$Dlo,`7*4`($ctx)
+	stw	$Ehi,`8*4`($ctx)
+	stw	$Elo,`9*4`($ctx)
+	stw	$Fhi,`10*4`($ctx)
+	stw	$Flo,`11*4`($ctx)
+	stw	$Ghi,`12*4`($ctx)
+	stw	$Glo,`13*4`($ctx)
+	stw	$Hhi,`14*4`($ctx)
+	comb,=	$inp,$num,L\$done
+	stw	$Hlo,`15*4`($ctx)
+	b	L\$oop_pa1
+	$PUSH	$inp,`-$FRAME_MARKER-3*$SIZE_T`(%sp)	; save $inp
+L\$done
+___
+}}
+$code.=<<___;
+	$POP	`-$FRAME-$SAVED_RP`(%sp),%r2		; standard epilogue
+	$POP	`-$FRAME+1*$SIZE_T`(%sp),%r4
+	$POP	`-$FRAME+2*$SIZE_T`(%sp),%r5
+	$POP	`-$FRAME+3*$SIZE_T`(%sp),%r6
+	$POP	`-$FRAME+4*$SIZE_T`(%sp),%r7
+	$POP	`-$FRAME+5*$SIZE_T`(%sp),%r8
+	$POP	`-$FRAME+6*$SIZE_T`(%sp),%r9
+	$POP	`-$FRAME+7*$SIZE_T`(%sp),%r10
+	$POP	`-$FRAME+8*$SIZE_T`(%sp),%r11
+	$POP	`-$FRAME+9*$SIZE_T`(%sp),%r12
+	$POP	`-$FRAME+10*$SIZE_T`(%sp),%r13
+	$POP	`-$FRAME+11*$SIZE_T`(%sp),%r14
+	$POP	`-$FRAME+12*$SIZE_T`(%sp),%r15
+	$POP	`-$FRAME+13*$SIZE_T`(%sp),%r16
+	$POP	`-$FRAME+14*$SIZE_T`(%sp),%r17
+	$POP	`-$FRAME+15*$SIZE_T`(%sp),%r18
+	bv	(%r2)
+	.EXIT
+	$POPMB	-$FRAME(%sp),%r3
+	.PROCEND
+	.STRINGZ "SHA`64*$SZ` block transform for PA-RISC, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+# Explicitly encode PA-RISC 2.0 instructions used in this module, so
+# that it can be compiled with .LEVEL 1.0. It should be noted that I
+# wouldn't have to do this, if GNU assembler understood .ALLOW 2.0
+# directive...
+
+my $ldd = sub {
+  my ($mod,$args) = @_;
+  my $orig = "ldd$mod\t$args";
+
+    if ($args =~ /(\-?[0-9]+)\(%r([0-9]+)\),%r([0-9]+)/) # format 3 suffices
+    {	my $opcode=(0x14<<26)|($2<<21)|($3<<16)|(($1&0x1FF8)<<1)|(($1>>13)&1);
+	$opcode|=(1<<3) if ($mod =~ /^,m/);
+	$opcode|=(1<<2) if ($mod =~ /^,mb/);
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    else { "\t".$orig; }
+};
+
+my $std = sub {
+  my ($mod,$args) = @_;
+  my $orig = "std$mod\t$args";
+
+    if ($args =~ /%r([0-9]+),(\-?[0-9]+)\(%r([0-9]+)\)/) # format 3 suffices
+    {	my $opcode=(0x1c<<26)|($3<<21)|($1<<16)|(($2&0x1FF8)<<1)|(($2>>13)&1);
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    else { "\t".$orig; }
+};
+
+my $extrd = sub {
+  my ($mod,$args) = @_;
+  my $orig = "extrd$mod\t$args";
+
+    # I only have ",u" completer, it's implicitly encoded...
+    if ($args =~ /%r([0-9]+),([0-9]+),([0-9]+),%r([0-9]+)/)	# format 15
+    {	my $opcode=(0x36<<26)|($1<<21)|($4<<16);
+	my $len=32-$3;
+	$opcode |= (($2&0x20)<<6)|(($2&0x1f)<<5);		# encode pos
+	$opcode |= (($len&0x20)<<7)|($len&0x1f);		# encode len
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    elsif ($args =~ /%r([0-9]+),%sar,([0-9]+),%r([0-9]+)/)	# format 12
+    {	my $opcode=(0x34<<26)|($1<<21)|($3<<16)|(2<<11)|(1<<9);
+	my $len=32-$2;
+	$opcode |= (($len&0x20)<<3)|($len&0x1f);		# encode len
+	$opcode |= (1<<13) if ($mod =~ /,\**=/);
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    else { "\t".$orig; }
+};
+
+my $shrpd = sub {
+  my ($mod,$args) = @_;
+  my $orig = "shrpd$mod\t$args";
+
+    if ($args =~ /%r([0-9]+),%r([0-9]+),([0-9]+),%r([0-9]+)/)	# format 14
+    {	my $opcode=(0x34<<26)|($2<<21)|($1<<16)|(1<<10)|$4;
+	my $cpos=63-$3;
+	$opcode |= (($cpos&0x20)<<6)|(($cpos&0x1f)<<5);		# encode sa
+	sprintf "\t.WORD\t0x%08x\t; %s",$opcode,$orig;
+    }
+    elsif ($args =~ /%r([0-9]+),%r([0-9]+),%sar,%r([0-9]+)/)	# format 11
+    {	sprintf "\t.WORD\t0x%08x\t; %s",
+		(0x34<<26)|($2<<21)|($1<<16)|(1<<9)|$3,$orig;
+    }
+    else { "\t".$orig; }
+};
+
+sub assemble {
+  my ($mnemonic,$mod,$args)=@_;
+  my $opcode = eval("\$$mnemonic");
+
+    ref($opcode) eq 'CODE' ? &$opcode($mod,$args) : "\t$mnemonic$mod\t$args";
+}
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+	=~ /GNU assembler/) {
+    $gnuas = 1;
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	s/shd\s+(%r[0-9]+),(%r[0-9]+),([0-9]+)/
+		$3>31 ? sprintf("shd\t%$2,%$1,%d",$3-32)	# rotation for >=32
+		:       sprintf("shd\t%$1,%$2,%d",$3)/e			or
+	# translate made up instructions: _ror, _shr, _align, _shl
+	s/_ror(\s+)(%r[0-9]+),/
+		($SZ==4 ? "shd" : "shrpd")."$1$2,$2,"/e			or
+
+	s/_shr(\s+%r[0-9]+),([0-9]+),/
+		$SZ==4 ? sprintf("extru%s,%d,%d,",$1,31-$2,32-$2)
+		:        sprintf("extrd,u%s,%d,%d,",$1,63-$2,64-$2)/e	or
+
+	s/_align(\s+%r[0-9]+,%r[0-9]+),/
+		($SZ==4 ? "vshd$1," : "shrpd$1,%sar,")/e		or
+
+	s/_shl(\s+%r[0-9]+),([0-9]+),/
+		$SIZE_T==4 ? sprintf("zdep%s,%d,%d,",$1,31-$2,32-$2)
+		:            sprintf("depd,z%s,%d,%d,",$1,63-$2,64-$2)/e;
+
+	s/^\s+([a-z]+)([\S]*)\s+([\S]*)/&assemble($1,$2,$3)/e if ($SIZE_T==4);
+
+	s/(\.LEVEL\s+2\.0)W/$1w/	if ($gnuas && $SIZE_T==8);
+	s/\.SPACE\s+\$TEXT\$/.text/	if ($gnuas && $SIZE_T==8);
+	s/\.SUBSPA.*//			if ($gnuas && $SIZE_T==8);
+	s/cmpb,\*/comb,/ 		if ($SIZE_T==4);
+	s/\bbv\b/bve/    		if ($SIZE_T==8);
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-ppc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-ppc.pl
new file mode 100755
index 000000000..71699f663
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-ppc.pl
@@ -0,0 +1,799 @@
+#! /usr/bin/env perl
+# Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# I let hardware handle unaligned input, except on page boundaries
+# (see below for details). Otherwise straightforward implementation
+# with X vector in register bank.
+
+#			sha256		|	sha512
+# 			-m64	-m32	|	-m64	-m32
+# --------------------------------------+-----------------------
+# PPC970,gcc-4.0.0	+50%	+38%	|	+40%	+410%(*)
+# Power6,xlc-7		+150%	+90%	|	+100%	+430%(*)
+#
+# (*)	64-bit code in 32-bit application context, which actually is
+#	on TODO list. It should be noted that for safe deployment in
+#	32-bit *multi-threaded* context asynchronous signals should be
+#	blocked upon entry to SHA512 block routine. This is because
+#	32-bit signaling procedure invalidates upper halves of GPRs.
+#	Context switch procedure preserves them, but not signaling:-(
+
+# Second version is true multi-thread safe. Trouble with the original
+# version was that it was using thread local storage pointer register.
+# Well, it scrupulously preserved it, but the problem would arise the
+# moment asynchronous signal was delivered and signal handler would
+# dereference the TLS pointer. While it's never the case in openssl
+# application or test suite, we have to respect this scenario and not
+# use TLS pointer register. Alternative would be to require caller to
+# block signals prior calling this routine. For the record, in 32-bit
+# context R2 serves as TLS pointer, while in 64-bit context - R13.
+
+$flavour=shift;
+$output =shift;
+
+if ($flavour =~ /64/) {
+	$SIZE_T=8;
+	$LRSAVE=2*$SIZE_T;
+	$STU="stdu";
+	$UCMP="cmpld";
+	$SHL="sldi";
+	$POP="ld";
+	$PUSH="std";
+} elsif ($flavour =~ /32/) {
+	$SIZE_T=4;
+	$LRSAVE=$SIZE_T;
+	$STU="stwu";
+	$UCMP="cmplw";
+	$SHL="slwi";
+	$POP="lwz";
+	$PUSH="stw";
+} else { die "nonsense $flavour"; }
+
+$LITTLE_ENDIAN = ($flavour=~/le$/) ? $SIZE_T : 0;
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open STDOUT,"| $^X $xlate $flavour $output" || die "can't call $xlate: $!";
+
+if ($output =~ /512/) {
+	$func="sha512_block_ppc";
+	$SZ=8;
+	@Sigma0=(28,34,39);
+	@Sigma1=(14,18,41);
+	@sigma0=(1,  8, 7);
+	@sigma1=(19,61, 6);
+	$rounds=80;
+	$LD="ld";
+	$ST="std";
+	$ROR="rotrdi";
+	$SHR="srdi";
+} else {
+	$func="sha256_block_ppc";
+	$SZ=4;
+	@Sigma0=( 2,13,22);
+	@Sigma1=( 6,11,25);
+	@sigma0=( 7,18, 3);
+	@sigma1=(17,19,10);
+	$rounds=64;
+	$LD="lwz";
+	$ST="stw";
+	$ROR="rotrwi";
+	$SHR="srwi";
+}
+
+$FRAME=32*$SIZE_T+16*$SZ;
+$LOCALS=6*$SIZE_T;
+
+$sp ="r1";
+$toc="r2";
+$ctx="r3";	# zapped by $a0
+$inp="r4";	# zapped by $a1
+$num="r5";	# zapped by $t0
+
+$T  ="r0";
+$a0 ="r3";
+$a1 ="r4";
+$t0 ="r5";
+$t1 ="r6";
+$Tbl="r7";
+
+$A  ="r8";
+$B  ="r9";
+$C  ="r10";
+$D  ="r11";
+$E  ="r12";
+$F  =$t1;	$t1 = "r0";	# stay away from "r13";
+$G  ="r14";
+$H  ="r15";
+
+@V=($A,$B,$C,$D,$E,$F,$G,$H);
+@X=("r16","r17","r18","r19","r20","r21","r22","r23",
+    "r24","r25","r26","r27","r28","r29","r30","r31");
+
+$inp="r31" if($SZ==4 || $SIZE_T==8);	# reassigned $inp! aliases with @X[15]
+
+sub ROUND_00_15 {
+my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
+$code.=<<___;
+	$ROR	$a0,$e,$Sigma1[0]
+	$ROR	$a1,$e,$Sigma1[1]
+	and	$t0,$f,$e
+	xor	$a0,$a0,$a1
+	add	$h,$h,$t1
+	andc	$t1,$g,$e
+	$ROR	$a1,$a1,`$Sigma1[2]-$Sigma1[1]`
+	or	$t0,$t0,$t1		; Ch(e,f,g)
+	add	$h,$h,@X[$i%16]
+	xor	$a0,$a0,$a1		; Sigma1(e)
+	add	$h,$h,$t0
+	add	$h,$h,$a0
+
+	$ROR	$a0,$a,$Sigma0[0]
+	$ROR	$a1,$a,$Sigma0[1]
+	and	$t0,$a,$b
+	and	$t1,$a,$c
+	xor	$a0,$a0,$a1
+	$ROR	$a1,$a1,`$Sigma0[2]-$Sigma0[1]`
+	xor	$t0,$t0,$t1
+	and	$t1,$b,$c
+	xor	$a0,$a0,$a1		; Sigma0(a)
+	add	$d,$d,$h
+	xor	$t0,$t0,$t1		; Maj(a,b,c)
+___
+$code.=<<___ if ($i<15);
+	$LD	$t1,`($i+1)*$SZ`($Tbl)
+___
+$code.=<<___;
+	add	$h,$h,$a0
+	add	$h,$h,$t0
+
+___
+}
+
+sub ROUND_16_xx {
+my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
+$i-=16;
+$code.=<<___;
+	$ROR	$a0,@X[($i+1)%16],$sigma0[0]
+	$ROR	$a1,@X[($i+1)%16],$sigma0[1]
+	$ROR	$t0,@X[($i+14)%16],$sigma1[0]
+	$ROR	$t1,@X[($i+14)%16],$sigma1[1]
+	xor	$a0,$a0,$a1
+	$SHR	$a1,@X[($i+1)%16],$sigma0[2]
+	xor	$t0,$t0,$t1
+	$SHR	$t1,@X[($i+14)%16],$sigma1[2]
+	add	@X[$i],@X[$i],@X[($i+9)%16]
+	xor	$a0,$a0,$a1		; sigma0(X[(i+1)&0x0f])
+	xor	$t0,$t0,$t1		; sigma1(X[(i+14)&0x0f])
+	$LD	$t1,`$i*$SZ`($Tbl)
+	add	@X[$i],@X[$i],$a0
+	add	@X[$i],@X[$i],$t0
+___
+&ROUND_00_15($i+16,$a,$b,$c,$d,$e,$f,$g,$h);
+}
+
+$code=<<___;
+.machine	"any"
+.text
+
+.globl	$func
+.align	6
+$func:
+	$STU	$sp,-$FRAME($sp)
+	mflr	r0
+	$SHL	$num,$num,`log(16*$SZ)/log(2)`
+
+	$PUSH	$ctx,`$FRAME-$SIZE_T*22`($sp)
+
+	$PUSH	r14,`$FRAME-$SIZE_T*18`($sp)
+	$PUSH	r15,`$FRAME-$SIZE_T*17`($sp)
+	$PUSH	r16,`$FRAME-$SIZE_T*16`($sp)
+	$PUSH	r17,`$FRAME-$SIZE_T*15`($sp)
+	$PUSH	r18,`$FRAME-$SIZE_T*14`($sp)
+	$PUSH	r19,`$FRAME-$SIZE_T*13`($sp)
+	$PUSH	r20,`$FRAME-$SIZE_T*12`($sp)
+	$PUSH	r21,`$FRAME-$SIZE_T*11`($sp)
+	$PUSH	r22,`$FRAME-$SIZE_T*10`($sp)
+	$PUSH	r23,`$FRAME-$SIZE_T*9`($sp)
+	$PUSH	r24,`$FRAME-$SIZE_T*8`($sp)
+	$PUSH	r25,`$FRAME-$SIZE_T*7`($sp)
+	$PUSH	r26,`$FRAME-$SIZE_T*6`($sp)
+	$PUSH	r27,`$FRAME-$SIZE_T*5`($sp)
+	$PUSH	r28,`$FRAME-$SIZE_T*4`($sp)
+	$PUSH	r29,`$FRAME-$SIZE_T*3`($sp)
+	$PUSH	r30,`$FRAME-$SIZE_T*2`($sp)
+	$PUSH	r31,`$FRAME-$SIZE_T*1`($sp)
+	$PUSH	r0,`$FRAME+$LRSAVE`($sp)
+___
+
+if ($SZ==4 || $SIZE_T==8) {
+$code.=<<___;
+	$LD	$A,`0*$SZ`($ctx)
+	mr	$inp,r4				; incarnate $inp
+	$LD	$B,`1*$SZ`($ctx)
+	$LD	$C,`2*$SZ`($ctx)
+	$LD	$D,`3*$SZ`($ctx)
+	$LD	$E,`4*$SZ`($ctx)
+	$LD	$F,`5*$SZ`($ctx)
+	$LD	$G,`6*$SZ`($ctx)
+	$LD	$H,`7*$SZ`($ctx)
+___
+} else {
+  for ($i=16;$i<32;$i++) {
+    $code.=<<___;
+	lwz	r$i,`$LITTLE_ENDIAN^(4*($i-16))`($ctx)
+___
+  }
+}
+
+$code.=<<___;
+	bl	LPICmeup
+LPICedup:
+	andi.	r0,$inp,3
+	bne	Lunaligned
+Laligned:
+	add	$num,$inp,$num
+	$PUSH	$num,`$FRAME-$SIZE_T*24`($sp)	; end pointer
+	$PUSH	$inp,`$FRAME-$SIZE_T*23`($sp)	; inp pointer
+	bl	Lsha2_block_private
+	b	Ldone
+
+; PowerPC specification allows an implementation to be ill-behaved
+; upon unaligned access which crosses page boundary. "Better safe
+; than sorry" principle makes me treat it specially. But I don't
+; look for particular offending word, but rather for the input
+; block which crosses the boundary. Once found that block is aligned
+; and hashed separately...
+.align	4
+Lunaligned:
+	subfic	$t1,$inp,4096
+	andi.	$t1,$t1,`4096-16*$SZ`	; distance to closest page boundary
+	beq	Lcross_page
+	$UCMP	$num,$t1
+	ble	Laligned		; didn't cross the page boundary
+	subfc	$num,$t1,$num
+	add	$t1,$inp,$t1
+	$PUSH	$num,`$FRAME-$SIZE_T*25`($sp)	; save real remaining num
+	$PUSH	$t1,`$FRAME-$SIZE_T*24`($sp)	; intermediate end pointer
+	$PUSH	$inp,`$FRAME-$SIZE_T*23`($sp)	; inp pointer
+	bl	Lsha2_block_private
+	; $inp equals to the intermediate end pointer here
+	$POP	$num,`$FRAME-$SIZE_T*25`($sp)	; restore real remaining num
+Lcross_page:
+	li	$t1,`16*$SZ/4`
+	mtctr	$t1
+___
+if ($SZ==4 || $SIZE_T==8) {
+$code.=<<___;
+	addi	r20,$sp,$LOCALS			; aligned spot below the frame
+Lmemcpy:
+	lbz	r16,0($inp)
+	lbz	r17,1($inp)
+	lbz	r18,2($inp)
+	lbz	r19,3($inp)
+	addi	$inp,$inp,4
+	stb	r16,0(r20)
+	stb	r17,1(r20)
+	stb	r18,2(r20)
+	stb	r19,3(r20)
+	addi	r20,r20,4
+	bdnz	Lmemcpy
+___
+} else {
+$code.=<<___;
+	addi	r12,$sp,$LOCALS			; aligned spot below the frame
+Lmemcpy:
+	lbz	r8,0($inp)
+	lbz	r9,1($inp)
+	lbz	r10,2($inp)
+	lbz	r11,3($inp)
+	addi	$inp,$inp,4
+	stb	r8,0(r12)
+	stb	r9,1(r12)
+	stb	r10,2(r12)
+	stb	r11,3(r12)
+	addi	r12,r12,4
+	bdnz	Lmemcpy
+___
+}
+
+$code.=<<___;
+	$PUSH	$inp,`$FRAME-$SIZE_T*26`($sp)	; save real inp
+	addi	$t1,$sp,`$LOCALS+16*$SZ`	; fictitious end pointer
+	addi	$inp,$sp,$LOCALS		; fictitious inp pointer
+	$PUSH	$num,`$FRAME-$SIZE_T*25`($sp)	; save real num
+	$PUSH	$t1,`$FRAME-$SIZE_T*24`($sp)	; end pointer
+	$PUSH	$inp,`$FRAME-$SIZE_T*23`($sp)	; inp pointer
+	bl	Lsha2_block_private
+	$POP	$inp,`$FRAME-$SIZE_T*26`($sp)	; restore real inp
+	$POP	$num,`$FRAME-$SIZE_T*25`($sp)	; restore real num
+	addic.	$num,$num,`-16*$SZ`		; num--
+	bne	Lunaligned
+
+Ldone:
+	$POP	r0,`$FRAME+$LRSAVE`($sp)
+	$POP	r14,`$FRAME-$SIZE_T*18`($sp)
+	$POP	r15,`$FRAME-$SIZE_T*17`($sp)
+	$POP	r16,`$FRAME-$SIZE_T*16`($sp)
+	$POP	r17,`$FRAME-$SIZE_T*15`($sp)
+	$POP	r18,`$FRAME-$SIZE_T*14`($sp)
+	$POP	r19,`$FRAME-$SIZE_T*13`($sp)
+	$POP	r20,`$FRAME-$SIZE_T*12`($sp)
+	$POP	r21,`$FRAME-$SIZE_T*11`($sp)
+	$POP	r22,`$FRAME-$SIZE_T*10`($sp)
+	$POP	r23,`$FRAME-$SIZE_T*9`($sp)
+	$POP	r24,`$FRAME-$SIZE_T*8`($sp)
+	$POP	r25,`$FRAME-$SIZE_T*7`($sp)
+	$POP	r26,`$FRAME-$SIZE_T*6`($sp)
+	$POP	r27,`$FRAME-$SIZE_T*5`($sp)
+	$POP	r28,`$FRAME-$SIZE_T*4`($sp)
+	$POP	r29,`$FRAME-$SIZE_T*3`($sp)
+	$POP	r30,`$FRAME-$SIZE_T*2`($sp)
+	$POP	r31,`$FRAME-$SIZE_T*1`($sp)
+	mtlr	r0
+	addi	$sp,$sp,$FRAME
+	blr
+	.long	0
+	.byte	0,12,4,1,0x80,18,3,0
+	.long	0
+___
+
+if ($SZ==4 || $SIZE_T==8) {
+$code.=<<___;
+.align	4
+Lsha2_block_private:
+	$LD	$t1,0($Tbl)
+___
+for($i=0;$i<16;$i++) {
+$code.=<<___ if ($SZ==4 && !$LITTLE_ENDIAN);
+	lwz	@X[$i],`$i*$SZ`($inp)
+___
+$code.=<<___ if ($SZ==4 && $LITTLE_ENDIAN);
+	lwz	$a0,`$i*$SZ`($inp)
+	rotlwi	@X[$i],$a0,8
+	rlwimi	@X[$i],$a0,24,0,7
+	rlwimi	@X[$i],$a0,24,16,23
+___
+# 64-bit loads are split to 2x32-bit ones, as CPU can't handle
+# unaligned 64-bit loads, only 32-bit ones...
+$code.=<<___ if ($SZ==8 && !$LITTLE_ENDIAN);
+	lwz	$t0,`$i*$SZ`($inp)
+	lwz	@X[$i],`$i*$SZ+4`($inp)
+	insrdi	@X[$i],$t0,32,0
+___
+$code.=<<___ if ($SZ==8 && $LITTLE_ENDIAN);
+	lwz	$a0,`$i*$SZ`($inp)
+	 lwz	$a1,`$i*$SZ+4`($inp)
+	rotlwi	$t0,$a0,8
+	 rotlwi	@X[$i],$a1,8
+	rlwimi	$t0,$a0,24,0,7
+	 rlwimi	@X[$i],$a1,24,0,7
+	rlwimi	$t0,$a0,24,16,23
+	 rlwimi	@X[$i],$a1,24,16,23
+	insrdi	@X[$i],$t0,32,0
+___
+	&ROUND_00_15($i,@V);
+	unshift(@V,pop(@V));
+}
+$code.=<<___;
+	li	$t0,`$rounds/16-1`
+	mtctr	$t0
+.align	4
+Lrounds:
+	addi	$Tbl,$Tbl,`16*$SZ`
+___
+for(;$i<32;$i++) {
+	&ROUND_16_xx($i,@V);
+	unshift(@V,pop(@V));
+}
+$code.=<<___;
+	bdnz	Lrounds
+
+	$POP	$ctx,`$FRAME-$SIZE_T*22`($sp)
+	$POP	$inp,`$FRAME-$SIZE_T*23`($sp)	; inp pointer
+	$POP	$num,`$FRAME-$SIZE_T*24`($sp)	; end pointer
+	subi	$Tbl,$Tbl,`($rounds-16)*$SZ`	; rewind Tbl
+
+	$LD	r16,`0*$SZ`($ctx)
+	$LD	r17,`1*$SZ`($ctx)
+	$LD	r18,`2*$SZ`($ctx)
+	$LD	r19,`3*$SZ`($ctx)
+	$LD	r20,`4*$SZ`($ctx)
+	$LD	r21,`5*$SZ`($ctx)
+	$LD	r22,`6*$SZ`($ctx)
+	addi	$inp,$inp,`16*$SZ`		; advance inp
+	$LD	r23,`7*$SZ`($ctx)
+	add	$A,$A,r16
+	add	$B,$B,r17
+	$PUSH	$inp,`$FRAME-$SIZE_T*23`($sp)
+	add	$C,$C,r18
+	$ST	$A,`0*$SZ`($ctx)
+	add	$D,$D,r19
+	$ST	$B,`1*$SZ`($ctx)
+	add	$E,$E,r20
+	$ST	$C,`2*$SZ`($ctx)
+	add	$F,$F,r21
+	$ST	$D,`3*$SZ`($ctx)
+	add	$G,$G,r22
+	$ST	$E,`4*$SZ`($ctx)
+	add	$H,$H,r23
+	$ST	$F,`5*$SZ`($ctx)
+	$ST	$G,`6*$SZ`($ctx)
+	$UCMP	$inp,$num
+	$ST	$H,`7*$SZ`($ctx)
+	bne	Lsha2_block_private
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+.size	$func,.-$func
+___
+} else {
+########################################################################
+# SHA512 for PPC32, X vector is off-loaded to stack...
+#
+#			|	sha512
+#			|	-m32
+# ----------------------+-----------------------
+# PPC74x0,gcc-4.0.1	|	+48%
+# POWER6,gcc-4.4.6	|	+124%(*)
+# POWER7,gcc-4.4.6	|	+79%(*)
+# e300,gcc-4.1.0	|	+167%
+#
+# (*)	~1/3 of -m64 result [and ~20% better than -m32 code generated
+#	by xlc-12.1]
+
+my $XOFF=$LOCALS;
+
+my @V=map("r$_",(16..31));	# A..H
+
+my ($s0,$s1,$t0,$t1,$t2,$t3,$a0,$a1,$a2,$a3)=map("r$_",(0,5,6,8..12,14,15));
+my ($x0,$x1)=("r3","r4");	# zaps $ctx and $inp
+
+sub ROUND_00_15_ppc32 {
+my ($i,	$ahi,$alo,$bhi,$blo,$chi,$clo,$dhi,$dlo,
+	$ehi,$elo,$fhi,$flo,$ghi,$glo,$hhi,$hlo)=@_;
+
+$code.=<<___;
+	lwz	$t2,`$SZ*($i%16)+($LITTLE_ENDIAN^4)`($Tbl)
+	 xor	$a0,$flo,$glo
+	lwz	$t3,`$SZ*($i%16)+($LITTLE_ENDIAN^0)`($Tbl)
+	 xor	$a1,$fhi,$ghi
+	addc	$hlo,$hlo,$t0			; h+=x[i]
+	stw	$t0,`$XOFF+0+$SZ*($i%16)`($sp)	; save x[i]
+
+	srwi	$s0,$elo,$Sigma1[0]
+	srwi	$s1,$ehi,$Sigma1[0]
+	 and	$a0,$a0,$elo
+	adde	$hhi,$hhi,$t1
+	 and	$a1,$a1,$ehi
+	stw	$t1,`$XOFF+4+$SZ*($i%16)`($sp)
+	srwi	$t0,$elo,$Sigma1[1]
+	srwi	$t1,$ehi,$Sigma1[1]
+	 addc	$hlo,$hlo,$t2			; h+=K512[i]
+	insrwi	$s0,$ehi,$Sigma1[0],0
+	insrwi	$s1,$elo,$Sigma1[0],0
+	 xor	$a0,$a0,$glo			; Ch(e,f,g)
+	 adde	$hhi,$hhi,$t3
+	 xor	$a1,$a1,$ghi
+	insrwi	$t0,$ehi,$Sigma1[1],0
+	insrwi	$t1,$elo,$Sigma1[1],0
+	 addc	$hlo,$hlo,$a0			; h+=Ch(e,f,g)
+	srwi	$t2,$ehi,$Sigma1[2]-32
+	srwi	$t3,$elo,$Sigma1[2]-32
+	xor	$s0,$s0,$t0
+	xor	$s1,$s1,$t1
+	insrwi	$t2,$elo,$Sigma1[2]-32,0
+	insrwi	$t3,$ehi,$Sigma1[2]-32,0
+	 xor	$a0,$alo,$blo			; a^b, b^c in next round
+	 adde	$hhi,$hhi,$a1
+	 xor	$a1,$ahi,$bhi
+	xor	$s0,$s0,$t2			; Sigma1(e)
+	xor	$s1,$s1,$t3
+
+	srwi	$t0,$alo,$Sigma0[0]
+	 and	$a2,$a2,$a0
+	 addc	$hlo,$hlo,$s0			; h+=Sigma1(e)
+	 and	$a3,$a3,$a1
+	srwi	$t1,$ahi,$Sigma0[0]
+	srwi	$s0,$ahi,$Sigma0[1]-32
+	 adde	$hhi,$hhi,$s1
+	srwi	$s1,$alo,$Sigma0[1]-32
+	insrwi	$t0,$ahi,$Sigma0[0],0
+	insrwi	$t1,$alo,$Sigma0[0],0
+	 xor	$a2,$a2,$blo			; Maj(a,b,c)
+	 addc	$dlo,$dlo,$hlo			; d+=h
+	 xor	$a3,$a3,$bhi
+	insrwi	$s0,$alo,$Sigma0[1]-32,0
+	insrwi	$s1,$ahi,$Sigma0[1]-32,0
+	 adde	$dhi,$dhi,$hhi
+	srwi	$t2,$ahi,$Sigma0[2]-32
+	srwi	$t3,$alo,$Sigma0[2]-32
+	xor	$s0,$s0,$t0
+	 addc	$hlo,$hlo,$a2			; h+=Maj(a,b,c)
+	xor	$s1,$s1,$t1
+	insrwi	$t2,$alo,$Sigma0[2]-32,0
+	insrwi	$t3,$ahi,$Sigma0[2]-32,0
+	 adde	$hhi,$hhi,$a3
+___
+$code.=<<___ if ($i>=15);
+	lwz	$t0,`$XOFF+0+$SZ*(($i+2)%16)`($sp)
+	lwz	$t1,`$XOFF+4+$SZ*(($i+2)%16)`($sp)
+___
+$code.=<<___ if ($i<15 && !$LITTLE_ENDIAN);
+	lwz	$t1,`$SZ*($i+1)+0`($inp)
+	lwz	$t0,`$SZ*($i+1)+4`($inp)
+___
+$code.=<<___ if ($i<15 && $LITTLE_ENDIAN);
+	lwz	$a2,`$SZ*($i+1)+0`($inp)
+	 lwz	$a3,`$SZ*($i+1)+4`($inp)
+	rotlwi	$t1,$a2,8
+	 rotlwi	$t0,$a3,8
+	rlwimi	$t1,$a2,24,0,7
+	 rlwimi	$t0,$a3,24,0,7
+	rlwimi	$t1,$a2,24,16,23
+	 rlwimi	$t0,$a3,24,16,23
+___
+$code.=<<___;
+	xor	$s0,$s0,$t2			; Sigma0(a)
+	xor	$s1,$s1,$t3
+	addc	$hlo,$hlo,$s0			; h+=Sigma0(a)
+	adde	$hhi,$hhi,$s1
+___
+$code.=<<___ if ($i==15);
+	lwz	$x0,`$XOFF+0+$SZ*(($i+1)%16)`($sp)
+	lwz	$x1,`$XOFF+4+$SZ*(($i+1)%16)`($sp)
+___
+}
+sub ROUND_16_xx_ppc32 {
+my ($i,	$ahi,$alo,$bhi,$blo,$chi,$clo,$dhi,$dlo,
+	$ehi,$elo,$fhi,$flo,$ghi,$glo,$hhi,$hlo)=@_;
+
+$code.=<<___;
+	srwi	$s0,$t0,$sigma0[0]
+	srwi	$s1,$t1,$sigma0[0]
+	srwi	$t2,$t0,$sigma0[1]
+	srwi	$t3,$t1,$sigma0[1]
+	insrwi	$s0,$t1,$sigma0[0],0
+	insrwi	$s1,$t0,$sigma0[0],0
+	srwi	$a0,$t0,$sigma0[2]
+	insrwi	$t2,$t1,$sigma0[1],0
+	insrwi	$t3,$t0,$sigma0[1],0
+	insrwi	$a0,$t1,$sigma0[2],0
+	xor	$s0,$s0,$t2
+	 lwz	$t2,`$XOFF+0+$SZ*(($i+14)%16)`($sp)
+	srwi	$a1,$t1,$sigma0[2]
+	xor	$s1,$s1,$t3
+	 lwz	$t3,`$XOFF+4+$SZ*(($i+14)%16)`($sp)
+	xor	$a0,$a0,$s0
+	 srwi	$s0,$t2,$sigma1[0]
+	xor	$a1,$a1,$s1
+	 srwi	$s1,$t3,$sigma1[0]
+	addc	$x0,$x0,$a0			; x[i]+=sigma0(x[i+1])
+	 srwi	$a0,$t3,$sigma1[1]-32
+	insrwi	$s0,$t3,$sigma1[0],0
+	insrwi	$s1,$t2,$sigma1[0],0
+	adde	$x1,$x1,$a1
+	 srwi	$a1,$t2,$sigma1[1]-32
+
+	insrwi	$a0,$t2,$sigma1[1]-32,0
+	srwi	$t2,$t2,$sigma1[2]
+	insrwi	$a1,$t3,$sigma1[1]-32,0
+	insrwi	$t2,$t3,$sigma1[2],0
+	xor	$s0,$s0,$a0
+	 lwz	$a0,`$XOFF+0+$SZ*(($i+9)%16)`($sp)
+	srwi	$t3,$t3,$sigma1[2]
+	xor	$s1,$s1,$a1
+	 lwz	$a1,`$XOFF+4+$SZ*(($i+9)%16)`($sp)
+	xor	$s0,$s0,$t2
+	 addc	$x0,$x0,$a0			; x[i]+=x[i+9]
+	xor	$s1,$s1,$t3
+	 adde	$x1,$x1,$a1
+	addc	$x0,$x0,$s0			; x[i]+=sigma1(x[i+14])
+	adde	$x1,$x1,$s1
+___
+	($t0,$t1,$x0,$x1) = ($x0,$x1,$t0,$t1);
+	&ROUND_00_15_ppc32(@_);
+}
+
+$code.=<<___;
+.align	4
+Lsha2_block_private:
+___
+$code.=<<___ if (!$LITTLE_ENDIAN);
+	lwz	$t1,0($inp)
+	xor	$a2,@V[3],@V[5]		; B^C, magic seed
+	lwz	$t0,4($inp)
+	xor	$a3,@V[2],@V[4]
+___
+$code.=<<___ if ($LITTLE_ENDIAN);
+	lwz	$a1,0($inp)
+	xor	$a2,@V[3],@V[5]		; B^C, magic seed
+	lwz	$a0,4($inp)
+	xor	$a3,@V[2],@V[4]
+	rotlwi	$t1,$a1,8
+	 rotlwi	$t0,$a0,8
+	rlwimi	$t1,$a1,24,0,7
+	 rlwimi	$t0,$a0,24,0,7
+	rlwimi	$t1,$a1,24,16,23
+	 rlwimi	$t0,$a0,24,16,23
+___
+for($i=0;$i<16;$i++) {
+	&ROUND_00_15_ppc32($i,@V);
+	unshift(@V,pop(@V));	unshift(@V,pop(@V));
+	($a0,$a1,$a2,$a3) = ($a2,$a3,$a0,$a1);
+}
+$code.=<<___;
+	li	$a0,`$rounds/16-1`
+	mtctr	$a0
+.align	4
+Lrounds:
+	addi	$Tbl,$Tbl,`16*$SZ`
+___
+for(;$i<32;$i++) {
+	&ROUND_16_xx_ppc32($i,@V);
+	unshift(@V,pop(@V));	unshift(@V,pop(@V));
+	($a0,$a1,$a2,$a3) = ($a2,$a3,$a0,$a1);
+}
+$code.=<<___;
+	bdnz	Lrounds
+
+	$POP	$ctx,`$FRAME-$SIZE_T*22`($sp)
+	$POP	$inp,`$FRAME-$SIZE_T*23`($sp)	; inp pointer
+	$POP	$num,`$FRAME-$SIZE_T*24`($sp)	; end pointer
+	subi	$Tbl,$Tbl,`($rounds-16)*$SZ`	; rewind Tbl
+
+	lwz	$t0,`$LITTLE_ENDIAN^0`($ctx)
+	lwz	$t1,`$LITTLE_ENDIAN^4`($ctx)
+	lwz	$t2,`$LITTLE_ENDIAN^8`($ctx)
+	lwz	$t3,`$LITTLE_ENDIAN^12`($ctx)
+	lwz	$a0,`$LITTLE_ENDIAN^16`($ctx)
+	lwz	$a1,`$LITTLE_ENDIAN^20`($ctx)
+	lwz	$a2,`$LITTLE_ENDIAN^24`($ctx)
+	addc	@V[1],@V[1],$t1
+	lwz	$a3,`$LITTLE_ENDIAN^28`($ctx)
+	adde	@V[0],@V[0],$t0
+	lwz	$t0,`$LITTLE_ENDIAN^32`($ctx)
+	addc	@V[3],@V[3],$t3
+	lwz	$t1,`$LITTLE_ENDIAN^36`($ctx)
+	adde	@V[2],@V[2],$t2
+	lwz	$t2,`$LITTLE_ENDIAN^40`($ctx)
+	addc	@V[5],@V[5],$a1
+	lwz	$t3,`$LITTLE_ENDIAN^44`($ctx)
+	adde	@V[4],@V[4],$a0
+	lwz	$a0,`$LITTLE_ENDIAN^48`($ctx)
+	addc	@V[7],@V[7],$a3
+	lwz	$a1,`$LITTLE_ENDIAN^52`($ctx)
+	adde	@V[6],@V[6],$a2
+	lwz	$a2,`$LITTLE_ENDIAN^56`($ctx)
+	addc	@V[9],@V[9],$t1
+	lwz	$a3,`$LITTLE_ENDIAN^60`($ctx)
+	adde	@V[8],@V[8],$t0
+	stw	@V[0],`$LITTLE_ENDIAN^0`($ctx)
+	stw	@V[1],`$LITTLE_ENDIAN^4`($ctx)
+	addc	@V[11],@V[11],$t3
+	stw	@V[2],`$LITTLE_ENDIAN^8`($ctx)
+	stw	@V[3],`$LITTLE_ENDIAN^12`($ctx)
+	adde	@V[10],@V[10],$t2
+	stw	@V[4],`$LITTLE_ENDIAN^16`($ctx)
+	stw	@V[5],`$LITTLE_ENDIAN^20`($ctx)
+	addc	@V[13],@V[13],$a1
+	stw	@V[6],`$LITTLE_ENDIAN^24`($ctx)
+	stw	@V[7],`$LITTLE_ENDIAN^28`($ctx)
+	adde	@V[12],@V[12],$a0
+	stw	@V[8],`$LITTLE_ENDIAN^32`($ctx)
+	stw	@V[9],`$LITTLE_ENDIAN^36`($ctx)
+	addc	@V[15],@V[15],$a3
+	stw	@V[10],`$LITTLE_ENDIAN^40`($ctx)
+	stw	@V[11],`$LITTLE_ENDIAN^44`($ctx)
+	adde	@V[14],@V[14],$a2
+	stw	@V[12],`$LITTLE_ENDIAN^48`($ctx)
+	stw	@V[13],`$LITTLE_ENDIAN^52`($ctx)
+	stw	@V[14],`$LITTLE_ENDIAN^56`($ctx)
+	stw	@V[15],`$LITTLE_ENDIAN^60`($ctx)
+
+	addi	$inp,$inp,`16*$SZ`		; advance inp
+	$PUSH	$inp,`$FRAME-$SIZE_T*23`($sp)
+	$UCMP	$inp,$num
+	bne	Lsha2_block_private
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+.size	$func,.-$func
+___
+}
+
+# Ugly hack here, because PPC assembler syntax seem to vary too
+# much from platforms to platform...
+$code.=<<___;
+.align	6
+LPICmeup:
+	mflr	r0
+	bcl	20,31,\$+4
+	mflr	$Tbl	; vvvvvv "distance" between . and 1st data entry
+	addi	$Tbl,$Tbl,`64-8`
+	mtlr	r0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+	.space	`64-9*4`
+___
+$code.=<<___ if ($SZ==8);
+	.quad	0x428a2f98d728ae22,0x7137449123ef65cd
+	.quad	0xb5c0fbcfec4d3b2f,0xe9b5dba58189dbbc
+	.quad	0x3956c25bf348b538,0x59f111f1b605d019
+	.quad	0x923f82a4af194f9b,0xab1c5ed5da6d8118
+	.quad	0xd807aa98a3030242,0x12835b0145706fbe
+	.quad	0x243185be4ee4b28c,0x550c7dc3d5ffb4e2
+	.quad	0x72be5d74f27b896f,0x80deb1fe3b1696b1
+	.quad	0x9bdc06a725c71235,0xc19bf174cf692694
+	.quad	0xe49b69c19ef14ad2,0xefbe4786384f25e3
+	.quad	0x0fc19dc68b8cd5b5,0x240ca1cc77ac9c65
+	.quad	0x2de92c6f592b0275,0x4a7484aa6ea6e483
+	.quad	0x5cb0a9dcbd41fbd4,0x76f988da831153b5
+	.quad	0x983e5152ee66dfab,0xa831c66d2db43210
+	.quad	0xb00327c898fb213f,0xbf597fc7beef0ee4
+	.quad	0xc6e00bf33da88fc2,0xd5a79147930aa725
+	.quad	0x06ca6351e003826f,0x142929670a0e6e70
+	.quad	0x27b70a8546d22ffc,0x2e1b21385c26c926
+	.quad	0x4d2c6dfc5ac42aed,0x53380d139d95b3df
+	.quad	0x650a73548baf63de,0x766a0abb3c77b2a8
+	.quad	0x81c2c92e47edaee6,0x92722c851482353b
+	.quad	0xa2bfe8a14cf10364,0xa81a664bbc423001
+	.quad	0xc24b8b70d0f89791,0xc76c51a30654be30
+	.quad	0xd192e819d6ef5218,0xd69906245565a910
+	.quad	0xf40e35855771202a,0x106aa07032bbd1b8
+	.quad	0x19a4c116b8d2d0c8,0x1e376c085141ab53
+	.quad	0x2748774cdf8eeb99,0x34b0bcb5e19b48a8
+	.quad	0x391c0cb3c5c95a63,0x4ed8aa4ae3418acb
+	.quad	0x5b9cca4f7763e373,0x682e6ff3d6b2b8a3
+	.quad	0x748f82ee5defb2fc,0x78a5636f43172f60
+	.quad	0x84c87814a1f0ab72,0x8cc702081a6439ec
+	.quad	0x90befffa23631e28,0xa4506cebde82bde9
+	.quad	0xbef9a3f7b2c67915,0xc67178f2e372532b
+	.quad	0xca273eceea26619c,0xd186b8c721c0c207
+	.quad	0xeada7dd6cde0eb1e,0xf57d4f7fee6ed178
+	.quad	0x06f067aa72176fba,0x0a637dc5a2c898a6
+	.quad	0x113f9804bef90dae,0x1b710b35131c471b
+	.quad	0x28db77f523047d84,0x32caab7b40c72493
+	.quad	0x3c9ebe0a15c9bebc,0x431d67c49c100d4c
+	.quad	0x4cc5d4becb3e42b6,0x597f299cfc657e2a
+	.quad	0x5fcb6fab3ad6faec,0x6c44198c4a475817
+___
+$code.=<<___ if ($SZ==4);
+	.long	0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5
+	.long	0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5
+	.long	0xd807aa98,0x12835b01,0x243185be,0x550c7dc3
+	.long	0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174
+	.long	0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc
+	.long	0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da
+	.long	0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7
+	.long	0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967
+	.long	0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13
+	.long	0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85
+	.long	0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3
+	.long	0xd192e819,0xd6990624,0xf40e3585,0x106aa070
+	.long	0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5
+	.long	0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3
+	.long	0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208
+	.long	0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-s390x.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-s390x.pl
new file mode 100644
index 000000000..4c0f4e793
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-s390x.pl
@@ -0,0 +1,324 @@
+#! /usr/bin/env perl
+# Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# SHA256/512 block procedures for s390x.
+
+# April 2007.
+#
+# sha256_block_data_order is reportedly >3 times faster than gcc 3.3
+# generated code (must be a bug in compiler, as improvement is
+# "pathologically" high, in particular in comparison to other SHA
+# modules). But the real twist is that it detects if hardware support
+# for SHA256 is available and in such case utilizes it. Then the
+# performance can reach >6.5x of assembler one for larger chunks.
+#
+# sha512_block_data_order is ~70% faster than gcc 3.3 generated code.
+
+# January 2009.
+#
+# Add support for hardware SHA512 and reschedule instructions to
+# favour dual-issue z10 pipeline. Hardware SHA256/512 is ~4.7x faster
+# than software.
+
+# November 2010.
+#
+# Adapt for -m31 build. If kernel supports what's called "highgprs"
+# feature on Linux [see /proc/cpuinfo], it's possible to use 64-bit
+# instructions and achieve "64-bit" performance even in 31-bit legacy
+# application context. The feature is not specific to any particular
+# processor, as long as it's "z-CPU". Latter implies that the code
+# remains z/Architecture specific. On z990 SHA256 was measured to
+# perform 2.4x and SHA512 - 13x better than code generated by gcc 4.3.
+
+$flavour = shift;
+
+if ($flavour =~ /3[12]/) {
+	$SIZE_T=4;
+	$g="";
+} else {
+	$SIZE_T=8;
+	$g="g";
+}
+
+$t0="%r0";
+$t1="%r1";
+$ctx="%r2";	$t2="%r2";
+$inp="%r3";
+$len="%r4";	# used as index in inner loop
+
+$A="%r5";
+$B="%r6";
+$C="%r7";
+$D="%r8";
+$E="%r9";
+$F="%r10";
+$G="%r11";
+$H="%r12";	@V=($A,$B,$C,$D,$E,$F,$G,$H);
+$tbl="%r13";
+$T1="%r14";
+$sp="%r15";
+
+while (($output=shift) && ($output!~/\w[\w\-]*\.\w+$/)) {}
+open STDOUT,">$output";
+
+if ($output =~ /512/) {
+	$label="512";
+	$SZ=8;
+	$LD="lg";	# load from memory
+	$ST="stg";	# store to memory
+	$ADD="alg";	# add with memory operand
+	$ROT="rllg";	# rotate left
+	$SHR="srlg";	# logical right shift [see even at the end]
+	@Sigma0=(25,30,36);
+	@Sigma1=(23,46,50);
+	@sigma0=(56,63, 7);
+	@sigma1=( 3,45, 6);
+	$rounds=80;
+	$kimdfunc=3;	# 0 means unknown/unsupported/unimplemented/disabled
+} else {
+	$label="256";
+	$SZ=4;
+	$LD="llgf";	# load from memory
+	$ST="st";	# store to memory
+	$ADD="al";	# add with memory operand
+	$ROT="rll";	# rotate left
+	$SHR="srl";	# logical right shift
+	@Sigma0=(10,19,30);
+	@Sigma1=( 7,21,26);
+	@sigma0=(14,25, 3);
+	@sigma1=(13,15,10);
+	$rounds=64;
+	$kimdfunc=2;	# magic function code for kimd instruction
+}
+$Func="sha${label}_block_data_order";
+$Table="K${label}";
+$stdframe=16*$SIZE_T+4*8;
+$frame=$stdframe+16*$SZ;
+
+sub BODY_00_15 {
+my ($i,$a,$b,$c,$d,$e,$f,$g,$h) = @_;
+
+$code.=<<___ if ($i<16);
+	$LD	$T1,`$i*$SZ`($inp)	### $i
+___
+$code.=<<___;
+	$ROT	$t0,$e,$Sigma1[0]
+	$ROT	$t1,$e,$Sigma1[1]
+	 lgr	$t2,$f
+	xgr	$t0,$t1
+	$ROT	$t1,$t1,`$Sigma1[2]-$Sigma1[1]`
+	 xgr	$t2,$g
+	$ST	$T1,`$stdframe+$SZ*($i%16)`($sp)
+	xgr	$t0,$t1			# Sigma1(e)
+	algr	$T1,$h			# T1+=h
+	 ngr	$t2,$e
+	 lgr	$t1,$a
+	algr	$T1,$t0			# T1+=Sigma1(e)
+	$ROT	$h,$a,$Sigma0[0]
+	 xgr	$t2,$g			# Ch(e,f,g)
+	$ADD	$T1,`$i*$SZ`($len,$tbl)	# T1+=K[i]
+	$ROT	$t0,$a,$Sigma0[1]
+	algr	$T1,$t2			# T1+=Ch(e,f,g)
+	 ogr	$t1,$b
+	xgr	$h,$t0
+	 lgr	$t2,$a
+	 ngr	$t1,$c
+	$ROT	$t0,$t0,`$Sigma0[2]-$Sigma0[1]`
+	xgr	$h,$t0			# h=Sigma0(a)
+	 ngr	$t2,$b
+	algr	$h,$T1			# h+=T1
+	 ogr	$t2,$t1			# Maj(a,b,c)
+	algr	$d,$T1			# d+=T1
+	algr	$h,$t2			# h+=Maj(a,b,c)
+___
+}
+
+sub BODY_16_XX {
+my ($i,$a,$b,$c,$d,$e,$f,$g,$h) = @_;
+
+$code.=<<___;
+	$LD	$T1,`$stdframe+$SZ*(($i+1)%16)`($sp)	### $i
+	$LD	$t1,`$stdframe+$SZ*(($i+14)%16)`($sp)
+	$ROT	$t0,$T1,$sigma0[0]
+	$SHR	$T1,$sigma0[2]
+	$ROT	$t2,$t0,`$sigma0[1]-$sigma0[0]`
+	xgr	$T1,$t0
+	$ROT	$t0,$t1,$sigma1[0]
+	xgr	$T1,$t2					# sigma0(X[i+1])
+	$SHR	$t1,$sigma1[2]
+	$ADD	$T1,`$stdframe+$SZ*($i%16)`($sp)	# +=X[i]
+	xgr	$t1,$t0
+	$ROT	$t0,$t0,`$sigma1[1]-$sigma1[0]`
+	$ADD	$T1,`$stdframe+$SZ*(($i+9)%16)`($sp)	# +=X[i+9]
+	xgr	$t1,$t0				# sigma1(X[i+14])
+	algr	$T1,$t1				# +=sigma1(X[i+14])
+___
+	&BODY_00_15(@_);
+}
+
+$code.=<<___;
+#include "s390x_arch.h"
+
+.text
+.align	64
+.type	$Table,\@object
+$Table:
+___
+$code.=<<___ if ($SZ==4);
+	.long	0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5
+	.long	0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5
+	.long	0xd807aa98,0x12835b01,0x243185be,0x550c7dc3
+	.long	0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174
+	.long	0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc
+	.long	0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da
+	.long	0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7
+	.long	0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967
+	.long	0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13
+	.long	0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85
+	.long	0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3
+	.long	0xd192e819,0xd6990624,0xf40e3585,0x106aa070
+	.long	0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5
+	.long	0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3
+	.long	0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208
+	.long	0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2
+___
+$code.=<<___ if ($SZ==8);
+	.quad	0x428a2f98d728ae22,0x7137449123ef65cd
+	.quad	0xb5c0fbcfec4d3b2f,0xe9b5dba58189dbbc
+	.quad	0x3956c25bf348b538,0x59f111f1b605d019
+	.quad	0x923f82a4af194f9b,0xab1c5ed5da6d8118
+	.quad	0xd807aa98a3030242,0x12835b0145706fbe
+	.quad	0x243185be4ee4b28c,0x550c7dc3d5ffb4e2
+	.quad	0x72be5d74f27b896f,0x80deb1fe3b1696b1
+	.quad	0x9bdc06a725c71235,0xc19bf174cf692694
+	.quad	0xe49b69c19ef14ad2,0xefbe4786384f25e3
+	.quad	0x0fc19dc68b8cd5b5,0x240ca1cc77ac9c65
+	.quad	0x2de92c6f592b0275,0x4a7484aa6ea6e483
+	.quad	0x5cb0a9dcbd41fbd4,0x76f988da831153b5
+	.quad	0x983e5152ee66dfab,0xa831c66d2db43210
+	.quad	0xb00327c898fb213f,0xbf597fc7beef0ee4
+	.quad	0xc6e00bf33da88fc2,0xd5a79147930aa725
+	.quad	0x06ca6351e003826f,0x142929670a0e6e70
+	.quad	0x27b70a8546d22ffc,0x2e1b21385c26c926
+	.quad	0x4d2c6dfc5ac42aed,0x53380d139d95b3df
+	.quad	0x650a73548baf63de,0x766a0abb3c77b2a8
+	.quad	0x81c2c92e47edaee6,0x92722c851482353b
+	.quad	0xa2bfe8a14cf10364,0xa81a664bbc423001
+	.quad	0xc24b8b70d0f89791,0xc76c51a30654be30
+	.quad	0xd192e819d6ef5218,0xd69906245565a910
+	.quad	0xf40e35855771202a,0x106aa07032bbd1b8
+	.quad	0x19a4c116b8d2d0c8,0x1e376c085141ab53
+	.quad	0x2748774cdf8eeb99,0x34b0bcb5e19b48a8
+	.quad	0x391c0cb3c5c95a63,0x4ed8aa4ae3418acb
+	.quad	0x5b9cca4f7763e373,0x682e6ff3d6b2b8a3
+	.quad	0x748f82ee5defb2fc,0x78a5636f43172f60
+	.quad	0x84c87814a1f0ab72,0x8cc702081a6439ec
+	.quad	0x90befffa23631e28,0xa4506cebde82bde9
+	.quad	0xbef9a3f7b2c67915,0xc67178f2e372532b
+	.quad	0xca273eceea26619c,0xd186b8c721c0c207
+	.quad	0xeada7dd6cde0eb1e,0xf57d4f7fee6ed178
+	.quad	0x06f067aa72176fba,0x0a637dc5a2c898a6
+	.quad	0x113f9804bef90dae,0x1b710b35131c471b
+	.quad	0x28db77f523047d84,0x32caab7b40c72493
+	.quad	0x3c9ebe0a15c9bebc,0x431d67c49c100d4c
+	.quad	0x4cc5d4becb3e42b6,0x597f299cfc657e2a
+	.quad	0x5fcb6fab3ad6faec,0x6c44198c4a475817
+___
+$code.=<<___;
+.size	$Table,.-$Table
+.globl	$Func
+.type	$Func,\@function
+$Func:
+	sllg	$len,$len,`log(16*$SZ)/log(2)`
+___
+$code.=<<___ if ($kimdfunc);
+	larl	%r1,OPENSSL_s390xcap_P
+	lg	%r0,S390X_KIMD(%r1)	# check kimd capabilities
+	tmhh	%r0,`0x8000>>$kimdfunc`
+	jz	.Lsoftware
+	lghi	%r0,$kimdfunc
+	lgr	%r1,$ctx
+	lgr	%r2,$inp
+	lgr	%r3,$len
+	.long	0xb93e0002	# kimd %r0,%r2
+	brc	1,.-4		# pay attention to "partial completion"
+	br	%r14
+.align	16
+.Lsoftware:
+___
+$code.=<<___;
+	lghi	%r1,-$frame
+	la	$len,0($len,$inp)
+	stm${g}	$ctx,%r15,`2*$SIZE_T`($sp)
+	lgr	%r0,$sp
+	la	$sp,0(%r1,$sp)
+	st${g}	%r0,0($sp)
+
+	larl	$tbl,$Table
+	$LD	$A,`0*$SZ`($ctx)
+	$LD	$B,`1*$SZ`($ctx)
+	$LD	$C,`2*$SZ`($ctx)
+	$LD	$D,`3*$SZ`($ctx)
+	$LD	$E,`4*$SZ`($ctx)
+	$LD	$F,`5*$SZ`($ctx)
+	$LD	$G,`6*$SZ`($ctx)
+	$LD	$H,`7*$SZ`($ctx)
+
+.Lloop:
+	lghi	$len,0
+___
+for ($i=0;$i<16;$i++)	{ &BODY_00_15($i,@V); unshift(@V,pop(@V)); }
+$code.=".Lrounds_16_xx:\n";
+for (;$i<32;$i++)	{ &BODY_16_XX($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	aghi	$len,`16*$SZ`
+	lghi	$t0,`($rounds-16)*$SZ`
+	clgr	$len,$t0
+	jne	.Lrounds_16_xx
+
+	l${g}	$ctx,`$frame+2*$SIZE_T`($sp)
+	la	$inp,`16*$SZ`($inp)
+	$ADD	$A,`0*$SZ`($ctx)
+	$ADD	$B,`1*$SZ`($ctx)
+	$ADD	$C,`2*$SZ`($ctx)
+	$ADD	$D,`3*$SZ`($ctx)
+	$ADD	$E,`4*$SZ`($ctx)
+	$ADD	$F,`5*$SZ`($ctx)
+	$ADD	$G,`6*$SZ`($ctx)
+	$ADD	$H,`7*$SZ`($ctx)
+	$ST	$A,`0*$SZ`($ctx)
+	$ST	$B,`1*$SZ`($ctx)
+	$ST	$C,`2*$SZ`($ctx)
+	$ST	$D,`3*$SZ`($ctx)
+	$ST	$E,`4*$SZ`($ctx)
+	$ST	$F,`5*$SZ`($ctx)
+	$ST	$G,`6*$SZ`($ctx)
+	$ST	$H,`7*$SZ`($ctx)
+	cl${g}	$inp,`$frame+4*$SIZE_T`($sp)
+	jne	.Lloop
+
+	lm${g}	%r6,%r15,`$frame+6*$SIZE_T`($sp)
+	br	%r14
+.size	$Func,.-$Func
+.string	"SHA${label} block transform for s390x, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+# unlike 32-bit shift 64-bit one takes three arguments
+$code =~ s/(srlg\s+)(%r[0-9]+),/$1$2,$2,/gm;
+
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-sparcv9.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-sparcv9.pl
new file mode 100644
index 000000000..4432bda65
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-sparcv9.pl
@@ -0,0 +1,857 @@
+#! /usr/bin/env perl
+# Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+#
+# Hardware SPARC T4 support by David S. Miller
+# ====================================================================
+
+# SHA256 performance improvement over compiler generated code varies
+# from 40% for Sun C [32-bit build] to 70% for gcc [3.3, 64-bit
+# build]. Just like in SHA1 module I aim to ensure scalability on
+# UltraSPARC T1 by packing X[16] to 8 64-bit registers.
+
+# SHA512 on pre-T1 UltraSPARC.
+#
+# Performance is >75% better than 64-bit code generated by Sun C and
+# over 2x than 32-bit code. X[16] resides on stack, but access to it
+# is scheduled for L2 latency and staged through 32 least significant
+# bits of %l0-%l7. The latter is done to achieve 32-/64-bit ABI
+# duality. Nevetheless it's ~40% faster than SHA256, which is pretty
+# good [optimal coefficient is 50%].
+#
+# SHA512 on UltraSPARC T1.
+#
+# It's not any faster than 64-bit code generated by Sun C 5.8. This is
+# because 64-bit code generator has the advantage of using 64-bit
+# loads(*) to access X[16], which I consciously traded for 32-/64-bit
+# ABI duality [as per above]. But it surpasses 32-bit Sun C generated
+# code by 60%, not to mention that it doesn't suffer from severe decay
+# when running 4 times physical cores threads and that it leaves gcc
+# [3.4] behind by over 4x factor! If compared to SHA256, single thread
+# performance is only 10% better, but overall throughput for maximum
+# amount of threads for given CPU exceeds corresponding one of SHA256
+# by 30% [again, optimal coefficient is 50%].
+#
+# (*)	Unlike pre-T1 UltraSPARC loads on T1 are executed strictly
+#	in-order, i.e. load instruction has to complete prior next
+#	instruction in given thread is executed, even if the latter is
+#	not dependent on load result! This means that on T1 two 32-bit
+#	loads are always slower than one 64-bit load. Once again this
+#	is unlike pre-T1 UltraSPARC, where, if scheduled appropriately,
+#	2x32-bit loads can be as fast as 1x64-bit ones.
+#
+# SPARC T4 SHA256/512 hardware achieves 3.17/2.01 cycles per byte,
+# which is 9.3x/11.1x faster than software. Multi-process benchmark
+# saturates at 11.5x single-process result on 8-core processor, or
+# ~11/16GBps per 2.85GHz socket.
+
+$output=pop;
+open STDOUT,">$output";
+
+if ($output =~ /512/) {
+	$label="512";
+	$SZ=8;
+	$LD="ldx";		# load from memory
+	$ST="stx";		# store to memory
+	$SLL="sllx";		# shift left logical
+	$SRL="srlx";		# shift right logical
+	@Sigma0=(28,34,39);
+	@Sigma1=(14,18,41);
+	@sigma0=( 7, 1, 8);	# right shift first
+	@sigma1=( 6,19,61);	# right shift first
+	$lastK=0x817;
+	$rounds=80;
+	$align=4;
+
+	$locals=16*$SZ;		# X[16]
+
+	$A="%o0";
+	$B="%o1";
+	$C="%o2";
+	$D="%o3";
+	$E="%o4";
+	$F="%o5";
+	$G="%g1";
+	$H="%o7";
+	@V=($A,$B,$C,$D,$E,$F,$G,$H);
+} else {
+	$label="256";
+	$SZ=4;
+	$LD="ld";		# load from memory
+	$ST="st";		# store to memory
+	$SLL="sll";		# shift left logical
+	$SRL="srl";		# shift right logical
+	@Sigma0=( 2,13,22);
+	@Sigma1=( 6,11,25);
+	@sigma0=( 3, 7,18);	# right shift first
+	@sigma1=(10,17,19);	# right shift first
+	$lastK=0x8f2;
+	$rounds=64;
+	$align=8;
+
+	$locals=0;		# X[16] is register resident
+	@X=("%o0","%o1","%o2","%o3","%o4","%o5","%g1","%o7");
+
+	$A="%l0";
+	$B="%l1";
+	$C="%l2";
+	$D="%l3";
+	$E="%l4";
+	$F="%l5";
+	$G="%l6";
+	$H="%l7";
+	@V=($A,$B,$C,$D,$E,$F,$G,$H);
+}
+$T1="%g2";
+$tmp0="%g3";
+$tmp1="%g4";
+$tmp2="%g5";
+
+$ctx="%i0";
+$inp="%i1";
+$len="%i2";
+$Ktbl="%i3";
+$tmp31="%i4";
+$tmp32="%i5";
+
+########### SHA256
+$Xload = sub {
+my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
+
+    if ($i==0) {
+$code.=<<___;
+	ldx	[$inp+0],@X[0]
+	ldx	[$inp+16],@X[2]
+	ldx	[$inp+32],@X[4]
+	ldx	[$inp+48],@X[6]
+	ldx	[$inp+8],@X[1]
+	ldx	[$inp+24],@X[3]
+	subcc	%g0,$tmp31,$tmp32 ! should be 64-$tmp31, but -$tmp31 works too
+	ldx	[$inp+40],@X[5]
+	bz,pt	%icc,.Laligned
+	ldx	[$inp+56],@X[7]
+
+	sllx	@X[0],$tmp31,@X[0]
+	ldx	[$inp+64],$T1
+___
+for($j=0;$j<7;$j++)
+{   $code.=<<___;
+	srlx	@X[$j+1],$tmp32,$tmp1
+	sllx	@X[$j+1],$tmp31,@X[$j+1]
+	or	$tmp1,@X[$j],@X[$j]
+___
+}
+$code.=<<___;
+	srlx	$T1,$tmp32,$T1
+	or	$T1,@X[7],@X[7]
+.Laligned:
+___
+    }
+
+    if ($i&1) {
+	$code.="\tadd	@X[$i/2],$h,$T1\n";
+    } else {
+	$code.="\tsrlx	@X[$i/2],32,$T1\n\tadd	$h,$T1,$T1\n";
+    }
+} if ($SZ==4);
+
+########### SHA512
+$Xload = sub {
+my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
+my @pair=("%l".eval(($i*2)%8),"%l".eval(($i*2)%8+1),"%l".eval((($i+1)*2)%8));
+
+$code.=<<___ if ($i==0);
+	ld	[$inp+0],%l0
+	ld	[$inp+4],%l1
+	ld	[$inp+8],%l2
+	ld	[$inp+12],%l3
+	ld	[$inp+16],%l4
+	ld	[$inp+20],%l5
+	ld	[$inp+24],%l6
+	cmp	$tmp31,0
+	ld	[$inp+28],%l7
+___
+$code.=<<___ if ($i<15);
+	sllx	@pair[1],$tmp31,$tmp2	! Xload($i)
+	add	$tmp31,32,$tmp0
+	sllx	@pair[0],$tmp0,$tmp1
+	`"ld	[$inp+".eval(32+0+$i*8)."],@pair[0]"	if ($i<12)`
+	srlx	@pair[2],$tmp32,@pair[1]
+	or	$tmp1,$tmp2,$tmp2
+	or	@pair[1],$tmp2,$tmp2
+	`"ld	[$inp+".eval(32+4+$i*8)."],@pair[1]"	if ($i<12)`
+	add	$h,$tmp2,$T1
+	$ST	$tmp2,[%sp+STACK_BIAS+STACK_FRAME+`$i*$SZ`]
+___
+$code.=<<___ if ($i==12);
+	bnz,a,pn	%icc,.+8
+	ld	[$inp+128],%l0
+___
+$code.=<<___ if ($i==15);
+	ld	[%sp+STACK_BIAS+STACK_FRAME+`(($i+1+1)%16)*$SZ+0`],%l2
+	sllx	@pair[1],$tmp31,$tmp2	! Xload($i)
+	add	$tmp31,32,$tmp0
+	ld	[%sp+STACK_BIAS+STACK_FRAME+`(($i+1+1)%16)*$SZ+4`],%l3
+	sllx	@pair[0],$tmp0,$tmp1
+	ld	[%sp+STACK_BIAS+STACK_FRAME+`(($i+1+9)%16)*$SZ+0`],%l4
+	srlx	@pair[2],$tmp32,@pair[1]
+	or	$tmp1,$tmp2,$tmp2
+	ld	[%sp+STACK_BIAS+STACK_FRAME+`(($i+1+9)%16)*$SZ+4`],%l5
+	or	@pair[1],$tmp2,$tmp2
+	ld	[%sp+STACK_BIAS+STACK_FRAME+`(($i+1+14)%16)*$SZ+0`],%l6
+	add	$h,$tmp2,$T1
+	$ST	$tmp2,[%sp+STACK_BIAS+STACK_FRAME+`$i*$SZ`]
+	ld	[%sp+STACK_BIAS+STACK_FRAME+`(($i+1+14)%16)*$SZ+4`],%l7
+	ld	[%sp+STACK_BIAS+STACK_FRAME+`(($i+1+0)%16)*$SZ+0`],%l0
+	ld	[%sp+STACK_BIAS+STACK_FRAME+`(($i+1+0)%16)*$SZ+4`],%l1
+___
+} if ($SZ==8);
+
+########### common
+sub BODY_00_15 {
+my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
+
+    if ($i<16) {
+	&$Xload(@_);
+    } else {
+	$code.="\tadd	$h,$T1,$T1\n";
+    }
+
+$code.=<<___;
+	$SRL	$e,@Sigma1[0],$h	!! $i
+	xor	$f,$g,$tmp2
+	$SLL	$e,`$SZ*8-@Sigma1[2]`,$tmp1
+	and	$e,$tmp2,$tmp2
+	$SRL	$e,@Sigma1[1],$tmp0
+	xor	$tmp1,$h,$h
+	$SLL	$e,`$SZ*8-@Sigma1[1]`,$tmp1
+	xor	$tmp0,$h,$h
+	$SRL	$e,@Sigma1[2],$tmp0
+	xor	$tmp1,$h,$h
+	$SLL	$e,`$SZ*8-@Sigma1[0]`,$tmp1
+	xor	$tmp0,$h,$h
+	xor	$g,$tmp2,$tmp2		! Ch(e,f,g)
+	xor	$tmp1,$h,$tmp0		! Sigma1(e)
+
+	$SRL	$a,@Sigma0[0],$h
+	add	$tmp2,$T1,$T1
+	$LD	[$Ktbl+`$i*$SZ`],$tmp2	! K[$i]
+	$SLL	$a,`$SZ*8-@Sigma0[2]`,$tmp1
+	add	$tmp0,$T1,$T1
+	$SRL	$a,@Sigma0[1],$tmp0
+	xor	$tmp1,$h,$h
+	$SLL	$a,`$SZ*8-@Sigma0[1]`,$tmp1
+	xor	$tmp0,$h,$h
+	$SRL	$a,@Sigma0[2],$tmp0
+	xor	$tmp1,$h,$h
+	$SLL	$a,`$SZ*8-@Sigma0[0]`,$tmp1
+	xor	$tmp0,$h,$h
+	xor	$tmp1,$h,$h		! Sigma0(a)
+
+	or	$a,$b,$tmp0
+	and	$a,$b,$tmp1
+	and	$c,$tmp0,$tmp0
+	or	$tmp0,$tmp1,$tmp1	! Maj(a,b,c)
+	add	$tmp2,$T1,$T1		! +=K[$i]
+	add	$tmp1,$h,$h
+
+	add	$T1,$d,$d
+	add	$T1,$h,$h
+___
+}
+
+########### SHA256
+$BODY_16_XX = sub {
+my $i=@_[0];
+my $xi;
+
+    if ($i&1) {
+	$xi=$tmp32;
+	$code.="\tsrlx	@X[(($i+1)/2)%8],32,$xi\n";
+    } else {
+	$xi=@X[(($i+1)/2)%8];
+    }
+$code.=<<___;
+	srl	$xi,@sigma0[0],$T1		!! Xupdate($i)
+	sll	$xi,`32-@sigma0[2]`,$tmp1
+	srl	$xi,@sigma0[1],$tmp0
+	xor	$tmp1,$T1,$T1
+	sll	$tmp1,`@sigma0[2]-@sigma0[1]`,$tmp1
+	xor	$tmp0,$T1,$T1
+	srl	$xi,@sigma0[2],$tmp0
+	xor	$tmp1,$T1,$T1
+___
+    if ($i&1) {
+	$xi=@X[(($i+14)/2)%8];
+    } else {
+	$xi=$tmp32;
+	$code.="\tsrlx	@X[(($i+14)/2)%8],32,$xi\n";
+    }
+$code.=<<___;
+	srl	$xi,@sigma1[0],$tmp2
+	xor	$tmp0,$T1,$T1			! T1=sigma0(X[i+1])
+	sll	$xi,`32-@sigma1[2]`,$tmp1
+	srl	$xi,@sigma1[1],$tmp0
+	xor	$tmp1,$tmp2,$tmp2
+	sll	$tmp1,`@sigma1[2]-@sigma1[1]`,$tmp1
+	xor	$tmp0,$tmp2,$tmp2
+	srl	$xi,@sigma1[2],$tmp0
+	xor	$tmp1,$tmp2,$tmp2
+___
+    if ($i&1) {
+	$xi=@X[($i/2)%8];
+$code.=<<___;
+	srlx	@X[(($i+9)/2)%8],32,$tmp1	! X[i+9]
+	xor	$tmp0,$tmp2,$tmp2		! sigma1(X[i+14])
+	srl	@X[($i/2)%8],0,$tmp0
+	add	$tmp2,$tmp1,$tmp1
+	add	$xi,$T1,$T1			! +=X[i]
+	xor	$tmp0,@X[($i/2)%8],@X[($i/2)%8]
+	add	$tmp1,$T1,$T1
+
+	srl	$T1,0,$T1
+	or	$T1,@X[($i/2)%8],@X[($i/2)%8]
+___
+    } else {
+	$xi=@X[(($i+9)/2)%8];
+$code.=<<___;
+	srlx	@X[($i/2)%8],32,$tmp1		! X[i]
+	xor	$tmp0,$tmp2,$tmp2		! sigma1(X[i+14])
+	add	$xi,$T1,$T1			! +=X[i+9]
+	add	$tmp2,$tmp1,$tmp1
+	srl	@X[($i/2)%8],0,@X[($i/2)%8]
+	add	$tmp1,$T1,$T1
+
+	sllx	$T1,32,$tmp0
+	or	$tmp0,@X[($i/2)%8],@X[($i/2)%8]
+___
+    }
+    &BODY_00_15(@_);
+} if ($SZ==4);
+
+########### SHA512
+$BODY_16_XX = sub {
+my $i=@_[0];
+my @pair=("%l".eval(($i*2)%8),"%l".eval(($i*2)%8+1));
+
+$code.=<<___;
+	sllx	%l2,32,$tmp0		!! Xupdate($i)
+	or	%l3,$tmp0,$tmp0
+
+	srlx	$tmp0,@sigma0[0],$T1
+	ld	[%sp+STACK_BIAS+STACK_FRAME+`(($i+1+1)%16)*$SZ+0`],%l2
+	sllx	$tmp0,`64-@sigma0[2]`,$tmp1
+	ld	[%sp+STACK_BIAS+STACK_FRAME+`(($i+1+1)%16)*$SZ+4`],%l3
+	srlx	$tmp0,@sigma0[1],$tmp0
+	xor	$tmp1,$T1,$T1
+	sllx	$tmp1,`@sigma0[2]-@sigma0[1]`,$tmp1
+	xor	$tmp0,$T1,$T1
+	srlx	$tmp0,`@sigma0[2]-@sigma0[1]`,$tmp0
+	xor	$tmp1,$T1,$T1
+	sllx	%l6,32,$tmp2
+	xor	$tmp0,$T1,$T1		! sigma0(X[$i+1])
+	or	%l7,$tmp2,$tmp2
+
+	srlx	$tmp2,@sigma1[0],$tmp1
+	ld	[%sp+STACK_BIAS+STACK_FRAME+`(($i+1+14)%16)*$SZ+0`],%l6
+	sllx	$tmp2,`64-@sigma1[2]`,$tmp0
+	ld	[%sp+STACK_BIAS+STACK_FRAME+`(($i+1+14)%16)*$SZ+4`],%l7
+	srlx	$tmp2,@sigma1[1],$tmp2
+	xor	$tmp0,$tmp1,$tmp1
+	sllx	$tmp0,`@sigma1[2]-@sigma1[1]`,$tmp0
+	xor	$tmp2,$tmp1,$tmp1
+	srlx	$tmp2,`@sigma1[2]-@sigma1[1]`,$tmp2
+	xor	$tmp0,$tmp1,$tmp1
+	sllx	%l4,32,$tmp0
+	xor	$tmp2,$tmp1,$tmp1	! sigma1(X[$i+14])
+	ld	[%sp+STACK_BIAS+STACK_FRAME+`(($i+1+9)%16)*$SZ+0`],%l4
+	or	%l5,$tmp0,$tmp0
+	ld	[%sp+STACK_BIAS+STACK_FRAME+`(($i+1+9)%16)*$SZ+4`],%l5
+
+	sllx	%l0,32,$tmp2
+	add	$tmp1,$T1,$T1
+	ld	[%sp+STACK_BIAS+STACK_FRAME+`(($i+1+0)%16)*$SZ+0`],%l0
+	or	%l1,$tmp2,$tmp2
+	add	$tmp0,$T1,$T1		! +=X[$i+9]
+	ld	[%sp+STACK_BIAS+STACK_FRAME+`(($i+1+0)%16)*$SZ+4`],%l1
+	add	$tmp2,$T1,$T1		! +=X[$i]
+	$ST	$T1,[%sp+STACK_BIAS+STACK_FRAME+`($i%16)*$SZ`]
+___
+    &BODY_00_15(@_);
+} if ($SZ==8);
+
+$code.=<<___;
+#include "sparc_arch.h"
+
+#ifdef __arch64__
+.register	%g2,#scratch
+.register	%g3,#scratch
+#endif
+
+.section	".text",#alloc,#execinstr
+
+.align	64
+K${label}:
+.type	K${label},#object
+___
+if ($SZ==4) {
+$code.=<<___;
+	.long	0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5
+	.long	0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5
+	.long	0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3
+	.long	0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174
+	.long	0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc
+	.long	0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da
+	.long	0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7
+	.long	0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967
+	.long	0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13
+	.long	0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85
+	.long	0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3
+	.long	0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070
+	.long	0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5
+	.long	0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3
+	.long	0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208
+	.long	0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2
+___
+} else {
+$code.=<<___;
+	.long	0x428a2f98,0xd728ae22, 0x71374491,0x23ef65cd
+	.long	0xb5c0fbcf,0xec4d3b2f, 0xe9b5dba5,0x8189dbbc
+	.long	0x3956c25b,0xf348b538, 0x59f111f1,0xb605d019
+	.long	0x923f82a4,0xaf194f9b, 0xab1c5ed5,0xda6d8118
+	.long	0xd807aa98,0xa3030242, 0x12835b01,0x45706fbe
+	.long	0x243185be,0x4ee4b28c, 0x550c7dc3,0xd5ffb4e2
+	.long	0x72be5d74,0xf27b896f, 0x80deb1fe,0x3b1696b1
+	.long	0x9bdc06a7,0x25c71235, 0xc19bf174,0xcf692694
+	.long	0xe49b69c1,0x9ef14ad2, 0xefbe4786,0x384f25e3
+	.long	0x0fc19dc6,0x8b8cd5b5, 0x240ca1cc,0x77ac9c65
+	.long	0x2de92c6f,0x592b0275, 0x4a7484aa,0x6ea6e483
+	.long	0x5cb0a9dc,0xbd41fbd4, 0x76f988da,0x831153b5
+	.long	0x983e5152,0xee66dfab, 0xa831c66d,0x2db43210
+	.long	0xb00327c8,0x98fb213f, 0xbf597fc7,0xbeef0ee4
+	.long	0xc6e00bf3,0x3da88fc2, 0xd5a79147,0x930aa725
+	.long	0x06ca6351,0xe003826f, 0x14292967,0x0a0e6e70
+	.long	0x27b70a85,0x46d22ffc, 0x2e1b2138,0x5c26c926
+	.long	0x4d2c6dfc,0x5ac42aed, 0x53380d13,0x9d95b3df
+	.long	0x650a7354,0x8baf63de, 0x766a0abb,0x3c77b2a8
+	.long	0x81c2c92e,0x47edaee6, 0x92722c85,0x1482353b
+	.long	0xa2bfe8a1,0x4cf10364, 0xa81a664b,0xbc423001
+	.long	0xc24b8b70,0xd0f89791, 0xc76c51a3,0x0654be30
+	.long	0xd192e819,0xd6ef5218, 0xd6990624,0x5565a910
+	.long	0xf40e3585,0x5771202a, 0x106aa070,0x32bbd1b8
+	.long	0x19a4c116,0xb8d2d0c8, 0x1e376c08,0x5141ab53
+	.long	0x2748774c,0xdf8eeb99, 0x34b0bcb5,0xe19b48a8
+	.long	0x391c0cb3,0xc5c95a63, 0x4ed8aa4a,0xe3418acb
+	.long	0x5b9cca4f,0x7763e373, 0x682e6ff3,0xd6b2b8a3
+	.long	0x748f82ee,0x5defb2fc, 0x78a5636f,0x43172f60
+	.long	0x84c87814,0xa1f0ab72, 0x8cc70208,0x1a6439ec
+	.long	0x90befffa,0x23631e28, 0xa4506ceb,0xde82bde9
+	.long	0xbef9a3f7,0xb2c67915, 0xc67178f2,0xe372532b
+	.long	0xca273ece,0xea26619c, 0xd186b8c7,0x21c0c207
+	.long	0xeada7dd6,0xcde0eb1e, 0xf57d4f7f,0xee6ed178
+	.long	0x06f067aa,0x72176fba, 0x0a637dc5,0xa2c898a6
+	.long	0x113f9804,0xbef90dae, 0x1b710b35,0x131c471b
+	.long	0x28db77f5,0x23047d84, 0x32caab7b,0x40c72493
+	.long	0x3c9ebe0a,0x15c9bebc, 0x431d67c4,0x9c100d4c
+	.long	0x4cc5d4be,0xcb3e42b6, 0x597f299c,0xfc657e2a
+	.long	0x5fcb6fab,0x3ad6faec, 0x6c44198c,0x4a475817
+___
+}
+$code.=<<___;
+.size	K${label},.-K${label}
+
+#ifdef __PIC__
+SPARC_PIC_THUNK(%g1)
+#endif
+
+.globl	sha${label}_block_data_order
+.align	32
+sha${label}_block_data_order:
+	SPARC_LOAD_ADDRESS_LEAF(OPENSSL_sparcv9cap_P,%g1,%g5)
+	ld	[%g1+4],%g1		! OPENSSL_sparcv9cap_P[1]
+
+	andcc	%g1, CFR_SHA${label}, %g0
+	be	.Lsoftware
+	nop
+___
+$code.=<<___ if ($SZ==8); 		# SHA512
+	ldd	[%o0 + 0x00], %f0	! load context
+	ldd	[%o0 + 0x08], %f2
+	ldd	[%o0 + 0x10], %f4
+	ldd	[%o0 + 0x18], %f6
+	ldd	[%o0 + 0x20], %f8
+	ldd	[%o0 + 0x28], %f10
+	andcc	%o1, 0x7, %g0
+	ldd	[%o0 + 0x30], %f12
+	bne,pn	%icc, .Lhwunaligned
+	 ldd	[%o0 + 0x38], %f14
+
+.Lhwaligned_loop:
+	ldd	[%o1 + 0x00], %f16
+	ldd	[%o1 + 0x08], %f18
+	ldd	[%o1 + 0x10], %f20
+	ldd	[%o1 + 0x18], %f22
+	ldd	[%o1 + 0x20], %f24
+	ldd	[%o1 + 0x28], %f26
+	ldd	[%o1 + 0x30], %f28
+	ldd	[%o1 + 0x38], %f30
+	ldd	[%o1 + 0x40], %f32
+	ldd	[%o1 + 0x48], %f34
+	ldd	[%o1 + 0x50], %f36
+	ldd	[%o1 + 0x58], %f38
+	ldd	[%o1 + 0x60], %f40
+	ldd	[%o1 + 0x68], %f42
+	ldd	[%o1 + 0x70], %f44
+	subcc	%o2, 1, %o2		! done yet?
+	ldd	[%o1 + 0x78], %f46
+	add	%o1, 0x80, %o1
+	prefetch [%o1 + 63], 20
+	prefetch [%o1 + 64+63], 20
+
+	.word	0x81b02860		! SHA512
+
+	bne,pt	SIZE_T_CC, .Lhwaligned_loop
+	nop
+
+.Lhwfinish:
+	std	%f0, [%o0 + 0x00]	! store context
+	std	%f2, [%o0 + 0x08]
+	std	%f4, [%o0 + 0x10]
+	std	%f6, [%o0 + 0x18]
+	std	%f8, [%o0 + 0x20]
+	std	%f10, [%o0 + 0x28]
+	std	%f12, [%o0 + 0x30]
+	retl
+	 std	%f14, [%o0 + 0x38]
+
+.align	16
+.Lhwunaligned:
+	alignaddr %o1, %g0, %o1
+
+	ldd	[%o1 + 0x00], %f18
+.Lhwunaligned_loop:
+	ldd	[%o1 + 0x08], %f20
+	ldd	[%o1 + 0x10], %f22
+	ldd	[%o1 + 0x18], %f24
+	ldd	[%o1 + 0x20], %f26
+	ldd	[%o1 + 0x28], %f28
+	ldd	[%o1 + 0x30], %f30
+	ldd	[%o1 + 0x38], %f32
+	ldd	[%o1 + 0x40], %f34
+	ldd	[%o1 + 0x48], %f36
+	ldd	[%o1 + 0x50], %f38
+	ldd	[%o1 + 0x58], %f40
+	ldd	[%o1 + 0x60], %f42
+	ldd	[%o1 + 0x68], %f44
+	ldd	[%o1 + 0x70], %f46
+	ldd	[%o1 + 0x78], %f48
+	subcc	%o2, 1, %o2		! done yet?
+	ldd	[%o1 + 0x80], %f50
+	add	%o1, 0x80, %o1
+	prefetch [%o1 + 63], 20
+	prefetch [%o1 + 64+63], 20
+
+	faligndata %f18, %f20, %f16
+	faligndata %f20, %f22, %f18
+	faligndata %f22, %f24, %f20
+	faligndata %f24, %f26, %f22
+	faligndata %f26, %f28, %f24
+	faligndata %f28, %f30, %f26
+	faligndata %f30, %f32, %f28
+	faligndata %f32, %f34, %f30
+	faligndata %f34, %f36, %f32
+	faligndata %f36, %f38, %f34
+	faligndata %f38, %f40, %f36
+	faligndata %f40, %f42, %f38
+	faligndata %f42, %f44, %f40
+	faligndata %f44, %f46, %f42
+	faligndata %f46, %f48, %f44
+	faligndata %f48, %f50, %f46
+
+	.word	0x81b02860		! SHA512
+
+	bne,pt	SIZE_T_CC, .Lhwunaligned_loop
+	for	%f50, %f50, %f18	! %f18=%f50
+
+	ba	.Lhwfinish
+	nop
+___
+$code.=<<___ if ($SZ==4); 		# SHA256
+	ld	[%o0 + 0x00], %f0
+	ld	[%o0 + 0x04], %f1
+	ld	[%o0 + 0x08], %f2
+	ld	[%o0 + 0x0c], %f3
+	ld	[%o0 + 0x10], %f4
+	ld	[%o0 + 0x14], %f5
+	andcc	%o1, 0x7, %g0
+	ld	[%o0 + 0x18], %f6
+	bne,pn	%icc, .Lhwunaligned
+	 ld	[%o0 + 0x1c], %f7
+
+.Lhwloop:
+	ldd	[%o1 + 0x00], %f8
+	ldd	[%o1 + 0x08], %f10
+	ldd	[%o1 + 0x10], %f12
+	ldd	[%o1 + 0x18], %f14
+	ldd	[%o1 + 0x20], %f16
+	ldd	[%o1 + 0x28], %f18
+	ldd	[%o1 + 0x30], %f20
+	subcc	%o2, 1, %o2		! done yet?
+	ldd	[%o1 + 0x38], %f22
+	add	%o1, 0x40, %o1
+	prefetch [%o1 + 63], 20
+
+	.word	0x81b02840		! SHA256
+
+	bne,pt	SIZE_T_CC, .Lhwloop
+	nop
+
+.Lhwfinish:
+	st	%f0, [%o0 + 0x00]	! store context
+	st	%f1, [%o0 + 0x04]
+	st	%f2, [%o0 + 0x08]
+	st	%f3, [%o0 + 0x0c]
+	st	%f4, [%o0 + 0x10]
+	st	%f5, [%o0 + 0x14]
+	st	%f6, [%o0 + 0x18]
+	retl
+	 st	%f7, [%o0 + 0x1c]
+
+.align	8
+.Lhwunaligned:
+	alignaddr %o1, %g0, %o1
+
+	ldd	[%o1 + 0x00], %f10
+.Lhwunaligned_loop:
+	ldd	[%o1 + 0x08], %f12
+	ldd	[%o1 + 0x10], %f14
+	ldd	[%o1 + 0x18], %f16
+	ldd	[%o1 + 0x20], %f18
+	ldd	[%o1 + 0x28], %f20
+	ldd	[%o1 + 0x30], %f22
+	ldd	[%o1 + 0x38], %f24
+	subcc	%o2, 1, %o2		! done yet?
+	ldd	[%o1 + 0x40], %f26
+	add	%o1, 0x40, %o1
+	prefetch [%o1 + 63], 20
+
+	faligndata %f10, %f12, %f8
+	faligndata %f12, %f14, %f10
+	faligndata %f14, %f16, %f12
+	faligndata %f16, %f18, %f14
+	faligndata %f18, %f20, %f16
+	faligndata %f20, %f22, %f18
+	faligndata %f22, %f24, %f20
+	faligndata %f24, %f26, %f22
+
+	.word	0x81b02840		! SHA256
+
+	bne,pt	SIZE_T_CC, .Lhwunaligned_loop
+	for	%f26, %f26, %f10	! %f10=%f26
+
+	ba	.Lhwfinish
+	nop
+___
+$code.=<<___;
+.align	16
+.Lsoftware:
+	save	%sp,-STACK_FRAME-$locals,%sp
+	and	$inp,`$align-1`,$tmp31
+	sllx	$len,`log(16*$SZ)/log(2)`,$len
+	andn	$inp,`$align-1`,$inp
+	sll	$tmp31,3,$tmp31
+	add	$inp,$len,$len
+___
+$code.=<<___ if ($SZ==8); # SHA512
+	mov	32,$tmp32
+	sub	$tmp32,$tmp31,$tmp32
+___
+$code.=<<___;
+.Lpic:	call	.+8
+	add	%o7,K${label}-.Lpic,$Ktbl
+
+	$LD	[$ctx+`0*$SZ`],$A
+	$LD	[$ctx+`1*$SZ`],$B
+	$LD	[$ctx+`2*$SZ`],$C
+	$LD	[$ctx+`3*$SZ`],$D
+	$LD	[$ctx+`4*$SZ`],$E
+	$LD	[$ctx+`5*$SZ`],$F
+	$LD	[$ctx+`6*$SZ`],$G
+	$LD	[$ctx+`7*$SZ`],$H
+
+.Lloop:
+___
+for ($i=0;$i<16;$i++)	{ &BODY_00_15($i,@V); unshift(@V,pop(@V)); }
+$code.=".L16_xx:\n";
+for (;$i<32;$i++)	{ &$BODY_16_XX($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	and	$tmp2,0xfff,$tmp2
+	cmp	$tmp2,$lastK
+	bne	.L16_xx
+	add	$Ktbl,`16*$SZ`,$Ktbl	! Ktbl+=16
+
+___
+$code.=<<___ if ($SZ==4); # SHA256
+	$LD	[$ctx+`0*$SZ`],@X[0]
+	$LD	[$ctx+`1*$SZ`],@X[1]
+	$LD	[$ctx+`2*$SZ`],@X[2]
+	$LD	[$ctx+`3*$SZ`],@X[3]
+	$LD	[$ctx+`4*$SZ`],@X[4]
+	$LD	[$ctx+`5*$SZ`],@X[5]
+	$LD	[$ctx+`6*$SZ`],@X[6]
+	$LD	[$ctx+`7*$SZ`],@X[7]
+
+	add	$A,@X[0],$A
+	$ST	$A,[$ctx+`0*$SZ`]
+	add	$B,@X[1],$B
+	$ST	$B,[$ctx+`1*$SZ`]
+	add	$C,@X[2],$C
+	$ST	$C,[$ctx+`2*$SZ`]
+	add	$D,@X[3],$D
+	$ST	$D,[$ctx+`3*$SZ`]
+	add	$E,@X[4],$E
+	$ST	$E,[$ctx+`4*$SZ`]
+	add	$F,@X[5],$F
+	$ST	$F,[$ctx+`5*$SZ`]
+	add	$G,@X[6],$G
+	$ST	$G,[$ctx+`6*$SZ`]
+	add	$H,@X[7],$H
+	$ST	$H,[$ctx+`7*$SZ`]
+___
+$code.=<<___ if ($SZ==8); # SHA512
+	ld	[$ctx+`0*$SZ+0`],%l0
+	ld	[$ctx+`0*$SZ+4`],%l1
+	ld	[$ctx+`1*$SZ+0`],%l2
+	ld	[$ctx+`1*$SZ+4`],%l3
+	ld	[$ctx+`2*$SZ+0`],%l4
+	ld	[$ctx+`2*$SZ+4`],%l5
+	ld	[$ctx+`3*$SZ+0`],%l6
+
+	sllx	%l0,32,$tmp0
+	ld	[$ctx+`3*$SZ+4`],%l7
+	sllx	%l2,32,$tmp1
+	or	%l1,$tmp0,$tmp0
+	or	%l3,$tmp1,$tmp1
+	add	$tmp0,$A,$A
+	add	$tmp1,$B,$B
+	$ST	$A,[$ctx+`0*$SZ`]
+	sllx	%l4,32,$tmp2
+	$ST	$B,[$ctx+`1*$SZ`]
+	sllx	%l6,32,$T1
+	or	%l5,$tmp2,$tmp2
+	or	%l7,$T1,$T1
+	add	$tmp2,$C,$C
+	$ST	$C,[$ctx+`2*$SZ`]
+	add	$T1,$D,$D
+	$ST	$D,[$ctx+`3*$SZ`]
+
+	ld	[$ctx+`4*$SZ+0`],%l0
+	ld	[$ctx+`4*$SZ+4`],%l1
+	ld	[$ctx+`5*$SZ+0`],%l2
+	ld	[$ctx+`5*$SZ+4`],%l3
+	ld	[$ctx+`6*$SZ+0`],%l4
+	ld	[$ctx+`6*$SZ+4`],%l5
+	ld	[$ctx+`7*$SZ+0`],%l6
+
+	sllx	%l0,32,$tmp0
+	ld	[$ctx+`7*$SZ+4`],%l7
+	sllx	%l2,32,$tmp1
+	or	%l1,$tmp0,$tmp0
+	or	%l3,$tmp1,$tmp1
+	add	$tmp0,$E,$E
+	add	$tmp1,$F,$F
+	$ST	$E,[$ctx+`4*$SZ`]
+	sllx	%l4,32,$tmp2
+	$ST	$F,[$ctx+`5*$SZ`]
+	sllx	%l6,32,$T1
+	or	%l5,$tmp2,$tmp2
+	or	%l7,$T1,$T1
+	add	$tmp2,$G,$G
+	$ST	$G,[$ctx+`6*$SZ`]
+	add	$T1,$H,$H
+	$ST	$H,[$ctx+`7*$SZ`]
+___
+$code.=<<___;
+	add	$inp,`16*$SZ`,$inp		! advance inp
+	cmp	$inp,$len
+	bne	SIZE_T_CC,.Lloop
+	sub	$Ktbl,`($rounds-16)*$SZ`,$Ktbl	! rewind Ktbl
+
+	ret
+	restore
+.type	sha${label}_block_data_order,#function
+.size	sha${label}_block_data_order,(.-sha${label}_block_data_order)
+.asciz	"SHA${label} block transform for SPARCv9, CRYPTOGAMS by <appro\@openssl.org>"
+.align	4
+___
+
+# Purpose of these subroutines is to explicitly encode VIS instructions,
+# so that one can compile the module without having to specify VIS
+# extensions on compiler command line, e.g. -xarch=v9 vs. -xarch=v9a.
+# Idea is to reserve for option to produce "universal" binary and let
+# programmer detect if current CPU is VIS capable at run-time.
+sub unvis {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my $ref,$opf;
+my %visopf = (	"faligndata"	=> 0x048,
+		"for"		=> 0x07c	);
+
+    $ref = "$mnemonic\t$rs1,$rs2,$rd";
+
+    if ($opf=$visopf{$mnemonic}) {
+	foreach ($rs1,$rs2,$rd) {
+	    return $ref if (!/%f([0-9]{1,2})/);
+	    $_=$1;
+	    if ($1>=32) {
+		return $ref if ($1&1);
+		# re-encode for upper double register addressing
+		$_=($1|$1>>5)&31;
+	    }
+	}
+
+	return	sprintf ".word\t0x%08x !%s",
+			0x81b00000|$rd<<25|$rs1<<14|$opf<<5|$rs2,
+			$ref;
+    } else {
+	return $ref;
+    }
+}
+sub unalignaddr {
+my ($mnemonic,$rs1,$rs2,$rd)=@_;
+my %bias = ( "g" => 0, "o" => 8, "l" => 16, "i" => 24 );
+my $ref="$mnemonic\t$rs1,$rs2,$rd";
+
+    foreach ($rs1,$rs2,$rd) {
+	if (/%([goli])([0-7])/)	{ $_=$bias{$1}+$2; }
+	else			{ return $ref; }
+    }
+    return  sprintf ".word\t0x%08x !%s",
+		    0x81b00300|$rd<<25|$rs1<<14|$rs2,
+		    $ref;
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/ge;
+
+	s/\b(f[^\s]*)\s+(%f[0-9]{1,2}),\s*(%f[0-9]{1,2}),\s*(%f[0-9]{1,2})/
+		&unvis($1,$2,$3,$4)
+	 /ge;
+	s/\b(alignaddr)\s+(%[goli][0-7]),\s*(%[goli][0-7]),\s*(%[goli][0-7])/
+		&unalignaddr($1,$2,$3,$4)
+	 /ge;
+
+	print $_,"\n";
+}
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-x86_64.pl
new file mode 100755
index 000000000..f2ebdfdb6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512-x86_64.pl
@@ -0,0 +1,2498 @@
+#! /usr/bin/env perl
+# Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. Rights for redistribution and usage in source and binary
+# forms are granted according to the OpenSSL license.
+# ====================================================================
+#
+# sha256/512_block procedure for x86_64.
+#
+# 40% improvement over compiler-generated code on Opteron. On EM64T
+# sha256 was observed to run >80% faster and sha512 - >40%. No magical
+# tricks, just straight implementation... I really wonder why gcc
+# [being armed with inline assembler] fails to generate as fast code.
+# The only thing which is cool about this module is that it's very
+# same instruction sequence used for both SHA-256 and SHA-512. In
+# former case the instructions operate on 32-bit operands, while in
+# latter - on 64-bit ones. All I had to do is to get one flavor right,
+# the other one passed the test right away:-)
+#
+# sha256_block runs in ~1005 cycles on Opteron, which gives you
+# asymptotic performance of 64*1000/1005=63.7MBps times CPU clock
+# frequency in GHz. sha512_block runs in ~1275 cycles, which results
+# in 128*1000/1275=100MBps per GHz. Is there room for improvement?
+# Well, if you compare it to IA-64 implementation, which maintains
+# X[16] in register bank[!], tends to 4 instructions per CPU clock
+# cycle and runs in 1003 cycles, 1275 is very good result for 3-way
+# issue Opteron pipeline and X[16] maintained in memory. So that *if*
+# there is a way to improve it, *then* the only way would be to try to
+# offload X[16] updates to SSE unit, but that would require "deeper"
+# loop unroll, which in turn would naturally cause size blow-up, not
+# to mention increased complexity! And once again, only *if* it's
+# actually possible to noticeably improve overall ILP, instruction
+# level parallelism, on a given CPU implementation in this case.
+#
+# Special note on Intel EM64T. While Opteron CPU exhibits perfect
+# performance ratio of 1.5 between 64- and 32-bit flavors [see above],
+# [currently available] EM64T CPUs apparently are far from it. On the
+# contrary, 64-bit version, sha512_block, is ~30% *slower* than 32-bit
+# sha256_block:-( This is presumably because 64-bit shifts/rotates
+# apparently are not atomic instructions, but implemented in microcode.
+#
+# May 2012.
+#
+# Optimization including one of Pavel Semjanov's ideas, alternative
+# Maj, resulted in >=5% improvement on most CPUs, +20% SHA256 and
+# unfortunately -2% SHA512 on P4 [which nobody should care about
+# that much].
+#
+# June 2012.
+#
+# Add SIMD code paths, see below for improvement coefficients. SSSE3
+# code path was not attempted for SHA512, because improvement is not
+# estimated to be high enough, noticeably less than 9%, to justify
+# the effort, not on pre-AVX processors. [Obviously with exclusion
+# for VIA Nano, but it has SHA512 instruction that is faster and
+# should be used instead.] For reference, corresponding estimated
+# upper limit for improvement for SSSE3 SHA256 is 28%. The fact that
+# higher coefficients are observed on VIA Nano and Bulldozer has more
+# to do with specifics of their architecture [which is topic for
+# separate discussion].
+#
+# November 2012.
+#
+# Add AVX2 code path. Two consecutive input blocks are loaded to
+# 256-bit %ymm registers, with data from first block to least
+# significant 128-bit halves and data from second to most significant.
+# The data is then processed with same SIMD instruction sequence as
+# for AVX, but with %ymm as operands. Side effect is increased stack
+# frame, 448 additional bytes in SHA256 and 1152 in SHA512, and 1.2KB
+# code size increase.
+#
+# March 2014.
+#
+# Add support for Intel SHA Extensions.
+
+######################################################################
+# Current performance in cycles per processed byte (less is better):
+#
+#		SHA256	SSSE3       AVX/XOP(*)	    SHA512  AVX/XOP(*)
+#
+# AMD K8	14.9	-	    -		    9.57    -
+# P4		17.3	-	    -		    30.8    -
+# Core 2	15.6	13.8(+13%)  -		    9.97    -
+# Westmere	14.8	12.3(+19%)  -		    9.58    -
+# Sandy Bridge	17.4	14.2(+23%)  11.6(+50%(**))  11.2    8.10(+38%(**))
+# Ivy Bridge	12.6	10.5(+20%)  10.3(+22%)	    8.17    7.22(+13%)
+# Haswell	12.2	9.28(+31%)  7.80(+56%)	    7.66    5.40(+42%)
+# Skylake	11.4	9.03(+26%)  7.70(+48%)      7.25    5.20(+40%)
+# Bulldozer	21.1	13.6(+54%)  13.6(+54%(***)) 13.5    8.58(+57%)
+# Ryzen		11.0	9.02(+22%)  2.05(+440%)     7.05    5.67(+20%)
+# VIA Nano	23.0	16.5(+39%)  -		    14.7    -
+# Atom		23.0	18.9(+22%)  -		    14.7    -
+# Silvermont	27.4	20.6(+33%)  -               17.5    -
+# Knights L	27.4	21.0(+30%)  19.6(+40%)	    17.5    12.8(+37%)
+# Goldmont	18.9	14.3(+32%)  4.16(+350%)     12.0    -
+#
+# (*)	whichever best applicable, including SHAEXT;
+# (**)	switch from ror to shrd stands for fair share of improvement;
+# (***)	execution time is fully determined by remaining integer-only
+#	part, body_00_15; reducing the amount of SIMD instructions
+#	below certain limit makes no difference/sense; to conserve
+#	space SHA256 XOP code path is therefore omitted;
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.19) + ($1>=2.22);
+}
+
+if (!$avx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	   `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$avx = ($1>=2.09) + ($1>=2.10);
+}
+
+if (!$avx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	   `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$avx = ($1>=10) + ($1>=11);
+}
+
+if (!$avx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([3-9]\.[0-9]+)/) {
+	$avx = ($2>=3.0) + ($2>3.0);
+}
+
+$shaext=1;	### set to zero if compiling for 1.0.1
+$avx=1		if (!$shaext && $avx);
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+if ($output =~ /512/) {
+	$func="sha512_block_data_order";
+	$TABLE="K512";
+	$SZ=8;
+	@ROT=($A,$B,$C,$D,$E,$F,$G,$H)=("%rax","%rbx","%rcx","%rdx",
+					"%r8", "%r9", "%r10","%r11");
+	($T1,$a0,$a1,$a2,$a3)=("%r12","%r13","%r14","%r15","%rdi");
+	@Sigma0=(28,34,39);
+	@Sigma1=(14,18,41);
+	@sigma0=(1,  8, 7);
+	@sigma1=(19,61, 6);
+	$rounds=80;
+} else {
+	$func="sha256_block_data_order";
+	$TABLE="K256";
+	$SZ=4;
+	@ROT=($A,$B,$C,$D,$E,$F,$G,$H)=("%eax","%ebx","%ecx","%edx",
+					"%r8d","%r9d","%r10d","%r11d");
+	($T1,$a0,$a1,$a2,$a3)=("%r12d","%r13d","%r14d","%r15d","%edi");
+	@Sigma0=( 2,13,22);
+	@Sigma1=( 6,11,25);
+	@sigma0=( 7,18, 3);
+	@sigma1=(17,19,10);
+	$rounds=64;
+}
+
+$ctx="%rdi";	# 1st arg, zapped by $a3
+$inp="%rsi";	# 2nd arg
+$Tbl="%rbp";
+
+$_ctx="16*$SZ+0*8(%rsp)";
+$_inp="16*$SZ+1*8(%rsp)";
+$_end="16*$SZ+2*8(%rsp)";
+$_rsp="`16*$SZ+3*8`(%rsp)";
+$framesz="16*$SZ+4*8";
+
+
+sub ROUND_00_15()
+{ my ($i,$a,$b,$c,$d,$e,$f,$g,$h) = @_;
+  my $STRIDE=$SZ;
+     $STRIDE += 16 if ($i%(16/$SZ)==(16/$SZ-1));
+
+$code.=<<___;
+	ror	\$`$Sigma1[2]-$Sigma1[1]`,$a0
+	mov	$f,$a2
+
+	xor	$e,$a0
+	ror	\$`$Sigma0[2]-$Sigma0[1]`,$a1
+	xor	$g,$a2			# f^g
+
+	mov	$T1,`$SZ*($i&0xf)`(%rsp)
+	xor	$a,$a1
+	and	$e,$a2			# (f^g)&e
+
+	ror	\$`$Sigma1[1]-$Sigma1[0]`,$a0
+	add	$h,$T1			# T1+=h
+	xor	$g,$a2			# Ch(e,f,g)=((f^g)&e)^g
+
+	ror	\$`$Sigma0[1]-$Sigma0[0]`,$a1
+	xor	$e,$a0
+	add	$a2,$T1			# T1+=Ch(e,f,g)
+
+	mov	$a,$a2
+	add	($Tbl),$T1		# T1+=K[round]
+	xor	$a,$a1
+
+	xor	$b,$a2			# a^b, b^c in next round
+	ror	\$$Sigma1[0],$a0	# Sigma1(e)
+	mov	$b,$h
+
+	and	$a2,$a3
+	ror	\$$Sigma0[0],$a1	# Sigma0(a)
+	add	$a0,$T1			# T1+=Sigma1(e)
+
+	xor	$a3,$h			# h=Maj(a,b,c)=Ch(a^b,c,b)
+	add	$T1,$d			# d+=T1
+	add	$T1,$h			# h+=T1
+
+	lea	$STRIDE($Tbl),$Tbl	# round++
+___
+$code.=<<___ if ($i<15);
+	add	$a1,$h			# h+=Sigma0(a)
+___
+	($a2,$a3) = ($a3,$a2);
+}
+
+sub ROUND_16_XX()
+{ my ($i,$a,$b,$c,$d,$e,$f,$g,$h) = @_;
+
+$code.=<<___;
+	mov	`$SZ*(($i+1)&0xf)`(%rsp),$a0
+	mov	`$SZ*(($i+14)&0xf)`(%rsp),$a2
+
+	mov	$a0,$T1
+	ror	\$`$sigma0[1]-$sigma0[0]`,$a0
+	add	$a1,$a			# modulo-scheduled h+=Sigma0(a)
+	mov	$a2,$a1
+	ror	\$`$sigma1[1]-$sigma1[0]`,$a2
+
+	xor	$T1,$a0
+	shr	\$$sigma0[2],$T1
+	ror	\$$sigma0[0],$a0
+	xor	$a1,$a2
+	shr	\$$sigma1[2],$a1
+
+	ror	\$$sigma1[0],$a2
+	xor	$a0,$T1			# sigma0(X[(i+1)&0xf])
+	xor	$a1,$a2			# sigma1(X[(i+14)&0xf])
+	add	`$SZ*(($i+9)&0xf)`(%rsp),$T1
+
+	add	`$SZ*($i&0xf)`(%rsp),$T1
+	mov	$e,$a0
+	add	$a2,$T1
+	mov	$a,$a1
+___
+	&ROUND_00_15(@_);
+}
+
+$code=<<___;
+.text
+
+.extern	OPENSSL_ia32cap_P
+.globl	$func
+.type	$func,\@function,3
+.align	16
+$func:
+.cfi_startproc
+___
+$code.=<<___ if ($SZ==4 || $avx);
+	lea	OPENSSL_ia32cap_P(%rip),%r11
+	mov	0(%r11),%r9d
+	mov	4(%r11),%r10d
+	mov	8(%r11),%r11d
+___
+$code.=<<___ if ($SZ==4 && $shaext);
+	test	\$`1<<29`,%r11d		# check for SHA
+	jnz	_shaext_shortcut
+___
+$code.=<<___ if ($avx && $SZ==8);
+	test	\$`1<<11`,%r10d		# check for XOP
+	jnz	.Lxop_shortcut
+___
+$code.=<<___ if ($avx>1);
+	and	\$`1<<8|1<<5|1<<3`,%r11d	# check for BMI2+AVX2+BMI1
+	cmp	\$`1<<8|1<<5|1<<3`,%r11d
+	je	.Lavx2_shortcut
+___
+$code.=<<___ if ($avx);
+	and	\$`1<<30`,%r9d		# mask "Intel CPU" bit
+	and	\$`1<<28|1<<9`,%r10d	# mask AVX and SSSE3 bits
+	or	%r9d,%r10d
+	cmp	\$`1<<28|1<<9|1<<30`,%r10d
+	je	.Lavx_shortcut
+___
+$code.=<<___ if ($SZ==4);
+	test	\$`1<<9`,%r10d
+	jnz	.Lssse3_shortcut
+___
+$code.=<<___;
+	mov	%rsp,%rax		# copy %rsp
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	shl	\$4,%rdx		# num*16
+	sub	\$$framesz,%rsp
+	lea	($inp,%rdx,$SZ),%rdx	# inp+num*16*$SZ
+	and	\$-64,%rsp		# align stack frame
+	mov	$ctx,$_ctx		# save ctx, 1st arg
+	mov	$inp,$_inp		# save inp, 2nd arh
+	mov	%rdx,$_end		# save end pointer, "3rd" arg
+	mov	%rax,$_rsp		# save copy of %rsp
+.cfi_cfa_expression	$_rsp,deref,+8
+.Lprologue:
+
+	mov	$SZ*0($ctx),$A
+	mov	$SZ*1($ctx),$B
+	mov	$SZ*2($ctx),$C
+	mov	$SZ*3($ctx),$D
+	mov	$SZ*4($ctx),$E
+	mov	$SZ*5($ctx),$F
+	mov	$SZ*6($ctx),$G
+	mov	$SZ*7($ctx),$H
+	jmp	.Lloop
+
+.align	16
+.Lloop:
+	mov	$B,$a3
+	lea	$TABLE(%rip),$Tbl
+	xor	$C,$a3			# magic
+___
+	for($i=0;$i<16;$i++) {
+		$code.="	mov	$SZ*$i($inp),$T1\n";
+		$code.="	mov	@ROT[4],$a0\n";
+		$code.="	mov	@ROT[0],$a1\n";
+		$code.="	bswap	$T1\n";
+		&ROUND_00_15($i,@ROT);
+		unshift(@ROT,pop(@ROT));
+	}
+$code.=<<___;
+	jmp	.Lrounds_16_xx
+.align	16
+.Lrounds_16_xx:
+___
+	for(;$i<32;$i++) {
+		&ROUND_16_XX($i,@ROT);
+		unshift(@ROT,pop(@ROT));
+	}
+
+$code.=<<___;
+	cmpb	\$0,`$SZ-1`($Tbl)
+	jnz	.Lrounds_16_xx
+
+	mov	$_ctx,$ctx
+	add	$a1,$A			# modulo-scheduled h+=Sigma0(a)
+	lea	16*$SZ($inp),$inp
+
+	add	$SZ*0($ctx),$A
+	add	$SZ*1($ctx),$B
+	add	$SZ*2($ctx),$C
+	add	$SZ*3($ctx),$D
+	add	$SZ*4($ctx),$E
+	add	$SZ*5($ctx),$F
+	add	$SZ*6($ctx),$G
+	add	$SZ*7($ctx),$H
+
+	cmp	$_end,$inp
+
+	mov	$A,$SZ*0($ctx)
+	mov	$B,$SZ*1($ctx)
+	mov	$C,$SZ*2($ctx)
+	mov	$D,$SZ*3($ctx)
+	mov	$E,$SZ*4($ctx)
+	mov	$F,$SZ*5($ctx)
+	mov	$G,$SZ*6($ctx)
+	mov	$H,$SZ*7($ctx)
+	jb	.Lloop
+
+	mov	$_rsp,%rsi
+.cfi_def_cfa	%rsi,8
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue:
+	ret
+.cfi_endproc
+.size	$func,.-$func
+___
+
+if ($SZ==4) {
+$code.=<<___;
+.align	64
+.type	$TABLE,\@object
+$TABLE:
+	.long	0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5
+	.long	0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5
+	.long	0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5
+	.long	0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5
+	.long	0xd807aa98,0x12835b01,0x243185be,0x550c7dc3
+	.long	0xd807aa98,0x12835b01,0x243185be,0x550c7dc3
+	.long	0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174
+	.long	0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174
+	.long	0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc
+	.long	0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc
+	.long	0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da
+	.long	0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da
+	.long	0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7
+	.long	0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7
+	.long	0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967
+	.long	0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967
+	.long	0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13
+	.long	0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13
+	.long	0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85
+	.long	0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85
+	.long	0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3
+	.long	0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3
+	.long	0xd192e819,0xd6990624,0xf40e3585,0x106aa070
+	.long	0xd192e819,0xd6990624,0xf40e3585,0x106aa070
+	.long	0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5
+	.long	0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5
+	.long	0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3
+	.long	0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3
+	.long	0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208
+	.long	0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208
+	.long	0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2
+	.long	0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2
+
+	.long	0x00010203,0x04050607,0x08090a0b,0x0c0d0e0f
+	.long	0x00010203,0x04050607,0x08090a0b,0x0c0d0e0f
+	.long	0x03020100,0x0b0a0908,0xffffffff,0xffffffff
+	.long	0x03020100,0x0b0a0908,0xffffffff,0xffffffff
+	.long	0xffffffff,0xffffffff,0x03020100,0x0b0a0908
+	.long	0xffffffff,0xffffffff,0x03020100,0x0b0a0908
+	.asciz	"SHA256 block transform for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+___
+} else {
+$code.=<<___;
+.align	64
+.type	$TABLE,\@object
+$TABLE:
+	.quad	0x428a2f98d728ae22,0x7137449123ef65cd
+	.quad	0x428a2f98d728ae22,0x7137449123ef65cd
+	.quad	0xb5c0fbcfec4d3b2f,0xe9b5dba58189dbbc
+	.quad	0xb5c0fbcfec4d3b2f,0xe9b5dba58189dbbc
+	.quad	0x3956c25bf348b538,0x59f111f1b605d019
+	.quad	0x3956c25bf348b538,0x59f111f1b605d019
+	.quad	0x923f82a4af194f9b,0xab1c5ed5da6d8118
+	.quad	0x923f82a4af194f9b,0xab1c5ed5da6d8118
+	.quad	0xd807aa98a3030242,0x12835b0145706fbe
+	.quad	0xd807aa98a3030242,0x12835b0145706fbe
+	.quad	0x243185be4ee4b28c,0x550c7dc3d5ffb4e2
+	.quad	0x243185be4ee4b28c,0x550c7dc3d5ffb4e2
+	.quad	0x72be5d74f27b896f,0x80deb1fe3b1696b1
+	.quad	0x72be5d74f27b896f,0x80deb1fe3b1696b1
+	.quad	0x9bdc06a725c71235,0xc19bf174cf692694
+	.quad	0x9bdc06a725c71235,0xc19bf174cf692694
+	.quad	0xe49b69c19ef14ad2,0xefbe4786384f25e3
+	.quad	0xe49b69c19ef14ad2,0xefbe4786384f25e3
+	.quad	0x0fc19dc68b8cd5b5,0x240ca1cc77ac9c65
+	.quad	0x0fc19dc68b8cd5b5,0x240ca1cc77ac9c65
+	.quad	0x2de92c6f592b0275,0x4a7484aa6ea6e483
+	.quad	0x2de92c6f592b0275,0x4a7484aa6ea6e483
+	.quad	0x5cb0a9dcbd41fbd4,0x76f988da831153b5
+	.quad	0x5cb0a9dcbd41fbd4,0x76f988da831153b5
+	.quad	0x983e5152ee66dfab,0xa831c66d2db43210
+	.quad	0x983e5152ee66dfab,0xa831c66d2db43210
+	.quad	0xb00327c898fb213f,0xbf597fc7beef0ee4
+	.quad	0xb00327c898fb213f,0xbf597fc7beef0ee4
+	.quad	0xc6e00bf33da88fc2,0xd5a79147930aa725
+	.quad	0xc6e00bf33da88fc2,0xd5a79147930aa725
+	.quad	0x06ca6351e003826f,0x142929670a0e6e70
+	.quad	0x06ca6351e003826f,0x142929670a0e6e70
+	.quad	0x27b70a8546d22ffc,0x2e1b21385c26c926
+	.quad	0x27b70a8546d22ffc,0x2e1b21385c26c926
+	.quad	0x4d2c6dfc5ac42aed,0x53380d139d95b3df
+	.quad	0x4d2c6dfc5ac42aed,0x53380d139d95b3df
+	.quad	0x650a73548baf63de,0x766a0abb3c77b2a8
+	.quad	0x650a73548baf63de,0x766a0abb3c77b2a8
+	.quad	0x81c2c92e47edaee6,0x92722c851482353b
+	.quad	0x81c2c92e47edaee6,0x92722c851482353b
+	.quad	0xa2bfe8a14cf10364,0xa81a664bbc423001
+	.quad	0xa2bfe8a14cf10364,0xa81a664bbc423001
+	.quad	0xc24b8b70d0f89791,0xc76c51a30654be30
+	.quad	0xc24b8b70d0f89791,0xc76c51a30654be30
+	.quad	0xd192e819d6ef5218,0xd69906245565a910
+	.quad	0xd192e819d6ef5218,0xd69906245565a910
+	.quad	0xf40e35855771202a,0x106aa07032bbd1b8
+	.quad	0xf40e35855771202a,0x106aa07032bbd1b8
+	.quad	0x19a4c116b8d2d0c8,0x1e376c085141ab53
+	.quad	0x19a4c116b8d2d0c8,0x1e376c085141ab53
+	.quad	0x2748774cdf8eeb99,0x34b0bcb5e19b48a8
+	.quad	0x2748774cdf8eeb99,0x34b0bcb5e19b48a8
+	.quad	0x391c0cb3c5c95a63,0x4ed8aa4ae3418acb
+	.quad	0x391c0cb3c5c95a63,0x4ed8aa4ae3418acb
+	.quad	0x5b9cca4f7763e373,0x682e6ff3d6b2b8a3
+	.quad	0x5b9cca4f7763e373,0x682e6ff3d6b2b8a3
+	.quad	0x748f82ee5defb2fc,0x78a5636f43172f60
+	.quad	0x748f82ee5defb2fc,0x78a5636f43172f60
+	.quad	0x84c87814a1f0ab72,0x8cc702081a6439ec
+	.quad	0x84c87814a1f0ab72,0x8cc702081a6439ec
+	.quad	0x90befffa23631e28,0xa4506cebde82bde9
+	.quad	0x90befffa23631e28,0xa4506cebde82bde9
+	.quad	0xbef9a3f7b2c67915,0xc67178f2e372532b
+	.quad	0xbef9a3f7b2c67915,0xc67178f2e372532b
+	.quad	0xca273eceea26619c,0xd186b8c721c0c207
+	.quad	0xca273eceea26619c,0xd186b8c721c0c207
+	.quad	0xeada7dd6cde0eb1e,0xf57d4f7fee6ed178
+	.quad	0xeada7dd6cde0eb1e,0xf57d4f7fee6ed178
+	.quad	0x06f067aa72176fba,0x0a637dc5a2c898a6
+	.quad	0x06f067aa72176fba,0x0a637dc5a2c898a6
+	.quad	0x113f9804bef90dae,0x1b710b35131c471b
+	.quad	0x113f9804bef90dae,0x1b710b35131c471b
+	.quad	0x28db77f523047d84,0x32caab7b40c72493
+	.quad	0x28db77f523047d84,0x32caab7b40c72493
+	.quad	0x3c9ebe0a15c9bebc,0x431d67c49c100d4c
+	.quad	0x3c9ebe0a15c9bebc,0x431d67c49c100d4c
+	.quad	0x4cc5d4becb3e42b6,0x597f299cfc657e2a
+	.quad	0x4cc5d4becb3e42b6,0x597f299cfc657e2a
+	.quad	0x5fcb6fab3ad6faec,0x6c44198c4a475817
+	.quad	0x5fcb6fab3ad6faec,0x6c44198c4a475817
+
+	.quad	0x0001020304050607,0x08090a0b0c0d0e0f
+	.quad	0x0001020304050607,0x08090a0b0c0d0e0f
+	.asciz	"SHA512 block transform for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+___
+}
+
+######################################################################
+# SIMD code paths
+#
+if ($SZ==4 && $shaext) {{{
+######################################################################
+# Intel SHA Extensions implementation of SHA256 update function.
+#
+my ($ctx,$inp,$num,$Tbl)=("%rdi","%rsi","%rdx","%rcx");
+
+my ($Wi,$ABEF,$CDGH,$TMP,$BSWAP,$ABEF_SAVE,$CDGH_SAVE)=map("%xmm$_",(0..2,7..10));
+my @MSG=map("%xmm$_",(3..6));
+
+$code.=<<___;
+.type	sha256_block_data_order_shaext,\@function,3
+.align	64
+sha256_block_data_order_shaext:
+_shaext_shortcut:
+___
+$code.=<<___ if ($win64);
+	lea	`-8-5*16`(%rsp),%rsp
+	movaps	%xmm6,-8-5*16(%rax)
+	movaps	%xmm7,-8-4*16(%rax)
+	movaps	%xmm8,-8-3*16(%rax)
+	movaps	%xmm9,-8-2*16(%rax)
+	movaps	%xmm10,-8-1*16(%rax)
+.Lprologue_shaext:
+___
+$code.=<<___;
+	lea		K256+0x80(%rip),$Tbl
+	movdqu		($ctx),$ABEF		# DCBA
+	movdqu		16($ctx),$CDGH		# HGFE
+	movdqa		0x200-0x80($Tbl),$TMP	# byte swap mask
+
+	pshufd		\$0x1b,$ABEF,$Wi	# ABCD
+	pshufd		\$0xb1,$ABEF,$ABEF	# CDAB
+	pshufd		\$0x1b,$CDGH,$CDGH	# EFGH
+	movdqa		$TMP,$BSWAP		# offload
+	palignr		\$8,$CDGH,$ABEF		# ABEF
+	punpcklqdq	$Wi,$CDGH		# CDGH
+	jmp		.Loop_shaext
+
+.align	16
+.Loop_shaext:
+	movdqu		($inp),@MSG[0]
+	movdqu		0x10($inp),@MSG[1]
+	movdqu		0x20($inp),@MSG[2]
+	pshufb		$TMP,@MSG[0]
+	movdqu		0x30($inp),@MSG[3]
+
+	movdqa		0*32-0x80($Tbl),$Wi
+	paddd		@MSG[0],$Wi
+	pshufb		$TMP,@MSG[1]
+	movdqa		$CDGH,$CDGH_SAVE	# offload
+	sha256rnds2	$ABEF,$CDGH		# 0-3
+	pshufd		\$0x0e,$Wi,$Wi
+	nop
+	movdqa		$ABEF,$ABEF_SAVE	# offload
+	sha256rnds2	$CDGH,$ABEF
+
+	movdqa		1*32-0x80($Tbl),$Wi
+	paddd		@MSG[1],$Wi
+	pshufb		$TMP,@MSG[2]
+	sha256rnds2	$ABEF,$CDGH		# 4-7
+	pshufd		\$0x0e,$Wi,$Wi
+	lea		0x40($inp),$inp
+	sha256msg1	@MSG[1],@MSG[0]
+	sha256rnds2	$CDGH,$ABEF
+
+	movdqa		2*32-0x80($Tbl),$Wi
+	paddd		@MSG[2],$Wi
+	pshufb		$TMP,@MSG[3]
+	sha256rnds2	$ABEF,$CDGH		# 8-11
+	pshufd		\$0x0e,$Wi,$Wi
+	movdqa		@MSG[3],$TMP
+	palignr		\$4,@MSG[2],$TMP
+	nop
+	paddd		$TMP,@MSG[0]
+	sha256msg1	@MSG[2],@MSG[1]
+	sha256rnds2	$CDGH,$ABEF
+
+	movdqa		3*32-0x80($Tbl),$Wi
+	paddd		@MSG[3],$Wi
+	sha256msg2	@MSG[3],@MSG[0]
+	sha256rnds2	$ABEF,$CDGH		# 12-15
+	pshufd		\$0x0e,$Wi,$Wi
+	movdqa		@MSG[0],$TMP
+	palignr		\$4,@MSG[3],$TMP
+	nop
+	paddd		$TMP,@MSG[1]
+	sha256msg1	@MSG[3],@MSG[2]
+	sha256rnds2	$CDGH,$ABEF
+___
+for($i=4;$i<16-3;$i++) {
+$code.=<<___;
+	movdqa		$i*32-0x80($Tbl),$Wi
+	paddd		@MSG[0],$Wi
+	sha256msg2	@MSG[0],@MSG[1]
+	sha256rnds2	$ABEF,$CDGH		# 16-19...
+	pshufd		\$0x0e,$Wi,$Wi
+	movdqa		@MSG[1],$TMP
+	palignr		\$4,@MSG[0],$TMP
+	nop
+	paddd		$TMP,@MSG[2]
+	sha256msg1	@MSG[0],@MSG[3]
+	sha256rnds2	$CDGH,$ABEF
+___
+	push(@MSG,shift(@MSG));
+}
+$code.=<<___;
+	movdqa		13*32-0x80($Tbl),$Wi
+	paddd		@MSG[0],$Wi
+	sha256msg2	@MSG[0],@MSG[1]
+	sha256rnds2	$ABEF,$CDGH		# 52-55
+	pshufd		\$0x0e,$Wi,$Wi
+	movdqa		@MSG[1],$TMP
+	palignr		\$4,@MSG[0],$TMP
+	sha256rnds2	$CDGH,$ABEF
+	paddd		$TMP,@MSG[2]
+
+	movdqa		14*32-0x80($Tbl),$Wi
+	paddd		@MSG[1],$Wi
+	sha256rnds2	$ABEF,$CDGH		# 56-59
+	pshufd		\$0x0e,$Wi,$Wi
+	sha256msg2	@MSG[1],@MSG[2]
+	movdqa		$BSWAP,$TMP
+	sha256rnds2	$CDGH,$ABEF
+
+	movdqa		15*32-0x80($Tbl),$Wi
+	paddd		@MSG[2],$Wi
+	nop
+	sha256rnds2	$ABEF,$CDGH		# 60-63
+	pshufd		\$0x0e,$Wi,$Wi
+	dec		$num
+	nop
+	sha256rnds2	$CDGH,$ABEF
+
+	paddd		$CDGH_SAVE,$CDGH
+	paddd		$ABEF_SAVE,$ABEF
+	jnz		.Loop_shaext
+
+	pshufd		\$0xb1,$CDGH,$CDGH	# DCHG
+	pshufd		\$0x1b,$ABEF,$TMP	# FEBA
+	pshufd		\$0xb1,$ABEF,$ABEF	# BAFE
+	punpckhqdq	$CDGH,$ABEF		# DCBA
+	palignr		\$8,$TMP,$CDGH		# HGFE
+
+	movdqu	$ABEF,($ctx)
+	movdqu	$CDGH,16($ctx)
+___
+$code.=<<___ if ($win64);
+	movaps	-8-5*16(%rax),%xmm6
+	movaps	-8-4*16(%rax),%xmm7
+	movaps	-8-3*16(%rax),%xmm8
+	movaps	-8-2*16(%rax),%xmm9
+	movaps	-8-1*16(%rax),%xmm10
+	mov	%rax,%rsp
+.Lepilogue_shaext:
+___
+$code.=<<___;
+	ret
+.size	sha256_block_data_order_shaext,.-sha256_block_data_order_shaext
+___
+}}}
+{{{
+
+my $a4=$T1;
+my ($a,$b,$c,$d,$e,$f,$g,$h);
+
+sub AUTOLOAD()		# thunk [simplified] 32-bit style perlasm
+{ my $opcode = $AUTOLOAD; $opcode =~ s/.*:://;
+  my $arg = pop;
+    $arg = "\$$arg" if ($arg*1 eq $arg);
+    $code .= "\t$opcode\t".join(',',$arg,reverse @_)."\n";
+}
+
+sub body_00_15 () {
+	(
+	'($a,$b,$c,$d,$e,$f,$g,$h)=@ROT;'.
+
+	'&ror	($a0,$Sigma1[2]-$Sigma1[1])',
+	'&mov	($a,$a1)',
+	'&mov	($a4,$f)',
+
+	'&ror	($a1,$Sigma0[2]-$Sigma0[1])',
+	'&xor	($a0,$e)',
+	'&xor	($a4,$g)',			# f^g
+
+	'&ror	($a0,$Sigma1[1]-$Sigma1[0])',
+	'&xor	($a1,$a)',
+	'&and	($a4,$e)',			# (f^g)&e
+
+	'&xor	($a0,$e)',
+	'&add	($h,$SZ*($i&15)."(%rsp)")',	# h+=X[i]+K[i]
+	'&mov	($a2,$a)',
+
+	'&xor	($a4,$g)',			# Ch(e,f,g)=((f^g)&e)^g
+	'&ror	($a1,$Sigma0[1]-$Sigma0[0])',
+	'&xor	($a2,$b)',			# a^b, b^c in next round
+
+	'&add	($h,$a4)',			# h+=Ch(e,f,g)
+	'&ror	($a0,$Sigma1[0])',		# Sigma1(e)
+	'&and	($a3,$a2)',			# (b^c)&(a^b)
+
+	'&xor	($a1,$a)',
+	'&add	($h,$a0)',			# h+=Sigma1(e)
+	'&xor	($a3,$b)',			# Maj(a,b,c)=Ch(a^b,c,b)
+
+	'&ror	($a1,$Sigma0[0])',		# Sigma0(a)
+	'&add	($d,$h)',			# d+=h
+	'&add	($h,$a3)',			# h+=Maj(a,b,c)
+
+	'&mov	($a0,$d)',
+	'&add	($a1,$h);'.			# h+=Sigma0(a)
+	'($a2,$a3) = ($a3,$a2); unshift(@ROT,pop(@ROT)); $i++;'
+	);
+}
+
+######################################################################
+# SSSE3 code path
+#
+if ($SZ==4) {	# SHA256 only
+my @X = map("%xmm$_",(0..3));
+my ($t0,$t1,$t2,$t3, $t4,$t5) = map("%xmm$_",(4..9));
+
+$code.=<<___;
+.type	${func}_ssse3,\@function,3
+.align	64
+${func}_ssse3:
+.cfi_startproc
+.Lssse3_shortcut:
+	mov	%rsp,%rax		# copy %rsp
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	shl	\$4,%rdx		# num*16
+	sub	\$`$framesz+$win64*16*4`,%rsp
+	lea	($inp,%rdx,$SZ),%rdx	# inp+num*16*$SZ
+	and	\$-64,%rsp		# align stack frame
+	mov	$ctx,$_ctx		# save ctx, 1st arg
+	mov	$inp,$_inp		# save inp, 2nd arh
+	mov	%rdx,$_end		# save end pointer, "3rd" arg
+	mov	%rax,$_rsp		# save copy of %rsp
+.cfi_cfa_expression	$_rsp,deref,+8
+___
+$code.=<<___ if ($win64);
+	movaps	%xmm6,16*$SZ+32(%rsp)
+	movaps	%xmm7,16*$SZ+48(%rsp)
+	movaps	%xmm8,16*$SZ+64(%rsp)
+	movaps	%xmm9,16*$SZ+80(%rsp)
+___
+$code.=<<___;
+.Lprologue_ssse3:
+
+	mov	$SZ*0($ctx),$A
+	mov	$SZ*1($ctx),$B
+	mov	$SZ*2($ctx),$C
+	mov	$SZ*3($ctx),$D
+	mov	$SZ*4($ctx),$E
+	mov	$SZ*5($ctx),$F
+	mov	$SZ*6($ctx),$G
+	mov	$SZ*7($ctx),$H
+___
+
+$code.=<<___;
+	#movdqa	$TABLE+`$SZ*2*$rounds`+32(%rip),$t4
+	#movdqa	$TABLE+`$SZ*2*$rounds`+64(%rip),$t5
+	jmp	.Lloop_ssse3
+.align	16
+.Lloop_ssse3:
+	movdqa	$TABLE+`$SZ*2*$rounds`(%rip),$t3
+	movdqu	0x00($inp),@X[0]
+	movdqu	0x10($inp),@X[1]
+	movdqu	0x20($inp),@X[2]
+	pshufb	$t3,@X[0]
+	movdqu	0x30($inp),@X[3]
+	lea	$TABLE(%rip),$Tbl
+	pshufb	$t3,@X[1]
+	movdqa	0x00($Tbl),$t0
+	movdqa	0x20($Tbl),$t1
+	pshufb	$t3,@X[2]
+	paddd	@X[0],$t0
+	movdqa	0x40($Tbl),$t2
+	pshufb	$t3,@X[3]
+	movdqa	0x60($Tbl),$t3
+	paddd	@X[1],$t1
+	paddd	@X[2],$t2
+	paddd	@X[3],$t3
+	movdqa	$t0,0x00(%rsp)
+	mov	$A,$a1
+	movdqa	$t1,0x10(%rsp)
+	mov	$B,$a3
+	movdqa	$t2,0x20(%rsp)
+	xor	$C,$a3			# magic
+	movdqa	$t3,0x30(%rsp)
+	mov	$E,$a0
+	jmp	.Lssse3_00_47
+
+.align	16
+.Lssse3_00_47:
+	sub	\$`-16*2*$SZ`,$Tbl	# size optimization
+___
+sub Xupdate_256_SSSE3 () {
+	(
+	'&movdqa	($t0,@X[1]);',
+	'&movdqa	($t3,@X[3])',
+	'&palignr	($t0,@X[0],$SZ)',	# X[1..4]
+	 '&palignr	($t3,@X[2],$SZ);',	# X[9..12]
+	'&movdqa	($t1,$t0)',
+	'&movdqa	($t2,$t0);',
+	'&psrld		($t0,$sigma0[2])',
+	 '&paddd	(@X[0],$t3);',		# X[0..3] += X[9..12]
+	'&psrld		($t2,$sigma0[0])',
+	 '&pshufd	($t3,@X[3],0b11111010)',# X[14..15]
+	'&pslld		($t1,8*$SZ-$sigma0[1]);'.
+	'&pxor		($t0,$t2)',
+	'&psrld		($t2,$sigma0[1]-$sigma0[0]);'.
+	'&pxor		($t0,$t1)',
+	'&pslld		($t1,$sigma0[1]-$sigma0[0]);'.
+	'&pxor		($t0,$t2);',
+	 '&movdqa	($t2,$t3)',
+	'&pxor		($t0,$t1);',		# sigma0(X[1..4])
+	 '&psrld	($t3,$sigma1[2])',
+	'&paddd		(@X[0],$t0);',		# X[0..3] += sigma0(X[1..4])
+	 '&psrlq	($t2,$sigma1[0])',
+	 '&pxor		($t3,$t2);',
+	 '&psrlq	($t2,$sigma1[1]-$sigma1[0])',
+	 '&pxor		($t3,$t2)',
+	 '&pshufb	($t3,$t4)',		# sigma1(X[14..15])
+	'&paddd		(@X[0],$t3)',		# X[0..1] += sigma1(X[14..15])
+	 '&pshufd	($t3,@X[0],0b01010000)',# X[16..17]
+	 '&movdqa	($t2,$t3);',
+	 '&psrld	($t3,$sigma1[2])',
+	 '&psrlq	($t2,$sigma1[0])',
+	 '&pxor		($t3,$t2);',
+	 '&psrlq	($t2,$sigma1[1]-$sigma1[0])',
+	 '&pxor		($t3,$t2);',
+	'&movdqa	($t2,16*2*$j."($Tbl)")',
+	 '&pshufb	($t3,$t5)',
+	'&paddd		(@X[0],$t3)'		# X[2..3] += sigma1(X[16..17])
+	);
+}
+
+sub SSSE3_256_00_47 () {
+my $j = shift;
+my $body = shift;
+my @X = @_;
+my @insns = (&$body,&$body,&$body,&$body);	# 104 instructions
+
+    if (0) {
+	foreach (Xupdate_256_SSSE3()) {		# 36 instructions
+	    eval;
+	    eval(shift(@insns));
+	    eval(shift(@insns));
+	    eval(shift(@insns));
+	}
+    } else {			# squeeze extra 4% on Westmere and 19% on Atom
+	  eval(shift(@insns));	#@
+	&movdqa		($t0,@X[1]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&movdqa		($t3,@X[3]);
+	  eval(shift(@insns));	#@
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));	#@
+	  eval(shift(@insns));
+	&palignr	($t0,@X[0],$SZ);	# X[1..4]
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &palignr	($t3,@X[2],$SZ);	# X[9..12]
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));	#@
+	&movdqa		($t1,$t0);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&movdqa		($t2,$t0);
+	  eval(shift(@insns));	#@
+	  eval(shift(@insns));
+	&psrld		($t0,$sigma0[2]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &paddd		(@X[0],$t3);		# X[0..3] += X[9..12]
+	  eval(shift(@insns));	#@
+	  eval(shift(@insns));
+	&psrld		($t2,$sigma0[0]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &pshufd	($t3,@X[3],0b11111010);	# X[4..15]
+	  eval(shift(@insns));
+	  eval(shift(@insns));	#@
+	&pslld		($t1,8*$SZ-$sigma0[1]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&pxor		($t0,$t2);
+	  eval(shift(@insns));	#@
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));	#@
+	&psrld		($t2,$sigma0[1]-$sigma0[0]);
+	  eval(shift(@insns));
+	&pxor		($t0,$t1);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&pslld		($t1,$sigma0[1]-$sigma0[0]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&pxor		($t0,$t2);
+	  eval(shift(@insns));
+	  eval(shift(@insns));	#@
+	 &movdqa	($t2,$t3);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&pxor		($t0,$t1);		# sigma0(X[1..4])
+	  eval(shift(@insns));	#@
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &psrld		($t3,$sigma1[2]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&paddd		(@X[0],$t0);		# X[0..3] += sigma0(X[1..4])
+	  eval(shift(@insns));	#@
+	  eval(shift(@insns));
+	 &psrlq		($t2,$sigma1[0]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &pxor		($t3,$t2);
+	  eval(shift(@insns));	#@
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));	#@
+	 &psrlq		($t2,$sigma1[1]-$sigma1[0]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &pxor		($t3,$t2);
+	  eval(shift(@insns));	#@
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 #&pshufb	($t3,$t4);		# sigma1(X[14..15])
+	 &pshufd	($t3,$t3,0b10000000);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &psrldq	($t3,8);
+	  eval(shift(@insns));
+	  eval(shift(@insns));	#@
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));	#@
+	&paddd		(@X[0],$t3);		# X[0..1] += sigma1(X[14..15])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &pshufd	($t3,@X[0],0b01010000);	# X[16..17]
+	  eval(shift(@insns));
+	  eval(shift(@insns));	#@
+	  eval(shift(@insns));
+	 &movdqa	($t2,$t3);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &psrld		($t3,$sigma1[2]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));	#@
+	 &psrlq		($t2,$sigma1[0]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &pxor		($t3,$t2);
+	  eval(shift(@insns));	#@
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));	#@
+	  eval(shift(@insns));
+	 &psrlq		($t2,$sigma1[1]-$sigma1[0]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &pxor		($t3,$t2);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));	#@
+	 #&pshufb	($t3,$t5);
+	 &pshufd	($t3,$t3,0b00001000);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&movdqa		($t2,16*2*$j."($Tbl)");
+	  eval(shift(@insns));	#@
+	  eval(shift(@insns));
+	 &pslldq	($t3,8);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&paddd		(@X[0],$t3);		# X[2..3] += sigma1(X[16..17])
+	  eval(shift(@insns));	#@
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+    }
+	&paddd		($t2,@X[0]);
+	  foreach (@insns) { eval; }		# remaining instructions
+	&movdqa		(16*$j."(%rsp)",$t2);
+}
+
+    for ($i=0,$j=0; $j<4; $j++) {
+	&SSSE3_256_00_47($j,\&body_00_15,@X);
+	push(@X,shift(@X));			# rotate(@X)
+    }
+	&cmpb	($SZ-1+16*2*$SZ."($Tbl)",0);
+	&jne	(".Lssse3_00_47");
+
+    for ($i=0; $i<16; ) {
+	foreach(body_00_15()) { eval; }
+    }
+$code.=<<___;
+	mov	$_ctx,$ctx
+	mov	$a1,$A
+
+	add	$SZ*0($ctx),$A
+	lea	16*$SZ($inp),$inp
+	add	$SZ*1($ctx),$B
+	add	$SZ*2($ctx),$C
+	add	$SZ*3($ctx),$D
+	add	$SZ*4($ctx),$E
+	add	$SZ*5($ctx),$F
+	add	$SZ*6($ctx),$G
+	add	$SZ*7($ctx),$H
+
+	cmp	$_end,$inp
+
+	mov	$A,$SZ*0($ctx)
+	mov	$B,$SZ*1($ctx)
+	mov	$C,$SZ*2($ctx)
+	mov	$D,$SZ*3($ctx)
+	mov	$E,$SZ*4($ctx)
+	mov	$F,$SZ*5($ctx)
+	mov	$G,$SZ*6($ctx)
+	mov	$H,$SZ*7($ctx)
+	jb	.Lloop_ssse3
+
+	mov	$_rsp,%rsi
+.cfi_def_cfa	%rsi,8
+___
+$code.=<<___ if ($win64);
+	movaps	16*$SZ+32(%rsp),%xmm6
+	movaps	16*$SZ+48(%rsp),%xmm7
+	movaps	16*$SZ+64(%rsp),%xmm8
+	movaps	16*$SZ+80(%rsp),%xmm9
+___
+$code.=<<___;
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue_ssse3:
+	ret
+.cfi_endproc
+.size	${func}_ssse3,.-${func}_ssse3
+___
+}
+
+if ($avx) {{
+######################################################################
+# XOP code path
+#
+if ($SZ==8) {	# SHA512 only
+$code.=<<___;
+.type	${func}_xop,\@function,3
+.align	64
+${func}_xop:
+.cfi_startproc
+.Lxop_shortcut:
+	mov	%rsp,%rax		# copy %rsp
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	shl	\$4,%rdx		# num*16
+	sub	\$`$framesz+$win64*16*($SZ==4?4:6)`,%rsp
+	lea	($inp,%rdx,$SZ),%rdx	# inp+num*16*$SZ
+	and	\$-64,%rsp		# align stack frame
+	mov	$ctx,$_ctx		# save ctx, 1st arg
+	mov	$inp,$_inp		# save inp, 2nd arh
+	mov	%rdx,$_end		# save end pointer, "3rd" arg
+	mov	%rax,$_rsp		# save copy of %rsp
+.cfi_cfa_expression	$_rsp,deref,+8
+___
+$code.=<<___ if ($win64);
+	movaps	%xmm6,16*$SZ+32(%rsp)
+	movaps	%xmm7,16*$SZ+48(%rsp)
+	movaps	%xmm8,16*$SZ+64(%rsp)
+	movaps	%xmm9,16*$SZ+80(%rsp)
+___
+$code.=<<___ if ($win64 && $SZ>4);
+	movaps	%xmm10,16*$SZ+96(%rsp)
+	movaps	%xmm11,16*$SZ+112(%rsp)
+___
+$code.=<<___;
+.Lprologue_xop:
+
+	vzeroupper
+	mov	$SZ*0($ctx),$A
+	mov	$SZ*1($ctx),$B
+	mov	$SZ*2($ctx),$C
+	mov	$SZ*3($ctx),$D
+	mov	$SZ*4($ctx),$E
+	mov	$SZ*5($ctx),$F
+	mov	$SZ*6($ctx),$G
+	mov	$SZ*7($ctx),$H
+	jmp	.Lloop_xop
+___
+					if ($SZ==4) {	# SHA256
+    my @X = map("%xmm$_",(0..3));
+    my ($t0,$t1,$t2,$t3) = map("%xmm$_",(4..7));
+
+$code.=<<___;
+.align	16
+.Lloop_xop:
+	vmovdqa	$TABLE+`$SZ*2*$rounds`(%rip),$t3
+	vmovdqu	0x00($inp),@X[0]
+	vmovdqu	0x10($inp),@X[1]
+	vmovdqu	0x20($inp),@X[2]
+	vmovdqu	0x30($inp),@X[3]
+	vpshufb	$t3,@X[0],@X[0]
+	lea	$TABLE(%rip),$Tbl
+	vpshufb	$t3,@X[1],@X[1]
+	vpshufb	$t3,@X[2],@X[2]
+	vpaddd	0x00($Tbl),@X[0],$t0
+	vpshufb	$t3,@X[3],@X[3]
+	vpaddd	0x20($Tbl),@X[1],$t1
+	vpaddd	0x40($Tbl),@X[2],$t2
+	vpaddd	0x60($Tbl),@X[3],$t3
+	vmovdqa	$t0,0x00(%rsp)
+	mov	$A,$a1
+	vmovdqa	$t1,0x10(%rsp)
+	mov	$B,$a3
+	vmovdqa	$t2,0x20(%rsp)
+	xor	$C,$a3			# magic
+	vmovdqa	$t3,0x30(%rsp)
+	mov	$E,$a0
+	jmp	.Lxop_00_47
+
+.align	16
+.Lxop_00_47:
+	sub	\$`-16*2*$SZ`,$Tbl	# size optimization
+___
+sub XOP_256_00_47 () {
+my $j = shift;
+my $body = shift;
+my @X = @_;
+my @insns = (&$body,&$body,&$body,&$body);	# 104 instructions
+
+	&vpalignr	($t0,@X[1],@X[0],$SZ);	# X[1..4]
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpalignr	($t3,@X[3],@X[2],$SZ);	# X[9..12]
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vprotd		($t1,$t0,8*$SZ-$sigma0[1]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpsrld		($t0,$t0,$sigma0[2]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpaddd	(@X[0],@X[0],$t3);	# X[0..3] += X[9..12]
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vprotd		($t2,$t1,$sigma0[1]-$sigma0[0]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpxor		($t0,$t0,$t1);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vprotd	($t3,@X[3],8*$SZ-$sigma1[1]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpxor		($t0,$t0,$t2);		# sigma0(X[1..4])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpsrld	($t2,@X[3],$sigma1[2]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpaddd		(@X[0],@X[0],$t0);	# X[0..3] += sigma0(X[1..4])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vprotd	($t1,$t3,$sigma1[1]-$sigma1[0]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpxor		($t3,$t3,$t2);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpxor		($t3,$t3,$t1);		# sigma1(X[14..15])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpsrldq	($t3,$t3,8);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpaddd		(@X[0],@X[0],$t3);	# X[0..1] += sigma1(X[14..15])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vprotd	($t3,@X[0],8*$SZ-$sigma1[1]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpsrld	($t2,@X[0],$sigma1[2]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vprotd	($t1,$t3,$sigma1[1]-$sigma1[0]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpxor		($t3,$t3,$t2);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpxor		($t3,$t3,$t1);		# sigma1(X[16..17])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpslldq	($t3,$t3,8);		# 22 instructions
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpaddd		(@X[0],@X[0],$t3);	# X[2..3] += sigma1(X[16..17])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpaddd		($t2,@X[0],16*2*$j."($Tbl)");
+	  foreach (@insns) { eval; }		# remaining instructions
+	&vmovdqa	(16*$j."(%rsp)",$t2);
+}
+
+    for ($i=0,$j=0; $j<4; $j++) {
+	&XOP_256_00_47($j,\&body_00_15,@X);
+	push(@X,shift(@X));			# rotate(@X)
+    }
+	&cmpb	($SZ-1+16*2*$SZ."($Tbl)",0);
+	&jne	(".Lxop_00_47");
+
+    for ($i=0; $i<16; ) {
+	foreach(body_00_15()) { eval; }
+    }
+
+					} else {	# SHA512
+    my @X = map("%xmm$_",(0..7));
+    my ($t0,$t1,$t2,$t3) = map("%xmm$_",(8..11));
+
+$code.=<<___;
+.align	16
+.Lloop_xop:
+	vmovdqa	$TABLE+`$SZ*2*$rounds`(%rip),$t3
+	vmovdqu	0x00($inp),@X[0]
+	lea	$TABLE+0x80(%rip),$Tbl	# size optimization
+	vmovdqu	0x10($inp),@X[1]
+	vmovdqu	0x20($inp),@X[2]
+	vpshufb	$t3,@X[0],@X[0]
+	vmovdqu	0x30($inp),@X[3]
+	vpshufb	$t3,@X[1],@X[1]
+	vmovdqu	0x40($inp),@X[4]
+	vpshufb	$t3,@X[2],@X[2]
+	vmovdqu	0x50($inp),@X[5]
+	vpshufb	$t3,@X[3],@X[3]
+	vmovdqu	0x60($inp),@X[6]
+	vpshufb	$t3,@X[4],@X[4]
+	vmovdqu	0x70($inp),@X[7]
+	vpshufb	$t3,@X[5],@X[5]
+	vpaddq	-0x80($Tbl),@X[0],$t0
+	vpshufb	$t3,@X[6],@X[6]
+	vpaddq	-0x60($Tbl),@X[1],$t1
+	vpshufb	$t3,@X[7],@X[7]
+	vpaddq	-0x40($Tbl),@X[2],$t2
+	vpaddq	-0x20($Tbl),@X[3],$t3
+	vmovdqa	$t0,0x00(%rsp)
+	vpaddq	0x00($Tbl),@X[4],$t0
+	vmovdqa	$t1,0x10(%rsp)
+	vpaddq	0x20($Tbl),@X[5],$t1
+	vmovdqa	$t2,0x20(%rsp)
+	vpaddq	0x40($Tbl),@X[6],$t2
+	vmovdqa	$t3,0x30(%rsp)
+	vpaddq	0x60($Tbl),@X[7],$t3
+	vmovdqa	$t0,0x40(%rsp)
+	mov	$A,$a1
+	vmovdqa	$t1,0x50(%rsp)
+	mov	$B,$a3
+	vmovdqa	$t2,0x60(%rsp)
+	xor	$C,$a3			# magic
+	vmovdqa	$t3,0x70(%rsp)
+	mov	$E,$a0
+	jmp	.Lxop_00_47
+
+.align	16
+.Lxop_00_47:
+	add	\$`16*2*$SZ`,$Tbl
+___
+sub XOP_512_00_47 () {
+my $j = shift;
+my $body = shift;
+my @X = @_;
+my @insns = (&$body,&$body);			# 52 instructions
+
+	&vpalignr	($t0,@X[1],@X[0],$SZ);	# X[1..2]
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpalignr	($t3,@X[5],@X[4],$SZ);	# X[9..10]
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vprotq		($t1,$t0,8*$SZ-$sigma0[1]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpsrlq		($t0,$t0,$sigma0[2]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpaddq	(@X[0],@X[0],$t3);	# X[0..1] += X[9..10]
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vprotq		($t2,$t1,$sigma0[1]-$sigma0[0]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpxor		($t0,$t0,$t1);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vprotq	($t3,@X[7],8*$SZ-$sigma1[1]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpxor		($t0,$t0,$t2);		# sigma0(X[1..2])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpsrlq	($t2,@X[7],$sigma1[2]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpaddq		(@X[0],@X[0],$t0);	# X[0..1] += sigma0(X[1..2])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vprotq	($t1,$t3,$sigma1[1]-$sigma1[0]);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpxor		($t3,$t3,$t2);
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	 &vpxor		($t3,$t3,$t1);		# sigma1(X[14..15])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpaddq		(@X[0],@X[0],$t3);	# X[0..1] += sigma1(X[14..15])
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	  eval(shift(@insns));
+	&vpaddq		($t2,@X[0],16*2*$j-0x80."($Tbl)");
+	  foreach (@insns) { eval; }		# remaining instructions
+	&vmovdqa	(16*$j."(%rsp)",$t2);
+}
+
+    for ($i=0,$j=0; $j<8; $j++) {
+	&XOP_512_00_47($j,\&body_00_15,@X);
+	push(@X,shift(@X));			# rotate(@X)
+    }
+	&cmpb	($SZ-1+16*2*$SZ-0x80."($Tbl)",0);
+	&jne	(".Lxop_00_47");
+
+    for ($i=0; $i<16; ) {
+	foreach(body_00_15()) { eval; }
+    }
+}
+$code.=<<___;
+	mov	$_ctx,$ctx
+	mov	$a1,$A
+
+	add	$SZ*0($ctx),$A
+	lea	16*$SZ($inp),$inp
+	add	$SZ*1($ctx),$B
+	add	$SZ*2($ctx),$C
+	add	$SZ*3($ctx),$D
+	add	$SZ*4($ctx),$E
+	add	$SZ*5($ctx),$F
+	add	$SZ*6($ctx),$G
+	add	$SZ*7($ctx),$H
+
+	cmp	$_end,$inp
+
+	mov	$A,$SZ*0($ctx)
+	mov	$B,$SZ*1($ctx)
+	mov	$C,$SZ*2($ctx)
+	mov	$D,$SZ*3($ctx)
+	mov	$E,$SZ*4($ctx)
+	mov	$F,$SZ*5($ctx)
+	mov	$G,$SZ*6($ctx)
+	mov	$H,$SZ*7($ctx)
+	jb	.Lloop_xop
+
+	mov	$_rsp,%rsi
+.cfi_def_cfa	%rsi,8
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	movaps	16*$SZ+32(%rsp),%xmm6
+	movaps	16*$SZ+48(%rsp),%xmm7
+	movaps	16*$SZ+64(%rsp),%xmm8
+	movaps	16*$SZ+80(%rsp),%xmm9
+___
+$code.=<<___ if ($win64 && $SZ>4);
+	movaps	16*$SZ+96(%rsp),%xmm10
+	movaps	16*$SZ+112(%rsp),%xmm11
+___
+$code.=<<___;
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue_xop:
+	ret
+.cfi_endproc
+.size	${func}_xop,.-${func}_xop
+___
+}
+######################################################################
+# AVX+shrd code path
+#
+local *ror = sub { &shrd(@_[0],@_) };
+
+$code.=<<___;
+.type	${func}_avx,\@function,3
+.align	64
+${func}_avx:
+.cfi_startproc
+.Lavx_shortcut:
+	mov	%rsp,%rax		# copy %rsp
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	shl	\$4,%rdx		# num*16
+	sub	\$`$framesz+$win64*16*($SZ==4?4:6)`,%rsp
+	lea	($inp,%rdx,$SZ),%rdx	# inp+num*16*$SZ
+	and	\$-64,%rsp		# align stack frame
+	mov	$ctx,$_ctx		# save ctx, 1st arg
+	mov	$inp,$_inp		# save inp, 2nd arh
+	mov	%rdx,$_end		# save end pointer, "3rd" arg
+	mov	%rax,$_rsp		# save copy of %rsp
+.cfi_cfa_expression	$_rsp,deref,+8
+___
+$code.=<<___ if ($win64);
+	movaps	%xmm6,16*$SZ+32(%rsp)
+	movaps	%xmm7,16*$SZ+48(%rsp)
+	movaps	%xmm8,16*$SZ+64(%rsp)
+	movaps	%xmm9,16*$SZ+80(%rsp)
+___
+$code.=<<___ if ($win64 && $SZ>4);
+	movaps	%xmm10,16*$SZ+96(%rsp)
+	movaps	%xmm11,16*$SZ+112(%rsp)
+___
+$code.=<<___;
+.Lprologue_avx:
+
+	vzeroupper
+	mov	$SZ*0($ctx),$A
+	mov	$SZ*1($ctx),$B
+	mov	$SZ*2($ctx),$C
+	mov	$SZ*3($ctx),$D
+	mov	$SZ*4($ctx),$E
+	mov	$SZ*5($ctx),$F
+	mov	$SZ*6($ctx),$G
+	mov	$SZ*7($ctx),$H
+___
+					if ($SZ==4) {	# SHA256
+    my @X = map("%xmm$_",(0..3));
+    my ($t0,$t1,$t2,$t3, $t4,$t5) = map("%xmm$_",(4..9));
+
+$code.=<<___;
+	vmovdqa	$TABLE+`$SZ*2*$rounds`+32(%rip),$t4
+	vmovdqa	$TABLE+`$SZ*2*$rounds`+64(%rip),$t5
+	jmp	.Lloop_avx
+.align	16
+.Lloop_avx:
+	vmovdqa	$TABLE+`$SZ*2*$rounds`(%rip),$t3
+	vmovdqu	0x00($inp),@X[0]
+	vmovdqu	0x10($inp),@X[1]
+	vmovdqu	0x20($inp),@X[2]
+	vmovdqu	0x30($inp),@X[3]
+	vpshufb	$t3,@X[0],@X[0]
+	lea	$TABLE(%rip),$Tbl
+	vpshufb	$t3,@X[1],@X[1]
+	vpshufb	$t3,@X[2],@X[2]
+	vpaddd	0x00($Tbl),@X[0],$t0
+	vpshufb	$t3,@X[3],@X[3]
+	vpaddd	0x20($Tbl),@X[1],$t1
+	vpaddd	0x40($Tbl),@X[2],$t2
+	vpaddd	0x60($Tbl),@X[3],$t3
+	vmovdqa	$t0,0x00(%rsp)
+	mov	$A,$a1
+	vmovdqa	$t1,0x10(%rsp)
+	mov	$B,$a3
+	vmovdqa	$t2,0x20(%rsp)
+	xor	$C,$a3			# magic
+	vmovdqa	$t3,0x30(%rsp)
+	mov	$E,$a0
+	jmp	.Lavx_00_47
+
+.align	16
+.Lavx_00_47:
+	sub	\$`-16*2*$SZ`,$Tbl	# size optimization
+___
+sub Xupdate_256_AVX () {
+	(
+	'&vpalignr	($t0,@X[1],@X[0],$SZ)',	# X[1..4]
+	 '&vpalignr	($t3,@X[3],@X[2],$SZ)',	# X[9..12]
+	'&vpsrld	($t2,$t0,$sigma0[0]);',
+	 '&vpaddd	(@X[0],@X[0],$t3)',	# X[0..3] += X[9..12]
+	'&vpsrld	($t3,$t0,$sigma0[2])',
+	'&vpslld	($t1,$t0,8*$SZ-$sigma0[1]);',
+	'&vpxor		($t0,$t3,$t2)',
+	 '&vpshufd	($t3,@X[3],0b11111010)',# X[14..15]
+	'&vpsrld	($t2,$t2,$sigma0[1]-$sigma0[0]);',
+	'&vpxor		($t0,$t0,$t1)',
+	'&vpslld	($t1,$t1,$sigma0[1]-$sigma0[0]);',
+	'&vpxor		($t0,$t0,$t2)',
+	 '&vpsrld	($t2,$t3,$sigma1[2]);',
+	'&vpxor		($t0,$t0,$t1)',		# sigma0(X[1..4])
+	 '&vpsrlq	($t3,$t3,$sigma1[0]);',
+	'&vpaddd	(@X[0],@X[0],$t0)',	# X[0..3] += sigma0(X[1..4])
+	 '&vpxor	($t2,$t2,$t3);',
+	 '&vpsrlq	($t3,$t3,$sigma1[1]-$sigma1[0])',
+	 '&vpxor	($t2,$t2,$t3)',
+	 '&vpshufb	($t2,$t2,$t4)',		# sigma1(X[14..15])
+	'&vpaddd	(@X[0],@X[0],$t2)',	# X[0..1] += sigma1(X[14..15])
+	 '&vpshufd	($t3,@X[0],0b01010000)',# X[16..17]
+	 '&vpsrld	($t2,$t3,$sigma1[2])',
+	 '&vpsrlq	($t3,$t3,$sigma1[0])',
+	 '&vpxor	($t2,$t2,$t3);',
+	 '&vpsrlq	($t3,$t3,$sigma1[1]-$sigma1[0])',
+	 '&vpxor	($t2,$t2,$t3)',
+	 '&vpshufb	($t2,$t2,$t5)',
+	'&vpaddd	(@X[0],@X[0],$t2)'	# X[2..3] += sigma1(X[16..17])
+	);
+}
+
+sub AVX_256_00_47 () {
+my $j = shift;
+my $body = shift;
+my @X = @_;
+my @insns = (&$body,&$body,&$body,&$body);	# 104 instructions
+
+	foreach (Xupdate_256_AVX()) {		# 29 instructions
+	    eval;
+	    eval(shift(@insns));
+	    eval(shift(@insns));
+	    eval(shift(@insns));
+	}
+	&vpaddd		($t2,@X[0],16*2*$j."($Tbl)");
+	  foreach (@insns) { eval; }		# remaining instructions
+	&vmovdqa	(16*$j."(%rsp)",$t2);
+}
+
+    for ($i=0,$j=0; $j<4; $j++) {
+	&AVX_256_00_47($j,\&body_00_15,@X);
+	push(@X,shift(@X));			# rotate(@X)
+    }
+	&cmpb	($SZ-1+16*2*$SZ."($Tbl)",0);
+	&jne	(".Lavx_00_47");
+
+    for ($i=0; $i<16; ) {
+	foreach(body_00_15()) { eval; }
+    }
+
+					} else {	# SHA512
+    my @X = map("%xmm$_",(0..7));
+    my ($t0,$t1,$t2,$t3) = map("%xmm$_",(8..11));
+
+$code.=<<___;
+	jmp	.Lloop_avx
+.align	16
+.Lloop_avx:
+	vmovdqa	$TABLE+`$SZ*2*$rounds`(%rip),$t3
+	vmovdqu	0x00($inp),@X[0]
+	lea	$TABLE+0x80(%rip),$Tbl	# size optimization
+	vmovdqu	0x10($inp),@X[1]
+	vmovdqu	0x20($inp),@X[2]
+	vpshufb	$t3,@X[0],@X[0]
+	vmovdqu	0x30($inp),@X[3]
+	vpshufb	$t3,@X[1],@X[1]
+	vmovdqu	0x40($inp),@X[4]
+	vpshufb	$t3,@X[2],@X[2]
+	vmovdqu	0x50($inp),@X[5]
+	vpshufb	$t3,@X[3],@X[3]
+	vmovdqu	0x60($inp),@X[6]
+	vpshufb	$t3,@X[4],@X[4]
+	vmovdqu	0x70($inp),@X[7]
+	vpshufb	$t3,@X[5],@X[5]
+	vpaddq	-0x80($Tbl),@X[0],$t0
+	vpshufb	$t3,@X[6],@X[6]
+	vpaddq	-0x60($Tbl),@X[1],$t1
+	vpshufb	$t3,@X[7],@X[7]
+	vpaddq	-0x40($Tbl),@X[2],$t2
+	vpaddq	-0x20($Tbl),@X[3],$t3
+	vmovdqa	$t0,0x00(%rsp)
+	vpaddq	0x00($Tbl),@X[4],$t0
+	vmovdqa	$t1,0x10(%rsp)
+	vpaddq	0x20($Tbl),@X[5],$t1
+	vmovdqa	$t2,0x20(%rsp)
+	vpaddq	0x40($Tbl),@X[6],$t2
+	vmovdqa	$t3,0x30(%rsp)
+	vpaddq	0x60($Tbl),@X[7],$t3
+	vmovdqa	$t0,0x40(%rsp)
+	mov	$A,$a1
+	vmovdqa	$t1,0x50(%rsp)
+	mov	$B,$a3
+	vmovdqa	$t2,0x60(%rsp)
+	xor	$C,$a3			# magic
+	vmovdqa	$t3,0x70(%rsp)
+	mov	$E,$a0
+	jmp	.Lavx_00_47
+
+.align	16
+.Lavx_00_47:
+	add	\$`16*2*$SZ`,$Tbl
+___
+sub Xupdate_512_AVX () {
+	(
+	'&vpalignr	($t0,@X[1],@X[0],$SZ)',	# X[1..2]
+	 '&vpalignr	($t3,@X[5],@X[4],$SZ)',	# X[9..10]
+	'&vpsrlq	($t2,$t0,$sigma0[0])',
+	 '&vpaddq	(@X[0],@X[0],$t3);',	# X[0..1] += X[9..10]
+	'&vpsrlq	($t3,$t0,$sigma0[2])',
+	'&vpsllq	($t1,$t0,8*$SZ-$sigma0[1]);',
+	 '&vpxor	($t0,$t3,$t2)',
+	'&vpsrlq	($t2,$t2,$sigma0[1]-$sigma0[0]);',
+	 '&vpxor	($t0,$t0,$t1)',
+	'&vpsllq	($t1,$t1,$sigma0[1]-$sigma0[0]);',
+	 '&vpxor	($t0,$t0,$t2)',
+	 '&vpsrlq	($t3,@X[7],$sigma1[2]);',
+	'&vpxor		($t0,$t0,$t1)',		# sigma0(X[1..2])
+	 '&vpsllq	($t2,@X[7],8*$SZ-$sigma1[1]);',
+	'&vpaddq	(@X[0],@X[0],$t0)',	# X[0..1] += sigma0(X[1..2])
+	 '&vpsrlq	($t1,@X[7],$sigma1[0]);',
+	 '&vpxor	($t3,$t3,$t2)',
+	 '&vpsllq	($t2,$t2,$sigma1[1]-$sigma1[0]);',
+	 '&vpxor	($t3,$t3,$t1)',
+	 '&vpsrlq	($t1,$t1,$sigma1[1]-$sigma1[0]);',
+	 '&vpxor	($t3,$t3,$t2)',
+	 '&vpxor	($t3,$t3,$t1)',		# sigma1(X[14..15])
+	'&vpaddq	(@X[0],@X[0],$t3)',	# X[0..1] += sigma1(X[14..15])
+	);
+}
+
+sub AVX_512_00_47 () {
+my $j = shift;
+my $body = shift;
+my @X = @_;
+my @insns = (&$body,&$body);			# 52 instructions
+
+	foreach (Xupdate_512_AVX()) {		# 23 instructions
+	    eval;
+	    eval(shift(@insns));
+	    eval(shift(@insns));
+	}
+	&vpaddq		($t2,@X[0],16*2*$j-0x80."($Tbl)");
+	  foreach (@insns) { eval; }		# remaining instructions
+	&vmovdqa	(16*$j."(%rsp)",$t2);
+}
+
+    for ($i=0,$j=0; $j<8; $j++) {
+	&AVX_512_00_47($j,\&body_00_15,@X);
+	push(@X,shift(@X));			# rotate(@X)
+    }
+	&cmpb	($SZ-1+16*2*$SZ-0x80."($Tbl)",0);
+	&jne	(".Lavx_00_47");
+
+    for ($i=0; $i<16; ) {
+	foreach(body_00_15()) { eval; }
+    }
+}
+$code.=<<___;
+	mov	$_ctx,$ctx
+	mov	$a1,$A
+
+	add	$SZ*0($ctx),$A
+	lea	16*$SZ($inp),$inp
+	add	$SZ*1($ctx),$B
+	add	$SZ*2($ctx),$C
+	add	$SZ*3($ctx),$D
+	add	$SZ*4($ctx),$E
+	add	$SZ*5($ctx),$F
+	add	$SZ*6($ctx),$G
+	add	$SZ*7($ctx),$H
+
+	cmp	$_end,$inp
+
+	mov	$A,$SZ*0($ctx)
+	mov	$B,$SZ*1($ctx)
+	mov	$C,$SZ*2($ctx)
+	mov	$D,$SZ*3($ctx)
+	mov	$E,$SZ*4($ctx)
+	mov	$F,$SZ*5($ctx)
+	mov	$G,$SZ*6($ctx)
+	mov	$H,$SZ*7($ctx)
+	jb	.Lloop_avx
+
+	mov	$_rsp,%rsi
+.cfi_def_cfa	%rsi,8
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	movaps	16*$SZ+32(%rsp),%xmm6
+	movaps	16*$SZ+48(%rsp),%xmm7
+	movaps	16*$SZ+64(%rsp),%xmm8
+	movaps	16*$SZ+80(%rsp),%xmm9
+___
+$code.=<<___ if ($win64 && $SZ>4);
+	movaps	16*$SZ+96(%rsp),%xmm10
+	movaps	16*$SZ+112(%rsp),%xmm11
+___
+$code.=<<___;
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue_avx:
+	ret
+.cfi_endproc
+.size	${func}_avx,.-${func}_avx
+___
+
+if ($avx>1) {{
+######################################################################
+# AVX2+BMI code path
+#
+my $a5=$SZ==4?"%esi":"%rsi";	# zap $inp
+my $PUSH8=8*2*$SZ;
+use integer;
+
+sub bodyx_00_15 () {
+	# at start $a1 should be zero, $a3 - $b^$c and $a4 copy of $f
+	(
+	'($a,$b,$c,$d,$e,$f,$g,$h)=@ROT;'.
+
+	'&add	($h,(32*($i/(16/$SZ))+$SZ*($i%(16/$SZ)))%$PUSH8.$base)',    # h+=X[i]+K[i]
+	'&and	($a4,$e)',		# f&e
+	'&rorx	($a0,$e,$Sigma1[2])',
+	'&rorx	($a2,$e,$Sigma1[1])',
+
+	'&lea	($a,"($a,$a1)")',	# h+=Sigma0(a) from the past
+	'&lea	($h,"($h,$a4)")',
+	'&andn	($a4,$e,$g)',		# ~e&g
+	'&xor	($a0,$a2)',
+
+	'&rorx	($a1,$e,$Sigma1[0])',
+	'&lea	($h,"($h,$a4)")',	# h+=Ch(e,f,g)=(e&f)+(~e&g)
+	'&xor	($a0,$a1)',		# Sigma1(e)
+	'&mov	($a2,$a)',
+
+	'&rorx	($a4,$a,$Sigma0[2])',
+	'&lea	($h,"($h,$a0)")',	# h+=Sigma1(e)
+	'&xor	($a2,$b)',		# a^b, b^c in next round
+	'&rorx	($a1,$a,$Sigma0[1])',
+
+	'&rorx	($a0,$a,$Sigma0[0])',
+	'&lea	($d,"($d,$h)")',	# d+=h
+	'&and	($a3,$a2)',		# (b^c)&(a^b)
+	'&xor	($a1,$a4)',
+
+	'&xor	($a3,$b)',		# Maj(a,b,c)=Ch(a^b,c,b)
+	'&xor	($a1,$a0)',		# Sigma0(a)
+	'&lea	($h,"($h,$a3)");'.	# h+=Maj(a,b,c)
+	'&mov	($a4,$e)',		# copy of f in future
+
+	'($a2,$a3) = ($a3,$a2); unshift(@ROT,pop(@ROT)); $i++;'
+	);
+	# and at the finish one has to $a+=$a1
+}
+
+$code.=<<___;
+.type	${func}_avx2,\@function,3
+.align	64
+${func}_avx2:
+.cfi_startproc
+.Lavx2_shortcut:
+	mov	%rsp,%rax		# copy %rsp
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+	sub	\$`2*$SZ*$rounds+4*8+$win64*16*($SZ==4?4:6)`,%rsp
+	shl	\$4,%rdx		# num*16
+	and	\$-256*$SZ,%rsp		# align stack frame
+	lea	($inp,%rdx,$SZ),%rdx	# inp+num*16*$SZ
+	add	\$`2*$SZ*($rounds-8)`,%rsp
+	mov	$ctx,$_ctx		# save ctx, 1st arg
+	mov	$inp,$_inp		# save inp, 2nd arh
+	mov	%rdx,$_end		# save end pointer, "3rd" arg
+	mov	%rax,$_rsp		# save copy of %rsp
+.cfi_cfa_expression	$_rsp,deref,+8
+___
+$code.=<<___ if ($win64);
+	movaps	%xmm6,16*$SZ+32(%rsp)
+	movaps	%xmm7,16*$SZ+48(%rsp)
+	movaps	%xmm8,16*$SZ+64(%rsp)
+	movaps	%xmm9,16*$SZ+80(%rsp)
+___
+$code.=<<___ if ($win64 && $SZ>4);
+	movaps	%xmm10,16*$SZ+96(%rsp)
+	movaps	%xmm11,16*$SZ+112(%rsp)
+___
+$code.=<<___;
+.Lprologue_avx2:
+
+	vzeroupper
+	sub	\$-16*$SZ,$inp		# inp++, size optimization
+	mov	$SZ*0($ctx),$A
+	mov	$inp,%r12		# borrow $T1
+	mov	$SZ*1($ctx),$B
+	cmp	%rdx,$inp		# $_end
+	mov	$SZ*2($ctx),$C
+	cmove	%rsp,%r12		# next block or random data
+	mov	$SZ*3($ctx),$D
+	mov	$SZ*4($ctx),$E
+	mov	$SZ*5($ctx),$F
+	mov	$SZ*6($ctx),$G
+	mov	$SZ*7($ctx),$H
+___
+					if ($SZ==4) {	# SHA256
+    my @X = map("%ymm$_",(0..3));
+    my ($t0,$t1,$t2,$t3, $t4,$t5) = map("%ymm$_",(4..9));
+
+$code.=<<___;
+	vmovdqa	$TABLE+`$SZ*2*$rounds`+32(%rip),$t4
+	vmovdqa	$TABLE+`$SZ*2*$rounds`+64(%rip),$t5
+	jmp	.Loop_avx2
+.align	16
+.Loop_avx2:
+	vmovdqa	$TABLE+`$SZ*2*$rounds`(%rip),$t3
+	vmovdqu	-16*$SZ+0($inp),%xmm0
+	vmovdqu	-16*$SZ+16($inp),%xmm1
+	vmovdqu	-16*$SZ+32($inp),%xmm2
+	vmovdqu	-16*$SZ+48($inp),%xmm3
+	#mov		$inp,$_inp	# offload $inp
+	vinserti128	\$1,(%r12),@X[0],@X[0]
+	vinserti128	\$1,16(%r12),@X[1],@X[1]
+	vpshufb		$t3,@X[0],@X[0]
+	vinserti128	\$1,32(%r12),@X[2],@X[2]
+	vpshufb		$t3,@X[1],@X[1]
+	vinserti128	\$1,48(%r12),@X[3],@X[3]
+
+	lea	$TABLE(%rip),$Tbl
+	vpshufb	$t3,@X[2],@X[2]
+	vpaddd	0x00($Tbl),@X[0],$t0
+	vpshufb	$t3,@X[3],@X[3]
+	vpaddd	0x20($Tbl),@X[1],$t1
+	vpaddd	0x40($Tbl),@X[2],$t2
+	vpaddd	0x60($Tbl),@X[3],$t3
+	vmovdqa	$t0,0x00(%rsp)
+	xor	$a1,$a1
+	vmovdqa	$t1,0x20(%rsp)
+	lea	-$PUSH8(%rsp),%rsp
+	mov	$B,$a3
+	vmovdqa	$t2,0x00(%rsp)
+	xor	$C,$a3			# magic
+	vmovdqa	$t3,0x20(%rsp)
+	mov	$F,$a4
+	sub	\$-16*2*$SZ,$Tbl	# size optimization
+	jmp	.Lavx2_00_47
+
+.align	16
+.Lavx2_00_47:
+___
+
+sub AVX2_256_00_47 () {
+my $j = shift;
+my $body = shift;
+my @X = @_;
+my @insns = (&$body,&$body,&$body,&$body);	# 96 instructions
+my $base = "+2*$PUSH8(%rsp)";
+
+	&lea	("%rsp","-$PUSH8(%rsp)")	if (($j%2)==0);
+	foreach (Xupdate_256_AVX()) {		# 29 instructions
+	    eval;
+	    eval(shift(@insns));
+	    eval(shift(@insns));
+	    eval(shift(@insns));
+	}
+	&vpaddd		($t2,@X[0],16*2*$j."($Tbl)");
+	  foreach (@insns) { eval; }		# remaining instructions
+	&vmovdqa	((32*$j)%$PUSH8."(%rsp)",$t2);
+}
+
+    for ($i=0,$j=0; $j<4; $j++) {
+	&AVX2_256_00_47($j,\&bodyx_00_15,@X);
+	push(@X,shift(@X));			# rotate(@X)
+    }
+	&lea	($Tbl,16*2*$SZ."($Tbl)");
+	&cmpb	(($SZ-1)."($Tbl)",0);
+	&jne	(".Lavx2_00_47");
+
+    for ($i=0; $i<16; ) {
+	my $base=$i<8?"+$PUSH8(%rsp)":"(%rsp)";
+	foreach(bodyx_00_15()) { eval; }
+    }
+					} else {	# SHA512
+    my @X = map("%ymm$_",(0..7));
+    my ($t0,$t1,$t2,$t3) = map("%ymm$_",(8..11));
+
+$code.=<<___;
+	jmp	.Loop_avx2
+.align	16
+.Loop_avx2:
+	vmovdqu	-16*$SZ($inp),%xmm0
+	vmovdqu	-16*$SZ+16($inp),%xmm1
+	vmovdqu	-16*$SZ+32($inp),%xmm2
+	lea	$TABLE+0x80(%rip),$Tbl	# size optimization
+	vmovdqu	-16*$SZ+48($inp),%xmm3
+	vmovdqu	-16*$SZ+64($inp),%xmm4
+	vmovdqu	-16*$SZ+80($inp),%xmm5
+	vmovdqu	-16*$SZ+96($inp),%xmm6
+	vmovdqu	-16*$SZ+112($inp),%xmm7
+	#mov	$inp,$_inp	# offload $inp
+	vmovdqa	`$SZ*2*$rounds-0x80`($Tbl),$t2
+	vinserti128	\$1,(%r12),@X[0],@X[0]
+	vinserti128	\$1,16(%r12),@X[1],@X[1]
+	 vpshufb	$t2,@X[0],@X[0]
+	vinserti128	\$1,32(%r12),@X[2],@X[2]
+	 vpshufb	$t2,@X[1],@X[1]
+	vinserti128	\$1,48(%r12),@X[3],@X[3]
+	 vpshufb	$t2,@X[2],@X[2]
+	vinserti128	\$1,64(%r12),@X[4],@X[4]
+	 vpshufb	$t2,@X[3],@X[3]
+	vinserti128	\$1,80(%r12),@X[5],@X[5]
+	 vpshufb	$t2,@X[4],@X[4]
+	vinserti128	\$1,96(%r12),@X[6],@X[6]
+	 vpshufb	$t2,@X[5],@X[5]
+	vinserti128	\$1,112(%r12),@X[7],@X[7]
+
+	vpaddq	-0x80($Tbl),@X[0],$t0
+	vpshufb	$t2,@X[6],@X[6]
+	vpaddq	-0x60($Tbl),@X[1],$t1
+	vpshufb	$t2,@X[7],@X[7]
+	vpaddq	-0x40($Tbl),@X[2],$t2
+	vpaddq	-0x20($Tbl),@X[3],$t3
+	vmovdqa	$t0,0x00(%rsp)
+	vpaddq	0x00($Tbl),@X[4],$t0
+	vmovdqa	$t1,0x20(%rsp)
+	vpaddq	0x20($Tbl),@X[5],$t1
+	vmovdqa	$t2,0x40(%rsp)
+	vpaddq	0x40($Tbl),@X[6],$t2
+	vmovdqa	$t3,0x60(%rsp)
+	lea	-$PUSH8(%rsp),%rsp
+	vpaddq	0x60($Tbl),@X[7],$t3
+	vmovdqa	$t0,0x00(%rsp)
+	xor	$a1,$a1
+	vmovdqa	$t1,0x20(%rsp)
+	mov	$B,$a3
+	vmovdqa	$t2,0x40(%rsp)
+	xor	$C,$a3			# magic
+	vmovdqa	$t3,0x60(%rsp)
+	mov	$F,$a4
+	add	\$16*2*$SZ,$Tbl
+	jmp	.Lavx2_00_47
+
+.align	16
+.Lavx2_00_47:
+___
+
+sub AVX2_512_00_47 () {
+my $j = shift;
+my $body = shift;
+my @X = @_;
+my @insns = (&$body,&$body);			# 48 instructions
+my $base = "+2*$PUSH8(%rsp)";
+
+	&lea	("%rsp","-$PUSH8(%rsp)")	if (($j%4)==0);
+	foreach (Xupdate_512_AVX()) {		# 23 instructions
+	    eval;
+	    if ($_ !~ /\;$/) {
+		eval(shift(@insns));
+		eval(shift(@insns));
+		eval(shift(@insns));
+	    }
+	}
+	&vpaddq		($t2,@X[0],16*2*$j-0x80."($Tbl)");
+	  foreach (@insns) { eval; }		# remaining instructions
+	&vmovdqa	((32*$j)%$PUSH8."(%rsp)",$t2);
+}
+
+    for ($i=0,$j=0; $j<8; $j++) {
+	&AVX2_512_00_47($j,\&bodyx_00_15,@X);
+	push(@X,shift(@X));			# rotate(@X)
+    }
+	&lea	($Tbl,16*2*$SZ."($Tbl)");
+	&cmpb	(($SZ-1-0x80)."($Tbl)",0);
+	&jne	(".Lavx2_00_47");
+
+    for ($i=0; $i<16; ) {
+	my $base=$i<8?"+$PUSH8(%rsp)":"(%rsp)";
+	foreach(bodyx_00_15()) { eval; }
+    }
+}
+$code.=<<___;
+	mov	`2*$SZ*$rounds`(%rsp),$ctx	# $_ctx
+	add	$a1,$A
+	#mov	`2*$SZ*$rounds+8`(%rsp),$inp	# $_inp
+	lea	`2*$SZ*($rounds-8)`(%rsp),$Tbl
+
+	add	$SZ*0($ctx),$A
+	add	$SZ*1($ctx),$B
+	add	$SZ*2($ctx),$C
+	add	$SZ*3($ctx),$D
+	add	$SZ*4($ctx),$E
+	add	$SZ*5($ctx),$F
+	add	$SZ*6($ctx),$G
+	add	$SZ*7($ctx),$H
+
+	mov	$A,$SZ*0($ctx)
+	mov	$B,$SZ*1($ctx)
+	mov	$C,$SZ*2($ctx)
+	mov	$D,$SZ*3($ctx)
+	mov	$E,$SZ*4($ctx)
+	mov	$F,$SZ*5($ctx)
+	mov	$G,$SZ*6($ctx)
+	mov	$H,$SZ*7($ctx)
+
+	cmp	`$PUSH8+2*8`($Tbl),$inp	# $_end
+	je	.Ldone_avx2
+
+	xor	$a1,$a1
+	mov	$B,$a3
+	xor	$C,$a3			# magic
+	mov	$F,$a4
+	jmp	.Lower_avx2
+.align	16
+.Lower_avx2:
+___
+    for ($i=0; $i<8; ) {
+	my $base="+16($Tbl)";
+	foreach(bodyx_00_15()) { eval; }
+    }
+$code.=<<___;
+	lea	-$PUSH8($Tbl),$Tbl
+	cmp	%rsp,$Tbl
+	jae	.Lower_avx2
+
+	mov	`2*$SZ*$rounds`(%rsp),$ctx	# $_ctx
+	add	$a1,$A
+	#mov	`2*$SZ*$rounds+8`(%rsp),$inp	# $_inp
+	lea	`2*$SZ*($rounds-8)`(%rsp),%rsp
+
+	add	$SZ*0($ctx),$A
+	add	$SZ*1($ctx),$B
+	add	$SZ*2($ctx),$C
+	add	$SZ*3($ctx),$D
+	add	$SZ*4($ctx),$E
+	add	$SZ*5($ctx),$F
+	lea	`2*16*$SZ`($inp),$inp	# inp+=2
+	add	$SZ*6($ctx),$G
+	mov	$inp,%r12
+	add	$SZ*7($ctx),$H
+	cmp	$_end,$inp
+
+	mov	$A,$SZ*0($ctx)
+	cmove	%rsp,%r12		# next block or stale data
+	mov	$B,$SZ*1($ctx)
+	mov	$C,$SZ*2($ctx)
+	mov	$D,$SZ*3($ctx)
+	mov	$E,$SZ*4($ctx)
+	mov	$F,$SZ*5($ctx)
+	mov	$G,$SZ*6($ctx)
+	mov	$H,$SZ*7($ctx)
+
+	jbe	.Loop_avx2
+	lea	(%rsp),$Tbl
+
+.Ldone_avx2:
+	lea	($Tbl),%rsp
+	mov	$_rsp,%rsi
+.cfi_def_cfa	%rsi,8
+	vzeroupper
+___
+$code.=<<___ if ($win64);
+	movaps	16*$SZ+32(%rsp),%xmm6
+	movaps	16*$SZ+48(%rsp),%xmm7
+	movaps	16*$SZ+64(%rsp),%xmm8
+	movaps	16*$SZ+80(%rsp),%xmm9
+___
+$code.=<<___ if ($win64 && $SZ>4);
+	movaps	16*$SZ+96(%rsp),%xmm10
+	movaps	16*$SZ+112(%rsp),%xmm11
+___
+$code.=<<___;
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue_avx2:
+	ret
+.cfi_endproc
+.size	${func}_avx2,.-${func}_avx2
+___
+}}
+}}}}}
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	se_handler,\@abi-omnipotent
+.align	16
+se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	mov	8($disp),%rsi		# disp->ImageBase
+	mov	56($disp),%r11		# disp->HanderlData
+
+	mov	0(%r11),%r10d		# HandlerData[0]
+	lea	(%rsi,%r10),%r10	# prologue label
+	cmp	%r10,%rbx		# context->Rip<prologue label
+	jb	.Lin_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	mov	4(%r11),%r10d		# HandlerData[1]
+	lea	(%rsi,%r10),%r10	# epilogue label
+	cmp	%r10,%rbx		# context->Rip>=epilogue label
+	jae	.Lin_prologue
+___
+$code.=<<___ if ($avx>1);
+	lea	.Lavx2_shortcut(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<avx2_shortcut
+	jb	.Lnot_in_avx2
+
+	and	\$-256*$SZ,%rax
+	add	\$`2*$SZ*($rounds-8)`,%rax
+.Lnot_in_avx2:
+___
+$code.=<<___;
+	mov	%rax,%rsi		# put aside Rsp
+	mov	16*$SZ+3*8(%rax),%rax	# pull $_rsp
+
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+	lea	.Lepilogue(%rip),%r10
+	cmp	%r10,%rbx
+	jb	.Lin_prologue		# non-AVX code
+
+	lea	16*$SZ+4*8(%rsi),%rsi	# Xmm6- save area
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$`$SZ==4?8:12`,%ecx
+	.long	0xa548f3fc		# cld; rep movsq
+
+.Lin_prologue:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	se_handler,.-se_handler
+___
+
+$code.=<<___ if ($SZ==4 && $shaext);
+.type	shaext_handler,\@abi-omnipotent
+.align	16
+shaext_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	lea	.Lprologue_shaext(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<.Lprologue
+	jb	.Lin_prologue
+
+	lea	.Lepilogue_shaext(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip>=.Lepilogue
+	jae	.Lin_prologue
+
+	lea	-8-5*16(%rax),%rsi
+	lea	512($context),%rdi	# &context.Xmm6
+	mov	\$10,%ecx
+	.long	0xa548f3fc		# cld; rep movsq
+
+	jmp	.Lin_prologue
+.size	shaext_handler,.-shaext_handler
+___
+
+$code.=<<___;
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_$func
+	.rva	.LSEH_end_$func
+	.rva	.LSEH_info_$func
+___
+$code.=<<___ if ($SZ==4 && $shaext);
+	.rva	.LSEH_begin_${func}_shaext
+	.rva	.LSEH_end_${func}_shaext
+	.rva	.LSEH_info_${func}_shaext
+___
+$code.=<<___ if ($SZ==4);
+	.rva	.LSEH_begin_${func}_ssse3
+	.rva	.LSEH_end_${func}_ssse3
+	.rva	.LSEH_info_${func}_ssse3
+___
+$code.=<<___ if ($avx && $SZ==8);
+	.rva	.LSEH_begin_${func}_xop
+	.rva	.LSEH_end_${func}_xop
+	.rva	.LSEH_info_${func}_xop
+___
+$code.=<<___ if ($avx);
+	.rva	.LSEH_begin_${func}_avx
+	.rva	.LSEH_end_${func}_avx
+	.rva	.LSEH_info_${func}_avx
+___
+$code.=<<___ if ($avx>1);
+	.rva	.LSEH_begin_${func}_avx2
+	.rva	.LSEH_end_${func}_avx2
+	.rva	.LSEH_info_${func}_avx2
+___
+$code.=<<___;
+.section	.xdata
+.align	8
+.LSEH_info_$func:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lprologue,.Lepilogue			# HandlerData[]
+___
+$code.=<<___ if ($SZ==4 && $shaext);
+.LSEH_info_${func}_shaext:
+	.byte	9,0,0,0
+	.rva	shaext_handler
+___
+$code.=<<___ if ($SZ==4);
+.LSEH_info_${func}_ssse3:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lprologue_ssse3,.Lepilogue_ssse3	# HandlerData[]
+___
+$code.=<<___ if ($avx && $SZ==8);
+.LSEH_info_${func}_xop:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lprologue_xop,.Lepilogue_xop		# HandlerData[]
+___
+$code.=<<___ if ($avx);
+.LSEH_info_${func}_avx:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lprologue_avx,.Lepilogue_avx		# HandlerData[]
+___
+$code.=<<___ if ($avx>1);
+.LSEH_info_${func}_avx2:
+	.byte	9,0,0,0
+	.rva	se_handler
+	.rva	.Lprologue_avx2,.Lepilogue_avx2		# HandlerData[]
+___
+}
+
+sub sha256op38 {
+    my $instr = shift;
+    my %opcodelet = (
+		"sha256rnds2" => 0xcb,
+  		"sha256msg1"  => 0xcc,
+		"sha256msg2"  => 0xcd	);
+
+    if (defined($opcodelet{$instr}) && @_[0] =~ /%xmm([0-7]),\s*%xmm([0-7])/) {
+      my @opcode=(0x0f,0x38);
+	push @opcode,$opcodelet{$instr};
+	push @opcode,0xc0|($1&7)|(($2&7)<<3);		# ModR/M
+	return ".byte\t".join(',',@opcode);
+    } else {
+	return $instr."\t".@_[0];
+    }
+}
+
+foreach (split("\n",$code)) {
+	s/\`([^\`]*)\`/eval $1/geo;
+
+	s/\b(sha256[^\s]*)\s+(.*)/sha256op38($1,$2)/geo;
+
+	print $_,"\n";
+}
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512p8-ppc.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512p8-ppc.pl
new file mode 100755
index 000000000..0d4fdd292
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/asm/sha512p8-ppc.pl
@@ -0,0 +1,420 @@
+#! /usr/bin/env perl
+# Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# SHA256/512 for PowerISA v2.07.
+#
+# Accurate performance measurements are problematic, because it's
+# always virtualized setup with possibly throttled processor.
+# Relative comparison is therefore more informative. This module is
+# ~60% faster than integer-only sha512-ppc.pl. To anchor to something
+# else, SHA256 is 24% slower than sha1-ppc.pl and 2.5x slower than
+# hardware-assisted aes-128-cbc encrypt. SHA512 is 20% faster than
+# sha1-ppc.pl and 1.6x slower than aes-128-cbc. Another interesting
+# result is degree of computational resources' utilization. POWER8 is
+# "massively multi-threaded chip" and difference between single- and
+# maximum multi-process benchmark results tells that utilization is
+# whooping 94%. For sha512-ppc.pl we get [not unimpressive] 84% and
+# for sha1-ppc.pl - 73%. 100% means that multi-process result equals
+# to single-process one, given that all threads end up on the same
+# physical core.
+#
+######################################################################
+# Believed-to-be-accurate results in cycles per processed byte [on
+# little-endian system]. Numbers in square brackets are for 64-bit
+# build of sha512-ppc.pl, presented for reference.
+#
+#		POWER8		POWER9
+# SHA256	9.7 [15.8]	11.2 [12.5]
+# SHA512	6.1 [10.3]	7.0 [7.9]
+
+$flavour=shift;
+$output =shift;
+
+if ($flavour =~ /64/) {
+	$SIZE_T=8;
+	$LRSAVE=2*$SIZE_T;
+	$STU="stdu";
+	$POP="ld";
+	$PUSH="std";
+} elsif ($flavour =~ /32/) {
+	$SIZE_T=4;
+	$LRSAVE=$SIZE_T;
+	$STU="stwu";
+	$POP="lwz";
+	$PUSH="stw";
+} else { die "nonsense $flavour"; }
+
+$LENDIAN=($flavour=~/le/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}ppc-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/ppc-xlate.pl" and -f $xlate) or
+die "can't locate ppc-xlate.pl";
+
+open STDOUT,"| $^X $xlate $flavour $output" || die "can't call $xlate: $!";
+
+if ($output =~ /512/) {
+	$bits=512;
+	$SZ=8;
+	$sz="d";
+	$rounds=80;
+} else {
+	$bits=256;
+	$SZ=4;
+	$sz="w";
+	$rounds=64;
+}
+
+$func="sha${bits}_block_p8";
+$LOCALS=8*$SIZE_T+8*16;
+$FRAME=$LOCALS+9*16+6*$SIZE_T;
+
+$sp ="r1";
+$toc="r2";
+$ctx="r3";
+$inp="r4";
+$num="r5";
+$Tbl="r6";
+$idx="r7";
+$lrsave="r8";
+$offload="r11";
+$vrsave="r12";
+@I = ($x00,$x10,$x20,$x30,$x40,$x50,$x60,$x70) = (0,map("r$_",(10,26..31)));
+
+@V=($A,$B,$C,$D,$E,$F,$G,$H)=map("v$_",(0..7));
+@X=map("v$_",(8..19,24..27));
+($Ki,$Func,$Sigma,$lemask)=map("v$_",(28..31));
+
+sub ROUND {
+my ($i,$a,$b,$c,$d,$e,$f,$g,$h)=@_;
+my $j=($i+1)%16;
+my $k=($i+2)%8;
+
+$code.=<<___		if ($i<15 && ($i%(16/$SZ))==(16/$SZ-1));
+	lvx_u		@X[$i+1],0,$inp		; load X[i] in advance
+	addi		$inp,$inp,16
+___
+$code.=<<___		if ($i<16 && ($i%(16/$SZ)));
+	vsldoi		@X[$i],@X[$i-1],@X[$i-1],$SZ
+___
+$code.=<<___		if ($LENDIAN && $i<16 && ($i%(16/$SZ))==0);
+	vperm		@X[$i],@X[$i],@X[$i],$lemask
+___
+$code.=<<___		if ($i>=15);
+	vshasigma${sz}	$Sigma,@X[($j+1)%16],0,0
+	vaddu${sz}m	@X[$j],@X[$j],$Sigma
+	vshasigma${sz}	$Sigma,@X[($j+14)%16],0,15
+	vaddu${sz}m	@X[$j],@X[$j],$Sigma
+	vaddu${sz}m	@X[$j],@X[$j],@X[($j+9)%16]
+___
+$code.=<<___;
+	vaddu${sz}m	$h,$h,@X[$i%16]		; h+=X[i]
+	vsel		$Func,$g,$f,$e		; Ch(e,f,g)
+	vaddu${sz}m	$g,$g,$Ki		; future h+=K[i]
+	vaddu${sz}m	$h,$h,$Func		; h+=Ch(e,f,g)
+	vshasigma${sz}	$Sigma,$e,1,15		; Sigma1(e)
+	vaddu${sz}m	$h,$h,$Sigma		; h+=Sigma1(e)
+	vxor		$Func,$a,$b
+	vsel		$Func,$b,$c,$Func	; Maj(a,b,c)
+	vaddu${sz}m	$d,$d,$h		; d+=h
+	vshasigma${sz}	$Sigma,$a,1,0		; Sigma0(a)
+	vaddu${sz}m	$Sigma,$Sigma,$Func	; Sigma0(a)+Maj(a,b,c)
+	vaddu${sz}m	$h,$h,$Sigma		; h+=Sigma0(a)+Maj(a,b,c)
+	lvx		$Ki,@I[$k],$idx		; load next K[i]
+___
+$code.=<<___		if ($k == 7);
+	addi		$idx,$idx,0x80
+___
+}
+
+$code=<<___;
+.machine	"any"
+.text
+
+.globl	$func
+.align	6
+$func:
+	$STU		$sp,-$FRAME($sp)
+	mflr		$lrsave
+	li		r10,`$LOCALS+15`
+	li		r11,`$LOCALS+31`
+	stvx		v24,r10,$sp		# ABI says so
+	addi		r10,r10,32
+	mfspr		$vrsave,256
+	stvx		v25,r11,$sp
+	addi		r11,r11,32
+	stvx		v26,r10,$sp
+	addi		r10,r10,32
+	stvx		v27,r11,$sp
+	addi		r11,r11,32
+	stvx		v28,r10,$sp
+	addi		r10,r10,32
+	stvx		v29,r11,$sp
+	addi		r11,r11,32
+	stvx		v30,r10,$sp
+	stvx		v31,r11,$sp
+	li		r11,-4096+255		# 0xfffff0ff
+	stw		$vrsave,`$FRAME-6*$SIZE_T-4`($sp)	# save vrsave
+	li		$x10,0x10
+	$PUSH		r26,`$FRAME-6*$SIZE_T`($sp)
+	li		$x20,0x20
+	$PUSH		r27,`$FRAME-5*$SIZE_T`($sp)
+	li		$x30,0x30
+	$PUSH		r28,`$FRAME-4*$SIZE_T`($sp)
+	li		$x40,0x40
+	$PUSH		r29,`$FRAME-3*$SIZE_T`($sp)
+	li		$x50,0x50
+	$PUSH		r30,`$FRAME-2*$SIZE_T`($sp)
+	li		$x60,0x60
+	$PUSH		r31,`$FRAME-1*$SIZE_T`($sp)
+	li		$x70,0x70
+	$PUSH		$lrsave,`$FRAME+$LRSAVE`($sp)
+	mtspr		256,r11
+
+	bl		LPICmeup
+	addi		$offload,$sp,`8*$SIZE_T+15`
+___
+$code.=<<___		if ($LENDIAN);
+	li		$idx,8
+	lvsl		$lemask,0,$idx
+	vspltisb	$Ki,0x0f
+	vxor		$lemask,$lemask,$Ki
+___
+$code.=<<___		if ($SZ==4);
+	lvx_4w		$A,$x00,$ctx
+	lvx_4w		$E,$x10,$ctx
+	vsldoi		$B,$A,$A,4		# unpack
+	vsldoi		$C,$A,$A,8
+	vsldoi		$D,$A,$A,12
+	vsldoi		$F,$E,$E,4
+	vsldoi		$G,$E,$E,8
+	vsldoi		$H,$E,$E,12
+___
+$code.=<<___		if ($SZ==8);
+	lvx_u		$A,$x00,$ctx
+	lvx_u		$C,$x10,$ctx
+	lvx_u		$E,$x20,$ctx
+	vsldoi		$B,$A,$A,8		# unpack
+	lvx_u		$G,$x30,$ctx
+	vsldoi		$D,$C,$C,8
+	vsldoi		$F,$E,$E,8
+	vsldoi		$H,$G,$G,8
+___
+$code.=<<___;
+	li		r0,`($rounds-16)/16`	# inner loop counter
+	b		Loop
+.align	5
+Loop:
+	lvx		$Ki,$x00,$Tbl
+	lvx_u		@X[0],0,$inp
+	addi		$inp,$inp,16
+	mr		$idx,$Tbl		# copy $Tbl
+	stvx		$A,$x00,$offload	# offload $A-$H
+	stvx		$B,$x10,$offload
+	stvx		$C,$x20,$offload
+	stvx		$D,$x30,$offload
+	stvx		$E,$x40,$offload
+	stvx		$F,$x50,$offload
+	stvx		$G,$x60,$offload
+	stvx		$H,$x70,$offload
+	vaddu${sz}m	$H,$H,$Ki		# h+K[i]
+	lvx		$Ki,$x10,$Tbl
+___
+for ($i=0;$i<16;$i++)	{ &ROUND($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	mtctr		r0
+	b		L16_xx
+.align	5
+L16_xx:
+___
+for (;$i<32;$i++)	{ &ROUND($i,@V); unshift(@V,pop(@V)); }
+$code.=<<___;
+	bdnz		L16_xx
+
+	lvx		@X[2],$x00,$offload
+	subic.		$num,$num,1
+	lvx		@X[3],$x10,$offload
+	vaddu${sz}m	$A,$A,@X[2]
+	lvx		@X[4],$x20,$offload
+	vaddu${sz}m	$B,$B,@X[3]
+	lvx		@X[5],$x30,$offload
+	vaddu${sz}m	$C,$C,@X[4]
+	lvx		@X[6],$x40,$offload
+	vaddu${sz}m	$D,$D,@X[5]
+	lvx		@X[7],$x50,$offload
+	vaddu${sz}m	$E,$E,@X[6]
+	lvx		@X[8],$x60,$offload
+	vaddu${sz}m	$F,$F,@X[7]
+	lvx		@X[9],$x70,$offload
+	vaddu${sz}m	$G,$G,@X[8]
+	vaddu${sz}m	$H,$H,@X[9]
+	bne		Loop
+___
+$code.=<<___		if ($SZ==4);
+	lvx		@X[0],$x20,$idx
+	vperm		$A,$A,$B,$Ki		# pack the answer
+	lvx		@X[1],$x30,$idx
+	vperm		$E,$E,$F,$Ki
+	vperm		$A,$A,$C,@X[0]
+	vperm		$E,$E,$G,@X[0]
+	vperm		$A,$A,$D,@X[1]
+	vperm		$E,$E,$H,@X[1]
+	stvx_4w		$A,$x00,$ctx
+	stvx_4w		$E,$x10,$ctx
+___
+$code.=<<___		if ($SZ==8);
+	vperm		$A,$A,$B,$Ki		# pack the answer
+	vperm		$C,$C,$D,$Ki
+	vperm		$E,$E,$F,$Ki
+	vperm		$G,$G,$H,$Ki
+	stvx_u		$A,$x00,$ctx
+	stvx_u		$C,$x10,$ctx
+	stvx_u		$E,$x20,$ctx
+	stvx_u		$G,$x30,$ctx
+___
+$code.=<<___;
+	addi		$offload,$sp,`$LOCALS+15`
+	mtlr		$lrsave
+	mtspr		256,$vrsave
+	lvx		v24,$x00,$offload	# ABI says so
+	lvx		v25,$x10,$offload
+	lvx		v26,$x20,$offload
+	lvx		v27,$x30,$offload
+	lvx		v28,$x40,$offload
+	lvx		v29,$x50,$offload
+	lvx		v30,$x60,$offload
+	lvx		v31,$x70,$offload
+	$POP		r26,`$FRAME-6*$SIZE_T`($sp)
+	$POP		r27,`$FRAME-5*$SIZE_T`($sp)
+	$POP		r28,`$FRAME-4*$SIZE_T`($sp)
+	$POP		r29,`$FRAME-3*$SIZE_T`($sp)
+	$POP		r30,`$FRAME-2*$SIZE_T`($sp)
+	$POP		r31,`$FRAME-1*$SIZE_T`($sp)
+	addi		$sp,$sp,$FRAME
+	blr
+	.long		0
+	.byte		0,12,4,1,0x80,6,3,0
+	.long		0
+.size	$func,.-$func
+___
+
+# Ugly hack here, because PPC assembler syntax seem to vary too
+# much from platforms to platform...
+$code.=<<___;
+.align	6
+LPICmeup:
+	mflr	r0
+	bcl	20,31,\$+4
+	mflr	$Tbl	; vvvvvv "distance" between . and 1st data entry
+	addi	$Tbl,$Tbl,`64-8`
+	mtlr	r0
+	blr
+	.long	0
+	.byte	0,12,0x14,0,0,0,0,0
+	.space	`64-9*4`
+___
+
+if ($SZ==8) {
+    local *table = sub {
+	foreach(@_) { $code.=".quad	$_,$_\n"; }
+    };
+    table(
+	"0x428a2f98d728ae22","0x7137449123ef65cd",
+	"0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc",
+	"0x3956c25bf348b538","0x59f111f1b605d019",
+	"0x923f82a4af194f9b","0xab1c5ed5da6d8118",
+	"0xd807aa98a3030242","0x12835b0145706fbe",
+	"0x243185be4ee4b28c","0x550c7dc3d5ffb4e2",
+	"0x72be5d74f27b896f","0x80deb1fe3b1696b1",
+	"0x9bdc06a725c71235","0xc19bf174cf692694",
+	"0xe49b69c19ef14ad2","0xefbe4786384f25e3",
+	"0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65",
+	"0x2de92c6f592b0275","0x4a7484aa6ea6e483",
+	"0x5cb0a9dcbd41fbd4","0x76f988da831153b5",
+	"0x983e5152ee66dfab","0xa831c66d2db43210",
+	"0xb00327c898fb213f","0xbf597fc7beef0ee4",
+	"0xc6e00bf33da88fc2","0xd5a79147930aa725",
+	"0x06ca6351e003826f","0x142929670a0e6e70",
+	"0x27b70a8546d22ffc","0x2e1b21385c26c926",
+	"0x4d2c6dfc5ac42aed","0x53380d139d95b3df",
+	"0x650a73548baf63de","0x766a0abb3c77b2a8",
+	"0x81c2c92e47edaee6","0x92722c851482353b",
+	"0xa2bfe8a14cf10364","0xa81a664bbc423001",
+	"0xc24b8b70d0f89791","0xc76c51a30654be30",
+	"0xd192e819d6ef5218","0xd69906245565a910",
+	"0xf40e35855771202a","0x106aa07032bbd1b8",
+	"0x19a4c116b8d2d0c8","0x1e376c085141ab53",
+	"0x2748774cdf8eeb99","0x34b0bcb5e19b48a8",
+	"0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb",
+	"0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3",
+	"0x748f82ee5defb2fc","0x78a5636f43172f60",
+	"0x84c87814a1f0ab72","0x8cc702081a6439ec",
+	"0x90befffa23631e28","0xa4506cebde82bde9",
+	"0xbef9a3f7b2c67915","0xc67178f2e372532b",
+	"0xca273eceea26619c","0xd186b8c721c0c207",
+	"0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178",
+	"0x06f067aa72176fba","0x0a637dc5a2c898a6",
+	"0x113f9804bef90dae","0x1b710b35131c471b",
+	"0x28db77f523047d84","0x32caab7b40c72493",
+	"0x3c9ebe0a15c9bebc","0x431d67c49c100d4c",
+	"0x4cc5d4becb3e42b6","0x597f299cfc657e2a",
+	"0x5fcb6fab3ad6faec","0x6c44198c4a475817","0");
+$code.=<<___	if (!$LENDIAN);
+.quad	0x0001020304050607,0x1011121314151617
+___
+$code.=<<___	if ($LENDIAN);	# quad-swapped
+.quad	0x1011121314151617,0x0001020304050607
+___
+} else {
+    local *table = sub {
+	foreach(@_) { $code.=".long	$_,$_,$_,$_\n"; }
+    };
+    table(
+	"0x428a2f98","0x71374491","0xb5c0fbcf","0xe9b5dba5",
+	"0x3956c25b","0x59f111f1","0x923f82a4","0xab1c5ed5",
+	"0xd807aa98","0x12835b01","0x243185be","0x550c7dc3",
+	"0x72be5d74","0x80deb1fe","0x9bdc06a7","0xc19bf174",
+	"0xe49b69c1","0xefbe4786","0x0fc19dc6","0x240ca1cc",
+	"0x2de92c6f","0x4a7484aa","0x5cb0a9dc","0x76f988da",
+	"0x983e5152","0xa831c66d","0xb00327c8","0xbf597fc7",
+	"0xc6e00bf3","0xd5a79147","0x06ca6351","0x14292967",
+	"0x27b70a85","0x2e1b2138","0x4d2c6dfc","0x53380d13",
+	"0x650a7354","0x766a0abb","0x81c2c92e","0x92722c85",
+	"0xa2bfe8a1","0xa81a664b","0xc24b8b70","0xc76c51a3",
+	"0xd192e819","0xd6990624","0xf40e3585","0x106aa070",
+	"0x19a4c116","0x1e376c08","0x2748774c","0x34b0bcb5",
+	"0x391c0cb3","0x4ed8aa4a","0x5b9cca4f","0x682e6ff3",
+	"0x748f82ee","0x78a5636f","0x84c87814","0x8cc70208",
+	"0x90befffa","0xa4506ceb","0xbef9a3f7","0xc67178f2","0");
+$code.=<<___	if (!$LENDIAN);
+.long	0x00010203,0x10111213,0x10111213,0x10111213
+.long	0x00010203,0x04050607,0x10111213,0x10111213
+.long	0x00010203,0x04050607,0x08090a0b,0x10111213
+___
+$code.=<<___	if ($LENDIAN);	# word-swapped
+.long	0x10111213,0x10111213,0x10111213,0x00010203
+.long	0x10111213,0x10111213,0x04050607,0x00010203
+.long	0x10111213,0x08090a0b,0x04050607,0x00010203
+___
+}
+$code.=<<___;
+.asciz	"SHA${bits} for PowerISA 2.07, CRYPTOGAMS by <appro\@openssl.org>"
+.align	2
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/build.info
new file mode 100644
index 000000000..5dd5a9941
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/build.info
@@ -0,0 +1,89 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        sha1dgst.c sha1_one.c sha256.c sha512.c {- $target{sha1_asm_src} -} \
+        {- $target{keccak1600_asm_src} -}
+
+GENERATE[sha1-586.s]=asm/sha1-586.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+DEPEND[sha1-586.s]=../perlasm/x86asm.pl
+GENERATE[sha256-586.s]=asm/sha256-586.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+DEPEND[sha256-586.s]=../perlasm/x86asm.pl
+GENERATE[sha512-586.s]=asm/sha512-586.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+DEPEND[sha512-586.s]=../perlasm/x86asm.pl
+
+GENERATE[sha1-ia64.s]=asm/sha1-ia64.pl $(LIB_CFLAGS) $(LIB_CPPFLAGS)
+GENERATE[sha256-ia64.s]=asm/sha512-ia64.pl $(LIB_CFLAGS) $(LIB_CPPFLAGS)
+GENERATE[sha512-ia64.s]=asm/sha512-ia64.pl $(LIB_CFLAGS) $(LIB_CPPFLAGS)
+
+GENERATE[sha1-alpha.S]=asm/sha1-alpha.pl $(PERLASM_SCHEME)
+
+GENERATE[sha1-x86_64.s]=asm/sha1-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[sha1-mb-x86_64.s]=asm/sha1-mb-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[sha256-x86_64.s]=asm/sha512-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[sha256-mb-x86_64.s]=asm/sha256-mb-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[sha512-x86_64.s]=asm/sha512-x86_64.pl $(PERLASM_SCHEME)
+GENERATE[keccak1600-x86_64.s]=asm/keccak1600-x86_64.pl $(PERLASM_SCHEME)
+
+GENERATE[sha1-sparcv9.S]=asm/sha1-sparcv9.pl $(PERLASM_SCHEME)
+INCLUDE[sha1-sparcv9.o]=..
+GENERATE[sha256-sparcv9.S]=asm/sha512-sparcv9.pl $(PERLASM_SCHEME)
+INCLUDE[sha256-sparcv9.o]=..
+GENERATE[sha512-sparcv9.S]=asm/sha512-sparcv9.pl $(PERLASM_SCHEME)
+INCLUDE[sha512-sparcv9.o]=..
+
+GENERATE[sha1-ppc.s]=asm/sha1-ppc.pl $(PERLASM_SCHEME)
+GENERATE[sha256-ppc.s]=asm/sha512-ppc.pl $(PERLASM_SCHEME)
+GENERATE[sha512-ppc.s]=asm/sha512-ppc.pl $(PERLASM_SCHEME)
+GENERATE[sha256p8-ppc.s]=asm/sha512p8-ppc.pl $(PERLASM_SCHEME)
+GENERATE[sha512p8-ppc.s]=asm/sha512p8-ppc.pl $(PERLASM_SCHEME)
+GENERATE[keccak1600-ppc64.s]=asm/keccak1600-ppc64.pl $(PERLASM_SCHEME)
+
+GENERATE[sha1-parisc.s]=asm/sha1-parisc.pl $(PERLASM_SCHEME)
+GENERATE[sha256-parisc.s]=asm/sha512-parisc.pl $(PERLASM_SCHEME)
+GENERATE[sha512-parisc.s]=asm/sha512-parisc.pl $(PERLASM_SCHEME)
+
+GENERATE[sha1-mips.S]=asm/sha1-mips.pl $(PERLASM_SCHEME)
+INCLUDE[sha1-mips.o]=..
+GENERATE[sha256-mips.S]=asm/sha512-mips.pl $(PERLASM_SCHEME)
+INCLUDE[sha256-mips.o]=..
+GENERATE[sha512-mips.S]=asm/sha512-mips.pl $(PERLASM_SCHEME)
+INCLUDE[sha512-mips.o]=..
+
+GENERATE[sha1-armv4-large.S]=asm/sha1-armv4-large.pl $(PERLASM_SCHEME)
+INCLUDE[sha1-armv4-large.o]=..
+GENERATE[sha256-armv4.S]=asm/sha256-armv4.pl $(PERLASM_SCHEME)
+INCLUDE[sha256-armv4.o]=..
+GENERATE[sha512-armv4.S]=asm/sha512-armv4.pl $(PERLASM_SCHEME)
+INCLUDE[sha512-armv4.o]=..
+GENERATE[keccak1600-armv4.S]=asm/keccak1600-armv4.pl $(PERLASM_SCHEME)
+INCLUDE[keccak1600-armv4.o]=..
+
+GENERATE[sha1-armv8.S]=asm/sha1-armv8.pl $(PERLASM_SCHEME)
+INCLUDE[sha1-armv8.o]=..
+GENERATE[sha256-armv8.S]=asm/sha512-armv8.pl $(PERLASM_SCHEME)
+INCLUDE[sha256-armv8.o]=..
+GENERATE[sha512-armv8.S]=asm/sha512-armv8.pl $(PERLASM_SCHEME)
+INCLUDE[sha512-armv8.o]=..
+GENERATE[keccak1600-armv8.S]=asm/keccak1600-armv8.pl $(PERLASM_SCHEME)
+
+GENERATE[sha1-s390x.S]=asm/sha1-s390x.pl $(PERLASM_SCHEME)
+INCLUDE[sha1-s390x.o]=..
+GENERATE[sha256-s390x.S]=asm/sha512-s390x.pl $(PERLASM_SCHEME)
+INCLUDE[sha256-s390x.o]=..
+GENERATE[sha512-s390x.S]=asm/sha512-s390x.pl $(PERLASM_SCHEME)
+INCLUDE[sha512-s390x.o]=..
+GENERATE[keccak1600-s390x.S]=asm/keccak1600-s390x.pl $(PERLASM_SCHEME)
+
+BEGINRAW[Makefile(unix)]
+##### SHA assembler implementations
+
+# GNU make "catch all"
+{- $builddir -}/sha1-%.S:	{- $sourcedir -}/asm/sha1-%.pl
+	CC="$(CC)" $(PERL) $< $(PERLASM_SCHEME) $@
+{- $builddir -}/sha256-%.S:	{- $sourcedir -}/asm/sha512-%.pl
+	CC="$(CC)" $(PERL) $< $(PERLASM_SCHEME) $@
+{- $builddir -}/sha512-%.S:	{- $sourcedir -}/asm/sha512-%.pl
+	CC="$(CC)" $(PERL) $< $(PERLASM_SCHEME) $@
+ENDRAW[Makefile(unix)]
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/keccak1600.c b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/keccak1600.c
new file mode 100644
index 000000000..e7223486a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/keccak1600.c
@@ -0,0 +1,1246 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/e_os2.h>
+#include <string.h>
+#include <assert.h>
+
+size_t SHA3_absorb(uint64_t A[5][5], const unsigned char *inp, size_t len,
+                   size_t r);
+void SHA3_squeeze(uint64_t A[5][5], unsigned char *out, size_t len, size_t r);
+
+#if !defined(KECCAK1600_ASM) || !defined(SELFTEST)
+
+/*
+ * Choose some sensible defaults
+ */
+#if !defined(KECCAK_REF) && !defined(KECCAK_1X) && !defined(KECCAK_1X_ALT) && \
+    !defined(KECCAK_2X) && !defined(KECCAK_INPLACE)
+# define KECCAK_2X      /* default to KECCAK_2X variant */
+#endif
+
+#if defined(__i386) || defined(__i386__) || defined(_M_IX86)
+# define KECCAK_COMPLEMENTING_TRANSFORM
+#endif
+
+#if defined(__x86_64__) || defined(__aarch64__) || \
+    defined(__mips64) || defined(__ia64) || \
+    (defined(__VMS) && !defined(__vax))
+/*
+ * These are available even in ILP32 flavours, but even then they are
+ * capable of performing 64-bit operations as efficiently as in *P64.
+ * Since it's not given that we can use sizeof(void *), just shunt it.
+ */
+# define BIT_INTERLEAVE (0)
+#else
+# define BIT_INTERLEAVE (sizeof(void *) < 8)
+#endif
+
+#define ROL32(a, offset) (((a) << (offset)) | ((a) >> ((32 - (offset)) & 31)))
+
+static uint64_t ROL64(uint64_t val, int offset)
+{
+    if (offset == 0) {
+        return val;
+    } else if (!BIT_INTERLEAVE) {
+        return (val << offset) | (val >> (64-offset));
+    } else {
+        uint32_t hi = (uint32_t)(val >> 32), lo = (uint32_t)val;
+
+        if (offset & 1) {
+            uint32_t tmp = hi;
+
+            offset >>= 1;
+            hi = ROL32(lo, offset);
+            lo = ROL32(tmp, offset + 1);
+        } else {
+            offset >>= 1;
+            lo = ROL32(lo, offset);
+            hi = ROL32(hi, offset);
+        }
+
+        return ((uint64_t)hi << 32) | lo;
+    }
+}
+
+static const unsigned char rhotates[5][5] = {
+    {  0,  1, 62, 28, 27 },
+    { 36, 44,  6, 55, 20 },
+    {  3, 10, 43, 25, 39 },
+    { 41, 45, 15, 21,  8 },
+    { 18,  2, 61, 56, 14 }
+};
+
+static const uint64_t iotas[] = {
+    BIT_INTERLEAVE ? 0x0000000000000001U : 0x0000000000000001U,
+    BIT_INTERLEAVE ? 0x0000008900000000U : 0x0000000000008082U,
+    BIT_INTERLEAVE ? 0x8000008b00000000U : 0x800000000000808aU,
+    BIT_INTERLEAVE ? 0x8000808000000000U : 0x8000000080008000U,
+    BIT_INTERLEAVE ? 0x0000008b00000001U : 0x000000000000808bU,
+    BIT_INTERLEAVE ? 0x0000800000000001U : 0x0000000080000001U,
+    BIT_INTERLEAVE ? 0x8000808800000001U : 0x8000000080008081U,
+    BIT_INTERLEAVE ? 0x8000008200000001U : 0x8000000000008009U,
+    BIT_INTERLEAVE ? 0x0000000b00000000U : 0x000000000000008aU,
+    BIT_INTERLEAVE ? 0x0000000a00000000U : 0x0000000000000088U,
+    BIT_INTERLEAVE ? 0x0000808200000001U : 0x0000000080008009U,
+    BIT_INTERLEAVE ? 0x0000800300000000U : 0x000000008000000aU,
+    BIT_INTERLEAVE ? 0x0000808b00000001U : 0x000000008000808bU,
+    BIT_INTERLEAVE ? 0x8000000b00000001U : 0x800000000000008bU,
+    BIT_INTERLEAVE ? 0x8000008a00000001U : 0x8000000000008089U,
+    BIT_INTERLEAVE ? 0x8000008100000001U : 0x8000000000008003U,
+    BIT_INTERLEAVE ? 0x8000008100000000U : 0x8000000000008002U,
+    BIT_INTERLEAVE ? 0x8000000800000000U : 0x8000000000000080U,
+    BIT_INTERLEAVE ? 0x0000008300000000U : 0x000000000000800aU,
+    BIT_INTERLEAVE ? 0x8000800300000000U : 0x800000008000000aU,
+    BIT_INTERLEAVE ? 0x8000808800000001U : 0x8000000080008081U,
+    BIT_INTERLEAVE ? 0x8000008800000000U : 0x8000000000008080U,
+    BIT_INTERLEAVE ? 0x0000800000000001U : 0x0000000080000001U,
+    BIT_INTERLEAVE ? 0x8000808200000000U : 0x8000000080008008U
+};
+
+#if defined(KECCAK_REF)
+/*
+ * This is straightforward or "maximum clarity" implementation aiming
+ * to resemble section 3.2 of the FIPS PUB 202 "SHA-3 Standard:
+ * Permutation-Based Hash and Extendible-Output Functions" as much as
+ * possible. With one caveat. Because of the way C stores matrices,
+ * references to A[x,y] in the specification are presented as A[y][x].
+ * Implementation unrolls inner x-loops so that modulo 5 operations are
+ * explicitly pre-computed.
+ */
+static void Theta(uint64_t A[5][5])
+{
+    uint64_t C[5], D[5];
+    size_t y;
+
+    C[0] = A[0][0];
+    C[1] = A[0][1];
+    C[2] = A[0][2];
+    C[3] = A[0][3];
+    C[4] = A[0][4];
+
+    for (y = 1; y < 5; y++) {
+        C[0] ^= A[y][0];
+        C[1] ^= A[y][1];
+        C[2] ^= A[y][2];
+        C[3] ^= A[y][3];
+        C[4] ^= A[y][4];
+    }
+
+    D[0] = ROL64(C[1], 1) ^ C[4];
+    D[1] = ROL64(C[2], 1) ^ C[0];
+    D[2] = ROL64(C[3], 1) ^ C[1];
+    D[3] = ROL64(C[4], 1) ^ C[2];
+    D[4] = ROL64(C[0], 1) ^ C[3];
+
+    for (y = 0; y < 5; y++) {
+        A[y][0] ^= D[0];
+        A[y][1] ^= D[1];
+        A[y][2] ^= D[2];
+        A[y][3] ^= D[3];
+        A[y][4] ^= D[4];
+    }
+}
+
+static void Rho(uint64_t A[5][5])
+{
+    size_t y;
+
+    for (y = 0; y < 5; y++) {
+        A[y][0] = ROL64(A[y][0], rhotates[y][0]);
+        A[y][1] = ROL64(A[y][1], rhotates[y][1]);
+        A[y][2] = ROL64(A[y][2], rhotates[y][2]);
+        A[y][3] = ROL64(A[y][3], rhotates[y][3]);
+        A[y][4] = ROL64(A[y][4], rhotates[y][4]);
+    }
+}
+
+static void Pi(uint64_t A[5][5])
+{
+    uint64_t T[5][5];
+
+    /*
+     * T = A
+     * A[y][x] = T[x][(3*y+x)%5]
+     */
+    memcpy(T, A, sizeof(T));
+
+    A[0][0] = T[0][0];
+    A[0][1] = T[1][1];
+    A[0][2] = T[2][2];
+    A[0][3] = T[3][3];
+    A[0][4] = T[4][4];
+
+    A[1][0] = T[0][3];
+    A[1][1] = T[1][4];
+    A[1][2] = T[2][0];
+    A[1][3] = T[3][1];
+    A[1][4] = T[4][2];
+
+    A[2][0] = T[0][1];
+    A[2][1] = T[1][2];
+    A[2][2] = T[2][3];
+    A[2][3] = T[3][4];
+    A[2][4] = T[4][0];
+
+    A[3][0] = T[0][4];
+    A[3][1] = T[1][0];
+    A[3][2] = T[2][1];
+    A[3][3] = T[3][2];
+    A[3][4] = T[4][3];
+
+    A[4][0] = T[0][2];
+    A[4][1] = T[1][3];
+    A[4][2] = T[2][4];
+    A[4][3] = T[3][0];
+    A[4][4] = T[4][1];
+}
+
+static void Chi(uint64_t A[5][5])
+{
+    uint64_t C[5];
+    size_t y;
+
+    for (y = 0; y < 5; y++) {
+        C[0] = A[y][0] ^ (~A[y][1] & A[y][2]);
+        C[1] = A[y][1] ^ (~A[y][2] & A[y][3]);
+        C[2] = A[y][2] ^ (~A[y][3] & A[y][4]);
+        C[3] = A[y][3] ^ (~A[y][4] & A[y][0]);
+        C[4] = A[y][4] ^ (~A[y][0] & A[y][1]);
+
+        A[y][0] = C[0];
+        A[y][1] = C[1];
+        A[y][2] = C[2];
+        A[y][3] = C[3];
+        A[y][4] = C[4];
+    }
+}
+
+static void Iota(uint64_t A[5][5], size_t i)
+{
+    assert(i < (sizeof(iotas) / sizeof(iotas[0])));
+    A[0][0] ^= iotas[i];
+}
+
+static void KeccakF1600(uint64_t A[5][5])
+{
+    size_t i;
+
+    for (i = 0; i < 24; i++) {
+        Theta(A);
+        Rho(A);
+        Pi(A);
+        Chi(A);
+        Iota(A, i);
+    }
+}
+
+#elif defined(KECCAK_1X)
+/*
+ * This implementation is optimization of above code featuring unroll
+ * of even y-loops, their fusion and code motion. It also minimizes
+ * temporary storage. Compiler would normally do all these things for
+ * you, purpose of manual optimization is to provide "unobscured"
+ * reference for assembly implementation [in case this approach is
+ * chosen for implementation on some platform]. In the nutshell it's
+ * equivalent of "plane-per-plane processing" approach discussed in
+ * section 2.4 of "Keccak implementation overview".
+ */
+static void Round(uint64_t A[5][5], size_t i)
+{
+    uint64_t C[5], E[2];        /* registers */
+    uint64_t D[5], T[2][5];     /* memory    */
+
+    assert(i < (sizeof(iotas) / sizeof(iotas[0])));
+
+    C[0] = A[0][0] ^ A[1][0] ^ A[2][0] ^ A[3][0] ^ A[4][0];
+    C[1] = A[0][1] ^ A[1][1] ^ A[2][1] ^ A[3][1] ^ A[4][1];
+    C[2] = A[0][2] ^ A[1][2] ^ A[2][2] ^ A[3][2] ^ A[4][2];
+    C[3] = A[0][3] ^ A[1][3] ^ A[2][3] ^ A[3][3] ^ A[4][3];
+    C[4] = A[0][4] ^ A[1][4] ^ A[2][4] ^ A[3][4] ^ A[4][4];
+
+#if defined(__arm__)
+    D[1] = E[0] = ROL64(C[2], 1) ^ C[0];
+    D[4] = E[1] = ROL64(C[0], 1) ^ C[3];
+    D[0] = C[0] = ROL64(C[1], 1) ^ C[4];
+    D[2] = C[1] = ROL64(C[3], 1) ^ C[1];
+    D[3] = C[2] = ROL64(C[4], 1) ^ C[2];
+
+    T[0][0] = A[3][0] ^ C[0]; /* borrow T[0][0] */
+    T[0][1] = A[0][1] ^ E[0]; /* D[1] */
+    T[0][2] = A[0][2] ^ C[1]; /* D[2] */
+    T[0][3] = A[0][3] ^ C[2]; /* D[3] */
+    T[0][4] = A[0][4] ^ E[1]; /* D[4] */
+
+    C[3] = ROL64(A[3][3] ^ C[2], rhotates[3][3]);   /* D[3] */
+    C[4] = ROL64(A[4][4] ^ E[1], rhotates[4][4]);   /* D[4] */
+    C[0] =       A[0][0] ^ C[0]; /* rotate by 0 */  /* D[0] */
+    C[2] = ROL64(A[2][2] ^ C[1], rhotates[2][2]);   /* D[2] */
+    C[1] = ROL64(A[1][1] ^ E[0], rhotates[1][1]);   /* D[1] */
+#else
+    D[0] = ROL64(C[1], 1) ^ C[4];
+    D[1] = ROL64(C[2], 1) ^ C[0];
+    D[2] = ROL64(C[3], 1) ^ C[1];
+    D[3] = ROL64(C[4], 1) ^ C[2];
+    D[4] = ROL64(C[0], 1) ^ C[3];
+
+    T[0][0] = A[3][0] ^ D[0]; /* borrow T[0][0] */
+    T[0][1] = A[0][1] ^ D[1];
+    T[0][2] = A[0][2] ^ D[2];
+    T[0][3] = A[0][3] ^ D[3];
+    T[0][4] = A[0][4] ^ D[4];
+
+    C[0] =       A[0][0] ^ D[0]; /* rotate by 0 */
+    C[1] = ROL64(A[1][1] ^ D[1], rhotates[1][1]);
+    C[2] = ROL64(A[2][2] ^ D[2], rhotates[2][2]);
+    C[3] = ROL64(A[3][3] ^ D[3], rhotates[3][3]);
+    C[4] = ROL64(A[4][4] ^ D[4], rhotates[4][4]);
+#endif
+    A[0][0] = C[0] ^ (~C[1] & C[2]) ^ iotas[i];
+    A[0][1] = C[1] ^ (~C[2] & C[3]);
+    A[0][2] = C[2] ^ (~C[3] & C[4]);
+    A[0][3] = C[3] ^ (~C[4] & C[0]);
+    A[0][4] = C[4] ^ (~C[0] & C[1]);
+
+    T[1][0] = A[1][0] ^ (C[3] = D[0]);
+    T[1][1] = A[2][1] ^ (C[4] = D[1]); /* borrow T[1][1] */
+    T[1][2] = A[1][2] ^ (E[0] = D[2]);
+    T[1][3] = A[1][3] ^ (E[1] = D[3]);
+    T[1][4] = A[2][4] ^ (C[2] = D[4]); /* borrow T[1][4] */
+
+    C[0] = ROL64(T[0][3],        rhotates[0][3]);
+    C[1] = ROL64(A[1][4] ^ C[2], rhotates[1][4]);   /* D[4] */
+    C[2] = ROL64(A[2][0] ^ C[3], rhotates[2][0]);   /* D[0] */
+    C[3] = ROL64(A[3][1] ^ C[4], rhotates[3][1]);   /* D[1] */
+    C[4] = ROL64(A[4][2] ^ E[0], rhotates[4][2]);   /* D[2] */
+
+    A[1][0] = C[0] ^ (~C[1] & C[2]);
+    A[1][1] = C[1] ^ (~C[2] & C[3]);
+    A[1][2] = C[2] ^ (~C[3] & C[4]);
+    A[1][3] = C[3] ^ (~C[4] & C[0]);
+    A[1][4] = C[4] ^ (~C[0] & C[1]);
+
+    C[0] = ROL64(T[0][1],        rhotates[0][1]);
+    C[1] = ROL64(T[1][2],        rhotates[1][2]);
+    C[2] = ROL64(A[2][3] ^ D[3], rhotates[2][3]);
+    C[3] = ROL64(A[3][4] ^ D[4], rhotates[3][4]);
+    C[4] = ROL64(A[4][0] ^ D[0], rhotates[4][0]);
+
+    A[2][0] = C[0] ^ (~C[1] & C[2]);
+    A[2][1] = C[1] ^ (~C[2] & C[3]);
+    A[2][2] = C[2] ^ (~C[3] & C[4]);
+    A[2][3] = C[3] ^ (~C[4] & C[0]);
+    A[2][4] = C[4] ^ (~C[0] & C[1]);
+
+    C[0] = ROL64(T[0][4],        rhotates[0][4]);
+    C[1] = ROL64(T[1][0],        rhotates[1][0]);
+    C[2] = ROL64(T[1][1],        rhotates[2][1]); /* originally A[2][1] */
+    C[3] = ROL64(A[3][2] ^ D[2], rhotates[3][2]);
+    C[4] = ROL64(A[4][3] ^ D[3], rhotates[4][3]);
+
+    A[3][0] = C[0] ^ (~C[1] & C[2]);
+    A[3][1] = C[1] ^ (~C[2] & C[3]);
+    A[3][2] = C[2] ^ (~C[3] & C[4]);
+    A[3][3] = C[3] ^ (~C[4] & C[0]);
+    A[3][4] = C[4] ^ (~C[0] & C[1]);
+
+    C[0] = ROL64(T[0][2],        rhotates[0][2]);
+    C[1] = ROL64(T[1][3],        rhotates[1][3]);
+    C[2] = ROL64(T[1][4],        rhotates[2][4]); /* originally A[2][4] */
+    C[3] = ROL64(T[0][0],        rhotates[3][0]); /* originally A[3][0] */
+    C[4] = ROL64(A[4][1] ^ D[1], rhotates[4][1]);
+
+    A[4][0] = C[0] ^ (~C[1] & C[2]);
+    A[4][1] = C[1] ^ (~C[2] & C[3]);
+    A[4][2] = C[2] ^ (~C[3] & C[4]);
+    A[4][3] = C[3] ^ (~C[4] & C[0]);
+    A[4][4] = C[4] ^ (~C[0] & C[1]);
+}
+
+static void KeccakF1600(uint64_t A[5][5])
+{
+    size_t i;
+
+    for (i = 0; i < 24; i++) {
+        Round(A, i);
+    }
+}
+
+#elif defined(KECCAK_1X_ALT)
+/*
+ * This is variant of above KECCAK_1X that reduces requirement for
+ * temporary storage even further, but at cost of more updates to A[][].
+ * It's less suitable if A[][] is memory bound, but better if it's
+ * register bound.
+ */
+
+static void Round(uint64_t A[5][5], size_t i)
+{
+    uint64_t C[5], D[5];
+
+    assert(i < (sizeof(iotas) / sizeof(iotas[0])));
+
+    C[0] = A[0][0] ^ A[1][0] ^ A[2][0] ^ A[3][0] ^ A[4][0];
+    C[1] = A[0][1] ^ A[1][1] ^ A[2][1] ^ A[3][1] ^ A[4][1];
+    C[2] = A[0][2] ^ A[1][2] ^ A[2][2] ^ A[3][2] ^ A[4][2];
+    C[3] = A[0][3] ^ A[1][3] ^ A[2][3] ^ A[3][3] ^ A[4][3];
+    C[4] = A[0][4] ^ A[1][4] ^ A[2][4] ^ A[3][4] ^ A[4][4];
+
+    D[1] = C[0] ^  ROL64(C[2], 1);
+    D[2] = C[1] ^  ROL64(C[3], 1);
+    D[3] = C[2] ^= ROL64(C[4], 1);
+    D[4] = C[3] ^= ROL64(C[0], 1);
+    D[0] = C[4] ^= ROL64(C[1], 1);
+
+    A[0][1] ^= D[1];
+    A[1][1] ^= D[1];
+    A[2][1] ^= D[1];
+    A[3][1] ^= D[1];
+    A[4][1] ^= D[1];
+
+    A[0][2] ^= D[2];
+    A[1][2] ^= D[2];
+    A[2][2] ^= D[2];
+    A[3][2] ^= D[2];
+    A[4][2] ^= D[2];
+
+    A[0][3] ^= C[2];
+    A[1][3] ^= C[2];
+    A[2][3] ^= C[2];
+    A[3][3] ^= C[2];
+    A[4][3] ^= C[2];
+
+    A[0][4] ^= C[3];
+    A[1][4] ^= C[3];
+    A[2][4] ^= C[3];
+    A[3][4] ^= C[3];
+    A[4][4] ^= C[3];
+
+    A[0][0] ^= C[4];
+    A[1][0] ^= C[4];
+    A[2][0] ^= C[4];
+    A[3][0] ^= C[4];
+    A[4][0] ^= C[4];
+
+    C[1] = A[0][1];
+    C[2] = A[0][2];
+    C[3] = A[0][3];
+    C[4] = A[0][4];
+
+    A[0][1] = ROL64(A[1][1], rhotates[1][1]);
+    A[0][2] = ROL64(A[2][2], rhotates[2][2]);
+    A[0][3] = ROL64(A[3][3], rhotates[3][3]);
+    A[0][4] = ROL64(A[4][4], rhotates[4][4]);
+
+    A[1][1] = ROL64(A[1][4], rhotates[1][4]);
+    A[2][2] = ROL64(A[2][3], rhotates[2][3]);
+    A[3][3] = ROL64(A[3][2], rhotates[3][2]);
+    A[4][4] = ROL64(A[4][1], rhotates[4][1]);
+
+    A[1][4] = ROL64(A[4][2], rhotates[4][2]);
+    A[2][3] = ROL64(A[3][4], rhotates[3][4]);
+    A[3][2] = ROL64(A[2][1], rhotates[2][1]);
+    A[4][1] = ROL64(A[1][3], rhotates[1][3]);
+
+    A[4][2] = ROL64(A[2][4], rhotates[2][4]);
+    A[3][4] = ROL64(A[4][3], rhotates[4][3]);
+    A[2][1] = ROL64(A[1][2], rhotates[1][2]);
+    A[1][3] = ROL64(A[3][1], rhotates[3][1]);
+
+    A[2][4] = ROL64(A[4][0], rhotates[4][0]);
+    A[4][3] = ROL64(A[3][0], rhotates[3][0]);
+    A[1][2] = ROL64(A[2][0], rhotates[2][0]);
+    A[3][1] = ROL64(A[1][0], rhotates[1][0]);
+
+    A[1][0] = ROL64(C[3],    rhotates[0][3]);
+    A[2][0] = ROL64(C[1],    rhotates[0][1]);
+    A[3][0] = ROL64(C[4],    rhotates[0][4]);
+    A[4][0] = ROL64(C[2],    rhotates[0][2]);
+
+    C[0] = A[0][0];
+    C[1] = A[1][0];
+    D[0] = A[0][1];
+    D[1] = A[1][1];
+
+    A[0][0] ^= (~A[0][1] & A[0][2]);
+    A[1][0] ^= (~A[1][1] & A[1][2]);
+    A[0][1] ^= (~A[0][2] & A[0][3]);
+    A[1][1] ^= (~A[1][2] & A[1][3]);
+    A[0][2] ^= (~A[0][3] & A[0][4]);
+    A[1][2] ^= (~A[1][3] & A[1][4]);
+    A[0][3] ^= (~A[0][4] & C[0]);
+    A[1][3] ^= (~A[1][4] & C[1]);
+    A[0][4] ^= (~C[0]    & D[0]);
+    A[1][4] ^= (~C[1]    & D[1]);
+
+    C[2] = A[2][0];
+    C[3] = A[3][0];
+    D[2] = A[2][1];
+    D[3] = A[3][1];
+
+    A[2][0] ^= (~A[2][1] & A[2][2]);
+    A[3][0] ^= (~A[3][1] & A[3][2]);
+    A[2][1] ^= (~A[2][2] & A[2][3]);
+    A[3][1] ^= (~A[3][2] & A[3][3]);
+    A[2][2] ^= (~A[2][3] & A[2][4]);
+    A[3][2] ^= (~A[3][3] & A[3][4]);
+    A[2][3] ^= (~A[2][4] & C[2]);
+    A[3][3] ^= (~A[3][4] & C[3]);
+    A[2][4] ^= (~C[2]    & D[2]);
+    A[3][4] ^= (~C[3]    & D[3]);
+
+    C[4] = A[4][0];
+    D[4] = A[4][1];
+
+    A[4][0] ^= (~A[4][1] & A[4][2]);
+    A[4][1] ^= (~A[4][2] & A[4][3]);
+    A[4][2] ^= (~A[4][3] & A[4][4]);
+    A[4][3] ^= (~A[4][4] & C[4]);
+    A[4][4] ^= (~C[4]    & D[4]);
+    A[0][0] ^= iotas[i];
+}
+
+static void KeccakF1600(uint64_t A[5][5])
+{
+    size_t i;
+
+    for (i = 0; i < 24; i++) {
+        Round(A, i);
+    }
+}
+
+#elif defined(KECCAK_2X)
+/*
+ * This implementation is variant of KECCAK_1X above with outer-most
+ * round loop unrolled twice. This allows to take temporary storage
+ * out of round procedure and simplify references to it by alternating
+ * it with actual data (see round loop below). Originally it was meant
+ * rather as reference for an assembly implementation, but it seems to
+ * play best with compilers [as well as provide best instruction per
+ * processed byte ratio at minimal round unroll factor]...
+ */
+static void Round(uint64_t R[5][5], uint64_t A[5][5], size_t i)
+{
+    uint64_t C[5], D[5];
+
+    assert(i < (sizeof(iotas) / sizeof(iotas[0])));
+
+    C[0] = A[0][0] ^ A[1][0] ^ A[2][0] ^ A[3][0] ^ A[4][0];
+    C[1] = A[0][1] ^ A[1][1] ^ A[2][1] ^ A[3][1] ^ A[4][1];
+    C[2] = A[0][2] ^ A[1][2] ^ A[2][2] ^ A[3][2] ^ A[4][2];
+    C[3] = A[0][3] ^ A[1][3] ^ A[2][3] ^ A[3][3] ^ A[4][3];
+    C[4] = A[0][4] ^ A[1][4] ^ A[2][4] ^ A[3][4] ^ A[4][4];
+
+    D[0] = ROL64(C[1], 1) ^ C[4];
+    D[1] = ROL64(C[2], 1) ^ C[0];
+    D[2] = ROL64(C[3], 1) ^ C[1];
+    D[3] = ROL64(C[4], 1) ^ C[2];
+    D[4] = ROL64(C[0], 1) ^ C[3];
+
+    C[0] =       A[0][0] ^ D[0]; /* rotate by 0 */
+    C[1] = ROL64(A[1][1] ^ D[1], rhotates[1][1]);
+    C[2] = ROL64(A[2][2] ^ D[2], rhotates[2][2]);
+    C[3] = ROL64(A[3][3] ^ D[3], rhotates[3][3]);
+    C[4] = ROL64(A[4][4] ^ D[4], rhotates[4][4]);
+
+#ifdef KECCAK_COMPLEMENTING_TRANSFORM
+    R[0][0] = C[0] ^ ( C[1] | C[2]) ^ iotas[i];
+    R[0][1] = C[1] ^ (~C[2] | C[3]);
+    R[0][2] = C[2] ^ ( C[3] & C[4]);
+    R[0][3] = C[3] ^ ( C[4] | C[0]);
+    R[0][4] = C[4] ^ ( C[0] & C[1]);
+#else
+    R[0][0] = C[0] ^ (~C[1] & C[2]) ^ iotas[i];
+    R[0][1] = C[1] ^ (~C[2] & C[3]);
+    R[0][2] = C[2] ^ (~C[3] & C[4]);
+    R[0][3] = C[3] ^ (~C[4] & C[0]);
+    R[0][4] = C[4] ^ (~C[0] & C[1]);
+#endif
+
+    C[0] = ROL64(A[0][3] ^ D[3], rhotates[0][3]);
+    C[1] = ROL64(A[1][4] ^ D[4], rhotates[1][4]);
+    C[2] = ROL64(A[2][0] ^ D[0], rhotates[2][0]);
+    C[3] = ROL64(A[3][1] ^ D[1], rhotates[3][1]);
+    C[4] = ROL64(A[4][2] ^ D[2], rhotates[4][2]);
+
+#ifdef KECCAK_COMPLEMENTING_TRANSFORM
+    R[1][0] = C[0] ^ (C[1] |  C[2]);
+    R[1][1] = C[1] ^ (C[2] &  C[3]);
+    R[1][2] = C[2] ^ (C[3] | ~C[4]);
+    R[1][3] = C[3] ^ (C[4] |  C[0]);
+    R[1][4] = C[4] ^ (C[0] &  C[1]);
+#else
+    R[1][0] = C[0] ^ (~C[1] & C[2]);
+    R[1][1] = C[1] ^ (~C[2] & C[3]);
+    R[1][2] = C[2] ^ (~C[3] & C[4]);
+    R[1][3] = C[3] ^ (~C[4] & C[0]);
+    R[1][4] = C[4] ^ (~C[0] & C[1]);
+#endif
+
+    C[0] = ROL64(A[0][1] ^ D[1], rhotates[0][1]);
+    C[1] = ROL64(A[1][2] ^ D[2], rhotates[1][2]);
+    C[2] = ROL64(A[2][3] ^ D[3], rhotates[2][3]);
+    C[3] = ROL64(A[3][4] ^ D[4], rhotates[3][4]);
+    C[4] = ROL64(A[4][0] ^ D[0], rhotates[4][0]);
+
+#ifdef KECCAK_COMPLEMENTING_TRANSFORM
+    R[2][0] =  C[0] ^ ( C[1] | C[2]);
+    R[2][1] =  C[1] ^ ( C[2] & C[3]);
+    R[2][2] =  C[2] ^ (~C[3] & C[4]);
+    R[2][3] = ~C[3] ^ ( C[4] | C[0]);
+    R[2][4] =  C[4] ^ ( C[0] & C[1]);
+#else
+    R[2][0] = C[0] ^ (~C[1] & C[2]);
+    R[2][1] = C[1] ^ (~C[2] & C[3]);
+    R[2][2] = C[2] ^ (~C[3] & C[4]);
+    R[2][3] = C[3] ^ (~C[4] & C[0]);
+    R[2][4] = C[4] ^ (~C[0] & C[1]);
+#endif
+
+    C[0] = ROL64(A[0][4] ^ D[4], rhotates[0][4]);
+    C[1] = ROL64(A[1][0] ^ D[0], rhotates[1][0]);
+    C[2] = ROL64(A[2][1] ^ D[1], rhotates[2][1]);
+    C[3] = ROL64(A[3][2] ^ D[2], rhotates[3][2]);
+    C[4] = ROL64(A[4][3] ^ D[3], rhotates[4][3]);
+
+#ifdef KECCAK_COMPLEMENTING_TRANSFORM
+    R[3][0] =  C[0] ^ ( C[1] & C[2]);
+    R[3][1] =  C[1] ^ ( C[2] | C[3]);
+    R[3][2] =  C[2] ^ (~C[3] | C[4]);
+    R[3][3] = ~C[3] ^ ( C[4] & C[0]);
+    R[3][4] =  C[4] ^ ( C[0] | C[1]);
+#else
+    R[3][0] = C[0] ^ (~C[1] & C[2]);
+    R[3][1] = C[1] ^ (~C[2] & C[3]);
+    R[3][2] = C[2] ^ (~C[3] & C[4]);
+    R[3][3] = C[3] ^ (~C[4] & C[0]);
+    R[3][4] = C[4] ^ (~C[0] & C[1]);
+#endif
+
+    C[0] = ROL64(A[0][2] ^ D[2], rhotates[0][2]);
+    C[1] = ROL64(A[1][3] ^ D[3], rhotates[1][3]);
+    C[2] = ROL64(A[2][4] ^ D[4], rhotates[2][4]);
+    C[3] = ROL64(A[3][0] ^ D[0], rhotates[3][0]);
+    C[4] = ROL64(A[4][1] ^ D[1], rhotates[4][1]);
+
+#ifdef KECCAK_COMPLEMENTING_TRANSFORM
+    R[4][0] =  C[0] ^ (~C[1] & C[2]);
+    R[4][1] = ~C[1] ^ ( C[2] | C[3]);
+    R[4][2] =  C[2] ^ ( C[3] & C[4]);
+    R[4][3] =  C[3] ^ ( C[4] | C[0]);
+    R[4][4] =  C[4] ^ ( C[0] & C[1]);
+#else
+    R[4][0] = C[0] ^ (~C[1] & C[2]);
+    R[4][1] = C[1] ^ (~C[2] & C[3]);
+    R[4][2] = C[2] ^ (~C[3] & C[4]);
+    R[4][3] = C[3] ^ (~C[4] & C[0]);
+    R[4][4] = C[4] ^ (~C[0] & C[1]);
+#endif
+}
+
+static void KeccakF1600(uint64_t A[5][5])
+{
+    uint64_t T[5][5];
+    size_t i;
+
+#ifdef KECCAK_COMPLEMENTING_TRANSFORM
+    A[0][1] = ~A[0][1];
+    A[0][2] = ~A[0][2];
+    A[1][3] = ~A[1][3];
+    A[2][2] = ~A[2][2];
+    A[3][2] = ~A[3][2];
+    A[4][0] = ~A[4][0];
+#endif
+
+    for (i = 0; i < 24; i += 2) {
+        Round(T, A, i);
+        Round(A, T, i + 1);
+    }
+
+#ifdef KECCAK_COMPLEMENTING_TRANSFORM
+    A[0][1] = ~A[0][1];
+    A[0][2] = ~A[0][2];
+    A[1][3] = ~A[1][3];
+    A[2][2] = ~A[2][2];
+    A[3][2] = ~A[3][2];
+    A[4][0] = ~A[4][0];
+#endif
+}
+
+#else   /* define KECCAK_INPLACE to compile this code path */
+/*
+ * This implementation is KECCAK_1X from above combined 4 times with
+ * a twist that allows to omit temporary storage and perform in-place
+ * processing. It's discussed in section 2.5 of "Keccak implementation
+ * overview". It's likely to be best suited for processors with large
+ * register bank... On the other hand processor with large register
+ * bank can as well use KECCAK_1X_ALT, it would be as fast but much
+ * more compact...
+ */
+static void FourRounds(uint64_t A[5][5], size_t i)
+{
+    uint64_t B[5], C[5], D[5];
+
+    assert(i <= (sizeof(iotas) / sizeof(iotas[0]) - 4));
+
+    /* Round 4*n */
+    C[0] = A[0][0] ^ A[1][0] ^ A[2][0] ^ A[3][0] ^ A[4][0];
+    C[1] = A[0][1] ^ A[1][1] ^ A[2][1] ^ A[3][1] ^ A[4][1];
+    C[2] = A[0][2] ^ A[1][2] ^ A[2][2] ^ A[3][2] ^ A[4][2];
+    C[3] = A[0][3] ^ A[1][3] ^ A[2][3] ^ A[3][3] ^ A[4][3];
+    C[4] = A[0][4] ^ A[1][4] ^ A[2][4] ^ A[3][4] ^ A[4][4];
+
+    D[0] = ROL64(C[1], 1) ^ C[4];
+    D[1] = ROL64(C[2], 1) ^ C[0];
+    D[2] = ROL64(C[3], 1) ^ C[1];
+    D[3] = ROL64(C[4], 1) ^ C[2];
+    D[4] = ROL64(C[0], 1) ^ C[3];
+
+    B[0] =       A[0][0] ^ D[0]; /* rotate by 0 */
+    B[1] = ROL64(A[1][1] ^ D[1], rhotates[1][1]);
+    B[2] = ROL64(A[2][2] ^ D[2], rhotates[2][2]);
+    B[3] = ROL64(A[3][3] ^ D[3], rhotates[3][3]);
+    B[4] = ROL64(A[4][4] ^ D[4], rhotates[4][4]);
+
+    C[0] = A[0][0] = B[0] ^ (~B[1] & B[2]) ^ iotas[i];
+    C[1] = A[1][1] = B[1] ^ (~B[2] & B[3]);
+    C[2] = A[2][2] = B[2] ^ (~B[3] & B[4]);
+    C[3] = A[3][3] = B[3] ^ (~B[4] & B[0]);
+    C[4] = A[4][4] = B[4] ^ (~B[0] & B[1]);
+
+    B[0] = ROL64(A[0][3] ^ D[3], rhotates[0][3]);
+    B[1] = ROL64(A[1][4] ^ D[4], rhotates[1][4]);
+    B[2] = ROL64(A[2][0] ^ D[0], rhotates[2][0]);
+    B[3] = ROL64(A[3][1] ^ D[1], rhotates[3][1]);
+    B[4] = ROL64(A[4][2] ^ D[2], rhotates[4][2]);
+
+    C[0] ^= A[2][0] = B[0] ^ (~B[1] & B[2]);
+    C[1] ^= A[3][1] = B[1] ^ (~B[2] & B[3]);
+    C[2] ^= A[4][2] = B[2] ^ (~B[3] & B[4]);
+    C[3] ^= A[0][3] = B[3] ^ (~B[4] & B[0]);
+    C[4] ^= A[1][4] = B[4] ^ (~B[0] & B[1]);
+
+    B[0] = ROL64(A[0][1] ^ D[1], rhotates[0][1]);
+    B[1] = ROL64(A[1][2] ^ D[2], rhotates[1][2]);
+    B[2] = ROL64(A[2][3] ^ D[3], rhotates[2][3]);
+    B[3] = ROL64(A[3][4] ^ D[4], rhotates[3][4]);
+    B[4] = ROL64(A[4][0] ^ D[0], rhotates[4][0]);
+
+    C[0] ^= A[4][0] = B[0] ^ (~B[1] & B[2]);
+    C[1] ^= A[0][1] = B[1] ^ (~B[2] & B[3]);
+    C[2] ^= A[1][2] = B[2] ^ (~B[3] & B[4]);
+    C[3] ^= A[2][3] = B[3] ^ (~B[4] & B[0]);
+    C[4] ^= A[3][4] = B[4] ^ (~B[0] & B[1]);
+
+    B[0] = ROL64(A[0][4] ^ D[4], rhotates[0][4]);
+    B[1] = ROL64(A[1][0] ^ D[0], rhotates[1][0]);
+    B[2] = ROL64(A[2][1] ^ D[1], rhotates[2][1]);
+    B[3] = ROL64(A[3][2] ^ D[2], rhotates[3][2]);
+    B[4] = ROL64(A[4][3] ^ D[3], rhotates[4][3]);
+
+    C[0] ^= A[1][0] = B[0] ^ (~B[1] & B[2]);
+    C[1] ^= A[2][1] = B[1] ^ (~B[2] & B[3]);
+    C[2] ^= A[3][2] = B[2] ^ (~B[3] & B[4]);
+    C[3] ^= A[4][3] = B[3] ^ (~B[4] & B[0]);
+    C[4] ^= A[0][4] = B[4] ^ (~B[0] & B[1]);
+
+    B[0] = ROL64(A[0][2] ^ D[2], rhotates[0][2]);
+    B[1] = ROL64(A[1][3] ^ D[3], rhotates[1][3]);
+    B[2] = ROL64(A[2][4] ^ D[4], rhotates[2][4]);
+    B[3] = ROL64(A[3][0] ^ D[0], rhotates[3][0]);
+    B[4] = ROL64(A[4][1] ^ D[1], rhotates[4][1]);
+
+    C[0] ^= A[3][0] = B[0] ^ (~B[1] & B[2]);
+    C[1] ^= A[4][1] = B[1] ^ (~B[2] & B[3]);
+    C[2] ^= A[0][2] = B[2] ^ (~B[3] & B[4]);
+    C[3] ^= A[1][3] = B[3] ^ (~B[4] & B[0]);
+    C[4] ^= A[2][4] = B[4] ^ (~B[0] & B[1]);
+
+    /* Round 4*n+1 */
+    D[0] = ROL64(C[1], 1) ^ C[4];
+    D[1] = ROL64(C[2], 1) ^ C[0];
+    D[2] = ROL64(C[3], 1) ^ C[1];
+    D[3] = ROL64(C[4], 1) ^ C[2];
+    D[4] = ROL64(C[0], 1) ^ C[3];
+
+    B[0] =       A[0][0] ^ D[0]; /* rotate by 0 */
+    B[1] = ROL64(A[3][1] ^ D[1], rhotates[1][1]);
+    B[2] = ROL64(A[1][2] ^ D[2], rhotates[2][2]);
+    B[3] = ROL64(A[4][3] ^ D[3], rhotates[3][3]);
+    B[4] = ROL64(A[2][4] ^ D[4], rhotates[4][4]);
+
+    C[0] = A[0][0] = B[0] ^ (~B[1] & B[2]) ^ iotas[i + 1];
+    C[1] = A[3][1] = B[1] ^ (~B[2] & B[3]);
+    C[2] = A[1][2] = B[2] ^ (~B[3] & B[4]);
+    C[3] = A[4][3] = B[3] ^ (~B[4] & B[0]);
+    C[4] = A[2][4] = B[4] ^ (~B[0] & B[1]);
+
+    B[0] = ROL64(A[3][3] ^ D[3], rhotates[0][3]);
+    B[1] = ROL64(A[1][4] ^ D[4], rhotates[1][4]);
+    B[2] = ROL64(A[4][0] ^ D[0], rhotates[2][0]);
+    B[3] = ROL64(A[2][1] ^ D[1], rhotates[3][1]);
+    B[4] = ROL64(A[0][2] ^ D[2], rhotates[4][2]);
+
+    C[0] ^= A[4][0] = B[0] ^ (~B[1] & B[2]);
+    C[1] ^= A[2][1] = B[1] ^ (~B[2] & B[3]);
+    C[2] ^= A[0][2] = B[2] ^ (~B[3] & B[4]);
+    C[3] ^= A[3][3] = B[3] ^ (~B[4] & B[0]);
+    C[4] ^= A[1][4] = B[4] ^ (~B[0] & B[1]);
+
+    B[0] = ROL64(A[1][1] ^ D[1], rhotates[0][1]);
+    B[1] = ROL64(A[4][2] ^ D[2], rhotates[1][2]);
+    B[2] = ROL64(A[2][3] ^ D[3], rhotates[2][3]);
+    B[3] = ROL64(A[0][4] ^ D[4], rhotates[3][4]);
+    B[4] = ROL64(A[3][0] ^ D[0], rhotates[4][0]);
+
+    C[0] ^= A[3][0] = B[0] ^ (~B[1] & B[2]);
+    C[1] ^= A[1][1] = B[1] ^ (~B[2] & B[3]);
+    C[2] ^= A[4][2] = B[2] ^ (~B[3] & B[4]);
+    C[3] ^= A[2][3] = B[3] ^ (~B[4] & B[0]);
+    C[4] ^= A[0][4] = B[4] ^ (~B[0] & B[1]);
+
+    B[0] = ROL64(A[4][4] ^ D[4], rhotates[0][4]);
+    B[1] = ROL64(A[2][0] ^ D[0], rhotates[1][0]);
+    B[2] = ROL64(A[0][1] ^ D[1], rhotates[2][1]);
+    B[3] = ROL64(A[3][2] ^ D[2], rhotates[3][2]);
+    B[4] = ROL64(A[1][3] ^ D[3], rhotates[4][3]);
+
+    C[0] ^= A[2][0] = B[0] ^ (~B[1] & B[2]);
+    C[1] ^= A[0][1] = B[1] ^ (~B[2] & B[3]);
+    C[2] ^= A[3][2] = B[2] ^ (~B[3] & B[4]);
+    C[3] ^= A[1][3] = B[3] ^ (~B[4] & B[0]);
+    C[4] ^= A[4][4] = B[4] ^ (~B[0] & B[1]);
+
+    B[0] = ROL64(A[2][2] ^ D[2], rhotates[0][2]);
+    B[1] = ROL64(A[0][3] ^ D[3], rhotates[1][3]);
+    B[2] = ROL64(A[3][4] ^ D[4], rhotates[2][4]);
+    B[3] = ROL64(A[1][0] ^ D[0], rhotates[3][0]);
+    B[4] = ROL64(A[4][1] ^ D[1], rhotates[4][1]);
+
+    C[0] ^= A[1][0] = B[0] ^ (~B[1] & B[2]);
+    C[1] ^= A[4][1] = B[1] ^ (~B[2] & B[3]);
+    C[2] ^= A[2][2] = B[2] ^ (~B[3] & B[4]);
+    C[3] ^= A[0][3] = B[3] ^ (~B[4] & B[0]);
+    C[4] ^= A[3][4] = B[4] ^ (~B[0] & B[1]);
+
+    /* Round 4*n+2 */
+    D[0] = ROL64(C[1], 1) ^ C[4];
+    D[1] = ROL64(C[2], 1) ^ C[0];
+    D[2] = ROL64(C[3], 1) ^ C[1];
+    D[3] = ROL64(C[4], 1) ^ C[2];
+    D[4] = ROL64(C[0], 1) ^ C[3];
+
+    B[0] =       A[0][0] ^ D[0]; /* rotate by 0 */
+    B[1] = ROL64(A[2][1] ^ D[1], rhotates[1][1]);
+    B[2] = ROL64(A[4][2] ^ D[2], rhotates[2][2]);
+    B[3] = ROL64(A[1][3] ^ D[3], rhotates[3][3]);
+    B[4] = ROL64(A[3][4] ^ D[4], rhotates[4][4]);
+
+    C[0] = A[0][0] = B[0] ^ (~B[1] & B[2]) ^ iotas[i + 2];
+    C[1] = A[2][1] = B[1] ^ (~B[2] & B[3]);
+    C[2] = A[4][2] = B[2] ^ (~B[3] & B[4]);
+    C[3] = A[1][3] = B[3] ^ (~B[4] & B[0]);
+    C[4] = A[3][4] = B[4] ^ (~B[0] & B[1]);
+
+    B[0] = ROL64(A[4][3] ^ D[3], rhotates[0][3]);
+    B[1] = ROL64(A[1][4] ^ D[4], rhotates[1][4]);
+    B[2] = ROL64(A[3][0] ^ D[0], rhotates[2][0]);
+    B[3] = ROL64(A[0][1] ^ D[1], rhotates[3][1]);
+    B[4] = ROL64(A[2][2] ^ D[2], rhotates[4][2]);
+
+    C[0] ^= A[3][0] = B[0] ^ (~B[1] & B[2]);
+    C[1] ^= A[0][1] = B[1] ^ (~B[2] & B[3]);
+    C[2] ^= A[2][2] = B[2] ^ (~B[3] & B[4]);
+    C[3] ^= A[4][3] = B[3] ^ (~B[4] & B[0]);
+    C[4] ^= A[1][4] = B[4] ^ (~B[0] & B[1]);
+
+    B[0] = ROL64(A[3][1] ^ D[1], rhotates[0][1]);
+    B[1] = ROL64(A[0][2] ^ D[2], rhotates[1][2]);
+    B[2] = ROL64(A[2][3] ^ D[3], rhotates[2][3]);
+    B[3] = ROL64(A[4][4] ^ D[4], rhotates[3][4]);
+    B[4] = ROL64(A[1][0] ^ D[0], rhotates[4][0]);
+
+    C[0] ^= A[1][0] = B[0] ^ (~B[1] & B[2]);
+    C[1] ^= A[3][1] = B[1] ^ (~B[2] & B[3]);
+    C[2] ^= A[0][2] = B[2] ^ (~B[3] & B[4]);
+    C[3] ^= A[2][3] = B[3] ^ (~B[4] & B[0]);
+    C[4] ^= A[4][4] = B[4] ^ (~B[0] & B[1]);
+
+    B[0] = ROL64(A[2][4] ^ D[4], rhotates[0][4]);
+    B[1] = ROL64(A[4][0] ^ D[0], rhotates[1][0]);
+    B[2] = ROL64(A[1][1] ^ D[1], rhotates[2][1]);
+    B[3] = ROL64(A[3][2] ^ D[2], rhotates[3][2]);
+    B[4] = ROL64(A[0][3] ^ D[3], rhotates[4][3]);
+
+    C[0] ^= A[4][0] = B[0] ^ (~B[1] & B[2]);
+    C[1] ^= A[1][1] = B[1] ^ (~B[2] & B[3]);
+    C[2] ^= A[3][2] = B[2] ^ (~B[3] & B[4]);
+    C[3] ^= A[0][3] = B[3] ^ (~B[4] & B[0]);
+    C[4] ^= A[2][4] = B[4] ^ (~B[0] & B[1]);
+
+    B[0] = ROL64(A[1][2] ^ D[2], rhotates[0][2]);
+    B[1] = ROL64(A[3][3] ^ D[3], rhotates[1][3]);
+    B[2] = ROL64(A[0][4] ^ D[4], rhotates[2][4]);
+    B[3] = ROL64(A[2][0] ^ D[0], rhotates[3][0]);
+    B[4] = ROL64(A[4][1] ^ D[1], rhotates[4][1]);
+
+    C[0] ^= A[2][0] = B[0] ^ (~B[1] & B[2]);
+    C[1] ^= A[4][1] = B[1] ^ (~B[2] & B[3]);
+    C[2] ^= A[1][2] = B[2] ^ (~B[3] & B[4]);
+    C[3] ^= A[3][3] = B[3] ^ (~B[4] & B[0]);
+    C[4] ^= A[0][4] = B[4] ^ (~B[0] & B[1]);
+
+    /* Round 4*n+3 */
+    D[0] = ROL64(C[1], 1) ^ C[4];
+    D[1] = ROL64(C[2], 1) ^ C[0];
+    D[2] = ROL64(C[3], 1) ^ C[1];
+    D[3] = ROL64(C[4], 1) ^ C[2];
+    D[4] = ROL64(C[0], 1) ^ C[3];
+
+    B[0] =       A[0][0] ^ D[0]; /* rotate by 0 */
+    B[1] = ROL64(A[0][1] ^ D[1], rhotates[1][1]);
+    B[2] = ROL64(A[0][2] ^ D[2], rhotates[2][2]);
+    B[3] = ROL64(A[0][3] ^ D[3], rhotates[3][3]);
+    B[4] = ROL64(A[0][4] ^ D[4], rhotates[4][4]);
+
+    /* C[0] = */ A[0][0] = B[0] ^ (~B[1] & B[2]) ^ iotas[i + 3];
+    /* C[1] = */ A[0][1] = B[1] ^ (~B[2] & B[3]);
+    /* C[2] = */ A[0][2] = B[2] ^ (~B[3] & B[4]);
+    /* C[3] = */ A[0][3] = B[3] ^ (~B[4] & B[0]);
+    /* C[4] = */ A[0][4] = B[4] ^ (~B[0] & B[1]);
+
+    B[0] = ROL64(A[1][3] ^ D[3], rhotates[0][3]);
+    B[1] = ROL64(A[1][4] ^ D[4], rhotates[1][4]);
+    B[2] = ROL64(A[1][0] ^ D[0], rhotates[2][0]);
+    B[3] = ROL64(A[1][1] ^ D[1], rhotates[3][1]);
+    B[4] = ROL64(A[1][2] ^ D[2], rhotates[4][2]);
+
+    /* C[0] ^= */ A[1][0] = B[0] ^ (~B[1] & B[2]);
+    /* C[1] ^= */ A[1][1] = B[1] ^ (~B[2] & B[3]);
+    /* C[2] ^= */ A[1][2] = B[2] ^ (~B[3] & B[4]);
+    /* C[3] ^= */ A[1][3] = B[3] ^ (~B[4] & B[0]);
+    /* C[4] ^= */ A[1][4] = B[4] ^ (~B[0] & B[1]);
+
+    B[0] = ROL64(A[2][1] ^ D[1], rhotates[0][1]);
+    B[1] = ROL64(A[2][2] ^ D[2], rhotates[1][2]);
+    B[2] = ROL64(A[2][3] ^ D[3], rhotates[2][3]);
+    B[3] = ROL64(A[2][4] ^ D[4], rhotates[3][4]);
+    B[4] = ROL64(A[2][0] ^ D[0], rhotates[4][0]);
+
+    /* C[0] ^= */ A[2][0] = B[0] ^ (~B[1] & B[2]);
+    /* C[1] ^= */ A[2][1] = B[1] ^ (~B[2] & B[3]);
+    /* C[2] ^= */ A[2][2] = B[2] ^ (~B[3] & B[4]);
+    /* C[3] ^= */ A[2][3] = B[3] ^ (~B[4] & B[0]);
+    /* C[4] ^= */ A[2][4] = B[4] ^ (~B[0] & B[1]);
+
+    B[0] = ROL64(A[3][4] ^ D[4], rhotates[0][4]);
+    B[1] = ROL64(A[3][0] ^ D[0], rhotates[1][0]);
+    B[2] = ROL64(A[3][1] ^ D[1], rhotates[2][1]);
+    B[3] = ROL64(A[3][2] ^ D[2], rhotates[3][2]);
+    B[4] = ROL64(A[3][3] ^ D[3], rhotates[4][3]);
+
+    /* C[0] ^= */ A[3][0] = B[0] ^ (~B[1] & B[2]);
+    /* C[1] ^= */ A[3][1] = B[1] ^ (~B[2] & B[3]);
+    /* C[2] ^= */ A[3][2] = B[2] ^ (~B[3] & B[4]);
+    /* C[3] ^= */ A[3][3] = B[3] ^ (~B[4] & B[0]);
+    /* C[4] ^= */ A[3][4] = B[4] ^ (~B[0] & B[1]);
+
+    B[0] = ROL64(A[4][2] ^ D[2], rhotates[0][2]);
+    B[1] = ROL64(A[4][3] ^ D[3], rhotates[1][3]);
+    B[2] = ROL64(A[4][4] ^ D[4], rhotates[2][4]);
+    B[3] = ROL64(A[4][0] ^ D[0], rhotates[3][0]);
+    B[4] = ROL64(A[4][1] ^ D[1], rhotates[4][1]);
+
+    /* C[0] ^= */ A[4][0] = B[0] ^ (~B[1] & B[2]);
+    /* C[1] ^= */ A[4][1] = B[1] ^ (~B[2] & B[3]);
+    /* C[2] ^= */ A[4][2] = B[2] ^ (~B[3] & B[4]);
+    /* C[3] ^= */ A[4][3] = B[3] ^ (~B[4] & B[0]);
+    /* C[4] ^= */ A[4][4] = B[4] ^ (~B[0] & B[1]);
+}
+
+static void KeccakF1600(uint64_t A[5][5])
+{
+    size_t i;
+
+    for (i = 0; i < 24; i += 4) {
+        FourRounds(A, i);
+    }
+}
+
+#endif
+
+static uint64_t BitInterleave(uint64_t Ai)
+{
+    if (BIT_INTERLEAVE) {
+        uint32_t hi = (uint32_t)(Ai >> 32), lo = (uint32_t)Ai;
+        uint32_t t0, t1;
+
+        t0 = lo & 0x55555555;
+        t0 |= t0 >> 1;  t0 &= 0x33333333;
+        t0 |= t0 >> 2;  t0 &= 0x0f0f0f0f;
+        t0 |= t0 >> 4;  t0 &= 0x00ff00ff;
+        t0 |= t0 >> 8;  t0 &= 0x0000ffff;
+
+        t1 = hi & 0x55555555;
+        t1 |= t1 >> 1;  t1 &= 0x33333333;
+        t1 |= t1 >> 2;  t1 &= 0x0f0f0f0f;
+        t1 |= t1 >> 4;  t1 &= 0x00ff00ff;
+        t1 |= t1 >> 8;  t1 <<= 16;
+
+        lo &= 0xaaaaaaaa;
+        lo |= lo << 1;  lo &= 0xcccccccc;
+        lo |= lo << 2;  lo &= 0xf0f0f0f0;
+        lo |= lo << 4;  lo &= 0xff00ff00;
+        lo |= lo << 8;  lo >>= 16;
+
+        hi &= 0xaaaaaaaa;
+        hi |= hi << 1;  hi &= 0xcccccccc;
+        hi |= hi << 2;  hi &= 0xf0f0f0f0;
+        hi |= hi << 4;  hi &= 0xff00ff00;
+        hi |= hi << 8;  hi &= 0xffff0000;
+
+        Ai = ((uint64_t)(hi | lo) << 32) | (t1 | t0);
+    }
+
+    return Ai;
+}
+
+static uint64_t BitDeinterleave(uint64_t Ai)
+{
+    if (BIT_INTERLEAVE) {
+        uint32_t hi = (uint32_t)(Ai >> 32), lo = (uint32_t)Ai;
+        uint32_t t0, t1;
+
+        t0 = lo & 0x0000ffff;
+        t0 |= t0 << 8;  t0 &= 0x00ff00ff;
+        t0 |= t0 << 4;  t0 &= 0x0f0f0f0f;
+        t0 |= t0 << 2;  t0 &= 0x33333333;
+        t0 |= t0 << 1;  t0 &= 0x55555555;
+
+        t1 = hi << 16;
+        t1 |= t1 >> 8;  t1 &= 0xff00ff00;
+        t1 |= t1 >> 4;  t1 &= 0xf0f0f0f0;
+        t1 |= t1 >> 2;  t1 &= 0xcccccccc;
+        t1 |= t1 >> 1;  t1 &= 0xaaaaaaaa;
+
+        lo >>= 16;
+        lo |= lo << 8;  lo &= 0x00ff00ff;
+        lo |= lo << 4;  lo &= 0x0f0f0f0f;
+        lo |= lo << 2;  lo &= 0x33333333;
+        lo |= lo << 1;  lo &= 0x55555555;
+
+        hi &= 0xffff0000;
+        hi |= hi >> 8;  hi &= 0xff00ff00;
+        hi |= hi >> 4;  hi &= 0xf0f0f0f0;
+        hi |= hi >> 2;  hi &= 0xcccccccc;
+        hi |= hi >> 1;  hi &= 0xaaaaaaaa;
+
+        Ai = ((uint64_t)(hi | lo) << 32) | (t1 | t0);
+    }
+
+    return Ai;
+}
+
+/*
+ * SHA3_absorb can be called multiple times, but at each invocation
+ * largest multiple of |r| out of |len| bytes are processed. Then
+ * remaining amount of bytes is returned. This is done to spare caller
+ * trouble of calculating the largest multiple of |r|. |r| can be viewed
+ * as blocksize. It is commonly (1600 - 256*n)/8, e.g. 168, 136, 104,
+ * 72, but can also be (1600 - 448)/8 = 144. All this means that message
+ * padding and intermediate sub-block buffering, byte- or bitwise, is
+ * caller's responsibility.
+ */
+size_t SHA3_absorb(uint64_t A[5][5], const unsigned char *inp, size_t len,
+                   size_t r)
+{
+    uint64_t *A_flat = (uint64_t *)A;
+    size_t i, w = r / 8;
+
+    assert(r < (25 * sizeof(A[0][0])) && (r % 8) == 0);
+
+    while (len >= r) {
+        for (i = 0; i < w; i++) {
+            uint64_t Ai = (uint64_t)inp[0]       | (uint64_t)inp[1] << 8  |
+                          (uint64_t)inp[2] << 16 | (uint64_t)inp[3] << 24 |
+                          (uint64_t)inp[4] << 32 | (uint64_t)inp[5] << 40 |
+                          (uint64_t)inp[6] << 48 | (uint64_t)inp[7] << 56;
+            inp += 8;
+
+            A_flat[i] ^= BitInterleave(Ai);
+        }
+        KeccakF1600(A);
+        len -= r;
+    }
+
+    return len;
+}
+
+/*
+ * SHA3_squeeze is called once at the end to generate |out| hash value
+ * of |len| bytes.
+ */
+void SHA3_squeeze(uint64_t A[5][5], unsigned char *out, size_t len, size_t r)
+{
+    uint64_t *A_flat = (uint64_t *)A;
+    size_t i, w = r / 8;
+
+    assert(r < (25 * sizeof(A[0][0])) && (r % 8) == 0);
+
+    while (len != 0) {
+        for (i = 0; i < w && len != 0; i++) {
+            uint64_t Ai = BitDeinterleave(A_flat[i]);
+
+            if (len < 8) {
+                for (i = 0; i < len; i++) {
+                    *out++ = (unsigned char)Ai;
+                    Ai >>= 8;
+                }
+                return;
+            }
+
+            out[0] = (unsigned char)(Ai);
+            out[1] = (unsigned char)(Ai >> 8);
+            out[2] = (unsigned char)(Ai >> 16);
+            out[3] = (unsigned char)(Ai >> 24);
+            out[4] = (unsigned char)(Ai >> 32);
+            out[5] = (unsigned char)(Ai >> 40);
+            out[6] = (unsigned char)(Ai >> 48);
+            out[7] = (unsigned char)(Ai >> 56);
+            out += 8;
+            len -= 8;
+        }
+        if (len)
+            KeccakF1600(A);
+    }
+}
+#endif
+
+#ifdef SELFTEST
+/*
+ * Post-padding one-shot implementations would look as following:
+ *
+ * SHA3_224     SHA3_sponge(inp, len, out, 224/8, (1600-448)/8);
+ * SHA3_256     SHA3_sponge(inp, len, out, 256/8, (1600-512)/8);
+ * SHA3_384     SHA3_sponge(inp, len, out, 384/8, (1600-768)/8);
+ * SHA3_512     SHA3_sponge(inp, len, out, 512/8, (1600-1024)/8);
+ * SHAKE_128    SHA3_sponge(inp, len, out, d, (1600-256)/8);
+ * SHAKE_256    SHA3_sponge(inp, len, out, d, (1600-512)/8);
+ */
+
+void SHA3_sponge(const unsigned char *inp, size_t len,
+                 unsigned char *out, size_t d, size_t r)
+{
+    uint64_t A[5][5];
+
+    memset(A, 0, sizeof(A));
+    SHA3_absorb(A, inp, len, r);
+    SHA3_squeeze(A, out, d, r);
+}
+
+# include <stdio.h>
+
+int main()
+{
+    /*
+     * This is 5-bit SHAKE128 test from http://csrc.nist.gov/groups/ST/toolkit/examples.html#aHashing
+     */
+    unsigned char test[168] = { '\xf3', '\x3' };
+    unsigned char out[512];
+    size_t i;
+    static const unsigned char result[512] = {
+        0x2E, 0x0A, 0xBF, 0xBA, 0x83, 0xE6, 0x72, 0x0B,
+        0xFB, 0xC2, 0x25, 0xFF, 0x6B, 0x7A, 0xB9, 0xFF,
+        0xCE, 0x58, 0xBA, 0x02, 0x7E, 0xE3, 0xD8, 0x98,
+        0x76, 0x4F, 0xEF, 0x28, 0x7D, 0xDE, 0xCC, 0xCA,
+        0x3E, 0x6E, 0x59, 0x98, 0x41, 0x1E, 0x7D, 0xDB,
+        0x32, 0xF6, 0x75, 0x38, 0xF5, 0x00, 0xB1, 0x8C,
+        0x8C, 0x97, 0xC4, 0x52, 0xC3, 0x70, 0xEA, 0x2C,
+        0xF0, 0xAF, 0xCA, 0x3E, 0x05, 0xDE, 0x7E, 0x4D,
+        0xE2, 0x7F, 0xA4, 0x41, 0xA9, 0xCB, 0x34, 0xFD,
+        0x17, 0xC9, 0x78, 0xB4, 0x2D, 0x5B, 0x7E, 0x7F,
+        0x9A, 0xB1, 0x8F, 0xFE, 0xFF, 0xC3, 0xC5, 0xAC,
+        0x2F, 0x3A, 0x45, 0x5E, 0xEB, 0xFD, 0xC7, 0x6C,
+        0xEA, 0xEB, 0x0A, 0x2C, 0xCA, 0x22, 0xEE, 0xF6,
+        0xE6, 0x37, 0xF4, 0xCA, 0xBE, 0x5C, 0x51, 0xDE,
+        0xD2, 0xE3, 0xFA, 0xD8, 0xB9, 0x52, 0x70, 0xA3,
+        0x21, 0x84, 0x56, 0x64, 0xF1, 0x07, 0xD1, 0x64,
+        0x96, 0xBB, 0x7A, 0xBF, 0xBE, 0x75, 0x04, 0xB6,
+        0xED, 0xE2, 0xE8, 0x9E, 0x4B, 0x99, 0x6F, 0xB5,
+        0x8E, 0xFD, 0xC4, 0x18, 0x1F, 0x91, 0x63, 0x38,
+        0x1C, 0xBE, 0x7B, 0xC0, 0x06, 0xA7, 0xA2, 0x05,
+        0x98, 0x9C, 0x52, 0x6C, 0xD1, 0xBD, 0x68, 0x98,
+        0x36, 0x93, 0xB4, 0xBD, 0xC5, 0x37, 0x28, 0xB2,
+        0x41, 0xC1, 0xCF, 0xF4, 0x2B, 0xB6, 0x11, 0x50,
+        0x2C, 0x35, 0x20, 0x5C, 0xAB, 0xB2, 0x88, 0x75,
+        0x56, 0x55, 0xD6, 0x20, 0xC6, 0x79, 0x94, 0xF0,
+        0x64, 0x51, 0x18, 0x7F, 0x6F, 0xD1, 0x7E, 0x04,
+        0x66, 0x82, 0xBA, 0x12, 0x86, 0x06, 0x3F, 0xF8,
+        0x8F, 0xE2, 0x50, 0x8D, 0x1F, 0xCA, 0xF9, 0x03,
+        0x5A, 0x12, 0x31, 0xAD, 0x41, 0x50, 0xA9, 0xC9,
+        0xB2, 0x4C, 0x9B, 0x2D, 0x66, 0xB2, 0xAD, 0x1B,
+        0xDE, 0x0B, 0xD0, 0xBB, 0xCB, 0x8B, 0xE0, 0x5B,
+        0x83, 0x52, 0x29, 0xEF, 0x79, 0x19, 0x73, 0x73,
+        0x23, 0x42, 0x44, 0x01, 0xE1, 0xD8, 0x37, 0xB6,
+        0x6E, 0xB4, 0xE6, 0x30, 0xFF, 0x1D, 0xE7, 0x0C,
+        0xB3, 0x17, 0xC2, 0xBA, 0xCB, 0x08, 0x00, 0x1D,
+        0x34, 0x77, 0xB7, 0xA7, 0x0A, 0x57, 0x6D, 0x20,
+        0x86, 0x90, 0x33, 0x58, 0x9D, 0x85, 0xA0, 0x1D,
+        0xDB, 0x2B, 0x66, 0x46, 0xC0, 0x43, 0xB5, 0x9F,
+        0xC0, 0x11, 0x31, 0x1D, 0xA6, 0x66, 0xFA, 0x5A,
+        0xD1, 0xD6, 0x38, 0x7F, 0xA9, 0xBC, 0x40, 0x15,
+        0xA3, 0x8A, 0x51, 0xD1, 0xDA, 0x1E, 0xA6, 0x1D,
+        0x64, 0x8D, 0xC8, 0xE3, 0x9A, 0x88, 0xB9, 0xD6,
+        0x22, 0xBD, 0xE2, 0x07, 0xFD, 0xAB, 0xC6, 0xF2,
+        0x82, 0x7A, 0x88, 0x0C, 0x33, 0x0B, 0xBF, 0x6D,
+        0xF7, 0x33, 0x77, 0x4B, 0x65, 0x3E, 0x57, 0x30,
+        0x5D, 0x78, 0xDC, 0xE1, 0x12, 0xF1, 0x0A, 0x2C,
+        0x71, 0xF4, 0xCD, 0xAD, 0x92, 0xED, 0x11, 0x3E,
+        0x1C, 0xEA, 0x63, 0xB9, 0x19, 0x25, 0xED, 0x28,
+        0x19, 0x1E, 0x6D, 0xBB, 0xB5, 0xAA, 0x5A, 0x2A,
+        0xFD, 0xA5, 0x1F, 0xC0, 0x5A, 0x3A, 0xF5, 0x25,
+        0x8B, 0x87, 0x66, 0x52, 0x43, 0x55, 0x0F, 0x28,
+        0x94, 0x8A, 0xE2, 0xB8, 0xBE, 0xB6, 0xBC, 0x9C,
+        0x77, 0x0B, 0x35, 0xF0, 0x67, 0xEA, 0xA6, 0x41,
+        0xEF, 0xE6, 0x5B, 0x1A, 0x44, 0x90, 0x9D, 0x1B,
+        0x14, 0x9F, 0x97, 0xEE, 0xA6, 0x01, 0x39, 0x1C,
+        0x60, 0x9E, 0xC8, 0x1D, 0x19, 0x30, 0xF5, 0x7C,
+        0x18, 0xA4, 0xE0, 0xFA, 0xB4, 0x91, 0xD1, 0xCA,
+        0xDF, 0xD5, 0x04, 0x83, 0x44, 0x9E, 0xDC, 0x0F,
+        0x07, 0xFF, 0xB2, 0x4D, 0x2C, 0x6F, 0x9A, 0x9A,
+        0x3B, 0xFF, 0x39, 0xAE, 0x3D, 0x57, 0xF5, 0x60,
+        0x65, 0x4D, 0x7D, 0x75, 0xC9, 0x08, 0xAB, 0xE6,
+        0x25, 0x64, 0x75, 0x3E, 0xAC, 0x39, 0xD7, 0x50,
+        0x3D, 0xA6, 0xD3, 0x7C, 0x2E, 0x32, 0xE1, 0xAF,
+        0x3B, 0x8A, 0xEC, 0x8A, 0xE3, 0x06, 0x9C, 0xD9
+    };
+
+    test[167] = '\x80';
+    SHA3_sponge(test, sizeof(test), out, sizeof(out), sizeof(test));
+
+    /*
+     * Rationale behind keeping output [formatted as below] is that
+     * one should be able to redirect it to a file, then copy-n-paste
+     * final "output val" from official example to another file, and
+     * compare the two with diff(1).
+     */
+    for (i = 0; i < sizeof(out);) {
+        printf("%02X", out[i]);
+        printf(++i % 16 && i != sizeof(out) ? " " : "\n");
+    }
+
+    if (memcmp(out,result,sizeof(out))) {
+        fprintf(stderr,"failure\n");
+        return 1;
+    } else {
+        fprintf(stderr,"success\n");
+        return 0;
+    }
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha1_one.c b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha1_one.c
new file mode 100644
index 000000000..e5b38211d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha1_one.c
@@ -0,0 +1,28 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include <openssl/crypto.h>
+#include <openssl/sha.h>
+
+unsigned char *SHA1(const unsigned char *d, size_t n, unsigned char *md)
+{
+    SHA_CTX c;
+    static unsigned char m[SHA_DIGEST_LENGTH];
+
+    if (md == NULL)
+        md = m;
+    if (!SHA1_Init(&c))
+        return NULL;
+    SHA1_Update(&c, d, n);
+    SHA1_Final(md, &c);
+    OPENSSL_cleanse(&c, sizeof(c));
+    return md;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha1dgst.c b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha1dgst.c
new file mode 100644
index 000000000..819370e61
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha1dgst.c
@@ -0,0 +1,17 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/crypto.h>
+#include <openssl/opensslconf.h>
+
+# include <openssl/opensslv.h>
+
+/* The implementation is in ../md32_common.h */
+
+# include "sha_locl.h"
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha256.c b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha256.c
new file mode 100644
index 000000000..bf78f075e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha256.c
@@ -0,0 +1,386 @@
+/*
+ * Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+
+#include <stdlib.h>
+#include <string.h>
+
+#include <openssl/crypto.h>
+#include <openssl/sha.h>
+#include <openssl/opensslv.h>
+
+int SHA224_Init(SHA256_CTX *c)
+{
+    memset(c, 0, sizeof(*c));
+    c->h[0] = 0xc1059ed8UL;
+    c->h[1] = 0x367cd507UL;
+    c->h[2] = 0x3070dd17UL;
+    c->h[3] = 0xf70e5939UL;
+    c->h[4] = 0xffc00b31UL;
+    c->h[5] = 0x68581511UL;
+    c->h[6] = 0x64f98fa7UL;
+    c->h[7] = 0xbefa4fa4UL;
+    c->md_len = SHA224_DIGEST_LENGTH;
+    return 1;
+}
+
+int SHA256_Init(SHA256_CTX *c)
+{
+    memset(c, 0, sizeof(*c));
+    c->h[0] = 0x6a09e667UL;
+    c->h[1] = 0xbb67ae85UL;
+    c->h[2] = 0x3c6ef372UL;
+    c->h[3] = 0xa54ff53aUL;
+    c->h[4] = 0x510e527fUL;
+    c->h[5] = 0x9b05688cUL;
+    c->h[6] = 0x1f83d9abUL;
+    c->h[7] = 0x5be0cd19UL;
+    c->md_len = SHA256_DIGEST_LENGTH;
+    return 1;
+}
+
+unsigned char *SHA224(const unsigned char *d, size_t n, unsigned char *md)
+{
+    SHA256_CTX c;
+    static unsigned char m[SHA224_DIGEST_LENGTH];
+
+    if (md == NULL)
+        md = m;
+    SHA224_Init(&c);
+    SHA256_Update(&c, d, n);
+    SHA256_Final(md, &c);
+    OPENSSL_cleanse(&c, sizeof(c));
+    return md;
+}
+
+unsigned char *SHA256(const unsigned char *d, size_t n, unsigned char *md)
+{
+    SHA256_CTX c;
+    static unsigned char m[SHA256_DIGEST_LENGTH];
+
+    if (md == NULL)
+        md = m;
+    SHA256_Init(&c);
+    SHA256_Update(&c, d, n);
+    SHA256_Final(md, &c);
+    OPENSSL_cleanse(&c, sizeof(c));
+    return md;
+}
+
+int SHA224_Update(SHA256_CTX *c, const void *data, size_t len)
+{
+    return SHA256_Update(c, data, len);
+}
+
+int SHA224_Final(unsigned char *md, SHA256_CTX *c)
+{
+    return SHA256_Final(md, c);
+}
+
+#define DATA_ORDER_IS_BIG_ENDIAN
+
+#define HASH_LONG               SHA_LONG
+#define HASH_CTX                SHA256_CTX
+#define HASH_CBLOCK             SHA_CBLOCK
+
+/*
+ * Note that FIPS180-2 discusses "Truncation of the Hash Function Output."
+ * default: case below covers for it. It's not clear however if it's
+ * permitted to truncate to amount of bytes not divisible by 4. I bet not,
+ * but if it is, then default: case shall be extended. For reference.
+ * Idea behind separate cases for pre-defined lengths is to let the
+ * compiler decide if it's appropriate to unroll small loops.
+ */
+#define HASH_MAKE_STRING(c,s)   do {    \
+        unsigned long ll;               \
+        unsigned int  nn;               \
+        switch ((c)->md_len)            \
+        {   case SHA224_DIGEST_LENGTH:  \
+                for (nn=0;nn<SHA224_DIGEST_LENGTH/4;nn++)       \
+                {   ll=(c)->h[nn]; (void)HOST_l2c(ll,(s));   }  \
+                break;                  \
+            case SHA256_DIGEST_LENGTH:  \
+                for (nn=0;nn<SHA256_DIGEST_LENGTH/4;nn++)       \
+                {   ll=(c)->h[nn]; (void)HOST_l2c(ll,(s));   }  \
+                break;                  \
+            default:                    \
+                if ((c)->md_len > SHA256_DIGEST_LENGTH) \
+                    return 0;                           \
+                for (nn=0;nn<(c)->md_len/4;nn++)                \
+                {   ll=(c)->h[nn]; (void)HOST_l2c(ll,(s));   }  \
+                break;                  \
+        }                               \
+        } while (0)
+
+#define HASH_UPDATE             SHA256_Update
+#define HASH_TRANSFORM          SHA256_Transform
+#define HASH_FINAL              SHA256_Final
+#define HASH_BLOCK_DATA_ORDER   sha256_block_data_order
+#ifndef SHA256_ASM
+static
+#endif
+void sha256_block_data_order(SHA256_CTX *ctx, const void *in, size_t num);
+
+#include "internal/md32_common.h"
+
+#ifndef SHA256_ASM
+static const SHA_LONG K256[64] = {
+    0x428a2f98UL, 0x71374491UL, 0xb5c0fbcfUL, 0xe9b5dba5UL,
+    0x3956c25bUL, 0x59f111f1UL, 0x923f82a4UL, 0xab1c5ed5UL,
+    0xd807aa98UL, 0x12835b01UL, 0x243185beUL, 0x550c7dc3UL,
+    0x72be5d74UL, 0x80deb1feUL, 0x9bdc06a7UL, 0xc19bf174UL,
+    0xe49b69c1UL, 0xefbe4786UL, 0x0fc19dc6UL, 0x240ca1ccUL,
+    0x2de92c6fUL, 0x4a7484aaUL, 0x5cb0a9dcUL, 0x76f988daUL,
+    0x983e5152UL, 0xa831c66dUL, 0xb00327c8UL, 0xbf597fc7UL,
+    0xc6e00bf3UL, 0xd5a79147UL, 0x06ca6351UL, 0x14292967UL,
+    0x27b70a85UL, 0x2e1b2138UL, 0x4d2c6dfcUL, 0x53380d13UL,
+    0x650a7354UL, 0x766a0abbUL, 0x81c2c92eUL, 0x92722c85UL,
+    0xa2bfe8a1UL, 0xa81a664bUL, 0xc24b8b70UL, 0xc76c51a3UL,
+    0xd192e819UL, 0xd6990624UL, 0xf40e3585UL, 0x106aa070UL,
+    0x19a4c116UL, 0x1e376c08UL, 0x2748774cUL, 0x34b0bcb5UL,
+    0x391c0cb3UL, 0x4ed8aa4aUL, 0x5b9cca4fUL, 0x682e6ff3UL,
+    0x748f82eeUL, 0x78a5636fUL, 0x84c87814UL, 0x8cc70208UL,
+    0x90befffaUL, 0xa4506cebUL, 0xbef9a3f7UL, 0xc67178f2UL
+};
+
+/*
+ * FIPS specification refers to right rotations, while our ROTATE macro
+ * is left one. This is why you might notice that rotation coefficients
+ * differ from those observed in FIPS document by 32-N...
+ */
+# define Sigma0(x)       (ROTATE((x),30) ^ ROTATE((x),19) ^ ROTATE((x),10))
+# define Sigma1(x)       (ROTATE((x),26) ^ ROTATE((x),21) ^ ROTATE((x),7))
+# define sigma0(x)       (ROTATE((x),25) ^ ROTATE((x),14) ^ ((x)>>3))
+# define sigma1(x)       (ROTATE((x),15) ^ ROTATE((x),13) ^ ((x)>>10))
+
+# define Ch(x,y,z)       (((x) & (y)) ^ ((~(x)) & (z)))
+# define Maj(x,y,z)      (((x) & (y)) ^ ((x) & (z)) ^ ((y) & (z)))
+
+# ifdef OPENSSL_SMALL_FOOTPRINT
+
+static void sha256_block_data_order(SHA256_CTX *ctx, const void *in,
+                                    size_t num)
+{
+    unsigned MD32_REG_T a, b, c, d, e, f, g, h, s0, s1, T1, T2;
+    SHA_LONG X[16], l;
+    int i;
+    const unsigned char *data = in;
+
+    while (num--) {
+
+        a = ctx->h[0];
+        b = ctx->h[1];
+        c = ctx->h[2];
+        d = ctx->h[3];
+        e = ctx->h[4];
+        f = ctx->h[5];
+        g = ctx->h[6];
+        h = ctx->h[7];
+
+        for (i = 0; i < 16; i++) {
+            (void)HOST_c2l(data, l);
+            T1 = X[i] = l;
+            T1 += h + Sigma1(e) + Ch(e, f, g) + K256[i];
+            T2 = Sigma0(a) + Maj(a, b, c);
+            h = g;
+            g = f;
+            f = e;
+            e = d + T1;
+            d = c;
+            c = b;
+            b = a;
+            a = T1 + T2;
+        }
+
+        for (; i < 64; i++) {
+            s0 = X[(i + 1) & 0x0f];
+            s0 = sigma0(s0);
+            s1 = X[(i + 14) & 0x0f];
+            s1 = sigma1(s1);
+
+            T1 = X[i & 0xf] += s0 + s1 + X[(i + 9) & 0xf];
+            T1 += h + Sigma1(e) + Ch(e, f, g) + K256[i];
+            T2 = Sigma0(a) + Maj(a, b, c);
+            h = g;
+            g = f;
+            f = e;
+            e = d + T1;
+            d = c;
+            c = b;
+            b = a;
+            a = T1 + T2;
+        }
+
+        ctx->h[0] += a;
+        ctx->h[1] += b;
+        ctx->h[2] += c;
+        ctx->h[3] += d;
+        ctx->h[4] += e;
+        ctx->h[5] += f;
+        ctx->h[6] += g;
+        ctx->h[7] += h;
+
+    }
+}
+
+# else
+
+#  define ROUND_00_15(i,a,b,c,d,e,f,g,h)          do {    \
+        T1 += h + Sigma1(e) + Ch(e,f,g) + K256[i];      \
+        h = Sigma0(a) + Maj(a,b,c);                     \
+        d += T1;        h += T1;                } while (0)
+
+#  define ROUND_16_63(i,a,b,c,d,e,f,g,h,X)        do {    \
+        s0 = X[(i+1)&0x0f];     s0 = sigma0(s0);        \
+        s1 = X[(i+14)&0x0f];    s1 = sigma1(s1);        \
+        T1 = X[(i)&0x0f] += s0 + s1 + X[(i+9)&0x0f];    \
+        ROUND_00_15(i,a,b,c,d,e,f,g,h);         } while (0)
+
+static void sha256_block_data_order(SHA256_CTX *ctx, const void *in,
+                                    size_t num)
+{
+    unsigned MD32_REG_T a, b, c, d, e, f, g, h, s0, s1, T1;
+    SHA_LONG X[16];
+    int i;
+    const unsigned char *data = in;
+    const union {
+        long one;
+        char little;
+    } is_endian = {
+        1
+    };
+
+    while (num--) {
+
+        a = ctx->h[0];
+        b = ctx->h[1];
+        c = ctx->h[2];
+        d = ctx->h[3];
+        e = ctx->h[4];
+        f = ctx->h[5];
+        g = ctx->h[6];
+        h = ctx->h[7];
+
+        if (!is_endian.little && sizeof(SHA_LONG) == 4
+            && ((size_t)in % 4) == 0) {
+            const SHA_LONG *W = (const SHA_LONG *)data;
+
+            T1 = X[0] = W[0];
+            ROUND_00_15(0, a, b, c, d, e, f, g, h);
+            T1 = X[1] = W[1];
+            ROUND_00_15(1, h, a, b, c, d, e, f, g);
+            T1 = X[2] = W[2];
+            ROUND_00_15(2, g, h, a, b, c, d, e, f);
+            T1 = X[3] = W[3];
+            ROUND_00_15(3, f, g, h, a, b, c, d, e);
+            T1 = X[4] = W[4];
+            ROUND_00_15(4, e, f, g, h, a, b, c, d);
+            T1 = X[5] = W[5];
+            ROUND_00_15(5, d, e, f, g, h, a, b, c);
+            T1 = X[6] = W[6];
+            ROUND_00_15(6, c, d, e, f, g, h, a, b);
+            T1 = X[7] = W[7];
+            ROUND_00_15(7, b, c, d, e, f, g, h, a);
+            T1 = X[8] = W[8];
+            ROUND_00_15(8, a, b, c, d, e, f, g, h);
+            T1 = X[9] = W[9];
+            ROUND_00_15(9, h, a, b, c, d, e, f, g);
+            T1 = X[10] = W[10];
+            ROUND_00_15(10, g, h, a, b, c, d, e, f);
+            T1 = X[11] = W[11];
+            ROUND_00_15(11, f, g, h, a, b, c, d, e);
+            T1 = X[12] = W[12];
+            ROUND_00_15(12, e, f, g, h, a, b, c, d);
+            T1 = X[13] = W[13];
+            ROUND_00_15(13, d, e, f, g, h, a, b, c);
+            T1 = X[14] = W[14];
+            ROUND_00_15(14, c, d, e, f, g, h, a, b);
+            T1 = X[15] = W[15];
+            ROUND_00_15(15, b, c, d, e, f, g, h, a);
+
+            data += SHA256_CBLOCK;
+        } else {
+            SHA_LONG l;
+
+            (void)HOST_c2l(data, l);
+            T1 = X[0] = l;
+            ROUND_00_15(0, a, b, c, d, e, f, g, h);
+            (void)HOST_c2l(data, l);
+            T1 = X[1] = l;
+            ROUND_00_15(1, h, a, b, c, d, e, f, g);
+            (void)HOST_c2l(data, l);
+            T1 = X[2] = l;
+            ROUND_00_15(2, g, h, a, b, c, d, e, f);
+            (void)HOST_c2l(data, l);
+            T1 = X[3] = l;
+            ROUND_00_15(3, f, g, h, a, b, c, d, e);
+            (void)HOST_c2l(data, l);
+            T1 = X[4] = l;
+            ROUND_00_15(4, e, f, g, h, a, b, c, d);
+            (void)HOST_c2l(data, l);
+            T1 = X[5] = l;
+            ROUND_00_15(5, d, e, f, g, h, a, b, c);
+            (void)HOST_c2l(data, l);
+            T1 = X[6] = l;
+            ROUND_00_15(6, c, d, e, f, g, h, a, b);
+            (void)HOST_c2l(data, l);
+            T1 = X[7] = l;
+            ROUND_00_15(7, b, c, d, e, f, g, h, a);
+            (void)HOST_c2l(data, l);
+            T1 = X[8] = l;
+            ROUND_00_15(8, a, b, c, d, e, f, g, h);
+            (void)HOST_c2l(data, l);
+            T1 = X[9] = l;
+            ROUND_00_15(9, h, a, b, c, d, e, f, g);
+            (void)HOST_c2l(data, l);
+            T1 = X[10] = l;
+            ROUND_00_15(10, g, h, a, b, c, d, e, f);
+            (void)HOST_c2l(data, l);
+            T1 = X[11] = l;
+            ROUND_00_15(11, f, g, h, a, b, c, d, e);
+            (void)HOST_c2l(data, l);
+            T1 = X[12] = l;
+            ROUND_00_15(12, e, f, g, h, a, b, c, d);
+            (void)HOST_c2l(data, l);
+            T1 = X[13] = l;
+            ROUND_00_15(13, d, e, f, g, h, a, b, c);
+            (void)HOST_c2l(data, l);
+            T1 = X[14] = l;
+            ROUND_00_15(14, c, d, e, f, g, h, a, b);
+            (void)HOST_c2l(data, l);
+            T1 = X[15] = l;
+            ROUND_00_15(15, b, c, d, e, f, g, h, a);
+        }
+
+        for (i = 16; i < 64; i += 8) {
+            ROUND_16_63(i + 0, a, b, c, d, e, f, g, h, X);
+            ROUND_16_63(i + 1, h, a, b, c, d, e, f, g, X);
+            ROUND_16_63(i + 2, g, h, a, b, c, d, e, f, X);
+            ROUND_16_63(i + 3, f, g, h, a, b, c, d, e, X);
+            ROUND_16_63(i + 4, e, f, g, h, a, b, c, d, X);
+            ROUND_16_63(i + 5, d, e, f, g, h, a, b, c, X);
+            ROUND_16_63(i + 6, c, d, e, f, g, h, a, b, X);
+            ROUND_16_63(i + 7, b, c, d, e, f, g, h, a, X);
+        }
+
+        ctx->h[0] += a;
+        ctx->h[1] += b;
+        ctx->h[2] += c;
+        ctx->h[3] += d;
+        ctx->h[4] += e;
+        ctx->h[5] += f;
+        ctx->h[6] += g;
+        ctx->h[7] += h;
+
+    }
+}
+
+# endif
+#endif                         /* SHA256_ASM */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha512.c b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha512.c
new file mode 100644
index 000000000..50b65ee81
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha512.c
@@ -0,0 +1,765 @@
+/*
+ * Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslconf.h>
+/*-
+ * IMPLEMENTATION NOTES.
+ *
+ * As you might have noticed 32-bit hash algorithms:
+ *
+ * - permit SHA_LONG to be wider than 32-bit
+ * - optimized versions implement two transform functions: one operating
+ *   on [aligned] data in host byte order and one - on data in input
+ *   stream byte order;
+ * - share common byte-order neutral collector and padding function
+ *   implementations, ../md32_common.h;
+ *
+ * Neither of the above applies to this SHA-512 implementations. Reasons
+ * [in reverse order] are:
+ *
+ * - it's the only 64-bit hash algorithm for the moment of this writing,
+ *   there is no need for common collector/padding implementation [yet];
+ * - by supporting only one transform function [which operates on
+ *   *aligned* data in input stream byte order, big-endian in this case]
+ *   we minimize burden of maintenance in two ways: a) collector/padding
+ *   function is simpler; b) only one transform function to stare at;
+ * - SHA_LONG64 is required to be exactly 64-bit in order to be able to
+ *   apply a number of optimizations to mitigate potential performance
+ *   penalties caused by previous design decision;
+ *
+ * Caveat lector.
+ *
+ * Implementation relies on the fact that "long long" is 64-bit on
+ * both 32- and 64-bit platforms. If some compiler vendor comes up
+ * with 128-bit long long, adjustment to sha.h would be required.
+ * As this implementation relies on 64-bit integer type, it's totally
+ * inappropriate for platforms which don't support it, most notably
+ * 16-bit platforms.
+ */
+#include <stdlib.h>
+#include <string.h>
+
+#include <openssl/crypto.h>
+#include <openssl/sha.h>
+#include <openssl/opensslv.h>
+
+#include "internal/cryptlib.h"
+#include "internal/sha.h"
+
+#if defined(__i386) || defined(__i386__) || defined(_M_IX86) || \
+    defined(__x86_64) || defined(_M_AMD64) || defined(_M_X64) || \
+    defined(__s390__) || defined(__s390x__) || \
+    defined(__aarch64__) || \
+    defined(SHA512_ASM)
+# define SHA512_BLOCK_CAN_MANAGE_UNALIGNED_DATA
+#endif
+
+int sha512_224_init(SHA512_CTX *c)
+{
+    c->h[0] = U64(0x8c3d37c819544da2);
+    c->h[1] = U64(0x73e1996689dcd4d6);
+    c->h[2] = U64(0x1dfab7ae32ff9c82);
+    c->h[3] = U64(0x679dd514582f9fcf);
+    c->h[4] = U64(0x0f6d2b697bd44da8);
+    c->h[5] = U64(0x77e36f7304c48942);
+    c->h[6] = U64(0x3f9d85a86a1d36c8);
+    c->h[7] = U64(0x1112e6ad91d692a1);
+
+    c->Nl = 0;
+    c->Nh = 0;
+    c->num = 0;
+    c->md_len = SHA224_DIGEST_LENGTH;
+    return 1;
+}
+
+int sha512_256_init(SHA512_CTX *c)
+{
+    c->h[0] = U64(0x22312194fc2bf72c);
+    c->h[1] = U64(0x9f555fa3c84c64c2);
+    c->h[2] = U64(0x2393b86b6f53b151);
+    c->h[3] = U64(0x963877195940eabd);
+    c->h[4] = U64(0x96283ee2a88effe3);
+    c->h[5] = U64(0xbe5e1e2553863992);
+    c->h[6] = U64(0x2b0199fc2c85b8aa);
+    c->h[7] = U64(0x0eb72ddc81c52ca2);
+
+    c->Nl = 0;
+    c->Nh = 0;
+    c->num = 0;
+    c->md_len = SHA256_DIGEST_LENGTH;
+    return 1;
+}
+
+int SHA384_Init(SHA512_CTX *c)
+{
+    c->h[0] = U64(0xcbbb9d5dc1059ed8);
+    c->h[1] = U64(0x629a292a367cd507);
+    c->h[2] = U64(0x9159015a3070dd17);
+    c->h[3] = U64(0x152fecd8f70e5939);
+    c->h[4] = U64(0x67332667ffc00b31);
+    c->h[5] = U64(0x8eb44a8768581511);
+    c->h[6] = U64(0xdb0c2e0d64f98fa7);
+    c->h[7] = U64(0x47b5481dbefa4fa4);
+
+    c->Nl = 0;
+    c->Nh = 0;
+    c->num = 0;
+    c->md_len = SHA384_DIGEST_LENGTH;
+    return 1;
+}
+
+int SHA512_Init(SHA512_CTX *c)
+{
+    c->h[0] = U64(0x6a09e667f3bcc908);
+    c->h[1] = U64(0xbb67ae8584caa73b);
+    c->h[2] = U64(0x3c6ef372fe94f82b);
+    c->h[3] = U64(0xa54ff53a5f1d36f1);
+    c->h[4] = U64(0x510e527fade682d1);
+    c->h[5] = U64(0x9b05688c2b3e6c1f);
+    c->h[6] = U64(0x1f83d9abfb41bd6b);
+    c->h[7] = U64(0x5be0cd19137e2179);
+
+    c->Nl = 0;
+    c->Nh = 0;
+    c->num = 0;
+    c->md_len = SHA512_DIGEST_LENGTH;
+    return 1;
+}
+
+#ifndef SHA512_ASM
+static
+#endif
+void sha512_block_data_order(SHA512_CTX *ctx, const void *in, size_t num);
+
+int SHA512_Final(unsigned char *md, SHA512_CTX *c)
+{
+    unsigned char *p = (unsigned char *)c->u.p;
+    size_t n = c->num;
+
+    p[n] = 0x80;                /* There always is a room for one */
+    n++;
+    if (n > (sizeof(c->u) - 16)) {
+        memset(p + n, 0, sizeof(c->u) - n);
+        n = 0;
+        sha512_block_data_order(c, p, 1);
+    }
+
+    memset(p + n, 0, sizeof(c->u) - 16 - n);
+#ifdef  B_ENDIAN
+    c->u.d[SHA_LBLOCK - 2] = c->Nh;
+    c->u.d[SHA_LBLOCK - 1] = c->Nl;
+#else
+    p[sizeof(c->u) - 1] = (unsigned char)(c->Nl);
+    p[sizeof(c->u) - 2] = (unsigned char)(c->Nl >> 8);
+    p[sizeof(c->u) - 3] = (unsigned char)(c->Nl >> 16);
+    p[sizeof(c->u) - 4] = (unsigned char)(c->Nl >> 24);
+    p[sizeof(c->u) - 5] = (unsigned char)(c->Nl >> 32);
+    p[sizeof(c->u) - 6] = (unsigned char)(c->Nl >> 40);
+    p[sizeof(c->u) - 7] = (unsigned char)(c->Nl >> 48);
+    p[sizeof(c->u) - 8] = (unsigned char)(c->Nl >> 56);
+    p[sizeof(c->u) - 9] = (unsigned char)(c->Nh);
+    p[sizeof(c->u) - 10] = (unsigned char)(c->Nh >> 8);
+    p[sizeof(c->u) - 11] = (unsigned char)(c->Nh >> 16);
+    p[sizeof(c->u) - 12] = (unsigned char)(c->Nh >> 24);
+    p[sizeof(c->u) - 13] = (unsigned char)(c->Nh >> 32);
+    p[sizeof(c->u) - 14] = (unsigned char)(c->Nh >> 40);
+    p[sizeof(c->u) - 15] = (unsigned char)(c->Nh >> 48);
+    p[sizeof(c->u) - 16] = (unsigned char)(c->Nh >> 56);
+#endif
+
+    sha512_block_data_order(c, p, 1);
+
+    if (md == 0)
+        return 0;
+
+    switch (c->md_len) {
+    /* Let compiler decide if it's appropriate to unroll... */
+    case SHA224_DIGEST_LENGTH:
+        for (n = 0; n < SHA224_DIGEST_LENGTH / 8; n++) {
+            SHA_LONG64 t = c->h[n];
+
+            *(md++) = (unsigned char)(t >> 56);
+            *(md++) = (unsigned char)(t >> 48);
+            *(md++) = (unsigned char)(t >> 40);
+            *(md++) = (unsigned char)(t >> 32);
+            *(md++) = (unsigned char)(t >> 24);
+            *(md++) = (unsigned char)(t >> 16);
+            *(md++) = (unsigned char)(t >> 8);
+            *(md++) = (unsigned char)(t);
+        }
+        /*
+         * For 224 bits, there are four bytes left over that have to be
+         * processed separately.
+         */
+        {
+            SHA_LONG64 t = c->h[SHA224_DIGEST_LENGTH / 8];
+
+            *(md++) = (unsigned char)(t >> 56);
+            *(md++) = (unsigned char)(t >> 48);
+            *(md++) = (unsigned char)(t >> 40);
+            *(md++) = (unsigned char)(t >> 32);
+        }
+        break;
+    case SHA256_DIGEST_LENGTH:
+        for (n = 0; n < SHA256_DIGEST_LENGTH / 8; n++) {
+            SHA_LONG64 t = c->h[n];
+
+            *(md++) = (unsigned char)(t >> 56);
+            *(md++) = (unsigned char)(t >> 48);
+            *(md++) = (unsigned char)(t >> 40);
+            *(md++) = (unsigned char)(t >> 32);
+            *(md++) = (unsigned char)(t >> 24);
+            *(md++) = (unsigned char)(t >> 16);
+            *(md++) = (unsigned char)(t >> 8);
+            *(md++) = (unsigned char)(t);
+        }
+        break;
+    case SHA384_DIGEST_LENGTH:
+        for (n = 0; n < SHA384_DIGEST_LENGTH / 8; n++) {
+            SHA_LONG64 t = c->h[n];
+
+            *(md++) = (unsigned char)(t >> 56);
+            *(md++) = (unsigned char)(t >> 48);
+            *(md++) = (unsigned char)(t >> 40);
+            *(md++) = (unsigned char)(t >> 32);
+            *(md++) = (unsigned char)(t >> 24);
+            *(md++) = (unsigned char)(t >> 16);
+            *(md++) = (unsigned char)(t >> 8);
+            *(md++) = (unsigned char)(t);
+        }
+        break;
+    case SHA512_DIGEST_LENGTH:
+        for (n = 0; n < SHA512_DIGEST_LENGTH / 8; n++) {
+            SHA_LONG64 t = c->h[n];
+
+            *(md++) = (unsigned char)(t >> 56);
+            *(md++) = (unsigned char)(t >> 48);
+            *(md++) = (unsigned char)(t >> 40);
+            *(md++) = (unsigned char)(t >> 32);
+            *(md++) = (unsigned char)(t >> 24);
+            *(md++) = (unsigned char)(t >> 16);
+            *(md++) = (unsigned char)(t >> 8);
+            *(md++) = (unsigned char)(t);
+        }
+        break;
+    /* ... as well as make sure md_len is not abused. */
+    default:
+        return 0;
+    }
+
+    return 1;
+}
+
+int SHA384_Final(unsigned char *md, SHA512_CTX *c)
+{
+    return SHA512_Final(md, c);
+}
+
+int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
+{
+    SHA_LONG64 l;
+    unsigned char *p = c->u.p;
+    const unsigned char *data = (const unsigned char *)_data;
+
+    if (len == 0)
+        return 1;
+
+    l = (c->Nl + (((SHA_LONG64) len) << 3)) & U64(0xffffffffffffffff);
+    if (l < c->Nl)
+        c->Nh++;
+    if (sizeof(len) >= 8)
+        c->Nh += (((SHA_LONG64) len) >> 61);
+    c->Nl = l;
+
+    if (c->num != 0) {
+        size_t n = sizeof(c->u) - c->num;
+
+        if (len < n) {
+            memcpy(p + c->num, data, len), c->num += (unsigned int)len;
+            return 1;
+        } else {
+            memcpy(p + c->num, data, n), c->num = 0;
+            len -= n, data += n;
+            sha512_block_data_order(c, p, 1);
+        }
+    }
+
+    if (len >= sizeof(c->u)) {
+#ifndef SHA512_BLOCK_CAN_MANAGE_UNALIGNED_DATA
+        if ((size_t)data % sizeof(c->u.d[0]) != 0)
+            while (len >= sizeof(c->u))
+                memcpy(p, data, sizeof(c->u)),
+                sha512_block_data_order(c, p, 1),
+                len -= sizeof(c->u), data += sizeof(c->u);
+        else
+#endif
+            sha512_block_data_order(c, data, len / sizeof(c->u)),
+            data += len, len %= sizeof(c->u), data -= len;
+    }
+
+    if (len != 0)
+        memcpy(p, data, len), c->num = (int)len;
+
+    return 1;
+}
+
+int SHA384_Update(SHA512_CTX *c, const void *data, size_t len)
+{
+    return SHA512_Update(c, data, len);
+}
+
+void SHA512_Transform(SHA512_CTX *c, const unsigned char *data)
+{
+#ifndef SHA512_BLOCK_CAN_MANAGE_UNALIGNED_DATA
+    if ((size_t)data % sizeof(c->u.d[0]) != 0)
+        memcpy(c->u.p, data, sizeof(c->u.p)), data = c->u.p;
+#endif
+    sha512_block_data_order(c, data, 1);
+}
+
+unsigned char *SHA384(const unsigned char *d, size_t n, unsigned char *md)
+{
+    SHA512_CTX c;
+    static unsigned char m[SHA384_DIGEST_LENGTH];
+
+    if (md == NULL)
+        md = m;
+    SHA384_Init(&c);
+    SHA512_Update(&c, d, n);
+    SHA512_Final(md, &c);
+    OPENSSL_cleanse(&c, sizeof(c));
+    return md;
+}
+
+unsigned char *SHA512(const unsigned char *d, size_t n, unsigned char *md)
+{
+    SHA512_CTX c;
+    static unsigned char m[SHA512_DIGEST_LENGTH];
+
+    if (md == NULL)
+        md = m;
+    SHA512_Init(&c);
+    SHA512_Update(&c, d, n);
+    SHA512_Final(md, &c);
+    OPENSSL_cleanse(&c, sizeof(c));
+    return md;
+}
+
+#ifndef SHA512_ASM
+static const SHA_LONG64 K512[80] = {
+    U64(0x428a2f98d728ae22), U64(0x7137449123ef65cd),
+    U64(0xb5c0fbcfec4d3b2f), U64(0xe9b5dba58189dbbc),
+    U64(0x3956c25bf348b538), U64(0x59f111f1b605d019),
+    U64(0x923f82a4af194f9b), U64(0xab1c5ed5da6d8118),
+    U64(0xd807aa98a3030242), U64(0x12835b0145706fbe),
+    U64(0x243185be4ee4b28c), U64(0x550c7dc3d5ffb4e2),
+    U64(0x72be5d74f27b896f), U64(0x80deb1fe3b1696b1),
+    U64(0x9bdc06a725c71235), U64(0xc19bf174cf692694),
+    U64(0xe49b69c19ef14ad2), U64(0xefbe4786384f25e3),
+    U64(0x0fc19dc68b8cd5b5), U64(0x240ca1cc77ac9c65),
+    U64(0x2de92c6f592b0275), U64(0x4a7484aa6ea6e483),
+    U64(0x5cb0a9dcbd41fbd4), U64(0x76f988da831153b5),
+    U64(0x983e5152ee66dfab), U64(0xa831c66d2db43210),
+    U64(0xb00327c898fb213f), U64(0xbf597fc7beef0ee4),
+    U64(0xc6e00bf33da88fc2), U64(0xd5a79147930aa725),
+    U64(0x06ca6351e003826f), U64(0x142929670a0e6e70),
+    U64(0x27b70a8546d22ffc), U64(0x2e1b21385c26c926),
+    U64(0x4d2c6dfc5ac42aed), U64(0x53380d139d95b3df),
+    U64(0x650a73548baf63de), U64(0x766a0abb3c77b2a8),
+    U64(0x81c2c92e47edaee6), U64(0x92722c851482353b),
+    U64(0xa2bfe8a14cf10364), U64(0xa81a664bbc423001),
+    U64(0xc24b8b70d0f89791), U64(0xc76c51a30654be30),
+    U64(0xd192e819d6ef5218), U64(0xd69906245565a910),
+    U64(0xf40e35855771202a), U64(0x106aa07032bbd1b8),
+    U64(0x19a4c116b8d2d0c8), U64(0x1e376c085141ab53),
+    U64(0x2748774cdf8eeb99), U64(0x34b0bcb5e19b48a8),
+    U64(0x391c0cb3c5c95a63), U64(0x4ed8aa4ae3418acb),
+    U64(0x5b9cca4f7763e373), U64(0x682e6ff3d6b2b8a3),
+    U64(0x748f82ee5defb2fc), U64(0x78a5636f43172f60),
+    U64(0x84c87814a1f0ab72), U64(0x8cc702081a6439ec),
+    U64(0x90befffa23631e28), U64(0xa4506cebde82bde9),
+    U64(0xbef9a3f7b2c67915), U64(0xc67178f2e372532b),
+    U64(0xca273eceea26619c), U64(0xd186b8c721c0c207),
+    U64(0xeada7dd6cde0eb1e), U64(0xf57d4f7fee6ed178),
+    U64(0x06f067aa72176fba), U64(0x0a637dc5a2c898a6),
+    U64(0x113f9804bef90dae), U64(0x1b710b35131c471b),
+    U64(0x28db77f523047d84), U64(0x32caab7b40c72493),
+    U64(0x3c9ebe0a15c9bebc), U64(0x431d67c49c100d4c),
+    U64(0x4cc5d4becb3e42b6), U64(0x597f299cfc657e2a),
+    U64(0x5fcb6fab3ad6faec), U64(0x6c44198c4a475817)
+};
+
+# ifndef PEDANTIC
+#  if defined(__GNUC__) && __GNUC__>=2 && \
+      !defined(OPENSSL_NO_ASM) && !defined(OPENSSL_NO_INLINE_ASM)
+#   if defined(__x86_64) || defined(__x86_64__)
+#    define ROTR(a,n)    ({ SHA_LONG64 ret;             \
+                                asm ("rorq %1,%0"       \
+                                : "=r"(ret)             \
+                                : "J"(n),"0"(a)         \
+                                : "cc"); ret;           })
+#    if !defined(B_ENDIAN)
+#     define PULL64(x) ({ SHA_LONG64 ret=*((const SHA_LONG64 *)(&(x)));  \
+                                asm ("bswapq    %0"             \
+                                : "=r"(ret)                     \
+                                : "0"(ret)); ret;               })
+#    endif
+#   elif (defined(__i386) || defined(__i386__)) && !defined(B_ENDIAN)
+#    if defined(I386_ONLY)
+#     define PULL64(x) ({ const unsigned int *p=(const unsigned int *)(&(x));\
+                          unsigned int hi=p[0],lo=p[1];          \
+                                asm("xchgb %%ah,%%al;xchgb %%dh,%%dl;"\
+                                    "roll $16,%%eax; roll $16,%%edx; "\
+                                    "xchgb %%ah,%%al;xchgb %%dh,%%dl;"\
+                                : "=a"(lo),"=d"(hi)             \
+                                : "0"(lo),"1"(hi) : "cc");      \
+                                ((SHA_LONG64)hi)<<32|lo;        })
+#    else
+#     define PULL64(x) ({ const unsigned int *p=(const unsigned int *)(&(x));\
+                          unsigned int hi=p[0],lo=p[1];         \
+                                asm ("bswapl %0; bswapl %1;"    \
+                                : "=r"(lo),"=r"(hi)             \
+                                : "0"(lo),"1"(hi));             \
+                                ((SHA_LONG64)hi)<<32|lo;        })
+#    endif
+#   elif (defined(_ARCH_PPC) && defined(__64BIT__)) || defined(_ARCH_PPC64)
+#    define ROTR(a,n)    ({ SHA_LONG64 ret;             \
+                                asm ("rotrdi %0,%1,%2"  \
+                                : "=r"(ret)             \
+                                : "r"(a),"K"(n)); ret;  })
+#   elif defined(__aarch64__)
+#    define ROTR(a,n)    ({ SHA_LONG64 ret;             \
+                                asm ("ror %0,%1,%2"     \
+                                : "=r"(ret)             \
+                                : "r"(a),"I"(n)); ret;  })
+#    if  defined(__BYTE_ORDER__) && defined(__ORDER_LITTLE_ENDIAN__) && \
+        __BYTE_ORDER__==__ORDER_LITTLE_ENDIAN__
+#     define PULL64(x)   ({ SHA_LONG64 ret;                     \
+                                asm ("rev       %0,%1"          \
+                                : "=r"(ret)                     \
+                                : "r"(*((const SHA_LONG64 *)(&(x))))); ret; })
+#    endif
+#   endif
+#  elif defined(_MSC_VER)
+#   if defined(_WIN64)         /* applies to both IA-64 and AMD64 */
+#    pragma intrinsic(_rotr64)
+#    define ROTR(a,n)    _rotr64((a),n)
+#   endif
+#   if defined(_M_IX86) && !defined(OPENSSL_NO_ASM) && \
+       !defined(OPENSSL_NO_INLINE_ASM)
+#    if defined(I386_ONLY)
+static SHA_LONG64 __fastcall __pull64be(const void *x)
+{
+    _asm mov  edx,[ecx + 0]
+    _asm mov  eax,[ecx + 4]
+    _asm xchg dh, dl
+    _asm xchg ah, al
+    _asm rol  edx, 16
+    _asm rol  eax, 16
+    _asm xchg dh, dl
+    _asm xchg ah, al
+}
+#    else
+static SHA_LONG64 __fastcall __pull64be(const void *x)
+{
+    _asm mov   edx,[ecx + 0]
+    _asm mov   eax,[ecx + 4]
+    _asm bswap edx
+    _asm bswap eax
+}
+#    endif
+#    define PULL64(x) __pull64be(&(x))
+#   endif
+#  endif
+# endif
+# ifndef PULL64
+#  define B(x,j)    (((SHA_LONG64)(*(((const unsigned char *)(&x))+j)))<<((7-j)*8))
+#  define PULL64(x) (B(x,0)|B(x,1)|B(x,2)|B(x,3)|B(x,4)|B(x,5)|B(x,6)|B(x,7))
+# endif
+# ifndef ROTR
+#  define ROTR(x,s)       (((x)>>s) | (x)<<(64-s))
+# endif
+# define Sigma0(x)       (ROTR((x),28) ^ ROTR((x),34) ^ ROTR((x),39))
+# define Sigma1(x)       (ROTR((x),14) ^ ROTR((x),18) ^ ROTR((x),41))
+# define sigma0(x)       (ROTR((x),1)  ^ ROTR((x),8)  ^ ((x)>>7))
+# define sigma1(x)       (ROTR((x),19) ^ ROTR((x),61) ^ ((x)>>6))
+# define Ch(x,y,z)       (((x) & (y)) ^ ((~(x)) & (z)))
+# define Maj(x,y,z)      (((x) & (y)) ^ ((x) & (z)) ^ ((y) & (z)))
+
+# if defined(__i386) || defined(__i386__) || defined(_M_IX86)
+/*
+ * This code should give better results on 32-bit CPU with less than
+ * ~24 registers, both size and performance wise...
+ */
+
+static void sha512_block_data_order(SHA512_CTX *ctx, const void *in,
+                                    size_t num)
+{
+    const SHA_LONG64 *W = in;
+    SHA_LONG64 A, E, T;
+    SHA_LONG64 X[9 + 80], *F;
+    int i;
+
+    while (num--) {
+
+        F = X + 80;
+        A = ctx->h[0];
+        F[1] = ctx->h[1];
+        F[2] = ctx->h[2];
+        F[3] = ctx->h[3];
+        E = ctx->h[4];
+        F[5] = ctx->h[5];
+        F[6] = ctx->h[6];
+        F[7] = ctx->h[7];
+
+        for (i = 0; i < 16; i++, F--) {
+#  ifdef B_ENDIAN
+            T = W[i];
+#  else
+            T = PULL64(W[i]);
+#  endif
+            F[0] = A;
+            F[4] = E;
+            F[8] = T;
+            T += F[7] + Sigma1(E) + Ch(E, F[5], F[6]) + K512[i];
+            E = F[3] + T;
+            A = T + Sigma0(A) + Maj(A, F[1], F[2]);
+        }
+
+        for (; i < 80; i++, F--) {
+            T = sigma0(F[8 + 16 - 1]);
+            T += sigma1(F[8 + 16 - 14]);
+            T += F[8 + 16] + F[8 + 16 - 9];
+
+            F[0] = A;
+            F[4] = E;
+            F[8] = T;
+            T += F[7] + Sigma1(E) + Ch(E, F[5], F[6]) + K512[i];
+            E = F[3] + T;
+            A = T + Sigma0(A) + Maj(A, F[1], F[2]);
+        }
+
+        ctx->h[0] += A;
+        ctx->h[1] += F[1];
+        ctx->h[2] += F[2];
+        ctx->h[3] += F[3];
+        ctx->h[4] += E;
+        ctx->h[5] += F[5];
+        ctx->h[6] += F[6];
+        ctx->h[7] += F[7];
+
+        W += SHA_LBLOCK;
+    }
+}
+
+# elif defined(OPENSSL_SMALL_FOOTPRINT)
+
+static void sha512_block_data_order(SHA512_CTX *ctx, const void *in,
+                                    size_t num)
+{
+    const SHA_LONG64 *W = in;
+    SHA_LONG64 a, b, c, d, e, f, g, h, s0, s1, T1, T2;
+    SHA_LONG64 X[16];
+    int i;
+
+    while (num--) {
+
+        a = ctx->h[0];
+        b = ctx->h[1];
+        c = ctx->h[2];
+        d = ctx->h[3];
+        e = ctx->h[4];
+        f = ctx->h[5];
+        g = ctx->h[6];
+        h = ctx->h[7];
+
+        for (i = 0; i < 16; i++) {
+#  ifdef B_ENDIAN
+            T1 = X[i] = W[i];
+#  else
+            T1 = X[i] = PULL64(W[i]);
+#  endif
+            T1 += h + Sigma1(e) + Ch(e, f, g) + K512[i];
+            T2 = Sigma0(a) + Maj(a, b, c);
+            h = g;
+            g = f;
+            f = e;
+            e = d + T1;
+            d = c;
+            c = b;
+            b = a;
+            a = T1 + T2;
+        }
+
+        for (; i < 80; i++) {
+            s0 = X[(i + 1) & 0x0f];
+            s0 = sigma0(s0);
+            s1 = X[(i + 14) & 0x0f];
+            s1 = sigma1(s1);
+
+            T1 = X[i & 0xf] += s0 + s1 + X[(i + 9) & 0xf];
+            T1 += h + Sigma1(e) + Ch(e, f, g) + K512[i];
+            T2 = Sigma0(a) + Maj(a, b, c);
+            h = g;
+            g = f;
+            f = e;
+            e = d + T1;
+            d = c;
+            c = b;
+            b = a;
+            a = T1 + T2;
+        }
+
+        ctx->h[0] += a;
+        ctx->h[1] += b;
+        ctx->h[2] += c;
+        ctx->h[3] += d;
+        ctx->h[4] += e;
+        ctx->h[5] += f;
+        ctx->h[6] += g;
+        ctx->h[7] += h;
+
+        W += SHA_LBLOCK;
+    }
+}
+
+# else
+#  define ROUND_00_15(i,a,b,c,d,e,f,g,h)        do {    \
+        T1 += h + Sigma1(e) + Ch(e,f,g) + K512[i];      \
+        h = Sigma0(a) + Maj(a,b,c);                     \
+        d += T1;        h += T1;                        } while (0)
+
+#  define ROUND_16_80(i,j,a,b,c,d,e,f,g,h,X)    do {    \
+        s0 = X[(j+1)&0x0f];     s0 = sigma0(s0);        \
+        s1 = X[(j+14)&0x0f];    s1 = sigma1(s1);        \
+        T1 = X[(j)&0x0f] += s0 + s1 + X[(j+9)&0x0f];    \
+        ROUND_00_15(i+j,a,b,c,d,e,f,g,h);               } while (0)
+
+static void sha512_block_data_order(SHA512_CTX *ctx, const void *in,
+                                    size_t num)
+{
+    const SHA_LONG64 *W = in;
+    SHA_LONG64 a, b, c, d, e, f, g, h, s0, s1, T1;
+    SHA_LONG64 X[16];
+    int i;
+
+    while (num--) {
+
+        a = ctx->h[0];
+        b = ctx->h[1];
+        c = ctx->h[2];
+        d = ctx->h[3];
+        e = ctx->h[4];
+        f = ctx->h[5];
+        g = ctx->h[6];
+        h = ctx->h[7];
+
+#  ifdef B_ENDIAN
+        T1 = X[0] = W[0];
+        ROUND_00_15(0, a, b, c, d, e, f, g, h);
+        T1 = X[1] = W[1];
+        ROUND_00_15(1, h, a, b, c, d, e, f, g);
+        T1 = X[2] = W[2];
+        ROUND_00_15(2, g, h, a, b, c, d, e, f);
+        T1 = X[3] = W[3];
+        ROUND_00_15(3, f, g, h, a, b, c, d, e);
+        T1 = X[4] = W[4];
+        ROUND_00_15(4, e, f, g, h, a, b, c, d);
+        T1 = X[5] = W[5];
+        ROUND_00_15(5, d, e, f, g, h, a, b, c);
+        T1 = X[6] = W[6];
+        ROUND_00_15(6, c, d, e, f, g, h, a, b);
+        T1 = X[7] = W[7];
+        ROUND_00_15(7, b, c, d, e, f, g, h, a);
+        T1 = X[8] = W[8];
+        ROUND_00_15(8, a, b, c, d, e, f, g, h);
+        T1 = X[9] = W[9];
+        ROUND_00_15(9, h, a, b, c, d, e, f, g);
+        T1 = X[10] = W[10];
+        ROUND_00_15(10, g, h, a, b, c, d, e, f);
+        T1 = X[11] = W[11];
+        ROUND_00_15(11, f, g, h, a, b, c, d, e);
+        T1 = X[12] = W[12];
+        ROUND_00_15(12, e, f, g, h, a, b, c, d);
+        T1 = X[13] = W[13];
+        ROUND_00_15(13, d, e, f, g, h, a, b, c);
+        T1 = X[14] = W[14];
+        ROUND_00_15(14, c, d, e, f, g, h, a, b);
+        T1 = X[15] = W[15];
+        ROUND_00_15(15, b, c, d, e, f, g, h, a);
+#  else
+        T1 = X[0] = PULL64(W[0]);
+        ROUND_00_15(0, a, b, c, d, e, f, g, h);
+        T1 = X[1] = PULL64(W[1]);
+        ROUND_00_15(1, h, a, b, c, d, e, f, g);
+        T1 = X[2] = PULL64(W[2]);
+        ROUND_00_15(2, g, h, a, b, c, d, e, f);
+        T1 = X[3] = PULL64(W[3]);
+        ROUND_00_15(3, f, g, h, a, b, c, d, e);
+        T1 = X[4] = PULL64(W[4]);
+        ROUND_00_15(4, e, f, g, h, a, b, c, d);
+        T1 = X[5] = PULL64(W[5]);
+        ROUND_00_15(5, d, e, f, g, h, a, b, c);
+        T1 = X[6] = PULL64(W[6]);
+        ROUND_00_15(6, c, d, e, f, g, h, a, b);
+        T1 = X[7] = PULL64(W[7]);
+        ROUND_00_15(7, b, c, d, e, f, g, h, a);
+        T1 = X[8] = PULL64(W[8]);
+        ROUND_00_15(8, a, b, c, d, e, f, g, h);
+        T1 = X[9] = PULL64(W[9]);
+        ROUND_00_15(9, h, a, b, c, d, e, f, g);
+        T1 = X[10] = PULL64(W[10]);
+        ROUND_00_15(10, g, h, a, b, c, d, e, f);
+        T1 = X[11] = PULL64(W[11]);
+        ROUND_00_15(11, f, g, h, a, b, c, d, e);
+        T1 = X[12] = PULL64(W[12]);
+        ROUND_00_15(12, e, f, g, h, a, b, c, d);
+        T1 = X[13] = PULL64(W[13]);
+        ROUND_00_15(13, d, e, f, g, h, a, b, c);
+        T1 = X[14] = PULL64(W[14]);
+        ROUND_00_15(14, c, d, e, f, g, h, a, b);
+        T1 = X[15] = PULL64(W[15]);
+        ROUND_00_15(15, b, c, d, e, f, g, h, a);
+#  endif
+
+        for (i = 16; i < 80; i += 16) {
+            ROUND_16_80(i, 0, a, b, c, d, e, f, g, h, X);
+            ROUND_16_80(i, 1, h, a, b, c, d, e, f, g, X);
+            ROUND_16_80(i, 2, g, h, a, b, c, d, e, f, X);
+            ROUND_16_80(i, 3, f, g, h, a, b, c, d, e, X);
+            ROUND_16_80(i, 4, e, f, g, h, a, b, c, d, X);
+            ROUND_16_80(i, 5, d, e, f, g, h, a, b, c, X);
+            ROUND_16_80(i, 6, c, d, e, f, g, h, a, b, X);
+            ROUND_16_80(i, 7, b, c, d, e, f, g, h, a, X);
+            ROUND_16_80(i, 8, a, b, c, d, e, f, g, h, X);
+            ROUND_16_80(i, 9, h, a, b, c, d, e, f, g, X);
+            ROUND_16_80(i, 10, g, h, a, b, c, d, e, f, X);
+            ROUND_16_80(i, 11, f, g, h, a, b, c, d, e, X);
+            ROUND_16_80(i, 12, e, f, g, h, a, b, c, d, X);
+            ROUND_16_80(i, 13, d, e, f, g, h, a, b, c, X);
+            ROUND_16_80(i, 14, c, d, e, f, g, h, a, b, X);
+            ROUND_16_80(i, 15, b, c, d, e, f, g, h, a, X);
+        }
+
+        ctx->h[0] += a;
+        ctx->h[1] += b;
+        ctx->h[2] += c;
+        ctx->h[3] += d;
+        ctx->h[4] += e;
+        ctx->h[5] += f;
+        ctx->h[6] += g;
+        ctx->h[7] += h;
+
+        W += SHA_LBLOCK;
+    }
+}
+
+# endif
+
+#endif                         /* SHA512_ASM */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha_locl.h
new file mode 100644
index 000000000..4e5a09038
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sha/sha_locl.h
@@ -0,0 +1,424 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdlib.h>
+#include <string.h>
+
+#include <openssl/opensslconf.h>
+#include <openssl/sha.h>
+
+#define DATA_ORDER_IS_BIG_ENDIAN
+
+#define HASH_LONG               SHA_LONG
+#define HASH_CTX                SHA_CTX
+#define HASH_CBLOCK             SHA_CBLOCK
+#define HASH_MAKE_STRING(c,s)   do {    \
+        unsigned long ll;               \
+        ll=(c)->h0; (void)HOST_l2c(ll,(s));     \
+        ll=(c)->h1; (void)HOST_l2c(ll,(s));     \
+        ll=(c)->h2; (void)HOST_l2c(ll,(s));     \
+        ll=(c)->h3; (void)HOST_l2c(ll,(s));     \
+        ll=(c)->h4; (void)HOST_l2c(ll,(s));     \
+        } while (0)
+
+#define HASH_UPDATE                     SHA1_Update
+#define HASH_TRANSFORM                  SHA1_Transform
+#define HASH_FINAL                      SHA1_Final
+#define HASH_INIT                       SHA1_Init
+#define HASH_BLOCK_DATA_ORDER           sha1_block_data_order
+#define Xupdate(a,ix,ia,ib,ic,id)       ( (a)=(ia^ib^ic^id),    \
+                                          ix=(a)=ROTATE((a),1)  \
+                                        )
+
+#ifndef SHA1_ASM
+static void sha1_block_data_order(SHA_CTX *c, const void *p, size_t num);
+#else
+void sha1_block_data_order(SHA_CTX *c, const void *p, size_t num);
+#endif
+
+#include "internal/md32_common.h"
+
+#define INIT_DATA_h0 0x67452301UL
+#define INIT_DATA_h1 0xefcdab89UL
+#define INIT_DATA_h2 0x98badcfeUL
+#define INIT_DATA_h3 0x10325476UL
+#define INIT_DATA_h4 0xc3d2e1f0UL
+
+int HASH_INIT(SHA_CTX *c)
+{
+    memset(c, 0, sizeof(*c));
+    c->h0 = INIT_DATA_h0;
+    c->h1 = INIT_DATA_h1;
+    c->h2 = INIT_DATA_h2;
+    c->h3 = INIT_DATA_h3;
+    c->h4 = INIT_DATA_h4;
+    return 1;
+}
+
+#define K_00_19 0x5a827999UL
+#define K_20_39 0x6ed9eba1UL
+#define K_40_59 0x8f1bbcdcUL
+#define K_60_79 0xca62c1d6UL
+
+/*
+ * As pointed out by Wei Dai, F() below can be simplified to the code in
+ * F_00_19.  Wei attributes these optimizations to Peter Gutmann's SHS code,
+ * and he attributes it to Rich Schroeppel.
+ *      #define F(x,y,z) (((x) & (y)) | ((~(x)) & (z)))
+ * I've just become aware of another tweak to be made, again from Wei Dai,
+ * in F_40_59, (x&a)|(y&a) -> (x|y)&a
+ */
+#define F_00_19(b,c,d)  ((((c) ^ (d)) & (b)) ^ (d))
+#define F_20_39(b,c,d)  ((b) ^ (c) ^ (d))
+#define F_40_59(b,c,d)  (((b) & (c)) | (((b)|(c)) & (d)))
+#define F_60_79(b,c,d)  F_20_39(b,c,d)
+
+#ifndef OPENSSL_SMALL_FOOTPRINT
+
+# define BODY_00_15(i,a,b,c,d,e,f,xi) \
+        (f)=xi+(e)+K_00_19+ROTATE((a),5)+F_00_19((b),(c),(d)); \
+        (b)=ROTATE((b),30);
+
+# define BODY_16_19(i,a,b,c,d,e,f,xi,xa,xb,xc,xd) \
+        Xupdate(f,xi,xa,xb,xc,xd); \
+        (f)+=(e)+K_00_19+ROTATE((a),5)+F_00_19((b),(c),(d)); \
+        (b)=ROTATE((b),30);
+
+# define BODY_20_31(i,a,b,c,d,e,f,xi,xa,xb,xc,xd) \
+        Xupdate(f,xi,xa,xb,xc,xd); \
+        (f)+=(e)+K_20_39+ROTATE((a),5)+F_20_39((b),(c),(d)); \
+        (b)=ROTATE((b),30);
+
+# define BODY_32_39(i,a,b,c,d,e,f,xa,xb,xc,xd) \
+        Xupdate(f,xa,xa,xb,xc,xd); \
+        (f)+=(e)+K_20_39+ROTATE((a),5)+F_20_39((b),(c),(d)); \
+        (b)=ROTATE((b),30);
+
+# define BODY_40_59(i,a,b,c,d,e,f,xa,xb,xc,xd) \
+        Xupdate(f,xa,xa,xb,xc,xd); \
+        (f)+=(e)+K_40_59+ROTATE((a),5)+F_40_59((b),(c),(d)); \
+        (b)=ROTATE((b),30);
+
+# define BODY_60_79(i,a,b,c,d,e,f,xa,xb,xc,xd) \
+        Xupdate(f,xa,xa,xb,xc,xd); \
+        (f)=xa+(e)+K_60_79+ROTATE((a),5)+F_60_79((b),(c),(d)); \
+        (b)=ROTATE((b),30);
+
+# ifdef X
+#  undef X
+# endif
+# ifndef MD32_XARRAY
+  /*
+   * Originally X was an array. As it's automatic it's natural
+   * to expect RISC compiler to accommodate at least part of it in
+   * the register bank, isn't it? Unfortunately not all compilers
+   * "find" this expectation reasonable:-( On order to make such
+   * compilers generate better code I replace X[] with a bunch of
+   * X0, X1, etc. See the function body below...
+   */
+#  define X(i)   XX##i
+# else
+  /*
+   * However! Some compilers (most notably HP C) get overwhelmed by
+   * that many local variables so that we have to have the way to
+   * fall down to the original behavior.
+   */
+#  define X(i)   XX[i]
+# endif
+
+# if !defined(SHA1_ASM)
+static void HASH_BLOCK_DATA_ORDER(SHA_CTX *c, const void *p, size_t num)
+{
+    const unsigned char *data = p;
+    register unsigned MD32_REG_T A, B, C, D, E, T, l;
+#  ifndef MD32_XARRAY
+    unsigned MD32_REG_T XX0, XX1, XX2, XX3, XX4, XX5, XX6, XX7,
+        XX8, XX9, XX10, XX11, XX12, XX13, XX14, XX15;
+#  else
+    SHA_LONG XX[16];
+#  endif
+
+    A = c->h0;
+    B = c->h1;
+    C = c->h2;
+    D = c->h3;
+    E = c->h4;
+
+    for (;;) {
+        const union {
+            long one;
+            char little;
+        } is_endian = {
+            1
+        };
+
+        if (!is_endian.little && sizeof(SHA_LONG) == 4
+            && ((size_t)p % 4) == 0) {
+            const SHA_LONG *W = (const SHA_LONG *)data;
+
+            X(0) = W[0];
+            X(1) = W[1];
+            BODY_00_15(0, A, B, C, D, E, T, X(0));
+            X(2) = W[2];
+            BODY_00_15(1, T, A, B, C, D, E, X(1));
+            X(3) = W[3];
+            BODY_00_15(2, E, T, A, B, C, D, X(2));
+            X(4) = W[4];
+            BODY_00_15(3, D, E, T, A, B, C, X(3));
+            X(5) = W[5];
+            BODY_00_15(4, C, D, E, T, A, B, X(4));
+            X(6) = W[6];
+            BODY_00_15(5, B, C, D, E, T, A, X(5));
+            X(7) = W[7];
+            BODY_00_15(6, A, B, C, D, E, T, X(6));
+            X(8) = W[8];
+            BODY_00_15(7, T, A, B, C, D, E, X(7));
+            X(9) = W[9];
+            BODY_00_15(8, E, T, A, B, C, D, X(8));
+            X(10) = W[10];
+            BODY_00_15(9, D, E, T, A, B, C, X(9));
+            X(11) = W[11];
+            BODY_00_15(10, C, D, E, T, A, B, X(10));
+            X(12) = W[12];
+            BODY_00_15(11, B, C, D, E, T, A, X(11));
+            X(13) = W[13];
+            BODY_00_15(12, A, B, C, D, E, T, X(12));
+            X(14) = W[14];
+            BODY_00_15(13, T, A, B, C, D, E, X(13));
+            X(15) = W[15];
+            BODY_00_15(14, E, T, A, B, C, D, X(14));
+            BODY_00_15(15, D, E, T, A, B, C, X(15));
+
+            data += SHA_CBLOCK;
+        } else {
+            (void)HOST_c2l(data, l);
+            X(0) = l;
+            (void)HOST_c2l(data, l);
+            X(1) = l;
+            BODY_00_15(0, A, B, C, D, E, T, X(0));
+            (void)HOST_c2l(data, l);
+            X(2) = l;
+            BODY_00_15(1, T, A, B, C, D, E, X(1));
+            (void)HOST_c2l(data, l);
+            X(3) = l;
+            BODY_00_15(2, E, T, A, B, C, D, X(2));
+            (void)HOST_c2l(data, l);
+            X(4) = l;
+            BODY_00_15(3, D, E, T, A, B, C, X(3));
+            (void)HOST_c2l(data, l);
+            X(5) = l;
+            BODY_00_15(4, C, D, E, T, A, B, X(4));
+            (void)HOST_c2l(data, l);
+            X(6) = l;
+            BODY_00_15(5, B, C, D, E, T, A, X(5));
+            (void)HOST_c2l(data, l);
+            X(7) = l;
+            BODY_00_15(6, A, B, C, D, E, T, X(6));
+            (void)HOST_c2l(data, l);
+            X(8) = l;
+            BODY_00_15(7, T, A, B, C, D, E, X(7));
+            (void)HOST_c2l(data, l);
+            X(9) = l;
+            BODY_00_15(8, E, T, A, B, C, D, X(8));
+            (void)HOST_c2l(data, l);
+            X(10) = l;
+            BODY_00_15(9, D, E, T, A, B, C, X(9));
+            (void)HOST_c2l(data, l);
+            X(11) = l;
+            BODY_00_15(10, C, D, E, T, A, B, X(10));
+            (void)HOST_c2l(data, l);
+            X(12) = l;
+            BODY_00_15(11, B, C, D, E, T, A, X(11));
+            (void)HOST_c2l(data, l);
+            X(13) = l;
+            BODY_00_15(12, A, B, C, D, E, T, X(12));
+            (void)HOST_c2l(data, l);
+            X(14) = l;
+            BODY_00_15(13, T, A, B, C, D, E, X(13));
+            (void)HOST_c2l(data, l);
+            X(15) = l;
+            BODY_00_15(14, E, T, A, B, C, D, X(14));
+            BODY_00_15(15, D, E, T, A, B, C, X(15));
+        }
+
+        BODY_16_19(16, C, D, E, T, A, B, X(0), X(0), X(2), X(8), X(13));
+        BODY_16_19(17, B, C, D, E, T, A, X(1), X(1), X(3), X(9), X(14));
+        BODY_16_19(18, A, B, C, D, E, T, X(2), X(2), X(4), X(10), X(15));
+        BODY_16_19(19, T, A, B, C, D, E, X(3), X(3), X(5), X(11), X(0));
+
+        BODY_20_31(20, E, T, A, B, C, D, X(4), X(4), X(6), X(12), X(1));
+        BODY_20_31(21, D, E, T, A, B, C, X(5), X(5), X(7), X(13), X(2));
+        BODY_20_31(22, C, D, E, T, A, B, X(6), X(6), X(8), X(14), X(3));
+        BODY_20_31(23, B, C, D, E, T, A, X(7), X(7), X(9), X(15), X(4));
+        BODY_20_31(24, A, B, C, D, E, T, X(8), X(8), X(10), X(0), X(5));
+        BODY_20_31(25, T, A, B, C, D, E, X(9), X(9), X(11), X(1), X(6));
+        BODY_20_31(26, E, T, A, B, C, D, X(10), X(10), X(12), X(2), X(7));
+        BODY_20_31(27, D, E, T, A, B, C, X(11), X(11), X(13), X(3), X(8));
+        BODY_20_31(28, C, D, E, T, A, B, X(12), X(12), X(14), X(4), X(9));
+        BODY_20_31(29, B, C, D, E, T, A, X(13), X(13), X(15), X(5), X(10));
+        BODY_20_31(30, A, B, C, D, E, T, X(14), X(14), X(0), X(6), X(11));
+        BODY_20_31(31, T, A, B, C, D, E, X(15), X(15), X(1), X(7), X(12));
+
+        BODY_32_39(32, E, T, A, B, C, D, X(0), X(2), X(8), X(13));
+        BODY_32_39(33, D, E, T, A, B, C, X(1), X(3), X(9), X(14));
+        BODY_32_39(34, C, D, E, T, A, B, X(2), X(4), X(10), X(15));
+        BODY_32_39(35, B, C, D, E, T, A, X(3), X(5), X(11), X(0));
+        BODY_32_39(36, A, B, C, D, E, T, X(4), X(6), X(12), X(1));
+        BODY_32_39(37, T, A, B, C, D, E, X(5), X(7), X(13), X(2));
+        BODY_32_39(38, E, T, A, B, C, D, X(6), X(8), X(14), X(3));
+        BODY_32_39(39, D, E, T, A, B, C, X(7), X(9), X(15), X(4));
+
+        BODY_40_59(40, C, D, E, T, A, B, X(8), X(10), X(0), X(5));
+        BODY_40_59(41, B, C, D, E, T, A, X(9), X(11), X(1), X(6));
+        BODY_40_59(42, A, B, C, D, E, T, X(10), X(12), X(2), X(7));
+        BODY_40_59(43, T, A, B, C, D, E, X(11), X(13), X(3), X(8));
+        BODY_40_59(44, E, T, A, B, C, D, X(12), X(14), X(4), X(9));
+        BODY_40_59(45, D, E, T, A, B, C, X(13), X(15), X(5), X(10));
+        BODY_40_59(46, C, D, E, T, A, B, X(14), X(0), X(6), X(11));
+        BODY_40_59(47, B, C, D, E, T, A, X(15), X(1), X(7), X(12));
+        BODY_40_59(48, A, B, C, D, E, T, X(0), X(2), X(8), X(13));
+        BODY_40_59(49, T, A, B, C, D, E, X(1), X(3), X(9), X(14));
+        BODY_40_59(50, E, T, A, B, C, D, X(2), X(4), X(10), X(15));
+        BODY_40_59(51, D, E, T, A, B, C, X(3), X(5), X(11), X(0));
+        BODY_40_59(52, C, D, E, T, A, B, X(4), X(6), X(12), X(1));
+        BODY_40_59(53, B, C, D, E, T, A, X(5), X(7), X(13), X(2));
+        BODY_40_59(54, A, B, C, D, E, T, X(6), X(8), X(14), X(3));
+        BODY_40_59(55, T, A, B, C, D, E, X(7), X(9), X(15), X(4));
+        BODY_40_59(56, E, T, A, B, C, D, X(8), X(10), X(0), X(5));
+        BODY_40_59(57, D, E, T, A, B, C, X(9), X(11), X(1), X(6));
+        BODY_40_59(58, C, D, E, T, A, B, X(10), X(12), X(2), X(7));
+        BODY_40_59(59, B, C, D, E, T, A, X(11), X(13), X(3), X(8));
+
+        BODY_60_79(60, A, B, C, D, E, T, X(12), X(14), X(4), X(9));
+        BODY_60_79(61, T, A, B, C, D, E, X(13), X(15), X(5), X(10));
+        BODY_60_79(62, E, T, A, B, C, D, X(14), X(0), X(6), X(11));
+        BODY_60_79(63, D, E, T, A, B, C, X(15), X(1), X(7), X(12));
+        BODY_60_79(64, C, D, E, T, A, B, X(0), X(2), X(8), X(13));
+        BODY_60_79(65, B, C, D, E, T, A, X(1), X(3), X(9), X(14));
+        BODY_60_79(66, A, B, C, D, E, T, X(2), X(4), X(10), X(15));
+        BODY_60_79(67, T, A, B, C, D, E, X(3), X(5), X(11), X(0));
+        BODY_60_79(68, E, T, A, B, C, D, X(4), X(6), X(12), X(1));
+        BODY_60_79(69, D, E, T, A, B, C, X(5), X(7), X(13), X(2));
+        BODY_60_79(70, C, D, E, T, A, B, X(6), X(8), X(14), X(3));
+        BODY_60_79(71, B, C, D, E, T, A, X(7), X(9), X(15), X(4));
+        BODY_60_79(72, A, B, C, D, E, T, X(8), X(10), X(0), X(5));
+        BODY_60_79(73, T, A, B, C, D, E, X(9), X(11), X(1), X(6));
+        BODY_60_79(74, E, T, A, B, C, D, X(10), X(12), X(2), X(7));
+        BODY_60_79(75, D, E, T, A, B, C, X(11), X(13), X(3), X(8));
+        BODY_60_79(76, C, D, E, T, A, B, X(12), X(14), X(4), X(9));
+        BODY_60_79(77, B, C, D, E, T, A, X(13), X(15), X(5), X(10));
+        BODY_60_79(78, A, B, C, D, E, T, X(14), X(0), X(6), X(11));
+        BODY_60_79(79, T, A, B, C, D, E, X(15), X(1), X(7), X(12));
+
+        c->h0 = (c->h0 + E) & 0xffffffffL;
+        c->h1 = (c->h1 + T) & 0xffffffffL;
+        c->h2 = (c->h2 + A) & 0xffffffffL;
+        c->h3 = (c->h3 + B) & 0xffffffffL;
+        c->h4 = (c->h4 + C) & 0xffffffffL;
+
+        if (--num == 0)
+            break;
+
+        A = c->h0;
+        B = c->h1;
+        C = c->h2;
+        D = c->h3;
+        E = c->h4;
+
+    }
+}
+# endif
+
+#else                           /* OPENSSL_SMALL_FOOTPRINT */
+
+# define BODY_00_15(xi)           do {   \
+        T=E+K_00_19+F_00_19(B,C,D);     \
+        E=D, D=C, C=ROTATE(B,30), B=A;  \
+        A=ROTATE(A,5)+T+xi;         } while(0)
+
+# define BODY_16_19(xa,xb,xc,xd)  do {   \
+        Xupdate(T,xa,xa,xb,xc,xd);      \
+        T+=E+K_00_19+F_00_19(B,C,D);    \
+        E=D, D=C, C=ROTATE(B,30), B=A;  \
+        A=ROTATE(A,5)+T;            } while(0)
+
+# define BODY_20_39(xa,xb,xc,xd)  do {   \
+        Xupdate(T,xa,xa,xb,xc,xd);      \
+        T+=E+K_20_39+F_20_39(B,C,D);    \
+        E=D, D=C, C=ROTATE(B,30), B=A;  \
+        A=ROTATE(A,5)+T;            } while(0)
+
+# define BODY_40_59(xa,xb,xc,xd)  do {   \
+        Xupdate(T,xa,xa,xb,xc,xd);      \
+        T+=E+K_40_59+F_40_59(B,C,D);    \
+        E=D, D=C, C=ROTATE(B,30), B=A;  \
+        A=ROTATE(A,5)+T;            } while(0)
+
+# define BODY_60_79(xa,xb,xc,xd)  do {   \
+        Xupdate(T,xa,xa,xb,xc,xd);      \
+        T=E+K_60_79+F_60_79(B,C,D);     \
+        E=D, D=C, C=ROTATE(B,30), B=A;  \
+        A=ROTATE(A,5)+T+xa;         } while(0)
+
+# if !defined(SHA1_ASM)
+static void HASH_BLOCK_DATA_ORDER(SHA_CTX *c, const void *p, size_t num)
+{
+    const unsigned char *data = p;
+    register unsigned MD32_REG_T A, B, C, D, E, T, l;
+    int i;
+    SHA_LONG X[16];
+
+    A = c->h0;
+    B = c->h1;
+    C = c->h2;
+    D = c->h3;
+    E = c->h4;
+
+    for (;;) {
+        for (i = 0; i < 16; i++) {
+            (void)HOST_c2l(data, l);
+            X[i] = l;
+            BODY_00_15(X[i]);
+        }
+        for (i = 0; i < 4; i++) {
+            BODY_16_19(X[i], X[i + 2], X[i + 8], X[(i + 13) & 15]);
+        }
+        for (; i < 24; i++) {
+            BODY_20_39(X[i & 15], X[(i + 2) & 15], X[(i + 8) & 15],
+                       X[(i + 13) & 15]);
+        }
+        for (i = 0; i < 20; i++) {
+            BODY_40_59(X[(i + 8) & 15], X[(i + 10) & 15], X[i & 15],
+                       X[(i + 5) & 15]);
+        }
+        for (i = 4; i < 24; i++) {
+            BODY_60_79(X[(i + 8) & 15], X[(i + 10) & 15], X[i & 15],
+                       X[(i + 5) & 15]);
+        }
+
+        c->h0 = (c->h0 + A) & 0xffffffffL;
+        c->h1 = (c->h1 + B) & 0xffffffffL;
+        c->h2 = (c->h2 + C) & 0xffffffffL;
+        c->h3 = (c->h3 + D) & 0xffffffffL;
+        c->h4 = (c->h4 + E) & 0xffffffffL;
+
+        if (--num == 0)
+            break;
+
+        A = c->h0;
+        B = c->h1;
+        C = c->h2;
+        D = c->h3;
+        E = c->h4;
+
+    }
+}
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/siphash/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/siphash/build.info
new file mode 100644
index 000000000..4166344a5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/siphash/build.info
@@ -0,0 +1,5 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+	siphash.c \
+	siphash_pmeth.c \
+	siphash_ameth.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/siphash/siphash.c b/trunk/3rdparty/openssl-1.1-fit/crypto/siphash/siphash.c
new file mode 100644
index 000000000..be74a38d9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/siphash/siphash.c
@@ -0,0 +1,260 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* Based on https://131002.net/siphash C reference implementation */
+/*
+   SipHash reference C implementation
+
+   Copyright (c) 2012-2016 Jean-Philippe Aumasson
+   Copyright (c) 2012-2014 Daniel J. Bernstein
+
+   To the extent possible under law, the author(s) have dedicated all copyright
+   and related and neighboring rights to this software to the public domain
+   worldwide. This software is distributed without any warranty.
+
+   You should have received a copy of the CC0 Public Domain Dedication along
+   with this software. If not, see
+   <http://creativecommons.org/publicdomain/zero/1.0/>.
+ */
+
+#include <stdlib.h>
+#include <string.h>
+#include <openssl/crypto.h>
+
+#include "internal/siphash.h"
+#include "siphash_local.h"
+
+/* default: SipHash-2-4 */
+#define SIPHASH_C_ROUNDS 2
+#define SIPHASH_D_ROUNDS 4
+
+#define ROTL(x, b) (uint64_t)(((x) << (b)) | ((x) >> (64 - (b))))
+
+#define U32TO8_LE(p, v)                                                        \
+    (p)[0] = (uint8_t)((v));                                                   \
+    (p)[1] = (uint8_t)((v) >> 8);                                              \
+    (p)[2] = (uint8_t)((v) >> 16);                                             \
+    (p)[3] = (uint8_t)((v) >> 24);
+
+#define U64TO8_LE(p, v)                                                        \
+    U32TO8_LE((p), (uint32_t)((v)));                                           \
+    U32TO8_LE((p) + 4, (uint32_t)((v) >> 32));
+
+#define U8TO64_LE(p)                                                           \
+    (((uint64_t)((p)[0])) | ((uint64_t)((p)[1]) << 8) |                        \
+     ((uint64_t)((p)[2]) << 16) | ((uint64_t)((p)[3]) << 24) |                 \
+     ((uint64_t)((p)[4]) << 32) | ((uint64_t)((p)[5]) << 40) |                 \
+     ((uint64_t)((p)[6]) << 48) | ((uint64_t)((p)[7]) << 56))
+
+#define SIPROUND                                                               \
+    do {                                                                       \
+        v0 += v1;                                                              \
+        v1 = ROTL(v1, 13);                                                     \
+        v1 ^= v0;                                                              \
+        v0 = ROTL(v0, 32);                                                     \
+        v2 += v3;                                                              \
+        v3 = ROTL(v3, 16);                                                     \
+        v3 ^= v2;                                                              \
+        v0 += v3;                                                              \
+        v3 = ROTL(v3, 21);                                                     \
+        v3 ^= v0;                                                              \
+        v2 += v1;                                                              \
+        v1 = ROTL(v1, 17);                                                     \
+        v1 ^= v2;                                                              \
+        v2 = ROTL(v2, 32);                                                     \
+    } while (0)
+
+size_t SipHash_ctx_size(void)
+{
+    return sizeof(SIPHASH);
+}
+
+size_t SipHash_hash_size(SIPHASH *ctx)
+{
+    return ctx->hash_size;
+}
+
+static size_t siphash_adjust_hash_size(size_t hash_size)
+{
+    if (hash_size == 0)
+        hash_size = SIPHASH_MAX_DIGEST_SIZE;
+    return hash_size;
+}
+
+int SipHash_set_hash_size(SIPHASH *ctx, size_t hash_size)
+{
+    hash_size = siphash_adjust_hash_size(hash_size);
+    if (hash_size != SIPHASH_MIN_DIGEST_SIZE
+        && hash_size != SIPHASH_MAX_DIGEST_SIZE)
+        return 0;
+
+    /*
+     * It's possible that the key was set first.  If the hash size changes,
+     * we need to adjust v1 (see SipHash_Init().
+     */
+
+    /* Start by adjusting the stored size, to make things easier */
+    ctx->hash_size = siphash_adjust_hash_size(ctx->hash_size);
+
+    /* Now, adjust ctx->v1 if the old and the new size differ */
+    if ((size_t)ctx->hash_size != hash_size) {
+        ctx->v1 ^= 0xee;
+        ctx->hash_size = hash_size;
+    }
+    return 1;
+}
+
+/* hash_size = crounds = drounds = 0 means SipHash24 with 16-byte output */
+int SipHash_Init(SIPHASH *ctx, const unsigned char *k, int crounds, int drounds)
+{
+    uint64_t k0 = U8TO64_LE(k);
+    uint64_t k1 = U8TO64_LE(k + 8);
+
+    /* If the hash size wasn't set, i.e. is zero */
+    ctx->hash_size = siphash_adjust_hash_size(ctx->hash_size);
+
+    if (drounds == 0)
+        drounds = SIPHASH_D_ROUNDS;
+    if (crounds == 0)
+        crounds = SIPHASH_C_ROUNDS;
+
+    ctx->crounds = crounds;
+    ctx->drounds = drounds;
+
+    ctx->len = 0;
+    ctx->total_inlen = 0;
+
+    ctx->v0 = 0x736f6d6570736575ULL ^ k0;
+    ctx->v1 = 0x646f72616e646f6dULL ^ k1;
+    ctx->v2 = 0x6c7967656e657261ULL ^ k0;
+    ctx->v3 = 0x7465646279746573ULL ^ k1;
+
+    if (ctx->hash_size == SIPHASH_MAX_DIGEST_SIZE)
+        ctx->v1 ^= 0xee;
+
+    return 1;
+}
+
+void SipHash_Update(SIPHASH *ctx, const unsigned char *in, size_t inlen)
+{
+    uint64_t m;
+    const uint8_t *end;
+    int left;
+    int i;
+    uint64_t v0 = ctx->v0;
+    uint64_t v1 = ctx->v1;
+    uint64_t v2 = ctx->v2;
+    uint64_t v3 = ctx->v3;
+
+    ctx->total_inlen += inlen;
+
+    if (ctx->len) {
+        /* deal with leavings */
+        size_t available = SIPHASH_BLOCK_SIZE - ctx->len;
+
+        /* not enough to fill leavings */
+        if (inlen < available) {
+            memcpy(&ctx->leavings[ctx->len], in, inlen);
+            ctx->len += inlen;
+            return;
+        }
+
+        /* copy data into leavings and reduce input */
+        memcpy(&ctx->leavings[ctx->len], in, available);
+        inlen -= available;
+        in += available;
+
+        /* process leavings */
+        m = U8TO64_LE(ctx->leavings);
+        v3 ^= m;
+        for (i = 0; i < ctx->crounds; ++i)
+            SIPROUND;
+        v0 ^= m;
+    }
+    left = inlen & (SIPHASH_BLOCK_SIZE-1); /* gets put into leavings */
+    end = in + inlen - left;
+
+    for (; in != end; in += 8) {
+        m = U8TO64_LE(in);
+        v3 ^= m;
+        for (i = 0; i < ctx->crounds; ++i)
+            SIPROUND;
+        v0 ^= m;
+    }
+
+    /* save leavings and other ctx */
+    if (left)
+        memcpy(ctx->leavings, end, left);
+    ctx->len = left;
+
+    ctx->v0 = v0;
+    ctx->v1 = v1;
+    ctx->v2 = v2;
+    ctx->v3 = v3;
+}
+
+int SipHash_Final(SIPHASH *ctx, unsigned char *out, size_t outlen)
+{
+    /* finalize hash */
+    int i;
+    uint64_t b = ctx->total_inlen << 56;
+    uint64_t v0 = ctx->v0;
+    uint64_t v1 = ctx->v1;
+    uint64_t v2 = ctx->v2;
+    uint64_t v3 = ctx->v3;
+
+    if (outlen != (size_t)ctx->hash_size)
+        return 0;
+
+    switch (ctx->len) {
+    case 7:
+        b |= ((uint64_t)ctx->leavings[6]) << 48;
+        /* fall thru */
+    case 6:
+        b |= ((uint64_t)ctx->leavings[5]) << 40;
+        /* fall thru */
+    case 5:
+        b |= ((uint64_t)ctx->leavings[4]) << 32;
+        /* fall thru */
+    case 4:
+        b |= ((uint64_t)ctx->leavings[3]) << 24;
+        /* fall thru */
+    case 3:
+        b |= ((uint64_t)ctx->leavings[2]) << 16;
+        /* fall thru */
+    case 2:
+        b |= ((uint64_t)ctx->leavings[1]) <<  8;
+        /* fall thru */
+    case 1:
+        b |= ((uint64_t)ctx->leavings[0]);
+    case 0:
+        break;
+    }
+
+    v3 ^= b;
+    for (i = 0; i < ctx->crounds; ++i)
+        SIPROUND;
+    v0 ^= b;
+    if (ctx->hash_size == SIPHASH_MAX_DIGEST_SIZE)
+        v2 ^= 0xee;
+    else
+        v2 ^= 0xff;
+    for (i = 0; i < ctx->drounds; ++i)
+        SIPROUND;
+    b = v0 ^ v1 ^ v2  ^ v3;
+    U64TO8_LE(out, b);
+    if (ctx->hash_size == SIPHASH_MIN_DIGEST_SIZE)
+        return 1;
+    v1 ^= 0xdd;
+    for (i = 0; i < ctx->drounds; ++i)
+        SIPROUND;
+    b = v0 ^ v1 ^ v2  ^ v3;
+    U64TO8_LE(out + 8, b);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/siphash/siphash_ameth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/siphash/siphash_ameth.c
new file mode 100644
index 000000000..c0ab7efae
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/siphash/siphash_ameth.c
@@ -0,0 +1,123 @@
+/*
+ * Copyright 2007-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include "internal/asn1_int.h"
+#include "internal/siphash.h"
+#include "siphash_local.h"
+#include "internal/evp_int.h"
+
+/*
+ * SIPHASH "ASN1" method. This is just here to indicate the maximum
+ * SIPHASH output length and to free up a SIPHASH key.
+ */
+
+static int siphash_size(const EVP_PKEY *pkey)
+{
+    return SIPHASH_MAX_DIGEST_SIZE;
+}
+
+static void siphash_key_free(EVP_PKEY *pkey)
+{
+    ASN1_OCTET_STRING *os = EVP_PKEY_get0(pkey);
+
+    if (os != NULL) {
+        if (os->data != NULL)
+            OPENSSL_cleanse(os->data, os->length);
+        ASN1_OCTET_STRING_free(os);
+    }
+}
+
+static int siphash_pkey_ctrl(EVP_PKEY *pkey, int op, long arg1, void *arg2)
+{
+    /* nothing (including ASN1_PKEY_CTRL_DEFAULT_MD_NID), is supported */
+    return -2;
+}
+
+static int siphash_pkey_public_cmp(const EVP_PKEY *a, const EVP_PKEY *b)
+{
+    return ASN1_OCTET_STRING_cmp(EVP_PKEY_get0(a), EVP_PKEY_get0(b));
+}
+
+static int siphash_set_priv_key(EVP_PKEY *pkey, const unsigned char *priv,
+                                size_t len)
+{
+    ASN1_OCTET_STRING *os;
+
+    if (pkey->pkey.ptr != NULL || len != SIPHASH_KEY_SIZE)
+        return 0;
+
+    os = ASN1_OCTET_STRING_new();
+    if (os == NULL)
+        return 0;
+
+    if (!ASN1_OCTET_STRING_set(os, priv, len)) {
+        ASN1_OCTET_STRING_free(os);
+        return 0;
+    }
+
+    pkey->pkey.ptr = os;
+    return 1;
+}
+
+static int siphash_get_priv_key(const EVP_PKEY *pkey, unsigned char *priv,
+                                size_t *len)
+{
+    ASN1_OCTET_STRING *os = (ASN1_OCTET_STRING *)pkey->pkey.ptr;
+
+    if (priv == NULL) {
+        *len = SIPHASH_KEY_SIZE;
+        return 1;
+    }
+
+    if (os == NULL || *len < SIPHASH_KEY_SIZE)
+        return 0;
+
+    memcpy(priv, ASN1_STRING_get0_data(os), ASN1_STRING_length(os));
+    *len = SIPHASH_KEY_SIZE;
+
+    return 1;
+}
+
+const EVP_PKEY_ASN1_METHOD siphash_asn1_meth = {
+    EVP_PKEY_SIPHASH,
+    EVP_PKEY_SIPHASH,
+    0,
+
+    "SIPHASH",
+    "OpenSSL SIPHASH method",
+
+    0, 0, siphash_pkey_public_cmp, 0,
+
+    0, 0, 0,
+
+    siphash_size,
+    0, 0,
+    0, 0, 0, 0, 0, 0, 0,
+
+    siphash_key_free,
+    siphash_pkey_ctrl,
+    NULL,
+    NULL,
+
+    NULL,
+    NULL,
+    NULL,
+
+    NULL,
+    NULL,
+    NULL,
+
+    siphash_set_priv_key,
+    NULL,
+    siphash_get_priv_key,
+    NULL,
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/siphash/siphash_local.h b/trunk/3rdparty/openssl-1.1-fit/crypto/siphash/siphash_local.h
new file mode 100644
index 000000000..5ad347646
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/siphash/siphash_local.h
@@ -0,0 +1,23 @@
+/*
+ * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* Based on https://131002.net/siphash C reference implementation */
+
+struct siphash_st {
+    uint64_t total_inlen;
+    uint64_t v0;
+    uint64_t v1;
+    uint64_t v2;
+    uint64_t v3;
+    unsigned int len;
+    int hash_size;
+    int crounds;
+    int drounds;
+    unsigned char leavings[SIPHASH_BLOCK_SIZE];
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/siphash/siphash_pmeth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/siphash/siphash_pmeth.c
new file mode 100644
index 000000000..66e552fec
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/siphash/siphash_pmeth.c
@@ -0,0 +1,205 @@
+/*
+ * Copyright 2007-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/evp.h>
+#include <openssl/err.h>
+#include "internal/siphash.h"
+#include "siphash_local.h"
+#include "internal/evp_int.h"
+
+/* SIPHASH pkey context structure */
+
+typedef struct siphash_pkey_ctx_st {
+    ASN1_OCTET_STRING ktmp;     /* Temp storage for key */
+    SIPHASH ctx;
+} SIPHASH_PKEY_CTX;
+
+static int pkey_siphash_init(EVP_PKEY_CTX *ctx)
+{
+    SIPHASH_PKEY_CTX *pctx;
+
+    if ((pctx = OPENSSL_zalloc(sizeof(*pctx))) == NULL) {
+        CRYPTOerr(CRYPTO_F_PKEY_SIPHASH_INIT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    pctx->ktmp.type = V_ASN1_OCTET_STRING;
+
+    EVP_PKEY_CTX_set_data(ctx, pctx);
+    EVP_PKEY_CTX_set0_keygen_info(ctx, NULL, 0);
+    return 1;
+}
+
+static void pkey_siphash_cleanup(EVP_PKEY_CTX *ctx)
+{
+    SIPHASH_PKEY_CTX *pctx = EVP_PKEY_CTX_get_data(ctx);
+
+    if (pctx != NULL) {
+        OPENSSL_clear_free(pctx->ktmp.data, pctx->ktmp.length);
+        OPENSSL_clear_free(pctx, sizeof(*pctx));
+        EVP_PKEY_CTX_set_data(ctx, NULL);
+    }
+}
+
+static int pkey_siphash_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src)
+{
+    SIPHASH_PKEY_CTX *sctx, *dctx;
+
+    /* allocate memory for dst->data and a new SIPHASH_CTX in dst->data->ctx */
+    if (!pkey_siphash_init(dst))
+        return 0;
+    sctx = EVP_PKEY_CTX_get_data(src);
+    dctx = EVP_PKEY_CTX_get_data(dst);
+    if (ASN1_STRING_get0_data(&sctx->ktmp) != NULL &&
+        !ASN1_STRING_copy(&dctx->ktmp, &sctx->ktmp)) {
+        /* cleanup and free the SIPHASH_PKEY_CTX in dst->data */
+        pkey_siphash_cleanup(dst);
+        return 0;
+    }
+    memcpy(&dctx->ctx, &sctx->ctx, sizeof(SIPHASH));
+    return 1;
+}
+
+static int pkey_siphash_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
+{
+    ASN1_OCTET_STRING *key;
+    SIPHASH_PKEY_CTX *pctx = EVP_PKEY_CTX_get_data(ctx);
+
+    if (ASN1_STRING_get0_data(&pctx->ktmp) == NULL)
+        return 0;
+    key = ASN1_OCTET_STRING_dup(&pctx->ktmp);
+    if (key == NULL)
+        return 0;
+    return EVP_PKEY_assign_SIPHASH(pkey, key);
+}
+
+static int int_update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    SIPHASH_PKEY_CTX *pctx = EVP_PKEY_CTX_get_data(EVP_MD_CTX_pkey_ctx(ctx));
+
+    SipHash_Update(&pctx->ctx, data, count);
+    return 1;
+}
+
+static int siphash_signctx_init(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx)
+{
+    SIPHASH_PKEY_CTX *pctx = EVP_PKEY_CTX_get_data(ctx);
+    const unsigned char* key;
+    size_t len;
+
+    key = EVP_PKEY_get0_siphash(EVP_PKEY_CTX_get0_pkey(ctx), &len);
+    if (key == NULL || len != SIPHASH_KEY_SIZE)
+        return 0;
+    EVP_MD_CTX_set_flags(mctx, EVP_MD_CTX_FLAG_NO_INIT);
+    EVP_MD_CTX_set_update_fn(mctx, int_update);
+    return SipHash_Init(&pctx->ctx, key, 0, 0);
+}
+static int siphash_signctx(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
+                            EVP_MD_CTX *mctx)
+{
+    SIPHASH_PKEY_CTX *pctx = ctx->data;
+
+    *siglen = SipHash_hash_size(&pctx->ctx);
+    if (sig != NULL)
+        return SipHash_Final(&pctx->ctx, sig, *siglen);
+    return 1;
+}
+
+static int pkey_siphash_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
+{
+    SIPHASH_PKEY_CTX *pctx = EVP_PKEY_CTX_get_data(ctx);
+    const unsigned char *key;
+    size_t len;
+
+    switch (type) {
+
+    case EVP_PKEY_CTRL_MD:
+        /* ignore */
+        break;
+
+    case EVP_PKEY_CTRL_SET_DIGEST_SIZE:
+        return SipHash_set_hash_size(&pctx->ctx, p1);
+
+    case EVP_PKEY_CTRL_SET_MAC_KEY:
+    case EVP_PKEY_CTRL_DIGESTINIT:
+        if (type == EVP_PKEY_CTRL_SET_MAC_KEY) {
+            /* user explicitly setting the key */
+            key = p2;
+            len = p1;
+        } else {
+            /* user indirectly setting the key via EVP_DigestSignInit */
+            key = EVP_PKEY_get0_siphash(EVP_PKEY_CTX_get0_pkey(ctx), &len);
+        }
+        if (key == NULL || len != SIPHASH_KEY_SIZE ||
+            !ASN1_OCTET_STRING_set(&pctx->ktmp, key, len))
+            return 0;
+        /* use default rounds (2,4) */
+        return SipHash_Init(&pctx->ctx, ASN1_STRING_get0_data(&pctx->ktmp),
+                            0, 0);
+
+    default:
+        return -2;
+
+    }
+    return 1;
+}
+
+static int pkey_siphash_ctrl_str(EVP_PKEY_CTX *ctx,
+                                  const char *type, const char *value)
+{
+    if (value == NULL)
+        return 0;
+    if (strcmp(type, "digestsize") == 0) {
+        size_t hash_size = atoi(value);
+
+        return pkey_siphash_ctrl(ctx, EVP_PKEY_CTRL_SET_DIGEST_SIZE, hash_size,
+                                 NULL);
+    }
+    if (strcmp(type, "key") == 0)
+        return EVP_PKEY_CTX_str2ctrl(ctx, EVP_PKEY_CTRL_SET_MAC_KEY, value);
+    if (strcmp(type, "hexkey") == 0)
+        return EVP_PKEY_CTX_hex2ctrl(ctx, EVP_PKEY_CTRL_SET_MAC_KEY, value);
+    return -2;
+}
+
+const EVP_PKEY_METHOD siphash_pkey_meth = {
+    EVP_PKEY_SIPHASH,
+    EVP_PKEY_FLAG_SIGCTX_CUSTOM, /* we don't deal with a separate MD */
+    pkey_siphash_init,
+    pkey_siphash_copy,
+    pkey_siphash_cleanup,
+
+    0, 0,
+
+    0,
+    pkey_siphash_keygen,
+
+    0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    siphash_signctx_init,
+    siphash_signctx,
+
+    0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    0, 0,
+
+    pkey_siphash_ctrl,
+    pkey_siphash_ctrl_str
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sm2/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/sm2/build.info
new file mode 100644
index 000000000..be76d96d3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sm2/build.info
@@ -0,0 +1,5 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        sm2_sign.c sm2_crypt.c sm2_err.c sm2_pmeth.c
+
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sm2/sm2_crypt.c b/trunk/3rdparty/openssl-1.1-fit/crypto/sm2/sm2_crypt.c
new file mode 100644
index 000000000..4389fc731
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sm2/sm2_crypt.c
@@ -0,0 +1,393 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017 Ribose Inc. All Rights Reserved.
+ * Ported from Ribose contributions from Botan.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/sm2.h"
+#include "internal/sm2err.h"
+#include "internal/ec_int.h" /* ecdh_KDF_X9_63() */
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/bn.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <string.h>
+
+typedef struct SM2_Ciphertext_st SM2_Ciphertext;
+DECLARE_ASN1_FUNCTIONS(SM2_Ciphertext)
+
+struct SM2_Ciphertext_st {
+    BIGNUM *C1x;
+    BIGNUM *C1y;
+    ASN1_OCTET_STRING *C3;
+    ASN1_OCTET_STRING *C2;
+};
+
+ASN1_SEQUENCE(SM2_Ciphertext) = {
+    ASN1_SIMPLE(SM2_Ciphertext, C1x, BIGNUM),
+    ASN1_SIMPLE(SM2_Ciphertext, C1y, BIGNUM),
+    ASN1_SIMPLE(SM2_Ciphertext, C3, ASN1_OCTET_STRING),
+    ASN1_SIMPLE(SM2_Ciphertext, C2, ASN1_OCTET_STRING),
+} ASN1_SEQUENCE_END(SM2_Ciphertext)
+
+IMPLEMENT_ASN1_FUNCTIONS(SM2_Ciphertext)
+
+static size_t ec_field_size(const EC_GROUP *group)
+{
+    /* Is there some simpler way to do this? */
+    BIGNUM *p = BN_new();
+    BIGNUM *a = BN_new();
+    BIGNUM *b = BN_new();
+    size_t field_size = 0;
+
+    if (p == NULL || a == NULL || b == NULL)
+       goto done;
+
+    if (!EC_GROUP_get_curve(group, p, a, b, NULL))
+        goto done;
+    field_size = (BN_num_bits(p) + 7) / 8;
+
+ done:
+    BN_free(p);
+    BN_free(a);
+    BN_free(b);
+
+    return field_size;
+}
+
+int sm2_plaintext_size(const EC_KEY *key, const EVP_MD *digest, size_t msg_len,
+                       size_t *pt_size)
+{
+    const size_t field_size = ec_field_size(EC_KEY_get0_group(key));
+    const int md_size = EVP_MD_size(digest);
+    size_t overhead;
+
+    if (md_size < 0) {
+        SM2err(SM2_F_SM2_PLAINTEXT_SIZE, SM2_R_INVALID_DIGEST);
+        return 0;
+    }
+    if (field_size == 0) {
+        SM2err(SM2_F_SM2_PLAINTEXT_SIZE, SM2_R_INVALID_FIELD);
+        return 0;
+    }
+
+    overhead = 10 + 2 * field_size + (size_t)md_size;
+    if (msg_len <= overhead) {
+        SM2err(SM2_F_SM2_PLAINTEXT_SIZE, SM2_R_INVALID_ENCODING);
+        return 0;
+    }
+
+    *pt_size = msg_len - overhead;
+    return 1;
+}
+
+int sm2_ciphertext_size(const EC_KEY *key, const EVP_MD *digest, size_t msg_len,
+                        size_t *ct_size)
+{
+    const size_t field_size = ec_field_size(EC_KEY_get0_group(key));
+    const int md_size = EVP_MD_size(digest);
+    size_t sz;
+
+    if (field_size == 0 || md_size < 0)
+        return 0;
+
+    /* Integer and string are simple type; set constructed = 0, means primitive and definite length encoding. */
+    sz = 2 * ASN1_object_size(0, field_size + 1, V_ASN1_INTEGER)
+         + ASN1_object_size(0, md_size, V_ASN1_OCTET_STRING)
+         + ASN1_object_size(0, msg_len, V_ASN1_OCTET_STRING);
+    /* Sequence is structured type; set constructed = 1, means constructed and definite length encoding. */
+    *ct_size = ASN1_object_size(1, sz, V_ASN1_SEQUENCE);
+
+    return 1;
+}
+
+int sm2_encrypt(const EC_KEY *key,
+                const EVP_MD *digest,
+                const uint8_t *msg,
+                size_t msg_len, uint8_t *ciphertext_buf, size_t *ciphertext_len)
+{
+    int rc = 0, ciphertext_leni;
+    size_t i;
+    BN_CTX *ctx = NULL;
+    BIGNUM *k = NULL;
+    BIGNUM *x1 = NULL;
+    BIGNUM *y1 = NULL;
+    BIGNUM *x2 = NULL;
+    BIGNUM *y2 = NULL;
+    EVP_MD_CTX *hash = EVP_MD_CTX_new();
+    struct SM2_Ciphertext_st ctext_struct;
+    const EC_GROUP *group = EC_KEY_get0_group(key);
+    const BIGNUM *order = EC_GROUP_get0_order(group);
+    const EC_POINT *P = EC_KEY_get0_public_key(key);
+    EC_POINT *kG = NULL;
+    EC_POINT *kP = NULL;
+    uint8_t *msg_mask = NULL;
+    uint8_t *x2y2 = NULL;
+    uint8_t *C3 = NULL;
+    size_t field_size;
+    const int C3_size = EVP_MD_size(digest);
+
+    /* NULL these before any "goto done" */
+    ctext_struct.C2 = NULL;
+    ctext_struct.C3 = NULL;
+
+    if (hash == NULL || C3_size <= 0) {
+        SM2err(SM2_F_SM2_ENCRYPT, ERR_R_INTERNAL_ERROR);
+        goto done;
+    }
+
+    field_size = ec_field_size(group);
+    if (field_size == 0) {
+        SM2err(SM2_F_SM2_ENCRYPT, ERR_R_INTERNAL_ERROR);
+        goto done;
+    }
+
+    kG = EC_POINT_new(group);
+    kP = EC_POINT_new(group);
+    ctx = BN_CTX_new();
+    if (kG == NULL || kP == NULL || ctx == NULL) {
+        SM2err(SM2_F_SM2_ENCRYPT, ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+
+    BN_CTX_start(ctx);
+    k = BN_CTX_get(ctx);
+    x1 = BN_CTX_get(ctx);
+    x2 = BN_CTX_get(ctx);
+    y1 = BN_CTX_get(ctx);
+    y2 = BN_CTX_get(ctx);
+
+    if (y2 == NULL) {
+        SM2err(SM2_F_SM2_ENCRYPT, ERR_R_BN_LIB);
+        goto done;
+    }
+
+    x2y2 = OPENSSL_zalloc(2 * field_size);
+    C3 = OPENSSL_zalloc(C3_size);
+
+    if (x2y2 == NULL || C3 == NULL) {
+        SM2err(SM2_F_SM2_ENCRYPT, ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+
+    memset(ciphertext_buf, 0, *ciphertext_len);
+
+    if (!BN_priv_rand_range(k, order)) {
+        SM2err(SM2_F_SM2_ENCRYPT, ERR_R_INTERNAL_ERROR);
+        goto done;
+    }
+
+    if (!EC_POINT_mul(group, kG, k, NULL, NULL, ctx)
+            || !EC_POINT_get_affine_coordinates(group, kG, x1, y1, ctx)
+            || !EC_POINT_mul(group, kP, NULL, P, k, ctx)
+            || !EC_POINT_get_affine_coordinates(group, kP, x2, y2, ctx)) {
+        SM2err(SM2_F_SM2_ENCRYPT, ERR_R_EC_LIB);
+        goto done;
+    }
+
+    if (BN_bn2binpad(x2, x2y2, field_size) < 0
+            || BN_bn2binpad(y2, x2y2 + field_size, field_size) < 0) {
+        SM2err(SM2_F_SM2_ENCRYPT, ERR_R_INTERNAL_ERROR);
+        goto done;
+    }
+
+    msg_mask = OPENSSL_zalloc(msg_len);
+    if (msg_mask == NULL) {
+       SM2err(SM2_F_SM2_ENCRYPT, ERR_R_MALLOC_FAILURE);
+       goto done;
+   }
+
+    /* X9.63 with no salt happens to match the KDF used in SM2 */
+    if (!ecdh_KDF_X9_63(msg_mask, msg_len, x2y2, 2 * field_size, NULL, 0,
+                        digest)) {
+        SM2err(SM2_F_SM2_ENCRYPT, ERR_R_EVP_LIB);
+        goto done;
+    }
+
+    for (i = 0; i != msg_len; ++i)
+        msg_mask[i] ^= msg[i];
+
+    if (EVP_DigestInit(hash, digest) == 0
+            || EVP_DigestUpdate(hash, x2y2, field_size) == 0
+            || EVP_DigestUpdate(hash, msg, msg_len) == 0
+            || EVP_DigestUpdate(hash, x2y2 + field_size, field_size) == 0
+            || EVP_DigestFinal(hash, C3, NULL) == 0) {
+        SM2err(SM2_F_SM2_ENCRYPT, ERR_R_EVP_LIB);
+        goto done;
+    }
+
+    ctext_struct.C1x = x1;
+    ctext_struct.C1y = y1;
+    ctext_struct.C3 = ASN1_OCTET_STRING_new();
+    ctext_struct.C2 = ASN1_OCTET_STRING_new();
+
+    if (ctext_struct.C3 == NULL || ctext_struct.C2 == NULL) {
+       SM2err(SM2_F_SM2_ENCRYPT, ERR_R_MALLOC_FAILURE);
+       goto done;
+    }
+    if (!ASN1_OCTET_STRING_set(ctext_struct.C3, C3, C3_size)
+            || !ASN1_OCTET_STRING_set(ctext_struct.C2, msg_mask, msg_len)) {
+        SM2err(SM2_F_SM2_ENCRYPT, ERR_R_INTERNAL_ERROR);
+        goto done;
+    }
+
+    ciphertext_leni = i2d_SM2_Ciphertext(&ctext_struct, &ciphertext_buf);
+    /* Ensure cast to size_t is safe */
+    if (ciphertext_leni < 0) {
+        SM2err(SM2_F_SM2_ENCRYPT, ERR_R_INTERNAL_ERROR);
+        goto done;
+    }
+    *ciphertext_len = (size_t)ciphertext_leni;
+
+    rc = 1;
+
+ done:
+    ASN1_OCTET_STRING_free(ctext_struct.C2);
+    ASN1_OCTET_STRING_free(ctext_struct.C3);
+    OPENSSL_free(msg_mask);
+    OPENSSL_free(x2y2);
+    OPENSSL_free(C3);
+    EVP_MD_CTX_free(hash);
+    BN_CTX_free(ctx);
+    EC_POINT_free(kG);
+    EC_POINT_free(kP);
+    return rc;
+}
+
+int sm2_decrypt(const EC_KEY *key,
+                const EVP_MD *digest,
+                const uint8_t *ciphertext,
+                size_t ciphertext_len, uint8_t *ptext_buf, size_t *ptext_len)
+{
+    int rc = 0;
+    int i;
+    BN_CTX *ctx = NULL;
+    const EC_GROUP *group = EC_KEY_get0_group(key);
+    EC_POINT *C1 = NULL;
+    struct SM2_Ciphertext_st *sm2_ctext = NULL;
+    BIGNUM *x2 = NULL;
+    BIGNUM *y2 = NULL;
+    uint8_t *x2y2 = NULL;
+    uint8_t *computed_C3 = NULL;
+    const size_t field_size = ec_field_size(group);
+    const int hash_size = EVP_MD_size(digest);
+    uint8_t *msg_mask = NULL;
+    const uint8_t *C2 = NULL;
+    const uint8_t *C3 = NULL;
+    int msg_len = 0;
+    EVP_MD_CTX *hash = NULL;
+
+    if (field_size == 0 || hash_size <= 0)
+       goto done;
+
+    memset(ptext_buf, 0xFF, *ptext_len);
+
+    sm2_ctext = d2i_SM2_Ciphertext(NULL, &ciphertext, ciphertext_len);
+
+    if (sm2_ctext == NULL) {
+        SM2err(SM2_F_SM2_DECRYPT, SM2_R_ASN1_ERROR);
+        goto done;
+    }
+
+    if (sm2_ctext->C3->length != hash_size) {
+        SM2err(SM2_F_SM2_DECRYPT, SM2_R_INVALID_ENCODING);
+        goto done;
+    }
+
+    C2 = sm2_ctext->C2->data;
+    C3 = sm2_ctext->C3->data;
+    msg_len = sm2_ctext->C2->length;
+
+    ctx = BN_CTX_new();
+    if (ctx == NULL) {
+        SM2err(SM2_F_SM2_DECRYPT, ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+
+    BN_CTX_start(ctx);
+    x2 = BN_CTX_get(ctx);
+    y2 = BN_CTX_get(ctx);
+
+    if (y2 == NULL) {
+        SM2err(SM2_F_SM2_DECRYPT, ERR_R_BN_LIB);
+        goto done;
+    }
+
+    msg_mask = OPENSSL_zalloc(msg_len);
+    x2y2 = OPENSSL_zalloc(2 * field_size);
+    computed_C3 = OPENSSL_zalloc(hash_size);
+
+    if (msg_mask == NULL || x2y2 == NULL || computed_C3 == NULL) {
+        SM2err(SM2_F_SM2_DECRYPT, ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+
+    C1 = EC_POINT_new(group);
+    if (C1 == NULL) {
+        SM2err(SM2_F_SM2_DECRYPT, ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+
+    if (!EC_POINT_set_affine_coordinates(group, C1, sm2_ctext->C1x,
+                                         sm2_ctext->C1y, ctx)
+            || !EC_POINT_mul(group, C1, NULL, C1, EC_KEY_get0_private_key(key),
+                             ctx)
+            || !EC_POINT_get_affine_coordinates(group, C1, x2, y2, ctx)) {
+        SM2err(SM2_F_SM2_DECRYPT, ERR_R_EC_LIB);
+        goto done;
+    }
+
+    if (BN_bn2binpad(x2, x2y2, field_size) < 0
+            || BN_bn2binpad(y2, x2y2 + field_size, field_size) < 0
+            || !ecdh_KDF_X9_63(msg_mask, msg_len, x2y2, 2 * field_size, NULL, 0,
+                               digest)) {
+        SM2err(SM2_F_SM2_DECRYPT, ERR_R_INTERNAL_ERROR);
+        goto done;
+    }
+
+    for (i = 0; i != msg_len; ++i)
+        ptext_buf[i] = C2[i] ^ msg_mask[i];
+
+    hash = EVP_MD_CTX_new();
+    if (hash == NULL) {
+        SM2err(SM2_F_SM2_DECRYPT, ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+
+    if (!EVP_DigestInit(hash, digest)
+            || !EVP_DigestUpdate(hash, x2y2, field_size)
+            || !EVP_DigestUpdate(hash, ptext_buf, msg_len)
+            || !EVP_DigestUpdate(hash, x2y2 + field_size, field_size)
+            || !EVP_DigestFinal(hash, computed_C3, NULL)) {
+        SM2err(SM2_F_SM2_DECRYPT, ERR_R_EVP_LIB);
+        goto done;
+    }
+
+    if (CRYPTO_memcmp(computed_C3, C3, hash_size) != 0) {
+        SM2err(SM2_F_SM2_DECRYPT, SM2_R_INVALID_DIGEST);
+        goto done;
+    }
+
+    rc = 1;
+    *ptext_len = msg_len;
+
+ done:
+    if (rc == 0)
+        memset(ptext_buf, 0, *ptext_len);
+
+    OPENSSL_free(msg_mask);
+    OPENSSL_free(x2y2);
+    OPENSSL_free(computed_C3);
+    EC_POINT_free(C1);
+    BN_CTX_free(ctx);
+    SM2_Ciphertext_free(sm2_ctext);
+    EVP_MD_CTX_free(hash);
+
+    return rc;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sm2/sm2_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/sm2/sm2_err.c
new file mode 100644
index 000000000..653c6797f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sm2/sm2_err.c
@@ -0,0 +1,69 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include "internal/sm2err.h"
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA SM2_str_functs[] = {
+    {ERR_PACK(ERR_LIB_SM2, SM2_F_PKEY_SM2_COPY, 0), "pkey_sm2_copy"},
+    {ERR_PACK(ERR_LIB_SM2, SM2_F_PKEY_SM2_CTRL, 0), "pkey_sm2_ctrl"},
+    {ERR_PACK(ERR_LIB_SM2, SM2_F_PKEY_SM2_CTRL_STR, 0), "pkey_sm2_ctrl_str"},
+    {ERR_PACK(ERR_LIB_SM2, SM2_F_PKEY_SM2_DIGEST_CUSTOM, 0),
+     "pkey_sm2_digest_custom"},
+    {ERR_PACK(ERR_LIB_SM2, SM2_F_PKEY_SM2_INIT, 0), "pkey_sm2_init"},
+    {ERR_PACK(ERR_LIB_SM2, SM2_F_PKEY_SM2_SIGN, 0), "pkey_sm2_sign"},
+    {ERR_PACK(ERR_LIB_SM2, SM2_F_SM2_COMPUTE_MSG_HASH, 0),
+     "sm2_compute_msg_hash"},
+    {ERR_PACK(ERR_LIB_SM2, SM2_F_SM2_COMPUTE_USERID_DIGEST, 0),
+     "sm2_compute_userid_digest"},
+    {ERR_PACK(ERR_LIB_SM2, SM2_F_SM2_COMPUTE_Z_DIGEST, 0),
+     "sm2_compute_z_digest"},
+    {ERR_PACK(ERR_LIB_SM2, SM2_F_SM2_DECRYPT, 0), "sm2_decrypt"},
+    {ERR_PACK(ERR_LIB_SM2, SM2_F_SM2_ENCRYPT, 0), "sm2_encrypt"},
+    {ERR_PACK(ERR_LIB_SM2, SM2_F_SM2_PLAINTEXT_SIZE, 0), "sm2_plaintext_size"},
+    {ERR_PACK(ERR_LIB_SM2, SM2_F_SM2_SIGN, 0), "sm2_sign"},
+    {ERR_PACK(ERR_LIB_SM2, SM2_F_SM2_SIG_GEN, 0), "sm2_sig_gen"},
+    {ERR_PACK(ERR_LIB_SM2, SM2_F_SM2_SIG_VERIFY, 0), "sm2_sig_verify"},
+    {ERR_PACK(ERR_LIB_SM2, SM2_F_SM2_VERIFY, 0), "sm2_verify"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA SM2_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_SM2, 0, SM2_R_ASN1_ERROR), "asn1 error"},
+    {ERR_PACK(ERR_LIB_SM2, 0, SM2_R_BAD_SIGNATURE), "bad signature"},
+    {ERR_PACK(ERR_LIB_SM2, 0, SM2_R_BUFFER_TOO_SMALL), "buffer too small"},
+    {ERR_PACK(ERR_LIB_SM2, 0, SM2_R_DIST_ID_TOO_LARGE), "dist id too large"},
+    {ERR_PACK(ERR_LIB_SM2, 0, SM2_R_ID_NOT_SET), "id not set"},
+    {ERR_PACK(ERR_LIB_SM2, 0, SM2_R_ID_TOO_LARGE), "id too large"},
+    {ERR_PACK(ERR_LIB_SM2, 0, SM2_R_INVALID_CURVE), "invalid curve"},
+    {ERR_PACK(ERR_LIB_SM2, 0, SM2_R_INVALID_DIGEST), "invalid digest"},
+    {ERR_PACK(ERR_LIB_SM2, 0, SM2_R_INVALID_DIGEST_TYPE),
+    "invalid digest type"},
+    {ERR_PACK(ERR_LIB_SM2, 0, SM2_R_INVALID_ENCODING), "invalid encoding"},
+    {ERR_PACK(ERR_LIB_SM2, 0, SM2_R_INVALID_FIELD), "invalid field"},
+    {ERR_PACK(ERR_LIB_SM2, 0, SM2_R_NO_PARAMETERS_SET), "no parameters set"},
+    {ERR_PACK(ERR_LIB_SM2, 0, SM2_R_USER_ID_TOO_LARGE), "user id too large"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_SM2_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(SM2_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(SM2_str_functs);
+        ERR_load_strings_const(SM2_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sm2/sm2_pmeth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/sm2/sm2_pmeth.c
new file mode 100644
index 000000000..d187699cc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sm2/sm2_pmeth.c
@@ -0,0 +1,325 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/ec.h>
+#include <openssl/evp.h>
+#include "internal/evp_int.h"
+#include "internal/sm2.h"
+#include "internal/sm2err.h"
+
+/* EC pkey context structure */
+
+typedef struct {
+    /* Key and paramgen group */
+    EC_GROUP *gen_group;
+    /* message digest */
+    const EVP_MD *md;
+    /* Distinguishing Identifier, ISO/IEC 15946-3 */
+    uint8_t *id;
+    size_t id_len;
+    /* id_set indicates if the 'id' field is set (1) or not (0) */
+    int id_set;
+} SM2_PKEY_CTX;
+
+static int pkey_sm2_init(EVP_PKEY_CTX *ctx)
+{
+    SM2_PKEY_CTX *smctx;
+
+    if ((smctx = OPENSSL_zalloc(sizeof(*smctx))) == NULL) {
+        SM2err(SM2_F_PKEY_SM2_INIT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    ctx->data = smctx;
+    return 1;
+}
+
+static void pkey_sm2_cleanup(EVP_PKEY_CTX *ctx)
+{
+    SM2_PKEY_CTX *smctx = ctx->data;
+
+    if (smctx != NULL) {
+        EC_GROUP_free(smctx->gen_group);
+        OPENSSL_free(smctx->id);
+        OPENSSL_free(smctx);
+        ctx->data = NULL;
+    }
+}
+
+static int pkey_sm2_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src)
+{
+    SM2_PKEY_CTX *dctx, *sctx;
+
+    if (!pkey_sm2_init(dst))
+        return 0;
+    sctx = src->data;
+    dctx = dst->data;
+    if (sctx->gen_group != NULL) {
+        dctx->gen_group = EC_GROUP_dup(sctx->gen_group);
+        if (dctx->gen_group == NULL) {
+            pkey_sm2_cleanup(dst);
+            return 0;
+        }
+    }
+    if (sctx->id != NULL) {
+        dctx->id = OPENSSL_malloc(sctx->id_len);
+        if (dctx->id == NULL) {
+            SM2err(SM2_F_PKEY_SM2_COPY, ERR_R_MALLOC_FAILURE);
+            pkey_sm2_cleanup(dst);
+            return 0;
+        }
+        memcpy(dctx->id, sctx->id, sctx->id_len);
+    }
+    dctx->id_len = sctx->id_len;
+    dctx->id_set = sctx->id_set;
+    dctx->md = sctx->md;
+
+    return 1;
+}
+
+static int pkey_sm2_sign(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
+                         const unsigned char *tbs, size_t tbslen)
+{
+    int ret;
+    unsigned int sltmp;
+    EC_KEY *ec = ctx->pkey->pkey.ec;
+    const int sig_sz = ECDSA_size(ctx->pkey->pkey.ec);
+
+    if (sig_sz <= 0) {
+        return 0;
+    }
+
+    if (sig == NULL) {
+        *siglen = (size_t)sig_sz;
+        return 1;
+    }
+
+    if (*siglen < (size_t)sig_sz) {
+        SM2err(SM2_F_PKEY_SM2_SIGN, SM2_R_BUFFER_TOO_SMALL);
+        return 0;
+    }
+
+    ret = sm2_sign(tbs, tbslen, sig, &sltmp, ec);
+
+    if (ret <= 0)
+        return ret;
+    *siglen = (size_t)sltmp;
+    return 1;
+}
+
+static int pkey_sm2_verify(EVP_PKEY_CTX *ctx,
+                           const unsigned char *sig, size_t siglen,
+                           const unsigned char *tbs, size_t tbslen)
+{
+    EC_KEY *ec = ctx->pkey->pkey.ec;
+
+    return sm2_verify(tbs, tbslen, sig, siglen, ec);
+}
+
+static int pkey_sm2_encrypt(EVP_PKEY_CTX *ctx,
+                            unsigned char *out, size_t *outlen,
+                            const unsigned char *in, size_t inlen)
+{
+    EC_KEY *ec = ctx->pkey->pkey.ec;
+    SM2_PKEY_CTX *dctx = ctx->data;
+    const EVP_MD *md = (dctx->md == NULL) ? EVP_sm3() : dctx->md;
+
+    if (out == NULL) {
+        if (!sm2_ciphertext_size(ec, md, inlen, outlen))
+            return -1;
+        else
+            return 1;
+    }
+
+    return sm2_encrypt(ec, md, in, inlen, out, outlen);
+}
+
+static int pkey_sm2_decrypt(EVP_PKEY_CTX *ctx,
+                            unsigned char *out, size_t *outlen,
+                            const unsigned char *in, size_t inlen)
+{
+    EC_KEY *ec = ctx->pkey->pkey.ec;
+    SM2_PKEY_CTX *dctx = ctx->data;
+    const EVP_MD *md = (dctx->md == NULL) ? EVP_sm3() : dctx->md;
+
+    if (out == NULL) {
+        if (!sm2_plaintext_size(ec, md, inlen, outlen))
+            return -1;
+        else
+            return 1;
+    }
+
+    return sm2_decrypt(ec, md, in, inlen, out, outlen);
+}
+
+static int pkey_sm2_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
+{
+    SM2_PKEY_CTX *smctx = ctx->data;
+    EC_GROUP *group;
+    uint8_t *tmp_id;
+
+    switch (type) {
+    case EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID:
+        group = EC_GROUP_new_by_curve_name(p1);
+        if (group == NULL) {
+            SM2err(SM2_F_PKEY_SM2_CTRL, SM2_R_INVALID_CURVE);
+            return 0;
+        }
+        EC_GROUP_free(smctx->gen_group);
+        smctx->gen_group = group;
+        return 1;
+
+    case EVP_PKEY_CTRL_EC_PARAM_ENC:
+        if (smctx->gen_group == NULL) {
+            SM2err(SM2_F_PKEY_SM2_CTRL, SM2_R_NO_PARAMETERS_SET);
+            return 0;
+        }
+        EC_GROUP_set_asn1_flag(smctx->gen_group, p1);
+        return 1;
+
+    case EVP_PKEY_CTRL_MD:
+        smctx->md = p2;
+        return 1;
+
+    case EVP_PKEY_CTRL_GET_MD:
+        *(const EVP_MD **)p2 = smctx->md;
+        return 1;
+
+    case EVP_PKEY_CTRL_SET1_ID:
+        if (p1 > 0) {
+            tmp_id = OPENSSL_malloc(p1);
+            if (tmp_id == NULL) {
+                SM2err(SM2_F_PKEY_SM2_CTRL, ERR_R_MALLOC_FAILURE);
+                return 0;
+            }
+            memcpy(tmp_id, p2, p1);
+            OPENSSL_free(smctx->id);
+            smctx->id = tmp_id;
+        } else {
+            /* set null-ID */
+            OPENSSL_free(smctx->id);
+            smctx->id = NULL;
+        }
+        smctx->id_len = (size_t)p1;
+        smctx->id_set = 1;
+        return 1;
+
+    case EVP_PKEY_CTRL_GET1_ID:
+        memcpy(p2, smctx->id, smctx->id_len);
+        return 1;
+
+    case EVP_PKEY_CTRL_GET1_ID_LEN:
+        *(size_t *)p2 = smctx->id_len;
+        return 1;
+
+    default:
+        return -2;
+    }
+}
+
+static int pkey_sm2_ctrl_str(EVP_PKEY_CTX *ctx,
+                             const char *type, const char *value)
+{
+    if (strcmp(type, "ec_paramgen_curve") == 0) {
+        int nid = NID_undef;
+
+        if (((nid = EC_curve_nist2nid(value)) == NID_undef)
+            && ((nid = OBJ_sn2nid(value)) == NID_undef)
+            && ((nid = OBJ_ln2nid(value)) == NID_undef)) {
+            SM2err(SM2_F_PKEY_SM2_CTRL_STR, SM2_R_INVALID_CURVE);
+            return 0;
+        }
+        return EVP_PKEY_CTX_set_ec_paramgen_curve_nid(ctx, nid);
+    } else if (strcmp(type, "ec_param_enc") == 0) {
+        int param_enc;
+
+        if (strcmp(value, "explicit") == 0)
+            param_enc = 0;
+        else if (strcmp(value, "named_curve") == 0)
+            param_enc = OPENSSL_EC_NAMED_CURVE;
+        else
+            return -2;
+        return EVP_PKEY_CTX_set_ec_param_enc(ctx, param_enc);
+    }
+
+    return -2;
+}
+
+static int pkey_sm2_digest_custom(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx)
+{
+    uint8_t z[EVP_MAX_MD_SIZE];
+    SM2_PKEY_CTX *smctx = ctx->data;
+    EC_KEY *ec = ctx->pkey->pkey.ec;
+    const EVP_MD *md = EVP_MD_CTX_md(mctx);
+    int mdlen = EVP_MD_size(md);
+
+    if (!smctx->id_set) {
+        /*
+         * An ID value must be set. The specifications are not clear whether a
+         * NULL is allowed. We only allow it if set explicitly for maximum
+         * flexibility.
+         */
+        SM2err(SM2_F_PKEY_SM2_DIGEST_CUSTOM, SM2_R_ID_NOT_SET);
+        return 0;
+    }
+
+    if (mdlen < 0) {
+        SM2err(SM2_F_PKEY_SM2_DIGEST_CUSTOM, SM2_R_INVALID_DIGEST);
+        return 0;
+    }
+
+    /* get hashed prefix 'z' of tbs message */
+    if (!sm2_compute_z_digest(z, md, smctx->id, smctx->id_len, ec))
+        return 0;
+
+    return EVP_DigestUpdate(mctx, z, (size_t)mdlen);
+}
+
+const EVP_PKEY_METHOD sm2_pkey_meth = {
+    EVP_PKEY_SM2,
+    0,
+    pkey_sm2_init,
+    pkey_sm2_copy,
+    pkey_sm2_cleanup,
+
+    0,
+    0,
+
+    0,
+    0,
+
+    0,
+    pkey_sm2_sign,
+
+    0,
+    pkey_sm2_verify,
+
+    0, 0,
+
+    0, 0, 0, 0,
+
+    0,
+    pkey_sm2_encrypt,
+
+    0,
+    pkey_sm2_decrypt,
+
+    0,
+    0,
+    pkey_sm2_ctrl,
+    pkey_sm2_ctrl_str,
+
+    0, 0,
+
+    0, 0, 0,
+
+    pkey_sm2_digest_custom
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sm2/sm2_sign.c b/trunk/3rdparty/openssl-1.1-fit/crypto/sm2/sm2_sign.c
new file mode 100644
index 000000000..0f9c14cb5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sm2/sm2_sign.c
@@ -0,0 +1,479 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017 Ribose Inc. All Rights Reserved.
+ * Ported from Ribose contributions from Botan.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/sm2.h"
+#include "internal/sm2err.h"
+#include "internal/ec_int.h" /* ec_group_do_inverse_ord() */
+#include "internal/numbers.h"
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/err.h>
+#include <openssl/bn.h>
+#include <string.h>
+
+int sm2_compute_z_digest(uint8_t *out,
+                         const EVP_MD *digest,
+                         const uint8_t *id,
+                         const size_t id_len,
+                         const EC_KEY *key)
+{
+    int rc = 0;
+    const EC_GROUP *group = EC_KEY_get0_group(key);
+    BN_CTX *ctx = NULL;
+    EVP_MD_CTX *hash = NULL;
+    BIGNUM *p = NULL;
+    BIGNUM *a = NULL;
+    BIGNUM *b = NULL;
+    BIGNUM *xG = NULL;
+    BIGNUM *yG = NULL;
+    BIGNUM *xA = NULL;
+    BIGNUM *yA = NULL;
+    int p_bytes = 0;
+    uint8_t *buf = NULL;
+    uint16_t entl = 0;
+    uint8_t e_byte = 0;
+
+    hash = EVP_MD_CTX_new();
+    ctx = BN_CTX_new();
+    if (hash == NULL || ctx == NULL) {
+        SM2err(SM2_F_SM2_COMPUTE_Z_DIGEST, ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+
+    p = BN_CTX_get(ctx);
+    a = BN_CTX_get(ctx);
+    b = BN_CTX_get(ctx);
+    xG = BN_CTX_get(ctx);
+    yG = BN_CTX_get(ctx);
+    xA = BN_CTX_get(ctx);
+    yA = BN_CTX_get(ctx);
+
+    if (yA == NULL) {
+        SM2err(SM2_F_SM2_COMPUTE_Z_DIGEST, ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+
+    if (!EVP_DigestInit(hash, digest)) {
+        SM2err(SM2_F_SM2_COMPUTE_Z_DIGEST, ERR_R_EVP_LIB);
+        goto done;
+    }
+
+    /* Z = h(ENTL || ID || a || b || xG || yG || xA || yA) */
+
+    if (id_len >= (UINT16_MAX / 8)) {
+        /* too large */
+        SM2err(SM2_F_SM2_COMPUTE_Z_DIGEST, SM2_R_ID_TOO_LARGE);
+        goto done;
+    }
+
+    entl = (uint16_t)(8 * id_len);
+
+    e_byte = entl >> 8;
+    if (!EVP_DigestUpdate(hash, &e_byte, 1)) {
+        SM2err(SM2_F_SM2_COMPUTE_Z_DIGEST, ERR_R_EVP_LIB);
+        goto done;
+    }
+    e_byte = entl & 0xFF;
+    if (!EVP_DigestUpdate(hash, &e_byte, 1)) {
+        SM2err(SM2_F_SM2_COMPUTE_Z_DIGEST, ERR_R_EVP_LIB);
+        goto done;
+    }
+
+    if (id_len > 0 && !EVP_DigestUpdate(hash, id, id_len)) {
+        SM2err(SM2_F_SM2_COMPUTE_Z_DIGEST, ERR_R_EVP_LIB);
+        goto done;
+    }
+
+    if (!EC_GROUP_get_curve(group, p, a, b, ctx)) {
+        SM2err(SM2_F_SM2_COMPUTE_Z_DIGEST, ERR_R_EC_LIB);
+        goto done;
+    }
+
+    p_bytes = BN_num_bytes(p);
+    buf = OPENSSL_zalloc(p_bytes);
+    if (buf == NULL) {
+        SM2err(SM2_F_SM2_COMPUTE_Z_DIGEST, ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+
+    if (BN_bn2binpad(a, buf, p_bytes) < 0
+            || !EVP_DigestUpdate(hash, buf, p_bytes)
+            || BN_bn2binpad(b, buf, p_bytes) < 0
+            || !EVP_DigestUpdate(hash, buf, p_bytes)
+            || !EC_POINT_get_affine_coordinates(group,
+                                                EC_GROUP_get0_generator(group),
+                                                xG, yG, ctx)
+            || BN_bn2binpad(xG, buf, p_bytes) < 0
+            || !EVP_DigestUpdate(hash, buf, p_bytes)
+            || BN_bn2binpad(yG, buf, p_bytes) < 0
+            || !EVP_DigestUpdate(hash, buf, p_bytes)
+            || !EC_POINT_get_affine_coordinates(group,
+                                                EC_KEY_get0_public_key(key),
+                                                xA, yA, ctx)
+            || BN_bn2binpad(xA, buf, p_bytes) < 0
+            || !EVP_DigestUpdate(hash, buf, p_bytes)
+            || BN_bn2binpad(yA, buf, p_bytes) < 0
+            || !EVP_DigestUpdate(hash, buf, p_bytes)
+            || !EVP_DigestFinal(hash, out, NULL)) {
+        SM2err(SM2_F_SM2_COMPUTE_Z_DIGEST, ERR_R_INTERNAL_ERROR);
+        goto done;
+    }
+
+    rc = 1;
+
+ done:
+    OPENSSL_free(buf);
+    BN_CTX_free(ctx);
+    EVP_MD_CTX_free(hash);
+    return rc;
+}
+
+static BIGNUM *sm2_compute_msg_hash(const EVP_MD *digest,
+                                    const EC_KEY *key,
+                                    const uint8_t *id,
+                                    const size_t id_len,
+                                    const uint8_t *msg, size_t msg_len)
+{
+    EVP_MD_CTX *hash = EVP_MD_CTX_new();
+    const int md_size = EVP_MD_size(digest);
+    uint8_t *z = NULL;
+    BIGNUM *e = NULL;
+
+    if (md_size < 0) {
+        SM2err(SM2_F_SM2_COMPUTE_MSG_HASH, SM2_R_INVALID_DIGEST);
+        goto done;
+    }
+
+    z = OPENSSL_zalloc(md_size);
+    if (hash == NULL || z == NULL) {
+        SM2err(SM2_F_SM2_COMPUTE_MSG_HASH, ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+
+    if (!sm2_compute_z_digest(z, digest, id, id_len, key)) {
+        /* SM2err already called */
+        goto done;
+    }
+
+    if (!EVP_DigestInit(hash, digest)
+            || !EVP_DigestUpdate(hash, z, md_size)
+            || !EVP_DigestUpdate(hash, msg, msg_len)
+               /* reuse z buffer to hold H(Z || M) */
+            || !EVP_DigestFinal(hash, z, NULL)) {
+        SM2err(SM2_F_SM2_COMPUTE_MSG_HASH, ERR_R_EVP_LIB);
+        goto done;
+    }
+
+    e = BN_bin2bn(z, md_size, NULL);
+    if (e == NULL)
+        SM2err(SM2_F_SM2_COMPUTE_MSG_HASH, ERR_R_INTERNAL_ERROR);
+
+ done:
+    OPENSSL_free(z);
+    EVP_MD_CTX_free(hash);
+    return e;
+}
+
+static ECDSA_SIG *sm2_sig_gen(const EC_KEY *key, const BIGNUM *e)
+{
+    const BIGNUM *dA = EC_KEY_get0_private_key(key);
+    const EC_GROUP *group = EC_KEY_get0_group(key);
+    const BIGNUM *order = EC_GROUP_get0_order(group);
+    ECDSA_SIG *sig = NULL;
+    EC_POINT *kG = NULL;
+    BN_CTX *ctx = NULL;
+    BIGNUM *k = NULL;
+    BIGNUM *rk = NULL;
+    BIGNUM *r = NULL;
+    BIGNUM *s = NULL;
+    BIGNUM *x1 = NULL;
+    BIGNUM *tmp = NULL;
+
+    kG = EC_POINT_new(group);
+    ctx = BN_CTX_new();
+    if (kG == NULL || ctx == NULL) {
+        SM2err(SM2_F_SM2_SIG_GEN, ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+
+    BN_CTX_start(ctx);
+    k = BN_CTX_get(ctx);
+    rk = BN_CTX_get(ctx);
+    x1 = BN_CTX_get(ctx);
+    tmp = BN_CTX_get(ctx);
+    if (tmp == NULL) {
+        SM2err(SM2_F_SM2_SIG_GEN, ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+
+    /*
+     * These values are returned and so should not be allocated out of the
+     * context
+     */
+    r = BN_new();
+    s = BN_new();
+
+    if (r == NULL || s == NULL) {
+        SM2err(SM2_F_SM2_SIG_GEN, ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+
+    for (;;) {
+        if (!BN_priv_rand_range(k, order)) {
+            SM2err(SM2_F_SM2_SIG_GEN, ERR_R_INTERNAL_ERROR);
+            goto done;
+        }
+
+        if (!EC_POINT_mul(group, kG, k, NULL, NULL, ctx)
+                || !EC_POINT_get_affine_coordinates(group, kG, x1, NULL,
+                                                    ctx)
+                || !BN_mod_add(r, e, x1, order, ctx)) {
+            SM2err(SM2_F_SM2_SIG_GEN, ERR_R_INTERNAL_ERROR);
+            goto done;
+        }
+
+        /* try again if r == 0 or r+k == n */
+        if (BN_is_zero(r))
+            continue;
+
+        if (!BN_add(rk, r, k)) {
+            SM2err(SM2_F_SM2_SIG_GEN, ERR_R_INTERNAL_ERROR);
+            goto done;
+        }
+
+        if (BN_cmp(rk, order) == 0)
+            continue;
+
+        if (!BN_add(s, dA, BN_value_one())
+                || !ec_group_do_inverse_ord(group, s, s, ctx)
+                || !BN_mod_mul(tmp, dA, r, order, ctx)
+                || !BN_sub(tmp, k, tmp)
+                || !BN_mod_mul(s, s, tmp, order, ctx)) {
+            SM2err(SM2_F_SM2_SIG_GEN, ERR_R_BN_LIB);
+            goto done;
+        }
+
+        sig = ECDSA_SIG_new();
+        if (sig == NULL) {
+            SM2err(SM2_F_SM2_SIG_GEN, ERR_R_MALLOC_FAILURE);
+            goto done;
+        }
+
+         /* takes ownership of r and s */
+        ECDSA_SIG_set0(sig, r, s);
+        break;
+    }
+
+ done:
+    if (sig == NULL) {
+        BN_free(r);
+        BN_free(s);
+    }
+
+    BN_CTX_free(ctx);
+    EC_POINT_free(kG);
+    return sig;
+}
+
+static int sm2_sig_verify(const EC_KEY *key, const ECDSA_SIG *sig,
+                          const BIGNUM *e)
+{
+    int ret = 0;
+    const EC_GROUP *group = EC_KEY_get0_group(key);
+    const BIGNUM *order = EC_GROUP_get0_order(group);
+    BN_CTX *ctx = NULL;
+    EC_POINT *pt = NULL;
+    BIGNUM *t = NULL;
+    BIGNUM *x1 = NULL;
+    const BIGNUM *r = NULL;
+    const BIGNUM *s = NULL;
+
+    ctx = BN_CTX_new();
+    pt = EC_POINT_new(group);
+    if (ctx == NULL || pt == NULL) {
+        SM2err(SM2_F_SM2_SIG_VERIFY, ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+
+    BN_CTX_start(ctx);
+    t = BN_CTX_get(ctx);
+    x1 = BN_CTX_get(ctx);
+    if (x1 == NULL) {
+        SM2err(SM2_F_SM2_SIG_VERIFY, ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+
+    /*
+     * B1: verify whether r' in [1,n-1], verification failed if not
+     * B2: vefify whether s' in [1,n-1], verification failed if not
+     * B3: set M'~=ZA || M'
+     * B4: calculate e'=Hv(M'~)
+     * B5: calculate t = (r' + s') modn, verification failed if t=0
+     * B6: calculate the point (x1', y1')=[s']G + [t]PA
+     * B7: calculate R=(e'+x1') modn, verfication pass if yes, otherwise failed
+     */
+
+    ECDSA_SIG_get0(sig, &r, &s);
+
+    if (BN_cmp(r, BN_value_one()) < 0
+            || BN_cmp(s, BN_value_one()) < 0
+            || BN_cmp(order, r) <= 0
+            || BN_cmp(order, s) <= 0) {
+        SM2err(SM2_F_SM2_SIG_VERIFY, SM2_R_BAD_SIGNATURE);
+        goto done;
+    }
+
+    if (!BN_mod_add(t, r, s, order, ctx)) {
+        SM2err(SM2_F_SM2_SIG_VERIFY, ERR_R_BN_LIB);
+        goto done;
+    }
+
+    if (BN_is_zero(t)) {
+        SM2err(SM2_F_SM2_SIG_VERIFY, SM2_R_BAD_SIGNATURE);
+        goto done;
+    }
+
+    if (!EC_POINT_mul(group, pt, s, EC_KEY_get0_public_key(key), t, ctx)
+            || !EC_POINT_get_affine_coordinates(group, pt, x1, NULL, ctx)) {
+        SM2err(SM2_F_SM2_SIG_VERIFY, ERR_R_EC_LIB);
+        goto done;
+    }
+
+    if (!BN_mod_add(t, e, x1, order, ctx)) {
+        SM2err(SM2_F_SM2_SIG_VERIFY, ERR_R_BN_LIB);
+        goto done;
+    }
+
+    if (BN_cmp(r, t) == 0)
+        ret = 1;
+
+ done:
+    EC_POINT_free(pt);
+    BN_CTX_free(ctx);
+    return ret;
+}
+
+ECDSA_SIG *sm2_do_sign(const EC_KEY *key,
+                       const EVP_MD *digest,
+                       const uint8_t *id,
+                       const size_t id_len,
+                       const uint8_t *msg, size_t msg_len)
+{
+    BIGNUM *e = NULL;
+    ECDSA_SIG *sig = NULL;
+
+    e = sm2_compute_msg_hash(digest, key, id, id_len, msg, msg_len);
+    if (e == NULL) {
+        /* SM2err already called */
+        goto done;
+    }
+
+    sig = sm2_sig_gen(key, e);
+
+ done:
+    BN_free(e);
+    return sig;
+}
+
+int sm2_do_verify(const EC_KEY *key,
+                  const EVP_MD *digest,
+                  const ECDSA_SIG *sig,
+                  const uint8_t *id,
+                  const size_t id_len,
+                  const uint8_t *msg, size_t msg_len)
+{
+    BIGNUM *e = NULL;
+    int ret = 0;
+
+    e = sm2_compute_msg_hash(digest, key, id, id_len, msg, msg_len);
+    if (e == NULL) {
+        /* SM2err already called */
+        goto done;
+    }
+
+    ret = sm2_sig_verify(key, sig, e);
+
+ done:
+    BN_free(e);
+    return ret;
+}
+
+int sm2_sign(const unsigned char *dgst, int dgstlen,
+             unsigned char *sig, unsigned int *siglen, EC_KEY *eckey)
+{
+    BIGNUM *e = NULL;
+    ECDSA_SIG *s = NULL;
+    int sigleni;
+    int ret = -1;
+
+    e = BN_bin2bn(dgst, dgstlen, NULL);
+    if (e == NULL) {
+       SM2err(SM2_F_SM2_SIGN, ERR_R_BN_LIB);
+       goto done;
+    }
+
+    s = sm2_sig_gen(eckey, e);
+
+    sigleni = i2d_ECDSA_SIG(s, &sig);
+    if (sigleni < 0) {
+       SM2err(SM2_F_SM2_SIGN, ERR_R_INTERNAL_ERROR);
+       goto done;
+    }
+    *siglen = (unsigned int)sigleni;
+
+    ret = 1;
+
+ done:
+    ECDSA_SIG_free(s);
+    BN_free(e);
+    return ret;
+}
+
+int sm2_verify(const unsigned char *dgst, int dgstlen,
+               const unsigned char *sig, int sig_len, EC_KEY *eckey)
+{
+    ECDSA_SIG *s = NULL;
+    BIGNUM *e = NULL;
+    const unsigned char *p = sig;
+    unsigned char *der = NULL;
+    int derlen = -1;
+    int ret = -1;
+
+    s = ECDSA_SIG_new();
+    if (s == NULL) {
+        SM2err(SM2_F_SM2_VERIFY, ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+    if (d2i_ECDSA_SIG(&s, &p, sig_len) == NULL) {
+        SM2err(SM2_F_SM2_VERIFY, SM2_R_INVALID_ENCODING);
+        goto done;
+    }
+    /* Ensure signature uses DER and doesn't have trailing garbage */
+    derlen = i2d_ECDSA_SIG(s, &der);
+    if (derlen != sig_len || memcmp(sig, der, derlen) != 0) {
+        SM2err(SM2_F_SM2_VERIFY, SM2_R_INVALID_ENCODING);
+        goto done;
+    }
+
+    e = BN_bin2bn(dgst, dgstlen, NULL);
+    if (e == NULL) {
+        SM2err(SM2_F_SM2_VERIFY, ERR_R_BN_LIB);
+        goto done;
+    }
+
+    ret = sm2_sig_verify(eckey, s, e);
+
+ done:
+    OPENSSL_free(der);
+    BN_free(e);
+    ECDSA_SIG_free(s);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sm3/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/sm3/build.info
new file mode 100644
index 000000000..6009b1949
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sm3/build.info
@@ -0,0 +1,2 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=sm3.c m_sm3.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sm3/m_sm3.c b/trunk/3rdparty/openssl-1.1-fit/crypto/sm3/m_sm3.c
new file mode 100644
index 000000000..85538dc8a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sm3/m_sm3.c
@@ -0,0 +1,52 @@
+/*
+ * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017 Ribose Inc. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+
+#ifndef OPENSSL_NO_SM3
+# include <openssl/evp.h>
+# include "internal/evp_int.h"
+# include "internal/sm3.h"
+
+static int init(EVP_MD_CTX *ctx)
+{
+    return sm3_init(EVP_MD_CTX_md_data(ctx));
+}
+
+static int update(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return sm3_update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return sm3_final(md, EVP_MD_CTX_md_data(ctx));
+}
+
+static const EVP_MD sm3_md = {
+    NID_sm3,
+    NID_sm3WithRSAEncryption,
+    SM3_DIGEST_LENGTH,
+    0,
+    init,
+    update,
+    final,
+    NULL,
+    NULL,
+    SM3_CBLOCK,
+    sizeof(EVP_MD *) + sizeof(SM3_CTX),
+};
+
+const EVP_MD *EVP_sm3(void)
+{
+    return &sm3_md;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sm3/sm3.c b/trunk/3rdparty/openssl-1.1-fit/crypto/sm3/sm3.c
new file mode 100644
index 000000000..1588dd115
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sm3/sm3.c
@@ -0,0 +1,196 @@
+/*
+ * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017 Ribose Inc. All Rights Reserved.
+ * Ported from Ribose contributions from Botan.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/e_os2.h>
+#include "sm3_locl.h"
+
+int sm3_init(SM3_CTX *c)
+{
+    memset(c, 0, sizeof(*c));
+    c->A = SM3_A;
+    c->B = SM3_B;
+    c->C = SM3_C;
+    c->D = SM3_D;
+    c->E = SM3_E;
+    c->F = SM3_F;
+    c->G = SM3_G;
+    c->H = SM3_H;
+    return 1;
+}
+
+void sm3_block_data_order(SM3_CTX *ctx, const void *p, size_t num)
+{
+    const unsigned char *data = p;
+    register unsigned MD32_REG_T A, B, C, D, E, F, G, H;
+
+    unsigned MD32_REG_T W00, W01, W02, W03, W04, W05, W06, W07,
+        W08, W09, W10, W11, W12, W13, W14, W15;
+
+    for (; num--;) {
+
+        A = ctx->A;
+        B = ctx->B;
+        C = ctx->C;
+        D = ctx->D;
+        E = ctx->E;
+        F = ctx->F;
+        G = ctx->G;
+        H = ctx->H;
+
+        /*
+        * We have to load all message bytes immediately since SM3 reads
+        * them slightly out of order.
+        */
+        (void)HOST_c2l(data, W00);
+        (void)HOST_c2l(data, W01);
+        (void)HOST_c2l(data, W02);
+        (void)HOST_c2l(data, W03);
+        (void)HOST_c2l(data, W04);
+        (void)HOST_c2l(data, W05);
+        (void)HOST_c2l(data, W06);
+        (void)HOST_c2l(data, W07);
+        (void)HOST_c2l(data, W08);
+        (void)HOST_c2l(data, W09);
+        (void)HOST_c2l(data, W10);
+        (void)HOST_c2l(data, W11);
+        (void)HOST_c2l(data, W12);
+        (void)HOST_c2l(data, W13);
+        (void)HOST_c2l(data, W14);
+        (void)HOST_c2l(data, W15);
+
+        R1(A, B, C, D, E, F, G, H, 0x79CC4519, W00, W00 ^ W04);
+        W00 = EXPAND(W00, W07, W13, W03, W10);
+        R1(D, A, B, C, H, E, F, G, 0xF3988A32, W01, W01 ^ W05);
+        W01 = EXPAND(W01, W08, W14, W04, W11);
+        R1(C, D, A, B, G, H, E, F, 0xE7311465, W02, W02 ^ W06);
+        W02 = EXPAND(W02, W09, W15, W05, W12);
+        R1(B, C, D, A, F, G, H, E, 0xCE6228CB, W03, W03 ^ W07);
+        W03 = EXPAND(W03, W10, W00, W06, W13);
+        R1(A, B, C, D, E, F, G, H, 0x9CC45197, W04, W04 ^ W08);
+        W04 = EXPAND(W04, W11, W01, W07, W14);
+        R1(D, A, B, C, H, E, F, G, 0x3988A32F, W05, W05 ^ W09);
+        W05 = EXPAND(W05, W12, W02, W08, W15);
+        R1(C, D, A, B, G, H, E, F, 0x7311465E, W06, W06 ^ W10);
+        W06 = EXPAND(W06, W13, W03, W09, W00);
+        R1(B, C, D, A, F, G, H, E, 0xE6228CBC, W07, W07 ^ W11);
+        W07 = EXPAND(W07, W14, W04, W10, W01);
+        R1(A, B, C, D, E, F, G, H, 0xCC451979, W08, W08 ^ W12);
+        W08 = EXPAND(W08, W15, W05, W11, W02);
+        R1(D, A, B, C, H, E, F, G, 0x988A32F3, W09, W09 ^ W13);
+        W09 = EXPAND(W09, W00, W06, W12, W03);
+        R1(C, D, A, B, G, H, E, F, 0x311465E7, W10, W10 ^ W14);
+        W10 = EXPAND(W10, W01, W07, W13, W04);
+        R1(B, C, D, A, F, G, H, E, 0x6228CBCE, W11, W11 ^ W15);
+        W11 = EXPAND(W11, W02, W08, W14, W05);
+        R1(A, B, C, D, E, F, G, H, 0xC451979C, W12, W12 ^ W00);
+        W12 = EXPAND(W12, W03, W09, W15, W06);
+        R1(D, A, B, C, H, E, F, G, 0x88A32F39, W13, W13 ^ W01);
+        W13 = EXPAND(W13, W04, W10, W00, W07);
+        R1(C, D, A, B, G, H, E, F, 0x11465E73, W14, W14 ^ W02);
+        W14 = EXPAND(W14, W05, W11, W01, W08);
+        R1(B, C, D, A, F, G, H, E, 0x228CBCE6, W15, W15 ^ W03);
+        W15 = EXPAND(W15, W06, W12, W02, W09);
+        R2(A, B, C, D, E, F, G, H, 0x9D8A7A87, W00, W00 ^ W04);
+        W00 = EXPAND(W00, W07, W13, W03, W10);
+        R2(D, A, B, C, H, E, F, G, 0x3B14F50F, W01, W01 ^ W05);
+        W01 = EXPAND(W01, W08, W14, W04, W11);
+        R2(C, D, A, B, G, H, E, F, 0x7629EA1E, W02, W02 ^ W06);
+        W02 = EXPAND(W02, W09, W15, W05, W12);
+        R2(B, C, D, A, F, G, H, E, 0xEC53D43C, W03, W03 ^ W07);
+        W03 = EXPAND(W03, W10, W00, W06, W13);
+        R2(A, B, C, D, E, F, G, H, 0xD8A7A879, W04, W04 ^ W08);
+        W04 = EXPAND(W04, W11, W01, W07, W14);
+        R2(D, A, B, C, H, E, F, G, 0xB14F50F3, W05, W05 ^ W09);
+        W05 = EXPAND(W05, W12, W02, W08, W15);
+        R2(C, D, A, B, G, H, E, F, 0x629EA1E7, W06, W06 ^ W10);
+        W06 = EXPAND(W06, W13, W03, W09, W00);
+        R2(B, C, D, A, F, G, H, E, 0xC53D43CE, W07, W07 ^ W11);
+        W07 = EXPAND(W07, W14, W04, W10, W01);
+        R2(A, B, C, D, E, F, G, H, 0x8A7A879D, W08, W08 ^ W12);
+        W08 = EXPAND(W08, W15, W05, W11, W02);
+        R2(D, A, B, C, H, E, F, G, 0x14F50F3B, W09, W09 ^ W13);
+        W09 = EXPAND(W09, W00, W06, W12, W03);
+        R2(C, D, A, B, G, H, E, F, 0x29EA1E76, W10, W10 ^ W14);
+        W10 = EXPAND(W10, W01, W07, W13, W04);
+        R2(B, C, D, A, F, G, H, E, 0x53D43CEC, W11, W11 ^ W15);
+        W11 = EXPAND(W11, W02, W08, W14, W05);
+        R2(A, B, C, D, E, F, G, H, 0xA7A879D8, W12, W12 ^ W00);
+        W12 = EXPAND(W12, W03, W09, W15, W06);
+        R2(D, A, B, C, H, E, F, G, 0x4F50F3B1, W13, W13 ^ W01);
+        W13 = EXPAND(W13, W04, W10, W00, W07);
+        R2(C, D, A, B, G, H, E, F, 0x9EA1E762, W14, W14 ^ W02);
+        W14 = EXPAND(W14, W05, W11, W01, W08);
+        R2(B, C, D, A, F, G, H, E, 0x3D43CEC5, W15, W15 ^ W03);
+        W15 = EXPAND(W15, W06, W12, W02, W09);
+        R2(A, B, C, D, E, F, G, H, 0x7A879D8A, W00, W00 ^ W04);
+        W00 = EXPAND(W00, W07, W13, W03, W10);
+        R2(D, A, B, C, H, E, F, G, 0xF50F3B14, W01, W01 ^ W05);
+        W01 = EXPAND(W01, W08, W14, W04, W11);
+        R2(C, D, A, B, G, H, E, F, 0xEA1E7629, W02, W02 ^ W06);
+        W02 = EXPAND(W02, W09, W15, W05, W12);
+        R2(B, C, D, A, F, G, H, E, 0xD43CEC53, W03, W03 ^ W07);
+        W03 = EXPAND(W03, W10, W00, W06, W13);
+        R2(A, B, C, D, E, F, G, H, 0xA879D8A7, W04, W04 ^ W08);
+        W04 = EXPAND(W04, W11, W01, W07, W14);
+        R2(D, A, B, C, H, E, F, G, 0x50F3B14F, W05, W05 ^ W09);
+        W05 = EXPAND(W05, W12, W02, W08, W15);
+        R2(C, D, A, B, G, H, E, F, 0xA1E7629E, W06, W06 ^ W10);
+        W06 = EXPAND(W06, W13, W03, W09, W00);
+        R2(B, C, D, A, F, G, H, E, 0x43CEC53D, W07, W07 ^ W11);
+        W07 = EXPAND(W07, W14, W04, W10, W01);
+        R2(A, B, C, D, E, F, G, H, 0x879D8A7A, W08, W08 ^ W12);
+        W08 = EXPAND(W08, W15, W05, W11, W02);
+        R2(D, A, B, C, H, E, F, G, 0x0F3B14F5, W09, W09 ^ W13);
+        W09 = EXPAND(W09, W00, W06, W12, W03);
+        R2(C, D, A, B, G, H, E, F, 0x1E7629EA, W10, W10 ^ W14);
+        W10 = EXPAND(W10, W01, W07, W13, W04);
+        R2(B, C, D, A, F, G, H, E, 0x3CEC53D4, W11, W11 ^ W15);
+        W11 = EXPAND(W11, W02, W08, W14, W05);
+        R2(A, B, C, D, E, F, G, H, 0x79D8A7A8, W12, W12 ^ W00);
+        W12 = EXPAND(W12, W03, W09, W15, W06);
+        R2(D, A, B, C, H, E, F, G, 0xF3B14F50, W13, W13 ^ W01);
+        W13 = EXPAND(W13, W04, W10, W00, W07);
+        R2(C, D, A, B, G, H, E, F, 0xE7629EA1, W14, W14 ^ W02);
+        W14 = EXPAND(W14, W05, W11, W01, W08);
+        R2(B, C, D, A, F, G, H, E, 0xCEC53D43, W15, W15 ^ W03);
+        W15 = EXPAND(W15, W06, W12, W02, W09);
+        R2(A, B, C, D, E, F, G, H, 0x9D8A7A87, W00, W00 ^ W04);
+        W00 = EXPAND(W00, W07, W13, W03, W10);
+        R2(D, A, B, C, H, E, F, G, 0x3B14F50F, W01, W01 ^ W05);
+        W01 = EXPAND(W01, W08, W14, W04, W11);
+        R2(C, D, A, B, G, H, E, F, 0x7629EA1E, W02, W02 ^ W06);
+        W02 = EXPAND(W02, W09, W15, W05, W12);
+        R2(B, C, D, A, F, G, H, E, 0xEC53D43C, W03, W03 ^ W07);
+        W03 = EXPAND(W03, W10, W00, W06, W13);
+        R2(A, B, C, D, E, F, G, H, 0xD8A7A879, W04, W04 ^ W08);
+        R2(D, A, B, C, H, E, F, G, 0xB14F50F3, W05, W05 ^ W09);
+        R2(C, D, A, B, G, H, E, F, 0x629EA1E7, W06, W06 ^ W10);
+        R2(B, C, D, A, F, G, H, E, 0xC53D43CE, W07, W07 ^ W11);
+        R2(A, B, C, D, E, F, G, H, 0x8A7A879D, W08, W08 ^ W12);
+        R2(D, A, B, C, H, E, F, G, 0x14F50F3B, W09, W09 ^ W13);
+        R2(C, D, A, B, G, H, E, F, 0x29EA1E76, W10, W10 ^ W14);
+        R2(B, C, D, A, F, G, H, E, 0x53D43CEC, W11, W11 ^ W15);
+        R2(A, B, C, D, E, F, G, H, 0xA7A879D8, W12, W12 ^ W00);
+        R2(D, A, B, C, H, E, F, G, 0x4F50F3B1, W13, W13 ^ W01);
+        R2(C, D, A, B, G, H, E, F, 0x9EA1E762, W14, W14 ^ W02);
+        R2(B, C, D, A, F, G, H, E, 0x3D43CEC5, W15, W15 ^ W03);
+
+        ctx->A ^= A;
+        ctx->B ^= B;
+        ctx->C ^= C;
+        ctx->D ^= D;
+        ctx->E ^= E;
+        ctx->F ^= F;
+        ctx->G ^= G;
+        ctx->H ^= H;
+    }
+}
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sm3/sm3_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/sm3/sm3_locl.h
new file mode 100644
index 000000000..efa6db57c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sm3/sm3_locl.h
@@ -0,0 +1,79 @@
+/*
+ * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017 Ribose Inc. All Rights Reserved.
+ * Ported from Ribose contributions from Botan.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include "internal/sm3.h"
+
+#define DATA_ORDER_IS_BIG_ENDIAN
+
+#define HASH_LONG               SM3_WORD
+#define HASH_CTX                SM3_CTX
+#define HASH_CBLOCK             SM3_CBLOCK
+#define HASH_UPDATE             sm3_update
+#define HASH_TRANSFORM          sm3_transform
+#define HASH_FINAL              sm3_final
+#define HASH_MAKE_STRING(c, s)              \
+      do {                                  \
+        unsigned long ll;                   \
+        ll=(c)->A; (void)HOST_l2c(ll, (s)); \
+        ll=(c)->B; (void)HOST_l2c(ll, (s)); \
+        ll=(c)->C; (void)HOST_l2c(ll, (s)); \
+        ll=(c)->D; (void)HOST_l2c(ll, (s)); \
+        ll=(c)->E; (void)HOST_l2c(ll, (s)); \
+        ll=(c)->F; (void)HOST_l2c(ll, (s)); \
+        ll=(c)->G; (void)HOST_l2c(ll, (s)); \
+        ll=(c)->H; (void)HOST_l2c(ll, (s)); \
+      } while (0)
+#define HASH_BLOCK_DATA_ORDER   sm3_block_data_order
+
+void sm3_transform(SM3_CTX *c, const unsigned char *data);
+
+#include "internal/md32_common.h"
+
+#define P0(X) (X ^ ROTATE(X, 9) ^ ROTATE(X, 17))
+#define P1(X) (X ^ ROTATE(X, 15) ^ ROTATE(X, 23))
+
+#define FF0(X,Y,Z) (X ^ Y ^ Z)
+#define GG0(X,Y,Z) (X ^ Y ^ Z)
+
+#define FF1(X,Y,Z) ((X & Y) | ((X | Y) & Z))
+#define GG1(X,Y,Z) ((Z ^ (X & (Y ^ Z))))
+
+#define EXPAND(W0,W7,W13,W3,W10) \
+   (P1(W0 ^ W7 ^ ROTATE(W13, 15)) ^ ROTATE(W3, 7) ^ W10)
+
+#define RND(A, B, C, D, E, F, G, H, TJ, Wi, Wj, FF, GG)           \
+     do {                                                         \
+       const SM3_WORD A12 = ROTATE(A, 12);                        \
+       const SM3_WORD A12_SM = A12 + E + TJ;                      \
+       const SM3_WORD SS1 = ROTATE(A12_SM, 7);                    \
+       const SM3_WORD TT1 = FF(A, B, C) + D + (SS1 ^ A12) + (Wj); \
+       const SM3_WORD TT2 = GG(E, F, G) + H + SS1 + Wi;           \
+       B = ROTATE(B, 9);                                          \
+       D = TT1;                                                   \
+       F = ROTATE(F, 19);                                         \
+       H = P0(TT2);                                               \
+     } while(0)
+
+#define R1(A,B,C,D,E,F,G,H,TJ,Wi,Wj) \
+   RND(A,B,C,D,E,F,G,H,TJ,Wi,Wj,FF0,GG0)
+
+#define R2(A,B,C,D,E,F,G,H,TJ,Wi,Wj) \
+   RND(A,B,C,D,E,F,G,H,TJ,Wi,Wj,FF1,GG1)
+
+#define SM3_A 0x7380166fUL
+#define SM3_B 0x4914b2b9UL
+#define SM3_C 0x172442d7UL
+#define SM3_D 0xda8a0600UL
+#define SM3_E 0xa96f30bcUL
+#define SM3_F 0x163138aaUL
+#define SM3_G 0xe38dee4dUL
+#define SM3_H 0xb0fb0e4eUL
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sm4/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/sm4/build.info
new file mode 100644
index 000000000..b65a7d149
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sm4/build.info
@@ -0,0 +1,4 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        sm4.c
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sm4/sm4.c b/trunk/3rdparty/openssl-1.1-fit/crypto/sm4/sm4.c
new file mode 100644
index 000000000..0c819a4b6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sm4/sm4.c
@@ -0,0 +1,233 @@
+/*
+ * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017 Ribose Inc. All Rights Reserved.
+ * Ported from Ribose contributions from Botan.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/e_os2.h>
+#include "internal/sm4.h"
+
+static const uint8_t SM4_S[256] = {
+    0xD6, 0x90, 0xE9, 0xFE, 0xCC, 0xE1, 0x3D, 0xB7, 0x16, 0xB6, 0x14, 0xC2,
+    0x28, 0xFB, 0x2C, 0x05, 0x2B, 0x67, 0x9A, 0x76, 0x2A, 0xBE, 0x04, 0xC3,
+    0xAA, 0x44, 0x13, 0x26, 0x49, 0x86, 0x06, 0x99, 0x9C, 0x42, 0x50, 0xF4,
+    0x91, 0xEF, 0x98, 0x7A, 0x33, 0x54, 0x0B, 0x43, 0xED, 0xCF, 0xAC, 0x62,
+    0xE4, 0xB3, 0x1C, 0xA9, 0xC9, 0x08, 0xE8, 0x95, 0x80, 0xDF, 0x94, 0xFA,
+    0x75, 0x8F, 0x3F, 0xA6, 0x47, 0x07, 0xA7, 0xFC, 0xF3, 0x73, 0x17, 0xBA,
+    0x83, 0x59, 0x3C, 0x19, 0xE6, 0x85, 0x4F, 0xA8, 0x68, 0x6B, 0x81, 0xB2,
+    0x71, 0x64, 0xDA, 0x8B, 0xF8, 0xEB, 0x0F, 0x4B, 0x70, 0x56, 0x9D, 0x35,
+    0x1E, 0x24, 0x0E, 0x5E, 0x63, 0x58, 0xD1, 0xA2, 0x25, 0x22, 0x7C, 0x3B,
+    0x01, 0x21, 0x78, 0x87, 0xD4, 0x00, 0x46, 0x57, 0x9F, 0xD3, 0x27, 0x52,
+    0x4C, 0x36, 0x02, 0xE7, 0xA0, 0xC4, 0xC8, 0x9E, 0xEA, 0xBF, 0x8A, 0xD2,
+    0x40, 0xC7, 0x38, 0xB5, 0xA3, 0xF7, 0xF2, 0xCE, 0xF9, 0x61, 0x15, 0xA1,
+    0xE0, 0xAE, 0x5D, 0xA4, 0x9B, 0x34, 0x1A, 0x55, 0xAD, 0x93, 0x32, 0x30,
+    0xF5, 0x8C, 0xB1, 0xE3, 0x1D, 0xF6, 0xE2, 0x2E, 0x82, 0x66, 0xCA, 0x60,
+    0xC0, 0x29, 0x23, 0xAB, 0x0D, 0x53, 0x4E, 0x6F, 0xD5, 0xDB, 0x37, 0x45,
+    0xDE, 0xFD, 0x8E, 0x2F, 0x03, 0xFF, 0x6A, 0x72, 0x6D, 0x6C, 0x5B, 0x51,
+    0x8D, 0x1B, 0xAF, 0x92, 0xBB, 0xDD, 0xBC, 0x7F, 0x11, 0xD9, 0x5C, 0x41,
+    0x1F, 0x10, 0x5A, 0xD8, 0x0A, 0xC1, 0x31, 0x88, 0xA5, 0xCD, 0x7B, 0xBD,
+    0x2D, 0x74, 0xD0, 0x12, 0xB8, 0xE5, 0xB4, 0xB0, 0x89, 0x69, 0x97, 0x4A,
+    0x0C, 0x96, 0x77, 0x7E, 0x65, 0xB9, 0xF1, 0x09, 0xC5, 0x6E, 0xC6, 0x84,
+    0x18, 0xF0, 0x7D, 0xEC, 0x3A, 0xDC, 0x4D, 0x20, 0x79, 0xEE, 0x5F, 0x3E,
+    0xD7, 0xCB, 0x39, 0x48
+};
+
+/*
+ * SM4_SBOX_T[j] == L(SM4_SBOX[j]).
+ */
+static const uint32_t SM4_SBOX_T[256] = {
+    0x8ED55B5B, 0xD0924242, 0x4DEAA7A7, 0x06FDFBFB, 0xFCCF3333, 0x65E28787,
+    0xC93DF4F4, 0x6BB5DEDE, 0x4E165858, 0x6EB4DADA, 0x44145050, 0xCAC10B0B,
+    0x8828A0A0, 0x17F8EFEF, 0x9C2CB0B0, 0x11051414, 0x872BACAC, 0xFB669D9D,
+    0xF2986A6A, 0xAE77D9D9, 0x822AA8A8, 0x46BCFAFA, 0x14041010, 0xCFC00F0F,
+    0x02A8AAAA, 0x54451111, 0x5F134C4C, 0xBE269898, 0x6D482525, 0x9E841A1A,
+    0x1E061818, 0xFD9B6666, 0xEC9E7272, 0x4A430909, 0x10514141, 0x24F7D3D3,
+    0xD5934646, 0x53ECBFBF, 0xF89A6262, 0x927BE9E9, 0xFF33CCCC, 0x04555151,
+    0x270B2C2C, 0x4F420D0D, 0x59EEB7B7, 0xF3CC3F3F, 0x1CAEB2B2, 0xEA638989,
+    0x74E79393, 0x7FB1CECE, 0x6C1C7070, 0x0DABA6A6, 0xEDCA2727, 0x28082020,
+    0x48EBA3A3, 0xC1975656, 0x80820202, 0xA3DC7F7F, 0xC4965252, 0x12F9EBEB,
+    0xA174D5D5, 0xB38D3E3E, 0xC33FFCFC, 0x3EA49A9A, 0x5B461D1D, 0x1B071C1C,
+    0x3BA59E9E, 0x0CFFF3F3, 0x3FF0CFCF, 0xBF72CDCD, 0x4B175C5C, 0x52B8EAEA,
+    0x8F810E0E, 0x3D586565, 0xCC3CF0F0, 0x7D196464, 0x7EE59B9B, 0x91871616,
+    0x734E3D3D, 0x08AAA2A2, 0xC869A1A1, 0xC76AADAD, 0x85830606, 0x7AB0CACA,
+    0xB570C5C5, 0xF4659191, 0xB2D96B6B, 0xA7892E2E, 0x18FBE3E3, 0x47E8AFAF,
+    0x330F3C3C, 0x674A2D2D, 0xB071C1C1, 0x0E575959, 0xE99F7676, 0xE135D4D4,
+    0x661E7878, 0xB4249090, 0x360E3838, 0x265F7979, 0xEF628D8D, 0x38596161,
+    0x95D24747, 0x2AA08A8A, 0xB1259494, 0xAA228888, 0x8C7DF1F1, 0xD73BECEC,
+    0x05010404, 0xA5218484, 0x9879E1E1, 0x9B851E1E, 0x84D75353, 0x00000000,
+    0x5E471919, 0x0B565D5D, 0xE39D7E7E, 0x9FD04F4F, 0xBB279C9C, 0x1A534949,
+    0x7C4D3131, 0xEE36D8D8, 0x0A020808, 0x7BE49F9F, 0x20A28282, 0xD4C71313,
+    0xE8CB2323, 0xE69C7A7A, 0x42E9ABAB, 0x43BDFEFE, 0xA2882A2A, 0x9AD14B4B,
+    0x40410101, 0xDBC41F1F, 0xD838E0E0, 0x61B7D6D6, 0x2FA18E8E, 0x2BF4DFDF,
+    0x3AF1CBCB, 0xF6CD3B3B, 0x1DFAE7E7, 0xE5608585, 0x41155454, 0x25A38686,
+    0x60E38383, 0x16ACBABA, 0x295C7575, 0x34A69292, 0xF7996E6E, 0xE434D0D0,
+    0x721A6868, 0x01545555, 0x19AFB6B6, 0xDF914E4E, 0xFA32C8C8, 0xF030C0C0,
+    0x21F6D7D7, 0xBC8E3232, 0x75B3C6C6, 0x6FE08F8F, 0x691D7474, 0x2EF5DBDB,
+    0x6AE18B8B, 0x962EB8B8, 0x8A800A0A, 0xFE679999, 0xE2C92B2B, 0xE0618181,
+    0xC0C30303, 0x8D29A4A4, 0xAF238C8C, 0x07A9AEAE, 0x390D3434, 0x1F524D4D,
+    0x764F3939, 0xD36EBDBD, 0x81D65757, 0xB7D86F6F, 0xEB37DCDC, 0x51441515,
+    0xA6DD7B7B, 0x09FEF7F7, 0xB68C3A3A, 0x932FBCBC, 0x0F030C0C, 0x03FCFFFF,
+    0xC26BA9A9, 0xBA73C9C9, 0xD96CB5B5, 0xDC6DB1B1, 0x375A6D6D, 0x15504545,
+    0xB98F3636, 0x771B6C6C, 0x13ADBEBE, 0xDA904A4A, 0x57B9EEEE, 0xA9DE7777,
+    0x4CBEF2F2, 0x837EFDFD, 0x55114444, 0xBDDA6767, 0x2C5D7171, 0x45400505,
+    0x631F7C7C, 0x50104040, 0x325B6969, 0xB8DB6363, 0x220A2828, 0xC5C20707,
+    0xF531C4C4, 0xA88A2222, 0x31A79696, 0xF9CE3737, 0x977AEDED, 0x49BFF6F6,
+    0x992DB4B4, 0xA475D1D1, 0x90D34343, 0x5A124848, 0x58BAE2E2, 0x71E69797,
+    0x64B6D2D2, 0x70B2C2C2, 0xAD8B2626, 0xCD68A5A5, 0xCB955E5E, 0x624B2929,
+    0x3C0C3030, 0xCE945A5A, 0xAB76DDDD, 0x867FF9F9, 0xF1649595, 0x5DBBE6E6,
+    0x35F2C7C7, 0x2D092424, 0xD1C61717, 0xD66FB9B9, 0xDEC51B1B, 0x94861212,
+    0x78186060, 0x30F3C3C3, 0x897CF5F5, 0x5CEFB3B3, 0xD23AE8E8, 0xACDF7373,
+    0x794C3535, 0xA0208080, 0x9D78E5E5, 0x56EDBBBB, 0x235E7D7D, 0xC63EF8F8,
+    0x8BD45F5F, 0xE7C82F2F, 0xDD39E4E4, 0x68492121 };
+
+static ossl_inline uint32_t rotl(uint32_t a, uint8_t n)
+{
+    return (a << n) | (a >> (32 - n));
+}
+
+static ossl_inline uint32_t load_u32_be(const uint8_t *b, uint32_t n)
+{
+    return ((uint32_t)b[4 * n] << 24) |
+           ((uint32_t)b[4 * n + 1] << 16) |
+           ((uint32_t)b[4 * n + 2] << 8) |
+           ((uint32_t)b[4 * n + 3]);
+}
+
+static ossl_inline void store_u32_be(uint32_t v, uint8_t *b)
+{
+    b[0] = (uint8_t)(v >> 24);
+    b[1] = (uint8_t)(v >> 16);
+    b[2] = (uint8_t)(v >> 8);
+    b[3] = (uint8_t)(v);
+}
+
+static ossl_inline uint32_t SM4_T_slow(uint32_t X)
+{
+    uint32_t t = 0;
+
+    t |= ((uint32_t)SM4_S[(uint8_t)(X >> 24)]) << 24;
+    t |= ((uint32_t)SM4_S[(uint8_t)(X >> 16)]) << 16;
+    t |= ((uint32_t)SM4_S[(uint8_t)(X >> 8)]) << 8;
+    t |= SM4_S[(uint8_t)X];
+
+    /*
+     * L linear transform
+     */
+    return t ^ rotl(t, 2) ^ rotl(t, 10) ^ rotl(t, 18) ^ rotl(t, 24);
+}
+
+static ossl_inline uint32_t SM4_T(uint32_t X)
+{
+    return SM4_SBOX_T[(uint8_t)(X >> 24)] ^
+           rotl(SM4_SBOX_T[(uint8_t)(X >> 16)], 24) ^
+           rotl(SM4_SBOX_T[(uint8_t)(X >> 8)], 16) ^
+           rotl(SM4_SBOX_T[(uint8_t)X], 8);
+}
+
+int SM4_set_key(const uint8_t *key, SM4_KEY *ks)
+{
+    /*
+     * Family Key
+     */
+    static const uint32_t FK[4] =
+        { 0xa3b1bac6, 0x56aa3350, 0x677d9197, 0xb27022dc };
+
+    /*
+     * Constant Key
+     */
+    static const uint32_t CK[32] = {
+        0x00070E15, 0x1C232A31, 0x383F464D, 0x545B6269,
+        0x70777E85, 0x8C939AA1, 0xA8AFB6BD, 0xC4CBD2D9,
+        0xE0E7EEF5, 0xFC030A11, 0x181F262D, 0x343B4249,
+        0x50575E65, 0x6C737A81, 0x888F969D, 0xA4ABB2B9,
+        0xC0C7CED5, 0xDCE3EAF1, 0xF8FF060D, 0x141B2229,
+        0x30373E45, 0x4C535A61, 0x686F767D, 0x848B9299,
+        0xA0A7AEB5, 0xBCC3CAD1, 0xD8DFE6ED, 0xF4FB0209,
+        0x10171E25, 0x2C333A41, 0x484F565D, 0x646B7279
+    };
+
+    uint32_t K[4];
+    int i;
+
+    K[0] = load_u32_be(key, 0) ^ FK[0];
+    K[1] = load_u32_be(key, 1) ^ FK[1];
+    K[2] = load_u32_be(key, 2) ^ FK[2];
+    K[3] = load_u32_be(key, 3) ^ FK[3];
+
+    for (i = 0; i != SM4_KEY_SCHEDULE; ++i) {
+        uint32_t X = K[(i + 1) % 4] ^ K[(i + 2) % 4] ^ K[(i + 3) % 4] ^ CK[i];
+        uint32_t t = 0;
+
+        t |= ((uint32_t)SM4_S[(uint8_t)(X >> 24)]) << 24;
+        t |= ((uint32_t)SM4_S[(uint8_t)(X >> 16)]) << 16;
+        t |= ((uint32_t)SM4_S[(uint8_t)(X >> 8)]) << 8;
+        t |= SM4_S[(uint8_t)X];
+
+        t = t ^ rotl(t, 13) ^ rotl(t, 23);
+        K[i % 4] ^= t;
+        ks->rk[i] = K[i % 4];
+    }
+
+    return 1;
+}
+
+#define SM4_RNDS(k0, k1, k2, k3, F)          \
+      do {                                   \
+         B0 ^= F(B1 ^ B2 ^ B3 ^ ks->rk[k0]); \
+         B1 ^= F(B0 ^ B2 ^ B3 ^ ks->rk[k1]); \
+         B2 ^= F(B0 ^ B1 ^ B3 ^ ks->rk[k2]); \
+         B3 ^= F(B0 ^ B1 ^ B2 ^ ks->rk[k3]); \
+      } while(0)
+
+void SM4_encrypt(const uint8_t *in, uint8_t *out, const SM4_KEY *ks)
+{
+    uint32_t B0 = load_u32_be(in, 0);
+    uint32_t B1 = load_u32_be(in, 1);
+    uint32_t B2 = load_u32_be(in, 2);
+    uint32_t B3 = load_u32_be(in, 3);
+
+    /*
+     * Uses byte-wise sbox in the first and last rounds to provide some
+     * protection from cache based side channels.
+     */
+    SM4_RNDS( 0,  1,  2,  3, SM4_T_slow);
+    SM4_RNDS( 4,  5,  6,  7, SM4_T);
+    SM4_RNDS( 8,  9, 10, 11, SM4_T);
+    SM4_RNDS(12, 13, 14, 15, SM4_T);
+    SM4_RNDS(16, 17, 18, 19, SM4_T);
+    SM4_RNDS(20, 21, 22, 23, SM4_T);
+    SM4_RNDS(24, 25, 26, 27, SM4_T);
+    SM4_RNDS(28, 29, 30, 31, SM4_T_slow);
+
+    store_u32_be(B3, out);
+    store_u32_be(B2, out + 4);
+    store_u32_be(B1, out + 8);
+    store_u32_be(B0, out + 12);
+}
+
+void SM4_decrypt(const uint8_t *in, uint8_t *out, const SM4_KEY *ks)
+{
+    uint32_t B0 = load_u32_be(in, 0);
+    uint32_t B1 = load_u32_be(in, 1);
+    uint32_t B2 = load_u32_be(in, 2);
+    uint32_t B3 = load_u32_be(in, 3);
+
+    SM4_RNDS(31, 30, 29, 28, SM4_T_slow);
+    SM4_RNDS(27, 26, 25, 24, SM4_T);
+    SM4_RNDS(23, 22, 21, 20, SM4_T);
+    SM4_RNDS(19, 18, 17, 16, SM4_T);
+    SM4_RNDS(15, 14, 13, 12, SM4_T);
+    SM4_RNDS(11, 10,  9,  8, SM4_T);
+    SM4_RNDS( 7,  6,  5,  4, SM4_T);
+    SM4_RNDS( 3,  2,  1,  0, SM4_T_slow);
+
+    store_u32_be(B3, out);
+    store_u32_be(B2, out + 4);
+    store_u32_be(B1, out + 8);
+    store_u32_be(B0, out + 12);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sparc_arch.h b/trunk/3rdparty/openssl-1.1-fit/crypto/sparc_arch.h
new file mode 100644
index 000000000..99eafb331
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sparc_arch.h
@@ -0,0 +1,118 @@
+/*
+ * Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef __SPARC_ARCH_H__
+# define __SPARC_ARCH_H__
+
+# define SPARCV9_TICK_PRIVILEGED (1<<0)
+# define SPARCV9_PREFER_FPU      (1<<1)
+# define SPARCV9_VIS1            (1<<2)
+# define SPARCV9_VIS2            (1<<3)/* reserved */
+# define SPARCV9_FMADD           (1<<4)
+# define SPARCV9_BLK             (1<<5)/* VIS1 block copy */
+# define SPARCV9_VIS3            (1<<6)
+# define SPARCV9_RANDOM          (1<<7)
+# define SPARCV9_64BIT_STACK     (1<<8)
+# define SPARCV9_FJAESX          (1<<9)/* Fujitsu SPARC64 X AES */
+# define SPARCV9_FJDESX          (1<<10)/* Fujitsu SPARC64 X DES, reserved */
+# define SPARCV9_FJHPCACE        (1<<11)/* Fujitsu HPC-ACE, reserved */
+# define SPARCV9_IMA             (1<<13)/* reserved */
+# define SPARCV9_VIS4            (1<<14)/* reserved */
+
+/*
+ * OPENSSL_sparcv9cap_P[1] is copy of Compatibility Feature Register,
+ * %asr26, SPARC-T4 and later. There is no SPARCV9_CFR bit in
+ * OPENSSL_sparcv9cap_P[0], as %cfr copy is sufficient...
+ */
+# define CFR_AES         0x00000001/* Supports AES opcodes */
+# define CFR_DES         0x00000002/* Supports DES opcodes */
+# define CFR_KASUMI      0x00000004/* Supports KASUMI opcodes */
+# define CFR_CAMELLIA    0x00000008/* Supports CAMELLIA opcodes */
+# define CFR_MD5         0x00000010/* Supports MD5 opcodes */
+# define CFR_SHA1        0x00000020/* Supports SHA1 opcodes */
+# define CFR_SHA256      0x00000040/* Supports SHA256 opcodes */
+# define CFR_SHA512      0x00000080/* Supports SHA512 opcodes */
+# define CFR_MPMUL       0x00000100/* Supports MPMUL opcodes */
+# define CFR_MONTMUL     0x00000200/* Supports MONTMUL opcodes */
+# define CFR_MONTSQR     0x00000400/* Supports MONTSQR opcodes */
+# define CFR_CRC32C      0x00000800/* Supports CRC32C opcodes */
+# define CFR_XMPMUL      0x00001000/* Supports XMPMUL opcodes */
+# define CFR_XMONTMUL    0x00002000/* Supports XMONTMUL opcodes */
+# define CFR_XMONTSQR    0x00004000/* Supports XMONTSQR opcodes */
+
+# if defined(OPENSSL_PIC) && !defined(__PIC__)
+#  define __PIC__
+# endif
+
+# if defined(__SUNPRO_C) && defined(__sparcv9) && !defined(__arch64__)
+#  define __arch64__
+# endif
+
+# define SPARC_PIC_THUNK(reg)    \
+        .align  32;             \
+.Lpic_thunk:                    \
+        jmp     %o7 + 8;        \
+         add    %o7, reg, reg;
+
+# define SPARC_PIC_THUNK_CALL(reg)                       \
+        sethi   %hi(_GLOBAL_OFFSET_TABLE_-4), reg;      \
+        call    .Lpic_thunk;                            \
+         or     reg, %lo(_GLOBAL_OFFSET_TABLE_+4), reg;
+
+# if 1
+#  define SPARC_SETUP_GOT_REG(reg)       SPARC_PIC_THUNK_CALL(reg)
+# else
+#  define SPARC_SETUP_GOT_REG(reg)       \
+        sethi   %hi(_GLOBAL_OFFSET_TABLE_-4), reg;      \
+        call    .+8;                                    \
+        or      reg,%lo(_GLOBAL_OFFSET_TABLE_+4), reg;  \
+        add     %o7, reg, reg
+# endif
+
+# if defined(__arch64__)
+
+#  define SPARC_LOAD_ADDRESS(SYM, reg)   \
+        setx    SYM, %o7, reg;
+#  define LDPTR          ldx
+#  define SIZE_T_CC      %xcc
+#  define STACK_FRAME    192
+#  define STACK_BIAS     2047
+#  define STACK_7thARG   (STACK_BIAS+176)
+
+# else
+
+#  define SPARC_LOAD_ADDRESS(SYM, reg)   \
+        set     SYM, reg;
+#  define LDPTR          ld
+#  define SIZE_T_CC      %icc
+#  define STACK_FRAME    112
+#  define STACK_BIAS     0
+#  define STACK_7thARG   92
+#  define SPARC_LOAD_ADDRESS_LEAF(SYM,reg,tmp) SPARC_LOAD_ADDRESS(SYM,reg)
+
+# endif
+
+# ifdef __PIC__
+#  undef SPARC_LOAD_ADDRESS
+#  undef SPARC_LOAD_ADDRESS_LEAF
+#  define SPARC_LOAD_ADDRESS(SYM, reg)   \
+        SPARC_SETUP_GOT_REG(reg);       \
+        sethi   %hi(SYM), %o7;          \
+        or      %o7, %lo(SYM), %o7;     \
+        LDPTR   [reg + %o7], reg;
+# endif
+
+# ifndef SPARC_LOAD_ADDRESS_LEAF
+#  define SPARC_LOAD_ADDRESS_LEAF(SYM, reg, tmp) \
+        mov     %o7, tmp;                       \
+        SPARC_LOAD_ADDRESS(SYM, reg)            \
+        mov     tmp, %o7;
+# endif
+
+#endif                          /* __SPARC_ARCH_H__ */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sparccpuid.S b/trunk/3rdparty/openssl-1.1-fit/crypto/sparccpuid.S
new file mode 100644
index 000000000..95acd2f9d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sparccpuid.S
@@ -0,0 +1,578 @@
+! Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+!
+! Licensed under the OpenSSL license (the "License").  You may not use
+! this file except in compliance with the License.  You can obtain a copy
+! in the file LICENSE in the source distribution or at
+! https://www.openssl.org/source/license.html
+
+#if defined(__SUNPRO_C) && defined(__sparcv9)
+# define ABI64  /* They've said -xarch=v9 at command line */
+#elif defined(__GNUC__) && defined(__arch64__)
+# define ABI64  /* They've said -m64 at command line */
+#endif
+
+#ifdef ABI64
+  .register	%g2,#scratch
+  .register	%g3,#scratch
+# define	FRAME	-192
+# define	BIAS	2047
+#else
+# define	FRAME	-96
+# define	BIAS	0
+#endif
+
+.text
+.align	32
+.global	OPENSSL_wipe_cpu
+.type	OPENSSL_wipe_cpu,#function
+! Keep in mind that this does not excuse us from wiping the stack!
+! This routine wipes registers, but not the backing store [which
+! resides on the stack, toward lower addresses]. To facilitate for
+! stack wiping I return pointer to the top of stack of the *caller*.
+OPENSSL_wipe_cpu:
+	save	%sp,FRAME,%sp
+	nop
+#ifdef __sun
+#include <sys/trap.h>
+	ta	ST_CLEAN_WINDOWS
+#else
+	call	.walk.reg.wins
+#endif
+	nop
+	call	.PIC.zero.up
+	mov	.zero-(.-4),%o0
+	ld	[%o0],%f0
+	ld	[%o0],%f1
+
+	subcc	%g0,1,%o0
+	! Following is V9 "rd %ccr,%o0" instruction. However! V8
+	! specification says that it ("rd %asr2,%o0" in V8 terms) does
+	! not cause illegal_instruction trap. It therefore can be used
+	! to determine if the CPU the code is executing on is V8- or
+	! V9-compliant, as V9 returns a distinct value of 0x99,
+	! "negative" and "borrow" bits set in both %icc and %xcc.
+	.word	0x91408000	!rd	%ccr,%o0
+	cmp	%o0,0x99
+	bne	.v8
+	nop
+			! Even though we do not use %fp register bank,
+			! we wipe it as memcpy might have used it...
+			.word	0xbfa00040	!fmovd	%f0,%f62
+			.word	0xbba00040	!...
+			.word	0xb7a00040
+			.word	0xb3a00040
+			.word	0xafa00040
+			.word	0xaba00040
+			.word	0xa7a00040
+			.word	0xa3a00040
+			.word	0x9fa00040
+			.word	0x9ba00040
+			.word	0x97a00040
+			.word	0x93a00040
+			.word	0x8fa00040
+			.word	0x8ba00040
+			.word	0x87a00040
+			.word	0x83a00040	!fmovd	%f0,%f32
+.v8:			fmovs	%f1,%f31
+	clr	%o0
+			fmovs	%f0,%f30
+	clr	%o1
+			fmovs	%f1,%f29
+	clr	%o2
+			fmovs	%f0,%f28
+	clr	%o3
+			fmovs	%f1,%f27
+	clr	%o4
+			fmovs	%f0,%f26
+	clr	%o5
+			fmovs	%f1,%f25
+	clr	%o7
+			fmovs	%f0,%f24
+	clr	%l0
+			fmovs	%f1,%f23
+	clr	%l1
+			fmovs	%f0,%f22
+	clr	%l2
+			fmovs	%f1,%f21
+	clr	%l3
+			fmovs	%f0,%f20
+	clr	%l4
+			fmovs	%f1,%f19
+	clr	%l5
+			fmovs	%f0,%f18
+	clr	%l6
+			fmovs	%f1,%f17
+	clr	%l7
+			fmovs	%f0,%f16
+	clr	%i0
+			fmovs	%f1,%f15
+	clr	%i1
+			fmovs	%f0,%f14
+	clr	%i2
+			fmovs	%f1,%f13
+	clr	%i3
+			fmovs	%f0,%f12
+	clr	%i4
+			fmovs	%f1,%f11
+	clr	%i5
+			fmovs	%f0,%f10
+	clr	%g1
+			fmovs	%f1,%f9
+	clr	%g2
+			fmovs	%f0,%f8
+	clr	%g3
+			fmovs	%f1,%f7
+	clr	%g4
+			fmovs	%f0,%f6
+	clr	%g5
+			fmovs	%f1,%f5
+			fmovs	%f0,%f4
+			fmovs	%f1,%f3
+			fmovs	%f0,%f2
+
+	add	%fp,BIAS,%i0	! return pointer to caller´s top of stack
+
+	ret
+	restore
+
+.zero:	.long	0x0,0x0
+.PIC.zero.up:
+	retl
+	add	%o0,%o7,%o0
+#ifdef DEBUG
+.global	walk_reg_wins
+.type	walk_reg_wins,#function
+walk_reg_wins:
+#endif
+.walk.reg.wins:
+	save	%sp,FRAME,%sp
+	cmp	%i7,%o7
+	be	2f
+	clr	%o0
+	cmp	%o7,0	! compiler never cleans %o7...
+	be	1f	! could have been a leaf function...
+	clr	%o1
+	call	.walk.reg.wins
+	nop
+1:	clr	%o2
+	clr	%o3
+	clr	%o4
+	clr	%o5
+	clr	%o7
+	clr	%l0
+	clr	%l1
+	clr	%l2
+	clr	%l3
+	clr	%l4
+	clr	%l5
+	clr	%l6
+	clr	%l7
+	add	%o0,1,%i0	! used for debugging
+2:	ret
+	restore
+.size	OPENSSL_wipe_cpu,.-OPENSSL_wipe_cpu
+
+.global	OPENSSL_atomic_add
+.type	OPENSSL_atomic_add,#function
+.align	32
+OPENSSL_atomic_add:
+#ifndef ABI64
+	subcc	%g0,1,%o2
+	.word	0x95408000	!rd	%ccr,%o2, see comment above
+	cmp	%o2,0x99
+	be	.v9
+	nop
+	save	%sp,FRAME,%sp
+	ba	.enter
+	nop
+#ifdef __sun
+! Note that you do not have to link with libthread to call thr_yield,
+! as libc provides a stub, which is overloaded the moment you link
+! with *either* libpthread or libthread...
+#define	YIELD_CPU	thr_yield
+#else
+! applies at least to Linux and FreeBSD... Feedback expected...
+#define	YIELD_CPU	sched_yield
+#endif
+.spin:	call	YIELD_CPU
+	nop
+.enter:	ld	[%i0],%i2
+	cmp	%i2,-4096
+	be	.spin
+	mov	-1,%i2
+	swap	[%i0],%i2
+	cmp	%i2,-1
+	be	.spin
+	add	%i2,%i1,%i2
+	stbar
+	st	%i2,[%i0]
+	sra	%i2,%g0,%i0
+	ret
+	restore
+.v9:
+#endif
+	ld	[%o0],%o2
+1:	add	%o1,%o2,%o3
+	.word	0xd7e2100a	!cas [%o0],%o2,%o3, compare [%o0] with %o2 and swap %o3
+	cmp	%o2,%o3
+	bne	1b
+	mov	%o3,%o2		! cas is always fetching to dest. register
+	add	%o1,%o2,%o0	! OpenSSL expects the new value
+	retl
+	sra	%o0,%g0,%o0	! we return signed int, remember?
+.size	OPENSSL_atomic_add,.-OPENSSL_atomic_add
+
+.global	_sparcv9_rdtick
+.align	32
+_sparcv9_rdtick:
+	subcc	%g0,1,%o0
+	.word	0x91408000	!rd	%ccr,%o0
+	cmp	%o0,0x99
+	bne	.notick
+	xor	%o0,%o0,%o0
+	.word	0x91410000	!rd	%tick,%o0
+	retl
+	.word	0x93323020	!srlx	%o0,32,%o1
+.notick:
+	retl
+	xor	%o1,%o1,%o1
+.type	_sparcv9_rdtick,#function
+.size	_sparcv9_rdtick,.-_sparcv9_rdtick
+
+.global	_sparcv9_vis1_probe
+.align	8
+_sparcv9_vis1_probe:
+	add	%sp,BIAS+2,%o1
+	.word	0xc19a5a40	!ldda	[%o1]ASI_FP16_P,%f0
+	retl
+	.word	0x81b00d80	!fxor	%f0,%f0,%f0
+.type	_sparcv9_vis1_probe,#function
+.size	_sparcv9_vis1_probe,.-_sparcv9_vis1_probe
+
+! Probe and instrument VIS1 instruction. Output is number of cycles it
+! takes to execute rdtick and pair of VIS1 instructions. US-Tx VIS unit
+! is slow (documented to be 6 cycles on T2) and the core is in-order
+! single-issue, it should be possible to distinguish Tx reliably...
+! Observed return values are:
+!
+!	UltraSPARC IIe		7
+!	UltraSPARC III		7
+!	UltraSPARC T1		24
+!	SPARC T4		65(*)
+!
+! (*)	result has lesser to do with VIS instruction latencies, rdtick
+!	appears that slow, but it does the trick in sense that FP and
+!	VIS code paths are still slower than integer-only ones.
+!
+! Numbers for T2 and SPARC64 V-VII are more than welcomed.
+!
+! It would be possible to detect specifically US-T1 by instrumenting
+! fmul8ulx16, which is emulated on T1 and as such accounts for quite
+! a lot of %tick-s, couple of thousand on Linux...
+.global	_sparcv9_vis1_instrument
+.align	8
+_sparcv9_vis1_instrument:
+	.word	0x81b00d80	!fxor	%f0,%f0,%f0
+	.word	0x85b08d82	!fxor	%f2,%f2,%f2
+	.word	0x91410000	!rd	%tick,%o0
+	.word	0x81b00d80	!fxor	%f0,%f0,%f0
+	.word	0x85b08d82	!fxor	%f2,%f2,%f2
+	.word	0x93410000	!rd	%tick,%o1
+	.word	0x81b00d80	!fxor	%f0,%f0,%f0
+	.word	0x85b08d82	!fxor	%f2,%f2,%f2
+	.word	0x95410000	!rd	%tick,%o2
+	.word	0x81b00d80	!fxor	%f0,%f0,%f0
+	.word	0x85b08d82	!fxor	%f2,%f2,%f2
+	.word	0x97410000	!rd	%tick,%o3
+	.word	0x81b00d80	!fxor	%f0,%f0,%f0
+	.word	0x85b08d82	!fxor	%f2,%f2,%f2
+	.word	0x99410000	!rd	%tick,%o4
+
+	! calculate intervals
+	sub	%o1,%o0,%o0
+	sub	%o2,%o1,%o1
+	sub	%o3,%o2,%o2
+	sub	%o4,%o3,%o3
+
+	! find minimum value
+	cmp	%o0,%o1
+	.word	0x38680002	!bgu,a	%xcc,.+8
+	mov	%o1,%o0
+	cmp	%o0,%o2
+	.word	0x38680002	!bgu,a	%xcc,.+8
+	mov	%o2,%o0
+	cmp	%o0,%o3
+	.word	0x38680002	!bgu,a	%xcc,.+8
+	mov	%o3,%o0
+
+	retl
+	nop
+.type	_sparcv9_vis1_instrument,#function
+.size	_sparcv9_vis1_instrument,.-_sparcv9_vis1_instrument
+
+.global	_sparcv9_vis2_probe
+.align	8
+_sparcv9_vis2_probe:
+	retl
+	.word	0x81b00980	!bshuffle	%f0,%f0,%f0
+.type	_sparcv9_vis2_probe,#function
+.size	_sparcv9_vis2_probe,.-_sparcv9_vis2_probe
+
+.global	_sparcv9_fmadd_probe
+.align	8
+_sparcv9_fmadd_probe:
+	.word	0x81b00d80	!fxor	%f0,%f0,%f0
+	.word	0x85b08d82	!fxor	%f2,%f2,%f2
+	retl
+	.word	0x81b80440	!fmaddd	%f0,%f0,%f2,%f0
+.type	_sparcv9_fmadd_probe,#function
+.size	_sparcv9_fmadd_probe,.-_sparcv9_fmadd_probe
+
+.global	_sparcv9_rdcfr
+.align	8
+_sparcv9_rdcfr:
+	retl
+	.word	0x91468000	!rd	%asr26,%o0
+.type	_sparcv9_rdcfr,#function
+.size	_sparcv9_rdcfr,.-_sparcv9_rdcfr
+
+.global	_sparcv9_vis3_probe
+.align	8
+_sparcv9_vis3_probe:
+	retl
+	.word	0x81b022a0	!xmulx	%g0,%g0,%g0
+.type	_sparcv9_vis3_probe,#function
+.size	_sparcv9_vis3_probe,.-_sparcv9_vis3_probe
+
+.global	_sparcv9_random
+.align	8
+_sparcv9_random:
+	retl
+	.word	0x91b002a0	!random	%o0
+.type	_sparcv9_random,#function
+.size	_sparcv9_random,.-_sparcv9_vis3_probe
+
+.global	_sparcv9_fjaesx_probe
+.align	8
+_sparcv9_fjaesx_probe:
+	.word	0x81b09206	!faesencx %f2,%f6,%f0
+	retl
+	nop
+.size	_sparcv9_fjaesx_probe,.-_sparcv9_fjaesx_probe
+
+.global	OPENSSL_cleanse
+.align	32
+OPENSSL_cleanse:
+	cmp	%o1,14
+	nop
+#ifdef ABI64
+	bgu	%xcc,.Lot
+#else
+	bgu	.Lot
+#endif
+	cmp	%o1,0
+	bne	.Little
+	nop
+	retl
+	nop
+
+.Little:
+	stb	%g0,[%o0]
+	subcc	%o1,1,%o1
+	bnz	.Little
+	add	%o0,1,%o0
+	retl
+	nop
+.align	32
+.Lot:
+#ifndef ABI64
+	subcc	%g0,1,%g1
+	! see above for explanation
+	.word	0x83408000	!rd	%ccr,%g1
+	cmp	%g1,0x99
+	bne	.v8lot
+	nop
+#endif
+
+.v9lot:	andcc	%o0,7,%g0
+	bz	.v9aligned
+	nop
+	stb	%g0,[%o0]
+	sub	%o1,1,%o1
+	ba	.v9lot
+	add	%o0,1,%o0
+.align	16,0x01000000
+.v9aligned:
+	.word	0xc0720000	!stx	%g0,[%o0]
+	sub	%o1,8,%o1
+	andcc	%o1,-8,%g0
+#ifdef ABI64
+	.word	0x126ffffd	!bnz	%xcc,.v9aligned
+#else
+	.word	0x124ffffd	!bnz	%icc,.v9aligned
+#endif
+	add	%o0,8,%o0
+
+	cmp	%o1,0
+	bne	.Little
+	nop
+	retl
+	nop
+#ifndef ABI64
+.v8lot:	andcc	%o0,3,%g0
+	bz	.v8aligned
+	nop
+	stb	%g0,[%o0]
+	sub	%o1,1,%o1
+	ba	.v8lot
+	add	%o0,1,%o0
+	nop
+.v8aligned:
+	st	%g0,[%o0]
+	sub	%o1,4,%o1
+	andcc	%o1,-4,%g0
+	bnz	.v8aligned
+	add	%o0,4,%o0
+
+	cmp	%o1,0
+	bne	.Little
+	nop
+	retl
+	nop
+#endif
+.type	OPENSSL_cleanse,#function
+.size	OPENSSL_cleanse,.-OPENSSL_cleanse
+
+.global	CRYPTO_memcmp
+.align	16
+CRYPTO_memcmp:
+	cmp	%o2,0
+#ifdef ABI64
+	beq,pn	%xcc,.Lno_data
+#else
+	beq	.Lno_data
+#endif
+	xor	%g1,%g1,%g1
+	nop
+
+.Loop_cmp:
+	ldub	[%o0],%o3
+	add	%o0,1,%o0
+	ldub	[%o1],%o4
+	add	%o1,1,%o1
+	subcc	%o2,1,%o2
+	xor	%o3,%o4,%o4
+#ifdef ABI64
+	bnz	%xcc,.Loop_cmp
+#else
+	bnz	.Loop_cmp
+#endif
+	or	%o4,%g1,%g1
+
+	sub	%g0,%g1,%g1
+	srl	%g1,31,%g1
+.Lno_data:
+	retl
+	mov	%g1,%o0
+.type	CRYPTO_memcmp,#function
+.size	CRYPTO_memcmp,.-CRYPTO_memcmp
+
+.global	_sparcv9_vis1_instrument_bus
+.align	8
+_sparcv9_vis1_instrument_bus:
+	mov	%o1,%o3					! save cnt
+	.word	0x99410000	!rd	%tick,%o4	! tick
+	mov	%o4,%o5					! lasttick = tick
+	set	0,%g4					! diff
+
+	andn	%o0,63,%g1
+	.word	0xc1985e00	!ldda	[%g1]0xf0,%f0	! block load
+	.word	0x8143e040	!membar	#Sync
+	.word	0xc1b85c00	!stda	%f0,[%g1]0xe0	! block store and commit
+	.word	0x8143e040	!membar	#Sync
+	ld	[%o0],%o4
+	add	%o4,%g4,%g4
+	.word	0xc9e2100c	!cas	[%o0],%o4,%g4
+
+.Loop:	.word	0x99410000	!rd	%tick,%o4
+	sub	%o4,%o5,%g4				! diff=tick-lasttick
+	mov	%o4,%o5					! lasttick=tick
+
+	andn	%o0,63,%g1
+	.word	0xc1985e00	!ldda	[%g1]0xf0,%f0	! block load
+	.word	0x8143e040	!membar	#Sync
+	.word	0xc1b85c00	!stda	%f0,[%g1]0xe0	! block store and commit
+	.word	0x8143e040	!membar	#Sync
+	ld	[%o0],%o4
+	add	%o4,%g4,%g4
+	.word	0xc9e2100c	!cas	[%o0],%o4,%g4
+	subcc	%o1,1,%o1				! --$cnt
+	bnz	.Loop
+	add	%o0,4,%o0				! ++$out
+
+	retl
+	mov	%o3,%o0
+.type	_sparcv9_vis1_instrument_bus,#function
+.size	_sparcv9_vis1_instrument_bus,.-_sparcv9_vis1_instrument_bus
+
+.global	_sparcv9_vis1_instrument_bus2
+.align	8
+_sparcv9_vis1_instrument_bus2:
+	mov	%o1,%o3					! save cnt
+	sll	%o1,2,%o1				! cnt*=4
+
+	.word	0x99410000	!rd	%tick,%o4	! tick
+	mov	%o4,%o5					! lasttick = tick
+	set	0,%g4					! diff
+
+	andn	%o0,63,%g1
+	.word	0xc1985e00	!ldda	[%g1]0xf0,%f0	! block load
+	.word	0x8143e040	!membar	#Sync
+	.word	0xc1b85c00	!stda	%f0,[%g1]0xe0	! block store and commit
+	.word	0x8143e040	!membar	#Sync
+	ld	[%o0],%o4
+	add	%o4,%g4,%g4
+	.word	0xc9e2100c	!cas	[%o0],%o4,%g4
+
+	.word	0x99410000	!rd	%tick,%o4	! tick
+	sub	%o4,%o5,%g4				! diff=tick-lasttick
+	mov	%o4,%o5					! lasttick=tick
+	mov	%g4,%g5					! lastdiff=diff
+.Loop2:
+	andn	%o0,63,%g1
+	.word	0xc1985e00	!ldda	[%g1]0xf0,%f0	! block load
+	.word	0x8143e040	!membar	#Sync
+	.word	0xc1b85c00	!stda	%f0,[%g1]0xe0	! block store and commit
+	.word	0x8143e040	!membar	#Sync
+	ld	[%o0],%o4
+	add	%o4,%g4,%g4
+	.word	0xc9e2100c	!cas	[%o0],%o4,%g4
+
+	subcc	%o2,1,%o2				! --max
+	bz	.Ldone2
+	nop
+
+	.word	0x99410000	!rd	%tick,%o4	! tick
+	sub	%o4,%o5,%g4				! diff=tick-lasttick
+	mov	%o4,%o5					! lasttick=tick
+	cmp	%g4,%g5
+	mov	%g4,%g5					! lastdiff=diff
+
+	.word	0x83408000	!rd	%ccr,%g1
+	and	%g1,4,%g1				! isolate zero flag
+	xor	%g1,4,%g1				! flip zero flag
+
+	subcc	%o1,%g1,%o1				! conditional --$cnt
+	bnz	.Loop2
+	add	%o0,%g1,%o0				! conditional ++$out
+
+.Ldone2:
+	srl	%o1,2,%o1
+	retl
+	sub	%o3,%o1,%o0
+.type	_sparcv9_vis1_instrument_bus2,#function
+.size	_sparcv9_vis1_instrument_bus2,.-_sparcv9_vis1_instrument_bus2
+
+.section	".init",#alloc,#execinstr
+	call	OPENSSL_cpuid_setup
+	nop
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/sparcv9cap.c b/trunk/3rdparty/openssl-1.1-fit/crypto/sparcv9cap.c
new file mode 100644
index 000000000..c8c567536
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/sparcv9cap.c
@@ -0,0 +1,295 @@
+/*
+ * Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <setjmp.h>
+#include <signal.h>
+#include <sys/time.h>
+#include <unistd.h>
+#include <openssl/bn.h>
+#include "internal/cryptlib.h"
+
+#include "sparc_arch.h"
+
+#if defined(__GNUC__) && defined(__linux)
+__attribute__ ((visibility("hidden")))
+#endif
+unsigned int OPENSSL_sparcv9cap_P[2] = { SPARCV9_TICK_PRIVILEGED, 0 };
+
+int bn_mul_mont(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp,
+                const BN_ULONG *np, const BN_ULONG *n0, int num)
+{
+    int bn_mul_mont_vis3(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp,
+                         const BN_ULONG *np, const BN_ULONG *n0, int num);
+    int bn_mul_mont_fpu(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp,
+                        const BN_ULONG *np, const BN_ULONG *n0, int num);
+    int bn_mul_mont_int(BN_ULONG *rp, const BN_ULONG *ap, const BN_ULONG *bp,
+                        const BN_ULONG *np, const BN_ULONG *n0, int num);
+
+    if (!(num & 1) && num >= 6) {
+        if ((num & 15) == 0 && num <= 64 &&
+            (OPENSSL_sparcv9cap_P[1] & (CFR_MONTMUL | CFR_MONTSQR)) ==
+            (CFR_MONTMUL | CFR_MONTSQR)) {
+            typedef int (*bn_mul_mont_f) (BN_ULONG *rp, const BN_ULONG *ap,
+                                          const BN_ULONG *bp,
+                                          const BN_ULONG *np,
+                                          const BN_ULONG *n0);
+            int bn_mul_mont_t4_8(BN_ULONG *rp, const BN_ULONG *ap,
+                                 const BN_ULONG *bp, const BN_ULONG *np,
+                                 const BN_ULONG *n0);
+            int bn_mul_mont_t4_16(BN_ULONG *rp, const BN_ULONG *ap,
+                                  const BN_ULONG *bp, const BN_ULONG *np,
+                                  const BN_ULONG *n0);
+            int bn_mul_mont_t4_24(BN_ULONG *rp, const BN_ULONG *ap,
+                                  const BN_ULONG *bp, const BN_ULONG *np,
+                                  const BN_ULONG *n0);
+            int bn_mul_mont_t4_32(BN_ULONG *rp, const BN_ULONG *ap,
+                                  const BN_ULONG *bp, const BN_ULONG *np,
+                                  const BN_ULONG *n0);
+            static const bn_mul_mont_f funcs[4] = {
+                bn_mul_mont_t4_8, bn_mul_mont_t4_16,
+                bn_mul_mont_t4_24, bn_mul_mont_t4_32
+            };
+            bn_mul_mont_f worker = funcs[num / 16 - 1];
+
+            if ((*worker) (rp, ap, bp, np, n0))
+                return 1;
+            /* retry once and fall back */
+            if ((*worker) (rp, ap, bp, np, n0))
+                return 1;
+            return bn_mul_mont_vis3(rp, ap, bp, np, n0, num);
+        }
+        if ((OPENSSL_sparcv9cap_P[0] & SPARCV9_VIS3))
+            return bn_mul_mont_vis3(rp, ap, bp, np, n0, num);
+        else if (num >= 8 &&
+                 /*
+                  * bn_mul_mont_fpu doesn't use FMADD, we just use the
+                  * flag to detect when FPU path is preferable in cases
+                  * when current heuristics is unreliable. [it works
+                  * out because FMADD-capable processors where FPU
+                  * code path is undesirable are also VIS3-capable and
+                  * VIS3 code path takes precedence.]
+                  */
+                 ( (OPENSSL_sparcv9cap_P[0] & SPARCV9_FMADD) ||
+                   (OPENSSL_sparcv9cap_P[0] &
+                    (SPARCV9_PREFER_FPU | SPARCV9_VIS1)) ==
+                   (SPARCV9_PREFER_FPU | SPARCV9_VIS1) ))
+            return bn_mul_mont_fpu(rp, ap, bp, np, n0, num);
+    }
+    return bn_mul_mont_int(rp, ap, bp, np, n0, num);
+}
+
+unsigned long _sparcv9_rdtick(void);
+void _sparcv9_vis1_probe(void);
+unsigned long _sparcv9_vis1_instrument(void);
+void _sparcv9_vis2_probe(void);
+void _sparcv9_fmadd_probe(void);
+unsigned long _sparcv9_rdcfr(void);
+void _sparcv9_vis3_probe(void);
+void _sparcv9_fjaesx_probe(void);
+unsigned long _sparcv9_random(void);
+size_t _sparcv9_vis1_instrument_bus(unsigned int *, size_t);
+size_t _sparcv9_vis1_instrument_bus2(unsigned int *, size_t, size_t);
+
+uint32_t OPENSSL_rdtsc(void)
+{
+    if (OPENSSL_sparcv9cap_P[0] & SPARCV9_TICK_PRIVILEGED)
+#if defined(__sun) && defined(__SVR4)
+        return gethrtime();
+#else
+        return 0;
+#endif
+    else
+        return _sparcv9_rdtick();
+}
+
+size_t OPENSSL_instrument_bus(unsigned int *out, size_t cnt)
+{
+    if ((OPENSSL_sparcv9cap_P[0] & (SPARCV9_TICK_PRIVILEGED | SPARCV9_BLK)) ==
+        SPARCV9_BLK)
+        return _sparcv9_vis1_instrument_bus(out, cnt);
+    else
+        return 0;
+}
+
+size_t OPENSSL_instrument_bus2(unsigned int *out, size_t cnt, size_t max)
+{
+    if ((OPENSSL_sparcv9cap_P[0] & (SPARCV9_TICK_PRIVILEGED | SPARCV9_BLK)) ==
+        SPARCV9_BLK)
+        return _sparcv9_vis1_instrument_bus2(out, cnt, max);
+    else
+        return 0;
+}
+
+static sigjmp_buf common_jmp;
+static void common_handler(int sig)
+{
+    siglongjmp(common_jmp, sig);
+}
+
+#if defined(__sun) && defined(__SVR4)
+# if defined(__GNUC__) && __GNUC__>=2
+extern unsigned int getisax(unsigned int vec[], unsigned int sz) __attribute__ ((weak));
+# elif defined(__SUNPRO_C)
+#pragma weak getisax
+extern unsigned int getisax(unsigned int vec[], unsigned int sz);
+# else
+static unsigned int (*getisax) (unsigned int vec[], unsigned int sz) = NULL;
+# endif
+#endif
+
+void OPENSSL_cpuid_setup(void)
+{
+    char *e;
+    struct sigaction common_act, ill_oact, bus_oact;
+    sigset_t all_masked, oset;
+    static int trigger = 0;
+
+    if (trigger)
+        return;
+    trigger = 1;
+
+    if ((e = getenv("OPENSSL_sparcv9cap"))) {
+        OPENSSL_sparcv9cap_P[0] = strtoul(e, NULL, 0);
+        if ((e = strchr(e, ':')))
+            OPENSSL_sparcv9cap_P[1] = strtoul(e + 1, NULL, 0);
+        return;
+    }
+
+#if defined(__sun) && defined(__SVR4)
+    if (getisax != NULL) {
+        unsigned int vec[2] = { 0, 0 };
+
+        if (getisax (vec,2)) {
+            if (vec[0]&0x00020) OPENSSL_sparcv9cap_P[0] |= SPARCV9_VIS1;
+            if (vec[0]&0x00040) OPENSSL_sparcv9cap_P[0] |= SPARCV9_VIS2;
+            if (vec[0]&0x00080) OPENSSL_sparcv9cap_P[0] |= SPARCV9_BLK;
+            if (vec[0]&0x00100) OPENSSL_sparcv9cap_P[0] |= SPARCV9_FMADD;
+            if (vec[0]&0x00400) OPENSSL_sparcv9cap_P[0] |= SPARCV9_VIS3;
+            if (vec[0]&0x01000) OPENSSL_sparcv9cap_P[0] |= SPARCV9_FJHPCACE;
+            if (vec[0]&0x02000) OPENSSL_sparcv9cap_P[0] |= SPARCV9_FJDESX;
+            if (vec[0]&0x08000) OPENSSL_sparcv9cap_P[0] |= SPARCV9_IMA;
+            if (vec[0]&0x10000) OPENSSL_sparcv9cap_P[0] |= SPARCV9_FJAESX;
+            if (vec[1]&0x00008) OPENSSL_sparcv9cap_P[0] |= SPARCV9_VIS4;
+
+            /* reconstruct %cfr copy */
+            OPENSSL_sparcv9cap_P[1] = (vec[0]>>17)&0x3ff;
+            OPENSSL_sparcv9cap_P[1] |= (OPENSSL_sparcv9cap_P[1]&CFR_MONTMUL)<<1;
+            if (vec[0]&0x20000000) OPENSSL_sparcv9cap_P[1] |= CFR_CRC32C;
+            if (vec[1]&0x00000020) OPENSSL_sparcv9cap_P[1] |= CFR_XMPMUL;
+            if (vec[1]&0x00000040)
+                OPENSSL_sparcv9cap_P[1] |= CFR_XMONTMUL|CFR_XMONTSQR;
+
+            /* Some heuristics */
+            /* all known VIS2-capable CPUs have unprivileged tick counter */
+            if (OPENSSL_sparcv9cap_P[0]&SPARCV9_VIS2)
+                OPENSSL_sparcv9cap_P[0] &= ~SPARCV9_TICK_PRIVILEGED;
+
+            OPENSSL_sparcv9cap_P[0] |= SPARCV9_PREFER_FPU;
+
+            /* detect UltraSPARC-Tx, see sparccpud.S for details... */
+            if ((OPENSSL_sparcv9cap_P[0]&SPARCV9_VIS1) &&
+                _sparcv9_vis1_instrument() >= 12)
+                OPENSSL_sparcv9cap_P[0] &= ~(SPARCV9_VIS1 | SPARCV9_PREFER_FPU);
+        }
+
+        if (sizeof(size_t) == 8)
+            OPENSSL_sparcv9cap_P[0] |= SPARCV9_64BIT_STACK;
+
+        return;
+    }
+#endif
+
+    /* Initial value, fits UltraSPARC-I&II... */
+    OPENSSL_sparcv9cap_P[0] = SPARCV9_PREFER_FPU | SPARCV9_TICK_PRIVILEGED;
+
+    sigfillset(&all_masked);
+    sigdelset(&all_masked, SIGILL);
+    sigdelset(&all_masked, SIGTRAP);
+# ifdef SIGEMT
+    sigdelset(&all_masked, SIGEMT);
+# endif
+    sigdelset(&all_masked, SIGFPE);
+    sigdelset(&all_masked, SIGBUS);
+    sigdelset(&all_masked, SIGSEGV);
+    sigprocmask(SIG_SETMASK, &all_masked, &oset);
+
+    memset(&common_act, 0, sizeof(common_act));
+    common_act.sa_handler = common_handler;
+    common_act.sa_mask = all_masked;
+
+    sigaction(SIGILL, &common_act, &ill_oact);
+    sigaction(SIGBUS, &common_act, &bus_oact); /* T1 fails 16-bit ldda [on
+                                                * Linux] */
+
+    if (sigsetjmp(common_jmp, 1) == 0) {
+        _sparcv9_rdtick();
+        OPENSSL_sparcv9cap_P[0] &= ~SPARCV9_TICK_PRIVILEGED;
+    }
+
+    if (sigsetjmp(common_jmp, 1) == 0) {
+        _sparcv9_vis1_probe();
+        OPENSSL_sparcv9cap_P[0] |= SPARCV9_VIS1 | SPARCV9_BLK;
+        /* detect UltraSPARC-Tx, see sparccpud.S for details... */
+        if (_sparcv9_vis1_instrument() >= 12)
+            OPENSSL_sparcv9cap_P[0] &= ~(SPARCV9_VIS1 | SPARCV9_PREFER_FPU);
+        else {
+            _sparcv9_vis2_probe();
+            OPENSSL_sparcv9cap_P[0] |= SPARCV9_VIS2;
+        }
+    }
+
+    if (sigsetjmp(common_jmp, 1) == 0) {
+        _sparcv9_fmadd_probe();
+        OPENSSL_sparcv9cap_P[0] |= SPARCV9_FMADD;
+    }
+
+    /*
+     * VIS3 flag is tested independently from VIS1, unlike VIS2 that is,
+     * because VIS3 defines even integer instructions.
+     */
+    if (sigsetjmp(common_jmp, 1) == 0) {
+        _sparcv9_vis3_probe();
+        OPENSSL_sparcv9cap_P[0] |= SPARCV9_VIS3;
+    }
+
+    if (sigsetjmp(common_jmp, 1) == 0) {
+        _sparcv9_fjaesx_probe();
+        OPENSSL_sparcv9cap_P[0] |= SPARCV9_FJAESX;
+    }
+
+    /*
+     * In wait for better solution _sparcv9_rdcfr is masked by
+     * VIS3 flag, because it goes to uninterruptable endless
+     * loop on UltraSPARC II running Solaris. Things might be
+     * different on Linux...
+     */
+    if ((OPENSSL_sparcv9cap_P[0] & SPARCV9_VIS3) &&
+        sigsetjmp(common_jmp, 1) == 0) {
+        OPENSSL_sparcv9cap_P[1] = (unsigned int)_sparcv9_rdcfr();
+    }
+
+    sigaction(SIGBUS, &bus_oact, NULL);
+    sigaction(SIGILL, &ill_oact, NULL);
+
+    sigprocmask(SIG_SETMASK, &oset, NULL);
+
+    if (sizeof(size_t) == 8)
+        OPENSSL_sparcv9cap_P[0] |= SPARCV9_64BIT_STACK;
+# ifdef __linux
+    else {
+        int ret = syscall(340);
+
+        if (ret >= 0 && ret & 1)
+            OPENSSL_sparcv9cap_P[0] |= SPARCV9_64BIT_STACK;
+    }
+# endif
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/srp/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/srp/build.info
new file mode 100644
index 000000000..b6c7fe7ad
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/srp/build.info
@@ -0,0 +1,2 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=srp_lib.c srp_vfy.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/srp/srp_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/srp/srp_lib.c
new file mode 100644
index 000000000..ca20f6d09
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/srp/srp_lib.c
@@ -0,0 +1,286 @@
+/*
+ * Copyright 2004-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2004, EdelKey Project. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Christophe Renou and Peter Sylvester,
+ * for the EdelKey project.
+ */
+
+#ifndef OPENSSL_NO_SRP
+# include "internal/cryptlib.h"
+# include <openssl/sha.h>
+# include <openssl/srp.h>
+# include <openssl/evp.h>
+# include "internal/bn_srp.h"
+
+/* calculate = SHA1(PAD(x) || PAD(y)) */
+
+static BIGNUM *srp_Calc_xy(const BIGNUM *x, const BIGNUM *y, const BIGNUM *N)
+{
+    unsigned char digest[SHA_DIGEST_LENGTH];
+    unsigned char *tmp = NULL;
+    int numN = BN_num_bytes(N);
+    BIGNUM *res = NULL;
+
+    if (x != N && BN_ucmp(x, N) >= 0)
+        return NULL;
+    if (y != N && BN_ucmp(y, N) >= 0)
+        return NULL;
+    if ((tmp = OPENSSL_malloc(numN * 2)) == NULL)
+        goto err;
+    if (BN_bn2binpad(x, tmp, numN) < 0
+        || BN_bn2binpad(y, tmp + numN, numN) < 0
+        || !EVP_Digest(tmp, numN * 2, digest, NULL, EVP_sha1(), NULL))
+        goto err;
+    res = BN_bin2bn(digest, sizeof(digest), NULL);
+ err:
+    OPENSSL_free(tmp);
+    return res;
+}
+
+static BIGNUM *srp_Calc_k(const BIGNUM *N, const BIGNUM *g)
+{
+    /* k = SHA1(N | PAD(g)) -- tls-srp draft 8 */
+    return srp_Calc_xy(N, g, N);
+}
+
+BIGNUM *SRP_Calc_u(const BIGNUM *A, const BIGNUM *B, const BIGNUM *N)
+{
+    /* k = SHA1(PAD(A) || PAD(B) ) -- tls-srp draft 8 */
+    return srp_Calc_xy(A, B, N);
+}
+
+BIGNUM *SRP_Calc_server_key(const BIGNUM *A, const BIGNUM *v, const BIGNUM *u,
+                            const BIGNUM *b, const BIGNUM *N)
+{
+    BIGNUM *tmp = NULL, *S = NULL;
+    BN_CTX *bn_ctx;
+
+    if (u == NULL || A == NULL || v == NULL || b == NULL || N == NULL)
+        return NULL;
+
+    if ((bn_ctx = BN_CTX_new()) == NULL || (tmp = BN_new()) == NULL)
+        goto err;
+
+    /* S = (A*v**u) ** b */
+
+    if (!BN_mod_exp(tmp, v, u, N, bn_ctx))
+        goto err;
+    if (!BN_mod_mul(tmp, A, tmp, N, bn_ctx))
+        goto err;
+
+    S = BN_new();
+    if (S != NULL && !BN_mod_exp(S, tmp, b, N, bn_ctx)) {
+        BN_free(S);
+        S = NULL;
+    }
+ err:
+    BN_CTX_free(bn_ctx);
+    BN_clear_free(tmp);
+    return S;
+}
+
+BIGNUM *SRP_Calc_B(const BIGNUM *b, const BIGNUM *N, const BIGNUM *g,
+                   const BIGNUM *v)
+{
+    BIGNUM *kv = NULL, *gb = NULL;
+    BIGNUM *B = NULL, *k = NULL;
+    BN_CTX *bn_ctx;
+
+    if (b == NULL || N == NULL || g == NULL || v == NULL ||
+        (bn_ctx = BN_CTX_new()) == NULL)
+        return NULL;
+
+    if ((kv = BN_new()) == NULL ||
+        (gb = BN_new()) == NULL || (B = BN_new()) == NULL)
+        goto err;
+
+    /* B = g**b + k*v */
+
+    if (!BN_mod_exp(gb, g, b, N, bn_ctx)
+        || (k = srp_Calc_k(N, g)) == NULL
+        || !BN_mod_mul(kv, v, k, N, bn_ctx)
+        || !BN_mod_add(B, gb, kv, N, bn_ctx)) {
+        BN_free(B);
+        B = NULL;
+    }
+ err:
+    BN_CTX_free(bn_ctx);
+    BN_clear_free(kv);
+    BN_clear_free(gb);
+    BN_free(k);
+    return B;
+}
+
+BIGNUM *SRP_Calc_x(const BIGNUM *s, const char *user, const char *pass)
+{
+    unsigned char dig[SHA_DIGEST_LENGTH];
+    EVP_MD_CTX *ctxt;
+    unsigned char *cs = NULL;
+    BIGNUM *res = NULL;
+
+    if ((s == NULL) || (user == NULL) || (pass == NULL))
+        return NULL;
+
+    ctxt = EVP_MD_CTX_new();
+    if (ctxt == NULL)
+        return NULL;
+    if ((cs = OPENSSL_malloc(BN_num_bytes(s))) == NULL)
+        goto err;
+
+    if (!EVP_DigestInit_ex(ctxt, EVP_sha1(), NULL)
+        || !EVP_DigestUpdate(ctxt, user, strlen(user))
+        || !EVP_DigestUpdate(ctxt, ":", 1)
+        || !EVP_DigestUpdate(ctxt, pass, strlen(pass))
+        || !EVP_DigestFinal_ex(ctxt, dig, NULL)
+        || !EVP_DigestInit_ex(ctxt, EVP_sha1(), NULL))
+        goto err;
+    if (BN_bn2bin(s, cs) < 0)
+        goto err;
+    if (!EVP_DigestUpdate(ctxt, cs, BN_num_bytes(s)))
+        goto err;
+
+    if (!EVP_DigestUpdate(ctxt, dig, sizeof(dig))
+        || !EVP_DigestFinal_ex(ctxt, dig, NULL))
+        goto err;
+
+    res = BN_bin2bn(dig, sizeof(dig), NULL);
+
+ err:
+    OPENSSL_free(cs);
+    EVP_MD_CTX_free(ctxt);
+    return res;
+}
+
+BIGNUM *SRP_Calc_A(const BIGNUM *a, const BIGNUM *N, const BIGNUM *g)
+{
+    BN_CTX *bn_ctx;
+    BIGNUM *A = NULL;
+
+    if (a == NULL || N == NULL || g == NULL || (bn_ctx = BN_CTX_new()) == NULL)
+        return NULL;
+
+    if ((A = BN_new()) != NULL && !BN_mod_exp(A, g, a, N, bn_ctx)) {
+        BN_free(A);
+        A = NULL;
+    }
+    BN_CTX_free(bn_ctx);
+    return A;
+}
+
+BIGNUM *SRP_Calc_client_key(const BIGNUM *N, const BIGNUM *B, const BIGNUM *g,
+                            const BIGNUM *x, const BIGNUM *a, const BIGNUM *u)
+{
+    BIGNUM *tmp = NULL, *tmp2 = NULL, *tmp3 = NULL, *k = NULL, *K = NULL;
+    BN_CTX *bn_ctx;
+
+    if (u == NULL || B == NULL || N == NULL || g == NULL || x == NULL
+        || a == NULL || (bn_ctx = BN_CTX_new()) == NULL)
+        return NULL;
+
+    if ((tmp = BN_new()) == NULL ||
+        (tmp2 = BN_new()) == NULL ||
+        (tmp3 = BN_new()) == NULL)
+        goto err;
+
+    if (!BN_mod_exp(tmp, g, x, N, bn_ctx))
+        goto err;
+    if ((k = srp_Calc_k(N, g)) == NULL)
+        goto err;
+    if (!BN_mod_mul(tmp2, tmp, k, N, bn_ctx))
+        goto err;
+    if (!BN_mod_sub(tmp, B, tmp2, N, bn_ctx))
+        goto err;
+    if (!BN_mul(tmp3, u, x, bn_ctx))
+        goto err;
+    if (!BN_add(tmp2, a, tmp3))
+        goto err;
+    K = BN_new();
+    if (K != NULL && !BN_mod_exp(K, tmp, tmp2, N, bn_ctx)) {
+        BN_free(K);
+        K = NULL;
+    }
+
+ err:
+    BN_CTX_free(bn_ctx);
+    BN_clear_free(tmp);
+    BN_clear_free(tmp2);
+    BN_clear_free(tmp3);
+    BN_free(k);
+    return K;
+}
+
+int SRP_Verify_B_mod_N(const BIGNUM *B, const BIGNUM *N)
+{
+    BIGNUM *r;
+    BN_CTX *bn_ctx;
+    int ret = 0;
+
+    if (B == NULL || N == NULL || (bn_ctx = BN_CTX_new()) == NULL)
+        return 0;
+
+    if ((r = BN_new()) == NULL)
+        goto err;
+    /* Checks if B % N == 0 */
+    if (!BN_nnmod(r, B, N, bn_ctx))
+        goto err;
+    ret = !BN_is_zero(r);
+ err:
+    BN_CTX_free(bn_ctx);
+    BN_free(r);
+    return ret;
+}
+
+int SRP_Verify_A_mod_N(const BIGNUM *A, const BIGNUM *N)
+{
+    /* Checks if A % N == 0 */
+    return SRP_Verify_B_mod_N(A, N);
+}
+
+static SRP_gN knowngN[] = {
+    {"8192", &bn_generator_19, &bn_group_8192},
+    {"6144", &bn_generator_5, &bn_group_6144},
+    {"4096", &bn_generator_5, &bn_group_4096},
+    {"3072", &bn_generator_5, &bn_group_3072},
+    {"2048", &bn_generator_2, &bn_group_2048},
+    {"1536", &bn_generator_2, &bn_group_1536},
+    {"1024", &bn_generator_2, &bn_group_1024},
+};
+
+# define KNOWN_GN_NUMBER sizeof(knowngN) / sizeof(SRP_gN)
+
+/*
+ * Check if G and N are known parameters. The values have been generated
+ * from the ietf-tls-srp draft version 8
+ */
+char *SRP_check_known_gN_param(const BIGNUM *g, const BIGNUM *N)
+{
+    size_t i;
+    if ((g == NULL) || (N == NULL))
+        return 0;
+
+    for (i = 0; i < KNOWN_GN_NUMBER; i++) {
+        if (BN_cmp(knowngN[i].g, g) == 0 && BN_cmp(knowngN[i].N, N) == 0)
+            return knowngN[i].id;
+    }
+    return NULL;
+}
+
+SRP_gN *SRP_get_default_gN(const char *id)
+{
+    size_t i;
+
+    if (id == NULL)
+        return knowngN;
+    for (i = 0; i < KNOWN_GN_NUMBER; i++) {
+        if (strcmp(knowngN[i].id, id) == 0)
+            return knowngN + i;
+    }
+    return NULL;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/srp/srp_vfy.c b/trunk/3rdparty/openssl-1.1-fit/crypto/srp/srp_vfy.c
new file mode 100644
index 000000000..eb279dd41
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/srp/srp_vfy.c
@@ -0,0 +1,730 @@
+/*
+ * Copyright 2004-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2004, EdelKey Project. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Christophe Renou and Peter Sylvester,
+ * for the EdelKey project.
+ */
+
+#ifndef OPENSSL_NO_SRP
+# include "internal/cryptlib.h"
+# include "internal/evp_int.h"
+# include <openssl/sha.h>
+# include <openssl/srp.h>
+# include <openssl/evp.h>
+# include <openssl/buffer.h>
+# include <openssl/rand.h>
+# include <openssl/txt_db.h>
+# include <openssl/err.h>
+
+# define SRP_RANDOM_SALT_LEN 20
+# define MAX_LEN 2500
+
+/*
+ * Note that SRP uses its own variant of base 64 encoding. A different base64
+ * alphabet is used and no padding '=' characters are added. Instead we pad to
+ * the front with 0 bytes and subsequently strip off leading encoded padding.
+ * This variant is used for compatibility with other SRP implementations -
+ * notably libsrp, but also others. It is also required for backwards
+ * compatibility in order to load verifier files from other OpenSSL versions.
+ */
+
+/*
+ * Convert a base64 string into raw byte array representation.
+ * Returns the length of the decoded data, or -1 on error.
+ */
+static int t_fromb64(unsigned char *a, size_t alen, const char *src)
+{
+    EVP_ENCODE_CTX *ctx;
+    int outl = 0, outl2 = 0;
+    size_t size, padsize;
+    const unsigned char *pad = (const unsigned char *)"00";
+
+    while (*src == ' ' || *src == '\t' || *src == '\n')
+        ++src;
+    size = strlen(src);
+    padsize = 4 - (size & 3);
+    padsize &= 3;
+
+    /* Four bytes in src become three bytes output. */
+    if (size > INT_MAX || ((size + padsize) / 4) * 3 > alen)
+        return -1;
+
+    ctx = EVP_ENCODE_CTX_new();
+    if (ctx == NULL)
+        return -1;
+
+    /*
+     * This should never occur because 1 byte of data always requires 2 bytes of
+     * encoding, i.e.
+     *  0 bytes unencoded = 0 bytes encoded
+     *  1 byte unencoded  = 2 bytes encoded
+     *  2 bytes unencoded = 3 bytes encoded
+     *  3 bytes unencoded = 4 bytes encoded
+     *  4 bytes unencoded = 6 bytes encoded
+     *  etc
+     */
+    if (padsize == 3) {
+        outl = -1;
+        goto err;
+    }
+
+    /* Valid padsize values are now 0, 1 or 2 */
+
+    EVP_DecodeInit(ctx);
+    evp_encode_ctx_set_flags(ctx, EVP_ENCODE_CTX_USE_SRP_ALPHABET);
+
+    /* Add any encoded padding that is required */
+    if (padsize != 0
+            && EVP_DecodeUpdate(ctx, a, &outl, pad, padsize) < 0) {
+        outl = -1;
+        goto err;
+    }
+    if (EVP_DecodeUpdate(ctx, a, &outl2, (const unsigned char *)src, size) < 0) {
+        outl = -1;
+        goto err;
+    }
+    outl += outl2;
+    EVP_DecodeFinal(ctx, a + outl, &outl2);
+    outl += outl2;
+
+    /* Strip off the leading padding */
+    if (padsize != 0) {
+        if ((int)padsize >= outl) {
+            outl = -1;
+            goto err;
+        }
+
+        /*
+         * If we added 1 byte of padding prior to encoding then we have 2 bytes
+         * of "real" data which gets spread across 4 encoded bytes like this:
+         *   (6 bits pad)(2 bits pad | 4 bits data)(6 bits data)(6 bits data)
+         * So 1 byte of pre-encoding padding results in 1 full byte of encoded
+         * padding.
+         * If we added 2 bytes of padding prior to encoding this gets encoded
+         * as:
+         *   (6 bits pad)(6 bits pad)(4 bits pad | 2 bits data)(6 bits data)
+         * So 2 bytes of pre-encoding padding results in 2 full bytes of encoded
+         * padding, i.e. we have to strip the same number of bytes of padding
+         * from the encoded data as we added to the pre-encoded data.
+         */
+        memmove(a, a + padsize, outl - padsize);
+        outl -= padsize;
+    }
+
+ err:
+    EVP_ENCODE_CTX_free(ctx);
+
+    return outl;
+}
+
+/*
+ * Convert a raw byte string into a null-terminated base64 ASCII string.
+ * Returns 1 on success or 0 on error.
+ */
+static int t_tob64(char *dst, const unsigned char *src, int size)
+{
+    EVP_ENCODE_CTX *ctx = EVP_ENCODE_CTX_new();
+    int outl = 0, outl2 = 0;
+    unsigned char pad[2] = {0, 0};
+    size_t leadz = 0;
+
+    if (ctx == NULL)
+        return 0;
+
+    EVP_EncodeInit(ctx);
+    evp_encode_ctx_set_flags(ctx, EVP_ENCODE_CTX_NO_NEWLINES
+                                  | EVP_ENCODE_CTX_USE_SRP_ALPHABET);
+
+    /*
+     * We pad at the front with zero bytes until the length is a multiple of 3
+     * so that EVP_EncodeUpdate/EVP_EncodeFinal does not add any of its own "="
+     * padding
+     */
+    leadz = 3 - (size % 3);
+    if (leadz != 3
+            && !EVP_EncodeUpdate(ctx, (unsigned char *)dst, &outl, pad,
+                                 leadz)) {
+        EVP_ENCODE_CTX_free(ctx);
+        return 0;
+    }
+
+    if (!EVP_EncodeUpdate(ctx, (unsigned char *)dst + outl, &outl2, src,
+                          size)) {
+        EVP_ENCODE_CTX_free(ctx);
+        return 0;
+    }
+    outl += outl2;
+    EVP_EncodeFinal(ctx, (unsigned char *)dst + outl, &outl2);
+    outl += outl2;
+
+    /* Strip the encoded padding at the front */
+    if (leadz != 3) {
+        memmove(dst, dst + leadz, outl - leadz);
+        dst[outl - leadz] = '\0';
+    }
+
+    EVP_ENCODE_CTX_free(ctx);
+    return 1;
+}
+
+void SRP_user_pwd_free(SRP_user_pwd *user_pwd)
+{
+    if (user_pwd == NULL)
+        return;
+    BN_free(user_pwd->s);
+    BN_clear_free(user_pwd->v);
+    OPENSSL_free(user_pwd->id);
+    OPENSSL_free(user_pwd->info);
+    OPENSSL_free(user_pwd);
+}
+
+static SRP_user_pwd *SRP_user_pwd_new(void)
+{
+    SRP_user_pwd *ret;
+
+    if ((ret = OPENSSL_malloc(sizeof(*ret))) == NULL) {
+        /* SRPerr(SRP_F_SRP_USER_PWD_NEW, ERR_R_MALLOC_FAILURE); */ /*ckerr_ignore*/
+        return NULL;
+    }
+    ret->N = NULL;
+    ret->g = NULL;
+    ret->s = NULL;
+    ret->v = NULL;
+    ret->id = NULL;
+    ret->info = NULL;
+    return ret;
+}
+
+static void SRP_user_pwd_set_gN(SRP_user_pwd *vinfo, const BIGNUM *g,
+                                const BIGNUM *N)
+{
+    vinfo->N = N;
+    vinfo->g = g;
+}
+
+static int SRP_user_pwd_set_ids(SRP_user_pwd *vinfo, const char *id,
+                                const char *info)
+{
+    if (id != NULL && NULL == (vinfo->id = OPENSSL_strdup(id)))
+        return 0;
+    return (info == NULL || NULL != (vinfo->info = OPENSSL_strdup(info)));
+}
+
+static int SRP_user_pwd_set_sv(SRP_user_pwd *vinfo, const char *s,
+                               const char *v)
+{
+    unsigned char tmp[MAX_LEN];
+    int len;
+
+    vinfo->v = NULL;
+    vinfo->s = NULL;
+
+    len = t_fromb64(tmp, sizeof(tmp), v);
+    if (len < 0)
+        return 0;
+    if (NULL == (vinfo->v = BN_bin2bn(tmp, len, NULL)))
+        return 0;
+    len = t_fromb64(tmp, sizeof(tmp), s);
+    if (len < 0)
+        goto err;
+    vinfo->s = BN_bin2bn(tmp, len, NULL);
+    if (vinfo->s == NULL)
+        goto err;
+    return 1;
+ err:
+    BN_free(vinfo->v);
+    vinfo->v = NULL;
+    return 0;
+}
+
+static int SRP_user_pwd_set_sv_BN(SRP_user_pwd *vinfo, BIGNUM *s, BIGNUM *v)
+{
+    vinfo->v = v;
+    vinfo->s = s;
+    return (vinfo->s != NULL && vinfo->v != NULL);
+}
+
+static SRP_user_pwd *srp_user_pwd_dup(SRP_user_pwd *src)
+{
+    SRP_user_pwd *ret;
+
+    if (src == NULL)
+        return NULL;
+    if ((ret = SRP_user_pwd_new()) == NULL)
+        return NULL;
+
+    SRP_user_pwd_set_gN(ret, src->g, src->N);
+    if (!SRP_user_pwd_set_ids(ret, src->id, src->info)
+        || !SRP_user_pwd_set_sv_BN(ret, BN_dup(src->s), BN_dup(src->v))) {
+            SRP_user_pwd_free(ret);
+            return NULL;
+    }
+    return ret;
+}
+
+SRP_VBASE *SRP_VBASE_new(char *seed_key)
+{
+    SRP_VBASE *vb = OPENSSL_malloc(sizeof(*vb));
+
+    if (vb == NULL)
+        return NULL;
+    if ((vb->users_pwd = sk_SRP_user_pwd_new_null()) == NULL
+        || (vb->gN_cache = sk_SRP_gN_cache_new_null()) == NULL) {
+        OPENSSL_free(vb);
+        return NULL;
+    }
+    vb->default_g = NULL;
+    vb->default_N = NULL;
+    vb->seed_key = NULL;
+    if ((seed_key != NULL) && (vb->seed_key = OPENSSL_strdup(seed_key)) == NULL) {
+        sk_SRP_user_pwd_free(vb->users_pwd);
+        sk_SRP_gN_cache_free(vb->gN_cache);
+        OPENSSL_free(vb);
+        return NULL;
+    }
+    return vb;
+}
+
+void SRP_VBASE_free(SRP_VBASE *vb)
+{
+    if (!vb)
+        return;
+    sk_SRP_user_pwd_pop_free(vb->users_pwd, SRP_user_pwd_free);
+    sk_SRP_gN_cache_free(vb->gN_cache);
+    OPENSSL_free(vb->seed_key);
+    OPENSSL_free(vb);
+}
+
+static SRP_gN_cache *SRP_gN_new_init(const char *ch)
+{
+    unsigned char tmp[MAX_LEN];
+    int len;
+    SRP_gN_cache *newgN = OPENSSL_malloc(sizeof(*newgN));
+
+    if (newgN == NULL)
+        return NULL;
+
+    len = t_fromb64(tmp, sizeof(tmp), ch);
+    if (len < 0)
+        goto err;
+
+    if ((newgN->b64_bn = OPENSSL_strdup(ch)) == NULL)
+        goto err;
+
+    if ((newgN->bn = BN_bin2bn(tmp, len, NULL)))
+        return newgN;
+
+    OPENSSL_free(newgN->b64_bn);
+ err:
+    OPENSSL_free(newgN);
+    return NULL;
+}
+
+static void SRP_gN_free(SRP_gN_cache *gN_cache)
+{
+    if (gN_cache == NULL)
+        return;
+    OPENSSL_free(gN_cache->b64_bn);
+    BN_free(gN_cache->bn);
+    OPENSSL_free(gN_cache);
+}
+
+static SRP_gN *SRP_get_gN_by_id(const char *id, STACK_OF(SRP_gN) *gN_tab)
+{
+    int i;
+
+    SRP_gN *gN;
+    if (gN_tab != NULL)
+        for (i = 0; i < sk_SRP_gN_num(gN_tab); i++) {
+            gN = sk_SRP_gN_value(gN_tab, i);
+            if (gN && (id == NULL || strcmp(gN->id, id) == 0))
+                return gN;
+        }
+
+    return SRP_get_default_gN(id);
+}
+
+static BIGNUM *SRP_gN_place_bn(STACK_OF(SRP_gN_cache) *gN_cache, char *ch)
+{
+    int i;
+    if (gN_cache == NULL)
+        return NULL;
+
+    /* search if we have already one... */
+    for (i = 0; i < sk_SRP_gN_cache_num(gN_cache); i++) {
+        SRP_gN_cache *cache = sk_SRP_gN_cache_value(gN_cache, i);
+        if (strcmp(cache->b64_bn, ch) == 0)
+            return cache->bn;
+    }
+    {                           /* it is the first time that we find it */
+        SRP_gN_cache *newgN = SRP_gN_new_init(ch);
+        if (newgN) {
+            if (sk_SRP_gN_cache_insert(gN_cache, newgN, 0) > 0)
+                return newgN->bn;
+            SRP_gN_free(newgN);
+        }
+    }
+    return NULL;
+}
+
+/*
+ * this function parses verifier file. Format is:
+ * string(index):base64(N):base64(g):0
+ * string(username):base64(v):base64(salt):int(index)
+ */
+
+int SRP_VBASE_init(SRP_VBASE *vb, char *verifier_file)
+{
+    int error_code;
+    STACK_OF(SRP_gN) *SRP_gN_tab = sk_SRP_gN_new_null();
+    char *last_index = NULL;
+    int i;
+    char **pp;
+
+    SRP_gN *gN = NULL;
+    SRP_user_pwd *user_pwd = NULL;
+
+    TXT_DB *tmpdb = NULL;
+    BIO *in = BIO_new(BIO_s_file());
+
+    error_code = SRP_ERR_OPEN_FILE;
+
+    if (in == NULL || BIO_read_filename(in, verifier_file) <= 0)
+        goto err;
+
+    error_code = SRP_ERR_VBASE_INCOMPLETE_FILE;
+
+    if ((tmpdb = TXT_DB_read(in, DB_NUMBER)) == NULL)
+        goto err;
+
+    error_code = SRP_ERR_MEMORY;
+
+    if (vb->seed_key) {
+        last_index = SRP_get_default_gN(NULL)->id;
+    }
+    for (i = 0; i < sk_OPENSSL_PSTRING_num(tmpdb->data); i++) {
+        pp = sk_OPENSSL_PSTRING_value(tmpdb->data, i);
+        if (pp[DB_srptype][0] == DB_SRP_INDEX) {
+            /*
+             * we add this couple in the internal Stack
+             */
+
+            if ((gN = OPENSSL_malloc(sizeof(*gN))) == NULL)
+                goto err;
+
+            if ((gN->id = OPENSSL_strdup(pp[DB_srpid])) == NULL
+                || (gN->N = SRP_gN_place_bn(vb->gN_cache, pp[DB_srpverifier]))
+                        == NULL
+                || (gN->g = SRP_gN_place_bn(vb->gN_cache, pp[DB_srpsalt]))
+                        == NULL
+                || sk_SRP_gN_insert(SRP_gN_tab, gN, 0) == 0)
+                goto err;
+
+            gN = NULL;
+
+            if (vb->seed_key != NULL) {
+                last_index = pp[DB_srpid];
+            }
+        } else if (pp[DB_srptype][0] == DB_SRP_VALID) {
+            /* it is a user .... */
+            const SRP_gN *lgN;
+
+            if ((lgN = SRP_get_gN_by_id(pp[DB_srpgN], SRP_gN_tab)) != NULL) {
+                error_code = SRP_ERR_MEMORY;
+                if ((user_pwd = SRP_user_pwd_new()) == NULL)
+                    goto err;
+
+                SRP_user_pwd_set_gN(user_pwd, lgN->g, lgN->N);
+                if (!SRP_user_pwd_set_ids
+                    (user_pwd, pp[DB_srpid], pp[DB_srpinfo]))
+                    goto err;
+
+                error_code = SRP_ERR_VBASE_BN_LIB;
+                if (!SRP_user_pwd_set_sv
+                    (user_pwd, pp[DB_srpsalt], pp[DB_srpverifier]))
+                    goto err;
+
+                if (sk_SRP_user_pwd_insert(vb->users_pwd, user_pwd, 0) == 0)
+                    goto err;
+                user_pwd = NULL; /* abandon responsibility */
+            }
+        }
+    }
+
+    if (last_index != NULL) {
+        /* this means that we want to simulate a default user */
+
+        if (((gN = SRP_get_gN_by_id(last_index, SRP_gN_tab)) == NULL)) {
+            error_code = SRP_ERR_VBASE_BN_LIB;
+            goto err;
+        }
+        vb->default_g = gN->g;
+        vb->default_N = gN->N;
+        gN = NULL;
+    }
+    error_code = SRP_NO_ERROR;
+
+ err:
+    /*
+     * there may be still some leaks to fix, if this fails, the application
+     * terminates most likely
+     */
+
+    if (gN != NULL) {
+        OPENSSL_free(gN->id);
+        OPENSSL_free(gN);
+    }
+
+    SRP_user_pwd_free(user_pwd);
+
+    TXT_DB_free(tmpdb);
+    BIO_free_all(in);
+
+    sk_SRP_gN_free(SRP_gN_tab);
+
+    return error_code;
+
+}
+
+static SRP_user_pwd *find_user(SRP_VBASE *vb, char *username)
+{
+    int i;
+    SRP_user_pwd *user;
+
+    if (vb == NULL)
+        return NULL;
+
+    for (i = 0; i < sk_SRP_user_pwd_num(vb->users_pwd); i++) {
+        user = sk_SRP_user_pwd_value(vb->users_pwd, i);
+        if (strcmp(user->id, username) == 0)
+            return user;
+    }
+
+    return NULL;
+}
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+/*
+ * DEPRECATED: use SRP_VBASE_get1_by_user instead.
+ * This method ignores the configured seed and fails for an unknown user.
+ * Ownership of the returned pointer is not released to the caller.
+ * In other words, caller must not free the result.
+ */
+SRP_user_pwd *SRP_VBASE_get_by_user(SRP_VBASE *vb, char *username)
+{
+    return find_user(vb, username);
+}
+# endif
+
+/*
+ * Ownership of the returned pointer is released to the caller.
+ * In other words, caller must free the result once done.
+ */
+SRP_user_pwd *SRP_VBASE_get1_by_user(SRP_VBASE *vb, char *username)
+{
+    SRP_user_pwd *user;
+    unsigned char digv[SHA_DIGEST_LENGTH];
+    unsigned char digs[SHA_DIGEST_LENGTH];
+    EVP_MD_CTX *ctxt = NULL;
+
+    if (vb == NULL)
+        return NULL;
+
+    if ((user = find_user(vb, username)) != NULL)
+        return srp_user_pwd_dup(user);
+
+    if ((vb->seed_key == NULL) ||
+        (vb->default_g == NULL) || (vb->default_N == NULL))
+        return NULL;
+
+/* if the user is unknown we set parameters as well if we have a seed_key */
+
+    if ((user = SRP_user_pwd_new()) == NULL)
+        return NULL;
+
+    SRP_user_pwd_set_gN(user, vb->default_g, vb->default_N);
+
+    if (!SRP_user_pwd_set_ids(user, username, NULL))
+        goto err;
+
+    if (RAND_priv_bytes(digv, SHA_DIGEST_LENGTH) <= 0)
+        goto err;
+    ctxt = EVP_MD_CTX_new();
+    if (ctxt == NULL
+        || !EVP_DigestInit_ex(ctxt, EVP_sha1(), NULL)
+        || !EVP_DigestUpdate(ctxt, vb->seed_key, strlen(vb->seed_key))
+        || !EVP_DigestUpdate(ctxt, username, strlen(username))
+        || !EVP_DigestFinal_ex(ctxt, digs, NULL))
+        goto err;
+    EVP_MD_CTX_free(ctxt);
+    ctxt = NULL;
+    if (SRP_user_pwd_set_sv_BN(user,
+                               BN_bin2bn(digs, SHA_DIGEST_LENGTH, NULL),
+                               BN_bin2bn(digv, SHA_DIGEST_LENGTH, NULL)))
+        return user;
+
+ err:
+    EVP_MD_CTX_free(ctxt);
+    SRP_user_pwd_free(user);
+    return NULL;
+}
+
+/*
+ * create a verifier (*salt,*verifier,g and N are in base64)
+ */
+char *SRP_create_verifier(const char *user, const char *pass, char **salt,
+                          char **verifier, const char *N, const char *g)
+{
+    int len;
+    char *result = NULL, *vf = NULL;
+    const BIGNUM *N_bn = NULL, *g_bn = NULL;
+    BIGNUM *N_bn_alloc = NULL, *g_bn_alloc = NULL, *s = NULL, *v = NULL;
+    unsigned char tmp[MAX_LEN];
+    unsigned char tmp2[MAX_LEN];
+    char *defgNid = NULL;
+    int vfsize = 0;
+
+    if ((user == NULL) ||
+        (pass == NULL) || (salt == NULL) || (verifier == NULL))
+        goto err;
+
+    if (N) {
+        if ((len = t_fromb64(tmp, sizeof(tmp), N)) <= 0)
+            goto err;
+        N_bn_alloc = BN_bin2bn(tmp, len, NULL);
+        if (N_bn_alloc == NULL)
+            goto err;
+        N_bn = N_bn_alloc;
+        if ((len = t_fromb64(tmp, sizeof(tmp) ,g)) <= 0)
+            goto err;
+        g_bn_alloc = BN_bin2bn(tmp, len, NULL);
+        if (g_bn_alloc == NULL)
+            goto err;
+        g_bn = g_bn_alloc;
+        defgNid = "*";
+    } else {
+        SRP_gN *gN = SRP_get_gN_by_id(g, NULL);
+        if (gN == NULL)
+            goto err;
+        N_bn = gN->N;
+        g_bn = gN->g;
+        defgNid = gN->id;
+    }
+
+    if (*salt == NULL) {
+        if (RAND_bytes(tmp2, SRP_RANDOM_SALT_LEN) <= 0)
+            goto err;
+
+        s = BN_bin2bn(tmp2, SRP_RANDOM_SALT_LEN, NULL);
+    } else {
+        if ((len = t_fromb64(tmp2, sizeof(tmp2), *salt)) <= 0)
+            goto err;
+        s = BN_bin2bn(tmp2, len, NULL);
+    }
+    if (s == NULL)
+        goto err;
+
+    if (!SRP_create_verifier_BN(user, pass, &s, &v, N_bn, g_bn))
+        goto err;
+
+    if (BN_bn2bin(v, tmp) < 0)
+        goto err;
+    vfsize = BN_num_bytes(v) * 2;
+    if (((vf = OPENSSL_malloc(vfsize)) == NULL))
+        goto err;
+    if (!t_tob64(vf, tmp, BN_num_bytes(v)))
+        goto err;
+
+    if (*salt == NULL) {
+        char *tmp_salt;
+
+        if ((tmp_salt = OPENSSL_malloc(SRP_RANDOM_SALT_LEN * 2)) == NULL) {
+            goto err;
+        }
+        if (!t_tob64(tmp_salt, tmp2, SRP_RANDOM_SALT_LEN)) {
+            OPENSSL_free(tmp_salt);
+            goto err;
+        }
+        *salt = tmp_salt;
+    }
+
+    *verifier = vf;
+    vf = NULL;
+    result = defgNid;
+
+ err:
+    BN_free(N_bn_alloc);
+    BN_free(g_bn_alloc);
+    OPENSSL_clear_free(vf, vfsize);
+    BN_clear_free(s);
+    BN_clear_free(v);
+    return result;
+}
+
+/*
+ * create a verifier (*salt,*verifier,g and N are BIGNUMs). If *salt != NULL
+ * then the provided salt will be used. On successful exit *verifier will point
+ * to a newly allocated BIGNUM containing the verifier and (if a salt was not
+ * provided) *salt will be populated with a newly allocated BIGNUM containing a
+ * random salt.
+ * The caller is responsible for freeing the allocated *salt and *verifier
+ * BIGNUMS.
+ */
+int SRP_create_verifier_BN(const char *user, const char *pass, BIGNUM **salt,
+                           BIGNUM **verifier, const BIGNUM *N,
+                           const BIGNUM *g)
+{
+    int result = 0;
+    BIGNUM *x = NULL;
+    BN_CTX *bn_ctx = BN_CTX_new();
+    unsigned char tmp2[MAX_LEN];
+    BIGNUM *salttmp = NULL;
+
+    if ((user == NULL) ||
+        (pass == NULL) ||
+        (salt == NULL) ||
+        (verifier == NULL) || (N == NULL) || (g == NULL) || (bn_ctx == NULL))
+        goto err;
+
+    if (*salt == NULL) {
+        if (RAND_bytes(tmp2, SRP_RANDOM_SALT_LEN) <= 0)
+            goto err;
+
+        salttmp = BN_bin2bn(tmp2, SRP_RANDOM_SALT_LEN, NULL);
+        if (salttmp == NULL)
+            goto err;
+    } else {
+        salttmp = *salt;
+    }
+
+    x = SRP_Calc_x(salttmp, user, pass);
+    if (x == NULL)
+        goto err;
+
+    *verifier = BN_new();
+    if (*verifier == NULL)
+        goto err;
+
+    if (!BN_mod_exp(*verifier, g, x, N, bn_ctx)) {
+        BN_clear_free(*verifier);
+        goto err;
+    }
+
+    result = 1;
+    *salt = salttmp;
+
+ err:
+    if (salt != NULL && *salt != salttmp)
+        BN_clear_free(salttmp);
+    BN_clear_free(x);
+    BN_CTX_free(bn_ctx);
+    return result;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/stack/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/stack/build.info
new file mode 100644
index 000000000..e5870210a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/stack/build.info
@@ -0,0 +1,2 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=stack.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/stack/stack.c b/trunk/3rdparty/openssl-1.1-fit/crypto/stack/stack.c
new file mode 100644
index 000000000..975515db5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/stack/stack.c
@@ -0,0 +1,413 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "internal/numbers.h"
+#include <openssl/stack.h>
+#include <openssl/objects.h>
+#include <errno.h>
+#include <openssl/e_os2.h>      /* For ossl_inline */
+
+/*
+ * The initial number of nodes in the array.
+ */
+static const int min_nodes = 4;
+static const int max_nodes = SIZE_MAX / sizeof(void *) < INT_MAX
+                             ? (int)(SIZE_MAX / sizeof(void *))
+                             : INT_MAX;
+
+struct stack_st {
+    int num;
+    const void **data;
+    int sorted;
+    int num_alloc;
+    OPENSSL_sk_compfunc comp;
+};
+
+OPENSSL_sk_compfunc OPENSSL_sk_set_cmp_func(OPENSSL_STACK *sk, OPENSSL_sk_compfunc c)
+{
+    OPENSSL_sk_compfunc old = sk->comp;
+
+    if (sk->comp != c)
+        sk->sorted = 0;
+    sk->comp = c;
+
+    return old;
+}
+
+OPENSSL_STACK *OPENSSL_sk_dup(const OPENSSL_STACK *sk)
+{
+    OPENSSL_STACK *ret;
+
+    if ((ret = OPENSSL_malloc(sizeof(*ret))) == NULL) {
+        CRYPTOerr(CRYPTO_F_OPENSSL_SK_DUP, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    /* direct structure assignment */
+    *ret = *sk;
+
+    if (sk->num == 0) {
+        /* postpone |ret->data| allocation */
+        ret->data = NULL;
+        ret->num_alloc = 0;
+        return ret;
+    }
+    /* duplicate |sk->data| content */
+    if ((ret->data = OPENSSL_malloc(sizeof(*ret->data) * sk->num_alloc)) == NULL)
+        goto err;
+    memcpy(ret->data, sk->data, sizeof(void *) * sk->num);
+    return ret;
+ err:
+    OPENSSL_sk_free(ret);
+    return NULL;
+}
+
+OPENSSL_STACK *OPENSSL_sk_deep_copy(const OPENSSL_STACK *sk,
+                             OPENSSL_sk_copyfunc copy_func,
+                             OPENSSL_sk_freefunc free_func)
+{
+    OPENSSL_STACK *ret;
+    int i;
+
+    if ((ret = OPENSSL_malloc(sizeof(*ret))) == NULL) {
+        CRYPTOerr(CRYPTO_F_OPENSSL_SK_DEEP_COPY, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    /* direct structure assignment */
+    *ret = *sk;
+
+    if (sk->num == 0) {
+        /* postpone |ret| data allocation */
+        ret->data = NULL;
+        ret->num_alloc = 0;
+        return ret;
+    }
+
+    ret->num_alloc = sk->num > min_nodes ? sk->num : min_nodes;
+    ret->data = OPENSSL_zalloc(sizeof(*ret->data) * ret->num_alloc);
+    if (ret->data == NULL) {
+        OPENSSL_free(ret);
+        return NULL;
+    }
+
+    for (i = 0; i < ret->num; ++i) {
+        if (sk->data[i] == NULL)
+            continue;
+        if ((ret->data[i] = copy_func(sk->data[i])) == NULL) {
+            while (--i >= 0)
+                if (ret->data[i] != NULL)
+                    free_func((void *)ret->data[i]);
+            OPENSSL_sk_free(ret);
+            return NULL;
+        }
+    }
+    return ret;
+}
+
+OPENSSL_STACK *OPENSSL_sk_new_null(void)
+{
+    return OPENSSL_sk_new_reserve(NULL, 0);
+}
+
+OPENSSL_STACK *OPENSSL_sk_new(OPENSSL_sk_compfunc c)
+{
+    return OPENSSL_sk_new_reserve(c, 0);
+}
+
+/*
+ * Calculate the array growth based on the target size.
+ *
+ * The growth fraction is a rational number and is defined by a numerator
+ * and a denominator.  According to Andrew Koenig in his paper "Why Are
+ * Vectors Efficient?" from JOOP 11(5) 1998, this factor should be less
+ * than the golden ratio (1.618...).
+ *
+ * We use 3/2 = 1.5 for simplicity of calculation and overflow checking.
+ * Another option 8/5 = 1.6 allows for slightly faster growth, although safe
+ * computation is more difficult.
+ *
+ * The limit to avoid overflow is spot on.  The modulo three correction term
+ * ensures that the limit is the largest number than can be expanded by the
+ * growth factor without exceeding the hard limit.
+ *
+ * Do not call it with |current| lower than 2, or it will infinitely loop.
+ */
+static ossl_inline int compute_growth(int target, int current)
+{
+    const int limit = (max_nodes / 3) * 2 + (max_nodes % 3 ? 1 : 0);
+
+    while (current < target) {
+        /* Check to see if we're at the hard limit */
+        if (current >= max_nodes)
+            return 0;
+
+        /* Expand the size by a factor of 3/2 if it is within range */
+        current = current < limit ? current + current / 2 : max_nodes;
+    }
+    return current;
+}
+
+/* internal STACK storage allocation */
+static int sk_reserve(OPENSSL_STACK *st, int n, int exact)
+{
+    const void **tmpdata;
+    int num_alloc;
+
+    /* Check to see the reservation isn't exceeding the hard limit */
+    if (n > max_nodes - st->num)
+        return 0;
+
+    /* Figure out the new size */
+    num_alloc = st->num + n;
+    if (num_alloc < min_nodes)
+        num_alloc = min_nodes;
+
+    /* If |st->data| allocation was postponed */
+    if (st->data == NULL) {
+        /*
+         * At this point, |st->num_alloc| and |st->num| are 0;
+         * so |num_alloc| value is |n| or |min_nodes| if greater than |n|.
+         */
+        if ((st->data = OPENSSL_zalloc(sizeof(void *) * num_alloc)) == NULL) {
+            CRYPTOerr(CRYPTO_F_SK_RESERVE, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        st->num_alloc = num_alloc;
+        return 1;
+    }
+
+    if (!exact) {
+        if (num_alloc <= st->num_alloc)
+            return 1;
+        num_alloc = compute_growth(num_alloc, st->num_alloc);
+        if (num_alloc == 0)
+            return 0;
+    } else if (num_alloc == st->num_alloc) {
+        return 1;
+    }
+
+    tmpdata = OPENSSL_realloc((void *)st->data, sizeof(void *) * num_alloc);
+    if (tmpdata == NULL)
+        return 0;
+
+    st->data = tmpdata;
+    st->num_alloc = num_alloc;
+    return 1;
+}
+
+OPENSSL_STACK *OPENSSL_sk_new_reserve(OPENSSL_sk_compfunc c, int n)
+{
+    OPENSSL_STACK *st = OPENSSL_zalloc(sizeof(OPENSSL_STACK));
+
+    if (st == NULL)
+        return NULL;
+
+    st->comp = c;
+
+    if (n <= 0)
+        return st;
+
+    if (!sk_reserve(st, n, 1)) {
+        OPENSSL_sk_free(st);
+        return NULL;
+    }
+
+    return st;
+}
+
+int OPENSSL_sk_reserve(OPENSSL_STACK *st, int n)
+{
+    if (st == NULL)
+        return 0;
+
+    if (n < 0)
+        return 1;
+    return sk_reserve(st, n, 1);
+}
+
+int OPENSSL_sk_insert(OPENSSL_STACK *st, const void *data, int loc)
+{
+    if (st == NULL || st->num == max_nodes)
+        return 0;
+
+    if (!sk_reserve(st, 1, 0))
+        return 0;
+
+    if ((loc >= st->num) || (loc < 0)) {
+        st->data[st->num] = data;
+    } else {
+        memmove(&st->data[loc + 1], &st->data[loc],
+                sizeof(st->data[0]) * (st->num - loc));
+        st->data[loc] = data;
+    }
+    st->num++;
+    st->sorted = 0;
+    return st->num;
+}
+
+static ossl_inline void *internal_delete(OPENSSL_STACK *st, int loc)
+{
+    const void *ret = st->data[loc];
+
+    if (loc != st->num - 1)
+         memmove(&st->data[loc], &st->data[loc + 1],
+                 sizeof(st->data[0]) * (st->num - loc - 1));
+    st->num--;
+
+    return (void *)ret;
+}
+
+void *OPENSSL_sk_delete_ptr(OPENSSL_STACK *st, const void *p)
+{
+    int i;
+
+    for (i = 0; i < st->num; i++)
+        if (st->data[i] == p)
+            return internal_delete(st, i);
+    return NULL;
+}
+
+void *OPENSSL_sk_delete(OPENSSL_STACK *st, int loc)
+{
+    if (st == NULL || loc < 0 || loc >= st->num)
+        return NULL;
+
+    return internal_delete(st, loc);
+}
+
+static int internal_find(OPENSSL_STACK *st, const void *data,
+                         int ret_val_options)
+{
+    const void *r;
+    int i;
+
+    if (st == NULL || st->num == 0)
+        return -1;
+
+    if (st->comp == NULL) {
+        for (i = 0; i < st->num; i++)
+            if (st->data[i] == data)
+                return i;
+        return -1;
+    }
+
+    if (!st->sorted) {
+        if (st->num > 1)
+            qsort(st->data, st->num, sizeof(void *), st->comp);
+        st->sorted = 1; /* empty or single-element stack is considered sorted */
+    }
+    if (data == NULL)
+        return -1;
+    r = OBJ_bsearch_ex_(&data, st->data, st->num, sizeof(void *), st->comp,
+                        ret_val_options);
+
+    return r == NULL ? -1 : (int)((const void **)r - st->data);
+}
+
+int OPENSSL_sk_find(OPENSSL_STACK *st, const void *data)
+{
+    return internal_find(st, data, OBJ_BSEARCH_FIRST_VALUE_ON_MATCH);
+}
+
+int OPENSSL_sk_find_ex(OPENSSL_STACK *st, const void *data)
+{
+    return internal_find(st, data, OBJ_BSEARCH_VALUE_ON_NOMATCH);
+}
+
+int OPENSSL_sk_push(OPENSSL_STACK *st, const void *data)
+{
+    if (st == NULL)
+        return -1;
+    return OPENSSL_sk_insert(st, data, st->num);
+}
+
+int OPENSSL_sk_unshift(OPENSSL_STACK *st, const void *data)
+{
+    return OPENSSL_sk_insert(st, data, 0);
+}
+
+void *OPENSSL_sk_shift(OPENSSL_STACK *st)
+{
+    if (st == NULL || st->num == 0)
+        return NULL;
+    return internal_delete(st, 0);
+}
+
+void *OPENSSL_sk_pop(OPENSSL_STACK *st)
+{
+    if (st == NULL || st->num == 0)
+        return NULL;
+    return internal_delete(st, st->num - 1);
+}
+
+void OPENSSL_sk_zero(OPENSSL_STACK *st)
+{
+    if (st == NULL || st->num == 0)
+        return;
+    memset(st->data, 0, sizeof(*st->data) * st->num);
+    st->num = 0;
+}
+
+void OPENSSL_sk_pop_free(OPENSSL_STACK *st, OPENSSL_sk_freefunc func)
+{
+    int i;
+
+    if (st == NULL)
+        return;
+    for (i = 0; i < st->num; i++)
+        if (st->data[i] != NULL)
+            func((char *)st->data[i]);
+    OPENSSL_sk_free(st);
+}
+
+void OPENSSL_sk_free(OPENSSL_STACK *st)
+{
+    if (st == NULL)
+        return;
+    OPENSSL_free(st->data);
+    OPENSSL_free(st);
+}
+
+int OPENSSL_sk_num(const OPENSSL_STACK *st)
+{
+    return st == NULL ? -1 : st->num;
+}
+
+void *OPENSSL_sk_value(const OPENSSL_STACK *st, int i)
+{
+    if (st == NULL || i < 0 || i >= st->num)
+        return NULL;
+    return (void *)st->data[i];
+}
+
+void *OPENSSL_sk_set(OPENSSL_STACK *st, int i, const void *data)
+{
+    if (st == NULL || i < 0 || i >= st->num)
+        return NULL;
+    st->data[i] = data;
+    st->sorted = 0;
+    return (void *)st->data[i];
+}
+
+void OPENSSL_sk_sort(OPENSSL_STACK *st)
+{
+    if (st != NULL && !st->sorted && st->comp != NULL) {
+        if (st->num > 1)
+            qsort(st->data, st->num, sizeof(void *), st->comp);
+        st->sorted = 1; /* empty or single-element stack is considered sorted */
+    }
+}
+
+int OPENSSL_sk_is_sorted(const OPENSSL_STACK *st)
+{
+    return st == NULL ? 1 : st->sorted;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/store/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/store/build.info
new file mode 100644
index 000000000..7d882f313
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/store/build.info
@@ -0,0 +1,4 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        store_err.c store_init.c store_lib.c store_register.c store_strings.c \
+        loader_file.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/store/loader_file.c b/trunk/3rdparty/openssl-1.1-fit/crypto/store/loader_file.c
new file mode 100644
index 000000000..632e4511f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/store/loader_file.c
@@ -0,0 +1,1440 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include <string.h>
+#include <sys/stat.h>
+#include <ctype.h>
+#include <assert.h>
+
+#include <openssl/bio.h>
+#include <openssl/dsa.h>         /* For d2i_DSAPrivateKey */
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/pem.h>
+#include <openssl/pkcs12.h>      /* For the PKCS8 stuff o.O */
+#include <openssl/rsa.h>         /* For d2i_RSAPrivateKey */
+#include <openssl/safestack.h>
+#include <openssl/store.h>
+#include <openssl/ui.h>
+#include <openssl/x509.h>        /* For the PKCS8 stuff o.O */
+#include "internal/asn1_int.h"
+#include "internal/ctype.h"
+#include "internal/o_dir.h"
+#include "internal/cryptlib.h"
+#include "internal/store_int.h"
+#include "store_locl.h"
+
+#ifdef _WIN32
+# define stat    _stat
+#endif
+
+#ifndef S_ISDIR
+# define S_ISDIR(a) (((a) & S_IFMT) == S_IFDIR)
+#endif
+
+/*-
+ *  Password prompting
+ *  ------------------
+ */
+
+static char *file_get_pass(const UI_METHOD *ui_method, char *pass,
+                           size_t maxsize, const char *prompt_info, void *data)
+{
+    UI *ui = UI_new();
+    char *prompt = NULL;
+
+    if (ui == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_FILE_GET_PASS, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if (ui_method != NULL)
+        UI_set_method(ui, ui_method);
+    UI_add_user_data(ui, data);
+
+    if ((prompt = UI_construct_prompt(ui, "pass phrase",
+                                      prompt_info)) == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_FILE_GET_PASS, ERR_R_MALLOC_FAILURE);
+        pass = NULL;
+    } else if (!UI_add_input_string(ui, prompt, UI_INPUT_FLAG_DEFAULT_PWD,
+                                    pass, 0, maxsize - 1)) {
+        OSSL_STOREerr(OSSL_STORE_F_FILE_GET_PASS, ERR_R_UI_LIB);
+        pass = NULL;
+    } else {
+        switch (UI_process(ui)) {
+        case -2:
+            OSSL_STOREerr(OSSL_STORE_F_FILE_GET_PASS,
+                          OSSL_STORE_R_UI_PROCESS_INTERRUPTED_OR_CANCELLED);
+            pass = NULL;
+            break;
+        case -1:
+            OSSL_STOREerr(OSSL_STORE_F_FILE_GET_PASS, ERR_R_UI_LIB);
+            pass = NULL;
+            break;
+        default:
+            break;
+        }
+    }
+
+    OPENSSL_free(prompt);
+    UI_free(ui);
+    return pass;
+}
+
+struct pem_pass_data {
+    const UI_METHOD *ui_method;
+    void *data;
+    const char *prompt_info;
+};
+
+static int file_fill_pem_pass_data(struct pem_pass_data *pass_data,
+                                   const char *prompt_info,
+                                   const UI_METHOD *ui_method, void *ui_data)
+{
+    if (pass_data == NULL)
+        return 0;
+    pass_data->ui_method = ui_method;
+    pass_data->data = ui_data;
+    pass_data->prompt_info = prompt_info;
+    return 1;
+}
+
+/* This is used anywhere a pem_password_cb is needed */
+static int file_get_pem_pass(char *buf, int num, int w, void *data)
+{
+    struct pem_pass_data *pass_data = data;
+    char *pass = file_get_pass(pass_data->ui_method, buf, num,
+                               pass_data->prompt_info, pass_data->data);
+
+    return pass == NULL ? 0 : strlen(pass);
+}
+
+/*-
+ *  The file scheme decoders
+ *  ------------------------
+ *
+ *  Each possible data type has its own decoder, which either operates
+ *  through a given PEM name, or attempts to decode to see if the blob
+ *  it's given is decodable for its data type.  The assumption is that
+ *  only the correct data type will match the content.
+ */
+
+/*-
+ * The try_decode function is called to check if the blob of data can
+ * be used by this handler, and if it can, decodes it into a supported
+ * OpenSSL type and returns a OSSL_STORE_INFO with the decoded data.
+ * Input:
+ *    pem_name:     If this blob comes from a PEM file, this holds
+ *                  the PEM name.  If it comes from another type of
+ *                  file, this is NULL.
+ *    pem_header:   If this blob comes from a PEM file, this holds
+ *                  the PEM headers.  If it comes from another type of
+ *                  file, this is NULL.
+ *    blob:         The blob of data to match with what this handler
+ *                  can use.
+ *    len:          The length of the blob.
+ *    handler_ctx:  For a handler marked repeatable, this pointer can
+ *                  be used to create a context for the handler.  IT IS
+ *                  THE HANDLER'S RESPONSIBILITY TO CREATE AND DESTROY
+ *                  THIS CONTEXT APPROPRIATELY, i.e. create on first call
+ *                  and destroy when about to return NULL.
+ *    matchcount:   A pointer to an int to count matches for this data.
+ *                  Usually becomes 0 (no match) or 1 (match!), but may
+ *                  be higher in the (unlikely) event that the data matches
+ *                  more than one possibility.  The int will always be
+ *                  zero when the function is called.
+ *    ui_method:    Application UI method for getting a password, pin
+ *                  or any other interactive data.
+ *    ui_data:      Application data to be passed to ui_method when
+ *                  it's called.
+ * Output:
+ *    a OSSL_STORE_INFO
+ */
+typedef OSSL_STORE_INFO *(*file_try_decode_fn)(const char *pem_name,
+                                               const char *pem_header,
+                                               const unsigned char *blob,
+                                               size_t len, void **handler_ctx,
+                                               int *matchcount,
+                                               const UI_METHOD *ui_method,
+                                               void *ui_data);
+/*
+ * The eof function should return 1 if there's no more data to be found
+ * with the handler_ctx, otherwise 0.  This is only used when the handler is
+ * marked repeatable.
+ */
+typedef int (*file_eof_fn)(void *handler_ctx);
+/*
+ * The destroy_ctx function is used to destroy the handler_ctx that was
+ * intiated by a repeatable try_decode fuction.  This is only used when
+ * the handler is marked repeatable.
+ */
+typedef void (*file_destroy_ctx_fn)(void **handler_ctx);
+
+typedef struct file_handler_st {
+    const char *name;
+    file_try_decode_fn try_decode;
+    file_eof_fn eof;
+    file_destroy_ctx_fn destroy_ctx;
+
+    /* flags */
+    int repeatable;
+} FILE_HANDLER;
+
+/*
+ * PKCS#12 decoder.  It operates by decoding all of the blob content,
+ * extracting all the interesting data from it and storing them internally,
+ * then serving them one piece at a time.
+ */
+static OSSL_STORE_INFO *try_decode_PKCS12(const char *pem_name,
+                                          const char *pem_header,
+                                          const unsigned char *blob,
+                                          size_t len, void **pctx,
+                                          int *matchcount,
+                                          const UI_METHOD *ui_method,
+                                          void *ui_data)
+{
+    OSSL_STORE_INFO *store_info = NULL;
+    STACK_OF(OSSL_STORE_INFO) *ctx = *pctx;
+
+    if (ctx == NULL) {
+        /* Initial parsing */
+        PKCS12 *p12;
+        int ok = 0;
+
+        if (pem_name != NULL)
+            /* No match, there is no PEM PKCS12 tag */
+            return NULL;
+
+        if ((p12 = d2i_PKCS12(NULL, &blob, len)) != NULL) {
+            char *pass = NULL;
+            char tpass[PEM_BUFSIZE];
+            EVP_PKEY *pkey = NULL;
+            X509 *cert = NULL;
+            STACK_OF(X509) *chain = NULL;
+
+            *matchcount = 1;
+
+            if (PKCS12_verify_mac(p12, "", 0)
+                || PKCS12_verify_mac(p12, NULL, 0)) {
+                pass = "";
+            } else {
+                if ((pass = file_get_pass(ui_method, tpass, PEM_BUFSIZE,
+                                          "PKCS12 import password",
+                                          ui_data)) == NULL) {
+                    OSSL_STOREerr(OSSL_STORE_F_TRY_DECODE_PKCS12,
+                                  OSSL_STORE_R_PASSPHRASE_CALLBACK_ERROR);
+                    goto p12_end;
+                }
+                if (!PKCS12_verify_mac(p12, pass, strlen(pass))) {
+                    OSSL_STOREerr(OSSL_STORE_F_TRY_DECODE_PKCS12,
+                                  OSSL_STORE_R_ERROR_VERIFYING_PKCS12_MAC);
+                    goto p12_end;
+                }
+            }
+
+            if (PKCS12_parse(p12, pass, &pkey, &cert, &chain)) {
+                OSSL_STORE_INFO *osi_pkey = NULL;
+                OSSL_STORE_INFO *osi_cert = NULL;
+                OSSL_STORE_INFO *osi_ca = NULL;
+
+                if ((ctx = sk_OSSL_STORE_INFO_new_null()) != NULL
+                    && (osi_pkey = OSSL_STORE_INFO_new_PKEY(pkey)) != NULL
+                    && sk_OSSL_STORE_INFO_push(ctx, osi_pkey) != 0
+                    && (osi_cert = OSSL_STORE_INFO_new_CERT(cert)) != NULL
+                    && sk_OSSL_STORE_INFO_push(ctx, osi_cert) != 0) {
+                    ok = 1;
+                    osi_pkey = NULL;
+                    osi_cert = NULL;
+
+                    while(sk_X509_num(chain) > 0) {
+                        X509 *ca = sk_X509_value(chain, 0);
+
+                        if ((osi_ca = OSSL_STORE_INFO_new_CERT(ca)) == NULL
+                            || sk_OSSL_STORE_INFO_push(ctx, osi_ca) == 0) {
+                            ok = 0;
+                            break;
+                        }
+                        osi_ca = NULL;
+                        (void)sk_X509_shift(chain);
+                    }
+                }
+                if (!ok) {
+                    OSSL_STORE_INFO_free(osi_ca);
+                    OSSL_STORE_INFO_free(osi_cert);
+                    OSSL_STORE_INFO_free(osi_pkey);
+                    sk_OSSL_STORE_INFO_pop_free(ctx, OSSL_STORE_INFO_free);
+                    EVP_PKEY_free(pkey);
+                    X509_free(cert);
+                    sk_X509_pop_free(chain, X509_free);
+                    ctx = NULL;
+                }
+                *pctx = ctx;
+            }
+        }
+     p12_end:
+        PKCS12_free(p12);
+        if (!ok)
+            return NULL;
+    }
+
+    if (ctx != NULL) {
+        *matchcount = 1;
+        store_info = sk_OSSL_STORE_INFO_shift(ctx);
+    }
+
+    return store_info;
+}
+
+static int eof_PKCS12(void *ctx_)
+{
+    STACK_OF(OSSL_STORE_INFO) *ctx = ctx_;
+
+    return ctx == NULL || sk_OSSL_STORE_INFO_num(ctx) == 0;
+}
+
+static void destroy_ctx_PKCS12(void **pctx)
+{
+    STACK_OF(OSSL_STORE_INFO) *ctx = *pctx;
+
+    sk_OSSL_STORE_INFO_pop_free(ctx, OSSL_STORE_INFO_free);
+    *pctx = NULL;
+}
+
+static FILE_HANDLER PKCS12_handler = {
+    "PKCS12",
+    try_decode_PKCS12,
+    eof_PKCS12,
+    destroy_ctx_PKCS12,
+    1                            /* repeatable */
+};
+
+/*
+ * Encrypted PKCS#8 decoder.  It operates by just decrypting the given blob
+ * into a new blob, which is returned as an EMBEDDED STORE_INFO.  The whole
+ * decoding process will then start over with the new blob.
+ */
+static OSSL_STORE_INFO *try_decode_PKCS8Encrypted(const char *pem_name,
+                                                  const char *pem_header,
+                                                  const unsigned char *blob,
+                                                  size_t len, void **pctx,
+                                                  int *matchcount,
+                                                  const UI_METHOD *ui_method,
+                                                  void *ui_data)
+{
+    X509_SIG *p8 = NULL;
+    char kbuf[PEM_BUFSIZE];
+    char *pass = NULL;
+    const X509_ALGOR *dalg = NULL;
+    const ASN1_OCTET_STRING *doct = NULL;
+    OSSL_STORE_INFO *store_info = NULL;
+    BUF_MEM *mem = NULL;
+    unsigned char *new_data = NULL;
+    int new_data_len;
+
+    if (pem_name != NULL) {
+        if (strcmp(pem_name, PEM_STRING_PKCS8) != 0)
+            return NULL;
+        *matchcount = 1;
+    }
+
+    if ((p8 = d2i_X509_SIG(NULL, &blob, len)) == NULL)
+        return NULL;
+
+    *matchcount = 1;
+
+    if ((mem = BUF_MEM_new()) == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_TRY_DECODE_PKCS8ENCRYPTED,
+                      ERR_R_MALLOC_FAILURE);
+        goto nop8;
+    }
+
+    if ((pass = file_get_pass(ui_method, kbuf, PEM_BUFSIZE,
+                              "PKCS8 decrypt password", ui_data)) == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_TRY_DECODE_PKCS8ENCRYPTED,
+                      OSSL_STORE_R_BAD_PASSWORD_READ);
+        goto nop8;
+    }
+
+    X509_SIG_get0(p8, &dalg, &doct);
+    if (!PKCS12_pbe_crypt(dalg, pass, strlen(pass), doct->data, doct->length,
+                          &new_data, &new_data_len, 0))
+        goto nop8;
+
+    mem->data = (char *)new_data;
+    mem->max = mem->length = (size_t)new_data_len;
+    X509_SIG_free(p8);
+
+    store_info = ossl_store_info_new_EMBEDDED(PEM_STRING_PKCS8INF, mem);
+    if (store_info == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_TRY_DECODE_PKCS8ENCRYPTED,
+                      ERR_R_MALLOC_FAILURE);
+        goto nop8;
+    }
+
+    return store_info;
+ nop8:
+    X509_SIG_free(p8);
+    BUF_MEM_free(mem);
+    return NULL;
+}
+
+static FILE_HANDLER PKCS8Encrypted_handler = {
+    "PKCS8Encrypted",
+    try_decode_PKCS8Encrypted
+};
+
+/*
+ * Private key decoder.  Decodes all sorts of private keys, both PKCS#8
+ * encoded ones and old style PEM ones (with the key type is encoded into
+ * the PEM name).
+ */
+int pem_check_suffix(const char *pem_str, const char *suffix);
+static OSSL_STORE_INFO *try_decode_PrivateKey(const char *pem_name,
+                                              const char *pem_header,
+                                              const unsigned char *blob,
+                                              size_t len, void **pctx,
+                                              int *matchcount,
+                                              const UI_METHOD *ui_method,
+                                              void *ui_data)
+{
+    OSSL_STORE_INFO *store_info = NULL;
+    EVP_PKEY *pkey = NULL;
+    const EVP_PKEY_ASN1_METHOD *ameth = NULL;
+
+    if (pem_name != NULL) {
+        if (strcmp(pem_name, PEM_STRING_PKCS8INF) == 0) {
+            PKCS8_PRIV_KEY_INFO *p8inf =
+                d2i_PKCS8_PRIV_KEY_INFO(NULL, &blob, len);
+
+            *matchcount = 1;
+            if (p8inf != NULL)
+                pkey = EVP_PKCS82PKEY(p8inf);
+            PKCS8_PRIV_KEY_INFO_free(p8inf);
+        } else {
+            int slen;
+
+            if ((slen = pem_check_suffix(pem_name, "PRIVATE KEY")) > 0
+                && (ameth = EVP_PKEY_asn1_find_str(NULL, pem_name,
+                                                   slen)) != NULL) {
+                *matchcount = 1;
+                pkey = d2i_PrivateKey(ameth->pkey_id, NULL, &blob, len);
+            }
+        }
+    } else {
+        int i;
+
+        for (i = 0; i < EVP_PKEY_asn1_get_count(); i++) {
+            EVP_PKEY *tmp_pkey = NULL;
+            const unsigned char *tmp_blob = blob;
+
+            ameth = EVP_PKEY_asn1_get0(i);
+            if (ameth->pkey_flags & ASN1_PKEY_ALIAS)
+                continue;
+
+            tmp_pkey = d2i_PrivateKey(ameth->pkey_id, NULL, &tmp_blob, len);
+            if (tmp_pkey != NULL) {
+                if (pkey != NULL)
+                    EVP_PKEY_free(tmp_pkey);
+                else
+                    pkey = tmp_pkey;
+                (*matchcount)++;
+            }
+        }
+
+        if (*matchcount > 1) {
+            EVP_PKEY_free(pkey);
+            pkey = NULL;
+        }
+    }
+    if (pkey == NULL)
+        /* No match */
+        return NULL;
+
+    store_info = OSSL_STORE_INFO_new_PKEY(pkey);
+    if (store_info == NULL)
+        EVP_PKEY_free(pkey);
+
+    return store_info;
+}
+
+static FILE_HANDLER PrivateKey_handler = {
+    "PrivateKey",
+    try_decode_PrivateKey
+};
+
+/*
+ * Public key decoder.  Only supports SubjectPublicKeyInfo formated keys.
+ */
+static OSSL_STORE_INFO *try_decode_PUBKEY(const char *pem_name,
+                                          const char *pem_header,
+                                          const unsigned char *blob,
+                                          size_t len, void **pctx,
+                                          int *matchcount,
+                                          const UI_METHOD *ui_method,
+                                          void *ui_data)
+{
+    OSSL_STORE_INFO *store_info = NULL;
+    EVP_PKEY *pkey = NULL;
+
+    if (pem_name != NULL) {
+        if (strcmp(pem_name, PEM_STRING_PUBLIC) != 0)
+            /* No match */
+            return NULL;
+        *matchcount = 1;
+    }
+
+    if ((pkey = d2i_PUBKEY(NULL, &blob, len)) != NULL) {
+        *matchcount = 1;
+        store_info = OSSL_STORE_INFO_new_PKEY(pkey);
+    }
+
+    return store_info;
+}
+
+static FILE_HANDLER PUBKEY_handler = {
+    "PUBKEY",
+    try_decode_PUBKEY
+};
+
+/*
+ * Key parameter decoder.
+ */
+static OSSL_STORE_INFO *try_decode_params(const char *pem_name,
+                                          const char *pem_header,
+                                          const unsigned char *blob,
+                                          size_t len, void **pctx,
+                                          int *matchcount,
+                                          const UI_METHOD *ui_method,
+                                          void *ui_data)
+{
+    OSSL_STORE_INFO *store_info = NULL;
+    int slen = 0;
+    EVP_PKEY *pkey = NULL;
+    const EVP_PKEY_ASN1_METHOD *ameth = NULL;
+    int ok = 0;
+
+    if (pem_name != NULL) {
+        if ((slen = pem_check_suffix(pem_name, "PARAMETERS")) == 0)
+            return NULL;
+        *matchcount = 1;
+    }
+
+    if (slen > 0) {
+        if ((pkey = EVP_PKEY_new()) == NULL) {
+            OSSL_STOREerr(OSSL_STORE_F_TRY_DECODE_PARAMS, ERR_R_EVP_LIB);
+            return NULL;
+        }
+
+
+        if (EVP_PKEY_set_type_str(pkey, pem_name, slen)
+            && (ameth = EVP_PKEY_get0_asn1(pkey)) != NULL
+            && ameth->param_decode != NULL
+            && ameth->param_decode(pkey, &blob, len))
+            ok = 1;
+    } else {
+        int i;
+        EVP_PKEY *tmp_pkey = NULL;
+
+        for (i = 0; i < EVP_PKEY_asn1_get_count(); i++) {
+            const unsigned char *tmp_blob = blob;
+
+            if (tmp_pkey == NULL && (tmp_pkey = EVP_PKEY_new()) == NULL) {
+                OSSL_STOREerr(OSSL_STORE_F_TRY_DECODE_PARAMS, ERR_R_EVP_LIB);
+                break;
+            }
+
+            ameth = EVP_PKEY_asn1_get0(i);
+            if (ameth->pkey_flags & ASN1_PKEY_ALIAS)
+                continue;
+
+            if (EVP_PKEY_set_type(tmp_pkey, ameth->pkey_id)
+                && (ameth = EVP_PKEY_get0_asn1(tmp_pkey)) != NULL
+                && ameth->param_decode != NULL
+                && ameth->param_decode(tmp_pkey, &tmp_blob, len)) {
+                if (pkey != NULL)
+                    EVP_PKEY_free(tmp_pkey);
+                else
+                    pkey = tmp_pkey;
+                tmp_pkey = NULL;
+                (*matchcount)++;
+            }
+        }
+
+        EVP_PKEY_free(tmp_pkey);
+        if (*matchcount == 1) {
+            ok = 1;
+        }
+    }
+
+    if (ok)
+        store_info = OSSL_STORE_INFO_new_PARAMS(pkey);
+    if (store_info == NULL)
+        EVP_PKEY_free(pkey);
+
+    return store_info;
+}
+
+static FILE_HANDLER params_handler = {
+    "params",
+    try_decode_params
+};
+
+/*
+ * X.509 certificate decoder.
+ */
+static OSSL_STORE_INFO *try_decode_X509Certificate(const char *pem_name,
+                                                   const char *pem_header,
+                                                   const unsigned char *blob,
+                                                   size_t len, void **pctx,
+                                                   int *matchcount,
+                                                   const UI_METHOD *ui_method,
+                                                   void *ui_data)
+{
+    OSSL_STORE_INFO *store_info = NULL;
+    X509 *cert = NULL;
+
+    /*
+     * In most cases, we can try to interpret the serialized data as a trusted
+     * cert (X509 + X509_AUX) and fall back to reading it as a normal cert
+     * (just X509), but if the PEM name specifically declares it as a trusted
+     * cert, then no fallback should be engaged.  |ignore_trusted| tells if
+     * the fallback can be used (1) or not (0).
+     */
+    int ignore_trusted = 1;
+
+    if (pem_name != NULL) {
+        if (strcmp(pem_name, PEM_STRING_X509_TRUSTED) == 0)
+            ignore_trusted = 0;
+        else if (strcmp(pem_name, PEM_STRING_X509_OLD) != 0
+                 && strcmp(pem_name, PEM_STRING_X509) != 0)
+            /* No match */
+            return NULL;
+        *matchcount = 1;
+    }
+
+    if ((cert = d2i_X509_AUX(NULL, &blob, len)) != NULL
+        || (ignore_trusted && (cert = d2i_X509(NULL, &blob, len)) != NULL)) {
+        *matchcount = 1;
+        store_info = OSSL_STORE_INFO_new_CERT(cert);
+    }
+
+    if (store_info == NULL)
+        X509_free(cert);
+
+    return store_info;
+}
+
+static FILE_HANDLER X509Certificate_handler = {
+    "X509Certificate",
+    try_decode_X509Certificate
+};
+
+/*
+ * X.509 CRL decoder.
+ */
+static OSSL_STORE_INFO *try_decode_X509CRL(const char *pem_name,
+                                           const char *pem_header,
+                                           const unsigned char *blob,
+                                           size_t len, void **pctx,
+                                           int *matchcount,
+                                           const UI_METHOD *ui_method,
+                                           void *ui_data)
+{
+    OSSL_STORE_INFO *store_info = NULL;
+    X509_CRL *crl = NULL;
+
+    if (pem_name != NULL) {
+        if (strcmp(pem_name, PEM_STRING_X509_CRL) != 0)
+            /* No match */
+            return NULL;
+        *matchcount = 1;
+    }
+
+    if ((crl = d2i_X509_CRL(NULL, &blob, len)) != NULL) {
+        *matchcount = 1;
+        store_info = OSSL_STORE_INFO_new_CRL(crl);
+    }
+
+    if (store_info == NULL)
+        X509_CRL_free(crl);
+
+    return store_info;
+}
+
+static FILE_HANDLER X509CRL_handler = {
+    "X509CRL",
+    try_decode_X509CRL
+};
+
+/*
+ * To finish it all off, we collect all the handlers.
+ */
+static const FILE_HANDLER *file_handlers[] = {
+    &PKCS12_handler,
+    &PKCS8Encrypted_handler,
+    &X509Certificate_handler,
+    &X509CRL_handler,
+    &params_handler,
+    &PUBKEY_handler,
+    &PrivateKey_handler,
+};
+
+
+/*-
+ *  The loader itself
+ *  -----------------
+ */
+
+struct ossl_store_loader_ctx_st {
+    enum {
+        is_raw = 0,
+        is_pem,
+        is_dir
+    } type;
+    int errcnt;
+#define FILE_FLAG_SECMEM         (1<<0)
+    unsigned int flags;
+    union {
+        struct {                 /* Used with is_raw and is_pem */
+            BIO *file;
+
+            /*
+             * The following are used when the handler is marked as
+             * repeatable
+             */
+            const FILE_HANDLER *last_handler;
+            void *last_handler_ctx;
+        } file;
+        struct {                 /* Used with is_dir */
+            OPENSSL_DIR_CTX *ctx;
+            int end_reached;
+            char *uri;
+
+            /*
+             * When a search expression is given, these are filled in.
+             * |search_name| contains the file basename to look for.
+             * The string is exactly 8 characters long.
+             */
+            char search_name[9];
+
+            /*
+             * The directory reading utility we have combines opening with
+             * reading the first name.  To make sure we can detect the end
+             * at the right time, we read early and cache the name.
+             */
+            const char *last_entry;
+            int last_errno;
+        } dir;
+    } _;
+
+    /* Expected object type.  May be unspecified */
+    int expected_type;
+};
+
+static void OSSL_STORE_LOADER_CTX_free(OSSL_STORE_LOADER_CTX *ctx)
+{
+    if (ctx->type == is_dir) {
+        OPENSSL_free(ctx->_.dir.uri);
+    } else {
+        if (ctx->_.file.last_handler != NULL) {
+            ctx->_.file.last_handler->destroy_ctx(&ctx->_.file.last_handler_ctx);
+            ctx->_.file.last_handler_ctx = NULL;
+            ctx->_.file.last_handler = NULL;
+        }
+    }
+    OPENSSL_free(ctx);
+}
+
+static OSSL_STORE_LOADER_CTX *file_open(const OSSL_STORE_LOADER *loader,
+                                        const char *uri,
+                                        const UI_METHOD *ui_method,
+                                        void *ui_data)
+{
+    OSSL_STORE_LOADER_CTX *ctx = NULL;
+    struct stat st;
+    struct {
+        const char *path;
+        unsigned int check_absolute:1;
+    } path_data[2];
+    size_t path_data_n = 0, i;
+    const char *path;
+
+    /*
+     * First step, just take the URI as is.
+     */
+    path_data[path_data_n].check_absolute = 0;
+    path_data[path_data_n++].path = uri;
+
+    /*
+     * Second step, if the URI appears to start with the 'file' scheme,
+     * extract the path and make that the second path to check.
+     * There's a special case if the URI also contains an authority, then
+     * the full URI shouldn't be used as a path anywhere.
+     */
+    if (strncasecmp(uri, "file:", 5) == 0) {
+        const char *p = &uri[5];
+
+        if (strncmp(&uri[5], "//", 2) == 0) {
+            path_data_n--;           /* Invalidate using the full URI */
+            if (strncasecmp(&uri[7], "localhost/", 10) == 0) {
+                p = &uri[16];
+            } else if (uri[7] == '/') {
+                p = &uri[7];
+            } else {
+                OSSL_STOREerr(OSSL_STORE_F_FILE_OPEN,
+                              OSSL_STORE_R_URI_AUTHORITY_UNSUPPORTED);
+                return NULL;
+            }
+        }
+
+        path_data[path_data_n].check_absolute = 1;
+#ifdef _WIN32
+        /* Windows file: URIs with a drive letter start with a / */
+        if (p[0] == '/' && p[2] == ':' && p[3] == '/') {
+            char c = ossl_tolower(p[1]);
+
+            if (c >= 'a' && c <= 'z') {
+                p++;
+                /* We know it's absolute, so no need to check */
+                path_data[path_data_n].check_absolute = 0;
+            }
+        }
+#endif
+        path_data[path_data_n++].path = p;
+    }
+
+
+    for (i = 0, path = NULL; path == NULL && i < path_data_n; i++) {
+        /*
+         * If the scheme "file" was an explicit part of the URI, the path must
+         * be absolute.  So says RFC 8089
+         */
+        if (path_data[i].check_absolute && path_data[i].path[0] != '/') {
+            OSSL_STOREerr(OSSL_STORE_F_FILE_OPEN,
+                          OSSL_STORE_R_PATH_MUST_BE_ABSOLUTE);
+            ERR_add_error_data(1, path_data[i].path);
+            return NULL;
+        }
+
+        if (stat(path_data[i].path, &st) < 0) {
+            SYSerr(SYS_F_STAT, errno);
+            ERR_add_error_data(1, path_data[i].path);
+        } else {
+            path = path_data[i].path;
+        }
+    }
+    if (path == NULL) {
+        return NULL;
+    }
+
+    /* Successfully found a working path, clear possible collected errors */
+    ERR_clear_error();
+
+    ctx = OPENSSL_zalloc(sizeof(*ctx));
+    if (ctx == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_FILE_OPEN, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if (S_ISDIR(st.st_mode)) {
+        /*
+         * Try to copy everything, even if we know that some of them must be
+         * NULL for the moment.  This prevents errors in the future, when more
+         * components may be used.
+         */
+        ctx->_.dir.uri = OPENSSL_strdup(uri);
+        ctx->type = is_dir;
+
+        if (ctx->_.dir.uri == NULL)
+            goto err;
+
+        ctx->_.dir.last_entry = OPENSSL_DIR_read(&ctx->_.dir.ctx, path);
+        ctx->_.dir.last_errno = errno;
+        if (ctx->_.dir.last_entry == NULL) {
+            if (ctx->_.dir.last_errno != 0) {
+                char errbuf[256];
+                errno = ctx->_.dir.last_errno;
+                openssl_strerror_r(errno, errbuf, sizeof(errbuf));
+                OSSL_STOREerr(OSSL_STORE_F_FILE_OPEN, ERR_R_SYS_LIB);
+                ERR_add_error_data(1, errbuf);
+                goto err;
+            }
+            ctx->_.dir.end_reached = 1;
+        }
+    } else {
+        BIO *buff = NULL;
+        char peekbuf[4096] = { 0, };
+
+        if ((buff = BIO_new(BIO_f_buffer())) == NULL
+            || (ctx->_.file.file = BIO_new_file(path, "rb")) == NULL) {
+            BIO_free_all(buff);
+            goto err;
+        }
+
+        ctx->_.file.file = BIO_push(buff, ctx->_.file.file);
+        if (BIO_buffer_peek(ctx->_.file.file, peekbuf, sizeof(peekbuf) - 1) > 0) {
+            peekbuf[sizeof(peekbuf) - 1] = '\0';
+            if (strstr(peekbuf, "-----BEGIN ") != NULL)
+                ctx->type = is_pem;
+        }
+    }
+
+    return ctx;
+ err:
+    OSSL_STORE_LOADER_CTX_free(ctx);
+    return NULL;
+}
+
+static int file_ctrl(OSSL_STORE_LOADER_CTX *ctx, int cmd, va_list args)
+{
+    int ret = 1;
+
+    switch (cmd) {
+    case OSSL_STORE_C_USE_SECMEM:
+        {
+            int on = *(va_arg(args, int *));
+
+            switch (on) {
+            case 0:
+                ctx->flags &= ~FILE_FLAG_SECMEM;
+                break;
+            case 1:
+                ctx->flags |= FILE_FLAG_SECMEM;
+                break;
+            default:
+                OSSL_STOREerr(OSSL_STORE_F_FILE_CTRL,
+                              ERR_R_PASSED_INVALID_ARGUMENT);
+                ret = 0;
+                break;
+            }
+        }
+        break;
+    default:
+        break;
+    }
+
+    return ret;
+}
+
+static int file_expect(OSSL_STORE_LOADER_CTX *ctx, int expected)
+{
+    ctx->expected_type = expected;
+    return 1;
+}
+
+static int file_find(OSSL_STORE_LOADER_CTX *ctx, OSSL_STORE_SEARCH *search)
+{
+    /*
+     * If ctx == NULL, the library is looking to know if this loader supports
+     * the given search type.
+     */
+
+    if (OSSL_STORE_SEARCH_get_type(search) == OSSL_STORE_SEARCH_BY_NAME) {
+        unsigned long hash = 0;
+
+        if (ctx == NULL)
+            return 1;
+
+        if (ctx->type != is_dir) {
+            OSSL_STOREerr(OSSL_STORE_F_FILE_FIND,
+                          OSSL_STORE_R_SEARCH_ONLY_SUPPORTED_FOR_DIRECTORIES);
+            return 0;
+        }
+
+        hash = X509_NAME_hash(OSSL_STORE_SEARCH_get0_name(search));
+        BIO_snprintf(ctx->_.dir.search_name, sizeof(ctx->_.dir.search_name),
+                     "%08lx", hash);
+        return 1;
+    }
+
+    if (ctx != NULL)
+        OSSL_STOREerr(OSSL_STORE_F_FILE_FIND,
+                      OSSL_STORE_R_UNSUPPORTED_SEARCH_TYPE);
+    return 0;
+}
+
+/* Internal function to decode an already opened PEM file */
+OSSL_STORE_LOADER_CTX *ossl_store_file_attach_pem_bio_int(BIO *bp)
+{
+    OSSL_STORE_LOADER_CTX *ctx = OPENSSL_zalloc(sizeof(*ctx));
+
+    if (ctx == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_FILE_ATTACH_PEM_BIO_INT,
+                      ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ctx->_.file.file = bp;
+    ctx->type = is_pem;
+
+    return ctx;
+}
+
+static OSSL_STORE_INFO *file_load_try_decode(OSSL_STORE_LOADER_CTX *ctx,
+                                             const char *pem_name,
+                                             const char *pem_header,
+                                             unsigned char *data, size_t len,
+                                             const UI_METHOD *ui_method,
+                                             void *ui_data, int *matchcount)
+{
+    OSSL_STORE_INFO *result = NULL;
+    BUF_MEM *new_mem = NULL;
+    char *new_pem_name = NULL;
+    int t = 0;
+
+ again:
+    {
+        size_t i = 0;
+        void *handler_ctx = NULL;
+        const FILE_HANDLER **matching_handlers =
+            OPENSSL_zalloc(sizeof(*matching_handlers)
+                           * OSSL_NELEM(file_handlers));
+
+        if (matching_handlers == NULL) {
+            OSSL_STOREerr(OSSL_STORE_F_FILE_LOAD_TRY_DECODE,
+                          ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+
+        *matchcount = 0;
+        for (i = 0; i < OSSL_NELEM(file_handlers); i++) {
+            const FILE_HANDLER *handler = file_handlers[i];
+            int try_matchcount = 0;
+            void *tmp_handler_ctx = NULL;
+            OSSL_STORE_INFO *tmp_result =
+                handler->try_decode(pem_name, pem_header, data, len,
+                                    &tmp_handler_ctx, &try_matchcount,
+                                    ui_method, ui_data);
+
+            if (try_matchcount > 0) {
+
+                matching_handlers[*matchcount] = handler;
+
+                if (handler_ctx)
+                    handler->destroy_ctx(&handler_ctx);
+                handler_ctx = tmp_handler_ctx;
+
+                if ((*matchcount += try_matchcount) > 1) {
+                    /* more than one match => ambiguous, kill any result */
+                    OSSL_STORE_INFO_free(result);
+                    OSSL_STORE_INFO_free(tmp_result);
+                    if (handler->destroy_ctx != NULL)
+                        handler->destroy_ctx(&handler_ctx);
+                    handler_ctx = NULL;
+                    tmp_result = NULL;
+                    result = NULL;
+                }
+                if (result == NULL)
+                    result = tmp_result;
+            }
+        }
+
+        if (*matchcount == 1 && matching_handlers[0]->repeatable) {
+            ctx->_.file.last_handler = matching_handlers[0];
+            ctx->_.file.last_handler_ctx = handler_ctx;
+        }
+
+        OPENSSL_free(matching_handlers);
+    }
+
+ err:
+    OPENSSL_free(new_pem_name);
+    BUF_MEM_free(new_mem);
+
+    if (result != NULL
+        && (t = OSSL_STORE_INFO_get_type(result)) == OSSL_STORE_INFO_EMBEDDED) {
+        pem_name = new_pem_name =
+            ossl_store_info_get0_EMBEDDED_pem_name(result);
+        new_mem = ossl_store_info_get0_EMBEDDED_buffer(result);
+        data = (unsigned char *)new_mem->data;
+        len = new_mem->length;
+        OPENSSL_free(result);
+        result = NULL;
+        goto again;
+    }
+
+    if (result != NULL)
+        ERR_clear_error();
+
+    return result;
+}
+
+static OSSL_STORE_INFO *file_load_try_repeat(OSSL_STORE_LOADER_CTX *ctx,
+                                             const UI_METHOD *ui_method,
+                                             void *ui_data)
+{
+    OSSL_STORE_INFO *result = NULL;
+    int try_matchcount = 0;
+
+    if (ctx->_.file.last_handler != NULL) {
+        result =
+            ctx->_.file.last_handler->try_decode(NULL, NULL, NULL, 0,
+                                                 &ctx->_.file.last_handler_ctx,
+                                                 &try_matchcount,
+                                                 ui_method, ui_data);
+
+        if (result == NULL) {
+            ctx->_.file.last_handler->destroy_ctx(&ctx->_.file.last_handler_ctx);
+            ctx->_.file.last_handler_ctx = NULL;
+            ctx->_.file.last_handler = NULL;
+        }
+    }
+    return result;
+}
+
+static void pem_free_flag(void *pem_data, int secure, size_t num)
+{
+    if (secure)
+        OPENSSL_secure_clear_free(pem_data, num);
+    else
+        OPENSSL_free(pem_data);
+}
+static int file_read_pem(BIO *bp, char **pem_name, char **pem_header,
+                         unsigned char **data, long *len,
+                         const UI_METHOD *ui_method,
+                         void *ui_data, int secure)
+{
+    int i = secure
+        ? PEM_read_bio_ex(bp, pem_name, pem_header, data, len,
+                          PEM_FLAG_SECURE | PEM_FLAG_EAY_COMPATIBLE)
+        : PEM_read_bio(bp, pem_name, pem_header, data, len);
+
+    if (i <= 0)
+        return 0;
+
+    /*
+     * 10 is the number of characters in "Proc-Type:", which
+     * PEM_get_EVP_CIPHER_INFO() requires to be present.
+     * If the PEM header has less characters than that, it's
+     * not worth spending cycles on it.
+     */
+    if (strlen(*pem_header) > 10) {
+        EVP_CIPHER_INFO cipher;
+        struct pem_pass_data pass_data;
+
+        if (!PEM_get_EVP_CIPHER_INFO(*pem_header, &cipher)
+            || !file_fill_pem_pass_data(&pass_data, "PEM", ui_method, ui_data)
+            || !PEM_do_header(&cipher, *data, len, file_get_pem_pass,
+                              &pass_data)) {
+            return 0;
+        }
+    }
+    return 1;
+}
+
+static int file_read_asn1(BIO *bp, unsigned char **data, long *len)
+{
+    BUF_MEM *mem = NULL;
+
+    if (asn1_d2i_read_bio(bp, &mem) < 0)
+        return 0;
+
+    *data = (unsigned char *)mem->data;
+    *len = (long)mem->length;
+    OPENSSL_free(mem);
+
+    return 1;
+}
+
+static int ends_with_dirsep(const char *uri)
+{
+    if (*uri != '\0')
+        uri += strlen(uri) - 1;
+#if defined __VMS
+    if (*uri == ']' || *uri == '>' || *uri == ':')
+        return 1;
+#elif defined _WIN32
+    if (*uri == '\\')
+        return 1;
+#endif
+    return *uri == '/';
+}
+
+static int file_name_to_uri(OSSL_STORE_LOADER_CTX *ctx, const char *name,
+                            char **data)
+{
+    assert(name != NULL);
+    assert(data != NULL);
+    {
+        const char *pathsep = ends_with_dirsep(ctx->_.dir.uri) ? "" : "/";
+        long calculated_length = strlen(ctx->_.dir.uri) + strlen(pathsep)
+            + strlen(name) + 1 /* \0 */;
+
+        *data = OPENSSL_zalloc(calculated_length);
+        if (*data == NULL) {
+            OSSL_STOREerr(OSSL_STORE_F_FILE_NAME_TO_URI, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+
+        OPENSSL_strlcat(*data, ctx->_.dir.uri, calculated_length);
+        OPENSSL_strlcat(*data, pathsep, calculated_length);
+        OPENSSL_strlcat(*data, name, calculated_length);
+    }
+    return 1;
+}
+
+static int file_name_check(OSSL_STORE_LOADER_CTX *ctx, const char *name)
+{
+    const char *p = NULL;
+
+    /* If there are no search criteria, all names are accepted */
+    if (ctx->_.dir.search_name[0] == '\0')
+        return 1;
+
+    /* If the expected type isn't supported, no name is accepted */
+    if (ctx->expected_type != 0
+        && ctx->expected_type != OSSL_STORE_INFO_CERT
+        && ctx->expected_type != OSSL_STORE_INFO_CRL)
+        return 0;
+
+    /*
+     * First, check the basename
+     */
+    if (strncasecmp(name, ctx->_.dir.search_name,
+                    sizeof(ctx->_.dir.search_name) - 1) != 0
+        || name[sizeof(ctx->_.dir.search_name) - 1] != '.')
+        return 0;
+    p = &name[sizeof(ctx->_.dir.search_name)];
+
+    /*
+     * Then, if the expected type is a CRL, check that the extension starts
+     * with 'r'
+     */
+    if (*p == 'r') {
+        p++;
+        if (ctx->expected_type != 0
+            && ctx->expected_type != OSSL_STORE_INFO_CRL)
+            return 0;
+    } else if (ctx->expected_type == OSSL_STORE_INFO_CRL) {
+        return 0;
+    }
+
+    /*
+     * Last, check that the rest of the extension is a decimal number, at
+     * least one digit long.
+     */
+    if (!ossl_isdigit(*p))
+        return 0;
+    while (ossl_isdigit(*p))
+        p++;
+
+# ifdef __VMS
+    /*
+     * One extra step here, check for a possible generation number.
+     */
+    if (*p == ';')
+        for (p++; *p != '\0'; p++)
+            if (!ossl_isdigit(*p))
+                break;
+# endif
+
+    /*
+     * If we've reached the end of the string at this point, we've successfully
+     * found a fitting file name.
+     */
+    return *p == '\0';
+}
+
+static int file_eof(OSSL_STORE_LOADER_CTX *ctx);
+static int file_error(OSSL_STORE_LOADER_CTX *ctx);
+static OSSL_STORE_INFO *file_load(OSSL_STORE_LOADER_CTX *ctx,
+                                  const UI_METHOD *ui_method, void *ui_data)
+{
+    OSSL_STORE_INFO *result = NULL;
+
+    ctx->errcnt = 0;
+    ERR_clear_error();
+
+    if (ctx->type == is_dir) {
+        do {
+            char *newname = NULL;
+
+            if (ctx->_.dir.last_entry == NULL) {
+                if (!ctx->_.dir.end_reached) {
+                    char errbuf[256];
+                    assert(ctx->_.dir.last_errno != 0);
+                    errno = ctx->_.dir.last_errno;
+                    ctx->errcnt++;
+                    openssl_strerror_r(errno, errbuf, sizeof(errbuf));
+                    OSSL_STOREerr(OSSL_STORE_F_FILE_LOAD, ERR_R_SYS_LIB);
+                    ERR_add_error_data(1, errbuf);
+                }
+                return NULL;
+            }
+
+            if (ctx->_.dir.last_entry[0] != '.'
+                && file_name_check(ctx, ctx->_.dir.last_entry)
+                && !file_name_to_uri(ctx, ctx->_.dir.last_entry, &newname))
+                return NULL;
+
+            /*
+             * On the first call (with a NULL context), OPENSSL_DIR_read()
+             * cares about the second argument.  On the following calls, it
+             * only cares that it isn't NULL.  Therefore, we can safely give
+             * it our URI here.
+             */
+            ctx->_.dir.last_entry = OPENSSL_DIR_read(&ctx->_.dir.ctx,
+                                                     ctx->_.dir.uri);
+            ctx->_.dir.last_errno = errno;
+            if (ctx->_.dir.last_entry == NULL && ctx->_.dir.last_errno == 0)
+                ctx->_.dir.end_reached = 1;
+
+            if (newname != NULL
+                && (result = OSSL_STORE_INFO_new_NAME(newname)) == NULL) {
+                OPENSSL_free(newname);
+                OSSL_STOREerr(OSSL_STORE_F_FILE_LOAD, ERR_R_OSSL_STORE_LIB);
+                return NULL;
+            }
+        } while (result == NULL && !file_eof(ctx));
+    } else {
+        int matchcount = -1;
+
+     again:
+        result = file_load_try_repeat(ctx, ui_method, ui_data);
+        if (result != NULL)
+            return result;
+
+        if (file_eof(ctx))
+            return NULL;
+
+        do {
+            char *pem_name = NULL;      /* PEM record name */
+            char *pem_header = NULL;    /* PEM record header */
+            unsigned char *data = NULL; /* DER encoded data */
+            long len = 0;               /* DER encoded data length */
+
+            matchcount = -1;
+            if (ctx->type == is_pem) {
+                if (!file_read_pem(ctx->_.file.file, &pem_name, &pem_header,
+                                   &data, &len, ui_method, ui_data,
+                                   (ctx->flags & FILE_FLAG_SECMEM) != 0)) {
+                    ctx->errcnt++;
+                    goto endloop;
+                }
+            } else {
+                if (!file_read_asn1(ctx->_.file.file, &data, &len)) {
+                    ctx->errcnt++;
+                    goto endloop;
+                }
+            }
+
+            result = file_load_try_decode(ctx, pem_name, pem_header, data, len,
+                                          ui_method, ui_data, &matchcount);
+
+            if (result != NULL)
+                goto endloop;
+
+            /*
+             * If a PEM name matches more than one handler, the handlers are
+             * badly coded.
+             */
+            if (!ossl_assert(pem_name == NULL || matchcount <= 1)) {
+                ctx->errcnt++;
+                goto endloop;
+            }
+
+            if (matchcount > 1) {
+                OSSL_STOREerr(OSSL_STORE_F_FILE_LOAD,
+                              OSSL_STORE_R_AMBIGUOUS_CONTENT_TYPE);
+            } else if (matchcount == 1) {
+                /*
+                 * If there are other errors on the stack, they already show
+                 * what the problem is.
+                 */
+                if (ERR_peek_error() == 0) {
+                    OSSL_STOREerr(OSSL_STORE_F_FILE_LOAD,
+                                  OSSL_STORE_R_UNSUPPORTED_CONTENT_TYPE);
+                    if (pem_name != NULL)
+                        ERR_add_error_data(3, "PEM type is '", pem_name, "'");
+                }
+            }
+            if (matchcount > 0)
+                ctx->errcnt++;
+
+         endloop:
+            pem_free_flag(pem_name, (ctx->flags & FILE_FLAG_SECMEM) != 0, 0);
+            pem_free_flag(pem_header, (ctx->flags & FILE_FLAG_SECMEM) != 0, 0);
+            pem_free_flag(data, (ctx->flags & FILE_FLAG_SECMEM) != 0, len);
+        } while (matchcount == 0 && !file_eof(ctx) && !file_error(ctx));
+
+        /* We bail out on ambiguity */
+        if (matchcount > 1)
+            return NULL;
+
+        if (result != NULL
+            && ctx->expected_type != 0
+            && ctx->expected_type != OSSL_STORE_INFO_get_type(result)) {
+            OSSL_STORE_INFO_free(result);
+            goto again;
+        }
+    }
+
+    return result;
+}
+
+static int file_error(OSSL_STORE_LOADER_CTX *ctx)
+{
+    return ctx->errcnt > 0;
+}
+
+static int file_eof(OSSL_STORE_LOADER_CTX *ctx)
+{
+    if (ctx->type == is_dir)
+        return ctx->_.dir.end_reached;
+
+    if (ctx->_.file.last_handler != NULL
+        && !ctx->_.file.last_handler->eof(ctx->_.file.last_handler_ctx))
+        return 0;
+    return BIO_eof(ctx->_.file.file);
+}
+
+static int file_close(OSSL_STORE_LOADER_CTX *ctx)
+{
+    if (ctx->type == is_dir) {
+        OPENSSL_DIR_end(&ctx->_.dir.ctx);
+    } else {
+        BIO_free_all(ctx->_.file.file);
+    }
+    OSSL_STORE_LOADER_CTX_free(ctx);
+    return 1;
+}
+
+int ossl_store_file_detach_pem_bio_int(OSSL_STORE_LOADER_CTX *ctx)
+{
+    OSSL_STORE_LOADER_CTX_free(ctx);
+    return 1;
+}
+
+static OSSL_STORE_LOADER file_loader =
+    {
+        "file",
+        NULL,
+        file_open,
+        file_ctrl,
+        file_expect,
+        file_find,
+        file_load,
+        file_eof,
+        file_error,
+        file_close
+    };
+
+static void store_file_loader_deinit(void)
+{
+    ossl_store_unregister_loader_int(file_loader.scheme);
+}
+
+int ossl_store_file_loader_init(void)
+{
+    int ret = ossl_store_register_loader_int(&file_loader);
+
+    OPENSSL_atexit(store_file_loader_deinit);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_err.c
new file mode 100644
index 000000000..5a8a8404d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_err.c
@@ -0,0 +1,146 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/storeerr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA OSSL_STORE_str_functs[] = {
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_FILE_CTRL, 0), "file_ctrl"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_FILE_FIND, 0), "file_find"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_FILE_GET_PASS, 0),
+     "file_get_pass"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_FILE_LOAD, 0), "file_load"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_FILE_LOAD_TRY_DECODE, 0),
+     "file_load_try_decode"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_FILE_NAME_TO_URI, 0),
+     "file_name_to_uri"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_FILE_OPEN, 0), "file_open"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_ATTACH_PEM_BIO, 0),
+     "ossl_store_attach_pem_bio"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_EXPECT, 0),
+     "OSSL_STORE_expect"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_FILE_ATTACH_PEM_BIO_INT, 0),
+     "ossl_store_file_attach_pem_bio_int"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_FIND, 0),
+     "OSSL_STORE_find"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_GET0_LOADER_INT, 0),
+     "ossl_store_get0_loader_int"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_INFO_GET1_CERT, 0),
+     "OSSL_STORE_INFO_get1_CERT"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_INFO_GET1_CRL, 0),
+     "OSSL_STORE_INFO_get1_CRL"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_INFO_GET1_NAME, 0),
+     "OSSL_STORE_INFO_get1_NAME"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_INFO_GET1_NAME_DESCRIPTION, 0),
+     "OSSL_STORE_INFO_get1_NAME_description"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_INFO_GET1_PARAMS, 0),
+     "OSSL_STORE_INFO_get1_PARAMS"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_INFO_GET1_PKEY, 0),
+     "OSSL_STORE_INFO_get1_PKEY"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_INFO_NEW_CERT, 0),
+     "OSSL_STORE_INFO_new_CERT"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_INFO_NEW_CRL, 0),
+     "OSSL_STORE_INFO_new_CRL"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_INFO_NEW_EMBEDDED, 0),
+     "ossl_store_info_new_EMBEDDED"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_INFO_NEW_NAME, 0),
+     "OSSL_STORE_INFO_new_NAME"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_INFO_NEW_PARAMS, 0),
+     "OSSL_STORE_INFO_new_PARAMS"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_INFO_NEW_PKEY, 0),
+     "OSSL_STORE_INFO_new_PKEY"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_INFO_SET0_NAME_DESCRIPTION, 0),
+     "OSSL_STORE_INFO_set0_NAME_description"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_INIT_ONCE, 0),
+     "ossl_store_init_once"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_LOADER_NEW, 0),
+     "OSSL_STORE_LOADER_new"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_OPEN, 0),
+     "OSSL_STORE_open"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_OPEN_INT, 0), ""},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_REGISTER_LOADER_INT, 0),
+     "ossl_store_register_loader_int"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_SEARCH_BY_ALIAS, 0),
+     "OSSL_STORE_SEARCH_by_alias"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_SEARCH_BY_ISSUER_SERIAL, 0),
+     "OSSL_STORE_SEARCH_by_issuer_serial"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT, 0),
+     "OSSL_STORE_SEARCH_by_key_fingerprint"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_SEARCH_BY_NAME, 0),
+     "OSSL_STORE_SEARCH_by_name"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_UNREGISTER_LOADER_INT, 0),
+     "ossl_store_unregister_loader_int"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_TRY_DECODE_PARAMS, 0),
+     "try_decode_params"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_TRY_DECODE_PKCS12, 0),
+     "try_decode_PKCS12"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_TRY_DECODE_PKCS8ENCRYPTED, 0),
+     "try_decode_PKCS8Encrypted"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA OSSL_STORE_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_AMBIGUOUS_CONTENT_TYPE),
+    "ambiguous content type"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_BAD_PASSWORD_READ),
+    "bad password read"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_ERROR_VERIFYING_PKCS12_MAC),
+    "error verifying pkcs12 mac"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_FINGERPRINT_SIZE_DOES_NOT_MATCH_DIGEST),
+    "fingerprint size does not match digest"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_INVALID_SCHEME),
+    "invalid scheme"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_IS_NOT_A), "is not a"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_LOADER_INCOMPLETE),
+    "loader incomplete"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_LOADING_STARTED),
+    "loading started"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_NOT_A_CERTIFICATE),
+    "not a certificate"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_NOT_A_CRL), "not a crl"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_NOT_A_KEY), "not a key"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_NOT_A_NAME), "not a name"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_NOT_PARAMETERS),
+    "not parameters"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_PASSPHRASE_CALLBACK_ERROR),
+    "passphrase callback error"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_PATH_MUST_BE_ABSOLUTE),
+    "path must be absolute"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_SEARCH_ONLY_SUPPORTED_FOR_DIRECTORIES),
+    "search only supported for directories"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_UI_PROCESS_INTERRUPTED_OR_CANCELLED),
+    "ui process interrupted or cancelled"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_UNREGISTERED_SCHEME),
+    "unregistered scheme"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_UNSUPPORTED_CONTENT_TYPE),
+    "unsupported content type"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_UNSUPPORTED_OPERATION),
+    "unsupported operation"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_UNSUPPORTED_SEARCH_TYPE),
+    "unsupported search type"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_URI_AUTHORITY_UNSUPPORTED),
+    "uri authority unsupported"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_OSSL_STORE_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(OSSL_STORE_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(OSSL_STORE_str_functs);
+        ERR_load_strings_const(OSSL_STORE_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_init.c b/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_init.c
new file mode 100644
index 000000000..b398bf598
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_init.c
@@ -0,0 +1,33 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include "internal/store.h"
+#include "store_locl.h"
+
+static CRYPTO_ONCE store_init = CRYPTO_ONCE_STATIC_INIT;
+DEFINE_RUN_ONCE_STATIC(do_store_init)
+{
+    return OPENSSL_init_crypto(0, NULL)
+        && ossl_store_file_loader_init();
+}
+
+int ossl_store_init_once(void)
+{
+    if (!RUN_ONCE(&store_init, do_store_init)) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INIT_ONCE, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    return 1;
+}
+
+void ossl_store_cleanup_int(void)
+{
+    ossl_store_destroy_loaders_int();
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_lib.c
new file mode 100644
index 000000000..1c4354766
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_lib.c
@@ -0,0 +1,681 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include <stdlib.h>
+#include <string.h>
+#include <assert.h>
+
+#include "e_os.h"
+
+#include <openssl/crypto.h>
+#include <openssl/err.h>
+#include <openssl/store.h>
+#include "internal/thread_once.h"
+#include "internal/store_int.h"
+#include "store_locl.h"
+
+struct ossl_store_ctx_st {
+    const OSSL_STORE_LOADER *loader;
+    OSSL_STORE_LOADER_CTX *loader_ctx;
+    const UI_METHOD *ui_method;
+    void *ui_data;
+    OSSL_STORE_post_process_info_fn post_process;
+    void *post_process_data;
+    int expected_type;
+
+    /* 0 before the first STORE_load(), 1 otherwise */
+    int loading;
+};
+
+OSSL_STORE_CTX *OSSL_STORE_open(const char *uri, const UI_METHOD *ui_method,
+                                void *ui_data,
+                                OSSL_STORE_post_process_info_fn post_process,
+                                void *post_process_data)
+{
+    const OSSL_STORE_LOADER *loader = NULL;
+    OSSL_STORE_LOADER_CTX *loader_ctx = NULL;
+    OSSL_STORE_CTX *ctx = NULL;
+    char scheme_copy[256], *p, *schemes[2];
+    size_t schemes_n = 0;
+    size_t i;
+
+    /*
+     * Put the file scheme first.  If the uri does represent an existing file,
+     * possible device name and all, then it should be loaded.  Only a failed
+     * attempt at loading a local file should have us try something else.
+     */
+    schemes[schemes_n++] = "file";
+
+    /*
+     * Now, check if we have something that looks like a scheme, and add it
+     * as a second scheme.  However, also check if there's an authority start
+     * (://), because that will invalidate the previous file scheme.  Also,
+     * check that this isn't actually the file scheme, as there's no point
+     * going through that one twice!
+     */
+    OPENSSL_strlcpy(scheme_copy, uri, sizeof(scheme_copy));
+    if ((p = strchr(scheme_copy, ':')) != NULL) {
+        *p++ = '\0';
+        if (strcasecmp(scheme_copy, "file") != 0) {
+            if (strncmp(p, "//", 2) == 0)
+                schemes_n--;         /* Invalidate the file scheme */
+            schemes[schemes_n++] = scheme_copy;
+        }
+    }
+
+    ERR_set_mark();
+
+    /* Try each scheme until we find one that could open the URI */
+    for (i = 0; loader_ctx == NULL && i < schemes_n; i++) {
+        if ((loader = ossl_store_get0_loader_int(schemes[i])) != NULL)
+            loader_ctx = loader->open(loader, uri, ui_method, ui_data);
+    }
+    if (loader_ctx == NULL)
+        goto err;
+
+    if ((ctx = OPENSSL_zalloc(sizeof(*ctx))) == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_OPEN, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    ctx->loader = loader;
+    ctx->loader_ctx = loader_ctx;
+    ctx->ui_method = ui_method;
+    ctx->ui_data = ui_data;
+    ctx->post_process = post_process;
+    ctx->post_process_data = post_process_data;
+
+    /*
+     * If the attempt to open with the 'file' scheme loader failed and the
+     * other scheme loader succeeded, the failure to open with the 'file'
+     * scheme loader leaves an error on the error stack.  Let's remove it.
+     */
+    ERR_pop_to_mark();
+
+    return ctx;
+
+ err:
+    ERR_clear_last_mark();
+    if (loader_ctx != NULL) {
+        /*
+         * We ignore a returned error because we will return NULL anyway in
+         * this case, so if something goes wrong when closing, that'll simply
+         * just add another entry on the error stack.
+         */
+        (void)loader->close(loader_ctx);
+    }
+    return NULL;
+}
+
+int OSSL_STORE_ctrl(OSSL_STORE_CTX *ctx, int cmd, ...)
+{
+    va_list args;
+    int ret;
+
+    va_start(args, cmd);
+    ret = OSSL_STORE_vctrl(ctx, cmd, args);
+    va_end(args);
+
+    return ret;
+}
+
+int OSSL_STORE_vctrl(OSSL_STORE_CTX *ctx, int cmd, va_list args)
+{
+    if (ctx->loader->ctrl != NULL)
+        return ctx->loader->ctrl(ctx->loader_ctx, cmd, args);
+    return 0;
+}
+
+int OSSL_STORE_expect(OSSL_STORE_CTX *ctx, int expected_type)
+{
+    if (ctx->loading) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_EXPECT,
+                      OSSL_STORE_R_LOADING_STARTED);
+        return 0;
+    }
+
+    ctx->expected_type = expected_type;
+    if (ctx->loader->expect != NULL)
+        return ctx->loader->expect(ctx->loader_ctx, expected_type);
+    return 1;
+}
+
+int OSSL_STORE_find(OSSL_STORE_CTX *ctx, OSSL_STORE_SEARCH *search)
+{
+    if (ctx->loading) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_FIND,
+                      OSSL_STORE_R_LOADING_STARTED);
+        return 0;
+    }
+    if (ctx->loader->find == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_FIND,
+                      OSSL_STORE_R_UNSUPPORTED_OPERATION);
+        return 0;
+    }
+
+    return ctx->loader->find(ctx->loader_ctx, search);
+}
+
+OSSL_STORE_INFO *OSSL_STORE_load(OSSL_STORE_CTX *ctx)
+{
+    OSSL_STORE_INFO *v = NULL;
+
+    ctx->loading = 1;
+ again:
+    if (OSSL_STORE_eof(ctx))
+        return NULL;
+
+    v = ctx->loader->load(ctx->loader_ctx, ctx->ui_method, ctx->ui_data);
+
+    if (ctx->post_process != NULL && v != NULL) {
+        v = ctx->post_process(v, ctx->post_process_data);
+
+        /*
+         * By returning NULL, the callback decides that this object should
+         * be ignored.
+         */
+        if (v == NULL)
+            goto again;
+    }
+
+    if (v != NULL && ctx->expected_type != 0) {
+        int returned_type = OSSL_STORE_INFO_get_type(v);
+
+        if (returned_type != OSSL_STORE_INFO_NAME && returned_type != 0) {
+            /*
+             * Soft assert here so those who want to harsly weed out faulty
+             * loaders can do so using a debugging version of libcrypto.
+             */
+            if (ctx->loader->expect != NULL)
+                assert(ctx->expected_type == returned_type);
+
+            if (ctx->expected_type != returned_type) {
+                OSSL_STORE_INFO_free(v);
+                goto again;
+            }
+        }
+    }
+
+    return v;
+}
+
+int OSSL_STORE_error(OSSL_STORE_CTX *ctx)
+{
+    return ctx->loader->error(ctx->loader_ctx);
+}
+
+int OSSL_STORE_eof(OSSL_STORE_CTX *ctx)
+{
+    return ctx->loader->eof(ctx->loader_ctx);
+}
+
+int OSSL_STORE_close(OSSL_STORE_CTX *ctx)
+{
+    int loader_ret = ctx->loader->close(ctx->loader_ctx);
+
+    OPENSSL_free(ctx);
+    return loader_ret;
+}
+
+/*
+ * Functions to generate OSSL_STORE_INFOs, one function for each type we
+ * support having in them as well as a generic constructor.
+ *
+ * In all cases, ownership of the object is transfered to the OSSL_STORE_INFO
+ * and will therefore be freed when the OSSL_STORE_INFO is freed.
+ */
+static OSSL_STORE_INFO *store_info_new(int type, void *data)
+{
+    OSSL_STORE_INFO *info = OPENSSL_zalloc(sizeof(*info));
+
+    if (info == NULL)
+        return NULL;
+
+    info->type = type;
+    info->_.data = data;
+    return info;
+}
+
+OSSL_STORE_INFO *OSSL_STORE_INFO_new_NAME(char *name)
+{
+    OSSL_STORE_INFO *info = store_info_new(OSSL_STORE_INFO_NAME, NULL);
+
+    if (info == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INFO_NEW_NAME,
+                      ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    info->_.name.name = name;
+    info->_.name.desc = NULL;
+
+    return info;
+}
+
+int OSSL_STORE_INFO_set0_NAME_description(OSSL_STORE_INFO *info, char *desc)
+{
+    if (info->type != OSSL_STORE_INFO_NAME) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INFO_SET0_NAME_DESCRIPTION,
+                      ERR_R_PASSED_INVALID_ARGUMENT);
+        return 0;
+    }
+
+    info->_.name.desc = desc;
+
+    return 1;
+}
+OSSL_STORE_INFO *OSSL_STORE_INFO_new_PARAMS(EVP_PKEY *params)
+{
+    OSSL_STORE_INFO *info = store_info_new(OSSL_STORE_INFO_PARAMS, params);
+
+    if (info == NULL)
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INFO_NEW_PARAMS,
+                      ERR_R_MALLOC_FAILURE);
+    return info;
+}
+
+OSSL_STORE_INFO *OSSL_STORE_INFO_new_PKEY(EVP_PKEY *pkey)
+{
+    OSSL_STORE_INFO *info = store_info_new(OSSL_STORE_INFO_PKEY, pkey);
+
+    if (info == NULL)
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INFO_NEW_PKEY,
+                      ERR_R_MALLOC_FAILURE);
+    return info;
+}
+
+OSSL_STORE_INFO *OSSL_STORE_INFO_new_CERT(X509 *x509)
+{
+    OSSL_STORE_INFO *info = store_info_new(OSSL_STORE_INFO_CERT, x509);
+
+    if (info == NULL)
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INFO_NEW_CERT,
+                      ERR_R_MALLOC_FAILURE);
+    return info;
+}
+
+OSSL_STORE_INFO *OSSL_STORE_INFO_new_CRL(X509_CRL *crl)
+{
+    OSSL_STORE_INFO *info = store_info_new(OSSL_STORE_INFO_CRL, crl);
+
+    if (info == NULL)
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INFO_NEW_CRL,
+                      ERR_R_MALLOC_FAILURE);
+    return info;
+}
+
+/*
+ * Functions to try to extract data from a OSSL_STORE_INFO.
+ */
+int OSSL_STORE_INFO_get_type(const OSSL_STORE_INFO *info)
+{
+    return info->type;
+}
+
+const char *OSSL_STORE_INFO_get0_NAME(const OSSL_STORE_INFO *info)
+{
+    if (info->type == OSSL_STORE_INFO_NAME)
+        return info->_.name.name;
+    return NULL;
+}
+
+char *OSSL_STORE_INFO_get1_NAME(const OSSL_STORE_INFO *info)
+{
+    if (info->type == OSSL_STORE_INFO_NAME) {
+        char *ret = OPENSSL_strdup(info->_.name.name);
+
+        if (ret == NULL)
+            OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INFO_GET1_NAME,
+                          ERR_R_MALLOC_FAILURE);
+        return ret;
+    }
+    OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INFO_GET1_NAME,
+                  OSSL_STORE_R_NOT_A_NAME);
+    return NULL;
+}
+
+const char *OSSL_STORE_INFO_get0_NAME_description(const OSSL_STORE_INFO *info)
+{
+    if (info->type == OSSL_STORE_INFO_NAME)
+        return info->_.name.desc;
+    return NULL;
+}
+
+char *OSSL_STORE_INFO_get1_NAME_description(const OSSL_STORE_INFO *info)
+{
+    if (info->type == OSSL_STORE_INFO_NAME) {
+        char *ret = OPENSSL_strdup(info->_.name.desc
+                                   ? info->_.name.desc : "");
+
+        if (ret == NULL)
+            OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INFO_GET1_NAME_DESCRIPTION,
+                     ERR_R_MALLOC_FAILURE);
+        return ret;
+    }
+    OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INFO_GET1_NAME_DESCRIPTION,
+                  OSSL_STORE_R_NOT_A_NAME);
+    return NULL;
+}
+
+EVP_PKEY *OSSL_STORE_INFO_get0_PARAMS(const OSSL_STORE_INFO *info)
+{
+    if (info->type == OSSL_STORE_INFO_PARAMS)
+        return info->_.params;
+    return NULL;
+}
+
+EVP_PKEY *OSSL_STORE_INFO_get1_PARAMS(const OSSL_STORE_INFO *info)
+{
+    if (info->type == OSSL_STORE_INFO_PARAMS) {
+        EVP_PKEY_up_ref(info->_.params);
+        return info->_.params;
+    }
+    OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INFO_GET1_PARAMS,
+                  OSSL_STORE_R_NOT_PARAMETERS);
+    return NULL;
+}
+
+EVP_PKEY *OSSL_STORE_INFO_get0_PKEY(const OSSL_STORE_INFO *info)
+{
+    if (info->type == OSSL_STORE_INFO_PKEY)
+        return info->_.pkey;
+    return NULL;
+}
+
+EVP_PKEY *OSSL_STORE_INFO_get1_PKEY(const OSSL_STORE_INFO *info)
+{
+    if (info->type == OSSL_STORE_INFO_PKEY) {
+        EVP_PKEY_up_ref(info->_.pkey);
+        return info->_.pkey;
+    }
+    OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INFO_GET1_PKEY,
+                  OSSL_STORE_R_NOT_A_KEY);
+    return NULL;
+}
+
+X509 *OSSL_STORE_INFO_get0_CERT(const OSSL_STORE_INFO *info)
+{
+    if (info->type == OSSL_STORE_INFO_CERT)
+        return info->_.x509;
+    return NULL;
+}
+
+X509 *OSSL_STORE_INFO_get1_CERT(const OSSL_STORE_INFO *info)
+{
+    if (info->type == OSSL_STORE_INFO_CERT) {
+        X509_up_ref(info->_.x509);
+        return info->_.x509;
+    }
+    OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INFO_GET1_CERT,
+                  OSSL_STORE_R_NOT_A_CERTIFICATE);
+    return NULL;
+}
+
+X509_CRL *OSSL_STORE_INFO_get0_CRL(const OSSL_STORE_INFO *info)
+{
+    if (info->type == OSSL_STORE_INFO_CRL)
+        return info->_.crl;
+    return NULL;
+}
+
+X509_CRL *OSSL_STORE_INFO_get1_CRL(const OSSL_STORE_INFO *info)
+{
+    if (info->type == OSSL_STORE_INFO_CRL) {
+        X509_CRL_up_ref(info->_.crl);
+        return info->_.crl;
+    }
+    OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INFO_GET1_CRL,
+                  OSSL_STORE_R_NOT_A_CRL);
+    return NULL;
+}
+
+/*
+ * Free the OSSL_STORE_INFO
+ */
+void OSSL_STORE_INFO_free(OSSL_STORE_INFO *info)
+{
+    if (info != NULL) {
+        switch (info->type) {
+        case OSSL_STORE_INFO_EMBEDDED:
+            BUF_MEM_free(info->_.embedded.blob);
+            OPENSSL_free(info->_.embedded.pem_name);
+            break;
+        case OSSL_STORE_INFO_NAME:
+            OPENSSL_free(info->_.name.name);
+            OPENSSL_free(info->_.name.desc);
+            break;
+        case OSSL_STORE_INFO_PARAMS:
+            EVP_PKEY_free(info->_.params);
+            break;
+        case OSSL_STORE_INFO_PKEY:
+            EVP_PKEY_free(info->_.pkey);
+            break;
+        case OSSL_STORE_INFO_CERT:
+            X509_free(info->_.x509);
+            break;
+        case OSSL_STORE_INFO_CRL:
+            X509_CRL_free(info->_.crl);
+            break;
+        }
+        OPENSSL_free(info);
+    }
+}
+
+int OSSL_STORE_supports_search(OSSL_STORE_CTX *ctx, int search_type)
+{
+    OSSL_STORE_SEARCH tmp_search;
+
+    if (ctx->loader->find == NULL)
+        return 0;
+    tmp_search.search_type = search_type;
+    return ctx->loader->find(NULL, &tmp_search);
+}
+
+/* Search term constructors */
+OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_name(X509_NAME *name)
+{
+    OSSL_STORE_SEARCH *search = OPENSSL_zalloc(sizeof(*search));
+
+    if (search == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_SEARCH_BY_NAME,
+                      ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    search->search_type = OSSL_STORE_SEARCH_BY_NAME;
+    search->name = name;
+    return search;
+}
+
+OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_issuer_serial(X509_NAME *name,
+                                                    const ASN1_INTEGER *serial)
+{
+    OSSL_STORE_SEARCH *search = OPENSSL_zalloc(sizeof(*search));
+
+    if (search == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_SEARCH_BY_ISSUER_SERIAL,
+                      ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    search->search_type = OSSL_STORE_SEARCH_BY_ISSUER_SERIAL;
+    search->name = name;
+    search->serial = serial;
+    return search;
+}
+
+OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_key_fingerprint(const EVP_MD *digest,
+                                                        const unsigned char
+                                                        *bytes, size_t len)
+{
+    OSSL_STORE_SEARCH *search = OPENSSL_zalloc(sizeof(*search));
+
+    if (search == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT,
+                      ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if (digest != NULL && len != (size_t)EVP_MD_size(digest)) {
+        char buf1[20], buf2[20];
+
+        BIO_snprintf(buf1, sizeof(buf1), "%d", EVP_MD_size(digest));
+        BIO_snprintf(buf2, sizeof(buf2), "%zu", len);
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT,
+                      OSSL_STORE_R_FINGERPRINT_SIZE_DOES_NOT_MATCH_DIGEST);
+        ERR_add_error_data(5, EVP_MD_name(digest), " size is ", buf1,
+                           ", fingerprint size is ", buf2);
+    }
+
+    search->search_type = OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT;
+    search->digest = digest;
+    search->string = bytes;
+    search->stringlength = len;
+    return search;
+}
+
+OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_alias(const char *alias)
+{
+    OSSL_STORE_SEARCH *search = OPENSSL_zalloc(sizeof(*search));
+
+    if (search == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_SEARCH_BY_ALIAS,
+                      ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    search->search_type = OSSL_STORE_SEARCH_BY_ALIAS;
+    search->string = (const unsigned char *)alias;
+    search->stringlength = strlen(alias);
+    return search;
+}
+
+/* Search term destructor */
+void OSSL_STORE_SEARCH_free(OSSL_STORE_SEARCH *search)
+{
+    OPENSSL_free(search);
+}
+
+/* Search term accessors */
+int OSSL_STORE_SEARCH_get_type(const OSSL_STORE_SEARCH *criterion)
+{
+    return criterion->search_type;
+}
+
+X509_NAME *OSSL_STORE_SEARCH_get0_name(OSSL_STORE_SEARCH *criterion)
+{
+    return criterion->name;
+}
+
+const ASN1_INTEGER *OSSL_STORE_SEARCH_get0_serial(const OSSL_STORE_SEARCH
+                                                 *criterion)
+{
+    return criterion->serial;
+}
+
+const unsigned char *OSSL_STORE_SEARCH_get0_bytes(const OSSL_STORE_SEARCH
+                                                  *criterion, size_t *length)
+{
+    *length = criterion->stringlength;
+    return criterion->string;
+}
+
+const char *OSSL_STORE_SEARCH_get0_string(const OSSL_STORE_SEARCH *criterion)
+{
+    return (const char *)criterion->string;
+}
+
+const EVP_MD *OSSL_STORE_SEARCH_get0_digest(const OSSL_STORE_SEARCH *criterion)
+{
+    return criterion->digest;
+}
+
+/* Internal functions */
+OSSL_STORE_INFO *ossl_store_info_new_EMBEDDED(const char *new_pem_name,
+                                              BUF_MEM *embedded)
+{
+    OSSL_STORE_INFO *info = store_info_new(OSSL_STORE_INFO_EMBEDDED, NULL);
+
+    if (info == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INFO_NEW_EMBEDDED,
+                      ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    info->_.embedded.blob = embedded;
+    info->_.embedded.pem_name =
+        new_pem_name == NULL ? NULL : OPENSSL_strdup(new_pem_name);
+
+    if (new_pem_name != NULL && info->_.embedded.pem_name == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_INFO_NEW_EMBEDDED,
+                      ERR_R_MALLOC_FAILURE);
+        OSSL_STORE_INFO_free(info);
+        info = NULL;
+    }
+
+    return info;
+}
+
+BUF_MEM *ossl_store_info_get0_EMBEDDED_buffer(OSSL_STORE_INFO *info)
+{
+    if (info->type == OSSL_STORE_INFO_EMBEDDED)
+        return info->_.embedded.blob;
+    return NULL;
+}
+
+char *ossl_store_info_get0_EMBEDDED_pem_name(OSSL_STORE_INFO *info)
+{
+    if (info->type == OSSL_STORE_INFO_EMBEDDED)
+        return info->_.embedded.pem_name;
+    return NULL;
+}
+
+OSSL_STORE_CTX *ossl_store_attach_pem_bio(BIO *bp, const UI_METHOD *ui_method,
+                                          void *ui_data)
+{
+    OSSL_STORE_CTX *ctx = NULL;
+    const OSSL_STORE_LOADER *loader = NULL;
+    OSSL_STORE_LOADER_CTX *loader_ctx = NULL;
+
+    if ((loader = ossl_store_get0_loader_int("file")) == NULL
+        || ((loader_ctx = ossl_store_file_attach_pem_bio_int(bp)) == NULL))
+        goto done;
+    if ((ctx = OPENSSL_zalloc(sizeof(*ctx))) == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_ATTACH_PEM_BIO,
+                     ERR_R_MALLOC_FAILURE);
+        goto done;
+    }
+
+    ctx->loader = loader;
+    ctx->loader_ctx = loader_ctx;
+    loader_ctx = NULL;
+    ctx->ui_method = ui_method;
+    ctx->ui_data = ui_data;
+    ctx->post_process = NULL;
+    ctx->post_process_data = NULL;
+
+ done:
+    if (loader_ctx != NULL)
+        /*
+         * We ignore a returned error because we will return NULL anyway in
+         * this case, so if something goes wrong when closing, that'll simply
+         * just add another entry on the error stack.
+         */
+        (void)loader->close(loader_ctx);
+    return ctx;
+}
+
+int ossl_store_detach_pem_bio(OSSL_STORE_CTX *ctx)
+{
+    int loader_ret = ossl_store_file_detach_pem_bio_int(ctx->loader_ctx);
+
+    OPENSSL_free(ctx);
+    return loader_ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_locl.h
new file mode 100644
index 000000000..369dcb33f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_locl.h
@@ -0,0 +1,132 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/thread_once.h"
+#include <openssl/dsa.h>
+#include <openssl/engine.h>
+#include <openssl/evp.h>
+#include <openssl/lhash.h>
+#include <openssl/x509.h>
+#include <openssl/store.h>
+
+/*-
+ *  OSSL_STORE_INFO stuff
+ *  ---------------------
+ */
+
+struct ossl_store_info_st {
+    int type;
+    union {
+        void *data;              /* used internally as generic pointer */
+
+        struct {
+            BUF_MEM *blob;
+            char *pem_name;
+        } embedded;              /* when type == OSSL_STORE_INFO_EMBEDDED */
+
+        struct {
+            char *name;
+            char *desc;
+        } name;                  /* when type == OSSL_STORE_INFO_NAME */
+
+        EVP_PKEY *params;        /* when type == OSSL_STORE_INFO_PARAMS */
+        EVP_PKEY *pkey;          /* when type == OSSL_STORE_INFO_PKEY */
+        X509 *x509;              /* when type == OSSL_STORE_INFO_CERT */
+        X509_CRL *crl;           /* when type == OSSL_STORE_INFO_CRL */
+    } _;
+};
+
+DEFINE_STACK_OF(OSSL_STORE_INFO)
+
+/*
+ * EMBEDDED is a special type of OSSL_STORE_INFO, specially for the file
+ * handlers.  It should never reach a calling application or any engine.
+ * However, it can be used by a FILE_HANDLER's try_decode function to signal
+ * that it has decoded the incoming blob into a new blob, and that the
+ * attempted decoding should be immediately restarted with the new blob, using
+ * the new PEM name.
+ */
+/*
+ * Because this is an internal type, we don't make it public.
+ */
+#define OSSL_STORE_INFO_EMBEDDED       -1
+OSSL_STORE_INFO *ossl_store_info_new_EMBEDDED(const char *new_pem_name,
+                                              BUF_MEM *embedded);
+BUF_MEM *ossl_store_info_get0_EMBEDDED_buffer(OSSL_STORE_INFO *info);
+char *ossl_store_info_get0_EMBEDDED_pem_name(OSSL_STORE_INFO *info);
+
+/*-
+ *  OSSL_STORE_SEARCH stuff
+ *  -----------------------
+ */
+
+struct ossl_store_search_st {
+    int search_type;
+
+    /*
+     * Used by OSSL_STORE_SEARCH_BY_NAME and
+     * OSSL_STORE_SEARCH_BY_ISSUER_SERIAL
+     */
+    X509_NAME *name;
+
+    /* Used by OSSL_STORE_SEARCH_BY_ISSUER_SERIAL */
+    const ASN1_INTEGER *serial;
+
+    /* Used by OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT */
+    const EVP_MD *digest;
+
+    /*
+     * Used by OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT and
+     * OSSL_STORE_SEARCH_BY_ALIAS
+     */
+    const unsigned char *string;
+    size_t stringlength;
+};
+
+/*-
+ *  OSSL_STORE_LOADER stuff
+ *  -----------------------
+ */
+
+int ossl_store_register_loader_int(OSSL_STORE_LOADER *loader);
+OSSL_STORE_LOADER *ossl_store_unregister_loader_int(const char *scheme);
+
+/* loader stuff */
+struct ossl_store_loader_st {
+    const char *scheme;
+    ENGINE *engine;
+    OSSL_STORE_open_fn open;
+    OSSL_STORE_ctrl_fn ctrl;
+    OSSL_STORE_expect_fn expect;
+    OSSL_STORE_find_fn find;
+    OSSL_STORE_load_fn load;
+    OSSL_STORE_eof_fn eof;
+    OSSL_STORE_error_fn error;
+    OSSL_STORE_close_fn close;
+};
+DEFINE_LHASH_OF(OSSL_STORE_LOADER);
+
+const OSSL_STORE_LOADER *ossl_store_get0_loader_int(const char *scheme);
+void ossl_store_destroy_loaders_int(void);
+
+/*-
+ *  OSSL_STORE init stuff
+ *  ---------------------
+ */
+
+int ossl_store_init_once(void);
+int ossl_store_file_loader_init(void);
+
+/*-
+ *  'file' scheme stuff
+ *  -------------------
+ */
+
+OSSL_STORE_LOADER_CTX *ossl_store_file_attach_pem_bio_int(BIO *bp);
+int ossl_store_file_detach_pem_bio_int(OSSL_STORE_LOADER_CTX *ctx);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_register.c b/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_register.c
new file mode 100644
index 000000000..e68cb3c56
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_register.c
@@ -0,0 +1,297 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include "internal/ctype.h"
+#include <assert.h>
+
+#include <openssl/err.h>
+#include <openssl/lhash.h>
+#include "store_locl.h"
+
+static CRYPTO_RWLOCK *registry_lock;
+static CRYPTO_ONCE registry_init = CRYPTO_ONCE_STATIC_INIT;
+
+DEFINE_RUN_ONCE_STATIC(do_registry_init)
+{
+    registry_lock = CRYPTO_THREAD_lock_new();
+    return registry_lock != NULL;
+}
+
+/*
+ *  Functions for manipulating OSSL_STORE_LOADERs
+ */
+
+OSSL_STORE_LOADER *OSSL_STORE_LOADER_new(ENGINE *e, const char *scheme)
+{
+    OSSL_STORE_LOADER *res = NULL;
+
+    /*
+     * We usually don't check NULL arguments.  For loaders, though, the
+     * scheme is crucial and must never be NULL, or the user will get
+     * mysterious errors when trying to register the created loader
+     * later on.
+     */
+    if (scheme == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_LOADER_NEW,
+                      OSSL_STORE_R_INVALID_SCHEME);
+        return NULL;
+    }
+
+    if ((res = OPENSSL_zalloc(sizeof(*res))) == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_LOADER_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    res->engine = e;
+    res->scheme = scheme;
+    return res;
+}
+
+const ENGINE *OSSL_STORE_LOADER_get0_engine(const OSSL_STORE_LOADER *loader)
+{
+    return loader->engine;
+}
+
+const char *OSSL_STORE_LOADER_get0_scheme(const OSSL_STORE_LOADER *loader)
+{
+    return loader->scheme;
+}
+
+int OSSL_STORE_LOADER_set_open(OSSL_STORE_LOADER *loader,
+                               OSSL_STORE_open_fn open_function)
+{
+    loader->open = open_function;
+    return 1;
+}
+
+int OSSL_STORE_LOADER_set_ctrl(OSSL_STORE_LOADER *loader,
+                               OSSL_STORE_ctrl_fn ctrl_function)
+{
+    loader->ctrl = ctrl_function;
+    return 1;
+}
+
+int OSSL_STORE_LOADER_set_expect(OSSL_STORE_LOADER *loader,
+                                 OSSL_STORE_expect_fn expect_function)
+{
+    loader->expect = expect_function;
+    return 1;
+}
+
+int OSSL_STORE_LOADER_set_find(OSSL_STORE_LOADER *loader,
+                               OSSL_STORE_find_fn find_function)
+{
+    loader->find = find_function;
+    return 1;
+}
+
+int OSSL_STORE_LOADER_set_load(OSSL_STORE_LOADER *loader,
+                               OSSL_STORE_load_fn load_function)
+{
+    loader->load = load_function;
+    return 1;
+}
+
+int OSSL_STORE_LOADER_set_eof(OSSL_STORE_LOADER *loader,
+                              OSSL_STORE_eof_fn eof_function)
+{
+    loader->eof = eof_function;
+    return 1;
+}
+
+int OSSL_STORE_LOADER_set_error(OSSL_STORE_LOADER *loader,
+                                OSSL_STORE_error_fn error_function)
+{
+    loader->error = error_function;
+    return 1;
+}
+
+int OSSL_STORE_LOADER_set_close(OSSL_STORE_LOADER *loader,
+                                OSSL_STORE_close_fn close_function)
+{
+    loader->close = close_function;
+    return 1;
+}
+
+void OSSL_STORE_LOADER_free(OSSL_STORE_LOADER *loader)
+{
+    OPENSSL_free(loader);
+}
+
+/*
+ *  Functions for registering OSSL_STORE_LOADERs
+ */
+
+static unsigned long store_loader_hash(const OSSL_STORE_LOADER *v)
+{
+    return OPENSSL_LH_strhash(v->scheme);
+}
+
+static int store_loader_cmp(const OSSL_STORE_LOADER *a,
+                            const OSSL_STORE_LOADER *b)
+{
+    assert(a->scheme != NULL && b->scheme != NULL);
+    return strcmp(a->scheme, b->scheme);
+}
+
+static LHASH_OF(OSSL_STORE_LOADER) *loader_register = NULL;
+
+int ossl_store_register_loader_int(OSSL_STORE_LOADER *loader)
+{
+    const char *scheme = loader->scheme;
+    int ok = 0;
+
+    /*
+     * Check that the given scheme conforms to correct scheme syntax as per
+     * RFC 3986:
+     *
+     * scheme        = ALPHA *( ALPHA / DIGIT / "+" / "-" / "." )
+     */
+    if (ossl_isalpha(*scheme))
+        while (*scheme != '\0'
+               && (ossl_isalpha(*scheme)
+                   || ossl_isdigit(*scheme)
+                   || strchr("+-.", *scheme) != NULL))
+            scheme++;
+    if (*scheme != '\0') {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_REGISTER_LOADER_INT,
+                      OSSL_STORE_R_INVALID_SCHEME);
+        ERR_add_error_data(2, "scheme=", loader->scheme);
+        return 0;
+    }
+
+    /* Check that functions we absolutely require are present */
+    if (loader->open == NULL || loader->load == NULL || loader->eof == NULL
+        || loader->error == NULL || loader->close == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_REGISTER_LOADER_INT,
+                      OSSL_STORE_R_LOADER_INCOMPLETE);
+        return 0;
+    }
+
+    if (!RUN_ONCE(&registry_init, do_registry_init)) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_REGISTER_LOADER_INT,
+                      ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    CRYPTO_THREAD_write_lock(registry_lock);
+
+    if (loader_register == NULL) {
+        loader_register = lh_OSSL_STORE_LOADER_new(store_loader_hash,
+                                                   store_loader_cmp);
+    }
+
+    if (loader_register != NULL
+        && (lh_OSSL_STORE_LOADER_insert(loader_register, loader) != NULL
+            || lh_OSSL_STORE_LOADER_error(loader_register) == 0))
+        ok = 1;
+
+    CRYPTO_THREAD_unlock(registry_lock);
+
+    return ok;
+}
+int OSSL_STORE_register_loader(OSSL_STORE_LOADER *loader)
+{
+    if (!ossl_store_init_once())
+        return 0;
+    return ossl_store_register_loader_int(loader);
+}
+
+const OSSL_STORE_LOADER *ossl_store_get0_loader_int(const char *scheme)
+{
+    OSSL_STORE_LOADER template;
+    OSSL_STORE_LOADER *loader = NULL;
+
+    template.scheme = scheme;
+    template.open = NULL;
+    template.load = NULL;
+    template.eof = NULL;
+    template.close = NULL;
+
+    if (!ossl_store_init_once())
+        return NULL;
+
+    if (!RUN_ONCE(&registry_init, do_registry_init)) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_GET0_LOADER_INT,
+                      ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    CRYPTO_THREAD_write_lock(registry_lock);
+
+    loader = lh_OSSL_STORE_LOADER_retrieve(loader_register, &template);
+
+    if (loader == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_GET0_LOADER_INT,
+                      OSSL_STORE_R_UNREGISTERED_SCHEME);
+        ERR_add_error_data(2, "scheme=", scheme);
+    }
+
+    CRYPTO_THREAD_unlock(registry_lock);
+
+    return loader;
+}
+
+OSSL_STORE_LOADER *ossl_store_unregister_loader_int(const char *scheme)
+{
+    OSSL_STORE_LOADER template;
+    OSSL_STORE_LOADER *loader = NULL;
+
+    template.scheme = scheme;
+    template.open = NULL;
+    template.load = NULL;
+    template.eof = NULL;
+    template.close = NULL;
+
+    if (!RUN_ONCE(&registry_init, do_registry_init)) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_UNREGISTER_LOADER_INT,
+                      ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    CRYPTO_THREAD_write_lock(registry_lock);
+
+    loader = lh_OSSL_STORE_LOADER_delete(loader_register, &template);
+
+    if (loader == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_UNREGISTER_LOADER_INT,
+                      OSSL_STORE_R_UNREGISTERED_SCHEME);
+        ERR_add_error_data(2, "scheme=", scheme);
+    }
+
+    CRYPTO_THREAD_unlock(registry_lock);
+
+    return loader;
+}
+OSSL_STORE_LOADER *OSSL_STORE_unregister_loader(const char *scheme)
+{
+    if (!ossl_store_init_once())
+        return 0;
+    return ossl_store_unregister_loader_int(scheme);
+}
+
+void ossl_store_destroy_loaders_int(void)
+{
+    assert(lh_OSSL_STORE_LOADER_num_items(loader_register) == 0);
+    lh_OSSL_STORE_LOADER_free(loader_register);
+    loader_register = NULL;
+    CRYPTO_THREAD_lock_free(registry_lock);
+    registry_lock = NULL;
+}
+
+/*
+ *  Functions to list OSSL_STORE loaders
+ */
+
+IMPLEMENT_LHASH_DOALL_ARG_CONST(OSSL_STORE_LOADER, void);
+int OSSL_STORE_do_all_loaders(void (*do_function) (const OSSL_STORE_LOADER
+                                                   *loader, void *do_arg),
+                              void *do_arg)
+{
+    lh_OSSL_STORE_LOADER_doall_void(loader_register, do_function, do_arg);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_strings.c b/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_strings.c
new file mode 100644
index 000000000..76cf31648
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/store/store_strings.c
@@ -0,0 +1,28 @@
+/*
+ * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/store.h>
+
+static char *type_strings[] = {
+    "Name",                      /* OSSL_STORE_INFO_NAME */
+    "Parameters",                /* OSSL_STORE_INFO_PARAMS */
+    "Pkey",                      /* OSSL_STORE_INFO_PKEY */
+    "Certificate",               /* OSSL_STORE_INFO_CERT */
+    "CRL"                        /* OSSL_STORE_INFO_CRL */
+};
+
+const char *OSSL_STORE_INFO_type_string(int type)
+{
+    int types = sizeof(type_strings) / sizeof(type_strings[0]);
+
+    if (type < 1 || type > types)
+        return NULL;
+
+    return type_strings[type - 1];
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/threads_none.c b/trunk/3rdparty/openssl-1.1-fit/crypto/threads_none.c
new file mode 100644
index 000000000..4b1940ae4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/threads_none.c
@@ -0,0 +1,136 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/crypto.h>
+#include "internal/cryptlib.h"
+
+#if !defined(OPENSSL_THREADS) || defined(CRYPTO_TDEBUG)
+
+CRYPTO_RWLOCK *CRYPTO_THREAD_lock_new(void)
+{
+    CRYPTO_RWLOCK *lock;
+
+    if ((lock = OPENSSL_zalloc(sizeof(unsigned int))) == NULL) {
+        /* Don't set error, to avoid recursion blowup. */
+        return NULL;
+    }
+
+    *(unsigned int *)lock = 1;
+
+    return lock;
+}
+
+int CRYPTO_THREAD_read_lock(CRYPTO_RWLOCK *lock)
+{
+    if (!ossl_assert(*(unsigned int *)lock == 1))
+        return 0;
+    return 1;
+}
+
+int CRYPTO_THREAD_write_lock(CRYPTO_RWLOCK *lock)
+{
+    if (!ossl_assert(*(unsigned int *)lock == 1))
+        return 0;
+    return 1;
+}
+
+int CRYPTO_THREAD_unlock(CRYPTO_RWLOCK *lock)
+{
+    if (!ossl_assert(*(unsigned int *)lock == 1))
+        return 0;
+    return 1;
+}
+
+void CRYPTO_THREAD_lock_free(CRYPTO_RWLOCK *lock) {
+    if (lock == NULL)
+        return;
+
+    *(unsigned int *)lock = 0;
+    OPENSSL_free(lock);
+
+    return;
+}
+
+int CRYPTO_THREAD_run_once(CRYPTO_ONCE *once, void (*init)(void))
+{
+    if (*once != 0)
+        return 1;
+
+    init();
+    *once = 1;
+
+    return 1;
+}
+
+#define OPENSSL_CRYPTO_THREAD_LOCAL_KEY_MAX 256
+
+static void *thread_local_storage[OPENSSL_CRYPTO_THREAD_LOCAL_KEY_MAX];
+
+int CRYPTO_THREAD_init_local(CRYPTO_THREAD_LOCAL *key, void (*cleanup)(void *))
+{
+    static unsigned int thread_local_key = 0;
+
+    if (thread_local_key >= OPENSSL_CRYPTO_THREAD_LOCAL_KEY_MAX)
+        return 0;
+
+    *key = thread_local_key++;
+
+    thread_local_storage[*key] = NULL;
+
+    return 1;
+}
+
+void *CRYPTO_THREAD_get_local(CRYPTO_THREAD_LOCAL *key)
+{
+    if (*key >= OPENSSL_CRYPTO_THREAD_LOCAL_KEY_MAX)
+        return NULL;
+
+    return thread_local_storage[*key];
+}
+
+int CRYPTO_THREAD_set_local(CRYPTO_THREAD_LOCAL *key, void *val)
+{
+    if (*key >= OPENSSL_CRYPTO_THREAD_LOCAL_KEY_MAX)
+        return 0;
+
+    thread_local_storage[*key] = val;
+
+    return 1;
+}
+
+int CRYPTO_THREAD_cleanup_local(CRYPTO_THREAD_LOCAL *key)
+{
+    *key = OPENSSL_CRYPTO_THREAD_LOCAL_KEY_MAX + 1;
+    return 1;
+}
+
+CRYPTO_THREAD_ID CRYPTO_THREAD_get_current_id(void)
+{
+    return 0;
+}
+
+int CRYPTO_THREAD_compare_id(CRYPTO_THREAD_ID a, CRYPTO_THREAD_ID b)
+{
+    return (a == b);
+}
+
+int CRYPTO_atomic_add(int *val, int amount, int *ret, CRYPTO_RWLOCK *lock)
+{
+    *val += amount;
+    *ret  = *val;
+
+    return 1;
+}
+
+int openssl_init_fork_handlers(void)
+{
+    return 0;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/threads_pthread.c b/trunk/3rdparty/openssl-1.1-fit/crypto/threads_pthread.c
new file mode 100644
index 000000000..5a59779eb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/threads_pthread.c
@@ -0,0 +1,196 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/crypto.h>
+#include "internal/cryptlib.h"
+
+#if defined(OPENSSL_THREADS) && !defined(CRYPTO_TDEBUG) && !defined(OPENSSL_SYS_WINDOWS)
+
+# ifdef PTHREAD_RWLOCK_INITIALIZER
+#  define USE_RWLOCK
+# endif
+
+CRYPTO_RWLOCK *CRYPTO_THREAD_lock_new(void)
+{
+# ifdef USE_RWLOCK
+    CRYPTO_RWLOCK *lock;
+
+    if ((lock = OPENSSL_zalloc(sizeof(pthread_rwlock_t))) == NULL) {
+        /* Don't set error, to avoid recursion blowup. */
+        return NULL;
+    }
+
+    if (pthread_rwlock_init(lock, NULL) != 0) {
+        OPENSSL_free(lock);
+        return NULL;
+    }
+# else
+    pthread_mutexattr_t attr;
+    CRYPTO_RWLOCK *lock;
+
+    if ((lock = OPENSSL_zalloc(sizeof(pthread_mutex_t))) == NULL) {
+        /* Don't set error, to avoid recursion blowup. */
+        return NULL;
+    }
+
+    pthread_mutexattr_init(&attr);
+    pthread_mutexattr_settype(&attr, PTHREAD_MUTEX_RECURSIVE);
+
+    if (pthread_mutex_init(lock, &attr) != 0) {
+        pthread_mutexattr_destroy(&attr);
+        OPENSSL_free(lock);
+        return NULL;
+    }
+
+    pthread_mutexattr_destroy(&attr);
+# endif
+
+    return lock;
+}
+
+int CRYPTO_THREAD_read_lock(CRYPTO_RWLOCK *lock)
+{
+# ifdef USE_RWLOCK
+    if (pthread_rwlock_rdlock(lock) != 0)
+        return 0;
+# else
+    if (pthread_mutex_lock(lock) != 0)
+        return 0;
+# endif
+
+    return 1;
+}
+
+int CRYPTO_THREAD_write_lock(CRYPTO_RWLOCK *lock)
+{
+# ifdef USE_RWLOCK
+    if (pthread_rwlock_wrlock(lock) != 0)
+        return 0;
+# else
+    if (pthread_mutex_lock(lock) != 0)
+        return 0;
+# endif
+
+    return 1;
+}
+
+int CRYPTO_THREAD_unlock(CRYPTO_RWLOCK *lock)
+{
+# ifdef USE_RWLOCK
+    if (pthread_rwlock_unlock(lock) != 0)
+        return 0;
+# else
+    if (pthread_mutex_unlock(lock) != 0)
+        return 0;
+# endif
+
+    return 1;
+}
+
+void CRYPTO_THREAD_lock_free(CRYPTO_RWLOCK *lock)
+{
+    if (lock == NULL)
+        return;
+
+# ifdef USE_RWLOCK
+    pthread_rwlock_destroy(lock);
+# else
+    pthread_mutex_destroy(lock);
+# endif
+    OPENSSL_free(lock);
+
+    return;
+}
+
+int CRYPTO_THREAD_run_once(CRYPTO_ONCE *once, void (*init)(void))
+{
+    if (pthread_once(once, init) != 0)
+        return 0;
+
+    return 1;
+}
+
+int CRYPTO_THREAD_init_local(CRYPTO_THREAD_LOCAL *key, void (*cleanup)(void *))
+{
+    if (pthread_key_create(key, cleanup) != 0)
+        return 0;
+
+    return 1;
+}
+
+void *CRYPTO_THREAD_get_local(CRYPTO_THREAD_LOCAL *key)
+{
+    return pthread_getspecific(*key);
+}
+
+int CRYPTO_THREAD_set_local(CRYPTO_THREAD_LOCAL *key, void *val)
+{
+    if (pthread_setspecific(*key, val) != 0)
+        return 0;
+
+    return 1;
+}
+
+int CRYPTO_THREAD_cleanup_local(CRYPTO_THREAD_LOCAL *key)
+{
+    if (pthread_key_delete(*key) != 0)
+        return 0;
+
+    return 1;
+}
+
+CRYPTO_THREAD_ID CRYPTO_THREAD_get_current_id(void)
+{
+    return pthread_self();
+}
+
+int CRYPTO_THREAD_compare_id(CRYPTO_THREAD_ID a, CRYPTO_THREAD_ID b)
+{
+    return pthread_equal(a, b);
+}
+
+int CRYPTO_atomic_add(int *val, int amount, int *ret, CRYPTO_RWLOCK *lock)
+{
+# if defined(__GNUC__) && defined(__ATOMIC_ACQ_REL)
+    if (__atomic_is_lock_free(sizeof(*val), val)) {
+        *ret = __atomic_add_fetch(val, amount, __ATOMIC_ACQ_REL);
+        return 1;
+    }
+# endif
+    if (!CRYPTO_THREAD_write_lock(lock))
+        return 0;
+
+    *val += amount;
+    *ret  = *val;
+
+    if (!CRYPTO_THREAD_unlock(lock))
+        return 0;
+
+    return 1;
+}
+
+# ifdef OPENSSL_SYS_UNIX
+static pthread_once_t fork_once_control = PTHREAD_ONCE_INIT;
+
+static void fork_once_func(void)
+{
+    pthread_atfork(OPENSSL_fork_prepare,
+                   OPENSSL_fork_parent, OPENSSL_fork_child);
+}
+# endif
+
+int openssl_init_fork_handlers(void)
+{
+# ifdef OPENSSL_SYS_UNIX
+    if (pthread_once(&fork_once_control, fork_once_func) == 0)
+        return 1;
+# endif
+    return 0;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/threads_win.c b/trunk/3rdparty/openssl-1.1-fit/crypto/threads_win.c
new file mode 100644
index 000000000..d8fdfb74f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/threads_win.c
@@ -0,0 +1,163 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#if defined(_WIN32)
+# include <windows.h>
+#endif
+
+#include <openssl/crypto.h>
+
+#if defined(OPENSSL_THREADS) && !defined(CRYPTO_TDEBUG) && defined(OPENSSL_SYS_WINDOWS)
+
+CRYPTO_RWLOCK *CRYPTO_THREAD_lock_new(void)
+{
+    CRYPTO_RWLOCK *lock;
+
+    if ((lock = OPENSSL_zalloc(sizeof(CRITICAL_SECTION))) == NULL) {
+        /* Don't set error, to avoid recursion blowup. */
+        return NULL;
+    }
+
+    /* 0x400 is the spin count value suggested in the documentation */
+    if (!InitializeCriticalSectionAndSpinCount(lock, 0x400)) {
+        OPENSSL_free(lock);
+        return NULL;
+    }
+
+    return lock;
+}
+
+int CRYPTO_THREAD_read_lock(CRYPTO_RWLOCK *lock)
+{
+    EnterCriticalSection(lock);
+    return 1;
+}
+
+int CRYPTO_THREAD_write_lock(CRYPTO_RWLOCK *lock)
+{
+    EnterCriticalSection(lock);
+    return 1;
+}
+
+int CRYPTO_THREAD_unlock(CRYPTO_RWLOCK *lock)
+{
+    LeaveCriticalSection(lock);
+    return 1;
+}
+
+void CRYPTO_THREAD_lock_free(CRYPTO_RWLOCK *lock)
+{
+    if (lock == NULL)
+        return;
+
+    DeleteCriticalSection(lock);
+    OPENSSL_free(lock);
+
+    return;
+}
+
+#  define ONCE_UNINITED     0
+#  define ONCE_ININIT       1
+#  define ONCE_DONE         2
+
+/*
+ * We don't use InitOnceExecuteOnce because that isn't available in WinXP which
+ * we still have to support.
+ */
+int CRYPTO_THREAD_run_once(CRYPTO_ONCE *once, void (*init)(void))
+{
+    LONG volatile *lock = (LONG *)once;
+    LONG result;
+
+    if (*lock == ONCE_DONE)
+        return 1;
+
+    do {
+        result = InterlockedCompareExchange(lock, ONCE_ININIT, ONCE_UNINITED);
+        if (result == ONCE_UNINITED) {
+            init();
+            *lock = ONCE_DONE;
+            return 1;
+        }
+    } while (result == ONCE_ININIT);
+
+    return (*lock == ONCE_DONE);
+}
+
+int CRYPTO_THREAD_init_local(CRYPTO_THREAD_LOCAL *key, void (*cleanup)(void *))
+{
+    *key = TlsAlloc();
+    if (*key == TLS_OUT_OF_INDEXES)
+        return 0;
+
+    return 1;
+}
+
+void *CRYPTO_THREAD_get_local(CRYPTO_THREAD_LOCAL *key)
+{
+    DWORD last_error;
+    void *ret;
+
+    /*
+     * TlsGetValue clears the last error even on success, so that callers may
+     * distinguish it successfully returning NULL or failing. It is documented
+     * to never fail if the argument is a valid index from TlsAlloc, so we do
+     * not need to handle this.
+     *
+     * However, this error-mangling behavior interferes with the caller's use of
+     * GetLastError. In particular SSL_get_error queries the error queue to
+     * determine whether the caller should look at the OS's errors. To avoid
+     * destroying state, save and restore the Windows error.
+     *
+     * https://msdn.microsoft.com/en-us/library/windows/desktop/ms686812(v=vs.85).aspx
+     */
+    last_error = GetLastError();
+    ret = TlsGetValue(*key);
+    SetLastError(last_error);
+    return ret;
+}
+
+int CRYPTO_THREAD_set_local(CRYPTO_THREAD_LOCAL *key, void *val)
+{
+    if (TlsSetValue(*key, val) == 0)
+        return 0;
+
+    return 1;
+}
+
+int CRYPTO_THREAD_cleanup_local(CRYPTO_THREAD_LOCAL *key)
+{
+    if (TlsFree(*key) == 0)
+        return 0;
+
+    return 1;
+}
+
+CRYPTO_THREAD_ID CRYPTO_THREAD_get_current_id(void)
+{
+    return GetCurrentThreadId();
+}
+
+int CRYPTO_THREAD_compare_id(CRYPTO_THREAD_ID a, CRYPTO_THREAD_ID b)
+{
+    return (a == b);
+}
+
+int CRYPTO_atomic_add(int *val, int amount, int *ret, CRYPTO_RWLOCK *lock)
+{
+    *ret = InterlockedExchangeAdd(val, amount) + amount;
+    return 1;
+}
+
+int openssl_init_fork_handlers(void)
+{
+    return 0;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ts/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/build.info
new file mode 100644
index 000000000..98e633d57
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/build.info
@@ -0,0 +1,5 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        ts_err.c ts_req_utils.c ts_req_print.c ts_rsp_utils.c ts_rsp_print.c \
+        ts_rsp_sign.c ts_rsp_verify.c ts_verify_ctx.c ts_lib.c ts_conf.c \
+        ts_asn1.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_asn1.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_asn1.c
new file mode 100644
index 000000000..870720708
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_asn1.c
@@ -0,0 +1,276 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/ts.h>
+#include <openssl/err.h>
+#include <openssl/asn1t.h>
+#include "ts_lcl.h"
+
+ASN1_SEQUENCE(TS_MSG_IMPRINT) = {
+        ASN1_SIMPLE(TS_MSG_IMPRINT, hash_algo, X509_ALGOR),
+        ASN1_SIMPLE(TS_MSG_IMPRINT, hashed_msg, ASN1_OCTET_STRING)
+} static_ASN1_SEQUENCE_END(TS_MSG_IMPRINT)
+
+IMPLEMENT_ASN1_FUNCTIONS_const(TS_MSG_IMPRINT)
+IMPLEMENT_ASN1_DUP_FUNCTION(TS_MSG_IMPRINT)
+TS_MSG_IMPRINT *d2i_TS_MSG_IMPRINT_bio(BIO *bp, TS_MSG_IMPRINT **a)
+{
+    return ASN1_d2i_bio_of(TS_MSG_IMPRINT, TS_MSG_IMPRINT_new,
+                           d2i_TS_MSG_IMPRINT, bp, a);
+}
+
+int i2d_TS_MSG_IMPRINT_bio(BIO *bp, TS_MSG_IMPRINT *a)
+{
+    return ASN1_i2d_bio_of_const(TS_MSG_IMPRINT, i2d_TS_MSG_IMPRINT, bp, a);
+}
+#ifndef OPENSSL_NO_STDIO
+TS_MSG_IMPRINT *d2i_TS_MSG_IMPRINT_fp(FILE *fp, TS_MSG_IMPRINT **a)
+{
+    return ASN1_d2i_fp_of(TS_MSG_IMPRINT, TS_MSG_IMPRINT_new,
+                          d2i_TS_MSG_IMPRINT, fp, a);
+}
+
+int i2d_TS_MSG_IMPRINT_fp(FILE *fp, TS_MSG_IMPRINT *a)
+{
+    return ASN1_i2d_fp_of_const(TS_MSG_IMPRINT, i2d_TS_MSG_IMPRINT, fp, a);
+}
+#endif
+
+ASN1_SEQUENCE(TS_REQ) = {
+        ASN1_SIMPLE(TS_REQ, version, ASN1_INTEGER),
+        ASN1_SIMPLE(TS_REQ, msg_imprint, TS_MSG_IMPRINT),
+        ASN1_OPT(TS_REQ, policy_id, ASN1_OBJECT),
+        ASN1_OPT(TS_REQ, nonce, ASN1_INTEGER),
+        ASN1_OPT(TS_REQ, cert_req, ASN1_FBOOLEAN),
+        ASN1_IMP_SEQUENCE_OF_OPT(TS_REQ, extensions, X509_EXTENSION, 0)
+} static_ASN1_SEQUENCE_END(TS_REQ)
+
+IMPLEMENT_ASN1_FUNCTIONS_const(TS_REQ)
+IMPLEMENT_ASN1_DUP_FUNCTION(TS_REQ)
+TS_REQ *d2i_TS_REQ_bio(BIO *bp, TS_REQ **a)
+{
+    return ASN1_d2i_bio_of(TS_REQ, TS_REQ_new, d2i_TS_REQ, bp, a);
+}
+
+int i2d_TS_REQ_bio(BIO *bp, TS_REQ *a)
+{
+    return ASN1_i2d_bio_of_const(TS_REQ, i2d_TS_REQ, bp, a);
+}
+#ifndef OPENSSL_NO_STDIO
+TS_REQ *d2i_TS_REQ_fp(FILE *fp, TS_REQ **a)
+{
+    return ASN1_d2i_fp_of(TS_REQ, TS_REQ_new, d2i_TS_REQ, fp, a);
+}
+
+int i2d_TS_REQ_fp(FILE *fp, TS_REQ *a)
+{
+    return ASN1_i2d_fp_of_const(TS_REQ, i2d_TS_REQ, fp, a);
+}
+#endif
+
+ASN1_SEQUENCE(TS_ACCURACY) = {
+        ASN1_OPT(TS_ACCURACY, seconds, ASN1_INTEGER),
+        ASN1_IMP_OPT(TS_ACCURACY, millis, ASN1_INTEGER, 0),
+        ASN1_IMP_OPT(TS_ACCURACY, micros, ASN1_INTEGER, 1)
+} static_ASN1_SEQUENCE_END(TS_ACCURACY)
+
+IMPLEMENT_ASN1_FUNCTIONS_const(TS_ACCURACY)
+IMPLEMENT_ASN1_DUP_FUNCTION(TS_ACCURACY)
+
+ASN1_SEQUENCE(TS_TST_INFO) = {
+        ASN1_SIMPLE(TS_TST_INFO, version, ASN1_INTEGER),
+        ASN1_SIMPLE(TS_TST_INFO, policy_id, ASN1_OBJECT),
+        ASN1_SIMPLE(TS_TST_INFO, msg_imprint, TS_MSG_IMPRINT),
+        ASN1_SIMPLE(TS_TST_INFO, serial, ASN1_INTEGER),
+        ASN1_SIMPLE(TS_TST_INFO, time, ASN1_GENERALIZEDTIME),
+        ASN1_OPT(TS_TST_INFO, accuracy, TS_ACCURACY),
+        ASN1_OPT(TS_TST_INFO, ordering, ASN1_FBOOLEAN),
+        ASN1_OPT(TS_TST_INFO, nonce, ASN1_INTEGER),
+        ASN1_EXP_OPT(TS_TST_INFO, tsa, GENERAL_NAME, 0),
+        ASN1_IMP_SEQUENCE_OF_OPT(TS_TST_INFO, extensions, X509_EXTENSION, 1)
+} static_ASN1_SEQUENCE_END(TS_TST_INFO)
+
+IMPLEMENT_ASN1_FUNCTIONS_const(TS_TST_INFO)
+IMPLEMENT_ASN1_DUP_FUNCTION(TS_TST_INFO)
+TS_TST_INFO *d2i_TS_TST_INFO_bio(BIO *bp, TS_TST_INFO **a)
+{
+    return ASN1_d2i_bio_of(TS_TST_INFO, TS_TST_INFO_new, d2i_TS_TST_INFO, bp,
+                           a);
+}
+
+int i2d_TS_TST_INFO_bio(BIO *bp, TS_TST_INFO *a)
+{
+    return ASN1_i2d_bio_of_const(TS_TST_INFO, i2d_TS_TST_INFO, bp, a);
+}
+#ifndef OPENSSL_NO_STDIO
+TS_TST_INFO *d2i_TS_TST_INFO_fp(FILE *fp, TS_TST_INFO **a)
+{
+    return ASN1_d2i_fp_of(TS_TST_INFO, TS_TST_INFO_new, d2i_TS_TST_INFO, fp,
+                          a);
+}
+
+int i2d_TS_TST_INFO_fp(FILE *fp, TS_TST_INFO *a)
+{
+    return ASN1_i2d_fp_of_const(TS_TST_INFO, i2d_TS_TST_INFO, fp, a);
+}
+#endif
+
+ASN1_SEQUENCE(TS_STATUS_INFO) = {
+        ASN1_SIMPLE(TS_STATUS_INFO, status, ASN1_INTEGER),
+        ASN1_SEQUENCE_OF_OPT(TS_STATUS_INFO, text, ASN1_UTF8STRING),
+        ASN1_OPT(TS_STATUS_INFO, failure_info, ASN1_BIT_STRING)
+} static_ASN1_SEQUENCE_END(TS_STATUS_INFO)
+
+IMPLEMENT_ASN1_FUNCTIONS_const(TS_STATUS_INFO)
+IMPLEMENT_ASN1_DUP_FUNCTION(TS_STATUS_INFO)
+
+static int ts_resp_set_tst_info(TS_RESP *a)
+{
+    long status;
+
+    status = ASN1_INTEGER_get(a->status_info->status);
+
+    if (a->token) {
+        if (status != 0 && status != 1) {
+            TSerr(TS_F_TS_RESP_SET_TST_INFO, TS_R_TOKEN_PRESENT);
+            return 0;
+        }
+        TS_TST_INFO_free(a->tst_info);
+        a->tst_info = PKCS7_to_TS_TST_INFO(a->token);
+        if (!a->tst_info) {
+            TSerr(TS_F_TS_RESP_SET_TST_INFO,
+                  TS_R_PKCS7_TO_TS_TST_INFO_FAILED);
+            return 0;
+        }
+    } else if (status == 0 || status == 1) {
+        TSerr(TS_F_TS_RESP_SET_TST_INFO, TS_R_TOKEN_NOT_PRESENT);
+        return 0;
+    }
+
+    return 1;
+}
+
+static int ts_resp_cb(int op, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                      void *exarg)
+{
+    TS_RESP *ts_resp = (TS_RESP *)*pval;
+    if (op == ASN1_OP_NEW_POST) {
+        ts_resp->tst_info = NULL;
+    } else if (op == ASN1_OP_FREE_POST) {
+        TS_TST_INFO_free(ts_resp->tst_info);
+    } else if (op == ASN1_OP_D2I_POST) {
+        if (ts_resp_set_tst_info(ts_resp) == 0)
+            return 0;
+    }
+    return 1;
+}
+
+ASN1_SEQUENCE_cb(TS_RESP, ts_resp_cb) = {
+        ASN1_SIMPLE(TS_RESP, status_info, TS_STATUS_INFO),
+        ASN1_OPT(TS_RESP, token, PKCS7),
+} static_ASN1_SEQUENCE_END_cb(TS_RESP, TS_RESP)
+
+IMPLEMENT_ASN1_FUNCTIONS_const(TS_RESP)
+
+IMPLEMENT_ASN1_DUP_FUNCTION(TS_RESP)
+
+TS_RESP *d2i_TS_RESP_bio(BIO *bp, TS_RESP **a)
+{
+    return ASN1_d2i_bio_of(TS_RESP, TS_RESP_new, d2i_TS_RESP, bp, a);
+}
+
+int i2d_TS_RESP_bio(BIO *bp, TS_RESP *a)
+{
+    return ASN1_i2d_bio_of_const(TS_RESP, i2d_TS_RESP, bp, a);
+}
+#ifndef OPENSSL_NO_STDIO
+TS_RESP *d2i_TS_RESP_fp(FILE *fp, TS_RESP **a)
+{
+    return ASN1_d2i_fp_of(TS_RESP, TS_RESP_new, d2i_TS_RESP, fp, a);
+}
+
+int i2d_TS_RESP_fp(FILE *fp, TS_RESP *a)
+{
+    return ASN1_i2d_fp_of_const(TS_RESP, i2d_TS_RESP, fp, a);
+}
+#endif
+
+ASN1_SEQUENCE(ESS_ISSUER_SERIAL) = {
+        ASN1_SEQUENCE_OF(ESS_ISSUER_SERIAL, issuer, GENERAL_NAME),
+        ASN1_SIMPLE(ESS_ISSUER_SERIAL, serial, ASN1_INTEGER)
+} static_ASN1_SEQUENCE_END(ESS_ISSUER_SERIAL)
+
+IMPLEMENT_ASN1_FUNCTIONS_const(ESS_ISSUER_SERIAL)
+IMPLEMENT_ASN1_DUP_FUNCTION(ESS_ISSUER_SERIAL)
+
+ASN1_SEQUENCE(ESS_CERT_ID) = {
+        ASN1_SIMPLE(ESS_CERT_ID, hash, ASN1_OCTET_STRING),
+        ASN1_OPT(ESS_CERT_ID, issuer_serial, ESS_ISSUER_SERIAL)
+} static_ASN1_SEQUENCE_END(ESS_CERT_ID)
+
+IMPLEMENT_ASN1_FUNCTIONS_const(ESS_CERT_ID)
+IMPLEMENT_ASN1_DUP_FUNCTION(ESS_CERT_ID)
+
+ASN1_SEQUENCE(ESS_SIGNING_CERT) = {
+        ASN1_SEQUENCE_OF(ESS_SIGNING_CERT, cert_ids, ESS_CERT_ID),
+        ASN1_SEQUENCE_OF_OPT(ESS_SIGNING_CERT, policy_info, POLICYINFO)
+} static_ASN1_SEQUENCE_END(ESS_SIGNING_CERT)
+
+IMPLEMENT_ASN1_FUNCTIONS_const(ESS_SIGNING_CERT)
+IMPLEMENT_ASN1_DUP_FUNCTION(ESS_SIGNING_CERT)
+
+ASN1_SEQUENCE(ESS_CERT_ID_V2) = {
+        ASN1_OPT(ESS_CERT_ID_V2, hash_alg, X509_ALGOR),
+        ASN1_SIMPLE(ESS_CERT_ID_V2, hash, ASN1_OCTET_STRING),
+        ASN1_OPT(ESS_CERT_ID_V2, issuer_serial, ESS_ISSUER_SERIAL)
+} static_ASN1_SEQUENCE_END(ESS_CERT_ID_V2)
+
+IMPLEMENT_ASN1_FUNCTIONS_const(ESS_CERT_ID_V2)
+IMPLEMENT_ASN1_DUP_FUNCTION(ESS_CERT_ID_V2)
+
+ASN1_SEQUENCE(ESS_SIGNING_CERT_V2) = {
+        ASN1_SEQUENCE_OF(ESS_SIGNING_CERT_V2, cert_ids, ESS_CERT_ID_V2),
+        ASN1_SEQUENCE_OF_OPT(ESS_SIGNING_CERT_V2, policy_info, POLICYINFO)
+} static_ASN1_SEQUENCE_END(ESS_SIGNING_CERT_V2)
+
+IMPLEMENT_ASN1_FUNCTIONS_const(ESS_SIGNING_CERT_V2)
+IMPLEMENT_ASN1_DUP_FUNCTION(ESS_SIGNING_CERT_V2)
+
+/* Getting encapsulated TS_TST_INFO object from PKCS7. */
+TS_TST_INFO *PKCS7_to_TS_TST_INFO(PKCS7 *token)
+{
+    PKCS7_SIGNED *pkcs7_signed;
+    PKCS7 *enveloped;
+    ASN1_TYPE *tst_info_wrapper;
+    ASN1_OCTET_STRING *tst_info_der;
+    const unsigned char *p;
+
+    if (!PKCS7_type_is_signed(token)) {
+        TSerr(TS_F_PKCS7_TO_TS_TST_INFO, TS_R_BAD_PKCS7_TYPE);
+        return NULL;
+    }
+    if (PKCS7_get_detached(token)) {
+        TSerr(TS_F_PKCS7_TO_TS_TST_INFO, TS_R_DETACHED_CONTENT);
+        return NULL;
+    }
+    pkcs7_signed = token->d.sign;
+    enveloped = pkcs7_signed->contents;
+    if (OBJ_obj2nid(enveloped->type) != NID_id_smime_ct_TSTInfo) {
+        TSerr(TS_F_PKCS7_TO_TS_TST_INFO, TS_R_BAD_PKCS7_TYPE);
+        return NULL;
+    }
+    tst_info_wrapper = enveloped->d.other;
+    if (tst_info_wrapper->type != V_ASN1_OCTET_STRING) {
+        TSerr(TS_F_PKCS7_TO_TS_TST_INFO, TS_R_BAD_TYPE);
+        return NULL;
+    }
+    tst_info_der = tst_info_wrapper->value.octet_string;
+    p = tst_info_der->data;
+    return d2i_TS_TST_INFO(NULL, &p, tst_info_der->length);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_conf.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_conf.c
new file mode 100644
index 000000000..625089a59
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_conf.c
@@ -0,0 +1,493 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+
+#include <openssl/crypto.h>
+#include "internal/cryptlib.h"
+#include <openssl/pem.h>
+#include <openssl/engine.h>
+#include <openssl/ts.h>
+
+/* Macro definitions for the configuration file. */
+#define BASE_SECTION                    "tsa"
+#define ENV_DEFAULT_TSA                 "default_tsa"
+#define ENV_SERIAL                      "serial"
+#define ENV_CRYPTO_DEVICE               "crypto_device"
+#define ENV_SIGNER_CERT                 "signer_cert"
+#define ENV_CERTS                       "certs"
+#define ENV_SIGNER_KEY                  "signer_key"
+#define ENV_SIGNER_DIGEST               "signer_digest"
+#define ENV_DEFAULT_POLICY              "default_policy"
+#define ENV_OTHER_POLICIES              "other_policies"
+#define ENV_DIGESTS                     "digests"
+#define ENV_ACCURACY                    "accuracy"
+#define ENV_ORDERING                    "ordering"
+#define ENV_TSA_NAME                    "tsa_name"
+#define ENV_ESS_CERT_ID_CHAIN           "ess_cert_id_chain"
+#define ENV_VALUE_SECS                  "secs"
+#define ENV_VALUE_MILLISECS             "millisecs"
+#define ENV_VALUE_MICROSECS             "microsecs"
+#define ENV_CLOCK_PRECISION_DIGITS      "clock_precision_digits"
+#define ENV_VALUE_YES                   "yes"
+#define ENV_VALUE_NO                    "no"
+#define ENV_ESS_CERT_ID_ALG             "ess_cert_id_alg"
+
+/* Function definitions for certificate and key loading. */
+
+X509 *TS_CONF_load_cert(const char *file)
+{
+    BIO *cert = NULL;
+    X509 *x = NULL;
+
+    if ((cert = BIO_new_file(file, "r")) == NULL)
+        goto end;
+    x = PEM_read_bio_X509_AUX(cert, NULL, NULL, NULL);
+ end:
+    if (x == NULL)
+        TSerr(TS_F_TS_CONF_LOAD_CERT, TS_R_CANNOT_LOAD_CERT);
+    BIO_free(cert);
+    return x;
+}
+
+STACK_OF(X509) *TS_CONF_load_certs(const char *file)
+{
+    BIO *certs = NULL;
+    STACK_OF(X509) *othercerts = NULL;
+    STACK_OF(X509_INFO) *allcerts = NULL;
+    int i;
+
+    if ((certs = BIO_new_file(file, "r")) == NULL)
+        goto end;
+    if ((othercerts = sk_X509_new_null()) == NULL)
+        goto end;
+
+    allcerts = PEM_X509_INFO_read_bio(certs, NULL, NULL, NULL);
+    for (i = 0; i < sk_X509_INFO_num(allcerts); i++) {
+        X509_INFO *xi = sk_X509_INFO_value(allcerts, i);
+        if (xi->x509) {
+            sk_X509_push(othercerts, xi->x509);
+            xi->x509 = NULL;
+        }
+    }
+ end:
+    if (othercerts == NULL)
+        TSerr(TS_F_TS_CONF_LOAD_CERTS, TS_R_CANNOT_LOAD_CERT);
+    sk_X509_INFO_pop_free(allcerts, X509_INFO_free);
+    BIO_free(certs);
+    return othercerts;
+}
+
+EVP_PKEY *TS_CONF_load_key(const char *file, const char *pass)
+{
+    BIO *key = NULL;
+    EVP_PKEY *pkey = NULL;
+
+    if ((key = BIO_new_file(file, "r")) == NULL)
+        goto end;
+    pkey = PEM_read_bio_PrivateKey(key, NULL, NULL, (char *)pass);
+ end:
+    if (pkey == NULL)
+        TSerr(TS_F_TS_CONF_LOAD_KEY, TS_R_CANNOT_LOAD_KEY);
+    BIO_free(key);
+    return pkey;
+}
+
+/* Function definitions for handling configuration options. */
+
+static void ts_CONF_lookup_fail(const char *name, const char *tag)
+{
+    TSerr(TS_F_TS_CONF_LOOKUP_FAIL, TS_R_VAR_LOOKUP_FAILURE);
+    ERR_add_error_data(3, name, "::", tag);
+}
+
+static void ts_CONF_invalid(const char *name, const char *tag)
+{
+    TSerr(TS_F_TS_CONF_INVALID, TS_R_VAR_BAD_VALUE);
+    ERR_add_error_data(3, name, "::", tag);
+}
+
+const char *TS_CONF_get_tsa_section(CONF *conf, const char *section)
+{
+    if (!section) {
+        section = NCONF_get_string(conf, BASE_SECTION, ENV_DEFAULT_TSA);
+        if (!section)
+            ts_CONF_lookup_fail(BASE_SECTION, ENV_DEFAULT_TSA);
+    }
+    return section;
+}
+
+int TS_CONF_set_serial(CONF *conf, const char *section, TS_serial_cb cb,
+                       TS_RESP_CTX *ctx)
+{
+    int ret = 0;
+    char *serial = NCONF_get_string(conf, section, ENV_SERIAL);
+    if (!serial) {
+        ts_CONF_lookup_fail(section, ENV_SERIAL);
+        goto err;
+    }
+    TS_RESP_CTX_set_serial_cb(ctx, cb, serial);
+
+    ret = 1;
+ err:
+    return ret;
+}
+
+#ifndef OPENSSL_NO_ENGINE
+
+int TS_CONF_set_crypto_device(CONF *conf, const char *section,
+                              const char *device)
+{
+    int ret = 0;
+
+    if (device == NULL)
+        device = NCONF_get_string(conf, section, ENV_CRYPTO_DEVICE);
+
+    if (device && !TS_CONF_set_default_engine(device)) {
+        ts_CONF_invalid(section, ENV_CRYPTO_DEVICE);
+        goto err;
+    }
+    ret = 1;
+ err:
+    return ret;
+}
+
+int TS_CONF_set_default_engine(const char *name)
+{
+    ENGINE *e = NULL;
+    int ret = 0;
+
+    if (strcmp(name, "builtin") == 0)
+        return 1;
+
+    if ((e = ENGINE_by_id(name)) == NULL)
+        goto err;
+    if (strcmp(name, "chil") == 0)
+        ENGINE_ctrl(e, ENGINE_CTRL_CHIL_SET_FORKCHECK, 1, 0, 0);
+    if (!ENGINE_set_default(e, ENGINE_METHOD_ALL))
+        goto err;
+    ret = 1;
+
+ err:
+    if (!ret) {
+        TSerr(TS_F_TS_CONF_SET_DEFAULT_ENGINE, TS_R_COULD_NOT_SET_ENGINE);
+        ERR_add_error_data(2, "engine:", name);
+    }
+    ENGINE_free(e);
+    return ret;
+}
+
+#endif
+
+int TS_CONF_set_signer_cert(CONF *conf, const char *section,
+                            const char *cert, TS_RESP_CTX *ctx)
+{
+    int ret = 0;
+    X509 *cert_obj = NULL;
+
+    if (cert == NULL) {
+        cert = NCONF_get_string(conf, section, ENV_SIGNER_CERT);
+        if (cert == NULL) {
+            ts_CONF_lookup_fail(section, ENV_SIGNER_CERT);
+            goto err;
+        }
+    }
+    if ((cert_obj = TS_CONF_load_cert(cert)) == NULL)
+        goto err;
+    if (!TS_RESP_CTX_set_signer_cert(ctx, cert_obj))
+        goto err;
+
+    ret = 1;
+ err:
+    X509_free(cert_obj);
+    return ret;
+}
+
+int TS_CONF_set_certs(CONF *conf, const char *section, const char *certs,
+                      TS_RESP_CTX *ctx)
+{
+    int ret = 0;
+    STACK_OF(X509) *certs_obj = NULL;
+
+    if (certs == NULL) {
+        /* Certificate chain is optional. */
+        if ((certs = NCONF_get_string(conf, section, ENV_CERTS)) == NULL)
+            goto end;
+    }
+    if ((certs_obj = TS_CONF_load_certs(certs)) == NULL)
+        goto err;
+    if (!TS_RESP_CTX_set_certs(ctx, certs_obj))
+        goto err;
+ end:
+    ret = 1;
+ err:
+    sk_X509_pop_free(certs_obj, X509_free);
+    return ret;
+}
+
+int TS_CONF_set_signer_key(CONF *conf, const char *section,
+                           const char *key, const char *pass,
+                           TS_RESP_CTX *ctx)
+{
+    int ret = 0;
+    EVP_PKEY *key_obj = NULL;
+    if (!key)
+        key = NCONF_get_string(conf, section, ENV_SIGNER_KEY);
+    if (!key) {
+        ts_CONF_lookup_fail(section, ENV_SIGNER_KEY);
+        goto err;
+    }
+    if ((key_obj = TS_CONF_load_key(key, pass)) == NULL)
+        goto err;
+    if (!TS_RESP_CTX_set_signer_key(ctx, key_obj))
+        goto err;
+
+    ret = 1;
+ err:
+    EVP_PKEY_free(key_obj);
+    return ret;
+}
+
+int TS_CONF_set_signer_digest(CONF *conf, const char *section,
+                              const char *md, TS_RESP_CTX *ctx)
+{
+    int ret = 0;
+    const EVP_MD *sign_md = NULL;
+    if (md == NULL)
+        md = NCONF_get_string(conf, section, ENV_SIGNER_DIGEST);
+    if (md == NULL) {
+        ts_CONF_lookup_fail(section, ENV_SIGNER_DIGEST);
+        goto err;
+    }
+    sign_md = EVP_get_digestbyname(md);
+    if (sign_md == NULL) {
+        ts_CONF_invalid(section, ENV_SIGNER_DIGEST);
+        goto err;
+    }
+    if (!TS_RESP_CTX_set_signer_digest(ctx, sign_md))
+        goto err;
+
+    ret = 1;
+ err:
+    return ret;
+}
+
+int TS_CONF_set_def_policy(CONF *conf, const char *section,
+                           const char *policy, TS_RESP_CTX *ctx)
+{
+    int ret = 0;
+    ASN1_OBJECT *policy_obj = NULL;
+    if (!policy)
+        policy = NCONF_get_string(conf, section, ENV_DEFAULT_POLICY);
+    if (!policy) {
+        ts_CONF_lookup_fail(section, ENV_DEFAULT_POLICY);
+        goto err;
+    }
+    if ((policy_obj = OBJ_txt2obj(policy, 0)) == NULL) {
+        ts_CONF_invalid(section, ENV_DEFAULT_POLICY);
+        goto err;
+    }
+    if (!TS_RESP_CTX_set_def_policy(ctx, policy_obj))
+        goto err;
+
+    ret = 1;
+ err:
+    ASN1_OBJECT_free(policy_obj);
+    return ret;
+}
+
+int TS_CONF_set_policies(CONF *conf, const char *section, TS_RESP_CTX *ctx)
+{
+    int ret = 0;
+    int i;
+    STACK_OF(CONF_VALUE) *list = NULL;
+    char *policies = NCONF_get_string(conf, section, ENV_OTHER_POLICIES);
+
+    /* If no other policy is specified, that's fine. */
+    if (policies && (list = X509V3_parse_list(policies)) == NULL) {
+        ts_CONF_invalid(section, ENV_OTHER_POLICIES);
+        goto err;
+    }
+    for (i = 0; i < sk_CONF_VALUE_num(list); ++i) {
+        CONF_VALUE *val = sk_CONF_VALUE_value(list, i);
+        const char *extval = val->value ? val->value : val->name;
+        ASN1_OBJECT *objtmp;
+
+        if ((objtmp = OBJ_txt2obj(extval, 0)) == NULL) {
+            ts_CONF_invalid(section, ENV_OTHER_POLICIES);
+            goto err;
+        }
+        if (!TS_RESP_CTX_add_policy(ctx, objtmp))
+            goto err;
+        ASN1_OBJECT_free(objtmp);
+    }
+
+    ret = 1;
+ err:
+    sk_CONF_VALUE_pop_free(list, X509V3_conf_free);
+    return ret;
+}
+
+int TS_CONF_set_digests(CONF *conf, const char *section, TS_RESP_CTX *ctx)
+{
+    int ret = 0;
+    int i;
+    STACK_OF(CONF_VALUE) *list = NULL;
+    char *digests = NCONF_get_string(conf, section, ENV_DIGESTS);
+
+    if (digests == NULL) {
+        ts_CONF_lookup_fail(section, ENV_DIGESTS);
+        goto err;
+    }
+    if ((list = X509V3_parse_list(digests)) == NULL) {
+        ts_CONF_invalid(section, ENV_DIGESTS);
+        goto err;
+    }
+    if (sk_CONF_VALUE_num(list) == 0) {
+        ts_CONF_invalid(section, ENV_DIGESTS);
+        goto err;
+    }
+    for (i = 0; i < sk_CONF_VALUE_num(list); ++i) {
+        CONF_VALUE *val = sk_CONF_VALUE_value(list, i);
+        const char *extval = val->value ? val->value : val->name;
+        const EVP_MD *md;
+
+        if ((md = EVP_get_digestbyname(extval)) == NULL) {
+            ts_CONF_invalid(section, ENV_DIGESTS);
+            goto err;
+        }
+        if (!TS_RESP_CTX_add_md(ctx, md))
+            goto err;
+    }
+
+    ret = 1;
+ err:
+    sk_CONF_VALUE_pop_free(list, X509V3_conf_free);
+    return ret;
+}
+
+int TS_CONF_set_accuracy(CONF *conf, const char *section, TS_RESP_CTX *ctx)
+{
+    int ret = 0;
+    int i;
+    int secs = 0, millis = 0, micros = 0;
+    STACK_OF(CONF_VALUE) *list = NULL;
+    char *accuracy = NCONF_get_string(conf, section, ENV_ACCURACY);
+
+    if (accuracy && (list = X509V3_parse_list(accuracy)) == NULL) {
+        ts_CONF_invalid(section, ENV_ACCURACY);
+        goto err;
+    }
+    for (i = 0; i < sk_CONF_VALUE_num(list); ++i) {
+        CONF_VALUE *val = sk_CONF_VALUE_value(list, i);
+        if (strcmp(val->name, ENV_VALUE_SECS) == 0) {
+            if (val->value)
+                secs = atoi(val->value);
+        } else if (strcmp(val->name, ENV_VALUE_MILLISECS) == 0) {
+            if (val->value)
+                millis = atoi(val->value);
+        } else if (strcmp(val->name, ENV_VALUE_MICROSECS) == 0) {
+            if (val->value)
+                micros = atoi(val->value);
+        } else {
+            ts_CONF_invalid(section, ENV_ACCURACY);
+            goto err;
+        }
+    }
+    if (!TS_RESP_CTX_set_accuracy(ctx, secs, millis, micros))
+        goto err;
+
+    ret = 1;
+ err:
+    sk_CONF_VALUE_pop_free(list, X509V3_conf_free);
+    return ret;
+}
+
+int TS_CONF_set_clock_precision_digits(CONF *conf, const char *section,
+                                       TS_RESP_CTX *ctx)
+{
+    int ret = 0;
+    long digits = 0;
+
+    /*
+     * If not specified, set the default value to 0, i.e. sec precision
+     */
+    if (!NCONF_get_number_e(conf, section, ENV_CLOCK_PRECISION_DIGITS,
+                            &digits))
+        digits = 0;
+    if (digits < 0 || digits > TS_MAX_CLOCK_PRECISION_DIGITS) {
+        ts_CONF_invalid(section, ENV_CLOCK_PRECISION_DIGITS);
+        goto err;
+    }
+
+    if (!TS_RESP_CTX_set_clock_precision_digits(ctx, digits))
+        goto err;
+
+    return 1;
+ err:
+    return ret;
+}
+
+static int ts_CONF_add_flag(CONF *conf, const char *section,
+                            const char *field, int flag, TS_RESP_CTX *ctx)
+{
+    const char *value = NCONF_get_string(conf, section, field);
+
+    if (value) {
+        if (strcmp(value, ENV_VALUE_YES) == 0)
+            TS_RESP_CTX_add_flags(ctx, flag);
+        else if (strcmp(value, ENV_VALUE_NO) != 0) {
+            ts_CONF_invalid(section, field);
+            return 0;
+        }
+    }
+
+    return 1;
+}
+
+int TS_CONF_set_ordering(CONF *conf, const char *section, TS_RESP_CTX *ctx)
+{
+    return ts_CONF_add_flag(conf, section, ENV_ORDERING, TS_ORDERING, ctx);
+}
+
+int TS_CONF_set_tsa_name(CONF *conf, const char *section, TS_RESP_CTX *ctx)
+{
+    return ts_CONF_add_flag(conf, section, ENV_TSA_NAME, TS_TSA_NAME, ctx);
+}
+
+int TS_CONF_set_ess_cert_id_chain(CONF *conf, const char *section,
+                                  TS_RESP_CTX *ctx)
+{
+    return ts_CONF_add_flag(conf, section, ENV_ESS_CERT_ID_CHAIN,
+                            TS_ESS_CERT_ID_CHAIN, ctx);
+}
+
+int TS_CONF_set_ess_cert_id_digest(CONF *conf, const char *section,
+                                   TS_RESP_CTX *ctx)
+{
+    int ret = 0;
+    const EVP_MD *cert_md = NULL;
+    const char *md = NCONF_get_string(conf, section, ENV_ESS_CERT_ID_ALG);
+
+    if (md == NULL)
+        md = "sha1";
+
+    cert_md = EVP_get_digestbyname(md);
+    if (cert_md == NULL) {
+        ts_CONF_invalid(section, ENV_ESS_CERT_ID_ALG);
+        goto err;
+    }
+
+    if (!TS_RESP_CTX_set_ess_cert_id_digest(ctx, cert_md))
+        goto err;
+
+    ret = 1;
+err:
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_err.c
new file mode 100644
index 000000000..1f3854d84
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_err.c
@@ -0,0 +1,184 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/tserr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA TS_str_functs[] = {
+    {ERR_PACK(ERR_LIB_TS, TS_F_DEF_SERIAL_CB, 0), "def_serial_cb"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_DEF_TIME_CB, 0), "def_time_cb"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_ESS_ADD_SIGNING_CERT, 0),
+     "ess_add_signing_cert"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_ESS_ADD_SIGNING_CERT_V2, 0),
+     "ess_add_signing_cert_v2"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_ESS_CERT_ID_NEW_INIT, 0),
+     "ess_CERT_ID_new_init"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_ESS_CERT_ID_V2_NEW_INIT, 0),
+     "ess_cert_id_v2_new_init"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_ESS_SIGNING_CERT_NEW_INIT, 0),
+     "ess_SIGNING_CERT_new_init"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_ESS_SIGNING_CERT_V2_NEW_INIT, 0),
+     "ess_signing_cert_v2_new_init"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_INT_TS_RESP_VERIFY_TOKEN, 0),
+     "int_ts_RESP_verify_token"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_PKCS7_TO_TS_TST_INFO, 0),
+     "PKCS7_to_TS_TST_INFO"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_ACCURACY_SET_MICROS, 0),
+     "TS_ACCURACY_set_micros"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_ACCURACY_SET_MILLIS, 0),
+     "TS_ACCURACY_set_millis"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_ACCURACY_SET_SECONDS, 0),
+     "TS_ACCURACY_set_seconds"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_CHECK_IMPRINTS, 0), "ts_check_imprints"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_CHECK_NONCES, 0), "ts_check_nonces"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_CHECK_POLICY, 0), "ts_check_policy"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_CHECK_SIGNING_CERTS, 0),
+     "ts_check_signing_certs"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_CHECK_STATUS_INFO, 0),
+     "ts_check_status_info"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_COMPUTE_IMPRINT, 0), "ts_compute_imprint"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_CONF_INVALID, 0), "ts_CONF_invalid"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_CONF_LOAD_CERT, 0), "TS_CONF_load_cert"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_CONF_LOAD_CERTS, 0), "TS_CONF_load_certs"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_CONF_LOAD_KEY, 0), "TS_CONF_load_key"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_CONF_LOOKUP_FAIL, 0), "ts_CONF_lookup_fail"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_CONF_SET_DEFAULT_ENGINE, 0),
+     "TS_CONF_set_default_engine"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_GET_STATUS_TEXT, 0), "ts_get_status_text"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_MSG_IMPRINT_SET_ALGO, 0),
+     "TS_MSG_IMPRINT_set_algo"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_REQ_SET_MSG_IMPRINT, 0),
+     "TS_REQ_set_msg_imprint"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_REQ_SET_NONCE, 0), "TS_REQ_set_nonce"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_REQ_SET_POLICY_ID, 0),
+     "TS_REQ_set_policy_id"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_CREATE_RESPONSE, 0),
+     "TS_RESP_create_response"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_CREATE_TST_INFO, 0),
+     "ts_RESP_create_tst_info"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_CTX_ADD_FAILURE_INFO, 0),
+     "TS_RESP_CTX_add_failure_info"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_CTX_ADD_MD, 0), "TS_RESP_CTX_add_md"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_CTX_ADD_POLICY, 0),
+     "TS_RESP_CTX_add_policy"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_CTX_NEW, 0), "TS_RESP_CTX_new"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_CTX_SET_ACCURACY, 0),
+     "TS_RESP_CTX_set_accuracy"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_CTX_SET_CERTS, 0),
+     "TS_RESP_CTX_set_certs"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_CTX_SET_DEF_POLICY, 0),
+     "TS_RESP_CTX_set_def_policy"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_CTX_SET_SIGNER_CERT, 0),
+     "TS_RESP_CTX_set_signer_cert"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_CTX_SET_STATUS_INFO, 0),
+     "TS_RESP_CTX_set_status_info"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_GET_POLICY, 0), "ts_RESP_get_policy"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_SET_GENTIME_WITH_PRECISION, 0),
+     "TS_RESP_set_genTime_with_precision"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_SET_STATUS_INFO, 0),
+     "TS_RESP_set_status_info"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_SET_TST_INFO, 0),
+     "TS_RESP_set_tst_info"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_SIGN, 0), "ts_RESP_sign"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_RESP_VERIFY_SIGNATURE, 0),
+     "TS_RESP_verify_signature"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_TST_INFO_SET_ACCURACY, 0),
+     "TS_TST_INFO_set_accuracy"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_TST_INFO_SET_MSG_IMPRINT, 0),
+     "TS_TST_INFO_set_msg_imprint"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_TST_INFO_SET_NONCE, 0),
+     "TS_TST_INFO_set_nonce"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_TST_INFO_SET_POLICY_ID, 0),
+     "TS_TST_INFO_set_policy_id"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_TST_INFO_SET_SERIAL, 0),
+     "TS_TST_INFO_set_serial"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_TST_INFO_SET_TIME, 0),
+     "TS_TST_INFO_set_time"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_TST_INFO_SET_TSA, 0), "TS_TST_INFO_set_tsa"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_VERIFY, 0), ""},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_VERIFY_CERT, 0), "ts_verify_cert"},
+    {ERR_PACK(ERR_LIB_TS, TS_F_TS_VERIFY_CTX_NEW, 0), "TS_VERIFY_CTX_new"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA TS_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_BAD_PKCS7_TYPE), "bad pkcs7 type"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_BAD_TYPE), "bad type"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_CANNOT_LOAD_CERT), "cannot load certificate"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_CANNOT_LOAD_KEY), "cannot load private key"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_CERTIFICATE_VERIFY_ERROR),
+    "certificate verify error"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_COULD_NOT_SET_ENGINE),
+    "could not set engine"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_COULD_NOT_SET_TIME), "could not set time"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_DETACHED_CONTENT), "detached content"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_ESS_ADD_SIGNING_CERT_ERROR),
+    "ess add signing cert error"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_ESS_ADD_SIGNING_CERT_V2_ERROR),
+    "ess add signing cert v2 error"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_ESS_SIGNING_CERTIFICATE_ERROR),
+    "ess signing certificate error"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_INVALID_NULL_POINTER),
+    "invalid null pointer"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_INVALID_SIGNER_CERTIFICATE_PURPOSE),
+    "invalid signer certificate purpose"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_MESSAGE_IMPRINT_MISMATCH),
+    "message imprint mismatch"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_NONCE_MISMATCH), "nonce mismatch"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_NONCE_NOT_RETURNED), "nonce not returned"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_NO_CONTENT), "no content"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_NO_TIME_STAMP_TOKEN), "no time stamp token"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_PKCS7_ADD_SIGNATURE_ERROR),
+    "pkcs7 add signature error"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_PKCS7_ADD_SIGNED_ATTR_ERROR),
+    "pkcs7 add signed attr error"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_PKCS7_TO_TS_TST_INFO_FAILED),
+    "pkcs7 to ts tst info failed"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_POLICY_MISMATCH), "policy mismatch"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE),
+    "private key does not match certificate"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_RESPONSE_SETUP_ERROR),
+    "response setup error"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_SIGNATURE_FAILURE), "signature failure"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_THERE_MUST_BE_ONE_SIGNER),
+    "there must be one signer"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_TIME_SYSCALL_ERROR), "time syscall error"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_TOKEN_NOT_PRESENT), "token not present"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_TOKEN_PRESENT), "token present"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_TSA_NAME_MISMATCH), "tsa name mismatch"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_TSA_UNTRUSTED), "tsa untrusted"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_TST_INFO_SETUP_ERROR),
+    "tst info setup error"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_TS_DATASIGN), "ts datasign"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_UNACCEPTABLE_POLICY), "unacceptable policy"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_UNSUPPORTED_MD_ALGORITHM),
+    "unsupported md algorithm"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_UNSUPPORTED_VERSION), "unsupported version"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_VAR_BAD_VALUE), "var bad value"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_VAR_LOOKUP_FAILURE),
+    "cannot find config variable"},
+    {ERR_PACK(ERR_LIB_TS, 0, TS_R_WRONG_CONTENT_TYPE), "wrong content type"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_TS_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(TS_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(TS_str_functs);
+        ERR_load_strings_const(TS_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_lcl.h
new file mode 100644
index 000000000..771784fef
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_lcl.h
@@ -0,0 +1,211 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*-
+ * MessageImprint ::= SEQUENCE  {
+ *      hashAlgorithm                AlgorithmIdentifier,
+ *      hashedMessage                OCTET STRING  }
+ */
+struct TS_msg_imprint_st {
+    X509_ALGOR *hash_algo;
+    ASN1_OCTET_STRING *hashed_msg;
+};
+
+/*-
+ * TimeStampResp ::= SEQUENCE  {
+ *     status                  PKIStatusInfo,
+ *     timeStampToken          TimeStampToken     OPTIONAL }
+ */
+struct TS_resp_st {
+    TS_STATUS_INFO *status_info;
+    PKCS7 *token;
+    TS_TST_INFO *tst_info;
+};
+
+/*-
+ * TimeStampReq ::= SEQUENCE  {
+ *    version                  INTEGER  { v1(1) },
+ *    messageImprint           MessageImprint,
+ *      --a hash algorithm OID and the hash value of the data to be
+ *      --time-stamped
+ *    reqPolicy                TSAPolicyId                OPTIONAL,
+ *    nonce                    INTEGER                    OPTIONAL,
+ *    certReq                  BOOLEAN                    DEFAULT FALSE,
+ *    extensions               [0] IMPLICIT Extensions    OPTIONAL  }
+ */
+struct TS_req_st {
+    ASN1_INTEGER *version;
+    TS_MSG_IMPRINT *msg_imprint;
+    ASN1_OBJECT *policy_id;
+    ASN1_INTEGER *nonce;
+    ASN1_BOOLEAN cert_req;
+    STACK_OF(X509_EXTENSION) *extensions;
+};
+
+/*-
+ * Accuracy ::= SEQUENCE {
+ *                 seconds        INTEGER           OPTIONAL,
+ *                 millis     [0] INTEGER  (1..999) OPTIONAL,
+ *                 micros     [1] INTEGER  (1..999) OPTIONAL  }
+ */
+struct TS_accuracy_st {
+    ASN1_INTEGER *seconds;
+    ASN1_INTEGER *millis;
+    ASN1_INTEGER *micros;
+};
+
+/*-
+ * TSTInfo ::= SEQUENCE  {
+ *     version                      INTEGER  { v1(1) },
+ *     policy                       TSAPolicyId,
+ *     messageImprint               MessageImprint,
+ *       -- MUST have the same value as the similar field in
+ *       -- TimeStampReq
+ *     serialNumber                 INTEGER,
+ *      -- Time-Stamping users MUST be ready to accommodate integers
+ *      -- up to 160 bits.
+ *     genTime                      GeneralizedTime,
+ *     accuracy                     Accuracy                 OPTIONAL,
+ *     ordering                     BOOLEAN             DEFAULT FALSE,
+ *     nonce                        INTEGER                  OPTIONAL,
+ *       -- MUST be present if the similar field was present
+ *       -- in TimeStampReq.  In that case it MUST have the same value.
+ *     tsa                          [0] GeneralName          OPTIONAL,
+ *     extensions                   [1] IMPLICIT Extensions  OPTIONAL   }
+ */
+struct TS_tst_info_st {
+    ASN1_INTEGER *version;
+    ASN1_OBJECT *policy_id;
+    TS_MSG_IMPRINT *msg_imprint;
+    ASN1_INTEGER *serial;
+    ASN1_GENERALIZEDTIME *time;
+    TS_ACCURACY *accuracy;
+    ASN1_BOOLEAN ordering;
+    ASN1_INTEGER *nonce;
+    GENERAL_NAME *tsa;
+    STACK_OF(X509_EXTENSION) *extensions;
+};
+
+struct TS_status_info_st {
+    ASN1_INTEGER *status;
+    STACK_OF(ASN1_UTF8STRING) *text;
+    ASN1_BIT_STRING *failure_info;
+};
+
+/*-
+ * IssuerSerial ::= SEQUENCE {
+ *         issuer                   GeneralNames,
+ *         serialNumber             CertificateSerialNumber
+ *         }
+ */
+struct ESS_issuer_serial {
+    STACK_OF(GENERAL_NAME) *issuer;
+    ASN1_INTEGER *serial;
+};
+
+/*-
+ * ESSCertID ::=  SEQUENCE {
+ *         certHash                 Hash,
+ *         issuerSerial             IssuerSerial OPTIONAL
+ * }
+ */
+struct ESS_cert_id {
+    ASN1_OCTET_STRING *hash;    /* Always SHA-1 digest. */
+    ESS_ISSUER_SERIAL *issuer_serial;
+};
+
+/*-
+ * SigningCertificate ::=  SEQUENCE {
+ *        certs        SEQUENCE OF ESSCertID,
+ *        policies     SEQUENCE OF PolicyInformation OPTIONAL
+ * }
+ */
+struct ESS_signing_cert {
+    STACK_OF(ESS_CERT_ID) *cert_ids;
+    STACK_OF(POLICYINFO) *policy_info;
+};
+
+/*-
+ * ESSCertIDv2 ::=  SEQUENCE {
+ *        hashAlgorithm           AlgorithmIdentifier
+ *                DEFAULT {algorithm id-sha256},
+ *        certHash                Hash,
+ *        issuerSerial            IssuerSerial OPTIONAL
+ * }
+ */
+
+struct ESS_cert_id_v2_st {
+    X509_ALGOR *hash_alg;       /* Default: SHA-256 */
+    ASN1_OCTET_STRING *hash;
+    ESS_ISSUER_SERIAL *issuer_serial;
+};
+
+/*-
+ * SigningCertificateV2 ::= SEQUENCE {
+ *        certs                   SEQUENCE OF ESSCertIDv2,
+ *        policies                SEQUENCE OF PolicyInformation OPTIONAL
+ * }
+ */
+
+struct ESS_signing_cert_v2_st {
+    STACK_OF(ESS_CERT_ID_V2) *cert_ids;
+    STACK_OF(POLICYINFO) *policy_info;
+};
+
+
+struct TS_resp_ctx {
+    X509 *signer_cert;
+    EVP_PKEY *signer_key;
+    const EVP_MD *signer_md;
+    const EVP_MD *ess_cert_id_digest;
+    STACK_OF(X509) *certs;      /* Certs to include in signed data. */
+    STACK_OF(ASN1_OBJECT) *policies; /* Acceptable policies. */
+    ASN1_OBJECT *default_policy; /* It may appear in policies, too. */
+    STACK_OF(EVP_MD) *mds;      /* Acceptable message digests. */
+    ASN1_INTEGER *seconds;      /* accuracy, 0 means not specified. */
+    ASN1_INTEGER *millis;       /* accuracy, 0 means not specified. */
+    ASN1_INTEGER *micros;       /* accuracy, 0 means not specified. */
+    unsigned clock_precision_digits; /* fraction of seconds in time stamp
+                                      * token. */
+    unsigned flags;             /* Optional info, see values above. */
+    /* Callback functions. */
+    TS_serial_cb serial_cb;
+    void *serial_cb_data;       /* User data for serial_cb. */
+    TS_time_cb time_cb;
+    void *time_cb_data;         /* User data for time_cb. */
+    TS_extension_cb extension_cb;
+    void *extension_cb_data;    /* User data for extension_cb. */
+    /* These members are used only while creating the response. */
+    TS_REQ *request;
+    TS_RESP *response;
+    TS_TST_INFO *tst_info;
+};
+
+struct TS_verify_ctx {
+    /* Set this to the union of TS_VFY_... flags you want to carry out. */
+    unsigned flags;
+    /* Must be set only with TS_VFY_SIGNATURE. certs is optional. */
+    X509_STORE *store;
+    STACK_OF(X509) *certs;
+    /* Must be set only with TS_VFY_POLICY. */
+    ASN1_OBJECT *policy;
+    /*
+     * Must be set only with TS_VFY_IMPRINT. If md_alg is NULL, the
+     * algorithm from the response is used.
+     */
+    X509_ALGOR *md_alg;
+    unsigned char *imprint;
+    unsigned imprint_len;
+    /* Must be set only with TS_VFY_DATA. */
+    BIO *data;
+    /* Must be set only with TS_VFY_TSA_NAME. */
+    ASN1_INTEGER *nonce;
+    /* Must be set only with TS_VFY_TSA_NAME. */
+    GENERAL_NAME *tsa_name;
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_lib.c
new file mode 100644
index 000000000..ce2e12c59
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_lib.c
@@ -0,0 +1,92 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/bn.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/ts.h>
+#include "ts_lcl.h"
+
+int TS_ASN1_INTEGER_print_bio(BIO *bio, const ASN1_INTEGER *num)
+{
+    BIGNUM *num_bn;
+    int result = 0;
+    char *hex;
+
+    num_bn = ASN1_INTEGER_to_BN(num, NULL);
+    if (num_bn == NULL)
+        return -1;
+    if ((hex = BN_bn2hex(num_bn))) {
+        result = BIO_write(bio, "0x", 2) > 0;
+        result = result && BIO_write(bio, hex, strlen(hex)) > 0;
+        OPENSSL_free(hex);
+    }
+    BN_free(num_bn);
+
+    return result;
+}
+
+int TS_OBJ_print_bio(BIO *bio, const ASN1_OBJECT *obj)
+{
+    char obj_txt[128];
+
+    OBJ_obj2txt(obj_txt, sizeof(obj_txt), obj, 0);
+    BIO_printf(bio, "%s\n", obj_txt);
+
+    return 1;
+}
+
+int TS_ext_print_bio(BIO *bio, const STACK_OF(X509_EXTENSION) *extensions)
+{
+    int i, critical, n;
+    X509_EXTENSION *ex;
+    ASN1_OBJECT *obj;
+
+    BIO_printf(bio, "Extensions:\n");
+    n = X509v3_get_ext_count(extensions);
+    for (i = 0; i < n; i++) {
+        ex = X509v3_get_ext(extensions, i);
+        obj = X509_EXTENSION_get_object(ex);
+        if (i2a_ASN1_OBJECT(bio, obj) < 0)
+            return 0;
+        critical = X509_EXTENSION_get_critical(ex);
+        BIO_printf(bio, ":%s\n", critical ? " critical" : "");
+        if (!X509V3_EXT_print(bio, ex, 0, 4)) {
+            BIO_printf(bio, "%4s", "");
+            ASN1_STRING_print(bio, X509_EXTENSION_get_data(ex));
+        }
+        BIO_write(bio, "\n", 1);
+    }
+
+    return 1;
+}
+
+int TS_X509_ALGOR_print_bio(BIO *bio, const X509_ALGOR *alg)
+{
+    int i = OBJ_obj2nid(alg->algorithm);
+    return BIO_printf(bio, "Hash Algorithm: %s\n",
+                      (i == NID_undef) ? "UNKNOWN" : OBJ_nid2ln(i));
+}
+
+int TS_MSG_IMPRINT_print_bio(BIO *bio, TS_MSG_IMPRINT *a)
+{
+    ASN1_OCTET_STRING *msg;
+
+    TS_X509_ALGOR_print_bio(bio, a->hash_algo);
+
+    BIO_printf(bio, "Message data:\n");
+    msg = a->hashed_msg;
+    BIO_dump_indent(bio, (const char *)ASN1_STRING_get0_data(msg),
+                    ASN1_STRING_length(msg), 4);
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_req_print.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_req_print.c
new file mode 100644
index 000000000..0dedf47d9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_req_print.c
@@ -0,0 +1,51 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/bn.h>
+#include <openssl/x509v3.h>
+#include <openssl/ts.h>
+#include "ts_lcl.h"
+
+int TS_REQ_print_bio(BIO *bio, TS_REQ *a)
+{
+    int v;
+    ASN1_OBJECT *policy_id;
+
+    if (a == NULL)
+        return 0;
+
+    v = TS_REQ_get_version(a);
+    BIO_printf(bio, "Version: %d\n", v);
+
+    TS_MSG_IMPRINT_print_bio(bio, a->msg_imprint);
+
+    BIO_printf(bio, "Policy OID: ");
+    policy_id = TS_REQ_get_policy_id(a);
+    if (policy_id == NULL)
+        BIO_printf(bio, "unspecified\n");
+    else
+        TS_OBJ_print_bio(bio, policy_id);
+
+    BIO_printf(bio, "Nonce: ");
+    if (a->nonce == NULL)
+        BIO_printf(bio, "unspecified");
+    else
+        TS_ASN1_INTEGER_print_bio(bio, a->nonce);
+    BIO_write(bio, "\n", 1);
+
+    BIO_printf(bio, "Certificate required: %s\n",
+               a->cert_req ? "yes" : "no");
+
+    TS_ext_print_bio(bio, a->extensions);
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_req_utils.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_req_utils.c
new file mode 100644
index 000000000..2073d3395
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_req_utils.c
@@ -0,0 +1,183 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/x509v3.h>
+#include <openssl/ts.h>
+#include "ts_lcl.h"
+
+int TS_REQ_set_version(TS_REQ *a, long version)
+{
+    return ASN1_INTEGER_set(a->version, version);
+}
+
+long TS_REQ_get_version(const TS_REQ *a)
+{
+    return ASN1_INTEGER_get(a->version);
+}
+
+int TS_REQ_set_msg_imprint(TS_REQ *a, TS_MSG_IMPRINT *msg_imprint)
+{
+    TS_MSG_IMPRINT *new_msg_imprint;
+
+    if (a->msg_imprint == msg_imprint)
+        return 1;
+    new_msg_imprint = TS_MSG_IMPRINT_dup(msg_imprint);
+    if (new_msg_imprint == NULL) {
+        TSerr(TS_F_TS_REQ_SET_MSG_IMPRINT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    TS_MSG_IMPRINT_free(a->msg_imprint);
+    a->msg_imprint = new_msg_imprint;
+    return 1;
+}
+
+TS_MSG_IMPRINT *TS_REQ_get_msg_imprint(TS_REQ *a)
+{
+    return a->msg_imprint;
+}
+
+int TS_MSG_IMPRINT_set_algo(TS_MSG_IMPRINT *a, X509_ALGOR *alg)
+{
+    X509_ALGOR *new_alg;
+
+    if (a->hash_algo == alg)
+        return 1;
+    new_alg = X509_ALGOR_dup(alg);
+    if (new_alg == NULL) {
+        TSerr(TS_F_TS_MSG_IMPRINT_SET_ALGO, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    X509_ALGOR_free(a->hash_algo);
+    a->hash_algo = new_alg;
+    return 1;
+}
+
+X509_ALGOR *TS_MSG_IMPRINT_get_algo(TS_MSG_IMPRINT *a)
+{
+    return a->hash_algo;
+}
+
+int TS_MSG_IMPRINT_set_msg(TS_MSG_IMPRINT *a, unsigned char *d, int len)
+{
+    return ASN1_OCTET_STRING_set(a->hashed_msg, d, len);
+}
+
+ASN1_OCTET_STRING *TS_MSG_IMPRINT_get_msg(TS_MSG_IMPRINT *a)
+{
+    return a->hashed_msg;
+}
+
+int TS_REQ_set_policy_id(TS_REQ *a, const ASN1_OBJECT *policy)
+{
+    ASN1_OBJECT *new_policy;
+
+    if (a->policy_id == policy)
+        return 1;
+    new_policy = OBJ_dup(policy);
+    if (new_policy == NULL) {
+        TSerr(TS_F_TS_REQ_SET_POLICY_ID, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ASN1_OBJECT_free(a->policy_id);
+    a->policy_id = new_policy;
+    return 1;
+}
+
+ASN1_OBJECT *TS_REQ_get_policy_id(TS_REQ *a)
+{
+    return a->policy_id;
+}
+
+int TS_REQ_set_nonce(TS_REQ *a, const ASN1_INTEGER *nonce)
+{
+    ASN1_INTEGER *new_nonce;
+
+    if (a->nonce == nonce)
+        return 1;
+    new_nonce = ASN1_INTEGER_dup(nonce);
+    if (new_nonce == NULL) {
+        TSerr(TS_F_TS_REQ_SET_NONCE, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ASN1_INTEGER_free(a->nonce);
+    a->nonce = new_nonce;
+    return 1;
+}
+
+const ASN1_INTEGER *TS_REQ_get_nonce(const TS_REQ *a)
+{
+    return a->nonce;
+}
+
+int TS_REQ_set_cert_req(TS_REQ *a, int cert_req)
+{
+    a->cert_req = cert_req ? 0xFF : 0x00;
+    return 1;
+}
+
+int TS_REQ_get_cert_req(const TS_REQ *a)
+{
+    return a->cert_req ? 1 : 0;
+}
+
+STACK_OF(X509_EXTENSION) *TS_REQ_get_exts(TS_REQ *a)
+{
+    return a->extensions;
+}
+
+void TS_REQ_ext_free(TS_REQ *a)
+{
+    if (!a)
+        return;
+    sk_X509_EXTENSION_pop_free(a->extensions, X509_EXTENSION_free);
+    a->extensions = NULL;
+}
+
+int TS_REQ_get_ext_count(TS_REQ *a)
+{
+    return X509v3_get_ext_count(a->extensions);
+}
+
+int TS_REQ_get_ext_by_NID(TS_REQ *a, int nid, int lastpos)
+{
+    return X509v3_get_ext_by_NID(a->extensions, nid, lastpos);
+}
+
+int TS_REQ_get_ext_by_OBJ(TS_REQ *a, const ASN1_OBJECT *obj, int lastpos)
+{
+    return X509v3_get_ext_by_OBJ(a->extensions, obj, lastpos);
+}
+
+int TS_REQ_get_ext_by_critical(TS_REQ *a, int crit, int lastpos)
+{
+    return X509v3_get_ext_by_critical(a->extensions, crit, lastpos);
+}
+
+X509_EXTENSION *TS_REQ_get_ext(TS_REQ *a, int loc)
+{
+    return X509v3_get_ext(a->extensions, loc);
+}
+
+X509_EXTENSION *TS_REQ_delete_ext(TS_REQ *a, int loc)
+{
+    return X509v3_delete_ext(a->extensions, loc);
+}
+
+int TS_REQ_add_ext(TS_REQ *a, X509_EXTENSION *ex, int loc)
+{
+    return X509v3_add_ext(&a->extensions, ex, loc) != NULL;
+}
+
+void *TS_REQ_get_ext_d2i(TS_REQ *a, int nid, int *crit, int *idx)
+{
+    return X509V3_get_d2i(a->extensions, nid, crit, idx);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_rsp_print.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_rsp_print.c
new file mode 100644
index 000000000..6eb0ec8d7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_rsp_print.c
@@ -0,0 +1,195 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/bn.h>
+#include <openssl/x509v3.h>
+#include <openssl/ts.h>
+#include "ts_lcl.h"
+
+struct status_map_st {
+    int bit;
+    const char *text;
+};
+
+static int ts_status_map_print(BIO *bio, const struct status_map_st *a,
+                               const ASN1_BIT_STRING *v);
+static int ts_ACCURACY_print_bio(BIO *bio, const TS_ACCURACY *accuracy);
+
+
+int TS_RESP_print_bio(BIO *bio, TS_RESP *a)
+{
+    BIO_printf(bio, "Status info:\n");
+    TS_STATUS_INFO_print_bio(bio, a->status_info);
+
+    BIO_printf(bio, "\nTST info:\n");
+    if (a->tst_info != NULL)
+        TS_TST_INFO_print_bio(bio, a->tst_info);
+    else
+        BIO_printf(bio, "Not included.\n");
+
+    return 1;
+}
+
+int TS_STATUS_INFO_print_bio(BIO *bio, TS_STATUS_INFO *a)
+{
+    static const char *status_map[] = {
+        "Granted.",
+        "Granted with modifications.",
+        "Rejected.",
+        "Waiting.",
+        "Revocation warning.",
+        "Revoked."
+    };
+    static const struct status_map_st failure_map[] = {
+        {TS_INFO_BAD_ALG,
+         "unrecognized or unsupported algorithm identifier"},
+        {TS_INFO_BAD_REQUEST,
+         "transaction not permitted or supported"},
+        {TS_INFO_BAD_DATA_FORMAT,
+         "the data submitted has the wrong format"},
+        {TS_INFO_TIME_NOT_AVAILABLE,
+         "the TSA's time source is not available"},
+        {TS_INFO_UNACCEPTED_POLICY,
+         "the requested TSA policy is not supported by the TSA"},
+        {TS_INFO_UNACCEPTED_EXTENSION,
+         "the requested extension is not supported by the TSA"},
+        {TS_INFO_ADD_INFO_NOT_AVAILABLE,
+         "the additional information requested could not be understood "
+         "or is not available"},
+        {TS_INFO_SYSTEM_FAILURE,
+         "the request cannot be handled due to system failure"},
+        {-1, NULL}
+    };
+    long status;
+    int i, lines = 0;
+
+    BIO_printf(bio, "Status: ");
+    status = ASN1_INTEGER_get(a->status);
+    if (0 <= status && status < (long)OSSL_NELEM(status_map))
+        BIO_printf(bio, "%s\n", status_map[status]);
+    else
+        BIO_printf(bio, "out of bounds\n");
+
+    BIO_printf(bio, "Status description: ");
+    for (i = 0; i < sk_ASN1_UTF8STRING_num(a->text); ++i) {
+        if (i > 0)
+            BIO_puts(bio, "\t");
+        ASN1_STRING_print_ex(bio, sk_ASN1_UTF8STRING_value(a->text, i), 0);
+        BIO_puts(bio, "\n");
+    }
+    if (i == 0)
+        BIO_printf(bio, "unspecified\n");
+
+    BIO_printf(bio, "Failure info: ");
+    if (a->failure_info != NULL)
+        lines = ts_status_map_print(bio, failure_map, a->failure_info);
+    if (lines == 0)
+        BIO_printf(bio, "unspecified");
+    BIO_printf(bio, "\n");
+
+    return 1;
+}
+
+static int ts_status_map_print(BIO *bio, const struct status_map_st *a,
+                               const ASN1_BIT_STRING *v)
+{
+    int lines = 0;
+
+    for (; a->bit >= 0; ++a) {
+        if (ASN1_BIT_STRING_get_bit(v, a->bit)) {
+            if (++lines > 1)
+                BIO_printf(bio, ", ");
+            BIO_printf(bio, "%s", a->text);
+        }
+    }
+
+    return lines;
+}
+
+int TS_TST_INFO_print_bio(BIO *bio, TS_TST_INFO *a)
+{
+    int v;
+
+    if (a == NULL)
+        return 0;
+
+    v = ASN1_INTEGER_get(a->version);
+    BIO_printf(bio, "Version: %d\n", v);
+
+    BIO_printf(bio, "Policy OID: ");
+    TS_OBJ_print_bio(bio, a->policy_id);
+
+    TS_MSG_IMPRINT_print_bio(bio, a->msg_imprint);
+
+    BIO_printf(bio, "Serial number: ");
+    if (a->serial == NULL)
+        BIO_printf(bio, "unspecified");
+    else
+        TS_ASN1_INTEGER_print_bio(bio, a->serial);
+    BIO_write(bio, "\n", 1);
+
+    BIO_printf(bio, "Time stamp: ");
+    ASN1_GENERALIZEDTIME_print(bio, a->time);
+    BIO_write(bio, "\n", 1);
+
+    BIO_printf(bio, "Accuracy: ");
+    if (a->accuracy == NULL)
+        BIO_printf(bio, "unspecified");
+    else
+        ts_ACCURACY_print_bio(bio, a->accuracy);
+    BIO_write(bio, "\n", 1);
+
+    BIO_printf(bio, "Ordering: %s\n", a->ordering ? "yes" : "no");
+
+    BIO_printf(bio, "Nonce: ");
+    if (a->nonce == NULL)
+        BIO_printf(bio, "unspecified");
+    else
+        TS_ASN1_INTEGER_print_bio(bio, a->nonce);
+    BIO_write(bio, "\n", 1);
+
+    BIO_printf(bio, "TSA: ");
+    if (a->tsa == NULL)
+        BIO_printf(bio, "unspecified");
+    else {
+        STACK_OF(CONF_VALUE) *nval;
+        if ((nval = i2v_GENERAL_NAME(NULL, a->tsa, NULL)))
+            X509V3_EXT_val_prn(bio, nval, 0, 0);
+        sk_CONF_VALUE_pop_free(nval, X509V3_conf_free);
+    }
+    BIO_write(bio, "\n", 1);
+
+    TS_ext_print_bio(bio, a->extensions);
+
+    return 1;
+}
+
+static int ts_ACCURACY_print_bio(BIO *bio, const TS_ACCURACY *a)
+{
+    if (a->seconds != NULL)
+        TS_ASN1_INTEGER_print_bio(bio, a->seconds);
+    else
+        BIO_printf(bio, "unspecified");
+    BIO_printf(bio, " seconds, ");
+    if (a->millis != NULL)
+        TS_ASN1_INTEGER_print_bio(bio, a->millis);
+    else
+        BIO_printf(bio, "unspecified");
+    BIO_printf(bio, " millis, ");
+    if (a->micros != NULL)
+        TS_ASN1_INTEGER_print_bio(bio, a->micros);
+    else
+        BIO_printf(bio, "unspecified");
+    BIO_printf(bio, " micros");
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_rsp_sign.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_rsp_sign.c
new file mode 100644
index 000000000..1b2b84ef6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_rsp_sign.c
@@ -0,0 +1,1057 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include "internal/cryptlib.h"
+
+#include <openssl/objects.h>
+#include <openssl/ts.h>
+#include <openssl/pkcs7.h>
+#include <openssl/crypto.h>
+#include "ts_lcl.h"
+
+static ASN1_INTEGER *def_serial_cb(struct TS_resp_ctx *, void *);
+static int def_time_cb(struct TS_resp_ctx *, void *, long *sec, long *usec);
+static int def_extension_cb(struct TS_resp_ctx *, X509_EXTENSION *, void *);
+
+static void ts_RESP_CTX_init(TS_RESP_CTX *ctx);
+static void ts_RESP_CTX_cleanup(TS_RESP_CTX *ctx);
+static int ts_RESP_check_request(TS_RESP_CTX *ctx);
+static ASN1_OBJECT *ts_RESP_get_policy(TS_RESP_CTX *ctx);
+static TS_TST_INFO *ts_RESP_create_tst_info(TS_RESP_CTX *ctx,
+                                            ASN1_OBJECT *policy);
+static int ts_RESP_process_extensions(TS_RESP_CTX *ctx);
+static int ts_RESP_sign(TS_RESP_CTX *ctx);
+
+static ESS_SIGNING_CERT *ess_SIGNING_CERT_new_init(X509 *signcert,
+                                                   STACK_OF(X509) *certs);
+static ESS_CERT_ID *ess_CERT_ID_new_init(X509 *cert, int issuer_needed);
+static int ts_TST_INFO_content_new(PKCS7 *p7);
+static int ess_add_signing_cert(PKCS7_SIGNER_INFO *si, ESS_SIGNING_CERT *sc);
+
+static ESS_SIGNING_CERT_V2 *ess_signing_cert_v2_new_init(const EVP_MD *hash_alg,
+                                                         X509 *signcert,
+                                                         STACK_OF(X509)
+                                                         *certs);
+static ESS_CERT_ID_V2 *ess_cert_id_v2_new_init(const EVP_MD *hash_alg,
+                                               X509 *cert, int issuer_needed);
+static int ess_add_signing_cert_v2(PKCS7_SIGNER_INFO *si,
+                                   ESS_SIGNING_CERT_V2 *sc);
+
+static ASN1_GENERALIZEDTIME
+*TS_RESP_set_genTime_with_precision(ASN1_GENERALIZEDTIME *, long, long,
+                                    unsigned);
+
+/* Default callback for response generation. */
+static ASN1_INTEGER *def_serial_cb(struct TS_resp_ctx *ctx, void *data)
+{
+    ASN1_INTEGER *serial = ASN1_INTEGER_new();
+
+    if (serial == NULL)
+        goto err;
+    if (!ASN1_INTEGER_set(serial, 1))
+        goto err;
+    return serial;
+
+ err:
+    TSerr(TS_F_DEF_SERIAL_CB, ERR_R_MALLOC_FAILURE);
+    TS_RESP_CTX_set_status_info(ctx, TS_STATUS_REJECTION,
+                                "Error during serial number generation.");
+    return NULL;
+}
+
+#if defined(OPENSSL_SYS_UNIX)
+
+static int def_time_cb(struct TS_resp_ctx *ctx, void *data,
+                       long *sec, long *usec)
+{
+    struct timeval tv;
+    if (gettimeofday(&tv, NULL) != 0) {
+        TSerr(TS_F_DEF_TIME_CB, TS_R_TIME_SYSCALL_ERROR);
+        TS_RESP_CTX_set_status_info(ctx, TS_STATUS_REJECTION,
+                                    "Time is not available.");
+        TS_RESP_CTX_add_failure_info(ctx, TS_INFO_TIME_NOT_AVAILABLE);
+        return 0;
+    }
+    *sec = tv.tv_sec;
+    *usec = tv.tv_usec;
+
+    return 1;
+}
+
+#else
+
+static int def_time_cb(struct TS_resp_ctx *ctx, void *data,
+                       long *sec, long *usec)
+{
+    time_t t;
+    if (time(&t) == (time_t)-1) {
+        TSerr(TS_F_DEF_TIME_CB, TS_R_TIME_SYSCALL_ERROR);
+        TS_RESP_CTX_set_status_info(ctx, TS_STATUS_REJECTION,
+                                    "Time is not available.");
+        TS_RESP_CTX_add_failure_info(ctx, TS_INFO_TIME_NOT_AVAILABLE);
+        return 0;
+    }
+    *sec = (long)t;
+    *usec = 0;
+
+    return 1;
+}
+
+#endif
+
+static int def_extension_cb(struct TS_resp_ctx *ctx, X509_EXTENSION *ext,
+                            void *data)
+{
+    TS_RESP_CTX_set_status_info(ctx, TS_STATUS_REJECTION,
+                                "Unsupported extension.");
+    TS_RESP_CTX_add_failure_info(ctx, TS_INFO_UNACCEPTED_EXTENSION);
+    return 0;
+}
+
+/* TS_RESP_CTX management functions. */
+
+TS_RESP_CTX *TS_RESP_CTX_new(void)
+{
+    TS_RESP_CTX *ctx;
+
+    if ((ctx = OPENSSL_zalloc(sizeof(*ctx))) == NULL) {
+        TSerr(TS_F_TS_RESP_CTX_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ctx->signer_md = EVP_sha256();
+
+    ctx->serial_cb = def_serial_cb;
+    ctx->time_cb = def_time_cb;
+    ctx->extension_cb = def_extension_cb;
+
+    return ctx;
+}
+
+void TS_RESP_CTX_free(TS_RESP_CTX *ctx)
+{
+    if (!ctx)
+        return;
+
+    X509_free(ctx->signer_cert);
+    EVP_PKEY_free(ctx->signer_key);
+    sk_X509_pop_free(ctx->certs, X509_free);
+    sk_ASN1_OBJECT_pop_free(ctx->policies, ASN1_OBJECT_free);
+    ASN1_OBJECT_free(ctx->default_policy);
+    sk_EVP_MD_free(ctx->mds);   /* No EVP_MD_free method exists. */
+    ASN1_INTEGER_free(ctx->seconds);
+    ASN1_INTEGER_free(ctx->millis);
+    ASN1_INTEGER_free(ctx->micros);
+    OPENSSL_free(ctx);
+}
+
+int TS_RESP_CTX_set_signer_cert(TS_RESP_CTX *ctx, X509 *signer)
+{
+    if (X509_check_purpose(signer, X509_PURPOSE_TIMESTAMP_SIGN, 0) != 1) {
+        TSerr(TS_F_TS_RESP_CTX_SET_SIGNER_CERT,
+              TS_R_INVALID_SIGNER_CERTIFICATE_PURPOSE);
+        return 0;
+    }
+    X509_free(ctx->signer_cert);
+    ctx->signer_cert = signer;
+    X509_up_ref(ctx->signer_cert);
+    return 1;
+}
+
+int TS_RESP_CTX_set_signer_key(TS_RESP_CTX *ctx, EVP_PKEY *key)
+{
+    EVP_PKEY_free(ctx->signer_key);
+    ctx->signer_key = key;
+    EVP_PKEY_up_ref(ctx->signer_key);
+
+    return 1;
+}
+
+int TS_RESP_CTX_set_signer_digest(TS_RESP_CTX *ctx, const EVP_MD *md)
+{
+    ctx->signer_md = md;
+    return 1;
+}
+
+int TS_RESP_CTX_set_def_policy(TS_RESP_CTX *ctx, const ASN1_OBJECT *def_policy)
+{
+    ASN1_OBJECT_free(ctx->default_policy);
+    if ((ctx->default_policy = OBJ_dup(def_policy)) == NULL)
+        goto err;
+    return 1;
+ err:
+    TSerr(TS_F_TS_RESP_CTX_SET_DEF_POLICY, ERR_R_MALLOC_FAILURE);
+    return 0;
+}
+
+int TS_RESP_CTX_set_certs(TS_RESP_CTX *ctx, STACK_OF(X509) *certs)
+{
+
+    sk_X509_pop_free(ctx->certs, X509_free);
+    ctx->certs = NULL;
+    if (!certs)
+        return 1;
+    if ((ctx->certs = X509_chain_up_ref(certs)) == NULL) {
+        TSerr(TS_F_TS_RESP_CTX_SET_CERTS, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    return 1;
+}
+
+int TS_RESP_CTX_add_policy(TS_RESP_CTX *ctx, const ASN1_OBJECT *policy)
+{
+    ASN1_OBJECT *copy = NULL;
+
+    if (ctx->policies == NULL
+        && (ctx->policies = sk_ASN1_OBJECT_new_null()) == NULL)
+        goto err;
+    if ((copy = OBJ_dup(policy)) == NULL)
+        goto err;
+    if (!sk_ASN1_OBJECT_push(ctx->policies, copy))
+        goto err;
+
+    return 1;
+ err:
+    TSerr(TS_F_TS_RESP_CTX_ADD_POLICY, ERR_R_MALLOC_FAILURE);
+    ASN1_OBJECT_free(copy);
+    return 0;
+}
+
+int TS_RESP_CTX_add_md(TS_RESP_CTX *ctx, const EVP_MD *md)
+{
+    if (ctx->mds == NULL
+        && (ctx->mds = sk_EVP_MD_new_null()) == NULL)
+        goto err;
+    if (!sk_EVP_MD_push(ctx->mds, md))
+        goto err;
+
+    return 1;
+ err:
+    TSerr(TS_F_TS_RESP_CTX_ADD_MD, ERR_R_MALLOC_FAILURE);
+    return 0;
+}
+
+#define TS_RESP_CTX_accuracy_free(ctx)          \
+        ASN1_INTEGER_free(ctx->seconds);        \
+        ctx->seconds = NULL;                    \
+        ASN1_INTEGER_free(ctx->millis);         \
+        ctx->millis = NULL;                     \
+        ASN1_INTEGER_free(ctx->micros);         \
+        ctx->micros = NULL;
+
+int TS_RESP_CTX_set_accuracy(TS_RESP_CTX *ctx,
+                             int secs, int millis, int micros)
+{
+
+    TS_RESP_CTX_accuracy_free(ctx);
+    if (secs
+        && ((ctx->seconds = ASN1_INTEGER_new()) == NULL
+            || !ASN1_INTEGER_set(ctx->seconds, secs)))
+        goto err;
+    if (millis
+        && ((ctx->millis = ASN1_INTEGER_new()) == NULL
+            || !ASN1_INTEGER_set(ctx->millis, millis)))
+        goto err;
+    if (micros
+        && ((ctx->micros = ASN1_INTEGER_new()) == NULL
+            || !ASN1_INTEGER_set(ctx->micros, micros)))
+        goto err;
+
+    return 1;
+ err:
+    TS_RESP_CTX_accuracy_free(ctx);
+    TSerr(TS_F_TS_RESP_CTX_SET_ACCURACY, ERR_R_MALLOC_FAILURE);
+    return 0;
+}
+
+void TS_RESP_CTX_add_flags(TS_RESP_CTX *ctx, int flags)
+{
+    ctx->flags |= flags;
+}
+
+void TS_RESP_CTX_set_serial_cb(TS_RESP_CTX *ctx, TS_serial_cb cb, void *data)
+{
+    ctx->serial_cb = cb;
+    ctx->serial_cb_data = data;
+}
+
+void TS_RESP_CTX_set_time_cb(TS_RESP_CTX *ctx, TS_time_cb cb, void *data)
+{
+    ctx->time_cb = cb;
+    ctx->time_cb_data = data;
+}
+
+void TS_RESP_CTX_set_extension_cb(TS_RESP_CTX *ctx,
+                                  TS_extension_cb cb, void *data)
+{
+    ctx->extension_cb = cb;
+    ctx->extension_cb_data = data;
+}
+
+int TS_RESP_CTX_set_status_info(TS_RESP_CTX *ctx,
+                                int status, const char *text)
+{
+    TS_STATUS_INFO *si = NULL;
+    ASN1_UTF8STRING *utf8_text = NULL;
+    int ret = 0;
+
+    if ((si = TS_STATUS_INFO_new()) == NULL)
+        goto err;
+    if (!ASN1_INTEGER_set(si->status, status))
+        goto err;
+    if (text) {
+        if ((utf8_text = ASN1_UTF8STRING_new()) == NULL
+            || !ASN1_STRING_set(utf8_text, text, strlen(text)))
+            goto err;
+        if (si->text == NULL
+            && (si->text = sk_ASN1_UTF8STRING_new_null()) == NULL)
+            goto err;
+        if (!sk_ASN1_UTF8STRING_push(si->text, utf8_text))
+            goto err;
+        utf8_text = NULL;       /* Ownership is lost. */
+    }
+    if (!TS_RESP_set_status_info(ctx->response, si))
+        goto err;
+    ret = 1;
+ err:
+    if (!ret)
+        TSerr(TS_F_TS_RESP_CTX_SET_STATUS_INFO, ERR_R_MALLOC_FAILURE);
+    TS_STATUS_INFO_free(si);
+    ASN1_UTF8STRING_free(utf8_text);
+    return ret;
+}
+
+int TS_RESP_CTX_set_status_info_cond(TS_RESP_CTX *ctx,
+                                     int status, const char *text)
+{
+    int ret = 1;
+    TS_STATUS_INFO *si = ctx->response->status_info;
+
+    if (ASN1_INTEGER_get(si->status) == TS_STATUS_GRANTED) {
+        ret = TS_RESP_CTX_set_status_info(ctx, status, text);
+    }
+    return ret;
+}
+
+int TS_RESP_CTX_add_failure_info(TS_RESP_CTX *ctx, int failure)
+{
+    TS_STATUS_INFO *si = ctx->response->status_info;
+    if (si->failure_info == NULL
+        && (si->failure_info = ASN1_BIT_STRING_new()) == NULL)
+        goto err;
+    if (!ASN1_BIT_STRING_set_bit(si->failure_info, failure, 1))
+        goto err;
+    return 1;
+ err:
+    TSerr(TS_F_TS_RESP_CTX_ADD_FAILURE_INFO, ERR_R_MALLOC_FAILURE);
+    return 0;
+}
+
+TS_REQ *TS_RESP_CTX_get_request(TS_RESP_CTX *ctx)
+{
+    return ctx->request;
+}
+
+TS_TST_INFO *TS_RESP_CTX_get_tst_info(TS_RESP_CTX *ctx)
+{
+    return ctx->tst_info;
+}
+
+int TS_RESP_CTX_set_clock_precision_digits(TS_RESP_CTX *ctx,
+                                           unsigned precision)
+{
+    if (precision > TS_MAX_CLOCK_PRECISION_DIGITS)
+        return 0;
+    ctx->clock_precision_digits = precision;
+    return 1;
+}
+
+/* Main entry method of the response generation. */
+TS_RESP *TS_RESP_create_response(TS_RESP_CTX *ctx, BIO *req_bio)
+{
+    ASN1_OBJECT *policy;
+    TS_RESP *response;
+    int result = 0;
+
+    ts_RESP_CTX_init(ctx);
+
+    if ((ctx->response = TS_RESP_new()) == NULL) {
+        TSerr(TS_F_TS_RESP_CREATE_RESPONSE, ERR_R_MALLOC_FAILURE);
+        goto end;
+    }
+    if ((ctx->request = d2i_TS_REQ_bio(req_bio, NULL)) == NULL) {
+        TS_RESP_CTX_set_status_info(ctx, TS_STATUS_REJECTION,
+                                    "Bad request format or system error.");
+        TS_RESP_CTX_add_failure_info(ctx, TS_INFO_BAD_DATA_FORMAT);
+        goto end;
+    }
+    if (!TS_RESP_CTX_set_status_info(ctx, TS_STATUS_GRANTED, NULL))
+        goto end;
+    if (!ts_RESP_check_request(ctx))
+        goto end;
+    if ((policy = ts_RESP_get_policy(ctx)) == NULL)
+        goto end;
+    if ((ctx->tst_info = ts_RESP_create_tst_info(ctx, policy)) == NULL)
+        goto end;
+    if (!ts_RESP_process_extensions(ctx))
+        goto end;
+    if (!ts_RESP_sign(ctx))
+        goto end;
+    result = 1;
+
+ end:
+    if (!result) {
+        TSerr(TS_F_TS_RESP_CREATE_RESPONSE, TS_R_RESPONSE_SETUP_ERROR);
+        if (ctx->response != NULL) {
+            if (TS_RESP_CTX_set_status_info_cond(ctx,
+                                                 TS_STATUS_REJECTION,
+                                                 "Error during response "
+                                                 "generation.") == 0) {
+                TS_RESP_free(ctx->response);
+                ctx->response = NULL;
+            }
+        }
+    }
+    response = ctx->response;
+    ctx->response = NULL;       /* Ownership will be returned to caller. */
+    ts_RESP_CTX_cleanup(ctx);
+    return response;
+}
+
+/* Initializes the variable part of the context. */
+static void ts_RESP_CTX_init(TS_RESP_CTX *ctx)
+{
+    ctx->request = NULL;
+    ctx->response = NULL;
+    ctx->tst_info = NULL;
+}
+
+/* Cleans up the variable part of the context. */
+static void ts_RESP_CTX_cleanup(TS_RESP_CTX *ctx)
+{
+    TS_REQ_free(ctx->request);
+    ctx->request = NULL;
+    TS_RESP_free(ctx->response);
+    ctx->response = NULL;
+    TS_TST_INFO_free(ctx->tst_info);
+    ctx->tst_info = NULL;
+}
+
+/* Checks the format and content of the request. */
+static int ts_RESP_check_request(TS_RESP_CTX *ctx)
+{
+    TS_REQ *request = ctx->request;
+    TS_MSG_IMPRINT *msg_imprint;
+    X509_ALGOR *md_alg;
+    int md_alg_id;
+    const ASN1_OCTET_STRING *digest;
+    const EVP_MD *md = NULL;
+    int i;
+
+    if (TS_REQ_get_version(request) != 1) {
+        TS_RESP_CTX_set_status_info(ctx, TS_STATUS_REJECTION,
+                                    "Bad request version.");
+        TS_RESP_CTX_add_failure_info(ctx, TS_INFO_BAD_REQUEST);
+        return 0;
+    }
+
+    msg_imprint = request->msg_imprint;
+    md_alg = msg_imprint->hash_algo;
+    md_alg_id = OBJ_obj2nid(md_alg->algorithm);
+    for (i = 0; !md && i < sk_EVP_MD_num(ctx->mds); ++i) {
+        const EVP_MD *current_md = sk_EVP_MD_value(ctx->mds, i);
+        if (md_alg_id == EVP_MD_type(current_md))
+            md = current_md;
+    }
+    if (!md) {
+        TS_RESP_CTX_set_status_info(ctx, TS_STATUS_REJECTION,
+                                    "Message digest algorithm is "
+                                    "not supported.");
+        TS_RESP_CTX_add_failure_info(ctx, TS_INFO_BAD_ALG);
+        return 0;
+    }
+
+    if (md_alg->parameter && ASN1_TYPE_get(md_alg->parameter) != V_ASN1_NULL) {
+        TS_RESP_CTX_set_status_info(ctx, TS_STATUS_REJECTION,
+                                    "Superfluous message digest "
+                                    "parameter.");
+        TS_RESP_CTX_add_failure_info(ctx, TS_INFO_BAD_ALG);
+        return 0;
+    }
+    digest = msg_imprint->hashed_msg;
+    if (digest->length != EVP_MD_size(md)) {
+        TS_RESP_CTX_set_status_info(ctx, TS_STATUS_REJECTION,
+                                    "Bad message digest.");
+        TS_RESP_CTX_add_failure_info(ctx, TS_INFO_BAD_DATA_FORMAT);
+        return 0;
+    }
+
+    return 1;
+}
+
+/* Returns the TSA policy based on the requested and acceptable policies. */
+static ASN1_OBJECT *ts_RESP_get_policy(TS_RESP_CTX *ctx)
+{
+    ASN1_OBJECT *requested = ctx->request->policy_id;
+    ASN1_OBJECT *policy = NULL;
+    int i;
+
+    if (ctx->default_policy == NULL) {
+        TSerr(TS_F_TS_RESP_GET_POLICY, TS_R_INVALID_NULL_POINTER);
+        return NULL;
+    }
+    if (!requested || !OBJ_cmp(requested, ctx->default_policy))
+        policy = ctx->default_policy;
+
+    /* Check if the policy is acceptable. */
+    for (i = 0; !policy && i < sk_ASN1_OBJECT_num(ctx->policies); ++i) {
+        ASN1_OBJECT *current = sk_ASN1_OBJECT_value(ctx->policies, i);
+        if (!OBJ_cmp(requested, current))
+            policy = current;
+    }
+    if (!policy) {
+        TSerr(TS_F_TS_RESP_GET_POLICY, TS_R_UNACCEPTABLE_POLICY);
+        TS_RESP_CTX_set_status_info(ctx, TS_STATUS_REJECTION,
+                                    "Requested policy is not " "supported.");
+        TS_RESP_CTX_add_failure_info(ctx, TS_INFO_UNACCEPTED_POLICY);
+    }
+    return policy;
+}
+
+/* Creates the TS_TST_INFO object based on the settings of the context. */
+static TS_TST_INFO *ts_RESP_create_tst_info(TS_RESP_CTX *ctx,
+                                            ASN1_OBJECT *policy)
+{
+    int result = 0;
+    TS_TST_INFO *tst_info = NULL;
+    ASN1_INTEGER *serial = NULL;
+    ASN1_GENERALIZEDTIME *asn1_time = NULL;
+    long sec, usec;
+    TS_ACCURACY *accuracy = NULL;
+    const ASN1_INTEGER *nonce;
+    GENERAL_NAME *tsa_name = NULL;
+
+    if ((tst_info = TS_TST_INFO_new()) == NULL)
+        goto end;
+    if (!TS_TST_INFO_set_version(tst_info, 1))
+        goto end;
+    if (!TS_TST_INFO_set_policy_id(tst_info, policy))
+        goto end;
+    if (!TS_TST_INFO_set_msg_imprint(tst_info, ctx->request->msg_imprint))
+        goto end;
+    if ((serial = ctx->serial_cb(ctx, ctx->serial_cb_data)) == NULL
+        || !TS_TST_INFO_set_serial(tst_info, serial))
+        goto end;
+    if (!ctx->time_cb(ctx, ctx->time_cb_data, &sec, &usec)
+        || (asn1_time =
+            TS_RESP_set_genTime_with_precision(NULL, sec, usec,
+                                        ctx->clock_precision_digits)) == NULL
+        || !TS_TST_INFO_set_time(tst_info, asn1_time))
+        goto end;
+
+    if ((ctx->seconds || ctx->millis || ctx->micros)
+        && (accuracy = TS_ACCURACY_new()) == NULL)
+        goto end;
+    if (ctx->seconds && !TS_ACCURACY_set_seconds(accuracy, ctx->seconds))
+        goto end;
+    if (ctx->millis && !TS_ACCURACY_set_millis(accuracy, ctx->millis))
+        goto end;
+    if (ctx->micros && !TS_ACCURACY_set_micros(accuracy, ctx->micros))
+        goto end;
+    if (accuracy && !TS_TST_INFO_set_accuracy(tst_info, accuracy))
+        goto end;
+
+    if ((ctx->flags & TS_ORDERING)
+        && !TS_TST_INFO_set_ordering(tst_info, 1))
+        goto end;
+
+    if ((nonce = ctx->request->nonce) != NULL
+        && !TS_TST_INFO_set_nonce(tst_info, nonce))
+        goto end;
+
+    if (ctx->flags & TS_TSA_NAME) {
+        if ((tsa_name = GENERAL_NAME_new()) == NULL)
+            goto end;
+        tsa_name->type = GEN_DIRNAME;
+        tsa_name->d.dirn =
+            X509_NAME_dup(X509_get_subject_name(ctx->signer_cert));
+        if (!tsa_name->d.dirn)
+            goto end;
+        if (!TS_TST_INFO_set_tsa(tst_info, tsa_name))
+            goto end;
+    }
+
+    result = 1;
+ end:
+    if (!result) {
+        TS_TST_INFO_free(tst_info);
+        tst_info = NULL;
+        TSerr(TS_F_TS_RESP_CREATE_TST_INFO, TS_R_TST_INFO_SETUP_ERROR);
+        TS_RESP_CTX_set_status_info_cond(ctx, TS_STATUS_REJECTION,
+                                         "Error during TSTInfo "
+                                         "generation.");
+    }
+    GENERAL_NAME_free(tsa_name);
+    TS_ACCURACY_free(accuracy);
+    ASN1_GENERALIZEDTIME_free(asn1_time);
+    ASN1_INTEGER_free(serial);
+
+    return tst_info;
+}
+
+/* Processing the extensions of the request. */
+static int ts_RESP_process_extensions(TS_RESP_CTX *ctx)
+{
+    STACK_OF(X509_EXTENSION) *exts = ctx->request->extensions;
+    int i;
+    int ok = 1;
+
+    for (i = 0; ok && i < sk_X509_EXTENSION_num(exts); ++i) {
+        X509_EXTENSION *ext = sk_X509_EXTENSION_value(exts, i);
+        /*
+         * The last argument was previously (void *)ctx->extension_cb,
+         * but ISO C doesn't permit converting a function pointer to void *.
+         * For lack of better information, I'm placing a NULL there instead.
+         * The callback can pick its own address out from the ctx anyway...
+         */
+        ok = (*ctx->extension_cb) (ctx, ext, NULL);
+    }
+
+    return ok;
+}
+
+/* Functions for signing the TS_TST_INFO structure of the context. */
+static int ts_RESP_sign(TS_RESP_CTX *ctx)
+{
+    int ret = 0;
+    PKCS7 *p7 = NULL;
+    PKCS7_SIGNER_INFO *si;
+    STACK_OF(X509) *certs;      /* Certificates to include in sc. */
+    ESS_SIGNING_CERT_V2 *sc2 = NULL;
+    ESS_SIGNING_CERT *sc = NULL;
+    ASN1_OBJECT *oid;
+    BIO *p7bio = NULL;
+    int i;
+
+    if (!X509_check_private_key(ctx->signer_cert, ctx->signer_key)) {
+        TSerr(TS_F_TS_RESP_SIGN, TS_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE);
+        goto err;
+    }
+
+    if ((p7 = PKCS7_new()) == NULL) {
+        TSerr(TS_F_TS_RESP_SIGN, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if (!PKCS7_set_type(p7, NID_pkcs7_signed))
+        goto err;
+    if (!ASN1_INTEGER_set(p7->d.sign->version, 3))
+        goto err;
+
+    if (ctx->request->cert_req) {
+        PKCS7_add_certificate(p7, ctx->signer_cert);
+        if (ctx->certs) {
+            for (i = 0; i < sk_X509_num(ctx->certs); ++i) {
+                X509 *cert = sk_X509_value(ctx->certs, i);
+                PKCS7_add_certificate(p7, cert);
+            }
+        }
+    }
+
+    if ((si = PKCS7_add_signature(p7, ctx->signer_cert,
+                                  ctx->signer_key, ctx->signer_md)) == NULL) {
+        TSerr(TS_F_TS_RESP_SIGN, TS_R_PKCS7_ADD_SIGNATURE_ERROR);
+        goto err;
+    }
+
+    oid = OBJ_nid2obj(NID_id_smime_ct_TSTInfo);
+    if (!PKCS7_add_signed_attribute(si, NID_pkcs9_contentType,
+                                    V_ASN1_OBJECT, oid)) {
+        TSerr(TS_F_TS_RESP_SIGN, TS_R_PKCS7_ADD_SIGNED_ATTR_ERROR);
+        goto err;
+    }
+
+    certs = ctx->flags & TS_ESS_CERT_ID_CHAIN ? ctx->certs : NULL;
+    if (ctx->ess_cert_id_digest == NULL
+        || ctx->ess_cert_id_digest == EVP_sha1()) {
+        if ((sc = ess_SIGNING_CERT_new_init(ctx->signer_cert, certs)) == NULL)
+            goto err;
+
+        if (!ess_add_signing_cert(si, sc)) {
+            TSerr(TS_F_TS_RESP_SIGN, TS_R_ESS_ADD_SIGNING_CERT_ERROR);
+            goto err;
+        }
+    } else {
+        sc2 = ess_signing_cert_v2_new_init(ctx->ess_cert_id_digest,
+                                           ctx->signer_cert, certs);
+        if (sc2 == NULL)
+            goto err;
+
+        if (!ess_add_signing_cert_v2(si, sc2)) {
+            TSerr(TS_F_TS_RESP_SIGN, TS_R_ESS_ADD_SIGNING_CERT_V2_ERROR);
+            goto err;
+        }
+    }
+
+    if (!ts_TST_INFO_content_new(p7))
+        goto err;
+    if ((p7bio = PKCS7_dataInit(p7, NULL)) == NULL) {
+        TSerr(TS_F_TS_RESP_SIGN, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if (!i2d_TS_TST_INFO_bio(p7bio, ctx->tst_info)) {
+        TSerr(TS_F_TS_RESP_SIGN, TS_R_TS_DATASIGN);
+        goto err;
+    }
+    if (!PKCS7_dataFinal(p7, p7bio)) {
+        TSerr(TS_F_TS_RESP_SIGN, TS_R_TS_DATASIGN);
+        goto err;
+    }
+    TS_RESP_set_tst_info(ctx->response, p7, ctx->tst_info);
+    p7 = NULL;                  /* Ownership is lost. */
+    ctx->tst_info = NULL;       /* Ownership is lost. */
+
+    ret = 1;
+ err:
+    if (!ret)
+        TS_RESP_CTX_set_status_info_cond(ctx, TS_STATUS_REJECTION,
+                                         "Error during signature "
+                                         "generation.");
+    BIO_free_all(p7bio);
+    ESS_SIGNING_CERT_V2_free(sc2);
+    ESS_SIGNING_CERT_free(sc);
+    PKCS7_free(p7);
+    return ret;
+}
+
+static ESS_SIGNING_CERT *ess_SIGNING_CERT_new_init(X509 *signcert,
+                                                   STACK_OF(X509) *certs)
+{
+    ESS_CERT_ID *cid;
+    ESS_SIGNING_CERT *sc = NULL;
+    int i;
+
+    if ((sc = ESS_SIGNING_CERT_new()) == NULL)
+        goto err;
+    if (sc->cert_ids == NULL
+        && (sc->cert_ids = sk_ESS_CERT_ID_new_null()) == NULL)
+        goto err;
+
+    if ((cid = ess_CERT_ID_new_init(signcert, 0)) == NULL
+        || !sk_ESS_CERT_ID_push(sc->cert_ids, cid))
+        goto err;
+    for (i = 0; i < sk_X509_num(certs); ++i) {
+        X509 *cert = sk_X509_value(certs, i);
+        if ((cid = ess_CERT_ID_new_init(cert, 1)) == NULL
+            || !sk_ESS_CERT_ID_push(sc->cert_ids, cid))
+            goto err;
+    }
+
+    return sc;
+ err:
+    ESS_SIGNING_CERT_free(sc);
+    TSerr(TS_F_ESS_SIGNING_CERT_NEW_INIT, ERR_R_MALLOC_FAILURE);
+    return NULL;
+}
+
+static ESS_CERT_ID *ess_CERT_ID_new_init(X509 *cert, int issuer_needed)
+{
+    ESS_CERT_ID *cid = NULL;
+    GENERAL_NAME *name = NULL;
+    unsigned char cert_sha1[SHA_DIGEST_LENGTH];
+
+    /* Call for side-effect of computing hash and caching extensions */
+    X509_check_purpose(cert, -1, 0);
+    if ((cid = ESS_CERT_ID_new()) == NULL)
+        goto err;
+    X509_digest(cert, EVP_sha1(), cert_sha1, NULL);
+    if (!ASN1_OCTET_STRING_set(cid->hash, cert_sha1, SHA_DIGEST_LENGTH))
+        goto err;
+
+    /* Setting the issuer/serial if requested. */
+    if (issuer_needed) {
+        if (cid->issuer_serial == NULL
+            && (cid->issuer_serial = ESS_ISSUER_SERIAL_new()) == NULL)
+            goto err;
+        if ((name = GENERAL_NAME_new()) == NULL)
+            goto err;
+        name->type = GEN_DIRNAME;
+        if ((name->d.dirn = X509_NAME_dup(X509_get_issuer_name(cert))) == NULL)
+            goto err;
+        if (!sk_GENERAL_NAME_push(cid->issuer_serial->issuer, name))
+            goto err;
+        name = NULL;            /* Ownership is lost. */
+        ASN1_INTEGER_free(cid->issuer_serial->serial);
+        if (!(cid->issuer_serial->serial =
+              ASN1_INTEGER_dup(X509_get_serialNumber(cert))))
+            goto err;
+    }
+
+    return cid;
+ err:
+    GENERAL_NAME_free(name);
+    ESS_CERT_ID_free(cid);
+    TSerr(TS_F_ESS_CERT_ID_NEW_INIT, ERR_R_MALLOC_FAILURE);
+    return NULL;
+}
+
+static int ts_TST_INFO_content_new(PKCS7 *p7)
+{
+    PKCS7 *ret = NULL;
+    ASN1_OCTET_STRING *octet_string = NULL;
+
+    /* Create new encapsulated NID_id_smime_ct_TSTInfo content. */
+    if ((ret = PKCS7_new()) == NULL)
+        goto err;
+    if ((ret->d.other = ASN1_TYPE_new()) == NULL)
+        goto err;
+    ret->type = OBJ_nid2obj(NID_id_smime_ct_TSTInfo);
+    if ((octet_string = ASN1_OCTET_STRING_new()) == NULL)
+        goto err;
+    ASN1_TYPE_set(ret->d.other, V_ASN1_OCTET_STRING, octet_string);
+    octet_string = NULL;
+
+    /* Add encapsulated content to signed PKCS7 structure. */
+    if (!PKCS7_set_content(p7, ret))
+        goto err;
+
+    return 1;
+ err:
+    ASN1_OCTET_STRING_free(octet_string);
+    PKCS7_free(ret);
+    return 0;
+}
+
+static int ess_add_signing_cert(PKCS7_SIGNER_INFO *si, ESS_SIGNING_CERT *sc)
+{
+    ASN1_STRING *seq = NULL;
+    unsigned char *p, *pp = NULL;
+    int len;
+
+    len = i2d_ESS_SIGNING_CERT(sc, NULL);
+    if ((pp = OPENSSL_malloc(len)) == NULL) {
+        TSerr(TS_F_ESS_ADD_SIGNING_CERT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    p = pp;
+    i2d_ESS_SIGNING_CERT(sc, &p);
+    if ((seq = ASN1_STRING_new()) == NULL || !ASN1_STRING_set(seq, pp, len)) {
+        TSerr(TS_F_ESS_ADD_SIGNING_CERT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    OPENSSL_free(pp);
+    pp = NULL;
+    return PKCS7_add_signed_attribute(si,
+                                      NID_id_smime_aa_signingCertificate,
+                                      V_ASN1_SEQUENCE, seq);
+ err:
+    ASN1_STRING_free(seq);
+    OPENSSL_free(pp);
+
+    return 0;
+}
+
+static ESS_SIGNING_CERT_V2 *ess_signing_cert_v2_new_init(const EVP_MD *hash_alg,
+                                                         X509 *signcert,
+                                                         STACK_OF(X509) *certs)
+{
+    ESS_CERT_ID_V2 *cid = NULL;
+    ESS_SIGNING_CERT_V2 *sc = NULL;
+    int i;
+
+    if ((sc = ESS_SIGNING_CERT_V2_new()) == NULL)
+        goto err;
+    if ((cid = ess_cert_id_v2_new_init(hash_alg, signcert, 0)) == NULL)
+        goto err;
+    if (!sk_ESS_CERT_ID_V2_push(sc->cert_ids, cid))
+        goto err;
+    cid = NULL;
+
+    for (i = 0; i < sk_X509_num(certs); ++i) {
+        X509 *cert = sk_X509_value(certs, i);
+
+        if ((cid = ess_cert_id_v2_new_init(hash_alg, cert, 1)) == NULL)
+            goto err;
+        if (!sk_ESS_CERT_ID_V2_push(sc->cert_ids, cid))
+            goto err;
+        cid = NULL;
+    }
+
+    return sc;
+ err:
+    ESS_SIGNING_CERT_V2_free(sc);
+    ESS_CERT_ID_V2_free(cid);
+    TSerr(TS_F_ESS_SIGNING_CERT_V2_NEW_INIT, ERR_R_MALLOC_FAILURE);
+    return NULL;
+}
+
+static ESS_CERT_ID_V2 *ess_cert_id_v2_new_init(const EVP_MD *hash_alg,
+                                               X509 *cert, int issuer_needed)
+{
+    ESS_CERT_ID_V2 *cid = NULL;
+    GENERAL_NAME *name = NULL;
+    unsigned char hash[EVP_MAX_MD_SIZE];
+    unsigned int hash_len = sizeof(hash);
+    X509_ALGOR *alg = NULL;
+
+    memset(hash, 0, sizeof(hash));
+
+    if ((cid = ESS_CERT_ID_V2_new()) == NULL)
+        goto err;
+
+    if (hash_alg != EVP_sha256()) {
+        alg = X509_ALGOR_new();
+        if (alg == NULL)
+            goto err;
+        X509_ALGOR_set_md(alg, hash_alg);
+        if (alg->algorithm == NULL)
+            goto err;
+        cid->hash_alg = alg;
+        alg = NULL;
+    } else {
+        cid->hash_alg = NULL;
+    }
+
+    if (!X509_digest(cert, hash_alg, hash, &hash_len))
+        goto err;
+
+    if (!ASN1_OCTET_STRING_set(cid->hash, hash, hash_len))
+        goto err;
+
+    if (issuer_needed) {
+        if ((cid->issuer_serial = ESS_ISSUER_SERIAL_new()) == NULL)
+            goto err;
+        if ((name = GENERAL_NAME_new()) == NULL)
+            goto err;
+        name->type = GEN_DIRNAME;
+        if ((name->d.dirn = X509_NAME_dup(X509_get_issuer_name(cert))) == NULL)
+            goto err;
+        if (!sk_GENERAL_NAME_push(cid->issuer_serial->issuer, name))
+            goto err;
+        name = NULL;            /* Ownership is lost. */
+        ASN1_INTEGER_free(cid->issuer_serial->serial);
+        cid->issuer_serial->serial =
+                ASN1_INTEGER_dup(X509_get_serialNumber(cert));
+        if (cid->issuer_serial->serial == NULL)
+            goto err;
+    }
+
+    return cid;
+ err:
+    X509_ALGOR_free(alg);
+    GENERAL_NAME_free(name);
+    ESS_CERT_ID_V2_free(cid);
+    TSerr(TS_F_ESS_CERT_ID_V2_NEW_INIT, ERR_R_MALLOC_FAILURE);
+    return NULL;
+}
+
+static int ess_add_signing_cert_v2(PKCS7_SIGNER_INFO *si,
+                                   ESS_SIGNING_CERT_V2 *sc)
+{
+    ASN1_STRING *seq = NULL;
+    unsigned char *p, *pp = NULL;
+    int len = i2d_ESS_SIGNING_CERT_V2(sc, NULL);
+
+    if ((pp = OPENSSL_malloc(len)) == NULL) {
+        TSerr(TS_F_ESS_ADD_SIGNING_CERT_V2, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    p = pp;
+    i2d_ESS_SIGNING_CERT_V2(sc, &p);
+    if ((seq = ASN1_STRING_new()) == NULL || !ASN1_STRING_set(seq, pp, len)) {
+        TSerr(TS_F_ESS_ADD_SIGNING_CERT_V2, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    OPENSSL_free(pp);
+    pp = NULL;
+    return PKCS7_add_signed_attribute(si,
+                                      NID_id_smime_aa_signingCertificateV2,
+                                      V_ASN1_SEQUENCE, seq);
+ err:
+    ASN1_STRING_free(seq);
+    OPENSSL_free(pp);
+    return 0;
+}
+
+static ASN1_GENERALIZEDTIME *TS_RESP_set_genTime_with_precision(
+        ASN1_GENERALIZEDTIME *asn1_time, long sec, long usec,
+        unsigned precision)
+{
+    time_t time_sec = (time_t)sec;
+    struct tm *tm = NULL, tm_result;
+    char genTime_str[17 + TS_MAX_CLOCK_PRECISION_DIGITS];
+    char *p = genTime_str;
+    char *p_end = genTime_str + sizeof(genTime_str);
+
+    if (precision > TS_MAX_CLOCK_PRECISION_DIGITS)
+        goto err;
+
+    if ((tm = OPENSSL_gmtime(&time_sec, &tm_result)) == NULL)
+        goto err;
+
+    /*
+     * Put "genTime_str" in GeneralizedTime format.  We work around the
+     * restrictions imposed by rfc3280 (i.e. "GeneralizedTime values MUST
+     * NOT include fractional seconds") and OpenSSL related functions to
+     * meet the rfc3161 requirement: "GeneralizedTime syntax can include
+     * fraction-of-second details".
+     */
+    p += BIO_snprintf(p, p_end - p,
+                      "%04d%02d%02d%02d%02d%02d",
+                      tm->tm_year + 1900, tm->tm_mon + 1, tm->tm_mday,
+                      tm->tm_hour, tm->tm_min, tm->tm_sec);
+    if (precision > 0) {
+        BIO_snprintf(p, 2 + precision, ".%06ld", usec);
+        p += strlen(p);
+
+        /*
+         * To make things a bit harder, X.690 | ISO/IEC 8825-1 provides the
+         * following restrictions for a DER-encoding, which OpenSSL
+         * (specifically ASN1_GENERALIZEDTIME_check() function) doesn't
+         * support: "The encoding MUST terminate with a "Z" (which means
+         * "Zulu" time). The decimal point element, if present, MUST be the
+         * point option ".". The fractional-seconds elements, if present,
+         * MUST omit all trailing 0's; if the elements correspond to 0, they
+         * MUST be wholly omitted, and the decimal point element also MUST be
+         * omitted."
+         */
+        /*
+         * Remove trailing zeros. The dot guarantees the exit condition of
+         * this loop even if all the digits are zero.
+         */
+        while (*--p == '0')
+             continue;
+        if (*p != '.')
+            ++p;
+    }
+    *p++ = 'Z';
+    *p++ = '\0';
+
+    if (asn1_time == NULL
+        && (asn1_time = ASN1_GENERALIZEDTIME_new()) == NULL)
+        goto err;
+    if (!ASN1_GENERALIZEDTIME_set_string(asn1_time, genTime_str)) {
+        ASN1_GENERALIZEDTIME_free(asn1_time);
+        goto err;
+    }
+    return asn1_time;
+
+ err:
+    TSerr(TS_F_TS_RESP_SET_GENTIME_WITH_PRECISION, TS_R_COULD_NOT_SET_TIME);
+    return NULL;
+}
+
+int TS_RESP_CTX_set_ess_cert_id_digest(TS_RESP_CTX *ctx, const EVP_MD *md)
+{
+    ctx->ess_cert_id_digest = md;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_rsp_utils.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_rsp_utils.c
new file mode 100644
index 000000000..3ecee39a2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_rsp_utils.c
@@ -0,0 +1,365 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/ts.h>
+#include <openssl/pkcs7.h>
+#include "ts_lcl.h"
+
+int TS_RESP_set_status_info(TS_RESP *a, TS_STATUS_INFO *status_info)
+{
+    TS_STATUS_INFO *new_status_info;
+
+    if (a->status_info == status_info)
+        return 1;
+    new_status_info = TS_STATUS_INFO_dup(status_info);
+    if (new_status_info == NULL) {
+        TSerr(TS_F_TS_RESP_SET_STATUS_INFO, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    TS_STATUS_INFO_free(a->status_info);
+    a->status_info = new_status_info;
+
+    return 1;
+}
+
+TS_STATUS_INFO *TS_RESP_get_status_info(TS_RESP *a)
+{
+    return a->status_info;
+}
+
+/* Caller loses ownership of PKCS7 and TS_TST_INFO objects. */
+void TS_RESP_set_tst_info(TS_RESP *a, PKCS7 *p7, TS_TST_INFO *tst_info)
+{
+    PKCS7_free(a->token);
+    a->token = p7;
+    TS_TST_INFO_free(a->tst_info);
+    a->tst_info = tst_info;
+}
+
+PKCS7 *TS_RESP_get_token(TS_RESP *a)
+{
+    return a->token;
+}
+
+TS_TST_INFO *TS_RESP_get_tst_info(TS_RESP *a)
+{
+    return a->tst_info;
+}
+
+int TS_TST_INFO_set_version(TS_TST_INFO *a, long version)
+{
+    return ASN1_INTEGER_set(a->version, version);
+}
+
+long TS_TST_INFO_get_version(const TS_TST_INFO *a)
+{
+    return ASN1_INTEGER_get(a->version);
+}
+
+int TS_TST_INFO_set_policy_id(TS_TST_INFO *a, ASN1_OBJECT *policy)
+{
+    ASN1_OBJECT *new_policy;
+
+    if (a->policy_id == policy)
+        return 1;
+    new_policy = OBJ_dup(policy);
+    if (new_policy == NULL) {
+        TSerr(TS_F_TS_TST_INFO_SET_POLICY_ID, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ASN1_OBJECT_free(a->policy_id);
+    a->policy_id = new_policy;
+    return 1;
+}
+
+ASN1_OBJECT *TS_TST_INFO_get_policy_id(TS_TST_INFO *a)
+{
+    return a->policy_id;
+}
+
+int TS_TST_INFO_set_msg_imprint(TS_TST_INFO *a, TS_MSG_IMPRINT *msg_imprint)
+{
+    TS_MSG_IMPRINT *new_msg_imprint;
+
+    if (a->msg_imprint == msg_imprint)
+        return 1;
+    new_msg_imprint = TS_MSG_IMPRINT_dup(msg_imprint);
+    if (new_msg_imprint == NULL) {
+        TSerr(TS_F_TS_TST_INFO_SET_MSG_IMPRINT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    TS_MSG_IMPRINT_free(a->msg_imprint);
+    a->msg_imprint = new_msg_imprint;
+    return 1;
+}
+
+TS_MSG_IMPRINT *TS_TST_INFO_get_msg_imprint(TS_TST_INFO *a)
+{
+    return a->msg_imprint;
+}
+
+int TS_TST_INFO_set_serial(TS_TST_INFO *a, const ASN1_INTEGER *serial)
+{
+    ASN1_INTEGER *new_serial;
+
+    if (a->serial == serial)
+        return 1;
+    new_serial = ASN1_INTEGER_dup(serial);
+    if (new_serial == NULL) {
+        TSerr(TS_F_TS_TST_INFO_SET_SERIAL, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ASN1_INTEGER_free(a->serial);
+    a->serial = new_serial;
+    return 1;
+}
+
+const ASN1_INTEGER *TS_TST_INFO_get_serial(const TS_TST_INFO *a)
+{
+    return a->serial;
+}
+
+int TS_TST_INFO_set_time(TS_TST_INFO *a, const ASN1_GENERALIZEDTIME *gtime)
+{
+    ASN1_GENERALIZEDTIME *new_time;
+
+    if (a->time == gtime)
+        return 1;
+    new_time = ASN1_STRING_dup(gtime);
+    if (new_time == NULL) {
+        TSerr(TS_F_TS_TST_INFO_SET_TIME, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ASN1_GENERALIZEDTIME_free(a->time);
+    a->time = new_time;
+    return 1;
+}
+
+const ASN1_GENERALIZEDTIME *TS_TST_INFO_get_time(const TS_TST_INFO *a)
+{
+    return a->time;
+}
+
+int TS_TST_INFO_set_accuracy(TS_TST_INFO *a, TS_ACCURACY *accuracy)
+{
+    TS_ACCURACY *new_accuracy;
+
+    if (a->accuracy == accuracy)
+        return 1;
+    new_accuracy = TS_ACCURACY_dup(accuracy);
+    if (new_accuracy == NULL) {
+        TSerr(TS_F_TS_TST_INFO_SET_ACCURACY, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    TS_ACCURACY_free(a->accuracy);
+    a->accuracy = new_accuracy;
+    return 1;
+}
+
+TS_ACCURACY *TS_TST_INFO_get_accuracy(TS_TST_INFO *a)
+{
+    return a->accuracy;
+}
+
+int TS_ACCURACY_set_seconds(TS_ACCURACY *a, const ASN1_INTEGER *seconds)
+{
+    ASN1_INTEGER *new_seconds;
+
+    if (a->seconds == seconds)
+        return 1;
+    new_seconds = ASN1_INTEGER_dup(seconds);
+    if (new_seconds == NULL) {
+        TSerr(TS_F_TS_ACCURACY_SET_SECONDS, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ASN1_INTEGER_free(a->seconds);
+    a->seconds = new_seconds;
+    return 1;
+}
+
+const ASN1_INTEGER *TS_ACCURACY_get_seconds(const TS_ACCURACY *a)
+{
+    return a->seconds;
+}
+
+int TS_ACCURACY_set_millis(TS_ACCURACY *a, const ASN1_INTEGER *millis)
+{
+    ASN1_INTEGER *new_millis = NULL;
+
+    if (a->millis == millis)
+        return 1;
+    if (millis != NULL) {
+        new_millis = ASN1_INTEGER_dup(millis);
+        if (new_millis == NULL) {
+            TSerr(TS_F_TS_ACCURACY_SET_MILLIS, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+    }
+    ASN1_INTEGER_free(a->millis);
+    a->millis = new_millis;
+    return 1;
+}
+
+const ASN1_INTEGER *TS_ACCURACY_get_millis(const TS_ACCURACY *a)
+{
+    return a->millis;
+}
+
+int TS_ACCURACY_set_micros(TS_ACCURACY *a, const ASN1_INTEGER *micros)
+{
+    ASN1_INTEGER *new_micros = NULL;
+
+    if (a->micros == micros)
+        return 1;
+    if (micros != NULL) {
+        new_micros = ASN1_INTEGER_dup(micros);
+        if (new_micros == NULL) {
+            TSerr(TS_F_TS_ACCURACY_SET_MICROS, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+    }
+    ASN1_INTEGER_free(a->micros);
+    a->micros = new_micros;
+    return 1;
+}
+
+const ASN1_INTEGER *TS_ACCURACY_get_micros(const TS_ACCURACY *a)
+{
+    return a->micros;
+}
+
+int TS_TST_INFO_set_ordering(TS_TST_INFO *a, int ordering)
+{
+    a->ordering = ordering ? 0xFF : 0x00;
+    return 1;
+}
+
+int TS_TST_INFO_get_ordering(const TS_TST_INFO *a)
+{
+    return a->ordering ? 1 : 0;
+}
+
+int TS_TST_INFO_set_nonce(TS_TST_INFO *a, const ASN1_INTEGER *nonce)
+{
+    ASN1_INTEGER *new_nonce;
+
+    if (a->nonce == nonce)
+        return 1;
+    new_nonce = ASN1_INTEGER_dup(nonce);
+    if (new_nonce == NULL) {
+        TSerr(TS_F_TS_TST_INFO_SET_NONCE, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ASN1_INTEGER_free(a->nonce);
+    a->nonce = new_nonce;
+    return 1;
+}
+
+const ASN1_INTEGER *TS_TST_INFO_get_nonce(const TS_TST_INFO *a)
+{
+    return a->nonce;
+}
+
+int TS_TST_INFO_set_tsa(TS_TST_INFO *a, GENERAL_NAME *tsa)
+{
+    GENERAL_NAME *new_tsa;
+
+    if (a->tsa == tsa)
+        return 1;
+    new_tsa = GENERAL_NAME_dup(tsa);
+    if (new_tsa == NULL) {
+        TSerr(TS_F_TS_TST_INFO_SET_TSA, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    GENERAL_NAME_free(a->tsa);
+    a->tsa = new_tsa;
+    return 1;
+}
+
+GENERAL_NAME *TS_TST_INFO_get_tsa(TS_TST_INFO *a)
+{
+    return a->tsa;
+}
+
+STACK_OF(X509_EXTENSION) *TS_TST_INFO_get_exts(TS_TST_INFO *a)
+{
+    return a->extensions;
+}
+
+void TS_TST_INFO_ext_free(TS_TST_INFO *a)
+{
+    if (!a)
+        return;
+    sk_X509_EXTENSION_pop_free(a->extensions, X509_EXTENSION_free);
+    a->extensions = NULL;
+}
+
+int TS_TST_INFO_get_ext_count(TS_TST_INFO *a)
+{
+    return X509v3_get_ext_count(a->extensions);
+}
+
+int TS_TST_INFO_get_ext_by_NID(TS_TST_INFO *a, int nid, int lastpos)
+{
+    return X509v3_get_ext_by_NID(a->extensions, nid, lastpos);
+}
+
+int TS_TST_INFO_get_ext_by_OBJ(TS_TST_INFO *a, const ASN1_OBJECT *obj, int lastpos)
+{
+    return X509v3_get_ext_by_OBJ(a->extensions, obj, lastpos);
+}
+
+int TS_TST_INFO_get_ext_by_critical(TS_TST_INFO *a, int crit, int lastpos)
+{
+    return X509v3_get_ext_by_critical(a->extensions, crit, lastpos);
+}
+
+X509_EXTENSION *TS_TST_INFO_get_ext(TS_TST_INFO *a, int loc)
+{
+    return X509v3_get_ext(a->extensions, loc);
+}
+
+X509_EXTENSION *TS_TST_INFO_delete_ext(TS_TST_INFO *a, int loc)
+{
+    return X509v3_delete_ext(a->extensions, loc);
+}
+
+int TS_TST_INFO_add_ext(TS_TST_INFO *a, X509_EXTENSION *ex, int loc)
+{
+    return X509v3_add_ext(&a->extensions, ex, loc) != NULL;
+}
+
+void *TS_TST_INFO_get_ext_d2i(TS_TST_INFO *a, int nid, int *crit, int *idx)
+{
+    return X509V3_get_d2i(a->extensions, nid, crit, idx);
+}
+
+int TS_STATUS_INFO_set_status(TS_STATUS_INFO *a, int i)
+{
+    return ASN1_INTEGER_set(a->status, i);
+}
+
+const ASN1_INTEGER *TS_STATUS_INFO_get0_status(const TS_STATUS_INFO *a)
+{
+    return a->status;
+}
+
+const STACK_OF(ASN1_UTF8STRING) *
+TS_STATUS_INFO_get0_text(const TS_STATUS_INFO *a)
+{
+    return a->text;
+}
+
+const ASN1_BIT_STRING *TS_STATUS_INFO_get0_failure_info(const TS_STATUS_INFO *a)
+{
+    return a->failure_info;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_rsp_verify.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_rsp_verify.c
new file mode 100644
index 000000000..9deda81b0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_rsp_verify.c
@@ -0,0 +1,704 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/ts.h>
+#include <openssl/pkcs7.h>
+#include "ts_lcl.h"
+
+static int ts_verify_cert(X509_STORE *store, STACK_OF(X509) *untrusted,
+                          X509 *signer, STACK_OF(X509) **chain);
+static int ts_check_signing_certs(PKCS7_SIGNER_INFO *si,
+                                  STACK_OF(X509) *chain);
+static ESS_SIGNING_CERT *ess_get_signing_cert(PKCS7_SIGNER_INFO *si);
+static int ts_find_cert(STACK_OF(ESS_CERT_ID) *cert_ids, X509 *cert);
+static int ts_issuer_serial_cmp(ESS_ISSUER_SERIAL *is, X509 *cert);
+static int int_ts_RESP_verify_token(TS_VERIFY_CTX *ctx,
+                                    PKCS7 *token, TS_TST_INFO *tst_info);
+static int ts_check_status_info(TS_RESP *response);
+static char *ts_get_status_text(STACK_OF(ASN1_UTF8STRING) *text);
+static int ts_check_policy(const ASN1_OBJECT *req_oid,
+                           const TS_TST_INFO *tst_info);
+static int ts_compute_imprint(BIO *data, TS_TST_INFO *tst_info,
+                              X509_ALGOR **md_alg,
+                              unsigned char **imprint, unsigned *imprint_len);
+static int ts_check_imprints(X509_ALGOR *algor_a,
+                             const unsigned char *imprint_a, unsigned len_a,
+                             TS_TST_INFO *tst_info);
+static int ts_check_nonces(const ASN1_INTEGER *a, TS_TST_INFO *tst_info);
+static int ts_check_signer_name(GENERAL_NAME *tsa_name, X509 *signer);
+static int ts_find_name(STACK_OF(GENERAL_NAME) *gen_names,
+                        GENERAL_NAME *name);
+static int ts_find_cert_v2(STACK_OF(ESS_CERT_ID_V2) *cert_ids, X509 *cert);
+static ESS_SIGNING_CERT_V2 *ess_get_signing_cert_v2(PKCS7_SIGNER_INFO *si);
+
+/*
+ * This must be large enough to hold all values in ts_status_text (with
+ * comma separator) or all text fields in ts_failure_info (also with comma).
+ */
+#define TS_STATUS_BUF_SIZE      256
+
+/*
+ * Local mapping between response codes and descriptions.
+ */
+static const char *ts_status_text[] = {
+    "granted",
+    "grantedWithMods",
+    "rejection",
+    "waiting",
+    "revocationWarning",
+    "revocationNotification"
+};
+
+#define TS_STATUS_TEXT_SIZE     OSSL_NELEM(ts_status_text)
+
+static struct {
+    int code;
+    const char *text;
+} ts_failure_info[] = {
+    {TS_INFO_BAD_ALG, "badAlg"},
+    {TS_INFO_BAD_REQUEST, "badRequest"},
+    {TS_INFO_BAD_DATA_FORMAT, "badDataFormat"},
+    {TS_INFO_TIME_NOT_AVAILABLE, "timeNotAvailable"},
+    {TS_INFO_UNACCEPTED_POLICY, "unacceptedPolicy"},
+    {TS_INFO_UNACCEPTED_EXTENSION, "unacceptedExtension"},
+    {TS_INFO_ADD_INFO_NOT_AVAILABLE, "addInfoNotAvailable"},
+    {TS_INFO_SYSTEM_FAILURE, "systemFailure"}
+};
+
+
+/*-
+ * This function carries out the following tasks:
+ *      - Checks if there is one and only one signer.
+ *      - Search for the signing certificate in 'certs' and in the response.
+ *      - Check the extended key usage and key usage fields of the signer
+ *      certificate (done by the path validation).
+ *      - Build and validate the certificate path.
+ *      - Check if the certificate path meets the requirements of the
+ *      SigningCertificate ESS signed attribute.
+ *      - Verify the signature value.
+ *      - Returns the signer certificate in 'signer', if 'signer' is not NULL.
+ */
+int TS_RESP_verify_signature(PKCS7 *token, STACK_OF(X509) *certs,
+                             X509_STORE *store, X509 **signer_out)
+{
+    STACK_OF(PKCS7_SIGNER_INFO) *sinfos = NULL;
+    PKCS7_SIGNER_INFO *si;
+    STACK_OF(X509) *signers = NULL;
+    X509 *signer;
+    STACK_OF(X509) *chain = NULL;
+    char buf[4096];
+    int i, j = 0, ret = 0;
+    BIO *p7bio = NULL;
+
+    /* Some sanity checks first. */
+    if (!token) {
+        TSerr(TS_F_TS_RESP_VERIFY_SIGNATURE, TS_R_INVALID_NULL_POINTER);
+        goto err;
+    }
+    if (!PKCS7_type_is_signed(token)) {
+        TSerr(TS_F_TS_RESP_VERIFY_SIGNATURE, TS_R_WRONG_CONTENT_TYPE);
+        goto err;
+    }
+    sinfos = PKCS7_get_signer_info(token);
+    if (!sinfos || sk_PKCS7_SIGNER_INFO_num(sinfos) != 1) {
+        TSerr(TS_F_TS_RESP_VERIFY_SIGNATURE, TS_R_THERE_MUST_BE_ONE_SIGNER);
+        goto err;
+    }
+    si = sk_PKCS7_SIGNER_INFO_value(sinfos, 0);
+    if (PKCS7_get_detached(token)) {
+        TSerr(TS_F_TS_RESP_VERIFY_SIGNATURE, TS_R_NO_CONTENT);
+        goto err;
+    }
+
+    /*
+     * Get hold of the signer certificate, search only internal certificates
+     * if it was requested.
+     */
+    signers = PKCS7_get0_signers(token, certs, 0);
+    if (!signers || sk_X509_num(signers) != 1)
+        goto err;
+    signer = sk_X509_value(signers, 0);
+
+    if (!ts_verify_cert(store, certs, signer, &chain))
+        goto err;
+    if (!ts_check_signing_certs(si, chain))
+        goto err;
+    p7bio = PKCS7_dataInit(token, NULL);
+
+    /* We now have to 'read' from p7bio to calculate digests etc. */
+    while ((i = BIO_read(p7bio, buf, sizeof(buf))) > 0)
+        continue;
+
+    j = PKCS7_signatureVerify(p7bio, token, si, signer);
+    if (j <= 0) {
+        TSerr(TS_F_TS_RESP_VERIFY_SIGNATURE, TS_R_SIGNATURE_FAILURE);
+        goto err;
+    }
+
+    if (signer_out) {
+        *signer_out = signer;
+        X509_up_ref(signer);
+    }
+    ret = 1;
+
+ err:
+    BIO_free_all(p7bio);
+    sk_X509_pop_free(chain, X509_free);
+    sk_X509_free(signers);
+
+    return ret;
+}
+
+/*
+ * The certificate chain is returned in chain. Caller is responsible for
+ * freeing the vector.
+ */
+static int ts_verify_cert(X509_STORE *store, STACK_OF(X509) *untrusted,
+                          X509 *signer, STACK_OF(X509) **chain)
+{
+    X509_STORE_CTX *cert_ctx = NULL;
+    int i;
+    int ret = 0;
+
+    *chain = NULL;
+    cert_ctx = X509_STORE_CTX_new();
+    if (cert_ctx == NULL) {
+        TSerr(TS_F_TS_VERIFY_CERT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if (!X509_STORE_CTX_init(cert_ctx, store, signer, untrusted))
+        goto end;
+    X509_STORE_CTX_set_purpose(cert_ctx, X509_PURPOSE_TIMESTAMP_SIGN);
+    i = X509_verify_cert(cert_ctx);
+    if (i <= 0) {
+        int j = X509_STORE_CTX_get_error(cert_ctx);
+        TSerr(TS_F_TS_VERIFY_CERT, TS_R_CERTIFICATE_VERIFY_ERROR);
+        ERR_add_error_data(2, "Verify error:",
+                           X509_verify_cert_error_string(j));
+        goto err;
+    }
+    *chain = X509_STORE_CTX_get1_chain(cert_ctx);
+    ret = 1;
+    goto end;
+
+err:
+    ret = 0;
+
+end:
+    X509_STORE_CTX_free(cert_ctx);
+    return ret;
+}
+
+static int ts_check_signing_certs(PKCS7_SIGNER_INFO *si,
+                                  STACK_OF(X509) *chain)
+{
+    ESS_SIGNING_CERT *ss = ess_get_signing_cert(si);
+    STACK_OF(ESS_CERT_ID) *cert_ids = NULL;
+    ESS_SIGNING_CERT_V2 *ssv2 = ess_get_signing_cert_v2(si);
+    STACK_OF(ESS_CERT_ID_V2) *cert_ids_v2 = NULL;
+    X509 *cert;
+    int i = 0;
+    int ret = 0;
+
+    if (ss != NULL) {
+        cert_ids = ss->cert_ids;
+        cert = sk_X509_value(chain, 0);
+        if (ts_find_cert(cert_ids, cert) != 0)
+            goto err;
+
+        /*
+         * Check the other certificates of the chain if there are more than one
+         * certificate ids in cert_ids.
+         */
+        if (sk_ESS_CERT_ID_num(cert_ids) > 1) {
+            for (i = 1; i < sk_X509_num(chain); ++i) {
+                cert = sk_X509_value(chain, i);
+                if (ts_find_cert(cert_ids, cert) < 0)
+                    goto err;
+            }
+        }
+    } else if (ssv2 != NULL) {
+        cert_ids_v2 = ssv2->cert_ids;
+        cert = sk_X509_value(chain, 0);
+        if (ts_find_cert_v2(cert_ids_v2, cert) != 0)
+            goto err;
+
+        /*
+         * Check the other certificates of the chain if there are more than one
+         * certificate ids in cert_ids.
+         */
+        if (sk_ESS_CERT_ID_V2_num(cert_ids_v2) > 1) {
+            for (i = 1; i < sk_X509_num(chain); ++i) {
+                cert = sk_X509_value(chain, i);
+                if (ts_find_cert_v2(cert_ids_v2, cert) < 0)
+                    goto err;
+            }
+        }
+    } else {
+        goto err;
+    }
+
+    ret = 1;
+ err:
+    if (!ret)
+        TSerr(TS_F_TS_CHECK_SIGNING_CERTS,
+              TS_R_ESS_SIGNING_CERTIFICATE_ERROR);
+    ESS_SIGNING_CERT_free(ss);
+    ESS_SIGNING_CERT_V2_free(ssv2);
+    return ret;
+}
+
+static ESS_SIGNING_CERT *ess_get_signing_cert(PKCS7_SIGNER_INFO *si)
+{
+    ASN1_TYPE *attr;
+    const unsigned char *p;
+    attr = PKCS7_get_signed_attribute(si, NID_id_smime_aa_signingCertificate);
+    if (!attr)
+        return NULL;
+    p = attr->value.sequence->data;
+    return d2i_ESS_SIGNING_CERT(NULL, &p, attr->value.sequence->length);
+}
+
+static ESS_SIGNING_CERT_V2 *ess_get_signing_cert_v2(PKCS7_SIGNER_INFO *si)
+{
+    ASN1_TYPE *attr;
+    const unsigned char *p;
+
+    attr = PKCS7_get_signed_attribute(si, NID_id_smime_aa_signingCertificateV2);
+    if (attr == NULL)
+        return NULL;
+    p = attr->value.sequence->data;
+    return d2i_ESS_SIGNING_CERT_V2(NULL, &p, attr->value.sequence->length);
+}
+
+/* Returns < 0 if certificate is not found, certificate index otherwise. */
+static int ts_find_cert(STACK_OF(ESS_CERT_ID) *cert_ids, X509 *cert)
+{
+    int i;
+    unsigned char cert_sha1[SHA_DIGEST_LENGTH];
+
+    if (!cert_ids || !cert)
+        return -1;
+
+    X509_digest(cert, EVP_sha1(), cert_sha1, NULL);
+
+    /* Recompute SHA1 hash of certificate if necessary (side effect). */
+    X509_check_purpose(cert, -1, 0);
+
+    /* Look for cert in the cert_ids vector. */
+    for (i = 0; i < sk_ESS_CERT_ID_num(cert_ids); ++i) {
+        ESS_CERT_ID *cid = sk_ESS_CERT_ID_value(cert_ids, i);
+
+        if (cid->hash->length == SHA_DIGEST_LENGTH
+            && memcmp(cid->hash->data, cert_sha1, SHA_DIGEST_LENGTH) == 0) {
+            ESS_ISSUER_SERIAL *is = cid->issuer_serial;
+            if (!is || !ts_issuer_serial_cmp(is, cert))
+                return i;
+        }
+    }
+
+    return -1;
+}
+
+/* Returns < 0 if certificate is not found, certificate index otherwise. */
+static int ts_find_cert_v2(STACK_OF(ESS_CERT_ID_V2) *cert_ids, X509 *cert)
+{
+    int i;
+    unsigned char cert_digest[EVP_MAX_MD_SIZE];
+    unsigned int len;
+
+    /* Look for cert in the cert_ids vector. */
+    for (i = 0; i < sk_ESS_CERT_ID_V2_num(cert_ids); ++i) {
+        ESS_CERT_ID_V2 *cid = sk_ESS_CERT_ID_V2_value(cert_ids, i);
+        const EVP_MD *md;
+
+        if (cid->hash_alg != NULL)
+            md = EVP_get_digestbyobj(cid->hash_alg->algorithm);
+        else
+            md = EVP_sha256();
+
+        X509_digest(cert, md, cert_digest, &len);
+        if (cid->hash->length != (int)len)
+            return -1;
+
+        if (memcmp(cid->hash->data, cert_digest, cid->hash->length) == 0) {
+            ESS_ISSUER_SERIAL *is = cid->issuer_serial;
+
+            if (is == NULL || !ts_issuer_serial_cmp(is, cert))
+                return i;
+        }
+    }
+
+    return -1;
+}
+
+static int ts_issuer_serial_cmp(ESS_ISSUER_SERIAL *is, X509 *cert)
+{
+    GENERAL_NAME *issuer;
+
+    if (!is || !cert || sk_GENERAL_NAME_num(is->issuer) != 1)
+        return -1;
+
+    issuer = sk_GENERAL_NAME_value(is->issuer, 0);
+    if (issuer->type != GEN_DIRNAME
+        || X509_NAME_cmp(issuer->d.dirn, X509_get_issuer_name(cert)))
+        return -1;
+
+    if (ASN1_INTEGER_cmp(is->serial, X509_get_serialNumber(cert)))
+        return -1;
+
+    return 0;
+}
+
+/*-
+ * Verifies whether 'response' contains a valid response with regards
+ * to the settings of the context:
+ *      - Gives an error message if the TS_TST_INFO is not present.
+ *      - Calls _TS_RESP_verify_token to verify the token content.
+ */
+int TS_RESP_verify_response(TS_VERIFY_CTX *ctx, TS_RESP *response)
+{
+    PKCS7 *token = response->token;
+    TS_TST_INFO *tst_info = response->tst_info;
+    int ret = 0;
+
+    if (!ts_check_status_info(response))
+        goto err;
+    if (!int_ts_RESP_verify_token(ctx, token, tst_info))
+        goto err;
+    ret = 1;
+
+ err:
+    return ret;
+}
+
+/*
+ * Tries to extract a TS_TST_INFO structure from the PKCS7 token and
+ * calls the internal int_TS_RESP_verify_token function for verifying it.
+ */
+int TS_RESP_verify_token(TS_VERIFY_CTX *ctx, PKCS7 *token)
+{
+    TS_TST_INFO *tst_info = PKCS7_to_TS_TST_INFO(token);
+    int ret = 0;
+    if (tst_info) {
+        ret = int_ts_RESP_verify_token(ctx, token, tst_info);
+        TS_TST_INFO_free(tst_info);
+    }
+    return ret;
+}
+
+/*-
+ * Verifies whether the 'token' contains a valid time stamp token
+ * with regards to the settings of the context. Only those checks are
+ * carried out that are specified in the context:
+ *      - Verifies the signature of the TS_TST_INFO.
+ *      - Checks the version number of the response.
+ *      - Check if the requested and returned policies math.
+ *      - Check if the message imprints are the same.
+ *      - Check if the nonces are the same.
+ *      - Check if the TSA name matches the signer.
+ *      - Check if the TSA name is the expected TSA.
+ */
+static int int_ts_RESP_verify_token(TS_VERIFY_CTX *ctx,
+                                    PKCS7 *token, TS_TST_INFO *tst_info)
+{
+    X509 *signer = NULL;
+    GENERAL_NAME *tsa_name = tst_info->tsa;
+    X509_ALGOR *md_alg = NULL;
+    unsigned char *imprint = NULL;
+    unsigned imprint_len = 0;
+    int ret = 0;
+    int flags = ctx->flags;
+
+    /* Some options require us to also check the signature */
+    if (((flags & TS_VFY_SIGNER) && tsa_name != NULL)
+            || (flags & TS_VFY_TSA_NAME)) {
+        flags |= TS_VFY_SIGNATURE;
+    }
+
+    if ((flags & TS_VFY_SIGNATURE)
+        && !TS_RESP_verify_signature(token, ctx->certs, ctx->store, &signer))
+        goto err;
+    if ((flags & TS_VFY_VERSION)
+        && TS_TST_INFO_get_version(tst_info) != 1) {
+        TSerr(TS_F_INT_TS_RESP_VERIFY_TOKEN, TS_R_UNSUPPORTED_VERSION);
+        goto err;
+    }
+    if ((flags & TS_VFY_POLICY)
+        && !ts_check_policy(ctx->policy, tst_info))
+        goto err;
+    if ((flags & TS_VFY_IMPRINT)
+        && !ts_check_imprints(ctx->md_alg, ctx->imprint, ctx->imprint_len,
+                              tst_info))
+        goto err;
+    if ((flags & TS_VFY_DATA)
+        && (!ts_compute_imprint(ctx->data, tst_info,
+                                &md_alg, &imprint, &imprint_len)
+            || !ts_check_imprints(md_alg, imprint, imprint_len, tst_info)))
+        goto err;
+    if ((flags & TS_VFY_NONCE)
+        && !ts_check_nonces(ctx->nonce, tst_info))
+        goto err;
+    if ((flags & TS_VFY_SIGNER)
+        && tsa_name && !ts_check_signer_name(tsa_name, signer)) {
+        TSerr(TS_F_INT_TS_RESP_VERIFY_TOKEN, TS_R_TSA_NAME_MISMATCH);
+        goto err;
+    }
+    if ((flags & TS_VFY_TSA_NAME)
+        && !ts_check_signer_name(ctx->tsa_name, signer)) {
+        TSerr(TS_F_INT_TS_RESP_VERIFY_TOKEN, TS_R_TSA_UNTRUSTED);
+        goto err;
+    }
+    ret = 1;
+
+ err:
+    X509_free(signer);
+    X509_ALGOR_free(md_alg);
+    OPENSSL_free(imprint);
+    return ret;
+}
+
+static int ts_check_status_info(TS_RESP *response)
+{
+    TS_STATUS_INFO *info = response->status_info;
+    long status = ASN1_INTEGER_get(info->status);
+    const char *status_text = NULL;
+    char *embedded_status_text = NULL;
+    char failure_text[TS_STATUS_BUF_SIZE] = "";
+
+    if (status == 0 || status == 1)
+        return 1;
+
+    /* There was an error, get the description in status_text. */
+    if (0 <= status && status < (long) OSSL_NELEM(ts_status_text))
+        status_text = ts_status_text[status];
+    else
+        status_text = "unknown code";
+
+    if (sk_ASN1_UTF8STRING_num(info->text) > 0
+        && (embedded_status_text = ts_get_status_text(info->text)) == NULL)
+        return 0;
+
+    /* Fill in failure_text with the failure information. */
+    if (info->failure_info) {
+        int i;
+        int first = 1;
+        for (i = 0; i < (int)OSSL_NELEM(ts_failure_info); ++i) {
+            if (ASN1_BIT_STRING_get_bit(info->failure_info,
+                                        ts_failure_info[i].code)) {
+                if (!first)
+                    strcat(failure_text, ",");
+                else
+                    first = 0;
+                strcat(failure_text, ts_failure_info[i].text);
+            }
+        }
+    }
+    if (failure_text[0] == '\0')
+        strcpy(failure_text, "unspecified");
+
+    TSerr(TS_F_TS_CHECK_STATUS_INFO, TS_R_NO_TIME_STAMP_TOKEN);
+    ERR_add_error_data(6,
+                       "status code: ", status_text,
+                       ", status text: ", embedded_status_text ?
+                       embedded_status_text : "unspecified",
+                       ", failure codes: ", failure_text);
+    OPENSSL_free(embedded_status_text);
+
+    return 0;
+}
+
+static char *ts_get_status_text(STACK_OF(ASN1_UTF8STRING) *text)
+{
+    int i;
+    int length = 0;
+    char *result = NULL;
+    char *p;
+
+    for (i = 0; i < sk_ASN1_UTF8STRING_num(text); ++i) {
+        ASN1_UTF8STRING *current = sk_ASN1_UTF8STRING_value(text, i);
+        if (ASN1_STRING_length(current) > TS_MAX_STATUS_LENGTH - length - 1)
+            return NULL;
+        length += ASN1_STRING_length(current);
+        length += 1;            /* separator character */
+    }
+    if ((result = OPENSSL_malloc(length)) == NULL) {
+        TSerr(TS_F_TS_GET_STATUS_TEXT, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    for (i = 0, p = result; i < sk_ASN1_UTF8STRING_num(text); ++i) {
+        ASN1_UTF8STRING *current = sk_ASN1_UTF8STRING_value(text, i);
+        length = ASN1_STRING_length(current);
+        if (i > 0)
+            *p++ = '/';
+        strncpy(p, (const char *)ASN1_STRING_get0_data(current), length);
+        p += length;
+    }
+    *p = '\0';
+
+    return result;
+}
+
+static int ts_check_policy(const ASN1_OBJECT *req_oid,
+                           const TS_TST_INFO *tst_info)
+{
+    const ASN1_OBJECT *resp_oid = tst_info->policy_id;
+
+    if (OBJ_cmp(req_oid, resp_oid) != 0) {
+        TSerr(TS_F_TS_CHECK_POLICY, TS_R_POLICY_MISMATCH);
+        return 0;
+    }
+
+    return 1;
+}
+
+static int ts_compute_imprint(BIO *data, TS_TST_INFO *tst_info,
+                              X509_ALGOR **md_alg,
+                              unsigned char **imprint, unsigned *imprint_len)
+{
+    TS_MSG_IMPRINT *msg_imprint = tst_info->msg_imprint;
+    X509_ALGOR *md_alg_resp = msg_imprint->hash_algo;
+    const EVP_MD *md;
+    EVP_MD_CTX *md_ctx = NULL;
+    unsigned char buffer[4096];
+    int length;
+
+    *md_alg = NULL;
+    *imprint = NULL;
+
+    if ((*md_alg = X509_ALGOR_dup(md_alg_resp)) == NULL)
+        goto err;
+    if ((md = EVP_get_digestbyobj((*md_alg)->algorithm)) == NULL) {
+        TSerr(TS_F_TS_COMPUTE_IMPRINT, TS_R_UNSUPPORTED_MD_ALGORITHM);
+        goto err;
+    }
+    length = EVP_MD_size(md);
+    if (length < 0)
+        goto err;
+    *imprint_len = length;
+    if ((*imprint = OPENSSL_malloc(*imprint_len)) == NULL) {
+        TSerr(TS_F_TS_COMPUTE_IMPRINT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    md_ctx = EVP_MD_CTX_new();
+    if (md_ctx == NULL) {
+        TSerr(TS_F_TS_COMPUTE_IMPRINT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if (!EVP_DigestInit(md_ctx, md))
+        goto err;
+    while ((length = BIO_read(data, buffer, sizeof(buffer))) > 0) {
+        if (!EVP_DigestUpdate(md_ctx, buffer, length))
+            goto err;
+    }
+    if (!EVP_DigestFinal(md_ctx, *imprint, NULL))
+        goto err;
+    EVP_MD_CTX_free(md_ctx);
+
+    return 1;
+ err:
+    EVP_MD_CTX_free(md_ctx);
+    X509_ALGOR_free(*md_alg);
+    OPENSSL_free(*imprint);
+    *imprint_len = 0;
+    *imprint = 0;
+    return 0;
+}
+
+static int ts_check_imprints(X509_ALGOR *algor_a,
+                             const unsigned char *imprint_a, unsigned len_a,
+                             TS_TST_INFO *tst_info)
+{
+    TS_MSG_IMPRINT *b = tst_info->msg_imprint;
+    X509_ALGOR *algor_b = b->hash_algo;
+    int ret = 0;
+
+    if (algor_a) {
+        if (OBJ_cmp(algor_a->algorithm, algor_b->algorithm))
+            goto err;
+
+        /* The parameter must be NULL in both. */
+        if ((algor_a->parameter
+             && ASN1_TYPE_get(algor_a->parameter) != V_ASN1_NULL)
+            || (algor_b->parameter
+                && ASN1_TYPE_get(algor_b->parameter) != V_ASN1_NULL))
+            goto err;
+    }
+
+    ret = len_a == (unsigned)ASN1_STRING_length(b->hashed_msg) &&
+        memcmp(imprint_a, ASN1_STRING_get0_data(b->hashed_msg), len_a) == 0;
+ err:
+    if (!ret)
+        TSerr(TS_F_TS_CHECK_IMPRINTS, TS_R_MESSAGE_IMPRINT_MISMATCH);
+    return ret;
+}
+
+static int ts_check_nonces(const ASN1_INTEGER *a, TS_TST_INFO *tst_info)
+{
+    const ASN1_INTEGER *b = tst_info->nonce;
+
+    if (!b) {
+        TSerr(TS_F_TS_CHECK_NONCES, TS_R_NONCE_NOT_RETURNED);
+        return 0;
+    }
+
+    /* No error if a nonce is returned without being requested. */
+    if (ASN1_INTEGER_cmp(a, b) != 0) {
+        TSerr(TS_F_TS_CHECK_NONCES, TS_R_NONCE_MISMATCH);
+        return 0;
+    }
+
+    return 1;
+}
+
+/*
+ * Check if the specified TSA name matches either the subject or one of the
+ * subject alternative names of the TSA certificate.
+ */
+static int ts_check_signer_name(GENERAL_NAME *tsa_name, X509 *signer)
+{
+    STACK_OF(GENERAL_NAME) *gen_names = NULL;
+    int idx = -1;
+    int found = 0;
+
+    if (tsa_name->type == GEN_DIRNAME
+        && X509_name_cmp(tsa_name->d.dirn, X509_get_subject_name(signer)) == 0)
+        return 1;
+    gen_names = X509_get_ext_d2i(signer, NID_subject_alt_name, NULL, &idx);
+    while (gen_names != NULL) {
+        found = ts_find_name(gen_names, tsa_name) >= 0;
+        if (found)
+            break;
+        /*
+         * Get the next subject alternative name, although there should be no
+         * more than one.
+         */
+        GENERAL_NAMES_free(gen_names);
+        gen_names = X509_get_ext_d2i(signer, NID_subject_alt_name, NULL, &idx);
+    }
+    GENERAL_NAMES_free(gen_names);
+
+    return found;
+}
+
+/* Returns 1 if name is in gen_names, 0 otherwise. */
+static int ts_find_name(STACK_OF(GENERAL_NAME) *gen_names, GENERAL_NAME *name)
+{
+    int i, found;
+    for (i = 0, found = 0; !found && i < sk_GENERAL_NAME_num(gen_names); ++i) {
+        GENERAL_NAME *current = sk_GENERAL_NAME_value(gen_names, i);
+        found = GENERAL_NAME_cmp(current, name) == 0;
+    }
+    return found ? i - 1 : -1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_verify_ctx.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_verify_ctx.c
new file mode 100644
index 000000000..d4792ee04
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ts/ts_verify_ctx.c
@@ -0,0 +1,146 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/ts.h>
+#include "ts_lcl.h"
+
+TS_VERIFY_CTX *TS_VERIFY_CTX_new(void)
+{
+    TS_VERIFY_CTX *ctx = OPENSSL_zalloc(sizeof(*ctx));
+
+    if (ctx == NULL)
+        TSerr(TS_F_TS_VERIFY_CTX_NEW, ERR_R_MALLOC_FAILURE);
+    return ctx;
+}
+
+void TS_VERIFY_CTX_init(TS_VERIFY_CTX *ctx)
+{
+    OPENSSL_assert(ctx != NULL);
+    memset(ctx, 0, sizeof(*ctx));
+}
+
+void TS_VERIFY_CTX_free(TS_VERIFY_CTX *ctx)
+{
+    if (!ctx)
+        return;
+
+    TS_VERIFY_CTX_cleanup(ctx);
+    OPENSSL_free(ctx);
+}
+
+int TS_VERIFY_CTX_add_flags(TS_VERIFY_CTX *ctx, int f)
+{
+    ctx->flags |= f;
+    return ctx->flags;
+}
+
+int TS_VERIFY_CTX_set_flags(TS_VERIFY_CTX *ctx, int f)
+{
+    ctx->flags = f;
+    return ctx->flags;
+}
+
+BIO *TS_VERIFY_CTX_set_data(TS_VERIFY_CTX *ctx, BIO *b)
+{
+    ctx->data = b;
+    return ctx->data;
+}
+
+X509_STORE *TS_VERIFY_CTX_set_store(TS_VERIFY_CTX *ctx, X509_STORE *s)
+{
+    ctx->store = s;
+    return ctx->store;
+}
+
+STACK_OF(X509) *TS_VERIFY_CTS_set_certs(TS_VERIFY_CTX *ctx,
+                                        STACK_OF(X509) *certs)
+{
+    ctx->certs = certs;
+    return ctx->certs;
+}
+
+unsigned char *TS_VERIFY_CTX_set_imprint(TS_VERIFY_CTX *ctx,
+                                         unsigned char *hexstr, long len)
+{
+    ctx->imprint = hexstr;
+    ctx->imprint_len = len;
+    return ctx->imprint;
+}
+
+void TS_VERIFY_CTX_cleanup(TS_VERIFY_CTX *ctx)
+{
+    if (!ctx)
+        return;
+
+    X509_STORE_free(ctx->store);
+    sk_X509_pop_free(ctx->certs, X509_free);
+
+    ASN1_OBJECT_free(ctx->policy);
+
+    X509_ALGOR_free(ctx->md_alg);
+    OPENSSL_free(ctx->imprint);
+
+    BIO_free_all(ctx->data);
+
+    ASN1_INTEGER_free(ctx->nonce);
+
+    GENERAL_NAME_free(ctx->tsa_name);
+
+    TS_VERIFY_CTX_init(ctx);
+}
+
+TS_VERIFY_CTX *TS_REQ_to_TS_VERIFY_CTX(TS_REQ *req, TS_VERIFY_CTX *ctx)
+{
+    TS_VERIFY_CTX *ret = ctx;
+    ASN1_OBJECT *policy;
+    TS_MSG_IMPRINT *imprint;
+    X509_ALGOR *md_alg;
+    ASN1_OCTET_STRING *msg;
+    const ASN1_INTEGER *nonce;
+
+    OPENSSL_assert(req != NULL);
+    if (ret)
+        TS_VERIFY_CTX_cleanup(ret);
+    else if ((ret = TS_VERIFY_CTX_new()) == NULL)
+        return NULL;
+
+    ret->flags = TS_VFY_ALL_IMPRINT & ~(TS_VFY_TSA_NAME | TS_VFY_SIGNATURE);
+
+    if ((policy = req->policy_id) != NULL) {
+        if ((ret->policy = OBJ_dup(policy)) == NULL)
+            goto err;
+    } else
+        ret->flags &= ~TS_VFY_POLICY;
+
+    imprint = req->msg_imprint;
+    md_alg = imprint->hash_algo;
+    if ((ret->md_alg = X509_ALGOR_dup(md_alg)) == NULL)
+        goto err;
+    msg = imprint->hashed_msg;
+    ret->imprint_len = ASN1_STRING_length(msg);
+    if ((ret->imprint = OPENSSL_malloc(ret->imprint_len)) == NULL)
+        goto err;
+    memcpy(ret->imprint, ASN1_STRING_get0_data(msg), ret->imprint_len);
+
+    if ((nonce = req->nonce) != NULL) {
+        if ((ret->nonce = ASN1_INTEGER_dup(nonce)) == NULL)
+            goto err;
+    } else
+        ret->flags &= ~TS_VFY_NONCE;
+
+    return ret;
+ err:
+    if (ctx)
+        TS_VERIFY_CTX_cleanup(ctx);
+    else
+        TS_VERIFY_CTX_free(ret);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/txt_db/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/txt_db/build.info
new file mode 100644
index 000000000..4379d5f1b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/txt_db/build.info
@@ -0,0 +1,2 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=txt_db.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/txt_db/txt_db.c b/trunk/3rdparty/openssl-1.1-fit/crypto/txt_db/txt_db.c
new file mode 100644
index 000000000..c4e178251
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/txt_db/txt_db.c
@@ -0,0 +1,317 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/txt_db.h>
+
+#undef BUFSIZE
+#define BUFSIZE 512
+
+TXT_DB *TXT_DB_read(BIO *in, int num)
+{
+    TXT_DB *ret = NULL;
+    int esc = 0;
+    long ln = 0;
+    int i, add, n;
+    int size = BUFSIZE;
+    int offset = 0;
+    char *p, *f;
+    OPENSSL_STRING *pp;
+    BUF_MEM *buf = NULL;
+
+    if ((buf = BUF_MEM_new()) == NULL)
+        goto err;
+    if (!BUF_MEM_grow(buf, size))
+        goto err;
+
+    if ((ret = OPENSSL_malloc(sizeof(*ret))) == NULL)
+        goto err;
+    ret->num_fields = num;
+    ret->index = NULL;
+    ret->qual = NULL;
+    if ((ret->data = sk_OPENSSL_PSTRING_new_null()) == NULL)
+        goto err;
+    if ((ret->index = OPENSSL_malloc(sizeof(*ret->index) * num)) == NULL)
+        goto err;
+    if ((ret->qual = OPENSSL_malloc(sizeof(*(ret->qual)) * num)) == NULL)
+        goto err;
+    for (i = 0; i < num; i++) {
+        ret->index[i] = NULL;
+        ret->qual[i] = NULL;
+    }
+
+    add = (num + 1) * sizeof(char *);
+    buf->data[size - 1] = '\0';
+    offset = 0;
+    for (;;) {
+        if (offset != 0) {
+            size += BUFSIZE;
+            if (!BUF_MEM_grow_clean(buf, size))
+                goto err;
+        }
+        buf->data[offset] = '\0';
+        BIO_gets(in, &(buf->data[offset]), size - offset);
+        ln++;
+        if (buf->data[offset] == '\0')
+            break;
+        if ((offset == 0) && (buf->data[0] == '#'))
+            continue;
+        i = strlen(&(buf->data[offset]));
+        offset += i;
+        if (buf->data[offset - 1] != '\n')
+            continue;
+        else {
+            buf->data[offset - 1] = '\0'; /* blat the '\n' */
+            if ((p = OPENSSL_malloc(add + offset)) == NULL)
+                goto err;
+            offset = 0;
+        }
+        pp = (char **)p;
+        p += add;
+        n = 0;
+        pp[n++] = p;
+        i = 0;
+        f = buf->data;
+
+        esc = 0;
+        for (;;) {
+            if (*f == '\0')
+                break;
+            if (*f == '\t') {
+                if (esc)
+                    p--;
+                else {
+                    *(p++) = '\0';
+                    f++;
+                    if (n >= num)
+                        break;
+                    pp[n++] = p;
+                    continue;
+                }
+            }
+            esc = (*f == '\\');
+            *(p++) = *(f++);
+        }
+        *(p++) = '\0';
+        if ((n != num) || (*f != '\0')) {
+            OPENSSL_free(pp);
+            ret->error = DB_ERROR_WRONG_NUM_FIELDS;
+            goto err;
+        }
+        pp[n] = p;
+        if (!sk_OPENSSL_PSTRING_push(ret->data, pp)) {
+            OPENSSL_free(pp);
+            goto err;
+        }
+    }
+    BUF_MEM_free(buf);
+    return ret;
+ err:
+    BUF_MEM_free(buf);
+    if (ret != NULL) {
+        sk_OPENSSL_PSTRING_free(ret->data);
+        OPENSSL_free(ret->index);
+        OPENSSL_free(ret->qual);
+        OPENSSL_free(ret);
+    }
+    return NULL;
+}
+
+OPENSSL_STRING *TXT_DB_get_by_index(TXT_DB *db, int idx,
+                                    OPENSSL_STRING *value)
+{
+    OPENSSL_STRING *ret;
+    LHASH_OF(OPENSSL_STRING) *lh;
+
+    if (idx >= db->num_fields) {
+        db->error = DB_ERROR_INDEX_OUT_OF_RANGE;
+        return NULL;
+    }
+    lh = db->index[idx];
+    if (lh == NULL) {
+        db->error = DB_ERROR_NO_INDEX;
+        return NULL;
+    }
+    ret = lh_OPENSSL_STRING_retrieve(lh, value);
+    db->error = DB_ERROR_OK;
+    return ret;
+}
+
+int TXT_DB_create_index(TXT_DB *db, int field, int (*qual) (OPENSSL_STRING *),
+                        OPENSSL_LH_HASHFUNC hash, OPENSSL_LH_COMPFUNC cmp)
+{
+    LHASH_OF(OPENSSL_STRING) *idx;
+    OPENSSL_STRING *r, *k;
+    int i, n;
+
+    if (field >= db->num_fields) {
+        db->error = DB_ERROR_INDEX_OUT_OF_RANGE;
+        return 0;
+    }
+    /* FIXME: we lose type checking at this point */
+    if ((idx = (LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(hash, cmp)) == NULL) {
+        db->error = DB_ERROR_MALLOC;
+        return 0;
+    }
+    n = sk_OPENSSL_PSTRING_num(db->data);
+    for (i = 0; i < n; i++) {
+        r = sk_OPENSSL_PSTRING_value(db->data, i);
+        if ((qual != NULL) && (qual(r) == 0))
+            continue;
+        if ((k = lh_OPENSSL_STRING_insert(idx, r)) != NULL) {
+            db->error = DB_ERROR_INDEX_CLASH;
+            db->arg1 = sk_OPENSSL_PSTRING_find(db->data, k);
+            db->arg2 = i;
+            lh_OPENSSL_STRING_free(idx);
+            return 0;
+        }
+        if (lh_OPENSSL_STRING_retrieve(idx, r) == NULL) {
+            db->error = DB_ERROR_MALLOC;
+            lh_OPENSSL_STRING_free(idx);
+            return 0;
+        }
+    }
+    lh_OPENSSL_STRING_free(db->index[field]);
+    db->index[field] = idx;
+    db->qual[field] = qual;
+    return 1;
+}
+
+long TXT_DB_write(BIO *out, TXT_DB *db)
+{
+    long i, j, n, nn, l, tot = 0;
+    char *p, **pp, *f;
+    BUF_MEM *buf = NULL;
+    long ret = -1;
+
+    if ((buf = BUF_MEM_new()) == NULL)
+        goto err;
+    n = sk_OPENSSL_PSTRING_num(db->data);
+    nn = db->num_fields;
+    for (i = 0; i < n; i++) {
+        pp = sk_OPENSSL_PSTRING_value(db->data, i);
+
+        l = 0;
+        for (j = 0; j < nn; j++) {
+            if (pp[j] != NULL)
+                l += strlen(pp[j]);
+        }
+        if (!BUF_MEM_grow_clean(buf, (int)(l * 2 + nn)))
+            goto err;
+
+        p = buf->data;
+        for (j = 0; j < nn; j++) {
+            f = pp[j];
+            if (f != NULL)
+                for (;;) {
+                    if (*f == '\0')
+                        break;
+                    if (*f == '\t')
+                        *(p++) = '\\';
+                    *(p++) = *(f++);
+                }
+            *(p++) = '\t';
+        }
+        p[-1] = '\n';
+        j = p - buf->data;
+        if (BIO_write(out, buf->data, (int)j) != j)
+            goto err;
+        tot += j;
+    }
+    ret = tot;
+ err:
+    BUF_MEM_free(buf);
+    return ret;
+}
+
+int TXT_DB_insert(TXT_DB *db, OPENSSL_STRING *row)
+{
+    int i;
+    OPENSSL_STRING *r;
+
+    for (i = 0; i < db->num_fields; i++) {
+        if (db->index[i] != NULL) {
+            if ((db->qual[i] != NULL) && (db->qual[i] (row) == 0))
+                continue;
+            r = lh_OPENSSL_STRING_retrieve(db->index[i], row);
+            if (r != NULL) {
+                db->error = DB_ERROR_INDEX_CLASH;
+                db->arg1 = i;
+                db->arg_row = r;
+                goto err;
+            }
+        }
+    }
+
+    for (i = 0; i < db->num_fields; i++) {
+        if (db->index[i] != NULL) {
+            if ((db->qual[i] != NULL) && (db->qual[i] (row) == 0))
+                continue;
+            (void)lh_OPENSSL_STRING_insert(db->index[i], row);
+            if (lh_OPENSSL_STRING_retrieve(db->index[i], row) == NULL)
+                goto err1;
+        }
+    }
+    if (!sk_OPENSSL_PSTRING_push(db->data, row))
+        goto err1;
+    return 1;
+
+ err1:
+    db->error = DB_ERROR_MALLOC;
+    while (i-- > 0) {
+        if (db->index[i] != NULL) {
+            if ((db->qual[i] != NULL) && (db->qual[i] (row) == 0))
+                continue;
+            (void)lh_OPENSSL_STRING_delete(db->index[i], row);
+        }
+    }
+ err:
+    return 0;
+}
+
+void TXT_DB_free(TXT_DB *db)
+{
+    int i, n;
+    char **p, *max;
+
+    if (db == NULL)
+        return;
+    if (db->index != NULL) {
+        for (i = db->num_fields - 1; i >= 0; i--)
+            lh_OPENSSL_STRING_free(db->index[i]);
+        OPENSSL_free(db->index);
+    }
+    OPENSSL_free(db->qual);
+    if (db->data != NULL) {
+        for (i = sk_OPENSSL_PSTRING_num(db->data) - 1; i >= 0; i--) {
+            /*
+             * check if any 'fields' have been allocated from outside of the
+             * initial block
+             */
+            p = sk_OPENSSL_PSTRING_value(db->data, i);
+            max = p[db->num_fields]; /* last address */
+            if (max == NULL) {  /* new row */
+                for (n = 0; n < db->num_fields; n++)
+                    OPENSSL_free(p[n]);
+            } else {
+                for (n = 0; n < db->num_fields; n++) {
+                    if (((p[n] < (char *)p) || (p[n] > max)))
+                        OPENSSL_free(p[n]);
+                }
+            }
+            OPENSSL_free(sk_OPENSSL_PSTRING_value(db->data, i));
+        }
+        sk_OPENSSL_PSTRING_free(db->data);
+    }
+    OPENSSL_free(db);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ui/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/ui/build.info
new file mode 100644
index 000000000..c5d17fb74
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ui/build.info
@@ -0,0 +1,3 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        ui_err.c ui_lib.c ui_openssl.c ui_null.c ui_util.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_err.c
new file mode 100644
index 000000000..b806872c3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_err.c
@@ -0,0 +1,78 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/uierr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA UI_str_functs[] = {
+    {ERR_PACK(ERR_LIB_UI, UI_F_CLOSE_CONSOLE, 0), "close_console"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_ECHO_CONSOLE, 0), "echo_console"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_GENERAL_ALLOCATE_BOOLEAN, 0),
+     "general_allocate_boolean"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_GENERAL_ALLOCATE_PROMPT, 0),
+     "general_allocate_prompt"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_NOECHO_CONSOLE, 0), "noecho_console"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_OPEN_CONSOLE, 0), "open_console"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_UI_CONSTRUCT_PROMPT, 0), "UI_construct_prompt"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_UI_CREATE_METHOD, 0), "UI_create_method"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_UI_CTRL, 0), "UI_ctrl"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_UI_DUP_ERROR_STRING, 0), "UI_dup_error_string"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_UI_DUP_INFO_STRING, 0), "UI_dup_info_string"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_UI_DUP_INPUT_BOOLEAN, 0),
+     "UI_dup_input_boolean"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_UI_DUP_INPUT_STRING, 0), "UI_dup_input_string"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_UI_DUP_USER_DATA, 0), "UI_dup_user_data"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_UI_DUP_VERIFY_STRING, 0),
+     "UI_dup_verify_string"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_UI_GET0_RESULT, 0), "UI_get0_result"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_UI_GET_RESULT_LENGTH, 0),
+     "UI_get_result_length"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_UI_NEW_METHOD, 0), "UI_new_method"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_UI_PROCESS, 0), "UI_process"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_UI_SET_RESULT, 0), "UI_set_result"},
+    {ERR_PACK(ERR_LIB_UI, UI_F_UI_SET_RESULT_EX, 0), "UI_set_result_ex"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA UI_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_UI, 0, UI_R_COMMON_OK_AND_CANCEL_CHARACTERS),
+    "common ok and cancel characters"},
+    {ERR_PACK(ERR_LIB_UI, 0, UI_R_INDEX_TOO_LARGE), "index too large"},
+    {ERR_PACK(ERR_LIB_UI, 0, UI_R_INDEX_TOO_SMALL), "index too small"},
+    {ERR_PACK(ERR_LIB_UI, 0, UI_R_NO_RESULT_BUFFER), "no result buffer"},
+    {ERR_PACK(ERR_LIB_UI, 0, UI_R_PROCESSING_ERROR), "processing error"},
+    {ERR_PACK(ERR_LIB_UI, 0, UI_R_RESULT_TOO_LARGE), "result too large"},
+    {ERR_PACK(ERR_LIB_UI, 0, UI_R_RESULT_TOO_SMALL), "result too small"},
+    {ERR_PACK(ERR_LIB_UI, 0, UI_R_SYSASSIGN_ERROR), "sys$assign error"},
+    {ERR_PACK(ERR_LIB_UI, 0, UI_R_SYSDASSGN_ERROR), "sys$dassgn error"},
+    {ERR_PACK(ERR_LIB_UI, 0, UI_R_SYSQIOW_ERROR), "sys$qiow error"},
+    {ERR_PACK(ERR_LIB_UI, 0, UI_R_UNKNOWN_CONTROL_COMMAND),
+    "unknown control command"},
+    {ERR_PACK(ERR_LIB_UI, 0, UI_R_UNKNOWN_TTYGET_ERRNO_VALUE),
+    "unknown ttyget errno value"},
+    {ERR_PACK(ERR_LIB_UI, 0, UI_R_USER_DATA_DUPLICATION_UNSUPPORTED),
+    "user data duplication unsupported"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_UI_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(UI_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(UI_str_functs);
+        ERR_load_strings_const(UI_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_lib.c
new file mode 100644
index 000000000..139485dcd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_lib.c
@@ -0,0 +1,954 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include "internal/cryptlib.h"
+#include <openssl/e_os2.h>
+#include <openssl/buffer.h>
+#include <openssl/ui.h>
+#include <openssl/err.h>
+#include "ui_locl.h"
+
+UI *UI_new(void)
+{
+    return UI_new_method(NULL);
+}
+
+UI *UI_new_method(const UI_METHOD *method)
+{
+    UI *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        UIerr(UI_F_UI_NEW_METHOD, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        UIerr(UI_F_UI_NEW_METHOD, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+
+    if (method == NULL)
+        method = UI_get_default_method();
+    if (method == NULL)
+        method = UI_null();
+    ret->meth = method;
+
+    if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_UI, ret, &ret->ex_data)) {
+        OPENSSL_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+static void free_string(UI_STRING *uis)
+{
+    if (uis->flags & OUT_STRING_FREEABLE) {
+        OPENSSL_free((char *)uis->out_string);
+        switch (uis->type) {
+        case UIT_BOOLEAN:
+            OPENSSL_free((char *)uis->_.boolean_data.action_desc);
+            OPENSSL_free((char *)uis->_.boolean_data.ok_chars);
+            OPENSSL_free((char *)uis->_.boolean_data.cancel_chars);
+            break;
+        case UIT_NONE:
+        case UIT_PROMPT:
+        case UIT_VERIFY:
+        case UIT_ERROR:
+        case UIT_INFO:
+            break;
+        }
+    }
+    OPENSSL_free(uis);
+}
+
+void UI_free(UI *ui)
+{
+    if (ui == NULL)
+        return;
+    if ((ui->flags & UI_FLAG_DUPL_DATA) != 0) {
+        ui->meth->ui_destroy_data(ui, ui->user_data);
+    }
+    sk_UI_STRING_pop_free(ui->strings, free_string);
+    CRYPTO_free_ex_data(CRYPTO_EX_INDEX_UI, ui, &ui->ex_data);
+    CRYPTO_THREAD_lock_free(ui->lock);
+    OPENSSL_free(ui);
+}
+
+static int allocate_string_stack(UI *ui)
+{
+    if (ui->strings == NULL) {
+        ui->strings = sk_UI_STRING_new_null();
+        if (ui->strings == NULL) {
+            return -1;
+        }
+    }
+    return 0;
+}
+
+static UI_STRING *general_allocate_prompt(UI *ui, const char *prompt,
+                                          int prompt_freeable,
+                                          enum UI_string_types type,
+                                          int input_flags, char *result_buf)
+{
+    UI_STRING *ret = NULL;
+
+    if (prompt == NULL) {
+        UIerr(UI_F_GENERAL_ALLOCATE_PROMPT, ERR_R_PASSED_NULL_PARAMETER);
+    } else if ((type == UIT_PROMPT || type == UIT_VERIFY
+                || type == UIT_BOOLEAN) && result_buf == NULL) {
+        UIerr(UI_F_GENERAL_ALLOCATE_PROMPT, UI_R_NO_RESULT_BUFFER);
+    } else if ((ret = OPENSSL_malloc(sizeof(*ret))) != NULL) {
+        ret->out_string = prompt;
+        ret->flags = prompt_freeable ? OUT_STRING_FREEABLE : 0;
+        ret->input_flags = input_flags;
+        ret->type = type;
+        ret->result_buf = result_buf;
+    }
+    return ret;
+}
+
+static int general_allocate_string(UI *ui, const char *prompt,
+                                   int prompt_freeable,
+                                   enum UI_string_types type, int input_flags,
+                                   char *result_buf, int minsize, int maxsize,
+                                   const char *test_buf)
+{
+    int ret = -1;
+    UI_STRING *s = general_allocate_prompt(ui, prompt, prompt_freeable,
+                                           type, input_flags, result_buf);
+
+    if (s != NULL) {
+        if (allocate_string_stack(ui) >= 0) {
+            s->_.string_data.result_minsize = minsize;
+            s->_.string_data.result_maxsize = maxsize;
+            s->_.string_data.test_buf = test_buf;
+            ret = sk_UI_STRING_push(ui->strings, s);
+            /* sk_push() returns 0 on error.  Let's adapt that */
+            if (ret <= 0) {
+                ret--;
+                free_string(s);
+            }
+        } else
+            free_string(s);
+    }
+    return ret;
+}
+
+static int general_allocate_boolean(UI *ui,
+                                    const char *prompt,
+                                    const char *action_desc,
+                                    const char *ok_chars,
+                                    const char *cancel_chars,
+                                    int prompt_freeable,
+                                    enum UI_string_types type,
+                                    int input_flags, char *result_buf)
+{
+    int ret = -1;
+    UI_STRING *s;
+    const char *p;
+
+    if (ok_chars == NULL) {
+        UIerr(UI_F_GENERAL_ALLOCATE_BOOLEAN, ERR_R_PASSED_NULL_PARAMETER);
+    } else if (cancel_chars == NULL) {
+        UIerr(UI_F_GENERAL_ALLOCATE_BOOLEAN, ERR_R_PASSED_NULL_PARAMETER);
+    } else {
+        for (p = ok_chars; *p != '\0'; p++) {
+            if (strchr(cancel_chars, *p) != NULL) {
+                UIerr(UI_F_GENERAL_ALLOCATE_BOOLEAN,
+                      UI_R_COMMON_OK_AND_CANCEL_CHARACTERS);
+            }
+        }
+
+        s = general_allocate_prompt(ui, prompt, prompt_freeable,
+                                    type, input_flags, result_buf);
+
+        if (s != NULL) {
+            if (allocate_string_stack(ui) >= 0) {
+                s->_.boolean_data.action_desc = action_desc;
+                s->_.boolean_data.ok_chars = ok_chars;
+                s->_.boolean_data.cancel_chars = cancel_chars;
+                ret = sk_UI_STRING_push(ui->strings, s);
+                /*
+                 * sk_push() returns 0 on error. Let's adapt that
+                 */
+                if (ret <= 0) {
+                    ret--;
+                    free_string(s);
+                }
+            } else
+                free_string(s);
+        }
+    }
+    return ret;
+}
+
+/*
+ * Returns the index to the place in the stack or -1 for error.  Uses a
+ * direct reference to the prompt.
+ */
+int UI_add_input_string(UI *ui, const char *prompt, int flags,
+                        char *result_buf, int minsize, int maxsize)
+{
+    return general_allocate_string(ui, prompt, 0,
+                                   UIT_PROMPT, flags, result_buf, minsize,
+                                   maxsize, NULL);
+}
+
+/* Same as UI_add_input_string(), excepts it takes a copy of the prompt */
+int UI_dup_input_string(UI *ui, const char *prompt, int flags,
+                        char *result_buf, int minsize, int maxsize)
+{
+    char *prompt_copy = NULL;
+
+    if (prompt != NULL) {
+        prompt_copy = OPENSSL_strdup(prompt);
+        if (prompt_copy == NULL) {
+            UIerr(UI_F_UI_DUP_INPUT_STRING, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+    }
+
+    return general_allocate_string(ui, prompt_copy, 1,
+                                   UIT_PROMPT, flags, result_buf, minsize,
+                                   maxsize, NULL);
+}
+
+int UI_add_verify_string(UI *ui, const char *prompt, int flags,
+                         char *result_buf, int minsize, int maxsize,
+                         const char *test_buf)
+{
+    return general_allocate_string(ui, prompt, 0,
+                                   UIT_VERIFY, flags, result_buf, minsize,
+                                   maxsize, test_buf);
+}
+
+int UI_dup_verify_string(UI *ui, const char *prompt, int flags,
+                         char *result_buf, int minsize, int maxsize,
+                         const char *test_buf)
+{
+    char *prompt_copy = NULL;
+
+    if (prompt != NULL) {
+        prompt_copy = OPENSSL_strdup(prompt);
+        if (prompt_copy == NULL) {
+            UIerr(UI_F_UI_DUP_VERIFY_STRING, ERR_R_MALLOC_FAILURE);
+            return -1;
+        }
+    }
+
+    return general_allocate_string(ui, prompt_copy, 1,
+                                   UIT_VERIFY, flags, result_buf, minsize,
+                                   maxsize, test_buf);
+}
+
+int UI_add_input_boolean(UI *ui, const char *prompt, const char *action_desc,
+                         const char *ok_chars, const char *cancel_chars,
+                         int flags, char *result_buf)
+{
+    return general_allocate_boolean(ui, prompt, action_desc,
+                                    ok_chars, cancel_chars, 0, UIT_BOOLEAN,
+                                    flags, result_buf);
+}
+
+int UI_dup_input_boolean(UI *ui, const char *prompt, const char *action_desc,
+                         const char *ok_chars, const char *cancel_chars,
+                         int flags, char *result_buf)
+{
+    char *prompt_copy = NULL;
+    char *action_desc_copy = NULL;
+    char *ok_chars_copy = NULL;
+    char *cancel_chars_copy = NULL;
+
+    if (prompt != NULL) {
+        prompt_copy = OPENSSL_strdup(prompt);
+        if (prompt_copy == NULL) {
+            UIerr(UI_F_UI_DUP_INPUT_BOOLEAN, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+
+    if (action_desc != NULL) {
+        action_desc_copy = OPENSSL_strdup(action_desc);
+        if (action_desc_copy == NULL) {
+            UIerr(UI_F_UI_DUP_INPUT_BOOLEAN, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+
+    if (ok_chars != NULL) {
+        ok_chars_copy = OPENSSL_strdup(ok_chars);
+        if (ok_chars_copy == NULL) {
+            UIerr(UI_F_UI_DUP_INPUT_BOOLEAN, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+
+    if (cancel_chars != NULL) {
+        cancel_chars_copy = OPENSSL_strdup(cancel_chars);
+        if (cancel_chars_copy == NULL) {
+            UIerr(UI_F_UI_DUP_INPUT_BOOLEAN, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+
+    return general_allocate_boolean(ui, prompt_copy, action_desc_copy,
+                                    ok_chars_copy, cancel_chars_copy, 1,
+                                    UIT_BOOLEAN, flags, result_buf);
+ err:
+    OPENSSL_free(prompt_copy);
+    OPENSSL_free(action_desc_copy);
+    OPENSSL_free(ok_chars_copy);
+    OPENSSL_free(cancel_chars_copy);
+    return -1;
+}
+
+int UI_add_info_string(UI *ui, const char *text)
+{
+    return general_allocate_string(ui, text, 0, UIT_INFO, 0, NULL, 0, 0,
+                                   NULL);
+}
+
+int UI_dup_info_string(UI *ui, const char *text)
+{
+    char *text_copy = NULL;
+
+    if (text != NULL) {
+        text_copy = OPENSSL_strdup(text);
+        if (text_copy == NULL) {
+            UIerr(UI_F_UI_DUP_INFO_STRING, ERR_R_MALLOC_FAILURE);
+            return -1;
+        }
+    }
+
+    return general_allocate_string(ui, text_copy, 1, UIT_INFO, 0, NULL,
+                                   0, 0, NULL);
+}
+
+int UI_add_error_string(UI *ui, const char *text)
+{
+    return general_allocate_string(ui, text, 0, UIT_ERROR, 0, NULL, 0, 0,
+                                   NULL);
+}
+
+int UI_dup_error_string(UI *ui, const char *text)
+{
+    char *text_copy = NULL;
+
+    if (text != NULL) {
+        text_copy = OPENSSL_strdup(text);
+        if (text_copy == NULL) {
+            UIerr(UI_F_UI_DUP_ERROR_STRING, ERR_R_MALLOC_FAILURE);
+            return -1;
+        }
+    }
+    return general_allocate_string(ui, text_copy, 1, UIT_ERROR, 0, NULL,
+                                   0, 0, NULL);
+}
+
+char *UI_construct_prompt(UI *ui, const char *object_desc,
+                          const char *object_name)
+{
+    char *prompt = NULL;
+
+    if (ui->meth->ui_construct_prompt != NULL)
+        prompt = ui->meth->ui_construct_prompt(ui, object_desc, object_name);
+    else {
+        char prompt1[] = "Enter ";
+        char prompt2[] = " for ";
+        char prompt3[] = ":";
+        int len = 0;
+
+        if (object_desc == NULL)
+            return NULL;
+        len = sizeof(prompt1) - 1 + strlen(object_desc);
+        if (object_name != NULL)
+            len += sizeof(prompt2) - 1 + strlen(object_name);
+        len += sizeof(prompt3) - 1;
+
+        if ((prompt = OPENSSL_malloc(len + 1)) == NULL) {
+            UIerr(UI_F_UI_CONSTRUCT_PROMPT, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+        OPENSSL_strlcpy(prompt, prompt1, len + 1);
+        OPENSSL_strlcat(prompt, object_desc, len + 1);
+        if (object_name != NULL) {
+            OPENSSL_strlcat(prompt, prompt2, len + 1);
+            OPENSSL_strlcat(prompt, object_name, len + 1);
+        }
+        OPENSSL_strlcat(prompt, prompt3, len + 1);
+    }
+    return prompt;
+}
+
+void *UI_add_user_data(UI *ui, void *user_data)
+{
+    void *old_data = ui->user_data;
+
+    if ((ui->flags & UI_FLAG_DUPL_DATA) != 0) {
+        ui->meth->ui_destroy_data(ui, old_data);
+        old_data = NULL;
+    }
+    ui->user_data = user_data;
+    ui->flags &= ~UI_FLAG_DUPL_DATA;
+    return old_data;
+}
+
+int UI_dup_user_data(UI *ui, void *user_data)
+{
+    void *duplicate = NULL;
+
+    if (ui->meth->ui_duplicate_data == NULL
+        || ui->meth->ui_destroy_data == NULL) {
+        UIerr(UI_F_UI_DUP_USER_DATA, UI_R_USER_DATA_DUPLICATION_UNSUPPORTED);
+        return -1;
+    }
+
+    duplicate = ui->meth->ui_duplicate_data(ui, user_data);
+    if (duplicate == NULL) {
+        UIerr(UI_F_UI_DUP_USER_DATA, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+
+    (void)UI_add_user_data(ui, duplicate);
+    ui->flags |= UI_FLAG_DUPL_DATA;
+
+    return 0;
+}
+
+void *UI_get0_user_data(UI *ui)
+{
+    return ui->user_data;
+}
+
+const char *UI_get0_result(UI *ui, int i)
+{
+    if (i < 0) {
+        UIerr(UI_F_UI_GET0_RESULT, UI_R_INDEX_TOO_SMALL);
+        return NULL;
+    }
+    if (i >= sk_UI_STRING_num(ui->strings)) {
+        UIerr(UI_F_UI_GET0_RESULT, UI_R_INDEX_TOO_LARGE);
+        return NULL;
+    }
+    return UI_get0_result_string(sk_UI_STRING_value(ui->strings, i));
+}
+
+int UI_get_result_length(UI *ui, int i)
+{
+    if (i < 0) {
+        UIerr(UI_F_UI_GET_RESULT_LENGTH, UI_R_INDEX_TOO_SMALL);
+        return -1;
+    }
+    if (i >= sk_UI_STRING_num(ui->strings)) {
+        UIerr(UI_F_UI_GET_RESULT_LENGTH, UI_R_INDEX_TOO_LARGE);
+        return -1;
+    }
+    return UI_get_result_string_length(sk_UI_STRING_value(ui->strings, i));
+}
+
+static int print_error(const char *str, size_t len, UI *ui)
+{
+    UI_STRING uis;
+
+    memset(&uis, 0, sizeof(uis));
+    uis.type = UIT_ERROR;
+    uis.out_string = str;
+
+    if (ui->meth->ui_write_string != NULL
+        && ui->meth->ui_write_string(ui, &uis) <= 0)
+        return -1;
+    return 0;
+}
+
+int UI_process(UI *ui)
+{
+    int i, ok = 0;
+    const char *state = "processing";
+
+    if (ui->meth->ui_open_session != NULL
+        && ui->meth->ui_open_session(ui) <= 0) {
+        state = "opening session";
+        ok = -1;
+        goto err;
+    }
+
+    if (ui->flags & UI_FLAG_PRINT_ERRORS)
+        ERR_print_errors_cb((int (*)(const char *, size_t, void *))
+                            print_error, (void *)ui);
+
+    for (i = 0; i < sk_UI_STRING_num(ui->strings); i++) {
+        if (ui->meth->ui_write_string != NULL
+            && (ui->meth->ui_write_string(ui,
+                                          sk_UI_STRING_value(ui->strings, i))
+                <= 0))
+        {
+            state = "writing strings";
+            ok = -1;
+            goto err;
+        }
+    }
+
+    if (ui->meth->ui_flush != NULL)
+        switch (ui->meth->ui_flush(ui)) {
+        case -1:               /* Interrupt/Cancel/something... */
+            ok = -2;
+            goto err;
+        case 0:                /* Errors */
+            state = "flushing";
+            ok = -1;
+            goto err;
+        default:               /* Success */
+            ok = 0;
+            break;
+        }
+
+    for (i = 0; i < sk_UI_STRING_num(ui->strings); i++) {
+        if (ui->meth->ui_read_string != NULL) {
+            switch (ui->meth->ui_read_string(ui,
+                                             sk_UI_STRING_value(ui->strings,
+                                                                i))) {
+            case -1:           /* Interrupt/Cancel/something... */
+                ok = -2;
+                goto err;
+            case 0:            /* Errors */
+                state = "reading strings";
+                ok = -1;
+                goto err;
+            default:           /* Success */
+                ok = 0;
+                break;
+            }
+        }
+    }
+
+    state = NULL;
+ err:
+    if (ui->meth->ui_close_session != NULL
+        && ui->meth->ui_close_session(ui) <= 0) {
+        if (state == NULL)
+            state = "closing session";
+        ok = -1;
+    }
+
+    if (ok == -1) {
+        UIerr(UI_F_UI_PROCESS, UI_R_PROCESSING_ERROR);
+        ERR_add_error_data(2, "while ", state);
+    }
+    return ok;
+}
+
+int UI_ctrl(UI *ui, int cmd, long i, void *p, void (*f) (void))
+{
+    if (ui == NULL) {
+        UIerr(UI_F_UI_CTRL, ERR_R_PASSED_NULL_PARAMETER);
+        return -1;
+    }
+    switch (cmd) {
+    case UI_CTRL_PRINT_ERRORS:
+        {
+            int save_flag = ! !(ui->flags & UI_FLAG_PRINT_ERRORS);
+            if (i)
+                ui->flags |= UI_FLAG_PRINT_ERRORS;
+            else
+                ui->flags &= ~UI_FLAG_PRINT_ERRORS;
+            return save_flag;
+        }
+    case UI_CTRL_IS_REDOABLE:
+        return ! !(ui->flags & UI_FLAG_REDOABLE);
+    default:
+        break;
+    }
+    UIerr(UI_F_UI_CTRL, UI_R_UNKNOWN_CONTROL_COMMAND);
+    return -1;
+}
+
+int UI_set_ex_data(UI *r, int idx, void *arg)
+{
+    return CRYPTO_set_ex_data(&r->ex_data, idx, arg);
+}
+
+void *UI_get_ex_data(UI *r, int idx)
+{
+    return CRYPTO_get_ex_data(&r->ex_data, idx);
+}
+
+const UI_METHOD *UI_get_method(UI *ui)
+{
+    return ui->meth;
+}
+
+const UI_METHOD *UI_set_method(UI *ui, const UI_METHOD *meth)
+{
+    ui->meth = meth;
+    return ui->meth;
+}
+
+UI_METHOD *UI_create_method(const char *name)
+{
+    UI_METHOD *ui_method = NULL;
+
+    if ((ui_method = OPENSSL_zalloc(sizeof(*ui_method))) == NULL
+        || (ui_method->name = OPENSSL_strdup(name)) == NULL
+        || !CRYPTO_new_ex_data(CRYPTO_EX_INDEX_UI_METHOD, ui_method,
+                               &ui_method->ex_data)) {
+        if (ui_method)
+            OPENSSL_free(ui_method->name);
+        OPENSSL_free(ui_method);
+        UIerr(UI_F_UI_CREATE_METHOD, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    return ui_method;
+}
+
+/*
+ * BIG FSCKING WARNING!!!! If you use this on a statically allocated method
+ * (that is, it hasn't been allocated using UI_create_method(), you deserve
+ * anything Murphy can throw at you and more! You have been warned.
+ */
+void UI_destroy_method(UI_METHOD *ui_method)
+{
+    if (ui_method == NULL)
+        return;
+    CRYPTO_free_ex_data(CRYPTO_EX_INDEX_UI_METHOD, ui_method,
+                        &ui_method->ex_data);
+    OPENSSL_free(ui_method->name);
+    ui_method->name = NULL;
+    OPENSSL_free(ui_method);
+}
+
+int UI_method_set_opener(UI_METHOD *method, int (*opener) (UI *ui))
+{
+    if (method != NULL) {
+        method->ui_open_session = opener;
+        return 0;
+    }
+    return -1;
+}
+
+int UI_method_set_writer(UI_METHOD *method,
+                         int (*writer) (UI *ui, UI_STRING *uis))
+{
+    if (method != NULL) {
+        method->ui_write_string = writer;
+        return 0;
+    }
+    return -1;
+}
+
+int UI_method_set_flusher(UI_METHOD *method, int (*flusher) (UI *ui))
+{
+    if (method != NULL) {
+        method->ui_flush = flusher;
+        return 0;
+    }
+    return -1;
+}
+
+int UI_method_set_reader(UI_METHOD *method,
+                         int (*reader) (UI *ui, UI_STRING *uis))
+{
+    if (method != NULL) {
+        method->ui_read_string = reader;
+        return 0;
+    }
+    return -1;
+}
+
+int UI_method_set_closer(UI_METHOD *method, int (*closer) (UI *ui))
+{
+    if (method != NULL) {
+        method->ui_close_session = closer;
+        return 0;
+    }
+    return -1;
+}
+
+int UI_method_set_data_duplicator(UI_METHOD *method,
+                                  void *(*duplicator) (UI *ui, void *ui_data),
+                                  void (*destructor)(UI *ui, void *ui_data))
+{
+    if (method != NULL) {
+        method->ui_duplicate_data = duplicator;
+        method->ui_destroy_data = destructor;
+        return 0;
+    }
+    return -1;
+}
+
+int UI_method_set_prompt_constructor(UI_METHOD *method,
+                                     char *(*prompt_constructor) (UI *ui,
+                                                                  const char
+                                                                  *object_desc,
+                                                                  const char
+                                                                  *object_name))
+{
+    if (method != NULL) {
+        method->ui_construct_prompt = prompt_constructor;
+        return 0;
+    }
+    return -1;
+}
+
+int UI_method_set_ex_data(UI_METHOD *method, int idx, void *data)
+{
+    return CRYPTO_set_ex_data(&method->ex_data, idx, data);
+}
+
+int (*UI_method_get_opener(const UI_METHOD *method)) (UI *)
+{
+    if (method != NULL)
+        return method->ui_open_session;
+    return NULL;
+}
+
+int (*UI_method_get_writer(const UI_METHOD *method)) (UI *, UI_STRING *)
+{
+    if (method != NULL)
+        return method->ui_write_string;
+    return NULL;
+}
+
+int (*UI_method_get_flusher(const UI_METHOD *method)) (UI *)
+{
+    if (method != NULL)
+        return method->ui_flush;
+    return NULL;
+}
+
+int (*UI_method_get_reader(const UI_METHOD *method)) (UI *, UI_STRING *)
+{
+    if (method != NULL)
+        return method->ui_read_string;
+    return NULL;
+}
+
+int (*UI_method_get_closer(const UI_METHOD *method)) (UI *)
+{
+    if (method != NULL)
+        return method->ui_close_session;
+    return NULL;
+}
+
+char *(*UI_method_get_prompt_constructor(const UI_METHOD *method))
+    (UI *, const char *, const char *)
+{
+    if (method != NULL)
+        return method->ui_construct_prompt;
+    return NULL;
+}
+
+void *(*UI_method_get_data_duplicator(const UI_METHOD *method)) (UI *, void *)
+{
+    if (method != NULL)
+        return method->ui_duplicate_data;
+    return NULL;
+}
+
+void (*UI_method_get_data_destructor(const UI_METHOD *method)) (UI *, void *)
+{
+    if (method != NULL)
+        return method->ui_destroy_data;
+    return NULL;
+}
+
+const void *UI_method_get_ex_data(const UI_METHOD *method, int idx)
+{
+    return CRYPTO_get_ex_data(&method->ex_data, idx);
+}
+
+enum UI_string_types UI_get_string_type(UI_STRING *uis)
+{
+    return uis->type;
+}
+
+int UI_get_input_flags(UI_STRING *uis)
+{
+    return uis->input_flags;
+}
+
+const char *UI_get0_output_string(UI_STRING *uis)
+{
+    return uis->out_string;
+}
+
+const char *UI_get0_action_string(UI_STRING *uis)
+{
+    switch (uis->type) {
+    case UIT_BOOLEAN:
+        return uis->_.boolean_data.action_desc;
+    case UIT_PROMPT:
+    case UIT_NONE:
+    case UIT_VERIFY:
+    case UIT_INFO:
+    case UIT_ERROR:
+        break;
+    }
+    return NULL;
+}
+
+const char *UI_get0_result_string(UI_STRING *uis)
+{
+    switch (uis->type) {
+    case UIT_PROMPT:
+    case UIT_VERIFY:
+        return uis->result_buf;
+    case UIT_NONE:
+    case UIT_BOOLEAN:
+    case UIT_INFO:
+    case UIT_ERROR:
+        break;
+    }
+    return NULL;
+}
+
+int UI_get_result_string_length(UI_STRING *uis)
+{
+    switch (uis->type) {
+    case UIT_PROMPT:
+    case UIT_VERIFY:
+        return uis->result_len;
+    case UIT_NONE:
+    case UIT_BOOLEAN:
+    case UIT_INFO:
+    case UIT_ERROR:
+        break;
+    }
+    return -1;
+}
+
+const char *UI_get0_test_string(UI_STRING *uis)
+{
+    switch (uis->type) {
+    case UIT_VERIFY:
+        return uis->_.string_data.test_buf;
+    case UIT_NONE:
+    case UIT_BOOLEAN:
+    case UIT_INFO:
+    case UIT_ERROR:
+    case UIT_PROMPT:
+        break;
+    }
+    return NULL;
+}
+
+int UI_get_result_minsize(UI_STRING *uis)
+{
+    switch (uis->type) {
+    case UIT_PROMPT:
+    case UIT_VERIFY:
+        return uis->_.string_data.result_minsize;
+    case UIT_NONE:
+    case UIT_INFO:
+    case UIT_ERROR:
+    case UIT_BOOLEAN:
+        break;
+    }
+    return -1;
+}
+
+int UI_get_result_maxsize(UI_STRING *uis)
+{
+    switch (uis->type) {
+    case UIT_PROMPT:
+    case UIT_VERIFY:
+        return uis->_.string_data.result_maxsize;
+    case UIT_NONE:
+    case UIT_INFO:
+    case UIT_ERROR:
+    case UIT_BOOLEAN:
+        break;
+    }
+    return -1;
+}
+
+int UI_set_result(UI *ui, UI_STRING *uis, const char *result)
+{
+#if 0
+    /*
+     * This is placed here solely to preserve UI_F_UI_SET_RESULT
+     * To be removed for OpenSSL 1.2.0
+     */
+    UIerr(UI_F_UI_SET_RESULT, ERR_R_DISABLED);
+#endif
+    return UI_set_result_ex(ui, uis, result, strlen(result));
+}
+
+int UI_set_result_ex(UI *ui, UI_STRING *uis, const char *result, int len)
+{
+    ui->flags &= ~UI_FLAG_REDOABLE;
+
+    switch (uis->type) {
+    case UIT_PROMPT:
+    case UIT_VERIFY:
+        {
+            char number1[DECIMAL_SIZE(uis->_.string_data.result_minsize) + 1];
+            char number2[DECIMAL_SIZE(uis->_.string_data.result_maxsize) + 1];
+
+            BIO_snprintf(number1, sizeof(number1), "%d",
+                         uis->_.string_data.result_minsize);
+            BIO_snprintf(number2, sizeof(number2), "%d",
+                         uis->_.string_data.result_maxsize);
+
+            if (len < uis->_.string_data.result_minsize) {
+                ui->flags |= UI_FLAG_REDOABLE;
+                UIerr(UI_F_UI_SET_RESULT_EX, UI_R_RESULT_TOO_SMALL);
+                ERR_add_error_data(5, "You must type in ",
+                                   number1, " to ", number2, " characters");
+                return -1;
+            }
+            if (len > uis->_.string_data.result_maxsize) {
+                ui->flags |= UI_FLAG_REDOABLE;
+                UIerr(UI_F_UI_SET_RESULT_EX, UI_R_RESULT_TOO_LARGE);
+                ERR_add_error_data(5, "You must type in ",
+                                   number1, " to ", number2, " characters");
+                return -1;
+            }
+        }
+
+        if (uis->result_buf == NULL) {
+            UIerr(UI_F_UI_SET_RESULT_EX, UI_R_NO_RESULT_BUFFER);
+            return -1;
+        }
+
+        memcpy(uis->result_buf, result, len);
+        if (len <= uis->_.string_data.result_maxsize)
+            uis->result_buf[len] = '\0';
+        uis->result_len = len;
+        break;
+    case UIT_BOOLEAN:
+        {
+            const char *p;
+
+            if (uis->result_buf == NULL) {
+                UIerr(UI_F_UI_SET_RESULT_EX, UI_R_NO_RESULT_BUFFER);
+                return -1;
+            }
+
+            uis->result_buf[0] = '\0';
+            for (p = result; *p; p++) {
+                if (strchr(uis->_.boolean_data.ok_chars, *p)) {
+                    uis->result_buf[0] = uis->_.boolean_data.ok_chars[0];
+                    break;
+                }
+                if (strchr(uis->_.boolean_data.cancel_chars, *p)) {
+                    uis->result_buf[0] = uis->_.boolean_data.cancel_chars[0];
+                    break;
+                }
+            }
+        }
+    case UIT_NONE:
+    case UIT_INFO:
+    case UIT_ERROR:
+        break;
+    }
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_locl.h
new file mode 100644
index 000000000..19b33b8fc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_locl.h
@@ -0,0 +1,109 @@
+/*
+ * Copyright 2001-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_UI_LOCL_H
+# define HEADER_UI_LOCL_H
+
+# include <openssl/ui.h>
+# include <openssl/crypto.h>
+
+# ifdef _
+#  undef _
+# endif
+
+struct ui_method_st {
+    char *name;
+    /*
+     * All the functions return 1 or non-NULL for success and 0 or NULL for
+     * failure
+     */
+    /*
+     * Open whatever channel for this, be it the console, an X window or
+     * whatever. This function should use the ex_data structure to save
+     * intermediate data.
+     */
+    int (*ui_open_session) (UI *ui);
+    int (*ui_write_string) (UI *ui, UI_STRING *uis);
+    /*
+     * Flush the output.  If a GUI dialog box is used, this function can be
+     * used to actually display it.
+     */
+    int (*ui_flush) (UI *ui);
+    int (*ui_read_string) (UI *ui, UI_STRING *uis);
+    int (*ui_close_session) (UI *ui);
+    /*
+     * Duplicate the ui_data that often comes alongside a ui_method.  This
+     * allows some backends to save away UI information for later use.
+     */
+    void *(*ui_duplicate_data) (UI *ui, void *ui_data);
+    void (*ui_destroy_data) (UI *ui, void *ui_data);
+    /*
+     * Construct a prompt in a user-defined manner.  object_desc is a textual
+     * short description of the object, for example "pass phrase", and
+     * object_name is the name of the object (might be a card name or a file
+     * name. The returned string shall always be allocated on the heap with
+     * OPENSSL_malloc(), and need to be free'd with OPENSSL_free().
+     */
+    char *(*ui_construct_prompt) (UI *ui, const char *object_desc,
+                                  const char *object_name);
+    /*
+     * UI_METHOD specific application data.
+     */
+    CRYPTO_EX_DATA ex_data;
+};
+
+struct ui_string_st {
+    enum UI_string_types type;  /* Input */
+    const char *out_string;     /* Input */
+    int input_flags;            /* Flags from the user */
+    /*
+     * The following parameters are completely irrelevant for UIT_INFO, and
+     * can therefore be set to 0 or NULL
+     */
+    char *result_buf;           /* Input and Output: If not NULL,
+                                 * user-defined with size in result_maxsize.
+                                 * Otherwise, it may be allocated by the UI
+                                 * routine, meaning result_minsize is going
+                                 * to be overwritten. */
+    size_t result_len;
+    union {
+        struct {
+            int result_minsize; /* Input: minimum required size of the
+                                 * result. */
+            int result_maxsize; /* Input: maximum permitted size of the
+                                 * result */
+            const char *test_buf; /* Input: test string to verify against */
+        } string_data;
+        struct {
+            const char *action_desc; /* Input */
+            const char *ok_chars; /* Input */
+            const char *cancel_chars; /* Input */
+        } boolean_data;
+    } _;
+
+# define OUT_STRING_FREEABLE 0x01
+    int flags;                  /* flags for internal use */
+};
+
+struct ui_st {
+    const UI_METHOD *meth;
+    STACK_OF(UI_STRING) *strings; /* We might want to prompt for more than
+                                   * one thing at a time, and with different
+                                   * echoing status.  */
+    void *user_data;
+    CRYPTO_EX_DATA ex_data;
+# define UI_FLAG_REDOABLE        0x0001
+# define UI_FLAG_DUPL_DATA       0x0002 /* user_data was duplicated */
+# define UI_FLAG_PRINT_ERRORS    0x0100
+    int flags;
+
+    CRYPTO_RWLOCK *lock;
+};
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_null.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_null.c
new file mode 100644
index 000000000..9e5f6fca5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_null.c
@@ -0,0 +1,26 @@
+/*
+ * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "ui_locl.h"
+
+static const UI_METHOD ui_null = {
+    "OpenSSL NULL UI",
+    NULL,                        /* opener */
+    NULL,                        /* writer */
+    NULL,                        /* flusher */
+    NULL,                        /* reader */
+    NULL,                        /* closer */
+    NULL
+};
+
+/* The method with all the built-in thingies */
+const UI_METHOD *UI_null(void)
+{
+    return &ui_null;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_openssl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_openssl.c
new file mode 100644
index 000000000..5ca418d24
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_openssl.c
@@ -0,0 +1,744 @@
+/*
+ * Copyright 2001-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include <openssl/e_os2.h>
+#include <openssl/err.h>
+#include <openssl/ui.h>
+
+#ifndef OPENSSL_NO_UI_CONSOLE
+/*
+ * need for #define _POSIX_C_SOURCE arises whenever you pass -ansi to gcc
+ * [maybe others?], because it masks interfaces not discussed in standard,
+ * sigaction and fileno included. -pedantic would be more appropriate for the
+ * intended purposes, but we can't prevent users from adding -ansi.
+ */
+# if defined(OPENSSL_SYS_VXWORKS)
+#  include <sys/types.h>
+# endif
+
+# if !defined(_POSIX_C_SOURCE) && defined(OPENSSL_SYS_VMS)
+#  ifndef _POSIX_C_SOURCE
+#   define _POSIX_C_SOURCE 2
+#  endif
+# endif
+# include <signal.h>
+# include <stdio.h>
+# include <string.h>
+# include <errno.h>
+
+# if !defined(OPENSSL_SYS_MSDOS) && !defined(OPENSSL_SYS_VMS)
+#  ifdef OPENSSL_UNISTD
+#   include OPENSSL_UNISTD
+#  else
+#   include <unistd.h>
+#  endif
+/*
+ * If unistd.h defines _POSIX_VERSION, we conclude that we are on a POSIX
+ * system and have sigaction and termios.
+ */
+#  if defined(_POSIX_VERSION) && _POSIX_VERSION>=199309L
+
+#   define SIGACTION
+#   if !defined(TERMIOS) && !defined(TERMIO) && !defined(SGTTY)
+#    define TERMIOS
+#   endif
+
+#  endif
+# endif
+
+# include "ui_locl.h"
+# include "internal/cryptlib.h"
+
+# ifdef OPENSSL_SYS_VMS          /* prototypes for sys$whatever */
+#  include <starlet.h>
+#  ifdef __DECC
+#   pragma message disable DOLLARID
+#  endif
+# endif
+
+# ifdef WIN_CONSOLE_BUG
+#  include <windows.h>
+#  ifndef OPENSSL_SYS_WINCE
+#   include <wincon.h>
+#  endif
+# endif
+
+/*
+ * There are 6 types of terminal interface supported, TERMIO, TERMIOS, VMS,
+ * MSDOS, WIN32 Console and SGTTY.
+ *
+ * If someone defines one of the macros TERMIO, TERMIOS or SGTTY, it will
+ * remain respected.  Otherwise, we default to TERMIOS except for a few
+ * systems that require something different.
+ *
+ * Note: we do not use SGTTY unless it's defined by the configuration.  We
+ * may eventually opt to remove it's use entirely.
+ */
+
+# if !defined(TERMIOS) && !defined(TERMIO) && !defined(SGTTY)
+
+#  if defined(_LIBC)
+#   undef  TERMIOS
+#   define TERMIO
+#   undef  SGTTY
+/*
+ * We know that VMS, MSDOS, VXWORKS, use entirely other mechanisms.
+ */
+#  elif !defined(OPENSSL_SYS_VMS) \
+	&& !defined(OPENSSL_SYS_MSDOS) \
+	&& !defined(OPENSSL_SYS_VXWORKS)
+#   define TERMIOS
+#   undef  TERMIO
+#   undef  SGTTY
+#  endif
+
+# endif
+
+# if defined(OPENSSL_SYS_VXWORKS)
+#  undef TERMIOS
+#  undef TERMIO
+#  undef SGTTY
+# endif
+
+# ifdef TERMIOS
+#  include <termios.h>
+#  define TTY_STRUCT             struct termios
+#  define TTY_FLAGS              c_lflag
+#  define TTY_get(tty,data)      tcgetattr(tty,data)
+#  define TTY_set(tty,data)      tcsetattr(tty,TCSANOW,data)
+# endif
+
+# ifdef TERMIO
+#  include <termio.h>
+#  define TTY_STRUCT             struct termio
+#  define TTY_FLAGS              c_lflag
+#  define TTY_get(tty,data)      ioctl(tty,TCGETA,data)
+#  define TTY_set(tty,data)      ioctl(tty,TCSETA,data)
+# endif
+
+# ifdef SGTTY
+#  include <sgtty.h>
+#  define TTY_STRUCT             struct sgttyb
+#  define TTY_FLAGS              sg_flags
+#  define TTY_get(tty,data)      ioctl(tty,TIOCGETP,data)
+#  define TTY_set(tty,data)      ioctl(tty,TIOCSETP,data)
+# endif
+
+# if !defined(_LIBC) && !defined(OPENSSL_SYS_MSDOS) && !defined(OPENSSL_SYS_VMS)
+#  include <sys/ioctl.h>
+# endif
+
+# ifdef OPENSSL_SYS_MSDOS
+#  include <conio.h>
+# endif
+
+# ifdef OPENSSL_SYS_VMS
+#  include <ssdef.h>
+#  include <iodef.h>
+#  include <ttdef.h>
+#  include <descrip.h>
+struct IOSB {
+    short iosb$w_value;
+    short iosb$w_count;
+    long iosb$l_info;
+};
+# endif
+
+# ifndef NX509_SIG
+#  define NX509_SIG 32
+# endif
+
+/* Define globals.  They are protected by a lock */
+# ifdef SIGACTION
+static struct sigaction savsig[NX509_SIG];
+# else
+static void (*savsig[NX509_SIG]) (int);
+# endif
+
+# ifdef OPENSSL_SYS_VMS
+static struct IOSB iosb;
+static $DESCRIPTOR(terminal, "TT");
+static long tty_orig[3], tty_new[3]; /* XXX Is there any guarantee that this
+                                      * will always suffice for the actual
+                                      * structures? */
+static long status;
+static unsigned short channel = 0;
+# elif defined(_WIN32) && !defined(_WIN32_WCE)
+static DWORD tty_orig, tty_new;
+# else
+#  if !defined(OPENSSL_SYS_MSDOS) || defined(__DJGPP__)
+static TTY_STRUCT tty_orig, tty_new;
+#  endif
+# endif
+static FILE *tty_in, *tty_out;
+static int is_a_tty;
+
+/* Declare static functions */
+# if !defined(OPENSSL_SYS_WINCE)
+static int read_till_nl(FILE *);
+static void recsig(int);
+static void pushsig(void);
+static void popsig(void);
+# endif
+# if defined(OPENSSL_SYS_MSDOS) && !defined(_WIN32)
+static int noecho_fgets(char *buf, int size, FILE *tty);
+# endif
+static int read_string_inner(UI *ui, UI_STRING *uis, int echo, int strip_nl);
+
+static int read_string(UI *ui, UI_STRING *uis);
+static int write_string(UI *ui, UI_STRING *uis);
+
+static int open_console(UI *ui);
+static int echo_console(UI *ui);
+static int noecho_console(UI *ui);
+static int close_console(UI *ui);
+
+/*
+ * The following function makes sure that info and error strings are printed
+ * before any prompt.
+ */
+static int write_string(UI *ui, UI_STRING *uis)
+{
+    switch (UI_get_string_type(uis)) {
+    case UIT_ERROR:
+    case UIT_INFO:
+        fputs(UI_get0_output_string(uis), tty_out);
+        fflush(tty_out);
+        break;
+    case UIT_NONE:
+    case UIT_PROMPT:
+    case UIT_VERIFY:
+    case UIT_BOOLEAN:
+        break;
+    }
+    return 1;
+}
+
+static int read_string(UI *ui, UI_STRING *uis)
+{
+    int ok = 0;
+
+    switch (UI_get_string_type(uis)) {
+    case UIT_BOOLEAN:
+        fputs(UI_get0_output_string(uis), tty_out);
+        fputs(UI_get0_action_string(uis), tty_out);
+        fflush(tty_out);
+        return read_string_inner(ui, uis,
+                                 UI_get_input_flags(uis) & UI_INPUT_FLAG_ECHO,
+                                 0);
+    case UIT_PROMPT:
+        fputs(UI_get0_output_string(uis), tty_out);
+        fflush(tty_out);
+        return read_string_inner(ui, uis,
+                                 UI_get_input_flags(uis) & UI_INPUT_FLAG_ECHO,
+                                 1);
+    case UIT_VERIFY:
+        fprintf(tty_out, "Verifying - %s", UI_get0_output_string(uis));
+        fflush(tty_out);
+        if ((ok = read_string_inner(ui, uis,
+                                    UI_get_input_flags(uis) &
+                                    UI_INPUT_FLAG_ECHO, 1)) <= 0)
+            return ok;
+        if (strcmp(UI_get0_result_string(uis), UI_get0_test_string(uis)) != 0) {
+            fprintf(tty_out, "Verify failure\n");
+            fflush(tty_out);
+            return 0;
+        }
+        break;
+    case UIT_NONE:
+    case UIT_INFO:
+    case UIT_ERROR:
+        break;
+    }
+    return 1;
+}
+
+# if !defined(OPENSSL_SYS_WINCE)
+/* Internal functions to read a string without echoing */
+static int read_till_nl(FILE *in)
+{
+#  define SIZE 4
+    char buf[SIZE + 1];
+
+    do {
+        if (!fgets(buf, SIZE, in))
+            return 0;
+    } while (strchr(buf, '\n') == NULL);
+    return 1;
+}
+
+static volatile sig_atomic_t intr_signal;
+# endif
+
+static int read_string_inner(UI *ui, UI_STRING *uis, int echo, int strip_nl)
+{
+    static int ps;
+    int ok;
+    char result[BUFSIZ];
+    int maxsize = BUFSIZ - 1;
+# if !defined(OPENSSL_SYS_WINCE)
+    char *p = NULL;
+    int echo_eol = !echo;
+
+    intr_signal = 0;
+    ok = 0;
+    ps = 0;
+
+    pushsig();
+    ps = 1;
+
+    if (!echo && !noecho_console(ui))
+        goto error;
+    ps = 2;
+
+    result[0] = '\0';
+#  if defined(_WIN32)
+    if (is_a_tty) {
+        DWORD numread;
+#   if defined(CP_UTF8)
+        if (GetEnvironmentVariableW(L"OPENSSL_WIN32_UTF8", NULL, 0) != 0) {
+            WCHAR wresult[BUFSIZ];
+
+            if (ReadConsoleW(GetStdHandle(STD_INPUT_HANDLE),
+                         wresult, maxsize, &numread, NULL)) {
+                if (numread >= 2 &&
+                    wresult[numread-2] == L'\r' &&
+                    wresult[numread-1] == L'\n') {
+                    wresult[numread-2] = L'\n';
+                    numread--;
+                }
+                wresult[numread] = '\0';
+                if (WideCharToMultiByte(CP_UTF8, 0, wresult, -1,
+                                        result, sizeof(result), NULL, 0) > 0)
+                    p = result;
+
+                OPENSSL_cleanse(wresult, sizeof(wresult));
+            }
+        } else
+#   endif
+        if (ReadConsoleA(GetStdHandle(STD_INPUT_HANDLE),
+                         result, maxsize, &numread, NULL)) {
+            if (numread >= 2 &&
+                result[numread-2] == '\r' && result[numread-1] == '\n') {
+                result[numread-2] = '\n';
+                numread--;
+            }
+            result[numread] = '\0';
+            p = result;
+        }
+    } else
+#  elif defined(OPENSSL_SYS_MSDOS)
+    if (!echo) {
+        noecho_fgets(result, maxsize, tty_in);
+        p = result;             /* FIXME: noecho_fgets doesn't return errors */
+    } else
+#  endif
+    p = fgets(result, maxsize, tty_in);
+    if (p == NULL)
+        goto error;
+    if (feof(tty_in))
+        goto error;
+    if (ferror(tty_in))
+        goto error;
+    if ((p = (char *)strchr(result, '\n')) != NULL) {
+        if (strip_nl)
+            *p = '\0';
+    } else if (!read_till_nl(tty_in))
+        goto error;
+    if (UI_set_result(ui, uis, result) >= 0)
+        ok = 1;
+
+ error:
+    if (intr_signal == SIGINT)
+        ok = -1;
+    if (echo_eol)
+        fprintf(tty_out, "\n");
+    if (ps >= 2 && !echo && !echo_console(ui))
+        ok = 0;
+
+    if (ps >= 1)
+        popsig();
+# else
+    ok = 1;
+# endif
+
+    OPENSSL_cleanse(result, BUFSIZ);
+    return ok;
+}
+
+/* Internal functions to open, handle and close a channel to the console.  */
+static int open_console(UI *ui)
+{
+    CRYPTO_THREAD_write_lock(ui->lock);
+    is_a_tty = 1;
+
+# if defined(OPENSSL_SYS_VXWORKS)
+    tty_in = stdin;
+    tty_out = stderr;
+# elif defined(_WIN32) && !defined(_WIN32_WCE)
+    if ((tty_out = fopen("conout$", "w")) == NULL)
+        tty_out = stderr;
+
+    if (GetConsoleMode(GetStdHandle(STD_INPUT_HANDLE), &tty_orig)) {
+        tty_in = stdin;
+    } else {
+        is_a_tty = 0;
+        if ((tty_in = fopen("conin$", "r")) == NULL)
+            tty_in = stdin;
+    }
+# else
+#  ifdef OPENSSL_SYS_MSDOS
+#   define DEV_TTY "con"
+#  else
+#   define DEV_TTY "/dev/tty"
+#  endif
+    if ((tty_in = fopen(DEV_TTY, "r")) == NULL)
+        tty_in = stdin;
+    if ((tty_out = fopen(DEV_TTY, "w")) == NULL)
+        tty_out = stderr;
+# endif
+
+# if defined(TTY_get) && !defined(OPENSSL_SYS_VMS)
+    if (TTY_get(fileno(tty_in), &tty_orig) == -1) {
+#  ifdef ENOTTY
+        if (errno == ENOTTY)
+            is_a_tty = 0;
+        else
+#  endif
+#  ifdef EINVAL
+            /*
+             * Ariel Glenn reports that solaris can return EINVAL instead.
+             * This should be ok
+             */
+        if (errno == EINVAL)
+            is_a_tty = 0;
+        else
+#  endif
+#  ifdef ENXIO
+            /*
+             * Solaris can return ENXIO.
+             * This should be ok
+             */
+        if (errno == ENXIO)
+            is_a_tty = 0;
+        else
+#  endif
+#  ifdef EIO
+            /*
+             * Linux can return EIO.
+             * This should be ok
+             */
+        if (errno == EIO)
+            is_a_tty = 0;
+        else
+#  endif
+#  ifdef ENODEV
+            /*
+             * MacOS X returns ENODEV (Operation not supported by device),
+             * which seems appropriate.
+             */
+        if (errno == ENODEV)
+            is_a_tty = 0;
+        else
+#  endif
+            {
+                char tmp_num[10];
+                BIO_snprintf(tmp_num, sizeof(tmp_num) - 1, "%d", errno);
+                UIerr(UI_F_OPEN_CONSOLE, UI_R_UNKNOWN_TTYGET_ERRNO_VALUE);
+                ERR_add_error_data(2, "errno=", tmp_num);
+
+                return 0;
+            }
+    }
+# endif
+# ifdef OPENSSL_SYS_VMS
+    status = sys$assign(&terminal, &channel, 0, 0);
+
+    /* if there isn't a TT device, something is very wrong */
+    if (status != SS$_NORMAL) {
+        char tmp_num[12];
+
+        BIO_snprintf(tmp_num, sizeof(tmp_num) - 1, "%%X%08X", status);
+        UIerr(UI_F_OPEN_CONSOLE, UI_R_SYSASSIGN_ERROR);
+        ERR_add_error_data(2, "status=", tmp_num);
+        return 0;
+    }
+
+    status = sys$qiow(0, channel, IO$_SENSEMODE, &iosb, 0, 0, tty_orig, 12,
+                      0, 0, 0, 0);
+
+    /* If IO$_SENSEMODE doesn't work, this is not a terminal device */
+    if ((status != SS$_NORMAL) || (iosb.iosb$w_value != SS$_NORMAL))
+        is_a_tty = 0;
+# endif
+    return 1;
+}
+
+static int noecho_console(UI *ui)
+{
+# ifdef TTY_FLAGS
+    memcpy(&(tty_new), &(tty_orig), sizeof(tty_orig));
+    tty_new.TTY_FLAGS &= ~ECHO;
+# endif
+
+# if defined(TTY_set) && !defined(OPENSSL_SYS_VMS)
+    if (is_a_tty && (TTY_set(fileno(tty_in), &tty_new) == -1))
+        return 0;
+# endif
+# ifdef OPENSSL_SYS_VMS
+    if (is_a_tty) {
+        tty_new[0] = tty_orig[0];
+        tty_new[1] = tty_orig[1] | TT$M_NOECHO;
+        tty_new[2] = tty_orig[2];
+        status = sys$qiow(0, channel, IO$_SETMODE, &iosb, 0, 0, tty_new, 12,
+                          0, 0, 0, 0);
+        if ((status != SS$_NORMAL) || (iosb.iosb$w_value != SS$_NORMAL)) {
+            char tmp_num[2][12];
+
+            BIO_snprintf(tmp_num[0], sizeof(tmp_num[0]) - 1, "%%X%08X",
+                         status);
+            BIO_snprintf(tmp_num[1], sizeof(tmp_num[1]) - 1, "%%X%08X",
+                         iosb.iosb$w_value);
+            UIerr(UI_F_NOECHO_CONSOLE, UI_R_SYSQIOW_ERROR);
+            ERR_add_error_data(5, "status=", tmp_num[0],
+                               ",", "iosb.iosb$w_value=", tmp_num[1]);
+            return 0;
+        }
+    }
+# endif
+# if defined(_WIN32) && !defined(_WIN32_WCE)
+    if (is_a_tty) {
+        tty_new = tty_orig;
+        tty_new &= ~ENABLE_ECHO_INPUT;
+        SetConsoleMode(GetStdHandle(STD_INPUT_HANDLE), tty_new);
+    }
+# endif
+    return 1;
+}
+
+static int echo_console(UI *ui)
+{
+# if defined(TTY_set) && !defined(OPENSSL_SYS_VMS)
+    memcpy(&(tty_new), &(tty_orig), sizeof(tty_orig));
+    if (is_a_tty && (TTY_set(fileno(tty_in), &tty_new) == -1))
+        return 0;
+# endif
+# ifdef OPENSSL_SYS_VMS
+    if (is_a_tty) {
+        tty_new[0] = tty_orig[0];
+        tty_new[1] = tty_orig[1];
+        tty_new[2] = tty_orig[2];
+        status = sys$qiow(0, channel, IO$_SETMODE, &iosb, 0, 0, tty_new, 12,
+                          0, 0, 0, 0);
+        if ((status != SS$_NORMAL) || (iosb.iosb$w_value != SS$_NORMAL)) {
+            char tmp_num[2][12];
+
+            BIO_snprintf(tmp_num[0], sizeof(tmp_num[0]) - 1, "%%X%08X",
+                         status);
+            BIO_snprintf(tmp_num[1], sizeof(tmp_num[1]) - 1, "%%X%08X",
+                         iosb.iosb$w_value);
+            UIerr(UI_F_ECHO_CONSOLE, UI_R_SYSQIOW_ERROR);
+            ERR_add_error_data(5, "status=", tmp_num[0],
+                               ",", "iosb.iosb$w_value=", tmp_num[1]);
+            return 0;
+        }
+    }
+# endif
+# if defined(_WIN32) && !defined(_WIN32_WCE)
+    if (is_a_tty) {
+        tty_new = tty_orig;
+        SetConsoleMode(GetStdHandle(STD_INPUT_HANDLE), tty_new);
+    }
+# endif
+    return 1;
+}
+
+static int close_console(UI *ui)
+{
+    if (tty_in != stdin)
+        fclose(tty_in);
+    if (tty_out != stderr)
+        fclose(tty_out);
+# ifdef OPENSSL_SYS_VMS
+    status = sys$dassgn(channel);
+    if (status != SS$_NORMAL) {
+        char tmp_num[12];
+
+        BIO_snprintf(tmp_num, sizeof(tmp_num) - 1, "%%X%08X", status);
+        UIerr(UI_F_CLOSE_CONSOLE, UI_R_SYSDASSGN_ERROR);
+        ERR_add_error_data(2, "status=", tmp_num);
+        return 0;
+    }
+# endif
+    CRYPTO_THREAD_unlock(ui->lock);
+
+    return 1;
+}
+
+# if !defined(OPENSSL_SYS_WINCE)
+/* Internal functions to handle signals and act on them */
+static void pushsig(void)
+{
+#  ifndef OPENSSL_SYS_WIN32
+    int i;
+#  endif
+#  ifdef SIGACTION
+    struct sigaction sa;
+
+    memset(&sa, 0, sizeof(sa));
+    sa.sa_handler = recsig;
+#  endif
+
+#  ifdef OPENSSL_SYS_WIN32
+    savsig[SIGABRT] = signal(SIGABRT, recsig);
+    savsig[SIGFPE] = signal(SIGFPE, recsig);
+    savsig[SIGILL] = signal(SIGILL, recsig);
+    savsig[SIGINT] = signal(SIGINT, recsig);
+    savsig[SIGSEGV] = signal(SIGSEGV, recsig);
+    savsig[SIGTERM] = signal(SIGTERM, recsig);
+#  else
+    for (i = 1; i < NX509_SIG; i++) {
+#   ifdef SIGUSR1
+        if (i == SIGUSR1)
+            continue;
+#   endif
+#   ifdef SIGUSR2
+        if (i == SIGUSR2)
+            continue;
+#   endif
+#   ifdef SIGKILL
+        if (i == SIGKILL)       /* We can't make any action on that. */
+            continue;
+#   endif
+#   ifdef SIGACTION
+        sigaction(i, &sa, &savsig[i]);
+#   else
+        savsig[i] = signal(i, recsig);
+#   endif
+    }
+#  endif
+
+#  ifdef SIGWINCH
+    signal(SIGWINCH, SIG_DFL);
+#  endif
+}
+
+static void popsig(void)
+{
+#  ifdef OPENSSL_SYS_WIN32
+    signal(SIGABRT, savsig[SIGABRT]);
+    signal(SIGFPE, savsig[SIGFPE]);
+    signal(SIGILL, savsig[SIGILL]);
+    signal(SIGINT, savsig[SIGINT]);
+    signal(SIGSEGV, savsig[SIGSEGV]);
+    signal(SIGTERM, savsig[SIGTERM]);
+#  else
+    int i;
+    for (i = 1; i < NX509_SIG; i++) {
+#   ifdef SIGUSR1
+        if (i == SIGUSR1)
+            continue;
+#   endif
+#   ifdef SIGUSR2
+        if (i == SIGUSR2)
+            continue;
+#   endif
+#   ifdef SIGACTION
+        sigaction(i, &savsig[i], NULL);
+#   else
+        signal(i, savsig[i]);
+#   endif
+    }
+#  endif
+}
+
+static void recsig(int i)
+{
+    intr_signal = i;
+}
+# endif
+
+/* Internal functions specific for Windows */
+# if defined(OPENSSL_SYS_MSDOS) && !defined(_WIN32)
+static int noecho_fgets(char *buf, int size, FILE *tty)
+{
+    int i;
+    char *p;
+
+    p = buf;
+    for (;;) {
+        if (size == 0) {
+            *p = '\0';
+            break;
+        }
+        size--;
+#  if defined(_WIN32)
+        i = _getch();
+#  else
+        i = getch();
+#  endif
+        if (i == '\r')
+            i = '\n';
+        *(p++) = i;
+        if (i == '\n') {
+            *p = '\0';
+            break;
+        }
+    }
+#  ifdef WIN_CONSOLE_BUG
+    /*
+     * Win95 has several evil console bugs: one of these is that the last
+     * character read using getch() is passed to the next read: this is
+     * usually a CR so this can be trouble. No STDIO fix seems to work but
+     * flushing the console appears to do the trick.
+     */
+    {
+        HANDLE inh;
+        inh = GetStdHandle(STD_INPUT_HANDLE);
+        FlushConsoleInputBuffer(inh);
+    }
+#  endif
+    return strlen(buf);
+}
+# endif
+
+static UI_METHOD ui_openssl = {
+    "OpenSSL default user interface",
+    open_console,
+    write_string,
+    NULL,                       /* No flusher is needed for command lines */
+    read_string,
+    close_console,
+    NULL
+};
+
+/* The method with all the built-in console thingies */
+UI_METHOD *UI_OpenSSL(void)
+{
+    return &ui_openssl;
+}
+
+static const UI_METHOD *default_UI_meth = &ui_openssl;
+
+#else
+
+static const UI_METHOD *default_UI_meth = NULL;
+
+#endif
+
+void UI_set_default_method(const UI_METHOD *meth)
+{
+    default_UI_meth = meth;
+}
+
+const UI_METHOD *UI_get_default_method(void)
+{
+    return default_UI_meth;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_util.c b/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_util.c
new file mode 100644
index 000000000..b379324f9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/ui/ui_util.c
@@ -0,0 +1,162 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include "internal/thread_once.h"
+#include "ui_locl.h"
+
+#ifndef BUFSIZ
+#define BUFSIZ 256
+#endif
+
+int UI_UTIL_read_pw_string(char *buf, int length, const char *prompt,
+                           int verify)
+{
+    char buff[BUFSIZ];
+    int ret;
+
+    ret =
+        UI_UTIL_read_pw(buf, buff, (length > BUFSIZ) ? BUFSIZ : length,
+                        prompt, verify);
+    OPENSSL_cleanse(buff, BUFSIZ);
+    return ret;
+}
+
+int UI_UTIL_read_pw(char *buf, char *buff, int size, const char *prompt,
+                    int verify)
+{
+    int ok = 0;
+    UI *ui;
+
+    if (size < 1)
+        return -1;
+
+    ui = UI_new();
+    if (ui != NULL) {
+        ok = UI_add_input_string(ui, prompt, 0, buf, 0, size - 1);
+        if (ok >= 0 && verify)
+            ok = UI_add_verify_string(ui, prompt, 0, buff, 0, size - 1, buf);
+        if (ok >= 0)
+            ok = UI_process(ui);
+        UI_free(ui);
+    }
+    if (ok > 0)
+        ok = 0;
+    return ok;
+}
+
+/*
+ * Wrapper around pem_password_cb, a method to help older APIs use newer
+ * ones.
+ */
+struct pem_password_cb_data {
+    pem_password_cb *cb;
+    int rwflag;
+};
+
+static void ui_new_method_data(void *parent, void *ptr, CRYPTO_EX_DATA *ad,
+                               int idx, long argl, void *argp)
+{
+    /*
+     * Do nothing, the data is allocated externally and assigned later with
+     * CRYPTO_set_ex_data()
+     */
+}
+
+static int ui_dup_method_data(CRYPTO_EX_DATA *to, const CRYPTO_EX_DATA *from,
+                              void *from_d, int idx, long argl, void *argp)
+{
+    void **pptr = (void **)from_d;
+    if (*pptr != NULL)
+        *pptr = OPENSSL_memdup(*pptr, sizeof(struct pem_password_cb_data));
+    return 1;
+}
+
+static void ui_free_method_data(void *parent, void *ptr, CRYPTO_EX_DATA *ad,
+                                int idx, long argl, void *argp)
+{
+    OPENSSL_free(ptr);
+}
+
+static CRYPTO_ONCE get_index_once = CRYPTO_ONCE_STATIC_INIT;
+static int ui_method_data_index = -1;
+DEFINE_RUN_ONCE_STATIC(ui_method_data_index_init)
+{
+    ui_method_data_index = CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_UI_METHOD,
+                                                   0, NULL, ui_new_method_data,
+                                                   ui_dup_method_data,
+                                                   ui_free_method_data);
+    return 1;
+}
+
+static int ui_open(UI *ui)
+{
+    return 1;
+}
+static int ui_read(UI *ui, UI_STRING *uis)
+{
+    switch (UI_get_string_type(uis)) {
+    case UIT_PROMPT:
+        {
+            char result[PEM_BUFSIZE + 1];
+            const struct pem_password_cb_data *data =
+                UI_method_get_ex_data(UI_get_method(ui), ui_method_data_index);
+            int maxsize = UI_get_result_maxsize(uis);
+            int len = data->cb(result,
+                               maxsize > PEM_BUFSIZE ? PEM_BUFSIZE : maxsize,
+                               data->rwflag, UI_get0_user_data(ui));
+
+            if (len >= 0)
+                result[len] = '\0';
+            if (len <= 0)
+                return len;
+            if (UI_set_result_ex(ui, uis, result, len) >= 0)
+                return 1;
+            return 0;
+        }
+    case UIT_VERIFY:
+    case UIT_NONE:
+    case UIT_BOOLEAN:
+    case UIT_INFO:
+    case UIT_ERROR:
+        break;
+    }
+    return 1;
+}
+static int ui_write(UI *ui, UI_STRING *uis)
+{
+    return 1;
+}
+static int ui_close(UI *ui)
+{
+    return 1;
+}
+
+UI_METHOD *UI_UTIL_wrap_read_pem_callback(pem_password_cb *cb, int rwflag)
+{
+    struct pem_password_cb_data *data = NULL;
+    UI_METHOD *ui_method = NULL;
+
+    if ((data = OPENSSL_zalloc(sizeof(*data))) == NULL
+        || (ui_method = UI_create_method("PEM password callback wrapper")) == NULL
+        || UI_method_set_opener(ui_method, ui_open) < 0
+        || UI_method_set_reader(ui_method, ui_read) < 0
+        || UI_method_set_writer(ui_method, ui_write) < 0
+        || UI_method_set_closer(ui_method, ui_close) < 0
+        || !RUN_ONCE(&get_index_once, ui_method_data_index_init)
+        || UI_method_set_ex_data(ui_method, ui_method_data_index, data) < 0) {
+        UI_destroy_method(ui_method);
+        OPENSSL_free(data);
+        return NULL;
+    }
+    data->rwflag = rwflag;
+    data->cb = cb;
+
+    return ui_method;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/uid.c b/trunk/3rdparty/openssl-1.1-fit/crypto/uid.c
new file mode 100644
index 000000000..b2b096446
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/uid.c
@@ -0,0 +1,49 @@
+/*
+ * Copyright 2001-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/crypto.h>
+#include <openssl/opensslconf.h>
+
+#if defined(__OpenBSD__) || (defined(__FreeBSD__) && __FreeBSD__ > 2) || defined(__DragonFly__)
+
+# include OPENSSL_UNISTD
+
+int OPENSSL_issetugid(void)
+{
+    return issetugid();
+}
+
+#elif defined(OPENSSL_SYS_WIN32) || defined(OPENSSL_SYS_VXWORKS) || defined(OPENSSL_SYS_UEFI)
+
+int OPENSSL_issetugid(void)
+{
+    return 0;
+}
+
+#else
+
+# include OPENSSL_UNISTD
+# include <sys/types.h>
+
+# if defined(__GLIBC__) && defined(__GLIBC_PREREQ)
+#  if __GLIBC_PREREQ(2, 16)
+#   include <sys/auxv.h>
+#   define OSSL_IMPLEMENT_GETAUXVAL
+#  endif
+# endif
+
+int OPENSSL_issetugid(void)
+{
+# ifdef OSSL_IMPLEMENT_GETAUXVAL
+    return getauxval(AT_SECURE) != 0;
+# else
+    return getuid() != geteuid() || getgid() != getegid();
+# endif
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/vms_rms.h b/trunk/3rdparty/openssl-1.1-fit/crypto/vms_rms.h
new file mode 100644
index 000000000..3b994a0ab
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/vms_rms.h
@@ -0,0 +1,58 @@
+/*
+ * Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifdef NAML$C_MAXRSS
+
+# define CC_RMS_NAMX cc$rms_naml
+# define FAB_NAMX fab$l_naml
+# define FAB_OR_NAML( fab, naml) naml
+# define FAB_OR_NAML_DNA naml$l_long_defname
+# define FAB_OR_NAML_DNS naml$l_long_defname_size
+# define FAB_OR_NAML_FNA naml$l_long_filename
+# define FAB_OR_NAML_FNS naml$l_long_filename_size
+# define NAMX_ESA naml$l_long_expand
+# define NAMX_ESL naml$l_long_expand_size
+# define NAMX_ESS naml$l_long_expand_alloc
+# define NAMX_NOP naml$b_nop
+# define SET_NAMX_NO_SHORT_UPCASE( nam) nam.naml$v_no_short_upcase = 1
+
+# if __INITIAL_POINTER_SIZE == 64
+#  define NAMX_DNA_FNA_SET(fab) fab.fab$l_dna = (__char_ptr32) -1; \
+   fab.fab$l_fna = (__char_ptr32) -1;
+# else                          /* __INITIAL_POINTER_SIZE == 64 */
+#  define NAMX_DNA_FNA_SET(fab) fab.fab$l_dna = (char *) -1; \
+   fab.fab$l_fna = (char *) -1;
+# endif                         /* __INITIAL_POINTER_SIZE == 64 [else] */
+
+# define NAMX_MAXRSS NAML$C_MAXRSS
+# define NAMX_STRUCT NAML
+
+#else                           /* def NAML$C_MAXRSS */
+
+# define CC_RMS_NAMX cc$rms_nam
+# define FAB_NAMX fab$l_nam
+# define FAB_OR_NAML( fab, naml) fab
+# define FAB_OR_NAML_DNA fab$l_dna
+# define FAB_OR_NAML_DNS fab$b_dns
+# define FAB_OR_NAML_FNA fab$l_fna
+# define FAB_OR_NAML_FNS fab$b_fns
+# define NAMX_ESA nam$l_esa
+# define NAMX_ESL nam$b_esl
+# define NAMX_ESS nam$b_ess
+# define NAMX_NOP nam$b_nop
+# define NAMX_DNA_FNA_SET(fab)
+# define NAMX_MAXRSS NAM$C_MAXRSS
+# define NAMX_STRUCT NAM
+# ifdef NAM$M_NO_SHORT_UPCASE
+#  define SET_NAMX_NO_SHORT_UPCASE( nam) naml.naml$v_no_short_upcase = 1
+# else                          /* def NAM$M_NO_SHORT_UPCASE */
+#  define SET_NAMX_NO_SHORT_UPCASE( nam)
+# endif                         /* def NAM$M_NO_SHORT_UPCASE [else] */
+
+#endif                          /* def NAML$C_MAXRSS [else] */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/asm/wp-mmx.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/asm/wp-mmx.pl
new file mode 100644
index 000000000..2241c6f0f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/asm/wp-mmx.pl
@@ -0,0 +1,507 @@
+#! /usr/bin/env perl
+# Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. Rights for redistribution and usage in source and binary
+# forms are granted according to the OpenSSL license.
+# ====================================================================
+#
+# whirlpool_block_mmx implementation.
+#
+*SCALE=\(2); # 2 or 8, that is the question:-) Value of 8 results
+# in 16KB large table, which is tough on L1 cache, but eliminates
+# unaligned references to it. Value of 2 results in 4KB table, but
+# 7/8 of references to it are unaligned. AMD cores seem to be
+# allergic to the latter, while Intel ones - to former [see the
+# table]. I stick to value of 2 for two reasons: 1. smaller table
+# minimizes cache trashing and thus mitigates the hazard of side-
+# channel leakage similar to AES cache-timing one; 2. performance
+# gap among different µ-archs is smaller.
+#
+# Performance table lists rounded amounts of CPU cycles spent by
+# whirlpool_block_mmx routine on single 64 byte input block, i.e.
+# smaller is better and asymptotic throughput can be estimated by
+# multiplying 64 by CPU clock frequency and dividing by relevant
+# value from the given table:
+#
+#		$SCALE=2/8	icc8	gcc3
+# Intel P4	3200/4600	4600(*)	6400
+# Intel PIII	2900/3000	4900	5400
+# AMD K[78]	2500/1800	9900	8200(**)
+#
+# (*)	I've sketched even non-MMX assembler, but for the record
+#	I've failed to beat the Intel compiler on P4, without using
+#	MMX that is...
+# (**)	... on AMD on the other hand non-MMX assembler was observed
+#	to perform significantly better, but I figured this MMX
+#	implementation is even faster anyway, so why bother? As for
+#	pre-MMX AMD core[s], the improvement coefficient is more
+#	than likely to vary anyway and I don't know how. But the
+#	least I know is that gcc-generated code compiled with
+#	-DL_ENDIAN and -DOPENSSL_SMALL_FOOTPRINT [see C module for
+#	details] and optimized for Pentium was observed to perform
+#	*better* on Pentium 100 than unrolled non-MMX assembler
+#	loop... So we just say that I don't know if maintaining
+#	non-MMX implementation would actually pay off, but till
+#	opposite is proved "unlikely" is assumed.
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../perlasm");
+require "x86asm.pl";
+
+$output=pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0]);
+
+sub L()  { &data_byte(@_); }
+sub LL()
+{	if	($SCALE==2)	{ &data_byte(@_); &data_byte(@_); }
+	elsif	($SCALE==8)	{ for ($i=0;$i<8;$i++) {
+					&data_byte(@_);
+					unshift(@_,pop(@_));
+				  }
+				}
+	else			{ die "unvalid SCALE value"; }
+}
+
+sub scale()
+{	if	($SCALE==2)	{ &lea(@_[0],&DWP(0,@_[1],@_[1])); }
+	elsif	($SCALE==8)	{ &lea(@_[0],&DWP(0,"",@_[1],8));  }
+	else			{ die "unvalid SCALE value";       }
+}
+
+sub row()
+{	if	($SCALE==2)	{ ((8-shift)&7); }
+	elsif	($SCALE==8)	{ (8*shift);     }
+	else			{ die "unvalid SCALE value"; }
+}
+
+$tbl="ebp";
+@mm=("mm0","mm1","mm2","mm3","mm4","mm5","mm6","mm7");
+
+&function_begin_B("whirlpool_block_mmx");
+	&push	("ebp");
+	&push	("ebx");
+	&push	("esi");
+	&push	("edi");
+
+	&mov	("esi",&wparam(0));		# hash value
+	&mov	("edi",&wparam(1));		# input data stream
+	&mov	("ebp",&wparam(2));		# number of chunks in input
+
+	&mov	("eax","esp");			# copy stack pointer
+	&sub	("esp",128+20);			# allocate frame
+	&and	("esp",-64);			# align for cache-line
+
+	&lea	("ebx",&DWP(128,"esp"));
+	&mov	(&DWP(0,"ebx"),"esi");		# save parameter block
+	&mov	(&DWP(4,"ebx"),"edi");
+	&mov	(&DWP(8,"ebx"),"ebp");
+	&mov	(&DWP(16,"ebx"),"eax");		# saved stack pointer
+
+	&call	(&label("pic_point"));
+&set_label("pic_point");
+	&blindpop($tbl);
+	&lea	($tbl,&DWP(&label("table")."-".&label("pic_point"),$tbl));
+
+	&xor	("ecx","ecx");
+	&xor	("edx","edx");
+
+	for($i=0;$i<8;$i++) { &movq(@mm[$i],&QWP($i*8,"esi")); }    # L=H
+&set_label("outerloop");
+	for($i=0;$i<8;$i++) { &movq(&QWP($i*8,"esp"),@mm[$i]); }    # K=L
+	for($i=0;$i<8;$i++) { &pxor(@mm[$i],&QWP($i*8,"edi")); }    # L^=inp
+	for($i=0;$i<8;$i++) { &movq(&QWP(64+$i*8,"esp"),@mm[$i]); } # S=L
+
+	&xor	("esi","esi");
+	&mov	(&DWP(12,"ebx"),"esi");		# zero round counter
+
+&set_label("round",16);
+	&movq	(@mm[0],&QWP(2048*$SCALE,$tbl,"esi",8));	# rc[r]
+	&mov	("eax",&DWP(0,"esp"));
+	&mov	("ebx",&DWP(4,"esp"));
+	&movz	("ecx",&LB("eax"));
+	&movz	("edx",&HB("eax"));
+for($i=0;$i<8;$i++) {
+    my $func = ($i==0)? \&movq : \&pxor;
+	&shr	("eax",16);
+	&scale	("esi","ecx");
+	&movz	("ecx",&LB("eax"));
+	&scale	("edi","edx");
+	&movz	("edx",&HB("eax"));
+	&pxor	(@mm[0],&QWP(&row(0),$tbl,"esi",8));
+	&$func	(@mm[1],&QWP(&row(1),$tbl,"edi",8));
+	&mov	("eax",&DWP(($i+1)*8,"esp"));
+	&scale	("esi","ecx");
+	&movz	("ecx",&LB("ebx"));
+	&scale	("edi","edx");
+	&movz	("edx",&HB("ebx"));
+	&$func	(@mm[2],&QWP(&row(2),$tbl,"esi",8));
+	&$func	(@mm[3],&QWP(&row(3),$tbl,"edi",8));
+	&shr	("ebx",16);
+	&scale	("esi","ecx");
+	&movz	("ecx",&LB("ebx"));
+	&scale	("edi","edx");
+	&movz	("edx",&HB("ebx"));
+	&$func	(@mm[4],&QWP(&row(4),$tbl,"esi",8));
+	&$func	(@mm[5],&QWP(&row(5),$tbl,"edi",8));
+	&mov	("ebx",&DWP(($i+1)*8+4,"esp"));
+	&scale	("esi","ecx");
+	&movz	("ecx",&LB("eax"));
+	&scale	("edi","edx");
+	&movz	("edx",&HB("eax"));
+	&$func	(@mm[6],&QWP(&row(6),$tbl,"esi",8));
+	&$func	(@mm[7],&QWP(&row(7),$tbl,"edi",8));
+    push(@mm,shift(@mm));
+}
+
+	for($i=0;$i<8;$i++) { &movq(&QWP($i*8,"esp"),@mm[$i]); }    # K=L
+
+for($i=0;$i<8;$i++) {
+	&shr	("eax",16);
+	&scale	("esi","ecx");
+	&movz	("ecx",&LB("eax"));
+	&scale	("edi","edx");
+	&movz	("edx",&HB("eax"));
+	&pxor	(@mm[0],&QWP(&row(0),$tbl,"esi",8));
+	&pxor	(@mm[1],&QWP(&row(1),$tbl,"edi",8));
+	&mov	("eax",&DWP(64+($i+1)*8,"esp"))		if ($i<7);
+	&scale	("esi","ecx");
+	&movz	("ecx",&LB("ebx"));
+	&scale	("edi","edx");
+	&movz	("edx",&HB("ebx"));
+	&pxor	(@mm[2],&QWP(&row(2),$tbl,"esi",8));
+	&pxor	(@mm[3],&QWP(&row(3),$tbl,"edi",8));
+	&shr	("ebx",16);
+	&scale	("esi","ecx");
+	&movz	("ecx",&LB("ebx"));
+	&scale	("edi","edx");
+	&movz	("edx",&HB("ebx"));
+	&pxor	(@mm[4],&QWP(&row(4),$tbl,"esi",8));
+	&pxor	(@mm[5],&QWP(&row(5),$tbl,"edi",8));
+	&mov	("ebx",&DWP(64+($i+1)*8+4,"esp"))	if ($i<7);
+	&scale	("esi","ecx");
+	&movz	("ecx",&LB("eax"));
+	&scale	("edi","edx");
+	&movz	("edx",&HB("eax"));
+	&pxor	(@mm[6],&QWP(&row(6),$tbl,"esi",8));
+	&pxor	(@mm[7],&QWP(&row(7),$tbl,"edi",8));
+    push(@mm,shift(@mm));
+}
+	&lea	("ebx",&DWP(128,"esp"));
+	&mov	("esi",&DWP(12,"ebx"));		# pull round counter
+	&add	("esi",1);
+	&cmp	("esi",10);
+	&je	(&label("roundsdone"));
+
+	&mov	(&DWP(12,"ebx"),"esi");		# update round counter
+	for($i=0;$i<8;$i++) { &movq(&QWP(64+$i*8,"esp"),@mm[$i]); } # S=L
+	&jmp	(&label("round"));
+
+&set_label("roundsdone",16);
+	&mov	("esi",&DWP(0,"ebx"));		# reload argument block
+	&mov	("edi",&DWP(4,"ebx"));
+	&mov	("eax",&DWP(8,"ebx"));
+
+	for($i=0;$i<8;$i++) { &pxor(@mm[$i],&QWP($i*8,"edi")); }    # L^=inp
+	for($i=0;$i<8;$i++) { &pxor(@mm[$i],&QWP($i*8,"esi")); }    # L^=H
+	for($i=0;$i<8;$i++) { &movq(&QWP($i*8,"esi"),@mm[$i]); }    # H=L
+
+	&lea	("edi",&DWP(64,"edi"));		# inp+=64
+	&sub	("eax",1);			# num--
+	&jz	(&label("alldone"));
+	&mov	(&DWP(4,"ebx"),"edi");		# update argument block
+	&mov	(&DWP(8,"ebx"),"eax");
+	&jmp	(&label("outerloop"));
+
+&set_label("alldone");
+	&emms	();
+	&mov	("esp",&DWP(16,"ebx"));		# restore saved stack pointer
+	&pop	("edi");
+	&pop	("esi");
+	&pop	("ebx");
+	&pop	("ebp");
+	&ret	();
+
+&align(64);
+&set_label("table");
+	&LL(0x18,0x18,0x60,0x18,0xc0,0x78,0x30,0xd8);
+	&LL(0x23,0x23,0x8c,0x23,0x05,0xaf,0x46,0x26);
+	&LL(0xc6,0xc6,0x3f,0xc6,0x7e,0xf9,0x91,0xb8);
+	&LL(0xe8,0xe8,0x87,0xe8,0x13,0x6f,0xcd,0xfb);
+	&LL(0x87,0x87,0x26,0x87,0x4c,0xa1,0x13,0xcb);
+	&LL(0xb8,0xb8,0xda,0xb8,0xa9,0x62,0x6d,0x11);
+	&LL(0x01,0x01,0x04,0x01,0x08,0x05,0x02,0x09);
+	&LL(0x4f,0x4f,0x21,0x4f,0x42,0x6e,0x9e,0x0d);
+	&LL(0x36,0x36,0xd8,0x36,0xad,0xee,0x6c,0x9b);
+	&LL(0xa6,0xa6,0xa2,0xa6,0x59,0x04,0x51,0xff);
+	&LL(0xd2,0xd2,0x6f,0xd2,0xde,0xbd,0xb9,0x0c);
+	&LL(0xf5,0xf5,0xf3,0xf5,0xfb,0x06,0xf7,0x0e);
+	&LL(0x79,0x79,0xf9,0x79,0xef,0x80,0xf2,0x96);
+	&LL(0x6f,0x6f,0xa1,0x6f,0x5f,0xce,0xde,0x30);
+	&LL(0x91,0x91,0x7e,0x91,0xfc,0xef,0x3f,0x6d);
+	&LL(0x52,0x52,0x55,0x52,0xaa,0x07,0xa4,0xf8);
+	&LL(0x60,0x60,0x9d,0x60,0x27,0xfd,0xc0,0x47);
+	&LL(0xbc,0xbc,0xca,0xbc,0x89,0x76,0x65,0x35);
+	&LL(0x9b,0x9b,0x56,0x9b,0xac,0xcd,0x2b,0x37);
+	&LL(0x8e,0x8e,0x02,0x8e,0x04,0x8c,0x01,0x8a);
+	&LL(0xa3,0xa3,0xb6,0xa3,0x71,0x15,0x5b,0xd2);
+	&LL(0x0c,0x0c,0x30,0x0c,0x60,0x3c,0x18,0x6c);
+	&LL(0x7b,0x7b,0xf1,0x7b,0xff,0x8a,0xf6,0x84);
+	&LL(0x35,0x35,0xd4,0x35,0xb5,0xe1,0x6a,0x80);
+	&LL(0x1d,0x1d,0x74,0x1d,0xe8,0x69,0x3a,0xf5);
+	&LL(0xe0,0xe0,0xa7,0xe0,0x53,0x47,0xdd,0xb3);
+	&LL(0xd7,0xd7,0x7b,0xd7,0xf6,0xac,0xb3,0x21);
+	&LL(0xc2,0xc2,0x2f,0xc2,0x5e,0xed,0x99,0x9c);
+	&LL(0x2e,0x2e,0xb8,0x2e,0x6d,0x96,0x5c,0x43);
+	&LL(0x4b,0x4b,0x31,0x4b,0x62,0x7a,0x96,0x29);
+	&LL(0xfe,0xfe,0xdf,0xfe,0xa3,0x21,0xe1,0x5d);
+	&LL(0x57,0x57,0x41,0x57,0x82,0x16,0xae,0xd5);
+	&LL(0x15,0x15,0x54,0x15,0xa8,0x41,0x2a,0xbd);
+	&LL(0x77,0x77,0xc1,0x77,0x9f,0xb6,0xee,0xe8);
+	&LL(0x37,0x37,0xdc,0x37,0xa5,0xeb,0x6e,0x92);
+	&LL(0xe5,0xe5,0xb3,0xe5,0x7b,0x56,0xd7,0x9e);
+	&LL(0x9f,0x9f,0x46,0x9f,0x8c,0xd9,0x23,0x13);
+	&LL(0xf0,0xf0,0xe7,0xf0,0xd3,0x17,0xfd,0x23);
+	&LL(0x4a,0x4a,0x35,0x4a,0x6a,0x7f,0x94,0x20);
+	&LL(0xda,0xda,0x4f,0xda,0x9e,0x95,0xa9,0x44);
+	&LL(0x58,0x58,0x7d,0x58,0xfa,0x25,0xb0,0xa2);
+	&LL(0xc9,0xc9,0x03,0xc9,0x06,0xca,0x8f,0xcf);
+	&LL(0x29,0x29,0xa4,0x29,0x55,0x8d,0x52,0x7c);
+	&LL(0x0a,0x0a,0x28,0x0a,0x50,0x22,0x14,0x5a);
+	&LL(0xb1,0xb1,0xfe,0xb1,0xe1,0x4f,0x7f,0x50);
+	&LL(0xa0,0xa0,0xba,0xa0,0x69,0x1a,0x5d,0xc9);
+	&LL(0x6b,0x6b,0xb1,0x6b,0x7f,0xda,0xd6,0x14);
+	&LL(0x85,0x85,0x2e,0x85,0x5c,0xab,0x17,0xd9);
+	&LL(0xbd,0xbd,0xce,0xbd,0x81,0x73,0x67,0x3c);
+	&LL(0x5d,0x5d,0x69,0x5d,0xd2,0x34,0xba,0x8f);
+	&LL(0x10,0x10,0x40,0x10,0x80,0x50,0x20,0x90);
+	&LL(0xf4,0xf4,0xf7,0xf4,0xf3,0x03,0xf5,0x07);
+	&LL(0xcb,0xcb,0x0b,0xcb,0x16,0xc0,0x8b,0xdd);
+	&LL(0x3e,0x3e,0xf8,0x3e,0xed,0xc6,0x7c,0xd3);
+	&LL(0x05,0x05,0x14,0x05,0x28,0x11,0x0a,0x2d);
+	&LL(0x67,0x67,0x81,0x67,0x1f,0xe6,0xce,0x78);
+	&LL(0xe4,0xe4,0xb7,0xe4,0x73,0x53,0xd5,0x97);
+	&LL(0x27,0x27,0x9c,0x27,0x25,0xbb,0x4e,0x02);
+	&LL(0x41,0x41,0x19,0x41,0x32,0x58,0x82,0x73);
+	&LL(0x8b,0x8b,0x16,0x8b,0x2c,0x9d,0x0b,0xa7);
+	&LL(0xa7,0xa7,0xa6,0xa7,0x51,0x01,0x53,0xf6);
+	&LL(0x7d,0x7d,0xe9,0x7d,0xcf,0x94,0xfa,0xb2);
+	&LL(0x95,0x95,0x6e,0x95,0xdc,0xfb,0x37,0x49);
+	&LL(0xd8,0xd8,0x47,0xd8,0x8e,0x9f,0xad,0x56);
+	&LL(0xfb,0xfb,0xcb,0xfb,0x8b,0x30,0xeb,0x70);
+	&LL(0xee,0xee,0x9f,0xee,0x23,0x71,0xc1,0xcd);
+	&LL(0x7c,0x7c,0xed,0x7c,0xc7,0x91,0xf8,0xbb);
+	&LL(0x66,0x66,0x85,0x66,0x17,0xe3,0xcc,0x71);
+	&LL(0xdd,0xdd,0x53,0xdd,0xa6,0x8e,0xa7,0x7b);
+	&LL(0x17,0x17,0x5c,0x17,0xb8,0x4b,0x2e,0xaf);
+	&LL(0x47,0x47,0x01,0x47,0x02,0x46,0x8e,0x45);
+	&LL(0x9e,0x9e,0x42,0x9e,0x84,0xdc,0x21,0x1a);
+	&LL(0xca,0xca,0x0f,0xca,0x1e,0xc5,0x89,0xd4);
+	&LL(0x2d,0x2d,0xb4,0x2d,0x75,0x99,0x5a,0x58);
+	&LL(0xbf,0xbf,0xc6,0xbf,0x91,0x79,0x63,0x2e);
+	&LL(0x07,0x07,0x1c,0x07,0x38,0x1b,0x0e,0x3f);
+	&LL(0xad,0xad,0x8e,0xad,0x01,0x23,0x47,0xac);
+	&LL(0x5a,0x5a,0x75,0x5a,0xea,0x2f,0xb4,0xb0);
+	&LL(0x83,0x83,0x36,0x83,0x6c,0xb5,0x1b,0xef);
+	&LL(0x33,0x33,0xcc,0x33,0x85,0xff,0x66,0xb6);
+	&LL(0x63,0x63,0x91,0x63,0x3f,0xf2,0xc6,0x5c);
+	&LL(0x02,0x02,0x08,0x02,0x10,0x0a,0x04,0x12);
+	&LL(0xaa,0xaa,0x92,0xaa,0x39,0x38,0x49,0x93);
+	&LL(0x71,0x71,0xd9,0x71,0xaf,0xa8,0xe2,0xde);
+	&LL(0xc8,0xc8,0x07,0xc8,0x0e,0xcf,0x8d,0xc6);
+	&LL(0x19,0x19,0x64,0x19,0xc8,0x7d,0x32,0xd1);
+	&LL(0x49,0x49,0x39,0x49,0x72,0x70,0x92,0x3b);
+	&LL(0xd9,0xd9,0x43,0xd9,0x86,0x9a,0xaf,0x5f);
+	&LL(0xf2,0xf2,0xef,0xf2,0xc3,0x1d,0xf9,0x31);
+	&LL(0xe3,0xe3,0xab,0xe3,0x4b,0x48,0xdb,0xa8);
+	&LL(0x5b,0x5b,0x71,0x5b,0xe2,0x2a,0xb6,0xb9);
+	&LL(0x88,0x88,0x1a,0x88,0x34,0x92,0x0d,0xbc);
+	&LL(0x9a,0x9a,0x52,0x9a,0xa4,0xc8,0x29,0x3e);
+	&LL(0x26,0x26,0x98,0x26,0x2d,0xbe,0x4c,0x0b);
+	&LL(0x32,0x32,0xc8,0x32,0x8d,0xfa,0x64,0xbf);
+	&LL(0xb0,0xb0,0xfa,0xb0,0xe9,0x4a,0x7d,0x59);
+	&LL(0xe9,0xe9,0x83,0xe9,0x1b,0x6a,0xcf,0xf2);
+	&LL(0x0f,0x0f,0x3c,0x0f,0x78,0x33,0x1e,0x77);
+	&LL(0xd5,0xd5,0x73,0xd5,0xe6,0xa6,0xb7,0x33);
+	&LL(0x80,0x80,0x3a,0x80,0x74,0xba,0x1d,0xf4);
+	&LL(0xbe,0xbe,0xc2,0xbe,0x99,0x7c,0x61,0x27);
+	&LL(0xcd,0xcd,0x13,0xcd,0x26,0xde,0x87,0xeb);
+	&LL(0x34,0x34,0xd0,0x34,0xbd,0xe4,0x68,0x89);
+	&LL(0x48,0x48,0x3d,0x48,0x7a,0x75,0x90,0x32);
+	&LL(0xff,0xff,0xdb,0xff,0xab,0x24,0xe3,0x54);
+	&LL(0x7a,0x7a,0xf5,0x7a,0xf7,0x8f,0xf4,0x8d);
+	&LL(0x90,0x90,0x7a,0x90,0xf4,0xea,0x3d,0x64);
+	&LL(0x5f,0x5f,0x61,0x5f,0xc2,0x3e,0xbe,0x9d);
+	&LL(0x20,0x20,0x80,0x20,0x1d,0xa0,0x40,0x3d);
+	&LL(0x68,0x68,0xbd,0x68,0x67,0xd5,0xd0,0x0f);
+	&LL(0x1a,0x1a,0x68,0x1a,0xd0,0x72,0x34,0xca);
+	&LL(0xae,0xae,0x82,0xae,0x19,0x2c,0x41,0xb7);
+	&LL(0xb4,0xb4,0xea,0xb4,0xc9,0x5e,0x75,0x7d);
+	&LL(0x54,0x54,0x4d,0x54,0x9a,0x19,0xa8,0xce);
+	&LL(0x93,0x93,0x76,0x93,0xec,0xe5,0x3b,0x7f);
+	&LL(0x22,0x22,0x88,0x22,0x0d,0xaa,0x44,0x2f);
+	&LL(0x64,0x64,0x8d,0x64,0x07,0xe9,0xc8,0x63);
+	&LL(0xf1,0xf1,0xe3,0xf1,0xdb,0x12,0xff,0x2a);
+	&LL(0x73,0x73,0xd1,0x73,0xbf,0xa2,0xe6,0xcc);
+	&LL(0x12,0x12,0x48,0x12,0x90,0x5a,0x24,0x82);
+	&LL(0x40,0x40,0x1d,0x40,0x3a,0x5d,0x80,0x7a);
+	&LL(0x08,0x08,0x20,0x08,0x40,0x28,0x10,0x48);
+	&LL(0xc3,0xc3,0x2b,0xc3,0x56,0xe8,0x9b,0x95);
+	&LL(0xec,0xec,0x97,0xec,0x33,0x7b,0xc5,0xdf);
+	&LL(0xdb,0xdb,0x4b,0xdb,0x96,0x90,0xab,0x4d);
+	&LL(0xa1,0xa1,0xbe,0xa1,0x61,0x1f,0x5f,0xc0);
+	&LL(0x8d,0x8d,0x0e,0x8d,0x1c,0x83,0x07,0x91);
+	&LL(0x3d,0x3d,0xf4,0x3d,0xf5,0xc9,0x7a,0xc8);
+	&LL(0x97,0x97,0x66,0x97,0xcc,0xf1,0x33,0x5b);
+	&LL(0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00);
+	&LL(0xcf,0xcf,0x1b,0xcf,0x36,0xd4,0x83,0xf9);
+	&LL(0x2b,0x2b,0xac,0x2b,0x45,0x87,0x56,0x6e);
+	&LL(0x76,0x76,0xc5,0x76,0x97,0xb3,0xec,0xe1);
+	&LL(0x82,0x82,0x32,0x82,0x64,0xb0,0x19,0xe6);
+	&LL(0xd6,0xd6,0x7f,0xd6,0xfe,0xa9,0xb1,0x28);
+	&LL(0x1b,0x1b,0x6c,0x1b,0xd8,0x77,0x36,0xc3);
+	&LL(0xb5,0xb5,0xee,0xb5,0xc1,0x5b,0x77,0x74);
+	&LL(0xaf,0xaf,0x86,0xaf,0x11,0x29,0x43,0xbe);
+	&LL(0x6a,0x6a,0xb5,0x6a,0x77,0xdf,0xd4,0x1d);
+	&LL(0x50,0x50,0x5d,0x50,0xba,0x0d,0xa0,0xea);
+	&LL(0x45,0x45,0x09,0x45,0x12,0x4c,0x8a,0x57);
+	&LL(0xf3,0xf3,0xeb,0xf3,0xcb,0x18,0xfb,0x38);
+	&LL(0x30,0x30,0xc0,0x30,0x9d,0xf0,0x60,0xad);
+	&LL(0xef,0xef,0x9b,0xef,0x2b,0x74,0xc3,0xc4);
+	&LL(0x3f,0x3f,0xfc,0x3f,0xe5,0xc3,0x7e,0xda);
+	&LL(0x55,0x55,0x49,0x55,0x92,0x1c,0xaa,0xc7);
+	&LL(0xa2,0xa2,0xb2,0xa2,0x79,0x10,0x59,0xdb);
+	&LL(0xea,0xea,0x8f,0xea,0x03,0x65,0xc9,0xe9);
+	&LL(0x65,0x65,0x89,0x65,0x0f,0xec,0xca,0x6a);
+	&LL(0xba,0xba,0xd2,0xba,0xb9,0x68,0x69,0x03);
+	&LL(0x2f,0x2f,0xbc,0x2f,0x65,0x93,0x5e,0x4a);
+	&LL(0xc0,0xc0,0x27,0xc0,0x4e,0xe7,0x9d,0x8e);
+	&LL(0xde,0xde,0x5f,0xde,0xbe,0x81,0xa1,0x60);
+	&LL(0x1c,0x1c,0x70,0x1c,0xe0,0x6c,0x38,0xfc);
+	&LL(0xfd,0xfd,0xd3,0xfd,0xbb,0x2e,0xe7,0x46);
+	&LL(0x4d,0x4d,0x29,0x4d,0x52,0x64,0x9a,0x1f);
+	&LL(0x92,0x92,0x72,0x92,0xe4,0xe0,0x39,0x76);
+	&LL(0x75,0x75,0xc9,0x75,0x8f,0xbc,0xea,0xfa);
+	&LL(0x06,0x06,0x18,0x06,0x30,0x1e,0x0c,0x36);
+	&LL(0x8a,0x8a,0x12,0x8a,0x24,0x98,0x09,0xae);
+	&LL(0xb2,0xb2,0xf2,0xb2,0xf9,0x40,0x79,0x4b);
+	&LL(0xe6,0xe6,0xbf,0xe6,0x63,0x59,0xd1,0x85);
+	&LL(0x0e,0x0e,0x38,0x0e,0x70,0x36,0x1c,0x7e);
+	&LL(0x1f,0x1f,0x7c,0x1f,0xf8,0x63,0x3e,0xe7);
+	&LL(0x62,0x62,0x95,0x62,0x37,0xf7,0xc4,0x55);
+	&LL(0xd4,0xd4,0x77,0xd4,0xee,0xa3,0xb5,0x3a);
+	&LL(0xa8,0xa8,0x9a,0xa8,0x29,0x32,0x4d,0x81);
+	&LL(0x96,0x96,0x62,0x96,0xc4,0xf4,0x31,0x52);
+	&LL(0xf9,0xf9,0xc3,0xf9,0x9b,0x3a,0xef,0x62);
+	&LL(0xc5,0xc5,0x33,0xc5,0x66,0xf6,0x97,0xa3);
+	&LL(0x25,0x25,0x94,0x25,0x35,0xb1,0x4a,0x10);
+	&LL(0x59,0x59,0x79,0x59,0xf2,0x20,0xb2,0xab);
+	&LL(0x84,0x84,0x2a,0x84,0x54,0xae,0x15,0xd0);
+	&LL(0x72,0x72,0xd5,0x72,0xb7,0xa7,0xe4,0xc5);
+	&LL(0x39,0x39,0xe4,0x39,0xd5,0xdd,0x72,0xec);
+	&LL(0x4c,0x4c,0x2d,0x4c,0x5a,0x61,0x98,0x16);
+	&LL(0x5e,0x5e,0x65,0x5e,0xca,0x3b,0xbc,0x94);
+	&LL(0x78,0x78,0xfd,0x78,0xe7,0x85,0xf0,0x9f);
+	&LL(0x38,0x38,0xe0,0x38,0xdd,0xd8,0x70,0xe5);
+	&LL(0x8c,0x8c,0x0a,0x8c,0x14,0x86,0x05,0x98);
+	&LL(0xd1,0xd1,0x63,0xd1,0xc6,0xb2,0xbf,0x17);
+	&LL(0xa5,0xa5,0xae,0xa5,0x41,0x0b,0x57,0xe4);
+	&LL(0xe2,0xe2,0xaf,0xe2,0x43,0x4d,0xd9,0xa1);
+	&LL(0x61,0x61,0x99,0x61,0x2f,0xf8,0xc2,0x4e);
+	&LL(0xb3,0xb3,0xf6,0xb3,0xf1,0x45,0x7b,0x42);
+	&LL(0x21,0x21,0x84,0x21,0x15,0xa5,0x42,0x34);
+	&LL(0x9c,0x9c,0x4a,0x9c,0x94,0xd6,0x25,0x08);
+	&LL(0x1e,0x1e,0x78,0x1e,0xf0,0x66,0x3c,0xee);
+	&LL(0x43,0x43,0x11,0x43,0x22,0x52,0x86,0x61);
+	&LL(0xc7,0xc7,0x3b,0xc7,0x76,0xfc,0x93,0xb1);
+	&LL(0xfc,0xfc,0xd7,0xfc,0xb3,0x2b,0xe5,0x4f);
+	&LL(0x04,0x04,0x10,0x04,0x20,0x14,0x08,0x24);
+	&LL(0x51,0x51,0x59,0x51,0xb2,0x08,0xa2,0xe3);
+	&LL(0x99,0x99,0x5e,0x99,0xbc,0xc7,0x2f,0x25);
+	&LL(0x6d,0x6d,0xa9,0x6d,0x4f,0xc4,0xda,0x22);
+	&LL(0x0d,0x0d,0x34,0x0d,0x68,0x39,0x1a,0x65);
+	&LL(0xfa,0xfa,0xcf,0xfa,0x83,0x35,0xe9,0x79);
+	&LL(0xdf,0xdf,0x5b,0xdf,0xb6,0x84,0xa3,0x69);
+	&LL(0x7e,0x7e,0xe5,0x7e,0xd7,0x9b,0xfc,0xa9);
+	&LL(0x24,0x24,0x90,0x24,0x3d,0xb4,0x48,0x19);
+	&LL(0x3b,0x3b,0xec,0x3b,0xc5,0xd7,0x76,0xfe);
+	&LL(0xab,0xab,0x96,0xab,0x31,0x3d,0x4b,0x9a);
+	&LL(0xce,0xce,0x1f,0xce,0x3e,0xd1,0x81,0xf0);
+	&LL(0x11,0x11,0x44,0x11,0x88,0x55,0x22,0x99);
+	&LL(0x8f,0x8f,0x06,0x8f,0x0c,0x89,0x03,0x83);
+	&LL(0x4e,0x4e,0x25,0x4e,0x4a,0x6b,0x9c,0x04);
+	&LL(0xb7,0xb7,0xe6,0xb7,0xd1,0x51,0x73,0x66);
+	&LL(0xeb,0xeb,0x8b,0xeb,0x0b,0x60,0xcb,0xe0);
+	&LL(0x3c,0x3c,0xf0,0x3c,0xfd,0xcc,0x78,0xc1);
+	&LL(0x81,0x81,0x3e,0x81,0x7c,0xbf,0x1f,0xfd);
+	&LL(0x94,0x94,0x6a,0x94,0xd4,0xfe,0x35,0x40);
+	&LL(0xf7,0xf7,0xfb,0xf7,0xeb,0x0c,0xf3,0x1c);
+	&LL(0xb9,0xb9,0xde,0xb9,0xa1,0x67,0x6f,0x18);
+	&LL(0x13,0x13,0x4c,0x13,0x98,0x5f,0x26,0x8b);
+	&LL(0x2c,0x2c,0xb0,0x2c,0x7d,0x9c,0x58,0x51);
+	&LL(0xd3,0xd3,0x6b,0xd3,0xd6,0xb8,0xbb,0x05);
+	&LL(0xe7,0xe7,0xbb,0xe7,0x6b,0x5c,0xd3,0x8c);
+	&LL(0x6e,0x6e,0xa5,0x6e,0x57,0xcb,0xdc,0x39);
+	&LL(0xc4,0xc4,0x37,0xc4,0x6e,0xf3,0x95,0xaa);
+	&LL(0x03,0x03,0x0c,0x03,0x18,0x0f,0x06,0x1b);
+	&LL(0x56,0x56,0x45,0x56,0x8a,0x13,0xac,0xdc);
+	&LL(0x44,0x44,0x0d,0x44,0x1a,0x49,0x88,0x5e);
+	&LL(0x7f,0x7f,0xe1,0x7f,0xdf,0x9e,0xfe,0xa0);
+	&LL(0xa9,0xa9,0x9e,0xa9,0x21,0x37,0x4f,0x88);
+	&LL(0x2a,0x2a,0xa8,0x2a,0x4d,0x82,0x54,0x67);
+	&LL(0xbb,0xbb,0xd6,0xbb,0xb1,0x6d,0x6b,0x0a);
+	&LL(0xc1,0xc1,0x23,0xc1,0x46,0xe2,0x9f,0x87);
+	&LL(0x53,0x53,0x51,0x53,0xa2,0x02,0xa6,0xf1);
+	&LL(0xdc,0xdc,0x57,0xdc,0xae,0x8b,0xa5,0x72);
+	&LL(0x0b,0x0b,0x2c,0x0b,0x58,0x27,0x16,0x53);
+	&LL(0x9d,0x9d,0x4e,0x9d,0x9c,0xd3,0x27,0x01);
+	&LL(0x6c,0x6c,0xad,0x6c,0x47,0xc1,0xd8,0x2b);
+	&LL(0x31,0x31,0xc4,0x31,0x95,0xf5,0x62,0xa4);
+	&LL(0x74,0x74,0xcd,0x74,0x87,0xb9,0xe8,0xf3);
+	&LL(0xf6,0xf6,0xff,0xf6,0xe3,0x09,0xf1,0x15);
+	&LL(0x46,0x46,0x05,0x46,0x0a,0x43,0x8c,0x4c);
+	&LL(0xac,0xac,0x8a,0xac,0x09,0x26,0x45,0xa5);
+	&LL(0x89,0x89,0x1e,0x89,0x3c,0x97,0x0f,0xb5);
+	&LL(0x14,0x14,0x50,0x14,0xa0,0x44,0x28,0xb4);
+	&LL(0xe1,0xe1,0xa3,0xe1,0x5b,0x42,0xdf,0xba);
+	&LL(0x16,0x16,0x58,0x16,0xb0,0x4e,0x2c,0xa6);
+	&LL(0x3a,0x3a,0xe8,0x3a,0xcd,0xd2,0x74,0xf7);
+	&LL(0x69,0x69,0xb9,0x69,0x6f,0xd0,0xd2,0x06);
+	&LL(0x09,0x09,0x24,0x09,0x48,0x2d,0x12,0x41);
+	&LL(0x70,0x70,0xdd,0x70,0xa7,0xad,0xe0,0xd7);
+	&LL(0xb6,0xb6,0xe2,0xb6,0xd9,0x54,0x71,0x6f);
+	&LL(0xd0,0xd0,0x67,0xd0,0xce,0xb7,0xbd,0x1e);
+	&LL(0xed,0xed,0x93,0xed,0x3b,0x7e,0xc7,0xd6);
+	&LL(0xcc,0xcc,0x17,0xcc,0x2e,0xdb,0x85,0xe2);
+	&LL(0x42,0x42,0x15,0x42,0x2a,0x57,0x84,0x68);
+	&LL(0x98,0x98,0x5a,0x98,0xb4,0xc2,0x2d,0x2c);
+	&LL(0xa4,0xa4,0xaa,0xa4,0x49,0x0e,0x55,0xed);
+	&LL(0x28,0x28,0xa0,0x28,0x5d,0x88,0x50,0x75);
+	&LL(0x5c,0x5c,0x6d,0x5c,0xda,0x31,0xb8,0x86);
+	&LL(0xf8,0xf8,0xc7,0xf8,0x93,0x3f,0xed,0x6b);
+	&LL(0x86,0x86,0x22,0x86,0x44,0xa4,0x11,0xc2);
+
+	&L(0x18,0x23,0xc6,0xe8,0x87,0xb8,0x01,0x4f);	# rc[ROUNDS]
+	&L(0x36,0xa6,0xd2,0xf5,0x79,0x6f,0x91,0x52);
+	&L(0x60,0xbc,0x9b,0x8e,0xa3,0x0c,0x7b,0x35);
+	&L(0x1d,0xe0,0xd7,0xc2,0x2e,0x4b,0xfe,0x57);
+	&L(0x15,0x77,0x37,0xe5,0x9f,0xf0,0x4a,0xda);
+	&L(0x58,0xc9,0x29,0x0a,0xb1,0xa0,0x6b,0x85);
+	&L(0xbd,0x5d,0x10,0xf4,0xcb,0x3e,0x05,0x67);
+	&L(0xe4,0x27,0x41,0x8b,0xa7,0x7d,0x95,0xd8);
+	&L(0xfb,0xee,0x7c,0x66,0xdd,0x17,0x47,0x9e);
+	&L(0xca,0x2d,0xbf,0x07,0xad,0x5a,0x83,0x33);
+
+&function_end_B("whirlpool_block_mmx");
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/asm/wp-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/asm/wp-x86_64.pl
new file mode 100644
index 000000000..fe23d8cad
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/asm/wp-x86_64.pl
@@ -0,0 +1,617 @@
+#! /usr/bin/env perl
+# Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. Rights for redistribution and usage in source and binary
+# forms are granted according to the OpenSSL license.
+# ====================================================================
+#
+# whirlpool_block for x86_64.
+#
+# 2500 cycles per 64-byte input block on AMD64, which is *identical*
+# to 32-bit MMX version executed on same CPU. So why did I bother?
+# Well, it's faster than gcc 3.3.2 generated code by over 50%, and
+# over 80% faster than PathScale 1.4, an "ambitious" commercial
+# compiler. Furthermore it surpasses gcc 3.4.3 by 170% and Sun Studio
+# 10 - by 360%[!]... What is it with x86_64 compilers? It's not the
+# first example when they fail to generate more optimal code, when
+# I believe they had *all* chances to...
+#
+# Note that register and stack frame layout are virtually identical
+# to 32-bit MMX version, except that %r8-15 are used instead of
+# %mm0-8. You can even notice that K[i] and S[i] are loaded to
+# %eax:%ebx as pair of 32-bit values and not as single 64-bit one.
+# This is done in order to avoid 64-bit shift penalties on Intel
+# EM64T core. Speaking of which! I bet it's possible to improve
+# Opteron performance by compressing the table to 2KB and replacing
+# unaligned references with complementary rotations [which would
+# incidentally replace lea instructions], but it would definitely
+# just "kill" EM64T, because it has only 1 shifter/rotator [against
+# 3 on Opteron] and which is *unacceptably* slow with 64-bit
+# operand.
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; my $dir=$1; my $xlate;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+sub L() { $code.=".byte	".join(',',@_)."\n"; }
+sub LL(){ $code.=".byte	".join(',',@_).",".join(',',@_)."\n"; }
+
+@mm=("%r8","%r9","%r10","%r11","%r12","%r13","%r14","%r15");
+
+$func="whirlpool_block";
+$table=".Ltable";
+
+$code=<<___;
+.text
+
+.globl	$func
+.type	$func,\@function,3
+.align	16
+$func:
+.cfi_startproc
+	mov	%rsp,%rax
+.cfi_def_cfa_register	%rax
+	push	%rbx
+.cfi_push	%rbx
+	push	%rbp
+.cfi_push	%rbp
+	push	%r12
+.cfi_push	%r12
+	push	%r13
+.cfi_push	%r13
+	push	%r14
+.cfi_push	%r14
+	push	%r15
+.cfi_push	%r15
+
+	sub	\$128+40,%rsp
+	and	\$-64,%rsp
+
+	lea	128(%rsp),%r10
+	mov	%rdi,0(%r10)		# save parameter block
+	mov	%rsi,8(%r10)
+	mov	%rdx,16(%r10)
+	mov	%rax,32(%r10)		# saved stack pointer
+.cfi_cfa_expression	%rsp+`128+32`,deref,+8
+.Lprologue:
+
+	mov	%r10,%rbx
+	lea	$table(%rip),%rbp
+
+	xor	%rcx,%rcx
+	xor	%rdx,%rdx
+___
+for($i=0;$i<8;$i++) { $code.="mov $i*8(%rdi),@mm[$i]\n"; }	# L=H
+$code.=".Louterloop:\n";
+for($i=0;$i<8;$i++) { $code.="mov @mm[$i],$i*8(%rsp)\n"; }	# K=L
+for($i=0;$i<8;$i++) { $code.="xor $i*8(%rsi),@mm[$i]\n"; }	# L^=inp
+for($i=0;$i<8;$i++) { $code.="mov @mm[$i],64+$i*8(%rsp)\n"; }	# S=L
+$code.=<<___;
+	xor	%rsi,%rsi
+	mov	%rsi,24(%rbx)		# zero round counter
+	jmp	.Lround
+.align	16
+.Lround:
+	mov	4096(%rbp,%rsi,8),@mm[0]	# rc[r]
+	mov	0(%rsp),%eax
+	mov	4(%rsp),%ebx
+	movz	%al,%ecx
+	movz	%ah,%edx
+___
+for($i=0;$i<8;$i++) {
+    my $func = ($i==0)? "mov" : "xor";
+    $code.=<<___;
+	shr	\$16,%eax
+	lea	(%rcx,%rcx),%rsi
+	movz	%al,%ecx
+	lea	(%rdx,%rdx),%rdi
+	movz	%ah,%edx
+	xor	0(%rbp,%rsi,8),@mm[0]
+	$func	7(%rbp,%rdi,8),@mm[1]
+	mov	$i*8+8(%rsp),%eax		# ($i+1)*8
+	lea	(%rcx,%rcx),%rsi
+	movz	%bl,%ecx
+	lea	(%rdx,%rdx),%rdi
+	movz	%bh,%edx
+	$func	6(%rbp,%rsi,8),@mm[2]
+	$func	5(%rbp,%rdi,8),@mm[3]
+	shr	\$16,%ebx
+	lea	(%rcx,%rcx),%rsi
+	movz	%bl,%ecx
+	lea	(%rdx,%rdx),%rdi
+	movz	%bh,%edx
+	$func	4(%rbp,%rsi,8),@mm[4]
+	$func	3(%rbp,%rdi,8),@mm[5]
+	mov	$i*8+8+4(%rsp),%ebx		# ($i+1)*8+4
+	lea	(%rcx,%rcx),%rsi
+	movz	%al,%ecx
+	lea	(%rdx,%rdx),%rdi
+	movz	%ah,%edx
+	$func	2(%rbp,%rsi,8),@mm[6]
+	$func	1(%rbp,%rdi,8),@mm[7]
+___
+    push(@mm,shift(@mm));
+}
+for($i=0;$i<8;$i++) { $code.="mov @mm[$i],$i*8(%rsp)\n"; }	# K=L
+for($i=0;$i<8;$i++) {
+    $code.=<<___;
+	shr	\$16,%eax
+	lea	(%rcx,%rcx),%rsi
+	movz	%al,%ecx
+	lea	(%rdx,%rdx),%rdi
+	movz	%ah,%edx
+	xor	0(%rbp,%rsi,8),@mm[0]
+	xor	7(%rbp,%rdi,8),@mm[1]
+	`"mov	64+$i*8+8(%rsp),%eax"	if($i<7);`	# 64+($i+1)*8
+	lea	(%rcx,%rcx),%rsi
+	movz	%bl,%ecx
+	lea	(%rdx,%rdx),%rdi
+	movz	%bh,%edx
+	xor	6(%rbp,%rsi,8),@mm[2]
+	xor	5(%rbp,%rdi,8),@mm[3]
+	shr	\$16,%ebx
+	lea	(%rcx,%rcx),%rsi
+	movz	%bl,%ecx
+	lea	(%rdx,%rdx),%rdi
+	movz	%bh,%edx
+	xor	4(%rbp,%rsi,8),@mm[4]
+	xor	3(%rbp,%rdi,8),@mm[5]
+	`"mov	64+$i*8+8+4(%rsp),%ebx"	if($i<7);`	# 64+($i+1)*8+4
+	lea	(%rcx,%rcx),%rsi
+	movz	%al,%ecx
+	lea	(%rdx,%rdx),%rdi
+	movz	%ah,%edx
+	xor	2(%rbp,%rsi,8),@mm[6]
+	xor	1(%rbp,%rdi,8),@mm[7]
+___
+    push(@mm,shift(@mm));
+}
+$code.=<<___;
+	lea	128(%rsp),%rbx
+	mov	24(%rbx),%rsi		# pull round counter
+	add	\$1,%rsi
+	cmp	\$10,%rsi
+	je	.Lroundsdone
+
+	mov	%rsi,24(%rbx)		# update round counter
+___
+for($i=0;$i<8;$i++) { $code.="mov @mm[$i],64+$i*8(%rsp)\n"; }	# S=L
+$code.=<<___;
+	jmp	.Lround
+.align	16
+.Lroundsdone:
+	mov	0(%rbx),%rdi		# reload argument block
+	mov	8(%rbx),%rsi
+	mov	16(%rbx),%rax
+___
+for($i=0;$i<8;$i++) { $code.="xor $i*8(%rsi),@mm[$i]\n"; }	# L^=inp
+for($i=0;$i<8;$i++) { $code.="xor $i*8(%rdi),@mm[$i]\n"; }	# L^=H
+for($i=0;$i<8;$i++) { $code.="mov @mm[$i],$i*8(%rdi)\n"; }	# H=L
+$code.=<<___;
+	lea	64(%rsi),%rsi		# inp+=64
+	sub	\$1,%rax		# num--
+	jz	.Lalldone
+	mov	%rsi,8(%rbx)		# update parameter block
+	mov	%rax,16(%rbx)
+	jmp	.Louterloop
+.Lalldone:
+	mov	32(%rbx),%rsi		# restore saved pointer
+.cfi_def_cfa	%rsi,8
+	mov	-48(%rsi),%r15
+.cfi_restore	%r15
+	mov	-40(%rsi),%r14
+.cfi_restore	%r14
+	mov	-32(%rsi),%r13
+.cfi_restore	%r13
+	mov	-24(%rsi),%r12
+.cfi_restore	%r12
+	mov	-16(%rsi),%rbp
+.cfi_restore	%rbp
+	mov	-8(%rsi),%rbx
+.cfi_restore	%rbx
+	lea	(%rsi),%rsp
+.cfi_def_cfa_register	%rsp
+.Lepilogue:
+	ret
+.cfi_endproc
+.size	$func,.-$func
+
+.align	64
+.type	$table,\@object
+$table:
+___
+	&LL(0x18,0x18,0x60,0x18,0xc0,0x78,0x30,0xd8);
+	&LL(0x23,0x23,0x8c,0x23,0x05,0xaf,0x46,0x26);
+	&LL(0xc6,0xc6,0x3f,0xc6,0x7e,0xf9,0x91,0xb8);
+	&LL(0xe8,0xe8,0x87,0xe8,0x13,0x6f,0xcd,0xfb);
+	&LL(0x87,0x87,0x26,0x87,0x4c,0xa1,0x13,0xcb);
+	&LL(0xb8,0xb8,0xda,0xb8,0xa9,0x62,0x6d,0x11);
+	&LL(0x01,0x01,0x04,0x01,0x08,0x05,0x02,0x09);
+	&LL(0x4f,0x4f,0x21,0x4f,0x42,0x6e,0x9e,0x0d);
+	&LL(0x36,0x36,0xd8,0x36,0xad,0xee,0x6c,0x9b);
+	&LL(0xa6,0xa6,0xa2,0xa6,0x59,0x04,0x51,0xff);
+	&LL(0xd2,0xd2,0x6f,0xd2,0xde,0xbd,0xb9,0x0c);
+	&LL(0xf5,0xf5,0xf3,0xf5,0xfb,0x06,0xf7,0x0e);
+	&LL(0x79,0x79,0xf9,0x79,0xef,0x80,0xf2,0x96);
+	&LL(0x6f,0x6f,0xa1,0x6f,0x5f,0xce,0xde,0x30);
+	&LL(0x91,0x91,0x7e,0x91,0xfc,0xef,0x3f,0x6d);
+	&LL(0x52,0x52,0x55,0x52,0xaa,0x07,0xa4,0xf8);
+	&LL(0x60,0x60,0x9d,0x60,0x27,0xfd,0xc0,0x47);
+	&LL(0xbc,0xbc,0xca,0xbc,0x89,0x76,0x65,0x35);
+	&LL(0x9b,0x9b,0x56,0x9b,0xac,0xcd,0x2b,0x37);
+	&LL(0x8e,0x8e,0x02,0x8e,0x04,0x8c,0x01,0x8a);
+	&LL(0xa3,0xa3,0xb6,0xa3,0x71,0x15,0x5b,0xd2);
+	&LL(0x0c,0x0c,0x30,0x0c,0x60,0x3c,0x18,0x6c);
+	&LL(0x7b,0x7b,0xf1,0x7b,0xff,0x8a,0xf6,0x84);
+	&LL(0x35,0x35,0xd4,0x35,0xb5,0xe1,0x6a,0x80);
+	&LL(0x1d,0x1d,0x74,0x1d,0xe8,0x69,0x3a,0xf5);
+	&LL(0xe0,0xe0,0xa7,0xe0,0x53,0x47,0xdd,0xb3);
+	&LL(0xd7,0xd7,0x7b,0xd7,0xf6,0xac,0xb3,0x21);
+	&LL(0xc2,0xc2,0x2f,0xc2,0x5e,0xed,0x99,0x9c);
+	&LL(0x2e,0x2e,0xb8,0x2e,0x6d,0x96,0x5c,0x43);
+	&LL(0x4b,0x4b,0x31,0x4b,0x62,0x7a,0x96,0x29);
+	&LL(0xfe,0xfe,0xdf,0xfe,0xa3,0x21,0xe1,0x5d);
+	&LL(0x57,0x57,0x41,0x57,0x82,0x16,0xae,0xd5);
+	&LL(0x15,0x15,0x54,0x15,0xa8,0x41,0x2a,0xbd);
+	&LL(0x77,0x77,0xc1,0x77,0x9f,0xb6,0xee,0xe8);
+	&LL(0x37,0x37,0xdc,0x37,0xa5,0xeb,0x6e,0x92);
+	&LL(0xe5,0xe5,0xb3,0xe5,0x7b,0x56,0xd7,0x9e);
+	&LL(0x9f,0x9f,0x46,0x9f,0x8c,0xd9,0x23,0x13);
+	&LL(0xf0,0xf0,0xe7,0xf0,0xd3,0x17,0xfd,0x23);
+	&LL(0x4a,0x4a,0x35,0x4a,0x6a,0x7f,0x94,0x20);
+	&LL(0xda,0xda,0x4f,0xda,0x9e,0x95,0xa9,0x44);
+	&LL(0x58,0x58,0x7d,0x58,0xfa,0x25,0xb0,0xa2);
+	&LL(0xc9,0xc9,0x03,0xc9,0x06,0xca,0x8f,0xcf);
+	&LL(0x29,0x29,0xa4,0x29,0x55,0x8d,0x52,0x7c);
+	&LL(0x0a,0x0a,0x28,0x0a,0x50,0x22,0x14,0x5a);
+	&LL(0xb1,0xb1,0xfe,0xb1,0xe1,0x4f,0x7f,0x50);
+	&LL(0xa0,0xa0,0xba,0xa0,0x69,0x1a,0x5d,0xc9);
+	&LL(0x6b,0x6b,0xb1,0x6b,0x7f,0xda,0xd6,0x14);
+	&LL(0x85,0x85,0x2e,0x85,0x5c,0xab,0x17,0xd9);
+	&LL(0xbd,0xbd,0xce,0xbd,0x81,0x73,0x67,0x3c);
+	&LL(0x5d,0x5d,0x69,0x5d,0xd2,0x34,0xba,0x8f);
+	&LL(0x10,0x10,0x40,0x10,0x80,0x50,0x20,0x90);
+	&LL(0xf4,0xf4,0xf7,0xf4,0xf3,0x03,0xf5,0x07);
+	&LL(0xcb,0xcb,0x0b,0xcb,0x16,0xc0,0x8b,0xdd);
+	&LL(0x3e,0x3e,0xf8,0x3e,0xed,0xc6,0x7c,0xd3);
+	&LL(0x05,0x05,0x14,0x05,0x28,0x11,0x0a,0x2d);
+	&LL(0x67,0x67,0x81,0x67,0x1f,0xe6,0xce,0x78);
+	&LL(0xe4,0xe4,0xb7,0xe4,0x73,0x53,0xd5,0x97);
+	&LL(0x27,0x27,0x9c,0x27,0x25,0xbb,0x4e,0x02);
+	&LL(0x41,0x41,0x19,0x41,0x32,0x58,0x82,0x73);
+	&LL(0x8b,0x8b,0x16,0x8b,0x2c,0x9d,0x0b,0xa7);
+	&LL(0xa7,0xa7,0xa6,0xa7,0x51,0x01,0x53,0xf6);
+	&LL(0x7d,0x7d,0xe9,0x7d,0xcf,0x94,0xfa,0xb2);
+	&LL(0x95,0x95,0x6e,0x95,0xdc,0xfb,0x37,0x49);
+	&LL(0xd8,0xd8,0x47,0xd8,0x8e,0x9f,0xad,0x56);
+	&LL(0xfb,0xfb,0xcb,0xfb,0x8b,0x30,0xeb,0x70);
+	&LL(0xee,0xee,0x9f,0xee,0x23,0x71,0xc1,0xcd);
+	&LL(0x7c,0x7c,0xed,0x7c,0xc7,0x91,0xf8,0xbb);
+	&LL(0x66,0x66,0x85,0x66,0x17,0xe3,0xcc,0x71);
+	&LL(0xdd,0xdd,0x53,0xdd,0xa6,0x8e,0xa7,0x7b);
+	&LL(0x17,0x17,0x5c,0x17,0xb8,0x4b,0x2e,0xaf);
+	&LL(0x47,0x47,0x01,0x47,0x02,0x46,0x8e,0x45);
+	&LL(0x9e,0x9e,0x42,0x9e,0x84,0xdc,0x21,0x1a);
+	&LL(0xca,0xca,0x0f,0xca,0x1e,0xc5,0x89,0xd4);
+	&LL(0x2d,0x2d,0xb4,0x2d,0x75,0x99,0x5a,0x58);
+	&LL(0xbf,0xbf,0xc6,0xbf,0x91,0x79,0x63,0x2e);
+	&LL(0x07,0x07,0x1c,0x07,0x38,0x1b,0x0e,0x3f);
+	&LL(0xad,0xad,0x8e,0xad,0x01,0x23,0x47,0xac);
+	&LL(0x5a,0x5a,0x75,0x5a,0xea,0x2f,0xb4,0xb0);
+	&LL(0x83,0x83,0x36,0x83,0x6c,0xb5,0x1b,0xef);
+	&LL(0x33,0x33,0xcc,0x33,0x85,0xff,0x66,0xb6);
+	&LL(0x63,0x63,0x91,0x63,0x3f,0xf2,0xc6,0x5c);
+	&LL(0x02,0x02,0x08,0x02,0x10,0x0a,0x04,0x12);
+	&LL(0xaa,0xaa,0x92,0xaa,0x39,0x38,0x49,0x93);
+	&LL(0x71,0x71,0xd9,0x71,0xaf,0xa8,0xe2,0xde);
+	&LL(0xc8,0xc8,0x07,0xc8,0x0e,0xcf,0x8d,0xc6);
+	&LL(0x19,0x19,0x64,0x19,0xc8,0x7d,0x32,0xd1);
+	&LL(0x49,0x49,0x39,0x49,0x72,0x70,0x92,0x3b);
+	&LL(0xd9,0xd9,0x43,0xd9,0x86,0x9a,0xaf,0x5f);
+	&LL(0xf2,0xf2,0xef,0xf2,0xc3,0x1d,0xf9,0x31);
+	&LL(0xe3,0xe3,0xab,0xe3,0x4b,0x48,0xdb,0xa8);
+	&LL(0x5b,0x5b,0x71,0x5b,0xe2,0x2a,0xb6,0xb9);
+	&LL(0x88,0x88,0x1a,0x88,0x34,0x92,0x0d,0xbc);
+	&LL(0x9a,0x9a,0x52,0x9a,0xa4,0xc8,0x29,0x3e);
+	&LL(0x26,0x26,0x98,0x26,0x2d,0xbe,0x4c,0x0b);
+	&LL(0x32,0x32,0xc8,0x32,0x8d,0xfa,0x64,0xbf);
+	&LL(0xb0,0xb0,0xfa,0xb0,0xe9,0x4a,0x7d,0x59);
+	&LL(0xe9,0xe9,0x83,0xe9,0x1b,0x6a,0xcf,0xf2);
+	&LL(0x0f,0x0f,0x3c,0x0f,0x78,0x33,0x1e,0x77);
+	&LL(0xd5,0xd5,0x73,0xd5,0xe6,0xa6,0xb7,0x33);
+	&LL(0x80,0x80,0x3a,0x80,0x74,0xba,0x1d,0xf4);
+	&LL(0xbe,0xbe,0xc2,0xbe,0x99,0x7c,0x61,0x27);
+	&LL(0xcd,0xcd,0x13,0xcd,0x26,0xde,0x87,0xeb);
+	&LL(0x34,0x34,0xd0,0x34,0xbd,0xe4,0x68,0x89);
+	&LL(0x48,0x48,0x3d,0x48,0x7a,0x75,0x90,0x32);
+	&LL(0xff,0xff,0xdb,0xff,0xab,0x24,0xe3,0x54);
+	&LL(0x7a,0x7a,0xf5,0x7a,0xf7,0x8f,0xf4,0x8d);
+	&LL(0x90,0x90,0x7a,0x90,0xf4,0xea,0x3d,0x64);
+	&LL(0x5f,0x5f,0x61,0x5f,0xc2,0x3e,0xbe,0x9d);
+	&LL(0x20,0x20,0x80,0x20,0x1d,0xa0,0x40,0x3d);
+	&LL(0x68,0x68,0xbd,0x68,0x67,0xd5,0xd0,0x0f);
+	&LL(0x1a,0x1a,0x68,0x1a,0xd0,0x72,0x34,0xca);
+	&LL(0xae,0xae,0x82,0xae,0x19,0x2c,0x41,0xb7);
+	&LL(0xb4,0xb4,0xea,0xb4,0xc9,0x5e,0x75,0x7d);
+	&LL(0x54,0x54,0x4d,0x54,0x9a,0x19,0xa8,0xce);
+	&LL(0x93,0x93,0x76,0x93,0xec,0xe5,0x3b,0x7f);
+	&LL(0x22,0x22,0x88,0x22,0x0d,0xaa,0x44,0x2f);
+	&LL(0x64,0x64,0x8d,0x64,0x07,0xe9,0xc8,0x63);
+	&LL(0xf1,0xf1,0xe3,0xf1,0xdb,0x12,0xff,0x2a);
+	&LL(0x73,0x73,0xd1,0x73,0xbf,0xa2,0xe6,0xcc);
+	&LL(0x12,0x12,0x48,0x12,0x90,0x5a,0x24,0x82);
+	&LL(0x40,0x40,0x1d,0x40,0x3a,0x5d,0x80,0x7a);
+	&LL(0x08,0x08,0x20,0x08,0x40,0x28,0x10,0x48);
+	&LL(0xc3,0xc3,0x2b,0xc3,0x56,0xe8,0x9b,0x95);
+	&LL(0xec,0xec,0x97,0xec,0x33,0x7b,0xc5,0xdf);
+	&LL(0xdb,0xdb,0x4b,0xdb,0x96,0x90,0xab,0x4d);
+	&LL(0xa1,0xa1,0xbe,0xa1,0x61,0x1f,0x5f,0xc0);
+	&LL(0x8d,0x8d,0x0e,0x8d,0x1c,0x83,0x07,0x91);
+	&LL(0x3d,0x3d,0xf4,0x3d,0xf5,0xc9,0x7a,0xc8);
+	&LL(0x97,0x97,0x66,0x97,0xcc,0xf1,0x33,0x5b);
+	&LL(0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00);
+	&LL(0xcf,0xcf,0x1b,0xcf,0x36,0xd4,0x83,0xf9);
+	&LL(0x2b,0x2b,0xac,0x2b,0x45,0x87,0x56,0x6e);
+	&LL(0x76,0x76,0xc5,0x76,0x97,0xb3,0xec,0xe1);
+	&LL(0x82,0x82,0x32,0x82,0x64,0xb0,0x19,0xe6);
+	&LL(0xd6,0xd6,0x7f,0xd6,0xfe,0xa9,0xb1,0x28);
+	&LL(0x1b,0x1b,0x6c,0x1b,0xd8,0x77,0x36,0xc3);
+	&LL(0xb5,0xb5,0xee,0xb5,0xc1,0x5b,0x77,0x74);
+	&LL(0xaf,0xaf,0x86,0xaf,0x11,0x29,0x43,0xbe);
+	&LL(0x6a,0x6a,0xb5,0x6a,0x77,0xdf,0xd4,0x1d);
+	&LL(0x50,0x50,0x5d,0x50,0xba,0x0d,0xa0,0xea);
+	&LL(0x45,0x45,0x09,0x45,0x12,0x4c,0x8a,0x57);
+	&LL(0xf3,0xf3,0xeb,0xf3,0xcb,0x18,0xfb,0x38);
+	&LL(0x30,0x30,0xc0,0x30,0x9d,0xf0,0x60,0xad);
+	&LL(0xef,0xef,0x9b,0xef,0x2b,0x74,0xc3,0xc4);
+	&LL(0x3f,0x3f,0xfc,0x3f,0xe5,0xc3,0x7e,0xda);
+	&LL(0x55,0x55,0x49,0x55,0x92,0x1c,0xaa,0xc7);
+	&LL(0xa2,0xa2,0xb2,0xa2,0x79,0x10,0x59,0xdb);
+	&LL(0xea,0xea,0x8f,0xea,0x03,0x65,0xc9,0xe9);
+	&LL(0x65,0x65,0x89,0x65,0x0f,0xec,0xca,0x6a);
+	&LL(0xba,0xba,0xd2,0xba,0xb9,0x68,0x69,0x03);
+	&LL(0x2f,0x2f,0xbc,0x2f,0x65,0x93,0x5e,0x4a);
+	&LL(0xc0,0xc0,0x27,0xc0,0x4e,0xe7,0x9d,0x8e);
+	&LL(0xde,0xde,0x5f,0xde,0xbe,0x81,0xa1,0x60);
+	&LL(0x1c,0x1c,0x70,0x1c,0xe0,0x6c,0x38,0xfc);
+	&LL(0xfd,0xfd,0xd3,0xfd,0xbb,0x2e,0xe7,0x46);
+	&LL(0x4d,0x4d,0x29,0x4d,0x52,0x64,0x9a,0x1f);
+	&LL(0x92,0x92,0x72,0x92,0xe4,0xe0,0x39,0x76);
+	&LL(0x75,0x75,0xc9,0x75,0x8f,0xbc,0xea,0xfa);
+	&LL(0x06,0x06,0x18,0x06,0x30,0x1e,0x0c,0x36);
+	&LL(0x8a,0x8a,0x12,0x8a,0x24,0x98,0x09,0xae);
+	&LL(0xb2,0xb2,0xf2,0xb2,0xf9,0x40,0x79,0x4b);
+	&LL(0xe6,0xe6,0xbf,0xe6,0x63,0x59,0xd1,0x85);
+	&LL(0x0e,0x0e,0x38,0x0e,0x70,0x36,0x1c,0x7e);
+	&LL(0x1f,0x1f,0x7c,0x1f,0xf8,0x63,0x3e,0xe7);
+	&LL(0x62,0x62,0x95,0x62,0x37,0xf7,0xc4,0x55);
+	&LL(0xd4,0xd4,0x77,0xd4,0xee,0xa3,0xb5,0x3a);
+	&LL(0xa8,0xa8,0x9a,0xa8,0x29,0x32,0x4d,0x81);
+	&LL(0x96,0x96,0x62,0x96,0xc4,0xf4,0x31,0x52);
+	&LL(0xf9,0xf9,0xc3,0xf9,0x9b,0x3a,0xef,0x62);
+	&LL(0xc5,0xc5,0x33,0xc5,0x66,0xf6,0x97,0xa3);
+	&LL(0x25,0x25,0x94,0x25,0x35,0xb1,0x4a,0x10);
+	&LL(0x59,0x59,0x79,0x59,0xf2,0x20,0xb2,0xab);
+	&LL(0x84,0x84,0x2a,0x84,0x54,0xae,0x15,0xd0);
+	&LL(0x72,0x72,0xd5,0x72,0xb7,0xa7,0xe4,0xc5);
+	&LL(0x39,0x39,0xe4,0x39,0xd5,0xdd,0x72,0xec);
+	&LL(0x4c,0x4c,0x2d,0x4c,0x5a,0x61,0x98,0x16);
+	&LL(0x5e,0x5e,0x65,0x5e,0xca,0x3b,0xbc,0x94);
+	&LL(0x78,0x78,0xfd,0x78,0xe7,0x85,0xf0,0x9f);
+	&LL(0x38,0x38,0xe0,0x38,0xdd,0xd8,0x70,0xe5);
+	&LL(0x8c,0x8c,0x0a,0x8c,0x14,0x86,0x05,0x98);
+	&LL(0xd1,0xd1,0x63,0xd1,0xc6,0xb2,0xbf,0x17);
+	&LL(0xa5,0xa5,0xae,0xa5,0x41,0x0b,0x57,0xe4);
+	&LL(0xe2,0xe2,0xaf,0xe2,0x43,0x4d,0xd9,0xa1);
+	&LL(0x61,0x61,0x99,0x61,0x2f,0xf8,0xc2,0x4e);
+	&LL(0xb3,0xb3,0xf6,0xb3,0xf1,0x45,0x7b,0x42);
+	&LL(0x21,0x21,0x84,0x21,0x15,0xa5,0x42,0x34);
+	&LL(0x9c,0x9c,0x4a,0x9c,0x94,0xd6,0x25,0x08);
+	&LL(0x1e,0x1e,0x78,0x1e,0xf0,0x66,0x3c,0xee);
+	&LL(0x43,0x43,0x11,0x43,0x22,0x52,0x86,0x61);
+	&LL(0xc7,0xc7,0x3b,0xc7,0x76,0xfc,0x93,0xb1);
+	&LL(0xfc,0xfc,0xd7,0xfc,0xb3,0x2b,0xe5,0x4f);
+	&LL(0x04,0x04,0x10,0x04,0x20,0x14,0x08,0x24);
+	&LL(0x51,0x51,0x59,0x51,0xb2,0x08,0xa2,0xe3);
+	&LL(0x99,0x99,0x5e,0x99,0xbc,0xc7,0x2f,0x25);
+	&LL(0x6d,0x6d,0xa9,0x6d,0x4f,0xc4,0xda,0x22);
+	&LL(0x0d,0x0d,0x34,0x0d,0x68,0x39,0x1a,0x65);
+	&LL(0xfa,0xfa,0xcf,0xfa,0x83,0x35,0xe9,0x79);
+	&LL(0xdf,0xdf,0x5b,0xdf,0xb6,0x84,0xa3,0x69);
+	&LL(0x7e,0x7e,0xe5,0x7e,0xd7,0x9b,0xfc,0xa9);
+	&LL(0x24,0x24,0x90,0x24,0x3d,0xb4,0x48,0x19);
+	&LL(0x3b,0x3b,0xec,0x3b,0xc5,0xd7,0x76,0xfe);
+	&LL(0xab,0xab,0x96,0xab,0x31,0x3d,0x4b,0x9a);
+	&LL(0xce,0xce,0x1f,0xce,0x3e,0xd1,0x81,0xf0);
+	&LL(0x11,0x11,0x44,0x11,0x88,0x55,0x22,0x99);
+	&LL(0x8f,0x8f,0x06,0x8f,0x0c,0x89,0x03,0x83);
+	&LL(0x4e,0x4e,0x25,0x4e,0x4a,0x6b,0x9c,0x04);
+	&LL(0xb7,0xb7,0xe6,0xb7,0xd1,0x51,0x73,0x66);
+	&LL(0xeb,0xeb,0x8b,0xeb,0x0b,0x60,0xcb,0xe0);
+	&LL(0x3c,0x3c,0xf0,0x3c,0xfd,0xcc,0x78,0xc1);
+	&LL(0x81,0x81,0x3e,0x81,0x7c,0xbf,0x1f,0xfd);
+	&LL(0x94,0x94,0x6a,0x94,0xd4,0xfe,0x35,0x40);
+	&LL(0xf7,0xf7,0xfb,0xf7,0xeb,0x0c,0xf3,0x1c);
+	&LL(0xb9,0xb9,0xde,0xb9,0xa1,0x67,0x6f,0x18);
+	&LL(0x13,0x13,0x4c,0x13,0x98,0x5f,0x26,0x8b);
+	&LL(0x2c,0x2c,0xb0,0x2c,0x7d,0x9c,0x58,0x51);
+	&LL(0xd3,0xd3,0x6b,0xd3,0xd6,0xb8,0xbb,0x05);
+	&LL(0xe7,0xe7,0xbb,0xe7,0x6b,0x5c,0xd3,0x8c);
+	&LL(0x6e,0x6e,0xa5,0x6e,0x57,0xcb,0xdc,0x39);
+	&LL(0xc4,0xc4,0x37,0xc4,0x6e,0xf3,0x95,0xaa);
+	&LL(0x03,0x03,0x0c,0x03,0x18,0x0f,0x06,0x1b);
+	&LL(0x56,0x56,0x45,0x56,0x8a,0x13,0xac,0xdc);
+	&LL(0x44,0x44,0x0d,0x44,0x1a,0x49,0x88,0x5e);
+	&LL(0x7f,0x7f,0xe1,0x7f,0xdf,0x9e,0xfe,0xa0);
+	&LL(0xa9,0xa9,0x9e,0xa9,0x21,0x37,0x4f,0x88);
+	&LL(0x2a,0x2a,0xa8,0x2a,0x4d,0x82,0x54,0x67);
+	&LL(0xbb,0xbb,0xd6,0xbb,0xb1,0x6d,0x6b,0x0a);
+	&LL(0xc1,0xc1,0x23,0xc1,0x46,0xe2,0x9f,0x87);
+	&LL(0x53,0x53,0x51,0x53,0xa2,0x02,0xa6,0xf1);
+	&LL(0xdc,0xdc,0x57,0xdc,0xae,0x8b,0xa5,0x72);
+	&LL(0x0b,0x0b,0x2c,0x0b,0x58,0x27,0x16,0x53);
+	&LL(0x9d,0x9d,0x4e,0x9d,0x9c,0xd3,0x27,0x01);
+	&LL(0x6c,0x6c,0xad,0x6c,0x47,0xc1,0xd8,0x2b);
+	&LL(0x31,0x31,0xc4,0x31,0x95,0xf5,0x62,0xa4);
+	&LL(0x74,0x74,0xcd,0x74,0x87,0xb9,0xe8,0xf3);
+	&LL(0xf6,0xf6,0xff,0xf6,0xe3,0x09,0xf1,0x15);
+	&LL(0x46,0x46,0x05,0x46,0x0a,0x43,0x8c,0x4c);
+	&LL(0xac,0xac,0x8a,0xac,0x09,0x26,0x45,0xa5);
+	&LL(0x89,0x89,0x1e,0x89,0x3c,0x97,0x0f,0xb5);
+	&LL(0x14,0x14,0x50,0x14,0xa0,0x44,0x28,0xb4);
+	&LL(0xe1,0xe1,0xa3,0xe1,0x5b,0x42,0xdf,0xba);
+	&LL(0x16,0x16,0x58,0x16,0xb0,0x4e,0x2c,0xa6);
+	&LL(0x3a,0x3a,0xe8,0x3a,0xcd,0xd2,0x74,0xf7);
+	&LL(0x69,0x69,0xb9,0x69,0x6f,0xd0,0xd2,0x06);
+	&LL(0x09,0x09,0x24,0x09,0x48,0x2d,0x12,0x41);
+	&LL(0x70,0x70,0xdd,0x70,0xa7,0xad,0xe0,0xd7);
+	&LL(0xb6,0xb6,0xe2,0xb6,0xd9,0x54,0x71,0x6f);
+	&LL(0xd0,0xd0,0x67,0xd0,0xce,0xb7,0xbd,0x1e);
+	&LL(0xed,0xed,0x93,0xed,0x3b,0x7e,0xc7,0xd6);
+	&LL(0xcc,0xcc,0x17,0xcc,0x2e,0xdb,0x85,0xe2);
+	&LL(0x42,0x42,0x15,0x42,0x2a,0x57,0x84,0x68);
+	&LL(0x98,0x98,0x5a,0x98,0xb4,0xc2,0x2d,0x2c);
+	&LL(0xa4,0xa4,0xaa,0xa4,0x49,0x0e,0x55,0xed);
+	&LL(0x28,0x28,0xa0,0x28,0x5d,0x88,0x50,0x75);
+	&LL(0x5c,0x5c,0x6d,0x5c,0xda,0x31,0xb8,0x86);
+	&LL(0xf8,0xf8,0xc7,0xf8,0x93,0x3f,0xed,0x6b);
+	&LL(0x86,0x86,0x22,0x86,0x44,0xa4,0x11,0xc2);
+
+	&L(0x18,0x23,0xc6,0xe8,0x87,0xb8,0x01,0x4f);	# rc[ROUNDS]
+	&L(0x36,0xa6,0xd2,0xf5,0x79,0x6f,0x91,0x52);
+	&L(0x60,0xbc,0x9b,0x8e,0xa3,0x0c,0x7b,0x35);
+	&L(0x1d,0xe0,0xd7,0xc2,0x2e,0x4b,0xfe,0x57);
+	&L(0x15,0x77,0x37,0xe5,0x9f,0xf0,0x4a,0xda);
+	&L(0x58,0xc9,0x29,0x0a,0xb1,0xa0,0x6b,0x85);
+	&L(0xbd,0x5d,0x10,0xf4,0xcb,0x3e,0x05,0x67);
+	&L(0xe4,0x27,0x41,0x8b,0xa7,0x7d,0x95,0xd8);
+	&L(0xfb,0xee,0x7c,0x66,0xdd,0x17,0x47,0x9e);
+	&L(0xca,0x2d,0xbf,0x07,0xad,0x5a,0x83,0x33);
+
+# EXCEPTION_DISPOSITION handler (EXCEPTION_RECORD *rec,ULONG64 frame,
+#		CONTEXT *context,DISPATCHER_CONTEXT *disp)
+if ($win64) {
+$rec="%rcx";
+$frame="%rdx";
+$context="%r8";
+$disp="%r9";
+
+$code.=<<___;
+.extern	__imp_RtlVirtualUnwind
+.type	se_handler,\@abi-omnipotent
+.align	16
+se_handler:
+	push	%rsi
+	push	%rdi
+	push	%rbx
+	push	%rbp
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	pushfq
+	sub	\$64,%rsp
+
+	mov	120($context),%rax	# pull context->Rax
+	mov	248($context),%rbx	# pull context->Rip
+
+	lea	.Lprologue(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip<.Lprologue
+	jb	.Lin_prologue
+
+	mov	152($context),%rax	# pull context->Rsp
+
+	lea	.Lepilogue(%rip),%r10
+	cmp	%r10,%rbx		# context->Rip>=.Lepilogue
+	jae	.Lin_prologue
+
+	mov	128+32(%rax),%rax	# pull saved stack pointer
+
+	mov	-8(%rax),%rbx
+	mov	-16(%rax),%rbp
+	mov	-24(%rax),%r12
+	mov	-32(%rax),%r13
+	mov	-40(%rax),%r14
+	mov	-48(%rax),%r15
+	mov	%rbx,144($context)	# restore context->Rbx
+	mov	%rbp,160($context)	# restore context->Rbp
+	mov	%r12,216($context)	# restore context->R12
+	mov	%r13,224($context)	# restore context->R13
+	mov	%r14,232($context)	# restore context->R14
+	mov	%r15,240($context)	# restore context->R15
+
+.Lin_prologue:
+	mov	8(%rax),%rdi
+	mov	16(%rax),%rsi
+	mov	%rax,152($context)	# restore context->Rsp
+	mov	%rsi,168($context)	# restore context->Rsi
+	mov	%rdi,176($context)	# restore context->Rdi
+
+	mov	40($disp),%rdi		# disp->ContextRecord
+	mov	$context,%rsi		# context
+	mov	\$154,%ecx		# sizeof(CONTEXT)
+	.long	0xa548f3fc		# cld; rep movsq
+
+	mov	$disp,%rsi
+	xor	%rcx,%rcx		# arg1, UNW_FLAG_NHANDLER
+	mov	8(%rsi),%rdx		# arg2, disp->ImageBase
+	mov	0(%rsi),%r8		# arg3, disp->ControlPc
+	mov	16(%rsi),%r9		# arg4, disp->FunctionEntry
+	mov	40(%rsi),%r10		# disp->ContextRecord
+	lea	56(%rsi),%r11		# &disp->HandlerData
+	lea	24(%rsi),%r12		# &disp->EstablisherFrame
+	mov	%r10,32(%rsp)		# arg5
+	mov	%r11,40(%rsp)		# arg6
+	mov	%r12,48(%rsp)		# arg7
+	mov	%rcx,56(%rsp)		# arg8, (NULL)
+	call	*__imp_RtlVirtualUnwind(%rip)
+
+	mov	\$1,%eax		# ExceptionContinueSearch
+	add	\$64,%rsp
+	popfq
+	pop	%r15
+	pop	%r14
+	pop	%r13
+	pop	%r12
+	pop	%rbp
+	pop	%rbx
+	pop	%rdi
+	pop	%rsi
+	ret
+.size	se_handler,.-se_handler
+
+.section	.pdata
+.align	4
+	.rva	.LSEH_begin_$func
+	.rva	.LSEH_end_$func
+	.rva	.LSEH_info_$func
+
+.section	.xdata
+.align	8
+.LSEH_info_$func:
+	.byte	9,0,0,0
+	.rva	se_handler
+___
+}
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/build.info
new file mode 100644
index 000000000..4b167b504
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/build.info
@@ -0,0 +1,8 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=wp_dgst.c {- $target{wp_asm_src} -}
+
+GENERATE[wp-mmx.s]=asm/wp-mmx.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+DEPEND[wp-mmx.s]=../perlasm/x86asm.pl
+
+GENERATE[wp-x86_64.s]=asm/wp-x86_64.pl $(PERLASM_SCHEME)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/wp_block.c b/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/wp_block.c
new file mode 100644
index 000000000..0cc92a3b0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/wp_block.c
@@ -0,0 +1,784 @@
+/*
+ * Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/**
+ * The Whirlpool hashing function.
+ *
+ * See
+ *      P.S.L.M. Barreto, V. Rijmen,
+ *      ``The Whirlpool hashing function,''
+ *      NESSIE submission, 2000 (tweaked version, 2001),
+ *      <https://www.cosic.esat.kuleuven.ac.be/nessie/workshop/submissions/whirlpool.zip>
+ *
+ * Based on "@version 3.0 (2003.03.12)" by Paulo S.L.M. Barreto and
+ * Vincent Rijmen. Lookup "reference implementations" on
+ * <http://planeta.terra.com.br/informatica/paulobarreto/>
+ *
+ * =============================================================================
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHORS ''AS IS'' AND ANY EXPRESS
+ * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE
+ * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+ * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+ * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+ * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+ * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+ * OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
+ * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#include "wp_locl.h"
+#include <string.h>
+
+typedef unsigned char u8;
+#if (defined(_WIN32) || defined(_WIN64)) && !defined(__MINGW32)
+typedef unsigned __int64 u64;
+#elif defined(__arch64__)
+typedef unsigned long u64;
+#else
+typedef unsigned long long u64;
+#endif
+
+#define ROUNDS  10
+
+#define STRICT_ALIGNMENT
+#if !defined(PEDANTIC) && (defined(__i386) || defined(__i386__) || \
+                           defined(__x86_64) || defined(__x86_64__) || \
+                           defined(_M_IX86) || defined(_M_AMD64) || \
+                           defined(_M_X64))
+/*
+ * Well, formally there're couple of other architectures, which permit
+ * unaligned loads, specifically those not crossing cache lines, IA-64 and
+ * PowerPC...
+ */
+# undef STRICT_ALIGNMENT
+#endif
+
+#undef SMALL_REGISTER_BANK
+#if defined(__i386) || defined(__i386__) || defined(_M_IX86)
+# define SMALL_REGISTER_BANK
+# if defined(WHIRLPOOL_ASM)
+#  ifndef OPENSSL_SMALL_FOOTPRINT
+/*
+ * it appears that for elder non-MMX
+ * CPUs this is actually faster!
+ */
+#   define OPENSSL_SMALL_FOOTPRINT
+#  endif
+#  define GO_FOR_MMX(ctx,inp,num)     do {                    \
+        extern unsigned long OPENSSL_ia32cap_P[];               \
+        void whirlpool_block_mmx(void *,const void *,size_t);   \
+        if (!(OPENSSL_ia32cap_P[0] & (1<<23)))  break;          \
+        whirlpool_block_mmx(ctx->H.c,inp,num);  return;         \
+                                        } while (0)
+# endif
+#endif
+
+#undef ROTATE
+#ifndef PEDANTIC
+# if defined(_MSC_VER)
+#  if defined(_WIN64)            /* applies to both IA-64 and AMD64 */
+#   pragma intrinsic(_rotl64)
+#   define ROTATE(a,n) _rotl64((a),n)
+#  endif
+# elif defined(__GNUC__) && __GNUC__>=2
+#  if defined(__x86_64) || defined(__x86_64__)
+#   if defined(L_ENDIAN)
+#    define ROTATE(a,n)       ({ u64 ret; asm ("rolq %1,%0"   \
+                                   : "=r"(ret) : "J"(n),"0"(a) : "cc"); ret; })
+#   elif defined(B_ENDIAN)
+       /*
+        * Most will argue that x86_64 is always little-endian. Well, yes, but
+        * then we have stratus.com who has modified gcc to "emulate"
+        * big-endian on x86. Is there evidence that they [or somebody else]
+        * won't do same for x86_64? Naturally no. And this line is waiting
+        * ready for that brave soul:-)
+        */
+#    define ROTATE(a,n)       ({ u64 ret; asm ("rorq %1,%0"   \
+                                   : "=r"(ret) : "J"(n),"0"(a) : "cc"); ret; })
+#   endif
+#  elif defined(__ia64) || defined(__ia64__)
+#   if defined(L_ENDIAN)
+#    define ROTATE(a,n)       ({ u64 ret; asm ("shrp %0=%1,%1,%2"     \
+                                   : "=r"(ret) : "r"(a),"M"(64-(n))); ret; })
+#   elif defined(B_ENDIAN)
+#    define ROTATE(a,n)       ({ u64 ret; asm ("shrp %0=%1,%1,%2"     \
+                                   : "=r"(ret) : "r"(a),"M"(n)); ret; })
+#   endif
+#  endif
+# endif
+#endif
+
+#if defined(OPENSSL_SMALL_FOOTPRINT)
+# if !defined(ROTATE)
+#  if defined(L_ENDIAN)         /* little-endians have to rotate left */
+#   define ROTATE(i,n)       ((i)<<(n) ^ (i)>>(64-n))
+#  elif defined(B_ENDIAN)       /* big-endians have to rotate right */
+#   define ROTATE(i,n)       ((i)>>(n) ^ (i)<<(64-n))
+#  endif
+# endif
+# if defined(ROTATE) && !defined(STRICT_ALIGNMENT)
+#  define STRICT_ALIGNMENT      /* ensure smallest table size */
+# endif
+#endif
+
+/*
+ * Table size depends on STRICT_ALIGNMENT and whether or not endian-
+ * specific ROTATE macro is defined. If STRICT_ALIGNMENT is not
+ * defined, which is normally the case on x86[_64] CPUs, the table is
+ * 4KB large unconditionally. Otherwise if ROTATE is defined, the
+ * table is 2KB large, and otherwise - 16KB. 2KB table requires a
+ * whole bunch of additional rotations, but I'm willing to "trade,"
+ * because 16KB table certainly trashes L1 cache. I wish all CPUs
+ * could handle unaligned load as 4KB table doesn't trash the cache,
+ * nor does it require additional rotations.
+ */
+/*
+ * Note that every Cn macro expands as two loads: one byte load and
+ * one quadword load. One can argue that that many single-byte loads
+ * is too excessive, as one could load a quadword and "milk" it for
+ * eight 8-bit values instead. Well, yes, but in order to do so *and*
+ * avoid excessive loads you have to accommodate a handful of 64-bit
+ * values in the register bank and issue a bunch of shifts and mask.
+ * It's a tradeoff: loads vs. shift and mask in big register bank[!].
+ * On most CPUs eight single-byte loads are faster and I let other
+ * ones to depend on smart compiler to fold byte loads if beneficial.
+ * Hand-coded assembler would be another alternative:-)
+ */
+#ifdef STRICT_ALIGNMENT
+# if defined(ROTATE)
+#  define N   1
+#  define LL(c0,c1,c2,c3,c4,c5,c6,c7) c0,c1,c2,c3,c4,c5,c6,c7
+#  define C0(K,i)     (Cx.q[K.c[(i)*8+0]])
+#  define C1(K,i)     ROTATE(Cx.q[K.c[(i)*8+1]],8)
+#  define C2(K,i)     ROTATE(Cx.q[K.c[(i)*8+2]],16)
+#  define C3(K,i)     ROTATE(Cx.q[K.c[(i)*8+3]],24)
+#  define C4(K,i)     ROTATE(Cx.q[K.c[(i)*8+4]],32)
+#  define C5(K,i)     ROTATE(Cx.q[K.c[(i)*8+5]],40)
+#  define C6(K,i)     ROTATE(Cx.q[K.c[(i)*8+6]],48)
+#  define C7(K,i)     ROTATE(Cx.q[K.c[(i)*8+7]],56)
+# else
+#  define N   8
+#  define LL(c0,c1,c2,c3,c4,c5,c6,c7) c0,c1,c2,c3,c4,c5,c6,c7, \
+                                        c7,c0,c1,c2,c3,c4,c5,c6, \
+                                        c6,c7,c0,c1,c2,c3,c4,c5, \
+                                        c5,c6,c7,c0,c1,c2,c3,c4, \
+                                        c4,c5,c6,c7,c0,c1,c2,c3, \
+                                        c3,c4,c5,c6,c7,c0,c1,c2, \
+                                        c2,c3,c4,c5,c6,c7,c0,c1, \
+                                        c1,c2,c3,c4,c5,c6,c7,c0
+#  define C0(K,i)     (Cx.q[0+8*K.c[(i)*8+0]])
+#  define C1(K,i)     (Cx.q[1+8*K.c[(i)*8+1]])
+#  define C2(K,i)     (Cx.q[2+8*K.c[(i)*8+2]])
+#  define C3(K,i)     (Cx.q[3+8*K.c[(i)*8+3]])
+#  define C4(K,i)     (Cx.q[4+8*K.c[(i)*8+4]])
+#  define C5(K,i)     (Cx.q[5+8*K.c[(i)*8+5]])
+#  define C6(K,i)     (Cx.q[6+8*K.c[(i)*8+6]])
+#  define C7(K,i)     (Cx.q[7+8*K.c[(i)*8+7]])
+# endif
+#else
+# define N     2
+# define LL(c0,c1,c2,c3,c4,c5,c6,c7)   c0,c1,c2,c3,c4,c5,c6,c7, \
+                                        c0,c1,c2,c3,c4,c5,c6,c7
+# define C0(K,i)       (((u64*)(Cx.c+0))[2*K.c[(i)*8+0]])
+# define C1(K,i)       (((u64*)(Cx.c+7))[2*K.c[(i)*8+1]])
+# define C2(K,i)       (((u64*)(Cx.c+6))[2*K.c[(i)*8+2]])
+# define C3(K,i)       (((u64*)(Cx.c+5))[2*K.c[(i)*8+3]])
+# define C4(K,i)       (((u64*)(Cx.c+4))[2*K.c[(i)*8+4]])
+# define C5(K,i)       (((u64*)(Cx.c+3))[2*K.c[(i)*8+5]])
+# define C6(K,i)       (((u64*)(Cx.c+2))[2*K.c[(i)*8+6]])
+# define C7(K,i)       (((u64*)(Cx.c+1))[2*K.c[(i)*8+7]])
+#endif
+
+static const
+    union {
+    u8 c[(256 * N + ROUNDS) * sizeof(u64)];
+    u64 q[(256 * N + ROUNDS)];
+} Cx = {
+        {
+            /* Note endian-neutral representation:-) */
+            LL(0x18, 0x18, 0x60, 0x18, 0xc0, 0x78, 0x30, 0xd8),
+            LL(0x23, 0x23, 0x8c, 0x23, 0x05, 0xaf, 0x46, 0x26),
+            LL(0xc6, 0xc6, 0x3f, 0xc6, 0x7e, 0xf9, 0x91, 0xb8),
+            LL(0xe8, 0xe8, 0x87, 0xe8, 0x13, 0x6f, 0xcd, 0xfb),
+            LL(0x87, 0x87, 0x26, 0x87, 0x4c, 0xa1, 0x13, 0xcb),
+            LL(0xb8, 0xb8, 0xda, 0xb8, 0xa9, 0x62, 0x6d, 0x11),
+            LL(0x01, 0x01, 0x04, 0x01, 0x08, 0x05, 0x02, 0x09),
+            LL(0x4f, 0x4f, 0x21, 0x4f, 0x42, 0x6e, 0x9e, 0x0d),
+            LL(0x36, 0x36, 0xd8, 0x36, 0xad, 0xee, 0x6c, 0x9b),
+            LL(0xa6, 0xa6, 0xa2, 0xa6, 0x59, 0x04, 0x51, 0xff),
+            LL(0xd2, 0xd2, 0x6f, 0xd2, 0xde, 0xbd, 0xb9, 0x0c),
+            LL(0xf5, 0xf5, 0xf3, 0xf5, 0xfb, 0x06, 0xf7, 0x0e),
+            LL(0x79, 0x79, 0xf9, 0x79, 0xef, 0x80, 0xf2, 0x96),
+            LL(0x6f, 0x6f, 0xa1, 0x6f, 0x5f, 0xce, 0xde, 0x30),
+            LL(0x91, 0x91, 0x7e, 0x91, 0xfc, 0xef, 0x3f, 0x6d),
+            LL(0x52, 0x52, 0x55, 0x52, 0xaa, 0x07, 0xa4, 0xf8),
+            LL(0x60, 0x60, 0x9d, 0x60, 0x27, 0xfd, 0xc0, 0x47),
+            LL(0xbc, 0xbc, 0xca, 0xbc, 0x89, 0x76, 0x65, 0x35),
+            LL(0x9b, 0x9b, 0x56, 0x9b, 0xac, 0xcd, 0x2b, 0x37),
+            LL(0x8e, 0x8e, 0x02, 0x8e, 0x04, 0x8c, 0x01, 0x8a),
+            LL(0xa3, 0xa3, 0xb6, 0xa3, 0x71, 0x15, 0x5b, 0xd2),
+            LL(0x0c, 0x0c, 0x30, 0x0c, 0x60, 0x3c, 0x18, 0x6c),
+            LL(0x7b, 0x7b, 0xf1, 0x7b, 0xff, 0x8a, 0xf6, 0x84),
+            LL(0x35, 0x35, 0xd4, 0x35, 0xb5, 0xe1, 0x6a, 0x80),
+            LL(0x1d, 0x1d, 0x74, 0x1d, 0xe8, 0x69, 0x3a, 0xf5),
+            LL(0xe0, 0xe0, 0xa7, 0xe0, 0x53, 0x47, 0xdd, 0xb3),
+            LL(0xd7, 0xd7, 0x7b, 0xd7, 0xf6, 0xac, 0xb3, 0x21),
+            LL(0xc2, 0xc2, 0x2f, 0xc2, 0x5e, 0xed, 0x99, 0x9c),
+            LL(0x2e, 0x2e, 0xb8, 0x2e, 0x6d, 0x96, 0x5c, 0x43),
+            LL(0x4b, 0x4b, 0x31, 0x4b, 0x62, 0x7a, 0x96, 0x29),
+            LL(0xfe, 0xfe, 0xdf, 0xfe, 0xa3, 0x21, 0xe1, 0x5d),
+            LL(0x57, 0x57, 0x41, 0x57, 0x82, 0x16, 0xae, 0xd5),
+            LL(0x15, 0x15, 0x54, 0x15, 0xa8, 0x41, 0x2a, 0xbd),
+            LL(0x77, 0x77, 0xc1, 0x77, 0x9f, 0xb6, 0xee, 0xe8),
+            LL(0x37, 0x37, 0xdc, 0x37, 0xa5, 0xeb, 0x6e, 0x92),
+            LL(0xe5, 0xe5, 0xb3, 0xe5, 0x7b, 0x56, 0xd7, 0x9e),
+            LL(0x9f, 0x9f, 0x46, 0x9f, 0x8c, 0xd9, 0x23, 0x13),
+            LL(0xf0, 0xf0, 0xe7, 0xf0, 0xd3, 0x17, 0xfd, 0x23),
+            LL(0x4a, 0x4a, 0x35, 0x4a, 0x6a, 0x7f, 0x94, 0x20),
+            LL(0xda, 0xda, 0x4f, 0xda, 0x9e, 0x95, 0xa9, 0x44),
+            LL(0x58, 0x58, 0x7d, 0x58, 0xfa, 0x25, 0xb0, 0xa2),
+            LL(0xc9, 0xc9, 0x03, 0xc9, 0x06, 0xca, 0x8f, 0xcf),
+            LL(0x29, 0x29, 0xa4, 0x29, 0x55, 0x8d, 0x52, 0x7c),
+            LL(0x0a, 0x0a, 0x28, 0x0a, 0x50, 0x22, 0x14, 0x5a),
+            LL(0xb1, 0xb1, 0xfe, 0xb1, 0xe1, 0x4f, 0x7f, 0x50),
+            LL(0xa0, 0xa0, 0xba, 0xa0, 0x69, 0x1a, 0x5d, 0xc9),
+            LL(0x6b, 0x6b, 0xb1, 0x6b, 0x7f, 0xda, 0xd6, 0x14),
+            LL(0x85, 0x85, 0x2e, 0x85, 0x5c, 0xab, 0x17, 0xd9),
+            LL(0xbd, 0xbd, 0xce, 0xbd, 0x81, 0x73, 0x67, 0x3c),
+            LL(0x5d, 0x5d, 0x69, 0x5d, 0xd2, 0x34, 0xba, 0x8f),
+            LL(0x10, 0x10, 0x40, 0x10, 0x80, 0x50, 0x20, 0x90),
+            LL(0xf4, 0xf4, 0xf7, 0xf4, 0xf3, 0x03, 0xf5, 0x07),
+            LL(0xcb, 0xcb, 0x0b, 0xcb, 0x16, 0xc0, 0x8b, 0xdd),
+            LL(0x3e, 0x3e, 0xf8, 0x3e, 0xed, 0xc6, 0x7c, 0xd3),
+            LL(0x05, 0x05, 0x14, 0x05, 0x28, 0x11, 0x0a, 0x2d),
+            LL(0x67, 0x67, 0x81, 0x67, 0x1f, 0xe6, 0xce, 0x78),
+            LL(0xe4, 0xe4, 0xb7, 0xe4, 0x73, 0x53, 0xd5, 0x97),
+            LL(0x27, 0x27, 0x9c, 0x27, 0x25, 0xbb, 0x4e, 0x02),
+            LL(0x41, 0x41, 0x19, 0x41, 0x32, 0x58, 0x82, 0x73),
+            LL(0x8b, 0x8b, 0x16, 0x8b, 0x2c, 0x9d, 0x0b, 0xa7),
+            LL(0xa7, 0xa7, 0xa6, 0xa7, 0x51, 0x01, 0x53, 0xf6),
+            LL(0x7d, 0x7d, 0xe9, 0x7d, 0xcf, 0x94, 0xfa, 0xb2),
+            LL(0x95, 0x95, 0x6e, 0x95, 0xdc, 0xfb, 0x37, 0x49),
+            LL(0xd8, 0xd8, 0x47, 0xd8, 0x8e, 0x9f, 0xad, 0x56),
+            LL(0xfb, 0xfb, 0xcb, 0xfb, 0x8b, 0x30, 0xeb, 0x70),
+            LL(0xee, 0xee, 0x9f, 0xee, 0x23, 0x71, 0xc1, 0xcd),
+            LL(0x7c, 0x7c, 0xed, 0x7c, 0xc7, 0x91, 0xf8, 0xbb),
+            LL(0x66, 0x66, 0x85, 0x66, 0x17, 0xe3, 0xcc, 0x71),
+            LL(0xdd, 0xdd, 0x53, 0xdd, 0xa6, 0x8e, 0xa7, 0x7b),
+            LL(0x17, 0x17, 0x5c, 0x17, 0xb8, 0x4b, 0x2e, 0xaf),
+            LL(0x47, 0x47, 0x01, 0x47, 0x02, 0x46, 0x8e, 0x45),
+            LL(0x9e, 0x9e, 0x42, 0x9e, 0x84, 0xdc, 0x21, 0x1a),
+            LL(0xca, 0xca, 0x0f, 0xca, 0x1e, 0xc5, 0x89, 0xd4),
+            LL(0x2d, 0x2d, 0xb4, 0x2d, 0x75, 0x99, 0x5a, 0x58),
+            LL(0xbf, 0xbf, 0xc6, 0xbf, 0x91, 0x79, 0x63, 0x2e),
+            LL(0x07, 0x07, 0x1c, 0x07, 0x38, 0x1b, 0x0e, 0x3f),
+            LL(0xad, 0xad, 0x8e, 0xad, 0x01, 0x23, 0x47, 0xac),
+            LL(0x5a, 0x5a, 0x75, 0x5a, 0xea, 0x2f, 0xb4, 0xb0),
+            LL(0x83, 0x83, 0x36, 0x83, 0x6c, 0xb5, 0x1b, 0xef),
+            LL(0x33, 0x33, 0xcc, 0x33, 0x85, 0xff, 0x66, 0xb6),
+            LL(0x63, 0x63, 0x91, 0x63, 0x3f, 0xf2, 0xc6, 0x5c),
+            LL(0x02, 0x02, 0x08, 0x02, 0x10, 0x0a, 0x04, 0x12),
+            LL(0xaa, 0xaa, 0x92, 0xaa, 0x39, 0x38, 0x49, 0x93),
+            LL(0x71, 0x71, 0xd9, 0x71, 0xaf, 0xa8, 0xe2, 0xde),
+            LL(0xc8, 0xc8, 0x07, 0xc8, 0x0e, 0xcf, 0x8d, 0xc6),
+            LL(0x19, 0x19, 0x64, 0x19, 0xc8, 0x7d, 0x32, 0xd1),
+            LL(0x49, 0x49, 0x39, 0x49, 0x72, 0x70, 0x92, 0x3b),
+            LL(0xd9, 0xd9, 0x43, 0xd9, 0x86, 0x9a, 0xaf, 0x5f),
+            LL(0xf2, 0xf2, 0xef, 0xf2, 0xc3, 0x1d, 0xf9, 0x31),
+            LL(0xe3, 0xe3, 0xab, 0xe3, 0x4b, 0x48, 0xdb, 0xa8),
+            LL(0x5b, 0x5b, 0x71, 0x5b, 0xe2, 0x2a, 0xb6, 0xb9),
+            LL(0x88, 0x88, 0x1a, 0x88, 0x34, 0x92, 0x0d, 0xbc),
+            LL(0x9a, 0x9a, 0x52, 0x9a, 0xa4, 0xc8, 0x29, 0x3e),
+            LL(0x26, 0x26, 0x98, 0x26, 0x2d, 0xbe, 0x4c, 0x0b),
+            LL(0x32, 0x32, 0xc8, 0x32, 0x8d, 0xfa, 0x64, 0xbf),
+            LL(0xb0, 0xb0, 0xfa, 0xb0, 0xe9, 0x4a, 0x7d, 0x59),
+            LL(0xe9, 0xe9, 0x83, 0xe9, 0x1b, 0x6a, 0xcf, 0xf2),
+            LL(0x0f, 0x0f, 0x3c, 0x0f, 0x78, 0x33, 0x1e, 0x77),
+            LL(0xd5, 0xd5, 0x73, 0xd5, 0xe6, 0xa6, 0xb7, 0x33),
+            LL(0x80, 0x80, 0x3a, 0x80, 0x74, 0xba, 0x1d, 0xf4),
+            LL(0xbe, 0xbe, 0xc2, 0xbe, 0x99, 0x7c, 0x61, 0x27),
+            LL(0xcd, 0xcd, 0x13, 0xcd, 0x26, 0xde, 0x87, 0xeb),
+            LL(0x34, 0x34, 0xd0, 0x34, 0xbd, 0xe4, 0x68, 0x89),
+            LL(0x48, 0x48, 0x3d, 0x48, 0x7a, 0x75, 0x90, 0x32),
+            LL(0xff, 0xff, 0xdb, 0xff, 0xab, 0x24, 0xe3, 0x54),
+            LL(0x7a, 0x7a, 0xf5, 0x7a, 0xf7, 0x8f, 0xf4, 0x8d),
+            LL(0x90, 0x90, 0x7a, 0x90, 0xf4, 0xea, 0x3d, 0x64),
+            LL(0x5f, 0x5f, 0x61, 0x5f, 0xc2, 0x3e, 0xbe, 0x9d),
+            LL(0x20, 0x20, 0x80, 0x20, 0x1d, 0xa0, 0x40, 0x3d),
+            LL(0x68, 0x68, 0xbd, 0x68, 0x67, 0xd5, 0xd0, 0x0f),
+            LL(0x1a, 0x1a, 0x68, 0x1a, 0xd0, 0x72, 0x34, 0xca),
+            LL(0xae, 0xae, 0x82, 0xae, 0x19, 0x2c, 0x41, 0xb7),
+            LL(0xb4, 0xb4, 0xea, 0xb4, 0xc9, 0x5e, 0x75, 0x7d),
+            LL(0x54, 0x54, 0x4d, 0x54, 0x9a, 0x19, 0xa8, 0xce),
+            LL(0x93, 0x93, 0x76, 0x93, 0xec, 0xe5, 0x3b, 0x7f),
+            LL(0x22, 0x22, 0x88, 0x22, 0x0d, 0xaa, 0x44, 0x2f),
+            LL(0x64, 0x64, 0x8d, 0x64, 0x07, 0xe9, 0xc8, 0x63),
+            LL(0xf1, 0xf1, 0xe3, 0xf1, 0xdb, 0x12, 0xff, 0x2a),
+            LL(0x73, 0x73, 0xd1, 0x73, 0xbf, 0xa2, 0xe6, 0xcc),
+            LL(0x12, 0x12, 0x48, 0x12, 0x90, 0x5a, 0x24, 0x82),
+            LL(0x40, 0x40, 0x1d, 0x40, 0x3a, 0x5d, 0x80, 0x7a),
+            LL(0x08, 0x08, 0x20, 0x08, 0x40, 0x28, 0x10, 0x48),
+            LL(0xc3, 0xc3, 0x2b, 0xc3, 0x56, 0xe8, 0x9b, 0x95),
+            LL(0xec, 0xec, 0x97, 0xec, 0x33, 0x7b, 0xc5, 0xdf),
+            LL(0xdb, 0xdb, 0x4b, 0xdb, 0x96, 0x90, 0xab, 0x4d),
+            LL(0xa1, 0xa1, 0xbe, 0xa1, 0x61, 0x1f, 0x5f, 0xc0),
+            LL(0x8d, 0x8d, 0x0e, 0x8d, 0x1c, 0x83, 0x07, 0x91),
+            LL(0x3d, 0x3d, 0xf4, 0x3d, 0xf5, 0xc9, 0x7a, 0xc8),
+            LL(0x97, 0x97, 0x66, 0x97, 0xcc, 0xf1, 0x33, 0x5b),
+            LL(0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00),
+            LL(0xcf, 0xcf, 0x1b, 0xcf, 0x36, 0xd4, 0x83, 0xf9),
+            LL(0x2b, 0x2b, 0xac, 0x2b, 0x45, 0x87, 0x56, 0x6e),
+            LL(0x76, 0x76, 0xc5, 0x76, 0x97, 0xb3, 0xec, 0xe1),
+            LL(0x82, 0x82, 0x32, 0x82, 0x64, 0xb0, 0x19, 0xe6),
+            LL(0xd6, 0xd6, 0x7f, 0xd6, 0xfe, 0xa9, 0xb1, 0x28),
+            LL(0x1b, 0x1b, 0x6c, 0x1b, 0xd8, 0x77, 0x36, 0xc3),
+            LL(0xb5, 0xb5, 0xee, 0xb5, 0xc1, 0x5b, 0x77, 0x74),
+            LL(0xaf, 0xaf, 0x86, 0xaf, 0x11, 0x29, 0x43, 0xbe),
+            LL(0x6a, 0x6a, 0xb5, 0x6a, 0x77, 0xdf, 0xd4, 0x1d),
+            LL(0x50, 0x50, 0x5d, 0x50, 0xba, 0x0d, 0xa0, 0xea),
+            LL(0x45, 0x45, 0x09, 0x45, 0x12, 0x4c, 0x8a, 0x57),
+            LL(0xf3, 0xf3, 0xeb, 0xf3, 0xcb, 0x18, 0xfb, 0x38),
+            LL(0x30, 0x30, 0xc0, 0x30, 0x9d, 0xf0, 0x60, 0xad),
+            LL(0xef, 0xef, 0x9b, 0xef, 0x2b, 0x74, 0xc3, 0xc4),
+            LL(0x3f, 0x3f, 0xfc, 0x3f, 0xe5, 0xc3, 0x7e, 0xda),
+            LL(0x55, 0x55, 0x49, 0x55, 0x92, 0x1c, 0xaa, 0xc7),
+            LL(0xa2, 0xa2, 0xb2, 0xa2, 0x79, 0x10, 0x59, 0xdb),
+            LL(0xea, 0xea, 0x8f, 0xea, 0x03, 0x65, 0xc9, 0xe9),
+            LL(0x65, 0x65, 0x89, 0x65, 0x0f, 0xec, 0xca, 0x6a),
+            LL(0xba, 0xba, 0xd2, 0xba, 0xb9, 0x68, 0x69, 0x03),
+            LL(0x2f, 0x2f, 0xbc, 0x2f, 0x65, 0x93, 0x5e, 0x4a),
+            LL(0xc0, 0xc0, 0x27, 0xc0, 0x4e, 0xe7, 0x9d, 0x8e),
+            LL(0xde, 0xde, 0x5f, 0xde, 0xbe, 0x81, 0xa1, 0x60),
+            LL(0x1c, 0x1c, 0x70, 0x1c, 0xe0, 0x6c, 0x38, 0xfc),
+            LL(0xfd, 0xfd, 0xd3, 0xfd, 0xbb, 0x2e, 0xe7, 0x46),
+            LL(0x4d, 0x4d, 0x29, 0x4d, 0x52, 0x64, 0x9a, 0x1f),
+            LL(0x92, 0x92, 0x72, 0x92, 0xe4, 0xe0, 0x39, 0x76),
+            LL(0x75, 0x75, 0xc9, 0x75, 0x8f, 0xbc, 0xea, 0xfa),
+            LL(0x06, 0x06, 0x18, 0x06, 0x30, 0x1e, 0x0c, 0x36),
+            LL(0x8a, 0x8a, 0x12, 0x8a, 0x24, 0x98, 0x09, 0xae),
+            LL(0xb2, 0xb2, 0xf2, 0xb2, 0xf9, 0x40, 0x79, 0x4b),
+            LL(0xe6, 0xe6, 0xbf, 0xe6, 0x63, 0x59, 0xd1, 0x85),
+            LL(0x0e, 0x0e, 0x38, 0x0e, 0x70, 0x36, 0x1c, 0x7e),
+            LL(0x1f, 0x1f, 0x7c, 0x1f, 0xf8, 0x63, 0x3e, 0xe7),
+            LL(0x62, 0x62, 0x95, 0x62, 0x37, 0xf7, 0xc4, 0x55),
+            LL(0xd4, 0xd4, 0x77, 0xd4, 0xee, 0xa3, 0xb5, 0x3a),
+            LL(0xa8, 0xa8, 0x9a, 0xa8, 0x29, 0x32, 0x4d, 0x81),
+            LL(0x96, 0x96, 0x62, 0x96, 0xc4, 0xf4, 0x31, 0x52),
+            LL(0xf9, 0xf9, 0xc3, 0xf9, 0x9b, 0x3a, 0xef, 0x62),
+            LL(0xc5, 0xc5, 0x33, 0xc5, 0x66, 0xf6, 0x97, 0xa3),
+            LL(0x25, 0x25, 0x94, 0x25, 0x35, 0xb1, 0x4a, 0x10),
+            LL(0x59, 0x59, 0x79, 0x59, 0xf2, 0x20, 0xb2, 0xab),
+            LL(0x84, 0x84, 0x2a, 0x84, 0x54, 0xae, 0x15, 0xd0),
+            LL(0x72, 0x72, 0xd5, 0x72, 0xb7, 0xa7, 0xe4, 0xc5),
+            LL(0x39, 0x39, 0xe4, 0x39, 0xd5, 0xdd, 0x72, 0xec),
+            LL(0x4c, 0x4c, 0x2d, 0x4c, 0x5a, 0x61, 0x98, 0x16),
+            LL(0x5e, 0x5e, 0x65, 0x5e, 0xca, 0x3b, 0xbc, 0x94),
+            LL(0x78, 0x78, 0xfd, 0x78, 0xe7, 0x85, 0xf0, 0x9f),
+            LL(0x38, 0x38, 0xe0, 0x38, 0xdd, 0xd8, 0x70, 0xe5),
+            LL(0x8c, 0x8c, 0x0a, 0x8c, 0x14, 0x86, 0x05, 0x98),
+            LL(0xd1, 0xd1, 0x63, 0xd1, 0xc6, 0xb2, 0xbf, 0x17),
+            LL(0xa5, 0xa5, 0xae, 0xa5, 0x41, 0x0b, 0x57, 0xe4),
+            LL(0xe2, 0xe2, 0xaf, 0xe2, 0x43, 0x4d, 0xd9, 0xa1),
+            LL(0x61, 0x61, 0x99, 0x61, 0x2f, 0xf8, 0xc2, 0x4e),
+            LL(0xb3, 0xb3, 0xf6, 0xb3, 0xf1, 0x45, 0x7b, 0x42),
+            LL(0x21, 0x21, 0x84, 0x21, 0x15, 0xa5, 0x42, 0x34),
+            LL(0x9c, 0x9c, 0x4a, 0x9c, 0x94, 0xd6, 0x25, 0x08),
+            LL(0x1e, 0x1e, 0x78, 0x1e, 0xf0, 0x66, 0x3c, 0xee),
+            LL(0x43, 0x43, 0x11, 0x43, 0x22, 0x52, 0x86, 0x61),
+            LL(0xc7, 0xc7, 0x3b, 0xc7, 0x76, 0xfc, 0x93, 0xb1),
+            LL(0xfc, 0xfc, 0xd7, 0xfc, 0xb3, 0x2b, 0xe5, 0x4f),
+            LL(0x04, 0x04, 0x10, 0x04, 0x20, 0x14, 0x08, 0x24),
+            LL(0x51, 0x51, 0x59, 0x51, 0xb2, 0x08, 0xa2, 0xe3),
+            LL(0x99, 0x99, 0x5e, 0x99, 0xbc, 0xc7, 0x2f, 0x25),
+            LL(0x6d, 0x6d, 0xa9, 0x6d, 0x4f, 0xc4, 0xda, 0x22),
+            LL(0x0d, 0x0d, 0x34, 0x0d, 0x68, 0x39, 0x1a, 0x65),
+            LL(0xfa, 0xfa, 0xcf, 0xfa, 0x83, 0x35, 0xe9, 0x79),
+            LL(0xdf, 0xdf, 0x5b, 0xdf, 0xb6, 0x84, 0xa3, 0x69),
+            LL(0x7e, 0x7e, 0xe5, 0x7e, 0xd7, 0x9b, 0xfc, 0xa9),
+            LL(0x24, 0x24, 0x90, 0x24, 0x3d, 0xb4, 0x48, 0x19),
+            LL(0x3b, 0x3b, 0xec, 0x3b, 0xc5, 0xd7, 0x76, 0xfe),
+            LL(0xab, 0xab, 0x96, 0xab, 0x31, 0x3d, 0x4b, 0x9a),
+            LL(0xce, 0xce, 0x1f, 0xce, 0x3e, 0xd1, 0x81, 0xf0),
+            LL(0x11, 0x11, 0x44, 0x11, 0x88, 0x55, 0x22, 0x99),
+            LL(0x8f, 0x8f, 0x06, 0x8f, 0x0c, 0x89, 0x03, 0x83),
+            LL(0x4e, 0x4e, 0x25, 0x4e, 0x4a, 0x6b, 0x9c, 0x04),
+            LL(0xb7, 0xb7, 0xe6, 0xb7, 0xd1, 0x51, 0x73, 0x66),
+            LL(0xeb, 0xeb, 0x8b, 0xeb, 0x0b, 0x60, 0xcb, 0xe0),
+            LL(0x3c, 0x3c, 0xf0, 0x3c, 0xfd, 0xcc, 0x78, 0xc1),
+            LL(0x81, 0x81, 0x3e, 0x81, 0x7c, 0xbf, 0x1f, 0xfd),
+            LL(0x94, 0x94, 0x6a, 0x94, 0xd4, 0xfe, 0x35, 0x40),
+            LL(0xf7, 0xf7, 0xfb, 0xf7, 0xeb, 0x0c, 0xf3, 0x1c),
+            LL(0xb9, 0xb9, 0xde, 0xb9, 0xa1, 0x67, 0x6f, 0x18),
+            LL(0x13, 0x13, 0x4c, 0x13, 0x98, 0x5f, 0x26, 0x8b),
+            LL(0x2c, 0x2c, 0xb0, 0x2c, 0x7d, 0x9c, 0x58, 0x51),
+            LL(0xd3, 0xd3, 0x6b, 0xd3, 0xd6, 0xb8, 0xbb, 0x05),
+            LL(0xe7, 0xe7, 0xbb, 0xe7, 0x6b, 0x5c, 0xd3, 0x8c),
+            LL(0x6e, 0x6e, 0xa5, 0x6e, 0x57, 0xcb, 0xdc, 0x39),
+            LL(0xc4, 0xc4, 0x37, 0xc4, 0x6e, 0xf3, 0x95, 0xaa),
+            LL(0x03, 0x03, 0x0c, 0x03, 0x18, 0x0f, 0x06, 0x1b),
+            LL(0x56, 0x56, 0x45, 0x56, 0x8a, 0x13, 0xac, 0xdc),
+            LL(0x44, 0x44, 0x0d, 0x44, 0x1a, 0x49, 0x88, 0x5e),
+            LL(0x7f, 0x7f, 0xe1, 0x7f, 0xdf, 0x9e, 0xfe, 0xa0),
+            LL(0xa9, 0xa9, 0x9e, 0xa9, 0x21, 0x37, 0x4f, 0x88),
+            LL(0x2a, 0x2a, 0xa8, 0x2a, 0x4d, 0x82, 0x54, 0x67),
+            LL(0xbb, 0xbb, 0xd6, 0xbb, 0xb1, 0x6d, 0x6b, 0x0a),
+            LL(0xc1, 0xc1, 0x23, 0xc1, 0x46, 0xe2, 0x9f, 0x87),
+            LL(0x53, 0x53, 0x51, 0x53, 0xa2, 0x02, 0xa6, 0xf1),
+            LL(0xdc, 0xdc, 0x57, 0xdc, 0xae, 0x8b, 0xa5, 0x72),
+            LL(0x0b, 0x0b, 0x2c, 0x0b, 0x58, 0x27, 0x16, 0x53),
+            LL(0x9d, 0x9d, 0x4e, 0x9d, 0x9c, 0xd3, 0x27, 0x01),
+            LL(0x6c, 0x6c, 0xad, 0x6c, 0x47, 0xc1, 0xd8, 0x2b),
+            LL(0x31, 0x31, 0xc4, 0x31, 0x95, 0xf5, 0x62, 0xa4),
+            LL(0x74, 0x74, 0xcd, 0x74, 0x87, 0xb9, 0xe8, 0xf3),
+            LL(0xf6, 0xf6, 0xff, 0xf6, 0xe3, 0x09, 0xf1, 0x15),
+            LL(0x46, 0x46, 0x05, 0x46, 0x0a, 0x43, 0x8c, 0x4c),
+            LL(0xac, 0xac, 0x8a, 0xac, 0x09, 0x26, 0x45, 0xa5),
+            LL(0x89, 0x89, 0x1e, 0x89, 0x3c, 0x97, 0x0f, 0xb5),
+            LL(0x14, 0x14, 0x50, 0x14, 0xa0, 0x44, 0x28, 0xb4),
+            LL(0xe1, 0xe1, 0xa3, 0xe1, 0x5b, 0x42, 0xdf, 0xba),
+            LL(0x16, 0x16, 0x58, 0x16, 0xb0, 0x4e, 0x2c, 0xa6),
+            LL(0x3a, 0x3a, 0xe8, 0x3a, 0xcd, 0xd2, 0x74, 0xf7),
+            LL(0x69, 0x69, 0xb9, 0x69, 0x6f, 0xd0, 0xd2, 0x06),
+            LL(0x09, 0x09, 0x24, 0x09, 0x48, 0x2d, 0x12, 0x41),
+            LL(0x70, 0x70, 0xdd, 0x70, 0xa7, 0xad, 0xe0, 0xd7),
+            LL(0xb6, 0xb6, 0xe2, 0xb6, 0xd9, 0x54, 0x71, 0x6f),
+            LL(0xd0, 0xd0, 0x67, 0xd0, 0xce, 0xb7, 0xbd, 0x1e),
+            LL(0xed, 0xed, 0x93, 0xed, 0x3b, 0x7e, 0xc7, 0xd6),
+            LL(0xcc, 0xcc, 0x17, 0xcc, 0x2e, 0xdb, 0x85, 0xe2),
+            LL(0x42, 0x42, 0x15, 0x42, 0x2a, 0x57, 0x84, 0x68),
+            LL(0x98, 0x98, 0x5a, 0x98, 0xb4, 0xc2, 0x2d, 0x2c),
+            LL(0xa4, 0xa4, 0xaa, 0xa4, 0x49, 0x0e, 0x55, 0xed),
+            LL(0x28, 0x28, 0xa0, 0x28, 0x5d, 0x88, 0x50, 0x75),
+            LL(0x5c, 0x5c, 0x6d, 0x5c, 0xda, 0x31, 0xb8, 0x86),
+            LL(0xf8, 0xf8, 0xc7, 0xf8, 0x93, 0x3f, 0xed, 0x6b),
+            LL(0x86, 0x86, 0x22, 0x86, 0x44, 0xa4, 0x11, 0xc2),
+#define RC      (&(Cx.q[256*N]))
+            0x18, 0x23, 0xc6, 0xe8, 0x87, 0xb8, 0x01, 0x4f,
+            /* rc[ROUNDS] */
+            0x36, 0xa6, 0xd2, 0xf5, 0x79, 0x6f, 0x91, 0x52, 0x60, 0xbc, 0x9b,
+            0x8e, 0xa3, 0x0c, 0x7b, 0x35, 0x1d, 0xe0, 0xd7, 0xc2, 0x2e, 0x4b,
+            0xfe, 0x57, 0x15, 0x77, 0x37, 0xe5, 0x9f, 0xf0, 0x4a, 0xda, 0x58,
+            0xc9, 0x29, 0x0a, 0xb1, 0xa0, 0x6b, 0x85, 0xbd, 0x5d, 0x10, 0xf4,
+            0xcb, 0x3e, 0x05, 0x67, 0xe4, 0x27, 0x41, 0x8b, 0xa7, 0x7d, 0x95,
+            0xd8, 0xfb, 0xee, 0x7c, 0x66, 0xdd, 0x17, 0x47, 0x9e, 0xca, 0x2d,
+            0xbf, 0x07, 0xad, 0x5a, 0x83, 0x33
+        }
+    };
+
+void whirlpool_block(WHIRLPOOL_CTX *ctx, const void *inp, size_t n)
+{
+    int r;
+    const u8 *p = inp;
+    union {
+        u64 q[8];
+        u8 c[64];
+    } S, K, *H = (void *)ctx->H.q;
+
+#ifdef GO_FOR_MMX
+    GO_FOR_MMX(ctx, inp, n);
+#endif
+    do {
+#ifdef OPENSSL_SMALL_FOOTPRINT
+        u64 L[8];
+        int i;
+
+        for (i = 0; i < 64; i++)
+            S.c[i] = (K.c[i] = H->c[i]) ^ p[i];
+        for (r = 0; r < ROUNDS; r++) {
+            for (i = 0; i < 8; i++) {
+                L[i] = i ? 0 : RC[r];
+                L[i] ^= C0(K, i) ^ C1(K, (i - 1) & 7) ^
+                    C2(K, (i - 2) & 7) ^ C3(K, (i - 3) & 7) ^
+                    C4(K, (i - 4) & 7) ^ C5(K, (i - 5) & 7) ^
+                    C6(K, (i - 6) & 7) ^ C7(K, (i - 7) & 7);
+            }
+            memcpy(K.q, L, 64);
+            for (i = 0; i < 8; i++) {
+                L[i] ^= C0(S, i) ^ C1(S, (i - 1) & 7) ^
+                    C2(S, (i - 2) & 7) ^ C3(S, (i - 3) & 7) ^
+                    C4(S, (i - 4) & 7) ^ C5(S, (i - 5) & 7) ^
+                    C6(S, (i - 6) & 7) ^ C7(S, (i - 7) & 7);
+            }
+            memcpy(S.q, L, 64);
+        }
+        for (i = 0; i < 64; i++)
+            H->c[i] ^= S.c[i] ^ p[i];
+#else
+        u64 L0, L1, L2, L3, L4, L5, L6, L7;
+
+# ifdef STRICT_ALIGNMENT
+        if ((size_t)p & 7) {
+            memcpy(S.c, p, 64);
+            S.q[0] ^= (K.q[0] = H->q[0]);
+            S.q[1] ^= (K.q[1] = H->q[1]);
+            S.q[2] ^= (K.q[2] = H->q[2]);
+            S.q[3] ^= (K.q[3] = H->q[3]);
+            S.q[4] ^= (K.q[4] = H->q[4]);
+            S.q[5] ^= (K.q[5] = H->q[5]);
+            S.q[6] ^= (K.q[6] = H->q[6]);
+            S.q[7] ^= (K.q[7] = H->q[7]);
+        } else
+# endif
+        {
+            const u64 *pa = (const u64 *)p;
+            S.q[0] = (K.q[0] = H->q[0]) ^ pa[0];
+            S.q[1] = (K.q[1] = H->q[1]) ^ pa[1];
+            S.q[2] = (K.q[2] = H->q[2]) ^ pa[2];
+            S.q[3] = (K.q[3] = H->q[3]) ^ pa[3];
+            S.q[4] = (K.q[4] = H->q[4]) ^ pa[4];
+            S.q[5] = (K.q[5] = H->q[5]) ^ pa[5];
+            S.q[6] = (K.q[6] = H->q[6]) ^ pa[6];
+            S.q[7] = (K.q[7] = H->q[7]) ^ pa[7];
+        }
+
+        for (r = 0; r < ROUNDS; r++) {
+# ifdef SMALL_REGISTER_BANK
+            L0 = C0(K, 0) ^ C1(K, 7) ^ C2(K, 6) ^ C3(K, 5) ^
+                C4(K, 4) ^ C5(K, 3) ^ C6(K, 2) ^ C7(K, 1) ^ RC[r];
+            L1 = C0(K, 1) ^ C1(K, 0) ^ C2(K, 7) ^ C3(K, 6) ^
+                C4(K, 5) ^ C5(K, 4) ^ C6(K, 3) ^ C7(K, 2);
+            L2 = C0(K, 2) ^ C1(K, 1) ^ C2(K, 0) ^ C3(K, 7) ^
+                C4(K, 6) ^ C5(K, 5) ^ C6(K, 4) ^ C7(K, 3);
+            L3 = C0(K, 3) ^ C1(K, 2) ^ C2(K, 1) ^ C3(K, 0) ^
+                C4(K, 7) ^ C5(K, 6) ^ C6(K, 5) ^ C7(K, 4);
+            L4 = C0(K, 4) ^ C1(K, 3) ^ C2(K, 2) ^ C3(K, 1) ^
+                C4(K, 0) ^ C5(K, 7) ^ C6(K, 6) ^ C7(K, 5);
+            L5 = C0(K, 5) ^ C1(K, 4) ^ C2(K, 3) ^ C3(K, 2) ^
+                C4(K, 1) ^ C5(K, 0) ^ C6(K, 7) ^ C7(K, 6);
+            L6 = C0(K, 6) ^ C1(K, 5) ^ C2(K, 4) ^ C3(K, 3) ^
+                C4(K, 2) ^ C5(K, 1) ^ C6(K, 0) ^ C7(K, 7);
+            L7 = C0(K, 7) ^ C1(K, 6) ^ C2(K, 5) ^ C3(K, 4) ^
+                C4(K, 3) ^ C5(K, 2) ^ C6(K, 1) ^ C7(K, 0);
+
+            K.q[0] = L0;
+            K.q[1] = L1;
+            K.q[2] = L2;
+            K.q[3] = L3;
+            K.q[4] = L4;
+            K.q[5] = L5;
+            K.q[6] = L6;
+            K.q[7] = L7;
+
+            L0 ^= C0(S, 0) ^ C1(S, 7) ^ C2(S, 6) ^ C3(S, 5) ^
+                C4(S, 4) ^ C5(S, 3) ^ C6(S, 2) ^ C7(S, 1);
+            L1 ^= C0(S, 1) ^ C1(S, 0) ^ C2(S, 7) ^ C3(S, 6) ^
+                C4(S, 5) ^ C5(S, 4) ^ C6(S, 3) ^ C7(S, 2);
+            L2 ^= C0(S, 2) ^ C1(S, 1) ^ C2(S, 0) ^ C3(S, 7) ^
+                C4(S, 6) ^ C5(S, 5) ^ C6(S, 4) ^ C7(S, 3);
+            L3 ^= C0(S, 3) ^ C1(S, 2) ^ C2(S, 1) ^ C3(S, 0) ^
+                C4(S, 7) ^ C5(S, 6) ^ C6(S, 5) ^ C7(S, 4);
+            L4 ^= C0(S, 4) ^ C1(S, 3) ^ C2(S, 2) ^ C3(S, 1) ^
+                C4(S, 0) ^ C5(S, 7) ^ C6(S, 6) ^ C7(S, 5);
+            L5 ^= C0(S, 5) ^ C1(S, 4) ^ C2(S, 3) ^ C3(S, 2) ^
+                C4(S, 1) ^ C5(S, 0) ^ C6(S, 7) ^ C7(S, 6);
+            L6 ^= C0(S, 6) ^ C1(S, 5) ^ C2(S, 4) ^ C3(S, 3) ^
+                C4(S, 2) ^ C5(S, 1) ^ C6(S, 0) ^ C7(S, 7);
+            L7 ^= C0(S, 7) ^ C1(S, 6) ^ C2(S, 5) ^ C3(S, 4) ^
+                C4(S, 3) ^ C5(S, 2) ^ C6(S, 1) ^ C7(S, 0);
+
+            S.q[0] = L0;
+            S.q[1] = L1;
+            S.q[2] = L2;
+            S.q[3] = L3;
+            S.q[4] = L4;
+            S.q[5] = L5;
+            S.q[6] = L6;
+            S.q[7] = L7;
+# else
+            L0 = C0(K, 0);
+            L1 = C1(K, 0);
+            L2 = C2(K, 0);
+            L3 = C3(K, 0);
+            L4 = C4(K, 0);
+            L5 = C5(K, 0);
+            L6 = C6(K, 0);
+            L7 = C7(K, 0);
+            L0 ^= RC[r];
+
+            L1 ^= C0(K, 1);
+            L2 ^= C1(K, 1);
+            L3 ^= C2(K, 1);
+            L4 ^= C3(K, 1);
+            L5 ^= C4(K, 1);
+            L6 ^= C5(K, 1);
+            L7 ^= C6(K, 1);
+            L0 ^= C7(K, 1);
+
+            L2 ^= C0(K, 2);
+            L3 ^= C1(K, 2);
+            L4 ^= C2(K, 2);
+            L5 ^= C3(K, 2);
+            L6 ^= C4(K, 2);
+            L7 ^= C5(K, 2);
+            L0 ^= C6(K, 2);
+            L1 ^= C7(K, 2);
+
+            L3 ^= C0(K, 3);
+            L4 ^= C1(K, 3);
+            L5 ^= C2(K, 3);
+            L6 ^= C3(K, 3);
+            L7 ^= C4(K, 3);
+            L0 ^= C5(K, 3);
+            L1 ^= C6(K, 3);
+            L2 ^= C7(K, 3);
+
+            L4 ^= C0(K, 4);
+            L5 ^= C1(K, 4);
+            L6 ^= C2(K, 4);
+            L7 ^= C3(K, 4);
+            L0 ^= C4(K, 4);
+            L1 ^= C5(K, 4);
+            L2 ^= C6(K, 4);
+            L3 ^= C7(K, 4);
+
+            L5 ^= C0(K, 5);
+            L6 ^= C1(K, 5);
+            L7 ^= C2(K, 5);
+            L0 ^= C3(K, 5);
+            L1 ^= C4(K, 5);
+            L2 ^= C5(K, 5);
+            L3 ^= C6(K, 5);
+            L4 ^= C7(K, 5);
+
+            L6 ^= C0(K, 6);
+            L7 ^= C1(K, 6);
+            L0 ^= C2(K, 6);
+            L1 ^= C3(K, 6);
+            L2 ^= C4(K, 6);
+            L3 ^= C5(K, 6);
+            L4 ^= C6(K, 6);
+            L5 ^= C7(K, 6);
+
+            L7 ^= C0(K, 7);
+            L0 ^= C1(K, 7);
+            L1 ^= C2(K, 7);
+            L2 ^= C3(K, 7);
+            L3 ^= C4(K, 7);
+            L4 ^= C5(K, 7);
+            L5 ^= C6(K, 7);
+            L6 ^= C7(K, 7);
+
+            K.q[0] = L0;
+            K.q[1] = L1;
+            K.q[2] = L2;
+            K.q[3] = L3;
+            K.q[4] = L4;
+            K.q[5] = L5;
+            K.q[6] = L6;
+            K.q[7] = L7;
+
+            L0 ^= C0(S, 0);
+            L1 ^= C1(S, 0);
+            L2 ^= C2(S, 0);
+            L3 ^= C3(S, 0);
+            L4 ^= C4(S, 0);
+            L5 ^= C5(S, 0);
+            L6 ^= C6(S, 0);
+            L7 ^= C7(S, 0);
+
+            L1 ^= C0(S, 1);
+            L2 ^= C1(S, 1);
+            L3 ^= C2(S, 1);
+            L4 ^= C3(S, 1);
+            L5 ^= C4(S, 1);
+            L6 ^= C5(S, 1);
+            L7 ^= C6(S, 1);
+            L0 ^= C7(S, 1);
+
+            L2 ^= C0(S, 2);
+            L3 ^= C1(S, 2);
+            L4 ^= C2(S, 2);
+            L5 ^= C3(S, 2);
+            L6 ^= C4(S, 2);
+            L7 ^= C5(S, 2);
+            L0 ^= C6(S, 2);
+            L1 ^= C7(S, 2);
+
+            L3 ^= C0(S, 3);
+            L4 ^= C1(S, 3);
+            L5 ^= C2(S, 3);
+            L6 ^= C3(S, 3);
+            L7 ^= C4(S, 3);
+            L0 ^= C5(S, 3);
+            L1 ^= C6(S, 3);
+            L2 ^= C7(S, 3);
+
+            L4 ^= C0(S, 4);
+            L5 ^= C1(S, 4);
+            L6 ^= C2(S, 4);
+            L7 ^= C3(S, 4);
+            L0 ^= C4(S, 4);
+            L1 ^= C5(S, 4);
+            L2 ^= C6(S, 4);
+            L3 ^= C7(S, 4);
+
+            L5 ^= C0(S, 5);
+            L6 ^= C1(S, 5);
+            L7 ^= C2(S, 5);
+            L0 ^= C3(S, 5);
+            L1 ^= C4(S, 5);
+            L2 ^= C5(S, 5);
+            L3 ^= C6(S, 5);
+            L4 ^= C7(S, 5);
+
+            L6 ^= C0(S, 6);
+            L7 ^= C1(S, 6);
+            L0 ^= C2(S, 6);
+            L1 ^= C3(S, 6);
+            L2 ^= C4(S, 6);
+            L3 ^= C5(S, 6);
+            L4 ^= C6(S, 6);
+            L5 ^= C7(S, 6);
+
+            L7 ^= C0(S, 7);
+            L0 ^= C1(S, 7);
+            L1 ^= C2(S, 7);
+            L2 ^= C3(S, 7);
+            L3 ^= C4(S, 7);
+            L4 ^= C5(S, 7);
+            L5 ^= C6(S, 7);
+            L6 ^= C7(S, 7);
+
+            S.q[0] = L0;
+            S.q[1] = L1;
+            S.q[2] = L2;
+            S.q[3] = L3;
+            S.q[4] = L4;
+            S.q[5] = L5;
+            S.q[6] = L6;
+            S.q[7] = L7;
+# endif
+        }
+
+# ifdef STRICT_ALIGNMENT
+        if ((size_t)p & 7) {
+            int i;
+            for (i = 0; i < 64; i++)
+                H->c[i] ^= S.c[i] ^ p[i];
+        } else
+# endif
+        {
+            const u64 *pa = (const u64 *)p;
+            H->q[0] ^= S.q[0] ^ pa[0];
+            H->q[1] ^= S.q[1] ^ pa[1];
+            H->q[2] ^= S.q[2] ^ pa[2];
+            H->q[3] ^= S.q[3] ^ pa[3];
+            H->q[4] ^= S.q[4] ^ pa[4];
+            H->q[5] ^= S.q[5] ^ pa[5];
+            H->q[6] ^= S.q[6] ^ pa[6];
+            H->q[7] ^= S.q[7] ^ pa[7];
+        }
+#endif
+        p += 64;
+    } while (--n);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/wp_dgst.c b/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/wp_dgst.c
new file mode 100644
index 000000000..1ac29803a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/wp_dgst.c
@@ -0,0 +1,258 @@
+/*
+ * Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/**
+ * The Whirlpool hashing function.
+ *
+ * See
+ *      P.S.L.M. Barreto, V. Rijmen,
+ *      ``The Whirlpool hashing function,''
+ *      NESSIE submission, 2000 (tweaked version, 2001),
+ *      <https://www.cosic.esat.kuleuven.ac.be/nessie/workshop/submissions/whirlpool.zip>
+ *
+ * Based on "@version 3.0 (2003.03.12)" by Paulo S.L.M. Barreto and
+ * Vincent Rijmen. Lookup "reference implementations" on
+ * <http://planeta.terra.com.br/informatica/paulobarreto/>
+ *
+ * =============================================================================
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHORS ''AS IS'' AND ANY EXPRESS
+ * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE
+ * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+ * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+ * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+ * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+ * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+ * OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
+ * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+/*
+ * OpenSSL-specific implementation notes.
+ *
+ * WHIRLPOOL_Update as well as one-stroke WHIRLPOOL both expect
+ * number of *bytes* as input length argument. Bit-oriented routine
+ * as specified by authors is called WHIRLPOOL_BitUpdate[!] and
+ * does not have one-stroke counterpart.
+ *
+ * WHIRLPOOL_BitUpdate implements byte-oriented loop, essentially
+ * to serve WHIRLPOOL_Update. This is done for performance.
+ *
+ * Unlike authors' reference implementation, block processing
+ * routine whirlpool_block is designed to operate on multi-block
+ * input. This is done for performance.
+ */
+
+#include <openssl/crypto.h>
+#include "wp_locl.h"
+#include <string.h>
+
+int WHIRLPOOL_Init(WHIRLPOOL_CTX *c)
+{
+    memset(c, 0, sizeof(*c));
+    return 1;
+}
+
+int WHIRLPOOL_Update(WHIRLPOOL_CTX *c, const void *_inp, size_t bytes)
+{
+    /*
+     * Well, largest suitable chunk size actually is
+     * (1<<(sizeof(size_t)*8-3))-64, but below number is large enough for not
+     * to care about excessive calls to WHIRLPOOL_BitUpdate...
+     */
+    size_t chunk = ((size_t)1) << (sizeof(size_t) * 8 - 4);
+    const unsigned char *inp = _inp;
+
+    while (bytes >= chunk) {
+        WHIRLPOOL_BitUpdate(c, inp, chunk * 8);
+        bytes -= chunk;
+        inp += chunk;
+    }
+    if (bytes)
+        WHIRLPOOL_BitUpdate(c, inp, bytes * 8);
+
+    return 1;
+}
+
+void WHIRLPOOL_BitUpdate(WHIRLPOOL_CTX *c, const void *_inp, size_t bits)
+{
+    size_t n;
+    unsigned int bitoff = c->bitoff,
+        bitrem = bitoff % 8, inpgap = (8 - (unsigned int)bits % 8) & 7;
+    const unsigned char *inp = _inp;
+
+    /*
+     * This 256-bit increment procedure relies on the size_t being natural
+     * size of CPU register, so that we don't have to mask the value in order
+     * to detect overflows.
+     */
+    c->bitlen[0] += bits;
+    if (c->bitlen[0] < bits) {  /* overflow */
+        n = 1;
+        do {
+            c->bitlen[n]++;
+        } while (c->bitlen[n] == 0
+                 && ++n < (WHIRLPOOL_COUNTER / sizeof(size_t)));
+    }
+#ifndef OPENSSL_SMALL_FOOTPRINT
+ reconsider:
+    if (inpgap == 0 && bitrem == 0) { /* byte-oriented loop */
+        while (bits) {
+            if (bitoff == 0 && (n = bits / WHIRLPOOL_BBLOCK)) {
+                whirlpool_block(c, inp, n);
+                inp += n * WHIRLPOOL_BBLOCK / 8;
+                bits %= WHIRLPOOL_BBLOCK;
+            } else {
+                unsigned int byteoff = bitoff / 8;
+
+                bitrem = WHIRLPOOL_BBLOCK - bitoff; /* re-use bitrem */
+                if (bits >= bitrem) {
+                    bits -= bitrem;
+                    bitrem /= 8;
+                    memcpy(c->data + byteoff, inp, bitrem);
+                    inp += bitrem;
+                    whirlpool_block(c, c->data, 1);
+                    bitoff = 0;
+                } else {
+                    memcpy(c->data + byteoff, inp, bits / 8);
+                    bitoff += (unsigned int)bits;
+                    bits = 0;
+                }
+                c->bitoff = bitoff;
+            }
+        }
+    } else                      /* bit-oriented loop */
+#endif
+    {
+        /*-
+                   inp
+                   |
+                   +-------+-------+-------
+                      |||||||||||||||||||||
+                   +-------+-------+-------
+        +-------+-------+-------+-------+-------
+        ||||||||||||||                          c->data
+        +-------+-------+-------+-------+-------
+                |
+                c->bitoff/8
+        */
+        while (bits) {
+            unsigned int byteoff = bitoff / 8;
+            unsigned char b;
+
+#ifndef OPENSSL_SMALL_FOOTPRINT
+            if (bitrem == inpgap) {
+                c->data[byteoff++] |= inp[0] & (0xff >> inpgap);
+                inpgap = 8 - inpgap;
+                bitoff += inpgap;
+                bitrem = 0;     /* bitoff%8 */
+                bits -= inpgap;
+                inpgap = 0;     /* bits%8 */
+                inp++;
+                if (bitoff == WHIRLPOOL_BBLOCK) {
+                    whirlpool_block(c, c->data, 1);
+                    bitoff = 0;
+                }
+                c->bitoff = bitoff;
+                goto reconsider;
+            } else
+#endif
+            if (bits > 8) {
+                b = ((inp[0] << inpgap) | (inp[1] >> (8 - inpgap)));
+                b &= 0xff;
+                if (bitrem)
+                    c->data[byteoff++] |= b >> bitrem;
+                else
+                    c->data[byteoff++] = b;
+                bitoff += 8;
+                bits -= 8;
+                inp++;
+                if (bitoff >= WHIRLPOOL_BBLOCK) {
+                    whirlpool_block(c, c->data, 1);
+                    byteoff = 0;
+                    bitoff %= WHIRLPOOL_BBLOCK;
+                }
+                if (bitrem)
+                    c->data[byteoff] = b << (8 - bitrem);
+            } else {            /* remaining less than or equal to 8 bits */
+
+                b = (inp[0] << inpgap) & 0xff;
+                if (bitrem)
+                    c->data[byteoff++] |= b >> bitrem;
+                else
+                    c->data[byteoff++] = b;
+                bitoff += (unsigned int)bits;
+                if (bitoff == WHIRLPOOL_BBLOCK) {
+                    whirlpool_block(c, c->data, 1);
+                    byteoff = 0;
+                    bitoff %= WHIRLPOOL_BBLOCK;
+                }
+                if (bitrem)
+                    c->data[byteoff] = b << (8 - bitrem);
+                bits = 0;
+            }
+            c->bitoff = bitoff;
+        }
+    }
+}
+
+int WHIRLPOOL_Final(unsigned char *md, WHIRLPOOL_CTX *c)
+{
+    unsigned int bitoff = c->bitoff, byteoff = bitoff / 8;
+    size_t i, j, v;
+    unsigned char *p;
+
+    bitoff %= 8;
+    if (bitoff)
+        c->data[byteoff] |= 0x80 >> bitoff;
+    else
+        c->data[byteoff] = 0x80;
+    byteoff++;
+
+    /* pad with zeros */
+    if (byteoff > (WHIRLPOOL_BBLOCK / 8 - WHIRLPOOL_COUNTER)) {
+        if (byteoff < WHIRLPOOL_BBLOCK / 8)
+            memset(&c->data[byteoff], 0, WHIRLPOOL_BBLOCK / 8 - byteoff);
+        whirlpool_block(c, c->data, 1);
+        byteoff = 0;
+    }
+    if (byteoff < (WHIRLPOOL_BBLOCK / 8 - WHIRLPOOL_COUNTER))
+        memset(&c->data[byteoff], 0,
+               (WHIRLPOOL_BBLOCK / 8 - WHIRLPOOL_COUNTER) - byteoff);
+    /* smash 256-bit c->bitlen in big-endian order */
+    p = &c->data[WHIRLPOOL_BBLOCK / 8 - 1]; /* last byte in c->data */
+    for (i = 0; i < WHIRLPOOL_COUNTER / sizeof(size_t); i++)
+        for (v = c->bitlen[i], j = 0; j < sizeof(size_t); j++, v >>= 8)
+            *p-- = (unsigned char)(v & 0xff);
+
+    whirlpool_block(c, c->data, 1);
+
+    if (md) {
+        memcpy(md, c->H.c, WHIRLPOOL_DIGEST_LENGTH);
+        OPENSSL_cleanse(c, sizeof(*c));
+        return 1;
+    }
+    return 0;
+}
+
+unsigned char *WHIRLPOOL(const void *inp, size_t bytes, unsigned char *md)
+{
+    WHIRLPOOL_CTX ctx;
+    static unsigned char m[WHIRLPOOL_DIGEST_LENGTH];
+
+    if (md == NULL)
+        md = m;
+    WHIRLPOOL_Init(&ctx);
+    WHIRLPOOL_Update(&ctx, inp, bytes);
+    WHIRLPOOL_Final(md, &ctx);
+    return md;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/wp_locl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/wp_locl.h
new file mode 100644
index 000000000..3a81cfd58
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/whrlpool/wp_locl.h
@@ -0,0 +1,12 @@
+/*
+ * Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/whrlpool.h>
+
+void whirlpool_block(WHIRLPOOL_CTX *, const void *, size_t);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/build.info
new file mode 100644
index 000000000..afd0b6134
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/build.info
@@ -0,0 +1,10 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+        x509_def.c x509_d2.c x509_r2x.c x509_cmp.c \
+        x509_obj.c x509_req.c x509spki.c x509_vfy.c \
+        x509_set.c x509cset.c x509rset.c x509_err.c \
+        x509name.c x509_v3.c x509_ext.c x509_att.c \
+        x509type.c x509_meth.c x509_lu.c x_all.c x509_txt.c \
+        x509_trs.c by_file.c by_dir.c x509_vpm.c \
+        x_crl.c t_crl.c x_req.c t_req.c x_x509.c t_x509.c \
+        x_pubkey.c x_x509a.c x_attrib.c x_exten.c x_name.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/by_dir.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/by_dir.c
new file mode 100644
index 000000000..b3760dbad
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/by_dir.c
@@ -0,0 +1,390 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include "internal/cryptlib.h"
+#include <stdio.h>
+#include <time.h>
+#include <errno.h>
+#include <sys/types.h>
+
+#ifndef OPENSSL_NO_POSIX_IO
+# include <sys/stat.h>
+#endif
+
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+#include "x509_lcl.h"
+
+struct lookup_dir_hashes_st {
+    unsigned long hash;
+    int suffix;
+};
+
+struct lookup_dir_entry_st {
+    char *dir;
+    int dir_type;
+    STACK_OF(BY_DIR_HASH) *hashes;
+};
+
+typedef struct lookup_dir_st {
+    BUF_MEM *buffer;
+    STACK_OF(BY_DIR_ENTRY) *dirs;
+    CRYPTO_RWLOCK *lock;
+} BY_DIR;
+
+static int dir_ctrl(X509_LOOKUP *ctx, int cmd, const char *argp, long argl,
+                    char **ret);
+static int new_dir(X509_LOOKUP *lu);
+static void free_dir(X509_LOOKUP *lu);
+static int add_cert_dir(BY_DIR *ctx, const char *dir, int type);
+static int get_cert_by_subject(X509_LOOKUP *xl, X509_LOOKUP_TYPE type,
+                               X509_NAME *name, X509_OBJECT *ret);
+static X509_LOOKUP_METHOD x509_dir_lookup = {
+    "Load certs from files in a directory",
+    new_dir,                    /* new_item */
+    free_dir,                   /* free */
+    NULL,                       /* init */
+    NULL,                       /* shutdown */
+    dir_ctrl,                   /* ctrl */
+    get_cert_by_subject,        /* get_by_subject */
+    NULL,                       /* get_by_issuer_serial */
+    NULL,                       /* get_by_fingerprint */
+    NULL,                       /* get_by_alias */
+};
+
+X509_LOOKUP_METHOD *X509_LOOKUP_hash_dir(void)
+{
+    return &x509_dir_lookup;
+}
+
+static int dir_ctrl(X509_LOOKUP *ctx, int cmd, const char *argp, long argl,
+                    char **retp)
+{
+    int ret = 0;
+    BY_DIR *ld = (BY_DIR *)ctx->method_data;
+
+    switch (cmd) {
+    case X509_L_ADD_DIR:
+        if (argl == X509_FILETYPE_DEFAULT) {
+            const char *dir = ossl_safe_getenv(X509_get_default_cert_dir_env());
+
+            if (dir)
+                ret = add_cert_dir(ld, dir, X509_FILETYPE_PEM);
+            else
+                ret = add_cert_dir(ld, X509_get_default_cert_dir(),
+                                   X509_FILETYPE_PEM);
+            if (!ret) {
+                X509err(X509_F_DIR_CTRL, X509_R_LOADING_CERT_DIR);
+            }
+        } else
+            ret = add_cert_dir(ld, argp, (int)argl);
+        break;
+    }
+    return ret;
+}
+
+static int new_dir(X509_LOOKUP *lu)
+{
+    BY_DIR *a = OPENSSL_malloc(sizeof(*a));
+
+    if (a == NULL) {
+        X509err(X509_F_NEW_DIR, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    if ((a->buffer = BUF_MEM_new()) == NULL) {
+        X509err(X509_F_NEW_DIR, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    a->dirs = NULL;
+    a->lock = CRYPTO_THREAD_lock_new();
+    if (a->lock == NULL) {
+        BUF_MEM_free(a->buffer);
+        X509err(X509_F_NEW_DIR, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    lu->method_data = a;
+    return 1;
+
+ err:
+    OPENSSL_free(a);
+    return 0;
+}
+
+static void by_dir_hash_free(BY_DIR_HASH *hash)
+{
+    OPENSSL_free(hash);
+}
+
+static int by_dir_hash_cmp(const BY_DIR_HASH *const *a,
+                           const BY_DIR_HASH *const *b)
+{
+    if ((*a)->hash > (*b)->hash)
+        return 1;
+    if ((*a)->hash < (*b)->hash)
+        return -1;
+    return 0;
+}
+
+static void by_dir_entry_free(BY_DIR_ENTRY *ent)
+{
+    OPENSSL_free(ent->dir);
+    sk_BY_DIR_HASH_pop_free(ent->hashes, by_dir_hash_free);
+    OPENSSL_free(ent);
+}
+
+static void free_dir(X509_LOOKUP *lu)
+{
+    BY_DIR *a = (BY_DIR *)lu->method_data;
+
+    sk_BY_DIR_ENTRY_pop_free(a->dirs, by_dir_entry_free);
+    BUF_MEM_free(a->buffer);
+    CRYPTO_THREAD_lock_free(a->lock);
+    OPENSSL_free(a);
+}
+
+static int add_cert_dir(BY_DIR *ctx, const char *dir, int type)
+{
+    int j;
+    size_t len;
+    const char *s, *ss, *p;
+
+    if (dir == NULL || !*dir) {
+        X509err(X509_F_ADD_CERT_DIR, X509_R_INVALID_DIRECTORY);
+        return 0;
+    }
+
+    s = dir;
+    p = s;
+    do {
+        if ((*p == LIST_SEPARATOR_CHAR) || (*p == '\0')) {
+            BY_DIR_ENTRY *ent;
+
+            ss = s;
+            s = p + 1;
+            len = p - ss;
+            if (len == 0)
+                continue;
+            for (j = 0; j < sk_BY_DIR_ENTRY_num(ctx->dirs); j++) {
+                ent = sk_BY_DIR_ENTRY_value(ctx->dirs, j);
+                if (strlen(ent->dir) == len && strncmp(ent->dir, ss, len) == 0)
+                    break;
+            }
+            if (j < sk_BY_DIR_ENTRY_num(ctx->dirs))
+                continue;
+            if (ctx->dirs == NULL) {
+                ctx->dirs = sk_BY_DIR_ENTRY_new_null();
+                if (!ctx->dirs) {
+                    X509err(X509_F_ADD_CERT_DIR, ERR_R_MALLOC_FAILURE);
+                    return 0;
+                }
+            }
+            ent = OPENSSL_malloc(sizeof(*ent));
+            if (ent == NULL) {
+                X509err(X509_F_ADD_CERT_DIR, ERR_R_MALLOC_FAILURE);
+                return 0;
+            }
+            ent->dir_type = type;
+            ent->hashes = sk_BY_DIR_HASH_new(by_dir_hash_cmp);
+            ent->dir = OPENSSL_strndup(ss, len);
+            if (ent->dir == NULL || ent->hashes == NULL) {
+                by_dir_entry_free(ent);
+                return 0;
+            }
+            if (!sk_BY_DIR_ENTRY_push(ctx->dirs, ent)) {
+                by_dir_entry_free(ent);
+                X509err(X509_F_ADD_CERT_DIR, ERR_R_MALLOC_FAILURE);
+                return 0;
+            }
+        }
+    } while (*p++ != '\0');
+    return 1;
+}
+
+static int get_cert_by_subject(X509_LOOKUP *xl, X509_LOOKUP_TYPE type,
+                               X509_NAME *name, X509_OBJECT *ret)
+{
+    BY_DIR *ctx;
+    union {
+        X509 st_x509;
+        X509_CRL crl;
+    } data;
+    int ok = 0;
+    int i, j, k;
+    unsigned long h;
+    BUF_MEM *b = NULL;
+    X509_OBJECT stmp, *tmp;
+    const char *postfix = "";
+
+    if (name == NULL)
+        return 0;
+
+    stmp.type = type;
+    if (type == X509_LU_X509) {
+        data.st_x509.cert_info.subject = name;
+        stmp.data.x509 = &data.st_x509;
+        postfix = "";
+    } else if (type == X509_LU_CRL) {
+        data.crl.crl.issuer = name;
+        stmp.data.crl = &data.crl;
+        postfix = "r";
+    } else {
+        X509err(X509_F_GET_CERT_BY_SUBJECT, X509_R_WRONG_LOOKUP_TYPE);
+        goto finish;
+    }
+
+    if ((b = BUF_MEM_new()) == NULL) {
+        X509err(X509_F_GET_CERT_BY_SUBJECT, ERR_R_BUF_LIB);
+        goto finish;
+    }
+
+    ctx = (BY_DIR *)xl->method_data;
+
+    h = X509_NAME_hash(name);
+    for (i = 0; i < sk_BY_DIR_ENTRY_num(ctx->dirs); i++) {
+        BY_DIR_ENTRY *ent;
+        int idx;
+        BY_DIR_HASH htmp, *hent;
+
+        ent = sk_BY_DIR_ENTRY_value(ctx->dirs, i);
+        j = strlen(ent->dir) + 1 + 8 + 6 + 1 + 1;
+        if (!BUF_MEM_grow(b, j)) {
+            X509err(X509_F_GET_CERT_BY_SUBJECT, ERR_R_MALLOC_FAILURE);
+            goto finish;
+        }
+        if (type == X509_LU_CRL && ent->hashes) {
+            htmp.hash = h;
+            CRYPTO_THREAD_read_lock(ctx->lock);
+            idx = sk_BY_DIR_HASH_find(ent->hashes, &htmp);
+            if (idx >= 0) {
+                hent = sk_BY_DIR_HASH_value(ent->hashes, idx);
+                k = hent->suffix;
+            } else {
+                hent = NULL;
+                k = 0;
+            }
+            CRYPTO_THREAD_unlock(ctx->lock);
+        } else {
+            k = 0;
+            hent = NULL;
+        }
+        for (;;) {
+            char c = '/';
+#ifdef OPENSSL_SYS_VMS
+            c = ent->dir[strlen(ent->dir) - 1];
+            if (c != ':' && c != '>' && c != ']') {
+                /*
+                 * If no separator is present, we assume the directory
+                 * specifier is a logical name, and add a colon.  We really
+                 * should use better VMS routines for merging things like
+                 * this, but this will do for now... -- Richard Levitte
+                 */
+                c = ':';
+            } else {
+                c = '\0';
+            }
+#endif
+            if (c == '\0') {
+                /*
+                 * This is special.  When c == '\0', no directory separator
+                 * should be added.
+                 */
+                BIO_snprintf(b->data, b->max,
+                             "%s%08lx.%s%d", ent->dir, h, postfix, k);
+            } else {
+                BIO_snprintf(b->data, b->max,
+                             "%s%c%08lx.%s%d", ent->dir, c, h, postfix, k);
+            }
+#ifndef OPENSSL_NO_POSIX_IO
+# ifdef _WIN32
+#  define stat _stat
+# endif
+            {
+                struct stat st;
+                if (stat(b->data, &st) < 0)
+                    break;
+            }
+#endif
+            /* found one. */
+            if (type == X509_LU_X509) {
+                if ((X509_load_cert_file(xl, b->data, ent->dir_type)) == 0)
+                    break;
+            } else if (type == X509_LU_CRL) {
+                if ((X509_load_crl_file(xl, b->data, ent->dir_type)) == 0)
+                    break;
+            }
+            /* else case will caught higher up */
+            k++;
+        }
+
+        /*
+         * we have added it to the cache so now pull it out again
+         */
+        CRYPTO_THREAD_write_lock(ctx->lock);
+        j = sk_X509_OBJECT_find(xl->store_ctx->objs, &stmp);
+        tmp = sk_X509_OBJECT_value(xl->store_ctx->objs, j);
+        CRYPTO_THREAD_unlock(ctx->lock);
+
+        /* If a CRL, update the last file suffix added for this */
+
+        if (type == X509_LU_CRL) {
+            CRYPTO_THREAD_write_lock(ctx->lock);
+            /*
+             * Look for entry again in case another thread added an entry
+             * first.
+             */
+            if (hent == NULL) {
+                htmp.hash = h;
+                idx = sk_BY_DIR_HASH_find(ent->hashes, &htmp);
+                hent = sk_BY_DIR_HASH_value(ent->hashes, idx);
+            }
+            if (hent == NULL) {
+                hent = OPENSSL_malloc(sizeof(*hent));
+                if (hent == NULL) {
+                    CRYPTO_THREAD_unlock(ctx->lock);
+                    X509err(X509_F_GET_CERT_BY_SUBJECT, ERR_R_MALLOC_FAILURE);
+                    ok = 0;
+                    goto finish;
+                }
+                hent->hash = h;
+                hent->suffix = k;
+                if (!sk_BY_DIR_HASH_push(ent->hashes, hent)) {
+                    CRYPTO_THREAD_unlock(ctx->lock);
+                    OPENSSL_free(hent);
+                    X509err(X509_F_GET_CERT_BY_SUBJECT, ERR_R_MALLOC_FAILURE);
+                    ok = 0;
+                    goto finish;
+                }
+            } else if (hent->suffix < k) {
+                hent->suffix = k;
+            }
+
+            CRYPTO_THREAD_unlock(ctx->lock);
+
+        }
+
+        if (tmp != NULL) {
+            ok = 1;
+            ret->type = tmp->type;
+            memcpy(&ret->data, &tmp->data, sizeof(ret->data));
+
+            /*
+             * Clear any errors that might have been raised processing empty
+             * or malformed files.
+             */
+            ERR_clear_error();
+
+            goto finish;
+        }
+    }
+ finish:
+    BUF_MEM_free(b);
+    return ok;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/by_file.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/by_file.c
new file mode 100644
index 000000000..244512c93
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/by_file.c
@@ -0,0 +1,227 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include <errno.h>
+
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/x509.h>
+#include <openssl/pem.h>
+#include "x509_lcl.h"
+
+static int by_file_ctrl(X509_LOOKUP *ctx, int cmd, const char *argc,
+                        long argl, char **ret);
+static X509_LOOKUP_METHOD x509_file_lookup = {
+    "Load file into cache",
+    NULL,                       /* new_item */
+    NULL,                       /* free */
+    NULL,                       /* init */
+    NULL,                       /* shutdown */
+    by_file_ctrl,               /* ctrl */
+    NULL,                       /* get_by_subject */
+    NULL,                       /* get_by_issuer_serial */
+    NULL,                       /* get_by_fingerprint */
+    NULL,                       /* get_by_alias */
+};
+
+X509_LOOKUP_METHOD *X509_LOOKUP_file(void)
+{
+    return &x509_file_lookup;
+}
+
+static int by_file_ctrl(X509_LOOKUP *ctx, int cmd, const char *argp,
+                        long argl, char **ret)
+{
+    int ok = 0;
+    const char *file;
+
+    switch (cmd) {
+    case X509_L_FILE_LOAD:
+        if (argl == X509_FILETYPE_DEFAULT) {
+            file = ossl_safe_getenv(X509_get_default_cert_file_env());
+            if (file)
+                ok = (X509_load_cert_crl_file(ctx, file,
+                                              X509_FILETYPE_PEM) != 0);
+
+            else
+                ok = (X509_load_cert_crl_file
+                      (ctx, X509_get_default_cert_file(),
+                       X509_FILETYPE_PEM) != 0);
+
+            if (!ok) {
+                X509err(X509_F_BY_FILE_CTRL, X509_R_LOADING_DEFAULTS);
+            }
+        } else {
+            if (argl == X509_FILETYPE_PEM)
+                ok = (X509_load_cert_crl_file(ctx, argp,
+                                              X509_FILETYPE_PEM) != 0);
+            else
+                ok = (X509_load_cert_file(ctx, argp, (int)argl) != 0);
+        }
+        break;
+    }
+    return ok;
+}
+
+int X509_load_cert_file(X509_LOOKUP *ctx, const char *file, int type)
+{
+    int ret = 0;
+    BIO *in = NULL;
+    int i, count = 0;
+    X509 *x = NULL;
+
+    in = BIO_new(BIO_s_file());
+
+    if ((in == NULL) || (BIO_read_filename(in, file) <= 0)) {
+        X509err(X509_F_X509_LOAD_CERT_FILE, ERR_R_SYS_LIB);
+        goto err;
+    }
+
+    if (type == X509_FILETYPE_PEM) {
+        for (;;) {
+            x = PEM_read_bio_X509_AUX(in, NULL, NULL, "");
+            if (x == NULL) {
+                if ((ERR_GET_REASON(ERR_peek_last_error()) ==
+                     PEM_R_NO_START_LINE) && (count > 0)) {
+                    ERR_clear_error();
+                    break;
+                } else {
+                    X509err(X509_F_X509_LOAD_CERT_FILE, ERR_R_PEM_LIB);
+                    goto err;
+                }
+            }
+            i = X509_STORE_add_cert(ctx->store_ctx, x);
+            if (!i)
+                goto err;
+            count++;
+            X509_free(x);
+            x = NULL;
+        }
+        ret = count;
+    } else if (type == X509_FILETYPE_ASN1) {
+        x = d2i_X509_bio(in, NULL);
+        if (x == NULL) {
+            X509err(X509_F_X509_LOAD_CERT_FILE, ERR_R_ASN1_LIB);
+            goto err;
+        }
+        i = X509_STORE_add_cert(ctx->store_ctx, x);
+        if (!i)
+            goto err;
+        ret = i;
+    } else {
+        X509err(X509_F_X509_LOAD_CERT_FILE, X509_R_BAD_X509_FILETYPE);
+        goto err;
+    }
+    if (ret == 0)
+        X509err(X509_F_X509_LOAD_CERT_FILE, X509_R_NO_CERTIFICATE_FOUND);
+ err:
+    X509_free(x);
+    BIO_free(in);
+    return ret;
+}
+
+int X509_load_crl_file(X509_LOOKUP *ctx, const char *file, int type)
+{
+    int ret = 0;
+    BIO *in = NULL;
+    int i, count = 0;
+    X509_CRL *x = NULL;
+
+    in = BIO_new(BIO_s_file());
+
+    if ((in == NULL) || (BIO_read_filename(in, file) <= 0)) {
+        X509err(X509_F_X509_LOAD_CRL_FILE, ERR_R_SYS_LIB);
+        goto err;
+    }
+
+    if (type == X509_FILETYPE_PEM) {
+        for (;;) {
+            x = PEM_read_bio_X509_CRL(in, NULL, NULL, "");
+            if (x == NULL) {
+                if ((ERR_GET_REASON(ERR_peek_last_error()) ==
+                     PEM_R_NO_START_LINE) && (count > 0)) {
+                    ERR_clear_error();
+                    break;
+                } else {
+                    X509err(X509_F_X509_LOAD_CRL_FILE, ERR_R_PEM_LIB);
+                    goto err;
+                }
+            }
+            i = X509_STORE_add_crl(ctx->store_ctx, x);
+            if (!i)
+                goto err;
+            count++;
+            X509_CRL_free(x);
+            x = NULL;
+        }
+        ret = count;
+    } else if (type == X509_FILETYPE_ASN1) {
+        x = d2i_X509_CRL_bio(in, NULL);
+        if (x == NULL) {
+            X509err(X509_F_X509_LOAD_CRL_FILE, ERR_R_ASN1_LIB);
+            goto err;
+        }
+        i = X509_STORE_add_crl(ctx->store_ctx, x);
+        if (!i)
+            goto err;
+        ret = i;
+    } else {
+        X509err(X509_F_X509_LOAD_CRL_FILE, X509_R_BAD_X509_FILETYPE);
+        goto err;
+    }
+    if (ret == 0)
+        X509err(X509_F_X509_LOAD_CRL_FILE, X509_R_NO_CRL_FOUND);
+ err:
+    X509_CRL_free(x);
+    BIO_free(in);
+    return ret;
+}
+
+int X509_load_cert_crl_file(X509_LOOKUP *ctx, const char *file, int type)
+{
+    STACK_OF(X509_INFO) *inf;
+    X509_INFO *itmp;
+    BIO *in;
+    int i, count = 0;
+
+    if (type != X509_FILETYPE_PEM)
+        return X509_load_cert_file(ctx, file, type);
+    in = BIO_new_file(file, "r");
+    if (!in) {
+        X509err(X509_F_X509_LOAD_CERT_CRL_FILE, ERR_R_SYS_LIB);
+        return 0;
+    }
+    inf = PEM_X509_INFO_read_bio(in, NULL, NULL, "");
+    BIO_free(in);
+    if (!inf) {
+        X509err(X509_F_X509_LOAD_CERT_CRL_FILE, ERR_R_PEM_LIB);
+        return 0;
+    }
+    for (i = 0; i < sk_X509_INFO_num(inf); i++) {
+        itmp = sk_X509_INFO_value(inf, i);
+        if (itmp->x509) {
+            if (!X509_STORE_add_cert(ctx->store_ctx, itmp->x509))
+                goto err;
+            count++;
+        }
+        if (itmp->crl) {
+            if (!X509_STORE_add_crl(ctx->store_ctx, itmp->crl))
+                goto err;
+            count++;
+        }
+    }
+    if (count == 0)
+        X509err(X509_F_X509_LOAD_CERT_CRL_FILE,
+                X509_R_NO_CERTIFICATE_OR_CRL_FOUND);
+ err:
+    sk_X509_INFO_pop_free(inf, X509_INFO_free);
+    return count;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/t_crl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/t_crl.c
new file mode 100644
index 000000000..8e262912f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/t_crl.c
@@ -0,0 +1,94 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/bn.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+
+#ifndef OPENSSL_NO_STDIO
+int X509_CRL_print_fp(FILE *fp, X509_CRL *x)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        X509err(X509_F_X509_CRL_PRINT_FP, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = X509_CRL_print(b, x);
+    BIO_free(b);
+    return ret;
+}
+#endif
+
+int X509_CRL_print(BIO *out, X509_CRL *x)
+{
+  return X509_CRL_print_ex(out, x, XN_FLAG_COMPAT);
+}
+
+int X509_CRL_print_ex(BIO *out, X509_CRL *x, unsigned long nmflag)
+{
+    STACK_OF(X509_REVOKED) *rev;
+    X509_REVOKED *r;
+    const X509_ALGOR *sig_alg;
+    const ASN1_BIT_STRING *sig;
+    long l;
+    int i;
+
+    BIO_printf(out, "Certificate Revocation List (CRL):\n");
+    l = X509_CRL_get_version(x);
+    if (l >= 0 && l <= 1)
+        BIO_printf(out, "%8sVersion %ld (0x%lx)\n", "", l + 1, (unsigned long)l);
+    else
+        BIO_printf(out, "%8sVersion unknown (%ld)\n", "", l);
+    X509_CRL_get0_signature(x, &sig, &sig_alg);
+    BIO_puts(out, "    ");
+    X509_signature_print(out, sig_alg, NULL);
+    BIO_printf(out, "%8sIssuer: ", "");
+    X509_NAME_print_ex(out, X509_CRL_get_issuer(x), 0, nmflag);
+    BIO_puts(out, "\n");
+    BIO_printf(out, "%8sLast Update: ", "");
+    ASN1_TIME_print(out, X509_CRL_get0_lastUpdate(x));
+    BIO_printf(out, "\n%8sNext Update: ", "");
+    if (X509_CRL_get0_nextUpdate(x))
+        ASN1_TIME_print(out, X509_CRL_get0_nextUpdate(x));
+    else
+        BIO_printf(out, "NONE");
+    BIO_printf(out, "\n");
+
+    X509V3_extensions_print(out, "CRL extensions",
+                            X509_CRL_get0_extensions(x), 0, 8);
+
+    rev = X509_CRL_get_REVOKED(x);
+
+    if (sk_X509_REVOKED_num(rev) > 0)
+        BIO_printf(out, "Revoked Certificates:\n");
+    else
+        BIO_printf(out, "No Revoked Certificates.\n");
+
+    for (i = 0; i < sk_X509_REVOKED_num(rev); i++) {
+        r = sk_X509_REVOKED_value(rev, i);
+        BIO_printf(out, "    Serial Number: ");
+        i2a_ASN1_INTEGER(out, X509_REVOKED_get0_serialNumber(r));
+        BIO_printf(out, "\n        Revocation Date: ");
+        ASN1_TIME_print(out, X509_REVOKED_get0_revocationDate(r));
+        BIO_printf(out, "\n");
+        X509V3_extensions_print(out, "CRL entry extensions",
+                                X509_REVOKED_get0_extensions(r), 0, 8);
+    }
+    X509_signature_print(out, sig_alg, sig);
+
+    return 1;
+
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/t_req.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/t_req.c
new file mode 100644
index 000000000..2d4c591b7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/t_req.c
@@ -0,0 +1,210 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/bn.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/rsa.h>
+#include <openssl/dsa.h>
+
+#ifndef OPENSSL_NO_STDIO
+int X509_REQ_print_fp(FILE *fp, X509_REQ *x)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        X509err(X509_F_X509_REQ_PRINT_FP, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = X509_REQ_print(b, x);
+    BIO_free(b);
+    return ret;
+}
+#endif
+
+int X509_REQ_print_ex(BIO *bp, X509_REQ *x, unsigned long nmflags,
+                      unsigned long cflag)
+{
+    long l;
+    int i;
+    EVP_PKEY *pkey;
+    STACK_OF(X509_EXTENSION) *exts;
+    char mlch = ' ';
+    int nmindent = 0;
+
+    if ((nmflags & XN_FLAG_SEP_MASK) == XN_FLAG_SEP_MULTILINE) {
+        mlch = '\n';
+        nmindent = 12;
+    }
+
+    if (nmflags == X509_FLAG_COMPAT)
+        nmindent = 16;
+
+    if (!(cflag & X509_FLAG_NO_HEADER)) {
+        if (BIO_write(bp, "Certificate Request:\n", 21) <= 0)
+            goto err;
+        if (BIO_write(bp, "    Data:\n", 10) <= 0)
+            goto err;
+    }
+    if (!(cflag & X509_FLAG_NO_VERSION)) {
+        l = X509_REQ_get_version(x);
+        if (l >= 0 && l <= 2) {
+            if (BIO_printf(bp, "%8sVersion: %ld (0x%lx)\n", "", l + 1, (unsigned long)l) <= 0)
+                goto err;
+        } else {
+            if (BIO_printf(bp, "%8sVersion: Unknown (%ld)\n", "", l) <= 0)
+                goto err;
+        }
+    }
+    if (!(cflag & X509_FLAG_NO_SUBJECT)) {
+        if (BIO_printf(bp, "        Subject:%c", mlch) <= 0)
+            goto err;
+        if (X509_NAME_print_ex(bp, X509_REQ_get_subject_name(x),
+            nmindent, nmflags) < 0)
+            goto err;
+        if (BIO_write(bp, "\n", 1) <= 0)
+            goto err;
+    }
+    if (!(cflag & X509_FLAG_NO_PUBKEY)) {
+        X509_PUBKEY *xpkey;
+        ASN1_OBJECT *koid;
+        if (BIO_write(bp, "        Subject Public Key Info:\n", 33) <= 0)
+            goto err;
+        if (BIO_printf(bp, "%12sPublic Key Algorithm: ", "") <= 0)
+            goto err;
+        xpkey = X509_REQ_get_X509_PUBKEY(x);
+        X509_PUBKEY_get0_param(&koid, NULL, NULL, NULL, xpkey);
+        if (i2a_ASN1_OBJECT(bp, koid) <= 0)
+            goto err;
+        if (BIO_puts(bp, "\n") <= 0)
+            goto err;
+
+        pkey = X509_REQ_get0_pubkey(x);
+        if (pkey == NULL) {
+            if (BIO_printf(bp, "%12sUnable to load Public Key\n", "") <= 0)
+                goto err;
+            ERR_print_errors(bp);
+        } else {
+            if (EVP_PKEY_print_public(bp, pkey, 16, NULL) <= 0)
+                goto err;
+        }
+    }
+
+    if (!(cflag & X509_FLAG_NO_ATTRIBUTES)) {
+        /* may not be */
+        if (BIO_printf(bp, "%8sAttributes:\n", "") <= 0)
+            goto err;
+
+        if (X509_REQ_get_attr_count(x) == 0) {
+            if (BIO_printf(bp, "%12sa0:00\n", "") <= 0)
+                goto err;
+        } else {
+            for (i = 0; i < X509_REQ_get_attr_count(x); i++) {
+                ASN1_TYPE *at;
+                X509_ATTRIBUTE *a;
+                ASN1_BIT_STRING *bs = NULL;
+                ASN1_OBJECT *aobj;
+                int j, type = 0, count = 1, ii = 0;
+
+                a = X509_REQ_get_attr(x, i);
+                aobj = X509_ATTRIBUTE_get0_object(a);
+                if (X509_REQ_extension_nid(OBJ_obj2nid(aobj)))
+                    continue;
+                if (BIO_printf(bp, "%12s", "") <= 0)
+                    goto err;
+                if ((j = i2a_ASN1_OBJECT(bp, aobj)) > 0) {
+                    ii = 0;
+                    count = X509_ATTRIBUTE_count(a);
+ get_next:
+                    at = X509_ATTRIBUTE_get0_type(a, ii);
+                    type = at->type;
+                    bs = at->value.asn1_string;
+                }
+                for (j = 25 - j; j > 0; j--)
+                    if (BIO_write(bp, " ", 1) != 1)
+                        goto err;
+                if (BIO_puts(bp, ":") <= 0)
+                    goto err;
+                switch (type) {
+                case V_ASN1_PRINTABLESTRING:
+                case V_ASN1_T61STRING:
+                case V_ASN1_NUMERICSTRING:
+                case V_ASN1_UTF8STRING:
+                case V_ASN1_IA5STRING:
+                    if (BIO_write(bp, (char *)bs->data, bs->length)
+                            != bs->length)
+                        goto err;
+                    if (BIO_puts(bp, "\n") <= 0)
+                        goto err;
+                    break;
+                default:
+                    if (BIO_puts(bp, "unable to print attribute\n") <= 0)
+                        goto err;
+                    break;
+                }
+                if (++ii < count)
+                    goto get_next;
+            }
+        }
+    }
+    if (!(cflag & X509_FLAG_NO_EXTENSIONS)) {
+        exts = X509_REQ_get_extensions(x);
+        if (exts) {
+            if (BIO_printf(bp, "%8sRequested Extensions:\n", "") <= 0)
+                goto err;
+            for (i = 0; i < sk_X509_EXTENSION_num(exts); i++) {
+                ASN1_OBJECT *obj;
+                X509_EXTENSION *ex;
+                int critical;
+                ex = sk_X509_EXTENSION_value(exts, i);
+                if (BIO_printf(bp, "%12s", "") <= 0)
+                    goto err;
+                obj = X509_EXTENSION_get_object(ex);
+                if (i2a_ASN1_OBJECT(bp, obj) <= 0)
+                    goto err;
+                critical = X509_EXTENSION_get_critical(ex);
+                if (BIO_printf(bp, ": %s\n", critical ? "critical" : "") <= 0)
+                    goto err;
+                if (!X509V3_EXT_print(bp, ex, cflag, 16)) {
+                    if (BIO_printf(bp, "%16s", "") <= 0
+                        || ASN1_STRING_print(bp,
+                                             X509_EXTENSION_get_data(ex)) <= 0)
+                        goto err;
+                }
+                if (BIO_write(bp, "\n", 1) <= 0)
+                    goto err;
+            }
+            sk_X509_EXTENSION_pop_free(exts, X509_EXTENSION_free);
+        }
+    }
+
+    if (!(cflag & X509_FLAG_NO_SIGDUMP)) {
+        const X509_ALGOR *sig_alg;
+        const ASN1_BIT_STRING *sig;
+        X509_REQ_get0_signature(x, &sig, &sig_alg);
+        if (!X509_signature_print(bp, sig_alg, sig))
+            goto err;
+    }
+
+    return 1;
+ err:
+    X509err(X509_F_X509_REQ_PRINT_EX, ERR_R_BUF_LIB);
+    return 0;
+}
+
+int X509_REQ_print(BIO *bp, X509_REQ *x)
+{
+    return X509_REQ_print_ex(bp, x, XN_FLAG_COMPAT, X509_FLAG_COMPAT);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/t_x509.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/t_x509.c
new file mode 100644
index 000000000..ccacbe7cb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/t_x509.c
@@ -0,0 +1,379 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/bn.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include "internal/asn1_int.h"
+
+#ifndef OPENSSL_NO_STDIO
+int X509_print_fp(FILE *fp, X509 *x)
+{
+    return X509_print_ex_fp(fp, x, XN_FLAG_COMPAT, X509_FLAG_COMPAT);
+}
+
+int X509_print_ex_fp(FILE *fp, X509 *x, unsigned long nmflag,
+                     unsigned long cflag)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        X509err(X509_F_X509_PRINT_EX_FP, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = X509_print_ex(b, x, nmflag, cflag);
+    BIO_free(b);
+    return ret;
+}
+#endif
+
+int X509_print(BIO *bp, X509 *x)
+{
+    return X509_print_ex(bp, x, XN_FLAG_COMPAT, X509_FLAG_COMPAT);
+}
+
+int X509_print_ex(BIO *bp, X509 *x, unsigned long nmflags,
+                  unsigned long cflag)
+{
+    long l;
+    int ret = 0, i;
+    char *m = NULL, mlch = ' ';
+    int nmindent = 0;
+    ASN1_INTEGER *bs;
+    EVP_PKEY *pkey = NULL;
+    const char *neg;
+
+    if ((nmflags & XN_FLAG_SEP_MASK) == XN_FLAG_SEP_MULTILINE) {
+        mlch = '\n';
+        nmindent = 12;
+    }
+
+    if (nmflags == X509_FLAG_COMPAT)
+        nmindent = 16;
+
+    if (!(cflag & X509_FLAG_NO_HEADER)) {
+        if (BIO_write(bp, "Certificate:\n", 13) <= 0)
+            goto err;
+        if (BIO_write(bp, "    Data:\n", 10) <= 0)
+            goto err;
+    }
+    if (!(cflag & X509_FLAG_NO_VERSION)) {
+        l = X509_get_version(x);
+        if (l >= 0 && l <= 2) {
+            if (BIO_printf(bp, "%8sVersion: %ld (0x%lx)\n", "", l + 1, (unsigned long)l) <= 0)
+                goto err;
+        } else {
+            if (BIO_printf(bp, "%8sVersion: Unknown (%ld)\n", "", l) <= 0)
+                goto err;
+        }
+    }
+    if (!(cflag & X509_FLAG_NO_SERIAL)) {
+
+        if (BIO_write(bp, "        Serial Number:", 22) <= 0)
+            goto err;
+
+        bs = X509_get_serialNumber(x);
+        if (bs->length <= (int)sizeof(long)) {
+                ERR_set_mark();
+                l = ASN1_INTEGER_get(bs);
+                ERR_pop_to_mark();
+        } else {
+            l = -1;
+        }
+        if (l != -1) {
+            unsigned long ul;
+            if (bs->type == V_ASN1_NEG_INTEGER) {
+                ul = 0 - (unsigned long)l;
+                neg = "-";
+            } else {
+                ul = l;
+                neg = "";
+            }
+            if (BIO_printf(bp, " %s%lu (%s0x%lx)\n", neg, ul, neg, ul) <= 0)
+                goto err;
+        } else {
+            neg = (bs->type == V_ASN1_NEG_INTEGER) ? " (Negative)" : "";
+            if (BIO_printf(bp, "\n%12s%s", "", neg) <= 0)
+                goto err;
+
+            for (i = 0; i < bs->length; i++) {
+                if (BIO_printf(bp, "%02x%c", bs->data[i],
+                               ((i + 1 == bs->length) ? '\n' : ':')) <= 0)
+                    goto err;
+            }
+        }
+
+    }
+
+    if (!(cflag & X509_FLAG_NO_SIGNAME)) {
+        const X509_ALGOR *tsig_alg = X509_get0_tbs_sigalg(x);
+
+        if (BIO_puts(bp, "    ") <= 0)
+            goto err;
+        if (X509_signature_print(bp, tsig_alg, NULL) <= 0)
+            goto err;
+    }
+
+    if (!(cflag & X509_FLAG_NO_ISSUER)) {
+        if (BIO_printf(bp, "        Issuer:%c", mlch) <= 0)
+            goto err;
+        if (X509_NAME_print_ex(bp, X509_get_issuer_name(x), nmindent, nmflags)
+            < 0)
+            goto err;
+        if (BIO_write(bp, "\n", 1) <= 0)
+            goto err;
+    }
+    if (!(cflag & X509_FLAG_NO_VALIDITY)) {
+        if (BIO_write(bp, "        Validity\n", 17) <= 0)
+            goto err;
+        if (BIO_write(bp, "            Not Before: ", 24) <= 0)
+            goto err;
+        if (!ASN1_TIME_print(bp, X509_get0_notBefore(x)))
+            goto err;
+        if (BIO_write(bp, "\n            Not After : ", 25) <= 0)
+            goto err;
+        if (!ASN1_TIME_print(bp, X509_get0_notAfter(x)))
+            goto err;
+        if (BIO_write(bp, "\n", 1) <= 0)
+            goto err;
+    }
+    if (!(cflag & X509_FLAG_NO_SUBJECT)) {
+        if (BIO_printf(bp, "        Subject:%c", mlch) <= 0)
+            goto err;
+        if (X509_NAME_print_ex
+            (bp, X509_get_subject_name(x), nmindent, nmflags) < 0)
+            goto err;
+        if (BIO_write(bp, "\n", 1) <= 0)
+            goto err;
+    }
+    if (!(cflag & X509_FLAG_NO_PUBKEY)) {
+        X509_PUBKEY *xpkey = X509_get_X509_PUBKEY(x);
+        ASN1_OBJECT *xpoid;
+        X509_PUBKEY_get0_param(&xpoid, NULL, NULL, NULL, xpkey);
+        if (BIO_write(bp, "        Subject Public Key Info:\n", 33) <= 0)
+            goto err;
+        if (BIO_printf(bp, "%12sPublic Key Algorithm: ", "") <= 0)
+            goto err;
+        if (i2a_ASN1_OBJECT(bp, xpoid) <= 0)
+            goto err;
+        if (BIO_puts(bp, "\n") <= 0)
+            goto err;
+
+        pkey = X509_get0_pubkey(x);
+        if (pkey == NULL) {
+            BIO_printf(bp, "%12sUnable to load Public Key\n", "");
+            ERR_print_errors(bp);
+        } else {
+            EVP_PKEY_print_public(bp, pkey, 16, NULL);
+        }
+    }
+
+    if (!(cflag & X509_FLAG_NO_IDS)) {
+        const ASN1_BIT_STRING *iuid, *suid;
+        X509_get0_uids(x, &iuid, &suid);
+        if (iuid != NULL) {
+            if (BIO_printf(bp, "%8sIssuer Unique ID: ", "") <= 0)
+                goto err;
+            if (!X509_signature_dump(bp, iuid, 12))
+                goto err;
+        }
+        if (suid != NULL) {
+            if (BIO_printf(bp, "%8sSubject Unique ID: ", "") <= 0)
+                goto err;
+            if (!X509_signature_dump(bp, suid, 12))
+                goto err;
+        }
+    }
+
+    if (!(cflag & X509_FLAG_NO_EXTENSIONS))
+        X509V3_extensions_print(bp, "X509v3 extensions",
+                                X509_get0_extensions(x), cflag, 8);
+
+    if (!(cflag & X509_FLAG_NO_SIGDUMP)) {
+        const X509_ALGOR *sig_alg;
+        const ASN1_BIT_STRING *sig;
+        X509_get0_signature(&sig, &sig_alg, x);
+        if (X509_signature_print(bp, sig_alg, sig) <= 0)
+            goto err;
+    }
+    if (!(cflag & X509_FLAG_NO_AUX)) {
+        if (!X509_aux_print(bp, x, 0))
+            goto err;
+    }
+    ret = 1;
+ err:
+    OPENSSL_free(m);
+    return ret;
+}
+
+int X509_ocspid_print(BIO *bp, X509 *x)
+{
+    unsigned char *der = NULL;
+    unsigned char *dertmp;
+    int derlen;
+    int i;
+    unsigned char SHA1md[SHA_DIGEST_LENGTH];
+    ASN1_BIT_STRING *keybstr;
+    X509_NAME *subj;
+
+    /*
+     * display the hash of the subject as it would appear in OCSP requests
+     */
+    if (BIO_printf(bp, "        Subject OCSP hash: ") <= 0)
+        goto err;
+    subj = X509_get_subject_name(x);
+    derlen = i2d_X509_NAME(subj, NULL);
+    if ((der = dertmp = OPENSSL_malloc(derlen)) == NULL)
+        goto err;
+    i2d_X509_NAME(subj, &dertmp);
+
+    if (!EVP_Digest(der, derlen, SHA1md, NULL, EVP_sha1(), NULL))
+        goto err;
+    for (i = 0; i < SHA_DIGEST_LENGTH; i++) {
+        if (BIO_printf(bp, "%02X", SHA1md[i]) <= 0)
+            goto err;
+    }
+    OPENSSL_free(der);
+    der = NULL;
+
+    /*
+     * display the hash of the public key as it would appear in OCSP requests
+     */
+    if (BIO_printf(bp, "\n        Public key OCSP hash: ") <= 0)
+        goto err;
+
+    keybstr = X509_get0_pubkey_bitstr(x);
+
+    if (keybstr == NULL)
+        goto err;
+
+    if (!EVP_Digest(ASN1_STRING_get0_data(keybstr),
+                    ASN1_STRING_length(keybstr), SHA1md, NULL, EVP_sha1(),
+                    NULL))
+        goto err;
+    for (i = 0; i < SHA_DIGEST_LENGTH; i++) {
+        if (BIO_printf(bp, "%02X", SHA1md[i]) <= 0)
+            goto err;
+    }
+    BIO_printf(bp, "\n");
+
+    return 1;
+ err:
+    OPENSSL_free(der);
+    return 0;
+}
+
+int X509_signature_dump(BIO *bp, const ASN1_STRING *sig, int indent)
+{
+    const unsigned char *s;
+    int i, n;
+
+    n = sig->length;
+    s = sig->data;
+    for (i = 0; i < n; i++) {
+        if ((i % 18) == 0) {
+            if (BIO_write(bp, "\n", 1) <= 0)
+                return 0;
+            if (BIO_indent(bp, indent, indent) <= 0)
+                return 0;
+        }
+        if (BIO_printf(bp, "%02x%s", s[i], ((i + 1) == n) ? "" : ":") <= 0)
+            return 0;
+    }
+    if (BIO_write(bp, "\n", 1) != 1)
+        return 0;
+
+    return 1;
+}
+
+int X509_signature_print(BIO *bp, const X509_ALGOR *sigalg,
+                         const ASN1_STRING *sig)
+{
+    int sig_nid;
+    if (BIO_puts(bp, "    Signature Algorithm: ") <= 0)
+        return 0;
+    if (i2a_ASN1_OBJECT(bp, sigalg->algorithm) <= 0)
+        return 0;
+
+    sig_nid = OBJ_obj2nid(sigalg->algorithm);
+    if (sig_nid != NID_undef) {
+        int pkey_nid, dig_nid;
+        const EVP_PKEY_ASN1_METHOD *ameth;
+        if (OBJ_find_sigid_algs(sig_nid, &dig_nid, &pkey_nid)) {
+            ameth = EVP_PKEY_asn1_find(NULL, pkey_nid);
+            if (ameth && ameth->sig_print)
+                return ameth->sig_print(bp, sigalg, sig, 9, 0);
+        }
+    }
+    if (sig)
+        return X509_signature_dump(bp, sig, 9);
+    else if (BIO_puts(bp, "\n") <= 0)
+        return 0;
+    return 1;
+}
+
+int X509_aux_print(BIO *out, X509 *x, int indent)
+{
+    char oidstr[80], first;
+    STACK_OF(ASN1_OBJECT) *trust, *reject;
+    const unsigned char *alias, *keyid;
+    int keyidlen;
+    int i;
+    if (X509_trusted(x) == 0)
+        return 1;
+    trust = X509_get0_trust_objects(x);
+    reject = X509_get0_reject_objects(x);
+    if (trust) {
+        first = 1;
+        BIO_printf(out, "%*sTrusted Uses:\n%*s", indent, "", indent + 2, "");
+        for (i = 0; i < sk_ASN1_OBJECT_num(trust); i++) {
+            if (!first)
+                BIO_puts(out, ", ");
+            else
+                first = 0;
+            OBJ_obj2txt(oidstr, sizeof(oidstr),
+                        sk_ASN1_OBJECT_value(trust, i), 0);
+            BIO_puts(out, oidstr);
+        }
+        BIO_puts(out, "\n");
+    } else
+        BIO_printf(out, "%*sNo Trusted Uses.\n", indent, "");
+    if (reject) {
+        first = 1;
+        BIO_printf(out, "%*sRejected Uses:\n%*s", indent, "", indent + 2, "");
+        for (i = 0; i < sk_ASN1_OBJECT_num(reject); i++) {
+            if (!first)
+                BIO_puts(out, ", ");
+            else
+                first = 0;
+            OBJ_obj2txt(oidstr, sizeof(oidstr),
+                        sk_ASN1_OBJECT_value(reject, i), 0);
+            BIO_puts(out, oidstr);
+        }
+        BIO_puts(out, "\n");
+    } else
+        BIO_printf(out, "%*sNo Rejected Uses.\n", indent, "");
+    alias = X509_alias_get0(x, NULL);
+    if (alias)
+        BIO_printf(out, "%*sAlias: %s\n", indent, "", alias);
+    keyid = X509_keyid_get0(x, &keyidlen);
+    if (keyid) {
+        BIO_printf(out, "%*sKey Id: ", indent, "");
+        for (i = 0; i < keyidlen; i++)
+            BIO_printf(out, "%s%02X", i ? ":" : "", keyid[i]);
+        BIO_write(out, "\n", 1);
+    }
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_att.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_att.c
new file mode 100644
index 000000000..63895efe4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_att.c
@@ -0,0 +1,329 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/safestack.h>
+#include <openssl/asn1.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include "x509_lcl.h"
+
+int X509at_get_attr_count(const STACK_OF(X509_ATTRIBUTE) *x)
+{
+    return sk_X509_ATTRIBUTE_num(x);
+}
+
+int X509at_get_attr_by_NID(const STACK_OF(X509_ATTRIBUTE) *x, int nid,
+                           int lastpos)
+{
+    const ASN1_OBJECT *obj = OBJ_nid2obj(nid);
+
+    if (obj == NULL)
+        return -2;
+    return X509at_get_attr_by_OBJ(x, obj, lastpos);
+}
+
+int X509at_get_attr_by_OBJ(const STACK_OF(X509_ATTRIBUTE) *sk,
+                           const ASN1_OBJECT *obj, int lastpos)
+{
+    int n;
+    X509_ATTRIBUTE *ex;
+
+    if (sk == NULL)
+        return -1;
+    lastpos++;
+    if (lastpos < 0)
+        lastpos = 0;
+    n = sk_X509_ATTRIBUTE_num(sk);
+    for (; lastpos < n; lastpos++) {
+        ex = sk_X509_ATTRIBUTE_value(sk, lastpos);
+        if (OBJ_cmp(ex->object, obj) == 0)
+            return lastpos;
+    }
+    return -1;
+}
+
+X509_ATTRIBUTE *X509at_get_attr(const STACK_OF(X509_ATTRIBUTE) *x, int loc)
+{
+    if (x == NULL || sk_X509_ATTRIBUTE_num(x) <= loc || loc < 0)
+        return NULL;
+
+    return sk_X509_ATTRIBUTE_value(x, loc);
+}
+
+X509_ATTRIBUTE *X509at_delete_attr(STACK_OF(X509_ATTRIBUTE) *x, int loc)
+{
+    X509_ATTRIBUTE *ret;
+
+    if (x == NULL || sk_X509_ATTRIBUTE_num(x) <= loc || loc < 0)
+        return NULL;
+    ret = sk_X509_ATTRIBUTE_delete(x, loc);
+    return ret;
+}
+
+STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr(STACK_OF(X509_ATTRIBUTE) **x,
+                                           X509_ATTRIBUTE *attr)
+{
+    X509_ATTRIBUTE *new_attr = NULL;
+    STACK_OF(X509_ATTRIBUTE) *sk = NULL;
+
+    if (x == NULL) {
+        X509err(X509_F_X509AT_ADD1_ATTR, ERR_R_PASSED_NULL_PARAMETER);
+        goto err2;
+    }
+
+    if (*x == NULL) {
+        if ((sk = sk_X509_ATTRIBUTE_new_null()) == NULL)
+            goto err;
+    } else
+        sk = *x;
+
+    if ((new_attr = X509_ATTRIBUTE_dup(attr)) == NULL)
+        goto err2;
+    if (!sk_X509_ATTRIBUTE_push(sk, new_attr))
+        goto err;
+    if (*x == NULL)
+        *x = sk;
+    return sk;
+ err:
+    X509err(X509_F_X509AT_ADD1_ATTR, ERR_R_MALLOC_FAILURE);
+ err2:
+    X509_ATTRIBUTE_free(new_attr);
+    sk_X509_ATTRIBUTE_free(sk);
+    return NULL;
+}
+
+STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_OBJ(STACK_OF(X509_ATTRIBUTE)
+                                                  **x, const ASN1_OBJECT *obj,
+                                                  int type,
+                                                  const unsigned char *bytes,
+                                                  int len)
+{
+    X509_ATTRIBUTE *attr;
+    STACK_OF(X509_ATTRIBUTE) *ret;
+    attr = X509_ATTRIBUTE_create_by_OBJ(NULL, obj, type, bytes, len);
+    if (!attr)
+        return 0;
+    ret = X509at_add1_attr(x, attr);
+    X509_ATTRIBUTE_free(attr);
+    return ret;
+}
+
+STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_NID(STACK_OF(X509_ATTRIBUTE)
+                                                  **x, int nid, int type,
+                                                  const unsigned char *bytes,
+                                                  int len)
+{
+    X509_ATTRIBUTE *attr;
+    STACK_OF(X509_ATTRIBUTE) *ret;
+    attr = X509_ATTRIBUTE_create_by_NID(NULL, nid, type, bytes, len);
+    if (!attr)
+        return 0;
+    ret = X509at_add1_attr(x, attr);
+    X509_ATTRIBUTE_free(attr);
+    return ret;
+}
+
+STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_txt(STACK_OF(X509_ATTRIBUTE)
+                                                  **x, const char *attrname,
+                                                  int type,
+                                                  const unsigned char *bytes,
+                                                  int len)
+{
+    X509_ATTRIBUTE *attr;
+    STACK_OF(X509_ATTRIBUTE) *ret;
+    attr = X509_ATTRIBUTE_create_by_txt(NULL, attrname, type, bytes, len);
+    if (!attr)
+        return 0;
+    ret = X509at_add1_attr(x, attr);
+    X509_ATTRIBUTE_free(attr);
+    return ret;
+}
+
+void *X509at_get0_data_by_OBJ(STACK_OF(X509_ATTRIBUTE) *x,
+                              const ASN1_OBJECT *obj, int lastpos, int type)
+{
+    int i;
+    X509_ATTRIBUTE *at;
+    i = X509at_get_attr_by_OBJ(x, obj, lastpos);
+    if (i == -1)
+        return NULL;
+    if ((lastpos <= -2) && (X509at_get_attr_by_OBJ(x, obj, i) != -1))
+        return NULL;
+    at = X509at_get_attr(x, i);
+    if (lastpos <= -3 && (X509_ATTRIBUTE_count(at) != 1))
+        return NULL;
+    return X509_ATTRIBUTE_get0_data(at, 0, type, NULL);
+}
+
+X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_NID(X509_ATTRIBUTE **attr, int nid,
+                                             int atrtype, const void *data,
+                                             int len)
+{
+    ASN1_OBJECT *obj;
+    X509_ATTRIBUTE *ret;
+
+    obj = OBJ_nid2obj(nid);
+    if (obj == NULL) {
+        X509err(X509_F_X509_ATTRIBUTE_CREATE_BY_NID, X509_R_UNKNOWN_NID);
+        return NULL;
+    }
+    ret = X509_ATTRIBUTE_create_by_OBJ(attr, obj, atrtype, data, len);
+    if (ret == NULL)
+        ASN1_OBJECT_free(obj);
+    return ret;
+}
+
+X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_OBJ(X509_ATTRIBUTE **attr,
+                                             const ASN1_OBJECT *obj,
+                                             int atrtype, const void *data,
+                                             int len)
+{
+    X509_ATTRIBUTE *ret;
+
+    if ((attr == NULL) || (*attr == NULL)) {
+        if ((ret = X509_ATTRIBUTE_new()) == NULL) {
+            X509err(X509_F_X509_ATTRIBUTE_CREATE_BY_OBJ,
+                    ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+    } else
+        ret = *attr;
+
+    if (!X509_ATTRIBUTE_set1_object(ret, obj))
+        goto err;
+    if (!X509_ATTRIBUTE_set1_data(ret, atrtype, data, len))
+        goto err;
+
+    if ((attr != NULL) && (*attr == NULL))
+        *attr = ret;
+    return ret;
+ err:
+    if ((attr == NULL) || (ret != *attr))
+        X509_ATTRIBUTE_free(ret);
+    return NULL;
+}
+
+X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_txt(X509_ATTRIBUTE **attr,
+                                             const char *atrname, int type,
+                                             const unsigned char *bytes,
+                                             int len)
+{
+    ASN1_OBJECT *obj;
+    X509_ATTRIBUTE *nattr;
+
+    obj = OBJ_txt2obj(atrname, 0);
+    if (obj == NULL) {
+        X509err(X509_F_X509_ATTRIBUTE_CREATE_BY_TXT,
+                X509_R_INVALID_FIELD_NAME);
+        ERR_add_error_data(2, "name=", atrname);
+        return NULL;
+    }
+    nattr = X509_ATTRIBUTE_create_by_OBJ(attr, obj, type, bytes, len);
+    ASN1_OBJECT_free(obj);
+    return nattr;
+}
+
+int X509_ATTRIBUTE_set1_object(X509_ATTRIBUTE *attr, const ASN1_OBJECT *obj)
+{
+    if ((attr == NULL) || (obj == NULL))
+        return 0;
+    ASN1_OBJECT_free(attr->object);
+    attr->object = OBJ_dup(obj);
+    return attr->object != NULL;
+}
+
+int X509_ATTRIBUTE_set1_data(X509_ATTRIBUTE *attr, int attrtype,
+                             const void *data, int len)
+{
+    ASN1_TYPE *ttmp = NULL;
+    ASN1_STRING *stmp = NULL;
+    int atype = 0;
+    if (!attr)
+        return 0;
+    if (attrtype & MBSTRING_FLAG) {
+        stmp = ASN1_STRING_set_by_NID(NULL, data, len, attrtype,
+                                      OBJ_obj2nid(attr->object));
+        if (!stmp) {
+            X509err(X509_F_X509_ATTRIBUTE_SET1_DATA, ERR_R_ASN1_LIB);
+            return 0;
+        }
+        atype = stmp->type;
+    } else if (len != -1) {
+        if ((stmp = ASN1_STRING_type_new(attrtype)) == NULL)
+            goto err;
+        if (!ASN1_STRING_set(stmp, data, len))
+            goto err;
+        atype = attrtype;
+    }
+    /*
+     * This is a bit naughty because the attribute should really have at
+     * least one value but some types use and zero length SET and require
+     * this.
+     */
+    if (attrtype == 0) {
+        ASN1_STRING_free(stmp);
+        return 1;
+    }
+    if ((ttmp = ASN1_TYPE_new()) == NULL)
+        goto err;
+    if ((len == -1) && !(attrtype & MBSTRING_FLAG)) {
+        if (!ASN1_TYPE_set1(ttmp, attrtype, data))
+            goto err;
+    } else {
+        ASN1_TYPE_set(ttmp, atype, stmp);
+        stmp = NULL;
+    }
+    if (!sk_ASN1_TYPE_push(attr->set, ttmp))
+        goto err;
+    return 1;
+ err:
+    X509err(X509_F_X509_ATTRIBUTE_SET1_DATA, ERR_R_MALLOC_FAILURE);
+    ASN1_TYPE_free(ttmp);
+    ASN1_STRING_free(stmp);
+    return 0;
+}
+
+int X509_ATTRIBUTE_count(const X509_ATTRIBUTE *attr)
+{
+    if (attr == NULL)
+        return 0;
+    return sk_ASN1_TYPE_num(attr->set);
+}
+
+ASN1_OBJECT *X509_ATTRIBUTE_get0_object(X509_ATTRIBUTE *attr)
+{
+    if (attr == NULL)
+        return NULL;
+    return attr->object;
+}
+
+void *X509_ATTRIBUTE_get0_data(X509_ATTRIBUTE *attr, int idx,
+                               int atrtype, void *data)
+{
+    ASN1_TYPE *ttmp;
+    ttmp = X509_ATTRIBUTE_get0_type(attr, idx);
+    if (!ttmp)
+        return NULL;
+    if (atrtype != ASN1_TYPE_get(ttmp)) {
+        X509err(X509_F_X509_ATTRIBUTE_GET0_DATA, X509_R_WRONG_TYPE);
+        return NULL;
+    }
+    return ttmp->value.ptr;
+}
+
+ASN1_TYPE *X509_ATTRIBUTE_get0_type(X509_ATTRIBUTE *attr, int idx)
+{
+    if (attr == NULL)
+        return NULL;
+    return sk_ASN1_TYPE_value(attr->set, idx);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_cmp.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_cmp.c
new file mode 100644
index 000000000..02fad0c67
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_cmp.c
@@ -0,0 +1,458 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include "internal/x509_int.h"
+
+int X509_issuer_and_serial_cmp(const X509 *a, const X509 *b)
+{
+    int i;
+    const X509_CINF *ai, *bi;
+
+    ai = &a->cert_info;
+    bi = &b->cert_info;
+    i = ASN1_INTEGER_cmp(&ai->serialNumber, &bi->serialNumber);
+    if (i)
+        return i;
+    return X509_NAME_cmp(ai->issuer, bi->issuer);
+}
+
+#ifndef OPENSSL_NO_MD5
+unsigned long X509_issuer_and_serial_hash(X509 *a)
+{
+    unsigned long ret = 0;
+    EVP_MD_CTX *ctx = EVP_MD_CTX_new();
+    unsigned char md[16];
+    char *f;
+
+    if (ctx == NULL)
+        goto err;
+    f = X509_NAME_oneline(a->cert_info.issuer, NULL, 0);
+    if (!EVP_DigestInit_ex(ctx, EVP_md5(), NULL))
+        goto err;
+    if (!EVP_DigestUpdate(ctx, (unsigned char *)f, strlen(f)))
+        goto err;
+    OPENSSL_free(f);
+    if (!EVP_DigestUpdate
+        (ctx, (unsigned char *)a->cert_info.serialNumber.data,
+         (unsigned long)a->cert_info.serialNumber.length))
+        goto err;
+    if (!EVP_DigestFinal_ex(ctx, &(md[0]), NULL))
+        goto err;
+    ret = (((unsigned long)md[0]) | ((unsigned long)md[1] << 8L) |
+           ((unsigned long)md[2] << 16L) | ((unsigned long)md[3] << 24L)
+        ) & 0xffffffffL;
+ err:
+    EVP_MD_CTX_free(ctx);
+    return ret;
+}
+#endif
+
+int X509_issuer_name_cmp(const X509 *a, const X509 *b)
+{
+    return X509_NAME_cmp(a->cert_info.issuer, b->cert_info.issuer);
+}
+
+int X509_subject_name_cmp(const X509 *a, const X509 *b)
+{
+    return X509_NAME_cmp(a->cert_info.subject, b->cert_info.subject);
+}
+
+int X509_CRL_cmp(const X509_CRL *a, const X509_CRL *b)
+{
+    return X509_NAME_cmp(a->crl.issuer, b->crl.issuer);
+}
+
+int X509_CRL_match(const X509_CRL *a, const X509_CRL *b)
+{
+    return memcmp(a->sha1_hash, b->sha1_hash, 20);
+}
+
+X509_NAME *X509_get_issuer_name(const X509 *a)
+{
+    return a->cert_info.issuer;
+}
+
+unsigned long X509_issuer_name_hash(X509 *x)
+{
+    return X509_NAME_hash(x->cert_info.issuer);
+}
+
+#ifndef OPENSSL_NO_MD5
+unsigned long X509_issuer_name_hash_old(X509 *x)
+{
+    return X509_NAME_hash_old(x->cert_info.issuer);
+}
+#endif
+
+X509_NAME *X509_get_subject_name(const X509 *a)
+{
+    return a->cert_info.subject;
+}
+
+ASN1_INTEGER *X509_get_serialNumber(X509 *a)
+{
+    return &a->cert_info.serialNumber;
+}
+
+const ASN1_INTEGER *X509_get0_serialNumber(const X509 *a)
+{
+    return &a->cert_info.serialNumber;
+}
+
+unsigned long X509_subject_name_hash(X509 *x)
+{
+    return X509_NAME_hash(x->cert_info.subject);
+}
+
+#ifndef OPENSSL_NO_MD5
+unsigned long X509_subject_name_hash_old(X509 *x)
+{
+    return X509_NAME_hash_old(x->cert_info.subject);
+}
+#endif
+
+/*
+ * Compare two certificates: they must be identical for this to work. NB:
+ * Although "cmp" operations are generally prototyped to take "const"
+ * arguments (eg. for use in STACKs), the way X509 handling is - these
+ * operations may involve ensuring the hashes are up-to-date and ensuring
+ * certain cert information is cached. So this is the point where the
+ * "depth-first" constification tree has to halt with an evil cast.
+ */
+int X509_cmp(const X509 *a, const X509 *b)
+{
+    int rv;
+    /* ensure hash is valid */
+    X509_check_purpose((X509 *)a, -1, 0);
+    X509_check_purpose((X509 *)b, -1, 0);
+
+    rv = memcmp(a->sha1_hash, b->sha1_hash, SHA_DIGEST_LENGTH);
+    if (rv)
+        return rv;
+    /* Check for match against stored encoding too */
+    if (!a->cert_info.enc.modified && !b->cert_info.enc.modified) {
+        if (a->cert_info.enc.len < b->cert_info.enc.len)
+            return -1;
+        if (a->cert_info.enc.len > b->cert_info.enc.len)
+            return 1;
+        return memcmp(a->cert_info.enc.enc, b->cert_info.enc.enc,
+                      a->cert_info.enc.len);
+    }
+    return rv;
+}
+
+int X509_NAME_cmp(const X509_NAME *a, const X509_NAME *b)
+{
+    int ret;
+
+    /* Ensure canonical encoding is present and up to date */
+
+    if (!a->canon_enc || a->modified) {
+        ret = i2d_X509_NAME((X509_NAME *)a, NULL);
+        if (ret < 0)
+            return -2;
+    }
+
+    if (!b->canon_enc || b->modified) {
+        ret = i2d_X509_NAME((X509_NAME *)b, NULL);
+        if (ret < 0)
+            return -2;
+    }
+
+    ret = a->canon_enclen - b->canon_enclen;
+
+    if (ret != 0 || a->canon_enclen == 0)
+        return ret;
+
+    return memcmp(a->canon_enc, b->canon_enc, a->canon_enclen);
+
+}
+
+unsigned long X509_NAME_hash(X509_NAME *x)
+{
+    unsigned long ret = 0;
+    unsigned char md[SHA_DIGEST_LENGTH];
+
+    /* Make sure X509_NAME structure contains valid cached encoding */
+    i2d_X509_NAME(x, NULL);
+    if (!EVP_Digest(x->canon_enc, x->canon_enclen, md, NULL, EVP_sha1(),
+                    NULL))
+        return 0;
+
+    ret = (((unsigned long)md[0]) | ((unsigned long)md[1] << 8L) |
+           ((unsigned long)md[2] << 16L) | ((unsigned long)md[3] << 24L)
+        ) & 0xffffffffL;
+    return ret;
+}
+
+#ifndef OPENSSL_NO_MD5
+/*
+ * I now DER encode the name and hash it.  Since I cache the DER encoding,
+ * this is reasonably efficient.
+ */
+
+unsigned long X509_NAME_hash_old(X509_NAME *x)
+{
+    EVP_MD_CTX *md_ctx = EVP_MD_CTX_new();
+    unsigned long ret = 0;
+    unsigned char md[16];
+
+    if (md_ctx == NULL)
+        return ret;
+
+    /* Make sure X509_NAME structure contains valid cached encoding */
+    i2d_X509_NAME(x, NULL);
+    EVP_MD_CTX_set_flags(md_ctx, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
+    if (EVP_DigestInit_ex(md_ctx, EVP_md5(), NULL)
+        && EVP_DigestUpdate(md_ctx, x->bytes->data, x->bytes->length)
+        && EVP_DigestFinal_ex(md_ctx, md, NULL))
+        ret = (((unsigned long)md[0]) | ((unsigned long)md[1] << 8L) |
+               ((unsigned long)md[2] << 16L) | ((unsigned long)md[3] << 24L)
+            ) & 0xffffffffL;
+    EVP_MD_CTX_free(md_ctx);
+
+    return ret;
+}
+#endif
+
+/* Search a stack of X509 for a match */
+X509 *X509_find_by_issuer_and_serial(STACK_OF(X509) *sk, X509_NAME *name,
+                                     ASN1_INTEGER *serial)
+{
+    int i;
+    X509 x, *x509 = NULL;
+
+    if (!sk)
+        return NULL;
+
+    x.cert_info.serialNumber = *serial;
+    x.cert_info.issuer = name;
+
+    for (i = 0; i < sk_X509_num(sk); i++) {
+        x509 = sk_X509_value(sk, i);
+        if (X509_issuer_and_serial_cmp(x509, &x) == 0)
+            return x509;
+    }
+    return NULL;
+}
+
+X509 *X509_find_by_subject(STACK_OF(X509) *sk, X509_NAME *name)
+{
+    X509 *x509;
+    int i;
+
+    for (i = 0; i < sk_X509_num(sk); i++) {
+        x509 = sk_X509_value(sk, i);
+        if (X509_NAME_cmp(X509_get_subject_name(x509), name) == 0)
+            return x509;
+    }
+    return NULL;
+}
+
+EVP_PKEY *X509_get0_pubkey(const X509 *x)
+{
+    if (x == NULL)
+        return NULL;
+    return X509_PUBKEY_get0(x->cert_info.key);
+}
+
+EVP_PKEY *X509_get_pubkey(X509 *x)
+{
+    if (x == NULL)
+        return NULL;
+    return X509_PUBKEY_get(x->cert_info.key);
+}
+
+int X509_check_private_key(const X509 *x, const EVP_PKEY *k)
+{
+    const EVP_PKEY *xk;
+    int ret;
+
+    xk = X509_get0_pubkey(x);
+
+    if (xk)
+        ret = EVP_PKEY_cmp(xk, k);
+    else
+        ret = -2;
+
+    switch (ret) {
+    case 1:
+        break;
+    case 0:
+        X509err(X509_F_X509_CHECK_PRIVATE_KEY, X509_R_KEY_VALUES_MISMATCH);
+        break;
+    case -1:
+        X509err(X509_F_X509_CHECK_PRIVATE_KEY, X509_R_KEY_TYPE_MISMATCH);
+        break;
+    case -2:
+        X509err(X509_F_X509_CHECK_PRIVATE_KEY, X509_R_UNKNOWN_KEY_TYPE);
+    }
+    if (ret > 0)
+        return 1;
+    return 0;
+}
+
+/*
+ * Check a suite B algorithm is permitted: pass in a public key and the NID
+ * of its signature (or 0 if no signature). The pflags is a pointer to a
+ * flags field which must contain the suite B verification flags.
+ */
+
+#ifndef OPENSSL_NO_EC
+
+static int check_suite_b(EVP_PKEY *pkey, int sign_nid, unsigned long *pflags)
+{
+    const EC_GROUP *grp = NULL;
+    int curve_nid;
+    if (pkey && EVP_PKEY_id(pkey) == EVP_PKEY_EC)
+        grp = EC_KEY_get0_group(EVP_PKEY_get0_EC_KEY(pkey));
+    if (!grp)
+        return X509_V_ERR_SUITE_B_INVALID_ALGORITHM;
+    curve_nid = EC_GROUP_get_curve_name(grp);
+    /* Check curve is consistent with LOS */
+    if (curve_nid == NID_secp384r1) { /* P-384 */
+        /*
+         * Check signature algorithm is consistent with curve.
+         */
+        if (sign_nid != -1 && sign_nid != NID_ecdsa_with_SHA384)
+            return X509_V_ERR_SUITE_B_INVALID_SIGNATURE_ALGORITHM;
+        if (!(*pflags & X509_V_FLAG_SUITEB_192_LOS))
+            return X509_V_ERR_SUITE_B_LOS_NOT_ALLOWED;
+        /* If we encounter P-384 we cannot use P-256 later */
+        *pflags &= ~X509_V_FLAG_SUITEB_128_LOS_ONLY;
+    } else if (curve_nid == NID_X9_62_prime256v1) { /* P-256 */
+        if (sign_nid != -1 && sign_nid != NID_ecdsa_with_SHA256)
+            return X509_V_ERR_SUITE_B_INVALID_SIGNATURE_ALGORITHM;
+        if (!(*pflags & X509_V_FLAG_SUITEB_128_LOS_ONLY))
+            return X509_V_ERR_SUITE_B_LOS_NOT_ALLOWED;
+    } else
+        return X509_V_ERR_SUITE_B_INVALID_CURVE;
+
+    return X509_V_OK;
+}
+
+int X509_chain_check_suiteb(int *perror_depth, X509 *x, STACK_OF(X509) *chain,
+                            unsigned long flags)
+{
+    int rv, i, sign_nid;
+    EVP_PKEY *pk;
+    unsigned long tflags = flags;
+
+    if (!(flags & X509_V_FLAG_SUITEB_128_LOS))
+        return X509_V_OK;
+
+    /* If no EE certificate passed in must be first in chain */
+    if (x == NULL) {
+        x = sk_X509_value(chain, 0);
+        i = 1;
+    } else
+        i = 0;
+
+    pk = X509_get0_pubkey(x);
+
+    /*
+     * With DANE-EE(3) success, or DANE-EE(3)/PKIX-EE(1) failure we don't build
+     * a chain all, just report trust success or failure, but must also report
+     * Suite-B errors if applicable.  This is indicated via a NULL chain
+     * pointer.  All we need to do is check the leaf key algorithm.
+     */
+    if (chain == NULL)
+        return check_suite_b(pk, -1, &tflags);
+
+    if (X509_get_version(x) != 2) {
+        rv = X509_V_ERR_SUITE_B_INVALID_VERSION;
+        /* Correct error depth */
+        i = 0;
+        goto end;
+    }
+
+    /* Check EE key only */
+    rv = check_suite_b(pk, -1, &tflags);
+    if (rv != X509_V_OK) {
+        /* Correct error depth */
+        i = 0;
+        goto end;
+    }
+    for (; i < sk_X509_num(chain); i++) {
+        sign_nid = X509_get_signature_nid(x);
+        x = sk_X509_value(chain, i);
+        if (X509_get_version(x) != 2) {
+            rv = X509_V_ERR_SUITE_B_INVALID_VERSION;
+            goto end;
+        }
+        pk = X509_get0_pubkey(x);
+        rv = check_suite_b(pk, sign_nid, &tflags);
+        if (rv != X509_V_OK)
+            goto end;
+    }
+
+    /* Final check: root CA signature */
+    rv = check_suite_b(pk, X509_get_signature_nid(x), &tflags);
+ end:
+    if (rv != X509_V_OK) {
+        /* Invalid signature or LOS errors are for previous cert */
+        if ((rv == X509_V_ERR_SUITE_B_INVALID_SIGNATURE_ALGORITHM
+             || rv == X509_V_ERR_SUITE_B_LOS_NOT_ALLOWED) && i)
+            i--;
+        /*
+         * If we have LOS error and flags changed then we are signing P-384
+         * with P-256. Use more meaningful error.
+         */
+        if (rv == X509_V_ERR_SUITE_B_LOS_NOT_ALLOWED && flags != tflags)
+            rv = X509_V_ERR_SUITE_B_CANNOT_SIGN_P_384_WITH_P_256;
+        if (perror_depth)
+            *perror_depth = i;
+    }
+    return rv;
+}
+
+int X509_CRL_check_suiteb(X509_CRL *crl, EVP_PKEY *pk, unsigned long flags)
+{
+    int sign_nid;
+    if (!(flags & X509_V_FLAG_SUITEB_128_LOS))
+        return X509_V_OK;
+    sign_nid = OBJ_obj2nid(crl->crl.sig_alg.algorithm);
+    return check_suite_b(pk, sign_nid, &flags);
+}
+
+#else
+int X509_chain_check_suiteb(int *perror_depth, X509 *x, STACK_OF(X509) *chain,
+                            unsigned long flags)
+{
+    return 0;
+}
+
+int X509_CRL_check_suiteb(X509_CRL *crl, EVP_PKEY *pk, unsigned long flags)
+{
+    return 0;
+}
+
+#endif
+/*
+ * Not strictly speaking an "up_ref" as a STACK doesn't have a reference
+ * count but it has the same effect by duping the STACK and upping the ref of
+ * each X509 structure.
+ */
+STACK_OF(X509) *X509_chain_up_ref(STACK_OF(X509) *chain)
+{
+    STACK_OF(X509) *ret;
+    int i;
+    ret = sk_X509_dup(chain);
+    for (i = 0; i < sk_X509_num(ret); i++) {
+        X509 *x = sk_X509_value(ret, i);
+        X509_up_ref(x);
+    }
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_d2.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_d2.c
new file mode 100644
index 000000000..099ffda1e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_d2.c
@@ -0,0 +1,57 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/crypto.h>
+#include <openssl/x509.h>
+
+int X509_STORE_set_default_paths(X509_STORE *ctx)
+{
+    X509_LOOKUP *lookup;
+
+    lookup = X509_STORE_add_lookup(ctx, X509_LOOKUP_file());
+    if (lookup == NULL)
+        return 0;
+    X509_LOOKUP_load_file(lookup, NULL, X509_FILETYPE_DEFAULT);
+
+    lookup = X509_STORE_add_lookup(ctx, X509_LOOKUP_hash_dir());
+    if (lookup == NULL)
+        return 0;
+    X509_LOOKUP_add_dir(lookup, NULL, X509_FILETYPE_DEFAULT);
+
+    /* clear any errors */
+    ERR_clear_error();
+
+    return 1;
+}
+
+int X509_STORE_load_locations(X509_STORE *ctx, const char *file,
+                              const char *path)
+{
+    X509_LOOKUP *lookup;
+
+    if (file != NULL) {
+        lookup = X509_STORE_add_lookup(ctx, X509_LOOKUP_file());
+        if (lookup == NULL)
+            return 0;
+        if (X509_LOOKUP_load_file(lookup, file, X509_FILETYPE_PEM) != 1)
+            return 0;
+    }
+    if (path != NULL) {
+        lookup = X509_STORE_add_lookup(ctx, X509_LOOKUP_hash_dir());
+        if (lookup == NULL)
+            return 0;
+        if (X509_LOOKUP_add_dir(lookup, path, X509_FILETYPE_PEM) != 1)
+            return 0;
+    }
+    if ((path == NULL) && (file == NULL))
+        return 0;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_def.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_def.c
new file mode 100644
index 000000000..bfa8d7d85
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_def.c
@@ -0,0 +1,43 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/crypto.h>
+#include <openssl/x509.h>
+
+const char *X509_get_default_private_dir(void)
+{
+    return X509_PRIVATE_DIR;
+}
+
+const char *X509_get_default_cert_area(void)
+{
+    return X509_CERT_AREA;
+}
+
+const char *X509_get_default_cert_dir(void)
+{
+    return X509_CERT_DIR;
+}
+
+const char *X509_get_default_cert_file(void)
+{
+    return X509_CERT_FILE;
+}
+
+const char *X509_get_default_cert_dir_env(void)
+{
+    return X509_CERT_DIR_EVP;
+}
+
+const char *X509_get_default_cert_file_env(void)
+{
+    return X509_CERT_FILE_EVP;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_err.c
new file mode 100644
index 000000000..739708e24
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_err.c
@@ -0,0 +1,181 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/x509err.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA X509_str_functs[] = {
+    {ERR_PACK(ERR_LIB_X509, X509_F_ADD_CERT_DIR, 0), "add_cert_dir"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_BUILD_CHAIN, 0), "build_chain"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_BY_FILE_CTRL, 0), "by_file_ctrl"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_CHECK_NAME_CONSTRAINTS, 0),
+     "check_name_constraints"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_CHECK_POLICY, 0), "check_policy"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_DANE_I2D, 0), "dane_i2d"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_DIR_CTRL, 0), "dir_ctrl"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_GET_CERT_BY_SUBJECT, 0),
+     "get_cert_by_subject"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_I2D_X509_AUX, 0), "i2d_X509_AUX"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_LOOKUP_CERTS_SK, 0), "lookup_certs_sk"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_NETSCAPE_SPKI_B64_DECODE, 0),
+     "NETSCAPE_SPKI_b64_decode"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_NETSCAPE_SPKI_B64_ENCODE, 0),
+     "NETSCAPE_SPKI_b64_encode"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_NEW_DIR, 0), "new_dir"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509AT_ADD1_ATTR, 0), "X509at_add1_attr"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509V3_ADD_EXT, 0), "X509v3_add_ext"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_ATTRIBUTE_CREATE_BY_NID, 0),
+     "X509_ATTRIBUTE_create_by_NID"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_ATTRIBUTE_CREATE_BY_OBJ, 0),
+     "X509_ATTRIBUTE_create_by_OBJ"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_ATTRIBUTE_CREATE_BY_TXT, 0),
+     "X509_ATTRIBUTE_create_by_txt"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_ATTRIBUTE_GET0_DATA, 0),
+     "X509_ATTRIBUTE_get0_data"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_ATTRIBUTE_SET1_DATA, 0),
+     "X509_ATTRIBUTE_set1_data"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_CHECK_PRIVATE_KEY, 0),
+     "X509_check_private_key"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_CRL_DIFF, 0), "X509_CRL_diff"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_CRL_METHOD_NEW, 0),
+     "X509_CRL_METHOD_new"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_CRL_PRINT_FP, 0), "X509_CRL_print_fp"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_EXTENSION_CREATE_BY_NID, 0),
+     "X509_EXTENSION_create_by_NID"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_EXTENSION_CREATE_BY_OBJ, 0),
+     "X509_EXTENSION_create_by_OBJ"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_GET_PUBKEY_PARAMETERS, 0),
+     "X509_get_pubkey_parameters"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_LOAD_CERT_CRL_FILE, 0),
+     "X509_load_cert_crl_file"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_LOAD_CERT_FILE, 0),
+     "X509_load_cert_file"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_LOAD_CRL_FILE, 0),
+     "X509_load_crl_file"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_LOOKUP_METH_NEW, 0),
+     "X509_LOOKUP_meth_new"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_LOOKUP_NEW, 0), "X509_LOOKUP_new"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_NAME_ADD_ENTRY, 0),
+     "X509_NAME_add_entry"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_NAME_CANON, 0), "x509_name_canon"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_NAME_ENTRY_CREATE_BY_NID, 0),
+     "X509_NAME_ENTRY_create_by_NID"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_NAME_ENTRY_CREATE_BY_TXT, 0),
+     "X509_NAME_ENTRY_create_by_txt"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_NAME_ENTRY_SET_OBJECT, 0),
+     "X509_NAME_ENTRY_set_object"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_NAME_ONELINE, 0), "X509_NAME_oneline"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_NAME_PRINT, 0), "X509_NAME_print"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_OBJECT_NEW, 0), "X509_OBJECT_new"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_PRINT_EX_FP, 0), "X509_print_ex_fp"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_PUBKEY_DECODE, 0),
+     "x509_pubkey_decode"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_PUBKEY_GET0, 0), "X509_PUBKEY_get0"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_PUBKEY_SET, 0), "X509_PUBKEY_set"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_REQ_CHECK_PRIVATE_KEY, 0),
+     "X509_REQ_check_private_key"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_REQ_PRINT_EX, 0), "X509_REQ_print_ex"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_REQ_PRINT_FP, 0), "X509_REQ_print_fp"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_REQ_TO_X509, 0), "X509_REQ_to_X509"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_STORE_ADD_CERT, 0),
+     "X509_STORE_add_cert"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_STORE_ADD_CRL, 0),
+     "X509_STORE_add_crl"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_STORE_ADD_LOOKUP, 0),
+     "X509_STORE_add_lookup"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_STORE_CTX_GET1_ISSUER, 0),
+     "X509_STORE_CTX_get1_issuer"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_STORE_CTX_INIT, 0),
+     "X509_STORE_CTX_init"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_STORE_CTX_NEW, 0),
+     "X509_STORE_CTX_new"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_STORE_CTX_PURPOSE_INHERIT, 0),
+     "X509_STORE_CTX_purpose_inherit"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_STORE_NEW, 0), "X509_STORE_new"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_TO_X509_REQ, 0), "X509_to_X509_REQ"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_TRUST_ADD, 0), "X509_TRUST_add"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_TRUST_SET, 0), "X509_TRUST_set"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_VERIFY_CERT, 0), "X509_verify_cert"},
+    {ERR_PACK(ERR_LIB_X509, X509_F_X509_VERIFY_PARAM_NEW, 0),
+     "X509_VERIFY_PARAM_new"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA X509_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_AKID_MISMATCH), "akid mismatch"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_BAD_SELECTOR), "bad selector"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_BAD_X509_FILETYPE), "bad x509 filetype"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_BASE64_DECODE_ERROR),
+    "base64 decode error"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_CANT_CHECK_DH_KEY), "cant check dh key"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_CERT_ALREADY_IN_HASH_TABLE),
+    "cert already in hash table"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_CRL_ALREADY_DELTA), "crl already delta"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_CRL_VERIFY_FAILURE),
+    "crl verify failure"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_IDP_MISMATCH), "idp mismatch"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_INVALID_DIRECTORY), "invalid directory"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_INVALID_FIELD_NAME),
+    "invalid field name"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_INVALID_TRUST), "invalid trust"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_ISSUER_MISMATCH), "issuer mismatch"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_KEY_TYPE_MISMATCH), "key type mismatch"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_KEY_VALUES_MISMATCH),
+    "key values mismatch"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_LOADING_CERT_DIR), "loading cert dir"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_LOADING_DEFAULTS), "loading defaults"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_METHOD_NOT_SUPPORTED),
+    "method not supported"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_NAME_TOO_LONG), "name too long"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_NEWER_CRL_NOT_NEWER),
+    "newer crl not newer"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_NO_CERTIFICATE_FOUND),
+    "no certificate found"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_NO_CERTIFICATE_OR_CRL_FOUND),
+    "no certificate or crl found"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_NO_CERT_SET_FOR_US_TO_VERIFY),
+    "no cert set for us to verify"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_NO_CRL_FOUND), "no crl found"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_NO_CRL_NUMBER), "no crl number"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_PUBLIC_KEY_DECODE_ERROR),
+    "public key decode error"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_PUBLIC_KEY_ENCODE_ERROR),
+    "public key encode error"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_SHOULD_RETRY), "should retry"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_UNABLE_TO_FIND_PARAMETERS_IN_CHAIN),
+    "unable to find parameters in chain"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_UNABLE_TO_GET_CERTS_PUBLIC_KEY),
+    "unable to get certs public key"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_UNKNOWN_KEY_TYPE), "unknown key type"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_UNKNOWN_NID), "unknown nid"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_UNKNOWN_PURPOSE_ID),
+    "unknown purpose id"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_UNKNOWN_TRUST_ID), "unknown trust id"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_UNSUPPORTED_ALGORITHM),
+    "unsupported algorithm"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_WRONG_LOOKUP_TYPE), "wrong lookup type"},
+    {ERR_PACK(ERR_LIB_X509, 0, X509_R_WRONG_TYPE), "wrong type"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_X509_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(X509_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(X509_str_functs);
+        ERR_load_strings_const(X509_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_ext.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_ext.c
new file mode 100644
index 000000000..2db843760
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_ext.c
@@ -0,0 +1,159 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+#include <openssl/x509v3.h>
+
+int X509_CRL_get_ext_count(const X509_CRL *x)
+{
+    return X509v3_get_ext_count(x->crl.extensions);
+}
+
+int X509_CRL_get_ext_by_NID(const X509_CRL *x, int nid, int lastpos)
+{
+    return X509v3_get_ext_by_NID(x->crl.extensions, nid, lastpos);
+}
+
+int X509_CRL_get_ext_by_OBJ(const X509_CRL *x, const ASN1_OBJECT *obj,
+                            int lastpos)
+{
+    return X509v3_get_ext_by_OBJ(x->crl.extensions, obj, lastpos);
+}
+
+int X509_CRL_get_ext_by_critical(const X509_CRL *x, int crit, int lastpos)
+{
+    return X509v3_get_ext_by_critical(x->crl.extensions, crit, lastpos);
+}
+
+X509_EXTENSION *X509_CRL_get_ext(const X509_CRL *x, int loc)
+{
+    return X509v3_get_ext(x->crl.extensions, loc);
+}
+
+X509_EXTENSION *X509_CRL_delete_ext(X509_CRL *x, int loc)
+{
+    return X509v3_delete_ext(x->crl.extensions, loc);
+}
+
+void *X509_CRL_get_ext_d2i(const X509_CRL *x, int nid, int *crit, int *idx)
+{
+    return X509V3_get_d2i(x->crl.extensions, nid, crit, idx);
+}
+
+int X509_CRL_add1_ext_i2d(X509_CRL *x, int nid, void *value, int crit,
+                          unsigned long flags)
+{
+    return X509V3_add1_i2d(&x->crl.extensions, nid, value, crit, flags);
+}
+
+int X509_CRL_add_ext(X509_CRL *x, X509_EXTENSION *ex, int loc)
+{
+    return (X509v3_add_ext(&(x->crl.extensions), ex, loc) != NULL);
+}
+
+int X509_get_ext_count(const X509 *x)
+{
+    return X509v3_get_ext_count(x->cert_info.extensions);
+}
+
+int X509_get_ext_by_NID(const X509 *x, int nid, int lastpos)
+{
+    return X509v3_get_ext_by_NID(x->cert_info.extensions, nid, lastpos);
+}
+
+int X509_get_ext_by_OBJ(const X509 *x, const ASN1_OBJECT *obj, int lastpos)
+{
+    return X509v3_get_ext_by_OBJ(x->cert_info.extensions, obj, lastpos);
+}
+
+int X509_get_ext_by_critical(const X509 *x, int crit, int lastpos)
+{
+    return (X509v3_get_ext_by_critical
+            (x->cert_info.extensions, crit, lastpos));
+}
+
+X509_EXTENSION *X509_get_ext(const X509 *x, int loc)
+{
+    return X509v3_get_ext(x->cert_info.extensions, loc);
+}
+
+X509_EXTENSION *X509_delete_ext(X509 *x, int loc)
+{
+    return X509v3_delete_ext(x->cert_info.extensions, loc);
+}
+
+int X509_add_ext(X509 *x, X509_EXTENSION *ex, int loc)
+{
+    return (X509v3_add_ext(&(x->cert_info.extensions), ex, loc) != NULL);
+}
+
+void *X509_get_ext_d2i(const X509 *x, int nid, int *crit, int *idx)
+{
+    return X509V3_get_d2i(x->cert_info.extensions, nid, crit, idx);
+}
+
+int X509_add1_ext_i2d(X509 *x, int nid, void *value, int crit,
+                      unsigned long flags)
+{
+    return X509V3_add1_i2d(&x->cert_info.extensions, nid, value, crit,
+                           flags);
+}
+
+int X509_REVOKED_get_ext_count(const X509_REVOKED *x)
+{
+    return X509v3_get_ext_count(x->extensions);
+}
+
+int X509_REVOKED_get_ext_by_NID(const X509_REVOKED *x, int nid, int lastpos)
+{
+    return X509v3_get_ext_by_NID(x->extensions, nid, lastpos);
+}
+
+int X509_REVOKED_get_ext_by_OBJ(const X509_REVOKED *x, const ASN1_OBJECT *obj,
+                                int lastpos)
+{
+    return X509v3_get_ext_by_OBJ(x->extensions, obj, lastpos);
+}
+
+int X509_REVOKED_get_ext_by_critical(const X509_REVOKED *x, int crit, int lastpos)
+{
+    return X509v3_get_ext_by_critical(x->extensions, crit, lastpos);
+}
+
+X509_EXTENSION *X509_REVOKED_get_ext(const X509_REVOKED *x, int loc)
+{
+    return X509v3_get_ext(x->extensions, loc);
+}
+
+X509_EXTENSION *X509_REVOKED_delete_ext(X509_REVOKED *x, int loc)
+{
+    return X509v3_delete_ext(x->extensions, loc);
+}
+
+int X509_REVOKED_add_ext(X509_REVOKED *x, X509_EXTENSION *ex, int loc)
+{
+    return (X509v3_add_ext(&(x->extensions), ex, loc) != NULL);
+}
+
+void *X509_REVOKED_get_ext_d2i(const X509_REVOKED *x, int nid, int *crit, int *idx)
+{
+    return X509V3_get_d2i(x->extensions, nid, crit, idx);
+}
+
+int X509_REVOKED_add1_ext_i2d(X509_REVOKED *x, int nid, void *value, int crit,
+                              unsigned long flags)
+{
+    return X509V3_add1_i2d(&x->extensions, nid, value, crit, flags);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_lcl.h b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_lcl.h
new file mode 100644
index 000000000..c517a7745
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_lcl.h
@@ -0,0 +1,147 @@
+/*
+ * Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/refcount.h"
+
+/*
+ * This structure holds all parameters associated with a verify operation by
+ * including an X509_VERIFY_PARAM structure in related structures the
+ * parameters used can be customized
+ */
+
+struct X509_VERIFY_PARAM_st {
+    char *name;
+    time_t check_time;          /* Time to use */
+    uint32_t inh_flags;         /* Inheritance flags */
+    unsigned long flags;        /* Various verify flags */
+    int purpose;                /* purpose to check untrusted certificates */
+    int trust;                  /* trust setting to check */
+    int depth;                  /* Verify depth */
+    int auth_level;             /* Security level for chain verification */
+    STACK_OF(ASN1_OBJECT) *policies; /* Permissible policies */
+    /* Peer identity details */
+    STACK_OF(OPENSSL_STRING) *hosts; /* Set of acceptable names */
+    unsigned int hostflags;     /* Flags to control matching features */
+    char *peername;             /* Matching hostname in peer certificate */
+    char *email;                /* If not NULL email address to match */
+    size_t emaillen;
+    unsigned char *ip;          /* If not NULL IP address to match */
+    size_t iplen;               /* Length of IP address */
+};
+
+/* No error callback if depth < 0 */
+int x509_check_cert_time(X509_STORE_CTX *ctx, X509 *x, int depth);
+
+/* a sequence of these are used */
+struct x509_attributes_st {
+    ASN1_OBJECT *object;
+    STACK_OF(ASN1_TYPE) *set;
+};
+
+struct X509_extension_st {
+    ASN1_OBJECT *object;
+    ASN1_BOOLEAN critical;
+    ASN1_OCTET_STRING value;
+};
+
+/*
+ * Method to handle CRL access. In general a CRL could be very large (several
+ * Mb) and can consume large amounts of resources if stored in memory by
+ * multiple processes. This method allows general CRL operations to be
+ * redirected to more efficient callbacks: for example a CRL entry database.
+ */
+
+#define X509_CRL_METHOD_DYNAMIC         1
+
+struct x509_crl_method_st {
+    int flags;
+    int (*crl_init) (X509_CRL *crl);
+    int (*crl_free) (X509_CRL *crl);
+    int (*crl_lookup) (X509_CRL *crl, X509_REVOKED **ret,
+                       ASN1_INTEGER *ser, X509_NAME *issuer);
+    int (*crl_verify) (X509_CRL *crl, EVP_PKEY *pk);
+};
+
+struct x509_lookup_method_st {
+    char *name;
+    int (*new_item) (X509_LOOKUP *ctx);
+    void (*free) (X509_LOOKUP *ctx);
+    int (*init) (X509_LOOKUP *ctx);
+    int (*shutdown) (X509_LOOKUP *ctx);
+    int (*ctrl) (X509_LOOKUP *ctx, int cmd, const char *argc, long argl,
+                 char **ret);
+    int (*get_by_subject) (X509_LOOKUP *ctx, X509_LOOKUP_TYPE type,
+                           X509_NAME *name, X509_OBJECT *ret);
+    int (*get_by_issuer_serial) (X509_LOOKUP *ctx, X509_LOOKUP_TYPE type,
+                                 X509_NAME *name, ASN1_INTEGER *serial,
+                                 X509_OBJECT *ret);
+    int (*get_by_fingerprint) (X509_LOOKUP *ctx, X509_LOOKUP_TYPE type,
+                               const unsigned char *bytes, int len,
+                               X509_OBJECT *ret);
+    int (*get_by_alias) (X509_LOOKUP *ctx, X509_LOOKUP_TYPE type,
+                         const char *str, int len, X509_OBJECT *ret);
+};
+
+/* This is the functions plus an instance of the local variables. */
+struct x509_lookup_st {
+    int init;                   /* have we been started */
+    int skip;                   /* don't use us. */
+    X509_LOOKUP_METHOD *method; /* the functions */
+    void *method_data;          /* method data */
+    X509_STORE *store_ctx;      /* who owns us */
+};
+
+/*
+ * This is used to hold everything.  It is used for all certificate
+ * validation.  Once we have a certificate chain, the 'verify' function is
+ * then called to actually check the cert chain.
+ */
+struct x509_store_st {
+    /* The following is a cache of trusted certs */
+    int cache;                  /* if true, stash any hits */
+    STACK_OF(X509_OBJECT) *objs; /* Cache of all objects */
+    /* These are external lookup methods */
+    STACK_OF(X509_LOOKUP) *get_cert_methods;
+    X509_VERIFY_PARAM *param;
+    /* Callbacks for various operations */
+    /* called to verify a certificate */
+    int (*verify) (X509_STORE_CTX *ctx);
+    /* error callback */
+    int (*verify_cb) (int ok, X509_STORE_CTX *ctx);
+    /* get issuers cert from ctx */
+    int (*get_issuer) (X509 **issuer, X509_STORE_CTX *ctx, X509 *x);
+    /* check issued */
+    int (*check_issued) (X509_STORE_CTX *ctx, X509 *x, X509 *issuer);
+    /* Check revocation status of chain */
+    int (*check_revocation) (X509_STORE_CTX *ctx);
+    /* retrieve CRL */
+    int (*get_crl) (X509_STORE_CTX *ctx, X509_CRL **crl, X509 *x);
+    /* Check CRL validity */
+    int (*check_crl) (X509_STORE_CTX *ctx, X509_CRL *crl);
+    /* Check certificate against CRL */
+    int (*cert_crl) (X509_STORE_CTX *ctx, X509_CRL *crl, X509 *x);
+    /* Check policy status of the chain */
+    int (*check_policy) (X509_STORE_CTX *ctx);
+    STACK_OF(X509) *(*lookup_certs) (X509_STORE_CTX *ctx, X509_NAME *nm);
+    STACK_OF(X509_CRL) *(*lookup_crls) (X509_STORE_CTX *ctx, X509_NAME *nm);
+    int (*cleanup) (X509_STORE_CTX *ctx);
+    CRYPTO_EX_DATA ex_data;
+    CRYPTO_REF_COUNT references;
+    CRYPTO_RWLOCK *lock;
+};
+
+typedef struct lookup_dir_hashes_st BY_DIR_HASH;
+typedef struct lookup_dir_entry_st BY_DIR_ENTRY;
+DEFINE_STACK_OF(BY_DIR_HASH)
+DEFINE_STACK_OF(BY_DIR_ENTRY)
+typedef STACK_OF(X509_NAME_ENTRY) STACK_OF_X509_NAME_ENTRY;
+DEFINE_STACK_OF(STACK_OF_X509_NAME_ENTRY)
+
+void x509_set_signature_info(X509_SIG_INFO *siginf, const X509_ALGOR *alg,
+                             const ASN1_STRING *sig);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_lu.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_lu.c
new file mode 100644
index 000000000..be39015b0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_lu.c
@@ -0,0 +1,898 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "internal/refcount.h"
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+#include <openssl/x509v3.h>
+#include "x509_lcl.h"
+
+X509_LOOKUP *X509_LOOKUP_new(X509_LOOKUP_METHOD *method)
+{
+    X509_LOOKUP *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        X509err(X509_F_X509_LOOKUP_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ret->method = method;
+    if (method->new_item != NULL && method->new_item(ret) == 0) {
+        OPENSSL_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+void X509_LOOKUP_free(X509_LOOKUP *ctx)
+{
+    if (ctx == NULL)
+        return;
+    if ((ctx->method != NULL) && (ctx->method->free != NULL))
+        (*ctx->method->free) (ctx);
+    OPENSSL_free(ctx);
+}
+
+int X509_STORE_lock(X509_STORE *s)
+{
+    return CRYPTO_THREAD_write_lock(s->lock);
+}
+
+int X509_STORE_unlock(X509_STORE *s)
+{
+    return CRYPTO_THREAD_unlock(s->lock);
+}
+
+int X509_LOOKUP_init(X509_LOOKUP *ctx)
+{
+    if (ctx->method == NULL)
+        return 0;
+    if (ctx->method->init != NULL)
+        return ctx->method->init(ctx);
+    else
+        return 1;
+}
+
+int X509_LOOKUP_shutdown(X509_LOOKUP *ctx)
+{
+    if (ctx->method == NULL)
+        return 0;
+    if (ctx->method->shutdown != NULL)
+        return ctx->method->shutdown(ctx);
+    else
+        return 1;
+}
+
+int X509_LOOKUP_ctrl(X509_LOOKUP *ctx, int cmd, const char *argc, long argl,
+                     char **ret)
+{
+    if (ctx->method == NULL)
+        return -1;
+    if (ctx->method->ctrl != NULL)
+        return ctx->method->ctrl(ctx, cmd, argc, argl, ret);
+    else
+        return 1;
+}
+
+int X509_LOOKUP_by_subject(X509_LOOKUP *ctx, X509_LOOKUP_TYPE type,
+                           X509_NAME *name, X509_OBJECT *ret)
+{
+    if ((ctx->method == NULL) || (ctx->method->get_by_subject == NULL))
+        return 0;
+    if (ctx->skip)
+        return 0;
+    return ctx->method->get_by_subject(ctx, type, name, ret);
+}
+
+int X509_LOOKUP_by_issuer_serial(X509_LOOKUP *ctx, X509_LOOKUP_TYPE type,
+                                 X509_NAME *name, ASN1_INTEGER *serial,
+                                 X509_OBJECT *ret)
+{
+    if ((ctx->method == NULL) || (ctx->method->get_by_issuer_serial == NULL))
+        return 0;
+    return ctx->method->get_by_issuer_serial(ctx, type, name, serial, ret);
+}
+
+int X509_LOOKUP_by_fingerprint(X509_LOOKUP *ctx, X509_LOOKUP_TYPE type,
+                               const unsigned char *bytes, int len,
+                               X509_OBJECT *ret)
+{
+    if ((ctx->method == NULL) || (ctx->method->get_by_fingerprint == NULL))
+        return 0;
+    return ctx->method->get_by_fingerprint(ctx, type, bytes, len, ret);
+}
+
+int X509_LOOKUP_by_alias(X509_LOOKUP *ctx, X509_LOOKUP_TYPE type,
+                         const char *str, int len, X509_OBJECT *ret)
+{
+    if ((ctx->method == NULL) || (ctx->method->get_by_alias == NULL))
+        return 0;
+    return ctx->method->get_by_alias(ctx, type, str, len, ret);
+}
+
+int X509_LOOKUP_set_method_data(X509_LOOKUP *ctx, void *data)
+{
+    ctx->method_data = data;
+    return 1;
+}
+
+void *X509_LOOKUP_get_method_data(const X509_LOOKUP *ctx)
+{
+    return ctx->method_data;
+}
+
+X509_STORE *X509_LOOKUP_get_store(const X509_LOOKUP *ctx)
+{
+    return ctx->store_ctx;
+}
+
+
+static int x509_object_cmp(const X509_OBJECT *const *a,
+                           const X509_OBJECT *const *b)
+{
+    int ret;
+
+    ret = ((*a)->type - (*b)->type);
+    if (ret)
+        return ret;
+    switch ((*a)->type) {
+    case X509_LU_X509:
+        ret = X509_subject_name_cmp((*a)->data.x509, (*b)->data.x509);
+        break;
+    case X509_LU_CRL:
+        ret = X509_CRL_cmp((*a)->data.crl, (*b)->data.crl);
+        break;
+    case X509_LU_NONE:
+        /* abort(); */
+        return 0;
+    }
+    return ret;
+}
+
+X509_STORE *X509_STORE_new(void)
+{
+    X509_STORE *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        X509err(X509_F_X509_STORE_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    if ((ret->objs = sk_X509_OBJECT_new(x509_object_cmp)) == NULL) {
+        X509err(X509_F_X509_STORE_NEW, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    ret->cache = 1;
+    if ((ret->get_cert_methods = sk_X509_LOOKUP_new_null()) == NULL) {
+        X509err(X509_F_X509_STORE_NEW, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if ((ret->param = X509_VERIFY_PARAM_new()) == NULL) {
+        X509err(X509_F_X509_STORE_NEW, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_X509_STORE, ret, &ret->ex_data)) {
+        X509err(X509_F_X509_STORE_NEW, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        X509err(X509_F_X509_STORE_NEW, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    ret->references = 1;
+    return ret;
+
+err:
+    X509_VERIFY_PARAM_free(ret->param);
+    sk_X509_OBJECT_free(ret->objs);
+    sk_X509_LOOKUP_free(ret->get_cert_methods);
+    OPENSSL_free(ret);
+    return NULL;
+}
+
+void X509_STORE_free(X509_STORE *vfy)
+{
+    int i;
+    STACK_OF(X509_LOOKUP) *sk;
+    X509_LOOKUP *lu;
+
+    if (vfy == NULL)
+        return;
+    CRYPTO_DOWN_REF(&vfy->references, &i, vfy->lock);
+    REF_PRINT_COUNT("X509_STORE", vfy);
+    if (i > 0)
+        return;
+    REF_ASSERT_ISNT(i < 0);
+
+    sk = vfy->get_cert_methods;
+    for (i = 0; i < sk_X509_LOOKUP_num(sk); i++) {
+        lu = sk_X509_LOOKUP_value(sk, i);
+        X509_LOOKUP_shutdown(lu);
+        X509_LOOKUP_free(lu);
+    }
+    sk_X509_LOOKUP_free(sk);
+    sk_X509_OBJECT_pop_free(vfy->objs, X509_OBJECT_free);
+
+    CRYPTO_free_ex_data(CRYPTO_EX_INDEX_X509_STORE, vfy, &vfy->ex_data);
+    X509_VERIFY_PARAM_free(vfy->param);
+    CRYPTO_THREAD_lock_free(vfy->lock);
+    OPENSSL_free(vfy);
+}
+
+int X509_STORE_up_ref(X509_STORE *vfy)
+{
+    int i;
+
+    if (CRYPTO_UP_REF(&vfy->references, &i, vfy->lock) <= 0)
+        return 0;
+
+    REF_PRINT_COUNT("X509_STORE", a);
+    REF_ASSERT_ISNT(i < 2);
+    return ((i > 1) ? 1 : 0);
+}
+
+X509_LOOKUP *X509_STORE_add_lookup(X509_STORE *v, X509_LOOKUP_METHOD *m)
+{
+    int i;
+    STACK_OF(X509_LOOKUP) *sk;
+    X509_LOOKUP *lu;
+
+    sk = v->get_cert_methods;
+    for (i = 0; i < sk_X509_LOOKUP_num(sk); i++) {
+        lu = sk_X509_LOOKUP_value(sk, i);
+        if (m == lu->method) {
+            return lu;
+        }
+    }
+    /* a new one */
+    lu = X509_LOOKUP_new(m);
+    if (lu == NULL) {
+        X509err(X509_F_X509_STORE_ADD_LOOKUP, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    lu->store_ctx = v;
+    if (sk_X509_LOOKUP_push(v->get_cert_methods, lu))
+        return lu;
+    /* malloc failed */
+    X509err(X509_F_X509_STORE_ADD_LOOKUP, ERR_R_MALLOC_FAILURE);
+    X509_LOOKUP_free(lu);
+    return NULL;
+}
+
+X509_OBJECT *X509_STORE_CTX_get_obj_by_subject(X509_STORE_CTX *vs,
+                                               X509_LOOKUP_TYPE type,
+                                               X509_NAME *name)
+{
+    X509_OBJECT *ret = X509_OBJECT_new();
+
+    if (ret == NULL)
+        return NULL;
+    if (!X509_STORE_CTX_get_by_subject(vs, type, name, ret)) {
+        X509_OBJECT_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+int X509_STORE_CTX_get_by_subject(X509_STORE_CTX *vs, X509_LOOKUP_TYPE type,
+                                  X509_NAME *name, X509_OBJECT *ret)
+{
+    X509_STORE *ctx = vs->ctx;
+    X509_LOOKUP *lu;
+    X509_OBJECT stmp, *tmp;
+    int i, j;
+
+    if (ctx == NULL)
+        return 0;
+
+    CRYPTO_THREAD_write_lock(ctx->lock);
+    tmp = X509_OBJECT_retrieve_by_subject(ctx->objs, type, name);
+    CRYPTO_THREAD_unlock(ctx->lock);
+
+    if (tmp == NULL || type == X509_LU_CRL) {
+        for (i = 0; i < sk_X509_LOOKUP_num(ctx->get_cert_methods); i++) {
+            lu = sk_X509_LOOKUP_value(ctx->get_cert_methods, i);
+            j = X509_LOOKUP_by_subject(lu, type, name, &stmp);
+            if (j) {
+                tmp = &stmp;
+                break;
+            }
+        }
+        if (tmp == NULL)
+            return 0;
+    }
+
+    ret->type = tmp->type;
+    ret->data.ptr = tmp->data.ptr;
+
+    X509_OBJECT_up_ref_count(ret);
+
+    return 1;
+}
+
+static int x509_store_add(X509_STORE *ctx, void *x, int crl) {
+    X509_OBJECT *obj;
+    int ret = 0, added = 0;
+
+    if (x == NULL)
+        return 0;
+    obj = X509_OBJECT_new();
+    if (obj == NULL)
+        return 0;
+
+    if (crl) {
+        obj->type = X509_LU_CRL;
+        obj->data.crl = (X509_CRL *)x;
+    } else {
+        obj->type = X509_LU_X509;
+        obj->data.x509 = (X509 *)x;
+    }
+    X509_OBJECT_up_ref_count(obj);
+
+    CRYPTO_THREAD_write_lock(ctx->lock);
+
+    if (X509_OBJECT_retrieve_match(ctx->objs, obj)) {
+        ret = 1;
+    } else {
+        added = sk_X509_OBJECT_push(ctx->objs, obj);
+        ret = added != 0;
+    }
+
+    CRYPTO_THREAD_unlock(ctx->lock);
+
+    if (added == 0)             /* obj not pushed */
+        X509_OBJECT_free(obj);
+
+    return ret;
+}
+
+int X509_STORE_add_cert(X509_STORE *ctx, X509 *x)
+{
+    if (!x509_store_add(ctx, x, 0)) {
+        X509err(X509_F_X509_STORE_ADD_CERT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    return 1;
+}
+
+int X509_STORE_add_crl(X509_STORE *ctx, X509_CRL *x)
+{
+    if (!x509_store_add(ctx, x, 1)) {
+        X509err(X509_F_X509_STORE_ADD_CRL, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    return 1;
+}
+
+int X509_OBJECT_up_ref_count(X509_OBJECT *a)
+{
+    switch (a->type) {
+    case X509_LU_NONE:
+        break;
+    case X509_LU_X509:
+        return X509_up_ref(a->data.x509);
+    case X509_LU_CRL:
+        return X509_CRL_up_ref(a->data.crl);
+    }
+    return 1;
+}
+
+X509 *X509_OBJECT_get0_X509(const X509_OBJECT *a)
+{
+    if (a == NULL || a->type != X509_LU_X509)
+        return NULL;
+    return a->data.x509;
+}
+
+X509_CRL *X509_OBJECT_get0_X509_CRL(X509_OBJECT *a)
+{
+    if (a == NULL || a->type != X509_LU_CRL)
+        return NULL;
+    return a->data.crl;
+}
+
+X509_LOOKUP_TYPE X509_OBJECT_get_type(const X509_OBJECT *a)
+{
+    return a->type;
+}
+
+X509_OBJECT *X509_OBJECT_new(void)
+{
+    X509_OBJECT *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        X509err(X509_F_X509_OBJECT_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    ret->type = X509_LU_NONE;
+    return ret;
+}
+
+static void x509_object_free_internal(X509_OBJECT *a)
+{
+    if (a == NULL)
+        return;
+    switch (a->type) {
+    case X509_LU_NONE:
+        break;
+    case X509_LU_X509:
+        X509_free(a->data.x509);
+        break;
+    case X509_LU_CRL:
+        X509_CRL_free(a->data.crl);
+        break;
+    }
+}
+
+int X509_OBJECT_set1_X509(X509_OBJECT *a, X509 *obj)
+{
+    if (a == NULL || !X509_up_ref(obj))
+        return 0;
+
+    x509_object_free_internal(a);
+    a->type = X509_LU_X509;
+    a->data.x509 = obj;
+    return 1;
+}
+
+int X509_OBJECT_set1_X509_CRL(X509_OBJECT *a, X509_CRL *obj)
+{
+    if (a == NULL || !X509_CRL_up_ref(obj))
+        return 0;
+
+    x509_object_free_internal(a);
+    a->type = X509_LU_CRL;
+    a->data.crl = obj;
+    return 1;
+}
+
+void X509_OBJECT_free(X509_OBJECT *a)
+{
+    x509_object_free_internal(a);
+    OPENSSL_free(a);
+}
+
+static int x509_object_idx_cnt(STACK_OF(X509_OBJECT) *h, X509_LOOKUP_TYPE type,
+                               X509_NAME *name, int *pnmatch)
+{
+    X509_OBJECT stmp;
+    X509 x509_s;
+    X509_CRL crl_s;
+    int idx;
+
+    stmp.type = type;
+    switch (type) {
+    case X509_LU_X509:
+        stmp.data.x509 = &x509_s;
+        x509_s.cert_info.subject = name;
+        break;
+    case X509_LU_CRL:
+        stmp.data.crl = &crl_s;
+        crl_s.crl.issuer = name;
+        break;
+    case X509_LU_NONE:
+        /* abort(); */
+        return -1;
+    }
+
+    idx = sk_X509_OBJECT_find(h, &stmp);
+    if (idx >= 0 && pnmatch) {
+        int tidx;
+        const X509_OBJECT *tobj, *pstmp;
+        *pnmatch = 1;
+        pstmp = &stmp;
+        for (tidx = idx + 1; tidx < sk_X509_OBJECT_num(h); tidx++) {
+            tobj = sk_X509_OBJECT_value(h, tidx);
+            if (x509_object_cmp(&tobj, &pstmp))
+                break;
+            (*pnmatch)++;
+        }
+    }
+    return idx;
+}
+
+int X509_OBJECT_idx_by_subject(STACK_OF(X509_OBJECT) *h, X509_LOOKUP_TYPE type,
+                               X509_NAME *name)
+{
+    return x509_object_idx_cnt(h, type, name, NULL);
+}
+
+X509_OBJECT *X509_OBJECT_retrieve_by_subject(STACK_OF(X509_OBJECT) *h,
+                                             X509_LOOKUP_TYPE type,
+                                             X509_NAME *name)
+{
+    int idx;
+    idx = X509_OBJECT_idx_by_subject(h, type, name);
+    if (idx == -1)
+        return NULL;
+    return sk_X509_OBJECT_value(h, idx);
+}
+
+STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(X509_STORE *v)
+{
+    return v->objs;
+}
+
+STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *ctx, X509_NAME *nm)
+{
+    int i, idx, cnt;
+    STACK_OF(X509) *sk = NULL;
+    X509 *x;
+    X509_OBJECT *obj;
+
+    if (ctx->ctx == NULL)
+        return NULL;
+
+    CRYPTO_THREAD_write_lock(ctx->ctx->lock);
+    idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_X509, nm, &cnt);
+    if (idx < 0) {
+        /*
+         * Nothing found in cache: do lookup to possibly add new objects to
+         * cache
+         */
+        X509_OBJECT *xobj = X509_OBJECT_new();
+
+        CRYPTO_THREAD_unlock(ctx->ctx->lock);
+        if (xobj == NULL)
+            return NULL;
+        if (!X509_STORE_CTX_get_by_subject(ctx, X509_LU_X509, nm, xobj)) {
+            X509_OBJECT_free(xobj);
+            return NULL;
+        }
+        X509_OBJECT_free(xobj);
+        CRYPTO_THREAD_write_lock(ctx->ctx->lock);
+        idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_X509, nm, &cnt);
+        if (idx < 0) {
+            CRYPTO_THREAD_unlock(ctx->ctx->lock);
+            return NULL;
+        }
+    }
+
+    sk = sk_X509_new_null();
+    for (i = 0; i < cnt; i++, idx++) {
+        obj = sk_X509_OBJECT_value(ctx->ctx->objs, idx);
+        x = obj->data.x509;
+        X509_up_ref(x);
+        if (!sk_X509_push(sk, x)) {
+            CRYPTO_THREAD_unlock(ctx->ctx->lock);
+            X509_free(x);
+            sk_X509_pop_free(sk, X509_free);
+            return NULL;
+        }
+    }
+    CRYPTO_THREAD_unlock(ctx->ctx->lock);
+    return sk;
+}
+
+STACK_OF(X509_CRL) *X509_STORE_CTX_get1_crls(X509_STORE_CTX *ctx, X509_NAME *nm)
+{
+    int i, idx, cnt;
+    STACK_OF(X509_CRL) *sk = sk_X509_CRL_new_null();
+    X509_CRL *x;
+    X509_OBJECT *obj, *xobj = X509_OBJECT_new();
+
+    /* Always do lookup to possibly add new CRLs to cache */
+    if (sk == NULL
+            || xobj == NULL
+            || ctx->ctx == NULL
+            || !X509_STORE_CTX_get_by_subject(ctx, X509_LU_CRL, nm, xobj)) {
+        X509_OBJECT_free(xobj);
+        sk_X509_CRL_free(sk);
+        return NULL;
+    }
+    X509_OBJECT_free(xobj);
+    CRYPTO_THREAD_write_lock(ctx->ctx->lock);
+    idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_CRL, nm, &cnt);
+    if (idx < 0) {
+        CRYPTO_THREAD_unlock(ctx->ctx->lock);
+        sk_X509_CRL_free(sk);
+        return NULL;
+    }
+
+    for (i = 0; i < cnt; i++, idx++) {
+        obj = sk_X509_OBJECT_value(ctx->ctx->objs, idx);
+        x = obj->data.crl;
+        X509_CRL_up_ref(x);
+        if (!sk_X509_CRL_push(sk, x)) {
+            CRYPTO_THREAD_unlock(ctx->ctx->lock);
+            X509_CRL_free(x);
+            sk_X509_CRL_pop_free(sk, X509_CRL_free);
+            return NULL;
+        }
+    }
+    CRYPTO_THREAD_unlock(ctx->ctx->lock);
+    return sk;
+}
+
+X509_OBJECT *X509_OBJECT_retrieve_match(STACK_OF(X509_OBJECT) *h,
+                                        X509_OBJECT *x)
+{
+    int idx, i, num;
+    X509_OBJECT *obj;
+
+    idx = sk_X509_OBJECT_find(h, x);
+    if (idx < 0)
+        return NULL;
+    if ((x->type != X509_LU_X509) && (x->type != X509_LU_CRL))
+        return sk_X509_OBJECT_value(h, idx);
+    for (i = idx, num = sk_X509_OBJECT_num(h); i < num; i++) {
+        obj = sk_X509_OBJECT_value(h, i);
+        if (x509_object_cmp((const X509_OBJECT **)&obj,
+                            (const X509_OBJECT **)&x))
+            return NULL;
+        if (x->type == X509_LU_X509) {
+            if (!X509_cmp(obj->data.x509, x->data.x509))
+                return obj;
+        } else if (x->type == X509_LU_CRL) {
+            if (!X509_CRL_match(obj->data.crl, x->data.crl))
+                return obj;
+        } else
+            return obj;
+    }
+    return NULL;
+}
+
+/*-
+ * Try to get issuer certificate from store. Due to limitations
+ * of the API this can only retrieve a single certificate matching
+ * a given subject name. However it will fill the cache with all
+ * matching certificates, so we can examine the cache for all
+ * matches.
+ *
+ * Return values are:
+ *  1 lookup successful.
+ *  0 certificate not found.
+ * -1 some other error.
+ */
+int X509_STORE_CTX_get1_issuer(X509 **issuer, X509_STORE_CTX *ctx, X509 *x)
+{
+    X509_NAME *xn;
+    X509_OBJECT *obj = X509_OBJECT_new(), *pobj = NULL;
+    int i, ok, idx, ret;
+
+    if (obj == NULL)
+        return -1;
+    *issuer = NULL;
+    xn = X509_get_issuer_name(x);
+    ok = X509_STORE_CTX_get_by_subject(ctx, X509_LU_X509, xn, obj);
+    if (ok != 1) {
+        X509_OBJECT_free(obj);
+        return 0;
+    }
+    /* If certificate matches all OK */
+    if (ctx->check_issued(ctx, x, obj->data.x509)) {
+        if (x509_check_cert_time(ctx, obj->data.x509, -1)) {
+            *issuer = obj->data.x509;
+            X509_up_ref(*issuer);
+            X509_OBJECT_free(obj);
+            return 1;
+        }
+    }
+    X509_OBJECT_free(obj);
+
+    if (ctx->ctx == NULL)
+        return 0;
+
+    /* Else find index of first cert accepted by 'check_issued' */
+    ret = 0;
+    CRYPTO_THREAD_write_lock(ctx->ctx->lock);
+    idx = X509_OBJECT_idx_by_subject(ctx->ctx->objs, X509_LU_X509, xn);
+    if (idx != -1) {            /* should be true as we've had at least one
+                                 * match */
+        /* Look through all matching certs for suitable issuer */
+        for (i = idx; i < sk_X509_OBJECT_num(ctx->ctx->objs); i++) {
+            pobj = sk_X509_OBJECT_value(ctx->ctx->objs, i);
+            /* See if we've run past the matches */
+            if (pobj->type != X509_LU_X509)
+                break;
+            if (X509_NAME_cmp(xn, X509_get_subject_name(pobj->data.x509)))
+                break;
+            if (ctx->check_issued(ctx, x, pobj->data.x509)) {
+                *issuer = pobj->data.x509;
+                ret = 1;
+                /*
+                 * If times check, exit with match,
+                 * otherwise keep looking. Leave last
+                 * match in issuer so we return nearest
+                 * match if no certificate time is OK.
+                 */
+
+                if (x509_check_cert_time(ctx, *issuer, -1))
+                    break;
+            }
+        }
+    }
+    CRYPTO_THREAD_unlock(ctx->ctx->lock);
+    if (*issuer)
+        X509_up_ref(*issuer);
+    return ret;
+}
+
+int X509_STORE_set_flags(X509_STORE *ctx, unsigned long flags)
+{
+    return X509_VERIFY_PARAM_set_flags(ctx->param, flags);
+}
+
+int X509_STORE_set_depth(X509_STORE *ctx, int depth)
+{
+    X509_VERIFY_PARAM_set_depth(ctx->param, depth);
+    return 1;
+}
+
+int X509_STORE_set_purpose(X509_STORE *ctx, int purpose)
+{
+    return X509_VERIFY_PARAM_set_purpose(ctx->param, purpose);
+}
+
+int X509_STORE_set_trust(X509_STORE *ctx, int trust)
+{
+    return X509_VERIFY_PARAM_set_trust(ctx->param, trust);
+}
+
+int X509_STORE_set1_param(X509_STORE *ctx, X509_VERIFY_PARAM *param)
+{
+    return X509_VERIFY_PARAM_set1(ctx->param, param);
+}
+
+X509_VERIFY_PARAM *X509_STORE_get0_param(X509_STORE *ctx)
+{
+    return ctx->param;
+}
+
+void X509_STORE_set_verify(X509_STORE *ctx, X509_STORE_CTX_verify_fn verify)
+{
+    ctx->verify = verify;
+}
+
+X509_STORE_CTX_verify_fn X509_STORE_get_verify(X509_STORE *ctx)
+{
+    return ctx->verify;
+}
+
+void X509_STORE_set_verify_cb(X509_STORE *ctx,
+                              X509_STORE_CTX_verify_cb verify_cb)
+{
+    ctx->verify_cb = verify_cb;
+}
+
+X509_STORE_CTX_verify_cb X509_STORE_get_verify_cb(X509_STORE *ctx)
+{
+    return ctx->verify_cb;
+}
+
+void X509_STORE_set_get_issuer(X509_STORE *ctx,
+                               X509_STORE_CTX_get_issuer_fn get_issuer)
+{
+    ctx->get_issuer = get_issuer;
+}
+
+X509_STORE_CTX_get_issuer_fn X509_STORE_get_get_issuer(X509_STORE *ctx)
+{
+    return ctx->get_issuer;
+}
+
+void X509_STORE_set_check_issued(X509_STORE *ctx,
+                                 X509_STORE_CTX_check_issued_fn check_issued)
+{
+    ctx->check_issued = check_issued;
+}
+
+X509_STORE_CTX_check_issued_fn X509_STORE_get_check_issued(X509_STORE *ctx)
+{
+    return ctx->check_issued;
+}
+
+void X509_STORE_set_check_revocation(X509_STORE *ctx,
+                                     X509_STORE_CTX_check_revocation_fn check_revocation)
+{
+    ctx->check_revocation = check_revocation;
+}
+
+X509_STORE_CTX_check_revocation_fn X509_STORE_get_check_revocation(X509_STORE *ctx)
+{
+    return ctx->check_revocation;
+}
+
+void X509_STORE_set_get_crl(X509_STORE *ctx,
+                            X509_STORE_CTX_get_crl_fn get_crl)
+{
+    ctx->get_crl = get_crl;
+}
+
+X509_STORE_CTX_get_crl_fn X509_STORE_get_get_crl(X509_STORE *ctx)
+{
+    return ctx->get_crl;
+}
+
+void X509_STORE_set_check_crl(X509_STORE *ctx,
+                              X509_STORE_CTX_check_crl_fn check_crl)
+{
+    ctx->check_crl = check_crl;
+}
+
+X509_STORE_CTX_check_crl_fn X509_STORE_get_check_crl(X509_STORE *ctx)
+{
+    return ctx->check_crl;
+}
+
+void X509_STORE_set_cert_crl(X509_STORE *ctx,
+                             X509_STORE_CTX_cert_crl_fn cert_crl)
+{
+    ctx->cert_crl = cert_crl;
+}
+
+X509_STORE_CTX_cert_crl_fn X509_STORE_get_cert_crl(X509_STORE *ctx)
+{
+    return ctx->cert_crl;
+}
+
+void X509_STORE_set_check_policy(X509_STORE *ctx,
+                                 X509_STORE_CTX_check_policy_fn check_policy)
+{
+    ctx->check_policy = check_policy;
+}
+
+X509_STORE_CTX_check_policy_fn X509_STORE_get_check_policy(X509_STORE *ctx)
+{
+    return ctx->check_policy;
+}
+
+void X509_STORE_set_lookup_certs(X509_STORE *ctx,
+                                 X509_STORE_CTX_lookup_certs_fn lookup_certs)
+{
+    ctx->lookup_certs = lookup_certs;
+}
+
+X509_STORE_CTX_lookup_certs_fn X509_STORE_get_lookup_certs(X509_STORE *ctx)
+{
+    return ctx->lookup_certs;
+}
+
+void X509_STORE_set_lookup_crls(X509_STORE *ctx,
+                                X509_STORE_CTX_lookup_crls_fn lookup_crls)
+{
+    ctx->lookup_crls = lookup_crls;
+}
+
+X509_STORE_CTX_lookup_crls_fn X509_STORE_get_lookup_crls(X509_STORE *ctx)
+{
+    return ctx->lookup_crls;
+}
+
+void X509_STORE_set_cleanup(X509_STORE *ctx,
+                            X509_STORE_CTX_cleanup_fn ctx_cleanup)
+{
+    ctx->cleanup = ctx_cleanup;
+}
+
+X509_STORE_CTX_cleanup_fn X509_STORE_get_cleanup(X509_STORE *ctx)
+{
+    return ctx->cleanup;
+}
+
+int X509_STORE_set_ex_data(X509_STORE *ctx, int idx, void *data)
+{
+    return CRYPTO_set_ex_data(&ctx->ex_data, idx, data);
+}
+
+void *X509_STORE_get_ex_data(X509_STORE *ctx, int idx)
+{
+    return CRYPTO_get_ex_data(&ctx->ex_data, idx);
+}
+
+X509_STORE *X509_STORE_CTX_get0_store(X509_STORE_CTX *ctx)
+{
+    return ctx->ctx;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_meth.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_meth.c
new file mode 100644
index 000000000..9dc587a09
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_meth.c
@@ -0,0 +1,166 @@
+/*
+ * Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include <errno.h>
+
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include <openssl/x509.h>
+#include <openssl/ossl_typ.h>
+#include "x509_lcl.h"
+
+X509_LOOKUP_METHOD *X509_LOOKUP_meth_new(const char *name)
+{
+    X509_LOOKUP_METHOD *method = OPENSSL_zalloc(sizeof(X509_LOOKUP_METHOD));
+
+    if (method != NULL) {
+        method->name = OPENSSL_strdup(name);
+        if (method->name == NULL) {
+            X509err(X509_F_X509_LOOKUP_METH_NEW, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+
+    return method;
+
+err:
+    OPENSSL_free(method);
+    return NULL;
+}
+
+void X509_LOOKUP_meth_free(X509_LOOKUP_METHOD *method)
+{
+    if (method != NULL)
+        OPENSSL_free(method->name);
+    OPENSSL_free(method);
+}
+
+int X509_LOOKUP_meth_set_new_item(X509_LOOKUP_METHOD *method,
+                                  int (*new_item) (X509_LOOKUP *ctx))
+{
+    method->new_item = new_item;
+    return 1;
+}
+
+int (*X509_LOOKUP_meth_get_new_item(const X509_LOOKUP_METHOD* method))
+    (X509_LOOKUP *ctx)
+{
+    return method->new_item;
+}
+
+int X509_LOOKUP_meth_set_free(
+    X509_LOOKUP_METHOD *method,
+    void (*free_fn) (X509_LOOKUP *ctx))
+{
+    method->free = free_fn;
+    return 1;
+}
+
+void (*X509_LOOKUP_meth_get_free(const X509_LOOKUP_METHOD* method))
+    (X509_LOOKUP *ctx)
+{
+    return method->free;
+}
+
+int X509_LOOKUP_meth_set_init(X509_LOOKUP_METHOD *method,
+                              int (*init) (X509_LOOKUP *ctx))
+{
+    method->init = init;
+    return 1;
+}
+
+int (*X509_LOOKUP_meth_get_init(const X509_LOOKUP_METHOD* method))
+    (X509_LOOKUP *ctx)
+{
+    return method->init;
+}
+
+int X509_LOOKUP_meth_set_shutdown(
+    X509_LOOKUP_METHOD *method,
+    int (*shutdown) (X509_LOOKUP *ctx))
+{
+    method->shutdown = shutdown;
+    return 1;
+}
+
+int (*X509_LOOKUP_meth_get_shutdown(const X509_LOOKUP_METHOD* method))
+    (X509_LOOKUP *ctx)
+{
+    return method->shutdown;
+}
+
+int X509_LOOKUP_meth_set_ctrl(
+    X509_LOOKUP_METHOD *method,
+    X509_LOOKUP_ctrl_fn ctrl)
+{
+    method->ctrl = ctrl;
+    return 1;
+}
+
+X509_LOOKUP_ctrl_fn X509_LOOKUP_meth_get_ctrl(const X509_LOOKUP_METHOD *method)
+{
+    return method->ctrl;
+}
+
+int X509_LOOKUP_meth_set_get_by_subject(X509_LOOKUP_METHOD *method,
+    X509_LOOKUP_get_by_subject_fn get_by_subject)
+{
+    method->get_by_subject = get_by_subject;
+    return 1;
+}
+
+X509_LOOKUP_get_by_subject_fn X509_LOOKUP_meth_get_get_by_subject(
+    const X509_LOOKUP_METHOD *method)
+{
+    return method->get_by_subject;
+}
+
+
+int X509_LOOKUP_meth_set_get_by_issuer_serial(X509_LOOKUP_METHOD *method,
+    X509_LOOKUP_get_by_issuer_serial_fn get_by_issuer_serial)
+{
+    method->get_by_issuer_serial = get_by_issuer_serial;
+    return 1;
+}
+
+X509_LOOKUP_get_by_issuer_serial_fn
+    X509_LOOKUP_meth_get_get_by_issuer_serial(const X509_LOOKUP_METHOD *method)
+{
+    return method->get_by_issuer_serial;
+}
+
+
+int X509_LOOKUP_meth_set_get_by_fingerprint(X509_LOOKUP_METHOD *method,
+    X509_LOOKUP_get_by_fingerprint_fn get_by_fingerprint)
+{
+    method->get_by_fingerprint = get_by_fingerprint;
+    return 1;
+}
+
+X509_LOOKUP_get_by_fingerprint_fn X509_LOOKUP_meth_get_get_by_fingerprint(
+    const X509_LOOKUP_METHOD *method)
+{
+    return method->get_by_fingerprint;
+}
+
+int X509_LOOKUP_meth_set_get_by_alias(X509_LOOKUP_METHOD *method,
+                                      X509_LOOKUP_get_by_alias_fn get_by_alias)
+{
+    method->get_by_alias = get_by_alias;
+    return 1;
+}
+
+X509_LOOKUP_get_by_alias_fn X509_LOOKUP_meth_get_get_by_alias(
+    const X509_LOOKUP_METHOD *method)
+{
+    return method->get_by_alias;
+}
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_obj.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_obj.c
new file mode 100644
index 000000000..85c39415c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_obj.c
@@ -0,0 +1,181 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+#include <openssl/buffer.h>
+#include "internal/x509_int.h"
+
+/*
+ * Limit to ensure we don't overflow: much greater than
+ * anything encountered in practice.
+ */
+
+#define NAME_ONELINE_MAX    (1024 * 1024)
+
+char *X509_NAME_oneline(const X509_NAME *a, char *buf, int len)
+{
+    const X509_NAME_ENTRY *ne;
+    int i;
+    int n, lold, l, l1, l2, num, j, type;
+    const char *s;
+    char *p;
+    unsigned char *q;
+    BUF_MEM *b = NULL;
+    static const char hex[17] = "0123456789ABCDEF";
+    int gs_doit[4];
+    char tmp_buf[80];
+#ifdef CHARSET_EBCDIC
+    unsigned char ebcdic_buf[1024];
+#endif
+
+    if (buf == NULL) {
+        if ((b = BUF_MEM_new()) == NULL)
+            goto err;
+        if (!BUF_MEM_grow(b, 200))
+            goto err;
+        b->data[0] = '\0';
+        len = 200;
+    } else if (len == 0) {
+        return NULL;
+    }
+    if (a == NULL) {
+        if (b) {
+            buf = b->data;
+            OPENSSL_free(b);
+        }
+        strncpy(buf, "NO X509_NAME", len);
+        buf[len - 1] = '\0';
+        return buf;
+    }
+
+    len--;                      /* space for '\0' */
+    l = 0;
+    for (i = 0; i < sk_X509_NAME_ENTRY_num(a->entries); i++) {
+        ne = sk_X509_NAME_ENTRY_value(a->entries, i);
+        n = OBJ_obj2nid(ne->object);
+        if ((n == NID_undef) || ((s = OBJ_nid2sn(n)) == NULL)) {
+            i2t_ASN1_OBJECT(tmp_buf, sizeof(tmp_buf), ne->object);
+            s = tmp_buf;
+        }
+        l1 = strlen(s);
+
+        type = ne->value->type;
+        num = ne->value->length;
+        if (num > NAME_ONELINE_MAX) {
+            X509err(X509_F_X509_NAME_ONELINE, X509_R_NAME_TOO_LONG);
+            goto end;
+        }
+        q = ne->value->data;
+#ifdef CHARSET_EBCDIC
+        if (type == V_ASN1_GENERALSTRING ||
+            type == V_ASN1_VISIBLESTRING ||
+            type == V_ASN1_PRINTABLESTRING ||
+            type == V_ASN1_TELETEXSTRING ||
+            type == V_ASN1_IA5STRING) {
+            if (num > (int)sizeof(ebcdic_buf))
+                num = sizeof(ebcdic_buf);
+            ascii2ebcdic(ebcdic_buf, q, num);
+            q = ebcdic_buf;
+        }
+#endif
+
+        if ((type == V_ASN1_GENERALSTRING) && ((num % 4) == 0)) {
+            gs_doit[0] = gs_doit[1] = gs_doit[2] = gs_doit[3] = 0;
+            for (j = 0; j < num; j++)
+                if (q[j] != 0)
+                    gs_doit[j & 3] = 1;
+
+            if (gs_doit[0] | gs_doit[1] | gs_doit[2])
+                gs_doit[0] = gs_doit[1] = gs_doit[2] = gs_doit[3] = 1;
+            else {
+                gs_doit[0] = gs_doit[1] = gs_doit[2] = 0;
+                gs_doit[3] = 1;
+            }
+        } else
+            gs_doit[0] = gs_doit[1] = gs_doit[2] = gs_doit[3] = 1;
+
+        for (l2 = j = 0; j < num; j++) {
+            if (!gs_doit[j & 3])
+                continue;
+            l2++;
+#ifndef CHARSET_EBCDIC
+            if ((q[j] < ' ') || (q[j] > '~'))
+                l2 += 3;
+#else
+            if ((os_toascii[q[j]] < os_toascii[' ']) ||
+                (os_toascii[q[j]] > os_toascii['~']))
+                l2 += 3;
+#endif
+        }
+
+        lold = l;
+        l += 1 + l1 + 1 + l2;
+        if (l > NAME_ONELINE_MAX) {
+            X509err(X509_F_X509_NAME_ONELINE, X509_R_NAME_TOO_LONG);
+            goto end;
+        }
+        if (b != NULL) {
+            if (!BUF_MEM_grow(b, l + 1))
+                goto err;
+            p = &(b->data[lold]);
+        } else if (l > len) {
+            break;
+        } else
+            p = &(buf[lold]);
+        *(p++) = '/';
+        memcpy(p, s, (unsigned int)l1);
+        p += l1;
+        *(p++) = '=';
+
+#ifndef CHARSET_EBCDIC          /* q was assigned above already. */
+        q = ne->value->data;
+#endif
+
+        for (j = 0; j < num; j++) {
+            if (!gs_doit[j & 3])
+                continue;
+#ifndef CHARSET_EBCDIC
+            n = q[j];
+            if ((n < ' ') || (n > '~')) {
+                *(p++) = '\\';
+                *(p++) = 'x';
+                *(p++) = hex[(n >> 4) & 0x0f];
+                *(p++) = hex[n & 0x0f];
+            } else
+                *(p++) = n;
+#else
+            n = os_toascii[q[j]];
+            if ((n < os_toascii[' ']) || (n > os_toascii['~'])) {
+                *(p++) = '\\';
+                *(p++) = 'x';
+                *(p++) = hex[(n >> 4) & 0x0f];
+                *(p++) = hex[n & 0x0f];
+            } else
+                *(p++) = q[j];
+#endif
+        }
+        *p = '\0';
+    }
+    if (b != NULL) {
+        p = b->data;
+        OPENSSL_free(b);
+    } else
+        p = buf;
+    if (i == 0)
+        *p = '\0';
+    return p;
+ err:
+    X509err(X509_F_X509_NAME_ONELINE, ERR_R_MALLOC_FAILURE);
+ end:
+    BUF_MEM_free(b);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_r2x.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_r2x.c
new file mode 100644
index 000000000..3d72787d3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_r2x.c
@@ -0,0 +1,67 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include <openssl/evp.h>
+#include <openssl/asn1.h>
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+#include <openssl/objects.h>
+#include <openssl/buffer.h>
+
+X509 *X509_REQ_to_X509(X509_REQ *r, int days, EVP_PKEY *pkey)
+{
+    X509 *ret = NULL;
+    X509_CINF *xi = NULL;
+    X509_NAME *xn;
+    EVP_PKEY *pubkey = NULL;
+
+    if ((ret = X509_new()) == NULL) {
+        X509err(X509_F_X509_REQ_TO_X509, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    /* duplicate the request */
+    xi = &ret->cert_info;
+
+    if (sk_X509_ATTRIBUTE_num(r->req_info.attributes) != 0) {
+        if ((xi->version = ASN1_INTEGER_new()) == NULL)
+            goto err;
+        if (!ASN1_INTEGER_set(xi->version, 2))
+            goto err;
+/*-     xi->extensions=ri->attributes; <- bad, should not ever be done
+        ri->attributes=NULL; */
+    }
+
+    xn = X509_REQ_get_subject_name(r);
+    if (X509_set_subject_name(ret, xn) == 0)
+        goto err;
+    if (X509_set_issuer_name(ret, xn) == 0)
+        goto err;
+
+    if (X509_gmtime_adj(xi->validity.notBefore, 0) == NULL)
+        goto err;
+    if (X509_gmtime_adj(xi->validity.notAfter, (long)60 * 60 * 24 * days) ==
+        NULL)
+        goto err;
+
+    pubkey = X509_REQ_get0_pubkey(r);
+    if (pubkey == NULL || !X509_set_pubkey(ret, pubkey))
+        goto err;
+
+    if (!X509_sign(ret, pkey, EVP_md5()))
+        goto err;
+    return ret;
+
+ err:
+    X509_free(ret);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_req.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_req.c
new file mode 100644
index 000000000..0bdbb81db
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_req.c
@@ -0,0 +1,298 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/bn.h>
+#include <openssl/evp.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+#include <openssl/objects.h>
+#include <openssl/buffer.h>
+#include <openssl/pem.h>
+
+X509_REQ *X509_to_X509_REQ(X509 *x, EVP_PKEY *pkey, const EVP_MD *md)
+{
+    X509_REQ *ret;
+    X509_REQ_INFO *ri;
+    int i;
+    EVP_PKEY *pktmp;
+
+    ret = X509_REQ_new();
+    if (ret == NULL) {
+        X509err(X509_F_X509_TO_X509_REQ, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    ri = &ret->req_info;
+
+    ri->version->length = 1;
+    ri->version->data = OPENSSL_malloc(1);
+    if (ri->version->data == NULL)
+        goto err;
+    ri->version->data[0] = 0;   /* version == 0 */
+
+    if (!X509_REQ_set_subject_name(ret, X509_get_subject_name(x)))
+        goto err;
+
+    pktmp = X509_get0_pubkey(x);
+    if (pktmp == NULL)
+        goto err;
+    i = X509_REQ_set_pubkey(ret, pktmp);
+    if (!i)
+        goto err;
+
+    if (pkey != NULL) {
+        if (!X509_REQ_sign(ret, pkey, md))
+            goto err;
+    }
+    return ret;
+ err:
+    X509_REQ_free(ret);
+    return NULL;
+}
+
+EVP_PKEY *X509_REQ_get_pubkey(X509_REQ *req)
+{
+    if (req == NULL)
+        return NULL;
+    return X509_PUBKEY_get(req->req_info.pubkey);
+}
+
+EVP_PKEY *X509_REQ_get0_pubkey(X509_REQ *req)
+{
+    if (req == NULL)
+        return NULL;
+    return X509_PUBKEY_get0(req->req_info.pubkey);
+}
+
+X509_PUBKEY *X509_REQ_get_X509_PUBKEY(X509_REQ *req)
+{
+    return req->req_info.pubkey;
+}
+
+int X509_REQ_check_private_key(X509_REQ *x, EVP_PKEY *k)
+{
+    EVP_PKEY *xk = NULL;
+    int ok = 0;
+
+    xk = X509_REQ_get_pubkey(x);
+    switch (EVP_PKEY_cmp(xk, k)) {
+    case 1:
+        ok = 1;
+        break;
+    case 0:
+        X509err(X509_F_X509_REQ_CHECK_PRIVATE_KEY,
+                X509_R_KEY_VALUES_MISMATCH);
+        break;
+    case -1:
+        X509err(X509_F_X509_REQ_CHECK_PRIVATE_KEY, X509_R_KEY_TYPE_MISMATCH);
+        break;
+    case -2:
+#ifndef OPENSSL_NO_EC
+        if (EVP_PKEY_id(k) == EVP_PKEY_EC) {
+            X509err(X509_F_X509_REQ_CHECK_PRIVATE_KEY, ERR_R_EC_LIB);
+            break;
+        }
+#endif
+#ifndef OPENSSL_NO_DH
+        if (EVP_PKEY_id(k) == EVP_PKEY_DH) {
+            /* No idea */
+            X509err(X509_F_X509_REQ_CHECK_PRIVATE_KEY,
+                    X509_R_CANT_CHECK_DH_KEY);
+            break;
+        }
+#endif
+        X509err(X509_F_X509_REQ_CHECK_PRIVATE_KEY, X509_R_UNKNOWN_KEY_TYPE);
+    }
+
+    EVP_PKEY_free(xk);
+    return ok;
+}
+
+/*
+ * It seems several organisations had the same idea of including a list of
+ * extensions in a certificate request. There are at least two OIDs that are
+ * used and there may be more: so the list is configurable.
+ */
+
+static int ext_nid_list[] = { NID_ext_req, NID_ms_ext_req, NID_undef };
+
+static int *ext_nids = ext_nid_list;
+
+int X509_REQ_extension_nid(int req_nid)
+{
+    int i, nid;
+    for (i = 0;; i++) {
+        nid = ext_nids[i];
+        if (nid == NID_undef)
+            return 0;
+        else if (req_nid == nid)
+            return 1;
+    }
+}
+
+int *X509_REQ_get_extension_nids(void)
+{
+    return ext_nids;
+}
+
+void X509_REQ_set_extension_nids(int *nids)
+{
+    ext_nids = nids;
+}
+
+STACK_OF(X509_EXTENSION) *X509_REQ_get_extensions(X509_REQ *req)
+{
+    X509_ATTRIBUTE *attr;
+    ASN1_TYPE *ext = NULL;
+    int idx, *pnid;
+    const unsigned char *p;
+
+    if ((req == NULL) || !ext_nids)
+        return NULL;
+    for (pnid = ext_nids; *pnid != NID_undef; pnid++) {
+        idx = X509_REQ_get_attr_by_NID(req, *pnid, -1);
+        if (idx == -1)
+            continue;
+        attr = X509_REQ_get_attr(req, idx);
+        ext = X509_ATTRIBUTE_get0_type(attr, 0);
+        break;
+    }
+    if (!ext || (ext->type != V_ASN1_SEQUENCE))
+        return NULL;
+    p = ext->value.sequence->data;
+    return (STACK_OF(X509_EXTENSION) *)
+        ASN1_item_d2i(NULL, &p, ext->value.sequence->length,
+                      ASN1_ITEM_rptr(X509_EXTENSIONS));
+}
+
+/*
+ * Add a STACK_OF extensions to a certificate request: allow alternative OIDs
+ * in case we want to create a non standard one.
+ */
+
+int X509_REQ_add_extensions_nid(X509_REQ *req, STACK_OF(X509_EXTENSION) *exts,
+                                int nid)
+{
+    int extlen;
+    int rv = 0;
+    unsigned char *ext = NULL;
+    /* Generate encoding of extensions */
+    extlen = ASN1_item_i2d((ASN1_VALUE *)exts, &ext,
+                           ASN1_ITEM_rptr(X509_EXTENSIONS));
+    if (extlen <= 0)
+        return 0;
+    rv = X509_REQ_add1_attr_by_NID(req, nid, V_ASN1_SEQUENCE, ext, extlen);
+    OPENSSL_free(ext);
+    return rv;
+}
+
+/* This is the normal usage: use the "official" OID */
+int X509_REQ_add_extensions(X509_REQ *req, STACK_OF(X509_EXTENSION) *exts)
+{
+    return X509_REQ_add_extensions_nid(req, exts, NID_ext_req);
+}
+
+/* Request attribute functions */
+
+int X509_REQ_get_attr_count(const X509_REQ *req)
+{
+    return X509at_get_attr_count(req->req_info.attributes);
+}
+
+int X509_REQ_get_attr_by_NID(const X509_REQ *req, int nid, int lastpos)
+{
+    return X509at_get_attr_by_NID(req->req_info.attributes, nid, lastpos);
+}
+
+int X509_REQ_get_attr_by_OBJ(const X509_REQ *req, const ASN1_OBJECT *obj,
+                             int lastpos)
+{
+    return X509at_get_attr_by_OBJ(req->req_info.attributes, obj, lastpos);
+}
+
+X509_ATTRIBUTE *X509_REQ_get_attr(const X509_REQ *req, int loc)
+{
+    return X509at_get_attr(req->req_info.attributes, loc);
+}
+
+X509_ATTRIBUTE *X509_REQ_delete_attr(X509_REQ *req, int loc)
+{
+    return X509at_delete_attr(req->req_info.attributes, loc);
+}
+
+int X509_REQ_add1_attr(X509_REQ *req, X509_ATTRIBUTE *attr)
+{
+    if (X509at_add1_attr(&req->req_info.attributes, attr))
+        return 1;
+    return 0;
+}
+
+int X509_REQ_add1_attr_by_OBJ(X509_REQ *req,
+                              const ASN1_OBJECT *obj, int type,
+                              const unsigned char *bytes, int len)
+{
+    if (X509at_add1_attr_by_OBJ(&req->req_info.attributes, obj,
+                                type, bytes, len))
+        return 1;
+    return 0;
+}
+
+int X509_REQ_add1_attr_by_NID(X509_REQ *req,
+                              int nid, int type,
+                              const unsigned char *bytes, int len)
+{
+    if (X509at_add1_attr_by_NID(&req->req_info.attributes, nid,
+                                type, bytes, len))
+        return 1;
+    return 0;
+}
+
+int X509_REQ_add1_attr_by_txt(X509_REQ *req,
+                              const char *attrname, int type,
+                              const unsigned char *bytes, int len)
+{
+    if (X509at_add1_attr_by_txt(&req->req_info.attributes, attrname,
+                                type, bytes, len))
+        return 1;
+    return 0;
+}
+
+long X509_REQ_get_version(const X509_REQ *req)
+{
+    return ASN1_INTEGER_get(req->req_info.version);
+}
+
+X509_NAME *X509_REQ_get_subject_name(const X509_REQ *req)
+{
+    return req->req_info.subject;
+}
+
+void X509_REQ_get0_signature(const X509_REQ *req, const ASN1_BIT_STRING **psig,
+                             const X509_ALGOR **palg)
+{
+    if (psig != NULL)
+        *psig = req->signature;
+    if (palg != NULL)
+        *palg = &req->sig_alg;
+}
+
+int X509_REQ_get_signature_nid(const X509_REQ *req)
+{
+    return OBJ_obj2nid(req->sig_alg.algorithm);
+}
+
+int i2d_re_X509_REQ_tbs(X509_REQ *req, unsigned char **pp)
+{
+    req->req_info.enc.modified = 1;
+    return i2d_X509_REQ_INFO(&req->req_info, pp);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_set.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_set.c
new file mode 100644
index 000000000..3ab6bf351
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_set.c
@@ -0,0 +1,237 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "internal/refcount.h"
+#include <openssl/asn1.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include "internal/asn1_int.h"
+#include "internal/x509_int.h"
+#include "x509_lcl.h"
+
+int X509_set_version(X509 *x, long version)
+{
+    if (x == NULL)
+        return 0;
+    if (version == 0) {
+        ASN1_INTEGER_free(x->cert_info.version);
+        x->cert_info.version = NULL;
+        return 1;
+    }
+    if (x->cert_info.version == NULL) {
+        if ((x->cert_info.version = ASN1_INTEGER_new()) == NULL)
+            return 0;
+    }
+    return ASN1_INTEGER_set(x->cert_info.version, version);
+}
+
+int X509_set_serialNumber(X509 *x, ASN1_INTEGER *serial)
+{
+    ASN1_INTEGER *in;
+
+    if (x == NULL)
+        return 0;
+    in = &x->cert_info.serialNumber;
+    if (in != serial)
+        return ASN1_STRING_copy(in, serial);
+    return 1;
+}
+
+int X509_set_issuer_name(X509 *x, X509_NAME *name)
+{
+    if (x == NULL)
+        return 0;
+    return X509_NAME_set(&x->cert_info.issuer, name);
+}
+
+int X509_set_subject_name(X509 *x, X509_NAME *name)
+{
+    if (x == NULL)
+        return 0;
+    return X509_NAME_set(&x->cert_info.subject, name);
+}
+
+int x509_set1_time(ASN1_TIME **ptm, const ASN1_TIME *tm)
+{
+    ASN1_TIME *in;
+    in = *ptm;
+    if (in != tm) {
+        in = ASN1_STRING_dup(tm);
+        if (in != NULL) {
+            ASN1_TIME_free(*ptm);
+            *ptm = in;
+        }
+    }
+    return (in != NULL);
+}
+
+int X509_set1_notBefore(X509 *x, const ASN1_TIME *tm)
+{
+    if (x == NULL)
+        return 0;
+    return x509_set1_time(&x->cert_info.validity.notBefore, tm);
+}
+
+int X509_set1_notAfter(X509 *x, const ASN1_TIME *tm)
+{
+    if (x == NULL)
+        return 0;
+    return x509_set1_time(&x->cert_info.validity.notAfter, tm);
+}
+
+int X509_set_pubkey(X509 *x, EVP_PKEY *pkey)
+{
+    if (x == NULL)
+        return 0;
+    return X509_PUBKEY_set(&(x->cert_info.key), pkey);
+}
+
+int X509_up_ref(X509 *x)
+{
+    int i;
+
+    if (CRYPTO_UP_REF(&x->references, &i, x->lock) <= 0)
+        return 0;
+
+    REF_PRINT_COUNT("X509", x);
+    REF_ASSERT_ISNT(i < 2);
+    return ((i > 1) ? 1 : 0);
+}
+
+long X509_get_version(const X509 *x)
+{
+    return ASN1_INTEGER_get(x->cert_info.version);
+}
+
+const ASN1_TIME *X509_get0_notBefore(const X509 *x)
+{
+    return x->cert_info.validity.notBefore;
+}
+
+const ASN1_TIME *X509_get0_notAfter(const X509 *x)
+{
+    return x->cert_info.validity.notAfter;
+}
+
+ASN1_TIME *X509_getm_notBefore(const X509 *x)
+{
+    return x->cert_info.validity.notBefore;
+}
+
+ASN1_TIME *X509_getm_notAfter(const X509 *x)
+{
+    return x->cert_info.validity.notAfter;
+}
+
+int X509_get_signature_type(const X509 *x)
+{
+    return EVP_PKEY_type(OBJ_obj2nid(x->sig_alg.algorithm));
+}
+
+X509_PUBKEY *X509_get_X509_PUBKEY(const X509 *x)
+{
+    return x->cert_info.key;
+}
+
+const STACK_OF(X509_EXTENSION) *X509_get0_extensions(const X509 *x)
+{
+    return x->cert_info.extensions;
+}
+
+void X509_get0_uids(const X509 *x, const ASN1_BIT_STRING **piuid,
+                    const ASN1_BIT_STRING **psuid)
+{
+    if (piuid != NULL)
+        *piuid = x->cert_info.issuerUID;
+    if (psuid != NULL)
+        *psuid = x->cert_info.subjectUID;
+}
+
+const X509_ALGOR *X509_get0_tbs_sigalg(const X509 *x)
+{
+    return &x->cert_info.signature;
+}
+
+int X509_SIG_INFO_get(const X509_SIG_INFO *siginf, int *mdnid, int *pknid,
+                      int *secbits, uint32_t *flags)
+{
+    if (mdnid != NULL)
+        *mdnid = siginf->mdnid;
+    if (pknid != NULL)
+        *pknid = siginf->pknid;
+    if (secbits != NULL)
+        *secbits = siginf->secbits;
+    if (flags != NULL)
+        *flags = siginf->flags;
+    return (siginf->flags & X509_SIG_INFO_VALID) != 0;
+}
+
+void X509_SIG_INFO_set(X509_SIG_INFO *siginf, int mdnid, int pknid,
+                       int secbits, uint32_t flags)
+{
+    siginf->mdnid = mdnid;
+    siginf->pknid = pknid;
+    siginf->secbits = secbits;
+    siginf->flags = flags;
+}
+
+int X509_get_signature_info(X509 *x, int *mdnid, int *pknid, int *secbits,
+                            uint32_t *flags)
+{
+    X509_check_purpose(x, -1, -1);
+    return X509_SIG_INFO_get(&x->siginf, mdnid, pknid, secbits, flags);
+}
+
+static void x509_sig_info_init(X509_SIG_INFO *siginf, const X509_ALGOR *alg,
+                               const ASN1_STRING *sig)
+{
+    int pknid, mdnid;
+    const EVP_MD *md;
+
+    siginf->mdnid = NID_undef;
+    siginf->pknid = NID_undef;
+    siginf->secbits = -1;
+    siginf->flags = 0;
+    if (!OBJ_find_sigid_algs(OBJ_obj2nid(alg->algorithm), &mdnid, &pknid)
+            || pknid == NID_undef)
+        return;
+    siginf->pknid = pknid;
+    if (mdnid == NID_undef) {
+        /* If we have one, use a custom handler for this algorithm */
+        const EVP_PKEY_ASN1_METHOD *ameth = EVP_PKEY_asn1_find(NULL, pknid);
+        if (ameth == NULL || ameth->siginf_set == NULL
+                || ameth->siginf_set(siginf, alg, sig) == 0)
+            return;
+        siginf->flags |= X509_SIG_INFO_VALID;
+        return;
+    }
+    siginf->flags |= X509_SIG_INFO_VALID;
+    siginf->mdnid = mdnid;
+    md = EVP_get_digestbynid(mdnid);
+    if (md == NULL)
+        return;
+    /* Security bits: half number of bits in digest */
+    siginf->secbits = EVP_MD_size(md) * 4;
+    switch (mdnid) {
+        case NID_sha1:
+        case NID_sha256:
+        case NID_sha384:
+        case NID_sha512:
+        siginf->flags |= X509_SIG_INFO_TLS;
+    }
+}
+
+void x509_init_sig_info(X509 *x)
+{
+    x509_sig_info_init(&x->siginf, &x->sig_alg, &x->signature);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_trs.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_trs.c
new file mode 100644
index 000000000..d749af4d5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_trs.c
@@ -0,0 +1,299 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509v3.h>
+#include "internal/x509_int.h"
+
+static int tr_cmp(const X509_TRUST *const *a, const X509_TRUST *const *b);
+static void trtable_free(X509_TRUST *p);
+
+static int trust_1oidany(X509_TRUST *trust, X509 *x, int flags);
+static int trust_1oid(X509_TRUST *trust, X509 *x, int flags);
+static int trust_compat(X509_TRUST *trust, X509 *x, int flags);
+
+static int obj_trust(int id, X509 *x, int flags);
+static int (*default_trust) (int id, X509 *x, int flags) = obj_trust;
+
+/*
+ * WARNING: the following table should be kept in order of trust and without
+ * any gaps so we can just subtract the minimum trust value to get an index
+ * into the table
+ */
+
+static X509_TRUST trstandard[] = {
+    {X509_TRUST_COMPAT, 0, trust_compat, "compatible", 0, NULL},
+    {X509_TRUST_SSL_CLIENT, 0, trust_1oidany, "SSL Client", NID_client_auth,
+     NULL},
+    {X509_TRUST_SSL_SERVER, 0, trust_1oidany, "SSL Server", NID_server_auth,
+     NULL},
+    {X509_TRUST_EMAIL, 0, trust_1oidany, "S/MIME email", NID_email_protect,
+     NULL},
+    {X509_TRUST_OBJECT_SIGN, 0, trust_1oidany, "Object Signer", NID_code_sign,
+     NULL},
+    {X509_TRUST_OCSP_SIGN, 0, trust_1oid, "OCSP responder", NID_OCSP_sign,
+     NULL},
+    {X509_TRUST_OCSP_REQUEST, 0, trust_1oid, "OCSP request", NID_ad_OCSP,
+     NULL},
+    {X509_TRUST_TSA, 0, trust_1oidany, "TSA server", NID_time_stamp, NULL}
+};
+
+#define X509_TRUST_COUNT        OSSL_NELEM(trstandard)
+
+static STACK_OF(X509_TRUST) *trtable = NULL;
+
+static int tr_cmp(const X509_TRUST *const *a, const X509_TRUST *const *b)
+{
+    return (*a)->trust - (*b)->trust;
+}
+
+int (*X509_TRUST_set_default(int (*trust) (int, X509 *, int))) (int, X509 *,
+                                                                int) {
+    int (*oldtrust) (int, X509 *, int);
+    oldtrust = default_trust;
+    default_trust = trust;
+    return oldtrust;
+}
+
+int X509_check_trust(X509 *x, int id, int flags)
+{
+    X509_TRUST *pt;
+    int idx;
+
+    /* We get this as a default value */
+    if (id == X509_TRUST_DEFAULT)
+        return obj_trust(NID_anyExtendedKeyUsage, x,
+                         flags | X509_TRUST_DO_SS_COMPAT);
+    idx = X509_TRUST_get_by_id(id);
+    if (idx == -1)
+        return default_trust(id, x, flags);
+    pt = X509_TRUST_get0(idx);
+    return pt->check_trust(pt, x, flags);
+}
+
+int X509_TRUST_get_count(void)
+{
+    if (!trtable)
+        return X509_TRUST_COUNT;
+    return sk_X509_TRUST_num(trtable) + X509_TRUST_COUNT;
+}
+
+X509_TRUST *X509_TRUST_get0(int idx)
+{
+    if (idx < 0)
+        return NULL;
+    if (idx < (int)X509_TRUST_COUNT)
+        return trstandard + idx;
+    return sk_X509_TRUST_value(trtable, idx - X509_TRUST_COUNT);
+}
+
+int X509_TRUST_get_by_id(int id)
+{
+    X509_TRUST tmp;
+    int idx;
+
+    if ((id >= X509_TRUST_MIN) && (id <= X509_TRUST_MAX))
+        return id - X509_TRUST_MIN;
+    if (trtable == NULL)
+        return -1;
+    tmp.trust = id;
+    idx = sk_X509_TRUST_find(trtable, &tmp);
+    if (idx < 0)
+        return -1;
+    return idx + X509_TRUST_COUNT;
+}
+
+int X509_TRUST_set(int *t, int trust)
+{
+    if (X509_TRUST_get_by_id(trust) == -1) {
+        X509err(X509_F_X509_TRUST_SET, X509_R_INVALID_TRUST);
+        return 0;
+    }
+    *t = trust;
+    return 1;
+}
+
+int X509_TRUST_add(int id, int flags, int (*ck) (X509_TRUST *, X509 *, int),
+                   const char *name, int arg1, void *arg2)
+{
+    int idx;
+    X509_TRUST *trtmp;
+    /*
+     * This is set according to what we change: application can't set it
+     */
+    flags &= ~X509_TRUST_DYNAMIC;
+    /* This will always be set for application modified trust entries */
+    flags |= X509_TRUST_DYNAMIC_NAME;
+    /* Get existing entry if any */
+    idx = X509_TRUST_get_by_id(id);
+    /* Need a new entry */
+    if (idx == -1) {
+        if ((trtmp = OPENSSL_malloc(sizeof(*trtmp))) == NULL) {
+            X509err(X509_F_X509_TRUST_ADD, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        trtmp->flags = X509_TRUST_DYNAMIC;
+    } else
+        trtmp = X509_TRUST_get0(idx);
+
+    /* OPENSSL_free existing name if dynamic */
+    if (trtmp->flags & X509_TRUST_DYNAMIC_NAME)
+        OPENSSL_free(trtmp->name);
+    /* dup supplied name */
+    if ((trtmp->name = OPENSSL_strdup(name)) == NULL) {
+        X509err(X509_F_X509_TRUST_ADD, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    /* Keep the dynamic flag of existing entry */
+    trtmp->flags &= X509_TRUST_DYNAMIC;
+    /* Set all other flags */
+    trtmp->flags |= flags;
+
+    trtmp->trust = id;
+    trtmp->check_trust = ck;
+    trtmp->arg1 = arg1;
+    trtmp->arg2 = arg2;
+
+    /* If its a new entry manage the dynamic table */
+    if (idx == -1) {
+        if (trtable == NULL
+            && (trtable = sk_X509_TRUST_new(tr_cmp)) == NULL) {
+            X509err(X509_F_X509_TRUST_ADD, ERR_R_MALLOC_FAILURE);
+            goto err;;
+        }
+        if (!sk_X509_TRUST_push(trtable, trtmp)) {
+            X509err(X509_F_X509_TRUST_ADD, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+    return 1;
+ err:
+    if (idx == -1) {
+        OPENSSL_free(trtmp->name);
+        OPENSSL_free(trtmp);
+    }
+    return 0;
+}
+
+static void trtable_free(X509_TRUST *p)
+{
+    if (!p)
+        return;
+    if (p->flags & X509_TRUST_DYNAMIC) {
+        if (p->flags & X509_TRUST_DYNAMIC_NAME)
+            OPENSSL_free(p->name);
+        OPENSSL_free(p);
+    }
+}
+
+void X509_TRUST_cleanup(void)
+{
+    sk_X509_TRUST_pop_free(trtable, trtable_free);
+    trtable = NULL;
+}
+
+int X509_TRUST_get_flags(const X509_TRUST *xp)
+{
+    return xp->flags;
+}
+
+char *X509_TRUST_get0_name(const X509_TRUST *xp)
+{
+    return xp->name;
+}
+
+int X509_TRUST_get_trust(const X509_TRUST *xp)
+{
+    return xp->trust;
+}
+
+static int trust_1oidany(X509_TRUST *trust, X509 *x, int flags)
+{
+    /*
+     * Declare the chain verified if the desired trust OID is not rejected in
+     * any auxiliary trust info for this certificate, and the OID is either
+     * expressly trusted, or else either "anyEKU" is trusted, or the
+     * certificate is self-signed.
+     */
+    flags |= X509_TRUST_DO_SS_COMPAT | X509_TRUST_OK_ANY_EKU;
+    return obj_trust(trust->arg1, x, flags);
+}
+
+static int trust_1oid(X509_TRUST *trust, X509 *x, int flags)
+{
+    /*
+     * Declare the chain verified only if the desired trust OID is not
+     * rejected and is expressly trusted.  Neither "anyEKU" nor "compat"
+     * trust in self-signed certificates apply.
+     */
+    flags &= ~(X509_TRUST_DO_SS_COMPAT | X509_TRUST_OK_ANY_EKU);
+    return obj_trust(trust->arg1, x, flags);
+}
+
+static int trust_compat(X509_TRUST *trust, X509 *x, int flags)
+{
+    /* Call for side-effect of computing hash and caching extensions */
+    X509_check_purpose(x, -1, 0);
+    if ((flags & X509_TRUST_NO_SS_COMPAT) == 0 && x->ex_flags & EXFLAG_SS)
+        return X509_TRUST_TRUSTED;
+    else
+        return X509_TRUST_UNTRUSTED;
+}
+
+static int obj_trust(int id, X509 *x, int flags)
+{
+    X509_CERT_AUX *ax = x->aux;
+    int i;
+
+    if (ax && ax->reject) {
+        for (i = 0; i < sk_ASN1_OBJECT_num(ax->reject); i++) {
+            ASN1_OBJECT *obj = sk_ASN1_OBJECT_value(ax->reject, i);
+            int nid = OBJ_obj2nid(obj);
+
+            if (nid == id || (nid == NID_anyExtendedKeyUsage &&
+                (flags & X509_TRUST_OK_ANY_EKU)))
+                return X509_TRUST_REJECTED;
+        }
+    }
+
+    if (ax && ax->trust) {
+        for (i = 0; i < sk_ASN1_OBJECT_num(ax->trust); i++) {
+            ASN1_OBJECT *obj = sk_ASN1_OBJECT_value(ax->trust, i);
+            int nid = OBJ_obj2nid(obj);
+
+            if (nid == id || (nid == NID_anyExtendedKeyUsage &&
+                (flags & X509_TRUST_OK_ANY_EKU)))
+                return X509_TRUST_TRUSTED;
+        }
+        /*
+         * Reject when explicit trust EKU are set and none match.
+         *
+         * Returning untrusted is enough for for full chains that end in
+         * self-signed roots, because when explicit trust is specified it
+         * suppresses the default blanket trust of self-signed objects.
+         *
+         * But for partial chains, this is not enough, because absent a similar
+         * trust-self-signed policy, non matching EKUs are indistinguishable
+         * from lack of EKU constraints.
+         *
+         * Therefore, failure to match any trusted purpose must trigger an
+         * explicit reject.
+         */
+        return X509_TRUST_REJECTED;
+    }
+
+    if ((flags & X509_TRUST_DO_SS_COMPAT) == 0)
+        return X509_TRUST_UNTRUSTED;
+
+    /*
+     * Not rejected, and there is no list of accepted uses, try compat.
+     */
+    return trust_compat(NULL, x, flags);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_txt.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_txt.c
new file mode 100644
index 000000000..4755b39eb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_txt.c
@@ -0,0 +1,182 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include <errno.h>
+
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/evp.h>
+#include <openssl/asn1.h>
+#include <openssl/x509.h>
+#include <openssl/objects.h>
+
+const char *X509_verify_cert_error_string(long n)
+{
+    switch ((int)n) {
+    case X509_V_OK:
+        return "ok";
+    case X509_V_ERR_UNSPECIFIED:
+        return "unspecified certificate verification error";
+    case X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT:
+        return "unable to get issuer certificate";
+    case X509_V_ERR_UNABLE_TO_GET_CRL:
+        return "unable to get certificate CRL";
+    case X509_V_ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE:
+        return "unable to decrypt certificate's signature";
+    case X509_V_ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE:
+        return "unable to decrypt CRL's signature";
+    case X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY:
+        return "unable to decode issuer public key";
+    case X509_V_ERR_CERT_SIGNATURE_FAILURE:
+        return "certificate signature failure";
+    case X509_V_ERR_CRL_SIGNATURE_FAILURE:
+        return "CRL signature failure";
+    case X509_V_ERR_CERT_NOT_YET_VALID:
+        return "certificate is not yet valid";
+    case X509_V_ERR_CERT_HAS_EXPIRED:
+        return "certificate has expired";
+    case X509_V_ERR_CRL_NOT_YET_VALID:
+        return "CRL is not yet valid";
+    case X509_V_ERR_CRL_HAS_EXPIRED:
+        return "CRL has expired";
+    case X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD:
+        return "format error in certificate's notBefore field";
+    case X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD:
+        return "format error in certificate's notAfter field";
+    case X509_V_ERR_ERROR_IN_CRL_LAST_UPDATE_FIELD:
+        return "format error in CRL's lastUpdate field";
+    case X509_V_ERR_ERROR_IN_CRL_NEXT_UPDATE_FIELD:
+        return "format error in CRL's nextUpdate field";
+    case X509_V_ERR_OUT_OF_MEM:
+        return "out of memory";
+    case X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT:
+        return "self signed certificate";
+    case X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN:
+        return "self signed certificate in certificate chain";
+    case X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY:
+        return "unable to get local issuer certificate";
+    case X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE:
+        return "unable to verify the first certificate";
+    case X509_V_ERR_CERT_CHAIN_TOO_LONG:
+        return "certificate chain too long";
+    case X509_V_ERR_CERT_REVOKED:
+        return "certificate revoked";
+    case X509_V_ERR_INVALID_CA:
+        return "invalid CA certificate";
+    case X509_V_ERR_PATH_LENGTH_EXCEEDED:
+        return "path length constraint exceeded";
+    case X509_V_ERR_INVALID_PURPOSE:
+        return "unsupported certificate purpose";
+    case X509_V_ERR_CERT_UNTRUSTED:
+        return "certificate not trusted";
+    case X509_V_ERR_CERT_REJECTED:
+        return "certificate rejected";
+    case X509_V_ERR_SUBJECT_ISSUER_MISMATCH:
+        return "subject issuer mismatch";
+    case X509_V_ERR_AKID_SKID_MISMATCH:
+        return "authority and subject key identifier mismatch";
+    case X509_V_ERR_AKID_ISSUER_SERIAL_MISMATCH:
+        return "authority and issuer serial number mismatch";
+    case X509_V_ERR_KEYUSAGE_NO_CERTSIGN:
+        return "key usage does not include certificate signing";
+    case X509_V_ERR_UNABLE_TO_GET_CRL_ISSUER:
+        return "unable to get CRL issuer certificate";
+    case X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION:
+        return "unhandled critical extension";
+    case X509_V_ERR_KEYUSAGE_NO_CRL_SIGN:
+        return "key usage does not include CRL signing";
+    case X509_V_ERR_UNHANDLED_CRITICAL_CRL_EXTENSION:
+        return "unhandled critical CRL extension";
+    case X509_V_ERR_INVALID_NON_CA:
+        return "invalid non-CA certificate (has CA markings)";
+    case X509_V_ERR_PROXY_PATH_LENGTH_EXCEEDED:
+        return "proxy path length constraint exceeded";
+    case X509_V_ERR_KEYUSAGE_NO_DIGITAL_SIGNATURE:
+        return "key usage does not include digital signature";
+    case X509_V_ERR_PROXY_CERTIFICATES_NOT_ALLOWED:
+        return
+            "proxy certificates not allowed, please set the appropriate flag";
+    case X509_V_ERR_INVALID_EXTENSION:
+        return "invalid or inconsistent certificate extension";
+    case X509_V_ERR_INVALID_POLICY_EXTENSION:
+        return "invalid or inconsistent certificate policy extension";
+    case X509_V_ERR_NO_EXPLICIT_POLICY:
+        return "no explicit policy";
+    case X509_V_ERR_DIFFERENT_CRL_SCOPE:
+        return "Different CRL scope";
+    case X509_V_ERR_UNSUPPORTED_EXTENSION_FEATURE:
+        return "Unsupported extension feature";
+    case X509_V_ERR_UNNESTED_RESOURCE:
+        return "RFC 3779 resource not subset of parent's resources";
+    case X509_V_ERR_PERMITTED_VIOLATION:
+        return "permitted subtree violation";
+    case X509_V_ERR_EXCLUDED_VIOLATION:
+        return "excluded subtree violation";
+    case X509_V_ERR_SUBTREE_MINMAX:
+        return "name constraints minimum and maximum not supported";
+    case X509_V_ERR_APPLICATION_VERIFICATION:
+        return "application verification failure";
+    case X509_V_ERR_UNSUPPORTED_CONSTRAINT_TYPE:
+        return "unsupported name constraint type";
+    case X509_V_ERR_UNSUPPORTED_CONSTRAINT_SYNTAX:
+        return "unsupported or invalid name constraint syntax";
+    case X509_V_ERR_UNSUPPORTED_NAME_SYNTAX:
+        return "unsupported or invalid name syntax";
+    case X509_V_ERR_CRL_PATH_VALIDATION_ERROR:
+        return "CRL path validation error";
+    case X509_V_ERR_PATH_LOOP:
+        return "Path Loop";
+    case X509_V_ERR_SUITE_B_INVALID_VERSION:
+        return "Suite B: certificate version invalid";
+    case X509_V_ERR_SUITE_B_INVALID_ALGORITHM:
+        return "Suite B: invalid public key algorithm";
+    case X509_V_ERR_SUITE_B_INVALID_CURVE:
+        return "Suite B: invalid ECC curve";
+    case X509_V_ERR_SUITE_B_INVALID_SIGNATURE_ALGORITHM:
+        return "Suite B: invalid signature algorithm";
+    case X509_V_ERR_SUITE_B_LOS_NOT_ALLOWED:
+        return "Suite B: curve not allowed for this LOS";
+    case X509_V_ERR_SUITE_B_CANNOT_SIGN_P_384_WITH_P_256:
+        return "Suite B: cannot sign P-384 with P-256";
+    case X509_V_ERR_HOSTNAME_MISMATCH:
+        return "Hostname mismatch";
+    case X509_V_ERR_EMAIL_MISMATCH:
+        return "Email address mismatch";
+    case X509_V_ERR_IP_ADDRESS_MISMATCH:
+        return "IP address mismatch";
+    case X509_V_ERR_DANE_NO_MATCH:
+        return "No matching DANE TLSA records";
+    case X509_V_ERR_EE_KEY_TOO_SMALL:
+        return "EE certificate key too weak";
+    case X509_V_ERR_CA_KEY_TOO_SMALL:
+        return "CA certificate key too weak";
+    case X509_V_ERR_CA_MD_TOO_WEAK:
+        return "CA signature digest algorithm too weak";
+    case X509_V_ERR_INVALID_CALL:
+        return "Invalid certificate verification context";
+    case X509_V_ERR_STORE_LOOKUP:
+        return "Issuer certificate lookup error";
+    case X509_V_ERR_NO_VALID_SCTS:
+        return "Certificate Transparency required, but no valid SCTs found";
+    case X509_V_ERR_PROXY_SUBJECT_NAME_VIOLATION:
+        return "proxy subject name violation";
+    case X509_V_ERR_OCSP_VERIFY_NEEDED:
+        return "OCSP verification needed";
+    case X509_V_ERR_OCSP_VERIFY_FAILED:
+        return "OCSP verification failed";
+    case X509_V_ERR_OCSP_CERT_UNKNOWN:
+        return "OCSP unknown cert";
+
+    default:
+        /* Printing an error number into a static buffer is not thread-safe */
+        return "unknown certificate verification error";
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_v3.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_v3.c
new file mode 100644
index 000000000..75ae767d6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_v3.c
@@ -0,0 +1,235 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/safestack.h>
+#include <openssl/asn1.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include "x509_lcl.h"
+
+int X509v3_get_ext_count(const STACK_OF(X509_EXTENSION) *x)
+{
+    if (x == NULL)
+        return 0;
+    return sk_X509_EXTENSION_num(x);
+}
+
+int X509v3_get_ext_by_NID(const STACK_OF(X509_EXTENSION) *x, int nid,
+                          int lastpos)
+{
+    ASN1_OBJECT *obj;
+
+    obj = OBJ_nid2obj(nid);
+    if (obj == NULL)
+        return -2;
+    return X509v3_get_ext_by_OBJ(x, obj, lastpos);
+}
+
+int X509v3_get_ext_by_OBJ(const STACK_OF(X509_EXTENSION) *sk,
+                          const ASN1_OBJECT *obj, int lastpos)
+{
+    int n;
+    X509_EXTENSION *ex;
+
+    if (sk == NULL)
+        return -1;
+    lastpos++;
+    if (lastpos < 0)
+        lastpos = 0;
+    n = sk_X509_EXTENSION_num(sk);
+    for (; lastpos < n; lastpos++) {
+        ex = sk_X509_EXTENSION_value(sk, lastpos);
+        if (OBJ_cmp(ex->object, obj) == 0)
+            return lastpos;
+    }
+    return -1;
+}
+
+int X509v3_get_ext_by_critical(const STACK_OF(X509_EXTENSION) *sk, int crit,
+                               int lastpos)
+{
+    int n;
+    X509_EXTENSION *ex;
+
+    if (sk == NULL)
+        return -1;
+    lastpos++;
+    if (lastpos < 0)
+        lastpos = 0;
+    n = sk_X509_EXTENSION_num(sk);
+    for (; lastpos < n; lastpos++) {
+        ex = sk_X509_EXTENSION_value(sk, lastpos);
+        if (((ex->critical > 0) && crit) || ((ex->critical <= 0) && !crit))
+            return lastpos;
+    }
+    return -1;
+}
+
+X509_EXTENSION *X509v3_get_ext(const STACK_OF(X509_EXTENSION) *x, int loc)
+{
+    if (x == NULL || sk_X509_EXTENSION_num(x) <= loc || loc < 0)
+        return NULL;
+    else
+        return sk_X509_EXTENSION_value(x, loc);
+}
+
+X509_EXTENSION *X509v3_delete_ext(STACK_OF(X509_EXTENSION) *x, int loc)
+{
+    X509_EXTENSION *ret;
+
+    if (x == NULL || sk_X509_EXTENSION_num(x) <= loc || loc < 0)
+        return NULL;
+    ret = sk_X509_EXTENSION_delete(x, loc);
+    return ret;
+}
+
+STACK_OF(X509_EXTENSION) *X509v3_add_ext(STACK_OF(X509_EXTENSION) **x,
+                                         X509_EXTENSION *ex, int loc)
+{
+    X509_EXTENSION *new_ex = NULL;
+    int n;
+    STACK_OF(X509_EXTENSION) *sk = NULL;
+
+    if (x == NULL) {
+        X509err(X509_F_X509V3_ADD_EXT, ERR_R_PASSED_NULL_PARAMETER);
+        goto err2;
+    }
+
+    if (*x == NULL) {
+        if ((sk = sk_X509_EXTENSION_new_null()) == NULL)
+            goto err;
+    } else
+        sk = *x;
+
+    n = sk_X509_EXTENSION_num(sk);
+    if (loc > n)
+        loc = n;
+    else if (loc < 0)
+        loc = n;
+
+    if ((new_ex = X509_EXTENSION_dup(ex)) == NULL)
+        goto err2;
+    if (!sk_X509_EXTENSION_insert(sk, new_ex, loc))
+        goto err;
+    if (*x == NULL)
+        *x = sk;
+    return sk;
+ err:
+    X509err(X509_F_X509V3_ADD_EXT, ERR_R_MALLOC_FAILURE);
+ err2:
+    X509_EXTENSION_free(new_ex);
+    if (x != NULL && *x == NULL)
+        sk_X509_EXTENSION_free(sk);
+    return NULL;
+}
+
+X509_EXTENSION *X509_EXTENSION_create_by_NID(X509_EXTENSION **ex, int nid,
+                                             int crit,
+                                             ASN1_OCTET_STRING *data)
+{
+    ASN1_OBJECT *obj;
+    X509_EXTENSION *ret;
+
+    obj = OBJ_nid2obj(nid);
+    if (obj == NULL) {
+        X509err(X509_F_X509_EXTENSION_CREATE_BY_NID, X509_R_UNKNOWN_NID);
+        return NULL;
+    }
+    ret = X509_EXTENSION_create_by_OBJ(ex, obj, crit, data);
+    if (ret == NULL)
+        ASN1_OBJECT_free(obj);
+    return ret;
+}
+
+X509_EXTENSION *X509_EXTENSION_create_by_OBJ(X509_EXTENSION **ex,
+                                             const ASN1_OBJECT *obj, int crit,
+                                             ASN1_OCTET_STRING *data)
+{
+    X509_EXTENSION *ret;
+
+    if ((ex == NULL) || (*ex == NULL)) {
+        if ((ret = X509_EXTENSION_new()) == NULL) {
+            X509err(X509_F_X509_EXTENSION_CREATE_BY_OBJ,
+                    ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+    } else
+        ret = *ex;
+
+    if (!X509_EXTENSION_set_object(ret, obj))
+        goto err;
+    if (!X509_EXTENSION_set_critical(ret, crit))
+        goto err;
+    if (!X509_EXTENSION_set_data(ret, data))
+        goto err;
+
+    if ((ex != NULL) && (*ex == NULL))
+        *ex = ret;
+    return ret;
+ err:
+    if ((ex == NULL) || (ret != *ex))
+        X509_EXTENSION_free(ret);
+    return NULL;
+}
+
+int X509_EXTENSION_set_object(X509_EXTENSION *ex, const ASN1_OBJECT *obj)
+{
+    if ((ex == NULL) || (obj == NULL))
+        return 0;
+    ASN1_OBJECT_free(ex->object);
+    ex->object = OBJ_dup(obj);
+    return ex->object != NULL;
+}
+
+int X509_EXTENSION_set_critical(X509_EXTENSION *ex, int crit)
+{
+    if (ex == NULL)
+        return 0;
+    ex->critical = (crit) ? 0xFF : -1;
+    return 1;
+}
+
+int X509_EXTENSION_set_data(X509_EXTENSION *ex, ASN1_OCTET_STRING *data)
+{
+    int i;
+
+    if (ex == NULL)
+        return 0;
+    i = ASN1_OCTET_STRING_set(&ex->value, data->data, data->length);
+    if (!i)
+        return 0;
+    return 1;
+}
+
+ASN1_OBJECT *X509_EXTENSION_get_object(X509_EXTENSION *ex)
+{
+    if (ex == NULL)
+        return NULL;
+    return ex->object;
+}
+
+ASN1_OCTET_STRING *X509_EXTENSION_get_data(X509_EXTENSION *ex)
+{
+    if (ex == NULL)
+        return NULL;
+    return &ex->value;
+}
+
+int X509_EXTENSION_get_critical(const X509_EXTENSION *ex)
+{
+    if (ex == NULL)
+        return 0;
+    if (ex->critical > 0)
+        return 1;
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_vfy.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_vfy.c
new file mode 100644
index 000000000..4ced716e3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_vfy.c
@@ -0,0 +1,3275 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include <errno.h>
+#include <limits.h>
+
+#include "internal/ctype.h"
+#include "internal/cryptlib.h"
+#include <openssl/crypto.h>
+#include <openssl/buffer.h>
+#include <openssl/evp.h>
+#include <openssl/asn1.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/objects.h>
+#include "internal/dane.h"
+#include "internal/x509_int.h"
+#include "x509_lcl.h"
+
+/* CRL score values */
+
+/* No unhandled critical extensions */
+
+#define CRL_SCORE_NOCRITICAL    0x100
+
+/* certificate is within CRL scope */
+
+#define CRL_SCORE_SCOPE         0x080
+
+/* CRL times valid */
+
+#define CRL_SCORE_TIME          0x040
+
+/* Issuer name matches certificate */
+
+#define CRL_SCORE_ISSUER_NAME   0x020
+
+/* If this score or above CRL is probably valid */
+
+#define CRL_SCORE_VALID (CRL_SCORE_NOCRITICAL|CRL_SCORE_TIME|CRL_SCORE_SCOPE)
+
+/* CRL issuer is certificate issuer */
+
+#define CRL_SCORE_ISSUER_CERT   0x018
+
+/* CRL issuer is on certificate path */
+
+#define CRL_SCORE_SAME_PATH     0x008
+
+/* CRL issuer matches CRL AKID */
+
+#define CRL_SCORE_AKID          0x004
+
+/* Have a delta CRL with valid times */
+
+#define CRL_SCORE_TIME_DELTA    0x002
+
+static int build_chain(X509_STORE_CTX *ctx);
+static int verify_chain(X509_STORE_CTX *ctx);
+static int dane_verify(X509_STORE_CTX *ctx);
+static int null_callback(int ok, X509_STORE_CTX *e);
+static int check_issued(X509_STORE_CTX *ctx, X509 *x, X509 *issuer);
+static X509 *find_issuer(X509_STORE_CTX *ctx, STACK_OF(X509) *sk, X509 *x);
+static int check_chain_extensions(X509_STORE_CTX *ctx);
+static int check_name_constraints(X509_STORE_CTX *ctx);
+static int check_id(X509_STORE_CTX *ctx);
+static int check_trust(X509_STORE_CTX *ctx, int num_untrusted);
+static int check_revocation(X509_STORE_CTX *ctx);
+static int check_cert(X509_STORE_CTX *ctx);
+static int check_policy(X509_STORE_CTX *ctx);
+static int get_issuer_sk(X509 **issuer, X509_STORE_CTX *ctx, X509 *x);
+static int check_dane_issuer(X509_STORE_CTX *ctx, int depth);
+static int check_key_level(X509_STORE_CTX *ctx, X509 *cert);
+static int check_sig_level(X509_STORE_CTX *ctx, X509 *cert);
+
+static int get_crl_score(X509_STORE_CTX *ctx, X509 **pissuer,
+                         unsigned int *preasons, X509_CRL *crl, X509 *x);
+static int get_crl_delta(X509_STORE_CTX *ctx,
+                         X509_CRL **pcrl, X509_CRL **pdcrl, X509 *x);
+static void get_delta_sk(X509_STORE_CTX *ctx, X509_CRL **dcrl,
+                         int *pcrl_score, X509_CRL *base,
+                         STACK_OF(X509_CRL) *crls);
+static void crl_akid_check(X509_STORE_CTX *ctx, X509_CRL *crl, X509 **pissuer,
+                           int *pcrl_score);
+static int crl_crldp_check(X509 *x, X509_CRL *crl, int crl_score,
+                           unsigned int *preasons);
+static int check_crl_path(X509_STORE_CTX *ctx, X509 *x);
+static int check_crl_chain(X509_STORE_CTX *ctx,
+                           STACK_OF(X509) *cert_path,
+                           STACK_OF(X509) *crl_path);
+
+static int internal_verify(X509_STORE_CTX *ctx);
+
+static int null_callback(int ok, X509_STORE_CTX *e)
+{
+    return ok;
+}
+
+/* Return 1 is a certificate is self signed */
+static int cert_self_signed(X509 *x)
+{
+    /*
+     * FIXME: x509v3_cache_extensions() needs to detect more failures and not
+     * set EXFLAG_SET when that happens.  Especially, if the failures are
+     * parse errors, rather than memory pressure!
+     */
+    X509_check_purpose(x, -1, 0);
+    if (x->ex_flags & EXFLAG_SS)
+        return 1;
+    else
+        return 0;
+}
+
+/* Given a certificate try and find an exact match in the store */
+
+static X509 *lookup_cert_match(X509_STORE_CTX *ctx, X509 *x)
+{
+    STACK_OF(X509) *certs;
+    X509 *xtmp = NULL;
+    int i;
+    /* Lookup all certs with matching subject name */
+    certs = ctx->lookup_certs(ctx, X509_get_subject_name(x));
+    if (certs == NULL)
+        return NULL;
+    /* Look for exact match */
+    for (i = 0; i < sk_X509_num(certs); i++) {
+        xtmp = sk_X509_value(certs, i);
+        if (!X509_cmp(xtmp, x))
+            break;
+    }
+    if (i < sk_X509_num(certs))
+        X509_up_ref(xtmp);
+    else
+        xtmp = NULL;
+    sk_X509_pop_free(certs, X509_free);
+    return xtmp;
+}
+
+/*-
+ * Inform the verify callback of an error.
+ * If B<x> is not NULL it is the error cert, otherwise use the chain cert at
+ * B<depth>.
+ * If B<err> is not X509_V_OK, that's the error value, otherwise leave
+ * unchanged (presumably set by the caller).
+ *
+ * Returns 0 to abort verification with an error, non-zero to continue.
+ */
+static int verify_cb_cert(X509_STORE_CTX *ctx, X509 *x, int depth, int err)
+{
+    ctx->error_depth = depth;
+    ctx->current_cert = (x != NULL) ? x : sk_X509_value(ctx->chain, depth);
+    if (err != X509_V_OK)
+        ctx->error = err;
+    return ctx->verify_cb(0, ctx);
+}
+
+/*-
+ * Inform the verify callback of an error, CRL-specific variant.  Here, the
+ * error depth and certificate are already set, we just specify the error
+ * number.
+ *
+ * Returns 0 to abort verification with an error, non-zero to continue.
+ */
+static int verify_cb_crl(X509_STORE_CTX *ctx, int err)
+{
+    ctx->error = err;
+    return ctx->verify_cb(0, ctx);
+}
+
+static int check_auth_level(X509_STORE_CTX *ctx)
+{
+    int i;
+    int num = sk_X509_num(ctx->chain);
+
+    if (ctx->param->auth_level <= 0)
+        return 1;
+
+    for (i = 0; i < num; ++i) {
+        X509 *cert = sk_X509_value(ctx->chain, i);
+
+        /*
+         * We've already checked the security of the leaf key, so here we only
+         * check the security of issuer keys.
+         */
+        if (i > 0 && !check_key_level(ctx, cert) &&
+            verify_cb_cert(ctx, cert, i, X509_V_ERR_CA_KEY_TOO_SMALL) == 0)
+            return 0;
+        /*
+         * We also check the signature algorithm security of all certificates
+         * except those of the trust anchor at index num-1.
+         */
+        if (i < num - 1 && !check_sig_level(ctx, cert) &&
+            verify_cb_cert(ctx, cert, i, X509_V_ERR_CA_MD_TOO_WEAK) == 0)
+            return 0;
+    }
+    return 1;
+}
+
+static int verify_chain(X509_STORE_CTX *ctx)
+{
+    int err;
+    int ok;
+
+    /*
+     * Before either returning with an error, or continuing with CRL checks,
+     * instantiate chain public key parameters.
+     */
+    if ((ok = build_chain(ctx)) == 0 ||
+        (ok = check_chain_extensions(ctx)) == 0 ||
+        (ok = check_auth_level(ctx)) == 0 ||
+        (ok = check_id(ctx)) == 0 || 1)
+        X509_get_pubkey_parameters(NULL, ctx->chain);
+    if (ok == 0 || (ok = ctx->check_revocation(ctx)) == 0)
+        return ok;
+
+    err = X509_chain_check_suiteb(&ctx->error_depth, NULL, ctx->chain,
+                                  ctx->param->flags);
+    if (err != X509_V_OK) {
+        if ((ok = verify_cb_cert(ctx, NULL, ctx->error_depth, err)) == 0)
+            return ok;
+    }
+
+    /* Verify chain signatures and expiration times */
+    ok = (ctx->verify != NULL) ? ctx->verify(ctx) : internal_verify(ctx);
+    if (!ok)
+        return ok;
+
+    if ((ok = check_name_constraints(ctx)) == 0)
+        return ok;
+
+#ifndef OPENSSL_NO_RFC3779
+    /* RFC 3779 path validation, now that CRL check has been done */
+    if ((ok = X509v3_asid_validate_path(ctx)) == 0)
+        return ok;
+    if ((ok = X509v3_addr_validate_path(ctx)) == 0)
+        return ok;
+#endif
+
+    /* If we get this far evaluate policies */
+    if (ctx->param->flags & X509_V_FLAG_POLICY_CHECK)
+        ok = ctx->check_policy(ctx);
+    return ok;
+}
+
+int X509_verify_cert(X509_STORE_CTX *ctx)
+{
+    SSL_DANE *dane = ctx->dane;
+    int ret;
+
+    if (ctx->cert == NULL) {
+        X509err(X509_F_X509_VERIFY_CERT, X509_R_NO_CERT_SET_FOR_US_TO_VERIFY);
+        ctx->error = X509_V_ERR_INVALID_CALL;
+        return -1;
+    }
+
+    if (ctx->chain != NULL) {
+        /*
+         * This X509_STORE_CTX has already been used to verify a cert. We
+         * cannot do another one.
+         */
+        X509err(X509_F_X509_VERIFY_CERT, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        ctx->error = X509_V_ERR_INVALID_CALL;
+        return -1;
+    }
+
+    /*
+     * first we make sure the chain we are going to build is present and that
+     * the first entry is in place
+     */
+    if (((ctx->chain = sk_X509_new_null()) == NULL) ||
+        (!sk_X509_push(ctx->chain, ctx->cert))) {
+        X509err(X509_F_X509_VERIFY_CERT, ERR_R_MALLOC_FAILURE);
+        ctx->error = X509_V_ERR_OUT_OF_MEM;
+        return -1;
+    }
+    X509_up_ref(ctx->cert);
+    ctx->num_untrusted = 1;
+
+    /* If the peer's public key is too weak, we can stop early. */
+    if (!check_key_level(ctx, ctx->cert) &&
+        !verify_cb_cert(ctx, ctx->cert, 0, X509_V_ERR_EE_KEY_TOO_SMALL))
+        return 0;
+
+    if (DANETLS_ENABLED(dane))
+        ret = dane_verify(ctx);
+    else
+        ret = verify_chain(ctx);
+
+    /*
+     * Safety-net.  If we are returning an error, we must also set ctx->error,
+     * so that the chain is not considered verified should the error be ignored
+     * (e.g. TLS with SSL_VERIFY_NONE).
+     */
+    if (ret <= 0 && ctx->error == X509_V_OK)
+        ctx->error = X509_V_ERR_UNSPECIFIED;
+    return ret;
+}
+
+/*
+ * Given a STACK_OF(X509) find the issuer of cert (if any)
+ */
+static X509 *find_issuer(X509_STORE_CTX *ctx, STACK_OF(X509) *sk, X509 *x)
+{
+    int i;
+    X509 *issuer, *rv = NULL;
+
+    for (i = 0; i < sk_X509_num(sk); i++) {
+        issuer = sk_X509_value(sk, i);
+        if (ctx->check_issued(ctx, x, issuer)) {
+            rv = issuer;
+            if (x509_check_cert_time(ctx, rv, -1))
+                break;
+        }
+    }
+    return rv;
+}
+
+/* Given a possible certificate and issuer check them */
+
+static int check_issued(X509_STORE_CTX *ctx, X509 *x, X509 *issuer)
+{
+    int ret;
+    if (x == issuer)
+        return cert_self_signed(x);
+    ret = X509_check_issued(issuer, x);
+    if (ret == X509_V_OK) {
+        int i;
+        X509 *ch;
+        /* Special case: single self signed certificate */
+        if (cert_self_signed(x) && sk_X509_num(ctx->chain) == 1)
+            return 1;
+        for (i = 0; i < sk_X509_num(ctx->chain); i++) {
+            ch = sk_X509_value(ctx->chain, i);
+            if (ch == issuer || !X509_cmp(ch, issuer)) {
+                ret = X509_V_ERR_PATH_LOOP;
+                break;
+            }
+        }
+    }
+
+    return (ret == X509_V_OK);
+}
+
+/* Alternative lookup method: look from a STACK stored in other_ctx */
+
+static int get_issuer_sk(X509 **issuer, X509_STORE_CTX *ctx, X509 *x)
+{
+    *issuer = find_issuer(ctx, ctx->other_ctx, x);
+    if (*issuer) {
+        X509_up_ref(*issuer);
+        return 1;
+    } else
+        return 0;
+}
+
+static STACK_OF(X509) *lookup_certs_sk(X509_STORE_CTX *ctx, X509_NAME *nm)
+{
+    STACK_OF(X509) *sk = NULL;
+    X509 *x;
+    int i;
+
+    for (i = 0; i < sk_X509_num(ctx->other_ctx); i++) {
+        x = sk_X509_value(ctx->other_ctx, i);
+        if (X509_NAME_cmp(nm, X509_get_subject_name(x)) == 0) {
+            if (sk == NULL)
+                sk = sk_X509_new_null();
+            if (sk == NULL || sk_X509_push(sk, x) == 0) {
+                sk_X509_pop_free(sk, X509_free);
+                X509err(X509_F_LOOKUP_CERTS_SK, ERR_R_MALLOC_FAILURE);
+                ctx->error = X509_V_ERR_OUT_OF_MEM;
+                return NULL;
+            }
+            X509_up_ref(x);
+        }
+    }
+    return sk;
+}
+
+/*
+ * Check EE or CA certificate purpose.  For trusted certificates explicit local
+ * auxiliary trust can be used to override EKU-restrictions.
+ */
+static int check_purpose(X509_STORE_CTX *ctx, X509 *x, int purpose, int depth,
+                         int must_be_ca)
+{
+    int tr_ok = X509_TRUST_UNTRUSTED;
+
+    /*
+     * For trusted certificates we want to see whether any auxiliary trust
+     * settings trump the purpose constraints.
+     *
+     * This is complicated by the fact that the trust ordinals in
+     * ctx->param->trust are entirely independent of the purpose ordinals in
+     * ctx->param->purpose!
+     *
+     * What connects them is their mutual initialization via calls from
+     * X509_STORE_CTX_set_default() into X509_VERIFY_PARAM_lookup() which sets
+     * related values of both param->trust and param->purpose.  It is however
+     * typically possible to infer associated trust values from a purpose value
+     * via the X509_PURPOSE API.
+     *
+     * Therefore, we can only check for trust overrides when the purpose we're
+     * checking is the same as ctx->param->purpose and ctx->param->trust is
+     * also set.
+     */
+    if (depth >= ctx->num_untrusted && purpose == ctx->param->purpose)
+        tr_ok = X509_check_trust(x, ctx->param->trust, X509_TRUST_NO_SS_COMPAT);
+
+    switch (tr_ok) {
+    case X509_TRUST_TRUSTED:
+        return 1;
+    case X509_TRUST_REJECTED:
+        break;
+    default:
+        switch (X509_check_purpose(x, purpose, must_be_ca > 0)) {
+        case 1:
+            return 1;
+        case 0:
+            break;
+        default:
+            if ((ctx->param->flags & X509_V_FLAG_X509_STRICT) == 0)
+                return 1;
+        }
+        break;
+    }
+
+    return verify_cb_cert(ctx, x, depth, X509_V_ERR_INVALID_PURPOSE);
+}
+
+/*
+ * Check a certificate chains extensions for consistency with the supplied
+ * purpose
+ */
+
+static int check_chain_extensions(X509_STORE_CTX *ctx)
+{
+    int i, must_be_ca, plen = 0;
+    X509 *x;
+    int proxy_path_length = 0;
+    int purpose;
+    int allow_proxy_certs;
+    int num = sk_X509_num(ctx->chain);
+
+    /*-
+     *  must_be_ca can have 1 of 3 values:
+     * -1: we accept both CA and non-CA certificates, to allow direct
+     *     use of self-signed certificates (which are marked as CA).
+     * 0:  we only accept non-CA certificates.  This is currently not
+     *     used, but the possibility is present for future extensions.
+     * 1:  we only accept CA certificates.  This is currently used for
+     *     all certificates in the chain except the leaf certificate.
+     */
+    must_be_ca = -1;
+
+    /* CRL path validation */
+    if (ctx->parent) {
+        allow_proxy_certs = 0;
+        purpose = X509_PURPOSE_CRL_SIGN;
+    } else {
+        allow_proxy_certs =
+            ! !(ctx->param->flags & X509_V_FLAG_ALLOW_PROXY_CERTS);
+        purpose = ctx->param->purpose;
+    }
+
+    for (i = 0; i < num; i++) {
+        int ret;
+        x = sk_X509_value(ctx->chain, i);
+        if (!(ctx->param->flags & X509_V_FLAG_IGNORE_CRITICAL)
+            && (x->ex_flags & EXFLAG_CRITICAL)) {
+            if (!verify_cb_cert(ctx, x, i,
+                                X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION))
+                return 0;
+        }
+        if (!allow_proxy_certs && (x->ex_flags & EXFLAG_PROXY)) {
+            if (!verify_cb_cert(ctx, x, i,
+                                X509_V_ERR_PROXY_CERTIFICATES_NOT_ALLOWED))
+                return 0;
+        }
+        ret = X509_check_ca(x);
+        switch (must_be_ca) {
+        case -1:
+            if ((ctx->param->flags & X509_V_FLAG_X509_STRICT)
+                && (ret != 1) && (ret != 0)) {
+                ret = 0;
+                ctx->error = X509_V_ERR_INVALID_CA;
+            } else
+                ret = 1;
+            break;
+        case 0:
+            if (ret != 0) {
+                ret = 0;
+                ctx->error = X509_V_ERR_INVALID_NON_CA;
+            } else
+                ret = 1;
+            break;
+        default:
+            /* X509_V_FLAG_X509_STRICT is implicit for intermediate CAs */
+            if ((ret == 0)
+                || ((i + 1 < num || ctx->param->flags & X509_V_FLAG_X509_STRICT)
+                    && (ret != 1))) {
+                ret = 0;
+                ctx->error = X509_V_ERR_INVALID_CA;
+            } else
+                ret = 1;
+            break;
+        }
+        if (ret == 0 && !verify_cb_cert(ctx, x, i, X509_V_OK))
+            return 0;
+        /* check_purpose() makes the callback as needed */
+        if (purpose > 0 && !check_purpose(ctx, x, purpose, i, must_be_ca))
+            return 0;
+        /* Check pathlen */
+        if ((i > 1) && (x->ex_pathlen != -1)
+            && (plen > (x->ex_pathlen + proxy_path_length))) {
+            if (!verify_cb_cert(ctx, x, i, X509_V_ERR_PATH_LENGTH_EXCEEDED))
+                return 0;
+        }
+        /* Increment path length if not a self issued intermediate CA */
+        if (i > 0 && (x->ex_flags & EXFLAG_SI) == 0)
+            plen++;
+        /*
+         * If this certificate is a proxy certificate, the next certificate
+         * must be another proxy certificate or a EE certificate.  If not,
+         * the next certificate must be a CA certificate.
+         */
+        if (x->ex_flags & EXFLAG_PROXY) {
+            /*
+             * RFC3820, 4.1.3 (b)(1) stipulates that if pCPathLengthConstraint
+             * is less than max_path_length, the former should be copied to
+             * the latter, and 4.1.4 (a) stipulates that max_path_length
+             * should be verified to be larger than zero and decrement it.
+             *
+             * Because we're checking the certs in the reverse order, we start
+             * with verifying that proxy_path_length isn't larger than pcPLC,
+             * and copy the latter to the former if it is, and finally,
+             * increment proxy_path_length.
+             */
+            if (x->ex_pcpathlen != -1) {
+                if (proxy_path_length > x->ex_pcpathlen) {
+                    if (!verify_cb_cert(ctx, x, i,
+                                        X509_V_ERR_PROXY_PATH_LENGTH_EXCEEDED))
+                        return 0;
+                }
+                proxy_path_length = x->ex_pcpathlen;
+            }
+            proxy_path_length++;
+            must_be_ca = 0;
+        } else
+            must_be_ca = 1;
+    }
+    return 1;
+}
+
+static int has_san_id(X509 *x, int gtype)
+{
+    int i;
+    int ret = 0;
+    GENERAL_NAMES *gs = X509_get_ext_d2i(x, NID_subject_alt_name, NULL, NULL);
+
+    if (gs == NULL)
+        return 0;
+
+    for (i = 0; i < sk_GENERAL_NAME_num(gs); i++) {
+        GENERAL_NAME *g = sk_GENERAL_NAME_value(gs, i);
+
+        if (g->type == gtype) {
+            ret = 1;
+            break;
+        }
+    }
+    GENERAL_NAMES_free(gs);
+    return ret;
+}
+
+static int check_name_constraints(X509_STORE_CTX *ctx)
+{
+    int i;
+
+    /* Check name constraints for all certificates */
+    for (i = sk_X509_num(ctx->chain) - 1; i >= 0; i--) {
+        X509 *x = sk_X509_value(ctx->chain, i);
+        int j;
+
+        /* Ignore self issued certs unless last in chain */
+        if (i && (x->ex_flags & EXFLAG_SI))
+            continue;
+
+        /*
+         * Proxy certificates policy has an extra constraint, where the
+         * certificate subject MUST be the issuer with a single CN entry
+         * added.
+         * (RFC 3820: 3.4, 4.1.3 (a)(4))
+         */
+        if (x->ex_flags & EXFLAG_PROXY) {
+            X509_NAME *tmpsubject = X509_get_subject_name(x);
+            X509_NAME *tmpissuer = X509_get_issuer_name(x);
+            X509_NAME_ENTRY *tmpentry = NULL;
+            int last_object_nid = 0;
+            int err = X509_V_OK;
+            int last_object_loc = X509_NAME_entry_count(tmpsubject) - 1;
+
+            /* Check that there are at least two RDNs */
+            if (last_object_loc < 1) {
+                err = X509_V_ERR_PROXY_SUBJECT_NAME_VIOLATION;
+                goto proxy_name_done;
+            }
+
+            /*
+             * Check that there is exactly one more RDN in subject as
+             * there is in issuer.
+             */
+            if (X509_NAME_entry_count(tmpsubject)
+                != X509_NAME_entry_count(tmpissuer) + 1) {
+                err = X509_V_ERR_PROXY_SUBJECT_NAME_VIOLATION;
+                goto proxy_name_done;
+            }
+
+            /*
+             * Check that the last subject component isn't part of a
+             * multivalued RDN
+             */
+            if (X509_NAME_ENTRY_set(X509_NAME_get_entry(tmpsubject,
+                                                        last_object_loc))
+                == X509_NAME_ENTRY_set(X509_NAME_get_entry(tmpsubject,
+                                                           last_object_loc - 1))) {
+                err = X509_V_ERR_PROXY_SUBJECT_NAME_VIOLATION;
+                goto proxy_name_done;
+            }
+
+            /*
+             * Check that the last subject RDN is a commonName, and that
+             * all the previous RDNs match the issuer exactly
+             */
+            tmpsubject = X509_NAME_dup(tmpsubject);
+            if (tmpsubject == NULL) {
+                X509err(X509_F_CHECK_NAME_CONSTRAINTS, ERR_R_MALLOC_FAILURE);
+                ctx->error = X509_V_ERR_OUT_OF_MEM;
+                return 0;
+            }
+
+            tmpentry =
+                X509_NAME_delete_entry(tmpsubject, last_object_loc);
+            last_object_nid =
+                OBJ_obj2nid(X509_NAME_ENTRY_get_object(tmpentry));
+
+            if (last_object_nid != NID_commonName
+                || X509_NAME_cmp(tmpsubject, tmpissuer) != 0) {
+                err = X509_V_ERR_PROXY_SUBJECT_NAME_VIOLATION;
+            }
+
+            X509_NAME_ENTRY_free(tmpentry);
+            X509_NAME_free(tmpsubject);
+
+         proxy_name_done:
+            if (err != X509_V_OK
+                && !verify_cb_cert(ctx, x, i, err))
+                return 0;
+        }
+
+        /*
+         * Check against constraints for all certificates higher in chain
+         * including trust anchor. Trust anchor not strictly speaking needed
+         * but if it includes constraints it is to be assumed it expects them
+         * to be obeyed.
+         */
+        for (j = sk_X509_num(ctx->chain) - 1; j > i; j--) {
+            NAME_CONSTRAINTS *nc = sk_X509_value(ctx->chain, j)->nc;
+
+            if (nc) {
+                int rv = NAME_CONSTRAINTS_check(x, nc);
+
+                /* If EE certificate check commonName too */
+                if (rv == X509_V_OK && i == 0
+                    && (ctx->param->hostflags
+                        & X509_CHECK_FLAG_NEVER_CHECK_SUBJECT) == 0
+                    && ((ctx->param->hostflags
+                         & X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT) != 0
+                        || !has_san_id(x, GEN_DNS)))
+                    rv = NAME_CONSTRAINTS_check_CN(x, nc);
+
+                switch (rv) {
+                case X509_V_OK:
+                    break;
+                case X509_V_ERR_OUT_OF_MEM:
+                    return 0;
+                default:
+                    if (!verify_cb_cert(ctx, x, i, rv))
+                        return 0;
+                    break;
+                }
+            }
+        }
+    }
+    return 1;
+}
+
+static int check_id_error(X509_STORE_CTX *ctx, int errcode)
+{
+    return verify_cb_cert(ctx, ctx->cert, 0, errcode);
+}
+
+static int check_hosts(X509 *x, X509_VERIFY_PARAM *vpm)
+{
+    int i;
+    int n = sk_OPENSSL_STRING_num(vpm->hosts);
+    char *name;
+
+    if (vpm->peername != NULL) {
+        OPENSSL_free(vpm->peername);
+        vpm->peername = NULL;
+    }
+    for (i = 0; i < n; ++i) {
+        name = sk_OPENSSL_STRING_value(vpm->hosts, i);
+        if (X509_check_host(x, name, 0, vpm->hostflags, &vpm->peername) > 0)
+            return 1;
+    }
+    return n == 0;
+}
+
+static int check_id(X509_STORE_CTX *ctx)
+{
+    X509_VERIFY_PARAM *vpm = ctx->param;
+    X509 *x = ctx->cert;
+    if (vpm->hosts && check_hosts(x, vpm) <= 0) {
+        if (!check_id_error(ctx, X509_V_ERR_HOSTNAME_MISMATCH))
+            return 0;
+    }
+    if (vpm->email && X509_check_email(x, vpm->email, vpm->emaillen, 0) <= 0) {
+        if (!check_id_error(ctx, X509_V_ERR_EMAIL_MISMATCH))
+            return 0;
+    }
+    if (vpm->ip && X509_check_ip(x, vpm->ip, vpm->iplen, 0) <= 0) {
+        if (!check_id_error(ctx, X509_V_ERR_IP_ADDRESS_MISMATCH))
+            return 0;
+    }
+    return 1;
+}
+
+static int check_trust(X509_STORE_CTX *ctx, int num_untrusted)
+{
+    int i;
+    X509 *x = NULL;
+    X509 *mx;
+    SSL_DANE *dane = ctx->dane;
+    int num = sk_X509_num(ctx->chain);
+    int trust;
+
+    /*
+     * Check for a DANE issuer at depth 1 or greater, if it is a DANE-TA(2)
+     * match, we're done, otherwise we'll merely record the match depth.
+     */
+    if (DANETLS_HAS_TA(dane) && num_untrusted > 0 && num_untrusted < num) {
+        switch (trust = check_dane_issuer(ctx, num_untrusted)) {
+        case X509_TRUST_TRUSTED:
+        case X509_TRUST_REJECTED:
+            return trust;
+        }
+    }
+
+    /*
+     * Check trusted certificates in chain at depth num_untrusted and up.
+     * Note, that depths 0..num_untrusted-1 may also contain trusted
+     * certificates, but the caller is expected to have already checked those,
+     * and wants to incrementally check just any added since.
+     */
+    for (i = num_untrusted; i < num; i++) {
+        x = sk_X509_value(ctx->chain, i);
+        trust = X509_check_trust(x, ctx->param->trust, 0);
+        /* If explicitly trusted return trusted */
+        if (trust == X509_TRUST_TRUSTED)
+            goto trusted;
+        if (trust == X509_TRUST_REJECTED)
+            goto rejected;
+    }
+
+    /*
+     * If we are looking at a trusted certificate, and accept partial chains,
+     * the chain is PKIX trusted.
+     */
+    if (num_untrusted < num) {
+        if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN)
+            goto trusted;
+        return X509_TRUST_UNTRUSTED;
+    }
+
+    if (num_untrusted == num && ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN) {
+        /*
+         * Last-resort call with no new trusted certificates, check the leaf
+         * for a direct trust store match.
+         */
+        i = 0;
+        x = sk_X509_value(ctx->chain, i);
+        mx = lookup_cert_match(ctx, x);
+        if (!mx)
+            return X509_TRUST_UNTRUSTED;
+
+        /*
+         * Check explicit auxiliary trust/reject settings.  If none are set,
+         * we'll accept X509_TRUST_UNTRUSTED when not self-signed.
+         */
+        trust = X509_check_trust(mx, ctx->param->trust, 0);
+        if (trust == X509_TRUST_REJECTED) {
+            X509_free(mx);
+            goto rejected;
+        }
+
+        /* Replace leaf with trusted match */
+        (void) sk_X509_set(ctx->chain, 0, mx);
+        X509_free(x);
+        ctx->num_untrusted = 0;
+        goto trusted;
+    }
+
+    /*
+     * If no trusted certs in chain at all return untrusted and allow
+     * standard (no issuer cert) etc errors to be indicated.
+     */
+    return X509_TRUST_UNTRUSTED;
+
+ rejected:
+    if (!verify_cb_cert(ctx, x, i, X509_V_ERR_CERT_REJECTED))
+        return X509_TRUST_REJECTED;
+    return X509_TRUST_UNTRUSTED;
+
+ trusted:
+    if (!DANETLS_ENABLED(dane))
+        return X509_TRUST_TRUSTED;
+    if (dane->pdpth < 0)
+        dane->pdpth = num_untrusted;
+    /* With DANE, PKIX alone is not trusted until we have both */
+    if (dane->mdpth >= 0)
+        return X509_TRUST_TRUSTED;
+    return X509_TRUST_UNTRUSTED;
+}
+
+static int check_revocation(X509_STORE_CTX *ctx)
+{
+    int i = 0, last = 0, ok = 0;
+    if (!(ctx->param->flags & X509_V_FLAG_CRL_CHECK))
+        return 1;
+    if (ctx->param->flags & X509_V_FLAG_CRL_CHECK_ALL)
+        last = sk_X509_num(ctx->chain) - 1;
+    else {
+        /* If checking CRL paths this isn't the EE certificate */
+        if (ctx->parent)
+            return 1;
+        last = 0;
+    }
+    for (i = 0; i <= last; i++) {
+        ctx->error_depth = i;
+        ok = check_cert(ctx);
+        if (!ok)
+            return ok;
+    }
+    return 1;
+}
+
+static int check_cert(X509_STORE_CTX *ctx)
+{
+    X509_CRL *crl = NULL, *dcrl = NULL;
+    int ok = 0;
+    int cnum = ctx->error_depth;
+    X509 *x = sk_X509_value(ctx->chain, cnum);
+
+    ctx->current_cert = x;
+    ctx->current_issuer = NULL;
+    ctx->current_crl_score = 0;
+    ctx->current_reasons = 0;
+
+    if (x->ex_flags & EXFLAG_PROXY)
+        return 1;
+
+    while (ctx->current_reasons != CRLDP_ALL_REASONS) {
+        unsigned int last_reasons = ctx->current_reasons;
+
+        /* Try to retrieve relevant CRL */
+        if (ctx->get_crl)
+            ok = ctx->get_crl(ctx, &crl, x);
+        else
+            ok = get_crl_delta(ctx, &crl, &dcrl, x);
+        /*
+         * If error looking up CRL, nothing we can do except notify callback
+         */
+        if (!ok) {
+            ok = verify_cb_crl(ctx, X509_V_ERR_UNABLE_TO_GET_CRL);
+            goto done;
+        }
+        ctx->current_crl = crl;
+        ok = ctx->check_crl(ctx, crl);
+        if (!ok)
+            goto done;
+
+        if (dcrl) {
+            ok = ctx->check_crl(ctx, dcrl);
+            if (!ok)
+                goto done;
+            ok = ctx->cert_crl(ctx, dcrl, x);
+            if (!ok)
+                goto done;
+        } else
+            ok = 1;
+
+        /* Don't look in full CRL if delta reason is removefromCRL */
+        if (ok != 2) {
+            ok = ctx->cert_crl(ctx, crl, x);
+            if (!ok)
+                goto done;
+        }
+
+        X509_CRL_free(crl);
+        X509_CRL_free(dcrl);
+        crl = NULL;
+        dcrl = NULL;
+        /*
+         * If reasons not updated we won't get anywhere by another iteration,
+         * so exit loop.
+         */
+        if (last_reasons == ctx->current_reasons) {
+            ok = verify_cb_crl(ctx, X509_V_ERR_UNABLE_TO_GET_CRL);
+            goto done;
+        }
+    }
+ done:
+    X509_CRL_free(crl);
+    X509_CRL_free(dcrl);
+
+    ctx->current_crl = NULL;
+    return ok;
+}
+
+/* Check CRL times against values in X509_STORE_CTX */
+
+static int check_crl_time(X509_STORE_CTX *ctx, X509_CRL *crl, int notify)
+{
+    time_t *ptime;
+    int i;
+
+    if (notify)
+        ctx->current_crl = crl;
+    if (ctx->param->flags & X509_V_FLAG_USE_CHECK_TIME)
+        ptime = &ctx->param->check_time;
+    else if (ctx->param->flags & X509_V_FLAG_NO_CHECK_TIME)
+        return 1;
+    else
+        ptime = NULL;
+
+    i = X509_cmp_time(X509_CRL_get0_lastUpdate(crl), ptime);
+    if (i == 0) {
+        if (!notify)
+            return 0;
+        if (!verify_cb_crl(ctx, X509_V_ERR_ERROR_IN_CRL_LAST_UPDATE_FIELD))
+            return 0;
+    }
+
+    if (i > 0) {
+        if (!notify)
+            return 0;
+        if (!verify_cb_crl(ctx, X509_V_ERR_CRL_NOT_YET_VALID))
+            return 0;
+    }
+
+    if (X509_CRL_get0_nextUpdate(crl)) {
+        i = X509_cmp_time(X509_CRL_get0_nextUpdate(crl), ptime);
+
+        if (i == 0) {
+            if (!notify)
+                return 0;
+            if (!verify_cb_crl(ctx, X509_V_ERR_ERROR_IN_CRL_NEXT_UPDATE_FIELD))
+                return 0;
+        }
+        /* Ignore expiry of base CRL is delta is valid */
+        if ((i < 0) && !(ctx->current_crl_score & CRL_SCORE_TIME_DELTA)) {
+            if (!notify)
+                return 0;
+            if (!verify_cb_crl(ctx, X509_V_ERR_CRL_HAS_EXPIRED))
+                return 0;
+        }
+    }
+
+    if (notify)
+        ctx->current_crl = NULL;
+
+    return 1;
+}
+
+static int get_crl_sk(X509_STORE_CTX *ctx, X509_CRL **pcrl, X509_CRL **pdcrl,
+                      X509 **pissuer, int *pscore, unsigned int *preasons,
+                      STACK_OF(X509_CRL) *crls)
+{
+    int i, crl_score, best_score = *pscore;
+    unsigned int reasons, best_reasons = 0;
+    X509 *x = ctx->current_cert;
+    X509_CRL *crl, *best_crl = NULL;
+    X509 *crl_issuer = NULL, *best_crl_issuer = NULL;
+
+    for (i = 0; i < sk_X509_CRL_num(crls); i++) {
+        crl = sk_X509_CRL_value(crls, i);
+        reasons = *preasons;
+        crl_score = get_crl_score(ctx, &crl_issuer, &reasons, crl, x);
+        if (crl_score < best_score || crl_score == 0)
+            continue;
+        /* If current CRL is equivalent use it if it is newer */
+        if (crl_score == best_score && best_crl != NULL) {
+            int day, sec;
+            if (ASN1_TIME_diff(&day, &sec, X509_CRL_get0_lastUpdate(best_crl),
+                               X509_CRL_get0_lastUpdate(crl)) == 0)
+                continue;
+            /*
+             * ASN1_TIME_diff never returns inconsistent signs for |day|
+             * and |sec|.
+             */
+            if (day <= 0 && sec <= 0)
+                continue;
+        }
+        best_crl = crl;
+        best_crl_issuer = crl_issuer;
+        best_score = crl_score;
+        best_reasons = reasons;
+    }
+
+    if (best_crl) {
+        X509_CRL_free(*pcrl);
+        *pcrl = best_crl;
+        *pissuer = best_crl_issuer;
+        *pscore = best_score;
+        *preasons = best_reasons;
+        X509_CRL_up_ref(best_crl);
+        X509_CRL_free(*pdcrl);
+        *pdcrl = NULL;
+        get_delta_sk(ctx, pdcrl, pscore, best_crl, crls);
+    }
+
+    if (best_score >= CRL_SCORE_VALID)
+        return 1;
+
+    return 0;
+}
+
+/*
+ * Compare two CRL extensions for delta checking purposes. They should be
+ * both present or both absent. If both present all fields must be identical.
+ */
+
+static int crl_extension_match(X509_CRL *a, X509_CRL *b, int nid)
+{
+    ASN1_OCTET_STRING *exta, *extb;
+    int i;
+    i = X509_CRL_get_ext_by_NID(a, nid, -1);
+    if (i >= 0) {
+        /* Can't have multiple occurrences */
+        if (X509_CRL_get_ext_by_NID(a, nid, i) != -1)
+            return 0;
+        exta = X509_EXTENSION_get_data(X509_CRL_get_ext(a, i));
+    } else
+        exta = NULL;
+
+    i = X509_CRL_get_ext_by_NID(b, nid, -1);
+
+    if (i >= 0) {
+
+        if (X509_CRL_get_ext_by_NID(b, nid, i) != -1)
+            return 0;
+        extb = X509_EXTENSION_get_data(X509_CRL_get_ext(b, i));
+    } else
+        extb = NULL;
+
+    if (!exta && !extb)
+        return 1;
+
+    if (!exta || !extb)
+        return 0;
+
+    if (ASN1_OCTET_STRING_cmp(exta, extb))
+        return 0;
+
+    return 1;
+}
+
+/* See if a base and delta are compatible */
+
+static int check_delta_base(X509_CRL *delta, X509_CRL *base)
+{
+    /* Delta CRL must be a delta */
+    if (!delta->base_crl_number)
+        return 0;
+    /* Base must have a CRL number */
+    if (!base->crl_number)
+        return 0;
+    /* Issuer names must match */
+    if (X509_NAME_cmp(X509_CRL_get_issuer(base), X509_CRL_get_issuer(delta)))
+        return 0;
+    /* AKID and IDP must match */
+    if (!crl_extension_match(delta, base, NID_authority_key_identifier))
+        return 0;
+    if (!crl_extension_match(delta, base, NID_issuing_distribution_point))
+        return 0;
+    /* Delta CRL base number must not exceed Full CRL number. */
+    if (ASN1_INTEGER_cmp(delta->base_crl_number, base->crl_number) > 0)
+        return 0;
+    /* Delta CRL number must exceed full CRL number */
+    if (ASN1_INTEGER_cmp(delta->crl_number, base->crl_number) > 0)
+        return 1;
+    return 0;
+}
+
+/*
+ * For a given base CRL find a delta... maybe extend to delta scoring or
+ * retrieve a chain of deltas...
+ */
+
+static void get_delta_sk(X509_STORE_CTX *ctx, X509_CRL **dcrl, int *pscore,
+                         X509_CRL *base, STACK_OF(X509_CRL) *crls)
+{
+    X509_CRL *delta;
+    int i;
+    if (!(ctx->param->flags & X509_V_FLAG_USE_DELTAS))
+        return;
+    if (!((ctx->current_cert->ex_flags | base->flags) & EXFLAG_FRESHEST))
+        return;
+    for (i = 0; i < sk_X509_CRL_num(crls); i++) {
+        delta = sk_X509_CRL_value(crls, i);
+        if (check_delta_base(delta, base)) {
+            if (check_crl_time(ctx, delta, 0))
+                *pscore |= CRL_SCORE_TIME_DELTA;
+            X509_CRL_up_ref(delta);
+            *dcrl = delta;
+            return;
+        }
+    }
+    *dcrl = NULL;
+}
+
+/*
+ * For a given CRL return how suitable it is for the supplied certificate
+ * 'x'. The return value is a mask of several criteria. If the issuer is not
+ * the certificate issuer this is returned in *pissuer. The reasons mask is
+ * also used to determine if the CRL is suitable: if no new reasons the CRL
+ * is rejected, otherwise reasons is updated.
+ */
+
+static int get_crl_score(X509_STORE_CTX *ctx, X509 **pissuer,
+                         unsigned int *preasons, X509_CRL *crl, X509 *x)
+{
+
+    int crl_score = 0;
+    unsigned int tmp_reasons = *preasons, crl_reasons;
+
+    /* First see if we can reject CRL straight away */
+
+    /* Invalid IDP cannot be processed */
+    if (crl->idp_flags & IDP_INVALID)
+        return 0;
+    /* Reason codes or indirect CRLs need extended CRL support */
+    if (!(ctx->param->flags & X509_V_FLAG_EXTENDED_CRL_SUPPORT)) {
+        if (crl->idp_flags & (IDP_INDIRECT | IDP_REASONS))
+            return 0;
+    } else if (crl->idp_flags & IDP_REASONS) {
+        /* If no new reasons reject */
+        if (!(crl->idp_reasons & ~tmp_reasons))
+            return 0;
+    }
+    /* Don't process deltas at this stage */
+    else if (crl->base_crl_number)
+        return 0;
+    /* If issuer name doesn't match certificate need indirect CRL */
+    if (X509_NAME_cmp(X509_get_issuer_name(x), X509_CRL_get_issuer(crl))) {
+        if (!(crl->idp_flags & IDP_INDIRECT))
+            return 0;
+    } else
+        crl_score |= CRL_SCORE_ISSUER_NAME;
+
+    if (!(crl->flags & EXFLAG_CRITICAL))
+        crl_score |= CRL_SCORE_NOCRITICAL;
+
+    /* Check expiry */
+    if (check_crl_time(ctx, crl, 0))
+        crl_score |= CRL_SCORE_TIME;
+
+    /* Check authority key ID and locate certificate issuer */
+    crl_akid_check(ctx, crl, pissuer, &crl_score);
+
+    /* If we can't locate certificate issuer at this point forget it */
+
+    if (!(crl_score & CRL_SCORE_AKID))
+        return 0;
+
+    /* Check cert for matching CRL distribution points */
+
+    if (crl_crldp_check(x, crl, crl_score, &crl_reasons)) {
+        /* If no new reasons reject */
+        if (!(crl_reasons & ~tmp_reasons))
+            return 0;
+        tmp_reasons |= crl_reasons;
+        crl_score |= CRL_SCORE_SCOPE;
+    }
+
+    *preasons = tmp_reasons;
+
+    return crl_score;
+
+}
+
+static void crl_akid_check(X509_STORE_CTX *ctx, X509_CRL *crl,
+                           X509 **pissuer, int *pcrl_score)
+{
+    X509 *crl_issuer = NULL;
+    X509_NAME *cnm = X509_CRL_get_issuer(crl);
+    int cidx = ctx->error_depth;
+    int i;
+
+    if (cidx != sk_X509_num(ctx->chain) - 1)
+        cidx++;
+
+    crl_issuer = sk_X509_value(ctx->chain, cidx);
+
+    if (X509_check_akid(crl_issuer, crl->akid) == X509_V_OK) {
+        if (*pcrl_score & CRL_SCORE_ISSUER_NAME) {
+            *pcrl_score |= CRL_SCORE_AKID | CRL_SCORE_ISSUER_CERT;
+            *pissuer = crl_issuer;
+            return;
+        }
+    }
+
+    for (cidx++; cidx < sk_X509_num(ctx->chain); cidx++) {
+        crl_issuer = sk_X509_value(ctx->chain, cidx);
+        if (X509_NAME_cmp(X509_get_subject_name(crl_issuer), cnm))
+            continue;
+        if (X509_check_akid(crl_issuer, crl->akid) == X509_V_OK) {
+            *pcrl_score |= CRL_SCORE_AKID | CRL_SCORE_SAME_PATH;
+            *pissuer = crl_issuer;
+            return;
+        }
+    }
+
+    /* Anything else needs extended CRL support */
+
+    if (!(ctx->param->flags & X509_V_FLAG_EXTENDED_CRL_SUPPORT))
+        return;
+
+    /*
+     * Otherwise the CRL issuer is not on the path. Look for it in the set of
+     * untrusted certificates.
+     */
+    for (i = 0; i < sk_X509_num(ctx->untrusted); i++) {
+        crl_issuer = sk_X509_value(ctx->untrusted, i);
+        if (X509_NAME_cmp(X509_get_subject_name(crl_issuer), cnm))
+            continue;
+        if (X509_check_akid(crl_issuer, crl->akid) == X509_V_OK) {
+            *pissuer = crl_issuer;
+            *pcrl_score |= CRL_SCORE_AKID;
+            return;
+        }
+    }
+}
+
+/*
+ * Check the path of a CRL issuer certificate. This creates a new
+ * X509_STORE_CTX and populates it with most of the parameters from the
+ * parent. This could be optimised somewhat since a lot of path checking will
+ * be duplicated by the parent, but this will rarely be used in practice.
+ */
+
+static int check_crl_path(X509_STORE_CTX *ctx, X509 *x)
+{
+    X509_STORE_CTX crl_ctx;
+    int ret;
+
+    /* Don't allow recursive CRL path validation */
+    if (ctx->parent)
+        return 0;
+    if (!X509_STORE_CTX_init(&crl_ctx, ctx->ctx, x, ctx->untrusted))
+        return -1;
+
+    crl_ctx.crls = ctx->crls;
+    /* Copy verify params across */
+    X509_STORE_CTX_set0_param(&crl_ctx, ctx->param);
+
+    crl_ctx.parent = ctx;
+    crl_ctx.verify_cb = ctx->verify_cb;
+
+    /* Verify CRL issuer */
+    ret = X509_verify_cert(&crl_ctx);
+    if (ret <= 0)
+        goto err;
+
+    /* Check chain is acceptable */
+    ret = check_crl_chain(ctx, ctx->chain, crl_ctx.chain);
+ err:
+    X509_STORE_CTX_cleanup(&crl_ctx);
+    return ret;
+}
+
+/*
+ * RFC3280 says nothing about the relationship between CRL path and
+ * certificate path, which could lead to situations where a certificate could
+ * be revoked or validated by a CA not authorised to do so. RFC5280 is more
+ * strict and states that the two paths must end in the same trust anchor,
+ * though some discussions remain... until this is resolved we use the
+ * RFC5280 version
+ */
+
+static int check_crl_chain(X509_STORE_CTX *ctx,
+                           STACK_OF(X509) *cert_path,
+                           STACK_OF(X509) *crl_path)
+{
+    X509 *cert_ta, *crl_ta;
+    cert_ta = sk_X509_value(cert_path, sk_X509_num(cert_path) - 1);
+    crl_ta = sk_X509_value(crl_path, sk_X509_num(crl_path) - 1);
+    if (!X509_cmp(cert_ta, crl_ta))
+        return 1;
+    return 0;
+}
+
+/*-
+ * Check for match between two dist point names: three separate cases.
+ * 1. Both are relative names and compare X509_NAME types.
+ * 2. One full, one relative. Compare X509_NAME to GENERAL_NAMES.
+ * 3. Both are full names and compare two GENERAL_NAMES.
+ * 4. One is NULL: automatic match.
+ */
+
+static int idp_check_dp(DIST_POINT_NAME *a, DIST_POINT_NAME *b)
+{
+    X509_NAME *nm = NULL;
+    GENERAL_NAMES *gens = NULL;
+    GENERAL_NAME *gena, *genb;
+    int i, j;
+    if (!a || !b)
+        return 1;
+    if (a->type == 1) {
+        if (!a->dpname)
+            return 0;
+        /* Case 1: two X509_NAME */
+        if (b->type == 1) {
+            if (!b->dpname)
+                return 0;
+            if (!X509_NAME_cmp(a->dpname, b->dpname))
+                return 1;
+            else
+                return 0;
+        }
+        /* Case 2: set name and GENERAL_NAMES appropriately */
+        nm = a->dpname;
+        gens = b->name.fullname;
+    } else if (b->type == 1) {
+        if (!b->dpname)
+            return 0;
+        /* Case 2: set name and GENERAL_NAMES appropriately */
+        gens = a->name.fullname;
+        nm = b->dpname;
+    }
+
+    /* Handle case 2 with one GENERAL_NAMES and one X509_NAME */
+    if (nm) {
+        for (i = 0; i < sk_GENERAL_NAME_num(gens); i++) {
+            gena = sk_GENERAL_NAME_value(gens, i);
+            if (gena->type != GEN_DIRNAME)
+                continue;
+            if (!X509_NAME_cmp(nm, gena->d.directoryName))
+                return 1;
+        }
+        return 0;
+    }
+
+    /* Else case 3: two GENERAL_NAMES */
+
+    for (i = 0; i < sk_GENERAL_NAME_num(a->name.fullname); i++) {
+        gena = sk_GENERAL_NAME_value(a->name.fullname, i);
+        for (j = 0; j < sk_GENERAL_NAME_num(b->name.fullname); j++) {
+            genb = sk_GENERAL_NAME_value(b->name.fullname, j);
+            if (!GENERAL_NAME_cmp(gena, genb))
+                return 1;
+        }
+    }
+
+    return 0;
+
+}
+
+static int crldp_check_crlissuer(DIST_POINT *dp, X509_CRL *crl, int crl_score)
+{
+    int i;
+    X509_NAME *nm = X509_CRL_get_issuer(crl);
+    /* If no CRLissuer return is successful iff don't need a match */
+    if (!dp->CRLissuer)
+        return ! !(crl_score & CRL_SCORE_ISSUER_NAME);
+    for (i = 0; i < sk_GENERAL_NAME_num(dp->CRLissuer); i++) {
+        GENERAL_NAME *gen = sk_GENERAL_NAME_value(dp->CRLissuer, i);
+        if (gen->type != GEN_DIRNAME)
+            continue;
+        if (!X509_NAME_cmp(gen->d.directoryName, nm))
+            return 1;
+    }
+    return 0;
+}
+
+/* Check CRLDP and IDP */
+
+static int crl_crldp_check(X509 *x, X509_CRL *crl, int crl_score,
+                           unsigned int *preasons)
+{
+    int i;
+    if (crl->idp_flags & IDP_ONLYATTR)
+        return 0;
+    if (x->ex_flags & EXFLAG_CA) {
+        if (crl->idp_flags & IDP_ONLYUSER)
+            return 0;
+    } else {
+        if (crl->idp_flags & IDP_ONLYCA)
+            return 0;
+    }
+    *preasons = crl->idp_reasons;
+    for (i = 0; i < sk_DIST_POINT_num(x->crldp); i++) {
+        DIST_POINT *dp = sk_DIST_POINT_value(x->crldp, i);
+        if (crldp_check_crlissuer(dp, crl, crl_score)) {
+            if (!crl->idp || idp_check_dp(dp->distpoint, crl->idp->distpoint)) {
+                *preasons &= dp->dp_reasons;
+                return 1;
+            }
+        }
+    }
+    if ((!crl->idp || !crl->idp->distpoint)
+        && (crl_score & CRL_SCORE_ISSUER_NAME))
+        return 1;
+    return 0;
+}
+
+/*
+ * Retrieve CRL corresponding to current certificate. If deltas enabled try
+ * to find a delta CRL too
+ */
+
+static int get_crl_delta(X509_STORE_CTX *ctx,
+                         X509_CRL **pcrl, X509_CRL **pdcrl, X509 *x)
+{
+    int ok;
+    X509 *issuer = NULL;
+    int crl_score = 0;
+    unsigned int reasons;
+    X509_CRL *crl = NULL, *dcrl = NULL;
+    STACK_OF(X509_CRL) *skcrl;
+    X509_NAME *nm = X509_get_issuer_name(x);
+
+    reasons = ctx->current_reasons;
+    ok = get_crl_sk(ctx, &crl, &dcrl,
+                    &issuer, &crl_score, &reasons, ctx->crls);
+    if (ok)
+        goto done;
+
+    /* Lookup CRLs from store */
+
+    skcrl = ctx->lookup_crls(ctx, nm);
+
+    /* If no CRLs found and a near match from get_crl_sk use that */
+    if (!skcrl && crl)
+        goto done;
+
+    get_crl_sk(ctx, &crl, &dcrl, &issuer, &crl_score, &reasons, skcrl);
+
+    sk_X509_CRL_pop_free(skcrl, X509_CRL_free);
+
+ done:
+    /* If we got any kind of CRL use it and return success */
+    if (crl) {
+        ctx->current_issuer = issuer;
+        ctx->current_crl_score = crl_score;
+        ctx->current_reasons = reasons;
+        *pcrl = crl;
+        *pdcrl = dcrl;
+        return 1;
+    }
+    return 0;
+}
+
+/* Check CRL validity */
+static int check_crl(X509_STORE_CTX *ctx, X509_CRL *crl)
+{
+    X509 *issuer = NULL;
+    EVP_PKEY *ikey = NULL;
+    int cnum = ctx->error_depth;
+    int chnum = sk_X509_num(ctx->chain) - 1;
+
+    /* if we have an alternative CRL issuer cert use that */
+    if (ctx->current_issuer)
+        issuer = ctx->current_issuer;
+    /*
+     * Else find CRL issuer: if not last certificate then issuer is next
+     * certificate in chain.
+     */
+    else if (cnum < chnum)
+        issuer = sk_X509_value(ctx->chain, cnum + 1);
+    else {
+        issuer = sk_X509_value(ctx->chain, chnum);
+        /* If not self signed, can't check signature */
+        if (!ctx->check_issued(ctx, issuer, issuer) &&
+            !verify_cb_crl(ctx, X509_V_ERR_UNABLE_TO_GET_CRL_ISSUER))
+            return 0;
+    }
+
+    if (issuer == NULL)
+        return 1;
+
+    /*
+     * Skip most tests for deltas because they have already been done
+     */
+    if (!crl->base_crl_number) {
+        /* Check for cRLSign bit if keyUsage present */
+        if ((issuer->ex_flags & EXFLAG_KUSAGE) &&
+            !(issuer->ex_kusage & KU_CRL_SIGN) &&
+            !verify_cb_crl(ctx, X509_V_ERR_KEYUSAGE_NO_CRL_SIGN))
+            return 0;
+
+        if (!(ctx->current_crl_score & CRL_SCORE_SCOPE) &&
+            !verify_cb_crl(ctx, X509_V_ERR_DIFFERENT_CRL_SCOPE))
+            return 0;
+
+        if (!(ctx->current_crl_score & CRL_SCORE_SAME_PATH) &&
+            check_crl_path(ctx, ctx->current_issuer) <= 0 &&
+            !verify_cb_crl(ctx, X509_V_ERR_CRL_PATH_VALIDATION_ERROR))
+            return 0;
+
+        if ((crl->idp_flags & IDP_INVALID) &&
+            !verify_cb_crl(ctx, X509_V_ERR_INVALID_EXTENSION))
+            return 0;
+    }
+
+    if (!(ctx->current_crl_score & CRL_SCORE_TIME) &&
+        !check_crl_time(ctx, crl, 1))
+        return 0;
+
+    /* Attempt to get issuer certificate public key */
+    ikey = X509_get0_pubkey(issuer);
+
+    if (!ikey &&
+        !verify_cb_crl(ctx, X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY))
+        return 0;
+
+    if (ikey) {
+        int rv = X509_CRL_check_suiteb(crl, ikey, ctx->param->flags);
+
+        if (rv != X509_V_OK && !verify_cb_crl(ctx, rv))
+            return 0;
+        /* Verify CRL signature */
+        if (X509_CRL_verify(crl, ikey) <= 0 &&
+            !verify_cb_crl(ctx, X509_V_ERR_CRL_SIGNATURE_FAILURE))
+            return 0;
+    }
+    return 1;
+}
+
+/* Check certificate against CRL */
+static int cert_crl(X509_STORE_CTX *ctx, X509_CRL *crl, X509 *x)
+{
+    X509_REVOKED *rev;
+
+    /*
+     * The rules changed for this... previously if a CRL contained unhandled
+     * critical extensions it could still be used to indicate a certificate
+     * was revoked. This has since been changed since critical extensions can
+     * change the meaning of CRL entries.
+     */
+    if (!(ctx->param->flags & X509_V_FLAG_IGNORE_CRITICAL)
+        && (crl->flags & EXFLAG_CRITICAL) &&
+        !verify_cb_crl(ctx, X509_V_ERR_UNHANDLED_CRITICAL_CRL_EXTENSION))
+        return 0;
+    /*
+     * Look for serial number of certificate in CRL.  If found, make sure
+     * reason is not removeFromCRL.
+     */
+    if (X509_CRL_get0_by_cert(crl, &rev, x)) {
+        if (rev->reason == CRL_REASON_REMOVE_FROM_CRL)
+            return 2;
+        if (!verify_cb_crl(ctx, X509_V_ERR_CERT_REVOKED))
+            return 0;
+    }
+
+    return 1;
+}
+
+static int check_policy(X509_STORE_CTX *ctx)
+{
+    int ret;
+
+    if (ctx->parent)
+        return 1;
+    /*
+     * With DANE, the trust anchor might be a bare public key, not a
+     * certificate!  In that case our chain does not have the trust anchor
+     * certificate as a top-most element.  This comports well with RFC5280
+     * chain verification, since there too, the trust anchor is not part of the
+     * chain to be verified.  In particular, X509_policy_check() does not look
+     * at the TA cert, but assumes that it is present as the top-most chain
+     * element.  We therefore temporarily push a NULL cert onto the chain if it
+     * was verified via a bare public key, and pop it off right after the
+     * X509_policy_check() call.
+     */
+    if (ctx->bare_ta_signed && !sk_X509_push(ctx->chain, NULL)) {
+        X509err(X509_F_CHECK_POLICY, ERR_R_MALLOC_FAILURE);
+        ctx->error = X509_V_ERR_OUT_OF_MEM;
+        return 0;
+    }
+    ret = X509_policy_check(&ctx->tree, &ctx->explicit_policy, ctx->chain,
+                            ctx->param->policies, ctx->param->flags);
+    if (ctx->bare_ta_signed)
+        sk_X509_pop(ctx->chain);
+
+    if (ret == X509_PCY_TREE_INTERNAL) {
+        X509err(X509_F_CHECK_POLICY, ERR_R_MALLOC_FAILURE);
+        ctx->error = X509_V_ERR_OUT_OF_MEM;
+        return 0;
+    }
+    /* Invalid or inconsistent extensions */
+    if (ret == X509_PCY_TREE_INVALID) {
+        int i;
+
+        /* Locate certificates with bad extensions and notify callback. */
+        for (i = 1; i < sk_X509_num(ctx->chain); i++) {
+            X509 *x = sk_X509_value(ctx->chain, i);
+
+            if (!(x->ex_flags & EXFLAG_INVALID_POLICY))
+                continue;
+            if (!verify_cb_cert(ctx, x, i,
+                                X509_V_ERR_INVALID_POLICY_EXTENSION))
+                return 0;
+        }
+        return 1;
+    }
+    if (ret == X509_PCY_TREE_FAILURE) {
+        ctx->current_cert = NULL;
+        ctx->error = X509_V_ERR_NO_EXPLICIT_POLICY;
+        return ctx->verify_cb(0, ctx);
+    }
+    if (ret != X509_PCY_TREE_VALID) {
+        X509err(X509_F_CHECK_POLICY, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (ctx->param->flags & X509_V_FLAG_NOTIFY_POLICY) {
+        ctx->current_cert = NULL;
+        /*
+         * Verification errors need to be "sticky", a callback may have allowed
+         * an SSL handshake to continue despite an error, and we must then
+         * remain in an error state.  Therefore, we MUST NOT clear earlier
+         * verification errors by setting the error to X509_V_OK.
+         */
+        if (!ctx->verify_cb(2, ctx))
+            return 0;
+    }
+
+    return 1;
+}
+
+/*-
+ * Check certificate validity times.
+ * If depth >= 0, invoke verification callbacks on error, otherwise just return
+ * the validation status.
+ *
+ * Return 1 on success, 0 otherwise.
+ */
+int x509_check_cert_time(X509_STORE_CTX *ctx, X509 *x, int depth)
+{
+    time_t *ptime;
+    int i;
+
+    if (ctx->param->flags & X509_V_FLAG_USE_CHECK_TIME)
+        ptime = &ctx->param->check_time;
+    else if (ctx->param->flags & X509_V_FLAG_NO_CHECK_TIME)
+        return 1;
+    else
+        ptime = NULL;
+
+    i = X509_cmp_time(X509_get0_notBefore(x), ptime);
+    if (i >= 0 && depth < 0)
+        return 0;
+    if (i == 0 && !verify_cb_cert(ctx, x, depth,
+                                  X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD))
+        return 0;
+    if (i > 0 && !verify_cb_cert(ctx, x, depth, X509_V_ERR_CERT_NOT_YET_VALID))
+        return 0;
+
+    i = X509_cmp_time(X509_get0_notAfter(x), ptime);
+    if (i <= 0 && depth < 0)
+        return 0;
+    if (i == 0 && !verify_cb_cert(ctx, x, depth,
+                                  X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD))
+        return 0;
+    if (i < 0 && !verify_cb_cert(ctx, x, depth, X509_V_ERR_CERT_HAS_EXPIRED))
+        return 0;
+    return 1;
+}
+
+static int internal_verify(X509_STORE_CTX *ctx)
+{
+    int n = sk_X509_num(ctx->chain) - 1;
+    X509 *xi = sk_X509_value(ctx->chain, n);
+    X509 *xs;
+
+    /*
+     * With DANE-verified bare public key TA signatures, it remains only to
+     * check the timestamps of the top certificate.  We report the issuer as
+     * NULL, since all we have is a bare key.
+     */
+    if (ctx->bare_ta_signed) {
+        xs = xi;
+        xi = NULL;
+        goto check_cert;
+    }
+
+    if (ctx->check_issued(ctx, xi, xi))
+        xs = xi;
+    else {
+        if (ctx->param->flags & X509_V_FLAG_PARTIAL_CHAIN) {
+            xs = xi;
+            goto check_cert;
+        }
+        if (n <= 0)
+            return verify_cb_cert(ctx, xi, 0,
+                                  X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE);
+        n--;
+        ctx->error_depth = n;
+        xs = sk_X509_value(ctx->chain, n);
+    }
+
+    /*
+     * Do not clear ctx->error=0, it must be "sticky", only the user's callback
+     * is allowed to reset errors (at its own peril).
+     */
+    while (n >= 0) {
+        EVP_PKEY *pkey;
+
+        /*
+         * Skip signature check for self signed certificates unless explicitly
+         * asked for.  It doesn't add any security and just wastes time.  If
+         * the issuer's public key is unusable, report the issuer certificate
+         * and its depth (rather than the depth of the subject).
+         */
+        if (xs != xi || (ctx->param->flags & X509_V_FLAG_CHECK_SS_SIGNATURE)) {
+            if ((pkey = X509_get0_pubkey(xi)) == NULL) {
+                if (!verify_cb_cert(ctx, xi, xi != xs ? n+1 : n,
+                        X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY))
+                    return 0;
+            } else if (X509_verify(xs, pkey) <= 0) {
+                if (!verify_cb_cert(ctx, xs, n,
+                                    X509_V_ERR_CERT_SIGNATURE_FAILURE))
+                    return 0;
+            }
+        }
+
+ check_cert:
+        /* Calls verify callback as needed */
+        if (!x509_check_cert_time(ctx, xs, n))
+            return 0;
+
+        /*
+         * Signal success at this depth.  However, the previous error (if any)
+         * is retained.
+         */
+        ctx->current_issuer = xi;
+        ctx->current_cert = xs;
+        ctx->error_depth = n;
+        if (!ctx->verify_cb(1, ctx))
+            return 0;
+
+        if (--n >= 0) {
+            xi = xs;
+            xs = sk_X509_value(ctx->chain, n);
+        }
+    }
+    return 1;
+}
+
+int X509_cmp_current_time(const ASN1_TIME *ctm)
+{
+    return X509_cmp_time(ctm, NULL);
+}
+
+int X509_cmp_time(const ASN1_TIME *ctm, time_t *cmp_time)
+{
+    static const size_t utctime_length = sizeof("YYMMDDHHMMSSZ") - 1;
+    static const size_t generalizedtime_length = sizeof("YYYYMMDDHHMMSSZ") - 1;
+    ASN1_TIME *asn1_cmp_time = NULL;
+    int i, day, sec, ret = 0;
+
+    /*
+     * Note that ASN.1 allows much more slack in the time format than RFC5280.
+     * In RFC5280, the representation is fixed:
+     * UTCTime: YYMMDDHHMMSSZ
+     * GeneralizedTime: YYYYMMDDHHMMSSZ
+     *
+     * We do NOT currently enforce the following RFC 5280 requirement:
+     * "CAs conforming to this profile MUST always encode certificate
+     *  validity dates through the year 2049 as UTCTime; certificate validity
+     *  dates in 2050 or later MUST be encoded as GeneralizedTime."
+     */
+    switch (ctm->type) {
+    case V_ASN1_UTCTIME:
+        if (ctm->length != (int)(utctime_length))
+            return 0;
+        break;
+    case V_ASN1_GENERALIZEDTIME:
+        if (ctm->length != (int)(generalizedtime_length))
+            return 0;
+        break;
+    default:
+        return 0;
+    }
+
+    /**
+     * Verify the format: the ASN.1 functions we use below allow a more
+     * flexible format than what's mandated by RFC 5280.
+     * Digit and date ranges will be verified in the conversion methods.
+     */
+    for (i = 0; i < ctm->length - 1; i++) {
+        if (!ossl_isdigit(ctm->data[i]))
+            return 0;
+    }
+    if (ctm->data[ctm->length - 1] != 'Z')
+        return 0;
+
+    /*
+     * There is ASN1_UTCTIME_cmp_time_t but no
+     * ASN1_GENERALIZEDTIME_cmp_time_t or ASN1_TIME_cmp_time_t,
+     * so we go through ASN.1
+     */
+    asn1_cmp_time = X509_time_adj(NULL, 0, cmp_time);
+    if (asn1_cmp_time == NULL)
+        goto err;
+    if (!ASN1_TIME_diff(&day, &sec, ctm, asn1_cmp_time))
+        goto err;
+
+    /*
+     * X509_cmp_time comparison is <=.
+     * The return value 0 is reserved for errors.
+     */
+    ret = (day >= 0 && sec >= 0) ? -1 : 1;
+
+ err:
+    ASN1_TIME_free(asn1_cmp_time);
+    return ret;
+}
+
+ASN1_TIME *X509_gmtime_adj(ASN1_TIME *s, long adj)
+{
+    return X509_time_adj(s, adj, NULL);
+}
+
+ASN1_TIME *X509_time_adj(ASN1_TIME *s, long offset_sec, time_t *in_tm)
+{
+    return X509_time_adj_ex(s, 0, offset_sec, in_tm);
+}
+
+ASN1_TIME *X509_time_adj_ex(ASN1_TIME *s,
+                            int offset_day, long offset_sec, time_t *in_tm)
+{
+    time_t t;
+
+    if (in_tm)
+        t = *in_tm;
+    else
+        time(&t);
+
+    if (s && !(s->flags & ASN1_STRING_FLAG_MSTRING)) {
+        if (s->type == V_ASN1_UTCTIME)
+            return ASN1_UTCTIME_adj(s, t, offset_day, offset_sec);
+        if (s->type == V_ASN1_GENERALIZEDTIME)
+            return ASN1_GENERALIZEDTIME_adj(s, t, offset_day, offset_sec);
+    }
+    return ASN1_TIME_adj(s, t, offset_day, offset_sec);
+}
+
+int X509_get_pubkey_parameters(EVP_PKEY *pkey, STACK_OF(X509) *chain)
+{
+    EVP_PKEY *ktmp = NULL, *ktmp2;
+    int i, j;
+
+    if ((pkey != NULL) && !EVP_PKEY_missing_parameters(pkey))
+        return 1;
+
+    for (i = 0; i < sk_X509_num(chain); i++) {
+        ktmp = X509_get0_pubkey(sk_X509_value(chain, i));
+        if (ktmp == NULL) {
+            X509err(X509_F_X509_GET_PUBKEY_PARAMETERS,
+                    X509_R_UNABLE_TO_GET_CERTS_PUBLIC_KEY);
+            return 0;
+        }
+        if (!EVP_PKEY_missing_parameters(ktmp))
+            break;
+    }
+    if (ktmp == NULL) {
+        X509err(X509_F_X509_GET_PUBKEY_PARAMETERS,
+                X509_R_UNABLE_TO_FIND_PARAMETERS_IN_CHAIN);
+        return 0;
+    }
+
+    /* first, populate the other certs */
+    for (j = i - 1; j >= 0; j--) {
+        ktmp2 = X509_get0_pubkey(sk_X509_value(chain, j));
+        EVP_PKEY_copy_parameters(ktmp2, ktmp);
+    }
+
+    if (pkey != NULL)
+        EVP_PKEY_copy_parameters(pkey, ktmp);
+    return 1;
+}
+
+/* Make a delta CRL as the diff between two full CRLs */
+
+X509_CRL *X509_CRL_diff(X509_CRL *base, X509_CRL *newer,
+                        EVP_PKEY *skey, const EVP_MD *md, unsigned int flags)
+{
+    X509_CRL *crl = NULL;
+    int i;
+    STACK_OF(X509_REVOKED) *revs = NULL;
+    /* CRLs can't be delta already */
+    if (base->base_crl_number || newer->base_crl_number) {
+        X509err(X509_F_X509_CRL_DIFF, X509_R_CRL_ALREADY_DELTA);
+        return NULL;
+    }
+    /* Base and new CRL must have a CRL number */
+    if (!base->crl_number || !newer->crl_number) {
+        X509err(X509_F_X509_CRL_DIFF, X509_R_NO_CRL_NUMBER);
+        return NULL;
+    }
+    /* Issuer names must match */
+    if (X509_NAME_cmp(X509_CRL_get_issuer(base), X509_CRL_get_issuer(newer))) {
+        X509err(X509_F_X509_CRL_DIFF, X509_R_ISSUER_MISMATCH);
+        return NULL;
+    }
+    /* AKID and IDP must match */
+    if (!crl_extension_match(base, newer, NID_authority_key_identifier)) {
+        X509err(X509_F_X509_CRL_DIFF, X509_R_AKID_MISMATCH);
+        return NULL;
+    }
+    if (!crl_extension_match(base, newer, NID_issuing_distribution_point)) {
+        X509err(X509_F_X509_CRL_DIFF, X509_R_IDP_MISMATCH);
+        return NULL;
+    }
+    /* Newer CRL number must exceed full CRL number */
+    if (ASN1_INTEGER_cmp(newer->crl_number, base->crl_number) <= 0) {
+        X509err(X509_F_X509_CRL_DIFF, X509_R_NEWER_CRL_NOT_NEWER);
+        return NULL;
+    }
+    /* CRLs must verify */
+    if (skey && (X509_CRL_verify(base, skey) <= 0 ||
+                 X509_CRL_verify(newer, skey) <= 0)) {
+        X509err(X509_F_X509_CRL_DIFF, X509_R_CRL_VERIFY_FAILURE);
+        return NULL;
+    }
+    /* Create new CRL */
+    crl = X509_CRL_new();
+    if (crl == NULL || !X509_CRL_set_version(crl, 1))
+        goto memerr;
+    /* Set issuer name */
+    if (!X509_CRL_set_issuer_name(crl, X509_CRL_get_issuer(newer)))
+        goto memerr;
+
+    if (!X509_CRL_set1_lastUpdate(crl, X509_CRL_get0_lastUpdate(newer)))
+        goto memerr;
+    if (!X509_CRL_set1_nextUpdate(crl, X509_CRL_get0_nextUpdate(newer)))
+        goto memerr;
+
+    /* Set base CRL number: must be critical */
+
+    if (!X509_CRL_add1_ext_i2d(crl, NID_delta_crl, base->crl_number, 1, 0))
+        goto memerr;
+
+    /*
+     * Copy extensions across from newest CRL to delta: this will set CRL
+     * number to correct value too.
+     */
+
+    for (i = 0; i < X509_CRL_get_ext_count(newer); i++) {
+        X509_EXTENSION *ext;
+        ext = X509_CRL_get_ext(newer, i);
+        if (!X509_CRL_add_ext(crl, ext, -1))
+            goto memerr;
+    }
+
+    /* Go through revoked entries, copying as needed */
+
+    revs = X509_CRL_get_REVOKED(newer);
+
+    for (i = 0; i < sk_X509_REVOKED_num(revs); i++) {
+        X509_REVOKED *rvn, *rvtmp;
+        rvn = sk_X509_REVOKED_value(revs, i);
+        /*
+         * Add only if not also in base. TODO: need something cleverer here
+         * for some more complex CRLs covering multiple CAs.
+         */
+        if (!X509_CRL_get0_by_serial(base, &rvtmp, &rvn->serialNumber)) {
+            rvtmp = X509_REVOKED_dup(rvn);
+            if (!rvtmp)
+                goto memerr;
+            if (!X509_CRL_add0_revoked(crl, rvtmp)) {
+                X509_REVOKED_free(rvtmp);
+                goto memerr;
+            }
+        }
+    }
+    /* TODO: optionally prune deleted entries */
+
+    if (skey && md && !X509_CRL_sign(crl, skey, md))
+        goto memerr;
+
+    return crl;
+
+ memerr:
+    X509err(X509_F_X509_CRL_DIFF, ERR_R_MALLOC_FAILURE);
+    X509_CRL_free(crl);
+    return NULL;
+}
+
+int X509_STORE_CTX_set_ex_data(X509_STORE_CTX *ctx, int idx, void *data)
+{
+    return CRYPTO_set_ex_data(&ctx->ex_data, idx, data);
+}
+
+void *X509_STORE_CTX_get_ex_data(X509_STORE_CTX *ctx, int idx)
+{
+    return CRYPTO_get_ex_data(&ctx->ex_data, idx);
+}
+
+int X509_STORE_CTX_get_error(X509_STORE_CTX *ctx)
+{
+    return ctx->error;
+}
+
+void X509_STORE_CTX_set_error(X509_STORE_CTX *ctx, int err)
+{
+    ctx->error = err;
+}
+
+int X509_STORE_CTX_get_error_depth(X509_STORE_CTX *ctx)
+{
+    return ctx->error_depth;
+}
+
+void X509_STORE_CTX_set_error_depth(X509_STORE_CTX *ctx, int depth)
+{
+    ctx->error_depth = depth;
+}
+
+X509 *X509_STORE_CTX_get_current_cert(X509_STORE_CTX *ctx)
+{
+    return ctx->current_cert;
+}
+
+void X509_STORE_CTX_set_current_cert(X509_STORE_CTX *ctx, X509 *x)
+{
+    ctx->current_cert = x;
+}
+
+STACK_OF(X509) *X509_STORE_CTX_get0_chain(X509_STORE_CTX *ctx)
+{
+    return ctx->chain;
+}
+
+STACK_OF(X509) *X509_STORE_CTX_get1_chain(X509_STORE_CTX *ctx)
+{
+    if (!ctx->chain)
+        return NULL;
+    return X509_chain_up_ref(ctx->chain);
+}
+
+X509 *X509_STORE_CTX_get0_current_issuer(X509_STORE_CTX *ctx)
+{
+    return ctx->current_issuer;
+}
+
+X509_CRL *X509_STORE_CTX_get0_current_crl(X509_STORE_CTX *ctx)
+{
+    return ctx->current_crl;
+}
+
+X509_STORE_CTX *X509_STORE_CTX_get0_parent_ctx(X509_STORE_CTX *ctx)
+{
+    return ctx->parent;
+}
+
+void X509_STORE_CTX_set_cert(X509_STORE_CTX *ctx, X509 *x)
+{
+    ctx->cert = x;
+}
+
+void X509_STORE_CTX_set0_crls(X509_STORE_CTX *ctx, STACK_OF(X509_CRL) *sk)
+{
+    ctx->crls = sk;
+}
+
+int X509_STORE_CTX_set_purpose(X509_STORE_CTX *ctx, int purpose)
+{
+    /*
+     * XXX: Why isn't this function always used to set the associated trust?
+     * Should there even be a VPM->trust field at all?  Or should the trust
+     * always be inferred from the purpose by X509_STORE_CTX_init().
+     */
+    return X509_STORE_CTX_purpose_inherit(ctx, 0, purpose, 0);
+}
+
+int X509_STORE_CTX_set_trust(X509_STORE_CTX *ctx, int trust)
+{
+    /*
+     * XXX: See above, this function would only be needed when the default
+     * trust for the purpose needs an override in a corner case.
+     */
+    return X509_STORE_CTX_purpose_inherit(ctx, 0, 0, trust);
+}
+
+/*
+ * This function is used to set the X509_STORE_CTX purpose and trust values.
+ * This is intended to be used when another structure has its own trust and
+ * purpose values which (if set) will be inherited by the ctx. If they aren't
+ * set then we will usually have a default purpose in mind which should then
+ * be used to set the trust value. An example of this is SSL use: an SSL
+ * structure will have its own purpose and trust settings which the
+ * application can set: if they aren't set then we use the default of SSL
+ * client/server.
+ */
+
+int X509_STORE_CTX_purpose_inherit(X509_STORE_CTX *ctx, int def_purpose,
+                                   int purpose, int trust)
+{
+    int idx;
+    /* If purpose not set use default */
+    if (!purpose)
+        purpose = def_purpose;
+    /* If we have a purpose then check it is valid */
+    if (purpose) {
+        X509_PURPOSE *ptmp;
+        idx = X509_PURPOSE_get_by_id(purpose);
+        if (idx == -1) {
+            X509err(X509_F_X509_STORE_CTX_PURPOSE_INHERIT,
+                    X509_R_UNKNOWN_PURPOSE_ID);
+            return 0;
+        }
+        ptmp = X509_PURPOSE_get0(idx);
+        if (ptmp->trust == X509_TRUST_DEFAULT) {
+            idx = X509_PURPOSE_get_by_id(def_purpose);
+            /*
+             * XXX: In the two callers above def_purpose is always 0, which is
+             * not a known value, so idx will always be -1.  How is the
+             * X509_TRUST_DEFAULT case actually supposed to be handled?
+             */
+            if (idx == -1) {
+                X509err(X509_F_X509_STORE_CTX_PURPOSE_INHERIT,
+                        X509_R_UNKNOWN_PURPOSE_ID);
+                return 0;
+            }
+            ptmp = X509_PURPOSE_get0(idx);
+        }
+        /* If trust not set then get from purpose default */
+        if (!trust)
+            trust = ptmp->trust;
+    }
+    if (trust) {
+        idx = X509_TRUST_get_by_id(trust);
+        if (idx == -1) {
+            X509err(X509_F_X509_STORE_CTX_PURPOSE_INHERIT,
+                    X509_R_UNKNOWN_TRUST_ID);
+            return 0;
+        }
+    }
+
+    if (purpose && !ctx->param->purpose)
+        ctx->param->purpose = purpose;
+    if (trust && !ctx->param->trust)
+        ctx->param->trust = trust;
+    return 1;
+}
+
+X509_STORE_CTX *X509_STORE_CTX_new(void)
+{
+    X509_STORE_CTX *ctx = OPENSSL_zalloc(sizeof(*ctx));
+
+    if (ctx == NULL) {
+        X509err(X509_F_X509_STORE_CTX_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    return ctx;
+}
+
+void X509_STORE_CTX_free(X509_STORE_CTX *ctx)
+{
+    if (ctx == NULL)
+        return;
+
+    X509_STORE_CTX_cleanup(ctx);
+    OPENSSL_free(ctx);
+}
+
+int X509_STORE_CTX_init(X509_STORE_CTX *ctx, X509_STORE *store, X509 *x509,
+                        STACK_OF(X509) *chain)
+{
+    int ret = 1;
+
+    ctx->ctx = store;
+    ctx->cert = x509;
+    ctx->untrusted = chain;
+    ctx->crls = NULL;
+    ctx->num_untrusted = 0;
+    ctx->other_ctx = NULL;
+    ctx->valid = 0;
+    ctx->chain = NULL;
+    ctx->error = 0;
+    ctx->explicit_policy = 0;
+    ctx->error_depth = 0;
+    ctx->current_cert = NULL;
+    ctx->current_issuer = NULL;
+    ctx->current_crl = NULL;
+    ctx->current_crl_score = 0;
+    ctx->current_reasons = 0;
+    ctx->tree = NULL;
+    ctx->parent = NULL;
+    ctx->dane = NULL;
+    ctx->bare_ta_signed = 0;
+    /* Zero ex_data to make sure we're cleanup-safe */
+    memset(&ctx->ex_data, 0, sizeof(ctx->ex_data));
+
+    /* store->cleanup is always 0 in OpenSSL, if set must be idempotent */
+    if (store)
+        ctx->cleanup = store->cleanup;
+    else
+        ctx->cleanup = 0;
+
+    if (store && store->check_issued)
+        ctx->check_issued = store->check_issued;
+    else
+        ctx->check_issued = check_issued;
+
+    if (store && store->get_issuer)
+        ctx->get_issuer = store->get_issuer;
+    else
+        ctx->get_issuer = X509_STORE_CTX_get1_issuer;
+
+    if (store && store->verify_cb)
+        ctx->verify_cb = store->verify_cb;
+    else
+        ctx->verify_cb = null_callback;
+
+    if (store && store->verify)
+        ctx->verify = store->verify;
+    else
+        ctx->verify = internal_verify;
+
+    if (store && store->check_revocation)
+        ctx->check_revocation = store->check_revocation;
+    else
+        ctx->check_revocation = check_revocation;
+
+    if (store && store->get_crl)
+        ctx->get_crl = store->get_crl;
+    else
+        ctx->get_crl = NULL;
+
+    if (store && store->check_crl)
+        ctx->check_crl = store->check_crl;
+    else
+        ctx->check_crl = check_crl;
+
+    if (store && store->cert_crl)
+        ctx->cert_crl = store->cert_crl;
+    else
+        ctx->cert_crl = cert_crl;
+
+    if (store && store->check_policy)
+        ctx->check_policy = store->check_policy;
+    else
+        ctx->check_policy = check_policy;
+
+    if (store && store->lookup_certs)
+        ctx->lookup_certs = store->lookup_certs;
+    else
+        ctx->lookup_certs = X509_STORE_CTX_get1_certs;
+
+    if (store && store->lookup_crls)
+        ctx->lookup_crls = store->lookup_crls;
+    else
+        ctx->lookup_crls = X509_STORE_CTX_get1_crls;
+
+    ctx->param = X509_VERIFY_PARAM_new();
+    if (ctx->param == NULL) {
+        X509err(X509_F_X509_STORE_CTX_INIT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    /*
+     * Inherit callbacks and flags from X509_STORE if not set use defaults.
+     */
+    if (store)
+        ret = X509_VERIFY_PARAM_inherit(ctx->param, store->param);
+    else
+        ctx->param->inh_flags |= X509_VP_FLAG_DEFAULT | X509_VP_FLAG_ONCE;
+
+    if (ret)
+        ret = X509_VERIFY_PARAM_inherit(ctx->param,
+                                        X509_VERIFY_PARAM_lookup("default"));
+
+    if (ret == 0) {
+        X509err(X509_F_X509_STORE_CTX_INIT, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    /*
+     * XXX: For now, continue to inherit trust from VPM, but infer from the
+     * purpose if this still yields the default value.
+     */
+    if (ctx->param->trust == X509_TRUST_DEFAULT) {
+        int idx = X509_PURPOSE_get_by_id(ctx->param->purpose);
+        X509_PURPOSE *xp = X509_PURPOSE_get0(idx);
+
+        if (xp != NULL)
+            ctx->param->trust = X509_PURPOSE_get_trust(xp);
+    }
+
+    if (CRYPTO_new_ex_data(CRYPTO_EX_INDEX_X509_STORE_CTX, ctx,
+                           &ctx->ex_data))
+        return 1;
+    X509err(X509_F_X509_STORE_CTX_INIT, ERR_R_MALLOC_FAILURE);
+
+ err:
+    /*
+     * On error clean up allocated storage, if the store context was not
+     * allocated with X509_STORE_CTX_new() this is our last chance to do so.
+     */
+    X509_STORE_CTX_cleanup(ctx);
+    return 0;
+}
+
+/*
+ * Set alternative lookup method: just a STACK of trusted certificates. This
+ * avoids X509_STORE nastiness where it isn't needed.
+ */
+void X509_STORE_CTX_set0_trusted_stack(X509_STORE_CTX *ctx, STACK_OF(X509) *sk)
+{
+    ctx->other_ctx = sk;
+    ctx->get_issuer = get_issuer_sk;
+    ctx->lookup_certs = lookup_certs_sk;
+}
+
+void X509_STORE_CTX_cleanup(X509_STORE_CTX *ctx)
+{
+    /*
+     * We need to be idempotent because, unfortunately, free() also calls
+     * cleanup(), so the natural call sequence new(), init(), cleanup(), free()
+     * calls cleanup() for the same object twice!  Thus we must zero the
+     * pointers below after they're freed!
+     */
+    /* Seems to always be 0 in OpenSSL, do this at most once. */
+    if (ctx->cleanup != NULL) {
+        ctx->cleanup(ctx);
+        ctx->cleanup = NULL;
+    }
+    if (ctx->param != NULL) {
+        if (ctx->parent == NULL)
+            X509_VERIFY_PARAM_free(ctx->param);
+        ctx->param = NULL;
+    }
+    X509_policy_tree_free(ctx->tree);
+    ctx->tree = NULL;
+    sk_X509_pop_free(ctx->chain, X509_free);
+    ctx->chain = NULL;
+    CRYPTO_free_ex_data(CRYPTO_EX_INDEX_X509_STORE_CTX, ctx, &(ctx->ex_data));
+    memset(&ctx->ex_data, 0, sizeof(ctx->ex_data));
+}
+
+void X509_STORE_CTX_set_depth(X509_STORE_CTX *ctx, int depth)
+{
+    X509_VERIFY_PARAM_set_depth(ctx->param, depth);
+}
+
+void X509_STORE_CTX_set_flags(X509_STORE_CTX *ctx, unsigned long flags)
+{
+    X509_VERIFY_PARAM_set_flags(ctx->param, flags);
+}
+
+void X509_STORE_CTX_set_time(X509_STORE_CTX *ctx, unsigned long flags,
+                             time_t t)
+{
+    X509_VERIFY_PARAM_set_time(ctx->param, t);
+}
+
+X509 *X509_STORE_CTX_get0_cert(X509_STORE_CTX *ctx)
+{
+    return ctx->cert;
+}
+
+STACK_OF(X509) *X509_STORE_CTX_get0_untrusted(X509_STORE_CTX *ctx)
+{
+    return ctx->untrusted;
+}
+
+void X509_STORE_CTX_set0_untrusted(X509_STORE_CTX *ctx, STACK_OF(X509) *sk)
+{
+    ctx->untrusted = sk;
+}
+
+void X509_STORE_CTX_set0_verified_chain(X509_STORE_CTX *ctx, STACK_OF(X509) *sk)
+{
+    sk_X509_pop_free(ctx->chain, X509_free);
+    ctx->chain = sk;
+}
+
+void X509_STORE_CTX_set_verify_cb(X509_STORE_CTX *ctx,
+                                  X509_STORE_CTX_verify_cb verify_cb)
+{
+    ctx->verify_cb = verify_cb;
+}
+
+X509_STORE_CTX_verify_cb X509_STORE_CTX_get_verify_cb(X509_STORE_CTX *ctx)
+{
+    return ctx->verify_cb;
+}
+
+void X509_STORE_CTX_set_verify(X509_STORE_CTX *ctx,
+                               X509_STORE_CTX_verify_fn verify)
+{
+    ctx->verify = verify;
+}
+
+X509_STORE_CTX_verify_fn X509_STORE_CTX_get_verify(X509_STORE_CTX *ctx)
+{
+    return ctx->verify;
+}
+
+X509_STORE_CTX_get_issuer_fn X509_STORE_CTX_get_get_issuer(X509_STORE_CTX *ctx)
+{
+    return ctx->get_issuer;
+}
+
+X509_STORE_CTX_check_issued_fn X509_STORE_CTX_get_check_issued(X509_STORE_CTX *ctx)
+{
+    return ctx->check_issued;
+}
+
+X509_STORE_CTX_check_revocation_fn X509_STORE_CTX_get_check_revocation(X509_STORE_CTX *ctx)
+{
+    return ctx->check_revocation;
+}
+
+X509_STORE_CTX_get_crl_fn X509_STORE_CTX_get_get_crl(X509_STORE_CTX *ctx)
+{
+    return ctx->get_crl;
+}
+
+X509_STORE_CTX_check_crl_fn X509_STORE_CTX_get_check_crl(X509_STORE_CTX *ctx)
+{
+    return ctx->check_crl;
+}
+
+X509_STORE_CTX_cert_crl_fn X509_STORE_CTX_get_cert_crl(X509_STORE_CTX *ctx)
+{
+    return ctx->cert_crl;
+}
+
+X509_STORE_CTX_check_policy_fn X509_STORE_CTX_get_check_policy(X509_STORE_CTX *ctx)
+{
+    return ctx->check_policy;
+}
+
+X509_STORE_CTX_lookup_certs_fn X509_STORE_CTX_get_lookup_certs(X509_STORE_CTX *ctx)
+{
+    return ctx->lookup_certs;
+}
+
+X509_STORE_CTX_lookup_crls_fn X509_STORE_CTX_get_lookup_crls(X509_STORE_CTX *ctx)
+{
+    return ctx->lookup_crls;
+}
+
+X509_STORE_CTX_cleanup_fn X509_STORE_CTX_get_cleanup(X509_STORE_CTX *ctx)
+{
+    return ctx->cleanup;
+}
+
+X509_POLICY_TREE *X509_STORE_CTX_get0_policy_tree(X509_STORE_CTX *ctx)
+{
+    return ctx->tree;
+}
+
+int X509_STORE_CTX_get_explicit_policy(X509_STORE_CTX *ctx)
+{
+    return ctx->explicit_policy;
+}
+
+int X509_STORE_CTX_get_num_untrusted(X509_STORE_CTX *ctx)
+{
+    return ctx->num_untrusted;
+}
+
+int X509_STORE_CTX_set_default(X509_STORE_CTX *ctx, const char *name)
+{
+    const X509_VERIFY_PARAM *param;
+    param = X509_VERIFY_PARAM_lookup(name);
+    if (!param)
+        return 0;
+    return X509_VERIFY_PARAM_inherit(ctx->param, param);
+}
+
+X509_VERIFY_PARAM *X509_STORE_CTX_get0_param(X509_STORE_CTX *ctx)
+{
+    return ctx->param;
+}
+
+void X509_STORE_CTX_set0_param(X509_STORE_CTX *ctx, X509_VERIFY_PARAM *param)
+{
+    X509_VERIFY_PARAM_free(ctx->param);
+    ctx->param = param;
+}
+
+void X509_STORE_CTX_set0_dane(X509_STORE_CTX *ctx, SSL_DANE *dane)
+{
+    ctx->dane = dane;
+}
+
+static unsigned char *dane_i2d(
+    X509 *cert,
+    uint8_t selector,
+    unsigned int *i2dlen)
+{
+    unsigned char *buf = NULL;
+    int len;
+
+    /*
+     * Extract ASN.1 DER form of certificate or public key.
+     */
+    switch (selector) {
+    case DANETLS_SELECTOR_CERT:
+        len = i2d_X509(cert, &buf);
+        break;
+    case DANETLS_SELECTOR_SPKI:
+        len = i2d_X509_PUBKEY(X509_get_X509_PUBKEY(cert), &buf);
+        break;
+    default:
+        X509err(X509_F_DANE_I2D, X509_R_BAD_SELECTOR);
+        return NULL;
+    }
+
+    if (len < 0 || buf == NULL) {
+        X509err(X509_F_DANE_I2D, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    *i2dlen = (unsigned int)len;
+    return buf;
+}
+
+#define DANETLS_NONE 256        /* impossible uint8_t */
+
+static int dane_match(X509_STORE_CTX *ctx, X509 *cert, int depth)
+{
+    SSL_DANE *dane = ctx->dane;
+    unsigned usage = DANETLS_NONE;
+    unsigned selector = DANETLS_NONE;
+    unsigned ordinal = DANETLS_NONE;
+    unsigned mtype = DANETLS_NONE;
+    unsigned char *i2dbuf = NULL;
+    unsigned int i2dlen = 0;
+    unsigned char mdbuf[EVP_MAX_MD_SIZE];
+    unsigned char *cmpbuf = NULL;
+    unsigned int cmplen = 0;
+    int i;
+    int recnum;
+    int matched = 0;
+    danetls_record *t = NULL;
+    uint32_t mask;
+
+    mask = (depth == 0) ? DANETLS_EE_MASK : DANETLS_TA_MASK;
+
+    /*
+     * The trust store is not applicable with DANE-TA(2)
+     */
+    if (depth >= ctx->num_untrusted)
+        mask &= DANETLS_PKIX_MASK;
+
+    /*
+     * If we've previously matched a PKIX-?? record, no need to test any
+     * further PKIX-?? records, it remains to just build the PKIX chain.
+     * Had the match been a DANE-?? record, we'd be done already.
+     */
+    if (dane->mdpth >= 0)
+        mask &= ~DANETLS_PKIX_MASK;
+
+    /*-
+     * https://tools.ietf.org/html/rfc7671#section-5.1
+     * https://tools.ietf.org/html/rfc7671#section-5.2
+     * https://tools.ietf.org/html/rfc7671#section-5.3
+     * https://tools.ietf.org/html/rfc7671#section-5.4
+     *
+     * We handle DANE-EE(3) records first as they require no chain building
+     * and no expiration or hostname checks.  We also process digests with
+     * higher ordinals first and ignore lower priorities except Full(0) which
+     * is always processed (last).  If none match, we then process PKIX-EE(1).
+     *
+     * NOTE: This relies on DANE usages sorting before the corresponding PKIX
+     * usages in SSL_dane_tlsa_add(), and also on descending sorting of digest
+     * priorities.  See twin comment in ssl/ssl_lib.c.
+     *
+     * We expect that most TLSA RRsets will have just a single usage, so we
+     * don't go out of our way to cache multiple selector-specific i2d buffers
+     * across usages, but if the selector happens to remain the same as switch
+     * usages, that's OK.  Thus, a set of "3 1 1", "3 0 1", "1 1 1", "1 0 1",
+     * records would result in us generating each of the certificate and public
+     * key DER forms twice, but more typically we'd just see multiple "3 1 1"
+     * or multiple "3 0 1" records.
+     *
+     * As soon as we find a match at any given depth, we stop, because either
+     * we've matched a DANE-?? record and the peer is authenticated, or, after
+     * exhausting all DANE-?? records, we've matched a PKIX-?? record, which is
+     * sufficient for DANE, and what remains to do is ordinary PKIX validation.
+     */
+    recnum = (dane->umask & mask) ? sk_danetls_record_num(dane->trecs) : 0;
+    for (i = 0; matched == 0 && i < recnum; ++i) {
+        t = sk_danetls_record_value(dane->trecs, i);
+        if ((DANETLS_USAGE_BIT(t->usage) & mask) == 0)
+            continue;
+        if (t->usage != usage) {
+            usage = t->usage;
+
+            /* Reset digest agility for each usage/selector pair */
+            mtype = DANETLS_NONE;
+            ordinal = dane->dctx->mdord[t->mtype];
+        }
+        if (t->selector != selector) {
+            selector = t->selector;
+
+            /* Update per-selector state */
+            OPENSSL_free(i2dbuf);
+            i2dbuf = dane_i2d(cert, selector, &i2dlen);
+            if (i2dbuf == NULL)
+                return -1;
+
+            /* Reset digest agility for each usage/selector pair */
+            mtype = DANETLS_NONE;
+            ordinal = dane->dctx->mdord[t->mtype];
+        } else if (t->mtype != DANETLS_MATCHING_FULL) {
+            /*-
+             * Digest agility:
+             *
+             *     <https://tools.ietf.org/html/rfc7671#section-9>
+             *
+             * For a fixed selector, after processing all records with the
+             * highest mtype ordinal, ignore all mtypes with lower ordinals
+             * other than "Full".
+             */
+            if (dane->dctx->mdord[t->mtype] < ordinal)
+                continue;
+        }
+
+        /*
+         * Each time we hit a (new selector or) mtype, re-compute the relevant
+         * digest, more complex caching is not worth the code space.
+         */
+        if (t->mtype != mtype) {
+            const EVP_MD *md = dane->dctx->mdevp[mtype = t->mtype];
+            cmpbuf = i2dbuf;
+            cmplen = i2dlen;
+
+            if (md != NULL) {
+                cmpbuf = mdbuf;
+                if (!EVP_Digest(i2dbuf, i2dlen, cmpbuf, &cmplen, md, 0)) {
+                    matched = -1;
+                    break;
+                }
+            }
+        }
+
+        /*
+         * Squirrel away the certificate and depth if we have a match.  Any
+         * DANE match is dispositive, but with PKIX we still need to build a
+         * full chain.
+         */
+        if (cmplen == t->dlen &&
+            memcmp(cmpbuf, t->data, cmplen) == 0) {
+            if (DANETLS_USAGE_BIT(usage) & DANETLS_DANE_MASK)
+                matched = 1;
+            if (matched || dane->mdpth < 0) {
+                dane->mdpth = depth;
+                dane->mtlsa = t;
+                OPENSSL_free(dane->mcert);
+                dane->mcert = cert;
+                X509_up_ref(cert);
+            }
+            break;
+        }
+    }
+
+    /* Clear the one-element DER cache */
+    OPENSSL_free(i2dbuf);
+    return matched;
+}
+
+static int check_dane_issuer(X509_STORE_CTX *ctx, int depth)
+{
+    SSL_DANE *dane = ctx->dane;
+    int matched = 0;
+    X509 *cert;
+
+    if (!DANETLS_HAS_TA(dane) || depth == 0)
+        return  X509_TRUST_UNTRUSTED;
+
+    /*
+     * Record any DANE trust-anchor matches, for the first depth to test, if
+     * there's one at that depth. (This'll be false for length 1 chains looking
+     * for an exact match for the leaf certificate).
+     */
+    cert = sk_X509_value(ctx->chain, depth);
+    if (cert != NULL && (matched = dane_match(ctx, cert, depth)) < 0)
+        return  X509_TRUST_REJECTED;
+    if (matched > 0) {
+        ctx->num_untrusted = depth - 1;
+        return  X509_TRUST_TRUSTED;
+    }
+
+    return  X509_TRUST_UNTRUSTED;
+}
+
+static int check_dane_pkeys(X509_STORE_CTX *ctx)
+{
+    SSL_DANE *dane = ctx->dane;
+    danetls_record *t;
+    int num = ctx->num_untrusted;
+    X509 *cert = sk_X509_value(ctx->chain, num - 1);
+    int recnum = sk_danetls_record_num(dane->trecs);
+    int i;
+
+    for (i = 0; i < recnum; ++i) {
+        t = sk_danetls_record_value(dane->trecs, i);
+        if (t->usage != DANETLS_USAGE_DANE_TA ||
+            t->selector != DANETLS_SELECTOR_SPKI ||
+            t->mtype != DANETLS_MATCHING_FULL ||
+            X509_verify(cert, t->spki) <= 0)
+            continue;
+
+        /* Clear any PKIX-?? matches that failed to extend to a full chain */
+        X509_free(dane->mcert);
+        dane->mcert = NULL;
+
+        /* Record match via a bare TA public key */
+        ctx->bare_ta_signed = 1;
+        dane->mdpth = num - 1;
+        dane->mtlsa = t;
+
+        /* Prune any excess chain certificates */
+        num = sk_X509_num(ctx->chain);
+        for (; num > ctx->num_untrusted; --num)
+            X509_free(sk_X509_pop(ctx->chain));
+
+        return X509_TRUST_TRUSTED;
+    }
+
+    return X509_TRUST_UNTRUSTED;
+}
+
+static void dane_reset(SSL_DANE *dane)
+{
+    /*
+     * Reset state to verify another chain, or clear after failure.
+     */
+    X509_free(dane->mcert);
+    dane->mcert = NULL;
+    dane->mtlsa = NULL;
+    dane->mdpth = -1;
+    dane->pdpth = -1;
+}
+
+static int check_leaf_suiteb(X509_STORE_CTX *ctx, X509 *cert)
+{
+    int err = X509_chain_check_suiteb(NULL, cert, NULL, ctx->param->flags);
+
+    if (err == X509_V_OK)
+        return 1;
+    return verify_cb_cert(ctx, cert, 0, err);
+}
+
+static int dane_verify(X509_STORE_CTX *ctx)
+{
+    X509 *cert = ctx->cert;
+    SSL_DANE *dane = ctx->dane;
+    int matched;
+    int done;
+
+    dane_reset(dane);
+
+    /*-
+     * When testing the leaf certificate, if we match a DANE-EE(3) record,
+     * dane_match() returns 1 and we're done.  If however we match a PKIX-EE(1)
+     * record, the match depth and matching TLSA record are recorded, but the
+     * return value is 0, because we still need to find a PKIX trust-anchor.
+     * Therefore, when DANE authentication is enabled (required), we're done
+     * if:
+     *   + matched < 0, internal error.
+     *   + matched == 1, we matched a DANE-EE(3) record
+     *   + matched == 0, mdepth < 0 (no PKIX-EE match) and there are no
+     *     DANE-TA(2) or PKIX-TA(0) to test.
+     */
+    matched = dane_match(ctx, ctx->cert, 0);
+    done = matched != 0 || (!DANETLS_HAS_TA(dane) && dane->mdpth < 0);
+
+    if (done)
+        X509_get_pubkey_parameters(NULL, ctx->chain);
+
+    if (matched > 0) {
+        /* Callback invoked as needed */
+        if (!check_leaf_suiteb(ctx, cert))
+            return 0;
+        /* Callback invoked as needed */
+        if ((dane->flags & DANE_FLAG_NO_DANE_EE_NAMECHECKS) == 0 &&
+            !check_id(ctx))
+            return 0;
+        /* Bypass internal_verify(), issue depth 0 success callback */
+        ctx->error_depth = 0;
+        ctx->current_cert = cert;
+        return ctx->verify_cb(1, ctx);
+    }
+
+    if (matched < 0) {
+        ctx->error_depth = 0;
+        ctx->current_cert = cert;
+        ctx->error = X509_V_ERR_OUT_OF_MEM;
+        return -1;
+    }
+
+    if (done) {
+        /* Fail early, TA-based success is not possible */
+        if (!check_leaf_suiteb(ctx, cert))
+            return 0;
+        return verify_cb_cert(ctx, cert, 0, X509_V_ERR_DANE_NO_MATCH);
+    }
+
+    /*
+     * Chain verification for usages 0/1/2.  TLSA record matching of depth > 0
+     * certificates happens in-line with building the rest of the chain.
+     */
+    return verify_chain(ctx);
+}
+
+/* Get issuer, without duplicate suppression */
+static int get_issuer(X509 **issuer, X509_STORE_CTX *ctx, X509 *cert)
+{
+    STACK_OF(X509) *saved_chain = ctx->chain;
+    int ok;
+
+    ctx->chain = NULL;
+    ok = ctx->get_issuer(issuer, ctx, cert);
+    ctx->chain = saved_chain;
+
+    return ok;
+}
+
+static int build_chain(X509_STORE_CTX *ctx)
+{
+    SSL_DANE *dane = ctx->dane;
+    int num = sk_X509_num(ctx->chain);
+    X509 *cert = sk_X509_value(ctx->chain, num - 1);
+    int ss = cert_self_signed(cert);
+    STACK_OF(X509) *sktmp = NULL;
+    unsigned int search;
+    int may_trusted = 0;
+    int may_alternate = 0;
+    int trust = X509_TRUST_UNTRUSTED;
+    int alt_untrusted = 0;
+    int depth;
+    int ok = 0;
+    int i;
+
+    /* Our chain starts with a single untrusted element. */
+    if (!ossl_assert(num == 1 && ctx->num_untrusted == num))  {
+        X509err(X509_F_BUILD_CHAIN, ERR_R_INTERNAL_ERROR);
+        ctx->error = X509_V_ERR_UNSPECIFIED;
+        return 0;
+    }
+
+#define S_DOUNTRUSTED      (1 << 0)     /* Search untrusted chain */
+#define S_DOTRUSTED        (1 << 1)     /* Search trusted store */
+#define S_DOALTERNATE      (1 << 2)     /* Retry with pruned alternate chain */
+    /*
+     * Set up search policy, untrusted if possible, trusted-first if enabled.
+     * If we're doing DANE and not doing PKIX-TA/PKIX-EE, we never look in the
+     * trust_store, otherwise we might look there first.  If not trusted-first,
+     * and alternate chains are not disabled, try building an alternate chain
+     * if no luck with untrusted first.
+     */
+    search = (ctx->untrusted != NULL) ? S_DOUNTRUSTED : 0;
+    if (DANETLS_HAS_PKIX(dane) || !DANETLS_HAS_DANE(dane)) {
+        if (search == 0 || ctx->param->flags & X509_V_FLAG_TRUSTED_FIRST)
+            search |= S_DOTRUSTED;
+        else if (!(ctx->param->flags & X509_V_FLAG_NO_ALT_CHAINS))
+            may_alternate = 1;
+        may_trusted = 1;
+    }
+
+    /*
+     * Shallow-copy the stack of untrusted certificates (with TLS, this is
+     * typically the content of the peer's certificate message) so can make
+     * multiple passes over it, while free to remove elements as we go.
+     */
+    if (ctx->untrusted && (sktmp = sk_X509_dup(ctx->untrusted)) == NULL) {
+        X509err(X509_F_BUILD_CHAIN, ERR_R_MALLOC_FAILURE);
+        ctx->error = X509_V_ERR_OUT_OF_MEM;
+        return 0;
+    }
+
+    /*
+     * If we got any "DANE-TA(2) Cert(0) Full(0)" trust-anchors from DNS, add
+     * them to our working copy of the untrusted certificate stack.  Since the
+     * caller of X509_STORE_CTX_init() may have provided only a leaf cert with
+     * no corresponding stack of untrusted certificates, we may need to create
+     * an empty stack first.  [ At present only the ssl library provides DANE
+     * support, and ssl_verify_cert_chain() always provides a non-null stack
+     * containing at least the leaf certificate, but we must be prepared for
+     * this to change. ]
+     */
+    if (DANETLS_ENABLED(dane) && dane->certs != NULL) {
+        if (sktmp == NULL && (sktmp = sk_X509_new_null()) == NULL) {
+            X509err(X509_F_BUILD_CHAIN, ERR_R_MALLOC_FAILURE);
+            ctx->error = X509_V_ERR_OUT_OF_MEM;
+            return 0;
+        }
+        for (i = 0; i < sk_X509_num(dane->certs); ++i) {
+            if (!sk_X509_push(sktmp, sk_X509_value(dane->certs, i))) {
+                sk_X509_free(sktmp);
+                X509err(X509_F_BUILD_CHAIN, ERR_R_MALLOC_FAILURE);
+                ctx->error = X509_V_ERR_OUT_OF_MEM;
+                return 0;
+            }
+        }
+    }
+
+    /*
+     * Still absurdly large, but arithmetically safe, a lower hard upper bound
+     * might be reasonable.
+     */
+    if (ctx->param->depth > INT_MAX/2)
+        ctx->param->depth = INT_MAX/2;
+
+    /*
+     * Try to Extend the chain until we reach an ultimately trusted issuer.
+     * Build chains up to one longer the limit, later fail if we hit the limit,
+     * with an X509_V_ERR_CERT_CHAIN_TOO_LONG error code.
+     */
+    depth = ctx->param->depth + 1;
+
+    while (search != 0) {
+        X509 *x;
+        X509 *xtmp = NULL;
+
+        /*
+         * Look in the trust store if enabled for first lookup, or we've run
+         * out of untrusted issuers and search here is not disabled.  When we
+         * reach the depth limit, we stop extending the chain, if by that point
+         * we've not found a trust-anchor, any trusted chain would be too long.
+         *
+         * The error reported to the application verify callback is at the
+         * maximal valid depth with the current certificate equal to the last
+         * not ultimately-trusted issuer.  For example, with verify_depth = 0,
+         * the callback will report errors at depth=1 when the immediate issuer
+         * of the leaf certificate is not a trust anchor.  No attempt will be
+         * made to locate an issuer for that certificate, since such a chain
+         * would be a-priori too long.
+         */
+        if ((search & S_DOTRUSTED) != 0) {
+            i = num = sk_X509_num(ctx->chain);
+            if ((search & S_DOALTERNATE) != 0) {
+                /*
+                 * As high up the chain as we can, look for an alternative
+                 * trusted issuer of an untrusted certificate that currently
+                 * has an untrusted issuer.  We use the alt_untrusted variable
+                 * to track how far up the chain we find the first match.  It
+                 * is only if and when we find a match, that we prune the chain
+                 * and reset ctx->num_untrusted to the reduced count of
+                 * untrusted certificates.  While we're searching for such a
+                 * match (which may never be found), it is neither safe nor
+                 * wise to preemptively modify either the chain or
+                 * ctx->num_untrusted.
+                 *
+                 * Note, like ctx->num_untrusted, alt_untrusted is a count of
+                 * untrusted certificates, not a "depth".
+                 */
+                i = alt_untrusted;
+            }
+            x = sk_X509_value(ctx->chain, i-1);
+
+            ok = (depth < num) ? 0 : get_issuer(&xtmp, ctx, x);
+
+            if (ok < 0) {
+                trust = X509_TRUST_REJECTED;
+                ctx->error = X509_V_ERR_STORE_LOOKUP;
+                search = 0;
+                continue;
+            }
+
+            if (ok > 0) {
+                /*
+                 * Alternative trusted issuer for a mid-chain untrusted cert?
+                 * Pop the untrusted cert's successors and retry.  We might now
+                 * be able to complete a valid chain via the trust store.  Note
+                 * that despite the current trust-store match we might still
+                 * fail complete the chain to a suitable trust-anchor, in which
+                 * case we may prune some more untrusted certificates and try
+                 * again.  Thus the S_DOALTERNATE bit may yet be turned on
+                 * again with an even shorter untrusted chain!
+                 *
+                 * If in the process we threw away our matching PKIX-TA trust
+                 * anchor, reset DANE trust.  We might find a suitable trusted
+                 * certificate among the ones from the trust store.
+                 */
+                if ((search & S_DOALTERNATE) != 0) {
+                    if (!ossl_assert(num > i && i > 0 && ss == 0)) {
+                        X509err(X509_F_BUILD_CHAIN, ERR_R_INTERNAL_ERROR);
+                        X509_free(xtmp);
+                        trust = X509_TRUST_REJECTED;
+                        ctx->error = X509_V_ERR_UNSPECIFIED;
+                        search = 0;
+                        continue;
+                    }
+                    search &= ~S_DOALTERNATE;
+                    for (; num > i; --num)
+                        X509_free(sk_X509_pop(ctx->chain));
+                    ctx->num_untrusted = num;
+
+                    if (DANETLS_ENABLED(dane) &&
+                        dane->mdpth >= ctx->num_untrusted) {
+                        dane->mdpth = -1;
+                        X509_free(dane->mcert);
+                        dane->mcert = NULL;
+                    }
+                    if (DANETLS_ENABLED(dane) &&
+                        dane->pdpth >= ctx->num_untrusted)
+                        dane->pdpth = -1;
+                }
+
+                /*
+                 * Self-signed untrusted certificates get replaced by their
+                 * trusted matching issuer.  Otherwise, grow the chain.
+                 */
+                if (ss == 0) {
+                    if (!sk_X509_push(ctx->chain, x = xtmp)) {
+                        X509_free(xtmp);
+                        X509err(X509_F_BUILD_CHAIN, ERR_R_MALLOC_FAILURE);
+                        trust = X509_TRUST_REJECTED;
+                        ctx->error = X509_V_ERR_OUT_OF_MEM;
+                        search = 0;
+                        continue;
+                    }
+                    ss = cert_self_signed(x);
+                } else if (num == ctx->num_untrusted) {
+                    /*
+                     * We have a self-signed certificate that has the same
+                     * subject name (and perhaps keyid and/or serial number) as
+                     * a trust-anchor.  We must have an exact match to avoid
+                     * possible impersonation via key substitution etc.
+                     */
+                    if (X509_cmp(x, xtmp) != 0) {
+                        /* Self-signed untrusted mimic. */
+                        X509_free(xtmp);
+                        ok = 0;
+                    } else {
+                        X509_free(x);
+                        ctx->num_untrusted = --num;
+                        (void) sk_X509_set(ctx->chain, num, x = xtmp);
+                    }
+                }
+
+                /*
+                 * We've added a new trusted certificate to the chain, recheck
+                 * trust.  If not done, and not self-signed look deeper.
+                 * Whether or not we're doing "trusted first", we no longer
+                 * look for untrusted certificates from the peer's chain.
+                 *
+                 * At this point ctx->num_trusted and num must reflect the
+                 * correct number of untrusted certificates, since the DANE
+                 * logic in check_trust() depends on distinguishing CAs from
+                 * "the wire" from CAs from the trust store.  In particular, the
+                 * certificate at depth "num" should be the new trusted
+                 * certificate with ctx->num_untrusted <= num.
+                 */
+                if (ok) {
+                    if (!ossl_assert(ctx->num_untrusted <= num)) {
+                        X509err(X509_F_BUILD_CHAIN, ERR_R_INTERNAL_ERROR);
+                        trust = X509_TRUST_REJECTED;
+                        ctx->error = X509_V_ERR_UNSPECIFIED;
+                        search = 0;
+                        continue;
+                    }
+                    search &= ~S_DOUNTRUSTED;
+                    switch (trust = check_trust(ctx, num)) {
+                    case X509_TRUST_TRUSTED:
+                    case X509_TRUST_REJECTED:
+                        search = 0;
+                        continue;
+                    }
+                    if (ss == 0)
+                        continue;
+                }
+            }
+
+            /*
+             * No dispositive decision, and either self-signed or no match, if
+             * we were doing untrusted-first, and alt-chains are not disabled,
+             * do that, by repeatedly losing one untrusted element at a time,
+             * and trying to extend the shorted chain.
+             */
+            if ((search & S_DOUNTRUSTED) == 0) {
+                /* Continue search for a trusted issuer of a shorter chain? */
+                if ((search & S_DOALTERNATE) != 0 && --alt_untrusted > 0)
+                    continue;
+                /* Still no luck and no fallbacks left? */
+                if (!may_alternate || (search & S_DOALTERNATE) != 0 ||
+                    ctx->num_untrusted < 2)
+                    break;
+                /* Search for a trusted issuer of a shorter chain */
+                search |= S_DOALTERNATE;
+                alt_untrusted = ctx->num_untrusted - 1;
+                ss = 0;
+            }
+        }
+
+        /*
+         * Extend chain with peer-provided certificates
+         */
+        if ((search & S_DOUNTRUSTED) != 0) {
+            num = sk_X509_num(ctx->chain);
+            if (!ossl_assert(num == ctx->num_untrusted)) {
+                X509err(X509_F_BUILD_CHAIN, ERR_R_INTERNAL_ERROR);
+                trust = X509_TRUST_REJECTED;
+                ctx->error = X509_V_ERR_UNSPECIFIED;
+                search = 0;
+                continue;
+            }
+            x = sk_X509_value(ctx->chain, num-1);
+
+            /*
+             * Once we run out of untrusted issuers, we stop looking for more
+             * and start looking only in the trust store if enabled.
+             */
+            xtmp = (ss || depth < num) ? NULL : find_issuer(ctx, sktmp, x);
+            if (xtmp == NULL) {
+                search &= ~S_DOUNTRUSTED;
+                if (may_trusted)
+                    search |= S_DOTRUSTED;
+                continue;
+            }
+
+            /* Drop this issuer from future consideration */
+            (void) sk_X509_delete_ptr(sktmp, xtmp);
+
+            if (!sk_X509_push(ctx->chain, xtmp)) {
+                X509err(X509_F_BUILD_CHAIN, ERR_R_MALLOC_FAILURE);
+                trust = X509_TRUST_REJECTED;
+                ctx->error = X509_V_ERR_OUT_OF_MEM;
+                search = 0;
+                continue;
+            }
+
+            X509_up_ref(x = xtmp);
+            ++ctx->num_untrusted;
+            ss = cert_self_signed(xtmp);
+
+            /*
+             * Check for DANE-TA trust of the topmost untrusted certificate.
+             */
+            switch (trust = check_dane_issuer(ctx, ctx->num_untrusted - 1)) {
+            case X509_TRUST_TRUSTED:
+            case X509_TRUST_REJECTED:
+                search = 0;
+                continue;
+            }
+        }
+    }
+    sk_X509_free(sktmp);
+
+    /*
+     * Last chance to make a trusted chain, either bare DANE-TA public-key
+     * signers, or else direct leaf PKIX trust.
+     */
+    num = sk_X509_num(ctx->chain);
+    if (num <= depth) {
+        if (trust == X509_TRUST_UNTRUSTED && DANETLS_HAS_DANE_TA(dane))
+            trust = check_dane_pkeys(ctx);
+        if (trust == X509_TRUST_UNTRUSTED && num == ctx->num_untrusted)
+            trust = check_trust(ctx, num);
+    }
+
+    switch (trust) {
+    case X509_TRUST_TRUSTED:
+        return 1;
+    case X509_TRUST_REJECTED:
+        /* Callback already issued */
+        return 0;
+    case X509_TRUST_UNTRUSTED:
+    default:
+        num = sk_X509_num(ctx->chain);
+        if (num > depth)
+            return verify_cb_cert(ctx, NULL, num-1,
+                                  X509_V_ERR_CERT_CHAIN_TOO_LONG);
+        if (DANETLS_ENABLED(dane) &&
+            (!DANETLS_HAS_PKIX(dane) || dane->pdpth >= 0))
+            return verify_cb_cert(ctx, NULL, num-1, X509_V_ERR_DANE_NO_MATCH);
+        if (ss && sk_X509_num(ctx->chain) == 1)
+            return verify_cb_cert(ctx, NULL, num-1,
+                                  X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT);
+        if (ss)
+            return verify_cb_cert(ctx, NULL, num-1,
+                                  X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN);
+        if (ctx->num_untrusted < num)
+            return verify_cb_cert(ctx, NULL, num-1,
+                                  X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT);
+        return verify_cb_cert(ctx, NULL, num-1,
+                              X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY);
+    }
+}
+
+static const int minbits_table[] = { 80, 112, 128, 192, 256 };
+static const int NUM_AUTH_LEVELS = OSSL_NELEM(minbits_table);
+
+/*
+ * Check whether the public key of ``cert`` meets the security level of
+ * ``ctx``.
+ *
+ * Returns 1 on success, 0 otherwise.
+ */
+static int check_key_level(X509_STORE_CTX *ctx, X509 *cert)
+{
+    EVP_PKEY *pkey = X509_get0_pubkey(cert);
+    int level = ctx->param->auth_level;
+
+    /*
+     * At security level zero, return without checking for a supported public
+     * key type.  Some engines support key types not understood outside the
+     * engine, and we only need to understand the key when enforcing a security
+     * floor.
+     */
+    if (level <= 0)
+        return 1;
+
+    /* Unsupported or malformed keys are not secure */
+    if (pkey == NULL)
+        return 0;
+
+    if (level > NUM_AUTH_LEVELS)
+        level = NUM_AUTH_LEVELS;
+
+    return EVP_PKEY_security_bits(pkey) >= minbits_table[level - 1];
+}
+
+/*
+ * Check whether the signature digest algorithm of ``cert`` meets the security
+ * level of ``ctx``.  Should not be checked for trust anchors (whether
+ * self-signed or otherwise).
+ *
+ * Returns 1 on success, 0 otherwise.
+ */
+static int check_sig_level(X509_STORE_CTX *ctx, X509 *cert)
+{
+    int secbits = -1;
+    int level = ctx->param->auth_level;
+
+    if (level <= 0)
+        return 1;
+    if (level > NUM_AUTH_LEVELS)
+        level = NUM_AUTH_LEVELS;
+
+    if (!X509_get_signature_info(cert, NULL, NULL, &secbits, NULL))
+        return 0;
+
+    return secbits >= minbits_table[level - 1];
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_vpm.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_vpm.c
new file mode 100644
index 000000000..aea186295
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509_vpm.c
@@ -0,0 +1,602 @@
+/*
+ * Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+
+#include "internal/cryptlib.h"
+#include <openssl/crypto.h>
+#include <openssl/buffer.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include "internal/x509_int.h"
+
+#include "x509_lcl.h"
+
+/* X509_VERIFY_PARAM functions */
+
+#define SET_HOST 0
+#define ADD_HOST 1
+
+static char *str_copy(const char *s)
+{
+    return OPENSSL_strdup(s);
+}
+
+static void str_free(char *s)
+{
+    OPENSSL_free(s);
+}
+
+static int int_x509_param_set_hosts(X509_VERIFY_PARAM *vpm, int mode,
+                                    const char *name, size_t namelen)
+{
+    char *copy;
+
+    /*
+     * Refuse names with embedded NUL bytes, except perhaps as final byte.
+     * XXX: Do we need to push an error onto the error stack?
+     */
+    if (namelen == 0 || name == NULL)
+        namelen = name ? strlen(name) : 0;
+    else if (name && memchr(name, '\0', namelen > 1 ? namelen - 1 : namelen))
+        return 0;
+    if (namelen > 0 && name[namelen - 1] == '\0')
+        --namelen;
+
+    if (mode == SET_HOST) {
+        sk_OPENSSL_STRING_pop_free(vpm->hosts, str_free);
+        vpm->hosts = NULL;
+    }
+    if (name == NULL || namelen == 0)
+        return 1;
+
+    copy = OPENSSL_strndup(name, namelen);
+    if (copy == NULL)
+        return 0;
+
+    if (vpm->hosts == NULL &&
+        (vpm->hosts = sk_OPENSSL_STRING_new_null()) == NULL) {
+        OPENSSL_free(copy);
+        return 0;
+    }
+
+    if (!sk_OPENSSL_STRING_push(vpm->hosts, copy)) {
+        OPENSSL_free(copy);
+        if (sk_OPENSSL_STRING_num(vpm->hosts) == 0) {
+            sk_OPENSSL_STRING_free(vpm->hosts);
+            vpm->hosts = NULL;
+        }
+        return 0;
+    }
+
+    return 1;
+}
+
+
+X509_VERIFY_PARAM *X509_VERIFY_PARAM_new(void)
+{
+    X509_VERIFY_PARAM *param;
+
+    param = OPENSSL_zalloc(sizeof(*param));
+    if (param == NULL) {
+        X509err(X509_F_X509_VERIFY_PARAM_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    param->trust = X509_TRUST_DEFAULT;
+    /* param->inh_flags = X509_VP_FLAG_DEFAULT; */
+    param->depth = -1;
+    param->auth_level = -1; /* -1 means unset, 0 is explicit */
+    return param;
+}
+
+void X509_VERIFY_PARAM_free(X509_VERIFY_PARAM *param)
+{
+    if (param == NULL)
+        return;
+    sk_ASN1_OBJECT_pop_free(param->policies, ASN1_OBJECT_free);
+    sk_OPENSSL_STRING_pop_free(param->hosts, str_free);
+    OPENSSL_free(param->peername);
+    OPENSSL_free(param->email);
+    OPENSSL_free(param->ip);
+    OPENSSL_free(param);
+}
+
+/*-
+ * This function determines how parameters are "inherited" from one structure
+ * to another. There are several different ways this can happen.
+ *
+ * 1. If a child structure needs to have its values initialized from a parent
+ *    they are simply copied across. For example SSL_CTX copied to SSL.
+ * 2. If the structure should take on values only if they are currently unset.
+ *    For example the values in an SSL structure will take appropriate value
+ *    for SSL servers or clients but only if the application has not set new
+ *    ones.
+ *
+ * The "inh_flags" field determines how this function behaves.
+ *
+ * Normally any values which are set in the default are not copied from the
+ * destination and verify flags are ORed together.
+ *
+ * If X509_VP_FLAG_DEFAULT is set then anything set in the source is copied
+ * to the destination. Effectively the values in "to" become default values
+ * which will be used only if nothing new is set in "from".
+ *
+ * If X509_VP_FLAG_OVERWRITE is set then all value are copied across whether
+ * they are set or not. Flags is still Ored though.
+ *
+ * If X509_VP_FLAG_RESET_FLAGS is set then the flags value is copied instead
+ * of ORed.
+ *
+ * If X509_VP_FLAG_LOCKED is set then no values are copied.
+ *
+ * If X509_VP_FLAG_ONCE is set then the current inh_flags setting is zeroed
+ * after the next call.
+ */
+
+/* Macro to test if a field should be copied from src to dest */
+
+#define test_x509_verify_param_copy(field, def) \
+        (to_overwrite || \
+                ((src->field != def) && (to_default || (dest->field == def))))
+
+/* Macro to test and copy a field if necessary */
+
+#define x509_verify_param_copy(field, def) \
+        if (test_x509_verify_param_copy(field, def)) \
+                dest->field = src->field
+
+int X509_VERIFY_PARAM_inherit(X509_VERIFY_PARAM *dest,
+                              const X509_VERIFY_PARAM *src)
+{
+    unsigned long inh_flags;
+    int to_default, to_overwrite;
+    if (!src)
+        return 1;
+    inh_flags = dest->inh_flags | src->inh_flags;
+
+    if (inh_flags & X509_VP_FLAG_ONCE)
+        dest->inh_flags = 0;
+
+    if (inh_flags & X509_VP_FLAG_LOCKED)
+        return 1;
+
+    if (inh_flags & X509_VP_FLAG_DEFAULT)
+        to_default = 1;
+    else
+        to_default = 0;
+
+    if (inh_flags & X509_VP_FLAG_OVERWRITE)
+        to_overwrite = 1;
+    else
+        to_overwrite = 0;
+
+    x509_verify_param_copy(purpose, 0);
+    x509_verify_param_copy(trust, X509_TRUST_DEFAULT);
+    x509_verify_param_copy(depth, -1);
+    x509_verify_param_copy(auth_level, -1);
+
+    /* If overwrite or check time not set, copy across */
+
+    if (to_overwrite || !(dest->flags & X509_V_FLAG_USE_CHECK_TIME)) {
+        dest->check_time = src->check_time;
+        dest->flags &= ~X509_V_FLAG_USE_CHECK_TIME;
+        /* Don't need to copy flag: that is done below */
+    }
+
+    if (inh_flags & X509_VP_FLAG_RESET_FLAGS)
+        dest->flags = 0;
+
+    dest->flags |= src->flags;
+
+    if (test_x509_verify_param_copy(policies, NULL)) {
+        if (!X509_VERIFY_PARAM_set1_policies(dest, src->policies))
+            return 0;
+    }
+
+    /* Copy the host flags if and only if we're copying the host list */
+    if (test_x509_verify_param_copy(hosts, NULL)) {
+        sk_OPENSSL_STRING_pop_free(dest->hosts, str_free);
+        dest->hosts = NULL;
+        if (src->hosts) {
+            dest->hosts =
+                sk_OPENSSL_STRING_deep_copy(src->hosts, str_copy, str_free);
+            if (dest->hosts == NULL)
+                return 0;
+            dest->hostflags = src->hostflags;
+        }
+    }
+
+    if (test_x509_verify_param_copy(email, NULL)) {
+        if (!X509_VERIFY_PARAM_set1_email(dest, src->email, src->emaillen))
+            return 0;
+    }
+
+    if (test_x509_verify_param_copy(ip, NULL)) {
+        if (!X509_VERIFY_PARAM_set1_ip(dest, src->ip, src->iplen))
+            return 0;
+    }
+
+    return 1;
+}
+
+int X509_VERIFY_PARAM_set1(X509_VERIFY_PARAM *to,
+                           const X509_VERIFY_PARAM *from)
+{
+    unsigned long save_flags = to->inh_flags;
+    int ret;
+    to->inh_flags |= X509_VP_FLAG_DEFAULT;
+    ret = X509_VERIFY_PARAM_inherit(to, from);
+    to->inh_flags = save_flags;
+    return ret;
+}
+
+static int int_x509_param_set1(char **pdest, size_t *pdestlen,
+                               const char *src, size_t srclen)
+{
+    void *tmp;
+    if (src) {
+        if (srclen == 0)
+            srclen = strlen(src);
+
+        tmp = OPENSSL_memdup(src, srclen);
+        if (tmp == NULL)
+            return 0;
+    } else {
+        tmp = NULL;
+        srclen = 0;
+    }
+    OPENSSL_free(*pdest);
+    *pdest = tmp;
+    if (pdestlen != NULL)
+        *pdestlen = srclen;
+    return 1;
+}
+
+int X509_VERIFY_PARAM_set1_name(X509_VERIFY_PARAM *param, const char *name)
+{
+    OPENSSL_free(param->name);
+    param->name = OPENSSL_strdup(name);
+    if (param->name)
+        return 1;
+    return 0;
+}
+
+int X509_VERIFY_PARAM_set_flags(X509_VERIFY_PARAM *param, unsigned long flags)
+{
+    param->flags |= flags;
+    if (flags & X509_V_FLAG_POLICY_MASK)
+        param->flags |= X509_V_FLAG_POLICY_CHECK;
+    return 1;
+}
+
+int X509_VERIFY_PARAM_clear_flags(X509_VERIFY_PARAM *param,
+                                  unsigned long flags)
+{
+    param->flags &= ~flags;
+    return 1;
+}
+
+unsigned long X509_VERIFY_PARAM_get_flags(X509_VERIFY_PARAM *param)
+{
+    return param->flags;
+}
+
+uint32_t X509_VERIFY_PARAM_get_inh_flags(const X509_VERIFY_PARAM *param)
+{
+    return param->inh_flags;
+}
+
+int X509_VERIFY_PARAM_set_inh_flags(X509_VERIFY_PARAM *param, uint32_t flags)
+{
+    param->inh_flags = flags;
+    return 1;
+}
+
+int X509_VERIFY_PARAM_set_purpose(X509_VERIFY_PARAM *param, int purpose)
+{
+    return X509_PURPOSE_set(&param->purpose, purpose);
+}
+
+int X509_VERIFY_PARAM_set_trust(X509_VERIFY_PARAM *param, int trust)
+{
+    return X509_TRUST_set(&param->trust, trust);
+}
+
+void X509_VERIFY_PARAM_set_depth(X509_VERIFY_PARAM *param, int depth)
+{
+    param->depth = depth;
+}
+
+void X509_VERIFY_PARAM_set_auth_level(X509_VERIFY_PARAM *param, int auth_level)
+{
+    param->auth_level = auth_level;
+}
+
+time_t X509_VERIFY_PARAM_get_time(const X509_VERIFY_PARAM *param)
+{
+    return param->check_time;
+}
+
+void X509_VERIFY_PARAM_set_time(X509_VERIFY_PARAM *param, time_t t)
+{
+    param->check_time = t;
+    param->flags |= X509_V_FLAG_USE_CHECK_TIME;
+}
+
+int X509_VERIFY_PARAM_add0_policy(X509_VERIFY_PARAM *param,
+                                  ASN1_OBJECT *policy)
+{
+    if (!param->policies) {
+        param->policies = sk_ASN1_OBJECT_new_null();
+        if (!param->policies)
+            return 0;
+    }
+    if (!sk_ASN1_OBJECT_push(param->policies, policy))
+        return 0;
+    return 1;
+}
+
+int X509_VERIFY_PARAM_set1_policies(X509_VERIFY_PARAM *param,
+                                    STACK_OF(ASN1_OBJECT) *policies)
+{
+    int i;
+    ASN1_OBJECT *oid, *doid;
+
+    if (!param)
+        return 0;
+    sk_ASN1_OBJECT_pop_free(param->policies, ASN1_OBJECT_free);
+
+    if (!policies) {
+        param->policies = NULL;
+        return 1;
+    }
+
+    param->policies = sk_ASN1_OBJECT_new_null();
+    if (!param->policies)
+        return 0;
+
+    for (i = 0; i < sk_ASN1_OBJECT_num(policies); i++) {
+        oid = sk_ASN1_OBJECT_value(policies, i);
+        doid = OBJ_dup(oid);
+        if (!doid)
+            return 0;
+        if (!sk_ASN1_OBJECT_push(param->policies, doid)) {
+            ASN1_OBJECT_free(doid);
+            return 0;
+        }
+    }
+    param->flags |= X509_V_FLAG_POLICY_CHECK;
+    return 1;
+}
+
+int X509_VERIFY_PARAM_set1_host(X509_VERIFY_PARAM *param,
+                                const char *name, size_t namelen)
+{
+    return int_x509_param_set_hosts(param, SET_HOST, name, namelen);
+}
+
+int X509_VERIFY_PARAM_add1_host(X509_VERIFY_PARAM *param,
+                                const char *name, size_t namelen)
+{
+    return int_x509_param_set_hosts(param, ADD_HOST, name, namelen);
+}
+
+void X509_VERIFY_PARAM_set_hostflags(X509_VERIFY_PARAM *param,
+                                     unsigned int flags)
+{
+    param->hostflags = flags;
+}
+
+unsigned int X509_VERIFY_PARAM_get_hostflags(const X509_VERIFY_PARAM *param)
+{
+    return param->hostflags;
+}
+
+char *X509_VERIFY_PARAM_get0_peername(X509_VERIFY_PARAM *param)
+{
+    return param->peername;
+}
+
+/*
+ * Move peername from one param structure to another, freeing any name present
+ * at the target.  If the source is a NULL parameter structure, free and zero
+ * the target peername.
+ */
+void X509_VERIFY_PARAM_move_peername(X509_VERIFY_PARAM *to,
+                                     X509_VERIFY_PARAM *from)
+{
+    char *peername = (from != NULL) ? from->peername : NULL;
+
+    if (to->peername != peername) {
+        OPENSSL_free(to->peername);
+        to->peername = peername;
+    }
+    if (from)
+        from->peername = NULL;
+}
+
+int X509_VERIFY_PARAM_set1_email(X509_VERIFY_PARAM *param,
+                                 const char *email, size_t emaillen)
+{
+    return int_x509_param_set1(&param->email, &param->emaillen,
+                               email, emaillen);
+}
+
+int X509_VERIFY_PARAM_set1_ip(X509_VERIFY_PARAM *param,
+                              const unsigned char *ip, size_t iplen)
+{
+    if (iplen != 0 && iplen != 4 && iplen != 16)
+        return 0;
+    return int_x509_param_set1((char **)&param->ip, &param->iplen,
+                               (char *)ip, iplen);
+}
+
+int X509_VERIFY_PARAM_set1_ip_asc(X509_VERIFY_PARAM *param, const char *ipasc)
+{
+    unsigned char ipout[16];
+    size_t iplen;
+
+    iplen = (size_t)a2i_ipadd(ipout, ipasc);
+    if (iplen == 0)
+        return 0;
+    return X509_VERIFY_PARAM_set1_ip(param, ipout, iplen);
+}
+
+int X509_VERIFY_PARAM_get_depth(const X509_VERIFY_PARAM *param)
+{
+    return param->depth;
+}
+
+int X509_VERIFY_PARAM_get_auth_level(const X509_VERIFY_PARAM *param)
+{
+    return param->auth_level;
+}
+
+const char *X509_VERIFY_PARAM_get0_name(const X509_VERIFY_PARAM *param)
+{
+    return param->name;
+}
+
+#define vpm_empty_id NULL, 0U, NULL, NULL, 0, NULL, 0
+
+/*
+ * Default verify parameters: these are used for various applications and can
+ * be overridden by the user specified table. NB: the 'name' field *must* be
+ * in alphabetical order because it will be searched using OBJ_search.
+ */
+
+static const X509_VERIFY_PARAM default_table[] = {
+    {
+     "default",                 /* X509 default parameters */
+     0,                         /* Check time */
+     0,                         /* internal flags */
+     X509_V_FLAG_TRUSTED_FIRST, /* flags */
+     0,                         /* purpose */
+     0,                         /* trust */
+     100,                       /* depth */
+     -1,                        /* auth_level */
+     NULL,                      /* policies */
+     vpm_empty_id},
+    {
+     "pkcs7",                   /* S/MIME sign parameters */
+     0,                         /* Check time */
+     0,                         /* internal flags */
+     0,                         /* flags */
+     X509_PURPOSE_SMIME_SIGN,   /* purpose */
+     X509_TRUST_EMAIL,          /* trust */
+     -1,                        /* depth */
+     -1,                        /* auth_level */
+     NULL,                      /* policies */
+     vpm_empty_id},
+    {
+     "smime_sign",              /* S/MIME sign parameters */
+     0,                         /* Check time */
+     0,                         /* internal flags */
+     0,                         /* flags */
+     X509_PURPOSE_SMIME_SIGN,   /* purpose */
+     X509_TRUST_EMAIL,          /* trust */
+     -1,                        /* depth */
+     -1,                        /* auth_level */
+     NULL,                      /* policies */
+     vpm_empty_id},
+    {
+     "ssl_client",              /* SSL/TLS client parameters */
+     0,                         /* Check time */
+     0,                         /* internal flags */
+     0,                         /* flags */
+     X509_PURPOSE_SSL_CLIENT,   /* purpose */
+     X509_TRUST_SSL_CLIENT,     /* trust */
+     -1,                        /* depth */
+     -1,                        /* auth_level */
+     NULL,                      /* policies */
+     vpm_empty_id},
+    {
+     "ssl_server",              /* SSL/TLS server parameters */
+     0,                         /* Check time */
+     0,                         /* internal flags */
+     0,                         /* flags */
+     X509_PURPOSE_SSL_SERVER,   /* purpose */
+     X509_TRUST_SSL_SERVER,     /* trust */
+     -1,                        /* depth */
+     -1,                        /* auth_level */
+     NULL,                      /* policies */
+     vpm_empty_id}
+};
+
+static STACK_OF(X509_VERIFY_PARAM) *param_table = NULL;
+
+static int table_cmp(const X509_VERIFY_PARAM *a, const X509_VERIFY_PARAM *b)
+{
+    return strcmp(a->name, b->name);
+}
+
+DECLARE_OBJ_BSEARCH_CMP_FN(X509_VERIFY_PARAM, X509_VERIFY_PARAM, table);
+IMPLEMENT_OBJ_BSEARCH_CMP_FN(X509_VERIFY_PARAM, X509_VERIFY_PARAM, table);
+
+static int param_cmp(const X509_VERIFY_PARAM *const *a,
+                     const X509_VERIFY_PARAM *const *b)
+{
+    return strcmp((*a)->name, (*b)->name);
+}
+
+int X509_VERIFY_PARAM_add0_table(X509_VERIFY_PARAM *param)
+{
+    int idx;
+    X509_VERIFY_PARAM *ptmp;
+    if (param_table == NULL) {
+        param_table = sk_X509_VERIFY_PARAM_new(param_cmp);
+        if (param_table == NULL)
+            return 0;
+    } else {
+        idx = sk_X509_VERIFY_PARAM_find(param_table, param);
+        if (idx >= 0) {
+            ptmp = sk_X509_VERIFY_PARAM_delete(param_table, idx);
+            X509_VERIFY_PARAM_free(ptmp);
+        }
+    }
+    if (!sk_X509_VERIFY_PARAM_push(param_table, param))
+        return 0;
+    return 1;
+}
+
+int X509_VERIFY_PARAM_get_count(void)
+{
+    int num = OSSL_NELEM(default_table);
+    if (param_table)
+        num += sk_X509_VERIFY_PARAM_num(param_table);
+    return num;
+}
+
+const X509_VERIFY_PARAM *X509_VERIFY_PARAM_get0(int id)
+{
+    int num = OSSL_NELEM(default_table);
+    if (id < num)
+        return default_table + id;
+    return sk_X509_VERIFY_PARAM_value(param_table, id - num);
+}
+
+const X509_VERIFY_PARAM *X509_VERIFY_PARAM_lookup(const char *name)
+{
+    int idx;
+    X509_VERIFY_PARAM pm;
+
+    pm.name = (char *)name;
+    if (param_table != NULL) {
+        idx = sk_X509_VERIFY_PARAM_find(param_table, &pm);
+        if (idx >= 0)
+            return sk_X509_VERIFY_PARAM_value(param_table, idx);
+    }
+    return OBJ_bsearch_table(&pm, default_table, OSSL_NELEM(default_table));
+}
+
+void X509_VERIFY_PARAM_table_cleanup(void)
+{
+    sk_X509_VERIFY_PARAM_pop_free(param_table, X509_VERIFY_PARAM_free);
+    param_table = NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509cset.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509cset.c
new file mode 100644
index 000000000..7645ce375
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509cset.c
@@ -0,0 +1,183 @@
+/*
+ * Copyright 2001-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "internal/refcount.h"
+#include <openssl/asn1.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+
+int X509_CRL_set_version(X509_CRL *x, long version)
+{
+    if (x == NULL)
+        return 0;
+    if (x->crl.version == NULL) {
+        if ((x->crl.version = ASN1_INTEGER_new()) == NULL)
+            return 0;
+    }
+    return ASN1_INTEGER_set(x->crl.version, version);
+}
+
+int X509_CRL_set_issuer_name(X509_CRL *x, X509_NAME *name)
+{
+    if (x == NULL)
+        return 0;
+    return X509_NAME_set(&x->crl.issuer, name);
+}
+
+int X509_CRL_set1_lastUpdate(X509_CRL *x, const ASN1_TIME *tm)
+{
+    if (x == NULL)
+        return 0;
+    return x509_set1_time(&x->crl.lastUpdate, tm);
+}
+
+int X509_CRL_set1_nextUpdate(X509_CRL *x, const ASN1_TIME *tm)
+{
+    if (x == NULL)
+        return 0;
+    return x509_set1_time(&x->crl.nextUpdate, tm);
+}
+
+int X509_CRL_sort(X509_CRL *c)
+{
+    int i;
+    X509_REVOKED *r;
+    /*
+     * sort the data so it will be written in serial number order
+     */
+    sk_X509_REVOKED_sort(c->crl.revoked);
+    for (i = 0; i < sk_X509_REVOKED_num(c->crl.revoked); i++) {
+        r = sk_X509_REVOKED_value(c->crl.revoked, i);
+        r->sequence = i;
+    }
+    c->crl.enc.modified = 1;
+    return 1;
+}
+
+int X509_CRL_up_ref(X509_CRL *crl)
+{
+    int i;
+
+    if (CRYPTO_UP_REF(&crl->references, &i, crl->lock) <= 0)
+        return 0;
+
+    REF_PRINT_COUNT("X509_CRL", crl);
+    REF_ASSERT_ISNT(i < 2);
+    return ((i > 1) ? 1 : 0);
+}
+
+long X509_CRL_get_version(const X509_CRL *crl)
+{
+    return ASN1_INTEGER_get(crl->crl.version);
+}
+
+const ASN1_TIME *X509_CRL_get0_lastUpdate(const X509_CRL *crl)
+{
+    return crl->crl.lastUpdate;
+}
+
+const ASN1_TIME *X509_CRL_get0_nextUpdate(const X509_CRL *crl)
+{
+    return crl->crl.nextUpdate;
+}
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+ASN1_TIME *X509_CRL_get_lastUpdate(X509_CRL *crl)
+{
+    return crl->crl.lastUpdate;
+}
+
+ASN1_TIME *X509_CRL_get_nextUpdate(X509_CRL *crl)
+{
+    return crl->crl.nextUpdate;
+}
+#endif
+
+X509_NAME *X509_CRL_get_issuer(const X509_CRL *crl)
+{
+    return crl->crl.issuer;
+}
+
+const STACK_OF(X509_EXTENSION) *X509_CRL_get0_extensions(const X509_CRL *crl)
+{
+    return crl->crl.extensions;
+}
+
+STACK_OF(X509_REVOKED) *X509_CRL_get_REVOKED(X509_CRL *crl)
+{
+    return crl->crl.revoked;
+}
+
+void X509_CRL_get0_signature(const X509_CRL *crl, const ASN1_BIT_STRING **psig,
+                             const X509_ALGOR **palg)
+{
+    if (psig != NULL)
+        *psig = &crl->signature;
+    if (palg != NULL)
+        *palg = &crl->sig_alg;
+}
+
+int X509_CRL_get_signature_nid(const X509_CRL *crl)
+{
+    return OBJ_obj2nid(crl->sig_alg.algorithm);
+}
+
+const ASN1_TIME *X509_REVOKED_get0_revocationDate(const X509_REVOKED *x)
+{
+    return x->revocationDate;
+}
+
+int X509_REVOKED_set_revocationDate(X509_REVOKED *x, ASN1_TIME *tm)
+{
+    ASN1_TIME *in;
+
+    if (x == NULL)
+        return 0;
+    in = x->revocationDate;
+    if (in != tm) {
+        in = ASN1_STRING_dup(tm);
+        if (in != NULL) {
+            ASN1_TIME_free(x->revocationDate);
+            x->revocationDate = in;
+        }
+    }
+    return (in != NULL);
+}
+
+const ASN1_INTEGER *X509_REVOKED_get0_serialNumber(const X509_REVOKED *x)
+{
+    return &x->serialNumber;
+}
+
+int X509_REVOKED_set_serialNumber(X509_REVOKED *x, ASN1_INTEGER *serial)
+{
+    ASN1_INTEGER *in;
+
+    if (x == NULL)
+        return 0;
+    in = &x->serialNumber;
+    if (in != serial)
+        return ASN1_STRING_copy(in, serial);
+    return 1;
+}
+
+const STACK_OF(X509_EXTENSION) *X509_REVOKED_get0_extensions(const X509_REVOKED *r)
+{
+    return r->extensions;
+}
+
+int i2d_re_X509_CRL_tbs(X509_CRL *crl, unsigned char **pp)
+{
+    crl->crl.enc.modified = 1;
+    return i2d_X509_CRL_INFO(&crl->crl, pp);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509name.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509name.c
new file mode 100644
index 000000000..64a73e793
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509name.c
@@ -0,0 +1,360 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/safestack.h>
+#include <openssl/asn1.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+
+int X509_NAME_get_text_by_NID(X509_NAME *name, int nid, char *buf, int len)
+{
+    ASN1_OBJECT *obj;
+
+    obj = OBJ_nid2obj(nid);
+    if (obj == NULL)
+        return -1;
+    return X509_NAME_get_text_by_OBJ(name, obj, buf, len);
+}
+
+int X509_NAME_get_text_by_OBJ(X509_NAME *name, const ASN1_OBJECT *obj,
+                              char *buf, int len)
+{
+    int i;
+    const ASN1_STRING *data;
+
+    i = X509_NAME_get_index_by_OBJ(name, obj, -1);
+    if (i < 0)
+        return -1;
+    data = X509_NAME_ENTRY_get_data(X509_NAME_get_entry(name, i));
+    if (buf == NULL)
+        return data->length;
+    if (len <= 0)
+        return 0;
+    i = (data->length > (len - 1)) ? (len - 1) : data->length;
+    memcpy(buf, data->data, i);
+    buf[i] = '\0';
+    return i;
+}
+
+int X509_NAME_entry_count(const X509_NAME *name)
+{
+    if (name == NULL)
+        return 0;
+    return sk_X509_NAME_ENTRY_num(name->entries);
+}
+
+int X509_NAME_get_index_by_NID(X509_NAME *name, int nid, int lastpos)
+{
+    ASN1_OBJECT *obj;
+
+    obj = OBJ_nid2obj(nid);
+    if (obj == NULL)
+        return -2;
+    return X509_NAME_get_index_by_OBJ(name, obj, lastpos);
+}
+
+/* NOTE: you should be passing -1, not 0 as lastpos */
+int X509_NAME_get_index_by_OBJ(X509_NAME *name, const ASN1_OBJECT *obj, int lastpos)
+{
+    int n;
+    X509_NAME_ENTRY *ne;
+    STACK_OF(X509_NAME_ENTRY) *sk;
+
+    if (name == NULL)
+        return -1;
+    if (lastpos < 0)
+        lastpos = -1;
+    sk = name->entries;
+    n = sk_X509_NAME_ENTRY_num(sk);
+    for (lastpos++; lastpos < n; lastpos++) {
+        ne = sk_X509_NAME_ENTRY_value(sk, lastpos);
+        if (OBJ_cmp(ne->object, obj) == 0)
+            return lastpos;
+    }
+    return -1;
+}
+
+X509_NAME_ENTRY *X509_NAME_get_entry(const X509_NAME *name, int loc)
+{
+    if (name == NULL || sk_X509_NAME_ENTRY_num(name->entries) <= loc
+        || loc < 0)
+        return NULL;
+
+    return sk_X509_NAME_ENTRY_value(name->entries, loc);
+}
+
+X509_NAME_ENTRY *X509_NAME_delete_entry(X509_NAME *name, int loc)
+{
+    X509_NAME_ENTRY *ret;
+    int i, n, set_prev, set_next;
+    STACK_OF(X509_NAME_ENTRY) *sk;
+
+    if (name == NULL || sk_X509_NAME_ENTRY_num(name->entries) <= loc
+        || loc < 0)
+        return NULL;
+
+    sk = name->entries;
+    ret = sk_X509_NAME_ENTRY_delete(sk, loc);
+    n = sk_X509_NAME_ENTRY_num(sk);
+    name->modified = 1;
+    if (loc == n)
+        return ret;
+
+    /* else we need to fixup the set field */
+    if (loc != 0)
+        set_prev = (sk_X509_NAME_ENTRY_value(sk, loc - 1))->set;
+    else
+        set_prev = ret->set - 1;
+    set_next = sk_X509_NAME_ENTRY_value(sk, loc)->set;
+
+    /*-
+     * set_prev is the previous set
+     * set is the current set
+     * set_next is the following
+     * prev  1 1    1 1     1 1     1 1
+     * set   1      1       2       2
+     * next  1 1    2 2     2 2     3 2
+     * so basically only if prev and next differ by 2, then
+     * re-number down by 1
+     */
+    if (set_prev + 1 < set_next)
+        for (i = loc; i < n; i++)
+            sk_X509_NAME_ENTRY_value(sk, i)->set--;
+    return ret;
+}
+
+int X509_NAME_add_entry_by_OBJ(X509_NAME *name, const ASN1_OBJECT *obj, int type,
+                               const unsigned char *bytes, int len, int loc,
+                               int set)
+{
+    X509_NAME_ENTRY *ne;
+    int ret;
+
+    ne = X509_NAME_ENTRY_create_by_OBJ(NULL, obj, type, bytes, len);
+    if (!ne)
+        return 0;
+    ret = X509_NAME_add_entry(name, ne, loc, set);
+    X509_NAME_ENTRY_free(ne);
+    return ret;
+}
+
+int X509_NAME_add_entry_by_NID(X509_NAME *name, int nid, int type,
+                               const unsigned char *bytes, int len, int loc,
+                               int set)
+{
+    X509_NAME_ENTRY *ne;
+    int ret;
+    ne = X509_NAME_ENTRY_create_by_NID(NULL, nid, type, bytes, len);
+    if (!ne)
+        return 0;
+    ret = X509_NAME_add_entry(name, ne, loc, set);
+    X509_NAME_ENTRY_free(ne);
+    return ret;
+}
+
+int X509_NAME_add_entry_by_txt(X509_NAME *name, const char *field, int type,
+                               const unsigned char *bytes, int len, int loc,
+                               int set)
+{
+    X509_NAME_ENTRY *ne;
+    int ret;
+    ne = X509_NAME_ENTRY_create_by_txt(NULL, field, type, bytes, len);
+    if (!ne)
+        return 0;
+    ret = X509_NAME_add_entry(name, ne, loc, set);
+    X509_NAME_ENTRY_free(ne);
+    return ret;
+}
+
+/*
+ * if set is -1, append to previous set, 0 'a new one', and 1, prepend to the
+ * guy we are about to stomp on.
+ */
+int X509_NAME_add_entry(X509_NAME *name, const X509_NAME_ENTRY *ne, int loc,
+                        int set)
+{
+    X509_NAME_ENTRY *new_name = NULL;
+    int n, i, inc;
+    STACK_OF(X509_NAME_ENTRY) *sk;
+
+    if (name == NULL)
+        return 0;
+    sk = name->entries;
+    n = sk_X509_NAME_ENTRY_num(sk);
+    if (loc > n)
+        loc = n;
+    else if (loc < 0)
+        loc = n;
+    inc = (set == 0);
+    name->modified = 1;
+
+    if (set == -1) {
+        if (loc == 0) {
+            set = 0;
+            inc = 1;
+        } else {
+            set = sk_X509_NAME_ENTRY_value(sk, loc - 1)->set;
+        }
+    } else {                    /* if (set >= 0) */
+
+        if (loc >= n) {
+            if (loc != 0)
+                set = sk_X509_NAME_ENTRY_value(sk, loc - 1)->set + 1;
+            else
+                set = 0;
+        } else
+            set = sk_X509_NAME_ENTRY_value(sk, loc)->set;
+    }
+
+    /*
+     * X509_NAME_ENTRY_dup is ASN1 generated code, that can't be easily
+     * const'ified; harmless cast since dup() don't modify its input.
+     */
+    if ((new_name = X509_NAME_ENTRY_dup((X509_NAME_ENTRY *)ne)) == NULL)
+        goto err;
+    new_name->set = set;
+    if (!sk_X509_NAME_ENTRY_insert(sk, new_name, loc)) {
+        X509err(X509_F_X509_NAME_ADD_ENTRY, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if (inc) {
+        n = sk_X509_NAME_ENTRY_num(sk);
+        for (i = loc + 1; i < n; i++)
+            sk_X509_NAME_ENTRY_value(sk, i)->set += 1;
+    }
+    return 1;
+ err:
+    X509_NAME_ENTRY_free(new_name);
+    return 0;
+}
+
+X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_txt(X509_NAME_ENTRY **ne,
+                                               const char *field, int type,
+                                               const unsigned char *bytes,
+                                               int len)
+{
+    ASN1_OBJECT *obj;
+    X509_NAME_ENTRY *nentry;
+
+    obj = OBJ_txt2obj(field, 0);
+    if (obj == NULL) {
+        X509err(X509_F_X509_NAME_ENTRY_CREATE_BY_TXT,
+                X509_R_INVALID_FIELD_NAME);
+        ERR_add_error_data(2, "name=", field);
+        return NULL;
+    }
+    nentry = X509_NAME_ENTRY_create_by_OBJ(ne, obj, type, bytes, len);
+    ASN1_OBJECT_free(obj);
+    return nentry;
+}
+
+X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_NID(X509_NAME_ENTRY **ne, int nid,
+                                               int type,
+                                               const unsigned char *bytes,
+                                               int len)
+{
+    ASN1_OBJECT *obj;
+    X509_NAME_ENTRY *nentry;
+
+    obj = OBJ_nid2obj(nid);
+    if (obj == NULL) {
+        X509err(X509_F_X509_NAME_ENTRY_CREATE_BY_NID, X509_R_UNKNOWN_NID);
+        return NULL;
+    }
+    nentry = X509_NAME_ENTRY_create_by_OBJ(ne, obj, type, bytes, len);
+    ASN1_OBJECT_free(obj);
+    return nentry;
+}
+
+X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_OBJ(X509_NAME_ENTRY **ne,
+                                               const ASN1_OBJECT *obj, int type,
+                                               const unsigned char *bytes,
+                                               int len)
+{
+    X509_NAME_ENTRY *ret;
+
+    if ((ne == NULL) || (*ne == NULL)) {
+        if ((ret = X509_NAME_ENTRY_new()) == NULL)
+            return NULL;
+    } else
+        ret = *ne;
+
+    if (!X509_NAME_ENTRY_set_object(ret, obj))
+        goto err;
+    if (!X509_NAME_ENTRY_set_data(ret, type, bytes, len))
+        goto err;
+
+    if ((ne != NULL) && (*ne == NULL))
+        *ne = ret;
+    return ret;
+ err:
+    if ((ne == NULL) || (ret != *ne))
+        X509_NAME_ENTRY_free(ret);
+    return NULL;
+}
+
+int X509_NAME_ENTRY_set_object(X509_NAME_ENTRY *ne, const ASN1_OBJECT *obj)
+{
+    if ((ne == NULL) || (obj == NULL)) {
+        X509err(X509_F_X509_NAME_ENTRY_SET_OBJECT,
+                ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    ASN1_OBJECT_free(ne->object);
+    ne->object = OBJ_dup(obj);
+    return ((ne->object == NULL) ? 0 : 1);
+}
+
+int X509_NAME_ENTRY_set_data(X509_NAME_ENTRY *ne, int type,
+                             const unsigned char *bytes, int len)
+{
+    int i;
+
+    if ((ne == NULL) || ((bytes == NULL) && (len != 0)))
+        return 0;
+    if ((type > 0) && (type & MBSTRING_FLAG))
+        return ASN1_STRING_set_by_NID(&ne->value, bytes,
+                                      len, type,
+                                      OBJ_obj2nid(ne->object)) ? 1 : 0;
+    if (len < 0)
+        len = strlen((const char *)bytes);
+    i = ASN1_STRING_set(ne->value, bytes, len);
+    if (!i)
+        return 0;
+    if (type != V_ASN1_UNDEF) {
+        if (type == V_ASN1_APP_CHOOSE)
+            ne->value->type = ASN1_PRINTABLE_type(bytes, len);
+        else
+            ne->value->type = type;
+    }
+    return 1;
+}
+
+ASN1_OBJECT *X509_NAME_ENTRY_get_object(const X509_NAME_ENTRY *ne)
+{
+    if (ne == NULL)
+        return NULL;
+    return ne->object;
+}
+
+ASN1_STRING *X509_NAME_ENTRY_get_data(const X509_NAME_ENTRY *ne)
+{
+    if (ne == NULL)
+        return NULL;
+    return ne->value;
+}
+
+int X509_NAME_ENTRY_set(const X509_NAME_ENTRY *ne)
+{
+    return ne->set;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509rset.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509rset.c
new file mode 100644
index 000000000..e8921b82a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509rset.c
@@ -0,0 +1,40 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+
+int X509_REQ_set_version(X509_REQ *x, long version)
+{
+    if (x == NULL)
+        return 0;
+    x->req_info.enc.modified = 1;
+    return ASN1_INTEGER_set(x->req_info.version, version);
+}
+
+int X509_REQ_set_subject_name(X509_REQ *x, X509_NAME *name)
+{
+    if (x == NULL)
+        return 0;
+    x->req_info.enc.modified = 1;
+    return X509_NAME_set(&x->req_info.subject, name);
+}
+
+int X509_REQ_set_pubkey(X509_REQ *x, EVP_PKEY *pkey)
+{
+    if (x == NULL)
+        return 0;
+    x->req_info.enc.modified = 1;
+    return X509_PUBKEY_set(&x->req_info.pubkey, pkey);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509spki.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509spki.c
new file mode 100644
index 000000000..fd8162af6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509spki.c
@@ -0,0 +1,75 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+
+int NETSCAPE_SPKI_set_pubkey(NETSCAPE_SPKI *x, EVP_PKEY *pkey)
+{
+    if ((x == NULL) || (x->spkac == NULL))
+        return 0;
+    return X509_PUBKEY_set(&(x->spkac->pubkey), pkey);
+}
+
+EVP_PKEY *NETSCAPE_SPKI_get_pubkey(NETSCAPE_SPKI *x)
+{
+    if ((x == NULL) || (x->spkac == NULL))
+        return NULL;
+    return X509_PUBKEY_get(x->spkac->pubkey);
+}
+
+/* Load a Netscape SPKI from a base64 encoded string */
+
+NETSCAPE_SPKI *NETSCAPE_SPKI_b64_decode(const char *str, int len)
+{
+    unsigned char *spki_der;
+    const unsigned char *p;
+    int spki_len;
+    NETSCAPE_SPKI *spki;
+    if (len <= 0)
+        len = strlen(str);
+    if ((spki_der = OPENSSL_malloc(len + 1)) == NULL) {
+        X509err(X509_F_NETSCAPE_SPKI_B64_DECODE, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    spki_len = EVP_DecodeBlock(spki_der, (const unsigned char *)str, len);
+    if (spki_len < 0) {
+        X509err(X509_F_NETSCAPE_SPKI_B64_DECODE, X509_R_BASE64_DECODE_ERROR);
+        OPENSSL_free(spki_der);
+        return NULL;
+    }
+    p = spki_der;
+    spki = d2i_NETSCAPE_SPKI(NULL, &p, spki_len);
+    OPENSSL_free(spki_der);
+    return spki;
+}
+
+/* Generate a base64 encoded string from an SPKI */
+
+char *NETSCAPE_SPKI_b64_encode(NETSCAPE_SPKI *spki)
+{
+    unsigned char *der_spki, *p;
+    char *b64_str;
+    int der_len;
+    der_len = i2d_NETSCAPE_SPKI(spki, NULL);
+    der_spki = OPENSSL_malloc(der_len);
+    b64_str = OPENSSL_malloc(der_len * 2);
+    if (der_spki == NULL || b64_str == NULL) {
+        X509err(X509_F_NETSCAPE_SPKI_B64_ENCODE, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(der_spki);
+        OPENSSL_free(b64_str);
+        return NULL;
+    }
+    p = der_spki;
+    i2d_NETSCAPE_SPKI(spki, &p);
+    EVP_EncodeBlock((unsigned char *)b64_str, der_spki, der_len);
+    OPENSSL_free(der_spki);
+    return b64_str;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509type.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509type.c
new file mode 100644
index 000000000..0e33b424b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x509type.c
@@ -0,0 +1,84 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+#include <openssl/x509.h>
+
+int X509_certificate_type(const X509 *x, const EVP_PKEY *pkey)
+{
+    const EVP_PKEY *pk;
+    int ret = 0, i;
+
+    if (x == NULL)
+        return 0;
+
+    if (pkey == NULL)
+        pk = X509_get0_pubkey(x);
+    else
+        pk = pkey;
+
+    if (pk == NULL)
+        return 0;
+
+    switch (EVP_PKEY_id(pk)) {
+    case EVP_PKEY_RSA:
+        ret = EVP_PK_RSA | EVP_PKT_SIGN;
+/*              if (!sign only extension) */
+        ret |= EVP_PKT_ENC;
+        break;
+    case EVP_PKEY_RSA_PSS:
+        ret = EVP_PK_RSA | EVP_PKT_SIGN;
+        break;
+    case EVP_PKEY_DSA:
+        ret = EVP_PK_DSA | EVP_PKT_SIGN;
+        break;
+    case EVP_PKEY_EC:
+        ret = EVP_PK_EC | EVP_PKT_SIGN | EVP_PKT_EXCH;
+        break;
+    case EVP_PKEY_ED448:
+    case EVP_PKEY_ED25519:
+        ret = EVP_PKT_SIGN;
+        break;
+    case EVP_PKEY_DH:
+        ret = EVP_PK_DH | EVP_PKT_EXCH;
+        break;
+    case NID_id_GostR3410_2001:
+    case NID_id_GostR3410_2012_256:
+    case NID_id_GostR3410_2012_512:
+        ret = EVP_PKT_EXCH | EVP_PKT_SIGN;
+        break;
+    default:
+        break;
+    }
+
+    i = X509_get_signature_nid(x);
+    if (i && OBJ_find_sigid_algs(i, NULL, &i)) {
+
+        switch (i) {
+        case NID_rsaEncryption:
+        case NID_rsa:
+            ret |= EVP_PKS_RSA;
+            break;
+        case NID_dsa:
+        case NID_dsa_2:
+            ret |= EVP_PKS_DSA;
+            break;
+        case NID_X9_62_id_ecPublicKey:
+            ret |= EVP_PKS_EC;
+            break;
+        default:
+            break;
+        }
+    }
+
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_all.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_all.c
new file mode 100644
index 000000000..24e411460
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_all.c
@@ -0,0 +1,525 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/asn1.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+#include <openssl/ocsp.h>
+#include <openssl/rsa.h>
+#include <openssl/dsa.h>
+#include <openssl/x509v3.h>
+
+int X509_verify(X509 *a, EVP_PKEY *r)
+{
+    if (X509_ALGOR_cmp(&a->sig_alg, &a->cert_info.signature))
+        return 0;
+    return (ASN1_item_verify(ASN1_ITEM_rptr(X509_CINF), &a->sig_alg,
+                             &a->signature, &a->cert_info, r));
+}
+
+int X509_REQ_verify(X509_REQ *a, EVP_PKEY *r)
+{
+    return (ASN1_item_verify(ASN1_ITEM_rptr(X509_REQ_INFO),
+                             &a->sig_alg, a->signature, &a->req_info, r));
+}
+
+int NETSCAPE_SPKI_verify(NETSCAPE_SPKI *a, EVP_PKEY *r)
+{
+    return (ASN1_item_verify(ASN1_ITEM_rptr(NETSCAPE_SPKAC),
+                             &a->sig_algor, a->signature, a->spkac, r));
+}
+
+int X509_sign(X509 *x, EVP_PKEY *pkey, const EVP_MD *md)
+{
+    x->cert_info.enc.modified = 1;
+    return (ASN1_item_sign(ASN1_ITEM_rptr(X509_CINF), &x->cert_info.signature,
+                           &x->sig_alg, &x->signature, &x->cert_info, pkey,
+                           md));
+}
+
+int X509_sign_ctx(X509 *x, EVP_MD_CTX *ctx)
+{
+    x->cert_info.enc.modified = 1;
+    return ASN1_item_sign_ctx(ASN1_ITEM_rptr(X509_CINF),
+                              &x->cert_info.signature,
+                              &x->sig_alg, &x->signature, &x->cert_info, ctx);
+}
+
+#ifndef OPENSSL_NO_OCSP
+int X509_http_nbio(OCSP_REQ_CTX *rctx, X509 **pcert)
+{
+    return OCSP_REQ_CTX_nbio_d2i(rctx,
+                                 (ASN1_VALUE **)pcert, ASN1_ITEM_rptr(X509));
+}
+#endif
+
+int X509_REQ_sign(X509_REQ *x, EVP_PKEY *pkey, const EVP_MD *md)
+{
+    return (ASN1_item_sign(ASN1_ITEM_rptr(X509_REQ_INFO), &x->sig_alg, NULL,
+                           x->signature, &x->req_info, pkey, md));
+}
+
+int X509_REQ_sign_ctx(X509_REQ *x, EVP_MD_CTX *ctx)
+{
+    return ASN1_item_sign_ctx(ASN1_ITEM_rptr(X509_REQ_INFO),
+                              &x->sig_alg, NULL, x->signature, &x->req_info,
+                              ctx);
+}
+
+int X509_CRL_sign(X509_CRL *x, EVP_PKEY *pkey, const EVP_MD *md)
+{
+    x->crl.enc.modified = 1;
+    return (ASN1_item_sign(ASN1_ITEM_rptr(X509_CRL_INFO), &x->crl.sig_alg,
+                           &x->sig_alg, &x->signature, &x->crl, pkey, md));
+}
+
+int X509_CRL_sign_ctx(X509_CRL *x, EVP_MD_CTX *ctx)
+{
+    x->crl.enc.modified = 1;
+    return ASN1_item_sign_ctx(ASN1_ITEM_rptr(X509_CRL_INFO),
+                              &x->crl.sig_alg, &x->sig_alg, &x->signature,
+                              &x->crl, ctx);
+}
+
+#ifndef OPENSSL_NO_OCSP
+int X509_CRL_http_nbio(OCSP_REQ_CTX *rctx, X509_CRL **pcrl)
+{
+    return OCSP_REQ_CTX_nbio_d2i(rctx,
+                                 (ASN1_VALUE **)pcrl,
+                                 ASN1_ITEM_rptr(X509_CRL));
+}
+#endif
+
+int NETSCAPE_SPKI_sign(NETSCAPE_SPKI *x, EVP_PKEY *pkey, const EVP_MD *md)
+{
+    return (ASN1_item_sign(ASN1_ITEM_rptr(NETSCAPE_SPKAC), &x->sig_algor, NULL,
+                           x->signature, x->spkac, pkey, md));
+}
+
+#ifndef OPENSSL_NO_STDIO
+X509 *d2i_X509_fp(FILE *fp, X509 **x509)
+{
+    return ASN1_item_d2i_fp(ASN1_ITEM_rptr(X509), fp, x509);
+}
+
+int i2d_X509_fp(FILE *fp, X509 *x509)
+{
+    return ASN1_item_i2d_fp(ASN1_ITEM_rptr(X509), fp, x509);
+}
+#endif
+
+X509 *d2i_X509_bio(BIO *bp, X509 **x509)
+{
+    return ASN1_item_d2i_bio(ASN1_ITEM_rptr(X509), bp, x509);
+}
+
+int i2d_X509_bio(BIO *bp, X509 *x509)
+{
+    return ASN1_item_i2d_bio(ASN1_ITEM_rptr(X509), bp, x509);
+}
+
+#ifndef OPENSSL_NO_STDIO
+X509_CRL *d2i_X509_CRL_fp(FILE *fp, X509_CRL **crl)
+{
+    return ASN1_item_d2i_fp(ASN1_ITEM_rptr(X509_CRL), fp, crl);
+}
+
+int i2d_X509_CRL_fp(FILE *fp, X509_CRL *crl)
+{
+    return ASN1_item_i2d_fp(ASN1_ITEM_rptr(X509_CRL), fp, crl);
+}
+#endif
+
+X509_CRL *d2i_X509_CRL_bio(BIO *bp, X509_CRL **crl)
+{
+    return ASN1_item_d2i_bio(ASN1_ITEM_rptr(X509_CRL), bp, crl);
+}
+
+int i2d_X509_CRL_bio(BIO *bp, X509_CRL *crl)
+{
+    return ASN1_item_i2d_bio(ASN1_ITEM_rptr(X509_CRL), bp, crl);
+}
+
+#ifndef OPENSSL_NO_STDIO
+PKCS7 *d2i_PKCS7_fp(FILE *fp, PKCS7 **p7)
+{
+    return ASN1_item_d2i_fp(ASN1_ITEM_rptr(PKCS7), fp, p7);
+}
+
+int i2d_PKCS7_fp(FILE *fp, PKCS7 *p7)
+{
+    return ASN1_item_i2d_fp(ASN1_ITEM_rptr(PKCS7), fp, p7);
+}
+#endif
+
+PKCS7 *d2i_PKCS7_bio(BIO *bp, PKCS7 **p7)
+{
+    return ASN1_item_d2i_bio(ASN1_ITEM_rptr(PKCS7), bp, p7);
+}
+
+int i2d_PKCS7_bio(BIO *bp, PKCS7 *p7)
+{
+    return ASN1_item_i2d_bio(ASN1_ITEM_rptr(PKCS7), bp, p7);
+}
+
+#ifndef OPENSSL_NO_STDIO
+X509_REQ *d2i_X509_REQ_fp(FILE *fp, X509_REQ **req)
+{
+    return ASN1_item_d2i_fp(ASN1_ITEM_rptr(X509_REQ), fp, req);
+}
+
+int i2d_X509_REQ_fp(FILE *fp, X509_REQ *req)
+{
+    return ASN1_item_i2d_fp(ASN1_ITEM_rptr(X509_REQ), fp, req);
+}
+#endif
+
+X509_REQ *d2i_X509_REQ_bio(BIO *bp, X509_REQ **req)
+{
+    return ASN1_item_d2i_bio(ASN1_ITEM_rptr(X509_REQ), bp, req);
+}
+
+int i2d_X509_REQ_bio(BIO *bp, X509_REQ *req)
+{
+    return ASN1_item_i2d_bio(ASN1_ITEM_rptr(X509_REQ), bp, req);
+}
+
+#ifndef OPENSSL_NO_RSA
+
+# ifndef OPENSSL_NO_STDIO
+RSA *d2i_RSAPrivateKey_fp(FILE *fp, RSA **rsa)
+{
+    return ASN1_item_d2i_fp(ASN1_ITEM_rptr(RSAPrivateKey), fp, rsa);
+}
+
+int i2d_RSAPrivateKey_fp(FILE *fp, RSA *rsa)
+{
+    return ASN1_item_i2d_fp(ASN1_ITEM_rptr(RSAPrivateKey), fp, rsa);
+}
+
+RSA *d2i_RSAPublicKey_fp(FILE *fp, RSA **rsa)
+{
+    return ASN1_item_d2i_fp(ASN1_ITEM_rptr(RSAPublicKey), fp, rsa);
+}
+
+RSA *d2i_RSA_PUBKEY_fp(FILE *fp, RSA **rsa)
+{
+    return ASN1_d2i_fp((void *(*)(void))
+                       RSA_new, (D2I_OF(void)) d2i_RSA_PUBKEY, fp,
+                       (void **)rsa);
+}
+
+int i2d_RSAPublicKey_fp(FILE *fp, RSA *rsa)
+{
+    return ASN1_item_i2d_fp(ASN1_ITEM_rptr(RSAPublicKey), fp, rsa);
+}
+
+int i2d_RSA_PUBKEY_fp(FILE *fp, RSA *rsa)
+{
+    return ASN1_i2d_fp((I2D_OF(void))i2d_RSA_PUBKEY, fp, rsa);
+}
+# endif
+
+RSA *d2i_RSAPrivateKey_bio(BIO *bp, RSA **rsa)
+{
+    return ASN1_item_d2i_bio(ASN1_ITEM_rptr(RSAPrivateKey), bp, rsa);
+}
+
+int i2d_RSAPrivateKey_bio(BIO *bp, RSA *rsa)
+{
+    return ASN1_item_i2d_bio(ASN1_ITEM_rptr(RSAPrivateKey), bp, rsa);
+}
+
+RSA *d2i_RSAPublicKey_bio(BIO *bp, RSA **rsa)
+{
+    return ASN1_item_d2i_bio(ASN1_ITEM_rptr(RSAPublicKey), bp, rsa);
+}
+
+RSA *d2i_RSA_PUBKEY_bio(BIO *bp, RSA **rsa)
+{
+    return ASN1_d2i_bio_of(RSA, RSA_new, d2i_RSA_PUBKEY, bp, rsa);
+}
+
+int i2d_RSAPublicKey_bio(BIO *bp, RSA *rsa)
+{
+    return ASN1_item_i2d_bio(ASN1_ITEM_rptr(RSAPublicKey), bp, rsa);
+}
+
+int i2d_RSA_PUBKEY_bio(BIO *bp, RSA *rsa)
+{
+    return ASN1_i2d_bio_of(RSA, i2d_RSA_PUBKEY, bp, rsa);
+}
+#endif
+
+#ifndef OPENSSL_NO_DSA
+# ifndef OPENSSL_NO_STDIO
+DSA *d2i_DSAPrivateKey_fp(FILE *fp, DSA **dsa)
+{
+    return ASN1_d2i_fp_of(DSA, DSA_new, d2i_DSAPrivateKey, fp, dsa);
+}
+
+int i2d_DSAPrivateKey_fp(FILE *fp, DSA *dsa)
+{
+    return ASN1_i2d_fp_of_const(DSA, i2d_DSAPrivateKey, fp, dsa);
+}
+
+DSA *d2i_DSA_PUBKEY_fp(FILE *fp, DSA **dsa)
+{
+    return ASN1_d2i_fp_of(DSA, DSA_new, d2i_DSA_PUBKEY, fp, dsa);
+}
+
+int i2d_DSA_PUBKEY_fp(FILE *fp, DSA *dsa)
+{
+    return ASN1_i2d_fp_of(DSA, i2d_DSA_PUBKEY, fp, dsa);
+}
+# endif
+
+DSA *d2i_DSAPrivateKey_bio(BIO *bp, DSA **dsa)
+{
+    return ASN1_d2i_bio_of(DSA, DSA_new, d2i_DSAPrivateKey, bp, dsa);
+}
+
+int i2d_DSAPrivateKey_bio(BIO *bp, DSA *dsa)
+{
+    return ASN1_i2d_bio_of_const(DSA, i2d_DSAPrivateKey, bp, dsa);
+}
+
+DSA *d2i_DSA_PUBKEY_bio(BIO *bp, DSA **dsa)
+{
+    return ASN1_d2i_bio_of(DSA, DSA_new, d2i_DSA_PUBKEY, bp, dsa);
+}
+
+int i2d_DSA_PUBKEY_bio(BIO *bp, DSA *dsa)
+{
+    return ASN1_i2d_bio_of(DSA, i2d_DSA_PUBKEY, bp, dsa);
+}
+
+#endif
+
+#ifndef OPENSSL_NO_EC
+# ifndef OPENSSL_NO_STDIO
+EC_KEY *d2i_EC_PUBKEY_fp(FILE *fp, EC_KEY **eckey)
+{
+    return ASN1_d2i_fp_of(EC_KEY, EC_KEY_new, d2i_EC_PUBKEY, fp, eckey);
+}
+
+int i2d_EC_PUBKEY_fp(FILE *fp, EC_KEY *eckey)
+{
+    return ASN1_i2d_fp_of(EC_KEY, i2d_EC_PUBKEY, fp, eckey);
+}
+
+EC_KEY *d2i_ECPrivateKey_fp(FILE *fp, EC_KEY **eckey)
+{
+    return ASN1_d2i_fp_of(EC_KEY, EC_KEY_new, d2i_ECPrivateKey, fp, eckey);
+}
+
+int i2d_ECPrivateKey_fp(FILE *fp, EC_KEY *eckey)
+{
+    return ASN1_i2d_fp_of(EC_KEY, i2d_ECPrivateKey, fp, eckey);
+}
+# endif
+EC_KEY *d2i_EC_PUBKEY_bio(BIO *bp, EC_KEY **eckey)
+{
+    return ASN1_d2i_bio_of(EC_KEY, EC_KEY_new, d2i_EC_PUBKEY, bp, eckey);
+}
+
+int i2d_EC_PUBKEY_bio(BIO *bp, EC_KEY *ecdsa)
+{
+    return ASN1_i2d_bio_of(EC_KEY, i2d_EC_PUBKEY, bp, ecdsa);
+}
+
+EC_KEY *d2i_ECPrivateKey_bio(BIO *bp, EC_KEY **eckey)
+{
+    return ASN1_d2i_bio_of(EC_KEY, EC_KEY_new, d2i_ECPrivateKey, bp, eckey);
+}
+
+int i2d_ECPrivateKey_bio(BIO *bp, EC_KEY *eckey)
+{
+    return ASN1_i2d_bio_of(EC_KEY, i2d_ECPrivateKey, bp, eckey);
+}
+#endif
+
+int X509_pubkey_digest(const X509 *data, const EVP_MD *type,
+                       unsigned char *md, unsigned int *len)
+{
+    ASN1_BIT_STRING *key;
+    key = X509_get0_pubkey_bitstr(data);
+    if (!key)
+        return 0;
+    return EVP_Digest(key->data, key->length, md, len, type, NULL);
+}
+
+int X509_digest(const X509 *data, const EVP_MD *type, unsigned char *md,
+                unsigned int *len)
+{
+    if (type == EVP_sha1() && (data->ex_flags & EXFLAG_SET) != 0) {
+        /* Asking for SHA1 and we already computed it. */
+        if (len != NULL)
+            *len = sizeof(data->sha1_hash);
+        memcpy(md, data->sha1_hash, sizeof(data->sha1_hash));
+        return 1;
+    }
+    return (ASN1_item_digest
+            (ASN1_ITEM_rptr(X509), type, (char *)data, md, len));
+}
+
+int X509_CRL_digest(const X509_CRL *data, const EVP_MD *type,
+                    unsigned char *md, unsigned int *len)
+{
+    if (type == EVP_sha1() && (data->flags & EXFLAG_SET) != 0) {
+        /* Asking for SHA1; always computed in CRL d2i. */
+        if (len != NULL)
+            *len = sizeof(data->sha1_hash);
+        memcpy(md, data->sha1_hash, sizeof(data->sha1_hash));
+        return 1;
+    }
+    return (ASN1_item_digest
+            (ASN1_ITEM_rptr(X509_CRL), type, (char *)data, md, len));
+}
+
+int X509_REQ_digest(const X509_REQ *data, const EVP_MD *type,
+                    unsigned char *md, unsigned int *len)
+{
+    return (ASN1_item_digest
+            (ASN1_ITEM_rptr(X509_REQ), type, (char *)data, md, len));
+}
+
+int X509_NAME_digest(const X509_NAME *data, const EVP_MD *type,
+                     unsigned char *md, unsigned int *len)
+{
+    return (ASN1_item_digest
+            (ASN1_ITEM_rptr(X509_NAME), type, (char *)data, md, len));
+}
+
+int PKCS7_ISSUER_AND_SERIAL_digest(PKCS7_ISSUER_AND_SERIAL *data,
+                                   const EVP_MD *type, unsigned char *md,
+                                   unsigned int *len)
+{
+    return (ASN1_item_digest(ASN1_ITEM_rptr(PKCS7_ISSUER_AND_SERIAL), type,
+                             (char *)data, md, len));
+}
+
+#ifndef OPENSSL_NO_STDIO
+X509_SIG *d2i_PKCS8_fp(FILE *fp, X509_SIG **p8)
+{
+    return ASN1_d2i_fp_of(X509_SIG, X509_SIG_new, d2i_X509_SIG, fp, p8);
+}
+
+int i2d_PKCS8_fp(FILE *fp, X509_SIG *p8)
+{
+    return ASN1_i2d_fp_of(X509_SIG, i2d_X509_SIG, fp, p8);
+}
+#endif
+
+X509_SIG *d2i_PKCS8_bio(BIO *bp, X509_SIG **p8)
+{
+    return ASN1_d2i_bio_of(X509_SIG, X509_SIG_new, d2i_X509_SIG, bp, p8);
+}
+
+int i2d_PKCS8_bio(BIO *bp, X509_SIG *p8)
+{
+    return ASN1_i2d_bio_of(X509_SIG, i2d_X509_SIG, bp, p8);
+}
+
+#ifndef OPENSSL_NO_STDIO
+PKCS8_PRIV_KEY_INFO *d2i_PKCS8_PRIV_KEY_INFO_fp(FILE *fp,
+                                                PKCS8_PRIV_KEY_INFO **p8inf)
+{
+    return ASN1_d2i_fp_of(PKCS8_PRIV_KEY_INFO, PKCS8_PRIV_KEY_INFO_new,
+                          d2i_PKCS8_PRIV_KEY_INFO, fp, p8inf);
+}
+
+int i2d_PKCS8_PRIV_KEY_INFO_fp(FILE *fp, PKCS8_PRIV_KEY_INFO *p8inf)
+{
+    return ASN1_i2d_fp_of(PKCS8_PRIV_KEY_INFO, i2d_PKCS8_PRIV_KEY_INFO, fp,
+                          p8inf);
+}
+
+int i2d_PKCS8PrivateKeyInfo_fp(FILE *fp, EVP_PKEY *key)
+{
+    PKCS8_PRIV_KEY_INFO *p8inf;
+    int ret;
+    p8inf = EVP_PKEY2PKCS8(key);
+    if (!p8inf)
+        return 0;
+    ret = i2d_PKCS8_PRIV_KEY_INFO_fp(fp, p8inf);
+    PKCS8_PRIV_KEY_INFO_free(p8inf);
+    return ret;
+}
+
+int i2d_PrivateKey_fp(FILE *fp, EVP_PKEY *pkey)
+{
+    return ASN1_i2d_fp_of(EVP_PKEY, i2d_PrivateKey, fp, pkey);
+}
+
+EVP_PKEY *d2i_PrivateKey_fp(FILE *fp, EVP_PKEY **a)
+{
+    return ASN1_d2i_fp_of(EVP_PKEY, EVP_PKEY_new, d2i_AutoPrivateKey, fp, a);
+}
+
+int i2d_PUBKEY_fp(FILE *fp, EVP_PKEY *pkey)
+{
+    return ASN1_i2d_fp_of(EVP_PKEY, i2d_PUBKEY, fp, pkey);
+}
+
+EVP_PKEY *d2i_PUBKEY_fp(FILE *fp, EVP_PKEY **a)
+{
+    return ASN1_d2i_fp_of(EVP_PKEY, EVP_PKEY_new, d2i_PUBKEY, fp, a);
+}
+
+#endif
+
+PKCS8_PRIV_KEY_INFO *d2i_PKCS8_PRIV_KEY_INFO_bio(BIO *bp,
+                                                 PKCS8_PRIV_KEY_INFO **p8inf)
+{
+    return ASN1_d2i_bio_of(PKCS8_PRIV_KEY_INFO, PKCS8_PRIV_KEY_INFO_new,
+                           d2i_PKCS8_PRIV_KEY_INFO, bp, p8inf);
+}
+
+int i2d_PKCS8_PRIV_KEY_INFO_bio(BIO *bp, PKCS8_PRIV_KEY_INFO *p8inf)
+{
+    return ASN1_i2d_bio_of(PKCS8_PRIV_KEY_INFO, i2d_PKCS8_PRIV_KEY_INFO, bp,
+                           p8inf);
+}
+
+int i2d_PKCS8PrivateKeyInfo_bio(BIO *bp, EVP_PKEY *key)
+{
+    PKCS8_PRIV_KEY_INFO *p8inf;
+    int ret;
+    p8inf = EVP_PKEY2PKCS8(key);
+    if (!p8inf)
+        return 0;
+    ret = i2d_PKCS8_PRIV_KEY_INFO_bio(bp, p8inf);
+    PKCS8_PRIV_KEY_INFO_free(p8inf);
+    return ret;
+}
+
+int i2d_PrivateKey_bio(BIO *bp, EVP_PKEY *pkey)
+{
+    return ASN1_i2d_bio_of(EVP_PKEY, i2d_PrivateKey, bp, pkey);
+}
+
+EVP_PKEY *d2i_PrivateKey_bio(BIO *bp, EVP_PKEY **a)
+{
+    return ASN1_d2i_bio_of(EVP_PKEY, EVP_PKEY_new, d2i_AutoPrivateKey, bp, a);
+}
+
+int i2d_PUBKEY_bio(BIO *bp, EVP_PKEY *pkey)
+{
+    return ASN1_i2d_bio_of(EVP_PKEY, i2d_PUBKEY, bp, pkey);
+}
+
+EVP_PKEY *d2i_PUBKEY_bio(BIO *bp, EVP_PKEY **a)
+{
+    return ASN1_d2i_bio_of(EVP_PKEY, EVP_PKEY_new, d2i_PUBKEY, bp, a);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_attrib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_attrib.c
new file mode 100644
index 000000000..9a41e547c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_attrib.c
@@ -0,0 +1,55 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/objects.h>
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include "x509_lcl.h"
+
+/*-
+ * X509_ATTRIBUTE: this has the following form:
+ *
+ * typedef struct x509_attributes_st
+ *      {
+ *      ASN1_OBJECT *object;
+ *      STACK_OF(ASN1_TYPE) *set;
+ *      } X509_ATTRIBUTE;
+ *
+ */
+
+ASN1_SEQUENCE(X509_ATTRIBUTE) = {
+        ASN1_SIMPLE(X509_ATTRIBUTE, object, ASN1_OBJECT),
+        ASN1_SET_OF(X509_ATTRIBUTE, set, ASN1_ANY)
+} ASN1_SEQUENCE_END(X509_ATTRIBUTE)
+
+IMPLEMENT_ASN1_FUNCTIONS(X509_ATTRIBUTE)
+IMPLEMENT_ASN1_DUP_FUNCTION(X509_ATTRIBUTE)
+
+X509_ATTRIBUTE *X509_ATTRIBUTE_create(int nid, int atrtype, void *value)
+{
+    X509_ATTRIBUTE *ret = NULL;
+    ASN1_TYPE *val = NULL;
+
+    if ((ret = X509_ATTRIBUTE_new()) == NULL)
+        return NULL;
+    ret->object = OBJ_nid2obj(nid);
+    if ((val = ASN1_TYPE_new()) == NULL)
+        goto err;
+    if (!sk_ASN1_TYPE_push(ret->set, val))
+        goto err;
+
+    ASN1_TYPE_set(val, atrtype, value);
+    return ret;
+ err:
+    X509_ATTRIBUTE_free(ret);
+    ASN1_TYPE_free(val);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_crl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_crl.c
new file mode 100644
index 000000000..12ab3cca4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_crl.c
@@ -0,0 +1,478 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+#include <openssl/x509v3.h>
+#include "x509_lcl.h"
+
+static int X509_REVOKED_cmp(const X509_REVOKED *const *a,
+                            const X509_REVOKED *const *b);
+static void setup_idp(X509_CRL *crl, ISSUING_DIST_POINT *idp);
+
+ASN1_SEQUENCE(X509_REVOKED) = {
+        ASN1_EMBED(X509_REVOKED,serialNumber, ASN1_INTEGER),
+        ASN1_SIMPLE(X509_REVOKED,revocationDate, ASN1_TIME),
+        ASN1_SEQUENCE_OF_OPT(X509_REVOKED,extensions, X509_EXTENSION)
+} ASN1_SEQUENCE_END(X509_REVOKED)
+
+static int def_crl_verify(X509_CRL *crl, EVP_PKEY *r);
+static int def_crl_lookup(X509_CRL *crl,
+                          X509_REVOKED **ret, ASN1_INTEGER *serial,
+                          X509_NAME *issuer);
+
+static X509_CRL_METHOD int_crl_meth = {
+    0,
+    0, 0,
+    def_crl_lookup,
+    def_crl_verify
+};
+
+static const X509_CRL_METHOD *default_crl_method = &int_crl_meth;
+
+/*
+ * The X509_CRL_INFO structure needs a bit of customisation. Since we cache
+ * the original encoding the signature won't be affected by reordering of the
+ * revoked field.
+ */
+static int crl_inf_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                      void *exarg)
+{
+    X509_CRL_INFO *a = (X509_CRL_INFO *)*pval;
+
+    if (!a || !a->revoked)
+        return 1;
+    switch (operation) {
+        /*
+         * Just set cmp function here. We don't sort because that would
+         * affect the output of X509_CRL_print().
+         */
+    case ASN1_OP_D2I_POST:
+        (void)sk_X509_REVOKED_set_cmp_func(a->revoked, X509_REVOKED_cmp);
+        break;
+    }
+    return 1;
+}
+
+
+ASN1_SEQUENCE_enc(X509_CRL_INFO, enc, crl_inf_cb) = {
+        ASN1_OPT(X509_CRL_INFO, version, ASN1_INTEGER),
+        ASN1_EMBED(X509_CRL_INFO, sig_alg, X509_ALGOR),
+        ASN1_SIMPLE(X509_CRL_INFO, issuer, X509_NAME),
+        ASN1_SIMPLE(X509_CRL_INFO, lastUpdate, ASN1_TIME),
+        ASN1_OPT(X509_CRL_INFO, nextUpdate, ASN1_TIME),
+        ASN1_SEQUENCE_OF_OPT(X509_CRL_INFO, revoked, X509_REVOKED),
+        ASN1_EXP_SEQUENCE_OF_OPT(X509_CRL_INFO, extensions, X509_EXTENSION, 0)
+} ASN1_SEQUENCE_END_enc(X509_CRL_INFO, X509_CRL_INFO)
+
+/*
+ * Set CRL entry issuer according to CRL certificate issuer extension. Check
+ * for unhandled critical CRL entry extensions.
+ */
+
+static int crl_set_issuers(X509_CRL *crl)
+{
+
+    int i, j;
+    GENERAL_NAMES *gens, *gtmp;
+    STACK_OF(X509_REVOKED) *revoked;
+
+    revoked = X509_CRL_get_REVOKED(crl);
+
+    gens = NULL;
+    for (i = 0; i < sk_X509_REVOKED_num(revoked); i++) {
+        X509_REVOKED *rev = sk_X509_REVOKED_value(revoked, i);
+        STACK_OF(X509_EXTENSION) *exts;
+        ASN1_ENUMERATED *reason;
+        X509_EXTENSION *ext;
+        gtmp = X509_REVOKED_get_ext_d2i(rev,
+                                        NID_certificate_issuer, &j, NULL);
+        if (!gtmp && (j != -1)) {
+            crl->flags |= EXFLAG_INVALID;
+            return 1;
+        }
+
+        if (gtmp) {
+            gens = gtmp;
+            if (!crl->issuers) {
+                crl->issuers = sk_GENERAL_NAMES_new_null();
+                if (!crl->issuers)
+                    return 0;
+            }
+            if (!sk_GENERAL_NAMES_push(crl->issuers, gtmp))
+                return 0;
+        }
+        rev->issuer = gens;
+
+        reason = X509_REVOKED_get_ext_d2i(rev, NID_crl_reason, &j, NULL);
+        if (!reason && (j != -1)) {
+            crl->flags |= EXFLAG_INVALID;
+            return 1;
+        }
+
+        if (reason) {
+            rev->reason = ASN1_ENUMERATED_get(reason);
+            ASN1_ENUMERATED_free(reason);
+        } else
+            rev->reason = CRL_REASON_NONE;
+
+        /* Check for critical CRL entry extensions */
+
+        exts = rev->extensions;
+
+        for (j = 0; j < sk_X509_EXTENSION_num(exts); j++) {
+            ext = sk_X509_EXTENSION_value(exts, j);
+            if (X509_EXTENSION_get_critical(ext)) {
+                if (OBJ_obj2nid(X509_EXTENSION_get_object(ext)) == NID_certificate_issuer)
+                    continue;
+                crl->flags |= EXFLAG_CRITICAL;
+                break;
+            }
+        }
+
+    }
+
+    return 1;
+
+}
+
+/*
+ * The X509_CRL structure needs a bit of customisation. Cache some extensions
+ * and hash of the whole CRL.
+ */
+static int crl_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                  void *exarg)
+{
+    X509_CRL *crl = (X509_CRL *)*pval;
+    STACK_OF(X509_EXTENSION) *exts;
+    X509_EXTENSION *ext;
+    int idx;
+
+    switch (operation) {
+    case ASN1_OP_D2I_PRE:
+        if (crl->meth->crl_free) {
+            if (!crl->meth->crl_free(crl))
+                return 0;
+        }
+        AUTHORITY_KEYID_free(crl->akid);
+        ISSUING_DIST_POINT_free(crl->idp);
+        ASN1_INTEGER_free(crl->crl_number);
+        ASN1_INTEGER_free(crl->base_crl_number);
+        sk_GENERAL_NAMES_pop_free(crl->issuers, GENERAL_NAMES_free);
+        /* fall thru */
+
+    case ASN1_OP_NEW_POST:
+        crl->idp = NULL;
+        crl->akid = NULL;
+        crl->flags = 0;
+        crl->idp_flags = 0;
+        crl->idp_reasons = CRLDP_ALL_REASONS;
+        crl->meth = default_crl_method;
+        crl->meth_data = NULL;
+        crl->issuers = NULL;
+        crl->crl_number = NULL;
+        crl->base_crl_number = NULL;
+        break;
+
+    case ASN1_OP_D2I_POST:
+        X509_CRL_digest(crl, EVP_sha1(), crl->sha1_hash, NULL);
+        crl->idp = X509_CRL_get_ext_d2i(crl,
+                                        NID_issuing_distribution_point, NULL,
+                                        NULL);
+        if (crl->idp)
+            setup_idp(crl, crl->idp);
+
+        crl->akid = X509_CRL_get_ext_d2i(crl,
+                                         NID_authority_key_identifier, NULL,
+                                         NULL);
+
+        crl->crl_number = X509_CRL_get_ext_d2i(crl,
+                                               NID_crl_number, NULL, NULL);
+
+        crl->base_crl_number = X509_CRL_get_ext_d2i(crl,
+                                                    NID_delta_crl, NULL,
+                                                    NULL);
+        /* Delta CRLs must have CRL number */
+        if (crl->base_crl_number && !crl->crl_number)
+            crl->flags |= EXFLAG_INVALID;
+
+        /*
+         * See if we have any unhandled critical CRL extensions and indicate
+         * this in a flag. We only currently handle IDP so anything else
+         * critical sets the flag. This code accesses the X509_CRL structure
+         * directly: applications shouldn't do this.
+         */
+
+        exts = crl->crl.extensions;
+
+        for (idx = 0; idx < sk_X509_EXTENSION_num(exts); idx++) {
+            int nid;
+            ext = sk_X509_EXTENSION_value(exts, idx);
+            nid = OBJ_obj2nid(X509_EXTENSION_get_object(ext));
+            if (nid == NID_freshest_crl)
+                crl->flags |= EXFLAG_FRESHEST;
+            if (X509_EXTENSION_get_critical(ext)) {
+                /* We handle IDP and deltas */
+                if ((nid == NID_issuing_distribution_point)
+                    || (nid == NID_authority_key_identifier)
+                    || (nid == NID_delta_crl))
+                    continue;
+                crl->flags |= EXFLAG_CRITICAL;
+                break;
+            }
+        }
+
+        if (!crl_set_issuers(crl))
+            return 0;
+
+        if (crl->meth->crl_init) {
+            if (crl->meth->crl_init(crl) == 0)
+                return 0;
+        }
+
+        crl->flags |= EXFLAG_SET;
+        break;
+
+    case ASN1_OP_FREE_POST:
+        if (crl->meth->crl_free) {
+            if (!crl->meth->crl_free(crl))
+                return 0;
+        }
+        AUTHORITY_KEYID_free(crl->akid);
+        ISSUING_DIST_POINT_free(crl->idp);
+        ASN1_INTEGER_free(crl->crl_number);
+        ASN1_INTEGER_free(crl->base_crl_number);
+        sk_GENERAL_NAMES_pop_free(crl->issuers, GENERAL_NAMES_free);
+        break;
+    }
+    return 1;
+}
+
+/* Convert IDP into a more convenient form */
+
+static void setup_idp(X509_CRL *crl, ISSUING_DIST_POINT *idp)
+{
+    int idp_only = 0;
+    /* Set various flags according to IDP */
+    crl->idp_flags |= IDP_PRESENT;
+    if (idp->onlyuser > 0) {
+        idp_only++;
+        crl->idp_flags |= IDP_ONLYUSER;
+    }
+    if (idp->onlyCA > 0) {
+        idp_only++;
+        crl->idp_flags |= IDP_ONLYCA;
+    }
+    if (idp->onlyattr > 0) {
+        idp_only++;
+        crl->idp_flags |= IDP_ONLYATTR;
+    }
+
+    if (idp_only > 1)
+        crl->idp_flags |= IDP_INVALID;
+
+    if (idp->indirectCRL > 0)
+        crl->idp_flags |= IDP_INDIRECT;
+
+    if (idp->onlysomereasons) {
+        crl->idp_flags |= IDP_REASONS;
+        if (idp->onlysomereasons->length > 0)
+            crl->idp_reasons = idp->onlysomereasons->data[0];
+        if (idp->onlysomereasons->length > 1)
+            crl->idp_reasons |= (idp->onlysomereasons->data[1] << 8);
+        crl->idp_reasons &= CRLDP_ALL_REASONS;
+    }
+
+    DIST_POINT_set_dpname(idp->distpoint, X509_CRL_get_issuer(crl));
+}
+
+ASN1_SEQUENCE_ref(X509_CRL, crl_cb) = {
+        ASN1_EMBED(X509_CRL, crl, X509_CRL_INFO),
+        ASN1_EMBED(X509_CRL, sig_alg, X509_ALGOR),
+        ASN1_EMBED(X509_CRL, signature, ASN1_BIT_STRING)
+} ASN1_SEQUENCE_END_ref(X509_CRL, X509_CRL)
+
+IMPLEMENT_ASN1_FUNCTIONS(X509_REVOKED)
+
+IMPLEMENT_ASN1_DUP_FUNCTION(X509_REVOKED)
+
+IMPLEMENT_ASN1_FUNCTIONS(X509_CRL_INFO)
+
+IMPLEMENT_ASN1_FUNCTIONS(X509_CRL)
+
+IMPLEMENT_ASN1_DUP_FUNCTION(X509_CRL)
+
+static int X509_REVOKED_cmp(const X509_REVOKED *const *a,
+                            const X509_REVOKED *const *b)
+{
+    return (ASN1_STRING_cmp((ASN1_STRING *)&(*a)->serialNumber,
+                            (ASN1_STRING *)&(*b)->serialNumber));
+}
+
+int X509_CRL_add0_revoked(X509_CRL *crl, X509_REVOKED *rev)
+{
+    X509_CRL_INFO *inf;
+
+    inf = &crl->crl;
+    if (inf->revoked == NULL)
+        inf->revoked = sk_X509_REVOKED_new(X509_REVOKED_cmp);
+    if (inf->revoked == NULL || !sk_X509_REVOKED_push(inf->revoked, rev)) {
+        ASN1err(ASN1_F_X509_CRL_ADD0_REVOKED, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    inf->enc.modified = 1;
+    return 1;
+}
+
+int X509_CRL_verify(X509_CRL *crl, EVP_PKEY *r)
+{
+    if (crl->meth->crl_verify)
+        return crl->meth->crl_verify(crl, r);
+    return 0;
+}
+
+int X509_CRL_get0_by_serial(X509_CRL *crl,
+                            X509_REVOKED **ret, ASN1_INTEGER *serial)
+{
+    if (crl->meth->crl_lookup)
+        return crl->meth->crl_lookup(crl, ret, serial, NULL);
+    return 0;
+}
+
+int X509_CRL_get0_by_cert(X509_CRL *crl, X509_REVOKED **ret, X509 *x)
+{
+    if (crl->meth->crl_lookup)
+        return crl->meth->crl_lookup(crl, ret,
+                                     X509_get_serialNumber(x),
+                                     X509_get_issuer_name(x));
+    return 0;
+}
+
+static int def_crl_verify(X509_CRL *crl, EVP_PKEY *r)
+{
+    return (ASN1_item_verify(ASN1_ITEM_rptr(X509_CRL_INFO),
+                             &crl->sig_alg, &crl->signature, &crl->crl, r));
+}
+
+static int crl_revoked_issuer_match(X509_CRL *crl, X509_NAME *nm,
+                                    X509_REVOKED *rev)
+{
+    int i;
+
+    if (!rev->issuer) {
+        if (!nm)
+            return 1;
+        if (!X509_NAME_cmp(nm, X509_CRL_get_issuer(crl)))
+            return 1;
+        return 0;
+    }
+
+    if (!nm)
+        nm = X509_CRL_get_issuer(crl);
+
+    for (i = 0; i < sk_GENERAL_NAME_num(rev->issuer); i++) {
+        GENERAL_NAME *gen = sk_GENERAL_NAME_value(rev->issuer, i);
+        if (gen->type != GEN_DIRNAME)
+            continue;
+        if (!X509_NAME_cmp(nm, gen->d.directoryName))
+            return 1;
+    }
+    return 0;
+
+}
+
+static int def_crl_lookup(X509_CRL *crl,
+                          X509_REVOKED **ret, ASN1_INTEGER *serial,
+                          X509_NAME *issuer)
+{
+    X509_REVOKED rtmp, *rev;
+    int idx, num;
+
+    if (crl->crl.revoked == NULL)
+        return 0;
+
+    /*
+     * Sort revoked into serial number order if not already sorted. Do this
+     * under a lock to avoid race condition.
+     */
+    if (!sk_X509_REVOKED_is_sorted(crl->crl.revoked)) {
+        CRYPTO_THREAD_write_lock(crl->lock);
+        sk_X509_REVOKED_sort(crl->crl.revoked);
+        CRYPTO_THREAD_unlock(crl->lock);
+    }
+    rtmp.serialNumber = *serial;
+    idx = sk_X509_REVOKED_find(crl->crl.revoked, &rtmp);
+    if (idx < 0)
+        return 0;
+    /* Need to look for matching name */
+    for (num = sk_X509_REVOKED_num(crl->crl.revoked); idx < num; idx++) {
+        rev = sk_X509_REVOKED_value(crl->crl.revoked, idx);
+        if (ASN1_INTEGER_cmp(&rev->serialNumber, serial))
+            return 0;
+        if (crl_revoked_issuer_match(crl, issuer, rev)) {
+            if (ret)
+                *ret = rev;
+            if (rev->reason == CRL_REASON_REMOVE_FROM_CRL)
+                return 2;
+            return 1;
+        }
+    }
+    return 0;
+}
+
+void X509_CRL_set_default_method(const X509_CRL_METHOD *meth)
+{
+    if (meth == NULL)
+        default_crl_method = &int_crl_meth;
+    else
+        default_crl_method = meth;
+}
+
+X509_CRL_METHOD *X509_CRL_METHOD_new(int (*crl_init) (X509_CRL *crl),
+                                     int (*crl_free) (X509_CRL *crl),
+                                     int (*crl_lookup) (X509_CRL *crl,
+                                                        X509_REVOKED **ret,
+                                                        ASN1_INTEGER *ser,
+                                                        X509_NAME *issuer),
+                                     int (*crl_verify) (X509_CRL *crl,
+                                                        EVP_PKEY *pk))
+{
+    X509_CRL_METHOD *m = OPENSSL_malloc(sizeof(*m));
+
+    if (m == NULL) {
+        X509err(X509_F_X509_CRL_METHOD_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    m->crl_init = crl_init;
+    m->crl_free = crl_free;
+    m->crl_lookup = crl_lookup;
+    m->crl_verify = crl_verify;
+    m->flags = X509_CRL_METHOD_DYNAMIC;
+    return m;
+}
+
+void X509_CRL_METHOD_free(X509_CRL_METHOD *m)
+{
+    if (m == NULL || !(m->flags & X509_CRL_METHOD_DYNAMIC))
+        return;
+    OPENSSL_free(m);
+}
+
+void X509_CRL_set_meth_data(X509_CRL *crl, void *dat)
+{
+    crl->meth_data = dat;
+}
+
+void *X509_CRL_get_meth_data(X509_CRL *crl)
+{
+    return crl->meth_data;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_exten.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_exten.c
new file mode 100644
index 000000000..f10f4a4d8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_exten.c
@@ -0,0 +1,28 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stddef.h>
+#include <openssl/x509.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include "x509_lcl.h"
+
+ASN1_SEQUENCE(X509_EXTENSION) = {
+        ASN1_SIMPLE(X509_EXTENSION, object, ASN1_OBJECT),
+        ASN1_OPT(X509_EXTENSION, critical, ASN1_BOOLEAN),
+        ASN1_EMBED(X509_EXTENSION, value, ASN1_OCTET_STRING)
+} ASN1_SEQUENCE_END(X509_EXTENSION)
+
+ASN1_ITEM_TEMPLATE(X509_EXTENSIONS) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, Extension, X509_EXTENSION)
+ASN1_ITEM_TEMPLATE_END(X509_EXTENSIONS)
+
+IMPLEMENT_ASN1_FUNCTIONS(X509_EXTENSION)
+IMPLEMENT_ASN1_ENCODE_FUNCTIONS_fname(X509_EXTENSIONS, X509_EXTENSIONS, X509_EXTENSIONS)
+IMPLEMENT_ASN1_DUP_FUNCTION(X509_EXTENSION)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_name.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_name.c
new file mode 100644
index 000000000..a1e9bbdb6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_name.c
@@ -0,0 +1,551 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/ctype.h"
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+#include "internal/asn1_int.h"
+#include "x509_lcl.h"
+
+/*
+ * Maximum length of X509_NAME: much larger than anything we should
+ * ever see in practice.
+ */
+
+#define X509_NAME_MAX (1024 * 1024)
+
+static int x509_name_ex_d2i(ASN1_VALUE **val,
+                            const unsigned char **in, long len,
+                            const ASN1_ITEM *it,
+                            int tag, int aclass, char opt, ASN1_TLC *ctx);
+
+static int x509_name_ex_i2d(ASN1_VALUE **val, unsigned char **out,
+                            const ASN1_ITEM *it, int tag, int aclass);
+static int x509_name_ex_new(ASN1_VALUE **val, const ASN1_ITEM *it);
+static void x509_name_ex_free(ASN1_VALUE **val, const ASN1_ITEM *it);
+
+static int x509_name_encode(X509_NAME *a);
+static int x509_name_canon(X509_NAME *a);
+static int asn1_string_canon(ASN1_STRING *out, const ASN1_STRING *in);
+static int i2d_name_canon(STACK_OF(STACK_OF_X509_NAME_ENTRY) * intname,
+                          unsigned char **in);
+
+static int x509_name_ex_print(BIO *out, ASN1_VALUE **pval,
+                              int indent,
+                              const char *fname, const ASN1_PCTX *pctx);
+
+ASN1_SEQUENCE(X509_NAME_ENTRY) = {
+        ASN1_SIMPLE(X509_NAME_ENTRY, object, ASN1_OBJECT),
+        ASN1_SIMPLE(X509_NAME_ENTRY, value, ASN1_PRINTABLE)
+} ASN1_SEQUENCE_END(X509_NAME_ENTRY)
+
+IMPLEMENT_ASN1_FUNCTIONS(X509_NAME_ENTRY)
+IMPLEMENT_ASN1_DUP_FUNCTION(X509_NAME_ENTRY)
+
+/*
+ * For the "Name" type we need a SEQUENCE OF { SET OF X509_NAME_ENTRY } so
+ * declare two template wrappers for this
+ */
+
+ASN1_ITEM_TEMPLATE(X509_NAME_ENTRIES) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SET_OF, 0, RDNS, X509_NAME_ENTRY)
+static_ASN1_ITEM_TEMPLATE_END(X509_NAME_ENTRIES)
+
+ASN1_ITEM_TEMPLATE(X509_NAME_INTERNAL) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, Name, X509_NAME_ENTRIES)
+static_ASN1_ITEM_TEMPLATE_END(X509_NAME_INTERNAL)
+
+/*
+ * Normally that's where it would end: we'd have two nested STACK structures
+ * representing the ASN1. Unfortunately X509_NAME uses a completely different
+ * form and caches encodings so we have to process the internal form and
+ * convert to the external form.
+ */
+
+static const ASN1_EXTERN_FUNCS x509_name_ff = {
+    NULL,
+    x509_name_ex_new,
+    x509_name_ex_free,
+    0,                          /* Default clear behaviour is OK */
+    x509_name_ex_d2i,
+    x509_name_ex_i2d,
+    x509_name_ex_print
+};
+
+IMPLEMENT_EXTERN_ASN1(X509_NAME, V_ASN1_SEQUENCE, x509_name_ff)
+
+IMPLEMENT_ASN1_FUNCTIONS(X509_NAME)
+
+IMPLEMENT_ASN1_DUP_FUNCTION(X509_NAME)
+
+static int x509_name_ex_new(ASN1_VALUE **val, const ASN1_ITEM *it)
+{
+    X509_NAME *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL)
+        goto memerr;
+    if ((ret->entries = sk_X509_NAME_ENTRY_new_null()) == NULL)
+        goto memerr;
+    if ((ret->bytes = BUF_MEM_new()) == NULL)
+        goto memerr;
+    ret->modified = 1;
+    *val = (ASN1_VALUE *)ret;
+    return 1;
+
+ memerr:
+    ASN1err(ASN1_F_X509_NAME_EX_NEW, ERR_R_MALLOC_FAILURE);
+    if (ret) {
+        sk_X509_NAME_ENTRY_free(ret->entries);
+        OPENSSL_free(ret);
+    }
+    return 0;
+}
+
+static void x509_name_ex_free(ASN1_VALUE **pval, const ASN1_ITEM *it)
+{
+    X509_NAME *a;
+
+    if (!pval || !*pval)
+        return;
+    a = (X509_NAME *)*pval;
+
+    BUF_MEM_free(a->bytes);
+    sk_X509_NAME_ENTRY_pop_free(a->entries, X509_NAME_ENTRY_free);
+    OPENSSL_free(a->canon_enc);
+    OPENSSL_free(a);
+    *pval = NULL;
+}
+
+static void local_sk_X509_NAME_ENTRY_free(STACK_OF(X509_NAME_ENTRY) *ne)
+{
+    sk_X509_NAME_ENTRY_free(ne);
+}
+
+static void local_sk_X509_NAME_ENTRY_pop_free(STACK_OF(X509_NAME_ENTRY) *ne)
+{
+    sk_X509_NAME_ENTRY_pop_free(ne, X509_NAME_ENTRY_free);
+}
+
+static int x509_name_ex_d2i(ASN1_VALUE **val,
+                            const unsigned char **in, long len,
+                            const ASN1_ITEM *it, int tag, int aclass,
+                            char opt, ASN1_TLC *ctx)
+{
+    const unsigned char *p = *in, *q;
+    union {
+        STACK_OF(STACK_OF_X509_NAME_ENTRY) *s;
+        ASN1_VALUE *a;
+    } intname = {
+        NULL
+    };
+    union {
+        X509_NAME *x;
+        ASN1_VALUE *a;
+    } nm = {
+        NULL
+    };
+    int i, j, ret;
+    STACK_OF(X509_NAME_ENTRY) *entries;
+    X509_NAME_ENTRY *entry;
+    if (len > X509_NAME_MAX)
+        len = X509_NAME_MAX;
+    q = p;
+
+    /* Get internal representation of Name */
+    ret = ASN1_item_ex_d2i(&intname.a,
+                           &p, len, ASN1_ITEM_rptr(X509_NAME_INTERNAL),
+                           tag, aclass, opt, ctx);
+
+    if (ret <= 0)
+        return ret;
+
+    if (*val)
+        x509_name_ex_free(val, NULL);
+    if (!x509_name_ex_new(&nm.a, NULL))
+        goto err;
+    /* We've decoded it: now cache encoding */
+    if (!BUF_MEM_grow(nm.x->bytes, p - q))
+        goto err;
+    memcpy(nm.x->bytes->data, q, p - q);
+
+    /* Convert internal representation to X509_NAME structure */
+    for (i = 0; i < sk_STACK_OF_X509_NAME_ENTRY_num(intname.s); i++) {
+        entries = sk_STACK_OF_X509_NAME_ENTRY_value(intname.s, i);
+        for (j = 0; j < sk_X509_NAME_ENTRY_num(entries); j++) {
+            entry = sk_X509_NAME_ENTRY_value(entries, j);
+            entry->set = i;
+            if (!sk_X509_NAME_ENTRY_push(nm.x->entries, entry))
+                goto err;
+            sk_X509_NAME_ENTRY_set(entries, j, NULL);
+        }
+    }
+    ret = x509_name_canon(nm.x);
+    if (!ret)
+        goto err;
+    sk_STACK_OF_X509_NAME_ENTRY_pop_free(intname.s,
+                                         local_sk_X509_NAME_ENTRY_free);
+    nm.x->modified = 0;
+    *val = nm.a;
+    *in = p;
+    return ret;
+
+ err:
+    if (nm.x != NULL)
+        X509_NAME_free(nm.x);
+    sk_STACK_OF_X509_NAME_ENTRY_pop_free(intname.s,
+                                         local_sk_X509_NAME_ENTRY_pop_free);
+    ASN1err(ASN1_F_X509_NAME_EX_D2I, ERR_R_NESTED_ASN1_ERROR);
+    return 0;
+}
+
+static int x509_name_ex_i2d(ASN1_VALUE **val, unsigned char **out,
+                            const ASN1_ITEM *it, int tag, int aclass)
+{
+    int ret;
+    X509_NAME *a = (X509_NAME *)*val;
+    if (a->modified) {
+        ret = x509_name_encode(a);
+        if (ret < 0)
+            return ret;
+        ret = x509_name_canon(a);
+        if (ret < 0)
+            return ret;
+    }
+    ret = a->bytes->length;
+    if (out != NULL) {
+        memcpy(*out, a->bytes->data, ret);
+        *out += ret;
+    }
+    return ret;
+}
+
+static int x509_name_encode(X509_NAME *a)
+{
+    union {
+        STACK_OF(STACK_OF_X509_NAME_ENTRY) *s;
+        ASN1_VALUE *a;
+    } intname = {
+        NULL
+    };
+    int len;
+    unsigned char *p;
+    STACK_OF(X509_NAME_ENTRY) *entries = NULL;
+    X509_NAME_ENTRY *entry;
+    int i, set = -1;
+    intname.s = sk_STACK_OF_X509_NAME_ENTRY_new_null();
+    if (!intname.s)
+        goto memerr;
+    for (i = 0; i < sk_X509_NAME_ENTRY_num(a->entries); i++) {
+        entry = sk_X509_NAME_ENTRY_value(a->entries, i);
+        if (entry->set != set) {
+            entries = sk_X509_NAME_ENTRY_new_null();
+            if (!entries)
+                goto memerr;
+            if (!sk_STACK_OF_X509_NAME_ENTRY_push(intname.s, entries)) {
+                sk_X509_NAME_ENTRY_free(entries);
+                goto memerr;
+            }
+            set = entry->set;
+        }
+        if (!sk_X509_NAME_ENTRY_push(entries, entry))
+            goto memerr;
+    }
+    len = ASN1_item_ex_i2d(&intname.a, NULL,
+                           ASN1_ITEM_rptr(X509_NAME_INTERNAL), -1, -1);
+    if (!BUF_MEM_grow(a->bytes, len))
+        goto memerr;
+    p = (unsigned char *)a->bytes->data;
+    ASN1_item_ex_i2d(&intname.a,
+                     &p, ASN1_ITEM_rptr(X509_NAME_INTERNAL), -1, -1);
+    sk_STACK_OF_X509_NAME_ENTRY_pop_free(intname.s,
+                                         local_sk_X509_NAME_ENTRY_free);
+    a->modified = 0;
+    return len;
+ memerr:
+    sk_STACK_OF_X509_NAME_ENTRY_pop_free(intname.s,
+                                         local_sk_X509_NAME_ENTRY_free);
+    ASN1err(ASN1_F_X509_NAME_ENCODE, ERR_R_MALLOC_FAILURE);
+    return -1;
+}
+
+static int x509_name_ex_print(BIO *out, ASN1_VALUE **pval,
+                              int indent,
+                              const char *fname, const ASN1_PCTX *pctx)
+{
+    if (X509_NAME_print_ex(out, (const X509_NAME *)*pval,
+                           indent, pctx->nm_flags) <= 0)
+        return 0;
+    return 2;
+}
+
+/*
+ * This function generates the canonical encoding of the Name structure. In
+ * it all strings are converted to UTF8, leading, trailing and multiple
+ * spaces collapsed, converted to lower case and the leading SEQUENCE header
+ * removed. In future we could also normalize the UTF8 too. By doing this
+ * comparison of Name structures can be rapidly performed by just using
+ * memcmp() of the canonical encoding. By omitting the leading SEQUENCE name
+ * constraints of type dirName can also be checked with a simple memcmp().
+ */
+
+static int x509_name_canon(X509_NAME *a)
+{
+    unsigned char *p;
+    STACK_OF(STACK_OF_X509_NAME_ENTRY) *intname;
+    STACK_OF(X509_NAME_ENTRY) *entries = NULL;
+    X509_NAME_ENTRY *entry, *tmpentry = NULL;
+    int i, set = -1, ret = 0, len;
+
+    OPENSSL_free(a->canon_enc);
+    a->canon_enc = NULL;
+    /* Special case: empty X509_NAME => null encoding */
+    if (sk_X509_NAME_ENTRY_num(a->entries) == 0) {
+        a->canon_enclen = 0;
+        return 1;
+    }
+    intname = sk_STACK_OF_X509_NAME_ENTRY_new_null();
+    if (intname == NULL) {
+        X509err(X509_F_X509_NAME_CANON, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    for (i = 0; i < sk_X509_NAME_ENTRY_num(a->entries); i++) {
+        entry = sk_X509_NAME_ENTRY_value(a->entries, i);
+        if (entry->set != set) {
+            entries = sk_X509_NAME_ENTRY_new_null();
+            if (entries == NULL)
+                goto err;
+            if (!sk_STACK_OF_X509_NAME_ENTRY_push(intname, entries)) {
+                sk_X509_NAME_ENTRY_free(entries);
+                X509err(X509_F_X509_NAME_CANON, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            set = entry->set;
+        }
+        tmpentry = X509_NAME_ENTRY_new();
+        if (tmpentry == NULL) {
+            X509err(X509_F_X509_NAME_CANON, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        tmpentry->object = OBJ_dup(entry->object);
+        if (tmpentry->object == NULL) {
+            X509err(X509_F_X509_NAME_CANON, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        if (!asn1_string_canon(tmpentry->value, entry->value))
+            goto err;
+        if (!sk_X509_NAME_ENTRY_push(entries, tmpentry)) {
+            X509err(X509_F_X509_NAME_CANON, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        tmpentry = NULL;
+    }
+
+    /* Finally generate encoding */
+    len = i2d_name_canon(intname, NULL);
+    if (len < 0)
+        goto err;
+    a->canon_enclen = len;
+
+    p = OPENSSL_malloc(a->canon_enclen);
+    if (p == NULL) {
+        X509err(X509_F_X509_NAME_CANON, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    a->canon_enc = p;
+
+    i2d_name_canon(intname, &p);
+
+    ret = 1;
+
+ err:
+    X509_NAME_ENTRY_free(tmpentry);
+    sk_STACK_OF_X509_NAME_ENTRY_pop_free(intname,
+                                         local_sk_X509_NAME_ENTRY_pop_free);
+    return ret;
+}
+
+/* Bitmap of all the types of string that will be canonicalized. */
+
+#define ASN1_MASK_CANON \
+        (B_ASN1_UTF8STRING | B_ASN1_BMPSTRING | B_ASN1_UNIVERSALSTRING \
+        | B_ASN1_PRINTABLESTRING | B_ASN1_T61STRING | B_ASN1_IA5STRING \
+        | B_ASN1_VISIBLESTRING)
+
+static int asn1_string_canon(ASN1_STRING *out, const ASN1_STRING *in)
+{
+    unsigned char *to, *from;
+    int len, i;
+
+    /* If type not in bitmask just copy string across */
+    if (!(ASN1_tag2bit(in->type) & ASN1_MASK_CANON)) {
+        if (!ASN1_STRING_copy(out, in))
+            return 0;
+        return 1;
+    }
+
+    out->type = V_ASN1_UTF8STRING;
+    out->length = ASN1_STRING_to_UTF8(&out->data, in);
+    if (out->length == -1)
+        return 0;
+
+    to = out->data;
+    from = to;
+
+    len = out->length;
+
+    /*
+     * Convert string in place to canonical form. Ultimately we may need to
+     * handle a wider range of characters but for now ignore anything with
+     * MSB set and rely on the ossl_isspace() to fail on bad characters without
+     * needing isascii or range checks as well.
+     */
+
+    /* Ignore leading spaces */
+    while (len > 0 && ossl_isspace(*from)) {
+        from++;
+        len--;
+    }
+
+    to = from + len;
+
+    /* Ignore trailing spaces */
+    while (len > 0 && ossl_isspace(to[-1])) {
+        to--;
+        len--;
+    }
+
+    to = out->data;
+
+    i = 0;
+    while (i < len) {
+        /* If not ASCII set just copy across */
+        if (!ossl_isascii(*from)) {
+            *to++ = *from++;
+            i++;
+        }
+        /* Collapse multiple spaces */
+        else if (ossl_isspace(*from)) {
+            /* Copy one space across */
+            *to++ = ' ';
+            /*
+             * Ignore subsequent spaces. Note: don't need to check len here
+             * because we know the last character is a non-space so we can't
+             * overflow.
+             */
+            do {
+                from++;
+                i++;
+            }
+            while (ossl_isspace(*from));
+        } else {
+            *to++ = ossl_tolower(*from);
+            from++;
+            i++;
+        }
+    }
+
+    out->length = to - out->data;
+
+    return 1;
+
+}
+
+static int i2d_name_canon(STACK_OF(STACK_OF_X509_NAME_ENTRY) * _intname,
+                          unsigned char **in)
+{
+    int i, len, ltmp;
+    ASN1_VALUE *v;
+    STACK_OF(ASN1_VALUE) *intname = (STACK_OF(ASN1_VALUE) *)_intname;
+
+    len = 0;
+    for (i = 0; i < sk_ASN1_VALUE_num(intname); i++) {
+        v = sk_ASN1_VALUE_value(intname, i);
+        ltmp = ASN1_item_ex_i2d(&v, in,
+                                ASN1_ITEM_rptr(X509_NAME_ENTRIES), -1, -1);
+        if (ltmp < 0)
+            return ltmp;
+        len += ltmp;
+    }
+    return len;
+}
+
+int X509_NAME_set(X509_NAME **xn, X509_NAME *name)
+{
+    if (*xn == name)
+        return *xn != NULL;
+    if ((name = X509_NAME_dup(name)) == NULL)
+        return 0;
+    X509_NAME_free(*xn);
+    *xn = name;
+    return 1;
+}
+
+int X509_NAME_print(BIO *bp, const X509_NAME *name, int obase)
+{
+    char *s, *c, *b;
+    int l, i;
+
+    l = 80 - 2 - obase;
+
+    b = X509_NAME_oneline(name, NULL, 0);
+    if (!b)
+        return 0;
+    if (!*b) {
+        OPENSSL_free(b);
+        return 1;
+    }
+    s = b + 1;                  /* skip the first slash */
+
+    c = s;
+    for (;;) {
+        if (((*s == '/') &&
+             (ossl_isupper(s[1]) && ((s[2] == '=') ||
+                                (ossl_isupper(s[2]) && (s[3] == '='))
+              ))) || (*s == '\0'))
+        {
+            i = s - c;
+            if (BIO_write(bp, c, i) != i)
+                goto err;
+            c = s + 1;          /* skip following slash */
+            if (*s != '\0') {
+                if (BIO_write(bp, ", ", 2) != 2)
+                    goto err;
+            }
+            l--;
+        }
+        if (*s == '\0')
+            break;
+        s++;
+        l--;
+    }
+
+    OPENSSL_free(b);
+    return 1;
+ err:
+    X509err(X509_F_X509_NAME_PRINT, ERR_R_BUF_LIB);
+    OPENSSL_free(b);
+    return 0;
+}
+
+int X509_NAME_get0_der(X509_NAME *nm, const unsigned char **pder,
+                       size_t *pderlen)
+{
+    /* Make sure encoding is valid */
+    if (i2d_X509_NAME(nm, NULL) <= 0)
+        return 0;
+    if (pder != NULL)
+        *pder = (unsigned char *)nm->bytes->data;
+    if (pderlen != NULL)
+        *pderlen = nm->bytes->length;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_pubkey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_pubkey.c
new file mode 100644
index 000000000..1c87b8268
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_pubkey.c
@@ -0,0 +1,375 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include "internal/asn1_int.h"
+#include "internal/evp_int.h"
+#include "internal/x509_int.h"
+#include <openssl/rsa.h>
+#include <openssl/dsa.h>
+
+struct X509_pubkey_st {
+    X509_ALGOR *algor;
+    ASN1_BIT_STRING *public_key;
+    EVP_PKEY *pkey;
+};
+
+static int x509_pubkey_decode(EVP_PKEY **pk, X509_PUBKEY *key);
+
+/* Minor tweak to operation: free up EVP_PKEY */
+static int pubkey_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                     void *exarg)
+{
+    if (operation == ASN1_OP_FREE_POST) {
+        X509_PUBKEY *pubkey = (X509_PUBKEY *)*pval;
+        EVP_PKEY_free(pubkey->pkey);
+    } else if (operation == ASN1_OP_D2I_POST) {
+        /* Attempt to decode public key and cache in pubkey structure. */
+        X509_PUBKEY *pubkey = (X509_PUBKEY *)*pval;
+        EVP_PKEY_free(pubkey->pkey);
+        pubkey->pkey = NULL;
+        /*
+         * Opportunistically decode the key but remove any non fatal errors
+         * from the queue. Subsequent explicit attempts to decode/use the key
+         * will return an appropriate error.
+         */
+        ERR_set_mark();
+        if (x509_pubkey_decode(&pubkey->pkey, pubkey) == -1)
+            return 0;
+        ERR_pop_to_mark();
+    }
+    return 1;
+}
+
+ASN1_SEQUENCE_cb(X509_PUBKEY, pubkey_cb) = {
+        ASN1_SIMPLE(X509_PUBKEY, algor, X509_ALGOR),
+        ASN1_SIMPLE(X509_PUBKEY, public_key, ASN1_BIT_STRING)
+} ASN1_SEQUENCE_END_cb(X509_PUBKEY, X509_PUBKEY)
+
+IMPLEMENT_ASN1_FUNCTIONS(X509_PUBKEY)
+
+int X509_PUBKEY_set(X509_PUBKEY **x, EVP_PKEY *pkey)
+{
+    X509_PUBKEY *pk = NULL;
+
+    if (x == NULL)
+        return 0;
+
+    if ((pk = X509_PUBKEY_new()) == NULL)
+        goto error;
+
+    if (pkey->ameth) {
+        if (pkey->ameth->pub_encode) {
+            if (!pkey->ameth->pub_encode(pk, pkey)) {
+                X509err(X509_F_X509_PUBKEY_SET,
+                        X509_R_PUBLIC_KEY_ENCODE_ERROR);
+                goto error;
+            }
+        } else {
+            X509err(X509_F_X509_PUBKEY_SET, X509_R_METHOD_NOT_SUPPORTED);
+            goto error;
+        }
+    } else {
+        X509err(X509_F_X509_PUBKEY_SET, X509_R_UNSUPPORTED_ALGORITHM);
+        goto error;
+    }
+
+    X509_PUBKEY_free(*x);
+    *x = pk;
+    pk->pkey = pkey;
+    EVP_PKEY_up_ref(pkey);
+    return 1;
+
+ error:
+    X509_PUBKEY_free(pk);
+    return 0;
+}
+
+/*
+ * Attempt to decode a public key.
+ * Returns 1 on success, 0 for a decode failure and -1 for a fatal
+ * error e.g. malloc failure.
+ */
+
+
+static int x509_pubkey_decode(EVP_PKEY **ppkey, X509_PUBKEY *key)
+{
+    EVP_PKEY *pkey = EVP_PKEY_new();
+
+    if (pkey == NULL) {
+        X509err(X509_F_X509_PUBKEY_DECODE, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+
+    if (!EVP_PKEY_set_type(pkey, OBJ_obj2nid(key->algor->algorithm))) {
+        X509err(X509_F_X509_PUBKEY_DECODE, X509_R_UNSUPPORTED_ALGORITHM);
+        goto error;
+    }
+
+    if (pkey->ameth->pub_decode) {
+        /*
+         * Treat any failure of pub_decode as a decode error. In
+         * future we could have different return codes for decode
+         * errors and fatal errors such as malloc failure.
+         */
+        if (!pkey->ameth->pub_decode(pkey, key)) {
+            X509err(X509_F_X509_PUBKEY_DECODE, X509_R_PUBLIC_KEY_DECODE_ERROR);
+            goto error;
+        }
+    } else {
+        X509err(X509_F_X509_PUBKEY_DECODE, X509_R_METHOD_NOT_SUPPORTED);
+        goto error;
+    }
+
+    *ppkey = pkey;
+    return 1;
+
+ error:
+    EVP_PKEY_free(pkey);
+    return 0;
+}
+
+EVP_PKEY *X509_PUBKEY_get0(X509_PUBKEY *key)
+{
+    EVP_PKEY *ret = NULL;
+
+    if (key == NULL || key->public_key == NULL)
+        return NULL;
+
+    if (key->pkey != NULL)
+        return key->pkey;
+
+    /*
+     * When the key ASN.1 is initially parsed an attempt is made to
+     * decode the public key and cache the EVP_PKEY structure. If this
+     * operation fails the cached value will be NULL. Parsing continues
+     * to allow parsing of unknown key types or unsupported forms.
+     * We repeat the decode operation so the appropriate errors are left
+     * in the queue.
+     */
+    x509_pubkey_decode(&ret, key);
+    /* If decode doesn't fail something bad happened */
+    if (ret != NULL) {
+        X509err(X509_F_X509_PUBKEY_GET0, ERR_R_INTERNAL_ERROR);
+        EVP_PKEY_free(ret);
+    }
+
+    return NULL;
+}
+
+EVP_PKEY *X509_PUBKEY_get(X509_PUBKEY *key)
+{
+    EVP_PKEY *ret = X509_PUBKEY_get0(key);
+    if (ret != NULL)
+        EVP_PKEY_up_ref(ret);
+    return ret;
+}
+
+/*
+ * Now two pseudo ASN1 routines that take an EVP_PKEY structure and encode or
+ * decode as X509_PUBKEY
+ */
+
+EVP_PKEY *d2i_PUBKEY(EVP_PKEY **a, const unsigned char **pp, long length)
+{
+    X509_PUBKEY *xpk;
+    EVP_PKEY *pktmp;
+    const unsigned char *q;
+    q = *pp;
+    xpk = d2i_X509_PUBKEY(NULL, &q, length);
+    if (!xpk)
+        return NULL;
+    pktmp = X509_PUBKEY_get(xpk);
+    X509_PUBKEY_free(xpk);
+    if (!pktmp)
+        return NULL;
+    *pp = q;
+    if (a) {
+        EVP_PKEY_free(*a);
+        *a = pktmp;
+    }
+    return pktmp;
+}
+
+int i2d_PUBKEY(EVP_PKEY *a, unsigned char **pp)
+{
+    X509_PUBKEY *xpk = NULL;
+    int ret;
+    if (!a)
+        return 0;
+    if (!X509_PUBKEY_set(&xpk, a))
+        return -1;
+    ret = i2d_X509_PUBKEY(xpk, pp);
+    X509_PUBKEY_free(xpk);
+    return ret;
+}
+
+/*
+ * The following are equivalents but which return RSA and DSA keys
+ */
+#ifndef OPENSSL_NO_RSA
+RSA *d2i_RSA_PUBKEY(RSA **a, const unsigned char **pp, long length)
+{
+    EVP_PKEY *pkey;
+    RSA *key;
+    const unsigned char *q;
+    q = *pp;
+    pkey = d2i_PUBKEY(NULL, &q, length);
+    if (!pkey)
+        return NULL;
+    key = EVP_PKEY_get1_RSA(pkey);
+    EVP_PKEY_free(pkey);
+    if (!key)
+        return NULL;
+    *pp = q;
+    if (a) {
+        RSA_free(*a);
+        *a = key;
+    }
+    return key;
+}
+
+int i2d_RSA_PUBKEY(RSA *a, unsigned char **pp)
+{
+    EVP_PKEY *pktmp;
+    int ret;
+    if (!a)
+        return 0;
+    pktmp = EVP_PKEY_new();
+    if (pktmp == NULL) {
+        ASN1err(ASN1_F_I2D_RSA_PUBKEY, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+    EVP_PKEY_set1_RSA(pktmp, a);
+    ret = i2d_PUBKEY(pktmp, pp);
+    EVP_PKEY_free(pktmp);
+    return ret;
+}
+#endif
+
+#ifndef OPENSSL_NO_DSA
+DSA *d2i_DSA_PUBKEY(DSA **a, const unsigned char **pp, long length)
+{
+    EVP_PKEY *pkey;
+    DSA *key;
+    const unsigned char *q;
+    q = *pp;
+    pkey = d2i_PUBKEY(NULL, &q, length);
+    if (!pkey)
+        return NULL;
+    key = EVP_PKEY_get1_DSA(pkey);
+    EVP_PKEY_free(pkey);
+    if (!key)
+        return NULL;
+    *pp = q;
+    if (a) {
+        DSA_free(*a);
+        *a = key;
+    }
+    return key;
+}
+
+int i2d_DSA_PUBKEY(DSA *a, unsigned char **pp)
+{
+    EVP_PKEY *pktmp;
+    int ret;
+    if (!a)
+        return 0;
+    pktmp = EVP_PKEY_new();
+    if (pktmp == NULL) {
+        ASN1err(ASN1_F_I2D_DSA_PUBKEY, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+    EVP_PKEY_set1_DSA(pktmp, a);
+    ret = i2d_PUBKEY(pktmp, pp);
+    EVP_PKEY_free(pktmp);
+    return ret;
+}
+#endif
+
+#ifndef OPENSSL_NO_EC
+EC_KEY *d2i_EC_PUBKEY(EC_KEY **a, const unsigned char **pp, long length)
+{
+    EVP_PKEY *pkey;
+    EC_KEY *key;
+    const unsigned char *q;
+    q = *pp;
+    pkey = d2i_PUBKEY(NULL, &q, length);
+    if (!pkey)
+        return NULL;
+    key = EVP_PKEY_get1_EC_KEY(pkey);
+    EVP_PKEY_free(pkey);
+    if (!key)
+        return NULL;
+    *pp = q;
+    if (a) {
+        EC_KEY_free(*a);
+        *a = key;
+    }
+    return key;
+}
+
+int i2d_EC_PUBKEY(EC_KEY *a, unsigned char **pp)
+{
+    EVP_PKEY *pktmp;
+    int ret;
+    if (!a)
+        return 0;
+    if ((pktmp = EVP_PKEY_new()) == NULL) {
+        ASN1err(ASN1_F_I2D_EC_PUBKEY, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+    EVP_PKEY_set1_EC_KEY(pktmp, a);
+    ret = i2d_PUBKEY(pktmp, pp);
+    EVP_PKEY_free(pktmp);
+    return ret;
+}
+#endif
+
+int X509_PUBKEY_set0_param(X509_PUBKEY *pub, ASN1_OBJECT *aobj,
+                           int ptype, void *pval,
+                           unsigned char *penc, int penclen)
+{
+    if (!X509_ALGOR_set0(pub->algor, aobj, ptype, pval))
+        return 0;
+    if (penc) {
+        OPENSSL_free(pub->public_key->data);
+        pub->public_key->data = penc;
+        pub->public_key->length = penclen;
+        /* Set number of unused bits to zero */
+        pub->public_key->flags &= ~(ASN1_STRING_FLAG_BITS_LEFT | 0x07);
+        pub->public_key->flags |= ASN1_STRING_FLAG_BITS_LEFT;
+    }
+    return 1;
+}
+
+int X509_PUBKEY_get0_param(ASN1_OBJECT **ppkalg,
+                           const unsigned char **pk, int *ppklen,
+                           X509_ALGOR **pa, X509_PUBKEY *pub)
+{
+    if (ppkalg)
+        *ppkalg = pub->algor->algorithm;
+    if (pk) {
+        *pk = pub->public_key->data;
+        *ppklen = pub->public_key->length;
+    }
+    if (pa)
+        *pa = pub->algor;
+    return 1;
+}
+
+ASN1_BIT_STRING *X509_get0_pubkey_bitstr(const X509 *x)
+{
+    if (x == NULL)
+        return NULL;
+    return x->cert_info.key->public_key;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_req.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_req.c
new file mode 100644
index 000000000..c2da95a73
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_req.c
@@ -0,0 +1,68 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+
+/*-
+ * X509_REQ_INFO is handled in an unusual way to get round
+ * invalid encodings. Some broken certificate requests don't
+ * encode the attributes field if it is empty. This is in
+ * violation of PKCS#10 but we need to tolerate it. We do
+ * this by making the attributes field OPTIONAL then using
+ * the callback to initialise it to an empty STACK.
+ *
+ * This means that the field will be correctly encoded unless
+ * we NULL out the field.
+ *
+ * As a result we no longer need the req_kludge field because
+ * the information is now contained in the attributes field:
+ * 1. If it is NULL then it's the invalid omission.
+ * 2. If it is empty it is the correct encoding.
+ * 3. If it is not empty then some attributes are present.
+ *
+ */
+
+static int rinf_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                   void *exarg)
+{
+    X509_REQ_INFO *rinf = (X509_REQ_INFO *)*pval;
+
+    if (operation == ASN1_OP_NEW_POST) {
+        rinf->attributes = sk_X509_ATTRIBUTE_new_null();
+        if (!rinf->attributes)
+            return 0;
+    }
+    return 1;
+}
+
+ASN1_SEQUENCE_enc(X509_REQ_INFO, enc, rinf_cb) = {
+        ASN1_SIMPLE(X509_REQ_INFO, version, ASN1_INTEGER),
+        ASN1_SIMPLE(X509_REQ_INFO, subject, X509_NAME),
+        ASN1_SIMPLE(X509_REQ_INFO, pubkey, X509_PUBKEY),
+        /* This isn't really OPTIONAL but it gets round invalid
+         * encodings
+         */
+        ASN1_IMP_SET_OF_OPT(X509_REQ_INFO, attributes, X509_ATTRIBUTE, 0)
+} ASN1_SEQUENCE_END_enc(X509_REQ_INFO, X509_REQ_INFO)
+
+IMPLEMENT_ASN1_FUNCTIONS(X509_REQ_INFO)
+
+ASN1_SEQUENCE_ref(X509_REQ, 0) = {
+        ASN1_EMBED(X509_REQ, req_info, X509_REQ_INFO),
+        ASN1_EMBED(X509_REQ, sig_alg, X509_ALGOR),
+        ASN1_SIMPLE(X509_REQ, signature, ASN1_BIT_STRING)
+} ASN1_SEQUENCE_END_ref(X509_REQ, X509_REQ)
+
+IMPLEMENT_ASN1_FUNCTIONS(X509_REQ)
+
+IMPLEMENT_ASN1_DUP_FUNCTION(X509_REQ)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_x509.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_x509.c
new file mode 100644
index 000000000..afe59c46c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_x509.c
@@ -0,0 +1,247 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include "internal/x509_int.h"
+
+ASN1_SEQUENCE_enc(X509_CINF, enc, 0) = {
+        ASN1_EXP_OPT(X509_CINF, version, ASN1_INTEGER, 0),
+        ASN1_EMBED(X509_CINF, serialNumber, ASN1_INTEGER),
+        ASN1_EMBED(X509_CINF, signature, X509_ALGOR),
+        ASN1_SIMPLE(X509_CINF, issuer, X509_NAME),
+        ASN1_EMBED(X509_CINF, validity, X509_VAL),
+        ASN1_SIMPLE(X509_CINF, subject, X509_NAME),
+        ASN1_SIMPLE(X509_CINF, key, X509_PUBKEY),
+        ASN1_IMP_OPT(X509_CINF, issuerUID, ASN1_BIT_STRING, 1),
+        ASN1_IMP_OPT(X509_CINF, subjectUID, ASN1_BIT_STRING, 2),
+        ASN1_EXP_SEQUENCE_OF_OPT(X509_CINF, extensions, X509_EXTENSION, 3)
+} ASN1_SEQUENCE_END_enc(X509_CINF, X509_CINF)
+
+IMPLEMENT_ASN1_FUNCTIONS(X509_CINF)
+/* X509 top level structure needs a bit of customisation */
+
+extern void policy_cache_free(X509_POLICY_CACHE *cache);
+
+static int x509_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                   void *exarg)
+{
+    X509 *ret = (X509 *)*pval;
+
+    switch (operation) {
+
+    case ASN1_OP_D2I_PRE:
+        CRYPTO_free_ex_data(CRYPTO_EX_INDEX_X509, ret, &ret->ex_data);
+        X509_CERT_AUX_free(ret->aux);
+        ASN1_OCTET_STRING_free(ret->skid);
+        AUTHORITY_KEYID_free(ret->akid);
+        CRL_DIST_POINTS_free(ret->crldp);
+        policy_cache_free(ret->policy_cache);
+        GENERAL_NAMES_free(ret->altname);
+        NAME_CONSTRAINTS_free(ret->nc);
+#ifndef OPENSSL_NO_RFC3779
+        sk_IPAddressFamily_pop_free(ret->rfc3779_addr, IPAddressFamily_free);
+        ASIdentifiers_free(ret->rfc3779_asid);
+#endif
+
+        /* fall thru */
+
+    case ASN1_OP_NEW_POST:
+        ret->ex_cached = 0;
+        ret->ex_kusage = 0;
+        ret->ex_xkusage = 0;
+        ret->ex_nscert = 0;
+        ret->ex_flags = 0;
+        ret->ex_pathlen = -1;
+        ret->ex_pcpathlen = -1;
+        ret->skid = NULL;
+        ret->akid = NULL;
+        ret->policy_cache = NULL;
+        ret->altname = NULL;
+        ret->nc = NULL;
+#ifndef OPENSSL_NO_RFC3779
+        ret->rfc3779_addr = NULL;
+        ret->rfc3779_asid = NULL;
+#endif
+        ret->aux = NULL;
+        ret->crldp = NULL;
+        if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_X509, ret, &ret->ex_data))
+            return 0;
+        break;
+
+    case ASN1_OP_FREE_POST:
+        CRYPTO_free_ex_data(CRYPTO_EX_INDEX_X509, ret, &ret->ex_data);
+        X509_CERT_AUX_free(ret->aux);
+        ASN1_OCTET_STRING_free(ret->skid);
+        AUTHORITY_KEYID_free(ret->akid);
+        CRL_DIST_POINTS_free(ret->crldp);
+        policy_cache_free(ret->policy_cache);
+        GENERAL_NAMES_free(ret->altname);
+        NAME_CONSTRAINTS_free(ret->nc);
+#ifndef OPENSSL_NO_RFC3779
+        sk_IPAddressFamily_pop_free(ret->rfc3779_addr, IPAddressFamily_free);
+        ASIdentifiers_free(ret->rfc3779_asid);
+#endif
+        break;
+
+    }
+
+    return 1;
+
+}
+
+ASN1_SEQUENCE_ref(X509, x509_cb) = {
+        ASN1_EMBED(X509, cert_info, X509_CINF),
+        ASN1_EMBED(X509, sig_alg, X509_ALGOR),
+        ASN1_EMBED(X509, signature, ASN1_BIT_STRING)
+} ASN1_SEQUENCE_END_ref(X509, X509)
+
+IMPLEMENT_ASN1_FUNCTIONS(X509)
+
+IMPLEMENT_ASN1_DUP_FUNCTION(X509)
+
+int X509_set_ex_data(X509 *r, int idx, void *arg)
+{
+    return CRYPTO_set_ex_data(&r->ex_data, idx, arg);
+}
+
+void *X509_get_ex_data(X509 *r, int idx)
+{
+    return CRYPTO_get_ex_data(&r->ex_data, idx);
+}
+
+/*
+ * X509_AUX ASN1 routines. X509_AUX is the name given to a certificate with
+ * extra info tagged on the end. Since these functions set how a certificate
+ * is trusted they should only be used when the certificate comes from a
+ * reliable source such as local storage.
+ */
+
+X509 *d2i_X509_AUX(X509 **a, const unsigned char **pp, long length)
+{
+    const unsigned char *q;
+    X509 *ret;
+    int freeret = 0;
+
+    /* Save start position */
+    q = *pp;
+
+    if (a == NULL || *a == NULL)
+        freeret = 1;
+    ret = d2i_X509(a, &q, length);
+    /* If certificate unreadable then forget it */
+    if (ret == NULL)
+        return NULL;
+    /* update length */
+    length -= q - *pp;
+    if (length > 0 && !d2i_X509_CERT_AUX(&ret->aux, &q, length))
+        goto err;
+    *pp = q;
+    return ret;
+ err:
+    if (freeret) {
+        X509_free(ret);
+        if (a)
+            *a = NULL;
+    }
+    return NULL;
+}
+
+/*
+ * Serialize trusted certificate to *pp or just return the required buffer
+ * length if pp == NULL.  We ultimately want to avoid modifying *pp in the
+ * error path, but that depends on similar hygiene in lower-level functions.
+ * Here we avoid compounding the problem.
+ */
+static int i2d_x509_aux_internal(X509 *a, unsigned char **pp)
+{
+    int length, tmplen;
+    unsigned char *start = pp != NULL ? *pp : NULL;
+
+    /*
+     * This might perturb *pp on error, but fixing that belongs in i2d_X509()
+     * not here.  It should be that if a == NULL length is zero, but we check
+     * both just in case.
+     */
+    length = i2d_X509(a, pp);
+    if (length <= 0 || a == NULL)
+        return length;
+
+    tmplen = i2d_X509_CERT_AUX(a->aux, pp);
+    if (tmplen < 0) {
+        if (start != NULL)
+            *pp = start;
+        return tmplen;
+    }
+    length += tmplen;
+
+    return length;
+}
+
+/*
+ * Serialize trusted certificate to *pp, or just return the required buffer
+ * length if pp == NULL.
+ *
+ * When pp is not NULL, but *pp == NULL, we allocate the buffer, but since
+ * we're writing two ASN.1 objects back to back, we can't have i2d_X509() do
+ * the allocation, nor can we allow i2d_X509_CERT_AUX() to increment the
+ * allocated buffer.
+ */
+int i2d_X509_AUX(X509 *a, unsigned char **pp)
+{
+    int length;
+    unsigned char *tmp;
+
+    /* Buffer provided by caller */
+    if (pp == NULL || *pp != NULL)
+        return i2d_x509_aux_internal(a, pp);
+
+    /* Obtain the combined length */
+    if ((length = i2d_x509_aux_internal(a, NULL)) <= 0)
+        return length;
+
+    /* Allocate requisite combined storage */
+    *pp = tmp = OPENSSL_malloc(length);
+    if (tmp == NULL) {
+        X509err(X509_F_I2D_X509_AUX, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+
+    /* Encode, but keep *pp at the originally malloced pointer */
+    length = i2d_x509_aux_internal(a, &tmp);
+    if (length <= 0) {
+        OPENSSL_free(*pp);
+        *pp = NULL;
+    }
+    return length;
+}
+
+int i2d_re_X509_tbs(X509 *x, unsigned char **pp)
+{
+    x->cert_info.enc.modified = 1;
+    return i2d_X509_CINF(&x->cert_info, pp);
+}
+
+void X509_get0_signature(const ASN1_BIT_STRING **psig,
+                         const X509_ALGOR **palg, const X509 *x)
+{
+    if (psig)
+        *psig = &x->signature;
+    if (palg)
+        *palg = &x->sig_alg;
+}
+
+int X509_get_signature_nid(const X509 *x)
+{
+    return OBJ_obj2nid(x->sig_alg.algorithm);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_x509a.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_x509a.c
new file mode 100644
index 000000000..8c9ad71d1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509/x_x509a.c
@@ -0,0 +1,169 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+
+/*
+ * X509_CERT_AUX routines. These are used to encode additional user
+ * modifiable data about a certificate. This data is appended to the X509
+ * encoding when the *_X509_AUX routines are used. This means that the
+ * "traditional" X509 routines will simply ignore the extra data.
+ */
+
+static X509_CERT_AUX *aux_get(X509 *x);
+
+ASN1_SEQUENCE(X509_CERT_AUX) = {
+        ASN1_SEQUENCE_OF_OPT(X509_CERT_AUX, trust, ASN1_OBJECT),
+        ASN1_IMP_SEQUENCE_OF_OPT(X509_CERT_AUX, reject, ASN1_OBJECT, 0),
+        ASN1_OPT(X509_CERT_AUX, alias, ASN1_UTF8STRING),
+        ASN1_OPT(X509_CERT_AUX, keyid, ASN1_OCTET_STRING),
+        ASN1_IMP_SEQUENCE_OF_OPT(X509_CERT_AUX, other, X509_ALGOR, 1)
+} ASN1_SEQUENCE_END(X509_CERT_AUX)
+
+IMPLEMENT_ASN1_FUNCTIONS(X509_CERT_AUX)
+
+int X509_trusted(const X509 *x)
+{
+    return x->aux ? 1 : 0;
+}
+
+static X509_CERT_AUX *aux_get(X509 *x)
+{
+    if (x == NULL)
+        return NULL;
+    if (x->aux == NULL && (x->aux = X509_CERT_AUX_new()) == NULL)
+        return NULL;
+    return x->aux;
+}
+
+int X509_alias_set1(X509 *x, const unsigned char *name, int len)
+{
+    X509_CERT_AUX *aux;
+    if (!name) {
+        if (!x || !x->aux || !x->aux->alias)
+            return 1;
+        ASN1_UTF8STRING_free(x->aux->alias);
+        x->aux->alias = NULL;
+        return 1;
+    }
+    if ((aux = aux_get(x)) == NULL)
+        return 0;
+    if (aux->alias == NULL && (aux->alias = ASN1_UTF8STRING_new()) == NULL)
+        return 0;
+    return ASN1_STRING_set(aux->alias, name, len);
+}
+
+int X509_keyid_set1(X509 *x, const unsigned char *id, int len)
+{
+    X509_CERT_AUX *aux;
+    if (!id) {
+        if (!x || !x->aux || !x->aux->keyid)
+            return 1;
+        ASN1_OCTET_STRING_free(x->aux->keyid);
+        x->aux->keyid = NULL;
+        return 1;
+    }
+    if ((aux = aux_get(x)) == NULL)
+        return 0;
+    if (aux->keyid == NULL
+        && (aux->keyid = ASN1_OCTET_STRING_new()) == NULL)
+        return 0;
+    return ASN1_STRING_set(aux->keyid, id, len);
+}
+
+unsigned char *X509_alias_get0(X509 *x, int *len)
+{
+    if (!x->aux || !x->aux->alias)
+        return NULL;
+    if (len)
+        *len = x->aux->alias->length;
+    return x->aux->alias->data;
+}
+
+unsigned char *X509_keyid_get0(X509 *x, int *len)
+{
+    if (!x->aux || !x->aux->keyid)
+        return NULL;
+    if (len)
+        *len = x->aux->keyid->length;
+    return x->aux->keyid->data;
+}
+
+int X509_add1_trust_object(X509 *x, const ASN1_OBJECT *obj)
+{
+    X509_CERT_AUX *aux;
+    ASN1_OBJECT *objtmp = NULL;
+    if (obj) {
+        objtmp = OBJ_dup(obj);
+        if (!objtmp)
+            return 0;
+    }
+    if ((aux = aux_get(x)) == NULL)
+        goto err;
+    if (aux->trust == NULL
+        && (aux->trust = sk_ASN1_OBJECT_new_null()) == NULL)
+        goto err;
+    if (!objtmp || sk_ASN1_OBJECT_push(aux->trust, objtmp))
+        return 1;
+ err:
+    ASN1_OBJECT_free(objtmp);
+    return 0;
+}
+
+int X509_add1_reject_object(X509 *x, const ASN1_OBJECT *obj)
+{
+    X509_CERT_AUX *aux;
+    ASN1_OBJECT *objtmp;
+    if ((objtmp = OBJ_dup(obj)) == NULL)
+        return 0;
+    if ((aux = aux_get(x)) == NULL)
+        goto err;
+    if (aux->reject == NULL
+        && (aux->reject = sk_ASN1_OBJECT_new_null()) == NULL)
+        goto err;
+    return sk_ASN1_OBJECT_push(aux->reject, objtmp);
+ err:
+    ASN1_OBJECT_free(objtmp);
+    return 0;
+}
+
+void X509_trust_clear(X509 *x)
+{
+    if (x->aux) {
+        sk_ASN1_OBJECT_pop_free(x->aux->trust, ASN1_OBJECT_free);
+        x->aux->trust = NULL;
+    }
+}
+
+void X509_reject_clear(X509 *x)
+{
+    if (x->aux) {
+        sk_ASN1_OBJECT_pop_free(x->aux->reject, ASN1_OBJECT_free);
+        x->aux->reject = NULL;
+    }
+}
+
+STACK_OF(ASN1_OBJECT) *X509_get0_trust_objects(X509 *x)
+{
+    if (x->aux != NULL)
+        return x->aux->trust;
+    return NULL;
+}
+
+STACK_OF(ASN1_OBJECT) *X509_get0_reject_objects(X509 *x)
+{
+    if (x->aux != NULL)
+        return x->aux->reject;
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/build.info b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/build.info
new file mode 100644
index 000000000..4ab648849
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/build.info
@@ -0,0 +1,8 @@
+LIBS=../../libcrypto
+SOURCE[../../libcrypto]=\
+  v3_bcons.c v3_bitst.c v3_conf.c v3_extku.c v3_ia5.c v3_lib.c \
+  v3_prn.c v3_utl.c v3err.c v3_genn.c v3_alt.c v3_skey.c v3_akey.c v3_pku.c \
+  v3_int.c v3_enum.c v3_sxnet.c v3_cpols.c v3_crld.c v3_purp.c v3_info.c \
+  v3_akeya.c v3_pmaps.c v3_pcons.c v3_ncons.c v3_pcia.c v3_pci.c \
+  pcy_cache.c pcy_node.c pcy_data.c pcy_map.c pcy_tree.c pcy_lib.c \
+  v3_asid.c v3_addr.c v3_tlsf.c v3_admis.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/ext_dat.h b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/ext_dat.h
new file mode 100644
index 000000000..762e264bb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/ext_dat.h
@@ -0,0 +1,25 @@
+/*
+ * Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+int name_cmp(const char *name, const char *cmp);
+
+extern const X509V3_EXT_METHOD v3_bcons, v3_nscert, v3_key_usage, v3_ext_ku;
+extern const X509V3_EXT_METHOD v3_pkey_usage_period, v3_sxnet, v3_info, v3_sinfo;
+extern const X509V3_EXT_METHOD v3_ns_ia5_list[8], v3_alt[3], v3_skey_id, v3_akey_id;
+extern const X509V3_EXT_METHOD v3_crl_num, v3_crl_reason, v3_crl_invdate;
+extern const X509V3_EXT_METHOD v3_delta_crl, v3_cpols, v3_crld, v3_freshest_crl;
+extern const X509V3_EXT_METHOD v3_ocsp_nonce, v3_ocsp_accresp, v3_ocsp_acutoff;
+extern const X509V3_EXT_METHOD v3_ocsp_crlid, v3_ocsp_nocheck, v3_ocsp_serviceloc;
+extern const X509V3_EXT_METHOD v3_crl_hold, v3_pci;
+extern const X509V3_EXT_METHOD v3_policy_mappings, v3_policy_constraints;
+extern const X509V3_EXT_METHOD v3_name_constraints, v3_inhibit_anyp, v3_idp;
+extern const X509V3_EXT_METHOD v3_addr, v3_asid;
+extern const X509V3_EXT_METHOD v3_ct_scts[3];
+extern const X509V3_EXT_METHOD v3_tls_feature;
+extern const X509V3_EXT_METHOD v3_ext_admission;
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_cache.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_cache.c
new file mode 100644
index 000000000..623870b1f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_cache.c
@@ -0,0 +1,224 @@
+/*
+ * Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include "internal/x509_int.h"
+
+#include "pcy_int.h"
+
+static int policy_data_cmp(const X509_POLICY_DATA *const *a,
+                           const X509_POLICY_DATA *const *b);
+static int policy_cache_set_int(long *out, ASN1_INTEGER *value);
+
+/*
+ * Set cache entry according to CertificatePolicies extension. Note: this
+ * destroys the passed CERTIFICATEPOLICIES structure.
+ */
+
+static int policy_cache_create(X509 *x,
+                               CERTIFICATEPOLICIES *policies, int crit)
+{
+    int i, num, ret = 0;
+    X509_POLICY_CACHE *cache = x->policy_cache;
+    X509_POLICY_DATA *data = NULL;
+    POLICYINFO *policy;
+
+    if ((num = sk_POLICYINFO_num(policies)) <= 0)
+        goto bad_policy;
+    cache->data = sk_X509_POLICY_DATA_new(policy_data_cmp);
+    if (cache->data == NULL) {
+        X509V3err(X509V3_F_POLICY_CACHE_CREATE, ERR_R_MALLOC_FAILURE);
+        goto just_cleanup;
+    }
+    for (i = 0; i < num; i++) {
+        policy = sk_POLICYINFO_value(policies, i);
+        data = policy_data_new(policy, NULL, crit);
+        if (data == NULL) {
+            X509V3err(X509V3_F_POLICY_CACHE_CREATE, ERR_R_MALLOC_FAILURE);
+            goto just_cleanup;
+        }
+        /*
+         * Duplicate policy OIDs are illegal: reject if matches found.
+         */
+        if (OBJ_obj2nid(data->valid_policy) == NID_any_policy) {
+            if (cache->anyPolicy) {
+                ret = -1;
+                goto bad_policy;
+            }
+            cache->anyPolicy = data;
+        } else if (sk_X509_POLICY_DATA_find(cache->data, data) >=0 ) {
+            ret = -1;
+            goto bad_policy;
+        } else if (!sk_X509_POLICY_DATA_push(cache->data, data)) {
+            X509V3err(X509V3_F_POLICY_CACHE_CREATE, ERR_R_MALLOC_FAILURE);
+            goto bad_policy;
+        }
+        data = NULL;
+    }
+    ret = 1;
+
+ bad_policy:
+    if (ret == -1)
+        x->ex_flags |= EXFLAG_INVALID_POLICY;
+    policy_data_free(data);
+ just_cleanup:
+    sk_POLICYINFO_pop_free(policies, POLICYINFO_free);
+    if (ret <= 0) {
+        sk_X509_POLICY_DATA_pop_free(cache->data, policy_data_free);
+        cache->data = NULL;
+    }
+    return ret;
+}
+
+static int policy_cache_new(X509 *x)
+{
+    X509_POLICY_CACHE *cache;
+    ASN1_INTEGER *ext_any = NULL;
+    POLICY_CONSTRAINTS *ext_pcons = NULL;
+    CERTIFICATEPOLICIES *ext_cpols = NULL;
+    POLICY_MAPPINGS *ext_pmaps = NULL;
+    int i;
+
+    if (x->policy_cache != NULL)
+        return 1;
+    cache = OPENSSL_malloc(sizeof(*cache));
+    if (cache == NULL) {
+        X509V3err(X509V3_F_POLICY_CACHE_NEW, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    cache->anyPolicy = NULL;
+    cache->data = NULL;
+    cache->any_skip = -1;
+    cache->explicit_skip = -1;
+    cache->map_skip = -1;
+
+    x->policy_cache = cache;
+
+    /*
+     * Handle requireExplicitPolicy *first*. Need to process this even if we
+     * don't have any policies.
+     */
+    ext_pcons = X509_get_ext_d2i(x, NID_policy_constraints, &i, NULL);
+
+    if (!ext_pcons) {
+        if (i != -1)
+            goto bad_cache;
+    } else {
+        if (!ext_pcons->requireExplicitPolicy
+            && !ext_pcons->inhibitPolicyMapping)
+            goto bad_cache;
+        if (!policy_cache_set_int(&cache->explicit_skip,
+                                  ext_pcons->requireExplicitPolicy))
+            goto bad_cache;
+        if (!policy_cache_set_int(&cache->map_skip,
+                                  ext_pcons->inhibitPolicyMapping))
+            goto bad_cache;
+    }
+
+    /* Process CertificatePolicies */
+
+    ext_cpols = X509_get_ext_d2i(x, NID_certificate_policies, &i, NULL);
+    /*
+     * If no CertificatePolicies extension or problem decoding then there is
+     * no point continuing because the valid policies will be NULL.
+     */
+    if (!ext_cpols) {
+        /* If not absent some problem with extension */
+        if (i != -1)
+            goto bad_cache;
+        return 1;
+    }
+
+    i = policy_cache_create(x, ext_cpols, i);
+
+    /* NB: ext_cpols freed by policy_cache_set_policies */
+
+    if (i <= 0)
+        return i;
+
+    ext_pmaps = X509_get_ext_d2i(x, NID_policy_mappings, &i, NULL);
+
+    if (!ext_pmaps) {
+        /* If not absent some problem with extension */
+        if (i != -1)
+            goto bad_cache;
+    } else {
+        i = policy_cache_set_mapping(x, ext_pmaps);
+        if (i <= 0)
+            goto bad_cache;
+    }
+
+    ext_any = X509_get_ext_d2i(x, NID_inhibit_any_policy, &i, NULL);
+
+    if (!ext_any) {
+        if (i != -1)
+            goto bad_cache;
+    } else if (!policy_cache_set_int(&cache->any_skip, ext_any))
+        goto bad_cache;
+    goto just_cleanup;
+
+ bad_cache:
+    x->ex_flags |= EXFLAG_INVALID_POLICY;
+
+ just_cleanup:
+    POLICY_CONSTRAINTS_free(ext_pcons);
+    ASN1_INTEGER_free(ext_any);
+    return 1;
+
+}
+
+void policy_cache_free(X509_POLICY_CACHE *cache)
+{
+    if (!cache)
+        return;
+    policy_data_free(cache->anyPolicy);
+    sk_X509_POLICY_DATA_pop_free(cache->data, policy_data_free);
+    OPENSSL_free(cache);
+}
+
+const X509_POLICY_CACHE *policy_cache_set(X509 *x)
+{
+
+    if (x->policy_cache == NULL) {
+        CRYPTO_THREAD_write_lock(x->lock);
+        policy_cache_new(x);
+        CRYPTO_THREAD_unlock(x->lock);
+    }
+
+    return x->policy_cache;
+
+}
+
+X509_POLICY_DATA *policy_cache_find_data(const X509_POLICY_CACHE *cache,
+                                         const ASN1_OBJECT *id)
+{
+    int idx;
+    X509_POLICY_DATA tmp;
+    tmp.valid_policy = (ASN1_OBJECT *)id;
+    idx = sk_X509_POLICY_DATA_find(cache->data, &tmp);
+    return sk_X509_POLICY_DATA_value(cache->data, idx);
+}
+
+static int policy_data_cmp(const X509_POLICY_DATA *const *a,
+                           const X509_POLICY_DATA *const *b)
+{
+    return OBJ_cmp((*a)->valid_policy, (*b)->valid_policy);
+}
+
+static int policy_cache_set_int(long *out, ASN1_INTEGER *value)
+{
+    if (value == NULL)
+        return 1;
+    if (value->type == V_ASN1_NEG_INTEGER)
+        return 0;
+    *out = ASN1_INTEGER_get(value);
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_data.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_data.c
new file mode 100644
index 000000000..bd3bb0e40
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_data.c
@@ -0,0 +1,81 @@
+/*
+ * Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+
+#include "pcy_int.h"
+
+/* Policy Node routines */
+
+void policy_data_free(X509_POLICY_DATA *data)
+{
+    if (data == NULL)
+        return;
+    ASN1_OBJECT_free(data->valid_policy);
+    /* Don't free qualifiers if shared */
+    if (!(data->flags & POLICY_DATA_FLAG_SHARED_QUALIFIERS))
+        sk_POLICYQUALINFO_pop_free(data->qualifier_set, POLICYQUALINFO_free);
+    sk_ASN1_OBJECT_pop_free(data->expected_policy_set, ASN1_OBJECT_free);
+    OPENSSL_free(data);
+}
+
+/*
+ * Create a data based on an existing policy. If 'id' is NULL use the OID in
+ * the policy, otherwise use 'id'. This behaviour covers the two types of
+ * data in RFC3280: data with from a CertificatePolicies extension and
+ * additional data with just the qualifiers of anyPolicy and ID from another
+ * source.
+ */
+
+X509_POLICY_DATA *policy_data_new(POLICYINFO *policy,
+                                  const ASN1_OBJECT *cid, int crit)
+{
+    X509_POLICY_DATA *ret;
+    ASN1_OBJECT *id;
+
+    if (policy == NULL && cid == NULL)
+        return NULL;
+    if (cid) {
+        id = OBJ_dup(cid);
+        if (id == NULL)
+            return NULL;
+    } else
+        id = NULL;
+    ret = OPENSSL_zalloc(sizeof(*ret));
+    if (ret == NULL) {
+        X509V3err(X509V3_F_POLICY_DATA_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    ret->expected_policy_set = sk_ASN1_OBJECT_new_null();
+    if (ret->expected_policy_set == NULL) {
+        OPENSSL_free(ret);
+        ASN1_OBJECT_free(id);
+        X509V3err(X509V3_F_POLICY_DATA_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if (crit)
+        ret->flags = POLICY_DATA_FLAG_CRITICAL;
+
+    if (id)
+        ret->valid_policy = id;
+    else {
+        ret->valid_policy = policy->policyid;
+        policy->policyid = NULL;
+    }
+
+    if (policy) {
+        ret->qualifier_set = policy->qualifiers;
+        policy->qualifiers = NULL;
+    }
+
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_int.h b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_int.h
new file mode 100644
index 000000000..5daf78de4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_int.h
@@ -0,0 +1,167 @@
+/*
+ * Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+typedef struct X509_POLICY_DATA_st X509_POLICY_DATA;
+
+DEFINE_STACK_OF(X509_POLICY_DATA)
+
+/* Internal structures */
+
+/*
+ * This structure and the field names correspond to the Policy 'node' of
+ * RFC3280. NB this structure contains no pointers to parent or child data:
+ * X509_POLICY_NODE contains that. This means that the main policy data can
+ * be kept static and cached with the certificate.
+ */
+
+struct X509_POLICY_DATA_st {
+    unsigned int flags;
+    /* Policy OID and qualifiers for this data */
+    ASN1_OBJECT *valid_policy;
+    STACK_OF(POLICYQUALINFO) *qualifier_set;
+    STACK_OF(ASN1_OBJECT) *expected_policy_set;
+};
+
+/* X509_POLICY_DATA flags values */
+
+/*
+ * This flag indicates the structure has been mapped using a policy mapping
+ * extension. If policy mapping is not active its references get deleted.
+ */
+
+#define POLICY_DATA_FLAG_MAPPED                 0x1
+
+/*
+ * This flag indicates the data doesn't correspond to a policy in Certificate
+ * Policies: it has been mapped to any policy.
+ */
+
+#define POLICY_DATA_FLAG_MAPPED_ANY             0x2
+
+/* AND with flags to see if any mapping has occurred */
+
+#define POLICY_DATA_FLAG_MAP_MASK               0x3
+
+/* qualifiers are shared and shouldn't be freed */
+
+#define POLICY_DATA_FLAG_SHARED_QUALIFIERS      0x4
+
+/* Parent node is an extra node and should be freed */
+
+#define POLICY_DATA_FLAG_EXTRA_NODE             0x8
+
+/* Corresponding CertificatePolicies is critical */
+
+#define POLICY_DATA_FLAG_CRITICAL               0x10
+
+/* This structure is cached with a certificate */
+
+struct X509_POLICY_CACHE_st {
+    /* anyPolicy data or NULL if no anyPolicy */
+    X509_POLICY_DATA *anyPolicy;
+    /* other policy data */
+    STACK_OF(X509_POLICY_DATA) *data;
+    /* If InhibitAnyPolicy present this is its value or -1 if absent. */
+    long any_skip;
+    /*
+     * If policyConstraints and requireExplicitPolicy present this is its
+     * value or -1 if absent.
+     */
+    long explicit_skip;
+    /*
+     * If policyConstraints and policyMapping present this is its value or -1
+     * if absent.
+     */
+    long map_skip;
+};
+
+/*
+ * #define POLICY_CACHE_FLAG_CRITICAL POLICY_DATA_FLAG_CRITICAL
+ */
+
+/* This structure represents the relationship between nodes */
+
+struct X509_POLICY_NODE_st {
+    /* node data this refers to */
+    const X509_POLICY_DATA *data;
+    /* Parent node */
+    X509_POLICY_NODE *parent;
+    /* Number of child nodes */
+    int nchild;
+};
+
+struct X509_POLICY_LEVEL_st {
+    /* Cert for this level */
+    X509 *cert;
+    /* nodes at this level */
+    STACK_OF(X509_POLICY_NODE) *nodes;
+    /* anyPolicy node */
+    X509_POLICY_NODE *anyPolicy;
+    /* Extra data */
+    /*
+     * STACK_OF(X509_POLICY_DATA) *extra_data;
+     */
+    unsigned int flags;
+};
+
+struct X509_POLICY_TREE_st {
+    /* This is the tree 'level' data */
+    X509_POLICY_LEVEL *levels;
+    int nlevel;
+    /*
+     * Extra policy data when additional nodes (not from the certificate) are
+     * required.
+     */
+    STACK_OF(X509_POLICY_DATA) *extra_data;
+    /* This is the authority constrained policy set */
+    STACK_OF(X509_POLICY_NODE) *auth_policies;
+    STACK_OF(X509_POLICY_NODE) *user_policies;
+    unsigned int flags;
+};
+
+/* Set if anyPolicy present in user policies */
+#define POLICY_FLAG_ANY_POLICY          0x2
+
+/* Useful macros */
+
+#define node_data_critical(data) (data->flags & POLICY_DATA_FLAG_CRITICAL)
+#define node_critical(node) node_data_critical(node->data)
+
+/* Internal functions */
+
+X509_POLICY_DATA *policy_data_new(POLICYINFO *policy, const ASN1_OBJECT *id,
+                                  int crit);
+void policy_data_free(X509_POLICY_DATA *data);
+
+X509_POLICY_DATA *policy_cache_find_data(const X509_POLICY_CACHE *cache,
+                                         const ASN1_OBJECT *id);
+int policy_cache_set_mapping(X509 *x, POLICY_MAPPINGS *maps);
+
+STACK_OF(X509_POLICY_NODE) *policy_node_cmp_new(void);
+
+void policy_cache_init(void);
+
+void policy_cache_free(X509_POLICY_CACHE *cache);
+
+X509_POLICY_NODE *level_find_node(const X509_POLICY_LEVEL *level,
+                                  const X509_POLICY_NODE *parent,
+                                  const ASN1_OBJECT *id);
+
+X509_POLICY_NODE *tree_find_sk(STACK_OF(X509_POLICY_NODE) *sk,
+                               const ASN1_OBJECT *id);
+
+X509_POLICY_NODE *level_add_node(X509_POLICY_LEVEL *level,
+                                 X509_POLICY_DATA *data,
+                                 X509_POLICY_NODE *parent,
+                                 X509_POLICY_TREE *tree);
+void policy_node_free(X509_POLICY_NODE *node);
+int policy_node_match(const X509_POLICY_LEVEL *lvl,
+                      const X509_POLICY_NODE *node, const ASN1_OBJECT *oid);
+
+const X509_POLICY_CACHE *policy_cache_set(X509 *x);
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_lib.c
new file mode 100644
index 000000000..67f7eafc6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_lib.c
@@ -0,0 +1,108 @@
+/*
+ * Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+
+#include "pcy_int.h"
+
+/* accessor functions */
+
+/* X509_POLICY_TREE stuff */
+
+int X509_policy_tree_level_count(const X509_POLICY_TREE *tree)
+{
+    if (!tree)
+        return 0;
+    return tree->nlevel;
+}
+
+X509_POLICY_LEVEL *X509_policy_tree_get0_level(const X509_POLICY_TREE *tree,
+                                               int i)
+{
+    if (!tree || (i < 0) || (i >= tree->nlevel))
+        return NULL;
+    return tree->levels + i;
+}
+
+STACK_OF(X509_POLICY_NODE) *X509_policy_tree_get0_policies(const
+                                                           X509_POLICY_TREE
+                                                           *tree)
+{
+    if (!tree)
+        return NULL;
+    return tree->auth_policies;
+}
+
+STACK_OF(X509_POLICY_NODE) *X509_policy_tree_get0_user_policies(const
+                                                                X509_POLICY_TREE
+                                                                *tree)
+{
+    if (!tree)
+        return NULL;
+    if (tree->flags & POLICY_FLAG_ANY_POLICY)
+        return tree->auth_policies;
+    else
+        return tree->user_policies;
+}
+
+/* X509_POLICY_LEVEL stuff */
+
+int X509_policy_level_node_count(X509_POLICY_LEVEL *level)
+{
+    int n;
+    if (!level)
+        return 0;
+    if (level->anyPolicy)
+        n = 1;
+    else
+        n = 0;
+    if (level->nodes)
+        n += sk_X509_POLICY_NODE_num(level->nodes);
+    return n;
+}
+
+X509_POLICY_NODE *X509_policy_level_get0_node(X509_POLICY_LEVEL *level, int i)
+{
+    if (!level)
+        return NULL;
+    if (level->anyPolicy) {
+        if (i == 0)
+            return level->anyPolicy;
+        i--;
+    }
+    return sk_X509_POLICY_NODE_value(level->nodes, i);
+}
+
+/* X509_POLICY_NODE stuff */
+
+const ASN1_OBJECT *X509_policy_node_get0_policy(const X509_POLICY_NODE *node)
+{
+    if (!node)
+        return NULL;
+    return node->data->valid_policy;
+}
+
+STACK_OF(POLICYQUALINFO) *X509_policy_node_get0_qualifiers(const
+                                                           X509_POLICY_NODE
+                                                           *node)
+{
+    if (!node)
+        return NULL;
+    return node->data->qualifier_set;
+}
+
+const X509_POLICY_NODE *X509_policy_node_get0_parent(const X509_POLICY_NODE
+                                                     *node)
+{
+    if (!node)
+        return NULL;
+    return node->parent;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_map.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_map.c
new file mode 100644
index 000000000..ab9dd21b7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_map.c
@@ -0,0 +1,81 @@
+/*
+ * Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include "internal/x509_int.h"
+
+#include "pcy_int.h"
+
+/*
+ * Set policy mapping entries in cache. Note: this modifies the passed
+ * POLICY_MAPPINGS structure
+ */
+
+int policy_cache_set_mapping(X509 *x, POLICY_MAPPINGS *maps)
+{
+    POLICY_MAPPING *map;
+    X509_POLICY_DATA *data;
+    X509_POLICY_CACHE *cache = x->policy_cache;
+    int i;
+    int ret = 0;
+    if (sk_POLICY_MAPPING_num(maps) == 0) {
+        ret = -1;
+        goto bad_mapping;
+    }
+    for (i = 0; i < sk_POLICY_MAPPING_num(maps); i++) {
+        map = sk_POLICY_MAPPING_value(maps, i);
+        /* Reject if map to or from anyPolicy */
+        if ((OBJ_obj2nid(map->subjectDomainPolicy) == NID_any_policy)
+            || (OBJ_obj2nid(map->issuerDomainPolicy) == NID_any_policy)) {
+            ret = -1;
+            goto bad_mapping;
+        }
+
+        /* Attempt to find matching policy data */
+        data = policy_cache_find_data(cache, map->issuerDomainPolicy);
+        /* If we don't have anyPolicy can't map */
+        if (data == NULL && !cache->anyPolicy)
+            continue;
+
+        /* Create a NODE from anyPolicy */
+        if (data == NULL) {
+            data = policy_data_new(NULL, map->issuerDomainPolicy,
+                                   cache->anyPolicy->flags
+                                   & POLICY_DATA_FLAG_CRITICAL);
+            if (data == NULL)
+                goto bad_mapping;
+            data->qualifier_set = cache->anyPolicy->qualifier_set;
+            /*
+             * map->issuerDomainPolicy = NULL;
+             */
+            data->flags |= POLICY_DATA_FLAG_MAPPED_ANY;
+            data->flags |= POLICY_DATA_FLAG_SHARED_QUALIFIERS;
+            if (!sk_X509_POLICY_DATA_push(cache->data, data)) {
+                policy_data_free(data);
+                goto bad_mapping;
+            }
+        } else
+            data->flags |= POLICY_DATA_FLAG_MAPPED;
+        if (!sk_ASN1_OBJECT_push(data->expected_policy_set,
+                                 map->subjectDomainPolicy))
+            goto bad_mapping;
+        map->subjectDomainPolicy = NULL;
+
+    }
+
+    ret = 1;
+ bad_mapping:
+    if (ret == -1)
+        x->ex_flags |= EXFLAG_INVALID_POLICY;
+    sk_POLICY_MAPPING_pop_free(maps, POLICY_MAPPING_free);
+    return ret;
+
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_node.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_node.c
new file mode 100644
index 000000000..1ffe98498
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_node.c
@@ -0,0 +1,147 @@
+/*
+ * Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/asn1.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/err.h>
+
+#include "pcy_int.h"
+
+static int node_cmp(const X509_POLICY_NODE *const *a,
+                    const X509_POLICY_NODE *const *b)
+{
+    return OBJ_cmp((*a)->data->valid_policy, (*b)->data->valid_policy);
+}
+
+STACK_OF(X509_POLICY_NODE) *policy_node_cmp_new(void)
+{
+    return sk_X509_POLICY_NODE_new(node_cmp);
+}
+
+X509_POLICY_NODE *tree_find_sk(STACK_OF(X509_POLICY_NODE) *nodes,
+                               const ASN1_OBJECT *id)
+{
+    X509_POLICY_DATA n;
+    X509_POLICY_NODE l;
+    int idx;
+
+    n.valid_policy = (ASN1_OBJECT *)id;
+    l.data = &n;
+
+    idx = sk_X509_POLICY_NODE_find(nodes, &l);
+    return sk_X509_POLICY_NODE_value(nodes, idx);
+
+}
+
+X509_POLICY_NODE *level_find_node(const X509_POLICY_LEVEL *level,
+                                  const X509_POLICY_NODE *parent,
+                                  const ASN1_OBJECT *id)
+{
+    X509_POLICY_NODE *node;
+    int i;
+    for (i = 0; i < sk_X509_POLICY_NODE_num(level->nodes); i++) {
+        node = sk_X509_POLICY_NODE_value(level->nodes, i);
+        if (node->parent == parent) {
+            if (!OBJ_cmp(node->data->valid_policy, id))
+                return node;
+        }
+    }
+    return NULL;
+}
+
+X509_POLICY_NODE *level_add_node(X509_POLICY_LEVEL *level,
+                                 X509_POLICY_DATA *data,
+                                 X509_POLICY_NODE *parent,
+                                 X509_POLICY_TREE *tree)
+{
+    X509_POLICY_NODE *node;
+
+    node = OPENSSL_zalloc(sizeof(*node));
+    if (node == NULL) {
+        X509V3err(X509V3_F_LEVEL_ADD_NODE, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    node->data = data;
+    node->parent = parent;
+    if (level) {
+        if (OBJ_obj2nid(data->valid_policy) == NID_any_policy) {
+            if (level->anyPolicy)
+                goto node_error;
+            level->anyPolicy = node;
+        } else {
+
+            if (level->nodes == NULL)
+                level->nodes = policy_node_cmp_new();
+            if (level->nodes == NULL) {
+                X509V3err(X509V3_F_LEVEL_ADD_NODE, ERR_R_MALLOC_FAILURE);
+                goto node_error;
+            }
+            if (!sk_X509_POLICY_NODE_push(level->nodes, node)) {
+                X509V3err(X509V3_F_LEVEL_ADD_NODE, ERR_R_MALLOC_FAILURE);
+                goto node_error;
+            }
+        }
+    }
+
+    if (tree) {
+        if (tree->extra_data == NULL)
+            tree->extra_data = sk_X509_POLICY_DATA_new_null();
+        if (tree->extra_data == NULL){
+            X509V3err(X509V3_F_LEVEL_ADD_NODE, ERR_R_MALLOC_FAILURE);
+            goto node_error;
+        }
+        if (!sk_X509_POLICY_DATA_push(tree->extra_data, data)) {
+            X509V3err(X509V3_F_LEVEL_ADD_NODE, ERR_R_MALLOC_FAILURE);
+            goto node_error;
+        }
+    }
+
+    if (parent)
+        parent->nchild++;
+
+    return node;
+
+ node_error:
+    policy_node_free(node);
+    return NULL;
+}
+
+void policy_node_free(X509_POLICY_NODE *node)
+{
+    OPENSSL_free(node);
+}
+
+/*
+ * See if a policy node matches a policy OID. If mapping enabled look through
+ * expected policy set otherwise just valid policy.
+ */
+
+int policy_node_match(const X509_POLICY_LEVEL *lvl,
+                      const X509_POLICY_NODE *node, const ASN1_OBJECT *oid)
+{
+    int i;
+    ASN1_OBJECT *policy_oid;
+    const X509_POLICY_DATA *x = node->data;
+
+    if ((lvl->flags & X509_V_FLAG_INHIBIT_MAP)
+        || !(x->flags & POLICY_DATA_FLAG_MAP_MASK)) {
+        if (!OBJ_cmp(x->valid_policy, oid))
+            return 1;
+        return 0;
+    }
+
+    for (i = 0; i < sk_ASN1_OBJECT_num(x->expected_policy_set); i++) {
+        policy_oid = sk_ASN1_OBJECT_value(x->expected_policy_set, i);
+        if (!OBJ_cmp(policy_oid, oid))
+            return 1;
+    }
+    return 0;
+
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_tree.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_tree.c
new file mode 100644
index 000000000..87f51d001
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/pcy_tree.c
@@ -0,0 +1,703 @@
+/*
+ * Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+
+#include "pcy_int.h"
+
+/*
+ * Enable this to print out the complete policy tree at various point during
+ * evaluation.
+ */
+
+/*
+ * #define OPENSSL_POLICY_DEBUG
+ */
+
+#ifdef OPENSSL_POLICY_DEBUG
+
+static void expected_print(BIO *err, X509_POLICY_LEVEL *lev,
+                           X509_POLICY_NODE *node, int indent)
+{
+    if ((lev->flags & X509_V_FLAG_INHIBIT_MAP)
+        || !(node->data->flags & POLICY_DATA_FLAG_MAP_MASK))
+        BIO_puts(err, "  Not Mapped\n");
+    else {
+        int i;
+        STACK_OF(ASN1_OBJECT) *pset = node->data->expected_policy_set;
+        ASN1_OBJECT *oid;
+        BIO_puts(err, "  Expected: ");
+        for (i = 0; i < sk_ASN1_OBJECT_num(pset); i++) {
+            oid = sk_ASN1_OBJECT_value(pset, i);
+            if (i)
+                BIO_puts(err, ", ");
+            i2a_ASN1_OBJECT(err, oid);
+        }
+        BIO_puts(err, "\n");
+    }
+}
+
+static void tree_print(char *str, X509_POLICY_TREE *tree,
+                       X509_POLICY_LEVEL *curr)
+{
+    BIO *err = BIO_new_fp(stderr, BIO_NOCLOSE);
+    X509_POLICY_LEVEL *plev;
+
+    if (err == NULL)
+        return;
+    if (!curr)
+        curr = tree->levels + tree->nlevel;
+    else
+        curr++;
+
+    BIO_printf(err, "Level print after %s\n", str);
+    BIO_printf(err, "Printing Up to Level %ld\n", curr - tree->levels);
+    for (plev = tree->levels; plev != curr; plev++) {
+        int i;
+
+        BIO_printf(err, "Level %ld, flags = %x\n",
+                   (long)(plev - tree->levels), plev->flags);
+        for (i = 0; i < sk_X509_POLICY_NODE_num(plev->nodes); i++) {
+            X509_POLICY_NODE *node = sk_X509_POLICY_NODE_value(plev->nodes, i);
+
+            X509_POLICY_NODE_print(err, node, 2);
+            expected_print(err, plev, node, 2);
+            BIO_printf(err, "  Flags: %x\n", node->data->flags);
+        }
+        if (plev->anyPolicy)
+            X509_POLICY_NODE_print(err, plev->anyPolicy, 2);
+    }
+    BIO_free(err);
+}
+#endif
+
+/*-
+ * Return value: <= 0 on error, or positive bit mask:
+ *
+ * X509_PCY_TREE_VALID: valid tree
+ * X509_PCY_TREE_EMPTY: empty tree (including bare TA case)
+ * X509_PCY_TREE_EXPLICIT: explicit policy required
+ */
+static int tree_init(X509_POLICY_TREE **ptree, STACK_OF(X509) *certs,
+                     unsigned int flags)
+{
+    X509_POLICY_TREE *tree;
+    X509_POLICY_LEVEL *level;
+    const X509_POLICY_CACHE *cache;
+    X509_POLICY_DATA *data = NULL;
+    int ret = X509_PCY_TREE_VALID;
+    int n = sk_X509_num(certs) - 1; /* RFC5280 paths omit the TA */
+    int explicit_policy = (flags & X509_V_FLAG_EXPLICIT_POLICY) ? 0 : n+1;
+    int any_skip = (flags & X509_V_FLAG_INHIBIT_ANY) ? 0 : n+1;
+    int map_skip = (flags & X509_V_FLAG_INHIBIT_MAP) ? 0 : n+1;
+    int i;
+
+    *ptree = NULL;
+
+    /* Can't do anything with just a trust anchor */
+    if (n == 0)
+        return X509_PCY_TREE_EMPTY;
+
+    /*
+     * First setup the policy cache in all n non-TA certificates, this will be
+     * used in X509_verify_cert() which will invoke the verify callback for all
+     * certificates with invalid policy extensions.
+     */
+    for (i = n - 1; i >= 0; i--) {
+        X509 *x = sk_X509_value(certs, i);
+
+        /* Call for side-effect of computing hash and caching extensions */
+        X509_check_purpose(x, -1, 0);
+
+        /* If cache is NULL, likely ENOMEM: return immediately */
+        if (policy_cache_set(x) == NULL)
+            return X509_PCY_TREE_INTERNAL;
+    }
+
+    /*
+     * At this point check for invalid policies and required explicit policy.
+     * Note that the explicit_policy counter is a count-down to zero, with the
+     * requirement kicking in if and once it does that.  The counter is
+     * decremented for every non-self-issued certificate in the path, but may
+     * be further reduced by policy constraints in a non-leaf certificate.
+     *
+     * The ultimate policy set is the intersection of all the policies along
+     * the path, if we hit a certificate with an empty policy set, and explicit
+     * policy is required we're done.
+     */
+    for (i = n - 1;
+         i >= 0 && (explicit_policy > 0 || (ret & X509_PCY_TREE_EMPTY) == 0);
+         i--) {
+        X509 *x = sk_X509_value(certs, i);
+        uint32_t ex_flags = X509_get_extension_flags(x);
+
+        /* All the policies are already cached, we can return early */
+        if (ex_flags & EXFLAG_INVALID_POLICY)
+            return X509_PCY_TREE_INVALID;
+
+        /* Access the cache which we now know exists */
+        cache = policy_cache_set(x);
+
+        if ((ret & X509_PCY_TREE_VALID) && cache->data == NULL)
+            ret = X509_PCY_TREE_EMPTY;
+        if (explicit_policy > 0) {
+            if (!(ex_flags & EXFLAG_SI))
+                explicit_policy--;
+            if ((cache->explicit_skip >= 0)
+                && (cache->explicit_skip < explicit_policy))
+                explicit_policy = cache->explicit_skip;
+        }
+    }
+
+    if (explicit_policy == 0)
+        ret |= X509_PCY_TREE_EXPLICIT;
+    if ((ret & X509_PCY_TREE_VALID) == 0)
+        return ret;
+
+    /* If we get this far initialize the tree */
+    if ((tree = OPENSSL_zalloc(sizeof(*tree))) == NULL) {
+        X509V3err(X509V3_F_TREE_INIT, ERR_R_MALLOC_FAILURE);
+        return X509_PCY_TREE_INTERNAL;
+    }
+
+    /*
+     * http://tools.ietf.org/html/rfc5280#section-6.1.2, figure 3.
+     *
+     * The top level is implicitly for the trust anchor with valid expected
+     * policies of anyPolicy.  (RFC 5280 has the TA at depth 0 and the leaf at
+     * depth n, we have the leaf at depth 0 and the TA at depth n).
+     */
+    if ((tree->levels = OPENSSL_zalloc(sizeof(*tree->levels)*(n+1))) == NULL) {
+        OPENSSL_free(tree);
+        X509V3err(X509V3_F_TREE_INIT, ERR_R_MALLOC_FAILURE);
+        return X509_PCY_TREE_INTERNAL;
+    }
+    tree->nlevel = n+1;
+    level = tree->levels;
+    if ((data = policy_data_new(NULL, OBJ_nid2obj(NID_any_policy), 0)) == NULL)
+        goto bad_tree;
+    if (level_add_node(level, data, NULL, tree) == NULL) {
+        policy_data_free(data);
+        goto bad_tree;
+    }
+
+    /*
+     * In this pass initialize all the tree levels and whether anyPolicy and
+     * policy mapping are inhibited at each level.
+     */
+    for (i = n - 1; i >= 0; i--) {
+        X509 *x = sk_X509_value(certs, i);
+        uint32_t ex_flags = X509_get_extension_flags(x);
+
+        /* Access the cache which we now know exists */
+        cache = policy_cache_set(x);
+
+        X509_up_ref(x);
+        (++level)->cert = x;
+
+        if (!cache->anyPolicy)
+            level->flags |= X509_V_FLAG_INHIBIT_ANY;
+
+        /* Determine inhibit any and inhibit map flags */
+        if (any_skip == 0) {
+            /*
+             * Any matching allowed only if certificate is self issued and not
+             * the last in the chain.
+             */
+            if (!(ex_flags & EXFLAG_SI) || (i == 0))
+                level->flags |= X509_V_FLAG_INHIBIT_ANY;
+        } else {
+            if (!(ex_flags & EXFLAG_SI))
+                any_skip--;
+            if ((cache->any_skip >= 0) && (cache->any_skip < any_skip))
+                any_skip = cache->any_skip;
+        }
+
+        if (map_skip == 0)
+            level->flags |= X509_V_FLAG_INHIBIT_MAP;
+        else {
+            if (!(ex_flags & EXFLAG_SI))
+                map_skip--;
+            if ((cache->map_skip >= 0) && (cache->map_skip < map_skip))
+                map_skip = cache->map_skip;
+        }
+    }
+
+    *ptree = tree;
+    return ret;
+
+ bad_tree:
+    X509_policy_tree_free(tree);
+    return X509_PCY_TREE_INTERNAL;
+}
+
+/*
+ * Return value: 1 on success, 0 otherwise
+ */
+static int tree_link_matching_nodes(X509_POLICY_LEVEL *curr,
+                                    X509_POLICY_DATA *data)
+{
+    X509_POLICY_LEVEL *last = curr - 1;
+    int i, matched = 0;
+
+    /* Iterate through all in nodes linking matches */
+    for (i = 0; i < sk_X509_POLICY_NODE_num(last->nodes); i++) {
+        X509_POLICY_NODE *node = sk_X509_POLICY_NODE_value(last->nodes, i);
+
+        if (policy_node_match(last, node, data->valid_policy)) {
+            if (level_add_node(curr, data, node, NULL) == NULL)
+                return 0;
+            matched = 1;
+        }
+    }
+    if (!matched && last->anyPolicy) {
+        if (level_add_node(curr, data, last->anyPolicy, NULL) == NULL)
+            return 0;
+    }
+    return 1;
+}
+
+/*
+ * This corresponds to RFC3280 6.1.3(d)(1): link any data from
+ * CertificatePolicies onto matching parent or anyPolicy if no match.
+ *
+ * Return value: 1 on success, 0 otherwise.
+ */
+static int tree_link_nodes(X509_POLICY_LEVEL *curr,
+                           const X509_POLICY_CACHE *cache)
+{
+    int i;
+
+    for (i = 0; i < sk_X509_POLICY_DATA_num(cache->data); i++) {
+        X509_POLICY_DATA *data = sk_X509_POLICY_DATA_value(cache->data, i);
+
+        /* Look for matching nodes in previous level */
+        if (!tree_link_matching_nodes(curr, data))
+            return 0;
+    }
+    return 1;
+}
+
+/*
+ * This corresponds to RFC3280 6.1.3(d)(2): Create new data for any unmatched
+ * policies in the parent and link to anyPolicy.
+ *
+ * Return value: 1 on success, 0 otherwise.
+ */
+static int tree_add_unmatched(X509_POLICY_LEVEL *curr,
+                              const X509_POLICY_CACHE *cache,
+                              const ASN1_OBJECT *id,
+                              X509_POLICY_NODE *node, X509_POLICY_TREE *tree)
+{
+    X509_POLICY_DATA *data;
+
+    if (id == NULL)
+        id = node->data->valid_policy;
+    /*
+     * Create a new node with qualifiers from anyPolicy and id from unmatched
+     * node.
+     */
+    if ((data = policy_data_new(NULL, id, node_critical(node))) == NULL)
+        return 0;
+
+    /* Curr may not have anyPolicy */
+    data->qualifier_set = cache->anyPolicy->qualifier_set;
+    data->flags |= POLICY_DATA_FLAG_SHARED_QUALIFIERS;
+    if (level_add_node(curr, data, node, tree) == NULL) {
+        policy_data_free(data);
+        return 0;
+    }
+    return 1;
+}
+
+/*
+ * Return value: 1 on success, 0 otherwise.
+ */
+static int tree_link_unmatched(X509_POLICY_LEVEL *curr,
+                               const X509_POLICY_CACHE *cache,
+                               X509_POLICY_NODE *node, X509_POLICY_TREE *tree)
+{
+    const X509_POLICY_LEVEL *last = curr - 1;
+    int i;
+
+    if ((last->flags & X509_V_FLAG_INHIBIT_MAP)
+        || !(node->data->flags & POLICY_DATA_FLAG_MAPPED)) {
+        /* If no policy mapping: matched if one child present */
+        if (node->nchild)
+            return 1;
+        if (!tree_add_unmatched(curr, cache, NULL, node, tree))
+            return 0;
+        /* Add it */
+    } else {
+        /* If mapping: matched if one child per expected policy set */
+        STACK_OF(ASN1_OBJECT) *expset = node->data->expected_policy_set;
+        if (node->nchild == sk_ASN1_OBJECT_num(expset))
+            return 1;
+        /* Locate unmatched nodes */
+        for (i = 0; i < sk_ASN1_OBJECT_num(expset); i++) {
+            ASN1_OBJECT *oid = sk_ASN1_OBJECT_value(expset, i);
+            if (level_find_node(curr, node, oid))
+                continue;
+            if (!tree_add_unmatched(curr, cache, oid, node, tree))
+                return 0;
+        }
+
+    }
+    return 1;
+}
+
+/*
+ * Return value: 1 on success, 0 otherwise
+ */
+static int tree_link_any(X509_POLICY_LEVEL *curr,
+                         const X509_POLICY_CACHE *cache,
+                         X509_POLICY_TREE *tree)
+{
+    int i;
+    X509_POLICY_NODE *node;
+    X509_POLICY_LEVEL *last = curr - 1;
+
+    for (i = 0; i < sk_X509_POLICY_NODE_num(last->nodes); i++) {
+        node = sk_X509_POLICY_NODE_value(last->nodes, i);
+
+        if (!tree_link_unmatched(curr, cache, node, tree))
+            return 0;
+    }
+    /* Finally add link to anyPolicy */
+    if (last->anyPolicy &&
+        level_add_node(curr, cache->anyPolicy, last->anyPolicy, NULL) == NULL)
+        return 0;
+    return 1;
+}
+
+/*-
+ * Prune the tree: delete any child mapped child data on the current level then
+ * proceed up the tree deleting any data with no children. If we ever have no
+ * data on a level we can halt because the tree will be empty.
+ *
+ * Return value: <= 0 error, otherwise one of:
+ *
+ * X509_PCY_TREE_VALID: valid tree
+ * X509_PCY_TREE_EMPTY: empty tree
+ */
+static int tree_prune(X509_POLICY_TREE *tree, X509_POLICY_LEVEL *curr)
+{
+    STACK_OF(X509_POLICY_NODE) *nodes;
+    X509_POLICY_NODE *node;
+    int i;
+    nodes = curr->nodes;
+    if (curr->flags & X509_V_FLAG_INHIBIT_MAP) {
+        for (i = sk_X509_POLICY_NODE_num(nodes) - 1; i >= 0; i--) {
+            node = sk_X509_POLICY_NODE_value(nodes, i);
+            /* Delete any mapped data: see RFC3280 XXXX */
+            if (node->data->flags & POLICY_DATA_FLAG_MAP_MASK) {
+                node->parent->nchild--;
+                OPENSSL_free(node);
+                (void)sk_X509_POLICY_NODE_delete(nodes, i);
+            }
+        }
+    }
+
+    for (;;) {
+        --curr;
+        nodes = curr->nodes;
+        for (i = sk_X509_POLICY_NODE_num(nodes) - 1; i >= 0; i--) {
+            node = sk_X509_POLICY_NODE_value(nodes, i);
+            if (node->nchild == 0) {
+                node->parent->nchild--;
+                OPENSSL_free(node);
+                (void)sk_X509_POLICY_NODE_delete(nodes, i);
+            }
+        }
+        if (curr->anyPolicy && !curr->anyPolicy->nchild) {
+            if (curr->anyPolicy->parent)
+                curr->anyPolicy->parent->nchild--;
+            OPENSSL_free(curr->anyPolicy);
+            curr->anyPolicy = NULL;
+        }
+        if (curr == tree->levels) {
+            /* If we zapped anyPolicy at top then tree is empty */
+            if (!curr->anyPolicy)
+                return X509_PCY_TREE_EMPTY;
+            break;
+        }
+    }
+    return X509_PCY_TREE_VALID;
+}
+
+/*
+ * Return value: 1 on success, 0 otherwise.
+ */
+static int tree_add_auth_node(STACK_OF(X509_POLICY_NODE) **pnodes,
+                              X509_POLICY_NODE *pcy)
+{
+    if (*pnodes == NULL &&
+        (*pnodes = policy_node_cmp_new()) == NULL)
+        return 0;
+    if (sk_X509_POLICY_NODE_find(*pnodes, pcy) >= 0)
+        return 1;
+    return sk_X509_POLICY_NODE_push(*pnodes, pcy) != 0;
+}
+
+#define TREE_CALC_FAILURE 0
+#define TREE_CALC_OK_NOFREE 1
+#define TREE_CALC_OK_DOFREE 2
+
+/*-
+ * Calculate the authority set based on policy tree. The 'pnodes' parameter is
+ * used as a store for the set of policy nodes used to calculate the user set.
+ * If the authority set is not anyPolicy then pnodes will just point to the
+ * authority set. If however the authority set is anyPolicy then the set of
+ * valid policies (other than anyPolicy) is store in pnodes.
+ *
+ * Return value:
+ *  TREE_CALC_FAILURE on failure,
+ *  TREE_CALC_OK_NOFREE on success and pnodes need not be freed,
+ *  TREE_CALC_OK_DOFREE on success and pnodes needs to be freed
+ */
+static int tree_calculate_authority_set(X509_POLICY_TREE *tree,
+                                        STACK_OF(X509_POLICY_NODE) **pnodes)
+{
+    X509_POLICY_LEVEL *curr;
+    X509_POLICY_NODE *node, *anyptr;
+    STACK_OF(X509_POLICY_NODE) **addnodes;
+    int i, j;
+    curr = tree->levels + tree->nlevel - 1;
+
+    /* If last level contains anyPolicy set is anyPolicy */
+    if (curr->anyPolicy) {
+        if (!tree_add_auth_node(&tree->auth_policies, curr->anyPolicy))
+            return TREE_CALC_FAILURE;
+        addnodes = pnodes;
+    } else
+        /* Add policies to authority set */
+        addnodes = &tree->auth_policies;
+
+    curr = tree->levels;
+    for (i = 1; i < tree->nlevel; i++) {
+        /*
+         * If no anyPolicy node on this this level it can't appear on lower
+         * levels so end search.
+         */
+        if ((anyptr = curr->anyPolicy) == NULL)
+            break;
+        curr++;
+        for (j = 0; j < sk_X509_POLICY_NODE_num(curr->nodes); j++) {
+            node = sk_X509_POLICY_NODE_value(curr->nodes, j);
+            if ((node->parent == anyptr)
+                && !tree_add_auth_node(addnodes, node)) {
+                if (addnodes == pnodes) {
+                    sk_X509_POLICY_NODE_free(*pnodes);
+                    *pnodes = NULL;
+                }
+                return TREE_CALC_FAILURE;
+            }
+        }
+    }
+    if (addnodes == pnodes)
+        return TREE_CALC_OK_DOFREE;
+
+    *pnodes = tree->auth_policies;
+    return TREE_CALC_OK_NOFREE;
+}
+
+/*
+ * Return value: 1 on success, 0 otherwise.
+ */
+static int tree_calculate_user_set(X509_POLICY_TREE *tree,
+                                   STACK_OF(ASN1_OBJECT) *policy_oids,
+                                   STACK_OF(X509_POLICY_NODE) *auth_nodes)
+{
+    int i;
+    X509_POLICY_NODE *node;
+    ASN1_OBJECT *oid;
+    X509_POLICY_NODE *anyPolicy;
+    X509_POLICY_DATA *extra;
+
+    /*
+     * Check if anyPolicy present in authority constrained policy set: this
+     * will happen if it is a leaf node.
+     */
+    if (sk_ASN1_OBJECT_num(policy_oids) <= 0)
+        return 1;
+
+    anyPolicy = tree->levels[tree->nlevel - 1].anyPolicy;
+
+    for (i = 0; i < sk_ASN1_OBJECT_num(policy_oids); i++) {
+        oid = sk_ASN1_OBJECT_value(policy_oids, i);
+        if (OBJ_obj2nid(oid) == NID_any_policy) {
+            tree->flags |= POLICY_FLAG_ANY_POLICY;
+            return 1;
+        }
+    }
+
+    for (i = 0; i < sk_ASN1_OBJECT_num(policy_oids); i++) {
+        oid = sk_ASN1_OBJECT_value(policy_oids, i);
+        node = tree_find_sk(auth_nodes, oid);
+        if (!node) {
+            if (!anyPolicy)
+                continue;
+            /*
+             * Create a new node with policy ID from user set and qualifiers
+             * from anyPolicy.
+             */
+            extra = policy_data_new(NULL, oid, node_critical(anyPolicy));
+            if (extra == NULL)
+                return 0;
+            extra->qualifier_set = anyPolicy->data->qualifier_set;
+            extra->flags = POLICY_DATA_FLAG_SHARED_QUALIFIERS
+                | POLICY_DATA_FLAG_EXTRA_NODE;
+            node = level_add_node(NULL, extra, anyPolicy->parent, tree);
+        }
+        if (!tree->user_policies) {
+            tree->user_policies = sk_X509_POLICY_NODE_new_null();
+            if (!tree->user_policies)
+                return 1;
+        }
+        if (!sk_X509_POLICY_NODE_push(tree->user_policies, node))
+            return 0;
+    }
+    return 1;
+}
+
+/*-
+ * Return value: <= 0 error, otherwise one of:
+ *  X509_PCY_TREE_VALID: valid tree
+ *  X509_PCY_TREE_EMPTY: empty tree
+ * (see tree_prune()).
+ */
+static int tree_evaluate(X509_POLICY_TREE *tree)
+{
+    int ret, i;
+    X509_POLICY_LEVEL *curr = tree->levels + 1;
+    const X509_POLICY_CACHE *cache;
+
+    for (i = 1; i < tree->nlevel; i++, curr++) {
+        cache = policy_cache_set(curr->cert);
+        if (!tree_link_nodes(curr, cache))
+            return X509_PCY_TREE_INTERNAL;
+
+        if (!(curr->flags & X509_V_FLAG_INHIBIT_ANY)
+            && !tree_link_any(curr, cache, tree))
+            return X509_PCY_TREE_INTERNAL;
+#ifdef OPENSSL_POLICY_DEBUG
+        tree_print("before tree_prune()", tree, curr);
+#endif
+        ret = tree_prune(tree, curr);
+        if (ret != X509_PCY_TREE_VALID)
+            return ret;
+    }
+    return X509_PCY_TREE_VALID;
+}
+
+static void exnode_free(X509_POLICY_NODE *node)
+{
+    if (node->data && (node->data->flags & POLICY_DATA_FLAG_EXTRA_NODE))
+        OPENSSL_free(node);
+}
+
+void X509_policy_tree_free(X509_POLICY_TREE *tree)
+{
+    X509_POLICY_LEVEL *curr;
+    int i;
+
+    if (!tree)
+        return;
+
+    sk_X509_POLICY_NODE_free(tree->auth_policies);
+    sk_X509_POLICY_NODE_pop_free(tree->user_policies, exnode_free);
+
+    for (i = 0, curr = tree->levels; i < tree->nlevel; i++, curr++) {
+        X509_free(curr->cert);
+        sk_X509_POLICY_NODE_pop_free(curr->nodes, policy_node_free);
+        policy_node_free(curr->anyPolicy);
+    }
+
+    sk_X509_POLICY_DATA_pop_free(tree->extra_data, policy_data_free);
+    OPENSSL_free(tree->levels);
+    OPENSSL_free(tree);
+
+}
+
+/*-
+ * Application policy checking function.
+ * Return codes:
+ *  X509_PCY_TREE_FAILURE:  Failure to satisfy explicit policy
+ *  X509_PCY_TREE_INVALID:  Inconsistent or invalid extensions
+ *  X509_PCY_TREE_INTERNAL: Internal error, most likely malloc
+ *  X509_PCY_TREE_VALID:    Success (null tree if empty or bare TA)
+ */
+int X509_policy_check(X509_POLICY_TREE **ptree, int *pexplicit_policy,
+                      STACK_OF(X509) *certs,
+                      STACK_OF(ASN1_OBJECT) *policy_oids, unsigned int flags)
+{
+    int init_ret;
+    int ret;
+    int calc_ret;
+    X509_POLICY_TREE *tree = NULL;
+    STACK_OF(X509_POLICY_NODE) *nodes, *auth_nodes = NULL;
+
+    *ptree = NULL;
+    *pexplicit_policy = 0;
+    init_ret = tree_init(&tree, certs, flags);
+
+    if (init_ret <= 0)
+        return init_ret;
+
+    if ((init_ret & X509_PCY_TREE_EXPLICIT) == 0) {
+        if (init_ret & X509_PCY_TREE_EMPTY) {
+            X509_policy_tree_free(tree);
+            return X509_PCY_TREE_VALID;
+        }
+    } else {
+        *pexplicit_policy = 1;
+        /* Tree empty and requireExplicit True: Error */
+        if (init_ret & X509_PCY_TREE_EMPTY)
+            return X509_PCY_TREE_FAILURE;
+    }
+
+    ret = tree_evaluate(tree);
+#ifdef OPENSSL_POLICY_DEBUG
+    tree_print("tree_evaluate()", tree, NULL);
+#endif
+    if (ret <= 0)
+        goto error;
+
+    if (ret == X509_PCY_TREE_EMPTY) {
+        X509_policy_tree_free(tree);
+        if (init_ret & X509_PCY_TREE_EXPLICIT)
+            return X509_PCY_TREE_FAILURE;
+        return X509_PCY_TREE_VALID;
+    }
+
+    /* Tree is not empty: continue */
+
+    if ((calc_ret = tree_calculate_authority_set(tree, &auth_nodes)) == 0)
+        goto error;
+    ret = tree_calculate_user_set(tree, policy_oids, auth_nodes);
+    if (calc_ret == TREE_CALC_OK_DOFREE)
+        sk_X509_POLICY_NODE_free(auth_nodes);
+    if (!ret)
+        goto error;
+
+    *ptree = tree;
+
+    if (init_ret & X509_PCY_TREE_EXPLICIT) {
+        nodes = X509_policy_tree_get0_user_policies(tree);
+        if (sk_X509_POLICY_NODE_num(nodes) <= 0)
+            return X509_PCY_TREE_FAILURE;
+    }
+    return X509_PCY_TREE_VALID;
+
+ error:
+    X509_policy_tree_free(tree);
+    return X509_PCY_TREE_INTERNAL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/standard_exts.h b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/standard_exts.h
new file mode 100644
index 000000000..944f4de02
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/standard_exts.h
@@ -0,0 +1,78 @@
+/*
+ * Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This table will be searched using OBJ_bsearch so it *must* kept in order
+ * of the ext_nid values.
+ */
+
+static const X509V3_EXT_METHOD *standard_exts[] = {
+    &v3_nscert,
+    &v3_ns_ia5_list[0],
+    &v3_ns_ia5_list[1],
+    &v3_ns_ia5_list[2],
+    &v3_ns_ia5_list[3],
+    &v3_ns_ia5_list[4],
+    &v3_ns_ia5_list[5],
+    &v3_ns_ia5_list[6],
+    &v3_skey_id,
+    &v3_key_usage,
+    &v3_pkey_usage_period,
+    &v3_alt[0],
+    &v3_alt[1],
+    &v3_bcons,
+    &v3_crl_num,
+    &v3_cpols,
+    &v3_akey_id,
+    &v3_crld,
+    &v3_ext_ku,
+    &v3_delta_crl,
+    &v3_crl_reason,
+#ifndef OPENSSL_NO_OCSP
+    &v3_crl_invdate,
+#endif
+    &v3_sxnet,
+    &v3_info,
+#ifndef OPENSSL_NO_RFC3779
+    &v3_addr,
+    &v3_asid,
+#endif
+#ifndef OPENSSL_NO_OCSP
+    &v3_ocsp_nonce,
+    &v3_ocsp_crlid,
+    &v3_ocsp_accresp,
+    &v3_ocsp_nocheck,
+    &v3_ocsp_acutoff,
+    &v3_ocsp_serviceloc,
+#endif
+    &v3_sinfo,
+    &v3_policy_constraints,
+#ifndef OPENSSL_NO_OCSP
+    &v3_crl_hold,
+#endif
+    &v3_pci,
+    &v3_name_constraints,
+    &v3_policy_mappings,
+    &v3_inhibit_anyp,
+    &v3_idp,
+    &v3_alt[2],
+    &v3_freshest_crl,
+#ifndef OPENSSL_NO_CT
+    &v3_ct_scts[0],
+    &v3_ct_scts[1],
+    &v3_ct_scts[2],
+#endif
+    &v3_tls_feature,
+    &v3_ext_admission
+};
+
+/* Number of standard extensions */
+
+#define STANDARD_EXTENSION_COUNT OSSL_NELEM(standard_exts)
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_addr.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_addr.c
new file mode 100644
index 000000000..bb58e0484
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_addr.c
@@ -0,0 +1,1315 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Implementation of RFC 3779 section 2.2.
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/buffer.h>
+#include <openssl/x509v3.h>
+#include "internal/x509_int.h"
+#include "ext_dat.h"
+
+#ifndef OPENSSL_NO_RFC3779
+
+/*
+ * OpenSSL ASN.1 template translation of RFC 3779 2.2.3.
+ */
+
+ASN1_SEQUENCE(IPAddressRange) = {
+  ASN1_SIMPLE(IPAddressRange, min, ASN1_BIT_STRING),
+  ASN1_SIMPLE(IPAddressRange, max, ASN1_BIT_STRING)
+} ASN1_SEQUENCE_END(IPAddressRange)
+
+ASN1_CHOICE(IPAddressOrRange) = {
+  ASN1_SIMPLE(IPAddressOrRange, u.addressPrefix, ASN1_BIT_STRING),
+  ASN1_SIMPLE(IPAddressOrRange, u.addressRange,  IPAddressRange)
+} ASN1_CHOICE_END(IPAddressOrRange)
+
+ASN1_CHOICE(IPAddressChoice) = {
+  ASN1_SIMPLE(IPAddressChoice,      u.inherit,           ASN1_NULL),
+  ASN1_SEQUENCE_OF(IPAddressChoice, u.addressesOrRanges, IPAddressOrRange)
+} ASN1_CHOICE_END(IPAddressChoice)
+
+ASN1_SEQUENCE(IPAddressFamily) = {
+  ASN1_SIMPLE(IPAddressFamily, addressFamily,   ASN1_OCTET_STRING),
+  ASN1_SIMPLE(IPAddressFamily, ipAddressChoice, IPAddressChoice)
+} ASN1_SEQUENCE_END(IPAddressFamily)
+
+ASN1_ITEM_TEMPLATE(IPAddrBlocks) =
+  ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0,
+                        IPAddrBlocks, IPAddressFamily)
+static_ASN1_ITEM_TEMPLATE_END(IPAddrBlocks)
+
+IMPLEMENT_ASN1_FUNCTIONS(IPAddressRange)
+IMPLEMENT_ASN1_FUNCTIONS(IPAddressOrRange)
+IMPLEMENT_ASN1_FUNCTIONS(IPAddressChoice)
+IMPLEMENT_ASN1_FUNCTIONS(IPAddressFamily)
+
+/*
+ * How much buffer space do we need for a raw address?
+ */
+#define ADDR_RAW_BUF_LEN        16
+
+/*
+ * What's the address length associated with this AFI?
+ */
+static int length_from_afi(const unsigned afi)
+{
+    switch (afi) {
+    case IANA_AFI_IPV4:
+        return 4;
+    case IANA_AFI_IPV6:
+        return 16;
+    default:
+        return 0;
+    }
+}
+
+/*
+ * Extract the AFI from an IPAddressFamily.
+ */
+unsigned int X509v3_addr_get_afi(const IPAddressFamily *f)
+{
+    if (f == NULL
+            || f->addressFamily == NULL
+            || f->addressFamily->data == NULL
+            || f->addressFamily->length < 2)
+        return 0;
+    return (f->addressFamily->data[0] << 8) | f->addressFamily->data[1];
+}
+
+/*
+ * Expand the bitstring form of an address into a raw byte array.
+ * At the moment this is coded for simplicity, not speed.
+ */
+static int addr_expand(unsigned char *addr,
+                       const ASN1_BIT_STRING *bs,
+                       const int length, const unsigned char fill)
+{
+    if (bs->length < 0 || bs->length > length)
+        return 0;
+    if (bs->length > 0) {
+        memcpy(addr, bs->data, bs->length);
+        if ((bs->flags & 7) != 0) {
+            unsigned char mask = 0xFF >> (8 - (bs->flags & 7));
+            if (fill == 0)
+                addr[bs->length - 1] &= ~mask;
+            else
+                addr[bs->length - 1] |= mask;
+        }
+    }
+    memset(addr + bs->length, fill, length - bs->length);
+    return 1;
+}
+
+/*
+ * Extract the prefix length from a bitstring.
+ */
+#define addr_prefixlen(bs) ((int) ((bs)->length * 8 - ((bs)->flags & 7)))
+
+/*
+ * i2r handler for one address bitstring.
+ */
+static int i2r_address(BIO *out,
+                       const unsigned afi,
+                       const unsigned char fill, const ASN1_BIT_STRING *bs)
+{
+    unsigned char addr[ADDR_RAW_BUF_LEN];
+    int i, n;
+
+    if (bs->length < 0)
+        return 0;
+    switch (afi) {
+    case IANA_AFI_IPV4:
+        if (!addr_expand(addr, bs, 4, fill))
+            return 0;
+        BIO_printf(out, "%d.%d.%d.%d", addr[0], addr[1], addr[2], addr[3]);
+        break;
+    case IANA_AFI_IPV6:
+        if (!addr_expand(addr, bs, 16, fill))
+            return 0;
+        for (n = 16; n > 1 && addr[n - 1] == 0x00 && addr[n - 2] == 0x00;
+             n -= 2) ;
+        for (i = 0; i < n; i += 2)
+            BIO_printf(out, "%x%s", (addr[i] << 8) | addr[i + 1],
+                       (i < 14 ? ":" : ""));
+        if (i < 16)
+            BIO_puts(out, ":");
+        if (i == 0)
+            BIO_puts(out, ":");
+        break;
+    default:
+        for (i = 0; i < bs->length; i++)
+            BIO_printf(out, "%s%02x", (i > 0 ? ":" : ""), bs->data[i]);
+        BIO_printf(out, "[%d]", (int)(bs->flags & 7));
+        break;
+    }
+    return 1;
+}
+
+/*
+ * i2r handler for a sequence of addresses and ranges.
+ */
+static int i2r_IPAddressOrRanges(BIO *out,
+                                 const int indent,
+                                 const IPAddressOrRanges *aors,
+                                 const unsigned afi)
+{
+    int i;
+    for (i = 0; i < sk_IPAddressOrRange_num(aors); i++) {
+        const IPAddressOrRange *aor = sk_IPAddressOrRange_value(aors, i);
+        BIO_printf(out, "%*s", indent, "");
+        switch (aor->type) {
+        case IPAddressOrRange_addressPrefix:
+            if (!i2r_address(out, afi, 0x00, aor->u.addressPrefix))
+                return 0;
+            BIO_printf(out, "/%d\n", addr_prefixlen(aor->u.addressPrefix));
+            continue;
+        case IPAddressOrRange_addressRange:
+            if (!i2r_address(out, afi, 0x00, aor->u.addressRange->min))
+                return 0;
+            BIO_puts(out, "-");
+            if (!i2r_address(out, afi, 0xFF, aor->u.addressRange->max))
+                return 0;
+            BIO_puts(out, "\n");
+            continue;
+        }
+    }
+    return 1;
+}
+
+/*
+ * i2r handler for an IPAddrBlocks extension.
+ */
+static int i2r_IPAddrBlocks(const X509V3_EXT_METHOD *method,
+                            void *ext, BIO *out, int indent)
+{
+    const IPAddrBlocks *addr = ext;
+    int i;
+    for (i = 0; i < sk_IPAddressFamily_num(addr); i++) {
+        IPAddressFamily *f = sk_IPAddressFamily_value(addr, i);
+        const unsigned int afi = X509v3_addr_get_afi(f);
+        switch (afi) {
+        case IANA_AFI_IPV4:
+            BIO_printf(out, "%*sIPv4", indent, "");
+            break;
+        case IANA_AFI_IPV6:
+            BIO_printf(out, "%*sIPv6", indent, "");
+            break;
+        default:
+            BIO_printf(out, "%*sUnknown AFI %u", indent, "", afi);
+            break;
+        }
+        if (f->addressFamily->length > 2) {
+            switch (f->addressFamily->data[2]) {
+            case 1:
+                BIO_puts(out, " (Unicast)");
+                break;
+            case 2:
+                BIO_puts(out, " (Multicast)");
+                break;
+            case 3:
+                BIO_puts(out, " (Unicast/Multicast)");
+                break;
+            case 4:
+                BIO_puts(out, " (MPLS)");
+                break;
+            case 64:
+                BIO_puts(out, " (Tunnel)");
+                break;
+            case 65:
+                BIO_puts(out, " (VPLS)");
+                break;
+            case 66:
+                BIO_puts(out, " (BGP MDT)");
+                break;
+            case 128:
+                BIO_puts(out, " (MPLS-labeled VPN)");
+                break;
+            default:
+                BIO_printf(out, " (Unknown SAFI %u)",
+                           (unsigned)f->addressFamily->data[2]);
+                break;
+            }
+        }
+        switch (f->ipAddressChoice->type) {
+        case IPAddressChoice_inherit:
+            BIO_puts(out, ": inherit\n");
+            break;
+        case IPAddressChoice_addressesOrRanges:
+            BIO_puts(out, ":\n");
+            if (!i2r_IPAddressOrRanges(out,
+                                       indent + 2,
+                                       f->ipAddressChoice->
+                                       u.addressesOrRanges, afi))
+                return 0;
+            break;
+        }
+    }
+    return 1;
+}
+
+/*
+ * Sort comparison function for a sequence of IPAddressOrRange
+ * elements.
+ *
+ * There's no sane answer we can give if addr_expand() fails, and an
+ * assertion failure on externally supplied data is seriously uncool,
+ * so we just arbitrarily declare that if given invalid inputs this
+ * function returns -1.  If this messes up your preferred sort order
+ * for garbage input, tough noogies.
+ */
+static int IPAddressOrRange_cmp(const IPAddressOrRange *a,
+                                const IPAddressOrRange *b, const int length)
+{
+    unsigned char addr_a[ADDR_RAW_BUF_LEN], addr_b[ADDR_RAW_BUF_LEN];
+    int prefixlen_a = 0, prefixlen_b = 0;
+    int r;
+
+    switch (a->type) {
+    case IPAddressOrRange_addressPrefix:
+        if (!addr_expand(addr_a, a->u.addressPrefix, length, 0x00))
+            return -1;
+        prefixlen_a = addr_prefixlen(a->u.addressPrefix);
+        break;
+    case IPAddressOrRange_addressRange:
+        if (!addr_expand(addr_a, a->u.addressRange->min, length, 0x00))
+            return -1;
+        prefixlen_a = length * 8;
+        break;
+    }
+
+    switch (b->type) {
+    case IPAddressOrRange_addressPrefix:
+        if (!addr_expand(addr_b, b->u.addressPrefix, length, 0x00))
+            return -1;
+        prefixlen_b = addr_prefixlen(b->u.addressPrefix);
+        break;
+    case IPAddressOrRange_addressRange:
+        if (!addr_expand(addr_b, b->u.addressRange->min, length, 0x00))
+            return -1;
+        prefixlen_b = length * 8;
+        break;
+    }
+
+    if ((r = memcmp(addr_a, addr_b, length)) != 0)
+        return r;
+    else
+        return prefixlen_a - prefixlen_b;
+}
+
+/*
+ * IPv4-specific closure over IPAddressOrRange_cmp, since sk_sort()
+ * comparison routines are only allowed two arguments.
+ */
+static int v4IPAddressOrRange_cmp(const IPAddressOrRange *const *a,
+                                  const IPAddressOrRange *const *b)
+{
+    return IPAddressOrRange_cmp(*a, *b, 4);
+}
+
+/*
+ * IPv6-specific closure over IPAddressOrRange_cmp, since sk_sort()
+ * comparison routines are only allowed two arguments.
+ */
+static int v6IPAddressOrRange_cmp(const IPAddressOrRange *const *a,
+                                  const IPAddressOrRange *const *b)
+{
+    return IPAddressOrRange_cmp(*a, *b, 16);
+}
+
+/*
+ * Calculate whether a range collapses to a prefix.
+ * See last paragraph of RFC 3779 2.2.3.7.
+ */
+static int range_should_be_prefix(const unsigned char *min,
+                                  const unsigned char *max, const int length)
+{
+    unsigned char mask;
+    int i, j;
+
+    if (memcmp(min, max, length) <= 0)
+        return -1;
+    for (i = 0; i < length && min[i] == max[i]; i++) ;
+    for (j = length - 1; j >= 0 && min[j] == 0x00 && max[j] == 0xFF; j--) ;
+    if (i < j)
+        return -1;
+    if (i > j)
+        return i * 8;
+    mask = min[i] ^ max[i];
+    switch (mask) {
+    case 0x01:
+        j = 7;
+        break;
+    case 0x03:
+        j = 6;
+        break;
+    case 0x07:
+        j = 5;
+        break;
+    case 0x0F:
+        j = 4;
+        break;
+    case 0x1F:
+        j = 3;
+        break;
+    case 0x3F:
+        j = 2;
+        break;
+    case 0x7F:
+        j = 1;
+        break;
+    default:
+        return -1;
+    }
+    if ((min[i] & mask) != 0 || (max[i] & mask) != mask)
+        return -1;
+    else
+        return i * 8 + j;
+}
+
+/*
+ * Construct a prefix.
+ */
+static int make_addressPrefix(IPAddressOrRange **result,
+                              unsigned char *addr, const int prefixlen)
+{
+    int bytelen = (prefixlen + 7) / 8, bitlen = prefixlen % 8;
+    IPAddressOrRange *aor = IPAddressOrRange_new();
+
+    if (aor == NULL)
+        return 0;
+    aor->type = IPAddressOrRange_addressPrefix;
+    if (aor->u.addressPrefix == NULL &&
+        (aor->u.addressPrefix = ASN1_BIT_STRING_new()) == NULL)
+        goto err;
+    if (!ASN1_BIT_STRING_set(aor->u.addressPrefix, addr, bytelen))
+        goto err;
+    aor->u.addressPrefix->flags &= ~7;
+    aor->u.addressPrefix->flags |= ASN1_STRING_FLAG_BITS_LEFT;
+    if (bitlen > 0) {
+        aor->u.addressPrefix->data[bytelen - 1] &= ~(0xFF >> bitlen);
+        aor->u.addressPrefix->flags |= 8 - bitlen;
+    }
+
+    *result = aor;
+    return 1;
+
+ err:
+    IPAddressOrRange_free(aor);
+    return 0;
+}
+
+/*
+ * Construct a range.  If it can be expressed as a prefix,
+ * return a prefix instead.  Doing this here simplifies
+ * the rest of the code considerably.
+ */
+static int make_addressRange(IPAddressOrRange **result,
+                             unsigned char *min,
+                             unsigned char *max, const int length)
+{
+    IPAddressOrRange *aor;
+    int i, prefixlen;
+
+    if ((prefixlen = range_should_be_prefix(min, max, length)) >= 0)
+        return make_addressPrefix(result, min, prefixlen);
+
+    if ((aor = IPAddressOrRange_new()) == NULL)
+        return 0;
+    aor->type = IPAddressOrRange_addressRange;
+    if ((aor->u.addressRange = IPAddressRange_new()) == NULL)
+        goto err;
+    if (aor->u.addressRange->min == NULL &&
+        (aor->u.addressRange->min = ASN1_BIT_STRING_new()) == NULL)
+        goto err;
+    if (aor->u.addressRange->max == NULL &&
+        (aor->u.addressRange->max = ASN1_BIT_STRING_new()) == NULL)
+        goto err;
+
+    for (i = length; i > 0 && min[i - 1] == 0x00; --i) ;
+    if (!ASN1_BIT_STRING_set(aor->u.addressRange->min, min, i))
+        goto err;
+    aor->u.addressRange->min->flags &= ~7;
+    aor->u.addressRange->min->flags |= ASN1_STRING_FLAG_BITS_LEFT;
+    if (i > 0) {
+        unsigned char b = min[i - 1];
+        int j = 1;
+        while ((b & (0xFFU >> j)) != 0)
+            ++j;
+        aor->u.addressRange->min->flags |= 8 - j;
+    }
+
+    for (i = length; i > 0 && max[i - 1] == 0xFF; --i) ;
+    if (!ASN1_BIT_STRING_set(aor->u.addressRange->max, max, i))
+        goto err;
+    aor->u.addressRange->max->flags &= ~7;
+    aor->u.addressRange->max->flags |= ASN1_STRING_FLAG_BITS_LEFT;
+    if (i > 0) {
+        unsigned char b = max[i - 1];
+        int j = 1;
+        while ((b & (0xFFU >> j)) != (0xFFU >> j))
+            ++j;
+        aor->u.addressRange->max->flags |= 8 - j;
+    }
+
+    *result = aor;
+    return 1;
+
+ err:
+    IPAddressOrRange_free(aor);
+    return 0;
+}
+
+/*
+ * Construct a new address family or find an existing one.
+ */
+static IPAddressFamily *make_IPAddressFamily(IPAddrBlocks *addr,
+                                             const unsigned afi,
+                                             const unsigned *safi)
+{
+    IPAddressFamily *f;
+    unsigned char key[3];
+    int keylen;
+    int i;
+
+    key[0] = (afi >> 8) & 0xFF;
+    key[1] = afi & 0xFF;
+    if (safi != NULL) {
+        key[2] = *safi & 0xFF;
+        keylen = 3;
+    } else {
+        keylen = 2;
+    }
+
+    for (i = 0; i < sk_IPAddressFamily_num(addr); i++) {
+        f = sk_IPAddressFamily_value(addr, i);
+        if (f->addressFamily->length == keylen &&
+            !memcmp(f->addressFamily->data, key, keylen))
+            return f;
+    }
+
+    if ((f = IPAddressFamily_new()) == NULL)
+        goto err;
+    if (f->ipAddressChoice == NULL &&
+        (f->ipAddressChoice = IPAddressChoice_new()) == NULL)
+        goto err;
+    if (f->addressFamily == NULL &&
+        (f->addressFamily = ASN1_OCTET_STRING_new()) == NULL)
+        goto err;
+    if (!ASN1_OCTET_STRING_set(f->addressFamily, key, keylen))
+        goto err;
+    if (!sk_IPAddressFamily_push(addr, f))
+        goto err;
+
+    return f;
+
+ err:
+    IPAddressFamily_free(f);
+    return NULL;
+}
+
+/*
+ * Add an inheritance element.
+ */
+int X509v3_addr_add_inherit(IPAddrBlocks *addr,
+                            const unsigned afi, const unsigned *safi)
+{
+    IPAddressFamily *f = make_IPAddressFamily(addr, afi, safi);
+    if (f == NULL ||
+        f->ipAddressChoice == NULL ||
+        (f->ipAddressChoice->type == IPAddressChoice_addressesOrRanges &&
+         f->ipAddressChoice->u.addressesOrRanges != NULL))
+        return 0;
+    if (f->ipAddressChoice->type == IPAddressChoice_inherit &&
+        f->ipAddressChoice->u.inherit != NULL)
+        return 1;
+    if (f->ipAddressChoice->u.inherit == NULL &&
+        (f->ipAddressChoice->u.inherit = ASN1_NULL_new()) == NULL)
+        return 0;
+    f->ipAddressChoice->type = IPAddressChoice_inherit;
+    return 1;
+}
+
+/*
+ * Construct an IPAddressOrRange sequence, or return an existing one.
+ */
+static IPAddressOrRanges *make_prefix_or_range(IPAddrBlocks *addr,
+                                               const unsigned afi,
+                                               const unsigned *safi)
+{
+    IPAddressFamily *f = make_IPAddressFamily(addr, afi, safi);
+    IPAddressOrRanges *aors = NULL;
+
+    if (f == NULL ||
+        f->ipAddressChoice == NULL ||
+        (f->ipAddressChoice->type == IPAddressChoice_inherit &&
+         f->ipAddressChoice->u.inherit != NULL))
+        return NULL;
+    if (f->ipAddressChoice->type == IPAddressChoice_addressesOrRanges)
+        aors = f->ipAddressChoice->u.addressesOrRanges;
+    if (aors != NULL)
+        return aors;
+    if ((aors = sk_IPAddressOrRange_new_null()) == NULL)
+        return NULL;
+    switch (afi) {
+    case IANA_AFI_IPV4:
+        (void)sk_IPAddressOrRange_set_cmp_func(aors, v4IPAddressOrRange_cmp);
+        break;
+    case IANA_AFI_IPV6:
+        (void)sk_IPAddressOrRange_set_cmp_func(aors, v6IPAddressOrRange_cmp);
+        break;
+    }
+    f->ipAddressChoice->type = IPAddressChoice_addressesOrRanges;
+    f->ipAddressChoice->u.addressesOrRanges = aors;
+    return aors;
+}
+
+/*
+ * Add a prefix.
+ */
+int X509v3_addr_add_prefix(IPAddrBlocks *addr,
+                           const unsigned afi,
+                           const unsigned *safi,
+                           unsigned char *a, const int prefixlen)
+{
+    IPAddressOrRanges *aors = make_prefix_or_range(addr, afi, safi);
+    IPAddressOrRange *aor;
+    if (aors == NULL || !make_addressPrefix(&aor, a, prefixlen))
+        return 0;
+    if (sk_IPAddressOrRange_push(aors, aor))
+        return 1;
+    IPAddressOrRange_free(aor);
+    return 0;
+}
+
+/*
+ * Add a range.
+ */
+int X509v3_addr_add_range(IPAddrBlocks *addr,
+                          const unsigned afi,
+                          const unsigned *safi,
+                          unsigned char *min, unsigned char *max)
+{
+    IPAddressOrRanges *aors = make_prefix_or_range(addr, afi, safi);
+    IPAddressOrRange *aor;
+    int length = length_from_afi(afi);
+    if (aors == NULL)
+        return 0;
+    if (!make_addressRange(&aor, min, max, length))
+        return 0;
+    if (sk_IPAddressOrRange_push(aors, aor))
+        return 1;
+    IPAddressOrRange_free(aor);
+    return 0;
+}
+
+/*
+ * Extract min and max values from an IPAddressOrRange.
+ */
+static int extract_min_max(IPAddressOrRange *aor,
+                           unsigned char *min, unsigned char *max, int length)
+{
+    if (aor == NULL || min == NULL || max == NULL)
+        return 0;
+    switch (aor->type) {
+    case IPAddressOrRange_addressPrefix:
+        return (addr_expand(min, aor->u.addressPrefix, length, 0x00) &&
+                addr_expand(max, aor->u.addressPrefix, length, 0xFF));
+    case IPAddressOrRange_addressRange:
+        return (addr_expand(min, aor->u.addressRange->min, length, 0x00) &&
+                addr_expand(max, aor->u.addressRange->max, length, 0xFF));
+    }
+    return 0;
+}
+
+/*
+ * Public wrapper for extract_min_max().
+ */
+int X509v3_addr_get_range(IPAddressOrRange *aor,
+                          const unsigned afi,
+                          unsigned char *min,
+                          unsigned char *max, const int length)
+{
+    int afi_length = length_from_afi(afi);
+    if (aor == NULL || min == NULL || max == NULL ||
+        afi_length == 0 || length < afi_length ||
+        (aor->type != IPAddressOrRange_addressPrefix &&
+         aor->type != IPAddressOrRange_addressRange) ||
+        !extract_min_max(aor, min, max, afi_length))
+        return 0;
+
+    return afi_length;
+}
+
+/*
+ * Sort comparison function for a sequence of IPAddressFamily.
+ *
+ * The last paragraph of RFC 3779 2.2.3.3 is slightly ambiguous about
+ * the ordering: I can read it as meaning that IPv6 without a SAFI
+ * comes before IPv4 with a SAFI, which seems pretty weird.  The
+ * examples in appendix B suggest that the author intended the
+ * null-SAFI rule to apply only within a single AFI, which is what I
+ * would have expected and is what the following code implements.
+ */
+static int IPAddressFamily_cmp(const IPAddressFamily *const *a_,
+                               const IPAddressFamily *const *b_)
+{
+    const ASN1_OCTET_STRING *a = (*a_)->addressFamily;
+    const ASN1_OCTET_STRING *b = (*b_)->addressFamily;
+    int len = ((a->length <= b->length) ? a->length : b->length);
+    int cmp = memcmp(a->data, b->data, len);
+    return cmp ? cmp : a->length - b->length;
+}
+
+/*
+ * Check whether an IPAddrBLocks is in canonical form.
+ */
+int X509v3_addr_is_canonical(IPAddrBlocks *addr)
+{
+    unsigned char a_min[ADDR_RAW_BUF_LEN], a_max[ADDR_RAW_BUF_LEN];
+    unsigned char b_min[ADDR_RAW_BUF_LEN], b_max[ADDR_RAW_BUF_LEN];
+    IPAddressOrRanges *aors;
+    int i, j, k;
+
+    /*
+     * Empty extension is canonical.
+     */
+    if (addr == NULL)
+        return 1;
+
+    /*
+     * Check whether the top-level list is in order.
+     */
+    for (i = 0; i < sk_IPAddressFamily_num(addr) - 1; i++) {
+        const IPAddressFamily *a = sk_IPAddressFamily_value(addr, i);
+        const IPAddressFamily *b = sk_IPAddressFamily_value(addr, i + 1);
+        if (IPAddressFamily_cmp(&a, &b) >= 0)
+            return 0;
+    }
+
+    /*
+     * Top level's ok, now check each address family.
+     */
+    for (i = 0; i < sk_IPAddressFamily_num(addr); i++) {
+        IPAddressFamily *f = sk_IPAddressFamily_value(addr, i);
+        int length = length_from_afi(X509v3_addr_get_afi(f));
+
+        /*
+         * Inheritance is canonical.  Anything other than inheritance or
+         * a SEQUENCE OF IPAddressOrRange is an ASN.1 error or something.
+         */
+        if (f == NULL || f->ipAddressChoice == NULL)
+            return 0;
+        switch (f->ipAddressChoice->type) {
+        case IPAddressChoice_inherit:
+            continue;
+        case IPAddressChoice_addressesOrRanges:
+            break;
+        default:
+            return 0;
+        }
+
+        /*
+         * It's an IPAddressOrRanges sequence, check it.
+         */
+        aors = f->ipAddressChoice->u.addressesOrRanges;
+        if (sk_IPAddressOrRange_num(aors) == 0)
+            return 0;
+        for (j = 0; j < sk_IPAddressOrRange_num(aors) - 1; j++) {
+            IPAddressOrRange *a = sk_IPAddressOrRange_value(aors, j);
+            IPAddressOrRange *b = sk_IPAddressOrRange_value(aors, j + 1);
+
+            if (!extract_min_max(a, a_min, a_max, length) ||
+                !extract_min_max(b, b_min, b_max, length))
+                return 0;
+
+            /*
+             * Punt misordered list, overlapping start, or inverted range.
+             */
+            if (memcmp(a_min, b_min, length) >= 0 ||
+                memcmp(a_min, a_max, length) > 0 ||
+                memcmp(b_min, b_max, length) > 0)
+                return 0;
+
+            /*
+             * Punt if adjacent or overlapping.  Check for adjacency by
+             * subtracting one from b_min first.
+             */
+            for (k = length - 1; k >= 0 && b_min[k]-- == 0x00; k--) ;
+            if (memcmp(a_max, b_min, length) >= 0)
+                return 0;
+
+            /*
+             * Check for range that should be expressed as a prefix.
+             */
+            if (a->type == IPAddressOrRange_addressRange &&
+                range_should_be_prefix(a_min, a_max, length) >= 0)
+                return 0;
+        }
+
+        /*
+         * Check range to see if it's inverted or should be a
+         * prefix.
+         */
+        j = sk_IPAddressOrRange_num(aors) - 1;
+        {
+            IPAddressOrRange *a = sk_IPAddressOrRange_value(aors, j);
+            if (a != NULL && a->type == IPAddressOrRange_addressRange) {
+                if (!extract_min_max(a, a_min, a_max, length))
+                    return 0;
+                if (memcmp(a_min, a_max, length) > 0 ||
+                    range_should_be_prefix(a_min, a_max, length) >= 0)
+                    return 0;
+            }
+        }
+    }
+
+    /*
+     * If we made it through all that, we're happy.
+     */
+    return 1;
+}
+
+/*
+ * Whack an IPAddressOrRanges into canonical form.
+ */
+static int IPAddressOrRanges_canonize(IPAddressOrRanges *aors,
+                                      const unsigned afi)
+{
+    int i, j, length = length_from_afi(afi);
+
+    /*
+     * Sort the IPAddressOrRanges sequence.
+     */
+    sk_IPAddressOrRange_sort(aors);
+
+    /*
+     * Clean up representation issues, punt on duplicates or overlaps.
+     */
+    for (i = 0; i < sk_IPAddressOrRange_num(aors) - 1; i++) {
+        IPAddressOrRange *a = sk_IPAddressOrRange_value(aors, i);
+        IPAddressOrRange *b = sk_IPAddressOrRange_value(aors, i + 1);
+        unsigned char a_min[ADDR_RAW_BUF_LEN], a_max[ADDR_RAW_BUF_LEN];
+        unsigned char b_min[ADDR_RAW_BUF_LEN], b_max[ADDR_RAW_BUF_LEN];
+
+        if (!extract_min_max(a, a_min, a_max, length) ||
+            !extract_min_max(b, b_min, b_max, length))
+            return 0;
+
+        /*
+         * Punt inverted ranges.
+         */
+        if (memcmp(a_min, a_max, length) > 0 ||
+            memcmp(b_min, b_max, length) > 0)
+            return 0;
+
+        /*
+         * Punt overlaps.
+         */
+        if (memcmp(a_max, b_min, length) >= 0)
+            return 0;
+
+        /*
+         * Merge if a and b are adjacent.  We check for
+         * adjacency by subtracting one from b_min first.
+         */
+        for (j = length - 1; j >= 0 && b_min[j]-- == 0x00; j--) ;
+        if (memcmp(a_max, b_min, length) == 0) {
+            IPAddressOrRange *merged;
+            if (!make_addressRange(&merged, a_min, b_max, length))
+                return 0;
+            (void)sk_IPAddressOrRange_set(aors, i, merged);
+            (void)sk_IPAddressOrRange_delete(aors, i + 1);
+            IPAddressOrRange_free(a);
+            IPAddressOrRange_free(b);
+            --i;
+            continue;
+        }
+    }
+
+    /*
+     * Check for inverted final range.
+     */
+    j = sk_IPAddressOrRange_num(aors) - 1;
+    {
+        IPAddressOrRange *a = sk_IPAddressOrRange_value(aors, j);
+        if (a != NULL && a->type == IPAddressOrRange_addressRange) {
+            unsigned char a_min[ADDR_RAW_BUF_LEN], a_max[ADDR_RAW_BUF_LEN];
+            if (!extract_min_max(a, a_min, a_max, length))
+                return 0;
+            if (memcmp(a_min, a_max, length) > 0)
+                return 0;
+        }
+    }
+
+    return 1;
+}
+
+/*
+ * Whack an IPAddrBlocks extension into canonical form.
+ */
+int X509v3_addr_canonize(IPAddrBlocks *addr)
+{
+    int i;
+    for (i = 0; i < sk_IPAddressFamily_num(addr); i++) {
+        IPAddressFamily *f = sk_IPAddressFamily_value(addr, i);
+        if (f->ipAddressChoice->type == IPAddressChoice_addressesOrRanges &&
+            !IPAddressOrRanges_canonize(f->ipAddressChoice->
+                                        u.addressesOrRanges,
+                                        X509v3_addr_get_afi(f)))
+            return 0;
+    }
+    (void)sk_IPAddressFamily_set_cmp_func(addr, IPAddressFamily_cmp);
+    sk_IPAddressFamily_sort(addr);
+    if (!ossl_assert(X509v3_addr_is_canonical(addr)))
+        return 0;
+    return 1;
+}
+
+/*
+ * v2i handler for the IPAddrBlocks extension.
+ */
+static void *v2i_IPAddrBlocks(const struct v3_ext_method *method,
+                              struct v3_ext_ctx *ctx,
+                              STACK_OF(CONF_VALUE) *values)
+{
+    static const char v4addr_chars[] = "0123456789.";
+    static const char v6addr_chars[] = "0123456789.:abcdefABCDEF";
+    IPAddrBlocks *addr = NULL;
+    char *s = NULL, *t;
+    int i;
+
+    if ((addr = sk_IPAddressFamily_new(IPAddressFamily_cmp)) == NULL) {
+        X509V3err(X509V3_F_V2I_IPADDRBLOCKS, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    for (i = 0; i < sk_CONF_VALUE_num(values); i++) {
+        CONF_VALUE *val = sk_CONF_VALUE_value(values, i);
+        unsigned char min[ADDR_RAW_BUF_LEN], max[ADDR_RAW_BUF_LEN];
+        unsigned afi, *safi = NULL, safi_;
+        const char *addr_chars = NULL;
+        int prefixlen, i1, i2, delim, length;
+
+        if (!name_cmp(val->name, "IPv4")) {
+            afi = IANA_AFI_IPV4;
+        } else if (!name_cmp(val->name, "IPv6")) {
+            afi = IANA_AFI_IPV6;
+        } else if (!name_cmp(val->name, "IPv4-SAFI")) {
+            afi = IANA_AFI_IPV4;
+            safi = &safi_;
+        } else if (!name_cmp(val->name, "IPv6-SAFI")) {
+            afi = IANA_AFI_IPV6;
+            safi = &safi_;
+        } else {
+            X509V3err(X509V3_F_V2I_IPADDRBLOCKS,
+                      X509V3_R_EXTENSION_NAME_ERROR);
+            X509V3_conf_err(val);
+            goto err;
+        }
+
+        switch (afi) {
+        case IANA_AFI_IPV4:
+            addr_chars = v4addr_chars;
+            break;
+        case IANA_AFI_IPV6:
+            addr_chars = v6addr_chars;
+            break;
+        }
+
+        length = length_from_afi(afi);
+
+        /*
+         * Handle SAFI, if any, and OPENSSL_strdup() so we can null-terminate
+         * the other input values.
+         */
+        if (safi != NULL) {
+            *safi = strtoul(val->value, &t, 0);
+            t += strspn(t, " \t");
+            if (*safi > 0xFF || *t++ != ':') {
+                X509V3err(X509V3_F_V2I_IPADDRBLOCKS, X509V3_R_INVALID_SAFI);
+                X509V3_conf_err(val);
+                goto err;
+            }
+            t += strspn(t, " \t");
+            s = OPENSSL_strdup(t);
+        } else {
+            s = OPENSSL_strdup(val->value);
+        }
+        if (s == NULL) {
+            X509V3err(X509V3_F_V2I_IPADDRBLOCKS, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+
+        /*
+         * Check for inheritance.  Not worth additional complexity to
+         * optimize this (seldom-used) case.
+         */
+        if (strcmp(s, "inherit") == 0) {
+            if (!X509v3_addr_add_inherit(addr, afi, safi)) {
+                X509V3err(X509V3_F_V2I_IPADDRBLOCKS,
+                          X509V3_R_INVALID_INHERITANCE);
+                X509V3_conf_err(val);
+                goto err;
+            }
+            OPENSSL_free(s);
+            s = NULL;
+            continue;
+        }
+
+        i1 = strspn(s, addr_chars);
+        i2 = i1 + strspn(s + i1, " \t");
+        delim = s[i2++];
+        s[i1] = '\0';
+
+        if (a2i_ipadd(min, s) != length) {
+            X509V3err(X509V3_F_V2I_IPADDRBLOCKS, X509V3_R_INVALID_IPADDRESS);
+            X509V3_conf_err(val);
+            goto err;
+        }
+
+        switch (delim) {
+        case '/':
+            prefixlen = (int)strtoul(s + i2, &t, 10);
+            if (t == s + i2 || *t != '\0') {
+                X509V3err(X509V3_F_V2I_IPADDRBLOCKS,
+                          X509V3_R_EXTENSION_VALUE_ERROR);
+                X509V3_conf_err(val);
+                goto err;
+            }
+            if (!X509v3_addr_add_prefix(addr, afi, safi, min, prefixlen)) {
+                X509V3err(X509V3_F_V2I_IPADDRBLOCKS, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            break;
+        case '-':
+            i1 = i2 + strspn(s + i2, " \t");
+            i2 = i1 + strspn(s + i1, addr_chars);
+            if (i1 == i2 || s[i2] != '\0') {
+                X509V3err(X509V3_F_V2I_IPADDRBLOCKS,
+                          X509V3_R_EXTENSION_VALUE_ERROR);
+                X509V3_conf_err(val);
+                goto err;
+            }
+            if (a2i_ipadd(max, s + i1) != length) {
+                X509V3err(X509V3_F_V2I_IPADDRBLOCKS,
+                          X509V3_R_INVALID_IPADDRESS);
+                X509V3_conf_err(val);
+                goto err;
+            }
+            if (memcmp(min, max, length_from_afi(afi)) > 0) {
+                X509V3err(X509V3_F_V2I_IPADDRBLOCKS,
+                          X509V3_R_EXTENSION_VALUE_ERROR);
+                X509V3_conf_err(val);
+                goto err;
+            }
+            if (!X509v3_addr_add_range(addr, afi, safi, min, max)) {
+                X509V3err(X509V3_F_V2I_IPADDRBLOCKS, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            break;
+        case '\0':
+            if (!X509v3_addr_add_prefix(addr, afi, safi, min, length * 8)) {
+                X509V3err(X509V3_F_V2I_IPADDRBLOCKS, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            break;
+        default:
+            X509V3err(X509V3_F_V2I_IPADDRBLOCKS,
+                      X509V3_R_EXTENSION_VALUE_ERROR);
+            X509V3_conf_err(val);
+            goto err;
+        }
+
+        OPENSSL_free(s);
+        s = NULL;
+    }
+
+    /*
+     * Canonize the result, then we're done.
+     */
+    if (!X509v3_addr_canonize(addr))
+        goto err;
+    return addr;
+
+ err:
+    OPENSSL_free(s);
+    sk_IPAddressFamily_pop_free(addr, IPAddressFamily_free);
+    return NULL;
+}
+
+/*
+ * OpenSSL dispatch
+ */
+const X509V3_EXT_METHOD v3_addr = {
+    NID_sbgp_ipAddrBlock,       /* nid */
+    0,                          /* flags */
+    ASN1_ITEM_ref(IPAddrBlocks), /* template */
+    0, 0, 0, 0,                 /* old functions, ignored */
+    0,                          /* i2s */
+    0,                          /* s2i */
+    0,                          /* i2v */
+    v2i_IPAddrBlocks,           /* v2i */
+    i2r_IPAddrBlocks,           /* i2r */
+    0,                          /* r2i */
+    NULL                        /* extension-specific data */
+};
+
+/*
+ * Figure out whether extension sues inheritance.
+ */
+int X509v3_addr_inherits(IPAddrBlocks *addr)
+{
+    int i;
+    if (addr == NULL)
+        return 0;
+    for (i = 0; i < sk_IPAddressFamily_num(addr); i++) {
+        IPAddressFamily *f = sk_IPAddressFamily_value(addr, i);
+        if (f->ipAddressChoice->type == IPAddressChoice_inherit)
+            return 1;
+    }
+    return 0;
+}
+
+/*
+ * Figure out whether parent contains child.
+ */
+static int addr_contains(IPAddressOrRanges *parent,
+                         IPAddressOrRanges *child, int length)
+{
+    unsigned char p_min[ADDR_RAW_BUF_LEN], p_max[ADDR_RAW_BUF_LEN];
+    unsigned char c_min[ADDR_RAW_BUF_LEN], c_max[ADDR_RAW_BUF_LEN];
+    int p, c;
+
+    if (child == NULL || parent == child)
+        return 1;
+    if (parent == NULL)
+        return 0;
+
+    p = 0;
+    for (c = 0; c < sk_IPAddressOrRange_num(child); c++) {
+        if (!extract_min_max(sk_IPAddressOrRange_value(child, c),
+                             c_min, c_max, length))
+            return -1;
+        for (;; p++) {
+            if (p >= sk_IPAddressOrRange_num(parent))
+                return 0;
+            if (!extract_min_max(sk_IPAddressOrRange_value(parent, p),
+                                 p_min, p_max, length))
+                return 0;
+            if (memcmp(p_max, c_max, length) < 0)
+                continue;
+            if (memcmp(p_min, c_min, length) > 0)
+                return 0;
+            break;
+        }
+    }
+
+    return 1;
+}
+
+/*
+ * Test whether a is a subset of b.
+ */
+int X509v3_addr_subset(IPAddrBlocks *a, IPAddrBlocks *b)
+{
+    int i;
+    if (a == NULL || a == b)
+        return 1;
+    if (b == NULL || X509v3_addr_inherits(a) || X509v3_addr_inherits(b))
+        return 0;
+    (void)sk_IPAddressFamily_set_cmp_func(b, IPAddressFamily_cmp);
+    for (i = 0; i < sk_IPAddressFamily_num(a); i++) {
+        IPAddressFamily *fa = sk_IPAddressFamily_value(a, i);
+        int j = sk_IPAddressFamily_find(b, fa);
+        IPAddressFamily *fb;
+        fb = sk_IPAddressFamily_value(b, j);
+        if (fb == NULL)
+            return 0;
+        if (!addr_contains(fb->ipAddressChoice->u.addressesOrRanges,
+                           fa->ipAddressChoice->u.addressesOrRanges,
+                           length_from_afi(X509v3_addr_get_afi(fb))))
+            return 0;
+    }
+    return 1;
+}
+
+/*
+ * Validation error handling via callback.
+ */
+#define validation_err(_err_)           \
+  do {                                  \
+    if (ctx != NULL) {                  \
+      ctx->error = _err_;               \
+      ctx->error_depth = i;             \
+      ctx->current_cert = x;            \
+      ret = ctx->verify_cb(0, ctx);     \
+    } else {                            \
+      ret = 0;                          \
+    }                                   \
+    if (!ret)                           \
+      goto done;                        \
+  } while (0)
+
+/*
+ * Core code for RFC 3779 2.3 path validation.
+ *
+ * Returns 1 for success, 0 on error.
+ *
+ * When returning 0, ctx->error MUST be set to an appropriate value other than
+ * X509_V_OK.
+ */
+static int addr_validate_path_internal(X509_STORE_CTX *ctx,
+                                       STACK_OF(X509) *chain,
+                                       IPAddrBlocks *ext)
+{
+    IPAddrBlocks *child = NULL;
+    int i, j, ret = 1;
+    X509 *x;
+
+    if (!ossl_assert(chain != NULL && sk_X509_num(chain) > 0)
+            || !ossl_assert(ctx != NULL || ext != NULL)
+            || !ossl_assert(ctx == NULL || ctx->verify_cb != NULL)) {
+        if (ctx != NULL)
+            ctx->error = X509_V_ERR_UNSPECIFIED;
+        return 0;
+    }
+
+    /*
+     * Figure out where to start.  If we don't have an extension to
+     * check, we're done.  Otherwise, check canonical form and
+     * set up for walking up the chain.
+     */
+    if (ext != NULL) {
+        i = -1;
+        x = NULL;
+    } else {
+        i = 0;
+        x = sk_X509_value(chain, i);
+        if ((ext = x->rfc3779_addr) == NULL)
+            goto done;
+    }
+    if (!X509v3_addr_is_canonical(ext))
+        validation_err(X509_V_ERR_INVALID_EXTENSION);
+    (void)sk_IPAddressFamily_set_cmp_func(ext, IPAddressFamily_cmp);
+    if ((child = sk_IPAddressFamily_dup(ext)) == NULL) {
+        X509V3err(X509V3_F_ADDR_VALIDATE_PATH_INTERNAL,
+                  ERR_R_MALLOC_FAILURE);
+        if (ctx != NULL)
+            ctx->error = X509_V_ERR_OUT_OF_MEM;
+        ret = 0;
+        goto done;
+    }
+
+    /*
+     * Now walk up the chain.  No cert may list resources that its
+     * parent doesn't list.
+     */
+    for (i++; i < sk_X509_num(chain); i++) {
+        x = sk_X509_value(chain, i);
+        if (!X509v3_addr_is_canonical(x->rfc3779_addr))
+            validation_err(X509_V_ERR_INVALID_EXTENSION);
+        if (x->rfc3779_addr == NULL) {
+            for (j = 0; j < sk_IPAddressFamily_num(child); j++) {
+                IPAddressFamily *fc = sk_IPAddressFamily_value(child, j);
+                if (fc->ipAddressChoice->type != IPAddressChoice_inherit) {
+                    validation_err(X509_V_ERR_UNNESTED_RESOURCE);
+                    break;
+                }
+            }
+            continue;
+        }
+        (void)sk_IPAddressFamily_set_cmp_func(x->rfc3779_addr,
+                                              IPAddressFamily_cmp);
+        for (j = 0; j < sk_IPAddressFamily_num(child); j++) {
+            IPAddressFamily *fc = sk_IPAddressFamily_value(child, j);
+            int k = sk_IPAddressFamily_find(x->rfc3779_addr, fc);
+            IPAddressFamily *fp =
+                sk_IPAddressFamily_value(x->rfc3779_addr, k);
+            if (fp == NULL) {
+                if (fc->ipAddressChoice->type ==
+                    IPAddressChoice_addressesOrRanges) {
+                    validation_err(X509_V_ERR_UNNESTED_RESOURCE);
+                    break;
+                }
+                continue;
+            }
+            if (fp->ipAddressChoice->type ==
+                IPAddressChoice_addressesOrRanges) {
+                if (fc->ipAddressChoice->type == IPAddressChoice_inherit
+                    || addr_contains(fp->ipAddressChoice->u.addressesOrRanges,
+                                     fc->ipAddressChoice->u.addressesOrRanges,
+                                     length_from_afi(X509v3_addr_get_afi(fc))))
+                    sk_IPAddressFamily_set(child, j, fp);
+                else
+                    validation_err(X509_V_ERR_UNNESTED_RESOURCE);
+            }
+        }
+    }
+
+    /*
+     * Trust anchor can't inherit.
+     */
+    if (x->rfc3779_addr != NULL) {
+        for (j = 0; j < sk_IPAddressFamily_num(x->rfc3779_addr); j++) {
+            IPAddressFamily *fp =
+                sk_IPAddressFamily_value(x->rfc3779_addr, j);
+            if (fp->ipAddressChoice->type == IPAddressChoice_inherit
+                && sk_IPAddressFamily_find(child, fp) >= 0)
+                validation_err(X509_V_ERR_UNNESTED_RESOURCE);
+        }
+    }
+
+ done:
+    sk_IPAddressFamily_free(child);
+    return ret;
+}
+
+#undef validation_err
+
+/*
+ * RFC 3779 2.3 path validation -- called from X509_verify_cert().
+ */
+int X509v3_addr_validate_path(X509_STORE_CTX *ctx)
+{
+    if (ctx->chain == NULL
+            || sk_X509_num(ctx->chain) == 0
+            || ctx->verify_cb == NULL) {
+        ctx->error = X509_V_ERR_UNSPECIFIED;
+        return 0;
+    }
+    return addr_validate_path_internal(ctx, ctx->chain, NULL);
+}
+
+/*
+ * RFC 3779 2.3 path validation of an extension.
+ * Test whether chain covers extension.
+ */
+int X509v3_addr_validate_resource_set(STACK_OF(X509) *chain,
+                                  IPAddrBlocks *ext, int allow_inheritance)
+{
+    if (ext == NULL)
+        return 1;
+    if (chain == NULL || sk_X509_num(chain) == 0)
+        return 0;
+    if (!allow_inheritance && X509v3_addr_inherits(ext))
+        return 0;
+    return addr_validate_path_internal(NULL, chain, ext);
+}
+
+#endif                          /* OPENSSL_NO_RFC3779 */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_admis.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_admis.c
new file mode 100644
index 000000000..c8e75191b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_admis.c
@@ -0,0 +1,356 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/ossl_typ.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+
+#include <openssl/x509v3.h>
+
+#include <openssl/safestack.h>
+
+#include "v3_admis.h"
+#include "ext_dat.h"
+
+
+ASN1_SEQUENCE(NAMING_AUTHORITY) = {
+    ASN1_OPT(NAMING_AUTHORITY, namingAuthorityId, ASN1_OBJECT),
+    ASN1_OPT(NAMING_AUTHORITY, namingAuthorityUrl, ASN1_IA5STRING),
+    ASN1_OPT(NAMING_AUTHORITY, namingAuthorityText, DIRECTORYSTRING),
+} ASN1_SEQUENCE_END(NAMING_AUTHORITY)
+
+ASN1_SEQUENCE(PROFESSION_INFO) = {
+    ASN1_EXP_OPT(PROFESSION_INFO, namingAuthority, NAMING_AUTHORITY, 0),
+    ASN1_SEQUENCE_OF(PROFESSION_INFO, professionItems, DIRECTORYSTRING),
+    ASN1_SEQUENCE_OF_OPT(PROFESSION_INFO, professionOIDs, ASN1_OBJECT),
+    ASN1_OPT(PROFESSION_INFO, registrationNumber, ASN1_PRINTABLESTRING),
+    ASN1_OPT(PROFESSION_INFO, addProfessionInfo, ASN1_OCTET_STRING),
+} ASN1_SEQUENCE_END(PROFESSION_INFO)
+
+ASN1_SEQUENCE(ADMISSIONS) = {
+    ASN1_EXP_OPT(ADMISSIONS, admissionAuthority, GENERAL_NAME, 0),
+    ASN1_EXP_OPT(ADMISSIONS, namingAuthority, NAMING_AUTHORITY, 1),
+    ASN1_SEQUENCE_OF(ADMISSIONS, professionInfos, PROFESSION_INFO),
+} ASN1_SEQUENCE_END(ADMISSIONS)
+
+ASN1_SEQUENCE(ADMISSION_SYNTAX) = {
+    ASN1_OPT(ADMISSION_SYNTAX, admissionAuthority, GENERAL_NAME),
+    ASN1_SEQUENCE_OF(ADMISSION_SYNTAX, contentsOfAdmissions, ADMISSIONS),
+} ASN1_SEQUENCE_END(ADMISSION_SYNTAX)
+
+IMPLEMENT_ASN1_FUNCTIONS(NAMING_AUTHORITY)
+IMPLEMENT_ASN1_FUNCTIONS(PROFESSION_INFO)
+IMPLEMENT_ASN1_FUNCTIONS(ADMISSIONS)
+IMPLEMENT_ASN1_FUNCTIONS(ADMISSION_SYNTAX)
+
+static int i2r_ADMISSION_SYNTAX(const struct v3_ext_method *method, void *in,
+                                BIO *bp, int ind);
+
+const X509V3_EXT_METHOD v3_ext_admission = {
+    NID_x509ExtAdmission,   /* .ext_nid = */
+    0,                      /* .ext_flags = */
+    ASN1_ITEM_ref(ADMISSION_SYNTAX), /* .it = */
+    NULL, NULL, NULL, NULL,
+    NULL,                   /* .i2s = */
+    NULL,                   /* .s2i = */
+    NULL,                   /* .i2v = */
+    NULL,                   /* .v2i = */
+    &i2r_ADMISSION_SYNTAX,  /* .i2r = */
+    NULL,                   /* .r2i = */
+    NULL                    /* extension-specific data */
+};
+
+
+static int i2r_NAMING_AUTHORITY(const struct v3_ext_method *method, void *in,
+                                BIO *bp, int ind)
+{
+    NAMING_AUTHORITY * namingAuthority = (NAMING_AUTHORITY*) in;
+
+    if (namingAuthority == NULL)
+        return 0;
+
+    if (namingAuthority->namingAuthorityId == NULL
+        && namingAuthority->namingAuthorityText == NULL
+        && namingAuthority->namingAuthorityUrl == NULL)
+        return 0;
+
+    if (BIO_printf(bp, "%*snamingAuthority: ", ind, "") <= 0)
+        goto err;
+
+    if (namingAuthority->namingAuthorityId != NULL) {
+        char objbuf[128];
+        const char *ln = OBJ_nid2ln(OBJ_obj2nid(namingAuthority->namingAuthorityId));
+
+        if (BIO_printf(bp, "%*s  admissionAuthorityId: ", ind, "") <= 0)
+            goto err;
+
+        OBJ_obj2txt(objbuf, sizeof(objbuf), namingAuthority->namingAuthorityId, 1);
+
+        if (BIO_printf(bp, "%s%s%s%s\n", ln ? ln : "",
+                       ln ? " (" : "", objbuf, ln ? ")" : "") <= 0)
+            goto err;
+    }
+    if (namingAuthority->namingAuthorityText != NULL) {
+        if (BIO_printf(bp, "%*s  namingAuthorityText: ", ind, "") <= 0
+            || ASN1_STRING_print(bp, namingAuthority->namingAuthorityText) <= 0
+            || BIO_printf(bp, "\n") <= 0)
+            goto err;
+    }
+    if (namingAuthority->namingAuthorityUrl != NULL ) {
+        if (BIO_printf(bp, "%*s  namingAuthorityUrl: ", ind, "") <= 0
+            || ASN1_STRING_print(bp, namingAuthority->namingAuthorityUrl) <= 0
+            || BIO_printf(bp, "\n") <= 0)
+            goto err;
+    }
+    return 1;
+
+err:
+    return 0;
+}
+
+static int i2r_ADMISSION_SYNTAX(const struct v3_ext_method *method, void *in,
+                                BIO *bp, int ind)
+{
+    ADMISSION_SYNTAX * admission = (ADMISSION_SYNTAX *)in;
+    int i, j, k;
+
+    if (admission->admissionAuthority != NULL) {
+        if (BIO_printf(bp, "%*sadmissionAuthority:\n", ind, "") <= 0
+            || BIO_printf(bp, "%*s  ", ind, "") <= 0
+            || GENERAL_NAME_print(bp, admission->admissionAuthority) <= 0
+            || BIO_printf(bp, "\n") <= 0)
+            goto err;
+    }
+
+    for (i = 0; i < sk_ADMISSIONS_num(admission->contentsOfAdmissions); i++) {
+        ADMISSIONS* entry = sk_ADMISSIONS_value(admission->contentsOfAdmissions, i);
+
+        if (BIO_printf(bp, "%*sEntry %0d:\n", ind, "", 1 + i) <= 0) goto err;
+
+        if (entry->admissionAuthority != NULL) {
+            if (BIO_printf(bp, "%*s  admissionAuthority:\n", ind, "") <= 0
+                || BIO_printf(bp, "%*s    ", ind, "") <= 0
+                || GENERAL_NAME_print(bp, entry->admissionAuthority) <= 0
+                || BIO_printf(bp, "\n") <= 0)
+                goto err;
+        }
+
+        if (entry->namingAuthority != NULL) {
+            if (i2r_NAMING_AUTHORITY(method, entry->namingAuthority, bp, ind) <= 0)
+                goto err;
+        }
+
+        for (j = 0; j < sk_PROFESSION_INFO_num(entry->professionInfos); j++) {
+            PROFESSION_INFO* pinfo = sk_PROFESSION_INFO_value(entry->professionInfos, j);
+
+            if (BIO_printf(bp, "%*s  Profession Info Entry %0d:\n", ind, "", 1 + j) <= 0)
+                goto err;
+
+            if (pinfo->registrationNumber != NULL) {
+                if (BIO_printf(bp, "%*s    registrationNumber: ", ind, "") <= 0
+                    || ASN1_STRING_print(bp, pinfo->registrationNumber) <= 0
+                    || BIO_printf(bp, "\n") <= 0)
+                    goto err;
+            }
+
+            if (pinfo->namingAuthority != NULL) {
+                if (i2r_NAMING_AUTHORITY(method, pinfo->namingAuthority, bp, ind + 2) <= 0)
+                    goto err;
+            }
+
+            if (pinfo->professionItems != NULL) {
+
+                if (BIO_printf(bp, "%*s    Info Entries:\n", ind, "") <= 0)
+                    goto err;
+                for (k = 0; k < sk_ASN1_STRING_num(pinfo->professionItems); k++) {
+                    ASN1_STRING* val = sk_ASN1_STRING_value(pinfo->professionItems, k);
+
+                    if (BIO_printf(bp, "%*s      ", ind, "") <= 0
+                        || ASN1_STRING_print(bp, val) <= 0
+                        || BIO_printf(bp, "\n") <= 0)
+                        goto err;
+                }
+            }
+
+            if (pinfo->professionOIDs != NULL) {
+                if (BIO_printf(bp, "%*s    Profession OIDs:\n", ind, "") <= 0)
+                    goto err;
+                for (k = 0; k < sk_ASN1_OBJECT_num(pinfo->professionOIDs); k++) {
+                    ASN1_OBJECT* obj = sk_ASN1_OBJECT_value(pinfo->professionOIDs, k);
+                    const char *ln = OBJ_nid2ln(OBJ_obj2nid(obj));
+                    char objbuf[128];
+
+                    OBJ_obj2txt(objbuf, sizeof(objbuf), obj, 1);
+                    if (BIO_printf(bp, "%*s      %s%s%s%s\n", ind, "",
+                                   ln ? ln : "", ln ? " (" : "",
+                                   objbuf, ln ? ")" : "") <= 0)
+                        goto err;
+                }
+            }
+        }
+    }
+    return 1;
+
+err:
+    return -1;
+}
+
+const ASN1_OBJECT *NAMING_AUTHORITY_get0_authorityId(const NAMING_AUTHORITY *n)
+{
+    return n->namingAuthorityId;
+}
+
+void NAMING_AUTHORITY_set0_authorityId(NAMING_AUTHORITY *n, ASN1_OBJECT* id)
+{
+    ASN1_OBJECT_free(n->namingAuthorityId);
+    n->namingAuthorityId = id;
+}
+
+const ASN1_IA5STRING *NAMING_AUTHORITY_get0_authorityURL(
+    const NAMING_AUTHORITY *n)
+{
+    return n->namingAuthorityUrl;
+}
+
+void NAMING_AUTHORITY_set0_authorityURL(NAMING_AUTHORITY *n, ASN1_IA5STRING* u)
+{
+    ASN1_IA5STRING_free(n->namingAuthorityUrl);
+    n->namingAuthorityUrl = u;
+}
+
+const ASN1_STRING *NAMING_AUTHORITY_get0_authorityText(
+    const NAMING_AUTHORITY *n)
+{
+    return n->namingAuthorityText;
+}
+
+void NAMING_AUTHORITY_set0_authorityText(NAMING_AUTHORITY *n, ASN1_STRING* t)
+{
+    ASN1_IA5STRING_free(n->namingAuthorityText);
+    n->namingAuthorityText = t;
+}
+
+const GENERAL_NAME *ADMISSION_SYNTAX_get0_admissionAuthority(const ADMISSION_SYNTAX *as)
+{
+    return as->admissionAuthority;
+}
+
+void ADMISSION_SYNTAX_set0_admissionAuthority(ADMISSION_SYNTAX *as,
+                                              GENERAL_NAME *aa)
+{
+    GENERAL_NAME_free(as->admissionAuthority);
+    as->admissionAuthority = aa;
+}
+
+const STACK_OF(ADMISSIONS) *ADMISSION_SYNTAX_get0_contentsOfAdmissions(const ADMISSION_SYNTAX *as)
+{
+    return as->contentsOfAdmissions;
+}
+
+void ADMISSION_SYNTAX_set0_contentsOfAdmissions(ADMISSION_SYNTAX *as,
+                                                STACK_OF(ADMISSIONS) *a)
+{
+    sk_ADMISSIONS_pop_free(as->contentsOfAdmissions, ADMISSIONS_free);
+    as->contentsOfAdmissions = a;
+}
+
+const GENERAL_NAME *ADMISSIONS_get0_admissionAuthority(const ADMISSIONS *a)
+{
+    return a->admissionAuthority;
+}
+
+void ADMISSIONS_set0_admissionAuthority(ADMISSIONS *a, GENERAL_NAME *aa)
+{
+    GENERAL_NAME_free(a->admissionAuthority);
+    a->admissionAuthority = aa;
+}
+
+const NAMING_AUTHORITY *ADMISSIONS_get0_namingAuthority(const ADMISSIONS *a)
+{
+    return a->namingAuthority;
+}
+
+void ADMISSIONS_set0_namingAuthority(ADMISSIONS *a, NAMING_AUTHORITY *na)
+{
+    NAMING_AUTHORITY_free(a->namingAuthority);
+    a->namingAuthority = na;
+}
+
+const PROFESSION_INFOS *ADMISSIONS_get0_professionInfos(const ADMISSIONS *a)
+{
+    return a->professionInfos;
+}
+
+void ADMISSIONS_set0_professionInfos(ADMISSIONS *a, PROFESSION_INFOS *pi)
+{
+    sk_PROFESSION_INFO_pop_free(a->professionInfos, PROFESSION_INFO_free);
+    a->professionInfos = pi;
+}
+
+const ASN1_OCTET_STRING *PROFESSION_INFO_get0_addProfessionInfo(const PROFESSION_INFO *pi)
+{
+    return pi->addProfessionInfo;
+}
+
+void PROFESSION_INFO_set0_addProfessionInfo(PROFESSION_INFO *pi,
+                                            ASN1_OCTET_STRING *aos)
+{
+    ASN1_OCTET_STRING_free(pi->addProfessionInfo);
+    pi->addProfessionInfo = aos;
+}
+
+const NAMING_AUTHORITY *PROFESSION_INFO_get0_namingAuthority(const PROFESSION_INFO *pi)
+{
+    return pi->namingAuthority;
+}
+
+void PROFESSION_INFO_set0_namingAuthority(PROFESSION_INFO *pi,
+                                          NAMING_AUTHORITY *na)
+{
+    NAMING_AUTHORITY_free(pi->namingAuthority);
+    pi->namingAuthority = na;
+}
+
+const STACK_OF(ASN1_STRING) *PROFESSION_INFO_get0_professionItems(const PROFESSION_INFO *pi)
+{
+    return pi->professionItems;
+}
+
+void PROFESSION_INFO_set0_professionItems(PROFESSION_INFO *pi,
+                                          STACK_OF(ASN1_STRING) *as)
+{
+    sk_ASN1_STRING_pop_free(pi->professionItems, ASN1_STRING_free);
+    pi->professionItems = as;
+}
+
+const STACK_OF(ASN1_OBJECT) *PROFESSION_INFO_get0_professionOIDs(const PROFESSION_INFO *pi)
+{
+    return pi->professionOIDs;
+}
+
+void PROFESSION_INFO_set0_professionOIDs(PROFESSION_INFO *pi,
+                                         STACK_OF(ASN1_OBJECT) *po)
+{
+    sk_ASN1_OBJECT_pop_free(pi->professionOIDs, ASN1_OBJECT_free);
+    pi->professionOIDs = po;
+}
+
+const ASN1_PRINTABLESTRING *PROFESSION_INFO_get0_registrationNumber(const PROFESSION_INFO *pi)
+{
+    return pi->registrationNumber;
+}
+
+void PROFESSION_INFO_set0_registrationNumber(PROFESSION_INFO *pi,
+                                             ASN1_PRINTABLESTRING *rn)
+{
+    ASN1_PRINTABLESTRING_free(pi->registrationNumber);
+    pi->registrationNumber = rn;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_admis.h b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_admis.h
new file mode 100644
index 000000000..fa23fc761
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_admis.h
@@ -0,0 +1,38 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_V3_ADMISSION_H
+# define HEADER_V3_ADMISSION_H
+
+struct NamingAuthority_st {
+    ASN1_OBJECT* namingAuthorityId;
+    ASN1_IA5STRING* namingAuthorityUrl;
+    ASN1_STRING* namingAuthorityText;          /* i.e. DIRECTORYSTRING */
+};
+
+struct ProfessionInfo_st {
+    NAMING_AUTHORITY* namingAuthority;
+    STACK_OF(ASN1_STRING)* professionItems;    /* i.e. DIRECTORYSTRING */
+    STACK_OF(ASN1_OBJECT)* professionOIDs;
+    ASN1_PRINTABLESTRING* registrationNumber;
+    ASN1_OCTET_STRING* addProfessionInfo;
+};
+
+struct Admissions_st {
+    GENERAL_NAME* admissionAuthority;
+    NAMING_AUTHORITY* namingAuthority;
+    STACK_OF(PROFESSION_INFO)* professionInfos;
+};
+
+struct AdmissionSyntax_st {
+    GENERAL_NAME* admissionAuthority;
+    STACK_OF(ADMISSIONS)* contentsOfAdmissions;
+};
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_akey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_akey.c
new file mode 100644
index 000000000..d9f770433
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_akey.c
@@ -0,0 +1,160 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/x509v3.h>
+#include "ext_dat.h"
+
+static STACK_OF(CONF_VALUE) *i2v_AUTHORITY_KEYID(X509V3_EXT_METHOD *method,
+                                                 AUTHORITY_KEYID *akeyid,
+                                                 STACK_OF(CONF_VALUE)
+                                                 *extlist);
+static AUTHORITY_KEYID *v2i_AUTHORITY_KEYID(X509V3_EXT_METHOD *method,
+                                            X509V3_CTX *ctx,
+                                            STACK_OF(CONF_VALUE) *values);
+
+const X509V3_EXT_METHOD v3_akey_id = {
+    NID_authority_key_identifier,
+    X509V3_EXT_MULTILINE, ASN1_ITEM_ref(AUTHORITY_KEYID),
+    0, 0, 0, 0,
+    0, 0,
+    (X509V3_EXT_I2V) i2v_AUTHORITY_KEYID,
+    (X509V3_EXT_V2I)v2i_AUTHORITY_KEYID,
+    0, 0,
+    NULL
+};
+
+static STACK_OF(CONF_VALUE) *i2v_AUTHORITY_KEYID(X509V3_EXT_METHOD *method,
+                                                 AUTHORITY_KEYID *akeyid,
+                                                 STACK_OF(CONF_VALUE)
+                                                 *extlist)
+{
+    char *tmp;
+    if (akeyid->keyid) {
+        tmp = OPENSSL_buf2hexstr(akeyid->keyid->data, akeyid->keyid->length);
+        X509V3_add_value("keyid", tmp, &extlist);
+        OPENSSL_free(tmp);
+    }
+    if (akeyid->issuer)
+        extlist = i2v_GENERAL_NAMES(NULL, akeyid->issuer, extlist);
+    if (akeyid->serial) {
+        tmp = OPENSSL_buf2hexstr(akeyid->serial->data, akeyid->serial->length);
+        X509V3_add_value("serial", tmp, &extlist);
+        OPENSSL_free(tmp);
+    }
+    return extlist;
+}
+
+/*-
+ * Currently two options:
+ * keyid: use the issuers subject keyid, the value 'always' means its is
+ * an error if the issuer certificate doesn't have a key id.
+ * issuer: use the issuers cert issuer and serial number. The default is
+ * to only use this if keyid is not present. With the option 'always'
+ * this is always included.
+ */
+
+static AUTHORITY_KEYID *v2i_AUTHORITY_KEYID(X509V3_EXT_METHOD *method,
+                                            X509V3_CTX *ctx,
+                                            STACK_OF(CONF_VALUE) *values)
+{
+    char keyid = 0, issuer = 0;
+    int i;
+    CONF_VALUE *cnf;
+    ASN1_OCTET_STRING *ikeyid = NULL;
+    X509_NAME *isname = NULL;
+    GENERAL_NAMES *gens = NULL;
+    GENERAL_NAME *gen = NULL;
+    ASN1_INTEGER *serial = NULL;
+    X509_EXTENSION *ext;
+    X509 *cert;
+    AUTHORITY_KEYID *akeyid;
+
+    for (i = 0; i < sk_CONF_VALUE_num(values); i++) {
+        cnf = sk_CONF_VALUE_value(values, i);
+        if (strcmp(cnf->name, "keyid") == 0) {
+            keyid = 1;
+            if (cnf->value && strcmp(cnf->value, "always") == 0)
+                keyid = 2;
+        } else if (strcmp(cnf->name, "issuer") == 0) {
+            issuer = 1;
+            if (cnf->value && strcmp(cnf->value, "always") == 0)
+                issuer = 2;
+        } else {
+            X509V3err(X509V3_F_V2I_AUTHORITY_KEYID, X509V3_R_UNKNOWN_OPTION);
+            ERR_add_error_data(2, "name=", cnf->name);
+            return NULL;
+        }
+    }
+
+    if (!ctx || !ctx->issuer_cert) {
+        if (ctx && (ctx->flags == CTX_TEST))
+            return AUTHORITY_KEYID_new();
+        X509V3err(X509V3_F_V2I_AUTHORITY_KEYID,
+                  X509V3_R_NO_ISSUER_CERTIFICATE);
+        return NULL;
+    }
+
+    cert = ctx->issuer_cert;
+
+    if (keyid) {
+        i = X509_get_ext_by_NID(cert, NID_subject_key_identifier, -1);
+        if ((i >= 0) && (ext = X509_get_ext(cert, i)))
+            ikeyid = X509V3_EXT_d2i(ext);
+        if (keyid == 2 && !ikeyid) {
+            X509V3err(X509V3_F_V2I_AUTHORITY_KEYID,
+                      X509V3_R_UNABLE_TO_GET_ISSUER_KEYID);
+            return NULL;
+        }
+    }
+
+    if ((issuer && !ikeyid) || (issuer == 2)) {
+        isname = X509_NAME_dup(X509_get_issuer_name(cert));
+        serial = ASN1_INTEGER_dup(X509_get_serialNumber(cert));
+        if (!isname || !serial) {
+            X509V3err(X509V3_F_V2I_AUTHORITY_KEYID,
+                      X509V3_R_UNABLE_TO_GET_ISSUER_DETAILS);
+            goto err;
+        }
+    }
+
+    if ((akeyid = AUTHORITY_KEYID_new()) == NULL)
+        goto err;
+
+    if (isname) {
+        if ((gens = sk_GENERAL_NAME_new_null()) == NULL
+            || (gen = GENERAL_NAME_new()) == NULL
+            || !sk_GENERAL_NAME_push(gens, gen)) {
+            X509V3err(X509V3_F_V2I_AUTHORITY_KEYID, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        gen->type = GEN_DIRNAME;
+        gen->d.dirn = isname;
+    }
+
+    akeyid->issuer = gens;
+    gen = NULL;
+    gens = NULL;
+    akeyid->serial = serial;
+    akeyid->keyid = ikeyid;
+
+    return akeyid;
+
+ err:
+    sk_GENERAL_NAME_free(gens);
+    GENERAL_NAME_free(gen);
+    X509_NAME_free(isname);
+    ASN1_INTEGER_free(serial);
+    ASN1_OCTET_STRING_free(ikeyid);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_akeya.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_akeya.c
new file mode 100644
index 000000000..d6dd6bcb9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_akeya.c
@@ -0,0 +1,23 @@
+/*
+ * Copyright 2001-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/x509v3.h>
+
+ASN1_SEQUENCE(AUTHORITY_KEYID) = {
+        ASN1_IMP_OPT(AUTHORITY_KEYID, keyid, ASN1_OCTET_STRING, 0),
+        ASN1_IMP_SEQUENCE_OF_OPT(AUTHORITY_KEYID, issuer, GENERAL_NAME, 1),
+        ASN1_IMP_OPT(AUTHORITY_KEYID, serial, ASN1_INTEGER, 2)
+} ASN1_SEQUENCE_END(AUTHORITY_KEYID)
+
+IMPLEMENT_ASN1_FUNCTIONS(AUTHORITY_KEYID)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_alt.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_alt.c
new file mode 100644
index 000000000..832e6d128
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_alt.c
@@ -0,0 +1,592 @@
+/*
+ * Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/x509v3.h>
+#include "ext_dat.h"
+
+static GENERAL_NAMES *v2i_subject_alt(X509V3_EXT_METHOD *method,
+                                      X509V3_CTX *ctx,
+                                      STACK_OF(CONF_VALUE) *nval);
+static GENERAL_NAMES *v2i_issuer_alt(X509V3_EXT_METHOD *method,
+                                     X509V3_CTX *ctx,
+                                     STACK_OF(CONF_VALUE) *nval);
+static int copy_email(X509V3_CTX *ctx, GENERAL_NAMES *gens, int move_p);
+static int copy_issuer(X509V3_CTX *ctx, GENERAL_NAMES *gens);
+static int do_othername(GENERAL_NAME *gen, const char *value, X509V3_CTX *ctx);
+static int do_dirname(GENERAL_NAME *gen, const char *value, X509V3_CTX *ctx);
+
+const X509V3_EXT_METHOD v3_alt[3] = {
+    {NID_subject_alt_name, 0, ASN1_ITEM_ref(GENERAL_NAMES),
+     0, 0, 0, 0,
+     0, 0,
+     (X509V3_EXT_I2V) i2v_GENERAL_NAMES,
+     (X509V3_EXT_V2I)v2i_subject_alt,
+     NULL, NULL, NULL},
+
+    {NID_issuer_alt_name, 0, ASN1_ITEM_ref(GENERAL_NAMES),
+     0, 0, 0, 0,
+     0, 0,
+     (X509V3_EXT_I2V) i2v_GENERAL_NAMES,
+     (X509V3_EXT_V2I)v2i_issuer_alt,
+     NULL, NULL, NULL},
+
+    {NID_certificate_issuer, 0, ASN1_ITEM_ref(GENERAL_NAMES),
+     0, 0, 0, 0,
+     0, 0,
+     (X509V3_EXT_I2V) i2v_GENERAL_NAMES,
+     NULL, NULL, NULL, NULL},
+};
+
+STACK_OF(CONF_VALUE) *i2v_GENERAL_NAMES(X509V3_EXT_METHOD *method,
+                                        GENERAL_NAMES *gens,
+                                        STACK_OF(CONF_VALUE) *ret)
+{
+    int i;
+    GENERAL_NAME *gen;
+    for (i = 0; i < sk_GENERAL_NAME_num(gens); i++) {
+        gen = sk_GENERAL_NAME_value(gens, i);
+        ret = i2v_GENERAL_NAME(method, gen, ret);
+    }
+    if (!ret)
+        return sk_CONF_VALUE_new_null();
+    return ret;
+}
+
+STACK_OF(CONF_VALUE) *i2v_GENERAL_NAME(X509V3_EXT_METHOD *method,
+                                       GENERAL_NAME *gen,
+                                       STACK_OF(CONF_VALUE) *ret)
+{
+    unsigned char *p;
+    char oline[256], htmp[5];
+    int i;
+
+    switch (gen->type) {
+    case GEN_OTHERNAME:
+        if (!X509V3_add_value("othername", "<unsupported>", &ret))
+            return NULL;
+        break;
+
+    case GEN_X400:
+        if (!X509V3_add_value("X400Name", "<unsupported>", &ret))
+            return NULL;
+        break;
+
+    case GEN_EDIPARTY:
+        if (!X509V3_add_value("EdiPartyName", "<unsupported>", &ret))
+            return NULL;
+        break;
+
+    case GEN_EMAIL:
+        if (!X509V3_add_value_uchar("email", gen->d.ia5->data, &ret))
+            return NULL;
+        break;
+
+    case GEN_DNS:
+        if (!X509V3_add_value_uchar("DNS", gen->d.ia5->data, &ret))
+            return NULL;
+        break;
+
+    case GEN_URI:
+        if (!X509V3_add_value_uchar("URI", gen->d.ia5->data, &ret))
+            return NULL;
+        break;
+
+    case GEN_DIRNAME:
+        if (X509_NAME_oneline(gen->d.dirn, oline, sizeof(oline)) == NULL
+                || !X509V3_add_value("DirName", oline, &ret))
+            return NULL;
+        break;
+
+    case GEN_IPADD:
+        p = gen->d.ip->data;
+        if (gen->d.ip->length == 4)
+            BIO_snprintf(oline, sizeof(oline), "%d.%d.%d.%d",
+                         p[0], p[1], p[2], p[3]);
+        else if (gen->d.ip->length == 16) {
+            oline[0] = 0;
+            for (i = 0; i < 8; i++) {
+                BIO_snprintf(htmp, sizeof(htmp), "%X", p[0] << 8 | p[1]);
+                p += 2;
+                strcat(oline, htmp);
+                if (i != 7)
+                    strcat(oline, ":");
+            }
+        } else {
+            if (!X509V3_add_value("IP Address", "<invalid>", &ret))
+                return NULL;
+            break;
+        }
+        if (!X509V3_add_value("IP Address", oline, &ret))
+            return NULL;
+        break;
+
+    case GEN_RID:
+        i2t_ASN1_OBJECT(oline, 256, gen->d.rid);
+        if (!X509V3_add_value("Registered ID", oline, &ret))
+            return NULL;
+        break;
+    }
+    return ret;
+}
+
+int GENERAL_NAME_print(BIO *out, GENERAL_NAME *gen)
+{
+    unsigned char *p;
+    int i;
+    switch (gen->type) {
+    case GEN_OTHERNAME:
+        BIO_printf(out, "othername:<unsupported>");
+        break;
+
+    case GEN_X400:
+        BIO_printf(out, "X400Name:<unsupported>");
+        break;
+
+    case GEN_EDIPARTY:
+        /* Maybe fix this: it is supported now */
+        BIO_printf(out, "EdiPartyName:<unsupported>");
+        break;
+
+    case GEN_EMAIL:
+        BIO_printf(out, "email:%s", gen->d.ia5->data);
+        break;
+
+    case GEN_DNS:
+        BIO_printf(out, "DNS:%s", gen->d.ia5->data);
+        break;
+
+    case GEN_URI:
+        BIO_printf(out, "URI:%s", gen->d.ia5->data);
+        break;
+
+    case GEN_DIRNAME:
+        BIO_printf(out, "DirName:");
+        X509_NAME_print_ex(out, gen->d.dirn, 0, XN_FLAG_ONELINE);
+        break;
+
+    case GEN_IPADD:
+        p = gen->d.ip->data;
+        if (gen->d.ip->length == 4)
+            BIO_printf(out, "IP Address:%d.%d.%d.%d", p[0], p[1], p[2], p[3]);
+        else if (gen->d.ip->length == 16) {
+            BIO_printf(out, "IP Address");
+            for (i = 0; i < 8; i++) {
+                BIO_printf(out, ":%X", p[0] << 8 | p[1]);
+                p += 2;
+            }
+            BIO_puts(out, "\n");
+        } else {
+            BIO_printf(out, "IP Address:<invalid>");
+            break;
+        }
+        break;
+
+    case GEN_RID:
+        BIO_printf(out, "Registered ID:");
+        i2a_ASN1_OBJECT(out, gen->d.rid);
+        break;
+    }
+    return 1;
+}
+
+static GENERAL_NAMES *v2i_issuer_alt(X509V3_EXT_METHOD *method,
+                                     X509V3_CTX *ctx,
+                                     STACK_OF(CONF_VALUE) *nval)
+{
+    const int num = sk_CONF_VALUE_num(nval);
+    GENERAL_NAMES *gens = sk_GENERAL_NAME_new_reserve(NULL, num);
+    int i;
+
+    if (gens == NULL) {
+        X509V3err(X509V3_F_V2I_ISSUER_ALT, ERR_R_MALLOC_FAILURE);
+        sk_GENERAL_NAME_free(gens);
+        return NULL;
+    }
+    for (i = 0; i < num; i++) {
+        CONF_VALUE *cnf = sk_CONF_VALUE_value(nval, i);
+
+        if (!name_cmp(cnf->name, "issuer")
+            && cnf->value && strcmp(cnf->value, "copy") == 0) {
+            if (!copy_issuer(ctx, gens))
+                goto err;
+        } else {
+            GENERAL_NAME *gen = v2i_GENERAL_NAME(method, ctx, cnf);
+
+            if (gen == NULL)
+                goto err;
+            sk_GENERAL_NAME_push(gens, gen); /* no failure as it was reserved */
+        }
+    }
+    return gens;
+ err:
+    sk_GENERAL_NAME_pop_free(gens, GENERAL_NAME_free);
+    return NULL;
+}
+
+/* Append subject altname of issuer to issuer alt name of subject */
+
+static int copy_issuer(X509V3_CTX *ctx, GENERAL_NAMES *gens)
+{
+    GENERAL_NAMES *ialt;
+    GENERAL_NAME *gen;
+    X509_EXTENSION *ext;
+    int i, num;
+
+    if (ctx && (ctx->flags == CTX_TEST))
+        return 1;
+    if (!ctx || !ctx->issuer_cert) {
+        X509V3err(X509V3_F_COPY_ISSUER, X509V3_R_NO_ISSUER_DETAILS);
+        goto err;
+    }
+    i = X509_get_ext_by_NID(ctx->issuer_cert, NID_subject_alt_name, -1);
+    if (i < 0)
+        return 1;
+    if ((ext = X509_get_ext(ctx->issuer_cert, i)) == NULL
+        || (ialt = X509V3_EXT_d2i(ext)) == NULL) {
+        X509V3err(X509V3_F_COPY_ISSUER, X509V3_R_ISSUER_DECODE_ERROR);
+        goto err;
+    }
+
+    num = sk_GENERAL_NAME_num(ialt);
+    if (!sk_GENERAL_NAME_reserve(gens, num)) {
+        X509V3err(X509V3_F_COPY_ISSUER, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    for (i = 0; i < num; i++) {
+        gen = sk_GENERAL_NAME_value(ialt, i);
+        sk_GENERAL_NAME_push(gens, gen);     /* no failure as it was reserved */
+    }
+    sk_GENERAL_NAME_free(ialt);
+
+    return 1;
+
+ err:
+    return 0;
+
+}
+
+static GENERAL_NAMES *v2i_subject_alt(X509V3_EXT_METHOD *method,
+                                      X509V3_CTX *ctx,
+                                      STACK_OF(CONF_VALUE) *nval)
+{
+    GENERAL_NAMES *gens;
+    CONF_VALUE *cnf;
+    const int num = sk_CONF_VALUE_num(nval);
+    int i;
+
+    gens = sk_GENERAL_NAME_new_reserve(NULL, num);
+    if (gens == NULL) {
+        X509V3err(X509V3_F_V2I_SUBJECT_ALT, ERR_R_MALLOC_FAILURE);
+        sk_GENERAL_NAME_free(gens);
+        return NULL;
+    }
+
+    for (i = 0; i < num; i++) {
+        cnf = sk_CONF_VALUE_value(nval, i);
+        if (!name_cmp(cnf->name, "email")
+            && cnf->value && strcmp(cnf->value, "copy") == 0) {
+            if (!copy_email(ctx, gens, 0))
+                goto err;
+        } else if (!name_cmp(cnf->name, "email")
+                   && cnf->value && strcmp(cnf->value, "move") == 0) {
+            if (!copy_email(ctx, gens, 1))
+                goto err;
+        } else {
+            GENERAL_NAME *gen;
+            if ((gen = v2i_GENERAL_NAME(method, ctx, cnf)) == NULL)
+                goto err;
+            sk_GENERAL_NAME_push(gens, gen); /* no failure as it was reserved */
+        }
+    }
+    return gens;
+ err:
+    sk_GENERAL_NAME_pop_free(gens, GENERAL_NAME_free);
+    return NULL;
+}
+
+/*
+ * Copy any email addresses in a certificate or request to GENERAL_NAMES
+ */
+
+static int copy_email(X509V3_CTX *ctx, GENERAL_NAMES *gens, int move_p)
+{
+    X509_NAME *nm;
+    ASN1_IA5STRING *email = NULL;
+    X509_NAME_ENTRY *ne;
+    GENERAL_NAME *gen = NULL;
+    int i = -1;
+
+    if (ctx != NULL && ctx->flags == CTX_TEST)
+        return 1;
+    if (ctx == NULL
+        || (ctx->subject_cert == NULL && ctx->subject_req == NULL)) {
+        X509V3err(X509V3_F_COPY_EMAIL, X509V3_R_NO_SUBJECT_DETAILS);
+        goto err;
+    }
+    /* Find the subject name */
+    if (ctx->subject_cert)
+        nm = X509_get_subject_name(ctx->subject_cert);
+    else
+        nm = X509_REQ_get_subject_name(ctx->subject_req);
+
+    /* Now add any email address(es) to STACK */
+    while ((i = X509_NAME_get_index_by_NID(nm,
+                                           NID_pkcs9_emailAddress, i)) >= 0) {
+        ne = X509_NAME_get_entry(nm, i);
+        email = ASN1_STRING_dup(X509_NAME_ENTRY_get_data(ne));
+        if (move_p) {
+            X509_NAME_delete_entry(nm, i);
+            X509_NAME_ENTRY_free(ne);
+            i--;
+        }
+        if (email == NULL || (gen = GENERAL_NAME_new()) == NULL) {
+            X509V3err(X509V3_F_COPY_EMAIL, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        gen->d.ia5 = email;
+        email = NULL;
+        gen->type = GEN_EMAIL;
+        if (!sk_GENERAL_NAME_push(gens, gen)) {
+            X509V3err(X509V3_F_COPY_EMAIL, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        gen = NULL;
+    }
+
+    return 1;
+
+ err:
+    GENERAL_NAME_free(gen);
+    ASN1_IA5STRING_free(email);
+    return 0;
+
+}
+
+GENERAL_NAMES *v2i_GENERAL_NAMES(const X509V3_EXT_METHOD *method,
+                                 X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval)
+{
+    GENERAL_NAME *gen;
+    GENERAL_NAMES *gens;
+    CONF_VALUE *cnf;
+    const int num = sk_CONF_VALUE_num(nval);
+    int i;
+
+    gens = sk_GENERAL_NAME_new_reserve(NULL, num);
+    if (gens == NULL) {
+        X509V3err(X509V3_F_V2I_GENERAL_NAMES, ERR_R_MALLOC_FAILURE);
+        sk_GENERAL_NAME_free(gens);
+        return NULL;
+    }
+
+    for (i = 0; i < num; i++) {
+        cnf = sk_CONF_VALUE_value(nval, i);
+        if ((gen = v2i_GENERAL_NAME(method, ctx, cnf)) == NULL)
+            goto err;
+        sk_GENERAL_NAME_push(gens, gen);    /* no failure as it was reserved */
+    }
+    return gens;
+ err:
+    sk_GENERAL_NAME_pop_free(gens, GENERAL_NAME_free);
+    return NULL;
+}
+
+GENERAL_NAME *v2i_GENERAL_NAME(const X509V3_EXT_METHOD *method,
+                               X509V3_CTX *ctx, CONF_VALUE *cnf)
+{
+    return v2i_GENERAL_NAME_ex(NULL, method, ctx, cnf, 0);
+}
+
+GENERAL_NAME *a2i_GENERAL_NAME(GENERAL_NAME *out,
+                               const X509V3_EXT_METHOD *method,
+                               X509V3_CTX *ctx, int gen_type, const char *value,
+                               int is_nc)
+{
+    char is_string = 0;
+    GENERAL_NAME *gen = NULL;
+
+    if (!value) {
+        X509V3err(X509V3_F_A2I_GENERAL_NAME, X509V3_R_MISSING_VALUE);
+        return NULL;
+    }
+
+    if (out)
+        gen = out;
+    else {
+        gen = GENERAL_NAME_new();
+        if (gen == NULL) {
+            X509V3err(X509V3_F_A2I_GENERAL_NAME, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+    }
+
+    switch (gen_type) {
+    case GEN_URI:
+    case GEN_EMAIL:
+    case GEN_DNS:
+        is_string = 1;
+        break;
+
+    case GEN_RID:
+        {
+            ASN1_OBJECT *obj;
+            if ((obj = OBJ_txt2obj(value, 0)) == NULL) {
+                X509V3err(X509V3_F_A2I_GENERAL_NAME, X509V3_R_BAD_OBJECT);
+                ERR_add_error_data(2, "value=", value);
+                goto err;
+            }
+            gen->d.rid = obj;
+        }
+        break;
+
+    case GEN_IPADD:
+        if (is_nc)
+            gen->d.ip = a2i_IPADDRESS_NC(value);
+        else
+            gen->d.ip = a2i_IPADDRESS(value);
+        if (gen->d.ip == NULL) {
+            X509V3err(X509V3_F_A2I_GENERAL_NAME, X509V3_R_BAD_IP_ADDRESS);
+            ERR_add_error_data(2, "value=", value);
+            goto err;
+        }
+        break;
+
+    case GEN_DIRNAME:
+        if (!do_dirname(gen, value, ctx)) {
+            X509V3err(X509V3_F_A2I_GENERAL_NAME, X509V3_R_DIRNAME_ERROR);
+            goto err;
+        }
+        break;
+
+    case GEN_OTHERNAME:
+        if (!do_othername(gen, value, ctx)) {
+            X509V3err(X509V3_F_A2I_GENERAL_NAME, X509V3_R_OTHERNAME_ERROR);
+            goto err;
+        }
+        break;
+    default:
+        X509V3err(X509V3_F_A2I_GENERAL_NAME, X509V3_R_UNSUPPORTED_TYPE);
+        goto err;
+    }
+
+    if (is_string) {
+        if ((gen->d.ia5 = ASN1_IA5STRING_new()) == NULL ||
+            !ASN1_STRING_set(gen->d.ia5, (unsigned char *)value,
+                             strlen(value))) {
+            X509V3err(X509V3_F_A2I_GENERAL_NAME, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+
+    gen->type = gen_type;
+
+    return gen;
+
+ err:
+    if (!out)
+        GENERAL_NAME_free(gen);
+    return NULL;
+}
+
+GENERAL_NAME *v2i_GENERAL_NAME_ex(GENERAL_NAME *out,
+                                  const X509V3_EXT_METHOD *method,
+                                  X509V3_CTX *ctx, CONF_VALUE *cnf, int is_nc)
+{
+    int type;
+
+    char *name, *value;
+
+    name = cnf->name;
+    value = cnf->value;
+
+    if (!value) {
+        X509V3err(X509V3_F_V2I_GENERAL_NAME_EX, X509V3_R_MISSING_VALUE);
+        return NULL;
+    }
+
+    if (!name_cmp(name, "email"))
+        type = GEN_EMAIL;
+    else if (!name_cmp(name, "URI"))
+        type = GEN_URI;
+    else if (!name_cmp(name, "DNS"))
+        type = GEN_DNS;
+    else if (!name_cmp(name, "RID"))
+        type = GEN_RID;
+    else if (!name_cmp(name, "IP"))
+        type = GEN_IPADD;
+    else if (!name_cmp(name, "dirName"))
+        type = GEN_DIRNAME;
+    else if (!name_cmp(name, "otherName"))
+        type = GEN_OTHERNAME;
+    else {
+        X509V3err(X509V3_F_V2I_GENERAL_NAME_EX, X509V3_R_UNSUPPORTED_OPTION);
+        ERR_add_error_data(2, "name=", name);
+        return NULL;
+    }
+
+    return a2i_GENERAL_NAME(out, method, ctx, type, value, is_nc);
+
+}
+
+static int do_othername(GENERAL_NAME *gen, const char *value, X509V3_CTX *ctx)
+{
+    char *objtmp = NULL, *p;
+    int objlen;
+
+    if ((p = strchr(value, ';')) == NULL)
+        return 0;
+    if ((gen->d.otherName = OTHERNAME_new()) == NULL)
+        return 0;
+    /*
+     * Free this up because we will overwrite it. no need to free type_id
+     * because it is static
+     */
+    ASN1_TYPE_free(gen->d.otherName->value);
+    if ((gen->d.otherName->value = ASN1_generate_v3(p + 1, ctx)) == NULL)
+        return 0;
+    objlen = p - value;
+    objtmp = OPENSSL_strndup(value, objlen);
+    if (objtmp == NULL)
+        return 0;
+    gen->d.otherName->type_id = OBJ_txt2obj(objtmp, 0);
+    OPENSSL_free(objtmp);
+    if (!gen->d.otherName->type_id)
+        return 0;
+    return 1;
+}
+
+static int do_dirname(GENERAL_NAME *gen, const char *value, X509V3_CTX *ctx)
+{
+    int ret = 0;
+    STACK_OF(CONF_VALUE) *sk = NULL;
+    X509_NAME *nm;
+
+    if ((nm = X509_NAME_new()) == NULL)
+        goto err;
+    sk = X509V3_get_section(ctx, value);
+    if (!sk) {
+        X509V3err(X509V3_F_DO_DIRNAME, X509V3_R_SECTION_NOT_FOUND);
+        ERR_add_error_data(2, "section=", value);
+        goto err;
+    }
+    /* FIXME: should allow other character types... */
+    ret = X509V3_NAME_from_section(nm, sk, MBSTRING_ASC);
+    if (!ret)
+        goto err;
+    gen->d.dirn = nm;
+
+err:
+    if (ret == 0)
+        X509_NAME_free(nm);
+    X509V3_section_free(ctx, sk);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_asid.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_asid.c
new file mode 100644
index 000000000..089f2ae29
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_asid.c
@@ -0,0 +1,880 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Implementation of RFC 3779 section 3.2.
+ */
+
+#include <assert.h>
+#include <stdio.h>
+#include <string.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/x509v3.h>
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+#include <openssl/bn.h>
+#include "ext_dat.h"
+
+#ifndef OPENSSL_NO_RFC3779
+
+/*
+ * OpenSSL ASN.1 template translation of RFC 3779 3.2.3.
+ */
+
+ASN1_SEQUENCE(ASRange) = {
+  ASN1_SIMPLE(ASRange, min, ASN1_INTEGER),
+  ASN1_SIMPLE(ASRange, max, ASN1_INTEGER)
+} ASN1_SEQUENCE_END(ASRange)
+
+ASN1_CHOICE(ASIdOrRange) = {
+  ASN1_SIMPLE(ASIdOrRange, u.id,    ASN1_INTEGER),
+  ASN1_SIMPLE(ASIdOrRange, u.range, ASRange)
+} ASN1_CHOICE_END(ASIdOrRange)
+
+ASN1_CHOICE(ASIdentifierChoice) = {
+  ASN1_SIMPLE(ASIdentifierChoice,      u.inherit,       ASN1_NULL),
+  ASN1_SEQUENCE_OF(ASIdentifierChoice, u.asIdsOrRanges, ASIdOrRange)
+} ASN1_CHOICE_END(ASIdentifierChoice)
+
+ASN1_SEQUENCE(ASIdentifiers) = {
+  ASN1_EXP_OPT(ASIdentifiers, asnum, ASIdentifierChoice, 0),
+  ASN1_EXP_OPT(ASIdentifiers, rdi,   ASIdentifierChoice, 1)
+} ASN1_SEQUENCE_END(ASIdentifiers)
+
+IMPLEMENT_ASN1_FUNCTIONS(ASRange)
+IMPLEMENT_ASN1_FUNCTIONS(ASIdOrRange)
+IMPLEMENT_ASN1_FUNCTIONS(ASIdentifierChoice)
+IMPLEMENT_ASN1_FUNCTIONS(ASIdentifiers)
+
+/*
+ * i2r method for an ASIdentifierChoice.
+ */
+static int i2r_ASIdentifierChoice(BIO *out,
+                                  ASIdentifierChoice *choice,
+                                  int indent, const char *msg)
+{
+    int i;
+    char *s;
+    if (choice == NULL)
+        return 1;
+    BIO_printf(out, "%*s%s:\n", indent, "", msg);
+    switch (choice->type) {
+    case ASIdentifierChoice_inherit:
+        BIO_printf(out, "%*sinherit\n", indent + 2, "");
+        break;
+    case ASIdentifierChoice_asIdsOrRanges:
+        for (i = 0; i < sk_ASIdOrRange_num(choice->u.asIdsOrRanges); i++) {
+            ASIdOrRange *aor =
+                sk_ASIdOrRange_value(choice->u.asIdsOrRanges, i);
+            switch (aor->type) {
+            case ASIdOrRange_id:
+                if ((s = i2s_ASN1_INTEGER(NULL, aor->u.id)) == NULL)
+                    return 0;
+                BIO_printf(out, "%*s%s\n", indent + 2, "", s);
+                OPENSSL_free(s);
+                break;
+            case ASIdOrRange_range:
+                if ((s = i2s_ASN1_INTEGER(NULL, aor->u.range->min)) == NULL)
+                    return 0;
+                BIO_printf(out, "%*s%s-", indent + 2, "", s);
+                OPENSSL_free(s);
+                if ((s = i2s_ASN1_INTEGER(NULL, aor->u.range->max)) == NULL)
+                    return 0;
+                BIO_printf(out, "%s\n", s);
+                OPENSSL_free(s);
+                break;
+            default:
+                return 0;
+            }
+        }
+        break;
+    default:
+        return 0;
+    }
+    return 1;
+}
+
+/*
+ * i2r method for an ASIdentifier extension.
+ */
+static int i2r_ASIdentifiers(const X509V3_EXT_METHOD *method,
+                             void *ext, BIO *out, int indent)
+{
+    ASIdentifiers *asid = ext;
+    return (i2r_ASIdentifierChoice(out, asid->asnum, indent,
+                                   "Autonomous System Numbers") &&
+            i2r_ASIdentifierChoice(out, asid->rdi, indent,
+                                   "Routing Domain Identifiers"));
+}
+
+/*
+ * Sort comparison function for a sequence of ASIdOrRange elements.
+ */
+static int ASIdOrRange_cmp(const ASIdOrRange *const *a_,
+                           const ASIdOrRange *const *b_)
+{
+    const ASIdOrRange *a = *a_, *b = *b_;
+
+    assert((a->type == ASIdOrRange_id && a->u.id != NULL) ||
+           (a->type == ASIdOrRange_range && a->u.range != NULL &&
+            a->u.range->min != NULL && a->u.range->max != NULL));
+
+    assert((b->type == ASIdOrRange_id && b->u.id != NULL) ||
+           (b->type == ASIdOrRange_range && b->u.range != NULL &&
+            b->u.range->min != NULL && b->u.range->max != NULL));
+
+    if (a->type == ASIdOrRange_id && b->type == ASIdOrRange_id)
+        return ASN1_INTEGER_cmp(a->u.id, b->u.id);
+
+    if (a->type == ASIdOrRange_range && b->type == ASIdOrRange_range) {
+        int r = ASN1_INTEGER_cmp(a->u.range->min, b->u.range->min);
+        return r != 0 ? r : ASN1_INTEGER_cmp(a->u.range->max,
+                                             b->u.range->max);
+    }
+
+    if (a->type == ASIdOrRange_id)
+        return ASN1_INTEGER_cmp(a->u.id, b->u.range->min);
+    else
+        return ASN1_INTEGER_cmp(a->u.range->min, b->u.id);
+}
+
+/*
+ * Add an inherit element.
+ */
+int X509v3_asid_add_inherit(ASIdentifiers *asid, int which)
+{
+    ASIdentifierChoice **choice;
+    if (asid == NULL)
+        return 0;
+    switch (which) {
+    case V3_ASID_ASNUM:
+        choice = &asid->asnum;
+        break;
+    case V3_ASID_RDI:
+        choice = &asid->rdi;
+        break;
+    default:
+        return 0;
+    }
+    if (*choice == NULL) {
+        if ((*choice = ASIdentifierChoice_new()) == NULL)
+            return 0;
+        if (((*choice)->u.inherit = ASN1_NULL_new()) == NULL)
+            return 0;
+        (*choice)->type = ASIdentifierChoice_inherit;
+    }
+    return (*choice)->type == ASIdentifierChoice_inherit;
+}
+
+/*
+ * Add an ID or range to an ASIdentifierChoice.
+ */
+int X509v3_asid_add_id_or_range(ASIdentifiers *asid,
+                                int which, ASN1_INTEGER *min, ASN1_INTEGER *max)
+{
+    ASIdentifierChoice **choice;
+    ASIdOrRange *aor;
+    if (asid == NULL)
+        return 0;
+    switch (which) {
+    case V3_ASID_ASNUM:
+        choice = &asid->asnum;
+        break;
+    case V3_ASID_RDI:
+        choice = &asid->rdi;
+        break;
+    default:
+        return 0;
+    }
+    if (*choice != NULL && (*choice)->type == ASIdentifierChoice_inherit)
+        return 0;
+    if (*choice == NULL) {
+        if ((*choice = ASIdentifierChoice_new()) == NULL)
+            return 0;
+        (*choice)->u.asIdsOrRanges = sk_ASIdOrRange_new(ASIdOrRange_cmp);
+        if ((*choice)->u.asIdsOrRanges == NULL)
+            return 0;
+        (*choice)->type = ASIdentifierChoice_asIdsOrRanges;
+    }
+    if ((aor = ASIdOrRange_new()) == NULL)
+        return 0;
+    if (max == NULL) {
+        aor->type = ASIdOrRange_id;
+        aor->u.id = min;
+    } else {
+        aor->type = ASIdOrRange_range;
+        if ((aor->u.range = ASRange_new()) == NULL)
+            goto err;
+        ASN1_INTEGER_free(aor->u.range->min);
+        aor->u.range->min = min;
+        ASN1_INTEGER_free(aor->u.range->max);
+        aor->u.range->max = max;
+    }
+    if (!(sk_ASIdOrRange_push((*choice)->u.asIdsOrRanges, aor)))
+        goto err;
+    return 1;
+
+ err:
+    ASIdOrRange_free(aor);
+    return 0;
+}
+
+/*
+ * Extract min and max values from an ASIdOrRange.
+ */
+static int extract_min_max(ASIdOrRange *aor,
+                           ASN1_INTEGER **min, ASN1_INTEGER **max)
+{
+    if (!ossl_assert(aor != NULL))
+        return 0;
+    switch (aor->type) {
+    case ASIdOrRange_id:
+        *min = aor->u.id;
+        *max = aor->u.id;
+        return 1;
+    case ASIdOrRange_range:
+        *min = aor->u.range->min;
+        *max = aor->u.range->max;
+        return 1;
+    }
+
+    return 0;
+}
+
+/*
+ * Check whether an ASIdentifierChoice is in canonical form.
+ */
+static int ASIdentifierChoice_is_canonical(ASIdentifierChoice *choice)
+{
+    ASN1_INTEGER *a_max_plus_one = NULL;
+    BIGNUM *bn = NULL;
+    int i, ret = 0;
+
+    /*
+     * Empty element or inheritance is canonical.
+     */
+    if (choice == NULL || choice->type == ASIdentifierChoice_inherit)
+        return 1;
+
+    /*
+     * If not a list, or if empty list, it's broken.
+     */
+    if (choice->type != ASIdentifierChoice_asIdsOrRanges ||
+        sk_ASIdOrRange_num(choice->u.asIdsOrRanges) == 0)
+        return 0;
+
+    /*
+     * It's a list, check it.
+     */
+    for (i = 0; i < sk_ASIdOrRange_num(choice->u.asIdsOrRanges) - 1; i++) {
+        ASIdOrRange *a = sk_ASIdOrRange_value(choice->u.asIdsOrRanges, i);
+        ASIdOrRange *b = sk_ASIdOrRange_value(choice->u.asIdsOrRanges, i + 1);
+        ASN1_INTEGER *a_min = NULL, *a_max = NULL, *b_min = NULL, *b_max =
+            NULL;
+
+        if (!extract_min_max(a, &a_min, &a_max)
+                || !extract_min_max(b, &b_min, &b_max))
+            goto done;
+
+        /*
+         * Punt misordered list, overlapping start, or inverted range.
+         */
+        if (ASN1_INTEGER_cmp(a_min, b_min) >= 0 ||
+            ASN1_INTEGER_cmp(a_min, a_max) > 0 ||
+            ASN1_INTEGER_cmp(b_min, b_max) > 0)
+            goto done;
+
+        /*
+         * Calculate a_max + 1 to check for adjacency.
+         */
+        if ((bn == NULL && (bn = BN_new()) == NULL) ||
+            ASN1_INTEGER_to_BN(a_max, bn) == NULL ||
+            !BN_add_word(bn, 1) ||
+            (a_max_plus_one =
+             BN_to_ASN1_INTEGER(bn, a_max_plus_one)) == NULL) {
+            X509V3err(X509V3_F_ASIDENTIFIERCHOICE_IS_CANONICAL,
+                      ERR_R_MALLOC_FAILURE);
+            goto done;
+        }
+
+        /*
+         * Punt if adjacent or overlapping.
+         */
+        if (ASN1_INTEGER_cmp(a_max_plus_one, b_min) >= 0)
+            goto done;
+    }
+
+    /*
+     * Check for inverted range.
+     */
+    i = sk_ASIdOrRange_num(choice->u.asIdsOrRanges) - 1;
+    {
+        ASIdOrRange *a = sk_ASIdOrRange_value(choice->u.asIdsOrRanges, i);
+        ASN1_INTEGER *a_min, *a_max;
+        if (a != NULL && a->type == ASIdOrRange_range) {
+            if (!extract_min_max(a, &a_min, &a_max)
+                    || ASN1_INTEGER_cmp(a_min, a_max) > 0)
+                goto done;
+        }
+    }
+
+    ret = 1;
+
+ done:
+    ASN1_INTEGER_free(a_max_plus_one);
+    BN_free(bn);
+    return ret;
+}
+
+/*
+ * Check whether an ASIdentifier extension is in canonical form.
+ */
+int X509v3_asid_is_canonical(ASIdentifiers *asid)
+{
+    return (asid == NULL ||
+            (ASIdentifierChoice_is_canonical(asid->asnum) &&
+             ASIdentifierChoice_is_canonical(asid->rdi)));
+}
+
+/*
+ * Whack an ASIdentifierChoice into canonical form.
+ */
+static int ASIdentifierChoice_canonize(ASIdentifierChoice *choice)
+{
+    ASN1_INTEGER *a_max_plus_one = NULL;
+    BIGNUM *bn = NULL;
+    int i, ret = 0;
+
+    /*
+     * Nothing to do for empty element or inheritance.
+     */
+    if (choice == NULL || choice->type == ASIdentifierChoice_inherit)
+        return 1;
+
+    /*
+     * If not a list, or if empty list, it's broken.
+     */
+    if (choice->type != ASIdentifierChoice_asIdsOrRanges ||
+        sk_ASIdOrRange_num(choice->u.asIdsOrRanges) == 0) {
+        X509V3err(X509V3_F_ASIDENTIFIERCHOICE_CANONIZE,
+                  X509V3_R_EXTENSION_VALUE_ERROR);
+        return 0;
+    }
+
+    /*
+     * We have a non-empty list.  Sort it.
+     */
+    sk_ASIdOrRange_sort(choice->u.asIdsOrRanges);
+
+    /*
+     * Now check for errors and suboptimal encoding, rejecting the
+     * former and fixing the latter.
+     */
+    for (i = 0; i < sk_ASIdOrRange_num(choice->u.asIdsOrRanges) - 1; i++) {
+        ASIdOrRange *a = sk_ASIdOrRange_value(choice->u.asIdsOrRanges, i);
+        ASIdOrRange *b = sk_ASIdOrRange_value(choice->u.asIdsOrRanges, i + 1);
+        ASN1_INTEGER *a_min = NULL, *a_max = NULL, *b_min = NULL, *b_max =
+            NULL;
+
+        if (!extract_min_max(a, &a_min, &a_max)
+                || !extract_min_max(b, &b_min, &b_max))
+            goto done;
+
+        /*
+         * Make sure we're properly sorted (paranoia).
+         */
+        if (!ossl_assert(ASN1_INTEGER_cmp(a_min, b_min) <= 0))
+            goto done;
+
+        /*
+         * Punt inverted ranges.
+         */
+        if (ASN1_INTEGER_cmp(a_min, a_max) > 0 ||
+            ASN1_INTEGER_cmp(b_min, b_max) > 0)
+            goto done;
+
+        /*
+         * Check for overlaps.
+         */
+        if (ASN1_INTEGER_cmp(a_max, b_min) >= 0) {
+            X509V3err(X509V3_F_ASIDENTIFIERCHOICE_CANONIZE,
+                      X509V3_R_EXTENSION_VALUE_ERROR);
+            goto done;
+        }
+
+        /*
+         * Calculate a_max + 1 to check for adjacency.
+         */
+        if ((bn == NULL && (bn = BN_new()) == NULL) ||
+            ASN1_INTEGER_to_BN(a_max, bn) == NULL ||
+            !BN_add_word(bn, 1) ||
+            (a_max_plus_one =
+             BN_to_ASN1_INTEGER(bn, a_max_plus_one)) == NULL) {
+            X509V3err(X509V3_F_ASIDENTIFIERCHOICE_CANONIZE,
+                      ERR_R_MALLOC_FAILURE);
+            goto done;
+        }
+
+        /*
+         * If a and b are adjacent, merge them.
+         */
+        if (ASN1_INTEGER_cmp(a_max_plus_one, b_min) == 0) {
+            ASRange *r;
+            switch (a->type) {
+            case ASIdOrRange_id:
+                if ((r = OPENSSL_malloc(sizeof(*r))) == NULL) {
+                    X509V3err(X509V3_F_ASIDENTIFIERCHOICE_CANONIZE,
+                              ERR_R_MALLOC_FAILURE);
+                    goto done;
+                }
+                r->min = a_min;
+                r->max = b_max;
+                a->type = ASIdOrRange_range;
+                a->u.range = r;
+                break;
+            case ASIdOrRange_range:
+                ASN1_INTEGER_free(a->u.range->max);
+                a->u.range->max = b_max;
+                break;
+            }
+            switch (b->type) {
+            case ASIdOrRange_id:
+                b->u.id = NULL;
+                break;
+            case ASIdOrRange_range:
+                b->u.range->max = NULL;
+                break;
+            }
+            ASIdOrRange_free(b);
+            (void)sk_ASIdOrRange_delete(choice->u.asIdsOrRanges, i + 1);
+            i--;
+            continue;
+        }
+    }
+
+    /*
+     * Check for final inverted range.
+     */
+    i = sk_ASIdOrRange_num(choice->u.asIdsOrRanges) - 1;
+    {
+        ASIdOrRange *a = sk_ASIdOrRange_value(choice->u.asIdsOrRanges, i);
+        ASN1_INTEGER *a_min, *a_max;
+        if (a != NULL && a->type == ASIdOrRange_range) {
+            if (!extract_min_max(a, &a_min, &a_max)
+                    || ASN1_INTEGER_cmp(a_min, a_max) > 0)
+                goto done;
+        }
+    }
+
+    /* Paranoia */
+    if (!ossl_assert(ASIdentifierChoice_is_canonical(choice)))
+        goto done;
+
+    ret = 1;
+
+ done:
+    ASN1_INTEGER_free(a_max_plus_one);
+    BN_free(bn);
+    return ret;
+}
+
+/*
+ * Whack an ASIdentifier extension into canonical form.
+ */
+int X509v3_asid_canonize(ASIdentifiers *asid)
+{
+    return (asid == NULL ||
+            (ASIdentifierChoice_canonize(asid->asnum) &&
+             ASIdentifierChoice_canonize(asid->rdi)));
+}
+
+/*
+ * v2i method for an ASIdentifier extension.
+ */
+static void *v2i_ASIdentifiers(const struct v3_ext_method *method,
+                               struct v3_ext_ctx *ctx,
+                               STACK_OF(CONF_VALUE) *values)
+{
+    ASN1_INTEGER *min = NULL, *max = NULL;
+    ASIdentifiers *asid = NULL;
+    int i;
+
+    if ((asid = ASIdentifiers_new()) == NULL) {
+        X509V3err(X509V3_F_V2I_ASIDENTIFIERS, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    for (i = 0; i < sk_CONF_VALUE_num(values); i++) {
+        CONF_VALUE *val = sk_CONF_VALUE_value(values, i);
+        int i1 = 0, i2 = 0, i3 = 0, is_range = 0, which = 0;
+
+        /*
+         * Figure out whether this is an AS or an RDI.
+         */
+        if (!name_cmp(val->name, "AS")) {
+            which = V3_ASID_ASNUM;
+        } else if (!name_cmp(val->name, "RDI")) {
+            which = V3_ASID_RDI;
+        } else {
+            X509V3err(X509V3_F_V2I_ASIDENTIFIERS,
+                      X509V3_R_EXTENSION_NAME_ERROR);
+            X509V3_conf_err(val);
+            goto err;
+        }
+
+        /*
+         * Handle inheritance.
+         */
+        if (strcmp(val->value, "inherit") == 0) {
+            if (X509v3_asid_add_inherit(asid, which))
+                continue;
+            X509V3err(X509V3_F_V2I_ASIDENTIFIERS,
+                      X509V3_R_INVALID_INHERITANCE);
+            X509V3_conf_err(val);
+            goto err;
+        }
+
+        /*
+         * Number, range, or mistake, pick it apart and figure out which.
+         */
+        i1 = strspn(val->value, "0123456789");
+        if (val->value[i1] == '\0') {
+            is_range = 0;
+        } else {
+            is_range = 1;
+            i2 = i1 + strspn(val->value + i1, " \t");
+            if (val->value[i2] != '-') {
+                X509V3err(X509V3_F_V2I_ASIDENTIFIERS,
+                          X509V3_R_INVALID_ASNUMBER);
+                X509V3_conf_err(val);
+                goto err;
+            }
+            i2++;
+            i2 = i2 + strspn(val->value + i2, " \t");
+            i3 = i2 + strspn(val->value + i2, "0123456789");
+            if (val->value[i3] != '\0') {
+                X509V3err(X509V3_F_V2I_ASIDENTIFIERS,
+                          X509V3_R_INVALID_ASRANGE);
+                X509V3_conf_err(val);
+                goto err;
+            }
+        }
+
+        /*
+         * Syntax is ok, read and add it.
+         */
+        if (!is_range) {
+            if (!X509V3_get_value_int(val, &min)) {
+                X509V3err(X509V3_F_V2I_ASIDENTIFIERS, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+        } else {
+            char *s = OPENSSL_strdup(val->value);
+            if (s == NULL) {
+                X509V3err(X509V3_F_V2I_ASIDENTIFIERS, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            s[i1] = '\0';
+            min = s2i_ASN1_INTEGER(NULL, s);
+            max = s2i_ASN1_INTEGER(NULL, s + i2);
+            OPENSSL_free(s);
+            if (min == NULL || max == NULL) {
+                X509V3err(X509V3_F_V2I_ASIDENTIFIERS, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            if (ASN1_INTEGER_cmp(min, max) > 0) {
+                X509V3err(X509V3_F_V2I_ASIDENTIFIERS,
+                          X509V3_R_EXTENSION_VALUE_ERROR);
+                goto err;
+            }
+        }
+        if (!X509v3_asid_add_id_or_range(asid, which, min, max)) {
+            X509V3err(X509V3_F_V2I_ASIDENTIFIERS, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        min = max = NULL;
+    }
+
+    /*
+     * Canonize the result, then we're done.
+     */
+    if (!X509v3_asid_canonize(asid))
+        goto err;
+    return asid;
+
+ err:
+    ASIdentifiers_free(asid);
+    ASN1_INTEGER_free(min);
+    ASN1_INTEGER_free(max);
+    return NULL;
+}
+
+/*
+ * OpenSSL dispatch.
+ */
+const X509V3_EXT_METHOD v3_asid = {
+    NID_sbgp_autonomousSysNum,  /* nid */
+    0,                          /* flags */
+    ASN1_ITEM_ref(ASIdentifiers), /* template */
+    0, 0, 0, 0,                 /* old functions, ignored */
+    0,                          /* i2s */
+    0,                          /* s2i */
+    0,                          /* i2v */
+    v2i_ASIdentifiers,          /* v2i */
+    i2r_ASIdentifiers,          /* i2r */
+    0,                          /* r2i */
+    NULL                        /* extension-specific data */
+};
+
+/*
+ * Figure out whether extension uses inheritance.
+ */
+int X509v3_asid_inherits(ASIdentifiers *asid)
+{
+    return (asid != NULL &&
+            ((asid->asnum != NULL &&
+              asid->asnum->type == ASIdentifierChoice_inherit) ||
+             (asid->rdi != NULL &&
+              asid->rdi->type == ASIdentifierChoice_inherit)));
+}
+
+/*
+ * Figure out whether parent contains child.
+ */
+static int asid_contains(ASIdOrRanges *parent, ASIdOrRanges *child)
+{
+    ASN1_INTEGER *p_min = NULL, *p_max = NULL, *c_min = NULL, *c_max = NULL;
+    int p, c;
+
+    if (child == NULL || parent == child)
+        return 1;
+    if (parent == NULL)
+        return 0;
+
+    p = 0;
+    for (c = 0; c < sk_ASIdOrRange_num(child); c++) {
+        if (!extract_min_max(sk_ASIdOrRange_value(child, c), &c_min, &c_max))
+            return 0;
+        for (;; p++) {
+            if (p >= sk_ASIdOrRange_num(parent))
+                return 0;
+            if (!extract_min_max(sk_ASIdOrRange_value(parent, p), &p_min,
+                                 &p_max))
+                return 0;
+            if (ASN1_INTEGER_cmp(p_max, c_max) < 0)
+                continue;
+            if (ASN1_INTEGER_cmp(p_min, c_min) > 0)
+                return 0;
+            break;
+        }
+    }
+
+    return 1;
+}
+
+/*
+ * Test whether a is a subset of b.
+ */
+int X509v3_asid_subset(ASIdentifiers *a, ASIdentifiers *b)
+{
+    return (a == NULL ||
+            a == b ||
+            (b != NULL &&
+             !X509v3_asid_inherits(a) &&
+             !X509v3_asid_inherits(b) &&
+             asid_contains(b->asnum->u.asIdsOrRanges,
+                           a->asnum->u.asIdsOrRanges) &&
+             asid_contains(b->rdi->u.asIdsOrRanges,
+                           a->rdi->u.asIdsOrRanges)));
+}
+
+/*
+ * Validation error handling via callback.
+ */
+#define validation_err(_err_)           \
+  do {                                  \
+    if (ctx != NULL) {                  \
+      ctx->error = _err_;               \
+      ctx->error_depth = i;             \
+      ctx->current_cert = x;            \
+      ret = ctx->verify_cb(0, ctx);     \
+    } else {                            \
+      ret = 0;                          \
+    }                                   \
+    if (!ret)                           \
+      goto done;                        \
+  } while (0)
+
+/*
+ * Core code for RFC 3779 3.3 path validation.
+ */
+static int asid_validate_path_internal(X509_STORE_CTX *ctx,
+                                       STACK_OF(X509) *chain,
+                                       ASIdentifiers *ext)
+{
+    ASIdOrRanges *child_as = NULL, *child_rdi = NULL;
+    int i, ret = 1, inherit_as = 0, inherit_rdi = 0;
+    X509 *x;
+
+    if (!ossl_assert(chain != NULL && sk_X509_num(chain) > 0)
+            || !ossl_assert(ctx != NULL || ext != NULL)
+            || !ossl_assert(ctx == NULL || ctx->verify_cb != NULL)) {
+        if (ctx != NULL)
+            ctx->error = X509_V_ERR_UNSPECIFIED;
+        return 0;
+    }
+
+
+    /*
+     * Figure out where to start.  If we don't have an extension to
+     * check, we're done.  Otherwise, check canonical form and
+     * set up for walking up the chain.
+     */
+    if (ext != NULL) {
+        i = -1;
+        x = NULL;
+    } else {
+        i = 0;
+        x = sk_X509_value(chain, i);
+        if ((ext = x->rfc3779_asid) == NULL)
+            goto done;
+    }
+    if (!X509v3_asid_is_canonical(ext))
+        validation_err(X509_V_ERR_INVALID_EXTENSION);
+    if (ext->asnum != NULL) {
+        switch (ext->asnum->type) {
+        case ASIdentifierChoice_inherit:
+            inherit_as = 1;
+            break;
+        case ASIdentifierChoice_asIdsOrRanges:
+            child_as = ext->asnum->u.asIdsOrRanges;
+            break;
+        }
+    }
+    if (ext->rdi != NULL) {
+        switch (ext->rdi->type) {
+        case ASIdentifierChoice_inherit:
+            inherit_rdi = 1;
+            break;
+        case ASIdentifierChoice_asIdsOrRanges:
+            child_rdi = ext->rdi->u.asIdsOrRanges;
+            break;
+        }
+    }
+
+    /*
+     * Now walk up the chain.  Extensions must be in canonical form, no
+     * cert may list resources that its parent doesn't list.
+     */
+    for (i++; i < sk_X509_num(chain); i++) {
+        x = sk_X509_value(chain, i);
+        if (!ossl_assert(x != NULL)) {
+            if (ctx != NULL)
+                ctx->error = X509_V_ERR_UNSPECIFIED;
+            return 0;
+        }
+        if (x->rfc3779_asid == NULL) {
+            if (child_as != NULL || child_rdi != NULL)
+                validation_err(X509_V_ERR_UNNESTED_RESOURCE);
+            continue;
+        }
+        if (!X509v3_asid_is_canonical(x->rfc3779_asid))
+            validation_err(X509_V_ERR_INVALID_EXTENSION);
+        if (x->rfc3779_asid->asnum == NULL && child_as != NULL) {
+            validation_err(X509_V_ERR_UNNESTED_RESOURCE);
+            child_as = NULL;
+            inherit_as = 0;
+        }
+        if (x->rfc3779_asid->asnum != NULL &&
+            x->rfc3779_asid->asnum->type ==
+            ASIdentifierChoice_asIdsOrRanges) {
+            if (inherit_as
+                || asid_contains(x->rfc3779_asid->asnum->u.asIdsOrRanges,
+                                 child_as)) {
+                child_as = x->rfc3779_asid->asnum->u.asIdsOrRanges;
+                inherit_as = 0;
+            } else {
+                validation_err(X509_V_ERR_UNNESTED_RESOURCE);
+            }
+        }
+        if (x->rfc3779_asid->rdi == NULL && child_rdi != NULL) {
+            validation_err(X509_V_ERR_UNNESTED_RESOURCE);
+            child_rdi = NULL;
+            inherit_rdi = 0;
+        }
+        if (x->rfc3779_asid->rdi != NULL &&
+            x->rfc3779_asid->rdi->type == ASIdentifierChoice_asIdsOrRanges) {
+            if (inherit_rdi ||
+                asid_contains(x->rfc3779_asid->rdi->u.asIdsOrRanges,
+                              child_rdi)) {
+                child_rdi = x->rfc3779_asid->rdi->u.asIdsOrRanges;
+                inherit_rdi = 0;
+            } else {
+                validation_err(X509_V_ERR_UNNESTED_RESOURCE);
+            }
+        }
+    }
+
+    /*
+     * Trust anchor can't inherit.
+     */
+    if (!ossl_assert(x != NULL)) {
+        if (ctx != NULL)
+            ctx->error = X509_V_ERR_UNSPECIFIED;
+        return 0;
+    }
+    if (x->rfc3779_asid != NULL) {
+        if (x->rfc3779_asid->asnum != NULL &&
+            x->rfc3779_asid->asnum->type == ASIdentifierChoice_inherit)
+            validation_err(X509_V_ERR_UNNESTED_RESOURCE);
+        if (x->rfc3779_asid->rdi != NULL &&
+            x->rfc3779_asid->rdi->type == ASIdentifierChoice_inherit)
+            validation_err(X509_V_ERR_UNNESTED_RESOURCE);
+    }
+
+ done:
+    return ret;
+}
+
+#undef validation_err
+
+/*
+ * RFC 3779 3.3 path validation -- called from X509_verify_cert().
+ */
+int X509v3_asid_validate_path(X509_STORE_CTX *ctx)
+{
+    if (ctx->chain == NULL
+            || sk_X509_num(ctx->chain) == 0
+            || ctx->verify_cb == NULL) {
+        ctx->error = X509_V_ERR_UNSPECIFIED;
+        return 0;
+    }
+    return asid_validate_path_internal(ctx, ctx->chain, NULL);
+}
+
+/*
+ * RFC 3779 3.3 path validation of an extension.
+ * Test whether chain covers extension.
+ */
+int X509v3_asid_validate_resource_set(STACK_OF(X509) *chain,
+                                      ASIdentifiers *ext, int allow_inheritance)
+{
+    if (ext == NULL)
+        return 1;
+    if (chain == NULL || sk_X509_num(chain) == 0)
+        return 0;
+    if (!allow_inheritance && X509v3_asid_inherits(ext))
+        return 0;
+    return asid_validate_path_internal(NULL, chain, ext);
+}
+
+#endif                          /* OPENSSL_NO_RFC3779 */
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_bcons.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_bcons.c
new file mode 100644
index 000000000..3bbf15550
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_bcons.c
@@ -0,0 +1,84 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/conf.h>
+#include <openssl/x509v3.h>
+#include "ext_dat.h"
+
+static STACK_OF(CONF_VALUE) *i2v_BASIC_CONSTRAINTS(X509V3_EXT_METHOD *method,
+                                                   BASIC_CONSTRAINTS *bcons,
+                                                   STACK_OF(CONF_VALUE)
+                                                   *extlist);
+static BASIC_CONSTRAINTS *v2i_BASIC_CONSTRAINTS(X509V3_EXT_METHOD *method,
+                                                X509V3_CTX *ctx,
+                                                STACK_OF(CONF_VALUE) *values);
+
+const X509V3_EXT_METHOD v3_bcons = {
+    NID_basic_constraints, 0,
+    ASN1_ITEM_ref(BASIC_CONSTRAINTS),
+    0, 0, 0, 0,
+    0, 0,
+    (X509V3_EXT_I2V) i2v_BASIC_CONSTRAINTS,
+    (X509V3_EXT_V2I)v2i_BASIC_CONSTRAINTS,
+    NULL, NULL,
+    NULL
+};
+
+ASN1_SEQUENCE(BASIC_CONSTRAINTS) = {
+        ASN1_OPT(BASIC_CONSTRAINTS, ca, ASN1_FBOOLEAN),
+        ASN1_OPT(BASIC_CONSTRAINTS, pathlen, ASN1_INTEGER)
+} ASN1_SEQUENCE_END(BASIC_CONSTRAINTS)
+
+IMPLEMENT_ASN1_FUNCTIONS(BASIC_CONSTRAINTS)
+
+static STACK_OF(CONF_VALUE) *i2v_BASIC_CONSTRAINTS(X509V3_EXT_METHOD *method,
+                                                   BASIC_CONSTRAINTS *bcons,
+                                                   STACK_OF(CONF_VALUE)
+                                                   *extlist)
+{
+    X509V3_add_value_bool("CA", bcons->ca, &extlist);
+    X509V3_add_value_int("pathlen", bcons->pathlen, &extlist);
+    return extlist;
+}
+
+static BASIC_CONSTRAINTS *v2i_BASIC_CONSTRAINTS(X509V3_EXT_METHOD *method,
+                                                X509V3_CTX *ctx,
+                                                STACK_OF(CONF_VALUE) *values)
+{
+    BASIC_CONSTRAINTS *bcons = NULL;
+    CONF_VALUE *val;
+    int i;
+
+    if ((bcons = BASIC_CONSTRAINTS_new()) == NULL) {
+        X509V3err(X509V3_F_V2I_BASIC_CONSTRAINTS, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    for (i = 0; i < sk_CONF_VALUE_num(values); i++) {
+        val = sk_CONF_VALUE_value(values, i);
+        if (strcmp(val->name, "CA") == 0) {
+            if (!X509V3_get_value_bool(val, &bcons->ca))
+                goto err;
+        } else if (strcmp(val->name, "pathlen") == 0) {
+            if (!X509V3_get_value_int(val, &bcons->pathlen))
+                goto err;
+        } else {
+            X509V3err(X509V3_F_V2I_BASIC_CONSTRAINTS, X509V3_R_INVALID_NAME);
+            X509V3_conf_err(val);
+            goto err;
+        }
+    }
+    return bcons;
+ err:
+    BASIC_CONSTRAINTS_free(bcons);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_bitst.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_bitst.c
new file mode 100644
index 000000000..4802116ba
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_bitst.c
@@ -0,0 +1,93 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/x509v3.h>
+#include "ext_dat.h"
+
+static BIT_STRING_BITNAME ns_cert_type_table[] = {
+    {0, "SSL Client", "client"},
+    {1, "SSL Server", "server"},
+    {2, "S/MIME", "email"},
+    {3, "Object Signing", "objsign"},
+    {4, "Unused", "reserved"},
+    {5, "SSL CA", "sslCA"},
+    {6, "S/MIME CA", "emailCA"},
+    {7, "Object Signing CA", "objCA"},
+    {-1, NULL, NULL}
+};
+
+static BIT_STRING_BITNAME key_usage_type_table[] = {
+    {0, "Digital Signature", "digitalSignature"},
+    {1, "Non Repudiation", "nonRepudiation"},
+    {2, "Key Encipherment", "keyEncipherment"},
+    {3, "Data Encipherment", "dataEncipherment"},
+    {4, "Key Agreement", "keyAgreement"},
+    {5, "Certificate Sign", "keyCertSign"},
+    {6, "CRL Sign", "cRLSign"},
+    {7, "Encipher Only", "encipherOnly"},
+    {8, "Decipher Only", "decipherOnly"},
+    {-1, NULL, NULL}
+};
+
+const X509V3_EXT_METHOD v3_nscert =
+EXT_BITSTRING(NID_netscape_cert_type, ns_cert_type_table);
+const X509V3_EXT_METHOD v3_key_usage =
+EXT_BITSTRING(NID_key_usage, key_usage_type_table);
+
+STACK_OF(CONF_VALUE) *i2v_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
+                                          ASN1_BIT_STRING *bits,
+                                          STACK_OF(CONF_VALUE) *ret)
+{
+    BIT_STRING_BITNAME *bnam;
+    for (bnam = method->usr_data; bnam->lname; bnam++) {
+        if (ASN1_BIT_STRING_get_bit(bits, bnam->bitnum))
+            X509V3_add_value(bnam->lname, NULL, &ret);
+    }
+    return ret;
+}
+
+ASN1_BIT_STRING *v2i_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
+                                     X509V3_CTX *ctx,
+                                     STACK_OF(CONF_VALUE) *nval)
+{
+    CONF_VALUE *val;
+    ASN1_BIT_STRING *bs;
+    int i;
+    BIT_STRING_BITNAME *bnam;
+    if ((bs = ASN1_BIT_STRING_new()) == NULL) {
+        X509V3err(X509V3_F_V2I_ASN1_BIT_STRING, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    for (i = 0; i < sk_CONF_VALUE_num(nval); i++) {
+        val = sk_CONF_VALUE_value(nval, i);
+        for (bnam = method->usr_data; bnam->lname; bnam++) {
+            if (strcmp(bnam->sname, val->name) == 0
+                || strcmp(bnam->lname, val->name) == 0) {
+                if (!ASN1_BIT_STRING_set_bit(bs, bnam->bitnum, 1)) {
+                    X509V3err(X509V3_F_V2I_ASN1_BIT_STRING,
+                              ERR_R_MALLOC_FAILURE);
+                    ASN1_BIT_STRING_free(bs);
+                    return NULL;
+                }
+                break;
+            }
+        }
+        if (!bnam->lname) {
+            X509V3err(X509V3_F_V2I_ASN1_BIT_STRING,
+                      X509V3_R_UNKNOWN_BIT_STRING_ARGUMENT);
+            X509V3_conf_err(val);
+            ASN1_BIT_STRING_free(bs);
+            return NULL;
+        }
+    }
+    return bs;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_conf.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_conf.c
new file mode 100644
index 000000000..7acaebfa2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_conf.c
@@ -0,0 +1,511 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* extension creation utilities */
+
+#include <stdio.h>
+#include "internal/ctype.h"
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/x509.h>
+#include "internal/x509_int.h"
+#include <openssl/x509v3.h>
+
+static int v3_check_critical(const char **value);
+static int v3_check_generic(const char **value);
+static X509_EXTENSION *do_ext_nconf(CONF *conf, X509V3_CTX *ctx, int ext_nid,
+                                    int crit, const char *value);
+static X509_EXTENSION *v3_generic_extension(const char *ext, const char *value,
+                                            int crit, int type,
+                                            X509V3_CTX *ctx);
+static char *conf_lhash_get_string(void *db, const char *section, const char *value);
+static STACK_OF(CONF_VALUE) *conf_lhash_get_section(void *db, const char *section);
+static X509_EXTENSION *do_ext_i2d(const X509V3_EXT_METHOD *method,
+                                  int ext_nid, int crit, void *ext_struc);
+static unsigned char *generic_asn1(const char *value, X509V3_CTX *ctx,
+                                   long *ext_len);
+/* CONF *conf:  Config file    */
+/* char *name:  Name    */
+/* char *value:  Value    */
+X509_EXTENSION *X509V3_EXT_nconf(CONF *conf, X509V3_CTX *ctx, const char *name,
+                                 const char *value)
+{
+    int crit;
+    int ext_type;
+    X509_EXTENSION *ret;
+    crit = v3_check_critical(&value);
+    if ((ext_type = v3_check_generic(&value)))
+        return v3_generic_extension(name, value, crit, ext_type, ctx);
+    ret = do_ext_nconf(conf, ctx, OBJ_sn2nid(name), crit, value);
+    if (!ret) {
+        X509V3err(X509V3_F_X509V3_EXT_NCONF, X509V3_R_ERROR_IN_EXTENSION);
+        ERR_add_error_data(4, "name=", name, ", value=", value);
+    }
+    return ret;
+}
+
+/* CONF *conf:  Config file    */
+/* char *value:  Value    */
+X509_EXTENSION *X509V3_EXT_nconf_nid(CONF *conf, X509V3_CTX *ctx, int ext_nid,
+                                     const char *value)
+{
+    int crit;
+    int ext_type;
+    crit = v3_check_critical(&value);
+    if ((ext_type = v3_check_generic(&value)))
+        return v3_generic_extension(OBJ_nid2sn(ext_nid),
+                                    value, crit, ext_type, ctx);
+    return do_ext_nconf(conf, ctx, ext_nid, crit, value);
+}
+
+/* CONF *conf:  Config file    */
+/* char *value:  Value    */
+static X509_EXTENSION *do_ext_nconf(CONF *conf, X509V3_CTX *ctx, int ext_nid,
+                                    int crit, const char *value)
+{
+    const X509V3_EXT_METHOD *method;
+    X509_EXTENSION *ext;
+    STACK_OF(CONF_VALUE) *nval;
+    void *ext_struc;
+
+    if (ext_nid == NID_undef) {
+        X509V3err(X509V3_F_DO_EXT_NCONF, X509V3_R_UNKNOWN_EXTENSION_NAME);
+        return NULL;
+    }
+    if ((method = X509V3_EXT_get_nid(ext_nid)) == NULL) {
+        X509V3err(X509V3_F_DO_EXT_NCONF, X509V3_R_UNKNOWN_EXTENSION);
+        return NULL;
+    }
+    /* Now get internal extension representation based on type */
+    if (method->v2i) {
+        if (*value == '@')
+            nval = NCONF_get_section(conf, value + 1);
+        else
+            nval = X509V3_parse_list(value);
+        if (nval == NULL || sk_CONF_VALUE_num(nval) <= 0) {
+            X509V3err(X509V3_F_DO_EXT_NCONF,
+                      X509V3_R_INVALID_EXTENSION_STRING);
+            ERR_add_error_data(4, "name=", OBJ_nid2sn(ext_nid), ",section=",
+                               value);
+            if (*value != '@')
+                sk_CONF_VALUE_pop_free(nval, X509V3_conf_free);
+            return NULL;
+        }
+        ext_struc = method->v2i(method, ctx, nval);
+        if (*value != '@')
+            sk_CONF_VALUE_pop_free(nval, X509V3_conf_free);
+        if (!ext_struc)
+            return NULL;
+    } else if (method->s2i) {
+        if ((ext_struc = method->s2i(method, ctx, value)) == NULL)
+            return NULL;
+    } else if (method->r2i) {
+        if (!ctx->db || !ctx->db_meth) {
+            X509V3err(X509V3_F_DO_EXT_NCONF, X509V3_R_NO_CONFIG_DATABASE);
+            return NULL;
+        }
+        if ((ext_struc = method->r2i(method, ctx, value)) == NULL)
+            return NULL;
+    } else {
+        X509V3err(X509V3_F_DO_EXT_NCONF,
+                  X509V3_R_EXTENSION_SETTING_NOT_SUPPORTED);
+        ERR_add_error_data(2, "name=", OBJ_nid2sn(ext_nid));
+        return NULL;
+    }
+
+    ext = do_ext_i2d(method, ext_nid, crit, ext_struc);
+    if (method->it)
+        ASN1_item_free(ext_struc, ASN1_ITEM_ptr(method->it));
+    else
+        method->ext_free(ext_struc);
+    return ext;
+
+}
+
+static X509_EXTENSION *do_ext_i2d(const X509V3_EXT_METHOD *method,
+                                  int ext_nid, int crit, void *ext_struc)
+{
+    unsigned char *ext_der = NULL;
+    int ext_len;
+    ASN1_OCTET_STRING *ext_oct = NULL;
+    X509_EXTENSION *ext;
+    /* Convert internal representation to DER */
+    if (method->it) {
+        ext_der = NULL;
+        ext_len =
+            ASN1_item_i2d(ext_struc, &ext_der, ASN1_ITEM_ptr(method->it));
+        if (ext_len < 0)
+            goto merr;
+    } else {
+        unsigned char *p;
+
+        ext_len = method->i2d(ext_struc, NULL);
+        if ((ext_der = OPENSSL_malloc(ext_len)) == NULL)
+            goto merr;
+        p = ext_der;
+        method->i2d(ext_struc, &p);
+    }
+    if ((ext_oct = ASN1_OCTET_STRING_new()) == NULL)
+        goto merr;
+    ext_oct->data = ext_der;
+    ext_der = NULL;
+    ext_oct->length = ext_len;
+
+    ext = X509_EXTENSION_create_by_NID(NULL, ext_nid, crit, ext_oct);
+    if (!ext)
+        goto merr;
+    ASN1_OCTET_STRING_free(ext_oct);
+
+    return ext;
+
+ merr:
+    X509V3err(X509V3_F_DO_EXT_I2D, ERR_R_MALLOC_FAILURE);
+    OPENSSL_free(ext_der);
+    ASN1_OCTET_STRING_free(ext_oct);
+    return NULL;
+
+}
+
+/* Given an internal structure, nid and critical flag create an extension */
+
+X509_EXTENSION *X509V3_EXT_i2d(int ext_nid, int crit, void *ext_struc)
+{
+    const X509V3_EXT_METHOD *method;
+
+    if ((method = X509V3_EXT_get_nid(ext_nid)) == NULL) {
+        X509V3err(X509V3_F_X509V3_EXT_I2D, X509V3_R_UNKNOWN_EXTENSION);
+        return NULL;
+    }
+    return do_ext_i2d(method, ext_nid, crit, ext_struc);
+}
+
+/* Check the extension string for critical flag */
+static int v3_check_critical(const char **value)
+{
+    const char *p = *value;
+    if ((strlen(p) < 9) || strncmp(p, "critical,", 9))
+        return 0;
+    p += 9;
+    while (ossl_isspace(*p))
+        p++;
+    *value = p;
+    return 1;
+}
+
+/* Check extension string for generic extension and return the type */
+static int v3_check_generic(const char **value)
+{
+    int gen_type = 0;
+    const char *p = *value;
+    if ((strlen(p) >= 4) && strncmp(p, "DER:", 4) == 0) {
+        p += 4;
+        gen_type = 1;
+    } else if ((strlen(p) >= 5) && strncmp(p, "ASN1:", 5) == 0) {
+        p += 5;
+        gen_type = 2;
+    } else
+        return 0;
+
+    while (ossl_isspace(*p))
+        p++;
+    *value = p;
+    return gen_type;
+}
+
+/* Create a generic extension: for now just handle DER type */
+static X509_EXTENSION *v3_generic_extension(const char *ext, const char *value,
+                                            int crit, int gen_type,
+                                            X509V3_CTX *ctx)
+{
+    unsigned char *ext_der = NULL;
+    long ext_len = 0;
+    ASN1_OBJECT *obj = NULL;
+    ASN1_OCTET_STRING *oct = NULL;
+    X509_EXTENSION *extension = NULL;
+
+    if ((obj = OBJ_txt2obj(ext, 0)) == NULL) {
+        X509V3err(X509V3_F_V3_GENERIC_EXTENSION,
+                  X509V3_R_EXTENSION_NAME_ERROR);
+        ERR_add_error_data(2, "name=", ext);
+        goto err;
+    }
+
+    if (gen_type == 1)
+        ext_der = OPENSSL_hexstr2buf(value, &ext_len);
+    else if (gen_type == 2)
+        ext_der = generic_asn1(value, ctx, &ext_len);
+
+    if (ext_der == NULL) {
+        X509V3err(X509V3_F_V3_GENERIC_EXTENSION,
+                  X509V3_R_EXTENSION_VALUE_ERROR);
+        ERR_add_error_data(2, "value=", value);
+        goto err;
+    }
+
+    if ((oct = ASN1_OCTET_STRING_new()) == NULL) {
+        X509V3err(X509V3_F_V3_GENERIC_EXTENSION, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    oct->data = ext_der;
+    oct->length = ext_len;
+    ext_der = NULL;
+
+    extension = X509_EXTENSION_create_by_OBJ(NULL, obj, crit, oct);
+
+ err:
+    ASN1_OBJECT_free(obj);
+    ASN1_OCTET_STRING_free(oct);
+    OPENSSL_free(ext_der);
+    return extension;
+
+}
+
+static unsigned char *generic_asn1(const char *value, X509V3_CTX *ctx,
+                                   long *ext_len)
+{
+    ASN1_TYPE *typ;
+    unsigned char *ext_der = NULL;
+    typ = ASN1_generate_v3(value, ctx);
+    if (typ == NULL)
+        return NULL;
+    *ext_len = i2d_ASN1_TYPE(typ, &ext_der);
+    ASN1_TYPE_free(typ);
+    return ext_der;
+}
+
+static void delete_ext(STACK_OF(X509_EXTENSION) *sk, X509_EXTENSION *dext)
+{
+    int idx;
+    ASN1_OBJECT *obj;
+    obj = X509_EXTENSION_get_object(dext);
+    while ((idx = X509v3_get_ext_by_OBJ(sk, obj, -1)) >= 0) {
+        X509_EXTENSION *tmpext = X509v3_get_ext(sk, idx);
+        X509v3_delete_ext(sk, idx);
+        X509_EXTENSION_free(tmpext);
+    }
+}
+
+/*
+ * This is the main function: add a bunch of extensions based on a config
+ * file section to an extension STACK.
+ */
+
+int X509V3_EXT_add_nconf_sk(CONF *conf, X509V3_CTX *ctx, const char *section,
+                            STACK_OF(X509_EXTENSION) **sk)
+{
+    X509_EXTENSION *ext;
+    STACK_OF(CONF_VALUE) *nval;
+    CONF_VALUE *val;
+    int i;
+
+    if ((nval = NCONF_get_section(conf, section)) == NULL)
+        return 0;
+    for (i = 0; i < sk_CONF_VALUE_num(nval); i++) {
+        val = sk_CONF_VALUE_value(nval, i);
+        if ((ext = X509V3_EXT_nconf(conf, ctx, val->name, val->value)) == NULL)
+            return 0;
+        if (ctx->flags == X509V3_CTX_REPLACE)
+            delete_ext(*sk, ext);
+        if (sk != NULL) {
+            if (X509v3_add_ext(sk, ext, -1) == NULL) {
+                X509_EXTENSION_free(ext);
+                return 0;
+            }
+        }
+        X509_EXTENSION_free(ext);
+    }
+    return 1;
+}
+
+/*
+ * Convenience functions to add extensions to a certificate, CRL and request
+ */
+
+int X509V3_EXT_add_nconf(CONF *conf, X509V3_CTX *ctx, const char *section,
+                         X509 *cert)
+{
+    STACK_OF(X509_EXTENSION) **sk = NULL;
+    if (cert)
+        sk = &cert->cert_info.extensions;
+    return X509V3_EXT_add_nconf_sk(conf, ctx, section, sk);
+}
+
+/* Same as above but for a CRL */
+
+int X509V3_EXT_CRL_add_nconf(CONF *conf, X509V3_CTX *ctx, const char *section,
+                             X509_CRL *crl)
+{
+    STACK_OF(X509_EXTENSION) **sk = NULL;
+    if (crl)
+        sk = &crl->crl.extensions;
+    return X509V3_EXT_add_nconf_sk(conf, ctx, section, sk);
+}
+
+/* Add extensions to certificate request */
+
+int X509V3_EXT_REQ_add_nconf(CONF *conf, X509V3_CTX *ctx, const char *section,
+                             X509_REQ *req)
+{
+    STACK_OF(X509_EXTENSION) *extlist = NULL, **sk = NULL;
+    int i;
+    if (req)
+        sk = &extlist;
+    i = X509V3_EXT_add_nconf_sk(conf, ctx, section, sk);
+    if (!i || !sk)
+        return i;
+    i = X509_REQ_add_extensions(req, extlist);
+    sk_X509_EXTENSION_pop_free(extlist, X509_EXTENSION_free);
+    return i;
+}
+
+/* Config database functions */
+
+char *X509V3_get_string(X509V3_CTX *ctx, const char *name, const char *section)
+{
+    if (!ctx->db || !ctx->db_meth || !ctx->db_meth->get_string) {
+        X509V3err(X509V3_F_X509V3_GET_STRING, X509V3_R_OPERATION_NOT_DEFINED);
+        return NULL;
+    }
+    if (ctx->db_meth->get_string)
+        return ctx->db_meth->get_string(ctx->db, name, section);
+    return NULL;
+}
+
+STACK_OF(CONF_VALUE) *X509V3_get_section(X509V3_CTX *ctx, const char *section)
+{
+    if (!ctx->db || !ctx->db_meth || !ctx->db_meth->get_section) {
+        X509V3err(X509V3_F_X509V3_GET_SECTION,
+                  X509V3_R_OPERATION_NOT_DEFINED);
+        return NULL;
+    }
+    if (ctx->db_meth->get_section)
+        return ctx->db_meth->get_section(ctx->db, section);
+    return NULL;
+}
+
+void X509V3_string_free(X509V3_CTX *ctx, char *str)
+{
+    if (!str)
+        return;
+    if (ctx->db_meth->free_string)
+        ctx->db_meth->free_string(ctx->db, str);
+}
+
+void X509V3_section_free(X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *section)
+{
+    if (!section)
+        return;
+    if (ctx->db_meth->free_section)
+        ctx->db_meth->free_section(ctx->db, section);
+}
+
+static char *nconf_get_string(void *db, const char *section, const char *value)
+{
+    return NCONF_get_string(db, section, value);
+}
+
+static STACK_OF(CONF_VALUE) *nconf_get_section(void *db, const char *section)
+{
+    return NCONF_get_section(db, section);
+}
+
+static X509V3_CONF_METHOD nconf_method = {
+    nconf_get_string,
+    nconf_get_section,
+    NULL,
+    NULL
+};
+
+void X509V3_set_nconf(X509V3_CTX *ctx, CONF *conf)
+{
+    ctx->db_meth = &nconf_method;
+    ctx->db = conf;
+}
+
+void X509V3_set_ctx(X509V3_CTX *ctx, X509 *issuer, X509 *subj, X509_REQ *req,
+                    X509_CRL *crl, int flags)
+{
+    ctx->issuer_cert = issuer;
+    ctx->subject_cert = subj;
+    ctx->crl = crl;
+    ctx->subject_req = req;
+    ctx->flags = flags;
+}
+
+/* Old conf compatibility functions */
+
+X509_EXTENSION *X509V3_EXT_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
+                                const char *name, const char *value)
+{
+    CONF ctmp;
+    CONF_set_nconf(&ctmp, conf);
+    return X509V3_EXT_nconf(&ctmp, ctx, name, value);
+}
+
+/* LHASH *conf:  Config file    */
+/* char *value:  Value    */
+X509_EXTENSION *X509V3_EXT_conf_nid(LHASH_OF(CONF_VALUE) *conf,
+                                    X509V3_CTX *ctx, int ext_nid, const char *value)
+{
+    CONF ctmp;
+    CONF_set_nconf(&ctmp, conf);
+    return X509V3_EXT_nconf_nid(&ctmp, ctx, ext_nid, value);
+}
+
+static char *conf_lhash_get_string(void *db, const char *section, const char *value)
+{
+    return CONF_get_string(db, section, value);
+}
+
+static STACK_OF(CONF_VALUE) *conf_lhash_get_section(void *db, const char *section)
+{
+    return CONF_get_section(db, section);
+}
+
+static X509V3_CONF_METHOD conf_lhash_method = {
+    conf_lhash_get_string,
+    conf_lhash_get_section,
+    NULL,
+    NULL
+};
+
+void X509V3_set_conf_lhash(X509V3_CTX *ctx, LHASH_OF(CONF_VALUE) *lhash)
+{
+    ctx->db_meth = &conf_lhash_method;
+    ctx->db = lhash;
+}
+
+int X509V3_EXT_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
+                        const char *section, X509 *cert)
+{
+    CONF ctmp;
+    CONF_set_nconf(&ctmp, conf);
+    return X509V3_EXT_add_nconf(&ctmp, ctx, section, cert);
+}
+
+/* Same as above but for a CRL */
+
+int X509V3_EXT_CRL_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
+                            const char *section, X509_CRL *crl)
+{
+    CONF ctmp;
+    CONF_set_nconf(&ctmp, conf);
+    return X509V3_EXT_CRL_add_nconf(&ctmp, ctx, section, crl);
+}
+
+/* Add extensions to certificate request */
+
+int X509V3_EXT_REQ_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
+                            const char *section, X509_REQ *req)
+{
+    CONF ctmp;
+    CONF_set_nconf(&ctmp, conf);
+    return X509V3_EXT_REQ_add_nconf(&ctmp, ctx, section, req);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_cpols.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_cpols.c
new file mode 100644
index 000000000..7a47fd38b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_cpols.c
@@ -0,0 +1,491 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/x509v3.h>
+
+#include "pcy_int.h"
+#include "ext_dat.h"
+
+/* Certificate policies extension support: this one is a bit complex... */
+
+static int i2r_certpol(X509V3_EXT_METHOD *method, STACK_OF(POLICYINFO) *pol,
+                       BIO *out, int indent);
+static STACK_OF(POLICYINFO) *r2i_certpol(X509V3_EXT_METHOD *method,
+                                         X509V3_CTX *ctx, const char *value);
+static void print_qualifiers(BIO *out, STACK_OF(POLICYQUALINFO) *quals,
+                             int indent);
+static void print_notice(BIO *out, USERNOTICE *notice, int indent);
+static POLICYINFO *policy_section(X509V3_CTX *ctx,
+                                  STACK_OF(CONF_VALUE) *polstrs, int ia5org);
+static POLICYQUALINFO *notice_section(X509V3_CTX *ctx,
+                                      STACK_OF(CONF_VALUE) *unot, int ia5org);
+static int nref_nos(STACK_OF(ASN1_INTEGER) *nnums, STACK_OF(CONF_VALUE) *nos);
+static int displaytext_str2tag(const char *tagstr, unsigned int *tag_len);
+static int displaytext_get_tag_len(const char *tagstr);
+
+const X509V3_EXT_METHOD v3_cpols = {
+    NID_certificate_policies, 0, ASN1_ITEM_ref(CERTIFICATEPOLICIES),
+    0, 0, 0, 0,
+    0, 0,
+    0, 0,
+    (X509V3_EXT_I2R)i2r_certpol,
+    (X509V3_EXT_R2I)r2i_certpol,
+    NULL
+};
+
+ASN1_ITEM_TEMPLATE(CERTIFICATEPOLICIES) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, CERTIFICATEPOLICIES, POLICYINFO)
+ASN1_ITEM_TEMPLATE_END(CERTIFICATEPOLICIES)
+
+IMPLEMENT_ASN1_FUNCTIONS(CERTIFICATEPOLICIES)
+
+ASN1_SEQUENCE(POLICYINFO) = {
+        ASN1_SIMPLE(POLICYINFO, policyid, ASN1_OBJECT),
+        ASN1_SEQUENCE_OF_OPT(POLICYINFO, qualifiers, POLICYQUALINFO)
+} ASN1_SEQUENCE_END(POLICYINFO)
+
+IMPLEMENT_ASN1_FUNCTIONS(POLICYINFO)
+
+ASN1_ADB_TEMPLATE(policydefault) = ASN1_SIMPLE(POLICYQUALINFO, d.other, ASN1_ANY);
+
+ASN1_ADB(POLICYQUALINFO) = {
+        ADB_ENTRY(NID_id_qt_cps, ASN1_SIMPLE(POLICYQUALINFO, d.cpsuri, ASN1_IA5STRING)),
+        ADB_ENTRY(NID_id_qt_unotice, ASN1_SIMPLE(POLICYQUALINFO, d.usernotice, USERNOTICE))
+} ASN1_ADB_END(POLICYQUALINFO, 0, pqualid, 0, &policydefault_tt, NULL);
+
+ASN1_SEQUENCE(POLICYQUALINFO) = {
+        ASN1_SIMPLE(POLICYQUALINFO, pqualid, ASN1_OBJECT),
+        ASN1_ADB_OBJECT(POLICYQUALINFO)
+} ASN1_SEQUENCE_END(POLICYQUALINFO)
+
+IMPLEMENT_ASN1_FUNCTIONS(POLICYQUALINFO)
+
+ASN1_SEQUENCE(USERNOTICE) = {
+        ASN1_OPT(USERNOTICE, noticeref, NOTICEREF),
+        ASN1_OPT(USERNOTICE, exptext, DISPLAYTEXT)
+} ASN1_SEQUENCE_END(USERNOTICE)
+
+IMPLEMENT_ASN1_FUNCTIONS(USERNOTICE)
+
+ASN1_SEQUENCE(NOTICEREF) = {
+        ASN1_SIMPLE(NOTICEREF, organization, DISPLAYTEXT),
+        ASN1_SEQUENCE_OF(NOTICEREF, noticenos, ASN1_INTEGER)
+} ASN1_SEQUENCE_END(NOTICEREF)
+
+IMPLEMENT_ASN1_FUNCTIONS(NOTICEREF)
+
+static STACK_OF(POLICYINFO) *r2i_certpol(X509V3_EXT_METHOD *method,
+                                         X509V3_CTX *ctx, const char *value)
+{
+    STACK_OF(POLICYINFO) *pols;
+    char *pstr;
+    POLICYINFO *pol;
+    ASN1_OBJECT *pobj;
+    STACK_OF(CONF_VALUE) *vals = X509V3_parse_list(value);
+    CONF_VALUE *cnf;
+    const int num = sk_CONF_VALUE_num(vals);
+    int i, ia5org;
+
+    if (vals == NULL) {
+        X509V3err(X509V3_F_R2I_CERTPOL, ERR_R_X509V3_LIB);
+        return NULL;
+    }
+
+    pols = sk_POLICYINFO_new_reserve(NULL, num);
+    if (pols == NULL) {
+        X509V3err(X509V3_F_R2I_CERTPOL, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    ia5org = 0;
+    for (i = 0; i < num; i++) {
+        cnf = sk_CONF_VALUE_value(vals, i);
+
+        if (cnf->value || !cnf->name) {
+            X509V3err(X509V3_F_R2I_CERTPOL,
+                      X509V3_R_INVALID_POLICY_IDENTIFIER);
+            X509V3_conf_err(cnf);
+            goto err;
+        }
+        pstr = cnf->name;
+        if (strcmp(pstr, "ia5org") == 0) {
+            ia5org = 1;
+            continue;
+        } else if (*pstr == '@') {
+            STACK_OF(CONF_VALUE) *polsect;
+            polsect = X509V3_get_section(ctx, pstr + 1);
+            if (!polsect) {
+                X509V3err(X509V3_F_R2I_CERTPOL, X509V3_R_INVALID_SECTION);
+
+                X509V3_conf_err(cnf);
+                goto err;
+            }
+            pol = policy_section(ctx, polsect, ia5org);
+            X509V3_section_free(ctx, polsect);
+            if (pol == NULL)
+                goto err;
+        } else {
+            if ((pobj = OBJ_txt2obj(cnf->name, 0)) == NULL) {
+                X509V3err(X509V3_F_R2I_CERTPOL,
+                          X509V3_R_INVALID_OBJECT_IDENTIFIER);
+                X509V3_conf_err(cnf);
+                goto err;
+            }
+            pol = POLICYINFO_new();
+            if (pol == NULL) {
+                ASN1_OBJECT_free(pobj);
+                X509V3err(X509V3_F_R2I_CERTPOL, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            pol->policyid = pobj;
+        }
+        if (!sk_POLICYINFO_push(pols, pol)) {
+            POLICYINFO_free(pol);
+            X509V3err(X509V3_F_R2I_CERTPOL, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+    sk_CONF_VALUE_pop_free(vals, X509V3_conf_free);
+    return pols;
+ err:
+    sk_CONF_VALUE_pop_free(vals, X509V3_conf_free);
+    sk_POLICYINFO_pop_free(pols, POLICYINFO_free);
+    return NULL;
+}
+
+static POLICYINFO *policy_section(X509V3_CTX *ctx,
+                                  STACK_OF(CONF_VALUE) *polstrs, int ia5org)
+{
+    int i;
+    CONF_VALUE *cnf;
+    POLICYINFO *pol;
+    POLICYQUALINFO *qual;
+
+    if ((pol = POLICYINFO_new()) == NULL)
+        goto merr;
+    for (i = 0; i < sk_CONF_VALUE_num(polstrs); i++) {
+        cnf = sk_CONF_VALUE_value(polstrs, i);
+        if (strcmp(cnf->name, "policyIdentifier") == 0) {
+            ASN1_OBJECT *pobj;
+            if ((pobj = OBJ_txt2obj(cnf->value, 0)) == NULL) {
+                X509V3err(X509V3_F_POLICY_SECTION,
+                          X509V3_R_INVALID_OBJECT_IDENTIFIER);
+                X509V3_conf_err(cnf);
+                goto err;
+            }
+            pol->policyid = pobj;
+
+        } else if (!name_cmp(cnf->name, "CPS")) {
+            if (pol->qualifiers == NULL)
+                pol->qualifiers = sk_POLICYQUALINFO_new_null();
+            if ((qual = POLICYQUALINFO_new()) == NULL)
+                goto merr;
+            if (!sk_POLICYQUALINFO_push(pol->qualifiers, qual))
+                goto merr;
+            if ((qual->pqualid = OBJ_nid2obj(NID_id_qt_cps)) == NULL) {
+                X509V3err(X509V3_F_POLICY_SECTION, ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+            if ((qual->d.cpsuri = ASN1_IA5STRING_new()) == NULL)
+                goto merr;
+            if (!ASN1_STRING_set(qual->d.cpsuri, cnf->value,
+                                 strlen(cnf->value)))
+                goto merr;
+        } else if (!name_cmp(cnf->name, "userNotice")) {
+            STACK_OF(CONF_VALUE) *unot;
+            if (*cnf->value != '@') {
+                X509V3err(X509V3_F_POLICY_SECTION,
+                          X509V3_R_EXPECTED_A_SECTION_NAME);
+                X509V3_conf_err(cnf);
+                goto err;
+            }
+            unot = X509V3_get_section(ctx, cnf->value + 1);
+            if (!unot) {
+                X509V3err(X509V3_F_POLICY_SECTION, X509V3_R_INVALID_SECTION);
+
+                X509V3_conf_err(cnf);
+                goto err;
+            }
+            qual = notice_section(ctx, unot, ia5org);
+            X509V3_section_free(ctx, unot);
+            if (!qual)
+                goto err;
+            if (!pol->qualifiers)
+                pol->qualifiers = sk_POLICYQUALINFO_new_null();
+            if (!sk_POLICYQUALINFO_push(pol->qualifiers, qual))
+                goto merr;
+        } else {
+            X509V3err(X509V3_F_POLICY_SECTION, X509V3_R_INVALID_OPTION);
+
+            X509V3_conf_err(cnf);
+            goto err;
+        }
+    }
+    if (!pol->policyid) {
+        X509V3err(X509V3_F_POLICY_SECTION, X509V3_R_NO_POLICY_IDENTIFIER);
+        goto err;
+    }
+
+    return pol;
+
+ merr:
+    X509V3err(X509V3_F_POLICY_SECTION, ERR_R_MALLOC_FAILURE);
+
+ err:
+    POLICYINFO_free(pol);
+    return NULL;
+}
+
+static int displaytext_get_tag_len(const char *tagstr)
+{
+    char *colon = strchr(tagstr, ':');
+
+    return (colon == NULL) ? -1 : colon - tagstr;
+}
+
+static int displaytext_str2tag(const char *tagstr, unsigned int *tag_len)
+{
+    int len;
+
+    *tag_len = 0;
+    len = displaytext_get_tag_len(tagstr);
+
+    if (len == -1)
+        return V_ASN1_VISIBLESTRING;
+    *tag_len = len;
+    if (len == sizeof("UTF8") - 1 && strncmp(tagstr, "UTF8", len) == 0)
+        return V_ASN1_UTF8STRING;
+    if (len == sizeof("UTF8String") - 1 && strncmp(tagstr, "UTF8String", len) == 0)
+        return V_ASN1_UTF8STRING;
+    if (len == sizeof("BMP") - 1 && strncmp(tagstr, "BMP", len) == 0)
+        return V_ASN1_BMPSTRING;
+    if (len == sizeof("BMPSTRING") - 1 && strncmp(tagstr, "BMPSTRING", len) == 0)
+        return V_ASN1_BMPSTRING;
+    if (len == sizeof("VISIBLE") - 1 && strncmp(tagstr, "VISIBLE", len) == 0)
+        return V_ASN1_VISIBLESTRING;
+    if (len == sizeof("VISIBLESTRING") - 1 && strncmp(tagstr, "VISIBLESTRING", len) == 0)
+        return V_ASN1_VISIBLESTRING;
+    *tag_len = 0;
+    return V_ASN1_VISIBLESTRING;
+}
+
+static POLICYQUALINFO *notice_section(X509V3_CTX *ctx,
+                                      STACK_OF(CONF_VALUE) *unot, int ia5org)
+{
+    int i, ret, len, tag;
+    unsigned int tag_len;
+    CONF_VALUE *cnf;
+    USERNOTICE *not;
+    POLICYQUALINFO *qual;
+    char *value = NULL;
+
+    if ((qual = POLICYQUALINFO_new()) == NULL)
+        goto merr;
+    if ((qual->pqualid = OBJ_nid2obj(NID_id_qt_unotice)) == NULL) {
+        X509V3err(X509V3_F_NOTICE_SECTION, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    if ((not = USERNOTICE_new()) == NULL)
+        goto merr;
+    qual->d.usernotice = not;
+    for (i = 0; i < sk_CONF_VALUE_num(unot); i++) {
+        cnf = sk_CONF_VALUE_value(unot, i);
+        value = cnf->value;
+        if (strcmp(cnf->name, "explicitText") == 0) {
+            tag = displaytext_str2tag(value, &tag_len);
+            if ((not->exptext = ASN1_STRING_type_new(tag)) == NULL)
+                goto merr;
+            if (tag_len != 0)
+                value += tag_len + 1;
+            len = strlen(value);
+            if (!ASN1_STRING_set(not->exptext, value, len))
+                goto merr;
+        } else if (strcmp(cnf->name, "organization") == 0) {
+            NOTICEREF *nref;
+            if (!not->noticeref) {
+                if ((nref = NOTICEREF_new()) == NULL)
+                    goto merr;
+                not->noticeref = nref;
+            } else
+                nref = not->noticeref;
+            if (ia5org)
+                nref->organization->type = V_ASN1_IA5STRING;
+            else
+                nref->organization->type = V_ASN1_VISIBLESTRING;
+            if (!ASN1_STRING_set(nref->organization, cnf->value,
+                                 strlen(cnf->value)))
+                goto merr;
+        } else if (strcmp(cnf->name, "noticeNumbers") == 0) {
+            NOTICEREF *nref;
+            STACK_OF(CONF_VALUE) *nos;
+            if (!not->noticeref) {
+                if ((nref = NOTICEREF_new()) == NULL)
+                    goto merr;
+                not->noticeref = nref;
+            } else
+                nref = not->noticeref;
+            nos = X509V3_parse_list(cnf->value);
+            if (!nos || !sk_CONF_VALUE_num(nos)) {
+                X509V3err(X509V3_F_NOTICE_SECTION, X509V3_R_INVALID_NUMBERS);
+                X509V3_conf_err(cnf);
+                sk_CONF_VALUE_pop_free(nos, X509V3_conf_free);
+                goto err;
+            }
+            ret = nref_nos(nref->noticenos, nos);
+            sk_CONF_VALUE_pop_free(nos, X509V3_conf_free);
+            if (!ret)
+                goto err;
+        } else {
+            X509V3err(X509V3_F_NOTICE_SECTION, X509V3_R_INVALID_OPTION);
+            X509V3_conf_err(cnf);
+            goto err;
+        }
+    }
+
+    if (not->noticeref &&
+        (!not->noticeref->noticenos || !not->noticeref->organization)) {
+        X509V3err(X509V3_F_NOTICE_SECTION,
+                  X509V3_R_NEED_ORGANIZATION_AND_NUMBERS);
+        goto err;
+    }
+
+    return qual;
+
+ merr:
+    X509V3err(X509V3_F_NOTICE_SECTION, ERR_R_MALLOC_FAILURE);
+
+ err:
+    POLICYQUALINFO_free(qual);
+    return NULL;
+}
+
+static int nref_nos(STACK_OF(ASN1_INTEGER) *nnums, STACK_OF(CONF_VALUE) *nos)
+{
+    CONF_VALUE *cnf;
+    ASN1_INTEGER *aint;
+
+    int i;
+
+    for (i = 0; i < sk_CONF_VALUE_num(nos); i++) {
+        cnf = sk_CONF_VALUE_value(nos, i);
+        if ((aint = s2i_ASN1_INTEGER(NULL, cnf->name)) == NULL) {
+            X509V3err(X509V3_F_NREF_NOS, X509V3_R_INVALID_NUMBER);
+            goto err;
+        }
+        if (!sk_ASN1_INTEGER_push(nnums, aint))
+            goto merr;
+    }
+    return 1;
+
+ merr:
+    ASN1_INTEGER_free(aint);
+    X509V3err(X509V3_F_NREF_NOS, ERR_R_MALLOC_FAILURE);
+
+ err:
+    return 0;
+}
+
+static int i2r_certpol(X509V3_EXT_METHOD *method, STACK_OF(POLICYINFO) *pol,
+                       BIO *out, int indent)
+{
+    int i;
+    POLICYINFO *pinfo;
+    /* First print out the policy OIDs */
+    for (i = 0; i < sk_POLICYINFO_num(pol); i++) {
+        pinfo = sk_POLICYINFO_value(pol, i);
+        BIO_printf(out, "%*sPolicy: ", indent, "");
+        i2a_ASN1_OBJECT(out, pinfo->policyid);
+        BIO_puts(out, "\n");
+        if (pinfo->qualifiers)
+            print_qualifiers(out, pinfo->qualifiers, indent + 2);
+    }
+    return 1;
+}
+
+static void print_qualifiers(BIO *out, STACK_OF(POLICYQUALINFO) *quals,
+                             int indent)
+{
+    POLICYQUALINFO *qualinfo;
+    int i;
+    for (i = 0; i < sk_POLICYQUALINFO_num(quals); i++) {
+        qualinfo = sk_POLICYQUALINFO_value(quals, i);
+        switch (OBJ_obj2nid(qualinfo->pqualid)) {
+        case NID_id_qt_cps:
+            BIO_printf(out, "%*sCPS: %s\n", indent, "",
+                       qualinfo->d.cpsuri->data);
+            break;
+
+        case NID_id_qt_unotice:
+            BIO_printf(out, "%*sUser Notice:\n", indent, "");
+            print_notice(out, qualinfo->d.usernotice, indent + 2);
+            break;
+
+        default:
+            BIO_printf(out, "%*sUnknown Qualifier: ", indent + 2, "");
+
+            i2a_ASN1_OBJECT(out, qualinfo->pqualid);
+            BIO_puts(out, "\n");
+            break;
+        }
+    }
+}
+
+static void print_notice(BIO *out, USERNOTICE *notice, int indent)
+{
+    int i;
+    if (notice->noticeref) {
+        NOTICEREF *ref;
+        ref = notice->noticeref;
+        BIO_printf(out, "%*sOrganization: %s\n", indent, "",
+                   ref->organization->data);
+        BIO_printf(out, "%*sNumber%s: ", indent, "",
+                   sk_ASN1_INTEGER_num(ref->noticenos) > 1 ? "s" : "");
+        for (i = 0; i < sk_ASN1_INTEGER_num(ref->noticenos); i++) {
+            ASN1_INTEGER *num;
+            char *tmp;
+            num = sk_ASN1_INTEGER_value(ref->noticenos, i);
+            if (i)
+                BIO_puts(out, ", ");
+            if (num == NULL)
+                BIO_puts(out, "(null)");
+            else {
+                tmp = i2s_ASN1_INTEGER(NULL, num);
+                if (tmp == NULL)
+                    return;
+                BIO_puts(out, tmp);
+                OPENSSL_free(tmp);
+            }
+        }
+        BIO_puts(out, "\n");
+    }
+    if (notice->exptext)
+        BIO_printf(out, "%*sExplicit Text: %s\n", indent, "",
+                   notice->exptext->data);
+}
+
+void X509_POLICY_NODE_print(BIO *out, X509_POLICY_NODE *node, int indent)
+{
+    const X509_POLICY_DATA *dat = node->data;
+
+    BIO_printf(out, "%*sPolicy: ", indent, "");
+
+    i2a_ASN1_OBJECT(out, dat->valid_policy);
+    BIO_puts(out, "\n");
+    BIO_printf(out, "%*s%s\n", indent + 2, "",
+               node_data_critical(dat) ? "Critical" : "Non Critical");
+    if (dat->qualifier_set)
+        print_qualifiers(out, dat->qualifier_set, indent + 2);
+    else
+        BIO_printf(out, "%*sNo Qualifiers\n", indent + 2, "");
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_crld.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_crld.c
new file mode 100644
index 000000000..6cba4240a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_crld.c
@@ -0,0 +1,506 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/x509v3.h>
+
+#include "internal/x509_int.h"
+#include "ext_dat.h"
+
+static void *v2i_crld(const X509V3_EXT_METHOD *method,
+                      X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval);
+static int i2r_crldp(const X509V3_EXT_METHOD *method, void *pcrldp, BIO *out,
+                     int indent);
+
+const X509V3_EXT_METHOD v3_crld = {
+    NID_crl_distribution_points, 0, ASN1_ITEM_ref(CRL_DIST_POINTS),
+    0, 0, 0, 0,
+    0, 0,
+    0,
+    v2i_crld,
+    i2r_crldp, 0,
+    NULL
+};
+
+const X509V3_EXT_METHOD v3_freshest_crl = {
+    NID_freshest_crl, 0, ASN1_ITEM_ref(CRL_DIST_POINTS),
+    0, 0, 0, 0,
+    0, 0,
+    0,
+    v2i_crld,
+    i2r_crldp, 0,
+    NULL
+};
+
+static STACK_OF(GENERAL_NAME) *gnames_from_sectname(X509V3_CTX *ctx,
+                                                    char *sect)
+{
+    STACK_OF(CONF_VALUE) *gnsect;
+    STACK_OF(GENERAL_NAME) *gens;
+    if (*sect == '@')
+        gnsect = X509V3_get_section(ctx, sect + 1);
+    else
+        gnsect = X509V3_parse_list(sect);
+    if (!gnsect) {
+        X509V3err(X509V3_F_GNAMES_FROM_SECTNAME, X509V3_R_SECTION_NOT_FOUND);
+        return NULL;
+    }
+    gens = v2i_GENERAL_NAMES(NULL, ctx, gnsect);
+    if (*sect == '@')
+        X509V3_section_free(ctx, gnsect);
+    else
+        sk_CONF_VALUE_pop_free(gnsect, X509V3_conf_free);
+    return gens;
+}
+
+static int set_dist_point_name(DIST_POINT_NAME **pdp, X509V3_CTX *ctx,
+                               CONF_VALUE *cnf)
+{
+    STACK_OF(GENERAL_NAME) *fnm = NULL;
+    STACK_OF(X509_NAME_ENTRY) *rnm = NULL;
+
+    if (strncmp(cnf->name, "fullname", 9) == 0) {
+        fnm = gnames_from_sectname(ctx, cnf->value);
+        if (!fnm)
+            goto err;
+    } else if (strcmp(cnf->name, "relativename") == 0) {
+        int ret;
+        STACK_OF(CONF_VALUE) *dnsect;
+        X509_NAME *nm;
+        nm = X509_NAME_new();
+        if (nm == NULL)
+            return -1;
+        dnsect = X509V3_get_section(ctx, cnf->value);
+        if (!dnsect) {
+            X509V3err(X509V3_F_SET_DIST_POINT_NAME,
+                      X509V3_R_SECTION_NOT_FOUND);
+            return -1;
+        }
+        ret = X509V3_NAME_from_section(nm, dnsect, MBSTRING_ASC);
+        X509V3_section_free(ctx, dnsect);
+        rnm = nm->entries;
+        nm->entries = NULL;
+        X509_NAME_free(nm);
+        if (!ret || sk_X509_NAME_ENTRY_num(rnm) <= 0)
+            goto err;
+        /*
+         * Since its a name fragment can't have more than one RDNSequence
+         */
+        if (sk_X509_NAME_ENTRY_value(rnm,
+                                     sk_X509_NAME_ENTRY_num(rnm) - 1)->set) {
+            X509V3err(X509V3_F_SET_DIST_POINT_NAME,
+                      X509V3_R_INVALID_MULTIPLE_RDNS);
+            goto err;
+        }
+    } else
+        return 0;
+
+    if (*pdp) {
+        X509V3err(X509V3_F_SET_DIST_POINT_NAME,
+                  X509V3_R_DISTPOINT_ALREADY_SET);
+        goto err;
+    }
+
+    *pdp = DIST_POINT_NAME_new();
+    if (*pdp == NULL)
+        goto err;
+    if (fnm) {
+        (*pdp)->type = 0;
+        (*pdp)->name.fullname = fnm;
+    } else {
+        (*pdp)->type = 1;
+        (*pdp)->name.relativename = rnm;
+    }
+
+    return 1;
+
+ err:
+    sk_GENERAL_NAME_pop_free(fnm, GENERAL_NAME_free);
+    sk_X509_NAME_ENTRY_pop_free(rnm, X509_NAME_ENTRY_free);
+    return -1;
+}
+
+static const BIT_STRING_BITNAME reason_flags[] = {
+    {0, "Unused", "unused"},
+    {1, "Key Compromise", "keyCompromise"},
+    {2, "CA Compromise", "CACompromise"},
+    {3, "Affiliation Changed", "affiliationChanged"},
+    {4, "Superseded", "superseded"},
+    {5, "Cessation Of Operation", "cessationOfOperation"},
+    {6, "Certificate Hold", "certificateHold"},
+    {7, "Privilege Withdrawn", "privilegeWithdrawn"},
+    {8, "AA Compromise", "AACompromise"},
+    {-1, NULL, NULL}
+};
+
+static int set_reasons(ASN1_BIT_STRING **preas, char *value)
+{
+    STACK_OF(CONF_VALUE) *rsk = NULL;
+    const BIT_STRING_BITNAME *pbn;
+    const char *bnam;
+    int i, ret = 0;
+    rsk = X509V3_parse_list(value);
+    if (rsk == NULL)
+        return 0;
+    if (*preas != NULL)
+        goto err;
+    for (i = 0; i < sk_CONF_VALUE_num(rsk); i++) {
+        bnam = sk_CONF_VALUE_value(rsk, i)->name;
+        if (*preas == NULL) {
+            *preas = ASN1_BIT_STRING_new();
+            if (*preas == NULL)
+                goto err;
+        }
+        for (pbn = reason_flags; pbn->lname; pbn++) {
+            if (strcmp(pbn->sname, bnam) == 0) {
+                if (!ASN1_BIT_STRING_set_bit(*preas, pbn->bitnum, 1))
+                    goto err;
+                break;
+            }
+        }
+        if (!pbn->lname)
+            goto err;
+    }
+    ret = 1;
+
+ err:
+    sk_CONF_VALUE_pop_free(rsk, X509V3_conf_free);
+    return ret;
+}
+
+static int print_reasons(BIO *out, const char *rname,
+                         ASN1_BIT_STRING *rflags, int indent)
+{
+    int first = 1;
+    const BIT_STRING_BITNAME *pbn;
+    BIO_printf(out, "%*s%s:\n%*s", indent, "", rname, indent + 2, "");
+    for (pbn = reason_flags; pbn->lname; pbn++) {
+        if (ASN1_BIT_STRING_get_bit(rflags, pbn->bitnum)) {
+            if (first)
+                first = 0;
+            else
+                BIO_puts(out, ", ");
+            BIO_puts(out, pbn->lname);
+        }
+    }
+    if (first)
+        BIO_puts(out, "<EMPTY>\n");
+    else
+        BIO_puts(out, "\n");
+    return 1;
+}
+
+static DIST_POINT *crldp_from_section(X509V3_CTX *ctx,
+                                      STACK_OF(CONF_VALUE) *nval)
+{
+    int i;
+    CONF_VALUE *cnf;
+    DIST_POINT *point = DIST_POINT_new();
+
+    if (point == NULL)
+        goto err;
+    for (i = 0; i < sk_CONF_VALUE_num(nval); i++) {
+        int ret;
+        cnf = sk_CONF_VALUE_value(nval, i);
+        ret = set_dist_point_name(&point->distpoint, ctx, cnf);
+        if (ret > 0)
+            continue;
+        if (ret < 0)
+            goto err;
+        if (strcmp(cnf->name, "reasons") == 0) {
+            if (!set_reasons(&point->reasons, cnf->value))
+                goto err;
+        } else if (strcmp(cnf->name, "CRLissuer") == 0) {
+            point->CRLissuer = gnames_from_sectname(ctx, cnf->value);
+            if (!point->CRLissuer)
+                goto err;
+        }
+    }
+
+    return point;
+
+ err:
+    DIST_POINT_free(point);
+    return NULL;
+}
+
+static void *v2i_crld(const X509V3_EXT_METHOD *method,
+                      X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval)
+{
+    STACK_OF(DIST_POINT) *crld;
+    GENERAL_NAMES *gens = NULL;
+    GENERAL_NAME *gen = NULL;
+    CONF_VALUE *cnf;
+    const int num = sk_CONF_VALUE_num(nval);
+    int i;
+
+    crld = sk_DIST_POINT_new_reserve(NULL, num);
+    if (crld == NULL)
+        goto merr;
+    for (i = 0; i < num; i++) {
+        DIST_POINT *point;
+
+        cnf = sk_CONF_VALUE_value(nval, i);
+        if (!cnf->value) {
+            STACK_OF(CONF_VALUE) *dpsect;
+            dpsect = X509V3_get_section(ctx, cnf->name);
+            if (!dpsect)
+                goto err;
+            point = crldp_from_section(ctx, dpsect);
+            X509V3_section_free(ctx, dpsect);
+            if (!point)
+                goto err;
+            sk_DIST_POINT_push(crld, point); /* no failure as it was reserved */
+        } else {
+            if ((gen = v2i_GENERAL_NAME(method, ctx, cnf)) == NULL)
+                goto err;
+            if ((gens = GENERAL_NAMES_new()) == NULL)
+                goto merr;
+            if (!sk_GENERAL_NAME_push(gens, gen))
+                goto merr;
+            gen = NULL;
+            if ((point = DIST_POINT_new()) == NULL)
+                goto merr;
+            sk_DIST_POINT_push(crld, point); /* no failure as it was reserved */
+            if ((point->distpoint = DIST_POINT_NAME_new()) == NULL)
+                goto merr;
+            point->distpoint->name.fullname = gens;
+            point->distpoint->type = 0;
+            gens = NULL;
+        }
+    }
+    return crld;
+
+ merr:
+    X509V3err(X509V3_F_V2I_CRLD, ERR_R_MALLOC_FAILURE);
+ err:
+    GENERAL_NAME_free(gen);
+    GENERAL_NAMES_free(gens);
+    sk_DIST_POINT_pop_free(crld, DIST_POINT_free);
+    return NULL;
+}
+
+static int dpn_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
+                  void *exarg)
+{
+    DIST_POINT_NAME *dpn = (DIST_POINT_NAME *)*pval;
+
+    switch (operation) {
+    case ASN1_OP_NEW_POST:
+        dpn->dpname = NULL;
+        break;
+
+    case ASN1_OP_FREE_POST:
+        X509_NAME_free(dpn->dpname);
+        break;
+    }
+    return 1;
+}
+
+
+ASN1_CHOICE_cb(DIST_POINT_NAME, dpn_cb) = {
+        ASN1_IMP_SEQUENCE_OF(DIST_POINT_NAME, name.fullname, GENERAL_NAME, 0),
+        ASN1_IMP_SET_OF(DIST_POINT_NAME, name.relativename, X509_NAME_ENTRY, 1)
+} ASN1_CHOICE_END_cb(DIST_POINT_NAME, DIST_POINT_NAME, type)
+
+
+IMPLEMENT_ASN1_FUNCTIONS(DIST_POINT_NAME)
+
+ASN1_SEQUENCE(DIST_POINT) = {
+        ASN1_EXP_OPT(DIST_POINT, distpoint, DIST_POINT_NAME, 0),
+        ASN1_IMP_OPT(DIST_POINT, reasons, ASN1_BIT_STRING, 1),
+        ASN1_IMP_SEQUENCE_OF_OPT(DIST_POINT, CRLissuer, GENERAL_NAME, 2)
+} ASN1_SEQUENCE_END(DIST_POINT)
+
+IMPLEMENT_ASN1_FUNCTIONS(DIST_POINT)
+
+ASN1_ITEM_TEMPLATE(CRL_DIST_POINTS) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, CRLDistributionPoints, DIST_POINT)
+ASN1_ITEM_TEMPLATE_END(CRL_DIST_POINTS)
+
+IMPLEMENT_ASN1_FUNCTIONS(CRL_DIST_POINTS)
+
+ASN1_SEQUENCE(ISSUING_DIST_POINT) = {
+        ASN1_EXP_OPT(ISSUING_DIST_POINT, distpoint, DIST_POINT_NAME, 0),
+        ASN1_IMP_OPT(ISSUING_DIST_POINT, onlyuser, ASN1_FBOOLEAN, 1),
+        ASN1_IMP_OPT(ISSUING_DIST_POINT, onlyCA, ASN1_FBOOLEAN, 2),
+        ASN1_IMP_OPT(ISSUING_DIST_POINT, onlysomereasons, ASN1_BIT_STRING, 3),
+        ASN1_IMP_OPT(ISSUING_DIST_POINT, indirectCRL, ASN1_FBOOLEAN, 4),
+        ASN1_IMP_OPT(ISSUING_DIST_POINT, onlyattr, ASN1_FBOOLEAN, 5)
+} ASN1_SEQUENCE_END(ISSUING_DIST_POINT)
+
+IMPLEMENT_ASN1_FUNCTIONS(ISSUING_DIST_POINT)
+
+static int i2r_idp(const X509V3_EXT_METHOD *method, void *pidp, BIO *out,
+                   int indent);
+static void *v2i_idp(const X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
+                     STACK_OF(CONF_VALUE) *nval);
+
+const X509V3_EXT_METHOD v3_idp = {
+    NID_issuing_distribution_point, X509V3_EXT_MULTILINE,
+    ASN1_ITEM_ref(ISSUING_DIST_POINT),
+    0, 0, 0, 0,
+    0, 0,
+    0,
+    v2i_idp,
+    i2r_idp, 0,
+    NULL
+};
+
+static void *v2i_idp(const X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
+                     STACK_OF(CONF_VALUE) *nval)
+{
+    ISSUING_DIST_POINT *idp = NULL;
+    CONF_VALUE *cnf;
+    char *name, *val;
+    int i, ret;
+    idp = ISSUING_DIST_POINT_new();
+    if (idp == NULL)
+        goto merr;
+    for (i = 0; i < sk_CONF_VALUE_num(nval); i++) {
+        cnf = sk_CONF_VALUE_value(nval, i);
+        name = cnf->name;
+        val = cnf->value;
+        ret = set_dist_point_name(&idp->distpoint, ctx, cnf);
+        if (ret > 0)
+            continue;
+        if (ret < 0)
+            goto err;
+        if (strcmp(name, "onlyuser") == 0) {
+            if (!X509V3_get_value_bool(cnf, &idp->onlyuser))
+                goto err;
+        } else if (strcmp(name, "onlyCA") == 0) {
+            if (!X509V3_get_value_bool(cnf, &idp->onlyCA))
+                goto err;
+        } else if (strcmp(name, "onlyAA") == 0) {
+            if (!X509V3_get_value_bool(cnf, &idp->onlyattr))
+                goto err;
+        } else if (strcmp(name, "indirectCRL") == 0) {
+            if (!X509V3_get_value_bool(cnf, &idp->indirectCRL))
+                goto err;
+        } else if (strcmp(name, "onlysomereasons") == 0) {
+            if (!set_reasons(&idp->onlysomereasons, val))
+                goto err;
+        } else {
+            X509V3err(X509V3_F_V2I_IDP, X509V3_R_INVALID_NAME);
+            X509V3_conf_err(cnf);
+            goto err;
+        }
+    }
+    return idp;
+
+ merr:
+    X509V3err(X509V3_F_V2I_IDP, ERR_R_MALLOC_FAILURE);
+ err:
+    ISSUING_DIST_POINT_free(idp);
+    return NULL;
+}
+
+static int print_gens(BIO *out, STACK_OF(GENERAL_NAME) *gens, int indent)
+{
+    int i;
+    for (i = 0; i < sk_GENERAL_NAME_num(gens); i++) {
+        BIO_printf(out, "%*s", indent + 2, "");
+        GENERAL_NAME_print(out, sk_GENERAL_NAME_value(gens, i));
+        BIO_puts(out, "\n");
+    }
+    return 1;
+}
+
+static int print_distpoint(BIO *out, DIST_POINT_NAME *dpn, int indent)
+{
+    if (dpn->type == 0) {
+        BIO_printf(out, "%*sFull Name:\n", indent, "");
+        print_gens(out, dpn->name.fullname, indent);
+    } else {
+        X509_NAME ntmp;
+        ntmp.entries = dpn->name.relativename;
+        BIO_printf(out, "%*sRelative Name:\n%*s", indent, "", indent + 2, "");
+        X509_NAME_print_ex(out, &ntmp, 0, XN_FLAG_ONELINE);
+        BIO_puts(out, "\n");
+    }
+    return 1;
+}
+
+static int i2r_idp(const X509V3_EXT_METHOD *method, void *pidp, BIO *out,
+                   int indent)
+{
+    ISSUING_DIST_POINT *idp = pidp;
+    if (idp->distpoint)
+        print_distpoint(out, idp->distpoint, indent);
+    if (idp->onlyuser > 0)
+        BIO_printf(out, "%*sOnly User Certificates\n", indent, "");
+    if (idp->onlyCA > 0)
+        BIO_printf(out, "%*sOnly CA Certificates\n", indent, "");
+    if (idp->indirectCRL > 0)
+        BIO_printf(out, "%*sIndirect CRL\n", indent, "");
+    if (idp->onlysomereasons)
+        print_reasons(out, "Only Some Reasons", idp->onlysomereasons, indent);
+    if (idp->onlyattr > 0)
+        BIO_printf(out, "%*sOnly Attribute Certificates\n", indent, "");
+    if (!idp->distpoint && (idp->onlyuser <= 0) && (idp->onlyCA <= 0)
+        && (idp->indirectCRL <= 0) && !idp->onlysomereasons
+        && (idp->onlyattr <= 0))
+        BIO_printf(out, "%*s<EMPTY>\n", indent, "");
+
+    return 1;
+}
+
+static int i2r_crldp(const X509V3_EXT_METHOD *method, void *pcrldp, BIO *out,
+                     int indent)
+{
+    STACK_OF(DIST_POINT) *crld = pcrldp;
+    DIST_POINT *point;
+    int i;
+    for (i = 0; i < sk_DIST_POINT_num(crld); i++) {
+        BIO_puts(out, "\n");
+        point = sk_DIST_POINT_value(crld, i);
+        if (point->distpoint)
+            print_distpoint(out, point->distpoint, indent);
+        if (point->reasons)
+            print_reasons(out, "Reasons", point->reasons, indent);
+        if (point->CRLissuer) {
+            BIO_printf(out, "%*sCRL Issuer:\n", indent, "");
+            print_gens(out, point->CRLissuer, indent);
+        }
+    }
+    return 1;
+}
+
+int DIST_POINT_set_dpname(DIST_POINT_NAME *dpn, X509_NAME *iname)
+{
+    int i;
+    STACK_OF(X509_NAME_ENTRY) *frag;
+    X509_NAME_ENTRY *ne;
+    if (!dpn || (dpn->type != 1))
+        return 1;
+    frag = dpn->name.relativename;
+    dpn->dpname = X509_NAME_dup(iname);
+    if (!dpn->dpname)
+        return 0;
+    for (i = 0; i < sk_X509_NAME_ENTRY_num(frag); i++) {
+        ne = sk_X509_NAME_ENTRY_value(frag, i);
+        if (!X509_NAME_add_entry(dpn->dpname, ne, -1, i ? 0 : 1)) {
+            X509_NAME_free(dpn->dpname);
+            dpn->dpname = NULL;
+            return 0;
+        }
+    }
+    /* generate cached encoding of name */
+    if (i2d_X509_NAME(dpn->dpname, NULL) < 0) {
+        X509_NAME_free(dpn->dpname);
+        dpn->dpname = NULL;
+        return 0;
+    }
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_enum.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_enum.c
new file mode 100644
index 000000000..3b0f19744
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_enum.c
@@ -0,0 +1,53 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509v3.h>
+#include "ext_dat.h"
+
+static ENUMERATED_NAMES crl_reasons[] = {
+    {CRL_REASON_UNSPECIFIED, "Unspecified", "unspecified"},
+    {CRL_REASON_KEY_COMPROMISE, "Key Compromise", "keyCompromise"},
+    {CRL_REASON_CA_COMPROMISE, "CA Compromise", "CACompromise"},
+    {CRL_REASON_AFFILIATION_CHANGED, "Affiliation Changed",
+     "affiliationChanged"},
+    {CRL_REASON_SUPERSEDED, "Superseded", "superseded"},
+    {CRL_REASON_CESSATION_OF_OPERATION,
+     "Cessation Of Operation", "cessationOfOperation"},
+    {CRL_REASON_CERTIFICATE_HOLD, "Certificate Hold", "certificateHold"},
+    {CRL_REASON_REMOVE_FROM_CRL, "Remove From CRL", "removeFromCRL"},
+    {CRL_REASON_PRIVILEGE_WITHDRAWN, "Privilege Withdrawn",
+     "privilegeWithdrawn"},
+    {CRL_REASON_AA_COMPROMISE, "AA Compromise", "AACompromise"},
+    {-1, NULL, NULL}
+};
+
+const X509V3_EXT_METHOD v3_crl_reason = {
+    NID_crl_reason, 0, ASN1_ITEM_ref(ASN1_ENUMERATED),
+    0, 0, 0, 0,
+    (X509V3_EXT_I2S)i2s_ASN1_ENUMERATED_TABLE,
+    0,
+    0, 0, 0, 0,
+    crl_reasons
+};
+
+char *i2s_ASN1_ENUMERATED_TABLE(X509V3_EXT_METHOD *method,
+                                const ASN1_ENUMERATED *e)
+{
+    ENUMERATED_NAMES *enam;
+    long strval;
+
+    strval = ASN1_ENUMERATED_get(e);
+    for (enam = method->usr_data; enam->lname; enam++) {
+        if (strval == enam->bitnum)
+            return OPENSSL_strdup(enam->lname);
+    }
+    return i2s_ASN1_ENUMERATED(method, e);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_extku.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_extku.c
new file mode 100644
index 000000000..91b24376e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_extku.c
@@ -0,0 +1,103 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/conf.h>
+#include <openssl/x509v3.h>
+#include "ext_dat.h"
+
+static void *v2i_EXTENDED_KEY_USAGE(const X509V3_EXT_METHOD *method,
+                                    X509V3_CTX *ctx,
+                                    STACK_OF(CONF_VALUE) *nval);
+static STACK_OF(CONF_VALUE) *i2v_EXTENDED_KEY_USAGE(const X509V3_EXT_METHOD
+                                                    *method, void *eku, STACK_OF(CONF_VALUE)
+                                                    *extlist);
+
+const X509V3_EXT_METHOD v3_ext_ku = {
+    NID_ext_key_usage, 0,
+    ASN1_ITEM_ref(EXTENDED_KEY_USAGE),
+    0, 0, 0, 0,
+    0, 0,
+    i2v_EXTENDED_KEY_USAGE,
+    v2i_EXTENDED_KEY_USAGE,
+    0, 0,
+    NULL
+};
+
+/* NB OCSP acceptable responses also is a SEQUENCE OF OBJECT */
+const X509V3_EXT_METHOD v3_ocsp_accresp = {
+    NID_id_pkix_OCSP_acceptableResponses, 0,
+    ASN1_ITEM_ref(EXTENDED_KEY_USAGE),
+    0, 0, 0, 0,
+    0, 0,
+    i2v_EXTENDED_KEY_USAGE,
+    v2i_EXTENDED_KEY_USAGE,
+    0, 0,
+    NULL
+};
+
+ASN1_ITEM_TEMPLATE(EXTENDED_KEY_USAGE) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, EXTENDED_KEY_USAGE, ASN1_OBJECT)
+ASN1_ITEM_TEMPLATE_END(EXTENDED_KEY_USAGE)
+
+IMPLEMENT_ASN1_FUNCTIONS(EXTENDED_KEY_USAGE)
+
+static STACK_OF(CONF_VALUE) *i2v_EXTENDED_KEY_USAGE(const X509V3_EXT_METHOD
+                                                    *method, void *a, STACK_OF(CONF_VALUE)
+                                                    *ext_list)
+{
+    EXTENDED_KEY_USAGE *eku = a;
+    int i;
+    ASN1_OBJECT *obj;
+    char obj_tmp[80];
+    for (i = 0; i < sk_ASN1_OBJECT_num(eku); i++) {
+        obj = sk_ASN1_OBJECT_value(eku, i);
+        i2t_ASN1_OBJECT(obj_tmp, 80, obj);
+        X509V3_add_value(NULL, obj_tmp, &ext_list);
+    }
+    return ext_list;
+}
+
+static void *v2i_EXTENDED_KEY_USAGE(const X509V3_EXT_METHOD *method,
+                                    X509V3_CTX *ctx,
+                                    STACK_OF(CONF_VALUE) *nval)
+{
+    EXTENDED_KEY_USAGE *extku;
+    char *extval;
+    ASN1_OBJECT *objtmp;
+    CONF_VALUE *val;
+    const int num = sk_CONF_VALUE_num(nval);
+    int i;
+
+    extku = sk_ASN1_OBJECT_new_reserve(NULL, num);
+    if (extku == NULL) {
+        X509V3err(X509V3_F_V2I_EXTENDED_KEY_USAGE, ERR_R_MALLOC_FAILURE);
+        sk_ASN1_OBJECT_free(extku);
+        return NULL;
+    }
+
+    for (i = 0; i < num; i++) {
+        val = sk_CONF_VALUE_value(nval, i);
+        if (val->value)
+            extval = val->value;
+        else
+            extval = val->name;
+        if ((objtmp = OBJ_txt2obj(extval, 0)) == NULL) {
+            sk_ASN1_OBJECT_pop_free(extku, ASN1_OBJECT_free);
+            X509V3err(X509V3_F_V2I_EXTENDED_KEY_USAGE,
+                      X509V3_R_INVALID_OBJECT_IDENTIFIER);
+            X509V3_conf_err(val);
+            return NULL;
+        }
+        sk_ASN1_OBJECT_push(extku, objtmp);  /* no failure as it was reserved */
+    }
+    return extku;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_genn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_genn.c
new file mode 100644
index 000000000..85fc3fc24
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_genn.c
@@ -0,0 +1,201 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/conf.h>
+#include <openssl/x509v3.h>
+
+ASN1_SEQUENCE(OTHERNAME) = {
+        ASN1_SIMPLE(OTHERNAME, type_id, ASN1_OBJECT),
+        /* Maybe have a true ANY DEFINED BY later */
+        ASN1_EXP(OTHERNAME, value, ASN1_ANY, 0)
+} ASN1_SEQUENCE_END(OTHERNAME)
+
+IMPLEMENT_ASN1_FUNCTIONS(OTHERNAME)
+
+ASN1_SEQUENCE(EDIPARTYNAME) = {
+        ASN1_IMP_OPT(EDIPARTYNAME, nameAssigner, DIRECTORYSTRING, 0),
+        ASN1_IMP_OPT(EDIPARTYNAME, partyName, DIRECTORYSTRING, 1)
+} ASN1_SEQUENCE_END(EDIPARTYNAME)
+
+IMPLEMENT_ASN1_FUNCTIONS(EDIPARTYNAME)
+
+ASN1_CHOICE(GENERAL_NAME) = {
+        ASN1_IMP(GENERAL_NAME, d.otherName, OTHERNAME, GEN_OTHERNAME),
+        ASN1_IMP(GENERAL_NAME, d.rfc822Name, ASN1_IA5STRING, GEN_EMAIL),
+        ASN1_IMP(GENERAL_NAME, d.dNSName, ASN1_IA5STRING, GEN_DNS),
+        /* Don't decode this */
+        ASN1_IMP(GENERAL_NAME, d.x400Address, ASN1_SEQUENCE, GEN_X400),
+        /* X509_NAME is a CHOICE type so use EXPLICIT */
+        ASN1_EXP(GENERAL_NAME, d.directoryName, X509_NAME, GEN_DIRNAME),
+        ASN1_IMP(GENERAL_NAME, d.ediPartyName, EDIPARTYNAME, GEN_EDIPARTY),
+        ASN1_IMP(GENERAL_NAME, d.uniformResourceIdentifier, ASN1_IA5STRING, GEN_URI),
+        ASN1_IMP(GENERAL_NAME, d.iPAddress, ASN1_OCTET_STRING, GEN_IPADD),
+        ASN1_IMP(GENERAL_NAME, d.registeredID, ASN1_OBJECT, GEN_RID)
+} ASN1_CHOICE_END(GENERAL_NAME)
+
+IMPLEMENT_ASN1_FUNCTIONS(GENERAL_NAME)
+
+ASN1_ITEM_TEMPLATE(GENERAL_NAMES) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, GeneralNames, GENERAL_NAME)
+ASN1_ITEM_TEMPLATE_END(GENERAL_NAMES)
+
+IMPLEMENT_ASN1_FUNCTIONS(GENERAL_NAMES)
+
+GENERAL_NAME *GENERAL_NAME_dup(GENERAL_NAME *a)
+{
+    return (GENERAL_NAME *)ASN1_dup((i2d_of_void *)i2d_GENERAL_NAME,
+                                    (d2i_of_void *)d2i_GENERAL_NAME,
+                                    (char *)a);
+}
+
+/* Returns 0 if they are equal, != 0 otherwise. */
+int GENERAL_NAME_cmp(GENERAL_NAME *a, GENERAL_NAME *b)
+{
+    int result = -1;
+
+    if (!a || !b || a->type != b->type)
+        return -1;
+    switch (a->type) {
+    case GEN_X400:
+    case GEN_EDIPARTY:
+        result = ASN1_TYPE_cmp(a->d.other, b->d.other);
+        break;
+
+    case GEN_OTHERNAME:
+        result = OTHERNAME_cmp(a->d.otherName, b->d.otherName);
+        break;
+
+    case GEN_EMAIL:
+    case GEN_DNS:
+    case GEN_URI:
+        result = ASN1_STRING_cmp(a->d.ia5, b->d.ia5);
+        break;
+
+    case GEN_DIRNAME:
+        result = X509_NAME_cmp(a->d.dirn, b->d.dirn);
+        break;
+
+    case GEN_IPADD:
+        result = ASN1_OCTET_STRING_cmp(a->d.ip, b->d.ip);
+        break;
+
+    case GEN_RID:
+        result = OBJ_cmp(a->d.rid, b->d.rid);
+        break;
+    }
+    return result;
+}
+
+/* Returns 0 if they are equal, != 0 otherwise. */
+int OTHERNAME_cmp(OTHERNAME *a, OTHERNAME *b)
+{
+    int result = -1;
+
+    if (!a || !b)
+        return -1;
+    /* Check their type first. */
+    if ((result = OBJ_cmp(a->type_id, b->type_id)) != 0)
+        return result;
+    /* Check the value. */
+    result = ASN1_TYPE_cmp(a->value, b->value);
+    return result;
+}
+
+void GENERAL_NAME_set0_value(GENERAL_NAME *a, int type, void *value)
+{
+    switch (type) {
+    case GEN_X400:
+    case GEN_EDIPARTY:
+        a->d.other = value;
+        break;
+
+    case GEN_OTHERNAME:
+        a->d.otherName = value;
+        break;
+
+    case GEN_EMAIL:
+    case GEN_DNS:
+    case GEN_URI:
+        a->d.ia5 = value;
+        break;
+
+    case GEN_DIRNAME:
+        a->d.dirn = value;
+        break;
+
+    case GEN_IPADD:
+        a->d.ip = value;
+        break;
+
+    case GEN_RID:
+        a->d.rid = value;
+        break;
+    }
+    a->type = type;
+}
+
+void *GENERAL_NAME_get0_value(GENERAL_NAME *a, int *ptype)
+{
+    if (ptype)
+        *ptype = a->type;
+    switch (a->type) {
+    case GEN_X400:
+    case GEN_EDIPARTY:
+        return a->d.other;
+
+    case GEN_OTHERNAME:
+        return a->d.otherName;
+
+    case GEN_EMAIL:
+    case GEN_DNS:
+    case GEN_URI:
+        return a->d.ia5;
+
+    case GEN_DIRNAME:
+        return a->d.dirn;
+
+    case GEN_IPADD:
+        return a->d.ip;
+
+    case GEN_RID:
+        return a->d.rid;
+
+    default:
+        return NULL;
+    }
+}
+
+int GENERAL_NAME_set0_othername(GENERAL_NAME *gen,
+                                ASN1_OBJECT *oid, ASN1_TYPE *value)
+{
+    OTHERNAME *oth;
+    oth = OTHERNAME_new();
+    if (oth == NULL)
+        return 0;
+    ASN1_TYPE_free(oth->value);
+    oth->type_id = oid;
+    oth->value = value;
+    GENERAL_NAME_set0_value(gen, GEN_OTHERNAME, oth);
+    return 1;
+}
+
+int GENERAL_NAME_get0_otherName(GENERAL_NAME *gen,
+                                ASN1_OBJECT **poid, ASN1_TYPE **pvalue)
+{
+    if (gen->type != GEN_OTHERNAME)
+        return 0;
+    if (poid)
+        *poid = gen->d.otherName->type_id;
+    if (pvalue)
+        *pvalue = gen->d.otherName->value;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_ia5.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_ia5.c
new file mode 100644
index 000000000..c1170d461
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_ia5.c
@@ -0,0 +1,65 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include <openssl/conf.h>
+#include <openssl/x509v3.h>
+#include "ext_dat.h"
+
+const X509V3_EXT_METHOD v3_ns_ia5_list[8] = {
+    EXT_IA5STRING(NID_netscape_base_url),
+    EXT_IA5STRING(NID_netscape_revocation_url),
+    EXT_IA5STRING(NID_netscape_ca_revocation_url),
+    EXT_IA5STRING(NID_netscape_renewal_url),
+    EXT_IA5STRING(NID_netscape_ca_policy_url),
+    EXT_IA5STRING(NID_netscape_ssl_server_name),
+    EXT_IA5STRING(NID_netscape_comment),
+    EXT_END
+};
+
+char *i2s_ASN1_IA5STRING(X509V3_EXT_METHOD *method, ASN1_IA5STRING *ia5)
+{
+    char *tmp;
+
+    if (!ia5 || !ia5->length)
+        return NULL;
+    if ((tmp = OPENSSL_malloc(ia5->length + 1)) == NULL) {
+        X509V3err(X509V3_F_I2S_ASN1_IA5STRING, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    memcpy(tmp, ia5->data, ia5->length);
+    tmp[ia5->length] = 0;
+    return tmp;
+}
+
+ASN1_IA5STRING *s2i_ASN1_IA5STRING(X509V3_EXT_METHOD *method,
+                                   X509V3_CTX *ctx, const char *str)
+{
+    ASN1_IA5STRING *ia5;
+    if (!str) {
+        X509V3err(X509V3_F_S2I_ASN1_IA5STRING,
+                  X509V3_R_INVALID_NULL_ARGUMENT);
+        return NULL;
+    }
+    if ((ia5 = ASN1_IA5STRING_new()) == NULL)
+        goto err;
+    if (!ASN1_STRING_set((ASN1_STRING *)ia5, str, strlen(str))) {
+        ASN1_IA5STRING_free(ia5);
+        return NULL;
+    }
+#ifdef CHARSET_EBCDIC
+    ebcdic2ascii(ia5->data, ia5->data, ia5->length);
+#endif                          /* CHARSET_EBCDIC */
+    return ia5;
+ err:
+    X509V3err(X509V3_F_S2I_ASN1_IA5STRING, ERR_R_MALLOC_FAILURE);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_info.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_info.c
new file mode 100644
index 000000000..7af9e23ae
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_info.c
@@ -0,0 +1,162 @@
+/*
+ * Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/x509v3.h>
+#include "ext_dat.h"
+
+static STACK_OF(CONF_VALUE) *i2v_AUTHORITY_INFO_ACCESS(X509V3_EXT_METHOD
+                                                       *method, AUTHORITY_INFO_ACCESS
+                                                       *ainfo, STACK_OF(CONF_VALUE)
+                                                       *ret);
+static AUTHORITY_INFO_ACCESS *v2i_AUTHORITY_INFO_ACCESS(X509V3_EXT_METHOD
+                                                        *method,
+                                                        X509V3_CTX *ctx,
+                                                        STACK_OF(CONF_VALUE)
+                                                        *nval);
+
+const X509V3_EXT_METHOD v3_info = { NID_info_access, X509V3_EXT_MULTILINE,
+    ASN1_ITEM_ref(AUTHORITY_INFO_ACCESS),
+    0, 0, 0, 0,
+    0, 0,
+    (X509V3_EXT_I2V) i2v_AUTHORITY_INFO_ACCESS,
+    (X509V3_EXT_V2I)v2i_AUTHORITY_INFO_ACCESS,
+    0, 0,
+    NULL
+};
+
+const X509V3_EXT_METHOD v3_sinfo = { NID_sinfo_access, X509V3_EXT_MULTILINE,
+    ASN1_ITEM_ref(AUTHORITY_INFO_ACCESS),
+    0, 0, 0, 0,
+    0, 0,
+    (X509V3_EXT_I2V) i2v_AUTHORITY_INFO_ACCESS,
+    (X509V3_EXT_V2I)v2i_AUTHORITY_INFO_ACCESS,
+    0, 0,
+    NULL
+};
+
+ASN1_SEQUENCE(ACCESS_DESCRIPTION) = {
+        ASN1_SIMPLE(ACCESS_DESCRIPTION, method, ASN1_OBJECT),
+        ASN1_SIMPLE(ACCESS_DESCRIPTION, location, GENERAL_NAME)
+} ASN1_SEQUENCE_END(ACCESS_DESCRIPTION)
+
+IMPLEMENT_ASN1_FUNCTIONS(ACCESS_DESCRIPTION)
+
+ASN1_ITEM_TEMPLATE(AUTHORITY_INFO_ACCESS) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, GeneralNames, ACCESS_DESCRIPTION)
+ASN1_ITEM_TEMPLATE_END(AUTHORITY_INFO_ACCESS)
+
+IMPLEMENT_ASN1_FUNCTIONS(AUTHORITY_INFO_ACCESS)
+
+static STACK_OF(CONF_VALUE) *i2v_AUTHORITY_INFO_ACCESS(
+    X509V3_EXT_METHOD *method, AUTHORITY_INFO_ACCESS *ainfo,
+    STACK_OF(CONF_VALUE) *ret)
+{
+    ACCESS_DESCRIPTION *desc;
+    int i, nlen;
+    char objtmp[80], *ntmp;
+    CONF_VALUE *vtmp;
+    STACK_OF(CONF_VALUE) *tret = ret;
+
+    for (i = 0; i < sk_ACCESS_DESCRIPTION_num(ainfo); i++) {
+        STACK_OF(CONF_VALUE) *tmp;
+
+        desc = sk_ACCESS_DESCRIPTION_value(ainfo, i);
+        tmp = i2v_GENERAL_NAME(method, desc->location, tret);
+        if (tmp == NULL)
+            goto err;
+        tret = tmp;
+        vtmp = sk_CONF_VALUE_value(tret, i);
+        i2t_ASN1_OBJECT(objtmp, sizeof(objtmp), desc->method);
+        nlen = strlen(objtmp) + 3 + strlen(vtmp->name) + 1;
+        ntmp = OPENSSL_malloc(nlen);
+        if (ntmp == NULL)
+            goto err;
+        BIO_snprintf(ntmp, nlen, "%s - %s", objtmp, vtmp->name);
+        OPENSSL_free(vtmp->name);
+        vtmp->name = ntmp;
+    }
+    if (ret == NULL && tret == NULL)
+        return sk_CONF_VALUE_new_null();
+
+    return tret;
+ err:
+    X509V3err(X509V3_F_I2V_AUTHORITY_INFO_ACCESS, ERR_R_MALLOC_FAILURE);
+    if (ret == NULL && tret != NULL)
+        sk_CONF_VALUE_pop_free(tret, X509V3_conf_free);
+    return NULL;
+}
+
+static AUTHORITY_INFO_ACCESS *v2i_AUTHORITY_INFO_ACCESS(X509V3_EXT_METHOD
+                                                        *method,
+                                                        X509V3_CTX *ctx,
+                                                        STACK_OF(CONF_VALUE)
+                                                        *nval)
+{
+    AUTHORITY_INFO_ACCESS *ainfo = NULL;
+    CONF_VALUE *cnf, ctmp;
+    ACCESS_DESCRIPTION *acc;
+    int i, objlen;
+    const int num = sk_CONF_VALUE_num(nval);
+    char *objtmp, *ptmp;
+
+    if ((ainfo = sk_ACCESS_DESCRIPTION_new_reserve(NULL, num)) == NULL) {
+        X509V3err(X509V3_F_V2I_AUTHORITY_INFO_ACCESS, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    for (i = 0; i < num; i++) {
+        cnf = sk_CONF_VALUE_value(nval, i);
+        if ((acc = ACCESS_DESCRIPTION_new()) == NULL) {
+            X509V3err(X509V3_F_V2I_AUTHORITY_INFO_ACCESS,
+                      ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        sk_ACCESS_DESCRIPTION_push(ainfo, acc); /* Cannot fail due to reserve */
+        ptmp = strchr(cnf->name, ';');
+        if (!ptmp) {
+            X509V3err(X509V3_F_V2I_AUTHORITY_INFO_ACCESS,
+                      X509V3_R_INVALID_SYNTAX);
+            goto err;
+        }
+        objlen = ptmp - cnf->name;
+        ctmp.name = ptmp + 1;
+        ctmp.value = cnf->value;
+        if (!v2i_GENERAL_NAME_ex(acc->location, method, ctx, &ctmp, 0))
+            goto err;
+        if ((objtmp = OPENSSL_strndup(cnf->name, objlen)) == NULL) {
+            X509V3err(X509V3_F_V2I_AUTHORITY_INFO_ACCESS,
+                      ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        acc->method = OBJ_txt2obj(objtmp, 0);
+        if (!acc->method) {
+            X509V3err(X509V3_F_V2I_AUTHORITY_INFO_ACCESS,
+                      X509V3_R_BAD_OBJECT);
+            ERR_add_error_data(2, "value=", objtmp);
+            OPENSSL_free(objtmp);
+            goto err;
+        }
+        OPENSSL_free(objtmp);
+
+    }
+    return ainfo;
+ err:
+    sk_ACCESS_DESCRIPTION_pop_free(ainfo, ACCESS_DESCRIPTION_free);
+    return NULL;
+}
+
+int i2a_ACCESS_DESCRIPTION(BIO *bp, const ACCESS_DESCRIPTION *a)
+{
+    i2a_ASN1_OBJECT(bp, a->method);
+    return 2;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_int.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_int.c
new file mode 100644
index 000000000..690c90e8f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_int.c
@@ -0,0 +1,43 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509v3.h>
+#include "ext_dat.h"
+
+const X509V3_EXT_METHOD v3_crl_num = {
+    NID_crl_number, 0, ASN1_ITEM_ref(ASN1_INTEGER),
+    0, 0, 0, 0,
+    (X509V3_EXT_I2S)i2s_ASN1_INTEGER,
+    0,
+    0, 0, 0, 0, NULL
+};
+
+const X509V3_EXT_METHOD v3_delta_crl = {
+    NID_delta_crl, 0, ASN1_ITEM_ref(ASN1_INTEGER),
+    0, 0, 0, 0,
+    (X509V3_EXT_I2S)i2s_ASN1_INTEGER,
+    0,
+    0, 0, 0, 0, NULL
+};
+
+static void *s2i_asn1_int(X509V3_EXT_METHOD *meth, X509V3_CTX *ctx,
+                          const char *value)
+{
+    return s2i_ASN1_INTEGER(meth, value);
+}
+
+const X509V3_EXT_METHOD v3_inhibit_anyp = {
+    NID_inhibit_any_policy, 0, ASN1_ITEM_ref(ASN1_INTEGER),
+    0, 0, 0, 0,
+    (X509V3_EXT_I2S)i2s_ASN1_INTEGER,
+    (X509V3_EXT_S2I)s2i_asn1_int,
+    0, 0, 0, 0, NULL
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_lib.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_lib.c
new file mode 100644
index 000000000..97c1cbc20
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_lib.c
@@ -0,0 +1,303 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* X509 v3 extension utilities */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/x509v3.h>
+
+#include "ext_dat.h"
+
+static STACK_OF(X509V3_EXT_METHOD) *ext_list = NULL;
+
+static int ext_cmp(const X509V3_EXT_METHOD *const *a,
+                   const X509V3_EXT_METHOD *const *b);
+static void ext_list_free(X509V3_EXT_METHOD *ext);
+
+int X509V3_EXT_add(X509V3_EXT_METHOD *ext)
+{
+    if (ext_list == NULL
+        && (ext_list = sk_X509V3_EXT_METHOD_new(ext_cmp)) == NULL) {
+        X509V3err(X509V3_F_X509V3_EXT_ADD, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    if (!sk_X509V3_EXT_METHOD_push(ext_list, ext)) {
+        X509V3err(X509V3_F_X509V3_EXT_ADD, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    return 1;
+}
+
+static int ext_cmp(const X509V3_EXT_METHOD *const *a,
+                   const X509V3_EXT_METHOD *const *b)
+{
+    return ((*a)->ext_nid - (*b)->ext_nid);
+}
+
+DECLARE_OBJ_BSEARCH_CMP_FN(const X509V3_EXT_METHOD *,
+                           const X509V3_EXT_METHOD *, ext);
+IMPLEMENT_OBJ_BSEARCH_CMP_FN(const X509V3_EXT_METHOD *,
+                             const X509V3_EXT_METHOD *, ext);
+
+#include "standard_exts.h"
+
+const X509V3_EXT_METHOD *X509V3_EXT_get_nid(int nid)
+{
+    X509V3_EXT_METHOD tmp;
+    const X509V3_EXT_METHOD *t = &tmp, *const *ret;
+    int idx;
+
+    if (nid < 0)
+        return NULL;
+    tmp.ext_nid = nid;
+    ret = OBJ_bsearch_ext(&t, standard_exts, STANDARD_EXTENSION_COUNT);
+    if (ret)
+        return *ret;
+    if (!ext_list)
+        return NULL;
+    idx = sk_X509V3_EXT_METHOD_find(ext_list, &tmp);
+    return sk_X509V3_EXT_METHOD_value(ext_list, idx);
+}
+
+const X509V3_EXT_METHOD *X509V3_EXT_get(X509_EXTENSION *ext)
+{
+    int nid;
+    if ((nid = OBJ_obj2nid(X509_EXTENSION_get_object(ext))) == NID_undef)
+        return NULL;
+    return X509V3_EXT_get_nid(nid);
+}
+
+int X509V3_EXT_add_list(X509V3_EXT_METHOD *extlist)
+{
+    for (; extlist->ext_nid != -1; extlist++)
+        if (!X509V3_EXT_add(extlist))
+            return 0;
+    return 1;
+}
+
+int X509V3_EXT_add_alias(int nid_to, int nid_from)
+{
+    const X509V3_EXT_METHOD *ext;
+    X509V3_EXT_METHOD *tmpext;
+
+    if ((ext = X509V3_EXT_get_nid(nid_from)) == NULL) {
+        X509V3err(X509V3_F_X509V3_EXT_ADD_ALIAS, X509V3_R_EXTENSION_NOT_FOUND);
+        return 0;
+    }
+    if ((tmpext = OPENSSL_malloc(sizeof(*tmpext))) == NULL) {
+        X509V3err(X509V3_F_X509V3_EXT_ADD_ALIAS, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    *tmpext = *ext;
+    tmpext->ext_nid = nid_to;
+    tmpext->ext_flags |= X509V3_EXT_DYNAMIC;
+    return X509V3_EXT_add(tmpext);
+}
+
+void X509V3_EXT_cleanup(void)
+{
+    sk_X509V3_EXT_METHOD_pop_free(ext_list, ext_list_free);
+    ext_list = NULL;
+}
+
+static void ext_list_free(X509V3_EXT_METHOD *ext)
+{
+    if (ext->ext_flags & X509V3_EXT_DYNAMIC)
+        OPENSSL_free(ext);
+}
+
+/*
+ * Legacy function: we don't need to add standard extensions any more because
+ * they are now kept in ext_dat.h.
+ */
+
+int X509V3_add_standard_extensions(void)
+{
+    return 1;
+}
+
+/* Return an extension internal structure */
+
+void *X509V3_EXT_d2i(X509_EXTENSION *ext)
+{
+    const X509V3_EXT_METHOD *method;
+    const unsigned char *p;
+    ASN1_STRING *extvalue;
+    int extlen;
+
+    if ((method = X509V3_EXT_get(ext)) == NULL)
+        return NULL;
+    extvalue = X509_EXTENSION_get_data(ext);
+    p = ASN1_STRING_get0_data(extvalue);
+    extlen = ASN1_STRING_length(extvalue);
+    if (method->it)
+        return ASN1_item_d2i(NULL, &p, extlen, ASN1_ITEM_ptr(method->it));
+    return method->d2i(NULL, &p, extlen);
+}
+
+/*-
+ * Get critical flag and decoded version of extension from a NID.
+ * The "idx" variable returns the last found extension and can
+ * be used to retrieve multiple extensions of the same NID.
+ * However multiple extensions with the same NID is usually
+ * due to a badly encoded certificate so if idx is NULL we
+ * choke if multiple extensions exist.
+ * The "crit" variable is set to the critical value.
+ * The return value is the decoded extension or NULL on
+ * error. The actual error can have several different causes,
+ * the value of *crit reflects the cause:
+ * >= 0, extension found but not decoded (reflects critical value).
+ * -1 extension not found.
+ * -2 extension occurs more than once.
+ */
+
+void *X509V3_get_d2i(const STACK_OF(X509_EXTENSION) *x, int nid, int *crit,
+                     int *idx)
+{
+    int lastpos, i;
+    X509_EXTENSION *ex, *found_ex = NULL;
+
+    if (!x) {
+        if (idx)
+            *idx = -1;
+        if (crit)
+            *crit = -1;
+        return NULL;
+    }
+    if (idx)
+        lastpos = *idx + 1;
+    else
+        lastpos = 0;
+    if (lastpos < 0)
+        lastpos = 0;
+    for (i = lastpos; i < sk_X509_EXTENSION_num(x); i++) {
+        ex = sk_X509_EXTENSION_value(x, i);
+        if (OBJ_obj2nid(X509_EXTENSION_get_object(ex)) == nid) {
+            if (idx) {
+                *idx = i;
+                found_ex = ex;
+                break;
+            } else if (found_ex) {
+                /* Found more than one */
+                if (crit)
+                    *crit = -2;
+                return NULL;
+            }
+            found_ex = ex;
+        }
+    }
+    if (found_ex) {
+        /* Found it */
+        if (crit)
+            *crit = X509_EXTENSION_get_critical(found_ex);
+        return X509V3_EXT_d2i(found_ex);
+    }
+
+    /* Extension not found */
+    if (idx)
+        *idx = -1;
+    if (crit)
+        *crit = -1;
+    return NULL;
+}
+
+/*
+ * This function is a general extension append, replace and delete utility.
+ * The precise operation is governed by the 'flags' value. The 'crit' and
+ * 'value' arguments (if relevant) are the extensions internal structure.
+ */
+
+int X509V3_add1_i2d(STACK_OF(X509_EXTENSION) **x, int nid, void *value,
+                    int crit, unsigned long flags)
+{
+    int errcode, extidx = -1;
+    X509_EXTENSION *ext = NULL, *extmp;
+    STACK_OF(X509_EXTENSION) *ret = NULL;
+    unsigned long ext_op = flags & X509V3_ADD_OP_MASK;
+
+    /*
+     * If appending we don't care if it exists, otherwise look for existing
+     * extension.
+     */
+    if (ext_op != X509V3_ADD_APPEND)
+        extidx = X509v3_get_ext_by_NID(*x, nid, -1);
+
+    /* See if extension exists */
+    if (extidx >= 0) {
+        /* If keep existing, nothing to do */
+        if (ext_op == X509V3_ADD_KEEP_EXISTING)
+            return 1;
+        /* If default then its an error */
+        if (ext_op == X509V3_ADD_DEFAULT) {
+            errcode = X509V3_R_EXTENSION_EXISTS;
+            goto err;
+        }
+        /* If delete, just delete it */
+        if (ext_op == X509V3_ADD_DELETE) {
+            if (!sk_X509_EXTENSION_delete(*x, extidx))
+                return -1;
+            return 1;
+        }
+    } else {
+        /*
+         * If replace existing or delete, error since extension must exist
+         */
+        if ((ext_op == X509V3_ADD_REPLACE_EXISTING) ||
+            (ext_op == X509V3_ADD_DELETE)) {
+            errcode = X509V3_R_EXTENSION_NOT_FOUND;
+            goto err;
+        }
+    }
+
+    /*
+     * If we get this far then we have to create an extension: could have
+     * some flags for alternative encoding schemes...
+     */
+
+    ext = X509V3_EXT_i2d(nid, crit, value);
+
+    if (!ext) {
+        X509V3err(X509V3_F_X509V3_ADD1_I2D,
+                  X509V3_R_ERROR_CREATING_EXTENSION);
+        return 0;
+    }
+
+    /* If extension exists replace it.. */
+    if (extidx >= 0) {
+        extmp = sk_X509_EXTENSION_value(*x, extidx);
+        X509_EXTENSION_free(extmp);
+        if (!sk_X509_EXTENSION_set(*x, extidx, ext))
+            return -1;
+        return 1;
+    }
+
+    ret = *x;
+    if (*x == NULL
+        && (ret = sk_X509_EXTENSION_new_null()) == NULL)
+        goto m_fail;
+    if (!sk_X509_EXTENSION_push(ret, ext))
+        goto m_fail;
+
+    *x = ret;
+    return 1;
+
+ m_fail:
+    /* X509V3err(X509V3_F_X509V3_ADD1_I2D, ERR_R_MALLOC_FAILURE); */
+    if (ret != *x)
+        sk_X509_EXTENSION_free(ret);
+    X509_EXTENSION_free(ext);
+    return -1;
+
+ err:
+    if (!(flags & X509V3_ADD_SILENT))
+        X509V3err(X509V3_F_X509V3_ADD1_I2D, errcode);
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_ncons.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_ncons.c
new file mode 100644
index 000000000..9a2cd5af0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_ncons.c
@@ -0,0 +1,675 @@
+/*
+ * Copyright 2003-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "internal/numbers.h"
+#include <stdio.h>
+#include "internal/asn1_int.h"
+#include <openssl/asn1t.h>
+#include <openssl/conf.h>
+#include <openssl/x509v3.h>
+
+#include "internal/x509_int.h"
+#include "ext_dat.h"
+
+static void *v2i_NAME_CONSTRAINTS(const X509V3_EXT_METHOD *method,
+                                  X509V3_CTX *ctx,
+                                  STACK_OF(CONF_VALUE) *nval);
+static int i2r_NAME_CONSTRAINTS(const X509V3_EXT_METHOD *method, void *a,
+                                BIO *bp, int ind);
+static int do_i2r_name_constraints(const X509V3_EXT_METHOD *method,
+                                   STACK_OF(GENERAL_SUBTREE) *trees, BIO *bp,
+                                   int ind, const char *name);
+static int print_nc_ipadd(BIO *bp, ASN1_OCTET_STRING *ip);
+
+static int nc_match(GENERAL_NAME *gen, NAME_CONSTRAINTS *nc);
+static int nc_match_single(GENERAL_NAME *sub, GENERAL_NAME *gen);
+static int nc_dn(X509_NAME *sub, X509_NAME *nm);
+static int nc_dns(ASN1_IA5STRING *sub, ASN1_IA5STRING *dns);
+static int nc_email(ASN1_IA5STRING *sub, ASN1_IA5STRING *eml);
+static int nc_uri(ASN1_IA5STRING *uri, ASN1_IA5STRING *base);
+static int nc_ip(ASN1_OCTET_STRING *ip, ASN1_OCTET_STRING *base);
+
+const X509V3_EXT_METHOD v3_name_constraints = {
+    NID_name_constraints, 0,
+    ASN1_ITEM_ref(NAME_CONSTRAINTS),
+    0, 0, 0, 0,
+    0, 0,
+    0, v2i_NAME_CONSTRAINTS,
+    i2r_NAME_CONSTRAINTS, 0,
+    NULL
+};
+
+ASN1_SEQUENCE(GENERAL_SUBTREE) = {
+        ASN1_SIMPLE(GENERAL_SUBTREE, base, GENERAL_NAME),
+        ASN1_IMP_OPT(GENERAL_SUBTREE, minimum, ASN1_INTEGER, 0),
+        ASN1_IMP_OPT(GENERAL_SUBTREE, maximum, ASN1_INTEGER, 1)
+} ASN1_SEQUENCE_END(GENERAL_SUBTREE)
+
+ASN1_SEQUENCE(NAME_CONSTRAINTS) = {
+        ASN1_IMP_SEQUENCE_OF_OPT(NAME_CONSTRAINTS, permittedSubtrees,
+                                                        GENERAL_SUBTREE, 0),
+        ASN1_IMP_SEQUENCE_OF_OPT(NAME_CONSTRAINTS, excludedSubtrees,
+                                                        GENERAL_SUBTREE, 1),
+} ASN1_SEQUENCE_END(NAME_CONSTRAINTS)
+
+
+IMPLEMENT_ASN1_ALLOC_FUNCTIONS(GENERAL_SUBTREE)
+IMPLEMENT_ASN1_ALLOC_FUNCTIONS(NAME_CONSTRAINTS)
+
+/*
+ * We cannot use strncasecmp here because that applies locale specific rules.
+ * For example in Turkish 'I' is not the uppercase character for 'i'. We need to
+ * do a simple ASCII case comparison ignoring the locale (that is why we use
+ * numeric constants below).
+ */
+static int ia5ncasecmp(const char *s1, const char *s2, size_t n)
+{
+    for (; n > 0; n--, s1++, s2++) {
+        if (*s1 != *s2) {
+            unsigned char c1 = (unsigned char)*s1, c2 = (unsigned char)*s2;
+
+            /* Convert to lower case */
+            if (c1 >= 0x41 /* A */ && c1 <= 0x5A /* Z */)
+                c1 += 0x20;
+            if (c2 >= 0x41 /* A */ && c2 <= 0x5A /* Z */)
+                c2 += 0x20;
+
+            if (c1 == c2)
+                continue;
+
+            if (c1 < c2)
+                return -1;
+
+            /* c1 > c2 */
+            return 1;
+        } else if (*s1 == 0) {
+            /* If we get here we know that *s2 == 0 too */
+            return 0;
+        }
+    }
+
+    return 0;
+}
+
+static int ia5casecmp(const char *s1, const char *s2)
+{
+    return ia5ncasecmp(s1, s2, SIZE_MAX);
+}
+
+static void *v2i_NAME_CONSTRAINTS(const X509V3_EXT_METHOD *method,
+                                  X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval)
+{
+    int i;
+    CONF_VALUE tval, *val;
+    STACK_OF(GENERAL_SUBTREE) **ptree = NULL;
+    NAME_CONSTRAINTS *ncons = NULL;
+    GENERAL_SUBTREE *sub = NULL;
+
+    ncons = NAME_CONSTRAINTS_new();
+    if (ncons == NULL)
+        goto memerr;
+    for (i = 0; i < sk_CONF_VALUE_num(nval); i++) {
+        val = sk_CONF_VALUE_value(nval, i);
+        if (strncmp(val->name, "permitted", 9) == 0 && val->name[9]) {
+            ptree = &ncons->permittedSubtrees;
+            tval.name = val->name + 10;
+        } else if (strncmp(val->name, "excluded", 8) == 0 && val->name[8]) {
+            ptree = &ncons->excludedSubtrees;
+            tval.name = val->name + 9;
+        } else {
+            X509V3err(X509V3_F_V2I_NAME_CONSTRAINTS, X509V3_R_INVALID_SYNTAX);
+            goto err;
+        }
+        tval.value = val->value;
+        sub = GENERAL_SUBTREE_new();
+        if (sub == NULL)
+            goto memerr;
+        if (!v2i_GENERAL_NAME_ex(sub->base, method, ctx, &tval, 1))
+            goto err;
+        if (*ptree == NULL)
+            *ptree = sk_GENERAL_SUBTREE_new_null();
+        if (*ptree == NULL || !sk_GENERAL_SUBTREE_push(*ptree, sub))
+            goto memerr;
+        sub = NULL;
+    }
+
+    return ncons;
+
+ memerr:
+    X509V3err(X509V3_F_V2I_NAME_CONSTRAINTS, ERR_R_MALLOC_FAILURE);
+ err:
+    NAME_CONSTRAINTS_free(ncons);
+    GENERAL_SUBTREE_free(sub);
+
+    return NULL;
+}
+
+static int i2r_NAME_CONSTRAINTS(const X509V3_EXT_METHOD *method, void *a,
+                                BIO *bp, int ind)
+{
+    NAME_CONSTRAINTS *ncons = a;
+    do_i2r_name_constraints(method, ncons->permittedSubtrees,
+                            bp, ind, "Permitted");
+    do_i2r_name_constraints(method, ncons->excludedSubtrees,
+                            bp, ind, "Excluded");
+    return 1;
+}
+
+static int do_i2r_name_constraints(const X509V3_EXT_METHOD *method,
+                                   STACK_OF(GENERAL_SUBTREE) *trees,
+                                   BIO *bp, int ind, const char *name)
+{
+    GENERAL_SUBTREE *tree;
+    int i;
+    if (sk_GENERAL_SUBTREE_num(trees) > 0)
+        BIO_printf(bp, "%*s%s:\n", ind, "", name);
+    for (i = 0; i < sk_GENERAL_SUBTREE_num(trees); i++) {
+        tree = sk_GENERAL_SUBTREE_value(trees, i);
+        BIO_printf(bp, "%*s", ind + 2, "");
+        if (tree->base->type == GEN_IPADD)
+            print_nc_ipadd(bp, tree->base->d.ip);
+        else
+            GENERAL_NAME_print(bp, tree->base);
+        BIO_puts(bp, "\n");
+    }
+    return 1;
+}
+
+static int print_nc_ipadd(BIO *bp, ASN1_OCTET_STRING *ip)
+{
+    int i, len;
+    unsigned char *p;
+    p = ip->data;
+    len = ip->length;
+    BIO_puts(bp, "IP:");
+    if (len == 8) {
+        BIO_printf(bp, "%d.%d.%d.%d/%d.%d.%d.%d",
+                   p[0], p[1], p[2], p[3], p[4], p[5], p[6], p[7]);
+    } else if (len == 32) {
+        for (i = 0; i < 16; i++) {
+            BIO_printf(bp, "%X", p[0] << 8 | p[1]);
+            p += 2;
+            if (i == 7)
+                BIO_puts(bp, "/");
+            else if (i != 15)
+                BIO_puts(bp, ":");
+        }
+    } else
+        BIO_printf(bp, "IP Address:<invalid>");
+    return 1;
+}
+
+#define NAME_CHECK_MAX (1 << 20)
+
+static int add_lengths(int *out, int a, int b)
+{
+    /* sk_FOO_num(NULL) returns -1 but is effectively 0 when iterating. */
+    if (a < 0)
+        a = 0;
+    if (b < 0)
+        b = 0;
+
+    if (a > INT_MAX - b)
+        return 0;
+    *out = a + b;
+    return 1;
+}
+
+/*-
+ * Check a certificate conforms to a specified set of constraints.
+ * Return values:
+ *  X509_V_OK: All constraints obeyed.
+ *  X509_V_ERR_PERMITTED_VIOLATION: Permitted subtree violation.
+ *  X509_V_ERR_EXCLUDED_VIOLATION: Excluded subtree violation.
+ *  X509_V_ERR_SUBTREE_MINMAX: Min or max values present and matching type.
+ *  X509_V_ERR_UNSUPPORTED_CONSTRAINT_TYPE:  Unsupported constraint type.
+ *  X509_V_ERR_UNSUPPORTED_CONSTRAINT_SYNTAX: bad unsupported constraint syntax.
+ *  X509_V_ERR_UNSUPPORTED_NAME_SYNTAX: bad or unsupported syntax of name
+ */
+
+int NAME_CONSTRAINTS_check(X509 *x, NAME_CONSTRAINTS *nc)
+{
+    int r, i, name_count, constraint_count;
+    X509_NAME *nm;
+
+    nm = X509_get_subject_name(x);
+
+    /*
+     * Guard against certificates with an excessive number of names or
+     * constraints causing a computationally expensive name constraints check.
+     */
+    if (!add_lengths(&name_count, X509_NAME_entry_count(nm),
+                     sk_GENERAL_NAME_num(x->altname))
+        || !add_lengths(&constraint_count,
+                        sk_GENERAL_SUBTREE_num(nc->permittedSubtrees),
+                        sk_GENERAL_SUBTREE_num(nc->excludedSubtrees))
+        || (name_count > 0 && constraint_count > NAME_CHECK_MAX / name_count))
+        return X509_V_ERR_UNSPECIFIED;
+
+    if (X509_NAME_entry_count(nm) > 0) {
+        GENERAL_NAME gntmp;
+        gntmp.type = GEN_DIRNAME;
+        gntmp.d.directoryName = nm;
+
+        r = nc_match(&gntmp, nc);
+
+        if (r != X509_V_OK)
+            return r;
+
+        gntmp.type = GEN_EMAIL;
+
+        /* Process any email address attributes in subject name */
+
+        for (i = -1;;) {
+            const X509_NAME_ENTRY *ne;
+
+            i = X509_NAME_get_index_by_NID(nm, NID_pkcs9_emailAddress, i);
+            if (i == -1)
+                break;
+            ne = X509_NAME_get_entry(nm, i);
+            gntmp.d.rfc822Name = X509_NAME_ENTRY_get_data(ne);
+            if (gntmp.d.rfc822Name->type != V_ASN1_IA5STRING)
+                return X509_V_ERR_UNSUPPORTED_NAME_SYNTAX;
+
+            r = nc_match(&gntmp, nc);
+
+            if (r != X509_V_OK)
+                return r;
+        }
+
+    }
+
+    for (i = 0; i < sk_GENERAL_NAME_num(x->altname); i++) {
+        GENERAL_NAME *gen = sk_GENERAL_NAME_value(x->altname, i);
+        r = nc_match(gen, nc);
+        if (r != X509_V_OK)
+            return r;
+    }
+
+    return X509_V_OK;
+
+}
+
+static int cn2dnsid(ASN1_STRING *cn, unsigned char **dnsid, size_t *idlen)
+{
+    int utf8_length;
+    unsigned char *utf8_value;
+    int i;
+    int isdnsname = 0;
+
+    /* Don't leave outputs uninitialized */
+    *dnsid = NULL;
+    *idlen = 0;
+
+    /*-
+     * Per RFC 6125, DNS-IDs representing internationalized domain names appear
+     * in certificates in A-label encoded form:
+     *
+     *   https://tools.ietf.org/html/rfc6125#section-6.4.2
+     *
+     * The same applies to CNs which are intended to represent DNS names.
+     * However, while in the SAN DNS-IDs are IA5Strings, as CNs they may be
+     * needlessly encoded in 16-bit Unicode.  We perform a conversion to UTF-8
+     * to ensure that we get an ASCII representation of any CNs that are
+     * representable as ASCII, but just not encoded as ASCII.  The UTF-8 form
+     * may contain some non-ASCII octets, and that's fine, such CNs are not
+     * valid legacy DNS names.
+     *
+     * Note, 'int' is the return type of ASN1_STRING_to_UTF8() so that's what
+     * we must use for 'utf8_length'.
+     */
+    if ((utf8_length = ASN1_STRING_to_UTF8(&utf8_value, cn)) < 0)
+        return X509_V_ERR_OUT_OF_MEM;
+
+    /*
+     * Some certificates have had names that include a *trailing* NUL byte.
+     * Remove these harmless NUL characters. They would otherwise yield false
+     * alarms with the following embedded NUL check.
+     */
+    while (utf8_length > 0 && utf8_value[utf8_length - 1] == '\0')
+        --utf8_length;
+
+    /* Reject *embedded* NULs */
+    if ((size_t)utf8_length != strlen((char *)utf8_value)) {
+        OPENSSL_free(utf8_value);
+        return X509_V_ERR_UNSUPPORTED_NAME_SYNTAX;
+    }
+
+    /*
+     * XXX: Deviation from strict DNS name syntax, also check names with '_'
+     * Check DNS name syntax, any '-' or '.' must be internal,
+     * and on either side of each '.' we can't have a '-' or '.'.
+     *
+     * If the name has just one label, we don't consider it a DNS name.  This
+     * means that "CN=sometld" cannot be precluded by DNS name constraints, but
+     * that is not a problem.
+     */
+    for (i = 0; i < utf8_length; ++i) {
+        unsigned char c = utf8_value[i];
+
+        if ((c >= 'a' && c <= 'z')
+            || (c >= 'A' && c <= 'Z')
+            || (c >= '0' && c <= '9')
+            || c == '_')
+            continue;
+
+        /* Dot and hyphen cannot be first or last. */
+        if (i > 0 && i < utf8_length - 1) {
+            if (c == '-')
+                continue;
+            /*
+             * Next to a dot the preceding and following characters must not be
+             * another dot or a hyphen.  Otherwise, record that the name is
+             * plausible, since it has two or more labels.
+             */
+            if (c == '.'
+                && utf8_value[i + 1] != '.'
+                && utf8_value[i - 1] != '-'
+                && utf8_value[i + 1] != '-') {
+                isdnsname = 1;
+                continue;
+            }
+        }
+        isdnsname = 0;
+        break;
+    }
+
+    if (isdnsname) {
+        *dnsid = utf8_value;
+        *idlen = (size_t)utf8_length;
+        return X509_V_OK;
+    }
+    OPENSSL_free(utf8_value);
+    return X509_V_OK;
+}
+
+/*
+ * Check CN against DNS-ID name constraints.
+ */
+int NAME_CONSTRAINTS_check_CN(X509 *x, NAME_CONSTRAINTS *nc)
+{
+    int r, i;
+    X509_NAME *nm = X509_get_subject_name(x);
+    ASN1_STRING stmp;
+    GENERAL_NAME gntmp;
+
+    stmp.flags = 0;
+    stmp.type = V_ASN1_IA5STRING;
+    gntmp.type = GEN_DNS;
+    gntmp.d.dNSName = &stmp;
+
+    /* Process any commonName attributes in subject name */
+
+    for (i = -1;;) {
+        X509_NAME_ENTRY *ne;
+        ASN1_STRING *cn;
+        unsigned char *idval;
+        size_t idlen;
+
+        i = X509_NAME_get_index_by_NID(nm, NID_commonName, i);
+        if (i == -1)
+            break;
+        ne = X509_NAME_get_entry(nm, i);
+        cn = X509_NAME_ENTRY_get_data(ne);
+
+        /* Only process attributes that look like host names */
+        if ((r = cn2dnsid(cn, &idval, &idlen)) != X509_V_OK)
+            return r;
+        if (idlen == 0)
+            continue;
+
+        stmp.length = idlen;
+        stmp.data = idval;
+        r = nc_match(&gntmp, nc);
+        OPENSSL_free(idval);
+        if (r != X509_V_OK)
+            return r;
+    }
+    return X509_V_OK;
+}
+
+static int nc_match(GENERAL_NAME *gen, NAME_CONSTRAINTS *nc)
+{
+    GENERAL_SUBTREE *sub;
+    int i, r, match = 0;
+
+    /*
+     * Permitted subtrees: if any subtrees exist of matching the type at
+     * least one subtree must match.
+     */
+
+    for (i = 0; i < sk_GENERAL_SUBTREE_num(nc->permittedSubtrees); i++) {
+        sub = sk_GENERAL_SUBTREE_value(nc->permittedSubtrees, i);
+        if (gen->type != sub->base->type)
+            continue;
+        if (sub->minimum || sub->maximum)
+            return X509_V_ERR_SUBTREE_MINMAX;
+        /* If we already have a match don't bother trying any more */
+        if (match == 2)
+            continue;
+        if (match == 0)
+            match = 1;
+        r = nc_match_single(gen, sub->base);
+        if (r == X509_V_OK)
+            match = 2;
+        else if (r != X509_V_ERR_PERMITTED_VIOLATION)
+            return r;
+    }
+
+    if (match == 1)
+        return X509_V_ERR_PERMITTED_VIOLATION;
+
+    /* Excluded subtrees: must not match any of these */
+
+    for (i = 0; i < sk_GENERAL_SUBTREE_num(nc->excludedSubtrees); i++) {
+        sub = sk_GENERAL_SUBTREE_value(nc->excludedSubtrees, i);
+        if (gen->type != sub->base->type)
+            continue;
+        if (sub->minimum || sub->maximum)
+            return X509_V_ERR_SUBTREE_MINMAX;
+
+        r = nc_match_single(gen, sub->base);
+        if (r == X509_V_OK)
+            return X509_V_ERR_EXCLUDED_VIOLATION;
+        else if (r != X509_V_ERR_PERMITTED_VIOLATION)
+            return r;
+
+    }
+
+    return X509_V_OK;
+
+}
+
+static int nc_match_single(GENERAL_NAME *gen, GENERAL_NAME *base)
+{
+    switch (base->type) {
+    case GEN_DIRNAME:
+        return nc_dn(gen->d.directoryName, base->d.directoryName);
+
+    case GEN_DNS:
+        return nc_dns(gen->d.dNSName, base->d.dNSName);
+
+    case GEN_EMAIL:
+        return nc_email(gen->d.rfc822Name, base->d.rfc822Name);
+
+    case GEN_URI:
+        return nc_uri(gen->d.uniformResourceIdentifier,
+                      base->d.uniformResourceIdentifier);
+
+    case GEN_IPADD:
+        return nc_ip(gen->d.iPAddress, base->d.iPAddress);
+
+    default:
+        return X509_V_ERR_UNSUPPORTED_CONSTRAINT_TYPE;
+    }
+
+}
+
+/*
+ * directoryName name constraint matching. The canonical encoding of
+ * X509_NAME makes this comparison easy. It is matched if the subtree is a
+ * subset of the name.
+ */
+
+static int nc_dn(X509_NAME *nm, X509_NAME *base)
+{
+    /* Ensure canonical encodings are up to date.  */
+    if (nm->modified && i2d_X509_NAME(nm, NULL) < 0)
+        return X509_V_ERR_OUT_OF_MEM;
+    if (base->modified && i2d_X509_NAME(base, NULL) < 0)
+        return X509_V_ERR_OUT_OF_MEM;
+    if (base->canon_enclen > nm->canon_enclen)
+        return X509_V_ERR_PERMITTED_VIOLATION;
+    if (memcmp(base->canon_enc, nm->canon_enc, base->canon_enclen))
+        return X509_V_ERR_PERMITTED_VIOLATION;
+    return X509_V_OK;
+}
+
+static int nc_dns(ASN1_IA5STRING *dns, ASN1_IA5STRING *base)
+{
+    char *baseptr = (char *)base->data;
+    char *dnsptr = (char *)dns->data;
+    /* Empty matches everything */
+    if (!*baseptr)
+        return X509_V_OK;
+    /*
+     * Otherwise can add zero or more components on the left so compare RHS
+     * and if dns is longer and expect '.' as preceding character.
+     */
+    if (dns->length > base->length) {
+        dnsptr += dns->length - base->length;
+        if (*baseptr != '.' && dnsptr[-1] != '.')
+            return X509_V_ERR_PERMITTED_VIOLATION;
+    }
+
+    if (ia5casecmp(baseptr, dnsptr))
+        return X509_V_ERR_PERMITTED_VIOLATION;
+
+    return X509_V_OK;
+
+}
+
+static int nc_email(ASN1_IA5STRING *eml, ASN1_IA5STRING *base)
+{
+    const char *baseptr = (char *)base->data;
+    const char *emlptr = (char *)eml->data;
+
+    const char *baseat = strchr(baseptr, '@');
+    const char *emlat = strchr(emlptr, '@');
+    if (!emlat)
+        return X509_V_ERR_UNSUPPORTED_NAME_SYNTAX;
+    /* Special case: initial '.' is RHS match */
+    if (!baseat && (*baseptr == '.')) {
+        if (eml->length > base->length) {
+            emlptr += eml->length - base->length;
+            if (ia5casecmp(baseptr, emlptr) == 0)
+                return X509_V_OK;
+        }
+        return X509_V_ERR_PERMITTED_VIOLATION;
+    }
+
+    /* If we have anything before '@' match local part */
+
+    if (baseat) {
+        if (baseat != baseptr) {
+            if ((baseat - baseptr) != (emlat - emlptr))
+                return X509_V_ERR_PERMITTED_VIOLATION;
+            /* Case sensitive match of local part */
+            if (strncmp(baseptr, emlptr, emlat - emlptr))
+                return X509_V_ERR_PERMITTED_VIOLATION;
+        }
+        /* Position base after '@' */
+        baseptr = baseat + 1;
+    }
+    emlptr = emlat + 1;
+    /* Just have hostname left to match: case insensitive */
+    if (ia5casecmp(baseptr, emlptr))
+        return X509_V_ERR_PERMITTED_VIOLATION;
+
+    return X509_V_OK;
+
+}
+
+static int nc_uri(ASN1_IA5STRING *uri, ASN1_IA5STRING *base)
+{
+    const char *baseptr = (char *)base->data;
+    const char *hostptr = (char *)uri->data;
+    const char *p = strchr(hostptr, ':');
+    int hostlen;
+    /* Check for foo:// and skip past it */
+    if (!p || (p[1] != '/') || (p[2] != '/'))
+        return X509_V_ERR_UNSUPPORTED_NAME_SYNTAX;
+    hostptr = p + 3;
+
+    /* Determine length of hostname part of URI */
+
+    /* Look for a port indicator as end of hostname first */
+
+    p = strchr(hostptr, ':');
+    /* Otherwise look for trailing slash */
+    if (!p)
+        p = strchr(hostptr, '/');
+
+    if (!p)
+        hostlen = strlen(hostptr);
+    else
+        hostlen = p - hostptr;
+
+    if (hostlen == 0)
+        return X509_V_ERR_UNSUPPORTED_NAME_SYNTAX;
+
+    /* Special case: initial '.' is RHS match */
+    if (*baseptr == '.') {
+        if (hostlen > base->length) {
+            p = hostptr + hostlen - base->length;
+            if (ia5ncasecmp(p, baseptr, base->length) == 0)
+                return X509_V_OK;
+        }
+        return X509_V_ERR_PERMITTED_VIOLATION;
+    }
+
+    if ((base->length != (int)hostlen)
+        || ia5ncasecmp(hostptr, baseptr, hostlen))
+        return X509_V_ERR_PERMITTED_VIOLATION;
+
+    return X509_V_OK;
+
+}
+
+static int nc_ip(ASN1_OCTET_STRING *ip, ASN1_OCTET_STRING *base)
+{
+    int hostlen, baselen, i;
+    unsigned char *hostptr, *baseptr, *maskptr;
+    hostptr = ip->data;
+    hostlen = ip->length;
+    baseptr = base->data;
+    baselen = base->length;
+
+    /* Invalid if not IPv4 or IPv6 */
+    if (!((hostlen == 4) || (hostlen == 16)))
+        return X509_V_ERR_UNSUPPORTED_NAME_SYNTAX;
+    if (!((baselen == 8) || (baselen == 32)))
+        return X509_V_ERR_UNSUPPORTED_NAME_SYNTAX;
+
+    /* Do not match IPv4 with IPv6 */
+    if (hostlen * 2 != baselen)
+        return X509_V_ERR_PERMITTED_VIOLATION;
+
+    maskptr = base->data + hostlen;
+
+    /* Considering possible not aligned base ipAddress */
+    /* Not checking for wrong mask definition: i.e.: 255.0.255.0 */
+    for (i = 0; i < hostlen; i++)
+        if ((hostptr[i] & maskptr[i]) != (baseptr[i] & maskptr[i]))
+            return X509_V_ERR_PERMITTED_VIOLATION;
+
+    return X509_V_OK;
+
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pci.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pci.c
new file mode 100644
index 000000000..3d124fa6d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pci.c
@@ -0,0 +1,325 @@
+/*
+ * Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file is dual-licensed and is also available under the following
+ * terms:
+ *
+ * Copyright (c) 2004 Kungliga Tekniska Högskolan
+ * (Royal Institute of Technology, Stockholm, Sweden).
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ *
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * 3. Neither the name of the Institute nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software
+ *    without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/x509v3.h>
+#include "ext_dat.h"
+
+static int i2r_pci(X509V3_EXT_METHOD *method, PROXY_CERT_INFO_EXTENSION *ext,
+                   BIO *out, int indent);
+static PROXY_CERT_INFO_EXTENSION *r2i_pci(X509V3_EXT_METHOD *method,
+                                          X509V3_CTX *ctx, char *str);
+
+const X509V3_EXT_METHOD v3_pci =
+    { NID_proxyCertInfo, 0, ASN1_ITEM_ref(PROXY_CERT_INFO_EXTENSION),
+    0, 0, 0, 0,
+    0, 0,
+    NULL, NULL,
+    (X509V3_EXT_I2R)i2r_pci,
+    (X509V3_EXT_R2I)r2i_pci,
+    NULL,
+};
+
+static int i2r_pci(X509V3_EXT_METHOD *method, PROXY_CERT_INFO_EXTENSION *pci,
+                   BIO *out, int indent)
+{
+    BIO_printf(out, "%*sPath Length Constraint: ", indent, "");
+    if (pci->pcPathLengthConstraint)
+        i2a_ASN1_INTEGER(out, pci->pcPathLengthConstraint);
+    else
+        BIO_printf(out, "infinite");
+    BIO_puts(out, "\n");
+    BIO_printf(out, "%*sPolicy Language: ", indent, "");
+    i2a_ASN1_OBJECT(out, pci->proxyPolicy->policyLanguage);
+    BIO_puts(out, "\n");
+    if (pci->proxyPolicy->policy && pci->proxyPolicy->policy->data)
+        BIO_printf(out, "%*sPolicy Text: %s\n", indent, "",
+                   pci->proxyPolicy->policy->data);
+    return 1;
+}
+
+static int process_pci_value(CONF_VALUE *val,
+                             ASN1_OBJECT **language, ASN1_INTEGER **pathlen,
+                             ASN1_OCTET_STRING **policy)
+{
+    int free_policy = 0;
+
+    if (strcmp(val->name, "language") == 0) {
+        if (*language) {
+            X509V3err(X509V3_F_PROCESS_PCI_VALUE,
+                      X509V3_R_POLICY_LANGUAGE_ALREADY_DEFINED);
+            X509V3_conf_err(val);
+            return 0;
+        }
+        if ((*language = OBJ_txt2obj(val->value, 0)) == NULL) {
+            X509V3err(X509V3_F_PROCESS_PCI_VALUE,
+                      X509V3_R_INVALID_OBJECT_IDENTIFIER);
+            X509V3_conf_err(val);
+            return 0;
+        }
+    } else if (strcmp(val->name, "pathlen") == 0) {
+        if (*pathlen) {
+            X509V3err(X509V3_F_PROCESS_PCI_VALUE,
+                      X509V3_R_POLICY_PATH_LENGTH_ALREADY_DEFINED);
+            X509V3_conf_err(val);
+            return 0;
+        }
+        if (!X509V3_get_value_int(val, pathlen)) {
+            X509V3err(X509V3_F_PROCESS_PCI_VALUE,
+                      X509V3_R_POLICY_PATH_LENGTH);
+            X509V3_conf_err(val);
+            return 0;
+        }
+    } else if (strcmp(val->name, "policy") == 0) {
+        unsigned char *tmp_data = NULL;
+        long val_len;
+        if (!*policy) {
+            *policy = ASN1_OCTET_STRING_new();
+            if (*policy == NULL) {
+                X509V3err(X509V3_F_PROCESS_PCI_VALUE, ERR_R_MALLOC_FAILURE);
+                X509V3_conf_err(val);
+                return 0;
+            }
+            free_policy = 1;
+        }
+        if (strncmp(val->value, "hex:", 4) == 0) {
+            unsigned char *tmp_data2 =
+                OPENSSL_hexstr2buf(val->value + 4, &val_len);
+
+            if (!tmp_data2) {
+                X509V3_conf_err(val);
+                goto err;
+            }
+
+            tmp_data = OPENSSL_realloc((*policy)->data,
+                                       (*policy)->length + val_len + 1);
+            if (tmp_data) {
+                (*policy)->data = tmp_data;
+                memcpy(&(*policy)->data[(*policy)->length],
+                       tmp_data2, val_len);
+                (*policy)->length += val_len;
+                (*policy)->data[(*policy)->length] = '\0';
+            } else {
+                OPENSSL_free(tmp_data2);
+                /*
+                 * realloc failure implies the original data space is b0rked
+                 * too!
+                 */
+                OPENSSL_free((*policy)->data);
+                (*policy)->data = NULL;
+                (*policy)->length = 0;
+                X509V3err(X509V3_F_PROCESS_PCI_VALUE, ERR_R_MALLOC_FAILURE);
+                X509V3_conf_err(val);
+                goto err;
+            }
+            OPENSSL_free(tmp_data2);
+        } else if (strncmp(val->value, "file:", 5) == 0) {
+            unsigned char buf[2048];
+            int n;
+            BIO *b = BIO_new_file(val->value + 5, "r");
+            if (!b) {
+                X509V3err(X509V3_F_PROCESS_PCI_VALUE, ERR_R_BIO_LIB);
+                X509V3_conf_err(val);
+                goto err;
+            }
+            while ((n = BIO_read(b, buf, sizeof(buf))) > 0
+                   || (n == 0 && BIO_should_retry(b))) {
+                if (!n)
+                    continue;
+
+                tmp_data = OPENSSL_realloc((*policy)->data,
+                                           (*policy)->length + n + 1);
+
+                if (!tmp_data) {
+                    OPENSSL_free((*policy)->data);
+                    (*policy)->data = NULL;
+                    (*policy)->length = 0;
+                    X509V3err(X509V3_F_PROCESS_PCI_VALUE,
+                              ERR_R_MALLOC_FAILURE);
+                    X509V3_conf_err(val);
+                    BIO_free_all(b);
+                    goto err;
+                }
+
+                (*policy)->data = tmp_data;
+                memcpy(&(*policy)->data[(*policy)->length], buf, n);
+                (*policy)->length += n;
+                (*policy)->data[(*policy)->length] = '\0';
+            }
+            BIO_free_all(b);
+
+            if (n < 0) {
+                X509V3err(X509V3_F_PROCESS_PCI_VALUE, ERR_R_BIO_LIB);
+                X509V3_conf_err(val);
+                goto err;
+            }
+        } else if (strncmp(val->value, "text:", 5) == 0) {
+            val_len = strlen(val->value + 5);
+            tmp_data = OPENSSL_realloc((*policy)->data,
+                                       (*policy)->length + val_len + 1);
+            if (tmp_data) {
+                (*policy)->data = tmp_data;
+                memcpy(&(*policy)->data[(*policy)->length],
+                       val->value + 5, val_len);
+                (*policy)->length += val_len;
+                (*policy)->data[(*policy)->length] = '\0';
+            } else {
+                /*
+                 * realloc failure implies the original data space is b0rked
+                 * too!
+                 */
+                OPENSSL_free((*policy)->data);
+                (*policy)->data = NULL;
+                (*policy)->length = 0;
+                X509V3err(X509V3_F_PROCESS_PCI_VALUE, ERR_R_MALLOC_FAILURE);
+                X509V3_conf_err(val);
+                goto err;
+            }
+        } else {
+            X509V3err(X509V3_F_PROCESS_PCI_VALUE,
+                      X509V3_R_INCORRECT_POLICY_SYNTAX_TAG);
+            X509V3_conf_err(val);
+            goto err;
+        }
+        if (!tmp_data) {
+            X509V3err(X509V3_F_PROCESS_PCI_VALUE, ERR_R_MALLOC_FAILURE);
+            X509V3_conf_err(val);
+            goto err;
+        }
+    }
+    return 1;
+ err:
+    if (free_policy) {
+        ASN1_OCTET_STRING_free(*policy);
+        *policy = NULL;
+    }
+    return 0;
+}
+
+static PROXY_CERT_INFO_EXTENSION *r2i_pci(X509V3_EXT_METHOD *method,
+                                          X509V3_CTX *ctx, char *value)
+{
+    PROXY_CERT_INFO_EXTENSION *pci = NULL;
+    STACK_OF(CONF_VALUE) *vals;
+    ASN1_OBJECT *language = NULL;
+    ASN1_INTEGER *pathlen = NULL;
+    ASN1_OCTET_STRING *policy = NULL;
+    int i, j;
+
+    vals = X509V3_parse_list(value);
+    for (i = 0; i < sk_CONF_VALUE_num(vals); i++) {
+        CONF_VALUE *cnf = sk_CONF_VALUE_value(vals, i);
+        if (!cnf->name || (*cnf->name != '@' && !cnf->value)) {
+            X509V3err(X509V3_F_R2I_PCI,
+                      X509V3_R_INVALID_PROXY_POLICY_SETTING);
+            X509V3_conf_err(cnf);
+            goto err;
+        }
+        if (*cnf->name == '@') {
+            STACK_OF(CONF_VALUE) *sect;
+            int success_p = 1;
+
+            sect = X509V3_get_section(ctx, cnf->name + 1);
+            if (!sect) {
+                X509V3err(X509V3_F_R2I_PCI, X509V3_R_INVALID_SECTION);
+                X509V3_conf_err(cnf);
+                goto err;
+            }
+            for (j = 0; success_p && j < sk_CONF_VALUE_num(sect); j++) {
+                success_p =
+                    process_pci_value(sk_CONF_VALUE_value(sect, j),
+                                      &language, &pathlen, &policy);
+            }
+            X509V3_section_free(ctx, sect);
+            if (!success_p)
+                goto err;
+        } else {
+            if (!process_pci_value(cnf, &language, &pathlen, &policy)) {
+                X509V3_conf_err(cnf);
+                goto err;
+            }
+        }
+    }
+
+    /* Language is mandatory */
+    if (!language) {
+        X509V3err(X509V3_F_R2I_PCI,
+                  X509V3_R_NO_PROXY_CERT_POLICY_LANGUAGE_DEFINED);
+        goto err;
+    }
+    i = OBJ_obj2nid(language);
+    if ((i == NID_Independent || i == NID_id_ppl_inheritAll) && policy) {
+        X509V3err(X509V3_F_R2I_PCI,
+                  X509V3_R_POLICY_WHEN_PROXY_LANGUAGE_REQUIRES_NO_POLICY);
+        goto err;
+    }
+
+    pci = PROXY_CERT_INFO_EXTENSION_new();
+    if (pci == NULL) {
+        X509V3err(X509V3_F_R2I_PCI, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    pci->proxyPolicy->policyLanguage = language;
+    language = NULL;
+    pci->proxyPolicy->policy = policy;
+    policy = NULL;
+    pci->pcPathLengthConstraint = pathlen;
+    pathlen = NULL;
+    goto end;
+ err:
+    ASN1_OBJECT_free(language);
+    ASN1_INTEGER_free(pathlen);
+    pathlen = NULL;
+    ASN1_OCTET_STRING_free(policy);
+    policy = NULL;
+    PROXY_CERT_INFO_EXTENSION_free(pci);
+    pci = NULL;
+ end:
+    sk_CONF_VALUE_pop_free(vals, X509V3_conf_free);
+    return pci;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pcia.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pcia.c
new file mode 100644
index 000000000..8d6af60e5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pcia.c
@@ -0,0 +1,64 @@
+/*
+ * Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file is dual-licensed and is also available under the following
+ * terms:
+ *
+ * Copyright (c) 2004 Kungliga Tekniska Högskolan
+ * (Royal Institute of Technology, Stockholm, Sweden).
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ *
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * 3. Neither the name of the Institute nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software
+ *    without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ */
+
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/x509v3.h>
+
+ASN1_SEQUENCE(PROXY_POLICY) =
+        {
+        ASN1_SIMPLE(PROXY_POLICY,policyLanguage,ASN1_OBJECT),
+        ASN1_OPT(PROXY_POLICY,policy,ASN1_OCTET_STRING)
+} ASN1_SEQUENCE_END(PROXY_POLICY)
+
+IMPLEMENT_ASN1_FUNCTIONS(PROXY_POLICY)
+
+ASN1_SEQUENCE(PROXY_CERT_INFO_EXTENSION) =
+        {
+        ASN1_OPT(PROXY_CERT_INFO_EXTENSION,pcPathLengthConstraint,ASN1_INTEGER),
+        ASN1_SIMPLE(PROXY_CERT_INFO_EXTENSION,proxyPolicy,PROXY_POLICY)
+} ASN1_SEQUENCE_END(PROXY_CERT_INFO_EXTENSION)
+
+IMPLEMENT_ASN1_FUNCTIONS(PROXY_CERT_INFO_EXTENSION)
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pcons.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pcons.c
new file mode 100644
index 000000000..24f7ff49e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pcons.c
@@ -0,0 +1,91 @@
+/*
+ * Copyright 2003-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/conf.h>
+#include <openssl/x509v3.h>
+#include "ext_dat.h"
+
+static STACK_OF(CONF_VALUE) *i2v_POLICY_CONSTRAINTS(const X509V3_EXT_METHOD
+                                                    *method, void *bcons, STACK_OF(CONF_VALUE)
+                                                    *extlist);
+static void *v2i_POLICY_CONSTRAINTS(const X509V3_EXT_METHOD *method,
+                                    X509V3_CTX *ctx,
+                                    STACK_OF(CONF_VALUE) *values);
+
+const X509V3_EXT_METHOD v3_policy_constraints = {
+    NID_policy_constraints, 0,
+    ASN1_ITEM_ref(POLICY_CONSTRAINTS),
+    0, 0, 0, 0,
+    0, 0,
+    i2v_POLICY_CONSTRAINTS,
+    v2i_POLICY_CONSTRAINTS,
+    NULL, NULL,
+    NULL
+};
+
+ASN1_SEQUENCE(POLICY_CONSTRAINTS) = {
+        ASN1_IMP_OPT(POLICY_CONSTRAINTS, requireExplicitPolicy, ASN1_INTEGER,0),
+        ASN1_IMP_OPT(POLICY_CONSTRAINTS, inhibitPolicyMapping, ASN1_INTEGER,1)
+} ASN1_SEQUENCE_END(POLICY_CONSTRAINTS)
+
+IMPLEMENT_ASN1_ALLOC_FUNCTIONS(POLICY_CONSTRAINTS)
+
+static STACK_OF(CONF_VALUE) *i2v_POLICY_CONSTRAINTS(const X509V3_EXT_METHOD
+                                                    *method, void *a, STACK_OF(CONF_VALUE)
+                                                    *extlist)
+{
+    POLICY_CONSTRAINTS *pcons = a;
+    X509V3_add_value_int("Require Explicit Policy",
+                         pcons->requireExplicitPolicy, &extlist);
+    X509V3_add_value_int("Inhibit Policy Mapping",
+                         pcons->inhibitPolicyMapping, &extlist);
+    return extlist;
+}
+
+static void *v2i_POLICY_CONSTRAINTS(const X509V3_EXT_METHOD *method,
+                                    X509V3_CTX *ctx,
+                                    STACK_OF(CONF_VALUE) *values)
+{
+    POLICY_CONSTRAINTS *pcons = NULL;
+    CONF_VALUE *val;
+    int i;
+
+    if ((pcons = POLICY_CONSTRAINTS_new()) == NULL) {
+        X509V3err(X509V3_F_V2I_POLICY_CONSTRAINTS, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    for (i = 0; i < sk_CONF_VALUE_num(values); i++) {
+        val = sk_CONF_VALUE_value(values, i);
+        if (strcmp(val->name, "requireExplicitPolicy") == 0) {
+            if (!X509V3_get_value_int(val, &pcons->requireExplicitPolicy))
+                goto err;
+        } else if (strcmp(val->name, "inhibitPolicyMapping") == 0) {
+            if (!X509V3_get_value_int(val, &pcons->inhibitPolicyMapping))
+                goto err;
+        } else {
+            X509V3err(X509V3_F_V2I_POLICY_CONSTRAINTS, X509V3_R_INVALID_NAME);
+            X509V3_conf_err(val);
+            goto err;
+        }
+    }
+    if (!pcons->inhibitPolicyMapping && !pcons->requireExplicitPolicy) {
+        X509V3err(X509V3_F_V2I_POLICY_CONSTRAINTS,
+                  X509V3_R_ILLEGAL_EMPTY_EXTENSION);
+        goto err;
+    }
+
+    return pcons;
+ err:
+    POLICY_CONSTRAINTS_free(pcons);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pku.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pku.c
new file mode 100644
index 000000000..5a7e7d972
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pku.c
@@ -0,0 +1,52 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/x509v3.h>
+#include "ext_dat.h"
+
+static int i2r_PKEY_USAGE_PERIOD(X509V3_EXT_METHOD *method,
+                                 PKEY_USAGE_PERIOD *usage, BIO *out,
+                                 int indent);
+
+const X509V3_EXT_METHOD v3_pkey_usage_period = {
+    NID_private_key_usage_period, 0, ASN1_ITEM_ref(PKEY_USAGE_PERIOD),
+    0, 0, 0, 0,
+    0, 0, 0, 0,
+    (X509V3_EXT_I2R)i2r_PKEY_USAGE_PERIOD, NULL,
+    NULL
+};
+
+ASN1_SEQUENCE(PKEY_USAGE_PERIOD) = {
+        ASN1_IMP_OPT(PKEY_USAGE_PERIOD, notBefore, ASN1_GENERALIZEDTIME, 0),
+        ASN1_IMP_OPT(PKEY_USAGE_PERIOD, notAfter, ASN1_GENERALIZEDTIME, 1)
+} ASN1_SEQUENCE_END(PKEY_USAGE_PERIOD)
+
+IMPLEMENT_ASN1_FUNCTIONS(PKEY_USAGE_PERIOD)
+
+static int i2r_PKEY_USAGE_PERIOD(X509V3_EXT_METHOD *method,
+                                 PKEY_USAGE_PERIOD *usage, BIO *out,
+                                 int indent)
+{
+    BIO_printf(out, "%*s", indent, "");
+    if (usage->notBefore) {
+        BIO_write(out, "Not Before: ", 12);
+        ASN1_GENERALIZEDTIME_print(out, usage->notBefore);
+        if (usage->notAfter)
+            BIO_write(out, ", ", 2);
+    }
+    if (usage->notAfter) {
+        BIO_write(out, "Not After: ", 11);
+        ASN1_GENERALIZEDTIME_print(out, usage->notAfter);
+    }
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pmaps.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pmaps.c
new file mode 100644
index 000000000..5b6a2af0f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_pmaps.c
@@ -0,0 +1,112 @@
+/*
+ * Copyright 2003-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/asn1t.h>
+#include <openssl/conf.h>
+#include <openssl/x509v3.h>
+#include "ext_dat.h"
+
+static void *v2i_POLICY_MAPPINGS(const X509V3_EXT_METHOD *method,
+                                 X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval);
+static STACK_OF(CONF_VALUE) *i2v_POLICY_MAPPINGS(const X509V3_EXT_METHOD
+                                                 *method, void *pmps, STACK_OF(CONF_VALUE)
+                                                 *extlist);
+
+const X509V3_EXT_METHOD v3_policy_mappings = {
+    NID_policy_mappings, 0,
+    ASN1_ITEM_ref(POLICY_MAPPINGS),
+    0, 0, 0, 0,
+    0, 0,
+    i2v_POLICY_MAPPINGS,
+    v2i_POLICY_MAPPINGS,
+    0, 0,
+    NULL
+};
+
+ASN1_SEQUENCE(POLICY_MAPPING) = {
+        ASN1_SIMPLE(POLICY_MAPPING, issuerDomainPolicy, ASN1_OBJECT),
+        ASN1_SIMPLE(POLICY_MAPPING, subjectDomainPolicy, ASN1_OBJECT)
+} ASN1_SEQUENCE_END(POLICY_MAPPING)
+
+ASN1_ITEM_TEMPLATE(POLICY_MAPPINGS) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, POLICY_MAPPINGS,
+                                                                POLICY_MAPPING)
+ASN1_ITEM_TEMPLATE_END(POLICY_MAPPINGS)
+
+IMPLEMENT_ASN1_ALLOC_FUNCTIONS(POLICY_MAPPING)
+
+static STACK_OF(CONF_VALUE) *i2v_POLICY_MAPPINGS(const X509V3_EXT_METHOD
+                                                 *method, void *a, STACK_OF(CONF_VALUE)
+                                                 *ext_list)
+{
+    POLICY_MAPPINGS *pmaps = a;
+    POLICY_MAPPING *pmap;
+    int i;
+    char obj_tmp1[80];
+    char obj_tmp2[80];
+
+    for (i = 0; i < sk_POLICY_MAPPING_num(pmaps); i++) {
+        pmap = sk_POLICY_MAPPING_value(pmaps, i);
+        i2t_ASN1_OBJECT(obj_tmp1, 80, pmap->issuerDomainPolicy);
+        i2t_ASN1_OBJECT(obj_tmp2, 80, pmap->subjectDomainPolicy);
+        X509V3_add_value(obj_tmp1, obj_tmp2, &ext_list);
+    }
+    return ext_list;
+}
+
+static void *v2i_POLICY_MAPPINGS(const X509V3_EXT_METHOD *method,
+                                 X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval)
+{
+    POLICY_MAPPING *pmap = NULL;
+    ASN1_OBJECT *obj1 = NULL, *obj2 = NULL;
+    CONF_VALUE *val;
+    POLICY_MAPPINGS *pmaps;
+    const int num = sk_CONF_VALUE_num(nval);
+    int i;
+
+    if ((pmaps = sk_POLICY_MAPPING_new_reserve(NULL, num)) == NULL) {
+        X509V3err(X509V3_F_V2I_POLICY_MAPPINGS, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    for (i = 0; i < num; i++) {
+        val = sk_CONF_VALUE_value(nval, i);
+        if (!val->value || !val->name) {
+            X509V3err(X509V3_F_V2I_POLICY_MAPPINGS,
+                      X509V3_R_INVALID_OBJECT_IDENTIFIER);
+            X509V3_conf_err(val);
+            goto err;
+        }
+        obj1 = OBJ_txt2obj(val->name, 0);
+        obj2 = OBJ_txt2obj(val->value, 0);
+        if (!obj1 || !obj2) {
+            X509V3err(X509V3_F_V2I_POLICY_MAPPINGS,
+                      X509V3_R_INVALID_OBJECT_IDENTIFIER);
+            X509V3_conf_err(val);
+            goto err;
+        }
+        pmap = POLICY_MAPPING_new();
+        if (pmap == NULL) {
+            X509V3err(X509V3_F_V2I_POLICY_MAPPINGS, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        pmap->issuerDomainPolicy = obj1;
+        pmap->subjectDomainPolicy = obj2;
+        obj1 = obj2 = NULL;
+        sk_POLICY_MAPPING_push(pmaps, pmap); /* no failure as it was reserved */
+    }
+    return pmaps;
+ err:
+    ASN1_OBJECT_free(obj1);
+    ASN1_OBJECT_free(obj2);
+    sk_POLICY_MAPPING_pop_free(pmaps, POLICY_MAPPING_free);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_prn.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_prn.c
new file mode 100644
index 000000000..f384c342a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_prn.c
@@ -0,0 +1,210 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* X509 v3 extension utilities */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/x509v3.h>
+
+/* Extension printing routines */
+
+static int unknown_ext_print(BIO *out, const unsigned char *ext, int extlen,
+                             unsigned long flag, int indent, int supported);
+
+/* Print out a name+value stack */
+
+void X509V3_EXT_val_prn(BIO *out, STACK_OF(CONF_VALUE) *val, int indent,
+                        int ml)
+{
+    int i;
+    CONF_VALUE *nval;
+    if (!val)
+        return;
+    if (!ml || !sk_CONF_VALUE_num(val)) {
+        BIO_printf(out, "%*s", indent, "");
+        if (!sk_CONF_VALUE_num(val))
+            BIO_puts(out, "<EMPTY>\n");
+    }
+    for (i = 0; i < sk_CONF_VALUE_num(val); i++) {
+        if (ml)
+            BIO_printf(out, "%*s", indent, "");
+        else if (i > 0)
+            BIO_printf(out, ", ");
+        nval = sk_CONF_VALUE_value(val, i);
+        if (!nval->name)
+            BIO_puts(out, nval->value);
+        else if (!nval->value)
+            BIO_puts(out, nval->name);
+#ifndef CHARSET_EBCDIC
+        else
+            BIO_printf(out, "%s:%s", nval->name, nval->value);
+#else
+        else {
+            int len;
+            char *tmp;
+            len = strlen(nval->value) + 1;
+            tmp = OPENSSL_malloc(len);
+            if (tmp != NULL) {
+                ascii2ebcdic(tmp, nval->value, len);
+                BIO_printf(out, "%s:%s", nval->name, tmp);
+                OPENSSL_free(tmp);
+            }
+        }
+#endif
+        if (ml)
+            BIO_puts(out, "\n");
+    }
+}
+
+/* Main routine: print out a general extension */
+
+int X509V3_EXT_print(BIO *out, X509_EXTENSION *ext, unsigned long flag,
+                     int indent)
+{
+    void *ext_str = NULL;
+    char *value = NULL;
+    ASN1_OCTET_STRING *extoct;
+    const unsigned char *p;
+    int extlen;
+    const X509V3_EXT_METHOD *method;
+    STACK_OF(CONF_VALUE) *nval = NULL;
+    int ok = 1;
+
+    extoct = X509_EXTENSION_get_data(ext);
+    p = ASN1_STRING_get0_data(extoct);
+    extlen = ASN1_STRING_length(extoct);
+
+    if ((method = X509V3_EXT_get(ext)) == NULL)
+        return unknown_ext_print(out, p, extlen, flag, indent, 0);
+    if (method->it)
+        ext_str = ASN1_item_d2i(NULL, &p, extlen, ASN1_ITEM_ptr(method->it));
+    else
+        ext_str = method->d2i(NULL, &p, extlen);
+
+    if (!ext_str)
+        return unknown_ext_print(out, p, extlen, flag, indent, 1);
+
+    if (method->i2s) {
+        if ((value = method->i2s(method, ext_str)) == NULL) {
+            ok = 0;
+            goto err;
+        }
+#ifndef CHARSET_EBCDIC
+        BIO_printf(out, "%*s%s", indent, "", value);
+#else
+        {
+            int len;
+            char *tmp;
+            len = strlen(value) + 1;
+            tmp = OPENSSL_malloc(len);
+            if (tmp != NULL) {
+                ascii2ebcdic(tmp, value, len);
+                BIO_printf(out, "%*s%s", indent, "", tmp);
+                OPENSSL_free(tmp);
+            }
+        }
+#endif
+    } else if (method->i2v) {
+        if ((nval = method->i2v(method, ext_str, NULL)) == NULL) {
+            ok = 0;
+            goto err;
+        }
+        X509V3_EXT_val_prn(out, nval, indent,
+                           method->ext_flags & X509V3_EXT_MULTILINE);
+    } else if (method->i2r) {
+        if (!method->i2r(method, ext_str, out, indent))
+            ok = 0;
+    } else
+        ok = 0;
+
+ err:
+    sk_CONF_VALUE_pop_free(nval, X509V3_conf_free);
+    OPENSSL_free(value);
+    if (method->it)
+        ASN1_item_free(ext_str, ASN1_ITEM_ptr(method->it));
+    else
+        method->ext_free(ext_str);
+    return ok;
+}
+
+int X509V3_extensions_print(BIO *bp, const char *title,
+                            const STACK_OF(X509_EXTENSION) *exts,
+                            unsigned long flag, int indent)
+{
+    int i, j;
+
+    if (sk_X509_EXTENSION_num(exts) <= 0)
+        return 1;
+
+    if (title) {
+        BIO_printf(bp, "%*s%s:\n", indent, "", title);
+        indent += 4;
+    }
+
+    for (i = 0; i < sk_X509_EXTENSION_num(exts); i++) {
+        ASN1_OBJECT *obj;
+        X509_EXTENSION *ex;
+        ex = sk_X509_EXTENSION_value(exts, i);
+        if (indent && BIO_printf(bp, "%*s", indent, "") <= 0)
+            return 0;
+        obj = X509_EXTENSION_get_object(ex);
+        i2a_ASN1_OBJECT(bp, obj);
+        j = X509_EXTENSION_get_critical(ex);
+        if (BIO_printf(bp, ": %s\n", j ? "critical" : "") <= 0)
+            return 0;
+        if (!X509V3_EXT_print(bp, ex, flag, indent + 4)) {
+            BIO_printf(bp, "%*s", indent + 4, "");
+            ASN1_STRING_print(bp, X509_EXTENSION_get_data(ex));
+        }
+        if (BIO_write(bp, "\n", 1) <= 0)
+            return 0;
+    }
+    return 1;
+}
+
+static int unknown_ext_print(BIO *out, const unsigned char *ext, int extlen,
+                             unsigned long flag, int indent, int supported)
+{
+    switch (flag & X509V3_EXT_UNKNOWN_MASK) {
+
+    case X509V3_EXT_DEFAULT:
+        return 0;
+
+    case X509V3_EXT_ERROR_UNKNOWN:
+        if (supported)
+            BIO_printf(out, "%*s<Parse Error>", indent, "");
+        else
+            BIO_printf(out, "%*s<Not Supported>", indent, "");
+        return 1;
+
+    case X509V3_EXT_PARSE_UNKNOWN:
+        return ASN1_parse_dump(out, ext, extlen, indent, -1);
+    case X509V3_EXT_DUMP_UNKNOWN:
+        return BIO_dump_indent(out, (const char *)ext, extlen, indent);
+
+    default:
+        return 1;
+    }
+}
+
+#ifndef OPENSSL_NO_STDIO
+int X509V3_EXT_print_fp(FILE *fp, X509_EXTENSION *ext, int flag, int indent)
+{
+    BIO *bio_tmp;
+    int ret;
+
+    if ((bio_tmp = BIO_new_fp(fp, BIO_NOCLOSE)) == NULL)
+        return 0;
+    ret = X509V3_EXT_print(bio_tmp, ext, flag, indent);
+    BIO_free(bio_tmp);
+    return ret;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_purp.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_purp.c
new file mode 100644
index 000000000..70b0397d9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_purp.c
@@ -0,0 +1,890 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include "internal/numbers.h"
+#include <openssl/x509v3.h>
+#include <openssl/x509_vfy.h>
+#include "internal/x509_int.h"
+#include "internal/tsan_assist.h"
+
+static void x509v3_cache_extensions(X509 *x);
+
+static int check_ssl_ca(const X509 *x);
+static int check_purpose_ssl_client(const X509_PURPOSE *xp, const X509 *x,
+                                    int ca);
+static int check_purpose_ssl_server(const X509_PURPOSE *xp, const X509 *x,
+                                    int ca);
+static int check_purpose_ns_ssl_server(const X509_PURPOSE *xp, const X509 *x,
+                                       int ca);
+static int purpose_smime(const X509 *x, int ca);
+static int check_purpose_smime_sign(const X509_PURPOSE *xp, const X509 *x,
+                                    int ca);
+static int check_purpose_smime_encrypt(const X509_PURPOSE *xp, const X509 *x,
+                                       int ca);
+static int check_purpose_crl_sign(const X509_PURPOSE *xp, const X509 *x,
+                                  int ca);
+static int check_purpose_timestamp_sign(const X509_PURPOSE *xp, const X509 *x,
+                                        int ca);
+static int no_check(const X509_PURPOSE *xp, const X509 *x, int ca);
+static int ocsp_helper(const X509_PURPOSE *xp, const X509 *x, int ca);
+
+static int xp_cmp(const X509_PURPOSE *const *a, const X509_PURPOSE *const *b);
+static void xptable_free(X509_PURPOSE *p);
+
+static X509_PURPOSE xstandard[] = {
+    {X509_PURPOSE_SSL_CLIENT, X509_TRUST_SSL_CLIENT, 0,
+     check_purpose_ssl_client, "SSL client", "sslclient", NULL},
+    {X509_PURPOSE_SSL_SERVER, X509_TRUST_SSL_SERVER, 0,
+     check_purpose_ssl_server, "SSL server", "sslserver", NULL},
+    {X509_PURPOSE_NS_SSL_SERVER, X509_TRUST_SSL_SERVER, 0,
+     check_purpose_ns_ssl_server, "Netscape SSL server", "nssslserver", NULL},
+    {X509_PURPOSE_SMIME_SIGN, X509_TRUST_EMAIL, 0, check_purpose_smime_sign,
+     "S/MIME signing", "smimesign", NULL},
+    {X509_PURPOSE_SMIME_ENCRYPT, X509_TRUST_EMAIL, 0,
+     check_purpose_smime_encrypt, "S/MIME encryption", "smimeencrypt", NULL},
+    {X509_PURPOSE_CRL_SIGN, X509_TRUST_COMPAT, 0, check_purpose_crl_sign,
+     "CRL signing", "crlsign", NULL},
+    {X509_PURPOSE_ANY, X509_TRUST_DEFAULT, 0, no_check, "Any Purpose", "any",
+     NULL},
+    {X509_PURPOSE_OCSP_HELPER, X509_TRUST_COMPAT, 0, ocsp_helper,
+     "OCSP helper", "ocsphelper", NULL},
+    {X509_PURPOSE_TIMESTAMP_SIGN, X509_TRUST_TSA, 0,
+     check_purpose_timestamp_sign, "Time Stamp signing", "timestampsign",
+     NULL},
+};
+
+#define X509_PURPOSE_COUNT OSSL_NELEM(xstandard)
+
+static STACK_OF(X509_PURPOSE) *xptable = NULL;
+
+static int xp_cmp(const X509_PURPOSE *const *a, const X509_PURPOSE *const *b)
+{
+    return (*a)->purpose - (*b)->purpose;
+}
+
+/*
+ * As much as I'd like to make X509_check_purpose use a "const" X509* I
+ * really can't because it does recalculate hashes and do other non-const
+ * things.
+ */
+int X509_check_purpose(X509 *x, int id, int ca)
+{
+    int idx;
+    const X509_PURPOSE *pt;
+
+    x509v3_cache_extensions(x);
+
+    /* Return if side-effect only call */
+    if (id == -1)
+        return 1;
+    idx = X509_PURPOSE_get_by_id(id);
+    if (idx == -1)
+        return -1;
+    pt = X509_PURPOSE_get0(idx);
+    return pt->check_purpose(pt, x, ca);
+}
+
+int X509_PURPOSE_set(int *p, int purpose)
+{
+    if (X509_PURPOSE_get_by_id(purpose) == -1) {
+        X509V3err(X509V3_F_X509_PURPOSE_SET, X509V3_R_INVALID_PURPOSE);
+        return 0;
+    }
+    *p = purpose;
+    return 1;
+}
+
+int X509_PURPOSE_get_count(void)
+{
+    if (!xptable)
+        return X509_PURPOSE_COUNT;
+    return sk_X509_PURPOSE_num(xptable) + X509_PURPOSE_COUNT;
+}
+
+X509_PURPOSE *X509_PURPOSE_get0(int idx)
+{
+    if (idx < 0)
+        return NULL;
+    if (idx < (int)X509_PURPOSE_COUNT)
+        return xstandard + idx;
+    return sk_X509_PURPOSE_value(xptable, idx - X509_PURPOSE_COUNT);
+}
+
+int X509_PURPOSE_get_by_sname(const char *sname)
+{
+    int i;
+    X509_PURPOSE *xptmp;
+    for (i = 0; i < X509_PURPOSE_get_count(); i++) {
+        xptmp = X509_PURPOSE_get0(i);
+        if (strcmp(xptmp->sname, sname) == 0)
+            return i;
+    }
+    return -1;
+}
+
+int X509_PURPOSE_get_by_id(int purpose)
+{
+    X509_PURPOSE tmp;
+    int idx;
+
+    if ((purpose >= X509_PURPOSE_MIN) && (purpose <= X509_PURPOSE_MAX))
+        return purpose - X509_PURPOSE_MIN;
+    if (xptable == NULL)
+        return -1;
+    tmp.purpose = purpose;
+    idx = sk_X509_PURPOSE_find(xptable, &tmp);
+    if (idx < 0)
+        return -1;
+    return idx + X509_PURPOSE_COUNT;
+}
+
+int X509_PURPOSE_add(int id, int trust, int flags,
+                     int (*ck) (const X509_PURPOSE *, const X509 *, int),
+                     const char *name, const char *sname, void *arg)
+{
+    int idx;
+    X509_PURPOSE *ptmp;
+    /*
+     * This is set according to what we change: application can't set it
+     */
+    flags &= ~X509_PURPOSE_DYNAMIC;
+    /* This will always be set for application modified trust entries */
+    flags |= X509_PURPOSE_DYNAMIC_NAME;
+    /* Get existing entry if any */
+    idx = X509_PURPOSE_get_by_id(id);
+    /* Need a new entry */
+    if (idx == -1) {
+        if ((ptmp = OPENSSL_malloc(sizeof(*ptmp))) == NULL) {
+            X509V3err(X509V3_F_X509_PURPOSE_ADD, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        ptmp->flags = X509_PURPOSE_DYNAMIC;
+    } else
+        ptmp = X509_PURPOSE_get0(idx);
+
+    /* OPENSSL_free existing name if dynamic */
+    if (ptmp->flags & X509_PURPOSE_DYNAMIC_NAME) {
+        OPENSSL_free(ptmp->name);
+        OPENSSL_free(ptmp->sname);
+    }
+    /* dup supplied name */
+    ptmp->name = OPENSSL_strdup(name);
+    ptmp->sname = OPENSSL_strdup(sname);
+    if (!ptmp->name || !ptmp->sname) {
+        X509V3err(X509V3_F_X509_PURPOSE_ADD, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    /* Keep the dynamic flag of existing entry */
+    ptmp->flags &= X509_PURPOSE_DYNAMIC;
+    /* Set all other flags */
+    ptmp->flags |= flags;
+
+    ptmp->purpose = id;
+    ptmp->trust = trust;
+    ptmp->check_purpose = ck;
+    ptmp->usr_data = arg;
+
+    /* If its a new entry manage the dynamic table */
+    if (idx == -1) {
+        if (xptable == NULL
+            && (xptable = sk_X509_PURPOSE_new(xp_cmp)) == NULL) {
+            X509V3err(X509V3_F_X509_PURPOSE_ADD, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        if (!sk_X509_PURPOSE_push(xptable, ptmp)) {
+            X509V3err(X509V3_F_X509_PURPOSE_ADD, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+    return 1;
+ err:
+    if (idx == -1) {
+        OPENSSL_free(ptmp->name);
+        OPENSSL_free(ptmp->sname);
+        OPENSSL_free(ptmp);
+    }
+    return 0;
+}
+
+static void xptable_free(X509_PURPOSE *p)
+{
+    if (!p)
+        return;
+    if (p->flags & X509_PURPOSE_DYNAMIC) {
+        if (p->flags & X509_PURPOSE_DYNAMIC_NAME) {
+            OPENSSL_free(p->name);
+            OPENSSL_free(p->sname);
+        }
+        OPENSSL_free(p);
+    }
+}
+
+void X509_PURPOSE_cleanup(void)
+{
+    sk_X509_PURPOSE_pop_free(xptable, xptable_free);
+    xptable = NULL;
+}
+
+int X509_PURPOSE_get_id(const X509_PURPOSE *xp)
+{
+    return xp->purpose;
+}
+
+char *X509_PURPOSE_get0_name(const X509_PURPOSE *xp)
+{
+    return xp->name;
+}
+
+char *X509_PURPOSE_get0_sname(const X509_PURPOSE *xp)
+{
+    return xp->sname;
+}
+
+int X509_PURPOSE_get_trust(const X509_PURPOSE *xp)
+{
+    return xp->trust;
+}
+
+static int nid_cmp(const int *a, const int *b)
+{
+    return *a - *b;
+}
+
+DECLARE_OBJ_BSEARCH_CMP_FN(int, int, nid);
+IMPLEMENT_OBJ_BSEARCH_CMP_FN(int, int, nid);
+
+int X509_supported_extension(X509_EXTENSION *ex)
+{
+    /*
+     * This table is a list of the NIDs of supported extensions: that is
+     * those which are used by the verify process. If an extension is
+     * critical and doesn't appear in this list then the verify process will
+     * normally reject the certificate. The list must be kept in numerical
+     * order because it will be searched using bsearch.
+     */
+
+    static const int supported_nids[] = {
+        NID_netscape_cert_type, /* 71 */
+        NID_key_usage,          /* 83 */
+        NID_subject_alt_name,   /* 85 */
+        NID_basic_constraints,  /* 87 */
+        NID_certificate_policies, /* 89 */
+        NID_crl_distribution_points, /* 103 */
+        NID_ext_key_usage,      /* 126 */
+#ifndef OPENSSL_NO_RFC3779
+        NID_sbgp_ipAddrBlock,   /* 290 */
+        NID_sbgp_autonomousSysNum, /* 291 */
+#endif
+        NID_policy_constraints, /* 401 */
+        NID_proxyCertInfo,      /* 663 */
+        NID_name_constraints,   /* 666 */
+        NID_policy_mappings,    /* 747 */
+        NID_inhibit_any_policy  /* 748 */
+    };
+
+    int ex_nid = OBJ_obj2nid(X509_EXTENSION_get_object(ex));
+
+    if (ex_nid == NID_undef)
+        return 0;
+
+    if (OBJ_bsearch_nid(&ex_nid, supported_nids, OSSL_NELEM(supported_nids)))
+        return 1;
+    return 0;
+}
+
+static void setup_dp(X509 *x, DIST_POINT *dp)
+{
+    X509_NAME *iname = NULL;
+    int i;
+    if (dp->reasons) {
+        if (dp->reasons->length > 0)
+            dp->dp_reasons = dp->reasons->data[0];
+        if (dp->reasons->length > 1)
+            dp->dp_reasons |= (dp->reasons->data[1] << 8);
+        dp->dp_reasons &= CRLDP_ALL_REASONS;
+    } else
+        dp->dp_reasons = CRLDP_ALL_REASONS;
+    if (!dp->distpoint || (dp->distpoint->type != 1))
+        return;
+    for (i = 0; i < sk_GENERAL_NAME_num(dp->CRLissuer); i++) {
+        GENERAL_NAME *gen = sk_GENERAL_NAME_value(dp->CRLissuer, i);
+        if (gen->type == GEN_DIRNAME) {
+            iname = gen->d.directoryName;
+            break;
+        }
+    }
+    if (!iname)
+        iname = X509_get_issuer_name(x);
+
+    DIST_POINT_set_dpname(dp->distpoint, iname);
+
+}
+
+static void setup_crldp(X509 *x)
+{
+    int i;
+    x->crldp = X509_get_ext_d2i(x, NID_crl_distribution_points, NULL, NULL);
+    for (i = 0; i < sk_DIST_POINT_num(x->crldp); i++)
+        setup_dp(x, sk_DIST_POINT_value(x->crldp, i));
+}
+
+#define V1_ROOT (EXFLAG_V1|EXFLAG_SS)
+#define ku_reject(x, usage) \
+        (((x)->ex_flags & EXFLAG_KUSAGE) && !((x)->ex_kusage & (usage)))
+#define xku_reject(x, usage) \
+        (((x)->ex_flags & EXFLAG_XKUSAGE) && !((x)->ex_xkusage & (usage)))
+#define ns_reject(x, usage) \
+        (((x)->ex_flags & EXFLAG_NSCERT) && !((x)->ex_nscert & (usage)))
+
+static void x509v3_cache_extensions(X509 *x)
+{
+    BASIC_CONSTRAINTS *bs;
+    PROXY_CERT_INFO_EXTENSION *pci;
+    ASN1_BIT_STRING *usage;
+    ASN1_BIT_STRING *ns;
+    EXTENDED_KEY_USAGE *extusage;
+    X509_EXTENSION *ex;
+    int i;
+
+#ifdef tsan_ld_acq
+    /* fast lock-free check, see end of the function for details. */
+    if (tsan_ld_acq((TSAN_QUALIFIER int *)&x->ex_cached))
+        return;
+#endif
+
+    CRYPTO_THREAD_write_lock(x->lock);
+    if (x->ex_flags & EXFLAG_SET) {
+        CRYPTO_THREAD_unlock(x->lock);
+        return;
+    }
+
+    X509_digest(x, EVP_sha1(), x->sha1_hash, NULL);
+    /* V1 should mean no extensions ... */
+    if (!X509_get_version(x))
+        x->ex_flags |= EXFLAG_V1;
+    /* Handle basic constraints */
+    if ((bs = X509_get_ext_d2i(x, NID_basic_constraints, NULL, NULL))) {
+        if (bs->ca)
+            x->ex_flags |= EXFLAG_CA;
+        if (bs->pathlen) {
+            if ((bs->pathlen->type == V_ASN1_NEG_INTEGER)
+                || !bs->ca) {
+                x->ex_flags |= EXFLAG_INVALID;
+                x->ex_pathlen = 0;
+            } else
+                x->ex_pathlen = ASN1_INTEGER_get(bs->pathlen);
+        } else
+            x->ex_pathlen = -1;
+        BASIC_CONSTRAINTS_free(bs);
+        x->ex_flags |= EXFLAG_BCONS;
+    }
+    /* Handle proxy certificates */
+    if ((pci = X509_get_ext_d2i(x, NID_proxyCertInfo, NULL, NULL))) {
+        if (x->ex_flags & EXFLAG_CA
+            || X509_get_ext_by_NID(x, NID_subject_alt_name, -1) >= 0
+            || X509_get_ext_by_NID(x, NID_issuer_alt_name, -1) >= 0) {
+            x->ex_flags |= EXFLAG_INVALID;
+        }
+        if (pci->pcPathLengthConstraint) {
+            x->ex_pcpathlen = ASN1_INTEGER_get(pci->pcPathLengthConstraint);
+        } else
+            x->ex_pcpathlen = -1;
+        PROXY_CERT_INFO_EXTENSION_free(pci);
+        x->ex_flags |= EXFLAG_PROXY;
+    }
+    /* Handle key usage */
+    if ((usage = X509_get_ext_d2i(x, NID_key_usage, NULL, NULL))) {
+        if (usage->length > 0) {
+            x->ex_kusage = usage->data[0];
+            if (usage->length > 1)
+                x->ex_kusage |= usage->data[1] << 8;
+        } else
+            x->ex_kusage = 0;
+        x->ex_flags |= EXFLAG_KUSAGE;
+        ASN1_BIT_STRING_free(usage);
+    }
+    x->ex_xkusage = 0;
+    if ((extusage = X509_get_ext_d2i(x, NID_ext_key_usage, NULL, NULL))) {
+        x->ex_flags |= EXFLAG_XKUSAGE;
+        for (i = 0; i < sk_ASN1_OBJECT_num(extusage); i++) {
+            switch (OBJ_obj2nid(sk_ASN1_OBJECT_value(extusage, i))) {
+            case NID_server_auth:
+                x->ex_xkusage |= XKU_SSL_SERVER;
+                break;
+
+            case NID_client_auth:
+                x->ex_xkusage |= XKU_SSL_CLIENT;
+                break;
+
+            case NID_email_protect:
+                x->ex_xkusage |= XKU_SMIME;
+                break;
+
+            case NID_code_sign:
+                x->ex_xkusage |= XKU_CODE_SIGN;
+                break;
+
+            case NID_ms_sgc:
+            case NID_ns_sgc:
+                x->ex_xkusage |= XKU_SGC;
+                break;
+
+            case NID_OCSP_sign:
+                x->ex_xkusage |= XKU_OCSP_SIGN;
+                break;
+
+            case NID_time_stamp:
+                x->ex_xkusage |= XKU_TIMESTAMP;
+                break;
+
+            case NID_dvcs:
+                x->ex_xkusage |= XKU_DVCS;
+                break;
+
+            case NID_anyExtendedKeyUsage:
+                x->ex_xkusage |= XKU_ANYEKU;
+                break;
+            }
+        }
+        sk_ASN1_OBJECT_pop_free(extusage, ASN1_OBJECT_free);
+    }
+
+    if ((ns = X509_get_ext_d2i(x, NID_netscape_cert_type, NULL, NULL))) {
+        if (ns->length > 0)
+            x->ex_nscert = ns->data[0];
+        else
+            x->ex_nscert = 0;
+        x->ex_flags |= EXFLAG_NSCERT;
+        ASN1_BIT_STRING_free(ns);
+    }
+    x->skid = X509_get_ext_d2i(x, NID_subject_key_identifier, NULL, NULL);
+    x->akid = X509_get_ext_d2i(x, NID_authority_key_identifier, NULL, NULL);
+    /* Does subject name match issuer ? */
+    if (!X509_NAME_cmp(X509_get_subject_name(x), X509_get_issuer_name(x))) {
+        x->ex_flags |= EXFLAG_SI;
+        /* If SKID matches AKID also indicate self signed */
+        if (X509_check_akid(x, x->akid) == X509_V_OK &&
+            !ku_reject(x, KU_KEY_CERT_SIGN))
+            x->ex_flags |= EXFLAG_SS;
+    }
+    x->altname = X509_get_ext_d2i(x, NID_subject_alt_name, NULL, NULL);
+    x->nc = X509_get_ext_d2i(x, NID_name_constraints, &i, NULL);
+    if (!x->nc && (i != -1))
+        x->ex_flags |= EXFLAG_INVALID;
+    setup_crldp(x);
+
+#ifndef OPENSSL_NO_RFC3779
+    x->rfc3779_addr = X509_get_ext_d2i(x, NID_sbgp_ipAddrBlock, NULL, NULL);
+    x->rfc3779_asid = X509_get_ext_d2i(x, NID_sbgp_autonomousSysNum,
+                                       NULL, NULL);
+#endif
+    for (i = 0; i < X509_get_ext_count(x); i++) {
+        ex = X509_get_ext(x, i);
+        if (OBJ_obj2nid(X509_EXTENSION_get_object(ex))
+            == NID_freshest_crl)
+            x->ex_flags |= EXFLAG_FRESHEST;
+        if (!X509_EXTENSION_get_critical(ex))
+            continue;
+        if (!X509_supported_extension(ex)) {
+            x->ex_flags |= EXFLAG_CRITICAL;
+            break;
+        }
+    }
+    x509_init_sig_info(x);
+    x->ex_flags |= EXFLAG_SET;
+#ifdef tsan_st_rel
+    tsan_st_rel((TSAN_QUALIFIER int *)&x->ex_cached, 1);
+    /*
+     * Above store triggers fast lock-free check in the beginning of the
+     * function. But one has to ensure that the structure is "stable", i.e.
+     * all stores are visible on all processors. Hence the release fence.
+     */
+#endif
+    CRYPTO_THREAD_unlock(x->lock);
+}
+
+/*-
+ * CA checks common to all purposes
+ * return codes:
+ * 0 not a CA
+ * 1 is a CA
+ * 2 basicConstraints absent so "maybe" a CA
+ * 3 basicConstraints absent but self signed V1.
+ * 4 basicConstraints absent but keyUsage present and keyCertSign asserted.
+ */
+
+static int check_ca(const X509 *x)
+{
+    /* keyUsage if present should allow cert signing */
+    if (ku_reject(x, KU_KEY_CERT_SIGN))
+        return 0;
+    if (x->ex_flags & EXFLAG_BCONS) {
+        if (x->ex_flags & EXFLAG_CA)
+            return 1;
+        /* If basicConstraints says not a CA then say so */
+        else
+            return 0;
+    } else {
+        /* we support V1 roots for...  uh, I don't really know why. */
+        if ((x->ex_flags & V1_ROOT) == V1_ROOT)
+            return 3;
+        /*
+         * If key usage present it must have certSign so tolerate it
+         */
+        else if (x->ex_flags & EXFLAG_KUSAGE)
+            return 4;
+        /* Older certificates could have Netscape-specific CA types */
+        else if (x->ex_flags & EXFLAG_NSCERT && x->ex_nscert & NS_ANY_CA)
+            return 5;
+        /* can this still be regarded a CA certificate?  I doubt it */
+        return 0;
+    }
+}
+
+void X509_set_proxy_flag(X509 *x)
+{
+    x->ex_flags |= EXFLAG_PROXY;
+}
+
+void X509_set_proxy_pathlen(X509 *x, long l)
+{
+    x->ex_pcpathlen = l;
+}
+
+int X509_check_ca(X509 *x)
+{
+    x509v3_cache_extensions(x);
+
+    return check_ca(x);
+}
+
+/* Check SSL CA: common checks for SSL client and server */
+static int check_ssl_ca(const X509 *x)
+{
+    int ca_ret;
+    ca_ret = check_ca(x);
+    if (!ca_ret)
+        return 0;
+    /* check nsCertType if present */
+    if (ca_ret != 5 || x->ex_nscert & NS_SSL_CA)
+        return ca_ret;
+    else
+        return 0;
+}
+
+static int check_purpose_ssl_client(const X509_PURPOSE *xp, const X509 *x,
+                                    int ca)
+{
+    if (xku_reject(x, XKU_SSL_CLIENT))
+        return 0;
+    if (ca)
+        return check_ssl_ca(x);
+    /* We need to do digital signatures or key agreement */
+    if (ku_reject(x, KU_DIGITAL_SIGNATURE | KU_KEY_AGREEMENT))
+        return 0;
+    /* nsCertType if present should allow SSL client use */
+    if (ns_reject(x, NS_SSL_CLIENT))
+        return 0;
+    return 1;
+}
+
+/*
+ * Key usage needed for TLS/SSL server: digital signature, encipherment or
+ * key agreement. The ssl code can check this more thoroughly for individual
+ * key types.
+ */
+#define KU_TLS \
+        KU_DIGITAL_SIGNATURE|KU_KEY_ENCIPHERMENT|KU_KEY_AGREEMENT
+
+static int check_purpose_ssl_server(const X509_PURPOSE *xp, const X509 *x,
+                                    int ca)
+{
+    if (xku_reject(x, XKU_SSL_SERVER | XKU_SGC))
+        return 0;
+    if (ca)
+        return check_ssl_ca(x);
+
+    if (ns_reject(x, NS_SSL_SERVER))
+        return 0;
+    if (ku_reject(x, KU_TLS))
+        return 0;
+
+    return 1;
+
+}
+
+static int check_purpose_ns_ssl_server(const X509_PURPOSE *xp, const X509 *x,
+                                       int ca)
+{
+    int ret;
+    ret = check_purpose_ssl_server(xp, x, ca);
+    if (!ret || ca)
+        return ret;
+    /* We need to encipher or Netscape complains */
+    if (ku_reject(x, KU_KEY_ENCIPHERMENT))
+        return 0;
+    return ret;
+}
+
+/* common S/MIME checks */
+static int purpose_smime(const X509 *x, int ca)
+{
+    if (xku_reject(x, XKU_SMIME))
+        return 0;
+    if (ca) {
+        int ca_ret;
+        ca_ret = check_ca(x);
+        if (!ca_ret)
+            return 0;
+        /* check nsCertType if present */
+        if (ca_ret != 5 || x->ex_nscert & NS_SMIME_CA)
+            return ca_ret;
+        else
+            return 0;
+    }
+    if (x->ex_flags & EXFLAG_NSCERT) {
+        if (x->ex_nscert & NS_SMIME)
+            return 1;
+        /* Workaround for some buggy certificates */
+        if (x->ex_nscert & NS_SSL_CLIENT)
+            return 2;
+        return 0;
+    }
+    return 1;
+}
+
+static int check_purpose_smime_sign(const X509_PURPOSE *xp, const X509 *x,
+                                    int ca)
+{
+    int ret;
+    ret = purpose_smime(x, ca);
+    if (!ret || ca)
+        return ret;
+    if (ku_reject(x, KU_DIGITAL_SIGNATURE | KU_NON_REPUDIATION))
+        return 0;
+    return ret;
+}
+
+static int check_purpose_smime_encrypt(const X509_PURPOSE *xp, const X509 *x,
+                                       int ca)
+{
+    int ret;
+    ret = purpose_smime(x, ca);
+    if (!ret || ca)
+        return ret;
+    if (ku_reject(x, KU_KEY_ENCIPHERMENT))
+        return 0;
+    return ret;
+}
+
+static int check_purpose_crl_sign(const X509_PURPOSE *xp, const X509 *x,
+                                  int ca)
+{
+    if (ca) {
+        int ca_ret;
+        if ((ca_ret = check_ca(x)) != 2)
+            return ca_ret;
+        else
+            return 0;
+    }
+    if (ku_reject(x, KU_CRL_SIGN))
+        return 0;
+    return 1;
+}
+
+/*
+ * OCSP helper: this is *not* a full OCSP check. It just checks that each CA
+ * is valid. Additional checks must be made on the chain.
+ */
+
+static int ocsp_helper(const X509_PURPOSE *xp, const X509 *x, int ca)
+{
+    /*
+     * Must be a valid CA.  Should we really support the "I don't know" value
+     * (2)?
+     */
+    if (ca)
+        return check_ca(x);
+    /* leaf certificate is checked in OCSP_verify() */
+    return 1;
+}
+
+static int check_purpose_timestamp_sign(const X509_PURPOSE *xp, const X509 *x,
+                                        int ca)
+{
+    int i_ext;
+
+    /* If ca is true we must return if this is a valid CA certificate. */
+    if (ca)
+        return check_ca(x);
+
+    /*
+     * Check the optional key usage field:
+     * if Key Usage is present, it must be one of digitalSignature
+     * and/or nonRepudiation (other values are not consistent and shall
+     * be rejected).
+     */
+    if ((x->ex_flags & EXFLAG_KUSAGE)
+        && ((x->ex_kusage & ~(KU_NON_REPUDIATION | KU_DIGITAL_SIGNATURE)) ||
+            !(x->ex_kusage & (KU_NON_REPUDIATION | KU_DIGITAL_SIGNATURE))))
+        return 0;
+
+    /* Only time stamp key usage is permitted and it's required. */
+    if (!(x->ex_flags & EXFLAG_XKUSAGE) || x->ex_xkusage != XKU_TIMESTAMP)
+        return 0;
+
+    /* Extended Key Usage MUST be critical */
+    i_ext = X509_get_ext_by_NID(x, NID_ext_key_usage, -1);
+    if (i_ext >= 0) {
+        X509_EXTENSION *ext = X509_get_ext((X509 *)x, i_ext);
+        if (!X509_EXTENSION_get_critical(ext))
+            return 0;
+    }
+
+    return 1;
+}
+
+static int no_check(const X509_PURPOSE *xp, const X509 *x, int ca)
+{
+    return 1;
+}
+
+/*-
+ * Various checks to see if one certificate issued the second.
+ * This can be used to prune a set of possible issuer certificates
+ * which have been looked up using some simple method such as by
+ * subject name.
+ * These are:
+ * 1. Check issuer_name(subject) == subject_name(issuer)
+ * 2. If akid(subject) exists check it matches issuer
+ * 3. If key_usage(issuer) exists check it supports certificate signing
+ * returns 0 for OK, positive for reason for mismatch, reasons match
+ * codes for X509_verify_cert()
+ */
+
+int X509_check_issued(X509 *issuer, X509 *subject)
+{
+    if (X509_NAME_cmp(X509_get_subject_name(issuer),
+                      X509_get_issuer_name(subject)))
+        return X509_V_ERR_SUBJECT_ISSUER_MISMATCH;
+
+    x509v3_cache_extensions(issuer);
+    x509v3_cache_extensions(subject);
+
+    if (subject->akid) {
+        int ret = X509_check_akid(issuer, subject->akid);
+        if (ret != X509_V_OK)
+            return ret;
+    }
+
+    if (subject->ex_flags & EXFLAG_PROXY) {
+        if (ku_reject(issuer, KU_DIGITAL_SIGNATURE))
+            return X509_V_ERR_KEYUSAGE_NO_DIGITAL_SIGNATURE;
+    } else if (ku_reject(issuer, KU_KEY_CERT_SIGN))
+        return X509_V_ERR_KEYUSAGE_NO_CERTSIGN;
+    return X509_V_OK;
+}
+
+int X509_check_akid(X509 *issuer, AUTHORITY_KEYID *akid)
+{
+
+    if (!akid)
+        return X509_V_OK;
+
+    /* Check key ids (if present) */
+    if (akid->keyid && issuer->skid &&
+        ASN1_OCTET_STRING_cmp(akid->keyid, issuer->skid))
+        return X509_V_ERR_AKID_SKID_MISMATCH;
+    /* Check serial number */
+    if (akid->serial &&
+        ASN1_INTEGER_cmp(X509_get_serialNumber(issuer), akid->serial))
+        return X509_V_ERR_AKID_ISSUER_SERIAL_MISMATCH;
+    /* Check issuer name */
+    if (akid->issuer) {
+        /*
+         * Ugh, for some peculiar reason AKID includes SEQUENCE OF
+         * GeneralName. So look for a DirName. There may be more than one but
+         * we only take any notice of the first.
+         */
+        GENERAL_NAMES *gens;
+        GENERAL_NAME *gen;
+        X509_NAME *nm = NULL;
+        int i;
+        gens = akid->issuer;
+        for (i = 0; i < sk_GENERAL_NAME_num(gens); i++) {
+            gen = sk_GENERAL_NAME_value(gens, i);
+            if (gen->type == GEN_DIRNAME) {
+                nm = gen->d.dirn;
+                break;
+            }
+        }
+        if (nm && X509_NAME_cmp(nm, X509_get_issuer_name(issuer)))
+            return X509_V_ERR_AKID_ISSUER_SERIAL_MISMATCH;
+    }
+    return X509_V_OK;
+}
+
+uint32_t X509_get_extension_flags(X509 *x)
+{
+    /* Call for side-effect of computing hash and caching extensions */
+    X509_check_purpose(x, -1, -1);
+    return x->ex_flags;
+}
+
+uint32_t X509_get_key_usage(X509 *x)
+{
+    /* Call for side-effect of computing hash and caching extensions */
+    X509_check_purpose(x, -1, -1);
+    if (x->ex_flags & EXFLAG_KUSAGE)
+        return x->ex_kusage;
+    return UINT32_MAX;
+}
+
+uint32_t X509_get_extended_key_usage(X509 *x)
+{
+    /* Call for side-effect of computing hash and caching extensions */
+    X509_check_purpose(x, -1, -1);
+    if (x->ex_flags & EXFLAG_XKUSAGE)
+        return x->ex_xkusage;
+    return UINT32_MAX;
+}
+
+const ASN1_OCTET_STRING *X509_get0_subject_key_id(X509 *x)
+{
+    /* Call for side-effect of computing hash and caching extensions */
+    X509_check_purpose(x, -1, -1);
+    return x->skid;
+}
+
+const ASN1_OCTET_STRING *X509_get0_authority_key_id(X509 *x)
+{
+    /* Call for side-effect of computing hash and caching extensions */
+    X509_check_purpose(x, -1, -1);
+    return (x->akid != NULL ? x->akid->keyid : NULL);
+}
+
+long X509_get_pathlen(X509 *x)
+{
+    /* Called for side effect of caching extensions */
+    if (X509_check_purpose(x, -1, -1) != 1
+            || (x->ex_flags & EXFLAG_BCONS) == 0)
+        return -1;
+    return x->ex_pathlen;
+}
+
+long X509_get_proxy_pathlen(X509 *x)
+{
+    /* Called for side effect of caching extensions */
+    if (X509_check_purpose(x, -1, -1) != 1
+            || (x->ex_flags & EXFLAG_PROXY) == 0)
+        return -1;
+    return x->ex_pcpathlen;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_skey.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_skey.c
new file mode 100644
index 000000000..749f51b2f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_skey.c
@@ -0,0 +1,106 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/x509v3.h>
+#include "internal/x509_int.h"
+#include "ext_dat.h"
+
+static ASN1_OCTET_STRING *s2i_skey_id(X509V3_EXT_METHOD *method,
+                                      X509V3_CTX *ctx, char *str);
+const X509V3_EXT_METHOD v3_skey_id = {
+    NID_subject_key_identifier, 0, ASN1_ITEM_ref(ASN1_OCTET_STRING),
+    0, 0, 0, 0,
+    (X509V3_EXT_I2S)i2s_ASN1_OCTET_STRING,
+    (X509V3_EXT_S2I)s2i_skey_id,
+    0, 0, 0, 0,
+    NULL
+};
+
+char *i2s_ASN1_OCTET_STRING(X509V3_EXT_METHOD *method,
+                            const ASN1_OCTET_STRING *oct)
+{
+    return OPENSSL_buf2hexstr(oct->data, oct->length);
+}
+
+ASN1_OCTET_STRING *s2i_ASN1_OCTET_STRING(X509V3_EXT_METHOD *method,
+                                         X509V3_CTX *ctx, const char *str)
+{
+    ASN1_OCTET_STRING *oct;
+    long length;
+
+    if ((oct = ASN1_OCTET_STRING_new()) == NULL) {
+        X509V3err(X509V3_F_S2I_ASN1_OCTET_STRING, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if ((oct->data = OPENSSL_hexstr2buf(str, &length)) == NULL) {
+        ASN1_OCTET_STRING_free(oct);
+        return NULL;
+    }
+
+    oct->length = length;
+
+    return oct;
+
+}
+
+static ASN1_OCTET_STRING *s2i_skey_id(X509V3_EXT_METHOD *method,
+                                      X509V3_CTX *ctx, char *str)
+{
+    ASN1_OCTET_STRING *oct;
+    X509_PUBKEY *pubkey;
+    const unsigned char *pk;
+    int pklen;
+    unsigned char pkey_dig[EVP_MAX_MD_SIZE];
+    unsigned int diglen;
+
+    if (strcmp(str, "hash"))
+        return s2i_ASN1_OCTET_STRING(method, ctx, str);
+
+    if ((oct = ASN1_OCTET_STRING_new()) == NULL) {
+        X509V3err(X509V3_F_S2I_SKEY_ID, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if (ctx && (ctx->flags == CTX_TEST))
+        return oct;
+
+    if (!ctx || (!ctx->subject_req && !ctx->subject_cert)) {
+        X509V3err(X509V3_F_S2I_SKEY_ID, X509V3_R_NO_PUBLIC_KEY);
+        goto err;
+    }
+
+    if (ctx->subject_req)
+        pubkey = ctx->subject_req->req_info.pubkey;
+    else
+        pubkey = ctx->subject_cert->cert_info.key;
+
+    if (pubkey == NULL) {
+        X509V3err(X509V3_F_S2I_SKEY_ID, X509V3_R_NO_PUBLIC_KEY);
+        goto err;
+    }
+
+    X509_PUBKEY_get0_param(NULL, &pk, &pklen, NULL, pubkey);
+
+    if (!EVP_Digest(pk, pklen, pkey_dig, &diglen, EVP_sha1(), NULL))
+        goto err;
+
+    if (!ASN1_OCTET_STRING_set(oct, pkey_dig, diglen)) {
+        X509V3err(X509V3_F_S2I_SKEY_ID, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    return oct;
+
+ err:
+    ASN1_OCTET_STRING_free(oct);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_sxnet.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_sxnet.c
new file mode 100644
index 000000000..89cda01be
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_sxnet.c
@@ -0,0 +1,226 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "internal/cryptlib.h"
+#include <openssl/conf.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/x509v3.h>
+#include "ext_dat.h"
+
+/* Support for Thawte strong extranet extension */
+
+#define SXNET_TEST
+
+static int sxnet_i2r(X509V3_EXT_METHOD *method, SXNET *sx, BIO *out,
+                     int indent);
+#ifdef SXNET_TEST
+static SXNET *sxnet_v2i(X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
+                        STACK_OF(CONF_VALUE) *nval);
+#endif
+const X509V3_EXT_METHOD v3_sxnet = {
+    NID_sxnet, X509V3_EXT_MULTILINE, ASN1_ITEM_ref(SXNET),
+    0, 0, 0, 0,
+    0, 0,
+    0,
+#ifdef SXNET_TEST
+    (X509V3_EXT_V2I)sxnet_v2i,
+#else
+    0,
+#endif
+    (X509V3_EXT_I2R)sxnet_i2r,
+    0,
+    NULL
+};
+
+ASN1_SEQUENCE(SXNETID) = {
+        ASN1_SIMPLE(SXNETID, zone, ASN1_INTEGER),
+        ASN1_SIMPLE(SXNETID, user, ASN1_OCTET_STRING)
+} ASN1_SEQUENCE_END(SXNETID)
+
+IMPLEMENT_ASN1_FUNCTIONS(SXNETID)
+
+ASN1_SEQUENCE(SXNET) = {
+        ASN1_SIMPLE(SXNET, version, ASN1_INTEGER),
+        ASN1_SEQUENCE_OF(SXNET, ids, SXNETID)
+} ASN1_SEQUENCE_END(SXNET)
+
+IMPLEMENT_ASN1_FUNCTIONS(SXNET)
+
+static int sxnet_i2r(X509V3_EXT_METHOD *method, SXNET *sx, BIO *out,
+                     int indent)
+{
+    long v;
+    char *tmp;
+    SXNETID *id;
+    int i;
+    v = ASN1_INTEGER_get(sx->version);
+    BIO_printf(out, "%*sVersion: %ld (0x%lX)", indent, "", v + 1, v);
+    for (i = 0; i < sk_SXNETID_num(sx->ids); i++) {
+        id = sk_SXNETID_value(sx->ids, i);
+        tmp = i2s_ASN1_INTEGER(NULL, id->zone);
+        BIO_printf(out, "\n%*sZone: %s, User: ", indent, "", tmp);
+        OPENSSL_free(tmp);
+        ASN1_STRING_print(out, id->user);
+    }
+    return 1;
+}
+
+#ifdef SXNET_TEST
+
+/*
+ * NBB: this is used for testing only. It should *not* be used for anything
+ * else because it will just take static IDs from the configuration file and
+ * they should really be separate values for each user.
+ */
+
+static SXNET *sxnet_v2i(X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
+                        STACK_OF(CONF_VALUE) *nval)
+{
+    CONF_VALUE *cnf;
+    SXNET *sx = NULL;
+    int i;
+    for (i = 0; i < sk_CONF_VALUE_num(nval); i++) {
+        cnf = sk_CONF_VALUE_value(nval, i);
+        if (!SXNET_add_id_asc(&sx, cnf->name, cnf->value, -1))
+            return NULL;
+    }
+    return sx;
+}
+
+#endif
+
+/* Strong Extranet utility functions */
+
+/* Add an id given the zone as an ASCII number */
+
+int SXNET_add_id_asc(SXNET **psx, const char *zone, const char *user, int userlen)
+{
+    ASN1_INTEGER *izone;
+
+    if ((izone = s2i_ASN1_INTEGER(NULL, zone)) == NULL) {
+        X509V3err(X509V3_F_SXNET_ADD_ID_ASC, X509V3_R_ERROR_CONVERTING_ZONE);
+        return 0;
+    }
+    return SXNET_add_id_INTEGER(psx, izone, user, userlen);
+}
+
+/* Add an id given the zone as an unsigned long */
+
+int SXNET_add_id_ulong(SXNET **psx, unsigned long lzone, const char *user,
+                       int userlen)
+{
+    ASN1_INTEGER *izone;
+
+    if ((izone = ASN1_INTEGER_new()) == NULL
+        || !ASN1_INTEGER_set(izone, lzone)) {
+        X509V3err(X509V3_F_SXNET_ADD_ID_ULONG, ERR_R_MALLOC_FAILURE);
+        ASN1_INTEGER_free(izone);
+        return 0;
+    }
+    return SXNET_add_id_INTEGER(psx, izone, user, userlen);
+
+}
+
+/*
+ * Add an id given the zone as an ASN1_INTEGER. Note this version uses the
+ * passed integer and doesn't make a copy so don't free it up afterwards.
+ */
+
+int SXNET_add_id_INTEGER(SXNET **psx, ASN1_INTEGER *zone, const char *user,
+                         int userlen)
+{
+    SXNET *sx = NULL;
+    SXNETID *id = NULL;
+    if (!psx || !zone || !user) {
+        X509V3err(X509V3_F_SXNET_ADD_ID_INTEGER,
+                  X509V3_R_INVALID_NULL_ARGUMENT);
+        return 0;
+    }
+    if (userlen == -1)
+        userlen = strlen(user);
+    if (userlen > 64) {
+        X509V3err(X509V3_F_SXNET_ADD_ID_INTEGER, X509V3_R_USER_TOO_LONG);
+        return 0;
+    }
+    if (*psx == NULL) {
+        if ((sx = SXNET_new()) == NULL)
+            goto err;
+        if (!ASN1_INTEGER_set(sx->version, 0))
+            goto err;
+        *psx = sx;
+    } else
+        sx = *psx;
+    if (SXNET_get_id_INTEGER(sx, zone)) {
+        X509V3err(X509V3_F_SXNET_ADD_ID_INTEGER, X509V3_R_DUPLICATE_ZONE_ID);
+        return 0;
+    }
+
+    if ((id = SXNETID_new()) == NULL)
+        goto err;
+    if (userlen == -1)
+        userlen = strlen(user);
+
+    if (!ASN1_OCTET_STRING_set(id->user, (const unsigned char *)user, userlen))
+        goto err;
+    if (!sk_SXNETID_push(sx->ids, id))
+        goto err;
+    id->zone = zone;
+    return 1;
+
+ err:
+    X509V3err(X509V3_F_SXNET_ADD_ID_INTEGER, ERR_R_MALLOC_FAILURE);
+    SXNETID_free(id);
+    SXNET_free(sx);
+    *psx = NULL;
+    return 0;
+}
+
+ASN1_OCTET_STRING *SXNET_get_id_asc(SXNET *sx, const char *zone)
+{
+    ASN1_INTEGER *izone;
+    ASN1_OCTET_STRING *oct;
+
+    if ((izone = s2i_ASN1_INTEGER(NULL, zone)) == NULL) {
+        X509V3err(X509V3_F_SXNET_GET_ID_ASC, X509V3_R_ERROR_CONVERTING_ZONE);
+        return NULL;
+    }
+    oct = SXNET_get_id_INTEGER(sx, izone);
+    ASN1_INTEGER_free(izone);
+    return oct;
+}
+
+ASN1_OCTET_STRING *SXNET_get_id_ulong(SXNET *sx, unsigned long lzone)
+{
+    ASN1_INTEGER *izone;
+    ASN1_OCTET_STRING *oct;
+
+    if ((izone = ASN1_INTEGER_new()) == NULL
+        || !ASN1_INTEGER_set(izone, lzone)) {
+        X509V3err(X509V3_F_SXNET_GET_ID_ULONG, ERR_R_MALLOC_FAILURE);
+        ASN1_INTEGER_free(izone);
+        return NULL;
+    }
+    oct = SXNET_get_id_INTEGER(sx, izone);
+    ASN1_INTEGER_free(izone);
+    return oct;
+}
+
+ASN1_OCTET_STRING *SXNET_get_id_INTEGER(SXNET *sx, ASN1_INTEGER *zone)
+{
+    SXNETID *id;
+    int i;
+    for (i = 0; i < sk_SXNETID_num(sx->ids); i++) {
+        id = sk_SXNETID_value(sx->ids, i);
+        if (!ASN1_INTEGER_cmp(id->zone, zone))
+            return id->user;
+    }
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_tlsf.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_tlsf.c
new file mode 100644
index 000000000..7fd6ef17d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_tlsf.c
@@ -0,0 +1,137 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include "internal/cryptlib.h"
+#include <stdio.h>
+#include "internal/o_str.h"
+#include <openssl/asn1t.h>
+#include <openssl/conf.h>
+#include <openssl/x509v3.h>
+#include "ext_dat.h"
+
+static STACK_OF(CONF_VALUE) *i2v_TLS_FEATURE(const X509V3_EXT_METHOD *method,
+                                             TLS_FEATURE *tls_feature,
+                                             STACK_OF(CONF_VALUE) *ext_list);
+static TLS_FEATURE *v2i_TLS_FEATURE(const X509V3_EXT_METHOD *method,
+                                    X509V3_CTX *ctx,
+                                    STACK_OF(CONF_VALUE) *nval);
+
+ASN1_ITEM_TEMPLATE(TLS_FEATURE) =
+        ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, TLS_FEATURE, ASN1_INTEGER)
+static_ASN1_ITEM_TEMPLATE_END(TLS_FEATURE)
+
+IMPLEMENT_ASN1_ALLOC_FUNCTIONS(TLS_FEATURE)
+
+const X509V3_EXT_METHOD v3_tls_feature = {
+    NID_tlsfeature, 0,
+    ASN1_ITEM_ref(TLS_FEATURE),
+    0, 0, 0, 0,
+    0, 0,
+    (X509V3_EXT_I2V)i2v_TLS_FEATURE,
+    (X509V3_EXT_V2I)v2i_TLS_FEATURE,
+    0, 0,
+    NULL
+};
+
+
+typedef struct {
+    long num;
+    const char *name;
+} TLS_FEATURE_NAME;
+
+static TLS_FEATURE_NAME tls_feature_tbl[] = {
+    { 5, "status_request" },
+    { 17, "status_request_v2" }
+};
+
+/*
+ * i2v_TLS_FEATURE converts the TLS_FEATURE structure tls_feature into the
+ * STACK_OF(CONF_VALUE) structure ext_list. STACK_OF(CONF_VALUE) is the format
+ * used by the CONF library to represent a multi-valued extension.  ext_list is
+ * returned.
+ */
+static STACK_OF(CONF_VALUE) *i2v_TLS_FEATURE(const X509V3_EXT_METHOD *method,
+                                             TLS_FEATURE *tls_feature,
+                                             STACK_OF(CONF_VALUE) *ext_list)
+{
+    int i;
+    size_t j;
+    ASN1_INTEGER *ai;
+    long tlsextid;
+    for (i = 0; i < sk_ASN1_INTEGER_num(tls_feature); i++) {
+        ai = sk_ASN1_INTEGER_value(tls_feature, i);
+        tlsextid = ASN1_INTEGER_get(ai);
+        for (j = 0; j < OSSL_NELEM(tls_feature_tbl); j++)
+            if (tlsextid == tls_feature_tbl[j].num)
+                break;
+        if (j < OSSL_NELEM(tls_feature_tbl))
+            X509V3_add_value(NULL, tls_feature_tbl[j].name, &ext_list);
+        else
+            X509V3_add_value_int(NULL, ai, &ext_list);
+    }
+    return ext_list;
+}
+
+/*
+ * v2i_TLS_FEATURE converts the multi-valued extension nval into a TLS_FEATURE
+ * structure, which is returned if the conversion is successful.  In case of
+ * error, NULL is returned.
+ */
+static TLS_FEATURE *v2i_TLS_FEATURE(const X509V3_EXT_METHOD *method,
+                                    X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval)
+{
+    TLS_FEATURE *tlsf;
+    char *extval, *endptr;
+    ASN1_INTEGER *ai;
+    CONF_VALUE *val;
+    int i;
+    size_t j;
+    long tlsextid;
+
+    if ((tlsf = sk_ASN1_INTEGER_new_null()) == NULL) {
+        X509V3err(X509V3_F_V2I_TLS_FEATURE, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    for (i = 0; i < sk_CONF_VALUE_num(nval); i++) {
+        val = sk_CONF_VALUE_value(nval, i);
+        if (val->value)
+            extval = val->value;
+        else
+            extval = val->name;
+
+        for (j = 0; j < OSSL_NELEM(tls_feature_tbl); j++)
+            if (strcasecmp(extval, tls_feature_tbl[j].name) == 0)
+                break;
+        if (j < OSSL_NELEM(tls_feature_tbl))
+            tlsextid = tls_feature_tbl[j].num;
+        else {
+            tlsextid = strtol(extval, &endptr, 10);
+            if (((*endptr) != '\0') || (extval == endptr) || (tlsextid < 0) ||
+                (tlsextid > 65535)) {
+                X509V3err(X509V3_F_V2I_TLS_FEATURE, X509V3_R_INVALID_SYNTAX);
+                X509V3_conf_err(val);
+                goto err;
+            }
+        }
+
+        if ((ai = ASN1_INTEGER_new()) == NULL
+                || !ASN1_INTEGER_set(ai, tlsextid)
+                || sk_ASN1_INTEGER_push(tlsf, ai) <= 0) {
+            X509V3err(X509V3_F_V2I_TLS_FEATURE, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+    return tlsf;
+
+ err:
+    sk_ASN1_INTEGER_pop_free(tlsf, ASN1_INTEGER_free);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_utl.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_utl.c
new file mode 100644
index 000000000..c9b40d2c7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3_utl.c
@@ -0,0 +1,1239 @@
+/*
+ * Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* X509 v3 extension utilities */
+
+#include "e_os.h"
+#include "internal/cryptlib.h"
+#include <stdio.h>
+#include "internal/ctype.h"
+#include <openssl/conf.h>
+#include <openssl/crypto.h>
+#include <openssl/x509v3.h>
+#include "internal/x509_int.h"
+#include <openssl/bn.h>
+#include "ext_dat.h"
+
+static char *strip_spaces(char *name);
+static int sk_strcmp(const char *const *a, const char *const *b);
+static STACK_OF(OPENSSL_STRING) *get_email(X509_NAME *name,
+                                           GENERAL_NAMES *gens);
+static void str_free(OPENSSL_STRING str);
+static int append_ia5(STACK_OF(OPENSSL_STRING) **sk, const ASN1_IA5STRING *email);
+
+static int ipv4_from_asc(unsigned char *v4, const char *in);
+static int ipv6_from_asc(unsigned char *v6, const char *in);
+static int ipv6_cb(const char *elem, int len, void *usr);
+static int ipv6_hex(unsigned char *out, const char *in, int inlen);
+
+/* Add a CONF_VALUE name value pair to stack */
+
+int X509V3_add_value(const char *name, const char *value,
+                     STACK_OF(CONF_VALUE) **extlist)
+{
+    CONF_VALUE *vtmp = NULL;
+    char *tname = NULL, *tvalue = NULL;
+    int sk_allocated = (*extlist == NULL);
+
+    if (name && (tname = OPENSSL_strdup(name)) == NULL)
+        goto err;
+    if (value && (tvalue = OPENSSL_strdup(value)) == NULL)
+        goto err;
+    if ((vtmp = OPENSSL_malloc(sizeof(*vtmp))) == NULL)
+        goto err;
+    if (sk_allocated && (*extlist = sk_CONF_VALUE_new_null()) == NULL)
+        goto err;
+    vtmp->section = NULL;
+    vtmp->name = tname;
+    vtmp->value = tvalue;
+    if (!sk_CONF_VALUE_push(*extlist, vtmp))
+        goto err;
+    return 1;
+ err:
+    X509V3err(X509V3_F_X509V3_ADD_VALUE, ERR_R_MALLOC_FAILURE);
+    if (sk_allocated) {
+        sk_CONF_VALUE_free(*extlist);
+        *extlist = NULL;
+    }
+    OPENSSL_free(vtmp);
+    OPENSSL_free(tname);
+    OPENSSL_free(tvalue);
+    return 0;
+}
+
+int X509V3_add_value_uchar(const char *name, const unsigned char *value,
+                           STACK_OF(CONF_VALUE) **extlist)
+{
+    return X509V3_add_value(name, (const char *)value, extlist);
+}
+
+/* Free function for STACK_OF(CONF_VALUE) */
+
+void X509V3_conf_free(CONF_VALUE *conf)
+{
+    if (!conf)
+        return;
+    OPENSSL_free(conf->name);
+    OPENSSL_free(conf->value);
+    OPENSSL_free(conf->section);
+    OPENSSL_free(conf);
+}
+
+int X509V3_add_value_bool(const char *name, int asn1_bool,
+                          STACK_OF(CONF_VALUE) **extlist)
+{
+    if (asn1_bool)
+        return X509V3_add_value(name, "TRUE", extlist);
+    return X509V3_add_value(name, "FALSE", extlist);
+}
+
+int X509V3_add_value_bool_nf(const char *name, int asn1_bool,
+                             STACK_OF(CONF_VALUE) **extlist)
+{
+    if (asn1_bool)
+        return X509V3_add_value(name, "TRUE", extlist);
+    return 1;
+}
+
+static char *bignum_to_string(const BIGNUM *bn)
+{
+    char *tmp, *ret;
+    size_t len;
+
+    /*
+     * Display large numbers in hex and small numbers in decimal. Converting to
+     * decimal takes quadratic time and is no more useful than hex for large
+     * numbers.
+     */
+    if (BN_num_bits(bn) < 128)
+        return BN_bn2dec(bn);
+
+    tmp = BN_bn2hex(bn);
+    if (tmp == NULL)
+        return NULL;
+
+    len = strlen(tmp) + 3;
+    ret = OPENSSL_malloc(len);
+    if (ret == NULL) {
+        X509V3err(X509V3_F_BIGNUM_TO_STRING, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(tmp);
+        return NULL;
+    }
+
+    /* Prepend "0x", but place it after the "-" if negative. */
+    if (tmp[0] == '-') {
+        OPENSSL_strlcpy(ret, "-0x", len);
+        OPENSSL_strlcat(ret, tmp + 1, len);
+    } else {
+        OPENSSL_strlcpy(ret, "0x", len);
+        OPENSSL_strlcat(ret, tmp, len);
+    }
+    OPENSSL_free(tmp);
+    return ret;
+}
+
+char *i2s_ASN1_ENUMERATED(X509V3_EXT_METHOD *method, const ASN1_ENUMERATED *a)
+{
+    BIGNUM *bntmp = NULL;
+    char *strtmp = NULL;
+
+    if (!a)
+        return NULL;
+    if ((bntmp = ASN1_ENUMERATED_to_BN(a, NULL)) == NULL
+        || (strtmp = bignum_to_string(bntmp)) == NULL)
+        X509V3err(X509V3_F_I2S_ASN1_ENUMERATED, ERR_R_MALLOC_FAILURE);
+    BN_free(bntmp);
+    return strtmp;
+}
+
+char *i2s_ASN1_INTEGER(X509V3_EXT_METHOD *method, const ASN1_INTEGER *a)
+{
+    BIGNUM *bntmp = NULL;
+    char *strtmp = NULL;
+
+    if (!a)
+        return NULL;
+    if ((bntmp = ASN1_INTEGER_to_BN(a, NULL)) == NULL
+        || (strtmp = bignum_to_string(bntmp)) == NULL)
+        X509V3err(X509V3_F_I2S_ASN1_INTEGER, ERR_R_MALLOC_FAILURE);
+    BN_free(bntmp);
+    return strtmp;
+}
+
+ASN1_INTEGER *s2i_ASN1_INTEGER(X509V3_EXT_METHOD *method, const char *value)
+{
+    BIGNUM *bn = NULL;
+    ASN1_INTEGER *aint;
+    int isneg, ishex;
+    int ret;
+    if (value == NULL) {
+        X509V3err(X509V3_F_S2I_ASN1_INTEGER, X509V3_R_INVALID_NULL_VALUE);
+        return NULL;
+    }
+    bn = BN_new();
+    if (bn == NULL) {
+        X509V3err(X509V3_F_S2I_ASN1_INTEGER, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    if (value[0] == '-') {
+        value++;
+        isneg = 1;
+    } else
+        isneg = 0;
+
+    if (value[0] == '0' && ((value[1] == 'x') || (value[1] == 'X'))) {
+        value += 2;
+        ishex = 1;
+    } else
+        ishex = 0;
+
+    if (ishex)
+        ret = BN_hex2bn(&bn, value);
+    else
+        ret = BN_dec2bn(&bn, value);
+
+    if (!ret || value[ret]) {
+        BN_free(bn);
+        X509V3err(X509V3_F_S2I_ASN1_INTEGER, X509V3_R_BN_DEC2BN_ERROR);
+        return NULL;
+    }
+
+    if (isneg && BN_is_zero(bn))
+        isneg = 0;
+
+    aint = BN_to_ASN1_INTEGER(bn, NULL);
+    BN_free(bn);
+    if (!aint) {
+        X509V3err(X509V3_F_S2I_ASN1_INTEGER,
+                  X509V3_R_BN_TO_ASN1_INTEGER_ERROR);
+        return NULL;
+    }
+    if (isneg)
+        aint->type |= V_ASN1_NEG;
+    return aint;
+}
+
+int X509V3_add_value_int(const char *name, const ASN1_INTEGER *aint,
+                         STACK_OF(CONF_VALUE) **extlist)
+{
+    char *strtmp;
+    int ret;
+
+    if (!aint)
+        return 1;
+    if ((strtmp = i2s_ASN1_INTEGER(NULL, aint)) == NULL)
+        return 0;
+    ret = X509V3_add_value(name, strtmp, extlist);
+    OPENSSL_free(strtmp);
+    return ret;
+}
+
+int X509V3_get_value_bool(const CONF_VALUE *value, int *asn1_bool)
+{
+    const char *btmp;
+
+    if ((btmp = value->value) == NULL)
+        goto err;
+    if (strcmp(btmp, "TRUE") == 0
+        || strcmp(btmp, "true") == 0
+        || strcmp(btmp, "Y") == 0
+        || strcmp(btmp, "y") == 0
+        || strcmp(btmp, "YES") == 0
+        || strcmp(btmp, "yes") == 0) {
+        *asn1_bool = 0xff;
+        return 1;
+    }
+    if (strcmp(btmp, "FALSE") == 0
+        || strcmp(btmp, "false") == 0
+        || strcmp(btmp, "N") == 0
+        || strcmp(btmp, "n") == 0
+        || strcmp(btmp, "NO") == 0
+        || strcmp(btmp, "no") == 0) {
+        *asn1_bool = 0;
+        return 1;
+    }
+ err:
+    X509V3err(X509V3_F_X509V3_GET_VALUE_BOOL,
+              X509V3_R_INVALID_BOOLEAN_STRING);
+    X509V3_conf_err(value);
+    return 0;
+}
+
+int X509V3_get_value_int(const CONF_VALUE *value, ASN1_INTEGER **aint)
+{
+    ASN1_INTEGER *itmp;
+
+    if ((itmp = s2i_ASN1_INTEGER(NULL, value->value)) == NULL) {
+        X509V3_conf_err(value);
+        return 0;
+    }
+    *aint = itmp;
+    return 1;
+}
+
+#define HDR_NAME        1
+#define HDR_VALUE       2
+
+/*
+ * #define DEBUG
+ */
+
+STACK_OF(CONF_VALUE) *X509V3_parse_list(const char *line)
+{
+    char *p, *q, c;
+    char *ntmp, *vtmp;
+    STACK_OF(CONF_VALUE) *values = NULL;
+    char *linebuf;
+    int state;
+    /* We are going to modify the line so copy it first */
+    linebuf = OPENSSL_strdup(line);
+    if (linebuf == NULL) {
+        X509V3err(X509V3_F_X509V3_PARSE_LIST, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    state = HDR_NAME;
+    ntmp = NULL;
+    /* Go through all characters */
+    for (p = linebuf, q = linebuf; (c = *p) && (c != '\r') && (c != '\n');
+         p++) {
+
+        switch (state) {
+        case HDR_NAME:
+            if (c == ':') {
+                state = HDR_VALUE;
+                *p = 0;
+                ntmp = strip_spaces(q);
+                if (!ntmp) {
+                    X509V3err(X509V3_F_X509V3_PARSE_LIST,
+                              X509V3_R_INVALID_NULL_NAME);
+                    goto err;
+                }
+                q = p + 1;
+            } else if (c == ',') {
+                *p = 0;
+                ntmp = strip_spaces(q);
+                q = p + 1;
+                if (!ntmp) {
+                    X509V3err(X509V3_F_X509V3_PARSE_LIST,
+                              X509V3_R_INVALID_NULL_NAME);
+                    goto err;
+                }
+                X509V3_add_value(ntmp, NULL, &values);
+            }
+            break;
+
+        case HDR_VALUE:
+            if (c == ',') {
+                state = HDR_NAME;
+                *p = 0;
+                vtmp = strip_spaces(q);
+                if (!vtmp) {
+                    X509V3err(X509V3_F_X509V3_PARSE_LIST,
+                              X509V3_R_INVALID_NULL_VALUE);
+                    goto err;
+                }
+                X509V3_add_value(ntmp, vtmp, &values);
+                ntmp = NULL;
+                q = p + 1;
+            }
+
+        }
+    }
+
+    if (state == HDR_VALUE) {
+        vtmp = strip_spaces(q);
+        if (!vtmp) {
+            X509V3err(X509V3_F_X509V3_PARSE_LIST,
+                      X509V3_R_INVALID_NULL_VALUE);
+            goto err;
+        }
+        X509V3_add_value(ntmp, vtmp, &values);
+    } else {
+        ntmp = strip_spaces(q);
+        if (!ntmp) {
+            X509V3err(X509V3_F_X509V3_PARSE_LIST, X509V3_R_INVALID_NULL_NAME);
+            goto err;
+        }
+        X509V3_add_value(ntmp, NULL, &values);
+    }
+    OPENSSL_free(linebuf);
+    return values;
+
+ err:
+    OPENSSL_free(linebuf);
+    sk_CONF_VALUE_pop_free(values, X509V3_conf_free);
+    return NULL;
+
+}
+
+/* Delete leading and trailing spaces from a string */
+static char *strip_spaces(char *name)
+{
+    char *p, *q;
+    /* Skip over leading spaces */
+    p = name;
+    while (*p && ossl_isspace(*p))
+        p++;
+    if (!*p)
+        return NULL;
+    q = p + strlen(p) - 1;
+    while ((q != p) && ossl_isspace(*q))
+        q--;
+    if (p != q)
+        q[1] = 0;
+    if (!*p)
+        return NULL;
+    return p;
+}
+
+
+/*
+ * V2I name comparison function: returns zero if 'name' matches cmp or cmp.*
+ */
+
+int name_cmp(const char *name, const char *cmp)
+{
+    int len, ret;
+    char c;
+    len = strlen(cmp);
+    if ((ret = strncmp(name, cmp, len)))
+        return ret;
+    c = name[len];
+    if (!c || (c == '.'))
+        return 0;
+    return 1;
+}
+
+static int sk_strcmp(const char *const *a, const char *const *b)
+{
+    return strcmp(*a, *b);
+}
+
+STACK_OF(OPENSSL_STRING) *X509_get1_email(X509 *x)
+{
+    GENERAL_NAMES *gens;
+    STACK_OF(OPENSSL_STRING) *ret;
+
+    gens = X509_get_ext_d2i(x, NID_subject_alt_name, NULL, NULL);
+    ret = get_email(X509_get_subject_name(x), gens);
+    sk_GENERAL_NAME_pop_free(gens, GENERAL_NAME_free);
+    return ret;
+}
+
+STACK_OF(OPENSSL_STRING) *X509_get1_ocsp(X509 *x)
+{
+    AUTHORITY_INFO_ACCESS *info;
+    STACK_OF(OPENSSL_STRING) *ret = NULL;
+    int i;
+
+    info = X509_get_ext_d2i(x, NID_info_access, NULL, NULL);
+    if (!info)
+        return NULL;
+    for (i = 0; i < sk_ACCESS_DESCRIPTION_num(info); i++) {
+        ACCESS_DESCRIPTION *ad = sk_ACCESS_DESCRIPTION_value(info, i);
+        if (OBJ_obj2nid(ad->method) == NID_ad_OCSP) {
+            if (ad->location->type == GEN_URI) {
+                if (!append_ia5
+                    (&ret, ad->location->d.uniformResourceIdentifier))
+                    break;
+            }
+        }
+    }
+    AUTHORITY_INFO_ACCESS_free(info);
+    return ret;
+}
+
+STACK_OF(OPENSSL_STRING) *X509_REQ_get1_email(X509_REQ *x)
+{
+    GENERAL_NAMES *gens;
+    STACK_OF(X509_EXTENSION) *exts;
+    STACK_OF(OPENSSL_STRING) *ret;
+
+    exts = X509_REQ_get_extensions(x);
+    gens = X509V3_get_d2i(exts, NID_subject_alt_name, NULL, NULL);
+    ret = get_email(X509_REQ_get_subject_name(x), gens);
+    sk_GENERAL_NAME_pop_free(gens, GENERAL_NAME_free);
+    sk_X509_EXTENSION_pop_free(exts, X509_EXTENSION_free);
+    return ret;
+}
+
+static STACK_OF(OPENSSL_STRING) *get_email(X509_NAME *name,
+                                           GENERAL_NAMES *gens)
+{
+    STACK_OF(OPENSSL_STRING) *ret = NULL;
+    X509_NAME_ENTRY *ne;
+    const ASN1_IA5STRING *email;
+    GENERAL_NAME *gen;
+    int i = -1;
+
+    /* Now add any email address(es) to STACK */
+    /* First supplied X509_NAME */
+    while ((i = X509_NAME_get_index_by_NID(name,
+                                           NID_pkcs9_emailAddress, i)) >= 0) {
+        ne = X509_NAME_get_entry(name, i);
+        email = X509_NAME_ENTRY_get_data(ne);
+        if (!append_ia5(&ret, email))
+            return NULL;
+    }
+    for (i = 0; i < sk_GENERAL_NAME_num(gens); i++) {
+        gen = sk_GENERAL_NAME_value(gens, i);
+        if (gen->type != GEN_EMAIL)
+            continue;
+        if (!append_ia5(&ret, gen->d.ia5))
+            return NULL;
+    }
+    return ret;
+}
+
+static void str_free(OPENSSL_STRING str)
+{
+    OPENSSL_free(str);
+}
+
+static int append_ia5(STACK_OF(OPENSSL_STRING) **sk, const ASN1_IA5STRING *email)
+{
+    char *emtmp;
+    /* First some sanity checks */
+    if (email->type != V_ASN1_IA5STRING)
+        return 1;
+    if (!email->data || !email->length)
+        return 1;
+    if (*sk == NULL)
+        *sk = sk_OPENSSL_STRING_new(sk_strcmp);
+    if (*sk == NULL)
+        return 0;
+    /* Don't add duplicates */
+    if (sk_OPENSSL_STRING_find(*sk, (char *)email->data) != -1)
+        return 1;
+    emtmp = OPENSSL_strdup((char *)email->data);
+    if (emtmp == NULL || !sk_OPENSSL_STRING_push(*sk, emtmp)) {
+        OPENSSL_free(emtmp);    /* free on push failure */
+        X509_email_free(*sk);
+        *sk = NULL;
+        return 0;
+    }
+    return 1;
+}
+
+void X509_email_free(STACK_OF(OPENSSL_STRING) *sk)
+{
+    sk_OPENSSL_STRING_pop_free(sk, str_free);
+}
+
+typedef int (*equal_fn) (const unsigned char *pattern, size_t pattern_len,
+                         const unsigned char *subject, size_t subject_len,
+                         unsigned int flags);
+
+/* Skip pattern prefix to match "wildcard" subject */
+static void skip_prefix(const unsigned char **p, size_t *plen,
+                        size_t subject_len,
+                        unsigned int flags)
+{
+    const unsigned char *pattern = *p;
+    size_t pattern_len = *plen;
+
+    /*
+     * If subject starts with a leading '.' followed by more octets, and
+     * pattern is longer, compare just an equal-length suffix with the
+     * full subject (starting at the '.'), provided the prefix contains
+     * no NULs.
+     */
+    if ((flags & _X509_CHECK_FLAG_DOT_SUBDOMAINS) == 0)
+        return;
+
+    while (pattern_len > subject_len && *pattern) {
+        if ((flags & X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS) &&
+            *pattern == '.')
+            break;
+        ++pattern;
+        --pattern_len;
+    }
+
+    /* Skip if entire prefix acceptable */
+    if (pattern_len == subject_len) {
+        *p = pattern;
+        *plen = pattern_len;
+    }
+}
+
+/* Compare while ASCII ignoring case. */
+static int equal_nocase(const unsigned char *pattern, size_t pattern_len,
+                        const unsigned char *subject, size_t subject_len,
+                        unsigned int flags)
+{
+    skip_prefix(&pattern, &pattern_len, subject_len, flags);
+    if (pattern_len != subject_len)
+        return 0;
+    while (pattern_len) {
+        unsigned char l = *pattern;
+        unsigned char r = *subject;
+        /* The pattern must not contain NUL characters. */
+        if (l == 0)
+            return 0;
+        if (l != r) {
+            if ('A' <= l && l <= 'Z')
+                l = (l - 'A') + 'a';
+            if ('A' <= r && r <= 'Z')
+                r = (r - 'A') + 'a';
+            if (l != r)
+                return 0;
+        }
+        ++pattern;
+        ++subject;
+        --pattern_len;
+    }
+    return 1;
+}
+
+/* Compare using memcmp. */
+static int equal_case(const unsigned char *pattern, size_t pattern_len,
+                      const unsigned char *subject, size_t subject_len,
+                      unsigned int flags)
+{
+    skip_prefix(&pattern, &pattern_len, subject_len, flags);
+    if (pattern_len != subject_len)
+        return 0;
+    return !memcmp(pattern, subject, pattern_len);
+}
+
+/*
+ * RFC 5280, section 7.5, requires that only the domain is compared in a
+ * case-insensitive manner.
+ */
+static int equal_email(const unsigned char *a, size_t a_len,
+                       const unsigned char *b, size_t b_len,
+                       unsigned int unused_flags)
+{
+    size_t i = a_len;
+    if (a_len != b_len)
+        return 0;
+    /*
+     * We search backwards for the '@' character, so that we do not have to
+     * deal with quoted local-parts.  The domain part is compared in a
+     * case-insensitive manner.
+     */
+    while (i > 0) {
+        --i;
+        if (a[i] == '@' || b[i] == '@') {
+            if (!equal_nocase(a + i, a_len - i, b + i, a_len - i, 0))
+                return 0;
+            break;
+        }
+    }
+    if (i == 0)
+        i = a_len;
+    return equal_case(a, i, b, i, 0);
+}
+
+/*
+ * Compare the prefix and suffix with the subject, and check that the
+ * characters in-between are valid.
+ */
+static int wildcard_match(const unsigned char *prefix, size_t prefix_len,
+                          const unsigned char *suffix, size_t suffix_len,
+                          const unsigned char *subject, size_t subject_len,
+                          unsigned int flags)
+{
+    const unsigned char *wildcard_start;
+    const unsigned char *wildcard_end;
+    const unsigned char *p;
+    int allow_multi = 0;
+    int allow_idna = 0;
+
+    if (subject_len < prefix_len + suffix_len)
+        return 0;
+    if (!equal_nocase(prefix, prefix_len, subject, prefix_len, flags))
+        return 0;
+    wildcard_start = subject + prefix_len;
+    wildcard_end = subject + (subject_len - suffix_len);
+    if (!equal_nocase(wildcard_end, suffix_len, suffix, suffix_len, flags))
+        return 0;
+    /*
+     * If the wildcard makes up the entire first label, it must match at
+     * least one character.
+     */
+    if (prefix_len == 0 && *suffix == '.') {
+        if (wildcard_start == wildcard_end)
+            return 0;
+        allow_idna = 1;
+        if (flags & X509_CHECK_FLAG_MULTI_LABEL_WILDCARDS)
+            allow_multi = 1;
+    }
+    /* IDNA labels cannot match partial wildcards */
+    if (!allow_idna &&
+        subject_len >= 4 && strncasecmp((char *)subject, "xn--", 4) == 0)
+        return 0;
+    /* The wildcard may match a literal '*' */
+    if (wildcard_end == wildcard_start + 1 && *wildcard_start == '*')
+        return 1;
+    /*
+     * Check that the part matched by the wildcard contains only
+     * permitted characters and only matches a single label unless
+     * allow_multi is set.
+     */
+    for (p = wildcard_start; p != wildcard_end; ++p)
+        if (!(('0' <= *p && *p <= '9') ||
+              ('A' <= *p && *p <= 'Z') ||
+              ('a' <= *p && *p <= 'z') ||
+              *p == '-' || (allow_multi && *p == '.')))
+            return 0;
+    return 1;
+}
+
+#define LABEL_START     (1 << 0)
+#define LABEL_END       (1 << 1)
+#define LABEL_HYPHEN    (1 << 2)
+#define LABEL_IDNA      (1 << 3)
+
+static const unsigned char *valid_star(const unsigned char *p, size_t len,
+                                       unsigned int flags)
+{
+    const unsigned char *star = 0;
+    size_t i;
+    int state = LABEL_START;
+    int dots = 0;
+    for (i = 0; i < len; ++i) {
+        /*
+         * Locate first and only legal wildcard, either at the start
+         * or end of a non-IDNA first and not final label.
+         */
+        if (p[i] == '*') {
+            int atstart = (state & LABEL_START);
+            int atend = (i == len - 1 || p[i + 1] == '.');
+            /*-
+             * At most one wildcard per pattern.
+             * No wildcards in IDNA labels.
+             * No wildcards after the first label.
+             */
+            if (star != NULL || (state & LABEL_IDNA) != 0 || dots)
+                return NULL;
+            /* Only full-label '*.example.com' wildcards? */
+            if ((flags & X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS)
+                && (!atstart || !atend))
+                return NULL;
+            /* No 'foo*bar' wildcards */
+            if (!atstart && !atend)
+                return NULL;
+            star = &p[i];
+            state &= ~LABEL_START;
+        } else if (('a' <= p[i] && p[i] <= 'z')
+                   || ('A' <= p[i] && p[i] <= 'Z')
+                   || ('0' <= p[i] && p[i] <= '9')) {
+            if ((state & LABEL_START) != 0
+                && len - i >= 4 && strncasecmp((char *)&p[i], "xn--", 4) == 0)
+                state |= LABEL_IDNA;
+            state &= ~(LABEL_HYPHEN | LABEL_START);
+        } else if (p[i] == '.') {
+            if ((state & (LABEL_HYPHEN | LABEL_START)) != 0)
+                return NULL;
+            state = LABEL_START;
+            ++dots;
+        } else if (p[i] == '-') {
+            /* no domain/subdomain starts with '-' */
+            if ((state & LABEL_START) != 0)
+                return NULL;
+            state |= LABEL_HYPHEN;
+        } else
+            return NULL;
+    }
+
+    /*
+     * The final label must not end in a hyphen or ".", and
+     * there must be at least two dots after the star.
+     */
+    if ((state & (LABEL_START | LABEL_HYPHEN)) != 0 || dots < 2)
+        return NULL;
+    return star;
+}
+
+/* Compare using wildcards. */
+static int equal_wildcard(const unsigned char *pattern, size_t pattern_len,
+                          const unsigned char *subject, size_t subject_len,
+                          unsigned int flags)
+{
+    const unsigned char *star = NULL;
+
+    /*
+     * Subject names starting with '.' can only match a wildcard pattern
+     * via a subject sub-domain pattern suffix match.
+     */
+    if (!(subject_len > 1 && subject[0] == '.'))
+        star = valid_star(pattern, pattern_len, flags);
+    if (star == NULL)
+        return equal_nocase(pattern, pattern_len,
+                            subject, subject_len, flags);
+    return wildcard_match(pattern, star - pattern,
+                          star + 1, (pattern + pattern_len) - star - 1,
+                          subject, subject_len, flags);
+}
+
+/*
+ * Compare an ASN1_STRING to a supplied string. If they match return 1. If
+ * cmp_type > 0 only compare if string matches the type, otherwise convert it
+ * to UTF8.
+ */
+
+static int do_check_string(const ASN1_STRING *a, int cmp_type, equal_fn equal,
+                           unsigned int flags, const char *b, size_t blen,
+                           char **peername)
+{
+    int rv = 0;
+
+    if (!a->data || !a->length)
+        return 0;
+    if (cmp_type > 0) {
+        if (cmp_type != a->type)
+            return 0;
+        if (cmp_type == V_ASN1_IA5STRING)
+            rv = equal(a->data, a->length, (unsigned char *)b, blen, flags);
+        else if (a->length == (int)blen && !memcmp(a->data, b, blen))
+            rv = 1;
+        if (rv > 0 && peername)
+            *peername = OPENSSL_strndup((char *)a->data, a->length);
+    } else {
+        int astrlen;
+        unsigned char *astr;
+        astrlen = ASN1_STRING_to_UTF8(&astr, a);
+        if (astrlen < 0) {
+            /*
+             * -1 could be an internal malloc failure or a decoding error from
+             * malformed input; we can't distinguish.
+             */
+            return -1;
+        }
+        rv = equal(astr, astrlen, (unsigned char *)b, blen, flags);
+        if (rv > 0 && peername)
+            *peername = OPENSSL_strndup((char *)astr, astrlen);
+        OPENSSL_free(astr);
+    }
+    return rv;
+}
+
+static int do_x509_check(X509 *x, const char *chk, size_t chklen,
+                         unsigned int flags, int check_type, char **peername)
+{
+    GENERAL_NAMES *gens = NULL;
+    X509_NAME *name = NULL;
+    int i;
+    int cnid = NID_undef;
+    int alt_type;
+    int san_present = 0;
+    int rv = 0;
+    equal_fn equal;
+
+    /* See below, this flag is internal-only */
+    flags &= ~_X509_CHECK_FLAG_DOT_SUBDOMAINS;
+    if (check_type == GEN_EMAIL) {
+        cnid = NID_pkcs9_emailAddress;
+        alt_type = V_ASN1_IA5STRING;
+        equal = equal_email;
+    } else if (check_type == GEN_DNS) {
+        cnid = NID_commonName;
+        /* Implicit client-side DNS sub-domain pattern */
+        if (chklen > 1 && chk[0] == '.')
+            flags |= _X509_CHECK_FLAG_DOT_SUBDOMAINS;
+        alt_type = V_ASN1_IA5STRING;
+        if (flags & X509_CHECK_FLAG_NO_WILDCARDS)
+            equal = equal_nocase;
+        else
+            equal = equal_wildcard;
+    } else {
+        alt_type = V_ASN1_OCTET_STRING;
+        equal = equal_case;
+    }
+
+    if (chklen == 0)
+        chklen = strlen(chk);
+
+    gens = X509_get_ext_d2i(x, NID_subject_alt_name, NULL, NULL);
+    if (gens) {
+        for (i = 0; i < sk_GENERAL_NAME_num(gens); i++) {
+            GENERAL_NAME *gen;
+            ASN1_STRING *cstr;
+            gen = sk_GENERAL_NAME_value(gens, i);
+            if (gen->type != check_type)
+                continue;
+            san_present = 1;
+            if (check_type == GEN_EMAIL)
+                cstr = gen->d.rfc822Name;
+            else if (check_type == GEN_DNS)
+                cstr = gen->d.dNSName;
+            else
+                cstr = gen->d.iPAddress;
+            /* Positive on success, negative on error! */
+            if ((rv = do_check_string(cstr, alt_type, equal, flags,
+                                      chk, chklen, peername)) != 0)
+                break;
+        }
+        GENERAL_NAMES_free(gens);
+        if (rv != 0)
+            return rv;
+        if (san_present && !(flags & X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT))
+            return 0;
+    }
+
+    /* We're done if CN-ID is not pertinent */
+    if (cnid == NID_undef || (flags & X509_CHECK_FLAG_NEVER_CHECK_SUBJECT))
+        return 0;
+
+    i = -1;
+    name = X509_get_subject_name(x);
+    while ((i = X509_NAME_get_index_by_NID(name, cnid, i)) >= 0) {
+        const X509_NAME_ENTRY *ne = X509_NAME_get_entry(name, i);
+        const ASN1_STRING *str = X509_NAME_ENTRY_get_data(ne);
+
+        /* Positive on success, negative on error! */
+        if ((rv = do_check_string(str, -1, equal, flags,
+                                  chk, chklen, peername)) != 0)
+            return rv;
+    }
+    return 0;
+}
+
+int X509_check_host(X509 *x, const char *chk, size_t chklen,
+                    unsigned int flags, char **peername)
+{
+    if (chk == NULL)
+        return -2;
+    /*
+     * Embedded NULs are disallowed, except as the last character of a
+     * string of length 2 or more (tolerate caller including terminating
+     * NUL in string length).
+     */
+    if (chklen == 0)
+        chklen = strlen(chk);
+    else if (memchr(chk, '\0', chklen > 1 ? chklen - 1 : chklen))
+        return -2;
+    if (chklen > 1 && chk[chklen - 1] == '\0')
+        --chklen;
+    return do_x509_check(x, chk, chklen, flags, GEN_DNS, peername);
+}
+
+int X509_check_email(X509 *x, const char *chk, size_t chklen,
+                     unsigned int flags)
+{
+    if (chk == NULL)
+        return -2;
+    /*
+     * Embedded NULs are disallowed, except as the last character of a
+     * string of length 2 or more (tolerate caller including terminating
+     * NUL in string length).
+     */
+    if (chklen == 0)
+        chklen = strlen((char *)chk);
+    else if (memchr(chk, '\0', chklen > 1 ? chklen - 1 : chklen))
+        return -2;
+    if (chklen > 1 && chk[chklen - 1] == '\0')
+        --chklen;
+    return do_x509_check(x, chk, chklen, flags, GEN_EMAIL, NULL);
+}
+
+int X509_check_ip(X509 *x, const unsigned char *chk, size_t chklen,
+                  unsigned int flags)
+{
+    if (chk == NULL)
+        return -2;
+    return do_x509_check(x, (char *)chk, chklen, flags, GEN_IPADD, NULL);
+}
+
+int X509_check_ip_asc(X509 *x, const char *ipasc, unsigned int flags)
+{
+    unsigned char ipout[16];
+    size_t iplen;
+
+    if (ipasc == NULL)
+        return -2;
+    iplen = (size_t)a2i_ipadd(ipout, ipasc);
+    if (iplen == 0)
+        return -2;
+    return do_x509_check(x, (char *)ipout, iplen, flags, GEN_IPADD, NULL);
+}
+
+/*
+ * Convert IP addresses both IPv4 and IPv6 into an OCTET STRING compatible
+ * with RFC3280.
+ */
+
+ASN1_OCTET_STRING *a2i_IPADDRESS(const char *ipasc)
+{
+    unsigned char ipout[16];
+    ASN1_OCTET_STRING *ret;
+    int iplen;
+
+    /* If string contains a ':' assume IPv6 */
+
+    iplen = a2i_ipadd(ipout, ipasc);
+
+    if (!iplen)
+        return NULL;
+
+    ret = ASN1_OCTET_STRING_new();
+    if (ret == NULL)
+        return NULL;
+    if (!ASN1_OCTET_STRING_set(ret, ipout, iplen)) {
+        ASN1_OCTET_STRING_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+ASN1_OCTET_STRING *a2i_IPADDRESS_NC(const char *ipasc)
+{
+    ASN1_OCTET_STRING *ret = NULL;
+    unsigned char ipout[32];
+    char *iptmp = NULL, *p;
+    int iplen1, iplen2;
+    p = strchr(ipasc, '/');
+    if (!p)
+        return NULL;
+    iptmp = OPENSSL_strdup(ipasc);
+    if (!iptmp)
+        return NULL;
+    p = iptmp + (p - ipasc);
+    *p++ = 0;
+
+    iplen1 = a2i_ipadd(ipout, iptmp);
+
+    if (!iplen1)
+        goto err;
+
+    iplen2 = a2i_ipadd(ipout + iplen1, p);
+
+    OPENSSL_free(iptmp);
+    iptmp = NULL;
+
+    if (!iplen2 || (iplen1 != iplen2))
+        goto err;
+
+    ret = ASN1_OCTET_STRING_new();
+    if (ret == NULL)
+        goto err;
+    if (!ASN1_OCTET_STRING_set(ret, ipout, iplen1 + iplen2))
+        goto err;
+
+    return ret;
+
+ err:
+    OPENSSL_free(iptmp);
+    ASN1_OCTET_STRING_free(ret);
+    return NULL;
+}
+
+int a2i_ipadd(unsigned char *ipout, const char *ipasc)
+{
+    /* If string contains a ':' assume IPv6 */
+
+    if (strchr(ipasc, ':')) {
+        if (!ipv6_from_asc(ipout, ipasc))
+            return 0;
+        return 16;
+    } else {
+        if (!ipv4_from_asc(ipout, ipasc))
+            return 0;
+        return 4;
+    }
+}
+
+static int ipv4_from_asc(unsigned char *v4, const char *in)
+{
+    int a0, a1, a2, a3;
+    if (sscanf(in, "%d.%d.%d.%d", &a0, &a1, &a2, &a3) != 4)
+        return 0;
+    if ((a0 < 0) || (a0 > 255) || (a1 < 0) || (a1 > 255)
+        || (a2 < 0) || (a2 > 255) || (a3 < 0) || (a3 > 255))
+        return 0;
+    v4[0] = a0;
+    v4[1] = a1;
+    v4[2] = a2;
+    v4[3] = a3;
+    return 1;
+}
+
+typedef struct {
+    /* Temporary store for IPV6 output */
+    unsigned char tmp[16];
+    /* Total number of bytes in tmp */
+    int total;
+    /* The position of a zero (corresponding to '::') */
+    int zero_pos;
+    /* Number of zeroes */
+    int zero_cnt;
+} IPV6_STAT;
+
+static int ipv6_from_asc(unsigned char *v6, const char *in)
+{
+    IPV6_STAT v6stat;
+    v6stat.total = 0;
+    v6stat.zero_pos = -1;
+    v6stat.zero_cnt = 0;
+    /*
+     * Treat the IPv6 representation as a list of values separated by ':'.
+     * The presence of a '::' will parse as one, two or three zero length
+     * elements.
+     */
+    if (!CONF_parse_list(in, ':', 0, ipv6_cb, &v6stat))
+        return 0;
+
+    /* Now for some sanity checks */
+
+    if (v6stat.zero_pos == -1) {
+        /* If no '::' must have exactly 16 bytes */
+        if (v6stat.total != 16)
+            return 0;
+    } else {
+        /* If '::' must have less than 16 bytes */
+        if (v6stat.total == 16)
+            return 0;
+        /* More than three zeroes is an error */
+        if (v6stat.zero_cnt > 3)
+            return 0;
+        /* Can only have three zeroes if nothing else present */
+        else if (v6stat.zero_cnt == 3) {
+            if (v6stat.total > 0)
+                return 0;
+        }
+        /* Can only have two zeroes if at start or end */
+        else if (v6stat.zero_cnt == 2) {
+            if ((v6stat.zero_pos != 0)
+                && (v6stat.zero_pos != v6stat.total))
+                return 0;
+        } else
+            /* Can only have one zero if *not* start or end */
+        {
+            if ((v6stat.zero_pos == 0)
+                || (v6stat.zero_pos == v6stat.total))
+                return 0;
+        }
+    }
+
+    /* Format result */
+
+    if (v6stat.zero_pos >= 0) {
+        /* Copy initial part */
+        memcpy(v6, v6stat.tmp, v6stat.zero_pos);
+        /* Zero middle */
+        memset(v6 + v6stat.zero_pos, 0, 16 - v6stat.total);
+        /* Copy final part */
+        if (v6stat.total != v6stat.zero_pos)
+            memcpy(v6 + v6stat.zero_pos + 16 - v6stat.total,
+                   v6stat.tmp + v6stat.zero_pos,
+                   v6stat.total - v6stat.zero_pos);
+    } else
+        memcpy(v6, v6stat.tmp, 16);
+
+    return 1;
+}
+
+static int ipv6_cb(const char *elem, int len, void *usr)
+{
+    IPV6_STAT *s = usr;
+    /* Error if 16 bytes written */
+    if (s->total == 16)
+        return 0;
+    if (len == 0) {
+        /* Zero length element, corresponds to '::' */
+        if (s->zero_pos == -1)
+            s->zero_pos = s->total;
+        /* If we've already got a :: its an error */
+        else if (s->zero_pos != s->total)
+            return 0;
+        s->zero_cnt++;
+    } else {
+        /* If more than 4 characters could be final a.b.c.d form */
+        if (len > 4) {
+            /* Need at least 4 bytes left */
+            if (s->total > 12)
+                return 0;
+            /* Must be end of string */
+            if (elem[len])
+                return 0;
+            if (!ipv4_from_asc(s->tmp + s->total, elem))
+                return 0;
+            s->total += 4;
+        } else {
+            if (!ipv6_hex(s->tmp + s->total, elem, len))
+                return 0;
+            s->total += 2;
+        }
+    }
+    return 1;
+}
+
+/*
+ * Convert a string of up to 4 hex digits into the corresponding IPv6 form.
+ */
+
+static int ipv6_hex(unsigned char *out, const char *in, int inlen)
+{
+    unsigned char c;
+    unsigned int num = 0;
+    int x;
+
+    if (inlen > 4)
+        return 0;
+    while (inlen--) {
+        c = *in++;
+        num <<= 4;
+        x = OPENSSL_hexchar2int(c);
+        if (x < 0)
+            return 0;
+        num |= (char)x;
+    }
+    out[0] = num >> 8;
+    out[1] = num & 0xff;
+    return 1;
+}
+
+int X509V3_NAME_from_section(X509_NAME *nm, STACK_OF(CONF_VALUE) *dn_sk,
+                             unsigned long chtype)
+{
+    CONF_VALUE *v;
+    int i, mval, spec_char, plus_char;
+    char *p, *type;
+    if (!nm)
+        return 0;
+
+    for (i = 0; i < sk_CONF_VALUE_num(dn_sk); i++) {
+        v = sk_CONF_VALUE_value(dn_sk, i);
+        type = v->name;
+        /*
+         * Skip past any leading X. X: X, etc to allow for multiple instances
+         */
+        for (p = type; *p; p++) {
+#ifndef CHARSET_EBCDIC
+            spec_char = ((*p == ':') || (*p == ',') || (*p == '.'));
+#else
+            spec_char = ((*p == os_toascii[':']) || (*p == os_toascii[','])
+                    || (*p == os_toascii['.']));
+#endif
+            if (spec_char) {
+                p++;
+                if (*p)
+                    type = p;
+                break;
+            }
+        }
+#ifndef CHARSET_EBCDIC
+        plus_char = (*type == '+');
+#else
+        plus_char = (*type == os_toascii['+']);
+#endif
+        if (plus_char) {
+            mval = -1;
+            type++;
+        } else
+            mval = 0;
+        if (!X509_NAME_add_entry_by_txt(nm, type, chtype,
+                                        (unsigned char *)v->value, -1, -1,
+                                        mval))
+            return 0;
+
+    }
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3err.c b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3err.c
new file mode 100644
index 000000000..4f2ea52a4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x509v3/v3err.c
@@ -0,0 +1,257 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/x509v3err.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA X509V3_str_functs[] = {
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_A2I_GENERAL_NAME, 0),
+     "a2i_GENERAL_NAME"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_ADDR_VALIDATE_PATH_INTERNAL, 0),
+     "addr_validate_path_internal"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_ASIDENTIFIERCHOICE_CANONIZE, 0),
+     "ASIdentifierChoice_canonize"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_ASIDENTIFIERCHOICE_IS_CANONICAL, 0),
+     "ASIdentifierChoice_is_canonical"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_BIGNUM_TO_STRING, 0),
+     "bignum_to_string"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_COPY_EMAIL, 0), "copy_email"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_COPY_ISSUER, 0), "copy_issuer"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_DO_DIRNAME, 0), "do_dirname"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_DO_EXT_I2D, 0), "do_ext_i2d"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_DO_EXT_NCONF, 0), "do_ext_nconf"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_GNAMES_FROM_SECTNAME, 0),
+     "gnames_from_sectname"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_I2S_ASN1_ENUMERATED, 0),
+     "i2s_ASN1_ENUMERATED"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_I2S_ASN1_IA5STRING, 0),
+     "i2s_ASN1_IA5STRING"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_I2S_ASN1_INTEGER, 0),
+     "i2s_ASN1_INTEGER"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_I2V_AUTHORITY_INFO_ACCESS, 0),
+     "i2v_AUTHORITY_INFO_ACCESS"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_LEVEL_ADD_NODE, 0), "level_add_node"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_NOTICE_SECTION, 0), "notice_section"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_NREF_NOS, 0), "nref_nos"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_POLICY_CACHE_CREATE, 0),
+     "policy_cache_create"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_POLICY_CACHE_NEW, 0),
+     "policy_cache_new"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_POLICY_DATA_NEW, 0), "policy_data_new"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_POLICY_SECTION, 0), "policy_section"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_PROCESS_PCI_VALUE, 0),
+     "process_pci_value"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_R2I_CERTPOL, 0), "r2i_certpol"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_R2I_PCI, 0), "r2i_pci"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_S2I_ASN1_IA5STRING, 0),
+     "s2i_ASN1_IA5STRING"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_S2I_ASN1_INTEGER, 0),
+     "s2i_ASN1_INTEGER"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_S2I_ASN1_OCTET_STRING, 0),
+     "s2i_ASN1_OCTET_STRING"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_S2I_SKEY_ID, 0), "s2i_skey_id"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_SET_DIST_POINT_NAME, 0),
+     "set_dist_point_name"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_SXNET_ADD_ID_ASC, 0),
+     "SXNET_add_id_asc"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_SXNET_ADD_ID_INTEGER, 0),
+     "SXNET_add_id_INTEGER"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_SXNET_ADD_ID_ULONG, 0),
+     "SXNET_add_id_ulong"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_SXNET_GET_ID_ASC, 0),
+     "SXNET_get_id_asc"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_SXNET_GET_ID_ULONG, 0),
+     "SXNET_get_id_ulong"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_TREE_INIT, 0), "tree_init"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_ASIDENTIFIERS, 0),
+     "v2i_ASIdentifiers"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_ASN1_BIT_STRING, 0),
+     "v2i_ASN1_BIT_STRING"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_AUTHORITY_INFO_ACCESS, 0),
+     "v2i_AUTHORITY_INFO_ACCESS"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_AUTHORITY_KEYID, 0),
+     "v2i_AUTHORITY_KEYID"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_BASIC_CONSTRAINTS, 0),
+     "v2i_BASIC_CONSTRAINTS"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_CRLD, 0), "v2i_crld"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_EXTENDED_KEY_USAGE, 0),
+     "v2i_EXTENDED_KEY_USAGE"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_GENERAL_NAMES, 0),
+     "v2i_GENERAL_NAMES"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_GENERAL_NAME_EX, 0),
+     "v2i_GENERAL_NAME_ex"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_IDP, 0), "v2i_idp"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_IPADDRBLOCKS, 0),
+     "v2i_IPAddrBlocks"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_ISSUER_ALT, 0), "v2i_issuer_alt"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_NAME_CONSTRAINTS, 0),
+     "v2i_NAME_CONSTRAINTS"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_POLICY_CONSTRAINTS, 0),
+     "v2i_POLICY_CONSTRAINTS"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_POLICY_MAPPINGS, 0),
+     "v2i_POLICY_MAPPINGS"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_SUBJECT_ALT, 0), "v2i_subject_alt"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V2I_TLS_FEATURE, 0), "v2i_TLS_FEATURE"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_V3_GENERIC_EXTENSION, 0),
+     "v3_generic_extension"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_X509V3_ADD1_I2D, 0), "X509V3_add1_i2d"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_X509V3_ADD_VALUE, 0),
+     "X509V3_add_value"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_X509V3_EXT_ADD, 0), "X509V3_EXT_add"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_X509V3_EXT_ADD_ALIAS, 0),
+     "X509V3_EXT_add_alias"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_X509V3_EXT_I2D, 0), "X509V3_EXT_i2d"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_X509V3_EXT_NCONF, 0),
+     "X509V3_EXT_nconf"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_X509V3_GET_SECTION, 0),
+     "X509V3_get_section"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_X509V3_GET_STRING, 0),
+     "X509V3_get_string"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_X509V3_GET_VALUE_BOOL, 0),
+     "X509V3_get_value_bool"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_X509V3_PARSE_LIST, 0),
+     "X509V3_parse_list"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_X509_PURPOSE_ADD, 0),
+     "X509_PURPOSE_add"},
+    {ERR_PACK(ERR_LIB_X509V3, X509V3_F_X509_PURPOSE_SET, 0),
+     "X509_PURPOSE_set"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA X509V3_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_BAD_IP_ADDRESS), "bad ip address"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_BAD_OBJECT), "bad object"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_BN_DEC2BN_ERROR), "bn dec2bn error"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_BN_TO_ASN1_INTEGER_ERROR),
+    "bn to asn1 integer error"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_DIRNAME_ERROR), "dirname error"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_DISTPOINT_ALREADY_SET),
+    "distpoint already set"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_DUPLICATE_ZONE_ID),
+    "duplicate zone id"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_ERROR_CONVERTING_ZONE),
+    "error converting zone"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_ERROR_CREATING_EXTENSION),
+    "error creating extension"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_ERROR_IN_EXTENSION),
+    "error in extension"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_EXPECTED_A_SECTION_NAME),
+    "expected a section name"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_EXTENSION_EXISTS),
+    "extension exists"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_EXTENSION_NAME_ERROR),
+    "extension name error"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_EXTENSION_NOT_FOUND),
+    "extension not found"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_EXTENSION_SETTING_NOT_SUPPORTED),
+    "extension setting not supported"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_EXTENSION_VALUE_ERROR),
+    "extension value error"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_ILLEGAL_EMPTY_EXTENSION),
+    "illegal empty extension"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INCORRECT_POLICY_SYNTAX_TAG),
+    "incorrect policy syntax tag"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_ASNUMBER),
+    "invalid asnumber"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_ASRANGE), "invalid asrange"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_BOOLEAN_STRING),
+    "invalid boolean string"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_EXTENSION_STRING),
+    "invalid extension string"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_INHERITANCE),
+    "invalid inheritance"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_IPADDRESS),
+    "invalid ipaddress"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_MULTIPLE_RDNS),
+    "invalid multiple rdns"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_NAME), "invalid name"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_NULL_ARGUMENT),
+    "invalid null argument"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_NULL_NAME),
+    "invalid null name"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_NULL_VALUE),
+    "invalid null value"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_NUMBER), "invalid number"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_NUMBERS), "invalid numbers"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_OBJECT_IDENTIFIER),
+    "invalid object identifier"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_OPTION), "invalid option"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_POLICY_IDENTIFIER),
+    "invalid policy identifier"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_PROXY_POLICY_SETTING),
+    "invalid proxy policy setting"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_PURPOSE), "invalid purpose"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_SAFI), "invalid safi"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_SECTION), "invalid section"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_INVALID_SYNTAX), "invalid syntax"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_ISSUER_DECODE_ERROR),
+    "issuer decode error"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_MISSING_VALUE), "missing value"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_NEED_ORGANIZATION_AND_NUMBERS),
+    "need organization and numbers"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_NO_CONFIG_DATABASE),
+    "no config database"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_NO_ISSUER_CERTIFICATE),
+    "no issuer certificate"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_NO_ISSUER_DETAILS),
+    "no issuer details"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_NO_POLICY_IDENTIFIER),
+    "no policy identifier"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_NO_PROXY_CERT_POLICY_LANGUAGE_DEFINED),
+    "no proxy cert policy language defined"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_NO_PUBLIC_KEY), "no public key"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_NO_SUBJECT_DETAILS),
+    "no subject details"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_OPERATION_NOT_DEFINED),
+    "operation not defined"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_OTHERNAME_ERROR), "othername error"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_POLICY_LANGUAGE_ALREADY_DEFINED),
+    "policy language already defined"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_POLICY_PATH_LENGTH),
+    "policy path length"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_POLICY_PATH_LENGTH_ALREADY_DEFINED),
+    "policy path length already defined"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_POLICY_WHEN_PROXY_LANGUAGE_REQUIRES_NO_POLICY),
+    "policy when proxy language requires no policy"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_SECTION_NOT_FOUND),
+    "section not found"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_UNABLE_TO_GET_ISSUER_DETAILS),
+    "unable to get issuer details"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_UNABLE_TO_GET_ISSUER_KEYID),
+    "unable to get issuer keyid"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_UNKNOWN_BIT_STRING_ARGUMENT),
+    "unknown bit string argument"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_UNKNOWN_EXTENSION),
+    "unknown extension"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_UNKNOWN_EXTENSION_NAME),
+    "unknown extension name"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_UNKNOWN_OPTION), "unknown option"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_UNSUPPORTED_OPTION),
+    "unsupported option"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_UNSUPPORTED_TYPE),
+    "unsupported type"},
+    {ERR_PACK(ERR_LIB_X509V3, 0, X509V3_R_USER_TOO_LONG), "user too long"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_X509V3_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(X509V3_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(X509V3_str_functs);
+        ERR_load_strings_const(X509V3_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x86_64cpuid.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/x86_64cpuid.pl
new file mode 100644
index 000000000..6423e803b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x86_64cpuid.pl
@@ -0,0 +1,495 @@
+#! /usr/bin/env perl
+# Copyright 2005-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+($arg1,$arg2,$arg3,$arg4)=$win64?("%rcx","%rdx","%r8", "%r9") :	# Win64 order
+				 ("%rdi","%rsi","%rdx","%rcx");	# Unix order
+
+print<<___;
+.extern		OPENSSL_cpuid_setup
+.hidden		OPENSSL_cpuid_setup
+.section	.init
+	call	OPENSSL_cpuid_setup
+
+.hidden	OPENSSL_ia32cap_P
+.comm	OPENSSL_ia32cap_P,16,4
+
+.text
+
+.globl	OPENSSL_atomic_add
+.type	OPENSSL_atomic_add,\@abi-omnipotent
+.align	16
+OPENSSL_atomic_add:
+	movl	($arg1),%eax
+.Lspin:	leaq	($arg2,%rax),%r8
+	.byte	0xf0		# lock
+	cmpxchgl	%r8d,($arg1)
+	jne	.Lspin
+	movl	%r8d,%eax
+	.byte	0x48,0x98	# cltq/cdqe
+	ret
+.size	OPENSSL_atomic_add,.-OPENSSL_atomic_add
+
+.globl	OPENSSL_rdtsc
+.type	OPENSSL_rdtsc,\@abi-omnipotent
+.align	16
+OPENSSL_rdtsc:
+	rdtsc
+	shl	\$32,%rdx
+	or	%rdx,%rax
+	ret
+.size	OPENSSL_rdtsc,.-OPENSSL_rdtsc
+
+.globl	OPENSSL_ia32_cpuid
+.type	OPENSSL_ia32_cpuid,\@function,1
+.align	16
+OPENSSL_ia32_cpuid:
+.cfi_startproc
+	mov	%rbx,%r8		# save %rbx
+.cfi_register	%rbx,%r8
+
+	xor	%eax,%eax
+	mov	%rax,8(%rdi)		# clear extended feature flags
+	cpuid
+	mov	%eax,%r11d		# max value for standard query level
+
+	xor	%eax,%eax
+	cmp	\$0x756e6547,%ebx	# "Genu"
+	setne	%al
+	mov	%eax,%r9d
+	cmp	\$0x49656e69,%edx	# "ineI"
+	setne	%al
+	or	%eax,%r9d
+	cmp	\$0x6c65746e,%ecx	# "ntel"
+	setne	%al
+	or	%eax,%r9d		# 0 indicates Intel CPU
+	jz	.Lintel
+
+	cmp	\$0x68747541,%ebx	# "Auth"
+	setne	%al
+	mov	%eax,%r10d
+	cmp	\$0x69746E65,%edx	# "enti"
+	setne	%al
+	or	%eax,%r10d
+	cmp	\$0x444D4163,%ecx	# "cAMD"
+	setne	%al
+	or	%eax,%r10d		# 0 indicates AMD CPU
+	jnz	.Lintel
+
+	# AMD specific
+	mov	\$0x80000000,%eax
+	cpuid
+	cmp	\$0x80000001,%eax
+	jb	.Lintel
+	mov	%eax,%r10d
+	mov	\$0x80000001,%eax
+	cpuid
+	or	%ecx,%r9d
+	and	\$0x00000801,%r9d	# isolate AMD XOP bit, 1<<11
+
+	cmp	\$0x80000008,%r10d
+	jb	.Lintel
+
+	mov	\$0x80000008,%eax
+	cpuid
+	movzb	%cl,%r10		# number of cores - 1
+	inc	%r10			# number of cores
+
+	mov	\$1,%eax
+	cpuid
+	bt	\$28,%edx		# test hyper-threading bit
+	jnc	.Lgeneric
+	shr	\$16,%ebx		# number of logical processors
+	cmp	%r10b,%bl
+	ja	.Lgeneric
+	and	\$0xefffffff,%edx	# ~(1<<28)
+	jmp	.Lgeneric
+
+.Lintel:
+	cmp	\$4,%r11d
+	mov	\$-1,%r10d
+	jb	.Lnocacheinfo
+
+	mov	\$4,%eax
+	mov	\$0,%ecx		# query L1D
+	cpuid
+	mov	%eax,%r10d
+	shr	\$14,%r10d
+	and	\$0xfff,%r10d		# number of cores -1 per L1D
+
+.Lnocacheinfo:
+	mov	\$1,%eax
+	cpuid
+	movd	%eax,%xmm0		# put aside processor id
+	and	\$0xbfefffff,%edx	# force reserved bits to 0
+	cmp	\$0,%r9d
+	jne	.Lnotintel
+	or	\$0x40000000,%edx	# set reserved bit#30 on Intel CPUs
+	and	\$15,%ah
+	cmp	\$15,%ah		# examine Family ID
+	jne	.LnotP4
+	or	\$0x00100000,%edx	# set reserved bit#20 to engage RC4_CHAR
+.LnotP4:
+	cmp	\$6,%ah
+	jne	.Lnotintel
+	and	\$0x0fff0ff0,%eax
+	cmp	\$0x00050670,%eax	# Knights Landing
+	je	.Lknights
+	cmp	\$0x00080650,%eax	# Knights Mill (according to sde)
+	jne	.Lnotintel
+.Lknights:
+	and	\$0xfbffffff,%ecx	# clear XSAVE flag to mimic Silvermont
+
+.Lnotintel:
+	bt	\$28,%edx		# test hyper-threading bit
+	jnc	.Lgeneric
+	and	\$0xefffffff,%edx	# ~(1<<28)
+	cmp	\$0,%r10d
+	je	.Lgeneric
+
+	or	\$0x10000000,%edx	# 1<<28
+	shr	\$16,%ebx
+	cmp	\$1,%bl			# see if cache is shared
+	ja	.Lgeneric
+	and	\$0xefffffff,%edx	# ~(1<<28)
+.Lgeneric:
+	and	\$0x00000800,%r9d	# isolate AMD XOP flag
+	and	\$0xfffff7ff,%ecx
+	or	%ecx,%r9d		# merge AMD XOP flag
+
+	mov	%edx,%r10d		# %r9d:%r10d is copy of %ecx:%edx
+
+	cmp	\$7,%r11d
+	jb	.Lno_extended_info
+	mov	\$7,%eax
+	xor	%ecx,%ecx
+	cpuid
+	bt	\$26,%r9d		# check XSAVE bit, cleared on Knights
+	jc	.Lnotknights
+	and	\$0xfff7ffff,%ebx	# clear ADCX/ADOX flag
+.Lnotknights:
+	movd	%xmm0,%eax		# restore processor id
+	and	\$0x0fff0ff0,%eax
+	cmp	\$0x00050650,%eax	# Skylake-X
+	jne	.Lnotskylakex
+	and	\$0xfffeffff,%ebx	# ~(1<<16)
+					# suppress AVX512F flag on Skylake-X
+.Lnotskylakex:
+	mov	%ebx,8(%rdi)		# save extended feature flags
+	mov	%ecx,12(%rdi)
+.Lno_extended_info:
+
+	bt	\$27,%r9d		# check OSXSAVE bit
+	jnc	.Lclear_avx
+	xor	%ecx,%ecx		# XCR0
+	.byte	0x0f,0x01,0xd0		# xgetbv
+	and	\$0xe6,%eax		# isolate XMM, YMM and ZMM state support
+	cmp	\$0xe6,%eax
+	je	.Ldone
+	andl	\$0x3fdeffff,8(%rdi)	# ~(1<<31|1<<30|1<<21|1<<16)
+					# clear AVX512F+BW+VL+FIMA, all of
+					# them are EVEX-encoded, which requires
+					# ZMM state support even if one uses
+					# only XMM and YMM :-(
+	and	\$6,%eax		# isolate XMM and YMM state support
+	cmp	\$6,%eax
+	je	.Ldone
+.Lclear_avx:
+	mov	\$0xefffe7ff,%eax	# ~(1<<28|1<<12|1<<11)
+	and	%eax,%r9d		# clear AVX, FMA and AMD XOP bits
+	mov	\$0x3fdeffdf,%eax	# ~(1<<31|1<<30|1<<21|1<<16|1<<5)
+	and	%eax,8(%rdi)		# clear AVX2 and AVX512* bits
+.Ldone:
+	shl	\$32,%r9
+	mov	%r10d,%eax
+	mov	%r8,%rbx		# restore %rbx
+.cfi_restore	%rbx
+	or	%r9,%rax
+	ret
+.cfi_endproc
+.size	OPENSSL_ia32_cpuid,.-OPENSSL_ia32_cpuid
+
+.globl  OPENSSL_cleanse
+.type   OPENSSL_cleanse,\@abi-omnipotent
+.align  16
+OPENSSL_cleanse:
+	xor	%rax,%rax
+	cmp	\$15,$arg2
+	jae	.Lot
+	cmp	\$0,$arg2
+	je	.Lret
+.Little:
+	mov	%al,($arg1)
+	sub	\$1,$arg2
+	lea	1($arg1),$arg1
+	jnz	.Little
+.Lret:
+	ret
+.align	16
+.Lot:
+	test	\$7,$arg1
+	jz	.Laligned
+	mov	%al,($arg1)
+	lea	-1($arg2),$arg2
+	lea	1($arg1),$arg1
+	jmp	.Lot
+.Laligned:
+	mov	%rax,($arg1)
+	lea	-8($arg2),$arg2
+	test	\$-8,$arg2
+	lea	8($arg1),$arg1
+	jnz	.Laligned
+	cmp	\$0,$arg2
+	jne	.Little
+	ret
+.size	OPENSSL_cleanse,.-OPENSSL_cleanse
+
+.globl  CRYPTO_memcmp
+.type   CRYPTO_memcmp,\@abi-omnipotent
+.align  16
+CRYPTO_memcmp:
+	xor	%rax,%rax
+	xor	%r10,%r10
+	cmp	\$0,$arg3
+	je	.Lno_data
+	cmp	\$16,$arg3
+	jne	.Loop_cmp
+	mov	($arg1),%r10
+	mov	8($arg1),%r11
+	mov	\$1,$arg3
+	xor	($arg2),%r10
+	xor	8($arg2),%r11
+	or	%r11,%r10
+	cmovnz	$arg3,%rax
+	ret
+
+.align	16
+.Loop_cmp:
+	mov	($arg1),%r10b
+	lea	1($arg1),$arg1
+	xor	($arg2),%r10b
+	lea	1($arg2),$arg2
+	or	%r10b,%al
+	dec	$arg3
+	jnz	.Loop_cmp
+	neg	%rax
+	shr	\$63,%rax
+.Lno_data:
+	ret
+.size	CRYPTO_memcmp,.-CRYPTO_memcmp
+___
+
+print<<___ if (!$win64);
+.globl	OPENSSL_wipe_cpu
+.type	OPENSSL_wipe_cpu,\@abi-omnipotent
+.align	16
+OPENSSL_wipe_cpu:
+	pxor	%xmm0,%xmm0
+	pxor	%xmm1,%xmm1
+	pxor	%xmm2,%xmm2
+	pxor	%xmm3,%xmm3
+	pxor	%xmm4,%xmm4
+	pxor	%xmm5,%xmm5
+	pxor	%xmm6,%xmm6
+	pxor	%xmm7,%xmm7
+	pxor	%xmm8,%xmm8
+	pxor	%xmm9,%xmm9
+	pxor	%xmm10,%xmm10
+	pxor	%xmm11,%xmm11
+	pxor	%xmm12,%xmm12
+	pxor	%xmm13,%xmm13
+	pxor	%xmm14,%xmm14
+	pxor	%xmm15,%xmm15
+	xorq	%rcx,%rcx
+	xorq	%rdx,%rdx
+	xorq	%rsi,%rsi
+	xorq	%rdi,%rdi
+	xorq	%r8,%r8
+	xorq	%r9,%r9
+	xorq	%r10,%r10
+	xorq	%r11,%r11
+	leaq	8(%rsp),%rax
+	ret
+.size	OPENSSL_wipe_cpu,.-OPENSSL_wipe_cpu
+___
+print<<___ if ($win64);
+.globl	OPENSSL_wipe_cpu
+.type	OPENSSL_wipe_cpu,\@abi-omnipotent
+.align	16
+OPENSSL_wipe_cpu:
+	pxor	%xmm0,%xmm0
+	pxor	%xmm1,%xmm1
+	pxor	%xmm2,%xmm2
+	pxor	%xmm3,%xmm3
+	pxor	%xmm4,%xmm4
+	pxor	%xmm5,%xmm5
+	xorq	%rcx,%rcx
+	xorq	%rdx,%rdx
+	xorq	%r8,%r8
+	xorq	%r9,%r9
+	xorq	%r10,%r10
+	xorq	%r11,%r11
+	leaq	8(%rsp),%rax
+	ret
+.size	OPENSSL_wipe_cpu,.-OPENSSL_wipe_cpu
+___
+{
+my $out="%r10";
+my $cnt="%rcx";
+my $max="%r11";
+my $lasttick="%r8d";
+my $lastdiff="%r9d";
+my $redzone=win64?8:-8;
+
+print<<___;
+.globl	OPENSSL_instrument_bus
+.type	OPENSSL_instrument_bus,\@abi-omnipotent
+.align	16
+OPENSSL_instrument_bus:
+	mov	$arg1,$out	# tribute to Win64
+	mov	$arg2,$cnt
+	mov	$arg2,$max
+
+	rdtsc			# collect 1st tick
+	mov	%eax,$lasttick	# lasttick = tick
+	mov	\$0,$lastdiff	# lastdiff = 0
+	clflush	($out)
+	.byte	0xf0		# lock
+	add	$lastdiff,($out)
+	jmp	.Loop
+.align	16
+.Loop:	rdtsc
+	mov	%eax,%edx
+	sub	$lasttick,%eax
+	mov	%edx,$lasttick
+	mov	%eax,$lastdiff
+	clflush	($out)
+	.byte	0xf0		# lock
+	add	%eax,($out)
+	lea	4($out),$out
+	sub	\$1,$cnt
+	jnz	.Loop
+
+	mov	$max,%rax
+	ret
+.size	OPENSSL_instrument_bus,.-OPENSSL_instrument_bus
+
+.globl	OPENSSL_instrument_bus2
+.type	OPENSSL_instrument_bus2,\@abi-omnipotent
+.align	16
+OPENSSL_instrument_bus2:
+	mov	$arg1,$out	# tribute to Win64
+	mov	$arg2,$cnt
+	mov	$arg3,$max
+	mov	$cnt,$redzone(%rsp)
+
+	rdtsc			# collect 1st tick
+	mov	%eax,$lasttick	# lasttick = tick
+	mov	\$0,$lastdiff	# lastdiff = 0
+
+	clflush	($out)
+	.byte	0xf0		# lock
+	add	$lastdiff,($out)
+
+	rdtsc			# collect 1st diff
+	mov	%eax,%edx
+	sub	$lasttick,%eax	# diff
+	mov	%edx,$lasttick	# lasttick = tick
+	mov	%eax,$lastdiff	# lastdiff = diff
+.Loop2:
+	clflush	($out)
+	.byte	0xf0		# lock
+	add	%eax,($out)	# accumulate diff
+
+	sub	\$1,$max
+	jz	.Ldone2
+
+	rdtsc
+	mov	%eax,%edx
+	sub	$lasttick,%eax	# diff
+	mov	%edx,$lasttick	# lasttick = tick
+	cmp	$lastdiff,%eax
+	mov	%eax,$lastdiff	# lastdiff = diff
+	mov	\$0,%edx
+	setne	%dl
+	sub	%rdx,$cnt	# conditional --$cnt
+	lea	($out,%rdx,4),$out	# conditional ++$out
+	jnz	.Loop2
+
+.Ldone2:
+	mov	$redzone(%rsp),%rax
+	sub	$cnt,%rax
+	ret
+.size	OPENSSL_instrument_bus2,.-OPENSSL_instrument_bus2
+___
+}
+
+sub gen_random {
+my $rdop = shift;
+print<<___;
+.globl	OPENSSL_ia32_${rdop}_bytes
+.type	OPENSSL_ia32_${rdop}_bytes,\@abi-omnipotent
+.align	16
+OPENSSL_ia32_${rdop}_bytes:
+	xor	%rax, %rax	# return value
+	cmp	\$0,$arg2
+	je	.Ldone_${rdop}_bytes
+
+	mov	\$8,%r11
+.Loop_${rdop}_bytes:
+	${rdop}	%r10
+	jc	.Lbreak_${rdop}_bytes
+	dec	%r11
+	jnz	.Loop_${rdop}_bytes
+	jmp	.Ldone_${rdop}_bytes
+
+.align	16
+.Lbreak_${rdop}_bytes:
+	cmp	\$8,$arg2
+	jb	.Ltail_${rdop}_bytes
+	mov	%r10,($arg1)
+	lea	8($arg1),$arg1
+	add	\$8,%rax
+	sub	\$8,$arg2
+	jz	.Ldone_${rdop}_bytes
+	mov	\$8,%r11
+	jmp	.Loop_${rdop}_bytes
+
+.align	16
+.Ltail_${rdop}_bytes:
+	mov	%r10b,($arg1)
+	lea	1($arg1),$arg1
+	inc	%rax
+	shr	\$8,%r10
+	dec	$arg2
+	jnz	.Ltail_${rdop}_bytes
+
+.Ldone_${rdop}_bytes:
+	xor	%r10,%r10	# Clear sensitive data from register
+	ret
+.size	OPENSSL_ia32_${rdop}_bytes,.-OPENSSL_ia32_${rdop}_bytes
+___
+}
+gen_random("rdrand");
+gen_random("rdseed");
+
+close STDOUT;	# flush
diff --git a/trunk/3rdparty/openssl-1.1-fit/crypto/x86cpuid.pl b/trunk/3rdparty/openssl-1.1-fit/crypto/x86cpuid.pl
new file mode 100644
index 000000000..d43dda4d9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/crypto/x86cpuid.pl
@@ -0,0 +1,509 @@
+#! /usr/bin/env perl
+# Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC, "${dir}perlasm", "perlasm");
+require "x86asm.pl";
+
+$output = pop;
+open OUT,">$output";
+*STDOUT=*OUT;
+
+&asm_init($ARGV[0]);
+
+for (@ARGV) { $sse2=1 if (/-DOPENSSL_IA32_SSE2/); }
+
+&function_begin("OPENSSL_ia32_cpuid");
+	&xor	("edx","edx");
+	&pushf	();
+	&pop	("eax");
+	&mov	("ecx","eax");
+	&xor	("eax",1<<21);
+	&push	("eax");
+	&popf	();
+	&pushf	();
+	&pop	("eax");
+	&xor	("ecx","eax");
+	&xor	("eax","eax");
+	&mov	("esi",&wparam(0));
+	&mov	(&DWP(8,"esi"),"eax");	# clear extended feature flags
+	&bt	("ecx",21);
+	&jnc	(&label("nocpuid"));
+	&cpuid	();
+	&mov	("edi","eax");		# max value for standard query level
+
+	&xor	("eax","eax");
+	&cmp	("ebx",0x756e6547);	# "Genu"
+	&setne	(&LB("eax"));
+	&mov	("ebp","eax");
+	&cmp	("edx",0x49656e69);	# "ineI"
+	&setne	(&LB("eax"));
+	&or	("ebp","eax");
+	&cmp	("ecx",0x6c65746e);	# "ntel"
+	&setne	(&LB("eax"));
+	&or	("ebp","eax");		# 0 indicates Intel CPU
+	&jz	(&label("intel"));
+
+	&cmp	("ebx",0x68747541);	# "Auth"
+	&setne	(&LB("eax"));
+	&mov	("esi","eax");
+	&cmp	("edx",0x69746E65);	# "enti"
+	&setne	(&LB("eax"));
+	&or	("esi","eax");
+	&cmp	("ecx",0x444D4163);	# "cAMD"
+	&setne	(&LB("eax"));
+	&or	("esi","eax");		# 0 indicates AMD CPU
+	&jnz	(&label("intel"));
+
+	# AMD specific
+	&mov	("eax",0x80000000);
+	&cpuid	();
+	&cmp	("eax",0x80000001);
+	&jb	(&label("intel"));
+	&mov	("esi","eax");
+	&mov	("eax",0x80000001);
+	&cpuid	();
+	&or	("ebp","ecx");
+	&and	("ebp",1<<11|1);	# isolate XOP bit
+	&cmp	("esi",0x80000008);
+	&jb	(&label("intel"));
+
+	&mov	("eax",0x80000008);
+	&cpuid	();
+	&movz	("esi",&LB("ecx"));	# number of cores - 1
+	&inc	("esi");		# number of cores
+
+	&mov	("eax",1);
+	&xor	("ecx","ecx");
+	&cpuid	();
+	&bt	("edx",28);
+	&jnc	(&label("generic"));
+	&shr	("ebx",16);
+	&and	("ebx",0xff);
+	&cmp	("ebx","esi");
+	&ja	(&label("generic"));
+	&and	("edx",0xefffffff);	# clear hyper-threading bit
+	&jmp	(&label("generic"));
+
+&set_label("intel");
+	&cmp	("edi",4);
+	&mov	("esi",-1);
+	&jb	(&label("nocacheinfo"));
+
+	&mov	("eax",4);
+	&mov	("ecx",0);		# query L1D
+	&cpuid	();
+	&mov	("esi","eax");
+	&shr	("esi",14);
+	&and	("esi",0xfff);		# number of cores -1 per L1D
+
+&set_label("nocacheinfo");
+	&mov	("eax",1);
+	&xor	("ecx","ecx");
+	&cpuid	();
+	&and	("edx",0xbfefffff);	# force reserved bits #20, #30 to 0
+	&cmp	("ebp",0);
+	&jne	(&label("notintel"));
+	&or	("edx",1<<30);		# set reserved bit#30 on Intel CPUs
+	&and	(&HB("eax"),15);	# family ID
+	&cmp	(&HB("eax"),15);	# P4?
+	&jne	(&label("notintel"));
+	&or	("edx",1<<20);		# set reserved bit#20 to engage RC4_CHAR
+&set_label("notintel");
+	&bt	("edx",28);		# test hyper-threading bit
+	&jnc	(&label("generic"));
+	&and	("edx",0xefffffff);
+	&cmp	("esi",0);
+	&je	(&label("generic"));
+
+	&or	("edx",0x10000000);
+	&shr	("ebx",16);
+	&cmp	(&LB("ebx"),1);
+	&ja	(&label("generic"));
+	&and	("edx",0xefffffff);	# clear hyper-threading bit if not
+
+&set_label("generic");
+	&and	("ebp",1<<11);		# isolate AMD XOP flag
+	&and	("ecx",0xfffff7ff);	# force 11th bit to 0
+	&mov	("esi","edx");		# %ebp:%esi is copy of %ecx:%edx
+	&or	("ebp","ecx");		# merge AMD XOP flag
+
+	&cmp	("edi",7);
+	&mov	("edi",&wparam(0));
+	&jb	(&label("no_extended_info"));
+	&mov	("eax",7);
+	&xor	("ecx","ecx");
+	&cpuid	();
+	&mov	(&DWP(8,"edi"),"ebx");	# save extended feature flag
+&set_label("no_extended_info");
+
+	&bt	("ebp",27);		# check OSXSAVE bit
+	&jnc	(&label("clear_avx"));
+	&xor	("ecx","ecx");
+	&data_byte(0x0f,0x01,0xd0);	# xgetbv
+	&and	("eax",6);
+	&cmp	("eax",6);
+	&je	(&label("done"));
+	&cmp	("eax",2);
+	&je	(&label("clear_avx"));
+&set_label("clear_xmm");
+	&and	("ebp",0xfdfffffd);	# clear AESNI and PCLMULQDQ bits
+	&and	("esi",0xfeffffff);	# clear FXSR
+&set_label("clear_avx");
+	&and	("ebp",0xefffe7ff);	# clear AVX, FMA and AMD XOP bits
+	&and	(&DWP(8,"edi"),0xffffffdf);	# clear AVX2
+&set_label("done");
+	&mov	("eax","esi");
+	&mov	("edx","ebp");
+&set_label("nocpuid");
+&function_end("OPENSSL_ia32_cpuid");
+
+&external_label("OPENSSL_ia32cap_P");
+
+&function_begin_B("OPENSSL_rdtsc","EXTRN\t_OPENSSL_ia32cap_P:DWORD");
+	&xor	("eax","eax");
+	&xor	("edx","edx");
+	&picmeup("ecx","OPENSSL_ia32cap_P");
+	&bt	(&DWP(0,"ecx"),4);
+	&jnc	(&label("notsc"));
+	&rdtsc	();
+&set_label("notsc");
+	&ret	();
+&function_end_B("OPENSSL_rdtsc");
+
+# This works in Ring 0 only [read DJGPP+MS-DOS+privileged DPMI host],
+# but it's safe to call it on any [supported] 32-bit platform...
+# Just check for [non-]zero return value...
+&function_begin_B("OPENSSL_instrument_halt","EXTRN\t_OPENSSL_ia32cap_P:DWORD");
+	&picmeup("ecx","OPENSSL_ia32cap_P");
+	&bt	(&DWP(0,"ecx"),4);
+	&jnc	(&label("nohalt"));	# no TSC
+
+	&data_word(0x9058900e);		# push %cs; pop %eax
+	&and	("eax",3);
+	&jnz	(&label("nohalt"));	# not enough privileges
+
+	&pushf	();
+	&pop	("eax");
+	&bt	("eax",9);
+	&jnc	(&label("nohalt"));	# interrupts are disabled
+
+	&rdtsc	();
+	&push	("edx");
+	&push	("eax");
+	&halt	();
+	&rdtsc	();
+
+	&sub	("eax",&DWP(0,"esp"));
+	&sbb	("edx",&DWP(4,"esp"));
+	&add	("esp",8);
+	&ret	();
+
+&set_label("nohalt");
+	&xor	("eax","eax");
+	&xor	("edx","edx");
+	&ret	();
+&function_end_B("OPENSSL_instrument_halt");
+
+# Essentially there is only one use for this function. Under DJGPP:
+#
+#	#include <go32.h>
+#	...
+#	i=OPENSSL_far_spin(_dos_ds,0x46c);
+#	...
+# to obtain the number of spins till closest timer interrupt.
+
+&function_begin_B("OPENSSL_far_spin");
+	&pushf	();
+	&pop	("eax");
+	&bt	("eax",9);
+	&jnc	(&label("nospin"));	# interrupts are disabled
+
+	&mov	("eax",&DWP(4,"esp"));
+	&mov	("ecx",&DWP(8,"esp"));
+	&data_word (0x90d88e1e);	# push %ds, mov %eax,%ds
+	&xor	("eax","eax");
+	&mov	("edx",&DWP(0,"ecx"));
+	&jmp	(&label("spin"));
+
+	&align	(16);
+&set_label("spin");
+	&inc	("eax");
+	&cmp	("edx",&DWP(0,"ecx"));
+	&je	(&label("spin"));
+
+	&data_word (0x1f909090);	# pop	%ds
+	&ret	();
+
+&set_label("nospin");
+	&xor	("eax","eax");
+	&xor	("edx","edx");
+	&ret	();
+&function_end_B("OPENSSL_far_spin");
+
+&function_begin_B("OPENSSL_wipe_cpu","EXTRN\t_OPENSSL_ia32cap_P:DWORD");
+	&xor	("eax","eax");
+	&xor	("edx","edx");
+	&picmeup("ecx","OPENSSL_ia32cap_P");
+	&mov	("ecx",&DWP(0,"ecx"));
+	&bt	(&DWP(0,"ecx"),1);
+	&jnc	(&label("no_x87"));
+	if ($sse2) {
+		&and	("ecx",1<<26|1<<24);	# check SSE2 and FXSR bits
+		&cmp	("ecx",1<<26|1<<24);
+		&jne	(&label("no_sse2"));
+		&pxor	("xmm0","xmm0");
+		&pxor	("xmm1","xmm1");
+		&pxor	("xmm2","xmm2");
+		&pxor	("xmm3","xmm3");
+		&pxor	("xmm4","xmm4");
+		&pxor	("xmm5","xmm5");
+		&pxor	("xmm6","xmm6");
+		&pxor	("xmm7","xmm7");
+	&set_label("no_sse2");
+	}
+	# just a bunch of fldz to zap the fp/mm bank followed by finit...
+	&data_word(0xeed9eed9,0xeed9eed9,0xeed9eed9,0xeed9eed9,0x90e3db9b);
+&set_label("no_x87");
+	&lea	("eax",&DWP(4,"esp"));
+	&ret	();
+&function_end_B("OPENSSL_wipe_cpu");
+
+&function_begin_B("OPENSSL_atomic_add");
+	&mov	("edx",&DWP(4,"esp"));	# fetch the pointer, 1st arg
+	&mov	("ecx",&DWP(8,"esp"));	# fetch the increment, 2nd arg
+	&push	("ebx");
+	&nop	();
+	&mov	("eax",&DWP(0,"edx"));
+&set_label("spin");
+	&lea	("ebx",&DWP(0,"eax","ecx"));
+	&nop	();
+	&data_word(0x1ab10ff0);	# lock;	cmpxchg	%ebx,(%edx)	# %eax is involved and is always reloaded
+	&jne	(&label("spin"));
+	&mov	("eax","ebx");	# OpenSSL expects the new value
+	&pop	("ebx");
+	&ret	();
+&function_end_B("OPENSSL_atomic_add");
+
+&function_begin_B("OPENSSL_cleanse");
+	&mov	("edx",&wparam(0));
+	&mov	("ecx",&wparam(1));
+	&xor	("eax","eax");
+	&cmp	("ecx",7);
+	&jae	(&label("lot"));
+	&cmp	("ecx",0);
+	&je	(&label("ret"));
+&set_label("little");
+	&mov	(&BP(0,"edx"),"al");
+	&sub	("ecx",1);
+	&lea	("edx",&DWP(1,"edx"));
+	&jnz	(&label("little"));
+&set_label("ret");
+	&ret	();
+
+&set_label("lot",16);
+	&test	("edx",3);
+	&jz	(&label("aligned"));
+	&mov	(&BP(0,"edx"),"al");
+	&lea	("ecx",&DWP(-1,"ecx"));
+	&lea	("edx",&DWP(1,"edx"));
+	&jmp	(&label("lot"));
+&set_label("aligned");
+	&mov	(&DWP(0,"edx"),"eax");
+	&lea	("ecx",&DWP(-4,"ecx"));
+	&test	("ecx",-4);
+	&lea	("edx",&DWP(4,"edx"));
+	&jnz	(&label("aligned"));
+	&cmp	("ecx",0);
+	&jne	(&label("little"));
+	&ret	();
+&function_end_B("OPENSSL_cleanse");
+
+&function_begin_B("CRYPTO_memcmp");
+	&push	("esi");
+	&push	("edi");
+	&mov	("esi",&wparam(0));
+	&mov	("edi",&wparam(1));
+	&mov	("ecx",&wparam(2));
+	&xor	("eax","eax");
+	&xor	("edx","edx");
+	&cmp	("ecx",0);
+	&je	(&label("no_data"));
+&set_label("loop");
+	&mov	("dl",&BP(0,"esi"));
+	&lea	("esi",&DWP(1,"esi"));
+	&xor	("dl",&BP(0,"edi"));
+	&lea	("edi",&DWP(1,"edi"));
+	&or	("al","dl");
+	&dec	("ecx");
+	&jnz	(&label("loop"));
+	&neg	("eax");
+	&shr	("eax",31);
+&set_label("no_data");
+	&pop	("edi");
+	&pop	("esi");
+	&ret	();
+&function_end_B("CRYPTO_memcmp");
+{
+my $lasttick = "esi";
+my $lastdiff = "ebx";
+my $out = "edi";
+my $cnt = "ecx";
+my $max = "ebp";
+
+&function_begin("OPENSSL_instrument_bus");
+    &mov	("eax",0);
+    if ($sse2) {
+	&picmeup("edx","OPENSSL_ia32cap_P");
+	&bt	(&DWP(0,"edx"),4);
+	&jnc	(&label("nogo"));	# no TSC
+	&bt	(&DWP(0,"edx"),19);
+	&jnc	(&label("nogo"));	# no CLFLUSH
+
+	&mov	($out,&wparam(0));	# load arguments
+	&mov	($cnt,&wparam(1));
+
+	# collect 1st tick
+	&rdtsc	();
+	&mov	($lasttick,"eax");	# lasttick = tick
+	&mov	($lastdiff,0);		# lastdiff = 0
+	&clflush(&DWP(0,$out));
+	&data_byte(0xf0);		# lock
+	&add	(&DWP(0,$out),$lastdiff);
+	&jmp	(&label("loop"));
+
+&set_label("loop",16);
+	&rdtsc	();
+	&mov	("edx","eax");		# put aside tick (yes, I neglect edx)
+	&sub	("eax",$lasttick);	# diff
+	&mov	($lasttick,"edx");	# lasttick = tick
+	&mov	($lastdiff,"eax");	# lastdiff = diff
+	&clflush(&DWP(0,$out));
+	&data_byte(0xf0);		# lock
+	&add	(&DWP(0,$out),"eax");	# accumulate diff
+	&lea	($out,&DWP(4,$out));	# ++$out
+	&sub	($cnt,1);		# --$cnt
+	&jnz	(&label("loop"));
+
+	&mov	("eax",&wparam(1));
+&set_label("nogo");
+    }
+&function_end("OPENSSL_instrument_bus");
+
+&function_begin("OPENSSL_instrument_bus2");
+    &mov	("eax",0);
+    if ($sse2) {
+	&picmeup("edx","OPENSSL_ia32cap_P");
+	&bt	(&DWP(0,"edx"),4);
+	&jnc	(&label("nogo"));	# no TSC
+	&bt	(&DWP(0,"edx"),19);
+	&jnc	(&label("nogo"));	# no CLFLUSH
+
+	&mov	($out,&wparam(0));	# load arguments
+	&mov	($cnt,&wparam(1));
+	&mov	($max,&wparam(2));
+
+	&rdtsc	();			# collect 1st tick
+	&mov	($lasttick,"eax");	# lasttick = tick
+	&mov	($lastdiff,0);		# lastdiff = 0
+
+	&clflush(&DWP(0,$out));
+	&data_byte(0xf0);		# lock
+	&add	(&DWP(0,$out),$lastdiff);
+
+	&rdtsc	();			# collect 1st diff
+	&mov	("edx","eax");		# put aside tick (yes, I neglect edx)
+	&sub	("eax",$lasttick);	# diff
+	&mov	($lasttick,"edx");	# lasttick = tick
+	&mov	($lastdiff,"eax");	# lastdiff = diff
+	&jmp	(&label("loop2"));
+
+&set_label("loop2",16);
+	&clflush(&DWP(0,$out));
+	&data_byte(0xf0);		# lock
+	&add	(&DWP(0,$out),"eax");	# accumulate diff
+
+	&sub	($max,1);
+	&jz	(&label("done2"));
+
+	&rdtsc	();
+	&mov	("edx","eax");		# put aside tick (yes, I neglect edx)
+	&sub	("eax",$lasttick);	# diff
+	&mov	($lasttick,"edx");	# lasttick = tick
+	&cmp	("eax",$lastdiff);
+	&mov	($lastdiff,"eax");	# lastdiff = diff
+	&mov	("edx",0);
+	&setne	("dl");
+	&sub	($cnt,"edx");		# conditional --$cnt
+	&lea	($out,&DWP(0,$out,"edx",4));	# conditional ++$out
+	&jnz	(&label("loop2"));
+
+&set_label("done2");
+	&mov	("eax",&wparam(1));
+	&sub	("eax",$cnt);
+&set_label("nogo");
+    }
+&function_end("OPENSSL_instrument_bus2");
+}
+
+sub gen_random {
+my $rdop = shift;
+&function_begin_B("OPENSSL_ia32_${rdop}_bytes");
+	&push	("edi");
+	&push	("ebx");
+	&xor	("eax","eax");		# return value
+	&mov	("edi",&wparam(0));
+	&mov	("ebx",&wparam(1));
+
+	&cmp	("ebx",0);
+	&je	(&label("done"));
+
+	&mov	("ecx",8);
+&set_label("loop");
+	&${rdop}("edx");
+	&jc	(&label("break"));
+	&loop	(&label("loop"));
+	&jmp	(&label("done"));
+
+&set_label("break",16);
+	&cmp	("ebx",4);
+	&jb	(&label("tail"));
+	&mov	(&DWP(0,"edi"),"edx");
+	&lea	("edi",&DWP(4,"edi"));
+	&add	("eax",4);
+	&sub	("ebx",4);
+	&jz	(&label("done"));
+	&mov	("ecx",8);
+	&jmp	(&label("loop"));
+
+&set_label("tail",16);
+	&mov	(&BP(0,"edi"),"dl");
+	&lea	("edi",&DWP(1,"edi"));
+	&inc	("eax");
+	&shr	("edx",8);
+	&dec	("ebx");
+	&jnz	(&label("tail"));
+
+&set_label("done");
+	&xor	("edx","edx");		# Clear random value from registers
+	&pop	("ebx");
+	&pop	("edi");
+	&ret	();
+&function_end_B("OPENSSL_ia32_${rdop}_bytes");
+}
+&gen_random("rdrand");
+&gen_random("rdseed");
+
+&initseg("OPENSSL_cpuid_setup");
+
+&hidden("OPENSSL_cpuid_setup");
+&hidden("OPENSSL_ia32cap_P");
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/e_os.h b/trunk/3rdparty/openssl-1.1-fit/e_os.h
new file mode 100644
index 000000000..8e6efa961
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/e_os.h
@@ -0,0 +1,334 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_E_OS_H
+# define HEADER_E_OS_H
+
+# include <limits.h>
+# include <openssl/opensslconf.h>
+
+# include <openssl/e_os2.h>
+# include <openssl/crypto.h>
+# include "internal/nelem.h"
+
+/*
+ * <openssl/e_os2.h> contains what we can justify to make visible to the
+ * outside; this file e_os.h is not part of the exported interface.
+ */
+
+# ifndef DEVRANDOM
+/*
+ * set this to a comma-separated list of 'random' device files to try out. By
+ * default, we will try to read at least one of these files
+ */
+#  if defined(__s390__)
+#   define DEVRANDOM "/dev/prandom","/dev/urandom","/dev/hwrng","/dev/random"
+#  else
+#   define DEVRANDOM "/dev/urandom","/dev/random","/dev/srandom"
+#  endif
+# endif
+# if !defined(OPENSSL_NO_EGD) && !defined(DEVRANDOM_EGD)
+/*
+ * set this to a comma-separated list of 'egd' sockets to try out. These
+ * sockets will be tried in the order listed in case accessing the device
+ * files listed in DEVRANDOM did not return enough randomness.
+ */
+#  define DEVRANDOM_EGD "/var/run/egd-pool","/dev/egd-pool","/etc/egd-pool","/etc/entropy"
+# endif
+
+# if defined(OPENSSL_SYS_VXWORKS) || defined(OPENSSL_SYS_UEFI)
+#  define NO_CHMOD
+#  define NO_SYSLOG
+# endif
+
+# define get_last_sys_error()    errno
+# define clear_sys_error()       errno=0
+# define set_sys_error(e)        errno=(e)
+
+/********************************************************************
+ The Microsoft section
+ ********************************************************************/
+# if defined(OPENSSL_SYS_WIN32) && !defined(WIN32)
+#  define WIN32
+# endif
+# if defined(OPENSSL_SYS_WINDOWS) && !defined(WINDOWS)
+#  define WINDOWS
+# endif
+# if defined(OPENSSL_SYS_MSDOS) && !defined(MSDOS)
+#  define MSDOS
+# endif
+
+# ifdef WIN32
+#  undef get_last_sys_error
+#  undef clear_sys_error
+#  undef set_sys_error
+#  define get_last_sys_error()    GetLastError()
+#  define clear_sys_error()       SetLastError(0)
+#  define set_sys_error(e)        SetLastError(e)
+#  if !defined(WINNT)
+#   define WIN_CONSOLE_BUG
+#  endif
+# else
+# endif
+
+# if (defined(WINDOWS) || defined(MSDOS))
+
+#  ifdef __DJGPP__
+#   include <unistd.h>
+#   include <sys/stat.h>
+#   define _setmode setmode
+#   define _O_TEXT O_TEXT
+#   define _O_BINARY O_BINARY
+#   define HAS_LFN_SUPPORT(name)  (pathconf((name), _PC_NAME_MAX) > 12)
+#   undef DEVRANDOM_EGD  /*  Neither MS-DOS nor FreeDOS provide 'egd' sockets.  */
+#   undef DEVRANDOM
+#   define DEVRANDOM "/dev/urandom\x24"
+#  endif                        /* __DJGPP__ */
+
+#  ifndef S_IFDIR
+#   define S_IFDIR     _S_IFDIR
+#  endif
+
+#  ifndef S_IFMT
+#   define S_IFMT      _S_IFMT
+#  endif
+
+#  if !defined(WINNT) && !defined(__DJGPP__)
+#   define NO_SYSLOG
+#  endif
+
+#  ifdef WINDOWS
+#   if !defined(_WIN32_WCE) && !defined(_WIN32_WINNT)
+       /*
+        * Defining _WIN32_WINNT here in e_os.h implies certain "discipline."
+        * Most notably we ought to check for availability of each specific
+        * routine that was introduced after denoted _WIN32_WINNT with
+        * GetProcAddress(). Normally newer functions are masked with higher
+        * _WIN32_WINNT in SDK headers. So that if you wish to use them in
+        * some module, you'd need to override _WIN32_WINNT definition in
+        * the target module in order to "reach for" prototypes, but replace
+        * calls to new functions with indirect calls. Alternatively it
+        * might be possible to achieve the goal by /DELAYLOAD-ing .DLLs
+        * and check for current OS version instead.
+        */
+#    define _WIN32_WINNT 0x0501
+#   endif
+#   if defined(_WIN32_WINNT) || defined(_WIN32_WCE)
+       /*
+        * Just like defining _WIN32_WINNT including winsock2.h implies
+        * certain "discipline" for maintaining [broad] binary compatibility.
+        * As long as structures are invariant among Winsock versions,
+        * it's sufficient to check for specific Winsock2 API availability
+        * at run-time [DSO_global_lookup is recommended]...
+        */
+#    include <winsock2.h>
+#    include <ws2tcpip.h>
+       /* yes, they have to be #included prior to <windows.h> */
+#   endif
+#   include <windows.h>
+#   include <stdio.h>
+#   include <stddef.h>
+#   include <errno.h>
+#   if defined(_WIN32_WCE) && !defined(EACCES)
+#    define EACCES   13
+#   endif
+#   include <string.h>
+#   ifdef _WIN64
+#    define strlen(s) _strlen31(s)
+/* cut strings to 2GB */
+static __inline unsigned int _strlen31(const char *str)
+{
+    unsigned int len = 0;
+    while (*str && len < 0x80000000U)
+        str++, len++;
+    return len & 0x7FFFFFFF;
+}
+#   endif
+#   include <malloc.h>
+#   if defined(_MSC_VER) && !defined(_WIN32_WCE) && !defined(_DLL) && defined(stdin)
+#    if _MSC_VER>=1300 && _MSC_VER<1600
+#     undef stdin
+#     undef stdout
+#     undef stderr
+FILE *__iob_func();
+#     define stdin  (&__iob_func()[0])
+#     define stdout (&__iob_func()[1])
+#     define stderr (&__iob_func()[2])
+#    elif _MSC_VER<1300 && defined(I_CAN_LIVE_WITH_LNK4049)
+#     undef stdin
+#     undef stdout
+#     undef stderr
+         /*
+          * pre-1300 has __p__iob(), but it's available only in msvcrt.lib,
+          * or in other words with /MD. Declaring implicit import, i.e. with
+          * _imp_ prefix, works correctly with all compiler options, but
+          * without /MD results in LINK warning LNK4049: 'locally defined
+          * symbol "__iob" imported'.
+          */
+extern FILE *_imp___iob;
+#     define stdin  (&_imp___iob[0])
+#     define stdout (&_imp___iob[1])
+#     define stderr (&_imp___iob[2])
+#    endif
+#   endif
+#  endif
+#  include <io.h>
+#  include <fcntl.h>
+
+#  ifdef OPENSSL_SYS_WINCE
+#   define OPENSSL_NO_POSIX_IO
+#  endif
+
+#  define EXIT(n) exit(n)
+#  define LIST_SEPARATOR_CHAR ';'
+#  ifndef W_OK
+#   define W_OK        2
+#  endif
+#  ifndef R_OK
+#   define R_OK        4
+#  endif
+#  ifdef OPENSSL_SYS_WINCE
+#   define DEFAULT_HOME  ""
+#  else
+#   define DEFAULT_HOME  "C:"
+#  endif
+
+/* Avoid Visual Studio 13 GetVersion deprecated problems */
+#  if defined(_MSC_VER) && _MSC_VER>=1800
+#   define check_winnt() (1)
+#   define check_win_minplat(x) (1)
+#  else
+#   define check_winnt() (GetVersion() < 0x80000000)
+#   define check_win_minplat(x) (LOBYTE(LOWORD(GetVersion())) >= (x))
+#  endif
+
+# else                          /* The non-microsoft world */
+
+#  if defined(OPENSSL_SYS_VXWORKS)
+#   include <sys/times.h>
+#  else
+#   include <sys/time.h>
+#  endif
+
+#  ifdef OPENSSL_SYS_VMS
+#   define VMS 1
+  /*
+   * some programs don't include stdlib, so exit() and others give implicit
+   * function warnings
+   */
+#   include <stdlib.h>
+#   if defined(__DECC)
+#    include <unistd.h>
+#   else
+#    include <unixlib.h>
+#   endif
+#   define LIST_SEPARATOR_CHAR ','
+  /* We don't have any well-defined random devices on VMS, yet... */
+#   undef DEVRANDOM
+  /*-
+     We need to do this since VMS has the following coding on status codes:
+
+     Bits 0-2: status type: 0 = warning, 1 = success, 2 = error, 3 = info ...
+               The important thing to know is that odd numbers are considered
+               good, while even ones are considered errors.
+     Bits 3-15: actual status number
+     Bits 16-27: facility number.  0 is considered "unknown"
+     Bits 28-31: control bits.  If bit 28 is set, the shell won't try to
+                 output the message (which, for random codes, just looks ugly)
+
+     So, what we do here is to change 0 to 1 to get the default success status,
+     and everything else is shifted up to fit into the status number field, and
+     the status is tagged as an error, which is what is wanted here.
+
+     Finally, we add the VMS C facility code 0x35a000, because there are some
+     programs, such as Perl, that will reinterpret the code back to something
+     POSIX.  'man perlvms' explains it further.
+
+     NOTE: the perlvms manual wants to turn all codes 2 to 255 into success
+     codes (status type = 1).  I couldn't disagree more.  Fortunately, the
+     status type doesn't seem to bother Perl.
+     -- Richard Levitte
+  */
+#   define EXIT(n)  exit((n) ? (((n) << 3) | 2 | 0x10000000 | 0x35a000) : 1)
+
+#   define DEFAULT_HOME "SYS$LOGIN:"
+
+#  else
+     /* !defined VMS */
+#   ifdef OPENSSL_UNISTD
+#    include OPENSSL_UNISTD
+#   else
+#    include <unistd.h>
+#   endif
+#   include <sys/types.h>
+#   ifdef OPENSSL_SYS_WIN32_CYGWIN
+#    include <io.h>
+#    include <fcntl.h>
+#   endif
+
+#   define LIST_SEPARATOR_CHAR ':'
+#   define EXIT(n)             exit(n)
+#  endif
+
+# endif
+
+/***********************************************/
+
+# if defined(OPENSSL_SYS_WINDOWS)
+#  define strcasecmp _stricmp
+#  define strncasecmp _strnicmp
+#  if (_MSC_VER >= 1310)
+#   define open _open
+#   define fdopen _fdopen
+#   define close _close
+#   ifndef strdup
+#    define strdup _strdup
+#   endif
+#   define unlink _unlink
+#   define fileno _fileno
+#  endif
+# else
+#  include <strings.h>
+# endif
+
+/* vxworks */
+# if defined(OPENSSL_SYS_VXWORKS)
+#  include <ioLib.h>
+#  include <tickLib.h>
+#  include <sysLib.h>
+#  include <vxWorks.h>
+#  include <sockLib.h>
+#  include <taskLib.h>
+
+#  define TTY_STRUCT int
+#  define sleep(a) taskDelay((a) * sysClkRateGet())
+
+/*
+ * NOTE: these are implemented by helpers in database app! if the database is
+ * not linked, we need to implement them elsewhere
+ */
+struct hostent *gethostbyname(const char *name);
+struct hostent *gethostbyaddr(const char *addr, int length, int type);
+struct servent *getservbyname(const char *name, const char *proto);
+
+# endif
+/* end vxworks */
+
+# ifdef FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION
+#  define CRYPTO_memcmp memcmp
+# endif
+
+/* unistd.h defines _POSIX_VERSION */
+# if !defined(OPENSSL_NO_SECURE_MEMORY) && defined(OPENSSL_SYS_UNIX) \
+     && ( (defined(_POSIX_VERSION) && _POSIX_VERSION >= 200112L)      \
+          || defined(__sun) || defined(__hpux) || defined(__sgi)      \
+          || defined(__osf__) )
+#  define OPENSSL_SECURE_MEMORY  /* secure memory is implemented */
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/asm/e_padlock-x86.pl b/trunk/3rdparty/openssl-1.1-fit/engines/asm/e_padlock-x86.pl
new file mode 100644
index 000000000..5b097ce3e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/asm/e_padlock-x86.pl
@@ -0,0 +1,627 @@
+#! /usr/bin/env perl
+# Copyright 2011-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# September 2011
+#
+# Assembler helpers for Padlock engine. Compared to original engine
+# version relying on inline assembler and compiled with gcc 3.4.6 it
+# was measured to provide ~100% improvement on misaligned data in ECB
+# mode and ~75% in CBC mode. For aligned data improvement can be
+# observed for short inputs only, e.g. 45% for 64-byte messages in
+# ECB mode, 20% in CBC. Difference in performance for aligned vs.
+# misaligned data depends on misalignment and is either ~1.8x or 2.9x.
+# These are approximately same factors as for hardware support, so
+# there is little reason to rely on the latter. On the contrary, it
+# might actually hurt performance in mixture of aligned and misaligned
+# buffers, because a) if you choose to flip 'align' flag in control
+# word on per-buffer basis, then you'd have to reload key context,
+# which incurs penalty; b) if you choose to set 'align' flag
+# permanently, it limits performance even for aligned data to ~1/2.
+# All above mentioned results were collected on 1.5GHz C7. Nano on the
+# other hand handles unaligned data more gracefully. Depending on
+# algorithm and how unaligned data is, hardware can be up to 70% more
+# efficient than below software alignment procedures, nor does 'align'
+# flag have affect on aligned performance [if has any meaning at all].
+# Therefore suggestion is to unconditionally set 'align' flag on Nano
+# for optimal performance.
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}","${dir}../../crypto/perlasm");
+require "x86asm.pl";
+
+$output=pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0]);
+
+%PADLOCK_PREFETCH=(ecb=>128, cbc=>64);	# prefetch errata
+$PADLOCK_CHUNK=512;	# Must be a power of 2 larger than 16
+
+$ctx="edx";
+$out="edi";
+$inp="esi";
+$len="ecx";
+$chunk="ebx";
+
+&function_begin_B("padlock_capability");
+	&push	("ebx");
+	&pushf	();
+	&pop	("eax");
+	&mov	("ecx","eax");
+	&xor	("eax",1<<21);
+	&push	("eax");
+	&popf	();
+	&pushf	();
+	&pop	("eax");
+	&xor	("ecx","eax");
+	&xor	("eax","eax");
+	&bt	("ecx",21);
+	&jnc	(&label("noluck"));
+	&cpuid	();
+	&xor	("eax","eax");
+	&cmp	("ebx","0x".unpack("H*",'tneC'));
+	&jne	(&label("zhaoxin"));
+	&cmp	("edx","0x".unpack("H*",'Hrua'));
+	&jne	(&label("noluck"));
+	&cmp	("ecx","0x".unpack("H*",'slua'));
+	&jne	(&label("noluck"));
+	&jmp	(&label("zhaoxinEnd"));
+&set_label("zhaoxin");
+	&cmp	("ebx","0x".unpack("H*",'hS  '));
+	&jne	(&label("noluck"));
+	&cmp	("edx","0x".unpack("H*",'hgna'));
+	&jne	(&label("noluck"));
+	&cmp	("ecx","0x".unpack("H*",'  ia'));
+	&jne	(&label("noluck"));
+&set_label("zhaoxinEnd");
+	&mov	("eax",0xC0000000);
+	&cpuid	();
+	&mov	("edx","eax");
+	&xor	("eax","eax");
+	&cmp	("edx",0xC0000001);
+	&jb	(&label("noluck"));
+	&mov	("eax",1);
+	&cpuid	();
+	&or	("eax",0x0f);
+	&xor	("ebx","ebx");
+	&and	("eax",0x0fff);
+	&cmp	("eax",0x06ff);		# check for Nano
+	&sete	("bl");
+	&mov	("eax",0xC0000001);
+	&push	("ebx");
+	&cpuid	();
+	&pop	("ebx");
+	&mov	("eax","edx");
+	&shl	("ebx",4);		# bit#4 denotes Nano
+	&and	("eax",0xffffffef);
+	&or	("eax","ebx")
+&set_label("noluck");
+	&pop	("ebx");
+	&ret	();
+&function_end_B("padlock_capability")
+
+&function_begin_B("padlock_key_bswap");
+	&mov	("edx",&wparam(0));
+	&mov	("ecx",&DWP(240,"edx"));
+&set_label("bswap_loop");
+	&mov	("eax",&DWP(0,"edx"));
+	&bswap	("eax");
+	&mov	(&DWP(0,"edx"),"eax");
+	&lea	("edx",&DWP(4,"edx"));
+	&sub	("ecx",1);
+	&jnz	(&label("bswap_loop"));
+	&ret	();
+&function_end_B("padlock_key_bswap");
+
+# This is heuristic key context tracing. At first one
+# believes that one should use atomic swap instructions,
+# but it's not actually necessary. Point is that if
+# padlock_saved_context was changed by another thread
+# after we've read it and before we compare it with ctx,
+# our key *shall* be reloaded upon thread context switch
+# and we are therefore set in either case...
+&static_label("padlock_saved_context");
+
+&function_begin_B("padlock_verify_context");
+	&mov	($ctx,&wparam(0));
+	&lea	("eax",($::win32 or $::coff) ? &DWP(&label("padlock_saved_context")) :
+		       &DWP(&label("padlock_saved_context")."-".&label("verify_pic_point")));
+	&pushf	();
+	&call	("_padlock_verify_ctx");
+&set_label("verify_pic_point");
+	&lea	("esp",&DWP(4,"esp"));
+	&ret	();
+&function_end_B("padlock_verify_context");
+
+&function_begin_B("_padlock_verify_ctx");
+	&add	("eax",&DWP(0,"esp")) if(!($::win32 or $::coff));# &padlock_saved_context
+	&bt	(&DWP(4,"esp"),30);		# eflags
+	&jnc	(&label("verified"));
+	&cmp	($ctx,&DWP(0,"eax"));
+	&je	(&label("verified"));
+	&pushf	();
+	&popf	();
+&set_label("verified");
+	&mov	(&DWP(0,"eax"),$ctx);
+	&ret	();
+&function_end_B("_padlock_verify_ctx");
+
+&function_begin_B("padlock_reload_key");
+	&pushf	();
+	&popf	();
+	&ret	();
+&function_end_B("padlock_reload_key");
+
+&function_begin_B("padlock_aes_block");
+	&push	("edi");
+	&push	("esi");
+	&push	("ebx");
+	&mov	($out,&wparam(0));		# must be 16-byte aligned
+	&mov	($inp,&wparam(1));		# must be 16-byte aligned
+	&mov	($ctx,&wparam(2));
+	&mov	($len,1);
+	&lea	("ebx",&DWP(32,$ctx));		# key
+	&lea	($ctx,&DWP(16,$ctx));		# control word
+	&data_byte(0xf3,0x0f,0xa7,0xc8);	# rep xcryptecb
+	&pop	("ebx");
+	&pop	("esi");
+	&pop	("edi");
+	&ret	();
+&function_end_B("padlock_aes_block");
+
+sub generate_mode {
+my ($mode,$opcode) = @_;
+# int padlock_$mode_encrypt(void *out, const void *inp,
+#		struct padlock_cipher_data *ctx, size_t len);
+&function_begin("padlock_${mode}_encrypt");
+	&mov	($out,&wparam(0));
+	&mov	($inp,&wparam(1));
+	&mov	($ctx,&wparam(2));
+	&mov	($len,&wparam(3));
+	&test	($ctx,15);
+	&jnz	(&label("${mode}_abort"));
+	&test	($len,15);
+	&jnz	(&label("${mode}_abort"));
+	&lea	("eax",($::win32 or $::coff) ? &DWP(&label("padlock_saved_context")) :
+		       &DWP(&label("padlock_saved_context")."-".&label("${mode}_pic_point")));
+	&pushf	();
+	&cld	();
+	&call	("_padlock_verify_ctx");
+&set_label("${mode}_pic_point");
+	&lea	($ctx,&DWP(16,$ctx));	# control word
+	&xor	("eax","eax");
+					if ($mode eq "ctr32") {
+	&movq	("mm0",&QWP(-16,$ctx));	# load [upper part of] counter
+					} else {
+	&xor	("ebx","ebx");
+	&test	(&DWP(0,$ctx),1<<5);	# align bit in control word
+	&jnz	(&label("${mode}_aligned"));
+	&test	($out,0x0f);
+	&setz	("al");			# !out_misaligned
+	&test	($inp,0x0f);
+	&setz	("bl");			# !inp_misaligned
+	&test	("eax","ebx");
+	&jnz	(&label("${mode}_aligned"));
+	&neg	("eax");
+					}
+	&mov	($chunk,$PADLOCK_CHUNK);
+	&not	("eax");		# out_misaligned?-1:0
+	&lea	("ebp",&DWP(-24,"esp"));
+	&cmp	($len,$chunk);
+	&cmovc	($chunk,$len);		# chunk=len>PADLOCK_CHUNK?PADLOCK_CHUNK:len
+	&and	("eax",$chunk);		# out_misaligned?chunk:0
+	&mov	($chunk,$len);
+	&neg	("eax");
+	&and	($chunk,$PADLOCK_CHUNK-1);	# chunk=len%PADLOCK_CHUNK
+	&lea	("esp",&DWP(0,"eax","ebp"));	# alloca
+	&mov	("eax",$PADLOCK_CHUNK);
+	&cmovz	($chunk,"eax");			# chunk=chunk?:PADLOCK_CHUNK
+	&mov	("eax","ebp");
+	&and	("ebp",-16);
+	&and	("esp",-16);
+	&mov	(&DWP(16,"ebp"),"eax");
+    if ($PADLOCK_PREFETCH{$mode}) {
+	&cmp	($len,$chunk);
+	&ja	(&label("${mode}_loop"));
+	&mov	("eax",$inp);		# check if prefetch crosses page
+	&cmp	("ebp","esp");
+	&cmove	("eax",$out);
+	&add	("eax",$len);
+	&neg	("eax");
+	&and	("eax",0xfff);		# distance to page boundary
+	&cmp	("eax",$PADLOCK_PREFETCH{$mode});
+	&mov	("eax",-$PADLOCK_PREFETCH{$mode});
+	&cmovae	("eax",$chunk);		# mask=distance<prefetch?-prefetch:-1
+	&and	($chunk,"eax");
+	&jz	(&label("${mode}_unaligned_tail"));
+    }
+	&jmp	(&label("${mode}_loop"));
+
+&set_label("${mode}_loop",16);
+	&mov	(&DWP(0,"ebp"),$out);		# save parameters
+	&mov	(&DWP(4,"ebp"),$inp);
+	&mov	(&DWP(8,"ebp"),$len);
+	&mov	($len,$chunk);
+	&mov	(&DWP(12,"ebp"),$chunk);	# chunk
+						if ($mode eq "ctr32") {
+	&mov	("ecx",&DWP(-4,$ctx));
+	&xor	($out,$out);
+	&mov	("eax",&DWP(-8,$ctx));		# borrow $len
+&set_label("${mode}_prepare");
+	&mov	(&DWP(12,"esp",$out),"ecx");
+	&bswap	("ecx");
+	&movq	(&QWP(0,"esp",$out),"mm0");
+	&inc	("ecx");
+	&mov	(&DWP(8,"esp",$out),"eax");
+	&bswap	("ecx");
+	&lea	($out,&DWP(16,$out));
+	&cmp	($out,$chunk);
+	&jb	(&label("${mode}_prepare"));
+
+	&mov	(&DWP(-4,$ctx),"ecx");
+	&lea	($inp,&DWP(0,"esp"));
+	&lea	($out,&DWP(0,"esp"));
+	&mov	($len,$chunk);
+						} else {
+	&test	($out,0x0f);			# out_misaligned
+	&cmovnz	($out,"esp");
+	&test	($inp,0x0f);			# inp_misaligned
+	&jz	(&label("${mode}_inp_aligned"));
+	&shr	($len,2);
+	&data_byte(0xf3,0xa5);			# rep movsl
+	&sub	($out,$chunk);
+	&mov	($len,$chunk);
+	&mov	($inp,$out);
+&set_label("${mode}_inp_aligned");
+						}
+	&lea	("eax",&DWP(-16,$ctx));		# ivp
+	&lea	("ebx",&DWP(16,$ctx));		# key
+	&shr	($len,4);			# len/=AES_BLOCK_SIZE
+	&data_byte(0xf3,0x0f,0xa7,$opcode);	# rep xcrypt*
+						if ($mode !~ /ecb|ctr/) {
+	&movaps	("xmm0",&QWP(0,"eax"));
+	&movaps	(&QWP(-16,$ctx),"xmm0");	# copy [or refresh] iv
+						}
+	&mov	($out,&DWP(0,"ebp"));		# restore parameters
+	&mov	($chunk,&DWP(12,"ebp"));
+						if ($mode eq "ctr32") {
+	&mov	($inp,&DWP(4,"ebp"));
+	&xor	($len,$len);
+&set_label("${mode}_xor");
+	&movups	("xmm1",&QWP(0,$inp,$len));
+	&lea	($len,&DWP(16,$len));
+	&pxor	("xmm1",&QWP(-16,"esp",$len));
+	&movups	(&QWP(-16,$out,$len),"xmm1");
+	&cmp	($len,$chunk);
+	&jb	(&label("${mode}_xor"));
+						} else {
+	&test	($out,0x0f);
+	&jz	(&label("${mode}_out_aligned"));
+	&mov	($len,$chunk);
+	&lea	($inp,&DWP(0,"esp"));
+	&shr	($len,2);
+	&data_byte(0xf3,0xa5);			# rep movsl
+	&sub	($out,$chunk);
+&set_label("${mode}_out_aligned");
+	&mov	($inp,&DWP(4,"ebp"));
+						}
+	&mov	($len,&DWP(8,"ebp"));
+	&add	($out,$chunk);
+	&add	($inp,$chunk);
+	&sub	($len,$chunk);
+	&mov	($chunk,$PADLOCK_CHUNK);
+    if (!$PADLOCK_PREFETCH{$mode}) {
+	&jnz	(&label("${mode}_loop"));
+    } else {
+	&jz	(&label("${mode}_break"));
+	&cmp	($len,$chunk);
+	&jae	(&label("${mode}_loop"));
+
+&set_label("${mode}_unaligned_tail");
+	&xor	("eax","eax");
+	&cmp	("esp","ebp");
+	&cmove	("eax",$len);
+	&sub	("esp","eax");			# alloca
+	&mov	("eax", $out);			# save parameters
+	&mov	($chunk,$len);
+	&shr	($len,2);
+	&lea	($out,&DWP(0,"esp"));
+	&data_byte(0xf3,0xa5);			# rep movsl
+	&mov	($inp,"esp");
+	&mov	($out,"eax");			# restore parameters
+	&mov	($len,$chunk);
+	&jmp	(&label("${mode}_loop"));
+
+&set_label("${mode}_break",16);
+    }
+						if ($mode ne "ctr32") {
+	&cmp	("esp","ebp");
+	&je	(&label("${mode}_done"));
+						}
+	&pxor	("xmm0","xmm0");
+	&lea	("eax",&DWP(0,"esp"));
+&set_label("${mode}_bzero");
+	&movaps	(&QWP(0,"eax"),"xmm0");
+	&lea	("eax",&DWP(16,"eax"));
+	&cmp	("ebp","eax");
+	&ja	(&label("${mode}_bzero"));
+
+&set_label("${mode}_done");
+	&mov	("ebp",&DWP(16,"ebp"));
+	&lea	("esp",&DWP(24,"ebp"));
+						if ($mode ne "ctr32") {
+	&jmp	(&label("${mode}_exit"));
+
+&set_label("${mode}_aligned",16);
+    if ($PADLOCK_PREFETCH{$mode}) {
+	&lea	("ebp",&DWP(0,$inp,$len));
+	&neg	("ebp");
+	&and	("ebp",0xfff);			# distance to page boundary
+	&xor	("eax","eax");
+	&cmp	("ebp",$PADLOCK_PREFETCH{$mode});
+	&mov	("ebp",$PADLOCK_PREFETCH{$mode}-1);
+	&cmovae	("ebp","eax");
+	&and	("ebp",$len);			# remainder
+	&sub	($len,"ebp");
+	&jz	(&label("${mode}_aligned_tail"));
+    }
+	&lea	("eax",&DWP(-16,$ctx));		# ivp
+	&lea	("ebx",&DWP(16,$ctx));		# key
+	&shr	($len,4);			# len/=AES_BLOCK_SIZE
+	&data_byte(0xf3,0x0f,0xa7,$opcode);	# rep xcrypt*
+						if ($mode ne "ecb") {
+	&movaps	("xmm0",&QWP(0,"eax"));
+	&movaps	(&QWP(-16,$ctx),"xmm0");	# copy [or refresh] iv
+						}
+    if ($PADLOCK_PREFETCH{$mode}) {
+	&test	("ebp","ebp");
+	&jz	(&label("${mode}_exit"));
+
+&set_label("${mode}_aligned_tail");
+	&mov	($len,"ebp");
+	&lea	("ebp",&DWP(-24,"esp"));
+	&mov	("esp","ebp");
+	&mov	("eax","ebp");
+	&sub	("esp",$len);
+	&and	("ebp",-16);
+	&and	("esp",-16);
+	&mov	(&DWP(16,"ebp"),"eax");
+	&mov	("eax", $out);			# save parameters
+	&mov	($chunk,$len);
+	&shr	($len,2);
+	&lea	($out,&DWP(0,"esp"));
+	&data_byte(0xf3,0xa5);			# rep movsl
+	&mov	($inp,"esp");
+	&mov	($out,"eax");			# restore parameters
+	&mov	($len,$chunk);
+	&jmp	(&label("${mode}_loop"));
+    }
+&set_label("${mode}_exit");			}
+	&mov	("eax",1);
+	&lea	("esp",&DWP(4,"esp"));		# popf
+	&emms	()				if ($mode eq "ctr32");
+&set_label("${mode}_abort");
+&function_end("padlock_${mode}_encrypt");
+}
+
+&generate_mode("ecb",0xc8);
+&generate_mode("cbc",0xd0);
+&generate_mode("cfb",0xe0);
+&generate_mode("ofb",0xe8);
+&generate_mode("ctr32",0xc8);	# yes, it implements own CTR with ECB opcode,
+				# because hardware CTR was introduced later
+				# and even has errata on certain C7 stepping.
+				# own implementation *always* works, though
+				# ~15% slower than dedicated hardware...
+
+&function_begin_B("padlock_xstore");
+	&push	("edi");
+	&mov	("edi",&wparam(0));
+	&mov	("edx",&wparam(1));
+	&data_byte(0x0f,0xa7,0xc0);		# xstore
+	&pop	("edi");
+	&ret	();
+&function_end_B("padlock_xstore");
+
+&function_begin_B("_win32_segv_handler");
+	&mov	("eax",1);			# ExceptionContinueSearch
+	&mov	("edx",&wparam(0));		# *ExceptionRecord
+	&mov	("ecx",&wparam(2));		# *ContextRecord
+	&cmp	(&DWP(0,"edx"),0xC0000005)	# ExceptionRecord->ExceptionCode == STATUS_ACCESS_VIOLATION
+	&jne	(&label("ret"));
+	&add	(&DWP(184,"ecx"),4);		# skip over rep sha*
+	&mov	("eax",0);			# ExceptionContinueExecution
+&set_label("ret");
+	&ret	();
+&function_end_B("_win32_segv_handler");
+&safeseh("_win32_segv_handler")			if ($::win32);
+
+&function_begin_B("padlock_sha1_oneshot");
+	&push	("edi");
+	&push	("esi");
+	&xor	("eax","eax");
+	&mov	("edi",&wparam(0));
+	&mov	("esi",&wparam(1));
+	&mov	("ecx",&wparam(2));
+    if ($::win32 or $::coff) {
+    	&push	(&::islabel("_win32_segv_handler"));
+	&data_byte(0x64,0xff,0x30);		# push	%fs:(%eax)
+	&data_byte(0x64,0x89,0x20);		# mov	%esp,%fs:(%eax)
+    }
+	&mov	("edx","esp");			# put aside %esp
+	&add	("esp",-128);			# 32 is enough but spec says 128
+	&movups	("xmm0",&QWP(0,"edi"));		# copy-in context
+	&and	("esp",-16);
+	&mov	("eax",&DWP(16,"edi"));
+	&movaps	(&QWP(0,"esp"),"xmm0");
+	&mov	("edi","esp");
+	&mov	(&DWP(16,"esp"),"eax");
+	&xor	("eax","eax");
+	&data_byte(0xf3,0x0f,0xa6,0xc8);	# rep xsha1
+	&movaps	("xmm0",&QWP(0,"esp"));
+	&mov	("eax",&DWP(16,"esp"));
+	&mov	("esp","edx");			# restore %esp
+    if ($::win32 or $::coff) {
+	&data_byte(0x64,0x8f,0x05,0,0,0,0);	# pop	%fs:0
+	&lea	("esp",&DWP(4,"esp"));
+    }
+	&mov	("edi",&wparam(0));
+	&movups	(&QWP(0,"edi"),"xmm0");		# copy-out context
+	&mov	(&DWP(16,"edi"),"eax");
+	&pop	("esi");
+	&pop	("edi");
+	&ret	();
+&function_end_B("padlock_sha1_oneshot");
+
+&function_begin_B("padlock_sha1_blocks");
+	&push	("edi");
+	&push	("esi");
+	&mov	("edi",&wparam(0));
+	&mov	("esi",&wparam(1));
+	&mov	("edx","esp");			# put aside %esp
+	&mov	("ecx",&wparam(2));
+	&add	("esp",-128);
+	&movups	("xmm0",&QWP(0,"edi"));		# copy-in context
+	&and	("esp",-16);
+	&mov	("eax",&DWP(16,"edi"));
+	&movaps	(&QWP(0,"esp"),"xmm0");
+	&mov	("edi","esp");
+	&mov	(&DWP(16,"esp"),"eax");
+	&mov	("eax",-1);
+	&data_byte(0xf3,0x0f,0xa6,0xc8);	# rep xsha1
+	&movaps	("xmm0",&QWP(0,"esp"));
+	&mov	("eax",&DWP(16,"esp"));
+	&mov	("esp","edx");			# restore %esp
+	&mov	("edi",&wparam(0));
+	&movups	(&QWP(0,"edi"),"xmm0");		# copy-out context
+	&mov	(&DWP(16,"edi"),"eax");
+ 	&pop	("esi");
+	&pop	("edi");
+	&ret	();
+&function_end_B("padlock_sha1_blocks");
+
+&function_begin_B("padlock_sha256_oneshot");
+	&push	("edi");
+	&push	("esi");
+	&xor	("eax","eax");
+	&mov	("edi",&wparam(0));
+	&mov	("esi",&wparam(1));
+	&mov	("ecx",&wparam(2));
+    if ($::win32 or $::coff) {
+    	&push	(&::islabel("_win32_segv_handler"));
+	&data_byte(0x64,0xff,0x30);		# push	%fs:(%eax)
+	&data_byte(0x64,0x89,0x20);		# mov	%esp,%fs:(%eax)
+    }
+	&mov	("edx","esp");			# put aside %esp
+	&add	("esp",-128);
+	&movups	("xmm0",&QWP(0,"edi"));		# copy-in context
+	&and	("esp",-16);
+	&movups	("xmm1",&QWP(16,"edi"));
+	&movaps	(&QWP(0,"esp"),"xmm0");
+	&mov	("edi","esp");
+	&movaps	(&QWP(16,"esp"),"xmm1");
+	&xor	("eax","eax");
+	&data_byte(0xf3,0x0f,0xa6,0xd0);	# rep xsha256
+	&movaps	("xmm0",&QWP(0,"esp"));
+	&movaps	("xmm1",&QWP(16,"esp"));
+	&mov	("esp","edx");			# restore %esp
+    if ($::win32 or $::coff) {
+	&data_byte(0x64,0x8f,0x05,0,0,0,0);	# pop	%fs:0
+	&lea	("esp",&DWP(4,"esp"));
+    }
+	&mov	("edi",&wparam(0));
+	&movups	(&QWP(0,"edi"),"xmm0");		# copy-out context
+	&movups	(&QWP(16,"edi"),"xmm1");
+	&pop	("esi");
+	&pop	("edi");
+	&ret	();
+&function_end_B("padlock_sha256_oneshot");
+
+&function_begin_B("padlock_sha256_blocks");
+	&push	("edi");
+	&push	("esi");
+	&mov	("edi",&wparam(0));
+	&mov	("esi",&wparam(1));
+	&mov	("ecx",&wparam(2));
+	&mov	("edx","esp");			# put aside %esp
+	&add	("esp",-128);
+	&movups	("xmm0",&QWP(0,"edi"));		# copy-in context
+	&and	("esp",-16);
+	&movups	("xmm1",&QWP(16,"edi"));
+	&movaps	(&QWP(0,"esp"),"xmm0");
+	&mov	("edi","esp");
+	&movaps	(&QWP(16,"esp"),"xmm1");
+	&mov	("eax",-1);
+	&data_byte(0xf3,0x0f,0xa6,0xd0);	# rep xsha256
+	&movaps	("xmm0",&QWP(0,"esp"));
+	&movaps	("xmm1",&QWP(16,"esp"));
+	&mov	("esp","edx");			# restore %esp
+	&mov	("edi",&wparam(0));
+	&movups	(&QWP(0,"edi"),"xmm0");		# copy-out context
+	&movups	(&QWP(16,"edi"),"xmm1");
+	&pop	("esi");
+	&pop	("edi");
+	&ret	();
+&function_end_B("padlock_sha256_blocks");
+
+&function_begin_B("padlock_sha512_blocks");
+	&push	("edi");
+	&push	("esi");
+	&mov	("edi",&wparam(0));
+	&mov	("esi",&wparam(1));
+	&mov	("ecx",&wparam(2));
+	&mov	("edx","esp");			# put aside %esp
+	&add	("esp",-128);
+	&movups	("xmm0",&QWP(0,"edi"));		# copy-in context
+	&and	("esp",-16);
+	&movups	("xmm1",&QWP(16,"edi"));
+	&movups	("xmm2",&QWP(32,"edi"));
+	&movups	("xmm3",&QWP(48,"edi"));
+	&movaps	(&QWP(0,"esp"),"xmm0");
+	&mov	("edi","esp");
+	&movaps	(&QWP(16,"esp"),"xmm1");
+	&movaps	(&QWP(32,"esp"),"xmm2");
+	&movaps	(&QWP(48,"esp"),"xmm3");
+	&data_byte(0xf3,0x0f,0xa6,0xe0);	# rep xsha512
+	&movaps	("xmm0",&QWP(0,"esp"));
+	&movaps	("xmm1",&QWP(16,"esp"));
+	&movaps	("xmm2",&QWP(32,"esp"));
+	&movaps	("xmm3",&QWP(48,"esp"));
+	&mov	("esp","edx");			# restore %esp
+	&mov	("edi",&wparam(0));
+	&movups	(&QWP(0,"edi"),"xmm0");		# copy-out context
+	&movups	(&QWP(16,"edi"),"xmm1");
+	&movups	(&QWP(32,"edi"),"xmm2");
+	&movups	(&QWP(48,"edi"),"xmm3");
+	&pop	("esi");
+	&pop	("edi");
+	&ret	();
+&function_end_B("padlock_sha512_blocks");
+
+&asciz	("VIA Padlock x86 module, CRYPTOGAMS by <appro\@openssl.org>");
+&align	(16);
+
+&dataseg();
+# Essentially this variable belongs in thread local storage.
+# Having this variable global on the other hand can only cause
+# few bogus key reloads [if any at all on signle-CPU system],
+# so we accept the penalty...
+&set_label("padlock_saved_context",4);
+&data_word(0);
+
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/asm/e_padlock-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/engines/asm/e_padlock-x86_64.pl
new file mode 100644
index 000000000..09b0aaa48
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/asm/e_padlock-x86_64.pl
@@ -0,0 +1,583 @@
+#! /usr/bin/env perl
+# Copyright 2011-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+# ====================================================================
+# Written by Andy Polyakov <appro@openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+
+# September 2011
+#
+# Assembler helpers for Padlock engine. See even e_padlock-x86.pl for
+# details.
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../crypto/perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+$code=".text\n";
+
+%PADLOCK_PREFETCH=(ecb=>128, cbc=>64, ctr32=>32);	# prefetch errata
+$PADLOCK_CHUNK=512;	# Must be a power of 2 between 32 and 2^20
+
+$ctx="%rdx";
+$out="%rdi";
+$inp="%rsi";
+$len="%rcx";
+$chunk="%rbx";
+
+($arg1,$arg2,$arg3,$arg4)=$win64?("%rcx","%rdx","%r8", "%r9") : # Win64 order
+                                 ("%rdi","%rsi","%rdx","%rcx"); # Unix order
+
+$code.=<<___;
+.globl	padlock_capability
+.type	padlock_capability,\@abi-omnipotent
+.align	16
+padlock_capability:
+	mov	%rbx,%r8
+	xor	%eax,%eax
+	cpuid
+	xor	%eax,%eax
+	cmp	\$`"0x".unpack("H*",'tneC')`,%ebx
+	jne	.Lzhaoxin
+	cmp	\$`"0x".unpack("H*",'Hrua')`,%edx
+	jne	.Lnoluck
+	cmp	\$`"0x".unpack("H*",'slua')`,%ecx
+	jne	.Lnoluck
+	jmp	.LzhaoxinEnd
+.Lzhaoxin:
+	cmp	\$`"0x".unpack("H*",'hS  ')`,%ebx
+	jne	.Lnoluck
+	cmp	\$`"0x".unpack("H*",'hgna')`,%edx
+	jne	.Lnoluck
+	cmp	\$`"0x".unpack("H*",'  ia')`,%ecx
+	jne	.Lnoluck
+.LzhaoxinEnd:
+	mov	\$0xC0000000,%eax
+	cpuid
+	mov	%eax,%edx
+	xor	%eax,%eax
+	cmp	\$0xC0000001,%edx
+	jb	.Lnoluck
+	mov	\$0xC0000001,%eax
+	cpuid
+	mov	%edx,%eax
+	and	\$0xffffffef,%eax
+	or	\$0x10,%eax		# set Nano bit#4
+.Lnoluck:
+	mov	%r8,%rbx
+	ret
+.size	padlock_capability,.-padlock_capability
+
+.globl	padlock_key_bswap
+.type	padlock_key_bswap,\@abi-omnipotent,0
+.align	16
+padlock_key_bswap:
+	mov	240($arg1),%edx
+.Lbswap_loop:
+	mov	($arg1),%eax
+	bswap	%eax
+	mov	%eax,($arg1)
+	lea	4($arg1),$arg1
+	sub	\$1,%edx
+	jnz	.Lbswap_loop
+	ret
+.size	padlock_key_bswap,.-padlock_key_bswap
+
+.globl	padlock_verify_context
+.type	padlock_verify_context,\@abi-omnipotent
+.align	16
+padlock_verify_context:
+	mov	$arg1,$ctx
+	pushf
+	lea	.Lpadlock_saved_context(%rip),%rax
+	call	_padlock_verify_ctx
+	lea	8(%rsp),%rsp
+	ret
+.size	padlock_verify_context,.-padlock_verify_context
+
+.type	_padlock_verify_ctx,\@abi-omnipotent
+.align	16
+_padlock_verify_ctx:
+	mov	8(%rsp),%r8
+	bt	\$30,%r8
+	jnc	.Lverified
+	cmp	(%rax),$ctx
+	je	.Lverified
+	pushf
+	popf
+.Lverified:
+	mov	$ctx,(%rax)
+	ret
+.size	_padlock_verify_ctx,.-_padlock_verify_ctx
+
+.globl	padlock_reload_key
+.type	padlock_reload_key,\@abi-omnipotent
+.align	16
+padlock_reload_key:
+	pushf
+	popf
+	ret
+.size	padlock_reload_key,.-padlock_reload_key
+
+.globl	padlock_aes_block
+.type	padlock_aes_block,\@function,3
+.align	16
+padlock_aes_block:
+	mov	%rbx,%r8
+	mov	\$1,$len
+	lea	32($ctx),%rbx		# key
+	lea	16($ctx),$ctx		# control word
+	.byte	0xf3,0x0f,0xa7,0xc8	# rep xcryptecb
+	mov	%r8,%rbx
+	ret
+.size	padlock_aes_block,.-padlock_aes_block
+
+.globl	padlock_xstore
+.type	padlock_xstore,\@function,2
+.align	16
+padlock_xstore:
+	mov	%esi,%edx
+	.byte	0x0f,0xa7,0xc0		# xstore
+	ret
+.size	padlock_xstore,.-padlock_xstore
+
+.globl	padlock_sha1_oneshot
+.type	padlock_sha1_oneshot,\@function,3
+.align	16
+padlock_sha1_oneshot:
+	mov	%rdx,%rcx
+	mov	%rdi,%rdx		# put aside %rdi
+	movups	(%rdi),%xmm0		# copy-in context
+	sub	\$128+8,%rsp
+	mov	16(%rdi),%eax
+	movaps	%xmm0,(%rsp)
+	mov	%rsp,%rdi
+	mov	%eax,16(%rsp)
+	xor	%rax,%rax
+	.byte	0xf3,0x0f,0xa6,0xc8	# rep xsha1
+	movaps	(%rsp),%xmm0
+	mov	16(%rsp),%eax
+	add	\$128+8,%rsp
+	movups	%xmm0,(%rdx)		# copy-out context
+	mov	%eax,16(%rdx)
+	ret
+.size	padlock_sha1_oneshot,.-padlock_sha1_oneshot
+
+.globl	padlock_sha1_blocks
+.type	padlock_sha1_blocks,\@function,3
+.align	16
+padlock_sha1_blocks:
+	mov	%rdx,%rcx
+	mov	%rdi,%rdx		# put aside %rdi
+	movups	(%rdi),%xmm0		# copy-in context
+	sub	\$128+8,%rsp
+	mov	16(%rdi),%eax
+	movaps	%xmm0,(%rsp)
+	mov	%rsp,%rdi
+	mov	%eax,16(%rsp)
+	mov	\$-1,%rax
+	.byte	0xf3,0x0f,0xa6,0xc8	# rep xsha1
+	movaps	(%rsp),%xmm0
+	mov	16(%rsp),%eax
+	add	\$128+8,%rsp
+	movups	%xmm0,(%rdx)		# copy-out context
+	mov	%eax,16(%rdx)
+	ret
+.size	padlock_sha1_blocks,.-padlock_sha1_blocks
+
+.globl	padlock_sha256_oneshot
+.type	padlock_sha256_oneshot,\@function,3
+.align	16
+padlock_sha256_oneshot:
+	mov	%rdx,%rcx
+	mov	%rdi,%rdx		# put aside %rdi
+	movups	(%rdi),%xmm0		# copy-in context
+	sub	\$128+8,%rsp
+	movups	16(%rdi),%xmm1
+	movaps	%xmm0,(%rsp)
+	mov	%rsp,%rdi
+	movaps	%xmm1,16(%rsp)
+	xor	%rax,%rax
+	.byte	0xf3,0x0f,0xa6,0xd0	# rep xsha256
+	movaps	(%rsp),%xmm0
+	movaps	16(%rsp),%xmm1
+	add	\$128+8,%rsp
+	movups	%xmm0,(%rdx)		# copy-out context
+	movups	%xmm1,16(%rdx)
+	ret
+.size	padlock_sha256_oneshot,.-padlock_sha256_oneshot
+
+.globl	padlock_sha256_blocks
+.type	padlock_sha256_blocks,\@function,3
+.align	16
+padlock_sha256_blocks:
+	mov	%rdx,%rcx
+	mov	%rdi,%rdx		# put aside %rdi
+	movups	(%rdi),%xmm0		# copy-in context
+	sub	\$128+8,%rsp
+	movups	16(%rdi),%xmm1
+	movaps	%xmm0,(%rsp)
+	mov	%rsp,%rdi
+	movaps	%xmm1,16(%rsp)
+	mov	\$-1,%rax
+	.byte	0xf3,0x0f,0xa6,0xd0	# rep xsha256
+	movaps	(%rsp),%xmm0
+	movaps	16(%rsp),%xmm1
+	add	\$128+8,%rsp
+	movups	%xmm0,(%rdx)		# copy-out context
+	movups	%xmm1,16(%rdx)
+	ret
+.size	padlock_sha256_blocks,.-padlock_sha256_blocks
+
+.globl	padlock_sha512_blocks
+.type	padlock_sha512_blocks,\@function,3
+.align	16
+padlock_sha512_blocks:
+	mov	%rdx,%rcx
+	mov	%rdi,%rdx		# put aside %rdi
+	movups	(%rdi),%xmm0		# copy-in context
+	sub	\$128+8,%rsp
+	movups	16(%rdi),%xmm1
+	movups	32(%rdi),%xmm2
+	movups	48(%rdi),%xmm3
+	movaps	%xmm0,(%rsp)
+	mov	%rsp,%rdi
+	movaps	%xmm1,16(%rsp)
+	movaps	%xmm2,32(%rsp)
+	movaps	%xmm3,48(%rsp)
+	.byte	0xf3,0x0f,0xa6,0xe0	# rep xha512
+	movaps	(%rsp),%xmm0
+	movaps	16(%rsp),%xmm1
+	movaps	32(%rsp),%xmm2
+	movaps	48(%rsp),%xmm3
+	add	\$128+8,%rsp
+	movups	%xmm0,(%rdx)		# copy-out context
+	movups	%xmm1,16(%rdx)
+	movups	%xmm2,32(%rdx)
+	movups	%xmm3,48(%rdx)
+	ret
+.size	padlock_sha512_blocks,.-padlock_sha512_blocks
+___
+
+sub generate_mode {
+my ($mode,$opcode) = @_;
+# int padlock_$mode_encrypt(void *out, const void *inp,
+#		struct padlock_cipher_data *ctx, size_t len);
+$code.=<<___;
+.globl	padlock_${mode}_encrypt
+.type	padlock_${mode}_encrypt,\@function,4
+.align	16
+padlock_${mode}_encrypt:
+	push	%rbp
+	push	%rbx
+
+	xor	%eax,%eax
+	test	\$15,$ctx
+	jnz	.L${mode}_abort
+	test	\$15,$len
+	jnz	.L${mode}_abort
+	lea	.Lpadlock_saved_context(%rip),%rax
+	pushf
+	cld
+	call	_padlock_verify_ctx
+	lea	16($ctx),$ctx		# control word
+	xor	%eax,%eax
+	xor	%ebx,%ebx
+	testl	\$`1<<5`,($ctx)		# align bit in control word
+	jnz	.L${mode}_aligned
+	test	\$0x0f,$out
+	setz	%al			# !out_misaligned
+	test	\$0x0f,$inp
+	setz	%bl			# !inp_misaligned
+	test	%ebx,%eax
+	jnz	.L${mode}_aligned
+	neg	%rax
+	mov	\$$PADLOCK_CHUNK,$chunk
+	not	%rax			# out_misaligned?-1:0
+	lea	(%rsp),%rbp
+	cmp	$chunk,$len
+	cmovc	$len,$chunk		# chunk=len>PADLOCK_CHUNK?PADLOCK_CHUNK:len
+	and	$chunk,%rax		# out_misaligned?chunk:0
+	mov	$len,$chunk
+	neg	%rax
+	and	\$$PADLOCK_CHUNK-1,$chunk	# chunk%=PADLOCK_CHUNK
+	lea	(%rax,%rbp),%rsp
+	mov	\$$PADLOCK_CHUNK,%rax
+	cmovz	%rax,$chunk			# chunk=chunk?:PADLOCK_CHUNK
+___
+$code.=<<___				if ($mode eq "ctr32");
+.L${mode}_reenter:
+	mov	-4($ctx),%eax		# pull 32-bit counter
+	bswap	%eax
+	neg	%eax
+	and	\$`$PADLOCK_CHUNK/16-1`,%eax
+	mov	\$$PADLOCK_CHUNK,$chunk
+	shl	\$4,%eax
+	cmovz	$chunk,%rax
+	cmp	%rax,$len
+	cmova	%rax,$chunk		# don't let counter cross PADLOCK_CHUNK
+	cmovbe	$len,$chunk
+___
+$code.=<<___				if ($PADLOCK_PREFETCH{$mode});
+	cmp	$chunk,$len
+	ja	.L${mode}_loop
+	mov	$inp,%rax		# check if prefetch crosses page
+	cmp	%rsp,%rbp
+	cmove	$out,%rax
+	add	$len,%rax
+	neg	%rax
+	and	\$0xfff,%rax		# distance to page boundary
+	cmp	\$$PADLOCK_PREFETCH{$mode},%rax
+	mov	\$-$PADLOCK_PREFETCH{$mode},%rax
+	cmovae	$chunk,%rax		# mask=distance<prefetch?-prefetch:-1
+	and	%rax,$chunk
+	jz	.L${mode}_unaligned_tail
+___
+$code.=<<___;
+	jmp	.L${mode}_loop
+.align	16
+.L${mode}_loop:
+	cmp	$len,$chunk		# ctr32 artefact
+	cmova	$len,$chunk		# ctr32 artefact
+	mov	$out,%r8		# save parameters
+	mov	$inp,%r9
+	mov	$len,%r10
+	mov	$chunk,$len
+	mov	$chunk,%r11
+	test	\$0x0f,$out		# out_misaligned
+	cmovnz	%rsp,$out
+	test	\$0x0f,$inp		# inp_misaligned
+	jz	.L${mode}_inp_aligned
+	shr	\$3,$len
+	.byte	0xf3,0x48,0xa5		# rep movsq
+	sub	$chunk,$out
+	mov	$chunk,$len
+	mov	$out,$inp
+.L${mode}_inp_aligned:
+	lea	-16($ctx),%rax		# ivp
+	lea	16($ctx),%rbx		# key
+	shr	\$4,$len
+	.byte	0xf3,0x0f,0xa7,$opcode	# rep xcrypt*
+___
+$code.=<<___				if ($mode !~ /ecb|ctr/);
+	movdqa	(%rax),%xmm0
+	movdqa	%xmm0,-16($ctx)		# copy [or refresh] iv
+___
+$code.=<<___				if ($mode eq "ctr32");
+	mov	-4($ctx),%eax		# pull 32-bit counter
+	test	\$0xffff0000,%eax
+	jnz	.L${mode}_no_carry
+	bswap	%eax
+	add	\$0x10000,%eax
+	bswap	%eax
+	mov	%eax,-4($ctx)
+.L${mode}_no_carry:
+___
+$code.=<<___;
+	mov	%r8,$out		# restore parameters
+	mov	%r11,$chunk
+	test	\$0x0f,$out
+	jz	.L${mode}_out_aligned
+	mov	$chunk,$len
+	lea	(%rsp),$inp
+	shr	\$3,$len
+	.byte	0xf3,0x48,0xa5		# rep movsq
+	sub	$chunk,$out
+.L${mode}_out_aligned:
+	mov	%r9,$inp
+	mov	%r10,$len
+	add	$chunk,$out
+	add	$chunk,$inp
+	sub	$chunk,$len
+	mov	\$$PADLOCK_CHUNK,$chunk
+___
+					if (!$PADLOCK_PREFETCH{$mode}) {
+$code.=<<___;
+	jnz	.L${mode}_loop
+___
+					} else {
+$code.=<<___;
+	jz	.L${mode}_break
+	cmp	$chunk,$len
+	jae	.L${mode}_loop
+___
+$code.=<<___				if ($mode eq "ctr32");
+	mov	$len,$chunk
+	mov	$inp,%rax		# check if prefetch crosses page
+	cmp	%rsp,%rbp
+	cmove	$out,%rax
+	add	$len,%rax
+	neg	%rax
+	and	\$0xfff,%rax		# distance to page boundary
+	cmp	\$$PADLOCK_PREFETCH{$mode},%rax
+	mov	\$-$PADLOCK_PREFETCH{$mode},%rax
+	cmovae	$chunk,%rax
+	and	%rax,$chunk
+	jnz	.L${mode}_loop
+___
+$code.=<<___;
+.L${mode}_unaligned_tail:
+	xor	%eax,%eax
+	cmp	%rsp,%rbp
+	cmove	$len,%rax
+	mov	$out,%r8		# save parameters
+	mov	$len,$chunk
+	sub	%rax,%rsp		# alloca
+	shr	\$3,$len
+	lea	(%rsp),$out
+	.byte	0xf3,0x48,0xa5		# rep movsq
+	mov	%rsp,$inp
+	mov	%r8, $out		# restore parameters
+	mov	$chunk,$len
+	jmp	.L${mode}_loop
+.align	16
+.L${mode}_break:
+___
+					}
+$code.=<<___;
+	cmp	%rbp,%rsp
+	je	.L${mode}_done
+
+	pxor	%xmm0,%xmm0
+	lea	(%rsp),%rax
+.L${mode}_bzero:
+	movaps	%xmm0,(%rax)
+	lea	16(%rax),%rax
+	cmp	%rax,%rbp
+	ja	.L${mode}_bzero
+
+.L${mode}_done:
+	lea	(%rbp),%rsp
+	jmp	.L${mode}_exit
+
+.align	16
+.L${mode}_aligned:
+___
+$code.=<<___				if ($mode eq "ctr32");
+	mov	-4($ctx),%eax		# pull 32-bit counter
+	bswap	%eax
+	neg	%eax
+	and	\$0xffff,%eax
+	mov	\$`16*0x10000`,$chunk
+	shl	\$4,%eax
+	cmovz	$chunk,%rax
+	cmp	%rax,$len
+	cmova	%rax,$chunk		# don't let counter cross 2^16
+	cmovbe	$len,$chunk
+	jbe	.L${mode}_aligned_skip
+
+.L${mode}_aligned_loop:
+	mov	$len,%r10		# save parameters
+	mov	$chunk,$len
+	mov	$chunk,%r11
+
+	lea	-16($ctx),%rax		# ivp
+	lea	16($ctx),%rbx		# key
+	shr	\$4,$len		# len/=AES_BLOCK_SIZE
+	.byte	0xf3,0x0f,0xa7,$opcode	# rep xcrypt*
+
+	mov	-4($ctx),%eax		# pull 32-bit counter
+	bswap	%eax
+	add	\$0x10000,%eax
+	bswap	%eax
+	mov	%eax,-4($ctx)
+
+	mov	%r10,$len		# restore parameters
+	sub	%r11,$len
+	mov	\$`16*0x10000`,$chunk
+	jz	.L${mode}_exit
+	cmp	$chunk,$len
+	jae	.L${mode}_aligned_loop
+
+.L${mode}_aligned_skip:
+___
+$code.=<<___				if ($PADLOCK_PREFETCH{$mode});
+	lea	($inp,$len),%rbp
+	neg	%rbp
+	and	\$0xfff,%rbp		# distance to page boundary
+	xor	%eax,%eax
+	cmp	\$$PADLOCK_PREFETCH{$mode},%rbp
+	mov	\$$PADLOCK_PREFETCH{$mode}-1,%rbp
+	cmovae	%rax,%rbp
+	and	$len,%rbp		# remainder
+	sub	%rbp,$len
+	jz	.L${mode}_aligned_tail
+___
+$code.=<<___;
+	lea	-16($ctx),%rax		# ivp
+	lea	16($ctx),%rbx		# key
+	shr	\$4,$len		# len/=AES_BLOCK_SIZE
+	.byte	0xf3,0x0f,0xa7,$opcode	# rep xcrypt*
+___
+$code.=<<___				if ($mode !~ /ecb|ctr/);
+	movdqa	(%rax),%xmm0
+	movdqa	%xmm0,-16($ctx)		# copy [or refresh] iv
+___
+$code.=<<___				if ($PADLOCK_PREFETCH{$mode});
+	test	%rbp,%rbp		# check remainder
+	jz	.L${mode}_exit
+
+.L${mode}_aligned_tail:
+	mov	$out,%r8
+	mov	%rbp,$chunk
+	mov	%rbp,$len
+	lea	(%rsp),%rbp
+	sub	$len,%rsp
+	shr	\$3,$len
+	lea	(%rsp),$out
+	.byte	0xf3,0x48,0xa5		# rep movsq
+	lea	(%r8),$out
+	lea	(%rsp),$inp
+	mov	$chunk,$len
+	jmp	.L${mode}_loop
+___
+$code.=<<___;
+.L${mode}_exit:
+	mov	\$1,%eax
+	lea	8(%rsp),%rsp
+.L${mode}_abort:
+	pop	%rbx
+	pop	%rbp
+	ret
+.size	padlock_${mode}_encrypt,.-padlock_${mode}_encrypt
+___
+}
+
+&generate_mode("ecb",0xc8);
+&generate_mode("cbc",0xd0);
+&generate_mode("cfb",0xe0);
+&generate_mode("ofb",0xe8);
+&generate_mode("ctr32",0xd8);	# all 64-bit CPUs have working CTR...
+
+$code.=<<___;
+.asciz	"VIA Padlock x86_64 module, CRYPTOGAMS by <appro\@openssl.org>"
+.align	16
+.data
+.align	8
+.Lpadlock_saved_context:
+	.quad	0
+___
+$code =~ s/\`([^\`]*)\`/eval($1)/gem;
+
+print $code;
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/build.info b/trunk/3rdparty/openssl-1.1-fit/engines/build.info
new file mode 100644
index 000000000..df173ea69
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/build.info
@@ -0,0 +1,43 @@
+IF[{- !$disabled{"engine"} -}]
+
+  IF[{- $disabled{"dynamic-engine"} -}]
+    LIBS=../libcrypto
+    SOURCE[../libcrypto]=\
+            e_padlock.c {- $target{padlock_asm_src} -}
+    IF[{- !$disabled{capieng} -}]
+      SOURCE[../libcrypto]=e_capi.c
+    ENDIF
+    IF[{- !$disabled{afalgeng} -}]
+      SOURCE[../libcrypto]=e_afalg.c
+    ENDIF
+  ELSE
+    ENGINES=padlock
+    SOURCE[padlock]=e_padlock.c {- $target{padlock_asm_src} -}
+    DEPEND[padlock]=../libcrypto
+    INCLUDE[padlock]=../include
+    IF[{- !$disabled{capieng} -}]
+      ENGINES=capi
+      SOURCE[capi]=e_capi.c
+      DEPEND[capi]=../libcrypto
+      INCLUDE[capi]=../include
+    ENDIF
+    IF[{- !$disabled{afalgeng} -}]
+      ENGINES=afalg
+      SOURCE[afalg]=e_afalg.c
+      DEPEND[afalg]=../libcrypto
+      INCLUDE[afalg]= ../include
+    ENDIF
+
+    ENGINES_NO_INST=ossltest dasync
+    SOURCE[dasync]=e_dasync.c
+    DEPEND[dasync]=../libcrypto
+    INCLUDE[dasync]=../include
+    SOURCE[ossltest]=e_ossltest.c
+    DEPEND[ossltest]=../libcrypto
+    INCLUDE[ossltest]=../include
+  ENDIF
+
+  GENERATE[e_padlock-x86.s]=asm/e_padlock-x86.pl \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
+  GENERATE[e_padlock-x86_64.s]=asm/e_padlock-x86_64.pl $(PERLASM_SCHEME)
+ENDIF
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg.c b/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg.c
new file mode 100644
index 000000000..f09c396ed
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg.c
@@ -0,0 +1,870 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* Required for vmsplice */
+#ifndef _GNU_SOURCE
+# define _GNU_SOURCE
+#endif
+#include <stdio.h>
+#include <string.h>
+#include <unistd.h>
+
+#include <openssl/engine.h>
+#include <openssl/async.h>
+#include <openssl/err.h>
+#include "internal/nelem.h"
+
+#include <sys/socket.h>
+#include <linux/version.h>
+#define K_MAJ   4
+#define K_MIN1  1
+#define K_MIN2  0
+#if LINUX_VERSION_CODE < KERNEL_VERSION(K_MAJ, K_MIN1, K_MIN2) || \
+    !defined(AF_ALG)
+# ifndef PEDANTIC
+#  warning "AFALG ENGINE requires Kernel Headers >= 4.1.0"
+#  warning "Skipping Compilation of AFALG engine"
+# endif
+void engine_load_afalg_int(void);
+void engine_load_afalg_int(void)
+{
+}
+#else
+
+# include <linux/if_alg.h>
+# include <fcntl.h>
+# include <sys/utsname.h>
+
+# include <linux/aio_abi.h>
+# include <sys/syscall.h>
+# include <errno.h>
+
+# include "e_afalg.h"
+# include "e_afalg_err.c"
+
+# ifndef SOL_ALG
+#  define SOL_ALG 279
+# endif
+
+# ifdef ALG_ZERO_COPY
+#  ifndef SPLICE_F_GIFT
+#   define SPLICE_F_GIFT    (0x08)
+#  endif
+# endif
+
+# define ALG_AES_IV_LEN 16
+# define ALG_IV_LEN(len) (sizeof(struct af_alg_iv) + (len))
+# define ALG_OP_TYPE     unsigned int
+# define ALG_OP_LEN      (sizeof(ALG_OP_TYPE))
+
+#define ALG_MAX_SALG_NAME       64
+#define ALG_MAX_SALG_TYPE       14
+
+# ifdef OPENSSL_NO_DYNAMIC_ENGINE
+void engine_load_afalg_int(void);
+# endif
+
+/* Local Linkage Functions */
+static int afalg_init_aio(afalg_aio *aio);
+static int afalg_fin_cipher_aio(afalg_aio *ptr, int sfd,
+                                unsigned char *buf, size_t len);
+static int afalg_create_sk(afalg_ctx *actx, const char *ciphertype,
+                                const char *ciphername);
+static int afalg_destroy(ENGINE *e);
+static int afalg_init(ENGINE *e);
+static int afalg_finish(ENGINE *e);
+static const EVP_CIPHER *afalg_aes_cbc(int nid);
+static cbc_handles *get_cipher_handle(int nid);
+static int afalg_ciphers(ENGINE *e, const EVP_CIPHER **cipher,
+                         const int **nids, int nid);
+static int afalg_cipher_init(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                             const unsigned char *iv, int enc);
+static int afalg_do_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                           const unsigned char *in, size_t inl);
+static int afalg_cipher_cleanup(EVP_CIPHER_CTX *ctx);
+static int afalg_chk_platform(void);
+
+/* Engine Id and Name */
+static const char *engine_afalg_id = "afalg";
+static const char *engine_afalg_name = "AFALG engine support";
+
+static int afalg_cipher_nids[] = {
+    NID_aes_128_cbc,
+    NID_aes_192_cbc,
+    NID_aes_256_cbc,
+};
+
+static cbc_handles cbc_handle[] = {{AES_KEY_SIZE_128, NULL},
+                                    {AES_KEY_SIZE_192, NULL},
+                                    {AES_KEY_SIZE_256, NULL}};
+
+static ossl_inline int io_setup(unsigned n, aio_context_t *ctx)
+{
+    return syscall(__NR_io_setup, n, ctx);
+}
+
+static ossl_inline int eventfd(int n)
+{
+    return syscall(__NR_eventfd2, n, 0);
+}
+
+static ossl_inline int io_destroy(aio_context_t ctx)
+{
+    return syscall(__NR_io_destroy, ctx);
+}
+
+static ossl_inline int io_read(aio_context_t ctx, long n, struct iocb **iocb)
+{
+    return syscall(__NR_io_submit, ctx, n, iocb);
+}
+
+static ossl_inline int io_getevents(aio_context_t ctx, long min, long max,
+                               struct io_event *events,
+                               struct timespec *timeout)
+{
+    return syscall(__NR_io_getevents, ctx, min, max, events, timeout);
+}
+
+static void afalg_waitfd_cleanup(ASYNC_WAIT_CTX *ctx, const void *key,
+                                 OSSL_ASYNC_FD waitfd, void *custom)
+{
+    close(waitfd);
+}
+
+static int afalg_setup_async_event_notification(afalg_aio *aio)
+{
+    ASYNC_JOB *job;
+    ASYNC_WAIT_CTX *waitctx;
+    void *custom = NULL;
+    int ret;
+
+    if ((job = ASYNC_get_current_job()) != NULL) {
+        /* Async mode */
+        waitctx = ASYNC_get_wait_ctx(job);
+        if (waitctx == NULL) {
+            ALG_WARN("%s(%d): ASYNC_get_wait_ctx error", __FILE__, __LINE__);
+            return 0;
+        }
+        /* Get waitfd from ASYNC_WAIT_CTX if it is already set */
+        ret = ASYNC_WAIT_CTX_get_fd(waitctx, engine_afalg_id,
+                                    &aio->efd, &custom);
+        if (ret == 0) {
+            /*
+             * waitfd is not set in ASYNC_WAIT_CTX, create a new one
+             * and set it. efd will be signaled when AIO operation completes
+             */
+            aio->efd = eventfd(0);
+            if (aio->efd == -1) {
+                ALG_PERR("%s(%d): Failed to get eventfd : ", __FILE__,
+                         __LINE__);
+                AFALGerr(AFALG_F_AFALG_SETUP_ASYNC_EVENT_NOTIFICATION,
+                         AFALG_R_EVENTFD_FAILED);
+                return 0;
+            }
+            ret = ASYNC_WAIT_CTX_set_wait_fd(waitctx, engine_afalg_id,
+                                             aio->efd, custom,
+                                             afalg_waitfd_cleanup);
+            if (ret == 0) {
+                ALG_WARN("%s(%d): Failed to set wait fd", __FILE__, __LINE__);
+                close(aio->efd);
+                return 0;
+            }
+            /* make fd non-blocking in async mode */
+            if (fcntl(aio->efd, F_SETFL, O_NONBLOCK) != 0) {
+                ALG_WARN("%s(%d): Failed to set event fd as NONBLOCKING",
+                         __FILE__, __LINE__);
+            }
+        }
+        aio->mode = MODE_ASYNC;
+    } else {
+        /* Sync mode */
+        aio->efd = eventfd(0);
+        if (aio->efd == -1) {
+            ALG_PERR("%s(%d): Failed to get eventfd : ", __FILE__, __LINE__);
+            AFALGerr(AFALG_F_AFALG_SETUP_ASYNC_EVENT_NOTIFICATION,
+                     AFALG_R_EVENTFD_FAILED);
+            return 0;
+        }
+        aio->mode = MODE_SYNC;
+    }
+    return 1;
+}
+
+static int afalg_init_aio(afalg_aio *aio)
+{
+    int r = -1;
+
+    /* Initialise for AIO */
+    aio->aio_ctx = 0;
+    r = io_setup(MAX_INFLIGHTS, &aio->aio_ctx);
+    if (r < 0) {
+        ALG_PERR("%s(%d): io_setup error : ", __FILE__, __LINE__);
+        AFALGerr(AFALG_F_AFALG_INIT_AIO, AFALG_R_IO_SETUP_FAILED);
+        return 0;
+    }
+
+    memset(aio->cbt, 0, sizeof(aio->cbt));
+    aio->efd = -1;
+    aio->mode = MODE_UNINIT;
+
+    return 1;
+}
+
+static int afalg_fin_cipher_aio(afalg_aio *aio, int sfd, unsigned char *buf,
+                                size_t len)
+{
+    int r;
+    int retry = 0;
+    unsigned int done = 0;
+    struct iocb *cb;
+    struct timespec timeout;
+    struct io_event events[MAX_INFLIGHTS];
+    u_int64_t eval = 0;
+
+    timeout.tv_sec = 0;
+    timeout.tv_nsec = 0;
+
+    /* if efd has not been initialised yet do it here */
+    if (aio->mode == MODE_UNINIT) {
+        r = afalg_setup_async_event_notification(aio);
+        if (r == 0)
+            return 0;
+    }
+
+    cb = &(aio->cbt[0 % MAX_INFLIGHTS]);
+    memset(cb, '\0', sizeof(*cb));
+    cb->aio_fildes = sfd;
+    cb->aio_lio_opcode = IOCB_CMD_PREAD;
+    /*
+     * The pointer has to be converted to unsigned value first to avoid
+     * sign extension on cast to 64 bit value in 32-bit builds
+     */
+    cb->aio_buf = (size_t)buf;
+    cb->aio_offset = 0;
+    cb->aio_data = 0;
+    cb->aio_nbytes = len;
+    cb->aio_flags = IOCB_FLAG_RESFD;
+    cb->aio_resfd = aio->efd;
+
+    /*
+     * Perform AIO read on AFALG socket, this in turn performs an async
+     * crypto operation in kernel space
+     */
+    r = io_read(aio->aio_ctx, 1, &cb);
+    if (r < 0) {
+        ALG_PWARN("%s(%d): io_read failed : ", __FILE__, __LINE__);
+        return 0;
+    }
+
+    do {
+        /* While AIO read is being performed pause job */
+        ASYNC_pause_job();
+
+        /* Check for completion of AIO read */
+        r = read(aio->efd, &eval, sizeof(eval));
+        if (r < 0) {
+            if (errno == EAGAIN || errno == EWOULDBLOCK)
+                continue;
+            ALG_PERR("%s(%d): read failed for event fd : ", __FILE__, __LINE__);
+            return 0;
+        } else if (r == 0 || eval <= 0) {
+            ALG_WARN("%s(%d): eventfd read %d bytes, eval = %lu\n", __FILE__,
+                     __LINE__, r, eval);
+        }
+        if (eval > 0) {
+
+            /* Get results of AIO read */
+            r = io_getevents(aio->aio_ctx, 1, MAX_INFLIGHTS,
+                             events, &timeout);
+            if (r > 0) {
+                /*
+                 * events.res indicates the actual status of the operation.
+                 * Handle the error condition first.
+                 */
+                if (events[0].res < 0) {
+                    /*
+                     * Underlying operation cannot be completed at the time
+                     * of previous submission. Resubmit for the operation.
+                     */
+                    if (events[0].res == -EBUSY && retry++ < 3) {
+                        r = io_read(aio->aio_ctx, 1, &cb);
+                        if (r < 0) {
+                            ALG_PERR("%s(%d): retry %d for io_read failed : ",
+                                     __FILE__, __LINE__, retry);
+                            return 0;
+                        }
+                        continue;
+                    } else {
+                        /*
+                         * Retries exceed for -EBUSY or unrecoverable error
+                         * condition for this instance of operation.
+                         */
+                        ALG_WARN
+                            ("%s(%d): Crypto Operation failed with code %lld\n",
+                             __FILE__, __LINE__, events[0].res);
+                        return 0;
+                    }
+                }
+                /* Operation successful. */
+                done = 1;
+            } else if (r < 0) {
+                ALG_PERR("%s(%d): io_getevents failed : ", __FILE__, __LINE__);
+                return 0;
+            } else {
+                ALG_WARN("%s(%d): io_geteventd read 0 bytes\n", __FILE__,
+                         __LINE__);
+            }
+        }
+    } while (!done);
+
+    return 1;
+}
+
+static ossl_inline void afalg_set_op_sk(struct cmsghdr *cmsg,
+                                   const ALG_OP_TYPE op)
+{
+    cmsg->cmsg_level = SOL_ALG;
+    cmsg->cmsg_type = ALG_SET_OP;
+    cmsg->cmsg_len = CMSG_LEN(ALG_OP_LEN);
+    memcpy(CMSG_DATA(cmsg), &op, ALG_OP_LEN);
+}
+
+static void afalg_set_iv_sk(struct cmsghdr *cmsg, const unsigned char *iv,
+                            const unsigned int len)
+{
+    struct af_alg_iv *aiv;
+
+    cmsg->cmsg_level = SOL_ALG;
+    cmsg->cmsg_type = ALG_SET_IV;
+    cmsg->cmsg_len = CMSG_LEN(ALG_IV_LEN(len));
+    aiv = (struct af_alg_iv *)CMSG_DATA(cmsg);
+    aiv->ivlen = len;
+    memcpy(aiv->iv, iv, len);
+}
+
+static ossl_inline int afalg_set_key(afalg_ctx *actx, const unsigned char *key,
+                                const int klen)
+{
+    int ret;
+    ret = setsockopt(actx->bfd, SOL_ALG, ALG_SET_KEY, key, klen);
+    if (ret < 0) {
+        ALG_PERR("%s(%d): Failed to set socket option : ", __FILE__, __LINE__);
+        AFALGerr(AFALG_F_AFALG_SET_KEY, AFALG_R_SOCKET_SET_KEY_FAILED);
+        return 0;
+    }
+    return 1;
+}
+
+static int afalg_create_sk(afalg_ctx *actx, const char *ciphertype,
+                                const char *ciphername)
+{
+    struct sockaddr_alg sa;
+    int r = -1;
+
+    actx->bfd = actx->sfd = -1;
+
+    memset(&sa, 0, sizeof(sa));
+    sa.salg_family = AF_ALG;
+    strncpy((char *) sa.salg_type, ciphertype, ALG_MAX_SALG_TYPE);
+    sa.salg_type[ALG_MAX_SALG_TYPE-1] = '\0';
+    strncpy((char *) sa.salg_name, ciphername, ALG_MAX_SALG_NAME);
+    sa.salg_name[ALG_MAX_SALG_NAME-1] = '\0';
+
+    actx->bfd = socket(AF_ALG, SOCK_SEQPACKET, 0);
+    if (actx->bfd == -1) {
+        ALG_PERR("%s(%d): Failed to open socket : ", __FILE__, __LINE__);
+        AFALGerr(AFALG_F_AFALG_CREATE_SK, AFALG_R_SOCKET_CREATE_FAILED);
+        goto err;
+    }
+
+    r = bind(actx->bfd, (struct sockaddr *)&sa, sizeof(sa));
+    if (r < 0) {
+        ALG_PERR("%s(%d): Failed to bind socket : ", __FILE__, __LINE__);
+        AFALGerr(AFALG_F_AFALG_CREATE_SK, AFALG_R_SOCKET_BIND_FAILED);
+        goto err;
+    }
+
+    actx->sfd = accept(actx->bfd, NULL, 0);
+    if (actx->sfd < 0) {
+        ALG_PERR("%s(%d): Socket Accept Failed : ", __FILE__, __LINE__);
+        AFALGerr(AFALG_F_AFALG_CREATE_SK, AFALG_R_SOCKET_ACCEPT_FAILED);
+        goto err;
+    }
+
+    return 1;
+
+ err:
+    if (actx->bfd >= 0)
+        close(actx->bfd);
+    if (actx->sfd >= 0)
+        close(actx->sfd);
+    actx->bfd = actx->sfd = -1;
+    return 0;
+}
+
+static int afalg_start_cipher_sk(afalg_ctx *actx, const unsigned char *in,
+                                 size_t inl, const unsigned char *iv,
+                                 unsigned int enc)
+{
+    struct msghdr msg = { 0 };
+    struct cmsghdr *cmsg;
+    struct iovec iov;
+    ssize_t sbytes;
+# ifdef ALG_ZERO_COPY
+    int ret;
+# endif
+    char cbuf[CMSG_SPACE(ALG_IV_LEN(ALG_AES_IV_LEN)) + CMSG_SPACE(ALG_OP_LEN)];
+
+    memset(cbuf, 0, sizeof(cbuf));
+    msg.msg_control = cbuf;
+    msg.msg_controllen = sizeof(cbuf);
+
+    /*
+     * cipher direction (i.e. encrypt or decrypt) and iv are sent to the
+     * kernel as part of sendmsg()'s ancillary data
+     */
+    cmsg = CMSG_FIRSTHDR(&msg);
+    afalg_set_op_sk(cmsg, enc);
+    cmsg = CMSG_NXTHDR(&msg, cmsg);
+    afalg_set_iv_sk(cmsg, iv, ALG_AES_IV_LEN);
+
+    /* iov that describes input data */
+    iov.iov_base = (unsigned char *)in;
+    iov.iov_len = inl;
+
+    msg.msg_flags = MSG_MORE;
+
+# ifdef ALG_ZERO_COPY
+    /*
+     * ZERO_COPY mode
+     * Works best when buffer is 4k aligned
+     * OPENS: out of place processing (i.e. out != in)
+     */
+
+    /* Input data is not sent as part of call to sendmsg() */
+    msg.msg_iovlen = 0;
+    msg.msg_iov = NULL;
+
+    /* Sendmsg() sends iv and cipher direction to the kernel */
+    sbytes = sendmsg(actx->sfd, &msg, 0);
+    if (sbytes < 0) {
+        ALG_PERR("%s(%d): sendmsg failed for zero copy cipher operation : ",
+                 __FILE__, __LINE__);
+        return 0;
+    }
+
+    /*
+     * vmsplice and splice are used to pin the user space input buffer for
+     * kernel space processing avoiding copys from user to kernel space
+     */
+    ret = vmsplice(actx->zc_pipe[1], &iov, 1, SPLICE_F_GIFT);
+    if (ret < 0) {
+        ALG_PERR("%s(%d): vmsplice failed : ", __FILE__, __LINE__);
+        return 0;
+    }
+
+    ret = splice(actx->zc_pipe[0], NULL, actx->sfd, NULL, inl, 0);
+    if (ret < 0) {
+        ALG_PERR("%s(%d): splice failed : ", __FILE__, __LINE__);
+        return 0;
+    }
+# else
+    msg.msg_iovlen = 1;
+    msg.msg_iov = &iov;
+
+    /* Sendmsg() sends iv, cipher direction and input data to the kernel */
+    sbytes = sendmsg(actx->sfd, &msg, 0);
+    if (sbytes < 0) {
+        ALG_PERR("%s(%d): sendmsg failed for cipher operation : ", __FILE__,
+                 __LINE__);
+        return 0;
+    }
+
+    if (sbytes != (ssize_t) inl) {
+        ALG_WARN("Cipher operation send bytes %zd != inlen %zd\n", sbytes,
+                inl);
+        return 0;
+    }
+# endif
+
+    return 1;
+}
+
+static int afalg_cipher_init(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                             const unsigned char *iv, int enc)
+{
+    int ciphertype;
+    int ret;
+    afalg_ctx *actx;
+    char ciphername[ALG_MAX_SALG_NAME];
+
+    if (ctx == NULL || key == NULL) {
+        ALG_WARN("%s(%d): Null Parameter\n", __FILE__, __LINE__);
+        return 0;
+    }
+
+    if (EVP_CIPHER_CTX_cipher(ctx) == NULL) {
+        ALG_WARN("%s(%d): Cipher object NULL\n", __FILE__, __LINE__);
+        return 0;
+    }
+
+    actx = EVP_CIPHER_CTX_get_cipher_data(ctx);
+    if (actx == NULL) {
+        ALG_WARN("%s(%d): Cipher data NULL\n", __FILE__, __LINE__);
+        return 0;
+    }
+
+    ciphertype = EVP_CIPHER_CTX_nid(ctx);
+    switch (ciphertype) {
+    case NID_aes_128_cbc:
+    case NID_aes_192_cbc:
+    case NID_aes_256_cbc:
+        strncpy(ciphername, "cbc(aes)", ALG_MAX_SALG_NAME);
+        break;
+    default:
+        ALG_WARN("%s(%d): Unsupported Cipher type %d\n", __FILE__, __LINE__,
+                 ciphertype);
+        return 0;
+    }
+    ciphername[ALG_MAX_SALG_NAME-1]='\0';
+
+    if (ALG_AES_IV_LEN != EVP_CIPHER_CTX_iv_length(ctx)) {
+        ALG_WARN("%s(%d): Unsupported IV length :%d\n", __FILE__, __LINE__,
+                 EVP_CIPHER_CTX_iv_length(ctx));
+        return 0;
+    }
+
+    /* Setup AFALG socket for crypto processing */
+    ret = afalg_create_sk(actx, "skcipher", ciphername);
+    if (ret < 1)
+        return 0;
+
+
+    ret = afalg_set_key(actx, key, EVP_CIPHER_CTX_key_length(ctx));
+    if (ret < 1)
+        goto err;
+
+    /* Setup AIO ctx to allow async AFALG crypto processing */
+    if (afalg_init_aio(&actx->aio) == 0)
+        goto err;
+
+# ifdef ALG_ZERO_COPY
+    pipe(actx->zc_pipe);
+# endif
+
+    actx->init_done = MAGIC_INIT_NUM;
+
+    return 1;
+
+err:
+    close(actx->sfd);
+    close(actx->bfd);
+    return 0;
+}
+
+static int afalg_do_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                           const unsigned char *in, size_t inl)
+{
+    afalg_ctx *actx;
+    int ret;
+    char nxtiv[ALG_AES_IV_LEN] = { 0 };
+
+    if (ctx == NULL || out == NULL || in == NULL) {
+        ALG_WARN("NULL parameter passed to function %s(%d)\n", __FILE__,
+                 __LINE__);
+        return 0;
+    }
+
+    actx = (afalg_ctx *) EVP_CIPHER_CTX_get_cipher_data(ctx);
+    if (actx == NULL || actx->init_done != MAGIC_INIT_NUM) {
+        ALG_WARN("%s afalg ctx passed\n",
+                 ctx == NULL ? "NULL" : "Uninitialised");
+        return 0;
+    }
+
+    /*
+     * set iv now for decrypt operation as the input buffer can be
+     * overwritten for inplace operation where in = out.
+     */
+    if (EVP_CIPHER_CTX_encrypting(ctx) == 0) {
+        memcpy(nxtiv, in + (inl - ALG_AES_IV_LEN), ALG_AES_IV_LEN);
+    }
+
+    /* Send input data to kernel space */
+    ret = afalg_start_cipher_sk(actx, (unsigned char *)in, inl,
+                                EVP_CIPHER_CTX_iv(ctx),
+                                EVP_CIPHER_CTX_encrypting(ctx));
+    if (ret < 1) {
+        return 0;
+    }
+
+    /* Perform async crypto operation in kernel space */
+    ret = afalg_fin_cipher_aio(&actx->aio, actx->sfd, out, inl);
+    if (ret < 1)
+        return 0;
+
+    if (EVP_CIPHER_CTX_encrypting(ctx)) {
+        memcpy(EVP_CIPHER_CTX_iv_noconst(ctx), out + (inl - ALG_AES_IV_LEN),
+               ALG_AES_IV_LEN);
+    } else {
+        memcpy(EVP_CIPHER_CTX_iv_noconst(ctx), nxtiv, ALG_AES_IV_LEN);
+    }
+
+    return 1;
+}
+
+static int afalg_cipher_cleanup(EVP_CIPHER_CTX *ctx)
+{
+    afalg_ctx *actx;
+
+    if (ctx == NULL) {
+        ALG_WARN("NULL parameter passed to function %s(%d)\n", __FILE__,
+                 __LINE__);
+        return 0;
+    }
+
+    actx = (afalg_ctx *) EVP_CIPHER_CTX_get_cipher_data(ctx);
+    if (actx == NULL || actx->init_done != MAGIC_INIT_NUM) {
+        ALG_WARN("%s afalg ctx passed\n",
+                 ctx == NULL ? "NULL" : "Uninitialised");
+        return 0;
+    }
+
+    close(actx->sfd);
+    close(actx->bfd);
+# ifdef ALG_ZERO_COPY
+    close(actx->zc_pipe[0]);
+    close(actx->zc_pipe[1]);
+# endif
+    /* close efd in sync mode, async mode is closed in afalg_waitfd_cleanup() */
+    if (actx->aio.mode == MODE_SYNC)
+        close(actx->aio.efd);
+    io_destroy(actx->aio.aio_ctx);
+
+    return 1;
+}
+
+static cbc_handles *get_cipher_handle(int nid)
+{
+    switch (nid) {
+    case NID_aes_128_cbc:
+        return &cbc_handle[AES_CBC_128];
+    case NID_aes_192_cbc:
+        return &cbc_handle[AES_CBC_192];
+    case NID_aes_256_cbc:
+        return &cbc_handle[AES_CBC_256];
+    default:
+        return NULL;
+    }
+}
+
+static const EVP_CIPHER *afalg_aes_cbc(int nid)
+{
+    cbc_handles *cipher_handle = get_cipher_handle(nid);
+    if (cipher_handle->_hidden == NULL
+        && ((cipher_handle->_hidden =
+         EVP_CIPHER_meth_new(nid,
+                             AES_BLOCK_SIZE,
+                             cipher_handle->key_size)) == NULL
+        || !EVP_CIPHER_meth_set_iv_length(cipher_handle->_hidden,
+                                          AES_IV_LEN)
+        || !EVP_CIPHER_meth_set_flags(cipher_handle->_hidden,
+                                      EVP_CIPH_CBC_MODE |
+                                      EVP_CIPH_FLAG_DEFAULT_ASN1)
+        || !EVP_CIPHER_meth_set_init(cipher_handle->_hidden,
+                                     afalg_cipher_init)
+        || !EVP_CIPHER_meth_set_do_cipher(cipher_handle->_hidden,
+                                          afalg_do_cipher)
+        || !EVP_CIPHER_meth_set_cleanup(cipher_handle->_hidden,
+                                        afalg_cipher_cleanup)
+        || !EVP_CIPHER_meth_set_impl_ctx_size(cipher_handle->_hidden,
+                                              sizeof(afalg_ctx)))) {
+        EVP_CIPHER_meth_free(cipher_handle->_hidden);
+        cipher_handle->_hidden= NULL;
+    }
+    return cipher_handle->_hidden;
+}
+
+static int afalg_ciphers(ENGINE *e, const EVP_CIPHER **cipher,
+                         const int **nids, int nid)
+{
+    int r = 1;
+
+    if (cipher == NULL) {
+        *nids = afalg_cipher_nids;
+        return (sizeof(afalg_cipher_nids) / sizeof(afalg_cipher_nids[0]));
+    }
+
+    switch (nid) {
+    case NID_aes_128_cbc:
+    case NID_aes_192_cbc:
+    case NID_aes_256_cbc:
+        *cipher = afalg_aes_cbc(nid);
+        break;
+    default:
+        *cipher = NULL;
+        r = 0;
+    }
+    return r;
+}
+
+static int bind_afalg(ENGINE *e)
+{
+    /* Ensure the afalg error handling is set up */
+    unsigned short i;
+    ERR_load_AFALG_strings();
+
+    if (!ENGINE_set_id(e, engine_afalg_id)
+        || !ENGINE_set_name(e, engine_afalg_name)
+        || !ENGINE_set_destroy_function(e, afalg_destroy)
+        || !ENGINE_set_init_function(e, afalg_init)
+        || !ENGINE_set_finish_function(e, afalg_finish)) {
+        AFALGerr(AFALG_F_BIND_AFALG, AFALG_R_INIT_FAILED);
+        return 0;
+    }
+
+    /*
+     * Create _hidden_aes_xxx_cbc by calling afalg_aes_xxx_cbc
+     * now, as bind_aflag can only be called by one thread at a
+     * time.
+     */
+    for(i = 0; i < OSSL_NELEM(afalg_cipher_nids); i++) {
+        if (afalg_aes_cbc(afalg_cipher_nids[i]) == NULL) {
+            AFALGerr(AFALG_F_BIND_AFALG, AFALG_R_INIT_FAILED);
+            return 0;
+        }
+    }
+
+    if (!ENGINE_set_ciphers(e, afalg_ciphers)) {
+        AFALGerr(AFALG_F_BIND_AFALG, AFALG_R_INIT_FAILED);
+        return 0;
+    }
+
+    return 1;
+}
+
+# ifndef OPENSSL_NO_DYNAMIC_ENGINE
+static int bind_helper(ENGINE *e, const char *id)
+{
+    if (id && (strcmp(id, engine_afalg_id) != 0))
+        return 0;
+
+    if (!afalg_chk_platform())
+        return 0;
+
+    if (!bind_afalg(e))
+        return 0;
+    return 1;
+}
+
+IMPLEMENT_DYNAMIC_CHECK_FN()
+    IMPLEMENT_DYNAMIC_BIND_FN(bind_helper)
+# endif
+
+static int afalg_chk_platform(void)
+{
+    int ret;
+    int i;
+    int kver[3] = { -1, -1, -1 };
+    int sock;
+    char *str;
+    struct utsname ut;
+
+    ret = uname(&ut);
+    if (ret != 0) {
+        AFALGerr(AFALG_F_AFALG_CHK_PLATFORM,
+                 AFALG_R_FAILED_TO_GET_PLATFORM_INFO);
+        return 0;
+    }
+
+    str = strtok(ut.release, ".");
+    for (i = 0; i < 3 && str != NULL; i++) {
+        kver[i] = atoi(str);
+        str = strtok(NULL, ".");
+    }
+
+    if (KERNEL_VERSION(kver[0], kver[1], kver[2])
+        < KERNEL_VERSION(K_MAJ, K_MIN1, K_MIN2)) {
+        ALG_ERR("ASYNC AFALG not supported this kernel(%d.%d.%d)\n",
+                 kver[0], kver[1], kver[2]);
+        ALG_ERR("ASYNC AFALG requires kernel version %d.%d.%d or later\n",
+                 K_MAJ, K_MIN1, K_MIN2);
+        AFALGerr(AFALG_F_AFALG_CHK_PLATFORM,
+                 AFALG_R_KERNEL_DOES_NOT_SUPPORT_ASYNC_AFALG);
+        return 0;
+    }
+
+    /* Test if we can actually create an AF_ALG socket */
+    sock = socket(AF_ALG, SOCK_SEQPACKET, 0);
+    if (sock == -1) {
+        AFALGerr(AFALG_F_AFALG_CHK_PLATFORM, AFALG_R_SOCKET_CREATE_FAILED);
+        return 0;
+    }
+    close(sock);
+
+    return 1;
+}
+
+# ifdef OPENSSL_NO_DYNAMIC_ENGINE
+static ENGINE *engine_afalg(void)
+{
+    ENGINE *ret = ENGINE_new();
+    if (ret == NULL)
+        return NULL;
+    if (!bind_afalg(ret)) {
+        ENGINE_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+void engine_load_afalg_int(void)
+{
+    ENGINE *toadd;
+
+    if (!afalg_chk_platform())
+        return;
+
+    toadd = engine_afalg();
+    if (toadd == NULL)
+        return;
+    ENGINE_add(toadd);
+    ENGINE_free(toadd);
+    ERR_clear_error();
+}
+# endif
+
+static int afalg_init(ENGINE *e)
+{
+    return 1;
+}
+
+static int afalg_finish(ENGINE *e)
+{
+    return 1;
+}
+
+static int free_cbc(void)
+{
+    short unsigned int i;
+    for(i = 0; i < OSSL_NELEM(afalg_cipher_nids); i++) {
+        EVP_CIPHER_meth_free(cbc_handle[i]._hidden);
+        cbc_handle[i]._hidden = NULL;
+    }
+    return 1;
+}
+
+static int afalg_destroy(ENGINE *e)
+{
+    ERR_unload_AFALG_strings();
+    free_cbc();
+    return 1;
+}
+
+#endif                          /* KERNEL VERSION */
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg.ec b/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg.ec
new file mode 100644
index 000000000..6d7420fe5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg.ec
@@ -0,0 +1,3 @@
+# The INPUT HEADER is scanned for declarations
+# LIBNAME       INPUT HEADER                    ERROR-TABLE FILE
+L AFALG         e_afalg_err.h                   e_afalg_err.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg.h b/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg.h
new file mode 100644
index 000000000..2c03c448d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg.h
@@ -0,0 +1,95 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_AFALG_H
+# define HEADER_AFALG_H
+
+# if defined(__GNUC__) && __GNUC__ >= 4 && \
+     (!defined(__STDC_VERSION__) || __STDC_VERSION__ < 199901L)
+#  pragma GCC diagnostic ignored "-Wvariadic-macros"
+# endif
+
+# ifdef ALG_DEBUG
+#  define ALG_DGB(x, ...) fprintf(stderr, "ALG_DBG: " x, __VA_ARGS__)
+#  define ALG_INFO(x, ...) fprintf(stderr, "ALG_INFO: " x, __VA_ARGS__)
+#  define ALG_WARN(x, ...) fprintf(stderr, "ALG_WARN: " x, __VA_ARGS__)
+# else
+#  define ALG_DGB(x, ...)
+#  define ALG_INFO(x, ...)
+#  define ALG_WARN(x, ...)
+# endif
+
+# define ALG_ERR(x, ...) fprintf(stderr, "ALG_ERR: " x, __VA_ARGS__)
+# define ALG_PERR(x, ...) \
+                do { \
+                    fprintf(stderr, "ALG_PERR: " x, __VA_ARGS__); \
+                    perror(NULL); \
+                } while(0)
+# define ALG_PWARN(x, ...) \
+                do { \
+                    fprintf(stderr, "ALG_PERR: " x, __VA_ARGS__); \
+                    perror(NULL); \
+                } while(0)
+
+# ifndef AES_BLOCK_SIZE
+#  define AES_BLOCK_SIZE   16
+# endif
+# define AES_KEY_SIZE_128 16
+# define AES_KEY_SIZE_192 24
+# define AES_KEY_SIZE_256 32
+# define AES_IV_LEN       16
+
+# define MAX_INFLIGHTS 1
+
+typedef enum {
+    MODE_UNINIT = 0,
+    MODE_SYNC,
+    MODE_ASYNC
+} op_mode;
+
+enum {
+    AES_CBC_128 = 0,
+    AES_CBC_192,
+    AES_CBC_256
+};
+
+struct cbc_cipher_handles {
+    int key_size;
+    EVP_CIPHER *_hidden;
+};
+
+typedef struct cbc_cipher_handles cbc_handles;
+
+struct afalg_aio_st {
+    int efd;
+    op_mode mode;
+    aio_context_t aio_ctx;
+    struct io_event events[MAX_INFLIGHTS];
+    struct iocb cbt[MAX_INFLIGHTS];
+};
+typedef struct afalg_aio_st afalg_aio;
+
+/*
+ * MAGIC Number to identify correct initialisation
+ * of afalg_ctx.
+ */
+# define MAGIC_INIT_NUM 0x1890671
+
+struct afalg_ctx_st {
+    int init_done;
+    int sfd;
+    int bfd;
+# ifdef ALG_ZERO_COPY
+    int zc_pipe[2];
+# endif
+    afalg_aio aio;
+};
+
+typedef struct afalg_ctx_st afalg_ctx;
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg.txt b/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg.txt
new file mode 100644
index 000000000..3b79305ac
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg.txt
@@ -0,0 +1,30 @@
+# Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# Function codes
+AFALG_F_AFALG_CHK_PLATFORM:100:afalg_chk_platform
+AFALG_F_AFALG_CREATE_SK:101:afalg_create_sk
+AFALG_F_AFALG_INIT_AIO:102:afalg_init_aio
+AFALG_F_AFALG_SETUP_ASYNC_EVENT_NOTIFICATION:103:\
+	afalg_setup_async_event_notification
+AFALG_F_AFALG_SET_KEY:104:afalg_set_key
+AFALG_F_BIND_AFALG:105:bind_afalg
+
+#Reason codes
+AFALG_R_EVENTFD_FAILED:108:eventfd failed
+AFALG_R_FAILED_TO_GET_PLATFORM_INFO:111:failed to get platform info
+AFALG_R_INIT_FAILED:100:init failed
+AFALG_R_IO_SETUP_FAILED:105:io setup failed
+AFALG_R_KERNEL_DOES_NOT_SUPPORT_AFALG:101:kernel does not support afalg
+AFALG_R_KERNEL_DOES_NOT_SUPPORT_ASYNC_AFALG:107:\
+	kernel does not support async afalg
+AFALG_R_MEM_ALLOC_FAILED:102:mem alloc failed
+AFALG_R_SOCKET_ACCEPT_FAILED:110:socket accept failed
+AFALG_R_SOCKET_BIND_FAILED:103:socket bind failed
+AFALG_R_SOCKET_CREATE_FAILED:109:socket create failed
+AFALG_R_SOCKET_OPERATION_FAILED:104:socket operation failed
+AFALG_R_SOCKET_SET_KEY_FAILED:106:socket set key failed
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg_err.c b/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg_err.c
new file mode 100644
index 000000000..18fe9c34e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg_err.c
@@ -0,0 +1,83 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include "e_afalg_err.h"
+
+#ifndef OPENSSL_NO_ERR
+
+static ERR_STRING_DATA AFALG_str_functs[] = {
+    {ERR_PACK(0, AFALG_F_AFALG_CHK_PLATFORM, 0), "afalg_chk_platform"},
+    {ERR_PACK(0, AFALG_F_AFALG_CREATE_SK, 0), "afalg_create_sk"},
+    {ERR_PACK(0, AFALG_F_AFALG_INIT_AIO, 0), "afalg_init_aio"},
+    {ERR_PACK(0, AFALG_F_AFALG_SETUP_ASYNC_EVENT_NOTIFICATION, 0),
+     "afalg_setup_async_event_notification"},
+    {ERR_PACK(0, AFALG_F_AFALG_SET_KEY, 0), "afalg_set_key"},
+    {ERR_PACK(0, AFALG_F_BIND_AFALG, 0), "bind_afalg"},
+    {0, NULL}
+};
+
+static ERR_STRING_DATA AFALG_str_reasons[] = {
+    {ERR_PACK(0, 0, AFALG_R_EVENTFD_FAILED), "eventfd failed"},
+    {ERR_PACK(0, 0, AFALG_R_FAILED_TO_GET_PLATFORM_INFO),
+    "failed to get platform info"},
+    {ERR_PACK(0, 0, AFALG_R_INIT_FAILED), "init failed"},
+    {ERR_PACK(0, 0, AFALG_R_IO_SETUP_FAILED), "io setup failed"},
+    {ERR_PACK(0, 0, AFALG_R_KERNEL_DOES_NOT_SUPPORT_AFALG),
+    "kernel does not support afalg"},
+    {ERR_PACK(0, 0, AFALG_R_KERNEL_DOES_NOT_SUPPORT_ASYNC_AFALG),
+    "kernel does not support async afalg"},
+    {ERR_PACK(0, 0, AFALG_R_MEM_ALLOC_FAILED), "mem alloc failed"},
+    {ERR_PACK(0, 0, AFALG_R_SOCKET_ACCEPT_FAILED), "socket accept failed"},
+    {ERR_PACK(0, 0, AFALG_R_SOCKET_BIND_FAILED), "socket bind failed"},
+    {ERR_PACK(0, 0, AFALG_R_SOCKET_CREATE_FAILED), "socket create failed"},
+    {ERR_PACK(0, 0, AFALG_R_SOCKET_OPERATION_FAILED),
+    "socket operation failed"},
+    {ERR_PACK(0, 0, AFALG_R_SOCKET_SET_KEY_FAILED), "socket set key failed"},
+    {0, NULL}
+};
+
+#endif
+
+static int lib_code = 0;
+static int error_loaded = 0;
+
+static int ERR_load_AFALG_strings(void)
+{
+    if (lib_code == 0)
+        lib_code = ERR_get_next_error_library();
+
+    if (!error_loaded) {
+#ifndef OPENSSL_NO_ERR
+        ERR_load_strings(lib_code, AFALG_str_functs);
+        ERR_load_strings(lib_code, AFALG_str_reasons);
+#endif
+        error_loaded = 1;
+    }
+    return 1;
+}
+
+static void ERR_unload_AFALG_strings(void)
+{
+    if (error_loaded) {
+#ifndef OPENSSL_NO_ERR
+        ERR_unload_strings(lib_code, AFALG_str_functs);
+        ERR_unload_strings(lib_code, AFALG_str_reasons);
+#endif
+        error_loaded = 0;
+    }
+}
+
+static void ERR_AFALG_error(int function, int reason, char *file, int line)
+{
+    if (lib_code == 0)
+        lib_code = ERR_get_next_error_library();
+    ERR_PUT_error(lib_code, function, reason, file, line);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg_err.h b/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg_err.h
new file mode 100644
index 000000000..3eb1332bb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_afalg_err.h
@@ -0,0 +1,43 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_AFALGERR_H
+# define HEADER_AFALGERR_H
+
+# define AFALGerr(f, r) ERR_AFALG_error((f), (r), OPENSSL_FILE, OPENSSL_LINE)
+
+
+/*
+ * AFALG function codes.
+ */
+# define AFALG_F_AFALG_CHK_PLATFORM                       100
+# define AFALG_F_AFALG_CREATE_SK                          101
+# define AFALG_F_AFALG_INIT_AIO                           102
+# define AFALG_F_AFALG_SETUP_ASYNC_EVENT_NOTIFICATION     103
+# define AFALG_F_AFALG_SET_KEY                            104
+# define AFALG_F_BIND_AFALG                               105
+
+/*
+ * AFALG reason codes.
+ */
+# define AFALG_R_EVENTFD_FAILED                           108
+# define AFALG_R_FAILED_TO_GET_PLATFORM_INFO              111
+# define AFALG_R_INIT_FAILED                              100
+# define AFALG_R_IO_SETUP_FAILED                          105
+# define AFALG_R_KERNEL_DOES_NOT_SUPPORT_AFALG            101
+# define AFALG_R_KERNEL_DOES_NOT_SUPPORT_ASYNC_AFALG      107
+# define AFALG_R_MEM_ALLOC_FAILED                         102
+# define AFALG_R_SOCKET_ACCEPT_FAILED                     110
+# define AFALG_R_SOCKET_BIND_FAILED                       103
+# define AFALG_R_SOCKET_CREATE_FAILED                     109
+# define AFALG_R_SOCKET_OPERATION_FAILED                  104
+# define AFALG_R_SOCKET_SET_KEY_FAILED                    106
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_capi.c b/trunk/3rdparty/openssl-1.1-fit/engines/e_capi.c
new file mode 100644
index 000000000..37202b81f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_capi.c
@@ -0,0 +1,1904 @@
+/*
+ * Copyright 2008-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifdef _WIN32
+# ifndef _WIN32_WINNT
+#  define _WIN32_WINNT 0x0400
+# endif
+# include <windows.h>
+# include <wincrypt.h>
+
+# include <stdio.h>
+# include <string.h>
+# include <stdlib.h>
+# include <malloc.h>
+# ifndef alloca
+#  define alloca _alloca
+# endif
+
+# include <openssl/crypto.h>
+
+# ifndef OPENSSL_NO_CAPIENG
+
+#  include <openssl/buffer.h>
+#  include <openssl/bn.h>
+#  include <openssl/rsa.h>
+#  include <openssl/dsa.h>
+
+/*
+ * This module uses several "new" interfaces, among which is
+ * CertGetCertificateContextProperty. CERT_KEY_PROV_INFO_PROP_ID is
+ * one of possible values you can pass to function in question. By
+ * checking if it's defined we can see if wincrypt.h and accompanying
+ * crypt32.lib are in shape. The native MingW32 headers up to and
+ * including __W32API_VERSION 3.14 lack of struct DSSPUBKEY and the
+ * defines CERT_STORE_PROV_SYSTEM_A and CERT_STORE_READONLY_FLAG,
+ * so we check for these too and avoid compiling.
+ * Yes, it's rather "weak" test and if compilation fails,
+ * then re-configure with -DOPENSSL_NO_CAPIENG.
+ */
+#  if defined(CERT_KEY_PROV_INFO_PROP_ID) && \
+    defined(CERT_STORE_PROV_SYSTEM_A) && \
+    defined(CERT_STORE_READONLY_FLAG)
+#   define __COMPILE_CAPIENG
+#  endif                        /* CERT_KEY_PROV_INFO_PROP_ID */
+# endif                         /* OPENSSL_NO_CAPIENG */
+#endif                          /* _WIN32 */
+
+#ifdef __COMPILE_CAPIENG
+
+# undef X509_EXTENSIONS
+
+/* Definitions which may be missing from earlier version of headers */
+# ifndef CERT_STORE_OPEN_EXISTING_FLAG
+#  define CERT_STORE_OPEN_EXISTING_FLAG                   0x00004000
+# endif
+
+# ifndef CERT_STORE_CREATE_NEW_FLAG
+#  define CERT_STORE_CREATE_NEW_FLAG                      0x00002000
+# endif
+
+# ifndef CERT_SYSTEM_STORE_CURRENT_USER
+#  define CERT_SYSTEM_STORE_CURRENT_USER                  0x00010000
+# endif
+
+# ifndef ALG_SID_SHA_256
+#  define ALG_SID_SHA_256   12
+# endif
+# ifndef ALG_SID_SHA_384
+#  define ALG_SID_SHA_384   13
+# endif
+# ifndef ALG_SID_SHA_512
+#  define ALG_SID_SHA_512   14
+# endif
+
+# ifndef CALG_SHA_256
+#  define CALG_SHA_256      (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_SHA_256)
+# endif
+# ifndef CALG_SHA_384
+#  define CALG_SHA_384      (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_SHA_384)
+# endif
+# ifndef CALG_SHA_512
+#  define CALG_SHA_512      (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_SHA_512)
+# endif
+
+# ifndef PROV_RSA_AES
+#  define PROV_RSA_AES 24
+# endif
+
+# include <openssl/engine.h>
+# include <openssl/pem.h>
+# include <openssl/x509v3.h>
+
+# include "e_capi_err.h"
+# include "e_capi_err.c"
+
+static const char *engine_capi_id = "capi";
+static const char *engine_capi_name = "CryptoAPI ENGINE";
+
+typedef struct CAPI_CTX_st CAPI_CTX;
+typedef struct CAPI_KEY_st CAPI_KEY;
+
+static void capi_addlasterror(void);
+static void capi_adderror(DWORD err);
+
+static void CAPI_trace(CAPI_CTX *ctx, char *format, ...);
+
+static int capi_list_providers(CAPI_CTX *ctx, BIO *out);
+static int capi_list_containers(CAPI_CTX *ctx, BIO *out);
+int capi_list_certs(CAPI_CTX *ctx, BIO *out, char *storename);
+void capi_free_key(CAPI_KEY *key);
+
+static PCCERT_CONTEXT capi_find_cert(CAPI_CTX *ctx, const char *id,
+                                     HCERTSTORE hstore);
+
+CAPI_KEY *capi_find_key(CAPI_CTX *ctx, const char *id);
+
+static EVP_PKEY *capi_load_privkey(ENGINE *eng, const char *key_id,
+                                   UI_METHOD *ui_method, void *callback_data);
+static int capi_rsa_sign(int dtype, const unsigned char *m,
+                         unsigned int m_len, unsigned char *sigret,
+                         unsigned int *siglen, const RSA *rsa);
+static int capi_rsa_priv_enc(int flen, const unsigned char *from,
+                             unsigned char *to, RSA *rsa, int padding);
+static int capi_rsa_priv_dec(int flen, const unsigned char *from,
+                             unsigned char *to, RSA *rsa, int padding);
+static int capi_rsa_free(RSA *rsa);
+
+# ifndef OPENSSL_NO_DSA
+static DSA_SIG *capi_dsa_do_sign(const unsigned char *digest, int dlen,
+                                 DSA *dsa);
+static int capi_dsa_free(DSA *dsa);
+# endif
+
+static int capi_load_ssl_client_cert(ENGINE *e, SSL *ssl,
+                                     STACK_OF(X509_NAME) *ca_dn, X509 **pcert,
+                                     EVP_PKEY **pkey, STACK_OF(X509) **pother,
+                                     UI_METHOD *ui_method,
+                                     void *callback_data);
+
+static int cert_select_simple(ENGINE *e, SSL *ssl, STACK_OF(X509) *certs);
+# ifdef OPENSSL_CAPIENG_DIALOG
+static int cert_select_dialog(ENGINE *e, SSL *ssl, STACK_OF(X509) *certs);
+# endif
+
+void engine_load_capi_int(void);
+
+typedef PCCERT_CONTEXT(WINAPI *CERTDLG)(HCERTSTORE, HWND, LPCWSTR,
+                                        LPCWSTR, DWORD, DWORD, void *);
+typedef HWND(WINAPI *GETCONSWIN)(void);
+
+/*
+ * This structure contains CAPI ENGINE specific data: it contains various
+ * global options and affects how other functions behave.
+ */
+
+# define CAPI_DBG_TRACE  2
+# define CAPI_DBG_ERROR  1
+
+struct CAPI_CTX_st {
+    int debug_level;
+    char *debug_file;
+    /* Parameters to use for container lookup */
+    DWORD keytype;
+    LPSTR cspname;
+    DWORD csptype;
+    /* Certificate store name to use */
+    LPSTR storename;
+    LPSTR ssl_client_store;
+    /* System store flags */
+    DWORD store_flags;
+/* Lookup string meanings in load_private_key */
+# define CAPI_LU_SUBSTR          1  /* Substring of subject: uses "storename" */
+# define CAPI_LU_FNAME           2  /* Friendly name: uses storename */
+# define CAPI_LU_CONTNAME        3  /* Container name: uses cspname, keytype */
+    int lookup_method;
+/* Info to dump with dumpcerts option */
+# define CAPI_DMP_SUMMARY        0x1    /* Issuer and serial name strings */
+# define CAPI_DMP_FNAME          0x2    /* Friendly name */
+# define CAPI_DMP_FULL           0x4    /* Full X509_print dump */
+# define CAPI_DMP_PEM            0x8    /* Dump PEM format certificate */
+# define CAPI_DMP_PSKEY          0x10   /* Dump pseudo key (if possible) */
+# define CAPI_DMP_PKEYINFO       0x20   /* Dump key info (if possible) */
+    DWORD dump_flags;
+    int (*client_cert_select) (ENGINE *e, SSL *ssl, STACK_OF(X509) *certs);
+    CERTDLG certselectdlg;
+    GETCONSWIN getconswindow;
+};
+
+static CAPI_CTX *capi_ctx_new(void);
+static void capi_ctx_free(CAPI_CTX *ctx);
+static int capi_ctx_set_provname(CAPI_CTX *ctx, LPSTR pname, DWORD type,
+                                 int check);
+static int capi_ctx_set_provname_idx(CAPI_CTX *ctx, int idx);
+
+# define CAPI_CMD_LIST_CERTS             ENGINE_CMD_BASE
+# define CAPI_CMD_LOOKUP_CERT            (ENGINE_CMD_BASE + 1)
+# define CAPI_CMD_DEBUG_LEVEL            (ENGINE_CMD_BASE + 2)
+# define CAPI_CMD_DEBUG_FILE             (ENGINE_CMD_BASE + 3)
+# define CAPI_CMD_KEYTYPE                (ENGINE_CMD_BASE + 4)
+# define CAPI_CMD_LIST_CSPS              (ENGINE_CMD_BASE + 5)
+# define CAPI_CMD_SET_CSP_IDX            (ENGINE_CMD_BASE + 6)
+# define CAPI_CMD_SET_CSP_NAME           (ENGINE_CMD_BASE + 7)
+# define CAPI_CMD_SET_CSP_TYPE           (ENGINE_CMD_BASE + 8)
+# define CAPI_CMD_LIST_CONTAINERS        (ENGINE_CMD_BASE + 9)
+# define CAPI_CMD_LIST_OPTIONS           (ENGINE_CMD_BASE + 10)
+# define CAPI_CMD_LOOKUP_METHOD          (ENGINE_CMD_BASE + 11)
+# define CAPI_CMD_STORE_NAME             (ENGINE_CMD_BASE + 12)
+# define CAPI_CMD_STORE_FLAGS            (ENGINE_CMD_BASE + 13)
+
+static const ENGINE_CMD_DEFN capi_cmd_defns[] = {
+    {CAPI_CMD_LIST_CERTS,
+     "list_certs",
+     "List all certificates in store",
+     ENGINE_CMD_FLAG_NO_INPUT},
+    {CAPI_CMD_LOOKUP_CERT,
+     "lookup_cert",
+     "Lookup and output certificates",
+     ENGINE_CMD_FLAG_STRING},
+    {CAPI_CMD_DEBUG_LEVEL,
+     "debug_level",
+     "debug level (1=errors, 2=trace)",
+     ENGINE_CMD_FLAG_NUMERIC},
+    {CAPI_CMD_DEBUG_FILE,
+     "debug_file",
+     "debugging filename)",
+     ENGINE_CMD_FLAG_STRING},
+    {CAPI_CMD_KEYTYPE,
+     "key_type",
+     "Key type: 1=AT_KEYEXCHANGE (default), 2=AT_SIGNATURE",
+     ENGINE_CMD_FLAG_NUMERIC},
+    {CAPI_CMD_LIST_CSPS,
+     "list_csps",
+     "List all CSPs",
+     ENGINE_CMD_FLAG_NO_INPUT},
+    {CAPI_CMD_SET_CSP_IDX,
+     "csp_idx",
+     "Set CSP by index",
+     ENGINE_CMD_FLAG_NUMERIC},
+    {CAPI_CMD_SET_CSP_NAME,
+     "csp_name",
+     "Set CSP name, (default CSP used if not specified)",
+     ENGINE_CMD_FLAG_STRING},
+    {CAPI_CMD_SET_CSP_TYPE,
+     "csp_type",
+     "Set CSP type, (default RSA_PROV_FULL)",
+     ENGINE_CMD_FLAG_NUMERIC},
+    {CAPI_CMD_LIST_CONTAINERS,
+     "list_containers",
+     "list container names",
+     ENGINE_CMD_FLAG_NO_INPUT},
+    {CAPI_CMD_LIST_OPTIONS,
+     "list_options",
+     "Set list options (1=summary,2=friendly name, 4=full printout, 8=PEM output, 16=XXX, "
+     "32=private key info)",
+     ENGINE_CMD_FLAG_NUMERIC},
+    {CAPI_CMD_LOOKUP_METHOD,
+     "lookup_method",
+     "Set key lookup method (1=substring, 2=friendlyname, 3=container name)",
+     ENGINE_CMD_FLAG_NUMERIC},
+    {CAPI_CMD_STORE_NAME,
+     "store_name",
+     "certificate store name, default \"MY\"",
+     ENGINE_CMD_FLAG_STRING},
+    {CAPI_CMD_STORE_FLAGS,
+     "store_flags",
+     "Certificate store flags: 1 = system store",
+     ENGINE_CMD_FLAG_NUMERIC},
+
+    {0, NULL, NULL, 0}
+};
+
+static int capi_idx = -1;
+static int rsa_capi_idx = -1;
+static int dsa_capi_idx = -1;
+static int cert_capi_idx = -1;
+
+static int capi_ctrl(ENGINE *e, int cmd, long i, void *p, void (*f) (void))
+{
+    int ret = 1;
+    CAPI_CTX *ctx;
+    BIO *out;
+    LPSTR tmpstr;
+    if (capi_idx == -1) {
+        CAPIerr(CAPI_F_CAPI_CTRL, CAPI_R_ENGINE_NOT_INITIALIZED);
+        return 0;
+    }
+    ctx = ENGINE_get_ex_data(e, capi_idx);
+    out = BIO_new_fp(stdout, BIO_NOCLOSE);
+    if (out == NULL) {
+        CAPIerr(CAPI_F_CAPI_CTRL, CAPI_R_FILE_OPEN_ERROR);
+        return 0;
+    }
+    switch (cmd) {
+    case CAPI_CMD_LIST_CSPS:
+        ret = capi_list_providers(ctx, out);
+        break;
+
+    case CAPI_CMD_LIST_CERTS:
+        ret = capi_list_certs(ctx, out, NULL);
+        break;
+
+    case CAPI_CMD_LOOKUP_CERT:
+        ret = capi_list_certs(ctx, out, p);
+        break;
+
+    case CAPI_CMD_LIST_CONTAINERS:
+        ret = capi_list_containers(ctx, out);
+        break;
+
+    case CAPI_CMD_STORE_NAME:
+        tmpstr = OPENSSL_strdup(p);
+        if (tmpstr != NULL) {
+            OPENSSL_free(ctx->storename);
+            ctx->storename = tmpstr;
+            CAPI_trace(ctx, "Setting store name to %s\n", p);
+        } else {
+            CAPIerr(CAPI_F_CAPI_CTRL, ERR_R_MALLOC_FAILURE);
+            ret = 0;
+        }
+        break;
+
+    case CAPI_CMD_STORE_FLAGS:
+        if (i & 1) {
+            ctx->store_flags |= CERT_SYSTEM_STORE_LOCAL_MACHINE;
+            ctx->store_flags &= ~CERT_SYSTEM_STORE_CURRENT_USER;
+        } else {
+            ctx->store_flags |= CERT_SYSTEM_STORE_CURRENT_USER;
+            ctx->store_flags &= ~CERT_SYSTEM_STORE_LOCAL_MACHINE;
+        }
+        CAPI_trace(ctx, "Setting flags to %d\n", i);
+        break;
+
+    case CAPI_CMD_DEBUG_LEVEL:
+        ctx->debug_level = (int)i;
+        CAPI_trace(ctx, "Setting debug level to %d\n", ctx->debug_level);
+        break;
+
+    case CAPI_CMD_DEBUG_FILE:
+        tmpstr = OPENSSL_strdup(p);
+        if (tmpstr != NULL) {
+            ctx->debug_file = tmpstr;
+            CAPI_trace(ctx, "Setting debug file to %s\n", ctx->debug_file);
+        } else {
+            CAPIerr(CAPI_F_CAPI_CTRL, ERR_R_MALLOC_FAILURE);
+            ret = 0;
+        }
+        break;
+
+    case CAPI_CMD_KEYTYPE:
+        ctx->keytype = i;
+        CAPI_trace(ctx, "Setting key type to %d\n", ctx->keytype);
+        break;
+
+    case CAPI_CMD_SET_CSP_IDX:
+        ret = capi_ctx_set_provname_idx(ctx, i);
+        break;
+
+    case CAPI_CMD_LIST_OPTIONS:
+        ctx->dump_flags = i;
+        break;
+
+    case CAPI_CMD_LOOKUP_METHOD:
+        if (i < 1 || i > 3) {
+            CAPIerr(CAPI_F_CAPI_CTRL, CAPI_R_INVALID_LOOKUP_METHOD);
+            BIO_free(out);
+            return 0;
+        }
+        ctx->lookup_method = i;
+        break;
+
+    case CAPI_CMD_SET_CSP_NAME:
+        ret = capi_ctx_set_provname(ctx, p, ctx->csptype, 1);
+        break;
+
+    case CAPI_CMD_SET_CSP_TYPE:
+        ctx->csptype = i;
+        break;
+
+    default:
+        CAPIerr(CAPI_F_CAPI_CTRL, CAPI_R_UNKNOWN_COMMAND);
+        ret = 0;
+    }
+
+    BIO_free(out);
+    return ret;
+
+}
+
+static RSA_METHOD *capi_rsa_method = NULL;
+# ifndef OPENSSL_NO_DSA
+static DSA_METHOD *capi_dsa_method = NULL;
+# endif
+
+static int use_aes_csp = 0;
+static const WCHAR rsa_aes_cspname[] =
+    L"Microsoft Enhanced RSA and AES Cryptographic Provider";
+static const WCHAR rsa_enh_cspname[] =
+    L"Microsoft Enhanced Cryptographic Provider v1.0";
+
+static int capi_init(ENGINE *e)
+{
+    CAPI_CTX *ctx;
+    const RSA_METHOD *ossl_rsa_meth;
+# ifndef OPENSSL_NO_DSA
+    const DSA_METHOD *ossl_dsa_meth;
+# endif
+    HCRYPTPROV hprov;
+
+    if (capi_idx < 0) {
+        capi_idx = ENGINE_get_ex_new_index(0, NULL, NULL, NULL, 0);
+        if (capi_idx < 0)
+            goto memerr;
+
+        cert_capi_idx = X509_get_ex_new_index(0, NULL, NULL, NULL, 0);
+
+        /* Setup RSA_METHOD */
+        rsa_capi_idx = RSA_get_ex_new_index(0, NULL, NULL, NULL, 0);
+        ossl_rsa_meth = RSA_PKCS1_OpenSSL();
+        if (   !RSA_meth_set_pub_enc(capi_rsa_method,
+                                     RSA_meth_get_pub_enc(ossl_rsa_meth))
+            || !RSA_meth_set_pub_dec(capi_rsa_method,
+                                     RSA_meth_get_pub_dec(ossl_rsa_meth))
+            || !RSA_meth_set_priv_enc(capi_rsa_method, capi_rsa_priv_enc)
+            || !RSA_meth_set_priv_dec(capi_rsa_method, capi_rsa_priv_dec)
+            || !RSA_meth_set_mod_exp(capi_rsa_method,
+                                     RSA_meth_get_mod_exp(ossl_rsa_meth))
+            || !RSA_meth_set_bn_mod_exp(capi_rsa_method,
+                                        RSA_meth_get_bn_mod_exp(ossl_rsa_meth))
+            || !RSA_meth_set_finish(capi_rsa_method, capi_rsa_free)
+            || !RSA_meth_set_sign(capi_rsa_method, capi_rsa_sign)) {
+            goto memerr;
+        }
+
+# ifndef OPENSSL_NO_DSA
+        /* Setup DSA Method */
+        dsa_capi_idx = DSA_get_ex_new_index(0, NULL, NULL, NULL, 0);
+        ossl_dsa_meth = DSA_OpenSSL();
+        if (   !DSA_meth_set_sign(capi_dsa_method, capi_dsa_do_sign)
+            || !DSA_meth_set_verify(capi_dsa_method,
+                                    DSA_meth_get_verify(ossl_dsa_meth))
+            || !DSA_meth_set_finish(capi_dsa_method, capi_dsa_free)
+            || !DSA_meth_set_mod_exp(capi_dsa_method,
+                                     DSA_meth_get_mod_exp(ossl_dsa_meth))
+            || !DSA_meth_set_bn_mod_exp(capi_dsa_method,
+                                    DSA_meth_get_bn_mod_exp(ossl_dsa_meth))) {
+            goto memerr;
+        }
+# endif
+    }
+
+    ctx = capi_ctx_new();
+    if (ctx == NULL)
+        goto memerr;
+
+    ENGINE_set_ex_data(e, capi_idx, ctx);
+
+# ifdef OPENSSL_CAPIENG_DIALOG
+    {
+        HMODULE cryptui = LoadLibrary(TEXT("CRYPTUI.DLL"));
+        HMODULE kernel = GetModuleHandle(TEXT("KERNEL32.DLL"));
+        if (cryptui)
+            ctx->certselectdlg =
+                (CERTDLG) GetProcAddress(cryptui,
+                                         "CryptUIDlgSelectCertificateFromStore");
+        if (kernel)
+            ctx->getconswindow =
+                (GETCONSWIN) GetProcAddress(kernel, "GetConsoleWindow");
+        if (cryptui && !OPENSSL_isservice())
+            ctx->client_cert_select = cert_select_dialog;
+    }
+# endif
+
+    /* See if there is RSA+AES CSP */
+    if (CryptAcquireContextW(&hprov, NULL, rsa_aes_cspname, PROV_RSA_AES,
+                             CRYPT_VERIFYCONTEXT)) {
+        use_aes_csp = 1;
+        CryptReleaseContext(hprov, 0);
+    }
+
+    return 1;
+
+ memerr:
+    CAPIerr(CAPI_F_CAPI_INIT, ERR_R_MALLOC_FAILURE);
+    return 0;
+
+    return 1;
+}
+
+static int capi_destroy(ENGINE *e)
+{
+    RSA_meth_free(capi_rsa_method);
+    capi_rsa_method = NULL;
+# ifndef OPENSSL_NO_DSA
+    DSA_meth_free(capi_dsa_method);
+    capi_dsa_method = NULL;
+# endif
+    ERR_unload_CAPI_strings();
+    return 1;
+}
+
+static int capi_finish(ENGINE *e)
+{
+    CAPI_CTX *ctx;
+    ctx = ENGINE_get_ex_data(e, capi_idx);
+    capi_ctx_free(ctx);
+    ENGINE_set_ex_data(e, capi_idx, NULL);
+    return 1;
+}
+
+/*
+ * CryptoAPI key application data. This contains a handle to the private key
+ * container (for sign operations) and a handle to the key (for decrypt
+ * operations).
+ */
+
+struct CAPI_KEY_st {
+    /* Associated certificate context (if any) */
+    PCCERT_CONTEXT pcert;
+    HCRYPTPROV hprov;
+    HCRYPTKEY key;
+    DWORD keyspec;
+};
+
+static int bind_capi(ENGINE *e)
+{
+    capi_rsa_method = RSA_meth_new("CryptoAPI RSA method", 0);
+    if (capi_rsa_method == NULL)
+        return 0;
+# ifndef OPENSSL_NO_DSA
+    capi_dsa_method = DSA_meth_new("CryptoAPI DSA method", 0);
+    if (capi_dsa_method == NULL)
+        goto memerr;
+# endif
+    if (!ENGINE_set_id(e, engine_capi_id)
+        || !ENGINE_set_name(e, engine_capi_name)
+        || !ENGINE_set_flags(e, ENGINE_FLAGS_NO_REGISTER_ALL)
+        || !ENGINE_set_init_function(e, capi_init)
+        || !ENGINE_set_finish_function(e, capi_finish)
+        || !ENGINE_set_destroy_function(e, capi_destroy)
+        || !ENGINE_set_RSA(e, capi_rsa_method)
+# ifndef OPENSSL_NO_DSA
+        || !ENGINE_set_DSA(e, capi_dsa_method)
+# endif
+        || !ENGINE_set_load_privkey_function(e, capi_load_privkey)
+        || !ENGINE_set_load_ssl_client_cert_function(e,
+                                                     capi_load_ssl_client_cert)
+        || !ENGINE_set_cmd_defns(e, capi_cmd_defns)
+        || !ENGINE_set_ctrl_function(e, capi_ctrl))
+        goto memerr;
+    ERR_load_CAPI_strings();
+
+    return 1;
+ memerr:
+    RSA_meth_free(capi_rsa_method);
+    capi_rsa_method = NULL;
+# ifndef OPENSSL_NO_DSA
+    DSA_meth_free(capi_dsa_method);
+    capi_dsa_method = NULL;
+# endif
+    return 0;
+}
+
+# ifndef OPENSSL_NO_DYNAMIC_ENGINE
+static int bind_helper(ENGINE *e, const char *id)
+{
+    if (id && (strcmp(id, engine_capi_id) != 0))
+        return 0;
+    if (!bind_capi(e))
+        return 0;
+    return 1;
+}
+
+IMPLEMENT_DYNAMIC_CHECK_FN()
+IMPLEMENT_DYNAMIC_BIND_FN(bind_helper)
+# else
+static ENGINE *engine_capi(void)
+{
+    ENGINE *ret = ENGINE_new();
+    if (ret == NULL)
+        return NULL;
+    if (!bind_capi(ret)) {
+        ENGINE_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+void engine_load_capi_int(void)
+{
+    /* Copied from eng_[openssl|dyn].c */
+    ENGINE *toadd = engine_capi();
+    if (!toadd)
+        return;
+    ENGINE_add(toadd);
+    ENGINE_free(toadd);
+    ERR_clear_error();
+}
+# endif
+
+static int lend_tobn(BIGNUM *bn, unsigned char *bin, int binlen)
+{
+    int i;
+    /*
+     * Reverse buffer in place: since this is a keyblob structure that will
+     * be freed up after conversion anyway it doesn't matter if we change
+     * it.
+     */
+    for (i = 0; i < binlen / 2; i++) {
+        unsigned char c;
+        c = bin[i];
+        bin[i] = bin[binlen - i - 1];
+        bin[binlen - i - 1] = c;
+    }
+
+    if (!BN_bin2bn(bin, binlen, bn))
+        return 0;
+    return 1;
+}
+
+/* Given a CAPI_KEY get an EVP_PKEY structure */
+
+static EVP_PKEY *capi_get_pkey(ENGINE *eng, CAPI_KEY *key)
+{
+    unsigned char *pubkey = NULL;
+    DWORD len;
+    BLOBHEADER *bh;
+    RSA *rkey = NULL;
+    DSA *dkey = NULL;
+    EVP_PKEY *ret = NULL;
+    if (!CryptExportKey(key->key, 0, PUBLICKEYBLOB, 0, NULL, &len)) {
+        CAPIerr(CAPI_F_CAPI_GET_PKEY, CAPI_R_PUBKEY_EXPORT_LENGTH_ERROR);
+        capi_addlasterror();
+        return NULL;
+    }
+
+    pubkey = OPENSSL_malloc(len);
+
+    if (pubkey == NULL)
+        goto memerr;
+
+    if (!CryptExportKey(key->key, 0, PUBLICKEYBLOB, 0, pubkey, &len)) {
+        CAPIerr(CAPI_F_CAPI_GET_PKEY, CAPI_R_PUBKEY_EXPORT_ERROR);
+        capi_addlasterror();
+        goto err;
+    }
+
+    bh = (BLOBHEADER *) pubkey;
+    if (bh->bType != PUBLICKEYBLOB) {
+        CAPIerr(CAPI_F_CAPI_GET_PKEY, CAPI_R_INVALID_PUBLIC_KEY_BLOB);
+        goto err;
+    }
+    if (bh->aiKeyAlg == CALG_RSA_SIGN || bh->aiKeyAlg == CALG_RSA_KEYX) {
+        RSAPUBKEY *rp;
+        DWORD rsa_modlen;
+        BIGNUM *e = NULL, *n = NULL;
+        unsigned char *rsa_modulus;
+        rp = (RSAPUBKEY *) (bh + 1);
+        if (rp->magic != 0x31415352) {
+            char magstr[10];
+            BIO_snprintf(magstr, 10, "%lx", rp->magic);
+            CAPIerr(CAPI_F_CAPI_GET_PKEY,
+                    CAPI_R_INVALID_RSA_PUBLIC_KEY_BLOB_MAGIC_NUMBER);
+            ERR_add_error_data(2, "magic=0x", magstr);
+            goto err;
+        }
+        rsa_modulus = (unsigned char *)(rp + 1);
+        rkey = RSA_new_method(eng);
+        if (!rkey)
+            goto memerr;
+
+        e = BN_new();
+        n = BN_new();
+
+        if (e == NULL || n == NULL) {
+            BN_free(e);
+            BN_free(n);
+            goto memerr;
+        }
+
+        RSA_set0_key(rkey, n, e, NULL);
+
+        if (!BN_set_word(e, rp->pubexp))
+            goto memerr;
+
+        rsa_modlen = rp->bitlen / 8;
+        if (!lend_tobn(n, rsa_modulus, rsa_modlen))
+            goto memerr;
+
+        RSA_set_ex_data(rkey, rsa_capi_idx, key);
+
+        if ((ret = EVP_PKEY_new()) == NULL)
+            goto memerr;
+
+        EVP_PKEY_assign_RSA(ret, rkey);
+        rkey = NULL;
+
+# ifndef OPENSSL_NO_DSA
+    } else if (bh->aiKeyAlg == CALG_DSS_SIGN) {
+        DSSPUBKEY *dp;
+        DWORD dsa_plen;
+        unsigned char *btmp;
+        BIGNUM *p, *q, *g, *pub_key;
+        dp = (DSSPUBKEY *) (bh + 1);
+        if (dp->magic != 0x31535344) {
+            char magstr[10];
+            BIO_snprintf(magstr, 10, "%lx", dp->magic);
+            CAPIerr(CAPI_F_CAPI_GET_PKEY,
+                    CAPI_R_INVALID_DSA_PUBLIC_KEY_BLOB_MAGIC_NUMBER);
+            ERR_add_error_data(2, "magic=0x", magstr);
+            goto err;
+        }
+        dsa_plen = dp->bitlen / 8;
+        btmp = (unsigned char *)(dp + 1);
+        dkey = DSA_new_method(eng);
+        if (!dkey)
+            goto memerr;
+        p = BN_new();
+        q = BN_new();
+        g = BN_new();
+        pub_key = BN_new();
+        if (p == NULL || q == NULL || g == NULL || pub_key == NULL) {
+            BN_free(p);
+            BN_free(q);
+            BN_free(g);
+            BN_free(pub_key);
+            goto memerr;
+        }
+        DSA_set0_pqg(dkey, p, q, g);
+        DSA_set0_key(dkey, pub_key, NULL);
+        if (!lend_tobn(p, btmp, dsa_plen))
+            goto memerr;
+        btmp += dsa_plen;
+        if (!lend_tobn(q, btmp, 20))
+            goto memerr;
+        btmp += 20;
+        if (!lend_tobn(g, btmp, dsa_plen))
+            goto memerr;
+        btmp += dsa_plen;
+        if (!lend_tobn(pub_key, btmp, dsa_plen))
+            goto memerr;
+        btmp += dsa_plen;
+
+        DSA_set_ex_data(dkey, dsa_capi_idx, key);
+
+        if ((ret = EVP_PKEY_new()) == NULL)
+            goto memerr;
+
+        EVP_PKEY_assign_DSA(ret, dkey);
+        dkey = NULL;
+# endif
+    } else {
+        char algstr[10];
+        BIO_snprintf(algstr, 10, "%ux", bh->aiKeyAlg);
+        CAPIerr(CAPI_F_CAPI_GET_PKEY,
+                CAPI_R_UNSUPPORTED_PUBLIC_KEY_ALGORITHM);
+        ERR_add_error_data(2, "aiKeyAlg=0x", algstr);
+        goto err;
+    }
+
+ err:
+    OPENSSL_free(pubkey);
+    if (!ret) {
+        RSA_free(rkey);
+# ifndef OPENSSL_NO_DSA
+        DSA_free(dkey);
+# endif
+    }
+
+    return ret;
+
+ memerr:
+    CAPIerr(CAPI_F_CAPI_GET_PKEY, ERR_R_MALLOC_FAILURE);
+    goto err;
+
+}
+
+static EVP_PKEY *capi_load_privkey(ENGINE *eng, const char *key_id,
+                                   UI_METHOD *ui_method, void *callback_data)
+{
+    CAPI_CTX *ctx;
+    CAPI_KEY *key;
+    EVP_PKEY *ret;
+    ctx = ENGINE_get_ex_data(eng, capi_idx);
+
+    if (!ctx) {
+        CAPIerr(CAPI_F_CAPI_LOAD_PRIVKEY, CAPI_R_CANT_FIND_CAPI_CONTEXT);
+        return NULL;
+    }
+
+    key = capi_find_key(ctx, key_id);
+
+    if (!key)
+        return NULL;
+
+    ret = capi_get_pkey(eng, key);
+
+    if (!ret)
+        capi_free_key(key);
+    return ret;
+
+}
+
+/* CryptoAPI RSA operations */
+
+int capi_rsa_priv_enc(int flen, const unsigned char *from,
+                      unsigned char *to, RSA *rsa, int padding)
+{
+    CAPIerr(CAPI_F_CAPI_RSA_PRIV_ENC, CAPI_R_FUNCTION_NOT_SUPPORTED);
+    return -1;
+}
+
+int capi_rsa_sign(int dtype, const unsigned char *m, unsigned int m_len,
+                  unsigned char *sigret, unsigned int *siglen, const RSA *rsa)
+{
+    ALG_ID alg;
+    HCRYPTHASH hash;
+    DWORD slen;
+    unsigned int i;
+    int ret = -1;
+    CAPI_KEY *capi_key;
+    CAPI_CTX *ctx;
+
+    ctx = ENGINE_get_ex_data(RSA_get0_engine(rsa), capi_idx);
+
+    CAPI_trace(ctx, "Called CAPI_rsa_sign()\n");
+
+    capi_key = RSA_get_ex_data(rsa, rsa_capi_idx);
+    if (!capi_key) {
+        CAPIerr(CAPI_F_CAPI_RSA_SIGN, CAPI_R_CANT_GET_KEY);
+        return -1;
+    }
+    /* Convert the signature type to a CryptoAPI algorithm ID */
+    switch (dtype) {
+    case NID_sha256:
+        alg = CALG_SHA_256;
+        break;
+
+    case NID_sha384:
+        alg = CALG_SHA_384;
+        break;
+
+    case NID_sha512:
+        alg = CALG_SHA_512;
+        break;
+
+    case NID_sha1:
+        alg = CALG_SHA1;
+        break;
+
+    case NID_md5:
+        alg = CALG_MD5;
+        break;
+
+    case NID_md5_sha1:
+        alg = CALG_SSL3_SHAMD5;
+        break;
+    default:
+        {
+            char algstr[10];
+            BIO_snprintf(algstr, 10, "%x", dtype);
+            CAPIerr(CAPI_F_CAPI_RSA_SIGN, CAPI_R_UNSUPPORTED_ALGORITHM_NID);
+            ERR_add_error_data(2, "NID=0x", algstr);
+            return -1;
+        }
+    }
+
+    /* Create the hash object */
+    if (!CryptCreateHash(capi_key->hprov, alg, 0, 0, &hash)) {
+        CAPIerr(CAPI_F_CAPI_RSA_SIGN, CAPI_R_CANT_CREATE_HASH_OBJECT);
+        capi_addlasterror();
+        return -1;
+    }
+    /* Set the hash value to the value passed */
+
+    if (!CryptSetHashParam(hash, HP_HASHVAL, (unsigned char *)m, 0)) {
+        CAPIerr(CAPI_F_CAPI_RSA_SIGN, CAPI_R_CANT_SET_HASH_VALUE);
+        capi_addlasterror();
+        goto err;
+    }
+
+    /* Finally sign it */
+    slen = RSA_size(rsa);
+    if (!CryptSignHash(hash, capi_key->keyspec, NULL, 0, sigret, &slen)) {
+        CAPIerr(CAPI_F_CAPI_RSA_SIGN, CAPI_R_ERROR_SIGNING_HASH);
+        capi_addlasterror();
+        goto err;
+    } else {
+        ret = 1;
+        /* Inplace byte reversal of signature */
+        for (i = 0; i < slen / 2; i++) {
+            unsigned char c;
+            c = sigret[i];
+            sigret[i] = sigret[slen - i - 1];
+            sigret[slen - i - 1] = c;
+        }
+        *siglen = slen;
+    }
+
+    /* Now cleanup */
+
+ err:
+    CryptDestroyHash(hash);
+
+    return ret;
+}
+
+int capi_rsa_priv_dec(int flen, const unsigned char *from,
+                      unsigned char *to, RSA *rsa, int padding)
+{
+    int i;
+    unsigned char *tmpbuf;
+    CAPI_KEY *capi_key;
+    CAPI_CTX *ctx;
+    DWORD flags = 0;
+    DWORD dlen;
+
+    if (flen <= 0)
+        return flen;
+
+    ctx = ENGINE_get_ex_data(RSA_get0_engine(rsa), capi_idx);
+
+    CAPI_trace(ctx, "Called capi_rsa_priv_dec()\n");
+
+    capi_key = RSA_get_ex_data(rsa, rsa_capi_idx);
+    if (!capi_key) {
+        CAPIerr(CAPI_F_CAPI_RSA_PRIV_DEC, CAPI_R_CANT_GET_KEY);
+        return -1;
+    }
+
+    switch (padding) {
+    case RSA_PKCS1_PADDING:
+        /* Nothing to do */
+        break;
+#ifdef CRYPT_DECRYPT_RSA_NO_PADDING_CHECK
+    case RSA_NO_PADDING:
+        flags = CRYPT_DECRYPT_RSA_NO_PADDING_CHECK;
+        break;
+#endif
+    default:
+        {
+            char errstr[10];
+            BIO_snprintf(errstr, 10, "%d", padding);
+            CAPIerr(CAPI_F_CAPI_RSA_PRIV_DEC, CAPI_R_UNSUPPORTED_PADDING);
+            ERR_add_error_data(2, "padding=", errstr);
+            return -1;
+        }
+    }
+
+    /* Create temp reverse order version of input */
+    if ((tmpbuf = OPENSSL_malloc(flen)) == NULL) {
+        CAPIerr(CAPI_F_CAPI_RSA_PRIV_DEC, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+    for (i = 0; i < flen; i++)
+        tmpbuf[flen - i - 1] = from[i];
+
+    /* Finally decrypt it */
+    dlen = flen;
+    if (!CryptDecrypt(capi_key->key, 0, TRUE, flags, tmpbuf, &dlen)) {
+        CAPIerr(CAPI_F_CAPI_RSA_PRIV_DEC, CAPI_R_DECRYPT_ERROR);
+        capi_addlasterror();
+        OPENSSL_cleanse(tmpbuf, dlen);
+        OPENSSL_free(tmpbuf);
+        return -1;
+    } else {
+        memcpy(to, tmpbuf, (flen = (int)dlen));
+    }
+    OPENSSL_cleanse(tmpbuf, flen);
+    OPENSSL_free(tmpbuf);
+
+    return flen;
+}
+
+static int capi_rsa_free(RSA *rsa)
+{
+    CAPI_KEY *capi_key;
+    capi_key = RSA_get_ex_data(rsa, rsa_capi_idx);
+    capi_free_key(capi_key);
+    RSA_set_ex_data(rsa, rsa_capi_idx, 0);
+    return 1;
+}
+
+# ifndef OPENSSL_NO_DSA
+/* CryptoAPI DSA operations */
+
+static DSA_SIG *capi_dsa_do_sign(const unsigned char *digest, int dlen,
+                                 DSA *dsa)
+{
+    HCRYPTHASH hash;
+    DWORD slen;
+    DSA_SIG *ret = NULL;
+    CAPI_KEY *capi_key;
+    CAPI_CTX *ctx;
+    unsigned char csigbuf[40];
+
+    ctx = ENGINE_get_ex_data(DSA_get0_engine(dsa), capi_idx);
+
+    CAPI_trace(ctx, "Called CAPI_dsa_do_sign()\n");
+
+    capi_key = DSA_get_ex_data(dsa, dsa_capi_idx);
+
+    if (!capi_key) {
+        CAPIerr(CAPI_F_CAPI_DSA_DO_SIGN, CAPI_R_CANT_GET_KEY);
+        return NULL;
+    }
+
+    if (dlen != 20) {
+        CAPIerr(CAPI_F_CAPI_DSA_DO_SIGN, CAPI_R_INVALID_DIGEST_LENGTH);
+        return NULL;
+    }
+
+    /* Create the hash object */
+    if (!CryptCreateHash(capi_key->hprov, CALG_SHA1, 0, 0, &hash)) {
+        CAPIerr(CAPI_F_CAPI_DSA_DO_SIGN, CAPI_R_CANT_CREATE_HASH_OBJECT);
+        capi_addlasterror();
+        return NULL;
+    }
+
+    /* Set the hash value to the value passed */
+    if (!CryptSetHashParam(hash, HP_HASHVAL, (unsigned char *)digest, 0)) {
+        CAPIerr(CAPI_F_CAPI_DSA_DO_SIGN, CAPI_R_CANT_SET_HASH_VALUE);
+        capi_addlasterror();
+        goto err;
+    }
+
+    /* Finally sign it */
+    slen = sizeof(csigbuf);
+    if (!CryptSignHash(hash, capi_key->keyspec, NULL, 0, csigbuf, &slen)) {
+        CAPIerr(CAPI_F_CAPI_DSA_DO_SIGN, CAPI_R_ERROR_SIGNING_HASH);
+        capi_addlasterror();
+        goto err;
+    } else {
+        BIGNUM *r = BN_new(), *s = BN_new();
+
+        if (r == NULL || s == NULL
+            || !lend_tobn(r, csigbuf, 20)
+            || !lend_tobn(s, csigbuf + 20, 20)
+            || (ret = DSA_SIG_new()) == NULL) {
+            BN_free(r); /* BN_free checks for BIGNUM * being NULL */
+            BN_free(s);
+            goto err;
+        }
+        DSA_SIG_set0(ret, r, s);
+    }
+
+    /* Now cleanup */
+
+ err:
+    OPENSSL_cleanse(csigbuf, 40);
+    CryptDestroyHash(hash);
+    return ret;
+}
+
+static int capi_dsa_free(DSA *dsa)
+{
+    CAPI_KEY *capi_key;
+    capi_key = DSA_get_ex_data(dsa, dsa_capi_idx);
+    capi_free_key(capi_key);
+    DSA_set_ex_data(dsa, dsa_capi_idx, 0);
+    return 1;
+}
+# endif
+
+static void capi_vtrace(CAPI_CTX *ctx, int level, char *format,
+                        va_list argptr)
+{
+    BIO *out;
+
+    if (!ctx || (ctx->debug_level < level) || (!ctx->debug_file))
+        return;
+    out = BIO_new_file(ctx->debug_file, "a+");
+    if (out == NULL) {
+        CAPIerr(CAPI_F_CAPI_VTRACE, CAPI_R_FILE_OPEN_ERROR);
+        return;
+    }
+    BIO_vprintf(out, format, argptr);
+    BIO_free(out);
+}
+
+static void CAPI_trace(CAPI_CTX *ctx, char *format, ...)
+{
+    va_list args;
+    va_start(args, format);
+    capi_vtrace(ctx, CAPI_DBG_TRACE, format, args);
+    va_end(args);
+}
+
+static void capi_addlasterror(void)
+{
+    capi_adderror(GetLastError());
+}
+
+static void capi_adderror(DWORD err)
+{
+    char errstr[10];
+    BIO_snprintf(errstr, 10, "%lX", err);
+    ERR_add_error_data(2, "Error code= 0x", errstr);
+}
+
+static char *wide_to_asc(LPCWSTR wstr)
+{
+    char *str;
+    int len_0, sz;
+
+    if (!wstr)
+        return NULL;
+    len_0 = (int)wcslen(wstr) + 1; /* WideCharToMultiByte expects int */
+    sz = WideCharToMultiByte(CP_ACP, 0, wstr, len_0, NULL, 0, NULL, NULL);
+    if (!sz) {
+        CAPIerr(CAPI_F_WIDE_TO_ASC, CAPI_R_WIN32_ERROR);
+        return NULL;
+    }
+    str = OPENSSL_malloc(sz);
+    if (str == NULL) {
+        CAPIerr(CAPI_F_WIDE_TO_ASC, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    if (!WideCharToMultiByte(CP_ACP, 0, wstr, len_0, str, sz, NULL, NULL)) {
+        OPENSSL_free(str);
+        CAPIerr(CAPI_F_WIDE_TO_ASC, CAPI_R_WIN32_ERROR);
+        return NULL;
+    }
+    return str;
+}
+
+static int capi_get_provname(CAPI_CTX *ctx, LPSTR *pname, DWORD *ptype,
+                             DWORD idx)
+{
+    DWORD len, err;
+    LPTSTR name;
+    CAPI_trace(ctx, "capi_get_provname, index=%d\n", idx);
+    if (!CryptEnumProviders(idx, NULL, 0, ptype, NULL, &len)) {
+        err = GetLastError();
+        if (err == ERROR_NO_MORE_ITEMS)
+            return 2;
+        CAPIerr(CAPI_F_CAPI_GET_PROVNAME, CAPI_R_CRYPTENUMPROVIDERS_ERROR);
+        capi_adderror(err);
+        return 0;
+    }
+    name = OPENSSL_malloc(len);
+    if (name == NULL) {
+        CAPIerr(CAPI_F_CAPI_GET_PROVNAME, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    if (!CryptEnumProviders(idx, NULL, 0, ptype, name, &len)) {
+        err = GetLastError();
+        OPENSSL_free(name);
+        if (err == ERROR_NO_MORE_ITEMS)
+            return 2;
+        CAPIerr(CAPI_F_CAPI_GET_PROVNAME, CAPI_R_CRYPTENUMPROVIDERS_ERROR);
+        capi_adderror(err);
+        return 0;
+    }
+    if (sizeof(TCHAR) != sizeof(char)) {
+        *pname = wide_to_asc((WCHAR *)name);
+        OPENSSL_free(name);
+        if (*pname == NULL)
+            return 0;
+    } else {
+        *pname = (char *)name;
+    }
+    CAPI_trace(ctx, "capi_get_provname, returned name=%s, type=%d\n", *pname,
+               *ptype);
+
+    return 1;
+}
+
+static int capi_list_providers(CAPI_CTX *ctx, BIO *out)
+{
+    DWORD idx, ptype;
+    int ret;
+    LPSTR provname = NULL;
+    CAPI_trace(ctx, "capi_list_providers\n");
+    BIO_printf(out, "Available CSPs:\n");
+    for (idx = 0;; idx++) {
+        ret = capi_get_provname(ctx, &provname, &ptype, idx);
+        if (ret == 2)
+            break;
+        if (ret == 0)
+            break;
+        BIO_printf(out, "%lu. %s, type %lu\n", idx, provname, ptype);
+        OPENSSL_free(provname);
+    }
+    return 1;
+}
+
+static int capi_list_containers(CAPI_CTX *ctx, BIO *out)
+{
+    int ret = 1;
+    HCRYPTPROV hprov;
+    DWORD err, idx, flags, buflen = 0, clen;
+    LPSTR cname;
+    LPWSTR cspname = NULL;
+
+    CAPI_trace(ctx, "Listing containers CSP=%s, type = %d\n", ctx->cspname,
+               ctx->csptype);
+    if (ctx->cspname != NULL) {
+        if ((clen = MultiByteToWideChar(CP_ACP, 0, ctx->cspname, -1,
+                                        NULL, 0))) {
+            cspname = alloca(clen * sizeof(WCHAR));
+            MultiByteToWideChar(CP_ACP, 0, ctx->cspname, -1, (WCHAR *)cspname,
+                                clen);
+        }
+        if (cspname == NULL) {
+            CAPIerr(CAPI_F_CAPI_LIST_CONTAINERS, ERR_R_MALLOC_FAILURE);
+            capi_addlasterror();
+            return 0;
+        }
+    }
+    if (!CryptAcquireContextW(&hprov, NULL, cspname, ctx->csptype,
+                              CRYPT_VERIFYCONTEXT)) {
+        CAPIerr(CAPI_F_CAPI_LIST_CONTAINERS,
+                CAPI_R_CRYPTACQUIRECONTEXT_ERROR);
+        capi_addlasterror();
+        return 0;
+    }
+    if (!CryptGetProvParam(hprov, PP_ENUMCONTAINERS, NULL, &buflen,
+                           CRYPT_FIRST)) {
+        CAPIerr(CAPI_F_CAPI_LIST_CONTAINERS, CAPI_R_ENUMCONTAINERS_ERROR);
+        capi_addlasterror();
+        CryptReleaseContext(hprov, 0);
+        return 0;
+    }
+    CAPI_trace(ctx, "Got max container len %d\n", buflen);
+    if (buflen == 0)
+        buflen = 1024;
+    cname = OPENSSL_malloc(buflen);
+    if (cname == NULL) {
+        CAPIerr(CAPI_F_CAPI_LIST_CONTAINERS, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    for (idx = 0;; idx++) {
+        clen = buflen;
+        cname[0] = 0;
+
+        if (idx == 0)
+            flags = CRYPT_FIRST;
+        else
+            flags = 0;
+        if (!CryptGetProvParam(hprov, PP_ENUMCONTAINERS, (BYTE *)cname,
+                               &clen, flags)) {
+            err = GetLastError();
+            if (err == ERROR_NO_MORE_ITEMS)
+                goto done;
+            CAPIerr(CAPI_F_CAPI_LIST_CONTAINERS, CAPI_R_ENUMCONTAINERS_ERROR);
+            capi_adderror(err);
+            goto err;
+        }
+        CAPI_trace(ctx, "Container name %s, len=%d, index=%d, flags=%d\n",
+                   cname, clen, idx, flags);
+        if (!cname[0] && (clen == buflen)) {
+            CAPI_trace(ctx, "Enumerate bug: using workaround\n");
+            goto done;
+        }
+        BIO_printf(out, "%lu. %s\n", idx, cname);
+    }
+ err:
+
+    ret = 0;
+
+ done:
+    OPENSSL_free(cname);
+    CryptReleaseContext(hprov, 0);
+
+    return ret;
+}
+
+static CRYPT_KEY_PROV_INFO *capi_get_prov_info(CAPI_CTX *ctx,
+                                               PCCERT_CONTEXT cert)
+{
+    DWORD len;
+    CRYPT_KEY_PROV_INFO *pinfo;
+
+    if (!CertGetCertificateContextProperty(cert, CERT_KEY_PROV_INFO_PROP_ID,
+                                           NULL, &len))
+        return NULL;
+    pinfo = OPENSSL_malloc(len);
+    if (pinfo == NULL) {
+        CAPIerr(CAPI_F_CAPI_GET_PROV_INFO, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    if (!CertGetCertificateContextProperty(cert, CERT_KEY_PROV_INFO_PROP_ID,
+                                           pinfo, &len)) {
+        CAPIerr(CAPI_F_CAPI_GET_PROV_INFO,
+                CAPI_R_ERROR_GETTING_KEY_PROVIDER_INFO);
+        capi_addlasterror();
+        OPENSSL_free(pinfo);
+        return NULL;
+    }
+    return pinfo;
+}
+
+static void capi_dump_prov_info(CAPI_CTX *ctx, BIO *out,
+                                CRYPT_KEY_PROV_INFO *pinfo)
+{
+    char *provname = NULL, *contname = NULL;
+    if (!pinfo) {
+        BIO_printf(out, "  No Private Key\n");
+        return;
+    }
+    provname = wide_to_asc(pinfo->pwszProvName);
+    contname = wide_to_asc(pinfo->pwszContainerName);
+    if (!provname || !contname)
+        goto err;
+
+    BIO_printf(out, "  Private Key Info:\n");
+    BIO_printf(out, "    Provider Name:  %s, Provider Type %lu\n", provname,
+               pinfo->dwProvType);
+    BIO_printf(out, "    Container Name: %s, Key Type %lu\n", contname,
+               pinfo->dwKeySpec);
+ err:
+    OPENSSL_free(provname);
+    OPENSSL_free(contname);
+}
+
+static char *capi_cert_get_fname(CAPI_CTX *ctx, PCCERT_CONTEXT cert)
+{
+    LPWSTR wfname;
+    DWORD dlen;
+
+    CAPI_trace(ctx, "capi_cert_get_fname\n");
+    if (!CertGetCertificateContextProperty(cert, CERT_FRIENDLY_NAME_PROP_ID,
+                                           NULL, &dlen))
+        return NULL;
+    wfname = OPENSSL_malloc(dlen);
+    if (wfname == NULL)
+        return NULL;
+    if (CertGetCertificateContextProperty(cert, CERT_FRIENDLY_NAME_PROP_ID,
+                                          wfname, &dlen)) {
+        char *fname = wide_to_asc(wfname);
+        OPENSSL_free(wfname);
+        return fname;
+    }
+    CAPIerr(CAPI_F_CAPI_CERT_GET_FNAME, CAPI_R_ERROR_GETTING_FRIENDLY_NAME);
+    capi_addlasterror();
+
+    OPENSSL_free(wfname);
+    return NULL;
+}
+
+static void capi_dump_cert(CAPI_CTX *ctx, BIO *out, PCCERT_CONTEXT cert)
+{
+    X509 *x;
+    const unsigned char *p;
+    unsigned long flags = ctx->dump_flags;
+    if (flags & CAPI_DMP_FNAME) {
+        char *fname;
+        fname = capi_cert_get_fname(ctx, cert);
+        if (fname) {
+            BIO_printf(out, "  Friendly Name \"%s\"\n", fname);
+            OPENSSL_free(fname);
+        } else {
+            BIO_printf(out, "  <No Friendly Name>\n");
+        }
+    }
+
+    p = cert->pbCertEncoded;
+    x = d2i_X509(NULL, &p, cert->cbCertEncoded);
+    if (!x)
+        BIO_printf(out, "  <Can't parse certificate>\n");
+    if (flags & CAPI_DMP_SUMMARY) {
+        BIO_printf(out, "  Subject: ");
+        X509_NAME_print_ex(out, X509_get_subject_name(x), 0, XN_FLAG_ONELINE);
+        BIO_printf(out, "\n  Issuer: ");
+        X509_NAME_print_ex(out, X509_get_issuer_name(x), 0, XN_FLAG_ONELINE);
+        BIO_printf(out, "\n");
+    }
+    if (flags & CAPI_DMP_FULL)
+        X509_print_ex(out, x, XN_FLAG_ONELINE, 0);
+
+    if (flags & CAPI_DMP_PKEYINFO) {
+        CRYPT_KEY_PROV_INFO *pinfo;
+        pinfo = capi_get_prov_info(ctx, cert);
+        capi_dump_prov_info(ctx, out, pinfo);
+        OPENSSL_free(pinfo);
+    }
+
+    if (flags & CAPI_DMP_PEM)
+        PEM_write_bio_X509(out, x);
+    X509_free(x);
+}
+
+static HCERTSTORE capi_open_store(CAPI_CTX *ctx, char *storename)
+{
+    HCERTSTORE hstore;
+
+    if (!storename)
+        storename = ctx->storename;
+    if (!storename)
+        storename = "MY";
+    CAPI_trace(ctx, "Opening certificate store %s\n", storename);
+
+    hstore = CertOpenStore(CERT_STORE_PROV_SYSTEM_A, 0, 0,
+                           ctx->store_flags, storename);
+    if (!hstore) {
+        CAPIerr(CAPI_F_CAPI_OPEN_STORE, CAPI_R_ERROR_OPENING_STORE);
+        capi_addlasterror();
+    }
+    return hstore;
+}
+
+int capi_list_certs(CAPI_CTX *ctx, BIO *out, char *id)
+{
+    char *storename;
+    int idx;
+    int ret = 1;
+    HCERTSTORE hstore;
+    PCCERT_CONTEXT cert = NULL;
+
+    storename = ctx->storename;
+    if (!storename)
+        storename = "MY";
+    CAPI_trace(ctx, "Listing certs for store %s\n", storename);
+
+    hstore = capi_open_store(ctx, storename);
+    if (!hstore)
+        return 0;
+    if (id) {
+        cert = capi_find_cert(ctx, id, hstore);
+        if (!cert) {
+            ret = 0;
+            goto err;
+        }
+        capi_dump_cert(ctx, out, cert);
+        CertFreeCertificateContext(cert);
+    } else {
+        for (idx = 0;; idx++) {
+            cert = CertEnumCertificatesInStore(hstore, cert);
+            if (!cert)
+                break;
+            BIO_printf(out, "Certificate %d\n", idx);
+            capi_dump_cert(ctx, out, cert);
+        }
+    }
+ err:
+    CertCloseStore(hstore, 0);
+    return ret;
+}
+
+static PCCERT_CONTEXT capi_find_cert(CAPI_CTX *ctx, const char *id,
+                                     HCERTSTORE hstore)
+{
+    PCCERT_CONTEXT cert = NULL;
+    char *fname = NULL;
+    int match;
+    switch (ctx->lookup_method) {
+    case CAPI_LU_SUBSTR:
+        return CertFindCertificateInStore(hstore, X509_ASN_ENCODING, 0,
+                                          CERT_FIND_SUBJECT_STR_A, id, NULL);
+    case CAPI_LU_FNAME:
+        for (;;) {
+            cert = CertEnumCertificatesInStore(hstore, cert);
+            if (!cert)
+                return NULL;
+            fname = capi_cert_get_fname(ctx, cert);
+            if (fname) {
+                if (strcmp(fname, id))
+                    match = 0;
+                else
+                    match = 1;
+                OPENSSL_free(fname);
+                if (match)
+                    return cert;
+            }
+        }
+    default:
+        return NULL;
+    }
+}
+
+static CAPI_KEY *capi_get_key(CAPI_CTX *ctx, const WCHAR *contname,
+                              const WCHAR *provname, DWORD ptype,
+                              DWORD keyspec)
+{
+    DWORD dwFlags = 0;
+    CAPI_KEY *key = OPENSSL_malloc(sizeof(*key));
+
+    if (key == NULL)
+        return NULL;
+    /* If PROV_RSA_AES supported use it instead */
+    if (ptype == PROV_RSA_FULL && use_aes_csp &&
+        wcscmp(provname, rsa_enh_cspname) == 0) {
+        provname = rsa_aes_cspname;
+        ptype = PROV_RSA_AES;
+    }
+    if (ctx && ctx->debug_level >= CAPI_DBG_TRACE && ctx->debug_file) {
+        /*
+         * above 'if' is [complementary] copy from CAPI_trace and serves
+         * as optimization to minimize [below] malloc-ations
+         */
+        char *_contname = wide_to_asc(contname);
+        char *_provname = wide_to_asc(provname);
+
+        CAPI_trace(ctx, "capi_get_key, contname=%s, provname=%s, type=%d\n",
+                   _contname, _provname, ptype);
+        OPENSSL_free(_provname);
+        OPENSSL_free(_contname);
+    }
+    if (ctx->store_flags & CERT_SYSTEM_STORE_LOCAL_MACHINE)
+        dwFlags = CRYPT_MACHINE_KEYSET;
+    if (!CryptAcquireContextW(&key->hprov, contname, provname, ptype,
+                              dwFlags)) {
+        CAPIerr(CAPI_F_CAPI_GET_KEY, CAPI_R_CRYPTACQUIRECONTEXT_ERROR);
+        capi_addlasterror();
+        goto err;
+    }
+    if (!CryptGetUserKey(key->hprov, keyspec, &key->key)) {
+        CAPIerr(CAPI_F_CAPI_GET_KEY, CAPI_R_GETUSERKEY_ERROR);
+        capi_addlasterror();
+        CryptReleaseContext(key->hprov, 0);
+        goto err;
+    }
+    key->keyspec = keyspec;
+    key->pcert = NULL;
+    return key;
+
+ err:
+    OPENSSL_free(key);
+    return NULL;
+}
+
+static CAPI_KEY *capi_get_cert_key(CAPI_CTX *ctx, PCCERT_CONTEXT cert)
+{
+    CAPI_KEY *key = NULL;
+    CRYPT_KEY_PROV_INFO *pinfo = NULL;
+
+    pinfo = capi_get_prov_info(ctx, cert);
+
+    if (pinfo != NULL)
+        key = capi_get_key(ctx, pinfo->pwszContainerName, pinfo->pwszProvName,
+                           pinfo->dwProvType, pinfo->dwKeySpec);
+
+    OPENSSL_free(pinfo);
+    return key;
+}
+
+CAPI_KEY *capi_find_key(CAPI_CTX *ctx, const char *id)
+{
+    PCCERT_CONTEXT cert;
+    HCERTSTORE hstore;
+    CAPI_KEY *key = NULL;
+
+    switch (ctx->lookup_method) {
+    case CAPI_LU_SUBSTR:
+    case CAPI_LU_FNAME:
+        hstore = capi_open_store(ctx, NULL);
+        if (!hstore)
+            return NULL;
+        cert = capi_find_cert(ctx, id, hstore);
+        if (cert) {
+            key = capi_get_cert_key(ctx, cert);
+            CertFreeCertificateContext(cert);
+        }
+        CertCloseStore(hstore, 0);
+        break;
+
+    case CAPI_LU_CONTNAME:
+        {
+            WCHAR *contname, *provname;
+            DWORD len;
+
+            if ((len = MultiByteToWideChar(CP_ACP, 0, id, -1, NULL, 0)) &&
+                (contname = alloca(len * sizeof(WCHAR)),
+                 MultiByteToWideChar(CP_ACP, 0, id, -1, contname, len)) &&
+                (len = MultiByteToWideChar(CP_ACP, 0, ctx->cspname, -1,
+                                           NULL, 0)) &&
+                (provname = alloca(len * sizeof(WCHAR)),
+                 MultiByteToWideChar(CP_ACP, 0, ctx->cspname, -1,
+                                     provname, len)))
+                key = capi_get_key(ctx, contname, provname,
+                                   ctx->csptype, ctx->keytype);
+        }
+        break;
+    }
+
+    return key;
+}
+
+void capi_free_key(CAPI_KEY *key)
+{
+    if (!key)
+        return;
+    CryptDestroyKey(key->key);
+    CryptReleaseContext(key->hprov, 0);
+    if (key->pcert)
+        CertFreeCertificateContext(key->pcert);
+    OPENSSL_free(key);
+}
+
+/* Initialize a CAPI_CTX structure */
+
+static CAPI_CTX *capi_ctx_new(void)
+{
+    CAPI_CTX *ctx = OPENSSL_zalloc(sizeof(*ctx));
+
+    if (ctx == NULL) {
+        CAPIerr(CAPI_F_CAPI_CTX_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    ctx->csptype = PROV_RSA_FULL;
+    ctx->dump_flags = CAPI_DMP_SUMMARY | CAPI_DMP_FNAME;
+    ctx->keytype = AT_KEYEXCHANGE;
+    ctx->store_flags = CERT_STORE_OPEN_EXISTING_FLAG |
+        CERT_STORE_READONLY_FLAG | CERT_SYSTEM_STORE_CURRENT_USER;
+    ctx->lookup_method = CAPI_LU_SUBSTR;
+    ctx->client_cert_select = cert_select_simple;
+    return ctx;
+}
+
+static void capi_ctx_free(CAPI_CTX *ctx)
+{
+    CAPI_trace(ctx, "Calling capi_ctx_free with %lx\n", ctx);
+    if (!ctx)
+        return;
+    OPENSSL_free(ctx->cspname);
+    OPENSSL_free(ctx->debug_file);
+    OPENSSL_free(ctx->storename);
+    OPENSSL_free(ctx->ssl_client_store);
+    OPENSSL_free(ctx);
+}
+
+static int capi_ctx_set_provname(CAPI_CTX *ctx, LPSTR pname, DWORD type,
+                                 int check)
+{
+    LPSTR tmpcspname;
+
+    CAPI_trace(ctx, "capi_ctx_set_provname, name=%s, type=%d\n", pname, type);
+    if (check) {
+        HCRYPTPROV hprov;
+        LPWSTR name = NULL;
+        DWORD len;
+
+        if ((len = MultiByteToWideChar(CP_ACP, 0, pname, -1, NULL, 0))) {
+            name = alloca(len * sizeof(WCHAR));
+            MultiByteToWideChar(CP_ACP, 0, pname, -1, (WCHAR *)name, len);
+        }
+        if (name == NULL || !CryptAcquireContextW(&hprov, NULL, name, type,
+                                                  CRYPT_VERIFYCONTEXT)) {
+            CAPIerr(CAPI_F_CAPI_CTX_SET_PROVNAME,
+                    CAPI_R_CRYPTACQUIRECONTEXT_ERROR);
+            capi_addlasterror();
+            return 0;
+        }
+        CryptReleaseContext(hprov, 0);
+    }
+    tmpcspname = OPENSSL_strdup(pname);
+    if (tmpcspname == NULL) {
+        CAPIerr(CAPI_F_CAPI_CTX_SET_PROVNAME, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    OPENSSL_free(ctx->cspname);
+    ctx->cspname = tmpcspname;
+    ctx->csptype = type;
+    return 1;
+}
+
+static int capi_ctx_set_provname_idx(CAPI_CTX *ctx, int idx)
+{
+    LPSTR pname;
+    DWORD type;
+    int res;
+    if (capi_get_provname(ctx, &pname, &type, idx) != 1)
+        return 0;
+    res = capi_ctx_set_provname(ctx, pname, type, 0);
+    OPENSSL_free(pname);
+    return res;
+}
+
+static int cert_issuer_match(STACK_OF(X509_NAME) *ca_dn, X509 *x)
+{
+    int i;
+    X509_NAME *nm;
+    /* Special case: empty list: match anything */
+    if (sk_X509_NAME_num(ca_dn) <= 0)
+        return 1;
+    for (i = 0; i < sk_X509_NAME_num(ca_dn); i++) {
+        nm = sk_X509_NAME_value(ca_dn, i);
+        if (!X509_NAME_cmp(nm, X509_get_issuer_name(x)))
+            return 1;
+    }
+    return 0;
+}
+
+static int capi_load_ssl_client_cert(ENGINE *e, SSL *ssl,
+                                     STACK_OF(X509_NAME) *ca_dn, X509 **pcert,
+                                     EVP_PKEY **pkey, STACK_OF(X509) **pother,
+                                     UI_METHOD *ui_method,
+                                     void *callback_data)
+{
+    STACK_OF(X509) *certs = NULL;
+    X509 *x;
+    char *storename;
+    const unsigned char *p;
+    int i, client_cert_idx;
+    HCERTSTORE hstore;
+    PCCERT_CONTEXT cert = NULL, excert = NULL;
+    CAPI_CTX *ctx;
+    CAPI_KEY *key;
+    ctx = ENGINE_get_ex_data(e, capi_idx);
+
+    *pcert = NULL;
+    *pkey = NULL;
+
+    storename = ctx->ssl_client_store;
+    if (!storename)
+        storename = "MY";
+
+    hstore = capi_open_store(ctx, storename);
+    if (!hstore)
+        return 0;
+    /* Enumerate all certificates collect any matches */
+    for (i = 0;; i++) {
+        cert = CertEnumCertificatesInStore(hstore, cert);
+        if (!cert)
+            break;
+        p = cert->pbCertEncoded;
+        x = d2i_X509(NULL, &p, cert->cbCertEncoded);
+        if (!x) {
+            CAPI_trace(ctx, "Can't Parse Certificate %d\n", i);
+            continue;
+        }
+        if (cert_issuer_match(ca_dn, x)
+            && X509_check_purpose(x, X509_PURPOSE_SSL_CLIENT, 0)) {
+            key = capi_get_cert_key(ctx, cert);
+            if (!key) {
+                X509_free(x);
+                continue;
+            }
+            /*
+             * Match found: attach extra data to it so we can retrieve the
+             * key later.
+             */
+            excert = CertDuplicateCertificateContext(cert);
+            key->pcert = excert;
+            X509_set_ex_data(x, cert_capi_idx, key);
+
+            if (!certs)
+                certs = sk_X509_new_null();
+
+            sk_X509_push(certs, x);
+        } else {
+            X509_free(x);
+        }
+    }
+
+    if (cert)
+        CertFreeCertificateContext(cert);
+    if (hstore)
+        CertCloseStore(hstore, 0);
+
+    if (!certs)
+        return 0;
+
+    /* Select the appropriate certificate */
+
+    client_cert_idx = ctx->client_cert_select(e, ssl, certs);
+
+    /* Set the selected certificate and free the rest */
+
+    for (i = 0; i < sk_X509_num(certs); i++) {
+        x = sk_X509_value(certs, i);
+        if (i == client_cert_idx)
+            *pcert = x;
+        else {
+            key = X509_get_ex_data(x, cert_capi_idx);
+            capi_free_key(key);
+            X509_free(x);
+        }
+    }
+
+    sk_X509_free(certs);
+
+    if (!*pcert)
+        return 0;
+
+    /* Setup key for selected certificate */
+
+    key = X509_get_ex_data(*pcert, cert_capi_idx);
+    *pkey = capi_get_pkey(e, key);
+    X509_set_ex_data(*pcert, cert_capi_idx, NULL);
+
+    return 1;
+
+}
+
+/* Simple client cert selection function: always select first */
+
+static int cert_select_simple(ENGINE *e, SSL *ssl, STACK_OF(X509) *certs)
+{
+    return 0;
+}
+
+# ifdef OPENSSL_CAPIENG_DIALOG
+
+/*
+ * More complex cert selection function, using standard function
+ * CryptUIDlgSelectCertificateFromStore() to produce a dialog box.
+ */
+
+/*
+ * Definitions which are in cryptuiapi.h but this is not present in older
+ * versions of headers.
+ */
+
+#  ifndef CRYPTUI_SELECT_LOCATION_COLUMN
+#   define CRYPTUI_SELECT_LOCATION_COLUMN                   0x000000010
+#   define CRYPTUI_SELECT_INTENDEDUSE_COLUMN                0x000000004
+#  endif
+
+#  define dlg_title L"OpenSSL Application SSL Client Certificate Selection"
+#  define dlg_prompt L"Select a certificate to use for authentication"
+#  define dlg_columns      CRYPTUI_SELECT_LOCATION_COLUMN \
+                        |CRYPTUI_SELECT_INTENDEDUSE_COLUMN
+
+static int cert_select_dialog(ENGINE *e, SSL *ssl, STACK_OF(X509) *certs)
+{
+    X509 *x;
+    HCERTSTORE dstore;
+    PCCERT_CONTEXT cert;
+    CAPI_CTX *ctx;
+    CAPI_KEY *key;
+    HWND hwnd;
+    int i, idx = -1;
+    if (sk_X509_num(certs) == 1)
+        return 0;
+    ctx = ENGINE_get_ex_data(e, capi_idx);
+    /* Create an in memory store of certificates */
+    dstore = CertOpenStore(CERT_STORE_PROV_MEMORY, 0, 0,
+                           CERT_STORE_CREATE_NEW_FLAG, NULL);
+    if (!dstore) {
+        CAPIerr(CAPI_F_CERT_SELECT_DIALOG, CAPI_R_ERROR_CREATING_STORE);
+        capi_addlasterror();
+        goto err;
+    }
+    /* Add all certificates to store */
+    for (i = 0; i < sk_X509_num(certs); i++) {
+        x = sk_X509_value(certs, i);
+        key = X509_get_ex_data(x, cert_capi_idx);
+
+        if (!CertAddCertificateContextToStore(dstore, key->pcert,
+                                              CERT_STORE_ADD_NEW, NULL)) {
+            CAPIerr(CAPI_F_CERT_SELECT_DIALOG, CAPI_R_ERROR_ADDING_CERT);
+            capi_addlasterror();
+            goto err;
+        }
+
+    }
+    hwnd = GetForegroundWindow();
+    if (!hwnd)
+        hwnd = GetActiveWindow();
+    if (!hwnd && ctx->getconswindow)
+        hwnd = ctx->getconswindow();
+    /* Call dialog to select one */
+    cert = ctx->certselectdlg(dstore, hwnd, dlg_title, dlg_prompt,
+                              dlg_columns, 0, NULL);
+
+    /* Find matching cert from list */
+    if (cert) {
+        for (i = 0; i < sk_X509_num(certs); i++) {
+            x = sk_X509_value(certs, i);
+            key = X509_get_ex_data(x, cert_capi_idx);
+            if (CertCompareCertificate
+                (X509_ASN_ENCODING | PKCS_7_ASN_ENCODING, cert->pCertInfo,
+                 key->pcert->pCertInfo)) {
+                idx = i;
+                break;
+            }
+        }
+    }
+
+ err:
+    if (dstore)
+        CertCloseStore(dstore, 0);
+    return idx;
+
+}
+# endif
+
+#else                           /* !__COMPILE_CAPIENG */
+# include <openssl/engine.h>
+# ifndef OPENSSL_NO_DYNAMIC_ENGINE
+OPENSSL_EXPORT
+    int bind_engine(ENGINE *e, const char *id, const dynamic_fns *fns);
+OPENSSL_EXPORT
+    int bind_engine(ENGINE *e, const char *id, const dynamic_fns *fns)
+{
+    return 0;
+}
+
+IMPLEMENT_DYNAMIC_CHECK_FN()
+# else
+void engine_load_capi_int(void);
+void engine_load_capi_int(void)
+{
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_capi.ec b/trunk/3rdparty/openssl-1.1-fit/engines/e_capi.ec
new file mode 100644
index 000000000..d9c7aa510
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_capi.ec
@@ -0,0 +1,3 @@
+# The INPUT HEADER is scanned for declarations
+# LIBNAME       INPUT HEADER                    ERROR-TABLE FILE
+L CAPI          e_capi_err.h                    e_capi_err.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_capi.txt b/trunk/3rdparty/openssl-1.1-fit/engines/e_capi.txt
new file mode 100644
index 000000000..3f34cdf6b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_capi.txt
@@ -0,0 +1,62 @@
+# Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# Function codes
+CAPI_F_CAPI_CERT_GET_FNAME:99:capi_cert_get_fname
+CAPI_F_CAPI_CTRL:100:capi_ctrl
+CAPI_F_CAPI_CTX_NEW:101:capi_ctx_new
+CAPI_F_CAPI_CTX_SET_PROVNAME:102:capi_ctx_set_provname
+CAPI_F_CAPI_DSA_DO_SIGN:114:capi_dsa_do_sign
+CAPI_F_CAPI_GET_KEY:103:capi_get_key
+CAPI_F_CAPI_GET_PKEY:115:capi_get_pkey
+CAPI_F_CAPI_GET_PROVNAME:104:capi_get_provname
+CAPI_F_CAPI_GET_PROV_INFO:105:capi_get_prov_info
+CAPI_F_CAPI_INIT:106:capi_init
+CAPI_F_CAPI_LIST_CONTAINERS:107:capi_list_containers
+CAPI_F_CAPI_LOAD_PRIVKEY:108:capi_load_privkey
+CAPI_F_CAPI_OPEN_STORE:109:capi_open_store
+CAPI_F_CAPI_RSA_PRIV_DEC:110:capi_rsa_priv_dec
+CAPI_F_CAPI_RSA_PRIV_ENC:111:capi_rsa_priv_enc
+CAPI_F_CAPI_RSA_SIGN:112:capi_rsa_sign
+CAPI_F_CAPI_VTRACE:118:capi_vtrace
+CAPI_F_CERT_SELECT_DIALOG:117:cert_select_dialog
+CAPI_F_CLIENT_CERT_SELECT:116:*
+CAPI_F_WIDE_TO_ASC:113:wide_to_asc
+
+#Reason codes
+CAPI_R_CANT_CREATE_HASH_OBJECT:100:cant create hash object
+CAPI_R_CANT_FIND_CAPI_CONTEXT:101:cant find capi context
+CAPI_R_CANT_GET_KEY:102:cant get key
+CAPI_R_CANT_SET_HASH_VALUE:103:cant set hash value
+CAPI_R_CRYPTACQUIRECONTEXT_ERROR:104:cryptacquirecontext error
+CAPI_R_CRYPTENUMPROVIDERS_ERROR:105:cryptenumproviders error
+CAPI_R_DECRYPT_ERROR:106:decrypt error
+CAPI_R_ENGINE_NOT_INITIALIZED:107:engine not initialized
+CAPI_R_ENUMCONTAINERS_ERROR:108:enumcontainers error
+CAPI_R_ERROR_ADDING_CERT:109:error adding cert
+CAPI_R_ERROR_CREATING_STORE:110:error creating store
+CAPI_R_ERROR_GETTING_FRIENDLY_NAME:111:error getting friendly name
+CAPI_R_ERROR_GETTING_KEY_PROVIDER_INFO:112:error getting key provider info
+CAPI_R_ERROR_OPENING_STORE:113:error opening store
+CAPI_R_ERROR_SIGNING_HASH:114:error signing hash
+CAPI_R_FILE_OPEN_ERROR:115:file open error
+CAPI_R_FUNCTION_NOT_SUPPORTED:116:function not supported
+CAPI_R_GETUSERKEY_ERROR:117:getuserkey error
+CAPI_R_INVALID_DIGEST_LENGTH:118:invalid digest length
+CAPI_R_INVALID_DSA_PUBLIC_KEY_BLOB_MAGIC_NUMBER:119:\
+	invalid dsa public key blob magic number
+CAPI_R_INVALID_LOOKUP_METHOD:120:invalid lookup method
+CAPI_R_INVALID_PUBLIC_KEY_BLOB:121:invalid public key blob
+CAPI_R_INVALID_RSA_PUBLIC_KEY_BLOB_MAGIC_NUMBER:122:\
+	invalid rsa public key blob magic number
+CAPI_R_PUBKEY_EXPORT_ERROR:123:pubkey export error
+CAPI_R_PUBKEY_EXPORT_LENGTH_ERROR:124:pubkey export length error
+CAPI_R_UNKNOWN_COMMAND:125:unknown command
+CAPI_R_UNSUPPORTED_ALGORITHM_NID:126:unsupported algorithm nid
+CAPI_R_UNSUPPORTED_PADDING:127:unsupported padding
+CAPI_R_UNSUPPORTED_PUBLIC_KEY_ALGORITHM:128:unsupported public key algorithm
+CAPI_R_WIN32_ERROR:129:win32 error
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_capi_err.c b/trunk/3rdparty/openssl-1.1-fit/engines/e_capi_err.c
new file mode 100644
index 000000000..b72bc51a8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_capi_err.c
@@ -0,0 +1,119 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include "e_capi_err.h"
+
+#ifndef OPENSSL_NO_ERR
+
+static ERR_STRING_DATA CAPI_str_functs[] = {
+    {ERR_PACK(0, CAPI_F_CAPI_CERT_GET_FNAME, 0), "capi_cert_get_fname"},
+    {ERR_PACK(0, CAPI_F_CAPI_CTRL, 0), "capi_ctrl"},
+    {ERR_PACK(0, CAPI_F_CAPI_CTX_NEW, 0), "capi_ctx_new"},
+    {ERR_PACK(0, CAPI_F_CAPI_CTX_SET_PROVNAME, 0), "capi_ctx_set_provname"},
+    {ERR_PACK(0, CAPI_F_CAPI_DSA_DO_SIGN, 0), "capi_dsa_do_sign"},
+    {ERR_PACK(0, CAPI_F_CAPI_GET_KEY, 0), "capi_get_key"},
+    {ERR_PACK(0, CAPI_F_CAPI_GET_PKEY, 0), "capi_get_pkey"},
+    {ERR_PACK(0, CAPI_F_CAPI_GET_PROVNAME, 0), "capi_get_provname"},
+    {ERR_PACK(0, CAPI_F_CAPI_GET_PROV_INFO, 0), "capi_get_prov_info"},
+    {ERR_PACK(0, CAPI_F_CAPI_INIT, 0), "capi_init"},
+    {ERR_PACK(0, CAPI_F_CAPI_LIST_CONTAINERS, 0), "capi_list_containers"},
+    {ERR_PACK(0, CAPI_F_CAPI_LOAD_PRIVKEY, 0), "capi_load_privkey"},
+    {ERR_PACK(0, CAPI_F_CAPI_OPEN_STORE, 0), "capi_open_store"},
+    {ERR_PACK(0, CAPI_F_CAPI_RSA_PRIV_DEC, 0), "capi_rsa_priv_dec"},
+    {ERR_PACK(0, CAPI_F_CAPI_RSA_PRIV_ENC, 0), "capi_rsa_priv_enc"},
+    {ERR_PACK(0, CAPI_F_CAPI_RSA_SIGN, 0), "capi_rsa_sign"},
+    {ERR_PACK(0, CAPI_F_CAPI_VTRACE, 0), "capi_vtrace"},
+    {ERR_PACK(0, CAPI_F_CERT_SELECT_DIALOG, 0), "cert_select_dialog"},
+    {ERR_PACK(0, CAPI_F_CLIENT_CERT_SELECT, 0), ""},
+    {ERR_PACK(0, CAPI_F_WIDE_TO_ASC, 0), "wide_to_asc"},
+    {0, NULL}
+};
+
+static ERR_STRING_DATA CAPI_str_reasons[] = {
+    {ERR_PACK(0, 0, CAPI_R_CANT_CREATE_HASH_OBJECT), "cant create hash object"},
+    {ERR_PACK(0, 0, CAPI_R_CANT_FIND_CAPI_CONTEXT), "cant find capi context"},
+    {ERR_PACK(0, 0, CAPI_R_CANT_GET_KEY), "cant get key"},
+    {ERR_PACK(0, 0, CAPI_R_CANT_SET_HASH_VALUE), "cant set hash value"},
+    {ERR_PACK(0, 0, CAPI_R_CRYPTACQUIRECONTEXT_ERROR),
+    "cryptacquirecontext error"},
+    {ERR_PACK(0, 0, CAPI_R_CRYPTENUMPROVIDERS_ERROR),
+    "cryptenumproviders error"},
+    {ERR_PACK(0, 0, CAPI_R_DECRYPT_ERROR), "decrypt error"},
+    {ERR_PACK(0, 0, CAPI_R_ENGINE_NOT_INITIALIZED), "engine not initialized"},
+    {ERR_PACK(0, 0, CAPI_R_ENUMCONTAINERS_ERROR), "enumcontainers error"},
+    {ERR_PACK(0, 0, CAPI_R_ERROR_ADDING_CERT), "error adding cert"},
+    {ERR_PACK(0, 0, CAPI_R_ERROR_CREATING_STORE), "error creating store"},
+    {ERR_PACK(0, 0, CAPI_R_ERROR_GETTING_FRIENDLY_NAME),
+    "error getting friendly name"},
+    {ERR_PACK(0, 0, CAPI_R_ERROR_GETTING_KEY_PROVIDER_INFO),
+    "error getting key provider info"},
+    {ERR_PACK(0, 0, CAPI_R_ERROR_OPENING_STORE), "error opening store"},
+    {ERR_PACK(0, 0, CAPI_R_ERROR_SIGNING_HASH), "error signing hash"},
+    {ERR_PACK(0, 0, CAPI_R_FILE_OPEN_ERROR), "file open error"},
+    {ERR_PACK(0, 0, CAPI_R_FUNCTION_NOT_SUPPORTED), "function not supported"},
+    {ERR_PACK(0, 0, CAPI_R_GETUSERKEY_ERROR), "getuserkey error"},
+    {ERR_PACK(0, 0, CAPI_R_INVALID_DIGEST_LENGTH), "invalid digest length"},
+    {ERR_PACK(0, 0, CAPI_R_INVALID_DSA_PUBLIC_KEY_BLOB_MAGIC_NUMBER),
+    "invalid dsa public key blob magic number"},
+    {ERR_PACK(0, 0, CAPI_R_INVALID_LOOKUP_METHOD), "invalid lookup method"},
+    {ERR_PACK(0, 0, CAPI_R_INVALID_PUBLIC_KEY_BLOB), "invalid public key blob"},
+    {ERR_PACK(0, 0, CAPI_R_INVALID_RSA_PUBLIC_KEY_BLOB_MAGIC_NUMBER),
+    "invalid rsa public key blob magic number"},
+    {ERR_PACK(0, 0, CAPI_R_PUBKEY_EXPORT_ERROR), "pubkey export error"},
+    {ERR_PACK(0, 0, CAPI_R_PUBKEY_EXPORT_LENGTH_ERROR),
+    "pubkey export length error"},
+    {ERR_PACK(0, 0, CAPI_R_UNKNOWN_COMMAND), "unknown command"},
+    {ERR_PACK(0, 0, CAPI_R_UNSUPPORTED_ALGORITHM_NID),
+    "unsupported algorithm nid"},
+    {ERR_PACK(0, 0, CAPI_R_UNSUPPORTED_PADDING), "unsupported padding"},
+    {ERR_PACK(0, 0, CAPI_R_UNSUPPORTED_PUBLIC_KEY_ALGORITHM),
+    "unsupported public key algorithm"},
+    {ERR_PACK(0, 0, CAPI_R_WIN32_ERROR), "win32 error"},
+    {0, NULL}
+};
+
+#endif
+
+static int lib_code = 0;
+static int error_loaded = 0;
+
+static int ERR_load_CAPI_strings(void)
+{
+    if (lib_code == 0)
+        lib_code = ERR_get_next_error_library();
+
+    if (!error_loaded) {
+#ifndef OPENSSL_NO_ERR
+        ERR_load_strings(lib_code, CAPI_str_functs);
+        ERR_load_strings(lib_code, CAPI_str_reasons);
+#endif
+        error_loaded = 1;
+    }
+    return 1;
+}
+
+static void ERR_unload_CAPI_strings(void)
+{
+    if (error_loaded) {
+#ifndef OPENSSL_NO_ERR
+        ERR_unload_strings(lib_code, CAPI_str_functs);
+        ERR_unload_strings(lib_code, CAPI_str_reasons);
+#endif
+        error_loaded = 0;
+    }
+}
+
+static void ERR_CAPI_error(int function, int reason, char *file, int line)
+{
+    if (lib_code == 0)
+        lib_code = ERR_get_next_error_library();
+    ERR_PUT_error(lib_code, function, reason, file, line);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_capi_err.h b/trunk/3rdparty/openssl-1.1-fit/engines/e_capi_err.h
new file mode 100644
index 000000000..e034c98ca
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_capi_err.h
@@ -0,0 +1,75 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_CAPIERR_H
+# define HEADER_CAPIERR_H
+
+# define CAPIerr(f, r) ERR_CAPI_error((f), (r), OPENSSL_FILE, OPENSSL_LINE)
+
+
+/*
+ * CAPI function codes.
+ */
+# define CAPI_F_CAPI_CERT_GET_FNAME                       99
+# define CAPI_F_CAPI_CTRL                                 100
+# define CAPI_F_CAPI_CTX_NEW                              101
+# define CAPI_F_CAPI_CTX_SET_PROVNAME                     102
+# define CAPI_F_CAPI_DSA_DO_SIGN                          114
+# define CAPI_F_CAPI_GET_KEY                              103
+# define CAPI_F_CAPI_GET_PKEY                             115
+# define CAPI_F_CAPI_GET_PROVNAME                         104
+# define CAPI_F_CAPI_GET_PROV_INFO                        105
+# define CAPI_F_CAPI_INIT                                 106
+# define CAPI_F_CAPI_LIST_CONTAINERS                      107
+# define CAPI_F_CAPI_LOAD_PRIVKEY                         108
+# define CAPI_F_CAPI_OPEN_STORE                           109
+# define CAPI_F_CAPI_RSA_PRIV_DEC                         110
+# define CAPI_F_CAPI_RSA_PRIV_ENC                         111
+# define CAPI_F_CAPI_RSA_SIGN                             112
+# define CAPI_F_CAPI_VTRACE                               118
+# define CAPI_F_CERT_SELECT_DIALOG                        117
+# define CAPI_F_CLIENT_CERT_SELECT                        116
+# define CAPI_F_WIDE_TO_ASC                               113
+
+/*
+ * CAPI reason codes.
+ */
+# define CAPI_R_CANT_CREATE_HASH_OBJECT                   100
+# define CAPI_R_CANT_FIND_CAPI_CONTEXT                    101
+# define CAPI_R_CANT_GET_KEY                              102
+# define CAPI_R_CANT_SET_HASH_VALUE                       103
+# define CAPI_R_CRYPTACQUIRECONTEXT_ERROR                 104
+# define CAPI_R_CRYPTENUMPROVIDERS_ERROR                  105
+# define CAPI_R_DECRYPT_ERROR                             106
+# define CAPI_R_ENGINE_NOT_INITIALIZED                    107
+# define CAPI_R_ENUMCONTAINERS_ERROR                      108
+# define CAPI_R_ERROR_ADDING_CERT                         109
+# define CAPI_R_ERROR_CREATING_STORE                      110
+# define CAPI_R_ERROR_GETTING_FRIENDLY_NAME               111
+# define CAPI_R_ERROR_GETTING_KEY_PROVIDER_INFO           112
+# define CAPI_R_ERROR_OPENING_STORE                       113
+# define CAPI_R_ERROR_SIGNING_HASH                        114
+# define CAPI_R_FILE_OPEN_ERROR                           115
+# define CAPI_R_FUNCTION_NOT_SUPPORTED                    116
+# define CAPI_R_GETUSERKEY_ERROR                          117
+# define CAPI_R_INVALID_DIGEST_LENGTH                     118
+# define CAPI_R_INVALID_DSA_PUBLIC_KEY_BLOB_MAGIC_NUMBER  119
+# define CAPI_R_INVALID_LOOKUP_METHOD                     120
+# define CAPI_R_INVALID_PUBLIC_KEY_BLOB                   121
+# define CAPI_R_INVALID_RSA_PUBLIC_KEY_BLOB_MAGIC_NUMBER  122
+# define CAPI_R_PUBKEY_EXPORT_ERROR                       123
+# define CAPI_R_PUBKEY_EXPORT_LENGTH_ERROR                124
+# define CAPI_R_UNKNOWN_COMMAND                           125
+# define CAPI_R_UNSUPPORTED_ALGORITHM_NID                 126
+# define CAPI_R_UNSUPPORTED_PADDING                       127
+# define CAPI_R_UNSUPPORTED_PUBLIC_KEY_ALGORITHM          128
+# define CAPI_R_WIN32_ERROR                               129
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_dasync.c b/trunk/3rdparty/openssl-1.1-fit/engines/e_dasync.c
new file mode 100644
index 000000000..5cdacb66a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_dasync.c
@@ -0,0 +1,785 @@
+/*
+ * Copyright 2015-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#if defined(_WIN32)
+# include <windows.h>
+#endif
+
+#include <stdio.h>
+#include <string.h>
+
+#include <openssl/engine.h>
+#include <openssl/sha.h>
+#include <openssl/aes.h>
+#include <openssl/rsa.h>
+#include <openssl/evp.h>
+#include <openssl/async.h>
+#include <openssl/bn.h>
+#include <openssl/crypto.h>
+#include <openssl/ssl.h>
+#include <openssl/modes.h>
+
+#if defined(OPENSSL_SYS_UNIX) && defined(OPENSSL_THREADS)
+# undef ASYNC_POSIX
+# define ASYNC_POSIX
+# include <unistd.h>
+#elif defined(_WIN32)
+# undef ASYNC_WIN
+# define ASYNC_WIN
+#endif
+
+#include "e_dasync_err.c"
+
+/* Engine Id and Name */
+static const char *engine_dasync_id = "dasync";
+static const char *engine_dasync_name = "Dummy Async engine support";
+
+
+/* Engine Lifetime functions */
+static int dasync_destroy(ENGINE *e);
+static int dasync_init(ENGINE *e);
+static int dasync_finish(ENGINE *e);
+void engine_load_dasync_int(void);
+
+
+/* Set up digests. Just SHA1 for now */
+static int dasync_digests(ENGINE *e, const EVP_MD **digest,
+                          const int **nids, int nid);
+
+static void dummy_pause_job(void);
+
+/* SHA1 */
+static int dasync_sha1_init(EVP_MD_CTX *ctx);
+static int dasync_sha1_update(EVP_MD_CTX *ctx, const void *data,
+                             size_t count);
+static int dasync_sha1_final(EVP_MD_CTX *ctx, unsigned char *md);
+
+/*
+ * Holds the EVP_MD object for sha1 in this engine. Set up once only during
+ * engine bind and can then be reused many times.
+ */
+static EVP_MD *_hidden_sha1_md = NULL;
+static const EVP_MD *dasync_sha1(void)
+{
+    return _hidden_sha1_md;
+}
+static void destroy_digests(void)
+{
+    EVP_MD_meth_free(_hidden_sha1_md);
+    _hidden_sha1_md = NULL;
+}
+
+static int dasync_digest_nids(const int **nids)
+{
+    static int digest_nids[2] = { 0, 0 };
+    static int pos = 0;
+    static int init = 0;
+
+    if (!init) {
+        const EVP_MD *md;
+        if ((md = dasync_sha1()) != NULL)
+            digest_nids[pos++] = EVP_MD_type(md);
+        digest_nids[pos] = 0;
+        init = 1;
+    }
+    *nids = digest_nids;
+    return pos;
+}
+
+/* RSA */
+
+static int dasync_pub_enc(int flen, const unsigned char *from,
+                    unsigned char *to, RSA *rsa, int padding);
+static int dasync_pub_dec(int flen, const unsigned char *from,
+                    unsigned char *to, RSA *rsa, int padding);
+static int dasync_rsa_priv_enc(int flen, const unsigned char *from,
+                      unsigned char *to, RSA *rsa, int padding);
+static int dasync_rsa_priv_dec(int flen, const unsigned char *from,
+                      unsigned char *to, RSA *rsa, int padding);
+static int dasync_rsa_mod_exp(BIGNUM *r0, const BIGNUM *I, RSA *rsa,
+                              BN_CTX *ctx);
+
+static int dasync_rsa_init(RSA *rsa);
+static int dasync_rsa_finish(RSA *rsa);
+
+static RSA_METHOD *dasync_rsa_method = NULL;
+
+/* AES */
+
+static int dasync_aes128_cbc_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg,
+                                  void *ptr);
+static int dasync_aes128_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                                  const unsigned char *iv, int enc);
+static int dasync_aes128_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                    const unsigned char *in, size_t inl);
+static int dasync_aes128_cbc_cleanup(EVP_CIPHER_CTX *ctx);
+
+static int dasync_aes128_cbc_hmac_sha1_ctrl(EVP_CIPHER_CTX *ctx, int type,
+                                             int arg, void *ptr);
+static int dasync_aes128_cbc_hmac_sha1_init_key(EVP_CIPHER_CTX *ctx,
+                                                 const unsigned char *key,
+                                                 const unsigned char *iv,
+                                                 int enc);
+static int dasync_aes128_cbc_hmac_sha1_cipher(EVP_CIPHER_CTX *ctx,
+                                               unsigned char *out,
+                                               const unsigned char *in,
+                                               size_t inl);
+static int dasync_aes128_cbc_hmac_sha1_cleanup(EVP_CIPHER_CTX *ctx);
+
+struct dasync_pipeline_ctx {
+    void *inner_cipher_data;
+    unsigned int numpipes;
+    unsigned char **inbufs;
+    unsigned char **outbufs;
+    size_t *lens;
+    unsigned char tlsaad[SSL_MAX_PIPELINES][EVP_AEAD_TLS1_AAD_LEN];
+    unsigned int aadctr;
+};
+
+/*
+ * Holds the EVP_CIPHER object for aes_128_cbc in this engine. Set up once only
+ * during engine bind and can then be reused many times.
+ */
+static EVP_CIPHER *_hidden_aes_128_cbc = NULL;
+static const EVP_CIPHER *dasync_aes_128_cbc(void)
+{
+    return _hidden_aes_128_cbc;
+}
+
+/*
+ * Holds the EVP_CIPHER object for aes_128_cbc_hmac_sha1 in this engine. Set up
+ * once only during engine bind and can then be reused many times.
+ *
+ * This 'stitched' cipher depends on the EVP_aes_128_cbc_hmac_sha1() cipher,
+ * which is implemented only if the AES-NI instruction set extension is available
+ * (see OPENSSL_IA32CAP(3)). If that's not the case, then this cipher will not
+ * be available either.
+ *
+ * Note: Since it is a legacy mac-then-encrypt cipher, modern TLS peers (which
+ * negotiate the encrypt-then-mac extension) won't negotiate it anyway.
+ */
+static EVP_CIPHER *_hidden_aes_128_cbc_hmac_sha1 = NULL;
+static const EVP_CIPHER *dasync_aes_128_cbc_hmac_sha1(void)
+{
+    return _hidden_aes_128_cbc_hmac_sha1;
+}
+
+static void destroy_ciphers(void)
+{
+    EVP_CIPHER_meth_free(_hidden_aes_128_cbc);
+    EVP_CIPHER_meth_free(_hidden_aes_128_cbc_hmac_sha1);
+    _hidden_aes_128_cbc = NULL;
+    _hidden_aes_128_cbc_hmac_sha1 = NULL;
+}
+
+static int dasync_ciphers(ENGINE *e, const EVP_CIPHER **cipher,
+                                   const int **nids, int nid);
+
+static int dasync_cipher_nids[] = {
+    NID_aes_128_cbc,
+    NID_aes_128_cbc_hmac_sha1,
+    0
+};
+
+static int bind_dasync(ENGINE *e)
+{
+    /* Setup RSA_METHOD */
+    if ((dasync_rsa_method = RSA_meth_new("Dummy Async RSA method", 0)) == NULL
+        || RSA_meth_set_pub_enc(dasync_rsa_method, dasync_pub_enc) == 0
+        || RSA_meth_set_pub_dec(dasync_rsa_method, dasync_pub_dec) == 0
+        || RSA_meth_set_priv_enc(dasync_rsa_method, dasync_rsa_priv_enc) == 0
+        || RSA_meth_set_priv_dec(dasync_rsa_method, dasync_rsa_priv_dec) == 0
+        || RSA_meth_set_mod_exp(dasync_rsa_method, dasync_rsa_mod_exp) == 0
+        || RSA_meth_set_bn_mod_exp(dasync_rsa_method, BN_mod_exp_mont) == 0
+        || RSA_meth_set_init(dasync_rsa_method, dasync_rsa_init) == 0
+        || RSA_meth_set_finish(dasync_rsa_method, dasync_rsa_finish) == 0) {
+        DASYNCerr(DASYNC_F_BIND_DASYNC, DASYNC_R_INIT_FAILED);
+        return 0;
+    }
+
+    /* Ensure the dasync error handling is set up */
+    ERR_load_DASYNC_strings();
+
+    if (!ENGINE_set_id(e, engine_dasync_id)
+        || !ENGINE_set_name(e, engine_dasync_name)
+        || !ENGINE_set_RSA(e, dasync_rsa_method)
+        || !ENGINE_set_digests(e, dasync_digests)
+        || !ENGINE_set_ciphers(e, dasync_ciphers)
+        || !ENGINE_set_destroy_function(e, dasync_destroy)
+        || !ENGINE_set_init_function(e, dasync_init)
+        || !ENGINE_set_finish_function(e, dasync_finish)) {
+        DASYNCerr(DASYNC_F_BIND_DASYNC, DASYNC_R_INIT_FAILED);
+        return 0;
+    }
+
+    /*
+     * Set up the EVP_CIPHER and EVP_MD objects for the ciphers/digests
+     * supplied by this engine
+     */
+    _hidden_sha1_md = EVP_MD_meth_new(NID_sha1, NID_sha1WithRSAEncryption);
+    if (_hidden_sha1_md == NULL
+        || !EVP_MD_meth_set_result_size(_hidden_sha1_md, SHA_DIGEST_LENGTH)
+        || !EVP_MD_meth_set_input_blocksize(_hidden_sha1_md, SHA_CBLOCK)
+        || !EVP_MD_meth_set_app_datasize(_hidden_sha1_md,
+                                         sizeof(EVP_MD *) + sizeof(SHA_CTX))
+        || !EVP_MD_meth_set_flags(_hidden_sha1_md, EVP_MD_FLAG_DIGALGID_ABSENT)
+        || !EVP_MD_meth_set_init(_hidden_sha1_md, dasync_sha1_init)
+        || !EVP_MD_meth_set_update(_hidden_sha1_md, dasync_sha1_update)
+        || !EVP_MD_meth_set_final(_hidden_sha1_md, dasync_sha1_final)) {
+        EVP_MD_meth_free(_hidden_sha1_md);
+        _hidden_sha1_md = NULL;
+    }
+
+    _hidden_aes_128_cbc = EVP_CIPHER_meth_new(NID_aes_128_cbc,
+                                              16 /* block size */,
+                                              16 /* key len */);
+    if (_hidden_aes_128_cbc == NULL
+            || !EVP_CIPHER_meth_set_iv_length(_hidden_aes_128_cbc,16)
+            || !EVP_CIPHER_meth_set_flags(_hidden_aes_128_cbc,
+                                          EVP_CIPH_FLAG_DEFAULT_ASN1
+                                          | EVP_CIPH_CBC_MODE
+                                          | EVP_CIPH_FLAG_PIPELINE)
+            || !EVP_CIPHER_meth_set_init(_hidden_aes_128_cbc,
+                                         dasync_aes128_init_key)
+            || !EVP_CIPHER_meth_set_do_cipher(_hidden_aes_128_cbc,
+                                              dasync_aes128_cbc_cipher)
+            || !EVP_CIPHER_meth_set_cleanup(_hidden_aes_128_cbc,
+                                            dasync_aes128_cbc_cleanup)
+            || !EVP_CIPHER_meth_set_ctrl(_hidden_aes_128_cbc,
+                                         dasync_aes128_cbc_ctrl)
+            || !EVP_CIPHER_meth_set_impl_ctx_size(_hidden_aes_128_cbc,
+                                sizeof(struct dasync_pipeline_ctx))) {
+        EVP_CIPHER_meth_free(_hidden_aes_128_cbc);
+        _hidden_aes_128_cbc = NULL;
+    }
+
+    _hidden_aes_128_cbc_hmac_sha1 = EVP_CIPHER_meth_new(
+                                                NID_aes_128_cbc_hmac_sha1,
+                                                16 /* block size */,
+                                                16 /* key len */);
+    if (_hidden_aes_128_cbc_hmac_sha1 == NULL
+            || !EVP_CIPHER_meth_set_iv_length(_hidden_aes_128_cbc_hmac_sha1,16)
+            || !EVP_CIPHER_meth_set_flags(_hidden_aes_128_cbc_hmac_sha1,
+                                            EVP_CIPH_CBC_MODE
+                                          | EVP_CIPH_FLAG_DEFAULT_ASN1
+                                          | EVP_CIPH_FLAG_AEAD_CIPHER
+                                          | EVP_CIPH_FLAG_PIPELINE)
+            || !EVP_CIPHER_meth_set_init(_hidden_aes_128_cbc_hmac_sha1,
+                                         dasync_aes128_cbc_hmac_sha1_init_key)
+            || !EVP_CIPHER_meth_set_do_cipher(_hidden_aes_128_cbc_hmac_sha1,
+                                            dasync_aes128_cbc_hmac_sha1_cipher)
+            || !EVP_CIPHER_meth_set_cleanup(_hidden_aes_128_cbc_hmac_sha1,
+                                            dasync_aes128_cbc_hmac_sha1_cleanup)
+            || !EVP_CIPHER_meth_set_ctrl(_hidden_aes_128_cbc_hmac_sha1,
+                                         dasync_aes128_cbc_hmac_sha1_ctrl)
+            || !EVP_CIPHER_meth_set_impl_ctx_size(_hidden_aes_128_cbc_hmac_sha1,
+                                sizeof(struct dasync_pipeline_ctx))) {
+        EVP_CIPHER_meth_free(_hidden_aes_128_cbc_hmac_sha1);
+        _hidden_aes_128_cbc_hmac_sha1 = NULL;
+    }
+
+    return 1;
+}
+
+# ifndef OPENSSL_NO_DYNAMIC_ENGINE
+static int bind_helper(ENGINE *e, const char *id)
+{
+    if (id && (strcmp(id, engine_dasync_id) != 0))
+        return 0;
+    if (!bind_dasync(e))
+        return 0;
+    return 1;
+}
+
+IMPLEMENT_DYNAMIC_CHECK_FN()
+    IMPLEMENT_DYNAMIC_BIND_FN(bind_helper)
+# endif
+
+static ENGINE *engine_dasync(void)
+{
+    ENGINE *ret = ENGINE_new();
+    if (!ret)
+        return NULL;
+    if (!bind_dasync(ret)) {
+        ENGINE_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+void engine_load_dasync_int(void)
+{
+    ENGINE *toadd = engine_dasync();
+    if (!toadd)
+        return;
+    ENGINE_add(toadd);
+    ENGINE_free(toadd);
+    ERR_clear_error();
+}
+
+static int dasync_init(ENGINE *e)
+{
+    return 1;
+}
+
+
+static int dasync_finish(ENGINE *e)
+{
+    return 1;
+}
+
+
+static int dasync_destroy(ENGINE *e)
+{
+    destroy_digests();
+    destroy_ciphers();
+    RSA_meth_free(dasync_rsa_method);
+    ERR_unload_DASYNC_strings();
+    return 1;
+}
+
+static int dasync_digests(ENGINE *e, const EVP_MD **digest,
+                          const int **nids, int nid)
+{
+    int ok = 1;
+    if (!digest) {
+        /* We are returning a list of supported nids */
+        return dasync_digest_nids(nids);
+    }
+    /* We are being asked for a specific digest */
+    switch (nid) {
+    case NID_sha1:
+        *digest = dasync_sha1();
+        break;
+    default:
+        ok = 0;
+        *digest = NULL;
+        break;
+    }
+    return ok;
+}
+
+static int dasync_ciphers(ENGINE *e, const EVP_CIPHER **cipher,
+                                   const int **nids, int nid)
+{
+    int ok = 1;
+    if (cipher == NULL) {
+        /* We are returning a list of supported nids */
+        *nids = dasync_cipher_nids;
+        return (sizeof(dasync_cipher_nids) -
+                1) / sizeof(dasync_cipher_nids[0]);
+    }
+    /* We are being asked for a specific cipher */
+    switch (nid) {
+    case NID_aes_128_cbc:
+        *cipher = dasync_aes_128_cbc();
+        break;
+    case NID_aes_128_cbc_hmac_sha1:
+        *cipher = dasync_aes_128_cbc_hmac_sha1();
+        break;
+    default:
+        ok = 0;
+        *cipher = NULL;
+        break;
+    }
+    return ok;
+}
+
+static void wait_cleanup(ASYNC_WAIT_CTX *ctx, const void *key,
+                         OSSL_ASYNC_FD readfd, void *pvwritefd)
+{
+    OSSL_ASYNC_FD *pwritefd = (OSSL_ASYNC_FD *)pvwritefd;
+#if defined(ASYNC_WIN)
+    CloseHandle(readfd);
+    CloseHandle(*pwritefd);
+#elif defined(ASYNC_POSIX)
+    close(readfd);
+    close(*pwritefd);
+#endif
+    OPENSSL_free(pwritefd);
+}
+
+#define DUMMY_CHAR 'X'
+
+static void dummy_pause_job(void) {
+    ASYNC_JOB *job;
+    ASYNC_WAIT_CTX *waitctx;
+    OSSL_ASYNC_FD pipefds[2] = {0, 0};
+    OSSL_ASYNC_FD *writefd;
+#if defined(ASYNC_WIN)
+    DWORD numwritten, numread;
+    char buf = DUMMY_CHAR;
+#elif defined(ASYNC_POSIX)
+    char buf = DUMMY_CHAR;
+#endif
+
+    if ((job = ASYNC_get_current_job()) == NULL)
+        return;
+
+    waitctx = ASYNC_get_wait_ctx(job);
+
+    if (ASYNC_WAIT_CTX_get_fd(waitctx, engine_dasync_id, &pipefds[0],
+                              (void **)&writefd)) {
+        pipefds[1] = *writefd;
+    } else {
+        writefd = OPENSSL_malloc(sizeof(*writefd));
+        if (writefd == NULL)
+            return;
+#if defined(ASYNC_WIN)
+        if (CreatePipe(&pipefds[0], &pipefds[1], NULL, 256) == 0) {
+            OPENSSL_free(writefd);
+            return;
+        }
+#elif defined(ASYNC_POSIX)
+        if (pipe(pipefds) != 0) {
+            OPENSSL_free(writefd);
+            return;
+        }
+#endif
+        *writefd = pipefds[1];
+
+        if (!ASYNC_WAIT_CTX_set_wait_fd(waitctx, engine_dasync_id, pipefds[0],
+                                        writefd, wait_cleanup)) {
+            wait_cleanup(waitctx, engine_dasync_id, pipefds[0], writefd);
+            return;
+        }
+    }
+    /*
+     * In the Dummy async engine we are cheating. We signal that the job
+     * is complete by waking it before the call to ASYNC_pause_job(). A real
+     * async engine would only wake when the job was actually complete
+     */
+#if defined(ASYNC_WIN)
+    WriteFile(pipefds[1], &buf, 1, &numwritten, NULL);
+#elif defined(ASYNC_POSIX)
+    if (write(pipefds[1], &buf, 1) < 0)
+        return;
+#endif
+
+    /* Ignore errors - we carry on anyway */
+    ASYNC_pause_job();
+
+    /* Clear the wake signal */
+#if defined(ASYNC_WIN)
+    ReadFile(pipefds[0], &buf, 1, &numread, NULL);
+#elif defined(ASYNC_POSIX)
+    if (read(pipefds[0], &buf, 1) < 0)
+        return;
+#endif
+}
+
+/*
+ * SHA1 implementation. At the moment we just defer to the standard
+ * implementation
+ */
+#undef data
+#define data(ctx) ((SHA_CTX *)EVP_MD_CTX_md_data(ctx))
+static int dasync_sha1_init(EVP_MD_CTX *ctx)
+{
+    dummy_pause_job();
+
+    return SHA1_Init(data(ctx));
+}
+
+static int dasync_sha1_update(EVP_MD_CTX *ctx, const void *data,
+                             size_t count)
+{
+    dummy_pause_job();
+
+    return SHA1_Update(data(ctx), data, (size_t)count);
+}
+
+static int dasync_sha1_final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    dummy_pause_job();
+
+    return SHA1_Final(md, data(ctx));
+}
+
+/*
+ * RSA implementation
+ */
+
+static int dasync_pub_enc(int flen, const unsigned char *from,
+                    unsigned char *to, RSA *rsa, int padding) {
+    /* Ignore errors - we carry on anyway */
+    dummy_pause_job();
+    return RSA_meth_get_pub_enc(RSA_PKCS1_OpenSSL())
+        (flen, from, to, rsa, padding);
+}
+
+static int dasync_pub_dec(int flen, const unsigned char *from,
+                    unsigned char *to, RSA *rsa, int padding) {
+    /* Ignore errors - we carry on anyway */
+    dummy_pause_job();
+    return RSA_meth_get_pub_dec(RSA_PKCS1_OpenSSL())
+        (flen, from, to, rsa, padding);
+}
+
+static int dasync_rsa_priv_enc(int flen, const unsigned char *from,
+                      unsigned char *to, RSA *rsa, int padding)
+{
+    /* Ignore errors - we carry on anyway */
+    dummy_pause_job();
+    return RSA_meth_get_priv_enc(RSA_PKCS1_OpenSSL())
+        (flen, from, to, rsa, padding);
+}
+
+static int dasync_rsa_priv_dec(int flen, const unsigned char *from,
+                      unsigned char *to, RSA *rsa, int padding)
+{
+    /* Ignore errors - we carry on anyway */
+    dummy_pause_job();
+    return RSA_meth_get_priv_dec(RSA_PKCS1_OpenSSL())
+        (flen, from, to, rsa, padding);
+}
+
+static int dasync_rsa_mod_exp(BIGNUM *r0, const BIGNUM *I, RSA *rsa, BN_CTX *ctx)
+{
+    /* Ignore errors - we carry on anyway */
+    dummy_pause_job();
+    return RSA_meth_get_mod_exp(RSA_PKCS1_OpenSSL())(r0, I, rsa, ctx);
+}
+
+static int dasync_rsa_init(RSA *rsa)
+{
+    return RSA_meth_get_init(RSA_PKCS1_OpenSSL())(rsa);
+}
+static int dasync_rsa_finish(RSA *rsa)
+{
+    return RSA_meth_get_finish(RSA_PKCS1_OpenSSL())(rsa);
+}
+
+/* Cipher helper functions */
+
+static int dasync_cipher_ctrl_helper(EVP_CIPHER_CTX *ctx, int type, int arg,
+                                     void *ptr, int aeadcapable)
+{
+    int ret;
+    struct dasync_pipeline_ctx *pipe_ctx =
+        (struct dasync_pipeline_ctx *)EVP_CIPHER_CTX_get_cipher_data(ctx);
+
+    if (pipe_ctx == NULL)
+        return 0;
+
+    switch (type) {
+        case EVP_CTRL_SET_PIPELINE_OUTPUT_BUFS:
+            pipe_ctx->numpipes = arg;
+            pipe_ctx->outbufs = (unsigned char **)ptr;
+            break;
+
+        case EVP_CTRL_SET_PIPELINE_INPUT_BUFS:
+            pipe_ctx->numpipes = arg;
+            pipe_ctx->inbufs = (unsigned char **)ptr;
+            break;
+
+        case EVP_CTRL_SET_PIPELINE_INPUT_LENS:
+            pipe_ctx->numpipes = arg;
+            pipe_ctx->lens = (size_t *)ptr;
+            break;
+
+        case EVP_CTRL_AEAD_SET_MAC_KEY:
+            if (!aeadcapable)
+                return -1;
+            EVP_CIPHER_CTX_set_cipher_data(ctx, pipe_ctx->inner_cipher_data);
+            ret = EVP_CIPHER_meth_get_ctrl(EVP_aes_128_cbc_hmac_sha1())
+                                          (ctx, type, arg, ptr);
+            EVP_CIPHER_CTX_set_cipher_data(ctx, pipe_ctx);
+            return ret;
+
+        case EVP_CTRL_AEAD_TLS1_AAD:
+        {
+            unsigned char *p = ptr;
+            unsigned int len;
+
+            if (!aeadcapable || arg != EVP_AEAD_TLS1_AAD_LEN)
+                return -1;
+
+            if (pipe_ctx->aadctr >= SSL_MAX_PIPELINES)
+                return -1;
+
+            memcpy(pipe_ctx->tlsaad[pipe_ctx->aadctr], ptr,
+                   EVP_AEAD_TLS1_AAD_LEN);
+            pipe_ctx->aadctr++;
+
+            len = p[arg - 2] << 8 | p[arg - 1];
+
+            if (EVP_CIPHER_CTX_encrypting(ctx)) {
+                if ((p[arg - 4] << 8 | p[arg - 3]) >= TLS1_1_VERSION) {
+                    if (len < AES_BLOCK_SIZE)
+                        return 0;
+                    len -= AES_BLOCK_SIZE;
+                }
+
+                return ((len + SHA_DIGEST_LENGTH + AES_BLOCK_SIZE)
+                        & -AES_BLOCK_SIZE) - len;
+            } else {
+                return SHA_DIGEST_LENGTH;
+            }
+        }
+
+        default:
+            return 0;
+    }
+
+    return 1;
+}
+
+static int dasync_cipher_init_key_helper(EVP_CIPHER_CTX *ctx,
+                                         const unsigned char *key,
+                                         const unsigned char *iv, int enc,
+                                         const EVP_CIPHER *cipher)
+{
+    int ret;
+    struct dasync_pipeline_ctx *pipe_ctx =
+        (struct dasync_pipeline_ctx *)EVP_CIPHER_CTX_get_cipher_data(ctx);
+
+    if (pipe_ctx->inner_cipher_data == NULL
+            && EVP_CIPHER_impl_ctx_size(cipher) != 0) {
+        pipe_ctx->inner_cipher_data = OPENSSL_zalloc(
+            EVP_CIPHER_impl_ctx_size(cipher));
+        if (pipe_ctx->inner_cipher_data == NULL) {
+            DASYNCerr(DASYNC_F_DASYNC_CIPHER_INIT_KEY_HELPER,
+                        ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+    }
+
+    pipe_ctx->numpipes = 0;
+    pipe_ctx->aadctr = 0;
+
+    EVP_CIPHER_CTX_set_cipher_data(ctx, pipe_ctx->inner_cipher_data);
+    ret = EVP_CIPHER_meth_get_init(cipher)(ctx, key, iv, enc);
+    EVP_CIPHER_CTX_set_cipher_data(ctx, pipe_ctx);
+
+    return ret;
+}
+
+static int dasync_cipher_helper(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                const unsigned char *in, size_t inl,
+                                const EVP_CIPHER *cipher)
+{
+    int ret = 1;
+    unsigned int i, pipes;
+    struct dasync_pipeline_ctx *pipe_ctx =
+        (struct dasync_pipeline_ctx *)EVP_CIPHER_CTX_get_cipher_data(ctx);
+
+    pipes = pipe_ctx->numpipes;
+    EVP_CIPHER_CTX_set_cipher_data(ctx, pipe_ctx->inner_cipher_data);
+    if (pipes == 0) {
+        if (pipe_ctx->aadctr != 0) {
+            if (pipe_ctx->aadctr != 1)
+                return -1;
+            EVP_CIPHER_meth_get_ctrl(cipher)
+                                    (ctx, EVP_CTRL_AEAD_TLS1_AAD,
+                                     EVP_AEAD_TLS1_AAD_LEN,
+                                     pipe_ctx->tlsaad[0]);
+        }
+        ret = EVP_CIPHER_meth_get_do_cipher(cipher)
+                                           (ctx, out, in, inl);
+    } else {
+        if (pipe_ctx->aadctr > 0 && pipe_ctx->aadctr != pipes)
+            return -1;
+        for (i = 0; i < pipes; i++) {
+            if (pipe_ctx->aadctr > 0) {
+                EVP_CIPHER_meth_get_ctrl(cipher)
+                                        (ctx, EVP_CTRL_AEAD_TLS1_AAD,
+                                         EVP_AEAD_TLS1_AAD_LEN,
+                                         pipe_ctx->tlsaad[i]);
+            }
+            ret = ret && EVP_CIPHER_meth_get_do_cipher(cipher)
+                                (ctx, pipe_ctx->outbufs[i], pipe_ctx->inbufs[i],
+                                 pipe_ctx->lens[i]);
+        }
+        pipe_ctx->numpipes = 0;
+    }
+    pipe_ctx->aadctr = 0;
+    EVP_CIPHER_CTX_set_cipher_data(ctx, pipe_ctx);
+    return ret;
+}
+
+static int dasync_cipher_cleanup_helper(EVP_CIPHER_CTX *ctx,
+                                        const EVP_CIPHER *cipher)
+{
+    struct dasync_pipeline_ctx *pipe_ctx =
+        (struct dasync_pipeline_ctx *)EVP_CIPHER_CTX_get_cipher_data(ctx);
+
+    OPENSSL_clear_free(pipe_ctx->inner_cipher_data,
+                       EVP_CIPHER_impl_ctx_size(cipher));
+
+    return 1;
+}
+
+/*
+ * AES128 CBC Implementation
+ */
+
+static int dasync_aes128_cbc_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg,
+                                  void *ptr)
+{
+    return dasync_cipher_ctrl_helper(ctx, type, arg, ptr, 0);
+}
+
+static int dasync_aes128_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                             const unsigned char *iv, int enc)
+{
+    return dasync_cipher_init_key_helper(ctx, key, iv, enc, EVP_aes_128_cbc());
+}
+
+static int dasync_aes128_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                               const unsigned char *in, size_t inl)
+{
+    return dasync_cipher_helper(ctx, out, in, inl, EVP_aes_128_cbc());
+}
+
+static int dasync_aes128_cbc_cleanup(EVP_CIPHER_CTX *ctx)
+{
+    return dasync_cipher_cleanup_helper(ctx, EVP_aes_128_cbc());
+}
+
+
+/*
+ * AES128 CBC HMAC SHA1 Implementation
+ */
+
+static int dasync_aes128_cbc_hmac_sha1_ctrl(EVP_CIPHER_CTX *ctx, int type,
+                                             int arg, void *ptr)
+{
+    return dasync_cipher_ctrl_helper(ctx, type, arg, ptr, 1);
+}
+
+static int dasync_aes128_cbc_hmac_sha1_init_key(EVP_CIPHER_CTX *ctx,
+                                                const unsigned char *key,
+                                                const unsigned char *iv,
+                                                int enc)
+{
+    /*
+     * We can safely assume that EVP_aes_128_cbc_hmac_sha1() != NULL,
+     * see comment before the definition of dasync_aes_128_cbc_hmac_sha1().
+     */
+    return dasync_cipher_init_key_helper(ctx, key, iv, enc,
+                                         EVP_aes_128_cbc_hmac_sha1());
+}
+
+static int dasync_aes128_cbc_hmac_sha1_cipher(EVP_CIPHER_CTX *ctx,
+                                               unsigned char *out,
+                                               const unsigned char *in,
+                                               size_t inl)
+{
+    return dasync_cipher_helper(ctx, out, in, inl, EVP_aes_128_cbc_hmac_sha1());
+}
+
+static int dasync_aes128_cbc_hmac_sha1_cleanup(EVP_CIPHER_CTX *ctx)
+{
+    /*
+     * We can safely assume that EVP_aes_128_cbc_hmac_sha1() != NULL,
+     * see comment before the definition of dasync_aes_128_cbc_hmac_sha1().
+     */
+    return dasync_cipher_cleanup_helper(ctx, EVP_aes_128_cbc_hmac_sha1());
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_dasync.ec b/trunk/3rdparty/openssl-1.1-fit/engines/e_dasync.ec
new file mode 100644
index 000000000..3d56ebcc5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_dasync.ec
@@ -0,0 +1,3 @@
+# The INPUT HEADER is scanned for declarations
+# LIBNAME       INPUT HEADER                    ERROR-TABLE FILE
+L DASYNC        e_dasync_err.h                  e_dasync_err.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_dasync.txt b/trunk/3rdparty/openssl-1.1-fit/engines/e_dasync.txt
new file mode 100644
index 000000000..bff64bcf2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_dasync.txt
@@ -0,0 +1,22 @@
+# Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# Function codes
+DASYNC_F_BIND_DASYNC:107:bind_dasync
+DASYNC_F_CIPHER_AES_128_CBC_CODE:100:*
+DASYNC_F_DASYNC_AES128_CBC_HMAC_SHA1_INIT_KEY:109:*
+DASYNC_F_DASYNC_AES128_INIT_KEY:108:*
+DASYNC_F_DASYNC_BN_MOD_EXP:101:*
+DASYNC_F_DASYNC_CIPHER_INIT_KEY_HELPER:110:dasync_cipher_init_key_helper
+DASYNC_F_DASYNC_MOD_EXP:102:*
+DASYNC_F_DASYNC_PRIVATE_DECRYPT:103:*
+DASYNC_F_DASYNC_PRIVATE_ENCRYPT:104:*
+DASYNC_F_DASYNC_PUBLIC_DECRYPT:105:*
+DASYNC_F_DASYNC_PUBLIC_ENCRYPT:106:*
+
+#Reason codes
+DASYNC_R_INIT_FAILED:100:init failed
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_dasync_err.c b/trunk/3rdparty/openssl-1.1-fit/engines/e_dasync_err.c
new file mode 100644
index 000000000..794fb710c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_dasync_err.c
@@ -0,0 +1,73 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include "e_dasync_err.h"
+
+#ifndef OPENSSL_NO_ERR
+
+static ERR_STRING_DATA DASYNC_str_functs[] = {
+    {ERR_PACK(0, DASYNC_F_BIND_DASYNC, 0), "bind_dasync"},
+    {ERR_PACK(0, DASYNC_F_CIPHER_AES_128_CBC_CODE, 0), ""},
+    {ERR_PACK(0, DASYNC_F_DASYNC_AES128_CBC_HMAC_SHA1_INIT_KEY, 0), ""},
+    {ERR_PACK(0, DASYNC_F_DASYNC_AES128_INIT_KEY, 0), ""},
+    {ERR_PACK(0, DASYNC_F_DASYNC_BN_MOD_EXP, 0), ""},
+    {ERR_PACK(0, DASYNC_F_DASYNC_CIPHER_INIT_KEY_HELPER, 0),
+     "dasync_cipher_init_key_helper"},
+    {ERR_PACK(0, DASYNC_F_DASYNC_MOD_EXP, 0), ""},
+    {ERR_PACK(0, DASYNC_F_DASYNC_PRIVATE_DECRYPT, 0), ""},
+    {ERR_PACK(0, DASYNC_F_DASYNC_PRIVATE_ENCRYPT, 0), ""},
+    {ERR_PACK(0, DASYNC_F_DASYNC_PUBLIC_DECRYPT, 0), ""},
+    {ERR_PACK(0, DASYNC_F_DASYNC_PUBLIC_ENCRYPT, 0), ""},
+    {0, NULL}
+};
+
+static ERR_STRING_DATA DASYNC_str_reasons[] = {
+    {ERR_PACK(0, 0, DASYNC_R_INIT_FAILED), "init failed"},
+    {0, NULL}
+};
+
+#endif
+
+static int lib_code = 0;
+static int error_loaded = 0;
+
+static int ERR_load_DASYNC_strings(void)
+{
+    if (lib_code == 0)
+        lib_code = ERR_get_next_error_library();
+
+    if (!error_loaded) {
+#ifndef OPENSSL_NO_ERR
+        ERR_load_strings(lib_code, DASYNC_str_functs);
+        ERR_load_strings(lib_code, DASYNC_str_reasons);
+#endif
+        error_loaded = 1;
+    }
+    return 1;
+}
+
+static void ERR_unload_DASYNC_strings(void)
+{
+    if (error_loaded) {
+#ifndef OPENSSL_NO_ERR
+        ERR_unload_strings(lib_code, DASYNC_str_functs);
+        ERR_unload_strings(lib_code, DASYNC_str_reasons);
+#endif
+        error_loaded = 0;
+    }
+}
+
+static void ERR_DASYNC_error(int function, int reason, char *file, int line)
+{
+    if (lib_code == 0)
+        lib_code = ERR_get_next_error_library();
+    ERR_PUT_error(lib_code, function, reason, file, line);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_dasync_err.h b/trunk/3rdparty/openssl-1.1-fit/engines/e_dasync_err.h
new file mode 100644
index 000000000..7c2c02787
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_dasync_err.h
@@ -0,0 +1,37 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_DASYNCERR_H
+# define HEADER_DASYNCERR_H
+
+# define DASYNCerr(f, r) ERR_DASYNC_error((f), (r), OPENSSL_FILE, OPENSSL_LINE)
+
+
+/*
+ * DASYNC function codes.
+ */
+# define DASYNC_F_BIND_DASYNC                             107
+# define DASYNC_F_CIPHER_AES_128_CBC_CODE                 100
+# define DASYNC_F_DASYNC_AES128_CBC_HMAC_SHA1_INIT_KEY    109
+# define DASYNC_F_DASYNC_AES128_INIT_KEY                  108
+# define DASYNC_F_DASYNC_BN_MOD_EXP                       101
+# define DASYNC_F_DASYNC_CIPHER_INIT_KEY_HELPER           110
+# define DASYNC_F_DASYNC_MOD_EXP                          102
+# define DASYNC_F_DASYNC_PRIVATE_DECRYPT                  103
+# define DASYNC_F_DASYNC_PRIVATE_ENCRYPT                  104
+# define DASYNC_F_DASYNC_PUBLIC_DECRYPT                   105
+# define DASYNC_F_DASYNC_PUBLIC_ENCRYPT                   106
+
+/*
+ * DASYNC reason codes.
+ */
+# define DASYNC_R_INIT_FAILED                             100
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest.c b/trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest.c
new file mode 100644
index 000000000..64376247c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest.c
@@ -0,0 +1,696 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This is the OSSLTEST engine. It provides deliberately crippled digest
+ * implementations for test purposes. It is highly insecure and must NOT be
+ * used for any purpose except testing
+ */
+
+#include <stdio.h>
+#include <string.h>
+
+#include <openssl/engine.h>
+#include <openssl/sha.h>
+#include <openssl/md5.h>
+#include <openssl/rsa.h>
+#include <openssl/evp.h>
+#include <openssl/modes.h>
+#include <openssl/aes.h>
+#include <openssl/rand.h>
+#include <openssl/crypto.h>
+
+#include "e_ossltest_err.c"
+
+/* Engine Id and Name */
+static const char *engine_ossltest_id = "ossltest";
+static const char *engine_ossltest_name = "OpenSSL Test engine support";
+
+
+/* Engine Lifetime functions */
+static int ossltest_destroy(ENGINE *e);
+static int ossltest_init(ENGINE *e);
+static int ossltest_finish(ENGINE *e);
+void ENGINE_load_ossltest(void);
+
+
+/* Set up digests */
+static int ossltest_digests(ENGINE *e, const EVP_MD **digest,
+                          const int **nids, int nid);
+static const RAND_METHOD *ossltest_rand_method(void);
+
+/* MD5 */
+static int digest_md5_init(EVP_MD_CTX *ctx);
+static int digest_md5_update(EVP_MD_CTX *ctx, const void *data,
+                             size_t count);
+static int digest_md5_final(EVP_MD_CTX *ctx, unsigned char *md);
+
+static EVP_MD *_hidden_md5_md = NULL;
+static const EVP_MD *digest_md5(void)
+{
+    if (_hidden_md5_md == NULL) {
+        EVP_MD *md;
+
+        if ((md = EVP_MD_meth_new(NID_md5, NID_md5WithRSAEncryption)) == NULL
+            || !EVP_MD_meth_set_result_size(md, MD5_DIGEST_LENGTH)
+            || !EVP_MD_meth_set_input_blocksize(md, MD5_CBLOCK)
+            || !EVP_MD_meth_set_app_datasize(md,
+                                             sizeof(EVP_MD *) + sizeof(MD5_CTX))
+            || !EVP_MD_meth_set_flags(md, 0)
+            || !EVP_MD_meth_set_init(md, digest_md5_init)
+            || !EVP_MD_meth_set_update(md, digest_md5_update)
+            || !EVP_MD_meth_set_final(md, digest_md5_final)) {
+            EVP_MD_meth_free(md);
+            md = NULL;
+        }
+        _hidden_md5_md = md;
+    }
+    return _hidden_md5_md;
+}
+
+/* SHA1 */
+static int digest_sha1_init(EVP_MD_CTX *ctx);
+static int digest_sha1_update(EVP_MD_CTX *ctx, const void *data,
+                              size_t count);
+static int digest_sha1_final(EVP_MD_CTX *ctx, unsigned char *md);
+
+static EVP_MD *_hidden_sha1_md = NULL;
+static const EVP_MD *digest_sha1(void)
+{
+    if (_hidden_sha1_md == NULL) {
+        EVP_MD *md;
+
+        if ((md = EVP_MD_meth_new(NID_sha1, NID_sha1WithRSAEncryption)) == NULL
+            || !EVP_MD_meth_set_result_size(md, SHA_DIGEST_LENGTH)
+            || !EVP_MD_meth_set_input_blocksize(md, SHA_CBLOCK)
+            || !EVP_MD_meth_set_app_datasize(md,
+                                             sizeof(EVP_MD *) + sizeof(SHA_CTX))
+            || !EVP_MD_meth_set_flags(md, EVP_MD_FLAG_DIGALGID_ABSENT)
+            || !EVP_MD_meth_set_init(md, digest_sha1_init)
+            || !EVP_MD_meth_set_update(md, digest_sha1_update)
+            || !EVP_MD_meth_set_final(md, digest_sha1_final)) {
+            EVP_MD_meth_free(md);
+            md = NULL;
+        }
+        _hidden_sha1_md = md;
+    }
+    return _hidden_sha1_md;
+}
+
+/* SHA256 */
+static int digest_sha256_init(EVP_MD_CTX *ctx);
+static int digest_sha256_update(EVP_MD_CTX *ctx, const void *data,
+                                size_t count);
+static int digest_sha256_final(EVP_MD_CTX *ctx, unsigned char *md);
+
+static EVP_MD *_hidden_sha256_md = NULL;
+static const EVP_MD *digest_sha256(void)
+{
+    if (_hidden_sha256_md == NULL) {
+        EVP_MD *md;
+
+        if ((md = EVP_MD_meth_new(NID_sha256, NID_sha256WithRSAEncryption)) == NULL
+            || !EVP_MD_meth_set_result_size(md, SHA256_DIGEST_LENGTH)
+            || !EVP_MD_meth_set_input_blocksize(md, SHA256_CBLOCK)
+            || !EVP_MD_meth_set_app_datasize(md,
+                                             sizeof(EVP_MD *) + sizeof(SHA256_CTX))
+            || !EVP_MD_meth_set_flags(md, EVP_MD_FLAG_DIGALGID_ABSENT)
+            || !EVP_MD_meth_set_init(md, digest_sha256_init)
+            || !EVP_MD_meth_set_update(md, digest_sha256_update)
+            || !EVP_MD_meth_set_final(md, digest_sha256_final)) {
+            EVP_MD_meth_free(md);
+            md = NULL;
+        }
+        _hidden_sha256_md = md;
+    }
+    return _hidden_sha256_md;
+}
+
+/* SHA384/SHA512 */
+static int digest_sha384_init(EVP_MD_CTX *ctx);
+static int digest_sha512_init(EVP_MD_CTX *ctx);
+static int digest_sha512_update(EVP_MD_CTX *ctx, const void *data,
+                                size_t count);
+static int digest_sha384_final(EVP_MD_CTX *ctx, unsigned char *md);
+static int digest_sha512_final(EVP_MD_CTX *ctx, unsigned char *md);
+
+static EVP_MD *_hidden_sha384_md = NULL;
+static const EVP_MD *digest_sha384(void)
+{
+    if (_hidden_sha384_md == NULL) {
+        EVP_MD *md;
+
+        if ((md = EVP_MD_meth_new(NID_sha384, NID_sha384WithRSAEncryption)) == NULL
+            || !EVP_MD_meth_set_result_size(md, SHA384_DIGEST_LENGTH)
+            || !EVP_MD_meth_set_input_blocksize(md, SHA512_CBLOCK)
+            || !EVP_MD_meth_set_app_datasize(md,
+                                             sizeof(EVP_MD *) + sizeof(SHA512_CTX))
+            || !EVP_MD_meth_set_flags(md, EVP_MD_FLAG_DIGALGID_ABSENT)
+            || !EVP_MD_meth_set_init(md, digest_sha384_init)
+            || !EVP_MD_meth_set_update(md, digest_sha512_update)
+            || !EVP_MD_meth_set_final(md, digest_sha384_final)) {
+            EVP_MD_meth_free(md);
+            md = NULL;
+        }
+        _hidden_sha384_md = md;
+    }
+    return _hidden_sha384_md;
+}
+static EVP_MD *_hidden_sha512_md = NULL;
+static const EVP_MD *digest_sha512(void)
+{
+    if (_hidden_sha512_md == NULL) {
+        EVP_MD *md;
+
+        if ((md = EVP_MD_meth_new(NID_sha512, NID_sha512WithRSAEncryption)) == NULL
+            || !EVP_MD_meth_set_result_size(md, SHA512_DIGEST_LENGTH)
+            || !EVP_MD_meth_set_input_blocksize(md, SHA512_CBLOCK)
+            || !EVP_MD_meth_set_app_datasize(md,
+                                             sizeof(EVP_MD *) + sizeof(SHA512_CTX))
+            || !EVP_MD_meth_set_flags(md, EVP_MD_FLAG_DIGALGID_ABSENT)
+            || !EVP_MD_meth_set_init(md, digest_sha512_init)
+            || !EVP_MD_meth_set_update(md, digest_sha512_update)
+            || !EVP_MD_meth_set_final(md, digest_sha512_final)) {
+            EVP_MD_meth_free(md);
+            md = NULL;
+        }
+        _hidden_sha512_md = md;
+    }
+    return _hidden_sha512_md;
+}
+static void destroy_digests(void)
+{
+    EVP_MD_meth_free(_hidden_md5_md);
+    _hidden_md5_md = NULL;
+    EVP_MD_meth_free(_hidden_sha1_md);
+    _hidden_sha1_md = NULL;
+    EVP_MD_meth_free(_hidden_sha256_md);
+    _hidden_sha256_md = NULL;
+    EVP_MD_meth_free(_hidden_sha384_md);
+    _hidden_sha384_md = NULL;
+    EVP_MD_meth_free(_hidden_sha512_md);
+    _hidden_sha512_md = NULL;
+}
+static int ossltest_digest_nids(const int **nids)
+{
+    static int digest_nids[6] = { 0, 0, 0, 0, 0, 0 };
+    static int pos = 0;
+    static int init = 0;
+
+    if (!init) {
+        const EVP_MD *md;
+        if ((md = digest_md5()) != NULL)
+            digest_nids[pos++] = EVP_MD_type(md);
+        if ((md = digest_sha1()) != NULL)
+            digest_nids[pos++] = EVP_MD_type(md);
+        if ((md = digest_sha256()) != NULL)
+            digest_nids[pos++] = EVP_MD_type(md);
+        if ((md = digest_sha384()) != NULL)
+            digest_nids[pos++] = EVP_MD_type(md);
+        if ((md = digest_sha512()) != NULL)
+            digest_nids[pos++] = EVP_MD_type(md);
+        digest_nids[pos] = 0;
+        init = 1;
+    }
+    *nids = digest_nids;
+    return pos;
+}
+
+/* Setup ciphers */
+static int ossltest_ciphers(ENGINE *, const EVP_CIPHER **,
+                            const int **, int);
+
+static int ossltest_cipher_nids[] = {
+    NID_aes_128_cbc, NID_aes_128_gcm, 0
+};
+
+/* AES128 */
+
+int ossltest_aes128_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                             const unsigned char *iv, int enc);
+int ossltest_aes128_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                               const unsigned char *in, size_t inl);
+int ossltest_aes128_gcm_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                             const unsigned char *iv, int enc);
+int ossltest_aes128_gcm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                               const unsigned char *in, size_t inl);
+static int ossltest_aes128_gcm_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg,
+                                    void *ptr);
+
+static EVP_CIPHER *_hidden_aes_128_cbc = NULL;
+static const EVP_CIPHER *ossltest_aes_128_cbc(void)
+{
+    if (_hidden_aes_128_cbc == NULL
+        && ((_hidden_aes_128_cbc = EVP_CIPHER_meth_new(NID_aes_128_cbc,
+                                                       16 /* block size */,
+                                                       16 /* key len */)) == NULL
+            || !EVP_CIPHER_meth_set_iv_length(_hidden_aes_128_cbc,16)
+            || !EVP_CIPHER_meth_set_flags(_hidden_aes_128_cbc,
+                                          EVP_CIPH_FLAG_DEFAULT_ASN1
+                                          | EVP_CIPH_CBC_MODE)
+            || !EVP_CIPHER_meth_set_init(_hidden_aes_128_cbc,
+                                         ossltest_aes128_init_key)
+            || !EVP_CIPHER_meth_set_do_cipher(_hidden_aes_128_cbc,
+                                              ossltest_aes128_cbc_cipher)
+            || !EVP_CIPHER_meth_set_impl_ctx_size(_hidden_aes_128_cbc,
+                                                  EVP_CIPHER_impl_ctx_size(EVP_aes_128_cbc())))) {
+        EVP_CIPHER_meth_free(_hidden_aes_128_cbc);
+        _hidden_aes_128_cbc = NULL;
+    }
+    return _hidden_aes_128_cbc;
+}
+static EVP_CIPHER *_hidden_aes_128_gcm = NULL;
+
+#define AES_GCM_FLAGS   (EVP_CIPH_FLAG_DEFAULT_ASN1 \
+                | EVP_CIPH_CUSTOM_IV | EVP_CIPH_FLAG_CUSTOM_CIPHER \
+                | EVP_CIPH_ALWAYS_CALL_INIT | EVP_CIPH_CTRL_INIT \
+                | EVP_CIPH_CUSTOM_COPY |EVP_CIPH_FLAG_AEAD_CIPHER \
+                | EVP_CIPH_GCM_MODE)
+
+static const EVP_CIPHER *ossltest_aes_128_gcm(void)
+{
+    if (_hidden_aes_128_gcm == NULL
+        && ((_hidden_aes_128_gcm = EVP_CIPHER_meth_new(NID_aes_128_gcm,
+                                                       1 /* block size */,
+                                                       16 /* key len */)) == NULL
+            || !EVP_CIPHER_meth_set_iv_length(_hidden_aes_128_gcm,12)
+            || !EVP_CIPHER_meth_set_flags(_hidden_aes_128_gcm, AES_GCM_FLAGS)
+            || !EVP_CIPHER_meth_set_init(_hidden_aes_128_gcm,
+                                         ossltest_aes128_gcm_init_key)
+            || !EVP_CIPHER_meth_set_do_cipher(_hidden_aes_128_gcm,
+                                              ossltest_aes128_gcm_cipher)
+            || !EVP_CIPHER_meth_set_ctrl(_hidden_aes_128_gcm,
+                                              ossltest_aes128_gcm_ctrl)
+            || !EVP_CIPHER_meth_set_impl_ctx_size(_hidden_aes_128_gcm,
+                              EVP_CIPHER_impl_ctx_size(EVP_aes_128_gcm())))) {
+        EVP_CIPHER_meth_free(_hidden_aes_128_gcm);
+        _hidden_aes_128_gcm = NULL;
+    }
+    return _hidden_aes_128_gcm;
+}
+
+static void destroy_ciphers(void)
+{
+    EVP_CIPHER_meth_free(_hidden_aes_128_cbc);
+    EVP_CIPHER_meth_free(_hidden_aes_128_gcm);
+    _hidden_aes_128_cbc = NULL;
+}
+
+static int bind_ossltest(ENGINE *e)
+{
+    /* Ensure the ossltest error handling is set up */
+    ERR_load_OSSLTEST_strings();
+
+    if (!ENGINE_set_id(e, engine_ossltest_id)
+        || !ENGINE_set_name(e, engine_ossltest_name)
+        || !ENGINE_set_digests(e, ossltest_digests)
+        || !ENGINE_set_ciphers(e, ossltest_ciphers)
+        || !ENGINE_set_RAND(e, ossltest_rand_method())
+        || !ENGINE_set_destroy_function(e, ossltest_destroy)
+        || !ENGINE_set_init_function(e, ossltest_init)
+        || !ENGINE_set_finish_function(e, ossltest_finish)) {
+        OSSLTESTerr(OSSLTEST_F_BIND_OSSLTEST, OSSLTEST_R_INIT_FAILED);
+        return 0;
+    }
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_DYNAMIC_ENGINE
+static int bind_helper(ENGINE *e, const char *id)
+{
+    if (id && (strcmp(id, engine_ossltest_id) != 0))
+        return 0;
+    if (!bind_ossltest(e))
+        return 0;
+    return 1;
+}
+
+IMPLEMENT_DYNAMIC_CHECK_FN()
+    IMPLEMENT_DYNAMIC_BIND_FN(bind_helper)
+#endif
+
+static ENGINE *engine_ossltest(void)
+{
+    ENGINE *ret = ENGINE_new();
+    if (ret == NULL)
+        return NULL;
+    if (!bind_ossltest(ret)) {
+        ENGINE_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+
+void ENGINE_load_ossltest(void)
+{
+    /* Copied from eng_[openssl|dyn].c */
+    ENGINE *toadd = engine_ossltest();
+    if (!toadd)
+        return;
+    ENGINE_add(toadd);
+    ENGINE_free(toadd);
+    ERR_clear_error();
+}
+
+
+static int ossltest_init(ENGINE *e)
+{
+    return 1;
+}
+
+
+static int ossltest_finish(ENGINE *e)
+{
+    return 1;
+}
+
+
+static int ossltest_destroy(ENGINE *e)
+{
+    destroy_digests();
+    destroy_ciphers();
+    ERR_unload_OSSLTEST_strings();
+    return 1;
+}
+
+static int ossltest_digests(ENGINE *e, const EVP_MD **digest,
+                          const int **nids, int nid)
+{
+    int ok = 1;
+    if (!digest) {
+        /* We are returning a list of supported nids */
+        return ossltest_digest_nids(nids);
+    }
+    /* We are being asked for a specific digest */
+    switch (nid) {
+    case NID_md5:
+        *digest = digest_md5();
+        break;
+    case NID_sha1:
+        *digest = digest_sha1();
+        break;
+    case NID_sha256:
+        *digest = digest_sha256();
+        break;
+    case NID_sha384:
+        *digest = digest_sha384();
+        break;
+    case NID_sha512:
+        *digest = digest_sha512();
+        break;
+    default:
+        ok = 0;
+        *digest = NULL;
+        break;
+    }
+    return ok;
+}
+
+static int ossltest_ciphers(ENGINE *e, const EVP_CIPHER **cipher,
+                          const int **nids, int nid)
+{
+    int ok = 1;
+    if (!cipher) {
+        /* We are returning a list of supported nids */
+        *nids = ossltest_cipher_nids;
+        return (sizeof(ossltest_cipher_nids) - 1)
+               / sizeof(ossltest_cipher_nids[0]);
+    }
+    /* We are being asked for a specific cipher */
+    switch (nid) {
+    case NID_aes_128_cbc:
+        *cipher = ossltest_aes_128_cbc();
+        break;
+    case NID_aes_128_gcm:
+        *cipher = ossltest_aes_128_gcm();
+        break;
+    default:
+        ok = 0;
+        *cipher = NULL;
+        break;
+    }
+    return ok;
+}
+
+static void fill_known_data(unsigned char *md, unsigned int len)
+{
+    unsigned int i;
+
+    for (i=0; i<len; i++) {
+        md[i] = (unsigned char)(i & 0xff);
+    }
+}
+
+/*
+ * MD5 implementation. We go through the motions of doing MD5 by deferring to
+ * the standard implementation. Then we overwrite the result with a will defined
+ * value, so that all "MD5" digests using the test engine always end up with
+ * the same value.
+ */
+#undef data
+#define data(ctx) ((MD5_CTX *)EVP_MD_CTX_md_data(ctx))
+static int digest_md5_init(EVP_MD_CTX *ctx)
+{
+    return MD5_Init(data(ctx));
+}
+
+static int digest_md5_update(EVP_MD_CTX *ctx, const void *data,
+                             size_t count)
+{
+    return MD5_Update(data(ctx), data, (size_t)count);
+}
+
+static int digest_md5_final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    int ret;
+    ret = MD5_Final(md, data(ctx));
+
+    if (ret > 0) {
+        fill_known_data(md, MD5_DIGEST_LENGTH);
+    }
+    return ret;
+}
+
+/*
+ * SHA1 implementation.
+ */
+#undef data
+#define data(ctx) ((SHA_CTX *)EVP_MD_CTX_md_data(ctx))
+static int digest_sha1_init(EVP_MD_CTX *ctx)
+{
+    return SHA1_Init(data(ctx));
+}
+
+static int digest_sha1_update(EVP_MD_CTX *ctx, const void *data,
+                              size_t count)
+{
+    return SHA1_Update(data(ctx), data, (size_t)count);
+}
+
+static int digest_sha1_final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    int ret;
+    ret = SHA1_Final(md, data(ctx));
+
+    if (ret > 0) {
+        fill_known_data(md, SHA_DIGEST_LENGTH);
+    }
+    return ret;
+}
+
+/*
+ * SHA256 implementation.
+ */
+#undef data
+#define data(ctx) ((SHA256_CTX *)EVP_MD_CTX_md_data(ctx))
+static int digest_sha256_init(EVP_MD_CTX *ctx)
+{
+    return SHA256_Init(data(ctx));
+}
+
+static int digest_sha256_update(EVP_MD_CTX *ctx, const void *data,
+                                size_t count)
+{
+    return SHA256_Update(data(ctx), data, (size_t)count);
+}
+
+static int digest_sha256_final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    int ret;
+    ret = SHA256_Final(md, data(ctx));
+
+    if (ret > 0) {
+        fill_known_data(md, SHA256_DIGEST_LENGTH);
+    }
+    return ret;
+}
+
+/*
+ * SHA384/512 implementation.
+ */
+#undef data
+#define data(ctx) ((SHA512_CTX *)EVP_MD_CTX_md_data(ctx))
+static int digest_sha384_init(EVP_MD_CTX *ctx)
+{
+    return SHA384_Init(data(ctx));
+}
+
+static int digest_sha512_init(EVP_MD_CTX *ctx)
+{
+    return SHA512_Init(data(ctx));
+}
+
+static int digest_sha512_update(EVP_MD_CTX *ctx, const void *data,
+                                size_t count)
+{
+    return SHA512_Update(data(ctx), data, (size_t)count);
+}
+
+static int digest_sha384_final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    int ret;
+    /* Actually uses SHA512_Final! */
+    ret = SHA512_Final(md, data(ctx));
+
+    if (ret > 0) {
+        fill_known_data(md, SHA384_DIGEST_LENGTH);
+    }
+    return ret;
+}
+
+static int digest_sha512_final(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    int ret;
+    ret = SHA512_Final(md, data(ctx));
+
+    if (ret > 0) {
+        fill_known_data(md, SHA512_DIGEST_LENGTH);
+    }
+    return ret;
+}
+
+/*
+ * AES128 Implementation
+ */
+
+int ossltest_aes128_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                             const unsigned char *iv, int enc)
+{
+    return EVP_CIPHER_meth_get_init(EVP_aes_128_cbc()) (ctx, key, iv, enc);
+}
+
+int ossltest_aes128_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                               const unsigned char *in, size_t inl)
+{
+    unsigned char *tmpbuf;
+    int ret;
+
+    tmpbuf = OPENSSL_malloc(inl);
+
+    /* OPENSSL_malloc will return NULL if inl == 0 */
+    if (tmpbuf == NULL && inl > 0)
+        return -1;
+
+    /* Remember what we were asked to encrypt */
+    if (tmpbuf != NULL)
+        memcpy(tmpbuf, in, inl);
+
+    /* Go through the motions of encrypting it */
+    ret = EVP_CIPHER_meth_get_do_cipher(EVP_aes_128_cbc())(ctx, out, in, inl);
+
+    /* Throw it all away and just use the plaintext as the output */
+    if (tmpbuf != NULL)
+        memcpy(out, tmpbuf, inl);
+    OPENSSL_free(tmpbuf);
+
+    return ret;
+}
+
+int ossltest_aes128_gcm_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                             const unsigned char *iv, int enc)
+{
+    return EVP_CIPHER_meth_get_init(EVP_aes_128_gcm()) (ctx, key, iv, enc);
+}
+
+
+int ossltest_aes128_gcm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                               const unsigned char *in, size_t inl)
+{
+    unsigned char *tmpbuf = OPENSSL_malloc(inl);
+
+    /* OPENSSL_malloc will return NULL if inl == 0 */
+    if (tmpbuf == NULL && inl > 0)
+        return -1;
+
+    /* Remember what we were asked to encrypt */
+    if (tmpbuf != NULL)
+        memcpy(tmpbuf, in, inl);
+
+    /* Go through the motions of encrypting it */
+    EVP_CIPHER_meth_get_do_cipher(EVP_aes_128_gcm())(ctx, out, in, inl);
+
+    /* Throw it all away and just use the plaintext as the output */
+    if (tmpbuf != NULL && out != NULL)
+        memcpy(out, tmpbuf, inl);
+    OPENSSL_free(tmpbuf);
+
+    return inl;
+}
+
+static int ossltest_aes128_gcm_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg,
+                                    void *ptr)
+{
+    /* Pass the ctrl down */
+    int ret = EVP_CIPHER_meth_get_ctrl(EVP_aes_128_gcm())(ctx, type, arg, ptr);
+
+    if (ret <= 0)
+        return ret;
+
+    switch(type) {
+    case EVP_CTRL_AEAD_GET_TAG:
+        /* Always give the same tag */
+        memset(ptr, 0, EVP_GCM_TLS_TAG_LEN);
+        break;
+
+    default:
+        break;
+    }
+
+    return 1;
+}
+
+static int ossltest_rand_bytes(unsigned char *buf, int num)
+{
+    unsigned char val = 1;
+
+    while (--num >= 0)
+        *buf++ = val++;
+    return 1;
+}
+
+static int ossltest_rand_status(void)
+{
+    return 1;
+}
+
+static const RAND_METHOD *ossltest_rand_method(void)
+{
+
+    static RAND_METHOD osslt_rand_meth = {
+        NULL,
+        ossltest_rand_bytes,
+        NULL,
+        NULL,
+        ossltest_rand_bytes,
+        ossltest_rand_status
+    };
+
+    return &osslt_rand_meth;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest.ec b/trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest.ec
new file mode 100644
index 000000000..a4a55ecb3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest.ec
@@ -0,0 +1,3 @@
+# The INPUT HEADER is scanned for declarations
+# LIBNAME       INPUT HEADER                    ERROR-TABLE FILE
+L OSSLTEST      e_ossltest_err.h                e_ossltest_err.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest.txt b/trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest.txt
new file mode 100644
index 000000000..2b2e31a07
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest.txt
@@ -0,0 +1,13 @@
+# Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# Function codes
+OSSLTEST_F_BIND_OSSLTEST:100:bind_ossltest
+OSSLTEST_F_OSSLTEST_AES128_INIT_KEY:101:*
+
+#Reason codes
+OSSLTEST_R_INIT_FAILED:100:init failed
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest_err.c b/trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest_err.c
new file mode 100644
index 000000000..920a13a69
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest_err.c
@@ -0,0 +1,63 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include "e_ossltest_err.h"
+
+#ifndef OPENSSL_NO_ERR
+
+static ERR_STRING_DATA OSSLTEST_str_functs[] = {
+    {ERR_PACK(0, OSSLTEST_F_BIND_OSSLTEST, 0), "bind_ossltest"},
+    {ERR_PACK(0, OSSLTEST_F_OSSLTEST_AES128_INIT_KEY, 0), ""},
+    {0, NULL}
+};
+
+static ERR_STRING_DATA OSSLTEST_str_reasons[] = {
+    {ERR_PACK(0, 0, OSSLTEST_R_INIT_FAILED), "init failed"},
+    {0, NULL}
+};
+
+#endif
+
+static int lib_code = 0;
+static int error_loaded = 0;
+
+static int ERR_load_OSSLTEST_strings(void)
+{
+    if (lib_code == 0)
+        lib_code = ERR_get_next_error_library();
+
+    if (!error_loaded) {
+#ifndef OPENSSL_NO_ERR
+        ERR_load_strings(lib_code, OSSLTEST_str_functs);
+        ERR_load_strings(lib_code, OSSLTEST_str_reasons);
+#endif
+        error_loaded = 1;
+    }
+    return 1;
+}
+
+static void ERR_unload_OSSLTEST_strings(void)
+{
+    if (error_loaded) {
+#ifndef OPENSSL_NO_ERR
+        ERR_unload_strings(lib_code, OSSLTEST_str_functs);
+        ERR_unload_strings(lib_code, OSSLTEST_str_reasons);
+#endif
+        error_loaded = 0;
+    }
+}
+
+static void ERR_OSSLTEST_error(int function, int reason, char *file, int line)
+{
+    if (lib_code == 0)
+        lib_code = ERR_get_next_error_library();
+    ERR_PUT_error(lib_code, function, reason, file, line);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest_err.h b/trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest_err.h
new file mode 100644
index 000000000..e745c1a23
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_ossltest_err.h
@@ -0,0 +1,28 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_OSSLTESTERR_H
+# define HEADER_OSSLTESTERR_H
+
+# define OSSLTESTerr(f, r) ERR_OSSLTEST_error((f), (r), OPENSSL_FILE, OPENSSL_LINE)
+
+
+/*
+ * OSSLTEST function codes.
+ */
+# define OSSLTEST_F_BIND_OSSLTEST                         100
+# define OSSLTEST_F_OSSLTEST_AES128_INIT_KEY              101
+
+/*
+ * OSSLTEST reason codes.
+ */
+# define OSSLTEST_R_INIT_FAILED                           100
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/engines/e_padlock.c b/trunk/3rdparty/openssl-1.1-fit/engines/e_padlock.c
new file mode 100644
index 000000000..f6b1f1698
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/engines/e_padlock.c
@@ -0,0 +1,747 @@
+/*
+ * Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+
+#include <openssl/opensslconf.h>
+#include <openssl/crypto.h>
+#include <openssl/engine.h>
+#include <openssl/evp.h>
+#include <openssl/aes.h>
+#include <openssl/rand.h>
+#include <openssl/err.h>
+#include <openssl/modes.h>
+
+#ifndef OPENSSL_NO_HW
+# ifndef OPENSSL_NO_HW_PADLOCK
+
+/* Attempt to have a single source for both 0.9.7 and 0.9.8 :-) */
+#  if (OPENSSL_VERSION_NUMBER >= 0x00908000L)
+#   ifndef OPENSSL_NO_DYNAMIC_ENGINE
+#    define DYNAMIC_ENGINE
+#   endif
+#  elif (OPENSSL_VERSION_NUMBER >= 0x00907000L)
+#   ifdef ENGINE_DYNAMIC_SUPPORT
+#    define DYNAMIC_ENGINE
+#   endif
+#  else
+#   error "Only OpenSSL >= 0.9.7 is supported"
+#  endif
+
+/*
+ * VIA PadLock AES is available *ONLY* on some x86 CPUs. Not only that it
+ * doesn't exist elsewhere, but it even can't be compiled on other platforms!
+ */
+
+#  undef COMPILE_HW_PADLOCK
+#  if !defined(I386_ONLY) && defined(PADLOCK_ASM)
+#   define COMPILE_HW_PADLOCK
+#   ifdef OPENSSL_NO_DYNAMIC_ENGINE
+static ENGINE *ENGINE_padlock(void);
+#   endif
+#  endif
+
+#  ifdef OPENSSL_NO_DYNAMIC_ENGINE
+void engine_load_padlock_int(void);
+void engine_load_padlock_int(void)
+{
+/* On non-x86 CPUs it just returns. */
+#   ifdef COMPILE_HW_PADLOCK
+    ENGINE *toadd = ENGINE_padlock();
+    if (!toadd)
+        return;
+    ENGINE_add(toadd);
+    ENGINE_free(toadd);
+    ERR_clear_error();
+#   endif
+}
+
+#  endif
+
+#  ifdef COMPILE_HW_PADLOCK
+
+/* Function for ENGINE detection and control */
+static int padlock_available(void);
+static int padlock_init(ENGINE *e);
+
+/* RNG Stuff */
+static RAND_METHOD padlock_rand;
+
+/* Cipher Stuff */
+static int padlock_ciphers(ENGINE *e, const EVP_CIPHER **cipher,
+                           const int **nids, int nid);
+
+/* Engine names */
+static const char *padlock_id = "padlock";
+static char padlock_name[100];
+
+/* Available features */
+static int padlock_use_ace = 0; /* Advanced Cryptography Engine */
+static int padlock_use_rng = 0; /* Random Number Generator */
+
+/* ===== Engine "management" functions ===== */
+
+/* Prepare the ENGINE structure for registration */
+static int padlock_bind_helper(ENGINE *e)
+{
+    /* Check available features */
+    padlock_available();
+
+    /*
+     * RNG is currently disabled for reasons discussed in commentary just
+     * before padlock_rand_bytes function.
+     */
+    padlock_use_rng = 0;
+
+    /* Generate a nice engine name with available features */
+    BIO_snprintf(padlock_name, sizeof(padlock_name),
+                 "VIA PadLock (%s, %s)",
+                 padlock_use_rng ? "RNG" : "no-RNG",
+                 padlock_use_ace ? "ACE" : "no-ACE");
+
+    /* Register everything or return with an error */
+    if (!ENGINE_set_id(e, padlock_id) ||
+        !ENGINE_set_name(e, padlock_name) ||
+        !ENGINE_set_init_function(e, padlock_init) ||
+        (padlock_use_ace && !ENGINE_set_ciphers(e, padlock_ciphers)) ||
+        (padlock_use_rng && !ENGINE_set_RAND(e, &padlock_rand))) {
+        return 0;
+    }
+
+    /* Everything looks good */
+    return 1;
+}
+
+#   ifdef OPENSSL_NO_DYNAMIC_ENGINE
+/* Constructor */
+static ENGINE *ENGINE_padlock(void)
+{
+    ENGINE *eng = ENGINE_new();
+
+    if (eng == NULL) {
+        return NULL;
+    }
+
+    if (!padlock_bind_helper(eng)) {
+        ENGINE_free(eng);
+        return NULL;
+    }
+
+    return eng;
+}
+#   endif
+
+/* Check availability of the engine */
+static int padlock_init(ENGINE *e)
+{
+    return (padlock_use_rng || padlock_use_ace);
+}
+
+/*
+ * This stuff is needed if this ENGINE is being compiled into a
+ * self-contained shared-library.
+ */
+#   ifdef DYNAMIC_ENGINE
+static int padlock_bind_fn(ENGINE *e, const char *id)
+{
+    if (id && (strcmp(id, padlock_id) != 0)) {
+        return 0;
+    }
+
+    if (!padlock_bind_helper(e)) {
+        return 0;
+    }
+
+    return 1;
+}
+
+IMPLEMENT_DYNAMIC_CHECK_FN()
+IMPLEMENT_DYNAMIC_BIND_FN(padlock_bind_fn)
+#   endif                       /* DYNAMIC_ENGINE */
+/* ===== Here comes the "real" engine ===== */
+
+/* Some AES-related constants */
+#   define AES_BLOCK_SIZE          16
+#   define AES_KEY_SIZE_128        16
+#   define AES_KEY_SIZE_192        24
+#   define AES_KEY_SIZE_256        32
+    /*
+     * Here we store the status information relevant to the current context.
+     */
+    /*
+     * BIG FAT WARNING: Inline assembler in PADLOCK_XCRYPT_ASM() depends on
+     * the order of items in this structure.  Don't blindly modify, reorder,
+     * etc!
+     */
+struct padlock_cipher_data {
+    unsigned char iv[AES_BLOCK_SIZE]; /* Initialization vector */
+    union {
+        unsigned int pad[4];
+        struct {
+            int rounds:4;
+            int dgst:1;         /* n/a in C3 */
+            int align:1;        /* n/a in C3 */
+            int ciphr:1;        /* n/a in C3 */
+            unsigned int keygen:1;
+            int interm:1;
+            unsigned int encdec:1;
+            int ksize:2;
+        } b;
+    } cword;                    /* Control word */
+    AES_KEY ks;                 /* Encryption key */
+};
+
+/* Interface to assembler module */
+unsigned int padlock_capability(void);
+void padlock_key_bswap(AES_KEY *key);
+void padlock_verify_context(struct padlock_cipher_data *ctx);
+void padlock_reload_key(void);
+void padlock_aes_block(void *out, const void *inp,
+                       struct padlock_cipher_data *ctx);
+int padlock_ecb_encrypt(void *out, const void *inp,
+                        struct padlock_cipher_data *ctx, size_t len);
+int padlock_cbc_encrypt(void *out, const void *inp,
+                        struct padlock_cipher_data *ctx, size_t len);
+int padlock_cfb_encrypt(void *out, const void *inp,
+                        struct padlock_cipher_data *ctx, size_t len);
+int padlock_ofb_encrypt(void *out, const void *inp,
+                        struct padlock_cipher_data *ctx, size_t len);
+int padlock_ctr32_encrypt(void *out, const void *inp,
+                          struct padlock_cipher_data *ctx, size_t len);
+int padlock_xstore(void *out, int edx);
+void padlock_sha1_oneshot(void *ctx, const void *inp, size_t len);
+void padlock_sha1(void *ctx, const void *inp, size_t len);
+void padlock_sha256_oneshot(void *ctx, const void *inp, size_t len);
+void padlock_sha256(void *ctx, const void *inp, size_t len);
+
+/*
+ * Load supported features of the CPU to see if the PadLock is available.
+ */
+static int padlock_available(void)
+{
+    unsigned int edx = padlock_capability();
+
+    /* Fill up some flags */
+    padlock_use_ace = ((edx & (0x3 << 6)) == (0x3 << 6));
+    padlock_use_rng = ((edx & (0x3 << 2)) == (0x3 << 2));
+
+    return padlock_use_ace + padlock_use_rng;
+}
+
+/* ===== AES encryption/decryption ===== */
+
+#   if defined(NID_aes_128_cfb128) && ! defined (NID_aes_128_cfb)
+#    define NID_aes_128_cfb NID_aes_128_cfb128
+#   endif
+
+#   if defined(NID_aes_128_ofb128) && ! defined (NID_aes_128_ofb)
+#    define NID_aes_128_ofb NID_aes_128_ofb128
+#   endif
+
+#   if defined(NID_aes_192_cfb128) && ! defined (NID_aes_192_cfb)
+#    define NID_aes_192_cfb NID_aes_192_cfb128
+#   endif
+
+#   if defined(NID_aes_192_ofb128) && ! defined (NID_aes_192_ofb)
+#    define NID_aes_192_ofb NID_aes_192_ofb128
+#   endif
+
+#   if defined(NID_aes_256_cfb128) && ! defined (NID_aes_256_cfb)
+#    define NID_aes_256_cfb NID_aes_256_cfb128
+#   endif
+
+#   if defined(NID_aes_256_ofb128) && ! defined (NID_aes_256_ofb)
+#    define NID_aes_256_ofb NID_aes_256_ofb128
+#   endif
+
+/* List of supported ciphers. */
+static const int padlock_cipher_nids[] = {
+    NID_aes_128_ecb,
+    NID_aes_128_cbc,
+    NID_aes_128_cfb,
+    NID_aes_128_ofb,
+    NID_aes_128_ctr,
+
+    NID_aes_192_ecb,
+    NID_aes_192_cbc,
+    NID_aes_192_cfb,
+    NID_aes_192_ofb,
+    NID_aes_192_ctr,
+
+    NID_aes_256_ecb,
+    NID_aes_256_cbc,
+    NID_aes_256_cfb,
+    NID_aes_256_ofb,
+    NID_aes_256_ctr
+};
+
+static int padlock_cipher_nids_num = (sizeof(padlock_cipher_nids) /
+                                      sizeof(padlock_cipher_nids[0]));
+
+/* Function prototypes ... */
+static int padlock_aes_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                                const unsigned char *iv, int enc);
+
+#   define NEAREST_ALIGNED(ptr) ( (unsigned char *)(ptr) +         \
+        ( (0x10 - ((size_t)(ptr) & 0x0F)) & 0x0F )      )
+#   define ALIGNED_CIPHER_DATA(ctx) ((struct padlock_cipher_data *)\
+        NEAREST_ALIGNED(EVP_CIPHER_CTX_get_cipher_data(ctx)))
+
+static int
+padlock_ecb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out_arg,
+                   const unsigned char *in_arg, size_t nbytes)
+{
+    return padlock_ecb_encrypt(out_arg, in_arg,
+                               ALIGNED_CIPHER_DATA(ctx), nbytes);
+}
+
+static int
+padlock_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out_arg,
+                   const unsigned char *in_arg, size_t nbytes)
+{
+    struct padlock_cipher_data *cdata = ALIGNED_CIPHER_DATA(ctx);
+    int ret;
+
+    memcpy(cdata->iv, EVP_CIPHER_CTX_iv(ctx), AES_BLOCK_SIZE);
+    if ((ret = padlock_cbc_encrypt(out_arg, in_arg, cdata, nbytes)))
+        memcpy(EVP_CIPHER_CTX_iv_noconst(ctx), cdata->iv, AES_BLOCK_SIZE);
+    return ret;
+}
+
+static int
+padlock_cfb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out_arg,
+                   const unsigned char *in_arg, size_t nbytes)
+{
+    struct padlock_cipher_data *cdata = ALIGNED_CIPHER_DATA(ctx);
+    size_t chunk;
+
+    if ((chunk = EVP_CIPHER_CTX_num(ctx))) {   /* borrow chunk variable */
+        unsigned char *ivp = EVP_CIPHER_CTX_iv_noconst(ctx);
+
+        if (chunk >= AES_BLOCK_SIZE)
+            return 0;           /* bogus value */
+
+        if (EVP_CIPHER_CTX_encrypting(ctx))
+            while (chunk < AES_BLOCK_SIZE && nbytes != 0) {
+                ivp[chunk] = *(out_arg++) = *(in_arg++) ^ ivp[chunk];
+                chunk++, nbytes--;
+        } else
+            while (chunk < AES_BLOCK_SIZE && nbytes != 0) {
+                unsigned char c = *(in_arg++);
+                *(out_arg++) = c ^ ivp[chunk];
+                ivp[chunk++] = c, nbytes--;
+            }
+
+        EVP_CIPHER_CTX_set_num(ctx, chunk % AES_BLOCK_SIZE);
+    }
+
+    if (nbytes == 0)
+        return 1;
+
+    memcpy(cdata->iv, EVP_CIPHER_CTX_iv(ctx), AES_BLOCK_SIZE);
+
+    if ((chunk = nbytes & ~(AES_BLOCK_SIZE - 1))) {
+        if (!padlock_cfb_encrypt(out_arg, in_arg, cdata, chunk))
+            return 0;
+        nbytes -= chunk;
+    }
+
+    if (nbytes) {
+        unsigned char *ivp = cdata->iv;
+
+        out_arg += chunk;
+        in_arg += chunk;
+        EVP_CIPHER_CTX_set_num(ctx, nbytes);
+        if (cdata->cword.b.encdec) {
+            cdata->cword.b.encdec = 0;
+            padlock_reload_key();
+            padlock_aes_block(ivp, ivp, cdata);
+            cdata->cword.b.encdec = 1;
+            padlock_reload_key();
+            while (nbytes) {
+                unsigned char c = *(in_arg++);
+                *(out_arg++) = c ^ *ivp;
+                *(ivp++) = c, nbytes--;
+            }
+        } else {
+            padlock_reload_key();
+            padlock_aes_block(ivp, ivp, cdata);
+            padlock_reload_key();
+            while (nbytes) {
+                *ivp = *(out_arg++) = *(in_arg++) ^ *ivp;
+                ivp++, nbytes--;
+            }
+        }
+    }
+
+    memcpy(EVP_CIPHER_CTX_iv_noconst(ctx), cdata->iv, AES_BLOCK_SIZE);
+
+    return 1;
+}
+
+static int
+padlock_ofb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out_arg,
+                   const unsigned char *in_arg, size_t nbytes)
+{
+    struct padlock_cipher_data *cdata = ALIGNED_CIPHER_DATA(ctx);
+    size_t chunk;
+
+    /*
+     * ctx->num is maintained in byte-oriented modes, such as CFB and OFB...
+     */
+    if ((chunk = EVP_CIPHER_CTX_num(ctx))) {   /* borrow chunk variable */
+        unsigned char *ivp = EVP_CIPHER_CTX_iv_noconst(ctx);
+
+        if (chunk >= AES_BLOCK_SIZE)
+            return 0;           /* bogus value */
+
+        while (chunk < AES_BLOCK_SIZE && nbytes != 0) {
+            *(out_arg++) = *(in_arg++) ^ ivp[chunk];
+            chunk++, nbytes--;
+        }
+
+        EVP_CIPHER_CTX_set_num(ctx, chunk % AES_BLOCK_SIZE);
+    }
+
+    if (nbytes == 0)
+        return 1;
+
+    memcpy(cdata->iv, EVP_CIPHER_CTX_iv(ctx), AES_BLOCK_SIZE);
+
+    if ((chunk = nbytes & ~(AES_BLOCK_SIZE - 1))) {
+        if (!padlock_ofb_encrypt(out_arg, in_arg, cdata, chunk))
+            return 0;
+        nbytes -= chunk;
+    }
+
+    if (nbytes) {
+        unsigned char *ivp = cdata->iv;
+
+        out_arg += chunk;
+        in_arg += chunk;
+        EVP_CIPHER_CTX_set_num(ctx, nbytes);
+        padlock_reload_key();   /* empirically found */
+        padlock_aes_block(ivp, ivp, cdata);
+        padlock_reload_key();   /* empirically found */
+        while (nbytes) {
+            *(out_arg++) = *(in_arg++) ^ *ivp;
+            ivp++, nbytes--;
+        }
+    }
+
+    memcpy(EVP_CIPHER_CTX_iv_noconst(ctx), cdata->iv, AES_BLOCK_SIZE);
+
+    return 1;
+}
+
+static void padlock_ctr32_encrypt_glue(const unsigned char *in,
+                                       unsigned char *out, size_t blocks,
+                                       struct padlock_cipher_data *ctx,
+                                       const unsigned char *ivec)
+{
+    memcpy(ctx->iv, ivec, AES_BLOCK_SIZE);
+    padlock_ctr32_encrypt(out, in, ctx, AES_BLOCK_SIZE * blocks);
+}
+
+static int
+padlock_ctr_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out_arg,
+                   const unsigned char *in_arg, size_t nbytes)
+{
+    struct padlock_cipher_data *cdata = ALIGNED_CIPHER_DATA(ctx);
+    unsigned int num = EVP_CIPHER_CTX_num(ctx);
+
+    CRYPTO_ctr128_encrypt_ctr32(in_arg, out_arg, nbytes,
+                                cdata, EVP_CIPHER_CTX_iv_noconst(ctx),
+                                EVP_CIPHER_CTX_buf_noconst(ctx), &num,
+                                (ctr128_f) padlock_ctr32_encrypt_glue);
+
+    EVP_CIPHER_CTX_set_num(ctx, (size_t)num);
+    return 1;
+}
+
+#   define EVP_CIPHER_block_size_ECB       AES_BLOCK_SIZE
+#   define EVP_CIPHER_block_size_CBC       AES_BLOCK_SIZE
+#   define EVP_CIPHER_block_size_OFB       1
+#   define EVP_CIPHER_block_size_CFB       1
+#   define EVP_CIPHER_block_size_CTR       1
+
+/*
+ * Declaring so many ciphers by hand would be a pain. Instead introduce a bit
+ * of preprocessor magic :-)
+ */
+#   define DECLARE_AES_EVP(ksize,lmode,umode)      \
+static EVP_CIPHER *_hidden_aes_##ksize##_##lmode = NULL; \
+static const EVP_CIPHER *padlock_aes_##ksize##_##lmode(void) \
+{                                                                       \
+    if (_hidden_aes_##ksize##_##lmode == NULL                           \
+        && ((_hidden_aes_##ksize##_##lmode =                            \
+             EVP_CIPHER_meth_new(NID_aes_##ksize##_##lmode,             \
+                                 EVP_CIPHER_block_size_##umode,         \
+                                 AES_KEY_SIZE_##ksize)) == NULL         \
+            || !EVP_CIPHER_meth_set_iv_length(_hidden_aes_##ksize##_##lmode, \
+                                              AES_BLOCK_SIZE)           \
+            || !EVP_CIPHER_meth_set_flags(_hidden_aes_##ksize##_##lmode, \
+                                          0 | EVP_CIPH_##umode##_MODE)  \
+            || !EVP_CIPHER_meth_set_init(_hidden_aes_##ksize##_##lmode, \
+                                         padlock_aes_init_key)          \
+            || !EVP_CIPHER_meth_set_do_cipher(_hidden_aes_##ksize##_##lmode, \
+                                              padlock_##lmode##_cipher) \
+            || !EVP_CIPHER_meth_set_impl_ctx_size(_hidden_aes_##ksize##_##lmode, \
+                                                  sizeof(struct padlock_cipher_data) + 16) \
+            || !EVP_CIPHER_meth_set_set_asn1_params(_hidden_aes_##ksize##_##lmode, \
+                                                    EVP_CIPHER_set_asn1_iv) \
+            || !EVP_CIPHER_meth_set_get_asn1_params(_hidden_aes_##ksize##_##lmode, \
+                                                    EVP_CIPHER_get_asn1_iv))) { \
+        EVP_CIPHER_meth_free(_hidden_aes_##ksize##_##lmode);            \
+        _hidden_aes_##ksize##_##lmode = NULL;                           \
+    }                                                                   \
+    return _hidden_aes_##ksize##_##lmode;                               \
+}
+
+DECLARE_AES_EVP(128, ecb, ECB)
+DECLARE_AES_EVP(128, cbc, CBC)
+DECLARE_AES_EVP(128, cfb, CFB)
+DECLARE_AES_EVP(128, ofb, OFB)
+DECLARE_AES_EVP(128, ctr, CTR)
+
+DECLARE_AES_EVP(192, ecb, ECB)
+DECLARE_AES_EVP(192, cbc, CBC)
+DECLARE_AES_EVP(192, cfb, CFB)
+DECLARE_AES_EVP(192, ofb, OFB)
+DECLARE_AES_EVP(192, ctr, CTR)
+
+DECLARE_AES_EVP(256, ecb, ECB)
+DECLARE_AES_EVP(256, cbc, CBC)
+DECLARE_AES_EVP(256, cfb, CFB)
+DECLARE_AES_EVP(256, ofb, OFB)
+DECLARE_AES_EVP(256, ctr, CTR)
+
+static int
+padlock_ciphers(ENGINE *e, const EVP_CIPHER **cipher, const int **nids,
+                int nid)
+{
+    /* No specific cipher => return a list of supported nids ... */
+    if (!cipher) {
+        *nids = padlock_cipher_nids;
+        return padlock_cipher_nids_num;
+    }
+
+    /* ... or the requested "cipher" otherwise */
+    switch (nid) {
+    case NID_aes_128_ecb:
+        *cipher = padlock_aes_128_ecb();
+        break;
+    case NID_aes_128_cbc:
+        *cipher = padlock_aes_128_cbc();
+        break;
+    case NID_aes_128_cfb:
+        *cipher = padlock_aes_128_cfb();
+        break;
+    case NID_aes_128_ofb:
+        *cipher = padlock_aes_128_ofb();
+        break;
+    case NID_aes_128_ctr:
+        *cipher = padlock_aes_128_ctr();
+        break;
+
+    case NID_aes_192_ecb:
+        *cipher = padlock_aes_192_ecb();
+        break;
+    case NID_aes_192_cbc:
+        *cipher = padlock_aes_192_cbc();
+        break;
+    case NID_aes_192_cfb:
+        *cipher = padlock_aes_192_cfb();
+        break;
+    case NID_aes_192_ofb:
+        *cipher = padlock_aes_192_ofb();
+        break;
+    case NID_aes_192_ctr:
+        *cipher = padlock_aes_192_ctr();
+        break;
+
+    case NID_aes_256_ecb:
+        *cipher = padlock_aes_256_ecb();
+        break;
+    case NID_aes_256_cbc:
+        *cipher = padlock_aes_256_cbc();
+        break;
+    case NID_aes_256_cfb:
+        *cipher = padlock_aes_256_cfb();
+        break;
+    case NID_aes_256_ofb:
+        *cipher = padlock_aes_256_ofb();
+        break;
+    case NID_aes_256_ctr:
+        *cipher = padlock_aes_256_ctr();
+        break;
+
+    default:
+        /* Sorry, we don't support this NID */
+        *cipher = NULL;
+        return 0;
+    }
+
+    return 1;
+}
+
+/* Prepare the encryption key for PadLock usage */
+static int
+padlock_aes_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key,
+                     const unsigned char *iv, int enc)
+{
+    struct padlock_cipher_data *cdata;
+    int key_len = EVP_CIPHER_CTX_key_length(ctx) * 8;
+    unsigned long mode = EVP_CIPHER_CTX_mode(ctx);
+
+    if (key == NULL)
+        return 0;               /* ERROR */
+
+    cdata = ALIGNED_CIPHER_DATA(ctx);
+    memset(cdata, 0, sizeof(*cdata));
+
+    /* Prepare Control word. */
+    if (mode == EVP_CIPH_OFB_MODE || mode == EVP_CIPH_CTR_MODE)
+        cdata->cword.b.encdec = 0;
+    else
+        cdata->cword.b.encdec = (EVP_CIPHER_CTX_encrypting(ctx) == 0);
+    cdata->cword.b.rounds = 10 + (key_len - 128) / 32;
+    cdata->cword.b.ksize = (key_len - 128) / 64;
+
+    switch (key_len) {
+    case 128:
+        /*
+         * PadLock can generate an extended key for AES128 in hardware
+         */
+        memcpy(cdata->ks.rd_key, key, AES_KEY_SIZE_128);
+        cdata->cword.b.keygen = 0;
+        break;
+
+    case 192:
+    case 256:
+        /*
+         * Generate an extended AES key in software. Needed for AES192/AES256
+         */
+        /*
+         * Well, the above applies to Stepping 8 CPUs and is listed as
+         * hardware errata. They most likely will fix it at some point and
+         * then a check for stepping would be due here.
+         */
+        if ((mode == EVP_CIPH_ECB_MODE || mode == EVP_CIPH_CBC_MODE)
+            && !enc)
+            AES_set_decrypt_key(key, key_len, &cdata->ks);
+        else
+            AES_set_encrypt_key(key, key_len, &cdata->ks);
+#   ifndef AES_ASM
+        /*
+         * OpenSSL C functions use byte-swapped extended key.
+         */
+        padlock_key_bswap(&cdata->ks);
+#   endif
+        cdata->cword.b.keygen = 1;
+        break;
+
+    default:
+        /* ERROR */
+        return 0;
+    }
+
+    /*
+     * This is done to cover for cases when user reuses the
+     * context for new key. The catch is that if we don't do
+     * this, padlock_eas_cipher might proceed with old key...
+     */
+    padlock_reload_key();
+
+    return 1;
+}
+
+/* ===== Random Number Generator ===== */
+/*
+ * This code is not engaged. The reason is that it does not comply
+ * with recommendations for VIA RNG usage for secure applications
+ * (posted at http://www.via.com.tw/en/viac3/c3.jsp) nor does it
+ * provide meaningful error control...
+ */
+/*
+ * Wrapper that provides an interface between the API and the raw PadLock
+ * RNG
+ */
+static int padlock_rand_bytes(unsigned char *output, int count)
+{
+    unsigned int eax, buf;
+
+    while (count >= 8) {
+        eax = padlock_xstore(output, 0);
+        if (!(eax & (1 << 6)))
+            return 0;           /* RNG disabled */
+        /* this ---vv--- covers DC bias, Raw Bits and String Filter */
+        if (eax & (0x1F << 10))
+            return 0;
+        if ((eax & 0x1F) == 0)
+            continue;           /* no data, retry... */
+        if ((eax & 0x1F) != 8)
+            return 0;           /* fatal failure...  */
+        output += 8;
+        count -= 8;
+    }
+    while (count > 0) {
+        eax = padlock_xstore(&buf, 3);
+        if (!(eax & (1 << 6)))
+            return 0;           /* RNG disabled */
+        /* this ---vv--- covers DC bias, Raw Bits and String Filter */
+        if (eax & (0x1F << 10))
+            return 0;
+        if ((eax & 0x1F) == 0)
+            continue;           /* no data, retry... */
+        if ((eax & 0x1F) != 1)
+            return 0;           /* fatal failure...  */
+        *output++ = (unsigned char)buf;
+        count--;
+    }
+    OPENSSL_cleanse(&buf, sizeof(buf));
+
+    return 1;
+}
+
+/* Dummy but necessary function */
+static int padlock_rand_status(void)
+{
+    return 1;
+}
+
+/* Prepare structure for registration */
+static RAND_METHOD padlock_rand = {
+    NULL,                       /* seed */
+    padlock_rand_bytes,         /* bytes */
+    NULL,                       /* cleanup */
+    NULL,                       /* add */
+    padlock_rand_bytes,         /* pseudorand */
+    padlock_rand_status,        /* rand status */
+};
+
+#  endif                        /* COMPILE_HW_PADLOCK */
+# endif                         /* !OPENSSL_NO_HW_PADLOCK */
+#endif                          /* !OPENSSL_NO_HW */
+
+#if defined(OPENSSL_NO_HW) || defined(OPENSSL_NO_HW_PADLOCK) \
+        || !defined(COMPILE_HW_PADLOCK)
+# ifndef OPENSSL_NO_DYNAMIC_ENGINE
+OPENSSL_EXPORT
+    int bind_engine(ENGINE *e, const char *id, const dynamic_fns *fns);
+OPENSSL_EXPORT
+    int bind_engine(ENGINE *e, const char *id, const dynamic_fns *fns)
+{
+    return 0;
+}
+
+IMPLEMENT_DYNAMIC_CHECK_FN()
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Downloaded.txt b/trunk/3rdparty/openssl-1.1-fit/external/perl/Downloaded.txt
new file mode 100644
index 000000000..af0c20a3e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Downloaded.txt
@@ -0,0 +1,13 @@
+Intro
+-----
+
+If we find a useful Perl module that isn't one of the core Perl
+modules, we may choose to bundle it with the OpenSSL source.
+
+Here, we simply list those modules and where we downloaded them from.
+
+Downloaded and bundled Perl modules
+-----------------------------------
+
+Text::Template 1.46 was downloaded from
+http://search.cpan.org/CPAN/authors/id/M/MJ/MJD/Text-Template-1.46.tar.gz
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/Artistic b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/Artistic
new file mode 100644
index 000000000..5f221241e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/Artistic
@@ -0,0 +1,131 @@
+
+
+
+
+			 The "Artistic License"
+
+				Preamble
+
+The intent of this document is to state the conditions under which a
+Package may be copied, such that the Copyright Holder maintains some
+semblance of artistic control over the development of the package,
+while giving the users of the package the right to use and distribute
+the Package in a more-or-less customary fashion, plus the right to make
+reasonable modifications.
+
+Definitions:
+
+	"Package" refers to the collection of files distributed by the
+	Copyright Holder, and derivatives of that collection of files
+	created through textual modification.
+
+	"Standard Version" refers to such a Package if it has not been
+	modified, or has been modified in accordance with the wishes
+	of the Copyright Holder as specified below.
+
+	"Copyright Holder" is whoever is named in the copyright or
+	copyrights for the package.
+
+	"You" is you, if you're thinking about copying or distributing
+	this Package.
+
+	"Reasonable copying fee" is whatever you can justify on the
+	basis of media cost, duplication charges, time of people involved,
+	and so on.  (You will not be required to justify it to the
+	Copyright Holder, but only to the computing community at large
+	as a market that must bear the fee.)
+
+	"Freely Available" means that no fee is charged for the item
+	itself, though there may be fees involved in handling the item.
+	It also means that recipients of the item may redistribute it
+	under the same conditions they received it.
+
+1. You may make and give away verbatim copies of the source form of the
+Standard Version of this Package without restriction, provided that you
+duplicate all of the original copyright notices and associated disclaimers.
+
+2. You may apply bug fixes, portability fixes and other modifications
+derived from the Public Domain or from the Copyright Holder.  A Package
+modified in such a way shall still be considered the Standard Version.
+
+3. You may otherwise modify your copy of this Package in any way, provided
+that you insert a prominent notice in each changed file stating how and
+when you changed that file, and provided that you do at least ONE of the
+following:
+
+    a) place your modifications in the Public Domain or otherwise make them
+    Freely Available, such as by posting said modifications to Usenet or
+    an equivalent medium, or placing the modifications on a major archive
+    site such as uunet.uu.net, or by allowing the Copyright Holder to include
+    your modifications in the Standard Version of the Package.
+
+    b) use the modified Package only within your corporation or organization.
+
+    c) rename any non-standard executables so the names do not conflict
+    with standard executables, which must also be provided, and provide
+    a separate manual page for each non-standard executable that clearly
+    documents how it differs from the Standard Version.
+
+    d) make other distribution arrangements with the Copyright Holder.
+
+4. You may distribute the programs of this Package in object code or
+executable form, provided that you do at least ONE of the following:
+
+    a) distribute a Standard Version of the executables and library files,
+    together with instructions (in the manual page or equivalent) on where
+    to get the Standard Version.
+
+    b) accompany the distribution with the machine-readable source of
+    the Package with your modifications.
+
+    c) give non-standard executables non-standard names, and clearly
+    document the differences in manual pages (or equivalent), together
+    with instructions on where to get the Standard Version.
+
+    d) make other distribution arrangements with the Copyright Holder.
+
+5. You may charge a reasonable copying fee for any distribution of this
+Package.  You may charge any fee you choose for support of this
+Package.  You may not charge a fee for this Package itself.  However,
+you may distribute this Package in aggregate with other (possibly
+commercial) programs as part of a larger (possibly commercial) software
+distribution provided that you do not advertise this Package as a
+product of your own.  You may embed this Package's interpreter within
+an executable of yours (by linking); this shall be construed as a mere
+form of aggregation, provided that the complete Standard Version of the
+interpreter is so embedded.
+
+6. The scripts and library files supplied as input to or produced as
+output from the programs of this Package do not automatically fall
+under the copyright of this Package, but belong to whoever generated
+them, and may be sold commercially, and may be aggregated with this
+Package.  If such scripts or library files are aggregated with this
+Package via the so-called "undump" or "unexec" methods of producing a
+binary executable image, then distribution of such an image shall
+neither be construed as a distribution of this Package nor shall it
+fall under the restrictions of Paragraphs 3 and 4, provided that you do
+not represent such an executable image as a Standard Version of this
+Package.
+
+7. C subroutines (or comparably compiled subroutines in other
+languages) supplied by you and linked into this Package in order to
+emulate subroutines and variables of the language defined by this
+Package shall not be considered part of this Package, but are the
+equivalent of input as in Paragraph 6, provided these subroutines do
+not change the language in any way that would cause it to fail the
+regression tests for the language.
+
+8. Aggregation of this Package with a commercial distribution is always
+permitted provided that the use of this Package is embedded; that is,
+when no overt attempt is made to make this Package's interfaces visible
+to the end user of the commercial distribution.  Such use shall not be
+construed as a distribution of this Package.
+
+9. The name of the Copyright Holder may not be used to endorse or promote
+products derived from this software without specific prior written permission.
+
+10. THIS PACKAGE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR
+IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
+WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
+
+				The End
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/COPYING b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/COPYING
new file mode 100644
index 000000000..a3f6b12ee
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/COPYING
@@ -0,0 +1,340 @@
+		    GNU GENERAL PUBLIC LICENSE
+		       Version 2, June 1991
+
+ Copyright (C) 1989, 1991 Free Software Foundation, Inc.
+                          59 Temple Place - Suite 330, Boston, MA
+                          02111-1307, USA.
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+			    Preamble
+
+  The licenses for most software are designed to take away your
+freedom to share and change it.  By contrast, the GNU General Public
+License is intended to guarantee your freedom to share and change free
+software--to make sure the software is free for all its users.  This
+General Public License applies to most of the Free Software
+Foundation's software and to any other program whose authors commit to
+using it.  (Some other Free Software Foundation software is covered by
+the GNU Library General Public License instead.)  You can apply it to
+your programs, too.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+this service if you wish), that you receive source code or can get it
+if you want it, that you can change the software or use pieces of it
+in new free programs; and that you know you can do these things.
+
+  To protect your rights, we need to make restrictions that forbid
+anyone to deny you these rights or to ask you to surrender the rights.
+These restrictions translate to certain responsibilities for you if you
+distribute copies of the software, or if you modify it.
+
+  For example, if you distribute copies of such a program, whether
+gratis or for a fee, you must give the recipients all the rights that
+you have.  You must make sure that they, too, receive or can get the
+source code.  And you must show them these terms so they know their
+rights.
+
+  We protect your rights with two steps: (1) copyright the software, and
+(2) offer you this license which gives you legal permission to copy,
+distribute and/or modify the software.
+
+  Also, for each author's protection and ours, we want to make certain
+that everyone understands that there is no warranty for this free
+software.  If the software is modified by someone else and passed on, we
+want its recipients to know that what they have is not the original, so
+that any problems introduced by others will not reflect on the original
+authors' reputations.
+
+  Finally, any free program is threatened constantly by software
+patents.  We wish to avoid the danger that redistributors of a free
+program will individually obtain patent licenses, in effect making the
+program proprietary.  To prevent this, we have made it clear that any
+patent must be licensed for everyone's free use or not licensed at all.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+		    GNU GENERAL PUBLIC LICENSE
+   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
+
+  0. This License applies to any program or other work which contains
+a notice placed by the copyright holder saying it may be distributed
+under the terms of this General Public License.  The "Program", below,
+refers to any such program or work, and a "work based on the Program"
+means either the Program or any derivative work under copyright law:
+that is to say, a work containing the Program or a portion of it,
+either verbatim or with modifications and/or translated into another
+language.  (Hereinafter, translation is included without limitation in
+the term "modification".)  Each licensee is addressed as "you".
+
+Activities other than copying, distribution and modification are not
+covered by this License; they are outside its scope.  The act of
+running the Program is not restricted, and the output from the Program
+is covered only if its contents constitute a work based on the
+Program (independent of having been made by running the Program).
+Whether that is true depends on what the Program does.
+
+  1. You may copy and distribute verbatim copies of the Program's
+source code as you receive it, in any medium, provided that you
+conspicuously and appropriately publish on each copy an appropriate
+copyright notice and disclaimer of warranty; keep intact all the
+notices that refer to this License and to the absence of any warranty;
+and give any other recipients of the Program a copy of this License
+along with the Program.
+
+You may charge a fee for the physical act of transferring a copy, and
+you may at your option offer warranty protection in exchange for a fee.
+
+  2. You may modify your copy or copies of the Program or any portion
+of it, thus forming a work based on the Program, and copy and
+distribute such modifications or work under the terms of Section 1
+above, provided that you also meet all of these conditions:
+
+    a) You must cause the modified files to carry prominent notices
+    stating that you changed the files and the date of any change.
+
+    b) You must cause any work that you distribute or publish, that in
+    whole or in part contains or is derived from the Program or any
+    part thereof, to be licensed as a whole at no charge to all third
+    parties under the terms of this License.
+
+    c) If the modified program normally reads commands interactively
+    when run, you must cause it, when started running for such
+    interactive use in the most ordinary way, to print or display an
+    announcement including an appropriate copyright notice and a
+    notice that there is no warranty (or else, saying that you provide
+    a warranty) and that users may redistribute the program under
+    these conditions, and telling the user how to view a copy of this
+    License.  (Exception: if the Program itself is interactive but
+    does not normally print such an announcement, your work based on
+    the Program is not required to print an announcement.)
+
+These requirements apply to the modified work as a whole.  If
+identifiable sections of that work are not derived from the Program,
+and can be reasonably considered independent and separate works in
+themselves, then this License, and its terms, do not apply to those
+sections when you distribute them as separate works.  But when you
+distribute the same sections as part of a whole which is a work based
+on the Program, the distribution of the whole must be on the terms of
+this License, whose permissions for other licensees extend to the
+entire whole, and thus to each and every part regardless of who wrote it.
+
+Thus, it is not the intent of this section to claim rights or contest
+your rights to work written entirely by you; rather, the intent is to
+exercise the right to control the distribution of derivative or
+collective works based on the Program.
+
+In addition, mere aggregation of another work not based on the Program
+with the Program (or with a work based on the Program) on a volume of
+a storage or distribution medium does not bring the other work under
+the scope of this License.
+
+  3. You may copy and distribute the Program (or a work based on it,
+under Section 2) in object code or executable form under the terms of
+Sections 1 and 2 above provided that you also do one of the following:
+
+    a) Accompany it with the complete corresponding machine-readable
+    source code, which must be distributed under the terms of Sections
+    1 and 2 above on a medium customarily used for software interchange; or,
+
+    b) Accompany it with a written offer, valid for at least three
+    years, to give any third party, for a charge no more than your
+    cost of physically performing source distribution, a complete
+    machine-readable copy of the corresponding source code, to be
+    distributed under the terms of Sections 1 and 2 above on a medium
+    customarily used for software interchange; or,
+
+    c) Accompany it with the information you received as to the offer
+    to distribute corresponding source code.  (This alternative is
+    allowed only for noncommercial distribution and only if you
+    received the program in object code or executable form with such
+    an offer, in accord with Subsection b above.)
+
+The source code for a work means the preferred form of the work for
+making modifications to it.  For an executable work, complete source
+code means all the source code for all modules it contains, plus any
+associated interface definition files, plus the scripts used to
+control compilation and installation of the executable.  However, as a
+special exception, the source code distributed need not include
+anything that is normally distributed (in either source or binary
+form) with the major components (compiler, kernel, and so on) of the
+operating system on which the executable runs, unless that component
+itself accompanies the executable.
+
+If distribution of executable or object code is made by offering
+access to copy from a designated place, then offering equivalent
+access to copy the source code from the same place counts as
+distribution of the source code, even though third parties are not
+compelled to copy the source along with the object code.
+
+  4. You may not copy, modify, sublicense, or distribute the Program
+except as expressly provided under this License.  Any attempt
+otherwise to copy, modify, sublicense or distribute the Program is
+void, and will automatically terminate your rights under this License.
+However, parties who have received copies, or rights, from you under
+this License will not have their licenses terminated so long as such
+parties remain in full compliance.
+
+  5. You are not required to accept this License, since you have not
+signed it.  However, nothing else grants you permission to modify or
+distribute the Program or its derivative works.  These actions are
+prohibited by law if you do not accept this License.  Therefore, by
+modifying or distributing the Program (or any work based on the
+Program), you indicate your acceptance of this License to do so, and
+all its terms and conditions for copying, distributing or modifying
+the Program or works based on it.
+
+  6. Each time you redistribute the Program (or any work based on the
+Program), the recipient automatically receives a license from the
+original licensor to copy, distribute or modify the Program subject to
+these terms and conditions.  You may not impose any further
+restrictions on the recipients' exercise of the rights granted herein.
+You are not responsible for enforcing compliance by third parties to
+this License.
+
+  7. If, as a consequence of a court judgment or allegation of patent
+infringement or for any other reason (not limited to patent issues),
+conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot
+distribute so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you
+may not distribute the Program at all.  For example, if a patent
+license would not permit royalty-free redistribution of the Program by
+all those who receive copies directly or indirectly through you, then
+the only way you could satisfy both it and this License would be to
+refrain entirely from distribution of the Program.
+
+If any portion of this section is held invalid or unenforceable under
+any particular circumstance, the balance of the section is intended to
+apply and the section as a whole is intended to apply in other
+circumstances.
+
+It is not the purpose of this section to induce you to infringe any
+patents or other property right claims or to contest validity of any
+such claims; this section has the sole purpose of protecting the
+integrity of the free software distribution system, which is
+implemented by public license practices.  Many people have made
+generous contributions to the wide range of software distributed
+through that system in reliance on consistent application of that
+system; it is up to the author/donor to decide if he or she is willing
+to distribute software through any other system and a licensee cannot
+impose that choice.
+
+This section is intended to make thoroughly clear what is believed to
+be a consequence of the rest of this License.
+
+  8. If the distribution and/or use of the Program is restricted in
+certain countries either by patents or by copyrighted interfaces, the
+original copyright holder who places the Program under this License
+may add an explicit geographical distribution limitation excluding
+those countries, so that distribution is permitted only in or among
+countries not thus excluded.  In such case, this License incorporates
+the limitation as if written in the body of this License.
+
+  9. The Free Software Foundation may publish revised and/or new versions
+of the General Public License from time to time.  Such new versions will
+be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+Each version is given a distinguishing version number.  If the Program
+specifies a version number of this License which applies to it and "any
+later version", you have the option of following the terms and conditions
+either of that version or of any later version published by the Free
+Software Foundation.  If the Program does not specify a version number of
+this License, you may choose any version ever published by the Free Software
+Foundation.
+
+  10. If you wish to incorporate parts of the Program into other free
+programs whose distribution conditions are different, write to the author
+to ask for permission.  For software which is copyrighted by the Free
+Software Foundation, write to the Free Software Foundation; we sometimes
+make exceptions for this.  Our decision will be guided by the two goals
+of preserving the free status of all derivatives of our free software and
+of promoting the sharing and reuse of software generally.
+
+			    NO WARRANTY
+
+  11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
+FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN
+OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
+PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
+OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS
+TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE
+PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
+REPAIR OR CORRECTION.
+
+  12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
+REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
+INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
+OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
+TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
+YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
+PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGES.
+
+		     END OF TERMS AND CONDITIONS
+
+	Appendix: How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+convey the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) 19yy  <name of author>
+
+    This program is free software; you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation; either version 2 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program; if not, write to the Free Software
+    Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+
+Also add information on how to contact you by electronic and paper mail.
+
+If the program is interactive, make it output a short notice like this
+when it starts in an interactive mode:
+
+    Gnomovision version 69, Copyright (C) 19yy name of author
+    Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
+    This is free software, and you are welcome to redistribute it
+    under certain conditions; type `show c' for details.
+
+The hypothetical commands `show w' and `show c' should show the appropriate
+parts of the General Public License.  Of course, the commands you use may
+be called something other than `show w' and `show c'; they could even be
+mouse-clicks or menu items--whatever suits your program.
+
+You should also get your employer (if you work as a programmer) or your
+school, if any, to sign a "copyright disclaimer" for the program, if
+necessary.  Here is a sample; alter the names:
+
+  Yoyodyne, Inc., hereby disclaims all copyright interest in the program
+  `Gnomovision' (which makes passes at compilers) written by James Hacker.
+
+  <signature of Ty Coon>, 1 April 1989
+  Ty Coon, President of Vice
+
+This General Public License does not permit incorporating your program into
+proprietary programs.  If your program is a subroutine library, you may
+consider it more useful to permit linking proprietary applications with the
+library.  If this is what you want to do, use the GNU Library General
+Public License instead of this License.
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/INSTALL b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/INSTALL
new file mode 100644
index 000000000..7c5e4c6bd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/INSTALL
@@ -0,0 +1,31 @@
+
+To install:
+
+	perl Makefile.PL
+
+to construct the Makefile, then
+
+	make test
+
+to test the package.  If it fails any tests, please send me the output
+of `make test' and `perl -V'.  I'll tell you whether it is safe to go
+ahead, or I'll provide a fix.
+
+If it passes the tests, use
+
+	make install
+
+to install it.
+
+Detailed documentation is at the bottom of the lib/Text/Template.pm
+file.  You may be able to view it with the following command:
+
+        perldoc Text::Template
+ 
+Or:
+
+        perldoc lib/Text/Template.pm
+
+If you have problems, send me mail:
+
+mjd-perl-template+@plover.com
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/MANIFEST b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/MANIFEST
new file mode 100644
index 000000000..22460fe8b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/MANIFEST
@@ -0,0 +1,25 @@
+MANIFEST
+COPYING
+Artistic
+Makefile.PL
+INSTALL
+README
+lib/Text/Template.pm
+lib/Text/Template/Preprocess.pm
+t/00-version.t
+t/01-basic.t
+t/02-hash.t
+t/03-out.t
+t/04-safe.t
+t/05-safe2.t
+t/06-ofh.t
+t/07-safe3.t
+t/08-exported.t
+t/09-error.t
+t/10-delimiters.t
+t/11-prepend.t
+t/12-preprocess.t
+t/13-taint.t
+t/14-broken.t
+META.yml                                 Module meta-data (added by MakeMaker)
+META.json                                Module JSON meta-data (added by MakeMaker)
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/META.json b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/META.json
new file mode 100644
index 000000000..6b335eb94
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/META.json
@@ -0,0 +1,39 @@
+{
+   "abstract" : "unknown",
+   "author" : [
+      "unknown"
+   ],
+   "dynamic_config" : 1,
+   "generated_by" : "ExtUtils::MakeMaker version 6.62, CPAN::Meta::Converter version 2.120630",
+   "license" : [
+      "unknown"
+   ],
+   "meta-spec" : {
+      "url" : "http://search.cpan.org/perldoc?CPAN::Meta::Spec",
+      "version" : "2"
+   },
+   "name" : "Text-Template",
+   "no_index" : {
+      "directory" : [
+         "t",
+         "inc"
+      ]
+   },
+   "prereqs" : {
+      "build" : {
+         "requires" : {
+            "ExtUtils::MakeMaker" : "0"
+         }
+      },
+      "configure" : {
+         "requires" : {
+            "ExtUtils::MakeMaker" : "0"
+         }
+      },
+      "runtime" : {
+         "requires" : {}
+      }
+   },
+   "release_status" : "stable",
+   "version" : "1.46"
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/META.yml b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/META.yml
new file mode 100644
index 000000000..a2e271594
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/META.yml
@@ -0,0 +1,21 @@
+---
+abstract: unknown
+author:
+  - unknown
+build_requires:
+  ExtUtils::MakeMaker: 0
+configure_requires:
+  ExtUtils::MakeMaker: 0
+dynamic_config: 1
+generated_by: 'ExtUtils::MakeMaker version 6.62, CPAN::Meta::Converter version 2.120630'
+license: unknown
+meta-spec:
+  url: http://module-build.sourceforge.net/META-spec-v1.4.html
+  version: 1.4
+name: Text-Template
+no_index:
+  directory:
+    - t
+    - inc
+requires: {}
+version: 1.46
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/Makefile.PL b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/Makefile.PL
new file mode 100644
index 000000000..491e03cb0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/Makefile.PL
@@ -0,0 +1,7 @@
+use ExtUtils::MakeMaker;
+WriteMakefile(
+	      NAME => 'Text::Template',
+	      VERSION_FROM => 'lib/Text/Template.pm',
+#	      'linkext' => {LINKTYPE => ''},
+	      'dist' => {COMPRESS => 'gzip', SUFFIX => 'gz'},
+);
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/README b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/README
new file mode 100644
index 000000000..e184d8cd2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/README
@@ -0,0 +1,339 @@
+
+Text::Template v1.46
+
+This is a library for generating form letters, building HTML pages, or
+filling in templates generally.  A `template' is a piece of text that
+has little Perl programs embedded in it here and there.  When you
+`fill in' a template, you evaluate the little programs and replace
+them with their values.  
+
+Here's an example of a template:
+
+	Dear {$title} {$lastname},
+
+	It has come to our attention that you are delinquent in your
+	{$monthname[$last_paid_month]} payment.  Please remit
+	${sprintf("%.2f", $amount)} immediately, or your patellae may
+	be needlessly endangered.
+
+			Love,
+
+			Mark "{nickname(rand 20)}" Dominus
+
+
+The result of filling in this template is a string, which might look
+something like this:
+
+	Dear Mr. Gates,
+
+	It has come to our attention that you are delinquent in your
+	February payment.  Please remit
+	$392.12 immediately, or your patellae may
+	be needlessly endangered.
+
+
+			Love,
+
+			Mark "Vizopteryx" Dominus
+
+You can store a template in a file outside your program.  People can
+modify the template without modifying the program.  You can separate
+the formatting details from the main code, and put the formatting
+parts of the program into the template.  That prevents code bloat and
+encourages functional separation.
+
+You can fill in the template in a `Safe' compartment.  This means that
+if you don't trust the person who wrote the code in the template, you
+won't have to worry that they are tampering with your program when you
+execute it.  
+
+----------------------------------------------------------------
+
+Text::Template was originally released some time in late 1995 or early
+1996.  After three years of study and investigation, I rewrote it from
+scratch in January 1999.  The new version, 1.0, was much faster,
+delivered better functionality and was almost 100% backward-compatible
+with the previous beta versions.
+
+I have added a number of useful features and conveniences since the
+1.0 release, while still retaining backward compatibility.  With one
+merely cosmetic change, the current version of Text::Template passes
+the test suite that the old beta versions passed.
+
+Questions or comments should be addressed to
+mjd-perl-template+@plover.com.  This address goes directly to me, and
+not to anyone else; it is not a mailing list address.
+
+To receive occasional announcements of new versions of T::T, send an
+empty note to mjd-perl-template-request@plover.com.  This mailing list
+is not for discussion; it is for announcements only.  Therefore, there
+is no address for sending messages to the list.
+
+You can get the most recent version of Text::Template, news, comments,
+and other collateral information from
+<URL:http://www.plover.com/~mjd/perl/Template/>.
+
+----------------------------------------------------------------
+
+What's new in v1.46 since v1.44:
+
+        Thanks to Rik Signes, there is a new
+        Text::Template->append_text_to_output method, which
+        Text::Template always uses whenever it wants to emit output.
+        You can subclass this to get control over the output, for
+        example for postprocessing.
+
+        A spurious warning is no longer emitted when the TYPE
+        parameter to ->new is omitted.
+
+----------------------------------------------------------------
+What's new in v1.44 since v1.43: 
+
+This is a maintentance release.  There are no feature changes.
+
+        _scrubpkg, which was responsible for eptying out temporary
+        packages after the module had done with them, wasn't always
+        working; the result was memory-leaks in long-running
+        applications.  This should be fixed now, and there is a test
+        in the test suite for it.
+
+        Minor changes to the test suite to prevent spurious errors.
+
+        Minor documentation changes.
+
+----------------------------------------------------------------
+What's new in v1.43 since v1.42:
+
+        The ->new method now fails immediately and sets
+        $Text::Template::ERROR if the file that is named by a filename
+        argument does not exist or cannot be opened for some other
+        reason.  Formerly, the constructor would succeed and the
+        ->fill_in call would fail.
+
+----------------------------------------------------------------
+
+What's new in v1.42 since v1.41:
+
+This is a maintentance release.  There are no feature changes.
+
+        Fixed a bug relating to use of UNTAINT under perl 5.005_03 and
+        possibly other versions.
+
+        Taint-related tests are now more comprehensive.
+----------------------------------------------------------------
+
+What's new in v1.41 since v1.40:
+
+This is a maintentance release.  There are no feature changes.
+
+        Tests now work correctly on Windows systems and possibly on
+        other non-unix systems.
+
+----------------------------------------------------------------
+
+What's new in v1.40 since v1.31:
+
+        New UNTAINT option tells the module that it is safe to 'eval'
+        code even though it has come from a file or filehandle.
+
+        Code added to prevent memory leaks when filling many
+        templates.  Thanks to Itamar Almeida de Carvalho.
+
+        Bug fix:  $OUT was not correctly initialized when used in
+        conjunction with SAFE.
+
+        You may now use a glob ref when passing a filehandle to the
+        ->new funcion.  Formerly, a glob was reuqired.
+
+        New subclass:  Text::Template::Preprocess.  Just like
+        Text::Template, but you may supply a PREPROCESS option in the
+        constructor or the fill_in call; this is a function which
+        receives each code fragment prior to evaluation, and which may
+        modify and return the fragment; the modified fragment is what
+        is evaluated.
+
+        Error messages passed to BROKEN subroutines will now report
+        the correct line number of the template at which the error
+        occurred:
+
+                Illegal division by zero at template line 37.
+
+        If the template comes from a file, the filename will be
+        reported as well:
+
+                Illegal division by zero at catalog.tmpl line 37.
+
+
+        INCOMPATIBLE CHANGE:
+
+        The format of the default error message has changed.  It used
+        to look like:
+
+                Program fragment at line 30 delivered error ``Illegal division by zero''
+
+        It now looks like:
+
+                Program fragment delivered error ``Illegal division by zero at catalog.tmpl line 37''
+
+        Note that the default message used to report the line number
+        at which the program fragment began; it now reports the line
+        number at which the error actually occurred.
+
+----------------------------------------------------------------
+What's new in v1.31 since v1.23:
+
+	Just bug fixes---fill_in_string was failing.  Thanks to 
+        Donald L. Greer Jr. for the test case.
+
+----------------------------------------------------------------
+What's new in v1.23 since v1.22:
+
+	Small bug fix:  DELIMITER and other arguments were being
+	ignored in calls to fill_in_file and fill_this_in.  (Thanks to
+	Jonathan Roy for reporting this.)
+
+----------------------------------------------------------------
+What's new in v1.22 since v1.20:
+
+	You can now specify that certain Perl statements be prepended
+	to the beginning of every program fragment in a template,
+	either per template, or for all templates, or for the duration
+	of only one call to fill_in.  This is useful, for example, if
+	you want to enable `strict' checks in your templates but you
+	don't want to manually add `use strict' to the front of every
+	program fragment everywhere.
+
+----------------------------------------------------------------
+What's new in v1.20 since v1.12:
+
+	You can now specify that the program fragment delimiters are
+	strings other than { and }.  This has three interesting
+	effects: First, it changes the delimiter strings.  Second, it
+	disables the special meaning of \, so you have to be really,
+	really sure that the delimiters will not appear in your
+	templates.  And third, because of the simplifications
+	introduced by the elimination of \ processing, template
+	parsing is 20-25% faster.
+
+	See the manual section on `Alternative Delimiters'.
+
+	Fixed bug having to do with undefined values in HASH options.
+	In particular, Text::Template no longer generates a warning if
+	you try to give a variable an undefined value.
+
+----------------------------------------------------------------
+
+What's new in v1.12 since v1.11:
+
+	I forgot to say that Text::Template ISA Exporter, so the
+	exported functions never got exported.  Duhhh!
+
+	Template TYPEs are now case-insensitive.  The `new' method now
+	diagnoses attempts to use an invalid TYPE.
+
+	More tests for these things.
+
+----------------------------------------------------------------
+
+What's new in v1.11 since v1.10:
+
+	Fixed a bug in the way backslashes were processed.  The 1.10
+	behavior was incompatible with the beta versions and was also
+	inconvenient.  (`\n' in templates was replaced with `n' before
+	it was given to Perl for evaluation.)  The new behavior is
+	also incompatible with the beta versions, but it is only a
+	little bit incompatible, and it is probbaly better.
+
+	Documentation for the new behavior, and tests for the bug.
+
+----------------------------------------------------------------
+
+What's new in v1.10 since v1.03:
+
+	New OUTPUT option delivers template results directly to a
+	filehandle instead of making them into a string.  Saves space
+	and time. 
+
+	PACKAGE and HASH now work intelligently with SAFE.
+
+	Fragments may now output data directly to the template, rather
+	than having to arrange to return it as a return value at the
+	end.  This means that where you used to have to write this:
+
+			{ my $blist = '';
+		          foreach $i (@items) {
+		            $blist .= qq{  * $i\n};
+		          }    
+		          $blist;
+		        } 
+
+	You can now write this instead, because $OUT is special.
+
+			{ foreach $i (@items) {
+		            $OUT.= "  * $i\n";
+		          }    
+		        } 
+
+	(`A spoonful of sugar makes the medicine go down.')
+
+	Fixed some small bugs.  Worked around a bug in Perl that does
+	the wrong thing with $x = <Y> when $x contains a glob.
+
+	More documentation.  Errors fixed.
+
+	Lots more tests.  
+
+----------------------------------------------------------------
+
+What's new in v1.03 since v1.0:
+
+	Code added to support HASH option to fill_in.
+	(Incl. `_gensym' function.)
+	
+	Documentation for HASH.
+	
+	New test file for HASH.
+	
+	Note about failure of lexical variables to propagate into
+ 	templates.  Why does this surprise people?
+	
+	Bug fix: program fragments are evaluated in an environment with
+ 	`no strict' by default.  Otherwise, you get a lot of `Global
+ 	symbol "$v" requires explicit package name' failures.  Why didn't
+ 	the test program pick this up?  Because the only variable the test
+ 	program ever used was `$a', which is exempt.  Duhhhhh.
+	
+	Fixed the test program.
+	
+	Various minor documentation fixes.
+
+
+
+----------------------------------------------------------------
+
+Improvements of 1.0 over the old 0.1beta:
+
+New features:
+
+      At least twice as fast 
+
+      Better support for filling out the same template more than once 
+
+      Now supports evaluation of program fragments in Safe
+      compartments. (Thanks, Jonathan!)  
+
+      Better argument syntax 
+
+      More convenience functions 
+
+      The parser is much better and simpler. 
+
+      Once a template is parsed, the parsed version is stored so that
+      it needn't be parsed again.  
+
+      BROKEN function behavior is rationalized. You can now pass an
+      arbitrary argument to your BROKEN function, or return a value
+      from it to the main program.  
+
+      Documentation overhauled. 
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/lib/Text/Template.pm b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/lib/Text/Template.pm
new file mode 100644
index 000000000..dc4f3bac7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/lib/Text/Template.pm
@@ -0,0 +1,1973 @@
+# -*- perl -*-
+# Text::Template.pm
+#
+# Fill in `templates'
+#
+# Copyright 2013 M. J. Dominus.
+# You may copy and distribute this program under the
+# same terms as Perl iteself.  
+# If in doubt, write to mjd-perl-template+@plover.com for a license.
+#
+# Version 1.46
+
+package Text::Template;
+require 5.004;
+use Exporter;
+@ISA = qw(Exporter);
+@EXPORT_OK = qw(fill_in_file fill_in_string TTerror);
+use vars '$ERROR';
+use strict;
+
+$Text::Template::VERSION = '1.46';
+my %GLOBAL_PREPEND = ('Text::Template' => '');
+
+sub Version {
+  $Text::Template::VERSION;
+}
+
+sub _param {
+  my $kk;
+  my ($k, %h) = @_;
+  for $kk ($k, "\u$k", "\U$k", "-$k", "-\u$k", "-\U$k") {
+    return $h{$kk} if exists $h{$kk};
+  }
+  return;
+}
+
+sub always_prepend
+{
+  my $pack = shift;
+  my $old = $GLOBAL_PREPEND{$pack};
+  $GLOBAL_PREPEND{$pack} = shift;
+  $old;
+}
+
+{
+  my %LEGAL_TYPE;
+  BEGIN { 
+    %LEGAL_TYPE = map {$_=>1} qw(FILE FILEHANDLE STRING ARRAY);
+  }
+  sub new {
+    my $pack = shift;
+    my %a = @_;
+    my $stype = uc(_param('type', %a) || "FILE");
+    my $source = _param('source', %a);
+    my $untaint = _param('untaint', %a);
+    my $prepend = _param('prepend', %a);
+    my $alt_delim = _param('delimiters', %a);
+    my $broken = _param('broken', %a);
+    unless (defined $source) {
+      require Carp;
+      Carp::croak("Usage: $ {pack}::new(TYPE => ..., SOURCE => ...)");
+    }
+    unless ($LEGAL_TYPE{$stype}) {
+      require Carp;
+      Carp::croak("Illegal value `$stype' for TYPE parameter");
+    }
+    my $self = {TYPE => $stype,
+		PREPEND => $prepend,
+                UNTAINT => $untaint,
+                BROKEN => $broken,
+		(defined $alt_delim ? (DELIM => $alt_delim) : ()),
+	       };
+    # Under 5.005_03, if any of $stype, $prepend, $untaint, or $broken
+    # are tainted, all the others become tainted too as a result of
+    # sharing the expression with them.  We install $source separately
+    # to prevent it from acquiring a spurious taint.
+    $self->{SOURCE} = $source;
+
+    bless $self => $pack;
+    return unless $self->_acquire_data;
+    
+    $self;
+  }
+}
+
+# Convert template objects of various types to type STRING,
+# in which the template data is embedded in the object itself.
+sub _acquire_data {
+  my ($self) = @_;
+  my $type = $self->{TYPE};
+  if ($type eq 'STRING') {
+    # nothing necessary    
+  } elsif ($type eq 'FILE') {
+    my $data = _load_text($self->{SOURCE});
+    unless (defined $data) {
+      # _load_text already set $ERROR
+      return undef;
+    }
+    if ($self->{UNTAINT} && _is_clean($self->{SOURCE})) {
+      _unconditionally_untaint($data);
+    }
+    $self->{TYPE} = 'STRING';
+    $self->{FILENAME} = $self->{SOURCE};
+    $self->{SOURCE} = $data;
+  } elsif ($type eq 'ARRAY') {
+    $self->{TYPE} = 'STRING';
+    $self->{SOURCE} = join '', @{$self->{SOURCE}};
+  } elsif ($type eq 'FILEHANDLE') {
+    $self->{TYPE} = 'STRING';
+    local $/;
+    my $fh = $self->{SOURCE};
+    my $data = <$fh>; # Extra assignment avoids bug in Solaris perl5.00[45].
+    if ($self->{UNTAINT}) {
+      _unconditionally_untaint($data);
+    }
+    $self->{SOURCE} = $data;
+  } else {
+    # This should have been caught long ago, so it represents a 
+    # drastic `can't-happen' sort of failure
+    my $pack = ref $self;
+    die "Can only acquire data for $pack objects of subtype STRING, but this is $type; aborting";
+  }
+  $self->{DATA_ACQUIRED} = 1;
+}
+
+sub source {
+  my ($self) = @_;
+  $self->_acquire_data unless $self->{DATA_ACQUIRED};
+  return $self->{SOURCE};
+}
+
+sub set_source_data {
+  my ($self, $newdata) = @_;
+  $self->{SOURCE} = $newdata;
+  $self->{DATA_ACQUIRED} = 1;
+  $self->{TYPE} = 'STRING';
+  1;
+}
+
+sub compile {
+  my $self = shift;
+
+  return 1 if $self->{TYPE} eq 'PREPARSED';
+
+  return undef unless $self->_acquire_data;
+  unless ($self->{TYPE} eq 'STRING') {
+    my $pack = ref $self;
+    # This should have been caught long ago, so it represents a 
+    # drastic `can't-happen' sort of failure
+    die "Can only compile $pack objects of subtype STRING, but this is $self->{TYPE}; aborting";
+  }
+
+  my @tokens;
+  my $delim_pats = shift() || $self->{DELIM};
+
+  
+
+  my ($t_open, $t_close) = ('{', '}');
+  my $DELIM;			# Regex matches a delimiter if $delim_pats
+  if (defined $delim_pats) {
+    ($t_open, $t_close) = @$delim_pats;
+    $DELIM = "(?:(?:\Q$t_open\E)|(?:\Q$t_close\E))";
+    @tokens = split /($DELIM|\n)/, $self->{SOURCE};
+  } else {
+    @tokens = split /(\\\\(?=\\*[{}])|\\[{}]|[{}\n])/, $self->{SOURCE};
+  }
+  my $state = 'TEXT';
+  my $depth = 0;
+  my $lineno = 1;
+  my @content;
+  my $cur_item = '';
+  my $prog_start;
+  while (@tokens) {
+    my $t = shift @tokens;
+    next if $t eq '';
+    if ($t eq $t_open) {	# Brace or other opening delimiter
+      if ($depth == 0) {
+	push @content, [$state, $cur_item, $lineno] if $cur_item ne '';
+	$cur_item = '';
+	$state = 'PROG';
+	$prog_start = $lineno;
+      } else {
+	$cur_item .= $t;
+      }
+      $depth++;
+    } elsif ($t eq $t_close) {	# Brace or other closing delimiter
+      $depth--;
+      if ($depth < 0) {
+	$ERROR = "Unmatched close brace at line $lineno";
+	return undef;
+      } elsif ($depth == 0) {
+	push @content, [$state, $cur_item, $prog_start] if $cur_item ne '';
+	$state = 'TEXT';
+	$cur_item = '';
+      } else {
+	$cur_item .= $t;
+      }
+    } elsif (!$delim_pats && $t eq '\\\\') { # precedes \\\..\\\{ or \\\..\\\}
+      $cur_item .= '\\';
+    } elsif (!$delim_pats && $t =~ /^\\([{}])$/) { # Escaped (literal) brace?
+	$cur_item .= $1;
+    } elsif ($t eq "\n") {	# Newline
+      $lineno++;
+      $cur_item .= $t;
+    } else {			# Anything else
+      $cur_item .= $t;
+    }
+  }
+
+  if ($state eq 'PROG') {
+    $ERROR = "End of data inside program text that began at line $prog_start";
+    return undef;
+  } elsif ($state eq 'TEXT') {
+    push @content, [$state, $cur_item, $lineno] if $cur_item ne '';
+  } else {
+    die "Can't happen error #1";
+  }
+  
+  $self->{TYPE} = 'PREPARSED';
+  $self->{SOURCE} = \@content;
+  1;
+}
+
+sub prepend_text {
+  my ($self) = @_;
+  my $t = $self->{PREPEND};
+  unless (defined $t) {
+    $t = $GLOBAL_PREPEND{ref $self};
+    unless (defined $t) {
+      $t = $GLOBAL_PREPEND{'Text::Template'};
+    }
+  }
+  $self->{PREPEND} = $_[1] if $#_ >= 1;
+  return $t;
+}
+
+sub fill_in {
+  my $fi_self = shift;
+  my %fi_a = @_;
+
+  unless ($fi_self->{TYPE} eq 'PREPARSED') {
+    my $delims = _param('delimiters', %fi_a);
+    my @delim_arg = (defined $delims ? ($delims) : ());
+    $fi_self->compile(@delim_arg)
+      or return undef;
+  }
+
+  my $fi_varhash = _param('hash', %fi_a);
+  my $fi_package = _param('package', %fi_a) ;
+  my $fi_broken  = 
+    _param('broken', %fi_a)  || $fi_self->{BROKEN} || \&_default_broken;
+  my $fi_broken_arg = _param('broken_arg', %fi_a) || [];
+  my $fi_safe = _param('safe', %fi_a);
+  my $fi_ofh = _param('output', %fi_a);
+  my $fi_eval_package;
+  my $fi_scrub_package = 0;
+  my $fi_filename = _param('filename') || $fi_self->{FILENAME} || 'template';
+
+  my $fi_prepend = _param('prepend', %fi_a);
+  unless (defined $fi_prepend) {
+    $fi_prepend = $fi_self->prepend_text;
+  }
+
+  if (defined $fi_safe) {
+    $fi_eval_package = 'main';
+  } elsif (defined $fi_package) {
+    $fi_eval_package = $fi_package;
+  } elsif (defined $fi_varhash) {
+    $fi_eval_package = _gensym();
+    $fi_scrub_package = 1;
+  } else {
+    $fi_eval_package = caller;
+  }
+
+  my $fi_install_package;
+  if (defined $fi_varhash) {
+    if (defined $fi_package) {
+      $fi_install_package = $fi_package;
+    } elsif (defined $fi_safe) {
+      $fi_install_package = $fi_safe->root;
+    } else {
+      $fi_install_package = $fi_eval_package; # The gensymmed one
+    }
+    _install_hash($fi_varhash => $fi_install_package);
+  }
+
+  if (defined $fi_package && defined $fi_safe) {
+    no strict 'refs';
+    # Big fat magic here: Fix it so that the user-specified package
+    # is the default one available in the safe compartment.
+    *{$fi_safe->root . '::'} = \%{$fi_package . '::'};   # LOD
+  }
+
+  my $fi_r = '';
+  my $fi_item;
+  foreach $fi_item (@{$fi_self->{SOURCE}}) {
+    my ($fi_type, $fi_text, $fi_lineno) = @$fi_item;
+    if ($fi_type eq 'TEXT') {
+      $fi_self->append_text_to_output(
+        text   => $fi_text,
+        handle => $fi_ofh,
+        out    => \$fi_r,
+        type   => $fi_type,
+      );
+    } elsif ($fi_type eq 'PROG') {
+      no strict;
+      my $fi_lcomment = "#line $fi_lineno $fi_filename";
+      my $fi_progtext = 
+        "package $fi_eval_package; $fi_prepend;\n$fi_lcomment\n$fi_text;";
+      my $fi_res;
+      my $fi_eval_err = '';
+      if ($fi_safe) {
+        $fi_safe->reval(q{undef $OUT});
+	$fi_res = $fi_safe->reval($fi_progtext);
+	$fi_eval_err = $@;
+	my $OUT = $fi_safe->reval('$OUT');
+	$fi_res = $OUT if defined $OUT;
+      } else {
+	my $OUT;
+	$fi_res = eval $fi_progtext;
+	$fi_eval_err = $@;
+	$fi_res = $OUT if defined $OUT;
+      }
+
+      # If the value of the filled-in text really was undef,
+      # change it to an explicit empty string to avoid undefined
+      # value warnings later.
+      $fi_res = '' unless defined $fi_res;
+
+      if ($fi_eval_err) {
+	$fi_res = $fi_broken->(text => $fi_text,
+			       error => $fi_eval_err,
+			       lineno => $fi_lineno,
+			       arg => $fi_broken_arg,
+			       );
+	if (defined $fi_res) {
+          $fi_self->append_text_to_output(
+            text   => $fi_res,
+            handle => $fi_ofh,
+            out    => \$fi_r,
+            type   => $fi_type,
+          );
+	} else {
+	  return $fi_res;		# Undefined means abort processing
+	}
+      } else {
+        $fi_self->append_text_to_output(
+          text   => $fi_res,
+          handle => $fi_ofh,
+          out    => \$fi_r,
+          type   => $fi_type,
+        );
+      }
+    } else {
+      die "Can't happen error #2";
+    }
+  }
+
+  _scrubpkg($fi_eval_package) if $fi_scrub_package;
+  defined $fi_ofh ? 1 : $fi_r;
+}
+
+sub append_text_to_output {
+  my ($self, %arg) = @_;
+
+  if (defined $arg{handle}) {
+    print { $arg{handle} } $arg{text};
+  } else {
+    ${ $arg{out} } .= $arg{text};
+  }
+
+  return;
+}
+
+sub fill_this_in {
+  my $pack = shift;
+  my $text = shift;
+  my $templ = $pack->new(TYPE => 'STRING', SOURCE => $text, @_)
+    or return undef;
+  $templ->compile or return undef;
+  my $result = $templ->fill_in(@_);
+  $result;
+}
+
+sub fill_in_string {
+  my $string = shift;
+  my $package = _param('package', @_);
+  push @_, 'package' => scalar(caller) unless defined $package;
+  Text::Template->fill_this_in($string, @_);
+}
+
+sub fill_in_file {
+  my $fn = shift;
+  my $templ = Text::Template->new(TYPE => 'FILE', SOURCE => $fn, @_)
+    or return undef;
+  $templ->compile or return undef;
+  my $text = $templ->fill_in(@_);
+  $text;
+}
+
+sub _default_broken {
+  my %a = @_;
+  my $prog_text = $a{text};
+  my $err = $a{error};
+  my $lineno = $a{lineno};
+  chomp $err;
+#  $err =~ s/\s+at .*//s;
+  "Program fragment delivered error ``$err''";
+}
+
+sub _load_text {
+  my $fn = shift;
+  local *F;
+  unless (open F, $fn) {
+    $ERROR = "Couldn't open file $fn: $!";
+    return undef;
+  }
+  local $/;
+  <F>;
+}
+
+sub _is_clean {
+  my $z;
+  eval { ($z = join('', @_)), eval '#' . substr($z,0,0); 1 }   # LOD
+}
+
+sub _unconditionally_untaint {
+  for (@_) {
+    ($_) = /(.*)/s;
+  }
+}
+
+{
+  my $seqno = 0;
+  sub _gensym {
+    __PACKAGE__ . '::GEN' . $seqno++;
+  }
+  sub _scrubpkg {
+    my $s = shift;
+    $s =~ s/^Text::Template:://;
+    no strict 'refs';
+    my $hash = $Text::Template::{$s."::"};
+    foreach my $key (keys %$hash) {
+      undef $hash->{$key};
+    }
+  }
+}
+  
+# Given a hashful of variables (or a list of such hashes)
+# install the variables into the specified package,
+# overwriting whatever variables were there before.
+sub _install_hash {
+  my $hashlist = shift;
+  my $dest = shift;
+  if (UNIVERSAL::isa($hashlist, 'HASH')) {
+    $hashlist = [$hashlist];
+  }
+  my $hash;
+  foreach $hash (@$hashlist) {
+    my $name;
+    foreach $name (keys %$hash) {
+      my $val = $hash->{$name};
+      no strict 'refs';
+      local *SYM = *{"$ {dest}::$name"};
+      if (! defined $val) {
+	delete ${"$ {dest}::"}{$name};
+      } elsif (ref $val) {
+	*SYM = $val;
+      } else {
+ 	*SYM = \$val;
+      }
+    }
+  }
+}
+
+sub TTerror { $ERROR }
+
+1;
+
+
+=head1 NAME 
+
+Text::Template - Expand template text with embedded Perl
+
+=head1 VERSION
+
+This file documents C<Text::Template> version B<1.46>
+
+=head1 SYNOPSIS
+
+ use Text::Template;
+
+
+ $template = Text::Template->new(TYPE => 'FILE',  SOURCE => 'filename.tmpl');
+ $template = Text::Template->new(TYPE => 'ARRAY', SOURCE => [ ... ] );
+ $template = Text::Template->new(TYPE => 'FILEHANDLE', SOURCE => $fh );
+ $template = Text::Template->new(TYPE => 'STRING', SOURCE => '...' );
+ $template = Text::Template->new(PREPEND => q{use strict;}, ...);
+
+ # Use a different template file syntax:
+ $template = Text::Template->new(DELIMITERS => [$open, $close], ...);
+
+ $recipient = 'King';
+ $text = $template->fill_in();  # Replaces `{$recipient}' with `King'
+ print $text;
+
+ $T::recipient = 'Josh';
+ $text = $template->fill_in(PACKAGE => T);
+
+ # Pass many variables explicitly
+ $hash = { recipient => 'Abed-Nego',
+           friends => [ 'me', 'you' ],
+           enemies => { loathsome => 'Bill Gates',
+                        fearsome => 'Larry Ellison' },
+         };
+ $text = $template->fill_in(HASH => $hash, ...);
+ # $recipient is Abed-Nego,
+ # @friends is ( 'me', 'you' ),
+ # %enemies is ( loathsome => ..., fearsome => ... )
+
+
+ # Call &callback in case of programming errors in template
+ $text = $template->fill_in(BROKEN => \&callback, BROKEN_ARG => $ref, ...);
+
+ # Evaluate program fragments in Safe compartment with restricted permissions
+ $text = $template->fill_in(SAFE => $compartment, ...);
+
+ # Print result text instead of returning it
+ $success = $template->fill_in(OUTPUT => \*FILEHANDLE, ...);
+
+ # Parse template with different template file syntax:
+ $text = $template->fill_in(DELIMITERS => [$open, $close], ...);
+ # Note that this is *faster* than using the default delimiters
+
+ # Prepend specified perl code to each fragment before evaluating:
+ $text = $template->fill_in(PREPEND => q{use strict 'vars';}, ...);
+
+ use Text::Template 'fill_in_string';
+ $text = fill_in_string( <<EOM, PACKAGE => 'T', ...);
+ Dear {$recipient},
+ Pay me at once.
+        Love, 
+         G.V.
+ EOM
+
+ use Text::Template 'fill_in_file';
+ $text = fill_in_file($filename, ...);
+
+ # All templates will always have `use strict vars' attached to all fragments
+ Text::Template->always_prepend(q{use strict 'vars';});
+
+=head1 DESCRIPTION
+
+This is a library for generating form letters, building HTML pages, or
+filling in templates generally.  A `template' is a piece of text that
+has little Perl programs embedded in it here and there.  When you
+`fill in' a template, you evaluate the little programs and replace
+them with their values.  
+
+You can store a template in a file outside your program.  People can
+modify the template without modifying the program.  You can separate
+the formatting details from the main code, and put the formatting
+parts of the program into the template.  That prevents code bloat and
+encourages functional separation.
+
+=head2 Example
+
+Here's an example of a template, which we'll suppose is stored in the
+file C<formletter.tmpl>:
+
+	Dear {$title} {$lastname},
+
+	It has come to our attention that you are delinquent in your
+	{$monthname[$last_paid_month]} payment.  Please remit
+	${sprintf("%.2f", $amount)} immediately, or your patellae may
+	be needlessly endangered.
+
+			Love,
+
+			Mark "Vizopteryx" Dominus
+
+
+The result of filling in this template is a string, which might look
+something like this:
+
+	Dear Mr. Gates,
+
+	It has come to our attention that you are delinquent in your
+	February payment.  Please remit
+	$392.12 immediately, or your patellae may
+	be needlessly endangered.
+
+
+			Love,
+
+			Mark "Vizopteryx" Dominus
+
+Here is a complete program that transforms the example
+template into the example result, and prints it out:
+
+	use Text::Template;
+
+	my $template = Text::Template->new(SOURCE => 'formletter.tmpl')
+	  or die "Couldn't construct template: $Text::Template::ERROR";
+
+	my @monthname = qw(January February March April May June
+                           July August September October November December);
+	my %vars = (title => 'Mr.',
+		    firstname => 'Bill',
+		    lastname => 'Gates',
+		    last_paid_month => 1,   # February
+		    amount => 392.12,
+		    monthname => \@monthname,
+		   );
+
+	my $result = $template->fill_in(HASH => \%vars);
+
+	if (defined $result) { print $result }
+	else { die "Couldn't fill in template: $Text::Template::ERROR" }
+
+
+=head2 Philosophy
+
+When people make a template module like this one, they almost always
+start by inventing a special syntax for substitutions.  For example,
+they build it so that a string like C<%%VAR%%> is replaced with the
+value of C<$VAR>.  Then they realize the need extra formatting, so
+they put in some special syntax for formatting.  Then they need a
+loop, so they invent a loop syntax.  Pretty soon they have a new
+little template language.
+
+This approach has two problems: First, their little language is
+crippled. If you need to do something the author hasn't thought of,
+you lose.  Second: Who wants to learn another language?  You already
+know Perl, so why not use it?
+
+C<Text::Template> templates are programmed in I<Perl>.  You embed Perl
+code in your template, with C<{> at the beginning and C<}> at the end.
+If you want a variable interpolated, you write it the way you would in
+Perl.  If you need to make a loop, you can use any of the Perl loop
+constructions.  All the Perl built-in functions are available.
+
+=head1 Details
+
+=head2 Template Parsing
+
+The C<Text::Template> module scans the template source.  An open brace
+C<{> begins a program fragment, which continues until the matching
+close brace C<}>.  When the template is filled in, the program
+fragments are evaluated, and each one is replaced with the resulting
+value to yield the text that is returned.
+
+A backslash C<\> in front of a brace (or another backslash that is in
+front of a brace) escapes its special meaning.  The result of filling
+out this template:
+
+	\{ The sum of 1 and 2 is {1+2}  \}
+
+is
+
+	{ The sum of 1 and 2 is 3  }
+
+If you have an unmatched brace, C<Text::Template> will return a
+failure code and a warning about where the problem is.  Backslashes
+that do not precede a brace are passed through unchanged.  If you have
+a template like this:
+
+	{ "String that ends in a newline.\n" }
+
+The backslash inside the string is passed through to Perl unchanged,
+so the C<\n> really does turn into a newline.  See the note at the end
+for details about the way backslashes work.  Backslash processing is
+I<not> done when you specify alternative delimiters with the
+C<DELIMITERS> option.  (See L<"Alternative Delimiters">, below.)
+
+Each program fragment should be a sequence of Perl statements, which
+are evaluated the usual way.  The result of the last statement
+executed will be evaluted in scalar context; the result of this
+statement is a string, which is interpolated into the template in
+place of the program fragment itself.
+
+The fragments are evaluated in order, and side effects from earlier
+fragments will persist into later fragments:
+
+	{$x = @things; ''}The Lord High Chamberlain has gotten {$x}
+	things for me this year.  
+	{ $diff = $x - 17; 
+	  $more = 'more'
+	  if ($diff == 0) {
+	    $diff = 'no';
+	  } elsif ($diff < 0) {
+	    $more = 'fewer';
+	  } 
+          '';
+	} 
+	That is {$diff} {$more} than he gave me last year.
+
+The value of C<$x> set in the first line will persist into the next
+fragment that begins on the third line, and the values of C<$diff> and
+C<$more> set in the second fragment will persist and be interpolated
+into the last line.  The output will look something like this:
+
+	The Lord High Chamberlain has gotten 42
+	things for me this year.  
+
+	That is 25 more than he gave me last year.
+
+That is all the syntax there is.  
+
+=head2 The C<$OUT> variable
+
+There is one special trick you can play in a template.  Here is the
+motivation for it:  Suppose you are going to pass an array, C<@items>,
+into the template, and you want the template to generate a bulleted
+list with a header, like this:
+
+	Here is a list of the things I have got for you since 1907:
+	  * Ivory
+	  * Apes
+	  * Peacocks
+	  * ...
+
+One way to do it is with a template like this:
+
+	Here is a list of the things I have got for you since 1907:
+	{ my $blist = '';
+          foreach $i (@items) {
+            $blist .= qq{  * $i\n};
+          }    
+          $blist;
+        } 
+
+Here we construct the list in a variable called C<$blist>, which we
+return at the end.  This is a little cumbersome.  There is a shortcut.
+
+Inside of templates, there is a special variable called C<$OUT>.
+Anything you append to this variable will appear in the output of the
+template.  Also, if you use C<$OUT> in a program fragment, the normal
+behavior, of replacing the fragment with its return value, is
+disabled; instead the fragment is replaced with the value of C<$OUT>.
+This means that you can write the template above like this:
+
+	Here is a list of the things I have got for you since 1907:
+	{ foreach $i (@items) {
+            $OUT .= "  * $i\n";
+          }    
+        } 
+
+C<$OUT> is reinitialized to the empty string at the start of each
+program fragment.  It is private to C<Text::Template>, so 
+you can't use a variable named C<$OUT> in your template without
+invoking the special behavior.
+
+=head2 General Remarks
+
+All C<Text::Template> functions return C<undef> on failure, and set the
+variable C<$Text::Template::ERROR> to contain an explanation of what
+went wrong.  For example, if you try to create a template from a file
+that does not exist, C<$Text::Template::ERROR> will contain something like:
+
+	Couldn't open file xyz.tmpl: No such file or directory
+
+=head2 C<new>
+
+	$template = new Text::Template ( TYPE => ..., SOURCE => ... );
+
+This creates and returns a new template object.  C<new> returns
+C<undef> and sets C<$Text::Template::ERROR> if it can't create the
+template object.  C<SOURCE> says where the template source code will
+come from.  C<TYPE> says what kind of object the source is.
+
+The most common type of source is a file:
+
+	new Text::Template ( TYPE => 'FILE', SOURCE => $filename );
+
+This reads the template from the specified file.  The filename is
+opened with the Perl C<open> command, so it can be a pipe or anything
+else that makes sense with C<open>.
+
+The C<TYPE> can also be C<STRING>, in which case the C<SOURCE> should
+be a string:
+
+	new Text::Template ( TYPE => 'STRING', 
+                             SOURCE => "This is the actual template!" );
+
+The C<TYPE> can be C<ARRAY>, in which case the source should be a
+reference to an array of strings.  The concatenation of these strings
+is the template:
+
+	new Text::Template ( TYPE => 'ARRAY', 
+                             SOURCE => [ "This is ", "the actual", 
+                                         " template!",
+                                       ]
+                           );
+
+The C<TYPE> can be FILEHANDLE, in which case the source should be an
+open filehandle (such as you got from the C<FileHandle> or C<IO::*>
+packages, or a glob, or a reference to a glob).  In this case
+C<Text::Template> will read the text from the filehandle up to
+end-of-file, and that text is the template:
+
+	# Read template source code from STDIN:
+	new Text::Template ( TYPE => 'FILEHANDLE', 
+                             SOURCE => \*STDIN  );
+
+
+If you omit the C<TYPE> attribute, it's taken to be C<FILE>.
+C<SOURCE> is required.  If you omit it, the program will abort.
+
+The words C<TYPE> and C<SOURCE> can be spelled any of the following ways:
+
+	TYPE	SOURCE
+	Type	Source
+	type	source
+	-TYPE	-SOURCE
+	-Type	-Source
+	-type	-source
+
+Pick a style you like and stick with it.
+
+=over 4
+
+=item C<DELIMITERS>
+
+You may also add a C<DELIMITERS> option.  If this option is present,
+its value should be a reference to an array of two strings.  The first
+string is the string that signals the beginning of each program
+fragment, and the second string is the string that signals the end of
+each program fragment.  See L<"Alternative Delimiters">, below.
+
+=item C<UNTAINT>
+
+If your program is running in taint mode, you may have problems if
+your templates are stored in files.  Data read from files is
+considered 'untrustworthy', and taint mode will not allow you to
+evaluate the Perl code in the file.  (It is afraid that a malicious
+person might have tampered with the file.)
+
+In some environments, however, local files are trustworthy.  You can
+tell C<Text::Template> that a certain file is trustworthy by supplying
+C<UNTAINT =E<gt> 1> in the call to C<new>.  This will tell
+C<Text::Template> to disable taint checks on template code that has
+come from a file, as long as the filename itself is considered
+trustworthy.  It will also disable taint checks on template code that
+comes from a filehandle.  When used with C<TYPE =E<gt> 'string'> or C<TYPE
+=E<gt> 'array'>, it has no effect.
+
+See L<perlsec> for more complete information about tainting.
+
+Thanks to Steve Palincsar, Gerard Vreeswijk, and Dr. Christoph Baehr
+for help with this feature.
+
+=item C<PREPEND>
+
+This option is passed along to the C<fill_in> call unless it is
+overridden in the arguments to C<fill_in>.  See L<C<PREPEND> feature
+and using C<strict> in templates> below.
+
+=item C<BROKEN>
+
+This option is passed along to the C<fill_in> call unless it is
+overridden in the arguments to C<fill_in>.  See L<C<BROKEN>> below.
+
+=back
+
+=head2 C<compile>
+
+	$template->compile()
+
+Loads all the template text from the template's source, parses and
+compiles it.  If successful, returns true; otherwise returns false and
+sets C<$Text::Template::ERROR>.  If the template is already compiled,
+it returns true and does nothing.  
+
+You don't usually need to invoke this function, because C<fill_in>
+(see below) compiles the template if it isn't compiled already.
+
+If there is an argument to this function, it must be a reference to an
+array containing alternative delimiter strings.  See C<"Alternative
+Delimiters">, below.
+
+=head2 C<fill_in>
+
+	$template->fill_in(OPTIONS);
+
+Fills in a template.  Returns the resulting text if successful.
+Otherwise, returns C<undef>  and sets C<$Text::Template::ERROR>.
+
+The I<OPTIONS> are a hash, or a list of key-value pairs.  You can
+write the key names in any of the six usual styles as above; this
+means that where this manual says C<PACKAGE> (for example) you can
+actually use any of
+
+	PACKAGE Package package -PACKAGE -Package -package
+
+Pick a style you like and stick with it.  The all-lowercase versions
+may yield spurious warnings about
+
+	Ambiguous use of package => resolved to "package"
+
+so you might like to avoid them and use the capitalized versions.
+
+At present, there are eight legal options:  C<PACKAGE>, C<BROKEN>,
+C<BROKEN_ARG>, C<SAFE>, C<HASH>, C<OUTPUT>, and C<DELIMITERS>.
+
+=over 4
+
+=item C<PACKAGE>
+
+C<PACKAGE> specifies the name of a package in which the program
+fragments should be evaluated.  The default is to use the package from
+which C<fill_in> was called.  For example, consider this template:
+
+	The value of the variable x is {$x}.
+
+If you use C<$template-E<gt>fill_in(PACKAGE =E<gt> 'R')> , then the C<$x> in
+the template is actually replaced with the value of C<$R::x>.  If you
+omit the C<PACKAGE> option, C<$x> will be replaced with the value of
+the C<$x> variable in the package that actually called C<fill_in>.
+
+You should almost always use C<PACKAGE>.  If you don't, and your
+template makes changes to variables, those changes will be propagated
+back into the main program.  Evaluating the template in a private
+package helps prevent this.  The template can still modify variables
+in your program if it wants to, but it will have to do so explicitly.
+See the section at the end on `Security'.
+
+Here's an example of using C<PACKAGE>:
+
+	Your Royal Highness,
+
+	Enclosed please find a list of things I have gotten
+	for you since 1907:
+
+	{ foreach $item (@items) {
+            $item_no++;
+	    $OUT .= " $item_no. \u$item\n";
+	  }
+	}
+
+	Signed,
+	Lord High Chamberlain
+
+We want to pass in an array which will be assigned to the array
+C<@items>.  Here's how to do that:
+
+
+	@items = ('ivory', 'apes', 'peacocks', );
+	$template->fill_in();
+
+This is not very safe.  The reason this isn't as safe is that if you
+had a variable named C<$item_no> in scope in your program at the point
+you called C<fill_in>, its value would be clobbered by the act of
+filling out the template.  The problem is the same as if you had
+written a subroutine that used those variables in the same way that
+the template does.  (C<$OUT> is special in templates and is always
+safe.)
+
+One solution to this is to make the C<$item_no> variable private to the
+template by declaring it with C<my>.  If the template does this, you
+are safe.
+
+But if you use the C<PACKAGE> option, you will probably be safe even
+if the template does I<not> declare its variables with C<my>:
+
+	@Q::items = ('ivory', 'apes', 'peacocks', );
+	$template->fill_in(PACKAGE => 'Q');
+
+In this case the template will clobber the variable C<$Q::item_no>,
+which is not related to the one your program was using.
+
+Templates cannot affect variables in the main program that are
+declared with C<my>, unless you give the template references to those
+variables.
+
+=item C<HASH>
+
+You may not want to put the template variables into a package.
+Packages can be hard to manage:  You can't copy them, for example.
+C<HASH> provides an alternative.  
+
+The value for C<HASH> should be a reference to a hash that maps
+variable names to values.  For example, 
+
+	$template->fill_in(HASH => { recipient => "The King",
+				     items => ['gold', 'frankincense', 'myrrh'],
+	                             object => \$self,
+				   });
+
+will fill out the template and use C<"The King"> as the value of
+C<$recipient> and the list of items as the value of C<@items>.  Note
+that we pass an array reference, but inside the template it appears as
+an array.  In general, anything other than a simple string or number
+should be passed by reference.
+
+We also want to pass an object, which is in C<$self>; note that we
+pass a reference to the object, C<\$self> instead.  Since we've passed
+a reference to a scalar, inside the template the object appears as
+C<$object>.  
+
+The full details of how it works are a little involved, so you might
+want to skip to the next section.
+
+Suppose the key in the hash is I<key> and the value is I<value>.  
+
+=over 4
+
+=item *
+
+If the I<value> is C<undef>, then any variables named C<$key>,
+C<@key>, C<%key>, etc., are undefined.  
+
+=item *
+
+If the I<value> is a string or a number, then C<$key> is set to that
+value in the template.
+
+=item *
+
+For anything else, you must pass a reference.
+
+If the I<value> is a reference to an array, then C<@key> is set to
+that array.  If the I<value> is a reference to a hash, then C<%key> is
+set to that hash.  Similarly if I<value> is any other kind of
+reference.  This means that
+
+	var => "foo"
+
+and
+
+	var => \"foo"
+
+have almost exactly the same effect.  (The difference is that in the
+former case, the value is copied, and in the latter case it is
+aliased.)  
+
+=item *
+
+In particular, if you want the template to get an object or any kind,
+you must pass a reference to it:
+
+	$template->fill_in(HASH => { database_handle => \$dbh, ... });
+
+If you do this, the template will have a variable C<$database_handle>
+which is the database handle object.  If you leave out the C<\>, the
+template will have a hash C<%database_handle>, which exposes the
+internal structure of the database handle object; you don't want that.
+
+=back
+
+Normally, the way this works is by allocating a private package,
+loading all the variables into the package, and then filling out the
+template as if you had specified that package.  A new package is
+allocated each time.  However, if you I<also> use the C<PACKAGE>
+option, C<Text::Template> loads the variables into the package you
+specified, and they stay there after the call returns.  Subsequent
+calls to C<fill_in> that use the same package will pick up the values
+you loaded in.
+
+If the argument of C<HASH> is a reference to an array instead of a
+reference to a hash, then the array should contain a list of hashes
+whose contents are loaded into the template package one after the
+other.  You can use this feature if you want to combine several sets
+of variables.  For example, one set of variables might be the defaults
+for a fill-in form, and the second set might be the user inputs, which
+override the defaults when they are present:
+
+	$template->fill_in(HASH => [\%defaults, \%user_input]);
+
+You can also use this to set two variables with the same name:
+
+	$template->fill_in(HASH => [{ v => "The King" },
+                                    { v => [1,2,3] },
+	                           ]
+                          );
+
+This sets C<$v> to C<"The King"> and C<@v> to C<(1,2,3)>.	
+
+=item C<BROKEN>
+
+If any of the program fragments fails to compile or aborts for any
+reason, and you have set the C<BROKEN> option to a function reference,
+C<Text::Template> will invoke the function.  This function is called
+the I<C<BROKEN> function>.  The C<BROKEN> function will tell
+C<Text::Template> what to do next.  
+
+If the C<BROKEN> function returns C<undef>, C<Text::Template> will
+immediately abort processing the template and return the text that it
+has accumulated so far.  If your function does this, it should set a
+flag that you can examine after C<fill_in> returns so that you can
+tell whether there was a premature return or not. 
+
+If the C<BROKEN> function returns any other value, that value will be
+interpolated into the template as if that value had been the return
+value of the program fragment to begin with.  For example, if the
+C<BROKEN> function returns an error string, the error string will be
+interpolated into the output of the template in place of the program
+fragment that cased the error.
+
+If you don't specify a C<BROKEN> function, C<Text::Template> supplies
+a default one that returns something like
+
+	Program fragment delivered error ``Illegal division by 0 at
+	template line 37''
+
+(Note that the format of this message has changed slightly since
+version 1.31.)  The return value of the C<BROKEN> function is
+interpolated into the template at the place the error occurred, so
+that this template:
+
+	(3+4)*5 = { 3+4)*5 }
+
+yields this result:
+
+	(3+4)*5 = Program fragment delivered error ``syntax error at template line 1''
+
+If you specify a value for the C<BROKEN> attribute, it should be a
+reference to a function that C<fill_in> can call instead of the
+default function.
+
+C<fill_in> will pass a hash to the C<broken> function.
+The hash will have at least these three members:
+
+=over 4
+
+=item C<text>
+
+The source code of the program fragment that failed
+
+=item C<error>
+
+The text of the error message (C<$@>) generated by eval.
+
+The text has been modified to omit the trailing newline and to include
+the name of the template file (if there was one).  The line number
+counts from the beginning of the template, not from the beginning of
+the failed program fragment.
+
+=item C<lineno>
+
+The line number of the template at which the program fragment began.
+
+=back
+
+There may also be an C<arg> member.  See C<BROKEN_ARG>, below
+
+=item C<BROKEN_ARG>
+
+If you supply the C<BROKEN_ARG> option to C<fill_in>, the value of the
+option is passed to the C<BROKEN> function whenever it is called.  The
+default C<BROKEN> function ignores the C<BROKEN_ARG>, but you can
+write a custom C<BROKEN> function that uses the C<BROKEN_ARG> to get
+more information about what went wrong. 
+
+The C<BROKEN> function could also use the C<BROKEN_ARG> as a reference
+to store an error message or some other information that it wants to
+communicate back to the caller.  For example:
+
+	$error = '';
+
+	sub my_broken {	
+	   my %args = @_;
+	   my $err_ref = $args{arg};
+	   ...
+	   $$err_ref = "Some error message";
+	   return undef;
+	}
+
+	$template->fill_in(BROKEN => \&my_broken,
+			   BROKEN_ARG => \$error,
+			  );
+
+	if ($error) {
+	  die "It didn't work: $error";
+	}
+
+If one of the program fragments in the template fails, it will call
+the C<BROKEN> function, C<my_broken>, and pass it the C<BROKEN_ARG>,
+which is a reference to C<$error>.  C<my_broken> can store an error
+message into C<$error> this way.  Then the function that called
+C<fill_in> can see if C<my_broken> has left an error message for it
+to find, and proceed accordingly.
+
+=item C<SAFE>
+
+If you give C<fill_in> a C<SAFE> option, its value should be a safe
+compartment object from the C<Safe> package.  All evaluation of
+program fragments will be performed in this compartment.  See L<Safe>
+for full details about such compartments and how to restrict the
+operations that can be performed in them.
+
+If you use the C<PACKAGE> option with C<SAFE>, the package you specify
+will be placed into the safe compartment and evaluation will take
+place in that package as usual.  
+
+If not, C<SAFE> operation is a little different from the default.
+Usually, if you don't specify a package, evaluation of program
+fragments occurs in the package from which the template was invoked.
+But in C<SAFE> mode the evaluation occurs inside the safe compartment
+and cannot affect the calling package.  Normally, if you use C<HASH>
+without C<PACKAGE>, the hash variables are imported into a private,
+one-use-only package.  But if you use C<HASH> and C<SAFE> together
+without C<PACKAGE>, the hash variables will just be loaded into the
+root namespace of the C<Safe> compartment.
+
+=item C<OUTPUT>
+
+If your template is going to generate a lot of text that you are just
+going to print out again anyway,  you can save memory by having
+C<Text::Template> print out the text as it is generated instead of
+making it into a big string and returning the string.  If you supply
+the C<OUTPUT> option to C<fill_in>, the value should be a filehandle.
+The generated text will be printed to this filehandle as it is
+constructed.  For example:
+
+	$template->fill_in(OUTPUT => \*STDOUT, ...);
+
+fills in the C<$template> as usual, but the results are immediately
+printed to STDOUT.  This may result in the output appearing more
+quickly than it would have otherwise.
+
+If you use C<OUTPUT>, the return value from C<fill_in> is still true on
+success and false on failure, but the complete text is not returned to
+the caller.
+
+=item C<PREPEND>
+
+You can have some Perl code prepended automatically to the beginning
+of every program fragment.  See L<C<PREPEND> feature and using
+C<strict> in templates> below.
+
+=item C<DELIMITERS>
+
+If this option is present, its value should be a reference to a list
+of two strings.  The first string is the string that signals the
+beginning of each program fragment, and the second string is the
+string that signals the end of each program fragment.  See
+L<"Alternative Delimiters">, below.  
+
+If you specify C<DELIMITERS> in the call to C<fill_in>, they override
+any delimiters you set when you created the template object with
+C<new>. 
+
+=back
+
+=head1 Convenience Functions
+
+=head2 C<fill_this_in>
+
+The basic way to fill in a template is to create a template object and
+then call C<fill_in> on it.   This is useful if you want to fill in
+the same template more than once.
+
+In some programs, this can be cumbersome.  C<fill_this_in> accepts a
+string, which contains the template, and a list of options, which are
+passed to C<fill_in> as above.  It constructs the template object for
+you, fills it in as specified, and returns the results.  It returns
+C<undef> and sets C<$Text::Template::ERROR> if it couldn't generate
+any results.
+
+An example:
+
+	$Q::name = 'Donald';
+	$Q::amount = 141.61;
+	$Q::part = 'hyoid bone';
+
+	$text = Text::Template->fill_this_in( <<'EOM', PACKAGE => Q);
+	Dear {$name},
+	You owe me \\${sprintf('%.2f', $amount)}.  
+	Pay or I will break your {$part}.
+		Love,
+		Grand Vizopteryx of Irkutsk.
+	EOM
+
+Notice how we included the template in-line in the program by using a
+`here document' with the C<E<lt>E<lt>> notation.
+
+C<fill_this_in> is a deprecated feature.  It is only here for
+backwards compatibility, and may be removed in some far-future version
+in C<Text::Template>.  You should use C<fill_in_string> instead.  It
+is described in the next section.
+
+=head2 C<fill_in_string>
+
+It is stupid that C<fill_this_in> is a class method.  It should have
+been just an imported function, so that you could omit the
+C<Text::Template-E<gt>> in the example above.  But I made the mistake
+four years ago and it is too late to change it.
+
+C<fill_in_string> is exactly like C<fill_this_in> except that it is
+not a method and you can omit the C<Text::Template-E<gt>> and just say
+
+	print fill_in_string(<<'EOM', ...);
+	Dear {$name},
+	  ...
+	EOM
+
+To use C<fill_in_string>, you need to say
+
+	use Text::Template 'fill_in_string';
+
+at the top of your program.   You should probably use
+C<fill_in_string> instead of C<fill_this_in>.
+
+=head2 C<fill_in_file>
+
+If you import C<fill_in_file>, you can say
+
+	$text = fill_in_file(filename, ...);
+
+The C<...> are passed to C<fill_in> as above.  The filename is the
+name of the file that contains the template you want to fill in.  It
+returns the result text. or C<undef>, as usual.
+
+If you are going to fill in the same file more than once in the same
+program you should use the longer C<new> / C<fill_in> sequence instead.
+It will be a lot faster because it only has to read and parse the file
+once.
+
+=head2 Including files into templates
+
+People always ask for this.  ``Why don't you have an include
+function?'' they want to know.  The short answer is this is Perl, and
+Perl already has an include function.  If you want it, you can just put
+
+	{qx{cat filename}}
+
+into your template.  VoilE<agrave>.
+
+If you don't want to use C<cat>, you can write a little four-line
+function that opens a file and dumps out its contents, and call it
+from the template.  I wrote one for you.  In the template, you can say
+
+	{Text::Template::_load_text(filename)}
+
+If that is too verbose, here is a trick.  Suppose the template package
+that you are going to be mentioning in the C<fill_in> call is package
+C<Q>.  Then in the main program, write
+
+	*Q::include = \&Text::Template::_load_text;
+
+This imports the C<_load_text> function into package C<Q> with the
+name C<include>.  From then on, any template that you fill in with
+package C<Q> can say
+
+	{include(filename)}
+
+to insert the text from the named file at that point.  If you are
+using the C<HASH> option instead, just put C<include =E<gt>
+\&Text::Template::_load_text> into the hash instead of importing it
+explicitly.
+
+Suppose you don't want to insert a plain text file, but rather you
+want to include one template within another?  Just use C<fill_in_file>
+in the template itself:
+
+	{Text::Template::fill_in_file(filename)}
+
+You can do the same importing trick if this is too much to type.
+
+=head1 Miscellaneous
+
+=head2 C<my> variables
+
+People are frequently surprised when this doesn't work:
+
+	my $recipient = 'The King';
+	my $text = fill_in_file('formletter.tmpl');
+
+The text C<The King> doesn't get into the form letter.  Why not?
+Because C<$recipient> is a C<my> variable, and the whole point of
+C<my> variables is that they're private and inaccessible except in the
+scope in which they're declared.  The template is not part of that
+scope, so the template can't see C<$recipient>.  
+
+If that's not the behavior you want, don't use C<my>.  C<my> means a
+private variable, and in this case you don't want the variable to be
+private.  Put the variables into package variables in some other
+package, and use the C<PACKAGE> option to C<fill_in>:
+
+	$Q::recipient = $recipient;
+	my $text = fill_in_file('formletter.tmpl', PACKAGE => 'Q');
+	
+
+or pass the names and values in a hash with the C<HASH> option:
+
+	my $text = fill_in_file('formletter.tmpl', HASH => { recipient => $recipient });
+
+=head2 Security Matters
+
+All variables are evaluated in the package you specify with the
+C<PACKAGE> option of C<fill_in>.  if you use this option, and if your
+templates don't do anything egregiously stupid, you won't have to
+worry that evaluation of the little programs will creep out into the
+rest of your program and wreck something.
+
+Nevertheless, there's really no way (except with C<Safe>) to protect
+against a template that says
+
+	{ $Important::Secret::Security::Enable = 0; 
+	  # Disable security checks in this program 
+	}
+
+or
+
+	{ $/ = "ho ho ho";   # Sabotage future uses of <FH>.
+	  # $/ is always a global variable
+	}
+
+or even
+
+	{ system("rm -rf /") }
+
+so B<don't> go filling in templates unless you're sure you know what's
+in them.  If you're worried, or you can't trust the person who wrote
+the template, use the C<SAFE> option.
+
+A final warning: program fragments run a small risk of accidentally
+clobbering local variables in the C<fill_in> function itself.  These
+variables all have names that begin with C<$fi_>, so if you stay away
+from those names you'll be safe.  (Of course, if you're a real wizard
+you can tamper with them deliberately for exciting effects; this is
+actually how C<$OUT> works.)  I can fix this, but it will make the
+package slower to do it, so I would prefer not to.  If you are worried
+about this, send me mail and I will show you what to do about it.
+
+=head2 Alternative Delimiters
+
+Lorenzo Valdettaro pointed out that if you are using C<Text::Template>
+to generate TeX output, the choice of braces as the program fragment
+delimiters makes you suffer suffer suffer.  Starting in version 1.20,
+you can change the choice of delimiters to something other than curly
+braces.
+
+In either the C<new()> call or the C<fill_in()> call, you can specify
+an alternative set of delimiters with the C<DELIMITERS> option.  For
+example, if you would like code fragments to be delimited by C<[@-->
+and C<--@]> instead of C<{> and C<}>, use
+
+	... DELIMITERS => [ '[@--', '--@]' ], ...
+
+Note that these delimiters are I<literal strings>, not regexes.  (I
+tried for regexes, but it complicates the lexical analysis too much.)
+Note also that C<DELIMITERS> disables the special meaning of the
+backslash, so if you want to include the delimiters in the literal
+text of your template file, you are out of luck---it is up to you to
+choose delimiters that do not conflict with what you are doing.  The
+delimiter strings may still appear inside of program fragments as long
+as they nest properly.  This means that if for some reason you
+absolutely must have a program fragment that mentions one of the
+delimiters, like this:
+
+	[@--
+		print "Oh no, a delimiter: --@]\n"
+	--@]
+
+you may be able to make it work by doing this instead:
+
+	[@--
+		# Fake matching delimiter in a comment: [@--
+		print "Oh no, a delimiter: --@]\n"
+	--@]
+
+It may be safer to choose delimiters that begin with a newline
+character.  
+
+Because the parsing of templates is simplified by the absence of
+backslash escapes, using alternative C<DELIMITERS> may speed up the
+parsing process by 20-25%.  This shows that my original choice of C<{>
+and C<}> was very bad. 
+
+=head2 C<PREPEND> feature and using C<strict> in templates
+
+Suppose you would like to use C<strict> in your templates to detect
+undeclared variables and the like.  But each code fragment is a
+separate lexical scope, so you have to turn on C<strict> at the top of
+each and every code fragment:
+
+	{ use strict;
+	  use vars '$foo';
+	  $foo = 14;
+	  ...
+	}
+
+	...
+
+	{ # we forgot to put `use strict' here
+	  my $result = $boo + 12;    # $boo is misspelled and should be $foo
+	  # No error is raised on `$boo'
+	}
+
+Because we didn't put C<use strict> at the top of the second fragment,
+it was only active in the first fragment, and we didn't get any
+C<strict> checking in the second fragment.  Then we mispelled C<$foo>
+and the error wasn't caught.  
+
+C<Text::Template> version 1.22 and higher has a new feature to make
+this easier.  You can specify that any text at all be automatically
+added to the beginning of each program fragment.  
+
+When you make a call to C<fill_in>, you can specify a
+
+	PREPEND => 'some perl statements here'
+
+option; the statements will be prepended to each program fragment for
+that one call only.  Suppose that the C<fill_in> call included a
+
+	PREPEND => 'use strict;'
+
+option, and that the template looked like this:
+
+	{ use vars '$foo';
+	  $foo = 14;
+	  ...
+	}
+
+	...
+
+	{ my $result = $boo + 12;    # $boo is misspelled and should be $foo
+	  ...
+	}
+
+The code in the second fragment would fail, because C<$boo> has not
+been declared.  C<use strict> was implied, even though you did not
+write it explicitly, because the C<PREPEND> option added it for you
+automatically.
+
+There are two other ways to do this.  At the time you create the
+template object with C<new>, you can also supply a C<PREPEND> option,
+in which case the statements will be prepended each time you fill in
+that template.  If the C<fill_in> call has its own C<PREPEND> option,
+this overrides the one specified at the time you created the
+template.  Finally, you can make the class method call
+
+	Text::Template->always_prepend('perl statements');
+
+If you do this, then call calls to C<fill_in> for I<any> template will
+attach the perl statements to the beginning of each program fragment,
+except where overridden by C<PREPEND> options to C<new> or C<fill_in>.
+
+=head2 Prepending in Derived Classes
+
+This section is technical, and you should skip it on the first few
+readings. 
+
+Normally there are three places that prepended text could come from.
+It could come from the C<PREPEND> option in the C<fill_in> call, from
+the C<PREPEND> option in the C<new> call that created the template
+object, or from the argument of the C<always_prepend> call.
+C<Text::Template> looks for these three things in order and takes the
+first one that it finds.
+
+In a subclass of C<Text::Template>, this last possibility is
+ambiguous.  Suppose C<S> is a subclass of C<Text::Template>.  Should 
+
+	Text::Template->always_prepend(...);
+
+affect objects in class C<Derived>?  The answer is that you can have it
+either way.  
+
+The C<always_prepend> value for C<Text::Template> is normally stored
+in  a hash variable named C<%GLOBAL_PREPEND> under the key
+C<Text::Template>.  When C<Text::Template> looks to see what text to
+prepend, it first looks in the template object itself, and if not, it
+looks in C<$GLOBAL_PREPEND{I<class>}> where I<class> is the class to
+which the template object belongs.  If it doesn't find any value, it
+looks in C<$GLOBAL_PREPEND{'Text::Template'}>.  This means that
+objects in class C<Derived> I<will> be affected by
+
+	Text::Template->always_prepend(...);
+
+I<unless> there is also a call to
+
+	Derived->always_prepend(...);
+
+So when you're designing your derived class, you can arrange to have
+your objects ignore C<Text::Template::always_prepend> calls by simply
+putting C<Derived-E<gt>always_prepend('')> at the top of your module.
+
+Of course, there is also a final escape hatch: Templates support a
+C<prepend_text> that is used to look up the appropriate text to be
+prepended at C<fill_in> time.  Your derived class can override this
+method to get an arbitrary effect.
+
+=head2 JavaScript
+
+Jennifer D. St Clair asks:
+
+	> Most of my pages contain JavaScript and Stylesheets.
+        > How do I change the template identifier?  
+
+Jennifer is worried about the braces in the JavaScript being taken as
+the delimiters of the Perl program fragments.  Of course, disaster
+will ensue when perl tries to evaluate these as if they were Perl
+programs.  The best choice is to find some unambiguous delimiter
+strings that you can use in your template instead of curly braces, and
+then use the C<DELIMITERS> option.  However, if you can't do this for
+some reason, there are  two easy workarounds:
+
+1. You can put C<\> in front of C<{>, C<}>, or C<\> to remove its
+special meaning.  So, for example, instead of
+
+	    if (br== "n3") { 
+		// etc.
+	    }
+
+you can put
+
+	    if (br== "n3") \{ 
+		// etc.
+	    \}
+
+and it'll come out of the template engine the way you want.
+
+But here is another method that is probably better.  To see how it
+works, first consider what happens if you put this into a template:
+
+	    { 'foo' }
+
+Since it's in braces, it gets evaluated, and obviously, this is going
+to turn into
+
+	    foo
+
+So now here's the trick: In Perl, C<q{...}> is the same as C<'...'>.
+So if we wrote
+
+	    {q{foo}}
+
+it would turn into 
+
+	    foo
+
+So for your JavaScript, just write
+
+	    {q{if (br== "n3") { 
+	  	 // etc.
+	       }}
+	    }
+
+and it'll come out as
+
+	      if (br== "n3") { 
+	  	  // etc.
+	      }
+
+which is what you want.
+
+
+=head2 Shut Up!
+
+People sometimes try to put an initialization section at the top of
+their templates, like this:
+
+	{ ...
+	  $var = 17;
+	}
+
+Then they complain because there is a C<17> at the top of the output
+that they didn't want to have there.  
+
+Remember that a program fragment is replaced with its own return
+value, and that in Perl the return value of a code block is the value
+of the last expression that was evaluated, which in this case is 17.
+If it didn't do that, you wouldn't be able to write C<{$recipient}>
+and have the recipient filled in.
+
+To prevent the 17 from appearing in the output is very simple:
+
+	{ ...
+	  $var = 17;
+	  '';
+	}
+
+Now the last expression evaluated yields the empty string, which is
+invisible.  If you don't like the way this looks, use
+
+	{ ...
+	  $var = 17;
+	  ($SILENTLY);
+	}
+
+instead.  Presumably, C<$SILENTLY> has no value, so nothing will be
+interpolated.  This is what is known as a `trick'.
+
+=head2 Compatibility
+
+Every effort has been made to make this module compatible with older
+versions.  The only known exceptions follow:
+
+The output format of the default C<BROKEN> subroutine has changed
+twice, most recently between versions 1.31 and 1.40.
+
+Starting in version 1.10, the C<$OUT> variable is arrogated for a
+special meaning.  If you had templates before version 1.10 that
+happened to use a variable named C<$OUT>, you will have to change them
+to use some other variable or all sorts of strangeness will result.
+
+Between versions 0.1b and 1.00 the behavior of the \ metacharacter
+changed.  In 0.1b, \\ was special everywhere, and the template
+processor always replaced it with a single backslash before passing
+the code to Perl for evaluation.  The rule now is more complicated but
+probably more convenient.  See the section on backslash processing,
+below, for a full discussion.
+
+=head2 Backslash Processing
+
+In C<Text::Template> beta versions, the backslash was special whenever
+it appeared before a brace or another backslash.  That meant that
+while C<{"\n"}> did indeed generate a newline, C<{"\\"}> did not
+generate a backslash, because the code passed to Perl for evaluation
+was C<"\"> which is a syntax error.  If you wanted a backslash, you
+would have had to write C<{"\\\\"}>.
+
+In C<Text::Template> versions 1.00 through 1.10, there was a bug:
+Backslash was special everywhere.  In these versions, C<{"\n"}>
+generated the letter C<n>.
+
+The bug has been corrected in version 1.11, but I did not go back to
+exactly the old rule, because I did not like the idea of having to
+write C<{"\\\\"}> to get one backslash.  The rule is now more
+complicated to remember, but probably easier to use.  The rule is now:
+Backslashes are always passed to Perl unchanged I<unless> they occur
+as part of a sequence like C<\\\\\\{> or C<\\\\\\}>.  In these
+contexts, they are special; C<\\> is replaced with C<\>, and C<\{> and
+C<\}> signal a literal brace. 
+
+Examples:
+
+	\{ foo \}
+
+is I<not> evaluated, because the C<\> before the braces signals that
+they should be taken literally.  The result in the output looks like this: 
+
+	{ foo }
+
+
+This is a syntax error:
+
+	{ "foo}" }
+
+because C<Text::Template> thinks that the code ends at the first C<}>,
+and then gets upset when it sees the second one.  To make this work
+correctly, use
+
+	{ "foo\}" }
+
+This passes C<"foo}"> to Perl for evaluation.  Note there's no C<\> in
+the evaluated code.  If you really want a C<\> in the evaluated code,
+use
+
+	{ "foo\\\}" }
+
+This passes C<"foo\}"> to Perl for evaluation.
+
+Starting with C<Text::Template> version 1.20, backslash processing is
+disabled if you use the C<DELIMITERS> option to specify alternative
+delimiter strings.
+
+=head2 A short note about C<$Text::Template::ERROR>
+
+In the past some people have fretted about `violating the package
+boundary' by examining a variable inside the C<Text::Template>
+package.  Don't feel this way.  C<$Text::Template::ERROR> is part of
+the published, official interface to this package.  It is perfectly OK
+to inspect this variable.  The interface is not going to change.
+
+If it really, really bothers you, you can import a function called
+C<TTerror> that returns the current value of the C<$ERROR> variable.
+So you can say:
+
+	use Text::Template 'TTerror';
+
+	my $template = new Text::Template (SOURCE => $filename);
+	unless ($template) {
+	  my $err = TTerror;
+	  die "Couldn't make template: $err; aborting";
+	}
+
+I don't see what benefit this has over just doing this:
+
+	use Text::Template;
+
+	my $template = new Text::Template (SOURCE => $filename)
+	  or die "Couldn't make template: $Text::Template::ERROR; aborting";
+
+But if it makes you happy to do it that way, go ahead.
+
+=head2 Sticky Widgets in Template Files
+
+The C<CGI> module provides functions for `sticky widgets', which are
+form input controls that retain their values from one page to the
+next.   Sometimes people want to know how to include these widgets
+into their template output.
+
+It's totally straightforward.  Just call the C<CGI> functions from
+inside the template:
+
+	{ $q->checkbox_group(NAME => 'toppings',
+		  	     LINEBREAK => true,
+			     COLUMNS => 3,
+			     VALUES => \@toppings,
+			    );
+	}
+
+=head2 Automatic preprocessing of program fragments
+
+It may be useful to preprocess the program fragments before they are
+evaluated.  See C<Text::Template::Preprocess> for more details.
+
+=head2 Automatic postprocessing of template hunks
+
+It may be useful to process hunks of output before they are appended to
+the result text.  For this, subclass and replace the C<append_text_to_result>
+method.  It is passed a list of pairs with these entries:
+
+  handle - a filehandle to which to print the desired output
+  out    - a ref to a string to which to append, to use if handle is not given
+  text   - the text that will be appended
+  type   - where the text came from: TEXT for literal text, PROG for code
+
+=head2 Author
+
+Mark Jason Dominus, Plover Systems
+
+Please send questions and other remarks about this software to
+C<mjd-perl-template+@plover.com>
+
+You can join a very low-volume (E<lt>10 messages per year) mailing
+list for announcements about this package.  Send an empty note to
+C<mjd-perl-template-request@plover.com> to join.
+
+For updates, visit C<http://www.plover.com/~mjd/perl/Template/>.
+
+=head2 Support?
+
+This software is version 1.46.  It may have bugs.  Suggestions and bug
+reports are always welcome.  Send them to
+C<mjd-perl-template+@plover.com>.  (That is my address, not the address
+of the mailing list.  The mailing list address is a secret.)
+
+=head1 LICENSE
+
+    Text::Template version 1.46
+    Copyright 2013 Mark Jason Dominus
+
+    This program is free software; you can redistribute it and/or
+    modify it under the terms of the GNU General Public License as
+    published by the Free Software Foundation; either version 2 of the
+    License, or (at your option) any later version.  You may also can
+    redistribute it and/or modify it under the terms of the Perl
+    Artistic License.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received copies of the GNU General Public License
+    along with this program; if not, write to the Free Software
+    Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+
+
+=head1 THANKS
+
+Many thanks to the following people for offering support,
+encouragement, advice, bug reports, and all the other good stuff.  
+
+David H. Adler /
+Joel Appelbaum /
+Klaus Arnhold /
+AntE<oacute>nio AragE<atilde>o /
+Kevin Atteson /
+Chris.Brezil /
+Mike Brodhead /
+Tom Brown /
+Dr. Frank Bucolo /
+Tim Bunce /
+Juan E. Camacho /
+Itamar Almeida de Carvalho /
+Joseph Cheek /
+Gene Damon /
+San Deng /
+Bob Dougherty /
+Marek Grac /
+Dan Franklin /
+gary at dls.net /
+Todd A. Green /
+Donald L. Greer Jr. /
+Michelangelo Grigni /
+Zac Hansen /
+Tom Henry /
+Jarko Hietaniemi /
+Matt X. Hunter /
+Robert M. Ioffe /
+Daniel LaLiberte /
+Reuven M. Lerner /
+Trip Lilley / 
+Yannis Livassof /
+Val Luck /
+Kevin Madsen /
+David Marshall /
+James Mastros /
+Joel Meulenberg /
+Jason Moore /
+Sergey Myasnikov /
+Chris Nandor /
+Bek Oberin /
+Steve Palincsar /
+Ron Pero /
+Hans Persson /
+Sean Roehnelt /
+Jonathan Roy /
+Shabbir J. Safdar /
+Jennifer D. St Clair /
+Uwe Schneider /
+Randal L. Schwartz /
+Michael G Schwern /
+Yonat Sharon /
+Brian C. Shensky /
+Niklas Skoglund /
+Tom Snee /
+Fred Steinberg /
+Hans Stoop /
+Michael J. Suzio /
+Dennis Taylor /
+James H. Thompson /
+Shad Todd /
+Lieven Tomme /
+Lorenzo Valdettaro /
+Larry Virden /
+Andy Wardley /
+Archie Warnock /
+Chris Wesley /
+Matt Womer /
+Andrew G Wood /
+Daini Xie /
+Michaely Yeung
+
+Special thanks to:
+
+=over 2
+
+=item Jonathan Roy 
+
+for telling me how to do the C<Safe> support (I spent two years
+worrying about it, and then Jonathan pointed out that it was trivial.)
+
+=item Ranjit Bhatnagar 
+
+for demanding less verbose fragments like they have in ASP, for
+helping me figure out the Right Thing, and, especially, for talking me
+out of adding any new syntax.  These discussions resulted in the
+C<$OUT> feature.
+
+=back
+
+=head2 Bugs and Caveats
+
+C<my> variables in C<fill_in> are still susceptible to being clobbered
+by template evaluation.  They all begin with C<fi_>, so avoid those
+names in your templates.
+
+The line number information will be wrong if the template's lines are
+not terminated by C<"\n">.  You should let me know if this is a
+problem.  If you do, I will fix it.
+
+The C<$OUT> variable has a special meaning in templates, so you cannot
+use it as if it were a regular variable.
+
+There are not quite enough tests in the test suite.
+
+=cut
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/lib/Text/Template/Preprocess.pm b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/lib/Text/Template/Preprocess.pm
new file mode 100644
index 000000000..1e41037bd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/lib/Text/Template/Preprocess.pm
@@ -0,0 +1,144 @@
+
+package Text::Template::Preprocess;
+use Text::Template;
+@ISA = qw(Text::Template);
+$Text::Template::Preprocess::VERSION = 1.46;
+
+sub fill_in {
+  my $self = shift;
+  my (%args) = @_;
+  my $pp = $args{PREPROCESSOR} || $self->{PREPROCESSOR} ;
+  if ($pp) {
+    local $_ = $self->source();
+#    print "# fill_in: before <$_>\n";
+    &$pp;
+#    print "# fill_in: after <$_>\n";
+    $self->set_source_data($_);
+  }
+  $self->SUPER::fill_in(@_);
+}
+
+sub preprocessor {
+  my ($self, $pp) = @_;
+  my $old_pp = $self->{PREPROCESSOR};
+  $self->{PREPROCESSOR} = $pp if @_ > 1;  # OK to pass $pp=undef
+  $old_pp;
+}
+
+1;
+
+
+=head1 NAME 
+
+Text::Template::Preprocess - Expand template text with embedded Perl
+
+=head1 VERSION
+
+This file documents C<Text::Template::Preprocess> version B<1.46>
+
+=head1 SYNOPSIS
+
+ use Text::Template::Preprocess;
+
+ my $t = Text::Template::Preprocess->new(...);  # identical to Text::Template
+
+ # Fill in template, but preprocess each code fragment with pp().
+ my $result = $t->fill_in(..., PREPROCESSOR => \&pp);
+
+ my $old_pp = $t->preprocessor(\&new_pp);
+
+=head1 DESCRIPTION
+
+C<Text::Template::Preprocess> provides a new C<PREPROCESSOR> option to
+C<fill_in>.  If the C<PREPROCESSOR> option is supplied, it must be a
+reference to a preprocessor subroutine.  When filling out a template,
+C<Text::Template::Preprocessor> will use this subroutine to preprocess
+the program fragment prior to evaluating the code.
+
+The preprocessor subroutine will be called repeatedly, once for each
+program fragment.  The program fragment will be in C<$_>.  The
+subroutine should modify the contents of C<$_> and return.
+C<Text::Template::Preprocess> will then execute contents of C<$_> and
+insert the result into the appropriate part of the template.
+
+C<Text::Template::Preprocess> objects also support a utility method,
+C<preprocessor()>, which sets a new preprocessor for the object.  This
+preprocessor is used for all subsequent calls to C<fill_in> except
+where overridden by an explicit C<PREPROCESSOR> option.
+C<preprocessor()> returns the previous default preprocessor function,
+or undefined if there wasn't one.  When invoked with no arguments,
+C<preprocessor()> returns the object's current default preprocessor
+function without changing it.
+
+In all other respects, C<Text::Template::Preprocess> is identical to
+C<Text::Template>.
+
+=head1 WHY?
+
+One possible purpose:  If your files contain a lot of JavaScript, like
+this:
+
+
+        Plain text here...
+        { perl code }
+        <script language=JavaScript>
+     	      if (br== "n3") { 
+	  	  // etc.
+	      }
+        </script>
+        { more perl code }
+        More plain text...
+
+You don't want C<Text::Template> to confuse the curly braces in the
+JavaScript program with executable Perl code.  One strategy:
+
+        sub quote_scripts {
+          s(<script(.*?)</script>)(q{$1})gsi;
+        }
+
+Then use C<PREPROCESSOR =E<gt> \&quote_scripts>.  This will transform 
+
+
+
+=head1 SEE ALSO
+
+L<Text::Template>
+
+=head1 AUTHOR
+
+
+Mark Jason Dominus, Plover Systems
+
+Please send questions and other remarks about this software to
+C<mjd-perl-template+@plover.com>
+
+You can join a very low-volume (E<lt>10 messages per year) mailing
+list for announcements about this package.  Send an empty note to
+C<mjd-perl-template-request@plover.com> to join.
+
+For updates, visit C<http://www.plover.com/~mjd/perl/Template/>.
+
+=head1 LICENSE
+
+    Text::Template::Preprocess version 1.46
+    Copyright 2013 Mark Jason Dominus
+
+    This program is free software; you can redistribute it and/or
+    modify it under the terms of the GNU General Public License as
+    published by the Free Software Foundation; either version 2 of the
+    License, or (at your option) any later version.  You may also can
+    redistribute it and/or modify it under the terms of the Perl
+    Artistic License.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received copies of the GNU General Public License
+    along with this program; if not, write to the Free Software
+    Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+
+
+=cut
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/00-version.t b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/00-version.t
new file mode 100644
index 000000000..5f9560f89
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/00-version.t
@@ -0,0 +1,11 @@
+#!perl
+
+use Text::Template;
+print "1..1\n";
+
+if ($Text::Template::VERSION == 1.46) {
+        print "ok 1\n";
+} else {
+        print "not ok 1\n";
+}
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/01-basic.t b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/01-basic.t
new file mode 100644
index 000000000..be43390c6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/01-basic.t
@@ -0,0 +1,266 @@
+#!perl
+#
+# Tests of basic, essential functionality
+#
+
+use Text::Template;
+$X::v = $Y::v = 0;		# Suppress `var used only once'
+
+print "1..31\n";
+
+$n=1;
+
+$template_1 = <<EOM;
+We will put value of \$v (which is "abc") here -> {\$v}
+We will evaluate 1+1 here -> {1 + 1}
+EOM
+
+# (1) Construct temporary template file for testing
+# file operations
+$TEMPFILE = "tt$$";
+open(TMP, "> $TEMPFILE") or print "not ok $n\n" && &abort("Couldn\'t write tempfile $TEMPFILE: $!");
+print TMP $template_1;
+close TMP;
+print "ok $n\n"; $n++;
+
+# (2) Build template from file
+$template = new Text::Template ('type' => 'FILE', 'source' => $TEMPFILE);
+if (defined($template)) {
+  print "ok $n\n";
+} else {
+  print "not ok $n $Text::Template::ERROR\n";
+}
+$n++;
+
+# (3) Fill in template from file
+$X::v = "abc";	
+$resultX = <<EOM;
+We will put value of \$v (which is "abc") here -> abc
+We will evaluate 1+1 here -> 2
+EOM
+$Y::v = "ABC";	
+$resultY = <<EOM;
+We will put value of \$v (which is "abc") here -> ABC
+We will evaluate 1+1 here -> 2
+EOM
+
+$text = $template->fill_in('package' => X);
+if ($text eq $resultX) {
+  print "ok $n\n";
+} else {
+  print "not ok $n\n";
+}
+$n++;
+
+# (4) Fill in same template again
+$text = $template->fill_in('package' => Y);
+if ($text eq $resultY) {
+  print "ok $n\n";
+} else {
+  print "not ok $n\n";
+}
+$n++;
+
+
+
+# (5) Simple test of `fill_this_in'
+$text = Text::Template->fill_this_in( $template_1, 'package' => X);
+if ($text eq $resultX) {
+  print "ok $n\n";
+} else {
+  print "not ok $n\n";
+}
+$n++;
+
+# (6) test creation of template from filehandle
+if (open (TMPL, "< $TEMPFILE")) {
+  $template = new Text::Template ('type' => 'FILEHANDLE', 
+				  'source' => *TMPL);
+  if (defined($template)) {
+    print "ok $n\n";
+  } else {
+    print "not ok $n $Text::Template::ERROR\n";
+  }
+  $n++;
+
+# (7) test filling in of template from filehandle
+  $text = $template->fill_in('package' => X);
+  if ($text eq $resultX) {
+    print "ok $n\n";
+  } else {
+    print "not ok $n\n";
+  }
+  $n++;
+
+# (8) test second fill_in on same template object
+  $text = $template->fill_in('package' => Y);
+  if ($text eq $resultY) {
+    print "ok $n\n";
+  } else {
+    print "not ok $n\n";
+  }
+  $n++;
+  close TMPL;
+} else {
+  print "not ok $n\n";  $n++;
+  print "not ok $n\n";  $n++;
+  print "not ok $n\n";  $n++;
+}
+
+
+# (9) test creation of template from array
+$template = new Text::Template 
+    ('type' => 'ARRAY', 
+     'source' => [ 
+		  'We will put value of $v (which is "abc") here -> {$v}',
+		  "\n",
+		  'We will evaluate 1+1 here -> {1+1}',
+		  "\n",
+		  ]);
+if (defined($template)) {
+  print "ok $n\n";
+} else {
+  print "not ok $n $Text::Template::ERROR\n";
+}
+$n++;
+
+# (10) test filling in of template from array
+$text = $template->fill_in('package' => X);
+if ($text eq $resultX) {
+  print "ok $n\n";
+} else {
+  print "not ok $n\n";
+}
+$n++;
+
+# (11) test second fill_in on same array template object
+$text = $template->fill_in('package' => Y);
+if ($text eq $resultY) {
+  print "ok $n\n";
+} else {
+  print "not ok $n\n";
+  print STDERR "$resultX\n---\n$text";
+  unless (!defined($text)) { print STDERR "ERROR: $Text::Template::ERROR\n"};
+}
+$n++;
+
+
+
+# (12) Make sure \ is working properly
+# Test added for version 1.11
+my $tmpl = Text::Template->new(TYPE => 'STRING',
+			       SOURCE => 'B{"\\}"}C{"\\{"}D',
+			       );
+# This should fail if the \ are not interpreted properly.
+my $text = $tmpl->fill_in();
+print +($text eq "B}C{D" ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (13) Make sure \ is working properly
+# Test added for version 1.11
+$tmpl = Text::Template->new(TYPE => 'STRING',
+			    SOURCE => qq{A{"\t"}B},
+			   );
+# Symptom of old problem:  ALL \ were special in templates, so
+# The lexer would return (A, PROGTEXT("t"), B), and the
+# result text would be AtB instead of A(tab)B.
+$text = $tmpl->fill_in();
+
+print +($text eq "A\tB" ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (14-27) Make sure \ is working properly
+# Test added for version 1.11
+# This is a sort of general test.
+my @tests = ('{""}' => '',	# (14)
+	     '{"}"}' => undef,  # (15)
+	     '{"\\}"}' => '}',	# One backslash
+	     '{"\\\\}"}' => undef, # Two backslashes
+	     '{"\\\\\\}"}' => '}', # Three backslashes
+	     '{"\\\\\\\\}"}' => undef, # Four backslashes
+	     '{"\\\\\\\\\\}"}' => '\}', # Five backslashes  (20)
+	     '{"x20"}' => 'x20',
+	     '{"\\x20"}' => ' ',	# One backslash
+	     '{"\\\\x20"}' => '\\x20', # Two backslashes
+	     '{"\\\\\\x20"}' => '\\ ', # Three backslashes
+	     '{"\\\\\\\\x20"}' => '\\\\x20', # Four backslashes  (25)
+	     '{"\\\\\\\\\\x20"}' => '\\\\ ', # Five backslashes
+	     '{"\\x20\\}"}' => ' }', # (27)
+	    );
+
+my $i;
+for ($i=0; $i<@tests; $i+=2) {
+  my $tmpl = Text::Template->new(TYPE => 'STRING',
+				 SOURCE => $tests[$i],
+				);
+  my $text = $tmpl->fill_in;
+  my $result = $tests[$i+1];
+  my $ok = (! defined $text && ! defined $result
+	    || $text eq $result);
+  unless ($ok) {
+    print STDERR "($n) expected .$result., got .$text.\n";
+  }
+  print +($ok ? '' : 'not '), "ok $n\n";
+  $n++;
+}
+
+
+# (28-30) I discovered that you can't pass a glob ref as your filehandle.
+# MJD 20010827
+# (28) test creation of template from filehandle
+if (open (TMPL, "< $TEMPFILE")) {
+  $template = new Text::Template ('type' => 'FILEHANDLE', 
+				  'source' => \*TMPL);
+  if (defined($template)) {
+    print "ok $n\n";
+  } else {
+    print "not ok $n $Text::Template::ERROR\n";
+  }
+  $n++;
+
+# (29) test filling in of template from filehandle
+  $text = $template->fill_in('package' => X);
+  if ($text eq $resultX) {
+    print "ok $n\n";
+  } else {
+    print "not ok $n\n";
+  }
+  $n++;
+
+# (30) test second fill_in on same template object
+  $text = $template->fill_in('package' => Y);
+  if ($text eq $resultY) {
+    print "ok $n\n";
+  } else {
+    print "not ok $n\n";
+  }
+  $n++;
+  close TMPL;
+} else {
+  print "not ok $n\n";  $n++;
+  print "not ok $n\n";  $n++;
+  print "not ok $n\n";  $n++;
+}
+
+# (31) Test _scrubpkg for leakiness
+$Text::Template::GEN0::test = 1;
+Text::Template::_scrubpkg('Text::Template::GEN0');
+if ($Text::Template::GEN0::test) {
+  print "not ok $n\n";
+} else {
+  print "ok $n\n";
+}
+$n++;
+
+
+END {unlink $TEMPFILE;}
+
+exit;
+
+
+
+
+sub abort {
+  unlink $TEMPFILE;
+  die $_[0];
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/02-hash.t b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/02-hash.t
new file mode 100644
index 000000000..29ba51a40
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/02-hash.t
@@ -0,0 +1,111 @@
+#!perl
+#
+# test apparatus for Text::Template module
+# still incomplete.
+
+use Text::Template;
+
+die "This is the test program for Text::Template version 1.46.
+You are using version $Text::Template::VERSION instead.
+That does not make sense.\n
+Aborting"
+  unless $Text::Template::VERSION == 1.46;
+
+
+print "1..12\n";
+
+$n=1;
+
+$template = 'We will put value of $v (which is "good") here -> {$v}';
+
+$v = 'oops (main)';
+$Q::v = 'oops (Q)';
+
+$vars = { 'v' => \'good' };
+
+# (1) Build template from string
+$template = new Text::Template ('type' => 'STRING', 'source' => $template);
+print +($template ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (2) Fill in template in anonymous package
+$result2 = 'We will put value of $v (which is "good") here -> good';
+$text = $template->fill_in(HASH => $vars);
+print +($text eq $result2 ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (3) Did we clobber the main variable?
+print +($v eq 'oops (main)' ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (4) Fill in same template again
+$result4 = 'We will put value of $v (which is "good") here -> good';
+$text = $template->fill_in(HASH => $vars);
+print +($text eq $result4 ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (5) Now with a package
+$result5 = 'We will put value of $v (which is "good") here -> good';
+$text = $template->fill_in(HASH => $vars, PACKAGE => 'Q');
+print +($text eq $result5 ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (6) We expect to have clobbered the Q variable.
+print +($Q::v eq 'good' ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (7) Now let's try it without a package
+$result7 = 'We will put value of $v (which is "good") here -> good';
+$text = $template->fill_in(HASH => $vars);
+print +($text eq $result7 ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (8-11) Now what does it do when we pass a hash with undefined values?
+# Roy says it does something bad. (Added for 1.20.)
+my $WARNINGS = 0;
+{
+  local $SIG{__WARN__} = sub {$WARNINGS++};
+  local $^W = 1;       # Make sure this is on for this test
+  $template8 = 'We will put value of $v (which is "good") here -> {defined $v ? "bad" : "good"}';
+  $result8 = 'We will put value of $v (which is "good") here -> good';
+  my $template = 
+    new Text::Template ('type' => 'STRING', 'source' => $template8);
+  my $text = $template->fill_in(HASH => {'v' => undef});
+  # (8) Did we generate a warning?
+  print +($WARNINGS == 0 ? '' : 'not '), "ok $n\n";
+  $n++;
+  
+  # (9) Was the output correct?
+  print +($text eq $result8 ? '' : 'not '), "ok $n\n";
+  $n++;
+
+  # (10-11) Let's try that again, with a twist this time
+  $WARNINGS = 0;
+  $text = $template->fill_in(HASH => [{'v' => 17}, {'v' => undef}]);
+  # (10) Did we generate a warning?
+  print +($WARNINGS == 0 ? '' : 'not '), "ok $n\n";
+  $n++;
+  
+  # (11) Was the output correct?
+  if ($] < 5.005) {
+    print "ok $n # skipped -- not supported before 5.005\n";
+  } else {
+    print +($text eq $result8 ? '' : 'not '), "ok $n\n";
+  }
+  $n++;
+}
+
+
+# (12) Now we'll test the multiple-hash option  (Added for 1.20.)
+$text = Text::Template::fill_in_string(q{$v: {$v}.  @v: [{"@v"}].},
+				       HASH => [{'v' => 17}, 
+						{'v' => ['a', 'b', 'c']},
+						{'v' => \23},
+					       ]);
+$result = q{$v: 23.  @v: [a b c].};
+print +($text eq $result ? '' : 'not '), "ok $n\n";
+$n++;
+
+
+exit;
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/03-out.t b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/03-out.t
new file mode 100644
index 000000000..0ba65a54d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/03-out.t
@@ -0,0 +1,56 @@
+#!perl
+#
+# test apparatus for Text::Template module
+# still incomplete.
+#
+
+use Text::Template;
+
+die "This is the test program for Text::Template version 1.46
+You are using version $Text::Template::VERSION instead.
+That does not make sense.\n
+Aborting"
+  unless $Text::Template::VERSION == 1.46;
+
+print "1..1\n";
+
+$n=1;
+
+$template = q{
+This line should have a 3: {1+2}
+
+This line should have several numbers:
+{ $t = ''; foreach $n (1 .. 20) { $t .= $n . ' ' } $t }
+};
+
+$templateOUT = q{
+This line should have a 3: { $OUT = 1+2 }
+
+This line should have several numbers:
+{ foreach $n (1 .. 20) { $OUT .= $n . ' ' } }
+};
+
+# Build templates from string
+$template = new Text::Template ('type' => 'STRING', 'source' => $template)
+  or die;
+$templateOUT = new Text::Template ('type' => 'STRING', 'source' => $templateOUT)
+  or die;
+
+# Fill in templates
+$text = $template->fill_in()
+  or die;
+$textOUT = $templateOUT->fill_in()
+  or die;
+
+# (1) They should be the same
+print +($text eq $textOUT ? '' : 'not '), "ok $n\n";
+$n++;
+
+# Missing:  Test this feature in Safe compartments; 
+# it's a totally different code path.
+# Decision: Put that into safe.t, because that file should
+# be skipped when Safe.pm is unavailable.
+
+
+exit;
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/04-safe.t b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/04-safe.t
new file mode 100644
index 000000000..4c07121b4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/04-safe.t
@@ -0,0 +1,161 @@
+#!perl
+#
+# test apparatus for Text::Template module
+# still incomplete.
+
+use Text::Template;
+
+BEGIN {
+  eval "use Safe";
+  if ($@) {
+    print "1..0\n";
+    exit 0;
+  }
+}
+
+die "This is the test program for Text::Template version 1.46.
+You are using version $Text::Template::VERSION instead.
+That does not make sense.\n
+Aborting"
+  unless $Text::Template::VERSION == 1.46;
+
+print "1..16\n";
+
+if ($^O eq 'MacOS') {
+  $BADOP = qq{};
+  $FAILURE = q{};
+} else {
+  $BADOP = qq{kill 0};
+  $FAILURE = q{Program fragment at line 1 delivered error ``kill trapped by operation mask''};
+}
+
+$n=1;
+$v = $v = 119;
+
+$c = new Safe or die;
+
+$goodtemplate = q{This should succeed: { $v }};
+$goodoutput   = q{This should succeed: 119};
+
+$template1 = new Text::Template ('type' => 'STRING', 'source' => $goodtemplate)
+  or die;
+$template2 = new Text::Template ('type' => 'STRING', 'source' => $goodtemplate)
+  or die;
+
+$text1 = $template1->fill_in();
+$text2 = $template1->fill_in(SAFE => $c);
+$ERR2 = $@;
+$text3 = $template2->fill_in(SAFE => $c);
+$ERR3 = $@;
+
+# (1)(2)(3) None of these should have failed.
+print +(defined $text1 ? '' : 'not '), "ok $n\n";
+$n++;
+print +(defined $text2 ? '' : 'not '), "ok $n\n";
+$n++;
+print +(defined $text3 ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (4) Safe and non-safe fills of different template objects with the
+# same template text should yield the same result.
+# print +($text1 eq $text3 ? '' : 'not '), "ok $n\n";
+# (4) voided this test:  it's not true, because the unsafe fill
+# uses package main, while the safe fill uses the secret safe package.
+# We could alias the secret safe package to be identical to main,
+# but that wouldn't be safe.  If you want the aliasing, you have to
+# request it explicitly with `PACKAGE'.
+print "ok $n\n";
+$n++;
+
+# (5) Safe and non-safe fills of the same template object
+# should yield the same result.
+# (5) voided this test for the same reason as #4.
+# print +($text1 eq $text2 ? '' : 'not '), "ok $n\n";
+print "ok $n\n";
+$n++;
+
+# (6) Make sure the output was actually correct
+print +($text1 eq $goodoutput ? '' : 'not '), "ok $n\n";
+$n++;
+
+
+$badtemplate     = qq{This should fail: { $BADOP; 'NOFAIL' }};
+$badnosafeoutput = q{This should fail: NOFAIL};
+$badsafeoutput   = q{This should fail: Program fragment delivered error ``kill trapped by operation mask at template line 1.''};
+
+$template1 = new Text::Template ('type' => 'STRING', 'source' => $badtemplate)
+  or die;
+$template2 = new Text::Template ('type' => 'STRING', 'source' => $badtemplate)
+  or die;
+
+$text1 = $template1->fill_in();
+$text2 = $template1->fill_in(SAFE => $c);
+$ERR2 = $@;
+$text3 = $template2->fill_in(SAFE => $c);
+$ERR3 = $@;
+$text4 = $template1->fill_in();
+
+# (7)(8)(9)(10) None of these should have failed.
+print +(defined $text1 ? '' : 'not '), "ok $n\n";
+$n++;
+print +(defined $text2 ? '' : 'not '), "ok $n\n";
+$n++;
+print +(defined $text3 ? '' : 'not '), "ok $n\n";
+$n++;
+print +(defined $text4 ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (11) text1 and text4 should be the same (using safe in between
+# didn't change anything.)
+print +($text1 eq $text4 ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (12) text2 and text3 should be the same (same template text in different
+# objects
+print +($text2 eq $text3 ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (13) text1 should yield badnosafeoutput
+print +($text1 eq $badnosafeoutput ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (14) text2 should yield badsafeoutput
+$text2 =~ s/'kill'/kill/;  # 5.8.1 added quote marks around the op name
+print "# expected: <$badsafeoutput>\n# got     : <$text2>\n";
+print +($text2 eq $badsafeoutput ? '' : 'not '), "ok $n\n";
+$n++;
+
+
+$template = q{{$x=1}{$x+1}};
+
+$template1 = new Text::Template ('type' => 'STRING', 'source' => $template)
+  or die;
+$template2 = new Text::Template ('type' => 'STRING', 'source' => $template)
+  or die;
+
+$text1 = $template1->fill_in();
+$text2 = $template1->fill_in(SAFE => new Safe);
+
+# (15) Do effects persist in safe compartments?
+print +($text1 eq $text2 ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (16) Try the BROKEN routine in safe compartments
+sub my_broken { 
+  my %a = @_; $a{error} =~ s/ at.*//s;
+  "OK! text:$a{text} error:$a{error} lineno:$a{lineno} arg:$a{arg}" ;
+}
+$templateB = new Text::Template (TYPE => 'STRING', SOURCE => '{die}')
+    or die;
+$text1 = $templateB->fill_in(BROKEN => \&my_broken, 
+			     BROKEN_ARG => 'barg',
+			     SAFE => new Safe,
+			     );
+$result1 = qq{OK! text:die error:Died lineno:1 arg:barg};
+print +($text1 eq $result1 ? '' : 'not '), "ok $n\n";
+$n++;
+
+
+
+exit;
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/05-safe2.t b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/05-safe2.t
new file mode 100644
index 000000000..03534770f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/05-safe2.t
@@ -0,0 +1,105 @@
+#!perl
+#
+# test apparatus for Text::Template module
+# still incomplete.
+
+use Text::Template;
+
+BEGIN {
+  eval "use Safe";
+  if ($@) {
+    print "1..0\n";
+    exit 0;
+  }
+}
+
+die "This is the test program for Text::Template version 1.46.
+You are using version $Text::Template::VERSION instead.
+That does not make sense.\n
+Aborting"
+  unless $Text::Template::VERSION == 1.46;
+
+print "1..12\n";
+$n = 1;
+
+$c = new Safe or die;
+
+# Test handling of packages and importing.
+$c->reval('$P = "safe root"');
+$P = $P = 'main';
+$Q::P = $Q::P = 'Q';
+
+# How to effectively test the gensymming?
+
+$t = new Text::Template TYPE => 'STRING', SOURCE => 'package is {$P}'
+    or die;
+
+# (1) Default behavior: Inherit from calling package, `main' in this case.
+$text = $t->fill_in();
+print +($text eq 'package is main' ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (2) When a package is specified, we should use that package instead.
+$text = $t->fill_in(PACKAGE => 'Q');
+print +($text eq 'package is Q' ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (3) When no package is specified in safe mode, we should use the
+# default safe root.
+$text = $t->fill_in(SAFE => $c);
+print +($text eq 'package is safe root' ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (4) When a package is specified in safe mode, we should use the
+# default safe root, after aliasing to the specified package
+$text = $t->fill_in(SAFE => $c, PACKAGE => Q);
+print +($text eq 'package is Q' ? '' : 'not '), "ok $n\n";
+$n++;
+
+# Now let's see if hash vars are installed properly into safe templates
+$t = new Text::Template TYPE => 'STRING', SOURCE => 'hash is {$H}'
+    or die;
+
+# (5) First in default mode
+$text = $t->fill_in(HASH => {H => 'good5'} );
+print +($text eq 'hash is good5' ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (6) Now in packages
+$text = $t->fill_in(HASH => {H => 'good6'}, PACKAGE => 'Q' );
+print +($text eq 'hash is good6' ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (7) Now in the default root of the safe compartment
+$text = $t->fill_in(HASH => {H => 'good7'}, SAFE => $c );
+print +($text eq 'hash is good7' ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (8) Now in the default root after aliasing to a package that
+# got the hash stuffed in
+$text = $t->fill_in(HASH => {H => 'good8'}, SAFE => $c, PACKAGE => 'Q2' );
+print +($text eq 'hash is good8' ? '' : 'not '), "ok $n\n";
+$n++;
+
+# Now let's make sure that none of the packages leaked on each other.
+# (9) This var should NOT have been installed into the main package
+print +(defined $H ? 'not ' : ''), "ok $n\n";
+$H=$H;
+$n++;
+
+# (10) good6 was overwritten in test 7, so there's nothing to test for here.
+print "ok $n\n";
+$n++;
+
+# (11) this value overwrote the one from test 6.
+print +($Q::H eq 'good7' ? '' : 'not '), "ok $n\n";
+$Q::H = $Q::H;
+$n++;
+
+# (12) 
+print +($Q2::H eq 'good8' ? '' : 'not '), "ok $n\n";
+$Q2::H = $Q2::H;
+$n++;
+
+
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/06-ofh.t b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/06-ofh.t
new file mode 100644
index 000000000..6865ad194
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/06-ofh.t
@@ -0,0 +1,39 @@
+#!perl
+#
+# test apparatus for Text::Template module
+# still incomplete.
+
+use Text::Template;
+
+die "This is the test program for Text::Template version 1.46.
+You are using version $Text::Template::VERSION instead.
+That does not make sense.\n
+Aborting"
+  unless $Text::Template::VERSION == 1.46;
+
+print "1..2\n";
+
+$n=1;
+
+$template = new Text::Template TYPE => STRING, SOURCE => q{My process ID is {$$}};
+$of = "t$$";
+END { unlink $of }
+open O, "> $of" or die;
+
+$text = $template->fill_in(OUTPUT => \*O);
+
+# (1) No $text should have been constructed.  Return value should be true.
+print +($text eq '1' ? '' : 'not '), "ok $n\n";
+$n++;
+
+close O or die;
+open I, "< $of" or die;
+{ local $/; $t = <I> }
+close I;
+
+# (2) The text should have been printed to the file
+print +($t eq "My process ID is $$" ? '' : 'not '), "ok $n\n";
+$n++;
+
+exit;
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/07-safe3.t b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/07-safe3.t
new file mode 100644
index 000000000..5f438f614
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/07-safe3.t
@@ -0,0 +1,91 @@
+#!perl
+#
+# test apparatus for Text::Template module
+
+use Text::Template;
+
+BEGIN {
+  eval "use Safe";
+  if ($@) {
+    print "1..0\n";
+    exit 0;
+  }
+}
+
+die "This is the test program for Text::Template version 1.46.
+You are using version $Text::Template::VERSION instead.
+That does not make sense.\n
+Aborting"
+  unless $Text::Template::VERSION == 1.46;
+
+print "1..3\n";
+
+$n=1;
+
+# Test the OUT feature with safe compartments
+
+$template = q{
+This line should have a 3: {1+2}
+
+This line should have several numbers:
+{ $t = ''; foreach $n (1 .. 20) { $t .= $n . ' ' } $t }
+};
+
+$templateOUT = q{
+This line should have a 3: { $OUT = 1+2 }
+
+This line should have several numbers:
+{ foreach $n (1 .. 20) { $OUT .= $n . ' ' } }
+};
+
+$c = new Safe;
+
+# Build templates from string
+$template = new Text::Template ('type' => 'STRING', 'source' => $template,
+			       SAFE => $c)
+  or die;
+$templateOUT = new Text::Template ('type' => 'STRING', 'source' => $templateOUT,
+				  SAFE => $c)
+  or die;
+
+# Fill in templates
+$text = $template->fill_in()
+  or die;
+$textOUT = $templateOUT->fill_in()
+  or die;
+
+# (1) They should be the same
+print +($text eq $textOUT ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (2-3)  "Joel Appelbaum" <joel@orbz.com> <000701c0ac2c$aed1d6e0$0201a8c0@prime>
+# "Contrary to the documentation the $OUT variable is not always
+# undefined at the start of each program fragment.  The $OUT variable
+# is never undefined after it is used once if you are using the SAFE
+# option.  The result is that every fragment after the fragment that
+# $OUT was used in is replaced by the old $OUT value instead of the
+# result of the fragment.  This holds true even after the
+# Text::Template object goes out of scope and a new one is created!"
+#
+# Also reported by Daini Xie.
+
+{
+  my $template = q{{$OUT = 'x'}y{$OUT .= 'z'}};
+  my $expected = "xyz";
+  my $s = Safe->new;
+  my $o = Text::Template->new(type => 'string',
+                              source => $template,
+                             );
+  for (1..2) {
+    my $r = $o->fill_in(SAFE => $s);
+    if ($r ne $expected) {
+      print "not ok $n # <$r>\n";
+    } else {
+      print "ok $n\n";
+    }
+    $n++;
+  }
+}
+
+exit;
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/08-exported.t b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/08-exported.t
new file mode 100644
index 000000000..ef9cfafde
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/08-exported.t
@@ -0,0 +1,75 @@
+#!perl
+#
+# test apparatus for Text::Template module
+# still incomplete.
+
+use Text::Template 'fill_in_file', 'fill_in_string';
+
+die "This is the test program for Text::Template version 1.46.
+You are using version $Text::Template::VERSION instead.
+That does not make sense.\n
+Aborting"
+  unless $Text::Template::VERSION == 1.46;
+
+print "1..6\n";
+
+$n=1;
+$Q::n = $Q::n = 119; 
+
+# (1) Test fill_in_string
+$out = fill_in_string('The value of $n is {$n}.', PACKAGE => 'Q' );
+print +($out eq 'The value of $n is 119.' ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (2) Test fill_in_file
+$TEMPFILE = "tt$$";
+open F, "> $TEMPFILE" or die "Couldn't open test file: $!; aborting";
+print F 'The value of $n is {$n}.', "\n";
+close F or die "Couldn't write test file: $!; aborting";
+$R::n = $R::n = 8128; 
+
+$out = fill_in_file($TEMPFILE, PACKAGE => 'R');
+print +($out eq "The value of \$n is 8128.\n" ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (3) Jonathan Roy reported this bug:
+open F, "> $TEMPFILE" or die "Couldn't open test file: $!; aborting";
+print F "With a message here? [% \$var %]\n";
+close F  or die "Couldn't close test file: $!; aborting";
+$out = fill_in_file($TEMPFILE, DELIMITERS => ['[%', '%]'],
+		    HASH => { "var" => \"It is good!" });
+print +($out eq "With a message here? It is good!\n" ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (4) It probably occurs in fill_this_in also:
+$out = 
+  Text::Template->fill_this_in("With a message here? [% \$var %]\n",
+                      DELIMITERS => ['[%', '%]'],
+                      HASH => { "var" => \"It is good!" });
+print +($out eq "With a message here? It is good!\n" ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (5) This test failed in 1.25.  It was supplied by Donald L. Greer Jr.
+# Note that it's different from (1)  in that there's no explicit 
+# package=> argument.
+use vars qw($string $foo $r);
+$string='Hello {$foo}';
+$foo="Don";
+$r = fill_in_string($string);
+print (($r eq 'Hello Don' ? '' : 'not '), 'ok ', $n++, "\n");
+
+# (6) This test failed in 1.25.  It's a variation on (5)
+package Q2;
+use Text::Template 'fill_in_string';
+use vars qw($string $foo $r);
+$string='Hello {$foo}';
+$foo="Don";
+$r = fill_in_string($string);
+print (($r eq 'Hello Don' ? '' : 'not '), 'ok ', $main::n++, "\n");
+
+package main;
+
+END { $TEMPFILE && unlink $TEMPFILE }
+
+exit;
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/09-error.t b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/09-error.t
new file mode 100644
index 000000000..40f9fac6c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/09-error.t
@@ -0,0 +1,63 @@
+#!perl
+#
+# test apparatus for Text::Template module
+# still incomplete.
+
+use Text::Template;
+
+die "This is the test program for Text::Template version 1.46.
+You are using version $Text::Template::VERSION instead.
+That does not make sense.\n
+Aborting"
+  unless $Text::Template::VERSION == 1.46;
+
+print "1..5\n";
+$n = 1;
+
+# (1-2) Missing source
+eval {
+  Text::Template->new();
+};
+unless ($@ =~ /^\QUsage: Text::Template::new(TYPE => ..., SOURCE => ...)/) {
+  print STDERR $@;
+  print "not ";
+}
+print "ok $n\n";
+$n++;
+
+eval {
+  Text::Template->new(TYPE => 'FILE');
+};
+if ($@ =~ /^\QUsage: Text::Template::new(TYPE => ..., SOURCE => ...)/) {
+  print "ok $n\n";
+} else {
+  print STDERR $@;
+  print "not ok $n\n";
+}
+$n++;
+
+# (3) Invalid type
+eval {
+  Text::Template->new(TYPE => 'wlunch', SOURCE => 'fish food');
+};
+if ($@ =~ /^\QIllegal value `WLUNCH' for TYPE parameter/) {
+  print "ok $n\n";
+} else {
+  print STDERR $@;
+  print "not ok $n\n";
+}
+$n++;
+
+# (4-5) File does not exist
+my $o = Text::Template->new(TYPE => 'file', 
+                            SOURCE => 'this file does not exist');
+print $o ? "not ok $n\n" : "ok $n\n";
+$n++;
+print defined($Text::Template::ERROR) 
+      && $Text::Template::ERROR =~ /^Couldn't open file/
+  ? "ok $n\n" : "not ok $n\n";
+$n++;
+
+
+exit;
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/10-delimiters.t b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/10-delimiters.t
new file mode 100644
index 000000000..f74d591cc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/10-delimiters.t
@@ -0,0 +1,99 @@
+#!perl
+#
+# Tests for user-specified delimiter functions
+# These tests first appeared in version 1.20.
+
+use Text::Template;
+
+die "This is the test program for Text::Template version 1.46.
+You are using version $Text::Template::VERSION instead.
+That does not make sense.\n
+Aborting"
+  unless $Text::Template::VERSION == 1.46;
+
+print "1..18\n";
+$n = 1;
+
+# (1) Try a simple delimiter: <<..>>
+# First with the delimiters specified at object creation time
+$V = $V = 119;
+$template = q{The value of $V is <<$V>>.};
+$result = q{The value of $V is 119.};
+$template1 = Text::Template->new(TYPE => STRING, 
+				 SOURCE => $template,
+				 DELIMITERS => ['<<', '>>']
+				)
+  or die "Couldn't construct template object: $Text::Template::ERROR; aborting";
+$text = $template1->fill_in();
+print +($text eq $result ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (2) Now with delimiter choice deferred until fill-in time.
+$template1 = Text::Template->new(TYPE => STRING, SOURCE => $template);
+$text = $template1->fill_in(DELIMITERS => ['<<', '>>']);
+print +($text eq $result ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (3) Now we'll try using regex metacharacters
+# First with the delimiters specified at object creation time
+$template = q{The value of $V is [$V].};
+$template1 = Text::Template->new(TYPE => STRING, 
+				 SOURCE => $template,
+				 DELIMITERS => ['[', ']']
+				)
+  or die "Couldn't construct template object: $Text::Template::ERROR; aborting";
+$text = $template1->fill_in();
+print +($text eq $result ? '' : 'not '), "ok $n\n";
+$n++;
+
+# (4) Now with delimiter choice deferred until fill-in time.
+$template1 = Text::Template->new(TYPE => STRING, SOURCE => $template);
+$text = $template1->fill_in(DELIMITERS => ['[', ']']);
+print +($text eq $result ? '' : 'not '), "ok $n\n";
+$n++;
+
+
+
+# (5-18) Make sure \ is working properly
+# (That is to say, it is ignored.)
+# These tests are similar to those in 01-basic.t.
+my @tests = ('{""}' => '',	# (5)
+
+	     # Backslashes don't matter
+	     '{"}"}' => undef,
+	     '{"\\}"}' => undef,	# One backslash
+	     '{"\\\\}"}' => undef, # Two backslashes
+	     '{"\\\\\\}"}' => undef, # Three backslashes 
+	     '{"\\\\\\\\}"}' => undef, # Four backslashes (10)
+	     '{"\\\\\\\\\\}"}' => undef, # Five backslashes
+	     
+	     # Backslashes are always passed directly to Perl
+	     '{"x20"}' => 'x20',
+	     '{"\\x20"}' => ' ',	# One backslash
+	     '{"\\\\x20"}' => '\\x20', # Two backslashes
+	     '{"\\\\\\x20"}' => '\\ ', # Three backslashes (15)
+	     '{"\\\\\\\\x20"}' => '\\\\x20', # Four backslashes
+	     '{"\\\\\\\\\\x20"}' => '\\\\ ', # Five backslashes
+	     '{"\\x20\\}"}' => undef, # (18)
+	    );
+
+my $i;
+for ($i=0; $i<@tests; $i+=2) {
+  my $tmpl = Text::Template->new(TYPE => 'STRING',
+				 SOURCE => $tests[$i],
+				 DELIMITERS => ['{', '}'],
+				);
+  my $text = $tmpl->fill_in;
+  my $result = $tests[$i+1];
+  my $ok = (! defined $text && ! defined $result
+	    || $text eq $result);
+  unless ($ok) {
+    print STDERR "($n) expected .$result., got .$text.\n";
+  }
+  print +($ok ? '' : 'not '), "ok $n\n";
+  $n++;
+}
+
+
+exit;
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/11-prepend.t b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/11-prepend.t
new file mode 100644
index 000000000..fe242e589
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/11-prepend.t
@@ -0,0 +1,94 @@
+#!perl
+#
+# Tests for PREPEND features
+# These tests first appeared in version 1.22.
+
+use Text::Template;
+
+die "This is the test program for Text::Template version 1.46
+You are using version $Text::Template::VERSION instead.
+That does not make sense.\n
+Aborting"
+  unless $Text::Template::VERSION == 1.46;
+
+print "1..9\n";
+my $n = 1;
+
+@Emptyclass1::ISA = 'Text::Template';
+@Emptyclass2::ISA = 'Text::Template';
+
+my $tin = q{The value of $foo is: {$foo}};
+
+Text::Template->always_prepend(q{$foo = "global"});
+
+$tmpl1 = Text::Template->new(TYPE => 'STRING',
+				SOURCE => $tin,		
+			      );
+
+$tmpl2 = Text::Template->new(TYPE => 'STRING',
+			     SOURCE => $tin,		
+			     PREPEND => q{$foo = "template"},
+			     );
+
+$tmpl1->compile;
+$tmpl2->compile;
+
+$t1 = $tmpl1->fill_in(PACKAGE => 'T1');
+$t2 = $tmpl2->fill_in(PACKAGE => 'T2');
+$t3 = $tmpl2->fill_in(PREPEND => q{$foo = "fillin"}, PACKAGE => 'T3');
+
+($t1 eq 'The value of $foo is: global') or print "not ";
+print "ok $n\n"; $n++;
+($t2 eq 'The value of $foo is: template') or print "not ";
+print "ok $n\n"; $n++;
+($t3 eq 'The value of $foo is: fillin') or print "not ";
+print "ok $n\n"; $n++;
+
+Emptyclass1->always_prepend(q{$foo = 'Emptyclass global';});
+$tmpl1 = Emptyclass1->new(TYPE => 'STRING',
+				SOURCE => $tin,		
+			      );
+
+$tmpl2 = Emptyclass1->new(TYPE => 'STRING',
+			     SOURCE => $tin,		
+			     PREPEND => q{$foo = "template"},
+			     );
+
+$tmpl1->compile;
+$tmpl2->compile;
+
+$t1 = $tmpl1->fill_in(PACKAGE => 'T4');
+$t2 = $tmpl2->fill_in(PACKAGE => 'T5');
+$t3 = $tmpl2->fill_in(PREPEND => q{$foo = "fillin"}, PACKAGE => 'T6');
+
+($t1 eq 'The value of $foo is: Emptyclass global') or print "not ";
+print "ok $n\n"; $n++;
+($t2 eq 'The value of $foo is: template') or print "not ";
+print "ok $n\n"; $n++;
+($t3 eq 'The value of $foo is: fillin') or print "not ";
+print "ok $n\n"; $n++;
+
+$tmpl1 = Emptyclass2->new(TYPE => 'STRING',
+				SOURCE => $tin,		
+			      );
+
+$tmpl2 = Emptyclass2->new(TYPE => 'STRING',
+			     SOURCE => $tin,		
+			     PREPEND => q{$foo = "template"},
+			     );
+
+$tmpl1->compile;
+$tmpl2->compile;
+
+$t1 = $tmpl1->fill_in(PACKAGE => 'T4');
+$t2 = $tmpl2->fill_in(PACKAGE => 'T5');
+$t3 = $tmpl2->fill_in(PREPEND => q{$foo = "fillin"}, PACKAGE => 'T6');
+
+($t1 eq 'The value of $foo is: global') or print "not ";
+print "ok $n\n"; $n++;
+($t2 eq 'The value of $foo is: template') or print "not ";
+print "ok $n\n"; $n++;
+($t3 eq 'The value of $foo is: fillin') or print "not ";
+print "ok $n\n"; $n++;
+
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/12-preprocess.t b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/12-preprocess.t
new file mode 100644
index 000000000..60b6b0c65
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/12-preprocess.t
@@ -0,0 +1,52 @@
+#!perl
+#
+# Tests for PREPROCESSOR features
+# These tests first appeared in version 1.25.
+
+use Text::Template::Preprocess;
+
+die "This is the test program for Text::Template::Preprocess version 1.46.
+You are using version $Text::Template::Preprocess::VERSION instead.
+That does not make sense.\n
+Aborting"
+  unless $Text::Template::Preprocess::VERSION == 1.46;
+
+$TMPFILE = "tt$$";
+
+print "1..8\n";
+my $n = 1;
+
+my $py = sub { tr/x/y/ };
+my $pz = sub { tr/x/z/ };
+
+my $t = 'xxx The value of $x is {$x}';
+my $outx = 'xxx The value of $x is 119';
+my $outy = 'yyy The value of $y is 23';
+my $outz = 'zzz The value of $z is 5';
+open TF, "> $TMPFILE" or die "Couldn't open test file: $!; aborting";
+print TF $t;
+close TF;
+
+@result = ($outx, $outy, $outz, $outz);
+for my $trial (1, 0) {
+  for my $test (0 .. 3) {
+    my $tmpl;
+    if ($trial == 0) {
+      $tmpl = new Text::Template::Preprocess 
+	(TYPE => 'STRING', SOURCE => $t) or die;
+    } else {
+      open TF, "< $TMPFILE" or die "Couldn't open test file: $!; aborting";
+      $tmpl = new Text::Template::Preprocess 
+	(TYPE => 'FILEHANDLE', SOURCE => \*TF) or die;
+    }
+    $tmpl->preprocessor($py) if ($test & 1) == 1;
+    my @args = ((($test & 2) == 2) ? (PREPROCESSOR => $pz) : ());
+    my $o = $tmpl->fill_in(@args, 
+			   HASH => {x => 119, 'y' => 23, z => 5});
+#    print STDERR "$o/$result[$test]\n";
+    print +(($o eq $result[$test]) ? '' : 'not '), "ok $n\n";
+    $n++;
+  }
+}
+
+unlink $TMPFILE;
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/13-taint.t b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/13-taint.t
new file mode 100644
index 000000000..d92a37463
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/13-taint.t
@@ -0,0 +1,119 @@
+#!perl -T
+# Tests for taint-mode features
+
+use lib 'blib/lib';
+use Text::Template;
+
+die "This is the test program for Text::Template version 1.46.
+You are using version $Text::Template::VERSION instead.
+That does not make sense.\n
+Aborting"
+  unless $Text::Template::VERSION == 1.46;
+
+my $r = int(rand(10000));
+my $file = "tt$r";
+
+# makes its arguments tainted
+sub taint {
+  for (@_) {
+    $_ .= substr($0,0,0);       # LOD
+  }
+}
+
+
+print "1..21\n";
+
+my $n =1;
+print "ok ", $n++, "\n";
+
+my $template = 'The value of $n is {$n}.';
+
+open T, "> $file" or die "Couldn't write temporary file $file: $!";
+print T $template, "\n";
+close T or die "Couldn't finish temporary file $file: $!";
+
+sub should_fail {
+  my $obj = Text::Template->new(@_);
+  eval {$obj->fill_in()};
+  if ($@) {
+    print "ok $n # $@\n";
+  } else {
+    print "not ok $n # (didn't fail)\n";
+  }
+  $n++;
+}
+
+sub should_work {
+  my $obj = Text::Template->new(@_);
+  eval {$obj->fill_in()};
+  if ($@) {
+    print "not ok $n # $@\n";
+  } else {
+    print "ok $n\n";
+  }
+  $n++;
+}
+
+sub should_be_tainted {
+  if (Text::Template::_is_clean($_[0])) {
+    print "not ok $n\n"; $n++; return;
+  }
+  print "ok $n\n"; $n++; return; 
+}
+
+sub should_be_clean {
+  unless (Text::Template::_is_clean($_[0])) {
+    print "not ok $n\n"; $n++; return;
+  }
+  print "ok $n\n"; $n++; return; 
+}
+
+# Tainted filename should die with and without UNTAINT option
+# untainted filename should die without UNTAINT option
+# filehandle should die without UNTAINT option
+# string and array with tainted data should die either way
+
+# (2)-(7)
+my $tfile = $file;
+taint($tfile);
+should_be_tainted($tfile);
+should_be_clean($file);
+should_fail TYPE => 'file', SOURCE => $tfile;
+should_fail TYPE => 'file', SOURCE => $tfile, UNTAINT => 1;
+should_fail TYPE => 'file', SOURCE => $file;
+should_work TYPE => 'file', SOURCE => $file, UNTAINT => 1;
+
+# (8-9)
+open H, "< $file" or die "Couldn't open $file for reading: $!; aborting";
+should_fail TYPE => 'filehandle', SOURCE => \*H;
+close H;
+open H, "< $file" or die "Couldn't open $file for reading: $!; aborting";
+should_work TYPE => 'filehandle', SOURCE => \*H, UNTAINT => 1;
+close H;
+
+# (10-15)
+my $ttemplate = $template;
+taint($ttemplate);
+should_be_tainted($ttemplate);
+should_be_clean($template);
+should_fail TYPE => 'string', SOURCE => $ttemplate;
+should_fail TYPE => 'string', SOURCE => $ttemplate, UNTAINT => 1;
+should_work TYPE => 'string', SOURCE => $template;
+should_work TYPE => 'string', SOURCE => $template, UNTAINT => 1;
+
+# (16-19)
+my $array = [ $template ];
+my $tarray = [ $ttemplate ];
+should_fail TYPE => 'array', SOURCE => $tarray;
+should_fail TYPE => 'array', SOURCE => $tarray, UNTAINT => 1;
+should_work TYPE => 'array', SOURCE => $array;
+should_work TYPE => 'array', SOURCE => $array, UNTAINT => 1;
+
+# (20-21) Test _unconditionally_untaint utility function
+Text::Template::_unconditionally_untaint($ttemplate);
+should_be_clean($ttemplate);
+Text::Template::_unconditionally_untaint($tfile);
+should_be_clean($tfile);
+
+END { unlink $file }
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/14-broken.t b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/14-broken.t
new file mode 100644
index 000000000..d362395cf
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/Text-Template-1.46/t/14-broken.t
@@ -0,0 +1,82 @@
+#!perl
+# test apparatus for Text::Template module
+
+use Text::Template;
+
+print "1..5\n";
+
+$n=1;
+
+die "This is the test program for Text::Template version 1.46.
+You are using version $Text::Template::VERSION instead.
+That does not make sense.\n
+Aborting"
+  unless $Text::Template::VERSION == 1.46;
+
+# (1) basic error delivery
+{ my $r = Text::Template->new(TYPE => 'string',
+                              SOURCE => '{1/0}',
+                             )->fill_in();
+  if ($r eq q{Program fragment delivered error ``Illegal division by zero at template line 1.''}) {
+    print "ok $n\n";
+  } else {
+    print "not ok $n\n# $r\n";
+  }
+  $n++;
+}
+
+# (2) BROKEN sub called in ->new?
+{ my $r = Text::Template->new(TYPE => 'string',
+                              SOURCE => '{1/0}',
+                              BROKEN => sub {'---'},
+                             )->fill_in();
+  if ($r eq q{---}) {
+    print "ok $n\n";
+  } else {
+    print "not ok $n\n# $r\n";
+  }
+  $n++;
+}
+
+# (3) BROKEN sub called in ->fill_in?
+{ my $r = Text::Template->new(TYPE => 'string',
+                              SOURCE => '{1/0}',
+                             )->fill_in(BROKEN => sub {'---'});
+  if ($r eq q{---}) {
+    print "ok $n\n";
+  } else {
+    print "not ok $n\n# $r\n";
+  }
+  $n++;
+}
+
+# (4) BROKEN sub passed correct args when called in ->new?
+{ my $r = Text::Template->new(TYPE => 'string',
+                              SOURCE => '{1/0}',
+                              BROKEN => sub { my %a = @_;
+                                qq{$a{lineno},$a{error},$a{text}}
+                              },
+                             )->fill_in();
+  if ($r eq qq{1,Illegal division by zero at template line 1.\n,1/0}) {
+    print "ok $n\n";
+  } else {
+    print "not ok $n\n# $r\n";
+  }
+  $n++;
+}
+
+# (5) BROKEN sub passed correct args when called in ->fill_in?
+{ my $r = Text::Template->new(TYPE => 'string',
+                              SOURCE => '{1/0}',
+                             )->fill_in(BROKEN => 
+                                        sub { my %a = @_;
+                                              qq{$a{lineno},$a{error},$a{text}}
+                                            });
+  if ($r eq qq{1,Illegal division by zero at template line 1.\n,1/0}) {
+    print "ok $n\n";
+  } else {
+    print "not ok $n\n# $r\n";
+  }
+  $n++;
+}
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/external/perl/transfer/Text/Template.pm b/trunk/3rdparty/openssl-1.1-fit/external/perl/transfer/Text/Template.pm
new file mode 100644
index 000000000..b21f87531
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/external/perl/transfer/Text/Template.pm
@@ -0,0 +1,23 @@
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# Quick transfer to the downloaded Text::Template
+
+package transfer::Text::Template;
+$VERSION = 1.46;
+
+BEGIN {
+    use File::Spec::Functions;
+    use File::Basename;
+    use lib catdir(dirname(__FILE__), "..", "..", "Text-Template-1.46", "lib");
+    # Some unpackers on VMS convert periods in directory names to underscores
+    use lib catdir(dirname(__FILE__), "..", "..", "Text-Template-1_46", "lib");
+    use Text::Template;
+    shift @INC;                 # Takes away the effect of use lib
+    shift @INC;                 # Takes away the effect of use lib
+}
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/README.md b/trunk/3rdparty/openssl-1.1-fit/fuzz/README.md
new file mode 100644
index 000000000..44c73f857
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/README.md
@@ -0,0 +1,131 @@
+# I Can Haz Fuzz?
+
+LibFuzzer
+=========
+
+Or, how to fuzz OpenSSL with [libfuzzer](http://llvm.org/docs/LibFuzzer.html).
+
+Starting from a vanilla+OpenSSH server Ubuntu install.
+
+Use Chrome's handy recent build of clang. Older versions may also work.
+
+    $ sudo apt-get install git
+    $ mkdir git-work
+    $ git clone https://chromium.googlesource.com/chromium/src/tools/clang
+    $ clang/scripts/update.py
+
+You may want to git pull and re-run the update from time to time.
+
+Update your path:
+
+    $ PATH=~/third_party/llvm-build/Release+Asserts/bin/:$PATH
+
+Get and build libFuzzer (there is a git mirror at
+https://github.com/llvm-mirror/llvm/tree/master/lib/Fuzzer if you prefer):
+
+    $ cd
+    $ sudo apt-get install subversion
+    $ mkdir svn-work
+    $ cd svn-work
+    $ svn co https://llvm.org/svn/llvm-project/compiler-rt/trunk/lib/fuzzer Fuzzer
+    $ cd Fuzzer
+    $ clang++ -c -g -O2 -std=c++11 *.cpp
+    $ ar r libFuzzer.a *.o
+    $ ranlib libFuzzer.a
+
+Configure for fuzzing:
+
+    $ CC=clang ./config enable-fuzz-libfuzzer \
+            --with-fuzzer-include=../../svn-work/Fuzzer \
+            --with-fuzzer-lib=../../svn-work/Fuzzer/libFuzzer.a \
+            -DPEDANTIC enable-asan enable-ubsan no-shared \
+            -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION \
+            -fsanitize-coverage=trace-pc-guard,indirect-calls,trace-cmp \
+            enable-ec_nistp_64_gcc_128 -fno-sanitize=alignment enable-tls1_3 \
+            enable-weak-ssl-ciphers enable-rc5 enable-md2 \
+            enable-ssl3 enable-ssl3-method enable-nextprotoneg \
+            --debug
+    $ sudo apt-get install make
+    $ LDCMD=clang++ make -j
+    $ fuzz/helper.py $FUZZER
+
+Where $FUZZER is one of the executables in `fuzz/`.
+
+If you get a crash, you should find a corresponding input file in
+`fuzz/corpora/$FUZZER-crash/`.
+
+AFL
+===
+
+Configure for fuzzing:
+
+    $ sudo apt-get install afl-clang
+    $ CC=afl-clang-fast ./config enable-fuzz-afl no-shared -DPEDANTIC \
+        enable-tls1_3 enable-weak-ssl-ciphers enable-rc5 enable-md2 \
+        enable-ssl3 enable-ssl3-method enable-nextprotoneg \
+        enable-ec_nistp_64_gcc_128 -fno-sanitize=alignment \
+        --debug
+    $ make
+
+The following options can also be enabled: enable-asan, enable-ubsan, enable-msan
+
+Run one of the fuzzers:
+
+    $ afl-fuzz -i fuzz/corpora/$FUZZER -o fuzz/corpora/$FUZZER/out fuzz/$FUZZER
+
+Where $FUZZER is one of the executables in `fuzz/`.
+
+Reproducing issues
+==================
+
+If a fuzzer generates a reproducible error, you can reproduce the problem using
+the fuzz/*-test binaries and the file generated by the fuzzer. They binaries
+don't need to be build for fuzzing, there is no need to set CC or the call
+config with enable-fuzz-* or -fsanitize-coverage, but some of the other options
+above might be needed. For instance the enable-asan or enable-ubsan option might
+be useful to show you when the problem happens. For the client and server fuzzer
+it might be needed to use -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION to
+reproduce the generated random numbers.
+
+To reproduce the crash you can run:
+
+    $ fuzz/$FUZZER-test $file
+
+Random numbers
+==============
+
+The client and server fuzzer normally generate random numbers as part of the TLS
+connection setup. This results in the coverage of the fuzzing corpus changing
+depending on the random numbers. This also has an effect for coverage of the
+rest of the test suite and you see the coverage change for each commit even when
+no code has been modified.
+
+Since we want to maximize the coverage of the fuzzing corpus, the client and
+server fuzzer will use predictable numbers instead of the random numbers. This
+is controlled by the FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION define.
+
+The coverage depends on the way the numbers are generated. We don't disable any
+check of hashes, but the corpus has the correct hash in it for the random
+numbers that were generated. For instance the client fuzzer will always generate
+the same client hello with the same random number in it, and so the server, as
+emulated by the file, can be generated for that client hello.
+
+Coverage changes
+================
+
+Since the corpus depends on the default behaviour of the client and the server,
+changes in what they send by default will have an impact on the coverage. The
+corpus will need to be updated in that case.
+
+Updating the corpus
+===================
+
+The client and server corpus is generated with multiple config options:
+- The options as documented above
+- Without enable-ec_nistp_64_gcc_128 and without --debug
+- With no-asm
+- Using 32 bit
+- A default config, plus options needed to generate the fuzzer.
+
+The libfuzzer merge option is used to add the additional coverage
+from each config to the minimal set.
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/asn1.c b/trunk/3rdparty/openssl-1.1-fit/fuzz/asn1.c
new file mode 100644
index 000000000..fd2271bf5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/asn1.c
@@ -0,0 +1,352 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+
+/*
+ * Fuzz ASN.1 parsing for various data structures. Specify which on the
+ * command line:
+ *
+ * asn1 <data structure>
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include <openssl/asn1.h>
+#include <openssl/asn1t.h>
+#include <openssl/dh.h>
+#include <openssl/ec.h>
+#include <openssl/ocsp.h>
+#include <openssl/pkcs12.h>
+#include <openssl/rsa.h>
+#include <openssl/ts.h>
+#include <openssl/x509v3.h>
+#include <openssl/cms.h>
+#include <openssl/err.h>
+#include <openssl/rand.h>
+#include <openssl/bio.h>
+#include <openssl/evp.h>
+#include <openssl/ssl.h>
+#include "fuzzer.h"
+
+#include "rand.inc"
+
+static ASN1_ITEM_EXP *item_type[] = {
+    ASN1_ITEM_ref(ACCESS_DESCRIPTION),
+#ifndef OPENSSL_NO_RFC3779
+    ASN1_ITEM_ref(ASIdentifierChoice),
+    ASN1_ITEM_ref(ASIdentifiers),
+    ASN1_ITEM_ref(ASIdOrRange),
+#endif
+    ASN1_ITEM_ref(ASN1_ANY),
+    ASN1_ITEM_ref(ASN1_BIT_STRING),
+    ASN1_ITEM_ref(ASN1_BMPSTRING),
+    ASN1_ITEM_ref(ASN1_BOOLEAN),
+    ASN1_ITEM_ref(ASN1_ENUMERATED),
+    ASN1_ITEM_ref(ASN1_FBOOLEAN),
+    ASN1_ITEM_ref(ASN1_GENERALIZEDTIME),
+    ASN1_ITEM_ref(ASN1_GENERALSTRING),
+    ASN1_ITEM_ref(ASN1_IA5STRING),
+    ASN1_ITEM_ref(ASN1_INTEGER),
+    ASN1_ITEM_ref(ASN1_NULL),
+    ASN1_ITEM_ref(ASN1_OBJECT),
+    ASN1_ITEM_ref(ASN1_OCTET_STRING),
+    ASN1_ITEM_ref(ASN1_OCTET_STRING_NDEF),
+    ASN1_ITEM_ref(ASN1_PRINTABLE),
+    ASN1_ITEM_ref(ASN1_PRINTABLESTRING),
+    ASN1_ITEM_ref(ASN1_SEQUENCE),
+    ASN1_ITEM_ref(ASN1_SEQUENCE_ANY),
+    ASN1_ITEM_ref(ASN1_SET_ANY),
+    ASN1_ITEM_ref(ASN1_T61STRING),
+    ASN1_ITEM_ref(ASN1_TBOOLEAN),
+    ASN1_ITEM_ref(ASN1_TIME),
+    ASN1_ITEM_ref(ASN1_UNIVERSALSTRING),
+    ASN1_ITEM_ref(ASN1_UTCTIME),
+    ASN1_ITEM_ref(ASN1_UTF8STRING),
+    ASN1_ITEM_ref(ASN1_VISIBLESTRING),
+#ifndef OPENSSL_NO_RFC3779
+    ASN1_ITEM_ref(ASRange),
+#endif
+    ASN1_ITEM_ref(AUTHORITY_INFO_ACCESS),
+    ASN1_ITEM_ref(AUTHORITY_KEYID),
+    ASN1_ITEM_ref(BASIC_CONSTRAINTS),
+    ASN1_ITEM_ref(BIGNUM),
+    ASN1_ITEM_ref(CBIGNUM),
+    ASN1_ITEM_ref(CERTIFICATEPOLICIES),
+#ifndef OPENSSL_NO_CMS
+    ASN1_ITEM_ref(CMS_ContentInfo),
+    ASN1_ITEM_ref(CMS_ReceiptRequest),
+    ASN1_ITEM_ref(CRL_DIST_POINTS),
+#endif
+#ifndef OPENSSL_NO_DH
+    ASN1_ITEM_ref(DHparams),
+#endif
+    ASN1_ITEM_ref(DIRECTORYSTRING),
+    ASN1_ITEM_ref(DISPLAYTEXT),
+    ASN1_ITEM_ref(DIST_POINT),
+    ASN1_ITEM_ref(DIST_POINT_NAME),
+#ifndef OPENSSL_NO_EC
+    ASN1_ITEM_ref(ECPARAMETERS),
+    ASN1_ITEM_ref(ECPKPARAMETERS),
+#endif
+    ASN1_ITEM_ref(EDIPARTYNAME),
+    ASN1_ITEM_ref(EXTENDED_KEY_USAGE),
+    ASN1_ITEM_ref(GENERAL_NAME),
+    ASN1_ITEM_ref(GENERAL_NAMES),
+    ASN1_ITEM_ref(GENERAL_SUBTREE),
+#ifndef OPENSSL_NO_RFC3779
+    ASN1_ITEM_ref(IPAddressChoice),
+    ASN1_ITEM_ref(IPAddressFamily),
+    ASN1_ITEM_ref(IPAddressOrRange),
+    ASN1_ITEM_ref(IPAddressRange),
+#endif
+    ASN1_ITEM_ref(ISSUING_DIST_POINT),
+#if OPENSSL_API_COMPAT < 0x10200000L
+    ASN1_ITEM_ref(LONG),
+#endif
+    ASN1_ITEM_ref(NAME_CONSTRAINTS),
+    ASN1_ITEM_ref(NETSCAPE_CERT_SEQUENCE),
+    ASN1_ITEM_ref(NETSCAPE_SPKAC),
+    ASN1_ITEM_ref(NETSCAPE_SPKI),
+    ASN1_ITEM_ref(NOTICEREF),
+#ifndef OPENSSL_NO_OCSP
+    ASN1_ITEM_ref(OCSP_BASICRESP),
+    ASN1_ITEM_ref(OCSP_CERTID),
+    ASN1_ITEM_ref(OCSP_CERTSTATUS),
+    ASN1_ITEM_ref(OCSP_CRLID),
+    ASN1_ITEM_ref(OCSP_ONEREQ),
+    ASN1_ITEM_ref(OCSP_REQINFO),
+    ASN1_ITEM_ref(OCSP_REQUEST),
+    ASN1_ITEM_ref(OCSP_RESPBYTES),
+    ASN1_ITEM_ref(OCSP_RESPDATA),
+    ASN1_ITEM_ref(OCSP_RESPID),
+    ASN1_ITEM_ref(OCSP_RESPONSE),
+    ASN1_ITEM_ref(OCSP_REVOKEDINFO),
+    ASN1_ITEM_ref(OCSP_SERVICELOC),
+    ASN1_ITEM_ref(OCSP_SIGNATURE),
+    ASN1_ITEM_ref(OCSP_SINGLERESP),
+#endif
+    ASN1_ITEM_ref(OTHERNAME),
+    ASN1_ITEM_ref(PBE2PARAM),
+    ASN1_ITEM_ref(PBEPARAM),
+    ASN1_ITEM_ref(PBKDF2PARAM),
+    ASN1_ITEM_ref(PKCS12),
+    ASN1_ITEM_ref(PKCS12_AUTHSAFES),
+    ASN1_ITEM_ref(PKCS12_BAGS),
+    ASN1_ITEM_ref(PKCS12_MAC_DATA),
+    ASN1_ITEM_ref(PKCS12_SAFEBAG),
+    ASN1_ITEM_ref(PKCS12_SAFEBAGS),
+    ASN1_ITEM_ref(PKCS7),
+    ASN1_ITEM_ref(PKCS7_ATTR_SIGN),
+    ASN1_ITEM_ref(PKCS7_ATTR_VERIFY),
+    ASN1_ITEM_ref(PKCS7_DIGEST),
+    ASN1_ITEM_ref(PKCS7_ENC_CONTENT),
+    ASN1_ITEM_ref(PKCS7_ENCRYPT),
+    ASN1_ITEM_ref(PKCS7_ENVELOPE),
+    ASN1_ITEM_ref(PKCS7_ISSUER_AND_SERIAL),
+    ASN1_ITEM_ref(PKCS7_RECIP_INFO),
+    ASN1_ITEM_ref(PKCS7_SIGNED),
+    ASN1_ITEM_ref(PKCS7_SIGN_ENVELOPE),
+    ASN1_ITEM_ref(PKCS7_SIGNER_INFO),
+    ASN1_ITEM_ref(PKCS8_PRIV_KEY_INFO),
+    ASN1_ITEM_ref(PKEY_USAGE_PERIOD),
+    ASN1_ITEM_ref(POLICY_CONSTRAINTS),
+    ASN1_ITEM_ref(POLICYINFO),
+    ASN1_ITEM_ref(POLICY_MAPPING),
+    ASN1_ITEM_ref(POLICY_MAPPINGS),
+    ASN1_ITEM_ref(POLICYQUALINFO),
+    ASN1_ITEM_ref(PROXY_CERT_INFO_EXTENSION),
+    ASN1_ITEM_ref(PROXY_POLICY),
+    ASN1_ITEM_ref(RSA_OAEP_PARAMS),
+    ASN1_ITEM_ref(RSAPrivateKey),
+    ASN1_ITEM_ref(RSA_PSS_PARAMS),
+    ASN1_ITEM_ref(RSAPublicKey),
+    ASN1_ITEM_ref(SXNET),
+    ASN1_ITEM_ref(SXNETID),
+    ASN1_ITEM_ref(USERNOTICE),
+    ASN1_ITEM_ref(X509),
+    ASN1_ITEM_ref(X509_ALGOR),
+    ASN1_ITEM_ref(X509_ALGORS),
+    ASN1_ITEM_ref(X509_ATTRIBUTE),
+    ASN1_ITEM_ref(X509_CERT_AUX),
+    ASN1_ITEM_ref(X509_CINF),
+    ASN1_ITEM_ref(X509_CRL),
+    ASN1_ITEM_ref(X509_CRL_INFO),
+    ASN1_ITEM_ref(X509_EXTENSION),
+    ASN1_ITEM_ref(X509_EXTENSIONS),
+    ASN1_ITEM_ref(X509_NAME),
+    ASN1_ITEM_ref(X509_NAME_ENTRY),
+    ASN1_ITEM_ref(X509_PUBKEY),
+    ASN1_ITEM_ref(X509_REQ),
+    ASN1_ITEM_ref(X509_REQ_INFO),
+    ASN1_ITEM_ref(X509_REVOKED),
+    ASN1_ITEM_ref(X509_SIG),
+    ASN1_ITEM_ref(X509_VAL),
+#if OPENSSL_API_COMPAT < 0x10200000L
+    ASN1_ITEM_ref(ZLONG),
+#endif
+    ASN1_ITEM_ref(INT32),
+    ASN1_ITEM_ref(ZINT32),
+    ASN1_ITEM_ref(UINT32),
+    ASN1_ITEM_ref(ZUINT32),
+    ASN1_ITEM_ref(INT64),
+    ASN1_ITEM_ref(ZINT64),
+    ASN1_ITEM_ref(UINT64),
+    ASN1_ITEM_ref(ZUINT64),
+    NULL
+};
+
+static ASN1_PCTX *pctx;
+
+#define DO_TEST(TYPE, D2I, I2D, PRINT) { \
+    const unsigned char *p = buf; \
+    unsigned char *der = NULL; \
+    TYPE *type = D2I(NULL, &p, len); \
+    \
+    if (type != NULL) { \
+        int len2; \
+        BIO *bio = BIO_new(BIO_s_null()); \
+        \
+        PRINT(bio, type); \
+        BIO_free(bio); \
+        len2 = I2D(type, &der); \
+        if (len2 != 0) {} \
+        OPENSSL_free(der); \
+        TYPE ## _free(type); \
+    } \
+}
+
+#define DO_TEST_PRINT_OFFSET(TYPE, D2I, I2D, PRINT) { \
+    const unsigned char *p = buf; \
+    unsigned char *der = NULL; \
+    TYPE *type = D2I(NULL, &p, len); \
+    \
+    if (type != NULL) { \
+        BIO *bio = BIO_new(BIO_s_null()); \
+        \
+        PRINT(bio, type, 0); \
+        BIO_free(bio); \
+        I2D(type, &der); \
+        OPENSSL_free(der); \
+        TYPE ## _free(type); \
+    } \
+}
+
+#define DO_TEST_PRINT_PCTX(TYPE, D2I, I2D, PRINT) { \
+    const unsigned char *p = buf; \
+    unsigned char *der = NULL; \
+    TYPE *type = D2I(NULL, &p, len); \
+    \
+    if (type != NULL) { \
+        BIO *bio = BIO_new(BIO_s_null()); \
+        \
+        PRINT(bio, type, 0, pctx); \
+        BIO_free(bio); \
+        I2D(type, &der); \
+        OPENSSL_free(der); \
+        TYPE ## _free(type); \
+    } \
+}
+
+
+#define DO_TEST_NO_PRINT(TYPE, D2I, I2D) { \
+    const unsigned char *p = buf; \
+    unsigned char *der = NULL; \
+    TYPE *type = D2I(NULL, &p, len); \
+    \
+    if (type != NULL) { \
+        BIO *bio = BIO_new(BIO_s_null()); \
+        \
+        BIO_free(bio); \
+        I2D(type, &der); \
+        OPENSSL_free(der); \
+        TYPE ## _free(type); \
+    } \
+}
+
+
+int FuzzerInitialize(int *argc, char ***argv)
+{
+    pctx = ASN1_PCTX_new();
+    ASN1_PCTX_set_flags(pctx, ASN1_PCTX_FLAGS_SHOW_ABSENT |
+        ASN1_PCTX_FLAGS_SHOW_SEQUENCE | ASN1_PCTX_FLAGS_SHOW_SSOF |
+        ASN1_PCTX_FLAGS_SHOW_TYPE | ASN1_PCTX_FLAGS_SHOW_FIELD_STRUCT_NAME);
+    ASN1_PCTX_set_str_flags(pctx, ASN1_STRFLGS_UTF8_CONVERT |
+        ASN1_STRFLGS_SHOW_TYPE | ASN1_STRFLGS_DUMP_ALL);
+
+    OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL);
+    OPENSSL_init_ssl(OPENSSL_INIT_LOAD_SSL_STRINGS, NULL);
+    ERR_get_state();
+    CRYPTO_free_ex_index(0, -1);
+    FuzzerSetRand();
+
+    return 1;
+}
+
+int FuzzerTestOneInput(const uint8_t *buf, size_t len)
+{
+    int n;
+
+
+    for (n = 0; item_type[n] != NULL; ++n) {
+        const uint8_t *b = buf;
+        unsigned char *der = NULL;
+        const ASN1_ITEM *i = ASN1_ITEM_ptr(item_type[n]);
+        ASN1_VALUE *o = ASN1_item_d2i(NULL, &b, len, i);
+
+        if (o != NULL) {
+            BIO *bio = BIO_new(BIO_s_null());
+
+            ASN1_item_print(bio, o, 4, i, pctx);
+            BIO_free(bio);
+            ASN1_item_i2d(o, &der, i);
+            OPENSSL_free(der);
+            ASN1_item_free(o, i);
+        }
+    }
+
+#ifndef OPENSSL_NO_TS
+    DO_TEST(TS_REQ, d2i_TS_REQ, i2d_TS_REQ, TS_REQ_print_bio);
+    DO_TEST(TS_MSG_IMPRINT, d2i_TS_MSG_IMPRINT, i2d_TS_MSG_IMPRINT, TS_MSG_IMPRINT_print_bio);
+    DO_TEST(TS_RESP, d2i_TS_RESP, i2d_TS_RESP, TS_RESP_print_bio);
+    DO_TEST(TS_STATUS_INFO, d2i_TS_STATUS_INFO, i2d_TS_STATUS_INFO, TS_STATUS_INFO_print_bio);
+    DO_TEST(TS_TST_INFO, d2i_TS_TST_INFO, i2d_TS_TST_INFO, TS_TST_INFO_print_bio);
+    DO_TEST_NO_PRINT(TS_ACCURACY, d2i_TS_ACCURACY, i2d_TS_ACCURACY);
+    DO_TEST_NO_PRINT(ESS_ISSUER_SERIAL, d2i_ESS_ISSUER_SERIAL, i2d_ESS_ISSUER_SERIAL);
+    DO_TEST_NO_PRINT(ESS_CERT_ID, d2i_ESS_CERT_ID, i2d_ESS_CERT_ID);
+    DO_TEST_NO_PRINT(ESS_SIGNING_CERT, d2i_ESS_SIGNING_CERT, i2d_ESS_SIGNING_CERT);
+#endif
+#ifndef OPENSSL_NO_DH
+    DO_TEST(DH, d2i_DHparams, i2d_DHparams, DHparams_print);
+    DO_TEST(DH, d2i_DHxparams, i2d_DHxparams, DHparams_print);
+#endif
+#ifndef OPENSSL_NO_DSA
+    DO_TEST_NO_PRINT(DSA_SIG, d2i_DSA_SIG, i2d_DSA_SIG);
+    DO_TEST_PRINT_OFFSET(DSA, d2i_DSAPrivateKey, i2d_DSAPrivateKey, DSA_print);
+    DO_TEST_PRINT_OFFSET(DSA, d2i_DSAPublicKey, i2d_DSAPublicKey, DSA_print);
+    DO_TEST(DSA, d2i_DSAparams, i2d_DSAparams, DSAparams_print);
+#endif
+    DO_TEST_PRINT_OFFSET(RSA, d2i_RSAPublicKey, i2d_RSAPublicKey, RSA_print);
+#ifndef OPENSSL_NO_EC
+    DO_TEST_PRINT_OFFSET(EC_GROUP, d2i_ECPKParameters, i2d_ECPKParameters, ECPKParameters_print);
+    DO_TEST_PRINT_OFFSET(EC_KEY, d2i_ECPrivateKey, i2d_ECPrivateKey, EC_KEY_print);
+    DO_TEST(EC_KEY, d2i_ECParameters, i2d_ECParameters, ECParameters_print);
+    DO_TEST_NO_PRINT(ECDSA_SIG, d2i_ECDSA_SIG, i2d_ECDSA_SIG);
+#endif
+    DO_TEST_PRINT_PCTX(EVP_PKEY, d2i_AutoPrivateKey, i2d_PrivateKey, EVP_PKEY_print_private);
+    DO_TEST(SSL_SESSION, d2i_SSL_SESSION, i2d_SSL_SESSION, SSL_SESSION_print);
+
+    ERR_clear_error();
+
+    return 0;
+}
+
+void FuzzerCleanup(void)
+{
+    ASN1_PCTX_free(pctx);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/asn1parse.c b/trunk/3rdparty/openssl-1.1-fit/fuzz/asn1parse.c
new file mode 100644
index 000000000..cf5ef72a1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/asn1parse.c
@@ -0,0 +1,43 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+
+/*
+ * Fuzz the parser used for dumping ASN.1 using "openssl asn1parse".
+ */
+
+#include <stdio.h>
+#include <openssl/asn1.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/err.h>
+#include "fuzzer.h"
+
+static BIO *bio_out;
+
+int FuzzerInitialize(int *argc, char ***argv)
+{
+    bio_out = BIO_new_file("/dev/null", "w");
+    OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL);
+    ERR_get_state();
+    CRYPTO_free_ex_index(0, -1);
+    return 1;
+}
+
+int FuzzerTestOneInput(const uint8_t *buf, size_t len)
+{
+    (void)ASN1_parse_dump(bio_out, buf, len, 0, 0);
+    ERR_clear_error();
+    return 0;
+}
+
+void FuzzerCleanup(void)
+{
+    BIO_free(bio_out);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/bignum.c b/trunk/3rdparty/openssl-1.1-fit/fuzz/bignum.c
new file mode 100644
index 000000000..c5136601b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/bignum.c
@@ -0,0 +1,109 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+
+/*
+ * Confirm that a^b mod c agrees when calculated cleverly vs naively, for
+ * random a, b and c.
+ */
+
+#include <stdio.h>
+#include <openssl/bn.h>
+#include <openssl/err.h>
+#include "fuzzer.h"
+
+
+int FuzzerInitialize(int *argc, char ***argv)
+{
+    OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL);
+    ERR_get_state();
+
+    return 1;
+}
+
+int FuzzerTestOneInput(const uint8_t *buf, size_t len)
+{
+    int success = 0;
+    size_t l1 = 0, l2 = 0, l3 = 0;
+    int s1 = 0, s3 = 0;
+    BN_CTX *ctx;
+    BIGNUM *b1;
+    BIGNUM *b2;
+    BIGNUM *b3;
+    BIGNUM *b4;
+    BIGNUM *b5;
+
+    b1 = BN_new();
+    b2 = BN_new();
+    b3 = BN_new();
+    b4 = BN_new();
+    b5 = BN_new();
+    ctx = BN_CTX_new();
+
+    /* Divide the input into three parts, using the values of the first two
+     * bytes to choose lengths, which generate b1, b2 and b3. Use three bits
+     * of the third byte to choose signs for the three numbers.
+     */
+    if (len > 2) {
+        len -= 3;
+        l1 = (buf[0] * len) / 255;
+        ++buf;
+        l2 = (buf[0] * (len - l1)) / 255;
+        ++buf;
+        l3 = len - l1 - l2;
+
+        s1 = buf[0] & 1;
+        s3 = buf[0] & 4;
+        ++buf;
+    }
+    OPENSSL_assert(BN_bin2bn(buf, l1, b1) == b1);
+    BN_set_negative(b1, s1);
+    OPENSSL_assert(BN_bin2bn(buf + l1, l2, b2) == b2);
+    OPENSSL_assert(BN_bin2bn(buf + l1 + l2, l3, b3) == b3);
+    BN_set_negative(b3, s3);
+
+    /* mod 0 is undefined */
+    if (BN_is_zero(b3)) {
+        success = 1;
+        goto done;
+    }
+
+    OPENSSL_assert(BN_mod_exp(b4, b1, b2, b3, ctx));
+    OPENSSL_assert(BN_mod_exp_simple(b5, b1, b2, b3, ctx));
+
+    success = BN_cmp(b4, b5) == 0;
+    if (!success) {
+        BN_print_fp(stdout, b1);
+        putchar('\n');
+        BN_print_fp(stdout, b2);
+        putchar('\n');
+        BN_print_fp(stdout, b3);
+        putchar('\n');
+        BN_print_fp(stdout, b4);
+        putchar('\n');
+        BN_print_fp(stdout, b5);
+        putchar('\n');
+    }
+
+ done:
+    OPENSSL_assert(success);
+    BN_free(b1);
+    BN_free(b2);
+    BN_free(b3);
+    BN_free(b4);
+    BN_free(b5);
+    BN_CTX_free(ctx);
+    ERR_clear_error();
+
+    return 0;
+}
+
+void FuzzerCleanup(void)
+{
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/bndiv.c b/trunk/3rdparty/openssl-1.1-fit/fuzz/bndiv.c
new file mode 100644
index 000000000..e9c70bbd4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/bndiv.c
@@ -0,0 +1,131 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+
+/*
+ * Confirm that if (d, r) = a / b, then b * d + r == a, and that sign(d) ==
+ * sign(a), and 0 <= r <= b
+ */
+
+#include <stdio.h>
+#include <openssl/bn.h>
+#include <openssl/err.h>
+#include "fuzzer.h"
+
+/* 256 kB */
+#define MAX_LEN (256 * 1000)
+
+static BN_CTX *ctx;
+static BIGNUM *b1;
+static BIGNUM *b2;
+static BIGNUM *b3;
+static BIGNUM *b4;
+static BIGNUM *b5;
+
+int FuzzerInitialize(int *argc, char ***argv)
+{
+    b1 = BN_new();
+    b2 = BN_new();
+    b3 = BN_new();
+    b4 = BN_new();
+    b5 = BN_new();
+    ctx = BN_CTX_new();
+
+    OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL);
+    ERR_get_state();
+
+    return 1;
+}
+
+int FuzzerTestOneInput(const uint8_t *buf, size_t len)
+{
+    int success = 0;
+    size_t l1 = 0, l2 = 0;
+    /* s1 and s2 will be the signs for b1 and b2. */
+    int s1 = 0, s2 = 0;
+
+    /* limit the size of the input to avoid timeout */
+    if (len > MAX_LEN)
+        len = MAX_LEN;
+
+    /* We are going to split the buffer in two, sizes l1 and l2, giving b1 and
+     * b2.
+     */
+    if (len > 0) {
+        --len;
+        /* Use first byte to divide the remaining buffer into 3Fths. I admit
+         * this disallows some number sizes. If it matters, better ideas are
+         * welcome (Ben).
+         */
+        l1 = ((buf[0] & 0x3f) * len) / 0x3f;
+        s1 = buf[0] & 0x40;
+        s2 = buf[0] & 0x80;
+        ++buf;
+        l2 = len - l1;
+    }
+    OPENSSL_assert(BN_bin2bn(buf, l1, b1) == b1);
+    BN_set_negative(b1, s1);
+    OPENSSL_assert(BN_bin2bn(buf + l1, l2, b2) == b2);
+    BN_set_negative(b2, s2);
+
+    /* divide by 0 is an error */
+    if (BN_is_zero(b2)) {
+        success = 1;
+        goto done;
+    }
+
+    OPENSSL_assert(BN_div(b3, b4, b1, b2, ctx));
+    if (BN_is_zero(b1))
+        success = BN_is_zero(b3) && BN_is_zero(b4);
+    else if (BN_is_negative(b1))
+        success = (BN_is_negative(b3) != BN_is_negative(b2) || BN_is_zero(b3))
+            && (BN_is_negative(b4) || BN_is_zero(b4));
+    else
+        success = (BN_is_negative(b3) == BN_is_negative(b2)  || BN_is_zero(b3))
+            && (!BN_is_negative(b4) || BN_is_zero(b4));
+    OPENSSL_assert(BN_mul(b5, b3, b2, ctx));
+    OPENSSL_assert(BN_add(b5, b5, b4));
+
+    success = success && BN_cmp(b5, b1) == 0;
+    if (!success) {
+        BN_print_fp(stdout, b1);
+        putchar('\n');
+        BN_print_fp(stdout, b2);
+        putchar('\n');
+        BN_print_fp(stdout, b3);
+        putchar('\n');
+        BN_print_fp(stdout, b4);
+        putchar('\n');
+        BN_print_fp(stdout, b5);
+        putchar('\n');
+        printf("%d %d %d %d %d %d %d\n", BN_is_negative(b1),
+               BN_is_negative(b2),
+               BN_is_negative(b3), BN_is_negative(b4), BN_is_zero(b4),
+               BN_is_negative(b3) != BN_is_negative(b2)
+               && (BN_is_negative(b4) || BN_is_zero(b4)),
+               BN_cmp(b5, b1));
+        puts("----\n");
+    }
+
+ done:
+    OPENSSL_assert(success);
+    ERR_clear_error();
+
+    return 0;
+}
+
+void FuzzerCleanup(void)
+{
+    BN_free(b1);
+    BN_free(b2);
+    BN_free(b3);
+    BN_free(b4);
+    BN_free(b5);
+    BN_CTX_free(ctx);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/build.info b/trunk/3rdparty/openssl-1.1-fit/fuzz/build.info
new file mode 100644
index 000000000..cde03d344
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/build.info
@@ -0,0 +1,121 @@
+{- use File::Spec::Functions;
+   our $ex_inc = $withargs{fuzzer_include} &&
+       (file_name_is_absolute($withargs{fuzzer_include}) ?
+        $withargs{fuzzer_include} : catdir(updir(), $withargs{fuzzer_include}));
+   our $ex_lib = $withargs{fuzzer_lib} &&
+       (file_name_is_absolute($withargs{fuzzer_lib}) ?
+        $withargs{fuzzer_lib} : catfile(updir(), $withargs{fuzzer_lib}));
+   ""
+-}
+
+IF[{- !$disabled{"fuzz-afl"} || !$disabled{"fuzz-libfuzzer"} -}]
+  PROGRAMS_NO_INST=asn1 asn1parse bignum bndiv client conf crl server x509
+
+  IF[{- !$disabled{"cms"} -}]
+    PROGRAMS_NO_INST=cms
+  ENDIF
+
+  IF[{- !$disabled{"ct"} -}]
+    PROGRAMS_NO_INST=ct
+  ENDIF
+
+  SOURCE[asn1]=asn1.c driver.c
+  INCLUDE[asn1]=../include {- $ex_inc -}
+  DEPEND[asn1]=../libcrypto ../libssl {- $ex_lib -}
+
+  SOURCE[asn1parse]=asn1parse.c driver.c
+  INCLUDE[asn1parse]=../include {- $ex_inc -}
+  DEPEND[asn1parse]=../libcrypto {- $ex_lib -}
+
+  SOURCE[bignum]=bignum.c driver.c
+  INCLUDE[bignum]=../include {- $ex_inc -}
+  DEPEND[bignum]=../libcrypto {- $ex_lib -}
+
+  SOURCE[bndiv]=bndiv.c driver.c
+  INCLUDE[bndiv]=../include {- $ex_inc -}
+  DEPEND[bndiv]=../libcrypto {- $ex_lib -}
+
+  SOURCE[client]=client.c driver.c
+  INCLUDE[client]=../include {- $ex_inc -}
+  DEPEND[client]=../libcrypto ../libssl {- $ex_lib -}
+
+  SOURCE[cms]=cms.c driver.c
+  INCLUDE[cms]=../include {- $ex_inc -}
+  DEPEND[cms]=../libcrypto {- $ex_lib -}
+
+  SOURCE[conf]=conf.c driver.c
+  INCLUDE[conf]=../include {- $ex_inc -}
+  DEPEND[conf]=../libcrypto {- $ex_lib -}
+
+  SOURCE[crl]=crl.c driver.c
+  INCLUDE[crl]=../include {- $ex_inc -}
+  DEPEND[crl]=../libcrypto {- $ex_lib -}
+
+  SOURCE[ct]=ct.c driver.c
+  INCLUDE[ct]=../include {- $ex_inc -}
+  DEPEND[ct]=../libcrypto {- $ex_lib -}
+
+  SOURCE[server]=server.c driver.c
+  INCLUDE[server]=../include {- $ex_inc -}
+  DEPEND[server]=../libcrypto ../libssl {- $ex_lib -}
+
+  SOURCE[x509]=x509.c driver.c
+  INCLUDE[x509]=../include {- $ex_inc -}
+  DEPEND[x509]=../libcrypto {- $ex_lib -}
+ENDIF
+
+IF[{- !$disabled{tests} -}]
+  PROGRAMS_NO_INST=asn1-test asn1parse-test bignum-test bndiv-test client-test conf-test crl-test server-test x509-test
+
+  IF[{- !$disabled{"cms"} -}]
+    PROGRAMS_NO_INST=cms-test
+  ENDIF
+
+  IF[{- !$disabled{"ct"} -}]
+    PROGRAMS_NO_INST=ct-test
+  ENDIF
+
+  SOURCE[asn1-test]=asn1.c test-corpus.c
+  INCLUDE[asn1-test]=../include
+  DEPEND[asn1-test]=../libcrypto ../libssl
+
+  SOURCE[asn1parse-test]=asn1parse.c test-corpus.c
+  INCLUDE[asn1parse-test]=../include
+  DEPEND[asn1parse-test]=../libcrypto
+
+  SOURCE[bignum-test]=bignum.c test-corpus.c
+  INCLUDE[bignum-test]=../include
+  DEPEND[bignum-test]=../libcrypto
+
+  SOURCE[bndiv-test]=bndiv.c test-corpus.c
+  INCLUDE[bndiv-test]=../include
+  DEPEND[bndiv-test]=../libcrypto
+
+  SOURCE[client-test]=client.c test-corpus.c
+  INCLUDE[client-test]=../include
+  DEPEND[client-test]=../libcrypto ../libssl
+
+  SOURCE[cms-test]=cms.c test-corpus.c
+  INCLUDE[cms-test]=../include
+  DEPEND[cms-test]=../libcrypto
+
+  SOURCE[conf-test]=conf.c test-corpus.c
+  INCLUDE[conf-test]=../include
+  DEPEND[conf-test]=../libcrypto
+
+  SOURCE[crl-test]=crl.c test-corpus.c
+  INCLUDE[crl-test]=../include
+  DEPEND[crl-test]=../libcrypto
+
+  SOURCE[ct-test]=ct.c test-corpus.c
+  INCLUDE[ct-test]=../include
+  DEPEND[ct-test]=../libcrypto
+
+  SOURCE[server-test]=server.c test-corpus.c
+  INCLUDE[server-test]=../include
+  DEPEND[server-test]=../libcrypto ../libssl
+
+  SOURCE[x509-test]=x509.c test-corpus.c
+  INCLUDE[x509-test]=../include
+  DEPEND[x509-test]=../libcrypto
+ENDIF
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/client.c b/trunk/3rdparty/openssl-1.1-fit/fuzz/client.c
new file mode 100644
index 000000000..7ce609ca6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/client.c
@@ -0,0 +1,102 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+
+#include <time.h>
+#include <openssl/rand.h>
+#include <openssl/ssl.h>
+#include <openssl/rsa.h>
+#include <openssl/dsa.h>
+#include <openssl/ec.h>
+#include <openssl/dh.h>
+#include <openssl/err.h>
+#include "fuzzer.h"
+
+#include "rand.inc"
+
+/* unused, to avoid warning. */
+static int idx;
+
+#define FUZZTIME 1485898104
+
+#define TIME_IMPL(t) { if (t != NULL) *t = FUZZTIME; return FUZZTIME; }
+
+/*
+ * This might not work in all cases (and definitely not on Windows
+ * because of the way linkers are) and callees can still get the
+ * current time instead of the fixed time. This will just result
+ * in things not being fully reproducible and have a slightly
+ * different coverage.
+ */
+#if !defined(_WIN32)
+time_t time(time_t *t) TIME_IMPL(t)
+#endif
+
+int FuzzerInitialize(int *argc, char ***argv)
+{
+    STACK_OF(SSL_COMP) *comp_methods;
+
+    OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS | OPENSSL_INIT_ASYNC, NULL);
+    OPENSSL_init_ssl(OPENSSL_INIT_LOAD_SSL_STRINGS, NULL);
+    ERR_get_state();
+    CRYPTO_free_ex_index(0, -1);
+    idx = SSL_get_ex_data_X509_STORE_CTX_idx();
+    FuzzerSetRand();
+    comp_methods = SSL_COMP_get_compression_methods();
+    if (comp_methods != NULL)
+        sk_SSL_COMP_sort(comp_methods);
+
+    return 1;
+}
+
+int FuzzerTestOneInput(const uint8_t *buf, size_t len)
+{
+    SSL *client;
+    BIO *in;
+    BIO *out;
+    SSL_CTX *ctx;
+
+    if (len == 0)
+        return 0;
+
+    /*
+     * TODO: use the ossltest engine (optionally?) to disable crypto checks.
+     */
+
+    /* This only fuzzes the initial flow from the client so far. */
+    ctx = SSL_CTX_new(SSLv23_method());
+
+    client = SSL_new(ctx);
+    OPENSSL_assert(SSL_set_min_proto_version(client, 0) == 1);
+    OPENSSL_assert(SSL_set_cipher_list(client, "ALL:eNULL:@SECLEVEL=0") == 1);
+    SSL_set_tlsext_host_name(client, "localhost");
+    in = BIO_new(BIO_s_mem());
+    out = BIO_new(BIO_s_mem());
+    SSL_set_bio(client, in, out);
+    SSL_set_connect_state(client);
+    OPENSSL_assert((size_t)BIO_write(in, buf, len) == len);
+    if (SSL_do_handshake(client) == 1) {
+        /* Keep reading application data until error or EOF. */
+        uint8_t tmp[1024];
+        for (;;) {
+            if (SSL_read(client, tmp, sizeof(tmp)) <= 0) {
+                break;
+            }
+        }
+    }
+    SSL_free(client);
+    ERR_clear_error();
+    SSL_CTX_free(ctx);
+
+    return 0;
+}
+
+void FuzzerCleanup(void)
+{
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/cms.c b/trunk/3rdparty/openssl-1.1-fit/fuzz/cms.c
new file mode 100644
index 000000000..959ef9365
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/cms.c
@@ -0,0 +1,55 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+
+/*
+ * Test CMS DER parsing.
+ */
+
+#include <openssl/bio.h>
+#include <openssl/cms.h>
+#include <openssl/err.h>
+#include "fuzzer.h"
+
+int FuzzerInitialize(int *argc, char ***argv)
+{
+    OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL);
+    ERR_get_state();
+    CRYPTO_free_ex_index(0, -1);
+    return 1;
+}
+
+int FuzzerTestOneInput(const uint8_t *buf, size_t len)
+{
+    CMS_ContentInfo *cms;
+    BIO *in;
+
+    if (len == 0)
+        return 0;
+
+    in = BIO_new(BIO_s_mem());
+    OPENSSL_assert((size_t)BIO_write(in, buf, len) == len);
+    cms = d2i_CMS_bio(in, NULL);
+    if (cms != NULL) {
+        BIO *out = BIO_new(BIO_s_null());
+
+        i2d_CMS_bio(out, cms);
+        BIO_free(out);
+        CMS_ContentInfo_free(cms);
+    }
+
+    BIO_free(in);
+    ERR_clear_error();
+
+    return 0;
+}
+
+void FuzzerCleanup(void)
+{
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/conf.c b/trunk/3rdparty/openssl-1.1-fit/fuzz/conf.c
new file mode 100644
index 000000000..87fe85709
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/conf.c
@@ -0,0 +1,48 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+
+/*
+ * Test configuration parsing.
+ */
+
+#include <openssl/conf.h>
+#include <openssl/err.h>
+#include "fuzzer.h"
+
+int FuzzerInitialize(int *argc, char ***argv)
+{
+    OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL);
+    ERR_get_state();
+    return 1;
+}
+
+int FuzzerTestOneInput(const uint8_t *buf, size_t len)
+{
+    CONF *conf;
+    BIO *in;
+    long eline;
+
+    if (len == 0)
+        return 0;
+
+    conf = NCONF_new(NULL);
+    in = BIO_new(BIO_s_mem());
+    OPENSSL_assert((size_t)BIO_write(in, buf, len) == len);
+    NCONF_load_bio(conf, in, &eline);
+    NCONF_free(conf);
+    BIO_free(in);
+    ERR_clear_error();
+
+    return 0;
+}
+
+void FuzzerCleanup(void)
+{
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/crl.c b/trunk/3rdparty/openssl-1.1-fit/fuzz/crl.c
new file mode 100644
index 000000000..e4b0192f0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/crl.c
@@ -0,0 +1,47 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+
+#include <openssl/x509.h>
+#include <openssl/bio.h>
+#include <openssl/err.h>
+#include "fuzzer.h"
+
+int FuzzerInitialize(int *argc, char ***argv)
+{
+    OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL);
+    ERR_get_state();
+    CRYPTO_free_ex_index(0, -1);
+    return 1;
+}
+
+int FuzzerTestOneInput(const uint8_t *buf, size_t len)
+{
+    const unsigned char *p = buf;
+    unsigned char *der = NULL;
+
+    X509_CRL *crl = d2i_X509_CRL(NULL, &p, len);
+    if (crl != NULL) {
+        BIO *bio = BIO_new(BIO_s_null());
+        X509_CRL_print(bio, crl);
+        BIO_free(bio);
+
+        i2d_X509_CRL(crl, &der);
+        OPENSSL_free(der);
+
+        X509_CRL_free(crl);
+    }
+    ERR_clear_error();
+
+    return 0;
+}
+
+void FuzzerCleanup(void)
+{
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/ct.c b/trunk/3rdparty/openssl-1.1-fit/fuzz/ct.c
new file mode 100644
index 000000000..72dd79871
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/ct.c
@@ -0,0 +1,51 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+
+/*
+ * Fuzz the SCT parser.
+ */
+
+#include <stdio.h>
+#include <openssl/ct.h>
+#include <openssl/err.h>
+#include "fuzzer.h"
+
+int FuzzerInitialize(int *argc, char ***argv)
+{
+    OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL);
+    CRYPTO_free_ex_index(0, -1);
+    ERR_get_state();
+    return 1;
+}
+
+int FuzzerTestOneInput(const uint8_t *buf, size_t len)
+{
+    const uint8_t **pp = &buf;
+    unsigned char *der = NULL;
+    STACK_OF(SCT) *scts = d2i_SCT_LIST(NULL, pp, len);
+    if (scts != NULL) {
+        BIO *bio = BIO_new(BIO_s_null());
+        SCT_LIST_print(scts, bio, 4, "\n", NULL);
+        BIO_free(bio);
+
+        if (i2d_SCT_LIST(scts, &der)) {
+            /* Silence unused result warning */
+        }
+        OPENSSL_free(der);
+
+        SCT_LIST_free(scts);
+    }
+    ERR_clear_error();
+    return 0;
+}
+
+void FuzzerCleanup(void)
+{
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/driver.c b/trunk/3rdparty/openssl-1.1-fit/fuzz/driver.c
new file mode 100644
index 000000000..54d67de20
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/driver.c
@@ -0,0 +1,55 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+#include <stdint.h>
+#include <unistd.h>
+#include <stdlib.h>
+#include <openssl/opensslconf.h>
+#include "fuzzer.h"
+
+#ifndef OPENSSL_NO_FUZZ_LIBFUZZER
+
+int LLVMFuzzerInitialize(int *argc, char ***argv);
+int LLVMFuzzerTestOneInput(const uint8_t *buf, size_t len);
+
+int LLVMFuzzerInitialize(int *argc, char ***argv)
+{
+    return FuzzerInitialize(argc, argv);
+}
+
+int LLVMFuzzerTestOneInput(const uint8_t *buf, size_t len)
+{
+    return FuzzerTestOneInput(buf, len);
+}
+
+#elif !defined(OPENSSL_NO_FUZZ_AFL)
+
+#define BUF_SIZE 65536
+
+int main(int argc, char** argv)
+{
+    FuzzerInitialize(&argc, &argv);
+
+    while (__AFL_LOOP(10000)) {
+        uint8_t *buf = malloc(BUF_SIZE);
+        size_t size = read(0, buf, BUF_SIZE);
+
+        FuzzerTestOneInput(buf, size);
+        free(buf);
+    }
+
+    FuzzerCleanup();
+    return 0;
+}
+
+#else
+
+#error "Unsupported fuzzer"
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/fuzzer.h b/trunk/3rdparty/openssl-1.1-fit/fuzz/fuzzer.h
new file mode 100644
index 000000000..fcc0d2527
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/fuzzer.h
@@ -0,0 +1,14 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+
+int FuzzerTestOneInput(const uint8_t *buf, size_t len);
+int FuzzerInitialize(int *argc, char ***argv);
+void FuzzerCleanup(void);
+void FuzzerSetRand(void);
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/helper.py b/trunk/3rdparty/openssl-1.1-fit/fuzz/helper.py
new file mode 100755
index 000000000..e83ea00c0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/helper.py
@@ -0,0 +1,52 @@
+#!/usr/bin/python
+#
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+"""Fuzzing helper, creates and uses corpus/crash directories.
+
+fuzzer.py <fuzzer> <extra fuzzer arguments>
+"""
+
+import os
+import subprocess
+import sys
+
+FUZZER = sys.argv[1]
+
+THIS_DIR = os.path.abspath(os.path.dirname(__file__))
+CORPORA_DIR = os.path.abspath(os.path.join(THIS_DIR, "corpora"))
+
+FUZZER_DIR = os.path.abspath(os.path.join(CORPORA_DIR, FUZZER))
+if not os.path.isdir(FUZZER_DIR):
+    os.mkdir(FUZZER_DIR)
+
+corpora = []
+
+def _create(d):
+    dd = os.path.abspath(os.path.join(CORPORA_DIR, d))
+    if not os.path.isdir(dd):
+        os.mkdir(dd)
+    corpora.append(dd)
+
+def _add(d):
+    dd = os.path.abspath(os.path.join(CORPORA_DIR, d))
+    if os.path.isdir(dd):
+        corpora.append(dd)
+
+def main():
+    _create(FUZZER)
+    _create(FUZZER + "-crash")
+    _add(FUZZER + "-seed")
+
+    cmd = ([os.path.abspath(os.path.join(THIS_DIR, FUZZER))]  + sys.argv[2:]
+           + ["-artifact_prefix=" + corpora[1] + "/"] + corpora)
+    print(" ".join(cmd))
+    subprocess.call(cmd)
+
+if __name__ == "__main__":
+    main()
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/mkfuzzoids.pl b/trunk/3rdparty/openssl-1.1-fit/fuzz/mkfuzzoids.pl
new file mode 100755
index 000000000..0153a031a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/mkfuzzoids.pl
@@ -0,0 +1,32 @@
+#! /usr/bin/env perl
+# Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+my $obj_dat_h = $ARGV[0];
+
+# Output year depends on the date on the input file and the script.
+my $YEAR = [localtime([stat($0)]->[9])]->[5] + 1900;
+my $iYEAR = [localtime([stat($obj_dat_h)]->[9])]->[5] + 1900;
+$YEAR = $iYEAR if $iYEAR > $YEAR;
+
+open IN, '<', $obj_dat_h
+    || die "Couldn't open $obj_dat_h : $!\n";
+
+while(<IN>) {
+    s|\R$||;                    # Better chomp
+
+    next unless m|^\s+((0x[0-9A-F][0-9A-F],)*)\s+/\*\s\[\s*\d+\]\s(OBJ_\w+)\s\*/$|;
+
+    my $OID = $1;
+    my $OBJname = $3;
+
+    $OID =~ s|0x|\\x|g;
+    $OID =~ s|,||g;
+
+    print "$OBJname=\"$OID\"\n";
+}
+close IN;
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/oids.txt b/trunk/3rdparty/openssl-1.1-fit/fuzz/oids.txt
new file mode 100644
index 000000000..fe363fd37
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/oids.txt
@@ -0,0 +1,1065 @@
+OBJ_rsadsi="\x2A\x86\x48\x86\xF7\x0D"
+OBJ_pkcs="\x2A\x86\x48\x86\xF7\x0D\x01"
+OBJ_md2="\x2A\x86\x48\x86\xF7\x0D\x02\x02"
+OBJ_md5="\x2A\x86\x48\x86\xF7\x0D\x02\x05"
+OBJ_rc4="\x2A\x86\x48\x86\xF7\x0D\x03\x04"
+OBJ_rsaEncryption="\x2A\x86\x48\x86\xF7\x0D\x01\x01\x01"
+OBJ_md2WithRSAEncryption="\x2A\x86\x48\x86\xF7\x0D\x01\x01\x02"
+OBJ_md5WithRSAEncryption="\x2A\x86\x48\x86\xF7\x0D\x01\x01\x04"
+OBJ_pbeWithMD2AndDES_CBC="\x2A\x86\x48\x86\xF7\x0D\x01\x05\x01"
+OBJ_pbeWithMD5AndDES_CBC="\x2A\x86\x48\x86\xF7\x0D\x01\x05\x03"
+OBJ_X500="\x55"
+OBJ_X509="\x55\x04"
+OBJ_commonName="\x55\x04\x03"
+OBJ_countryName="\x55\x04\x06"
+OBJ_localityName="\x55\x04\x07"
+OBJ_stateOrProvinceName="\x55\x04\x08"
+OBJ_organizationName="\x55\x04\x0A"
+OBJ_organizationalUnitName="\x55\x04\x0B"
+OBJ_rsa="\x55\x08\x01\x01"
+OBJ_pkcs7="\x2A\x86\x48\x86\xF7\x0D\x01\x07"
+OBJ_pkcs7_data="\x2A\x86\x48\x86\xF7\x0D\x01\x07\x01"
+OBJ_pkcs7_signed="\x2A\x86\x48\x86\xF7\x0D\x01\x07\x02"
+OBJ_pkcs7_enveloped="\x2A\x86\x48\x86\xF7\x0D\x01\x07\x03"
+OBJ_pkcs7_signedAndEnveloped="\x2A\x86\x48\x86\xF7\x0D\x01\x07\x04"
+OBJ_pkcs7_digest="\x2A\x86\x48\x86\xF7\x0D\x01\x07\x05"
+OBJ_pkcs7_encrypted="\x2A\x86\x48\x86\xF7\x0D\x01\x07\x06"
+OBJ_pkcs3="\x2A\x86\x48\x86\xF7\x0D\x01\x03"
+OBJ_dhKeyAgreement="\x2A\x86\x48\x86\xF7\x0D\x01\x03\x01"
+OBJ_des_ecb="\x2B\x0E\x03\x02\x06"
+OBJ_des_cfb64="\x2B\x0E\x03\x02\x09"
+OBJ_des_cbc="\x2B\x0E\x03\x02\x07"
+OBJ_des_ede_ecb="\x2B\x0E\x03\x02\x11"
+OBJ_idea_cbc="\x2B\x06\x01\x04\x01\x81\x3C\x07\x01\x01\x02"
+OBJ_rc2_cbc="\x2A\x86\x48\x86\xF7\x0D\x03\x02"
+OBJ_sha="\x2B\x0E\x03\x02\x12"
+OBJ_shaWithRSAEncryption="\x2B\x0E\x03\x02\x0F"
+OBJ_des_ede3_cbc="\x2A\x86\x48\x86\xF7\x0D\x03\x07"
+OBJ_des_ofb64="\x2B\x0E\x03\x02\x08"
+OBJ_pkcs9="\x2A\x86\x48\x86\xF7\x0D\x01\x09"
+OBJ_pkcs9_emailAddress="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x01"
+OBJ_pkcs9_unstructuredName="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x02"
+OBJ_pkcs9_contentType="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x03"
+OBJ_pkcs9_messageDigest="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x04"
+OBJ_pkcs9_signingTime="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x05"
+OBJ_pkcs9_countersignature="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x06"
+OBJ_pkcs9_challengePassword="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x07"
+OBJ_pkcs9_unstructuredAddress="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x08"
+OBJ_pkcs9_extCertAttributes="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x09"
+OBJ_netscape="\x60\x86\x48\x01\x86\xF8\x42"
+OBJ_netscape_cert_extension="\x60\x86\x48\x01\x86\xF8\x42\x01"
+OBJ_netscape_data_type="\x60\x86\x48\x01\x86\xF8\x42\x02"
+OBJ_sha1="\x2B\x0E\x03\x02\x1A"
+OBJ_sha1WithRSAEncryption="\x2A\x86\x48\x86\xF7\x0D\x01\x01\x05"
+OBJ_dsaWithSHA="\x2B\x0E\x03\x02\x0D"
+OBJ_dsa_2="\x2B\x0E\x03\x02\x0C"
+OBJ_pbeWithSHA1AndRC2_CBC="\x2A\x86\x48\x86\xF7\x0D\x01\x05\x0B"
+OBJ_id_pbkdf2="\x2A\x86\x48\x86\xF7\x0D\x01\x05\x0C"
+OBJ_dsaWithSHA1_2="\x2B\x0E\x03\x02\x1B"
+OBJ_netscape_cert_type="\x60\x86\x48\x01\x86\xF8\x42\x01\x01"
+OBJ_netscape_base_url="\x60\x86\x48\x01\x86\xF8\x42\x01\x02"
+OBJ_netscape_revocation_url="\x60\x86\x48\x01\x86\xF8\x42\x01\x03"
+OBJ_netscape_ca_revocation_url="\x60\x86\x48\x01\x86\xF8\x42\x01\x04"
+OBJ_netscape_renewal_url="\x60\x86\x48\x01\x86\xF8\x42\x01\x07"
+OBJ_netscape_ca_policy_url="\x60\x86\x48\x01\x86\xF8\x42\x01\x08"
+OBJ_netscape_ssl_server_name="\x60\x86\x48\x01\x86\xF8\x42\x01\x0C"
+OBJ_netscape_comment="\x60\x86\x48\x01\x86\xF8\x42\x01\x0D"
+OBJ_netscape_cert_sequence="\x60\x86\x48\x01\x86\xF8\x42\x02\x05"
+OBJ_id_ce="\x55\x1D"
+OBJ_subject_key_identifier="\x55\x1D\x0E"
+OBJ_key_usage="\x55\x1D\x0F"
+OBJ_private_key_usage_period="\x55\x1D\x10"
+OBJ_subject_alt_name="\x55\x1D\x11"
+OBJ_issuer_alt_name="\x55\x1D\x12"
+OBJ_basic_constraints="\x55\x1D\x13"
+OBJ_crl_number="\x55\x1D\x14"
+OBJ_certificate_policies="\x55\x1D\x20"
+OBJ_authority_key_identifier="\x55\x1D\x23"
+OBJ_bf_cbc="\x2B\x06\x01\x04\x01\x97\x55\x01\x02"
+OBJ_mdc2="\x55\x08\x03\x65"
+OBJ_mdc2WithRSA="\x55\x08\x03\x64"
+OBJ_givenName="\x55\x04\x2A"
+OBJ_surname="\x55\x04\x04"
+OBJ_initials="\x55\x04\x2B"
+OBJ_uniqueIdentifier="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x2C"
+OBJ_crl_distribution_points="\x55\x1D\x1F"
+OBJ_md5WithRSA="\x2B\x0E\x03\x02\x03"
+OBJ_serialNumber="\x55\x04\x05"
+OBJ_title="\x55\x04\x0C"
+OBJ_description="\x55\x04\x0D"
+OBJ_cast5_cbc="\x2A\x86\x48\x86\xF6\x7D\x07\x42\x0A"
+OBJ_pbeWithMD5AndCast5_CBC="\x2A\x86\x48\x86\xF6\x7D\x07\x42\x0C"
+OBJ_dsaWithSHA1="\x2A\x86\x48\xCE\x38\x04\x03"
+OBJ_sha1WithRSA="\x2B\x0E\x03\x02\x1D"
+OBJ_dsa="\x2A\x86\x48\xCE\x38\x04\x01"
+OBJ_ripemd160="\x2B\x24\x03\x02\x01"
+OBJ_ripemd160WithRSA="\x2B\x24\x03\x03\x01\x02"
+OBJ_rc5_cbc="\x2A\x86\x48\x86\xF7\x0D\x03\x08"
+OBJ_zlib_compression="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x03\x08"
+OBJ_ext_key_usage="\x55\x1D\x25"
+OBJ_id_pkix="\x2B\x06\x01\x05\x05\x07"
+OBJ_id_kp="\x2B\x06\x01\x05\x05\x07\x03"
+OBJ_server_auth="\x2B\x06\x01\x05\x05\x07\x03\x01"
+OBJ_client_auth="\x2B\x06\x01\x05\x05\x07\x03\x02"
+OBJ_code_sign="\x2B\x06\x01\x05\x05\x07\x03\x03"
+OBJ_email_protect="\x2B\x06\x01\x05\x05\x07\x03\x04"
+OBJ_time_stamp="\x2B\x06\x01\x05\x05\x07\x03\x08"
+OBJ_ms_code_ind="\x2B\x06\x01\x04\x01\x82\x37\x02\x01\x15"
+OBJ_ms_code_com="\x2B\x06\x01\x04\x01\x82\x37\x02\x01\x16"
+OBJ_ms_ctl_sign="\x2B\x06\x01\x04\x01\x82\x37\x0A\x03\x01"
+OBJ_ms_sgc="\x2B\x06\x01\x04\x01\x82\x37\x0A\x03\x03"
+OBJ_ms_efs="\x2B\x06\x01\x04\x01\x82\x37\x0A\x03\x04"
+OBJ_ns_sgc="\x60\x86\x48\x01\x86\xF8\x42\x04\x01"
+OBJ_delta_crl="\x55\x1D\x1B"
+OBJ_crl_reason="\x55\x1D\x15"
+OBJ_invalidity_date="\x55\x1D\x18"
+OBJ_sxnet="\x2B\x65\x01\x04\x01"
+OBJ_pbe_WithSHA1And128BitRC4="\x2A\x86\x48\x86\xF7\x0D\x01\x0C\x01\x01"
+OBJ_pbe_WithSHA1And40BitRC4="\x2A\x86\x48\x86\xF7\x0D\x01\x0C\x01\x02"
+OBJ_pbe_WithSHA1And3_Key_TripleDES_CBC="\x2A\x86\x48\x86\xF7\x0D\x01\x0C\x01\x03"
+OBJ_pbe_WithSHA1And2_Key_TripleDES_CBC="\x2A\x86\x48\x86\xF7\x0D\x01\x0C\x01\x04"
+OBJ_pbe_WithSHA1And128BitRC2_CBC="\x2A\x86\x48\x86\xF7\x0D\x01\x0C\x01\x05"
+OBJ_pbe_WithSHA1And40BitRC2_CBC="\x2A\x86\x48\x86\xF7\x0D\x01\x0C\x01\x06"
+OBJ_keyBag="\x2A\x86\x48\x86\xF7\x0D\x01\x0C\x0A\x01\x01"
+OBJ_pkcs8ShroudedKeyBag="\x2A\x86\x48\x86\xF7\x0D\x01\x0C\x0A\x01\x02"
+OBJ_certBag="\x2A\x86\x48\x86\xF7\x0D\x01\x0C\x0A\x01\x03"
+OBJ_crlBag="\x2A\x86\x48\x86\xF7\x0D\x01\x0C\x0A\x01\x04"
+OBJ_secretBag="\x2A\x86\x48\x86\xF7\x0D\x01\x0C\x0A\x01\x05"
+OBJ_safeContentsBag="\x2A\x86\x48\x86\xF7\x0D\x01\x0C\x0A\x01\x06"
+OBJ_friendlyName="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x14"
+OBJ_localKeyID="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x15"
+OBJ_x509Certificate="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x16\x01"
+OBJ_sdsiCertificate="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x16\x02"
+OBJ_x509Crl="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x17\x01"
+OBJ_pbes2="\x2A\x86\x48\x86\xF7\x0D\x01\x05\x0D"
+OBJ_pbmac1="\x2A\x86\x48\x86\xF7\x0D\x01\x05\x0E"
+OBJ_hmacWithSHA1="\x2A\x86\x48\x86\xF7\x0D\x02\x07"
+OBJ_id_qt_cps="\x2B\x06\x01\x05\x05\x07\x02\x01"
+OBJ_id_qt_unotice="\x2B\x06\x01\x05\x05\x07\x02\x02"
+OBJ_SMIMECapabilities="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x0F"
+OBJ_pbeWithMD2AndRC2_CBC="\x2A\x86\x48\x86\xF7\x0D\x01\x05\x04"
+OBJ_pbeWithMD5AndRC2_CBC="\x2A\x86\x48\x86\xF7\x0D\x01\x05\x06"
+OBJ_pbeWithSHA1AndDES_CBC="\x2A\x86\x48\x86\xF7\x0D\x01\x05\x0A"
+OBJ_ms_ext_req="\x2B\x06\x01\x04\x01\x82\x37\x02\x01\x0E"
+OBJ_ext_req="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x0E"
+OBJ_name="\x55\x04\x29"
+OBJ_dnQualifier="\x55\x04\x2E"
+OBJ_id_pe="\x2B\x06\x01\x05\x05\x07\x01"
+OBJ_id_ad="\x2B\x06\x01\x05\x05\x07\x30"
+OBJ_info_access="\x2B\x06\x01\x05\x05\x07\x01\x01"
+OBJ_ad_OCSP="\x2B\x06\x01\x05\x05\x07\x30\x01"
+OBJ_ad_ca_issuers="\x2B\x06\x01\x05\x05\x07\x30\x02"
+OBJ_OCSP_sign="\x2B\x06\x01\x05\x05\x07\x03\x09"
+OBJ_member_body="\x2A"
+OBJ_ISO_US="\x2A\x86\x48"
+OBJ_X9_57="\x2A\x86\x48\xCE\x38"
+OBJ_X9cm="\x2A\x86\x48\xCE\x38\x04"
+OBJ_pkcs1="\x2A\x86\x48\x86\xF7\x0D\x01\x01"
+OBJ_pkcs5="\x2A\x86\x48\x86\xF7\x0D\x01\x05"
+OBJ_SMIME="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10"
+OBJ_id_smime_mod="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x00"
+OBJ_id_smime_ct="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x01"
+OBJ_id_smime_aa="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02"
+OBJ_id_smime_alg="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x03"
+OBJ_id_smime_cd="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x04"
+OBJ_id_smime_spq="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x05"
+OBJ_id_smime_cti="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x06"
+OBJ_id_smime_mod_cms="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x00\x01"
+OBJ_id_smime_mod_ess="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x00\x02"
+OBJ_id_smime_mod_oid="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x00\x03"
+OBJ_id_smime_mod_msg_v3="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x00\x04"
+OBJ_id_smime_mod_ets_eSignature_88="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x00\x05"
+OBJ_id_smime_mod_ets_eSignature_97="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x00\x06"
+OBJ_id_smime_mod_ets_eSigPolicy_88="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x00\x07"
+OBJ_id_smime_mod_ets_eSigPolicy_97="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x00\x08"
+OBJ_id_smime_ct_receipt="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x01\x01"
+OBJ_id_smime_ct_authData="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x01\x02"
+OBJ_id_smime_ct_publishCert="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x01\x03"
+OBJ_id_smime_ct_TSTInfo="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x01\x04"
+OBJ_id_smime_ct_TDTInfo="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x01\x05"
+OBJ_id_smime_ct_contentInfo="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x01\x06"
+OBJ_id_smime_ct_DVCSRequestData="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x01\x07"
+OBJ_id_smime_ct_DVCSResponseData="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x01\x08"
+OBJ_id_smime_aa_receiptRequest="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x01"
+OBJ_id_smime_aa_securityLabel="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x02"
+OBJ_id_smime_aa_mlExpandHistory="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x03"
+OBJ_id_smime_aa_contentHint="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x04"
+OBJ_id_smime_aa_msgSigDigest="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x05"
+OBJ_id_smime_aa_encapContentType="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x06"
+OBJ_id_smime_aa_contentIdentifier="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x07"
+OBJ_id_smime_aa_macValue="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x08"
+OBJ_id_smime_aa_equivalentLabels="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x09"
+OBJ_id_smime_aa_contentReference="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x0A"
+OBJ_id_smime_aa_encrypKeyPref="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x0B"
+OBJ_id_smime_aa_signingCertificate="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x0C"
+OBJ_id_smime_aa_smimeEncryptCerts="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x0D"
+OBJ_id_smime_aa_timeStampToken="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x0E"
+OBJ_id_smime_aa_ets_sigPolicyId="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x0F"
+OBJ_id_smime_aa_ets_commitmentType="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x10"
+OBJ_id_smime_aa_ets_signerLocation="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x11"
+OBJ_id_smime_aa_ets_signerAttr="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x12"
+OBJ_id_smime_aa_ets_otherSigCert="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x13"
+OBJ_id_smime_aa_ets_contentTimestamp="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x14"
+OBJ_id_smime_aa_ets_CertificateRefs="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x15"
+OBJ_id_smime_aa_ets_RevocationRefs="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x16"
+OBJ_id_smime_aa_ets_certValues="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x17"
+OBJ_id_smime_aa_ets_revocationValues="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x18"
+OBJ_id_smime_aa_ets_escTimeStamp="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x19"
+OBJ_id_smime_aa_ets_certCRLTimestamp="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x1A"
+OBJ_id_smime_aa_ets_archiveTimeStamp="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x1B"
+OBJ_id_smime_aa_signatureType="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x1C"
+OBJ_id_smime_aa_dvcs_dvc="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x1D"
+OBJ_id_smime_alg_ESDHwith3DES="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x03\x01"
+OBJ_id_smime_alg_ESDHwithRC2="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x03\x02"
+OBJ_id_smime_alg_3DESwrap="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x03\x03"
+OBJ_id_smime_alg_RC2wrap="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x03\x04"
+OBJ_id_smime_alg_ESDH="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x03\x05"
+OBJ_id_smime_alg_CMS3DESwrap="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x03\x06"
+OBJ_id_smime_alg_CMSRC2wrap="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x03\x07"
+OBJ_id_smime_cd_ldap="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x04\x01"
+OBJ_id_smime_spq_ets_sqt_uri="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x05\x01"
+OBJ_id_smime_spq_ets_sqt_unotice="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x05\x02"
+OBJ_id_smime_cti_ets_proofOfOrigin="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x06\x01"
+OBJ_id_smime_cti_ets_proofOfReceipt="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x06\x02"
+OBJ_id_smime_cti_ets_proofOfDelivery="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x06\x03"
+OBJ_id_smime_cti_ets_proofOfSender="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x06\x04"
+OBJ_id_smime_cti_ets_proofOfApproval="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x06\x05"
+OBJ_id_smime_cti_ets_proofOfCreation="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x06\x06"
+OBJ_md4="\x2A\x86\x48\x86\xF7\x0D\x02\x04"
+OBJ_id_pkix_mod="\x2B\x06\x01\x05\x05\x07\x00"
+OBJ_id_qt="\x2B\x06\x01\x05\x05\x07\x02"
+OBJ_id_it="\x2B\x06\x01\x05\x05\x07\x04"
+OBJ_id_pkip="\x2B\x06\x01\x05\x05\x07\x05"
+OBJ_id_alg="\x2B\x06\x01\x05\x05\x07\x06"
+OBJ_id_cmc="\x2B\x06\x01\x05\x05\x07\x07"
+OBJ_id_on="\x2B\x06\x01\x05\x05\x07\x08"
+OBJ_id_pda="\x2B\x06\x01\x05\x05\x07\x09"
+OBJ_id_aca="\x2B\x06\x01\x05\x05\x07\x0A"
+OBJ_id_qcs="\x2B\x06\x01\x05\x05\x07\x0B"
+OBJ_id_cct="\x2B\x06\x01\x05\x05\x07\x0C"
+OBJ_id_pkix1_explicit_88="\x2B\x06\x01\x05\x05\x07\x00\x01"
+OBJ_id_pkix1_implicit_88="\x2B\x06\x01\x05\x05\x07\x00\x02"
+OBJ_id_pkix1_explicit_93="\x2B\x06\x01\x05\x05\x07\x00\x03"
+OBJ_id_pkix1_implicit_93="\x2B\x06\x01\x05\x05\x07\x00\x04"
+OBJ_id_mod_crmf="\x2B\x06\x01\x05\x05\x07\x00\x05"
+OBJ_id_mod_cmc="\x2B\x06\x01\x05\x05\x07\x00\x06"
+OBJ_id_mod_kea_profile_88="\x2B\x06\x01\x05\x05\x07\x00\x07"
+OBJ_id_mod_kea_profile_93="\x2B\x06\x01\x05\x05\x07\x00\x08"
+OBJ_id_mod_cmp="\x2B\x06\x01\x05\x05\x07\x00\x09"
+OBJ_id_mod_qualified_cert_88="\x2B\x06\x01\x05\x05\x07\x00\x0A"
+OBJ_id_mod_qualified_cert_93="\x2B\x06\x01\x05\x05\x07\x00\x0B"
+OBJ_id_mod_attribute_cert="\x2B\x06\x01\x05\x05\x07\x00\x0C"
+OBJ_id_mod_timestamp_protocol="\x2B\x06\x01\x05\x05\x07\x00\x0D"
+OBJ_id_mod_ocsp="\x2B\x06\x01\x05\x05\x07\x00\x0E"
+OBJ_id_mod_dvcs="\x2B\x06\x01\x05\x05\x07\x00\x0F"
+OBJ_id_mod_cmp2000="\x2B\x06\x01\x05\x05\x07\x00\x10"
+OBJ_biometricInfo="\x2B\x06\x01\x05\x05\x07\x01\x02"
+OBJ_qcStatements="\x2B\x06\x01\x05\x05\x07\x01\x03"
+OBJ_ac_auditEntity="\x2B\x06\x01\x05\x05\x07\x01\x04"
+OBJ_ac_targeting="\x2B\x06\x01\x05\x05\x07\x01\x05"
+OBJ_aaControls="\x2B\x06\x01\x05\x05\x07\x01\x06"
+OBJ_sbgp_ipAddrBlock="\x2B\x06\x01\x05\x05\x07\x01\x07"
+OBJ_sbgp_autonomousSysNum="\x2B\x06\x01\x05\x05\x07\x01\x08"
+OBJ_sbgp_routerIdentifier="\x2B\x06\x01\x05\x05\x07\x01\x09"
+OBJ_textNotice="\x2B\x06\x01\x05\x05\x07\x02\x03"
+OBJ_ipsecEndSystem="\x2B\x06\x01\x05\x05\x07\x03\x05"
+OBJ_ipsecTunnel="\x2B\x06\x01\x05\x05\x07\x03\x06"
+OBJ_ipsecUser="\x2B\x06\x01\x05\x05\x07\x03\x07"
+OBJ_dvcs="\x2B\x06\x01\x05\x05\x07\x03\x0A"
+OBJ_id_it_caProtEncCert="\x2B\x06\x01\x05\x05\x07\x04\x01"
+OBJ_id_it_signKeyPairTypes="\x2B\x06\x01\x05\x05\x07\x04\x02"
+OBJ_id_it_encKeyPairTypes="\x2B\x06\x01\x05\x05\x07\x04\x03"
+OBJ_id_it_preferredSymmAlg="\x2B\x06\x01\x05\x05\x07\x04\x04"
+OBJ_id_it_caKeyUpdateInfo="\x2B\x06\x01\x05\x05\x07\x04\x05"
+OBJ_id_it_currentCRL="\x2B\x06\x01\x05\x05\x07\x04\x06"
+OBJ_id_it_unsupportedOIDs="\x2B\x06\x01\x05\x05\x07\x04\x07"
+OBJ_id_it_subscriptionRequest="\x2B\x06\x01\x05\x05\x07\x04\x08"
+OBJ_id_it_subscriptionResponse="\x2B\x06\x01\x05\x05\x07\x04\x09"
+OBJ_id_it_keyPairParamReq="\x2B\x06\x01\x05\x05\x07\x04\x0A"
+OBJ_id_it_keyPairParamRep="\x2B\x06\x01\x05\x05\x07\x04\x0B"
+OBJ_id_it_revPassphrase="\x2B\x06\x01\x05\x05\x07\x04\x0C"
+OBJ_id_it_implicitConfirm="\x2B\x06\x01\x05\x05\x07\x04\x0D"
+OBJ_id_it_confirmWaitTime="\x2B\x06\x01\x05\x05\x07\x04\x0E"
+OBJ_id_it_origPKIMessage="\x2B\x06\x01\x05\x05\x07\x04\x0F"
+OBJ_id_regCtrl="\x2B\x06\x01\x05\x05\x07\x05\x01"
+OBJ_id_regInfo="\x2B\x06\x01\x05\x05\x07\x05\x02"
+OBJ_id_regCtrl_regToken="\x2B\x06\x01\x05\x05\x07\x05\x01\x01"
+OBJ_id_regCtrl_authenticator="\x2B\x06\x01\x05\x05\x07\x05\x01\x02"
+OBJ_id_regCtrl_pkiPublicationInfo="\x2B\x06\x01\x05\x05\x07\x05\x01\x03"
+OBJ_id_regCtrl_pkiArchiveOptions="\x2B\x06\x01\x05\x05\x07\x05\x01\x04"
+OBJ_id_regCtrl_oldCertID="\x2B\x06\x01\x05\x05\x07\x05\x01\x05"
+OBJ_id_regCtrl_protocolEncrKey="\x2B\x06\x01\x05\x05\x07\x05\x01\x06"
+OBJ_id_regInfo_utf8Pairs="\x2B\x06\x01\x05\x05\x07\x05\x02\x01"
+OBJ_id_regInfo_certReq="\x2B\x06\x01\x05\x05\x07\x05\x02\x02"
+OBJ_id_alg_des40="\x2B\x06\x01\x05\x05\x07\x06\x01"
+OBJ_id_alg_noSignature="\x2B\x06\x01\x05\x05\x07\x06\x02"
+OBJ_id_alg_dh_sig_hmac_sha1="\x2B\x06\x01\x05\x05\x07\x06\x03"
+OBJ_id_alg_dh_pop="\x2B\x06\x01\x05\x05\x07\x06\x04"
+OBJ_id_cmc_statusInfo="\x2B\x06\x01\x05\x05\x07\x07\x01"
+OBJ_id_cmc_identification="\x2B\x06\x01\x05\x05\x07\x07\x02"
+OBJ_id_cmc_identityProof="\x2B\x06\x01\x05\x05\x07\x07\x03"
+OBJ_id_cmc_dataReturn="\x2B\x06\x01\x05\x05\x07\x07\x04"
+OBJ_id_cmc_transactionId="\x2B\x06\x01\x05\x05\x07\x07\x05"
+OBJ_id_cmc_senderNonce="\x2B\x06\x01\x05\x05\x07\x07\x06"
+OBJ_id_cmc_recipientNonce="\x2B\x06\x01\x05\x05\x07\x07\x07"
+OBJ_id_cmc_addExtensions="\x2B\x06\x01\x05\x05\x07\x07\x08"
+OBJ_id_cmc_encryptedPOP="\x2B\x06\x01\x05\x05\x07\x07\x09"
+OBJ_id_cmc_decryptedPOP="\x2B\x06\x01\x05\x05\x07\x07\x0A"
+OBJ_id_cmc_lraPOPWitness="\x2B\x06\x01\x05\x05\x07\x07\x0B"
+OBJ_id_cmc_getCert="\x2B\x06\x01\x05\x05\x07\x07\x0F"
+OBJ_id_cmc_getCRL="\x2B\x06\x01\x05\x05\x07\x07\x10"
+OBJ_id_cmc_revokeRequest="\x2B\x06\x01\x05\x05\x07\x07\x11"
+OBJ_id_cmc_regInfo="\x2B\x06\x01\x05\x05\x07\x07\x12"
+OBJ_id_cmc_responseInfo="\x2B\x06\x01\x05\x05\x07\x07\x13"
+OBJ_id_cmc_queryPending="\x2B\x06\x01\x05\x05\x07\x07\x15"
+OBJ_id_cmc_popLinkRandom="\x2B\x06\x01\x05\x05\x07\x07\x16"
+OBJ_id_cmc_popLinkWitness="\x2B\x06\x01\x05\x05\x07\x07\x17"
+OBJ_id_cmc_confirmCertAcceptance="\x2B\x06\x01\x05\x05\x07\x07\x18"
+OBJ_id_on_personalData="\x2B\x06\x01\x05\x05\x07\x08\x01"
+OBJ_id_pda_dateOfBirth="\x2B\x06\x01\x05\x05\x07\x09\x01"
+OBJ_id_pda_placeOfBirth="\x2B\x06\x01\x05\x05\x07\x09\x02"
+OBJ_id_pda_gender="\x2B\x06\x01\x05\x05\x07\x09\x03"
+OBJ_id_pda_countryOfCitizenship="\x2B\x06\x01\x05\x05\x07\x09\x04"
+OBJ_id_pda_countryOfResidence="\x2B\x06\x01\x05\x05\x07\x09\x05"
+OBJ_id_aca_authenticationInfo="\x2B\x06\x01\x05\x05\x07\x0A\x01"
+OBJ_id_aca_accessIdentity="\x2B\x06\x01\x05\x05\x07\x0A\x02"
+OBJ_id_aca_chargingIdentity="\x2B\x06\x01\x05\x05\x07\x0A\x03"
+OBJ_id_aca_group="\x2B\x06\x01\x05\x05\x07\x0A\x04"
+OBJ_id_aca_role="\x2B\x06\x01\x05\x05\x07\x0A\x05"
+OBJ_id_qcs_pkixQCSyntax_v1="\x2B\x06\x01\x05\x05\x07\x0B\x01"
+OBJ_id_cct_crs="\x2B\x06\x01\x05\x05\x07\x0C\x01"
+OBJ_id_cct_PKIData="\x2B\x06\x01\x05\x05\x07\x0C\x02"
+OBJ_id_cct_PKIResponse="\x2B\x06\x01\x05\x05\x07\x0C\x03"
+OBJ_ad_timeStamping="\x2B\x06\x01\x05\x05\x07\x30\x03"
+OBJ_ad_dvcs="\x2B\x06\x01\x05\x05\x07\x30\x04"
+OBJ_id_pkix_OCSP_basic="\x2B\x06\x01\x05\x05\x07\x30\x01\x01"
+OBJ_id_pkix_OCSP_Nonce="\x2B\x06\x01\x05\x05\x07\x30\x01\x02"
+OBJ_id_pkix_OCSP_CrlID="\x2B\x06\x01\x05\x05\x07\x30\x01\x03"
+OBJ_id_pkix_OCSP_acceptableResponses="\x2B\x06\x01\x05\x05\x07\x30\x01\x04"
+OBJ_id_pkix_OCSP_noCheck="\x2B\x06\x01\x05\x05\x07\x30\x01\x05"
+OBJ_id_pkix_OCSP_archiveCutoff="\x2B\x06\x01\x05\x05\x07\x30\x01\x06"
+OBJ_id_pkix_OCSP_serviceLocator="\x2B\x06\x01\x05\x05\x07\x30\x01\x07"
+OBJ_id_pkix_OCSP_extendedStatus="\x2B\x06\x01\x05\x05\x07\x30\x01\x08"
+OBJ_id_pkix_OCSP_valid="\x2B\x06\x01\x05\x05\x07\x30\x01\x09"
+OBJ_id_pkix_OCSP_path="\x2B\x06\x01\x05\x05\x07\x30\x01\x0A"
+OBJ_id_pkix_OCSP_trustRoot="\x2B\x06\x01\x05\x05\x07\x30\x01\x0B"
+OBJ_algorithm="\x2B\x0E\x03\x02"
+OBJ_rsaSignature="\x2B\x0E\x03\x02\x0B"
+OBJ_X500algorithms="\x55\x08"
+OBJ_org="\x2B"
+OBJ_dod="\x2B\x06"
+OBJ_iana="\x2B\x06\x01"
+OBJ_Directory="\x2B\x06\x01\x01"
+OBJ_Management="\x2B\x06\x01\x02"
+OBJ_Experimental="\x2B\x06\x01\x03"
+OBJ_Private="\x2B\x06\x01\x04"
+OBJ_Security="\x2B\x06\x01\x05"
+OBJ_SNMPv2="\x2B\x06\x01\x06"
+OBJ_Mail="\x2B\x06\x01\x07"
+OBJ_Enterprises="\x2B\x06\x01\x04\x01"
+OBJ_dcObject="\x2B\x06\x01\x04\x01\x8B\x3A\x82\x58"
+OBJ_domainComponent="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x19"
+OBJ_Domain="\x09\x92\x26\x89\x93\xF2\x2C\x64\x04\x0D"
+OBJ_selected_attribute_types="\x55\x01\x05"
+OBJ_clearance="\x55\x01\x05\x37"
+OBJ_md4WithRSAEncryption="\x2A\x86\x48\x86\xF7\x0D\x01\x01\x03"
+OBJ_ac_proxying="\x2B\x06\x01\x05\x05\x07\x01\x0A"
+OBJ_sinfo_access="\x2B\x06\x01\x05\x05\x07\x01\x0B"
+OBJ_id_aca_encAttrs="\x2B\x06\x01\x05\x05\x07\x0A\x06"
+OBJ_role="\x55\x04\x48"
+OBJ_policy_constraints="\x55\x1D\x24"
+OBJ_target_information="\x55\x1D\x37"
+OBJ_no_rev_avail="\x55\x1D\x38"
+OBJ_ansi_X9_62="\x2A\x86\x48\xCE\x3D"
+OBJ_X9_62_prime_field="\x2A\x86\x48\xCE\x3D\x01\x01"
+OBJ_X9_62_characteristic_two_field="\x2A\x86\x48\xCE\x3D\x01\x02"
+OBJ_X9_62_id_ecPublicKey="\x2A\x86\x48\xCE\x3D\x02\x01"
+OBJ_X9_62_prime192v1="\x2A\x86\x48\xCE\x3D\x03\x01\x01"
+OBJ_X9_62_prime192v2="\x2A\x86\x48\xCE\x3D\x03\x01\x02"
+OBJ_X9_62_prime192v3="\x2A\x86\x48\xCE\x3D\x03\x01\x03"
+OBJ_X9_62_prime239v1="\x2A\x86\x48\xCE\x3D\x03\x01\x04"
+OBJ_X9_62_prime239v2="\x2A\x86\x48\xCE\x3D\x03\x01\x05"
+OBJ_X9_62_prime239v3="\x2A\x86\x48\xCE\x3D\x03\x01\x06"
+OBJ_X9_62_prime256v1="\x2A\x86\x48\xCE\x3D\x03\x01\x07"
+OBJ_ecdsa_with_SHA1="\x2A\x86\x48\xCE\x3D\x04\x01"
+OBJ_ms_csp_name="\x2B\x06\x01\x04\x01\x82\x37\x11\x01"
+OBJ_aes_128_ecb="\x60\x86\x48\x01\x65\x03\x04\x01\x01"
+OBJ_aes_128_cbc="\x60\x86\x48\x01\x65\x03\x04\x01\x02"
+OBJ_aes_128_ofb128="\x60\x86\x48\x01\x65\x03\x04\x01\x03"
+OBJ_aes_128_cfb128="\x60\x86\x48\x01\x65\x03\x04\x01\x04"
+OBJ_aes_192_ecb="\x60\x86\x48\x01\x65\x03\x04\x01\x15"
+OBJ_aes_192_cbc="\x60\x86\x48\x01\x65\x03\x04\x01\x16"
+OBJ_aes_192_ofb128="\x60\x86\x48\x01\x65\x03\x04\x01\x17"
+OBJ_aes_192_cfb128="\x60\x86\x48\x01\x65\x03\x04\x01\x18"
+OBJ_aes_256_ecb="\x60\x86\x48\x01\x65\x03\x04\x01\x29"
+OBJ_aes_256_cbc="\x60\x86\x48\x01\x65\x03\x04\x01\x2A"
+OBJ_aes_256_ofb128="\x60\x86\x48\x01\x65\x03\x04\x01\x2B"
+OBJ_aes_256_cfb128="\x60\x86\x48\x01\x65\x03\x04\x01\x2C"
+OBJ_hold_instruction_code="\x55\x1D\x17"
+OBJ_hold_instruction_none="\x2A\x86\x48\xCE\x38\x02\x01"
+OBJ_hold_instruction_call_issuer="\x2A\x86\x48\xCE\x38\x02\x02"
+OBJ_hold_instruction_reject="\x2A\x86\x48\xCE\x38\x02\x03"
+OBJ_data="\x09"
+OBJ_pss="\x09\x92\x26"
+OBJ_ucl="\x09\x92\x26\x89\x93\xF2\x2C"
+OBJ_pilot="\x09\x92\x26\x89\x93\xF2\x2C\x64"
+OBJ_pilotAttributeType="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01"
+OBJ_pilotAttributeSyntax="\x09\x92\x26\x89\x93\xF2\x2C\x64\x03"
+OBJ_pilotObjectClass="\x09\x92\x26\x89\x93\xF2\x2C\x64\x04"
+OBJ_pilotGroups="\x09\x92\x26\x89\x93\xF2\x2C\x64\x0A"
+OBJ_iA5StringSyntax="\x09\x92\x26\x89\x93\xF2\x2C\x64\x03\x04"
+OBJ_caseIgnoreIA5StringSyntax="\x09\x92\x26\x89\x93\xF2\x2C\x64\x03\x05"
+OBJ_pilotObject="\x09\x92\x26\x89\x93\xF2\x2C\x64\x04\x03"
+OBJ_pilotPerson="\x09\x92\x26\x89\x93\xF2\x2C\x64\x04\x04"
+OBJ_account="\x09\x92\x26\x89\x93\xF2\x2C\x64\x04\x05"
+OBJ_document="\x09\x92\x26\x89\x93\xF2\x2C\x64\x04\x06"
+OBJ_room="\x09\x92\x26\x89\x93\xF2\x2C\x64\x04\x07"
+OBJ_documentSeries="\x09\x92\x26\x89\x93\xF2\x2C\x64\x04\x09"
+OBJ_rFC822localPart="\x09\x92\x26\x89\x93\xF2\x2C\x64\x04\x0E"
+OBJ_dNSDomain="\x09\x92\x26\x89\x93\xF2\x2C\x64\x04\x0F"
+OBJ_domainRelatedObject="\x09\x92\x26\x89\x93\xF2\x2C\x64\x04\x11"
+OBJ_friendlyCountry="\x09\x92\x26\x89\x93\xF2\x2C\x64\x04\x12"
+OBJ_simpleSecurityObject="\x09\x92\x26\x89\x93\xF2\x2C\x64\x04\x13"
+OBJ_pilotOrganization="\x09\x92\x26\x89\x93\xF2\x2C\x64\x04\x14"
+OBJ_pilotDSA="\x09\x92\x26\x89\x93\xF2\x2C\x64\x04\x15"
+OBJ_qualityLabelledData="\x09\x92\x26\x89\x93\xF2\x2C\x64\x04\x16"
+OBJ_userId="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x01"
+OBJ_textEncodedORAddress="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x02"
+OBJ_rfc822Mailbox="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x03"
+OBJ_info="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x04"
+OBJ_favouriteDrink="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x05"
+OBJ_roomNumber="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x06"
+OBJ_photo="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x07"
+OBJ_userClass="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x08"
+OBJ_host="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x09"
+OBJ_manager="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x0A"
+OBJ_documentIdentifier="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x0B"
+OBJ_documentTitle="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x0C"
+OBJ_documentVersion="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x0D"
+OBJ_documentAuthor="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x0E"
+OBJ_documentLocation="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x0F"
+OBJ_homeTelephoneNumber="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x14"
+OBJ_secretary="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x15"
+OBJ_otherMailbox="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x16"
+OBJ_lastModifiedTime="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x17"
+OBJ_lastModifiedBy="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x18"
+OBJ_aRecord="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x1A"
+OBJ_pilotAttributeType27="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x1B"
+OBJ_mXRecord="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x1C"
+OBJ_nSRecord="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x1D"
+OBJ_sOARecord="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x1E"
+OBJ_cNAMERecord="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x1F"
+OBJ_associatedDomain="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x25"
+OBJ_associatedName="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x26"
+OBJ_homePostalAddress="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x27"
+OBJ_personalTitle="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x28"
+OBJ_mobileTelephoneNumber="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x29"
+OBJ_pagerTelephoneNumber="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x2A"
+OBJ_friendlyCountryName="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x2B"
+OBJ_organizationalStatus="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x2D"
+OBJ_janetMailbox="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x2E"
+OBJ_mailPreferenceOption="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x2F"
+OBJ_buildingName="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x30"
+OBJ_dSAQuality="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x31"
+OBJ_singleLevelQuality="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x32"
+OBJ_subtreeMinimumQuality="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x33"
+OBJ_subtreeMaximumQuality="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x34"
+OBJ_personalSignature="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x35"
+OBJ_dITRedirect="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x36"
+OBJ_audio="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x37"
+OBJ_documentPublisher="\x09\x92\x26\x89\x93\xF2\x2C\x64\x01\x38"
+OBJ_x500UniqueIdentifier="\x55\x04\x2D"
+OBJ_mime_mhs="\x2B\x06\x01\x07\x01"
+OBJ_mime_mhs_headings="\x2B\x06\x01\x07\x01\x01"
+OBJ_mime_mhs_bodies="\x2B\x06\x01\x07\x01\x02"
+OBJ_id_hex_partial_message="\x2B\x06\x01\x07\x01\x01\x01"
+OBJ_id_hex_multipart_message="\x2B\x06\x01\x07\x01\x01\x02"
+OBJ_generationQualifier="\x55\x04\x2C"
+OBJ_pseudonym="\x55\x04\x41"
+OBJ_id_set="\x67\x2A"
+OBJ_set_ctype="\x67\x2A\x00"
+OBJ_set_msgExt="\x67\x2A\x01"
+OBJ_set_attr="\x67\x2A\x03"
+OBJ_set_policy="\x67\x2A\x05"
+OBJ_set_certExt="\x67\x2A\x07"
+OBJ_set_brand="\x67\x2A\x08"
+OBJ_setct_PANData="\x67\x2A\x00\x00"
+OBJ_setct_PANToken="\x67\x2A\x00\x01"
+OBJ_setct_PANOnly="\x67\x2A\x00\x02"
+OBJ_setct_OIData="\x67\x2A\x00\x03"
+OBJ_setct_PI="\x67\x2A\x00\x04"
+OBJ_setct_PIData="\x67\x2A\x00\x05"
+OBJ_setct_PIDataUnsigned="\x67\x2A\x00\x06"
+OBJ_setct_HODInput="\x67\x2A\x00\x07"
+OBJ_setct_AuthResBaggage="\x67\x2A\x00\x08"
+OBJ_setct_AuthRevReqBaggage="\x67\x2A\x00\x09"
+OBJ_setct_AuthRevResBaggage="\x67\x2A\x00\x0A"
+OBJ_setct_CapTokenSeq="\x67\x2A\x00\x0B"
+OBJ_setct_PInitResData="\x67\x2A\x00\x0C"
+OBJ_setct_PI_TBS="\x67\x2A\x00\x0D"
+OBJ_setct_PResData="\x67\x2A\x00\x0E"
+OBJ_setct_AuthReqTBS="\x67\x2A\x00\x10"
+OBJ_setct_AuthResTBS="\x67\x2A\x00\x11"
+OBJ_setct_AuthResTBSX="\x67\x2A\x00\x12"
+OBJ_setct_AuthTokenTBS="\x67\x2A\x00\x13"
+OBJ_setct_CapTokenData="\x67\x2A\x00\x14"
+OBJ_setct_CapTokenTBS="\x67\x2A\x00\x15"
+OBJ_setct_AcqCardCodeMsg="\x67\x2A\x00\x16"
+OBJ_setct_AuthRevReqTBS="\x67\x2A\x00\x17"
+OBJ_setct_AuthRevResData="\x67\x2A\x00\x18"
+OBJ_setct_AuthRevResTBS="\x67\x2A\x00\x19"
+OBJ_setct_CapReqTBS="\x67\x2A\x00\x1A"
+OBJ_setct_CapReqTBSX="\x67\x2A\x00\x1B"
+OBJ_setct_CapResData="\x67\x2A\x00\x1C"
+OBJ_setct_CapRevReqTBS="\x67\x2A\x00\x1D"
+OBJ_setct_CapRevReqTBSX="\x67\x2A\x00\x1E"
+OBJ_setct_CapRevResData="\x67\x2A\x00\x1F"
+OBJ_setct_CredReqTBS="\x67\x2A\x00\x20"
+OBJ_setct_CredReqTBSX="\x67\x2A\x00\x21"
+OBJ_setct_CredResData="\x67\x2A\x00\x22"
+OBJ_setct_CredRevReqTBS="\x67\x2A\x00\x23"
+OBJ_setct_CredRevReqTBSX="\x67\x2A\x00\x24"
+OBJ_setct_CredRevResData="\x67\x2A\x00\x25"
+OBJ_setct_PCertReqData="\x67\x2A\x00\x26"
+OBJ_setct_PCertResTBS="\x67\x2A\x00\x27"
+OBJ_setct_BatchAdminReqData="\x67\x2A\x00\x28"
+OBJ_setct_BatchAdminResData="\x67\x2A\x00\x29"
+OBJ_setct_CardCInitResTBS="\x67\x2A\x00\x2A"
+OBJ_setct_MeAqCInitResTBS="\x67\x2A\x00\x2B"
+OBJ_setct_RegFormResTBS="\x67\x2A\x00\x2C"
+OBJ_setct_CertReqData="\x67\x2A\x00\x2D"
+OBJ_setct_CertReqTBS="\x67\x2A\x00\x2E"
+OBJ_setct_CertResData="\x67\x2A\x00\x2F"
+OBJ_setct_CertInqReqTBS="\x67\x2A\x00\x30"
+OBJ_setct_ErrorTBS="\x67\x2A\x00\x31"
+OBJ_setct_PIDualSignedTBE="\x67\x2A\x00\x32"
+OBJ_setct_PIUnsignedTBE="\x67\x2A\x00\x33"
+OBJ_setct_AuthReqTBE="\x67\x2A\x00\x34"
+OBJ_setct_AuthResTBE="\x67\x2A\x00\x35"
+OBJ_setct_AuthResTBEX="\x67\x2A\x00\x36"
+OBJ_setct_AuthTokenTBE="\x67\x2A\x00\x37"
+OBJ_setct_CapTokenTBE="\x67\x2A\x00\x38"
+OBJ_setct_CapTokenTBEX="\x67\x2A\x00\x39"
+OBJ_setct_AcqCardCodeMsgTBE="\x67\x2A\x00\x3A"
+OBJ_setct_AuthRevReqTBE="\x67\x2A\x00\x3B"
+OBJ_setct_AuthRevResTBE="\x67\x2A\x00\x3C"
+OBJ_setct_AuthRevResTBEB="\x67\x2A\x00\x3D"
+OBJ_setct_CapReqTBE="\x67\x2A\x00\x3E"
+OBJ_setct_CapReqTBEX="\x67\x2A\x00\x3F"
+OBJ_setct_CapResTBE="\x67\x2A\x00\x40"
+OBJ_setct_CapRevReqTBE="\x67\x2A\x00\x41"
+OBJ_setct_CapRevReqTBEX="\x67\x2A\x00\x42"
+OBJ_setct_CapRevResTBE="\x67\x2A\x00\x43"
+OBJ_setct_CredReqTBE="\x67\x2A\x00\x44"
+OBJ_setct_CredReqTBEX="\x67\x2A\x00\x45"
+OBJ_setct_CredResTBE="\x67\x2A\x00\x46"
+OBJ_setct_CredRevReqTBE="\x67\x2A\x00\x47"
+OBJ_setct_CredRevReqTBEX="\x67\x2A\x00\x48"
+OBJ_setct_CredRevResTBE="\x67\x2A\x00\x49"
+OBJ_setct_BatchAdminReqTBE="\x67\x2A\x00\x4A"
+OBJ_setct_BatchAdminResTBE="\x67\x2A\x00\x4B"
+OBJ_setct_RegFormReqTBE="\x67\x2A\x00\x4C"
+OBJ_setct_CertReqTBE="\x67\x2A\x00\x4D"
+OBJ_setct_CertReqTBEX="\x67\x2A\x00\x4E"
+OBJ_setct_CertResTBE="\x67\x2A\x00\x4F"
+OBJ_setct_CRLNotificationTBS="\x67\x2A\x00\x50"
+OBJ_setct_CRLNotificationResTBS="\x67\x2A\x00\x51"
+OBJ_setct_BCIDistributionTBS="\x67\x2A\x00\x52"
+OBJ_setext_genCrypt="\x67\x2A\x01\x01"
+OBJ_setext_miAuth="\x67\x2A\x01\x03"
+OBJ_setext_pinSecure="\x67\x2A\x01\x04"
+OBJ_setext_pinAny="\x67\x2A\x01\x05"
+OBJ_setext_track2="\x67\x2A\x01\x07"
+OBJ_setext_cv="\x67\x2A\x01\x08"
+OBJ_set_policy_root="\x67\x2A\x05\x00"
+OBJ_setCext_hashedRoot="\x67\x2A\x07\x00"
+OBJ_setCext_certType="\x67\x2A\x07\x01"
+OBJ_setCext_merchData="\x67\x2A\x07\x02"
+OBJ_setCext_cCertRequired="\x67\x2A\x07\x03"
+OBJ_setCext_tunneling="\x67\x2A\x07\x04"
+OBJ_setCext_setExt="\x67\x2A\x07\x05"
+OBJ_setCext_setQualf="\x67\x2A\x07\x06"
+OBJ_setCext_PGWYcapabilities="\x67\x2A\x07\x07"
+OBJ_setCext_TokenIdentifier="\x67\x2A\x07\x08"
+OBJ_setCext_Track2Data="\x67\x2A\x07\x09"
+OBJ_setCext_TokenType="\x67\x2A\x07\x0A"
+OBJ_setCext_IssuerCapabilities="\x67\x2A\x07\x0B"
+OBJ_setAttr_Cert="\x67\x2A\x03\x00"
+OBJ_setAttr_PGWYcap="\x67\x2A\x03\x01"
+OBJ_setAttr_TokenType="\x67\x2A\x03\x02"
+OBJ_setAttr_IssCap="\x67\x2A\x03\x03"
+OBJ_set_rootKeyThumb="\x67\x2A\x03\x00\x00"
+OBJ_set_addPolicy="\x67\x2A\x03\x00\x01"
+OBJ_setAttr_Token_EMV="\x67\x2A\x03\x02\x01"
+OBJ_setAttr_Token_B0Prime="\x67\x2A\x03\x02\x02"
+OBJ_setAttr_IssCap_CVM="\x67\x2A\x03\x03\x03"
+OBJ_setAttr_IssCap_T2="\x67\x2A\x03\x03\x04"
+OBJ_setAttr_IssCap_Sig="\x67\x2A\x03\x03\x05"
+OBJ_setAttr_GenCryptgrm="\x67\x2A\x03\x03\x03\x01"
+OBJ_setAttr_T2Enc="\x67\x2A\x03\x03\x04\x01"
+OBJ_setAttr_T2cleartxt="\x67\x2A\x03\x03\x04\x02"
+OBJ_setAttr_TokICCsig="\x67\x2A\x03\x03\x05\x01"
+OBJ_setAttr_SecDevSig="\x67\x2A\x03\x03\x05\x02"
+OBJ_set_brand_IATA_ATA="\x67\x2A\x08\x01"
+OBJ_set_brand_Diners="\x67\x2A\x08\x1E"
+OBJ_set_brand_AmericanExpress="\x67\x2A\x08\x22"
+OBJ_set_brand_JCB="\x67\x2A\x08\x23"
+OBJ_set_brand_Visa="\x67\x2A\x08\x04"
+OBJ_set_brand_MasterCard="\x67\x2A\x08\x05"
+OBJ_set_brand_Novus="\x67\x2A\x08\xAE\x7B"
+OBJ_des_cdmf="\x2A\x86\x48\x86\xF7\x0D\x03\x0A"
+OBJ_rsaOAEPEncryptionSET="\x2A\x86\x48\x86\xF7\x0D\x01\x01\x06"
+OBJ_international_organizations="\x67"
+OBJ_ms_smartcard_login="\x2B\x06\x01\x04\x01\x82\x37\x14\x02\x02"
+OBJ_ms_upn="\x2B\x06\x01\x04\x01\x82\x37\x14\x02\x03"
+OBJ_streetAddress="\x55\x04\x09"
+OBJ_postalCode="\x55\x04\x11"
+OBJ_id_ppl="\x2B\x06\x01\x05\x05\x07\x15"
+OBJ_proxyCertInfo="\x2B\x06\x01\x05\x05\x07\x01\x0E"
+OBJ_id_ppl_anyLanguage="\x2B\x06\x01\x05\x05\x07\x15\x00"
+OBJ_id_ppl_inheritAll="\x2B\x06\x01\x05\x05\x07\x15\x01"
+OBJ_name_constraints="\x55\x1D\x1E"
+OBJ_Independent="\x2B\x06\x01\x05\x05\x07\x15\x02"
+OBJ_sha256WithRSAEncryption="\x2A\x86\x48\x86\xF7\x0D\x01\x01\x0B"
+OBJ_sha384WithRSAEncryption="\x2A\x86\x48\x86\xF7\x0D\x01\x01\x0C"
+OBJ_sha512WithRSAEncryption="\x2A\x86\x48\x86\xF7\x0D\x01\x01\x0D"
+OBJ_sha224WithRSAEncryption="\x2A\x86\x48\x86\xF7\x0D\x01\x01\x0E"
+OBJ_sha256="\x60\x86\x48\x01\x65\x03\x04\x02\x01"
+OBJ_sha384="\x60\x86\x48\x01\x65\x03\x04\x02\x02"
+OBJ_sha512="\x60\x86\x48\x01\x65\x03\x04\x02\x03"
+OBJ_sha224="\x60\x86\x48\x01\x65\x03\x04\x02\x04"
+OBJ_identified_organization="\x2B"
+OBJ_certicom_arc="\x2B\x81\x04"
+OBJ_wap="\x67\x2B"
+OBJ_wap_wsg="\x67\x2B\x01"
+OBJ_X9_62_id_characteristic_two_basis="\x2A\x86\x48\xCE\x3D\x01\x02\x03"
+OBJ_X9_62_onBasis="\x2A\x86\x48\xCE\x3D\x01\x02\x03\x01"
+OBJ_X9_62_tpBasis="\x2A\x86\x48\xCE\x3D\x01\x02\x03\x02"
+OBJ_X9_62_ppBasis="\x2A\x86\x48\xCE\x3D\x01\x02\x03\x03"
+OBJ_X9_62_c2pnb163v1="\x2A\x86\x48\xCE\x3D\x03\x00\x01"
+OBJ_X9_62_c2pnb163v2="\x2A\x86\x48\xCE\x3D\x03\x00\x02"
+OBJ_X9_62_c2pnb163v3="\x2A\x86\x48\xCE\x3D\x03\x00\x03"
+OBJ_X9_62_c2pnb176v1="\x2A\x86\x48\xCE\x3D\x03\x00\x04"
+OBJ_X9_62_c2tnb191v1="\x2A\x86\x48\xCE\x3D\x03\x00\x05"
+OBJ_X9_62_c2tnb191v2="\x2A\x86\x48\xCE\x3D\x03\x00\x06"
+OBJ_X9_62_c2tnb191v3="\x2A\x86\x48\xCE\x3D\x03\x00\x07"
+OBJ_X9_62_c2onb191v4="\x2A\x86\x48\xCE\x3D\x03\x00\x08"
+OBJ_X9_62_c2onb191v5="\x2A\x86\x48\xCE\x3D\x03\x00\x09"
+OBJ_X9_62_c2pnb208w1="\x2A\x86\x48\xCE\x3D\x03\x00\x0A"
+OBJ_X9_62_c2tnb239v1="\x2A\x86\x48\xCE\x3D\x03\x00\x0B"
+OBJ_X9_62_c2tnb239v2="\x2A\x86\x48\xCE\x3D\x03\x00\x0C"
+OBJ_X9_62_c2tnb239v3="\x2A\x86\x48\xCE\x3D\x03\x00\x0D"
+OBJ_X9_62_c2onb239v4="\x2A\x86\x48\xCE\x3D\x03\x00\x0E"
+OBJ_X9_62_c2onb239v5="\x2A\x86\x48\xCE\x3D\x03\x00\x0F"
+OBJ_X9_62_c2pnb272w1="\x2A\x86\x48\xCE\x3D\x03\x00\x10"
+OBJ_X9_62_c2pnb304w1="\x2A\x86\x48\xCE\x3D\x03\x00\x11"
+OBJ_X9_62_c2tnb359v1="\x2A\x86\x48\xCE\x3D\x03\x00\x12"
+OBJ_X9_62_c2pnb368w1="\x2A\x86\x48\xCE\x3D\x03\x00\x13"
+OBJ_X9_62_c2tnb431r1="\x2A\x86\x48\xCE\x3D\x03\x00\x14"
+OBJ_secp112r1="\x2B\x81\x04\x00\x06"
+OBJ_secp112r2="\x2B\x81\x04\x00\x07"
+OBJ_secp128r1="\x2B\x81\x04\x00\x1C"
+OBJ_secp128r2="\x2B\x81\x04\x00\x1D"
+OBJ_secp160k1="\x2B\x81\x04\x00\x09"
+OBJ_secp160r1="\x2B\x81\x04\x00\x08"
+OBJ_secp160r2="\x2B\x81\x04\x00\x1E"
+OBJ_secp192k1="\x2B\x81\x04\x00\x1F"
+OBJ_secp224k1="\x2B\x81\x04\x00\x20"
+OBJ_secp224r1="\x2B\x81\x04\x00\x21"
+OBJ_secp256k1="\x2B\x81\x04\x00\x0A"
+OBJ_secp384r1="\x2B\x81\x04\x00\x22"
+OBJ_secp521r1="\x2B\x81\x04\x00\x23"
+OBJ_sect113r1="\x2B\x81\x04\x00\x04"
+OBJ_sect113r2="\x2B\x81\x04\x00\x05"
+OBJ_sect131r1="\x2B\x81\x04\x00\x16"
+OBJ_sect131r2="\x2B\x81\x04\x00\x17"
+OBJ_sect163k1="\x2B\x81\x04\x00\x01"
+OBJ_sect163r1="\x2B\x81\x04\x00\x02"
+OBJ_sect163r2="\x2B\x81\x04\x00\x0F"
+OBJ_sect193r1="\x2B\x81\x04\x00\x18"
+OBJ_sect193r2="\x2B\x81\x04\x00\x19"
+OBJ_sect233k1="\x2B\x81\x04\x00\x1A"
+OBJ_sect233r1="\x2B\x81\x04\x00\x1B"
+OBJ_sect239k1="\x2B\x81\x04\x00\x03"
+OBJ_sect283k1="\x2B\x81\x04\x00\x10"
+OBJ_sect283r1="\x2B\x81\x04\x00\x11"
+OBJ_sect409k1="\x2B\x81\x04\x00\x24"
+OBJ_sect409r1="\x2B\x81\x04\x00\x25"
+OBJ_sect571k1="\x2B\x81\x04\x00\x26"
+OBJ_sect571r1="\x2B\x81\x04\x00\x27"
+OBJ_wap_wsg_idm_ecid_wtls1="\x67\x2B\x01\x04\x01"
+OBJ_wap_wsg_idm_ecid_wtls3="\x67\x2B\x01\x04\x03"
+OBJ_wap_wsg_idm_ecid_wtls4="\x67\x2B\x01\x04\x04"
+OBJ_wap_wsg_idm_ecid_wtls5="\x67\x2B\x01\x04\x05"
+OBJ_wap_wsg_idm_ecid_wtls6="\x67\x2B\x01\x04\x06"
+OBJ_wap_wsg_idm_ecid_wtls7="\x67\x2B\x01\x04\x07"
+OBJ_wap_wsg_idm_ecid_wtls8="\x67\x2B\x01\x04\x08"
+OBJ_wap_wsg_idm_ecid_wtls9="\x67\x2B\x01\x04\x09"
+OBJ_wap_wsg_idm_ecid_wtls10="\x67\x2B\x01\x04\x0A"
+OBJ_wap_wsg_idm_ecid_wtls11="\x67\x2B\x01\x04\x0B"
+OBJ_wap_wsg_idm_ecid_wtls12="\x67\x2B\x01\x04\x0C"
+OBJ_any_policy="\x55\x1D\x20\x00"
+OBJ_policy_mappings="\x55\x1D\x21"
+OBJ_inhibit_any_policy="\x55\x1D\x36"
+OBJ_camellia_128_cbc="\x2A\x83\x08\x8C\x9A\x4B\x3D\x01\x01\x01\x02"
+OBJ_camellia_192_cbc="\x2A\x83\x08\x8C\x9A\x4B\x3D\x01\x01\x01\x03"
+OBJ_camellia_256_cbc="\x2A\x83\x08\x8C\x9A\x4B\x3D\x01\x01\x01\x04"
+OBJ_camellia_128_ecb="\x03\xA2\x31\x05\x03\x01\x09\x01"
+OBJ_camellia_192_ecb="\x03\xA2\x31\x05\x03\x01\x09\x15"
+OBJ_camellia_256_ecb="\x03\xA2\x31\x05\x03\x01\x09\x29"
+OBJ_camellia_128_cfb128="\x03\xA2\x31\x05\x03\x01\x09\x04"
+OBJ_camellia_192_cfb128="\x03\xA2\x31\x05\x03\x01\x09\x18"
+OBJ_camellia_256_cfb128="\x03\xA2\x31\x05\x03\x01\x09\x2C"
+OBJ_camellia_128_ofb128="\x03\xA2\x31\x05\x03\x01\x09\x03"
+OBJ_camellia_192_ofb128="\x03\xA2\x31\x05\x03\x01\x09\x17"
+OBJ_camellia_256_ofb128="\x03\xA2\x31\x05\x03\x01\x09\x2B"
+OBJ_subject_directory_attributes="\x55\x1D\x09"
+OBJ_issuing_distribution_point="\x55\x1D\x1C"
+OBJ_certificate_issuer="\x55\x1D\x1D"
+OBJ_kisa="\x2A\x83\x1A\x8C\x9A\x44"
+OBJ_seed_ecb="\x2A\x83\x1A\x8C\x9A\x44\x01\x03"
+OBJ_seed_cbc="\x2A\x83\x1A\x8C\x9A\x44\x01\x04"
+OBJ_seed_ofb128="\x2A\x83\x1A\x8C\x9A\x44\x01\x06"
+OBJ_seed_cfb128="\x2A\x83\x1A\x8C\x9A\x44\x01\x05"
+OBJ_hmac_md5="\x2B\x06\x01\x05\x05\x08\x01\x01"
+OBJ_hmac_sha1="\x2B\x06\x01\x05\x05\x08\x01\x02"
+OBJ_id_PasswordBasedMAC="\x2A\x86\x48\x86\xF6\x7D\x07\x42\x0D"
+OBJ_id_DHBasedMac="\x2A\x86\x48\x86\xF6\x7D\x07\x42\x1E"
+OBJ_id_it_suppLangTags="\x2B\x06\x01\x05\x05\x07\x04\x10"
+OBJ_caRepository="\x2B\x06\x01\x05\x05\x07\x30\x05"
+OBJ_id_smime_ct_compressedData="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x01\x09"
+OBJ_id_ct_asciiTextWithCRLF="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x01\x1B"
+OBJ_id_aes128_wrap="\x60\x86\x48\x01\x65\x03\x04\x01\x05"
+OBJ_id_aes192_wrap="\x60\x86\x48\x01\x65\x03\x04\x01\x19"
+OBJ_id_aes256_wrap="\x60\x86\x48\x01\x65\x03\x04\x01\x2D"
+OBJ_ecdsa_with_Recommended="\x2A\x86\x48\xCE\x3D\x04\x02"
+OBJ_ecdsa_with_Specified="\x2A\x86\x48\xCE\x3D\x04\x03"
+OBJ_ecdsa_with_SHA224="\x2A\x86\x48\xCE\x3D\x04\x03\x01"
+OBJ_ecdsa_with_SHA256="\x2A\x86\x48\xCE\x3D\x04\x03\x02"
+OBJ_ecdsa_with_SHA384="\x2A\x86\x48\xCE\x3D\x04\x03\x03"
+OBJ_ecdsa_with_SHA512="\x2A\x86\x48\xCE\x3D\x04\x03\x04"
+OBJ_hmacWithMD5="\x2A\x86\x48\x86\xF7\x0D\x02\x06"
+OBJ_hmacWithSHA224="\x2A\x86\x48\x86\xF7\x0D\x02\x08"
+OBJ_hmacWithSHA256="\x2A\x86\x48\x86\xF7\x0D\x02\x09"
+OBJ_hmacWithSHA384="\x2A\x86\x48\x86\xF7\x0D\x02\x0A"
+OBJ_hmacWithSHA512="\x2A\x86\x48\x86\xF7\x0D\x02\x0B"
+OBJ_dsa_with_SHA224="\x60\x86\x48\x01\x65\x03\x04\x03\x01"
+OBJ_dsa_with_SHA256="\x60\x86\x48\x01\x65\x03\x04\x03\x02"
+OBJ_whirlpool="\x28\xCF\x06\x03\x00\x37"
+OBJ_cryptopro="\x2A\x85\x03\x02\x02"
+OBJ_cryptocom="\x2A\x85\x03\x02\x09"
+OBJ_id_GostR3411_94_with_GostR3410_2001="\x2A\x85\x03\x02\x02\x03"
+OBJ_id_GostR3411_94_with_GostR3410_94="\x2A\x85\x03\x02\x02\x04"
+OBJ_id_GostR3411_94="\x2A\x85\x03\x02\x02\x09"
+OBJ_id_HMACGostR3411_94="\x2A\x85\x03\x02\x02\x0A"
+OBJ_id_GostR3410_2001="\x2A\x85\x03\x02\x02\x13"
+OBJ_id_GostR3410_94="\x2A\x85\x03\x02\x02\x14"
+OBJ_id_Gost28147_89="\x2A\x85\x03\x02\x02\x15"
+OBJ_id_Gost28147_89_MAC="\x2A\x85\x03\x02\x02\x16"
+OBJ_id_GostR3411_94_prf="\x2A\x85\x03\x02\x02\x17"
+OBJ_id_GostR3410_2001DH="\x2A\x85\x03\x02\x02\x62"
+OBJ_id_GostR3410_94DH="\x2A\x85\x03\x02\x02\x63"
+OBJ_id_Gost28147_89_CryptoPro_KeyMeshing="\x2A\x85\x03\x02\x02\x0E\x01"
+OBJ_id_Gost28147_89_None_KeyMeshing="\x2A\x85\x03\x02\x02\x0E\x00"
+OBJ_id_GostR3411_94_TestParamSet="\x2A\x85\x03\x02\x02\x1E\x00"
+OBJ_id_GostR3411_94_CryptoProParamSet="\x2A\x85\x03\x02\x02\x1E\x01"
+OBJ_id_Gost28147_89_TestParamSet="\x2A\x85\x03\x02\x02\x1F\x00"
+OBJ_id_Gost28147_89_CryptoPro_A_ParamSet="\x2A\x85\x03\x02\x02\x1F\x01"
+OBJ_id_Gost28147_89_CryptoPro_B_ParamSet="\x2A\x85\x03\x02\x02\x1F\x02"
+OBJ_id_Gost28147_89_CryptoPro_C_ParamSet="\x2A\x85\x03\x02\x02\x1F\x03"
+OBJ_id_Gost28147_89_CryptoPro_D_ParamSet="\x2A\x85\x03\x02\x02\x1F\x04"
+OBJ_id_Gost28147_89_CryptoPro_Oscar_1_1_ParamSet="\x2A\x85\x03\x02\x02\x1F\x05"
+OBJ_id_Gost28147_89_CryptoPro_Oscar_1_0_ParamSet="\x2A\x85\x03\x02\x02\x1F\x06"
+OBJ_id_Gost28147_89_CryptoPro_RIC_1_ParamSet="\x2A\x85\x03\x02\x02\x1F\x07"
+OBJ_id_GostR3410_94_TestParamSet="\x2A\x85\x03\x02\x02\x20\x00"
+OBJ_id_GostR3410_94_CryptoPro_A_ParamSet="\x2A\x85\x03\x02\x02\x20\x02"
+OBJ_id_GostR3410_94_CryptoPro_B_ParamSet="\x2A\x85\x03\x02\x02\x20\x03"
+OBJ_id_GostR3410_94_CryptoPro_C_ParamSet="\x2A\x85\x03\x02\x02\x20\x04"
+OBJ_id_GostR3410_94_CryptoPro_D_ParamSet="\x2A\x85\x03\x02\x02\x20\x05"
+OBJ_id_GostR3410_94_CryptoPro_XchA_ParamSet="\x2A\x85\x03\x02\x02\x21\x01"
+OBJ_id_GostR3410_94_CryptoPro_XchB_ParamSet="\x2A\x85\x03\x02\x02\x21\x02"
+OBJ_id_GostR3410_94_CryptoPro_XchC_ParamSet="\x2A\x85\x03\x02\x02\x21\x03"
+OBJ_id_GostR3410_2001_TestParamSet="\x2A\x85\x03\x02\x02\x23\x00"
+OBJ_id_GostR3410_2001_CryptoPro_A_ParamSet="\x2A\x85\x03\x02\x02\x23\x01"
+OBJ_id_GostR3410_2001_CryptoPro_B_ParamSet="\x2A\x85\x03\x02\x02\x23\x02"
+OBJ_id_GostR3410_2001_CryptoPro_C_ParamSet="\x2A\x85\x03\x02\x02\x23\x03"
+OBJ_id_GostR3410_2001_CryptoPro_XchA_ParamSet="\x2A\x85\x03\x02\x02\x24\x00"
+OBJ_id_GostR3410_2001_CryptoPro_XchB_ParamSet="\x2A\x85\x03\x02\x02\x24\x01"
+OBJ_id_GostR3410_94_a="\x2A\x85\x03\x02\x02\x14\x01"
+OBJ_id_GostR3410_94_aBis="\x2A\x85\x03\x02\x02\x14\x02"
+OBJ_id_GostR3410_94_b="\x2A\x85\x03\x02\x02\x14\x03"
+OBJ_id_GostR3410_94_bBis="\x2A\x85\x03\x02\x02\x14\x04"
+OBJ_id_Gost28147_89_cc="\x2A\x85\x03\x02\x09\x01\x06\x01"
+OBJ_id_GostR3410_94_cc="\x2A\x85\x03\x02\x09\x01\x05\x03"
+OBJ_id_GostR3410_2001_cc="\x2A\x85\x03\x02\x09\x01\x05\x04"
+OBJ_id_GostR3411_94_with_GostR3410_94_cc="\x2A\x85\x03\x02\x09\x01\x03\x03"
+OBJ_id_GostR3411_94_with_GostR3410_2001_cc="\x2A\x85\x03\x02\x09\x01\x03\x04"
+OBJ_id_GostR3410_2001_ParamSet_cc="\x2A\x85\x03\x02\x09\x01\x08\x01"
+OBJ_LocalKeySet="\x2B\x06\x01\x04\x01\x82\x37\x11\x02"
+OBJ_freshest_crl="\x55\x1D\x2E"
+OBJ_id_on_permanentIdentifier="\x2B\x06\x01\x05\x05\x07\x08\x03"
+OBJ_searchGuide="\x55\x04\x0E"
+OBJ_businessCategory="\x55\x04\x0F"
+OBJ_postalAddress="\x55\x04\x10"
+OBJ_postOfficeBox="\x55\x04\x12"
+OBJ_physicalDeliveryOfficeName="\x55\x04\x13"
+OBJ_telephoneNumber="\x55\x04\x14"
+OBJ_telexNumber="\x55\x04\x15"
+OBJ_teletexTerminalIdentifier="\x55\x04\x16"
+OBJ_facsimileTelephoneNumber="\x55\x04\x17"
+OBJ_x121Address="\x55\x04\x18"
+OBJ_internationaliSDNNumber="\x55\x04\x19"
+OBJ_registeredAddress="\x55\x04\x1A"
+OBJ_destinationIndicator="\x55\x04\x1B"
+OBJ_preferredDeliveryMethod="\x55\x04\x1C"
+OBJ_presentationAddress="\x55\x04\x1D"
+OBJ_supportedApplicationContext="\x55\x04\x1E"
+OBJ_member="\x55\x04\x1F"
+OBJ_owner="\x55\x04\x20"
+OBJ_roleOccupant="\x55\x04\x21"
+OBJ_seeAlso="\x55\x04\x22"
+OBJ_userPassword="\x55\x04\x23"
+OBJ_userCertificate="\x55\x04\x24"
+OBJ_cACertificate="\x55\x04\x25"
+OBJ_authorityRevocationList="\x55\x04\x26"
+OBJ_certificateRevocationList="\x55\x04\x27"
+OBJ_crossCertificatePair="\x55\x04\x28"
+OBJ_enhancedSearchGuide="\x55\x04\x2F"
+OBJ_protocolInformation="\x55\x04\x30"
+OBJ_distinguishedName="\x55\x04\x31"
+OBJ_uniqueMember="\x55\x04\x32"
+OBJ_houseIdentifier="\x55\x04\x33"
+OBJ_supportedAlgorithms="\x55\x04\x34"
+OBJ_deltaRevocationList="\x55\x04\x35"
+OBJ_dmdName="\x55\x04\x36"
+OBJ_id_alg_PWRI_KEK="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x03\x09"
+OBJ_aes_128_gcm="\x60\x86\x48\x01\x65\x03\x04\x01\x06"
+OBJ_aes_128_ccm="\x60\x86\x48\x01\x65\x03\x04\x01\x07"
+OBJ_id_aes128_wrap_pad="\x60\x86\x48\x01\x65\x03\x04\x01\x08"
+OBJ_aes_192_gcm="\x60\x86\x48\x01\x65\x03\x04\x01\x1A"
+OBJ_aes_192_ccm="\x60\x86\x48\x01\x65\x03\x04\x01\x1B"
+OBJ_id_aes192_wrap_pad="\x60\x86\x48\x01\x65\x03\x04\x01\x1C"
+OBJ_aes_256_gcm="\x60\x86\x48\x01\x65\x03\x04\x01\x2E"
+OBJ_aes_256_ccm="\x60\x86\x48\x01\x65\x03\x04\x01\x2F"
+OBJ_id_aes256_wrap_pad="\x60\x86\x48\x01\x65\x03\x04\x01\x30"
+OBJ_id_camellia128_wrap="\x2A\x83\x08\x8C\x9A\x4B\x3D\x01\x01\x03\x02"
+OBJ_id_camellia192_wrap="\x2A\x83\x08\x8C\x9A\x4B\x3D\x01\x01\x03\x03"
+OBJ_id_camellia256_wrap="\x2A\x83\x08\x8C\x9A\x4B\x3D\x01\x01\x03\x04"
+OBJ_anyExtendedKeyUsage="\x55\x1D\x25\x00"
+OBJ_mgf1="\x2A\x86\x48\x86\xF7\x0D\x01\x01\x08"
+OBJ_rsassaPss="\x2A\x86\x48\x86\xF7\x0D\x01\x01\x0A"
+OBJ_aes_128_xts="\x2B\x6F\x02\x8C\x53\x00\x01\x01"
+OBJ_aes_256_xts="\x2B\x6F\x02\x8C\x53\x00\x01\x02"
+OBJ_rsaesOaep="\x2A\x86\x48\x86\xF7\x0D\x01\x01\x07"
+OBJ_dhpublicnumber="\x2A\x86\x48\xCE\x3E\x02\x01"
+OBJ_brainpoolP160r1="\x2B\x24\x03\x03\x02\x08\x01\x01\x01"
+OBJ_brainpoolP160t1="\x2B\x24\x03\x03\x02\x08\x01\x01\x02"
+OBJ_brainpoolP192r1="\x2B\x24\x03\x03\x02\x08\x01\x01\x03"
+OBJ_brainpoolP192t1="\x2B\x24\x03\x03\x02\x08\x01\x01\x04"
+OBJ_brainpoolP224r1="\x2B\x24\x03\x03\x02\x08\x01\x01\x05"
+OBJ_brainpoolP224t1="\x2B\x24\x03\x03\x02\x08\x01\x01\x06"
+OBJ_brainpoolP256r1="\x2B\x24\x03\x03\x02\x08\x01\x01\x07"
+OBJ_brainpoolP256t1="\x2B\x24\x03\x03\x02\x08\x01\x01\x08"
+OBJ_brainpoolP320r1="\x2B\x24\x03\x03\x02\x08\x01\x01\x09"
+OBJ_brainpoolP320t1="\x2B\x24\x03\x03\x02\x08\x01\x01\x0A"
+OBJ_brainpoolP384r1="\x2B\x24\x03\x03\x02\x08\x01\x01\x0B"
+OBJ_brainpoolP384t1="\x2B\x24\x03\x03\x02\x08\x01\x01\x0C"
+OBJ_brainpoolP512r1="\x2B\x24\x03\x03\x02\x08\x01\x01\x0D"
+OBJ_brainpoolP512t1="\x2B\x24\x03\x03\x02\x08\x01\x01\x0E"
+OBJ_pSpecified="\x2A\x86\x48\x86\xF7\x0D\x01\x01\x09"
+OBJ_dhSinglePass_stdDH_sha1kdf_scheme="\x2B\x81\x05\x10\x86\x48\x3F\x00\x02"
+OBJ_dhSinglePass_stdDH_sha224kdf_scheme="\x2B\x81\x04\x01\x0B\x00"
+OBJ_dhSinglePass_stdDH_sha256kdf_scheme="\x2B\x81\x04\x01\x0B\x01"
+OBJ_dhSinglePass_stdDH_sha384kdf_scheme="\x2B\x81\x04\x01\x0B\x02"
+OBJ_dhSinglePass_stdDH_sha512kdf_scheme="\x2B\x81\x04\x01\x0B\x03"
+OBJ_dhSinglePass_cofactorDH_sha1kdf_scheme="\x2B\x81\x05\x10\x86\x48\x3F\x00\x03"
+OBJ_dhSinglePass_cofactorDH_sha224kdf_scheme="\x2B\x81\x04\x01\x0E\x00"
+OBJ_dhSinglePass_cofactorDH_sha256kdf_scheme="\x2B\x81\x04\x01\x0E\x01"
+OBJ_dhSinglePass_cofactorDH_sha384kdf_scheme="\x2B\x81\x04\x01\x0E\x02"
+OBJ_dhSinglePass_cofactorDH_sha512kdf_scheme="\x2B\x81\x04\x01\x0E\x03"
+OBJ_ct_precert_scts="\x2B\x06\x01\x04\x01\xD6\x79\x02\x04\x02"
+OBJ_ct_precert_poison="\x2B\x06\x01\x04\x01\xD6\x79\x02\x04\x03"
+OBJ_ct_precert_signer="\x2B\x06\x01\x04\x01\xD6\x79\x02\x04\x04"
+OBJ_ct_cert_scts="\x2B\x06\x01\x04\x01\xD6\x79\x02\x04\x05"
+OBJ_jurisdictionLocalityName="\x2B\x06\x01\x04\x01\x82\x37\x3C\x02\x01\x01"
+OBJ_jurisdictionStateOrProvinceName="\x2B\x06\x01\x04\x01\x82\x37\x3C\x02\x01\x02"
+OBJ_jurisdictionCountryName="\x2B\x06\x01\x04\x01\x82\x37\x3C\x02\x01\x03"
+OBJ_camellia_128_gcm="\x03\xA2\x31\x05\x03\x01\x09\x06"
+OBJ_camellia_128_ccm="\x03\xA2\x31\x05\x03\x01\x09\x07"
+OBJ_camellia_128_ctr="\x03\xA2\x31\x05\x03\x01\x09\x09"
+OBJ_camellia_128_cmac="\x03\xA2\x31\x05\x03\x01\x09\x0A"
+OBJ_camellia_192_gcm="\x03\xA2\x31\x05\x03\x01\x09\x1A"
+OBJ_camellia_192_ccm="\x03\xA2\x31\x05\x03\x01\x09\x1B"
+OBJ_camellia_192_ctr="\x03\xA2\x31\x05\x03\x01\x09\x1D"
+OBJ_camellia_192_cmac="\x03\xA2\x31\x05\x03\x01\x09\x1E"
+OBJ_camellia_256_gcm="\x03\xA2\x31\x05\x03\x01\x09\x2E"
+OBJ_camellia_256_ccm="\x03\xA2\x31\x05\x03\x01\x09\x2F"
+OBJ_camellia_256_ctr="\x03\xA2\x31\x05\x03\x01\x09\x31"
+OBJ_camellia_256_cmac="\x03\xA2\x31\x05\x03\x01\x09\x32"
+OBJ_id_scrypt="\x2B\x06\x01\x04\x01\xDA\x47\x04\x0B"
+OBJ_id_tc26="\x2A\x85\x03\x07\x01"
+OBJ_id_tc26_algorithms="\x2A\x85\x03\x07\x01\x01"
+OBJ_id_tc26_sign="\x2A\x85\x03\x07\x01\x01\x01"
+OBJ_id_GostR3410_2012_256="\x2A\x85\x03\x07\x01\x01\x01\x01"
+OBJ_id_GostR3410_2012_512="\x2A\x85\x03\x07\x01\x01\x01\x02"
+OBJ_id_tc26_digest="\x2A\x85\x03\x07\x01\x01\x02"
+OBJ_id_GostR3411_2012_256="\x2A\x85\x03\x07\x01\x01\x02\x02"
+OBJ_id_GostR3411_2012_512="\x2A\x85\x03\x07\x01\x01\x02\x03"
+OBJ_id_tc26_signwithdigest="\x2A\x85\x03\x07\x01\x01\x03"
+OBJ_id_tc26_signwithdigest_gost3410_2012_256="\x2A\x85\x03\x07\x01\x01\x03\x02"
+OBJ_id_tc26_signwithdigest_gost3410_2012_512="\x2A\x85\x03\x07\x01\x01\x03\x03"
+OBJ_id_tc26_mac="\x2A\x85\x03\x07\x01\x01\x04"
+OBJ_id_tc26_hmac_gost_3411_2012_256="\x2A\x85\x03\x07\x01\x01\x04\x01"
+OBJ_id_tc26_hmac_gost_3411_2012_512="\x2A\x85\x03\x07\x01\x01\x04\x02"
+OBJ_id_tc26_cipher="\x2A\x85\x03\x07\x01\x01\x05"
+OBJ_id_tc26_agreement="\x2A\x85\x03\x07\x01\x01\x06"
+OBJ_id_tc26_agreement_gost_3410_2012_256="\x2A\x85\x03\x07\x01\x01\x06\x01"
+OBJ_id_tc26_agreement_gost_3410_2012_512="\x2A\x85\x03\x07\x01\x01\x06\x02"
+OBJ_id_tc26_constants="\x2A\x85\x03\x07\x01\x02"
+OBJ_id_tc26_sign_constants="\x2A\x85\x03\x07\x01\x02\x01"
+OBJ_id_tc26_gost_3410_2012_512_constants="\x2A\x85\x03\x07\x01\x02\x01\x02"
+OBJ_id_tc26_gost_3410_2012_512_paramSetTest="\x2A\x85\x03\x07\x01\x02\x01\x02\x00"
+OBJ_id_tc26_gost_3410_2012_512_paramSetA="\x2A\x85\x03\x07\x01\x02\x01\x02\x01"
+OBJ_id_tc26_gost_3410_2012_512_paramSetB="\x2A\x85\x03\x07\x01\x02\x01\x02\x02"
+OBJ_id_tc26_digest_constants="\x2A\x85\x03\x07\x01\x02\x02"
+OBJ_id_tc26_cipher_constants="\x2A\x85\x03\x07\x01\x02\x05"
+OBJ_id_tc26_gost_28147_constants="\x2A\x85\x03\x07\x01\x02\x05\x01"
+OBJ_id_tc26_gost_28147_param_Z="\x2A\x85\x03\x07\x01\x02\x05\x01\x01"
+OBJ_INN="\x2A\x85\x03\x03\x81\x03\x01\x01"
+OBJ_OGRN="\x2A\x85\x03\x64\x01"
+OBJ_SNILS="\x2A\x85\x03\x64\x03"
+OBJ_subjectSignTool="\x2A\x85\x03\x64\x6F"
+OBJ_issuerSignTool="\x2A\x85\x03\x64\x70"
+OBJ_tlsfeature="\x2B\x06\x01\x05\x05\x07\x01\x18"
+OBJ_ipsec_IKE="\x2B\x06\x01\x05\x05\x07\x03\x11"
+OBJ_capwapAC="\x2B\x06\x01\x05\x05\x07\x03\x12"
+OBJ_capwapWTP="\x2B\x06\x01\x05\x05\x07\x03\x13"
+OBJ_sshClient="\x2B\x06\x01\x05\x05\x07\x03\x15"
+OBJ_sshServer="\x2B\x06\x01\x05\x05\x07\x03\x16"
+OBJ_sendRouter="\x2B\x06\x01\x05\x05\x07\x03\x17"
+OBJ_sendProxiedRouter="\x2B\x06\x01\x05\x05\x07\x03\x18"
+OBJ_sendOwner="\x2B\x06\x01\x05\x05\x07\x03\x19"
+OBJ_sendProxiedOwner="\x2B\x06\x01\x05\x05\x07\x03\x1A"
+OBJ_id_pkinit="\x2B\x06\x01\x05\x02\x03"
+OBJ_pkInitClientAuth="\x2B\x06\x01\x05\x02\x03\x04"
+OBJ_pkInitKDC="\x2B\x06\x01\x05\x02\x03\x05"
+OBJ_X25519="\x2B\x65\x6E"
+OBJ_X448="\x2B\x65\x6F"
+OBJ_blake2b512="\x2B\x06\x01\x04\x01\x8D\x3A\x0C\x02\x01\x10"
+OBJ_blake2s256="\x2B\x06\x01\x04\x01\x8D\x3A\x0C\x02\x02\x08"
+OBJ_id_smime_ct_contentCollection="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x01\x13"
+OBJ_id_smime_ct_authEnvelopedData="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x01\x17"
+OBJ_id_ct_xml="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x01\x1C"
+OBJ_aria_128_ecb="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x01"
+OBJ_aria_128_cbc="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x02"
+OBJ_aria_128_cfb128="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x03"
+OBJ_aria_128_ofb128="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x04"
+OBJ_aria_128_ctr="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x05"
+OBJ_aria_192_ecb="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x06"
+OBJ_aria_192_cbc="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x07"
+OBJ_aria_192_cfb128="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x08"
+OBJ_aria_192_ofb128="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x09"
+OBJ_aria_192_ctr="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x0A"
+OBJ_aria_256_ecb="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x0B"
+OBJ_aria_256_cbc="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x0C"
+OBJ_aria_256_cfb128="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x0D"
+OBJ_aria_256_ofb128="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x0E"
+OBJ_aria_256_ctr="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x0F"
+OBJ_id_smime_aa_signingCertificateV2="\x2A\x86\x48\x86\xF7\x0D\x01\x09\x10\x02\x2F"
+OBJ_ED25519="\x2B\x65\x70"
+OBJ_ED448="\x2B\x65\x71"
+OBJ_organizationIdentifier="\x55\x04\x61"
+OBJ_countryCode3c="\x55\x04\x62"
+OBJ_countryCode3n="\x55\x04\x63"
+OBJ_dnsName="\x55\x04\x64"
+OBJ_x509ExtAdmission="\x2B\x24\x08\x03\x03"
+OBJ_sha512_224="\x60\x86\x48\x01\x65\x03\x04\x02\x05"
+OBJ_sha512_256="\x60\x86\x48\x01\x65\x03\x04\x02\x06"
+OBJ_sha3_224="\x60\x86\x48\x01\x65\x03\x04\x02\x07"
+OBJ_sha3_256="\x60\x86\x48\x01\x65\x03\x04\x02\x08"
+OBJ_sha3_384="\x60\x86\x48\x01\x65\x03\x04\x02\x09"
+OBJ_sha3_512="\x60\x86\x48\x01\x65\x03\x04\x02\x0A"
+OBJ_shake128="\x60\x86\x48\x01\x65\x03\x04\x02\x0B"
+OBJ_shake256="\x60\x86\x48\x01\x65\x03\x04\x02\x0C"
+OBJ_hmac_sha3_224="\x60\x86\x48\x01\x65\x03\x04\x02\x0D"
+OBJ_hmac_sha3_256="\x60\x86\x48\x01\x65\x03\x04\x02\x0E"
+OBJ_hmac_sha3_384="\x60\x86\x48\x01\x65\x03\x04\x02\x0F"
+OBJ_hmac_sha3_512="\x60\x86\x48\x01\x65\x03\x04\x02\x10"
+OBJ_dsa_with_SHA384="\x60\x86\x48\x01\x65\x03\x04\x03\x03"
+OBJ_dsa_with_SHA512="\x60\x86\x48\x01\x65\x03\x04\x03\x04"
+OBJ_dsa_with_SHA3_224="\x60\x86\x48\x01\x65\x03\x04\x03\x05"
+OBJ_dsa_with_SHA3_256="\x60\x86\x48\x01\x65\x03\x04\x03\x06"
+OBJ_dsa_with_SHA3_384="\x60\x86\x48\x01\x65\x03\x04\x03\x07"
+OBJ_dsa_with_SHA3_512="\x60\x86\x48\x01\x65\x03\x04\x03\x08"
+OBJ_ecdsa_with_SHA3_224="\x60\x86\x48\x01\x65\x03\x04\x03\x09"
+OBJ_ecdsa_with_SHA3_256="\x60\x86\x48\x01\x65\x03\x04\x03\x0A"
+OBJ_ecdsa_with_SHA3_384="\x60\x86\x48\x01\x65\x03\x04\x03\x0B"
+OBJ_ecdsa_with_SHA3_512="\x60\x86\x48\x01\x65\x03\x04\x03\x0C"
+OBJ_RSA_SHA3_224="\x60\x86\x48\x01\x65\x03\x04\x03\x0D"
+OBJ_RSA_SHA3_256="\x60\x86\x48\x01\x65\x03\x04\x03\x0E"
+OBJ_RSA_SHA3_384="\x60\x86\x48\x01\x65\x03\x04\x03\x0F"
+OBJ_RSA_SHA3_512="\x60\x86\x48\x01\x65\x03\x04\x03\x10"
+OBJ_aria_128_ccm="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x25"
+OBJ_aria_192_ccm="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x26"
+OBJ_aria_256_ccm="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x27"
+OBJ_aria_128_gcm="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x22"
+OBJ_aria_192_gcm="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x23"
+OBJ_aria_256_gcm="\x2A\x83\x1A\x8C\x9A\x6E\x01\x01\x24"
+OBJ_cmcCA="\x2B\x06\x01\x05\x05\x07\x03\x1B"
+OBJ_cmcRA="\x2B\x06\x01\x05\x05\x07\x03\x1C"
+OBJ_sm4_ecb="\x2A\x81\x1C\xCF\x55\x01\x68\x01"
+OBJ_sm4_cbc="\x2A\x81\x1C\xCF\x55\x01\x68\x02"
+OBJ_sm4_ofb128="\x2A\x81\x1C\xCF\x55\x01\x68\x03"
+OBJ_sm4_cfb1="\x2A\x81\x1C\xCF\x55\x01\x68\x05"
+OBJ_sm4_cfb128="\x2A\x81\x1C\xCF\x55\x01\x68\x04"
+OBJ_sm4_cfb8="\x2A\x81\x1C\xCF\x55\x01\x68\x06"
+OBJ_sm4_ctr="\x2A\x81\x1C\xCF\x55\x01\x68\x07"
+OBJ_ISO_CN="\x2A\x81\x1C"
+OBJ_oscca="\x2A\x81\x1C\xCF\x55"
+OBJ_sm_scheme="\x2A\x81\x1C\xCF\x55\x01"
+OBJ_sm3="\x2A\x81\x1C\xCF\x55\x01\x83\x11"
+OBJ_sm3WithRSAEncryption="\x2A\x81\x1C\xCF\x55\x01\x83\x78"
+OBJ_sha512_224WithRSAEncryption="\x2A\x86\x48\x86\xF7\x0D\x01\x01\x0F"
+OBJ_sha512_256WithRSAEncryption="\x2A\x86\x48\x86\xF7\x0D\x01\x01\x10"
+OBJ_id_tc26_gost_3410_2012_256_constants="\x2A\x85\x03\x07\x01\x02\x01\x01"
+OBJ_id_tc26_gost_3410_2012_256_paramSetA="\x2A\x85\x03\x07\x01\x02\x01\x01\x01"
+OBJ_id_tc26_gost_3410_2012_512_paramSetC="\x2A\x85\x03\x07\x01\x02\x01\x02\x03"
+OBJ_ISO_UA="\x2A\x86\x24"
+OBJ_ua_pki="\x2A\x86\x24\x02\x01\x01\x01"
+OBJ_dstu28147="\x2A\x86\x24\x02\x01\x01\x01\x01\x01\x01"
+OBJ_dstu28147_ofb="\x2A\x86\x24\x02\x01\x01\x01\x01\x01\x01\x02"
+OBJ_dstu28147_cfb="\x2A\x86\x24\x02\x01\x01\x01\x01\x01\x01\x03"
+OBJ_dstu28147_wrap="\x2A\x86\x24\x02\x01\x01\x01\x01\x01\x01\x05"
+OBJ_hmacWithDstu34311="\x2A\x86\x24\x02\x01\x01\x01\x01\x01\x02"
+OBJ_dstu34311="\x2A\x86\x24\x02\x01\x01\x01\x01\x02\x01"
+OBJ_dstu4145le="\x2A\x86\x24\x02\x01\x01\x01\x01\x03\x01\x01"
+OBJ_dstu4145be="\x2A\x86\x24\x02\x01\x01\x01\x01\x03\x01\x01\x01\x01"
+OBJ_uacurve0="\x2A\x86\x24\x02\x01\x01\x01\x01\x03\x01\x01\x02\x00"
+OBJ_uacurve1="\x2A\x86\x24\x02\x01\x01\x01\x01\x03\x01\x01\x02\x01"
+OBJ_uacurve2="\x2A\x86\x24\x02\x01\x01\x01\x01\x03\x01\x01\x02\x02"
+OBJ_uacurve3="\x2A\x86\x24\x02\x01\x01\x01\x01\x03\x01\x01\x02\x03"
+OBJ_uacurve4="\x2A\x86\x24\x02\x01\x01\x01\x01\x03\x01\x01\x02\x04"
+OBJ_uacurve5="\x2A\x86\x24\x02\x01\x01\x01\x01\x03\x01\x01\x02\x05"
+OBJ_uacurve6="\x2A\x86\x24\x02\x01\x01\x01\x01\x03\x01\x01\x02\x06"
+OBJ_uacurve7="\x2A\x86\x24\x02\x01\x01\x01\x01\x03\x01\x01\x02\x07"
+OBJ_uacurve8="\x2A\x86\x24\x02\x01\x01\x01\x01\x03\x01\x01\x02\x08"
+OBJ_uacurve9="\x2A\x86\x24\x02\x01\x01\x01\x01\x03\x01\x01\x02\x09"
+OBJ_ieee="\x2B\x6F"
+OBJ_ieee_siswg="\x2B\x6F\x02\x8C\x53"
+OBJ_sm2="\x2A\x81\x1C\xCF\x55\x01\x82\x2D"
+OBJ_id_tc26_cipher_gostr3412_2015_magma="\x2A\x85\x03\x07\x01\x01\x05\x01"
+OBJ_id_tc26_cipher_gostr3412_2015_magma_ctracpkm="\x2A\x85\x03\x07\x01\x01\x05\x01\x01"
+OBJ_id_tc26_cipher_gostr3412_2015_magma_ctracpkm_omac="\x2A\x85\x03\x07\x01\x01\x05\x01\x02"
+OBJ_id_tc26_cipher_gostr3412_2015_kuznyechik="\x2A\x85\x03\x07\x01\x01\x05\x02"
+OBJ_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm="\x2A\x85\x03\x07\x01\x01\x05\x02\x01"
+OBJ_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm_omac="\x2A\x85\x03\x07\x01\x01\x05\x02\x02"
+OBJ_id_tc26_wrap="\x2A\x85\x03\x07\x01\x01\x07"
+OBJ_id_tc26_wrap_gostr3412_2015_magma="\x2A\x85\x03\x07\x01\x01\x07\x01"
+OBJ_id_tc26_wrap_gostr3412_2015_magma_kexp15="\x2A\x85\x03\x07\x01\x01\x07\x01\x01"
+OBJ_id_tc26_wrap_gostr3412_2015_kuznyechik="\x2A\x85\x03\x07\x01\x01\x07\x02"
+OBJ_id_tc26_wrap_gostr3412_2015_kuznyechik_kexp15="\x2A\x85\x03\x07\x01\x01\x07\x01\x01"
+OBJ_id_tc26_gost_3410_2012_256_paramSetB="\x2A\x85\x03\x07\x01\x02\x01\x01\x02"
+OBJ_id_tc26_gost_3410_2012_256_paramSetC="\x2A\x85\x03\x07\x01\x02\x01\x01\x03"
+OBJ_id_tc26_gost_3410_2012_256_paramSetD="\x2A\x85\x03\x07\x01\x02\x01\x01\x04"
+OBJ_hmacWithSHA512_224="\x2A\x86\x48\x86\xF7\x0D\x02\x0C"
+OBJ_hmacWithSHA512_256="\x2A\x86\x48\x86\xF7\x0D\x02\x0D"
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/rand.inc b/trunk/3rdparty/openssl-1.1-fit/fuzz/rand.inc
new file mode 100644
index 000000000..f8b3277b9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/rand.inc
@@ -0,0 +1,40 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+#include <openssl/rand.h>
+
+static int fuzz_bytes(unsigned char *buf, int num)
+{
+    unsigned char val = 1;
+
+    while (--num >= 0)
+        *buf++ = val++;
+    return 1;
+}
+
+static int fuzz_status(void)
+{
+    return 1;
+}
+
+static RAND_METHOD fuzz_rand_method = {
+    NULL,
+    fuzz_bytes,
+    NULL,
+    NULL,
+    fuzz_bytes,
+    fuzz_status
+};
+
+void FuzzerSetRand(void)
+{
+    RAND_set_rand_method(&fuzz_rand_method);
+}
+
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/server.c b/trunk/3rdparty/openssl-1.1-fit/fuzz/server.c
new file mode 100644
index 000000000..2d392ac88
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/server.c
@@ -0,0 +1,650 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+
+/* Shamelessly copied from BoringSSL and converted to C. */
+
+/* Test first part of SSL server handshake. */
+
+#include <time.h>
+#include <openssl/rand.h>
+#include <openssl/ssl.h>
+#include <openssl/rsa.h>
+#include <openssl/dsa.h>
+#include <openssl/ec.h>
+#include <openssl/dh.h>
+#include <openssl/err.h>
+#include "fuzzer.h"
+
+#include "rand.inc"
+
+static const uint8_t kCertificateDER[] = {
+    0x30, 0x82, 0x02, 0xff, 0x30, 0x82, 0x01, 0xe7, 0xa0, 0x03, 0x02, 0x01,
+    0x02, 0x02, 0x11, 0x00, 0xb1, 0x84, 0xee, 0x34, 0x99, 0x98, 0x76, 0xfb,
+    0x6f, 0xb2, 0x15, 0xc8, 0x47, 0x79, 0x05, 0x9b, 0x30, 0x0d, 0x06, 0x09,
+    0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x0b, 0x05, 0x00, 0x30,
+    0x12, 0x31, 0x10, 0x30, 0x0e, 0x06, 0x03, 0x55, 0x04, 0x0a, 0x13, 0x07,
+    0x41, 0x63, 0x6d, 0x65, 0x20, 0x43, 0x6f, 0x30, 0x1e, 0x17, 0x0d, 0x31,
+    0x35, 0x31, 0x31, 0x30, 0x37, 0x30, 0x30, 0x32, 0x34, 0x35, 0x36, 0x5a,
+    0x17, 0x0d, 0x31, 0x36, 0x31, 0x31, 0x30, 0x36, 0x30, 0x30, 0x32, 0x34,
+    0x35, 0x36, 0x5a, 0x30, 0x12, 0x31, 0x10, 0x30, 0x0e, 0x06, 0x03, 0x55,
+    0x04, 0x0a, 0x13, 0x07, 0x41, 0x63, 0x6d, 0x65, 0x20, 0x43, 0x6f, 0x30,
+    0x82, 0x01, 0x22, 0x30, 0x0d, 0x06, 0x09, 0x2a, 0x86, 0x48, 0x86, 0xf7,
+    0x0d, 0x01, 0x01, 0x01, 0x05, 0x00, 0x03, 0x82, 0x01, 0x0f, 0x00, 0x30,
+    0x82, 0x01, 0x0a, 0x02, 0x82, 0x01, 0x01, 0x00, 0xce, 0x47, 0xcb, 0x11,
+    0xbb, 0xd2, 0x9d, 0x8e, 0x9e, 0xd2, 0x1e, 0x14, 0xaf, 0xc7, 0xea, 0xb6,
+    0xc9, 0x38, 0x2a, 0x6f, 0xb3, 0x7e, 0xfb, 0xbc, 0xfc, 0x59, 0x42, 0xb9,
+    0x56, 0xf0, 0x4c, 0x3f, 0xf7, 0x31, 0x84, 0xbe, 0xac, 0x03, 0x9e, 0x71,
+    0x91, 0x85, 0xd8, 0x32, 0xbd, 0x00, 0xea, 0xac, 0x65, 0xf6, 0x03, 0xc8,
+    0x0f, 0x8b, 0xfd, 0x6e, 0x58, 0x88, 0x04, 0x41, 0x92, 0x74, 0xa6, 0x57,
+    0x2e, 0x8e, 0x88, 0xd5, 0x3d, 0xda, 0x14, 0x3e, 0x63, 0x88, 0x22, 0xe3,
+    0x53, 0xe9, 0xba, 0x39, 0x09, 0xac, 0xfb, 0xd0, 0x4c, 0xf2, 0x3c, 0x20,
+    0xd6, 0x97, 0xe6, 0xed, 0xf1, 0x62, 0x1e, 0xe5, 0xc9, 0x48, 0xa0, 0xca,
+    0x2e, 0x3c, 0x14, 0x5a, 0x82, 0xd4, 0xed, 0xb1, 0xe3, 0x43, 0xc1, 0x2a,
+    0x59, 0xa5, 0xb9, 0xc8, 0x48, 0xa7, 0x39, 0x23, 0x74, 0xa7, 0x37, 0xb0,
+    0x6f, 0xc3, 0x64, 0x99, 0x6c, 0xa2, 0x82, 0xc8, 0xf6, 0xdb, 0x86, 0x40,
+    0xce, 0xd1, 0x85, 0x9f, 0xce, 0x69, 0xf4, 0x15, 0x2a, 0x23, 0xca, 0xea,
+    0xb7, 0x7b, 0xdf, 0xfb, 0x43, 0x5f, 0xff, 0x7a, 0x49, 0x49, 0x0e, 0xe7,
+    0x02, 0x51, 0x45, 0x13, 0xe8, 0x90, 0x64, 0x21, 0x0c, 0x26, 0x2b, 0x5d,
+    0xfc, 0xe4, 0xb5, 0x86, 0x89, 0x43, 0x22, 0x4c, 0xf3, 0x3b, 0xf3, 0x09,
+    0xc4, 0xa4, 0x10, 0x80, 0xf2, 0x46, 0xe2, 0x46, 0x8f, 0x76, 0x50, 0xbf,
+    0xaf, 0x2b, 0x90, 0x1b, 0x78, 0xc7, 0xcf, 0xc1, 0x77, 0xd0, 0xfb, 0xa9,
+    0xfb, 0xc9, 0x66, 0x5a, 0xc5, 0x9b, 0x31, 0x41, 0x67, 0x01, 0xbe, 0x33,
+    0x10, 0xba, 0x05, 0x58, 0xed, 0x76, 0x53, 0xde, 0x5d, 0xc1, 0xe8, 0xbb,
+    0x9f, 0xf1, 0xcd, 0xfb, 0xdf, 0x64, 0x7f, 0xd7, 0x18, 0xab, 0x0f, 0x94,
+    0x28, 0x95, 0x4a, 0xcc, 0x6a, 0xa9, 0x50, 0xc7, 0x05, 0x47, 0x10, 0x41,
+    0x02, 0x03, 0x01, 0x00, 0x01, 0xa3, 0x50, 0x30, 0x4e, 0x30, 0x0e, 0x06,
+    0x03, 0x55, 0x1d, 0x0f, 0x01, 0x01, 0xff, 0x04, 0x04, 0x03, 0x02, 0x05,
+    0xa0, 0x30, 0x13, 0x06, 0x03, 0x55, 0x1d, 0x25, 0x04, 0x0c, 0x30, 0x0a,
+    0x06, 0x08, 0x2b, 0x06, 0x01, 0x05, 0x05, 0x07, 0x03, 0x01, 0x30, 0x0c,
+    0x06, 0x03, 0x55, 0x1d, 0x13, 0x01, 0x01, 0xff, 0x04, 0x02, 0x30, 0x00,
+    0x30, 0x19, 0x06, 0x03, 0x55, 0x1d, 0x11, 0x04, 0x12, 0x30, 0x10, 0x82,
+    0x0e, 0x66, 0x75, 0x7a, 0x7a, 0x2e, 0x62, 0x6f, 0x72, 0x69, 0x6e, 0x67,
+    0x73, 0x73, 0x6c, 0x30, 0x0d, 0x06, 0x09, 0x2a, 0x86, 0x48, 0x86, 0xf7,
+    0x0d, 0x01, 0x01, 0x0b, 0x05, 0x00, 0x03, 0x82, 0x01, 0x01, 0x00, 0x92,
+    0xde, 0xef, 0x96, 0x06, 0x7b, 0xff, 0x71, 0x7d, 0x4e, 0xa0, 0x7d, 0xae,
+    0xb8, 0x22, 0xb4, 0x2c, 0xf7, 0x96, 0x9c, 0x37, 0x1d, 0x8f, 0xe7, 0xd9,
+    0x47, 0xff, 0x3f, 0xe9, 0x35, 0x95, 0x0e, 0xdd, 0xdc, 0x7f, 0xc8, 0x8a,
+    0x1e, 0x36, 0x1d, 0x38, 0x47, 0xfc, 0x76, 0xd2, 0x1f, 0x98, 0xa1, 0x36,
+    0xac, 0xc8, 0x70, 0x38, 0x0a, 0x3d, 0x51, 0x8d, 0x0f, 0x03, 0x1b, 0xef,
+    0x62, 0xa1, 0xcb, 0x2b, 0x4a, 0x8c, 0x12, 0x2b, 0x54, 0x50, 0x9a, 0x6b,
+    0xfe, 0xaf, 0xd9, 0xf6, 0xbf, 0x58, 0x11, 0x58, 0x5e, 0xe5, 0x86, 0x1e,
+    0x3b, 0x6b, 0x30, 0x7e, 0x72, 0x89, 0xe8, 0x6b, 0x7b, 0xb7, 0xaf, 0xef,
+    0x8b, 0xa9, 0x3e, 0xb0, 0xcd, 0x0b, 0xef, 0xb0, 0x0c, 0x96, 0x2b, 0xc5,
+    0x3b, 0xd5, 0xf1, 0xc2, 0xae, 0x3a, 0x60, 0xd9, 0x0f, 0x75, 0x37, 0x55,
+    0x4d, 0x62, 0xd2, 0xed, 0x96, 0xac, 0x30, 0x6b, 0xda, 0xa1, 0x48, 0x17,
+    0x96, 0x23, 0x85, 0x9a, 0x57, 0x77, 0xe9, 0x22, 0xa2, 0x37, 0x03, 0xba,
+    0x49, 0x77, 0x40, 0x3b, 0x76, 0x4b, 0xda, 0xc1, 0x04, 0x57, 0x55, 0x34,
+    0x22, 0x83, 0x45, 0x29, 0xab, 0x2e, 0x11, 0xff, 0x0d, 0xab, 0x55, 0xb1,
+    0xa7, 0x58, 0x59, 0x05, 0x25, 0xf9, 0x1e, 0x3d, 0xb7, 0xac, 0x04, 0x39,
+    0x2c, 0xf9, 0xaf, 0xb8, 0x68, 0xfb, 0x8e, 0x35, 0x71, 0x32, 0xff, 0x70,
+    0xe9, 0x46, 0x6d, 0x5c, 0x06, 0x90, 0x88, 0x23, 0x48, 0x0c, 0x50, 0xeb,
+    0x0a, 0xa9, 0xae, 0xe8, 0xfc, 0xbe, 0xa5, 0x76, 0x94, 0xd7, 0x64, 0x22,
+    0x38, 0x98, 0x17, 0xa4, 0x3a, 0xa7, 0x59, 0x9f, 0x1d, 0x3b, 0x75, 0x90,
+    0x1a, 0x81, 0xef, 0x19, 0xfb, 0x2b, 0xb7, 0xa7, 0x64, 0x61, 0x22, 0xa4,
+    0x6f, 0x7b, 0xfa, 0x58, 0xbb, 0x8c, 0x4e, 0x77, 0x67, 0xd0, 0x5d, 0x58,
+    0x76, 0x8a, 0xbb,
+};
+
+static const uint8_t kRSAPrivateKeyDER[] = {
+    0x30, 0x82, 0x04, 0xa5, 0x02, 0x01, 0x00, 0x02, 0x82, 0x01, 0x01, 0x00,
+    0xce, 0x47, 0xcb, 0x11, 0xbb, 0xd2, 0x9d, 0x8e, 0x9e, 0xd2, 0x1e, 0x14,
+    0xaf, 0xc7, 0xea, 0xb6, 0xc9, 0x38, 0x2a, 0x6f, 0xb3, 0x7e, 0xfb, 0xbc,
+    0xfc, 0x59, 0x42, 0xb9, 0x56, 0xf0, 0x4c, 0x3f, 0xf7, 0x31, 0x84, 0xbe,
+    0xac, 0x03, 0x9e, 0x71, 0x91, 0x85, 0xd8, 0x32, 0xbd, 0x00, 0xea, 0xac,
+    0x65, 0xf6, 0x03, 0xc8, 0x0f, 0x8b, 0xfd, 0x6e, 0x58, 0x88, 0x04, 0x41,
+    0x92, 0x74, 0xa6, 0x57, 0x2e, 0x8e, 0x88, 0xd5, 0x3d, 0xda, 0x14, 0x3e,
+    0x63, 0x88, 0x22, 0xe3, 0x53, 0xe9, 0xba, 0x39, 0x09, 0xac, 0xfb, 0xd0,
+    0x4c, 0xf2, 0x3c, 0x20, 0xd6, 0x97, 0xe6, 0xed, 0xf1, 0x62, 0x1e, 0xe5,
+    0xc9, 0x48, 0xa0, 0xca, 0x2e, 0x3c, 0x14, 0x5a, 0x82, 0xd4, 0xed, 0xb1,
+    0xe3, 0x43, 0xc1, 0x2a, 0x59, 0xa5, 0xb9, 0xc8, 0x48, 0xa7, 0x39, 0x23,
+    0x74, 0xa7, 0x37, 0xb0, 0x6f, 0xc3, 0x64, 0x99, 0x6c, 0xa2, 0x82, 0xc8,
+    0xf6, 0xdb, 0x86, 0x40, 0xce, 0xd1, 0x85, 0x9f, 0xce, 0x69, 0xf4, 0x15,
+    0x2a, 0x23, 0xca, 0xea, 0xb7, 0x7b, 0xdf, 0xfb, 0x43, 0x5f, 0xff, 0x7a,
+    0x49, 0x49, 0x0e, 0xe7, 0x02, 0x51, 0x45, 0x13, 0xe8, 0x90, 0x64, 0x21,
+    0x0c, 0x26, 0x2b, 0x5d, 0xfc, 0xe4, 0xb5, 0x86, 0x89, 0x43, 0x22, 0x4c,
+    0xf3, 0x3b, 0xf3, 0x09, 0xc4, 0xa4, 0x10, 0x80, 0xf2, 0x46, 0xe2, 0x46,
+    0x8f, 0x76, 0x50, 0xbf, 0xaf, 0x2b, 0x90, 0x1b, 0x78, 0xc7, 0xcf, 0xc1,
+    0x77, 0xd0, 0xfb, 0xa9, 0xfb, 0xc9, 0x66, 0x5a, 0xc5, 0x9b, 0x31, 0x41,
+    0x67, 0x01, 0xbe, 0x33, 0x10, 0xba, 0x05, 0x58, 0xed, 0x76, 0x53, 0xde,
+    0x5d, 0xc1, 0xe8, 0xbb, 0x9f, 0xf1, 0xcd, 0xfb, 0xdf, 0x64, 0x7f, 0xd7,
+    0x18, 0xab, 0x0f, 0x94, 0x28, 0x95, 0x4a, 0xcc, 0x6a, 0xa9, 0x50, 0xc7,
+    0x05, 0x47, 0x10, 0x41, 0x02, 0x03, 0x01, 0x00, 0x01, 0x02, 0x82, 0x01,
+    0x01, 0x00, 0xa8, 0x47, 0xb9, 0x4a, 0x06, 0x47, 0x93, 0x71, 0x3d, 0xef,
+    0x7b, 0xca, 0xb4, 0x7c, 0x0a, 0xe6, 0x82, 0xd0, 0xe7, 0x0d, 0xa9, 0x08,
+    0xf6, 0xa4, 0xfd, 0xd8, 0x73, 0xae, 0x6f, 0x56, 0x29, 0x5e, 0x25, 0x72,
+    0xa8, 0x30, 0x44, 0x73, 0xcf, 0x56, 0x26, 0xb9, 0x61, 0xde, 0x42, 0x81,
+    0xf4, 0xf0, 0x1f, 0x5d, 0xcb, 0x47, 0xf2, 0x26, 0xe9, 0xe0, 0x93, 0x28,
+    0xa3, 0x10, 0x3b, 0x42, 0x1e, 0x51, 0x11, 0x12, 0x06, 0x5e, 0xaf, 0xce,
+    0xb0, 0xa5, 0x14, 0xdd, 0x82, 0x58, 0xa1, 0xa4, 0x12, 0xdf, 0x65, 0x1d,
+    0x51, 0x70, 0x64, 0xd5, 0x58, 0x68, 0x11, 0xa8, 0x6a, 0x23, 0xc2, 0xbf,
+    0xa1, 0x25, 0x24, 0x47, 0xb3, 0xa4, 0x3c, 0x83, 0x96, 0xb7, 0x1f, 0xf4,
+    0x44, 0xd4, 0xd1, 0xe9, 0xfc, 0x33, 0x68, 0x5e, 0xe2, 0x68, 0x99, 0x9c,
+    0x91, 0xe8, 0x72, 0xc9, 0xd7, 0x8c, 0x80, 0x20, 0x8e, 0x77, 0x83, 0x4d,
+    0xe4, 0xab, 0xf9, 0x74, 0xa1, 0xdf, 0xd3, 0xc0, 0x0d, 0x5b, 0x05, 0x51,
+    0xc2, 0x6f, 0xb2, 0x91, 0x02, 0xec, 0xc0, 0x02, 0x1a, 0x5c, 0x91, 0x05,
+    0xf1, 0xe3, 0xfa, 0x65, 0xc2, 0xad, 0x24, 0xe6, 0xe5, 0x3c, 0xb6, 0x16,
+    0xf1, 0xa1, 0x67, 0x1a, 0x9d, 0x37, 0x56, 0xbf, 0x01, 0xd7, 0x3b, 0x35,
+    0x30, 0x57, 0x73, 0xf4, 0xf0, 0x5e, 0xa7, 0xe8, 0x0a, 0xc1, 0x94, 0x17,
+    0xcf, 0x0a, 0xbd, 0xf5, 0x31, 0xa7, 0x2d, 0xf7, 0xf5, 0xd9, 0x8c, 0xc2,
+    0x01, 0xbd, 0xda, 0x16, 0x8e, 0xb9, 0x30, 0x40, 0xa6, 0x6e, 0xbd, 0xcd,
+    0x4d, 0x84, 0x67, 0x4e, 0x0b, 0xce, 0xd5, 0xef, 0xf8, 0x08, 0x63, 0x02,
+    0xc6, 0xc7, 0xf7, 0x67, 0x92, 0xe2, 0x23, 0x9d, 0x27, 0x22, 0x1d, 0xc6,
+    0x67, 0x5e, 0x66, 0xbf, 0x03, 0xb8, 0xa9, 0x67, 0xd4, 0x39, 0xd8, 0x75,
+    0xfa, 0xe8, 0xed, 0x56, 0xb8, 0x81, 0x02, 0x81, 0x81, 0x00, 0xf7, 0x46,
+    0x68, 0xc6, 0x13, 0xf8, 0xba, 0x0f, 0x83, 0xdb, 0x05, 0xa8, 0x25, 0x00,
+    0x70, 0x9c, 0x9e, 0x8b, 0x12, 0x34, 0x0d, 0x96, 0xcf, 0x0d, 0x98, 0x9b,
+    0x8d, 0x9c, 0x96, 0x78, 0xd1, 0x3c, 0x01, 0x8c, 0xb9, 0x35, 0x5c, 0x20,
+    0x42, 0xb4, 0x38, 0xe3, 0xd6, 0x54, 0xe7, 0x55, 0xd6, 0x26, 0x8a, 0x0c,
+    0xf6, 0x1f, 0xe0, 0x04, 0xc1, 0x22, 0x42, 0x19, 0x61, 0xc4, 0x94, 0x7c,
+    0x07, 0x2e, 0x80, 0x52, 0xfe, 0x8d, 0xe6, 0x92, 0x3a, 0x91, 0xfe, 0x72,
+    0x99, 0xe1, 0x2a, 0x73, 0x76, 0xb1, 0x24, 0x20, 0x67, 0xde, 0x28, 0xcb,
+    0x0e, 0xe6, 0x52, 0xb5, 0xfa, 0xfb, 0x8b, 0x1e, 0x6a, 0x1d, 0x09, 0x26,
+    0xb9, 0xa7, 0x61, 0xba, 0xf8, 0x79, 0xd2, 0x66, 0x57, 0x28, 0xd7, 0x31,
+    0xb5, 0x0b, 0x27, 0x19, 0x1e, 0x6f, 0x46, 0xfc, 0x54, 0x95, 0xeb, 0x78,
+    0x01, 0xb6, 0xd9, 0x79, 0x5a, 0x4d, 0x02, 0x81, 0x81, 0x00, 0xd5, 0x8f,
+    0x16, 0x53, 0x2f, 0x57, 0x93, 0xbf, 0x09, 0x75, 0xbf, 0x63, 0x40, 0x3d,
+    0x27, 0xfd, 0x23, 0x21, 0xde, 0x9b, 0xe9, 0x73, 0x3f, 0x49, 0x02, 0xd2,
+    0x38, 0x96, 0xcf, 0xc3, 0xba, 0x92, 0x07, 0x87, 0x52, 0xa9, 0x35, 0xe3,
+    0x0c, 0xe4, 0x2f, 0x05, 0x7b, 0x37, 0xa5, 0x40, 0x9c, 0x3b, 0x94, 0xf7,
+    0xad, 0xa0, 0xee, 0x3a, 0xa8, 0xfb, 0x1f, 0x11, 0x1f, 0xd8, 0x9a, 0x80,
+    0x42, 0x3d, 0x7f, 0xa4, 0xb8, 0x9a, 0xaa, 0xea, 0x72, 0xc1, 0xe3, 0xed,
+    0x06, 0x60, 0x92, 0x37, 0xf9, 0xba, 0xfb, 0x9e, 0xed, 0x05, 0xa6, 0xd4,
+    0x72, 0x68, 0x4f, 0x63, 0xfe, 0xd6, 0x10, 0x0d, 0x4f, 0x0a, 0x93, 0xc6,
+    0xb9, 0xd7, 0xaf, 0xfd, 0xd9, 0x57, 0x7d, 0xcb, 0x75, 0xe8, 0x93, 0x2b,
+    0xae, 0x4f, 0xea, 0xd7, 0x30, 0x0b, 0x58, 0x44, 0x82, 0x0f, 0x84, 0x5d,
+    0x62, 0x11, 0x78, 0xea, 0x5f, 0xc5, 0x02, 0x81, 0x81, 0x00, 0x82, 0x0c,
+    0xc1, 0xe6, 0x0b, 0x72, 0xf1, 0x48, 0x5f, 0xac, 0xbd, 0x98, 0xe5, 0x7d,
+    0x09, 0xbd, 0x15, 0x95, 0x47, 0x09, 0xa1, 0x6c, 0x03, 0x91, 0xbf, 0x05,
+    0x70, 0xc1, 0x3e, 0x52, 0x64, 0x99, 0x0e, 0xa7, 0x98, 0x70, 0xfb, 0xf6,
+    0xeb, 0x9e, 0x25, 0x9d, 0x8e, 0x88, 0x30, 0xf2, 0xf0, 0x22, 0x6c, 0xd0,
+    0xcc, 0x51, 0x8f, 0x5c, 0x70, 0xc7, 0x37, 0xc4, 0x69, 0xab, 0x1d, 0xfc,
+    0xed, 0x3a, 0x03, 0xbb, 0xa2, 0xad, 0xb6, 0xea, 0x89, 0x6b, 0x67, 0x4b,
+    0x96, 0xaa, 0xd9, 0xcc, 0xc8, 0x4b, 0xfa, 0x18, 0x21, 0x08, 0xb2, 0xa3,
+    0xb9, 0x3e, 0x61, 0x99, 0xdc, 0x5a, 0x97, 0x9c, 0x73, 0x6a, 0xb9, 0xf9,
+    0x68, 0x03, 0x24, 0x5f, 0x55, 0x77, 0x9c, 0xb4, 0xbe, 0x7a, 0x78, 0x53,
+    0x68, 0x48, 0x69, 0x53, 0xc8, 0xb1, 0xf5, 0xbf, 0x98, 0x2d, 0x11, 0x1e,
+    0x98, 0xa8, 0x36, 0x50, 0xa0, 0xb1, 0x02, 0x81, 0x81, 0x00, 0x90, 0x88,
+    0x30, 0x71, 0xc7, 0xfe, 0x9b, 0x6d, 0x95, 0x37, 0x6d, 0x79, 0xfc, 0x85,
+    0xe7, 0x44, 0x78, 0xbc, 0x79, 0x6e, 0x47, 0x86, 0xc9, 0xf3, 0xdd, 0xc6,
+    0xec, 0xa9, 0x94, 0x9f, 0x40, 0xeb, 0x87, 0xd0, 0xdb, 0xee, 0xcd, 0x1b,
+    0x87, 0x23, 0xff, 0x76, 0xd4, 0x37, 0x8a, 0xcd, 0xb9, 0x6e, 0xd1, 0x98,
+    0xf6, 0x97, 0x8d, 0xe3, 0x81, 0x6d, 0xc3, 0x4e, 0xd1, 0xa0, 0xc4, 0x9f,
+    0xbd, 0x34, 0xe5, 0xe8, 0x53, 0x4f, 0xca, 0x10, 0xb5, 0xed, 0xe7, 0x16,
+    0x09, 0x54, 0xde, 0x60, 0xa7, 0xd1, 0x16, 0x6e, 0x2e, 0xb7, 0xbe, 0x7a,
+    0xd5, 0x9b, 0x26, 0xef, 0xe4, 0x0e, 0x77, 0xfa, 0xa9, 0xdd, 0xdc, 0xb9,
+    0x88, 0x19, 0x23, 0x70, 0xc7, 0xe1, 0x60, 0xaf, 0x8c, 0x73, 0x04, 0xf7,
+    0x71, 0x17, 0x81, 0x36, 0x75, 0xbb, 0x97, 0xd7, 0x75, 0xb6, 0x8e, 0xbc,
+    0xac, 0x9c, 0x6a, 0x9b, 0x24, 0x89, 0x02, 0x81, 0x80, 0x5a, 0x2b, 0xc7,
+    0x6b, 0x8c, 0x65, 0xdb, 0x04, 0x73, 0xab, 0x25, 0xe1, 0x5b, 0xbc, 0x3c,
+    0xcf, 0x5a, 0x3c, 0x04, 0xae, 0x97, 0x2e, 0xfd, 0xa4, 0x97, 0x1f, 0x05,
+    0x17, 0x27, 0xac, 0x7c, 0x30, 0x85, 0xb4, 0x82, 0x3f, 0x5b, 0xb7, 0x94,
+    0x3b, 0x7f, 0x6c, 0x0c, 0xc7, 0x16, 0xc6, 0xa0, 0xbd, 0x80, 0xb0, 0x81,
+    0xde, 0xa0, 0x23, 0xa6, 0xf6, 0x75, 0x33, 0x51, 0x35, 0xa2, 0x75, 0x55,
+    0x70, 0x4d, 0x42, 0xbb, 0xcf, 0x54, 0xe4, 0xdb, 0x2d, 0x88, 0xa0, 0x7a,
+    0xf2, 0x17, 0xa7, 0xdd, 0x13, 0x44, 0x9f, 0x5f, 0x6b, 0x2c, 0x42, 0x42,
+    0x8b, 0x13, 0x4d, 0xf9, 0x5b, 0xf8, 0x33, 0x42, 0xd9, 0x9e, 0x50, 0x1c,
+    0x7c, 0xbc, 0xfa, 0x62, 0x85, 0x0b, 0xcf, 0x99, 0xda, 0x9e, 0x04, 0x90,
+    0xb2, 0xc6, 0xb2, 0x0a, 0x2a, 0x7c, 0x6d, 0x6a, 0x40, 0xfc, 0xf5, 0x50,
+    0x98, 0x46, 0x89, 0x82, 0x40,
+};
+
+
+#ifndef OPENSSL_NO_EC
+/*
+ *  -----BEGIN EC PRIVATE KEY-----
+ *  MHcCAQEEIJLyl7hJjpQL/RhP1x2zS79xdiPJQB683gWeqcqHPeZkoAoGCCqGSM49
+ *  AwEHoUQDQgAEdsjygVYjjaKBF4CNECVllNf017p5/MxNSWDoTHy9I2GeDwEDDazI
+ *  D/xy8JiYjtPKVE/Zqwbmivp2UwtH28a7NQ==
+ *  -----END EC PRIVATE KEY-----
+ */
+static const char ECDSAPrivateKeyPEM[] = {
+    0x2d, 0x2d, 0x2d, 0x2d, 0x2d, 0x42, 0x45, 0x47, 0x49, 0x4e, 0x20, 0x45,
+    0x43, 0x20, 0x50, 0x52, 0x49, 0x56, 0x41, 0x54, 0x45, 0x20, 0x4b, 0x45,
+    0x59, 0x2d, 0x2d, 0x2d, 0x2d, 0x2d, 0x0a, 0x4d, 0x48, 0x63, 0x43, 0x41,
+    0x51, 0x45, 0x45, 0x49, 0x4a, 0x4c, 0x79, 0x6c, 0x37, 0x68, 0x4a, 0x6a,
+    0x70, 0x51, 0x4c, 0x2f, 0x52, 0x68, 0x50, 0x31, 0x78, 0x32, 0x7a, 0x53,
+    0x37, 0x39, 0x78, 0x64, 0x69, 0x50, 0x4a, 0x51, 0x42, 0x36, 0x38, 0x33,
+    0x67, 0x57, 0x65, 0x71, 0x63, 0x71, 0x48, 0x50, 0x65, 0x5a, 0x6b, 0x6f,
+    0x41, 0x6f, 0x47, 0x43, 0x43, 0x71, 0x47, 0x53, 0x4d, 0x34, 0x39, 0x0a,
+    0x41, 0x77, 0x45, 0x48, 0x6f, 0x55, 0x51, 0x44, 0x51, 0x67, 0x41, 0x45,
+    0x64, 0x73, 0x6a, 0x79, 0x67, 0x56, 0x59, 0x6a, 0x6a, 0x61, 0x4b, 0x42,
+    0x46, 0x34, 0x43, 0x4e, 0x45, 0x43, 0x56, 0x6c, 0x6c, 0x4e, 0x66, 0x30,
+    0x31, 0x37, 0x70, 0x35, 0x2f, 0x4d, 0x78, 0x4e, 0x53, 0x57, 0x44, 0x6f,
+    0x54, 0x48, 0x79, 0x39, 0x49, 0x32, 0x47, 0x65, 0x44, 0x77, 0x45, 0x44,
+    0x44, 0x61, 0x7a, 0x49, 0x0a, 0x44, 0x2f, 0x78, 0x79, 0x38, 0x4a, 0x69,
+    0x59, 0x6a, 0x74, 0x50, 0x4b, 0x56, 0x45, 0x2f, 0x5a, 0x71, 0x77, 0x62,
+    0x6d, 0x69, 0x76, 0x70, 0x32, 0x55, 0x77, 0x74, 0x48, 0x32, 0x38, 0x61,
+    0x37, 0x4e, 0x51, 0x3d, 0x3d, 0x0a, 0x2d, 0x2d, 0x2d, 0x2d, 0x2d, 0x45,
+    0x4e, 0x44, 0x20, 0x45, 0x43, 0x20, 0x50, 0x52, 0x49, 0x56, 0x41, 0x54,
+    0x45, 0x20, 0x4b, 0x45, 0x59, 0x2d, 0x2d, 0x2d, 0x2d, 0x2d, 0x0a
+};
+
+/*
+ * -----BEGIN CERTIFICATE-----
+ *  MIIBXzCCAQagAwIBAgIJAK6/Yvf/ain6MAoGCCqGSM49BAMCMBIxEDAOBgNVBAoM
+ *  B0FjbWUgQ28wHhcNMTYxMjI1MTEzOTI3WhcNMjYxMjI1MTEzOTI3WjASMRAwDgYD
+ *  VQQKDAdBY21lIENvMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEdsjygVYjjaKB
+ *  F4CNECVllNf017p5/MxNSWDoTHy9I2GeDwEDDazID/xy8JiYjtPKVE/Zqwbmivp2
+ *  UwtH28a7NaNFMEMwCQYDVR0TBAIwADALBgNVHQ8EBAMCBaAwEwYDVR0lBAwwCgYI
+ *  KwYBBQUHAwEwFAYDVR0RBA0wC4IJbG9jYWxob3N0MAoGCCqGSM49BAMCA0cAMEQC
+ *  IEzr3t/jejVE9oSnBp8c3P2p+lDLVRrB8zxLyjZvirUXAiAyQPaE9MNcL8/nRpuu
+ *  99I1enCSmWIAJ57IwuJ/n1d45Q==
+ *  -----END CERTIFICATE-----
+ */
+static const char ECDSACertPEM[] = {
+    0x2d, 0x2d, 0x2d, 0x2d, 0x2d, 0x42, 0x45, 0x47, 0x49, 0x4e, 0x20, 0x43,
+    0x45, 0x52, 0x54, 0x49, 0x46, 0x49, 0x43, 0x41, 0x54, 0x45, 0x2d, 0x2d,
+    0x2d, 0x2d, 0x2d, 0x0a, 0x4d, 0x49, 0x49, 0x42, 0x58, 0x7a, 0x43, 0x43,
+    0x41, 0x51, 0x61, 0x67, 0x41, 0x77, 0x49, 0x42, 0x41, 0x67, 0x49, 0x4a,
+    0x41, 0x4b, 0x36, 0x2f, 0x59, 0x76, 0x66, 0x2f, 0x61, 0x69, 0x6e, 0x36,
+    0x4d, 0x41, 0x6f, 0x47, 0x43, 0x43, 0x71, 0x47, 0x53, 0x4d, 0x34, 0x39,
+    0x42, 0x41, 0x4d, 0x43, 0x4d, 0x42, 0x49, 0x78, 0x45, 0x44, 0x41, 0x4f,
+    0x42, 0x67, 0x4e, 0x56, 0x42, 0x41, 0x6f, 0x4d, 0x0a, 0x42, 0x30, 0x46,
+    0x6a, 0x62, 0x57, 0x55, 0x67, 0x51, 0x32, 0x38, 0x77, 0x48, 0x68, 0x63,
+    0x4e, 0x4d, 0x54, 0x59, 0x78, 0x4d, 0x6a, 0x49, 0x31, 0x4d, 0x54, 0x45,
+    0x7a, 0x4f, 0x54, 0x49, 0x33, 0x57, 0x68, 0x63, 0x4e, 0x4d, 0x6a, 0x59,
+    0x78, 0x4d, 0x6a, 0x49, 0x31, 0x4d, 0x54, 0x45, 0x7a, 0x4f, 0x54, 0x49,
+    0x33, 0x57, 0x6a, 0x41, 0x53, 0x4d, 0x52, 0x41, 0x77, 0x44, 0x67, 0x59,
+    0x44, 0x0a, 0x56, 0x51, 0x51, 0x4b, 0x44, 0x41, 0x64, 0x42, 0x59, 0x32,
+    0x31, 0x6c, 0x49, 0x45, 0x4e, 0x76, 0x4d, 0x46, 0x6b, 0x77, 0x45, 0x77,
+    0x59, 0x48, 0x4b, 0x6f, 0x5a, 0x49, 0x7a, 0x6a, 0x30, 0x43, 0x41, 0x51,
+    0x59, 0x49, 0x4b, 0x6f, 0x5a, 0x49, 0x7a, 0x6a, 0x30, 0x44, 0x41, 0x51,
+    0x63, 0x44, 0x51, 0x67, 0x41, 0x45, 0x64, 0x73, 0x6a, 0x79, 0x67, 0x56,
+    0x59, 0x6a, 0x6a, 0x61, 0x4b, 0x42, 0x0a, 0x46, 0x34, 0x43, 0x4e, 0x45,
+    0x43, 0x56, 0x6c, 0x6c, 0x4e, 0x66, 0x30, 0x31, 0x37, 0x70, 0x35, 0x2f,
+    0x4d, 0x78, 0x4e, 0x53, 0x57, 0x44, 0x6f, 0x54, 0x48, 0x79, 0x39, 0x49,
+    0x32, 0x47, 0x65, 0x44, 0x77, 0x45, 0x44, 0x44, 0x61, 0x7a, 0x49, 0x44,
+    0x2f, 0x78, 0x79, 0x38, 0x4a, 0x69, 0x59, 0x6a, 0x74, 0x50, 0x4b, 0x56,
+    0x45, 0x2f, 0x5a, 0x71, 0x77, 0x62, 0x6d, 0x69, 0x76, 0x70, 0x32, 0x0a,
+    0x55, 0x77, 0x74, 0x48, 0x32, 0x38, 0x61, 0x37, 0x4e, 0x61, 0x4e, 0x46,
+    0x4d, 0x45, 0x4d, 0x77, 0x43, 0x51, 0x59, 0x44, 0x56, 0x52, 0x30, 0x54,
+    0x42, 0x41, 0x49, 0x77, 0x41, 0x44, 0x41, 0x4c, 0x42, 0x67, 0x4e, 0x56,
+    0x48, 0x51, 0x38, 0x45, 0x42, 0x41, 0x4d, 0x43, 0x42, 0x61, 0x41, 0x77,
+    0x45, 0x77, 0x59, 0x44, 0x56, 0x52, 0x30, 0x6c, 0x42, 0x41, 0x77, 0x77,
+    0x43, 0x67, 0x59, 0x49, 0x0a, 0x4b, 0x77, 0x59, 0x42, 0x42, 0x51, 0x55,
+    0x48, 0x41, 0x77, 0x45, 0x77, 0x46, 0x41, 0x59, 0x44, 0x56, 0x52, 0x30,
+    0x52, 0x42, 0x41, 0x30, 0x77, 0x43, 0x34, 0x49, 0x4a, 0x62, 0x47, 0x39,
+    0x6a, 0x59, 0x57, 0x78, 0x6f, 0x62, 0x33, 0x4e, 0x30, 0x4d, 0x41, 0x6f,
+    0x47, 0x43, 0x43, 0x71, 0x47, 0x53, 0x4d, 0x34, 0x39, 0x42, 0x41, 0x4d,
+    0x43, 0x41, 0x30, 0x63, 0x41, 0x4d, 0x45, 0x51, 0x43, 0x0a, 0x49, 0x45,
+    0x7a, 0x72, 0x33, 0x74, 0x2f, 0x6a, 0x65, 0x6a, 0x56, 0x45, 0x39, 0x6f,
+    0x53, 0x6e, 0x42, 0x70, 0x38, 0x63, 0x33, 0x50, 0x32, 0x70, 0x2b, 0x6c,
+    0x44, 0x4c, 0x56, 0x52, 0x72, 0x42, 0x38, 0x7a, 0x78, 0x4c, 0x79, 0x6a,
+    0x5a, 0x76, 0x69, 0x72, 0x55, 0x58, 0x41, 0x69, 0x41, 0x79, 0x51, 0x50,
+    0x61, 0x45, 0x39, 0x4d, 0x4e, 0x63, 0x4c, 0x38, 0x2f, 0x6e, 0x52, 0x70,
+    0x75, 0x75, 0x0a, 0x39, 0x39, 0x49, 0x31, 0x65, 0x6e, 0x43, 0x53, 0x6d,
+    0x57, 0x49, 0x41, 0x4a, 0x35, 0x37, 0x49, 0x77, 0x75, 0x4a, 0x2f, 0x6e,
+    0x31, 0x64, 0x34, 0x35, 0x51, 0x3d, 0x3d, 0x0a, 0x2d, 0x2d, 0x2d, 0x2d,
+    0x2d, 0x45, 0x4e, 0x44, 0x20, 0x43, 0x45, 0x52, 0x54, 0x49, 0x46, 0x49,
+    0x43, 0x41, 0x54, 0x45, 0x2d, 0x2d, 0x2d, 0x2d, 0x2d, 0x0a
+};
+#endif
+
+#ifndef OPENSSL_NO_DSA
+/*
+ * -----BEGIN DSA PRIVATE KEY-----
+ * MIIBuwIBAAKBgQDdkFKzNABLOha7Eqj7004+p5fhtR6bxpujToMmSZTYi8igVVXP
+ * Wzf03ULKS5UKjA6WpR6EiZAhm+PdxusZ5xfAuRZLdKy0bgxn1f348Rwh+EQNaEM8
+ * 0TGcnw5ijwKmSw5yyHPDWdiHzoqEBlhAf8Nl22YTXax/clsc/pu/RRLAdwIVAIEg
+ * QqWRf/1EIZZcgM65Qpd65YuxAoGBAKBauV/RuloFHoSy5iWXESDywiS380tN5974
+ * GukGwoYdZo5uSIH6ahpeNSef0MbHGAzr7ZVEnhCQfRAwH1gRvSHoq/Rbmcvtd3r+
+ * QtQHOwvQHgLAynhI4i73c794czHaR+439bmcaSwDnQduRM85Mho/jiiZzAVPxBmG
+ * POIMWNXXAoGAI6Ep5IE7yn3JzkXO9B6tC3bbDM+ZzuuInwZLbtZ8lim7Dsqabg4k
+ * 2YbE4R95Bnfwnjsyl80mq/DbQN5lAHBvjDrkC6ItojBGKI3+iIrqGUEJdxvl4ulj
+ * F0PmSD7zvIG8BfocKOel+EHH0YryExiW6krV1KW2ZRmJrqSFw6KCjV0CFFQFbPfU
+ * xy5PmKytJmXR8BmppkIO
+ * -----END DSA PRIVATE KEY-----
+ */
+static const char DSAPrivateKeyPEM[] = {
+    0x2d, 0x2d, 0x2d, 0x2d, 0x2d, 0x42, 0x45, 0x47, 0x49, 0x4e, 0x20, 0x44,
+    0x53, 0x41, 0x20, 0x50, 0x52, 0x49, 0x56, 0x41, 0x54, 0x45, 0x20, 0x4b,
+    0x45, 0x59, 0x2d, 0x2d, 0x2d, 0x2d, 0x2d, 0x0a, 0x4d, 0x49, 0x49, 0x42,
+    0x75, 0x77, 0x49, 0x42, 0x41, 0x41, 0x4b, 0x42, 0x67, 0x51, 0x44, 0x64,
+    0x6b, 0x46, 0x4b, 0x7a, 0x4e, 0x41, 0x42, 0x4c, 0x4f, 0x68, 0x61, 0x37,
+    0x45, 0x71, 0x6a, 0x37, 0x30, 0x30, 0x34, 0x2b, 0x70, 0x35, 0x66, 0x68,
+    0x74, 0x52, 0x36, 0x62, 0x78, 0x70, 0x75, 0x6a, 0x54, 0x6f, 0x4d, 0x6d,
+    0x53, 0x5a, 0x54, 0x59, 0x69, 0x38, 0x69, 0x67, 0x56, 0x56, 0x58, 0x50,
+    0x0a, 0x57, 0x7a, 0x66, 0x30, 0x33, 0x55, 0x4c, 0x4b, 0x53, 0x35, 0x55,
+    0x4b, 0x6a, 0x41, 0x36, 0x57, 0x70, 0x52, 0x36, 0x45, 0x69, 0x5a, 0x41,
+    0x68, 0x6d, 0x2b, 0x50, 0x64, 0x78, 0x75, 0x73, 0x5a, 0x35, 0x78, 0x66,
+    0x41, 0x75, 0x52, 0x5a, 0x4c, 0x64, 0x4b, 0x79, 0x30, 0x62, 0x67, 0x78,
+    0x6e, 0x31, 0x66, 0x33, 0x34, 0x38, 0x52, 0x77, 0x68, 0x2b, 0x45, 0x51,
+    0x4e, 0x61, 0x45, 0x4d, 0x38, 0x0a, 0x30, 0x54, 0x47, 0x63, 0x6e, 0x77,
+    0x35, 0x69, 0x6a, 0x77, 0x4b, 0x6d, 0x53, 0x77, 0x35, 0x79, 0x79, 0x48,
+    0x50, 0x44, 0x57, 0x64, 0x69, 0x48, 0x7a, 0x6f, 0x71, 0x45, 0x42, 0x6c,
+    0x68, 0x41, 0x66, 0x38, 0x4e, 0x6c, 0x32, 0x32, 0x59, 0x54, 0x58, 0x61,
+    0x78, 0x2f, 0x63, 0x6c, 0x73, 0x63, 0x2f, 0x70, 0x75, 0x2f, 0x52, 0x52,
+    0x4c, 0x41, 0x64, 0x77, 0x49, 0x56, 0x41, 0x49, 0x45, 0x67, 0x0a, 0x51,
+    0x71, 0x57, 0x52, 0x66, 0x2f, 0x31, 0x45, 0x49, 0x5a, 0x5a, 0x63, 0x67,
+    0x4d, 0x36, 0x35, 0x51, 0x70, 0x64, 0x36, 0x35, 0x59, 0x75, 0x78, 0x41,
+    0x6f, 0x47, 0x42, 0x41, 0x4b, 0x42, 0x61, 0x75, 0x56, 0x2f, 0x52, 0x75,
+    0x6c, 0x6f, 0x46, 0x48, 0x6f, 0x53, 0x79, 0x35, 0x69, 0x57, 0x58, 0x45,
+    0x53, 0x44, 0x79, 0x77, 0x69, 0x53, 0x33, 0x38, 0x30, 0x74, 0x4e, 0x35,
+    0x39, 0x37, 0x34, 0x0a, 0x47, 0x75, 0x6b, 0x47, 0x77, 0x6f, 0x59, 0x64,
+    0x5a, 0x6f, 0x35, 0x75, 0x53, 0x49, 0x48, 0x36, 0x61, 0x68, 0x70, 0x65,
+    0x4e, 0x53, 0x65, 0x66, 0x30, 0x4d, 0x62, 0x48, 0x47, 0x41, 0x7a, 0x72,
+    0x37, 0x5a, 0x56, 0x45, 0x6e, 0x68, 0x43, 0x51, 0x66, 0x52, 0x41, 0x77,
+    0x48, 0x31, 0x67, 0x52, 0x76, 0x53, 0x48, 0x6f, 0x71, 0x2f, 0x52, 0x62,
+    0x6d, 0x63, 0x76, 0x74, 0x64, 0x33, 0x72, 0x2b, 0x0a, 0x51, 0x74, 0x51,
+    0x48, 0x4f, 0x77, 0x76, 0x51, 0x48, 0x67, 0x4c, 0x41, 0x79, 0x6e, 0x68,
+    0x49, 0x34, 0x69, 0x37, 0x33, 0x63, 0x37, 0x39, 0x34, 0x63, 0x7a, 0x48,
+    0x61, 0x52, 0x2b, 0x34, 0x33, 0x39, 0x62, 0x6d, 0x63, 0x61, 0x53, 0x77,
+    0x44, 0x6e, 0x51, 0x64, 0x75, 0x52, 0x4d, 0x38, 0x35, 0x4d, 0x68, 0x6f,
+    0x2f, 0x6a, 0x69, 0x69, 0x5a, 0x7a, 0x41, 0x56, 0x50, 0x78, 0x42, 0x6d,
+    0x47, 0x0a, 0x50, 0x4f, 0x49, 0x4d, 0x57, 0x4e, 0x58, 0x58, 0x41, 0x6f,
+    0x47, 0x41, 0x49, 0x36, 0x45, 0x70, 0x35, 0x49, 0x45, 0x37, 0x79, 0x6e,
+    0x33, 0x4a, 0x7a, 0x6b, 0x58, 0x4f, 0x39, 0x42, 0x36, 0x74, 0x43, 0x33,
+    0x62, 0x62, 0x44, 0x4d, 0x2b, 0x5a, 0x7a, 0x75, 0x75, 0x49, 0x6e, 0x77,
+    0x5a, 0x4c, 0x62, 0x74, 0x5a, 0x38, 0x6c, 0x69, 0x6d, 0x37, 0x44, 0x73,
+    0x71, 0x61, 0x62, 0x67, 0x34, 0x6b, 0x0a, 0x32, 0x59, 0x62, 0x45, 0x34,
+    0x52, 0x39, 0x35, 0x42, 0x6e, 0x66, 0x77, 0x6e, 0x6a, 0x73, 0x79, 0x6c,
+    0x38, 0x30, 0x6d, 0x71, 0x2f, 0x44, 0x62, 0x51, 0x4e, 0x35, 0x6c, 0x41,
+    0x48, 0x42, 0x76, 0x6a, 0x44, 0x72, 0x6b, 0x43, 0x36, 0x49, 0x74, 0x6f,
+    0x6a, 0x42, 0x47, 0x4b, 0x49, 0x33, 0x2b, 0x69, 0x49, 0x72, 0x71, 0x47,
+    0x55, 0x45, 0x4a, 0x64, 0x78, 0x76, 0x6c, 0x34, 0x75, 0x6c, 0x6a, 0x0a,
+    0x46, 0x30, 0x50, 0x6d, 0x53, 0x44, 0x37, 0x7a, 0x76, 0x49, 0x47, 0x38,
+    0x42, 0x66, 0x6f, 0x63, 0x4b, 0x4f, 0x65, 0x6c, 0x2b, 0x45, 0x48, 0x48,
+    0x30, 0x59, 0x72, 0x79, 0x45, 0x78, 0x69, 0x57, 0x36, 0x6b, 0x72, 0x56,
+    0x31, 0x4b, 0x57, 0x32, 0x5a, 0x52, 0x6d, 0x4a, 0x72, 0x71, 0x53, 0x46,
+    0x77, 0x36, 0x4b, 0x43, 0x6a, 0x56, 0x30, 0x43, 0x46, 0x46, 0x51, 0x46,
+    0x62, 0x50, 0x66, 0x55, 0x0a, 0x78, 0x79, 0x35, 0x50, 0x6d, 0x4b, 0x79,
+    0x74, 0x4a, 0x6d, 0x58, 0x52, 0x38, 0x42, 0x6d, 0x70, 0x70, 0x6b, 0x49,
+    0x4f, 0x0a, 0x2d, 0x2d, 0x2d, 0x2d, 0x2d, 0x45, 0x4e, 0x44, 0x20, 0x44,
+    0x53, 0x41, 0x20, 0x50, 0x52, 0x49, 0x56, 0x41, 0x54, 0x45, 0x20, 0x4b,
+    0x45, 0x59, 0x2d, 0x2d, 0x2d, 0x2d, 0x2d, 0x0a
+};
+
+/*
+ * -----BEGIN CERTIFICATE-----
+ * MIICqTCCAmegAwIBAgIJAILDGUk37fWGMAsGCWCGSAFlAwQDAjASMRAwDgYDVQQK
+ * DAdBY21lIENvMB4XDTE2MTIyNTEzMjUzNloXDTI2MTIyNTEzMjUzNlowEjEQMA4G
+ * A1UECgwHQWNtZSBDbzCCAbcwggEsBgcqhkjOOAQBMIIBHwKBgQDdkFKzNABLOha7
+ * Eqj7004+p5fhtR6bxpujToMmSZTYi8igVVXPWzf03ULKS5UKjA6WpR6EiZAhm+Pd
+ * xusZ5xfAuRZLdKy0bgxn1f348Rwh+EQNaEM80TGcnw5ijwKmSw5yyHPDWdiHzoqE
+ * BlhAf8Nl22YTXax/clsc/pu/RRLAdwIVAIEgQqWRf/1EIZZcgM65Qpd65YuxAoGB
+ * AKBauV/RuloFHoSy5iWXESDywiS380tN5974GukGwoYdZo5uSIH6ahpeNSef0MbH
+ * GAzr7ZVEnhCQfRAwH1gRvSHoq/Rbmcvtd3r+QtQHOwvQHgLAynhI4i73c794czHa
+ * R+439bmcaSwDnQduRM85Mho/jiiZzAVPxBmGPOIMWNXXA4GEAAKBgCOhKeSBO8p9
+ * yc5FzvQerQt22wzPmc7riJ8GS27WfJYpuw7Kmm4OJNmGxOEfeQZ38J47MpfNJqvw
+ * 20DeZQBwb4w65AuiLaIwRiiN/oiK6hlBCXcb5eLpYxdD5kg+87yBvAX6HCjnpfhB
+ * x9GK8hMYlupK1dSltmUZia6khcOigo1do0UwQzAJBgNVHRMEAjAAMAsGA1UdDwQE
+ * AwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAUBgNVHREEDTALgglsb2NhbGhvc3Qw
+ * CwYJYIZIAWUDBAMCAy8AMCwCFClxInXTRWNJEWdi5ilNr/fbM1bKAhQy4B7wtmfd
+ * I+zV6g3w9qBkNqStpA==
+ * -----END CERTIFICATE-----
+ */
+static const char DSACertPEM[] = {
+    0x2d, 0x2d, 0x2d, 0x2d, 0x2d, 0x42, 0x45, 0x47, 0x49, 0x4e, 0x20, 0x43,
+    0x45, 0x52, 0x54, 0x49, 0x46, 0x49, 0x43, 0x41, 0x54, 0x45, 0x2d, 0x2d,
+    0x2d, 0x2d, 0x2d, 0x0a, 0x4d, 0x49, 0x49, 0x43, 0x71, 0x54, 0x43, 0x43,
+    0x41, 0x6d, 0x65, 0x67, 0x41, 0x77, 0x49, 0x42, 0x41, 0x67, 0x49, 0x4a,
+    0x41, 0x49, 0x4c, 0x44, 0x47, 0x55, 0x6b, 0x33, 0x37, 0x66, 0x57, 0x47,
+    0x4d, 0x41, 0x73, 0x47, 0x43, 0x57, 0x43, 0x47, 0x53, 0x41, 0x46, 0x6c,
+    0x41, 0x77, 0x51, 0x44, 0x41, 0x6a, 0x41, 0x53, 0x4d, 0x52, 0x41, 0x77,
+    0x44, 0x67, 0x59, 0x44, 0x56, 0x51, 0x51, 0x4b, 0x0a, 0x44, 0x41, 0x64,
+    0x42, 0x59, 0x32, 0x31, 0x6c, 0x49, 0x45, 0x4e, 0x76, 0x4d, 0x42, 0x34,
+    0x58, 0x44, 0x54, 0x45, 0x32, 0x4d, 0x54, 0x49, 0x79, 0x4e, 0x54, 0x45,
+    0x7a, 0x4d, 0x6a, 0x55, 0x7a, 0x4e, 0x6c, 0x6f, 0x58, 0x44, 0x54, 0x49,
+    0x32, 0x4d, 0x54, 0x49, 0x79, 0x4e, 0x54, 0x45, 0x7a, 0x4d, 0x6a, 0x55,
+    0x7a, 0x4e, 0x6c, 0x6f, 0x77, 0x45, 0x6a, 0x45, 0x51, 0x4d, 0x41, 0x34,
+    0x47, 0x0a, 0x41, 0x31, 0x55, 0x45, 0x43, 0x67, 0x77, 0x48, 0x51, 0x57,
+    0x4e, 0x74, 0x5a, 0x53, 0x42, 0x44, 0x62, 0x7a, 0x43, 0x43, 0x41, 0x62,
+    0x63, 0x77, 0x67, 0x67, 0x45, 0x73, 0x42, 0x67, 0x63, 0x71, 0x68, 0x6b,
+    0x6a, 0x4f, 0x4f, 0x41, 0x51, 0x42, 0x4d, 0x49, 0x49, 0x42, 0x48, 0x77,
+    0x4b, 0x42, 0x67, 0x51, 0x44, 0x64, 0x6b, 0x46, 0x4b, 0x7a, 0x4e, 0x41,
+    0x42, 0x4c, 0x4f, 0x68, 0x61, 0x37, 0x0a, 0x45, 0x71, 0x6a, 0x37, 0x30,
+    0x30, 0x34, 0x2b, 0x70, 0x35, 0x66, 0x68, 0x74, 0x52, 0x36, 0x62, 0x78,
+    0x70, 0x75, 0x6a, 0x54, 0x6f, 0x4d, 0x6d, 0x53, 0x5a, 0x54, 0x59, 0x69,
+    0x38, 0x69, 0x67, 0x56, 0x56, 0x58, 0x50, 0x57, 0x7a, 0x66, 0x30, 0x33,
+    0x55, 0x4c, 0x4b, 0x53, 0x35, 0x55, 0x4b, 0x6a, 0x41, 0x36, 0x57, 0x70,
+    0x52, 0x36, 0x45, 0x69, 0x5a, 0x41, 0x68, 0x6d, 0x2b, 0x50, 0x64, 0x0a,
+    0x78, 0x75, 0x73, 0x5a, 0x35, 0x78, 0x66, 0x41, 0x75, 0x52, 0x5a, 0x4c,
+    0x64, 0x4b, 0x79, 0x30, 0x62, 0x67, 0x78, 0x6e, 0x31, 0x66, 0x33, 0x34,
+    0x38, 0x52, 0x77, 0x68, 0x2b, 0x45, 0x51, 0x4e, 0x61, 0x45, 0x4d, 0x38,
+    0x30, 0x54, 0x47, 0x63, 0x6e, 0x77, 0x35, 0x69, 0x6a, 0x77, 0x4b, 0x6d,
+    0x53, 0x77, 0x35, 0x79, 0x79, 0x48, 0x50, 0x44, 0x57, 0x64, 0x69, 0x48,
+    0x7a, 0x6f, 0x71, 0x45, 0x0a, 0x42, 0x6c, 0x68, 0x41, 0x66, 0x38, 0x4e,
+    0x6c, 0x32, 0x32, 0x59, 0x54, 0x58, 0x61, 0x78, 0x2f, 0x63, 0x6c, 0x73,
+    0x63, 0x2f, 0x70, 0x75, 0x2f, 0x52, 0x52, 0x4c, 0x41, 0x64, 0x77, 0x49,
+    0x56, 0x41, 0x49, 0x45, 0x67, 0x51, 0x71, 0x57, 0x52, 0x66, 0x2f, 0x31,
+    0x45, 0x49, 0x5a, 0x5a, 0x63, 0x67, 0x4d, 0x36, 0x35, 0x51, 0x70, 0x64,
+    0x36, 0x35, 0x59, 0x75, 0x78, 0x41, 0x6f, 0x47, 0x42, 0x0a, 0x41, 0x4b,
+    0x42, 0x61, 0x75, 0x56, 0x2f, 0x52, 0x75, 0x6c, 0x6f, 0x46, 0x48, 0x6f,
+    0x53, 0x79, 0x35, 0x69, 0x57, 0x58, 0x45, 0x53, 0x44, 0x79, 0x77, 0x69,
+    0x53, 0x33, 0x38, 0x30, 0x74, 0x4e, 0x35, 0x39, 0x37, 0x34, 0x47, 0x75,
+    0x6b, 0x47, 0x77, 0x6f, 0x59, 0x64, 0x5a, 0x6f, 0x35, 0x75, 0x53, 0x49,
+    0x48, 0x36, 0x61, 0x68, 0x70, 0x65, 0x4e, 0x53, 0x65, 0x66, 0x30, 0x4d,
+    0x62, 0x48, 0x0a, 0x47, 0x41, 0x7a, 0x72, 0x37, 0x5a, 0x56, 0x45, 0x6e,
+    0x68, 0x43, 0x51, 0x66, 0x52, 0x41, 0x77, 0x48, 0x31, 0x67, 0x52, 0x76,
+    0x53, 0x48, 0x6f, 0x71, 0x2f, 0x52, 0x62, 0x6d, 0x63, 0x76, 0x74, 0x64,
+    0x33, 0x72, 0x2b, 0x51, 0x74, 0x51, 0x48, 0x4f, 0x77, 0x76, 0x51, 0x48,
+    0x67, 0x4c, 0x41, 0x79, 0x6e, 0x68, 0x49, 0x34, 0x69, 0x37, 0x33, 0x63,
+    0x37, 0x39, 0x34, 0x63, 0x7a, 0x48, 0x61, 0x0a, 0x52, 0x2b, 0x34, 0x33,
+    0x39, 0x62, 0x6d, 0x63, 0x61, 0x53, 0x77, 0x44, 0x6e, 0x51, 0x64, 0x75,
+    0x52, 0x4d, 0x38, 0x35, 0x4d, 0x68, 0x6f, 0x2f, 0x6a, 0x69, 0x69, 0x5a,
+    0x7a, 0x41, 0x56, 0x50, 0x78, 0x42, 0x6d, 0x47, 0x50, 0x4f, 0x49, 0x4d,
+    0x57, 0x4e, 0x58, 0x58, 0x41, 0x34, 0x47, 0x45, 0x41, 0x41, 0x4b, 0x42,
+    0x67, 0x43, 0x4f, 0x68, 0x4b, 0x65, 0x53, 0x42, 0x4f, 0x38, 0x70, 0x39,
+    0x0a, 0x79, 0x63, 0x35, 0x46, 0x7a, 0x76, 0x51, 0x65, 0x72, 0x51, 0x74,
+    0x32, 0x32, 0x77, 0x7a, 0x50, 0x6d, 0x63, 0x37, 0x72, 0x69, 0x4a, 0x38,
+    0x47, 0x53, 0x32, 0x37, 0x57, 0x66, 0x4a, 0x59, 0x70, 0x75, 0x77, 0x37,
+    0x4b, 0x6d, 0x6d, 0x34, 0x4f, 0x4a, 0x4e, 0x6d, 0x47, 0x78, 0x4f, 0x45,
+    0x66, 0x65, 0x51, 0x5a, 0x33, 0x38, 0x4a, 0x34, 0x37, 0x4d, 0x70, 0x66,
+    0x4e, 0x4a, 0x71, 0x76, 0x77, 0x0a, 0x32, 0x30, 0x44, 0x65, 0x5a, 0x51,
+    0x42, 0x77, 0x62, 0x34, 0x77, 0x36, 0x35, 0x41, 0x75, 0x69, 0x4c, 0x61,
+    0x49, 0x77, 0x52, 0x69, 0x69, 0x4e, 0x2f, 0x6f, 0x69, 0x4b, 0x36, 0x68,
+    0x6c, 0x42, 0x43, 0x58, 0x63, 0x62, 0x35, 0x65, 0x4c, 0x70, 0x59, 0x78,
+    0x64, 0x44, 0x35, 0x6b, 0x67, 0x2b, 0x38, 0x37, 0x79, 0x42, 0x76, 0x41,
+    0x58, 0x36, 0x48, 0x43, 0x6a, 0x6e, 0x70, 0x66, 0x68, 0x42, 0x0a, 0x78,
+    0x39, 0x47, 0x4b, 0x38, 0x68, 0x4d, 0x59, 0x6c, 0x75, 0x70, 0x4b, 0x31,
+    0x64, 0x53, 0x6c, 0x74, 0x6d, 0x55, 0x5a, 0x69, 0x61, 0x36, 0x6b, 0x68,
+    0x63, 0x4f, 0x69, 0x67, 0x6f, 0x31, 0x64, 0x6f, 0x30, 0x55, 0x77, 0x51,
+    0x7a, 0x41, 0x4a, 0x42, 0x67, 0x4e, 0x56, 0x48, 0x52, 0x4d, 0x45, 0x41,
+    0x6a, 0x41, 0x41, 0x4d, 0x41, 0x73, 0x47, 0x41, 0x31, 0x55, 0x64, 0x44,
+    0x77, 0x51, 0x45, 0x0a, 0x41, 0x77, 0x49, 0x46, 0x6f, 0x44, 0x41, 0x54,
+    0x42, 0x67, 0x4e, 0x56, 0x48, 0x53, 0x55, 0x45, 0x44, 0x44, 0x41, 0x4b,
+    0x42, 0x67, 0x67, 0x72, 0x42, 0x67, 0x45, 0x46, 0x42, 0x51, 0x63, 0x44,
+    0x41, 0x54, 0x41, 0x55, 0x42, 0x67, 0x4e, 0x56, 0x48, 0x52, 0x45, 0x45,
+    0x44, 0x54, 0x41, 0x4c, 0x67, 0x67, 0x6c, 0x73, 0x62, 0x32, 0x4e, 0x68,
+    0x62, 0x47, 0x68, 0x76, 0x63, 0x33, 0x51, 0x77, 0x0a, 0x43, 0x77, 0x59,
+    0x4a, 0x59, 0x49, 0x5a, 0x49, 0x41, 0x57, 0x55, 0x44, 0x42, 0x41, 0x4d,
+    0x43, 0x41, 0x79, 0x38, 0x41, 0x4d, 0x43, 0x77, 0x43, 0x46, 0x43, 0x6c,
+    0x78, 0x49, 0x6e, 0x58, 0x54, 0x52, 0x57, 0x4e, 0x4a, 0x45, 0x57, 0x64,
+    0x69, 0x35, 0x69, 0x6c, 0x4e, 0x72, 0x2f, 0x66, 0x62, 0x4d, 0x31, 0x62,
+    0x4b, 0x41, 0x68, 0x51, 0x79, 0x34, 0x42, 0x37, 0x77, 0x74, 0x6d, 0x66,
+    0x64, 0x0a, 0x49, 0x2b, 0x7a, 0x56, 0x36, 0x67, 0x33, 0x77, 0x39, 0x71,
+    0x42, 0x6b, 0x4e, 0x71, 0x53, 0x74, 0x70, 0x41, 0x3d, 0x3d, 0x0a, 0x2d,
+    0x2d, 0x2d, 0x2d, 0x2d, 0x45, 0x4e, 0x44, 0x20, 0x43, 0x45, 0x52, 0x54,
+    0x49, 0x46, 0x49, 0x43, 0x41, 0x54, 0x45, 0x2d, 0x2d, 0x2d, 0x2d, 0x2d,
+    0x0a
+};
+#endif
+
+/* unused, to avoid warning. */
+static int idx;
+
+#define FUZZTIME 1485898104
+
+#define TIME_IMPL(t) { if (t != NULL) *t = FUZZTIME; return FUZZTIME; }
+
+/*
+ * This might not work in all cases (and definitely not on Windows
+ * because of the way linkers are) and callees can still get the
+ * current time instead of the fixed time. This will just result
+ * in things not being fully reproducible and have a slightly
+ * different coverage.
+ */
+#if !defined(_WIN32)
+time_t time(time_t *t) TIME_IMPL(t)
+#endif
+
+int FuzzerInitialize(int *argc, char ***argv)
+{
+    STACK_OF(SSL_COMP) *comp_methods;
+
+    OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS | OPENSSL_INIT_ASYNC, NULL);
+    OPENSSL_init_ssl(OPENSSL_INIT_LOAD_SSL_STRINGS, NULL);
+    ERR_get_state();
+    CRYPTO_free_ex_index(0, -1);
+    idx = SSL_get_ex_data_X509_STORE_CTX_idx();
+    FuzzerSetRand();
+    comp_methods = SSL_COMP_get_compression_methods();
+    if (comp_methods != NULL)
+        sk_SSL_COMP_sort(comp_methods);
+
+    return 1;
+}
+
+int FuzzerTestOneInput(const uint8_t *buf, size_t len)
+{
+    SSL *server;
+    BIO *in;
+    BIO *out;
+#if !defined(OPENSSL_NO_EC) || !defined(OPENSSL_NO_DSA)
+    BIO *bio_buf;
+#endif
+    SSL_CTX *ctx;
+    int ret;
+    RSA *privkey;
+    const uint8_t *bufp;
+    EVP_PKEY *pkey;
+    X509 *cert;
+#ifndef OPENSSL_NO_EC
+    EC_KEY *ecdsakey = NULL;
+#endif
+#ifndef OPENSSL_NO_DSA
+    DSA *dsakey = NULL;
+#endif
+    uint8_t opt;
+
+    if (len < 2)
+        return 0;
+
+    /*
+     * TODO: use the ossltest engine (optionally?) to disable crypto checks.
+     */
+
+    /* This only fuzzes the initial flow from the client so far. */
+    ctx = SSL_CTX_new(SSLv23_method());
+
+    ret = SSL_CTX_set_min_proto_version(ctx, 0);
+    OPENSSL_assert(ret == 1);
+    ret = SSL_CTX_set_cipher_list(ctx, "ALL:eNULL:@SECLEVEL=0");
+    OPENSSL_assert(ret == 1);
+
+    /* RSA */
+    bufp = kRSAPrivateKeyDER;
+    privkey = d2i_RSAPrivateKey(NULL, &bufp, sizeof(kRSAPrivateKeyDER));
+    OPENSSL_assert(privkey != NULL);
+    pkey = EVP_PKEY_new();
+    EVP_PKEY_assign_RSA(pkey, privkey);
+    ret = SSL_CTX_use_PrivateKey(ctx, pkey);
+    OPENSSL_assert(ret == 1);
+    EVP_PKEY_free(pkey);
+
+    bufp = kCertificateDER;
+    cert = d2i_X509(NULL, &bufp, sizeof(kCertificateDER));
+    OPENSSL_assert(cert != NULL);
+    ret = SSL_CTX_use_certificate(ctx, cert);
+    OPENSSL_assert(ret == 1);
+    X509_free(cert);
+
+#ifndef OPENSSL_NO_EC
+    /* ECDSA */
+    bio_buf = BIO_new(BIO_s_mem());
+    OPENSSL_assert((size_t)BIO_write(bio_buf, ECDSAPrivateKeyPEM, sizeof(ECDSAPrivateKeyPEM)) == sizeof(ECDSAPrivateKeyPEM));
+    ecdsakey = PEM_read_bio_ECPrivateKey(bio_buf, NULL, NULL, NULL);
+    ERR_print_errors_fp(stderr);
+    OPENSSL_assert(ecdsakey != NULL);
+    BIO_free(bio_buf);
+    pkey = EVP_PKEY_new();
+    EVP_PKEY_assign_EC_KEY(pkey, ecdsakey);
+    ret = SSL_CTX_use_PrivateKey(ctx, pkey);
+    OPENSSL_assert(ret == 1);
+    EVP_PKEY_free(pkey);
+
+    bio_buf = BIO_new(BIO_s_mem());
+    OPENSSL_assert((size_t)BIO_write(bio_buf, ECDSACertPEM, sizeof(ECDSACertPEM)) == sizeof(ECDSACertPEM));
+    cert = PEM_read_bio_X509(bio_buf, NULL, NULL, NULL);
+    OPENSSL_assert(cert != NULL);
+    BIO_free(bio_buf);
+    ret = SSL_CTX_use_certificate(ctx, cert);
+    OPENSSL_assert(ret == 1);
+    X509_free(cert);
+#endif
+
+#ifndef OPENSSL_NO_DSA
+    /* DSA */
+    bio_buf = BIO_new(BIO_s_mem());
+    OPENSSL_assert((size_t)BIO_write(bio_buf, DSAPrivateKeyPEM, sizeof(DSAPrivateKeyPEM)) == sizeof(DSAPrivateKeyPEM));
+    dsakey = PEM_read_bio_DSAPrivateKey(bio_buf, NULL, NULL, NULL);
+    ERR_print_errors_fp(stderr);
+    OPENSSL_assert(dsakey != NULL);
+    BIO_free(bio_buf);
+    pkey = EVP_PKEY_new();
+    EVP_PKEY_assign_DSA(pkey, dsakey);
+    ret = SSL_CTX_use_PrivateKey(ctx, pkey);
+    OPENSSL_assert(ret == 1);
+    EVP_PKEY_free(pkey);
+
+    bio_buf = BIO_new(BIO_s_mem());
+    OPENSSL_assert((size_t)BIO_write(bio_buf, DSACertPEM, sizeof(DSACertPEM)) == sizeof(DSACertPEM));
+    cert = PEM_read_bio_X509(bio_buf, NULL, NULL, NULL);
+    OPENSSL_assert(cert != NULL);
+    BIO_free(bio_buf);
+    ret = SSL_CTX_use_certificate(ctx, cert);
+    OPENSSL_assert(ret == 1);
+    X509_free(cert);
+#endif
+
+    /* TODO: Set up support for SRP and PSK */
+
+    server = SSL_new(ctx);
+    in = BIO_new(BIO_s_mem());
+    out = BIO_new(BIO_s_mem());
+    SSL_set_bio(server, in, out);
+    SSL_set_accept_state(server);
+
+    opt = (uint8_t)buf[len-1];
+    len--;
+
+    OPENSSL_assert((size_t)BIO_write(in, buf, len) == len);
+
+    if ((opt & 0x01) != 0)
+    {
+        do {
+            char early_buf[16384];
+            size_t early_len;
+            ret = SSL_read_early_data(server, early_buf, sizeof(early_buf), &early_len);
+
+            if (ret != SSL_READ_EARLY_DATA_SUCCESS)
+                break;
+        } while (1);
+    }
+
+    if (SSL_do_handshake(server) == 1) {
+        /* Keep reading application data until error or EOF. */
+        uint8_t tmp[1024];
+        for (;;) {
+            if (SSL_read(server, tmp, sizeof(tmp)) <= 0) {
+                break;
+            }
+        }
+    }
+    SSL_free(server);
+    ERR_clear_error();
+    SSL_CTX_free(ctx);
+
+    return 0;
+}
+
+void FuzzerCleanup(void)
+{
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/test-corpus.c b/trunk/3rdparty/openssl-1.1-fit/fuzz/test-corpus.c
new file mode 100644
index 000000000..86be5337e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/test-corpus.c
@@ -0,0 +1,104 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+
+/*
+ * Given a list of files, run each of them through the fuzzer.  Note that
+ * failure will be indicated by some kind of crash. Switching on things like
+ * asan improves the test.
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <sys/stat.h>
+#include <openssl/crypto.h>
+#include "fuzzer.h"
+#include "internal/o_dir.h"
+
+#if defined(_WIN32) && defined(_MAX_PATH)
+# define PATH_MAX _MAX_PATH
+#endif
+
+#ifndef PATH_MAX
+# define PATH_MAX 4096
+#endif
+
+# if !defined(S_ISREG)
+#   define S_ISREG(m) ((m) & S_IFREG)
+# endif
+
+static void testfile(const char *pathname)
+{
+    struct stat st;
+    FILE *f;
+    unsigned char *buf;
+    size_t s;
+
+    if (stat(pathname, &st) < 0 || !S_ISREG(st.st_mode))
+        return;
+    printf("# %s\n", pathname);
+    fflush(stdout);
+    f = fopen(pathname, "rb");
+    if (f == NULL)
+        return;
+    buf = malloc(st.st_size);
+    if (buf != NULL) {
+        s = fread(buf, 1, st.st_size, f);
+        OPENSSL_assert(s == (size_t)st.st_size);
+        FuzzerTestOneInput(buf, s);
+        free(buf);
+    }
+    fclose(f);
+}
+
+int main(int argc, char **argv) {
+    int n;
+
+    FuzzerInitialize(&argc, &argv);
+
+    for (n = 1; n < argc; ++n) {
+        size_t dirname_len = strlen(argv[n]);
+        const char *filename = NULL;
+        char *pathname = NULL;
+        OPENSSL_DIR_CTX *ctx = NULL;
+        int wasdir = 0;
+
+        /*
+         * We start with trying to read the given path as a directory.
+         */
+        while ((filename = OPENSSL_DIR_read(&ctx, argv[n])) != NULL) {
+            wasdir = 1;
+            if (pathname == NULL) {
+                pathname = malloc(PATH_MAX);
+                if (pathname == NULL)
+                    break;
+                strcpy(pathname, argv[n]);
+#ifdef __VMS
+                if (strchr(":<]", pathname[dirname_len - 1]) == NULL)
+#endif
+                    pathname[dirname_len++] = '/';
+                pathname[dirname_len] = '\0';
+            }
+            strcpy(pathname + dirname_len, filename);
+            testfile(pathname);
+        }
+        OPENSSL_DIR_end(&ctx);
+
+        /* If it wasn't a directory, treat it as a file instead */
+        if (!wasdir)
+            testfile(argv[n]);
+
+        free(pathname);
+    }
+
+    FuzzerCleanup();
+
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/fuzz/x509.c b/trunk/3rdparty/openssl-1.1-fit/fuzz/x509.c
new file mode 100644
index 000000000..926287da4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/fuzz/x509.c
@@ -0,0 +1,51 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL licenses, (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * https://www.openssl.org/source/license.html
+ * or in the file LICENSE in the source distribution.
+ */
+
+#include <openssl/x509.h>
+#include <openssl/bio.h>
+#include <openssl/err.h>
+#include <openssl/rand.h>
+#include "fuzzer.h"
+
+#include "rand.inc"
+
+int FuzzerInitialize(int *argc, char ***argv)
+{
+    OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL);
+    ERR_get_state();
+    CRYPTO_free_ex_index(0, -1);
+    FuzzerSetRand();
+    return 1;
+}
+
+int FuzzerTestOneInput(const uint8_t *buf, size_t len)
+{
+    const unsigned char *p = buf;
+    unsigned char *der = NULL;
+
+    X509 *x509 = d2i_X509(NULL, &p, len);
+    if (x509 != NULL) {
+        BIO *bio = BIO_new(BIO_s_null());
+        /* This will load and print the public key as well as extensions */
+        X509_print(bio, x509);
+        BIO_free(bio);
+
+        i2d_X509(x509, &der);
+        OPENSSL_free(der);
+
+        X509_free(x509);
+    }
+    ERR_clear_error();
+    return 0;
+}
+
+void FuzzerCleanup(void)
+{
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/__DECC_INCLUDE_EPILOGUE.H b/trunk/3rdparty/openssl-1.1-fit/include/internal/__DECC_INCLUDE_EPILOGUE.H
new file mode 100644
index 000000000..c350018ad
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/__DECC_INCLUDE_EPILOGUE.H
@@ -0,0 +1,16 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file is only used by HP C on VMS, and is included automatically
+ * after each header file from this directory
+ */
+
+/* restore state.  Must correspond to the save in __decc_include_prologue.h */
+#pragma names restore
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/__DECC_INCLUDE_PROLOGUE.H b/trunk/3rdparty/openssl-1.1-fit/include/internal/__DECC_INCLUDE_PROLOGUE.H
new file mode 100644
index 000000000..9a9c777f9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/__DECC_INCLUDE_PROLOGUE.H
@@ -0,0 +1,20 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file is only used by HP C on VMS, and is included automatically
+ * after each header file from this directory
+ */
+
+/* save state */
+#pragma names save
+/* have the compiler shorten symbols larger than 31 chars to 23 chars
+ * followed by a 8 hex char CRC
+ */
+#pragma names as_is,shortened
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/bio.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/bio.h
new file mode 100644
index 000000000..c343b2762
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/bio.h
@@ -0,0 +1,33 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/bio.h>
+
+struct bio_method_st {
+    int type;
+    char *name;
+    int (*bwrite) (BIO *, const char *, size_t, size_t *);
+    int (*bwrite_old) (BIO *, const char *, int);
+    int (*bread) (BIO *, char *, size_t, size_t *);
+    int (*bread_old) (BIO *, char *, int);
+    int (*bputs) (BIO *, const char *);
+    int (*bgets) (BIO *, char *, int);
+    long (*ctrl) (BIO *, int, long, void *);
+    int (*create) (BIO *);
+    int (*destroy) (BIO *);
+    long (*callback_ctrl) (BIO *, int, BIO_info_cb *);
+};
+
+void bio_free_ex_data(BIO *bio);
+void bio_cleanup(void);
+
+
+/* Old style to new style BIO_METHOD conversion functions */
+int bwrite_conv(BIO *bio, const char *data, size_t datal, size_t *written);
+int bread_conv(BIO *bio, char *data, size_t datal, size_t *read);
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/comp.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/comp.h
new file mode 100644
index 000000000..ac6e38b47
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/comp.h
@@ -0,0 +1,12 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/comp.h>
+
+void comp_zlib_cleanup_int(void);
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/conf.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/conf.h
new file mode 100644
index 000000000..29bc9f963
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/conf.h
@@ -0,0 +1,30 @@
+/*
+ * Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_INTERNAL_CONF_H
+# define HEADER_INTERNAL_CONF_H
+
+#include <openssl/conf.h>
+
+#define DEFAULT_CONF_MFLAGS \
+    (CONF_MFLAGS_DEFAULT_SECTION | \
+     CONF_MFLAGS_IGNORE_MISSING_FILE | \
+     CONF_MFLAGS_IGNORE_RETURN_CODES)
+
+struct ossl_init_settings_st {
+    char *filename;
+    char *appname;
+    unsigned long flags;
+};
+
+int openssl_config_int(const OPENSSL_INIT_SETTINGS *);
+void openssl_no_config_int(void);
+void conf_modules_free_int(void);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/constant_time_locl.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/constant_time_locl.h
new file mode 100644
index 000000000..cde30f406
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/constant_time_locl.h
@@ -0,0 +1,333 @@
+/*
+ * Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_CONSTANT_TIME_LOCL_H
+# define HEADER_CONSTANT_TIME_LOCL_H
+
+# include <stdlib.h>
+# include <string.h>
+# include <openssl/e_os2.h>              /* For 'ossl_inline' */
+
+/*-
+ * The boolean methods return a bitmask of all ones (0xff...f) for true
+ * and 0 for false. This is useful for choosing a value based on the result
+ * of a conditional in constant time. For example,
+ *      if (a < b) {
+ *        c = a;
+ *      } else {
+ *        c = b;
+ *      }
+ * can be written as
+ *      unsigned int lt = constant_time_lt(a, b);
+ *      c = constant_time_select(lt, a, b);
+ */
+
+/* Returns the given value with the MSB copied to all the other bits. */
+static ossl_inline unsigned int constant_time_msb(unsigned int a);
+/* Convenience method for uint32_t. */
+static ossl_inline uint32_t constant_time_msb_32(uint32_t a);
+/* Convenience method for uint64_t. */
+static ossl_inline uint64_t constant_time_msb_64(uint64_t a);
+
+/* Returns 0xff..f if a < b and 0 otherwise. */
+static ossl_inline unsigned int constant_time_lt(unsigned int a,
+                                                 unsigned int b);
+/* Convenience method for getting an 8-bit mask. */
+static ossl_inline unsigned char constant_time_lt_8(unsigned int a,
+                                                    unsigned int b);
+/* Convenience method for uint64_t. */
+static ossl_inline uint64_t constant_time_lt_64(uint64_t a, uint64_t b);
+
+/* Returns 0xff..f if a >= b and 0 otherwise. */
+static ossl_inline unsigned int constant_time_ge(unsigned int a,
+                                                 unsigned int b);
+/* Convenience method for getting an 8-bit mask. */
+static ossl_inline unsigned char constant_time_ge_8(unsigned int a,
+                                                    unsigned int b);
+
+/* Returns 0xff..f if a == 0 and 0 otherwise. */
+static ossl_inline unsigned int constant_time_is_zero(unsigned int a);
+/* Convenience method for getting an 8-bit mask. */
+static ossl_inline unsigned char constant_time_is_zero_8(unsigned int a);
+/* Convenience method for getting a 32-bit mask. */
+static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a);
+
+/* Returns 0xff..f if a == b and 0 otherwise. */
+static ossl_inline unsigned int constant_time_eq(unsigned int a,
+                                                 unsigned int b);
+/* Convenience method for getting an 8-bit mask. */
+static ossl_inline unsigned char constant_time_eq_8(unsigned int a,
+                                                    unsigned int b);
+/* Signed integers. */
+static ossl_inline unsigned int constant_time_eq_int(int a, int b);
+/* Convenience method for getting an 8-bit mask. */
+static ossl_inline unsigned char constant_time_eq_int_8(int a, int b);
+
+/*-
+ * Returns (mask & a) | (~mask & b).
+ *
+ * When |mask| is all 1s or all 0s (as returned by the methods above),
+ * the select methods return either |a| (if |mask| is nonzero) or |b|
+ * (if |mask| is zero).
+ */
+static ossl_inline unsigned int constant_time_select(unsigned int mask,
+                                                     unsigned int a,
+                                                     unsigned int b);
+/* Convenience method for unsigned chars. */
+static ossl_inline unsigned char constant_time_select_8(unsigned char mask,
+                                                        unsigned char a,
+                                                        unsigned char b);
+
+/* Convenience method for uint32_t. */
+static ossl_inline uint32_t constant_time_select_32(uint32_t mask, uint32_t a,
+                                                    uint32_t b);
+
+/* Convenience method for uint64_t. */
+static ossl_inline uint64_t constant_time_select_64(uint64_t mask, uint64_t a,
+                                                    uint64_t b);
+/* Convenience method for signed integers. */
+static ossl_inline int constant_time_select_int(unsigned int mask, int a,
+                                                int b);
+
+
+static ossl_inline unsigned int constant_time_msb(unsigned int a)
+{
+    return 0 - (a >> (sizeof(a) * 8 - 1));
+}
+
+
+static ossl_inline uint32_t constant_time_msb_32(uint32_t a)
+{
+    return 0 - (a >> 31);
+}
+
+static ossl_inline uint64_t constant_time_msb_64(uint64_t a)
+{
+    return 0 - (a >> 63);
+}
+
+static ossl_inline size_t constant_time_msb_s(size_t a)
+{
+    return 0 - (a >> (sizeof(a) * 8 - 1));
+}
+
+static ossl_inline unsigned int constant_time_lt(unsigned int a,
+                                                 unsigned int b)
+{
+    return constant_time_msb(a ^ ((a ^ b) | ((a - b) ^ b)));
+}
+
+static ossl_inline size_t constant_time_lt_s(size_t a, size_t b)
+{
+    return constant_time_msb_s(a ^ ((a ^ b) | ((a - b) ^ b)));
+}
+
+static ossl_inline unsigned char constant_time_lt_8(unsigned int a,
+                                                    unsigned int b)
+{
+    return (unsigned char)constant_time_lt(a, b);
+}
+
+static ossl_inline uint64_t constant_time_lt_64(uint64_t a, uint64_t b)
+{
+    return constant_time_msb_64(a ^ ((a ^ b) | ((a - b) ^ b)));
+}
+
+static ossl_inline unsigned int constant_time_ge(unsigned int a,
+                                                 unsigned int b)
+{
+    return ~constant_time_lt(a, b);
+}
+
+static ossl_inline size_t constant_time_ge_s(size_t a, size_t b)
+{
+    return ~constant_time_lt_s(a, b);
+}
+
+static ossl_inline unsigned char constant_time_ge_8(unsigned int a,
+                                                    unsigned int b)
+{
+    return (unsigned char)constant_time_ge(a, b);
+}
+
+static ossl_inline unsigned char constant_time_ge_8_s(size_t a, size_t b)
+{
+    return (unsigned char)constant_time_ge_s(a, b);
+}
+
+static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
+{
+    return constant_time_msb(~a & (a - 1));
+}
+
+static ossl_inline size_t constant_time_is_zero_s(size_t a)
+{
+    return constant_time_msb_s(~a & (a - 1));
+}
+
+static ossl_inline unsigned char constant_time_is_zero_8(unsigned int a)
+{
+    return (unsigned char)constant_time_is_zero(a);
+}
+
+static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a)
+{
+    return constant_time_msb_32(~a & (a - 1));
+}
+
+static ossl_inline unsigned int constant_time_eq(unsigned int a,
+                                                 unsigned int b)
+{
+    return constant_time_is_zero(a ^ b);
+}
+
+static ossl_inline size_t constant_time_eq_s(size_t a, size_t b)
+{
+    return constant_time_is_zero_s(a ^ b);
+}
+
+static ossl_inline unsigned char constant_time_eq_8(unsigned int a,
+                                                    unsigned int b)
+{
+    return (unsigned char)constant_time_eq(a, b);
+}
+
+static ossl_inline unsigned char constant_time_eq_8_s(size_t a, size_t b)
+{
+    return (unsigned char)constant_time_eq_s(a, b);
+}
+
+static ossl_inline unsigned int constant_time_eq_int(int a, int b)
+{
+    return constant_time_eq((unsigned)(a), (unsigned)(b));
+}
+
+static ossl_inline unsigned char constant_time_eq_int_8(int a, int b)
+{
+    return constant_time_eq_8((unsigned)(a), (unsigned)(b));
+}
+
+static ossl_inline unsigned int constant_time_select(unsigned int mask,
+                                                     unsigned int a,
+                                                     unsigned int b)
+{
+    return (mask & a) | (~mask & b);
+}
+
+static ossl_inline size_t constant_time_select_s(size_t mask,
+                                                 size_t a,
+                                                 size_t b)
+{
+    return (mask & a) | (~mask & b);
+}
+
+static ossl_inline unsigned char constant_time_select_8(unsigned char mask,
+                                                        unsigned char a,
+                                                        unsigned char b)
+{
+    return (unsigned char)constant_time_select(mask, a, b);
+}
+
+static ossl_inline int constant_time_select_int(unsigned int mask, int a,
+                                                int b)
+{
+    return (int)constant_time_select(mask, (unsigned)(a), (unsigned)(b));
+}
+
+static ossl_inline int constant_time_select_int_s(size_t mask, int a, int b)
+{
+    return (int)constant_time_select((unsigned)mask, (unsigned)(a),
+                                      (unsigned)(b));
+}
+
+static ossl_inline uint32_t constant_time_select_32(uint32_t mask, uint32_t a,
+                                                    uint32_t b)
+{
+    return (mask & a) | (~mask & b);
+}
+
+static ossl_inline uint64_t constant_time_select_64(uint64_t mask, uint64_t a,
+                                                    uint64_t b)
+{
+    return (mask & a) | (~mask & b);
+}
+
+/*
+ * mask must be 0xFFFFFFFF or 0x00000000.
+ *
+ * if (mask) {
+ *     uint32_t tmp = *a;
+ *
+ *     *a = *b;
+ *     *b = tmp;
+ * }
+ */
+static ossl_inline void constant_time_cond_swap_32(uint32_t mask, uint32_t *a,
+                                                   uint32_t *b)
+{
+    uint32_t xor = *a ^ *b;
+
+    xor &= mask;
+    *a ^= xor;
+    *b ^= xor;
+}
+
+/*
+ * mask must be 0xFFFFFFFF or 0x00000000.
+ *
+ * if (mask) {
+ *     uint64_t tmp = *a;
+ *
+ *     *a = *b;
+ *     *b = tmp;
+ * }
+ */
+static ossl_inline void constant_time_cond_swap_64(uint64_t mask, uint64_t *a,
+                                                   uint64_t *b)
+{
+    uint64_t xor = *a ^ *b;
+
+    xor &= mask;
+    *a ^= xor;
+    *b ^= xor;
+}
+
+/*
+ * table is a two dimensional array of bytes. Each row has rowsize elements.
+ * Copies row number idx into out. rowsize and numrows are not considered
+ * private.
+ */
+static ossl_inline void constant_time_lookup(void *out,
+                                             const void *table,
+                                             size_t rowsize,
+                                             size_t numrows,
+                                             size_t idx)
+{
+    size_t i, j;
+    const unsigned char *tablec = (const unsigned char *)table;
+    unsigned char *outc = (unsigned char *)out;
+    unsigned char mask;
+
+    memset(out, 0, rowsize);
+
+    /* Note idx may underflow - but that is well defined */
+    for (i = 0; i < numrows; i++, idx--) {
+        mask = (unsigned char)constant_time_is_zero_s(idx);
+        for (j = 0; j < rowsize; j++)
+            *(outc + j) |= constant_time_select_8(mask, *(tablec++), 0);
+    }
+}
+
+/*
+ * Expected usage pattern is to unconditionally set error and then
+ * wipe it if there was no actual error. |clear| is 1 or 0.
+ */
+void err_clear_last_constant_time(int clear);
+
+#endif                          /* HEADER_CONSTANT_TIME_LOCL_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/cryptlib.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/cryptlib.h
new file mode 100644
index 000000000..b4d76d5f2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/cryptlib.h
@@ -0,0 +1,98 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_CRYPTLIB_H
+# define HEADER_CRYPTLIB_H
+
+# include <stdlib.h>
+# include <string.h>
+
+# ifdef OPENSSL_USE_APPLINK
+#  undef BIO_FLAGS_UPLINK
+#  define BIO_FLAGS_UPLINK 0x8000
+#  include "ms/uplink.h"
+# endif
+
+# include <openssl/crypto.h>
+# include <openssl/buffer.h>
+# include <openssl/bio.h>
+# include <openssl/err.h>
+# include "internal/nelem.h"
+
+#ifdef NDEBUG
+# define ossl_assert(x) ((x) != 0)
+#else
+__owur static ossl_inline int ossl_assert_int(int expr, const char *exprstr,
+                                              const char *file, int line)
+{
+    if (!expr)
+        OPENSSL_die(exprstr, file, line);
+
+    return expr;
+}
+
+# define ossl_assert(x) ossl_assert_int((x) != 0, "Assertion failed: "#x, \
+                                         __FILE__, __LINE__)
+
+#endif
+
+typedef struct ex_callback_st EX_CALLBACK;
+
+DEFINE_STACK_OF(EX_CALLBACK)
+
+typedef struct app_mem_info_st APP_INFO;
+
+typedef struct mem_st MEM;
+DEFINE_LHASH_OF(MEM);
+
+# define OPENSSL_CONF             "openssl.cnf"
+
+# ifndef OPENSSL_SYS_VMS
+#  define X509_CERT_AREA          OPENSSLDIR
+#  define X509_CERT_DIR           OPENSSLDIR "/certs"
+#  define X509_CERT_FILE          OPENSSLDIR "/cert.pem"
+#  define X509_PRIVATE_DIR        OPENSSLDIR "/private"
+#  define CTLOG_FILE              OPENSSLDIR "/ct_log_list.cnf"
+# else
+#  define X509_CERT_AREA          "OSSL$DATAROOT:[000000]"
+#  define X509_CERT_DIR           "OSSL$DATAROOT:[CERTS]"
+#  define X509_CERT_FILE          "OSSL$DATAROOT:[000000]cert.pem"
+#  define X509_PRIVATE_DIR        "OSSL$DATAROOT:[PRIVATE]"
+#  define CTLOG_FILE              "OSSL$DATAROOT:[000000]ct_log_list.cnf"
+# endif
+
+# define X509_CERT_DIR_EVP        "SSL_CERT_DIR"
+# define X509_CERT_FILE_EVP       "SSL_CERT_FILE"
+# define CTLOG_FILE_EVP           "CTLOG_FILE"
+
+/* size of string representations */
+# define DECIMAL_SIZE(type)      ((sizeof(type)*8+2)/3+1)
+# define HEX_SIZE(type)          (sizeof(type)*2)
+
+void OPENSSL_cpuid_setup(void);
+extern unsigned int OPENSSL_ia32cap_P[];
+void OPENSSL_showfatal(const char *fmta, ...);
+void crypto_cleanup_all_ex_data_int(void);
+int openssl_init_fork_handlers(void);
+
+char *ossl_safe_getenv(const char *name);
+
+extern CRYPTO_RWLOCK *memdbg_lock;
+int openssl_strerror_r(int errnum, char *buf, size_t buflen);
+# if !defined(OPENSSL_NO_STDIO)
+FILE *openssl_fopen(const char *filename, const char *mode);
+# else
+void *openssl_fopen(const char *filename, const char *mode);
+# endif
+
+uint32_t OPENSSL_rdtsc(void);
+size_t OPENSSL_instrument_bus(unsigned int *, size_t);
+size_t OPENSSL_instrument_bus2(unsigned int *, size_t, size_t);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/dane.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/dane.h
new file mode 100644
index 000000000..a1cb5488b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/dane.h
@@ -0,0 +1,103 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_INTERNAL_DANE_H
+#define HEADER_INTERNAL_DANE_H
+
+#include <openssl/safestack.h>
+
+/*-
+ * Certificate usages:
+ * https://tools.ietf.org/html/rfc6698#section-2.1.1
+ */
+#define DANETLS_USAGE_PKIX_TA   0
+#define DANETLS_USAGE_PKIX_EE   1
+#define DANETLS_USAGE_DANE_TA   2
+#define DANETLS_USAGE_DANE_EE   3
+#define DANETLS_USAGE_LAST      DANETLS_USAGE_DANE_EE
+
+/*-
+ * Selectors:
+ * https://tools.ietf.org/html/rfc6698#section-2.1.2
+ */
+#define DANETLS_SELECTOR_CERT   0
+#define DANETLS_SELECTOR_SPKI   1
+#define DANETLS_SELECTOR_LAST   DANETLS_SELECTOR_SPKI
+
+/*-
+ * Matching types:
+ * https://tools.ietf.org/html/rfc6698#section-2.1.3
+ */
+#define DANETLS_MATCHING_FULL   0
+#define DANETLS_MATCHING_2256   1
+#define DANETLS_MATCHING_2512   2
+#define DANETLS_MATCHING_LAST   DANETLS_MATCHING_2512
+
+typedef struct danetls_record_st {
+    uint8_t usage;
+    uint8_t selector;
+    uint8_t mtype;
+    unsigned char *data;
+    size_t dlen;
+    EVP_PKEY *spki;
+} danetls_record;
+
+DEFINE_STACK_OF(danetls_record)
+
+/*
+ * Shared DANE context
+ */
+struct dane_ctx_st {
+    const EVP_MD  **mdevp;      /* mtype -> digest */
+    uint8_t        *mdord;      /* mtype -> preference */
+    uint8_t         mdmax;      /* highest supported mtype */
+    unsigned long   flags;      /* feature bitmask */
+};
+
+/*
+ * Per connection DANE state
+ */
+struct ssl_dane_st {
+    struct dane_ctx_st *dctx;
+    STACK_OF(danetls_record) *trecs;
+    STACK_OF(X509) *certs;      /* DANE-TA(2) Cert(0) Full(0) certs */
+    danetls_record *mtlsa;      /* Matching TLSA record */
+    X509           *mcert;      /* DANE matched cert */
+    uint32_t        umask;      /* Usages present */
+    int             mdpth;      /* Depth of matched cert */
+    int             pdpth;      /* Depth of PKIX trust */
+    unsigned long   flags;      /* feature bitmask */
+};
+
+#define DANETLS_ENABLED(dane)  \
+    ((dane) != NULL && sk_danetls_record_num((dane)->trecs) > 0)
+
+#define DANETLS_USAGE_BIT(u)   (((uint32_t)1) << u)
+
+#define DANETLS_PKIX_TA_MASK (DANETLS_USAGE_BIT(DANETLS_USAGE_PKIX_TA))
+#define DANETLS_PKIX_EE_MASK (DANETLS_USAGE_BIT(DANETLS_USAGE_PKIX_EE))
+#define DANETLS_DANE_TA_MASK (DANETLS_USAGE_BIT(DANETLS_USAGE_DANE_TA))
+#define DANETLS_DANE_EE_MASK (DANETLS_USAGE_BIT(DANETLS_USAGE_DANE_EE))
+
+#define DANETLS_PKIX_MASK (DANETLS_PKIX_TA_MASK | DANETLS_PKIX_EE_MASK)
+#define DANETLS_DANE_MASK (DANETLS_DANE_TA_MASK | DANETLS_DANE_EE_MASK)
+#define DANETLS_TA_MASK (DANETLS_PKIX_TA_MASK | DANETLS_DANE_TA_MASK)
+#define DANETLS_EE_MASK (DANETLS_PKIX_EE_MASK | DANETLS_DANE_EE_MASK)
+
+#define DANETLS_HAS_PKIX(dane) ((dane) && ((dane)->umask & DANETLS_PKIX_MASK))
+#define DANETLS_HAS_DANE(dane) ((dane) && ((dane)->umask & DANETLS_DANE_MASK))
+#define DANETLS_HAS_TA(dane)   ((dane) && ((dane)->umask & DANETLS_TA_MASK))
+#define DANETLS_HAS_EE(dane)   ((dane) && ((dane)->umask & DANETLS_EE_MASK))
+
+#define DANETLS_HAS_PKIX_TA(dane) ((dane)&&((dane)->umask & DANETLS_PKIX_TA_MASK))
+#define DANETLS_HAS_PKIX_EE(dane) ((dane)&&((dane)->umask & DANETLS_PKIX_EE_MASK))
+#define DANETLS_HAS_DANE_TA(dane) ((dane)&&((dane)->umask & DANETLS_DANE_TA_MASK))
+#define DANETLS_HAS_DANE_EE(dane) ((dane)&&((dane)->umask & DANETLS_DANE_EE_MASK))
+
+#endif /* HEADER_INTERNAL_DANE_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/dso.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/dso.h
new file mode 100644
index 000000000..eb5f7d53c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/dso.h
@@ -0,0 +1,165 @@
+/*
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_DSO_H
+# define HEADER_DSO_H
+
+# include <openssl/crypto.h>
+# include "internal/dsoerr.h"
+
+/* These values are used as commands to DSO_ctrl() */
+# define DSO_CTRL_GET_FLAGS      1
+# define DSO_CTRL_SET_FLAGS      2
+# define DSO_CTRL_OR_FLAGS       3
+
+/*
+ * By default, DSO_load() will translate the provided filename into a form
+ * typical for the platform using the dso_name_converter function of the
+ * method. Eg. win32 will transform "blah" into "blah.dll", and dlfcn will
+ * transform it into "libblah.so". This callback could even utilise the
+ * DSO_METHOD's converter too if it only wants to override behaviour for
+ * one or two possible DSO methods. However, the following flag can be
+ * set in a DSO to prevent *any* native name-translation at all - eg. if
+ * the caller has prompted the user for a path to a driver library so the
+ * filename should be interpreted as-is.
+ */
+# define DSO_FLAG_NO_NAME_TRANSLATION            0x01
+/*
+ * An extra flag to give if only the extension should be added as
+ * translation.  This is obviously only of importance on Unix and other
+ * operating systems where the translation also may prefix the name with
+ * something, like 'lib', and ignored everywhere else. This flag is also
+ * ignored if DSO_FLAG_NO_NAME_TRANSLATION is used at the same time.
+ */
+# define DSO_FLAG_NAME_TRANSLATION_EXT_ONLY      0x02
+
+/*
+ * Don't unload the DSO when we call DSO_free()
+ */
+# define DSO_FLAG_NO_UNLOAD_ON_FREE              0x04
+
+/*
+ * This flag loads the library with public symbols. Meaning: The exported
+ * symbols of this library are public to all libraries loaded after this
+ * library. At the moment only implemented in unix.
+ */
+# define DSO_FLAG_GLOBAL_SYMBOLS                 0x20
+
+typedef void (*DSO_FUNC_TYPE) (void);
+
+typedef struct dso_st DSO;
+typedef struct dso_meth_st DSO_METHOD;
+
+/*
+ * The function prototype used for method functions (or caller-provided
+ * callbacks) that transform filenames. They are passed a DSO structure
+ * pointer (or NULL if they are to be used independently of a DSO object) and
+ * a filename to transform. They should either return NULL (if there is an
+ * error condition) or a newly allocated string containing the transformed
+ * form that the caller will need to free with OPENSSL_free() when done.
+ */
+typedef char *(*DSO_NAME_CONVERTER_FUNC)(DSO *, const char *);
+/*
+ * The function prototype used for method functions (or caller-provided
+ * callbacks) that merge two file specifications. They are passed a DSO
+ * structure pointer (or NULL if they are to be used independently of a DSO
+ * object) and two file specifications to merge. They should either return
+ * NULL (if there is an error condition) or a newly allocated string
+ * containing the result of merging that the caller will need to free with
+ * OPENSSL_free() when done. Here, merging means that bits and pieces are
+ * taken from each of the file specifications and added together in whatever
+ * fashion that is sensible for the DSO method in question.  The only rule
+ * that really applies is that if the two specification contain pieces of the
+ * same type, the copy from the first string takes priority.  One could see
+ * it as the first specification is the one given by the user and the second
+ * being a bunch of defaults to add on if they're missing in the first.
+ */
+typedef char *(*DSO_MERGER_FUNC)(DSO *, const char *, const char *);
+
+DSO *DSO_new(void);
+int DSO_free(DSO *dso);
+int DSO_flags(DSO *dso);
+int DSO_up_ref(DSO *dso);
+long DSO_ctrl(DSO *dso, int cmd, long larg, void *parg);
+
+/*
+ * These functions can be used to get/set the platform-independent filename
+ * used for a DSO. NB: set will fail if the DSO is already loaded.
+ */
+const char *DSO_get_filename(DSO *dso);
+int DSO_set_filename(DSO *dso, const char *filename);
+/*
+ * This function will invoke the DSO's name_converter callback to translate a
+ * filename, or if the callback isn't set it will instead use the DSO_METHOD's
+ * converter. If "filename" is NULL, the "filename" in the DSO itself will be
+ * used. If the DSO_FLAG_NO_NAME_TRANSLATION flag is set, then the filename is
+ * simply duplicated. NB: This function is usually called from within a
+ * DSO_METHOD during the processing of a DSO_load() call, and is exposed so
+ * that caller-created DSO_METHODs can do the same thing. A non-NULL return
+ * value will need to be OPENSSL_free()'d.
+ */
+char *DSO_convert_filename(DSO *dso, const char *filename);
+/*
+ * This function will invoke the DSO's merger callback to merge two file
+ * specifications, or if the callback isn't set it will instead use the
+ * DSO_METHOD's merger.  A non-NULL return value will need to be
+ * OPENSSL_free()'d.
+ */
+char *DSO_merge(DSO *dso, const char *filespec1, const char *filespec2);
+
+/*
+ * The all-singing all-dancing load function, you normally pass NULL for the
+ * first and third parameters. Use DSO_up_ref and DSO_free for subsequent
+ * reference count handling. Any flags passed in will be set in the
+ * constructed DSO after its init() function but before the load operation.
+ * If 'dso' is non-NULL, 'flags' is ignored.
+ */
+DSO *DSO_load(DSO *dso, const char *filename, DSO_METHOD *meth, int flags);
+
+/* This function binds to a function inside a shared library. */
+DSO_FUNC_TYPE DSO_bind_func(DSO *dso, const char *symname);
+
+/*
+ * This method is the default, but will beg, borrow, or steal whatever method
+ * should be the default on any particular platform (including
+ * DSO_METH_null() if necessary).
+ */
+DSO_METHOD *DSO_METHOD_openssl(void);
+
+/*
+ * This function writes null-terminated pathname of DSO module containing
+ * 'addr' into 'sz' large caller-provided 'path' and returns the number of
+ * characters [including trailing zero] written to it. If 'sz' is 0 or
+ * negative, 'path' is ignored and required amount of characters [including
+ * trailing zero] to accommodate pathname is returned. If 'addr' is NULL, then
+ * pathname of cryptolib itself is returned. Negative or zero return value
+ * denotes error.
+ */
+int DSO_pathbyaddr(void *addr, char *path, int sz);
+
+/*
+ * Like DSO_pathbyaddr() but instead returns a handle to the DSO for the symbol
+ * or NULL on error.
+ */
+DSO *DSO_dsobyaddr(void *addr, int flags);
+
+/*
+ * This function should be used with caution! It looks up symbols in *all*
+ * loaded modules and if module gets unloaded by somebody else attempt to
+ * dereference the pointer is doomed to have fatal consequences. Primary
+ * usage for this function is to probe *core* system functionality, e.g.
+ * check if getnameinfo(3) is available at run-time without bothering about
+ * OS-specific details such as libc.so.versioning or where does it actually
+ * reside: in libc itself or libsocket.
+ */
+void *DSO_global_lookup(const char *name);
+
+int ERR_load_DSO_strings(void);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/dsoerr.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/dsoerr.h
new file mode 100644
index 000000000..a54a18545
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/dsoerr.h
@@ -0,0 +1,83 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_DSOERR_H
+# define HEADER_DSOERR_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_DSO
+
+#  ifdef  __cplusplus
+extern "C"
+#  endif
+int ERR_load_DSO_strings(void);
+
+/*
+ * DSO function codes.
+ */
+#  define DSO_F_DLFCN_BIND_FUNC                            100
+#  define DSO_F_DLFCN_LOAD                                 102
+#  define DSO_F_DLFCN_MERGER                               130
+#  define DSO_F_DLFCN_NAME_CONVERTER                       123
+#  define DSO_F_DLFCN_UNLOAD                               103
+#  define DSO_F_DL_BIND_FUNC                               104
+#  define DSO_F_DL_LOAD                                    106
+#  define DSO_F_DL_MERGER                                  131
+#  define DSO_F_DL_NAME_CONVERTER                          124
+#  define DSO_F_DL_UNLOAD                                  107
+#  define DSO_F_DSO_BIND_FUNC                              108
+#  define DSO_F_DSO_CONVERT_FILENAME                       126
+#  define DSO_F_DSO_CTRL                                   110
+#  define DSO_F_DSO_FREE                                   111
+#  define DSO_F_DSO_GET_FILENAME                           127
+#  define DSO_F_DSO_GLOBAL_LOOKUP                          139
+#  define DSO_F_DSO_LOAD                                   112
+#  define DSO_F_DSO_MERGE                                  132
+#  define DSO_F_DSO_NEW_METHOD                             113
+#  define DSO_F_DSO_PATHBYADDR                             105
+#  define DSO_F_DSO_SET_FILENAME                           129
+#  define DSO_F_DSO_UP_REF                                 114
+#  define DSO_F_VMS_BIND_SYM                               115
+#  define DSO_F_VMS_LOAD                                   116
+#  define DSO_F_VMS_MERGER                                 133
+#  define DSO_F_VMS_UNLOAD                                 117
+#  define DSO_F_WIN32_BIND_FUNC                            101
+#  define DSO_F_WIN32_GLOBALLOOKUP                         142
+#  define DSO_F_WIN32_JOINER                               135
+#  define DSO_F_WIN32_LOAD                                 120
+#  define DSO_F_WIN32_MERGER                               134
+#  define DSO_F_WIN32_NAME_CONVERTER                       125
+#  define DSO_F_WIN32_PATHBYADDR                           109
+#  define DSO_F_WIN32_SPLITTER                             136
+#  define DSO_F_WIN32_UNLOAD                               121
+
+/*
+ * DSO reason codes.
+ */
+#  define DSO_R_CTRL_FAILED                                100
+#  define DSO_R_DSO_ALREADY_LOADED                         110
+#  define DSO_R_EMPTY_FILE_STRUCTURE                       113
+#  define DSO_R_FAILURE                                    114
+#  define DSO_R_FILENAME_TOO_BIG                           101
+#  define DSO_R_FINISH_FAILED                              102
+#  define DSO_R_INCORRECT_FILE_SYNTAX                      115
+#  define DSO_R_LOAD_FAILED                                103
+#  define DSO_R_NAME_TRANSLATION_FAILED                    109
+#  define DSO_R_NO_FILENAME                                111
+#  define DSO_R_NULL_HANDLE                                104
+#  define DSO_R_SET_FILENAME_FAILED                        112
+#  define DSO_R_STACK_ERROR                                105
+#  define DSO_R_SYM_FAILURE                                106
+#  define DSO_R_UNLOAD_FAILED                              107
+#  define DSO_R_UNSUPPORTED                                108
+
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/err.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/err.h
new file mode 100644
index 000000000..d46b8bdb2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/err.h
@@ -0,0 +1,15 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef INTERNAL_ERR_H
+# define INTERNAL_ERR_H
+
+void err_free_strings_int(void);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/nelem.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/nelem.h
new file mode 100644
index 000000000..d65a21a9f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/nelem.h
@@ -0,0 +1,14 @@
+/*
+ * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_NELEM_H
+# define HEADER_NELEM_H
+
+# define OSSL_NELEM(x)    (sizeof(x)/sizeof((x)[0]))
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/numbers.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/numbers.h
new file mode 100644
index 000000000..31931df3c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/numbers.h
@@ -0,0 +1,68 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_NUMBERS_H
+# define HEADER_NUMBERS_H
+
+# include <limits.h>
+
+# if (-1 & 3) == 0x03		/* Two's complement */
+
+#  define __MAXUINT__(T) ((T) -1)
+#  define __MAXINT__(T) ((T) ((((T) 1) << ((sizeof(T) * CHAR_BIT) - 1)) ^ __MAXUINT__(T)))
+#  define __MININT__(T) (-__MAXINT__(T) - 1)
+
+# elif (-1 & 3) == 0x02		/* One's complement */
+
+#  define __MAXUINT__(T) (((T) -1) + 1)
+#  define __MAXINT__(T) ((T) ((((T) 1) << ((sizeof(T) * CHAR_BIT) - 1)) ^ __MAXUINT__(T)))
+#  define __MININT__(T) (-__MAXINT__(T))
+
+# elif (-1 & 3) == 0x01		/* Sign/magnitude */
+
+#  define __MAXINT__(T) ((T) (((((T) 1) << ((sizeof(T) * CHAR_BIT) - 2)) - 1) | (((T) 1) << ((sizeof(T) * CHAR_BIT) - 2))))
+#  define __MAXUINT__(T) ((T) (__MAXINT__(T) | (((T) 1) << ((sizeof(T) * CHAR_BIT) - 1))))
+#  define __MININT__(T) (-__MAXINT__(T))
+
+# else
+
+#  error "do not know the integer encoding on this architecture"
+
+# endif
+
+# ifndef INT8_MAX
+#  define INT8_MIN __MININT__(int8_t)
+#  define INT8_MAX __MAXINT__(int8_t)
+#  define UINT8_MAX __MAXUINT__(uint8_t)
+# endif
+
+# ifndef INT16_MAX
+#  define INT16_MIN __MININT__(int16_t)
+#  define INT16_MAX __MAXINT__(int16_t)
+#  define UINT16_MAX __MAXUINT__(uint16_t)
+# endif
+
+# ifndef INT32_MAX
+#  define INT32_MIN __MININT__(int32_t)
+#  define INT32_MAX __MAXINT__(int32_t)
+#  define UINT32_MAX __MAXUINT__(uint32_t)
+# endif
+
+# ifndef INT64_MAX
+#  define INT64_MIN __MININT__(int64_t)
+#  define INT64_MAX __MAXINT__(int64_t)
+#  define UINT64_MAX __MAXUINT__(uint64_t)
+# endif
+
+# ifndef SIZE_MAX
+#  define SIZE_MAX __MAXUINT__(size_t)
+# endif
+
+#endif
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/o_dir.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/o_dir.h
new file mode 100644
index 000000000..e7b55e0c1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/o_dir.h
@@ -0,0 +1,52 @@
+/*
+ * Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file is dual-licensed and is also available under the following
+ * terms:
+ *
+ * Copyright (c) 2004, Richard Levitte <richard@levitte.org>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ */
+
+#ifndef O_DIR_H
+# define O_DIR_H
+
+typedef struct OPENSSL_dir_context_st OPENSSL_DIR_CTX;
+
+/*
+ * returns NULL on error or end-of-directory. If it is end-of-directory,
+ * errno will be zero
+ */
+const char *OPENSSL_DIR_read(OPENSSL_DIR_CTX **ctx, const char *directory);
+/* returns 1 on success, 0 on error */
+int OPENSSL_DIR_end(OPENSSL_DIR_CTX **ctx);
+
+#endif                          /* LPDIR_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/o_str.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/o_str.h
new file mode 100644
index 000000000..86403c9ee
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/o_str.h
@@ -0,0 +1,17 @@
+/*
+ * Copyright 2003-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_O_STR_H
+# define HEADER_O_STR_H
+
+# include <stddef.h>            /* to get size_t */
+
+int OPENSSL_memcmp(const void *p1, const void *p2, size_t n);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/refcount.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/refcount.h
new file mode 100644
index 000000000..75d70a641
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/refcount.h
@@ -0,0 +1,140 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+#ifndef HEADER_INTERNAL_REFCOUNT_H
+# define HEADER_INTERNAL_REFCOUNT_H
+
+/* Used to checking reference counts, most while doing perl5 stuff :-) */
+# if defined(OPENSSL_NO_STDIO)
+#  if defined(REF_PRINT)
+#   error "REF_PRINT requires stdio"
+#  endif
+# endif
+
+# if defined(__STDC_VERSION__) && __STDC_VERSION__ >= 201112L \
+     && !defined(__STDC_NO_ATOMICS__)
+#  include <stdatomic.h>
+#  define HAVE_C11_ATOMICS
+# endif
+
+# if defined(HAVE_C11_ATOMICS) && defined(ATOMIC_INT_LOCK_FREE) \
+     && ATOMIC_INT_LOCK_FREE > 0
+
+#  define HAVE_ATOMICS 1
+
+typedef _Atomic int CRYPTO_REF_COUNT;
+
+static inline int CRYPTO_UP_REF(_Atomic int *val, int *ret, void *lock)
+{
+    *ret = atomic_fetch_add_explicit(val, 1, memory_order_relaxed) + 1;
+    return 1;
+}
+
+/*
+ * Changes to shared structure other than reference counter have to be
+ * serialized. And any kind of serialization implies a release fence. This
+ * means that by the time reference counter is decremented all other
+ * changes are visible on all processors. Hence decrement itself can be
+ * relaxed. In case it hits zero, object will be destructed. Since it's
+ * last use of the object, destructor programmer might reason that access
+ * to mutable members doesn't have to be serialized anymore, which would
+ * otherwise imply an acquire fence. Hence conditional acquire fence...
+ */
+static inline int CRYPTO_DOWN_REF(_Atomic int *val, int *ret, void *lock)
+{
+    *ret = atomic_fetch_sub_explicit(val, 1, memory_order_relaxed) - 1;
+    if (*ret == 0)
+        atomic_thread_fence(memory_order_acquire);
+    return 1;
+}
+
+# elif defined(__GNUC__) && defined(__ATOMIC_RELAXED) && __GCC_ATOMIC_INT_LOCK_FREE > 0
+
+#  define HAVE_ATOMICS 1
+
+typedef int CRYPTO_REF_COUNT;
+
+static __inline__ int CRYPTO_UP_REF(int *val, int *ret, void *lock)
+{
+    *ret = __atomic_fetch_add(val, 1, __ATOMIC_RELAXED) + 1;
+    return 1;
+}
+
+static __inline__ int CRYPTO_DOWN_REF(int *val, int *ret, void *lock)
+{
+    *ret = __atomic_fetch_sub(val, 1, __ATOMIC_RELAXED) - 1;
+    if (*ret == 0)
+        __atomic_thread_fence(__ATOMIC_ACQUIRE);
+    return 1;
+}
+
+# elif defined(_MSC_VER) && _MSC_VER>=1200
+
+#  define HAVE_ATOMICS 1
+
+typedef volatile int CRYPTO_REF_COUNT;
+
+#  if (defined(_M_ARM) && _M_ARM>=7) || defined(_M_ARM64)
+#   include <intrin.h>
+#   if defined(_M_ARM64) && !defined(_ARM_BARRIER_ISH)
+#    define _ARM_BARRIER_ISH _ARM64_BARRIER_ISH
+#   endif
+
+static __inline int CRYPTO_UP_REF(volatile int *val, int *ret, void *lock)
+{
+    *ret = _InterlockedExchangeAdd_nf(val, 1) + 1;
+    return 1;
+}
+
+static __inline int CRYPTO_DOWN_REF(volatile int *val, int *ret, void *lock)
+{
+    *ret = _InterlockedExchangeAdd_nf(val, -1) - 1;
+    if (*ret == 0)
+        __dmb(_ARM_BARRIER_ISH);
+    return 1;
+}
+#  else
+#   pragma intrinsic(_InterlockedExchangeAdd)
+
+static __inline int CRYPTO_UP_REF(volatile int *val, int *ret, void *lock)
+{
+    *ret = _InterlockedExchangeAdd(val, 1) + 1;
+    return 1;
+}
+
+static __inline int CRYPTO_DOWN_REF(volatile int *val, int *ret, void *lock)
+{
+    *ret = _InterlockedExchangeAdd(val, -1) - 1;
+    return 1;
+}
+#  endif
+
+# else
+
+typedef int CRYPTO_REF_COUNT;
+
+# define CRYPTO_UP_REF(val, ret, lock) CRYPTO_atomic_add(val, 1, ret, lock)
+# define CRYPTO_DOWN_REF(val, ret, lock) CRYPTO_atomic_add(val, -1, ret, lock)
+
+# endif
+
+# if !defined(NDEBUG) && !defined(OPENSSL_NO_STDIO)
+#  define REF_ASSERT_ISNT(test) \
+    (void)((test) ? (OPENSSL_die("refcount error", __FILE__, __LINE__), 1) : 0)
+# else
+#  define REF_ASSERT_ISNT(i)
+# endif
+
+# ifdef REF_PRINT
+#  define REF_PRINT_COUNT(a, b) \
+        fprintf(stderr, "%p:%4d:%s\n", b, b->references, a)
+# else
+#  define REF_PRINT_COUNT(a, b)
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/sockets.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/sockets.h
new file mode 100644
index 000000000..5bb0355f0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/sockets.h
@@ -0,0 +1,155 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+
+#ifndef HEADER_INTERNAL_SOCKETS
+# define HEADER_INTERNAL_SOCKETS
+
+# if defined(OPENSSL_SYS_VXWORKS) || defined(OPENSSL_SYS_UEFI)
+#  define NO_SYS_PARAM_H
+# endif
+# ifdef WIN32
+#  define NO_SYS_UN_H
+# endif
+# ifdef OPENSSL_SYS_VMS
+#  define NO_SYS_PARAM_H
+#  define NO_SYS_UN_H
+# endif
+
+# ifdef OPENSSL_NO_SOCK
+
+# elif defined(OPENSSL_SYS_WINDOWS) || defined(OPENSSL_SYS_MSDOS)
+#  if defined(__DJGPP__)
+#   include <sys/socket.h>
+#   include <sys/un.h>
+#   include <tcp.h>
+#   include <netdb.h>
+#  elif defined(_WIN32_WCE) && _WIN32_WCE<410
+#   define getservbyname _masked_declaration_getservbyname
+#  endif
+#  if !defined(IPPROTO_IP)
+    /* winsock[2].h was included already? */
+#   include <winsock.h>
+#  endif
+#  ifdef getservbyname
+     /* this is used to be wcecompat/include/winsock_extras.h */
+#   undef getservbyname
+struct servent *PASCAL getservbyname(const char *, const char *);
+#  endif
+
+#  ifdef _WIN64
+/*
+ * Even though sizeof(SOCKET) is 8, it's safe to cast it to int, because
+ * the value constitutes an index in per-process table of limited size
+ * and not a real pointer. And we also depend on fact that all processors
+ * Windows run on happen to be two's-complement, which allows to
+ * interchange INVALID_SOCKET and -1.
+ */
+#   define socket(d,t,p)   ((int)socket(d,t,p))
+#   define accept(s,f,l)   ((int)accept(s,f,l))
+#  endif
+
+# else
+
+#  ifndef NO_SYS_PARAM_H
+#   include <sys/param.h>
+#  endif
+#  ifdef OPENSSL_SYS_VXWORKS
+#   include <time.h>
+#  endif
+
+#  include <netdb.h>
+#  if defined(OPENSSL_SYS_VMS_NODECC)
+#   include <socket.h>
+#   include <in.h>
+#   include <inet.h>
+#  else
+#   include <sys/socket.h>
+#   ifndef NO_SYS_UN_H
+#    include <sys/un.h>
+#    ifndef UNIX_PATH_MAX
+#     define UNIX_PATH_MAX sizeof(((struct sockaddr_un *)NULL)->sun_path)
+#    endif
+#   endif
+#   ifdef FILIO_H
+#    include <sys/filio.h> /* FIONBIO in some SVR4, e.g. unixware, solaris */
+#   endif
+#   include <netinet/in.h>
+#   include <arpa/inet.h>
+#   include <netinet/tcp.h>
+#  endif
+
+#  ifdef OPENSSL_SYS_AIX
+#   include <sys/select.h>
+#  endif
+
+#  ifndef VMS
+#   include <sys/ioctl.h>
+#  else
+#   if !defined(TCPIP_TYPE_SOCKETSHR) && defined(__VMS_VER) && (__VMS_VER > 70000000)
+     /* ioctl is only in VMS > 7.0 and when socketshr is not used */
+#    include <sys/ioctl.h>
+#   endif
+#   include <unixio.h>
+#   if defined(TCPIP_TYPE_SOCKETSHR)
+#    include <socketshr.h>
+#   endif
+#  endif
+
+#  ifndef INVALID_SOCKET
+#   define INVALID_SOCKET      (-1)
+#  endif
+# endif
+
+/*
+ * Some IPv6 implementations are broken, you can disable them in known
+ * bad versions.
+ */
+# if !defined(OPENSSL_USE_IPV6)
+#  if defined(AF_INET6)
+#   define OPENSSL_USE_IPV6 1
+#  else
+#   define OPENSSL_USE_IPV6 0
+#  endif
+# endif
+
+# define get_last_socket_error() errno
+# define clear_socket_error()    errno=0
+
+# if defined(OPENSSL_SYS_WINDOWS)
+#  undef get_last_socket_error
+#  undef clear_socket_error
+#  define get_last_socket_error() WSAGetLastError()
+#  define clear_socket_error()    WSASetLastError(0)
+#  define readsocket(s,b,n)       recv((s),(b),(n),0)
+#  define writesocket(s,b,n)      send((s),(b),(n),0)
+# elif defined(__DJGPP__)
+#  define WATT32
+#  define WATT32_NO_OLDIES
+#  define closesocket(s)          close_s(s)
+#  define readsocket(s,b,n)       read_s(s,b,n)
+#  define writesocket(s,b,n)      send(s,b,n,0)
+# elif defined(OPENSSL_SYS_VMS)
+#  define ioctlsocket(a,b,c)      ioctl(a,b,c)
+#  define closesocket(s)          close(s)
+#  define readsocket(s,b,n)       recv((s),(b),(n),0)
+#  define writesocket(s,b,n)      send((s),(b),(n),0)
+# elif defined(OPENSSL_SYS_VXWORKS)
+#  define ioctlsocket(a,b,c)          ioctl((a),(b),(int)(c))
+#  define closesocket(s)              close(s)
+#  define readsocket(s,b,n)           read((s),(b),(n))
+#  define writesocket(s,b,n)          write((s),(char *)(b),(n))
+# else
+#  define ioctlsocket(a,b,c)      ioctl(a,b,c)
+#  define closesocket(s)          close(s)
+#  define readsocket(s,b,n)       read((s),(b),(n))
+#  define writesocket(s,b,n)      write((s),(b),(n))
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/sslconf.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/sslconf.h
new file mode 100644
index 000000000..d538f8614
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/sslconf.h
@@ -0,0 +1,20 @@
+/*
+ * Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_SSLCONF_H
+# define HEADER_SSLCONF_H
+
+typedef struct ssl_conf_cmd_st SSL_CONF_CMD;
+
+const SSL_CONF_CMD *conf_ssl_get(size_t idx, const char **name, size_t *cnt);
+int conf_ssl_name_find(const char *name, size_t *idx);
+void conf_ssl_get_cmd(const SSL_CONF_CMD *cmd, size_t idx, char **cmdstr,
+                      char **arg);
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/thread_once.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/thread_once.h
new file mode 100644
index 000000000..8a25d04d2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/thread_once.h
@@ -0,0 +1,137 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/crypto.h>
+
+/*
+ * DEFINE_RUN_ONCE: Define an initialiser function that should be run exactly
+ * once. It takes no arguments and returns and int result (1 for success or
+ * 0 for failure). Typical usage might be:
+ *
+ * DEFINE_RUN_ONCE(myinitfunc)
+ * {
+ *     do_some_initialisation();
+ *     if (init_is_successful())
+ *         return 1;
+ *
+ *     return 0;
+ * }
+ */
+#define DEFINE_RUN_ONCE(init)                   \
+    static int init(void);                     \
+    int init##_ossl_ret_ = 0;                   \
+    void init##_ossl_(void)                     \
+    {                                           \
+        init##_ossl_ret_ = init();              \
+    }                                           \
+    static int init(void)
+
+/*
+ * DECLARE_RUN_ONCE: Declare an initialiser function that should be run exactly
+ * once that has been defined in another file via DEFINE_RUN_ONCE().
+ */
+#define DECLARE_RUN_ONCE(init)                  \
+    extern int init##_ossl_ret_;                \
+    void init##_ossl_(void);
+
+/*
+ * DEFINE_RUN_ONCE_STATIC: Define an initialiser function that should be run
+ * exactly once. This function will be declared as static within the file. It
+ * takes no arguments and returns and int result (1 for success or 0 for
+ * failure). Typical usage might be:
+ *
+ * DEFINE_RUN_ONCE_STATIC(myinitfunc)
+ * {
+ *     do_some_initialisation();
+ *     if (init_is_successful())
+ *         return 1;
+ *
+ *     return 0;
+ * }
+ */
+#define DEFINE_RUN_ONCE_STATIC(init)            \
+    static int init(void);                     \
+    static int init##_ossl_ret_ = 0;            \
+    static void init##_ossl_(void)              \
+    {                                           \
+        init##_ossl_ret_ = init();              \
+    }                                           \
+    static int init(void)
+
+/*
+ * DEFINE_RUN_ONCE_STATIC_ALT: Define an alternative initialiser function. This
+ * function will be declared as static within the file. It takes no arguments
+ * and returns an int result (1 for success or 0 for failure). An alternative
+ * initialiser function is expected to be associated with a primary initialiser
+ * function defined via DEFINE_ONCE_STATIC where both functions use the same
+ * CRYPTO_ONCE object to synchronise. Where an alternative initialiser function
+ * is used only one of the primary or the alternative initialiser function will
+ * ever be called - and that function will be called exactly once. Definitition
+ * of an alternative initialiser function MUST occur AFTER the definition of the
+ * primary initialiser function.
+ *
+ * Typical usage might be:
+ *
+ * DEFINE_RUN_ONCE_STATIC(myinitfunc)
+ * {
+ *     do_some_initialisation();
+ *     if (init_is_successful())
+ *         return 1;
+ *
+ *     return 0;
+ * }
+ *
+ * DEFINE_RUN_ONCE_STATIC_ALT(myaltinitfunc, myinitfunc)
+ * {
+ *     do_some_alternative_initialisation();
+ *     if (init_is_successful())
+ *         return 1;
+ *
+ *     return 0;
+ * }
+ */
+#define DEFINE_RUN_ONCE_STATIC_ALT(initalt, init) \
+    static int initalt(void);                     \
+    static void initalt##_ossl_(void)             \
+    {                                             \
+        init##_ossl_ret_ = initalt();             \
+    }                                             \
+    static int initalt(void)
+
+/*
+ * RUN_ONCE - use CRYPTO_THREAD_run_once, and check if the init succeeded
+ * @once: pointer to static object of type CRYPTO_ONCE
+ * @init: function name that was previously given to DEFINE_RUN_ONCE,
+ *        DEFINE_RUN_ONCE_STATIC or DECLARE_RUN_ONCE.  This function
+ *        must return 1 for success or 0 for failure.
+ *
+ * The return value is 1 on success (*) or 0 in case of error.
+ *
+ * (*) by convention, since the init function must return 1 on success.
+ */
+#define RUN_ONCE(once, init)                                            \
+    (CRYPTO_THREAD_run_once(once, init##_ossl_) ? init##_ossl_ret_ : 0)
+
+/*
+ * RUN_ONCE_ALT - use CRYPTO_THREAD_run_once, to run an alternative initialiser
+ *                function and check if that initialisation succeeded
+ * @once:    pointer to static object of type CRYPTO_ONCE
+ * @initalt: alternative initialiser function name that was previously given to
+ *           DEFINE_RUN_ONCE_STATIC_ALT.  This function must return 1 for
+ *           success or 0 for failure.
+ * @init:    primary initialiser function name that was previously given to
+ *           DEFINE_RUN_ONCE_STATIC.  This function must return 1 for success or
+ *           0 for failure.
+ *
+ * The return value is 1 on success (*) or 0 in case of error.
+ *
+ * (*) by convention, since the init function must return 1 on success.
+ */
+#define RUN_ONCE_ALT(once, initalt, init)                               \
+    (CRYPTO_THREAD_run_once(once, initalt##_ossl_) ? init##_ossl_ret_ : 0)
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/internal/tsan_assist.h b/trunk/3rdparty/openssl-1.1-fit/include/internal/tsan_assist.h
new file mode 100644
index 000000000..38ba0c7eb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/internal/tsan_assist.h
@@ -0,0 +1,144 @@
+/*
+ * Copyright 2018-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Contemporary compilers implement lock-free atomic memory access
+ * primitives that facilitate writing "thread-opportunistic" or even real
+ * multi-threading low-overhead code. "Thread-opportunistic" is when
+ * exact result is not required, e.g. some statistics, or execution flow
+ * doesn't have to be unambiguous. Simplest example is lazy "constant"
+ * initialization when one can synchronize on variable itself, e.g.
+ *
+ * if (var == NOT_YET_INITIALIZED)
+ *     var = function_returning_same_value();
+ *
+ * This does work provided that loads and stores are single-instuction
+ * operations (and integer ones are on *all* supported platforms), but
+ * it upsets Thread Sanitizer. Suggested solution is
+ *
+ * if (tsan_load(&var) == NOT_YET_INITIALIZED)
+ *     tsan_store(&var, function_returning_same_value());
+ *
+ * Production machine code would be the same, so one can wonder why
+ * bother. Having Thread Sanitizer accept "thread-opportunistic" code
+ * allows to move on trouble-shooting real bugs.
+ *
+ * Resolving Thread Sanitizer nits was the initial purpose for this module,
+ * but it was later extended with more nuanced primitives that are useful
+ * even in "non-opportunistic" scenarios. Most notably verifying if a shared
+ * structure is fully initialized and bypassing the initialization lock.
+ * It's suggested to view macros defined in this module as "annotations" for
+ * thread-safe lock-free code, "Thread-Safe ANnotations"...
+ *
+ * It's assumed that ATOMIC_{LONG|INT}_LOCK_FREE are assigned same value as
+ * ATOMIC_POINTER_LOCK_FREE. And check for >= 2 ensures that corresponding
+ * code is inlined. It should be noted that statistics counters become
+ * accurate in such case.
+ *
+ * Special note about TSAN_QUALIFIER. It might be undesired to use it in
+ * a shared header. Because whether operation on specific variable or member
+ * is atomic or not might be irrelevant in other modules. In such case one
+ * can use TSAN_QUALIFIER in cast specifically when it has to count.
+ */
+
+#if defined(__STDC_VERSION__) && __STDC_VERSION__ >= 201112L \
+    && !defined(__STDC_NO_ATOMICS__)
+# include <stdatomic.h>
+
+# if defined(ATOMIC_POINTER_LOCK_FREE) \
+          && ATOMIC_POINTER_LOCK_FREE >= 2
+#  define TSAN_QUALIFIER _Atomic
+#  define tsan_load(ptr) atomic_load_explicit((ptr), memory_order_relaxed)
+#  define tsan_store(ptr, val) atomic_store_explicit((ptr), (val), memory_order_relaxed)
+#  define tsan_counter(ptr) atomic_fetch_add_explicit((ptr), 1, memory_order_relaxed)
+#  define tsan_decr(ptr) atomic_fetch_add_explicit((ptr), -1, memory_order_relaxed)
+#  define tsan_ld_acq(ptr) atomic_load_explicit((ptr), memory_order_acquire)
+#  define tsan_st_rel(ptr, val) atomic_store_explicit((ptr), (val), memory_order_release)
+# endif
+
+#elif defined(__GNUC__) && defined(__ATOMIC_RELAXED)
+
+# if defined(__GCC_ATOMIC_POINTER_LOCK_FREE) \
+          && __GCC_ATOMIC_POINTER_LOCK_FREE >= 2
+#  define TSAN_QUALIFIER volatile
+#  define tsan_load(ptr) __atomic_load_n((ptr), __ATOMIC_RELAXED)
+#  define tsan_store(ptr, val) __atomic_store_n((ptr), (val), __ATOMIC_RELAXED)
+#  define tsan_counter(ptr) __atomic_fetch_add((ptr), 1, __ATOMIC_RELAXED)
+#  define tsan_decr(ptr) __atomic_fetch_add((ptr), -1, __ATOMIC_RELAXED)
+#  define tsan_ld_acq(ptr) __atomic_load_n((ptr), __ATOMIC_ACQUIRE)
+#  define tsan_st_rel(ptr, val) __atomic_store_n((ptr), (val), __ATOMIC_RELEASE)
+# endif
+
+#elif defined(_MSC_VER) && _MSC_VER>=1200 \
+      && (defined(_M_IX86) || defined(_M_AMD64) || defined(_M_X64) || \
+          defined(_M_ARM64) || (defined(_M_ARM) && _M_ARM >= 7))
+/*
+ * There is subtle dependency on /volatile:<iso|ms> command-line option.
+ * "ms" implies same semantic as memory_order_acquire for loads and
+ * memory_order_release for stores, while "iso" - memory_order_relaxed for
+ * either. Real complication is that defaults are different on x86 and ARM.
+ * There is explanation for that, "ms" is backward compatible with earlier
+ * compiler versions, while multi-processor ARM can be viewed as brand new
+ * platform to MSC and its users, and with non-relaxed semantic taking toll
+ * with additional instructions and penalties, it kind of makes sense to
+ * default to "iso"...
+ */
+# define TSAN_QUALIFIER volatile
+# if defined(_M_ARM) || defined(_M_ARM64)
+#  define _InterlockedExchangeAdd _InterlockedExchangeAdd_nf
+#  pragma intrinsic(_InterlockedExchangeAdd_nf)
+#  pragma intrinsic(__iso_volatile_load32, __iso_volatile_store32)
+#  ifdef _WIN64
+#   define _InterlockedExchangeAdd64 _InterlockedExchangeAdd64_nf
+#   pragma intrinsic(_InterlockedExchangeAdd64_nf)
+#   pragma intrinsic(__iso_volatile_load64, __iso_volatile_store64)
+#   define tsan_load(ptr) (sizeof(*(ptr)) == 8 ? __iso_volatile_load64(ptr) \
+                                               : __iso_volatile_load32(ptr))
+#   define tsan_store(ptr, val) (sizeof(*(ptr)) == 8 ? __iso_volatile_store64((ptr), (val)) \
+                                                     : __iso_volatile_store32((ptr), (val)))
+#  else
+#   define tsan_load(ptr) __iso_volatile_load32(ptr)
+#   define tsan_store(ptr, val) __iso_volatile_store32((ptr), (val))
+#  endif
+# else
+#  define tsan_load(ptr) (*(ptr))
+#  define tsan_store(ptr, val) (*(ptr) = (val))
+# endif
+# pragma intrinsic(_InterlockedExchangeAdd)
+# ifdef _WIN64
+#  pragma intrinsic(_InterlockedExchangeAdd64)
+#  define tsan_counter(ptr) (sizeof(*(ptr)) == 8 ? _InterlockedExchangeAdd64((ptr), 1) \
+                                                 : _InterlockedExchangeAdd((ptr), 1))
+#  define tsan_decr(ptr) (sizeof(*(ptr)) == 8 ? _InterlockedExchangeAdd64((ptr), -1) \
+                                                 : _InterlockedExchangeAdd((ptr), -1))
+# else
+#  define tsan_counter(ptr) _InterlockedExchangeAdd((ptr), 1)
+#  define tsan_decr(ptr) _InterlockedExchangeAdd((ptr), -1)
+# endif
+# if !defined(_ISO_VOLATILE)
+#  define tsan_ld_acq(ptr) (*(ptr))
+#  define tsan_st_rel(ptr, val) (*(ptr) = (val))
+# endif
+
+#endif
+
+#ifndef TSAN_QUALIFIER
+
+# define TSAN_QUALIFIER volatile
+# define tsan_load(ptr) (*(ptr))
+# define tsan_store(ptr, val) (*(ptr) = (val))
+# define tsan_counter(ptr) ((*(ptr))++)
+# define tsan_decr(ptr) ((*(ptr))--)
+/*
+ * Lack of tsan_ld_acq and tsan_ld_rel means that compiler support is not
+ * sophisticated enough to support them. Code that relies on them should be
+ * protected with #ifdef tsan_ld_acq with locked fallback.
+ */
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/__DECC_INCLUDE_EPILOGUE.H b/trunk/3rdparty/openssl-1.1-fit/include/openssl/__DECC_INCLUDE_EPILOGUE.H
new file mode 100644
index 000000000..c350018ad
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/__DECC_INCLUDE_EPILOGUE.H
@@ -0,0 +1,16 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file is only used by HP C on VMS, and is included automatically
+ * after each header file from this directory
+ */
+
+/* restore state.  Must correspond to the save in __decc_include_prologue.h */
+#pragma names restore
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/__DECC_INCLUDE_PROLOGUE.H b/trunk/3rdparty/openssl-1.1-fit/include/openssl/__DECC_INCLUDE_PROLOGUE.H
new file mode 100644
index 000000000..9a9c777f9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/__DECC_INCLUDE_PROLOGUE.H
@@ -0,0 +1,20 @@
+/*
+ * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * This file is only used by HP C on VMS, and is included automatically
+ * after each header file from this directory
+ */
+
+/* save state */
+#pragma names save
+/* have the compiler shorten symbols larger than 31 chars to 23 chars
+ * followed by a 8 hex char CRC
+ */
+#pragma names as_is,shortened
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/aes.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/aes.h
new file mode 100644
index 000000000..245c552ab
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/aes.h
@@ -0,0 +1,92 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_AES_H
+# define HEADER_AES_H
+
+# include <openssl/opensslconf.h>
+
+# include <stddef.h>
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+# define AES_ENCRYPT     1
+# define AES_DECRYPT     0
+
+/*
+ * Because array size can't be a const in C, the following two are macros.
+ * Both sizes are in bytes.
+ */
+# define AES_MAXNR 14
+# define AES_BLOCK_SIZE 16
+
+/* This should be a hidden type, but EVP requires that the size be known */
+struct aes_key_st {
+# ifdef AES_LONG
+    unsigned long rd_key[4 * (AES_MAXNR + 1)];
+# else
+    unsigned int rd_key[4 * (AES_MAXNR + 1)];
+# endif
+    int rounds;
+};
+typedef struct aes_key_st AES_KEY;
+
+const char *AES_options(void);
+
+int AES_set_encrypt_key(const unsigned char *userKey, const int bits,
+                        AES_KEY *key);
+int AES_set_decrypt_key(const unsigned char *userKey, const int bits,
+                        AES_KEY *key);
+
+void AES_encrypt(const unsigned char *in, unsigned char *out,
+                 const AES_KEY *key);
+void AES_decrypt(const unsigned char *in, unsigned char *out,
+                 const AES_KEY *key);
+
+void AES_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                     const AES_KEY *key, const int enc);
+void AES_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                     size_t length, const AES_KEY *key,
+                     unsigned char *ivec, const int enc);
+void AES_cfb128_encrypt(const unsigned char *in, unsigned char *out,
+                        size_t length, const AES_KEY *key,
+                        unsigned char *ivec, int *num, const int enc);
+void AES_cfb1_encrypt(const unsigned char *in, unsigned char *out,
+                      size_t length, const AES_KEY *key,
+                      unsigned char *ivec, int *num, const int enc);
+void AES_cfb8_encrypt(const unsigned char *in, unsigned char *out,
+                      size_t length, const AES_KEY *key,
+                      unsigned char *ivec, int *num, const int enc);
+void AES_ofb128_encrypt(const unsigned char *in, unsigned char *out,
+                        size_t length, const AES_KEY *key,
+                        unsigned char *ivec, int *num);
+/* NB: the IV is _two_ blocks long */
+void AES_ige_encrypt(const unsigned char *in, unsigned char *out,
+                     size_t length, const AES_KEY *key,
+                     unsigned char *ivec, const int enc);
+/* NB: the IV is _four_ blocks long */
+void AES_bi_ige_encrypt(const unsigned char *in, unsigned char *out,
+                        size_t length, const AES_KEY *key,
+                        const AES_KEY *key2, const unsigned char *ivec,
+                        const int enc);
+
+int AES_wrap_key(AES_KEY *key, const unsigned char *iv,
+                 unsigned char *out,
+                 const unsigned char *in, unsigned int inlen);
+int AES_unwrap_key(AES_KEY *key, const unsigned char *iv,
+                   unsigned char *out,
+                   const unsigned char *in, unsigned int inlen);
+
+
+# ifdef  __cplusplus
+}
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/asn1.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/asn1.h
new file mode 100644
index 000000000..9522eec18
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/asn1.h
@@ -0,0 +1,886 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_ASN1_H
+# define HEADER_ASN1_H
+
+# include <time.h>
+# include <openssl/e_os2.h>
+# include <openssl/opensslconf.h>
+# include <openssl/bio.h>
+# include <openssl/safestack.h>
+# include <openssl/asn1err.h>
+# include <openssl/symhacks.h>
+
+# include <openssl/ossl_typ.h>
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  include <openssl/bn.h>
+# endif
+
+# ifdef OPENSSL_BUILD_SHLIBCRYPTO
+#  undef OPENSSL_EXTERN
+#  define OPENSSL_EXTERN OPENSSL_EXPORT
+# endif
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+# define V_ASN1_UNIVERSAL                0x00
+# define V_ASN1_APPLICATION              0x40
+# define V_ASN1_CONTEXT_SPECIFIC         0x80
+# define V_ASN1_PRIVATE                  0xc0
+
+# define V_ASN1_CONSTRUCTED              0x20
+# define V_ASN1_PRIMITIVE_TAG            0x1f
+# define V_ASN1_PRIMATIVE_TAG /*compat*/ V_ASN1_PRIMITIVE_TAG
+
+# define V_ASN1_APP_CHOOSE               -2/* let the recipient choose */
+# define V_ASN1_OTHER                    -3/* used in ASN1_TYPE */
+# define V_ASN1_ANY                      -4/* used in ASN1 template code */
+
+# define V_ASN1_UNDEF                    -1
+/* ASN.1 tag values */
+# define V_ASN1_EOC                      0
+# define V_ASN1_BOOLEAN                  1 /**/
+# define V_ASN1_INTEGER                  2
+# define V_ASN1_BIT_STRING               3
+# define V_ASN1_OCTET_STRING             4
+# define V_ASN1_NULL                     5
+# define V_ASN1_OBJECT                   6
+# define V_ASN1_OBJECT_DESCRIPTOR        7
+# define V_ASN1_EXTERNAL                 8
+# define V_ASN1_REAL                     9
+# define V_ASN1_ENUMERATED               10
+# define V_ASN1_UTF8STRING               12
+# define V_ASN1_SEQUENCE                 16
+# define V_ASN1_SET                      17
+# define V_ASN1_NUMERICSTRING            18 /**/
+# define V_ASN1_PRINTABLESTRING          19
+# define V_ASN1_T61STRING                20
+# define V_ASN1_TELETEXSTRING            20/* alias */
+# define V_ASN1_VIDEOTEXSTRING           21 /**/
+# define V_ASN1_IA5STRING                22
+# define V_ASN1_UTCTIME                  23
+# define V_ASN1_GENERALIZEDTIME          24 /**/
+# define V_ASN1_GRAPHICSTRING            25 /**/
+# define V_ASN1_ISO64STRING              26 /**/
+# define V_ASN1_VISIBLESTRING            26/* alias */
+# define V_ASN1_GENERALSTRING            27 /**/
+# define V_ASN1_UNIVERSALSTRING          28 /**/
+# define V_ASN1_BMPSTRING                30
+
+/*
+ * NB the constants below are used internally by ASN1_INTEGER
+ * and ASN1_ENUMERATED to indicate the sign. They are *not* on
+ * the wire tag values.
+ */
+
+# define V_ASN1_NEG                      0x100
+# define V_ASN1_NEG_INTEGER              (2 | V_ASN1_NEG)
+# define V_ASN1_NEG_ENUMERATED           (10 | V_ASN1_NEG)
+
+/* For use with d2i_ASN1_type_bytes() */
+# define B_ASN1_NUMERICSTRING    0x0001
+# define B_ASN1_PRINTABLESTRING  0x0002
+# define B_ASN1_T61STRING        0x0004
+# define B_ASN1_TELETEXSTRING    0x0004
+# define B_ASN1_VIDEOTEXSTRING   0x0008
+# define B_ASN1_IA5STRING        0x0010
+# define B_ASN1_GRAPHICSTRING    0x0020
+# define B_ASN1_ISO64STRING      0x0040
+# define B_ASN1_VISIBLESTRING    0x0040
+# define B_ASN1_GENERALSTRING    0x0080
+# define B_ASN1_UNIVERSALSTRING  0x0100
+# define B_ASN1_OCTET_STRING     0x0200
+# define B_ASN1_BIT_STRING       0x0400
+# define B_ASN1_BMPSTRING        0x0800
+# define B_ASN1_UNKNOWN          0x1000
+# define B_ASN1_UTF8STRING       0x2000
+# define B_ASN1_UTCTIME          0x4000
+# define B_ASN1_GENERALIZEDTIME  0x8000
+# define B_ASN1_SEQUENCE         0x10000
+/* For use with ASN1_mbstring_copy() */
+# define MBSTRING_FLAG           0x1000
+# define MBSTRING_UTF8           (MBSTRING_FLAG)
+# define MBSTRING_ASC            (MBSTRING_FLAG|1)
+# define MBSTRING_BMP            (MBSTRING_FLAG|2)
+# define MBSTRING_UNIV           (MBSTRING_FLAG|4)
+# define SMIME_OLDMIME           0x400
+# define SMIME_CRLFEOL           0x800
+# define SMIME_STREAM            0x1000
+    struct X509_algor_st;
+DEFINE_STACK_OF(X509_ALGOR)
+
+# define ASN1_STRING_FLAG_BITS_LEFT 0x08/* Set if 0x07 has bits left value */
+/*
+ * This indicates that the ASN1_STRING is not a real value but just a place
+ * holder for the location where indefinite length constructed data should be
+ * inserted in the memory buffer
+ */
+# define ASN1_STRING_FLAG_NDEF 0x010
+
+/*
+ * This flag is used by the CMS code to indicate that a string is not
+ * complete and is a place holder for content when it had all been accessed.
+ * The flag will be reset when content has been written to it.
+ */
+
+# define ASN1_STRING_FLAG_CONT 0x020
+/*
+ * This flag is used by ASN1 code to indicate an ASN1_STRING is an MSTRING
+ * type.
+ */
+# define ASN1_STRING_FLAG_MSTRING 0x040
+/* String is embedded and only content should be freed */
+# define ASN1_STRING_FLAG_EMBED 0x080
+/* String should be parsed in RFC 5280's time format */
+# define ASN1_STRING_FLAG_X509_TIME 0x100
+/* This is the base type that holds just about everything :-) */
+struct asn1_string_st {
+    int length;
+    int type;
+    unsigned char *data;
+    /*
+     * The value of the following field depends on the type being held.  It
+     * is mostly being used for BIT_STRING so if the input data has a
+     * non-zero 'unused bits' value, it will be handled correctly
+     */
+    long flags;
+};
+
+/*
+ * ASN1_ENCODING structure: this is used to save the received encoding of an
+ * ASN1 type. This is useful to get round problems with invalid encodings
+ * which can break signatures.
+ */
+
+typedef struct ASN1_ENCODING_st {
+    unsigned char *enc;         /* DER encoding */
+    long len;                   /* Length of encoding */
+    int modified;               /* set to 1 if 'enc' is invalid */
+} ASN1_ENCODING;
+
+/* Used with ASN1 LONG type: if a long is set to this it is omitted */
+# define ASN1_LONG_UNDEF 0x7fffffffL
+
+# define STABLE_FLAGS_MALLOC     0x01
+/*
+ * A zero passed to ASN1_STRING_TABLE_new_add for the flags is interpreted
+ * as "don't change" and STABLE_FLAGS_MALLOC is always set. By setting
+ * STABLE_FLAGS_MALLOC only we can clear the existing value. Use the alias
+ * STABLE_FLAGS_CLEAR to reflect this.
+ */
+# define STABLE_FLAGS_CLEAR      STABLE_FLAGS_MALLOC
+# define STABLE_NO_MASK          0x02
+# define DIRSTRING_TYPE  \
+ (B_ASN1_PRINTABLESTRING|B_ASN1_T61STRING|B_ASN1_BMPSTRING|B_ASN1_UTF8STRING)
+# define PKCS9STRING_TYPE (DIRSTRING_TYPE|B_ASN1_IA5STRING)
+
+typedef struct asn1_string_table_st {
+    int nid;
+    long minsize;
+    long maxsize;
+    unsigned long mask;
+    unsigned long flags;
+} ASN1_STRING_TABLE;
+
+DEFINE_STACK_OF(ASN1_STRING_TABLE)
+
+/* size limits: this stuff is taken straight from RFC2459 */
+
+# define ub_name                         32768
+# define ub_common_name                  64
+# define ub_locality_name                128
+# define ub_state_name                   128
+# define ub_organization_name            64
+# define ub_organization_unit_name       64
+# define ub_title                        64
+# define ub_email_address                128
+
+/*
+ * Declarations for template structures: for full definitions see asn1t.h
+ */
+typedef struct ASN1_TEMPLATE_st ASN1_TEMPLATE;
+typedef struct ASN1_TLC_st ASN1_TLC;
+/* This is just an opaque pointer */
+typedef struct ASN1_VALUE_st ASN1_VALUE;
+
+/* Declare ASN1 functions: the implement macro in in asn1t.h */
+
+# define DECLARE_ASN1_FUNCTIONS(type) DECLARE_ASN1_FUNCTIONS_name(type, type)
+
+# define DECLARE_ASN1_ALLOC_FUNCTIONS(type) \
+        DECLARE_ASN1_ALLOC_FUNCTIONS_name(type, type)
+
+# define DECLARE_ASN1_FUNCTIONS_name(type, name) \
+        DECLARE_ASN1_ALLOC_FUNCTIONS_name(type, name) \
+        DECLARE_ASN1_ENCODE_FUNCTIONS(type, name, name)
+
+# define DECLARE_ASN1_FUNCTIONS_fname(type, itname, name) \
+        DECLARE_ASN1_ALLOC_FUNCTIONS_name(type, name) \
+        DECLARE_ASN1_ENCODE_FUNCTIONS(type, itname, name)
+
+# define DECLARE_ASN1_ENCODE_FUNCTIONS(type, itname, name) \
+        type *d2i_##name(type **a, const unsigned char **in, long len); \
+        int i2d_##name(type *a, unsigned char **out); \
+        DECLARE_ASN1_ITEM(itname)
+
+# define DECLARE_ASN1_ENCODE_FUNCTIONS_const(type, name) \
+        type *d2i_##name(type **a, const unsigned char **in, long len); \
+        int i2d_##name(const type *a, unsigned char **out); \
+        DECLARE_ASN1_ITEM(name)
+
+# define DECLARE_ASN1_NDEF_FUNCTION(name) \
+        int i2d_##name##_NDEF(name *a, unsigned char **out);
+
+# define DECLARE_ASN1_FUNCTIONS_const(name) \
+        DECLARE_ASN1_ALLOC_FUNCTIONS(name) \
+        DECLARE_ASN1_ENCODE_FUNCTIONS_const(name, name)
+
+# define DECLARE_ASN1_ALLOC_FUNCTIONS_name(type, name) \
+        type *name##_new(void); \
+        void name##_free(type *a);
+
+# define DECLARE_ASN1_PRINT_FUNCTION(stname) \
+        DECLARE_ASN1_PRINT_FUNCTION_fname(stname, stname)
+
+# define DECLARE_ASN1_PRINT_FUNCTION_fname(stname, fname) \
+        int fname##_print_ctx(BIO *out, stname *x, int indent, \
+                                         const ASN1_PCTX *pctx);
+
+# define D2I_OF(type) type *(*)(type **,const unsigned char **,long)
+# define I2D_OF(type) int (*)(type *,unsigned char **)
+# define I2D_OF_const(type) int (*)(const type *,unsigned char **)
+
+# define CHECKED_D2I_OF(type, d2i) \
+    ((d2i_of_void*) (1 ? d2i : ((D2I_OF(type))0)))
+# define CHECKED_I2D_OF(type, i2d) \
+    ((i2d_of_void*) (1 ? i2d : ((I2D_OF(type))0)))
+# define CHECKED_NEW_OF(type, xnew) \
+    ((void *(*)(void)) (1 ? xnew : ((type *(*)(void))0)))
+# define CHECKED_PTR_OF(type, p) \
+    ((void*) (1 ? p : (type*)0))
+# define CHECKED_PPTR_OF(type, p) \
+    ((void**) (1 ? p : (type**)0))
+
+# define TYPEDEF_D2I_OF(type) typedef type *d2i_of_##type(type **,const unsigned char **,long)
+# define TYPEDEF_I2D_OF(type) typedef int i2d_of_##type(type *,unsigned char **)
+# define TYPEDEF_D2I2D_OF(type) TYPEDEF_D2I_OF(type); TYPEDEF_I2D_OF(type)
+
+TYPEDEF_D2I2D_OF(void);
+
+/*-
+ * The following macros and typedefs allow an ASN1_ITEM
+ * to be embedded in a structure and referenced. Since
+ * the ASN1_ITEM pointers need to be globally accessible
+ * (possibly from shared libraries) they may exist in
+ * different forms. On platforms that support it the
+ * ASN1_ITEM structure itself will be globally exported.
+ * Other platforms will export a function that returns
+ * an ASN1_ITEM pointer.
+ *
+ * To handle both cases transparently the macros below
+ * should be used instead of hard coding an ASN1_ITEM
+ * pointer in a structure.
+ *
+ * The structure will look like this:
+ *
+ * typedef struct SOMETHING_st {
+ *      ...
+ *      ASN1_ITEM_EXP *iptr;
+ *      ...
+ * } SOMETHING;
+ *
+ * It would be initialised as e.g.:
+ *
+ * SOMETHING somevar = {...,ASN1_ITEM_ref(X509),...};
+ *
+ * and the actual pointer extracted with:
+ *
+ * const ASN1_ITEM *it = ASN1_ITEM_ptr(somevar.iptr);
+ *
+ * Finally an ASN1_ITEM pointer can be extracted from an
+ * appropriate reference with: ASN1_ITEM_rptr(X509). This
+ * would be used when a function takes an ASN1_ITEM * argument.
+ *
+ */
+
+# ifndef OPENSSL_EXPORT_VAR_AS_FUNCTION
+
+/* ASN1_ITEM pointer exported type */
+typedef const ASN1_ITEM ASN1_ITEM_EXP;
+
+/* Macro to obtain ASN1_ITEM pointer from exported type */
+#  define ASN1_ITEM_ptr(iptr) (iptr)
+
+/* Macro to include ASN1_ITEM pointer from base type */
+#  define ASN1_ITEM_ref(iptr) (&(iptr##_it))
+
+#  define ASN1_ITEM_rptr(ref) (&(ref##_it))
+
+#  define DECLARE_ASN1_ITEM(name) \
+        OPENSSL_EXTERN const ASN1_ITEM name##_it;
+
+# else
+
+/*
+ * Platforms that can't easily handle shared global variables are declared as
+ * functions returning ASN1_ITEM pointers.
+ */
+
+/* ASN1_ITEM pointer exported type */
+typedef const ASN1_ITEM *ASN1_ITEM_EXP (void);
+
+/* Macro to obtain ASN1_ITEM pointer from exported type */
+#  define ASN1_ITEM_ptr(iptr) (iptr())
+
+/* Macro to include ASN1_ITEM pointer from base type */
+#  define ASN1_ITEM_ref(iptr) (iptr##_it)
+
+#  define ASN1_ITEM_rptr(ref) (ref##_it())
+
+#  define DECLARE_ASN1_ITEM(name) \
+        const ASN1_ITEM * name##_it(void);
+
+# endif
+
+/* Parameters used by ASN1_STRING_print_ex() */
+
+/*
+ * These determine which characters to escape: RFC2253 special characters,
+ * control characters and MSB set characters
+ */
+
+# define ASN1_STRFLGS_ESC_2253           1
+# define ASN1_STRFLGS_ESC_CTRL           2
+# define ASN1_STRFLGS_ESC_MSB            4
+
+/*
+ * This flag determines how we do escaping: normally RC2253 backslash only,
+ * set this to use backslash and quote.
+ */
+
+# define ASN1_STRFLGS_ESC_QUOTE          8
+
+/* These three flags are internal use only. */
+
+/* Character is a valid PrintableString character */
+# define CHARTYPE_PRINTABLESTRING        0x10
+/* Character needs escaping if it is the first character */
+# define CHARTYPE_FIRST_ESC_2253         0x20
+/* Character needs escaping if it is the last character */
+# define CHARTYPE_LAST_ESC_2253          0x40
+
+/*
+ * NB the internal flags are safely reused below by flags handled at the top
+ * level.
+ */
+
+/*
+ * If this is set we convert all character strings to UTF8 first
+ */
+
+# define ASN1_STRFLGS_UTF8_CONVERT       0x10
+
+/*
+ * If this is set we don't attempt to interpret content: just assume all
+ * strings are 1 byte per character. This will produce some pretty odd
+ * looking output!
+ */
+
+# define ASN1_STRFLGS_IGNORE_TYPE        0x20
+
+/* If this is set we include the string type in the output */
+# define ASN1_STRFLGS_SHOW_TYPE          0x40
+
+/*
+ * This determines which strings to display and which to 'dump' (hex dump of
+ * content octets or DER encoding). We can only dump non character strings or
+ * everything. If we don't dump 'unknown' they are interpreted as character
+ * strings with 1 octet per character and are subject to the usual escaping
+ * options.
+ */
+
+# define ASN1_STRFLGS_DUMP_ALL           0x80
+# define ASN1_STRFLGS_DUMP_UNKNOWN       0x100
+
+/*
+ * These determine what 'dumping' does, we can dump the content octets or the
+ * DER encoding: both use the RFC2253 #XXXXX notation.
+ */
+
+# define ASN1_STRFLGS_DUMP_DER           0x200
+
+/*
+ * This flag specifies that RC2254 escaping shall be performed.
+ */
+#define ASN1_STRFLGS_ESC_2254           0x400
+
+/*
+ * All the string flags consistent with RFC2253, escaping control characters
+ * isn't essential in RFC2253 but it is advisable anyway.
+ */
+
+# define ASN1_STRFLGS_RFC2253    (ASN1_STRFLGS_ESC_2253 | \
+                                ASN1_STRFLGS_ESC_CTRL | \
+                                ASN1_STRFLGS_ESC_MSB | \
+                                ASN1_STRFLGS_UTF8_CONVERT | \
+                                ASN1_STRFLGS_DUMP_UNKNOWN | \
+                                ASN1_STRFLGS_DUMP_DER)
+
+DEFINE_STACK_OF(ASN1_INTEGER)
+
+DEFINE_STACK_OF(ASN1_GENERALSTRING)
+
+DEFINE_STACK_OF(ASN1_UTF8STRING)
+
+typedef struct asn1_type_st {
+    int type;
+    union {
+        char *ptr;
+        ASN1_BOOLEAN boolean;
+        ASN1_STRING *asn1_string;
+        ASN1_OBJECT *object;
+        ASN1_INTEGER *integer;
+        ASN1_ENUMERATED *enumerated;
+        ASN1_BIT_STRING *bit_string;
+        ASN1_OCTET_STRING *octet_string;
+        ASN1_PRINTABLESTRING *printablestring;
+        ASN1_T61STRING *t61string;
+        ASN1_IA5STRING *ia5string;
+        ASN1_GENERALSTRING *generalstring;
+        ASN1_BMPSTRING *bmpstring;
+        ASN1_UNIVERSALSTRING *universalstring;
+        ASN1_UTCTIME *utctime;
+        ASN1_GENERALIZEDTIME *generalizedtime;
+        ASN1_VISIBLESTRING *visiblestring;
+        ASN1_UTF8STRING *utf8string;
+        /*
+         * set and sequence are left complete and still contain the set or
+         * sequence bytes
+         */
+        ASN1_STRING *set;
+        ASN1_STRING *sequence;
+        ASN1_VALUE *asn1_value;
+    } value;
+} ASN1_TYPE;
+
+DEFINE_STACK_OF(ASN1_TYPE)
+
+typedef STACK_OF(ASN1_TYPE) ASN1_SEQUENCE_ANY;
+
+DECLARE_ASN1_ENCODE_FUNCTIONS_const(ASN1_SEQUENCE_ANY, ASN1_SEQUENCE_ANY)
+DECLARE_ASN1_ENCODE_FUNCTIONS_const(ASN1_SEQUENCE_ANY, ASN1_SET_ANY)
+
+/* This is used to contain a list of bit names */
+typedef struct BIT_STRING_BITNAME_st {
+    int bitnum;
+    const char *lname;
+    const char *sname;
+} BIT_STRING_BITNAME;
+
+# define B_ASN1_TIME \
+                        B_ASN1_UTCTIME | \
+                        B_ASN1_GENERALIZEDTIME
+
+# define B_ASN1_PRINTABLE \
+                        B_ASN1_NUMERICSTRING| \
+                        B_ASN1_PRINTABLESTRING| \
+                        B_ASN1_T61STRING| \
+                        B_ASN1_IA5STRING| \
+                        B_ASN1_BIT_STRING| \
+                        B_ASN1_UNIVERSALSTRING|\
+                        B_ASN1_BMPSTRING|\
+                        B_ASN1_UTF8STRING|\
+                        B_ASN1_SEQUENCE|\
+                        B_ASN1_UNKNOWN
+
+# define B_ASN1_DIRECTORYSTRING \
+                        B_ASN1_PRINTABLESTRING| \
+                        B_ASN1_TELETEXSTRING|\
+                        B_ASN1_BMPSTRING|\
+                        B_ASN1_UNIVERSALSTRING|\
+                        B_ASN1_UTF8STRING
+
+# define B_ASN1_DISPLAYTEXT \
+                        B_ASN1_IA5STRING| \
+                        B_ASN1_VISIBLESTRING| \
+                        B_ASN1_BMPSTRING|\
+                        B_ASN1_UTF8STRING
+
+DECLARE_ASN1_FUNCTIONS_fname(ASN1_TYPE, ASN1_ANY, ASN1_TYPE)
+
+int ASN1_TYPE_get(const ASN1_TYPE *a);
+void ASN1_TYPE_set(ASN1_TYPE *a, int type, void *value);
+int ASN1_TYPE_set1(ASN1_TYPE *a, int type, const void *value);
+int ASN1_TYPE_cmp(const ASN1_TYPE *a, const ASN1_TYPE *b);
+
+ASN1_TYPE *ASN1_TYPE_pack_sequence(const ASN1_ITEM *it, void *s, ASN1_TYPE **t);
+void *ASN1_TYPE_unpack_sequence(const ASN1_ITEM *it, const ASN1_TYPE *t);
+
+ASN1_OBJECT *ASN1_OBJECT_new(void);
+void ASN1_OBJECT_free(ASN1_OBJECT *a);
+int i2d_ASN1_OBJECT(const ASN1_OBJECT *a, unsigned char **pp);
+ASN1_OBJECT *d2i_ASN1_OBJECT(ASN1_OBJECT **a, const unsigned char **pp,
+                             long length);
+
+DECLARE_ASN1_ITEM(ASN1_OBJECT)
+
+DEFINE_STACK_OF(ASN1_OBJECT)
+
+ASN1_STRING *ASN1_STRING_new(void);
+void ASN1_STRING_free(ASN1_STRING *a);
+void ASN1_STRING_clear_free(ASN1_STRING *a);
+int ASN1_STRING_copy(ASN1_STRING *dst, const ASN1_STRING *str);
+ASN1_STRING *ASN1_STRING_dup(const ASN1_STRING *a);
+ASN1_STRING *ASN1_STRING_type_new(int type);
+int ASN1_STRING_cmp(const ASN1_STRING *a, const ASN1_STRING *b);
+  /*
+   * Since this is used to store all sorts of things, via macros, for now,
+   * make its data void *
+   */
+int ASN1_STRING_set(ASN1_STRING *str, const void *data, int len);
+void ASN1_STRING_set0(ASN1_STRING *str, void *data, int len);
+int ASN1_STRING_length(const ASN1_STRING *x);
+void ASN1_STRING_length_set(ASN1_STRING *x, int n);
+int ASN1_STRING_type(const ASN1_STRING *x);
+DEPRECATEDIN_1_1_0(unsigned char *ASN1_STRING_data(ASN1_STRING *x))
+const unsigned char *ASN1_STRING_get0_data(const ASN1_STRING *x);
+
+DECLARE_ASN1_FUNCTIONS(ASN1_BIT_STRING)
+int ASN1_BIT_STRING_set(ASN1_BIT_STRING *a, unsigned char *d, int length);
+int ASN1_BIT_STRING_set_bit(ASN1_BIT_STRING *a, int n, int value);
+int ASN1_BIT_STRING_get_bit(const ASN1_BIT_STRING *a, int n);
+int ASN1_BIT_STRING_check(const ASN1_BIT_STRING *a,
+                          const unsigned char *flags, int flags_len);
+
+int ASN1_BIT_STRING_name_print(BIO *out, ASN1_BIT_STRING *bs,
+                               BIT_STRING_BITNAME *tbl, int indent);
+int ASN1_BIT_STRING_num_asc(const char *name, BIT_STRING_BITNAME *tbl);
+int ASN1_BIT_STRING_set_asc(ASN1_BIT_STRING *bs, const char *name, int value,
+                            BIT_STRING_BITNAME *tbl);
+
+DECLARE_ASN1_FUNCTIONS(ASN1_INTEGER)
+ASN1_INTEGER *d2i_ASN1_UINTEGER(ASN1_INTEGER **a, const unsigned char **pp,
+                                long length);
+ASN1_INTEGER *ASN1_INTEGER_dup(const ASN1_INTEGER *x);
+int ASN1_INTEGER_cmp(const ASN1_INTEGER *x, const ASN1_INTEGER *y);
+
+DECLARE_ASN1_FUNCTIONS(ASN1_ENUMERATED)
+
+int ASN1_UTCTIME_check(const ASN1_UTCTIME *a);
+ASN1_UTCTIME *ASN1_UTCTIME_set(ASN1_UTCTIME *s, time_t t);
+ASN1_UTCTIME *ASN1_UTCTIME_adj(ASN1_UTCTIME *s, time_t t,
+                               int offset_day, long offset_sec);
+int ASN1_UTCTIME_set_string(ASN1_UTCTIME *s, const char *str);
+int ASN1_UTCTIME_cmp_time_t(const ASN1_UTCTIME *s, time_t t);
+
+int ASN1_GENERALIZEDTIME_check(const ASN1_GENERALIZEDTIME *a);
+ASN1_GENERALIZEDTIME *ASN1_GENERALIZEDTIME_set(ASN1_GENERALIZEDTIME *s,
+                                               time_t t);
+ASN1_GENERALIZEDTIME *ASN1_GENERALIZEDTIME_adj(ASN1_GENERALIZEDTIME *s,
+                                               time_t t, int offset_day,
+                                               long offset_sec);
+int ASN1_GENERALIZEDTIME_set_string(ASN1_GENERALIZEDTIME *s, const char *str);
+
+int ASN1_TIME_diff(int *pday, int *psec,
+                   const ASN1_TIME *from, const ASN1_TIME *to);
+
+DECLARE_ASN1_FUNCTIONS(ASN1_OCTET_STRING)
+ASN1_OCTET_STRING *ASN1_OCTET_STRING_dup(const ASN1_OCTET_STRING *a);
+int ASN1_OCTET_STRING_cmp(const ASN1_OCTET_STRING *a,
+                          const ASN1_OCTET_STRING *b);
+int ASN1_OCTET_STRING_set(ASN1_OCTET_STRING *str, const unsigned char *data,
+                          int len);
+
+DECLARE_ASN1_FUNCTIONS(ASN1_VISIBLESTRING)
+DECLARE_ASN1_FUNCTIONS(ASN1_UNIVERSALSTRING)
+DECLARE_ASN1_FUNCTIONS(ASN1_UTF8STRING)
+DECLARE_ASN1_FUNCTIONS(ASN1_NULL)
+DECLARE_ASN1_FUNCTIONS(ASN1_BMPSTRING)
+
+int UTF8_getc(const unsigned char *str, int len, unsigned long *val);
+int UTF8_putc(unsigned char *str, int len, unsigned long value);
+
+DECLARE_ASN1_FUNCTIONS_name(ASN1_STRING, ASN1_PRINTABLE)
+
+DECLARE_ASN1_FUNCTIONS_name(ASN1_STRING, DIRECTORYSTRING)
+DECLARE_ASN1_FUNCTIONS_name(ASN1_STRING, DISPLAYTEXT)
+DECLARE_ASN1_FUNCTIONS(ASN1_PRINTABLESTRING)
+DECLARE_ASN1_FUNCTIONS(ASN1_T61STRING)
+DECLARE_ASN1_FUNCTIONS(ASN1_IA5STRING)
+DECLARE_ASN1_FUNCTIONS(ASN1_GENERALSTRING)
+DECLARE_ASN1_FUNCTIONS(ASN1_UTCTIME)
+DECLARE_ASN1_FUNCTIONS(ASN1_GENERALIZEDTIME)
+DECLARE_ASN1_FUNCTIONS(ASN1_TIME)
+
+DECLARE_ASN1_ITEM(ASN1_OCTET_STRING_NDEF)
+
+ASN1_TIME *ASN1_TIME_set(ASN1_TIME *s, time_t t);
+ASN1_TIME *ASN1_TIME_adj(ASN1_TIME *s, time_t t,
+                         int offset_day, long offset_sec);
+int ASN1_TIME_check(const ASN1_TIME *t);
+ASN1_GENERALIZEDTIME *ASN1_TIME_to_generalizedtime(const ASN1_TIME *t,
+                                                   ASN1_GENERALIZEDTIME **out);
+int ASN1_TIME_set_string(ASN1_TIME *s, const char *str);
+int ASN1_TIME_set_string_X509(ASN1_TIME *s, const char *str);
+int ASN1_TIME_to_tm(const ASN1_TIME *s, struct tm *tm);
+int ASN1_TIME_normalize(ASN1_TIME *s);
+int ASN1_TIME_cmp_time_t(const ASN1_TIME *s, time_t t);
+int ASN1_TIME_compare(const ASN1_TIME *a, const ASN1_TIME *b);
+
+int i2a_ASN1_INTEGER(BIO *bp, const ASN1_INTEGER *a);
+int a2i_ASN1_INTEGER(BIO *bp, ASN1_INTEGER *bs, char *buf, int size);
+int i2a_ASN1_ENUMERATED(BIO *bp, const ASN1_ENUMERATED *a);
+int a2i_ASN1_ENUMERATED(BIO *bp, ASN1_ENUMERATED *bs, char *buf, int size);
+int i2a_ASN1_OBJECT(BIO *bp, const ASN1_OBJECT *a);
+int a2i_ASN1_STRING(BIO *bp, ASN1_STRING *bs, char *buf, int size);
+int i2a_ASN1_STRING(BIO *bp, const ASN1_STRING *a, int type);
+int i2t_ASN1_OBJECT(char *buf, int buf_len, const ASN1_OBJECT *a);
+
+int a2d_ASN1_OBJECT(unsigned char *out, int olen, const char *buf, int num);
+ASN1_OBJECT *ASN1_OBJECT_create(int nid, unsigned char *data, int len,
+                                const char *sn, const char *ln);
+
+int ASN1_INTEGER_get_int64(int64_t *pr, const ASN1_INTEGER *a);
+int ASN1_INTEGER_set_int64(ASN1_INTEGER *a, int64_t r);
+int ASN1_INTEGER_get_uint64(uint64_t *pr, const ASN1_INTEGER *a);
+int ASN1_INTEGER_set_uint64(ASN1_INTEGER *a, uint64_t r);
+
+int ASN1_INTEGER_set(ASN1_INTEGER *a, long v);
+long ASN1_INTEGER_get(const ASN1_INTEGER *a);
+ASN1_INTEGER *BN_to_ASN1_INTEGER(const BIGNUM *bn, ASN1_INTEGER *ai);
+BIGNUM *ASN1_INTEGER_to_BN(const ASN1_INTEGER *ai, BIGNUM *bn);
+
+int ASN1_ENUMERATED_get_int64(int64_t *pr, const ASN1_ENUMERATED *a);
+int ASN1_ENUMERATED_set_int64(ASN1_ENUMERATED *a, int64_t r);
+
+
+int ASN1_ENUMERATED_set(ASN1_ENUMERATED *a, long v);
+long ASN1_ENUMERATED_get(const ASN1_ENUMERATED *a);
+ASN1_ENUMERATED *BN_to_ASN1_ENUMERATED(const BIGNUM *bn, ASN1_ENUMERATED *ai);
+BIGNUM *ASN1_ENUMERATED_to_BN(const ASN1_ENUMERATED *ai, BIGNUM *bn);
+
+/* General */
+/* given a string, return the correct type, max is the maximum length */
+int ASN1_PRINTABLE_type(const unsigned char *s, int max);
+
+unsigned long ASN1_tag2bit(int tag);
+
+/* SPECIALS */
+int ASN1_get_object(const unsigned char **pp, long *plength, int *ptag,
+                    int *pclass, long omax);
+int ASN1_check_infinite_end(unsigned char **p, long len);
+int ASN1_const_check_infinite_end(const unsigned char **p, long len);
+void ASN1_put_object(unsigned char **pp, int constructed, int length,
+                     int tag, int xclass);
+int ASN1_put_eoc(unsigned char **pp);
+int ASN1_object_size(int constructed, int length, int tag);
+
+/* Used to implement other functions */
+void *ASN1_dup(i2d_of_void *i2d, d2i_of_void *d2i, void *x);
+
+# define ASN1_dup_of(type,i2d,d2i,x) \
+    ((type*)ASN1_dup(CHECKED_I2D_OF(type, i2d), \
+                     CHECKED_D2I_OF(type, d2i), \
+                     CHECKED_PTR_OF(type, x)))
+
+# define ASN1_dup_of_const(type,i2d,d2i,x) \
+    ((type*)ASN1_dup(CHECKED_I2D_OF(const type, i2d), \
+                     CHECKED_D2I_OF(type, d2i), \
+                     CHECKED_PTR_OF(const type, x)))
+
+void *ASN1_item_dup(const ASN1_ITEM *it, void *x);
+
+/* ASN1 alloc/free macros for when a type is only used internally */
+
+# define M_ASN1_new_of(type) (type *)ASN1_item_new(ASN1_ITEM_rptr(type))
+# define M_ASN1_free_of(x, type) \
+                ASN1_item_free(CHECKED_PTR_OF(type, x), ASN1_ITEM_rptr(type))
+
+# ifndef OPENSSL_NO_STDIO
+void *ASN1_d2i_fp(void *(*xnew) (void), d2i_of_void *d2i, FILE *in, void **x);
+
+#  define ASN1_d2i_fp_of(type,xnew,d2i,in,x) \
+    ((type*)ASN1_d2i_fp(CHECKED_NEW_OF(type, xnew), \
+                        CHECKED_D2I_OF(type, d2i), \
+                        in, \
+                        CHECKED_PPTR_OF(type, x)))
+
+void *ASN1_item_d2i_fp(const ASN1_ITEM *it, FILE *in, void *x);
+int ASN1_i2d_fp(i2d_of_void *i2d, FILE *out, void *x);
+
+#  define ASN1_i2d_fp_of(type,i2d,out,x) \
+    (ASN1_i2d_fp(CHECKED_I2D_OF(type, i2d), \
+                 out, \
+                 CHECKED_PTR_OF(type, x)))
+
+#  define ASN1_i2d_fp_of_const(type,i2d,out,x) \
+    (ASN1_i2d_fp(CHECKED_I2D_OF(const type, i2d), \
+                 out, \
+                 CHECKED_PTR_OF(const type, x)))
+
+int ASN1_item_i2d_fp(const ASN1_ITEM *it, FILE *out, void *x);
+int ASN1_STRING_print_ex_fp(FILE *fp, const ASN1_STRING *str, unsigned long flags);
+# endif
+
+int ASN1_STRING_to_UTF8(unsigned char **out, const ASN1_STRING *in);
+
+void *ASN1_d2i_bio(void *(*xnew) (void), d2i_of_void *d2i, BIO *in, void **x);
+
+#  define ASN1_d2i_bio_of(type,xnew,d2i,in,x) \
+    ((type*)ASN1_d2i_bio( CHECKED_NEW_OF(type, xnew), \
+                          CHECKED_D2I_OF(type, d2i), \
+                          in, \
+                          CHECKED_PPTR_OF(type, x)))
+
+void *ASN1_item_d2i_bio(const ASN1_ITEM *it, BIO *in, void *x);
+int ASN1_i2d_bio(i2d_of_void *i2d, BIO *out, unsigned char *x);
+
+#  define ASN1_i2d_bio_of(type,i2d,out,x) \
+    (ASN1_i2d_bio(CHECKED_I2D_OF(type, i2d), \
+                  out, \
+                  CHECKED_PTR_OF(type, x)))
+
+#  define ASN1_i2d_bio_of_const(type,i2d,out,x) \
+    (ASN1_i2d_bio(CHECKED_I2D_OF(const type, i2d), \
+                  out, \
+                  CHECKED_PTR_OF(const type, x)))
+
+int ASN1_item_i2d_bio(const ASN1_ITEM *it, BIO *out, void *x);
+int ASN1_UTCTIME_print(BIO *fp, const ASN1_UTCTIME *a);
+int ASN1_GENERALIZEDTIME_print(BIO *fp, const ASN1_GENERALIZEDTIME *a);
+int ASN1_TIME_print(BIO *fp, const ASN1_TIME *a);
+int ASN1_STRING_print(BIO *bp, const ASN1_STRING *v);
+int ASN1_STRING_print_ex(BIO *out, const ASN1_STRING *str, unsigned long flags);
+int ASN1_buf_print(BIO *bp, const unsigned char *buf, size_t buflen, int off);
+int ASN1_bn_print(BIO *bp, const char *number, const BIGNUM *num,
+                  unsigned char *buf, int off);
+int ASN1_parse(BIO *bp, const unsigned char *pp, long len, int indent);
+int ASN1_parse_dump(BIO *bp, const unsigned char *pp, long len, int indent,
+                    int dump);
+const char *ASN1_tag2str(int tag);
+
+/* Used to load and write Netscape format cert */
+
+int ASN1_UNIVERSALSTRING_to_string(ASN1_UNIVERSALSTRING *s);
+
+int ASN1_TYPE_set_octetstring(ASN1_TYPE *a, unsigned char *data, int len);
+int ASN1_TYPE_get_octetstring(const ASN1_TYPE *a, unsigned char *data, int max_len);
+int ASN1_TYPE_set_int_octetstring(ASN1_TYPE *a, long num,
+                                  unsigned char *data, int len);
+int ASN1_TYPE_get_int_octetstring(const ASN1_TYPE *a, long *num,
+                                  unsigned char *data, int max_len);
+
+void *ASN1_item_unpack(const ASN1_STRING *oct, const ASN1_ITEM *it);
+
+ASN1_STRING *ASN1_item_pack(void *obj, const ASN1_ITEM *it,
+                            ASN1_OCTET_STRING **oct);
+
+void ASN1_STRING_set_default_mask(unsigned long mask);
+int ASN1_STRING_set_default_mask_asc(const char *p);
+unsigned long ASN1_STRING_get_default_mask(void);
+int ASN1_mbstring_copy(ASN1_STRING **out, const unsigned char *in, int len,
+                       int inform, unsigned long mask);
+int ASN1_mbstring_ncopy(ASN1_STRING **out, const unsigned char *in, int len,
+                        int inform, unsigned long mask,
+                        long minsize, long maxsize);
+
+ASN1_STRING *ASN1_STRING_set_by_NID(ASN1_STRING **out,
+                                    const unsigned char *in, int inlen,
+                                    int inform, int nid);
+ASN1_STRING_TABLE *ASN1_STRING_TABLE_get(int nid);
+int ASN1_STRING_TABLE_add(int, long, long, unsigned long, unsigned long);
+void ASN1_STRING_TABLE_cleanup(void);
+
+/* ASN1 template functions */
+
+/* Old API compatible functions */
+ASN1_VALUE *ASN1_item_new(const ASN1_ITEM *it);
+void ASN1_item_free(ASN1_VALUE *val, const ASN1_ITEM *it);
+ASN1_VALUE *ASN1_item_d2i(ASN1_VALUE **val, const unsigned char **in,
+                          long len, const ASN1_ITEM *it);
+int ASN1_item_i2d(ASN1_VALUE *val, unsigned char **out, const ASN1_ITEM *it);
+int ASN1_item_ndef_i2d(ASN1_VALUE *val, unsigned char **out,
+                       const ASN1_ITEM *it);
+
+void ASN1_add_oid_module(void);
+void ASN1_add_stable_module(void);
+
+ASN1_TYPE *ASN1_generate_nconf(const char *str, CONF *nconf);
+ASN1_TYPE *ASN1_generate_v3(const char *str, X509V3_CTX *cnf);
+int ASN1_str2mask(const char *str, unsigned long *pmask);
+
+/* ASN1 Print flags */
+
+/* Indicate missing OPTIONAL fields */
+# define ASN1_PCTX_FLAGS_SHOW_ABSENT             0x001
+/* Mark start and end of SEQUENCE */
+# define ASN1_PCTX_FLAGS_SHOW_SEQUENCE           0x002
+/* Mark start and end of SEQUENCE/SET OF */
+# define ASN1_PCTX_FLAGS_SHOW_SSOF               0x004
+/* Show the ASN1 type of primitives */
+# define ASN1_PCTX_FLAGS_SHOW_TYPE               0x008
+/* Don't show ASN1 type of ANY */
+# define ASN1_PCTX_FLAGS_NO_ANY_TYPE             0x010
+/* Don't show ASN1 type of MSTRINGs */
+# define ASN1_PCTX_FLAGS_NO_MSTRING_TYPE         0x020
+/* Don't show field names in SEQUENCE */
+# define ASN1_PCTX_FLAGS_NO_FIELD_NAME           0x040
+/* Show structure names of each SEQUENCE field */
+# define ASN1_PCTX_FLAGS_SHOW_FIELD_STRUCT_NAME  0x080
+/* Don't show structure name even at top level */
+# define ASN1_PCTX_FLAGS_NO_STRUCT_NAME          0x100
+
+int ASN1_item_print(BIO *out, ASN1_VALUE *ifld, int indent,
+                    const ASN1_ITEM *it, const ASN1_PCTX *pctx);
+ASN1_PCTX *ASN1_PCTX_new(void);
+void ASN1_PCTX_free(ASN1_PCTX *p);
+unsigned long ASN1_PCTX_get_flags(const ASN1_PCTX *p);
+void ASN1_PCTX_set_flags(ASN1_PCTX *p, unsigned long flags);
+unsigned long ASN1_PCTX_get_nm_flags(const ASN1_PCTX *p);
+void ASN1_PCTX_set_nm_flags(ASN1_PCTX *p, unsigned long flags);
+unsigned long ASN1_PCTX_get_cert_flags(const ASN1_PCTX *p);
+void ASN1_PCTX_set_cert_flags(ASN1_PCTX *p, unsigned long flags);
+unsigned long ASN1_PCTX_get_oid_flags(const ASN1_PCTX *p);
+void ASN1_PCTX_set_oid_flags(ASN1_PCTX *p, unsigned long flags);
+unsigned long ASN1_PCTX_get_str_flags(const ASN1_PCTX *p);
+void ASN1_PCTX_set_str_flags(ASN1_PCTX *p, unsigned long flags);
+
+ASN1_SCTX *ASN1_SCTX_new(int (*scan_cb) (ASN1_SCTX *ctx));
+void ASN1_SCTX_free(ASN1_SCTX *p);
+const ASN1_ITEM *ASN1_SCTX_get_item(ASN1_SCTX *p);
+const ASN1_TEMPLATE *ASN1_SCTX_get_template(ASN1_SCTX *p);
+unsigned long ASN1_SCTX_get_flags(ASN1_SCTX *p);
+void ASN1_SCTX_set_app_data(ASN1_SCTX *p, void *data);
+void *ASN1_SCTX_get_app_data(ASN1_SCTX *p);
+
+const BIO_METHOD *BIO_f_asn1(void);
+
+BIO *BIO_new_NDEF(BIO *out, ASN1_VALUE *val, const ASN1_ITEM *it);
+
+int i2d_ASN1_bio_stream(BIO *out, ASN1_VALUE *val, BIO *in, int flags,
+                        const ASN1_ITEM *it);
+int PEM_write_bio_ASN1_stream(BIO *out, ASN1_VALUE *val, BIO *in, int flags,
+                              const char *hdr, const ASN1_ITEM *it);
+int SMIME_write_ASN1(BIO *bio, ASN1_VALUE *val, BIO *data, int flags,
+                     int ctype_nid, int econt_nid,
+                     STACK_OF(X509_ALGOR) *mdalgs, const ASN1_ITEM *it);
+ASN1_VALUE *SMIME_read_ASN1(BIO *bio, BIO **bcont, const ASN1_ITEM *it);
+int SMIME_crlf_copy(BIO *in, BIO *out, int flags);
+int SMIME_text(BIO *in, BIO *out);
+
+const ASN1_ITEM *ASN1_ITEM_lookup(const char *name);
+const ASN1_ITEM *ASN1_ITEM_get(size_t i);
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/asn1_mac.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/asn1_mac.h
new file mode 100644
index 000000000..7ac1782a3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/asn1_mac.h
@@ -0,0 +1,10 @@
+/*
+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#error "This file is obsolete; please update your software."
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/asn1err.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/asn1err.h
new file mode 100644
index 000000000..5a91126db
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/asn1err.h
@@ -0,0 +1,252 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_ASN1ERR_H
+# define HEADER_ASN1ERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_ASN1_strings(void);
+
+/*
+ * ASN1 function codes.
+ */
+# define ASN1_F_A2D_ASN1_OBJECT                           100
+# define ASN1_F_A2I_ASN1_INTEGER                          102
+# define ASN1_F_A2I_ASN1_STRING                           103
+# define ASN1_F_APPEND_EXP                                176
+# define ASN1_F_ASN1_BIO_INIT                             113
+# define ASN1_F_ASN1_BIT_STRING_SET_BIT                   183
+# define ASN1_F_ASN1_CB                                   177
+# define ASN1_F_ASN1_CHECK_TLEN                           104
+# define ASN1_F_ASN1_COLLECT                              106
+# define ASN1_F_ASN1_D2I_EX_PRIMITIVE                     108
+# define ASN1_F_ASN1_D2I_FP                               109
+# define ASN1_F_ASN1_D2I_READ_BIO                         107
+# define ASN1_F_ASN1_DIGEST                               184
+# define ASN1_F_ASN1_DO_ADB                               110
+# define ASN1_F_ASN1_DO_LOCK                              233
+# define ASN1_F_ASN1_DUP                                  111
+# define ASN1_F_ASN1_ENC_SAVE                             115
+# define ASN1_F_ASN1_EX_C2I                               204
+# define ASN1_F_ASN1_FIND_END                             190
+# define ASN1_F_ASN1_GENERALIZEDTIME_ADJ                  216
+# define ASN1_F_ASN1_GENERATE_V3                          178
+# define ASN1_F_ASN1_GET_INT64                            224
+# define ASN1_F_ASN1_GET_OBJECT                           114
+# define ASN1_F_ASN1_GET_UINT64                           225
+# define ASN1_F_ASN1_I2D_BIO                              116
+# define ASN1_F_ASN1_I2D_FP                               117
+# define ASN1_F_ASN1_ITEM_D2I_FP                          206
+# define ASN1_F_ASN1_ITEM_DUP                             191
+# define ASN1_F_ASN1_ITEM_EMBED_D2I                       120
+# define ASN1_F_ASN1_ITEM_EMBED_NEW                       121
+# define ASN1_F_ASN1_ITEM_FLAGS_I2D                       118
+# define ASN1_F_ASN1_ITEM_I2D_BIO                         192
+# define ASN1_F_ASN1_ITEM_I2D_FP                          193
+# define ASN1_F_ASN1_ITEM_PACK                            198
+# define ASN1_F_ASN1_ITEM_SIGN                            195
+# define ASN1_F_ASN1_ITEM_SIGN_CTX                        220
+# define ASN1_F_ASN1_ITEM_UNPACK                          199
+# define ASN1_F_ASN1_ITEM_VERIFY                          197
+# define ASN1_F_ASN1_MBSTRING_NCOPY                       122
+# define ASN1_F_ASN1_OBJECT_NEW                           123
+# define ASN1_F_ASN1_OUTPUT_DATA                          214
+# define ASN1_F_ASN1_PCTX_NEW                             205
+# define ASN1_F_ASN1_PRIMITIVE_NEW                        119
+# define ASN1_F_ASN1_SCTX_NEW                             221
+# define ASN1_F_ASN1_SIGN                                 128
+# define ASN1_F_ASN1_STR2TYPE                             179
+# define ASN1_F_ASN1_STRING_GET_INT64                     227
+# define ASN1_F_ASN1_STRING_GET_UINT64                    230
+# define ASN1_F_ASN1_STRING_SET                           186
+# define ASN1_F_ASN1_STRING_TABLE_ADD                     129
+# define ASN1_F_ASN1_STRING_TO_BN                         228
+# define ASN1_F_ASN1_STRING_TYPE_NEW                      130
+# define ASN1_F_ASN1_TEMPLATE_EX_D2I                      132
+# define ASN1_F_ASN1_TEMPLATE_NEW                         133
+# define ASN1_F_ASN1_TEMPLATE_NOEXP_D2I                   131
+# define ASN1_F_ASN1_TIME_ADJ                             217
+# define ASN1_F_ASN1_TYPE_GET_INT_OCTETSTRING             134
+# define ASN1_F_ASN1_TYPE_GET_OCTETSTRING                 135
+# define ASN1_F_ASN1_UTCTIME_ADJ                          218
+# define ASN1_F_ASN1_VERIFY                               137
+# define ASN1_F_B64_READ_ASN1                             209
+# define ASN1_F_B64_WRITE_ASN1                            210
+# define ASN1_F_BIO_NEW_NDEF                              208
+# define ASN1_F_BITSTR_CB                                 180
+# define ASN1_F_BN_TO_ASN1_STRING                         229
+# define ASN1_F_C2I_ASN1_BIT_STRING                       189
+# define ASN1_F_C2I_ASN1_INTEGER                          194
+# define ASN1_F_C2I_ASN1_OBJECT                           196
+# define ASN1_F_C2I_IBUF                                  226
+# define ASN1_F_C2I_UINT64_INT                            101
+# define ASN1_F_COLLECT_DATA                              140
+# define ASN1_F_D2I_ASN1_OBJECT                           147
+# define ASN1_F_D2I_ASN1_UINTEGER                         150
+# define ASN1_F_D2I_AUTOPRIVATEKEY                        207
+# define ASN1_F_D2I_PRIVATEKEY                            154
+# define ASN1_F_D2I_PUBLICKEY                             155
+# define ASN1_F_DO_BUF                                    142
+# define ASN1_F_DO_CREATE                                 124
+# define ASN1_F_DO_DUMP                                   125
+# define ASN1_F_DO_TCREATE                                222
+# define ASN1_F_I2A_ASN1_OBJECT                           126
+# define ASN1_F_I2D_ASN1_BIO_STREAM                       211
+# define ASN1_F_I2D_ASN1_OBJECT                           143
+# define ASN1_F_I2D_DSA_PUBKEY                            161
+# define ASN1_F_I2D_EC_PUBKEY                             181
+# define ASN1_F_I2D_PRIVATEKEY                            163
+# define ASN1_F_I2D_PUBLICKEY                             164
+# define ASN1_F_I2D_RSA_PUBKEY                            165
+# define ASN1_F_LONG_C2I                                  166
+# define ASN1_F_NDEF_PREFIX                               127
+# define ASN1_F_NDEF_SUFFIX                               136
+# define ASN1_F_OID_MODULE_INIT                           174
+# define ASN1_F_PARSE_TAGGING                             182
+# define ASN1_F_PKCS5_PBE2_SET_IV                         167
+# define ASN1_F_PKCS5_PBE2_SET_SCRYPT                     231
+# define ASN1_F_PKCS5_PBE_SET                             202
+# define ASN1_F_PKCS5_PBE_SET0_ALGOR                      215
+# define ASN1_F_PKCS5_PBKDF2_SET                          219
+# define ASN1_F_PKCS5_SCRYPT_SET                          232
+# define ASN1_F_SMIME_READ_ASN1                           212
+# define ASN1_F_SMIME_TEXT                                213
+# define ASN1_F_STABLE_GET                                138
+# define ASN1_F_STBL_MODULE_INIT                          223
+# define ASN1_F_UINT32_C2I                                105
+# define ASN1_F_UINT32_NEW                                139
+# define ASN1_F_UINT64_C2I                                112
+# define ASN1_F_UINT64_NEW                                141
+# define ASN1_F_X509_CRL_ADD0_REVOKED                     169
+# define ASN1_F_X509_INFO_NEW                             170
+# define ASN1_F_X509_NAME_ENCODE                          203
+# define ASN1_F_X509_NAME_EX_D2I                          158
+# define ASN1_F_X509_NAME_EX_NEW                          171
+# define ASN1_F_X509_PKEY_NEW                             173
+
+/*
+ * ASN1 reason codes.
+ */
+# define ASN1_R_ADDING_OBJECT                             171
+# define ASN1_R_ASN1_PARSE_ERROR                          203
+# define ASN1_R_ASN1_SIG_PARSE_ERROR                      204
+# define ASN1_R_AUX_ERROR                                 100
+# define ASN1_R_BAD_OBJECT_HEADER                         102
+# define ASN1_R_BMPSTRING_IS_WRONG_LENGTH                 214
+# define ASN1_R_BN_LIB                                    105
+# define ASN1_R_BOOLEAN_IS_WRONG_LENGTH                   106
+# define ASN1_R_BUFFER_TOO_SMALL                          107
+# define ASN1_R_CIPHER_HAS_NO_OBJECT_IDENTIFIER           108
+# define ASN1_R_CONTEXT_NOT_INITIALISED                   217
+# define ASN1_R_DATA_IS_WRONG                             109
+# define ASN1_R_DECODE_ERROR                              110
+# define ASN1_R_DEPTH_EXCEEDED                            174
+# define ASN1_R_DIGEST_AND_KEY_TYPE_NOT_SUPPORTED         198
+# define ASN1_R_ENCODE_ERROR                              112
+# define ASN1_R_ERROR_GETTING_TIME                        173
+# define ASN1_R_ERROR_LOADING_SECTION                     172
+# define ASN1_R_ERROR_SETTING_CIPHER_PARAMS               114
+# define ASN1_R_EXPECTING_AN_INTEGER                      115
+# define ASN1_R_EXPECTING_AN_OBJECT                       116
+# define ASN1_R_EXPLICIT_LENGTH_MISMATCH                  119
+# define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
+# define ASN1_R_FIELD_MISSING                             121
+# define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_HEADER_TOO_LONG                           123
+# define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
+# define ASN1_R_ILLEGAL_BOOLEAN                           176
+# define ASN1_R_ILLEGAL_CHARACTERS                        124
+# define ASN1_R_ILLEGAL_FORMAT                            177
+# define ASN1_R_ILLEGAL_HEX                               178
+# define ASN1_R_ILLEGAL_IMPLICIT_TAG                      179
+# define ASN1_R_ILLEGAL_INTEGER                           180
+# define ASN1_R_ILLEGAL_NEGATIVE_VALUE                    226
+# define ASN1_R_ILLEGAL_NESTED_TAGGING                    181
+# define ASN1_R_ILLEGAL_NULL                              125
+# define ASN1_R_ILLEGAL_NULL_VALUE                        182
+# define ASN1_R_ILLEGAL_OBJECT                            183
+# define ASN1_R_ILLEGAL_OPTIONAL_ANY                      126
+# define ASN1_R_ILLEGAL_OPTIONS_ON_ITEM_TEMPLATE          170
+# define ASN1_R_ILLEGAL_PADDING                           221
+# define ASN1_R_ILLEGAL_TAGGED_ANY                        127
+# define ASN1_R_ILLEGAL_TIME_VALUE                        184
+# define ASN1_R_ILLEGAL_ZERO_CONTENT                      222
+# define ASN1_R_INTEGER_NOT_ASCII_FORMAT                  185
+# define ASN1_R_INTEGER_TOO_LARGE_FOR_LONG                128
+# define ASN1_R_INVALID_BIT_STRING_BITS_LEFT              220
+# define ASN1_R_INVALID_BMPSTRING_LENGTH                  129
+# define ASN1_R_INVALID_DIGIT                             130
+# define ASN1_R_INVALID_MIME_TYPE                         205
+# define ASN1_R_INVALID_MODIFIER                          186
+# define ASN1_R_INVALID_NUMBER                            187
+# define ASN1_R_INVALID_OBJECT_ENCODING                   216
+# define ASN1_R_INVALID_SCRYPT_PARAMETERS                 227
+# define ASN1_R_INVALID_SEPARATOR                         131
+# define ASN1_R_INVALID_STRING_TABLE_VALUE                218
+# define ASN1_R_INVALID_UNIVERSALSTRING_LENGTH            133
+# define ASN1_R_INVALID_UTF8STRING                        134
+# define ASN1_R_INVALID_VALUE                             219
+# define ASN1_R_LIST_ERROR                                188
+# define ASN1_R_MIME_NO_CONTENT_TYPE                      206
+# define ASN1_R_MIME_PARSE_ERROR                          207
+# define ASN1_R_MIME_SIG_PARSE_ERROR                      208
+# define ASN1_R_MISSING_EOC                               137
+# define ASN1_R_MISSING_SECOND_NUMBER                     138
+# define ASN1_R_MISSING_VALUE                             189
+# define ASN1_R_MSTRING_NOT_UNIVERSAL                     139
+# define ASN1_R_MSTRING_WRONG_TAG                         140
+# define ASN1_R_NESTED_ASN1_STRING                        197
+# define ASN1_R_NESTED_TOO_DEEP                           201
+# define ASN1_R_NON_HEX_CHARACTERS                        141
+# define ASN1_R_NOT_ASCII_FORMAT                          190
+# define ASN1_R_NOT_ENOUGH_DATA                           142
+# define ASN1_R_NO_CONTENT_TYPE                           209
+# define ASN1_R_NO_MATCHING_CHOICE_TYPE                   143
+# define ASN1_R_NO_MULTIPART_BODY_FAILURE                 210
+# define ASN1_R_NO_MULTIPART_BOUNDARY                     211
+# define ASN1_R_NO_SIG_CONTENT_TYPE                       212
+# define ASN1_R_NULL_IS_WRONG_LENGTH                      144
+# define ASN1_R_OBJECT_NOT_ASCII_FORMAT                   191
+# define ASN1_R_ODD_NUMBER_OF_CHARS                       145
+# define ASN1_R_SECOND_NUMBER_TOO_LARGE                   147
+# define ASN1_R_SEQUENCE_LENGTH_MISMATCH                  148
+# define ASN1_R_SEQUENCE_NOT_CONSTRUCTED                  149
+# define ASN1_R_SEQUENCE_OR_SET_NEEDS_CONFIG              192
+# define ASN1_R_SHORT_LINE                                150
+# define ASN1_R_SIG_INVALID_MIME_TYPE                     213
+# define ASN1_R_STREAMING_NOT_SUPPORTED                   202
+# define ASN1_R_STRING_TOO_LONG                           151
+# define ASN1_R_STRING_TOO_SHORT                          152
+# define ASN1_R_THE_ASN1_OBJECT_IDENTIFIER_IS_NOT_KNOWN_FOR_THIS_MD 154
+# define ASN1_R_TIME_NOT_ASCII_FORMAT                     193
+# define ASN1_R_TOO_LARGE                                 223
+# define ASN1_R_TOO_LONG                                  155
+# define ASN1_R_TOO_SMALL                                 224
+# define ASN1_R_TYPE_NOT_CONSTRUCTED                      156
+# define ASN1_R_TYPE_NOT_PRIMITIVE                        195
+# define ASN1_R_UNEXPECTED_EOC                            159
+# define ASN1_R_UNIVERSALSTRING_IS_WRONG_LENGTH           215
+# define ASN1_R_UNKNOWN_FORMAT                            160
+# define ASN1_R_UNKNOWN_MESSAGE_DIGEST_ALGORITHM          161
+# define ASN1_R_UNKNOWN_OBJECT_TYPE                       162
+# define ASN1_R_UNKNOWN_PUBLIC_KEY_TYPE                   163
+# define ASN1_R_UNKNOWN_SIGNATURE_ALGORITHM               199
+# define ASN1_R_UNKNOWN_TAG                               194
+# define ASN1_R_UNSUPPORTED_ANY_DEFINED_BY_TYPE           164
+# define ASN1_R_UNSUPPORTED_CIPHER                        228
+# define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
+# define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_WRONG_INTEGER_TYPE                        225
+# define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
+# define ASN1_R_WRONG_TAG                                 168
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/asn1t.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/asn1t.h
new file mode 100644
index 000000000..a450ba0d9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/asn1t.h
@@ -0,0 +1,945 @@
+/*
+ * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_ASN1T_H
+# define HEADER_ASN1T_H
+
+# include <stddef.h>
+# include <openssl/e_os2.h>
+# include <openssl/asn1.h>
+
+# ifdef OPENSSL_BUILD_SHLIBCRYPTO
+#  undef OPENSSL_EXTERN
+#  define OPENSSL_EXTERN OPENSSL_EXPORT
+# endif
+
+/* ASN1 template defines, structures and functions */
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+# ifndef OPENSSL_EXPORT_VAR_AS_FUNCTION
+
+/* Macro to obtain ASN1_ADB pointer from a type (only used internally) */
+#  define ASN1_ADB_ptr(iptr) ((const ASN1_ADB *)(iptr))
+
+/* Macros for start and end of ASN1_ITEM definition */
+
+#  define ASN1_ITEM_start(itname) \
+        const ASN1_ITEM itname##_it = {
+
+#  define static_ASN1_ITEM_start(itname) \
+        static const ASN1_ITEM itname##_it = {
+
+#  define ASN1_ITEM_end(itname)                 \
+                };
+
+# else
+
+/* Macro to obtain ASN1_ADB pointer from a type (only used internally) */
+#  define ASN1_ADB_ptr(iptr) ((const ASN1_ADB *)((iptr)()))
+
+/* Macros for start and end of ASN1_ITEM definition */
+
+#  define ASN1_ITEM_start(itname) \
+        const ASN1_ITEM * itname##_it(void) \
+        { \
+                static const ASN1_ITEM local_it = {
+
+#  define static_ASN1_ITEM_start(itname) \
+        static ASN1_ITEM_start(itname)
+
+#  define ASN1_ITEM_end(itname) \
+                }; \
+        return &local_it; \
+        }
+
+# endif
+
+/* Macros to aid ASN1 template writing */
+
+# define ASN1_ITEM_TEMPLATE(tname) \
+        static const ASN1_TEMPLATE tname##_item_tt
+
+# define ASN1_ITEM_TEMPLATE_END(tname) \
+        ;\
+        ASN1_ITEM_start(tname) \
+                ASN1_ITYPE_PRIMITIVE,\
+                -1,\
+                &tname##_item_tt,\
+                0,\
+                NULL,\
+                0,\
+                #tname \
+        ASN1_ITEM_end(tname)
+# define static_ASN1_ITEM_TEMPLATE_END(tname) \
+        ;\
+        static_ASN1_ITEM_start(tname) \
+                ASN1_ITYPE_PRIMITIVE,\
+                -1,\
+                &tname##_item_tt,\
+                0,\
+                NULL,\
+                0,\
+                #tname \
+        ASN1_ITEM_end(tname)
+
+/* This is a ASN1 type which just embeds a template */
+
+/*-
+ * This pair helps declare a SEQUENCE. We can do:
+ *
+ *      ASN1_SEQUENCE(stname) = {
+ *              ... SEQUENCE components ...
+ *      } ASN1_SEQUENCE_END(stname)
+ *
+ *      This will produce an ASN1_ITEM called stname_it
+ *      for a structure called stname.
+ *
+ *      If you want the same structure but a different
+ *      name then use:
+ *
+ *      ASN1_SEQUENCE(itname) = {
+ *              ... SEQUENCE components ...
+ *      } ASN1_SEQUENCE_END_name(stname, itname)
+ *
+ *      This will create an item called itname_it using
+ *      a structure called stname.
+ */
+
+# define ASN1_SEQUENCE(tname) \
+        static const ASN1_TEMPLATE tname##_seq_tt[]
+
+# define ASN1_SEQUENCE_END(stname) ASN1_SEQUENCE_END_name(stname, stname)
+
+# define static_ASN1_SEQUENCE_END(stname) static_ASN1_SEQUENCE_END_name(stname, stname)
+
+# define ASN1_SEQUENCE_END_name(stname, tname) \
+        ;\
+        ASN1_ITEM_start(tname) \
+                ASN1_ITYPE_SEQUENCE,\
+                V_ASN1_SEQUENCE,\
+                tname##_seq_tt,\
+                sizeof(tname##_seq_tt) / sizeof(ASN1_TEMPLATE),\
+                NULL,\
+                sizeof(stname),\
+                #tname \
+        ASN1_ITEM_end(tname)
+
+# define static_ASN1_SEQUENCE_END_name(stname, tname) \
+        ;\
+        static_ASN1_ITEM_start(tname) \
+                ASN1_ITYPE_SEQUENCE,\
+                V_ASN1_SEQUENCE,\
+                tname##_seq_tt,\
+                sizeof(tname##_seq_tt) / sizeof(ASN1_TEMPLATE),\
+                NULL,\
+                sizeof(stname),\
+                #stname \
+        ASN1_ITEM_end(tname)
+
+# define ASN1_NDEF_SEQUENCE(tname) \
+        ASN1_SEQUENCE(tname)
+
+# define ASN1_NDEF_SEQUENCE_cb(tname, cb) \
+        ASN1_SEQUENCE_cb(tname, cb)
+
+# define ASN1_SEQUENCE_cb(tname, cb) \
+        static const ASN1_AUX tname##_aux = {NULL, 0, 0, 0, cb, 0}; \
+        ASN1_SEQUENCE(tname)
+
+# define ASN1_BROKEN_SEQUENCE(tname) \
+        static const ASN1_AUX tname##_aux = {NULL, ASN1_AFLG_BROKEN, 0, 0, 0, 0}; \
+        ASN1_SEQUENCE(tname)
+
+# define ASN1_SEQUENCE_ref(tname, cb) \
+        static const ASN1_AUX tname##_aux = {NULL, ASN1_AFLG_REFCOUNT, offsetof(tname, references), offsetof(tname, lock), cb, 0}; \
+        ASN1_SEQUENCE(tname)
+
+# define ASN1_SEQUENCE_enc(tname, enc, cb) \
+        static const ASN1_AUX tname##_aux = {NULL, ASN1_AFLG_ENCODING, 0, 0, cb, offsetof(tname, enc)}; \
+        ASN1_SEQUENCE(tname)
+
+# define ASN1_NDEF_SEQUENCE_END(tname) \
+        ;\
+        ASN1_ITEM_start(tname) \
+                ASN1_ITYPE_NDEF_SEQUENCE,\
+                V_ASN1_SEQUENCE,\
+                tname##_seq_tt,\
+                sizeof(tname##_seq_tt) / sizeof(ASN1_TEMPLATE),\
+                NULL,\
+                sizeof(tname),\
+                #tname \
+        ASN1_ITEM_end(tname)
+# define static_ASN1_NDEF_SEQUENCE_END(tname) \
+        ;\
+        static_ASN1_ITEM_start(tname) \
+                ASN1_ITYPE_NDEF_SEQUENCE,\
+                V_ASN1_SEQUENCE,\
+                tname##_seq_tt,\
+                sizeof(tname##_seq_tt) / sizeof(ASN1_TEMPLATE),\
+                NULL,\
+                sizeof(tname),\
+                #tname \
+        ASN1_ITEM_end(tname)
+
+# define ASN1_BROKEN_SEQUENCE_END(stname) ASN1_SEQUENCE_END_ref(stname, stname)
+# define static_ASN1_BROKEN_SEQUENCE_END(stname) \
+        static_ASN1_SEQUENCE_END_ref(stname, stname)
+
+# define ASN1_SEQUENCE_END_enc(stname, tname) ASN1_SEQUENCE_END_ref(stname, tname)
+
+# define ASN1_SEQUENCE_END_cb(stname, tname) ASN1_SEQUENCE_END_ref(stname, tname)
+# define static_ASN1_SEQUENCE_END_cb(stname, tname) static_ASN1_SEQUENCE_END_ref(stname, tname)
+
+# define ASN1_SEQUENCE_END_ref(stname, tname) \
+        ;\
+        ASN1_ITEM_start(tname) \
+                ASN1_ITYPE_SEQUENCE,\
+                V_ASN1_SEQUENCE,\
+                tname##_seq_tt,\
+                sizeof(tname##_seq_tt) / sizeof(ASN1_TEMPLATE),\
+                &tname##_aux,\
+                sizeof(stname),\
+                #tname \
+        ASN1_ITEM_end(tname)
+# define static_ASN1_SEQUENCE_END_ref(stname, tname) \
+        ;\
+        static_ASN1_ITEM_start(tname) \
+                ASN1_ITYPE_SEQUENCE,\
+                V_ASN1_SEQUENCE,\
+                tname##_seq_tt,\
+                sizeof(tname##_seq_tt) / sizeof(ASN1_TEMPLATE),\
+                &tname##_aux,\
+                sizeof(stname),\
+                #stname \
+        ASN1_ITEM_end(tname)
+
+# define ASN1_NDEF_SEQUENCE_END_cb(stname, tname) \
+        ;\
+        ASN1_ITEM_start(tname) \
+                ASN1_ITYPE_NDEF_SEQUENCE,\
+                V_ASN1_SEQUENCE,\
+                tname##_seq_tt,\
+                sizeof(tname##_seq_tt) / sizeof(ASN1_TEMPLATE),\
+                &tname##_aux,\
+                sizeof(stname),\
+                #stname \
+        ASN1_ITEM_end(tname)
+
+/*-
+ * This pair helps declare a CHOICE type. We can do:
+ *
+ *      ASN1_CHOICE(chname) = {
+ *              ... CHOICE options ...
+ *      ASN1_CHOICE_END(chname)
+ *
+ *      This will produce an ASN1_ITEM called chname_it
+ *      for a structure called chname. The structure
+ *      definition must look like this:
+ *      typedef struct {
+ *              int type;
+ *              union {
+ *                      ASN1_SOMETHING *opt1;
+ *                      ASN1_SOMEOTHER *opt2;
+ *              } value;
+ *      } chname;
+ *
+ *      the name of the selector must be 'type'.
+ *      to use an alternative selector name use the
+ *      ASN1_CHOICE_END_selector() version.
+ */
+
+# define ASN1_CHOICE(tname) \
+        static const ASN1_TEMPLATE tname##_ch_tt[]
+
+# define ASN1_CHOICE_cb(tname, cb) \
+        static const ASN1_AUX tname##_aux = {NULL, 0, 0, 0, cb, 0}; \
+        ASN1_CHOICE(tname)
+
+# define ASN1_CHOICE_END(stname) ASN1_CHOICE_END_name(stname, stname)
+
+# define static_ASN1_CHOICE_END(stname) static_ASN1_CHOICE_END_name(stname, stname)
+
+# define ASN1_CHOICE_END_name(stname, tname) ASN1_CHOICE_END_selector(stname, tname, type)
+
+# define static_ASN1_CHOICE_END_name(stname, tname) static_ASN1_CHOICE_END_selector(stname, tname, type)
+
+# define ASN1_CHOICE_END_selector(stname, tname, selname) \
+        ;\
+        ASN1_ITEM_start(tname) \
+                ASN1_ITYPE_CHOICE,\
+                offsetof(stname,selname) ,\
+                tname##_ch_tt,\
+                sizeof(tname##_ch_tt) / sizeof(ASN1_TEMPLATE),\
+                NULL,\
+                sizeof(stname),\
+                #stname \
+        ASN1_ITEM_end(tname)
+
+# define static_ASN1_CHOICE_END_selector(stname, tname, selname) \
+        ;\
+        static_ASN1_ITEM_start(tname) \
+                ASN1_ITYPE_CHOICE,\
+                offsetof(stname,selname) ,\
+                tname##_ch_tt,\
+                sizeof(tname##_ch_tt) / sizeof(ASN1_TEMPLATE),\
+                NULL,\
+                sizeof(stname),\
+                #stname \
+        ASN1_ITEM_end(tname)
+
+# define ASN1_CHOICE_END_cb(stname, tname, selname) \
+        ;\
+        ASN1_ITEM_start(tname) \
+                ASN1_ITYPE_CHOICE,\
+                offsetof(stname,selname) ,\
+                tname##_ch_tt,\
+                sizeof(tname##_ch_tt) / sizeof(ASN1_TEMPLATE),\
+                &tname##_aux,\
+                sizeof(stname),\
+                #stname \
+        ASN1_ITEM_end(tname)
+
+/* This helps with the template wrapper form of ASN1_ITEM */
+
+# define ASN1_EX_TEMPLATE_TYPE(flags, tag, name, type) { \
+        (flags), (tag), 0,\
+        #name, ASN1_ITEM_ref(type) }
+
+/* These help with SEQUENCE or CHOICE components */
+
+/* used to declare other types */
+
+# define ASN1_EX_TYPE(flags, tag, stname, field, type) { \
+        (flags), (tag), offsetof(stname, field),\
+        #field, ASN1_ITEM_ref(type) }
+
+/* implicit and explicit helper macros */
+
+# define ASN1_IMP_EX(stname, field, type, tag, ex) \
+         ASN1_EX_TYPE(ASN1_TFLG_IMPLICIT | (ex), tag, stname, field, type)
+
+# define ASN1_EXP_EX(stname, field, type, tag, ex) \
+         ASN1_EX_TYPE(ASN1_TFLG_EXPLICIT | (ex), tag, stname, field, type)
+
+/* Any defined by macros: the field used is in the table itself */
+
+# ifndef OPENSSL_EXPORT_VAR_AS_FUNCTION
+#  define ASN1_ADB_OBJECT(tblname) { ASN1_TFLG_ADB_OID, -1, 0, #tblname, (const ASN1_ITEM *)&(tblname##_adb) }
+#  define ASN1_ADB_INTEGER(tblname) { ASN1_TFLG_ADB_INT, -1, 0, #tblname, (const ASN1_ITEM *)&(tblname##_adb) }
+# else
+#  define ASN1_ADB_OBJECT(tblname) { ASN1_TFLG_ADB_OID, -1, 0, #tblname, tblname##_adb }
+#  define ASN1_ADB_INTEGER(tblname) { ASN1_TFLG_ADB_INT, -1, 0, #tblname, tblname##_adb }
+# endif
+/* Plain simple type */
+# define ASN1_SIMPLE(stname, field, type) ASN1_EX_TYPE(0,0, stname, field, type)
+/* Embedded simple type */
+# define ASN1_EMBED(stname, field, type) ASN1_EX_TYPE(ASN1_TFLG_EMBED,0, stname, field, type)
+
+/* OPTIONAL simple type */
+# define ASN1_OPT(stname, field, type) ASN1_EX_TYPE(ASN1_TFLG_OPTIONAL, 0, stname, field, type)
+# define ASN1_OPT_EMBED(stname, field, type) ASN1_EX_TYPE(ASN1_TFLG_OPTIONAL|ASN1_TFLG_EMBED, 0, stname, field, type)
+
+/* IMPLICIT tagged simple type */
+# define ASN1_IMP(stname, field, type, tag) ASN1_IMP_EX(stname, field, type, tag, 0)
+# define ASN1_IMP_EMBED(stname, field, type, tag) ASN1_IMP_EX(stname, field, type, tag, ASN1_TFLG_EMBED)
+
+/* IMPLICIT tagged OPTIONAL simple type */
+# define ASN1_IMP_OPT(stname, field, type, tag) ASN1_IMP_EX(stname, field, type, tag, ASN1_TFLG_OPTIONAL)
+# define ASN1_IMP_OPT_EMBED(stname, field, type, tag) ASN1_IMP_EX(stname, field, type, tag, ASN1_TFLG_OPTIONAL|ASN1_TFLG_EMBED)
+
+/* Same as above but EXPLICIT */
+
+# define ASN1_EXP(stname, field, type, tag) ASN1_EXP_EX(stname, field, type, tag, 0)
+# define ASN1_EXP_EMBED(stname, field, type, tag) ASN1_EXP_EX(stname, field, type, tag, ASN1_TFLG_EMBED)
+# define ASN1_EXP_OPT(stname, field, type, tag) ASN1_EXP_EX(stname, field, type, tag, ASN1_TFLG_OPTIONAL)
+# define ASN1_EXP_OPT_EMBED(stname, field, type, tag) ASN1_EXP_EX(stname, field, type, tag, ASN1_TFLG_OPTIONAL|ASN1_TFLG_EMBED)
+
+/* SEQUENCE OF type */
+# define ASN1_SEQUENCE_OF(stname, field, type) \
+                ASN1_EX_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, stname, field, type)
+
+/* OPTIONAL SEQUENCE OF */
+# define ASN1_SEQUENCE_OF_OPT(stname, field, type) \
+                ASN1_EX_TYPE(ASN1_TFLG_SEQUENCE_OF|ASN1_TFLG_OPTIONAL, 0, stname, field, type)
+
+/* Same as above but for SET OF */
+
+# define ASN1_SET_OF(stname, field, type) \
+                ASN1_EX_TYPE(ASN1_TFLG_SET_OF, 0, stname, field, type)
+
+# define ASN1_SET_OF_OPT(stname, field, type) \
+                ASN1_EX_TYPE(ASN1_TFLG_SET_OF|ASN1_TFLG_OPTIONAL, 0, stname, field, type)
+
+/* Finally compound types of SEQUENCE, SET, IMPLICIT, EXPLICIT and OPTIONAL */
+
+# define ASN1_IMP_SET_OF(stname, field, type, tag) \
+                        ASN1_IMP_EX(stname, field, type, tag, ASN1_TFLG_SET_OF)
+
+# define ASN1_EXP_SET_OF(stname, field, type, tag) \
+                        ASN1_EXP_EX(stname, field, type, tag, ASN1_TFLG_SET_OF)
+
+# define ASN1_IMP_SET_OF_OPT(stname, field, type, tag) \
+                        ASN1_IMP_EX(stname, field, type, tag, ASN1_TFLG_SET_OF|ASN1_TFLG_OPTIONAL)
+
+# define ASN1_EXP_SET_OF_OPT(stname, field, type, tag) \
+                        ASN1_EXP_EX(stname, field, type, tag, ASN1_TFLG_SET_OF|ASN1_TFLG_OPTIONAL)
+
+# define ASN1_IMP_SEQUENCE_OF(stname, field, type, tag) \
+                        ASN1_IMP_EX(stname, field, type, tag, ASN1_TFLG_SEQUENCE_OF)
+
+# define ASN1_IMP_SEQUENCE_OF_OPT(stname, field, type, tag) \
+                        ASN1_IMP_EX(stname, field, type, tag, ASN1_TFLG_SEQUENCE_OF|ASN1_TFLG_OPTIONAL)
+
+# define ASN1_EXP_SEQUENCE_OF(stname, field, type, tag) \
+                        ASN1_EXP_EX(stname, field, type, tag, ASN1_TFLG_SEQUENCE_OF)
+
+# define ASN1_EXP_SEQUENCE_OF_OPT(stname, field, type, tag) \
+                        ASN1_EXP_EX(stname, field, type, tag, ASN1_TFLG_SEQUENCE_OF|ASN1_TFLG_OPTIONAL)
+
+/* EXPLICIT using indefinite length constructed form */
+# define ASN1_NDEF_EXP(stname, field, type, tag) \
+                        ASN1_EXP_EX(stname, field, type, tag, ASN1_TFLG_NDEF)
+
+/* EXPLICIT OPTIONAL using indefinite length constructed form */
+# define ASN1_NDEF_EXP_OPT(stname, field, type, tag) \
+                        ASN1_EXP_EX(stname, field, type, tag, ASN1_TFLG_OPTIONAL|ASN1_TFLG_NDEF)
+
+/* Macros for the ASN1_ADB structure */
+
+# define ASN1_ADB(name) \
+        static const ASN1_ADB_TABLE name##_adbtbl[]
+
+# ifndef OPENSSL_EXPORT_VAR_AS_FUNCTION
+
+#  define ASN1_ADB_END(name, flags, field, adb_cb, def, none) \
+        ;\
+        static const ASN1_ADB name##_adb = {\
+                flags,\
+                offsetof(name, field),\
+                adb_cb,\
+                name##_adbtbl,\
+                sizeof(name##_adbtbl) / sizeof(ASN1_ADB_TABLE),\
+                def,\
+                none\
+        }
+
+# else
+
+#  define ASN1_ADB_END(name, flags, field, adb_cb, def, none) \
+        ;\
+        static const ASN1_ITEM *name##_adb(void) \
+        { \
+        static const ASN1_ADB internal_adb = \
+                {\
+                flags,\
+                offsetof(name, field),\
+                adb_cb,\
+                name##_adbtbl,\
+                sizeof(name##_adbtbl) / sizeof(ASN1_ADB_TABLE),\
+                def,\
+                none\
+                }; \
+                return (const ASN1_ITEM *) &internal_adb; \
+        } \
+        void dummy_function(void)
+
+# endif
+
+# define ADB_ENTRY(val, template) {val, template}
+
+# define ASN1_ADB_TEMPLATE(name) \
+        static const ASN1_TEMPLATE name##_tt
+
+/*
+ * This is the ASN1 template structure that defines a wrapper round the
+ * actual type. It determines the actual position of the field in the value
+ * structure, various flags such as OPTIONAL and the field name.
+ */
+
+struct ASN1_TEMPLATE_st {
+    unsigned long flags;        /* Various flags */
+    long tag;                   /* tag, not used if no tagging */
+    unsigned long offset;       /* Offset of this field in structure */
+    const char *field_name;     /* Field name */
+    ASN1_ITEM_EXP *item;        /* Relevant ASN1_ITEM or ASN1_ADB */
+};
+
+/* Macro to extract ASN1_ITEM and ASN1_ADB pointer from ASN1_TEMPLATE */
+
+# define ASN1_TEMPLATE_item(t) (t->item_ptr)
+# define ASN1_TEMPLATE_adb(t) (t->item_ptr)
+
+typedef struct ASN1_ADB_TABLE_st ASN1_ADB_TABLE;
+typedef struct ASN1_ADB_st ASN1_ADB;
+
+struct ASN1_ADB_st {
+    unsigned long flags;        /* Various flags */
+    unsigned long offset;       /* Offset of selector field */
+    int (*adb_cb)(long *psel);  /* Application callback */
+    const ASN1_ADB_TABLE *tbl;  /* Table of possible types */
+    long tblcount;              /* Number of entries in tbl */
+    const ASN1_TEMPLATE *default_tt; /* Type to use if no match */
+    const ASN1_TEMPLATE *null_tt; /* Type to use if selector is NULL */
+};
+
+struct ASN1_ADB_TABLE_st {
+    long value;                 /* NID for an object or value for an int */
+    const ASN1_TEMPLATE tt;     /* item for this value */
+};
+
+/* template flags */
+
+/* Field is optional */
+# define ASN1_TFLG_OPTIONAL      (0x1)
+
+/* Field is a SET OF */
+# define ASN1_TFLG_SET_OF        (0x1 << 1)
+
+/* Field is a SEQUENCE OF */
+# define ASN1_TFLG_SEQUENCE_OF   (0x2 << 1)
+
+/*
+ * Special case: this refers to a SET OF that will be sorted into DER order
+ * when encoded *and* the corresponding STACK will be modified to match the
+ * new order.
+ */
+# define ASN1_TFLG_SET_ORDER     (0x3 << 1)
+
+/* Mask for SET OF or SEQUENCE OF */
+# define ASN1_TFLG_SK_MASK       (0x3 << 1)
+
+/*
+ * These flags mean the tag should be taken from the tag field. If EXPLICIT
+ * then the underlying type is used for the inner tag.
+ */
+
+/* IMPLICIT tagging */
+# define ASN1_TFLG_IMPTAG        (0x1 << 3)
+
+/* EXPLICIT tagging, inner tag from underlying type */
+# define ASN1_TFLG_EXPTAG        (0x2 << 3)
+
+# define ASN1_TFLG_TAG_MASK      (0x3 << 3)
+
+/* context specific IMPLICIT */
+# define ASN1_TFLG_IMPLICIT      (ASN1_TFLG_IMPTAG|ASN1_TFLG_CONTEXT)
+
+/* context specific EXPLICIT */
+# define ASN1_TFLG_EXPLICIT      (ASN1_TFLG_EXPTAG|ASN1_TFLG_CONTEXT)
+
+/*
+ * If tagging is in force these determine the type of tag to use. Otherwise
+ * the tag is determined by the underlying type. These values reflect the
+ * actual octet format.
+ */
+
+/* Universal tag */
+# define ASN1_TFLG_UNIVERSAL     (0x0<<6)
+/* Application tag */
+# define ASN1_TFLG_APPLICATION   (0x1<<6)
+/* Context specific tag */
+# define ASN1_TFLG_CONTEXT       (0x2<<6)
+/* Private tag */
+# define ASN1_TFLG_PRIVATE       (0x3<<6)
+
+# define ASN1_TFLG_TAG_CLASS     (0x3<<6)
+
+/*
+ * These are for ANY DEFINED BY type. In this case the 'item' field points to
+ * an ASN1_ADB structure which contains a table of values to decode the
+ * relevant type
+ */
+
+# define ASN1_TFLG_ADB_MASK      (0x3<<8)
+
+# define ASN1_TFLG_ADB_OID       (0x1<<8)
+
+# define ASN1_TFLG_ADB_INT       (0x1<<9)
+
+/*
+ * This flag when present in a SEQUENCE OF, SET OF or EXPLICIT causes
+ * indefinite length constructed encoding to be used if required.
+ */
+
+# define ASN1_TFLG_NDEF          (0x1<<11)
+
+/* Field is embedded and not a pointer */
+# define ASN1_TFLG_EMBED         (0x1 << 12)
+
+/* This is the actual ASN1 item itself */
+
+struct ASN1_ITEM_st {
+    char itype;                 /* The item type, primitive, SEQUENCE, CHOICE
+                                 * or extern */
+    long utype;                 /* underlying type */
+    const ASN1_TEMPLATE *templates; /* If SEQUENCE or CHOICE this contains
+                                     * the contents */
+    long tcount;                /* Number of templates if SEQUENCE or CHOICE */
+    const void *funcs;          /* functions that handle this type */
+    long size;                  /* Structure size (usually) */
+    const char *sname;          /* Structure name */
+};
+
+/*-
+ * These are values for the itype field and
+ * determine how the type is interpreted.
+ *
+ * For PRIMITIVE types the underlying type
+ * determines the behaviour if items is NULL.
+ *
+ * Otherwise templates must contain a single
+ * template and the type is treated in the
+ * same way as the type specified in the template.
+ *
+ * For SEQUENCE types the templates field points
+ * to the members, the size field is the
+ * structure size.
+ *
+ * For CHOICE types the templates field points
+ * to each possible member (typically a union)
+ * and the 'size' field is the offset of the
+ * selector.
+ *
+ * The 'funcs' field is used for application
+ * specific functions.
+ *
+ * The EXTERN type uses a new style d2i/i2d.
+ * The new style should be used where possible
+ * because it avoids things like the d2i IMPLICIT
+ * hack.
+ *
+ * MSTRING is a multiple string type, it is used
+ * for a CHOICE of character strings where the
+ * actual strings all occupy an ASN1_STRING
+ * structure. In this case the 'utype' field
+ * has a special meaning, it is used as a mask
+ * of acceptable types using the B_ASN1 constants.
+ *
+ * NDEF_SEQUENCE is the same as SEQUENCE except
+ * that it will use indefinite length constructed
+ * encoding if requested.
+ *
+ */
+
+# define ASN1_ITYPE_PRIMITIVE            0x0
+
+# define ASN1_ITYPE_SEQUENCE             0x1
+
+# define ASN1_ITYPE_CHOICE               0x2
+
+# define ASN1_ITYPE_EXTERN               0x4
+
+# define ASN1_ITYPE_MSTRING              0x5
+
+# define ASN1_ITYPE_NDEF_SEQUENCE        0x6
+
+/*
+ * Cache for ASN1 tag and length, so we don't keep re-reading it for things
+ * like CHOICE
+ */
+
+struct ASN1_TLC_st {
+    char valid;                 /* Values below are valid */
+    int ret;                    /* return value */
+    long plen;                  /* length */
+    int ptag;                   /* class value */
+    int pclass;                 /* class value */
+    int hdrlen;                 /* header length */
+};
+
+/* Typedefs for ASN1 function pointers */
+typedef int ASN1_ex_d2i(ASN1_VALUE **pval, const unsigned char **in, long len,
+                        const ASN1_ITEM *it, int tag, int aclass, char opt,
+                        ASN1_TLC *ctx);
+
+typedef int ASN1_ex_i2d(ASN1_VALUE **pval, unsigned char **out,
+                        const ASN1_ITEM *it, int tag, int aclass);
+typedef int ASN1_ex_new_func(ASN1_VALUE **pval, const ASN1_ITEM *it);
+typedef void ASN1_ex_free_func(ASN1_VALUE **pval, const ASN1_ITEM *it);
+
+typedef int ASN1_ex_print_func(BIO *out, ASN1_VALUE **pval,
+                               int indent, const char *fname,
+                               const ASN1_PCTX *pctx);
+
+typedef int ASN1_primitive_i2c(ASN1_VALUE **pval, unsigned char *cont,
+                               int *putype, const ASN1_ITEM *it);
+typedef int ASN1_primitive_c2i(ASN1_VALUE **pval, const unsigned char *cont,
+                               int len, int utype, char *free_cont,
+                               const ASN1_ITEM *it);
+typedef int ASN1_primitive_print(BIO *out, ASN1_VALUE **pval,
+                                 const ASN1_ITEM *it, int indent,
+                                 const ASN1_PCTX *pctx);
+
+typedef struct ASN1_EXTERN_FUNCS_st {
+    void *app_data;
+    ASN1_ex_new_func *asn1_ex_new;
+    ASN1_ex_free_func *asn1_ex_free;
+    ASN1_ex_free_func *asn1_ex_clear;
+    ASN1_ex_d2i *asn1_ex_d2i;
+    ASN1_ex_i2d *asn1_ex_i2d;
+    ASN1_ex_print_func *asn1_ex_print;
+} ASN1_EXTERN_FUNCS;
+
+typedef struct ASN1_PRIMITIVE_FUNCS_st {
+    void *app_data;
+    unsigned long flags;
+    ASN1_ex_new_func *prim_new;
+    ASN1_ex_free_func *prim_free;
+    ASN1_ex_free_func *prim_clear;
+    ASN1_primitive_c2i *prim_c2i;
+    ASN1_primitive_i2c *prim_i2c;
+    ASN1_primitive_print *prim_print;
+} ASN1_PRIMITIVE_FUNCS;
+
+/*
+ * This is the ASN1_AUX structure: it handles various miscellaneous
+ * requirements. For example the use of reference counts and an informational
+ * callback. The "informational callback" is called at various points during
+ * the ASN1 encoding and decoding. It can be used to provide minor
+ * customisation of the structures used. This is most useful where the
+ * supplied routines *almost* do the right thing but need some extra help at
+ * a few points. If the callback returns zero then it is assumed a fatal
+ * error has occurred and the main operation should be abandoned. If major
+ * changes in the default behaviour are required then an external type is
+ * more appropriate.
+ */
+
+typedef int ASN1_aux_cb(int operation, ASN1_VALUE **in, const ASN1_ITEM *it,
+                        void *exarg);
+
+typedef struct ASN1_AUX_st {
+    void *app_data;
+    int flags;
+    int ref_offset;             /* Offset of reference value */
+    int ref_lock;               /* Lock type to use */
+    ASN1_aux_cb *asn1_cb;
+    int enc_offset;             /* Offset of ASN1_ENCODING structure */
+} ASN1_AUX;
+
+/* For print related callbacks exarg points to this structure */
+typedef struct ASN1_PRINT_ARG_st {
+    BIO *out;
+    int indent;
+    const ASN1_PCTX *pctx;
+} ASN1_PRINT_ARG;
+
+/* For streaming related callbacks exarg points to this structure */
+typedef struct ASN1_STREAM_ARG_st {
+    /* BIO to stream through */
+    BIO *out;
+    /* BIO with filters appended */
+    BIO *ndef_bio;
+    /* Streaming I/O boundary */
+    unsigned char **boundary;
+} ASN1_STREAM_ARG;
+
+/* Flags in ASN1_AUX */
+
+/* Use a reference count */
+# define ASN1_AFLG_REFCOUNT      1
+/* Save the encoding of structure (useful for signatures) */
+# define ASN1_AFLG_ENCODING      2
+/* The Sequence length is invalid */
+# define ASN1_AFLG_BROKEN        4
+
+/* operation values for asn1_cb */
+
+# define ASN1_OP_NEW_PRE         0
+# define ASN1_OP_NEW_POST        1
+# define ASN1_OP_FREE_PRE        2
+# define ASN1_OP_FREE_POST       3
+# define ASN1_OP_D2I_PRE         4
+# define ASN1_OP_D2I_POST        5
+# define ASN1_OP_I2D_PRE         6
+# define ASN1_OP_I2D_POST        7
+# define ASN1_OP_PRINT_PRE       8
+# define ASN1_OP_PRINT_POST      9
+# define ASN1_OP_STREAM_PRE      10
+# define ASN1_OP_STREAM_POST     11
+# define ASN1_OP_DETACHED_PRE    12
+# define ASN1_OP_DETACHED_POST   13
+
+/* Macro to implement a primitive type */
+# define IMPLEMENT_ASN1_TYPE(stname) IMPLEMENT_ASN1_TYPE_ex(stname, stname, 0)
+# define IMPLEMENT_ASN1_TYPE_ex(itname, vname, ex) \
+                                ASN1_ITEM_start(itname) \
+                                        ASN1_ITYPE_PRIMITIVE, V_##vname, NULL, 0, NULL, ex, #itname \
+                                ASN1_ITEM_end(itname)
+
+/* Macro to implement a multi string type */
+# define IMPLEMENT_ASN1_MSTRING(itname, mask) \
+                                ASN1_ITEM_start(itname) \
+                                        ASN1_ITYPE_MSTRING, mask, NULL, 0, NULL, sizeof(ASN1_STRING), #itname \
+                                ASN1_ITEM_end(itname)
+
+# define IMPLEMENT_EXTERN_ASN1(sname, tag, fptrs) \
+        ASN1_ITEM_start(sname) \
+                ASN1_ITYPE_EXTERN, \
+                tag, \
+                NULL, \
+                0, \
+                &fptrs, \
+                0, \
+                #sname \
+        ASN1_ITEM_end(sname)
+
+/* Macro to implement standard functions in terms of ASN1_ITEM structures */
+
+# define IMPLEMENT_ASN1_FUNCTIONS(stname) IMPLEMENT_ASN1_FUNCTIONS_fname(stname, stname, stname)
+
+# define IMPLEMENT_ASN1_FUNCTIONS_name(stname, itname) IMPLEMENT_ASN1_FUNCTIONS_fname(stname, itname, itname)
+
+# define IMPLEMENT_ASN1_FUNCTIONS_ENCODE_name(stname, itname) \
+                        IMPLEMENT_ASN1_FUNCTIONS_ENCODE_fname(stname, itname, itname)
+
+# define IMPLEMENT_STATIC_ASN1_ALLOC_FUNCTIONS(stname) \
+                IMPLEMENT_ASN1_ALLOC_FUNCTIONS_pfname(static, stname, stname, stname)
+
+# define IMPLEMENT_ASN1_ALLOC_FUNCTIONS(stname) \
+                IMPLEMENT_ASN1_ALLOC_FUNCTIONS_fname(stname, stname, stname)
+
+# define IMPLEMENT_ASN1_ALLOC_FUNCTIONS_pfname(pre, stname, itname, fname) \
+        pre stname *fname##_new(void) \
+        { \
+                return (stname *)ASN1_item_new(ASN1_ITEM_rptr(itname)); \
+        } \
+        pre void fname##_free(stname *a) \
+        { \
+                ASN1_item_free((ASN1_VALUE *)a, ASN1_ITEM_rptr(itname)); \
+        }
+
+# define IMPLEMENT_ASN1_ALLOC_FUNCTIONS_fname(stname, itname, fname) \
+        stname *fname##_new(void) \
+        { \
+                return (stname *)ASN1_item_new(ASN1_ITEM_rptr(itname)); \
+        } \
+        void fname##_free(stname *a) \
+        { \
+                ASN1_item_free((ASN1_VALUE *)a, ASN1_ITEM_rptr(itname)); \
+        }
+
+# define IMPLEMENT_ASN1_FUNCTIONS_fname(stname, itname, fname) \
+        IMPLEMENT_ASN1_ENCODE_FUNCTIONS_fname(stname, itname, fname) \
+        IMPLEMENT_ASN1_ALLOC_FUNCTIONS_fname(stname, itname, fname)
+
+# define IMPLEMENT_ASN1_ENCODE_FUNCTIONS_fname(stname, itname, fname) \
+        stname *d2i_##fname(stname **a, const unsigned char **in, long len) \
+        { \
+                return (stname *)ASN1_item_d2i((ASN1_VALUE **)a, in, len, ASN1_ITEM_rptr(itname));\
+        } \
+        int i2d_##fname(stname *a, unsigned char **out) \
+        { \
+                return ASN1_item_i2d((ASN1_VALUE *)a, out, ASN1_ITEM_rptr(itname));\
+        }
+
+# define IMPLEMENT_ASN1_NDEF_FUNCTION(stname) \
+        int i2d_##stname##_NDEF(stname *a, unsigned char **out) \
+        { \
+                return ASN1_item_ndef_i2d((ASN1_VALUE *)a, out, ASN1_ITEM_rptr(stname));\
+        }
+
+# define IMPLEMENT_STATIC_ASN1_ENCODE_FUNCTIONS(stname) \
+        static stname *d2i_##stname(stname **a, \
+                                   const unsigned char **in, long len) \
+        { \
+                return (stname *)ASN1_item_d2i((ASN1_VALUE **)a, in, len, \
+                                               ASN1_ITEM_rptr(stname)); \
+        } \
+        static int i2d_##stname(stname *a, unsigned char **out) \
+        { \
+                return ASN1_item_i2d((ASN1_VALUE *)a, out, \
+                                     ASN1_ITEM_rptr(stname)); \
+        }
+
+/*
+ * This includes evil casts to remove const: they will go away when full ASN1
+ * constification is done.
+ */
+# define IMPLEMENT_ASN1_ENCODE_FUNCTIONS_const_fname(stname, itname, fname) \
+        stname *d2i_##fname(stname **a, const unsigned char **in, long len) \
+        { \
+                return (stname *)ASN1_item_d2i((ASN1_VALUE **)a, in, len, ASN1_ITEM_rptr(itname));\
+        } \
+        int i2d_##fname(const stname *a, unsigned char **out) \
+        { \
+                return ASN1_item_i2d((ASN1_VALUE *)a, out, ASN1_ITEM_rptr(itname));\
+        }
+
+# define IMPLEMENT_ASN1_DUP_FUNCTION(stname) \
+        stname * stname##_dup(stname *x) \
+        { \
+        return ASN1_item_dup(ASN1_ITEM_rptr(stname), x); \
+        }
+
+# define IMPLEMENT_ASN1_PRINT_FUNCTION(stname) \
+        IMPLEMENT_ASN1_PRINT_FUNCTION_fname(stname, stname, stname)
+
+# define IMPLEMENT_ASN1_PRINT_FUNCTION_fname(stname, itname, fname) \
+        int fname##_print_ctx(BIO *out, stname *x, int indent, \
+                                                const ASN1_PCTX *pctx) \
+        { \
+                return ASN1_item_print(out, (ASN1_VALUE *)x, indent, \
+                        ASN1_ITEM_rptr(itname), pctx); \
+        }
+
+# define IMPLEMENT_ASN1_FUNCTIONS_const(name) \
+                IMPLEMENT_ASN1_FUNCTIONS_const_fname(name, name, name)
+
+# define IMPLEMENT_ASN1_FUNCTIONS_const_fname(stname, itname, fname) \
+        IMPLEMENT_ASN1_ENCODE_FUNCTIONS_const_fname(stname, itname, fname) \
+        IMPLEMENT_ASN1_ALLOC_FUNCTIONS_fname(stname, itname, fname)
+
+/* external definitions for primitive types */
+
+DECLARE_ASN1_ITEM(ASN1_BOOLEAN)
+DECLARE_ASN1_ITEM(ASN1_TBOOLEAN)
+DECLARE_ASN1_ITEM(ASN1_FBOOLEAN)
+DECLARE_ASN1_ITEM(ASN1_SEQUENCE)
+DECLARE_ASN1_ITEM(CBIGNUM)
+DECLARE_ASN1_ITEM(BIGNUM)
+DECLARE_ASN1_ITEM(INT32)
+DECLARE_ASN1_ITEM(ZINT32)
+DECLARE_ASN1_ITEM(UINT32)
+DECLARE_ASN1_ITEM(ZUINT32)
+DECLARE_ASN1_ITEM(INT64)
+DECLARE_ASN1_ITEM(ZINT64)
+DECLARE_ASN1_ITEM(UINT64)
+DECLARE_ASN1_ITEM(ZUINT64)
+
+# if OPENSSL_API_COMPAT < 0x10200000L
+/*
+ * LONG and ZLONG are strongly discouraged for use as stored data, as the
+ * underlying C type (long) differs in size depending on the architecture.
+ * They are designed with 32-bit longs in mind.
+ */
+DECLARE_ASN1_ITEM(LONG)
+DECLARE_ASN1_ITEM(ZLONG)
+# endif
+
+DEFINE_STACK_OF(ASN1_VALUE)
+
+/* Functions used internally by the ASN1 code */
+
+int ASN1_item_ex_new(ASN1_VALUE **pval, const ASN1_ITEM *it);
+void ASN1_item_ex_free(ASN1_VALUE **pval, const ASN1_ITEM *it);
+
+int ASN1_item_ex_d2i(ASN1_VALUE **pval, const unsigned char **in, long len,
+                     const ASN1_ITEM *it, int tag, int aclass, char opt,
+                     ASN1_TLC *ctx);
+
+int ASN1_item_ex_i2d(ASN1_VALUE **pval, unsigned char **out,
+                     const ASN1_ITEM *it, int tag, int aclass);
+
+#ifdef  __cplusplus
+}
+#endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/async.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/async.h
new file mode 100644
index 000000000..7052b8905
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/async.h
@@ -0,0 +1,76 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdlib.h>
+
+#ifndef HEADER_ASYNC_H
+# define HEADER_ASYNC_H
+
+#if defined(_WIN32)
+# if defined(BASETYPES) || defined(_WINDEF_H)
+/* application has to include <windows.h> to use this */
+#define OSSL_ASYNC_FD       HANDLE
+#define OSSL_BAD_ASYNC_FD   INVALID_HANDLE_VALUE
+# endif
+#else
+#define OSSL_ASYNC_FD       int
+#define OSSL_BAD_ASYNC_FD   -1
+#endif
+# include <openssl/asyncerr.h>
+
+
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+typedef struct async_job_st ASYNC_JOB;
+typedef struct async_wait_ctx_st ASYNC_WAIT_CTX;
+
+#define ASYNC_ERR      0
+#define ASYNC_NO_JOBS  1
+#define ASYNC_PAUSE    2
+#define ASYNC_FINISH   3
+
+int ASYNC_init_thread(size_t max_size, size_t init_size);
+void ASYNC_cleanup_thread(void);
+
+#ifdef OSSL_ASYNC_FD
+ASYNC_WAIT_CTX *ASYNC_WAIT_CTX_new(void);
+void ASYNC_WAIT_CTX_free(ASYNC_WAIT_CTX *ctx);
+int ASYNC_WAIT_CTX_set_wait_fd(ASYNC_WAIT_CTX *ctx, const void *key,
+                               OSSL_ASYNC_FD fd,
+                               void *custom_data,
+                               void (*cleanup)(ASYNC_WAIT_CTX *, const void *,
+                                               OSSL_ASYNC_FD, void *));
+int ASYNC_WAIT_CTX_get_fd(ASYNC_WAIT_CTX *ctx, const void *key,
+                        OSSL_ASYNC_FD *fd, void **custom_data);
+int ASYNC_WAIT_CTX_get_all_fds(ASYNC_WAIT_CTX *ctx, OSSL_ASYNC_FD *fd,
+                               size_t *numfds);
+int ASYNC_WAIT_CTX_get_changed_fds(ASYNC_WAIT_CTX *ctx, OSSL_ASYNC_FD *addfd,
+                                   size_t *numaddfds, OSSL_ASYNC_FD *delfd,
+                                   size_t *numdelfds);
+int ASYNC_WAIT_CTX_clear_fd(ASYNC_WAIT_CTX *ctx, const void *key);
+#endif
+
+int ASYNC_is_capable(void);
+
+int ASYNC_start_job(ASYNC_JOB **job, ASYNC_WAIT_CTX *ctx, int *ret,
+                    int (*func)(void *), void *args, size_t size);
+int ASYNC_pause_job(void);
+
+ASYNC_JOB *ASYNC_get_current_job(void);
+ASYNC_WAIT_CTX *ASYNC_get_wait_ctx(ASYNC_JOB *job);
+void ASYNC_block_pause(void);
+void ASYNC_unblock_pause(void);
+
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/asyncerr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/asyncerr.h
new file mode 100644
index 000000000..5497ba752
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/asyncerr.h
@@ -0,0 +1,38 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_ASYNCERR_H
+# define HEADER_ASYNCERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_ASYNC_strings(void);
+
+/*
+ * ASYNC function codes.
+ */
+# define ASYNC_F_ASYNC_CTX_NEW                            100
+# define ASYNC_F_ASYNC_INIT_THREAD                        101
+# define ASYNC_F_ASYNC_JOB_NEW                            102
+# define ASYNC_F_ASYNC_PAUSE_JOB                          103
+# define ASYNC_F_ASYNC_START_FUNC                         104
+# define ASYNC_F_ASYNC_START_JOB                          105
+# define ASYNC_F_ASYNC_WAIT_CTX_SET_WAIT_FD               106
+
+/*
+ * ASYNC reason codes.
+ */
+# define ASYNC_R_FAILED_TO_SET_POOL                       101
+# define ASYNC_R_FAILED_TO_SWAP_CONTEXT                   102
+# define ASYNC_R_INIT_FAILED                              105
+# define ASYNC_R_INVALID_POOL_SIZE                        103
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/bio.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/bio.h
new file mode 100644
index 000000000..2888b42da
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/bio.h
@@ -0,0 +1,804 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_BIO_H
+# define HEADER_BIO_H
+
+# include <openssl/e_os2.h>
+
+# ifndef OPENSSL_NO_STDIO
+#  include <stdio.h>
+# endif
+# include <stdarg.h>
+
+# include <openssl/crypto.h>
+# include <openssl/bioerr.h>
+
+# ifndef OPENSSL_NO_SCTP
+#  include <openssl/e_os2.h>
+# endif
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+/* There are the classes of BIOs */
+# define BIO_TYPE_DESCRIPTOR     0x0100 /* socket, fd, connect or accept */
+# define BIO_TYPE_FILTER         0x0200
+# define BIO_TYPE_SOURCE_SINK    0x0400
+
+/* These are the 'types' of BIOs */
+# define BIO_TYPE_NONE             0
+# define BIO_TYPE_MEM            ( 1|BIO_TYPE_SOURCE_SINK)
+# define BIO_TYPE_FILE           ( 2|BIO_TYPE_SOURCE_SINK)
+
+# define BIO_TYPE_FD             ( 4|BIO_TYPE_SOURCE_SINK|BIO_TYPE_DESCRIPTOR)
+# define BIO_TYPE_SOCKET         ( 5|BIO_TYPE_SOURCE_SINK|BIO_TYPE_DESCRIPTOR)
+# define BIO_TYPE_NULL           ( 6|BIO_TYPE_SOURCE_SINK)
+# define BIO_TYPE_SSL            ( 7|BIO_TYPE_FILTER)
+# define BIO_TYPE_MD             ( 8|BIO_TYPE_FILTER)
+# define BIO_TYPE_BUFFER         ( 9|BIO_TYPE_FILTER)
+# define BIO_TYPE_CIPHER         (10|BIO_TYPE_FILTER)
+# define BIO_TYPE_BASE64         (11|BIO_TYPE_FILTER)
+# define BIO_TYPE_CONNECT        (12|BIO_TYPE_SOURCE_SINK|BIO_TYPE_DESCRIPTOR)
+# define BIO_TYPE_ACCEPT         (13|BIO_TYPE_SOURCE_SINK|BIO_TYPE_DESCRIPTOR)
+
+# define BIO_TYPE_NBIO_TEST      (16|BIO_TYPE_FILTER)/* server proxy BIO */
+# define BIO_TYPE_NULL_FILTER    (17|BIO_TYPE_FILTER)
+# define BIO_TYPE_BIO            (19|BIO_TYPE_SOURCE_SINK)/* half a BIO pair */
+# define BIO_TYPE_LINEBUFFER     (20|BIO_TYPE_FILTER)
+# define BIO_TYPE_DGRAM          (21|BIO_TYPE_SOURCE_SINK|BIO_TYPE_DESCRIPTOR)
+# define BIO_TYPE_ASN1           (22|BIO_TYPE_FILTER)
+# define BIO_TYPE_COMP           (23|BIO_TYPE_FILTER)
+# ifndef OPENSSL_NO_SCTP
+#  define BIO_TYPE_DGRAM_SCTP    (24|BIO_TYPE_SOURCE_SINK|BIO_TYPE_DESCRIPTOR)
+# endif
+
+#define BIO_TYPE_START           128
+
+/*
+ * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
+ * BIO_set_fp(in,stdin,BIO_NOCLOSE);
+ */
+# define BIO_NOCLOSE             0x00
+# define BIO_CLOSE               0x01
+
+/*
+ * These are used in the following macros and are passed to BIO_ctrl()
+ */
+# define BIO_CTRL_RESET          1/* opt - rewind/zero etc */
+# define BIO_CTRL_EOF            2/* opt - are we at the eof */
+# define BIO_CTRL_INFO           3/* opt - extra tit-bits */
+# define BIO_CTRL_SET            4/* man - set the 'IO' type */
+# define BIO_CTRL_GET            5/* man - get the 'IO' type */
+# define BIO_CTRL_PUSH           6/* opt - internal, used to signify change */
+# define BIO_CTRL_POP            7/* opt - internal, used to signify change */
+# define BIO_CTRL_GET_CLOSE      8/* man - set the 'close' on free */
+# define BIO_CTRL_SET_CLOSE      9/* man - set the 'close' on free */
+# define BIO_CTRL_PENDING        10/* opt - is their more data buffered */
+# define BIO_CTRL_FLUSH          11/* opt - 'flush' buffered output */
+# define BIO_CTRL_DUP            12/* man - extra stuff for 'duped' BIO */
+# define BIO_CTRL_WPENDING       13/* opt - number of bytes still to write */
+# define BIO_CTRL_SET_CALLBACK   14/* opt - set callback function */
+# define BIO_CTRL_GET_CALLBACK   15/* opt - set callback function */
+
+# define BIO_CTRL_PEEK           29/* BIO_f_buffer special */
+# define BIO_CTRL_SET_FILENAME   30/* BIO_s_file special */
+
+/* dgram BIO stuff */
+# define BIO_CTRL_DGRAM_CONNECT       31/* BIO dgram special */
+# define BIO_CTRL_DGRAM_SET_CONNECTED 32/* allow for an externally connected
+                                         * socket to be passed in */
+# define BIO_CTRL_DGRAM_SET_RECV_TIMEOUT 33/* setsockopt, essentially */
+# define BIO_CTRL_DGRAM_GET_RECV_TIMEOUT 34/* getsockopt, essentially */
+# define BIO_CTRL_DGRAM_SET_SEND_TIMEOUT 35/* setsockopt, essentially */
+# define BIO_CTRL_DGRAM_GET_SEND_TIMEOUT 36/* getsockopt, essentially */
+
+# define BIO_CTRL_DGRAM_GET_RECV_TIMER_EXP 37/* flag whether the last */
+# define BIO_CTRL_DGRAM_GET_SEND_TIMER_EXP 38/* I/O operation tiemd out */
+
+/* #ifdef IP_MTU_DISCOVER */
+# define BIO_CTRL_DGRAM_MTU_DISCOVER       39/* set DF bit on egress packets */
+/* #endif */
+
+# define BIO_CTRL_DGRAM_QUERY_MTU          40/* as kernel for current MTU */
+# define BIO_CTRL_DGRAM_GET_FALLBACK_MTU   47
+# define BIO_CTRL_DGRAM_GET_MTU            41/* get cached value for MTU */
+# define BIO_CTRL_DGRAM_SET_MTU            42/* set cached value for MTU.
+                                              * want to use this if asking
+                                              * the kernel fails */
+
+# define BIO_CTRL_DGRAM_MTU_EXCEEDED       43/* check whether the MTU was
+                                              * exceed in the previous write
+                                              * operation */
+
+# define BIO_CTRL_DGRAM_GET_PEER           46
+# define BIO_CTRL_DGRAM_SET_PEER           44/* Destination for the data */
+
+# define BIO_CTRL_DGRAM_SET_NEXT_TIMEOUT   45/* Next DTLS handshake timeout
+                                              * to adjust socket timeouts */
+# define BIO_CTRL_DGRAM_SET_DONT_FRAG      48
+
+# define BIO_CTRL_DGRAM_GET_MTU_OVERHEAD   49
+
+/* Deliberately outside of OPENSSL_NO_SCTP - used in bss_dgram.c */
+#  define BIO_CTRL_DGRAM_SCTP_SET_IN_HANDSHAKE    50
+# ifndef OPENSSL_NO_SCTP
+/* SCTP stuff */
+#  define BIO_CTRL_DGRAM_SCTP_ADD_AUTH_KEY                51
+#  define BIO_CTRL_DGRAM_SCTP_NEXT_AUTH_KEY               52
+#  define BIO_CTRL_DGRAM_SCTP_AUTH_CCS_RCVD               53
+#  define BIO_CTRL_DGRAM_SCTP_GET_SNDINFO         60
+#  define BIO_CTRL_DGRAM_SCTP_SET_SNDINFO         61
+#  define BIO_CTRL_DGRAM_SCTP_GET_RCVINFO         62
+#  define BIO_CTRL_DGRAM_SCTP_SET_RCVINFO         63
+#  define BIO_CTRL_DGRAM_SCTP_GET_PRINFO                  64
+#  define BIO_CTRL_DGRAM_SCTP_SET_PRINFO                  65
+#  define BIO_CTRL_DGRAM_SCTP_SAVE_SHUTDOWN               70
+# endif
+
+# define BIO_CTRL_DGRAM_SET_PEEK_MODE      71
+
+/* modifiers */
+# define BIO_FP_READ             0x02
+# define BIO_FP_WRITE            0x04
+# define BIO_FP_APPEND           0x08
+# define BIO_FP_TEXT             0x10
+
+# define BIO_FLAGS_READ          0x01
+# define BIO_FLAGS_WRITE         0x02
+# define BIO_FLAGS_IO_SPECIAL    0x04
+# define BIO_FLAGS_RWS (BIO_FLAGS_READ|BIO_FLAGS_WRITE|BIO_FLAGS_IO_SPECIAL)
+# define BIO_FLAGS_SHOULD_RETRY  0x08
+# ifndef BIO_FLAGS_UPLINK
+/*
+ * "UPLINK" flag denotes file descriptors provided by application. It
+ * defaults to 0, as most platforms don't require UPLINK interface.
+ */
+#  define BIO_FLAGS_UPLINK        0
+# endif
+
+# define BIO_FLAGS_BASE64_NO_NL  0x100
+
+/*
+ * This is used with memory BIOs:
+ * BIO_FLAGS_MEM_RDONLY means we shouldn't free up or change the data in any way;
+ * BIO_FLAGS_NONCLEAR_RST means we shouldn't clear data on reset.
+ */
+# define BIO_FLAGS_MEM_RDONLY    0x200
+# define BIO_FLAGS_NONCLEAR_RST  0x400
+
+typedef union bio_addr_st BIO_ADDR;
+typedef struct bio_addrinfo_st BIO_ADDRINFO;
+
+int BIO_get_new_index(void);
+void BIO_set_flags(BIO *b, int flags);
+int BIO_test_flags(const BIO *b, int flags);
+void BIO_clear_flags(BIO *b, int flags);
+
+# define BIO_get_flags(b) BIO_test_flags(b, ~(0x0))
+# define BIO_set_retry_special(b) \
+                BIO_set_flags(b, (BIO_FLAGS_IO_SPECIAL|BIO_FLAGS_SHOULD_RETRY))
+# define BIO_set_retry_read(b) \
+                BIO_set_flags(b, (BIO_FLAGS_READ|BIO_FLAGS_SHOULD_RETRY))
+# define BIO_set_retry_write(b) \
+                BIO_set_flags(b, (BIO_FLAGS_WRITE|BIO_FLAGS_SHOULD_RETRY))
+
+/* These are normally used internally in BIOs */
+# define BIO_clear_retry_flags(b) \
+                BIO_clear_flags(b, (BIO_FLAGS_RWS|BIO_FLAGS_SHOULD_RETRY))
+# define BIO_get_retry_flags(b) \
+                BIO_test_flags(b, (BIO_FLAGS_RWS|BIO_FLAGS_SHOULD_RETRY))
+
+/* These should be used by the application to tell why we should retry */
+# define BIO_should_read(a)              BIO_test_flags(a, BIO_FLAGS_READ)
+# define BIO_should_write(a)             BIO_test_flags(a, BIO_FLAGS_WRITE)
+# define BIO_should_io_special(a)        BIO_test_flags(a, BIO_FLAGS_IO_SPECIAL)
+# define BIO_retry_type(a)               BIO_test_flags(a, BIO_FLAGS_RWS)
+# define BIO_should_retry(a)             BIO_test_flags(a, BIO_FLAGS_SHOULD_RETRY)
+
+/*
+ * The next three are used in conjunction with the BIO_should_io_special()
+ * condition.  After this returns true, BIO *BIO_get_retry_BIO(BIO *bio, int
+ * *reason); will walk the BIO stack and return the 'reason' for the special
+ * and the offending BIO. Given a BIO, BIO_get_retry_reason(bio) will return
+ * the code.
+ */
+/*
+ * Returned from the SSL bio when the certificate retrieval code had an error
+ */
+# define BIO_RR_SSL_X509_LOOKUP          0x01
+/* Returned from the connect BIO when a connect would have blocked */
+# define BIO_RR_CONNECT                  0x02
+/* Returned from the accept BIO when an accept would have blocked */
+# define BIO_RR_ACCEPT                   0x03
+
+/* These are passed by the BIO callback */
+# define BIO_CB_FREE     0x01
+# define BIO_CB_READ     0x02
+# define BIO_CB_WRITE    0x03
+# define BIO_CB_PUTS     0x04
+# define BIO_CB_GETS     0x05
+# define BIO_CB_CTRL     0x06
+
+/*
+ * The callback is called before and after the underling operation, The
+ * BIO_CB_RETURN flag indicates if it is after the call
+ */
+# define BIO_CB_RETURN   0x80
+# define BIO_CB_return(a) ((a)|BIO_CB_RETURN)
+# define BIO_cb_pre(a)   (!((a)&BIO_CB_RETURN))
+# define BIO_cb_post(a)  ((a)&BIO_CB_RETURN)
+
+typedef long (*BIO_callback_fn)(BIO *b, int oper, const char *argp, int argi,
+                                long argl, long ret);
+typedef long (*BIO_callback_fn_ex)(BIO *b, int oper, const char *argp,
+                                   size_t len, int argi,
+                                   long argl, int ret, size_t *processed);
+BIO_callback_fn BIO_get_callback(const BIO *b);
+void BIO_set_callback(BIO *b, BIO_callback_fn callback);
+
+BIO_callback_fn_ex BIO_get_callback_ex(const BIO *b);
+void BIO_set_callback_ex(BIO *b, BIO_callback_fn_ex callback);
+
+char *BIO_get_callback_arg(const BIO *b);
+void BIO_set_callback_arg(BIO *b, char *arg);
+
+typedef struct bio_method_st BIO_METHOD;
+
+const char *BIO_method_name(const BIO *b);
+int BIO_method_type(const BIO *b);
+
+typedef int BIO_info_cb(BIO *, int, int);
+typedef BIO_info_cb bio_info_cb;  /* backward compatibility */
+
+DEFINE_STACK_OF(BIO)
+
+/* Prefix and suffix callback in ASN1 BIO */
+typedef int asn1_ps_func (BIO *b, unsigned char **pbuf, int *plen,
+                          void *parg);
+
+# ifndef OPENSSL_NO_SCTP
+/* SCTP parameter structs */
+struct bio_dgram_sctp_sndinfo {
+    uint16_t snd_sid;
+    uint16_t snd_flags;
+    uint32_t snd_ppid;
+    uint32_t snd_context;
+};
+
+struct bio_dgram_sctp_rcvinfo {
+    uint16_t rcv_sid;
+    uint16_t rcv_ssn;
+    uint16_t rcv_flags;
+    uint32_t rcv_ppid;
+    uint32_t rcv_tsn;
+    uint32_t rcv_cumtsn;
+    uint32_t rcv_context;
+};
+
+struct bio_dgram_sctp_prinfo {
+    uint16_t pr_policy;
+    uint32_t pr_value;
+};
+# endif
+
+/*
+ * #define BIO_CONN_get_param_hostname BIO_ctrl
+ */
+
+# define BIO_C_SET_CONNECT                       100
+# define BIO_C_DO_STATE_MACHINE                  101
+# define BIO_C_SET_NBIO                          102
+/* # define BIO_C_SET_PROXY_PARAM                   103 */
+# define BIO_C_SET_FD                            104
+# define BIO_C_GET_FD                            105
+# define BIO_C_SET_FILE_PTR                      106
+# define BIO_C_GET_FILE_PTR                      107
+# define BIO_C_SET_FILENAME                      108
+# define BIO_C_SET_SSL                           109
+# define BIO_C_GET_SSL                           110
+# define BIO_C_SET_MD                            111
+# define BIO_C_GET_MD                            112
+# define BIO_C_GET_CIPHER_STATUS                 113
+# define BIO_C_SET_BUF_MEM                       114
+# define BIO_C_GET_BUF_MEM_PTR                   115
+# define BIO_C_GET_BUFF_NUM_LINES                116
+# define BIO_C_SET_BUFF_SIZE                     117
+# define BIO_C_SET_ACCEPT                        118
+# define BIO_C_SSL_MODE                          119
+# define BIO_C_GET_MD_CTX                        120
+/* # define BIO_C_GET_PROXY_PARAM                   121 */
+# define BIO_C_SET_BUFF_READ_DATA                122/* data to read first */
+# define BIO_C_GET_CONNECT                       123
+# define BIO_C_GET_ACCEPT                        124
+# define BIO_C_SET_SSL_RENEGOTIATE_BYTES         125
+# define BIO_C_GET_SSL_NUM_RENEGOTIATES          126
+# define BIO_C_SET_SSL_RENEGOTIATE_TIMEOUT       127
+# define BIO_C_FILE_SEEK                         128
+# define BIO_C_GET_CIPHER_CTX                    129
+# define BIO_C_SET_BUF_MEM_EOF_RETURN            130/* return end of input
+                                                     * value */
+# define BIO_C_SET_BIND_MODE                     131
+# define BIO_C_GET_BIND_MODE                     132
+# define BIO_C_FILE_TELL                         133
+# define BIO_C_GET_SOCKS                         134
+# define BIO_C_SET_SOCKS                         135
+
+# define BIO_C_SET_WRITE_BUF_SIZE                136/* for BIO_s_bio */
+# define BIO_C_GET_WRITE_BUF_SIZE                137
+# define BIO_C_MAKE_BIO_PAIR                     138
+# define BIO_C_DESTROY_BIO_PAIR                  139
+# define BIO_C_GET_WRITE_GUARANTEE               140
+# define BIO_C_GET_READ_REQUEST                  141
+# define BIO_C_SHUTDOWN_WR                       142
+# define BIO_C_NREAD0                            143
+# define BIO_C_NREAD                             144
+# define BIO_C_NWRITE0                           145
+# define BIO_C_NWRITE                            146
+# define BIO_C_RESET_READ_REQUEST                147
+# define BIO_C_SET_MD_CTX                        148
+
+# define BIO_C_SET_PREFIX                        149
+# define BIO_C_GET_PREFIX                        150
+# define BIO_C_SET_SUFFIX                        151
+# define BIO_C_GET_SUFFIX                        152
+
+# define BIO_C_SET_EX_ARG                        153
+# define BIO_C_GET_EX_ARG                        154
+
+# define BIO_C_SET_CONNECT_MODE                  155
+
+# define BIO_set_app_data(s,arg)         BIO_set_ex_data(s,0,arg)
+# define BIO_get_app_data(s)             BIO_get_ex_data(s,0)
+
+# define BIO_set_nbio(b,n)             BIO_ctrl(b,BIO_C_SET_NBIO,(n),NULL)
+
+# ifndef OPENSSL_NO_SOCK
+/* IP families we support, for BIO_s_connect() and BIO_s_accept() */
+/* Note: the underlying operating system may not support some of them */
+#  define BIO_FAMILY_IPV4                         4
+#  define BIO_FAMILY_IPV6                         6
+#  define BIO_FAMILY_IPANY                        256
+
+/* BIO_s_connect() */
+#  define BIO_set_conn_hostname(b,name) BIO_ctrl(b,BIO_C_SET_CONNECT,0, \
+                                                 (char *)(name))
+#  define BIO_set_conn_port(b,port)     BIO_ctrl(b,BIO_C_SET_CONNECT,1, \
+                                                 (char *)(port))
+#  define BIO_set_conn_address(b,addr)  BIO_ctrl(b,BIO_C_SET_CONNECT,2, \
+                                                 (char *)(addr))
+#  define BIO_set_conn_ip_family(b,f)   BIO_int_ctrl(b,BIO_C_SET_CONNECT,3,f)
+#  define BIO_get_conn_hostname(b)      ((const char *)BIO_ptr_ctrl(b,BIO_C_GET_CONNECT,0))
+#  define BIO_get_conn_port(b)          ((const char *)BIO_ptr_ctrl(b,BIO_C_GET_CONNECT,1))
+#  define BIO_get_conn_address(b)       ((const BIO_ADDR *)BIO_ptr_ctrl(b,BIO_C_GET_CONNECT,2))
+#  define BIO_get_conn_ip_family(b)     BIO_ctrl(b,BIO_C_GET_CONNECT,3,NULL)
+#  define BIO_set_conn_mode(b,n)        BIO_ctrl(b,BIO_C_SET_CONNECT_MODE,(n),NULL)
+
+/* BIO_s_accept() */
+#  define BIO_set_accept_name(b,name)   BIO_ctrl(b,BIO_C_SET_ACCEPT,0, \
+                                                 (char *)(name))
+#  define BIO_set_accept_port(b,port)   BIO_ctrl(b,BIO_C_SET_ACCEPT,1, \
+                                                 (char *)(port))
+#  define BIO_get_accept_name(b)        ((const char *)BIO_ptr_ctrl(b,BIO_C_GET_ACCEPT,0))
+#  define BIO_get_accept_port(b)        ((const char *)BIO_ptr_ctrl(b,BIO_C_GET_ACCEPT,1))
+#  define BIO_get_peer_name(b)          ((const char *)BIO_ptr_ctrl(b,BIO_C_GET_ACCEPT,2))
+#  define BIO_get_peer_port(b)          ((const char *)BIO_ptr_ctrl(b,BIO_C_GET_ACCEPT,3))
+/* #define BIO_set_nbio(b,n)    BIO_ctrl(b,BIO_C_SET_NBIO,(n),NULL) */
+#  define BIO_set_nbio_accept(b,n)      BIO_ctrl(b,BIO_C_SET_ACCEPT,2,(n)?(void *)"a":NULL)
+#  define BIO_set_accept_bios(b,bio)    BIO_ctrl(b,BIO_C_SET_ACCEPT,3, \
+                                                 (char *)(bio))
+#  define BIO_set_accept_ip_family(b,f) BIO_int_ctrl(b,BIO_C_SET_ACCEPT,4,f)
+#  define BIO_get_accept_ip_family(b)   BIO_ctrl(b,BIO_C_GET_ACCEPT,4,NULL)
+
+/* Aliases kept for backward compatibility */
+#  define BIO_BIND_NORMAL                 0
+#  define BIO_BIND_REUSEADDR              BIO_SOCK_REUSEADDR
+#  define BIO_BIND_REUSEADDR_IF_UNUSED    BIO_SOCK_REUSEADDR
+#  define BIO_set_bind_mode(b,mode) BIO_ctrl(b,BIO_C_SET_BIND_MODE,mode,NULL)
+#  define BIO_get_bind_mode(b)    BIO_ctrl(b,BIO_C_GET_BIND_MODE,0,NULL)
+
+/* BIO_s_accept() and BIO_s_connect() */
+#  define BIO_do_connect(b)       BIO_do_handshake(b)
+#  define BIO_do_accept(b)        BIO_do_handshake(b)
+# endif /* OPENSSL_NO_SOCK */
+
+# define BIO_do_handshake(b)     BIO_ctrl(b,BIO_C_DO_STATE_MACHINE,0,NULL)
+
+/* BIO_s_datagram(), BIO_s_fd(), BIO_s_socket(), BIO_s_accept() and BIO_s_connect() */
+# define BIO_set_fd(b,fd,c)      BIO_int_ctrl(b,BIO_C_SET_FD,c,fd)
+# define BIO_get_fd(b,c)         BIO_ctrl(b,BIO_C_GET_FD,0,(char *)(c))
+
+/* BIO_s_file() */
+# define BIO_set_fp(b,fp,c)      BIO_ctrl(b,BIO_C_SET_FILE_PTR,c,(char *)(fp))
+# define BIO_get_fp(b,fpp)       BIO_ctrl(b,BIO_C_GET_FILE_PTR,0,(char *)(fpp))
+
+/* BIO_s_fd() and BIO_s_file() */
+# define BIO_seek(b,ofs) (int)BIO_ctrl(b,BIO_C_FILE_SEEK,ofs,NULL)
+# define BIO_tell(b)     (int)BIO_ctrl(b,BIO_C_FILE_TELL,0,NULL)
+
+/*
+ * name is cast to lose const, but might be better to route through a
+ * function so we can do it safely
+ */
+# ifdef CONST_STRICT
+/*
+ * If you are wondering why this isn't defined, its because CONST_STRICT is
+ * purely a compile-time kludge to allow const to be checked.
+ */
+int BIO_read_filename(BIO *b, const char *name);
+# else
+#  define BIO_read_filename(b,name) (int)BIO_ctrl(b,BIO_C_SET_FILENAME, \
+                BIO_CLOSE|BIO_FP_READ,(char *)(name))
+# endif
+# define BIO_write_filename(b,name) (int)BIO_ctrl(b,BIO_C_SET_FILENAME, \
+                BIO_CLOSE|BIO_FP_WRITE,name)
+# define BIO_append_filename(b,name) (int)BIO_ctrl(b,BIO_C_SET_FILENAME, \
+                BIO_CLOSE|BIO_FP_APPEND,name)
+# define BIO_rw_filename(b,name) (int)BIO_ctrl(b,BIO_C_SET_FILENAME, \
+                BIO_CLOSE|BIO_FP_READ|BIO_FP_WRITE,name)
+
+/*
+ * WARNING WARNING, this ups the reference count on the read bio of the SSL
+ * structure.  This is because the ssl read BIO is now pointed to by the
+ * next_bio field in the bio.  So when you free the BIO, make sure you are
+ * doing a BIO_free_all() to catch the underlying BIO.
+ */
+# define BIO_set_ssl(b,ssl,c)    BIO_ctrl(b,BIO_C_SET_SSL,c,(char *)(ssl))
+# define BIO_get_ssl(b,sslp)     BIO_ctrl(b,BIO_C_GET_SSL,0,(char *)(sslp))
+# define BIO_set_ssl_mode(b,client)      BIO_ctrl(b,BIO_C_SSL_MODE,client,NULL)
+# define BIO_set_ssl_renegotiate_bytes(b,num) \
+        BIO_ctrl(b,BIO_C_SET_SSL_RENEGOTIATE_BYTES,num,NULL)
+# define BIO_get_num_renegotiates(b) \
+        BIO_ctrl(b,BIO_C_GET_SSL_NUM_RENEGOTIATES,0,NULL)
+# define BIO_set_ssl_renegotiate_timeout(b,seconds) \
+        BIO_ctrl(b,BIO_C_SET_SSL_RENEGOTIATE_TIMEOUT,seconds,NULL)
+
+/* defined in evp.h */
+/* #define BIO_set_md(b,md)     BIO_ctrl(b,BIO_C_SET_MD,1,(char *)(md)) */
+
+# define BIO_get_mem_data(b,pp)  BIO_ctrl(b,BIO_CTRL_INFO,0,(char *)(pp))
+# define BIO_set_mem_buf(b,bm,c) BIO_ctrl(b,BIO_C_SET_BUF_MEM,c,(char *)(bm))
+# define BIO_get_mem_ptr(b,pp)   BIO_ctrl(b,BIO_C_GET_BUF_MEM_PTR,0, \
+                                          (char *)(pp))
+# define BIO_set_mem_eof_return(b,v) \
+                                BIO_ctrl(b,BIO_C_SET_BUF_MEM_EOF_RETURN,v,NULL)
+
+/* For the BIO_f_buffer() type */
+# define BIO_get_buffer_num_lines(b)     BIO_ctrl(b,BIO_C_GET_BUFF_NUM_LINES,0,NULL)
+# define BIO_set_buffer_size(b,size)     BIO_ctrl(b,BIO_C_SET_BUFF_SIZE,size,NULL)
+# define BIO_set_read_buffer_size(b,size) BIO_int_ctrl(b,BIO_C_SET_BUFF_SIZE,size,0)
+# define BIO_set_write_buffer_size(b,size) BIO_int_ctrl(b,BIO_C_SET_BUFF_SIZE,size,1)
+# define BIO_set_buffer_read_data(b,buf,num) BIO_ctrl(b,BIO_C_SET_BUFF_READ_DATA,num,buf)
+
+/* Don't use the next one unless you know what you are doing :-) */
+# define BIO_dup_state(b,ret)    BIO_ctrl(b,BIO_CTRL_DUP,0,(char *)(ret))
+
+# define BIO_reset(b)            (int)BIO_ctrl(b,BIO_CTRL_RESET,0,NULL)
+# define BIO_eof(b)              (int)BIO_ctrl(b,BIO_CTRL_EOF,0,NULL)
+# define BIO_set_close(b,c)      (int)BIO_ctrl(b,BIO_CTRL_SET_CLOSE,(c),NULL)
+# define BIO_get_close(b)        (int)BIO_ctrl(b,BIO_CTRL_GET_CLOSE,0,NULL)
+# define BIO_pending(b)          (int)BIO_ctrl(b,BIO_CTRL_PENDING,0,NULL)
+# define BIO_wpending(b)         (int)BIO_ctrl(b,BIO_CTRL_WPENDING,0,NULL)
+/* ...pending macros have inappropriate return type */
+size_t BIO_ctrl_pending(BIO *b);
+size_t BIO_ctrl_wpending(BIO *b);
+# define BIO_flush(b)            (int)BIO_ctrl(b,BIO_CTRL_FLUSH,0,NULL)
+# define BIO_get_info_callback(b,cbp) (int)BIO_ctrl(b,BIO_CTRL_GET_CALLBACK,0, \
+                                                   cbp)
+# define BIO_set_info_callback(b,cb) (int)BIO_callback_ctrl(b,BIO_CTRL_SET_CALLBACK,cb)
+
+/* For the BIO_f_buffer() type */
+# define BIO_buffer_get_num_lines(b) BIO_ctrl(b,BIO_CTRL_GET,0,NULL)
+# define BIO_buffer_peek(b,s,l) BIO_ctrl(b,BIO_CTRL_PEEK,(l),(s))
+
+/* For BIO_s_bio() */
+# define BIO_set_write_buf_size(b,size) (int)BIO_ctrl(b,BIO_C_SET_WRITE_BUF_SIZE,size,NULL)
+# define BIO_get_write_buf_size(b,size) (size_t)BIO_ctrl(b,BIO_C_GET_WRITE_BUF_SIZE,size,NULL)
+# define BIO_make_bio_pair(b1,b2)   (int)BIO_ctrl(b1,BIO_C_MAKE_BIO_PAIR,0,b2)
+# define BIO_destroy_bio_pair(b)    (int)BIO_ctrl(b,BIO_C_DESTROY_BIO_PAIR,0,NULL)
+# define BIO_shutdown_wr(b) (int)BIO_ctrl(b, BIO_C_SHUTDOWN_WR, 0, NULL)
+/* macros with inappropriate type -- but ...pending macros use int too: */
+# define BIO_get_write_guarantee(b) (int)BIO_ctrl(b,BIO_C_GET_WRITE_GUARANTEE,0,NULL)
+# define BIO_get_read_request(b)    (int)BIO_ctrl(b,BIO_C_GET_READ_REQUEST,0,NULL)
+size_t BIO_ctrl_get_write_guarantee(BIO *b);
+size_t BIO_ctrl_get_read_request(BIO *b);
+int BIO_ctrl_reset_read_request(BIO *b);
+
+/* ctrl macros for dgram */
+# define BIO_ctrl_dgram_connect(b,peer)  \
+                     (int)BIO_ctrl(b,BIO_CTRL_DGRAM_CONNECT,0, (char *)(peer))
+# define BIO_ctrl_set_connected(b,peer) \
+         (int)BIO_ctrl(b, BIO_CTRL_DGRAM_SET_CONNECTED, 0, (char *)(peer))
+# define BIO_dgram_recv_timedout(b) \
+         (int)BIO_ctrl(b, BIO_CTRL_DGRAM_GET_RECV_TIMER_EXP, 0, NULL)
+# define BIO_dgram_send_timedout(b) \
+         (int)BIO_ctrl(b, BIO_CTRL_DGRAM_GET_SEND_TIMER_EXP, 0, NULL)
+# define BIO_dgram_get_peer(b,peer) \
+         (int)BIO_ctrl(b, BIO_CTRL_DGRAM_GET_PEER, 0, (char *)(peer))
+# define BIO_dgram_set_peer(b,peer) \
+         (int)BIO_ctrl(b, BIO_CTRL_DGRAM_SET_PEER, 0, (char *)(peer))
+# define BIO_dgram_get_mtu_overhead(b) \
+         (unsigned int)BIO_ctrl((b), BIO_CTRL_DGRAM_GET_MTU_OVERHEAD, 0, NULL)
+
+#define BIO_get_ex_new_index(l, p, newf, dupf, freef) \
+    CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_BIO, l, p, newf, dupf, freef)
+int BIO_set_ex_data(BIO *bio, int idx, void *data);
+void *BIO_get_ex_data(BIO *bio, int idx);
+uint64_t BIO_number_read(BIO *bio);
+uint64_t BIO_number_written(BIO *bio);
+
+/* For BIO_f_asn1() */
+int BIO_asn1_set_prefix(BIO *b, asn1_ps_func *prefix,
+                        asn1_ps_func *prefix_free);
+int BIO_asn1_get_prefix(BIO *b, asn1_ps_func **pprefix,
+                        asn1_ps_func **pprefix_free);
+int BIO_asn1_set_suffix(BIO *b, asn1_ps_func *suffix,
+                        asn1_ps_func *suffix_free);
+int BIO_asn1_get_suffix(BIO *b, asn1_ps_func **psuffix,
+                        asn1_ps_func **psuffix_free);
+
+const BIO_METHOD *BIO_s_file(void);
+BIO *BIO_new_file(const char *filename, const char *mode);
+# ifndef OPENSSL_NO_STDIO
+BIO *BIO_new_fp(FILE *stream, int close_flag);
+# endif
+BIO *BIO_new(const BIO_METHOD *type);
+int BIO_free(BIO *a);
+void BIO_set_data(BIO *a, void *ptr);
+void *BIO_get_data(BIO *a);
+void BIO_set_init(BIO *a, int init);
+int BIO_get_init(BIO *a);
+void BIO_set_shutdown(BIO *a, int shut);
+int BIO_get_shutdown(BIO *a);
+void BIO_vfree(BIO *a);
+int BIO_up_ref(BIO *a);
+int BIO_read(BIO *b, void *data, int dlen);
+int BIO_read_ex(BIO *b, void *data, size_t dlen, size_t *readbytes);
+int BIO_gets(BIO *bp, char *buf, int size);
+int BIO_write(BIO *b, const void *data, int dlen);
+int BIO_write_ex(BIO *b, const void *data, size_t dlen, size_t *written);
+int BIO_puts(BIO *bp, const char *buf);
+int BIO_indent(BIO *b, int indent, int max);
+long BIO_ctrl(BIO *bp, int cmd, long larg, void *parg);
+long BIO_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp);
+void *BIO_ptr_ctrl(BIO *bp, int cmd, long larg);
+long BIO_int_ctrl(BIO *bp, int cmd, long larg, int iarg);
+BIO *BIO_push(BIO *b, BIO *append);
+BIO *BIO_pop(BIO *b);
+void BIO_free_all(BIO *a);
+BIO *BIO_find_type(BIO *b, int bio_type);
+BIO *BIO_next(BIO *b);
+void BIO_set_next(BIO *b, BIO *next);
+BIO *BIO_get_retry_BIO(BIO *bio, int *reason);
+int BIO_get_retry_reason(BIO *bio);
+void BIO_set_retry_reason(BIO *bio, int reason);
+BIO *BIO_dup_chain(BIO *in);
+
+int BIO_nread0(BIO *bio, char **buf);
+int BIO_nread(BIO *bio, char **buf, int num);
+int BIO_nwrite0(BIO *bio, char **buf);
+int BIO_nwrite(BIO *bio, char **buf, int num);
+
+long BIO_debug_callback(BIO *bio, int cmd, const char *argp, int argi,
+                        long argl, long ret);
+
+const BIO_METHOD *BIO_s_mem(void);
+const BIO_METHOD *BIO_s_secmem(void);
+BIO *BIO_new_mem_buf(const void *buf, int len);
+# ifndef OPENSSL_NO_SOCK
+const BIO_METHOD *BIO_s_socket(void);
+const BIO_METHOD *BIO_s_connect(void);
+const BIO_METHOD *BIO_s_accept(void);
+# endif
+const BIO_METHOD *BIO_s_fd(void);
+const BIO_METHOD *BIO_s_log(void);
+const BIO_METHOD *BIO_s_bio(void);
+const BIO_METHOD *BIO_s_null(void);
+const BIO_METHOD *BIO_f_null(void);
+const BIO_METHOD *BIO_f_buffer(void);
+const BIO_METHOD *BIO_f_linebuffer(void);
+const BIO_METHOD *BIO_f_nbio_test(void);
+# ifndef OPENSSL_NO_DGRAM
+const BIO_METHOD *BIO_s_datagram(void);
+int BIO_dgram_non_fatal_error(int error);
+BIO *BIO_new_dgram(int fd, int close_flag);
+#  ifndef OPENSSL_NO_SCTP
+const BIO_METHOD *BIO_s_datagram_sctp(void);
+BIO *BIO_new_dgram_sctp(int fd, int close_flag);
+int BIO_dgram_is_sctp(BIO *bio);
+int BIO_dgram_sctp_notification_cb(BIO *b,
+                                   void (*handle_notifications) (BIO *bio,
+                                                                 void *context,
+                                                                 void *buf),
+                                   void *context);
+int BIO_dgram_sctp_wait_for_dry(BIO *b);
+int BIO_dgram_sctp_msg_waiting(BIO *b);
+#  endif
+# endif
+
+# ifndef OPENSSL_NO_SOCK
+int BIO_sock_should_retry(int i);
+int BIO_sock_non_fatal_error(int error);
+# endif
+
+int BIO_fd_should_retry(int i);
+int BIO_fd_non_fatal_error(int error);
+int BIO_dump_cb(int (*cb) (const void *data, size_t len, void *u),
+                void *u, const char *s, int len);
+int BIO_dump_indent_cb(int (*cb) (const void *data, size_t len, void *u),
+                       void *u, const char *s, int len, int indent);
+int BIO_dump(BIO *b, const char *bytes, int len);
+int BIO_dump_indent(BIO *b, const char *bytes, int len, int indent);
+# ifndef OPENSSL_NO_STDIO
+int BIO_dump_fp(FILE *fp, const char *s, int len);
+int BIO_dump_indent_fp(FILE *fp, const char *s, int len, int indent);
+# endif
+int BIO_hex_string(BIO *out, int indent, int width, unsigned char *data,
+                   int datalen);
+
+# ifndef OPENSSL_NO_SOCK
+BIO_ADDR *BIO_ADDR_new(void);
+int BIO_ADDR_rawmake(BIO_ADDR *ap, int family,
+                     const void *where, size_t wherelen, unsigned short port);
+void BIO_ADDR_free(BIO_ADDR *);
+void BIO_ADDR_clear(BIO_ADDR *ap);
+int BIO_ADDR_family(const BIO_ADDR *ap);
+int BIO_ADDR_rawaddress(const BIO_ADDR *ap, void *p, size_t *l);
+unsigned short BIO_ADDR_rawport(const BIO_ADDR *ap);
+char *BIO_ADDR_hostname_string(const BIO_ADDR *ap, int numeric);
+char *BIO_ADDR_service_string(const BIO_ADDR *ap, int numeric);
+char *BIO_ADDR_path_string(const BIO_ADDR *ap);
+
+const BIO_ADDRINFO *BIO_ADDRINFO_next(const BIO_ADDRINFO *bai);
+int BIO_ADDRINFO_family(const BIO_ADDRINFO *bai);
+int BIO_ADDRINFO_socktype(const BIO_ADDRINFO *bai);
+int BIO_ADDRINFO_protocol(const BIO_ADDRINFO *bai);
+const BIO_ADDR *BIO_ADDRINFO_address(const BIO_ADDRINFO *bai);
+void BIO_ADDRINFO_free(BIO_ADDRINFO *bai);
+
+enum BIO_hostserv_priorities {
+    BIO_PARSE_PRIO_HOST, BIO_PARSE_PRIO_SERV
+};
+int BIO_parse_hostserv(const char *hostserv, char **host, char **service,
+                       enum BIO_hostserv_priorities hostserv_prio);
+enum BIO_lookup_type {
+    BIO_LOOKUP_CLIENT, BIO_LOOKUP_SERVER
+};
+int BIO_lookup(const char *host, const char *service,
+               enum BIO_lookup_type lookup_type,
+               int family, int socktype, BIO_ADDRINFO **res);
+int BIO_lookup_ex(const char *host, const char *service,
+                  int lookup_type, int family, int socktype, int protocol,
+                  BIO_ADDRINFO **res);
+int BIO_sock_error(int sock);
+int BIO_socket_ioctl(int fd, long type, void *arg);
+int BIO_socket_nbio(int fd, int mode);
+int BIO_sock_init(void);
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define BIO_sock_cleanup() while(0) continue
+# endif
+int BIO_set_tcp_ndelay(int sock, int turn_on);
+
+DEPRECATEDIN_1_1_0(struct hostent *BIO_gethostbyname(const char *name))
+DEPRECATEDIN_1_1_0(int BIO_get_port(const char *str, unsigned short *port_ptr))
+DEPRECATEDIN_1_1_0(int BIO_get_host_ip(const char *str, unsigned char *ip))
+DEPRECATEDIN_1_1_0(int BIO_get_accept_socket(char *host_port, int mode))
+DEPRECATEDIN_1_1_0(int BIO_accept(int sock, char **ip_port))
+
+union BIO_sock_info_u {
+    BIO_ADDR *addr;
+};
+enum BIO_sock_info_type {
+    BIO_SOCK_INFO_ADDRESS
+};
+int BIO_sock_info(int sock,
+                  enum BIO_sock_info_type type, union BIO_sock_info_u *info);
+
+#  define BIO_SOCK_REUSEADDR    0x01
+#  define BIO_SOCK_V6_ONLY      0x02
+#  define BIO_SOCK_KEEPALIVE    0x04
+#  define BIO_SOCK_NONBLOCK     0x08
+#  define BIO_SOCK_NODELAY      0x10
+
+int BIO_socket(int domain, int socktype, int protocol, int options);
+int BIO_connect(int sock, const BIO_ADDR *addr, int options);
+int BIO_bind(int sock, const BIO_ADDR *addr, int options);
+int BIO_listen(int sock, const BIO_ADDR *addr, int options);
+int BIO_accept_ex(int accept_sock, BIO_ADDR *addr, int options);
+int BIO_closesocket(int sock);
+
+BIO *BIO_new_socket(int sock, int close_flag);
+BIO *BIO_new_connect(const char *host_port);
+BIO *BIO_new_accept(const char *host_port);
+# endif /* OPENSSL_NO_SOCK*/
+
+BIO *BIO_new_fd(int fd, int close_flag);
+
+int BIO_new_bio_pair(BIO **bio1, size_t writebuf1,
+                     BIO **bio2, size_t writebuf2);
+/*
+ * If successful, returns 1 and in *bio1, *bio2 two BIO pair endpoints.
+ * Otherwise returns 0 and sets *bio1 and *bio2 to NULL. Size 0 uses default
+ * value.
+ */
+
+void BIO_copy_next_retry(BIO *b);
+
+/*
+ * long BIO_ghbn_ctrl(int cmd,int iarg,char *parg);
+ */
+
+# define ossl_bio__attr__(x)
+# if defined(__GNUC__) && defined(__STDC_VERSION__) \
+    && !defined(__APPLE__)
+    /*
+     * Because we support the 'z' modifier, which made its appearance in C99,
+     * we can't use __attribute__ with pre C99 dialects.
+     */
+#  if __STDC_VERSION__ >= 199901L
+#   undef ossl_bio__attr__
+#   define ossl_bio__attr__ __attribute__
+#   if __GNUC__*10 + __GNUC_MINOR__ >= 44
+#    define ossl_bio__printf__ __gnu_printf__
+#   else
+#    define ossl_bio__printf__ __printf__
+#   endif
+#  endif
+# endif
+int BIO_printf(BIO *bio, const char *format, ...)
+ossl_bio__attr__((__format__(ossl_bio__printf__, 2, 3)));
+int BIO_vprintf(BIO *bio, const char *format, va_list args)
+ossl_bio__attr__((__format__(ossl_bio__printf__, 2, 0)));
+int BIO_snprintf(char *buf, size_t n, const char *format, ...)
+ossl_bio__attr__((__format__(ossl_bio__printf__, 3, 4)));
+int BIO_vsnprintf(char *buf, size_t n, const char *format, va_list args)
+ossl_bio__attr__((__format__(ossl_bio__printf__, 3, 0)));
+# undef ossl_bio__attr__
+# undef ossl_bio__printf__
+
+
+BIO_METHOD *BIO_meth_new(int type, const char *name);
+void BIO_meth_free(BIO_METHOD *biom);
+int (*BIO_meth_get_write(const BIO_METHOD *biom)) (BIO *, const char *, int);
+int (*BIO_meth_get_write_ex(const BIO_METHOD *biom)) (BIO *, const char *, size_t,
+                                                size_t *);
+int BIO_meth_set_write(BIO_METHOD *biom,
+                       int (*write) (BIO *, const char *, int));
+int BIO_meth_set_write_ex(BIO_METHOD *biom,
+                       int (*bwrite) (BIO *, const char *, size_t, size_t *));
+int (*BIO_meth_get_read(const BIO_METHOD *biom)) (BIO *, char *, int);
+int (*BIO_meth_get_read_ex(const BIO_METHOD *biom)) (BIO *, char *, size_t, size_t *);
+int BIO_meth_set_read(BIO_METHOD *biom,
+                      int (*read) (BIO *, char *, int));
+int BIO_meth_set_read_ex(BIO_METHOD *biom,
+                         int (*bread) (BIO *, char *, size_t, size_t *));
+int (*BIO_meth_get_puts(const BIO_METHOD *biom)) (BIO *, const char *);
+int BIO_meth_set_puts(BIO_METHOD *biom,
+                      int (*puts) (BIO *, const char *));
+int (*BIO_meth_get_gets(const BIO_METHOD *biom)) (BIO *, char *, int);
+int BIO_meth_set_gets(BIO_METHOD *biom,
+                      int (*gets) (BIO *, char *, int));
+long (*BIO_meth_get_ctrl(const BIO_METHOD *biom)) (BIO *, int, long, void *);
+int BIO_meth_set_ctrl(BIO_METHOD *biom,
+                      long (*ctrl) (BIO *, int, long, void *));
+int (*BIO_meth_get_create(const BIO_METHOD *bion)) (BIO *);
+int BIO_meth_set_create(BIO_METHOD *biom, int (*create) (BIO *));
+int (*BIO_meth_get_destroy(const BIO_METHOD *biom)) (BIO *);
+int BIO_meth_set_destroy(BIO_METHOD *biom, int (*destroy) (BIO *));
+long (*BIO_meth_get_callback_ctrl(const BIO_METHOD *biom))
+                                 (BIO *, int, BIO_info_cb *);
+int BIO_meth_set_callback_ctrl(BIO_METHOD *biom,
+                               long (*callback_ctrl) (BIO *, int,
+                                                      BIO_info_cb *));
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/bioerr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/bioerr.h
new file mode 100644
index 000000000..f119a59c3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/bioerr.h
@@ -0,0 +1,120 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_BIOERR_H
+# define HEADER_BIOERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_BIO_strings(void);
+
+/*
+ * BIO function codes.
+ */
+# define BIO_F_ACPT_STATE                                 100
+# define BIO_F_ADDRINFO_WRAP                              148
+# define BIO_F_ADDR_STRINGS                               134
+# define BIO_F_BIO_ACCEPT                                 101
+# define BIO_F_BIO_ACCEPT_EX                              137
+# define BIO_F_BIO_ACCEPT_NEW                             152
+# define BIO_F_BIO_ADDR_NEW                               144
+# define BIO_F_BIO_BIND                                   147
+# define BIO_F_BIO_CALLBACK_CTRL                          131
+# define BIO_F_BIO_CONNECT                                138
+# define BIO_F_BIO_CONNECT_NEW                            153
+# define BIO_F_BIO_CTRL                                   103
+# define BIO_F_BIO_GETS                                   104
+# define BIO_F_BIO_GET_HOST_IP                            106
+# define BIO_F_BIO_GET_NEW_INDEX                          102
+# define BIO_F_BIO_GET_PORT                               107
+# define BIO_F_BIO_LISTEN                                 139
+# define BIO_F_BIO_LOOKUP                                 135
+# define BIO_F_BIO_LOOKUP_EX                              143
+# define BIO_F_BIO_MAKE_PAIR                              121
+# define BIO_F_BIO_METH_NEW                               146
+# define BIO_F_BIO_NEW                                    108
+# define BIO_F_BIO_NEW_DGRAM_SCTP                         145
+# define BIO_F_BIO_NEW_FILE                               109
+# define BIO_F_BIO_NEW_MEM_BUF                            126
+# define BIO_F_BIO_NREAD                                  123
+# define BIO_F_BIO_NREAD0                                 124
+# define BIO_F_BIO_NWRITE                                 125
+# define BIO_F_BIO_NWRITE0                                122
+# define BIO_F_BIO_PARSE_HOSTSERV                         136
+# define BIO_F_BIO_PUTS                                   110
+# define BIO_F_BIO_READ                                   111
+# define BIO_F_BIO_READ_EX                                105
+# define BIO_F_BIO_READ_INTERN                            120
+# define BIO_F_BIO_SOCKET                                 140
+# define BIO_F_BIO_SOCKET_NBIO                            142
+# define BIO_F_BIO_SOCK_INFO                              141
+# define BIO_F_BIO_SOCK_INIT                              112
+# define BIO_F_BIO_WRITE                                  113
+# define BIO_F_BIO_WRITE_EX                               119
+# define BIO_F_BIO_WRITE_INTERN                           128
+# define BIO_F_BUFFER_CTRL                                114
+# define BIO_F_CONN_CTRL                                  127
+# define BIO_F_CONN_STATE                                 115
+# define BIO_F_DGRAM_SCTP_NEW                             149
+# define BIO_F_DGRAM_SCTP_READ                            132
+# define BIO_F_DGRAM_SCTP_WRITE                           133
+# define BIO_F_DOAPR_OUTCH                                150
+# define BIO_F_FILE_CTRL                                  116
+# define BIO_F_FILE_READ                                  130
+# define BIO_F_LINEBUFFER_CTRL                            129
+# define BIO_F_LINEBUFFER_NEW                             151
+# define BIO_F_MEM_WRITE                                  117
+# define BIO_F_NBIOF_NEW                                  154
+# define BIO_F_SLG_WRITE                                  155
+# define BIO_F_SSL_NEW                                    118
+
+/*
+ * BIO reason codes.
+ */
+# define BIO_R_ACCEPT_ERROR                               100
+# define BIO_R_ADDRINFO_ADDR_IS_NOT_AF_INET               141
+# define BIO_R_AMBIGUOUS_HOST_OR_SERVICE                  129
+# define BIO_R_BAD_FOPEN_MODE                             101
+# define BIO_R_BROKEN_PIPE                                124
+# define BIO_R_CONNECT_ERROR                              103
+# define BIO_R_GETHOSTBYNAME_ADDR_IS_NOT_AF_INET          107
+# define BIO_R_GETSOCKNAME_ERROR                          132
+# define BIO_R_GETSOCKNAME_TRUNCATED_ADDRESS              133
+# define BIO_R_GETTING_SOCKTYPE                           134
+# define BIO_R_INVALID_ARGUMENT                           125
+# define BIO_R_INVALID_SOCKET                             135
+# define BIO_R_IN_USE                                     123
+# define BIO_R_LENGTH_TOO_LONG                            102
+# define BIO_R_LISTEN_V6_ONLY                             136
+# define BIO_R_LOOKUP_RETURNED_NOTHING                    142
+# define BIO_R_MALFORMED_HOST_OR_SERVICE                  130
+# define BIO_R_NBIO_CONNECT_ERROR                         110
+# define BIO_R_NO_ACCEPT_ADDR_OR_SERVICE_SPECIFIED        143
+# define BIO_R_NO_HOSTNAME_OR_SERVICE_SPECIFIED           144
+# define BIO_R_NO_PORT_DEFINED                            113
+# define BIO_R_NO_SUCH_FILE                               128
+# define BIO_R_NULL_PARAMETER                             115
+# define BIO_R_UNABLE_TO_BIND_SOCKET                      117
+# define BIO_R_UNABLE_TO_CREATE_SOCKET                    118
+# define BIO_R_UNABLE_TO_KEEPALIVE                        137
+# define BIO_R_UNABLE_TO_LISTEN_SOCKET                    119
+# define BIO_R_UNABLE_TO_NODELAY                          138
+# define BIO_R_UNABLE_TO_REUSEADDR                        139
+# define BIO_R_UNAVAILABLE_IP_FAMILY                      145
+# define BIO_R_UNINITIALIZED                              120
+# define BIO_R_UNKNOWN_INFO_TYPE                          140
+# define BIO_R_UNSUPPORTED_IP_FAMILY                      146
+# define BIO_R_UNSUPPORTED_METHOD                         121
+# define BIO_R_UNSUPPORTED_PROTOCOL_FAMILY                131
+# define BIO_R_WRITE_TO_READ_ONLY_BIO                     126
+# define BIO_R_WSASTARTUP                                 122
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/blowfish.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/blowfish.h
new file mode 100644
index 000000000..cd3e460e9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/blowfish.h
@@ -0,0 +1,61 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_BLOWFISH_H
+# define HEADER_BLOWFISH_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_BF
+# include <openssl/e_os2.h>
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+# define BF_ENCRYPT      1
+# define BF_DECRYPT      0
+
+/*-
+ * !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+ * ! BF_LONG has to be at least 32 bits wide.                     !
+ * !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+ */
+# define BF_LONG unsigned int
+
+# define BF_ROUNDS       16
+# define BF_BLOCK        8
+
+typedef struct bf_key_st {
+    BF_LONG P[BF_ROUNDS + 2];
+    BF_LONG S[4 * 256];
+} BF_KEY;
+
+void BF_set_key(BF_KEY *key, int len, const unsigned char *data);
+
+void BF_encrypt(BF_LONG *data, const BF_KEY *key);
+void BF_decrypt(BF_LONG *data, const BF_KEY *key);
+
+void BF_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                    const BF_KEY *key, int enc);
+void BF_cbc_encrypt(const unsigned char *in, unsigned char *out, long length,
+                    const BF_KEY *schedule, unsigned char *ivec, int enc);
+void BF_cfb64_encrypt(const unsigned char *in, unsigned char *out,
+                      long length, const BF_KEY *schedule,
+                      unsigned char *ivec, int *num, int enc);
+void BF_ofb64_encrypt(const unsigned char *in, unsigned char *out,
+                      long length, const BF_KEY *schedule,
+                      unsigned char *ivec, int *num);
+const char *BF_options(void);
+
+# ifdef  __cplusplus
+}
+# endif
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/bn.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/bn.h
new file mode 100644
index 000000000..8af05d00e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/bn.h
@@ -0,0 +1,539 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_BN_H
+# define HEADER_BN_H
+
+# include <openssl/e_os2.h>
+# ifndef OPENSSL_NO_STDIO
+#  include <stdio.h>
+# endif
+# include <openssl/opensslconf.h>
+# include <openssl/ossl_typ.h>
+# include <openssl/crypto.h>
+# include <openssl/bnerr.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+/*
+ * 64-bit processor with LP64 ABI
+ */
+# ifdef SIXTY_FOUR_BIT_LONG
+#  define BN_ULONG        unsigned long
+#  define BN_BYTES        8
+# endif
+
+/*
+ * 64-bit processor other than LP64 ABI
+ */
+# ifdef SIXTY_FOUR_BIT
+#  define BN_ULONG        unsigned long long
+#  define BN_BYTES        8
+# endif
+
+# ifdef THIRTY_TWO_BIT
+#  define BN_ULONG        unsigned int
+#  define BN_BYTES        4
+# endif
+
+# define BN_BITS2       (BN_BYTES * 8)
+# define BN_BITS        (BN_BITS2 * 2)
+# define BN_TBIT        ((BN_ULONG)1 << (BN_BITS2 - 1))
+
+# define BN_FLG_MALLOCED         0x01
+# define BN_FLG_STATIC_DATA      0x02
+
+/*
+ * avoid leaking exponent information through timing,
+ * BN_mod_exp_mont() will call BN_mod_exp_mont_consttime,
+ * BN_div() will call BN_div_no_branch,
+ * BN_mod_inverse() will call BN_mod_inverse_no_branch.
+ */
+# define BN_FLG_CONSTTIME        0x04
+# define BN_FLG_SECURE           0x08
+
+# if OPENSSL_API_COMPAT < 0x00908000L
+/* deprecated name for the flag */
+#  define BN_FLG_EXP_CONSTTIME BN_FLG_CONSTTIME
+#  define BN_FLG_FREE            0x8000 /* used for debugging */
+# endif
+
+void BN_set_flags(BIGNUM *b, int n);
+int BN_get_flags(const BIGNUM *b, int n);
+
+/* Values for |top| in BN_rand() */
+#define BN_RAND_TOP_ANY    -1
+#define BN_RAND_TOP_ONE     0
+#define BN_RAND_TOP_TWO     1
+
+/* Values for |bottom| in BN_rand() */
+#define BN_RAND_BOTTOM_ANY  0
+#define BN_RAND_BOTTOM_ODD  1
+
+/*
+ * get a clone of a BIGNUM with changed flags, for *temporary* use only (the
+ * two BIGNUMs cannot be used in parallel!). Also only for *read only* use. The
+ * value |dest| should be a newly allocated BIGNUM obtained via BN_new() that
+ * has not been otherwise initialised or used.
+ */
+void BN_with_flags(BIGNUM *dest, const BIGNUM *b, int flags);
+
+/* Wrapper function to make using BN_GENCB easier */
+int BN_GENCB_call(BN_GENCB *cb, int a, int b);
+
+BN_GENCB *BN_GENCB_new(void);
+void BN_GENCB_free(BN_GENCB *cb);
+
+/* Populate a BN_GENCB structure with an "old"-style callback */
+void BN_GENCB_set_old(BN_GENCB *gencb, void (*callback) (int, int, void *),
+                      void *cb_arg);
+
+/* Populate a BN_GENCB structure with a "new"-style callback */
+void BN_GENCB_set(BN_GENCB *gencb, int (*callback) (int, int, BN_GENCB *),
+                  void *cb_arg);
+
+void *BN_GENCB_get_arg(BN_GENCB *cb);
+
+# define BN_prime_checks 0      /* default: select number of iterations based
+                                 * on the size of the number */
+
+/*
+ * BN_prime_checks_for_size() returns the number of Miller-Rabin iterations
+ * that will be done for checking that a random number is probably prime. The
+ * error rate for accepting a composite number as prime depends on the size of
+ * the prime |b|. The error rates used are for calculating an RSA key with 2 primes,
+ * and so the level is what you would expect for a key of double the size of the
+ * prime.
+ *
+ * This table is generated using the algorithm of FIPS PUB 186-4
+ * Digital Signature Standard (DSS), section F.1, page 117.
+ * (https://dx.doi.org/10.6028/NIST.FIPS.186-4)
+ *
+ * The following magma script was used to generate the output:
+ * securitybits:=125;
+ * k:=1024;
+ * for t:=1 to 65 do
+ *   for M:=3 to Floor(2*Sqrt(k-1)-1) do
+ *     S:=0;
+ *     // Sum over m
+ *     for m:=3 to M do
+ *       s:=0;
+ *       // Sum over j
+ *       for j:=2 to m do
+ *         s+:=(RealField(32)!2)^-(j+(k-1)/j);
+ *       end for;
+ *       S+:=2^(m-(m-1)*t)*s;
+ *     end for;
+ *     A:=2^(k-2-M*t);
+ *     B:=8*(Pi(RealField(32))^2-6)/3*2^(k-2)*S;
+ *     pkt:=2.00743*Log(2)*k*2^-k*(A+B);
+ *     seclevel:=Floor(-Log(2,pkt));
+ *     if seclevel ge securitybits then
+ *       printf "k: %5o, security: %o bits  (t: %o, M: %o)\n",k,seclevel,t,M;
+ *       break;
+ *     end if;
+ *   end for;
+ *   if seclevel ge securitybits then break; end if;
+ * end for;
+ *
+ * It can be run online at:
+ * http://magma.maths.usyd.edu.au/calc
+ *
+ * And will output:
+ * k:  1024, security: 129 bits  (t: 6, M: 23)
+ *
+ * k is the number of bits of the prime, securitybits is the level we want to
+ * reach.
+ *
+ * prime length | RSA key size | # MR tests | security level
+ * -------------+--------------|------------+---------------
+ *  (b) >= 6394 |     >= 12788 |          3 |        256 bit
+ *  (b) >= 3747 |     >=  7494 |          3 |        192 bit
+ *  (b) >= 1345 |     >=  2690 |          4 |        128 bit
+ *  (b) >= 1080 |     >=  2160 |          5 |        128 bit
+ *  (b) >=  852 |     >=  1704 |          5 |        112 bit
+ *  (b) >=  476 |     >=   952 |          5 |         80 bit
+ *  (b) >=  400 |     >=   800 |          6 |         80 bit
+ *  (b) >=  347 |     >=   694 |          7 |         80 bit
+ *  (b) >=  308 |     >=   616 |          8 |         80 bit
+ *  (b) >=   55 |     >=   110 |         27 |         64 bit
+ *  (b) >=    6 |     >=    12 |         34 |         64 bit
+ */
+
+# define BN_prime_checks_for_size(b) ((b) >= 3747 ?  3 : \
+                                (b) >=  1345 ?  4 : \
+                                (b) >=  476 ?  5 : \
+                                (b) >=  400 ?  6 : \
+                                (b) >=  347 ?  7 : \
+                                (b) >=  308 ?  8 : \
+                                (b) >=  55  ? 27 : \
+                                /* b >= 6 */ 34)
+
+# define BN_num_bytes(a) ((BN_num_bits(a)+7)/8)
+
+int BN_abs_is_word(const BIGNUM *a, const BN_ULONG w);
+int BN_is_zero(const BIGNUM *a);
+int BN_is_one(const BIGNUM *a);
+int BN_is_word(const BIGNUM *a, const BN_ULONG w);
+int BN_is_odd(const BIGNUM *a);
+
+# define BN_one(a)       (BN_set_word((a),1))
+
+void BN_zero_ex(BIGNUM *a);
+
+# if OPENSSL_API_COMPAT >= 0x00908000L
+#  define BN_zero(a)      BN_zero_ex(a)
+# else
+#  define BN_zero(a)      (BN_set_word((a),0))
+# endif
+
+const BIGNUM *BN_value_one(void);
+char *BN_options(void);
+BN_CTX *BN_CTX_new(void);
+BN_CTX *BN_CTX_secure_new(void);
+void BN_CTX_free(BN_CTX *c);
+void BN_CTX_start(BN_CTX *ctx);
+BIGNUM *BN_CTX_get(BN_CTX *ctx);
+void BN_CTX_end(BN_CTX *ctx);
+int BN_rand(BIGNUM *rnd, int bits, int top, int bottom);
+int BN_priv_rand(BIGNUM *rnd, int bits, int top, int bottom);
+int BN_rand_range(BIGNUM *rnd, const BIGNUM *range);
+int BN_priv_rand_range(BIGNUM *rnd, const BIGNUM *range);
+int BN_pseudo_rand(BIGNUM *rnd, int bits, int top, int bottom);
+int BN_pseudo_rand_range(BIGNUM *rnd, const BIGNUM *range);
+int BN_num_bits(const BIGNUM *a);
+int BN_num_bits_word(BN_ULONG l);
+int BN_security_bits(int L, int N);
+BIGNUM *BN_new(void);
+BIGNUM *BN_secure_new(void);
+void BN_clear_free(BIGNUM *a);
+BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b);
+void BN_swap(BIGNUM *a, BIGNUM *b);
+BIGNUM *BN_bin2bn(const unsigned char *s, int len, BIGNUM *ret);
+int BN_bn2bin(const BIGNUM *a, unsigned char *to);
+int BN_bn2binpad(const BIGNUM *a, unsigned char *to, int tolen);
+BIGNUM *BN_lebin2bn(const unsigned char *s, int len, BIGNUM *ret);
+int BN_bn2lebinpad(const BIGNUM *a, unsigned char *to, int tolen);
+BIGNUM *BN_mpi2bn(const unsigned char *s, int len, BIGNUM *ret);
+int BN_bn2mpi(const BIGNUM *a, unsigned char *to);
+int BN_sub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b);
+int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b);
+int BN_uadd(BIGNUM *r, const BIGNUM *a, const BIGNUM *b);
+int BN_add(BIGNUM *r, const BIGNUM *a, const BIGNUM *b);
+int BN_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx);
+int BN_sqr(BIGNUM *r, const BIGNUM *a, BN_CTX *ctx);
+/** BN_set_negative sets sign of a BIGNUM
+ * \param  b  pointer to the BIGNUM object
+ * \param  n  0 if the BIGNUM b should be positive and a value != 0 otherwise
+ */
+void BN_set_negative(BIGNUM *b, int n);
+/** BN_is_negative returns 1 if the BIGNUM is negative
+ * \param  b  pointer to the BIGNUM object
+ * \return 1 if a < 0 and 0 otherwise
+ */
+int BN_is_negative(const BIGNUM *b);
+
+int BN_div(BIGNUM *dv, BIGNUM *rem, const BIGNUM *m, const BIGNUM *d,
+           BN_CTX *ctx);
+# define BN_mod(rem,m,d,ctx) BN_div(NULL,(rem),(m),(d),(ctx))
+int BN_nnmod(BIGNUM *r, const BIGNUM *m, const BIGNUM *d, BN_CTX *ctx);
+int BN_mod_add(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, const BIGNUM *m,
+               BN_CTX *ctx);
+int BN_mod_add_quick(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                     const BIGNUM *m);
+int BN_mod_sub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, const BIGNUM *m,
+               BN_CTX *ctx);
+int BN_mod_sub_quick(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                     const BIGNUM *m);
+int BN_mod_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, const BIGNUM *m,
+               BN_CTX *ctx);
+int BN_mod_sqr(BIGNUM *r, const BIGNUM *a, const BIGNUM *m, BN_CTX *ctx);
+int BN_mod_lshift1(BIGNUM *r, const BIGNUM *a, const BIGNUM *m, BN_CTX *ctx);
+int BN_mod_lshift1_quick(BIGNUM *r, const BIGNUM *a, const BIGNUM *m);
+int BN_mod_lshift(BIGNUM *r, const BIGNUM *a, int n, const BIGNUM *m,
+                  BN_CTX *ctx);
+int BN_mod_lshift_quick(BIGNUM *r, const BIGNUM *a, int n, const BIGNUM *m);
+
+BN_ULONG BN_mod_word(const BIGNUM *a, BN_ULONG w);
+BN_ULONG BN_div_word(BIGNUM *a, BN_ULONG w);
+int BN_mul_word(BIGNUM *a, BN_ULONG w);
+int BN_add_word(BIGNUM *a, BN_ULONG w);
+int BN_sub_word(BIGNUM *a, BN_ULONG w);
+int BN_set_word(BIGNUM *a, BN_ULONG w);
+BN_ULONG BN_get_word(const BIGNUM *a);
+
+int BN_cmp(const BIGNUM *a, const BIGNUM *b);
+void BN_free(BIGNUM *a);
+int BN_is_bit_set(const BIGNUM *a, int n);
+int BN_lshift(BIGNUM *r, const BIGNUM *a, int n);
+int BN_lshift1(BIGNUM *r, const BIGNUM *a);
+int BN_exp(BIGNUM *r, const BIGNUM *a, const BIGNUM *p, BN_CTX *ctx);
+
+int BN_mod_exp(BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
+               const BIGNUM *m, BN_CTX *ctx);
+int BN_mod_exp_mont(BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
+                    const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *m_ctx);
+int BN_mod_exp_mont_consttime(BIGNUM *rr, const BIGNUM *a, const BIGNUM *p,
+                              const BIGNUM *m, BN_CTX *ctx,
+                              BN_MONT_CTX *in_mont);
+int BN_mod_exp_mont_word(BIGNUM *r, BN_ULONG a, const BIGNUM *p,
+                         const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *m_ctx);
+int BN_mod_exp2_mont(BIGNUM *r, const BIGNUM *a1, const BIGNUM *p1,
+                     const BIGNUM *a2, const BIGNUM *p2, const BIGNUM *m,
+                     BN_CTX *ctx, BN_MONT_CTX *m_ctx);
+int BN_mod_exp_simple(BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
+                      const BIGNUM *m, BN_CTX *ctx);
+
+int BN_mask_bits(BIGNUM *a, int n);
+# ifndef OPENSSL_NO_STDIO
+int BN_print_fp(FILE *fp, const BIGNUM *a);
+# endif
+int BN_print(BIO *bio, const BIGNUM *a);
+int BN_reciprocal(BIGNUM *r, const BIGNUM *m, int len, BN_CTX *ctx);
+int BN_rshift(BIGNUM *r, const BIGNUM *a, int n);
+int BN_rshift1(BIGNUM *r, const BIGNUM *a);
+void BN_clear(BIGNUM *a);
+BIGNUM *BN_dup(const BIGNUM *a);
+int BN_ucmp(const BIGNUM *a, const BIGNUM *b);
+int BN_set_bit(BIGNUM *a, int n);
+int BN_clear_bit(BIGNUM *a, int n);
+char *BN_bn2hex(const BIGNUM *a);
+char *BN_bn2dec(const BIGNUM *a);
+int BN_hex2bn(BIGNUM **a, const char *str);
+int BN_dec2bn(BIGNUM **a, const char *str);
+int BN_asc2bn(BIGNUM **a, const char *str);
+int BN_gcd(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx);
+int BN_kronecker(const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx); /* returns
+                                                                  * -2 for
+                                                                  * error */
+BIGNUM *BN_mod_inverse(BIGNUM *ret,
+                       const BIGNUM *a, const BIGNUM *n, BN_CTX *ctx);
+BIGNUM *BN_mod_sqrt(BIGNUM *ret,
+                    const BIGNUM *a, const BIGNUM *n, BN_CTX *ctx);
+
+void BN_consttime_swap(BN_ULONG swap, BIGNUM *a, BIGNUM *b, int nwords);
+
+/* Deprecated versions */
+DEPRECATEDIN_0_9_8(BIGNUM *BN_generate_prime(BIGNUM *ret, int bits, int safe,
+                                             const BIGNUM *add,
+                                             const BIGNUM *rem,
+                                             void (*callback) (int, int,
+                                                               void *),
+                                             void *cb_arg))
+DEPRECATEDIN_0_9_8(int
+                   BN_is_prime(const BIGNUM *p, int nchecks,
+                               void (*callback) (int, int, void *),
+                               BN_CTX *ctx, void *cb_arg))
+DEPRECATEDIN_0_9_8(int
+                   BN_is_prime_fasttest(const BIGNUM *p, int nchecks,
+                                        void (*callback) (int, int, void *),
+                                        BN_CTX *ctx, void *cb_arg,
+                                        int do_trial_division))
+
+/* Newer versions */
+int BN_generate_prime_ex(BIGNUM *ret, int bits, int safe, const BIGNUM *add,
+                         const BIGNUM *rem, BN_GENCB *cb);
+int BN_is_prime_ex(const BIGNUM *p, int nchecks, BN_CTX *ctx, BN_GENCB *cb);
+int BN_is_prime_fasttest_ex(const BIGNUM *p, int nchecks, BN_CTX *ctx,
+                            int do_trial_division, BN_GENCB *cb);
+
+int BN_X931_generate_Xpq(BIGNUM *Xp, BIGNUM *Xq, int nbits, BN_CTX *ctx);
+
+int BN_X931_derive_prime_ex(BIGNUM *p, BIGNUM *p1, BIGNUM *p2,
+                            const BIGNUM *Xp, const BIGNUM *Xp1,
+                            const BIGNUM *Xp2, const BIGNUM *e, BN_CTX *ctx,
+                            BN_GENCB *cb);
+int BN_X931_generate_prime_ex(BIGNUM *p, BIGNUM *p1, BIGNUM *p2, BIGNUM *Xp1,
+                              BIGNUM *Xp2, const BIGNUM *Xp, const BIGNUM *e,
+                              BN_CTX *ctx, BN_GENCB *cb);
+
+BN_MONT_CTX *BN_MONT_CTX_new(void);
+int BN_mod_mul_montgomery(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                          BN_MONT_CTX *mont, BN_CTX *ctx);
+int BN_to_montgomery(BIGNUM *r, const BIGNUM *a, BN_MONT_CTX *mont,
+                     BN_CTX *ctx);
+int BN_from_montgomery(BIGNUM *r, const BIGNUM *a, BN_MONT_CTX *mont,
+                       BN_CTX *ctx);
+void BN_MONT_CTX_free(BN_MONT_CTX *mont);
+int BN_MONT_CTX_set(BN_MONT_CTX *mont, const BIGNUM *mod, BN_CTX *ctx);
+BN_MONT_CTX *BN_MONT_CTX_copy(BN_MONT_CTX *to, BN_MONT_CTX *from);
+BN_MONT_CTX *BN_MONT_CTX_set_locked(BN_MONT_CTX **pmont, CRYPTO_RWLOCK *lock,
+                                    const BIGNUM *mod, BN_CTX *ctx);
+
+/* BN_BLINDING flags */
+# define BN_BLINDING_NO_UPDATE   0x00000001
+# define BN_BLINDING_NO_RECREATE 0x00000002
+
+BN_BLINDING *BN_BLINDING_new(const BIGNUM *A, const BIGNUM *Ai, BIGNUM *mod);
+void BN_BLINDING_free(BN_BLINDING *b);
+int BN_BLINDING_update(BN_BLINDING *b, BN_CTX *ctx);
+int BN_BLINDING_convert(BIGNUM *n, BN_BLINDING *b, BN_CTX *ctx);
+int BN_BLINDING_invert(BIGNUM *n, BN_BLINDING *b, BN_CTX *ctx);
+int BN_BLINDING_convert_ex(BIGNUM *n, BIGNUM *r, BN_BLINDING *b, BN_CTX *);
+int BN_BLINDING_invert_ex(BIGNUM *n, const BIGNUM *r, BN_BLINDING *b,
+                          BN_CTX *);
+
+int BN_BLINDING_is_current_thread(BN_BLINDING *b);
+void BN_BLINDING_set_current_thread(BN_BLINDING *b);
+int BN_BLINDING_lock(BN_BLINDING *b);
+int BN_BLINDING_unlock(BN_BLINDING *b);
+
+unsigned long BN_BLINDING_get_flags(const BN_BLINDING *);
+void BN_BLINDING_set_flags(BN_BLINDING *, unsigned long);
+BN_BLINDING *BN_BLINDING_create_param(BN_BLINDING *b,
+                                      const BIGNUM *e, BIGNUM *m, BN_CTX *ctx,
+                                      int (*bn_mod_exp) (BIGNUM *r,
+                                                         const BIGNUM *a,
+                                                         const BIGNUM *p,
+                                                         const BIGNUM *m,
+                                                         BN_CTX *ctx,
+                                                         BN_MONT_CTX *m_ctx),
+                                      BN_MONT_CTX *m_ctx);
+
+DEPRECATEDIN_0_9_8(void BN_set_params(int mul, int high, int low, int mont))
+DEPRECATEDIN_0_9_8(int BN_get_params(int which)) /* 0, mul, 1 high, 2 low, 3
+                                                  * mont */
+
+BN_RECP_CTX *BN_RECP_CTX_new(void);
+void BN_RECP_CTX_free(BN_RECP_CTX *recp);
+int BN_RECP_CTX_set(BN_RECP_CTX *recp, const BIGNUM *rdiv, BN_CTX *ctx);
+int BN_mod_mul_reciprocal(BIGNUM *r, const BIGNUM *x, const BIGNUM *y,
+                          BN_RECP_CTX *recp, BN_CTX *ctx);
+int BN_mod_exp_recp(BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
+                    const BIGNUM *m, BN_CTX *ctx);
+int BN_div_recp(BIGNUM *dv, BIGNUM *rem, const BIGNUM *m,
+                BN_RECP_CTX *recp, BN_CTX *ctx);
+
+# ifndef OPENSSL_NO_EC2M
+
+/*
+ * Functions for arithmetic over binary polynomials represented by BIGNUMs.
+ * The BIGNUM::neg property of BIGNUMs representing binary polynomials is
+ * ignored. Note that input arguments are not const so that their bit arrays
+ * can be expanded to the appropriate size if needed.
+ */
+
+/*
+ * r = a + b
+ */
+int BN_GF2m_add(BIGNUM *r, const BIGNUM *a, const BIGNUM *b);
+#  define BN_GF2m_sub(r, a, b) BN_GF2m_add(r, a, b)
+/*
+ * r=a mod p
+ */
+int BN_GF2m_mod(BIGNUM *r, const BIGNUM *a, const BIGNUM *p);
+/* r = (a * b) mod p */
+int BN_GF2m_mod_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                    const BIGNUM *p, BN_CTX *ctx);
+/* r = (a * a) mod p */
+int BN_GF2m_mod_sqr(BIGNUM *r, const BIGNUM *a, const BIGNUM *p, BN_CTX *ctx);
+/* r = (1 / b) mod p */
+int BN_GF2m_mod_inv(BIGNUM *r, const BIGNUM *b, const BIGNUM *p, BN_CTX *ctx);
+/* r = (a / b) mod p */
+int BN_GF2m_mod_div(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                    const BIGNUM *p, BN_CTX *ctx);
+/* r = (a ^ b) mod p */
+int BN_GF2m_mod_exp(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                    const BIGNUM *p, BN_CTX *ctx);
+/* r = sqrt(a) mod p */
+int BN_GF2m_mod_sqrt(BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
+                     BN_CTX *ctx);
+/* r^2 + r = a mod p */
+int BN_GF2m_mod_solve_quad(BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
+                           BN_CTX *ctx);
+#  define BN_GF2m_cmp(a, b) BN_ucmp((a), (b))
+/*-
+ * Some functions allow for representation of the irreducible polynomials
+ * as an unsigned int[], say p.  The irreducible f(t) is then of the form:
+ *     t^p[0] + t^p[1] + ... + t^p[k]
+ * where m = p[0] > p[1] > ... > p[k] = 0.
+ */
+/* r = a mod p */
+int BN_GF2m_mod_arr(BIGNUM *r, const BIGNUM *a, const int p[]);
+/* r = (a * b) mod p */
+int BN_GF2m_mod_mul_arr(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                        const int p[], BN_CTX *ctx);
+/* r = (a * a) mod p */
+int BN_GF2m_mod_sqr_arr(BIGNUM *r, const BIGNUM *a, const int p[],
+                        BN_CTX *ctx);
+/* r = (1 / b) mod p */
+int BN_GF2m_mod_inv_arr(BIGNUM *r, const BIGNUM *b, const int p[],
+                        BN_CTX *ctx);
+/* r = (a / b) mod p */
+int BN_GF2m_mod_div_arr(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                        const int p[], BN_CTX *ctx);
+/* r = (a ^ b) mod p */
+int BN_GF2m_mod_exp_arr(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
+                        const int p[], BN_CTX *ctx);
+/* r = sqrt(a) mod p */
+int BN_GF2m_mod_sqrt_arr(BIGNUM *r, const BIGNUM *a,
+                         const int p[], BN_CTX *ctx);
+/* r^2 + r = a mod p */
+int BN_GF2m_mod_solve_quad_arr(BIGNUM *r, const BIGNUM *a,
+                               const int p[], BN_CTX *ctx);
+int BN_GF2m_poly2arr(const BIGNUM *a, int p[], int max);
+int BN_GF2m_arr2poly(const int p[], BIGNUM *a);
+
+# endif
+
+/*
+ * faster mod functions for the 'NIST primes' 0 <= a < p^2
+ */
+int BN_nist_mod_192(BIGNUM *r, const BIGNUM *a, const BIGNUM *p, BN_CTX *ctx);
+int BN_nist_mod_224(BIGNUM *r, const BIGNUM *a, const BIGNUM *p, BN_CTX *ctx);
+int BN_nist_mod_256(BIGNUM *r, const BIGNUM *a, const BIGNUM *p, BN_CTX *ctx);
+int BN_nist_mod_384(BIGNUM *r, const BIGNUM *a, const BIGNUM *p, BN_CTX *ctx);
+int BN_nist_mod_521(BIGNUM *r, const BIGNUM *a, const BIGNUM *p, BN_CTX *ctx);
+
+const BIGNUM *BN_get0_nist_prime_192(void);
+const BIGNUM *BN_get0_nist_prime_224(void);
+const BIGNUM *BN_get0_nist_prime_256(void);
+const BIGNUM *BN_get0_nist_prime_384(void);
+const BIGNUM *BN_get0_nist_prime_521(void);
+
+int (*BN_nist_mod_func(const BIGNUM *p)) (BIGNUM *r, const BIGNUM *a,
+                                          const BIGNUM *field, BN_CTX *ctx);
+
+int BN_generate_dsa_nonce(BIGNUM *out, const BIGNUM *range,
+                          const BIGNUM *priv, const unsigned char *message,
+                          size_t message_len, BN_CTX *ctx);
+
+/* Primes from RFC 2409 */
+BIGNUM *BN_get_rfc2409_prime_768(BIGNUM *bn);
+BIGNUM *BN_get_rfc2409_prime_1024(BIGNUM *bn);
+
+/* Primes from RFC 3526 */
+BIGNUM *BN_get_rfc3526_prime_1536(BIGNUM *bn);
+BIGNUM *BN_get_rfc3526_prime_2048(BIGNUM *bn);
+BIGNUM *BN_get_rfc3526_prime_3072(BIGNUM *bn);
+BIGNUM *BN_get_rfc3526_prime_4096(BIGNUM *bn);
+BIGNUM *BN_get_rfc3526_prime_6144(BIGNUM *bn);
+BIGNUM *BN_get_rfc3526_prime_8192(BIGNUM *bn);
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define get_rfc2409_prime_768 BN_get_rfc2409_prime_768
+#  define get_rfc2409_prime_1024 BN_get_rfc2409_prime_1024
+#  define get_rfc3526_prime_1536 BN_get_rfc3526_prime_1536
+#  define get_rfc3526_prime_2048 BN_get_rfc3526_prime_2048
+#  define get_rfc3526_prime_3072 BN_get_rfc3526_prime_3072
+#  define get_rfc3526_prime_4096 BN_get_rfc3526_prime_4096
+#  define get_rfc3526_prime_6144 BN_get_rfc3526_prime_6144
+#  define get_rfc3526_prime_8192 BN_get_rfc3526_prime_8192
+# endif
+
+int BN_bntest_rand(BIGNUM *rnd, int bits, int top, int bottom);
+
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/bnerr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/bnerr.h
new file mode 100644
index 000000000..8a022cc06
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/bnerr.h
@@ -0,0 +1,96 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_BNERR_H
+# define HEADER_BNERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_BN_strings(void);
+
+/*
+ * BN function codes.
+ */
+# define BN_F_BNRAND                                      127
+# define BN_F_BNRAND_RANGE                                138
+# define BN_F_BN_BLINDING_CONVERT_EX                      100
+# define BN_F_BN_BLINDING_CREATE_PARAM                    128
+# define BN_F_BN_BLINDING_INVERT_EX                       101
+# define BN_F_BN_BLINDING_NEW                             102
+# define BN_F_BN_BLINDING_UPDATE                          103
+# define BN_F_BN_BN2DEC                                   104
+# define BN_F_BN_BN2HEX                                   105
+# define BN_F_BN_COMPUTE_WNAF                             142
+# define BN_F_BN_CTX_GET                                  116
+# define BN_F_BN_CTX_NEW                                  106
+# define BN_F_BN_CTX_START                                129
+# define BN_F_BN_DIV                                      107
+# define BN_F_BN_DIV_RECP                                 130
+# define BN_F_BN_EXP                                      123
+# define BN_F_BN_EXPAND_INTERNAL                          120
+# define BN_F_BN_GENCB_NEW                                143
+# define BN_F_BN_GENERATE_DSA_NONCE                       140
+# define BN_F_BN_GENERATE_PRIME_EX                        141
+# define BN_F_BN_GF2M_MOD                                 131
+# define BN_F_BN_GF2M_MOD_EXP                             132
+# define BN_F_BN_GF2M_MOD_MUL                             133
+# define BN_F_BN_GF2M_MOD_SOLVE_QUAD                      134
+# define BN_F_BN_GF2M_MOD_SOLVE_QUAD_ARR                  135
+# define BN_F_BN_GF2M_MOD_SQR                             136
+# define BN_F_BN_GF2M_MOD_SQRT                            137
+# define BN_F_BN_LSHIFT                                   145
+# define BN_F_BN_MOD_EXP2_MONT                            118
+# define BN_F_BN_MOD_EXP_MONT                             109
+# define BN_F_BN_MOD_EXP_MONT_CONSTTIME                   124
+# define BN_F_BN_MOD_EXP_MONT_WORD                        117
+# define BN_F_BN_MOD_EXP_RECP                             125
+# define BN_F_BN_MOD_EXP_SIMPLE                           126
+# define BN_F_BN_MOD_INVERSE                              110
+# define BN_F_BN_MOD_INVERSE_NO_BRANCH                    139
+# define BN_F_BN_MOD_LSHIFT_QUICK                         119
+# define BN_F_BN_MOD_SQRT                                 121
+# define BN_F_BN_MONT_CTX_NEW                             149
+# define BN_F_BN_MPI2BN                                   112
+# define BN_F_BN_NEW                                      113
+# define BN_F_BN_POOL_GET                                 147
+# define BN_F_BN_RAND                                     114
+# define BN_F_BN_RAND_RANGE                               122
+# define BN_F_BN_RECP_CTX_NEW                             150
+# define BN_F_BN_RSHIFT                                   146
+# define BN_F_BN_SET_WORDS                                144
+# define BN_F_BN_STACK_PUSH                               148
+# define BN_F_BN_USUB                                     115
+
+/*
+ * BN reason codes.
+ */
+# define BN_R_ARG2_LT_ARG3                                100
+# define BN_R_BAD_RECIPROCAL                              101
+# define BN_R_BIGNUM_TOO_LONG                             114
+# define BN_R_BITS_TOO_SMALL                              118
+# define BN_R_CALLED_WITH_EVEN_MODULUS                    102
+# define BN_R_DIV_BY_ZERO                                 103
+# define BN_R_ENCODING_ERROR                              104
+# define BN_R_EXPAND_ON_STATIC_BIGNUM_DATA                105
+# define BN_R_INPUT_NOT_REDUCED                           110
+# define BN_R_INVALID_LENGTH                              106
+# define BN_R_INVALID_RANGE                               115
+# define BN_R_INVALID_SHIFT                               119
+# define BN_R_NOT_A_SQUARE                                111
+# define BN_R_NOT_INITIALIZED                             107
+# define BN_R_NO_INVERSE                                  108
+# define BN_R_NO_SOLUTION                                 116
+# define BN_R_PRIVATE_KEY_TOO_LARGE                       117
+# define BN_R_P_IS_NOT_PRIME                              112
+# define BN_R_TOO_MANY_ITERATIONS                         113
+# define BN_R_TOO_MANY_TEMPORARY_VARIABLES                109
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/buffer.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/buffer.h
new file mode 100644
index 000000000..d2765766b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/buffer.h
@@ -0,0 +1,58 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_BUFFER_H
+# define HEADER_BUFFER_H
+
+# include <openssl/ossl_typ.h>
+# ifndef HEADER_CRYPTO_H
+#  include <openssl/crypto.h>
+# endif
+# include <openssl/buffererr.h>
+
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+# include <stddef.h>
+# include <sys/types.h>
+
+/*
+ * These names are outdated as of OpenSSL 1.1; a future release
+ * will move them to be deprecated.
+ */
+# define BUF_strdup(s) OPENSSL_strdup(s)
+# define BUF_strndup(s, size) OPENSSL_strndup(s, size)
+# define BUF_memdup(data, size) OPENSSL_memdup(data, size)
+# define BUF_strlcpy(dst, src, size)  OPENSSL_strlcpy(dst, src, size)
+# define BUF_strlcat(dst, src, size) OPENSSL_strlcat(dst, src, size)
+# define BUF_strnlen(str, maxlen) OPENSSL_strnlen(str, maxlen)
+
+struct buf_mem_st {
+    size_t length;              /* current number of bytes */
+    char *data;
+    size_t max;                 /* size of buffer */
+    unsigned long flags;
+};
+
+# define BUF_MEM_FLAG_SECURE  0x01
+
+BUF_MEM *BUF_MEM_new(void);
+BUF_MEM *BUF_MEM_new_ex(unsigned long flags);
+void BUF_MEM_free(BUF_MEM *a);
+size_t BUF_MEM_grow(BUF_MEM *str, size_t len);
+size_t BUF_MEM_grow_clean(BUF_MEM *str, size_t len);
+void BUF_reverse(unsigned char *out, const unsigned char *in, size_t siz);
+
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/buffererr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/buffererr.h
new file mode 100644
index 000000000..3aee13232
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/buffererr.h
@@ -0,0 +1,30 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_BUFERR_H
+# define HEADER_BUFERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_BUF_strings(void);
+
+/*
+ * BUF function codes.
+ */
+# define BUF_F_BUF_MEM_GROW                               100
+# define BUF_F_BUF_MEM_GROW_CLEAN                         105
+# define BUF_F_BUF_MEM_NEW                                101
+
+/*
+ * BUF reason codes.
+ */
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/camellia.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/camellia.h
new file mode 100644
index 000000000..151f3c134
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/camellia.h
@@ -0,0 +1,83 @@
+/*
+ * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_CAMELLIA_H
+# define HEADER_CAMELLIA_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_CAMELLIA
+# include <stddef.h>
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+# define CAMELLIA_ENCRYPT        1
+# define CAMELLIA_DECRYPT        0
+
+/*
+ * Because array size can't be a const in C, the following two are macros.
+ * Both sizes are in bytes.
+ */
+
+/* This should be a hidden type, but EVP requires that the size be known */
+
+# define CAMELLIA_BLOCK_SIZE 16
+# define CAMELLIA_TABLE_BYTE_LEN 272
+# define CAMELLIA_TABLE_WORD_LEN (CAMELLIA_TABLE_BYTE_LEN / 4)
+
+typedef unsigned int KEY_TABLE_TYPE[CAMELLIA_TABLE_WORD_LEN]; /* to match
+                                                               * with WORD */
+
+struct camellia_key_st {
+    union {
+        double d;               /* ensures 64-bit align */
+        KEY_TABLE_TYPE rd_key;
+    } u;
+    int grand_rounds;
+};
+typedef struct camellia_key_st CAMELLIA_KEY;
+
+int Camellia_set_key(const unsigned char *userKey, const int bits,
+                     CAMELLIA_KEY *key);
+
+void Camellia_encrypt(const unsigned char *in, unsigned char *out,
+                      const CAMELLIA_KEY *key);
+void Camellia_decrypt(const unsigned char *in, unsigned char *out,
+                      const CAMELLIA_KEY *key);
+
+void Camellia_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                          const CAMELLIA_KEY *key, const int enc);
+void Camellia_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                          size_t length, const CAMELLIA_KEY *key,
+                          unsigned char *ivec, const int enc);
+void Camellia_cfb128_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t length, const CAMELLIA_KEY *key,
+                             unsigned char *ivec, int *num, const int enc);
+void Camellia_cfb1_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t length, const CAMELLIA_KEY *key,
+                           unsigned char *ivec, int *num, const int enc);
+void Camellia_cfb8_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t length, const CAMELLIA_KEY *key,
+                           unsigned char *ivec, int *num, const int enc);
+void Camellia_ofb128_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t length, const CAMELLIA_KEY *key,
+                             unsigned char *ivec, int *num);
+void Camellia_ctr128_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t length, const CAMELLIA_KEY *key,
+                             unsigned char ivec[CAMELLIA_BLOCK_SIZE],
+                             unsigned char ecount_buf[CAMELLIA_BLOCK_SIZE],
+                             unsigned int *num);
+
+# ifdef  __cplusplus
+}
+# endif
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/cast.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/cast.h
new file mode 100644
index 000000000..2cc89ae01
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/cast.h
@@ -0,0 +1,53 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_CAST_H
+# define HEADER_CAST_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_CAST
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+# define CAST_ENCRYPT    1
+# define CAST_DECRYPT    0
+
+# define CAST_LONG unsigned int
+
+# define CAST_BLOCK      8
+# define CAST_KEY_LENGTH 16
+
+typedef struct cast_key_st {
+    CAST_LONG data[32];
+    int short_key;              /* Use reduced rounds for short key */
+} CAST_KEY;
+
+void CAST_set_key(CAST_KEY *key, int len, const unsigned char *data);
+void CAST_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                      const CAST_KEY *key, int enc);
+void CAST_encrypt(CAST_LONG *data, const CAST_KEY *key);
+void CAST_decrypt(CAST_LONG *data, const CAST_KEY *key);
+void CAST_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                      long length, const CAST_KEY *ks, unsigned char *iv,
+                      int enc);
+void CAST_cfb64_encrypt(const unsigned char *in, unsigned char *out,
+                        long length, const CAST_KEY *schedule,
+                        unsigned char *ivec, int *num, int enc);
+void CAST_ofb64_encrypt(const unsigned char *in, unsigned char *out,
+                        long length, const CAST_KEY *schedule,
+                        unsigned char *ivec, int *num);
+
+# ifdef  __cplusplus
+}
+# endif
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/cmac.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/cmac.h
new file mode 100644
index 000000000..3535a9abf
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/cmac.h
@@ -0,0 +1,41 @@
+/*
+ * Copyright 2010-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_CMAC_H
+# define HEADER_CMAC_H
+
+# ifndef OPENSSL_NO_CMAC
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+# include <openssl/evp.h>
+
+/* Opaque */
+typedef struct CMAC_CTX_st CMAC_CTX;
+
+CMAC_CTX *CMAC_CTX_new(void);
+void CMAC_CTX_cleanup(CMAC_CTX *ctx);
+void CMAC_CTX_free(CMAC_CTX *ctx);
+EVP_CIPHER_CTX *CMAC_CTX_get0_cipher_ctx(CMAC_CTX *ctx);
+int CMAC_CTX_copy(CMAC_CTX *out, const CMAC_CTX *in);
+
+int CMAC_Init(CMAC_CTX *ctx, const void *key, size_t keylen,
+              const EVP_CIPHER *cipher, ENGINE *impl);
+int CMAC_Update(CMAC_CTX *ctx, const void *data, size_t dlen);
+int CMAC_Final(CMAC_CTX *ctx, unsigned char *out, size_t *poutlen);
+int CMAC_resume(CMAC_CTX *ctx);
+
+#ifdef  __cplusplus
+}
+#endif
+
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/cms.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/cms.h
new file mode 100644
index 000000000..ddf37e56f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/cms.h
@@ -0,0 +1,342 @@
+/*
+ * Copyright 2008-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_CMS_H
+# define HEADER_CMS_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_CMS
+# include <openssl/x509.h>
+# include <openssl/x509v3.h>
+# include <openssl/cmserr.h>
+# ifdef __cplusplus
+extern "C" {
+# endif
+
+typedef struct CMS_ContentInfo_st CMS_ContentInfo;
+typedef struct CMS_SignerInfo_st CMS_SignerInfo;
+typedef struct CMS_CertificateChoices CMS_CertificateChoices;
+typedef struct CMS_RevocationInfoChoice_st CMS_RevocationInfoChoice;
+typedef struct CMS_RecipientInfo_st CMS_RecipientInfo;
+typedef struct CMS_ReceiptRequest_st CMS_ReceiptRequest;
+typedef struct CMS_Receipt_st CMS_Receipt;
+typedef struct CMS_RecipientEncryptedKey_st CMS_RecipientEncryptedKey;
+typedef struct CMS_OtherKeyAttribute_st CMS_OtherKeyAttribute;
+
+DEFINE_STACK_OF(CMS_SignerInfo)
+DEFINE_STACK_OF(CMS_RecipientEncryptedKey)
+DEFINE_STACK_OF(CMS_RecipientInfo)
+DEFINE_STACK_OF(CMS_RevocationInfoChoice)
+DECLARE_ASN1_FUNCTIONS(CMS_ContentInfo)
+DECLARE_ASN1_FUNCTIONS(CMS_ReceiptRequest)
+DECLARE_ASN1_PRINT_FUNCTION(CMS_ContentInfo)
+
+# define CMS_SIGNERINFO_ISSUER_SERIAL    0
+# define CMS_SIGNERINFO_KEYIDENTIFIER    1
+
+# define CMS_RECIPINFO_NONE              -1
+# define CMS_RECIPINFO_TRANS             0
+# define CMS_RECIPINFO_AGREE             1
+# define CMS_RECIPINFO_KEK               2
+# define CMS_RECIPINFO_PASS              3
+# define CMS_RECIPINFO_OTHER             4
+
+/* S/MIME related flags */
+
+# define CMS_TEXT                        0x1
+# define CMS_NOCERTS                     0x2
+# define CMS_NO_CONTENT_VERIFY           0x4
+# define CMS_NO_ATTR_VERIFY              0x8
+# define CMS_NOSIGS                      \
+                        (CMS_NO_CONTENT_VERIFY|CMS_NO_ATTR_VERIFY)
+# define CMS_NOINTERN                    0x10
+# define CMS_NO_SIGNER_CERT_VERIFY       0x20
+# define CMS_NOVERIFY                    0x20
+# define CMS_DETACHED                    0x40
+# define CMS_BINARY                      0x80
+# define CMS_NOATTR                      0x100
+# define CMS_NOSMIMECAP                  0x200
+# define CMS_NOOLDMIMETYPE               0x400
+# define CMS_CRLFEOL                     0x800
+# define CMS_STREAM                      0x1000
+# define CMS_NOCRL                       0x2000
+# define CMS_PARTIAL                     0x4000
+# define CMS_REUSE_DIGEST                0x8000
+# define CMS_USE_KEYID                   0x10000
+# define CMS_DEBUG_DECRYPT               0x20000
+# define CMS_KEY_PARAM                   0x40000
+# define CMS_ASCIICRLF                   0x80000
+
+const ASN1_OBJECT *CMS_get0_type(const CMS_ContentInfo *cms);
+
+BIO *CMS_dataInit(CMS_ContentInfo *cms, BIO *icont);
+int CMS_dataFinal(CMS_ContentInfo *cms, BIO *bio);
+
+ASN1_OCTET_STRING **CMS_get0_content(CMS_ContentInfo *cms);
+int CMS_is_detached(CMS_ContentInfo *cms);
+int CMS_set_detached(CMS_ContentInfo *cms, int detached);
+
+# ifdef HEADER_PEM_H
+DECLARE_PEM_rw_const(CMS, CMS_ContentInfo)
+# endif
+int CMS_stream(unsigned char ***boundary, CMS_ContentInfo *cms);
+CMS_ContentInfo *d2i_CMS_bio(BIO *bp, CMS_ContentInfo **cms);
+int i2d_CMS_bio(BIO *bp, CMS_ContentInfo *cms);
+
+BIO *BIO_new_CMS(BIO *out, CMS_ContentInfo *cms);
+int i2d_CMS_bio_stream(BIO *out, CMS_ContentInfo *cms, BIO *in, int flags);
+int PEM_write_bio_CMS_stream(BIO *out, CMS_ContentInfo *cms, BIO *in,
+                             int flags);
+CMS_ContentInfo *SMIME_read_CMS(BIO *bio, BIO **bcont);
+int SMIME_write_CMS(BIO *bio, CMS_ContentInfo *cms, BIO *data, int flags);
+
+int CMS_final(CMS_ContentInfo *cms, BIO *data, BIO *dcont,
+              unsigned int flags);
+
+CMS_ContentInfo *CMS_sign(X509 *signcert, EVP_PKEY *pkey,
+                          STACK_OF(X509) *certs, BIO *data,
+                          unsigned int flags);
+
+CMS_ContentInfo *CMS_sign_receipt(CMS_SignerInfo *si,
+                                  X509 *signcert, EVP_PKEY *pkey,
+                                  STACK_OF(X509) *certs, unsigned int flags);
+
+int CMS_data(CMS_ContentInfo *cms, BIO *out, unsigned int flags);
+CMS_ContentInfo *CMS_data_create(BIO *in, unsigned int flags);
+
+int CMS_digest_verify(CMS_ContentInfo *cms, BIO *dcont, BIO *out,
+                      unsigned int flags);
+CMS_ContentInfo *CMS_digest_create(BIO *in, const EVP_MD *md,
+                                   unsigned int flags);
+
+int CMS_EncryptedData_decrypt(CMS_ContentInfo *cms,
+                              const unsigned char *key, size_t keylen,
+                              BIO *dcont, BIO *out, unsigned int flags);
+
+CMS_ContentInfo *CMS_EncryptedData_encrypt(BIO *in, const EVP_CIPHER *cipher,
+                                           const unsigned char *key,
+                                           size_t keylen, unsigned int flags);
+
+int CMS_EncryptedData_set1_key(CMS_ContentInfo *cms, const EVP_CIPHER *ciph,
+                               const unsigned char *key, size_t keylen);
+
+int CMS_verify(CMS_ContentInfo *cms, STACK_OF(X509) *certs,
+               X509_STORE *store, BIO *dcont, BIO *out, unsigned int flags);
+
+int CMS_verify_receipt(CMS_ContentInfo *rcms, CMS_ContentInfo *ocms,
+                       STACK_OF(X509) *certs,
+                       X509_STORE *store, unsigned int flags);
+
+STACK_OF(X509) *CMS_get0_signers(CMS_ContentInfo *cms);
+
+CMS_ContentInfo *CMS_encrypt(STACK_OF(X509) *certs, BIO *in,
+                             const EVP_CIPHER *cipher, unsigned int flags);
+
+int CMS_decrypt(CMS_ContentInfo *cms, EVP_PKEY *pkey, X509 *cert,
+                BIO *dcont, BIO *out, unsigned int flags);
+
+int CMS_decrypt_set1_pkey(CMS_ContentInfo *cms, EVP_PKEY *pk, X509 *cert);
+int CMS_decrypt_set1_key(CMS_ContentInfo *cms,
+                         unsigned char *key, size_t keylen,
+                         const unsigned char *id, size_t idlen);
+int CMS_decrypt_set1_password(CMS_ContentInfo *cms,
+                              unsigned char *pass, ossl_ssize_t passlen);
+
+STACK_OF(CMS_RecipientInfo) *CMS_get0_RecipientInfos(CMS_ContentInfo *cms);
+int CMS_RecipientInfo_type(CMS_RecipientInfo *ri);
+EVP_PKEY_CTX *CMS_RecipientInfo_get0_pkey_ctx(CMS_RecipientInfo *ri);
+CMS_ContentInfo *CMS_EnvelopedData_create(const EVP_CIPHER *cipher);
+CMS_RecipientInfo *CMS_add1_recipient_cert(CMS_ContentInfo *cms,
+                                           X509 *recip, unsigned int flags);
+int CMS_RecipientInfo_set0_pkey(CMS_RecipientInfo *ri, EVP_PKEY *pkey);
+int CMS_RecipientInfo_ktri_cert_cmp(CMS_RecipientInfo *ri, X509 *cert);
+int CMS_RecipientInfo_ktri_get0_algs(CMS_RecipientInfo *ri,
+                                     EVP_PKEY **pk, X509 **recip,
+                                     X509_ALGOR **palg);
+int CMS_RecipientInfo_ktri_get0_signer_id(CMS_RecipientInfo *ri,
+                                          ASN1_OCTET_STRING **keyid,
+                                          X509_NAME **issuer,
+                                          ASN1_INTEGER **sno);
+
+CMS_RecipientInfo *CMS_add0_recipient_key(CMS_ContentInfo *cms, int nid,
+                                          unsigned char *key, size_t keylen,
+                                          unsigned char *id, size_t idlen,
+                                          ASN1_GENERALIZEDTIME *date,
+                                          ASN1_OBJECT *otherTypeId,
+                                          ASN1_TYPE *otherType);
+
+int CMS_RecipientInfo_kekri_get0_id(CMS_RecipientInfo *ri,
+                                    X509_ALGOR **palg,
+                                    ASN1_OCTET_STRING **pid,
+                                    ASN1_GENERALIZEDTIME **pdate,
+                                    ASN1_OBJECT **potherid,
+                                    ASN1_TYPE **pothertype);
+
+int CMS_RecipientInfo_set0_key(CMS_RecipientInfo *ri,
+                               unsigned char *key, size_t keylen);
+
+int CMS_RecipientInfo_kekri_id_cmp(CMS_RecipientInfo *ri,
+                                   const unsigned char *id, size_t idlen);
+
+int CMS_RecipientInfo_set0_password(CMS_RecipientInfo *ri,
+                                    unsigned char *pass,
+                                    ossl_ssize_t passlen);
+
+CMS_RecipientInfo *CMS_add0_recipient_password(CMS_ContentInfo *cms,
+                                               int iter, int wrap_nid,
+                                               int pbe_nid,
+                                               unsigned char *pass,
+                                               ossl_ssize_t passlen,
+                                               const EVP_CIPHER *kekciph);
+
+int CMS_RecipientInfo_decrypt(CMS_ContentInfo *cms, CMS_RecipientInfo *ri);
+int CMS_RecipientInfo_encrypt(CMS_ContentInfo *cms, CMS_RecipientInfo *ri);
+
+int CMS_uncompress(CMS_ContentInfo *cms, BIO *dcont, BIO *out,
+                   unsigned int flags);
+CMS_ContentInfo *CMS_compress(BIO *in, int comp_nid, unsigned int flags);
+
+int CMS_set1_eContentType(CMS_ContentInfo *cms, const ASN1_OBJECT *oid);
+const ASN1_OBJECT *CMS_get0_eContentType(CMS_ContentInfo *cms);
+
+CMS_CertificateChoices *CMS_add0_CertificateChoices(CMS_ContentInfo *cms);
+int CMS_add0_cert(CMS_ContentInfo *cms, X509 *cert);
+int CMS_add1_cert(CMS_ContentInfo *cms, X509 *cert);
+STACK_OF(X509) *CMS_get1_certs(CMS_ContentInfo *cms);
+
+CMS_RevocationInfoChoice *CMS_add0_RevocationInfoChoice(CMS_ContentInfo *cms);
+int CMS_add0_crl(CMS_ContentInfo *cms, X509_CRL *crl);
+int CMS_add1_crl(CMS_ContentInfo *cms, X509_CRL *crl);
+STACK_OF(X509_CRL) *CMS_get1_crls(CMS_ContentInfo *cms);
+
+int CMS_SignedData_init(CMS_ContentInfo *cms);
+CMS_SignerInfo *CMS_add1_signer(CMS_ContentInfo *cms,
+                                X509 *signer, EVP_PKEY *pk, const EVP_MD *md,
+                                unsigned int flags);
+EVP_PKEY_CTX *CMS_SignerInfo_get0_pkey_ctx(CMS_SignerInfo *si);
+EVP_MD_CTX *CMS_SignerInfo_get0_md_ctx(CMS_SignerInfo *si);
+STACK_OF(CMS_SignerInfo) *CMS_get0_SignerInfos(CMS_ContentInfo *cms);
+
+void CMS_SignerInfo_set1_signer_cert(CMS_SignerInfo *si, X509 *signer);
+int CMS_SignerInfo_get0_signer_id(CMS_SignerInfo *si,
+                                  ASN1_OCTET_STRING **keyid,
+                                  X509_NAME **issuer, ASN1_INTEGER **sno);
+int CMS_SignerInfo_cert_cmp(CMS_SignerInfo *si, X509 *cert);
+int CMS_set1_signers_certs(CMS_ContentInfo *cms, STACK_OF(X509) *certs,
+                           unsigned int flags);
+void CMS_SignerInfo_get0_algs(CMS_SignerInfo *si, EVP_PKEY **pk,
+                              X509 **signer, X509_ALGOR **pdig,
+                              X509_ALGOR **psig);
+ASN1_OCTET_STRING *CMS_SignerInfo_get0_signature(CMS_SignerInfo *si);
+int CMS_SignerInfo_sign(CMS_SignerInfo *si);
+int CMS_SignerInfo_verify(CMS_SignerInfo *si);
+int CMS_SignerInfo_verify_content(CMS_SignerInfo *si, BIO *chain);
+
+int CMS_add_smimecap(CMS_SignerInfo *si, STACK_OF(X509_ALGOR) *algs);
+int CMS_add_simple_smimecap(STACK_OF(X509_ALGOR) **algs,
+                            int algnid, int keysize);
+int CMS_add_standard_smimecap(STACK_OF(X509_ALGOR) **smcap);
+
+int CMS_signed_get_attr_count(const CMS_SignerInfo *si);
+int CMS_signed_get_attr_by_NID(const CMS_SignerInfo *si, int nid,
+                               int lastpos);
+int CMS_signed_get_attr_by_OBJ(const CMS_SignerInfo *si, const ASN1_OBJECT *obj,
+                               int lastpos);
+X509_ATTRIBUTE *CMS_signed_get_attr(const CMS_SignerInfo *si, int loc);
+X509_ATTRIBUTE *CMS_signed_delete_attr(CMS_SignerInfo *si, int loc);
+int CMS_signed_add1_attr(CMS_SignerInfo *si, X509_ATTRIBUTE *attr);
+int CMS_signed_add1_attr_by_OBJ(CMS_SignerInfo *si,
+                                const ASN1_OBJECT *obj, int type,
+                                const void *bytes, int len);
+int CMS_signed_add1_attr_by_NID(CMS_SignerInfo *si,
+                                int nid, int type,
+                                const void *bytes, int len);
+int CMS_signed_add1_attr_by_txt(CMS_SignerInfo *si,
+                                const char *attrname, int type,
+                                const void *bytes, int len);
+void *CMS_signed_get0_data_by_OBJ(CMS_SignerInfo *si, const ASN1_OBJECT *oid,
+                                  int lastpos, int type);
+
+int CMS_unsigned_get_attr_count(const CMS_SignerInfo *si);
+int CMS_unsigned_get_attr_by_NID(const CMS_SignerInfo *si, int nid,
+                                 int lastpos);
+int CMS_unsigned_get_attr_by_OBJ(const CMS_SignerInfo *si,
+                                 const ASN1_OBJECT *obj, int lastpos);
+X509_ATTRIBUTE *CMS_unsigned_get_attr(const CMS_SignerInfo *si, int loc);
+X509_ATTRIBUTE *CMS_unsigned_delete_attr(CMS_SignerInfo *si, int loc);
+int CMS_unsigned_add1_attr(CMS_SignerInfo *si, X509_ATTRIBUTE *attr);
+int CMS_unsigned_add1_attr_by_OBJ(CMS_SignerInfo *si,
+                                  const ASN1_OBJECT *obj, int type,
+                                  const void *bytes, int len);
+int CMS_unsigned_add1_attr_by_NID(CMS_SignerInfo *si,
+                                  int nid, int type,
+                                  const void *bytes, int len);
+int CMS_unsigned_add1_attr_by_txt(CMS_SignerInfo *si,
+                                  const char *attrname, int type,
+                                  const void *bytes, int len);
+void *CMS_unsigned_get0_data_by_OBJ(CMS_SignerInfo *si, ASN1_OBJECT *oid,
+                                    int lastpos, int type);
+
+# ifdef HEADER_X509V3_H
+
+int CMS_get1_ReceiptRequest(CMS_SignerInfo *si, CMS_ReceiptRequest **prr);
+CMS_ReceiptRequest *CMS_ReceiptRequest_create0(unsigned char *id, int idlen,
+                                               int allorfirst,
+                                               STACK_OF(GENERAL_NAMES)
+                                               *receiptList, STACK_OF(GENERAL_NAMES)
+                                               *receiptsTo);
+int CMS_add1_ReceiptRequest(CMS_SignerInfo *si, CMS_ReceiptRequest *rr);
+void CMS_ReceiptRequest_get0_values(CMS_ReceiptRequest *rr,
+                                    ASN1_STRING **pcid,
+                                    int *pallorfirst,
+                                    STACK_OF(GENERAL_NAMES) **plist,
+                                    STACK_OF(GENERAL_NAMES) **prto);
+# endif
+int CMS_RecipientInfo_kari_get0_alg(CMS_RecipientInfo *ri,
+                                    X509_ALGOR **palg,
+                                    ASN1_OCTET_STRING **pukm);
+STACK_OF(CMS_RecipientEncryptedKey)
+*CMS_RecipientInfo_kari_get0_reks(CMS_RecipientInfo *ri);
+
+int CMS_RecipientInfo_kari_get0_orig_id(CMS_RecipientInfo *ri,
+                                        X509_ALGOR **pubalg,
+                                        ASN1_BIT_STRING **pubkey,
+                                        ASN1_OCTET_STRING **keyid,
+                                        X509_NAME **issuer,
+                                        ASN1_INTEGER **sno);
+
+int CMS_RecipientInfo_kari_orig_id_cmp(CMS_RecipientInfo *ri, X509 *cert);
+
+int CMS_RecipientEncryptedKey_get0_id(CMS_RecipientEncryptedKey *rek,
+                                      ASN1_OCTET_STRING **keyid,
+                                      ASN1_GENERALIZEDTIME **tm,
+                                      CMS_OtherKeyAttribute **other,
+                                      X509_NAME **issuer, ASN1_INTEGER **sno);
+int CMS_RecipientEncryptedKey_cert_cmp(CMS_RecipientEncryptedKey *rek,
+                                       X509 *cert);
+int CMS_RecipientInfo_kari_set0_pkey(CMS_RecipientInfo *ri, EVP_PKEY *pk);
+EVP_CIPHER_CTX *CMS_RecipientInfo_kari_get0_ctx(CMS_RecipientInfo *ri);
+int CMS_RecipientInfo_kari_decrypt(CMS_ContentInfo *cms,
+                                   CMS_RecipientInfo *ri,
+                                   CMS_RecipientEncryptedKey *rek);
+
+int CMS_SharedInfo_encode(unsigned char **pder, X509_ALGOR *kekalg,
+                          ASN1_OCTET_STRING *ukm, int keylen);
+
+/* Backward compatibility for spelling errors. */
+# define CMS_R_UNKNOWN_DIGEST_ALGORITM CMS_R_UNKNOWN_DIGEST_ALGORITHM
+# define CMS_R_UNSUPPORTED_RECPIENTINFO_TYPE \
+    CMS_R_UNSUPPORTED_RECIPIENTINFO_TYPE
+
+#  ifdef  __cplusplus
+}
+#  endif
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/cmserr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/cmserr.h
new file mode 100644
index 000000000..3f8ae26da
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/cmserr.h
@@ -0,0 +1,196 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_CMSERR_H
+# define HEADER_CMSERR_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_CMS
+
+#  ifdef  __cplusplus
+extern "C"
+#  endif
+int ERR_load_CMS_strings(void);
+
+/*
+ * CMS function codes.
+ */
+#  define CMS_F_CHECK_CONTENT                              99
+#  define CMS_F_CMS_ADD0_CERT                              164
+#  define CMS_F_CMS_ADD0_RECIPIENT_KEY                     100
+#  define CMS_F_CMS_ADD0_RECIPIENT_PASSWORD                165
+#  define CMS_F_CMS_ADD1_RECEIPTREQUEST                    158
+#  define CMS_F_CMS_ADD1_RECIPIENT_CERT                    101
+#  define CMS_F_CMS_ADD1_SIGNER                            102
+#  define CMS_F_CMS_ADD1_SIGNINGTIME                       103
+#  define CMS_F_CMS_COMPRESS                               104
+#  define CMS_F_CMS_COMPRESSEDDATA_CREATE                  105
+#  define CMS_F_CMS_COMPRESSEDDATA_INIT_BIO                106
+#  define CMS_F_CMS_COPY_CONTENT                           107
+#  define CMS_F_CMS_COPY_MESSAGEDIGEST                     108
+#  define CMS_F_CMS_DATA                                   109
+#  define CMS_F_CMS_DATAFINAL                              110
+#  define CMS_F_CMS_DATAINIT                               111
+#  define CMS_F_CMS_DECRYPT                                112
+#  define CMS_F_CMS_DECRYPT_SET1_KEY                       113
+#  define CMS_F_CMS_DECRYPT_SET1_PASSWORD                  166
+#  define CMS_F_CMS_DECRYPT_SET1_PKEY                      114
+#  define CMS_F_CMS_DIGESTALGORITHM_FIND_CTX               115
+#  define CMS_F_CMS_DIGESTALGORITHM_INIT_BIO               116
+#  define CMS_F_CMS_DIGESTEDDATA_DO_FINAL                  117
+#  define CMS_F_CMS_DIGEST_VERIFY                          118
+#  define CMS_F_CMS_ENCODE_RECEIPT                         161
+#  define CMS_F_CMS_ENCRYPT                                119
+#  define CMS_F_CMS_ENCRYPTEDCONTENT_INIT                  179
+#  define CMS_F_CMS_ENCRYPTEDCONTENT_INIT_BIO              120
+#  define CMS_F_CMS_ENCRYPTEDDATA_DECRYPT                  121
+#  define CMS_F_CMS_ENCRYPTEDDATA_ENCRYPT                  122
+#  define CMS_F_CMS_ENCRYPTEDDATA_SET1_KEY                 123
+#  define CMS_F_CMS_ENVELOPEDDATA_CREATE                   124
+#  define CMS_F_CMS_ENVELOPEDDATA_INIT_BIO                 125
+#  define CMS_F_CMS_ENVELOPED_DATA_INIT                    126
+#  define CMS_F_CMS_ENV_ASN1_CTRL                          171
+#  define CMS_F_CMS_FINAL                                  127
+#  define CMS_F_CMS_GET0_CERTIFICATE_CHOICES               128
+#  define CMS_F_CMS_GET0_CONTENT                           129
+#  define CMS_F_CMS_GET0_ECONTENT_TYPE                     130
+#  define CMS_F_CMS_GET0_ENVELOPED                         131
+#  define CMS_F_CMS_GET0_REVOCATION_CHOICES                132
+#  define CMS_F_CMS_GET0_SIGNED                            133
+#  define CMS_F_CMS_MSGSIGDIGEST_ADD1                      162
+#  define CMS_F_CMS_RECEIPTREQUEST_CREATE0                 159
+#  define CMS_F_CMS_RECEIPT_VERIFY                         160
+#  define CMS_F_CMS_RECIPIENTINFO_DECRYPT                  134
+#  define CMS_F_CMS_RECIPIENTINFO_ENCRYPT                  169
+#  define CMS_F_CMS_RECIPIENTINFO_KARI_ENCRYPT             178
+#  define CMS_F_CMS_RECIPIENTINFO_KARI_GET0_ALG            175
+#  define CMS_F_CMS_RECIPIENTINFO_KARI_GET0_ORIG_ID        173
+#  define CMS_F_CMS_RECIPIENTINFO_KARI_GET0_REKS           172
+#  define CMS_F_CMS_RECIPIENTINFO_KARI_ORIG_ID_CMP         174
+#  define CMS_F_CMS_RECIPIENTINFO_KEKRI_DECRYPT            135
+#  define CMS_F_CMS_RECIPIENTINFO_KEKRI_ENCRYPT            136
+#  define CMS_F_CMS_RECIPIENTINFO_KEKRI_GET0_ID            137
+#  define CMS_F_CMS_RECIPIENTINFO_KEKRI_ID_CMP             138
+#  define CMS_F_CMS_RECIPIENTINFO_KTRI_CERT_CMP            139
+#  define CMS_F_CMS_RECIPIENTINFO_KTRI_DECRYPT             140
+#  define CMS_F_CMS_RECIPIENTINFO_KTRI_ENCRYPT             141
+#  define CMS_F_CMS_RECIPIENTINFO_KTRI_GET0_ALGS           142
+#  define CMS_F_CMS_RECIPIENTINFO_KTRI_GET0_SIGNER_ID      143
+#  define CMS_F_CMS_RECIPIENTINFO_PWRI_CRYPT               167
+#  define CMS_F_CMS_RECIPIENTINFO_SET0_KEY                 144
+#  define CMS_F_CMS_RECIPIENTINFO_SET0_PASSWORD            168
+#  define CMS_F_CMS_RECIPIENTINFO_SET0_PKEY                145
+#  define CMS_F_CMS_SD_ASN1_CTRL                           170
+#  define CMS_F_CMS_SET1_IAS                               176
+#  define CMS_F_CMS_SET1_KEYID                             177
+#  define CMS_F_CMS_SET1_SIGNERIDENTIFIER                  146
+#  define CMS_F_CMS_SET_DETACHED                           147
+#  define CMS_F_CMS_SIGN                                   148
+#  define CMS_F_CMS_SIGNED_DATA_INIT                       149
+#  define CMS_F_CMS_SIGNERINFO_CONTENT_SIGN                150
+#  define CMS_F_CMS_SIGNERINFO_SIGN                        151
+#  define CMS_F_CMS_SIGNERINFO_VERIFY                      152
+#  define CMS_F_CMS_SIGNERINFO_VERIFY_CERT                 153
+#  define CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT              154
+#  define CMS_F_CMS_SIGN_RECEIPT                           163
+#  define CMS_F_CMS_STREAM                                 155
+#  define CMS_F_CMS_UNCOMPRESS                             156
+#  define CMS_F_CMS_VERIFY                                 157
+#  define CMS_F_KEK_UNWRAP_KEY                             180
+
+/*
+ * CMS reason codes.
+ */
+#  define CMS_R_ADD_SIGNER_ERROR                           99
+#  define CMS_R_CERTIFICATE_ALREADY_PRESENT                175
+#  define CMS_R_CERTIFICATE_HAS_NO_KEYID                   160
+#  define CMS_R_CERTIFICATE_VERIFY_ERROR                   100
+#  define CMS_R_CIPHER_INITIALISATION_ERROR                101
+#  define CMS_R_CIPHER_PARAMETER_INITIALISATION_ERROR      102
+#  define CMS_R_CMS_DATAFINAL_ERROR                        103
+#  define CMS_R_CMS_LIB                                    104
+#  define CMS_R_CONTENTIDENTIFIER_MISMATCH                 170
+#  define CMS_R_CONTENT_NOT_FOUND                          105
+#  define CMS_R_CONTENT_TYPE_MISMATCH                      171
+#  define CMS_R_CONTENT_TYPE_NOT_COMPRESSED_DATA           106
+#  define CMS_R_CONTENT_TYPE_NOT_ENVELOPED_DATA            107
+#  define CMS_R_CONTENT_TYPE_NOT_SIGNED_DATA               108
+#  define CMS_R_CONTENT_VERIFY_ERROR                       109
+#  define CMS_R_CTRL_ERROR                                 110
+#  define CMS_R_CTRL_FAILURE                               111
+#  define CMS_R_DECRYPT_ERROR                              112
+#  define CMS_R_ERROR_GETTING_PUBLIC_KEY                   113
+#  define CMS_R_ERROR_READING_MESSAGEDIGEST_ATTRIBUTE      114
+#  define CMS_R_ERROR_SETTING_KEY                          115
+#  define CMS_R_ERROR_SETTING_RECIPIENTINFO                116
+#  define CMS_R_INVALID_ENCRYPTED_KEY_LENGTH               117
+#  define CMS_R_INVALID_KEY_ENCRYPTION_PARAMETER           176
+#  define CMS_R_INVALID_KEY_LENGTH                         118
+#  define CMS_R_MD_BIO_INIT_ERROR                          119
+#  define CMS_R_MESSAGEDIGEST_ATTRIBUTE_WRONG_LENGTH       120
+#  define CMS_R_MESSAGEDIGEST_WRONG_LENGTH                 121
+#  define CMS_R_MSGSIGDIGEST_ERROR                         172
+#  define CMS_R_MSGSIGDIGEST_VERIFICATION_FAILURE          162
+#  define CMS_R_MSGSIGDIGEST_WRONG_LENGTH                  163
+#  define CMS_R_NEED_ONE_SIGNER                            164
+#  define CMS_R_NOT_A_SIGNED_RECEIPT                       165
+#  define CMS_R_NOT_ENCRYPTED_DATA                         122
+#  define CMS_R_NOT_KEK                                    123
+#  define CMS_R_NOT_KEY_AGREEMENT                          181
+#  define CMS_R_NOT_KEY_TRANSPORT                          124
+#  define CMS_R_NOT_PWRI                                   177
+#  define CMS_R_NOT_SUPPORTED_FOR_THIS_KEY_TYPE            125
+#  define CMS_R_NO_CIPHER                                  126
+#  define CMS_R_NO_CONTENT                                 127
+#  define CMS_R_NO_CONTENT_TYPE                            173
+#  define CMS_R_NO_DEFAULT_DIGEST                          128
+#  define CMS_R_NO_DIGEST_SET                              129
+#  define CMS_R_NO_KEY                                     130
+#  define CMS_R_NO_KEY_OR_CERT                             174
+#  define CMS_R_NO_MATCHING_DIGEST                         131
+#  define CMS_R_NO_MATCHING_RECIPIENT                      132
+#  define CMS_R_NO_MATCHING_SIGNATURE                      166
+#  define CMS_R_NO_MSGSIGDIGEST                            167
+#  define CMS_R_NO_PASSWORD                                178
+#  define CMS_R_NO_PRIVATE_KEY                             133
+#  define CMS_R_NO_PUBLIC_KEY                              134
+#  define CMS_R_NO_RECEIPT_REQUEST                         168
+#  define CMS_R_NO_SIGNERS                                 135
+#  define CMS_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE     136
+#  define CMS_R_RECEIPT_DECODE_ERROR                       169
+#  define CMS_R_RECIPIENT_ERROR                            137
+#  define CMS_R_SIGNER_CERTIFICATE_NOT_FOUND               138
+#  define CMS_R_SIGNFINAL_ERROR                            139
+#  define CMS_R_SMIME_TEXT_ERROR                           140
+#  define CMS_R_STORE_INIT_ERROR                           141
+#  define CMS_R_TYPE_NOT_COMPRESSED_DATA                   142
+#  define CMS_R_TYPE_NOT_DATA                              143
+#  define CMS_R_TYPE_NOT_DIGESTED_DATA                     144
+#  define CMS_R_TYPE_NOT_ENCRYPTED_DATA                    145
+#  define CMS_R_TYPE_NOT_ENVELOPED_DATA                    146
+#  define CMS_R_UNABLE_TO_FINALIZE_CONTEXT                 147
+#  define CMS_R_UNKNOWN_CIPHER                             148
+#  define CMS_R_UNKNOWN_DIGEST_ALGORITHM                   149
+#  define CMS_R_UNKNOWN_ID                                 150
+#  define CMS_R_UNSUPPORTED_COMPRESSION_ALGORITHM          151
+#  define CMS_R_UNSUPPORTED_CONTENT_TYPE                   152
+#  define CMS_R_UNSUPPORTED_KEK_ALGORITHM                  153
+#  define CMS_R_UNSUPPORTED_KEY_ENCRYPTION_ALGORITHM       179
+#  define CMS_R_UNSUPPORTED_RECIPIENTINFO_TYPE             155
+#  define CMS_R_UNSUPPORTED_RECIPIENT_TYPE                 154
+#  define CMS_R_UNSUPPORTED_TYPE                           156
+#  define CMS_R_UNWRAP_ERROR                               157
+#  define CMS_R_UNWRAP_FAILURE                             180
+#  define CMS_R_VERIFICATION_FAILURE                       158
+#  define CMS_R_WRAP_ERROR                                 159
+
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/comp.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/comp.h
new file mode 100644
index 000000000..d814d3cf2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/comp.h
@@ -0,0 +1,53 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_COMP_H
+# define HEADER_COMP_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_COMP
+# include <openssl/crypto.h>
+# include <openssl/comperr.h>
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+
+
+COMP_CTX *COMP_CTX_new(COMP_METHOD *meth);
+const COMP_METHOD *COMP_CTX_get_method(const COMP_CTX *ctx);
+int COMP_CTX_get_type(const COMP_CTX* comp);
+int COMP_get_type(const COMP_METHOD *meth);
+const char *COMP_get_name(const COMP_METHOD *meth);
+void COMP_CTX_free(COMP_CTX *ctx);
+
+int COMP_compress_block(COMP_CTX *ctx, unsigned char *out, int olen,
+                        unsigned char *in, int ilen);
+int COMP_expand_block(COMP_CTX *ctx, unsigned char *out, int olen,
+                      unsigned char *in, int ilen);
+
+COMP_METHOD *COMP_zlib(void);
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+#define COMP_zlib_cleanup() while(0) continue
+#endif
+
+# ifdef HEADER_BIO_H
+#  ifdef ZLIB
+const BIO_METHOD *BIO_f_zlib(void);
+#  endif
+# endif
+
+
+#  ifdef  __cplusplus
+}
+#  endif
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/comperr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/comperr.h
new file mode 100644
index 000000000..edea63a68
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/comperr.h
@@ -0,0 +1,40 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_COMPERR_H
+# define HEADER_COMPERR_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_COMP
+
+#  ifdef  __cplusplus
+extern "C"
+#  endif
+int ERR_load_COMP_strings(void);
+
+/*
+ * COMP function codes.
+ */
+#  define COMP_F_BIO_ZLIB_FLUSH                            99
+#  define COMP_F_BIO_ZLIB_NEW                              100
+#  define COMP_F_BIO_ZLIB_READ                             101
+#  define COMP_F_BIO_ZLIB_WRITE                            102
+#  define COMP_F_COMP_CTX_NEW                              103
+
+/*
+ * COMP reason codes.
+ */
+#  define COMP_R_ZLIB_DEFLATE_ERROR                        99
+#  define COMP_R_ZLIB_INFLATE_ERROR                        100
+#  define COMP_R_ZLIB_NOT_SUPPORTED                        101
+
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/conf.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/conf.h
new file mode 100644
index 000000000..7336cd2f1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/conf.h
@@ -0,0 +1,168 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef  HEADER_CONF_H
+# define HEADER_CONF_H
+
+# include <openssl/bio.h>
+# include <openssl/lhash.h>
+# include <openssl/safestack.h>
+# include <openssl/e_os2.h>
+# include <openssl/ossl_typ.h>
+# include <openssl/conferr.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+typedef struct {
+    char *section;
+    char *name;
+    char *value;
+} CONF_VALUE;
+
+DEFINE_STACK_OF(CONF_VALUE)
+DEFINE_LHASH_OF(CONF_VALUE);
+
+struct conf_st;
+struct conf_method_st;
+typedef struct conf_method_st CONF_METHOD;
+
+struct conf_method_st {
+    const char *name;
+    CONF *(*create) (CONF_METHOD *meth);
+    int (*init) (CONF *conf);
+    int (*destroy) (CONF *conf);
+    int (*destroy_data) (CONF *conf);
+    int (*load_bio) (CONF *conf, BIO *bp, long *eline);
+    int (*dump) (const CONF *conf, BIO *bp);
+    int (*is_number) (const CONF *conf, char c);
+    int (*to_int) (const CONF *conf, char c);
+    int (*load) (CONF *conf, const char *name, long *eline);
+};
+
+/* Module definitions */
+
+typedef struct conf_imodule_st CONF_IMODULE;
+typedef struct conf_module_st CONF_MODULE;
+
+DEFINE_STACK_OF(CONF_MODULE)
+DEFINE_STACK_OF(CONF_IMODULE)
+
+/* DSO module function typedefs */
+typedef int conf_init_func (CONF_IMODULE *md, const CONF *cnf);
+typedef void conf_finish_func (CONF_IMODULE *md);
+
+# define CONF_MFLAGS_IGNORE_ERRORS       0x1
+# define CONF_MFLAGS_IGNORE_RETURN_CODES 0x2
+# define CONF_MFLAGS_SILENT              0x4
+# define CONF_MFLAGS_NO_DSO              0x8
+# define CONF_MFLAGS_IGNORE_MISSING_FILE 0x10
+# define CONF_MFLAGS_DEFAULT_SECTION     0x20
+
+int CONF_set_default_method(CONF_METHOD *meth);
+void CONF_set_nconf(CONF *conf, LHASH_OF(CONF_VALUE) *hash);
+LHASH_OF(CONF_VALUE) *CONF_load(LHASH_OF(CONF_VALUE) *conf, const char *file,
+                                long *eline);
+# ifndef OPENSSL_NO_STDIO
+LHASH_OF(CONF_VALUE) *CONF_load_fp(LHASH_OF(CONF_VALUE) *conf, FILE *fp,
+                                   long *eline);
+# endif
+LHASH_OF(CONF_VALUE) *CONF_load_bio(LHASH_OF(CONF_VALUE) *conf, BIO *bp,
+                                    long *eline);
+STACK_OF(CONF_VALUE) *CONF_get_section(LHASH_OF(CONF_VALUE) *conf,
+                                       const char *section);
+char *CONF_get_string(LHASH_OF(CONF_VALUE) *conf, const char *group,
+                      const char *name);
+long CONF_get_number(LHASH_OF(CONF_VALUE) *conf, const char *group,
+                     const char *name);
+void CONF_free(LHASH_OF(CONF_VALUE) *conf);
+#ifndef OPENSSL_NO_STDIO
+int CONF_dump_fp(LHASH_OF(CONF_VALUE) *conf, FILE *out);
+#endif
+int CONF_dump_bio(LHASH_OF(CONF_VALUE) *conf, BIO *out);
+
+DEPRECATEDIN_1_1_0(void OPENSSL_config(const char *config_name))
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+# define OPENSSL_no_config() \
+    OPENSSL_init_crypto(OPENSSL_INIT_NO_LOAD_CONFIG, NULL)
+#endif
+
+/*
+ * New conf code.  The semantics are different from the functions above. If
+ * that wasn't the case, the above functions would have been replaced
+ */
+
+struct conf_st {
+    CONF_METHOD *meth;
+    void *meth_data;
+    LHASH_OF(CONF_VALUE) *data;
+};
+
+CONF *NCONF_new(CONF_METHOD *meth);
+CONF_METHOD *NCONF_default(void);
+CONF_METHOD *NCONF_WIN32(void);
+void NCONF_free(CONF *conf);
+void NCONF_free_data(CONF *conf);
+
+int NCONF_load(CONF *conf, const char *file, long *eline);
+# ifndef OPENSSL_NO_STDIO
+int NCONF_load_fp(CONF *conf, FILE *fp, long *eline);
+# endif
+int NCONF_load_bio(CONF *conf, BIO *bp, long *eline);
+STACK_OF(CONF_VALUE) *NCONF_get_section(const CONF *conf,
+                                        const char *section);
+char *NCONF_get_string(const CONF *conf, const char *group, const char *name);
+int NCONF_get_number_e(const CONF *conf, const char *group, const char *name,
+                       long *result);
+#ifndef OPENSSL_NO_STDIO
+int NCONF_dump_fp(const CONF *conf, FILE *out);
+#endif
+int NCONF_dump_bio(const CONF *conf, BIO *out);
+
+#define NCONF_get_number(c,g,n,r) NCONF_get_number_e(c,g,n,r)
+
+/* Module functions */
+
+int CONF_modules_load(const CONF *cnf, const char *appname,
+                      unsigned long flags);
+int CONF_modules_load_file(const char *filename, const char *appname,
+                           unsigned long flags);
+void CONF_modules_unload(int all);
+void CONF_modules_finish(void);
+#if OPENSSL_API_COMPAT < 0x10100000L
+# define CONF_modules_free() while(0) continue
+#endif
+int CONF_module_add(const char *name, conf_init_func *ifunc,
+                    conf_finish_func *ffunc);
+
+const char *CONF_imodule_get_name(const CONF_IMODULE *md);
+const char *CONF_imodule_get_value(const CONF_IMODULE *md);
+void *CONF_imodule_get_usr_data(const CONF_IMODULE *md);
+void CONF_imodule_set_usr_data(CONF_IMODULE *md, void *usr_data);
+CONF_MODULE *CONF_imodule_get_module(const CONF_IMODULE *md);
+unsigned long CONF_imodule_get_flags(const CONF_IMODULE *md);
+void CONF_imodule_set_flags(CONF_IMODULE *md, unsigned long flags);
+void *CONF_module_get_usr_data(CONF_MODULE *pmod);
+void CONF_module_set_usr_data(CONF_MODULE *pmod, void *usr_data);
+
+char *CONF_get1_default_config_file(void);
+
+int CONF_parse_list(const char *list, int sep, int nospc,
+                    int (*list_cb) (const char *elem, int len, void *usr),
+                    void *arg);
+
+void OPENSSL_load_builtin_modules(void);
+
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/conf_api.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/conf_api.h
new file mode 100644
index 000000000..a0275ad79
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/conf_api.h
@@ -0,0 +1,40 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef  HEADER_CONF_API_H
+# define HEADER_CONF_API_H
+
+# include <openssl/lhash.h>
+# include <openssl/conf.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+/* Up until OpenSSL 0.9.5a, this was new_section */
+CONF_VALUE *_CONF_new_section(CONF *conf, const char *section);
+/* Up until OpenSSL 0.9.5a, this was get_section */
+CONF_VALUE *_CONF_get_section(const CONF *conf, const char *section);
+/* Up until OpenSSL 0.9.5a, this was CONF_get_section */
+STACK_OF(CONF_VALUE) *_CONF_get_section_values(const CONF *conf,
+                                               const char *section);
+
+int _CONF_add_string(CONF *conf, CONF_VALUE *section, CONF_VALUE *value);
+char *_CONF_get_string(const CONF *conf, const char *section,
+                       const char *name);
+long _CONF_get_number(const CONF *conf, const char *section,
+                      const char *name);
+
+int _CONF_new_data(CONF *conf);
+void _CONF_free_data(CONF *conf);
+
+#ifdef  __cplusplus
+}
+#endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/conferr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/conferr.h
new file mode 100644
index 000000000..d1c92f45d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/conferr.h
@@ -0,0 +1,72 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_CONFERR_H
+# define HEADER_CONFERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_CONF_strings(void);
+
+/*
+ * CONF function codes.
+ */
+# define CONF_F_CONF_DUMP_FP                              104
+# define CONF_F_CONF_LOAD                                 100
+# define CONF_F_CONF_LOAD_FP                              103
+# define CONF_F_CONF_PARSE_LIST                           119
+# define CONF_F_DEF_LOAD                                  120
+# define CONF_F_DEF_LOAD_BIO                              121
+# define CONF_F_GET_NEXT_FILE                             107
+# define CONF_F_MODULE_ADD                                122
+# define CONF_F_MODULE_INIT                               115
+# define CONF_F_MODULE_LOAD_DSO                           117
+# define CONF_F_MODULE_RUN                                118
+# define CONF_F_NCONF_DUMP_BIO                            105
+# define CONF_F_NCONF_DUMP_FP                             106
+# define CONF_F_NCONF_GET_NUMBER_E                        112
+# define CONF_F_NCONF_GET_SECTION                         108
+# define CONF_F_NCONF_GET_STRING                          109
+# define CONF_F_NCONF_LOAD                                113
+# define CONF_F_NCONF_LOAD_BIO                            110
+# define CONF_F_NCONF_LOAD_FP                             114
+# define CONF_F_NCONF_NEW                                 111
+# define CONF_F_PROCESS_INCLUDE                           116
+# define CONF_F_SSL_MODULE_INIT                           123
+# define CONF_F_STR_COPY                                  101
+
+/*
+ * CONF reason codes.
+ */
+# define CONF_R_ERROR_LOADING_DSO                         110
+# define CONF_R_LIST_CANNOT_BE_NULL                       115
+# define CONF_R_MISSING_CLOSE_SQUARE_BRACKET              100
+# define CONF_R_MISSING_EQUAL_SIGN                        101
+# define CONF_R_MISSING_INIT_FUNCTION                     112
+# define CONF_R_MODULE_INITIALIZATION_ERROR               109
+# define CONF_R_NO_CLOSE_BRACE                            102
+# define CONF_R_NO_CONF                                   105
+# define CONF_R_NO_CONF_OR_ENVIRONMENT_VARIABLE           106
+# define CONF_R_NO_SECTION                                107
+# define CONF_R_NO_SUCH_FILE                              114
+# define CONF_R_NO_VALUE                                  108
+# define CONF_R_NUMBER_TOO_LARGE                          121
+# define CONF_R_RECURSIVE_DIRECTORY_INCLUDE               111
+# define CONF_R_SSL_COMMAND_SECTION_EMPTY                 117
+# define CONF_R_SSL_COMMAND_SECTION_NOT_FOUND             118
+# define CONF_R_SSL_SECTION_EMPTY                         119
+# define CONF_R_SSL_SECTION_NOT_FOUND                     120
+# define CONF_R_UNABLE_TO_CREATE_NEW_SECTION              103
+# define CONF_R_UNKNOWN_MODULE_NAME                       113
+# define CONF_R_VARIABLE_EXPANSION_TOO_LONG               116
+# define CONF_R_VARIABLE_HAS_NO_VALUE                     104
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/crypto.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/crypto.h
new file mode 100644
index 000000000..7d0b52623
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/crypto.h
@@ -0,0 +1,445 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_CRYPTO_H
+# define HEADER_CRYPTO_H
+
+# include <stdlib.h>
+# include <time.h>
+
+# include <openssl/e_os2.h>
+
+# ifndef OPENSSL_NO_STDIO
+#  include <stdio.h>
+# endif
+
+# include <openssl/safestack.h>
+# include <openssl/opensslv.h>
+# include <openssl/ossl_typ.h>
+# include <openssl/opensslconf.h>
+# include <openssl/cryptoerr.h>
+
+# ifdef CHARSET_EBCDIC
+#  include <openssl/ebcdic.h>
+# endif
+
+/*
+ * Resolve problems on some operating systems with symbol names that clash
+ * one way or another
+ */
+# include <openssl/symhacks.h>
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  include <openssl/opensslv.h>
+# endif
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define SSLeay                  OpenSSL_version_num
+#  define SSLeay_version          OpenSSL_version
+#  define SSLEAY_VERSION_NUMBER   OPENSSL_VERSION_NUMBER
+#  define SSLEAY_VERSION          OPENSSL_VERSION
+#  define SSLEAY_CFLAGS           OPENSSL_CFLAGS
+#  define SSLEAY_BUILT_ON         OPENSSL_BUILT_ON
+#  define SSLEAY_PLATFORM         OPENSSL_PLATFORM
+#  define SSLEAY_DIR              OPENSSL_DIR
+
+/*
+ * Old type for allocating dynamic locks. No longer used. Use the new thread
+ * API instead.
+ */
+typedef struct {
+    int dummy;
+} CRYPTO_dynlock;
+
+# endif /* OPENSSL_API_COMPAT */
+
+typedef void CRYPTO_RWLOCK;
+
+CRYPTO_RWLOCK *CRYPTO_THREAD_lock_new(void);
+int CRYPTO_THREAD_read_lock(CRYPTO_RWLOCK *lock);
+int CRYPTO_THREAD_write_lock(CRYPTO_RWLOCK *lock);
+int CRYPTO_THREAD_unlock(CRYPTO_RWLOCK *lock);
+void CRYPTO_THREAD_lock_free(CRYPTO_RWLOCK *lock);
+
+int CRYPTO_atomic_add(int *val, int amount, int *ret, CRYPTO_RWLOCK *lock);
+
+/*
+ * The following can be used to detect memory leaks in the library. If
+ * used, it turns on malloc checking
+ */
+# define CRYPTO_MEM_CHECK_OFF     0x0   /* Control only */
+# define CRYPTO_MEM_CHECK_ON      0x1   /* Control and mode bit */
+# define CRYPTO_MEM_CHECK_ENABLE  0x2   /* Control and mode bit */
+# define CRYPTO_MEM_CHECK_DISABLE 0x3   /* Control only */
+
+struct crypto_ex_data_st {
+    STACK_OF(void) *sk;
+};
+DEFINE_STACK_OF(void)
+
+/*
+ * Per class, we have a STACK of function pointers.
+ */
+# define CRYPTO_EX_INDEX_SSL              0
+# define CRYPTO_EX_INDEX_SSL_CTX          1
+# define CRYPTO_EX_INDEX_SSL_SESSION      2
+# define CRYPTO_EX_INDEX_X509             3
+# define CRYPTO_EX_INDEX_X509_STORE       4
+# define CRYPTO_EX_INDEX_X509_STORE_CTX   5
+# define CRYPTO_EX_INDEX_DH               6
+# define CRYPTO_EX_INDEX_DSA              7
+# define CRYPTO_EX_INDEX_EC_KEY           8
+# define CRYPTO_EX_INDEX_RSA              9
+# define CRYPTO_EX_INDEX_ENGINE          10
+# define CRYPTO_EX_INDEX_UI              11
+# define CRYPTO_EX_INDEX_BIO             12
+# define CRYPTO_EX_INDEX_APP             13
+# define CRYPTO_EX_INDEX_UI_METHOD       14
+# define CRYPTO_EX_INDEX_DRBG            15
+# define CRYPTO_EX_INDEX__COUNT          16
+
+/* No longer needed, so this is a no-op */
+#define OPENSSL_malloc_init() while(0) continue
+
+int CRYPTO_mem_ctrl(int mode);
+
+# define OPENSSL_malloc(num) \
+        CRYPTO_malloc(num, OPENSSL_FILE, OPENSSL_LINE)
+# define OPENSSL_zalloc(num) \
+        CRYPTO_zalloc(num, OPENSSL_FILE, OPENSSL_LINE)
+# define OPENSSL_realloc(addr, num) \
+        CRYPTO_realloc(addr, num, OPENSSL_FILE, OPENSSL_LINE)
+# define OPENSSL_clear_realloc(addr, old_num, num) \
+        CRYPTO_clear_realloc(addr, old_num, num, OPENSSL_FILE, OPENSSL_LINE)
+# define OPENSSL_clear_free(addr, num) \
+        CRYPTO_clear_free(addr, num, OPENSSL_FILE, OPENSSL_LINE)
+# define OPENSSL_free(addr) \
+        CRYPTO_free(addr, OPENSSL_FILE, OPENSSL_LINE)
+# define OPENSSL_memdup(str, s) \
+        CRYPTO_memdup((str), s, OPENSSL_FILE, OPENSSL_LINE)
+# define OPENSSL_strdup(str) \
+        CRYPTO_strdup(str, OPENSSL_FILE, OPENSSL_LINE)
+# define OPENSSL_strndup(str, n) \
+        CRYPTO_strndup(str, n, OPENSSL_FILE, OPENSSL_LINE)
+# define OPENSSL_secure_malloc(num) \
+        CRYPTO_secure_malloc(num, OPENSSL_FILE, OPENSSL_LINE)
+# define OPENSSL_secure_zalloc(num) \
+        CRYPTO_secure_zalloc(num, OPENSSL_FILE, OPENSSL_LINE)
+# define OPENSSL_secure_free(addr) \
+        CRYPTO_secure_free(addr, OPENSSL_FILE, OPENSSL_LINE)
+# define OPENSSL_secure_clear_free(addr, num) \
+        CRYPTO_secure_clear_free(addr, num, OPENSSL_FILE, OPENSSL_LINE)
+# define OPENSSL_secure_actual_size(ptr) \
+        CRYPTO_secure_actual_size(ptr)
+
+size_t OPENSSL_strlcpy(char *dst, const char *src, size_t siz);
+size_t OPENSSL_strlcat(char *dst, const char *src, size_t siz);
+size_t OPENSSL_strnlen(const char *str, size_t maxlen);
+char *OPENSSL_buf2hexstr(const unsigned char *buffer, long len);
+unsigned char *OPENSSL_hexstr2buf(const char *str, long *len);
+int OPENSSL_hexchar2int(unsigned char c);
+
+# define OPENSSL_MALLOC_MAX_NELEMS(type)  (((1U<<(sizeof(int)*8-1))-1)/sizeof(type))
+
+unsigned long OpenSSL_version_num(void);
+const char *OpenSSL_version(int type);
+# define OPENSSL_VERSION          0
+# define OPENSSL_CFLAGS           1
+# define OPENSSL_BUILT_ON         2
+# define OPENSSL_PLATFORM         3
+# define OPENSSL_DIR              4
+# define OPENSSL_ENGINES_DIR      5
+
+int OPENSSL_issetugid(void);
+
+typedef void CRYPTO_EX_new (void *parent, void *ptr, CRYPTO_EX_DATA *ad,
+                           int idx, long argl, void *argp);
+typedef void CRYPTO_EX_free (void *parent, void *ptr, CRYPTO_EX_DATA *ad,
+                             int idx, long argl, void *argp);
+typedef int CRYPTO_EX_dup (CRYPTO_EX_DATA *to, const CRYPTO_EX_DATA *from,
+                           void *from_d, int idx, long argl, void *argp);
+__owur int CRYPTO_get_ex_new_index(int class_index, long argl, void *argp,
+                            CRYPTO_EX_new *new_func, CRYPTO_EX_dup *dup_func,
+                            CRYPTO_EX_free *free_func);
+/* No longer use an index. */
+int CRYPTO_free_ex_index(int class_index, int idx);
+
+/*
+ * Initialise/duplicate/free CRYPTO_EX_DATA variables corresponding to a
+ * given class (invokes whatever per-class callbacks are applicable)
+ */
+int CRYPTO_new_ex_data(int class_index, void *obj, CRYPTO_EX_DATA *ad);
+int CRYPTO_dup_ex_data(int class_index, CRYPTO_EX_DATA *to,
+                       const CRYPTO_EX_DATA *from);
+
+void CRYPTO_free_ex_data(int class_index, void *obj, CRYPTO_EX_DATA *ad);
+
+/*
+ * Get/set data in a CRYPTO_EX_DATA variable corresponding to a particular
+ * index (relative to the class type involved)
+ */
+int CRYPTO_set_ex_data(CRYPTO_EX_DATA *ad, int idx, void *val);
+void *CRYPTO_get_ex_data(const CRYPTO_EX_DATA *ad, int idx);
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+/*
+ * This function cleans up all "ex_data" state. It mustn't be called under
+ * potential race-conditions.
+ */
+# define CRYPTO_cleanup_all_ex_data() while(0) continue
+
+/*
+ * The old locking functions have been removed completely without compatibility
+ * macros. This is because the old functions either could not properly report
+ * errors, or the returned error values were not clearly documented.
+ * Replacing the locking functions with no-ops would cause race condition
+ * issues in the affected applications. It is far better for them to fail at
+ * compile time.
+ * On the other hand, the locking callbacks are no longer used.  Consequently,
+ * the callback management functions can be safely replaced with no-op macros.
+ */
+#  define CRYPTO_num_locks()            (1)
+#  define CRYPTO_set_locking_callback(func)
+#  define CRYPTO_get_locking_callback()         (NULL)
+#  define CRYPTO_set_add_lock_callback(func)
+#  define CRYPTO_get_add_lock_callback()        (NULL)
+
+/*
+ * These defines where used in combination with the old locking callbacks,
+ * they are not called anymore, but old code that's not called might still
+ * use them.
+ */
+#  define CRYPTO_LOCK             1
+#  define CRYPTO_UNLOCK           2
+#  define CRYPTO_READ             4
+#  define CRYPTO_WRITE            8
+
+/* This structure is no longer used */
+typedef struct crypto_threadid_st {
+    int dummy;
+} CRYPTO_THREADID;
+/* Only use CRYPTO_THREADID_set_[numeric|pointer]() within callbacks */
+#  define CRYPTO_THREADID_set_numeric(id, val)
+#  define CRYPTO_THREADID_set_pointer(id, ptr)
+#  define CRYPTO_THREADID_set_callback(threadid_func)   (0)
+#  define CRYPTO_THREADID_get_callback()                (NULL)
+#  define CRYPTO_THREADID_current(id)
+#  define CRYPTO_THREADID_cmp(a, b)                     (-1)
+#  define CRYPTO_THREADID_cpy(dest, src)
+#  define CRYPTO_THREADID_hash(id)                      (0UL)
+
+#  if OPENSSL_API_COMPAT < 0x10000000L
+#   define CRYPTO_set_id_callback(func)
+#   define CRYPTO_get_id_callback()                     (NULL)
+#   define CRYPTO_thread_id()                           (0UL)
+#  endif /* OPENSSL_API_COMPAT < 0x10000000L */
+
+#  define CRYPTO_set_dynlock_create_callback(dyn_create_function)
+#  define CRYPTO_set_dynlock_lock_callback(dyn_lock_function)
+#  define CRYPTO_set_dynlock_destroy_callback(dyn_destroy_function)
+#  define CRYPTO_get_dynlock_create_callback()          (NULL)
+#  define CRYPTO_get_dynlock_lock_callback()            (NULL)
+#  define CRYPTO_get_dynlock_destroy_callback()         (NULL)
+# endif /* OPENSSL_API_COMPAT < 0x10100000L */
+
+int CRYPTO_set_mem_functions(
+        void *(*m) (size_t, const char *, int),
+        void *(*r) (void *, size_t, const char *, int),
+        void (*f) (void *, const char *, int));
+int CRYPTO_set_mem_debug(int flag);
+void CRYPTO_get_mem_functions(
+        void *(**m) (size_t, const char *, int),
+        void *(**r) (void *, size_t, const char *, int),
+        void (**f) (void *, const char *, int));
+
+void *CRYPTO_malloc(size_t num, const char *file, int line);
+void *CRYPTO_zalloc(size_t num, const char *file, int line);
+void *CRYPTO_memdup(const void *str, size_t siz, const char *file, int line);
+char *CRYPTO_strdup(const char *str, const char *file, int line);
+char *CRYPTO_strndup(const char *str, size_t s, const char *file, int line);
+void CRYPTO_free(void *ptr, const char *file, int line);
+void CRYPTO_clear_free(void *ptr, size_t num, const char *file, int line);
+void *CRYPTO_realloc(void *addr, size_t num, const char *file, int line);
+void *CRYPTO_clear_realloc(void *addr, size_t old_num, size_t num,
+                           const char *file, int line);
+
+int CRYPTO_secure_malloc_init(size_t sz, int minsize);
+int CRYPTO_secure_malloc_done(void);
+void *CRYPTO_secure_malloc(size_t num, const char *file, int line);
+void *CRYPTO_secure_zalloc(size_t num, const char *file, int line);
+void CRYPTO_secure_free(void *ptr, const char *file, int line);
+void CRYPTO_secure_clear_free(void *ptr, size_t num,
+                              const char *file, int line);
+int CRYPTO_secure_allocated(const void *ptr);
+int CRYPTO_secure_malloc_initialized(void);
+size_t CRYPTO_secure_actual_size(void *ptr);
+size_t CRYPTO_secure_used(void);
+
+void OPENSSL_cleanse(void *ptr, size_t len);
+
+# ifndef OPENSSL_NO_CRYPTO_MDEBUG
+#  define OPENSSL_mem_debug_push(info) \
+        CRYPTO_mem_debug_push(info, OPENSSL_FILE, OPENSSL_LINE)
+#  define OPENSSL_mem_debug_pop() \
+        CRYPTO_mem_debug_pop()
+int CRYPTO_mem_debug_push(const char *info, const char *file, int line);
+int CRYPTO_mem_debug_pop(void);
+void CRYPTO_get_alloc_counts(int *mcount, int *rcount, int *fcount);
+
+/*-
+ * Debugging functions (enabled by CRYPTO_set_mem_debug(1))
+ * The flag argument has the following significance:
+ *   0:   called before the actual memory allocation has taken place
+ *   1:   called after the actual memory allocation has taken place
+ */
+void CRYPTO_mem_debug_malloc(void *addr, size_t num, int flag,
+        const char *file, int line);
+void CRYPTO_mem_debug_realloc(void *addr1, void *addr2, size_t num, int flag,
+        const char *file, int line);
+void CRYPTO_mem_debug_free(void *addr, int flag,
+        const char *file, int line);
+
+int CRYPTO_mem_leaks_cb(int (*cb) (const char *str, size_t len, void *u),
+                        void *u);
+#  ifndef OPENSSL_NO_STDIO
+int CRYPTO_mem_leaks_fp(FILE *);
+#  endif
+int CRYPTO_mem_leaks(BIO *bio);
+# endif
+
+/* die if we have to */
+ossl_noreturn void OPENSSL_die(const char *assertion, const char *file, int line);
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define OpenSSLDie(f,l,a) OPENSSL_die((a),(f),(l))
+# endif
+# define OPENSSL_assert(e) \
+    (void)((e) ? 0 : (OPENSSL_die("assertion failed: " #e, OPENSSL_FILE, OPENSSL_LINE), 1))
+
+int OPENSSL_isservice(void);
+
+int FIPS_mode(void);
+int FIPS_mode_set(int r);
+
+void OPENSSL_init(void);
+# ifdef OPENSSL_SYS_UNIX
+void OPENSSL_fork_prepare(void);
+void OPENSSL_fork_parent(void);
+void OPENSSL_fork_child(void);
+# endif
+
+struct tm *OPENSSL_gmtime(const time_t *timer, struct tm *result);
+int OPENSSL_gmtime_adj(struct tm *tm, int offset_day, long offset_sec);
+int OPENSSL_gmtime_diff(int *pday, int *psec,
+                        const struct tm *from, const struct tm *to);
+
+/*
+ * CRYPTO_memcmp returns zero iff the |len| bytes at |a| and |b| are equal.
+ * It takes an amount of time dependent on |len|, but independent of the
+ * contents of |a| and |b|. Unlike memcmp, it cannot be used to put elements
+ * into a defined order as the return value when a != b is undefined, other
+ * than to be non-zero.
+ */
+int CRYPTO_memcmp(const void * in_a, const void * in_b, size_t len);
+
+/* Standard initialisation options */
+# define OPENSSL_INIT_NO_LOAD_CRYPTO_STRINGS 0x00000001L
+# define OPENSSL_INIT_LOAD_CRYPTO_STRINGS    0x00000002L
+# define OPENSSL_INIT_ADD_ALL_CIPHERS        0x00000004L
+# define OPENSSL_INIT_ADD_ALL_DIGESTS        0x00000008L
+# define OPENSSL_INIT_NO_ADD_ALL_CIPHERS     0x00000010L
+# define OPENSSL_INIT_NO_ADD_ALL_DIGESTS     0x00000020L
+# define OPENSSL_INIT_LOAD_CONFIG            0x00000040L
+# define OPENSSL_INIT_NO_LOAD_CONFIG         0x00000080L
+# define OPENSSL_INIT_ASYNC                  0x00000100L
+# define OPENSSL_INIT_ENGINE_RDRAND          0x00000200L
+# define OPENSSL_INIT_ENGINE_DYNAMIC         0x00000400L
+# define OPENSSL_INIT_ENGINE_OPENSSL         0x00000800L
+# define OPENSSL_INIT_ENGINE_CRYPTODEV       0x00001000L
+# define OPENSSL_INIT_ENGINE_CAPI            0x00002000L
+# define OPENSSL_INIT_ENGINE_PADLOCK         0x00004000L
+# define OPENSSL_INIT_ENGINE_AFALG           0x00008000L
+/* OPENSSL_INIT_ZLIB                         0x00010000L */
+# define OPENSSL_INIT_ATFORK                 0x00020000L
+/* OPENSSL_INIT_BASE_ONLY                    0x00040000L */
+# define OPENSSL_INIT_NO_ATEXIT              0x00080000L
+/* OPENSSL_INIT flag range 0xfff00000 reserved for OPENSSL_init_ssl() */
+/* Max OPENSSL_INIT flag value is 0x80000000 */
+
+/* openssl and dasync not counted as builtin */
+# define OPENSSL_INIT_ENGINE_ALL_BUILTIN \
+    (OPENSSL_INIT_ENGINE_RDRAND | OPENSSL_INIT_ENGINE_DYNAMIC \
+    | OPENSSL_INIT_ENGINE_CRYPTODEV | OPENSSL_INIT_ENGINE_CAPI | \
+    OPENSSL_INIT_ENGINE_PADLOCK)
+
+
+/* Library initialisation functions */
+void OPENSSL_cleanup(void);
+int OPENSSL_init_crypto(uint64_t opts, const OPENSSL_INIT_SETTINGS *settings);
+int OPENSSL_atexit(void (*handler)(void));
+void OPENSSL_thread_stop(void);
+
+/* Low-level control of initialization */
+OPENSSL_INIT_SETTINGS *OPENSSL_INIT_new(void);
+# ifndef OPENSSL_NO_STDIO
+int OPENSSL_INIT_set_config_filename(OPENSSL_INIT_SETTINGS *settings,
+                                     const char *config_filename);
+void OPENSSL_INIT_set_config_file_flags(OPENSSL_INIT_SETTINGS *settings,
+                                        unsigned long flags);
+int OPENSSL_INIT_set_config_appname(OPENSSL_INIT_SETTINGS *settings,
+                                    const char *config_appname);
+# endif
+void OPENSSL_INIT_free(OPENSSL_INIT_SETTINGS *settings);
+
+# if defined(OPENSSL_THREADS) && !defined(CRYPTO_TDEBUG)
+#  if defined(_WIN32)
+#   if defined(BASETYPES) || defined(_WINDEF_H)
+/* application has to include <windows.h> in order to use this */
+typedef DWORD CRYPTO_THREAD_LOCAL;
+typedef DWORD CRYPTO_THREAD_ID;
+
+typedef LONG CRYPTO_ONCE;
+#    define CRYPTO_ONCE_STATIC_INIT 0
+#   endif
+#  else
+#   include <pthread.h>
+typedef pthread_once_t CRYPTO_ONCE;
+typedef pthread_key_t CRYPTO_THREAD_LOCAL;
+typedef pthread_t CRYPTO_THREAD_ID;
+
+#   define CRYPTO_ONCE_STATIC_INIT PTHREAD_ONCE_INIT
+#  endif
+# endif
+
+# if !defined(CRYPTO_ONCE_STATIC_INIT)
+typedef unsigned int CRYPTO_ONCE;
+typedef unsigned int CRYPTO_THREAD_LOCAL;
+typedef unsigned int CRYPTO_THREAD_ID;
+#  define CRYPTO_ONCE_STATIC_INIT 0
+# endif
+
+int CRYPTO_THREAD_run_once(CRYPTO_ONCE *once, void (*init)(void));
+
+int CRYPTO_THREAD_init_local(CRYPTO_THREAD_LOCAL *key, void (*cleanup)(void *));
+void *CRYPTO_THREAD_get_local(CRYPTO_THREAD_LOCAL *key);
+int CRYPTO_THREAD_set_local(CRYPTO_THREAD_LOCAL *key, void *val);
+int CRYPTO_THREAD_cleanup_local(CRYPTO_THREAD_LOCAL *key);
+
+CRYPTO_THREAD_ID CRYPTO_THREAD_get_current_id(void);
+int CRYPTO_THREAD_compare_id(CRYPTO_THREAD_ID a, CRYPTO_THREAD_ID b);
+
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/cryptoerr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/cryptoerr.h
new file mode 100644
index 000000000..10723d045
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/cryptoerr.h
@@ -0,0 +1,56 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_CRYPTOERR_H
+# define HEADER_CRYPTOERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+
+# include <openssl/symhacks.h>
+
+int ERR_load_CRYPTO_strings(void);
+
+/*
+ * CRYPTO function codes.
+ */
+# define CRYPTO_F_CMAC_CTX_NEW                            120
+# define CRYPTO_F_CRYPTO_DUP_EX_DATA                      110
+# define CRYPTO_F_CRYPTO_FREE_EX_DATA                     111
+# define CRYPTO_F_CRYPTO_GET_EX_NEW_INDEX                 100
+# define CRYPTO_F_CRYPTO_MEMDUP                           115
+# define CRYPTO_F_CRYPTO_NEW_EX_DATA                      112
+# define CRYPTO_F_CRYPTO_OCB128_COPY_CTX                  121
+# define CRYPTO_F_CRYPTO_OCB128_INIT                      122
+# define CRYPTO_F_CRYPTO_SET_EX_DATA                      102
+# define CRYPTO_F_FIPS_MODE_SET                           109
+# define CRYPTO_F_GET_AND_LOCK                            113
+# define CRYPTO_F_OPENSSL_ATEXIT                          114
+# define CRYPTO_F_OPENSSL_BUF2HEXSTR                      117
+# define CRYPTO_F_OPENSSL_FOPEN                           119
+# define CRYPTO_F_OPENSSL_HEXSTR2BUF                      118
+# define CRYPTO_F_OPENSSL_INIT_CRYPTO                     116
+# define CRYPTO_F_OPENSSL_LH_NEW                          126
+# define CRYPTO_F_OPENSSL_SK_DEEP_COPY                    127
+# define CRYPTO_F_OPENSSL_SK_DUP                          128
+# define CRYPTO_F_PKEY_HMAC_INIT                          123
+# define CRYPTO_F_PKEY_POLY1305_INIT                      124
+# define CRYPTO_F_PKEY_SIPHASH_INIT                       125
+# define CRYPTO_F_SK_RESERVE                              129
+
+/*
+ * CRYPTO reason codes.
+ */
+# define CRYPTO_R_FIPS_MODE_NOT_SUPPORTED                 101
+# define CRYPTO_R_ILLEGAL_HEX_DIGIT                       102
+# define CRYPTO_R_ODD_NUMBER_OF_DIGITS                    103
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/ct.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ct.h
new file mode 100644
index 000000000..d4262fa04
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ct.h
@@ -0,0 +1,476 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_CT_H
+# define HEADER_CT_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_CT
+# include <openssl/ossl_typ.h>
+# include <openssl/safestack.h>
+# include <openssl/x509.h>
+# include <openssl/cterr.h>
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+
+/* Minimum RSA key size, from RFC6962 */
+# define SCT_MIN_RSA_BITS 2048
+
+/* All hashes are SHA256 in v1 of Certificate Transparency */
+# define CT_V1_HASHLEN SHA256_DIGEST_LENGTH
+
+typedef enum {
+    CT_LOG_ENTRY_TYPE_NOT_SET = -1,
+    CT_LOG_ENTRY_TYPE_X509 = 0,
+    CT_LOG_ENTRY_TYPE_PRECERT = 1
+} ct_log_entry_type_t;
+
+typedef enum {
+    SCT_VERSION_NOT_SET = -1,
+    SCT_VERSION_V1 = 0
+} sct_version_t;
+
+typedef enum {
+    SCT_SOURCE_UNKNOWN,
+    SCT_SOURCE_TLS_EXTENSION,
+    SCT_SOURCE_X509V3_EXTENSION,
+    SCT_SOURCE_OCSP_STAPLED_RESPONSE
+} sct_source_t;
+
+typedef enum {
+    SCT_VALIDATION_STATUS_NOT_SET,
+    SCT_VALIDATION_STATUS_UNKNOWN_LOG,
+    SCT_VALIDATION_STATUS_VALID,
+    SCT_VALIDATION_STATUS_INVALID,
+    SCT_VALIDATION_STATUS_UNVERIFIED,
+    SCT_VALIDATION_STATUS_UNKNOWN_VERSION
+} sct_validation_status_t;
+
+DEFINE_STACK_OF(SCT)
+DEFINE_STACK_OF(CTLOG)
+
+/******************************************
+ * CT policy evaluation context functions *
+ ******************************************/
+
+/*
+ * Creates a new, empty policy evaluation context.
+ * The caller is responsible for calling CT_POLICY_EVAL_CTX_free when finished
+ * with the CT_POLICY_EVAL_CTX.
+ */
+CT_POLICY_EVAL_CTX *CT_POLICY_EVAL_CTX_new(void);
+
+/* Deletes a policy evaluation context and anything it owns. */
+void CT_POLICY_EVAL_CTX_free(CT_POLICY_EVAL_CTX *ctx);
+
+/* Gets the peer certificate that the SCTs are for */
+X509* CT_POLICY_EVAL_CTX_get0_cert(const CT_POLICY_EVAL_CTX *ctx);
+
+/*
+ * Sets the certificate associated with the received SCTs.
+ * Increments the reference count of cert.
+ * Returns 1 on success, 0 otherwise.
+ */
+int CT_POLICY_EVAL_CTX_set1_cert(CT_POLICY_EVAL_CTX *ctx, X509 *cert);
+
+/* Gets the issuer of the aforementioned certificate */
+X509* CT_POLICY_EVAL_CTX_get0_issuer(const CT_POLICY_EVAL_CTX *ctx);
+
+/*
+ * Sets the issuer of the certificate associated with the received SCTs.
+ * Increments the reference count of issuer.
+ * Returns 1 on success, 0 otherwise.
+ */
+int CT_POLICY_EVAL_CTX_set1_issuer(CT_POLICY_EVAL_CTX *ctx, X509 *issuer);
+
+/* Gets the CT logs that are trusted sources of SCTs */
+const CTLOG_STORE *CT_POLICY_EVAL_CTX_get0_log_store(const CT_POLICY_EVAL_CTX *ctx);
+
+/* Sets the log store that is in use. It must outlive the CT_POLICY_EVAL_CTX. */
+void CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE(CT_POLICY_EVAL_CTX *ctx,
+                                               CTLOG_STORE *log_store);
+
+/*
+ * Gets the time, in milliseconds since the Unix epoch, that will be used as the
+ * current time when checking whether an SCT was issued in the future.
+ * Such SCTs will fail validation, as required by RFC6962.
+ */
+uint64_t CT_POLICY_EVAL_CTX_get_time(const CT_POLICY_EVAL_CTX *ctx);
+
+/*
+ * Sets the time to evaluate SCTs against, in milliseconds since the Unix epoch.
+ * If an SCT's timestamp is after this time, it will be interpreted as having
+ * been issued in the future. RFC6962 states that "TLS clients MUST reject SCTs
+ * whose timestamp is in the future", so an SCT will not validate in this case.
+ */
+void CT_POLICY_EVAL_CTX_set_time(CT_POLICY_EVAL_CTX *ctx, uint64_t time_in_ms);
+
+/*****************
+ * SCT functions *
+ *****************/
+
+/*
+ * Creates a new, blank SCT.
+ * The caller is responsible for calling SCT_free when finished with the SCT.
+ */
+SCT *SCT_new(void);
+
+/*
+ * Creates a new SCT from some base64-encoded strings.
+ * The caller is responsible for calling SCT_free when finished with the SCT.
+ */
+SCT *SCT_new_from_base64(unsigned char version,
+                         const char *logid_base64,
+                         ct_log_entry_type_t entry_type,
+                         uint64_t timestamp,
+                         const char *extensions_base64,
+                         const char *signature_base64);
+
+/*
+ * Frees the SCT and the underlying data structures.
+ */
+void SCT_free(SCT *sct);
+
+/*
+ * Free a stack of SCTs, and the underlying SCTs themselves.
+ * Intended to be compatible with X509V3_EXT_FREE.
+ */
+void SCT_LIST_free(STACK_OF(SCT) *a);
+
+/*
+ * Returns the version of the SCT.
+ */
+sct_version_t SCT_get_version(const SCT *sct);
+
+/*
+ * Set the version of an SCT.
+ * Returns 1 on success, 0 if the version is unrecognized.
+ */
+__owur int SCT_set_version(SCT *sct, sct_version_t version);
+
+/*
+ * Returns the log entry type of the SCT.
+ */
+ct_log_entry_type_t SCT_get_log_entry_type(const SCT *sct);
+
+/*
+ * Set the log entry type of an SCT.
+ * Returns 1 on success, 0 otherwise.
+ */
+__owur int SCT_set_log_entry_type(SCT *sct, ct_log_entry_type_t entry_type);
+
+/*
+ * Gets the ID of the log that an SCT came from.
+ * Ownership of the log ID remains with the SCT.
+ * Returns the length of the log ID.
+ */
+size_t SCT_get0_log_id(const SCT *sct, unsigned char **log_id);
+
+/*
+ * Set the log ID of an SCT to point directly to the *log_id specified.
+ * The SCT takes ownership of the specified pointer.
+ * Returns 1 on success, 0 otherwise.
+ */
+__owur int SCT_set0_log_id(SCT *sct, unsigned char *log_id, size_t log_id_len);
+
+/*
+ * Set the log ID of an SCT.
+ * This makes a copy of the log_id.
+ * Returns 1 on success, 0 otherwise.
+ */
+__owur int SCT_set1_log_id(SCT *sct, const unsigned char *log_id,
+                           size_t log_id_len);
+
+/*
+ * Returns the timestamp for the SCT (epoch time in milliseconds).
+ */
+uint64_t SCT_get_timestamp(const SCT *sct);
+
+/*
+ * Set the timestamp of an SCT (epoch time in milliseconds).
+ */
+void SCT_set_timestamp(SCT *sct, uint64_t timestamp);
+
+/*
+ * Return the NID for the signature used by the SCT.
+ * For CT v1, this will be either NID_sha256WithRSAEncryption or
+ * NID_ecdsa_with_SHA256 (or NID_undef if incorrect/unset).
+ */
+int SCT_get_signature_nid(const SCT *sct);
+
+/*
+ * Set the signature type of an SCT
+ * For CT v1, this should be either NID_sha256WithRSAEncryption or
+ * NID_ecdsa_with_SHA256.
+ * Returns 1 on success, 0 otherwise.
+ */
+__owur int SCT_set_signature_nid(SCT *sct, int nid);
+
+/*
+ * Set *ext to point to the extension data for the SCT. ext must not be NULL.
+ * The SCT retains ownership of this pointer.
+ * Returns length of the data pointed to.
+ */
+size_t SCT_get0_extensions(const SCT *sct, unsigned char **ext);
+
+/*
+ * Set the extensions of an SCT to point directly to the *ext specified.
+ * The SCT takes ownership of the specified pointer.
+ */
+void SCT_set0_extensions(SCT *sct, unsigned char *ext, size_t ext_len);
+
+/*
+ * Set the extensions of an SCT.
+ * This takes a copy of the ext.
+ * Returns 1 on success, 0 otherwise.
+ */
+__owur int SCT_set1_extensions(SCT *sct, const unsigned char *ext,
+                               size_t ext_len);
+
+/*
+ * Set *sig to point to the signature for the SCT. sig must not be NULL.
+ * The SCT retains ownership of this pointer.
+ * Returns length of the data pointed to.
+ */
+size_t SCT_get0_signature(const SCT *sct, unsigned char **sig);
+
+/*
+ * Set the signature of an SCT to point directly to the *sig specified.
+ * The SCT takes ownership of the specified pointer.
+ */
+void SCT_set0_signature(SCT *sct, unsigned char *sig, size_t sig_len);
+
+/*
+ * Set the signature of an SCT to be a copy of the *sig specified.
+ * Returns 1 on success, 0 otherwise.
+ */
+__owur int SCT_set1_signature(SCT *sct, const unsigned char *sig,
+                              size_t sig_len);
+
+/*
+ * The origin of this SCT, e.g. TLS extension, OCSP response, etc.
+ */
+sct_source_t SCT_get_source(const SCT *sct);
+
+/*
+ * Set the origin of this SCT, e.g. TLS extension, OCSP response, etc.
+ * Returns 1 on success, 0 otherwise.
+ */
+__owur int SCT_set_source(SCT *sct, sct_source_t source);
+
+/*
+ * Returns a text string describing the validation status of |sct|.
+ */
+const char *SCT_validation_status_string(const SCT *sct);
+
+/*
+ * Pretty-prints an |sct| to |out|.
+ * It will be indented by the number of spaces specified by |indent|.
+ * If |logs| is not NULL, it will be used to lookup the CT log that the SCT came
+ * from, so that the log name can be printed.
+ */
+void SCT_print(const SCT *sct, BIO *out, int indent, const CTLOG_STORE *logs);
+
+/*
+ * Pretty-prints an |sct_list| to |out|.
+ * It will be indented by the number of spaces specified by |indent|.
+ * SCTs will be delimited by |separator|.
+ * If |logs| is not NULL, it will be used to lookup the CT log that each SCT
+ * came from, so that the log names can be printed.
+ */
+void SCT_LIST_print(const STACK_OF(SCT) *sct_list, BIO *out, int indent,
+                    const char *separator, const CTLOG_STORE *logs);
+
+/*
+ * Gets the last result of validating this SCT.
+ * If it has not been validated yet, returns SCT_VALIDATION_STATUS_NOT_SET.
+ */
+sct_validation_status_t SCT_get_validation_status(const SCT *sct);
+
+/*
+ * Validates the given SCT with the provided context.
+ * Sets the "validation_status" field of the SCT.
+ * Returns 1 if the SCT is valid and the signature verifies.
+ * Returns 0 if the SCT is invalid or could not be verified.
+ * Returns -1 if an error occurs.
+ */
+__owur int SCT_validate(SCT *sct, const CT_POLICY_EVAL_CTX *ctx);
+
+/*
+ * Validates the given list of SCTs with the provided context.
+ * Sets the "validation_status" field of each SCT.
+ * Returns 1 if there are no invalid SCTs and all signatures verify.
+ * Returns 0 if at least one SCT is invalid or could not be verified.
+ * Returns a negative integer if an error occurs.
+ */
+__owur int SCT_LIST_validate(const STACK_OF(SCT) *scts,
+                             CT_POLICY_EVAL_CTX *ctx);
+
+
+/*********************************
+ * SCT parsing and serialisation *
+ *********************************/
+
+/*
+ * Serialize (to TLS format) a stack of SCTs and return the length.
+ * "a" must not be NULL.
+ * If "pp" is NULL, just return the length of what would have been serialized.
+ * If "pp" is not NULL and "*pp" is null, function will allocate a new pointer
+ * for data that caller is responsible for freeing (only if function returns
+ * successfully).
+ * If "pp" is NULL and "*pp" is not NULL, caller is responsible for ensuring
+ * that "*pp" is large enough to accept all of the serialized data.
+ * Returns < 0 on error, >= 0 indicating bytes written (or would have been)
+ * on success.
+ */
+__owur int i2o_SCT_LIST(const STACK_OF(SCT) *a, unsigned char **pp);
+
+/*
+ * Convert TLS format SCT list to a stack of SCTs.
+ * If "a" or "*a" is NULL, a new stack will be created that the caller is
+ * responsible for freeing (by calling SCT_LIST_free).
+ * "**pp" and "*pp" must not be NULL.
+ * Upon success, "*pp" will point to after the last bytes read, and a stack
+ * will be returned.
+ * Upon failure, a NULL pointer will be returned, and the position of "*pp" is
+ * not defined.
+ */
+STACK_OF(SCT) *o2i_SCT_LIST(STACK_OF(SCT) **a, const unsigned char **pp,
+                            size_t len);
+
+/*
+ * Serialize (to DER format) a stack of SCTs and return the length.
+ * "a" must not be NULL.
+ * If "pp" is NULL, just returns the length of what would have been serialized.
+ * If "pp" is not NULL and "*pp" is null, function will allocate a new pointer
+ * for data that caller is responsible for freeing (only if function returns
+ * successfully).
+ * If "pp" is NULL and "*pp" is not NULL, caller is responsible for ensuring
+ * that "*pp" is large enough to accept all of the serialized data.
+ * Returns < 0 on error, >= 0 indicating bytes written (or would have been)
+ * on success.
+ */
+__owur int i2d_SCT_LIST(const STACK_OF(SCT) *a, unsigned char **pp);
+
+/*
+ * Parses an SCT list in DER format and returns it.
+ * If "a" or "*a" is NULL, a new stack will be created that the caller is
+ * responsible for freeing (by calling SCT_LIST_free).
+ * "**pp" and "*pp" must not be NULL.
+ * Upon success, "*pp" will point to after the last bytes read, and a stack
+ * will be returned.
+ * Upon failure, a NULL pointer will be returned, and the position of "*pp" is
+ * not defined.
+ */
+STACK_OF(SCT) *d2i_SCT_LIST(STACK_OF(SCT) **a, const unsigned char **pp,
+                            long len);
+
+/*
+ * Serialize (to TLS format) an |sct| and write it to |out|.
+ * If |out| is null, no SCT will be output but the length will still be returned.
+ * If |out| points to a null pointer, a string will be allocated to hold the
+ * TLS-format SCT. It is the responsibility of the caller to free it.
+ * If |out| points to an allocated string, the TLS-format SCT will be written
+ * to it.
+ * The length of the SCT in TLS format will be returned.
+ */
+__owur int i2o_SCT(const SCT *sct, unsigned char **out);
+
+/*
+ * Parses an SCT in TLS format and returns it.
+ * If |psct| is not null, it will end up pointing to the parsed SCT. If it
+ * already points to a non-null pointer, the pointer will be free'd.
+ * |in| should be a pointer to a string containing the TLS-format SCT.
+ * |in| will be advanced to the end of the SCT if parsing succeeds.
+ * |len| should be the length of the SCT in |in|.
+ * Returns NULL if an error occurs.
+ * If the SCT is an unsupported version, only the SCT's 'sct' and 'sct_len'
+ * fields will be populated (with |in| and |len| respectively).
+ */
+SCT *o2i_SCT(SCT **psct, const unsigned char **in, size_t len);
+
+/********************
+ * CT log functions *
+ ********************/
+
+/*
+ * Creates a new CT log instance with the given |public_key| and |name|.
+ * Takes ownership of |public_key| but copies |name|.
+ * Returns NULL if malloc fails or if |public_key| cannot be converted to DER.
+ * Should be deleted by the caller using CTLOG_free when no longer needed.
+ */
+CTLOG *CTLOG_new(EVP_PKEY *public_key, const char *name);
+
+/*
+ * Creates a new CTLOG instance with the base64-encoded SubjectPublicKeyInfo DER
+ * in |pkey_base64|. The |name| is a string to help users identify this log.
+ * Returns 1 on success, 0 on failure.
+ * Should be deleted by the caller using CTLOG_free when no longer needed.
+ */
+int CTLOG_new_from_base64(CTLOG ** ct_log,
+                          const char *pkey_base64, const char *name);
+
+/*
+ * Deletes a CT log instance and its fields.
+ */
+void CTLOG_free(CTLOG *log);
+
+/* Gets the name of the CT log */
+const char *CTLOG_get0_name(const CTLOG *log);
+/* Gets the ID of the CT log */
+void CTLOG_get0_log_id(const CTLOG *log, const uint8_t **log_id,
+                       size_t *log_id_len);
+/* Gets the public key of the CT log */
+EVP_PKEY *CTLOG_get0_public_key(const CTLOG *log);
+
+/**************************
+ * CT log store functions *
+ **************************/
+
+/*
+ * Creates a new CT log store.
+ * Should be deleted by the caller using CTLOG_STORE_free when no longer needed.
+ */
+CTLOG_STORE *CTLOG_STORE_new(void);
+
+/*
+ * Deletes a CT log store and all of the CT log instances held within.
+ */
+void CTLOG_STORE_free(CTLOG_STORE *store);
+
+/*
+ * Finds a CT log in the store based on its log ID.
+ * Returns the CT log, or NULL if no match is found.
+ */
+const CTLOG *CTLOG_STORE_get0_log_by_id(const CTLOG_STORE *store,
+                                        const uint8_t *log_id,
+                                        size_t log_id_len);
+
+/*
+ * Loads a CT log list into a |store| from a |file|.
+ * Returns 1 if loading is successful, or 0 otherwise.
+ */
+__owur int CTLOG_STORE_load_file(CTLOG_STORE *store, const char *file);
+
+/*
+ * Loads the default CT log list into a |store|.
+ * See internal/cryptlib.h for the environment variable and file path that are
+ * consulted to find the default file.
+ * Returns 1 if loading is successful, or 0 otherwise.
+ */
+__owur int CTLOG_STORE_load_default_file(CTLOG_STORE *store);
+
+#  ifdef  __cplusplus
+}
+#  endif
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/cterr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/cterr.h
new file mode 100644
index 000000000..764e1a220
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/cterr.h
@@ -0,0 +1,76 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_CTERR_H
+# define HEADER_CTERR_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_CT
+
+#  ifdef  __cplusplus
+extern "C"
+#  endif
+int ERR_load_CT_strings(void);
+
+/*
+ * CT function codes.
+ */
+#  define CT_F_CTLOG_NEW                                   117
+#  define CT_F_CTLOG_NEW_FROM_BASE64                       118
+#  define CT_F_CTLOG_NEW_FROM_CONF                         119
+#  define CT_F_CTLOG_STORE_LOAD_CTX_NEW                    122
+#  define CT_F_CTLOG_STORE_LOAD_FILE                       123
+#  define CT_F_CTLOG_STORE_LOAD_LOG                        130
+#  define CT_F_CTLOG_STORE_NEW                             131
+#  define CT_F_CT_BASE64_DECODE                            124
+#  define CT_F_CT_POLICY_EVAL_CTX_NEW                      133
+#  define CT_F_CT_V1_LOG_ID_FROM_PKEY                      125
+#  define CT_F_I2O_SCT                                     107
+#  define CT_F_I2O_SCT_LIST                                108
+#  define CT_F_I2O_SCT_SIGNATURE                           109
+#  define CT_F_O2I_SCT                                     110
+#  define CT_F_O2I_SCT_LIST                                111
+#  define CT_F_O2I_SCT_SIGNATURE                           112
+#  define CT_F_SCT_CTX_NEW                                 126
+#  define CT_F_SCT_CTX_VERIFY                              128
+#  define CT_F_SCT_NEW                                     100
+#  define CT_F_SCT_NEW_FROM_BASE64                         127
+#  define CT_F_SCT_SET0_LOG_ID                             101
+#  define CT_F_SCT_SET1_EXTENSIONS                         114
+#  define CT_F_SCT_SET1_LOG_ID                             115
+#  define CT_F_SCT_SET1_SIGNATURE                          116
+#  define CT_F_SCT_SET_LOG_ENTRY_TYPE                      102
+#  define CT_F_SCT_SET_SIGNATURE_NID                       103
+#  define CT_F_SCT_SET_VERSION                             104
+
+/*
+ * CT reason codes.
+ */
+#  define CT_R_BASE64_DECODE_ERROR                         108
+#  define CT_R_INVALID_LOG_ID_LENGTH                       100
+#  define CT_R_LOG_CONF_INVALID                            109
+#  define CT_R_LOG_CONF_INVALID_KEY                        110
+#  define CT_R_LOG_CONF_MISSING_DESCRIPTION                111
+#  define CT_R_LOG_CONF_MISSING_KEY                        112
+#  define CT_R_LOG_KEY_INVALID                             113
+#  define CT_R_SCT_FUTURE_TIMESTAMP                        116
+#  define CT_R_SCT_INVALID                                 104
+#  define CT_R_SCT_INVALID_SIGNATURE                       107
+#  define CT_R_SCT_LIST_INVALID                            105
+#  define CT_R_SCT_LOG_ID_MISMATCH                         114
+#  define CT_R_SCT_NOT_SET                                 106
+#  define CT_R_SCT_UNSUPPORTED_VERSION                     115
+#  define CT_R_UNRECOGNIZED_SIGNATURE_NID                  101
+#  define CT_R_UNSUPPORTED_ENTRY_TYPE                      102
+#  define CT_R_UNSUPPORTED_VERSION                         103
+
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/des.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/des.h
new file mode 100644
index 000000000..be4abbdfd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/des.h
@@ -0,0 +1,174 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_DES_H
+# define HEADER_DES_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_DES
+# ifdef  __cplusplus
+extern "C" {
+# endif
+# include <openssl/e_os2.h>
+
+typedef unsigned int DES_LONG;
+
+# ifdef OPENSSL_BUILD_SHLIBCRYPTO
+#  undef OPENSSL_EXTERN
+#  define OPENSSL_EXTERN OPENSSL_EXPORT
+# endif
+
+typedef unsigned char DES_cblock[8];
+typedef /* const */ unsigned char const_DES_cblock[8];
+/*
+ * With "const", gcc 2.8.1 on Solaris thinks that DES_cblock * and
+ * const_DES_cblock * are incompatible pointer types.
+ */
+
+typedef struct DES_ks {
+    union {
+        DES_cblock cblock;
+        /*
+         * make sure things are correct size on machines with 8 byte longs
+         */
+        DES_LONG deslong[2];
+    } ks[16];
+} DES_key_schedule;
+
+# define DES_KEY_SZ      (sizeof(DES_cblock))
+# define DES_SCHEDULE_SZ (sizeof(DES_key_schedule))
+
+# define DES_ENCRYPT     1
+# define DES_DECRYPT     0
+
+# define DES_CBC_MODE    0
+# define DES_PCBC_MODE   1
+
+# define DES_ecb2_encrypt(i,o,k1,k2,e) \
+        DES_ecb3_encrypt((i),(o),(k1),(k2),(k1),(e))
+
+# define DES_ede2_cbc_encrypt(i,o,l,k1,k2,iv,e) \
+        DES_ede3_cbc_encrypt((i),(o),(l),(k1),(k2),(k1),(iv),(e))
+
+# define DES_ede2_cfb64_encrypt(i,o,l,k1,k2,iv,n,e) \
+        DES_ede3_cfb64_encrypt((i),(o),(l),(k1),(k2),(k1),(iv),(n),(e))
+
+# define DES_ede2_ofb64_encrypt(i,o,l,k1,k2,iv,n) \
+        DES_ede3_ofb64_encrypt((i),(o),(l),(k1),(k2),(k1),(iv),(n))
+
+OPENSSL_DECLARE_GLOBAL(int, DES_check_key); /* defaults to false */
+# define DES_check_key OPENSSL_GLOBAL_REF(DES_check_key)
+
+const char *DES_options(void);
+void DES_ecb3_encrypt(const_DES_cblock *input, DES_cblock *output,
+                      DES_key_schedule *ks1, DES_key_schedule *ks2,
+                      DES_key_schedule *ks3, int enc);
+DES_LONG DES_cbc_cksum(const unsigned char *input, DES_cblock *output,
+                       long length, DES_key_schedule *schedule,
+                       const_DES_cblock *ivec);
+/* DES_cbc_encrypt does not update the IV!  Use DES_ncbc_encrypt instead. */
+void DES_cbc_encrypt(const unsigned char *input, unsigned char *output,
+                     long length, DES_key_schedule *schedule,
+                     DES_cblock *ivec, int enc);
+void DES_ncbc_encrypt(const unsigned char *input, unsigned char *output,
+                      long length, DES_key_schedule *schedule,
+                      DES_cblock *ivec, int enc);
+void DES_xcbc_encrypt(const unsigned char *input, unsigned char *output,
+                      long length, DES_key_schedule *schedule,
+                      DES_cblock *ivec, const_DES_cblock *inw,
+                      const_DES_cblock *outw, int enc);
+void DES_cfb_encrypt(const unsigned char *in, unsigned char *out, int numbits,
+                     long length, DES_key_schedule *schedule,
+                     DES_cblock *ivec, int enc);
+void DES_ecb_encrypt(const_DES_cblock *input, DES_cblock *output,
+                     DES_key_schedule *ks, int enc);
+
+/*
+ * This is the DES encryption function that gets called by just about every
+ * other DES routine in the library.  You should not use this function except
+ * to implement 'modes' of DES.  I say this because the functions that call
+ * this routine do the conversion from 'char *' to long, and this needs to be
+ * done to make sure 'non-aligned' memory access do not occur.  The
+ * characters are loaded 'little endian'. Data is a pointer to 2 unsigned
+ * long's and ks is the DES_key_schedule to use.  enc, is non zero specifies
+ * encryption, zero if decryption.
+ */
+void DES_encrypt1(DES_LONG *data, DES_key_schedule *ks, int enc);
+
+/*
+ * This functions is the same as DES_encrypt1() except that the DES initial
+ * permutation (IP) and final permutation (FP) have been left out.  As for
+ * DES_encrypt1(), you should not use this function. It is used by the
+ * routines in the library that implement triple DES. IP() DES_encrypt2()
+ * DES_encrypt2() DES_encrypt2() FP() is the same as DES_encrypt1()
+ * DES_encrypt1() DES_encrypt1() except faster :-).
+ */
+void DES_encrypt2(DES_LONG *data, DES_key_schedule *ks, int enc);
+
+void DES_encrypt3(DES_LONG *data, DES_key_schedule *ks1,
+                  DES_key_schedule *ks2, DES_key_schedule *ks3);
+void DES_decrypt3(DES_LONG *data, DES_key_schedule *ks1,
+                  DES_key_schedule *ks2, DES_key_schedule *ks3);
+void DES_ede3_cbc_encrypt(const unsigned char *input, unsigned char *output,
+                          long length,
+                          DES_key_schedule *ks1, DES_key_schedule *ks2,
+                          DES_key_schedule *ks3, DES_cblock *ivec, int enc);
+void DES_ede3_cfb64_encrypt(const unsigned char *in, unsigned char *out,
+                            long length, DES_key_schedule *ks1,
+                            DES_key_schedule *ks2, DES_key_schedule *ks3,
+                            DES_cblock *ivec, int *num, int enc);
+void DES_ede3_cfb_encrypt(const unsigned char *in, unsigned char *out,
+                          int numbits, long length, DES_key_schedule *ks1,
+                          DES_key_schedule *ks2, DES_key_schedule *ks3,
+                          DES_cblock *ivec, int enc);
+void DES_ede3_ofb64_encrypt(const unsigned char *in, unsigned char *out,
+                            long length, DES_key_schedule *ks1,
+                            DES_key_schedule *ks2, DES_key_schedule *ks3,
+                            DES_cblock *ivec, int *num);
+char *DES_fcrypt(const char *buf, const char *salt, char *ret);
+char *DES_crypt(const char *buf, const char *salt);
+void DES_ofb_encrypt(const unsigned char *in, unsigned char *out, int numbits,
+                     long length, DES_key_schedule *schedule,
+                     DES_cblock *ivec);
+void DES_pcbc_encrypt(const unsigned char *input, unsigned char *output,
+                      long length, DES_key_schedule *schedule,
+                      DES_cblock *ivec, int enc);
+DES_LONG DES_quad_cksum(const unsigned char *input, DES_cblock output[],
+                        long length, int out_count, DES_cblock *seed);
+int DES_random_key(DES_cblock *ret);
+void DES_set_odd_parity(DES_cblock *key);
+int DES_check_key_parity(const_DES_cblock *key);
+int DES_is_weak_key(const_DES_cblock *key);
+/*
+ * DES_set_key (= set_key = DES_key_sched = key_sched) calls
+ * DES_set_key_checked if global variable DES_check_key is set,
+ * DES_set_key_unchecked otherwise.
+ */
+int DES_set_key(const_DES_cblock *key, DES_key_schedule *schedule);
+int DES_key_sched(const_DES_cblock *key, DES_key_schedule *schedule);
+int DES_set_key_checked(const_DES_cblock *key, DES_key_schedule *schedule);
+void DES_set_key_unchecked(const_DES_cblock *key, DES_key_schedule *schedule);
+void DES_string_to_key(const char *str, DES_cblock *key);
+void DES_string_to_2keys(const char *str, DES_cblock *key1, DES_cblock *key2);
+void DES_cfb64_encrypt(const unsigned char *in, unsigned char *out,
+                       long length, DES_key_schedule *schedule,
+                       DES_cblock *ivec, int *num, int enc);
+void DES_ofb64_encrypt(const unsigned char *in, unsigned char *out,
+                       long length, DES_key_schedule *schedule,
+                       DES_cblock *ivec, int *num);
+
+# define DES_fixup_key_parity DES_set_odd_parity
+
+# ifdef  __cplusplus
+}
+# endif
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/dh.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/dh.h
new file mode 100644
index 000000000..3527540cd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/dh.h
@@ -0,0 +1,340 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_DH_H
+# define HEADER_DH_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_DH
+# include <openssl/e_os2.h>
+# include <openssl/bio.h>
+# include <openssl/asn1.h>
+# include <openssl/ossl_typ.h>
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  include <openssl/bn.h>
+# endif
+# include <openssl/dherr.h>
+
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+# ifndef OPENSSL_DH_MAX_MODULUS_BITS
+#  define OPENSSL_DH_MAX_MODULUS_BITS    10000
+# endif
+
+# define OPENSSL_DH_FIPS_MIN_MODULUS_BITS 1024
+
+# define DH_FLAG_CACHE_MONT_P     0x01
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+/*
+ * Does nothing. Previously this switched off constant time behaviour.
+ */
+#  define DH_FLAG_NO_EXP_CONSTTIME 0x00
+# endif
+
+/*
+ * If this flag is set the DH method is FIPS compliant and can be used in
+ * FIPS mode. This is set in the validated module method. If an application
+ * sets this flag in its own methods it is its responsibility to ensure the
+ * result is compliant.
+ */
+
+# define DH_FLAG_FIPS_METHOD                     0x0400
+
+/*
+ * If this flag is set the operations normally disabled in FIPS mode are
+ * permitted it is then the applications responsibility to ensure that the
+ * usage is compliant.
+ */
+
+# define DH_FLAG_NON_FIPS_ALLOW                  0x0400
+
+/* Already defined in ossl_typ.h */
+/* typedef struct dh_st DH; */
+/* typedef struct dh_method DH_METHOD; */
+
+DECLARE_ASN1_ITEM(DHparams)
+
+# define DH_GENERATOR_2          2
+/* #define DH_GENERATOR_3       3 */
+# define DH_GENERATOR_5          5
+
+/* DH_check error codes */
+# define DH_CHECK_P_NOT_PRIME            0x01
+# define DH_CHECK_P_NOT_SAFE_PRIME       0x02
+# define DH_UNABLE_TO_CHECK_GENERATOR    0x04
+# define DH_NOT_SUITABLE_GENERATOR       0x08
+# define DH_CHECK_Q_NOT_PRIME            0x10
+# define DH_CHECK_INVALID_Q_VALUE        0x20
+# define DH_CHECK_INVALID_J_VALUE        0x40
+
+/* DH_check_pub_key error codes */
+# define DH_CHECK_PUBKEY_TOO_SMALL       0x01
+# define DH_CHECK_PUBKEY_TOO_LARGE       0x02
+# define DH_CHECK_PUBKEY_INVALID         0x04
+
+/*
+ * primes p where (p-1)/2 is prime too are called "safe"; we define this for
+ * backward compatibility:
+ */
+# define DH_CHECK_P_NOT_STRONG_PRIME     DH_CHECK_P_NOT_SAFE_PRIME
+
+# define d2i_DHparams_fp(fp,x) \
+    (DH *)ASN1_d2i_fp((char *(*)())DH_new, \
+                      (char *(*)())d2i_DHparams, \
+                      (fp), \
+                      (unsigned char **)(x))
+# define i2d_DHparams_fp(fp,x) \
+    ASN1_i2d_fp(i2d_DHparams,(fp), (unsigned char *)(x))
+# define d2i_DHparams_bio(bp,x) \
+    ASN1_d2i_bio_of(DH, DH_new, d2i_DHparams, bp, x)
+# define i2d_DHparams_bio(bp,x) \
+    ASN1_i2d_bio_of_const(DH,i2d_DHparams,bp,x)
+
+# define d2i_DHxparams_fp(fp,x) \
+    (DH *)ASN1_d2i_fp((char *(*)())DH_new, \
+                      (char *(*)())d2i_DHxparams, \
+                      (fp), \
+                      (unsigned char **)(x))
+# define i2d_DHxparams_fp(fp,x) \
+    ASN1_i2d_fp(i2d_DHxparams,(fp), (unsigned char *)(x))
+# define d2i_DHxparams_bio(bp,x) \
+    ASN1_d2i_bio_of(DH, DH_new, d2i_DHxparams, bp, x)
+# define i2d_DHxparams_bio(bp,x) \
+    ASN1_i2d_bio_of_const(DH, i2d_DHxparams, bp, x)
+
+DH *DHparams_dup(DH *);
+
+const DH_METHOD *DH_OpenSSL(void);
+
+void DH_set_default_method(const DH_METHOD *meth);
+const DH_METHOD *DH_get_default_method(void);
+int DH_set_method(DH *dh, const DH_METHOD *meth);
+DH *DH_new_method(ENGINE *engine);
+
+DH *DH_new(void);
+void DH_free(DH *dh);
+int DH_up_ref(DH *dh);
+int DH_bits(const DH *dh);
+int DH_size(const DH *dh);
+int DH_security_bits(const DH *dh);
+#define DH_get_ex_new_index(l, p, newf, dupf, freef) \
+    CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_DH, l, p, newf, dupf, freef)
+int DH_set_ex_data(DH *d, int idx, void *arg);
+void *DH_get_ex_data(DH *d, int idx);
+
+/* Deprecated version */
+DEPRECATEDIN_0_9_8(DH *DH_generate_parameters(int prime_len, int generator,
+                                              void (*callback) (int, int,
+                                                                void *),
+                                              void *cb_arg))
+
+/* New version */
+int DH_generate_parameters_ex(DH *dh, int prime_len, int generator,
+                              BN_GENCB *cb);
+
+int DH_check_params_ex(const DH *dh);
+int DH_check_ex(const DH *dh);
+int DH_check_pub_key_ex(const DH *dh, const BIGNUM *pub_key);
+int DH_check_params(const DH *dh, int *ret);
+int DH_check(const DH *dh, int *codes);
+int DH_check_pub_key(const DH *dh, const BIGNUM *pub_key, int *codes);
+int DH_generate_key(DH *dh);
+int DH_compute_key(unsigned char *key, const BIGNUM *pub_key, DH *dh);
+int DH_compute_key_padded(unsigned char *key, const BIGNUM *pub_key, DH *dh);
+DH *d2i_DHparams(DH **a, const unsigned char **pp, long length);
+int i2d_DHparams(const DH *a, unsigned char **pp);
+DH *d2i_DHxparams(DH **a, const unsigned char **pp, long length);
+int i2d_DHxparams(const DH *a, unsigned char **pp);
+# ifndef OPENSSL_NO_STDIO
+int DHparams_print_fp(FILE *fp, const DH *x);
+# endif
+int DHparams_print(BIO *bp, const DH *x);
+
+/* RFC 5114 parameters */
+DH *DH_get_1024_160(void);
+DH *DH_get_2048_224(void);
+DH *DH_get_2048_256(void);
+
+/* Named parameters, currently RFC7919 */
+DH *DH_new_by_nid(int nid);
+int DH_get_nid(const DH *dh);
+
+# ifndef OPENSSL_NO_CMS
+/* RFC2631 KDF */
+int DH_KDF_X9_42(unsigned char *out, size_t outlen,
+                 const unsigned char *Z, size_t Zlen,
+                 ASN1_OBJECT *key_oid,
+                 const unsigned char *ukm, size_t ukmlen, const EVP_MD *md);
+# endif
+
+void DH_get0_pqg(const DH *dh,
+                 const BIGNUM **p, const BIGNUM **q, const BIGNUM **g);
+int DH_set0_pqg(DH *dh, BIGNUM *p, BIGNUM *q, BIGNUM *g);
+void DH_get0_key(const DH *dh,
+                 const BIGNUM **pub_key, const BIGNUM **priv_key);
+int DH_set0_key(DH *dh, BIGNUM *pub_key, BIGNUM *priv_key);
+const BIGNUM *DH_get0_p(const DH *dh);
+const BIGNUM *DH_get0_q(const DH *dh);
+const BIGNUM *DH_get0_g(const DH *dh);
+const BIGNUM *DH_get0_priv_key(const DH *dh);
+const BIGNUM *DH_get0_pub_key(const DH *dh);
+void DH_clear_flags(DH *dh, int flags);
+int DH_test_flags(const DH *dh, int flags);
+void DH_set_flags(DH *dh, int flags);
+ENGINE *DH_get0_engine(DH *d);
+long DH_get_length(const DH *dh);
+int DH_set_length(DH *dh, long length);
+
+DH_METHOD *DH_meth_new(const char *name, int flags);
+void DH_meth_free(DH_METHOD *dhm);
+DH_METHOD *DH_meth_dup(const DH_METHOD *dhm);
+const char *DH_meth_get0_name(const DH_METHOD *dhm);
+int DH_meth_set1_name(DH_METHOD *dhm, const char *name);
+int DH_meth_get_flags(const DH_METHOD *dhm);
+int DH_meth_set_flags(DH_METHOD *dhm, int flags);
+void *DH_meth_get0_app_data(const DH_METHOD *dhm);
+int DH_meth_set0_app_data(DH_METHOD *dhm, void *app_data);
+int (*DH_meth_get_generate_key(const DH_METHOD *dhm)) (DH *);
+int DH_meth_set_generate_key(DH_METHOD *dhm, int (*generate_key) (DH *));
+int (*DH_meth_get_compute_key(const DH_METHOD *dhm))
+        (unsigned char *key, const BIGNUM *pub_key, DH *dh);
+int DH_meth_set_compute_key(DH_METHOD *dhm,
+        int (*compute_key) (unsigned char *key, const BIGNUM *pub_key, DH *dh));
+int (*DH_meth_get_bn_mod_exp(const DH_METHOD *dhm))
+    (const DH *, BIGNUM *, const BIGNUM *, const BIGNUM *, const BIGNUM *,
+     BN_CTX *, BN_MONT_CTX *);
+int DH_meth_set_bn_mod_exp(DH_METHOD *dhm,
+    int (*bn_mod_exp) (const DH *, BIGNUM *, const BIGNUM *, const BIGNUM *,
+                       const BIGNUM *, BN_CTX *, BN_MONT_CTX *));
+int (*DH_meth_get_init(const DH_METHOD *dhm))(DH *);
+int DH_meth_set_init(DH_METHOD *dhm, int (*init)(DH *));
+int (*DH_meth_get_finish(const DH_METHOD *dhm)) (DH *);
+int DH_meth_set_finish(DH_METHOD *dhm, int (*finish) (DH *));
+int (*DH_meth_get_generate_params(const DH_METHOD *dhm))
+        (DH *, int, int, BN_GENCB *);
+int DH_meth_set_generate_params(DH_METHOD *dhm,
+        int (*generate_params) (DH *, int, int, BN_GENCB *));
+
+
+# define EVP_PKEY_CTX_set_dh_paramgen_prime_len(ctx, len) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DH, EVP_PKEY_OP_PARAMGEN, \
+                        EVP_PKEY_CTRL_DH_PARAMGEN_PRIME_LEN, len, NULL)
+
+# define EVP_PKEY_CTX_set_dh_paramgen_subprime_len(ctx, len) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DH, EVP_PKEY_OP_PARAMGEN, \
+                        EVP_PKEY_CTRL_DH_PARAMGEN_SUBPRIME_LEN, len, NULL)
+
+# define EVP_PKEY_CTX_set_dh_paramgen_type(ctx, typ) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DH, EVP_PKEY_OP_PARAMGEN, \
+                        EVP_PKEY_CTRL_DH_PARAMGEN_TYPE, typ, NULL)
+
+# define EVP_PKEY_CTX_set_dh_paramgen_generator(ctx, gen) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DH, EVP_PKEY_OP_PARAMGEN, \
+                        EVP_PKEY_CTRL_DH_PARAMGEN_GENERATOR, gen, NULL)
+
+# define EVP_PKEY_CTX_set_dh_rfc5114(ctx, gen) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DHX, EVP_PKEY_OP_PARAMGEN, \
+                        EVP_PKEY_CTRL_DH_RFC5114, gen, NULL)
+
+# define EVP_PKEY_CTX_set_dhx_rfc5114(ctx, gen) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DHX, EVP_PKEY_OP_PARAMGEN, \
+                        EVP_PKEY_CTRL_DH_RFC5114, gen, NULL)
+
+# define EVP_PKEY_CTX_set_dh_nid(ctx, nid) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DH, \
+                        EVP_PKEY_OP_PARAMGEN | EVP_PKEY_OP_KEYGEN, \
+                        EVP_PKEY_CTRL_DH_NID, nid, NULL)
+
+# define EVP_PKEY_CTX_set_dh_pad(ctx, pad) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DH, EVP_PKEY_OP_DERIVE, \
+                          EVP_PKEY_CTRL_DH_PAD, pad, NULL)
+
+# define EVP_PKEY_CTX_set_dh_kdf_type(ctx, kdf) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DHX, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_DH_KDF_TYPE, kdf, NULL)
+
+# define EVP_PKEY_CTX_get_dh_kdf_type(ctx) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DHX, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_DH_KDF_TYPE, -2, NULL)
+
+# define EVP_PKEY_CTX_set0_dh_kdf_oid(ctx, oid) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DHX, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_DH_KDF_OID, 0, (void *)(oid))
+
+# define EVP_PKEY_CTX_get0_dh_kdf_oid(ctx, poid) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DHX, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_GET_DH_KDF_OID, 0, (void *)(poid))
+
+# define EVP_PKEY_CTX_set_dh_kdf_md(ctx, md) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DHX, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_DH_KDF_MD, 0, (void *)(md))
+
+# define EVP_PKEY_CTX_get_dh_kdf_md(ctx, pmd) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DHX, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_GET_DH_KDF_MD, 0, (void *)(pmd))
+
+# define EVP_PKEY_CTX_set_dh_kdf_outlen(ctx, len) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DHX, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_DH_KDF_OUTLEN, len, NULL)
+
+# define EVP_PKEY_CTX_get_dh_kdf_outlen(ctx, plen) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DHX, \
+                                EVP_PKEY_OP_DERIVE, \
+                        EVP_PKEY_CTRL_GET_DH_KDF_OUTLEN, 0, (void *)(plen))
+
+# define EVP_PKEY_CTX_set0_dh_kdf_ukm(ctx, p, plen) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DHX, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_DH_KDF_UKM, plen, (void *)(p))
+
+# define EVP_PKEY_CTX_get0_dh_kdf_ukm(ctx, p) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DHX, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_GET_DH_KDF_UKM, 0, (void *)(p))
+
+# define EVP_PKEY_CTRL_DH_PARAMGEN_PRIME_LEN     (EVP_PKEY_ALG_CTRL + 1)
+# define EVP_PKEY_CTRL_DH_PARAMGEN_GENERATOR     (EVP_PKEY_ALG_CTRL + 2)
+# define EVP_PKEY_CTRL_DH_RFC5114                (EVP_PKEY_ALG_CTRL + 3)
+# define EVP_PKEY_CTRL_DH_PARAMGEN_SUBPRIME_LEN  (EVP_PKEY_ALG_CTRL + 4)
+# define EVP_PKEY_CTRL_DH_PARAMGEN_TYPE          (EVP_PKEY_ALG_CTRL + 5)
+# define EVP_PKEY_CTRL_DH_KDF_TYPE               (EVP_PKEY_ALG_CTRL + 6)
+# define EVP_PKEY_CTRL_DH_KDF_MD                 (EVP_PKEY_ALG_CTRL + 7)
+# define EVP_PKEY_CTRL_GET_DH_KDF_MD             (EVP_PKEY_ALG_CTRL + 8)
+# define EVP_PKEY_CTRL_DH_KDF_OUTLEN             (EVP_PKEY_ALG_CTRL + 9)
+# define EVP_PKEY_CTRL_GET_DH_KDF_OUTLEN         (EVP_PKEY_ALG_CTRL + 10)
+# define EVP_PKEY_CTRL_DH_KDF_UKM                (EVP_PKEY_ALG_CTRL + 11)
+# define EVP_PKEY_CTRL_GET_DH_KDF_UKM            (EVP_PKEY_ALG_CTRL + 12)
+# define EVP_PKEY_CTRL_DH_KDF_OID                (EVP_PKEY_ALG_CTRL + 13)
+# define EVP_PKEY_CTRL_GET_DH_KDF_OID            (EVP_PKEY_ALG_CTRL + 14)
+# define EVP_PKEY_CTRL_DH_NID                    (EVP_PKEY_ALG_CTRL + 15)
+# define EVP_PKEY_CTRL_DH_PAD                    (EVP_PKEY_ALG_CTRL + 16)
+
+/* KDF types */
+# define EVP_PKEY_DH_KDF_NONE                            1
+# ifndef OPENSSL_NO_CMS
+# define EVP_PKEY_DH_KDF_X9_42                           2
+# endif
+
+
+#  ifdef  __cplusplus
+}
+#  endif
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/dherr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/dherr.h
new file mode 100644
index 000000000..81e73f75c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/dherr.h
@@ -0,0 +1,84 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_DHERR_H
+# define HEADER_DHERR_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_DH
+
+#  ifdef  __cplusplus
+extern "C"
+#  endif
+int ERR_load_DH_strings(void);
+
+/*
+ * DH function codes.
+ */
+#  define DH_F_COMPUTE_KEY                                 102
+#  define DH_F_DHPARAMS_PRINT_FP                           101
+#  define DH_F_DH_BUILTIN_GENPARAMS                        106
+#  define DH_F_DH_CHECK_EX                                 121
+#  define DH_F_DH_CHECK_PARAMS_EX                          122
+#  define DH_F_DH_CHECK_PUB_KEY_EX                         123
+#  define DH_F_DH_CMS_DECRYPT                              114
+#  define DH_F_DH_CMS_SET_PEERKEY                          115
+#  define DH_F_DH_CMS_SET_SHARED_INFO                      116
+#  define DH_F_DH_METH_DUP                                 117
+#  define DH_F_DH_METH_NEW                                 118
+#  define DH_F_DH_METH_SET1_NAME                           119
+#  define DH_F_DH_NEW_BY_NID                               104
+#  define DH_F_DH_NEW_METHOD                               105
+#  define DH_F_DH_PARAM_DECODE                             107
+#  define DH_F_DH_PKEY_PUBLIC_CHECK                        124
+#  define DH_F_DH_PRIV_DECODE                              110
+#  define DH_F_DH_PRIV_ENCODE                              111
+#  define DH_F_DH_PUB_DECODE                               108
+#  define DH_F_DH_PUB_ENCODE                               109
+#  define DH_F_DO_DH_PRINT                                 100
+#  define DH_F_GENERATE_KEY                                103
+#  define DH_F_PKEY_DH_CTRL_STR                            120
+#  define DH_F_PKEY_DH_DERIVE                              112
+#  define DH_F_PKEY_DH_INIT                                125
+#  define DH_F_PKEY_DH_KEYGEN                              113
+
+/*
+ * DH reason codes.
+ */
+#  define DH_R_BAD_GENERATOR                               101
+#  define DH_R_BN_DECODE_ERROR                             109
+#  define DH_R_BN_ERROR                                    106
+#  define DH_R_CHECK_INVALID_J_VALUE                       115
+#  define DH_R_CHECK_INVALID_Q_VALUE                       116
+#  define DH_R_CHECK_PUBKEY_INVALID                        122
+#  define DH_R_CHECK_PUBKEY_TOO_LARGE                      123
+#  define DH_R_CHECK_PUBKEY_TOO_SMALL                      124
+#  define DH_R_CHECK_P_NOT_PRIME                           117
+#  define DH_R_CHECK_P_NOT_SAFE_PRIME                      118
+#  define DH_R_CHECK_Q_NOT_PRIME                           119
+#  define DH_R_DECODE_ERROR                                104
+#  define DH_R_INVALID_PARAMETER_NAME                      110
+#  define DH_R_INVALID_PARAMETER_NID                       114
+#  define DH_R_INVALID_PUBKEY                              102
+#  define DH_R_KDF_PARAMETER_ERROR                         112
+#  define DH_R_KEYS_NOT_SET                                108
+#  define DH_R_MISSING_PUBKEY                              125
+#  define DH_R_MODULUS_TOO_LARGE                           103
+#  define DH_R_NOT_SUITABLE_GENERATOR                      120
+#  define DH_R_NO_PARAMETERS_SET                           107
+#  define DH_R_NO_PRIVATE_VALUE                            100
+#  define DH_R_PARAMETER_ENCODING_ERROR                    105
+#  define DH_R_PEER_KEY_ERROR                              111
+#  define DH_R_SHARED_INFO_ERROR                           113
+#  define DH_R_UNABLE_TO_CHECK_GENERATOR                   121
+
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/dsa.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/dsa.h
new file mode 100644
index 000000000..822eff347
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/dsa.h
@@ -0,0 +1,238 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_DSA_H
+# define HEADER_DSA_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_DSA
+# ifdef  __cplusplus
+extern "C" {
+# endif
+# include <openssl/e_os2.h>
+# include <openssl/bio.h>
+# include <openssl/crypto.h>
+# include <openssl/ossl_typ.h>
+# include <openssl/bn.h>
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  include <openssl/dh.h>
+# endif
+# include <openssl/dsaerr.h>
+
+# ifndef OPENSSL_DSA_MAX_MODULUS_BITS
+#  define OPENSSL_DSA_MAX_MODULUS_BITS   10000
+# endif
+
+# define OPENSSL_DSA_FIPS_MIN_MODULUS_BITS 1024
+
+# define DSA_FLAG_CACHE_MONT_P   0x01
+# if OPENSSL_API_COMPAT < 0x10100000L
+/*
+ * Does nothing. Previously this switched off constant time behaviour.
+ */
+#  define DSA_FLAG_NO_EXP_CONSTTIME       0x00
+# endif
+
+/*
+ * If this flag is set the DSA method is FIPS compliant and can be used in
+ * FIPS mode. This is set in the validated module method. If an application
+ * sets this flag in its own methods it is its responsibility to ensure the
+ * result is compliant.
+ */
+
+# define DSA_FLAG_FIPS_METHOD                    0x0400
+
+/*
+ * If this flag is set the operations normally disabled in FIPS mode are
+ * permitted it is then the applications responsibility to ensure that the
+ * usage is compliant.
+ */
+
+# define DSA_FLAG_NON_FIPS_ALLOW                 0x0400
+# define DSA_FLAG_FIPS_CHECKED                   0x0800
+
+/* Already defined in ossl_typ.h */
+/* typedef struct dsa_st DSA; */
+/* typedef struct dsa_method DSA_METHOD; */
+
+typedef struct DSA_SIG_st DSA_SIG;
+
+# define d2i_DSAparams_fp(fp,x) (DSA *)ASN1_d2i_fp((char *(*)())DSA_new, \
+                (char *(*)())d2i_DSAparams,(fp),(unsigned char **)(x))
+# define i2d_DSAparams_fp(fp,x) ASN1_i2d_fp(i2d_DSAparams,(fp), \
+                (unsigned char *)(x))
+# define d2i_DSAparams_bio(bp,x) ASN1_d2i_bio_of(DSA,DSA_new,d2i_DSAparams,bp,x)
+# define i2d_DSAparams_bio(bp,x) ASN1_i2d_bio_of_const(DSA,i2d_DSAparams,bp,x)
+
+DSA *DSAparams_dup(DSA *x);
+DSA_SIG *DSA_SIG_new(void);
+void DSA_SIG_free(DSA_SIG *a);
+int i2d_DSA_SIG(const DSA_SIG *a, unsigned char **pp);
+DSA_SIG *d2i_DSA_SIG(DSA_SIG **v, const unsigned char **pp, long length);
+void DSA_SIG_get0(const DSA_SIG *sig, const BIGNUM **pr, const BIGNUM **ps);
+int DSA_SIG_set0(DSA_SIG *sig, BIGNUM *r, BIGNUM *s);
+
+DSA_SIG *DSA_do_sign(const unsigned char *dgst, int dlen, DSA *dsa);
+int DSA_do_verify(const unsigned char *dgst, int dgst_len,
+                  DSA_SIG *sig, DSA *dsa);
+
+const DSA_METHOD *DSA_OpenSSL(void);
+
+void DSA_set_default_method(const DSA_METHOD *);
+const DSA_METHOD *DSA_get_default_method(void);
+int DSA_set_method(DSA *dsa, const DSA_METHOD *);
+const DSA_METHOD *DSA_get_method(DSA *d);
+
+DSA *DSA_new(void);
+DSA *DSA_new_method(ENGINE *engine);
+void DSA_free(DSA *r);
+/* "up" the DSA object's reference count */
+int DSA_up_ref(DSA *r);
+int DSA_size(const DSA *);
+int DSA_bits(const DSA *d);
+int DSA_security_bits(const DSA *d);
+        /* next 4 return -1 on error */
+DEPRECATEDIN_1_2_0(int DSA_sign_setup(DSA *dsa, BN_CTX *ctx_in, BIGNUM **kinvp, BIGNUM **rp))
+int DSA_sign(int type, const unsigned char *dgst, int dlen,
+             unsigned char *sig, unsigned int *siglen, DSA *dsa);
+int DSA_verify(int type, const unsigned char *dgst, int dgst_len,
+               const unsigned char *sigbuf, int siglen, DSA *dsa);
+#define DSA_get_ex_new_index(l, p, newf, dupf, freef) \
+    CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_DSA, l, p, newf, dupf, freef)
+int DSA_set_ex_data(DSA *d, int idx, void *arg);
+void *DSA_get_ex_data(DSA *d, int idx);
+
+DSA *d2i_DSAPublicKey(DSA **a, const unsigned char **pp, long length);
+DSA *d2i_DSAPrivateKey(DSA **a, const unsigned char **pp, long length);
+DSA *d2i_DSAparams(DSA **a, const unsigned char **pp, long length);
+
+/* Deprecated version */
+DEPRECATEDIN_0_9_8(DSA *DSA_generate_parameters(int bits,
+                                                unsigned char *seed,
+                                                int seed_len,
+                                                int *counter_ret,
+                                                unsigned long *h_ret, void
+                                                 (*callback) (int, int,
+                                                              void *),
+                                                void *cb_arg))
+
+/* New version */
+int DSA_generate_parameters_ex(DSA *dsa, int bits,
+                               const unsigned char *seed, int seed_len,
+                               int *counter_ret, unsigned long *h_ret,
+                               BN_GENCB *cb);
+
+int DSA_generate_key(DSA *a);
+int i2d_DSAPublicKey(const DSA *a, unsigned char **pp);
+int i2d_DSAPrivateKey(const DSA *a, unsigned char **pp);
+int i2d_DSAparams(const DSA *a, unsigned char **pp);
+
+int DSAparams_print(BIO *bp, const DSA *x);
+int DSA_print(BIO *bp, const DSA *x, int off);
+# ifndef OPENSSL_NO_STDIO
+int DSAparams_print_fp(FILE *fp, const DSA *x);
+int DSA_print_fp(FILE *bp, const DSA *x, int off);
+# endif
+
+# define DSS_prime_checks 64
+/*
+ * Primality test according to FIPS PUB 186-4, Appendix C.3. Since we only
+ * have one value here we set the number of checks to 64 which is the 128 bit
+ * security level that is the highest level and valid for creating a 3072 bit
+ * DSA key.
+ */
+# define DSA_is_prime(n, callback, cb_arg) \
+        BN_is_prime(n, DSS_prime_checks, callback, NULL, cb_arg)
+
+# ifndef OPENSSL_NO_DH
+/*
+ * Convert DSA structure (key or just parameters) into DH structure (be
+ * careful to avoid small subgroup attacks when using this!)
+ */
+DH *DSA_dup_DH(const DSA *r);
+# endif
+
+# define EVP_PKEY_CTX_set_dsa_paramgen_bits(ctx, nbits) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DSA, EVP_PKEY_OP_PARAMGEN, \
+                                EVP_PKEY_CTRL_DSA_PARAMGEN_BITS, nbits, NULL)
+
+# define EVP_PKEY_CTRL_DSA_PARAMGEN_BITS         (EVP_PKEY_ALG_CTRL + 1)
+# define EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS       (EVP_PKEY_ALG_CTRL + 2)
+# define EVP_PKEY_CTRL_DSA_PARAMGEN_MD           (EVP_PKEY_ALG_CTRL + 3)
+
+void DSA_get0_pqg(const DSA *d,
+                  const BIGNUM **p, const BIGNUM **q, const BIGNUM **g);
+int DSA_set0_pqg(DSA *d, BIGNUM *p, BIGNUM *q, BIGNUM *g);
+void DSA_get0_key(const DSA *d,
+                  const BIGNUM **pub_key, const BIGNUM **priv_key);
+int DSA_set0_key(DSA *d, BIGNUM *pub_key, BIGNUM *priv_key);
+const BIGNUM *DSA_get0_p(const DSA *d);
+const BIGNUM *DSA_get0_q(const DSA *d);
+const BIGNUM *DSA_get0_g(const DSA *d);
+const BIGNUM *DSA_get0_pub_key(const DSA *d);
+const BIGNUM *DSA_get0_priv_key(const DSA *d);
+void DSA_clear_flags(DSA *d, int flags);
+int DSA_test_flags(const DSA *d, int flags);
+void DSA_set_flags(DSA *d, int flags);
+ENGINE *DSA_get0_engine(DSA *d);
+
+DSA_METHOD *DSA_meth_new(const char *name, int flags);
+void DSA_meth_free(DSA_METHOD *dsam);
+DSA_METHOD *DSA_meth_dup(const DSA_METHOD *dsam);
+const char *DSA_meth_get0_name(const DSA_METHOD *dsam);
+int DSA_meth_set1_name(DSA_METHOD *dsam, const char *name);
+int DSA_meth_get_flags(const DSA_METHOD *dsam);
+int DSA_meth_set_flags(DSA_METHOD *dsam, int flags);
+void *DSA_meth_get0_app_data(const DSA_METHOD *dsam);
+int DSA_meth_set0_app_data(DSA_METHOD *dsam, void *app_data);
+DSA_SIG *(*DSA_meth_get_sign(const DSA_METHOD *dsam))
+        (const unsigned char *, int, DSA *);
+int DSA_meth_set_sign(DSA_METHOD *dsam,
+                       DSA_SIG *(*sign) (const unsigned char *, int, DSA *));
+int (*DSA_meth_get_sign_setup(const DSA_METHOD *dsam))
+        (DSA *, BN_CTX *, BIGNUM **, BIGNUM **);
+int DSA_meth_set_sign_setup(DSA_METHOD *dsam,
+        int (*sign_setup) (DSA *, BN_CTX *, BIGNUM **, BIGNUM **));
+int (*DSA_meth_get_verify(const DSA_METHOD *dsam))
+        (const unsigned char *, int, DSA_SIG *, DSA *);
+int DSA_meth_set_verify(DSA_METHOD *dsam,
+    int (*verify) (const unsigned char *, int, DSA_SIG *, DSA *));
+int (*DSA_meth_get_mod_exp(const DSA_METHOD *dsam))
+        (DSA *, BIGNUM *, const BIGNUM *, const BIGNUM *, const BIGNUM *,
+         const BIGNUM *, const BIGNUM *, BN_CTX *, BN_MONT_CTX *);
+int DSA_meth_set_mod_exp(DSA_METHOD *dsam,
+    int (*mod_exp) (DSA *, BIGNUM *, const BIGNUM *, const BIGNUM *,
+                    const BIGNUM *, const BIGNUM *, const BIGNUM *, BN_CTX *,
+                    BN_MONT_CTX *));
+int (*DSA_meth_get_bn_mod_exp(const DSA_METHOD *dsam))
+    (DSA *, BIGNUM *, const BIGNUM *, const BIGNUM *, const BIGNUM *,
+     BN_CTX *, BN_MONT_CTX *);
+int DSA_meth_set_bn_mod_exp(DSA_METHOD *dsam,
+    int (*bn_mod_exp) (DSA *, BIGNUM *, const BIGNUM *, const BIGNUM *,
+                       const BIGNUM *, BN_CTX *, BN_MONT_CTX *));
+int (*DSA_meth_get_init(const DSA_METHOD *dsam))(DSA *);
+int DSA_meth_set_init(DSA_METHOD *dsam, int (*init)(DSA *));
+int (*DSA_meth_get_finish(const DSA_METHOD *dsam)) (DSA *);
+int DSA_meth_set_finish(DSA_METHOD *dsam, int (*finish) (DSA *));
+int (*DSA_meth_get_paramgen(const DSA_METHOD *dsam))
+        (DSA *, int, const unsigned char *, int, int *, unsigned long *,
+         BN_GENCB *);
+int DSA_meth_set_paramgen(DSA_METHOD *dsam,
+        int (*paramgen) (DSA *, int, const unsigned char *, int, int *,
+                         unsigned long *, BN_GENCB *));
+int (*DSA_meth_get_keygen(const DSA_METHOD *dsam)) (DSA *);
+int DSA_meth_set_keygen(DSA_METHOD *dsam, int (*keygen) (DSA *));
+
+
+#  ifdef  __cplusplus
+}
+#  endif
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/dsaerr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/dsaerr.h
new file mode 100644
index 000000000..d94f97bba
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/dsaerr.h
@@ -0,0 +1,67 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_DSAERR_H
+# define HEADER_DSAERR_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_DSA
+
+#  ifdef  __cplusplus
+extern "C"
+#  endif
+int ERR_load_DSA_strings(void);
+
+/*
+ * DSA function codes.
+ */
+#  define DSA_F_DSAPARAMS_PRINT                            100
+#  define DSA_F_DSAPARAMS_PRINT_FP                         101
+#  define DSA_F_DSA_BUILTIN_PARAMGEN                       125
+#  define DSA_F_DSA_BUILTIN_PARAMGEN2                      126
+#  define DSA_F_DSA_DO_SIGN                                112
+#  define DSA_F_DSA_DO_VERIFY                              113
+#  define DSA_F_DSA_METH_DUP                               127
+#  define DSA_F_DSA_METH_NEW                               128
+#  define DSA_F_DSA_METH_SET1_NAME                         129
+#  define DSA_F_DSA_NEW_METHOD                             103
+#  define DSA_F_DSA_PARAM_DECODE                           119
+#  define DSA_F_DSA_PRINT_FP                               105
+#  define DSA_F_DSA_PRIV_DECODE                            115
+#  define DSA_F_DSA_PRIV_ENCODE                            116
+#  define DSA_F_DSA_PUB_DECODE                             117
+#  define DSA_F_DSA_PUB_ENCODE                             118
+#  define DSA_F_DSA_SIGN                                   106
+#  define DSA_F_DSA_SIGN_SETUP                             107
+#  define DSA_F_DSA_SIG_NEW                                102
+#  define DSA_F_OLD_DSA_PRIV_DECODE                        122
+#  define DSA_F_PKEY_DSA_CTRL                              120
+#  define DSA_F_PKEY_DSA_CTRL_STR                          104
+#  define DSA_F_PKEY_DSA_KEYGEN                            121
+
+/*
+ * DSA reason codes.
+ */
+#  define DSA_R_BAD_Q_VALUE                                102
+#  define DSA_R_BN_DECODE_ERROR                            108
+#  define DSA_R_BN_ERROR                                   109
+#  define DSA_R_DECODE_ERROR                               104
+#  define DSA_R_INVALID_DIGEST_TYPE                        106
+#  define DSA_R_INVALID_PARAMETERS                         112
+#  define DSA_R_MISSING_PARAMETERS                         101
+#  define DSA_R_MODULUS_TOO_LARGE                          103
+#  define DSA_R_NO_PARAMETERS_SET                          107
+#  define DSA_R_PARAMETER_ENCODING_ERROR                   105
+#  define DSA_R_Q_NOT_PRIME                                113
+#  define DSA_R_SEED_LEN_SMALL                             110
+
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/dtls1.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/dtls1.h
new file mode 100644
index 000000000..a312e386c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/dtls1.h
@@ -0,0 +1,55 @@
+/*
+ * Copyright 2005-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_DTLS1_H
+# define HEADER_DTLS1_H
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+# define DTLS1_VERSION                   0xFEFF
+# define DTLS1_2_VERSION                 0xFEFD
+# define DTLS_MIN_VERSION                DTLS1_VERSION
+# define DTLS_MAX_VERSION                DTLS1_2_VERSION
+# define DTLS1_VERSION_MAJOR             0xFE
+
+# define DTLS1_BAD_VER                   0x0100
+
+/* Special value for method supporting multiple versions */
+# define DTLS_ANY_VERSION                0x1FFFF
+
+/* lengths of messages */
+/*
+ * Actually the max cookie length in DTLS is 255. But we can't change this now
+ * due to compatibility concerns.
+ */
+# define DTLS1_COOKIE_LENGTH                     256
+
+# define DTLS1_RT_HEADER_LENGTH                  13
+
+# define DTLS1_HM_HEADER_LENGTH                  12
+
+# define DTLS1_HM_BAD_FRAGMENT                   -2
+# define DTLS1_HM_FRAGMENT_RETRY                 -3
+
+# define DTLS1_CCS_HEADER_LENGTH                  1
+
+# define DTLS1_AL_HEADER_LENGTH                   2
+
+/* Timeout multipliers (timeout slice is defined in apps/timeouts.h */
+# define DTLS1_TMO_READ_COUNT                      2
+# define DTLS1_TMO_WRITE_COUNT                     2
+
+# define DTLS1_TMO_ALERT_COUNT                     12
+
+#ifdef  __cplusplus
+}
+#endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/e_os2.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/e_os2.h
new file mode 100644
index 000000000..97a776cda
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/e_os2.h
@@ -0,0 +1,300 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_E_OS2_H
+# define HEADER_E_OS2_H
+
+# include <openssl/opensslconf.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+/******************************************************************************
+ * Detect operating systems.  This probably needs completing.
+ * The result is that at least one OPENSSL_SYS_os macro should be defined.
+ * However, if none is defined, Unix is assumed.
+ **/
+
+# define OPENSSL_SYS_UNIX
+
+/* --------------------- Microsoft operating systems ---------------------- */
+
+/*
+ * Note that MSDOS actually denotes 32-bit environments running on top of
+ * MS-DOS, such as DJGPP one.
+ */
+# if defined(OPENSSL_SYS_MSDOS)
+#  undef OPENSSL_SYS_UNIX
+# endif
+
+/*
+ * For 32 bit environment, there seems to be the CygWin environment and then
+ * all the others that try to do the same thing Microsoft does...
+ */
+/*
+ * UEFI lives here because it might be built with a Microsoft toolchain and
+ * we need to avoid the false positive match on Windows.
+ */
+# if defined(OPENSSL_SYS_UEFI)
+#  undef OPENSSL_SYS_UNIX
+# elif defined(OPENSSL_SYS_UWIN)
+#  undef OPENSSL_SYS_UNIX
+#  define OPENSSL_SYS_WIN32_UWIN
+# else
+#  if defined(__CYGWIN__) || defined(OPENSSL_SYS_CYGWIN)
+#   define OPENSSL_SYS_WIN32_CYGWIN
+#  else
+#   if defined(_WIN32) || defined(OPENSSL_SYS_WIN32)
+#    undef OPENSSL_SYS_UNIX
+#    if !defined(OPENSSL_SYS_WIN32)
+#     define OPENSSL_SYS_WIN32
+#    endif
+#   endif
+#   if defined(_WIN64) || defined(OPENSSL_SYS_WIN64)
+#    undef OPENSSL_SYS_UNIX
+#    if !defined(OPENSSL_SYS_WIN64)
+#     define OPENSSL_SYS_WIN64
+#    endif
+#   endif
+#   if defined(OPENSSL_SYS_WINNT)
+#    undef OPENSSL_SYS_UNIX
+#   endif
+#   if defined(OPENSSL_SYS_WINCE)
+#    undef OPENSSL_SYS_UNIX
+#   endif
+#  endif
+# endif
+
+/* Anything that tries to look like Microsoft is "Windows" */
+# if defined(OPENSSL_SYS_WIN32) || defined(OPENSSL_SYS_WIN64) || defined(OPENSSL_SYS_WINNT) || defined(OPENSSL_SYS_WINCE)
+#  undef OPENSSL_SYS_UNIX
+#  define OPENSSL_SYS_WINDOWS
+#  ifndef OPENSSL_SYS_MSDOS
+#   define OPENSSL_SYS_MSDOS
+#  endif
+# endif
+
+/*
+ * DLL settings.  This part is a bit tough, because it's up to the
+ * application implementor how he or she will link the application, so it
+ * requires some macro to be used.
+ */
+# ifdef OPENSSL_SYS_WINDOWS
+#  ifndef OPENSSL_OPT_WINDLL
+#   if defined(_WINDLL)         /* This is used when building OpenSSL to
+                                 * indicate that DLL linkage should be used */
+#    define OPENSSL_OPT_WINDLL
+#   endif
+#  endif
+# endif
+
+/* ------------------------------- OpenVMS -------------------------------- */
+# if defined(__VMS) || defined(VMS) || defined(OPENSSL_SYS_VMS)
+#  if !defined(OPENSSL_SYS_VMS)
+#   undef OPENSSL_SYS_UNIX
+#  endif
+#  define OPENSSL_SYS_VMS
+#  if defined(__DECC)
+#   define OPENSSL_SYS_VMS_DECC
+#  elif defined(__DECCXX)
+#   define OPENSSL_SYS_VMS_DECC
+#   define OPENSSL_SYS_VMS_DECCXX
+#  else
+#   define OPENSSL_SYS_VMS_NODECC
+#  endif
+# endif
+
+/* -------------------------------- Unix ---------------------------------- */
+# ifdef OPENSSL_SYS_UNIX
+#  if defined(linux) || defined(__linux__) && !defined(OPENSSL_SYS_LINUX)
+#   define OPENSSL_SYS_LINUX
+#  endif
+#  if defined(_AIX) && !defined(OPENSSL_SYS_AIX)
+#   define OPENSSL_SYS_AIX
+#  endif
+# endif
+
+/* -------------------------------- VOS ----------------------------------- */
+# if defined(__VOS__) && !defined(OPENSSL_SYS_VOS)
+#  define OPENSSL_SYS_VOS
+#  ifdef __HPPA__
+#   define OPENSSL_SYS_VOS_HPPA
+#  endif
+#  ifdef __IA32__
+#   define OPENSSL_SYS_VOS_IA32
+#  endif
+# endif
+
+/**
+ * That's it for OS-specific stuff
+ *****************************************************************************/
+
+/* Specials for I/O an exit */
+# ifdef OPENSSL_SYS_MSDOS
+#  define OPENSSL_UNISTD_IO <io.h>
+#  define OPENSSL_DECLARE_EXIT extern void exit(int);
+# else
+#  define OPENSSL_UNISTD_IO OPENSSL_UNISTD
+#  define OPENSSL_DECLARE_EXIT  /* declared in unistd.h */
+# endif
+
+/*-
+ * OPENSSL_EXTERN is normally used to declare a symbol with possible extra
+ * attributes to handle its presence in a shared library.
+ * OPENSSL_EXPORT is used to define a symbol with extra possible attributes
+ * to make it visible in a shared library.
+ * Care needs to be taken when a header file is used both to declare and
+ * define symbols.  Basically, for any library that exports some global
+ * variables, the following code must be present in the header file that
+ * declares them, before OPENSSL_EXTERN is used:
+ *
+ * #ifdef SOME_BUILD_FLAG_MACRO
+ * # undef OPENSSL_EXTERN
+ * # define OPENSSL_EXTERN OPENSSL_EXPORT
+ * #endif
+ *
+ * The default is to have OPENSSL_EXPORT and OPENSSL_EXTERN
+ * have some generally sensible values.
+ */
+
+# if defined(OPENSSL_SYS_WINDOWS) && defined(OPENSSL_OPT_WINDLL)
+#  define OPENSSL_EXPORT extern __declspec(dllexport)
+#  define OPENSSL_EXTERN extern __declspec(dllimport)
+# else
+#  define OPENSSL_EXPORT extern
+#  define OPENSSL_EXTERN extern
+# endif
+
+/*-
+ * Macros to allow global variables to be reached through function calls when
+ * required (if a shared library version requires it, for example.
+ * The way it's done allows definitions like this:
+ *
+ *      // in foobar.c
+ *      OPENSSL_IMPLEMENT_GLOBAL(int,foobar,0)
+ *      // in foobar.h
+ *      OPENSSL_DECLARE_GLOBAL(int,foobar);
+ *      #define foobar OPENSSL_GLOBAL_REF(foobar)
+ */
+# ifdef OPENSSL_EXPORT_VAR_AS_FUNCTION
+#  define OPENSSL_IMPLEMENT_GLOBAL(type,name,value)                      \
+        type *_shadow_##name(void)                                      \
+        { static type _hide_##name=value; return &_hide_##name; }
+#  define OPENSSL_DECLARE_GLOBAL(type,name) type *_shadow_##name(void)
+#  define OPENSSL_GLOBAL_REF(name) (*(_shadow_##name()))
+# else
+#  define OPENSSL_IMPLEMENT_GLOBAL(type,name,value) type _shadow_##name=value;
+#  define OPENSSL_DECLARE_GLOBAL(type,name) OPENSSL_EXPORT type _shadow_##name
+#  define OPENSSL_GLOBAL_REF(name) _shadow_##name
+# endif
+
+# ifdef _WIN32
+#  ifdef _WIN64
+#   define ossl_ssize_t __int64
+#   define OSSL_SSIZE_MAX _I64_MAX
+#  else
+#   define ossl_ssize_t int
+#   define OSSL_SSIZE_MAX INT_MAX
+#  endif
+# endif
+
+# if defined(OPENSSL_SYS_UEFI) && !defined(ossl_ssize_t)
+#  define ossl_ssize_t INTN
+#  define OSSL_SSIZE_MAX MAX_INTN
+# endif
+
+# ifndef ossl_ssize_t
+#  define ossl_ssize_t ssize_t
+#  if defined(SSIZE_MAX)
+#   define OSSL_SSIZE_MAX SSIZE_MAX
+#  elif defined(_POSIX_SSIZE_MAX)
+#   define OSSL_SSIZE_MAX _POSIX_SSIZE_MAX
+#  else
+#   define OSSL_SSIZE_MAX ((ssize_t)(SIZE_MAX>>1))
+#  endif
+# endif
+
+# ifdef DEBUG_UNUSED
+#  define __owur __attribute__((__warn_unused_result__))
+# else
+#  define __owur
+# endif
+
+/* Standard integer types */
+# if defined(OPENSSL_SYS_UEFI)
+typedef INT8 int8_t;
+typedef UINT8 uint8_t;
+typedef INT16 int16_t;
+typedef UINT16 uint16_t;
+typedef INT32 int32_t;
+typedef UINT32 uint32_t;
+typedef INT64 int64_t;
+typedef UINT64 uint64_t;
+# elif (defined(__STDC_VERSION__) && __STDC_VERSION__ >= 199901L) || \
+     defined(__osf__) || defined(__sgi) || defined(__hpux) || \
+     defined(OPENSSL_SYS_VMS) || defined (__OpenBSD__)
+#  include <inttypes.h>
+# elif defined(_MSC_VER) && _MSC_VER<=1500
+/*
+ * minimally required typdefs for systems not supporting inttypes.h or
+ * stdint.h: currently just older VC++
+ */
+typedef signed char int8_t;
+typedef unsigned char uint8_t;
+typedef short int16_t;
+typedef unsigned short uint16_t;
+typedef int int32_t;
+typedef unsigned int uint32_t;
+typedef __int64 int64_t;
+typedef unsigned __int64 uint64_t;
+# else
+#  include <stdint.h>
+# endif
+
+/* ossl_inline: portable inline definition usable in public headers */
+# if !defined(inline) && !defined(__cplusplus)
+#  if defined(__STDC_VERSION__) && __STDC_VERSION__>=199901L
+   /* just use inline */
+#   define ossl_inline inline
+#  elif defined(__GNUC__) && __GNUC__>=2
+#   define ossl_inline __inline__
+#  elif defined(_MSC_VER)
+  /*
+   * Visual Studio: inline is available in C++ only, however
+   * __inline is available for C, see
+   * http://msdn.microsoft.com/en-us/library/z8y1yy88.aspx
+   */
+#   define ossl_inline __inline
+#  else
+#   define ossl_inline
+#  endif
+# else
+#  define ossl_inline inline
+# endif
+
+# if defined(__STDC_VERSION__) && __STDC_VERSION__ >= 201112L
+#  define ossl_noreturn _Noreturn
+# elif defined(__GNUC__) && __GNUC__ >= 2
+#  define ossl_noreturn __attribute__((noreturn))
+# else
+#  define ossl_noreturn
+# endif
+
+/* ossl_unused: portable unused attribute for use in public headers */
+# if defined(__GNUC__)
+#  define ossl_unused __attribute__((unused))
+# else
+#  define ossl_unused
+# endif
+
+#ifdef  __cplusplus
+}
+#endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/ebcdic.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ebcdic.h
new file mode 100644
index 000000000..aa0128559
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ebcdic.h
@@ -0,0 +1,33 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_EBCDIC_H
+# define HEADER_EBCDIC_H
+
+# include <stdlib.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+/* Avoid name clashes with other applications */
+# define os_toascii   _openssl_os_toascii
+# define os_toebcdic  _openssl_os_toebcdic
+# define ebcdic2ascii _openssl_ebcdic2ascii
+# define ascii2ebcdic _openssl_ascii2ebcdic
+
+extern const unsigned char os_toascii[256];
+extern const unsigned char os_toebcdic[256];
+void *ebcdic2ascii(void *dest, const void *srce, size_t count);
+void *ascii2ebcdic(void *dest, const void *srce, size_t count);
+
+#ifdef  __cplusplus
+}
+#endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/ec.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ec.h
new file mode 100644
index 000000000..347cfb6d0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ec.h
@@ -0,0 +1,1478 @@
+/*
+ * Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_EC_H
+# define HEADER_EC_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_EC
+# include <openssl/asn1.h>
+# include <openssl/symhacks.h>
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  include <openssl/bn.h>
+# endif
+# include <openssl/ecerr.h>
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+# ifndef OPENSSL_ECC_MAX_FIELD_BITS
+#  define OPENSSL_ECC_MAX_FIELD_BITS 661
+# endif
+
+/** Enum for the point conversion form as defined in X9.62 (ECDSA)
+ *  for the encoding of a elliptic curve point (x,y) */
+typedef enum {
+        /** the point is encoded as z||x, where the octet z specifies
+         *  which solution of the quadratic equation y is  */
+    POINT_CONVERSION_COMPRESSED = 2,
+        /** the point is encoded as z||x||y, where z is the octet 0x04  */
+    POINT_CONVERSION_UNCOMPRESSED = 4,
+        /** the point is encoded as z||x||y, where the octet z specifies
+         *  which solution of the quadratic equation y is  */
+    POINT_CONVERSION_HYBRID = 6
+} point_conversion_form_t;
+
+typedef struct ec_method_st EC_METHOD;
+typedef struct ec_group_st EC_GROUP;
+typedef struct ec_point_st EC_POINT;
+typedef struct ecpk_parameters_st ECPKPARAMETERS;
+typedef struct ec_parameters_st ECPARAMETERS;
+
+/********************************************************************/
+/*               EC_METHODs for curves over GF(p)                   */
+/********************************************************************/
+
+/** Returns the basic GFp ec methods which provides the basis for the
+ *  optimized methods.
+ *  \return  EC_METHOD object
+ */
+const EC_METHOD *EC_GFp_simple_method(void);
+
+/** Returns GFp methods using montgomery multiplication.
+ *  \return  EC_METHOD object
+ */
+const EC_METHOD *EC_GFp_mont_method(void);
+
+/** Returns GFp methods using optimized methods for NIST recommended curves
+ *  \return  EC_METHOD object
+ */
+const EC_METHOD *EC_GFp_nist_method(void);
+
+# ifndef OPENSSL_NO_EC_NISTP_64_GCC_128
+/** Returns 64-bit optimized methods for nistp224
+ *  \return  EC_METHOD object
+ */
+const EC_METHOD *EC_GFp_nistp224_method(void);
+
+/** Returns 64-bit optimized methods for nistp256
+ *  \return  EC_METHOD object
+ */
+const EC_METHOD *EC_GFp_nistp256_method(void);
+
+/** Returns 64-bit optimized methods for nistp521
+ *  \return  EC_METHOD object
+ */
+const EC_METHOD *EC_GFp_nistp521_method(void);
+# endif
+
+# ifndef OPENSSL_NO_EC2M
+/********************************************************************/
+/*           EC_METHOD for curves over GF(2^m)                      */
+/********************************************************************/
+
+/** Returns the basic GF2m ec method
+ *  \return  EC_METHOD object
+ */
+const EC_METHOD *EC_GF2m_simple_method(void);
+
+# endif
+
+/********************************************************************/
+/*                   EC_GROUP functions                             */
+/********************************************************************/
+
+/** Creates a new EC_GROUP object
+ *  \param   meth  EC_METHOD to use
+ *  \return  newly created EC_GROUP object or NULL in case of an error.
+ */
+EC_GROUP *EC_GROUP_new(const EC_METHOD *meth);
+
+/** Frees a EC_GROUP object
+ *  \param  group  EC_GROUP object to be freed.
+ */
+void EC_GROUP_free(EC_GROUP *group);
+
+/** Clears and frees a EC_GROUP object
+ *  \param  group  EC_GROUP object to be cleared and freed.
+ */
+void EC_GROUP_clear_free(EC_GROUP *group);
+
+/** Copies EC_GROUP objects. Note: both EC_GROUPs must use the same EC_METHOD.
+ *  \param  dst  destination EC_GROUP object
+ *  \param  src  source EC_GROUP object
+ *  \return 1 on success and 0 if an error occurred.
+ */
+int EC_GROUP_copy(EC_GROUP *dst, const EC_GROUP *src);
+
+/** Creates a new EC_GROUP object and copies the copies the content
+ *  form src to the newly created EC_KEY object
+ *  \param  src  source EC_GROUP object
+ *  \return newly created EC_GROUP object or NULL in case of an error.
+ */
+EC_GROUP *EC_GROUP_dup(const EC_GROUP *src);
+
+/** Returns the EC_METHOD of the EC_GROUP object.
+ *  \param  group  EC_GROUP object
+ *  \return EC_METHOD used in this EC_GROUP object.
+ */
+const EC_METHOD *EC_GROUP_method_of(const EC_GROUP *group);
+
+/** Returns the field type of the EC_METHOD.
+ *  \param  meth  EC_METHOD object
+ *  \return NID of the underlying field type OID.
+ */
+int EC_METHOD_get_field_type(const EC_METHOD *meth);
+
+/** Sets the generator and it's order/cofactor of a EC_GROUP object.
+ *  \param  group      EC_GROUP object
+ *  \param  generator  EC_POINT object with the generator.
+ *  \param  order      the order of the group generated by the generator.
+ *  \param  cofactor   the index of the sub-group generated by the generator
+ *                     in the group of all points on the elliptic curve.
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_GROUP_set_generator(EC_GROUP *group, const EC_POINT *generator,
+                           const BIGNUM *order, const BIGNUM *cofactor);
+
+/** Returns the generator of a EC_GROUP object.
+ *  \param  group  EC_GROUP object
+ *  \return the currently used generator (possibly NULL).
+ */
+const EC_POINT *EC_GROUP_get0_generator(const EC_GROUP *group);
+
+/** Returns the montgomery data for order(Generator)
+ *  \param  group  EC_GROUP object
+ *  \return the currently used montgomery data (possibly NULL).
+*/
+BN_MONT_CTX *EC_GROUP_get_mont_data(const EC_GROUP *group);
+
+/** Gets the order of a EC_GROUP
+ *  \param  group  EC_GROUP object
+ *  \param  order  BIGNUM to which the order is copied
+ *  \param  ctx    unused
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_GROUP_get_order(const EC_GROUP *group, BIGNUM *order, BN_CTX *ctx);
+
+/** Gets the order of an EC_GROUP
+ *  \param  group  EC_GROUP object
+ *  \return the group order
+ */
+const BIGNUM *EC_GROUP_get0_order(const EC_GROUP *group);
+
+/** Gets the number of bits of the order of an EC_GROUP
+ *  \param  group  EC_GROUP object
+ *  \return number of bits of group order.
+ */
+int EC_GROUP_order_bits(const EC_GROUP *group);
+
+/** Gets the cofactor of a EC_GROUP
+ *  \param  group     EC_GROUP object
+ *  \param  cofactor  BIGNUM to which the cofactor is copied
+ *  \param  ctx       unused
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_GROUP_get_cofactor(const EC_GROUP *group, BIGNUM *cofactor,
+                          BN_CTX *ctx);
+
+/** Gets the cofactor of an EC_GROUP
+ *  \param  group  EC_GROUP object
+ *  \return the group cofactor
+ */
+const BIGNUM *EC_GROUP_get0_cofactor(const EC_GROUP *group);
+
+/** Sets the name of a EC_GROUP object
+ *  \param  group  EC_GROUP object
+ *  \param  nid    NID of the curve name OID
+ */
+void EC_GROUP_set_curve_name(EC_GROUP *group, int nid);
+
+/** Returns the curve name of a EC_GROUP object
+ *  \param  group  EC_GROUP object
+ *  \return NID of the curve name OID or 0 if not set.
+ */
+int EC_GROUP_get_curve_name(const EC_GROUP *group);
+
+void EC_GROUP_set_asn1_flag(EC_GROUP *group, int flag);
+int EC_GROUP_get_asn1_flag(const EC_GROUP *group);
+
+void EC_GROUP_set_point_conversion_form(EC_GROUP *group,
+                                        point_conversion_form_t form);
+point_conversion_form_t EC_GROUP_get_point_conversion_form(const EC_GROUP *);
+
+unsigned char *EC_GROUP_get0_seed(const EC_GROUP *x);
+size_t EC_GROUP_get_seed_len(const EC_GROUP *);
+size_t EC_GROUP_set_seed(EC_GROUP *, const unsigned char *, size_t len);
+
+/** Sets the parameters of a ec curve defined by y^2 = x^3 + a*x + b (for GFp)
+ *  or y^2 + x*y = x^3 + a*x^2 + b (for GF2m)
+ *  \param  group  EC_GROUP object
+ *  \param  p      BIGNUM with the prime number (GFp) or the polynomial
+ *                 defining the underlying field (GF2m)
+ *  \param  a      BIGNUM with parameter a of the equation
+ *  \param  b      BIGNUM with parameter b of the equation
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_GROUP_set_curve(EC_GROUP *group, const BIGNUM *p, const BIGNUM *a,
+                       const BIGNUM *b, BN_CTX *ctx);
+
+/** Gets the parameters of the ec curve defined by y^2 = x^3 + a*x + b (for GFp)
+ *  or y^2 + x*y = x^3 + a*x^2 + b (for GF2m)
+ *  \param  group  EC_GROUP object
+ *  \param  p      BIGNUM with the prime number (GFp) or the polynomial
+ *                 defining the underlying field (GF2m)
+ *  \param  a      BIGNUM for parameter a of the equation
+ *  \param  b      BIGNUM for parameter b of the equation
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_GROUP_get_curve(const EC_GROUP *group, BIGNUM *p, BIGNUM *a, BIGNUM *b,
+                       BN_CTX *ctx);
+
+/** Sets the parameters of an ec curve. Synonym for EC_GROUP_set_curve
+ *  \param  group  EC_GROUP object
+ *  \param  p      BIGNUM with the prime number (GFp) or the polynomial
+ *                 defining the underlying field (GF2m)
+ *  \param  a      BIGNUM with parameter a of the equation
+ *  \param  b      BIGNUM with parameter b of the equation
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+DEPRECATEDIN_1_2_0(int EC_GROUP_set_curve_GFp(EC_GROUP *group, const BIGNUM *p,
+                                              const BIGNUM *a, const BIGNUM *b,
+                                              BN_CTX *ctx))
+
+/** Gets the parameters of an ec curve. Synonym for EC_GROUP_get_curve
+ *  \param  group  EC_GROUP object
+ *  \param  p      BIGNUM with the prime number (GFp) or the polynomial
+ *                 defining the underlying field (GF2m)
+ *  \param  a      BIGNUM for parameter a of the equation
+ *  \param  b      BIGNUM for parameter b of the equation
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+DEPRECATEDIN_1_2_0(int EC_GROUP_get_curve_GFp(const EC_GROUP *group, BIGNUM *p,
+                                              BIGNUM *a, BIGNUM *b,
+                                              BN_CTX *ctx))
+
+# ifndef OPENSSL_NO_EC2M
+/** Sets the parameter of an ec curve. Synonym for EC_GROUP_set_curve
+ *  \param  group  EC_GROUP object
+ *  \param  p      BIGNUM with the prime number (GFp) or the polynomial
+ *                 defining the underlying field (GF2m)
+ *  \param  a      BIGNUM with parameter a of the equation
+ *  \param  b      BIGNUM with parameter b of the equation
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+DEPRECATEDIN_1_2_0(int EC_GROUP_set_curve_GF2m(EC_GROUP *group, const BIGNUM *p,
+                                               const BIGNUM *a, const BIGNUM *b,
+                                               BN_CTX *ctx))
+
+/** Gets the parameters of an ec curve. Synonym for EC_GROUP_get_curve
+ *  \param  group  EC_GROUP object
+ *  \param  p      BIGNUM with the prime number (GFp) or the polynomial
+ *                 defining the underlying field (GF2m)
+ *  \param  a      BIGNUM for parameter a of the equation
+ *  \param  b      BIGNUM for parameter b of the equation
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+DEPRECATEDIN_1_2_0(int EC_GROUP_get_curve_GF2m(const EC_GROUP *group, BIGNUM *p,
+                                               BIGNUM *a, BIGNUM *b,
+                                               BN_CTX *ctx))
+# endif
+/** Returns the number of bits needed to represent a field element
+ *  \param  group  EC_GROUP object
+ *  \return number of bits needed to represent a field element
+ */
+int EC_GROUP_get_degree(const EC_GROUP *group);
+
+/** Checks whether the parameter in the EC_GROUP define a valid ec group
+ *  \param  group  EC_GROUP object
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 if group is a valid ec group and 0 otherwise
+ */
+int EC_GROUP_check(const EC_GROUP *group, BN_CTX *ctx);
+
+/** Checks whether the discriminant of the elliptic curve is zero or not
+ *  \param  group  EC_GROUP object
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 if the discriminant is not zero and 0 otherwise
+ */
+int EC_GROUP_check_discriminant(const EC_GROUP *group, BN_CTX *ctx);
+
+/** Compares two EC_GROUP objects
+ *  \param  a    first EC_GROUP object
+ *  \param  b    second EC_GROUP object
+ *  \param  ctx  BN_CTX object (optional)
+ *  \return 0 if the groups are equal, 1 if not, or -1 on error
+ */
+int EC_GROUP_cmp(const EC_GROUP *a, const EC_GROUP *b, BN_CTX *ctx);
+
+/*
+ * EC_GROUP_new_GF*() calls EC_GROUP_new() and EC_GROUP_set_GF*() after
+ * choosing an appropriate EC_METHOD
+ */
+
+/** Creates a new EC_GROUP object with the specified parameters defined
+ *  over GFp (defined by the equation y^2 = x^3 + a*x + b)
+ *  \param  p    BIGNUM with the prime number
+ *  \param  a    BIGNUM with the parameter a of the equation
+ *  \param  b    BIGNUM with the parameter b of the equation
+ *  \param  ctx  BN_CTX object (optional)
+ *  \return newly created EC_GROUP object with the specified parameters
+ */
+EC_GROUP *EC_GROUP_new_curve_GFp(const BIGNUM *p, const BIGNUM *a,
+                                 const BIGNUM *b, BN_CTX *ctx);
+# ifndef OPENSSL_NO_EC2M
+/** Creates a new EC_GROUP object with the specified parameters defined
+ *  over GF2m (defined by the equation y^2 + x*y = x^3 + a*x^2 + b)
+ *  \param  p    BIGNUM with the polynomial defining the underlying field
+ *  \param  a    BIGNUM with the parameter a of the equation
+ *  \param  b    BIGNUM with the parameter b of the equation
+ *  \param  ctx  BN_CTX object (optional)
+ *  \return newly created EC_GROUP object with the specified parameters
+ */
+EC_GROUP *EC_GROUP_new_curve_GF2m(const BIGNUM *p, const BIGNUM *a,
+                                  const BIGNUM *b, BN_CTX *ctx);
+# endif
+
+/** Creates a EC_GROUP object with a curve specified by a NID
+ *  \param  nid  NID of the OID of the curve name
+ *  \return newly created EC_GROUP object with specified curve or NULL
+ *          if an error occurred
+ */
+EC_GROUP *EC_GROUP_new_by_curve_name(int nid);
+
+/** Creates a new EC_GROUP object from an ECPARAMETERS object
+ *  \param  params  pointer to the ECPARAMETERS object
+ *  \return newly created EC_GROUP object with specified curve or NULL
+ *          if an error occurred
+ */
+EC_GROUP *EC_GROUP_new_from_ecparameters(const ECPARAMETERS *params);
+
+/** Creates an ECPARAMETERS object for the given EC_GROUP object.
+ *  \param  group   pointer to the EC_GROUP object
+ *  \param  params  pointer to an existing ECPARAMETERS object or NULL
+ *  \return pointer to the new ECPARAMETERS object or NULL
+ *          if an error occurred.
+ */
+ECPARAMETERS *EC_GROUP_get_ecparameters(const EC_GROUP *group,
+                                        ECPARAMETERS *params);
+
+/** Creates a new EC_GROUP object from an ECPKPARAMETERS object
+ *  \param  params  pointer to an existing ECPKPARAMETERS object, or NULL
+ *  \return newly created EC_GROUP object with specified curve, or NULL
+ *          if an error occurred
+ */
+EC_GROUP *EC_GROUP_new_from_ecpkparameters(const ECPKPARAMETERS *params);
+
+/** Creates an ECPKPARAMETERS object for the given EC_GROUP object.
+ *  \param  group   pointer to the EC_GROUP object
+ *  \param  params  pointer to an existing ECPKPARAMETERS object or NULL
+ *  \return pointer to the new ECPKPARAMETERS object or NULL
+ *          if an error occurred.
+ */
+ECPKPARAMETERS *EC_GROUP_get_ecpkparameters(const EC_GROUP *group,
+                                            ECPKPARAMETERS *params);
+
+/********************************************************************/
+/*               handling of internal curves                        */
+/********************************************************************/
+
+typedef struct {
+    int nid;
+    const char *comment;
+} EC_builtin_curve;
+
+/*
+ * EC_builtin_curves(EC_builtin_curve *r, size_t size) returns number of all
+ * available curves or zero if a error occurred. In case r is not zero,
+ * nitems EC_builtin_curve structures are filled with the data of the first
+ * nitems internal groups
+ */
+size_t EC_get_builtin_curves(EC_builtin_curve *r, size_t nitems);
+
+const char *EC_curve_nid2nist(int nid);
+int EC_curve_nist2nid(const char *name);
+
+/********************************************************************/
+/*                    EC_POINT functions                            */
+/********************************************************************/
+
+/** Creates a new EC_POINT object for the specified EC_GROUP
+ *  \param  group  EC_GROUP the underlying EC_GROUP object
+ *  \return newly created EC_POINT object or NULL if an error occurred
+ */
+EC_POINT *EC_POINT_new(const EC_GROUP *group);
+
+/** Frees a EC_POINT object
+ *  \param  point  EC_POINT object to be freed
+ */
+void EC_POINT_free(EC_POINT *point);
+
+/** Clears and frees a EC_POINT object
+ *  \param  point  EC_POINT object to be cleared and freed
+ */
+void EC_POINT_clear_free(EC_POINT *point);
+
+/** Copies EC_POINT object
+ *  \param  dst  destination EC_POINT object
+ *  \param  src  source EC_POINT object
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_POINT_copy(EC_POINT *dst, const EC_POINT *src);
+
+/** Creates a new EC_POINT object and copies the content of the supplied
+ *  EC_POINT
+ *  \param  src    source EC_POINT object
+ *  \param  group  underlying the EC_GROUP object
+ *  \return newly created EC_POINT object or NULL if an error occurred
+ */
+EC_POINT *EC_POINT_dup(const EC_POINT *src, const EC_GROUP *group);
+
+/** Returns the EC_METHOD used in EC_POINT object
+ *  \param  point  EC_POINT object
+ *  \return the EC_METHOD used
+ */
+const EC_METHOD *EC_POINT_method_of(const EC_POINT *point);
+
+/** Sets a point to infinity (neutral element)
+ *  \param  group  underlying EC_GROUP object
+ *  \param  point  EC_POINT to set to infinity
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_POINT_set_to_infinity(const EC_GROUP *group, EC_POINT *point);
+
+/** Sets the jacobian projective coordinates of a EC_POINT over GFp
+ *  \param  group  underlying EC_GROUP object
+ *  \param  p      EC_POINT object
+ *  \param  x      BIGNUM with the x-coordinate
+ *  \param  y      BIGNUM with the y-coordinate
+ *  \param  z      BIGNUM with the z-coordinate
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_POINT_set_Jprojective_coordinates_GFp(const EC_GROUP *group,
+                                             EC_POINT *p, const BIGNUM *x,
+                                             const BIGNUM *y, const BIGNUM *z,
+                                             BN_CTX *ctx);
+
+/** Gets the jacobian projective coordinates of a EC_POINT over GFp
+ *  \param  group  underlying EC_GROUP object
+ *  \param  p      EC_POINT object
+ *  \param  x      BIGNUM for the x-coordinate
+ *  \param  y      BIGNUM for the y-coordinate
+ *  \param  z      BIGNUM for the z-coordinate
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_POINT_get_Jprojective_coordinates_GFp(const EC_GROUP *group,
+                                             const EC_POINT *p, BIGNUM *x,
+                                             BIGNUM *y, BIGNUM *z,
+                                             BN_CTX *ctx);
+
+/** Sets the affine coordinates of an EC_POINT
+ *  \param  group  underlying EC_GROUP object
+ *  \param  p      EC_POINT object
+ *  \param  x      BIGNUM with the x-coordinate
+ *  \param  y      BIGNUM with the y-coordinate
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_POINT_set_affine_coordinates(const EC_GROUP *group, EC_POINT *p,
+                                    const BIGNUM *x, const BIGNUM *y,
+                                    BN_CTX *ctx);
+
+/** Gets the affine coordinates of an EC_POINT.
+ *  \param  group  underlying EC_GROUP object
+ *  \param  p      EC_POINT object
+ *  \param  x      BIGNUM for the x-coordinate
+ *  \param  y      BIGNUM for the y-coordinate
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_POINT_get_affine_coordinates(const EC_GROUP *group, const EC_POINT *p,
+                                    BIGNUM *x, BIGNUM *y, BN_CTX *ctx);
+
+/** Sets the affine coordinates of an EC_POINT. A synonym of
+ *  EC_POINT_set_affine_coordinates
+ *  \param  group  underlying EC_GROUP object
+ *  \param  p      EC_POINT object
+ *  \param  x      BIGNUM with the x-coordinate
+ *  \param  y      BIGNUM with the y-coordinate
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+DEPRECATEDIN_1_2_0(int EC_POINT_set_affine_coordinates_GFp(const EC_GROUP *group,
+                                                           EC_POINT *p,
+                                                           const BIGNUM *x,
+                                                           const BIGNUM *y,
+                                                           BN_CTX *ctx))
+
+/** Gets the affine coordinates of an EC_POINT. A synonym of
+ *  EC_POINT_get_affine_coordinates
+ *  \param  group  underlying EC_GROUP object
+ *  \param  p      EC_POINT object
+ *  \param  x      BIGNUM for the x-coordinate
+ *  \param  y      BIGNUM for the y-coordinate
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+DEPRECATEDIN_1_2_0(int EC_POINT_get_affine_coordinates_GFp(const EC_GROUP *group,
+                                                           const EC_POINT *p,
+                                                           BIGNUM *x,
+                                                           BIGNUM *y,
+                                                           BN_CTX *ctx))
+
+/** Sets the x9.62 compressed coordinates of a EC_POINT
+ *  \param  group  underlying EC_GROUP object
+ *  \param  p      EC_POINT object
+ *  \param  x      BIGNUM with x-coordinate
+ *  \param  y_bit  integer with the y-Bit (either 0 or 1)
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_POINT_set_compressed_coordinates(const EC_GROUP *group, EC_POINT *p,
+                                        const BIGNUM *x, int y_bit,
+                                        BN_CTX *ctx);
+
+/** Sets the x9.62 compressed coordinates of a EC_POINT. A synonym of
+ *  EC_POINT_set_compressed_coordinates
+ *  \param  group  underlying EC_GROUP object
+ *  \param  p      EC_POINT object
+ *  \param  x      BIGNUM with x-coordinate
+ *  \param  y_bit  integer with the y-Bit (either 0 or 1)
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+DEPRECATEDIN_1_2_0(int EC_POINT_set_compressed_coordinates_GFp(const EC_GROUP *group,
+                                                               EC_POINT *p,
+                                                               const BIGNUM *x,
+                                                               int y_bit,
+                                                               BN_CTX *ctx))
+# ifndef OPENSSL_NO_EC2M
+/** Sets the affine coordinates of an EC_POINT. A synonym of
+ *  EC_POINT_set_affine_coordinates
+ *  \param  group  underlying EC_GROUP object
+ *  \param  p      EC_POINT object
+ *  \param  x      BIGNUM with the x-coordinate
+ *  \param  y      BIGNUM with the y-coordinate
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+DEPRECATEDIN_1_2_0(int EC_POINT_set_affine_coordinates_GF2m(const EC_GROUP *group,
+                                                            EC_POINT *p,
+                                                            const BIGNUM *x,
+                                                            const BIGNUM *y,
+                                                            BN_CTX *ctx))
+
+/** Gets the affine coordinates of an EC_POINT. A synonym of
+ *  EC_POINT_get_affine_coordinates
+ *  \param  group  underlying EC_GROUP object
+ *  \param  p      EC_POINT object
+ *  \param  x      BIGNUM for the x-coordinate
+ *  \param  y      BIGNUM for the y-coordinate
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+DEPRECATEDIN_1_2_0(int EC_POINT_get_affine_coordinates_GF2m(const EC_GROUP *group,
+                                                            const EC_POINT *p,
+                                                            BIGNUM *x,
+                                                            BIGNUM *y,
+                                                            BN_CTX *ctx))
+
+/** Sets the x9.62 compressed coordinates of a EC_POINT. A synonym of
+ *  EC_POINT_set_compressed_coordinates
+ *  \param  group  underlying EC_GROUP object
+ *  \param  p      EC_POINT object
+ *  \param  x      BIGNUM with x-coordinate
+ *  \param  y_bit  integer with the y-Bit (either 0 or 1)
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+DEPRECATEDIN_1_2_0(int EC_POINT_set_compressed_coordinates_GF2m(const EC_GROUP *group,
+                                                                EC_POINT *p,
+                                                                const BIGNUM *x,
+                                                                int y_bit,
+                                                                BN_CTX *ctx))
+# endif
+/** Encodes a EC_POINT object to a octet string
+ *  \param  group  underlying EC_GROUP object
+ *  \param  p      EC_POINT object
+ *  \param  form   point conversion form
+ *  \param  buf    memory buffer for the result. If NULL the function returns
+ *                 required buffer size.
+ *  \param  len    length of the memory buffer
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return the length of the encoded octet string or 0 if an error occurred
+ */
+size_t EC_POINT_point2oct(const EC_GROUP *group, const EC_POINT *p,
+                          point_conversion_form_t form,
+                          unsigned char *buf, size_t len, BN_CTX *ctx);
+
+/** Decodes a EC_POINT from a octet string
+ *  \param  group  underlying EC_GROUP object
+ *  \param  p      EC_POINT object
+ *  \param  buf    memory buffer with the encoded ec point
+ *  \param  len    length of the encoded ec point
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_POINT_oct2point(const EC_GROUP *group, EC_POINT *p,
+                       const unsigned char *buf, size_t len, BN_CTX *ctx);
+
+/** Encodes an EC_POINT object to an allocated octet string
+ *  \param  group  underlying EC_GROUP object
+ *  \param  point  EC_POINT object
+ *  \param  form   point conversion form
+ *  \param  pbuf   returns pointer to allocated buffer
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return the length of the encoded octet string or 0 if an error occurred
+ */
+size_t EC_POINT_point2buf(const EC_GROUP *group, const EC_POINT *point,
+                          point_conversion_form_t form,
+                          unsigned char **pbuf, BN_CTX *ctx);
+
+/* other interfaces to point2oct/oct2point: */
+BIGNUM *EC_POINT_point2bn(const EC_GROUP *, const EC_POINT *,
+                          point_conversion_form_t form, BIGNUM *, BN_CTX *);
+EC_POINT *EC_POINT_bn2point(const EC_GROUP *, const BIGNUM *,
+                            EC_POINT *, BN_CTX *);
+char *EC_POINT_point2hex(const EC_GROUP *, const EC_POINT *,
+                         point_conversion_form_t form, BN_CTX *);
+EC_POINT *EC_POINT_hex2point(const EC_GROUP *, const char *,
+                             EC_POINT *, BN_CTX *);
+
+/********************************************************************/
+/*         functions for doing EC_POINT arithmetic                  */
+/********************************************************************/
+
+/** Computes the sum of two EC_POINT
+ *  \param  group  underlying EC_GROUP object
+ *  \param  r      EC_POINT object for the result (r = a + b)
+ *  \param  a      EC_POINT object with the first summand
+ *  \param  b      EC_POINT object with the second summand
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_POINT_add(const EC_GROUP *group, EC_POINT *r, const EC_POINT *a,
+                 const EC_POINT *b, BN_CTX *ctx);
+
+/** Computes the double of a EC_POINT
+ *  \param  group  underlying EC_GROUP object
+ *  \param  r      EC_POINT object for the result (r = 2 * a)
+ *  \param  a      EC_POINT object
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_POINT_dbl(const EC_GROUP *group, EC_POINT *r, const EC_POINT *a,
+                 BN_CTX *ctx);
+
+/** Computes the inverse of a EC_POINT
+ *  \param  group  underlying EC_GROUP object
+ *  \param  a      EC_POINT object to be inverted (it's used for the result as well)
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_POINT_invert(const EC_GROUP *group, EC_POINT *a, BN_CTX *ctx);
+
+/** Checks whether the point is the neutral element of the group
+ *  \param  group  the underlying EC_GROUP object
+ *  \param  p      EC_POINT object
+ *  \return 1 if the point is the neutral element and 0 otherwise
+ */
+int EC_POINT_is_at_infinity(const EC_GROUP *group, const EC_POINT *p);
+
+/** Checks whether the point is on the curve
+ *  \param  group  underlying EC_GROUP object
+ *  \param  point  EC_POINT object to check
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 if the point is on the curve, 0 if not, or -1 on error
+ */
+int EC_POINT_is_on_curve(const EC_GROUP *group, const EC_POINT *point,
+                         BN_CTX *ctx);
+
+/** Compares two EC_POINTs
+ *  \param  group  underlying EC_GROUP object
+ *  \param  a      first EC_POINT object
+ *  \param  b      second EC_POINT object
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 if the points are not equal, 0 if they are, or -1 on error
+ */
+int EC_POINT_cmp(const EC_GROUP *group, const EC_POINT *a, const EC_POINT *b,
+                 BN_CTX *ctx);
+
+int EC_POINT_make_affine(const EC_GROUP *group, EC_POINT *point, BN_CTX *ctx);
+int EC_POINTs_make_affine(const EC_GROUP *group, size_t num,
+                          EC_POINT *points[], BN_CTX *ctx);
+
+/** Computes r = generator * n + sum_{i=0}^{num-1} p[i] * m[i]
+ *  \param  group  underlying EC_GROUP object
+ *  \param  r      EC_POINT object for the result
+ *  \param  n      BIGNUM with the multiplier for the group generator (optional)
+ *  \param  num    number further summands
+ *  \param  p      array of size num of EC_POINT objects
+ *  \param  m      array of size num of BIGNUM objects
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_POINTs_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *n,
+                  size_t num, const EC_POINT *p[], const BIGNUM *m[],
+                  BN_CTX *ctx);
+
+/** Computes r = generator * n + q * m
+ *  \param  group  underlying EC_GROUP object
+ *  \param  r      EC_POINT object for the result
+ *  \param  n      BIGNUM with the multiplier for the group generator (optional)
+ *  \param  q      EC_POINT object with the first factor of the second summand
+ *  \param  m      BIGNUM with the second factor of the second summand
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_POINT_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *n,
+                 const EC_POINT *q, const BIGNUM *m, BN_CTX *ctx);
+
+/** Stores multiples of generator for faster point multiplication
+ *  \param  group  EC_GROUP object
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_GROUP_precompute_mult(EC_GROUP *group, BN_CTX *ctx);
+
+/** Reports whether a precomputation has been done
+ *  \param  group  EC_GROUP object
+ *  \return 1 if a pre-computation has been done and 0 otherwise
+ */
+int EC_GROUP_have_precompute_mult(const EC_GROUP *group);
+
+/********************************************************************/
+/*                       ASN1 stuff                                 */
+/********************************************************************/
+
+DECLARE_ASN1_ITEM(ECPKPARAMETERS)
+DECLARE_ASN1_ALLOC_FUNCTIONS(ECPKPARAMETERS)
+DECLARE_ASN1_ITEM(ECPARAMETERS)
+DECLARE_ASN1_ALLOC_FUNCTIONS(ECPARAMETERS)
+
+/*
+ * EC_GROUP_get_basis_type() returns the NID of the basis type used to
+ * represent the field elements
+ */
+int EC_GROUP_get_basis_type(const EC_GROUP *);
+# ifndef OPENSSL_NO_EC2M
+int EC_GROUP_get_trinomial_basis(const EC_GROUP *, unsigned int *k);
+int EC_GROUP_get_pentanomial_basis(const EC_GROUP *, unsigned int *k1,
+                                   unsigned int *k2, unsigned int *k3);
+# endif
+
+# define OPENSSL_EC_EXPLICIT_CURVE  0x000
+# define OPENSSL_EC_NAMED_CURVE     0x001
+
+EC_GROUP *d2i_ECPKParameters(EC_GROUP **, const unsigned char **in, long len);
+int i2d_ECPKParameters(const EC_GROUP *, unsigned char **out);
+
+# define d2i_ECPKParameters_bio(bp,x) ASN1_d2i_bio_of(EC_GROUP,NULL,d2i_ECPKParameters,bp,x)
+# define i2d_ECPKParameters_bio(bp,x) ASN1_i2d_bio_of_const(EC_GROUP,i2d_ECPKParameters,bp,x)
+# define d2i_ECPKParameters_fp(fp,x) (EC_GROUP *)ASN1_d2i_fp(NULL, \
+                (char *(*)())d2i_ECPKParameters,(fp),(unsigned char **)(x))
+# define i2d_ECPKParameters_fp(fp,x) ASN1_i2d_fp(i2d_ECPKParameters,(fp), \
+                (unsigned char *)(x))
+
+int ECPKParameters_print(BIO *bp, const EC_GROUP *x, int off);
+# ifndef OPENSSL_NO_STDIO
+int ECPKParameters_print_fp(FILE *fp, const EC_GROUP *x, int off);
+# endif
+
+/********************************************************************/
+/*                      EC_KEY functions                            */
+/********************************************************************/
+
+/* some values for the encoding_flag */
+# define EC_PKEY_NO_PARAMETERS   0x001
+# define EC_PKEY_NO_PUBKEY       0x002
+
+/* some values for the flags field */
+# define EC_FLAG_NON_FIPS_ALLOW  0x1
+# define EC_FLAG_FIPS_CHECKED    0x2
+# define EC_FLAG_COFACTOR_ECDH   0x1000
+
+/** Creates a new EC_KEY object.
+ *  \return EC_KEY object or NULL if an error occurred.
+ */
+EC_KEY *EC_KEY_new(void);
+
+int EC_KEY_get_flags(const EC_KEY *key);
+
+void EC_KEY_set_flags(EC_KEY *key, int flags);
+
+void EC_KEY_clear_flags(EC_KEY *key, int flags);
+
+/** Creates a new EC_KEY object using a named curve as underlying
+ *  EC_GROUP object.
+ *  \param  nid  NID of the named curve.
+ *  \return EC_KEY object or NULL if an error occurred.
+ */
+EC_KEY *EC_KEY_new_by_curve_name(int nid);
+
+/** Frees a EC_KEY object.
+ *  \param  key  EC_KEY object to be freed.
+ */
+void EC_KEY_free(EC_KEY *key);
+
+/** Copies a EC_KEY object.
+ *  \param  dst  destination EC_KEY object
+ *  \param  src  src EC_KEY object
+ *  \return dst or NULL if an error occurred.
+ */
+EC_KEY *EC_KEY_copy(EC_KEY *dst, const EC_KEY *src);
+
+/** Creates a new EC_KEY object and copies the content from src to it.
+ *  \param  src  the source EC_KEY object
+ *  \return newly created EC_KEY object or NULL if an error occurred.
+ */
+EC_KEY *EC_KEY_dup(const EC_KEY *src);
+
+/** Increases the internal reference count of a EC_KEY object.
+ *  \param  key  EC_KEY object
+ *  \return 1 on success and 0 if an error occurred.
+ */
+int EC_KEY_up_ref(EC_KEY *key);
+
+/** Returns the ENGINE object of a EC_KEY object
+ *  \param  eckey  EC_KEY object
+ *  \return the ENGINE object (possibly NULL).
+ */
+ENGINE *EC_KEY_get0_engine(const EC_KEY *eckey);
+
+/** Returns the EC_GROUP object of a EC_KEY object
+ *  \param  key  EC_KEY object
+ *  \return the EC_GROUP object (possibly NULL).
+ */
+const EC_GROUP *EC_KEY_get0_group(const EC_KEY *key);
+
+/** Sets the EC_GROUP of a EC_KEY object.
+ *  \param  key    EC_KEY object
+ *  \param  group  EC_GROUP to use in the EC_KEY object (note: the EC_KEY
+ *                 object will use an own copy of the EC_GROUP).
+ *  \return 1 on success and 0 if an error occurred.
+ */
+int EC_KEY_set_group(EC_KEY *key, const EC_GROUP *group);
+
+/** Returns the private key of a EC_KEY object.
+ *  \param  key  EC_KEY object
+ *  \return a BIGNUM with the private key (possibly NULL).
+ */
+const BIGNUM *EC_KEY_get0_private_key(const EC_KEY *key);
+
+/** Sets the private key of a EC_KEY object.
+ *  \param  key  EC_KEY object
+ *  \param  prv  BIGNUM with the private key (note: the EC_KEY object
+ *               will use an own copy of the BIGNUM).
+ *  \return 1 on success and 0 if an error occurred.
+ */
+int EC_KEY_set_private_key(EC_KEY *key, const BIGNUM *prv);
+
+/** Returns the public key of a EC_KEY object.
+ *  \param  key  the EC_KEY object
+ *  \return a EC_POINT object with the public key (possibly NULL)
+ */
+const EC_POINT *EC_KEY_get0_public_key(const EC_KEY *key);
+
+/** Sets the public key of a EC_KEY object.
+ *  \param  key  EC_KEY object
+ *  \param  pub  EC_POINT object with the public key (note: the EC_KEY object
+ *               will use an own copy of the EC_POINT object).
+ *  \return 1 on success and 0 if an error occurred.
+ */
+int EC_KEY_set_public_key(EC_KEY *key, const EC_POINT *pub);
+
+unsigned EC_KEY_get_enc_flags(const EC_KEY *key);
+void EC_KEY_set_enc_flags(EC_KEY *eckey, unsigned int flags);
+point_conversion_form_t EC_KEY_get_conv_form(const EC_KEY *key);
+void EC_KEY_set_conv_form(EC_KEY *eckey, point_conversion_form_t cform);
+
+#define EC_KEY_get_ex_new_index(l, p, newf, dupf, freef) \
+    CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_EC_KEY, l, p, newf, dupf, freef)
+int EC_KEY_set_ex_data(EC_KEY *key, int idx, void *arg);
+void *EC_KEY_get_ex_data(const EC_KEY *key, int idx);
+
+/* wrapper functions for the underlying EC_GROUP object */
+void EC_KEY_set_asn1_flag(EC_KEY *eckey, int asn1_flag);
+
+/** Creates a table of pre-computed multiples of the generator to
+ *  accelerate further EC_KEY operations.
+ *  \param  key  EC_KEY object
+ *  \param  ctx  BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred.
+ */
+int EC_KEY_precompute_mult(EC_KEY *key, BN_CTX *ctx);
+
+/** Creates a new ec private (and optional a new public) key.
+ *  \param  key  EC_KEY object
+ *  \return 1 on success and 0 if an error occurred.
+ */
+int EC_KEY_generate_key(EC_KEY *key);
+
+/** Verifies that a private and/or public key is valid.
+ *  \param  key  the EC_KEY object
+ *  \return 1 on success and 0 otherwise.
+ */
+int EC_KEY_check_key(const EC_KEY *key);
+
+/** Indicates if an EC_KEY can be used for signing.
+ *  \param  eckey  the EC_KEY object
+ *  \return 1 if can can sign and 0 otherwise.
+ */
+int EC_KEY_can_sign(const EC_KEY *eckey);
+
+/** Sets a public key from affine coordinates performing
+ *  necessary NIST PKV tests.
+ *  \param  key  the EC_KEY object
+ *  \param  x    public key x coordinate
+ *  \param  y    public key y coordinate
+ *  \return 1 on success and 0 otherwise.
+ */
+int EC_KEY_set_public_key_affine_coordinates(EC_KEY *key, BIGNUM *x,
+                                             BIGNUM *y);
+
+/** Encodes an EC_KEY public key to an allocated octet string
+ *  \param  key    key to encode
+ *  \param  form   point conversion form
+ *  \param  pbuf   returns pointer to allocated buffer
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return the length of the encoded octet string or 0 if an error occurred
+ */
+size_t EC_KEY_key2buf(const EC_KEY *key, point_conversion_form_t form,
+                      unsigned char **pbuf, BN_CTX *ctx);
+
+/** Decodes a EC_KEY public key from a octet string
+ *  \param  key    key to decode
+ *  \param  buf    memory buffer with the encoded ec point
+ *  \param  len    length of the encoded ec point
+ *  \param  ctx    BN_CTX object (optional)
+ *  \return 1 on success and 0 if an error occurred
+ */
+
+int EC_KEY_oct2key(EC_KEY *key, const unsigned char *buf, size_t len,
+                   BN_CTX *ctx);
+
+/** Decodes an EC_KEY private key from an octet string
+ *  \param  key    key to decode
+ *  \param  buf    memory buffer with the encoded private key
+ *  \param  len    length of the encoded key
+ *  \return 1 on success and 0 if an error occurred
+ */
+
+int EC_KEY_oct2priv(EC_KEY *key, const unsigned char *buf, size_t len);
+
+/** Encodes a EC_KEY private key to an octet string
+ *  \param  key    key to encode
+ *  \param  buf    memory buffer for the result. If NULL the function returns
+ *                 required buffer size.
+ *  \param  len    length of the memory buffer
+ *  \return the length of the encoded octet string or 0 if an error occurred
+ */
+
+size_t EC_KEY_priv2oct(const EC_KEY *key, unsigned char *buf, size_t len);
+
+/** Encodes an EC_KEY private key to an allocated octet string
+ *  \param  eckey  key to encode
+ *  \param  pbuf   returns pointer to allocated buffer
+ *  \return the length of the encoded octet string or 0 if an error occurred
+ */
+size_t EC_KEY_priv2buf(const EC_KEY *eckey, unsigned char **pbuf);
+
+/********************************************************************/
+/*        de- and encoding functions for SEC1 ECPrivateKey          */
+/********************************************************************/
+
+/** Decodes a private key from a memory buffer.
+ *  \param  key  a pointer to a EC_KEY object which should be used (or NULL)
+ *  \param  in   pointer to memory with the DER encoded private key
+ *  \param  len  length of the DER encoded private key
+ *  \return the decoded private key or NULL if an error occurred.
+ */
+EC_KEY *d2i_ECPrivateKey(EC_KEY **key, const unsigned char **in, long len);
+
+/** Encodes a private key object and stores the result in a buffer.
+ *  \param  key  the EC_KEY object to encode
+ *  \param  out  the buffer for the result (if NULL the function returns number
+ *               of bytes needed).
+ *  \return 1 on success and 0 if an error occurred.
+ */
+int i2d_ECPrivateKey(EC_KEY *key, unsigned char **out);
+
+/********************************************************************/
+/*        de- and encoding functions for EC parameters              */
+/********************************************************************/
+
+/** Decodes ec parameter from a memory buffer.
+ *  \param  key  a pointer to a EC_KEY object which should be used (or NULL)
+ *  \param  in   pointer to memory with the DER encoded ec parameters
+ *  \param  len  length of the DER encoded ec parameters
+ *  \return a EC_KEY object with the decoded parameters or NULL if an error
+ *          occurred.
+ */
+EC_KEY *d2i_ECParameters(EC_KEY **key, const unsigned char **in, long len);
+
+/** Encodes ec parameter and stores the result in a buffer.
+ *  \param  key  the EC_KEY object with ec parameters to encode
+ *  \param  out  the buffer for the result (if NULL the function returns number
+ *               of bytes needed).
+ *  \return 1 on success and 0 if an error occurred.
+ */
+int i2d_ECParameters(EC_KEY *key, unsigned char **out);
+
+/********************************************************************/
+/*         de- and encoding functions for EC public key             */
+/*         (octet string, not DER -- hence 'o2i' and 'i2o')         */
+/********************************************************************/
+
+/** Decodes a ec public key from a octet string.
+ *  \param  key  a pointer to a EC_KEY object which should be used
+ *  \param  in   memory buffer with the encoded public key
+ *  \param  len  length of the encoded public key
+ *  \return EC_KEY object with decoded public key or NULL if an error
+ *          occurred.
+ */
+EC_KEY *o2i_ECPublicKey(EC_KEY **key, const unsigned char **in, long len);
+
+/** Encodes a ec public key in an octet string.
+ *  \param  key  the EC_KEY object with the public key
+ *  \param  out  the buffer for the result (if NULL the function returns number
+ *               of bytes needed).
+ *  \return 1 on success and 0 if an error occurred
+ */
+int i2o_ECPublicKey(const EC_KEY *key, unsigned char **out);
+
+/** Prints out the ec parameters on human readable form.
+ *  \param  bp   BIO object to which the information is printed
+ *  \param  key  EC_KEY object
+ *  \return 1 on success and 0 if an error occurred
+ */
+int ECParameters_print(BIO *bp, const EC_KEY *key);
+
+/** Prints out the contents of a EC_KEY object
+ *  \param  bp   BIO object to which the information is printed
+ *  \param  key  EC_KEY object
+ *  \param  off  line offset
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_KEY_print(BIO *bp, const EC_KEY *key, int off);
+
+# ifndef OPENSSL_NO_STDIO
+/** Prints out the ec parameters on human readable form.
+ *  \param  fp   file descriptor to which the information is printed
+ *  \param  key  EC_KEY object
+ *  \return 1 on success and 0 if an error occurred
+ */
+int ECParameters_print_fp(FILE *fp, const EC_KEY *key);
+
+/** Prints out the contents of a EC_KEY object
+ *  \param  fp   file descriptor to which the information is printed
+ *  \param  key  EC_KEY object
+ *  \param  off  line offset
+ *  \return 1 on success and 0 if an error occurred
+ */
+int EC_KEY_print_fp(FILE *fp, const EC_KEY *key, int off);
+
+# endif
+
+const EC_KEY_METHOD *EC_KEY_OpenSSL(void);
+const EC_KEY_METHOD *EC_KEY_get_default_method(void);
+void EC_KEY_set_default_method(const EC_KEY_METHOD *meth);
+const EC_KEY_METHOD *EC_KEY_get_method(const EC_KEY *key);
+int EC_KEY_set_method(EC_KEY *key, const EC_KEY_METHOD *meth);
+EC_KEY *EC_KEY_new_method(ENGINE *engine);
+
+/** The old name for ecdh_KDF_X9_63
+ *  The ECDH KDF specification has been mistakingly attributed to ANSI X9.62,
+ *  it is actually specified in ANSI X9.63.
+ *  This identifier is retained for backwards compatibility
+ */
+int ECDH_KDF_X9_62(unsigned char *out, size_t outlen,
+                   const unsigned char *Z, size_t Zlen,
+                   const unsigned char *sinfo, size_t sinfolen,
+                   const EVP_MD *md);
+
+int ECDH_compute_key(void *out, size_t outlen, const EC_POINT *pub_key,
+                     const EC_KEY *ecdh,
+                     void *(*KDF) (const void *in, size_t inlen,
+                                   void *out, size_t *outlen));
+
+typedef struct ECDSA_SIG_st ECDSA_SIG;
+
+/** Allocates and initialize a ECDSA_SIG structure
+ *  \return pointer to a ECDSA_SIG structure or NULL if an error occurred
+ */
+ECDSA_SIG *ECDSA_SIG_new(void);
+
+/** frees a ECDSA_SIG structure
+ *  \param  sig  pointer to the ECDSA_SIG structure
+ */
+void ECDSA_SIG_free(ECDSA_SIG *sig);
+
+/** DER encode content of ECDSA_SIG object (note: this function modifies *pp
+ *  (*pp += length of the DER encoded signature)).
+ *  \param  sig  pointer to the ECDSA_SIG object
+ *  \param  pp   pointer to a unsigned char pointer for the output or NULL
+ *  \return the length of the DER encoded ECDSA_SIG object or 0
+ */
+int i2d_ECDSA_SIG(const ECDSA_SIG *sig, unsigned char **pp);
+
+/** Decodes a DER encoded ECDSA signature (note: this function changes *pp
+ *  (*pp += len)).
+ *  \param  sig  pointer to ECDSA_SIG pointer (may be NULL)
+ *  \param  pp   memory buffer with the DER encoded signature
+ *  \param  len  length of the buffer
+ *  \return pointer to the decoded ECDSA_SIG structure (or NULL)
+ */
+ECDSA_SIG *d2i_ECDSA_SIG(ECDSA_SIG **sig, const unsigned char **pp, long len);
+
+/** Accessor for r and s fields of ECDSA_SIG
+ *  \param  sig  pointer to ECDSA_SIG structure
+ *  \param  pr   pointer to BIGNUM pointer for r (may be NULL)
+ *  \param  ps   pointer to BIGNUM pointer for s (may be NULL)
+ */
+void ECDSA_SIG_get0(const ECDSA_SIG *sig, const BIGNUM **pr, const BIGNUM **ps);
+
+/** Accessor for r field of ECDSA_SIG
+ *  \param  sig  pointer to ECDSA_SIG structure
+ */
+const BIGNUM *ECDSA_SIG_get0_r(const ECDSA_SIG *sig);
+
+/** Accessor for s field of ECDSA_SIG
+ *  \param  sig  pointer to ECDSA_SIG structure
+ */
+const BIGNUM *ECDSA_SIG_get0_s(const ECDSA_SIG *sig);
+
+/** Setter for r and s fields of ECDSA_SIG
+ *  \param  sig  pointer to ECDSA_SIG structure
+ *  \param  r    pointer to BIGNUM for r (may be NULL)
+ *  \param  s    pointer to BIGNUM for s (may be NULL)
+ */
+int ECDSA_SIG_set0(ECDSA_SIG *sig, BIGNUM *r, BIGNUM *s);
+
+/** Computes the ECDSA signature of the given hash value using
+ *  the supplied private key and returns the created signature.
+ *  \param  dgst      pointer to the hash value
+ *  \param  dgst_len  length of the hash value
+ *  \param  eckey     EC_KEY object containing a private EC key
+ *  \return pointer to a ECDSA_SIG structure or NULL if an error occurred
+ */
+ECDSA_SIG *ECDSA_do_sign(const unsigned char *dgst, int dgst_len,
+                         EC_KEY *eckey);
+
+/** Computes ECDSA signature of a given hash value using the supplied
+ *  private key (note: sig must point to ECDSA_size(eckey) bytes of memory).
+ *  \param  dgst     pointer to the hash value to sign
+ *  \param  dgstlen  length of the hash value
+ *  \param  kinv     BIGNUM with a pre-computed inverse k (optional)
+ *  \param  rp       BIGNUM with a pre-computed rp value (optional),
+ *                   see ECDSA_sign_setup
+ *  \param  eckey    EC_KEY object containing a private EC key
+ *  \return pointer to a ECDSA_SIG structure or NULL if an error occurred
+ */
+ECDSA_SIG *ECDSA_do_sign_ex(const unsigned char *dgst, int dgstlen,
+                            const BIGNUM *kinv, const BIGNUM *rp,
+                            EC_KEY *eckey);
+
+/** Verifies that the supplied signature is a valid ECDSA
+ *  signature of the supplied hash value using the supplied public key.
+ *  \param  dgst      pointer to the hash value
+ *  \param  dgst_len  length of the hash value
+ *  \param  sig       ECDSA_SIG structure
+ *  \param  eckey     EC_KEY object containing a public EC key
+ *  \return 1 if the signature is valid, 0 if the signature is invalid
+ *          and -1 on error
+ */
+int ECDSA_do_verify(const unsigned char *dgst, int dgst_len,
+                    const ECDSA_SIG *sig, EC_KEY *eckey);
+
+/** Precompute parts of the signing operation
+ *  \param  eckey  EC_KEY object containing a private EC key
+ *  \param  ctx    BN_CTX object (optional)
+ *  \param  kinv   BIGNUM pointer for the inverse of k
+ *  \param  rp     BIGNUM pointer for x coordinate of k * generator
+ *  \return 1 on success and 0 otherwise
+ */
+int ECDSA_sign_setup(EC_KEY *eckey, BN_CTX *ctx, BIGNUM **kinv, BIGNUM **rp);
+
+/** Computes ECDSA signature of a given hash value using the supplied
+ *  private key (note: sig must point to ECDSA_size(eckey) bytes of memory).
+ *  \param  type     this parameter is ignored
+ *  \param  dgst     pointer to the hash value to sign
+ *  \param  dgstlen  length of the hash value
+ *  \param  sig      memory for the DER encoded created signature
+ *  \param  siglen   pointer to the length of the returned signature
+ *  \param  eckey    EC_KEY object containing a private EC key
+ *  \return 1 on success and 0 otherwise
+ */
+int ECDSA_sign(int type, const unsigned char *dgst, int dgstlen,
+               unsigned char *sig, unsigned int *siglen, EC_KEY *eckey);
+
+/** Computes ECDSA signature of a given hash value using the supplied
+ *  private key (note: sig must point to ECDSA_size(eckey) bytes of memory).
+ *  \param  type     this parameter is ignored
+ *  \param  dgst     pointer to the hash value to sign
+ *  \param  dgstlen  length of the hash value
+ *  \param  sig      buffer to hold the DER encoded signature
+ *  \param  siglen   pointer to the length of the returned signature
+ *  \param  kinv     BIGNUM with a pre-computed inverse k (optional)
+ *  \param  rp       BIGNUM with a pre-computed rp value (optional),
+ *                   see ECDSA_sign_setup
+ *  \param  eckey    EC_KEY object containing a private EC key
+ *  \return 1 on success and 0 otherwise
+ */
+int ECDSA_sign_ex(int type, const unsigned char *dgst, int dgstlen,
+                  unsigned char *sig, unsigned int *siglen,
+                  const BIGNUM *kinv, const BIGNUM *rp, EC_KEY *eckey);
+
+/** Verifies that the given signature is valid ECDSA signature
+ *  of the supplied hash value using the specified public key.
+ *  \param  type     this parameter is ignored
+ *  \param  dgst     pointer to the hash value
+ *  \param  dgstlen  length of the hash value
+ *  \param  sig      pointer to the DER encoded signature
+ *  \param  siglen   length of the DER encoded signature
+ *  \param  eckey    EC_KEY object containing a public EC key
+ *  \return 1 if the signature is valid, 0 if the signature is invalid
+ *          and -1 on error
+ */
+int ECDSA_verify(int type, const unsigned char *dgst, int dgstlen,
+                 const unsigned char *sig, int siglen, EC_KEY *eckey);
+
+/** Returns the maximum length of the DER encoded signature
+ *  \param  eckey  EC_KEY object
+ *  \return numbers of bytes required for the DER encoded signature
+ */
+int ECDSA_size(const EC_KEY *eckey);
+
+/********************************************************************/
+/*  EC_KEY_METHOD constructors, destructors, writers and accessors  */
+/********************************************************************/
+
+EC_KEY_METHOD *EC_KEY_METHOD_new(const EC_KEY_METHOD *meth);
+void EC_KEY_METHOD_free(EC_KEY_METHOD *meth);
+void EC_KEY_METHOD_set_init(EC_KEY_METHOD *meth,
+                            int (*init)(EC_KEY *key),
+                            void (*finish)(EC_KEY *key),
+                            int (*copy)(EC_KEY *dest, const EC_KEY *src),
+                            int (*set_group)(EC_KEY *key, const EC_GROUP *grp),
+                            int (*set_private)(EC_KEY *key,
+                                               const BIGNUM *priv_key),
+                            int (*set_public)(EC_KEY *key,
+                                              const EC_POINT *pub_key));
+
+void EC_KEY_METHOD_set_keygen(EC_KEY_METHOD *meth,
+                              int (*keygen)(EC_KEY *key));
+
+void EC_KEY_METHOD_set_compute_key(EC_KEY_METHOD *meth,
+                                   int (*ckey)(unsigned char **psec,
+                                               size_t *pseclen,
+                                               const EC_POINT *pub_key,
+                                               const EC_KEY *ecdh));
+
+void EC_KEY_METHOD_set_sign(EC_KEY_METHOD *meth,
+                            int (*sign)(int type, const unsigned char *dgst,
+                                        int dlen, unsigned char *sig,
+                                        unsigned int *siglen,
+                                        const BIGNUM *kinv, const BIGNUM *r,
+                                        EC_KEY *eckey),
+                            int (*sign_setup)(EC_KEY *eckey, BN_CTX *ctx_in,
+                                              BIGNUM **kinvp, BIGNUM **rp),
+                            ECDSA_SIG *(*sign_sig)(const unsigned char *dgst,
+                                                   int dgst_len,
+                                                   const BIGNUM *in_kinv,
+                                                   const BIGNUM *in_r,
+                                                   EC_KEY *eckey));
+
+void EC_KEY_METHOD_set_verify(EC_KEY_METHOD *meth,
+                              int (*verify)(int type, const unsigned
+                                            char *dgst, int dgst_len,
+                                            const unsigned char *sigbuf,
+                                            int sig_len, EC_KEY *eckey),
+                              int (*verify_sig)(const unsigned char *dgst,
+                                                int dgst_len,
+                                                const ECDSA_SIG *sig,
+                                                EC_KEY *eckey));
+
+void EC_KEY_METHOD_get_init(const EC_KEY_METHOD *meth,
+                            int (**pinit)(EC_KEY *key),
+                            void (**pfinish)(EC_KEY *key),
+                            int (**pcopy)(EC_KEY *dest, const EC_KEY *src),
+                            int (**pset_group)(EC_KEY *key,
+                                               const EC_GROUP *grp),
+                            int (**pset_private)(EC_KEY *key,
+                                                 const BIGNUM *priv_key),
+                            int (**pset_public)(EC_KEY *key,
+                                                const EC_POINT *pub_key));
+
+void EC_KEY_METHOD_get_keygen(const EC_KEY_METHOD *meth,
+                              int (**pkeygen)(EC_KEY *key));
+
+void EC_KEY_METHOD_get_compute_key(const EC_KEY_METHOD *meth,
+                                   int (**pck)(unsigned char **psec,
+                                               size_t *pseclen,
+                                               const EC_POINT *pub_key,
+                                               const EC_KEY *ecdh));
+
+void EC_KEY_METHOD_get_sign(const EC_KEY_METHOD *meth,
+                            int (**psign)(int type, const unsigned char *dgst,
+                                          int dlen, unsigned char *sig,
+                                          unsigned int *siglen,
+                                          const BIGNUM *kinv, const BIGNUM *r,
+                                          EC_KEY *eckey),
+                            int (**psign_setup)(EC_KEY *eckey, BN_CTX *ctx_in,
+                                                BIGNUM **kinvp, BIGNUM **rp),
+                            ECDSA_SIG *(**psign_sig)(const unsigned char *dgst,
+                                                     int dgst_len,
+                                                     const BIGNUM *in_kinv,
+                                                     const BIGNUM *in_r,
+                                                     EC_KEY *eckey));
+
+void EC_KEY_METHOD_get_verify(const EC_KEY_METHOD *meth,
+                              int (**pverify)(int type, const unsigned
+                                              char *dgst, int dgst_len,
+                                              const unsigned char *sigbuf,
+                                              int sig_len, EC_KEY *eckey),
+                              int (**pverify_sig)(const unsigned char *dgst,
+                                                  int dgst_len,
+                                                  const ECDSA_SIG *sig,
+                                                  EC_KEY *eckey));
+
+# define ECParameters_dup(x) ASN1_dup_of(EC_KEY,i2d_ECParameters,d2i_ECParameters,x)
+
+# ifndef __cplusplus
+#  if defined(__SUNPRO_C)
+#   if __SUNPRO_C >= 0x520
+#    pragma error_messages (default,E_ARRAY_OF_INCOMPLETE_NONAME,E_ARRAY_OF_INCOMPLETE)
+#   endif
+#  endif
+# endif
+
+# define EVP_PKEY_CTX_set_ec_paramgen_curve_nid(ctx, nid) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_EC, \
+                                EVP_PKEY_OP_PARAMGEN|EVP_PKEY_OP_KEYGEN, \
+                                EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID, nid, NULL)
+
+# define EVP_PKEY_CTX_set_ec_param_enc(ctx, flag) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_EC, \
+                                EVP_PKEY_OP_PARAMGEN|EVP_PKEY_OP_KEYGEN, \
+                                EVP_PKEY_CTRL_EC_PARAM_ENC, flag, NULL)
+
+# define EVP_PKEY_CTX_set_ecdh_cofactor_mode(ctx, flag) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_EC, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_EC_ECDH_COFACTOR, flag, NULL)
+
+# define EVP_PKEY_CTX_get_ecdh_cofactor_mode(ctx) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_EC, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_EC_ECDH_COFACTOR, -2, NULL)
+
+# define EVP_PKEY_CTX_set_ecdh_kdf_type(ctx, kdf) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_EC, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_EC_KDF_TYPE, kdf, NULL)
+
+# define EVP_PKEY_CTX_get_ecdh_kdf_type(ctx) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_EC, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_EC_KDF_TYPE, -2, NULL)
+
+# define EVP_PKEY_CTX_set_ecdh_kdf_md(ctx, md) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_EC, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_EC_KDF_MD, 0, (void *)(md))
+
+# define EVP_PKEY_CTX_get_ecdh_kdf_md(ctx, pmd) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_EC, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_GET_EC_KDF_MD, 0, (void *)(pmd))
+
+# define EVP_PKEY_CTX_set_ecdh_kdf_outlen(ctx, len) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_EC, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_EC_KDF_OUTLEN, len, NULL)
+
+# define EVP_PKEY_CTX_get_ecdh_kdf_outlen(ctx, plen) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_EC, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_GET_EC_KDF_OUTLEN, 0, \
+                                (void *)(plen))
+
+# define EVP_PKEY_CTX_set0_ecdh_kdf_ukm(ctx, p, plen) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_EC, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_EC_KDF_UKM, plen, (void *)(p))
+
+# define EVP_PKEY_CTX_get0_ecdh_kdf_ukm(ctx, p) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_EC, \
+                                EVP_PKEY_OP_DERIVE, \
+                                EVP_PKEY_CTRL_GET_EC_KDF_UKM, 0, (void *)(p))
+
+/* SM2 will skip the operation check so no need to pass operation here */
+# define EVP_PKEY_CTX_set1_id(ctx, id, id_len) \
+        EVP_PKEY_CTX_ctrl(ctx, -1, -1, \
+                                EVP_PKEY_CTRL_SET1_ID, (int)id_len, (void*)(id))
+
+# define EVP_PKEY_CTX_get1_id(ctx, id) \
+        EVP_PKEY_CTX_ctrl(ctx, -1, -1, \
+                                EVP_PKEY_CTRL_GET1_ID, 0, (void*)(id))
+
+# define EVP_PKEY_CTX_get1_id_len(ctx, id_len) \
+        EVP_PKEY_CTX_ctrl(ctx, -1, -1, \
+                                EVP_PKEY_CTRL_GET1_ID_LEN, 0, (void*)(id_len))
+
+# define EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID             (EVP_PKEY_ALG_CTRL + 1)
+# define EVP_PKEY_CTRL_EC_PARAM_ENC                      (EVP_PKEY_ALG_CTRL + 2)
+# define EVP_PKEY_CTRL_EC_ECDH_COFACTOR                  (EVP_PKEY_ALG_CTRL + 3)
+# define EVP_PKEY_CTRL_EC_KDF_TYPE                       (EVP_PKEY_ALG_CTRL + 4)
+# define EVP_PKEY_CTRL_EC_KDF_MD                         (EVP_PKEY_ALG_CTRL + 5)
+# define EVP_PKEY_CTRL_GET_EC_KDF_MD                     (EVP_PKEY_ALG_CTRL + 6)
+# define EVP_PKEY_CTRL_EC_KDF_OUTLEN                     (EVP_PKEY_ALG_CTRL + 7)
+# define EVP_PKEY_CTRL_GET_EC_KDF_OUTLEN                 (EVP_PKEY_ALG_CTRL + 8)
+# define EVP_PKEY_CTRL_EC_KDF_UKM                        (EVP_PKEY_ALG_CTRL + 9)
+# define EVP_PKEY_CTRL_GET_EC_KDF_UKM                    (EVP_PKEY_ALG_CTRL + 10)
+# define EVP_PKEY_CTRL_SET1_ID                           (EVP_PKEY_ALG_CTRL + 11)
+# define EVP_PKEY_CTRL_GET1_ID                           (EVP_PKEY_ALG_CTRL + 12)
+# define EVP_PKEY_CTRL_GET1_ID_LEN                       (EVP_PKEY_ALG_CTRL + 13)
+/* KDF types */
+# define EVP_PKEY_ECDH_KDF_NONE                          1
+# define EVP_PKEY_ECDH_KDF_X9_63                         2
+/** The old name for EVP_PKEY_ECDH_KDF_X9_63
+ *  The ECDH KDF specification has been mistakingly attributed to ANSI X9.62,
+ *  it is actually specified in ANSI X9.63.
+ *  This identifier is retained for backwards compatibility
+ */
+# define EVP_PKEY_ECDH_KDF_X9_62   EVP_PKEY_ECDH_KDF_X9_63
+
+
+#  ifdef  __cplusplus
+}
+#  endif
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/ecdh.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ecdh.h
new file mode 100644
index 000000000..681f3d5e5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ecdh.h
@@ -0,0 +1,10 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/ec.h>
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/ecdsa.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ecdsa.h
new file mode 100644
index 000000000..681f3d5e5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ecdsa.h
@@ -0,0 +1,10 @@
+/*
+ * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/ec.h>
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/ecerr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ecerr.h
new file mode 100644
index 000000000..be313d285
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ecerr.h
@@ -0,0 +1,271 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_ECERR_H
+# define HEADER_ECERR_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_EC
+
+#  ifdef  __cplusplus
+extern "C"
+#  endif
+int ERR_load_EC_strings(void);
+
+/*
+ * EC function codes.
+ */
+#  define EC_F_BN_TO_FELEM                                 224
+#  define EC_F_D2I_ECPARAMETERS                            144
+#  define EC_F_D2I_ECPKPARAMETERS                          145
+#  define EC_F_D2I_ECPRIVATEKEY                            146
+#  define EC_F_DO_EC_KEY_PRINT                             221
+#  define EC_F_ECDH_CMS_DECRYPT                            238
+#  define EC_F_ECDH_CMS_SET_SHARED_INFO                    239
+#  define EC_F_ECDH_COMPUTE_KEY                            246
+#  define EC_F_ECDH_SIMPLE_COMPUTE_KEY                     257
+#  define EC_F_ECDSA_DO_SIGN_EX                            251
+#  define EC_F_ECDSA_DO_VERIFY                             252
+#  define EC_F_ECDSA_SIGN_EX                               254
+#  define EC_F_ECDSA_SIGN_SETUP                            248
+#  define EC_F_ECDSA_SIG_NEW                               265
+#  define EC_F_ECDSA_VERIFY                                253
+#  define EC_F_ECD_ITEM_VERIFY                             270
+#  define EC_F_ECKEY_PARAM2TYPE                            223
+#  define EC_F_ECKEY_PARAM_DECODE                          212
+#  define EC_F_ECKEY_PRIV_DECODE                           213
+#  define EC_F_ECKEY_PRIV_ENCODE                           214
+#  define EC_F_ECKEY_PUB_DECODE                            215
+#  define EC_F_ECKEY_PUB_ENCODE                            216
+#  define EC_F_ECKEY_TYPE2PARAM                            220
+#  define EC_F_ECPARAMETERS_PRINT                          147
+#  define EC_F_ECPARAMETERS_PRINT_FP                       148
+#  define EC_F_ECPKPARAMETERS_PRINT                        149
+#  define EC_F_ECPKPARAMETERS_PRINT_FP                     150
+#  define EC_F_ECP_NISTZ256_GET_AFFINE                     240
+#  define EC_F_ECP_NISTZ256_INV_MOD_ORD                    275
+#  define EC_F_ECP_NISTZ256_MULT_PRECOMPUTE                243
+#  define EC_F_ECP_NISTZ256_POINTS_MUL                     241
+#  define EC_F_ECP_NISTZ256_PRE_COMP_NEW                   244
+#  define EC_F_ECP_NISTZ256_WINDOWED_MUL                   242
+#  define EC_F_ECX_KEY_OP                                  266
+#  define EC_F_ECX_PRIV_ENCODE                             267
+#  define EC_F_ECX_PUB_ENCODE                              268
+#  define EC_F_EC_ASN1_GROUP2CURVE                         153
+#  define EC_F_EC_ASN1_GROUP2FIELDID                       154
+#  define EC_F_EC_GF2M_MONTGOMERY_POINT_MULTIPLY           208
+#  define EC_F_EC_GF2M_SIMPLE_FIELD_INV                    296
+#  define EC_F_EC_GF2M_SIMPLE_GROUP_CHECK_DISCRIMINANT     159
+#  define EC_F_EC_GF2M_SIMPLE_GROUP_SET_CURVE              195
+#  define EC_F_EC_GF2M_SIMPLE_LADDER_POST                  285
+#  define EC_F_EC_GF2M_SIMPLE_LADDER_PRE                   288
+#  define EC_F_EC_GF2M_SIMPLE_OCT2POINT                    160
+#  define EC_F_EC_GF2M_SIMPLE_POINT2OCT                    161
+#  define EC_F_EC_GF2M_SIMPLE_POINTS_MUL                   289
+#  define EC_F_EC_GF2M_SIMPLE_POINT_GET_AFFINE_COORDINATES 162
+#  define EC_F_EC_GF2M_SIMPLE_POINT_SET_AFFINE_COORDINATES 163
+#  define EC_F_EC_GF2M_SIMPLE_SET_COMPRESSED_COORDINATES   164
+#  define EC_F_EC_GFP_MONT_FIELD_DECODE                    133
+#  define EC_F_EC_GFP_MONT_FIELD_ENCODE                    134
+#  define EC_F_EC_GFP_MONT_FIELD_INV                       297
+#  define EC_F_EC_GFP_MONT_FIELD_MUL                       131
+#  define EC_F_EC_GFP_MONT_FIELD_SET_TO_ONE                209
+#  define EC_F_EC_GFP_MONT_FIELD_SQR                       132
+#  define EC_F_EC_GFP_MONT_GROUP_SET_CURVE                 189
+#  define EC_F_EC_GFP_NISTP224_GROUP_SET_CURVE             225
+#  define EC_F_EC_GFP_NISTP224_POINTS_MUL                  228
+#  define EC_F_EC_GFP_NISTP224_POINT_GET_AFFINE_COORDINATES 226
+#  define EC_F_EC_GFP_NISTP256_GROUP_SET_CURVE             230
+#  define EC_F_EC_GFP_NISTP256_POINTS_MUL                  231
+#  define EC_F_EC_GFP_NISTP256_POINT_GET_AFFINE_COORDINATES 232
+#  define EC_F_EC_GFP_NISTP521_GROUP_SET_CURVE             233
+#  define EC_F_EC_GFP_NISTP521_POINTS_MUL                  234
+#  define EC_F_EC_GFP_NISTP521_POINT_GET_AFFINE_COORDINATES 235
+#  define EC_F_EC_GFP_NIST_FIELD_MUL                       200
+#  define EC_F_EC_GFP_NIST_FIELD_SQR                       201
+#  define EC_F_EC_GFP_NIST_GROUP_SET_CURVE                 202
+#  define EC_F_EC_GFP_SIMPLE_BLIND_COORDINATES             287
+#  define EC_F_EC_GFP_SIMPLE_FIELD_INV                     298
+#  define EC_F_EC_GFP_SIMPLE_GROUP_CHECK_DISCRIMINANT      165
+#  define EC_F_EC_GFP_SIMPLE_GROUP_SET_CURVE               166
+#  define EC_F_EC_GFP_SIMPLE_MAKE_AFFINE                   102
+#  define EC_F_EC_GFP_SIMPLE_OCT2POINT                     103
+#  define EC_F_EC_GFP_SIMPLE_POINT2OCT                     104
+#  define EC_F_EC_GFP_SIMPLE_POINTS_MAKE_AFFINE            137
+#  define EC_F_EC_GFP_SIMPLE_POINT_GET_AFFINE_COORDINATES  167
+#  define EC_F_EC_GFP_SIMPLE_POINT_SET_AFFINE_COORDINATES  168
+#  define EC_F_EC_GFP_SIMPLE_SET_COMPRESSED_COORDINATES    169
+#  define EC_F_EC_GROUP_CHECK                              170
+#  define EC_F_EC_GROUP_CHECK_DISCRIMINANT                 171
+#  define EC_F_EC_GROUP_COPY                               106
+#  define EC_F_EC_GROUP_GET_CURVE                          291
+#  define EC_F_EC_GROUP_GET_CURVE_GF2M                     172
+#  define EC_F_EC_GROUP_GET_CURVE_GFP                      130
+#  define EC_F_EC_GROUP_GET_DEGREE                         173
+#  define EC_F_EC_GROUP_GET_ECPARAMETERS                   261
+#  define EC_F_EC_GROUP_GET_ECPKPARAMETERS                 262
+#  define EC_F_EC_GROUP_GET_PENTANOMIAL_BASIS              193
+#  define EC_F_EC_GROUP_GET_TRINOMIAL_BASIS                194
+#  define EC_F_EC_GROUP_NEW                                108
+#  define EC_F_EC_GROUP_NEW_BY_CURVE_NAME                  174
+#  define EC_F_EC_GROUP_NEW_FROM_DATA                      175
+#  define EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS              263
+#  define EC_F_EC_GROUP_NEW_FROM_ECPKPARAMETERS            264
+#  define EC_F_EC_GROUP_SET_CURVE                          292
+#  define EC_F_EC_GROUP_SET_CURVE_GF2M                     176
+#  define EC_F_EC_GROUP_SET_CURVE_GFP                      109
+#  define EC_F_EC_GROUP_SET_GENERATOR                      111
+#  define EC_F_EC_GROUP_SET_SEED                           286
+#  define EC_F_EC_KEY_CHECK_KEY                            177
+#  define EC_F_EC_KEY_COPY                                 178
+#  define EC_F_EC_KEY_GENERATE_KEY                         179
+#  define EC_F_EC_KEY_NEW                                  182
+#  define EC_F_EC_KEY_NEW_METHOD                           245
+#  define EC_F_EC_KEY_OCT2PRIV                             255
+#  define EC_F_EC_KEY_PRINT                                180
+#  define EC_F_EC_KEY_PRINT_FP                             181
+#  define EC_F_EC_KEY_PRIV2BUF                             279
+#  define EC_F_EC_KEY_PRIV2OCT                             256
+#  define EC_F_EC_KEY_SET_PUBLIC_KEY_AFFINE_COORDINATES    229
+#  define EC_F_EC_KEY_SIMPLE_CHECK_KEY                     258
+#  define EC_F_EC_KEY_SIMPLE_OCT2PRIV                      259
+#  define EC_F_EC_KEY_SIMPLE_PRIV2OCT                      260
+#  define EC_F_EC_PKEY_CHECK                               273
+#  define EC_F_EC_PKEY_PARAM_CHECK                         274
+#  define EC_F_EC_POINTS_MAKE_AFFINE                       136
+#  define EC_F_EC_POINTS_MUL                               290
+#  define EC_F_EC_POINT_ADD                                112
+#  define EC_F_EC_POINT_BN2POINT                           280
+#  define EC_F_EC_POINT_CMP                                113
+#  define EC_F_EC_POINT_COPY                               114
+#  define EC_F_EC_POINT_DBL                                115
+#  define EC_F_EC_POINT_GET_AFFINE_COORDINATES             293
+#  define EC_F_EC_POINT_GET_AFFINE_COORDINATES_GF2M        183
+#  define EC_F_EC_POINT_GET_AFFINE_COORDINATES_GFP         116
+#  define EC_F_EC_POINT_GET_JPROJECTIVE_COORDINATES_GFP    117
+#  define EC_F_EC_POINT_INVERT                             210
+#  define EC_F_EC_POINT_IS_AT_INFINITY                     118
+#  define EC_F_EC_POINT_IS_ON_CURVE                        119
+#  define EC_F_EC_POINT_MAKE_AFFINE                        120
+#  define EC_F_EC_POINT_NEW                                121
+#  define EC_F_EC_POINT_OCT2POINT                          122
+#  define EC_F_EC_POINT_POINT2BUF                          281
+#  define EC_F_EC_POINT_POINT2OCT                          123
+#  define EC_F_EC_POINT_SET_AFFINE_COORDINATES             294
+#  define EC_F_EC_POINT_SET_AFFINE_COORDINATES_GF2M        185
+#  define EC_F_EC_POINT_SET_AFFINE_COORDINATES_GFP         124
+#  define EC_F_EC_POINT_SET_COMPRESSED_COORDINATES         295
+#  define EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GF2M    186
+#  define EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GFP     125
+#  define EC_F_EC_POINT_SET_JPROJECTIVE_COORDINATES_GFP    126
+#  define EC_F_EC_POINT_SET_TO_INFINITY                    127
+#  define EC_F_EC_PRE_COMP_NEW                             196
+#  define EC_F_EC_SCALAR_MUL_LADDER                        284
+#  define EC_F_EC_WNAF_MUL                                 187
+#  define EC_F_EC_WNAF_PRECOMPUTE_MULT                     188
+#  define EC_F_I2D_ECPARAMETERS                            190
+#  define EC_F_I2D_ECPKPARAMETERS                          191
+#  define EC_F_I2D_ECPRIVATEKEY                            192
+#  define EC_F_I2O_ECPUBLICKEY                             151
+#  define EC_F_NISTP224_PRE_COMP_NEW                       227
+#  define EC_F_NISTP256_PRE_COMP_NEW                       236
+#  define EC_F_NISTP521_PRE_COMP_NEW                       237
+#  define EC_F_O2I_ECPUBLICKEY                             152
+#  define EC_F_OLD_EC_PRIV_DECODE                          222
+#  define EC_F_OSSL_ECDH_COMPUTE_KEY                       247
+#  define EC_F_OSSL_ECDSA_SIGN_SIG                         249
+#  define EC_F_OSSL_ECDSA_VERIFY_SIG                       250
+#  define EC_F_PKEY_ECD_CTRL                               271
+#  define EC_F_PKEY_ECD_DIGESTSIGN                         272
+#  define EC_F_PKEY_ECD_DIGESTSIGN25519                    276
+#  define EC_F_PKEY_ECD_DIGESTSIGN448                      277
+#  define EC_F_PKEY_ECX_DERIVE                             269
+#  define EC_F_PKEY_EC_CTRL                                197
+#  define EC_F_PKEY_EC_CTRL_STR                            198
+#  define EC_F_PKEY_EC_DERIVE                              217
+#  define EC_F_PKEY_EC_INIT                                282
+#  define EC_F_PKEY_EC_KDF_DERIVE                          283
+#  define EC_F_PKEY_EC_KEYGEN                              199
+#  define EC_F_PKEY_EC_PARAMGEN                            219
+#  define EC_F_PKEY_EC_SIGN                                218
+#  define EC_F_VALIDATE_ECX_DERIVE                         278
+
+/*
+ * EC reason codes.
+ */
+#  define EC_R_ASN1_ERROR                                  115
+#  define EC_R_BAD_SIGNATURE                               156
+#  define EC_R_BIGNUM_OUT_OF_RANGE                         144
+#  define EC_R_BUFFER_TOO_SMALL                            100
+#  define EC_R_CANNOT_INVERT                               165
+#  define EC_R_COORDINATES_OUT_OF_RANGE                    146
+#  define EC_R_CURVE_DOES_NOT_SUPPORT_ECDH                 160
+#  define EC_R_CURVE_DOES_NOT_SUPPORT_SIGNING              159
+#  define EC_R_D2I_ECPKPARAMETERS_FAILURE                  117
+#  define EC_R_DECODE_ERROR                                142
+#  define EC_R_DISCRIMINANT_IS_ZERO                        118
+#  define EC_R_EC_GROUP_NEW_BY_NAME_FAILURE                119
+#  define EC_R_FIELD_TOO_LARGE                             143
+#  define EC_R_GF2M_NOT_SUPPORTED                          147
+#  define EC_R_GROUP2PKPARAMETERS_FAILURE                  120
+#  define EC_R_I2D_ECPKPARAMETERS_FAILURE                  121
+#  define EC_R_INCOMPATIBLE_OBJECTS                        101
+#  define EC_R_INVALID_ARGUMENT                            112
+#  define EC_R_INVALID_COMPRESSED_POINT                    110
+#  define EC_R_INVALID_COMPRESSION_BIT                     109
+#  define EC_R_INVALID_CURVE                               141
+#  define EC_R_INVALID_DIGEST                              151
+#  define EC_R_INVALID_DIGEST_TYPE                         138
+#  define EC_R_INVALID_ENCODING                            102
+#  define EC_R_INVALID_FIELD                               103
+#  define EC_R_INVALID_FORM                                104
+#  define EC_R_INVALID_GROUP_ORDER                         122
+#  define EC_R_INVALID_KEY                                 116
+#  define EC_R_INVALID_OUTPUT_LENGTH                       161
+#  define EC_R_INVALID_PEER_KEY                            133
+#  define EC_R_INVALID_PENTANOMIAL_BASIS                   132
+#  define EC_R_INVALID_PRIVATE_KEY                         123
+#  define EC_R_INVALID_TRINOMIAL_BASIS                     137
+#  define EC_R_KDF_PARAMETER_ERROR                         148
+#  define EC_R_KEYS_NOT_SET                                140
+#  define EC_R_LADDER_POST_FAILURE                         136
+#  define EC_R_LADDER_PRE_FAILURE                          153
+#  define EC_R_LADDER_STEP_FAILURE                         162
+#  define EC_R_MISSING_PARAMETERS                          124
+#  define EC_R_MISSING_PRIVATE_KEY                         125
+#  define EC_R_NEED_NEW_SETUP_VALUES                       157
+#  define EC_R_NOT_A_NIST_PRIME                            135
+#  define EC_R_NOT_IMPLEMENTED                             126
+#  define EC_R_NOT_INITIALIZED                             111
+#  define EC_R_NO_PARAMETERS_SET                           139
+#  define EC_R_NO_PRIVATE_VALUE                            154
+#  define EC_R_OPERATION_NOT_SUPPORTED                     152
+#  define EC_R_PASSED_NULL_PARAMETER                       134
+#  define EC_R_PEER_KEY_ERROR                              149
+#  define EC_R_PKPARAMETERS2GROUP_FAILURE                  127
+#  define EC_R_POINT_ARITHMETIC_FAILURE                    155
+#  define EC_R_POINT_AT_INFINITY                           106
+#  define EC_R_POINT_COORDINATES_BLIND_FAILURE             163
+#  define EC_R_POINT_IS_NOT_ON_CURVE                       107
+#  define EC_R_RANDOM_NUMBER_GENERATION_FAILED             158
+#  define EC_R_SHARED_INFO_ERROR                           150
+#  define EC_R_SLOT_FULL                                   108
+#  define EC_R_UNDEFINED_GENERATOR                         113
+#  define EC_R_UNDEFINED_ORDER                             128
+#  define EC_R_UNKNOWN_COFACTOR                            164
+#  define EC_R_UNKNOWN_GROUP                               129
+#  define EC_R_UNKNOWN_ORDER                               114
+#  define EC_R_UNSUPPORTED_FIELD                           131
+#  define EC_R_WRONG_CURVE_PARAMETERS                      145
+#  define EC_R_WRONG_ORDER                                 130
+
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/engine.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/engine.h
new file mode 100644
index 000000000..0780f0fb5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/engine.h
@@ -0,0 +1,751 @@
+/*
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_ENGINE_H
+# define HEADER_ENGINE_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_ENGINE
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  include <openssl/bn.h>
+#  include <openssl/rsa.h>
+#  include <openssl/dsa.h>
+#  include <openssl/dh.h>
+#  include <openssl/ec.h>
+#  include <openssl/rand.h>
+#  include <openssl/ui.h>
+#  include <openssl/err.h>
+# endif
+# include <openssl/ossl_typ.h>
+# include <openssl/symhacks.h>
+# include <openssl/x509.h>
+# include <openssl/engineerr.h>
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+/*
+ * These flags are used to control combinations of algorithm (methods) by
+ * bitwise "OR"ing.
+ */
+# define ENGINE_METHOD_RSA               (unsigned int)0x0001
+# define ENGINE_METHOD_DSA               (unsigned int)0x0002
+# define ENGINE_METHOD_DH                (unsigned int)0x0004
+# define ENGINE_METHOD_RAND              (unsigned int)0x0008
+# define ENGINE_METHOD_CIPHERS           (unsigned int)0x0040
+# define ENGINE_METHOD_DIGESTS           (unsigned int)0x0080
+# define ENGINE_METHOD_PKEY_METHS        (unsigned int)0x0200
+# define ENGINE_METHOD_PKEY_ASN1_METHS   (unsigned int)0x0400
+# define ENGINE_METHOD_EC                (unsigned int)0x0800
+/* Obvious all-or-nothing cases. */
+# define ENGINE_METHOD_ALL               (unsigned int)0xFFFF
+# define ENGINE_METHOD_NONE              (unsigned int)0x0000
+
+/*
+ * This(ese) flag(s) controls behaviour of the ENGINE_TABLE mechanism used
+ * internally to control registration of ENGINE implementations, and can be
+ * set by ENGINE_set_table_flags(). The "NOINIT" flag prevents attempts to
+ * initialise registered ENGINEs if they are not already initialised.
+ */
+# define ENGINE_TABLE_FLAG_NOINIT        (unsigned int)0x0001
+
+/* ENGINE flags that can be set by ENGINE_set_flags(). */
+/* Not used */
+/* #define ENGINE_FLAGS_MALLOCED        0x0001 */
+
+/*
+ * This flag is for ENGINEs that wish to handle the various 'CMD'-related
+ * control commands on their own. Without this flag, ENGINE_ctrl() handles
+ * these control commands on behalf of the ENGINE using their "cmd_defns"
+ * data.
+ */
+# define ENGINE_FLAGS_MANUAL_CMD_CTRL    (int)0x0002
+
+/*
+ * This flag is for ENGINEs who return new duplicate structures when found
+ * via "ENGINE_by_id()". When an ENGINE must store state (eg. if
+ * ENGINE_ctrl() commands are called in sequence as part of some stateful
+ * process like key-generation setup and execution), it can set this flag -
+ * then each attempt to obtain the ENGINE will result in it being copied into
+ * a new structure. Normally, ENGINEs don't declare this flag so
+ * ENGINE_by_id() just increments the existing ENGINE's structural reference
+ * count.
+ */
+# define ENGINE_FLAGS_BY_ID_COPY         (int)0x0004
+
+/*
+ * This flag if for an ENGINE that does not want its methods registered as
+ * part of ENGINE_register_all_complete() for example if the methods are not
+ * usable as default methods.
+ */
+
+# define ENGINE_FLAGS_NO_REGISTER_ALL    (int)0x0008
+
+/*
+ * ENGINEs can support their own command types, and these flags are used in
+ * ENGINE_CTRL_GET_CMD_FLAGS to indicate to the caller what kind of input
+ * each command expects. Currently only numeric and string input is
+ * supported. If a control command supports none of the _NUMERIC, _STRING, or
+ * _NO_INPUT options, then it is regarded as an "internal" control command -
+ * and not for use in config setting situations. As such, they're not
+ * available to the ENGINE_ctrl_cmd_string() function, only raw ENGINE_ctrl()
+ * access. Changes to this list of 'command types' should be reflected
+ * carefully in ENGINE_cmd_is_executable() and ENGINE_ctrl_cmd_string().
+ */
+
+/* accepts a 'long' input value (3rd parameter to ENGINE_ctrl) */
+# define ENGINE_CMD_FLAG_NUMERIC         (unsigned int)0x0001
+/*
+ * accepts string input (cast from 'void*' to 'const char *', 4th parameter
+ * to ENGINE_ctrl)
+ */
+# define ENGINE_CMD_FLAG_STRING          (unsigned int)0x0002
+/*
+ * Indicates that the control command takes *no* input. Ie. the control
+ * command is unparameterised.
+ */
+# define ENGINE_CMD_FLAG_NO_INPUT        (unsigned int)0x0004
+/*
+ * Indicates that the control command is internal. This control command won't
+ * be shown in any output, and is only usable through the ENGINE_ctrl_cmd()
+ * function.
+ */
+# define ENGINE_CMD_FLAG_INTERNAL        (unsigned int)0x0008
+
+/*
+ * NB: These 3 control commands are deprecated and should not be used.
+ * ENGINEs relying on these commands should compile conditional support for
+ * compatibility (eg. if these symbols are defined) but should also migrate
+ * the same functionality to their own ENGINE-specific control functions that
+ * can be "discovered" by calling applications. The fact these control
+ * commands wouldn't be "executable" (ie. usable by text-based config)
+ * doesn't change the fact that application code can find and use them
+ * without requiring per-ENGINE hacking.
+ */
+
+/*
+ * These flags are used to tell the ctrl function what should be done. All
+ * command numbers are shared between all engines, even if some don't make
+ * sense to some engines.  In such a case, they do nothing but return the
+ * error ENGINE_R_CTRL_COMMAND_NOT_IMPLEMENTED.
+ */
+# define ENGINE_CTRL_SET_LOGSTREAM               1
+# define ENGINE_CTRL_SET_PASSWORD_CALLBACK       2
+# define ENGINE_CTRL_HUP                         3/* Close and reinitialise
+                                                   * any handles/connections
+                                                   * etc. */
+# define ENGINE_CTRL_SET_USER_INTERFACE          4/* Alternative to callback */
+# define ENGINE_CTRL_SET_CALLBACK_DATA           5/* User-specific data, used
+                                                   * when calling the password
+                                                   * callback and the user
+                                                   * interface */
+# define ENGINE_CTRL_LOAD_CONFIGURATION          6/* Load a configuration,
+                                                   * given a string that
+                                                   * represents a file name
+                                                   * or so */
+# define ENGINE_CTRL_LOAD_SECTION                7/* Load data from a given
+                                                   * section in the already
+                                                   * loaded configuration */
+
+/*
+ * These control commands allow an application to deal with an arbitrary
+ * engine in a dynamic way. Warn: Negative return values indicate errors FOR
+ * THESE COMMANDS because zero is used to indicate 'end-of-list'. Other
+ * commands, including ENGINE-specific command types, return zero for an
+ * error. An ENGINE can choose to implement these ctrl functions, and can
+ * internally manage things however it chooses - it does so by setting the
+ * ENGINE_FLAGS_MANUAL_CMD_CTRL flag (using ENGINE_set_flags()). Otherwise
+ * the ENGINE_ctrl() code handles this on the ENGINE's behalf using the
+ * cmd_defns data (set using ENGINE_set_cmd_defns()). This means an ENGINE's
+ * ctrl() handler need only implement its own commands - the above "meta"
+ * commands will be taken care of.
+ */
+
+/*
+ * Returns non-zero if the supplied ENGINE has a ctrl() handler. If "not",
+ * then all the remaining control commands will return failure, so it is
+ * worth checking this first if the caller is trying to "discover" the
+ * engine's capabilities and doesn't want errors generated unnecessarily.
+ */
+# define ENGINE_CTRL_HAS_CTRL_FUNCTION           10
+/*
+ * Returns a positive command number for the first command supported by the
+ * engine. Returns zero if no ctrl commands are supported.
+ */
+# define ENGINE_CTRL_GET_FIRST_CMD_TYPE          11
+/*
+ * The 'long' argument specifies a command implemented by the engine, and the
+ * return value is the next command supported, or zero if there are no more.
+ */
+# define ENGINE_CTRL_GET_NEXT_CMD_TYPE           12
+/*
+ * The 'void*' argument is a command name (cast from 'const char *'), and the
+ * return value is the command that corresponds to it.
+ */
+# define ENGINE_CTRL_GET_CMD_FROM_NAME           13
+/*
+ * The next two allow a command to be converted into its corresponding string
+ * form. In each case, the 'long' argument supplies the command. In the
+ * NAME_LEN case, the return value is the length of the command name (not
+ * counting a trailing EOL). In the NAME case, the 'void*' argument must be a
+ * string buffer large enough, and it will be populated with the name of the
+ * command (WITH a trailing EOL).
+ */
+# define ENGINE_CTRL_GET_NAME_LEN_FROM_CMD       14
+# define ENGINE_CTRL_GET_NAME_FROM_CMD           15
+/* The next two are similar but give a "short description" of a command. */
+# define ENGINE_CTRL_GET_DESC_LEN_FROM_CMD       16
+# define ENGINE_CTRL_GET_DESC_FROM_CMD           17
+/*
+ * With this command, the return value is the OR'd combination of
+ * ENGINE_CMD_FLAG_*** values that indicate what kind of input a given
+ * engine-specific ctrl command expects.
+ */
+# define ENGINE_CTRL_GET_CMD_FLAGS               18
+
+/*
+ * ENGINE implementations should start the numbering of their own control
+ * commands from this value. (ie. ENGINE_CMD_BASE, ENGINE_CMD_BASE + 1, etc).
+ */
+# define ENGINE_CMD_BASE                         200
+
+/*
+ * NB: These 2 nCipher "chil" control commands are deprecated, and their
+ * functionality is now available through ENGINE-specific control commands
+ * (exposed through the above-mentioned 'CMD'-handling). Code using these 2
+ * commands should be migrated to the more general command handling before
+ * these are removed.
+ */
+
+/* Flags specific to the nCipher "chil" engine */
+# define ENGINE_CTRL_CHIL_SET_FORKCHECK          100
+        /*
+         * Depending on the value of the (long)i argument, this sets or
+         * unsets the SimpleForkCheck flag in the CHIL API to enable or
+         * disable checking and workarounds for applications that fork().
+         */
+# define ENGINE_CTRL_CHIL_NO_LOCKING             101
+        /*
+         * This prevents the initialisation function from providing mutex
+         * callbacks to the nCipher library.
+         */
+
+/*
+ * If an ENGINE supports its own specific control commands and wishes the
+ * framework to handle the above 'ENGINE_CMD_***'-manipulation commands on
+ * its behalf, it should supply a null-terminated array of ENGINE_CMD_DEFN
+ * entries to ENGINE_set_cmd_defns(). It should also implement a ctrl()
+ * handler that supports the stated commands (ie. the "cmd_num" entries as
+ * described by the array). NB: The array must be ordered in increasing order
+ * of cmd_num. "null-terminated" means that the last ENGINE_CMD_DEFN element
+ * has cmd_num set to zero and/or cmd_name set to NULL.
+ */
+typedef struct ENGINE_CMD_DEFN_st {
+    unsigned int cmd_num;       /* The command number */
+    const char *cmd_name;       /* The command name itself */
+    const char *cmd_desc;       /* A short description of the command */
+    unsigned int cmd_flags;     /* The input the command expects */
+} ENGINE_CMD_DEFN;
+
+/* Generic function pointer */
+typedef int (*ENGINE_GEN_FUNC_PTR) (void);
+/* Generic function pointer taking no arguments */
+typedef int (*ENGINE_GEN_INT_FUNC_PTR) (ENGINE *);
+/* Specific control function pointer */
+typedef int (*ENGINE_CTRL_FUNC_PTR) (ENGINE *, int, long, void *,
+                                     void (*f) (void));
+/* Generic load_key function pointer */
+typedef EVP_PKEY *(*ENGINE_LOAD_KEY_PTR)(ENGINE *, const char *,
+                                         UI_METHOD *ui_method,
+                                         void *callback_data);
+typedef int (*ENGINE_SSL_CLIENT_CERT_PTR) (ENGINE *, SSL *ssl,
+                                           STACK_OF(X509_NAME) *ca_dn,
+                                           X509 **pcert, EVP_PKEY **pkey,
+                                           STACK_OF(X509) **pother,
+                                           UI_METHOD *ui_method,
+                                           void *callback_data);
+/*-
+ * These callback types are for an ENGINE's handler for cipher and digest logic.
+ * These handlers have these prototypes;
+ *   int foo(ENGINE *e, const EVP_CIPHER **cipher, const int **nids, int nid);
+ *   int foo(ENGINE *e, const EVP_MD **digest, const int **nids, int nid);
+ * Looking at how to implement these handlers in the case of cipher support, if
+ * the framework wants the EVP_CIPHER for 'nid', it will call;
+ *   foo(e, &p_evp_cipher, NULL, nid);    (return zero for failure)
+ * If the framework wants a list of supported 'nid's, it will call;
+ *   foo(e, NULL, &p_nids, 0); (returns number of 'nids' or -1 for error)
+ */
+/*
+ * Returns to a pointer to the array of supported cipher 'nid's. If the
+ * second parameter is non-NULL it is set to the size of the returned array.
+ */
+typedef int (*ENGINE_CIPHERS_PTR) (ENGINE *, const EVP_CIPHER **,
+                                   const int **, int);
+typedef int (*ENGINE_DIGESTS_PTR) (ENGINE *, const EVP_MD **, const int **,
+                                   int);
+typedef int (*ENGINE_PKEY_METHS_PTR) (ENGINE *, EVP_PKEY_METHOD **,
+                                      const int **, int);
+typedef int (*ENGINE_PKEY_ASN1_METHS_PTR) (ENGINE *, EVP_PKEY_ASN1_METHOD **,
+                                           const int **, int);
+/*
+ * STRUCTURE functions ... all of these functions deal with pointers to
+ * ENGINE structures where the pointers have a "structural reference". This
+ * means that their reference is to allowed access to the structure but it
+ * does not imply that the structure is functional. To simply increment or
+ * decrement the structural reference count, use ENGINE_by_id and
+ * ENGINE_free. NB: This is not required when iterating using ENGINE_get_next
+ * as it will automatically decrement the structural reference count of the
+ * "current" ENGINE and increment the structural reference count of the
+ * ENGINE it returns (unless it is NULL).
+ */
+
+/* Get the first/last "ENGINE" type available. */
+ENGINE *ENGINE_get_first(void);
+ENGINE *ENGINE_get_last(void);
+/* Iterate to the next/previous "ENGINE" type (NULL = end of the list). */
+ENGINE *ENGINE_get_next(ENGINE *e);
+ENGINE *ENGINE_get_prev(ENGINE *e);
+/* Add another "ENGINE" type into the array. */
+int ENGINE_add(ENGINE *e);
+/* Remove an existing "ENGINE" type from the array. */
+int ENGINE_remove(ENGINE *e);
+/* Retrieve an engine from the list by its unique "id" value. */
+ENGINE *ENGINE_by_id(const char *id);
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+# define ENGINE_load_openssl() \
+    OPENSSL_init_crypto(OPENSSL_INIT_ENGINE_OPENSSL, NULL)
+# define ENGINE_load_dynamic() \
+    OPENSSL_init_crypto(OPENSSL_INIT_ENGINE_DYNAMIC, NULL)
+# ifndef OPENSSL_NO_STATIC_ENGINE
+#  define ENGINE_load_padlock() \
+    OPENSSL_init_crypto(OPENSSL_INIT_ENGINE_PADLOCK, NULL)
+#  define ENGINE_load_capi() \
+    OPENSSL_init_crypto(OPENSSL_INIT_ENGINE_CAPI, NULL)
+#  define ENGINE_load_afalg() \
+    OPENSSL_init_crypto(OPENSSL_INIT_ENGINE_AFALG, NULL)
+# endif
+# define ENGINE_load_cryptodev() \
+    OPENSSL_init_crypto(OPENSSL_INIT_ENGINE_CRYPTODEV, NULL)
+# define ENGINE_load_rdrand() \
+    OPENSSL_init_crypto(OPENSSL_INIT_ENGINE_RDRAND, NULL)
+#endif
+void ENGINE_load_builtin_engines(void);
+
+/*
+ * Get and set global flags (ENGINE_TABLE_FLAG_***) for the implementation
+ * "registry" handling.
+ */
+unsigned int ENGINE_get_table_flags(void);
+void ENGINE_set_table_flags(unsigned int flags);
+
+/*- Manage registration of ENGINEs per "table". For each type, there are 3
+ * functions;
+ *   ENGINE_register_***(e) - registers the implementation from 'e' (if it has one)
+ *   ENGINE_unregister_***(e) - unregister the implementation from 'e'
+ *   ENGINE_register_all_***() - call ENGINE_register_***() for each 'e' in the list
+ * Cleanup is automatically registered from each table when required.
+ */
+
+int ENGINE_register_RSA(ENGINE *e);
+void ENGINE_unregister_RSA(ENGINE *e);
+void ENGINE_register_all_RSA(void);
+
+int ENGINE_register_DSA(ENGINE *e);
+void ENGINE_unregister_DSA(ENGINE *e);
+void ENGINE_register_all_DSA(void);
+
+int ENGINE_register_EC(ENGINE *e);
+void ENGINE_unregister_EC(ENGINE *e);
+void ENGINE_register_all_EC(void);
+
+int ENGINE_register_DH(ENGINE *e);
+void ENGINE_unregister_DH(ENGINE *e);
+void ENGINE_register_all_DH(void);
+
+int ENGINE_register_RAND(ENGINE *e);
+void ENGINE_unregister_RAND(ENGINE *e);
+void ENGINE_register_all_RAND(void);
+
+int ENGINE_register_ciphers(ENGINE *e);
+void ENGINE_unregister_ciphers(ENGINE *e);
+void ENGINE_register_all_ciphers(void);
+
+int ENGINE_register_digests(ENGINE *e);
+void ENGINE_unregister_digests(ENGINE *e);
+void ENGINE_register_all_digests(void);
+
+int ENGINE_register_pkey_meths(ENGINE *e);
+void ENGINE_unregister_pkey_meths(ENGINE *e);
+void ENGINE_register_all_pkey_meths(void);
+
+int ENGINE_register_pkey_asn1_meths(ENGINE *e);
+void ENGINE_unregister_pkey_asn1_meths(ENGINE *e);
+void ENGINE_register_all_pkey_asn1_meths(void);
+
+/*
+ * These functions register all support from the above categories. Note, use
+ * of these functions can result in static linkage of code your application
+ * may not need. If you only need a subset of functionality, consider using
+ * more selective initialisation.
+ */
+int ENGINE_register_complete(ENGINE *e);
+int ENGINE_register_all_complete(void);
+
+/*
+ * Send parameterised control commands to the engine. The possibilities to
+ * send down an integer, a pointer to data or a function pointer are
+ * provided. Any of the parameters may or may not be NULL, depending on the
+ * command number. In actuality, this function only requires a structural
+ * (rather than functional) reference to an engine, but many control commands
+ * may require the engine be functional. The caller should be aware of trying
+ * commands that require an operational ENGINE, and only use functional
+ * references in such situations.
+ */
+int ENGINE_ctrl(ENGINE *e, int cmd, long i, void *p, void (*f) (void));
+
+/*
+ * This function tests if an ENGINE-specific command is usable as a
+ * "setting". Eg. in an application's config file that gets processed through
+ * ENGINE_ctrl_cmd_string(). If this returns zero, it is not available to
+ * ENGINE_ctrl_cmd_string(), only ENGINE_ctrl().
+ */
+int ENGINE_cmd_is_executable(ENGINE *e, int cmd);
+
+/*
+ * This function works like ENGINE_ctrl() with the exception of taking a
+ * command name instead of a command number, and can handle optional
+ * commands. See the comment on ENGINE_ctrl_cmd_string() for an explanation
+ * on how to use the cmd_name and cmd_optional.
+ */
+int ENGINE_ctrl_cmd(ENGINE *e, const char *cmd_name,
+                    long i, void *p, void (*f) (void), int cmd_optional);
+
+/*
+ * This function passes a command-name and argument to an ENGINE. The
+ * cmd_name is converted to a command number and the control command is
+ * called using 'arg' as an argument (unless the ENGINE doesn't support such
+ * a command, in which case no control command is called). The command is
+ * checked for input flags, and if necessary the argument will be converted
+ * to a numeric value. If cmd_optional is non-zero, then if the ENGINE
+ * doesn't support the given cmd_name the return value will be success
+ * anyway. This function is intended for applications to use so that users
+ * (or config files) can supply engine-specific config data to the ENGINE at
+ * run-time to control behaviour of specific engines. As such, it shouldn't
+ * be used for calling ENGINE_ctrl() functions that return data, deal with
+ * binary data, or that are otherwise supposed to be used directly through
+ * ENGINE_ctrl() in application code. Any "return" data from an ENGINE_ctrl()
+ * operation in this function will be lost - the return value is interpreted
+ * as failure if the return value is zero, success otherwise, and this
+ * function returns a boolean value as a result. In other words, vendors of
+ * 'ENGINE'-enabled devices should write ENGINE implementations with
+ * parameterisations that work in this scheme, so that compliant ENGINE-based
+ * applications can work consistently with the same configuration for the
+ * same ENGINE-enabled devices, across applications.
+ */
+int ENGINE_ctrl_cmd_string(ENGINE *e, const char *cmd_name, const char *arg,
+                           int cmd_optional);
+
+/*
+ * These functions are useful for manufacturing new ENGINE structures. They
+ * don't address reference counting at all - one uses them to populate an
+ * ENGINE structure with personalised implementations of things prior to
+ * using it directly or adding it to the builtin ENGINE list in OpenSSL.
+ * These are also here so that the ENGINE structure doesn't have to be
+ * exposed and break binary compatibility!
+ */
+ENGINE *ENGINE_new(void);
+int ENGINE_free(ENGINE *e);
+int ENGINE_up_ref(ENGINE *e);
+int ENGINE_set_id(ENGINE *e, const char *id);
+int ENGINE_set_name(ENGINE *e, const char *name);
+int ENGINE_set_RSA(ENGINE *e, const RSA_METHOD *rsa_meth);
+int ENGINE_set_DSA(ENGINE *e, const DSA_METHOD *dsa_meth);
+int ENGINE_set_EC(ENGINE *e, const EC_KEY_METHOD *ecdsa_meth);
+int ENGINE_set_DH(ENGINE *e, const DH_METHOD *dh_meth);
+int ENGINE_set_RAND(ENGINE *e, const RAND_METHOD *rand_meth);
+int ENGINE_set_destroy_function(ENGINE *e, ENGINE_GEN_INT_FUNC_PTR destroy_f);
+int ENGINE_set_init_function(ENGINE *e, ENGINE_GEN_INT_FUNC_PTR init_f);
+int ENGINE_set_finish_function(ENGINE *e, ENGINE_GEN_INT_FUNC_PTR finish_f);
+int ENGINE_set_ctrl_function(ENGINE *e, ENGINE_CTRL_FUNC_PTR ctrl_f);
+int ENGINE_set_load_privkey_function(ENGINE *e,
+                                     ENGINE_LOAD_KEY_PTR loadpriv_f);
+int ENGINE_set_load_pubkey_function(ENGINE *e, ENGINE_LOAD_KEY_PTR loadpub_f);
+int ENGINE_set_load_ssl_client_cert_function(ENGINE *e,
+                                             ENGINE_SSL_CLIENT_CERT_PTR
+                                             loadssl_f);
+int ENGINE_set_ciphers(ENGINE *e, ENGINE_CIPHERS_PTR f);
+int ENGINE_set_digests(ENGINE *e, ENGINE_DIGESTS_PTR f);
+int ENGINE_set_pkey_meths(ENGINE *e, ENGINE_PKEY_METHS_PTR f);
+int ENGINE_set_pkey_asn1_meths(ENGINE *e, ENGINE_PKEY_ASN1_METHS_PTR f);
+int ENGINE_set_flags(ENGINE *e, int flags);
+int ENGINE_set_cmd_defns(ENGINE *e, const ENGINE_CMD_DEFN *defns);
+/* These functions allow control over any per-structure ENGINE data. */
+#define ENGINE_get_ex_new_index(l, p, newf, dupf, freef) \
+    CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_ENGINE, l, p, newf, dupf, freef)
+int ENGINE_set_ex_data(ENGINE *e, int idx, void *arg);
+void *ENGINE_get_ex_data(const ENGINE *e, int idx);
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+/*
+ * This function previously cleaned up anything that needs it. Auto-deinit will
+ * now take care of it so it is no longer required to call this function.
+ */
+# define ENGINE_cleanup() while(0) continue
+#endif
+
+/*
+ * These return values from within the ENGINE structure. These can be useful
+ * with functional references as well as structural references - it depends
+ * which you obtained. Using the result for functional purposes if you only
+ * obtained a structural reference may be problematic!
+ */
+const char *ENGINE_get_id(const ENGINE *e);
+const char *ENGINE_get_name(const ENGINE *e);
+const RSA_METHOD *ENGINE_get_RSA(const ENGINE *e);
+const DSA_METHOD *ENGINE_get_DSA(const ENGINE *e);
+const EC_KEY_METHOD *ENGINE_get_EC(const ENGINE *e);
+const DH_METHOD *ENGINE_get_DH(const ENGINE *e);
+const RAND_METHOD *ENGINE_get_RAND(const ENGINE *e);
+ENGINE_GEN_INT_FUNC_PTR ENGINE_get_destroy_function(const ENGINE *e);
+ENGINE_GEN_INT_FUNC_PTR ENGINE_get_init_function(const ENGINE *e);
+ENGINE_GEN_INT_FUNC_PTR ENGINE_get_finish_function(const ENGINE *e);
+ENGINE_CTRL_FUNC_PTR ENGINE_get_ctrl_function(const ENGINE *e);
+ENGINE_LOAD_KEY_PTR ENGINE_get_load_privkey_function(const ENGINE *e);
+ENGINE_LOAD_KEY_PTR ENGINE_get_load_pubkey_function(const ENGINE *e);
+ENGINE_SSL_CLIENT_CERT_PTR ENGINE_get_ssl_client_cert_function(const ENGINE
+                                                               *e);
+ENGINE_CIPHERS_PTR ENGINE_get_ciphers(const ENGINE *e);
+ENGINE_DIGESTS_PTR ENGINE_get_digests(const ENGINE *e);
+ENGINE_PKEY_METHS_PTR ENGINE_get_pkey_meths(const ENGINE *e);
+ENGINE_PKEY_ASN1_METHS_PTR ENGINE_get_pkey_asn1_meths(const ENGINE *e);
+const EVP_CIPHER *ENGINE_get_cipher(ENGINE *e, int nid);
+const EVP_MD *ENGINE_get_digest(ENGINE *e, int nid);
+const EVP_PKEY_METHOD *ENGINE_get_pkey_meth(ENGINE *e, int nid);
+const EVP_PKEY_ASN1_METHOD *ENGINE_get_pkey_asn1_meth(ENGINE *e, int nid);
+const EVP_PKEY_ASN1_METHOD *ENGINE_get_pkey_asn1_meth_str(ENGINE *e,
+                                                          const char *str,
+                                                          int len);
+const EVP_PKEY_ASN1_METHOD *ENGINE_pkey_asn1_find_str(ENGINE **pe,
+                                                      const char *str,
+                                                      int len);
+const ENGINE_CMD_DEFN *ENGINE_get_cmd_defns(const ENGINE *e);
+int ENGINE_get_flags(const ENGINE *e);
+
+/*
+ * FUNCTIONAL functions. These functions deal with ENGINE structures that
+ * have (or will) be initialised for use. Broadly speaking, the structural
+ * functions are useful for iterating the list of available engine types,
+ * creating new engine types, and other "list" operations. These functions
+ * actually deal with ENGINEs that are to be used. As such these functions
+ * can fail (if applicable) when particular engines are unavailable - eg. if
+ * a hardware accelerator is not attached or not functioning correctly. Each
+ * ENGINE has 2 reference counts; structural and functional. Every time a
+ * functional reference is obtained or released, a corresponding structural
+ * reference is automatically obtained or released too.
+ */
+
+/*
+ * Initialise a engine type for use (or up its reference count if it's
+ * already in use). This will fail if the engine is not currently operational
+ * and cannot initialise.
+ */
+int ENGINE_init(ENGINE *e);
+/*
+ * Free a functional reference to a engine type. This does not require a
+ * corresponding call to ENGINE_free as it also releases a structural
+ * reference.
+ */
+int ENGINE_finish(ENGINE *e);
+
+/*
+ * The following functions handle keys that are stored in some secondary
+ * location, handled by the engine.  The storage may be on a card or
+ * whatever.
+ */
+EVP_PKEY *ENGINE_load_private_key(ENGINE *e, const char *key_id,
+                                  UI_METHOD *ui_method, void *callback_data);
+EVP_PKEY *ENGINE_load_public_key(ENGINE *e, const char *key_id,
+                                 UI_METHOD *ui_method, void *callback_data);
+int ENGINE_load_ssl_client_cert(ENGINE *e, SSL *s,
+                                STACK_OF(X509_NAME) *ca_dn, X509 **pcert,
+                                EVP_PKEY **ppkey, STACK_OF(X509) **pother,
+                                UI_METHOD *ui_method, void *callback_data);
+
+/*
+ * This returns a pointer for the current ENGINE structure that is (by
+ * default) performing any RSA operations. The value returned is an
+ * incremented reference, so it should be free'd (ENGINE_finish) before it is
+ * discarded.
+ */
+ENGINE *ENGINE_get_default_RSA(void);
+/* Same for the other "methods" */
+ENGINE *ENGINE_get_default_DSA(void);
+ENGINE *ENGINE_get_default_EC(void);
+ENGINE *ENGINE_get_default_DH(void);
+ENGINE *ENGINE_get_default_RAND(void);
+/*
+ * These functions can be used to get a functional reference to perform
+ * ciphering or digesting corresponding to "nid".
+ */
+ENGINE *ENGINE_get_cipher_engine(int nid);
+ENGINE *ENGINE_get_digest_engine(int nid);
+ENGINE *ENGINE_get_pkey_meth_engine(int nid);
+ENGINE *ENGINE_get_pkey_asn1_meth_engine(int nid);
+
+/*
+ * This sets a new default ENGINE structure for performing RSA operations. If
+ * the result is non-zero (success) then the ENGINE structure will have had
+ * its reference count up'd so the caller should still free their own
+ * reference 'e'.
+ */
+int ENGINE_set_default_RSA(ENGINE *e);
+int ENGINE_set_default_string(ENGINE *e, const char *def_list);
+/* Same for the other "methods" */
+int ENGINE_set_default_DSA(ENGINE *e);
+int ENGINE_set_default_EC(ENGINE *e);
+int ENGINE_set_default_DH(ENGINE *e);
+int ENGINE_set_default_RAND(ENGINE *e);
+int ENGINE_set_default_ciphers(ENGINE *e);
+int ENGINE_set_default_digests(ENGINE *e);
+int ENGINE_set_default_pkey_meths(ENGINE *e);
+int ENGINE_set_default_pkey_asn1_meths(ENGINE *e);
+
+/*
+ * The combination "set" - the flags are bitwise "OR"d from the
+ * ENGINE_METHOD_*** defines above. As with the "ENGINE_register_complete()"
+ * function, this function can result in unnecessary static linkage. If your
+ * application requires only specific functionality, consider using more
+ * selective functions.
+ */
+int ENGINE_set_default(ENGINE *e, unsigned int flags);
+
+void ENGINE_add_conf_module(void);
+
+/* Deprecated functions ... */
+/* int ENGINE_clear_defaults(void); */
+
+/**************************/
+/* DYNAMIC ENGINE SUPPORT */
+/**************************/
+
+/* Binary/behaviour compatibility levels */
+# define OSSL_DYNAMIC_VERSION            (unsigned long)0x00030000
+/*
+ * Binary versions older than this are too old for us (whether we're a loader
+ * or a loadee)
+ */
+# define OSSL_DYNAMIC_OLDEST             (unsigned long)0x00030000
+
+/*
+ * When compiling an ENGINE entirely as an external shared library, loadable
+ * by the "dynamic" ENGINE, these types are needed. The 'dynamic_fns'
+ * structure type provides the calling application's (or library's) error
+ * functionality and memory management function pointers to the loaded
+ * library. These should be used/set in the loaded library code so that the
+ * loading application's 'state' will be used/changed in all operations. The
+ * 'static_state' pointer allows the loaded library to know if it shares the
+ * same static data as the calling application (or library), and thus whether
+ * these callbacks need to be set or not.
+ */
+typedef void *(*dyn_MEM_malloc_fn) (size_t, const char *, int);
+typedef void *(*dyn_MEM_realloc_fn) (void *, size_t, const char *, int);
+typedef void (*dyn_MEM_free_fn) (void *, const char *, int);
+typedef struct st_dynamic_MEM_fns {
+    dyn_MEM_malloc_fn malloc_fn;
+    dyn_MEM_realloc_fn realloc_fn;
+    dyn_MEM_free_fn free_fn;
+} dynamic_MEM_fns;
+/*
+ * FIXME: Perhaps the memory and locking code (crypto.h) should declare and
+ * use these types so we (and any other dependent code) can simplify a bit??
+ */
+/* The top-level structure */
+typedef struct st_dynamic_fns {
+    void *static_state;
+    dynamic_MEM_fns mem_fns;
+} dynamic_fns;
+
+/*
+ * The version checking function should be of this prototype. NB: The
+ * ossl_version value passed in is the OSSL_DYNAMIC_VERSION of the loading
+ * code. If this function returns zero, it indicates a (potential) version
+ * incompatibility and the loaded library doesn't believe it can proceed.
+ * Otherwise, the returned value is the (latest) version supported by the
+ * loading library. The loader may still decide that the loaded code's
+ * version is unsatisfactory and could veto the load. The function is
+ * expected to be implemented with the symbol name "v_check", and a default
+ * implementation can be fully instantiated with
+ * IMPLEMENT_DYNAMIC_CHECK_FN().
+ */
+typedef unsigned long (*dynamic_v_check_fn) (unsigned long ossl_version);
+# define IMPLEMENT_DYNAMIC_CHECK_FN() \
+        OPENSSL_EXPORT unsigned long v_check(unsigned long v); \
+        OPENSSL_EXPORT unsigned long v_check(unsigned long v) { \
+                if (v >= OSSL_DYNAMIC_OLDEST) return OSSL_DYNAMIC_VERSION; \
+                return 0; }
+
+/*
+ * This function is passed the ENGINE structure to initialise with its own
+ * function and command settings. It should not adjust the structural or
+ * functional reference counts. If this function returns zero, (a) the load
+ * will be aborted, (b) the previous ENGINE state will be memcpy'd back onto
+ * the structure, and (c) the shared library will be unloaded. So
+ * implementations should do their own internal cleanup in failure
+ * circumstances otherwise they could leak. The 'id' parameter, if non-NULL,
+ * represents the ENGINE id that the loader is looking for. If this is NULL,
+ * the shared library can choose to return failure or to initialise a
+ * 'default' ENGINE. If non-NULL, the shared library must initialise only an
+ * ENGINE matching the passed 'id'. The function is expected to be
+ * implemented with the symbol name "bind_engine". A standard implementation
+ * can be instantiated with IMPLEMENT_DYNAMIC_BIND_FN(fn) where the parameter
+ * 'fn' is a callback function that populates the ENGINE structure and
+ * returns an int value (zero for failure). 'fn' should have prototype;
+ * [static] int fn(ENGINE *e, const char *id);
+ */
+typedef int (*dynamic_bind_engine) (ENGINE *e, const char *id,
+                                    const dynamic_fns *fns);
+# define IMPLEMENT_DYNAMIC_BIND_FN(fn) \
+        OPENSSL_EXPORT \
+        int bind_engine(ENGINE *e, const char *id, const dynamic_fns *fns); \
+        OPENSSL_EXPORT \
+        int bind_engine(ENGINE *e, const char *id, const dynamic_fns *fns) { \
+            if (ENGINE_get_static_state() == fns->static_state) goto skip_cbs; \
+            CRYPTO_set_mem_functions(fns->mem_fns.malloc_fn, \
+                                     fns->mem_fns.realloc_fn, \
+                                     fns->mem_fns.free_fn); \
+        skip_cbs: \
+            if (!fn(e, id)) return 0; \
+            return 1; }
+
+/*
+ * If the loading application (or library) and the loaded ENGINE library
+ * share the same static data (eg. they're both dynamically linked to the
+ * same libcrypto.so) we need a way to avoid trying to set system callbacks -
+ * this would fail, and for the same reason that it's unnecessary to try. If
+ * the loaded ENGINE has (or gets from through the loader) its own copy of
+ * the libcrypto static data, we will need to set the callbacks. The easiest
+ * way to detect this is to have a function that returns a pointer to some
+ * static data and let the loading application and loaded ENGINE compare
+ * their respective values.
+ */
+void *ENGINE_get_static_state(void);
+
+# if defined(__OpenBSD__) || defined(__FreeBSD__) || defined(__DragonFly__)
+DEPRECATEDIN_1_1_0(void ENGINE_setup_bsd_cryptodev(void))
+# endif
+
+
+#  ifdef  __cplusplus
+}
+#  endif
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/engineerr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/engineerr.h
new file mode 100644
index 000000000..b4c036b21
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/engineerr.h
@@ -0,0 +1,107 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_ENGINEERR_H
+# define HEADER_ENGINEERR_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_ENGINE
+
+#  ifdef  __cplusplus
+extern "C"
+#  endif
+int ERR_load_ENGINE_strings(void);
+
+/*
+ * ENGINE function codes.
+ */
+#  define ENGINE_F_DIGEST_UPDATE                           198
+#  define ENGINE_F_DYNAMIC_CTRL                            180
+#  define ENGINE_F_DYNAMIC_GET_DATA_CTX                    181
+#  define ENGINE_F_DYNAMIC_LOAD                            182
+#  define ENGINE_F_DYNAMIC_SET_DATA_CTX                    183
+#  define ENGINE_F_ENGINE_ADD                              105
+#  define ENGINE_F_ENGINE_BY_ID                            106
+#  define ENGINE_F_ENGINE_CMD_IS_EXECUTABLE                170
+#  define ENGINE_F_ENGINE_CTRL                             142
+#  define ENGINE_F_ENGINE_CTRL_CMD                         178
+#  define ENGINE_F_ENGINE_CTRL_CMD_STRING                  171
+#  define ENGINE_F_ENGINE_FINISH                           107
+#  define ENGINE_F_ENGINE_GET_CIPHER                       185
+#  define ENGINE_F_ENGINE_GET_DIGEST                       186
+#  define ENGINE_F_ENGINE_GET_FIRST                        195
+#  define ENGINE_F_ENGINE_GET_LAST                         196
+#  define ENGINE_F_ENGINE_GET_NEXT                         115
+#  define ENGINE_F_ENGINE_GET_PKEY_ASN1_METH               193
+#  define ENGINE_F_ENGINE_GET_PKEY_METH                    192
+#  define ENGINE_F_ENGINE_GET_PREV                         116
+#  define ENGINE_F_ENGINE_INIT                             119
+#  define ENGINE_F_ENGINE_LIST_ADD                         120
+#  define ENGINE_F_ENGINE_LIST_REMOVE                      121
+#  define ENGINE_F_ENGINE_LOAD_PRIVATE_KEY                 150
+#  define ENGINE_F_ENGINE_LOAD_PUBLIC_KEY                  151
+#  define ENGINE_F_ENGINE_LOAD_SSL_CLIENT_CERT             194
+#  define ENGINE_F_ENGINE_NEW                              122
+#  define ENGINE_F_ENGINE_PKEY_ASN1_FIND_STR               197
+#  define ENGINE_F_ENGINE_REMOVE                           123
+#  define ENGINE_F_ENGINE_SET_DEFAULT_STRING               189
+#  define ENGINE_F_ENGINE_SET_ID                           129
+#  define ENGINE_F_ENGINE_SET_NAME                         130
+#  define ENGINE_F_ENGINE_TABLE_REGISTER                   184
+#  define ENGINE_F_ENGINE_UNLOCKED_FINISH                  191
+#  define ENGINE_F_ENGINE_UP_REF                           190
+#  define ENGINE_F_INT_CLEANUP_ITEM                        199
+#  define ENGINE_F_INT_CTRL_HELPER                         172
+#  define ENGINE_F_INT_ENGINE_CONFIGURE                    188
+#  define ENGINE_F_INT_ENGINE_MODULE_INIT                  187
+#  define ENGINE_F_OSSL_HMAC_INIT                          200
+
+/*
+ * ENGINE reason codes.
+ */
+#  define ENGINE_R_ALREADY_LOADED                          100
+#  define ENGINE_R_ARGUMENT_IS_NOT_A_NUMBER                133
+#  define ENGINE_R_CMD_NOT_EXECUTABLE                      134
+#  define ENGINE_R_COMMAND_TAKES_INPUT                     135
+#  define ENGINE_R_COMMAND_TAKES_NO_INPUT                  136
+#  define ENGINE_R_CONFLICTING_ENGINE_ID                   103
+#  define ENGINE_R_CTRL_COMMAND_NOT_IMPLEMENTED            119
+#  define ENGINE_R_DSO_FAILURE                             104
+#  define ENGINE_R_DSO_NOT_FOUND                           132
+#  define ENGINE_R_ENGINES_SECTION_ERROR                   148
+#  define ENGINE_R_ENGINE_CONFIGURATION_ERROR              102
+#  define ENGINE_R_ENGINE_IS_NOT_IN_LIST                   105
+#  define ENGINE_R_ENGINE_SECTION_ERROR                    149
+#  define ENGINE_R_FAILED_LOADING_PRIVATE_KEY              128
+#  define ENGINE_R_FAILED_LOADING_PUBLIC_KEY               129
+#  define ENGINE_R_FINISH_FAILED                           106
+#  define ENGINE_R_ID_OR_NAME_MISSING                      108
+#  define ENGINE_R_INIT_FAILED                             109
+#  define ENGINE_R_INTERNAL_LIST_ERROR                     110
+#  define ENGINE_R_INVALID_ARGUMENT                        143
+#  define ENGINE_R_INVALID_CMD_NAME                        137
+#  define ENGINE_R_INVALID_CMD_NUMBER                      138
+#  define ENGINE_R_INVALID_INIT_VALUE                      151
+#  define ENGINE_R_INVALID_STRING                          150
+#  define ENGINE_R_NOT_INITIALISED                         117
+#  define ENGINE_R_NOT_LOADED                              112
+#  define ENGINE_R_NO_CONTROL_FUNCTION                     120
+#  define ENGINE_R_NO_INDEX                                144
+#  define ENGINE_R_NO_LOAD_FUNCTION                        125
+#  define ENGINE_R_NO_REFERENCE                            130
+#  define ENGINE_R_NO_SUCH_ENGINE                          116
+#  define ENGINE_R_UNIMPLEMENTED_CIPHER                    146
+#  define ENGINE_R_UNIMPLEMENTED_DIGEST                    147
+#  define ENGINE_R_UNIMPLEMENTED_PUBLIC_KEY_METHOD         101
+#  define ENGINE_R_VERSION_INCOMPATIBILITY                 145
+
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/err.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/err.h
new file mode 100644
index 000000000..6cae1a365
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/err.h
@@ -0,0 +1,273 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_ERR_H
+# define HEADER_ERR_H
+
+# include <openssl/e_os2.h>
+
+# ifndef OPENSSL_NO_STDIO
+#  include <stdio.h>
+#  include <stdlib.h>
+# endif
+
+# include <openssl/ossl_typ.h>
+# include <openssl/bio.h>
+# include <openssl/lhash.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+# ifndef OPENSSL_NO_ERR
+#  define ERR_PUT_error(a,b,c,d,e)        ERR_put_error(a,b,c,d,e)
+# else
+#  define ERR_PUT_error(a,b,c,d,e)        ERR_put_error(a,b,c,NULL,0)
+# endif
+
+# include <errno.h>
+
+# define ERR_TXT_MALLOCED        0x01
+# define ERR_TXT_STRING          0x02
+
+# define ERR_FLAG_MARK           0x01
+
+# define ERR_NUM_ERRORS  16
+typedef struct err_state_st {
+    int err_flags[ERR_NUM_ERRORS];
+    unsigned long err_buffer[ERR_NUM_ERRORS];
+    char *err_data[ERR_NUM_ERRORS];
+    int err_data_flags[ERR_NUM_ERRORS];
+    const char *err_file[ERR_NUM_ERRORS];
+    int err_line[ERR_NUM_ERRORS];
+    int top, bottom;
+} ERR_STATE;
+
+/* library */
+# define ERR_LIB_NONE            1
+# define ERR_LIB_SYS             2
+# define ERR_LIB_BN              3
+# define ERR_LIB_RSA             4
+# define ERR_LIB_DH              5
+# define ERR_LIB_EVP             6
+# define ERR_LIB_BUF             7
+# define ERR_LIB_OBJ             8
+# define ERR_LIB_PEM             9
+# define ERR_LIB_DSA             10
+# define ERR_LIB_X509            11
+/* #define ERR_LIB_METH         12 */
+# define ERR_LIB_ASN1            13
+# define ERR_LIB_CONF            14
+# define ERR_LIB_CRYPTO          15
+# define ERR_LIB_EC              16
+# define ERR_LIB_SSL             20
+/* #define ERR_LIB_SSL23        21 */
+/* #define ERR_LIB_SSL2         22 */
+/* #define ERR_LIB_SSL3         23 */
+/* #define ERR_LIB_RSAREF       30 */
+/* #define ERR_LIB_PROXY        31 */
+# define ERR_LIB_BIO             32
+# define ERR_LIB_PKCS7           33
+# define ERR_LIB_X509V3          34
+# define ERR_LIB_PKCS12          35
+# define ERR_LIB_RAND            36
+# define ERR_LIB_DSO             37
+# define ERR_LIB_ENGINE          38
+# define ERR_LIB_OCSP            39
+# define ERR_LIB_UI              40
+# define ERR_LIB_COMP            41
+# define ERR_LIB_ECDSA           42
+# define ERR_LIB_ECDH            43
+# define ERR_LIB_OSSL_STORE      44
+# define ERR_LIB_FIPS            45
+# define ERR_LIB_CMS             46
+# define ERR_LIB_TS              47
+# define ERR_LIB_HMAC            48
+/* # define ERR_LIB_JPAKE       49 */
+# define ERR_LIB_CT              50
+# define ERR_LIB_ASYNC           51
+# define ERR_LIB_KDF             52
+# define ERR_LIB_SM2             53
+
+# define ERR_LIB_USER            128
+
+# define SYSerr(f,r)  ERR_PUT_error(ERR_LIB_SYS,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define BNerr(f,r)   ERR_PUT_error(ERR_LIB_BN,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define RSAerr(f,r)  ERR_PUT_error(ERR_LIB_RSA,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define DHerr(f,r)   ERR_PUT_error(ERR_LIB_DH,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define EVPerr(f,r)  ERR_PUT_error(ERR_LIB_EVP,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define BUFerr(f,r)  ERR_PUT_error(ERR_LIB_BUF,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define OBJerr(f,r)  ERR_PUT_error(ERR_LIB_OBJ,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define PEMerr(f,r)  ERR_PUT_error(ERR_LIB_PEM,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define DSAerr(f,r)  ERR_PUT_error(ERR_LIB_DSA,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define X509err(f,r) ERR_PUT_error(ERR_LIB_X509,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define ASN1err(f,r) ERR_PUT_error(ERR_LIB_ASN1,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define CONFerr(f,r) ERR_PUT_error(ERR_LIB_CONF,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define CRYPTOerr(f,r) ERR_PUT_error(ERR_LIB_CRYPTO,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define ECerr(f,r)   ERR_PUT_error(ERR_LIB_EC,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define SSLerr(f,r)  ERR_PUT_error(ERR_LIB_SSL,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define BIOerr(f,r)  ERR_PUT_error(ERR_LIB_BIO,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define PKCS7err(f,r) ERR_PUT_error(ERR_LIB_PKCS7,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define X509V3err(f,r) ERR_PUT_error(ERR_LIB_X509V3,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define PKCS12err(f,r) ERR_PUT_error(ERR_LIB_PKCS12,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define RANDerr(f,r) ERR_PUT_error(ERR_LIB_RAND,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define DSOerr(f,r) ERR_PUT_error(ERR_LIB_DSO,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define ENGINEerr(f,r) ERR_PUT_error(ERR_LIB_ENGINE,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define OCSPerr(f,r) ERR_PUT_error(ERR_LIB_OCSP,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define UIerr(f,r) ERR_PUT_error(ERR_LIB_UI,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define COMPerr(f,r) ERR_PUT_error(ERR_LIB_COMP,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define ECDSAerr(f,r)  ERR_PUT_error(ERR_LIB_ECDSA,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define ECDHerr(f,r)  ERR_PUT_error(ERR_LIB_ECDH,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define OSSL_STOREerr(f,r) ERR_PUT_error(ERR_LIB_OSSL_STORE,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define FIPSerr(f,r) ERR_PUT_error(ERR_LIB_FIPS,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define CMSerr(f,r) ERR_PUT_error(ERR_LIB_CMS,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define TSerr(f,r) ERR_PUT_error(ERR_LIB_TS,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define HMACerr(f,r) ERR_PUT_error(ERR_LIB_HMAC,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define CTerr(f,r) ERR_PUT_error(ERR_LIB_CT,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define ASYNCerr(f,r) ERR_PUT_error(ERR_LIB_ASYNC,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define KDFerr(f,r) ERR_PUT_error(ERR_LIB_KDF,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+# define SM2err(f,r) ERR_PUT_error(ERR_LIB_SM2,(f),(r),OPENSSL_FILE,OPENSSL_LINE)
+
+# define ERR_PACK(l,f,r) ( \
+        (((unsigned int)(l) & 0x0FF) << 24L) | \
+        (((unsigned int)(f) & 0xFFF) << 12L) | \
+        (((unsigned int)(r) & 0xFFF)       ) )
+# define ERR_GET_LIB(l)          (int)(((l) >> 24L) & 0x0FFL)
+# define ERR_GET_FUNC(l)         (int)(((l) >> 12L) & 0xFFFL)
+# define ERR_GET_REASON(l)       (int)( (l)         & 0xFFFL)
+# define ERR_FATAL_ERROR(l)      (int)( (l)         & ERR_R_FATAL)
+
+/* OS functions */
+# define SYS_F_FOPEN             1
+# define SYS_F_CONNECT           2
+# define SYS_F_GETSERVBYNAME     3
+# define SYS_F_SOCKET            4
+# define SYS_F_IOCTLSOCKET       5
+# define SYS_F_BIND              6
+# define SYS_F_LISTEN            7
+# define SYS_F_ACCEPT            8
+# define SYS_F_WSASTARTUP        9/* Winsock stuff */
+# define SYS_F_OPENDIR           10
+# define SYS_F_FREAD             11
+# define SYS_F_GETADDRINFO       12
+# define SYS_F_GETNAMEINFO       13
+# define SYS_F_SETSOCKOPT        14
+# define SYS_F_GETSOCKOPT        15
+# define SYS_F_GETSOCKNAME       16
+# define SYS_F_GETHOSTBYNAME     17
+# define SYS_F_FFLUSH            18
+# define SYS_F_OPEN              19
+# define SYS_F_CLOSE             20
+# define SYS_F_IOCTL             21
+# define SYS_F_STAT              22
+# define SYS_F_FCNTL             23
+# define SYS_F_FSTAT             24
+
+/* reasons */
+# define ERR_R_SYS_LIB   ERR_LIB_SYS/* 2 */
+# define ERR_R_BN_LIB    ERR_LIB_BN/* 3 */
+# define ERR_R_RSA_LIB   ERR_LIB_RSA/* 4 */
+# define ERR_R_DH_LIB    ERR_LIB_DH/* 5 */
+# define ERR_R_EVP_LIB   ERR_LIB_EVP/* 6 */
+# define ERR_R_BUF_LIB   ERR_LIB_BUF/* 7 */
+# define ERR_R_OBJ_LIB   ERR_LIB_OBJ/* 8 */
+# define ERR_R_PEM_LIB   ERR_LIB_PEM/* 9 */
+# define ERR_R_DSA_LIB   ERR_LIB_DSA/* 10 */
+# define ERR_R_X509_LIB  ERR_LIB_X509/* 11 */
+# define ERR_R_ASN1_LIB  ERR_LIB_ASN1/* 13 */
+# define ERR_R_EC_LIB    ERR_LIB_EC/* 16 */
+# define ERR_R_BIO_LIB   ERR_LIB_BIO/* 32 */
+# define ERR_R_PKCS7_LIB ERR_LIB_PKCS7/* 33 */
+# define ERR_R_X509V3_LIB ERR_LIB_X509V3/* 34 */
+# define ERR_R_ENGINE_LIB ERR_LIB_ENGINE/* 38 */
+# define ERR_R_UI_LIB    ERR_LIB_UI/* 40 */
+# define ERR_R_ECDSA_LIB ERR_LIB_ECDSA/* 42 */
+# define ERR_R_OSSL_STORE_LIB ERR_LIB_OSSL_STORE/* 44 */
+
+# define ERR_R_NESTED_ASN1_ERROR                 58
+# define ERR_R_MISSING_ASN1_EOS                  63
+
+/* fatal error */
+# define ERR_R_FATAL                             64
+# define ERR_R_MALLOC_FAILURE                    (1|ERR_R_FATAL)
+# define ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED       (2|ERR_R_FATAL)
+# define ERR_R_PASSED_NULL_PARAMETER             (3|ERR_R_FATAL)
+# define ERR_R_INTERNAL_ERROR                    (4|ERR_R_FATAL)
+# define ERR_R_DISABLED                          (5|ERR_R_FATAL)
+# define ERR_R_INIT_FAIL                         (6|ERR_R_FATAL)
+# define ERR_R_PASSED_INVALID_ARGUMENT           (7)
+# define ERR_R_OPERATION_FAIL                    (8|ERR_R_FATAL)
+
+/*
+ * 99 is the maximum possible ERR_R_... code, higher values are reserved for
+ * the individual libraries
+ */
+
+typedef struct ERR_string_data_st {
+    unsigned long error;
+    const char *string;
+} ERR_STRING_DATA;
+
+DEFINE_LHASH_OF(ERR_STRING_DATA);
+
+void ERR_put_error(int lib, int func, int reason, const char *file, int line);
+void ERR_set_error_data(char *data, int flags);
+
+unsigned long ERR_get_error(void);
+unsigned long ERR_get_error_line(const char **file, int *line);
+unsigned long ERR_get_error_line_data(const char **file, int *line,
+                                      const char **data, int *flags);
+unsigned long ERR_peek_error(void);
+unsigned long ERR_peek_error_line(const char **file, int *line);
+unsigned long ERR_peek_error_line_data(const char **file, int *line,
+                                       const char **data, int *flags);
+unsigned long ERR_peek_last_error(void);
+unsigned long ERR_peek_last_error_line(const char **file, int *line);
+unsigned long ERR_peek_last_error_line_data(const char **file, int *line,
+                                            const char **data, int *flags);
+void ERR_clear_error(void);
+char *ERR_error_string(unsigned long e, char *buf);
+void ERR_error_string_n(unsigned long e, char *buf, size_t len);
+const char *ERR_lib_error_string(unsigned long e);
+const char *ERR_func_error_string(unsigned long e);
+const char *ERR_reason_error_string(unsigned long e);
+void ERR_print_errors_cb(int (*cb) (const char *str, size_t len, void *u),
+                         void *u);
+# ifndef OPENSSL_NO_STDIO
+void ERR_print_errors_fp(FILE *fp);
+# endif
+void ERR_print_errors(BIO *bp);
+void ERR_add_error_data(int num, ...);
+void ERR_add_error_vdata(int num, va_list args);
+int ERR_load_strings(int lib, ERR_STRING_DATA *str);
+int ERR_load_strings_const(const ERR_STRING_DATA *str);
+int ERR_unload_strings(int lib, ERR_STRING_DATA *str);
+int ERR_load_ERR_strings(void);
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+# define ERR_load_crypto_strings() \
+    OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL)
+# define ERR_free_strings() while(0) continue
+#endif
+
+DEPRECATEDIN_1_1_0(void ERR_remove_thread_state(void *))
+DEPRECATEDIN_1_0_0(void ERR_remove_state(unsigned long pid))
+ERR_STATE *ERR_get_state(void);
+
+int ERR_get_next_error_library(void);
+
+int ERR_set_mark(void);
+int ERR_pop_to_mark(void);
+int ERR_clear_last_mark(void);
+
+#ifdef  __cplusplus
+}
+#endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/evp.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/evp.h
new file mode 100644
index 000000000..9f05b5a3b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/evp.h
@@ -0,0 +1,1633 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_ENVELOPE_H
+# define HEADER_ENVELOPE_H
+
+# include <openssl/opensslconf.h>
+# include <openssl/ossl_typ.h>
+# include <openssl/symhacks.h>
+# include <openssl/bio.h>
+# include <openssl/evperr.h>
+
+# define EVP_MAX_MD_SIZE                 64/* longest known is SHA512 */
+# define EVP_MAX_KEY_LENGTH              64
+# define EVP_MAX_IV_LENGTH               16
+# define EVP_MAX_BLOCK_LENGTH            32
+
+# define PKCS5_SALT_LEN                  8
+/* Default PKCS#5 iteration count */
+# define PKCS5_DEFAULT_ITER              2048
+
+# include <openssl/objects.h>
+
+# define EVP_PK_RSA      0x0001
+# define EVP_PK_DSA      0x0002
+# define EVP_PK_DH       0x0004
+# define EVP_PK_EC       0x0008
+# define EVP_PKT_SIGN    0x0010
+# define EVP_PKT_ENC     0x0020
+# define EVP_PKT_EXCH    0x0040
+# define EVP_PKS_RSA     0x0100
+# define EVP_PKS_DSA     0x0200
+# define EVP_PKS_EC      0x0400
+
+# define EVP_PKEY_NONE   NID_undef
+# define EVP_PKEY_RSA    NID_rsaEncryption
+# define EVP_PKEY_RSA2   NID_rsa
+# define EVP_PKEY_RSA_PSS NID_rsassaPss
+# define EVP_PKEY_DSA    NID_dsa
+# define EVP_PKEY_DSA1   NID_dsa_2
+# define EVP_PKEY_DSA2   NID_dsaWithSHA
+# define EVP_PKEY_DSA3   NID_dsaWithSHA1
+# define EVP_PKEY_DSA4   NID_dsaWithSHA1_2
+# define EVP_PKEY_DH     NID_dhKeyAgreement
+# define EVP_PKEY_DHX    NID_dhpublicnumber
+# define EVP_PKEY_EC     NID_X9_62_id_ecPublicKey
+# define EVP_PKEY_SM2    NID_sm2
+# define EVP_PKEY_HMAC   NID_hmac
+# define EVP_PKEY_CMAC   NID_cmac
+# define EVP_PKEY_SCRYPT NID_id_scrypt
+# define EVP_PKEY_TLS1_PRF NID_tls1_prf
+# define EVP_PKEY_HKDF   NID_hkdf
+# define EVP_PKEY_POLY1305 NID_poly1305
+# define EVP_PKEY_SIPHASH NID_siphash
+# define EVP_PKEY_X25519 NID_X25519
+# define EVP_PKEY_ED25519 NID_ED25519
+# define EVP_PKEY_X448 NID_X448
+# define EVP_PKEY_ED448 NID_ED448
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+# define EVP_PKEY_MO_SIGN        0x0001
+# define EVP_PKEY_MO_VERIFY      0x0002
+# define EVP_PKEY_MO_ENCRYPT     0x0004
+# define EVP_PKEY_MO_DECRYPT     0x0008
+
+# ifndef EVP_MD
+EVP_MD *EVP_MD_meth_new(int md_type, int pkey_type);
+EVP_MD *EVP_MD_meth_dup(const EVP_MD *md);
+void EVP_MD_meth_free(EVP_MD *md);
+
+int EVP_MD_meth_set_input_blocksize(EVP_MD *md, int blocksize);
+int EVP_MD_meth_set_result_size(EVP_MD *md, int resultsize);
+int EVP_MD_meth_set_app_datasize(EVP_MD *md, int datasize);
+int EVP_MD_meth_set_flags(EVP_MD *md, unsigned long flags);
+int EVP_MD_meth_set_init(EVP_MD *md, int (*init)(EVP_MD_CTX *ctx));
+int EVP_MD_meth_set_update(EVP_MD *md, int (*update)(EVP_MD_CTX *ctx,
+                                                     const void *data,
+                                                     size_t count));
+int EVP_MD_meth_set_final(EVP_MD *md, int (*final)(EVP_MD_CTX *ctx,
+                                                   unsigned char *md));
+int EVP_MD_meth_set_copy(EVP_MD *md, int (*copy)(EVP_MD_CTX *to,
+                                                 const EVP_MD_CTX *from));
+int EVP_MD_meth_set_cleanup(EVP_MD *md, int (*cleanup)(EVP_MD_CTX *ctx));
+int EVP_MD_meth_set_ctrl(EVP_MD *md, int (*ctrl)(EVP_MD_CTX *ctx, int cmd,
+                                                 int p1, void *p2));
+
+int EVP_MD_meth_get_input_blocksize(const EVP_MD *md);
+int EVP_MD_meth_get_result_size(const EVP_MD *md);
+int EVP_MD_meth_get_app_datasize(const EVP_MD *md);
+unsigned long EVP_MD_meth_get_flags(const EVP_MD *md);
+int (*EVP_MD_meth_get_init(const EVP_MD *md))(EVP_MD_CTX *ctx);
+int (*EVP_MD_meth_get_update(const EVP_MD *md))(EVP_MD_CTX *ctx,
+                                                const void *data,
+                                                size_t count);
+int (*EVP_MD_meth_get_final(const EVP_MD *md))(EVP_MD_CTX *ctx,
+                                               unsigned char *md);
+int (*EVP_MD_meth_get_copy(const EVP_MD *md))(EVP_MD_CTX *to,
+                                              const EVP_MD_CTX *from);
+int (*EVP_MD_meth_get_cleanup(const EVP_MD *md))(EVP_MD_CTX *ctx);
+int (*EVP_MD_meth_get_ctrl(const EVP_MD *md))(EVP_MD_CTX *ctx, int cmd,
+                                              int p1, void *p2);
+
+/* digest can only handle a single block */
+#  define EVP_MD_FLAG_ONESHOT     0x0001
+
+/* digest is extensible-output function, XOF */
+#  define EVP_MD_FLAG_XOF         0x0002
+
+/* DigestAlgorithmIdentifier flags... */
+
+#  define EVP_MD_FLAG_DIGALGID_MASK               0x0018
+
+/* NULL or absent parameter accepted. Use NULL */
+
+#  define EVP_MD_FLAG_DIGALGID_NULL               0x0000
+
+/* NULL or absent parameter accepted. Use NULL for PKCS#1 otherwise absent */
+
+#  define EVP_MD_FLAG_DIGALGID_ABSENT             0x0008
+
+/* Custom handling via ctrl */
+
+#  define EVP_MD_FLAG_DIGALGID_CUSTOM             0x0018
+
+/* Note if suitable for use in FIPS mode */
+#  define EVP_MD_FLAG_FIPS        0x0400
+
+/* Digest ctrls */
+
+#  define EVP_MD_CTRL_DIGALGID                    0x1
+#  define EVP_MD_CTRL_MICALG                      0x2
+#  define EVP_MD_CTRL_XOF_LEN                     0x3
+
+/* Minimum Algorithm specific ctrl value */
+
+#  define EVP_MD_CTRL_ALG_CTRL                    0x1000
+
+# endif                         /* !EVP_MD */
+
+/* values for EVP_MD_CTX flags */
+
+# define EVP_MD_CTX_FLAG_ONESHOT         0x0001/* digest update will be
+                                                * called once only */
+# define EVP_MD_CTX_FLAG_CLEANED         0x0002/* context has already been
+                                                * cleaned */
+# define EVP_MD_CTX_FLAG_REUSE           0x0004/* Don't free up ctx->md_data
+                                                * in EVP_MD_CTX_reset */
+/*
+ * FIPS and pad options are ignored in 1.0.0, definitions are here so we
+ * don't accidentally reuse the values for other purposes.
+ */
+
+# define EVP_MD_CTX_FLAG_NON_FIPS_ALLOW  0x0008/* Allow use of non FIPS
+                                                * digest in FIPS mode */
+
+/*
+ * The following PAD options are also currently ignored in 1.0.0, digest
+ * parameters are handled through EVP_DigestSign*() and EVP_DigestVerify*()
+ * instead.
+ */
+# define EVP_MD_CTX_FLAG_PAD_MASK        0xF0/* RSA mode to use */
+# define EVP_MD_CTX_FLAG_PAD_PKCS1       0x00/* PKCS#1 v1.5 mode */
+# define EVP_MD_CTX_FLAG_PAD_X931        0x10/* X9.31 mode */
+# define EVP_MD_CTX_FLAG_PAD_PSS         0x20/* PSS mode */
+
+# define EVP_MD_CTX_FLAG_NO_INIT         0x0100/* Don't initialize md_data */
+/*
+ * Some functions such as EVP_DigestSign only finalise copies of internal
+ * contexts so additional data can be included after the finalisation call.
+ * This is inefficient if this functionality is not required: it is disabled
+ * if the following flag is set.
+ */
+# define EVP_MD_CTX_FLAG_FINALISE        0x0200
+/* NOTE: 0x0400 is reserved for internal usage in evp_int.h */
+
+EVP_CIPHER *EVP_CIPHER_meth_new(int cipher_type, int block_size, int key_len);
+EVP_CIPHER *EVP_CIPHER_meth_dup(const EVP_CIPHER *cipher);
+void EVP_CIPHER_meth_free(EVP_CIPHER *cipher);
+
+int EVP_CIPHER_meth_set_iv_length(EVP_CIPHER *cipher, int iv_len);
+int EVP_CIPHER_meth_set_flags(EVP_CIPHER *cipher, unsigned long flags);
+int EVP_CIPHER_meth_set_impl_ctx_size(EVP_CIPHER *cipher, int ctx_size);
+int EVP_CIPHER_meth_set_init(EVP_CIPHER *cipher,
+                             int (*init) (EVP_CIPHER_CTX *ctx,
+                                          const unsigned char *key,
+                                          const unsigned char *iv,
+                                          int enc));
+int EVP_CIPHER_meth_set_do_cipher(EVP_CIPHER *cipher,
+                                  int (*do_cipher) (EVP_CIPHER_CTX *ctx,
+                                                    unsigned char *out,
+                                                    const unsigned char *in,
+                                                    size_t inl));
+int EVP_CIPHER_meth_set_cleanup(EVP_CIPHER *cipher,
+                                int (*cleanup) (EVP_CIPHER_CTX *));
+int EVP_CIPHER_meth_set_set_asn1_params(EVP_CIPHER *cipher,
+                                        int (*set_asn1_parameters) (EVP_CIPHER_CTX *,
+                                                                    ASN1_TYPE *));
+int EVP_CIPHER_meth_set_get_asn1_params(EVP_CIPHER *cipher,
+                                        int (*get_asn1_parameters) (EVP_CIPHER_CTX *,
+                                                                    ASN1_TYPE *));
+int EVP_CIPHER_meth_set_ctrl(EVP_CIPHER *cipher,
+                             int (*ctrl) (EVP_CIPHER_CTX *, int type,
+                                          int arg, void *ptr));
+
+int (*EVP_CIPHER_meth_get_init(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *ctx,
+                                                          const unsigned char *key,
+                                                          const unsigned char *iv,
+                                                          int enc);
+int (*EVP_CIPHER_meth_get_do_cipher(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *ctx,
+                                                               unsigned char *out,
+                                                               const unsigned char *in,
+                                                               size_t inl);
+int (*EVP_CIPHER_meth_get_cleanup(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *);
+int (*EVP_CIPHER_meth_get_set_asn1_params(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *,
+                                                                     ASN1_TYPE *);
+int (*EVP_CIPHER_meth_get_get_asn1_params(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *,
+                                                               ASN1_TYPE *);
+int (*EVP_CIPHER_meth_get_ctrl(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *,
+                                                          int type, int arg,
+                                                          void *ptr);
+
+/* Values for cipher flags */
+
+/* Modes for ciphers */
+
+# define         EVP_CIPH_STREAM_CIPHER          0x0
+# define         EVP_CIPH_ECB_MODE               0x1
+# define         EVP_CIPH_CBC_MODE               0x2
+# define         EVP_CIPH_CFB_MODE               0x3
+# define         EVP_CIPH_OFB_MODE               0x4
+# define         EVP_CIPH_CTR_MODE               0x5
+# define         EVP_CIPH_GCM_MODE               0x6
+# define         EVP_CIPH_CCM_MODE               0x7
+# define         EVP_CIPH_XTS_MODE               0x10001
+# define         EVP_CIPH_WRAP_MODE              0x10002
+# define         EVP_CIPH_OCB_MODE               0x10003
+# define         EVP_CIPH_MODE                   0xF0007
+/* Set if variable length cipher */
+# define         EVP_CIPH_VARIABLE_LENGTH        0x8
+/* Set if the iv handling should be done by the cipher itself */
+# define         EVP_CIPH_CUSTOM_IV              0x10
+/* Set if the cipher's init() function should be called if key is NULL */
+# define         EVP_CIPH_ALWAYS_CALL_INIT       0x20
+/* Call ctrl() to init cipher parameters */
+# define         EVP_CIPH_CTRL_INIT              0x40
+/* Don't use standard key length function */
+# define         EVP_CIPH_CUSTOM_KEY_LENGTH      0x80
+/* Don't use standard block padding */
+# define         EVP_CIPH_NO_PADDING             0x100
+/* cipher handles random key generation */
+# define         EVP_CIPH_RAND_KEY               0x200
+/* cipher has its own additional copying logic */
+# define         EVP_CIPH_CUSTOM_COPY            0x400
+/* Allow use default ASN1 get/set iv */
+# define         EVP_CIPH_FLAG_DEFAULT_ASN1      0x1000
+/* Buffer length in bits not bytes: CFB1 mode only */
+# define         EVP_CIPH_FLAG_LENGTH_BITS       0x2000
+/* Note if suitable for use in FIPS mode */
+# define         EVP_CIPH_FLAG_FIPS              0x4000
+/* Allow non FIPS cipher in FIPS mode */
+# define         EVP_CIPH_FLAG_NON_FIPS_ALLOW    0x8000
+/*
+ * Cipher handles any and all padding logic as well as finalisation.
+ */
+# define         EVP_CIPH_FLAG_CUSTOM_CIPHER     0x100000
+# define         EVP_CIPH_FLAG_AEAD_CIPHER       0x200000
+# define         EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK 0x400000
+/* Cipher can handle pipeline operations */
+# define         EVP_CIPH_FLAG_PIPELINE          0X800000
+
+/*
+ * Cipher context flag to indicate we can handle wrap mode: if allowed in
+ * older applications it could overflow buffers.
+ */
+
+# define         EVP_CIPHER_CTX_FLAG_WRAP_ALLOW  0x1
+
+/* ctrl() values */
+
+# define         EVP_CTRL_INIT                   0x0
+# define         EVP_CTRL_SET_KEY_LENGTH         0x1
+# define         EVP_CTRL_GET_RC2_KEY_BITS       0x2
+# define         EVP_CTRL_SET_RC2_KEY_BITS       0x3
+# define         EVP_CTRL_GET_RC5_ROUNDS         0x4
+# define         EVP_CTRL_SET_RC5_ROUNDS         0x5
+# define         EVP_CTRL_RAND_KEY               0x6
+# define         EVP_CTRL_PBE_PRF_NID            0x7
+# define         EVP_CTRL_COPY                   0x8
+# define         EVP_CTRL_AEAD_SET_IVLEN         0x9
+# define         EVP_CTRL_AEAD_GET_TAG           0x10
+# define         EVP_CTRL_AEAD_SET_TAG           0x11
+# define         EVP_CTRL_AEAD_SET_IV_FIXED      0x12
+# define         EVP_CTRL_GCM_SET_IVLEN          EVP_CTRL_AEAD_SET_IVLEN
+# define         EVP_CTRL_GCM_GET_TAG            EVP_CTRL_AEAD_GET_TAG
+# define         EVP_CTRL_GCM_SET_TAG            EVP_CTRL_AEAD_SET_TAG
+# define         EVP_CTRL_GCM_SET_IV_FIXED       EVP_CTRL_AEAD_SET_IV_FIXED
+# define         EVP_CTRL_GCM_IV_GEN             0x13
+# define         EVP_CTRL_CCM_SET_IVLEN          EVP_CTRL_AEAD_SET_IVLEN
+# define         EVP_CTRL_CCM_GET_TAG            EVP_CTRL_AEAD_GET_TAG
+# define         EVP_CTRL_CCM_SET_TAG            EVP_CTRL_AEAD_SET_TAG
+# define         EVP_CTRL_CCM_SET_IV_FIXED       EVP_CTRL_AEAD_SET_IV_FIXED
+# define         EVP_CTRL_CCM_SET_L              0x14
+# define         EVP_CTRL_CCM_SET_MSGLEN         0x15
+/*
+ * AEAD cipher deduces payload length and returns number of bytes required to
+ * store MAC and eventual padding. Subsequent call to EVP_Cipher even
+ * appends/verifies MAC.
+ */
+# define         EVP_CTRL_AEAD_TLS1_AAD          0x16
+/* Used by composite AEAD ciphers, no-op in GCM, CCM... */
+# define         EVP_CTRL_AEAD_SET_MAC_KEY       0x17
+/* Set the GCM invocation field, decrypt only */
+# define         EVP_CTRL_GCM_SET_IV_INV         0x18
+
+# define         EVP_CTRL_TLS1_1_MULTIBLOCK_AAD  0x19
+# define         EVP_CTRL_TLS1_1_MULTIBLOCK_ENCRYPT      0x1a
+# define         EVP_CTRL_TLS1_1_MULTIBLOCK_DECRYPT      0x1b
+# define         EVP_CTRL_TLS1_1_MULTIBLOCK_MAX_BUFSIZE  0x1c
+
+# define         EVP_CTRL_SSL3_MASTER_SECRET             0x1d
+
+/* EVP_CTRL_SET_SBOX takes the char * specifying S-boxes */
+# define         EVP_CTRL_SET_SBOX                       0x1e
+/*
+ * EVP_CTRL_SBOX_USED takes a 'size_t' and 'char *', pointing at a
+ * pre-allocated buffer with specified size
+ */
+# define         EVP_CTRL_SBOX_USED                      0x1f
+/* EVP_CTRL_KEY_MESH takes 'size_t' number of bytes to mesh the key after,
+ * 0 switches meshing off
+ */
+# define         EVP_CTRL_KEY_MESH                       0x20
+/* EVP_CTRL_BLOCK_PADDING_MODE takes the padding mode */
+# define         EVP_CTRL_BLOCK_PADDING_MODE             0x21
+
+/* Set the output buffers to use for a pipelined operation */
+# define         EVP_CTRL_SET_PIPELINE_OUTPUT_BUFS       0x22
+/* Set the input buffers to use for a pipelined operation */
+# define         EVP_CTRL_SET_PIPELINE_INPUT_BUFS        0x23
+/* Set the input buffer lengths to use for a pipelined operation */
+# define         EVP_CTRL_SET_PIPELINE_INPUT_LENS        0x24
+
+/* Padding modes */
+#define EVP_PADDING_PKCS7       1
+#define EVP_PADDING_ISO7816_4   2
+#define EVP_PADDING_ANSI923     3
+#define EVP_PADDING_ISO10126    4
+#define EVP_PADDING_ZERO        5
+
+/* RFC 5246 defines additional data to be 13 bytes in length */
+# define         EVP_AEAD_TLS1_AAD_LEN           13
+
+typedef struct {
+    unsigned char *out;
+    const unsigned char *inp;
+    size_t len;
+    unsigned int interleave;
+} EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM;
+
+/* GCM TLS constants */
+/* Length of fixed part of IV derived from PRF */
+# define EVP_GCM_TLS_FIXED_IV_LEN                        4
+/* Length of explicit part of IV part of TLS records */
+# define EVP_GCM_TLS_EXPLICIT_IV_LEN                     8
+/* Length of tag for TLS */
+# define EVP_GCM_TLS_TAG_LEN                             16
+
+/* CCM TLS constants */
+/* Length of fixed part of IV derived from PRF */
+# define EVP_CCM_TLS_FIXED_IV_LEN                        4
+/* Length of explicit part of IV part of TLS records */
+# define EVP_CCM_TLS_EXPLICIT_IV_LEN                     8
+/* Total length of CCM IV length for TLS */
+# define EVP_CCM_TLS_IV_LEN                              12
+/* Length of tag for TLS */
+# define EVP_CCM_TLS_TAG_LEN                             16
+/* Length of CCM8 tag for TLS */
+# define EVP_CCM8_TLS_TAG_LEN                            8
+
+/* Length of tag for TLS */
+# define EVP_CHACHAPOLY_TLS_TAG_LEN                      16
+
+typedef struct evp_cipher_info_st {
+    const EVP_CIPHER *cipher;
+    unsigned char iv[EVP_MAX_IV_LENGTH];
+} EVP_CIPHER_INFO;
+
+
+/* Password based encryption function */
+typedef int (EVP_PBE_KEYGEN) (EVP_CIPHER_CTX *ctx, const char *pass,
+                              int passlen, ASN1_TYPE *param,
+                              const EVP_CIPHER *cipher, const EVP_MD *md,
+                              int en_de);
+
+# ifndef OPENSSL_NO_RSA
+#  define EVP_PKEY_assign_RSA(pkey,rsa) EVP_PKEY_assign((pkey),EVP_PKEY_RSA,\
+                                        (char *)(rsa))
+# endif
+
+# ifndef OPENSSL_NO_DSA
+#  define EVP_PKEY_assign_DSA(pkey,dsa) EVP_PKEY_assign((pkey),EVP_PKEY_DSA,\
+                                        (char *)(dsa))
+# endif
+
+# ifndef OPENSSL_NO_DH
+#  define EVP_PKEY_assign_DH(pkey,dh) EVP_PKEY_assign((pkey),EVP_PKEY_DH,\
+                                        (char *)(dh))
+# endif
+
+# ifndef OPENSSL_NO_EC
+#  define EVP_PKEY_assign_EC_KEY(pkey,eckey) EVP_PKEY_assign((pkey),EVP_PKEY_EC,\
+                                        (char *)(eckey))
+# endif
+# ifndef OPENSSL_NO_SIPHASH
+#  define EVP_PKEY_assign_SIPHASH(pkey,shkey) EVP_PKEY_assign((pkey),EVP_PKEY_SIPHASH,\
+                                        (char *)(shkey))
+# endif
+
+# ifndef OPENSSL_NO_POLY1305
+#  define EVP_PKEY_assign_POLY1305(pkey,polykey) EVP_PKEY_assign((pkey),EVP_PKEY_POLY1305,\
+                                        (char *)(polykey))
+# endif
+
+/* Add some extra combinations */
+# define EVP_get_digestbynid(a) EVP_get_digestbyname(OBJ_nid2sn(a))
+# define EVP_get_digestbyobj(a) EVP_get_digestbynid(OBJ_obj2nid(a))
+# define EVP_get_cipherbynid(a) EVP_get_cipherbyname(OBJ_nid2sn(a))
+# define EVP_get_cipherbyobj(a) EVP_get_cipherbynid(OBJ_obj2nid(a))
+
+int EVP_MD_type(const EVP_MD *md);
+# define EVP_MD_nid(e)                   EVP_MD_type(e)
+# define EVP_MD_name(e)                  OBJ_nid2sn(EVP_MD_nid(e))
+int EVP_MD_pkey_type(const EVP_MD *md);
+int EVP_MD_size(const EVP_MD *md);
+int EVP_MD_block_size(const EVP_MD *md);
+unsigned long EVP_MD_flags(const EVP_MD *md);
+
+const EVP_MD *EVP_MD_CTX_md(const EVP_MD_CTX *ctx);
+int (*EVP_MD_CTX_update_fn(EVP_MD_CTX *ctx))(EVP_MD_CTX *ctx,
+                                             const void *data, size_t count);
+void EVP_MD_CTX_set_update_fn(EVP_MD_CTX *ctx,
+                              int (*update) (EVP_MD_CTX *ctx,
+                                             const void *data, size_t count));
+# define EVP_MD_CTX_size(e)              EVP_MD_size(EVP_MD_CTX_md(e))
+# define EVP_MD_CTX_block_size(e)        EVP_MD_block_size(EVP_MD_CTX_md(e))
+# define EVP_MD_CTX_type(e)              EVP_MD_type(EVP_MD_CTX_md(e))
+EVP_PKEY_CTX *EVP_MD_CTX_pkey_ctx(const EVP_MD_CTX *ctx);
+void EVP_MD_CTX_set_pkey_ctx(EVP_MD_CTX *ctx, EVP_PKEY_CTX *pctx);
+void *EVP_MD_CTX_md_data(const EVP_MD_CTX *ctx);
+
+int EVP_CIPHER_nid(const EVP_CIPHER *cipher);
+# define EVP_CIPHER_name(e)              OBJ_nid2sn(EVP_CIPHER_nid(e))
+int EVP_CIPHER_block_size(const EVP_CIPHER *cipher);
+int EVP_CIPHER_impl_ctx_size(const EVP_CIPHER *cipher);
+int EVP_CIPHER_key_length(const EVP_CIPHER *cipher);
+int EVP_CIPHER_iv_length(const EVP_CIPHER *cipher);
+unsigned long EVP_CIPHER_flags(const EVP_CIPHER *cipher);
+# define EVP_CIPHER_mode(e)              (EVP_CIPHER_flags(e) & EVP_CIPH_MODE)
+
+const EVP_CIPHER *EVP_CIPHER_CTX_cipher(const EVP_CIPHER_CTX *ctx);
+int EVP_CIPHER_CTX_encrypting(const EVP_CIPHER_CTX *ctx);
+int EVP_CIPHER_CTX_nid(const EVP_CIPHER_CTX *ctx);
+int EVP_CIPHER_CTX_block_size(const EVP_CIPHER_CTX *ctx);
+int EVP_CIPHER_CTX_key_length(const EVP_CIPHER_CTX *ctx);
+int EVP_CIPHER_CTX_iv_length(const EVP_CIPHER_CTX *ctx);
+const unsigned char *EVP_CIPHER_CTX_iv(const EVP_CIPHER_CTX *ctx);
+const unsigned char *EVP_CIPHER_CTX_original_iv(const EVP_CIPHER_CTX *ctx);
+unsigned char *EVP_CIPHER_CTX_iv_noconst(EVP_CIPHER_CTX *ctx);
+unsigned char *EVP_CIPHER_CTX_buf_noconst(EVP_CIPHER_CTX *ctx);
+int EVP_CIPHER_CTX_num(const EVP_CIPHER_CTX *ctx);
+void EVP_CIPHER_CTX_set_num(EVP_CIPHER_CTX *ctx, int num);
+int EVP_CIPHER_CTX_copy(EVP_CIPHER_CTX *out, const EVP_CIPHER_CTX *in);
+void *EVP_CIPHER_CTX_get_app_data(const EVP_CIPHER_CTX *ctx);
+void EVP_CIPHER_CTX_set_app_data(EVP_CIPHER_CTX *ctx, void *data);
+void *EVP_CIPHER_CTX_get_cipher_data(const EVP_CIPHER_CTX *ctx);
+void *EVP_CIPHER_CTX_set_cipher_data(EVP_CIPHER_CTX *ctx, void *cipher_data);
+# define EVP_CIPHER_CTX_type(c)         EVP_CIPHER_type(EVP_CIPHER_CTX_cipher(c))
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define EVP_CIPHER_CTX_flags(c)       EVP_CIPHER_flags(EVP_CIPHER_CTX_cipher(c))
+# endif
+# define EVP_CIPHER_CTX_mode(c)         EVP_CIPHER_mode(EVP_CIPHER_CTX_cipher(c))
+
+# define EVP_ENCODE_LENGTH(l)    ((((l)+2)/3*4)+((l)/48+1)*2+80)
+# define EVP_DECODE_LENGTH(l)    (((l)+3)/4*3+80)
+
+# define EVP_SignInit_ex(a,b,c)          EVP_DigestInit_ex(a,b,c)
+# define EVP_SignInit(a,b)               EVP_DigestInit(a,b)
+# define EVP_SignUpdate(a,b,c)           EVP_DigestUpdate(a,b,c)
+# define EVP_VerifyInit_ex(a,b,c)        EVP_DigestInit_ex(a,b,c)
+# define EVP_VerifyInit(a,b)             EVP_DigestInit(a,b)
+# define EVP_VerifyUpdate(a,b,c)         EVP_DigestUpdate(a,b,c)
+# define EVP_OpenUpdate(a,b,c,d,e)       EVP_DecryptUpdate(a,b,c,d,e)
+# define EVP_SealUpdate(a,b,c,d,e)       EVP_EncryptUpdate(a,b,c,d,e)
+# define EVP_DigestSignUpdate(a,b,c)     EVP_DigestUpdate(a,b,c)
+# define EVP_DigestVerifyUpdate(a,b,c)   EVP_DigestUpdate(a,b,c)
+
+# ifdef CONST_STRICT
+void BIO_set_md(BIO *, const EVP_MD *md);
+# else
+#  define BIO_set_md(b,md)          BIO_ctrl(b,BIO_C_SET_MD,0,(char *)(md))
+# endif
+# define BIO_get_md(b,mdp)          BIO_ctrl(b,BIO_C_GET_MD,0,(char *)(mdp))
+# define BIO_get_md_ctx(b,mdcp)     BIO_ctrl(b,BIO_C_GET_MD_CTX,0, \
+                                             (char *)(mdcp))
+# define BIO_set_md_ctx(b,mdcp)     BIO_ctrl(b,BIO_C_SET_MD_CTX,0, \
+                                             (char *)(mdcp))
+# define BIO_get_cipher_status(b)   BIO_ctrl(b,BIO_C_GET_CIPHER_STATUS,0,NULL)
+# define BIO_get_cipher_ctx(b,c_pp) BIO_ctrl(b,BIO_C_GET_CIPHER_CTX,0, \
+                                             (char *)(c_pp))
+
+/*__owur*/ int EVP_Cipher(EVP_CIPHER_CTX *c,
+                          unsigned char *out,
+                          const unsigned char *in, unsigned int inl);
+
+# define EVP_add_cipher_alias(n,alias) \
+        OBJ_NAME_add((alias),OBJ_NAME_TYPE_CIPHER_METH|OBJ_NAME_ALIAS,(n))
+# define EVP_add_digest_alias(n,alias) \
+        OBJ_NAME_add((alias),OBJ_NAME_TYPE_MD_METH|OBJ_NAME_ALIAS,(n))
+# define EVP_delete_cipher_alias(alias) \
+        OBJ_NAME_remove(alias,OBJ_NAME_TYPE_CIPHER_METH|OBJ_NAME_ALIAS);
+# define EVP_delete_digest_alias(alias) \
+        OBJ_NAME_remove(alias,OBJ_NAME_TYPE_MD_METH|OBJ_NAME_ALIAS);
+
+int EVP_MD_CTX_ctrl(EVP_MD_CTX *ctx, int cmd, int p1, void *p2);
+EVP_MD_CTX *EVP_MD_CTX_new(void);
+int EVP_MD_CTX_reset(EVP_MD_CTX *ctx);
+void EVP_MD_CTX_free(EVP_MD_CTX *ctx);
+# define EVP_MD_CTX_create()     EVP_MD_CTX_new()
+# define EVP_MD_CTX_init(ctx)    EVP_MD_CTX_reset((ctx))
+# define EVP_MD_CTX_destroy(ctx) EVP_MD_CTX_free((ctx))
+__owur int EVP_MD_CTX_copy_ex(EVP_MD_CTX *out, const EVP_MD_CTX *in);
+void EVP_MD_CTX_set_flags(EVP_MD_CTX *ctx, int flags);
+void EVP_MD_CTX_clear_flags(EVP_MD_CTX *ctx, int flags);
+int EVP_MD_CTX_test_flags(const EVP_MD_CTX *ctx, int flags);
+__owur int EVP_DigestInit_ex(EVP_MD_CTX *ctx, const EVP_MD *type,
+                                 ENGINE *impl);
+__owur int EVP_DigestUpdate(EVP_MD_CTX *ctx, const void *d,
+                                size_t cnt);
+__owur int EVP_DigestFinal_ex(EVP_MD_CTX *ctx, unsigned char *md,
+                                  unsigned int *s);
+__owur int EVP_Digest(const void *data, size_t count,
+                          unsigned char *md, unsigned int *size,
+                          const EVP_MD *type, ENGINE *impl);
+
+__owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
+__owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
+__owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
+                           unsigned int *s);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
+                              size_t len);
+
+int EVP_read_pw_string(char *buf, int length, const char *prompt, int verify);
+int EVP_read_pw_string_min(char *buf, int minlen, int maxlen,
+                           const char *prompt, int verify);
+void EVP_set_pw_prompt(const char *prompt);
+char *EVP_get_pw_prompt(void);
+
+__owur int EVP_BytesToKey(const EVP_CIPHER *type, const EVP_MD *md,
+                          const unsigned char *salt,
+                          const unsigned char *data, int datal, int count,
+                          unsigned char *key, unsigned char *iv);
+
+void EVP_CIPHER_CTX_set_flags(EVP_CIPHER_CTX *ctx, int flags);
+void EVP_CIPHER_CTX_clear_flags(EVP_CIPHER_CTX *ctx, int flags);
+int EVP_CIPHER_CTX_test_flags(const EVP_CIPHER_CTX *ctx, int flags);
+
+__owur int EVP_EncryptInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
+                           const unsigned char *key, const unsigned char *iv);
+/*__owur*/ int EVP_EncryptInit_ex(EVP_CIPHER_CTX *ctx,
+                                  const EVP_CIPHER *cipher, ENGINE *impl,
+                                  const unsigned char *key,
+                                  const unsigned char *iv);
+/*__owur*/ int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                 int *outl, const unsigned char *in, int inl);
+/*__owur*/ int EVP_EncryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                   int *outl);
+/*__owur*/ int EVP_EncryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                int *outl);
+
+__owur int EVP_DecryptInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
+                           const unsigned char *key, const unsigned char *iv);
+/*__owur*/ int EVP_DecryptInit_ex(EVP_CIPHER_CTX *ctx,
+                                  const EVP_CIPHER *cipher, ENGINE *impl,
+                                  const unsigned char *key,
+                                  const unsigned char *iv);
+/*__owur*/ int EVP_DecryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                 int *outl, const unsigned char *in, int inl);
+__owur int EVP_DecryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *outm,
+                            int *outl);
+/*__owur*/ int EVP_DecryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *outm,
+                                   int *outl);
+
+__owur int EVP_CipherInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
+                          const unsigned char *key, const unsigned char *iv,
+                          int enc);
+/*__owur*/ int EVP_CipherInit_ex(EVP_CIPHER_CTX *ctx,
+                                 const EVP_CIPHER *cipher, ENGINE *impl,
+                                 const unsigned char *key,
+                                 const unsigned char *iv, int enc);
+__owur int EVP_CipherUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                            int *outl, const unsigned char *in, int inl);
+__owur int EVP_CipherFinal(EVP_CIPHER_CTX *ctx, unsigned char *outm,
+                           int *outl);
+__owur int EVP_CipherFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *outm,
+                              int *outl);
+
+__owur int EVP_SignFinal(EVP_MD_CTX *ctx, unsigned char *md, unsigned int *s,
+                         EVP_PKEY *pkey);
+
+__owur int EVP_DigestSign(EVP_MD_CTX *ctx, unsigned char *sigret,
+                          size_t *siglen, const unsigned char *tbs,
+                          size_t tbslen);
+
+__owur int EVP_VerifyFinal(EVP_MD_CTX *ctx, const unsigned char *sigbuf,
+                           unsigned int siglen, EVP_PKEY *pkey);
+
+__owur int EVP_DigestVerify(EVP_MD_CTX *ctx, const unsigned char *sigret,
+                            size_t siglen, const unsigned char *tbs,
+                            size_t tbslen);
+
+/*__owur*/ int EVP_DigestSignInit(EVP_MD_CTX *ctx, EVP_PKEY_CTX **pctx,
+                                  const EVP_MD *type, ENGINE *e,
+                                  EVP_PKEY *pkey);
+__owur int EVP_DigestSignFinal(EVP_MD_CTX *ctx, unsigned char *sigret,
+                               size_t *siglen);
+
+__owur int EVP_DigestVerifyInit(EVP_MD_CTX *ctx, EVP_PKEY_CTX **pctx,
+                                const EVP_MD *type, ENGINE *e,
+                                EVP_PKEY *pkey);
+__owur int EVP_DigestVerifyFinal(EVP_MD_CTX *ctx, const unsigned char *sig,
+                                 size_t siglen);
+
+# ifndef OPENSSL_NO_RSA
+__owur int EVP_OpenInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type,
+                        const unsigned char *ek, int ekl,
+                        const unsigned char *iv, EVP_PKEY *priv);
+__owur int EVP_OpenFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl);
+
+__owur int EVP_SealInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type,
+                        unsigned char **ek, int *ekl, unsigned char *iv,
+                        EVP_PKEY **pubk, int npubk);
+__owur int EVP_SealFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl);
+# endif
+
+EVP_ENCODE_CTX *EVP_ENCODE_CTX_new(void);
+void EVP_ENCODE_CTX_free(EVP_ENCODE_CTX *ctx);
+int EVP_ENCODE_CTX_copy(EVP_ENCODE_CTX *dctx, EVP_ENCODE_CTX *sctx);
+int EVP_ENCODE_CTX_num(EVP_ENCODE_CTX *ctx);
+void EVP_EncodeInit(EVP_ENCODE_CTX *ctx);
+int EVP_EncodeUpdate(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl,
+                     const unsigned char *in, int inl);
+void EVP_EncodeFinal(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl);
+int EVP_EncodeBlock(unsigned char *t, const unsigned char *f, int n);
+
+void EVP_DecodeInit(EVP_ENCODE_CTX *ctx);
+int EVP_DecodeUpdate(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl,
+                     const unsigned char *in, int inl);
+int EVP_DecodeFinal(EVP_ENCODE_CTX *ctx, unsigned
+                    char *out, int *outl);
+int EVP_DecodeBlock(unsigned char *t, const unsigned char *f, int n);
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define EVP_CIPHER_CTX_init(c)      EVP_CIPHER_CTX_reset(c)
+#  define EVP_CIPHER_CTX_cleanup(c)   EVP_CIPHER_CTX_reset(c)
+# endif
+EVP_CIPHER_CTX *EVP_CIPHER_CTX_new(void);
+int EVP_CIPHER_CTX_reset(EVP_CIPHER_CTX *c);
+void EVP_CIPHER_CTX_free(EVP_CIPHER_CTX *c);
+int EVP_CIPHER_CTX_set_key_length(EVP_CIPHER_CTX *x, int keylen);
+int EVP_CIPHER_CTX_set_padding(EVP_CIPHER_CTX *c, int pad);
+int EVP_CIPHER_CTX_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void *ptr);
+int EVP_CIPHER_CTX_rand_key(EVP_CIPHER_CTX *ctx, unsigned char *key);
+
+const BIO_METHOD *BIO_f_md(void);
+const BIO_METHOD *BIO_f_base64(void);
+const BIO_METHOD *BIO_f_cipher(void);
+const BIO_METHOD *BIO_f_reliable(void);
+__owur int BIO_set_cipher(BIO *b, const EVP_CIPHER *c, const unsigned char *k,
+                          const unsigned char *i, int enc);
+
+const EVP_MD *EVP_md_null(void);
+# ifndef OPENSSL_NO_MD2
+const EVP_MD *EVP_md2(void);
+# endif
+# ifndef OPENSSL_NO_MD4
+const EVP_MD *EVP_md4(void);
+# endif
+# ifndef OPENSSL_NO_MD5
+const EVP_MD *EVP_md5(void);
+const EVP_MD *EVP_md5_sha1(void);
+# endif
+# ifndef OPENSSL_NO_BLAKE2
+const EVP_MD *EVP_blake2b512(void);
+const EVP_MD *EVP_blake2s256(void);
+# endif
+const EVP_MD *EVP_sha1(void);
+const EVP_MD *EVP_sha224(void);
+const EVP_MD *EVP_sha256(void);
+const EVP_MD *EVP_sha384(void);
+const EVP_MD *EVP_sha512(void);
+const EVP_MD *EVP_sha512_224(void);
+const EVP_MD *EVP_sha512_256(void);
+const EVP_MD *EVP_sha3_224(void);
+const EVP_MD *EVP_sha3_256(void);
+const EVP_MD *EVP_sha3_384(void);
+const EVP_MD *EVP_sha3_512(void);
+const EVP_MD *EVP_shake128(void);
+const EVP_MD *EVP_shake256(void);
+# ifndef OPENSSL_NO_MDC2
+const EVP_MD *EVP_mdc2(void);
+# endif
+# ifndef OPENSSL_NO_RMD160
+const EVP_MD *EVP_ripemd160(void);
+# endif
+# ifndef OPENSSL_NO_WHIRLPOOL
+const EVP_MD *EVP_whirlpool(void);
+# endif
+# ifndef OPENSSL_NO_SM3
+const EVP_MD *EVP_sm3(void);
+# endif
+const EVP_CIPHER *EVP_enc_null(void); /* does nothing :-) */
+# ifndef OPENSSL_NO_DES
+const EVP_CIPHER *EVP_des_ecb(void);
+const EVP_CIPHER *EVP_des_ede(void);
+const EVP_CIPHER *EVP_des_ede3(void);
+const EVP_CIPHER *EVP_des_ede_ecb(void);
+const EVP_CIPHER *EVP_des_ede3_ecb(void);
+const EVP_CIPHER *EVP_des_cfb64(void);
+#  define EVP_des_cfb EVP_des_cfb64
+const EVP_CIPHER *EVP_des_cfb1(void);
+const EVP_CIPHER *EVP_des_cfb8(void);
+const EVP_CIPHER *EVP_des_ede_cfb64(void);
+#  define EVP_des_ede_cfb EVP_des_ede_cfb64
+const EVP_CIPHER *EVP_des_ede3_cfb64(void);
+#  define EVP_des_ede3_cfb EVP_des_ede3_cfb64
+const EVP_CIPHER *EVP_des_ede3_cfb1(void);
+const EVP_CIPHER *EVP_des_ede3_cfb8(void);
+const EVP_CIPHER *EVP_des_ofb(void);
+const EVP_CIPHER *EVP_des_ede_ofb(void);
+const EVP_CIPHER *EVP_des_ede3_ofb(void);
+const EVP_CIPHER *EVP_des_cbc(void);
+const EVP_CIPHER *EVP_des_ede_cbc(void);
+const EVP_CIPHER *EVP_des_ede3_cbc(void);
+const EVP_CIPHER *EVP_desx_cbc(void);
+const EVP_CIPHER *EVP_des_ede3_wrap(void);
+/*
+ * This should now be supported through the dev_crypto ENGINE. But also, why
+ * are rc4 and md5 declarations made here inside a "NO_DES" precompiler
+ * branch?
+ */
+# endif
+# ifndef OPENSSL_NO_RC4
+const EVP_CIPHER *EVP_rc4(void);
+const EVP_CIPHER *EVP_rc4_40(void);
+#  ifndef OPENSSL_NO_MD5
+const EVP_CIPHER *EVP_rc4_hmac_md5(void);
+#  endif
+# endif
+# ifndef OPENSSL_NO_IDEA
+const EVP_CIPHER *EVP_idea_ecb(void);
+const EVP_CIPHER *EVP_idea_cfb64(void);
+#  define EVP_idea_cfb EVP_idea_cfb64
+const EVP_CIPHER *EVP_idea_ofb(void);
+const EVP_CIPHER *EVP_idea_cbc(void);
+# endif
+# ifndef OPENSSL_NO_RC2
+const EVP_CIPHER *EVP_rc2_ecb(void);
+const EVP_CIPHER *EVP_rc2_cbc(void);
+const EVP_CIPHER *EVP_rc2_40_cbc(void);
+const EVP_CIPHER *EVP_rc2_64_cbc(void);
+const EVP_CIPHER *EVP_rc2_cfb64(void);
+#  define EVP_rc2_cfb EVP_rc2_cfb64
+const EVP_CIPHER *EVP_rc2_ofb(void);
+# endif
+# ifndef OPENSSL_NO_BF
+const EVP_CIPHER *EVP_bf_ecb(void);
+const EVP_CIPHER *EVP_bf_cbc(void);
+const EVP_CIPHER *EVP_bf_cfb64(void);
+#  define EVP_bf_cfb EVP_bf_cfb64
+const EVP_CIPHER *EVP_bf_ofb(void);
+# endif
+# ifndef OPENSSL_NO_CAST
+const EVP_CIPHER *EVP_cast5_ecb(void);
+const EVP_CIPHER *EVP_cast5_cbc(void);
+const EVP_CIPHER *EVP_cast5_cfb64(void);
+#  define EVP_cast5_cfb EVP_cast5_cfb64
+const EVP_CIPHER *EVP_cast5_ofb(void);
+# endif
+# ifndef OPENSSL_NO_RC5
+const EVP_CIPHER *EVP_rc5_32_12_16_cbc(void);
+const EVP_CIPHER *EVP_rc5_32_12_16_ecb(void);
+const EVP_CIPHER *EVP_rc5_32_12_16_cfb64(void);
+#  define EVP_rc5_32_12_16_cfb EVP_rc5_32_12_16_cfb64
+const EVP_CIPHER *EVP_rc5_32_12_16_ofb(void);
+# endif
+const EVP_CIPHER *EVP_aes_128_ecb(void);
+const EVP_CIPHER *EVP_aes_128_cbc(void);
+const EVP_CIPHER *EVP_aes_128_cfb1(void);
+const EVP_CIPHER *EVP_aes_128_cfb8(void);
+const EVP_CIPHER *EVP_aes_128_cfb128(void);
+# define EVP_aes_128_cfb EVP_aes_128_cfb128
+const EVP_CIPHER *EVP_aes_128_ofb(void);
+const EVP_CIPHER *EVP_aes_128_ctr(void);
+const EVP_CIPHER *EVP_aes_128_ccm(void);
+const EVP_CIPHER *EVP_aes_128_gcm(void);
+const EVP_CIPHER *EVP_aes_128_xts(void);
+const EVP_CIPHER *EVP_aes_128_wrap(void);
+const EVP_CIPHER *EVP_aes_128_wrap_pad(void);
+# ifndef OPENSSL_NO_OCB
+const EVP_CIPHER *EVP_aes_128_ocb(void);
+# endif
+const EVP_CIPHER *EVP_aes_192_ecb(void);
+const EVP_CIPHER *EVP_aes_192_cbc(void);
+const EVP_CIPHER *EVP_aes_192_cfb1(void);
+const EVP_CIPHER *EVP_aes_192_cfb8(void);
+const EVP_CIPHER *EVP_aes_192_cfb128(void);
+# define EVP_aes_192_cfb EVP_aes_192_cfb128
+const EVP_CIPHER *EVP_aes_192_ofb(void);
+const EVP_CIPHER *EVP_aes_192_ctr(void);
+const EVP_CIPHER *EVP_aes_192_ccm(void);
+const EVP_CIPHER *EVP_aes_192_gcm(void);
+const EVP_CIPHER *EVP_aes_192_wrap(void);
+const EVP_CIPHER *EVP_aes_192_wrap_pad(void);
+# ifndef OPENSSL_NO_OCB
+const EVP_CIPHER *EVP_aes_192_ocb(void);
+# endif
+const EVP_CIPHER *EVP_aes_256_ecb(void);
+const EVP_CIPHER *EVP_aes_256_cbc(void);
+const EVP_CIPHER *EVP_aes_256_cfb1(void);
+const EVP_CIPHER *EVP_aes_256_cfb8(void);
+const EVP_CIPHER *EVP_aes_256_cfb128(void);
+# define EVP_aes_256_cfb EVP_aes_256_cfb128
+const EVP_CIPHER *EVP_aes_256_ofb(void);
+const EVP_CIPHER *EVP_aes_256_ctr(void);
+const EVP_CIPHER *EVP_aes_256_ccm(void);
+const EVP_CIPHER *EVP_aes_256_gcm(void);
+const EVP_CIPHER *EVP_aes_256_xts(void);
+const EVP_CIPHER *EVP_aes_256_wrap(void);
+const EVP_CIPHER *EVP_aes_256_wrap_pad(void);
+# ifndef OPENSSL_NO_OCB
+const EVP_CIPHER *EVP_aes_256_ocb(void);
+# endif
+const EVP_CIPHER *EVP_aes_128_cbc_hmac_sha1(void);
+const EVP_CIPHER *EVP_aes_256_cbc_hmac_sha1(void);
+const EVP_CIPHER *EVP_aes_128_cbc_hmac_sha256(void);
+const EVP_CIPHER *EVP_aes_256_cbc_hmac_sha256(void);
+# ifndef OPENSSL_NO_ARIA
+const EVP_CIPHER *EVP_aria_128_ecb(void);
+const EVP_CIPHER *EVP_aria_128_cbc(void);
+const EVP_CIPHER *EVP_aria_128_cfb1(void);
+const EVP_CIPHER *EVP_aria_128_cfb8(void);
+const EVP_CIPHER *EVP_aria_128_cfb128(void);
+#  define EVP_aria_128_cfb EVP_aria_128_cfb128
+const EVP_CIPHER *EVP_aria_128_ctr(void);
+const EVP_CIPHER *EVP_aria_128_ofb(void);
+const EVP_CIPHER *EVP_aria_128_gcm(void);
+const EVP_CIPHER *EVP_aria_128_ccm(void);
+const EVP_CIPHER *EVP_aria_192_ecb(void);
+const EVP_CIPHER *EVP_aria_192_cbc(void);
+const EVP_CIPHER *EVP_aria_192_cfb1(void);
+const EVP_CIPHER *EVP_aria_192_cfb8(void);
+const EVP_CIPHER *EVP_aria_192_cfb128(void);
+#  define EVP_aria_192_cfb EVP_aria_192_cfb128
+const EVP_CIPHER *EVP_aria_192_ctr(void);
+const EVP_CIPHER *EVP_aria_192_ofb(void);
+const EVP_CIPHER *EVP_aria_192_gcm(void);
+const EVP_CIPHER *EVP_aria_192_ccm(void);
+const EVP_CIPHER *EVP_aria_256_ecb(void);
+const EVP_CIPHER *EVP_aria_256_cbc(void);
+const EVP_CIPHER *EVP_aria_256_cfb1(void);
+const EVP_CIPHER *EVP_aria_256_cfb8(void);
+const EVP_CIPHER *EVP_aria_256_cfb128(void);
+#  define EVP_aria_256_cfb EVP_aria_256_cfb128
+const EVP_CIPHER *EVP_aria_256_ctr(void);
+const EVP_CIPHER *EVP_aria_256_ofb(void);
+const EVP_CIPHER *EVP_aria_256_gcm(void);
+const EVP_CIPHER *EVP_aria_256_ccm(void);
+# endif
+# ifndef OPENSSL_NO_CAMELLIA
+const EVP_CIPHER *EVP_camellia_128_ecb(void);
+const EVP_CIPHER *EVP_camellia_128_cbc(void);
+const EVP_CIPHER *EVP_camellia_128_cfb1(void);
+const EVP_CIPHER *EVP_camellia_128_cfb8(void);
+const EVP_CIPHER *EVP_camellia_128_cfb128(void);
+#  define EVP_camellia_128_cfb EVP_camellia_128_cfb128
+const EVP_CIPHER *EVP_camellia_128_ofb(void);
+const EVP_CIPHER *EVP_camellia_128_ctr(void);
+const EVP_CIPHER *EVP_camellia_192_ecb(void);
+const EVP_CIPHER *EVP_camellia_192_cbc(void);
+const EVP_CIPHER *EVP_camellia_192_cfb1(void);
+const EVP_CIPHER *EVP_camellia_192_cfb8(void);
+const EVP_CIPHER *EVP_camellia_192_cfb128(void);
+#  define EVP_camellia_192_cfb EVP_camellia_192_cfb128
+const EVP_CIPHER *EVP_camellia_192_ofb(void);
+const EVP_CIPHER *EVP_camellia_192_ctr(void);
+const EVP_CIPHER *EVP_camellia_256_ecb(void);
+const EVP_CIPHER *EVP_camellia_256_cbc(void);
+const EVP_CIPHER *EVP_camellia_256_cfb1(void);
+const EVP_CIPHER *EVP_camellia_256_cfb8(void);
+const EVP_CIPHER *EVP_camellia_256_cfb128(void);
+#  define EVP_camellia_256_cfb EVP_camellia_256_cfb128
+const EVP_CIPHER *EVP_camellia_256_ofb(void);
+const EVP_CIPHER *EVP_camellia_256_ctr(void);
+# endif
+# ifndef OPENSSL_NO_CHACHA
+const EVP_CIPHER *EVP_chacha20(void);
+#  ifndef OPENSSL_NO_POLY1305
+const EVP_CIPHER *EVP_chacha20_poly1305(void);
+#  endif
+# endif
+
+# ifndef OPENSSL_NO_SEED
+const EVP_CIPHER *EVP_seed_ecb(void);
+const EVP_CIPHER *EVP_seed_cbc(void);
+const EVP_CIPHER *EVP_seed_cfb128(void);
+#  define EVP_seed_cfb EVP_seed_cfb128
+const EVP_CIPHER *EVP_seed_ofb(void);
+# endif
+
+# ifndef OPENSSL_NO_SM4
+const EVP_CIPHER *EVP_sm4_ecb(void);
+const EVP_CIPHER *EVP_sm4_cbc(void);
+const EVP_CIPHER *EVP_sm4_cfb128(void);
+#  define EVP_sm4_cfb EVP_sm4_cfb128
+const EVP_CIPHER *EVP_sm4_ofb(void);
+const EVP_CIPHER *EVP_sm4_ctr(void);
+# endif
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define OPENSSL_add_all_algorithms_conf() \
+    OPENSSL_init_crypto(OPENSSL_INIT_ADD_ALL_CIPHERS \
+                        | OPENSSL_INIT_ADD_ALL_DIGESTS \
+                        | OPENSSL_INIT_LOAD_CONFIG, NULL)
+#  define OPENSSL_add_all_algorithms_noconf() \
+    OPENSSL_init_crypto(OPENSSL_INIT_ADD_ALL_CIPHERS \
+                        | OPENSSL_INIT_ADD_ALL_DIGESTS, NULL)
+
+#  ifdef OPENSSL_LOAD_CONF
+#   define OpenSSL_add_all_algorithms() OPENSSL_add_all_algorithms_conf()
+#  else
+#   define OpenSSL_add_all_algorithms() OPENSSL_add_all_algorithms_noconf()
+#  endif
+
+#  define OpenSSL_add_all_ciphers() \
+    OPENSSL_init_crypto(OPENSSL_INIT_ADD_ALL_CIPHERS, NULL)
+#  define OpenSSL_add_all_digests() \
+    OPENSSL_init_crypto(OPENSSL_INIT_ADD_ALL_DIGESTS, NULL)
+
+#  define EVP_cleanup() while(0) continue
+# endif
+
+int EVP_add_cipher(const EVP_CIPHER *cipher);
+int EVP_add_digest(const EVP_MD *digest);
+
+const EVP_CIPHER *EVP_get_cipherbyname(const char *name);
+const EVP_MD *EVP_get_digestbyname(const char *name);
+
+void EVP_CIPHER_do_all(void (*fn) (const EVP_CIPHER *ciph,
+                                   const char *from, const char *to, void *x),
+                       void *arg);
+void EVP_CIPHER_do_all_sorted(void (*fn)
+                               (const EVP_CIPHER *ciph, const char *from,
+                                const char *to, void *x), void *arg);
+
+void EVP_MD_do_all(void (*fn) (const EVP_MD *ciph,
+                               const char *from, const char *to, void *x),
+                   void *arg);
+void EVP_MD_do_all_sorted(void (*fn)
+                           (const EVP_MD *ciph, const char *from,
+                            const char *to, void *x), void *arg);
+
+int EVP_PKEY_decrypt_old(unsigned char *dec_key,
+                         const unsigned char *enc_key, int enc_key_len,
+                         EVP_PKEY *private_key);
+int EVP_PKEY_encrypt_old(unsigned char *enc_key,
+                         const unsigned char *key, int key_len,
+                         EVP_PKEY *pub_key);
+int EVP_PKEY_type(int type);
+int EVP_PKEY_id(const EVP_PKEY *pkey);
+int EVP_PKEY_base_id(const EVP_PKEY *pkey);
+int EVP_PKEY_bits(const EVP_PKEY *pkey);
+int EVP_PKEY_security_bits(const EVP_PKEY *pkey);
+int EVP_PKEY_size(const EVP_PKEY *pkey);
+int EVP_PKEY_set_type(EVP_PKEY *pkey, int type);
+int EVP_PKEY_set_type_str(EVP_PKEY *pkey, const char *str, int len);
+int EVP_PKEY_set_alias_type(EVP_PKEY *pkey, int type);
+# ifndef OPENSSL_NO_ENGINE
+int EVP_PKEY_set1_engine(EVP_PKEY *pkey, ENGINE *e);
+# endif
+int EVP_PKEY_assign(EVP_PKEY *pkey, int type, void *key);
+void *EVP_PKEY_get0(const EVP_PKEY *pkey);
+const unsigned char *EVP_PKEY_get0_hmac(const EVP_PKEY *pkey, size_t *len);
+# ifndef OPENSSL_NO_POLY1305
+const unsigned char *EVP_PKEY_get0_poly1305(const EVP_PKEY *pkey, size_t *len);
+# endif
+# ifndef OPENSSL_NO_SIPHASH
+const unsigned char *EVP_PKEY_get0_siphash(const EVP_PKEY *pkey, size_t *len);
+# endif
+
+# ifndef OPENSSL_NO_RSA
+struct rsa_st;
+int EVP_PKEY_set1_RSA(EVP_PKEY *pkey, struct rsa_st *key);
+struct rsa_st *EVP_PKEY_get0_RSA(EVP_PKEY *pkey);
+struct rsa_st *EVP_PKEY_get1_RSA(EVP_PKEY *pkey);
+# endif
+# ifndef OPENSSL_NO_DSA
+struct dsa_st;
+int EVP_PKEY_set1_DSA(EVP_PKEY *pkey, struct dsa_st *key);
+struct dsa_st *EVP_PKEY_get0_DSA(EVP_PKEY *pkey);
+struct dsa_st *EVP_PKEY_get1_DSA(EVP_PKEY *pkey);
+# endif
+# ifndef OPENSSL_NO_DH
+struct dh_st;
+int EVP_PKEY_set1_DH(EVP_PKEY *pkey, struct dh_st *key);
+struct dh_st *EVP_PKEY_get0_DH(EVP_PKEY *pkey);
+struct dh_st *EVP_PKEY_get1_DH(EVP_PKEY *pkey);
+# endif
+# ifndef OPENSSL_NO_EC
+struct ec_key_st;
+int EVP_PKEY_set1_EC_KEY(EVP_PKEY *pkey, struct ec_key_st *key);
+struct ec_key_st *EVP_PKEY_get0_EC_KEY(EVP_PKEY *pkey);
+struct ec_key_st *EVP_PKEY_get1_EC_KEY(EVP_PKEY *pkey);
+# endif
+
+EVP_PKEY *EVP_PKEY_new(void);
+int EVP_PKEY_up_ref(EVP_PKEY *pkey);
+void EVP_PKEY_free(EVP_PKEY *pkey);
+
+EVP_PKEY *d2i_PublicKey(int type, EVP_PKEY **a, const unsigned char **pp,
+                        long length);
+int i2d_PublicKey(EVP_PKEY *a, unsigned char **pp);
+
+EVP_PKEY *d2i_PrivateKey(int type, EVP_PKEY **a, const unsigned char **pp,
+                         long length);
+EVP_PKEY *d2i_AutoPrivateKey(EVP_PKEY **a, const unsigned char **pp,
+                             long length);
+int i2d_PrivateKey(EVP_PKEY *a, unsigned char **pp);
+
+int EVP_PKEY_copy_parameters(EVP_PKEY *to, const EVP_PKEY *from);
+int EVP_PKEY_missing_parameters(const EVP_PKEY *pkey);
+int EVP_PKEY_save_parameters(EVP_PKEY *pkey, int mode);
+int EVP_PKEY_cmp_parameters(const EVP_PKEY *a, const EVP_PKEY *b);
+
+int EVP_PKEY_cmp(const EVP_PKEY *a, const EVP_PKEY *b);
+
+int EVP_PKEY_print_public(BIO *out, const EVP_PKEY *pkey,
+                          int indent, ASN1_PCTX *pctx);
+int EVP_PKEY_print_private(BIO *out, const EVP_PKEY *pkey,
+                           int indent, ASN1_PCTX *pctx);
+int EVP_PKEY_print_params(BIO *out, const EVP_PKEY *pkey,
+                          int indent, ASN1_PCTX *pctx);
+
+int EVP_PKEY_get_default_digest_nid(EVP_PKEY *pkey, int *pnid);
+
+int EVP_PKEY_set1_tls_encodedpoint(EVP_PKEY *pkey,
+                                   const unsigned char *pt, size_t ptlen);
+size_t EVP_PKEY_get1_tls_encodedpoint(EVP_PKEY *pkey, unsigned char **ppt);
+
+int EVP_CIPHER_type(const EVP_CIPHER *ctx);
+
+/* calls methods */
+int EVP_CIPHER_param_to_asn1(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
+int EVP_CIPHER_asn1_to_param(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
+
+/* These are used by EVP_CIPHER methods */
+int EVP_CIPHER_set_asn1_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
+int EVP_CIPHER_get_asn1_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
+
+/* PKCS5 password based encryption */
+int PKCS5_PBE_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass, int passlen,
+                       ASN1_TYPE *param, const EVP_CIPHER *cipher,
+                       const EVP_MD *md, int en_de);
+int PKCS5_PBKDF2_HMAC_SHA1(const char *pass, int passlen,
+                           const unsigned char *salt, int saltlen, int iter,
+                           int keylen, unsigned char *out);
+int PKCS5_PBKDF2_HMAC(const char *pass, int passlen,
+                      const unsigned char *salt, int saltlen, int iter,
+                      const EVP_MD *digest, int keylen, unsigned char *out);
+int PKCS5_v2_PBE_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass, int passlen,
+                          ASN1_TYPE *param, const EVP_CIPHER *cipher,
+                          const EVP_MD *md, int en_de);
+
+#ifndef OPENSSL_NO_SCRYPT
+int EVP_PBE_scrypt(const char *pass, size_t passlen,
+                   const unsigned char *salt, size_t saltlen,
+                   uint64_t N, uint64_t r, uint64_t p, uint64_t maxmem,
+                   unsigned char *key, size_t keylen);
+
+int PKCS5_v2_scrypt_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass,
+                             int passlen, ASN1_TYPE *param,
+                             const EVP_CIPHER *c, const EVP_MD *md, int en_de);
+#endif
+
+void PKCS5_PBE_add(void);
+
+int EVP_PBE_CipherInit(ASN1_OBJECT *pbe_obj, const char *pass, int passlen,
+                       ASN1_TYPE *param, EVP_CIPHER_CTX *ctx, int en_de);
+
+/* PBE type */
+
+/* Can appear as the outermost AlgorithmIdentifier */
+# define EVP_PBE_TYPE_OUTER      0x0
+/* Is an PRF type OID */
+# define EVP_PBE_TYPE_PRF        0x1
+/* Is a PKCS#5 v2.0 KDF */
+# define EVP_PBE_TYPE_KDF        0x2
+
+int EVP_PBE_alg_add_type(int pbe_type, int pbe_nid, int cipher_nid,
+                         int md_nid, EVP_PBE_KEYGEN *keygen);
+int EVP_PBE_alg_add(int nid, const EVP_CIPHER *cipher, const EVP_MD *md,
+                    EVP_PBE_KEYGEN *keygen);
+int EVP_PBE_find(int type, int pbe_nid, int *pcnid, int *pmnid,
+                 EVP_PBE_KEYGEN **pkeygen);
+void EVP_PBE_cleanup(void);
+int EVP_PBE_get(int *ptype, int *ppbe_nid, size_t num);
+
+# define ASN1_PKEY_ALIAS         0x1
+# define ASN1_PKEY_DYNAMIC       0x2
+# define ASN1_PKEY_SIGPARAM_NULL 0x4
+
+# define ASN1_PKEY_CTRL_PKCS7_SIGN       0x1
+# define ASN1_PKEY_CTRL_PKCS7_ENCRYPT    0x2
+# define ASN1_PKEY_CTRL_DEFAULT_MD_NID   0x3
+# define ASN1_PKEY_CTRL_CMS_SIGN         0x5
+# define ASN1_PKEY_CTRL_CMS_ENVELOPE     0x7
+# define ASN1_PKEY_CTRL_CMS_RI_TYPE      0x8
+
+# define ASN1_PKEY_CTRL_SET1_TLS_ENCPT   0x9
+# define ASN1_PKEY_CTRL_GET1_TLS_ENCPT   0xa
+
+int EVP_PKEY_asn1_get_count(void);
+const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_get0(int idx);
+const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_find(ENGINE **pe, int type);
+const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_find_str(ENGINE **pe,
+                                                   const char *str, int len);
+int EVP_PKEY_asn1_add0(const EVP_PKEY_ASN1_METHOD *ameth);
+int EVP_PKEY_asn1_add_alias(int to, int from);
+int EVP_PKEY_asn1_get0_info(int *ppkey_id, int *pkey_base_id,
+                            int *ppkey_flags, const char **pinfo,
+                            const char **ppem_str,
+                            const EVP_PKEY_ASN1_METHOD *ameth);
+
+const EVP_PKEY_ASN1_METHOD *EVP_PKEY_get0_asn1(const EVP_PKEY *pkey);
+EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_new(int id, int flags,
+                                        const char *pem_str,
+                                        const char *info);
+void EVP_PKEY_asn1_copy(EVP_PKEY_ASN1_METHOD *dst,
+                        const EVP_PKEY_ASN1_METHOD *src);
+void EVP_PKEY_asn1_free(EVP_PKEY_ASN1_METHOD *ameth);
+void EVP_PKEY_asn1_set_public(EVP_PKEY_ASN1_METHOD *ameth,
+                              int (*pub_decode) (EVP_PKEY *pk,
+                                                 X509_PUBKEY *pub),
+                              int (*pub_encode) (X509_PUBKEY *pub,
+                                                 const EVP_PKEY *pk),
+                              int (*pub_cmp) (const EVP_PKEY *a,
+                                              const EVP_PKEY *b),
+                              int (*pub_print) (BIO *out,
+                                                const EVP_PKEY *pkey,
+                                                int indent, ASN1_PCTX *pctx),
+                              int (*pkey_size) (const EVP_PKEY *pk),
+                              int (*pkey_bits) (const EVP_PKEY *pk));
+void EVP_PKEY_asn1_set_private(EVP_PKEY_ASN1_METHOD *ameth,
+                               int (*priv_decode) (EVP_PKEY *pk,
+                                                   const PKCS8_PRIV_KEY_INFO
+                                                   *p8inf),
+                               int (*priv_encode) (PKCS8_PRIV_KEY_INFO *p8,
+                                                   const EVP_PKEY *pk),
+                               int (*priv_print) (BIO *out,
+                                                  const EVP_PKEY *pkey,
+                                                  int indent,
+                                                  ASN1_PCTX *pctx));
+void EVP_PKEY_asn1_set_param(EVP_PKEY_ASN1_METHOD *ameth,
+                             int (*param_decode) (EVP_PKEY *pkey,
+                                                  const unsigned char **pder,
+                                                  int derlen),
+                             int (*param_encode) (const EVP_PKEY *pkey,
+                                                  unsigned char **pder),
+                             int (*param_missing) (const EVP_PKEY *pk),
+                             int (*param_copy) (EVP_PKEY *to,
+                                                const EVP_PKEY *from),
+                             int (*param_cmp) (const EVP_PKEY *a,
+                                               const EVP_PKEY *b),
+                             int (*param_print) (BIO *out,
+                                                 const EVP_PKEY *pkey,
+                                                 int indent,
+                                                 ASN1_PCTX *pctx));
+
+void EVP_PKEY_asn1_set_free(EVP_PKEY_ASN1_METHOD *ameth,
+                            void (*pkey_free) (EVP_PKEY *pkey));
+void EVP_PKEY_asn1_set_ctrl(EVP_PKEY_ASN1_METHOD *ameth,
+                            int (*pkey_ctrl) (EVP_PKEY *pkey, int op,
+                                              long arg1, void *arg2));
+void EVP_PKEY_asn1_set_item(EVP_PKEY_ASN1_METHOD *ameth,
+                            int (*item_verify) (EVP_MD_CTX *ctx,
+                                                const ASN1_ITEM *it,
+                                                void *asn,
+                                                X509_ALGOR *a,
+                                                ASN1_BIT_STRING *sig,
+                                                EVP_PKEY *pkey),
+                            int (*item_sign) (EVP_MD_CTX *ctx,
+                                              const ASN1_ITEM *it,
+                                              void *asn,
+                                              X509_ALGOR *alg1,
+                                              X509_ALGOR *alg2,
+                                              ASN1_BIT_STRING *sig));
+
+void EVP_PKEY_asn1_set_siginf(EVP_PKEY_ASN1_METHOD *ameth,
+                              int (*siginf_set) (X509_SIG_INFO *siginf,
+                                                 const X509_ALGOR *alg,
+                                                 const ASN1_STRING *sig));
+
+void EVP_PKEY_asn1_set_check(EVP_PKEY_ASN1_METHOD *ameth,
+                             int (*pkey_check) (const EVP_PKEY *pk));
+
+void EVP_PKEY_asn1_set_public_check(EVP_PKEY_ASN1_METHOD *ameth,
+                                    int (*pkey_pub_check) (const EVP_PKEY *pk));
+
+void EVP_PKEY_asn1_set_param_check(EVP_PKEY_ASN1_METHOD *ameth,
+                                   int (*pkey_param_check) (const EVP_PKEY *pk));
+
+void EVP_PKEY_asn1_set_set_priv_key(EVP_PKEY_ASN1_METHOD *ameth,
+                                    int (*set_priv_key) (EVP_PKEY *pk,
+                                                         const unsigned char
+                                                            *priv,
+                                                         size_t len));
+void EVP_PKEY_asn1_set_set_pub_key(EVP_PKEY_ASN1_METHOD *ameth,
+                                   int (*set_pub_key) (EVP_PKEY *pk,
+                                                       const unsigned char *pub,
+                                                       size_t len));
+void EVP_PKEY_asn1_set_get_priv_key(EVP_PKEY_ASN1_METHOD *ameth,
+                                    int (*get_priv_key) (const EVP_PKEY *pk,
+                                                         unsigned char *priv,
+                                                         size_t *len));
+void EVP_PKEY_asn1_set_get_pub_key(EVP_PKEY_ASN1_METHOD *ameth,
+                                   int (*get_pub_key) (const EVP_PKEY *pk,
+                                                       unsigned char *pub,
+                                                       size_t *len));
+
+void EVP_PKEY_asn1_set_security_bits(EVP_PKEY_ASN1_METHOD *ameth,
+                                     int (*pkey_security_bits) (const EVP_PKEY
+                                                                *pk));
+
+# define EVP_PKEY_OP_UNDEFINED           0
+# define EVP_PKEY_OP_PARAMGEN            (1<<1)
+# define EVP_PKEY_OP_KEYGEN              (1<<2)
+# define EVP_PKEY_OP_SIGN                (1<<3)
+# define EVP_PKEY_OP_VERIFY              (1<<4)
+# define EVP_PKEY_OP_VERIFYRECOVER       (1<<5)
+# define EVP_PKEY_OP_SIGNCTX             (1<<6)
+# define EVP_PKEY_OP_VERIFYCTX           (1<<7)
+# define EVP_PKEY_OP_ENCRYPT             (1<<8)
+# define EVP_PKEY_OP_DECRYPT             (1<<9)
+# define EVP_PKEY_OP_DERIVE              (1<<10)
+
+# define EVP_PKEY_OP_TYPE_SIG    \
+        (EVP_PKEY_OP_SIGN | EVP_PKEY_OP_VERIFY | EVP_PKEY_OP_VERIFYRECOVER \
+                | EVP_PKEY_OP_SIGNCTX | EVP_PKEY_OP_VERIFYCTX)
+
+# define EVP_PKEY_OP_TYPE_CRYPT \
+        (EVP_PKEY_OP_ENCRYPT | EVP_PKEY_OP_DECRYPT)
+
+# define EVP_PKEY_OP_TYPE_NOGEN \
+        (EVP_PKEY_OP_TYPE_SIG | EVP_PKEY_OP_TYPE_CRYPT | EVP_PKEY_OP_DERIVE)
+
+# define EVP_PKEY_OP_TYPE_GEN \
+                (EVP_PKEY_OP_PARAMGEN | EVP_PKEY_OP_KEYGEN)
+
+# define  EVP_PKEY_CTX_set_signature_md(ctx, md) \
+                EVP_PKEY_CTX_ctrl(ctx, -1, EVP_PKEY_OP_TYPE_SIG,  \
+                                        EVP_PKEY_CTRL_MD, 0, (void *)(md))
+
+# define  EVP_PKEY_CTX_get_signature_md(ctx, pmd)        \
+                EVP_PKEY_CTX_ctrl(ctx, -1, EVP_PKEY_OP_TYPE_SIG,  \
+                                        EVP_PKEY_CTRL_GET_MD, 0, (void *)(pmd))
+
+# define  EVP_PKEY_CTX_set_mac_key(ctx, key, len)        \
+                EVP_PKEY_CTX_ctrl(ctx, -1, EVP_PKEY_OP_KEYGEN,  \
+                                  EVP_PKEY_CTRL_SET_MAC_KEY, len, (void *)(key))
+
+# define EVP_PKEY_CTRL_MD                1
+# define EVP_PKEY_CTRL_PEER_KEY          2
+
+# define EVP_PKEY_CTRL_PKCS7_ENCRYPT     3
+# define EVP_PKEY_CTRL_PKCS7_DECRYPT     4
+
+# define EVP_PKEY_CTRL_PKCS7_SIGN        5
+
+# define EVP_PKEY_CTRL_SET_MAC_KEY       6
+
+# define EVP_PKEY_CTRL_DIGESTINIT        7
+
+/* Used by GOST key encryption in TLS */
+# define EVP_PKEY_CTRL_SET_IV            8
+
+# define EVP_PKEY_CTRL_CMS_ENCRYPT       9
+# define EVP_PKEY_CTRL_CMS_DECRYPT       10
+# define EVP_PKEY_CTRL_CMS_SIGN          11
+
+# define EVP_PKEY_CTRL_CIPHER            12
+
+# define EVP_PKEY_CTRL_GET_MD            13
+
+# define EVP_PKEY_CTRL_SET_DIGEST_SIZE   14
+
+# define EVP_PKEY_ALG_CTRL               0x1000
+
+# define EVP_PKEY_FLAG_AUTOARGLEN        2
+/*
+ * Method handles all operations: don't assume any digest related defaults.
+ */
+# define EVP_PKEY_FLAG_SIGCTX_CUSTOM     4
+
+const EVP_PKEY_METHOD *EVP_PKEY_meth_find(int type);
+EVP_PKEY_METHOD *EVP_PKEY_meth_new(int id, int flags);
+void EVP_PKEY_meth_get0_info(int *ppkey_id, int *pflags,
+                             const EVP_PKEY_METHOD *meth);
+void EVP_PKEY_meth_copy(EVP_PKEY_METHOD *dst, const EVP_PKEY_METHOD *src);
+void EVP_PKEY_meth_free(EVP_PKEY_METHOD *pmeth);
+int EVP_PKEY_meth_add0(const EVP_PKEY_METHOD *pmeth);
+int EVP_PKEY_meth_remove(const EVP_PKEY_METHOD *pmeth);
+size_t EVP_PKEY_meth_get_count(void);
+const EVP_PKEY_METHOD *EVP_PKEY_meth_get0(size_t idx);
+
+EVP_PKEY_CTX *EVP_PKEY_CTX_new(EVP_PKEY *pkey, ENGINE *e);
+EVP_PKEY_CTX *EVP_PKEY_CTX_new_id(int id, ENGINE *e);
+EVP_PKEY_CTX *EVP_PKEY_CTX_dup(EVP_PKEY_CTX *ctx);
+void EVP_PKEY_CTX_free(EVP_PKEY_CTX *ctx);
+
+int EVP_PKEY_CTX_ctrl(EVP_PKEY_CTX *ctx, int keytype, int optype,
+                      int cmd, int p1, void *p2);
+int EVP_PKEY_CTX_ctrl_str(EVP_PKEY_CTX *ctx, const char *type,
+                          const char *value);
+int EVP_PKEY_CTX_ctrl_uint64(EVP_PKEY_CTX *ctx, int keytype, int optype,
+                             int cmd, uint64_t value);
+
+int EVP_PKEY_CTX_str2ctrl(EVP_PKEY_CTX *ctx, int cmd, const char *str);
+int EVP_PKEY_CTX_hex2ctrl(EVP_PKEY_CTX *ctx, int cmd, const char *hex);
+
+int EVP_PKEY_CTX_md(EVP_PKEY_CTX *ctx, int optype, int cmd, const char *md);
+
+int EVP_PKEY_CTX_get_operation(EVP_PKEY_CTX *ctx);
+void EVP_PKEY_CTX_set0_keygen_info(EVP_PKEY_CTX *ctx, int *dat, int datlen);
+
+EVP_PKEY *EVP_PKEY_new_mac_key(int type, ENGINE *e,
+                               const unsigned char *key, int keylen);
+EVP_PKEY *EVP_PKEY_new_raw_private_key(int type, ENGINE *e,
+                                       const unsigned char *priv,
+                                       size_t len);
+EVP_PKEY *EVP_PKEY_new_raw_public_key(int type, ENGINE *e,
+                                      const unsigned char *pub,
+                                      size_t len);
+int EVP_PKEY_get_raw_private_key(const EVP_PKEY *pkey, unsigned char *priv,
+                                 size_t *len);
+int EVP_PKEY_get_raw_public_key(const EVP_PKEY *pkey, unsigned char *pub,
+                                size_t *len);
+
+EVP_PKEY *EVP_PKEY_new_CMAC_key(ENGINE *e, const unsigned char *priv,
+                                size_t len, const EVP_CIPHER *cipher);
+
+void EVP_PKEY_CTX_set_data(EVP_PKEY_CTX *ctx, void *data);
+void *EVP_PKEY_CTX_get_data(EVP_PKEY_CTX *ctx);
+EVP_PKEY *EVP_PKEY_CTX_get0_pkey(EVP_PKEY_CTX *ctx);
+
+EVP_PKEY *EVP_PKEY_CTX_get0_peerkey(EVP_PKEY_CTX *ctx);
+
+void EVP_PKEY_CTX_set_app_data(EVP_PKEY_CTX *ctx, void *data);
+void *EVP_PKEY_CTX_get_app_data(EVP_PKEY_CTX *ctx);
+
+int EVP_PKEY_sign_init(EVP_PKEY_CTX *ctx);
+int EVP_PKEY_sign(EVP_PKEY_CTX *ctx,
+                  unsigned char *sig, size_t *siglen,
+                  const unsigned char *tbs, size_t tbslen);
+int EVP_PKEY_verify_init(EVP_PKEY_CTX *ctx);
+int EVP_PKEY_verify(EVP_PKEY_CTX *ctx,
+                    const unsigned char *sig, size_t siglen,
+                    const unsigned char *tbs, size_t tbslen);
+int EVP_PKEY_verify_recover_init(EVP_PKEY_CTX *ctx);
+int EVP_PKEY_verify_recover(EVP_PKEY_CTX *ctx,
+                            unsigned char *rout, size_t *routlen,
+                            const unsigned char *sig, size_t siglen);
+int EVP_PKEY_encrypt_init(EVP_PKEY_CTX *ctx);
+int EVP_PKEY_encrypt(EVP_PKEY_CTX *ctx,
+                     unsigned char *out, size_t *outlen,
+                     const unsigned char *in, size_t inlen);
+int EVP_PKEY_decrypt_init(EVP_PKEY_CTX *ctx);
+int EVP_PKEY_decrypt(EVP_PKEY_CTX *ctx,
+                     unsigned char *out, size_t *outlen,
+                     const unsigned char *in, size_t inlen);
+
+int EVP_PKEY_derive_init(EVP_PKEY_CTX *ctx);
+int EVP_PKEY_derive_set_peer(EVP_PKEY_CTX *ctx, EVP_PKEY *peer);
+int EVP_PKEY_derive(EVP_PKEY_CTX *ctx, unsigned char *key, size_t *keylen);
+
+typedef int EVP_PKEY_gen_cb(EVP_PKEY_CTX *ctx);
+
+int EVP_PKEY_paramgen_init(EVP_PKEY_CTX *ctx);
+int EVP_PKEY_paramgen(EVP_PKEY_CTX *ctx, EVP_PKEY **ppkey);
+int EVP_PKEY_keygen_init(EVP_PKEY_CTX *ctx);
+int EVP_PKEY_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY **ppkey);
+int EVP_PKEY_check(EVP_PKEY_CTX *ctx);
+int EVP_PKEY_public_check(EVP_PKEY_CTX *ctx);
+int EVP_PKEY_param_check(EVP_PKEY_CTX *ctx);
+
+void EVP_PKEY_CTX_set_cb(EVP_PKEY_CTX *ctx, EVP_PKEY_gen_cb *cb);
+EVP_PKEY_gen_cb *EVP_PKEY_CTX_get_cb(EVP_PKEY_CTX *ctx);
+
+int EVP_PKEY_CTX_get_keygen_info(EVP_PKEY_CTX *ctx, int idx);
+
+void EVP_PKEY_meth_set_init(EVP_PKEY_METHOD *pmeth,
+                            int (*init) (EVP_PKEY_CTX *ctx));
+
+void EVP_PKEY_meth_set_copy(EVP_PKEY_METHOD *pmeth,
+                            int (*copy) (EVP_PKEY_CTX *dst,
+                                         EVP_PKEY_CTX *src));
+
+void EVP_PKEY_meth_set_cleanup(EVP_PKEY_METHOD *pmeth,
+                               void (*cleanup) (EVP_PKEY_CTX *ctx));
+
+void EVP_PKEY_meth_set_paramgen(EVP_PKEY_METHOD *pmeth,
+                                int (*paramgen_init) (EVP_PKEY_CTX *ctx),
+                                int (*paramgen) (EVP_PKEY_CTX *ctx,
+                                                 EVP_PKEY *pkey));
+
+void EVP_PKEY_meth_set_keygen(EVP_PKEY_METHOD *pmeth,
+                              int (*keygen_init) (EVP_PKEY_CTX *ctx),
+                              int (*keygen) (EVP_PKEY_CTX *ctx,
+                                             EVP_PKEY *pkey));
+
+void EVP_PKEY_meth_set_sign(EVP_PKEY_METHOD *pmeth,
+                            int (*sign_init) (EVP_PKEY_CTX *ctx),
+                            int (*sign) (EVP_PKEY_CTX *ctx,
+                                         unsigned char *sig, size_t *siglen,
+                                         const unsigned char *tbs,
+                                         size_t tbslen));
+
+void EVP_PKEY_meth_set_verify(EVP_PKEY_METHOD *pmeth,
+                              int (*verify_init) (EVP_PKEY_CTX *ctx),
+                              int (*verify) (EVP_PKEY_CTX *ctx,
+                                             const unsigned char *sig,
+                                             size_t siglen,
+                                             const unsigned char *tbs,
+                                             size_t tbslen));
+
+void EVP_PKEY_meth_set_verify_recover(EVP_PKEY_METHOD *pmeth,
+                                      int (*verify_recover_init) (EVP_PKEY_CTX
+                                                                  *ctx),
+                                      int (*verify_recover) (EVP_PKEY_CTX
+                                                             *ctx,
+                                                             unsigned char
+                                                             *sig,
+                                                             size_t *siglen,
+                                                             const unsigned
+                                                             char *tbs,
+                                                             size_t tbslen));
+
+void EVP_PKEY_meth_set_signctx(EVP_PKEY_METHOD *pmeth,
+                               int (*signctx_init) (EVP_PKEY_CTX *ctx,
+                                                    EVP_MD_CTX *mctx),
+                               int (*signctx) (EVP_PKEY_CTX *ctx,
+                                               unsigned char *sig,
+                                               size_t *siglen,
+                                               EVP_MD_CTX *mctx));
+
+void EVP_PKEY_meth_set_verifyctx(EVP_PKEY_METHOD *pmeth,
+                                 int (*verifyctx_init) (EVP_PKEY_CTX *ctx,
+                                                        EVP_MD_CTX *mctx),
+                                 int (*verifyctx) (EVP_PKEY_CTX *ctx,
+                                                   const unsigned char *sig,
+                                                   int siglen,
+                                                   EVP_MD_CTX *mctx));
+
+void EVP_PKEY_meth_set_encrypt(EVP_PKEY_METHOD *pmeth,
+                               int (*encrypt_init) (EVP_PKEY_CTX *ctx),
+                               int (*encryptfn) (EVP_PKEY_CTX *ctx,
+                                                 unsigned char *out,
+                                                 size_t *outlen,
+                                                 const unsigned char *in,
+                                                 size_t inlen));
+
+void EVP_PKEY_meth_set_decrypt(EVP_PKEY_METHOD *pmeth,
+                               int (*decrypt_init) (EVP_PKEY_CTX *ctx),
+                               int (*decrypt) (EVP_PKEY_CTX *ctx,
+                                               unsigned char *out,
+                                               size_t *outlen,
+                                               const unsigned char *in,
+                                               size_t inlen));
+
+void EVP_PKEY_meth_set_derive(EVP_PKEY_METHOD *pmeth,
+                              int (*derive_init) (EVP_PKEY_CTX *ctx),
+                              int (*derive) (EVP_PKEY_CTX *ctx,
+                                             unsigned char *key,
+                                             size_t *keylen));
+
+void EVP_PKEY_meth_set_ctrl(EVP_PKEY_METHOD *pmeth,
+                            int (*ctrl) (EVP_PKEY_CTX *ctx, int type, int p1,
+                                         void *p2),
+                            int (*ctrl_str) (EVP_PKEY_CTX *ctx,
+                                             const char *type,
+                                             const char *value));
+
+void EVP_PKEY_meth_set_check(EVP_PKEY_METHOD *pmeth,
+                             int (*check) (EVP_PKEY *pkey));
+
+void EVP_PKEY_meth_set_public_check(EVP_PKEY_METHOD *pmeth,
+                                    int (*check) (EVP_PKEY *pkey));
+
+void EVP_PKEY_meth_set_param_check(EVP_PKEY_METHOD *pmeth,
+                                   int (*check) (EVP_PKEY *pkey));
+
+void EVP_PKEY_meth_set_digest_custom(EVP_PKEY_METHOD *pmeth,
+                                     int (*digest_custom) (EVP_PKEY_CTX *ctx,
+                                                           EVP_MD_CTX *mctx));
+
+void EVP_PKEY_meth_get_init(const EVP_PKEY_METHOD *pmeth,
+                            int (**pinit) (EVP_PKEY_CTX *ctx));
+
+void EVP_PKEY_meth_get_copy(const EVP_PKEY_METHOD *pmeth,
+                            int (**pcopy) (EVP_PKEY_CTX *dst,
+                                           EVP_PKEY_CTX *src));
+
+void EVP_PKEY_meth_get_cleanup(const EVP_PKEY_METHOD *pmeth,
+                               void (**pcleanup) (EVP_PKEY_CTX *ctx));
+
+void EVP_PKEY_meth_get_paramgen(const EVP_PKEY_METHOD *pmeth,
+                                int (**pparamgen_init) (EVP_PKEY_CTX *ctx),
+                                int (**pparamgen) (EVP_PKEY_CTX *ctx,
+                                                   EVP_PKEY *pkey));
+
+void EVP_PKEY_meth_get_keygen(const EVP_PKEY_METHOD *pmeth,
+                              int (**pkeygen_init) (EVP_PKEY_CTX *ctx),
+                              int (**pkeygen) (EVP_PKEY_CTX *ctx,
+                                               EVP_PKEY *pkey));
+
+void EVP_PKEY_meth_get_sign(const EVP_PKEY_METHOD *pmeth,
+                            int (**psign_init) (EVP_PKEY_CTX *ctx),
+                            int (**psign) (EVP_PKEY_CTX *ctx,
+                                           unsigned char *sig, size_t *siglen,
+                                           const unsigned char *tbs,
+                                           size_t tbslen));
+
+void EVP_PKEY_meth_get_verify(const EVP_PKEY_METHOD *pmeth,
+                              int (**pverify_init) (EVP_PKEY_CTX *ctx),
+                              int (**pverify) (EVP_PKEY_CTX *ctx,
+                                               const unsigned char *sig,
+                                               size_t siglen,
+                                               const unsigned char *tbs,
+                                               size_t tbslen));
+
+void EVP_PKEY_meth_get_verify_recover(const EVP_PKEY_METHOD *pmeth,
+                                      int (**pverify_recover_init) (EVP_PKEY_CTX
+                                                                    *ctx),
+                                      int (**pverify_recover) (EVP_PKEY_CTX
+                                                               *ctx,
+                                                               unsigned char
+                                                               *sig,
+                                                               size_t *siglen,
+                                                               const unsigned
+                                                               char *tbs,
+                                                               size_t tbslen));
+
+void EVP_PKEY_meth_get_signctx(const EVP_PKEY_METHOD *pmeth,
+                               int (**psignctx_init) (EVP_PKEY_CTX *ctx,
+                                                      EVP_MD_CTX *mctx),
+                               int (**psignctx) (EVP_PKEY_CTX *ctx,
+                                                 unsigned char *sig,
+                                                 size_t *siglen,
+                                                 EVP_MD_CTX *mctx));
+
+void EVP_PKEY_meth_get_verifyctx(const EVP_PKEY_METHOD *pmeth,
+                                 int (**pverifyctx_init) (EVP_PKEY_CTX *ctx,
+                                                          EVP_MD_CTX *mctx),
+                                 int (**pverifyctx) (EVP_PKEY_CTX *ctx,
+                                                     const unsigned char *sig,
+                                                     int siglen,
+                                                     EVP_MD_CTX *mctx));
+
+void EVP_PKEY_meth_get_encrypt(const EVP_PKEY_METHOD *pmeth,
+                               int (**pencrypt_init) (EVP_PKEY_CTX *ctx),
+                               int (**pencryptfn) (EVP_PKEY_CTX *ctx,
+                                                   unsigned char *out,
+                                                   size_t *outlen,
+                                                   const unsigned char *in,
+                                                   size_t inlen));
+
+void EVP_PKEY_meth_get_decrypt(const EVP_PKEY_METHOD *pmeth,
+                               int (**pdecrypt_init) (EVP_PKEY_CTX *ctx),
+                               int (**pdecrypt) (EVP_PKEY_CTX *ctx,
+                                                 unsigned char *out,
+                                                 size_t *outlen,
+                                                 const unsigned char *in,
+                                                 size_t inlen));
+
+void EVP_PKEY_meth_get_derive(const EVP_PKEY_METHOD *pmeth,
+                              int (**pderive_init) (EVP_PKEY_CTX *ctx),
+                              int (**pderive) (EVP_PKEY_CTX *ctx,
+                                               unsigned char *key,
+                                               size_t *keylen));
+
+void EVP_PKEY_meth_get_ctrl(const EVP_PKEY_METHOD *pmeth,
+                            int (**pctrl) (EVP_PKEY_CTX *ctx, int type, int p1,
+                                           void *p2),
+                            int (**pctrl_str) (EVP_PKEY_CTX *ctx,
+                                               const char *type,
+                                               const char *value));
+
+void EVP_PKEY_meth_get_check(const EVP_PKEY_METHOD *pmeth,
+                             int (**pcheck) (EVP_PKEY *pkey));
+
+void EVP_PKEY_meth_get_public_check(const EVP_PKEY_METHOD *pmeth,
+                                    int (**pcheck) (EVP_PKEY *pkey));
+
+void EVP_PKEY_meth_get_param_check(const EVP_PKEY_METHOD *pmeth,
+                                   int (**pcheck) (EVP_PKEY *pkey));
+
+void EVP_PKEY_meth_get_digest_custom(EVP_PKEY_METHOD *pmeth,
+                                     int (**pdigest_custom) (EVP_PKEY_CTX *ctx,
+                                                             EVP_MD_CTX *mctx));
+void EVP_add_alg_module(void);
+
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/evperr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/evperr.h
new file mode 100644
index 000000000..84f03eb3c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/evperr.h
@@ -0,0 +1,194 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_EVPERR_H
+# define HEADER_EVPERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_EVP_strings(void);
+
+/*
+ * EVP function codes.
+ */
+# define EVP_F_AESNI_INIT_KEY                             165
+# define EVP_F_AES_GCM_CTRL                               196
+# define EVP_F_AES_INIT_KEY                               133
+# define EVP_F_AES_OCB_CIPHER                             169
+# define EVP_F_AES_T4_INIT_KEY                            178
+# define EVP_F_AES_WRAP_CIPHER                            170
+# define EVP_F_ALG_MODULE_INIT                            177
+# define EVP_F_ARIA_CCM_INIT_KEY                          175
+# define EVP_F_ARIA_GCM_CTRL                              197
+# define EVP_F_ARIA_GCM_INIT_KEY                          176
+# define EVP_F_ARIA_INIT_KEY                              185
+# define EVP_F_B64_NEW                                    198
+# define EVP_F_CAMELLIA_INIT_KEY                          159
+# define EVP_F_CHACHA20_POLY1305_CTRL                     182
+# define EVP_F_CMLL_T4_INIT_KEY                           179
+# define EVP_F_DES_EDE3_WRAP_CIPHER                       171
+# define EVP_F_DO_SIGVER_INIT                             161
+# define EVP_F_ENC_NEW                                    199
+# define EVP_F_EVP_CIPHERINIT_EX                          123
+# define EVP_F_EVP_CIPHER_ASN1_TO_PARAM                   204
+# define EVP_F_EVP_CIPHER_CTX_COPY                        163
+# define EVP_F_EVP_CIPHER_CTX_CTRL                        124
+# define EVP_F_EVP_CIPHER_CTX_SET_KEY_LENGTH              122
+# define EVP_F_EVP_CIPHER_PARAM_TO_ASN1                   205
+# define EVP_F_EVP_DECRYPTFINAL_EX                        101
+# define EVP_F_EVP_DECRYPTUPDATE                          166
+# define EVP_F_EVP_DIGESTFINALXOF                         174
+# define EVP_F_EVP_DIGESTINIT_EX                          128
+# define EVP_F_EVP_ENCRYPTDECRYPTUPDATE                   219
+# define EVP_F_EVP_ENCRYPTFINAL_EX                        127
+# define EVP_F_EVP_ENCRYPTUPDATE                          167
+# define EVP_F_EVP_MD_CTX_COPY_EX                         110
+# define EVP_F_EVP_MD_SIZE                                162
+# define EVP_F_EVP_OPENINIT                               102
+# define EVP_F_EVP_PBE_ALG_ADD                            115
+# define EVP_F_EVP_PBE_ALG_ADD_TYPE                       160
+# define EVP_F_EVP_PBE_CIPHERINIT                         116
+# define EVP_F_EVP_PBE_SCRYPT                             181
+# define EVP_F_EVP_PKCS82PKEY                             111
+# define EVP_F_EVP_PKEY2PKCS8                             113
+# define EVP_F_EVP_PKEY_ASN1_ADD0                         188
+# define EVP_F_EVP_PKEY_CHECK                             186
+# define EVP_F_EVP_PKEY_COPY_PARAMETERS                   103
+# define EVP_F_EVP_PKEY_CTX_CTRL                          137
+# define EVP_F_EVP_PKEY_CTX_CTRL_STR                      150
+# define EVP_F_EVP_PKEY_CTX_DUP                           156
+# define EVP_F_EVP_PKEY_CTX_MD                            168
+# define EVP_F_EVP_PKEY_DECRYPT                           104
+# define EVP_F_EVP_PKEY_DECRYPT_INIT                      138
+# define EVP_F_EVP_PKEY_DECRYPT_OLD                       151
+# define EVP_F_EVP_PKEY_DERIVE                            153
+# define EVP_F_EVP_PKEY_DERIVE_INIT                       154
+# define EVP_F_EVP_PKEY_DERIVE_SET_PEER                   155
+# define EVP_F_EVP_PKEY_ENCRYPT                           105
+# define EVP_F_EVP_PKEY_ENCRYPT_INIT                      139
+# define EVP_F_EVP_PKEY_ENCRYPT_OLD                       152
+# define EVP_F_EVP_PKEY_GET0_DH                           119
+# define EVP_F_EVP_PKEY_GET0_DSA                          120
+# define EVP_F_EVP_PKEY_GET0_EC_KEY                       131
+# define EVP_F_EVP_PKEY_GET0_HMAC                         183
+# define EVP_F_EVP_PKEY_GET0_POLY1305                     184
+# define EVP_F_EVP_PKEY_GET0_RSA                          121
+# define EVP_F_EVP_PKEY_GET0_SIPHASH                      172
+# define EVP_F_EVP_PKEY_GET_RAW_PRIVATE_KEY               202
+# define EVP_F_EVP_PKEY_GET_RAW_PUBLIC_KEY                203
+# define EVP_F_EVP_PKEY_KEYGEN                            146
+# define EVP_F_EVP_PKEY_KEYGEN_INIT                       147
+# define EVP_F_EVP_PKEY_METH_ADD0                         194
+# define EVP_F_EVP_PKEY_METH_NEW                          195
+# define EVP_F_EVP_PKEY_NEW                               106
+# define EVP_F_EVP_PKEY_NEW_CMAC_KEY                      193
+# define EVP_F_EVP_PKEY_NEW_RAW_PRIVATE_KEY               191
+# define EVP_F_EVP_PKEY_NEW_RAW_PUBLIC_KEY                192
+# define EVP_F_EVP_PKEY_PARAMGEN                          148
+# define EVP_F_EVP_PKEY_PARAMGEN_INIT                     149
+# define EVP_F_EVP_PKEY_PARAM_CHECK                       189
+# define EVP_F_EVP_PKEY_PUBLIC_CHECK                      190
+# define EVP_F_EVP_PKEY_SET1_ENGINE                       187
+# define EVP_F_EVP_PKEY_SET_ALIAS_TYPE                    206
+# define EVP_F_EVP_PKEY_SIGN                              140
+# define EVP_F_EVP_PKEY_SIGN_INIT                         141
+# define EVP_F_EVP_PKEY_VERIFY                            142
+# define EVP_F_EVP_PKEY_VERIFY_INIT                       143
+# define EVP_F_EVP_PKEY_VERIFY_RECOVER                    144
+# define EVP_F_EVP_PKEY_VERIFY_RECOVER_INIT               145
+# define EVP_F_EVP_SIGNFINAL                              107
+# define EVP_F_EVP_VERIFYFINAL                            108
+# define EVP_F_INT_CTX_NEW                                157
+# define EVP_F_OK_NEW                                     200
+# define EVP_F_PKCS5_PBE_KEYIVGEN                         117
+# define EVP_F_PKCS5_V2_PBE_KEYIVGEN                      118
+# define EVP_F_PKCS5_V2_PBKDF2_KEYIVGEN                   164
+# define EVP_F_PKCS5_V2_SCRYPT_KEYIVGEN                   180
+# define EVP_F_PKEY_SET_TYPE                              158
+# define EVP_F_RC2_MAGIC_TO_METH                          109
+# define EVP_F_RC5_CTRL                                   125
+# define EVP_F_S390X_AES_GCM_CTRL                         201
+# define EVP_F_UPDATE                                     173
+
+/*
+ * EVP reason codes.
+ */
+# define EVP_R_AES_KEY_SETUP_FAILED                       143
+# define EVP_R_ARIA_KEY_SETUP_FAILED                      176
+# define EVP_R_BAD_DECRYPT                                100
+# define EVP_R_BUFFER_TOO_SMALL                           155
+# define EVP_R_CAMELLIA_KEY_SETUP_FAILED                  157
+# define EVP_R_CIPHER_PARAMETER_ERROR                     122
+# define EVP_R_COMMAND_NOT_SUPPORTED                      147
+# define EVP_R_COPY_ERROR                                 173
+# define EVP_R_CTRL_NOT_IMPLEMENTED                       132
+# define EVP_R_CTRL_OPERATION_NOT_IMPLEMENTED             133
+# define EVP_R_DATA_NOT_MULTIPLE_OF_BLOCK_LENGTH          138
+# define EVP_R_DECODE_ERROR                               114
+# define EVP_R_DIFFERENT_KEY_TYPES                        101
+# define EVP_R_DIFFERENT_PARAMETERS                       153
+# define EVP_R_ERROR_LOADING_SECTION                      165
+# define EVP_R_ERROR_SETTING_FIPS_MODE                    166
+# define EVP_R_EXPECTING_AN_HMAC_KEY                      174
+# define EVP_R_EXPECTING_AN_RSA_KEY                       127
+# define EVP_R_EXPECTING_A_DH_KEY                         128
+# define EVP_R_EXPECTING_A_DSA_KEY                        129
+# define EVP_R_EXPECTING_A_EC_KEY                         142
+# define EVP_R_EXPECTING_A_POLY1305_KEY                   164
+# define EVP_R_EXPECTING_A_SIPHASH_KEY                    175
+# define EVP_R_FIPS_MODE_NOT_SUPPORTED                    167
+# define EVP_R_GET_RAW_KEY_FAILED                         182
+# define EVP_R_ILLEGAL_SCRYPT_PARAMETERS                  171
+# define EVP_R_INITIALIZATION_ERROR                       134
+# define EVP_R_INPUT_NOT_INITIALIZED                      111
+# define EVP_R_INVALID_DIGEST                             152
+# define EVP_R_INVALID_FIPS_MODE                          168
+# define EVP_R_INVALID_KEY                                163
+# define EVP_R_INVALID_KEY_LENGTH                         130
+# define EVP_R_INVALID_OPERATION                          148
+# define EVP_R_KEYGEN_FAILURE                             120
+# define EVP_R_KEY_SETUP_FAILED                           180
+# define EVP_R_MEMORY_LIMIT_EXCEEDED                      172
+# define EVP_R_MESSAGE_DIGEST_IS_NULL                     159
+# define EVP_R_METHOD_NOT_SUPPORTED                       144
+# define EVP_R_MISSING_PARAMETERS                         103
+# define EVP_R_NOT_XOF_OR_INVALID_LENGTH                  178
+# define EVP_R_NO_CIPHER_SET                              131
+# define EVP_R_NO_DEFAULT_DIGEST                          158
+# define EVP_R_NO_DIGEST_SET                              139
+# define EVP_R_NO_KEY_SET                                 154
+# define EVP_R_NO_OPERATION_SET                           149
+# define EVP_R_ONLY_ONESHOT_SUPPORTED                     177
+# define EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE   150
+# define EVP_R_OPERATON_NOT_INITIALIZED                   151
+# define EVP_R_PARTIALLY_OVERLAPPING                      162
+# define EVP_R_PBKDF2_ERROR                               181
+# define EVP_R_PKEY_APPLICATION_ASN1_METHOD_ALREADY_REGISTERED 179
+# define EVP_R_PRIVATE_KEY_DECODE_ERROR                   145
+# define EVP_R_PRIVATE_KEY_ENCODE_ERROR                   146
+# define EVP_R_PUBLIC_KEY_NOT_RSA                         106
+# define EVP_R_UNKNOWN_CIPHER                             160
+# define EVP_R_UNKNOWN_DIGEST                             161
+# define EVP_R_UNKNOWN_OPTION                             169
+# define EVP_R_UNKNOWN_PBE_ALGORITHM                      121
+# define EVP_R_UNSUPPORTED_ALGORITHM                      156
+# define EVP_R_UNSUPPORTED_CIPHER                         107
+# define EVP_R_UNSUPPORTED_KEYLENGTH                      123
+# define EVP_R_UNSUPPORTED_KEY_DERIVATION_FUNCTION        124
+# define EVP_R_UNSUPPORTED_KEY_SIZE                       108
+# define EVP_R_UNSUPPORTED_NUMBER_OF_ROUNDS               135
+# define EVP_R_UNSUPPORTED_PRF                            125
+# define EVP_R_UNSUPPORTED_PRIVATE_KEY_ALGORITHM          118
+# define EVP_R_UNSUPPORTED_SALT_TYPE                      126
+# define EVP_R_WRAP_MODE_NOT_ALLOWED                      170
+# define EVP_R_WRONG_FINAL_BLOCK_LENGTH                   109
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/hmac.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/hmac.h
new file mode 100644
index 000000000..458efc1d5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/hmac.h
@@ -0,0 +1,51 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_HMAC_H
+# define HEADER_HMAC_H
+
+# include <openssl/opensslconf.h>
+
+# include <openssl/evp.h>
+
+# if OPENSSL_API_COMPAT < 0x10200000L
+#  define HMAC_MAX_MD_CBLOCK      128    /* Deprecated */
+# endif
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+size_t HMAC_size(const HMAC_CTX *e);
+HMAC_CTX *HMAC_CTX_new(void);
+int HMAC_CTX_reset(HMAC_CTX *ctx);
+void HMAC_CTX_free(HMAC_CTX *ctx);
+
+DEPRECATEDIN_1_1_0(__owur int HMAC_Init(HMAC_CTX *ctx, const void *key, int len,
+                     const EVP_MD *md))
+
+/*__owur*/ int HMAC_Init_ex(HMAC_CTX *ctx, const void *key, int len,
+                            const EVP_MD *md, ENGINE *impl);
+/*__owur*/ int HMAC_Update(HMAC_CTX *ctx, const unsigned char *data,
+                           size_t len);
+/*__owur*/ int HMAC_Final(HMAC_CTX *ctx, unsigned char *md,
+                          unsigned int *len);
+unsigned char *HMAC(const EVP_MD *evp_md, const void *key, int key_len,
+                    const unsigned char *d, size_t n, unsigned char *md,
+                    unsigned int *md_len);
+__owur int HMAC_CTX_copy(HMAC_CTX *dctx, HMAC_CTX *sctx);
+
+void HMAC_CTX_set_flags(HMAC_CTX *ctx, unsigned long flags);
+const EVP_MD *HMAC_CTX_get_md(const HMAC_CTX *ctx);
+
+#ifdef  __cplusplus
+}
+#endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/idea.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/idea.h
new file mode 100644
index 000000000..4334f3ea7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/idea.h
@@ -0,0 +1,64 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_IDEA_H
+# define HEADER_IDEA_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_IDEA
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+typedef unsigned int IDEA_INT;
+
+# define IDEA_ENCRYPT    1
+# define IDEA_DECRYPT    0
+
+# define IDEA_BLOCK      8
+# define IDEA_KEY_LENGTH 16
+
+typedef struct idea_key_st {
+    IDEA_INT data[9][6];
+} IDEA_KEY_SCHEDULE;
+
+const char *IDEA_options(void);
+void IDEA_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                      IDEA_KEY_SCHEDULE *ks);
+void IDEA_set_encrypt_key(const unsigned char *key, IDEA_KEY_SCHEDULE *ks);
+void IDEA_set_decrypt_key(IDEA_KEY_SCHEDULE *ek, IDEA_KEY_SCHEDULE *dk);
+void IDEA_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                      long length, IDEA_KEY_SCHEDULE *ks, unsigned char *iv,
+                      int enc);
+void IDEA_cfb64_encrypt(const unsigned char *in, unsigned char *out,
+                        long length, IDEA_KEY_SCHEDULE *ks, unsigned char *iv,
+                        int *num, int enc);
+void IDEA_ofb64_encrypt(const unsigned char *in, unsigned char *out,
+                        long length, IDEA_KEY_SCHEDULE *ks, unsigned char *iv,
+                        int *num);
+void IDEA_encrypt(unsigned long *in, IDEA_KEY_SCHEDULE *ks);
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define idea_options          IDEA_options
+#  define idea_ecb_encrypt      IDEA_ecb_encrypt
+#  define idea_set_encrypt_key  IDEA_set_encrypt_key
+#  define idea_set_decrypt_key  IDEA_set_decrypt_key
+#  define idea_cbc_encrypt      IDEA_cbc_encrypt
+#  define idea_cfb64_encrypt    IDEA_cfb64_encrypt
+#  define idea_ofb64_encrypt    IDEA_ofb64_encrypt
+#  define idea_encrypt          IDEA_encrypt
+# endif
+
+# ifdef  __cplusplus
+}
+# endif
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/kdf.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/kdf.h
new file mode 100644
index 000000000..5abd4c371
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/kdf.h
@@ -0,0 +1,97 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_KDF_H
+# define HEADER_KDF_H
+
+# include <openssl/kdferr.h>
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+# define EVP_PKEY_CTRL_TLS_MD                   (EVP_PKEY_ALG_CTRL)
+# define EVP_PKEY_CTRL_TLS_SECRET               (EVP_PKEY_ALG_CTRL + 1)
+# define EVP_PKEY_CTRL_TLS_SEED                 (EVP_PKEY_ALG_CTRL + 2)
+# define EVP_PKEY_CTRL_HKDF_MD                  (EVP_PKEY_ALG_CTRL + 3)
+# define EVP_PKEY_CTRL_HKDF_SALT                (EVP_PKEY_ALG_CTRL + 4)
+# define EVP_PKEY_CTRL_HKDF_KEY                 (EVP_PKEY_ALG_CTRL + 5)
+# define EVP_PKEY_CTRL_HKDF_INFO                (EVP_PKEY_ALG_CTRL + 6)
+# define EVP_PKEY_CTRL_HKDF_MODE                (EVP_PKEY_ALG_CTRL + 7)
+# define EVP_PKEY_CTRL_PASS                     (EVP_PKEY_ALG_CTRL + 8)
+# define EVP_PKEY_CTRL_SCRYPT_SALT              (EVP_PKEY_ALG_CTRL + 9)
+# define EVP_PKEY_CTRL_SCRYPT_N                 (EVP_PKEY_ALG_CTRL + 10)
+# define EVP_PKEY_CTRL_SCRYPT_R                 (EVP_PKEY_ALG_CTRL + 11)
+# define EVP_PKEY_CTRL_SCRYPT_P                 (EVP_PKEY_ALG_CTRL + 12)
+# define EVP_PKEY_CTRL_SCRYPT_MAXMEM_BYTES      (EVP_PKEY_ALG_CTRL + 13)
+
+# define EVP_PKEY_HKDEF_MODE_EXTRACT_AND_EXPAND 0
+# define EVP_PKEY_HKDEF_MODE_EXTRACT_ONLY       1
+# define EVP_PKEY_HKDEF_MODE_EXPAND_ONLY        2
+
+# define EVP_PKEY_CTX_set_tls1_prf_md(pctx, md) \
+            EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_DERIVE, \
+                              EVP_PKEY_CTRL_TLS_MD, 0, (void *)(md))
+
+# define EVP_PKEY_CTX_set1_tls1_prf_secret(pctx, sec, seclen) \
+            EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_DERIVE, \
+                              EVP_PKEY_CTRL_TLS_SECRET, seclen, (void *)(sec))
+
+# define EVP_PKEY_CTX_add1_tls1_prf_seed(pctx, seed, seedlen) \
+            EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_DERIVE, \
+                              EVP_PKEY_CTRL_TLS_SEED, seedlen, (void *)(seed))
+
+# define EVP_PKEY_CTX_set_hkdf_md(pctx, md) \
+            EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_DERIVE, \
+                              EVP_PKEY_CTRL_HKDF_MD, 0, (void *)(md))
+
+# define EVP_PKEY_CTX_set1_hkdf_salt(pctx, salt, saltlen) \
+            EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_DERIVE, \
+                              EVP_PKEY_CTRL_HKDF_SALT, saltlen, (void *)(salt))
+
+# define EVP_PKEY_CTX_set1_hkdf_key(pctx, key, keylen) \
+            EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_DERIVE, \
+                              EVP_PKEY_CTRL_HKDF_KEY, keylen, (void *)(key))
+
+# define EVP_PKEY_CTX_add1_hkdf_info(pctx, info, infolen) \
+            EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_DERIVE, \
+                              EVP_PKEY_CTRL_HKDF_INFO, infolen, (void *)(info))
+
+# define EVP_PKEY_CTX_hkdf_mode(pctx, mode) \
+            EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_DERIVE, \
+                              EVP_PKEY_CTRL_HKDF_MODE, mode, NULL)
+
+# define EVP_PKEY_CTX_set1_pbe_pass(pctx, pass, passlen) \
+            EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_DERIVE, \
+                            EVP_PKEY_CTRL_PASS, passlen, (void *)(pass))
+
+# define EVP_PKEY_CTX_set1_scrypt_salt(pctx, salt, saltlen) \
+            EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_DERIVE, \
+                            EVP_PKEY_CTRL_SCRYPT_SALT, saltlen, (void *)(salt))
+
+# define EVP_PKEY_CTX_set_scrypt_N(pctx, n) \
+            EVP_PKEY_CTX_ctrl_uint64(pctx, -1, EVP_PKEY_OP_DERIVE, \
+                            EVP_PKEY_CTRL_SCRYPT_N, n)
+
+# define EVP_PKEY_CTX_set_scrypt_r(pctx, r) \
+            EVP_PKEY_CTX_ctrl_uint64(pctx, -1, EVP_PKEY_OP_DERIVE, \
+                            EVP_PKEY_CTRL_SCRYPT_R, r)
+
+# define EVP_PKEY_CTX_set_scrypt_p(pctx, p) \
+            EVP_PKEY_CTX_ctrl_uint64(pctx, -1, EVP_PKEY_OP_DERIVE, \
+                            EVP_PKEY_CTRL_SCRYPT_P, p)
+
+# define EVP_PKEY_CTX_set_scrypt_maxmem_bytes(pctx, maxmem_bytes) \
+            EVP_PKEY_CTX_ctrl_uint64(pctx, -1, EVP_PKEY_OP_DERIVE, \
+                            EVP_PKEY_CTRL_SCRYPT_MAXMEM_BYTES, maxmem_bytes)
+
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/kdferr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/kdferr.h
new file mode 100644
index 000000000..6437c271d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/kdferr.h
@@ -0,0 +1,51 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_KDFERR_H
+# define HEADER_KDFERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_KDF_strings(void);
+
+/*
+ * KDF function codes.
+ */
+# define KDF_F_PKEY_HKDF_CTRL_STR                         103
+# define KDF_F_PKEY_HKDF_DERIVE                           102
+# define KDF_F_PKEY_HKDF_INIT                             108
+# define KDF_F_PKEY_SCRYPT_CTRL_STR                       104
+# define KDF_F_PKEY_SCRYPT_CTRL_UINT64                    105
+# define KDF_F_PKEY_SCRYPT_DERIVE                         109
+# define KDF_F_PKEY_SCRYPT_INIT                           106
+# define KDF_F_PKEY_SCRYPT_SET_MEMBUF                     107
+# define KDF_F_PKEY_TLS1_PRF_CTRL_STR                     100
+# define KDF_F_PKEY_TLS1_PRF_DERIVE                       101
+# define KDF_F_PKEY_TLS1_PRF_INIT                         110
+# define KDF_F_TLS1_PRF_ALG                               111
+
+/*
+ * KDF reason codes.
+ */
+# define KDF_R_INVALID_DIGEST                             100
+# define KDF_R_MISSING_ITERATION_COUNT                    109
+# define KDF_R_MISSING_KEY                                104
+# define KDF_R_MISSING_MESSAGE_DIGEST                     105
+# define KDF_R_MISSING_PARAMETER                          101
+# define KDF_R_MISSING_PASS                               110
+# define KDF_R_MISSING_SALT                               111
+# define KDF_R_MISSING_SECRET                             107
+# define KDF_R_MISSING_SEED                               106
+# define KDF_R_UNKNOWN_PARAMETER_TYPE                     103
+# define KDF_R_VALUE_ERROR                                108
+# define KDF_R_VALUE_MISSING                              102
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/lhash.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/lhash.h
new file mode 100644
index 000000000..47b99d17f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/lhash.h
@@ -0,0 +1,242 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Header for dynamic hash table routines Author - Eric Young
+ */
+
+#ifndef HEADER_LHASH_H
+# define HEADER_LHASH_H
+
+# include <openssl/e_os2.h>
+# include <openssl/bio.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+typedef struct lhash_node_st OPENSSL_LH_NODE;
+typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef struct lhash_st OPENSSL_LHASH;
+
+/*
+ * Macros for declaring and implementing type-safe wrappers for LHASH
+ * callbacks. This way, callbacks can be provided to LHASH structures without
+ * function pointer casting and the macro-defined callbacks provide
+ * per-variable casting before deferring to the underlying type-specific
+ * callbacks. NB: It is possible to place a "static" in front of both the
+ * DECLARE and IMPLEMENT macros if the functions are strictly internal.
+ */
+
+/* First: "hash" functions */
+# define DECLARE_LHASH_HASH_FN(name, o_type) \
+        unsigned long name##_LHASH_HASH(const void *);
+# define IMPLEMENT_LHASH_HASH_FN(name, o_type) \
+        unsigned long name##_LHASH_HASH(const void *arg) { \
+                const o_type *a = arg; \
+                return name##_hash(a); }
+# define LHASH_HASH_FN(name) name##_LHASH_HASH
+
+/* Second: "compare" functions */
+# define DECLARE_LHASH_COMP_FN(name, o_type) \
+        int name##_LHASH_COMP(const void *, const void *);
+# define IMPLEMENT_LHASH_COMP_FN(name, o_type) \
+        int name##_LHASH_COMP(const void *arg1, const void *arg2) { \
+                const o_type *a = arg1;             \
+                const o_type *b = arg2; \
+                return name##_cmp(a,b); }
+# define LHASH_COMP_FN(name) name##_LHASH_COMP
+
+/* Fourth: "doall_arg" functions */
+# define DECLARE_LHASH_DOALL_ARG_FN(name, o_type, a_type) \
+        void name##_LHASH_DOALL_ARG(void *, void *);
+# define IMPLEMENT_LHASH_DOALL_ARG_FN(name, o_type, a_type) \
+        void name##_LHASH_DOALL_ARG(void *arg1, void *arg2) { \
+                o_type *a = arg1; \
+                a_type *b = arg2; \
+                name##_doall_arg(a, b); }
+# define LHASH_DOALL_ARG_FN(name) name##_LHASH_DOALL_ARG
+
+
+# define LH_LOAD_MULT    256
+
+int OPENSSL_LH_error(OPENSSL_LHASH *lh);
+OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+void OPENSSL_LH_free(OPENSSL_LHASH *lh);
+void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
+void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
+void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
+void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+unsigned long OPENSSL_LH_strhash(const char *c);
+unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
+unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
+void OPENSSL_LH_set_down_load(OPENSSL_LHASH *lh, unsigned long down_load);
+
+# ifndef OPENSSL_NO_STDIO
+void OPENSSL_LH_stats(const OPENSSL_LHASH *lh, FILE *fp);
+void OPENSSL_LH_node_stats(const OPENSSL_LHASH *lh, FILE *fp);
+void OPENSSL_LH_node_usage_stats(const OPENSSL_LHASH *lh, FILE *fp);
+# endif
+void OPENSSL_LH_stats_bio(const OPENSSL_LHASH *lh, BIO *out);
+void OPENSSL_LH_node_stats_bio(const OPENSSL_LHASH *lh, BIO *out);
+void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *lh, BIO *out);
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define _LHASH OPENSSL_LHASH
+#  define LHASH_NODE OPENSSL_LH_NODE
+#  define lh_error OPENSSL_LH_error
+#  define lh_new OPENSSL_LH_new
+#  define lh_free OPENSSL_LH_free
+#  define lh_insert OPENSSL_LH_insert
+#  define lh_delete OPENSSL_LH_delete
+#  define lh_retrieve OPENSSL_LH_retrieve
+#  define lh_doall OPENSSL_LH_doall
+#  define lh_doall_arg OPENSSL_LH_doall_arg
+#  define lh_strhash OPENSSL_LH_strhash
+#  define lh_num_items OPENSSL_LH_num_items
+#  ifndef OPENSSL_NO_STDIO
+#   define lh_stats OPENSSL_LH_stats
+#   define lh_node_stats OPENSSL_LH_node_stats
+#   define lh_node_usage_stats OPENSSL_LH_node_usage_stats
+#  endif
+#  define lh_stats_bio OPENSSL_LH_stats_bio
+#  define lh_node_stats_bio OPENSSL_LH_node_stats_bio
+#  define lh_node_usage_stats_bio OPENSSL_LH_node_usage_stats_bio
+# endif
+
+/* Type checking... */
+
+# define LHASH_OF(type) struct lhash_st_##type
+
+# define DEFINE_LHASH_OF(type) \
+    LHASH_OF(type) { union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; }; \
+    static ossl_inline LHASH_OF(type) * \
+        lh_##type##_new(unsigned long (*hfn)(const type *), \
+                        int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *) \
+            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+    } \
+    static ossl_unused ossl_inline void lh_##type##_free(LHASH_OF(type) *lh) \
+    { \
+        OPENSSL_LH_free((OPENSSL_LHASH *)lh); \
+    } \
+    static ossl_unused ossl_inline type *lh_##type##_insert(LHASH_OF(type) *lh, type *d) \
+    { \
+        return (type *)OPENSSL_LH_insert((OPENSSL_LHASH *)lh, d); \
+    } \
+    static ossl_unused ossl_inline type *lh_##type##_delete(LHASH_OF(type) *lh, const type *d) \
+    { \
+        return (type *)OPENSSL_LH_delete((OPENSSL_LHASH *)lh, d); \
+    } \
+    static ossl_unused ossl_inline type *lh_##type##_retrieve(LHASH_OF(type) *lh, const type *d) \
+    { \
+        return (type *)OPENSSL_LH_retrieve((OPENSSL_LHASH *)lh, d); \
+    } \
+    static ossl_unused ossl_inline int lh_##type##_error(LHASH_OF(type) *lh) \
+    { \
+        return OPENSSL_LH_error((OPENSSL_LHASH *)lh); \
+    } \
+    static ossl_unused ossl_inline unsigned long lh_##type##_num_items(LHASH_OF(type) *lh) \
+    { \
+        return OPENSSL_LH_num_items((OPENSSL_LHASH *)lh); \
+    } \
+    static ossl_unused ossl_inline void lh_##type##_node_stats_bio(const LHASH_OF(type) *lh, BIO *out) \
+    { \
+        OPENSSL_LH_node_stats_bio((const OPENSSL_LHASH *)lh, out); \
+    } \
+    static ossl_unused ossl_inline void lh_##type##_node_usage_stats_bio(const LHASH_OF(type) *lh, BIO *out) \
+    { \
+        OPENSSL_LH_node_usage_stats_bio((const OPENSSL_LHASH *)lh, out); \
+    } \
+    static ossl_unused ossl_inline void lh_##type##_stats_bio(const LHASH_OF(type) *lh, BIO *out) \
+    { \
+        OPENSSL_LH_stats_bio((const OPENSSL_LHASH *)lh, out); \
+    } \
+    static ossl_unused ossl_inline unsigned long lh_##type##_get_down_load(LHASH_OF(type) *lh) \
+    { \
+        return OPENSSL_LH_get_down_load((OPENSSL_LHASH *)lh); \
+    } \
+    static ossl_unused ossl_inline void lh_##type##_set_down_load(LHASH_OF(type) *lh, unsigned long dl) \
+    { \
+        OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
+    } \
+    static ossl_unused ossl_inline void lh_##type##_doall(LHASH_OF(type) *lh, \
+                                                          void (*doall)(type *)) \
+    { \
+        OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
+    } \
+    LHASH_OF(type)
+
+#define IMPLEMENT_LHASH_DOALL_ARG_CONST(type, argtype) \
+    int_implement_lhash_doall(type, argtype, const type)
+
+#define IMPLEMENT_LHASH_DOALL_ARG(type, argtype) \
+    int_implement_lhash_doall(type, argtype, type)
+
+#define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+        lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
+                                   void (*fn)(cbargtype *, argtype *), \
+                                   argtype *arg) \
+    { \
+        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+    } \
+    LHASH_OF(type)
+
+DEFINE_LHASH_OF(OPENSSL_STRING);
+# ifdef _MSC_VER
+/*
+ * push and pop this warning:
+ *   warning C4090: 'function': different 'const' qualifiers
+ */
+#  pragma warning (push)
+#  pragma warning (disable: 4090)
+# endif
+
+DEFINE_LHASH_OF(OPENSSL_CSTRING);
+
+# ifdef _MSC_VER
+#  pragma warning (pop)
+# endif
+
+/*
+ * If called without higher optimization (min. -xO3) the Oracle Developer
+ * Studio compiler generates code for the defined (static inline) functions
+ * above.
+ * This would later lead to the linker complaining about missing symbols when
+ * this header file is included but the resulting object is not linked against
+ * the Crypto library (openssl#6912).
+ */
+# ifdef __SUNPRO_C
+#  pragma weak OPENSSL_LH_new
+#  pragma weak OPENSSL_LH_free
+#  pragma weak OPENSSL_LH_insert
+#  pragma weak OPENSSL_LH_delete
+#  pragma weak OPENSSL_LH_retrieve
+#  pragma weak OPENSSL_LH_error
+#  pragma weak OPENSSL_LH_num_items
+#  pragma weak OPENSSL_LH_node_stats_bio
+#  pragma weak OPENSSL_LH_node_usage_stats_bio
+#  pragma weak OPENSSL_LH_stats_bio
+#  pragma weak OPENSSL_LH_get_down_load
+#  pragma weak OPENSSL_LH_set_down_load
+#  pragma weak OPENSSL_LH_doall
+#  pragma weak OPENSSL_LH_doall_arg
+# endif /* __SUNPRO_C */
+
+#ifdef  __cplusplus
+}
+#endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/md2.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/md2.h
new file mode 100644
index 000000000..7faf8e3d6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/md2.h
@@ -0,0 +1,44 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_MD2_H
+# define HEADER_MD2_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_MD2
+# include <stddef.h>
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+typedef unsigned char MD2_INT;
+
+# define MD2_DIGEST_LENGTH       16
+# define MD2_BLOCK               16
+
+typedef struct MD2state_st {
+    unsigned int num;
+    unsigned char data[MD2_BLOCK];
+    MD2_INT cksm[MD2_BLOCK];
+    MD2_INT state[MD2_BLOCK];
+} MD2_CTX;
+
+const char *MD2_options(void);
+int MD2_Init(MD2_CTX *c);
+int MD2_Update(MD2_CTX *c, const unsigned char *data, size_t len);
+int MD2_Final(unsigned char *md, MD2_CTX *c);
+unsigned char *MD2(const unsigned char *d, size_t n, unsigned char *md);
+
+# ifdef  __cplusplus
+}
+# endif
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/md4.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/md4.h
new file mode 100644
index 000000000..940e29db4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/md4.h
@@ -0,0 +1,51 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_MD4_H
+# define HEADER_MD4_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_MD4
+# include <openssl/e_os2.h>
+# include <stddef.h>
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+/*-
+ * !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+ * ! MD4_LONG has to be at least 32 bits wide.                     !
+ * !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+ */
+# define MD4_LONG unsigned int
+
+# define MD4_CBLOCK      64
+# define MD4_LBLOCK      (MD4_CBLOCK/4)
+# define MD4_DIGEST_LENGTH 16
+
+typedef struct MD4state_st {
+    MD4_LONG A, B, C, D;
+    MD4_LONG Nl, Nh;
+    MD4_LONG data[MD4_LBLOCK];
+    unsigned int num;
+} MD4_CTX;
+
+int MD4_Init(MD4_CTX *c);
+int MD4_Update(MD4_CTX *c, const void *data, size_t len);
+int MD4_Final(unsigned char *md, MD4_CTX *c);
+unsigned char *MD4(const unsigned char *d, size_t n, unsigned char *md);
+void MD4_Transform(MD4_CTX *c, const unsigned char *b);
+
+# ifdef  __cplusplus
+}
+# endif
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/md5.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/md5.h
new file mode 100644
index 000000000..2deb77211
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/md5.h
@@ -0,0 +1,50 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_MD5_H
+# define HEADER_MD5_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_MD5
+# include <openssl/e_os2.h>
+# include <stddef.h>
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+/*
+ * !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+ * ! MD5_LONG has to be at least 32 bits wide.                     !
+ * !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+ */
+# define MD5_LONG unsigned int
+
+# define MD5_CBLOCK      64
+# define MD5_LBLOCK      (MD5_CBLOCK/4)
+# define MD5_DIGEST_LENGTH 16
+
+typedef struct MD5state_st {
+    MD5_LONG A, B, C, D;
+    MD5_LONG Nl, Nh;
+    MD5_LONG data[MD5_LBLOCK];
+    unsigned int num;
+} MD5_CTX;
+
+int MD5_Init(MD5_CTX *c);
+int MD5_Update(MD5_CTX *c, const void *data, size_t len);
+int MD5_Final(unsigned char *md, MD5_CTX *c);
+unsigned char *MD5(const unsigned char *d, size_t n, unsigned char *md);
+void MD5_Transform(MD5_CTX *c, const unsigned char *b);
+# ifdef  __cplusplus
+}
+# endif
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/mdc2.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/mdc2.h
new file mode 100644
index 000000000..aabd2bfaa
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/mdc2.h
@@ -0,0 +1,42 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_MDC2_H
+# define HEADER_MDC2_H
+
+# include <openssl/opensslconf.h>
+
+#ifndef OPENSSL_NO_MDC2
+# include <stdlib.h>
+# include <openssl/des.h>
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+# define MDC2_BLOCK              8
+# define MDC2_DIGEST_LENGTH      16
+
+typedef struct mdc2_ctx_st {
+    unsigned int num;
+    unsigned char data[MDC2_BLOCK];
+    DES_cblock h, hh;
+    int pad_type;               /* either 1 or 2, default 1 */
+} MDC2_CTX;
+
+int MDC2_Init(MDC2_CTX *c);
+int MDC2_Update(MDC2_CTX *c, const unsigned char *data, size_t len);
+int MDC2_Final(unsigned char *md, MDC2_CTX *c);
+unsigned char *MDC2(const unsigned char *d, size_t n, unsigned char *md);
+
+# ifdef  __cplusplus
+}
+# endif
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/modes.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/modes.h
new file mode 100644
index 000000000..d544f98d5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/modes.h
@@ -0,0 +1,208 @@
+/*
+ * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_MODES_H
+# define HEADER_MODES_H
+
+# include <stddef.h>
+
+# ifdef  __cplusplus
+extern "C" {
+# endif
+typedef void (*block128_f) (const unsigned char in[16],
+                            unsigned char out[16], const void *key);
+
+typedef void (*cbc128_f) (const unsigned char *in, unsigned char *out,
+                          size_t len, const void *key,
+                          unsigned char ivec[16], int enc);
+
+typedef void (*ctr128_f) (const unsigned char *in, unsigned char *out,
+                          size_t blocks, const void *key,
+                          const unsigned char ivec[16]);
+
+typedef void (*ccm128_f) (const unsigned char *in, unsigned char *out,
+                          size_t blocks, const void *key,
+                          const unsigned char ivec[16],
+                          unsigned char cmac[16]);
+
+void CRYPTO_cbc128_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t len, const void *key,
+                           unsigned char ivec[16], block128_f block);
+void CRYPTO_cbc128_decrypt(const unsigned char *in, unsigned char *out,
+                           size_t len, const void *key,
+                           unsigned char ivec[16], block128_f block);
+
+void CRYPTO_ctr128_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t len, const void *key,
+                           unsigned char ivec[16],
+                           unsigned char ecount_buf[16], unsigned int *num,
+                           block128_f block);
+
+void CRYPTO_ctr128_encrypt_ctr32(const unsigned char *in, unsigned char *out,
+                                 size_t len, const void *key,
+                                 unsigned char ivec[16],
+                                 unsigned char ecount_buf[16],
+                                 unsigned int *num, ctr128_f ctr);
+
+void CRYPTO_ofb128_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t len, const void *key,
+                           unsigned char ivec[16], int *num,
+                           block128_f block);
+
+void CRYPTO_cfb128_encrypt(const unsigned char *in, unsigned char *out,
+                           size_t len, const void *key,
+                           unsigned char ivec[16], int *num,
+                           int enc, block128_f block);
+void CRYPTO_cfb128_8_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t length, const void *key,
+                             unsigned char ivec[16], int *num,
+                             int enc, block128_f block);
+void CRYPTO_cfb128_1_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t bits, const void *key,
+                             unsigned char ivec[16], int *num,
+                             int enc, block128_f block);
+
+size_t CRYPTO_cts128_encrypt_block(const unsigned char *in,
+                                   unsigned char *out, size_t len,
+                                   const void *key, unsigned char ivec[16],
+                                   block128_f block);
+size_t CRYPTO_cts128_encrypt(const unsigned char *in, unsigned char *out,
+                             size_t len, const void *key,
+                             unsigned char ivec[16], cbc128_f cbc);
+size_t CRYPTO_cts128_decrypt_block(const unsigned char *in,
+                                   unsigned char *out, size_t len,
+                                   const void *key, unsigned char ivec[16],
+                                   block128_f block);
+size_t CRYPTO_cts128_decrypt(const unsigned char *in, unsigned char *out,
+                             size_t len, const void *key,
+                             unsigned char ivec[16], cbc128_f cbc);
+
+size_t CRYPTO_nistcts128_encrypt_block(const unsigned char *in,
+                                       unsigned char *out, size_t len,
+                                       const void *key,
+                                       unsigned char ivec[16],
+                                       block128_f block);
+size_t CRYPTO_nistcts128_encrypt(const unsigned char *in, unsigned char *out,
+                                 size_t len, const void *key,
+                                 unsigned char ivec[16], cbc128_f cbc);
+size_t CRYPTO_nistcts128_decrypt_block(const unsigned char *in,
+                                       unsigned char *out, size_t len,
+                                       const void *key,
+                                       unsigned char ivec[16],
+                                       block128_f block);
+size_t CRYPTO_nistcts128_decrypt(const unsigned char *in, unsigned char *out,
+                                 size_t len, const void *key,
+                                 unsigned char ivec[16], cbc128_f cbc);
+
+typedef struct gcm128_context GCM128_CONTEXT;
+
+GCM128_CONTEXT *CRYPTO_gcm128_new(void *key, block128_f block);
+void CRYPTO_gcm128_init(GCM128_CONTEXT *ctx, void *key, block128_f block);
+void CRYPTO_gcm128_setiv(GCM128_CONTEXT *ctx, const unsigned char *iv,
+                         size_t len);
+int CRYPTO_gcm128_aad(GCM128_CONTEXT *ctx, const unsigned char *aad,
+                      size_t len);
+int CRYPTO_gcm128_encrypt(GCM128_CONTEXT *ctx,
+                          const unsigned char *in, unsigned char *out,
+                          size_t len);
+int CRYPTO_gcm128_decrypt(GCM128_CONTEXT *ctx,
+                          const unsigned char *in, unsigned char *out,
+                          size_t len);
+int CRYPTO_gcm128_encrypt_ctr32(GCM128_CONTEXT *ctx,
+                                const unsigned char *in, unsigned char *out,
+                                size_t len, ctr128_f stream);
+int CRYPTO_gcm128_decrypt_ctr32(GCM128_CONTEXT *ctx,
+                                const unsigned char *in, unsigned char *out,
+                                size_t len, ctr128_f stream);
+int CRYPTO_gcm128_finish(GCM128_CONTEXT *ctx, const unsigned char *tag,
+                         size_t len);
+void CRYPTO_gcm128_tag(GCM128_CONTEXT *ctx, unsigned char *tag, size_t len);
+void CRYPTO_gcm128_release(GCM128_CONTEXT *ctx);
+
+typedef struct ccm128_context CCM128_CONTEXT;
+
+void CRYPTO_ccm128_init(CCM128_CONTEXT *ctx,
+                        unsigned int M, unsigned int L, void *key,
+                        block128_f block);
+int CRYPTO_ccm128_setiv(CCM128_CONTEXT *ctx, const unsigned char *nonce,
+                        size_t nlen, size_t mlen);
+void CRYPTO_ccm128_aad(CCM128_CONTEXT *ctx, const unsigned char *aad,
+                       size_t alen);
+int CRYPTO_ccm128_encrypt(CCM128_CONTEXT *ctx, const unsigned char *inp,
+                          unsigned char *out, size_t len);
+int CRYPTO_ccm128_decrypt(CCM128_CONTEXT *ctx, const unsigned char *inp,
+                          unsigned char *out, size_t len);
+int CRYPTO_ccm128_encrypt_ccm64(CCM128_CONTEXT *ctx, const unsigned char *inp,
+                                unsigned char *out, size_t len,
+                                ccm128_f stream);
+int CRYPTO_ccm128_decrypt_ccm64(CCM128_CONTEXT *ctx, const unsigned char *inp,
+                                unsigned char *out, size_t len,
+                                ccm128_f stream);
+size_t CRYPTO_ccm128_tag(CCM128_CONTEXT *ctx, unsigned char *tag, size_t len);
+
+typedef struct xts128_context XTS128_CONTEXT;
+
+int CRYPTO_xts128_encrypt(const XTS128_CONTEXT *ctx,
+                          const unsigned char iv[16],
+                          const unsigned char *inp, unsigned char *out,
+                          size_t len, int enc);
+
+size_t CRYPTO_128_wrap(void *key, const unsigned char *iv,
+                       unsigned char *out,
+                       const unsigned char *in, size_t inlen,
+                       block128_f block);
+
+size_t CRYPTO_128_unwrap(void *key, const unsigned char *iv,
+                         unsigned char *out,
+                         const unsigned char *in, size_t inlen,
+                         block128_f block);
+size_t CRYPTO_128_wrap_pad(void *key, const unsigned char *icv,
+                           unsigned char *out, const unsigned char *in,
+                           size_t inlen, block128_f block);
+size_t CRYPTO_128_unwrap_pad(void *key, const unsigned char *icv,
+                             unsigned char *out, const unsigned char *in,
+                             size_t inlen, block128_f block);
+
+# ifndef OPENSSL_NO_OCB
+typedef struct ocb128_context OCB128_CONTEXT;
+
+typedef void (*ocb128_f) (const unsigned char *in, unsigned char *out,
+                          size_t blocks, const void *key,
+                          size_t start_block_num,
+                          unsigned char offset_i[16],
+                          const unsigned char L_[][16],
+                          unsigned char checksum[16]);
+
+OCB128_CONTEXT *CRYPTO_ocb128_new(void *keyenc, void *keydec,
+                                  block128_f encrypt, block128_f decrypt,
+                                  ocb128_f stream);
+int CRYPTO_ocb128_init(OCB128_CONTEXT *ctx, void *keyenc, void *keydec,
+                       block128_f encrypt, block128_f decrypt,
+                       ocb128_f stream);
+int CRYPTO_ocb128_copy_ctx(OCB128_CONTEXT *dest, OCB128_CONTEXT *src,
+                           void *keyenc, void *keydec);
+int CRYPTO_ocb128_setiv(OCB128_CONTEXT *ctx, const unsigned char *iv,
+                        size_t len, size_t taglen);
+int CRYPTO_ocb128_aad(OCB128_CONTEXT *ctx, const unsigned char *aad,
+                      size_t len);
+int CRYPTO_ocb128_encrypt(OCB128_CONTEXT *ctx, const unsigned char *in,
+                          unsigned char *out, size_t len);
+int CRYPTO_ocb128_decrypt(OCB128_CONTEXT *ctx, const unsigned char *in,
+                          unsigned char *out, size_t len);
+int CRYPTO_ocb128_finish(OCB128_CONTEXT *ctx, const unsigned char *tag,
+                         size_t len);
+int CRYPTO_ocb128_tag(OCB128_CONTEXT *ctx, unsigned char *tag, size_t len);
+void CRYPTO_ocb128_cleanup(OCB128_CONTEXT *ctx);
+# endif                          /* OPENSSL_NO_OCB */
+
+# ifdef  __cplusplus
+}
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/obj_mac.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/obj_mac.h
new file mode 100644
index 000000000..31fad4640
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/obj_mac.h
@@ -0,0 +1,5198 @@
+/*
+ * WARNING: do not edit!
+ * Generated by crypto/objects/objects.pl
+ *
+ * Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#define SN_undef                        "UNDEF"
+#define LN_undef                        "undefined"
+#define NID_undef                       0
+#define OBJ_undef                       0L
+
+#define SN_itu_t                "ITU-T"
+#define LN_itu_t                "itu-t"
+#define NID_itu_t               645
+#define OBJ_itu_t               0L
+
+#define NID_ccitt               404
+#define OBJ_ccitt               OBJ_itu_t
+
+#define SN_iso          "ISO"
+#define LN_iso          "iso"
+#define NID_iso         181
+#define OBJ_iso         1L
+
+#define SN_joint_iso_itu_t              "JOINT-ISO-ITU-T"
+#define LN_joint_iso_itu_t              "joint-iso-itu-t"
+#define NID_joint_iso_itu_t             646
+#define OBJ_joint_iso_itu_t             2L
+
+#define NID_joint_iso_ccitt             393
+#define OBJ_joint_iso_ccitt             OBJ_joint_iso_itu_t
+
+#define SN_member_body          "member-body"
+#define LN_member_body          "ISO Member Body"
+#define NID_member_body         182
+#define OBJ_member_body         OBJ_iso,2L
+
+#define SN_identified_organization              "identified-organization"
+#define NID_identified_organization             676
+#define OBJ_identified_organization             OBJ_iso,3L
+
+#define SN_hmac_md5             "HMAC-MD5"
+#define LN_hmac_md5             "hmac-md5"
+#define NID_hmac_md5            780
+#define OBJ_hmac_md5            OBJ_identified_organization,6L,1L,5L,5L,8L,1L,1L
+
+#define SN_hmac_sha1            "HMAC-SHA1"
+#define LN_hmac_sha1            "hmac-sha1"
+#define NID_hmac_sha1           781
+#define OBJ_hmac_sha1           OBJ_identified_organization,6L,1L,5L,5L,8L,1L,2L
+
+#define SN_x509ExtAdmission             "x509ExtAdmission"
+#define LN_x509ExtAdmission             "Professional Information or basis for Admission"
+#define NID_x509ExtAdmission            1093
+#define OBJ_x509ExtAdmission            OBJ_identified_organization,36L,8L,3L,3L
+
+#define SN_certicom_arc         "certicom-arc"
+#define NID_certicom_arc                677
+#define OBJ_certicom_arc                OBJ_identified_organization,132L
+
+#define SN_ieee         "ieee"
+#define NID_ieee                1170
+#define OBJ_ieee                OBJ_identified_organization,111L
+
+#define SN_ieee_siswg           "ieee-siswg"
+#define LN_ieee_siswg           "IEEE Security in Storage Working Group"
+#define NID_ieee_siswg          1171
+#define OBJ_ieee_siswg          OBJ_ieee,2L,1619L
+
+#define SN_international_organizations          "international-organizations"
+#define LN_international_organizations          "International Organizations"
+#define NID_international_organizations         647
+#define OBJ_international_organizations         OBJ_joint_iso_itu_t,23L
+
+#define SN_wap          "wap"
+#define NID_wap         678
+#define OBJ_wap         OBJ_international_organizations,43L
+
+#define SN_wap_wsg              "wap-wsg"
+#define NID_wap_wsg             679
+#define OBJ_wap_wsg             OBJ_wap,1L
+
+#define SN_selected_attribute_types             "selected-attribute-types"
+#define LN_selected_attribute_types             "Selected Attribute Types"
+#define NID_selected_attribute_types            394
+#define OBJ_selected_attribute_types            OBJ_joint_iso_itu_t,5L,1L,5L
+
+#define SN_clearance            "clearance"
+#define NID_clearance           395
+#define OBJ_clearance           OBJ_selected_attribute_types,55L
+
+#define SN_ISO_US               "ISO-US"
+#define LN_ISO_US               "ISO US Member Body"
+#define NID_ISO_US              183
+#define OBJ_ISO_US              OBJ_member_body,840L
+
+#define SN_X9_57                "X9-57"
+#define LN_X9_57                "X9.57"
+#define NID_X9_57               184
+#define OBJ_X9_57               OBJ_ISO_US,10040L
+
+#define SN_X9cm         "X9cm"
+#define LN_X9cm         "X9.57 CM ?"
+#define NID_X9cm                185
+#define OBJ_X9cm                OBJ_X9_57,4L
+
+#define SN_ISO_CN               "ISO-CN"
+#define LN_ISO_CN               "ISO CN Member Body"
+#define NID_ISO_CN              1140
+#define OBJ_ISO_CN              OBJ_member_body,156L
+
+#define SN_oscca                "oscca"
+#define NID_oscca               1141
+#define OBJ_oscca               OBJ_ISO_CN,10197L
+
+#define SN_sm_scheme            "sm-scheme"
+#define NID_sm_scheme           1142
+#define OBJ_sm_scheme           OBJ_oscca,1L
+
+#define SN_dsa          "DSA"
+#define LN_dsa          "dsaEncryption"
+#define NID_dsa         116
+#define OBJ_dsa         OBJ_X9cm,1L
+
+#define SN_dsaWithSHA1          "DSA-SHA1"
+#define LN_dsaWithSHA1          "dsaWithSHA1"
+#define NID_dsaWithSHA1         113
+#define OBJ_dsaWithSHA1         OBJ_X9cm,3L
+
+#define SN_ansi_X9_62           "ansi-X9-62"
+#define LN_ansi_X9_62           "ANSI X9.62"
+#define NID_ansi_X9_62          405
+#define OBJ_ansi_X9_62          OBJ_ISO_US,10045L
+
+#define OBJ_X9_62_id_fieldType          OBJ_ansi_X9_62,1L
+
+#define SN_X9_62_prime_field            "prime-field"
+#define NID_X9_62_prime_field           406
+#define OBJ_X9_62_prime_field           OBJ_X9_62_id_fieldType,1L
+
+#define SN_X9_62_characteristic_two_field               "characteristic-two-field"
+#define NID_X9_62_characteristic_two_field              407
+#define OBJ_X9_62_characteristic_two_field              OBJ_X9_62_id_fieldType,2L
+
+#define SN_X9_62_id_characteristic_two_basis            "id-characteristic-two-basis"
+#define NID_X9_62_id_characteristic_two_basis           680
+#define OBJ_X9_62_id_characteristic_two_basis           OBJ_X9_62_characteristic_two_field,3L
+
+#define SN_X9_62_onBasis                "onBasis"
+#define NID_X9_62_onBasis               681
+#define OBJ_X9_62_onBasis               OBJ_X9_62_id_characteristic_two_basis,1L
+
+#define SN_X9_62_tpBasis                "tpBasis"
+#define NID_X9_62_tpBasis               682
+#define OBJ_X9_62_tpBasis               OBJ_X9_62_id_characteristic_two_basis,2L
+
+#define SN_X9_62_ppBasis                "ppBasis"
+#define NID_X9_62_ppBasis               683
+#define OBJ_X9_62_ppBasis               OBJ_X9_62_id_characteristic_two_basis,3L
+
+#define OBJ_X9_62_id_publicKeyType              OBJ_ansi_X9_62,2L
+
+#define SN_X9_62_id_ecPublicKey         "id-ecPublicKey"
+#define NID_X9_62_id_ecPublicKey                408
+#define OBJ_X9_62_id_ecPublicKey                OBJ_X9_62_id_publicKeyType,1L
+
+#define OBJ_X9_62_ellipticCurve         OBJ_ansi_X9_62,3L
+
+#define OBJ_X9_62_c_TwoCurve            OBJ_X9_62_ellipticCurve,0L
+
+#define SN_X9_62_c2pnb163v1             "c2pnb163v1"
+#define NID_X9_62_c2pnb163v1            684
+#define OBJ_X9_62_c2pnb163v1            OBJ_X9_62_c_TwoCurve,1L
+
+#define SN_X9_62_c2pnb163v2             "c2pnb163v2"
+#define NID_X9_62_c2pnb163v2            685
+#define OBJ_X9_62_c2pnb163v2            OBJ_X9_62_c_TwoCurve,2L
+
+#define SN_X9_62_c2pnb163v3             "c2pnb163v3"
+#define NID_X9_62_c2pnb163v3            686
+#define OBJ_X9_62_c2pnb163v3            OBJ_X9_62_c_TwoCurve,3L
+
+#define SN_X9_62_c2pnb176v1             "c2pnb176v1"
+#define NID_X9_62_c2pnb176v1            687
+#define OBJ_X9_62_c2pnb176v1            OBJ_X9_62_c_TwoCurve,4L
+
+#define SN_X9_62_c2tnb191v1             "c2tnb191v1"
+#define NID_X9_62_c2tnb191v1            688
+#define OBJ_X9_62_c2tnb191v1            OBJ_X9_62_c_TwoCurve,5L
+
+#define SN_X9_62_c2tnb191v2             "c2tnb191v2"
+#define NID_X9_62_c2tnb191v2            689
+#define OBJ_X9_62_c2tnb191v2            OBJ_X9_62_c_TwoCurve,6L
+
+#define SN_X9_62_c2tnb191v3             "c2tnb191v3"
+#define NID_X9_62_c2tnb191v3            690
+#define OBJ_X9_62_c2tnb191v3            OBJ_X9_62_c_TwoCurve,7L
+
+#define SN_X9_62_c2onb191v4             "c2onb191v4"
+#define NID_X9_62_c2onb191v4            691
+#define OBJ_X9_62_c2onb191v4            OBJ_X9_62_c_TwoCurve,8L
+
+#define SN_X9_62_c2onb191v5             "c2onb191v5"
+#define NID_X9_62_c2onb191v5            692
+#define OBJ_X9_62_c2onb191v5            OBJ_X9_62_c_TwoCurve,9L
+
+#define SN_X9_62_c2pnb208w1             "c2pnb208w1"
+#define NID_X9_62_c2pnb208w1            693
+#define OBJ_X9_62_c2pnb208w1            OBJ_X9_62_c_TwoCurve,10L
+
+#define SN_X9_62_c2tnb239v1             "c2tnb239v1"
+#define NID_X9_62_c2tnb239v1            694
+#define OBJ_X9_62_c2tnb239v1            OBJ_X9_62_c_TwoCurve,11L
+
+#define SN_X9_62_c2tnb239v2             "c2tnb239v2"
+#define NID_X9_62_c2tnb239v2            695
+#define OBJ_X9_62_c2tnb239v2            OBJ_X9_62_c_TwoCurve,12L
+
+#define SN_X9_62_c2tnb239v3             "c2tnb239v3"
+#define NID_X9_62_c2tnb239v3            696
+#define OBJ_X9_62_c2tnb239v3            OBJ_X9_62_c_TwoCurve,13L
+
+#define SN_X9_62_c2onb239v4             "c2onb239v4"
+#define NID_X9_62_c2onb239v4            697
+#define OBJ_X9_62_c2onb239v4            OBJ_X9_62_c_TwoCurve,14L
+
+#define SN_X9_62_c2onb239v5             "c2onb239v5"
+#define NID_X9_62_c2onb239v5            698
+#define OBJ_X9_62_c2onb239v5            OBJ_X9_62_c_TwoCurve,15L
+
+#define SN_X9_62_c2pnb272w1             "c2pnb272w1"
+#define NID_X9_62_c2pnb272w1            699
+#define OBJ_X9_62_c2pnb272w1            OBJ_X9_62_c_TwoCurve,16L
+
+#define SN_X9_62_c2pnb304w1             "c2pnb304w1"
+#define NID_X9_62_c2pnb304w1            700
+#define OBJ_X9_62_c2pnb304w1            OBJ_X9_62_c_TwoCurve,17L
+
+#define SN_X9_62_c2tnb359v1             "c2tnb359v1"
+#define NID_X9_62_c2tnb359v1            701
+#define OBJ_X9_62_c2tnb359v1            OBJ_X9_62_c_TwoCurve,18L
+
+#define SN_X9_62_c2pnb368w1             "c2pnb368w1"
+#define NID_X9_62_c2pnb368w1            702
+#define OBJ_X9_62_c2pnb368w1            OBJ_X9_62_c_TwoCurve,19L
+
+#define SN_X9_62_c2tnb431r1             "c2tnb431r1"
+#define NID_X9_62_c2tnb431r1            703
+#define OBJ_X9_62_c2tnb431r1            OBJ_X9_62_c_TwoCurve,20L
+
+#define OBJ_X9_62_primeCurve            OBJ_X9_62_ellipticCurve,1L
+
+#define SN_X9_62_prime192v1             "prime192v1"
+#define NID_X9_62_prime192v1            409
+#define OBJ_X9_62_prime192v1            OBJ_X9_62_primeCurve,1L
+
+#define SN_X9_62_prime192v2             "prime192v2"
+#define NID_X9_62_prime192v2            410
+#define OBJ_X9_62_prime192v2            OBJ_X9_62_primeCurve,2L
+
+#define SN_X9_62_prime192v3             "prime192v3"
+#define NID_X9_62_prime192v3            411
+#define OBJ_X9_62_prime192v3            OBJ_X9_62_primeCurve,3L
+
+#define SN_X9_62_prime239v1             "prime239v1"
+#define NID_X9_62_prime239v1            412
+#define OBJ_X9_62_prime239v1            OBJ_X9_62_primeCurve,4L
+
+#define SN_X9_62_prime239v2             "prime239v2"
+#define NID_X9_62_prime239v2            413
+#define OBJ_X9_62_prime239v2            OBJ_X9_62_primeCurve,5L
+
+#define SN_X9_62_prime239v3             "prime239v3"
+#define NID_X9_62_prime239v3            414
+#define OBJ_X9_62_prime239v3            OBJ_X9_62_primeCurve,6L
+
+#define SN_X9_62_prime256v1             "prime256v1"
+#define NID_X9_62_prime256v1            415
+#define OBJ_X9_62_prime256v1            OBJ_X9_62_primeCurve,7L
+
+#define OBJ_X9_62_id_ecSigType          OBJ_ansi_X9_62,4L
+
+#define SN_ecdsa_with_SHA1              "ecdsa-with-SHA1"
+#define NID_ecdsa_with_SHA1             416
+#define OBJ_ecdsa_with_SHA1             OBJ_X9_62_id_ecSigType,1L
+
+#define SN_ecdsa_with_Recommended               "ecdsa-with-Recommended"
+#define NID_ecdsa_with_Recommended              791
+#define OBJ_ecdsa_with_Recommended              OBJ_X9_62_id_ecSigType,2L
+
+#define SN_ecdsa_with_Specified         "ecdsa-with-Specified"
+#define NID_ecdsa_with_Specified                792
+#define OBJ_ecdsa_with_Specified                OBJ_X9_62_id_ecSigType,3L
+
+#define SN_ecdsa_with_SHA224            "ecdsa-with-SHA224"
+#define NID_ecdsa_with_SHA224           793
+#define OBJ_ecdsa_with_SHA224           OBJ_ecdsa_with_Specified,1L
+
+#define SN_ecdsa_with_SHA256            "ecdsa-with-SHA256"
+#define NID_ecdsa_with_SHA256           794
+#define OBJ_ecdsa_with_SHA256           OBJ_ecdsa_with_Specified,2L
+
+#define SN_ecdsa_with_SHA384            "ecdsa-with-SHA384"
+#define NID_ecdsa_with_SHA384           795
+#define OBJ_ecdsa_with_SHA384           OBJ_ecdsa_with_Specified,3L
+
+#define SN_ecdsa_with_SHA512            "ecdsa-with-SHA512"
+#define NID_ecdsa_with_SHA512           796
+#define OBJ_ecdsa_with_SHA512           OBJ_ecdsa_with_Specified,4L
+
+#define OBJ_secg_ellipticCurve          OBJ_certicom_arc,0L
+
+#define SN_secp112r1            "secp112r1"
+#define NID_secp112r1           704
+#define OBJ_secp112r1           OBJ_secg_ellipticCurve,6L
+
+#define SN_secp112r2            "secp112r2"
+#define NID_secp112r2           705
+#define OBJ_secp112r2           OBJ_secg_ellipticCurve,7L
+
+#define SN_secp128r1            "secp128r1"
+#define NID_secp128r1           706
+#define OBJ_secp128r1           OBJ_secg_ellipticCurve,28L
+
+#define SN_secp128r2            "secp128r2"
+#define NID_secp128r2           707
+#define OBJ_secp128r2           OBJ_secg_ellipticCurve,29L
+
+#define SN_secp160k1            "secp160k1"
+#define NID_secp160k1           708
+#define OBJ_secp160k1           OBJ_secg_ellipticCurve,9L
+
+#define SN_secp160r1            "secp160r1"
+#define NID_secp160r1           709
+#define OBJ_secp160r1           OBJ_secg_ellipticCurve,8L
+
+#define SN_secp160r2            "secp160r2"
+#define NID_secp160r2           710
+#define OBJ_secp160r2           OBJ_secg_ellipticCurve,30L
+
+#define SN_secp192k1            "secp192k1"
+#define NID_secp192k1           711
+#define OBJ_secp192k1           OBJ_secg_ellipticCurve,31L
+
+#define SN_secp224k1            "secp224k1"
+#define NID_secp224k1           712
+#define OBJ_secp224k1           OBJ_secg_ellipticCurve,32L
+
+#define SN_secp224r1            "secp224r1"
+#define NID_secp224r1           713
+#define OBJ_secp224r1           OBJ_secg_ellipticCurve,33L
+
+#define SN_secp256k1            "secp256k1"
+#define NID_secp256k1           714
+#define OBJ_secp256k1           OBJ_secg_ellipticCurve,10L
+
+#define SN_secp384r1            "secp384r1"
+#define NID_secp384r1           715
+#define OBJ_secp384r1           OBJ_secg_ellipticCurve,34L
+
+#define SN_secp521r1            "secp521r1"
+#define NID_secp521r1           716
+#define OBJ_secp521r1           OBJ_secg_ellipticCurve,35L
+
+#define SN_sect113r1            "sect113r1"
+#define NID_sect113r1           717
+#define OBJ_sect113r1           OBJ_secg_ellipticCurve,4L
+
+#define SN_sect113r2            "sect113r2"
+#define NID_sect113r2           718
+#define OBJ_sect113r2           OBJ_secg_ellipticCurve,5L
+
+#define SN_sect131r1            "sect131r1"
+#define NID_sect131r1           719
+#define OBJ_sect131r1           OBJ_secg_ellipticCurve,22L
+
+#define SN_sect131r2            "sect131r2"
+#define NID_sect131r2           720
+#define OBJ_sect131r2           OBJ_secg_ellipticCurve,23L
+
+#define SN_sect163k1            "sect163k1"
+#define NID_sect163k1           721
+#define OBJ_sect163k1           OBJ_secg_ellipticCurve,1L
+
+#define SN_sect163r1            "sect163r1"
+#define NID_sect163r1           722
+#define OBJ_sect163r1           OBJ_secg_ellipticCurve,2L
+
+#define SN_sect163r2            "sect163r2"
+#define NID_sect163r2           723
+#define OBJ_sect163r2           OBJ_secg_ellipticCurve,15L
+
+#define SN_sect193r1            "sect193r1"
+#define NID_sect193r1           724
+#define OBJ_sect193r1           OBJ_secg_ellipticCurve,24L
+
+#define SN_sect193r2            "sect193r2"
+#define NID_sect193r2           725
+#define OBJ_sect193r2           OBJ_secg_ellipticCurve,25L
+
+#define SN_sect233k1            "sect233k1"
+#define NID_sect233k1           726
+#define OBJ_sect233k1           OBJ_secg_ellipticCurve,26L
+
+#define SN_sect233r1            "sect233r1"
+#define NID_sect233r1           727
+#define OBJ_sect233r1           OBJ_secg_ellipticCurve,27L
+
+#define SN_sect239k1            "sect239k1"
+#define NID_sect239k1           728
+#define OBJ_sect239k1           OBJ_secg_ellipticCurve,3L
+
+#define SN_sect283k1            "sect283k1"
+#define NID_sect283k1           729
+#define OBJ_sect283k1           OBJ_secg_ellipticCurve,16L
+
+#define SN_sect283r1            "sect283r1"
+#define NID_sect283r1           730
+#define OBJ_sect283r1           OBJ_secg_ellipticCurve,17L
+
+#define SN_sect409k1            "sect409k1"
+#define NID_sect409k1           731
+#define OBJ_sect409k1           OBJ_secg_ellipticCurve,36L
+
+#define SN_sect409r1            "sect409r1"
+#define NID_sect409r1           732
+#define OBJ_sect409r1           OBJ_secg_ellipticCurve,37L
+
+#define SN_sect571k1            "sect571k1"
+#define NID_sect571k1           733
+#define OBJ_sect571k1           OBJ_secg_ellipticCurve,38L
+
+#define SN_sect571r1            "sect571r1"
+#define NID_sect571r1           734
+#define OBJ_sect571r1           OBJ_secg_ellipticCurve,39L
+
+#define OBJ_wap_wsg_idm_ecid            OBJ_wap_wsg,4L
+
+#define SN_wap_wsg_idm_ecid_wtls1               "wap-wsg-idm-ecid-wtls1"
+#define NID_wap_wsg_idm_ecid_wtls1              735
+#define OBJ_wap_wsg_idm_ecid_wtls1              OBJ_wap_wsg_idm_ecid,1L
+
+#define SN_wap_wsg_idm_ecid_wtls3               "wap-wsg-idm-ecid-wtls3"
+#define NID_wap_wsg_idm_ecid_wtls3              736
+#define OBJ_wap_wsg_idm_ecid_wtls3              OBJ_wap_wsg_idm_ecid,3L
+
+#define SN_wap_wsg_idm_ecid_wtls4               "wap-wsg-idm-ecid-wtls4"
+#define NID_wap_wsg_idm_ecid_wtls4              737
+#define OBJ_wap_wsg_idm_ecid_wtls4              OBJ_wap_wsg_idm_ecid,4L
+
+#define SN_wap_wsg_idm_ecid_wtls5               "wap-wsg-idm-ecid-wtls5"
+#define NID_wap_wsg_idm_ecid_wtls5              738
+#define OBJ_wap_wsg_idm_ecid_wtls5              OBJ_wap_wsg_idm_ecid,5L
+
+#define SN_wap_wsg_idm_ecid_wtls6               "wap-wsg-idm-ecid-wtls6"
+#define NID_wap_wsg_idm_ecid_wtls6              739
+#define OBJ_wap_wsg_idm_ecid_wtls6              OBJ_wap_wsg_idm_ecid,6L
+
+#define SN_wap_wsg_idm_ecid_wtls7               "wap-wsg-idm-ecid-wtls7"
+#define NID_wap_wsg_idm_ecid_wtls7              740
+#define OBJ_wap_wsg_idm_ecid_wtls7              OBJ_wap_wsg_idm_ecid,7L
+
+#define SN_wap_wsg_idm_ecid_wtls8               "wap-wsg-idm-ecid-wtls8"
+#define NID_wap_wsg_idm_ecid_wtls8              741
+#define OBJ_wap_wsg_idm_ecid_wtls8              OBJ_wap_wsg_idm_ecid,8L
+
+#define SN_wap_wsg_idm_ecid_wtls9               "wap-wsg-idm-ecid-wtls9"
+#define NID_wap_wsg_idm_ecid_wtls9              742
+#define OBJ_wap_wsg_idm_ecid_wtls9              OBJ_wap_wsg_idm_ecid,9L
+
+#define SN_wap_wsg_idm_ecid_wtls10              "wap-wsg-idm-ecid-wtls10"
+#define NID_wap_wsg_idm_ecid_wtls10             743
+#define OBJ_wap_wsg_idm_ecid_wtls10             OBJ_wap_wsg_idm_ecid,10L
+
+#define SN_wap_wsg_idm_ecid_wtls11              "wap-wsg-idm-ecid-wtls11"
+#define NID_wap_wsg_idm_ecid_wtls11             744
+#define OBJ_wap_wsg_idm_ecid_wtls11             OBJ_wap_wsg_idm_ecid,11L
+
+#define SN_wap_wsg_idm_ecid_wtls12              "wap-wsg-idm-ecid-wtls12"
+#define NID_wap_wsg_idm_ecid_wtls12             745
+#define OBJ_wap_wsg_idm_ecid_wtls12             OBJ_wap_wsg_idm_ecid,12L
+
+#define SN_cast5_cbc            "CAST5-CBC"
+#define LN_cast5_cbc            "cast5-cbc"
+#define NID_cast5_cbc           108
+#define OBJ_cast5_cbc           OBJ_ISO_US,113533L,7L,66L,10L
+
+#define SN_cast5_ecb            "CAST5-ECB"
+#define LN_cast5_ecb            "cast5-ecb"
+#define NID_cast5_ecb           109
+
+#define SN_cast5_cfb64          "CAST5-CFB"
+#define LN_cast5_cfb64          "cast5-cfb"
+#define NID_cast5_cfb64         110
+
+#define SN_cast5_ofb64          "CAST5-OFB"
+#define LN_cast5_ofb64          "cast5-ofb"
+#define NID_cast5_ofb64         111
+
+#define LN_pbeWithMD5AndCast5_CBC               "pbeWithMD5AndCast5CBC"
+#define NID_pbeWithMD5AndCast5_CBC              112
+#define OBJ_pbeWithMD5AndCast5_CBC              OBJ_ISO_US,113533L,7L,66L,12L
+
+#define SN_id_PasswordBasedMAC          "id-PasswordBasedMAC"
+#define LN_id_PasswordBasedMAC          "password based MAC"
+#define NID_id_PasswordBasedMAC         782
+#define OBJ_id_PasswordBasedMAC         OBJ_ISO_US,113533L,7L,66L,13L
+
+#define SN_id_DHBasedMac                "id-DHBasedMac"
+#define LN_id_DHBasedMac                "Diffie-Hellman based MAC"
+#define NID_id_DHBasedMac               783
+#define OBJ_id_DHBasedMac               OBJ_ISO_US,113533L,7L,66L,30L
+
+#define SN_rsadsi               "rsadsi"
+#define LN_rsadsi               "RSA Data Security, Inc."
+#define NID_rsadsi              1
+#define OBJ_rsadsi              OBJ_ISO_US,113549L
+
+#define SN_pkcs         "pkcs"
+#define LN_pkcs         "RSA Data Security, Inc. PKCS"
+#define NID_pkcs                2
+#define OBJ_pkcs                OBJ_rsadsi,1L
+
+#define SN_pkcs1                "pkcs1"
+#define NID_pkcs1               186
+#define OBJ_pkcs1               OBJ_pkcs,1L
+
+#define LN_rsaEncryption                "rsaEncryption"
+#define NID_rsaEncryption               6
+#define OBJ_rsaEncryption               OBJ_pkcs1,1L
+
+#define SN_md2WithRSAEncryption         "RSA-MD2"
+#define LN_md2WithRSAEncryption         "md2WithRSAEncryption"
+#define NID_md2WithRSAEncryption                7
+#define OBJ_md2WithRSAEncryption                OBJ_pkcs1,2L
+
+#define SN_md4WithRSAEncryption         "RSA-MD4"
+#define LN_md4WithRSAEncryption         "md4WithRSAEncryption"
+#define NID_md4WithRSAEncryption                396
+#define OBJ_md4WithRSAEncryption                OBJ_pkcs1,3L
+
+#define SN_md5WithRSAEncryption         "RSA-MD5"
+#define LN_md5WithRSAEncryption         "md5WithRSAEncryption"
+#define NID_md5WithRSAEncryption                8
+#define OBJ_md5WithRSAEncryption                OBJ_pkcs1,4L
+
+#define SN_sha1WithRSAEncryption                "RSA-SHA1"
+#define LN_sha1WithRSAEncryption                "sha1WithRSAEncryption"
+#define NID_sha1WithRSAEncryption               65
+#define OBJ_sha1WithRSAEncryption               OBJ_pkcs1,5L
+
+#define SN_rsaesOaep            "RSAES-OAEP"
+#define LN_rsaesOaep            "rsaesOaep"
+#define NID_rsaesOaep           919
+#define OBJ_rsaesOaep           OBJ_pkcs1,7L
+
+#define SN_mgf1         "MGF1"
+#define LN_mgf1         "mgf1"
+#define NID_mgf1                911
+#define OBJ_mgf1                OBJ_pkcs1,8L
+
+#define SN_pSpecified           "PSPECIFIED"
+#define LN_pSpecified           "pSpecified"
+#define NID_pSpecified          935
+#define OBJ_pSpecified          OBJ_pkcs1,9L
+
+#define SN_rsassaPss            "RSASSA-PSS"
+#define LN_rsassaPss            "rsassaPss"
+#define NID_rsassaPss           912
+#define OBJ_rsassaPss           OBJ_pkcs1,10L
+
+#define SN_sha256WithRSAEncryption              "RSA-SHA256"
+#define LN_sha256WithRSAEncryption              "sha256WithRSAEncryption"
+#define NID_sha256WithRSAEncryption             668
+#define OBJ_sha256WithRSAEncryption             OBJ_pkcs1,11L
+
+#define SN_sha384WithRSAEncryption              "RSA-SHA384"
+#define LN_sha384WithRSAEncryption              "sha384WithRSAEncryption"
+#define NID_sha384WithRSAEncryption             669
+#define OBJ_sha384WithRSAEncryption             OBJ_pkcs1,12L
+
+#define SN_sha512WithRSAEncryption              "RSA-SHA512"
+#define LN_sha512WithRSAEncryption              "sha512WithRSAEncryption"
+#define NID_sha512WithRSAEncryption             670
+#define OBJ_sha512WithRSAEncryption             OBJ_pkcs1,13L
+
+#define SN_sha224WithRSAEncryption              "RSA-SHA224"
+#define LN_sha224WithRSAEncryption              "sha224WithRSAEncryption"
+#define NID_sha224WithRSAEncryption             671
+#define OBJ_sha224WithRSAEncryption             OBJ_pkcs1,14L
+
+#define SN_sha512_224WithRSAEncryption          "RSA-SHA512/224"
+#define LN_sha512_224WithRSAEncryption          "sha512-224WithRSAEncryption"
+#define NID_sha512_224WithRSAEncryption         1145
+#define OBJ_sha512_224WithRSAEncryption         OBJ_pkcs1,15L
+
+#define SN_sha512_256WithRSAEncryption          "RSA-SHA512/256"
+#define LN_sha512_256WithRSAEncryption          "sha512-256WithRSAEncryption"
+#define NID_sha512_256WithRSAEncryption         1146
+#define OBJ_sha512_256WithRSAEncryption         OBJ_pkcs1,16L
+
+#define SN_pkcs3                "pkcs3"
+#define NID_pkcs3               27
+#define OBJ_pkcs3               OBJ_pkcs,3L
+
+#define LN_dhKeyAgreement               "dhKeyAgreement"
+#define NID_dhKeyAgreement              28
+#define OBJ_dhKeyAgreement              OBJ_pkcs3,1L
+
+#define SN_pkcs5                "pkcs5"
+#define NID_pkcs5               187
+#define OBJ_pkcs5               OBJ_pkcs,5L
+
+#define SN_pbeWithMD2AndDES_CBC         "PBE-MD2-DES"
+#define LN_pbeWithMD2AndDES_CBC         "pbeWithMD2AndDES-CBC"
+#define NID_pbeWithMD2AndDES_CBC                9
+#define OBJ_pbeWithMD2AndDES_CBC                OBJ_pkcs5,1L
+
+#define SN_pbeWithMD5AndDES_CBC         "PBE-MD5-DES"
+#define LN_pbeWithMD5AndDES_CBC         "pbeWithMD5AndDES-CBC"
+#define NID_pbeWithMD5AndDES_CBC                10
+#define OBJ_pbeWithMD5AndDES_CBC                OBJ_pkcs5,3L
+
+#define SN_pbeWithMD2AndRC2_CBC         "PBE-MD2-RC2-64"
+#define LN_pbeWithMD2AndRC2_CBC         "pbeWithMD2AndRC2-CBC"
+#define NID_pbeWithMD2AndRC2_CBC                168
+#define OBJ_pbeWithMD2AndRC2_CBC                OBJ_pkcs5,4L
+
+#define SN_pbeWithMD5AndRC2_CBC         "PBE-MD5-RC2-64"
+#define LN_pbeWithMD5AndRC2_CBC         "pbeWithMD5AndRC2-CBC"
+#define NID_pbeWithMD5AndRC2_CBC                169
+#define OBJ_pbeWithMD5AndRC2_CBC                OBJ_pkcs5,6L
+
+#define SN_pbeWithSHA1AndDES_CBC                "PBE-SHA1-DES"
+#define LN_pbeWithSHA1AndDES_CBC                "pbeWithSHA1AndDES-CBC"
+#define NID_pbeWithSHA1AndDES_CBC               170
+#define OBJ_pbeWithSHA1AndDES_CBC               OBJ_pkcs5,10L
+
+#define SN_pbeWithSHA1AndRC2_CBC                "PBE-SHA1-RC2-64"
+#define LN_pbeWithSHA1AndRC2_CBC                "pbeWithSHA1AndRC2-CBC"
+#define NID_pbeWithSHA1AndRC2_CBC               68
+#define OBJ_pbeWithSHA1AndRC2_CBC               OBJ_pkcs5,11L
+
+#define LN_id_pbkdf2            "PBKDF2"
+#define NID_id_pbkdf2           69
+#define OBJ_id_pbkdf2           OBJ_pkcs5,12L
+
+#define LN_pbes2                "PBES2"
+#define NID_pbes2               161
+#define OBJ_pbes2               OBJ_pkcs5,13L
+
+#define LN_pbmac1               "PBMAC1"
+#define NID_pbmac1              162
+#define OBJ_pbmac1              OBJ_pkcs5,14L
+
+#define SN_pkcs7                "pkcs7"
+#define NID_pkcs7               20
+#define OBJ_pkcs7               OBJ_pkcs,7L
+
+#define LN_pkcs7_data           "pkcs7-data"
+#define NID_pkcs7_data          21
+#define OBJ_pkcs7_data          OBJ_pkcs7,1L
+
+#define LN_pkcs7_signed         "pkcs7-signedData"
+#define NID_pkcs7_signed                22
+#define OBJ_pkcs7_signed                OBJ_pkcs7,2L
+
+#define LN_pkcs7_enveloped              "pkcs7-envelopedData"
+#define NID_pkcs7_enveloped             23
+#define OBJ_pkcs7_enveloped             OBJ_pkcs7,3L
+
+#define LN_pkcs7_signedAndEnveloped             "pkcs7-signedAndEnvelopedData"
+#define NID_pkcs7_signedAndEnveloped            24
+#define OBJ_pkcs7_signedAndEnveloped            OBJ_pkcs7,4L
+
+#define LN_pkcs7_digest         "pkcs7-digestData"
+#define NID_pkcs7_digest                25
+#define OBJ_pkcs7_digest                OBJ_pkcs7,5L
+
+#define LN_pkcs7_encrypted              "pkcs7-encryptedData"
+#define NID_pkcs7_encrypted             26
+#define OBJ_pkcs7_encrypted             OBJ_pkcs7,6L
+
+#define SN_pkcs9                "pkcs9"
+#define NID_pkcs9               47
+#define OBJ_pkcs9               OBJ_pkcs,9L
+
+#define LN_pkcs9_emailAddress           "emailAddress"
+#define NID_pkcs9_emailAddress          48
+#define OBJ_pkcs9_emailAddress          OBJ_pkcs9,1L
+
+#define LN_pkcs9_unstructuredName               "unstructuredName"
+#define NID_pkcs9_unstructuredName              49
+#define OBJ_pkcs9_unstructuredName              OBJ_pkcs9,2L
+
+#define LN_pkcs9_contentType            "contentType"
+#define NID_pkcs9_contentType           50
+#define OBJ_pkcs9_contentType           OBJ_pkcs9,3L
+
+#define LN_pkcs9_messageDigest          "messageDigest"
+#define NID_pkcs9_messageDigest         51
+#define OBJ_pkcs9_messageDigest         OBJ_pkcs9,4L
+
+#define LN_pkcs9_signingTime            "signingTime"
+#define NID_pkcs9_signingTime           52
+#define OBJ_pkcs9_signingTime           OBJ_pkcs9,5L
+
+#define LN_pkcs9_countersignature               "countersignature"
+#define NID_pkcs9_countersignature              53
+#define OBJ_pkcs9_countersignature              OBJ_pkcs9,6L
+
+#define LN_pkcs9_challengePassword              "challengePassword"
+#define NID_pkcs9_challengePassword             54
+#define OBJ_pkcs9_challengePassword             OBJ_pkcs9,7L
+
+#define LN_pkcs9_unstructuredAddress            "unstructuredAddress"
+#define NID_pkcs9_unstructuredAddress           55
+#define OBJ_pkcs9_unstructuredAddress           OBJ_pkcs9,8L
+
+#define LN_pkcs9_extCertAttributes              "extendedCertificateAttributes"
+#define NID_pkcs9_extCertAttributes             56
+#define OBJ_pkcs9_extCertAttributes             OBJ_pkcs9,9L
+
+#define SN_ext_req              "extReq"
+#define LN_ext_req              "Extension Request"
+#define NID_ext_req             172
+#define OBJ_ext_req             OBJ_pkcs9,14L
+
+#define SN_SMIMECapabilities            "SMIME-CAPS"
+#define LN_SMIMECapabilities            "S/MIME Capabilities"
+#define NID_SMIMECapabilities           167
+#define OBJ_SMIMECapabilities           OBJ_pkcs9,15L
+
+#define SN_SMIME                "SMIME"
+#define LN_SMIME                "S/MIME"
+#define NID_SMIME               188
+#define OBJ_SMIME               OBJ_pkcs9,16L
+
+#define SN_id_smime_mod         "id-smime-mod"
+#define NID_id_smime_mod                189
+#define OBJ_id_smime_mod                OBJ_SMIME,0L
+
+#define SN_id_smime_ct          "id-smime-ct"
+#define NID_id_smime_ct         190
+#define OBJ_id_smime_ct         OBJ_SMIME,1L
+
+#define SN_id_smime_aa          "id-smime-aa"
+#define NID_id_smime_aa         191
+#define OBJ_id_smime_aa         OBJ_SMIME,2L
+
+#define SN_id_smime_alg         "id-smime-alg"
+#define NID_id_smime_alg                192
+#define OBJ_id_smime_alg                OBJ_SMIME,3L
+
+#define SN_id_smime_cd          "id-smime-cd"
+#define NID_id_smime_cd         193
+#define OBJ_id_smime_cd         OBJ_SMIME,4L
+
+#define SN_id_smime_spq         "id-smime-spq"
+#define NID_id_smime_spq                194
+#define OBJ_id_smime_spq                OBJ_SMIME,5L
+
+#define SN_id_smime_cti         "id-smime-cti"
+#define NID_id_smime_cti                195
+#define OBJ_id_smime_cti                OBJ_SMIME,6L
+
+#define SN_id_smime_mod_cms             "id-smime-mod-cms"
+#define NID_id_smime_mod_cms            196
+#define OBJ_id_smime_mod_cms            OBJ_id_smime_mod,1L
+
+#define SN_id_smime_mod_ess             "id-smime-mod-ess"
+#define NID_id_smime_mod_ess            197
+#define OBJ_id_smime_mod_ess            OBJ_id_smime_mod,2L
+
+#define SN_id_smime_mod_oid             "id-smime-mod-oid"
+#define NID_id_smime_mod_oid            198
+#define OBJ_id_smime_mod_oid            OBJ_id_smime_mod,3L
+
+#define SN_id_smime_mod_msg_v3          "id-smime-mod-msg-v3"
+#define NID_id_smime_mod_msg_v3         199
+#define OBJ_id_smime_mod_msg_v3         OBJ_id_smime_mod,4L
+
+#define SN_id_smime_mod_ets_eSignature_88               "id-smime-mod-ets-eSignature-88"
+#define NID_id_smime_mod_ets_eSignature_88              200
+#define OBJ_id_smime_mod_ets_eSignature_88              OBJ_id_smime_mod,5L
+
+#define SN_id_smime_mod_ets_eSignature_97               "id-smime-mod-ets-eSignature-97"
+#define NID_id_smime_mod_ets_eSignature_97              201
+#define OBJ_id_smime_mod_ets_eSignature_97              OBJ_id_smime_mod,6L
+
+#define SN_id_smime_mod_ets_eSigPolicy_88               "id-smime-mod-ets-eSigPolicy-88"
+#define NID_id_smime_mod_ets_eSigPolicy_88              202
+#define OBJ_id_smime_mod_ets_eSigPolicy_88              OBJ_id_smime_mod,7L
+
+#define SN_id_smime_mod_ets_eSigPolicy_97               "id-smime-mod-ets-eSigPolicy-97"
+#define NID_id_smime_mod_ets_eSigPolicy_97              203
+#define OBJ_id_smime_mod_ets_eSigPolicy_97              OBJ_id_smime_mod,8L
+
+#define SN_id_smime_ct_receipt          "id-smime-ct-receipt"
+#define NID_id_smime_ct_receipt         204
+#define OBJ_id_smime_ct_receipt         OBJ_id_smime_ct,1L
+
+#define SN_id_smime_ct_authData         "id-smime-ct-authData"
+#define NID_id_smime_ct_authData                205
+#define OBJ_id_smime_ct_authData                OBJ_id_smime_ct,2L
+
+#define SN_id_smime_ct_publishCert              "id-smime-ct-publishCert"
+#define NID_id_smime_ct_publishCert             206
+#define OBJ_id_smime_ct_publishCert             OBJ_id_smime_ct,3L
+
+#define SN_id_smime_ct_TSTInfo          "id-smime-ct-TSTInfo"
+#define NID_id_smime_ct_TSTInfo         207
+#define OBJ_id_smime_ct_TSTInfo         OBJ_id_smime_ct,4L
+
+#define SN_id_smime_ct_TDTInfo          "id-smime-ct-TDTInfo"
+#define NID_id_smime_ct_TDTInfo         208
+#define OBJ_id_smime_ct_TDTInfo         OBJ_id_smime_ct,5L
+
+#define SN_id_smime_ct_contentInfo              "id-smime-ct-contentInfo"
+#define NID_id_smime_ct_contentInfo             209
+#define OBJ_id_smime_ct_contentInfo             OBJ_id_smime_ct,6L
+
+#define SN_id_smime_ct_DVCSRequestData          "id-smime-ct-DVCSRequestData"
+#define NID_id_smime_ct_DVCSRequestData         210
+#define OBJ_id_smime_ct_DVCSRequestData         OBJ_id_smime_ct,7L
+
+#define SN_id_smime_ct_DVCSResponseData         "id-smime-ct-DVCSResponseData"
+#define NID_id_smime_ct_DVCSResponseData                211
+#define OBJ_id_smime_ct_DVCSResponseData                OBJ_id_smime_ct,8L
+
+#define SN_id_smime_ct_compressedData           "id-smime-ct-compressedData"
+#define NID_id_smime_ct_compressedData          786
+#define OBJ_id_smime_ct_compressedData          OBJ_id_smime_ct,9L
+
+#define SN_id_smime_ct_contentCollection                "id-smime-ct-contentCollection"
+#define NID_id_smime_ct_contentCollection               1058
+#define OBJ_id_smime_ct_contentCollection               OBJ_id_smime_ct,19L
+
+#define SN_id_smime_ct_authEnvelopedData                "id-smime-ct-authEnvelopedData"
+#define NID_id_smime_ct_authEnvelopedData               1059
+#define OBJ_id_smime_ct_authEnvelopedData               OBJ_id_smime_ct,23L
+
+#define SN_id_ct_asciiTextWithCRLF              "id-ct-asciiTextWithCRLF"
+#define NID_id_ct_asciiTextWithCRLF             787
+#define OBJ_id_ct_asciiTextWithCRLF             OBJ_id_smime_ct,27L
+
+#define SN_id_ct_xml            "id-ct-xml"
+#define NID_id_ct_xml           1060
+#define OBJ_id_ct_xml           OBJ_id_smime_ct,28L
+
+#define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
+#define NID_id_smime_aa_receiptRequest          212
+#define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
+
+#define SN_id_smime_aa_securityLabel            "id-smime-aa-securityLabel"
+#define NID_id_smime_aa_securityLabel           213
+#define OBJ_id_smime_aa_securityLabel           OBJ_id_smime_aa,2L
+
+#define SN_id_smime_aa_mlExpandHistory          "id-smime-aa-mlExpandHistory"
+#define NID_id_smime_aa_mlExpandHistory         214
+#define OBJ_id_smime_aa_mlExpandHistory         OBJ_id_smime_aa,3L
+
+#define SN_id_smime_aa_contentHint              "id-smime-aa-contentHint"
+#define NID_id_smime_aa_contentHint             215
+#define OBJ_id_smime_aa_contentHint             OBJ_id_smime_aa,4L
+
+#define SN_id_smime_aa_msgSigDigest             "id-smime-aa-msgSigDigest"
+#define NID_id_smime_aa_msgSigDigest            216
+#define OBJ_id_smime_aa_msgSigDigest            OBJ_id_smime_aa,5L
+
+#define SN_id_smime_aa_encapContentType         "id-smime-aa-encapContentType"
+#define NID_id_smime_aa_encapContentType                217
+#define OBJ_id_smime_aa_encapContentType                OBJ_id_smime_aa,6L
+
+#define SN_id_smime_aa_contentIdentifier                "id-smime-aa-contentIdentifier"
+#define NID_id_smime_aa_contentIdentifier               218
+#define OBJ_id_smime_aa_contentIdentifier               OBJ_id_smime_aa,7L
+
+#define SN_id_smime_aa_macValue         "id-smime-aa-macValue"
+#define NID_id_smime_aa_macValue                219
+#define OBJ_id_smime_aa_macValue                OBJ_id_smime_aa,8L
+
+#define SN_id_smime_aa_equivalentLabels         "id-smime-aa-equivalentLabels"
+#define NID_id_smime_aa_equivalentLabels                220
+#define OBJ_id_smime_aa_equivalentLabels                OBJ_id_smime_aa,9L
+
+#define SN_id_smime_aa_contentReference         "id-smime-aa-contentReference"
+#define NID_id_smime_aa_contentReference                221
+#define OBJ_id_smime_aa_contentReference                OBJ_id_smime_aa,10L
+
+#define SN_id_smime_aa_encrypKeyPref            "id-smime-aa-encrypKeyPref"
+#define NID_id_smime_aa_encrypKeyPref           222
+#define OBJ_id_smime_aa_encrypKeyPref           OBJ_id_smime_aa,11L
+
+#define SN_id_smime_aa_signingCertificate               "id-smime-aa-signingCertificate"
+#define NID_id_smime_aa_signingCertificate              223
+#define OBJ_id_smime_aa_signingCertificate              OBJ_id_smime_aa,12L
+
+#define SN_id_smime_aa_smimeEncryptCerts                "id-smime-aa-smimeEncryptCerts"
+#define NID_id_smime_aa_smimeEncryptCerts               224
+#define OBJ_id_smime_aa_smimeEncryptCerts               OBJ_id_smime_aa,13L
+
+#define SN_id_smime_aa_timeStampToken           "id-smime-aa-timeStampToken"
+#define NID_id_smime_aa_timeStampToken          225
+#define OBJ_id_smime_aa_timeStampToken          OBJ_id_smime_aa,14L
+
+#define SN_id_smime_aa_ets_sigPolicyId          "id-smime-aa-ets-sigPolicyId"
+#define NID_id_smime_aa_ets_sigPolicyId         226
+#define OBJ_id_smime_aa_ets_sigPolicyId         OBJ_id_smime_aa,15L
+
+#define SN_id_smime_aa_ets_commitmentType               "id-smime-aa-ets-commitmentType"
+#define NID_id_smime_aa_ets_commitmentType              227
+#define OBJ_id_smime_aa_ets_commitmentType              OBJ_id_smime_aa,16L
+
+#define SN_id_smime_aa_ets_signerLocation               "id-smime-aa-ets-signerLocation"
+#define NID_id_smime_aa_ets_signerLocation              228
+#define OBJ_id_smime_aa_ets_signerLocation              OBJ_id_smime_aa,17L
+
+#define SN_id_smime_aa_ets_signerAttr           "id-smime-aa-ets-signerAttr"
+#define NID_id_smime_aa_ets_signerAttr          229
+#define OBJ_id_smime_aa_ets_signerAttr          OBJ_id_smime_aa,18L
+
+#define SN_id_smime_aa_ets_otherSigCert         "id-smime-aa-ets-otherSigCert"
+#define NID_id_smime_aa_ets_otherSigCert                230
+#define OBJ_id_smime_aa_ets_otherSigCert                OBJ_id_smime_aa,19L
+
+#define SN_id_smime_aa_ets_contentTimestamp             "id-smime-aa-ets-contentTimestamp"
+#define NID_id_smime_aa_ets_contentTimestamp            231
+#define OBJ_id_smime_aa_ets_contentTimestamp            OBJ_id_smime_aa,20L
+
+#define SN_id_smime_aa_ets_CertificateRefs              "id-smime-aa-ets-CertificateRefs"
+#define NID_id_smime_aa_ets_CertificateRefs             232
+#define OBJ_id_smime_aa_ets_CertificateRefs             OBJ_id_smime_aa,21L
+
+#define SN_id_smime_aa_ets_RevocationRefs               "id-smime-aa-ets-RevocationRefs"
+#define NID_id_smime_aa_ets_RevocationRefs              233
+#define OBJ_id_smime_aa_ets_RevocationRefs              OBJ_id_smime_aa,22L
+
+#define SN_id_smime_aa_ets_certValues           "id-smime-aa-ets-certValues"
+#define NID_id_smime_aa_ets_certValues          234
+#define OBJ_id_smime_aa_ets_certValues          OBJ_id_smime_aa,23L
+
+#define SN_id_smime_aa_ets_revocationValues             "id-smime-aa-ets-revocationValues"
+#define NID_id_smime_aa_ets_revocationValues            235
+#define OBJ_id_smime_aa_ets_revocationValues            OBJ_id_smime_aa,24L
+
+#define SN_id_smime_aa_ets_escTimeStamp         "id-smime-aa-ets-escTimeStamp"
+#define NID_id_smime_aa_ets_escTimeStamp                236
+#define OBJ_id_smime_aa_ets_escTimeStamp                OBJ_id_smime_aa,25L
+
+#define SN_id_smime_aa_ets_certCRLTimestamp             "id-smime-aa-ets-certCRLTimestamp"
+#define NID_id_smime_aa_ets_certCRLTimestamp            237
+#define OBJ_id_smime_aa_ets_certCRLTimestamp            OBJ_id_smime_aa,26L
+
+#define SN_id_smime_aa_ets_archiveTimeStamp             "id-smime-aa-ets-archiveTimeStamp"
+#define NID_id_smime_aa_ets_archiveTimeStamp            238
+#define OBJ_id_smime_aa_ets_archiveTimeStamp            OBJ_id_smime_aa,27L
+
+#define SN_id_smime_aa_signatureType            "id-smime-aa-signatureType"
+#define NID_id_smime_aa_signatureType           239
+#define OBJ_id_smime_aa_signatureType           OBJ_id_smime_aa,28L
+
+#define SN_id_smime_aa_dvcs_dvc         "id-smime-aa-dvcs-dvc"
+#define NID_id_smime_aa_dvcs_dvc                240
+#define OBJ_id_smime_aa_dvcs_dvc                OBJ_id_smime_aa,29L
+
+#define SN_id_smime_aa_signingCertificateV2             "id-smime-aa-signingCertificateV2"
+#define NID_id_smime_aa_signingCertificateV2            1086
+#define OBJ_id_smime_aa_signingCertificateV2            OBJ_id_smime_aa,47L
+
+#define SN_id_smime_alg_ESDHwith3DES            "id-smime-alg-ESDHwith3DES"
+#define NID_id_smime_alg_ESDHwith3DES           241
+#define OBJ_id_smime_alg_ESDHwith3DES           OBJ_id_smime_alg,1L
+
+#define SN_id_smime_alg_ESDHwithRC2             "id-smime-alg-ESDHwithRC2"
+#define NID_id_smime_alg_ESDHwithRC2            242
+#define OBJ_id_smime_alg_ESDHwithRC2            OBJ_id_smime_alg,2L
+
+#define SN_id_smime_alg_3DESwrap                "id-smime-alg-3DESwrap"
+#define NID_id_smime_alg_3DESwrap               243
+#define OBJ_id_smime_alg_3DESwrap               OBJ_id_smime_alg,3L
+
+#define SN_id_smime_alg_RC2wrap         "id-smime-alg-RC2wrap"
+#define NID_id_smime_alg_RC2wrap                244
+#define OBJ_id_smime_alg_RC2wrap                OBJ_id_smime_alg,4L
+
+#define SN_id_smime_alg_ESDH            "id-smime-alg-ESDH"
+#define NID_id_smime_alg_ESDH           245
+#define OBJ_id_smime_alg_ESDH           OBJ_id_smime_alg,5L
+
+#define SN_id_smime_alg_CMS3DESwrap             "id-smime-alg-CMS3DESwrap"
+#define NID_id_smime_alg_CMS3DESwrap            246
+#define OBJ_id_smime_alg_CMS3DESwrap            OBJ_id_smime_alg,6L
+
+#define SN_id_smime_alg_CMSRC2wrap              "id-smime-alg-CMSRC2wrap"
+#define NID_id_smime_alg_CMSRC2wrap             247
+#define OBJ_id_smime_alg_CMSRC2wrap             OBJ_id_smime_alg,7L
+
+#define SN_id_alg_PWRI_KEK              "id-alg-PWRI-KEK"
+#define NID_id_alg_PWRI_KEK             893
+#define OBJ_id_alg_PWRI_KEK             OBJ_id_smime_alg,9L
+
+#define SN_id_smime_cd_ldap             "id-smime-cd-ldap"
+#define NID_id_smime_cd_ldap            248
+#define OBJ_id_smime_cd_ldap            OBJ_id_smime_cd,1L
+
+#define SN_id_smime_spq_ets_sqt_uri             "id-smime-spq-ets-sqt-uri"
+#define NID_id_smime_spq_ets_sqt_uri            249
+#define OBJ_id_smime_spq_ets_sqt_uri            OBJ_id_smime_spq,1L
+
+#define SN_id_smime_spq_ets_sqt_unotice         "id-smime-spq-ets-sqt-unotice"
+#define NID_id_smime_spq_ets_sqt_unotice                250
+#define OBJ_id_smime_spq_ets_sqt_unotice                OBJ_id_smime_spq,2L
+
+#define SN_id_smime_cti_ets_proofOfOrigin               "id-smime-cti-ets-proofOfOrigin"
+#define NID_id_smime_cti_ets_proofOfOrigin              251
+#define OBJ_id_smime_cti_ets_proofOfOrigin              OBJ_id_smime_cti,1L
+
+#define SN_id_smime_cti_ets_proofOfReceipt              "id-smime-cti-ets-proofOfReceipt"
+#define NID_id_smime_cti_ets_proofOfReceipt             252
+#define OBJ_id_smime_cti_ets_proofOfReceipt             OBJ_id_smime_cti,2L
+
+#define SN_id_smime_cti_ets_proofOfDelivery             "id-smime-cti-ets-proofOfDelivery"
+#define NID_id_smime_cti_ets_proofOfDelivery            253
+#define OBJ_id_smime_cti_ets_proofOfDelivery            OBJ_id_smime_cti,3L
+
+#define SN_id_smime_cti_ets_proofOfSender               "id-smime-cti-ets-proofOfSender"
+#define NID_id_smime_cti_ets_proofOfSender              254
+#define OBJ_id_smime_cti_ets_proofOfSender              OBJ_id_smime_cti,4L
+
+#define SN_id_smime_cti_ets_proofOfApproval             "id-smime-cti-ets-proofOfApproval"
+#define NID_id_smime_cti_ets_proofOfApproval            255
+#define OBJ_id_smime_cti_ets_proofOfApproval            OBJ_id_smime_cti,5L
+
+#define SN_id_smime_cti_ets_proofOfCreation             "id-smime-cti-ets-proofOfCreation"
+#define NID_id_smime_cti_ets_proofOfCreation            256
+#define OBJ_id_smime_cti_ets_proofOfCreation            OBJ_id_smime_cti,6L
+
+#define LN_friendlyName         "friendlyName"
+#define NID_friendlyName                156
+#define OBJ_friendlyName                OBJ_pkcs9,20L
+
+#define LN_localKeyID           "localKeyID"
+#define NID_localKeyID          157
+#define OBJ_localKeyID          OBJ_pkcs9,21L
+
+#define SN_ms_csp_name          "CSPName"
+#define LN_ms_csp_name          "Microsoft CSP Name"
+#define NID_ms_csp_name         417
+#define OBJ_ms_csp_name         1L,3L,6L,1L,4L,1L,311L,17L,1L
+
+#define SN_LocalKeySet          "LocalKeySet"
+#define LN_LocalKeySet          "Microsoft Local Key set"
+#define NID_LocalKeySet         856
+#define OBJ_LocalKeySet         1L,3L,6L,1L,4L,1L,311L,17L,2L
+
+#define OBJ_certTypes           OBJ_pkcs9,22L
+
+#define LN_x509Certificate              "x509Certificate"
+#define NID_x509Certificate             158
+#define OBJ_x509Certificate             OBJ_certTypes,1L
+
+#define LN_sdsiCertificate              "sdsiCertificate"
+#define NID_sdsiCertificate             159
+#define OBJ_sdsiCertificate             OBJ_certTypes,2L
+
+#define OBJ_crlTypes            OBJ_pkcs9,23L
+
+#define LN_x509Crl              "x509Crl"
+#define NID_x509Crl             160
+#define OBJ_x509Crl             OBJ_crlTypes,1L
+
+#define OBJ_pkcs12              OBJ_pkcs,12L
+
+#define OBJ_pkcs12_pbeids               OBJ_pkcs12,1L
+
+#define SN_pbe_WithSHA1And128BitRC4             "PBE-SHA1-RC4-128"
+#define LN_pbe_WithSHA1And128BitRC4             "pbeWithSHA1And128BitRC4"
+#define NID_pbe_WithSHA1And128BitRC4            144
+#define OBJ_pbe_WithSHA1And128BitRC4            OBJ_pkcs12_pbeids,1L
+
+#define SN_pbe_WithSHA1And40BitRC4              "PBE-SHA1-RC4-40"
+#define LN_pbe_WithSHA1And40BitRC4              "pbeWithSHA1And40BitRC4"
+#define NID_pbe_WithSHA1And40BitRC4             145
+#define OBJ_pbe_WithSHA1And40BitRC4             OBJ_pkcs12_pbeids,2L
+
+#define SN_pbe_WithSHA1And3_Key_TripleDES_CBC           "PBE-SHA1-3DES"
+#define LN_pbe_WithSHA1And3_Key_TripleDES_CBC           "pbeWithSHA1And3-KeyTripleDES-CBC"
+#define NID_pbe_WithSHA1And3_Key_TripleDES_CBC          146
+#define OBJ_pbe_WithSHA1And3_Key_TripleDES_CBC          OBJ_pkcs12_pbeids,3L
+
+#define SN_pbe_WithSHA1And2_Key_TripleDES_CBC           "PBE-SHA1-2DES"
+#define LN_pbe_WithSHA1And2_Key_TripleDES_CBC           "pbeWithSHA1And2-KeyTripleDES-CBC"
+#define NID_pbe_WithSHA1And2_Key_TripleDES_CBC          147
+#define OBJ_pbe_WithSHA1And2_Key_TripleDES_CBC          OBJ_pkcs12_pbeids,4L
+
+#define SN_pbe_WithSHA1And128BitRC2_CBC         "PBE-SHA1-RC2-128"
+#define LN_pbe_WithSHA1And128BitRC2_CBC         "pbeWithSHA1And128BitRC2-CBC"
+#define NID_pbe_WithSHA1And128BitRC2_CBC                148
+#define OBJ_pbe_WithSHA1And128BitRC2_CBC                OBJ_pkcs12_pbeids,5L
+
+#define SN_pbe_WithSHA1And40BitRC2_CBC          "PBE-SHA1-RC2-40"
+#define LN_pbe_WithSHA1And40BitRC2_CBC          "pbeWithSHA1And40BitRC2-CBC"
+#define NID_pbe_WithSHA1And40BitRC2_CBC         149
+#define OBJ_pbe_WithSHA1And40BitRC2_CBC         OBJ_pkcs12_pbeids,6L
+
+#define OBJ_pkcs12_Version1             OBJ_pkcs12,10L
+
+#define OBJ_pkcs12_BagIds               OBJ_pkcs12_Version1,1L
+
+#define LN_keyBag               "keyBag"
+#define NID_keyBag              150
+#define OBJ_keyBag              OBJ_pkcs12_BagIds,1L
+
+#define LN_pkcs8ShroudedKeyBag          "pkcs8ShroudedKeyBag"
+#define NID_pkcs8ShroudedKeyBag         151
+#define OBJ_pkcs8ShroudedKeyBag         OBJ_pkcs12_BagIds,2L
+
+#define LN_certBag              "certBag"
+#define NID_certBag             152
+#define OBJ_certBag             OBJ_pkcs12_BagIds,3L
+
+#define LN_crlBag               "crlBag"
+#define NID_crlBag              153
+#define OBJ_crlBag              OBJ_pkcs12_BagIds,4L
+
+#define LN_secretBag            "secretBag"
+#define NID_secretBag           154
+#define OBJ_secretBag           OBJ_pkcs12_BagIds,5L
+
+#define LN_safeContentsBag              "safeContentsBag"
+#define NID_safeContentsBag             155
+#define OBJ_safeContentsBag             OBJ_pkcs12_BagIds,6L
+
+#define SN_md2          "MD2"
+#define LN_md2          "md2"
+#define NID_md2         3
+#define OBJ_md2         OBJ_rsadsi,2L,2L
+
+#define SN_md4          "MD4"
+#define LN_md4          "md4"
+#define NID_md4         257
+#define OBJ_md4         OBJ_rsadsi,2L,4L
+
+#define SN_md5          "MD5"
+#define LN_md5          "md5"
+#define NID_md5         4
+#define OBJ_md5         OBJ_rsadsi,2L,5L
+
+#define SN_md5_sha1             "MD5-SHA1"
+#define LN_md5_sha1             "md5-sha1"
+#define NID_md5_sha1            114
+
+#define LN_hmacWithMD5          "hmacWithMD5"
+#define NID_hmacWithMD5         797
+#define OBJ_hmacWithMD5         OBJ_rsadsi,2L,6L
+
+#define LN_hmacWithSHA1         "hmacWithSHA1"
+#define NID_hmacWithSHA1                163
+#define OBJ_hmacWithSHA1                OBJ_rsadsi,2L,7L
+
+#define SN_sm2          "SM2"
+#define LN_sm2          "sm2"
+#define NID_sm2         1172
+#define OBJ_sm2         OBJ_sm_scheme,301L
+
+#define SN_sm3          "SM3"
+#define LN_sm3          "sm3"
+#define NID_sm3         1143
+#define OBJ_sm3         OBJ_sm_scheme,401L
+
+#define SN_sm3WithRSAEncryption         "RSA-SM3"
+#define LN_sm3WithRSAEncryption         "sm3WithRSAEncryption"
+#define NID_sm3WithRSAEncryption                1144
+#define OBJ_sm3WithRSAEncryption                OBJ_sm_scheme,504L
+
+#define LN_hmacWithSHA224               "hmacWithSHA224"
+#define NID_hmacWithSHA224              798
+#define OBJ_hmacWithSHA224              OBJ_rsadsi,2L,8L
+
+#define LN_hmacWithSHA256               "hmacWithSHA256"
+#define NID_hmacWithSHA256              799
+#define OBJ_hmacWithSHA256              OBJ_rsadsi,2L,9L
+
+#define LN_hmacWithSHA384               "hmacWithSHA384"
+#define NID_hmacWithSHA384              800
+#define OBJ_hmacWithSHA384              OBJ_rsadsi,2L,10L
+
+#define LN_hmacWithSHA512               "hmacWithSHA512"
+#define NID_hmacWithSHA512              801
+#define OBJ_hmacWithSHA512              OBJ_rsadsi,2L,11L
+
+#define LN_hmacWithSHA512_224           "hmacWithSHA512-224"
+#define NID_hmacWithSHA512_224          1193
+#define OBJ_hmacWithSHA512_224          OBJ_rsadsi,2L,12L
+
+#define LN_hmacWithSHA512_256           "hmacWithSHA512-256"
+#define NID_hmacWithSHA512_256          1194
+#define OBJ_hmacWithSHA512_256          OBJ_rsadsi,2L,13L
+
+#define SN_rc2_cbc              "RC2-CBC"
+#define LN_rc2_cbc              "rc2-cbc"
+#define NID_rc2_cbc             37
+#define OBJ_rc2_cbc             OBJ_rsadsi,3L,2L
+
+#define SN_rc2_ecb              "RC2-ECB"
+#define LN_rc2_ecb              "rc2-ecb"
+#define NID_rc2_ecb             38
+
+#define SN_rc2_cfb64            "RC2-CFB"
+#define LN_rc2_cfb64            "rc2-cfb"
+#define NID_rc2_cfb64           39
+
+#define SN_rc2_ofb64            "RC2-OFB"
+#define LN_rc2_ofb64            "rc2-ofb"
+#define NID_rc2_ofb64           40
+
+#define SN_rc2_40_cbc           "RC2-40-CBC"
+#define LN_rc2_40_cbc           "rc2-40-cbc"
+#define NID_rc2_40_cbc          98
+
+#define SN_rc2_64_cbc           "RC2-64-CBC"
+#define LN_rc2_64_cbc           "rc2-64-cbc"
+#define NID_rc2_64_cbc          166
+
+#define SN_rc4          "RC4"
+#define LN_rc4          "rc4"
+#define NID_rc4         5
+#define OBJ_rc4         OBJ_rsadsi,3L,4L
+
+#define SN_rc4_40               "RC4-40"
+#define LN_rc4_40               "rc4-40"
+#define NID_rc4_40              97
+
+#define SN_des_ede3_cbc         "DES-EDE3-CBC"
+#define LN_des_ede3_cbc         "des-ede3-cbc"
+#define NID_des_ede3_cbc                44
+#define OBJ_des_ede3_cbc                OBJ_rsadsi,3L,7L
+
+#define SN_rc5_cbc              "RC5-CBC"
+#define LN_rc5_cbc              "rc5-cbc"
+#define NID_rc5_cbc             120
+#define OBJ_rc5_cbc             OBJ_rsadsi,3L,8L
+
+#define SN_rc5_ecb              "RC5-ECB"
+#define LN_rc5_ecb              "rc5-ecb"
+#define NID_rc5_ecb             121
+
+#define SN_rc5_cfb64            "RC5-CFB"
+#define LN_rc5_cfb64            "rc5-cfb"
+#define NID_rc5_cfb64           122
+
+#define SN_rc5_ofb64            "RC5-OFB"
+#define LN_rc5_ofb64            "rc5-ofb"
+#define NID_rc5_ofb64           123
+
+#define SN_ms_ext_req           "msExtReq"
+#define LN_ms_ext_req           "Microsoft Extension Request"
+#define NID_ms_ext_req          171
+#define OBJ_ms_ext_req          1L,3L,6L,1L,4L,1L,311L,2L,1L,14L
+
+#define SN_ms_code_ind          "msCodeInd"
+#define LN_ms_code_ind          "Microsoft Individual Code Signing"
+#define NID_ms_code_ind         134
+#define OBJ_ms_code_ind         1L,3L,6L,1L,4L,1L,311L,2L,1L,21L
+
+#define SN_ms_code_com          "msCodeCom"
+#define LN_ms_code_com          "Microsoft Commercial Code Signing"
+#define NID_ms_code_com         135
+#define OBJ_ms_code_com         1L,3L,6L,1L,4L,1L,311L,2L,1L,22L
+
+#define SN_ms_ctl_sign          "msCTLSign"
+#define LN_ms_ctl_sign          "Microsoft Trust List Signing"
+#define NID_ms_ctl_sign         136
+#define OBJ_ms_ctl_sign         1L,3L,6L,1L,4L,1L,311L,10L,3L,1L
+
+#define SN_ms_sgc               "msSGC"
+#define LN_ms_sgc               "Microsoft Server Gated Crypto"
+#define NID_ms_sgc              137
+#define OBJ_ms_sgc              1L,3L,6L,1L,4L,1L,311L,10L,3L,3L
+
+#define SN_ms_efs               "msEFS"
+#define LN_ms_efs               "Microsoft Encrypted File System"
+#define NID_ms_efs              138
+#define OBJ_ms_efs              1L,3L,6L,1L,4L,1L,311L,10L,3L,4L
+
+#define SN_ms_smartcard_login           "msSmartcardLogin"
+#define LN_ms_smartcard_login           "Microsoft Smartcardlogin"
+#define NID_ms_smartcard_login          648
+#define OBJ_ms_smartcard_login          1L,3L,6L,1L,4L,1L,311L,20L,2L,2L
+
+#define SN_ms_upn               "msUPN"
+#define LN_ms_upn               "Microsoft Universal Principal Name"
+#define NID_ms_upn              649
+#define OBJ_ms_upn              1L,3L,6L,1L,4L,1L,311L,20L,2L,3L
+
+#define SN_idea_cbc             "IDEA-CBC"
+#define LN_idea_cbc             "idea-cbc"
+#define NID_idea_cbc            34
+#define OBJ_idea_cbc            1L,3L,6L,1L,4L,1L,188L,7L,1L,1L,2L
+
+#define SN_idea_ecb             "IDEA-ECB"
+#define LN_idea_ecb             "idea-ecb"
+#define NID_idea_ecb            36
+
+#define SN_idea_cfb64           "IDEA-CFB"
+#define LN_idea_cfb64           "idea-cfb"
+#define NID_idea_cfb64          35
+
+#define SN_idea_ofb64           "IDEA-OFB"
+#define LN_idea_ofb64           "idea-ofb"
+#define NID_idea_ofb64          46
+
+#define SN_bf_cbc               "BF-CBC"
+#define LN_bf_cbc               "bf-cbc"
+#define NID_bf_cbc              91
+#define OBJ_bf_cbc              1L,3L,6L,1L,4L,1L,3029L,1L,2L
+
+#define SN_bf_ecb               "BF-ECB"
+#define LN_bf_ecb               "bf-ecb"
+#define NID_bf_ecb              92
+
+#define SN_bf_cfb64             "BF-CFB"
+#define LN_bf_cfb64             "bf-cfb"
+#define NID_bf_cfb64            93
+
+#define SN_bf_ofb64             "BF-OFB"
+#define LN_bf_ofb64             "bf-ofb"
+#define NID_bf_ofb64            94
+
+#define SN_id_pkix              "PKIX"
+#define NID_id_pkix             127
+#define OBJ_id_pkix             1L,3L,6L,1L,5L,5L,7L
+
+#define SN_id_pkix_mod          "id-pkix-mod"
+#define NID_id_pkix_mod         258
+#define OBJ_id_pkix_mod         OBJ_id_pkix,0L
+
+#define SN_id_pe                "id-pe"
+#define NID_id_pe               175
+#define OBJ_id_pe               OBJ_id_pkix,1L
+
+#define SN_id_qt                "id-qt"
+#define NID_id_qt               259
+#define OBJ_id_qt               OBJ_id_pkix,2L
+
+#define SN_id_kp                "id-kp"
+#define NID_id_kp               128
+#define OBJ_id_kp               OBJ_id_pkix,3L
+
+#define SN_id_it                "id-it"
+#define NID_id_it               260
+#define OBJ_id_it               OBJ_id_pkix,4L
+
+#define SN_id_pkip              "id-pkip"
+#define NID_id_pkip             261
+#define OBJ_id_pkip             OBJ_id_pkix,5L
+
+#define SN_id_alg               "id-alg"
+#define NID_id_alg              262
+#define OBJ_id_alg              OBJ_id_pkix,6L
+
+#define SN_id_cmc               "id-cmc"
+#define NID_id_cmc              263
+#define OBJ_id_cmc              OBJ_id_pkix,7L
+
+#define SN_id_on                "id-on"
+#define NID_id_on               264
+#define OBJ_id_on               OBJ_id_pkix,8L
+
+#define SN_id_pda               "id-pda"
+#define NID_id_pda              265
+#define OBJ_id_pda              OBJ_id_pkix,9L
+
+#define SN_id_aca               "id-aca"
+#define NID_id_aca              266
+#define OBJ_id_aca              OBJ_id_pkix,10L
+
+#define SN_id_qcs               "id-qcs"
+#define NID_id_qcs              267
+#define OBJ_id_qcs              OBJ_id_pkix,11L
+
+#define SN_id_cct               "id-cct"
+#define NID_id_cct              268
+#define OBJ_id_cct              OBJ_id_pkix,12L
+
+#define SN_id_ppl               "id-ppl"
+#define NID_id_ppl              662
+#define OBJ_id_ppl              OBJ_id_pkix,21L
+
+#define SN_id_ad                "id-ad"
+#define NID_id_ad               176
+#define OBJ_id_ad               OBJ_id_pkix,48L
+
+#define SN_id_pkix1_explicit_88         "id-pkix1-explicit-88"
+#define NID_id_pkix1_explicit_88                269
+#define OBJ_id_pkix1_explicit_88                OBJ_id_pkix_mod,1L
+
+#define SN_id_pkix1_implicit_88         "id-pkix1-implicit-88"
+#define NID_id_pkix1_implicit_88                270
+#define OBJ_id_pkix1_implicit_88                OBJ_id_pkix_mod,2L
+
+#define SN_id_pkix1_explicit_93         "id-pkix1-explicit-93"
+#define NID_id_pkix1_explicit_93                271
+#define OBJ_id_pkix1_explicit_93                OBJ_id_pkix_mod,3L
+
+#define SN_id_pkix1_implicit_93         "id-pkix1-implicit-93"
+#define NID_id_pkix1_implicit_93                272
+#define OBJ_id_pkix1_implicit_93                OBJ_id_pkix_mod,4L
+
+#define SN_id_mod_crmf          "id-mod-crmf"
+#define NID_id_mod_crmf         273
+#define OBJ_id_mod_crmf         OBJ_id_pkix_mod,5L
+
+#define SN_id_mod_cmc           "id-mod-cmc"
+#define NID_id_mod_cmc          274
+#define OBJ_id_mod_cmc          OBJ_id_pkix_mod,6L
+
+#define SN_id_mod_kea_profile_88                "id-mod-kea-profile-88"
+#define NID_id_mod_kea_profile_88               275
+#define OBJ_id_mod_kea_profile_88               OBJ_id_pkix_mod,7L
+
+#define SN_id_mod_kea_profile_93                "id-mod-kea-profile-93"
+#define NID_id_mod_kea_profile_93               276
+#define OBJ_id_mod_kea_profile_93               OBJ_id_pkix_mod,8L
+
+#define SN_id_mod_cmp           "id-mod-cmp"
+#define NID_id_mod_cmp          277
+#define OBJ_id_mod_cmp          OBJ_id_pkix_mod,9L
+
+#define SN_id_mod_qualified_cert_88             "id-mod-qualified-cert-88"
+#define NID_id_mod_qualified_cert_88            278
+#define OBJ_id_mod_qualified_cert_88            OBJ_id_pkix_mod,10L
+
+#define SN_id_mod_qualified_cert_93             "id-mod-qualified-cert-93"
+#define NID_id_mod_qualified_cert_93            279
+#define OBJ_id_mod_qualified_cert_93            OBJ_id_pkix_mod,11L
+
+#define SN_id_mod_attribute_cert                "id-mod-attribute-cert"
+#define NID_id_mod_attribute_cert               280
+#define OBJ_id_mod_attribute_cert               OBJ_id_pkix_mod,12L
+
+#define SN_id_mod_timestamp_protocol            "id-mod-timestamp-protocol"
+#define NID_id_mod_timestamp_protocol           281
+#define OBJ_id_mod_timestamp_protocol           OBJ_id_pkix_mod,13L
+
+#define SN_id_mod_ocsp          "id-mod-ocsp"
+#define NID_id_mod_ocsp         282
+#define OBJ_id_mod_ocsp         OBJ_id_pkix_mod,14L
+
+#define SN_id_mod_dvcs          "id-mod-dvcs"
+#define NID_id_mod_dvcs         283
+#define OBJ_id_mod_dvcs         OBJ_id_pkix_mod,15L
+
+#define SN_id_mod_cmp2000               "id-mod-cmp2000"
+#define NID_id_mod_cmp2000              284
+#define OBJ_id_mod_cmp2000              OBJ_id_pkix_mod,16L
+
+#define SN_info_access          "authorityInfoAccess"
+#define LN_info_access          "Authority Information Access"
+#define NID_info_access         177
+#define OBJ_info_access         OBJ_id_pe,1L
+
+#define SN_biometricInfo                "biometricInfo"
+#define LN_biometricInfo                "Biometric Info"
+#define NID_biometricInfo               285
+#define OBJ_biometricInfo               OBJ_id_pe,2L
+
+#define SN_qcStatements         "qcStatements"
+#define NID_qcStatements                286
+#define OBJ_qcStatements                OBJ_id_pe,3L
+
+#define SN_ac_auditEntity               "ac-auditEntity"
+#define NID_ac_auditEntity              287
+#define OBJ_ac_auditEntity              OBJ_id_pe,4L
+
+#define SN_ac_targeting         "ac-targeting"
+#define NID_ac_targeting                288
+#define OBJ_ac_targeting                OBJ_id_pe,5L
+
+#define SN_aaControls           "aaControls"
+#define NID_aaControls          289
+#define OBJ_aaControls          OBJ_id_pe,6L
+
+#define SN_sbgp_ipAddrBlock             "sbgp-ipAddrBlock"
+#define NID_sbgp_ipAddrBlock            290
+#define OBJ_sbgp_ipAddrBlock            OBJ_id_pe,7L
+
+#define SN_sbgp_autonomousSysNum                "sbgp-autonomousSysNum"
+#define NID_sbgp_autonomousSysNum               291
+#define OBJ_sbgp_autonomousSysNum               OBJ_id_pe,8L
+
+#define SN_sbgp_routerIdentifier                "sbgp-routerIdentifier"
+#define NID_sbgp_routerIdentifier               292
+#define OBJ_sbgp_routerIdentifier               OBJ_id_pe,9L
+
+#define SN_ac_proxying          "ac-proxying"
+#define NID_ac_proxying         397
+#define OBJ_ac_proxying         OBJ_id_pe,10L
+
+#define SN_sinfo_access         "subjectInfoAccess"
+#define LN_sinfo_access         "Subject Information Access"
+#define NID_sinfo_access                398
+#define OBJ_sinfo_access                OBJ_id_pe,11L
+
+#define SN_proxyCertInfo                "proxyCertInfo"
+#define LN_proxyCertInfo                "Proxy Certificate Information"
+#define NID_proxyCertInfo               663
+#define OBJ_proxyCertInfo               OBJ_id_pe,14L
+
+#define SN_tlsfeature           "tlsfeature"
+#define LN_tlsfeature           "TLS Feature"
+#define NID_tlsfeature          1020
+#define OBJ_tlsfeature          OBJ_id_pe,24L
+
+#define SN_id_qt_cps            "id-qt-cps"
+#define LN_id_qt_cps            "Policy Qualifier CPS"
+#define NID_id_qt_cps           164
+#define OBJ_id_qt_cps           OBJ_id_qt,1L
+
+#define SN_id_qt_unotice                "id-qt-unotice"
+#define LN_id_qt_unotice                "Policy Qualifier User Notice"
+#define NID_id_qt_unotice               165
+#define OBJ_id_qt_unotice               OBJ_id_qt,2L
+
+#define SN_textNotice           "textNotice"
+#define NID_textNotice          293
+#define OBJ_textNotice          OBJ_id_qt,3L
+
+#define SN_server_auth          "serverAuth"
+#define LN_server_auth          "TLS Web Server Authentication"
+#define NID_server_auth         129
+#define OBJ_server_auth         OBJ_id_kp,1L
+
+#define SN_client_auth          "clientAuth"
+#define LN_client_auth          "TLS Web Client Authentication"
+#define NID_client_auth         130
+#define OBJ_client_auth         OBJ_id_kp,2L
+
+#define SN_code_sign            "codeSigning"
+#define LN_code_sign            "Code Signing"
+#define NID_code_sign           131
+#define OBJ_code_sign           OBJ_id_kp,3L
+
+#define SN_email_protect                "emailProtection"
+#define LN_email_protect                "E-mail Protection"
+#define NID_email_protect               132
+#define OBJ_email_protect               OBJ_id_kp,4L
+
+#define SN_ipsecEndSystem               "ipsecEndSystem"
+#define LN_ipsecEndSystem               "IPSec End System"
+#define NID_ipsecEndSystem              294
+#define OBJ_ipsecEndSystem              OBJ_id_kp,5L
+
+#define SN_ipsecTunnel          "ipsecTunnel"
+#define LN_ipsecTunnel          "IPSec Tunnel"
+#define NID_ipsecTunnel         295
+#define OBJ_ipsecTunnel         OBJ_id_kp,6L
+
+#define SN_ipsecUser            "ipsecUser"
+#define LN_ipsecUser            "IPSec User"
+#define NID_ipsecUser           296
+#define OBJ_ipsecUser           OBJ_id_kp,7L
+
+#define SN_time_stamp           "timeStamping"
+#define LN_time_stamp           "Time Stamping"
+#define NID_time_stamp          133
+#define OBJ_time_stamp          OBJ_id_kp,8L
+
+#define SN_OCSP_sign            "OCSPSigning"
+#define LN_OCSP_sign            "OCSP Signing"
+#define NID_OCSP_sign           180
+#define OBJ_OCSP_sign           OBJ_id_kp,9L
+
+#define SN_dvcs         "DVCS"
+#define LN_dvcs         "dvcs"
+#define NID_dvcs                297
+#define OBJ_dvcs                OBJ_id_kp,10L
+
+#define SN_ipsec_IKE            "ipsecIKE"
+#define LN_ipsec_IKE            "ipsec Internet Key Exchange"
+#define NID_ipsec_IKE           1022
+#define OBJ_ipsec_IKE           OBJ_id_kp,17L
+
+#define SN_capwapAC             "capwapAC"
+#define LN_capwapAC             "Ctrl/provision WAP Access"
+#define NID_capwapAC            1023
+#define OBJ_capwapAC            OBJ_id_kp,18L
+
+#define SN_capwapWTP            "capwapWTP"
+#define LN_capwapWTP            "Ctrl/Provision WAP Termination"
+#define NID_capwapWTP           1024
+#define OBJ_capwapWTP           OBJ_id_kp,19L
+
+#define SN_sshClient            "secureShellClient"
+#define LN_sshClient            "SSH Client"
+#define NID_sshClient           1025
+#define OBJ_sshClient           OBJ_id_kp,21L
+
+#define SN_sshServer            "secureShellServer"
+#define LN_sshServer            "SSH Server"
+#define NID_sshServer           1026
+#define OBJ_sshServer           OBJ_id_kp,22L
+
+#define SN_sendRouter           "sendRouter"
+#define LN_sendRouter           "Send Router"
+#define NID_sendRouter          1027
+#define OBJ_sendRouter          OBJ_id_kp,23L
+
+#define SN_sendProxiedRouter            "sendProxiedRouter"
+#define LN_sendProxiedRouter            "Send Proxied Router"
+#define NID_sendProxiedRouter           1028
+#define OBJ_sendProxiedRouter           OBJ_id_kp,24L
+
+#define SN_sendOwner            "sendOwner"
+#define LN_sendOwner            "Send Owner"
+#define NID_sendOwner           1029
+#define OBJ_sendOwner           OBJ_id_kp,25L
+
+#define SN_sendProxiedOwner             "sendProxiedOwner"
+#define LN_sendProxiedOwner             "Send Proxied Owner"
+#define NID_sendProxiedOwner            1030
+#define OBJ_sendProxiedOwner            OBJ_id_kp,26L
+
+#define SN_cmcCA                "cmcCA"
+#define LN_cmcCA                "CMC Certificate Authority"
+#define NID_cmcCA               1131
+#define OBJ_cmcCA               OBJ_id_kp,27L
+
+#define SN_cmcRA                "cmcRA"
+#define LN_cmcRA                "CMC Registration Authority"
+#define NID_cmcRA               1132
+#define OBJ_cmcRA               OBJ_id_kp,28L
+
+#define SN_id_it_caProtEncCert          "id-it-caProtEncCert"
+#define NID_id_it_caProtEncCert         298
+#define OBJ_id_it_caProtEncCert         OBJ_id_it,1L
+
+#define SN_id_it_signKeyPairTypes               "id-it-signKeyPairTypes"
+#define NID_id_it_signKeyPairTypes              299
+#define OBJ_id_it_signKeyPairTypes              OBJ_id_it,2L
+
+#define SN_id_it_encKeyPairTypes                "id-it-encKeyPairTypes"
+#define NID_id_it_encKeyPairTypes               300
+#define OBJ_id_it_encKeyPairTypes               OBJ_id_it,3L
+
+#define SN_id_it_preferredSymmAlg               "id-it-preferredSymmAlg"
+#define NID_id_it_preferredSymmAlg              301
+#define OBJ_id_it_preferredSymmAlg              OBJ_id_it,4L
+
+#define SN_id_it_caKeyUpdateInfo                "id-it-caKeyUpdateInfo"
+#define NID_id_it_caKeyUpdateInfo               302
+#define OBJ_id_it_caKeyUpdateInfo               OBJ_id_it,5L
+
+#define SN_id_it_currentCRL             "id-it-currentCRL"
+#define NID_id_it_currentCRL            303
+#define OBJ_id_it_currentCRL            OBJ_id_it,6L
+
+#define SN_id_it_unsupportedOIDs                "id-it-unsupportedOIDs"
+#define NID_id_it_unsupportedOIDs               304
+#define OBJ_id_it_unsupportedOIDs               OBJ_id_it,7L
+
+#define SN_id_it_subscriptionRequest            "id-it-subscriptionRequest"
+#define NID_id_it_subscriptionRequest           305
+#define OBJ_id_it_subscriptionRequest           OBJ_id_it,8L
+
+#define SN_id_it_subscriptionResponse           "id-it-subscriptionResponse"
+#define NID_id_it_subscriptionResponse          306
+#define OBJ_id_it_subscriptionResponse          OBJ_id_it,9L
+
+#define SN_id_it_keyPairParamReq                "id-it-keyPairParamReq"
+#define NID_id_it_keyPairParamReq               307
+#define OBJ_id_it_keyPairParamReq               OBJ_id_it,10L
+
+#define SN_id_it_keyPairParamRep                "id-it-keyPairParamRep"
+#define NID_id_it_keyPairParamRep               308
+#define OBJ_id_it_keyPairParamRep               OBJ_id_it,11L
+
+#define SN_id_it_revPassphrase          "id-it-revPassphrase"
+#define NID_id_it_revPassphrase         309
+#define OBJ_id_it_revPassphrase         OBJ_id_it,12L
+
+#define SN_id_it_implicitConfirm                "id-it-implicitConfirm"
+#define NID_id_it_implicitConfirm               310
+#define OBJ_id_it_implicitConfirm               OBJ_id_it,13L
+
+#define SN_id_it_confirmWaitTime                "id-it-confirmWaitTime"
+#define NID_id_it_confirmWaitTime               311
+#define OBJ_id_it_confirmWaitTime               OBJ_id_it,14L
+
+#define SN_id_it_origPKIMessage         "id-it-origPKIMessage"
+#define NID_id_it_origPKIMessage                312
+#define OBJ_id_it_origPKIMessage                OBJ_id_it,15L
+
+#define SN_id_it_suppLangTags           "id-it-suppLangTags"
+#define NID_id_it_suppLangTags          784
+#define OBJ_id_it_suppLangTags          OBJ_id_it,16L
+
+#define SN_id_regCtrl           "id-regCtrl"
+#define NID_id_regCtrl          313
+#define OBJ_id_regCtrl          OBJ_id_pkip,1L
+
+#define SN_id_regInfo           "id-regInfo"
+#define NID_id_regInfo          314
+#define OBJ_id_regInfo          OBJ_id_pkip,2L
+
+#define SN_id_regCtrl_regToken          "id-regCtrl-regToken"
+#define NID_id_regCtrl_regToken         315
+#define OBJ_id_regCtrl_regToken         OBJ_id_regCtrl,1L
+
+#define SN_id_regCtrl_authenticator             "id-regCtrl-authenticator"
+#define NID_id_regCtrl_authenticator            316
+#define OBJ_id_regCtrl_authenticator            OBJ_id_regCtrl,2L
+
+#define SN_id_regCtrl_pkiPublicationInfo                "id-regCtrl-pkiPublicationInfo"
+#define NID_id_regCtrl_pkiPublicationInfo               317
+#define OBJ_id_regCtrl_pkiPublicationInfo               OBJ_id_regCtrl,3L
+
+#define SN_id_regCtrl_pkiArchiveOptions         "id-regCtrl-pkiArchiveOptions"
+#define NID_id_regCtrl_pkiArchiveOptions                318
+#define OBJ_id_regCtrl_pkiArchiveOptions                OBJ_id_regCtrl,4L
+
+#define SN_id_regCtrl_oldCertID         "id-regCtrl-oldCertID"
+#define NID_id_regCtrl_oldCertID                319
+#define OBJ_id_regCtrl_oldCertID                OBJ_id_regCtrl,5L
+
+#define SN_id_regCtrl_protocolEncrKey           "id-regCtrl-protocolEncrKey"
+#define NID_id_regCtrl_protocolEncrKey          320
+#define OBJ_id_regCtrl_protocolEncrKey          OBJ_id_regCtrl,6L
+
+#define SN_id_regInfo_utf8Pairs         "id-regInfo-utf8Pairs"
+#define NID_id_regInfo_utf8Pairs                321
+#define OBJ_id_regInfo_utf8Pairs                OBJ_id_regInfo,1L
+
+#define SN_id_regInfo_certReq           "id-regInfo-certReq"
+#define NID_id_regInfo_certReq          322
+#define OBJ_id_regInfo_certReq          OBJ_id_regInfo,2L
+
+#define SN_id_alg_des40         "id-alg-des40"
+#define NID_id_alg_des40                323
+#define OBJ_id_alg_des40                OBJ_id_alg,1L
+
+#define SN_id_alg_noSignature           "id-alg-noSignature"
+#define NID_id_alg_noSignature          324
+#define OBJ_id_alg_noSignature          OBJ_id_alg,2L
+
+#define SN_id_alg_dh_sig_hmac_sha1              "id-alg-dh-sig-hmac-sha1"
+#define NID_id_alg_dh_sig_hmac_sha1             325
+#define OBJ_id_alg_dh_sig_hmac_sha1             OBJ_id_alg,3L
+
+#define SN_id_alg_dh_pop                "id-alg-dh-pop"
+#define NID_id_alg_dh_pop               326
+#define OBJ_id_alg_dh_pop               OBJ_id_alg,4L
+
+#define SN_id_cmc_statusInfo            "id-cmc-statusInfo"
+#define NID_id_cmc_statusInfo           327
+#define OBJ_id_cmc_statusInfo           OBJ_id_cmc,1L
+
+#define SN_id_cmc_identification                "id-cmc-identification"
+#define NID_id_cmc_identification               328
+#define OBJ_id_cmc_identification               OBJ_id_cmc,2L
+
+#define SN_id_cmc_identityProof         "id-cmc-identityProof"
+#define NID_id_cmc_identityProof                329
+#define OBJ_id_cmc_identityProof                OBJ_id_cmc,3L
+
+#define SN_id_cmc_dataReturn            "id-cmc-dataReturn"
+#define NID_id_cmc_dataReturn           330
+#define OBJ_id_cmc_dataReturn           OBJ_id_cmc,4L
+
+#define SN_id_cmc_transactionId         "id-cmc-transactionId"
+#define NID_id_cmc_transactionId                331
+#define OBJ_id_cmc_transactionId                OBJ_id_cmc,5L
+
+#define SN_id_cmc_senderNonce           "id-cmc-senderNonce"
+#define NID_id_cmc_senderNonce          332
+#define OBJ_id_cmc_senderNonce          OBJ_id_cmc,6L
+
+#define SN_id_cmc_recipientNonce                "id-cmc-recipientNonce"
+#define NID_id_cmc_recipientNonce               333
+#define OBJ_id_cmc_recipientNonce               OBJ_id_cmc,7L
+
+#define SN_id_cmc_addExtensions         "id-cmc-addExtensions"
+#define NID_id_cmc_addExtensions                334
+#define OBJ_id_cmc_addExtensions                OBJ_id_cmc,8L
+
+#define SN_id_cmc_encryptedPOP          "id-cmc-encryptedPOP"
+#define NID_id_cmc_encryptedPOP         335
+#define OBJ_id_cmc_encryptedPOP         OBJ_id_cmc,9L
+
+#define SN_id_cmc_decryptedPOP          "id-cmc-decryptedPOP"
+#define NID_id_cmc_decryptedPOP         336
+#define OBJ_id_cmc_decryptedPOP         OBJ_id_cmc,10L
+
+#define SN_id_cmc_lraPOPWitness         "id-cmc-lraPOPWitness"
+#define NID_id_cmc_lraPOPWitness                337
+#define OBJ_id_cmc_lraPOPWitness                OBJ_id_cmc,11L
+
+#define SN_id_cmc_getCert               "id-cmc-getCert"
+#define NID_id_cmc_getCert              338
+#define OBJ_id_cmc_getCert              OBJ_id_cmc,15L
+
+#define SN_id_cmc_getCRL                "id-cmc-getCRL"
+#define NID_id_cmc_getCRL               339
+#define OBJ_id_cmc_getCRL               OBJ_id_cmc,16L
+
+#define SN_id_cmc_revokeRequest         "id-cmc-revokeRequest"
+#define NID_id_cmc_revokeRequest                340
+#define OBJ_id_cmc_revokeRequest                OBJ_id_cmc,17L
+
+#define SN_id_cmc_regInfo               "id-cmc-regInfo"
+#define NID_id_cmc_regInfo              341
+#define OBJ_id_cmc_regInfo              OBJ_id_cmc,18L
+
+#define SN_id_cmc_responseInfo          "id-cmc-responseInfo"
+#define NID_id_cmc_responseInfo         342
+#define OBJ_id_cmc_responseInfo         OBJ_id_cmc,19L
+
+#define SN_id_cmc_queryPending          "id-cmc-queryPending"
+#define NID_id_cmc_queryPending         343
+#define OBJ_id_cmc_queryPending         OBJ_id_cmc,21L
+
+#define SN_id_cmc_popLinkRandom         "id-cmc-popLinkRandom"
+#define NID_id_cmc_popLinkRandom                344
+#define OBJ_id_cmc_popLinkRandom                OBJ_id_cmc,22L
+
+#define SN_id_cmc_popLinkWitness                "id-cmc-popLinkWitness"
+#define NID_id_cmc_popLinkWitness               345
+#define OBJ_id_cmc_popLinkWitness               OBJ_id_cmc,23L
+
+#define SN_id_cmc_confirmCertAcceptance         "id-cmc-confirmCertAcceptance"
+#define NID_id_cmc_confirmCertAcceptance                346
+#define OBJ_id_cmc_confirmCertAcceptance                OBJ_id_cmc,24L
+
+#define SN_id_on_personalData           "id-on-personalData"
+#define NID_id_on_personalData          347
+#define OBJ_id_on_personalData          OBJ_id_on,1L
+
+#define SN_id_on_permanentIdentifier            "id-on-permanentIdentifier"
+#define LN_id_on_permanentIdentifier            "Permanent Identifier"
+#define NID_id_on_permanentIdentifier           858
+#define OBJ_id_on_permanentIdentifier           OBJ_id_on,3L
+
+#define SN_id_pda_dateOfBirth           "id-pda-dateOfBirth"
+#define NID_id_pda_dateOfBirth          348
+#define OBJ_id_pda_dateOfBirth          OBJ_id_pda,1L
+
+#define SN_id_pda_placeOfBirth          "id-pda-placeOfBirth"
+#define NID_id_pda_placeOfBirth         349
+#define OBJ_id_pda_placeOfBirth         OBJ_id_pda,2L
+
+#define SN_id_pda_gender                "id-pda-gender"
+#define NID_id_pda_gender               351
+#define OBJ_id_pda_gender               OBJ_id_pda,3L
+
+#define SN_id_pda_countryOfCitizenship          "id-pda-countryOfCitizenship"
+#define NID_id_pda_countryOfCitizenship         352
+#define OBJ_id_pda_countryOfCitizenship         OBJ_id_pda,4L
+
+#define SN_id_pda_countryOfResidence            "id-pda-countryOfResidence"
+#define NID_id_pda_countryOfResidence           353
+#define OBJ_id_pda_countryOfResidence           OBJ_id_pda,5L
+
+#define SN_id_aca_authenticationInfo            "id-aca-authenticationInfo"
+#define NID_id_aca_authenticationInfo           354
+#define OBJ_id_aca_authenticationInfo           OBJ_id_aca,1L
+
+#define SN_id_aca_accessIdentity                "id-aca-accessIdentity"
+#define NID_id_aca_accessIdentity               355
+#define OBJ_id_aca_accessIdentity               OBJ_id_aca,2L
+
+#define SN_id_aca_chargingIdentity              "id-aca-chargingIdentity"
+#define NID_id_aca_chargingIdentity             356
+#define OBJ_id_aca_chargingIdentity             OBJ_id_aca,3L
+
+#define SN_id_aca_group         "id-aca-group"
+#define NID_id_aca_group                357
+#define OBJ_id_aca_group                OBJ_id_aca,4L
+
+#define SN_id_aca_role          "id-aca-role"
+#define NID_id_aca_role         358
+#define OBJ_id_aca_role         OBJ_id_aca,5L
+
+#define SN_id_aca_encAttrs              "id-aca-encAttrs"
+#define NID_id_aca_encAttrs             399
+#define OBJ_id_aca_encAttrs             OBJ_id_aca,6L
+
+#define SN_id_qcs_pkixQCSyntax_v1               "id-qcs-pkixQCSyntax-v1"
+#define NID_id_qcs_pkixQCSyntax_v1              359
+#define OBJ_id_qcs_pkixQCSyntax_v1              OBJ_id_qcs,1L
+
+#define SN_id_cct_crs           "id-cct-crs"
+#define NID_id_cct_crs          360
+#define OBJ_id_cct_crs          OBJ_id_cct,1L
+
+#define SN_id_cct_PKIData               "id-cct-PKIData"
+#define NID_id_cct_PKIData              361
+#define OBJ_id_cct_PKIData              OBJ_id_cct,2L
+
+#define SN_id_cct_PKIResponse           "id-cct-PKIResponse"
+#define NID_id_cct_PKIResponse          362
+#define OBJ_id_cct_PKIResponse          OBJ_id_cct,3L
+
+#define SN_id_ppl_anyLanguage           "id-ppl-anyLanguage"
+#define LN_id_ppl_anyLanguage           "Any language"
+#define NID_id_ppl_anyLanguage          664
+#define OBJ_id_ppl_anyLanguage          OBJ_id_ppl,0L
+
+#define SN_id_ppl_inheritAll            "id-ppl-inheritAll"
+#define LN_id_ppl_inheritAll            "Inherit all"
+#define NID_id_ppl_inheritAll           665
+#define OBJ_id_ppl_inheritAll           OBJ_id_ppl,1L
+
+#define SN_Independent          "id-ppl-independent"
+#define LN_Independent          "Independent"
+#define NID_Independent         667
+#define OBJ_Independent         OBJ_id_ppl,2L
+
+#define SN_ad_OCSP              "OCSP"
+#define LN_ad_OCSP              "OCSP"
+#define NID_ad_OCSP             178
+#define OBJ_ad_OCSP             OBJ_id_ad,1L
+
+#define SN_ad_ca_issuers                "caIssuers"
+#define LN_ad_ca_issuers                "CA Issuers"
+#define NID_ad_ca_issuers               179
+#define OBJ_ad_ca_issuers               OBJ_id_ad,2L
+
+#define SN_ad_timeStamping              "ad_timestamping"
+#define LN_ad_timeStamping              "AD Time Stamping"
+#define NID_ad_timeStamping             363
+#define OBJ_ad_timeStamping             OBJ_id_ad,3L
+
+#define SN_ad_dvcs              "AD_DVCS"
+#define LN_ad_dvcs              "ad dvcs"
+#define NID_ad_dvcs             364
+#define OBJ_ad_dvcs             OBJ_id_ad,4L
+
+#define SN_caRepository         "caRepository"
+#define LN_caRepository         "CA Repository"
+#define NID_caRepository                785
+#define OBJ_caRepository                OBJ_id_ad,5L
+
+#define OBJ_id_pkix_OCSP                OBJ_ad_OCSP
+
+#define SN_id_pkix_OCSP_basic           "basicOCSPResponse"
+#define LN_id_pkix_OCSP_basic           "Basic OCSP Response"
+#define NID_id_pkix_OCSP_basic          365
+#define OBJ_id_pkix_OCSP_basic          OBJ_id_pkix_OCSP,1L
+
+#define SN_id_pkix_OCSP_Nonce           "Nonce"
+#define LN_id_pkix_OCSP_Nonce           "OCSP Nonce"
+#define NID_id_pkix_OCSP_Nonce          366
+#define OBJ_id_pkix_OCSP_Nonce          OBJ_id_pkix_OCSP,2L
+
+#define SN_id_pkix_OCSP_CrlID           "CrlID"
+#define LN_id_pkix_OCSP_CrlID           "OCSP CRL ID"
+#define NID_id_pkix_OCSP_CrlID          367
+#define OBJ_id_pkix_OCSP_CrlID          OBJ_id_pkix_OCSP,3L
+
+#define SN_id_pkix_OCSP_acceptableResponses             "acceptableResponses"
+#define LN_id_pkix_OCSP_acceptableResponses             "Acceptable OCSP Responses"
+#define NID_id_pkix_OCSP_acceptableResponses            368
+#define OBJ_id_pkix_OCSP_acceptableResponses            OBJ_id_pkix_OCSP,4L
+
+#define SN_id_pkix_OCSP_noCheck         "noCheck"
+#define LN_id_pkix_OCSP_noCheck         "OCSP No Check"
+#define NID_id_pkix_OCSP_noCheck                369
+#define OBJ_id_pkix_OCSP_noCheck                OBJ_id_pkix_OCSP,5L
+
+#define SN_id_pkix_OCSP_archiveCutoff           "archiveCutoff"
+#define LN_id_pkix_OCSP_archiveCutoff           "OCSP Archive Cutoff"
+#define NID_id_pkix_OCSP_archiveCutoff          370
+#define OBJ_id_pkix_OCSP_archiveCutoff          OBJ_id_pkix_OCSP,6L
+
+#define SN_id_pkix_OCSP_serviceLocator          "serviceLocator"
+#define LN_id_pkix_OCSP_serviceLocator          "OCSP Service Locator"
+#define NID_id_pkix_OCSP_serviceLocator         371
+#define OBJ_id_pkix_OCSP_serviceLocator         OBJ_id_pkix_OCSP,7L
+
+#define SN_id_pkix_OCSP_extendedStatus          "extendedStatus"
+#define LN_id_pkix_OCSP_extendedStatus          "Extended OCSP Status"
+#define NID_id_pkix_OCSP_extendedStatus         372
+#define OBJ_id_pkix_OCSP_extendedStatus         OBJ_id_pkix_OCSP,8L
+
+#define SN_id_pkix_OCSP_valid           "valid"
+#define NID_id_pkix_OCSP_valid          373
+#define OBJ_id_pkix_OCSP_valid          OBJ_id_pkix_OCSP,9L
+
+#define SN_id_pkix_OCSP_path            "path"
+#define NID_id_pkix_OCSP_path           374
+#define OBJ_id_pkix_OCSP_path           OBJ_id_pkix_OCSP,10L
+
+#define SN_id_pkix_OCSP_trustRoot               "trustRoot"
+#define LN_id_pkix_OCSP_trustRoot               "Trust Root"
+#define NID_id_pkix_OCSP_trustRoot              375
+#define OBJ_id_pkix_OCSP_trustRoot              OBJ_id_pkix_OCSP,11L
+
+#define SN_algorithm            "algorithm"
+#define LN_algorithm            "algorithm"
+#define NID_algorithm           376
+#define OBJ_algorithm           1L,3L,14L,3L,2L
+
+#define SN_md5WithRSA           "RSA-NP-MD5"
+#define LN_md5WithRSA           "md5WithRSA"
+#define NID_md5WithRSA          104
+#define OBJ_md5WithRSA          OBJ_algorithm,3L
+
+#define SN_des_ecb              "DES-ECB"
+#define LN_des_ecb              "des-ecb"
+#define NID_des_ecb             29
+#define OBJ_des_ecb             OBJ_algorithm,6L
+
+#define SN_des_cbc              "DES-CBC"
+#define LN_des_cbc              "des-cbc"
+#define NID_des_cbc             31
+#define OBJ_des_cbc             OBJ_algorithm,7L
+
+#define SN_des_ofb64            "DES-OFB"
+#define LN_des_ofb64            "des-ofb"
+#define NID_des_ofb64           45
+#define OBJ_des_ofb64           OBJ_algorithm,8L
+
+#define SN_des_cfb64            "DES-CFB"
+#define LN_des_cfb64            "des-cfb"
+#define NID_des_cfb64           30
+#define OBJ_des_cfb64           OBJ_algorithm,9L
+
+#define SN_rsaSignature         "rsaSignature"
+#define NID_rsaSignature                377
+#define OBJ_rsaSignature                OBJ_algorithm,11L
+
+#define SN_dsa_2                "DSA-old"
+#define LN_dsa_2                "dsaEncryption-old"
+#define NID_dsa_2               67
+#define OBJ_dsa_2               OBJ_algorithm,12L
+
+#define SN_dsaWithSHA           "DSA-SHA"
+#define LN_dsaWithSHA           "dsaWithSHA"
+#define NID_dsaWithSHA          66
+#define OBJ_dsaWithSHA          OBJ_algorithm,13L
+
+#define SN_shaWithRSAEncryption         "RSA-SHA"
+#define LN_shaWithRSAEncryption         "shaWithRSAEncryption"
+#define NID_shaWithRSAEncryption                42
+#define OBJ_shaWithRSAEncryption                OBJ_algorithm,15L
+
+#define SN_des_ede_ecb          "DES-EDE"
+#define LN_des_ede_ecb          "des-ede"
+#define NID_des_ede_ecb         32
+#define OBJ_des_ede_ecb         OBJ_algorithm,17L
+
+#define SN_des_ede3_ecb         "DES-EDE3"
+#define LN_des_ede3_ecb         "des-ede3"
+#define NID_des_ede3_ecb                33
+
+#define SN_des_ede_cbc          "DES-EDE-CBC"
+#define LN_des_ede_cbc          "des-ede-cbc"
+#define NID_des_ede_cbc         43
+
+#define SN_des_ede_cfb64                "DES-EDE-CFB"
+#define LN_des_ede_cfb64                "des-ede-cfb"
+#define NID_des_ede_cfb64               60
+
+#define SN_des_ede3_cfb64               "DES-EDE3-CFB"
+#define LN_des_ede3_cfb64               "des-ede3-cfb"
+#define NID_des_ede3_cfb64              61
+
+#define SN_des_ede_ofb64                "DES-EDE-OFB"
+#define LN_des_ede_ofb64                "des-ede-ofb"
+#define NID_des_ede_ofb64               62
+
+#define SN_des_ede3_ofb64               "DES-EDE3-OFB"
+#define LN_des_ede3_ofb64               "des-ede3-ofb"
+#define NID_des_ede3_ofb64              63
+
+#define SN_desx_cbc             "DESX-CBC"
+#define LN_desx_cbc             "desx-cbc"
+#define NID_desx_cbc            80
+
+#define SN_sha          "SHA"
+#define LN_sha          "sha"
+#define NID_sha         41
+#define OBJ_sha         OBJ_algorithm,18L
+
+#define SN_sha1         "SHA1"
+#define LN_sha1         "sha1"
+#define NID_sha1                64
+#define OBJ_sha1                OBJ_algorithm,26L
+
+#define SN_dsaWithSHA1_2                "DSA-SHA1-old"
+#define LN_dsaWithSHA1_2                "dsaWithSHA1-old"
+#define NID_dsaWithSHA1_2               70
+#define OBJ_dsaWithSHA1_2               OBJ_algorithm,27L
+
+#define SN_sha1WithRSA          "RSA-SHA1-2"
+#define LN_sha1WithRSA          "sha1WithRSA"
+#define NID_sha1WithRSA         115
+#define OBJ_sha1WithRSA         OBJ_algorithm,29L
+
+#define SN_ripemd160            "RIPEMD160"
+#define LN_ripemd160            "ripemd160"
+#define NID_ripemd160           117
+#define OBJ_ripemd160           1L,3L,36L,3L,2L,1L
+
+#define SN_ripemd160WithRSA             "RSA-RIPEMD160"
+#define LN_ripemd160WithRSA             "ripemd160WithRSA"
+#define NID_ripemd160WithRSA            119
+#define OBJ_ripemd160WithRSA            1L,3L,36L,3L,3L,1L,2L
+
+#define SN_blake2b512           "BLAKE2b512"
+#define LN_blake2b512           "blake2b512"
+#define NID_blake2b512          1056
+#define OBJ_blake2b512          1L,3L,6L,1L,4L,1L,1722L,12L,2L,1L,16L
+
+#define SN_blake2s256           "BLAKE2s256"
+#define LN_blake2s256           "blake2s256"
+#define NID_blake2s256          1057
+#define OBJ_blake2s256          1L,3L,6L,1L,4L,1L,1722L,12L,2L,2L,8L
+
+#define SN_sxnet                "SXNetID"
+#define LN_sxnet                "Strong Extranet ID"
+#define NID_sxnet               143
+#define OBJ_sxnet               1L,3L,101L,1L,4L,1L
+
+#define SN_X500         "X500"
+#define LN_X500         "directory services (X.500)"
+#define NID_X500                11
+#define OBJ_X500                2L,5L
+
+#define SN_X509         "X509"
+#define NID_X509                12
+#define OBJ_X509                OBJ_X500,4L
+
+#define SN_commonName           "CN"
+#define LN_commonName           "commonName"
+#define NID_commonName          13
+#define OBJ_commonName          OBJ_X509,3L
+
+#define SN_surname              "SN"
+#define LN_surname              "surname"
+#define NID_surname             100
+#define OBJ_surname             OBJ_X509,4L
+
+#define LN_serialNumber         "serialNumber"
+#define NID_serialNumber                105
+#define OBJ_serialNumber                OBJ_X509,5L
+
+#define SN_countryName          "C"
+#define LN_countryName          "countryName"
+#define NID_countryName         14
+#define OBJ_countryName         OBJ_X509,6L
+
+#define SN_localityName         "L"
+#define LN_localityName         "localityName"
+#define NID_localityName                15
+#define OBJ_localityName                OBJ_X509,7L
+
+#define SN_stateOrProvinceName          "ST"
+#define LN_stateOrProvinceName          "stateOrProvinceName"
+#define NID_stateOrProvinceName         16
+#define OBJ_stateOrProvinceName         OBJ_X509,8L
+
+#define SN_streetAddress                "street"
+#define LN_streetAddress                "streetAddress"
+#define NID_streetAddress               660
+#define OBJ_streetAddress               OBJ_X509,9L
+
+#define SN_organizationName             "O"
+#define LN_organizationName             "organizationName"
+#define NID_organizationName            17
+#define OBJ_organizationName            OBJ_X509,10L
+
+#define SN_organizationalUnitName               "OU"
+#define LN_organizationalUnitName               "organizationalUnitName"
+#define NID_organizationalUnitName              18
+#define OBJ_organizationalUnitName              OBJ_X509,11L
+
+#define SN_title                "title"
+#define LN_title                "title"
+#define NID_title               106
+#define OBJ_title               OBJ_X509,12L
+
+#define LN_description          "description"
+#define NID_description         107
+#define OBJ_description         OBJ_X509,13L
+
+#define LN_searchGuide          "searchGuide"
+#define NID_searchGuide         859
+#define OBJ_searchGuide         OBJ_X509,14L
+
+#define LN_businessCategory             "businessCategory"
+#define NID_businessCategory            860
+#define OBJ_businessCategory            OBJ_X509,15L
+
+#define LN_postalAddress                "postalAddress"
+#define NID_postalAddress               861
+#define OBJ_postalAddress               OBJ_X509,16L
+
+#define LN_postalCode           "postalCode"
+#define NID_postalCode          661
+#define OBJ_postalCode          OBJ_X509,17L
+
+#define LN_postOfficeBox                "postOfficeBox"
+#define NID_postOfficeBox               862
+#define OBJ_postOfficeBox               OBJ_X509,18L
+
+#define LN_physicalDeliveryOfficeName           "physicalDeliveryOfficeName"
+#define NID_physicalDeliveryOfficeName          863
+#define OBJ_physicalDeliveryOfficeName          OBJ_X509,19L
+
+#define LN_telephoneNumber              "telephoneNumber"
+#define NID_telephoneNumber             864
+#define OBJ_telephoneNumber             OBJ_X509,20L
+
+#define LN_telexNumber          "telexNumber"
+#define NID_telexNumber         865
+#define OBJ_telexNumber         OBJ_X509,21L
+
+#define LN_teletexTerminalIdentifier            "teletexTerminalIdentifier"
+#define NID_teletexTerminalIdentifier           866
+#define OBJ_teletexTerminalIdentifier           OBJ_X509,22L
+
+#define LN_facsimileTelephoneNumber             "facsimileTelephoneNumber"
+#define NID_facsimileTelephoneNumber            867
+#define OBJ_facsimileTelephoneNumber            OBJ_X509,23L
+
+#define LN_x121Address          "x121Address"
+#define NID_x121Address         868
+#define OBJ_x121Address         OBJ_X509,24L
+
+#define LN_internationaliSDNNumber              "internationaliSDNNumber"
+#define NID_internationaliSDNNumber             869
+#define OBJ_internationaliSDNNumber             OBJ_X509,25L
+
+#define LN_registeredAddress            "registeredAddress"
+#define NID_registeredAddress           870
+#define OBJ_registeredAddress           OBJ_X509,26L
+
+#define LN_destinationIndicator         "destinationIndicator"
+#define NID_destinationIndicator                871
+#define OBJ_destinationIndicator                OBJ_X509,27L
+
+#define LN_preferredDeliveryMethod              "preferredDeliveryMethod"
+#define NID_preferredDeliveryMethod             872
+#define OBJ_preferredDeliveryMethod             OBJ_X509,28L
+
+#define LN_presentationAddress          "presentationAddress"
+#define NID_presentationAddress         873
+#define OBJ_presentationAddress         OBJ_X509,29L
+
+#define LN_supportedApplicationContext          "supportedApplicationContext"
+#define NID_supportedApplicationContext         874
+#define OBJ_supportedApplicationContext         OBJ_X509,30L
+
+#define SN_member               "member"
+#define NID_member              875
+#define OBJ_member              OBJ_X509,31L
+
+#define SN_owner                "owner"
+#define NID_owner               876
+#define OBJ_owner               OBJ_X509,32L
+
+#define LN_roleOccupant         "roleOccupant"
+#define NID_roleOccupant                877
+#define OBJ_roleOccupant                OBJ_X509,33L
+
+#define SN_seeAlso              "seeAlso"
+#define NID_seeAlso             878
+#define OBJ_seeAlso             OBJ_X509,34L
+
+#define LN_userPassword         "userPassword"
+#define NID_userPassword                879
+#define OBJ_userPassword                OBJ_X509,35L
+
+#define LN_userCertificate              "userCertificate"
+#define NID_userCertificate             880
+#define OBJ_userCertificate             OBJ_X509,36L
+
+#define LN_cACertificate                "cACertificate"
+#define NID_cACertificate               881
+#define OBJ_cACertificate               OBJ_X509,37L
+
+#define LN_authorityRevocationList              "authorityRevocationList"
+#define NID_authorityRevocationList             882
+#define OBJ_authorityRevocationList             OBJ_X509,38L
+
+#define LN_certificateRevocationList            "certificateRevocationList"
+#define NID_certificateRevocationList           883
+#define OBJ_certificateRevocationList           OBJ_X509,39L
+
+#define LN_crossCertificatePair         "crossCertificatePair"
+#define NID_crossCertificatePair                884
+#define OBJ_crossCertificatePair                OBJ_X509,40L
+
+#define SN_name         "name"
+#define LN_name         "name"
+#define NID_name                173
+#define OBJ_name                OBJ_X509,41L
+
+#define SN_givenName            "GN"
+#define LN_givenName            "givenName"
+#define NID_givenName           99
+#define OBJ_givenName           OBJ_X509,42L
+
+#define SN_initials             "initials"
+#define LN_initials             "initials"
+#define NID_initials            101
+#define OBJ_initials            OBJ_X509,43L
+
+#define LN_generationQualifier          "generationQualifier"
+#define NID_generationQualifier         509
+#define OBJ_generationQualifier         OBJ_X509,44L
+
+#define LN_x500UniqueIdentifier         "x500UniqueIdentifier"
+#define NID_x500UniqueIdentifier                503
+#define OBJ_x500UniqueIdentifier                OBJ_X509,45L
+
+#define SN_dnQualifier          "dnQualifier"
+#define LN_dnQualifier          "dnQualifier"
+#define NID_dnQualifier         174
+#define OBJ_dnQualifier         OBJ_X509,46L
+
+#define LN_enhancedSearchGuide          "enhancedSearchGuide"
+#define NID_enhancedSearchGuide         885
+#define OBJ_enhancedSearchGuide         OBJ_X509,47L
+
+#define LN_protocolInformation          "protocolInformation"
+#define NID_protocolInformation         886
+#define OBJ_protocolInformation         OBJ_X509,48L
+
+#define LN_distinguishedName            "distinguishedName"
+#define NID_distinguishedName           887
+#define OBJ_distinguishedName           OBJ_X509,49L
+
+#define LN_uniqueMember         "uniqueMember"
+#define NID_uniqueMember                888
+#define OBJ_uniqueMember                OBJ_X509,50L
+
+#define LN_houseIdentifier              "houseIdentifier"
+#define NID_houseIdentifier             889
+#define OBJ_houseIdentifier             OBJ_X509,51L
+
+#define LN_supportedAlgorithms          "supportedAlgorithms"
+#define NID_supportedAlgorithms         890
+#define OBJ_supportedAlgorithms         OBJ_X509,52L
+
+#define LN_deltaRevocationList          "deltaRevocationList"
+#define NID_deltaRevocationList         891
+#define OBJ_deltaRevocationList         OBJ_X509,53L
+
+#define SN_dmdName              "dmdName"
+#define NID_dmdName             892
+#define OBJ_dmdName             OBJ_X509,54L
+
+#define LN_pseudonym            "pseudonym"
+#define NID_pseudonym           510
+#define OBJ_pseudonym           OBJ_X509,65L
+
+#define SN_role         "role"
+#define LN_role         "role"
+#define NID_role                400
+#define OBJ_role                OBJ_X509,72L
+
+#define LN_organizationIdentifier               "organizationIdentifier"
+#define NID_organizationIdentifier              1089
+#define OBJ_organizationIdentifier              OBJ_X509,97L
+
+#define SN_countryCode3c                "c3"
+#define LN_countryCode3c                "countryCode3c"
+#define NID_countryCode3c               1090
+#define OBJ_countryCode3c               OBJ_X509,98L
+
+#define SN_countryCode3n                "n3"
+#define LN_countryCode3n                "countryCode3n"
+#define NID_countryCode3n               1091
+#define OBJ_countryCode3n               OBJ_X509,99L
+
+#define LN_dnsName              "dnsName"
+#define NID_dnsName             1092
+#define OBJ_dnsName             OBJ_X509,100L
+
+#define SN_X500algorithms               "X500algorithms"
+#define LN_X500algorithms               "directory services - algorithms"
+#define NID_X500algorithms              378
+#define OBJ_X500algorithms              OBJ_X500,8L
+
+#define SN_rsa          "RSA"
+#define LN_rsa          "rsa"
+#define NID_rsa         19
+#define OBJ_rsa         OBJ_X500algorithms,1L,1L
+
+#define SN_mdc2WithRSA          "RSA-MDC2"
+#define LN_mdc2WithRSA          "mdc2WithRSA"
+#define NID_mdc2WithRSA         96
+#define OBJ_mdc2WithRSA         OBJ_X500algorithms,3L,100L
+
+#define SN_mdc2         "MDC2"
+#define LN_mdc2         "mdc2"
+#define NID_mdc2                95
+#define OBJ_mdc2                OBJ_X500algorithms,3L,101L
+
+#define SN_id_ce                "id-ce"
+#define NID_id_ce               81
+#define OBJ_id_ce               OBJ_X500,29L
+
+#define SN_subject_directory_attributes         "subjectDirectoryAttributes"
+#define LN_subject_directory_attributes         "X509v3 Subject Directory Attributes"
+#define NID_subject_directory_attributes                769
+#define OBJ_subject_directory_attributes                OBJ_id_ce,9L
+
+#define SN_subject_key_identifier               "subjectKeyIdentifier"
+#define LN_subject_key_identifier               "X509v3 Subject Key Identifier"
+#define NID_subject_key_identifier              82
+#define OBJ_subject_key_identifier              OBJ_id_ce,14L
+
+#define SN_key_usage            "keyUsage"
+#define LN_key_usage            "X509v3 Key Usage"
+#define NID_key_usage           83
+#define OBJ_key_usage           OBJ_id_ce,15L
+
+#define SN_private_key_usage_period             "privateKeyUsagePeriod"
+#define LN_private_key_usage_period             "X509v3 Private Key Usage Period"
+#define NID_private_key_usage_period            84
+#define OBJ_private_key_usage_period            OBJ_id_ce,16L
+
+#define SN_subject_alt_name             "subjectAltName"
+#define LN_subject_alt_name             "X509v3 Subject Alternative Name"
+#define NID_subject_alt_name            85
+#define OBJ_subject_alt_name            OBJ_id_ce,17L
+
+#define SN_issuer_alt_name              "issuerAltName"
+#define LN_issuer_alt_name              "X509v3 Issuer Alternative Name"
+#define NID_issuer_alt_name             86
+#define OBJ_issuer_alt_name             OBJ_id_ce,18L
+
+#define SN_basic_constraints            "basicConstraints"
+#define LN_basic_constraints            "X509v3 Basic Constraints"
+#define NID_basic_constraints           87
+#define OBJ_basic_constraints           OBJ_id_ce,19L
+
+#define SN_crl_number           "crlNumber"
+#define LN_crl_number           "X509v3 CRL Number"
+#define NID_crl_number          88
+#define OBJ_crl_number          OBJ_id_ce,20L
+
+#define SN_crl_reason           "CRLReason"
+#define LN_crl_reason           "X509v3 CRL Reason Code"
+#define NID_crl_reason          141
+#define OBJ_crl_reason          OBJ_id_ce,21L
+
+#define SN_invalidity_date              "invalidityDate"
+#define LN_invalidity_date              "Invalidity Date"
+#define NID_invalidity_date             142
+#define OBJ_invalidity_date             OBJ_id_ce,24L
+
+#define SN_delta_crl            "deltaCRL"
+#define LN_delta_crl            "X509v3 Delta CRL Indicator"
+#define NID_delta_crl           140
+#define OBJ_delta_crl           OBJ_id_ce,27L
+
+#define SN_issuing_distribution_point           "issuingDistributionPoint"
+#define LN_issuing_distribution_point           "X509v3 Issuing Distribution Point"
+#define NID_issuing_distribution_point          770
+#define OBJ_issuing_distribution_point          OBJ_id_ce,28L
+
+#define SN_certificate_issuer           "certificateIssuer"
+#define LN_certificate_issuer           "X509v3 Certificate Issuer"
+#define NID_certificate_issuer          771
+#define OBJ_certificate_issuer          OBJ_id_ce,29L
+
+#define SN_name_constraints             "nameConstraints"
+#define LN_name_constraints             "X509v3 Name Constraints"
+#define NID_name_constraints            666
+#define OBJ_name_constraints            OBJ_id_ce,30L
+
+#define SN_crl_distribution_points              "crlDistributionPoints"
+#define LN_crl_distribution_points              "X509v3 CRL Distribution Points"
+#define NID_crl_distribution_points             103
+#define OBJ_crl_distribution_points             OBJ_id_ce,31L
+
+#define SN_certificate_policies         "certificatePolicies"
+#define LN_certificate_policies         "X509v3 Certificate Policies"
+#define NID_certificate_policies                89
+#define OBJ_certificate_policies                OBJ_id_ce,32L
+
+#define SN_any_policy           "anyPolicy"
+#define LN_any_policy           "X509v3 Any Policy"
+#define NID_any_policy          746
+#define OBJ_any_policy          OBJ_certificate_policies,0L
+
+#define SN_policy_mappings              "policyMappings"
+#define LN_policy_mappings              "X509v3 Policy Mappings"
+#define NID_policy_mappings             747
+#define OBJ_policy_mappings             OBJ_id_ce,33L
+
+#define SN_authority_key_identifier             "authorityKeyIdentifier"
+#define LN_authority_key_identifier             "X509v3 Authority Key Identifier"
+#define NID_authority_key_identifier            90
+#define OBJ_authority_key_identifier            OBJ_id_ce,35L
+
+#define SN_policy_constraints           "policyConstraints"
+#define LN_policy_constraints           "X509v3 Policy Constraints"
+#define NID_policy_constraints          401
+#define OBJ_policy_constraints          OBJ_id_ce,36L
+
+#define SN_ext_key_usage                "extendedKeyUsage"
+#define LN_ext_key_usage                "X509v3 Extended Key Usage"
+#define NID_ext_key_usage               126
+#define OBJ_ext_key_usage               OBJ_id_ce,37L
+
+#define SN_freshest_crl         "freshestCRL"
+#define LN_freshest_crl         "X509v3 Freshest CRL"
+#define NID_freshest_crl                857
+#define OBJ_freshest_crl                OBJ_id_ce,46L
+
+#define SN_inhibit_any_policy           "inhibitAnyPolicy"
+#define LN_inhibit_any_policy           "X509v3 Inhibit Any Policy"
+#define NID_inhibit_any_policy          748
+#define OBJ_inhibit_any_policy          OBJ_id_ce,54L
+
+#define SN_target_information           "targetInformation"
+#define LN_target_information           "X509v3 AC Targeting"
+#define NID_target_information          402
+#define OBJ_target_information          OBJ_id_ce,55L
+
+#define SN_no_rev_avail         "noRevAvail"
+#define LN_no_rev_avail         "X509v3 No Revocation Available"
+#define NID_no_rev_avail                403
+#define OBJ_no_rev_avail                OBJ_id_ce,56L
+
+#define SN_anyExtendedKeyUsage          "anyExtendedKeyUsage"
+#define LN_anyExtendedKeyUsage          "Any Extended Key Usage"
+#define NID_anyExtendedKeyUsage         910
+#define OBJ_anyExtendedKeyUsage         OBJ_ext_key_usage,0L
+
+#define SN_netscape             "Netscape"
+#define LN_netscape             "Netscape Communications Corp."
+#define NID_netscape            57
+#define OBJ_netscape            2L,16L,840L,1L,113730L
+
+#define SN_netscape_cert_extension              "nsCertExt"
+#define LN_netscape_cert_extension              "Netscape Certificate Extension"
+#define NID_netscape_cert_extension             58
+#define OBJ_netscape_cert_extension             OBJ_netscape,1L
+
+#define SN_netscape_data_type           "nsDataType"
+#define LN_netscape_data_type           "Netscape Data Type"
+#define NID_netscape_data_type          59
+#define OBJ_netscape_data_type          OBJ_netscape,2L
+
+#define SN_netscape_cert_type           "nsCertType"
+#define LN_netscape_cert_type           "Netscape Cert Type"
+#define NID_netscape_cert_type          71
+#define OBJ_netscape_cert_type          OBJ_netscape_cert_extension,1L
+
+#define SN_netscape_base_url            "nsBaseUrl"
+#define LN_netscape_base_url            "Netscape Base Url"
+#define NID_netscape_base_url           72
+#define OBJ_netscape_base_url           OBJ_netscape_cert_extension,2L
+
+#define SN_netscape_revocation_url              "nsRevocationUrl"
+#define LN_netscape_revocation_url              "Netscape Revocation Url"
+#define NID_netscape_revocation_url             73
+#define OBJ_netscape_revocation_url             OBJ_netscape_cert_extension,3L
+
+#define SN_netscape_ca_revocation_url           "nsCaRevocationUrl"
+#define LN_netscape_ca_revocation_url           "Netscape CA Revocation Url"
+#define NID_netscape_ca_revocation_url          74
+#define OBJ_netscape_ca_revocation_url          OBJ_netscape_cert_extension,4L
+
+#define SN_netscape_renewal_url         "nsRenewalUrl"
+#define LN_netscape_renewal_url         "Netscape Renewal Url"
+#define NID_netscape_renewal_url                75
+#define OBJ_netscape_renewal_url                OBJ_netscape_cert_extension,7L
+
+#define SN_netscape_ca_policy_url               "nsCaPolicyUrl"
+#define LN_netscape_ca_policy_url               "Netscape CA Policy Url"
+#define NID_netscape_ca_policy_url              76
+#define OBJ_netscape_ca_policy_url              OBJ_netscape_cert_extension,8L
+
+#define SN_netscape_ssl_server_name             "nsSslServerName"
+#define LN_netscape_ssl_server_name             "Netscape SSL Server Name"
+#define NID_netscape_ssl_server_name            77
+#define OBJ_netscape_ssl_server_name            OBJ_netscape_cert_extension,12L
+
+#define SN_netscape_comment             "nsComment"
+#define LN_netscape_comment             "Netscape Comment"
+#define NID_netscape_comment            78
+#define OBJ_netscape_comment            OBJ_netscape_cert_extension,13L
+
+#define SN_netscape_cert_sequence               "nsCertSequence"
+#define LN_netscape_cert_sequence               "Netscape Certificate Sequence"
+#define NID_netscape_cert_sequence              79
+#define OBJ_netscape_cert_sequence              OBJ_netscape_data_type,5L
+
+#define SN_ns_sgc               "nsSGC"
+#define LN_ns_sgc               "Netscape Server Gated Crypto"
+#define NID_ns_sgc              139
+#define OBJ_ns_sgc              OBJ_netscape,4L,1L
+
+#define SN_org          "ORG"
+#define LN_org          "org"
+#define NID_org         379
+#define OBJ_org         OBJ_iso,3L
+
+#define SN_dod          "DOD"
+#define LN_dod          "dod"
+#define NID_dod         380
+#define OBJ_dod         OBJ_org,6L
+
+#define SN_iana         "IANA"
+#define LN_iana         "iana"
+#define NID_iana                381
+#define OBJ_iana                OBJ_dod,1L
+
+#define OBJ_internet            OBJ_iana
+
+#define SN_Directory            "directory"
+#define LN_Directory            "Directory"
+#define NID_Directory           382
+#define OBJ_Directory           OBJ_internet,1L
+
+#define SN_Management           "mgmt"
+#define LN_Management           "Management"
+#define NID_Management          383
+#define OBJ_Management          OBJ_internet,2L
+
+#define SN_Experimental         "experimental"
+#define LN_Experimental         "Experimental"
+#define NID_Experimental                384
+#define OBJ_Experimental                OBJ_internet,3L
+
+#define SN_Private              "private"
+#define LN_Private              "Private"
+#define NID_Private             385
+#define OBJ_Private             OBJ_internet,4L
+
+#define SN_Security             "security"
+#define LN_Security             "Security"
+#define NID_Security            386
+#define OBJ_Security            OBJ_internet,5L
+
+#define SN_SNMPv2               "snmpv2"
+#define LN_SNMPv2               "SNMPv2"
+#define NID_SNMPv2              387
+#define OBJ_SNMPv2              OBJ_internet,6L
+
+#define LN_Mail         "Mail"
+#define NID_Mail                388
+#define OBJ_Mail                OBJ_internet,7L
+
+#define SN_Enterprises          "enterprises"
+#define LN_Enterprises          "Enterprises"
+#define NID_Enterprises         389
+#define OBJ_Enterprises         OBJ_Private,1L
+
+#define SN_dcObject             "dcobject"
+#define LN_dcObject             "dcObject"
+#define NID_dcObject            390
+#define OBJ_dcObject            OBJ_Enterprises,1466L,344L
+
+#define SN_mime_mhs             "mime-mhs"
+#define LN_mime_mhs             "MIME MHS"
+#define NID_mime_mhs            504
+#define OBJ_mime_mhs            OBJ_Mail,1L
+
+#define SN_mime_mhs_headings            "mime-mhs-headings"
+#define LN_mime_mhs_headings            "mime-mhs-headings"
+#define NID_mime_mhs_headings           505
+#define OBJ_mime_mhs_headings           OBJ_mime_mhs,1L
+
+#define SN_mime_mhs_bodies              "mime-mhs-bodies"
+#define LN_mime_mhs_bodies              "mime-mhs-bodies"
+#define NID_mime_mhs_bodies             506
+#define OBJ_mime_mhs_bodies             OBJ_mime_mhs,2L
+
+#define SN_id_hex_partial_message               "id-hex-partial-message"
+#define LN_id_hex_partial_message               "id-hex-partial-message"
+#define NID_id_hex_partial_message              507
+#define OBJ_id_hex_partial_message              OBJ_mime_mhs_headings,1L
+
+#define SN_id_hex_multipart_message             "id-hex-multipart-message"
+#define LN_id_hex_multipart_message             "id-hex-multipart-message"
+#define NID_id_hex_multipart_message            508
+#define OBJ_id_hex_multipart_message            OBJ_mime_mhs_headings,2L
+
+#define SN_zlib_compression             "ZLIB"
+#define LN_zlib_compression             "zlib compression"
+#define NID_zlib_compression            125
+#define OBJ_zlib_compression            OBJ_id_smime_alg,8L
+
+#define OBJ_csor                2L,16L,840L,1L,101L,3L
+
+#define OBJ_nistAlgorithms              OBJ_csor,4L
+
+#define OBJ_aes         OBJ_nistAlgorithms,1L
+
+#define SN_aes_128_ecb          "AES-128-ECB"
+#define LN_aes_128_ecb          "aes-128-ecb"
+#define NID_aes_128_ecb         418
+#define OBJ_aes_128_ecb         OBJ_aes,1L
+
+#define SN_aes_128_cbc          "AES-128-CBC"
+#define LN_aes_128_cbc          "aes-128-cbc"
+#define NID_aes_128_cbc         419
+#define OBJ_aes_128_cbc         OBJ_aes,2L
+
+#define SN_aes_128_ofb128               "AES-128-OFB"
+#define LN_aes_128_ofb128               "aes-128-ofb"
+#define NID_aes_128_ofb128              420
+#define OBJ_aes_128_ofb128              OBJ_aes,3L
+
+#define SN_aes_128_cfb128               "AES-128-CFB"
+#define LN_aes_128_cfb128               "aes-128-cfb"
+#define NID_aes_128_cfb128              421
+#define OBJ_aes_128_cfb128              OBJ_aes,4L
+
+#define SN_id_aes128_wrap               "id-aes128-wrap"
+#define NID_id_aes128_wrap              788
+#define OBJ_id_aes128_wrap              OBJ_aes,5L
+
+#define SN_aes_128_gcm          "id-aes128-GCM"
+#define LN_aes_128_gcm          "aes-128-gcm"
+#define NID_aes_128_gcm         895
+#define OBJ_aes_128_gcm         OBJ_aes,6L
+
+#define SN_aes_128_ccm          "id-aes128-CCM"
+#define LN_aes_128_ccm          "aes-128-ccm"
+#define NID_aes_128_ccm         896
+#define OBJ_aes_128_ccm         OBJ_aes,7L
+
+#define SN_id_aes128_wrap_pad           "id-aes128-wrap-pad"
+#define NID_id_aes128_wrap_pad          897
+#define OBJ_id_aes128_wrap_pad          OBJ_aes,8L
+
+#define SN_aes_192_ecb          "AES-192-ECB"
+#define LN_aes_192_ecb          "aes-192-ecb"
+#define NID_aes_192_ecb         422
+#define OBJ_aes_192_ecb         OBJ_aes,21L
+
+#define SN_aes_192_cbc          "AES-192-CBC"
+#define LN_aes_192_cbc          "aes-192-cbc"
+#define NID_aes_192_cbc         423
+#define OBJ_aes_192_cbc         OBJ_aes,22L
+
+#define SN_aes_192_ofb128               "AES-192-OFB"
+#define LN_aes_192_ofb128               "aes-192-ofb"
+#define NID_aes_192_ofb128              424
+#define OBJ_aes_192_ofb128              OBJ_aes,23L
+
+#define SN_aes_192_cfb128               "AES-192-CFB"
+#define LN_aes_192_cfb128               "aes-192-cfb"
+#define NID_aes_192_cfb128              425
+#define OBJ_aes_192_cfb128              OBJ_aes,24L
+
+#define SN_id_aes192_wrap               "id-aes192-wrap"
+#define NID_id_aes192_wrap              789
+#define OBJ_id_aes192_wrap              OBJ_aes,25L
+
+#define SN_aes_192_gcm          "id-aes192-GCM"
+#define LN_aes_192_gcm          "aes-192-gcm"
+#define NID_aes_192_gcm         898
+#define OBJ_aes_192_gcm         OBJ_aes,26L
+
+#define SN_aes_192_ccm          "id-aes192-CCM"
+#define LN_aes_192_ccm          "aes-192-ccm"
+#define NID_aes_192_ccm         899
+#define OBJ_aes_192_ccm         OBJ_aes,27L
+
+#define SN_id_aes192_wrap_pad           "id-aes192-wrap-pad"
+#define NID_id_aes192_wrap_pad          900
+#define OBJ_id_aes192_wrap_pad          OBJ_aes,28L
+
+#define SN_aes_256_ecb          "AES-256-ECB"
+#define LN_aes_256_ecb          "aes-256-ecb"
+#define NID_aes_256_ecb         426
+#define OBJ_aes_256_ecb         OBJ_aes,41L
+
+#define SN_aes_256_cbc          "AES-256-CBC"
+#define LN_aes_256_cbc          "aes-256-cbc"
+#define NID_aes_256_cbc         427
+#define OBJ_aes_256_cbc         OBJ_aes,42L
+
+#define SN_aes_256_ofb128               "AES-256-OFB"
+#define LN_aes_256_ofb128               "aes-256-ofb"
+#define NID_aes_256_ofb128              428
+#define OBJ_aes_256_ofb128              OBJ_aes,43L
+
+#define SN_aes_256_cfb128               "AES-256-CFB"
+#define LN_aes_256_cfb128               "aes-256-cfb"
+#define NID_aes_256_cfb128              429
+#define OBJ_aes_256_cfb128              OBJ_aes,44L
+
+#define SN_id_aes256_wrap               "id-aes256-wrap"
+#define NID_id_aes256_wrap              790
+#define OBJ_id_aes256_wrap              OBJ_aes,45L
+
+#define SN_aes_256_gcm          "id-aes256-GCM"
+#define LN_aes_256_gcm          "aes-256-gcm"
+#define NID_aes_256_gcm         901
+#define OBJ_aes_256_gcm         OBJ_aes,46L
+
+#define SN_aes_256_ccm          "id-aes256-CCM"
+#define LN_aes_256_ccm          "aes-256-ccm"
+#define NID_aes_256_ccm         902
+#define OBJ_aes_256_ccm         OBJ_aes,47L
+
+#define SN_id_aes256_wrap_pad           "id-aes256-wrap-pad"
+#define NID_id_aes256_wrap_pad          903
+#define OBJ_id_aes256_wrap_pad          OBJ_aes,48L
+
+#define SN_aes_128_xts          "AES-128-XTS"
+#define LN_aes_128_xts          "aes-128-xts"
+#define NID_aes_128_xts         913
+#define OBJ_aes_128_xts         OBJ_ieee_siswg,0L,1L,1L
+
+#define SN_aes_256_xts          "AES-256-XTS"
+#define LN_aes_256_xts          "aes-256-xts"
+#define NID_aes_256_xts         914
+#define OBJ_aes_256_xts         OBJ_ieee_siswg,0L,1L,2L
+
+#define SN_aes_128_cfb1         "AES-128-CFB1"
+#define LN_aes_128_cfb1         "aes-128-cfb1"
+#define NID_aes_128_cfb1                650
+
+#define SN_aes_192_cfb1         "AES-192-CFB1"
+#define LN_aes_192_cfb1         "aes-192-cfb1"
+#define NID_aes_192_cfb1                651
+
+#define SN_aes_256_cfb1         "AES-256-CFB1"
+#define LN_aes_256_cfb1         "aes-256-cfb1"
+#define NID_aes_256_cfb1                652
+
+#define SN_aes_128_cfb8         "AES-128-CFB8"
+#define LN_aes_128_cfb8         "aes-128-cfb8"
+#define NID_aes_128_cfb8                653
+
+#define SN_aes_192_cfb8         "AES-192-CFB8"
+#define LN_aes_192_cfb8         "aes-192-cfb8"
+#define NID_aes_192_cfb8                654
+
+#define SN_aes_256_cfb8         "AES-256-CFB8"
+#define LN_aes_256_cfb8         "aes-256-cfb8"
+#define NID_aes_256_cfb8                655
+
+#define SN_aes_128_ctr          "AES-128-CTR"
+#define LN_aes_128_ctr          "aes-128-ctr"
+#define NID_aes_128_ctr         904
+
+#define SN_aes_192_ctr          "AES-192-CTR"
+#define LN_aes_192_ctr          "aes-192-ctr"
+#define NID_aes_192_ctr         905
+
+#define SN_aes_256_ctr          "AES-256-CTR"
+#define LN_aes_256_ctr          "aes-256-ctr"
+#define NID_aes_256_ctr         906
+
+#define SN_aes_128_ocb          "AES-128-OCB"
+#define LN_aes_128_ocb          "aes-128-ocb"
+#define NID_aes_128_ocb         958
+
+#define SN_aes_192_ocb          "AES-192-OCB"
+#define LN_aes_192_ocb          "aes-192-ocb"
+#define NID_aes_192_ocb         959
+
+#define SN_aes_256_ocb          "AES-256-OCB"
+#define LN_aes_256_ocb          "aes-256-ocb"
+#define NID_aes_256_ocb         960
+
+#define SN_des_cfb1             "DES-CFB1"
+#define LN_des_cfb1             "des-cfb1"
+#define NID_des_cfb1            656
+
+#define SN_des_cfb8             "DES-CFB8"
+#define LN_des_cfb8             "des-cfb8"
+#define NID_des_cfb8            657
+
+#define SN_des_ede3_cfb1                "DES-EDE3-CFB1"
+#define LN_des_ede3_cfb1                "des-ede3-cfb1"
+#define NID_des_ede3_cfb1               658
+
+#define SN_des_ede3_cfb8                "DES-EDE3-CFB8"
+#define LN_des_ede3_cfb8                "des-ede3-cfb8"
+#define NID_des_ede3_cfb8               659
+
+#define OBJ_nist_hashalgs               OBJ_nistAlgorithms,2L
+
+#define SN_sha256               "SHA256"
+#define LN_sha256               "sha256"
+#define NID_sha256              672
+#define OBJ_sha256              OBJ_nist_hashalgs,1L
+
+#define SN_sha384               "SHA384"
+#define LN_sha384               "sha384"
+#define NID_sha384              673
+#define OBJ_sha384              OBJ_nist_hashalgs,2L
+
+#define SN_sha512               "SHA512"
+#define LN_sha512               "sha512"
+#define NID_sha512              674
+#define OBJ_sha512              OBJ_nist_hashalgs,3L
+
+#define SN_sha224               "SHA224"
+#define LN_sha224               "sha224"
+#define NID_sha224              675
+#define OBJ_sha224              OBJ_nist_hashalgs,4L
+
+#define SN_sha512_224           "SHA512-224"
+#define LN_sha512_224           "sha512-224"
+#define NID_sha512_224          1094
+#define OBJ_sha512_224          OBJ_nist_hashalgs,5L
+
+#define SN_sha512_256           "SHA512-256"
+#define LN_sha512_256           "sha512-256"
+#define NID_sha512_256          1095
+#define OBJ_sha512_256          OBJ_nist_hashalgs,6L
+
+#define SN_sha3_224             "SHA3-224"
+#define LN_sha3_224             "sha3-224"
+#define NID_sha3_224            1096
+#define OBJ_sha3_224            OBJ_nist_hashalgs,7L
+
+#define SN_sha3_256             "SHA3-256"
+#define LN_sha3_256             "sha3-256"
+#define NID_sha3_256            1097
+#define OBJ_sha3_256            OBJ_nist_hashalgs,8L
+
+#define SN_sha3_384             "SHA3-384"
+#define LN_sha3_384             "sha3-384"
+#define NID_sha3_384            1098
+#define OBJ_sha3_384            OBJ_nist_hashalgs,9L
+
+#define SN_sha3_512             "SHA3-512"
+#define LN_sha3_512             "sha3-512"
+#define NID_sha3_512            1099
+#define OBJ_sha3_512            OBJ_nist_hashalgs,10L
+
+#define SN_shake128             "SHAKE128"
+#define LN_shake128             "shake128"
+#define NID_shake128            1100
+#define OBJ_shake128            OBJ_nist_hashalgs,11L
+
+#define SN_shake256             "SHAKE256"
+#define LN_shake256             "shake256"
+#define NID_shake256            1101
+#define OBJ_shake256            OBJ_nist_hashalgs,12L
+
+#define SN_hmac_sha3_224                "id-hmacWithSHA3-224"
+#define LN_hmac_sha3_224                "hmac-sha3-224"
+#define NID_hmac_sha3_224               1102
+#define OBJ_hmac_sha3_224               OBJ_nist_hashalgs,13L
+
+#define SN_hmac_sha3_256                "id-hmacWithSHA3-256"
+#define LN_hmac_sha3_256                "hmac-sha3-256"
+#define NID_hmac_sha3_256               1103
+#define OBJ_hmac_sha3_256               OBJ_nist_hashalgs,14L
+
+#define SN_hmac_sha3_384                "id-hmacWithSHA3-384"
+#define LN_hmac_sha3_384                "hmac-sha3-384"
+#define NID_hmac_sha3_384               1104
+#define OBJ_hmac_sha3_384               OBJ_nist_hashalgs,15L
+
+#define SN_hmac_sha3_512                "id-hmacWithSHA3-512"
+#define LN_hmac_sha3_512                "hmac-sha3-512"
+#define NID_hmac_sha3_512               1105
+#define OBJ_hmac_sha3_512               OBJ_nist_hashalgs,16L
+
+#define OBJ_dsa_with_sha2               OBJ_nistAlgorithms,3L
+
+#define SN_dsa_with_SHA224              "dsa_with_SHA224"
+#define NID_dsa_with_SHA224             802
+#define OBJ_dsa_with_SHA224             OBJ_dsa_with_sha2,1L
+
+#define SN_dsa_with_SHA256              "dsa_with_SHA256"
+#define NID_dsa_with_SHA256             803
+#define OBJ_dsa_with_SHA256             OBJ_dsa_with_sha2,2L
+
+#define OBJ_sigAlgs             OBJ_nistAlgorithms,3L
+
+#define SN_dsa_with_SHA384              "id-dsa-with-sha384"
+#define LN_dsa_with_SHA384              "dsa_with_SHA384"
+#define NID_dsa_with_SHA384             1106
+#define OBJ_dsa_with_SHA384             OBJ_sigAlgs,3L
+
+#define SN_dsa_with_SHA512              "id-dsa-with-sha512"
+#define LN_dsa_with_SHA512              "dsa_with_SHA512"
+#define NID_dsa_with_SHA512             1107
+#define OBJ_dsa_with_SHA512             OBJ_sigAlgs,4L
+
+#define SN_dsa_with_SHA3_224            "id-dsa-with-sha3-224"
+#define LN_dsa_with_SHA3_224            "dsa_with_SHA3-224"
+#define NID_dsa_with_SHA3_224           1108
+#define OBJ_dsa_with_SHA3_224           OBJ_sigAlgs,5L
+
+#define SN_dsa_with_SHA3_256            "id-dsa-with-sha3-256"
+#define LN_dsa_with_SHA3_256            "dsa_with_SHA3-256"
+#define NID_dsa_with_SHA3_256           1109
+#define OBJ_dsa_with_SHA3_256           OBJ_sigAlgs,6L
+
+#define SN_dsa_with_SHA3_384            "id-dsa-with-sha3-384"
+#define LN_dsa_with_SHA3_384            "dsa_with_SHA3-384"
+#define NID_dsa_with_SHA3_384           1110
+#define OBJ_dsa_with_SHA3_384           OBJ_sigAlgs,7L
+
+#define SN_dsa_with_SHA3_512            "id-dsa-with-sha3-512"
+#define LN_dsa_with_SHA3_512            "dsa_with_SHA3-512"
+#define NID_dsa_with_SHA3_512           1111
+#define OBJ_dsa_with_SHA3_512           OBJ_sigAlgs,8L
+
+#define SN_ecdsa_with_SHA3_224          "id-ecdsa-with-sha3-224"
+#define LN_ecdsa_with_SHA3_224          "ecdsa_with_SHA3-224"
+#define NID_ecdsa_with_SHA3_224         1112
+#define OBJ_ecdsa_with_SHA3_224         OBJ_sigAlgs,9L
+
+#define SN_ecdsa_with_SHA3_256          "id-ecdsa-with-sha3-256"
+#define LN_ecdsa_with_SHA3_256          "ecdsa_with_SHA3-256"
+#define NID_ecdsa_with_SHA3_256         1113
+#define OBJ_ecdsa_with_SHA3_256         OBJ_sigAlgs,10L
+
+#define SN_ecdsa_with_SHA3_384          "id-ecdsa-with-sha3-384"
+#define LN_ecdsa_with_SHA3_384          "ecdsa_with_SHA3-384"
+#define NID_ecdsa_with_SHA3_384         1114
+#define OBJ_ecdsa_with_SHA3_384         OBJ_sigAlgs,11L
+
+#define SN_ecdsa_with_SHA3_512          "id-ecdsa-with-sha3-512"
+#define LN_ecdsa_with_SHA3_512          "ecdsa_with_SHA3-512"
+#define NID_ecdsa_with_SHA3_512         1115
+#define OBJ_ecdsa_with_SHA3_512         OBJ_sigAlgs,12L
+
+#define SN_RSA_SHA3_224         "id-rsassa-pkcs1-v1_5-with-sha3-224"
+#define LN_RSA_SHA3_224         "RSA-SHA3-224"
+#define NID_RSA_SHA3_224                1116
+#define OBJ_RSA_SHA3_224                OBJ_sigAlgs,13L
+
+#define SN_RSA_SHA3_256         "id-rsassa-pkcs1-v1_5-with-sha3-256"
+#define LN_RSA_SHA3_256         "RSA-SHA3-256"
+#define NID_RSA_SHA3_256                1117
+#define OBJ_RSA_SHA3_256                OBJ_sigAlgs,14L
+
+#define SN_RSA_SHA3_384         "id-rsassa-pkcs1-v1_5-with-sha3-384"
+#define LN_RSA_SHA3_384         "RSA-SHA3-384"
+#define NID_RSA_SHA3_384                1118
+#define OBJ_RSA_SHA3_384                OBJ_sigAlgs,15L
+
+#define SN_RSA_SHA3_512         "id-rsassa-pkcs1-v1_5-with-sha3-512"
+#define LN_RSA_SHA3_512         "RSA-SHA3-512"
+#define NID_RSA_SHA3_512                1119
+#define OBJ_RSA_SHA3_512                OBJ_sigAlgs,16L
+
+#define SN_hold_instruction_code                "holdInstructionCode"
+#define LN_hold_instruction_code                "Hold Instruction Code"
+#define NID_hold_instruction_code               430
+#define OBJ_hold_instruction_code               OBJ_id_ce,23L
+
+#define OBJ_holdInstruction             OBJ_X9_57,2L
+
+#define SN_hold_instruction_none                "holdInstructionNone"
+#define LN_hold_instruction_none                "Hold Instruction None"
+#define NID_hold_instruction_none               431
+#define OBJ_hold_instruction_none               OBJ_holdInstruction,1L
+
+#define SN_hold_instruction_call_issuer         "holdInstructionCallIssuer"
+#define LN_hold_instruction_call_issuer         "Hold Instruction Call Issuer"
+#define NID_hold_instruction_call_issuer                432
+#define OBJ_hold_instruction_call_issuer                OBJ_holdInstruction,2L
+
+#define SN_hold_instruction_reject              "holdInstructionReject"
+#define LN_hold_instruction_reject              "Hold Instruction Reject"
+#define NID_hold_instruction_reject             433
+#define OBJ_hold_instruction_reject             OBJ_holdInstruction,3L
+
+#define SN_data         "data"
+#define NID_data                434
+#define OBJ_data                OBJ_itu_t,9L
+
+#define SN_pss          "pss"
+#define NID_pss         435
+#define OBJ_pss         OBJ_data,2342L
+
+#define SN_ucl          "ucl"
+#define NID_ucl         436
+#define OBJ_ucl         OBJ_pss,19200300L
+
+#define SN_pilot                "pilot"
+#define NID_pilot               437
+#define OBJ_pilot               OBJ_ucl,100L
+
+#define LN_pilotAttributeType           "pilotAttributeType"
+#define NID_pilotAttributeType          438
+#define OBJ_pilotAttributeType          OBJ_pilot,1L
+
+#define LN_pilotAttributeSyntax         "pilotAttributeSyntax"
+#define NID_pilotAttributeSyntax                439
+#define OBJ_pilotAttributeSyntax                OBJ_pilot,3L
+
+#define LN_pilotObjectClass             "pilotObjectClass"
+#define NID_pilotObjectClass            440
+#define OBJ_pilotObjectClass            OBJ_pilot,4L
+
+#define LN_pilotGroups          "pilotGroups"
+#define NID_pilotGroups         441
+#define OBJ_pilotGroups         OBJ_pilot,10L
+
+#define LN_iA5StringSyntax              "iA5StringSyntax"
+#define NID_iA5StringSyntax             442
+#define OBJ_iA5StringSyntax             OBJ_pilotAttributeSyntax,4L
+
+#define LN_caseIgnoreIA5StringSyntax            "caseIgnoreIA5StringSyntax"
+#define NID_caseIgnoreIA5StringSyntax           443
+#define OBJ_caseIgnoreIA5StringSyntax           OBJ_pilotAttributeSyntax,5L
+
+#define LN_pilotObject          "pilotObject"
+#define NID_pilotObject         444
+#define OBJ_pilotObject         OBJ_pilotObjectClass,3L
+
+#define LN_pilotPerson          "pilotPerson"
+#define NID_pilotPerson         445
+#define OBJ_pilotPerson         OBJ_pilotObjectClass,4L
+
+#define SN_account              "account"
+#define NID_account             446
+#define OBJ_account             OBJ_pilotObjectClass,5L
+
+#define SN_document             "document"
+#define NID_document            447
+#define OBJ_document            OBJ_pilotObjectClass,6L
+
+#define SN_room         "room"
+#define NID_room                448
+#define OBJ_room                OBJ_pilotObjectClass,7L
+
+#define LN_documentSeries               "documentSeries"
+#define NID_documentSeries              449
+#define OBJ_documentSeries              OBJ_pilotObjectClass,9L
+
+#define SN_Domain               "domain"
+#define LN_Domain               "Domain"
+#define NID_Domain              392
+#define OBJ_Domain              OBJ_pilotObjectClass,13L
+
+#define LN_rFC822localPart              "rFC822localPart"
+#define NID_rFC822localPart             450
+#define OBJ_rFC822localPart             OBJ_pilotObjectClass,14L
+
+#define LN_dNSDomain            "dNSDomain"
+#define NID_dNSDomain           451
+#define OBJ_dNSDomain           OBJ_pilotObjectClass,15L
+
+#define LN_domainRelatedObject          "domainRelatedObject"
+#define NID_domainRelatedObject         452
+#define OBJ_domainRelatedObject         OBJ_pilotObjectClass,17L
+
+#define LN_friendlyCountry              "friendlyCountry"
+#define NID_friendlyCountry             453
+#define OBJ_friendlyCountry             OBJ_pilotObjectClass,18L
+
+#define LN_simpleSecurityObject         "simpleSecurityObject"
+#define NID_simpleSecurityObject                454
+#define OBJ_simpleSecurityObject                OBJ_pilotObjectClass,19L
+
+#define LN_pilotOrganization            "pilotOrganization"
+#define NID_pilotOrganization           455
+#define OBJ_pilotOrganization           OBJ_pilotObjectClass,20L
+
+#define LN_pilotDSA             "pilotDSA"
+#define NID_pilotDSA            456
+#define OBJ_pilotDSA            OBJ_pilotObjectClass,21L
+
+#define LN_qualityLabelledData          "qualityLabelledData"
+#define NID_qualityLabelledData         457
+#define OBJ_qualityLabelledData         OBJ_pilotObjectClass,22L
+
+#define SN_userId               "UID"
+#define LN_userId               "userId"
+#define NID_userId              458
+#define OBJ_userId              OBJ_pilotAttributeType,1L
+
+#define LN_textEncodedORAddress         "textEncodedORAddress"
+#define NID_textEncodedORAddress                459
+#define OBJ_textEncodedORAddress                OBJ_pilotAttributeType,2L
+
+#define SN_rfc822Mailbox                "mail"
+#define LN_rfc822Mailbox                "rfc822Mailbox"
+#define NID_rfc822Mailbox               460
+#define OBJ_rfc822Mailbox               OBJ_pilotAttributeType,3L
+
+#define SN_info         "info"
+#define NID_info                461
+#define OBJ_info                OBJ_pilotAttributeType,4L
+
+#define LN_favouriteDrink               "favouriteDrink"
+#define NID_favouriteDrink              462
+#define OBJ_favouriteDrink              OBJ_pilotAttributeType,5L
+
+#define LN_roomNumber           "roomNumber"
+#define NID_roomNumber          463
+#define OBJ_roomNumber          OBJ_pilotAttributeType,6L
+
+#define SN_photo                "photo"
+#define NID_photo               464
+#define OBJ_photo               OBJ_pilotAttributeType,7L
+
+#define LN_userClass            "userClass"
+#define NID_userClass           465
+#define OBJ_userClass           OBJ_pilotAttributeType,8L
+
+#define SN_host         "host"
+#define NID_host                466
+#define OBJ_host                OBJ_pilotAttributeType,9L
+
+#define SN_manager              "manager"
+#define NID_manager             467
+#define OBJ_manager             OBJ_pilotAttributeType,10L
+
+#define LN_documentIdentifier           "documentIdentifier"
+#define NID_documentIdentifier          468
+#define OBJ_documentIdentifier          OBJ_pilotAttributeType,11L
+
+#define LN_documentTitle                "documentTitle"
+#define NID_documentTitle               469
+#define OBJ_documentTitle               OBJ_pilotAttributeType,12L
+
+#define LN_documentVersion              "documentVersion"
+#define NID_documentVersion             470
+#define OBJ_documentVersion             OBJ_pilotAttributeType,13L
+
+#define LN_documentAuthor               "documentAuthor"
+#define NID_documentAuthor              471
+#define OBJ_documentAuthor              OBJ_pilotAttributeType,14L
+
+#define LN_documentLocation             "documentLocation"
+#define NID_documentLocation            472
+#define OBJ_documentLocation            OBJ_pilotAttributeType,15L
+
+#define LN_homeTelephoneNumber          "homeTelephoneNumber"
+#define NID_homeTelephoneNumber         473
+#define OBJ_homeTelephoneNumber         OBJ_pilotAttributeType,20L
+
+#define SN_secretary            "secretary"
+#define NID_secretary           474
+#define OBJ_secretary           OBJ_pilotAttributeType,21L
+
+#define LN_otherMailbox         "otherMailbox"
+#define NID_otherMailbox                475
+#define OBJ_otherMailbox                OBJ_pilotAttributeType,22L
+
+#define LN_lastModifiedTime             "lastModifiedTime"
+#define NID_lastModifiedTime            476
+#define OBJ_lastModifiedTime            OBJ_pilotAttributeType,23L
+
+#define LN_lastModifiedBy               "lastModifiedBy"
+#define NID_lastModifiedBy              477
+#define OBJ_lastModifiedBy              OBJ_pilotAttributeType,24L
+
+#define SN_domainComponent              "DC"
+#define LN_domainComponent              "domainComponent"
+#define NID_domainComponent             391
+#define OBJ_domainComponent             OBJ_pilotAttributeType,25L
+
+#define LN_aRecord              "aRecord"
+#define NID_aRecord             478
+#define OBJ_aRecord             OBJ_pilotAttributeType,26L
+
+#define LN_pilotAttributeType27         "pilotAttributeType27"
+#define NID_pilotAttributeType27                479
+#define OBJ_pilotAttributeType27                OBJ_pilotAttributeType,27L
+
+#define LN_mXRecord             "mXRecord"
+#define NID_mXRecord            480
+#define OBJ_mXRecord            OBJ_pilotAttributeType,28L
+
+#define LN_nSRecord             "nSRecord"
+#define NID_nSRecord            481
+#define OBJ_nSRecord            OBJ_pilotAttributeType,29L
+
+#define LN_sOARecord            "sOARecord"
+#define NID_sOARecord           482
+#define OBJ_sOARecord           OBJ_pilotAttributeType,30L
+
+#define LN_cNAMERecord          "cNAMERecord"
+#define NID_cNAMERecord         483
+#define OBJ_cNAMERecord         OBJ_pilotAttributeType,31L
+
+#define LN_associatedDomain             "associatedDomain"
+#define NID_associatedDomain            484
+#define OBJ_associatedDomain            OBJ_pilotAttributeType,37L
+
+#define LN_associatedName               "associatedName"
+#define NID_associatedName              485
+#define OBJ_associatedName              OBJ_pilotAttributeType,38L
+
+#define LN_homePostalAddress            "homePostalAddress"
+#define NID_homePostalAddress           486
+#define OBJ_homePostalAddress           OBJ_pilotAttributeType,39L
+
+#define LN_personalTitle                "personalTitle"
+#define NID_personalTitle               487
+#define OBJ_personalTitle               OBJ_pilotAttributeType,40L
+
+#define LN_mobileTelephoneNumber                "mobileTelephoneNumber"
+#define NID_mobileTelephoneNumber               488
+#define OBJ_mobileTelephoneNumber               OBJ_pilotAttributeType,41L
+
+#define LN_pagerTelephoneNumber         "pagerTelephoneNumber"
+#define NID_pagerTelephoneNumber                489
+#define OBJ_pagerTelephoneNumber                OBJ_pilotAttributeType,42L
+
+#define LN_friendlyCountryName          "friendlyCountryName"
+#define NID_friendlyCountryName         490
+#define OBJ_friendlyCountryName         OBJ_pilotAttributeType,43L
+
+#define SN_uniqueIdentifier             "uid"
+#define LN_uniqueIdentifier             "uniqueIdentifier"
+#define NID_uniqueIdentifier            102
+#define OBJ_uniqueIdentifier            OBJ_pilotAttributeType,44L
+
+#define LN_organizationalStatus         "organizationalStatus"
+#define NID_organizationalStatus                491
+#define OBJ_organizationalStatus                OBJ_pilotAttributeType,45L
+
+#define LN_janetMailbox         "janetMailbox"
+#define NID_janetMailbox                492
+#define OBJ_janetMailbox                OBJ_pilotAttributeType,46L
+
+#define LN_mailPreferenceOption         "mailPreferenceOption"
+#define NID_mailPreferenceOption                493
+#define OBJ_mailPreferenceOption                OBJ_pilotAttributeType,47L
+
+#define LN_buildingName         "buildingName"
+#define NID_buildingName                494
+#define OBJ_buildingName                OBJ_pilotAttributeType,48L
+
+#define LN_dSAQuality           "dSAQuality"
+#define NID_dSAQuality          495
+#define OBJ_dSAQuality          OBJ_pilotAttributeType,49L
+
+#define LN_singleLevelQuality           "singleLevelQuality"
+#define NID_singleLevelQuality          496
+#define OBJ_singleLevelQuality          OBJ_pilotAttributeType,50L
+
+#define LN_subtreeMinimumQuality                "subtreeMinimumQuality"
+#define NID_subtreeMinimumQuality               497
+#define OBJ_subtreeMinimumQuality               OBJ_pilotAttributeType,51L
+
+#define LN_subtreeMaximumQuality                "subtreeMaximumQuality"
+#define NID_subtreeMaximumQuality               498
+#define OBJ_subtreeMaximumQuality               OBJ_pilotAttributeType,52L
+
+#define LN_personalSignature            "personalSignature"
+#define NID_personalSignature           499
+#define OBJ_personalSignature           OBJ_pilotAttributeType,53L
+
+#define LN_dITRedirect          "dITRedirect"
+#define NID_dITRedirect         500
+#define OBJ_dITRedirect         OBJ_pilotAttributeType,54L
+
+#define SN_audio                "audio"
+#define NID_audio               501
+#define OBJ_audio               OBJ_pilotAttributeType,55L
+
+#define LN_documentPublisher            "documentPublisher"
+#define NID_documentPublisher           502
+#define OBJ_documentPublisher           OBJ_pilotAttributeType,56L
+
+#define SN_id_set               "id-set"
+#define LN_id_set               "Secure Electronic Transactions"
+#define NID_id_set              512
+#define OBJ_id_set              OBJ_international_organizations,42L
+
+#define SN_set_ctype            "set-ctype"
+#define LN_set_ctype            "content types"
+#define NID_set_ctype           513
+#define OBJ_set_ctype           OBJ_id_set,0L
+
+#define SN_set_msgExt           "set-msgExt"
+#define LN_set_msgExt           "message extensions"
+#define NID_set_msgExt          514
+#define OBJ_set_msgExt          OBJ_id_set,1L
+
+#define SN_set_attr             "set-attr"
+#define NID_set_attr            515
+#define OBJ_set_attr            OBJ_id_set,3L
+
+#define SN_set_policy           "set-policy"
+#define NID_set_policy          516
+#define OBJ_set_policy          OBJ_id_set,5L
+
+#define SN_set_certExt          "set-certExt"
+#define LN_set_certExt          "certificate extensions"
+#define NID_set_certExt         517
+#define OBJ_set_certExt         OBJ_id_set,7L
+
+#define SN_set_brand            "set-brand"
+#define NID_set_brand           518
+#define OBJ_set_brand           OBJ_id_set,8L
+
+#define SN_setct_PANData                "setct-PANData"
+#define NID_setct_PANData               519
+#define OBJ_setct_PANData               OBJ_set_ctype,0L
+
+#define SN_setct_PANToken               "setct-PANToken"
+#define NID_setct_PANToken              520
+#define OBJ_setct_PANToken              OBJ_set_ctype,1L
+
+#define SN_setct_PANOnly                "setct-PANOnly"
+#define NID_setct_PANOnly               521
+#define OBJ_setct_PANOnly               OBJ_set_ctype,2L
+
+#define SN_setct_OIData         "setct-OIData"
+#define NID_setct_OIData                522
+#define OBJ_setct_OIData                OBJ_set_ctype,3L
+
+#define SN_setct_PI             "setct-PI"
+#define NID_setct_PI            523
+#define OBJ_setct_PI            OBJ_set_ctype,4L
+
+#define SN_setct_PIData         "setct-PIData"
+#define NID_setct_PIData                524
+#define OBJ_setct_PIData                OBJ_set_ctype,5L
+
+#define SN_setct_PIDataUnsigned         "setct-PIDataUnsigned"
+#define NID_setct_PIDataUnsigned                525
+#define OBJ_setct_PIDataUnsigned                OBJ_set_ctype,6L
+
+#define SN_setct_HODInput               "setct-HODInput"
+#define NID_setct_HODInput              526
+#define OBJ_setct_HODInput              OBJ_set_ctype,7L
+
+#define SN_setct_AuthResBaggage         "setct-AuthResBaggage"
+#define NID_setct_AuthResBaggage                527
+#define OBJ_setct_AuthResBaggage                OBJ_set_ctype,8L
+
+#define SN_setct_AuthRevReqBaggage              "setct-AuthRevReqBaggage"
+#define NID_setct_AuthRevReqBaggage             528
+#define OBJ_setct_AuthRevReqBaggage             OBJ_set_ctype,9L
+
+#define SN_setct_AuthRevResBaggage              "setct-AuthRevResBaggage"
+#define NID_setct_AuthRevResBaggage             529
+#define OBJ_setct_AuthRevResBaggage             OBJ_set_ctype,10L
+
+#define SN_setct_CapTokenSeq            "setct-CapTokenSeq"
+#define NID_setct_CapTokenSeq           530
+#define OBJ_setct_CapTokenSeq           OBJ_set_ctype,11L
+
+#define SN_setct_PInitResData           "setct-PInitResData"
+#define NID_setct_PInitResData          531
+#define OBJ_setct_PInitResData          OBJ_set_ctype,12L
+
+#define SN_setct_PI_TBS         "setct-PI-TBS"
+#define NID_setct_PI_TBS                532
+#define OBJ_setct_PI_TBS                OBJ_set_ctype,13L
+
+#define SN_setct_PResData               "setct-PResData"
+#define NID_setct_PResData              533
+#define OBJ_setct_PResData              OBJ_set_ctype,14L
+
+#define SN_setct_AuthReqTBS             "setct-AuthReqTBS"
+#define NID_setct_AuthReqTBS            534
+#define OBJ_setct_AuthReqTBS            OBJ_set_ctype,16L
+
+#define SN_setct_AuthResTBS             "setct-AuthResTBS"
+#define NID_setct_AuthResTBS            535
+#define OBJ_setct_AuthResTBS            OBJ_set_ctype,17L
+
+#define SN_setct_AuthResTBSX            "setct-AuthResTBSX"
+#define NID_setct_AuthResTBSX           536
+#define OBJ_setct_AuthResTBSX           OBJ_set_ctype,18L
+
+#define SN_setct_AuthTokenTBS           "setct-AuthTokenTBS"
+#define NID_setct_AuthTokenTBS          537
+#define OBJ_setct_AuthTokenTBS          OBJ_set_ctype,19L
+
+#define SN_setct_CapTokenData           "setct-CapTokenData"
+#define NID_setct_CapTokenData          538
+#define OBJ_setct_CapTokenData          OBJ_set_ctype,20L
+
+#define SN_setct_CapTokenTBS            "setct-CapTokenTBS"
+#define NID_setct_CapTokenTBS           539
+#define OBJ_setct_CapTokenTBS           OBJ_set_ctype,21L
+
+#define SN_setct_AcqCardCodeMsg         "setct-AcqCardCodeMsg"
+#define NID_setct_AcqCardCodeMsg                540
+#define OBJ_setct_AcqCardCodeMsg                OBJ_set_ctype,22L
+
+#define SN_setct_AuthRevReqTBS          "setct-AuthRevReqTBS"
+#define NID_setct_AuthRevReqTBS         541
+#define OBJ_setct_AuthRevReqTBS         OBJ_set_ctype,23L
+
+#define SN_setct_AuthRevResData         "setct-AuthRevResData"
+#define NID_setct_AuthRevResData                542
+#define OBJ_setct_AuthRevResData                OBJ_set_ctype,24L
+
+#define SN_setct_AuthRevResTBS          "setct-AuthRevResTBS"
+#define NID_setct_AuthRevResTBS         543
+#define OBJ_setct_AuthRevResTBS         OBJ_set_ctype,25L
+
+#define SN_setct_CapReqTBS              "setct-CapReqTBS"
+#define NID_setct_CapReqTBS             544
+#define OBJ_setct_CapReqTBS             OBJ_set_ctype,26L
+
+#define SN_setct_CapReqTBSX             "setct-CapReqTBSX"
+#define NID_setct_CapReqTBSX            545
+#define OBJ_setct_CapReqTBSX            OBJ_set_ctype,27L
+
+#define SN_setct_CapResData             "setct-CapResData"
+#define NID_setct_CapResData            546
+#define OBJ_setct_CapResData            OBJ_set_ctype,28L
+
+#define SN_setct_CapRevReqTBS           "setct-CapRevReqTBS"
+#define NID_setct_CapRevReqTBS          547
+#define OBJ_setct_CapRevReqTBS          OBJ_set_ctype,29L
+
+#define SN_setct_CapRevReqTBSX          "setct-CapRevReqTBSX"
+#define NID_setct_CapRevReqTBSX         548
+#define OBJ_setct_CapRevReqTBSX         OBJ_set_ctype,30L
+
+#define SN_setct_CapRevResData          "setct-CapRevResData"
+#define NID_setct_CapRevResData         549
+#define OBJ_setct_CapRevResData         OBJ_set_ctype,31L
+
+#define SN_setct_CredReqTBS             "setct-CredReqTBS"
+#define NID_setct_CredReqTBS            550
+#define OBJ_setct_CredReqTBS            OBJ_set_ctype,32L
+
+#define SN_setct_CredReqTBSX            "setct-CredReqTBSX"
+#define NID_setct_CredReqTBSX           551
+#define OBJ_setct_CredReqTBSX           OBJ_set_ctype,33L
+
+#define SN_setct_CredResData            "setct-CredResData"
+#define NID_setct_CredResData           552
+#define OBJ_setct_CredResData           OBJ_set_ctype,34L
+
+#define SN_setct_CredRevReqTBS          "setct-CredRevReqTBS"
+#define NID_setct_CredRevReqTBS         553
+#define OBJ_setct_CredRevReqTBS         OBJ_set_ctype,35L
+
+#define SN_setct_CredRevReqTBSX         "setct-CredRevReqTBSX"
+#define NID_setct_CredRevReqTBSX                554
+#define OBJ_setct_CredRevReqTBSX                OBJ_set_ctype,36L
+
+#define SN_setct_CredRevResData         "setct-CredRevResData"
+#define NID_setct_CredRevResData                555
+#define OBJ_setct_CredRevResData                OBJ_set_ctype,37L
+
+#define SN_setct_PCertReqData           "setct-PCertReqData"
+#define NID_setct_PCertReqData          556
+#define OBJ_setct_PCertReqData          OBJ_set_ctype,38L
+
+#define SN_setct_PCertResTBS            "setct-PCertResTBS"
+#define NID_setct_PCertResTBS           557
+#define OBJ_setct_PCertResTBS           OBJ_set_ctype,39L
+
+#define SN_setct_BatchAdminReqData              "setct-BatchAdminReqData"
+#define NID_setct_BatchAdminReqData             558
+#define OBJ_setct_BatchAdminReqData             OBJ_set_ctype,40L
+
+#define SN_setct_BatchAdminResData              "setct-BatchAdminResData"
+#define NID_setct_BatchAdminResData             559
+#define OBJ_setct_BatchAdminResData             OBJ_set_ctype,41L
+
+#define SN_setct_CardCInitResTBS                "setct-CardCInitResTBS"
+#define NID_setct_CardCInitResTBS               560
+#define OBJ_setct_CardCInitResTBS               OBJ_set_ctype,42L
+
+#define SN_setct_MeAqCInitResTBS                "setct-MeAqCInitResTBS"
+#define NID_setct_MeAqCInitResTBS               561
+#define OBJ_setct_MeAqCInitResTBS               OBJ_set_ctype,43L
+
+#define SN_setct_RegFormResTBS          "setct-RegFormResTBS"
+#define NID_setct_RegFormResTBS         562
+#define OBJ_setct_RegFormResTBS         OBJ_set_ctype,44L
+
+#define SN_setct_CertReqData            "setct-CertReqData"
+#define NID_setct_CertReqData           563
+#define OBJ_setct_CertReqData           OBJ_set_ctype,45L
+
+#define SN_setct_CertReqTBS             "setct-CertReqTBS"
+#define NID_setct_CertReqTBS            564
+#define OBJ_setct_CertReqTBS            OBJ_set_ctype,46L
+
+#define SN_setct_CertResData            "setct-CertResData"
+#define NID_setct_CertResData           565
+#define OBJ_setct_CertResData           OBJ_set_ctype,47L
+
+#define SN_setct_CertInqReqTBS          "setct-CertInqReqTBS"
+#define NID_setct_CertInqReqTBS         566
+#define OBJ_setct_CertInqReqTBS         OBJ_set_ctype,48L
+
+#define SN_setct_ErrorTBS               "setct-ErrorTBS"
+#define NID_setct_ErrorTBS              567
+#define OBJ_setct_ErrorTBS              OBJ_set_ctype,49L
+
+#define SN_setct_PIDualSignedTBE                "setct-PIDualSignedTBE"
+#define NID_setct_PIDualSignedTBE               568
+#define OBJ_setct_PIDualSignedTBE               OBJ_set_ctype,50L
+
+#define SN_setct_PIUnsignedTBE          "setct-PIUnsignedTBE"
+#define NID_setct_PIUnsignedTBE         569
+#define OBJ_setct_PIUnsignedTBE         OBJ_set_ctype,51L
+
+#define SN_setct_AuthReqTBE             "setct-AuthReqTBE"
+#define NID_setct_AuthReqTBE            570
+#define OBJ_setct_AuthReqTBE            OBJ_set_ctype,52L
+
+#define SN_setct_AuthResTBE             "setct-AuthResTBE"
+#define NID_setct_AuthResTBE            571
+#define OBJ_setct_AuthResTBE            OBJ_set_ctype,53L
+
+#define SN_setct_AuthResTBEX            "setct-AuthResTBEX"
+#define NID_setct_AuthResTBEX           572
+#define OBJ_setct_AuthResTBEX           OBJ_set_ctype,54L
+
+#define SN_setct_AuthTokenTBE           "setct-AuthTokenTBE"
+#define NID_setct_AuthTokenTBE          573
+#define OBJ_setct_AuthTokenTBE          OBJ_set_ctype,55L
+
+#define SN_setct_CapTokenTBE            "setct-CapTokenTBE"
+#define NID_setct_CapTokenTBE           574
+#define OBJ_setct_CapTokenTBE           OBJ_set_ctype,56L
+
+#define SN_setct_CapTokenTBEX           "setct-CapTokenTBEX"
+#define NID_setct_CapTokenTBEX          575
+#define OBJ_setct_CapTokenTBEX          OBJ_set_ctype,57L
+
+#define SN_setct_AcqCardCodeMsgTBE              "setct-AcqCardCodeMsgTBE"
+#define NID_setct_AcqCardCodeMsgTBE             576
+#define OBJ_setct_AcqCardCodeMsgTBE             OBJ_set_ctype,58L
+
+#define SN_setct_AuthRevReqTBE          "setct-AuthRevReqTBE"
+#define NID_setct_AuthRevReqTBE         577
+#define OBJ_setct_AuthRevReqTBE         OBJ_set_ctype,59L
+
+#define SN_setct_AuthRevResTBE          "setct-AuthRevResTBE"
+#define NID_setct_AuthRevResTBE         578
+#define OBJ_setct_AuthRevResTBE         OBJ_set_ctype,60L
+
+#define SN_setct_AuthRevResTBEB         "setct-AuthRevResTBEB"
+#define NID_setct_AuthRevResTBEB                579
+#define OBJ_setct_AuthRevResTBEB                OBJ_set_ctype,61L
+
+#define SN_setct_CapReqTBE              "setct-CapReqTBE"
+#define NID_setct_CapReqTBE             580
+#define OBJ_setct_CapReqTBE             OBJ_set_ctype,62L
+
+#define SN_setct_CapReqTBEX             "setct-CapReqTBEX"
+#define NID_setct_CapReqTBEX            581
+#define OBJ_setct_CapReqTBEX            OBJ_set_ctype,63L
+
+#define SN_setct_CapResTBE              "setct-CapResTBE"
+#define NID_setct_CapResTBE             582
+#define OBJ_setct_CapResTBE             OBJ_set_ctype,64L
+
+#define SN_setct_CapRevReqTBE           "setct-CapRevReqTBE"
+#define NID_setct_CapRevReqTBE          583
+#define OBJ_setct_CapRevReqTBE          OBJ_set_ctype,65L
+
+#define SN_setct_CapRevReqTBEX          "setct-CapRevReqTBEX"
+#define NID_setct_CapRevReqTBEX         584
+#define OBJ_setct_CapRevReqTBEX         OBJ_set_ctype,66L
+
+#define SN_setct_CapRevResTBE           "setct-CapRevResTBE"
+#define NID_setct_CapRevResTBE          585
+#define OBJ_setct_CapRevResTBE          OBJ_set_ctype,67L
+
+#define SN_setct_CredReqTBE             "setct-CredReqTBE"
+#define NID_setct_CredReqTBE            586
+#define OBJ_setct_CredReqTBE            OBJ_set_ctype,68L
+
+#define SN_setct_CredReqTBEX            "setct-CredReqTBEX"
+#define NID_setct_CredReqTBEX           587
+#define OBJ_setct_CredReqTBEX           OBJ_set_ctype,69L
+
+#define SN_setct_CredResTBE             "setct-CredResTBE"
+#define NID_setct_CredResTBE            588
+#define OBJ_setct_CredResTBE            OBJ_set_ctype,70L
+
+#define SN_setct_CredRevReqTBE          "setct-CredRevReqTBE"
+#define NID_setct_CredRevReqTBE         589
+#define OBJ_setct_CredRevReqTBE         OBJ_set_ctype,71L
+
+#define SN_setct_CredRevReqTBEX         "setct-CredRevReqTBEX"
+#define NID_setct_CredRevReqTBEX                590
+#define OBJ_setct_CredRevReqTBEX                OBJ_set_ctype,72L
+
+#define SN_setct_CredRevResTBE          "setct-CredRevResTBE"
+#define NID_setct_CredRevResTBE         591
+#define OBJ_setct_CredRevResTBE         OBJ_set_ctype,73L
+
+#define SN_setct_BatchAdminReqTBE               "setct-BatchAdminReqTBE"
+#define NID_setct_BatchAdminReqTBE              592
+#define OBJ_setct_BatchAdminReqTBE              OBJ_set_ctype,74L
+
+#define SN_setct_BatchAdminResTBE               "setct-BatchAdminResTBE"
+#define NID_setct_BatchAdminResTBE              593
+#define OBJ_setct_BatchAdminResTBE              OBJ_set_ctype,75L
+
+#define SN_setct_RegFormReqTBE          "setct-RegFormReqTBE"
+#define NID_setct_RegFormReqTBE         594
+#define OBJ_setct_RegFormReqTBE         OBJ_set_ctype,76L
+
+#define SN_setct_CertReqTBE             "setct-CertReqTBE"
+#define NID_setct_CertReqTBE            595
+#define OBJ_setct_CertReqTBE            OBJ_set_ctype,77L
+
+#define SN_setct_CertReqTBEX            "setct-CertReqTBEX"
+#define NID_setct_CertReqTBEX           596
+#define OBJ_setct_CertReqTBEX           OBJ_set_ctype,78L
+
+#define SN_setct_CertResTBE             "setct-CertResTBE"
+#define NID_setct_CertResTBE            597
+#define OBJ_setct_CertResTBE            OBJ_set_ctype,79L
+
+#define SN_setct_CRLNotificationTBS             "setct-CRLNotificationTBS"
+#define NID_setct_CRLNotificationTBS            598
+#define OBJ_setct_CRLNotificationTBS            OBJ_set_ctype,80L
+
+#define SN_setct_CRLNotificationResTBS          "setct-CRLNotificationResTBS"
+#define NID_setct_CRLNotificationResTBS         599
+#define OBJ_setct_CRLNotificationResTBS         OBJ_set_ctype,81L
+
+#define SN_setct_BCIDistributionTBS             "setct-BCIDistributionTBS"
+#define NID_setct_BCIDistributionTBS            600
+#define OBJ_setct_BCIDistributionTBS            OBJ_set_ctype,82L
+
+#define SN_setext_genCrypt              "setext-genCrypt"
+#define LN_setext_genCrypt              "generic cryptogram"
+#define NID_setext_genCrypt             601
+#define OBJ_setext_genCrypt             OBJ_set_msgExt,1L
+
+#define SN_setext_miAuth                "setext-miAuth"
+#define LN_setext_miAuth                "merchant initiated auth"
+#define NID_setext_miAuth               602
+#define OBJ_setext_miAuth               OBJ_set_msgExt,3L
+
+#define SN_setext_pinSecure             "setext-pinSecure"
+#define NID_setext_pinSecure            603
+#define OBJ_setext_pinSecure            OBJ_set_msgExt,4L
+
+#define SN_setext_pinAny                "setext-pinAny"
+#define NID_setext_pinAny               604
+#define OBJ_setext_pinAny               OBJ_set_msgExt,5L
+
+#define SN_setext_track2                "setext-track2"
+#define NID_setext_track2               605
+#define OBJ_setext_track2               OBJ_set_msgExt,7L
+
+#define SN_setext_cv            "setext-cv"
+#define LN_setext_cv            "additional verification"
+#define NID_setext_cv           606
+#define OBJ_setext_cv           OBJ_set_msgExt,8L
+
+#define SN_set_policy_root              "set-policy-root"
+#define NID_set_policy_root             607
+#define OBJ_set_policy_root             OBJ_set_policy,0L
+
+#define SN_setCext_hashedRoot           "setCext-hashedRoot"
+#define NID_setCext_hashedRoot          608
+#define OBJ_setCext_hashedRoot          OBJ_set_certExt,0L
+
+#define SN_setCext_certType             "setCext-certType"
+#define NID_setCext_certType            609
+#define OBJ_setCext_certType            OBJ_set_certExt,1L
+
+#define SN_setCext_merchData            "setCext-merchData"
+#define NID_setCext_merchData           610
+#define OBJ_setCext_merchData           OBJ_set_certExt,2L
+
+#define SN_setCext_cCertRequired                "setCext-cCertRequired"
+#define NID_setCext_cCertRequired               611
+#define OBJ_setCext_cCertRequired               OBJ_set_certExt,3L
+
+#define SN_setCext_tunneling            "setCext-tunneling"
+#define NID_setCext_tunneling           612
+#define OBJ_setCext_tunneling           OBJ_set_certExt,4L
+
+#define SN_setCext_setExt               "setCext-setExt"
+#define NID_setCext_setExt              613
+#define OBJ_setCext_setExt              OBJ_set_certExt,5L
+
+#define SN_setCext_setQualf             "setCext-setQualf"
+#define NID_setCext_setQualf            614
+#define OBJ_setCext_setQualf            OBJ_set_certExt,6L
+
+#define SN_setCext_PGWYcapabilities             "setCext-PGWYcapabilities"
+#define NID_setCext_PGWYcapabilities            615
+#define OBJ_setCext_PGWYcapabilities            OBJ_set_certExt,7L
+
+#define SN_setCext_TokenIdentifier              "setCext-TokenIdentifier"
+#define NID_setCext_TokenIdentifier             616
+#define OBJ_setCext_TokenIdentifier             OBJ_set_certExt,8L
+
+#define SN_setCext_Track2Data           "setCext-Track2Data"
+#define NID_setCext_Track2Data          617
+#define OBJ_setCext_Track2Data          OBJ_set_certExt,9L
+
+#define SN_setCext_TokenType            "setCext-TokenType"
+#define NID_setCext_TokenType           618
+#define OBJ_setCext_TokenType           OBJ_set_certExt,10L
+
+#define SN_setCext_IssuerCapabilities           "setCext-IssuerCapabilities"
+#define NID_setCext_IssuerCapabilities          619
+#define OBJ_setCext_IssuerCapabilities          OBJ_set_certExt,11L
+
+#define SN_setAttr_Cert         "setAttr-Cert"
+#define NID_setAttr_Cert                620
+#define OBJ_setAttr_Cert                OBJ_set_attr,0L
+
+#define SN_setAttr_PGWYcap              "setAttr-PGWYcap"
+#define LN_setAttr_PGWYcap              "payment gateway capabilities"
+#define NID_setAttr_PGWYcap             621
+#define OBJ_setAttr_PGWYcap             OBJ_set_attr,1L
+
+#define SN_setAttr_TokenType            "setAttr-TokenType"
+#define NID_setAttr_TokenType           622
+#define OBJ_setAttr_TokenType           OBJ_set_attr,2L
+
+#define SN_setAttr_IssCap               "setAttr-IssCap"
+#define LN_setAttr_IssCap               "issuer capabilities"
+#define NID_setAttr_IssCap              623
+#define OBJ_setAttr_IssCap              OBJ_set_attr,3L
+
+#define SN_set_rootKeyThumb             "set-rootKeyThumb"
+#define NID_set_rootKeyThumb            624
+#define OBJ_set_rootKeyThumb            OBJ_setAttr_Cert,0L
+
+#define SN_set_addPolicy                "set-addPolicy"
+#define NID_set_addPolicy               625
+#define OBJ_set_addPolicy               OBJ_setAttr_Cert,1L
+
+#define SN_setAttr_Token_EMV            "setAttr-Token-EMV"
+#define NID_setAttr_Token_EMV           626
+#define OBJ_setAttr_Token_EMV           OBJ_setAttr_TokenType,1L
+
+#define SN_setAttr_Token_B0Prime                "setAttr-Token-B0Prime"
+#define NID_setAttr_Token_B0Prime               627
+#define OBJ_setAttr_Token_B0Prime               OBJ_setAttr_TokenType,2L
+
+#define SN_setAttr_IssCap_CVM           "setAttr-IssCap-CVM"
+#define NID_setAttr_IssCap_CVM          628
+#define OBJ_setAttr_IssCap_CVM          OBJ_setAttr_IssCap,3L
+
+#define SN_setAttr_IssCap_T2            "setAttr-IssCap-T2"
+#define NID_setAttr_IssCap_T2           629
+#define OBJ_setAttr_IssCap_T2           OBJ_setAttr_IssCap,4L
+
+#define SN_setAttr_IssCap_Sig           "setAttr-IssCap-Sig"
+#define NID_setAttr_IssCap_Sig          630
+#define OBJ_setAttr_IssCap_Sig          OBJ_setAttr_IssCap,5L
+
+#define SN_setAttr_GenCryptgrm          "setAttr-GenCryptgrm"
+#define LN_setAttr_GenCryptgrm          "generate cryptogram"
+#define NID_setAttr_GenCryptgrm         631
+#define OBJ_setAttr_GenCryptgrm         OBJ_setAttr_IssCap_CVM,1L
+
+#define SN_setAttr_T2Enc                "setAttr-T2Enc"
+#define LN_setAttr_T2Enc                "encrypted track 2"
+#define NID_setAttr_T2Enc               632
+#define OBJ_setAttr_T2Enc               OBJ_setAttr_IssCap_T2,1L
+
+#define SN_setAttr_T2cleartxt           "setAttr-T2cleartxt"
+#define LN_setAttr_T2cleartxt           "cleartext track 2"
+#define NID_setAttr_T2cleartxt          633
+#define OBJ_setAttr_T2cleartxt          OBJ_setAttr_IssCap_T2,2L
+
+#define SN_setAttr_TokICCsig            "setAttr-TokICCsig"
+#define LN_setAttr_TokICCsig            "ICC or token signature"
+#define NID_setAttr_TokICCsig           634
+#define OBJ_setAttr_TokICCsig           OBJ_setAttr_IssCap_Sig,1L
+
+#define SN_setAttr_SecDevSig            "setAttr-SecDevSig"
+#define LN_setAttr_SecDevSig            "secure device signature"
+#define NID_setAttr_SecDevSig           635
+#define OBJ_setAttr_SecDevSig           OBJ_setAttr_IssCap_Sig,2L
+
+#define SN_set_brand_IATA_ATA           "set-brand-IATA-ATA"
+#define NID_set_brand_IATA_ATA          636
+#define OBJ_set_brand_IATA_ATA          OBJ_set_brand,1L
+
+#define SN_set_brand_Diners             "set-brand-Diners"
+#define NID_set_brand_Diners            637
+#define OBJ_set_brand_Diners            OBJ_set_brand,30L
+
+#define SN_set_brand_AmericanExpress            "set-brand-AmericanExpress"
+#define NID_set_brand_AmericanExpress           638
+#define OBJ_set_brand_AmericanExpress           OBJ_set_brand,34L
+
+#define SN_set_brand_JCB                "set-brand-JCB"
+#define NID_set_brand_JCB               639
+#define OBJ_set_brand_JCB               OBJ_set_brand,35L
+
+#define SN_set_brand_Visa               "set-brand-Visa"
+#define NID_set_brand_Visa              640
+#define OBJ_set_brand_Visa              OBJ_set_brand,4L
+
+#define SN_set_brand_MasterCard         "set-brand-MasterCard"
+#define NID_set_brand_MasterCard                641
+#define OBJ_set_brand_MasterCard                OBJ_set_brand,5L
+
+#define SN_set_brand_Novus              "set-brand-Novus"
+#define NID_set_brand_Novus             642
+#define OBJ_set_brand_Novus             OBJ_set_brand,6011L
+
+#define SN_des_cdmf             "DES-CDMF"
+#define LN_des_cdmf             "des-cdmf"
+#define NID_des_cdmf            643
+#define OBJ_des_cdmf            OBJ_rsadsi,3L,10L
+
+#define SN_rsaOAEPEncryptionSET         "rsaOAEPEncryptionSET"
+#define NID_rsaOAEPEncryptionSET                644
+#define OBJ_rsaOAEPEncryptionSET                OBJ_rsadsi,1L,1L,6L
+
+#define SN_ipsec3               "Oakley-EC2N-3"
+#define LN_ipsec3               "ipsec3"
+#define NID_ipsec3              749
+
+#define SN_ipsec4               "Oakley-EC2N-4"
+#define LN_ipsec4               "ipsec4"
+#define NID_ipsec4              750
+
+#define SN_whirlpool            "whirlpool"
+#define NID_whirlpool           804
+#define OBJ_whirlpool           OBJ_iso,0L,10118L,3L,0L,55L
+
+#define SN_cryptopro            "cryptopro"
+#define NID_cryptopro           805
+#define OBJ_cryptopro           OBJ_member_body,643L,2L,2L
+
+#define SN_cryptocom            "cryptocom"
+#define NID_cryptocom           806
+#define OBJ_cryptocom           OBJ_member_body,643L,2L,9L
+
+#define SN_id_tc26              "id-tc26"
+#define NID_id_tc26             974
+#define OBJ_id_tc26             OBJ_member_body,643L,7L,1L
+
+#define SN_id_GostR3411_94_with_GostR3410_2001          "id-GostR3411-94-with-GostR3410-2001"
+#define LN_id_GostR3411_94_with_GostR3410_2001          "GOST R 34.11-94 with GOST R 34.10-2001"
+#define NID_id_GostR3411_94_with_GostR3410_2001         807
+#define OBJ_id_GostR3411_94_with_GostR3410_2001         OBJ_cryptopro,3L
+
+#define SN_id_GostR3411_94_with_GostR3410_94            "id-GostR3411-94-with-GostR3410-94"
+#define LN_id_GostR3411_94_with_GostR3410_94            "GOST R 34.11-94 with GOST R 34.10-94"
+#define NID_id_GostR3411_94_with_GostR3410_94           808
+#define OBJ_id_GostR3411_94_with_GostR3410_94           OBJ_cryptopro,4L
+
+#define SN_id_GostR3411_94              "md_gost94"
+#define LN_id_GostR3411_94              "GOST R 34.11-94"
+#define NID_id_GostR3411_94             809
+#define OBJ_id_GostR3411_94             OBJ_cryptopro,9L
+
+#define SN_id_HMACGostR3411_94          "id-HMACGostR3411-94"
+#define LN_id_HMACGostR3411_94          "HMAC GOST 34.11-94"
+#define NID_id_HMACGostR3411_94         810
+#define OBJ_id_HMACGostR3411_94         OBJ_cryptopro,10L
+
+#define SN_id_GostR3410_2001            "gost2001"
+#define LN_id_GostR3410_2001            "GOST R 34.10-2001"
+#define NID_id_GostR3410_2001           811
+#define OBJ_id_GostR3410_2001           OBJ_cryptopro,19L
+
+#define SN_id_GostR3410_94              "gost94"
+#define LN_id_GostR3410_94              "GOST R 34.10-94"
+#define NID_id_GostR3410_94             812
+#define OBJ_id_GostR3410_94             OBJ_cryptopro,20L
+
+#define SN_id_Gost28147_89              "gost89"
+#define LN_id_Gost28147_89              "GOST 28147-89"
+#define NID_id_Gost28147_89             813
+#define OBJ_id_Gost28147_89             OBJ_cryptopro,21L
+
+#define SN_gost89_cnt           "gost89-cnt"
+#define NID_gost89_cnt          814
+
+#define SN_gost89_cnt_12                "gost89-cnt-12"
+#define NID_gost89_cnt_12               975
+
+#define SN_gost89_cbc           "gost89-cbc"
+#define NID_gost89_cbc          1009
+
+#define SN_gost89_ecb           "gost89-ecb"
+#define NID_gost89_ecb          1010
+
+#define SN_gost89_ctr           "gost89-ctr"
+#define NID_gost89_ctr          1011
+
+#define SN_id_Gost28147_89_MAC          "gost-mac"
+#define LN_id_Gost28147_89_MAC          "GOST 28147-89 MAC"
+#define NID_id_Gost28147_89_MAC         815
+#define OBJ_id_Gost28147_89_MAC         OBJ_cryptopro,22L
+
+#define SN_gost_mac_12          "gost-mac-12"
+#define NID_gost_mac_12         976
+
+#define SN_id_GostR3411_94_prf          "prf-gostr3411-94"
+#define LN_id_GostR3411_94_prf          "GOST R 34.11-94 PRF"
+#define NID_id_GostR3411_94_prf         816
+#define OBJ_id_GostR3411_94_prf         OBJ_cryptopro,23L
+
+#define SN_id_GostR3410_2001DH          "id-GostR3410-2001DH"
+#define LN_id_GostR3410_2001DH          "GOST R 34.10-2001 DH"
+#define NID_id_GostR3410_2001DH         817
+#define OBJ_id_GostR3410_2001DH         OBJ_cryptopro,98L
+
+#define SN_id_GostR3410_94DH            "id-GostR3410-94DH"
+#define LN_id_GostR3410_94DH            "GOST R 34.10-94 DH"
+#define NID_id_GostR3410_94DH           818
+#define OBJ_id_GostR3410_94DH           OBJ_cryptopro,99L
+
+#define SN_id_Gost28147_89_CryptoPro_KeyMeshing         "id-Gost28147-89-CryptoPro-KeyMeshing"
+#define NID_id_Gost28147_89_CryptoPro_KeyMeshing                819
+#define OBJ_id_Gost28147_89_CryptoPro_KeyMeshing                OBJ_cryptopro,14L,1L
+
+#define SN_id_Gost28147_89_None_KeyMeshing              "id-Gost28147-89-None-KeyMeshing"
+#define NID_id_Gost28147_89_None_KeyMeshing             820
+#define OBJ_id_Gost28147_89_None_KeyMeshing             OBJ_cryptopro,14L,0L
+
+#define SN_id_GostR3411_94_TestParamSet         "id-GostR3411-94-TestParamSet"
+#define NID_id_GostR3411_94_TestParamSet                821
+#define OBJ_id_GostR3411_94_TestParamSet                OBJ_cryptopro,30L,0L
+
+#define SN_id_GostR3411_94_CryptoProParamSet            "id-GostR3411-94-CryptoProParamSet"
+#define NID_id_GostR3411_94_CryptoProParamSet           822
+#define OBJ_id_GostR3411_94_CryptoProParamSet           OBJ_cryptopro,30L,1L
+
+#define SN_id_Gost28147_89_TestParamSet         "id-Gost28147-89-TestParamSet"
+#define NID_id_Gost28147_89_TestParamSet                823
+#define OBJ_id_Gost28147_89_TestParamSet                OBJ_cryptopro,31L,0L
+
+#define SN_id_Gost28147_89_CryptoPro_A_ParamSet         "id-Gost28147-89-CryptoPro-A-ParamSet"
+#define NID_id_Gost28147_89_CryptoPro_A_ParamSet                824
+#define OBJ_id_Gost28147_89_CryptoPro_A_ParamSet                OBJ_cryptopro,31L,1L
+
+#define SN_id_Gost28147_89_CryptoPro_B_ParamSet         "id-Gost28147-89-CryptoPro-B-ParamSet"
+#define NID_id_Gost28147_89_CryptoPro_B_ParamSet                825
+#define OBJ_id_Gost28147_89_CryptoPro_B_ParamSet                OBJ_cryptopro,31L,2L
+
+#define SN_id_Gost28147_89_CryptoPro_C_ParamSet         "id-Gost28147-89-CryptoPro-C-ParamSet"
+#define NID_id_Gost28147_89_CryptoPro_C_ParamSet                826
+#define OBJ_id_Gost28147_89_CryptoPro_C_ParamSet                OBJ_cryptopro,31L,3L
+
+#define SN_id_Gost28147_89_CryptoPro_D_ParamSet         "id-Gost28147-89-CryptoPro-D-ParamSet"
+#define NID_id_Gost28147_89_CryptoPro_D_ParamSet                827
+#define OBJ_id_Gost28147_89_CryptoPro_D_ParamSet                OBJ_cryptopro,31L,4L
+
+#define SN_id_Gost28147_89_CryptoPro_Oscar_1_1_ParamSet         "id-Gost28147-89-CryptoPro-Oscar-1-1-ParamSet"
+#define NID_id_Gost28147_89_CryptoPro_Oscar_1_1_ParamSet                828
+#define OBJ_id_Gost28147_89_CryptoPro_Oscar_1_1_ParamSet                OBJ_cryptopro,31L,5L
+
+#define SN_id_Gost28147_89_CryptoPro_Oscar_1_0_ParamSet         "id-Gost28147-89-CryptoPro-Oscar-1-0-ParamSet"
+#define NID_id_Gost28147_89_CryptoPro_Oscar_1_0_ParamSet                829
+#define OBJ_id_Gost28147_89_CryptoPro_Oscar_1_0_ParamSet                OBJ_cryptopro,31L,6L
+
+#define SN_id_Gost28147_89_CryptoPro_RIC_1_ParamSet             "id-Gost28147-89-CryptoPro-RIC-1-ParamSet"
+#define NID_id_Gost28147_89_CryptoPro_RIC_1_ParamSet            830
+#define OBJ_id_Gost28147_89_CryptoPro_RIC_1_ParamSet            OBJ_cryptopro,31L,7L
+
+#define SN_id_GostR3410_94_TestParamSet         "id-GostR3410-94-TestParamSet"
+#define NID_id_GostR3410_94_TestParamSet                831
+#define OBJ_id_GostR3410_94_TestParamSet                OBJ_cryptopro,32L,0L
+
+#define SN_id_GostR3410_94_CryptoPro_A_ParamSet         "id-GostR3410-94-CryptoPro-A-ParamSet"
+#define NID_id_GostR3410_94_CryptoPro_A_ParamSet                832
+#define OBJ_id_GostR3410_94_CryptoPro_A_ParamSet                OBJ_cryptopro,32L,2L
+
+#define SN_id_GostR3410_94_CryptoPro_B_ParamSet         "id-GostR3410-94-CryptoPro-B-ParamSet"
+#define NID_id_GostR3410_94_CryptoPro_B_ParamSet                833
+#define OBJ_id_GostR3410_94_CryptoPro_B_ParamSet                OBJ_cryptopro,32L,3L
+
+#define SN_id_GostR3410_94_CryptoPro_C_ParamSet         "id-GostR3410-94-CryptoPro-C-ParamSet"
+#define NID_id_GostR3410_94_CryptoPro_C_ParamSet                834
+#define OBJ_id_GostR3410_94_CryptoPro_C_ParamSet                OBJ_cryptopro,32L,4L
+
+#define SN_id_GostR3410_94_CryptoPro_D_ParamSet         "id-GostR3410-94-CryptoPro-D-ParamSet"
+#define NID_id_GostR3410_94_CryptoPro_D_ParamSet                835
+#define OBJ_id_GostR3410_94_CryptoPro_D_ParamSet                OBJ_cryptopro,32L,5L
+
+#define SN_id_GostR3410_94_CryptoPro_XchA_ParamSet              "id-GostR3410-94-CryptoPro-XchA-ParamSet"
+#define NID_id_GostR3410_94_CryptoPro_XchA_ParamSet             836
+#define OBJ_id_GostR3410_94_CryptoPro_XchA_ParamSet             OBJ_cryptopro,33L,1L
+
+#define SN_id_GostR3410_94_CryptoPro_XchB_ParamSet              "id-GostR3410-94-CryptoPro-XchB-ParamSet"
+#define NID_id_GostR3410_94_CryptoPro_XchB_ParamSet             837
+#define OBJ_id_GostR3410_94_CryptoPro_XchB_ParamSet             OBJ_cryptopro,33L,2L
+
+#define SN_id_GostR3410_94_CryptoPro_XchC_ParamSet              "id-GostR3410-94-CryptoPro-XchC-ParamSet"
+#define NID_id_GostR3410_94_CryptoPro_XchC_ParamSet             838
+#define OBJ_id_GostR3410_94_CryptoPro_XchC_ParamSet             OBJ_cryptopro,33L,3L
+
+#define SN_id_GostR3410_2001_TestParamSet               "id-GostR3410-2001-TestParamSet"
+#define NID_id_GostR3410_2001_TestParamSet              839
+#define OBJ_id_GostR3410_2001_TestParamSet              OBJ_cryptopro,35L,0L
+
+#define SN_id_GostR3410_2001_CryptoPro_A_ParamSet               "id-GostR3410-2001-CryptoPro-A-ParamSet"
+#define NID_id_GostR3410_2001_CryptoPro_A_ParamSet              840
+#define OBJ_id_GostR3410_2001_CryptoPro_A_ParamSet              OBJ_cryptopro,35L,1L
+
+#define SN_id_GostR3410_2001_CryptoPro_B_ParamSet               "id-GostR3410-2001-CryptoPro-B-ParamSet"
+#define NID_id_GostR3410_2001_CryptoPro_B_ParamSet              841
+#define OBJ_id_GostR3410_2001_CryptoPro_B_ParamSet              OBJ_cryptopro,35L,2L
+
+#define SN_id_GostR3410_2001_CryptoPro_C_ParamSet               "id-GostR3410-2001-CryptoPro-C-ParamSet"
+#define NID_id_GostR3410_2001_CryptoPro_C_ParamSet              842
+#define OBJ_id_GostR3410_2001_CryptoPro_C_ParamSet              OBJ_cryptopro,35L,3L
+
+#define SN_id_GostR3410_2001_CryptoPro_XchA_ParamSet            "id-GostR3410-2001-CryptoPro-XchA-ParamSet"
+#define NID_id_GostR3410_2001_CryptoPro_XchA_ParamSet           843
+#define OBJ_id_GostR3410_2001_CryptoPro_XchA_ParamSet           OBJ_cryptopro,36L,0L
+
+#define SN_id_GostR3410_2001_CryptoPro_XchB_ParamSet            "id-GostR3410-2001-CryptoPro-XchB-ParamSet"
+#define NID_id_GostR3410_2001_CryptoPro_XchB_ParamSet           844
+#define OBJ_id_GostR3410_2001_CryptoPro_XchB_ParamSet           OBJ_cryptopro,36L,1L
+
+#define SN_id_GostR3410_94_a            "id-GostR3410-94-a"
+#define NID_id_GostR3410_94_a           845
+#define OBJ_id_GostR3410_94_a           OBJ_id_GostR3410_94,1L
+
+#define SN_id_GostR3410_94_aBis         "id-GostR3410-94-aBis"
+#define NID_id_GostR3410_94_aBis                846
+#define OBJ_id_GostR3410_94_aBis                OBJ_id_GostR3410_94,2L
+
+#define SN_id_GostR3410_94_b            "id-GostR3410-94-b"
+#define NID_id_GostR3410_94_b           847
+#define OBJ_id_GostR3410_94_b           OBJ_id_GostR3410_94,3L
+
+#define SN_id_GostR3410_94_bBis         "id-GostR3410-94-bBis"
+#define NID_id_GostR3410_94_bBis                848
+#define OBJ_id_GostR3410_94_bBis                OBJ_id_GostR3410_94,4L
+
+#define SN_id_Gost28147_89_cc           "id-Gost28147-89-cc"
+#define LN_id_Gost28147_89_cc           "GOST 28147-89 Cryptocom ParamSet"
+#define NID_id_Gost28147_89_cc          849
+#define OBJ_id_Gost28147_89_cc          OBJ_cryptocom,1L,6L,1L
+
+#define SN_id_GostR3410_94_cc           "gost94cc"
+#define LN_id_GostR3410_94_cc           "GOST 34.10-94 Cryptocom"
+#define NID_id_GostR3410_94_cc          850
+#define OBJ_id_GostR3410_94_cc          OBJ_cryptocom,1L,5L,3L
+
+#define SN_id_GostR3410_2001_cc         "gost2001cc"
+#define LN_id_GostR3410_2001_cc         "GOST 34.10-2001 Cryptocom"
+#define NID_id_GostR3410_2001_cc                851
+#define OBJ_id_GostR3410_2001_cc                OBJ_cryptocom,1L,5L,4L
+
+#define SN_id_GostR3411_94_with_GostR3410_94_cc         "id-GostR3411-94-with-GostR3410-94-cc"
+#define LN_id_GostR3411_94_with_GostR3410_94_cc         "GOST R 34.11-94 with GOST R 34.10-94 Cryptocom"
+#define NID_id_GostR3411_94_with_GostR3410_94_cc                852
+#define OBJ_id_GostR3411_94_with_GostR3410_94_cc                OBJ_cryptocom,1L,3L,3L
+
+#define SN_id_GostR3411_94_with_GostR3410_2001_cc               "id-GostR3411-94-with-GostR3410-2001-cc"
+#define LN_id_GostR3411_94_with_GostR3410_2001_cc               "GOST R 34.11-94 with GOST R 34.10-2001 Cryptocom"
+#define NID_id_GostR3411_94_with_GostR3410_2001_cc              853
+#define OBJ_id_GostR3411_94_with_GostR3410_2001_cc              OBJ_cryptocom,1L,3L,4L
+
+#define SN_id_GostR3410_2001_ParamSet_cc                "id-GostR3410-2001-ParamSet-cc"
+#define LN_id_GostR3410_2001_ParamSet_cc                "GOST R 3410-2001 Parameter Set Cryptocom"
+#define NID_id_GostR3410_2001_ParamSet_cc               854
+#define OBJ_id_GostR3410_2001_ParamSet_cc               OBJ_cryptocom,1L,8L,1L
+
+#define SN_id_tc26_algorithms           "id-tc26-algorithms"
+#define NID_id_tc26_algorithms          977
+#define OBJ_id_tc26_algorithms          OBJ_id_tc26,1L
+
+#define SN_id_tc26_sign         "id-tc26-sign"
+#define NID_id_tc26_sign                978
+#define OBJ_id_tc26_sign                OBJ_id_tc26_algorithms,1L
+
+#define SN_id_GostR3410_2012_256                "gost2012_256"
+#define LN_id_GostR3410_2012_256                "GOST R 34.10-2012 with 256 bit modulus"
+#define NID_id_GostR3410_2012_256               979
+#define OBJ_id_GostR3410_2012_256               OBJ_id_tc26_sign,1L
+
+#define SN_id_GostR3410_2012_512                "gost2012_512"
+#define LN_id_GostR3410_2012_512                "GOST R 34.10-2012 with 512 bit modulus"
+#define NID_id_GostR3410_2012_512               980
+#define OBJ_id_GostR3410_2012_512               OBJ_id_tc26_sign,2L
+
+#define SN_id_tc26_digest               "id-tc26-digest"
+#define NID_id_tc26_digest              981
+#define OBJ_id_tc26_digest              OBJ_id_tc26_algorithms,2L
+
+#define SN_id_GostR3411_2012_256                "md_gost12_256"
+#define LN_id_GostR3411_2012_256                "GOST R 34.11-2012 with 256 bit hash"
+#define NID_id_GostR3411_2012_256               982
+#define OBJ_id_GostR3411_2012_256               OBJ_id_tc26_digest,2L
+
+#define SN_id_GostR3411_2012_512                "md_gost12_512"
+#define LN_id_GostR3411_2012_512                "GOST R 34.11-2012 with 512 bit hash"
+#define NID_id_GostR3411_2012_512               983
+#define OBJ_id_GostR3411_2012_512               OBJ_id_tc26_digest,3L
+
+#define SN_id_tc26_signwithdigest               "id-tc26-signwithdigest"
+#define NID_id_tc26_signwithdigest              984
+#define OBJ_id_tc26_signwithdigest              OBJ_id_tc26_algorithms,3L
+
+#define SN_id_tc26_signwithdigest_gost3410_2012_256             "id-tc26-signwithdigest-gost3410-2012-256"
+#define LN_id_tc26_signwithdigest_gost3410_2012_256             "GOST R 34.10-2012 with GOST R 34.11-2012 (256 bit)"
+#define NID_id_tc26_signwithdigest_gost3410_2012_256            985
+#define OBJ_id_tc26_signwithdigest_gost3410_2012_256            OBJ_id_tc26_signwithdigest,2L
+
+#define SN_id_tc26_signwithdigest_gost3410_2012_512             "id-tc26-signwithdigest-gost3410-2012-512"
+#define LN_id_tc26_signwithdigest_gost3410_2012_512             "GOST R 34.10-2012 with GOST R 34.11-2012 (512 bit)"
+#define NID_id_tc26_signwithdigest_gost3410_2012_512            986
+#define OBJ_id_tc26_signwithdigest_gost3410_2012_512            OBJ_id_tc26_signwithdigest,3L
+
+#define SN_id_tc26_mac          "id-tc26-mac"
+#define NID_id_tc26_mac         987
+#define OBJ_id_tc26_mac         OBJ_id_tc26_algorithms,4L
+
+#define SN_id_tc26_hmac_gost_3411_2012_256              "id-tc26-hmac-gost-3411-2012-256"
+#define LN_id_tc26_hmac_gost_3411_2012_256              "HMAC GOST 34.11-2012 256 bit"
+#define NID_id_tc26_hmac_gost_3411_2012_256             988
+#define OBJ_id_tc26_hmac_gost_3411_2012_256             OBJ_id_tc26_mac,1L
+
+#define SN_id_tc26_hmac_gost_3411_2012_512              "id-tc26-hmac-gost-3411-2012-512"
+#define LN_id_tc26_hmac_gost_3411_2012_512              "HMAC GOST 34.11-2012 512 bit"
+#define NID_id_tc26_hmac_gost_3411_2012_512             989
+#define OBJ_id_tc26_hmac_gost_3411_2012_512             OBJ_id_tc26_mac,2L
+
+#define SN_id_tc26_cipher               "id-tc26-cipher"
+#define NID_id_tc26_cipher              990
+#define OBJ_id_tc26_cipher              OBJ_id_tc26_algorithms,5L
+
+#define SN_id_tc26_cipher_gostr3412_2015_magma          "id-tc26-cipher-gostr3412-2015-magma"
+#define NID_id_tc26_cipher_gostr3412_2015_magma         1173
+#define OBJ_id_tc26_cipher_gostr3412_2015_magma         OBJ_id_tc26_cipher,1L
+
+#define SN_id_tc26_cipher_gostr3412_2015_magma_ctracpkm         "id-tc26-cipher-gostr3412-2015-magma-ctracpkm"
+#define NID_id_tc26_cipher_gostr3412_2015_magma_ctracpkm                1174
+#define OBJ_id_tc26_cipher_gostr3412_2015_magma_ctracpkm                OBJ_id_tc26_cipher_gostr3412_2015_magma,1L
+
+#define SN_id_tc26_cipher_gostr3412_2015_magma_ctracpkm_omac            "id-tc26-cipher-gostr3412-2015-magma-ctracpkm-omac"
+#define NID_id_tc26_cipher_gostr3412_2015_magma_ctracpkm_omac           1175
+#define OBJ_id_tc26_cipher_gostr3412_2015_magma_ctracpkm_omac           OBJ_id_tc26_cipher_gostr3412_2015_magma,2L
+
+#define SN_id_tc26_cipher_gostr3412_2015_kuznyechik             "id-tc26-cipher-gostr3412-2015-kuznyechik"
+#define NID_id_tc26_cipher_gostr3412_2015_kuznyechik            1176
+#define OBJ_id_tc26_cipher_gostr3412_2015_kuznyechik            OBJ_id_tc26_cipher,2L
+
+#define SN_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm            "id-tc26-cipher-gostr3412-2015-kuznyechik-ctracpkm"
+#define NID_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm           1177
+#define OBJ_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm           OBJ_id_tc26_cipher_gostr3412_2015_kuznyechik,1L
+
+#define SN_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm_omac               "id-tc26-cipher-gostr3412-2015-kuznyechik-ctracpkm-omac"
+#define NID_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm_omac              1178
+#define OBJ_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm_omac              OBJ_id_tc26_cipher_gostr3412_2015_kuznyechik,2L
+
+#define SN_id_tc26_agreement            "id-tc26-agreement"
+#define NID_id_tc26_agreement           991
+#define OBJ_id_tc26_agreement           OBJ_id_tc26_algorithms,6L
+
+#define SN_id_tc26_agreement_gost_3410_2012_256         "id-tc26-agreement-gost-3410-2012-256"
+#define NID_id_tc26_agreement_gost_3410_2012_256                992
+#define OBJ_id_tc26_agreement_gost_3410_2012_256                OBJ_id_tc26_agreement,1L
+
+#define SN_id_tc26_agreement_gost_3410_2012_512         "id-tc26-agreement-gost-3410-2012-512"
+#define NID_id_tc26_agreement_gost_3410_2012_512                993
+#define OBJ_id_tc26_agreement_gost_3410_2012_512                OBJ_id_tc26_agreement,2L
+
+#define SN_id_tc26_wrap         "id-tc26-wrap"
+#define NID_id_tc26_wrap                1179
+#define OBJ_id_tc26_wrap                OBJ_id_tc26_algorithms,7L
+
+#define SN_id_tc26_wrap_gostr3412_2015_magma            "id-tc26-wrap-gostr3412-2015-magma"
+#define NID_id_tc26_wrap_gostr3412_2015_magma           1180
+#define OBJ_id_tc26_wrap_gostr3412_2015_magma           OBJ_id_tc26_wrap,1L
+
+#define SN_id_tc26_wrap_gostr3412_2015_magma_kexp15             "id-tc26-wrap-gostr3412-2015-magma-kexp15"
+#define NID_id_tc26_wrap_gostr3412_2015_magma_kexp15            1181
+#define OBJ_id_tc26_wrap_gostr3412_2015_magma_kexp15            OBJ_id_tc26_wrap_gostr3412_2015_magma,1L
+
+#define SN_id_tc26_wrap_gostr3412_2015_kuznyechik               "id-tc26-wrap-gostr3412-2015-kuznyechik"
+#define NID_id_tc26_wrap_gostr3412_2015_kuznyechik              1182
+#define OBJ_id_tc26_wrap_gostr3412_2015_kuznyechik              OBJ_id_tc26_wrap,2L
+
+#define SN_id_tc26_wrap_gostr3412_2015_kuznyechik_kexp15                "id-tc26-wrap-gostr3412-2015-kuznyechik-kexp15"
+#define NID_id_tc26_wrap_gostr3412_2015_kuznyechik_kexp15               1183
+#define OBJ_id_tc26_wrap_gostr3412_2015_kuznyechik_kexp15               OBJ_id_tc26_wrap_gostr3412_2015_magma,1L
+
+#define SN_id_tc26_constants            "id-tc26-constants"
+#define NID_id_tc26_constants           994
+#define OBJ_id_tc26_constants           OBJ_id_tc26,2L
+
+#define SN_id_tc26_sign_constants               "id-tc26-sign-constants"
+#define NID_id_tc26_sign_constants              995
+#define OBJ_id_tc26_sign_constants              OBJ_id_tc26_constants,1L
+
+#define SN_id_tc26_gost_3410_2012_256_constants         "id-tc26-gost-3410-2012-256-constants"
+#define NID_id_tc26_gost_3410_2012_256_constants                1147
+#define OBJ_id_tc26_gost_3410_2012_256_constants                OBJ_id_tc26_sign_constants,1L
+
+#define SN_id_tc26_gost_3410_2012_256_paramSetA         "id-tc26-gost-3410-2012-256-paramSetA"
+#define LN_id_tc26_gost_3410_2012_256_paramSetA         "GOST R 34.10-2012 (256 bit) ParamSet A"
+#define NID_id_tc26_gost_3410_2012_256_paramSetA                1148
+#define OBJ_id_tc26_gost_3410_2012_256_paramSetA                OBJ_id_tc26_gost_3410_2012_256_constants,1L
+
+#define SN_id_tc26_gost_3410_2012_256_paramSetB         "id-tc26-gost-3410-2012-256-paramSetB"
+#define LN_id_tc26_gost_3410_2012_256_paramSetB         "GOST R 34.10-2012 (256 bit) ParamSet B"
+#define NID_id_tc26_gost_3410_2012_256_paramSetB                1184
+#define OBJ_id_tc26_gost_3410_2012_256_paramSetB                OBJ_id_tc26_gost_3410_2012_256_constants,2L
+
+#define SN_id_tc26_gost_3410_2012_256_paramSetC         "id-tc26-gost-3410-2012-256-paramSetC"
+#define LN_id_tc26_gost_3410_2012_256_paramSetC         "GOST R 34.10-2012 (256 bit) ParamSet C"
+#define NID_id_tc26_gost_3410_2012_256_paramSetC                1185
+#define OBJ_id_tc26_gost_3410_2012_256_paramSetC                OBJ_id_tc26_gost_3410_2012_256_constants,3L
+
+#define SN_id_tc26_gost_3410_2012_256_paramSetD         "id-tc26-gost-3410-2012-256-paramSetD"
+#define LN_id_tc26_gost_3410_2012_256_paramSetD         "GOST R 34.10-2012 (256 bit) ParamSet D"
+#define NID_id_tc26_gost_3410_2012_256_paramSetD                1186
+#define OBJ_id_tc26_gost_3410_2012_256_paramSetD                OBJ_id_tc26_gost_3410_2012_256_constants,4L
+
+#define SN_id_tc26_gost_3410_2012_512_constants         "id-tc26-gost-3410-2012-512-constants"
+#define NID_id_tc26_gost_3410_2012_512_constants                996
+#define OBJ_id_tc26_gost_3410_2012_512_constants                OBJ_id_tc26_sign_constants,2L
+
+#define SN_id_tc26_gost_3410_2012_512_paramSetTest              "id-tc26-gost-3410-2012-512-paramSetTest"
+#define LN_id_tc26_gost_3410_2012_512_paramSetTest              "GOST R 34.10-2012 (512 bit) testing parameter set"
+#define NID_id_tc26_gost_3410_2012_512_paramSetTest             997
+#define OBJ_id_tc26_gost_3410_2012_512_paramSetTest             OBJ_id_tc26_gost_3410_2012_512_constants,0L
+
+#define SN_id_tc26_gost_3410_2012_512_paramSetA         "id-tc26-gost-3410-2012-512-paramSetA"
+#define LN_id_tc26_gost_3410_2012_512_paramSetA         "GOST R 34.10-2012 (512 bit) ParamSet A"
+#define NID_id_tc26_gost_3410_2012_512_paramSetA                998
+#define OBJ_id_tc26_gost_3410_2012_512_paramSetA                OBJ_id_tc26_gost_3410_2012_512_constants,1L
+
+#define SN_id_tc26_gost_3410_2012_512_paramSetB         "id-tc26-gost-3410-2012-512-paramSetB"
+#define LN_id_tc26_gost_3410_2012_512_paramSetB         "GOST R 34.10-2012 (512 bit) ParamSet B"
+#define NID_id_tc26_gost_3410_2012_512_paramSetB                999
+#define OBJ_id_tc26_gost_3410_2012_512_paramSetB                OBJ_id_tc26_gost_3410_2012_512_constants,2L
+
+#define SN_id_tc26_gost_3410_2012_512_paramSetC         "id-tc26-gost-3410-2012-512-paramSetC"
+#define LN_id_tc26_gost_3410_2012_512_paramSetC         "GOST R 34.10-2012 (512 bit) ParamSet C"
+#define NID_id_tc26_gost_3410_2012_512_paramSetC                1149
+#define OBJ_id_tc26_gost_3410_2012_512_paramSetC                OBJ_id_tc26_gost_3410_2012_512_constants,3L
+
+#define SN_id_tc26_digest_constants             "id-tc26-digest-constants"
+#define NID_id_tc26_digest_constants            1000
+#define OBJ_id_tc26_digest_constants            OBJ_id_tc26_constants,2L
+
+#define SN_id_tc26_cipher_constants             "id-tc26-cipher-constants"
+#define NID_id_tc26_cipher_constants            1001
+#define OBJ_id_tc26_cipher_constants            OBJ_id_tc26_constants,5L
+
+#define SN_id_tc26_gost_28147_constants         "id-tc26-gost-28147-constants"
+#define NID_id_tc26_gost_28147_constants                1002
+#define OBJ_id_tc26_gost_28147_constants                OBJ_id_tc26_cipher_constants,1L
+
+#define SN_id_tc26_gost_28147_param_Z           "id-tc26-gost-28147-param-Z"
+#define LN_id_tc26_gost_28147_param_Z           "GOST 28147-89 TC26 parameter set"
+#define NID_id_tc26_gost_28147_param_Z          1003
+#define OBJ_id_tc26_gost_28147_param_Z          OBJ_id_tc26_gost_28147_constants,1L
+
+#define SN_INN          "INN"
+#define LN_INN          "INN"
+#define NID_INN         1004
+#define OBJ_INN         OBJ_member_body,643L,3L,131L,1L,1L
+
+#define SN_OGRN         "OGRN"
+#define LN_OGRN         "OGRN"
+#define NID_OGRN                1005
+#define OBJ_OGRN                OBJ_member_body,643L,100L,1L
+
+#define SN_SNILS                "SNILS"
+#define LN_SNILS                "SNILS"
+#define NID_SNILS               1006
+#define OBJ_SNILS               OBJ_member_body,643L,100L,3L
+
+#define SN_subjectSignTool              "subjectSignTool"
+#define LN_subjectSignTool              "Signing Tool of Subject"
+#define NID_subjectSignTool             1007
+#define OBJ_subjectSignTool             OBJ_member_body,643L,100L,111L
+
+#define SN_issuerSignTool               "issuerSignTool"
+#define LN_issuerSignTool               "Signing Tool of Issuer"
+#define NID_issuerSignTool              1008
+#define OBJ_issuerSignTool              OBJ_member_body,643L,100L,112L
+
+#define SN_grasshopper_ecb              "grasshopper-ecb"
+#define NID_grasshopper_ecb             1012
+
+#define SN_grasshopper_ctr              "grasshopper-ctr"
+#define NID_grasshopper_ctr             1013
+
+#define SN_grasshopper_ofb              "grasshopper-ofb"
+#define NID_grasshopper_ofb             1014
+
+#define SN_grasshopper_cbc              "grasshopper-cbc"
+#define NID_grasshopper_cbc             1015
+
+#define SN_grasshopper_cfb              "grasshopper-cfb"
+#define NID_grasshopper_cfb             1016
+
+#define SN_grasshopper_mac              "grasshopper-mac"
+#define NID_grasshopper_mac             1017
+
+#define SN_magma_ecb            "magma-ecb"
+#define NID_magma_ecb           1187
+
+#define SN_magma_ctr            "magma-ctr"
+#define NID_magma_ctr           1188
+
+#define SN_magma_ofb            "magma-ofb"
+#define NID_magma_ofb           1189
+
+#define SN_magma_cbc            "magma-cbc"
+#define NID_magma_cbc           1190
+
+#define SN_magma_cfb            "magma-cfb"
+#define NID_magma_cfb           1191
+
+#define SN_magma_mac            "magma-mac"
+#define NID_magma_mac           1192
+
+#define SN_camellia_128_cbc             "CAMELLIA-128-CBC"
+#define LN_camellia_128_cbc             "camellia-128-cbc"
+#define NID_camellia_128_cbc            751
+#define OBJ_camellia_128_cbc            1L,2L,392L,200011L,61L,1L,1L,1L,2L
+
+#define SN_camellia_192_cbc             "CAMELLIA-192-CBC"
+#define LN_camellia_192_cbc             "camellia-192-cbc"
+#define NID_camellia_192_cbc            752
+#define OBJ_camellia_192_cbc            1L,2L,392L,200011L,61L,1L,1L,1L,3L
+
+#define SN_camellia_256_cbc             "CAMELLIA-256-CBC"
+#define LN_camellia_256_cbc             "camellia-256-cbc"
+#define NID_camellia_256_cbc            753
+#define OBJ_camellia_256_cbc            1L,2L,392L,200011L,61L,1L,1L,1L,4L
+
+#define SN_id_camellia128_wrap          "id-camellia128-wrap"
+#define NID_id_camellia128_wrap         907
+#define OBJ_id_camellia128_wrap         1L,2L,392L,200011L,61L,1L,1L,3L,2L
+
+#define SN_id_camellia192_wrap          "id-camellia192-wrap"
+#define NID_id_camellia192_wrap         908
+#define OBJ_id_camellia192_wrap         1L,2L,392L,200011L,61L,1L,1L,3L,3L
+
+#define SN_id_camellia256_wrap          "id-camellia256-wrap"
+#define NID_id_camellia256_wrap         909
+#define OBJ_id_camellia256_wrap         1L,2L,392L,200011L,61L,1L,1L,3L,4L
+
+#define OBJ_ntt_ds              0L,3L,4401L,5L
+
+#define OBJ_camellia            OBJ_ntt_ds,3L,1L,9L
+
+#define SN_camellia_128_ecb             "CAMELLIA-128-ECB"
+#define LN_camellia_128_ecb             "camellia-128-ecb"
+#define NID_camellia_128_ecb            754
+#define OBJ_camellia_128_ecb            OBJ_camellia,1L
+
+#define SN_camellia_128_ofb128          "CAMELLIA-128-OFB"
+#define LN_camellia_128_ofb128          "camellia-128-ofb"
+#define NID_camellia_128_ofb128         766
+#define OBJ_camellia_128_ofb128         OBJ_camellia,3L
+
+#define SN_camellia_128_cfb128          "CAMELLIA-128-CFB"
+#define LN_camellia_128_cfb128          "camellia-128-cfb"
+#define NID_camellia_128_cfb128         757
+#define OBJ_camellia_128_cfb128         OBJ_camellia,4L
+
+#define SN_camellia_128_gcm             "CAMELLIA-128-GCM"
+#define LN_camellia_128_gcm             "camellia-128-gcm"
+#define NID_camellia_128_gcm            961
+#define OBJ_camellia_128_gcm            OBJ_camellia,6L
+
+#define SN_camellia_128_ccm             "CAMELLIA-128-CCM"
+#define LN_camellia_128_ccm             "camellia-128-ccm"
+#define NID_camellia_128_ccm            962
+#define OBJ_camellia_128_ccm            OBJ_camellia,7L
+
+#define SN_camellia_128_ctr             "CAMELLIA-128-CTR"
+#define LN_camellia_128_ctr             "camellia-128-ctr"
+#define NID_camellia_128_ctr            963
+#define OBJ_camellia_128_ctr            OBJ_camellia,9L
+
+#define SN_camellia_128_cmac            "CAMELLIA-128-CMAC"
+#define LN_camellia_128_cmac            "camellia-128-cmac"
+#define NID_camellia_128_cmac           964
+#define OBJ_camellia_128_cmac           OBJ_camellia,10L
+
+#define SN_camellia_192_ecb             "CAMELLIA-192-ECB"
+#define LN_camellia_192_ecb             "camellia-192-ecb"
+#define NID_camellia_192_ecb            755
+#define OBJ_camellia_192_ecb            OBJ_camellia,21L
+
+#define SN_camellia_192_ofb128          "CAMELLIA-192-OFB"
+#define LN_camellia_192_ofb128          "camellia-192-ofb"
+#define NID_camellia_192_ofb128         767
+#define OBJ_camellia_192_ofb128         OBJ_camellia,23L
+
+#define SN_camellia_192_cfb128          "CAMELLIA-192-CFB"
+#define LN_camellia_192_cfb128          "camellia-192-cfb"
+#define NID_camellia_192_cfb128         758
+#define OBJ_camellia_192_cfb128         OBJ_camellia,24L
+
+#define SN_camellia_192_gcm             "CAMELLIA-192-GCM"
+#define LN_camellia_192_gcm             "camellia-192-gcm"
+#define NID_camellia_192_gcm            965
+#define OBJ_camellia_192_gcm            OBJ_camellia,26L
+
+#define SN_camellia_192_ccm             "CAMELLIA-192-CCM"
+#define LN_camellia_192_ccm             "camellia-192-ccm"
+#define NID_camellia_192_ccm            966
+#define OBJ_camellia_192_ccm            OBJ_camellia,27L
+
+#define SN_camellia_192_ctr             "CAMELLIA-192-CTR"
+#define LN_camellia_192_ctr             "camellia-192-ctr"
+#define NID_camellia_192_ctr            967
+#define OBJ_camellia_192_ctr            OBJ_camellia,29L
+
+#define SN_camellia_192_cmac            "CAMELLIA-192-CMAC"
+#define LN_camellia_192_cmac            "camellia-192-cmac"
+#define NID_camellia_192_cmac           968
+#define OBJ_camellia_192_cmac           OBJ_camellia,30L
+
+#define SN_camellia_256_ecb             "CAMELLIA-256-ECB"
+#define LN_camellia_256_ecb             "camellia-256-ecb"
+#define NID_camellia_256_ecb            756
+#define OBJ_camellia_256_ecb            OBJ_camellia,41L
+
+#define SN_camellia_256_ofb128          "CAMELLIA-256-OFB"
+#define LN_camellia_256_ofb128          "camellia-256-ofb"
+#define NID_camellia_256_ofb128         768
+#define OBJ_camellia_256_ofb128         OBJ_camellia,43L
+
+#define SN_camellia_256_cfb128          "CAMELLIA-256-CFB"
+#define LN_camellia_256_cfb128          "camellia-256-cfb"
+#define NID_camellia_256_cfb128         759
+#define OBJ_camellia_256_cfb128         OBJ_camellia,44L
+
+#define SN_camellia_256_gcm             "CAMELLIA-256-GCM"
+#define LN_camellia_256_gcm             "camellia-256-gcm"
+#define NID_camellia_256_gcm            969
+#define OBJ_camellia_256_gcm            OBJ_camellia,46L
+
+#define SN_camellia_256_ccm             "CAMELLIA-256-CCM"
+#define LN_camellia_256_ccm             "camellia-256-ccm"
+#define NID_camellia_256_ccm            970
+#define OBJ_camellia_256_ccm            OBJ_camellia,47L
+
+#define SN_camellia_256_ctr             "CAMELLIA-256-CTR"
+#define LN_camellia_256_ctr             "camellia-256-ctr"
+#define NID_camellia_256_ctr            971
+#define OBJ_camellia_256_ctr            OBJ_camellia,49L
+
+#define SN_camellia_256_cmac            "CAMELLIA-256-CMAC"
+#define LN_camellia_256_cmac            "camellia-256-cmac"
+#define NID_camellia_256_cmac           972
+#define OBJ_camellia_256_cmac           OBJ_camellia,50L
+
+#define SN_camellia_128_cfb1            "CAMELLIA-128-CFB1"
+#define LN_camellia_128_cfb1            "camellia-128-cfb1"
+#define NID_camellia_128_cfb1           760
+
+#define SN_camellia_192_cfb1            "CAMELLIA-192-CFB1"
+#define LN_camellia_192_cfb1            "camellia-192-cfb1"
+#define NID_camellia_192_cfb1           761
+
+#define SN_camellia_256_cfb1            "CAMELLIA-256-CFB1"
+#define LN_camellia_256_cfb1            "camellia-256-cfb1"
+#define NID_camellia_256_cfb1           762
+
+#define SN_camellia_128_cfb8            "CAMELLIA-128-CFB8"
+#define LN_camellia_128_cfb8            "camellia-128-cfb8"
+#define NID_camellia_128_cfb8           763
+
+#define SN_camellia_192_cfb8            "CAMELLIA-192-CFB8"
+#define LN_camellia_192_cfb8            "camellia-192-cfb8"
+#define NID_camellia_192_cfb8           764
+
+#define SN_camellia_256_cfb8            "CAMELLIA-256-CFB8"
+#define LN_camellia_256_cfb8            "camellia-256-cfb8"
+#define NID_camellia_256_cfb8           765
+
+#define OBJ_aria                1L,2L,410L,200046L,1L,1L
+
+#define SN_aria_128_ecb         "ARIA-128-ECB"
+#define LN_aria_128_ecb         "aria-128-ecb"
+#define NID_aria_128_ecb                1065
+#define OBJ_aria_128_ecb                OBJ_aria,1L
+
+#define SN_aria_128_cbc         "ARIA-128-CBC"
+#define LN_aria_128_cbc         "aria-128-cbc"
+#define NID_aria_128_cbc                1066
+#define OBJ_aria_128_cbc                OBJ_aria,2L
+
+#define SN_aria_128_cfb128              "ARIA-128-CFB"
+#define LN_aria_128_cfb128              "aria-128-cfb"
+#define NID_aria_128_cfb128             1067
+#define OBJ_aria_128_cfb128             OBJ_aria,3L
+
+#define SN_aria_128_ofb128              "ARIA-128-OFB"
+#define LN_aria_128_ofb128              "aria-128-ofb"
+#define NID_aria_128_ofb128             1068
+#define OBJ_aria_128_ofb128             OBJ_aria,4L
+
+#define SN_aria_128_ctr         "ARIA-128-CTR"
+#define LN_aria_128_ctr         "aria-128-ctr"
+#define NID_aria_128_ctr                1069
+#define OBJ_aria_128_ctr                OBJ_aria,5L
+
+#define SN_aria_192_ecb         "ARIA-192-ECB"
+#define LN_aria_192_ecb         "aria-192-ecb"
+#define NID_aria_192_ecb                1070
+#define OBJ_aria_192_ecb                OBJ_aria,6L
+
+#define SN_aria_192_cbc         "ARIA-192-CBC"
+#define LN_aria_192_cbc         "aria-192-cbc"
+#define NID_aria_192_cbc                1071
+#define OBJ_aria_192_cbc                OBJ_aria,7L
+
+#define SN_aria_192_cfb128              "ARIA-192-CFB"
+#define LN_aria_192_cfb128              "aria-192-cfb"
+#define NID_aria_192_cfb128             1072
+#define OBJ_aria_192_cfb128             OBJ_aria,8L
+
+#define SN_aria_192_ofb128              "ARIA-192-OFB"
+#define LN_aria_192_ofb128              "aria-192-ofb"
+#define NID_aria_192_ofb128             1073
+#define OBJ_aria_192_ofb128             OBJ_aria,9L
+
+#define SN_aria_192_ctr         "ARIA-192-CTR"
+#define LN_aria_192_ctr         "aria-192-ctr"
+#define NID_aria_192_ctr                1074
+#define OBJ_aria_192_ctr                OBJ_aria,10L
+
+#define SN_aria_256_ecb         "ARIA-256-ECB"
+#define LN_aria_256_ecb         "aria-256-ecb"
+#define NID_aria_256_ecb                1075
+#define OBJ_aria_256_ecb                OBJ_aria,11L
+
+#define SN_aria_256_cbc         "ARIA-256-CBC"
+#define LN_aria_256_cbc         "aria-256-cbc"
+#define NID_aria_256_cbc                1076
+#define OBJ_aria_256_cbc                OBJ_aria,12L
+
+#define SN_aria_256_cfb128              "ARIA-256-CFB"
+#define LN_aria_256_cfb128              "aria-256-cfb"
+#define NID_aria_256_cfb128             1077
+#define OBJ_aria_256_cfb128             OBJ_aria,13L
+
+#define SN_aria_256_ofb128              "ARIA-256-OFB"
+#define LN_aria_256_ofb128              "aria-256-ofb"
+#define NID_aria_256_ofb128             1078
+#define OBJ_aria_256_ofb128             OBJ_aria,14L
+
+#define SN_aria_256_ctr         "ARIA-256-CTR"
+#define LN_aria_256_ctr         "aria-256-ctr"
+#define NID_aria_256_ctr                1079
+#define OBJ_aria_256_ctr                OBJ_aria,15L
+
+#define SN_aria_128_cfb1                "ARIA-128-CFB1"
+#define LN_aria_128_cfb1                "aria-128-cfb1"
+#define NID_aria_128_cfb1               1080
+
+#define SN_aria_192_cfb1                "ARIA-192-CFB1"
+#define LN_aria_192_cfb1                "aria-192-cfb1"
+#define NID_aria_192_cfb1               1081
+
+#define SN_aria_256_cfb1                "ARIA-256-CFB1"
+#define LN_aria_256_cfb1                "aria-256-cfb1"
+#define NID_aria_256_cfb1               1082
+
+#define SN_aria_128_cfb8                "ARIA-128-CFB8"
+#define LN_aria_128_cfb8                "aria-128-cfb8"
+#define NID_aria_128_cfb8               1083
+
+#define SN_aria_192_cfb8                "ARIA-192-CFB8"
+#define LN_aria_192_cfb8                "aria-192-cfb8"
+#define NID_aria_192_cfb8               1084
+
+#define SN_aria_256_cfb8                "ARIA-256-CFB8"
+#define LN_aria_256_cfb8                "aria-256-cfb8"
+#define NID_aria_256_cfb8               1085
+
+#define SN_aria_128_ccm         "ARIA-128-CCM"
+#define LN_aria_128_ccm         "aria-128-ccm"
+#define NID_aria_128_ccm                1120
+#define OBJ_aria_128_ccm                OBJ_aria,37L
+
+#define SN_aria_192_ccm         "ARIA-192-CCM"
+#define LN_aria_192_ccm         "aria-192-ccm"
+#define NID_aria_192_ccm                1121
+#define OBJ_aria_192_ccm                OBJ_aria,38L
+
+#define SN_aria_256_ccm         "ARIA-256-CCM"
+#define LN_aria_256_ccm         "aria-256-ccm"
+#define NID_aria_256_ccm                1122
+#define OBJ_aria_256_ccm                OBJ_aria,39L
+
+#define SN_aria_128_gcm         "ARIA-128-GCM"
+#define LN_aria_128_gcm         "aria-128-gcm"
+#define NID_aria_128_gcm                1123
+#define OBJ_aria_128_gcm                OBJ_aria,34L
+
+#define SN_aria_192_gcm         "ARIA-192-GCM"
+#define LN_aria_192_gcm         "aria-192-gcm"
+#define NID_aria_192_gcm                1124
+#define OBJ_aria_192_gcm                OBJ_aria,35L
+
+#define SN_aria_256_gcm         "ARIA-256-GCM"
+#define LN_aria_256_gcm         "aria-256-gcm"
+#define NID_aria_256_gcm                1125
+#define OBJ_aria_256_gcm                OBJ_aria,36L
+
+#define SN_kisa         "KISA"
+#define LN_kisa         "kisa"
+#define NID_kisa                773
+#define OBJ_kisa                OBJ_member_body,410L,200004L
+
+#define SN_seed_ecb             "SEED-ECB"
+#define LN_seed_ecb             "seed-ecb"
+#define NID_seed_ecb            776
+#define OBJ_seed_ecb            OBJ_kisa,1L,3L
+
+#define SN_seed_cbc             "SEED-CBC"
+#define LN_seed_cbc             "seed-cbc"
+#define NID_seed_cbc            777
+#define OBJ_seed_cbc            OBJ_kisa,1L,4L
+
+#define SN_seed_cfb128          "SEED-CFB"
+#define LN_seed_cfb128          "seed-cfb"
+#define NID_seed_cfb128         779
+#define OBJ_seed_cfb128         OBJ_kisa,1L,5L
+
+#define SN_seed_ofb128          "SEED-OFB"
+#define LN_seed_ofb128          "seed-ofb"
+#define NID_seed_ofb128         778
+#define OBJ_seed_ofb128         OBJ_kisa,1L,6L
+
+#define SN_sm4_ecb              "SM4-ECB"
+#define LN_sm4_ecb              "sm4-ecb"
+#define NID_sm4_ecb             1133
+#define OBJ_sm4_ecb             OBJ_sm_scheme,104L,1L
+
+#define SN_sm4_cbc              "SM4-CBC"
+#define LN_sm4_cbc              "sm4-cbc"
+#define NID_sm4_cbc             1134
+#define OBJ_sm4_cbc             OBJ_sm_scheme,104L,2L
+
+#define SN_sm4_ofb128           "SM4-OFB"
+#define LN_sm4_ofb128           "sm4-ofb"
+#define NID_sm4_ofb128          1135
+#define OBJ_sm4_ofb128          OBJ_sm_scheme,104L,3L
+
+#define SN_sm4_cfb128           "SM4-CFB"
+#define LN_sm4_cfb128           "sm4-cfb"
+#define NID_sm4_cfb128          1137
+#define OBJ_sm4_cfb128          OBJ_sm_scheme,104L,4L
+
+#define SN_sm4_cfb1             "SM4-CFB1"
+#define LN_sm4_cfb1             "sm4-cfb1"
+#define NID_sm4_cfb1            1136
+#define OBJ_sm4_cfb1            OBJ_sm_scheme,104L,5L
+
+#define SN_sm4_cfb8             "SM4-CFB8"
+#define LN_sm4_cfb8             "sm4-cfb8"
+#define NID_sm4_cfb8            1138
+#define OBJ_sm4_cfb8            OBJ_sm_scheme,104L,6L
+
+#define SN_sm4_ctr              "SM4-CTR"
+#define LN_sm4_ctr              "sm4-ctr"
+#define NID_sm4_ctr             1139
+#define OBJ_sm4_ctr             OBJ_sm_scheme,104L,7L
+
+#define SN_hmac         "HMAC"
+#define LN_hmac         "hmac"
+#define NID_hmac                855
+
+#define SN_cmac         "CMAC"
+#define LN_cmac         "cmac"
+#define NID_cmac                894
+
+#define SN_rc4_hmac_md5         "RC4-HMAC-MD5"
+#define LN_rc4_hmac_md5         "rc4-hmac-md5"
+#define NID_rc4_hmac_md5                915
+
+#define SN_aes_128_cbc_hmac_sha1                "AES-128-CBC-HMAC-SHA1"
+#define LN_aes_128_cbc_hmac_sha1                "aes-128-cbc-hmac-sha1"
+#define NID_aes_128_cbc_hmac_sha1               916
+
+#define SN_aes_192_cbc_hmac_sha1                "AES-192-CBC-HMAC-SHA1"
+#define LN_aes_192_cbc_hmac_sha1                "aes-192-cbc-hmac-sha1"
+#define NID_aes_192_cbc_hmac_sha1               917
+
+#define SN_aes_256_cbc_hmac_sha1                "AES-256-CBC-HMAC-SHA1"
+#define LN_aes_256_cbc_hmac_sha1                "aes-256-cbc-hmac-sha1"
+#define NID_aes_256_cbc_hmac_sha1               918
+
+#define SN_aes_128_cbc_hmac_sha256              "AES-128-CBC-HMAC-SHA256"
+#define LN_aes_128_cbc_hmac_sha256              "aes-128-cbc-hmac-sha256"
+#define NID_aes_128_cbc_hmac_sha256             948
+
+#define SN_aes_192_cbc_hmac_sha256              "AES-192-CBC-HMAC-SHA256"
+#define LN_aes_192_cbc_hmac_sha256              "aes-192-cbc-hmac-sha256"
+#define NID_aes_192_cbc_hmac_sha256             949
+
+#define SN_aes_256_cbc_hmac_sha256              "AES-256-CBC-HMAC-SHA256"
+#define LN_aes_256_cbc_hmac_sha256              "aes-256-cbc-hmac-sha256"
+#define NID_aes_256_cbc_hmac_sha256             950
+
+#define SN_chacha20_poly1305            "ChaCha20-Poly1305"
+#define LN_chacha20_poly1305            "chacha20-poly1305"
+#define NID_chacha20_poly1305           1018
+
+#define SN_chacha20             "ChaCha20"
+#define LN_chacha20             "chacha20"
+#define NID_chacha20            1019
+
+#define SN_dhpublicnumber               "dhpublicnumber"
+#define LN_dhpublicnumber               "X9.42 DH"
+#define NID_dhpublicnumber              920
+#define OBJ_dhpublicnumber              OBJ_ISO_US,10046L,2L,1L
+
+#define SN_brainpoolP160r1              "brainpoolP160r1"
+#define NID_brainpoolP160r1             921
+#define OBJ_brainpoolP160r1             1L,3L,36L,3L,3L,2L,8L,1L,1L,1L
+
+#define SN_brainpoolP160t1              "brainpoolP160t1"
+#define NID_brainpoolP160t1             922
+#define OBJ_brainpoolP160t1             1L,3L,36L,3L,3L,2L,8L,1L,1L,2L
+
+#define SN_brainpoolP192r1              "brainpoolP192r1"
+#define NID_brainpoolP192r1             923
+#define OBJ_brainpoolP192r1             1L,3L,36L,3L,3L,2L,8L,1L,1L,3L
+
+#define SN_brainpoolP192t1              "brainpoolP192t1"
+#define NID_brainpoolP192t1             924
+#define OBJ_brainpoolP192t1             1L,3L,36L,3L,3L,2L,8L,1L,1L,4L
+
+#define SN_brainpoolP224r1              "brainpoolP224r1"
+#define NID_brainpoolP224r1             925
+#define OBJ_brainpoolP224r1             1L,3L,36L,3L,3L,2L,8L,1L,1L,5L
+
+#define SN_brainpoolP224t1              "brainpoolP224t1"
+#define NID_brainpoolP224t1             926
+#define OBJ_brainpoolP224t1             1L,3L,36L,3L,3L,2L,8L,1L,1L,6L
+
+#define SN_brainpoolP256r1              "brainpoolP256r1"
+#define NID_brainpoolP256r1             927
+#define OBJ_brainpoolP256r1             1L,3L,36L,3L,3L,2L,8L,1L,1L,7L
+
+#define SN_brainpoolP256t1              "brainpoolP256t1"
+#define NID_brainpoolP256t1             928
+#define OBJ_brainpoolP256t1             1L,3L,36L,3L,3L,2L,8L,1L,1L,8L
+
+#define SN_brainpoolP320r1              "brainpoolP320r1"
+#define NID_brainpoolP320r1             929
+#define OBJ_brainpoolP320r1             1L,3L,36L,3L,3L,2L,8L,1L,1L,9L
+
+#define SN_brainpoolP320t1              "brainpoolP320t1"
+#define NID_brainpoolP320t1             930
+#define OBJ_brainpoolP320t1             1L,3L,36L,3L,3L,2L,8L,1L,1L,10L
+
+#define SN_brainpoolP384r1              "brainpoolP384r1"
+#define NID_brainpoolP384r1             931
+#define OBJ_brainpoolP384r1             1L,3L,36L,3L,3L,2L,8L,1L,1L,11L
+
+#define SN_brainpoolP384t1              "brainpoolP384t1"
+#define NID_brainpoolP384t1             932
+#define OBJ_brainpoolP384t1             1L,3L,36L,3L,3L,2L,8L,1L,1L,12L
+
+#define SN_brainpoolP512r1              "brainpoolP512r1"
+#define NID_brainpoolP512r1             933
+#define OBJ_brainpoolP512r1             1L,3L,36L,3L,3L,2L,8L,1L,1L,13L
+
+#define SN_brainpoolP512t1              "brainpoolP512t1"
+#define NID_brainpoolP512t1             934
+#define OBJ_brainpoolP512t1             1L,3L,36L,3L,3L,2L,8L,1L,1L,14L
+
+#define OBJ_x9_63_scheme                1L,3L,133L,16L,840L,63L,0L
+
+#define OBJ_secg_scheme         OBJ_certicom_arc,1L
+
+#define SN_dhSinglePass_stdDH_sha1kdf_scheme            "dhSinglePass-stdDH-sha1kdf-scheme"
+#define NID_dhSinglePass_stdDH_sha1kdf_scheme           936
+#define OBJ_dhSinglePass_stdDH_sha1kdf_scheme           OBJ_x9_63_scheme,2L
+
+#define SN_dhSinglePass_stdDH_sha224kdf_scheme          "dhSinglePass-stdDH-sha224kdf-scheme"
+#define NID_dhSinglePass_stdDH_sha224kdf_scheme         937
+#define OBJ_dhSinglePass_stdDH_sha224kdf_scheme         OBJ_secg_scheme,11L,0L
+
+#define SN_dhSinglePass_stdDH_sha256kdf_scheme          "dhSinglePass-stdDH-sha256kdf-scheme"
+#define NID_dhSinglePass_stdDH_sha256kdf_scheme         938
+#define OBJ_dhSinglePass_stdDH_sha256kdf_scheme         OBJ_secg_scheme,11L,1L
+
+#define SN_dhSinglePass_stdDH_sha384kdf_scheme          "dhSinglePass-stdDH-sha384kdf-scheme"
+#define NID_dhSinglePass_stdDH_sha384kdf_scheme         939
+#define OBJ_dhSinglePass_stdDH_sha384kdf_scheme         OBJ_secg_scheme,11L,2L
+
+#define SN_dhSinglePass_stdDH_sha512kdf_scheme          "dhSinglePass-stdDH-sha512kdf-scheme"
+#define NID_dhSinglePass_stdDH_sha512kdf_scheme         940
+#define OBJ_dhSinglePass_stdDH_sha512kdf_scheme         OBJ_secg_scheme,11L,3L
+
+#define SN_dhSinglePass_cofactorDH_sha1kdf_scheme               "dhSinglePass-cofactorDH-sha1kdf-scheme"
+#define NID_dhSinglePass_cofactorDH_sha1kdf_scheme              941
+#define OBJ_dhSinglePass_cofactorDH_sha1kdf_scheme              OBJ_x9_63_scheme,3L
+
+#define SN_dhSinglePass_cofactorDH_sha224kdf_scheme             "dhSinglePass-cofactorDH-sha224kdf-scheme"
+#define NID_dhSinglePass_cofactorDH_sha224kdf_scheme            942
+#define OBJ_dhSinglePass_cofactorDH_sha224kdf_scheme            OBJ_secg_scheme,14L,0L
+
+#define SN_dhSinglePass_cofactorDH_sha256kdf_scheme             "dhSinglePass-cofactorDH-sha256kdf-scheme"
+#define NID_dhSinglePass_cofactorDH_sha256kdf_scheme            943
+#define OBJ_dhSinglePass_cofactorDH_sha256kdf_scheme            OBJ_secg_scheme,14L,1L
+
+#define SN_dhSinglePass_cofactorDH_sha384kdf_scheme             "dhSinglePass-cofactorDH-sha384kdf-scheme"
+#define NID_dhSinglePass_cofactorDH_sha384kdf_scheme            944
+#define OBJ_dhSinglePass_cofactorDH_sha384kdf_scheme            OBJ_secg_scheme,14L,2L
+
+#define SN_dhSinglePass_cofactorDH_sha512kdf_scheme             "dhSinglePass-cofactorDH-sha512kdf-scheme"
+#define NID_dhSinglePass_cofactorDH_sha512kdf_scheme            945
+#define OBJ_dhSinglePass_cofactorDH_sha512kdf_scheme            OBJ_secg_scheme,14L,3L
+
+#define SN_dh_std_kdf           "dh-std-kdf"
+#define NID_dh_std_kdf          946
+
+#define SN_dh_cofactor_kdf              "dh-cofactor-kdf"
+#define NID_dh_cofactor_kdf             947
+
+#define SN_ct_precert_scts              "ct_precert_scts"
+#define LN_ct_precert_scts              "CT Precertificate SCTs"
+#define NID_ct_precert_scts             951
+#define OBJ_ct_precert_scts             1L,3L,6L,1L,4L,1L,11129L,2L,4L,2L
+
+#define SN_ct_precert_poison            "ct_precert_poison"
+#define LN_ct_precert_poison            "CT Precertificate Poison"
+#define NID_ct_precert_poison           952
+#define OBJ_ct_precert_poison           1L,3L,6L,1L,4L,1L,11129L,2L,4L,3L
+
+#define SN_ct_precert_signer            "ct_precert_signer"
+#define LN_ct_precert_signer            "CT Precertificate Signer"
+#define NID_ct_precert_signer           953
+#define OBJ_ct_precert_signer           1L,3L,6L,1L,4L,1L,11129L,2L,4L,4L
+
+#define SN_ct_cert_scts         "ct_cert_scts"
+#define LN_ct_cert_scts         "CT Certificate SCTs"
+#define NID_ct_cert_scts                954
+#define OBJ_ct_cert_scts                1L,3L,6L,1L,4L,1L,11129L,2L,4L,5L
+
+#define SN_jurisdictionLocalityName             "jurisdictionL"
+#define LN_jurisdictionLocalityName             "jurisdictionLocalityName"
+#define NID_jurisdictionLocalityName            955
+#define OBJ_jurisdictionLocalityName            1L,3L,6L,1L,4L,1L,311L,60L,2L,1L,1L
+
+#define SN_jurisdictionStateOrProvinceName              "jurisdictionST"
+#define LN_jurisdictionStateOrProvinceName              "jurisdictionStateOrProvinceName"
+#define NID_jurisdictionStateOrProvinceName             956
+#define OBJ_jurisdictionStateOrProvinceName             1L,3L,6L,1L,4L,1L,311L,60L,2L,1L,2L
+
+#define SN_jurisdictionCountryName              "jurisdictionC"
+#define LN_jurisdictionCountryName              "jurisdictionCountryName"
+#define NID_jurisdictionCountryName             957
+#define OBJ_jurisdictionCountryName             1L,3L,6L,1L,4L,1L,311L,60L,2L,1L,3L
+
+#define SN_id_scrypt            "id-scrypt"
+#define LN_id_scrypt            "scrypt"
+#define NID_id_scrypt           973
+#define OBJ_id_scrypt           1L,3L,6L,1L,4L,1L,11591L,4L,11L
+
+#define SN_tls1_prf             "TLS1-PRF"
+#define LN_tls1_prf             "tls1-prf"
+#define NID_tls1_prf            1021
+
+#define SN_hkdf         "HKDF"
+#define LN_hkdf         "hkdf"
+#define NID_hkdf                1036
+
+#define SN_id_pkinit            "id-pkinit"
+#define NID_id_pkinit           1031
+#define OBJ_id_pkinit           1L,3L,6L,1L,5L,2L,3L
+
+#define SN_pkInitClientAuth             "pkInitClientAuth"
+#define LN_pkInitClientAuth             "PKINIT Client Auth"
+#define NID_pkInitClientAuth            1032
+#define OBJ_pkInitClientAuth            OBJ_id_pkinit,4L
+
+#define SN_pkInitKDC            "pkInitKDC"
+#define LN_pkInitKDC            "Signing KDC Response"
+#define NID_pkInitKDC           1033
+#define OBJ_pkInitKDC           OBJ_id_pkinit,5L
+
+#define SN_X25519               "X25519"
+#define NID_X25519              1034
+#define OBJ_X25519              1L,3L,101L,110L
+
+#define SN_X448         "X448"
+#define NID_X448                1035
+#define OBJ_X448                1L,3L,101L,111L
+
+#define SN_ED25519              "ED25519"
+#define NID_ED25519             1087
+#define OBJ_ED25519             1L,3L,101L,112L
+
+#define SN_ED448                "ED448"
+#define NID_ED448               1088
+#define OBJ_ED448               1L,3L,101L,113L
+
+#define SN_kx_rsa               "KxRSA"
+#define LN_kx_rsa               "kx-rsa"
+#define NID_kx_rsa              1037
+
+#define SN_kx_ecdhe             "KxECDHE"
+#define LN_kx_ecdhe             "kx-ecdhe"
+#define NID_kx_ecdhe            1038
+
+#define SN_kx_dhe               "KxDHE"
+#define LN_kx_dhe               "kx-dhe"
+#define NID_kx_dhe              1039
+
+#define SN_kx_ecdhe_psk         "KxECDHE-PSK"
+#define LN_kx_ecdhe_psk         "kx-ecdhe-psk"
+#define NID_kx_ecdhe_psk                1040
+
+#define SN_kx_dhe_psk           "KxDHE-PSK"
+#define LN_kx_dhe_psk           "kx-dhe-psk"
+#define NID_kx_dhe_psk          1041
+
+#define SN_kx_rsa_psk           "KxRSA_PSK"
+#define LN_kx_rsa_psk           "kx-rsa-psk"
+#define NID_kx_rsa_psk          1042
+
+#define SN_kx_psk               "KxPSK"
+#define LN_kx_psk               "kx-psk"
+#define NID_kx_psk              1043
+
+#define SN_kx_srp               "KxSRP"
+#define LN_kx_srp               "kx-srp"
+#define NID_kx_srp              1044
+
+#define SN_kx_gost              "KxGOST"
+#define LN_kx_gost              "kx-gost"
+#define NID_kx_gost             1045
+
+#define SN_kx_any               "KxANY"
+#define LN_kx_any               "kx-any"
+#define NID_kx_any              1063
+
+#define SN_auth_rsa             "AuthRSA"
+#define LN_auth_rsa             "auth-rsa"
+#define NID_auth_rsa            1046
+
+#define SN_auth_ecdsa           "AuthECDSA"
+#define LN_auth_ecdsa           "auth-ecdsa"
+#define NID_auth_ecdsa          1047
+
+#define SN_auth_psk             "AuthPSK"
+#define LN_auth_psk             "auth-psk"
+#define NID_auth_psk            1048
+
+#define SN_auth_dss             "AuthDSS"
+#define LN_auth_dss             "auth-dss"
+#define NID_auth_dss            1049
+
+#define SN_auth_gost01          "AuthGOST01"
+#define LN_auth_gost01          "auth-gost01"
+#define NID_auth_gost01         1050
+
+#define SN_auth_gost12          "AuthGOST12"
+#define LN_auth_gost12          "auth-gost12"
+#define NID_auth_gost12         1051
+
+#define SN_auth_srp             "AuthSRP"
+#define LN_auth_srp             "auth-srp"
+#define NID_auth_srp            1052
+
+#define SN_auth_null            "AuthNULL"
+#define LN_auth_null            "auth-null"
+#define NID_auth_null           1053
+
+#define SN_auth_any             "AuthANY"
+#define LN_auth_any             "auth-any"
+#define NID_auth_any            1064
+
+#define SN_poly1305             "Poly1305"
+#define LN_poly1305             "poly1305"
+#define NID_poly1305            1061
+
+#define SN_siphash              "SipHash"
+#define LN_siphash              "siphash"
+#define NID_siphash             1062
+
+#define SN_ffdhe2048            "ffdhe2048"
+#define NID_ffdhe2048           1126
+
+#define SN_ffdhe3072            "ffdhe3072"
+#define NID_ffdhe3072           1127
+
+#define SN_ffdhe4096            "ffdhe4096"
+#define NID_ffdhe4096           1128
+
+#define SN_ffdhe6144            "ffdhe6144"
+#define NID_ffdhe6144           1129
+
+#define SN_ffdhe8192            "ffdhe8192"
+#define NID_ffdhe8192           1130
+
+#define SN_ISO_UA               "ISO-UA"
+#define NID_ISO_UA              1150
+#define OBJ_ISO_UA              OBJ_member_body,804L
+
+#define SN_ua_pki               "ua-pki"
+#define NID_ua_pki              1151
+#define OBJ_ua_pki              OBJ_ISO_UA,2L,1L,1L,1L
+
+#define SN_dstu28147            "dstu28147"
+#define LN_dstu28147            "DSTU Gost 28147-2009"
+#define NID_dstu28147           1152
+#define OBJ_dstu28147           OBJ_ua_pki,1L,1L,1L
+
+#define SN_dstu28147_ofb                "dstu28147-ofb"
+#define LN_dstu28147_ofb                "DSTU Gost 28147-2009 OFB mode"
+#define NID_dstu28147_ofb               1153
+#define OBJ_dstu28147_ofb               OBJ_dstu28147,2L
+
+#define SN_dstu28147_cfb                "dstu28147-cfb"
+#define LN_dstu28147_cfb                "DSTU Gost 28147-2009 CFB mode"
+#define NID_dstu28147_cfb               1154
+#define OBJ_dstu28147_cfb               OBJ_dstu28147,3L
+
+#define SN_dstu28147_wrap               "dstu28147-wrap"
+#define LN_dstu28147_wrap               "DSTU Gost 28147-2009 key wrap"
+#define NID_dstu28147_wrap              1155
+#define OBJ_dstu28147_wrap              OBJ_dstu28147,5L
+
+#define SN_hmacWithDstu34311            "hmacWithDstu34311"
+#define LN_hmacWithDstu34311            "HMAC DSTU Gost 34311-95"
+#define NID_hmacWithDstu34311           1156
+#define OBJ_hmacWithDstu34311           OBJ_ua_pki,1L,1L,2L
+
+#define SN_dstu34311            "dstu34311"
+#define LN_dstu34311            "DSTU Gost 34311-95"
+#define NID_dstu34311           1157
+#define OBJ_dstu34311           OBJ_ua_pki,1L,2L,1L
+
+#define SN_dstu4145le           "dstu4145le"
+#define LN_dstu4145le           "DSTU 4145-2002 little endian"
+#define NID_dstu4145le          1158
+#define OBJ_dstu4145le          OBJ_ua_pki,1L,3L,1L,1L
+
+#define SN_dstu4145be           "dstu4145be"
+#define LN_dstu4145be           "DSTU 4145-2002 big endian"
+#define NID_dstu4145be          1159
+#define OBJ_dstu4145be          OBJ_dstu4145le,1L,1L
+
+#define SN_uacurve0             "uacurve0"
+#define LN_uacurve0             "DSTU curve 0"
+#define NID_uacurve0            1160
+#define OBJ_uacurve0            OBJ_dstu4145le,2L,0L
+
+#define SN_uacurve1             "uacurve1"
+#define LN_uacurve1             "DSTU curve 1"
+#define NID_uacurve1            1161
+#define OBJ_uacurve1            OBJ_dstu4145le,2L,1L
+
+#define SN_uacurve2             "uacurve2"
+#define LN_uacurve2             "DSTU curve 2"
+#define NID_uacurve2            1162
+#define OBJ_uacurve2            OBJ_dstu4145le,2L,2L
+
+#define SN_uacurve3             "uacurve3"
+#define LN_uacurve3             "DSTU curve 3"
+#define NID_uacurve3            1163
+#define OBJ_uacurve3            OBJ_dstu4145le,2L,3L
+
+#define SN_uacurve4             "uacurve4"
+#define LN_uacurve4             "DSTU curve 4"
+#define NID_uacurve4            1164
+#define OBJ_uacurve4            OBJ_dstu4145le,2L,4L
+
+#define SN_uacurve5             "uacurve5"
+#define LN_uacurve5             "DSTU curve 5"
+#define NID_uacurve5            1165
+#define OBJ_uacurve5            OBJ_dstu4145le,2L,5L
+
+#define SN_uacurve6             "uacurve6"
+#define LN_uacurve6             "DSTU curve 6"
+#define NID_uacurve6            1166
+#define OBJ_uacurve6            OBJ_dstu4145le,2L,6L
+
+#define SN_uacurve7             "uacurve7"
+#define LN_uacurve7             "DSTU curve 7"
+#define NID_uacurve7            1167
+#define OBJ_uacurve7            OBJ_dstu4145le,2L,7L
+
+#define SN_uacurve8             "uacurve8"
+#define LN_uacurve8             "DSTU curve 8"
+#define NID_uacurve8            1168
+#define OBJ_uacurve8            OBJ_dstu4145le,2L,8L
+
+#define SN_uacurve9             "uacurve9"
+#define LN_uacurve9             "DSTU curve 9"
+#define NID_uacurve9            1169
+#define OBJ_uacurve9            OBJ_dstu4145le,2L,9L
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/objects.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/objects.h
new file mode 100644
index 000000000..5e8b5762f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/objects.h
@@ -0,0 +1,175 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_OBJECTS_H
+# define HEADER_OBJECTS_H
+
+# include <openssl/obj_mac.h>
+# include <openssl/bio.h>
+# include <openssl/asn1.h>
+# include <openssl/objectserr.h>
+
+# define OBJ_NAME_TYPE_UNDEF             0x00
+# define OBJ_NAME_TYPE_MD_METH           0x01
+# define OBJ_NAME_TYPE_CIPHER_METH       0x02
+# define OBJ_NAME_TYPE_PKEY_METH         0x03
+# define OBJ_NAME_TYPE_COMP_METH         0x04
+# define OBJ_NAME_TYPE_NUM               0x05
+
+# define OBJ_NAME_ALIAS                  0x8000
+
+# define OBJ_BSEARCH_VALUE_ON_NOMATCH            0x01
+# define OBJ_BSEARCH_FIRST_VALUE_ON_MATCH        0x02
+
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+typedef struct obj_name_st {
+    int type;
+    int alias;
+    const char *name;
+    const char *data;
+} OBJ_NAME;
+
+# define         OBJ_create_and_add_object(a,b,c) OBJ_create(a,b,c)
+
+int OBJ_NAME_init(void);
+int OBJ_NAME_new_index(unsigned long (*hash_func) (const char *),
+                       int (*cmp_func) (const char *, const char *),
+                       void (*free_func) (const char *, int, const char *));
+const char *OBJ_NAME_get(const char *name, int type);
+int OBJ_NAME_add(const char *name, int type, const char *data);
+int OBJ_NAME_remove(const char *name, int type);
+void OBJ_NAME_cleanup(int type); /* -1 for everything */
+void OBJ_NAME_do_all(int type, void (*fn) (const OBJ_NAME *, void *arg),
+                     void *arg);
+void OBJ_NAME_do_all_sorted(int type,
+                            void (*fn) (const OBJ_NAME *, void *arg),
+                            void *arg);
+
+ASN1_OBJECT *OBJ_dup(const ASN1_OBJECT *o);
+ASN1_OBJECT *OBJ_nid2obj(int n);
+const char *OBJ_nid2ln(int n);
+const char *OBJ_nid2sn(int n);
+int OBJ_obj2nid(const ASN1_OBJECT *o);
+ASN1_OBJECT *OBJ_txt2obj(const char *s, int no_name);
+int OBJ_obj2txt(char *buf, int buf_len, const ASN1_OBJECT *a, int no_name);
+int OBJ_txt2nid(const char *s);
+int OBJ_ln2nid(const char *s);
+int OBJ_sn2nid(const char *s);
+int OBJ_cmp(const ASN1_OBJECT *a, const ASN1_OBJECT *b);
+const void *OBJ_bsearch_(const void *key, const void *base, int num, int size,
+                         int (*cmp) (const void *, const void *));
+const void *OBJ_bsearch_ex_(const void *key, const void *base, int num,
+                            int size,
+                            int (*cmp) (const void *, const void *),
+                            int flags);
+
+# define _DECLARE_OBJ_BSEARCH_CMP_FN(scope, type1, type2, nm)    \
+  static int nm##_cmp_BSEARCH_CMP_FN(const void *, const void *); \
+  static int nm##_cmp(type1 const *, type2 const *); \
+  scope type2 * OBJ_bsearch_##nm(type1 *key, type2 const *base, int num)
+
+# define DECLARE_OBJ_BSEARCH_CMP_FN(type1, type2, cmp)   \
+  _DECLARE_OBJ_BSEARCH_CMP_FN(static, type1, type2, cmp)
+# define DECLARE_OBJ_BSEARCH_GLOBAL_CMP_FN(type1, type2, nm)     \
+  type2 * OBJ_bsearch_##nm(type1 *key, type2 const *base, int num)
+
+/*-
+ * Unsolved problem: if a type is actually a pointer type, like
+ * nid_triple is, then its impossible to get a const where you need
+ * it. Consider:
+ *
+ * typedef int nid_triple[3];
+ * const void *a_;
+ * const nid_triple const *a = a_;
+ *
+ * The assignment discards a const because what you really want is:
+ *
+ * const int const * const *a = a_;
+ *
+ * But if you do that, you lose the fact that a is an array of 3 ints,
+ * which breaks comparison functions.
+ *
+ * Thus we end up having to cast, sadly, or unpack the
+ * declarations. Or, as I finally did in this case, declare nid_triple
+ * to be a struct, which it should have been in the first place.
+ *
+ * Ben, August 2008.
+ *
+ * Also, strictly speaking not all types need be const, but handling
+ * the non-constness means a lot of complication, and in practice
+ * comparison routines do always not touch their arguments.
+ */
+
+# define IMPLEMENT_OBJ_BSEARCH_CMP_FN(type1, type2, nm)  \
+  static int nm##_cmp_BSEARCH_CMP_FN(const void *a_, const void *b_)    \
+      { \
+      type1 const *a = a_; \
+      type2 const *b = b_; \
+      return nm##_cmp(a,b); \
+      } \
+  static type2 *OBJ_bsearch_##nm(type1 *key, type2 const *base, int num) \
+      { \
+      return (type2 *)OBJ_bsearch_(key, base, num, sizeof(type2), \
+                                        nm##_cmp_BSEARCH_CMP_FN); \
+      } \
+      extern void dummy_prototype(void)
+
+# define IMPLEMENT_OBJ_BSEARCH_GLOBAL_CMP_FN(type1, type2, nm)   \
+  static int nm##_cmp_BSEARCH_CMP_FN(const void *a_, const void *b_)    \
+      { \
+      type1 const *a = a_; \
+      type2 const *b = b_; \
+      return nm##_cmp(a,b); \
+      } \
+  type2 *OBJ_bsearch_##nm(type1 *key, type2 const *base, int num) \
+      { \
+      return (type2 *)OBJ_bsearch_(key, base, num, sizeof(type2), \
+                                        nm##_cmp_BSEARCH_CMP_FN); \
+      } \
+      extern void dummy_prototype(void)
+
+# define OBJ_bsearch(type1,key,type2,base,num,cmp)                              \
+  ((type2 *)OBJ_bsearch_(CHECKED_PTR_OF(type1,key),CHECKED_PTR_OF(type2,base), \
+                         num,sizeof(type2),                             \
+                         ((void)CHECKED_PTR_OF(type1,cmp##_type_1),     \
+                          (void)CHECKED_PTR_OF(type2,cmp##_type_2),     \
+                          cmp##_BSEARCH_CMP_FN)))
+
+# define OBJ_bsearch_ex(type1,key,type2,base,num,cmp,flags)                      \
+  ((type2 *)OBJ_bsearch_ex_(CHECKED_PTR_OF(type1,key),CHECKED_PTR_OF(type2,base), \
+                         num,sizeof(type2),                             \
+                         ((void)CHECKED_PTR_OF(type1,cmp##_type_1),     \
+                          (void)type_2=CHECKED_PTR_OF(type2,cmp##_type_2), \
+                          cmp##_BSEARCH_CMP_FN)),flags)
+
+int OBJ_new_nid(int num);
+int OBJ_add_object(const ASN1_OBJECT *obj);
+int OBJ_create(const char *oid, const char *sn, const char *ln);
+#if OPENSSL_API_COMPAT < 0x10100000L
+# define OBJ_cleanup() while(0) continue
+#endif
+int OBJ_create_objects(BIO *in);
+
+size_t OBJ_length(const ASN1_OBJECT *obj);
+const unsigned char *OBJ_get0_data(const ASN1_OBJECT *obj);
+
+int OBJ_find_sigid_algs(int signid, int *pdig_nid, int *ppkey_nid);
+int OBJ_find_sigid_by_algs(int *psignid, int dig_nid, int pkey_nid);
+int OBJ_add_sigid(int signid, int dig_id, int pkey_id);
+void OBJ_sigid_free(void);
+
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/objectserr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/objectserr.h
new file mode 100644
index 000000000..02308dfac
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/objectserr.h
@@ -0,0 +1,38 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_OBJERR_H
+# define HEADER_OBJERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_OBJ_strings(void);
+
+/*
+ * OBJ function codes.
+ */
+# define OBJ_F_OBJ_ADD_OBJECT                             105
+# define OBJ_F_OBJ_ADD_SIGID                              107
+# define OBJ_F_OBJ_CREATE                                 100
+# define OBJ_F_OBJ_DUP                                    101
+# define OBJ_F_OBJ_NAME_NEW_INDEX                         106
+# define OBJ_F_OBJ_NID2LN                                 102
+# define OBJ_F_OBJ_NID2OBJ                                103
+# define OBJ_F_OBJ_NID2SN                                 104
+# define OBJ_F_OBJ_TXT2OBJ                                108
+
+/*
+ * OBJ reason codes.
+ */
+# define OBJ_R_OID_EXISTS                                 102
+# define OBJ_R_UNKNOWN_NID                                101
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/ocsp.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ocsp.h
new file mode 100644
index 000000000..0a17166b5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ocsp.h
@@ -0,0 +1,352 @@
+/*
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_OCSP_H
+# define HEADER_OCSP_H
+
+#include <openssl/opensslconf.h>
+
+/*
+ * These definitions are outside the OPENSSL_NO_OCSP guard because although for
+ * historical reasons they have OCSP_* names, they can actually be used
+ * independently of OCSP. E.g. see RFC5280
+ */
+/*-
+ *   CRLReason ::= ENUMERATED {
+ *        unspecified             (0),
+ *        keyCompromise           (1),
+ *        cACompromise            (2),
+ *        affiliationChanged      (3),
+ *        superseded              (4),
+ *        cessationOfOperation    (5),
+ *        certificateHold         (6),
+ *        removeFromCRL           (8) }
+ */
+#  define OCSP_REVOKED_STATUS_NOSTATUS               -1
+#  define OCSP_REVOKED_STATUS_UNSPECIFIED             0
+#  define OCSP_REVOKED_STATUS_KEYCOMPROMISE           1
+#  define OCSP_REVOKED_STATUS_CACOMPROMISE            2
+#  define OCSP_REVOKED_STATUS_AFFILIATIONCHANGED      3
+#  define OCSP_REVOKED_STATUS_SUPERSEDED              4
+#  define OCSP_REVOKED_STATUS_CESSATIONOFOPERATION    5
+#  define OCSP_REVOKED_STATUS_CERTIFICATEHOLD         6
+#  define OCSP_REVOKED_STATUS_REMOVEFROMCRL           8
+
+
+# ifndef OPENSSL_NO_OCSP
+
+#  include <openssl/ossl_typ.h>
+#  include <openssl/x509.h>
+#  include <openssl/x509v3.h>
+#  include <openssl/safestack.h>
+#  include <openssl/ocsperr.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+/* Various flags and values */
+
+#  define OCSP_DEFAULT_NONCE_LENGTH       16
+
+#  define OCSP_NOCERTS                    0x1
+#  define OCSP_NOINTERN                   0x2
+#  define OCSP_NOSIGS                     0x4
+#  define OCSP_NOCHAIN                    0x8
+#  define OCSP_NOVERIFY                   0x10
+#  define OCSP_NOEXPLICIT                 0x20
+#  define OCSP_NOCASIGN                   0x40
+#  define OCSP_NODELEGATED                0x80
+#  define OCSP_NOCHECKS                   0x100
+#  define OCSP_TRUSTOTHER                 0x200
+#  define OCSP_RESPID_KEY                 0x400
+#  define OCSP_NOTIME                     0x800
+
+typedef struct ocsp_cert_id_st OCSP_CERTID;
+
+DEFINE_STACK_OF(OCSP_CERTID)
+
+typedef struct ocsp_one_request_st OCSP_ONEREQ;
+
+DEFINE_STACK_OF(OCSP_ONEREQ)
+
+typedef struct ocsp_req_info_st OCSP_REQINFO;
+typedef struct ocsp_signature_st OCSP_SIGNATURE;
+typedef struct ocsp_request_st OCSP_REQUEST;
+
+#  define OCSP_RESPONSE_STATUS_SUCCESSFUL           0
+#  define OCSP_RESPONSE_STATUS_MALFORMEDREQUEST     1
+#  define OCSP_RESPONSE_STATUS_INTERNALERROR        2
+#  define OCSP_RESPONSE_STATUS_TRYLATER             3
+#  define OCSP_RESPONSE_STATUS_SIGREQUIRED          5
+#  define OCSP_RESPONSE_STATUS_UNAUTHORIZED         6
+
+typedef struct ocsp_resp_bytes_st OCSP_RESPBYTES;
+
+#  define V_OCSP_RESPID_NAME 0
+#  define V_OCSP_RESPID_KEY  1
+
+DEFINE_STACK_OF(OCSP_RESPID)
+
+typedef struct ocsp_revoked_info_st OCSP_REVOKEDINFO;
+
+#  define V_OCSP_CERTSTATUS_GOOD    0
+#  define V_OCSP_CERTSTATUS_REVOKED 1
+#  define V_OCSP_CERTSTATUS_UNKNOWN 2
+
+typedef struct ocsp_cert_status_st OCSP_CERTSTATUS;
+typedef struct ocsp_single_response_st OCSP_SINGLERESP;
+
+DEFINE_STACK_OF(OCSP_SINGLERESP)
+
+typedef struct ocsp_response_data_st OCSP_RESPDATA;
+
+typedef struct ocsp_basic_response_st OCSP_BASICRESP;
+
+typedef struct ocsp_crl_id_st OCSP_CRLID;
+typedef struct ocsp_service_locator_st OCSP_SERVICELOC;
+
+#  define PEM_STRING_OCSP_REQUEST "OCSP REQUEST"
+#  define PEM_STRING_OCSP_RESPONSE "OCSP RESPONSE"
+
+#  define d2i_OCSP_REQUEST_bio(bp,p) ASN1_d2i_bio_of(OCSP_REQUEST,OCSP_REQUEST_new,d2i_OCSP_REQUEST,bp,p)
+
+#  define d2i_OCSP_RESPONSE_bio(bp,p) ASN1_d2i_bio_of(OCSP_RESPONSE,OCSP_RESPONSE_new,d2i_OCSP_RESPONSE,bp,p)
+
+#  define PEM_read_bio_OCSP_REQUEST(bp,x,cb) (OCSP_REQUEST *)PEM_ASN1_read_bio( \
+     (char *(*)())d2i_OCSP_REQUEST,PEM_STRING_OCSP_REQUEST, \
+     bp,(char **)(x),cb,NULL)
+
+#  define PEM_read_bio_OCSP_RESPONSE(bp,x,cb)(OCSP_RESPONSE *)PEM_ASN1_read_bio(\
+     (char *(*)())d2i_OCSP_RESPONSE,PEM_STRING_OCSP_RESPONSE, \
+     bp,(char **)(x),cb,NULL)
+
+#  define PEM_write_bio_OCSP_REQUEST(bp,o) \
+    PEM_ASN1_write_bio((int (*)())i2d_OCSP_REQUEST,PEM_STRING_OCSP_REQUEST,\
+                        bp,(char *)(o), NULL,NULL,0,NULL,NULL)
+
+#  define PEM_write_bio_OCSP_RESPONSE(bp,o) \
+    PEM_ASN1_write_bio((int (*)())i2d_OCSP_RESPONSE,PEM_STRING_OCSP_RESPONSE,\
+                        bp,(char *)(o), NULL,NULL,0,NULL,NULL)
+
+#  define i2d_OCSP_RESPONSE_bio(bp,o) ASN1_i2d_bio_of(OCSP_RESPONSE,i2d_OCSP_RESPONSE,bp,o)
+
+#  define i2d_OCSP_REQUEST_bio(bp,o) ASN1_i2d_bio_of(OCSP_REQUEST,i2d_OCSP_REQUEST,bp,o)
+
+#  define ASN1_BIT_STRING_digest(data,type,md,len) \
+        ASN1_item_digest(ASN1_ITEM_rptr(ASN1_BIT_STRING),type,data,md,len)
+
+#  define OCSP_CERTSTATUS_dup(cs)\
+                (OCSP_CERTSTATUS*)ASN1_dup((int(*)())i2d_OCSP_CERTSTATUS,\
+                (char *(*)())d2i_OCSP_CERTSTATUS,(char *)(cs))
+
+OCSP_CERTID *OCSP_CERTID_dup(OCSP_CERTID *id);
+
+OCSP_RESPONSE *OCSP_sendreq_bio(BIO *b, const char *path, OCSP_REQUEST *req);
+OCSP_REQ_CTX *OCSP_sendreq_new(BIO *io, const char *path, OCSP_REQUEST *req,
+                               int maxline);
+int OCSP_REQ_CTX_nbio(OCSP_REQ_CTX *rctx);
+int OCSP_sendreq_nbio(OCSP_RESPONSE **presp, OCSP_REQ_CTX *rctx);
+OCSP_REQ_CTX *OCSP_REQ_CTX_new(BIO *io, int maxline);
+void OCSP_REQ_CTX_free(OCSP_REQ_CTX *rctx);
+void OCSP_set_max_response_length(OCSP_REQ_CTX *rctx, unsigned long len);
+int OCSP_REQ_CTX_i2d(OCSP_REQ_CTX *rctx, const ASN1_ITEM *it,
+                     ASN1_VALUE *val);
+int OCSP_REQ_CTX_nbio_d2i(OCSP_REQ_CTX *rctx, ASN1_VALUE **pval,
+                          const ASN1_ITEM *it);
+BIO *OCSP_REQ_CTX_get0_mem_bio(OCSP_REQ_CTX *rctx);
+int OCSP_REQ_CTX_http(OCSP_REQ_CTX *rctx, const char *op, const char *path);
+int OCSP_REQ_CTX_set1_req(OCSP_REQ_CTX *rctx, OCSP_REQUEST *req);
+int OCSP_REQ_CTX_add1_header(OCSP_REQ_CTX *rctx,
+                             const char *name, const char *value);
+
+OCSP_CERTID *OCSP_cert_to_id(const EVP_MD *dgst, const X509 *subject,
+                             const X509 *issuer);
+
+OCSP_CERTID *OCSP_cert_id_new(const EVP_MD *dgst,
+                              const X509_NAME *issuerName,
+                              const ASN1_BIT_STRING *issuerKey,
+                              const ASN1_INTEGER *serialNumber);
+
+OCSP_ONEREQ *OCSP_request_add0_id(OCSP_REQUEST *req, OCSP_CERTID *cid);
+
+int OCSP_request_add1_nonce(OCSP_REQUEST *req, unsigned char *val, int len);
+int OCSP_basic_add1_nonce(OCSP_BASICRESP *resp, unsigned char *val, int len);
+int OCSP_check_nonce(OCSP_REQUEST *req, OCSP_BASICRESP *bs);
+int OCSP_copy_nonce(OCSP_BASICRESP *resp, OCSP_REQUEST *req);
+
+int OCSP_request_set1_name(OCSP_REQUEST *req, X509_NAME *nm);
+int OCSP_request_add1_cert(OCSP_REQUEST *req, X509 *cert);
+
+int OCSP_request_sign(OCSP_REQUEST *req,
+                      X509 *signer,
+                      EVP_PKEY *key,
+                      const EVP_MD *dgst,
+                      STACK_OF(X509) *certs, unsigned long flags);
+
+int OCSP_response_status(OCSP_RESPONSE *resp);
+OCSP_BASICRESP *OCSP_response_get1_basic(OCSP_RESPONSE *resp);
+
+const ASN1_OCTET_STRING *OCSP_resp_get0_signature(const OCSP_BASICRESP *bs);
+const X509_ALGOR *OCSP_resp_get0_tbs_sigalg(const OCSP_BASICRESP *bs);
+const OCSP_RESPDATA *OCSP_resp_get0_respdata(const OCSP_BASICRESP *bs);
+int OCSP_resp_get0_signer(OCSP_BASICRESP *bs, X509 **signer,
+                          STACK_OF(X509) *extra_certs);
+
+int OCSP_resp_count(OCSP_BASICRESP *bs);
+OCSP_SINGLERESP *OCSP_resp_get0(OCSP_BASICRESP *bs, int idx);
+const ASN1_GENERALIZEDTIME *OCSP_resp_get0_produced_at(const OCSP_BASICRESP* bs);
+const STACK_OF(X509) *OCSP_resp_get0_certs(const OCSP_BASICRESP *bs);
+int OCSP_resp_get0_id(const OCSP_BASICRESP *bs,
+                      const ASN1_OCTET_STRING **pid,
+                      const X509_NAME **pname);
+int OCSP_resp_get1_id(const OCSP_BASICRESP *bs,
+                      ASN1_OCTET_STRING **pid,
+                      X509_NAME **pname);
+
+int OCSP_resp_find(OCSP_BASICRESP *bs, OCSP_CERTID *id, int last);
+int OCSP_single_get0_status(OCSP_SINGLERESP *single, int *reason,
+                            ASN1_GENERALIZEDTIME **revtime,
+                            ASN1_GENERALIZEDTIME **thisupd,
+                            ASN1_GENERALIZEDTIME **nextupd);
+int OCSP_resp_find_status(OCSP_BASICRESP *bs, OCSP_CERTID *id, int *status,
+                          int *reason,
+                          ASN1_GENERALIZEDTIME **revtime,
+                          ASN1_GENERALIZEDTIME **thisupd,
+                          ASN1_GENERALIZEDTIME **nextupd);
+int OCSP_check_validity(ASN1_GENERALIZEDTIME *thisupd,
+                        ASN1_GENERALIZEDTIME *nextupd, long sec, long maxsec);
+
+int OCSP_request_verify(OCSP_REQUEST *req, STACK_OF(X509) *certs,
+                        X509_STORE *store, unsigned long flags);
+
+int OCSP_parse_url(const char *url, char **phost, char **pport, char **ppath,
+                   int *pssl);
+
+int OCSP_id_issuer_cmp(OCSP_CERTID *a, OCSP_CERTID *b);
+int OCSP_id_cmp(OCSP_CERTID *a, OCSP_CERTID *b);
+
+int OCSP_request_onereq_count(OCSP_REQUEST *req);
+OCSP_ONEREQ *OCSP_request_onereq_get0(OCSP_REQUEST *req, int i);
+OCSP_CERTID *OCSP_onereq_get0_id(OCSP_ONEREQ *one);
+int OCSP_id_get0_info(ASN1_OCTET_STRING **piNameHash, ASN1_OBJECT **pmd,
+                      ASN1_OCTET_STRING **pikeyHash,
+                      ASN1_INTEGER **pserial, OCSP_CERTID *cid);
+int OCSP_request_is_signed(OCSP_REQUEST *req);
+OCSP_RESPONSE *OCSP_response_create(int status, OCSP_BASICRESP *bs);
+OCSP_SINGLERESP *OCSP_basic_add1_status(OCSP_BASICRESP *rsp,
+                                        OCSP_CERTID *cid,
+                                        int status, int reason,
+                                        ASN1_TIME *revtime,
+                                        ASN1_TIME *thisupd,
+                                        ASN1_TIME *nextupd);
+int OCSP_basic_add1_cert(OCSP_BASICRESP *resp, X509 *cert);
+int OCSP_basic_sign(OCSP_BASICRESP *brsp,
+                    X509 *signer, EVP_PKEY *key, const EVP_MD *dgst,
+                    STACK_OF(X509) *certs, unsigned long flags);
+int OCSP_basic_sign_ctx(OCSP_BASICRESP *brsp,
+                        X509 *signer, EVP_MD_CTX *ctx,
+                        STACK_OF(X509) *certs, unsigned long flags);
+int OCSP_RESPID_set_by_name(OCSP_RESPID *respid, X509 *cert);
+int OCSP_RESPID_set_by_key(OCSP_RESPID *respid, X509 *cert);
+int OCSP_RESPID_match(OCSP_RESPID *respid, X509 *cert);
+
+X509_EXTENSION *OCSP_crlID_new(const char *url, long *n, char *tim);
+
+X509_EXTENSION *OCSP_accept_responses_new(char **oids);
+
+X509_EXTENSION *OCSP_archive_cutoff_new(char *tim);
+
+X509_EXTENSION *OCSP_url_svcloc_new(X509_NAME *issuer, const char **urls);
+
+int OCSP_REQUEST_get_ext_count(OCSP_REQUEST *x);
+int OCSP_REQUEST_get_ext_by_NID(OCSP_REQUEST *x, int nid, int lastpos);
+int OCSP_REQUEST_get_ext_by_OBJ(OCSP_REQUEST *x, const ASN1_OBJECT *obj,
+                                int lastpos);
+int OCSP_REQUEST_get_ext_by_critical(OCSP_REQUEST *x, int crit, int lastpos);
+X509_EXTENSION *OCSP_REQUEST_get_ext(OCSP_REQUEST *x, int loc);
+X509_EXTENSION *OCSP_REQUEST_delete_ext(OCSP_REQUEST *x, int loc);
+void *OCSP_REQUEST_get1_ext_d2i(OCSP_REQUEST *x, int nid, int *crit,
+                                int *idx);
+int OCSP_REQUEST_add1_ext_i2d(OCSP_REQUEST *x, int nid, void *value, int crit,
+                              unsigned long flags);
+int OCSP_REQUEST_add_ext(OCSP_REQUEST *x, X509_EXTENSION *ex, int loc);
+
+int OCSP_ONEREQ_get_ext_count(OCSP_ONEREQ *x);
+int OCSP_ONEREQ_get_ext_by_NID(OCSP_ONEREQ *x, int nid, int lastpos);
+int OCSP_ONEREQ_get_ext_by_OBJ(OCSP_ONEREQ *x, const ASN1_OBJECT *obj, int lastpos);
+int OCSP_ONEREQ_get_ext_by_critical(OCSP_ONEREQ *x, int crit, int lastpos);
+X509_EXTENSION *OCSP_ONEREQ_get_ext(OCSP_ONEREQ *x, int loc);
+X509_EXTENSION *OCSP_ONEREQ_delete_ext(OCSP_ONEREQ *x, int loc);
+void *OCSP_ONEREQ_get1_ext_d2i(OCSP_ONEREQ *x, int nid, int *crit, int *idx);
+int OCSP_ONEREQ_add1_ext_i2d(OCSP_ONEREQ *x, int nid, void *value, int crit,
+                             unsigned long flags);
+int OCSP_ONEREQ_add_ext(OCSP_ONEREQ *x, X509_EXTENSION *ex, int loc);
+
+int OCSP_BASICRESP_get_ext_count(OCSP_BASICRESP *x);
+int OCSP_BASICRESP_get_ext_by_NID(OCSP_BASICRESP *x, int nid, int lastpos);
+int OCSP_BASICRESP_get_ext_by_OBJ(OCSP_BASICRESP *x, const ASN1_OBJECT *obj,
+                                  int lastpos);
+int OCSP_BASICRESP_get_ext_by_critical(OCSP_BASICRESP *x, int crit,
+                                       int lastpos);
+X509_EXTENSION *OCSP_BASICRESP_get_ext(OCSP_BASICRESP *x, int loc);
+X509_EXTENSION *OCSP_BASICRESP_delete_ext(OCSP_BASICRESP *x, int loc);
+void *OCSP_BASICRESP_get1_ext_d2i(OCSP_BASICRESP *x, int nid, int *crit,
+                                  int *idx);
+int OCSP_BASICRESP_add1_ext_i2d(OCSP_BASICRESP *x, int nid, void *value,
+                                int crit, unsigned long flags);
+int OCSP_BASICRESP_add_ext(OCSP_BASICRESP *x, X509_EXTENSION *ex, int loc);
+
+int OCSP_SINGLERESP_get_ext_count(OCSP_SINGLERESP *x);
+int OCSP_SINGLERESP_get_ext_by_NID(OCSP_SINGLERESP *x, int nid, int lastpos);
+int OCSP_SINGLERESP_get_ext_by_OBJ(OCSP_SINGLERESP *x, const ASN1_OBJECT *obj,
+                                   int lastpos);
+int OCSP_SINGLERESP_get_ext_by_critical(OCSP_SINGLERESP *x, int crit,
+                                        int lastpos);
+X509_EXTENSION *OCSP_SINGLERESP_get_ext(OCSP_SINGLERESP *x, int loc);
+X509_EXTENSION *OCSP_SINGLERESP_delete_ext(OCSP_SINGLERESP *x, int loc);
+void *OCSP_SINGLERESP_get1_ext_d2i(OCSP_SINGLERESP *x, int nid, int *crit,
+                                   int *idx);
+int OCSP_SINGLERESP_add1_ext_i2d(OCSP_SINGLERESP *x, int nid, void *value,
+                                 int crit, unsigned long flags);
+int OCSP_SINGLERESP_add_ext(OCSP_SINGLERESP *x, X509_EXTENSION *ex, int loc);
+const OCSP_CERTID *OCSP_SINGLERESP_get0_id(const OCSP_SINGLERESP *x);
+
+DECLARE_ASN1_FUNCTIONS(OCSP_SINGLERESP)
+DECLARE_ASN1_FUNCTIONS(OCSP_CERTSTATUS)
+DECLARE_ASN1_FUNCTIONS(OCSP_REVOKEDINFO)
+DECLARE_ASN1_FUNCTIONS(OCSP_BASICRESP)
+DECLARE_ASN1_FUNCTIONS(OCSP_RESPDATA)
+DECLARE_ASN1_FUNCTIONS(OCSP_RESPID)
+DECLARE_ASN1_FUNCTIONS(OCSP_RESPONSE)
+DECLARE_ASN1_FUNCTIONS(OCSP_RESPBYTES)
+DECLARE_ASN1_FUNCTIONS(OCSP_ONEREQ)
+DECLARE_ASN1_FUNCTIONS(OCSP_CERTID)
+DECLARE_ASN1_FUNCTIONS(OCSP_REQUEST)
+DECLARE_ASN1_FUNCTIONS(OCSP_SIGNATURE)
+DECLARE_ASN1_FUNCTIONS(OCSP_REQINFO)
+DECLARE_ASN1_FUNCTIONS(OCSP_CRLID)
+DECLARE_ASN1_FUNCTIONS(OCSP_SERVICELOC)
+
+const char *OCSP_response_status_str(long s);
+const char *OCSP_cert_status_str(long s);
+const char *OCSP_crl_reason_str(long s);
+
+int OCSP_REQUEST_print(BIO *bp, OCSP_REQUEST *a, unsigned long flags);
+int OCSP_RESPONSE_print(BIO *bp, OCSP_RESPONSE *o, unsigned long flags);
+
+int OCSP_basic_verify(OCSP_BASICRESP *bs, STACK_OF(X509) *certs,
+                      X509_STORE *st, unsigned long flags);
+
+
+#  ifdef  __cplusplus
+}
+#  endif
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/ocsperr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ocsperr.h
new file mode 100644
index 000000000..7d93b12d4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ocsperr.h
@@ -0,0 +1,74 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_OCSPERR_H
+# define HEADER_OCSPERR_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_OCSP
+
+#  ifdef  __cplusplus
+extern "C"
+#  endif
+int ERR_load_OCSP_strings(void);
+
+/*
+ * OCSP function codes.
+ */
+#  define OCSP_F_D2I_OCSP_NONCE                            102
+#  define OCSP_F_OCSP_BASIC_ADD1_STATUS                    103
+#  define OCSP_F_OCSP_BASIC_SIGN                           104
+#  define OCSP_F_OCSP_BASIC_SIGN_CTX                       119
+#  define OCSP_F_OCSP_BASIC_VERIFY                         105
+#  define OCSP_F_OCSP_CERT_ID_NEW                          101
+#  define OCSP_F_OCSP_CHECK_DELEGATED                      106
+#  define OCSP_F_OCSP_CHECK_IDS                            107
+#  define OCSP_F_OCSP_CHECK_ISSUER                         108
+#  define OCSP_F_OCSP_CHECK_VALIDITY                       115
+#  define OCSP_F_OCSP_MATCH_ISSUERID                       109
+#  define OCSP_F_OCSP_PARSE_URL                            114
+#  define OCSP_F_OCSP_REQUEST_SIGN                         110
+#  define OCSP_F_OCSP_REQUEST_VERIFY                       116
+#  define OCSP_F_OCSP_RESPONSE_GET1_BASIC                  111
+#  define OCSP_F_PARSE_HTTP_LINE1                          118
+
+/*
+ * OCSP reason codes.
+ */
+#  define OCSP_R_CERTIFICATE_VERIFY_ERROR                  101
+#  define OCSP_R_DIGEST_ERR                                102
+#  define OCSP_R_ERROR_IN_NEXTUPDATE_FIELD                 122
+#  define OCSP_R_ERROR_IN_THISUPDATE_FIELD                 123
+#  define OCSP_R_ERROR_PARSING_URL                         121
+#  define OCSP_R_MISSING_OCSPSIGNING_USAGE                 103
+#  define OCSP_R_NEXTUPDATE_BEFORE_THISUPDATE              124
+#  define OCSP_R_NOT_BASIC_RESPONSE                        104
+#  define OCSP_R_NO_CERTIFICATES_IN_CHAIN                  105
+#  define OCSP_R_NO_RESPONSE_DATA                          108
+#  define OCSP_R_NO_REVOKED_TIME                           109
+#  define OCSP_R_NO_SIGNER_KEY                             130
+#  define OCSP_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE    110
+#  define OCSP_R_REQUEST_NOT_SIGNED                        128
+#  define OCSP_R_RESPONSE_CONTAINS_NO_REVOCATION_DATA      111
+#  define OCSP_R_ROOT_CA_NOT_TRUSTED                       112
+#  define OCSP_R_SERVER_RESPONSE_ERROR                     114
+#  define OCSP_R_SERVER_RESPONSE_PARSE_ERROR               115
+#  define OCSP_R_SIGNATURE_FAILURE                         117
+#  define OCSP_R_SIGNER_CERTIFICATE_NOT_FOUND              118
+#  define OCSP_R_STATUS_EXPIRED                            125
+#  define OCSP_R_STATUS_NOT_YET_VALID                      126
+#  define OCSP_R_STATUS_TOO_OLD                            127
+#  define OCSP_R_UNKNOWN_MESSAGE_DIGEST                    119
+#  define OCSP_R_UNKNOWN_NID                               120
+#  define OCSP_R_UNSUPPORTED_REQUESTORNAME_TYPE            129
+
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/opensslconf.h.in b/trunk/3rdparty/openssl-1.1-fit/include/openssl/opensslconf.h.in
new file mode 100644
index 000000000..bc98cad51
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/opensslconf.h.in
@@ -0,0 +1,155 @@
+/*
+ * {- join("\n * ", @autowarntext) -}
+ *
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/opensslv.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+#ifdef OPENSSL_ALGORITHM_DEFINES
+# error OPENSSL_ALGORITHM_DEFINES no longer supported
+#endif
+
+/*
+ * OpenSSL was configured with the following options:
+ */
+
+{- if (@{$config{openssl_sys_defines}}) {
+      foreach (@{$config{openssl_sys_defines}}) {
+	$OUT .= "#ifndef $_\n";
+	$OUT .= "# define $_ 1\n";
+	$OUT .= "#endif\n";
+      }
+    }
+    foreach (@{$config{openssl_api_defines}}) {
+        (my $macro, my $value) = $_ =~ /^(.*?)=(.*?)$/;
+        $OUT .= "#define $macro $value\n";
+    }
+    if (@{$config{openssl_algorithm_defines}}) {
+      foreach (@{$config{openssl_algorithm_defines}}) {
+	$OUT .= "#ifndef $_\n";
+	$OUT .= "# define $_\n";
+	$OUT .= "#endif\n";
+      }
+    }
+    if (@{$config{openssl_thread_defines}}) {
+      foreach (@{$config{openssl_thread_defines}}) {
+	$OUT .= "#ifndef $_\n";
+	$OUT .= "# define $_\n";
+	$OUT .= "#endif\n";
+      }
+    }
+    if (@{$config{openssl_other_defines}}) {
+      foreach (@{$config{openssl_other_defines}}) {
+	$OUT .= "#ifndef $_\n";
+	$OUT .= "# define $_\n";
+	$OUT .= "#endif\n";
+      }
+    }
+    "";
+-}
+
+/*
+ * Sometimes OPENSSSL_NO_xxx ends up with an empty file and some compilers
+ * don't like that.  This will hopefully silence them.
+ */
+#define NON_EMPTY_TRANSLATION_UNIT static void *dummy = &dummy;
+
+/*
+ * Applications should use -DOPENSSL_API_COMPAT=<version> to suppress the
+ * declarations of functions deprecated in or before <version>. Otherwise, they
+ * still won't see them if the library has been built to disable deprecated
+ * functions.
+ */
+#ifndef DECLARE_DEPRECATED
+# define DECLARE_DEPRECATED(f)   f;
+# ifdef __GNUC__
+#  if __GNUC__ > 3 || (__GNUC__ == 3 && __GNUC_MINOR__ > 0)
+#   undef DECLARE_DEPRECATED
+#   define DECLARE_DEPRECATED(f)    f __attribute__ ((deprecated));
+#  endif
+# endif
+#endif
+
+#ifndef OPENSSL_FILE
+# ifdef OPENSSL_NO_FILENAMES
+#  define OPENSSL_FILE ""
+#  define OPENSSL_LINE 0
+# else
+#  define OPENSSL_FILE __FILE__
+#  define OPENSSL_LINE __LINE__
+# endif
+#endif
+
+#ifndef OPENSSL_MIN_API
+# define OPENSSL_MIN_API 0
+#endif
+
+#if !defined(OPENSSL_API_COMPAT) || OPENSSL_API_COMPAT < OPENSSL_MIN_API
+# undef OPENSSL_API_COMPAT
+# define OPENSSL_API_COMPAT OPENSSL_MIN_API
+#endif
+
+/*
+ * Do not deprecate things to be deprecated in version 1.2.0 before the
+ * OpenSSL version number matches.
+ */
+#if OPENSSL_VERSION_NUMBER < 0x10200000L
+# define DEPRECATEDIN_1_2_0(f)   f;
+#elif OPENSSL_API_COMPAT < 0x10200000L
+# define DEPRECATEDIN_1_2_0(f)   DECLARE_DEPRECATED(f)
+#else
+# define DEPRECATEDIN_1_2_0(f)
+#endif
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+# define DEPRECATEDIN_1_1_0(f)   DECLARE_DEPRECATED(f)
+#else
+# define DEPRECATEDIN_1_1_0(f)
+#endif
+
+#if OPENSSL_API_COMPAT < 0x10000000L
+# define DEPRECATEDIN_1_0_0(f)   DECLARE_DEPRECATED(f)
+#else
+# define DEPRECATEDIN_1_0_0(f)
+#endif
+
+#if OPENSSL_API_COMPAT < 0x00908000L
+# define DEPRECATEDIN_0_9_8(f)   DECLARE_DEPRECATED(f)
+#else
+# define DEPRECATEDIN_0_9_8(f)
+#endif
+
+/* Generate 80386 code? */
+{- $config{processor} eq "386" ? "#define" : "#undef" -} I386_ONLY
+
+#undef OPENSSL_UNISTD
+#define OPENSSL_UNISTD {- $target{unistd} -}
+
+{- $config{export_var_as_fn} ? "#define" : "#undef" -} OPENSSL_EXPORT_VAR_AS_FUNCTION
+
+/*
+ * The following are cipher-specific, but are part of the public API.
+ */
+#if !defined(OPENSSL_SYS_UEFI)
+{- $config{bn_ll} ? "# define" : "# undef" -} BN_LLONG
+/* Only one for the following should be defined */
+{- $config{b64l} ? "# define" : "# undef" -} SIXTY_FOUR_BIT_LONG
+{- $config{b64}  ? "# define" : "# undef" -} SIXTY_FOUR_BIT
+{- $config{b32}  ? "# define" : "# undef" -} THIRTY_TWO_BIT
+#endif
+
+#define RC4_INT {- $config{rc4_int} -}
+
+#ifdef  __cplusplus
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/opensslv.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/opensslv.h
new file mode 100644
index 000000000..a4aa45bd2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/opensslv.h
@@ -0,0 +1,101 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_OPENSSLV_H
+# define HEADER_OPENSSLV_H
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+/*-
+ * Numeric release version identifier:
+ * MNNFFPPS: major minor fix patch status
+ * The status nibble has one of the values 0 for development, 1 to e for betas
+ * 1 to 14, and f for release.  The patch level is exactly that.
+ * For example:
+ * 0.9.3-dev      0x00903000
+ * 0.9.3-beta1    0x00903001
+ * 0.9.3-beta2-dev 0x00903002
+ * 0.9.3-beta2    0x00903002 (same as ...beta2-dev)
+ * 0.9.3          0x0090300f
+ * 0.9.3a         0x0090301f
+ * 0.9.4          0x0090400f
+ * 1.2.3z         0x102031af
+ *
+ * For continuity reasons (because 0.9.5 is already out, and is coded
+ * 0x00905100), between 0.9.5 and 0.9.6 the coding of the patch level
+ * part is slightly different, by setting the highest bit.  This means
+ * that 0.9.5a looks like this: 0x0090581f.  At 0.9.6, we can start
+ * with 0x0090600S...
+ *
+ * (Prior to 0.9.3-dev a different scheme was used: 0.9.2b is 0x0922.)
+ * (Prior to 0.9.5a beta1, a different scheme was used: MMNNFFRBB for
+ *  major minor fix final patch/beta)
+ */
+# define OPENSSL_VERSION_NUMBER  0x1010102fL
+# define OPENSSL_VERSION_TEXT    "OpenSSL 1.1.1b  26 Feb 2019"
+
+/*-
+ * The macros below are to be used for shared library (.so, .dll, ...)
+ * versioning.  That kind of versioning works a bit differently between
+ * operating systems.  The most usual scheme is to set a major and a minor
+ * number, and have the runtime loader check that the major number is equal
+ * to what it was at application link time, while the minor number has to
+ * be greater or equal to what it was at application link time.  With this
+ * scheme, the version number is usually part of the file name, like this:
+ *
+ *      libcrypto.so.0.9
+ *
+ * Some unixen also make a softlink with the major version number only:
+ *
+ *      libcrypto.so.0
+ *
+ * On Tru64 and IRIX 6.x it works a little bit differently.  There, the
+ * shared library version is stored in the file, and is actually a series
+ * of versions, separated by colons.  The rightmost version present in the
+ * library when linking an application is stored in the application to be
+ * matched at run time.  When the application is run, a check is done to
+ * see if the library version stored in the application matches any of the
+ * versions in the version string of the library itself.
+ * This version string can be constructed in any way, depending on what
+ * kind of matching is desired.  However, to implement the same scheme as
+ * the one used in the other unixen, all compatible versions, from lowest
+ * to highest, should be part of the string.  Consecutive builds would
+ * give the following versions strings:
+ *
+ *      3.0
+ *      3.0:3.1
+ *      3.0:3.1:3.2
+ *      4.0
+ *      4.0:4.1
+ *
+ * Notice how version 4 is completely incompatible with version, and
+ * therefore give the breach you can see.
+ *
+ * There may be other schemes as well that I haven't yet discovered.
+ *
+ * So, here's the way it works here: first of all, the library version
+ * number doesn't need at all to match the overall OpenSSL version.
+ * However, it's nice and more understandable if it actually does.
+ * The current library version is stored in the macro SHLIB_VERSION_NUMBER,
+ * which is just a piece of text in the format "M.m.e" (Major, minor, edit).
+ * For the sake of Tru64, IRIX, and any other OS that behaves in similar ways,
+ * we need to keep a history of version numbers, which is done in the
+ * macro SHLIB_VERSION_HISTORY.  The numbers are separated by colons and
+ * should only keep the versions that are binary compatible with the current.
+ */
+# define SHLIB_VERSION_HISTORY ""
+# define SHLIB_VERSION_NUMBER "1.1"
+
+
+#ifdef  __cplusplus
+}
+#endif
+#endif                          /* HEADER_OPENSSLV_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/ossl_typ.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ossl_typ.h
new file mode 100644
index 000000000..7993ca28f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ossl_typ.h
@@ -0,0 +1,196 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_OPENSSL_TYPES_H
+# define HEADER_OPENSSL_TYPES_H
+
+#include <limits.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+# include <openssl/e_os2.h>
+
+# ifdef NO_ASN1_TYPEDEFS
+#  define ASN1_INTEGER            ASN1_STRING
+#  define ASN1_ENUMERATED         ASN1_STRING
+#  define ASN1_BIT_STRING         ASN1_STRING
+#  define ASN1_OCTET_STRING       ASN1_STRING
+#  define ASN1_PRINTABLESTRING    ASN1_STRING
+#  define ASN1_T61STRING          ASN1_STRING
+#  define ASN1_IA5STRING          ASN1_STRING
+#  define ASN1_UTCTIME            ASN1_STRING
+#  define ASN1_GENERALIZEDTIME    ASN1_STRING
+#  define ASN1_TIME               ASN1_STRING
+#  define ASN1_GENERALSTRING      ASN1_STRING
+#  define ASN1_UNIVERSALSTRING    ASN1_STRING
+#  define ASN1_BMPSTRING          ASN1_STRING
+#  define ASN1_VISIBLESTRING      ASN1_STRING
+#  define ASN1_UTF8STRING         ASN1_STRING
+#  define ASN1_BOOLEAN            int
+#  define ASN1_NULL               int
+# else
+typedef struct asn1_string_st ASN1_INTEGER;
+typedef struct asn1_string_st ASN1_ENUMERATED;
+typedef struct asn1_string_st ASN1_BIT_STRING;
+typedef struct asn1_string_st ASN1_OCTET_STRING;
+typedef struct asn1_string_st ASN1_PRINTABLESTRING;
+typedef struct asn1_string_st ASN1_T61STRING;
+typedef struct asn1_string_st ASN1_IA5STRING;
+typedef struct asn1_string_st ASN1_GENERALSTRING;
+typedef struct asn1_string_st ASN1_UNIVERSALSTRING;
+typedef struct asn1_string_st ASN1_BMPSTRING;
+typedef struct asn1_string_st ASN1_UTCTIME;
+typedef struct asn1_string_st ASN1_TIME;
+typedef struct asn1_string_st ASN1_GENERALIZEDTIME;
+typedef struct asn1_string_st ASN1_VISIBLESTRING;
+typedef struct asn1_string_st ASN1_UTF8STRING;
+typedef struct asn1_string_st ASN1_STRING;
+typedef int ASN1_BOOLEAN;
+typedef int ASN1_NULL;
+# endif
+
+typedef struct asn1_object_st ASN1_OBJECT;
+
+typedef struct ASN1_ITEM_st ASN1_ITEM;
+typedef struct asn1_pctx_st ASN1_PCTX;
+typedef struct asn1_sctx_st ASN1_SCTX;
+
+# ifdef _WIN32
+#  undef X509_NAME
+#  undef X509_EXTENSIONS
+#  undef PKCS7_ISSUER_AND_SERIAL
+#  undef PKCS7_SIGNER_INFO
+#  undef OCSP_REQUEST
+#  undef OCSP_RESPONSE
+# endif
+
+# ifdef BIGNUM
+#  undef BIGNUM
+# endif
+struct dane_st;
+typedef struct bio_st BIO;
+typedef struct bignum_st BIGNUM;
+typedef struct bignum_ctx BN_CTX;
+typedef struct bn_blinding_st BN_BLINDING;
+typedef struct bn_mont_ctx_st BN_MONT_CTX;
+typedef struct bn_recp_ctx_st BN_RECP_CTX;
+typedef struct bn_gencb_st BN_GENCB;
+
+typedef struct buf_mem_st BUF_MEM;
+
+typedef struct evp_cipher_st EVP_CIPHER;
+typedef struct evp_cipher_ctx_st EVP_CIPHER_CTX;
+typedef struct evp_md_st EVP_MD;
+typedef struct evp_md_ctx_st EVP_MD_CTX;
+typedef struct evp_pkey_st EVP_PKEY;
+
+typedef struct evp_pkey_asn1_method_st EVP_PKEY_ASN1_METHOD;
+
+typedef struct evp_pkey_method_st EVP_PKEY_METHOD;
+typedef struct evp_pkey_ctx_st EVP_PKEY_CTX;
+
+typedef struct evp_Encode_Ctx_st EVP_ENCODE_CTX;
+
+typedef struct hmac_ctx_st HMAC_CTX;
+
+typedef struct dh_st DH;
+typedef struct dh_method DH_METHOD;
+
+typedef struct dsa_st DSA;
+typedef struct dsa_method DSA_METHOD;
+
+typedef struct rsa_st RSA;
+typedef struct rsa_meth_st RSA_METHOD;
+
+typedef struct ec_key_st EC_KEY;
+typedef struct ec_key_method_st EC_KEY_METHOD;
+
+typedef struct rand_meth_st RAND_METHOD;
+typedef struct rand_drbg_st RAND_DRBG;
+
+typedef struct ssl_dane_st SSL_DANE;
+typedef struct x509_st X509;
+typedef struct X509_algor_st X509_ALGOR;
+typedef struct X509_crl_st X509_CRL;
+typedef struct x509_crl_method_st X509_CRL_METHOD;
+typedef struct x509_revoked_st X509_REVOKED;
+typedef struct X509_name_st X509_NAME;
+typedef struct X509_pubkey_st X509_PUBKEY;
+typedef struct x509_store_st X509_STORE;
+typedef struct x509_store_ctx_st X509_STORE_CTX;
+
+typedef struct x509_object_st X509_OBJECT;
+typedef struct x509_lookup_st X509_LOOKUP;
+typedef struct x509_lookup_method_st X509_LOOKUP_METHOD;
+typedef struct X509_VERIFY_PARAM_st X509_VERIFY_PARAM;
+
+typedef struct x509_sig_info_st X509_SIG_INFO;
+
+typedef struct pkcs8_priv_key_info_st PKCS8_PRIV_KEY_INFO;
+
+typedef struct v3_ext_ctx X509V3_CTX;
+typedef struct conf_st CONF;
+typedef struct ossl_init_settings_st OPENSSL_INIT_SETTINGS;
+
+typedef struct ui_st UI;
+typedef struct ui_method_st UI_METHOD;
+
+typedef struct engine_st ENGINE;
+typedef struct ssl_st SSL;
+typedef struct ssl_ctx_st SSL_CTX;
+
+typedef struct comp_ctx_st COMP_CTX;
+typedef struct comp_method_st COMP_METHOD;
+
+typedef struct X509_POLICY_NODE_st X509_POLICY_NODE;
+typedef struct X509_POLICY_LEVEL_st X509_POLICY_LEVEL;
+typedef struct X509_POLICY_TREE_st X509_POLICY_TREE;
+typedef struct X509_POLICY_CACHE_st X509_POLICY_CACHE;
+
+typedef struct AUTHORITY_KEYID_st AUTHORITY_KEYID;
+typedef struct DIST_POINT_st DIST_POINT;
+typedef struct ISSUING_DIST_POINT_st ISSUING_DIST_POINT;
+typedef struct NAME_CONSTRAINTS_st NAME_CONSTRAINTS;
+
+typedef struct crypto_ex_data_st CRYPTO_EX_DATA;
+
+typedef struct ocsp_req_ctx_st OCSP_REQ_CTX;
+typedef struct ocsp_response_st OCSP_RESPONSE;
+typedef struct ocsp_responder_id_st OCSP_RESPID;
+
+typedef struct sct_st SCT;
+typedef struct sct_ctx_st SCT_CTX;
+typedef struct ctlog_st CTLOG;
+typedef struct ctlog_store_st CTLOG_STORE;
+typedef struct ct_policy_eval_ctx_st CT_POLICY_EVAL_CTX;
+
+typedef struct ossl_store_info_st OSSL_STORE_INFO;
+typedef struct ossl_store_search_st OSSL_STORE_SEARCH;
+
+#if defined(__STDC_VERSION__) && __STDC_VERSION__ >= 199901L && \
+    defined(INTMAX_MAX) && defined(UINTMAX_MAX)
+typedef intmax_t ossl_intmax_t;
+typedef uintmax_t ossl_uintmax_t;
+#else
+/*
+ * Not long long, because the C-library can only be expected to provide
+ * strtoll(), strtoull() at the same time as intmax_t and strtoimax(),
+ * strtoumax().  Since we use these for parsing arguments, we need the
+ * conversion functions, not just the sizes.
+ */
+typedef long ossl_intmax_t;
+typedef unsigned long ossl_uintmax_t;
+#endif
+
+#ifdef  __cplusplus
+}
+#endif
+#endif                          /* def HEADER_OPENSSL_TYPES_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/pem.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/pem.h
new file mode 100644
index 000000000..2ef5b5d04
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/pem.h
@@ -0,0 +1,378 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_PEM_H
+# define HEADER_PEM_H
+
+# include <openssl/e_os2.h>
+# include <openssl/bio.h>
+# include <openssl/safestack.h>
+# include <openssl/evp.h>
+# include <openssl/x509.h>
+# include <openssl/pemerr.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+# define PEM_BUFSIZE             1024
+
+# define PEM_STRING_X509_OLD     "X509 CERTIFICATE"
+# define PEM_STRING_X509         "CERTIFICATE"
+# define PEM_STRING_X509_TRUSTED "TRUSTED CERTIFICATE"
+# define PEM_STRING_X509_REQ_OLD "NEW CERTIFICATE REQUEST"
+# define PEM_STRING_X509_REQ     "CERTIFICATE REQUEST"
+# define PEM_STRING_X509_CRL     "X509 CRL"
+# define PEM_STRING_EVP_PKEY     "ANY PRIVATE KEY"
+# define PEM_STRING_PUBLIC       "PUBLIC KEY"
+# define PEM_STRING_RSA          "RSA PRIVATE KEY"
+# define PEM_STRING_RSA_PUBLIC   "RSA PUBLIC KEY"
+# define PEM_STRING_DSA          "DSA PRIVATE KEY"
+# define PEM_STRING_DSA_PUBLIC   "DSA PUBLIC KEY"
+# define PEM_STRING_PKCS7        "PKCS7"
+# define PEM_STRING_PKCS7_SIGNED "PKCS #7 SIGNED DATA"
+# define PEM_STRING_PKCS8        "ENCRYPTED PRIVATE KEY"
+# define PEM_STRING_PKCS8INF     "PRIVATE KEY"
+# define PEM_STRING_DHPARAMS     "DH PARAMETERS"
+# define PEM_STRING_DHXPARAMS    "X9.42 DH PARAMETERS"
+# define PEM_STRING_SSL_SESSION  "SSL SESSION PARAMETERS"
+# define PEM_STRING_DSAPARAMS    "DSA PARAMETERS"
+# define PEM_STRING_ECDSA_PUBLIC "ECDSA PUBLIC KEY"
+# define PEM_STRING_ECPARAMETERS "EC PARAMETERS"
+# define PEM_STRING_ECPRIVATEKEY "EC PRIVATE KEY"
+# define PEM_STRING_PARAMETERS   "PARAMETERS"
+# define PEM_STRING_CMS          "CMS"
+
+# define PEM_TYPE_ENCRYPTED      10
+# define PEM_TYPE_MIC_ONLY       20
+# define PEM_TYPE_MIC_CLEAR      30
+# define PEM_TYPE_CLEAR          40
+
+/*
+ * These macros make the PEM_read/PEM_write functions easier to maintain and
+ * write. Now they are all implemented with either: IMPLEMENT_PEM_rw(...) or
+ * IMPLEMENT_PEM_rw_cb(...)
+ */
+
+# ifdef OPENSSL_NO_STDIO
+
+#  define IMPLEMENT_PEM_read_fp(name, type, str, asn1) /**/
+#  define IMPLEMENT_PEM_write_fp(name, type, str, asn1) /**/
+#  define IMPLEMENT_PEM_write_fp_const(name, type, str, asn1) /**/
+#  define IMPLEMENT_PEM_write_cb_fp(name, type, str, asn1) /**/
+#  define IMPLEMENT_PEM_write_cb_fp_const(name, type, str, asn1) /**/
+# else
+
+#  define IMPLEMENT_PEM_read_fp(name, type, str, asn1) \
+type *PEM_read_##name(FILE *fp, type **x, pem_password_cb *cb, void *u)\
+{ \
+return PEM_ASN1_read((d2i_of_void *)d2i_##asn1, str,fp,(void **)x,cb,u); \
+}
+
+#  define IMPLEMENT_PEM_write_fp(name, type, str, asn1) \
+int PEM_write_##name(FILE *fp, type *x) \
+{ \
+return PEM_ASN1_write((i2d_of_void *)i2d_##asn1,str,fp,x,NULL,NULL,0,NULL,NULL); \
+}
+
+#  define IMPLEMENT_PEM_write_fp_const(name, type, str, asn1) \
+int PEM_write_##name(FILE *fp, const type *x) \
+{ \
+return PEM_ASN1_write((i2d_of_void *)i2d_##asn1,str,fp,(void *)x,NULL,NULL,0,NULL,NULL); \
+}
+
+#  define IMPLEMENT_PEM_write_cb_fp(name, type, str, asn1) \
+int PEM_write_##name(FILE *fp, type *x, const EVP_CIPHER *enc, \
+             unsigned char *kstr, int klen, pem_password_cb *cb, \
+                  void *u) \
+        { \
+        return PEM_ASN1_write((i2d_of_void *)i2d_##asn1,str,fp,x,enc,kstr,klen,cb,u); \
+        }
+
+#  define IMPLEMENT_PEM_write_cb_fp_const(name, type, str, asn1) \
+int PEM_write_##name(FILE *fp, type *x, const EVP_CIPHER *enc, \
+             unsigned char *kstr, int klen, pem_password_cb *cb, \
+                  void *u) \
+        { \
+        return PEM_ASN1_write((i2d_of_void *)i2d_##asn1,str,fp,x,enc,kstr,klen,cb,u); \
+        }
+
+# endif
+
+# define IMPLEMENT_PEM_read_bio(name, type, str, asn1) \
+type *PEM_read_bio_##name(BIO *bp, type **x, pem_password_cb *cb, void *u)\
+{ \
+return PEM_ASN1_read_bio((d2i_of_void *)d2i_##asn1, str,bp,(void **)x,cb,u); \
+}
+
+# define IMPLEMENT_PEM_write_bio(name, type, str, asn1) \
+int PEM_write_bio_##name(BIO *bp, type *x) \
+{ \
+return PEM_ASN1_write_bio((i2d_of_void *)i2d_##asn1,str,bp,x,NULL,NULL,0,NULL,NULL); \
+}
+
+# define IMPLEMENT_PEM_write_bio_const(name, type, str, asn1) \
+int PEM_write_bio_##name(BIO *bp, const type *x) \
+{ \
+return PEM_ASN1_write_bio((i2d_of_void *)i2d_##asn1,str,bp,(void *)x,NULL,NULL,0,NULL,NULL); \
+}
+
+# define IMPLEMENT_PEM_write_cb_bio(name, type, str, asn1) \
+int PEM_write_bio_##name(BIO *bp, type *x, const EVP_CIPHER *enc, \
+             unsigned char *kstr, int klen, pem_password_cb *cb, void *u) \
+        { \
+        return PEM_ASN1_write_bio((i2d_of_void *)i2d_##asn1,str,bp,x,enc,kstr,klen,cb,u); \
+        }
+
+# define IMPLEMENT_PEM_write_cb_bio_const(name, type, str, asn1) \
+int PEM_write_bio_##name(BIO *bp, type *x, const EVP_CIPHER *enc, \
+             unsigned char *kstr, int klen, pem_password_cb *cb, void *u) \
+        { \
+        return PEM_ASN1_write_bio((i2d_of_void *)i2d_##asn1,str,bp,(void *)x,enc,kstr,klen,cb,u); \
+        }
+
+# define IMPLEMENT_PEM_write(name, type, str, asn1) \
+        IMPLEMENT_PEM_write_bio(name, type, str, asn1) \
+        IMPLEMENT_PEM_write_fp(name, type, str, asn1)
+
+# define IMPLEMENT_PEM_write_const(name, type, str, asn1) \
+        IMPLEMENT_PEM_write_bio_const(name, type, str, asn1) \
+        IMPLEMENT_PEM_write_fp_const(name, type, str, asn1)
+
+# define IMPLEMENT_PEM_write_cb(name, type, str, asn1) \
+        IMPLEMENT_PEM_write_cb_bio(name, type, str, asn1) \
+        IMPLEMENT_PEM_write_cb_fp(name, type, str, asn1)
+
+# define IMPLEMENT_PEM_write_cb_const(name, type, str, asn1) \
+        IMPLEMENT_PEM_write_cb_bio_const(name, type, str, asn1) \
+        IMPLEMENT_PEM_write_cb_fp_const(name, type, str, asn1)
+
+# define IMPLEMENT_PEM_read(name, type, str, asn1) \
+        IMPLEMENT_PEM_read_bio(name, type, str, asn1) \
+        IMPLEMENT_PEM_read_fp(name, type, str, asn1)
+
+# define IMPLEMENT_PEM_rw(name, type, str, asn1) \
+        IMPLEMENT_PEM_read(name, type, str, asn1) \
+        IMPLEMENT_PEM_write(name, type, str, asn1)
+
+# define IMPLEMENT_PEM_rw_const(name, type, str, asn1) \
+        IMPLEMENT_PEM_read(name, type, str, asn1) \
+        IMPLEMENT_PEM_write_const(name, type, str, asn1)
+
+# define IMPLEMENT_PEM_rw_cb(name, type, str, asn1) \
+        IMPLEMENT_PEM_read(name, type, str, asn1) \
+        IMPLEMENT_PEM_write_cb(name, type, str, asn1)
+
+/* These are the same except they are for the declarations */
+
+# if defined(OPENSSL_NO_STDIO)
+
+#  define DECLARE_PEM_read_fp(name, type) /**/
+#  define DECLARE_PEM_write_fp(name, type) /**/
+#  define DECLARE_PEM_write_fp_const(name, type) /**/
+#  define DECLARE_PEM_write_cb_fp(name, type) /**/
+# else
+
+#  define DECLARE_PEM_read_fp(name, type) \
+        type *PEM_read_##name(FILE *fp, type **x, pem_password_cb *cb, void *u);
+
+#  define DECLARE_PEM_write_fp(name, type) \
+        int PEM_write_##name(FILE *fp, type *x);
+
+#  define DECLARE_PEM_write_fp_const(name, type) \
+        int PEM_write_##name(FILE *fp, const type *x);
+
+#  define DECLARE_PEM_write_cb_fp(name, type) \
+        int PEM_write_##name(FILE *fp, type *x, const EVP_CIPHER *enc, \
+             unsigned char *kstr, int klen, pem_password_cb *cb, void *u);
+
+# endif
+
+#  define DECLARE_PEM_read_bio(name, type) \
+        type *PEM_read_bio_##name(BIO *bp, type **x, pem_password_cb *cb, void *u);
+
+#  define DECLARE_PEM_write_bio(name, type) \
+        int PEM_write_bio_##name(BIO *bp, type *x);
+
+#  define DECLARE_PEM_write_bio_const(name, type) \
+        int PEM_write_bio_##name(BIO *bp, const type *x);
+
+#  define DECLARE_PEM_write_cb_bio(name, type) \
+        int PEM_write_bio_##name(BIO *bp, type *x, const EVP_CIPHER *enc, \
+             unsigned char *kstr, int klen, pem_password_cb *cb, void *u);
+
+# define DECLARE_PEM_write(name, type) \
+        DECLARE_PEM_write_bio(name, type) \
+        DECLARE_PEM_write_fp(name, type)
+# define DECLARE_PEM_write_const(name, type) \
+        DECLARE_PEM_write_bio_const(name, type) \
+        DECLARE_PEM_write_fp_const(name, type)
+# define DECLARE_PEM_write_cb(name, type) \
+        DECLARE_PEM_write_cb_bio(name, type) \
+        DECLARE_PEM_write_cb_fp(name, type)
+# define DECLARE_PEM_read(name, type) \
+        DECLARE_PEM_read_bio(name, type) \
+        DECLARE_PEM_read_fp(name, type)
+# define DECLARE_PEM_rw(name, type) \
+        DECLARE_PEM_read(name, type) \
+        DECLARE_PEM_write(name, type)
+# define DECLARE_PEM_rw_const(name, type) \
+        DECLARE_PEM_read(name, type) \
+        DECLARE_PEM_write_const(name, type)
+# define DECLARE_PEM_rw_cb(name, type) \
+        DECLARE_PEM_read(name, type) \
+        DECLARE_PEM_write_cb(name, type)
+typedef int pem_password_cb (char *buf, int size, int rwflag, void *userdata);
+
+int PEM_get_EVP_CIPHER_INFO(char *header, EVP_CIPHER_INFO *cipher);
+int PEM_do_header(EVP_CIPHER_INFO *cipher, unsigned char *data, long *len,
+                  pem_password_cb *callback, void *u);
+
+int PEM_read_bio(BIO *bp, char **name, char **header,
+                 unsigned char **data, long *len);
+#   define PEM_FLAG_SECURE             0x1
+#   define PEM_FLAG_EAY_COMPATIBLE     0x2
+#   define PEM_FLAG_ONLY_B64           0x4
+int PEM_read_bio_ex(BIO *bp, char **name, char **header,
+                    unsigned char **data, long *len, unsigned int flags);
+int PEM_bytes_read_bio_secmem(unsigned char **pdata, long *plen, char **pnm,
+                              const char *name, BIO *bp, pem_password_cb *cb,
+                              void *u);
+int PEM_write_bio(BIO *bp, const char *name, const char *hdr,
+                  const unsigned char *data, long len);
+int PEM_bytes_read_bio(unsigned char **pdata, long *plen, char **pnm,
+                       const char *name, BIO *bp, pem_password_cb *cb,
+                       void *u);
+void *PEM_ASN1_read_bio(d2i_of_void *d2i, const char *name, BIO *bp, void **x,
+                        pem_password_cb *cb, void *u);
+int PEM_ASN1_write_bio(i2d_of_void *i2d, const char *name, BIO *bp, void *x,
+                       const EVP_CIPHER *enc, unsigned char *kstr, int klen,
+                       pem_password_cb *cb, void *u);
+
+STACK_OF(X509_INFO) *PEM_X509_INFO_read_bio(BIO *bp, STACK_OF(X509_INFO) *sk,
+                                            pem_password_cb *cb, void *u);
+int PEM_X509_INFO_write_bio(BIO *bp, X509_INFO *xi, EVP_CIPHER *enc,
+                            unsigned char *kstr, int klen,
+                            pem_password_cb *cd, void *u);
+
+#ifndef OPENSSL_NO_STDIO
+int PEM_read(FILE *fp, char **name, char **header,
+             unsigned char **data, long *len);
+int PEM_write(FILE *fp, const char *name, const char *hdr,
+              const unsigned char *data, long len);
+void *PEM_ASN1_read(d2i_of_void *d2i, const char *name, FILE *fp, void **x,
+                    pem_password_cb *cb, void *u);
+int PEM_ASN1_write(i2d_of_void *i2d, const char *name, FILE *fp,
+                   void *x, const EVP_CIPHER *enc, unsigned char *kstr,
+                   int klen, pem_password_cb *callback, void *u);
+STACK_OF(X509_INFO) *PEM_X509_INFO_read(FILE *fp, STACK_OF(X509_INFO) *sk,
+                                        pem_password_cb *cb, void *u);
+#endif
+
+int PEM_SignInit(EVP_MD_CTX *ctx, EVP_MD *type);
+int PEM_SignUpdate(EVP_MD_CTX *ctx, unsigned char *d, unsigned int cnt);
+int PEM_SignFinal(EVP_MD_CTX *ctx, unsigned char *sigret,
+                  unsigned int *siglen, EVP_PKEY *pkey);
+
+/* The default pem_password_cb that's used internally */
+int PEM_def_callback(char *buf, int num, int rwflag, void *userdata);
+void PEM_proc_type(char *buf, int type);
+void PEM_dek_info(char *buf, const char *type, int len, char *str);
+
+# include <openssl/symhacks.h>
+
+DECLARE_PEM_rw(X509, X509)
+DECLARE_PEM_rw(X509_AUX, X509)
+DECLARE_PEM_rw(X509_REQ, X509_REQ)
+DECLARE_PEM_write(X509_REQ_NEW, X509_REQ)
+DECLARE_PEM_rw(X509_CRL, X509_CRL)
+DECLARE_PEM_rw(PKCS7, PKCS7)
+DECLARE_PEM_rw(NETSCAPE_CERT_SEQUENCE, NETSCAPE_CERT_SEQUENCE)
+DECLARE_PEM_rw(PKCS8, X509_SIG)
+DECLARE_PEM_rw(PKCS8_PRIV_KEY_INFO, PKCS8_PRIV_KEY_INFO)
+# ifndef OPENSSL_NO_RSA
+DECLARE_PEM_rw_cb(RSAPrivateKey, RSA)
+DECLARE_PEM_rw_const(RSAPublicKey, RSA)
+DECLARE_PEM_rw(RSA_PUBKEY, RSA)
+# endif
+# ifndef OPENSSL_NO_DSA
+DECLARE_PEM_rw_cb(DSAPrivateKey, DSA)
+DECLARE_PEM_rw(DSA_PUBKEY, DSA)
+DECLARE_PEM_rw_const(DSAparams, DSA)
+# endif
+# ifndef OPENSSL_NO_EC
+DECLARE_PEM_rw_const(ECPKParameters, EC_GROUP)
+DECLARE_PEM_rw_cb(ECPrivateKey, EC_KEY)
+DECLARE_PEM_rw(EC_PUBKEY, EC_KEY)
+# endif
+# ifndef OPENSSL_NO_DH
+DECLARE_PEM_rw_const(DHparams, DH)
+DECLARE_PEM_write_const(DHxparams, DH)
+# endif
+DECLARE_PEM_rw_cb(PrivateKey, EVP_PKEY)
+DECLARE_PEM_rw(PUBKEY, EVP_PKEY)
+
+int PEM_write_bio_PrivateKey_traditional(BIO *bp, EVP_PKEY *x,
+                                         const EVP_CIPHER *enc,
+                                         unsigned char *kstr, int klen,
+                                         pem_password_cb *cb, void *u);
+
+int PEM_write_bio_PKCS8PrivateKey_nid(BIO *bp, EVP_PKEY *x, int nid,
+                                      char *kstr, int klen,
+                                      pem_password_cb *cb, void *u);
+int PEM_write_bio_PKCS8PrivateKey(BIO *, EVP_PKEY *, const EVP_CIPHER *,
+                                  char *, int, pem_password_cb *, void *);
+int i2d_PKCS8PrivateKey_bio(BIO *bp, EVP_PKEY *x, const EVP_CIPHER *enc,
+                            char *kstr, int klen,
+                            pem_password_cb *cb, void *u);
+int i2d_PKCS8PrivateKey_nid_bio(BIO *bp, EVP_PKEY *x, int nid,
+                                char *kstr, int klen,
+                                pem_password_cb *cb, void *u);
+EVP_PKEY *d2i_PKCS8PrivateKey_bio(BIO *bp, EVP_PKEY **x, pem_password_cb *cb,
+                                  void *u);
+
+# ifndef OPENSSL_NO_STDIO
+int i2d_PKCS8PrivateKey_fp(FILE *fp, EVP_PKEY *x, const EVP_CIPHER *enc,
+                           char *kstr, int klen,
+                           pem_password_cb *cb, void *u);
+int i2d_PKCS8PrivateKey_nid_fp(FILE *fp, EVP_PKEY *x, int nid,
+                               char *kstr, int klen,
+                               pem_password_cb *cb, void *u);
+int PEM_write_PKCS8PrivateKey_nid(FILE *fp, EVP_PKEY *x, int nid,
+                                  char *kstr, int klen,
+                                  pem_password_cb *cb, void *u);
+
+EVP_PKEY *d2i_PKCS8PrivateKey_fp(FILE *fp, EVP_PKEY **x, pem_password_cb *cb,
+                                 void *u);
+
+int PEM_write_PKCS8PrivateKey(FILE *fp, EVP_PKEY *x, const EVP_CIPHER *enc,
+                              char *kstr, int klen, pem_password_cb *cd,
+                              void *u);
+# endif
+EVP_PKEY *PEM_read_bio_Parameters(BIO *bp, EVP_PKEY **x);
+int PEM_write_bio_Parameters(BIO *bp, EVP_PKEY *x);
+
+# ifndef OPENSSL_NO_DSA
+EVP_PKEY *b2i_PrivateKey(const unsigned char **in, long length);
+EVP_PKEY *b2i_PublicKey(const unsigned char **in, long length);
+EVP_PKEY *b2i_PrivateKey_bio(BIO *in);
+EVP_PKEY *b2i_PublicKey_bio(BIO *in);
+int i2b_PrivateKey_bio(BIO *out, EVP_PKEY *pk);
+int i2b_PublicKey_bio(BIO *out, EVP_PKEY *pk);
+#  ifndef OPENSSL_NO_RC4
+EVP_PKEY *b2i_PVK_bio(BIO *in, pem_password_cb *cb, void *u);
+int i2b_PVK_bio(BIO *out, EVP_PKEY *pk, int enclevel,
+                pem_password_cb *cb, void *u);
+#  endif
+# endif
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/pem2.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/pem2.h
new file mode 100644
index 000000000..038fe790a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/pem2.h
@@ -0,0 +1,13 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_PEM2_H
+# define HEADER_PEM2_H
+# include <openssl/pemerr.h>
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/pemerr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/pemerr.h
new file mode 100644
index 000000000..cd61b823d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/pemerr.h
@@ -0,0 +1,99 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_PEMERR_H
+# define HEADER_PEMERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_PEM_strings(void);
+
+/*
+ * PEM function codes.
+ */
+# define PEM_F_B2I_DSS                                    127
+# define PEM_F_B2I_PVK_BIO                                128
+# define PEM_F_B2I_RSA                                    129
+# define PEM_F_CHECK_BITLEN_DSA                           130
+# define PEM_F_CHECK_BITLEN_RSA                           131
+# define PEM_F_D2I_PKCS8PRIVATEKEY_BIO                    120
+# define PEM_F_D2I_PKCS8PRIVATEKEY_FP                     121
+# define PEM_F_DO_B2I                                     132
+# define PEM_F_DO_B2I_BIO                                 133
+# define PEM_F_DO_BLOB_HEADER                             134
+# define PEM_F_DO_I2B                                     146
+# define PEM_F_DO_PK8PKEY                                 126
+# define PEM_F_DO_PK8PKEY_FP                              125
+# define PEM_F_DO_PVK_BODY                                135
+# define PEM_F_DO_PVK_HEADER                              136
+# define PEM_F_GET_HEADER_AND_DATA                        143
+# define PEM_F_GET_NAME                                   144
+# define PEM_F_I2B_PVK                                    137
+# define PEM_F_I2B_PVK_BIO                                138
+# define PEM_F_LOAD_IV                                    101
+# define PEM_F_PEM_ASN1_READ                              102
+# define PEM_F_PEM_ASN1_READ_BIO                          103
+# define PEM_F_PEM_ASN1_WRITE                             104
+# define PEM_F_PEM_ASN1_WRITE_BIO                         105
+# define PEM_F_PEM_DEF_CALLBACK                           100
+# define PEM_F_PEM_DO_HEADER                              106
+# define PEM_F_PEM_GET_EVP_CIPHER_INFO                    107
+# define PEM_F_PEM_READ                                   108
+# define PEM_F_PEM_READ_BIO                               109
+# define PEM_F_PEM_READ_BIO_DHPARAMS                      141
+# define PEM_F_PEM_READ_BIO_EX                            145
+# define PEM_F_PEM_READ_BIO_PARAMETERS                    140
+# define PEM_F_PEM_READ_BIO_PRIVATEKEY                    123
+# define PEM_F_PEM_READ_DHPARAMS                          142
+# define PEM_F_PEM_READ_PRIVATEKEY                        124
+# define PEM_F_PEM_SIGNFINAL                              112
+# define PEM_F_PEM_WRITE                                  113
+# define PEM_F_PEM_WRITE_BIO                              114
+# define PEM_F_PEM_WRITE_PRIVATEKEY                       139
+# define PEM_F_PEM_X509_INFO_READ                         115
+# define PEM_F_PEM_X509_INFO_READ_BIO                     116
+# define PEM_F_PEM_X509_INFO_WRITE_BIO                    117
+
+/*
+ * PEM reason codes.
+ */
+# define PEM_R_BAD_BASE64_DECODE                          100
+# define PEM_R_BAD_DECRYPT                                101
+# define PEM_R_BAD_END_LINE                               102
+# define PEM_R_BAD_IV_CHARS                               103
+# define PEM_R_BAD_MAGIC_NUMBER                           116
+# define PEM_R_BAD_PASSWORD_READ                          104
+# define PEM_R_BAD_VERSION_NUMBER                         117
+# define PEM_R_BIO_WRITE_FAILURE                          118
+# define PEM_R_CIPHER_IS_NULL                             127
+# define PEM_R_ERROR_CONVERTING_PRIVATE_KEY               115
+# define PEM_R_EXPECTING_PRIVATE_KEY_BLOB                 119
+# define PEM_R_EXPECTING_PUBLIC_KEY_BLOB                  120
+# define PEM_R_HEADER_TOO_LONG                            128
+# define PEM_R_INCONSISTENT_HEADER                        121
+# define PEM_R_KEYBLOB_HEADER_PARSE_ERROR                 122
+# define PEM_R_KEYBLOB_TOO_SHORT                          123
+# define PEM_R_MISSING_DEK_IV                             129
+# define PEM_R_NOT_DEK_INFO                               105
+# define PEM_R_NOT_ENCRYPTED                              106
+# define PEM_R_NOT_PROC_TYPE                              107
+# define PEM_R_NO_START_LINE                              108
+# define PEM_R_PROBLEMS_GETTING_PASSWORD                  109
+# define PEM_R_PVK_DATA_TOO_SHORT                         124
+# define PEM_R_PVK_TOO_SHORT                              125
+# define PEM_R_READ_KEY                                   111
+# define PEM_R_SHORT_HEADER                               112
+# define PEM_R_UNEXPECTED_DEK_IV                          130
+# define PEM_R_UNSUPPORTED_CIPHER                         113
+# define PEM_R_UNSUPPORTED_ENCRYPTION                     114
+# define PEM_R_UNSUPPORTED_KEY_COMPONENTS                 126
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/pkcs12.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/pkcs12.h
new file mode 100644
index 000000000..3f43dad6d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/pkcs12.h
@@ -0,0 +1,223 @@
+/*
+ * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_PKCS12_H
+# define HEADER_PKCS12_H
+
+# include <openssl/bio.h>
+# include <openssl/x509.h>
+# include <openssl/pkcs12err.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+# define PKCS12_KEY_ID   1
+# define PKCS12_IV_ID    2
+# define PKCS12_MAC_ID   3
+
+/* Default iteration count */
+# ifndef PKCS12_DEFAULT_ITER
+#  define PKCS12_DEFAULT_ITER     PKCS5_DEFAULT_ITER
+# endif
+
+# define PKCS12_MAC_KEY_LENGTH 20
+
+# define PKCS12_SALT_LEN 8
+
+/* It's not clear if these are actually needed... */
+# define PKCS12_key_gen PKCS12_key_gen_utf8
+# define PKCS12_add_friendlyname PKCS12_add_friendlyname_utf8
+
+/* MS key usage constants */
+
+# define KEY_EX  0x10
+# define KEY_SIG 0x80
+
+typedef struct PKCS12_MAC_DATA_st PKCS12_MAC_DATA;
+
+typedef struct PKCS12_st PKCS12;
+
+typedef struct PKCS12_SAFEBAG_st PKCS12_SAFEBAG;
+
+DEFINE_STACK_OF(PKCS12_SAFEBAG)
+
+typedef struct pkcs12_bag_st PKCS12_BAGS;
+
+# define PKCS12_ERROR    0
+# define PKCS12_OK       1
+
+/* Compatibility macros */
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+
+# define M_PKCS12_bag_type PKCS12_bag_type
+# define M_PKCS12_cert_bag_type PKCS12_cert_bag_type
+# define M_PKCS12_crl_bag_type PKCS12_cert_bag_type
+
+# define PKCS12_certbag2x509 PKCS12_SAFEBAG_get1_cert
+# define PKCS12_certbag2scrl PKCS12_SAFEBAG_get1_crl
+# define PKCS12_bag_type PKCS12_SAFEBAG_get_nid
+# define PKCS12_cert_bag_type PKCS12_SAFEBAG_get_bag_nid
+# define PKCS12_x5092certbag PKCS12_SAFEBAG_create_cert
+# define PKCS12_x509crl2certbag PKCS12_SAFEBAG_create_crl
+# define PKCS12_MAKE_KEYBAG PKCS12_SAFEBAG_create0_p8inf
+# define PKCS12_MAKE_SHKEYBAG PKCS12_SAFEBAG_create_pkcs8_encrypt
+
+#endif
+
+DEPRECATEDIN_1_1_0(ASN1_TYPE *PKCS12_get_attr(const PKCS12_SAFEBAG *bag, int attr_nid))
+
+ASN1_TYPE *PKCS8_get_attr(PKCS8_PRIV_KEY_INFO *p8, int attr_nid);
+int PKCS12_mac_present(const PKCS12 *p12);
+void PKCS12_get0_mac(const ASN1_OCTET_STRING **pmac,
+                     const X509_ALGOR **pmacalg,
+                     const ASN1_OCTET_STRING **psalt,
+                     const ASN1_INTEGER **piter,
+                     const PKCS12 *p12);
+
+const ASN1_TYPE *PKCS12_SAFEBAG_get0_attr(const PKCS12_SAFEBAG *bag,
+                                          int attr_nid);
+const ASN1_OBJECT *PKCS12_SAFEBAG_get0_type(const PKCS12_SAFEBAG *bag);
+int PKCS12_SAFEBAG_get_nid(const PKCS12_SAFEBAG *bag);
+int PKCS12_SAFEBAG_get_bag_nid(const PKCS12_SAFEBAG *bag);
+
+X509 *PKCS12_SAFEBAG_get1_cert(const PKCS12_SAFEBAG *bag);
+X509_CRL *PKCS12_SAFEBAG_get1_crl(const PKCS12_SAFEBAG *bag);
+const STACK_OF(PKCS12_SAFEBAG) *
+PKCS12_SAFEBAG_get0_safes(const PKCS12_SAFEBAG *bag);
+const PKCS8_PRIV_KEY_INFO *PKCS12_SAFEBAG_get0_p8inf(const PKCS12_SAFEBAG *bag);
+const X509_SIG *PKCS12_SAFEBAG_get0_pkcs8(const PKCS12_SAFEBAG *bag);
+
+PKCS12_SAFEBAG *PKCS12_SAFEBAG_create_cert(X509 *x509);
+PKCS12_SAFEBAG *PKCS12_SAFEBAG_create_crl(X509_CRL *crl);
+PKCS12_SAFEBAG *PKCS12_SAFEBAG_create0_p8inf(PKCS8_PRIV_KEY_INFO *p8);
+PKCS12_SAFEBAG *PKCS12_SAFEBAG_create0_pkcs8(X509_SIG *p8);
+PKCS12_SAFEBAG *PKCS12_SAFEBAG_create_pkcs8_encrypt(int pbe_nid,
+                                                    const char *pass,
+                                                    int passlen,
+                                                    unsigned char *salt,
+                                                    int saltlen, int iter,
+                                                    PKCS8_PRIV_KEY_INFO *p8inf);
+
+PKCS12_SAFEBAG *PKCS12_item_pack_safebag(void *obj, const ASN1_ITEM *it,
+                                         int nid1, int nid2);
+PKCS8_PRIV_KEY_INFO *PKCS8_decrypt(const X509_SIG *p8, const char *pass,
+                                   int passlen);
+PKCS8_PRIV_KEY_INFO *PKCS12_decrypt_skey(const PKCS12_SAFEBAG *bag,
+                                         const char *pass, int passlen);
+X509_SIG *PKCS8_encrypt(int pbe_nid, const EVP_CIPHER *cipher,
+                        const char *pass, int passlen, unsigned char *salt,
+                        int saltlen, int iter, PKCS8_PRIV_KEY_INFO *p8);
+X509_SIG *PKCS8_set0_pbe(const char *pass, int passlen,
+                        PKCS8_PRIV_KEY_INFO *p8inf, X509_ALGOR *pbe);
+PKCS7 *PKCS12_pack_p7data(STACK_OF(PKCS12_SAFEBAG) *sk);
+STACK_OF(PKCS12_SAFEBAG) *PKCS12_unpack_p7data(PKCS7 *p7);
+PKCS7 *PKCS12_pack_p7encdata(int pbe_nid, const char *pass, int passlen,
+                             unsigned char *salt, int saltlen, int iter,
+                             STACK_OF(PKCS12_SAFEBAG) *bags);
+STACK_OF(PKCS12_SAFEBAG) *PKCS12_unpack_p7encdata(PKCS7 *p7, const char *pass,
+                                                  int passlen);
+
+int PKCS12_pack_authsafes(PKCS12 *p12, STACK_OF(PKCS7) *safes);
+STACK_OF(PKCS7) *PKCS12_unpack_authsafes(const PKCS12 *p12);
+
+int PKCS12_add_localkeyid(PKCS12_SAFEBAG *bag, unsigned char *name,
+                          int namelen);
+int PKCS12_add_friendlyname_asc(PKCS12_SAFEBAG *bag, const char *name,
+                                int namelen);
+int PKCS12_add_friendlyname_utf8(PKCS12_SAFEBAG *bag, const char *name,
+                                 int namelen);
+int PKCS12_add_CSPName_asc(PKCS12_SAFEBAG *bag, const char *name,
+                           int namelen);
+int PKCS12_add_friendlyname_uni(PKCS12_SAFEBAG *bag,
+                                const unsigned char *name, int namelen);
+int PKCS8_add_keyusage(PKCS8_PRIV_KEY_INFO *p8, int usage);
+ASN1_TYPE *PKCS12_get_attr_gen(const STACK_OF(X509_ATTRIBUTE) *attrs,
+                               int attr_nid);
+char *PKCS12_get_friendlyname(PKCS12_SAFEBAG *bag);
+const STACK_OF(X509_ATTRIBUTE) *
+PKCS12_SAFEBAG_get0_attrs(const PKCS12_SAFEBAG *bag);
+unsigned char *PKCS12_pbe_crypt(const X509_ALGOR *algor,
+                                const char *pass, int passlen,
+                                const unsigned char *in, int inlen,
+                                unsigned char **data, int *datalen,
+                                int en_de);
+void *PKCS12_item_decrypt_d2i(const X509_ALGOR *algor, const ASN1_ITEM *it,
+                              const char *pass, int passlen,
+                              const ASN1_OCTET_STRING *oct, int zbuf);
+ASN1_OCTET_STRING *PKCS12_item_i2d_encrypt(X509_ALGOR *algor,
+                                           const ASN1_ITEM *it,
+                                           const char *pass, int passlen,
+                                           void *obj, int zbuf);
+PKCS12 *PKCS12_init(int mode);
+int PKCS12_key_gen_asc(const char *pass, int passlen, unsigned char *salt,
+                       int saltlen, int id, int iter, int n,
+                       unsigned char *out, const EVP_MD *md_type);
+int PKCS12_key_gen_uni(unsigned char *pass, int passlen, unsigned char *salt,
+                       int saltlen, int id, int iter, int n,
+                       unsigned char *out, const EVP_MD *md_type);
+int PKCS12_key_gen_utf8(const char *pass, int passlen, unsigned char *salt,
+                        int saltlen, int id, int iter, int n,
+                        unsigned char *out, const EVP_MD *md_type);
+int PKCS12_PBE_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass, int passlen,
+                        ASN1_TYPE *param, const EVP_CIPHER *cipher,
+                        const EVP_MD *md_type, int en_de);
+int PKCS12_gen_mac(PKCS12 *p12, const char *pass, int passlen,
+                   unsigned char *mac, unsigned int *maclen);
+int PKCS12_verify_mac(PKCS12 *p12, const char *pass, int passlen);
+int PKCS12_set_mac(PKCS12 *p12, const char *pass, int passlen,
+                   unsigned char *salt, int saltlen, int iter,
+                   const EVP_MD *md_type);
+int PKCS12_setup_mac(PKCS12 *p12, int iter, unsigned char *salt,
+                     int saltlen, const EVP_MD *md_type);
+unsigned char *OPENSSL_asc2uni(const char *asc, int asclen,
+                               unsigned char **uni, int *unilen);
+char *OPENSSL_uni2asc(const unsigned char *uni, int unilen);
+unsigned char *OPENSSL_utf82uni(const char *asc, int asclen,
+                                unsigned char **uni, int *unilen);
+char *OPENSSL_uni2utf8(const unsigned char *uni, int unilen);
+
+DECLARE_ASN1_FUNCTIONS(PKCS12)
+DECLARE_ASN1_FUNCTIONS(PKCS12_MAC_DATA)
+DECLARE_ASN1_FUNCTIONS(PKCS12_SAFEBAG)
+DECLARE_ASN1_FUNCTIONS(PKCS12_BAGS)
+
+DECLARE_ASN1_ITEM(PKCS12_SAFEBAGS)
+DECLARE_ASN1_ITEM(PKCS12_AUTHSAFES)
+
+void PKCS12_PBE_add(void);
+int PKCS12_parse(PKCS12 *p12, const char *pass, EVP_PKEY **pkey, X509 **cert,
+                 STACK_OF(X509) **ca);
+PKCS12 *PKCS12_create(const char *pass, const char *name, EVP_PKEY *pkey,
+                      X509 *cert, STACK_OF(X509) *ca, int nid_key, int nid_cert,
+                      int iter, int mac_iter, int keytype);
+
+PKCS12_SAFEBAG *PKCS12_add_cert(STACK_OF(PKCS12_SAFEBAG) **pbags, X509 *cert);
+PKCS12_SAFEBAG *PKCS12_add_key(STACK_OF(PKCS12_SAFEBAG) **pbags,
+                               EVP_PKEY *key, int key_usage, int iter,
+                               int key_nid, const char *pass);
+int PKCS12_add_safe(STACK_OF(PKCS7) **psafes, STACK_OF(PKCS12_SAFEBAG) *bags,
+                    int safe_nid, int iter, const char *pass);
+PKCS12 *PKCS12_add_safes(STACK_OF(PKCS7) *safes, int p7_nid);
+
+int i2d_PKCS12_bio(BIO *bp, PKCS12 *p12);
+# ifndef OPENSSL_NO_STDIO
+int i2d_PKCS12_fp(FILE *fp, PKCS12 *p12);
+# endif
+PKCS12 *d2i_PKCS12_bio(BIO *bp, PKCS12 **p12);
+# ifndef OPENSSL_NO_STDIO
+PKCS12 *d2i_PKCS12_fp(FILE *fp, PKCS12 **p12);
+# endif
+int PKCS12_newpass(PKCS12 *p12, const char *oldpass, const char *newpass);
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/pkcs12err.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/pkcs12err.h
new file mode 100644
index 000000000..c7184ffe7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/pkcs12err.h
@@ -0,0 +1,77 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_PKCS12ERR_H
+# define HEADER_PKCS12ERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_PKCS12_strings(void);
+
+/*
+ * PKCS12 function codes.
+ */
+# define PKCS12_F_OPENSSL_ASC2UNI                         121
+# define PKCS12_F_OPENSSL_UNI2ASC                         124
+# define PKCS12_F_OPENSSL_UNI2UTF8                        127
+# define PKCS12_F_OPENSSL_UTF82UNI                        129
+# define PKCS12_F_PKCS12_CREATE                           105
+# define PKCS12_F_PKCS12_GEN_MAC                          107
+# define PKCS12_F_PKCS12_INIT                             109
+# define PKCS12_F_PKCS12_ITEM_DECRYPT_D2I                 106
+# define PKCS12_F_PKCS12_ITEM_I2D_ENCRYPT                 108
+# define PKCS12_F_PKCS12_ITEM_PACK_SAFEBAG                117
+# define PKCS12_F_PKCS12_KEY_GEN_ASC                      110
+# define PKCS12_F_PKCS12_KEY_GEN_UNI                      111
+# define PKCS12_F_PKCS12_KEY_GEN_UTF8                     116
+# define PKCS12_F_PKCS12_NEWPASS                          128
+# define PKCS12_F_PKCS12_PACK_P7DATA                      114
+# define PKCS12_F_PKCS12_PACK_P7ENCDATA                   115
+# define PKCS12_F_PKCS12_PARSE                            118
+# define PKCS12_F_PKCS12_PBE_CRYPT                        119
+# define PKCS12_F_PKCS12_PBE_KEYIVGEN                     120
+# define PKCS12_F_PKCS12_SAFEBAG_CREATE0_P8INF            112
+# define PKCS12_F_PKCS12_SAFEBAG_CREATE0_PKCS8            113
+# define PKCS12_F_PKCS12_SAFEBAG_CREATE_PKCS8_ENCRYPT     133
+# define PKCS12_F_PKCS12_SETUP_MAC                        122
+# define PKCS12_F_PKCS12_SET_MAC                          123
+# define PKCS12_F_PKCS12_UNPACK_AUTHSAFES                 130
+# define PKCS12_F_PKCS12_UNPACK_P7DATA                    131
+# define PKCS12_F_PKCS12_VERIFY_MAC                       126
+# define PKCS12_F_PKCS8_ENCRYPT                           125
+# define PKCS12_F_PKCS8_SET0_PBE                          132
+
+/*
+ * PKCS12 reason codes.
+ */
+# define PKCS12_R_CANT_PACK_STRUCTURE                     100
+# define PKCS12_R_CONTENT_TYPE_NOT_DATA                   121
+# define PKCS12_R_DECODE_ERROR                            101
+# define PKCS12_R_ENCODE_ERROR                            102
+# define PKCS12_R_ENCRYPT_ERROR                           103
+# define PKCS12_R_ERROR_SETTING_ENCRYPTED_DATA_TYPE       120
+# define PKCS12_R_INVALID_NULL_ARGUMENT                   104
+# define PKCS12_R_INVALID_NULL_PKCS12_POINTER             105
+# define PKCS12_R_IV_GEN_ERROR                            106
+# define PKCS12_R_KEY_GEN_ERROR                           107
+# define PKCS12_R_MAC_ABSENT                              108
+# define PKCS12_R_MAC_GENERATION_ERROR                    109
+# define PKCS12_R_MAC_SETUP_ERROR                         110
+# define PKCS12_R_MAC_STRING_SET_ERROR                    111
+# define PKCS12_R_MAC_VERIFY_FAILURE                      113
+# define PKCS12_R_PARSE_ERROR                             114
+# define PKCS12_R_PKCS12_ALGOR_CIPHERINIT_ERROR           115
+# define PKCS12_R_PKCS12_CIPHERFINAL_ERROR                116
+# define PKCS12_R_PKCS12_PBE_CRYPT_ERROR                  117
+# define PKCS12_R_UNKNOWN_DIGEST_ALGORITHM                118
+# define PKCS12_R_UNSUPPORTED_PKCS12_MODE                 119
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/pkcs7.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/pkcs7.h
new file mode 100644
index 000000000..9b66e002d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/pkcs7.h
@@ -0,0 +1,319 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_PKCS7_H
+# define HEADER_PKCS7_H
+
+# include <openssl/asn1.h>
+# include <openssl/bio.h>
+# include <openssl/e_os2.h>
+
+# include <openssl/symhacks.h>
+# include <openssl/ossl_typ.h>
+# include <openssl/pkcs7err.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+/*-
+Encryption_ID           DES-CBC
+Digest_ID               MD5
+Digest_Encryption_ID    rsaEncryption
+Key_Encryption_ID       rsaEncryption
+*/
+
+typedef struct pkcs7_issuer_and_serial_st {
+    X509_NAME *issuer;
+    ASN1_INTEGER *serial;
+} PKCS7_ISSUER_AND_SERIAL;
+
+typedef struct pkcs7_signer_info_st {
+    ASN1_INTEGER *version;      /* version 1 */
+    PKCS7_ISSUER_AND_SERIAL *issuer_and_serial;
+    X509_ALGOR *digest_alg;
+    STACK_OF(X509_ATTRIBUTE) *auth_attr; /* [ 0 ] */
+    X509_ALGOR *digest_enc_alg;
+    ASN1_OCTET_STRING *enc_digest;
+    STACK_OF(X509_ATTRIBUTE) *unauth_attr; /* [ 1 ] */
+    /* The private key to sign with */
+    EVP_PKEY *pkey;
+} PKCS7_SIGNER_INFO;
+
+DEFINE_STACK_OF(PKCS7_SIGNER_INFO)
+
+typedef struct pkcs7_recip_info_st {
+    ASN1_INTEGER *version;      /* version 0 */
+    PKCS7_ISSUER_AND_SERIAL *issuer_and_serial;
+    X509_ALGOR *key_enc_algor;
+    ASN1_OCTET_STRING *enc_key;
+    X509 *cert;                 /* get the pub-key from this */
+} PKCS7_RECIP_INFO;
+
+DEFINE_STACK_OF(PKCS7_RECIP_INFO)
+
+typedef struct pkcs7_signed_st {
+    ASN1_INTEGER *version;      /* version 1 */
+    STACK_OF(X509_ALGOR) *md_algs; /* md used */
+    STACK_OF(X509) *cert;       /* [ 0 ] */
+    STACK_OF(X509_CRL) *crl;    /* [ 1 ] */
+    STACK_OF(PKCS7_SIGNER_INFO) *signer_info;
+    struct pkcs7_st *contents;
+} PKCS7_SIGNED;
+/*
+ * The above structure is very very similar to PKCS7_SIGN_ENVELOPE. How about
+ * merging the two
+ */
+
+typedef struct pkcs7_enc_content_st {
+    ASN1_OBJECT *content_type;
+    X509_ALGOR *algorithm;
+    ASN1_OCTET_STRING *enc_data; /* [ 0 ] */
+    const EVP_CIPHER *cipher;
+} PKCS7_ENC_CONTENT;
+
+typedef struct pkcs7_enveloped_st {
+    ASN1_INTEGER *version;      /* version 0 */
+    STACK_OF(PKCS7_RECIP_INFO) *recipientinfo;
+    PKCS7_ENC_CONTENT *enc_data;
+} PKCS7_ENVELOPE;
+
+typedef struct pkcs7_signedandenveloped_st {
+    ASN1_INTEGER *version;      /* version 1 */
+    STACK_OF(X509_ALGOR) *md_algs; /* md used */
+    STACK_OF(X509) *cert;       /* [ 0 ] */
+    STACK_OF(X509_CRL) *crl;    /* [ 1 ] */
+    STACK_OF(PKCS7_SIGNER_INFO) *signer_info;
+    PKCS7_ENC_CONTENT *enc_data;
+    STACK_OF(PKCS7_RECIP_INFO) *recipientinfo;
+} PKCS7_SIGN_ENVELOPE;
+
+typedef struct pkcs7_digest_st {
+    ASN1_INTEGER *version;      /* version 0 */
+    X509_ALGOR *md;             /* md used */
+    struct pkcs7_st *contents;
+    ASN1_OCTET_STRING *digest;
+} PKCS7_DIGEST;
+
+typedef struct pkcs7_encrypted_st {
+    ASN1_INTEGER *version;      /* version 0 */
+    PKCS7_ENC_CONTENT *enc_data;
+} PKCS7_ENCRYPT;
+
+typedef struct pkcs7_st {
+    /*
+     * The following is non NULL if it contains ASN1 encoding of this
+     * structure
+     */
+    unsigned char *asn1;
+    long length;
+# define PKCS7_S_HEADER  0
+# define PKCS7_S_BODY    1
+# define PKCS7_S_TAIL    2
+    int state;                  /* used during processing */
+    int detached;
+    ASN1_OBJECT *type;
+    /* content as defined by the type */
+    /*
+     * all encryption/message digests are applied to the 'contents', leaving
+     * out the 'type' field.
+     */
+    union {
+        char *ptr;
+        /* NID_pkcs7_data */
+        ASN1_OCTET_STRING *data;
+        /* NID_pkcs7_signed */
+        PKCS7_SIGNED *sign;
+        /* NID_pkcs7_enveloped */
+        PKCS7_ENVELOPE *enveloped;
+        /* NID_pkcs7_signedAndEnveloped */
+        PKCS7_SIGN_ENVELOPE *signed_and_enveloped;
+        /* NID_pkcs7_digest */
+        PKCS7_DIGEST *digest;
+        /* NID_pkcs7_encrypted */
+        PKCS7_ENCRYPT *encrypted;
+        /* Anything else */
+        ASN1_TYPE *other;
+    } d;
+} PKCS7;
+
+DEFINE_STACK_OF(PKCS7)
+
+# define PKCS7_OP_SET_DETACHED_SIGNATURE 1
+# define PKCS7_OP_GET_DETACHED_SIGNATURE 2
+
+# define PKCS7_get_signed_attributes(si) ((si)->auth_attr)
+# define PKCS7_get_attributes(si)        ((si)->unauth_attr)
+
+# define PKCS7_type_is_signed(a) (OBJ_obj2nid((a)->type) == NID_pkcs7_signed)
+# define PKCS7_type_is_encrypted(a) (OBJ_obj2nid((a)->type) == NID_pkcs7_encrypted)
+# define PKCS7_type_is_enveloped(a) (OBJ_obj2nid((a)->type) == NID_pkcs7_enveloped)
+# define PKCS7_type_is_signedAndEnveloped(a) \
+                (OBJ_obj2nid((a)->type) == NID_pkcs7_signedAndEnveloped)
+# define PKCS7_type_is_data(a)   (OBJ_obj2nid((a)->type) == NID_pkcs7_data)
+# define PKCS7_type_is_digest(a)   (OBJ_obj2nid((a)->type) == NID_pkcs7_digest)
+
+# define PKCS7_set_detached(p,v) \
+                PKCS7_ctrl(p,PKCS7_OP_SET_DETACHED_SIGNATURE,v,NULL)
+# define PKCS7_get_detached(p) \
+                PKCS7_ctrl(p,PKCS7_OP_GET_DETACHED_SIGNATURE,0,NULL)
+
+# define PKCS7_is_detached(p7) (PKCS7_type_is_signed(p7) && PKCS7_get_detached(p7))
+
+/* S/MIME related flags */
+
+# define PKCS7_TEXT              0x1
+# define PKCS7_NOCERTS           0x2
+# define PKCS7_NOSIGS            0x4
+# define PKCS7_NOCHAIN           0x8
+# define PKCS7_NOINTERN          0x10
+# define PKCS7_NOVERIFY          0x20
+# define PKCS7_DETACHED          0x40
+# define PKCS7_BINARY            0x80
+# define PKCS7_NOATTR            0x100
+# define PKCS7_NOSMIMECAP        0x200
+# define PKCS7_NOOLDMIMETYPE     0x400
+# define PKCS7_CRLFEOL           0x800
+# define PKCS7_STREAM            0x1000
+# define PKCS7_NOCRL             0x2000
+# define PKCS7_PARTIAL           0x4000
+# define PKCS7_REUSE_DIGEST      0x8000
+# define PKCS7_NO_DUAL_CONTENT   0x10000
+
+/* Flags: for compatibility with older code */
+
+# define SMIME_TEXT      PKCS7_TEXT
+# define SMIME_NOCERTS   PKCS7_NOCERTS
+# define SMIME_NOSIGS    PKCS7_NOSIGS
+# define SMIME_NOCHAIN   PKCS7_NOCHAIN
+# define SMIME_NOINTERN  PKCS7_NOINTERN
+# define SMIME_NOVERIFY  PKCS7_NOVERIFY
+# define SMIME_DETACHED  PKCS7_DETACHED
+# define SMIME_BINARY    PKCS7_BINARY
+# define SMIME_NOATTR    PKCS7_NOATTR
+
+/* CRLF ASCII canonicalisation */
+# define SMIME_ASCIICRLF         0x80000
+
+DECLARE_ASN1_FUNCTIONS(PKCS7_ISSUER_AND_SERIAL)
+
+int PKCS7_ISSUER_AND_SERIAL_digest(PKCS7_ISSUER_AND_SERIAL *data,
+                                   const EVP_MD *type, unsigned char *md,
+                                   unsigned int *len);
+# ifndef OPENSSL_NO_STDIO
+PKCS7 *d2i_PKCS7_fp(FILE *fp, PKCS7 **p7);
+int i2d_PKCS7_fp(FILE *fp, PKCS7 *p7);
+# endif
+PKCS7 *PKCS7_dup(PKCS7 *p7);
+PKCS7 *d2i_PKCS7_bio(BIO *bp, PKCS7 **p7);
+int i2d_PKCS7_bio(BIO *bp, PKCS7 *p7);
+int i2d_PKCS7_bio_stream(BIO *out, PKCS7 *p7, BIO *in, int flags);
+int PEM_write_bio_PKCS7_stream(BIO *out, PKCS7 *p7, BIO *in, int flags);
+
+DECLARE_ASN1_FUNCTIONS(PKCS7_SIGNER_INFO)
+DECLARE_ASN1_FUNCTIONS(PKCS7_RECIP_INFO)
+DECLARE_ASN1_FUNCTIONS(PKCS7_SIGNED)
+DECLARE_ASN1_FUNCTIONS(PKCS7_ENC_CONTENT)
+DECLARE_ASN1_FUNCTIONS(PKCS7_ENVELOPE)
+DECLARE_ASN1_FUNCTIONS(PKCS7_SIGN_ENVELOPE)
+DECLARE_ASN1_FUNCTIONS(PKCS7_DIGEST)
+DECLARE_ASN1_FUNCTIONS(PKCS7_ENCRYPT)
+DECLARE_ASN1_FUNCTIONS(PKCS7)
+
+DECLARE_ASN1_ITEM(PKCS7_ATTR_SIGN)
+DECLARE_ASN1_ITEM(PKCS7_ATTR_VERIFY)
+
+DECLARE_ASN1_NDEF_FUNCTION(PKCS7)
+DECLARE_ASN1_PRINT_FUNCTION(PKCS7)
+
+long PKCS7_ctrl(PKCS7 *p7, int cmd, long larg, char *parg);
+
+int PKCS7_set_type(PKCS7 *p7, int type);
+int PKCS7_set0_type_other(PKCS7 *p7, int type, ASN1_TYPE *other);
+int PKCS7_set_content(PKCS7 *p7, PKCS7 *p7_data);
+int PKCS7_SIGNER_INFO_set(PKCS7_SIGNER_INFO *p7i, X509 *x509, EVP_PKEY *pkey,
+                          const EVP_MD *dgst);
+int PKCS7_SIGNER_INFO_sign(PKCS7_SIGNER_INFO *si);
+int PKCS7_add_signer(PKCS7 *p7, PKCS7_SIGNER_INFO *p7i);
+int PKCS7_add_certificate(PKCS7 *p7, X509 *x509);
+int PKCS7_add_crl(PKCS7 *p7, X509_CRL *x509);
+int PKCS7_content_new(PKCS7 *p7, int nid);
+int PKCS7_dataVerify(X509_STORE *cert_store, X509_STORE_CTX *ctx,
+                     BIO *bio, PKCS7 *p7, PKCS7_SIGNER_INFO *si);
+int PKCS7_signatureVerify(BIO *bio, PKCS7 *p7, PKCS7_SIGNER_INFO *si,
+                          X509 *x509);
+
+BIO *PKCS7_dataInit(PKCS7 *p7, BIO *bio);
+int PKCS7_dataFinal(PKCS7 *p7, BIO *bio);
+BIO *PKCS7_dataDecode(PKCS7 *p7, EVP_PKEY *pkey, BIO *in_bio, X509 *pcert);
+
+PKCS7_SIGNER_INFO *PKCS7_add_signature(PKCS7 *p7, X509 *x509,
+                                       EVP_PKEY *pkey, const EVP_MD *dgst);
+X509 *PKCS7_cert_from_signer_info(PKCS7 *p7, PKCS7_SIGNER_INFO *si);
+int PKCS7_set_digest(PKCS7 *p7, const EVP_MD *md);
+STACK_OF(PKCS7_SIGNER_INFO) *PKCS7_get_signer_info(PKCS7 *p7);
+
+PKCS7_RECIP_INFO *PKCS7_add_recipient(PKCS7 *p7, X509 *x509);
+void PKCS7_SIGNER_INFO_get0_algs(PKCS7_SIGNER_INFO *si, EVP_PKEY **pk,
+                                 X509_ALGOR **pdig, X509_ALGOR **psig);
+void PKCS7_RECIP_INFO_get0_alg(PKCS7_RECIP_INFO *ri, X509_ALGOR **penc);
+int PKCS7_add_recipient_info(PKCS7 *p7, PKCS7_RECIP_INFO *ri);
+int PKCS7_RECIP_INFO_set(PKCS7_RECIP_INFO *p7i, X509 *x509);
+int PKCS7_set_cipher(PKCS7 *p7, const EVP_CIPHER *cipher);
+int PKCS7_stream(unsigned char ***boundary, PKCS7 *p7);
+
+PKCS7_ISSUER_AND_SERIAL *PKCS7_get_issuer_and_serial(PKCS7 *p7, int idx);
+ASN1_OCTET_STRING *PKCS7_digest_from_attributes(STACK_OF(X509_ATTRIBUTE) *sk);
+int PKCS7_add_signed_attribute(PKCS7_SIGNER_INFO *p7si, int nid, int type,
+                               void *data);
+int PKCS7_add_attribute(PKCS7_SIGNER_INFO *p7si, int nid, int atrtype,
+                        void *value);
+ASN1_TYPE *PKCS7_get_attribute(PKCS7_SIGNER_INFO *si, int nid);
+ASN1_TYPE *PKCS7_get_signed_attribute(PKCS7_SIGNER_INFO *si, int nid);
+int PKCS7_set_signed_attributes(PKCS7_SIGNER_INFO *p7si,
+                                STACK_OF(X509_ATTRIBUTE) *sk);
+int PKCS7_set_attributes(PKCS7_SIGNER_INFO *p7si,
+                         STACK_OF(X509_ATTRIBUTE) *sk);
+
+PKCS7 *PKCS7_sign(X509 *signcert, EVP_PKEY *pkey, STACK_OF(X509) *certs,
+                  BIO *data, int flags);
+
+PKCS7_SIGNER_INFO *PKCS7_sign_add_signer(PKCS7 *p7,
+                                         X509 *signcert, EVP_PKEY *pkey,
+                                         const EVP_MD *md, int flags);
+
+int PKCS7_final(PKCS7 *p7, BIO *data, int flags);
+int PKCS7_verify(PKCS7 *p7, STACK_OF(X509) *certs, X509_STORE *store,
+                 BIO *indata, BIO *out, int flags);
+STACK_OF(X509) *PKCS7_get0_signers(PKCS7 *p7, STACK_OF(X509) *certs,
+                                   int flags);
+PKCS7 *PKCS7_encrypt(STACK_OF(X509) *certs, BIO *in, const EVP_CIPHER *cipher,
+                     int flags);
+int PKCS7_decrypt(PKCS7 *p7, EVP_PKEY *pkey, X509 *cert, BIO *data,
+                  int flags);
+
+int PKCS7_add_attrib_smimecap(PKCS7_SIGNER_INFO *si,
+                              STACK_OF(X509_ALGOR) *cap);
+STACK_OF(X509_ALGOR) *PKCS7_get_smimecap(PKCS7_SIGNER_INFO *si);
+int PKCS7_simple_smimecap(STACK_OF(X509_ALGOR) *sk, int nid, int arg);
+
+int PKCS7_add_attrib_content_type(PKCS7_SIGNER_INFO *si, ASN1_OBJECT *coid);
+int PKCS7_add0_attrib_signing_time(PKCS7_SIGNER_INFO *si, ASN1_TIME *t);
+int PKCS7_add1_attrib_digest(PKCS7_SIGNER_INFO *si,
+                             const unsigned char *md, int mdlen);
+
+int SMIME_write_PKCS7(BIO *bio, PKCS7 *p7, BIO *data, int flags);
+PKCS7 *SMIME_read_PKCS7(BIO *bio, BIO **bcont);
+
+BIO *BIO_new_PKCS7(BIO *out, PKCS7 *p7);
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/pkcs7err.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/pkcs7err.h
new file mode 100644
index 000000000..0ba418d78
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/pkcs7err.h
@@ -0,0 +1,99 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_PKCS7ERR_H
+# define HEADER_PKCS7ERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_PKCS7_strings(void);
+
+/*
+ * PKCS7 function codes.
+ */
+# define PKCS7_F_DO_PKCS7_SIGNED_ATTRIB                   136
+# define PKCS7_F_PKCS7_ADD0_ATTRIB_SIGNING_TIME           135
+# define PKCS7_F_PKCS7_ADD_ATTRIB_SMIMECAP                118
+# define PKCS7_F_PKCS7_ADD_CERTIFICATE                    100
+# define PKCS7_F_PKCS7_ADD_CRL                            101
+# define PKCS7_F_PKCS7_ADD_RECIPIENT_INFO                 102
+# define PKCS7_F_PKCS7_ADD_SIGNATURE                      131
+# define PKCS7_F_PKCS7_ADD_SIGNER                         103
+# define PKCS7_F_PKCS7_BIO_ADD_DIGEST                     125
+# define PKCS7_F_PKCS7_COPY_EXISTING_DIGEST               138
+# define PKCS7_F_PKCS7_CTRL                               104
+# define PKCS7_F_PKCS7_DATADECODE                         112
+# define PKCS7_F_PKCS7_DATAFINAL                          128
+# define PKCS7_F_PKCS7_DATAINIT                           105
+# define PKCS7_F_PKCS7_DATAVERIFY                         107
+# define PKCS7_F_PKCS7_DECRYPT                            114
+# define PKCS7_F_PKCS7_DECRYPT_RINFO                      133
+# define PKCS7_F_PKCS7_ENCODE_RINFO                       132
+# define PKCS7_F_PKCS7_ENCRYPT                            115
+# define PKCS7_F_PKCS7_FINAL                              134
+# define PKCS7_F_PKCS7_FIND_DIGEST                        127
+# define PKCS7_F_PKCS7_GET0_SIGNERS                       124
+# define PKCS7_F_PKCS7_RECIP_INFO_SET                     130
+# define PKCS7_F_PKCS7_SET_CIPHER                         108
+# define PKCS7_F_PKCS7_SET_CONTENT                        109
+# define PKCS7_F_PKCS7_SET_DIGEST                         126
+# define PKCS7_F_PKCS7_SET_TYPE                           110
+# define PKCS7_F_PKCS7_SIGN                               116
+# define PKCS7_F_PKCS7_SIGNATUREVERIFY                    113
+# define PKCS7_F_PKCS7_SIGNER_INFO_SET                    129
+# define PKCS7_F_PKCS7_SIGNER_INFO_SIGN                   139
+# define PKCS7_F_PKCS7_SIGN_ADD_SIGNER                    137
+# define PKCS7_F_PKCS7_SIMPLE_SMIMECAP                    119
+# define PKCS7_F_PKCS7_VERIFY                             117
+
+/*
+ * PKCS7 reason codes.
+ */
+# define PKCS7_R_CERTIFICATE_VERIFY_ERROR                 117
+# define PKCS7_R_CIPHER_HAS_NO_OBJECT_IDENTIFIER          144
+# define PKCS7_R_CIPHER_NOT_INITIALIZED                   116
+# define PKCS7_R_CONTENT_AND_DATA_PRESENT                 118
+# define PKCS7_R_CTRL_ERROR                               152
+# define PKCS7_R_DECRYPT_ERROR                            119
+# define PKCS7_R_DIGEST_FAILURE                           101
+# define PKCS7_R_ENCRYPTION_CTRL_FAILURE                  149
+# define PKCS7_R_ENCRYPTION_NOT_SUPPORTED_FOR_THIS_KEY_TYPE 150
+# define PKCS7_R_ERROR_ADDING_RECIPIENT                   120
+# define PKCS7_R_ERROR_SETTING_CIPHER                     121
+# define PKCS7_R_INVALID_NULL_POINTER                     143
+# define PKCS7_R_INVALID_SIGNED_DATA_TYPE                 155
+# define PKCS7_R_NO_CONTENT                               122
+# define PKCS7_R_NO_DEFAULT_DIGEST                        151
+# define PKCS7_R_NO_MATCHING_DIGEST_TYPE_FOUND            154
+# define PKCS7_R_NO_RECIPIENT_MATCHES_CERTIFICATE         115
+# define PKCS7_R_NO_SIGNATURES_ON_DATA                    123
+# define PKCS7_R_NO_SIGNERS                               142
+# define PKCS7_R_OPERATION_NOT_SUPPORTED_ON_THIS_TYPE     104
+# define PKCS7_R_PKCS7_ADD_SIGNATURE_ERROR                124
+# define PKCS7_R_PKCS7_ADD_SIGNER_ERROR                   153
+# define PKCS7_R_PKCS7_DATASIGN                           145
+# define PKCS7_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE   127
+# define PKCS7_R_SIGNATURE_FAILURE                        105
+# define PKCS7_R_SIGNER_CERTIFICATE_NOT_FOUND             128
+# define PKCS7_R_SIGNING_CTRL_FAILURE                     147
+# define PKCS7_R_SIGNING_NOT_SUPPORTED_FOR_THIS_KEY_TYPE  148
+# define PKCS7_R_SMIME_TEXT_ERROR                         129
+# define PKCS7_R_UNABLE_TO_FIND_CERTIFICATE               106
+# define PKCS7_R_UNABLE_TO_FIND_MEM_BIO                   107
+# define PKCS7_R_UNABLE_TO_FIND_MESSAGE_DIGEST            108
+# define PKCS7_R_UNKNOWN_DIGEST_TYPE                      109
+# define PKCS7_R_UNKNOWN_OPERATION                        110
+# define PKCS7_R_UNSUPPORTED_CIPHER_TYPE                  111
+# define PKCS7_R_UNSUPPORTED_CONTENT_TYPE                 112
+# define PKCS7_R_WRONG_CONTENT_TYPE                       113
+# define PKCS7_R_WRONG_PKCS7_TYPE                         114
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/rand.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/rand.h
new file mode 100644
index 000000000..38a2a2718
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/rand.h
@@ -0,0 +1,77 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_RAND_H
+# define HEADER_RAND_H
+
+# include <stdlib.h>
+# include <openssl/ossl_typ.h>
+# include <openssl/e_os2.h>
+# include <openssl/randerr.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+struct rand_meth_st {
+    int (*seed) (const void *buf, int num);
+    int (*bytes) (unsigned char *buf, int num);
+    void (*cleanup) (void);
+    int (*add) (const void *buf, int num, double randomness);
+    int (*pseudorand) (unsigned char *buf, int num);
+    int (*status) (void);
+};
+
+int RAND_set_rand_method(const RAND_METHOD *meth);
+const RAND_METHOD *RAND_get_rand_method(void);
+# ifndef OPENSSL_NO_ENGINE
+int RAND_set_rand_engine(ENGINE *engine);
+# endif
+
+RAND_METHOD *RAND_OpenSSL(void);
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#   define RAND_cleanup() while(0) continue
+# endif
+int RAND_bytes(unsigned char *buf, int num);
+int RAND_priv_bytes(unsigned char *buf, int num);
+DEPRECATEDIN_1_1_0(int RAND_pseudo_bytes(unsigned char *buf, int num))
+
+void RAND_seed(const void *buf, int num);
+void RAND_keep_random_devices_open(int keep);
+
+# if defined(__ANDROID__) && defined(__NDK_FPABI__)
+__NDK_FPABI__	/* __attribute__((pcs("aapcs"))) on ARM */
+# endif
+void RAND_add(const void *buf, int num, double randomness);
+int RAND_load_file(const char *file, long max_bytes);
+int RAND_write_file(const char *file);
+const char *RAND_file_name(char *file, size_t num);
+int RAND_status(void);
+
+# ifndef OPENSSL_NO_EGD
+int RAND_query_egd_bytes(const char *path, unsigned char *buf, int bytes);
+int RAND_egd(const char *path);
+int RAND_egd_bytes(const char *path, int bytes);
+# endif
+
+int RAND_poll(void);
+
+# if defined(_WIN32) && (defined(BASETYPES) || defined(_WINDEF_H))
+/* application has to include <windows.h> in order to use these */
+DEPRECATEDIN_1_1_0(void RAND_screen(void))
+DEPRECATEDIN_1_1_0(int RAND_event(UINT, WPARAM, LPARAM))
+# endif
+
+
+#ifdef  __cplusplus
+}
+#endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/rand_drbg.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/rand_drbg.h
new file mode 100644
index 000000000..45b731b73
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/rand_drbg.h
@@ -0,0 +1,130 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_DRBG_RAND_H
+# define HEADER_DRBG_RAND_H
+
+# include <time.h>
+# include <openssl/ossl_typ.h>
+# include <openssl/obj_mac.h>
+
+/*
+ * RAND_DRBG  flags
+ *
+ * Note: if new flags are added, the constant `rand_drbg_used_flags`
+ *       in drbg_lib.c needs to be updated accordingly.
+ */
+
+/* In CTR mode, disable derivation function ctr_df */
+# define RAND_DRBG_FLAG_CTR_NO_DF            0x1
+
+
+# if OPENSSL_API_COMPAT < 0x10200000L
+/* This #define was replaced by an internal constant and should not be used. */
+#  define RAND_DRBG_USED_FLAGS  (RAND_DRBG_FLAG_CTR_NO_DF)
+# endif
+
+/*
+ * Default security strength (in the sense of [NIST SP 800-90Ar1])
+ *
+ * NIST SP 800-90Ar1 supports the strength of the DRBG being smaller than that
+ * of the cipher by collecting less entropy. The current DRBG implementation
+ * does not take RAND_DRBG_STRENGTH into account and sets the strength of the
+ * DRBG to that of the cipher.
+ *
+ * RAND_DRBG_STRENGTH is currently only used for the legacy RAND
+ * implementation.
+ *
+ * Currently supported ciphers are: NID_aes_128_ctr, NID_aes_192_ctr and
+ * NID_aes_256_ctr
+ */
+# define RAND_DRBG_STRENGTH             256
+/* Default drbg type */
+# define RAND_DRBG_TYPE                 NID_aes_256_ctr
+/* Default drbg flags */
+# define RAND_DRBG_FLAGS                0
+
+
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+/*
+ * Object lifetime functions.
+ */
+RAND_DRBG *RAND_DRBG_new(int type, unsigned int flags, RAND_DRBG *parent);
+RAND_DRBG *RAND_DRBG_secure_new(int type, unsigned int flags, RAND_DRBG *parent);
+int RAND_DRBG_set(RAND_DRBG *drbg, int type, unsigned int flags);
+int RAND_DRBG_set_defaults(int type, unsigned int flags);
+int RAND_DRBG_instantiate(RAND_DRBG *drbg,
+                          const unsigned char *pers, size_t perslen);
+int RAND_DRBG_uninstantiate(RAND_DRBG *drbg);
+void RAND_DRBG_free(RAND_DRBG *drbg);
+
+/*
+ * Object "use" functions.
+ */
+int RAND_DRBG_reseed(RAND_DRBG *drbg,
+                     const unsigned char *adin, size_t adinlen,
+                     int prediction_resistance);
+int RAND_DRBG_generate(RAND_DRBG *drbg, unsigned char *out, size_t outlen,
+                       int prediction_resistance,
+                       const unsigned char *adin, size_t adinlen);
+int RAND_DRBG_bytes(RAND_DRBG *drbg, unsigned char *out, size_t outlen);
+
+int RAND_DRBG_set_reseed_interval(RAND_DRBG *drbg, unsigned int interval);
+int RAND_DRBG_set_reseed_time_interval(RAND_DRBG *drbg, time_t interval);
+
+int RAND_DRBG_set_reseed_defaults(
+                                  unsigned int master_reseed_interval,
+                                  unsigned int slave_reseed_interval,
+                                  time_t master_reseed_time_interval,
+                                  time_t slave_reseed_time_interval
+                                  );
+
+RAND_DRBG *RAND_DRBG_get0_master(void);
+RAND_DRBG *RAND_DRBG_get0_public(void);
+RAND_DRBG *RAND_DRBG_get0_private(void);
+
+/*
+ * EXDATA
+ */
+# define RAND_DRBG_get_ex_new_index(l, p, newf, dupf, freef) \
+    CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_DRBG, l, p, newf, dupf, freef)
+int RAND_DRBG_set_ex_data(RAND_DRBG *drbg, int idx, void *arg);
+void *RAND_DRBG_get_ex_data(const RAND_DRBG *drbg, int idx);
+
+/*
+ * Callback function typedefs
+ */
+typedef size_t (*RAND_DRBG_get_entropy_fn)(RAND_DRBG *drbg,
+                                           unsigned char **pout,
+                                           int entropy, size_t min_len,
+                                           size_t max_len,
+                                           int prediction_resistance);
+typedef void (*RAND_DRBG_cleanup_entropy_fn)(RAND_DRBG *ctx,
+                                             unsigned char *out, size_t outlen);
+typedef size_t (*RAND_DRBG_get_nonce_fn)(RAND_DRBG *drbg, unsigned char **pout,
+                                         int entropy, size_t min_len,
+                                         size_t max_len);
+typedef void (*RAND_DRBG_cleanup_nonce_fn)(RAND_DRBG *drbg,
+                                           unsigned char *out, size_t outlen);
+
+int RAND_DRBG_set_callbacks(RAND_DRBG *drbg,
+                            RAND_DRBG_get_entropy_fn get_entropy,
+                            RAND_DRBG_cleanup_entropy_fn cleanup_entropy,
+                            RAND_DRBG_get_nonce_fn get_nonce,
+                            RAND_DRBG_cleanup_nonce_fn cleanup_nonce);
+
+
+# ifdef  __cplusplus
+}
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/randerr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/randerr.h
new file mode 100644
index 000000000..599a2a18d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/randerr.h
@@ -0,0 +1,89 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_RANDERR_H
+# define HEADER_RANDERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_RAND_strings(void);
+
+/*
+ * RAND function codes.
+ */
+# define RAND_F_DRBG_BYTES                                101
+# define RAND_F_DRBG_GET_ENTROPY                          105
+# define RAND_F_DRBG_SETUP                                117
+# define RAND_F_GET_ENTROPY                               106
+# define RAND_F_RAND_BYTES                                100
+# define RAND_F_RAND_DRBG_ENABLE_LOCKING                  119
+# define RAND_F_RAND_DRBG_GENERATE                        107
+# define RAND_F_RAND_DRBG_GET_ENTROPY                     120
+# define RAND_F_RAND_DRBG_GET_NONCE                       123
+# define RAND_F_RAND_DRBG_INSTANTIATE                     108
+# define RAND_F_RAND_DRBG_NEW                             109
+# define RAND_F_RAND_DRBG_RESEED                          110
+# define RAND_F_RAND_DRBG_RESTART                         102
+# define RAND_F_RAND_DRBG_SET                             104
+# define RAND_F_RAND_DRBG_SET_DEFAULTS                    121
+# define RAND_F_RAND_DRBG_UNINSTANTIATE                   118
+# define RAND_F_RAND_LOAD_FILE                            111
+# define RAND_F_RAND_POOL_ACQUIRE_ENTROPY                 122
+# define RAND_F_RAND_POOL_ADD                             103
+# define RAND_F_RAND_POOL_ADD_BEGIN                       113
+# define RAND_F_RAND_POOL_ADD_END                         114
+# define RAND_F_RAND_POOL_ATTACH                          124
+# define RAND_F_RAND_POOL_BYTES_NEEDED                    115
+# define RAND_F_RAND_POOL_NEW                             116
+# define RAND_F_RAND_WRITE_FILE                           112
+
+/*
+ * RAND reason codes.
+ */
+# define RAND_R_ADDITIONAL_INPUT_TOO_LONG                 102
+# define RAND_R_ALREADY_INSTANTIATED                      103
+# define RAND_R_ARGUMENT_OUT_OF_RANGE                     105
+# define RAND_R_CANNOT_OPEN_FILE                          121
+# define RAND_R_DRBG_ALREADY_INITIALIZED                  129
+# define RAND_R_DRBG_NOT_INITIALISED                      104
+# define RAND_R_ENTROPY_INPUT_TOO_LONG                    106
+# define RAND_R_ENTROPY_OUT_OF_RANGE                      124
+# define RAND_R_ERROR_ENTROPY_POOL_WAS_IGNORED            127
+# define RAND_R_ERROR_INITIALISING_DRBG                   107
+# define RAND_R_ERROR_INSTANTIATING_DRBG                  108
+# define RAND_R_ERROR_RETRIEVING_ADDITIONAL_INPUT         109
+# define RAND_R_ERROR_RETRIEVING_ENTROPY                  110
+# define RAND_R_ERROR_RETRIEVING_NONCE                    111
+# define RAND_R_FAILED_TO_CREATE_LOCK                     126
+# define RAND_R_FUNC_NOT_IMPLEMENTED                      101
+# define RAND_R_FWRITE_ERROR                              123
+# define RAND_R_GENERATE_ERROR                            112
+# define RAND_R_INTERNAL_ERROR                            113
+# define RAND_R_IN_ERROR_STATE                            114
+# define RAND_R_NOT_A_REGULAR_FILE                        122
+# define RAND_R_NOT_INSTANTIATED                          115
+# define RAND_R_NO_DRBG_IMPLEMENTATION_SELECTED           128
+# define RAND_R_PARENT_LOCKING_NOT_ENABLED                130
+# define RAND_R_PARENT_STRENGTH_TOO_WEAK                  131
+# define RAND_R_PERSONALISATION_STRING_TOO_LONG           116
+# define RAND_R_PREDICTION_RESISTANCE_NOT_SUPPORTED       133
+# define RAND_R_PRNG_NOT_SEEDED                           100
+# define RAND_R_RANDOM_POOL_OVERFLOW                      125
+# define RAND_R_RANDOM_POOL_UNDERFLOW                     134
+# define RAND_R_REQUEST_TOO_LARGE_FOR_DRBG                117
+# define RAND_R_RESEED_ERROR                              118
+# define RAND_R_SELFTEST_FAILURE                          119
+# define RAND_R_TOO_LITTLE_NONCE_REQUESTED                135
+# define RAND_R_TOO_MUCH_NONCE_REQUESTED                  136
+# define RAND_R_UNSUPPORTED_DRBG_FLAGS                    132
+# define RAND_R_UNSUPPORTED_DRBG_TYPE                     120
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/rc2.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/rc2.h
new file mode 100644
index 000000000..585f9e4c3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/rc2.h
@@ -0,0 +1,51 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_RC2_H
+# define HEADER_RC2_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_RC2
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+typedef unsigned int RC2_INT;
+
+# define RC2_ENCRYPT     1
+# define RC2_DECRYPT     0
+
+# define RC2_BLOCK       8
+# define RC2_KEY_LENGTH  16
+
+typedef struct rc2_key_st {
+    RC2_INT data[64];
+} RC2_KEY;
+
+void RC2_set_key(RC2_KEY *key, int len, const unsigned char *data, int bits);
+void RC2_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                     RC2_KEY *key, int enc);
+void RC2_encrypt(unsigned long *data, RC2_KEY *key);
+void RC2_decrypt(unsigned long *data, RC2_KEY *key);
+void RC2_cbc_encrypt(const unsigned char *in, unsigned char *out, long length,
+                     RC2_KEY *ks, unsigned char *iv, int enc);
+void RC2_cfb64_encrypt(const unsigned char *in, unsigned char *out,
+                       long length, RC2_KEY *schedule, unsigned char *ivec,
+                       int *num, int enc);
+void RC2_ofb64_encrypt(const unsigned char *in, unsigned char *out,
+                       long length, RC2_KEY *schedule, unsigned char *ivec,
+                       int *num);
+
+# ifdef  __cplusplus
+}
+# endif
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/rc4.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/rc4.h
new file mode 100644
index 000000000..86803b37f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/rc4.h
@@ -0,0 +1,36 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_RC4_H
+# define HEADER_RC4_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_RC4
+# include <stddef.h>
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+typedef struct rc4_key_st {
+    RC4_INT x, y;
+    RC4_INT data[256];
+} RC4_KEY;
+
+const char *RC4_options(void);
+void RC4_set_key(RC4_KEY *key, int len, const unsigned char *data);
+void RC4(RC4_KEY *key, size_t len, const unsigned char *indata,
+         unsigned char *outdata);
+
+# ifdef  __cplusplus
+}
+# endif
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/rc5.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/rc5.h
new file mode 100644
index 000000000..793f88e4e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/rc5.h
@@ -0,0 +1,63 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_RC5_H
+# define HEADER_RC5_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_RC5
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+# define RC5_ENCRYPT     1
+# define RC5_DECRYPT     0
+
+# define RC5_32_INT unsigned int
+
+# define RC5_32_BLOCK            8
+# define RC5_32_KEY_LENGTH       16/* This is a default, max is 255 */
+
+/*
+ * This are the only values supported.  Tweak the code if you want more The
+ * most supported modes will be RC5-32/12/16 RC5-32/16/8
+ */
+# define RC5_8_ROUNDS    8
+# define RC5_12_ROUNDS   12
+# define RC5_16_ROUNDS   16
+
+typedef struct rc5_key_st {
+    /* Number of rounds */
+    int rounds;
+    RC5_32_INT data[2 * (RC5_16_ROUNDS + 1)];
+} RC5_32_KEY;
+
+void RC5_32_set_key(RC5_32_KEY *key, int len, const unsigned char *data,
+                    int rounds);
+void RC5_32_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                        RC5_32_KEY *key, int enc);
+void RC5_32_encrypt(unsigned long *data, RC5_32_KEY *key);
+void RC5_32_decrypt(unsigned long *data, RC5_32_KEY *key);
+void RC5_32_cbc_encrypt(const unsigned char *in, unsigned char *out,
+                        long length, RC5_32_KEY *ks, unsigned char *iv,
+                        int enc);
+void RC5_32_cfb64_encrypt(const unsigned char *in, unsigned char *out,
+                          long length, RC5_32_KEY *schedule,
+                          unsigned char *ivec, int *num, int enc);
+void RC5_32_ofb64_encrypt(const unsigned char *in, unsigned char *out,
+                          long length, RC5_32_KEY *schedule,
+                          unsigned char *ivec, int *num);
+
+# ifdef  __cplusplus
+}
+# endif
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/ripemd.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ripemd.h
new file mode 100644
index 000000000..c42026aa4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ripemd.h
@@ -0,0 +1,47 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_RIPEMD_H
+# define HEADER_RIPEMD_H
+
+# include <openssl/opensslconf.h>
+
+#ifndef OPENSSL_NO_RMD160
+# include <openssl/e_os2.h>
+# include <stddef.h>
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+# define RIPEMD160_LONG unsigned int
+
+# define RIPEMD160_CBLOCK        64
+# define RIPEMD160_LBLOCK        (RIPEMD160_CBLOCK/4)
+# define RIPEMD160_DIGEST_LENGTH 20
+
+typedef struct RIPEMD160state_st {
+    RIPEMD160_LONG A, B, C, D, E;
+    RIPEMD160_LONG Nl, Nh;
+    RIPEMD160_LONG data[RIPEMD160_LBLOCK];
+    unsigned int num;
+} RIPEMD160_CTX;
+
+int RIPEMD160_Init(RIPEMD160_CTX *c);
+int RIPEMD160_Update(RIPEMD160_CTX *c, const void *data, size_t len);
+int RIPEMD160_Final(unsigned char *md, RIPEMD160_CTX *c);
+unsigned char *RIPEMD160(const unsigned char *d, size_t n, unsigned char *md);
+void RIPEMD160_Transform(RIPEMD160_CTX *c, const unsigned char *b);
+
+# ifdef  __cplusplus
+}
+# endif
+# endif
+
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/rsa.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/rsa.h
new file mode 100644
index 000000000..cdce1264e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/rsa.h
@@ -0,0 +1,512 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_RSA_H
+# define HEADER_RSA_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_RSA
+# include <openssl/asn1.h>
+# include <openssl/bio.h>
+# include <openssl/crypto.h>
+# include <openssl/ossl_typ.h>
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  include <openssl/bn.h>
+# endif
+# include <openssl/rsaerr.h>
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+/* The types RSA and RSA_METHOD are defined in ossl_typ.h */
+
+# ifndef OPENSSL_RSA_MAX_MODULUS_BITS
+#  define OPENSSL_RSA_MAX_MODULUS_BITS   16384
+# endif
+
+# define OPENSSL_RSA_FIPS_MIN_MODULUS_BITS 1024
+
+# ifndef OPENSSL_RSA_SMALL_MODULUS_BITS
+#  define OPENSSL_RSA_SMALL_MODULUS_BITS 3072
+# endif
+# ifndef OPENSSL_RSA_MAX_PUBEXP_BITS
+
+/* exponent limit enforced for "large" modulus only */
+#  define OPENSSL_RSA_MAX_PUBEXP_BITS    64
+# endif
+
+# define RSA_3   0x3L
+# define RSA_F4  0x10001L
+
+/* based on RFC 8017 appendix A.1.2 */
+# define RSA_ASN1_VERSION_DEFAULT        0
+# define RSA_ASN1_VERSION_MULTI          1
+
+# define RSA_DEFAULT_PRIME_NUM           2
+
+# define RSA_METHOD_FLAG_NO_CHECK        0x0001/* don't check pub/private
+                                                * match */
+
+# define RSA_FLAG_CACHE_PUBLIC           0x0002
+# define RSA_FLAG_CACHE_PRIVATE          0x0004
+# define RSA_FLAG_BLINDING               0x0008
+# define RSA_FLAG_THREAD_SAFE            0x0010
+/*
+ * This flag means the private key operations will be handled by rsa_mod_exp
+ * and that they do not depend on the private key components being present:
+ * for example a key stored in external hardware. Without this flag
+ * bn_mod_exp gets called when private key components are absent.
+ */
+# define RSA_FLAG_EXT_PKEY               0x0020
+
+/*
+ * new with 0.9.6j and 0.9.7b; the built-in
+ * RSA implementation now uses blinding by
+ * default (ignoring RSA_FLAG_BLINDING),
+ * but other engines might not need it
+ */
+# define RSA_FLAG_NO_BLINDING            0x0080
+# if OPENSSL_API_COMPAT < 0x10100000L
+/*
+ * Does nothing. Previously this switched off constant time behaviour.
+ */
+#  define RSA_FLAG_NO_CONSTTIME           0x0000
+# endif
+# if OPENSSL_API_COMPAT < 0x00908000L
+/* deprecated name for the flag*/
+/*
+ * new with 0.9.7h; the built-in RSA
+ * implementation now uses constant time
+ * modular exponentiation for secret exponents
+ * by default. This flag causes the
+ * faster variable sliding window method to
+ * be used for all exponents.
+ */
+#  define RSA_FLAG_NO_EXP_CONSTTIME RSA_FLAG_NO_CONSTTIME
+# endif
+
+# define EVP_PKEY_CTX_set_rsa_padding(ctx, pad) \
+        RSA_pkey_ctx_ctrl(ctx, -1, EVP_PKEY_CTRL_RSA_PADDING, pad, NULL)
+
+# define EVP_PKEY_CTX_get_rsa_padding(ctx, ppad) \
+        RSA_pkey_ctx_ctrl(ctx, -1, EVP_PKEY_CTRL_GET_RSA_PADDING, 0, ppad)
+
+# define EVP_PKEY_CTX_set_rsa_pss_saltlen(ctx, len) \
+        RSA_pkey_ctx_ctrl(ctx, (EVP_PKEY_OP_SIGN|EVP_PKEY_OP_VERIFY), \
+                          EVP_PKEY_CTRL_RSA_PSS_SALTLEN, len, NULL)
+/* Salt length matches digest */
+# define RSA_PSS_SALTLEN_DIGEST -1
+/* Verify only: auto detect salt length */
+# define RSA_PSS_SALTLEN_AUTO   -2
+/* Set salt length to maximum possible */
+# define RSA_PSS_SALTLEN_MAX    -3
+/* Old compatible max salt length for sign only */
+# define RSA_PSS_SALTLEN_MAX_SIGN    -2
+
+# define EVP_PKEY_CTX_set_rsa_pss_keygen_saltlen(ctx, len) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_RSA_PSS, EVP_PKEY_OP_KEYGEN, \
+                          EVP_PKEY_CTRL_RSA_PSS_SALTLEN, len, NULL)
+
+# define EVP_PKEY_CTX_get_rsa_pss_saltlen(ctx, plen) \
+        RSA_pkey_ctx_ctrl(ctx, (EVP_PKEY_OP_SIGN|EVP_PKEY_OP_VERIFY), \
+                          EVP_PKEY_CTRL_GET_RSA_PSS_SALTLEN, 0, plen)
+
+# define EVP_PKEY_CTX_set_rsa_keygen_bits(ctx, bits) \
+        RSA_pkey_ctx_ctrl(ctx, EVP_PKEY_OP_KEYGEN, \
+                          EVP_PKEY_CTRL_RSA_KEYGEN_BITS, bits, NULL)
+
+# define EVP_PKEY_CTX_set_rsa_keygen_pubexp(ctx, pubexp) \
+        RSA_pkey_ctx_ctrl(ctx, EVP_PKEY_OP_KEYGEN, \
+                          EVP_PKEY_CTRL_RSA_KEYGEN_PUBEXP, 0, pubexp)
+
+# define EVP_PKEY_CTX_set_rsa_keygen_primes(ctx, primes) \
+        RSA_pkey_ctx_ctrl(ctx, EVP_PKEY_OP_KEYGEN, \
+                          EVP_PKEY_CTRL_RSA_KEYGEN_PRIMES, primes, NULL)
+
+# define  EVP_PKEY_CTX_set_rsa_mgf1_md(ctx, md) \
+        RSA_pkey_ctx_ctrl(ctx, EVP_PKEY_OP_TYPE_SIG | EVP_PKEY_OP_TYPE_CRYPT, \
+                          EVP_PKEY_CTRL_RSA_MGF1_MD, 0, (void *)(md))
+
+# define  EVP_PKEY_CTX_set_rsa_pss_keygen_mgf1_md(ctx, md) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_RSA_PSS, EVP_PKEY_OP_KEYGEN, \
+                          EVP_PKEY_CTRL_RSA_MGF1_MD, 0, (void *)(md))
+
+# define  EVP_PKEY_CTX_set_rsa_oaep_md(ctx, md) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_RSA, EVP_PKEY_OP_TYPE_CRYPT,  \
+                          EVP_PKEY_CTRL_RSA_OAEP_MD, 0, (void *)(md))
+
+# define  EVP_PKEY_CTX_get_rsa_mgf1_md(ctx, pmd) \
+        RSA_pkey_ctx_ctrl(ctx, EVP_PKEY_OP_TYPE_SIG | EVP_PKEY_OP_TYPE_CRYPT, \
+                          EVP_PKEY_CTRL_GET_RSA_MGF1_MD, 0, (void *)(pmd))
+
+# define  EVP_PKEY_CTX_get_rsa_oaep_md(ctx, pmd) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_RSA, EVP_PKEY_OP_TYPE_CRYPT,  \
+                          EVP_PKEY_CTRL_GET_RSA_OAEP_MD, 0, (void *)(pmd))
+
+# define  EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, l, llen) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_RSA, EVP_PKEY_OP_TYPE_CRYPT,  \
+                          EVP_PKEY_CTRL_RSA_OAEP_LABEL, llen, (void *)(l))
+
+# define  EVP_PKEY_CTX_get0_rsa_oaep_label(ctx, l) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_RSA, EVP_PKEY_OP_TYPE_CRYPT,  \
+                          EVP_PKEY_CTRL_GET_RSA_OAEP_LABEL, 0, (void *)(l))
+
+# define  EVP_PKEY_CTX_set_rsa_pss_keygen_md(ctx, md) \
+        EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_RSA_PSS,  \
+                          EVP_PKEY_OP_KEYGEN, EVP_PKEY_CTRL_MD,  \
+                          0, (void *)(md))
+
+# define EVP_PKEY_CTRL_RSA_PADDING       (EVP_PKEY_ALG_CTRL + 1)
+# define EVP_PKEY_CTRL_RSA_PSS_SALTLEN   (EVP_PKEY_ALG_CTRL + 2)
+
+# define EVP_PKEY_CTRL_RSA_KEYGEN_BITS   (EVP_PKEY_ALG_CTRL + 3)
+# define EVP_PKEY_CTRL_RSA_KEYGEN_PUBEXP (EVP_PKEY_ALG_CTRL + 4)
+# define EVP_PKEY_CTRL_RSA_MGF1_MD       (EVP_PKEY_ALG_CTRL + 5)
+
+# define EVP_PKEY_CTRL_GET_RSA_PADDING           (EVP_PKEY_ALG_CTRL + 6)
+# define EVP_PKEY_CTRL_GET_RSA_PSS_SALTLEN       (EVP_PKEY_ALG_CTRL + 7)
+# define EVP_PKEY_CTRL_GET_RSA_MGF1_MD           (EVP_PKEY_ALG_CTRL + 8)
+
+# define EVP_PKEY_CTRL_RSA_OAEP_MD       (EVP_PKEY_ALG_CTRL + 9)
+# define EVP_PKEY_CTRL_RSA_OAEP_LABEL    (EVP_PKEY_ALG_CTRL + 10)
+
+# define EVP_PKEY_CTRL_GET_RSA_OAEP_MD   (EVP_PKEY_ALG_CTRL + 11)
+# define EVP_PKEY_CTRL_GET_RSA_OAEP_LABEL (EVP_PKEY_ALG_CTRL + 12)
+
+# define EVP_PKEY_CTRL_RSA_KEYGEN_PRIMES  (EVP_PKEY_ALG_CTRL + 13)
+
+# define RSA_PKCS1_PADDING       1
+# define RSA_SSLV23_PADDING      2
+# define RSA_NO_PADDING          3
+# define RSA_PKCS1_OAEP_PADDING  4
+# define RSA_X931_PADDING        5
+/* EVP_PKEY_ only */
+# define RSA_PKCS1_PSS_PADDING   6
+
+# define RSA_PKCS1_PADDING_SIZE  11
+
+# define RSA_set_app_data(s,arg)         RSA_set_ex_data(s,0,arg)
+# define RSA_get_app_data(s)             RSA_get_ex_data(s,0)
+
+RSA *RSA_new(void);
+RSA *RSA_new_method(ENGINE *engine);
+int RSA_bits(const RSA *rsa);
+int RSA_size(const RSA *rsa);
+int RSA_security_bits(const RSA *rsa);
+
+int RSA_set0_key(RSA *r, BIGNUM *n, BIGNUM *e, BIGNUM *d);
+int RSA_set0_factors(RSA *r, BIGNUM *p, BIGNUM *q);
+int RSA_set0_crt_params(RSA *r,BIGNUM *dmp1, BIGNUM *dmq1, BIGNUM *iqmp);
+int RSA_set0_multi_prime_params(RSA *r, BIGNUM *primes[], BIGNUM *exps[],
+                                BIGNUM *coeffs[], int pnum);
+void RSA_get0_key(const RSA *r,
+                  const BIGNUM **n, const BIGNUM **e, const BIGNUM **d);
+void RSA_get0_factors(const RSA *r, const BIGNUM **p, const BIGNUM **q);
+int RSA_get_multi_prime_extra_count(const RSA *r);
+int RSA_get0_multi_prime_factors(const RSA *r, const BIGNUM *primes[]);
+void RSA_get0_crt_params(const RSA *r,
+                         const BIGNUM **dmp1, const BIGNUM **dmq1,
+                         const BIGNUM **iqmp);
+int RSA_get0_multi_prime_crt_params(const RSA *r, const BIGNUM *exps[],
+                                    const BIGNUM *coeffs[]);
+const BIGNUM *RSA_get0_n(const RSA *d);
+const BIGNUM *RSA_get0_e(const RSA *d);
+const BIGNUM *RSA_get0_d(const RSA *d);
+const BIGNUM *RSA_get0_p(const RSA *d);
+const BIGNUM *RSA_get0_q(const RSA *d);
+const BIGNUM *RSA_get0_dmp1(const RSA *r);
+const BIGNUM *RSA_get0_dmq1(const RSA *r);
+const BIGNUM *RSA_get0_iqmp(const RSA *r);
+void RSA_clear_flags(RSA *r, int flags);
+int RSA_test_flags(const RSA *r, int flags);
+void RSA_set_flags(RSA *r, int flags);
+int RSA_get_version(RSA *r);
+ENGINE *RSA_get0_engine(const RSA *r);
+
+/* Deprecated version */
+DEPRECATEDIN_0_9_8(RSA *RSA_generate_key(int bits, unsigned long e, void
+                                         (*callback) (int, int, void *),
+                                         void *cb_arg))
+
+/* New version */
+int RSA_generate_key_ex(RSA *rsa, int bits, BIGNUM *e, BN_GENCB *cb);
+/* Multi-prime version */
+int RSA_generate_multi_prime_key(RSA *rsa, int bits, int primes,
+                                 BIGNUM *e, BN_GENCB *cb);
+
+int RSA_X931_derive_ex(RSA *rsa, BIGNUM *p1, BIGNUM *p2, BIGNUM *q1,
+                       BIGNUM *q2, const BIGNUM *Xp1, const BIGNUM *Xp2,
+                       const BIGNUM *Xp, const BIGNUM *Xq1, const BIGNUM *Xq2,
+                       const BIGNUM *Xq, const BIGNUM *e, BN_GENCB *cb);
+int RSA_X931_generate_key_ex(RSA *rsa, int bits, const BIGNUM *e,
+                             BN_GENCB *cb);
+
+int RSA_check_key(const RSA *);
+int RSA_check_key_ex(const RSA *, BN_GENCB *cb);
+        /* next 4 return -1 on error */
+int RSA_public_encrypt(int flen, const unsigned char *from,
+                       unsigned char *to, RSA *rsa, int padding);
+int RSA_private_encrypt(int flen, const unsigned char *from,
+                        unsigned char *to, RSA *rsa, int padding);
+int RSA_public_decrypt(int flen, const unsigned char *from,
+                       unsigned char *to, RSA *rsa, int padding);
+int RSA_private_decrypt(int flen, const unsigned char *from,
+                        unsigned char *to, RSA *rsa, int padding);
+void RSA_free(RSA *r);
+/* "up" the RSA object's reference count */
+int RSA_up_ref(RSA *r);
+
+int RSA_flags(const RSA *r);
+
+void RSA_set_default_method(const RSA_METHOD *meth);
+const RSA_METHOD *RSA_get_default_method(void);
+const RSA_METHOD *RSA_null_method(void);
+const RSA_METHOD *RSA_get_method(const RSA *rsa);
+int RSA_set_method(RSA *rsa, const RSA_METHOD *meth);
+
+/* these are the actual RSA functions */
+const RSA_METHOD *RSA_PKCS1_OpenSSL(void);
+
+int RSA_pkey_ctx_ctrl(EVP_PKEY_CTX *ctx, int optype, int cmd, int p1, void *p2);
+
+DECLARE_ASN1_ENCODE_FUNCTIONS_const(RSA, RSAPublicKey)
+DECLARE_ASN1_ENCODE_FUNCTIONS_const(RSA, RSAPrivateKey)
+
+typedef struct rsa_pss_params_st {
+    X509_ALGOR *hashAlgorithm;
+    X509_ALGOR *maskGenAlgorithm;
+    ASN1_INTEGER *saltLength;
+    ASN1_INTEGER *trailerField;
+    /* Decoded hash algorithm from maskGenAlgorithm */
+    X509_ALGOR *maskHash;
+} RSA_PSS_PARAMS;
+
+DECLARE_ASN1_FUNCTIONS(RSA_PSS_PARAMS)
+
+typedef struct rsa_oaep_params_st {
+    X509_ALGOR *hashFunc;
+    X509_ALGOR *maskGenFunc;
+    X509_ALGOR *pSourceFunc;
+    /* Decoded hash algorithm from maskGenFunc */
+    X509_ALGOR *maskHash;
+} RSA_OAEP_PARAMS;
+
+DECLARE_ASN1_FUNCTIONS(RSA_OAEP_PARAMS)
+
+# ifndef OPENSSL_NO_STDIO
+int RSA_print_fp(FILE *fp, const RSA *r, int offset);
+# endif
+
+int RSA_print(BIO *bp, const RSA *r, int offset);
+
+/*
+ * The following 2 functions sign and verify a X509_SIG ASN1 object inside
+ * PKCS#1 padded RSA encryption
+ */
+int RSA_sign(int type, const unsigned char *m, unsigned int m_length,
+             unsigned char *sigret, unsigned int *siglen, RSA *rsa);
+int RSA_verify(int type, const unsigned char *m, unsigned int m_length,
+               const unsigned char *sigbuf, unsigned int siglen, RSA *rsa);
+
+/*
+ * The following 2 function sign and verify a ASN1_OCTET_STRING object inside
+ * PKCS#1 padded RSA encryption
+ */
+int RSA_sign_ASN1_OCTET_STRING(int type,
+                               const unsigned char *m, unsigned int m_length,
+                               unsigned char *sigret, unsigned int *siglen,
+                               RSA *rsa);
+int RSA_verify_ASN1_OCTET_STRING(int type, const unsigned char *m,
+                                 unsigned int m_length, unsigned char *sigbuf,
+                                 unsigned int siglen, RSA *rsa);
+
+int RSA_blinding_on(RSA *rsa, BN_CTX *ctx);
+void RSA_blinding_off(RSA *rsa);
+BN_BLINDING *RSA_setup_blinding(RSA *rsa, BN_CTX *ctx);
+
+int RSA_padding_add_PKCS1_type_1(unsigned char *to, int tlen,
+                                 const unsigned char *f, int fl);
+int RSA_padding_check_PKCS1_type_1(unsigned char *to, int tlen,
+                                   const unsigned char *f, int fl,
+                                   int rsa_len);
+int RSA_padding_add_PKCS1_type_2(unsigned char *to, int tlen,
+                                 const unsigned char *f, int fl);
+int RSA_padding_check_PKCS1_type_2(unsigned char *to, int tlen,
+                                   const unsigned char *f, int fl,
+                                   int rsa_len);
+int PKCS1_MGF1(unsigned char *mask, long len, const unsigned char *seed,
+               long seedlen, const EVP_MD *dgst);
+int RSA_padding_add_PKCS1_OAEP(unsigned char *to, int tlen,
+                               const unsigned char *f, int fl,
+                               const unsigned char *p, int pl);
+int RSA_padding_check_PKCS1_OAEP(unsigned char *to, int tlen,
+                                 const unsigned char *f, int fl, int rsa_len,
+                                 const unsigned char *p, int pl);
+int RSA_padding_add_PKCS1_OAEP_mgf1(unsigned char *to, int tlen,
+                                    const unsigned char *from, int flen,
+                                    const unsigned char *param, int plen,
+                                    const EVP_MD *md, const EVP_MD *mgf1md);
+int RSA_padding_check_PKCS1_OAEP_mgf1(unsigned char *to, int tlen,
+                                      const unsigned char *from, int flen,
+                                      int num, const unsigned char *param,
+                                      int plen, const EVP_MD *md,
+                                      const EVP_MD *mgf1md);
+int RSA_padding_add_SSLv23(unsigned char *to, int tlen,
+                           const unsigned char *f, int fl);
+int RSA_padding_check_SSLv23(unsigned char *to, int tlen,
+                             const unsigned char *f, int fl, int rsa_len);
+int RSA_padding_add_none(unsigned char *to, int tlen, const unsigned char *f,
+                         int fl);
+int RSA_padding_check_none(unsigned char *to, int tlen,
+                           const unsigned char *f, int fl, int rsa_len);
+int RSA_padding_add_X931(unsigned char *to, int tlen, const unsigned char *f,
+                         int fl);
+int RSA_padding_check_X931(unsigned char *to, int tlen,
+                           const unsigned char *f, int fl, int rsa_len);
+int RSA_X931_hash_id(int nid);
+
+int RSA_verify_PKCS1_PSS(RSA *rsa, const unsigned char *mHash,
+                         const EVP_MD *Hash, const unsigned char *EM,
+                         int sLen);
+int RSA_padding_add_PKCS1_PSS(RSA *rsa, unsigned char *EM,
+                              const unsigned char *mHash, const EVP_MD *Hash,
+                              int sLen);
+
+int RSA_verify_PKCS1_PSS_mgf1(RSA *rsa, const unsigned char *mHash,
+                              const EVP_MD *Hash, const EVP_MD *mgf1Hash,
+                              const unsigned char *EM, int sLen);
+
+int RSA_padding_add_PKCS1_PSS_mgf1(RSA *rsa, unsigned char *EM,
+                                   const unsigned char *mHash,
+                                   const EVP_MD *Hash, const EVP_MD *mgf1Hash,
+                                   int sLen);
+
+#define RSA_get_ex_new_index(l, p, newf, dupf, freef) \
+    CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_RSA, l, p, newf, dupf, freef)
+int RSA_set_ex_data(RSA *r, int idx, void *arg);
+void *RSA_get_ex_data(const RSA *r, int idx);
+
+RSA *RSAPublicKey_dup(RSA *rsa);
+RSA *RSAPrivateKey_dup(RSA *rsa);
+
+/*
+ * If this flag is set the RSA method is FIPS compliant and can be used in
+ * FIPS mode. This is set in the validated module method. If an application
+ * sets this flag in its own methods it is its responsibility to ensure the
+ * result is compliant.
+ */
+
+# define RSA_FLAG_FIPS_METHOD                    0x0400
+
+/*
+ * If this flag is set the operations normally disabled in FIPS mode are
+ * permitted it is then the applications responsibility to ensure that the
+ * usage is compliant.
+ */
+
+# define RSA_FLAG_NON_FIPS_ALLOW                 0x0400
+/*
+ * Application has decided PRNG is good enough to generate a key: don't
+ * check.
+ */
+# define RSA_FLAG_CHECKED                        0x0800
+
+RSA_METHOD *RSA_meth_new(const char *name, int flags);
+void RSA_meth_free(RSA_METHOD *meth);
+RSA_METHOD *RSA_meth_dup(const RSA_METHOD *meth);
+const char *RSA_meth_get0_name(const RSA_METHOD *meth);
+int RSA_meth_set1_name(RSA_METHOD *meth, const char *name);
+int RSA_meth_get_flags(const RSA_METHOD *meth);
+int RSA_meth_set_flags(RSA_METHOD *meth, int flags);
+void *RSA_meth_get0_app_data(const RSA_METHOD *meth);
+int RSA_meth_set0_app_data(RSA_METHOD *meth, void *app_data);
+int (*RSA_meth_get_pub_enc(const RSA_METHOD *meth))
+    (int flen, const unsigned char *from,
+     unsigned char *to, RSA *rsa, int padding);
+int RSA_meth_set_pub_enc(RSA_METHOD *rsa,
+                         int (*pub_enc) (int flen, const unsigned char *from,
+                                         unsigned char *to, RSA *rsa,
+                                         int padding));
+int (*RSA_meth_get_pub_dec(const RSA_METHOD *meth))
+    (int flen, const unsigned char *from,
+     unsigned char *to, RSA *rsa, int padding);
+int RSA_meth_set_pub_dec(RSA_METHOD *rsa,
+                         int (*pub_dec) (int flen, const unsigned char *from,
+                                         unsigned char *to, RSA *rsa,
+                                         int padding));
+int (*RSA_meth_get_priv_enc(const RSA_METHOD *meth))
+    (int flen, const unsigned char *from,
+     unsigned char *to, RSA *rsa, int padding);
+int RSA_meth_set_priv_enc(RSA_METHOD *rsa,
+                          int (*priv_enc) (int flen, const unsigned char *from,
+                                           unsigned char *to, RSA *rsa,
+                                           int padding));
+int (*RSA_meth_get_priv_dec(const RSA_METHOD *meth))
+    (int flen, const unsigned char *from,
+     unsigned char *to, RSA *rsa, int padding);
+int RSA_meth_set_priv_dec(RSA_METHOD *rsa,
+                          int (*priv_dec) (int flen, const unsigned char *from,
+                                           unsigned char *to, RSA *rsa,
+                                           int padding));
+int (*RSA_meth_get_mod_exp(const RSA_METHOD *meth))
+    (BIGNUM *r0, const BIGNUM *i, RSA *rsa, BN_CTX *ctx);
+int RSA_meth_set_mod_exp(RSA_METHOD *rsa,
+                         int (*mod_exp) (BIGNUM *r0, const BIGNUM *i, RSA *rsa,
+                                         BN_CTX *ctx));
+int (*RSA_meth_get_bn_mod_exp(const RSA_METHOD *meth))
+    (BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
+     const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *m_ctx);
+int RSA_meth_set_bn_mod_exp(RSA_METHOD *rsa,
+                            int (*bn_mod_exp) (BIGNUM *r,
+                                               const BIGNUM *a,
+                                               const BIGNUM *p,
+                                               const BIGNUM *m,
+                                               BN_CTX *ctx,
+                                               BN_MONT_CTX *m_ctx));
+int (*RSA_meth_get_init(const RSA_METHOD *meth)) (RSA *rsa);
+int RSA_meth_set_init(RSA_METHOD *rsa, int (*init) (RSA *rsa));
+int (*RSA_meth_get_finish(const RSA_METHOD *meth)) (RSA *rsa);
+int RSA_meth_set_finish(RSA_METHOD *rsa, int (*finish) (RSA *rsa));
+int (*RSA_meth_get_sign(const RSA_METHOD *meth))
+    (int type,
+     const unsigned char *m, unsigned int m_length,
+     unsigned char *sigret, unsigned int *siglen,
+     const RSA *rsa);
+int RSA_meth_set_sign(RSA_METHOD *rsa,
+                      int (*sign) (int type, const unsigned char *m,
+                                   unsigned int m_length,
+                                   unsigned char *sigret, unsigned int *siglen,
+                                   const RSA *rsa));
+int (*RSA_meth_get_verify(const RSA_METHOD *meth))
+    (int dtype, const unsigned char *m,
+     unsigned int m_length, const unsigned char *sigbuf,
+     unsigned int siglen, const RSA *rsa);
+int RSA_meth_set_verify(RSA_METHOD *rsa,
+                        int (*verify) (int dtype, const unsigned char *m,
+                                       unsigned int m_length,
+                                       const unsigned char *sigbuf,
+                                       unsigned int siglen, const RSA *rsa));
+int (*RSA_meth_get_keygen(const RSA_METHOD *meth))
+    (RSA *rsa, int bits, BIGNUM *e, BN_GENCB *cb);
+int RSA_meth_set_keygen(RSA_METHOD *rsa,
+                        int (*keygen) (RSA *rsa, int bits, BIGNUM *e,
+                                       BN_GENCB *cb));
+int (*RSA_meth_get_multi_prime_keygen(const RSA_METHOD *meth))
+    (RSA *rsa, int bits, int primes, BIGNUM *e, BN_GENCB *cb);
+int RSA_meth_set_multi_prime_keygen(RSA_METHOD *meth,
+                                    int (*keygen) (RSA *rsa, int bits,
+                                                   int primes, BIGNUM *e,
+                                                   BN_GENCB *cb));
+
+#  ifdef  __cplusplus
+}
+#  endif
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/rsaerr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/rsaerr.h
new file mode 100644
index 000000000..d5bc01c10
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/rsaerr.h
@@ -0,0 +1,162 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_RSAERR_H
+# define HEADER_RSAERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_RSA_strings(void);
+
+/*
+ * RSA function codes.
+ */
+# define RSA_F_CHECK_PADDING_MD                           140
+# define RSA_F_ENCODE_PKCS1                               146
+# define RSA_F_INT_RSA_VERIFY                             145
+# define RSA_F_OLD_RSA_PRIV_DECODE                        147
+# define RSA_F_PKEY_PSS_INIT                              165
+# define RSA_F_PKEY_RSA_CTRL                              143
+# define RSA_F_PKEY_RSA_CTRL_STR                          144
+# define RSA_F_PKEY_RSA_SIGN                              142
+# define RSA_F_PKEY_RSA_VERIFY                            149
+# define RSA_F_PKEY_RSA_VERIFYRECOVER                     141
+# define RSA_F_RSA_ALGOR_TO_MD                            156
+# define RSA_F_RSA_BUILTIN_KEYGEN                         129
+# define RSA_F_RSA_CHECK_KEY                              123
+# define RSA_F_RSA_CHECK_KEY_EX                           160
+# define RSA_F_RSA_CMS_DECRYPT                            159
+# define RSA_F_RSA_CMS_VERIFY                             158
+# define RSA_F_RSA_ITEM_VERIFY                            148
+# define RSA_F_RSA_METH_DUP                               161
+# define RSA_F_RSA_METH_NEW                               162
+# define RSA_F_RSA_METH_SET1_NAME                         163
+# define RSA_F_RSA_MGF1_TO_MD                             157
+# define RSA_F_RSA_MULTIP_INFO_NEW                        166
+# define RSA_F_RSA_NEW_METHOD                             106
+# define RSA_F_RSA_NULL                                   124
+# define RSA_F_RSA_NULL_PRIVATE_DECRYPT                   132
+# define RSA_F_RSA_NULL_PRIVATE_ENCRYPT                   133
+# define RSA_F_RSA_NULL_PUBLIC_DECRYPT                    134
+# define RSA_F_RSA_NULL_PUBLIC_ENCRYPT                    135
+# define RSA_F_RSA_OSSL_PRIVATE_DECRYPT                   101
+# define RSA_F_RSA_OSSL_PRIVATE_ENCRYPT                   102
+# define RSA_F_RSA_OSSL_PUBLIC_DECRYPT                    103
+# define RSA_F_RSA_OSSL_PUBLIC_ENCRYPT                    104
+# define RSA_F_RSA_PADDING_ADD_NONE                       107
+# define RSA_F_RSA_PADDING_ADD_PKCS1_OAEP                 121
+# define RSA_F_RSA_PADDING_ADD_PKCS1_OAEP_MGF1            154
+# define RSA_F_RSA_PADDING_ADD_PKCS1_PSS                  125
+# define RSA_F_RSA_PADDING_ADD_PKCS1_PSS_MGF1             152
+# define RSA_F_RSA_PADDING_ADD_PKCS1_TYPE_1               108
+# define RSA_F_RSA_PADDING_ADD_PKCS1_TYPE_2               109
+# define RSA_F_RSA_PADDING_ADD_SSLV23                     110
+# define RSA_F_RSA_PADDING_ADD_X931                       127
+# define RSA_F_RSA_PADDING_CHECK_NONE                     111
+# define RSA_F_RSA_PADDING_CHECK_PKCS1_OAEP               122
+# define RSA_F_RSA_PADDING_CHECK_PKCS1_OAEP_MGF1          153
+# define RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_1             112
+# define RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_2             113
+# define RSA_F_RSA_PADDING_CHECK_SSLV23                   114
+# define RSA_F_RSA_PADDING_CHECK_X931                     128
+# define RSA_F_RSA_PARAM_DECODE                           164
+# define RSA_F_RSA_PRINT                                  115
+# define RSA_F_RSA_PRINT_FP                               116
+# define RSA_F_RSA_PRIV_DECODE                            150
+# define RSA_F_RSA_PRIV_ENCODE                            138
+# define RSA_F_RSA_PSS_GET_PARAM                          151
+# define RSA_F_RSA_PSS_TO_CTX                             155
+# define RSA_F_RSA_PUB_DECODE                             139
+# define RSA_F_RSA_SETUP_BLINDING                         136
+# define RSA_F_RSA_SIGN                                   117
+# define RSA_F_RSA_SIGN_ASN1_OCTET_STRING                 118
+# define RSA_F_RSA_VERIFY                                 119
+# define RSA_F_RSA_VERIFY_ASN1_OCTET_STRING               120
+# define RSA_F_RSA_VERIFY_PKCS1_PSS_MGF1                  126
+# define RSA_F_SETUP_TBUF                                 167
+
+/*
+ * RSA reason codes.
+ */
+# define RSA_R_ALGORITHM_MISMATCH                         100
+# define RSA_R_BAD_E_VALUE                                101
+# define RSA_R_BAD_FIXED_HEADER_DECRYPT                   102
+# define RSA_R_BAD_PAD_BYTE_COUNT                         103
+# define RSA_R_BAD_SIGNATURE                              104
+# define RSA_R_BLOCK_TYPE_IS_NOT_01                       106
+# define RSA_R_BLOCK_TYPE_IS_NOT_02                       107
+# define RSA_R_DATA_GREATER_THAN_MOD_LEN                  108
+# define RSA_R_DATA_TOO_LARGE                             109
+# define RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE                110
+# define RSA_R_DATA_TOO_LARGE_FOR_MODULUS                 132
+# define RSA_R_DATA_TOO_SMALL                             111
+# define RSA_R_DATA_TOO_SMALL_FOR_KEY_SIZE                122
+# define RSA_R_DIGEST_DOES_NOT_MATCH                      158
+# define RSA_R_DIGEST_NOT_ALLOWED                         145
+# define RSA_R_DIGEST_TOO_BIG_FOR_RSA_KEY                 112
+# define RSA_R_DMP1_NOT_CONGRUENT_TO_D                    124
+# define RSA_R_DMQ1_NOT_CONGRUENT_TO_D                    125
+# define RSA_R_D_E_NOT_CONGRUENT_TO_1                     123
+# define RSA_R_FIRST_OCTET_INVALID                        133
+# define RSA_R_ILLEGAL_OR_UNSUPPORTED_PADDING_MODE        144
+# define RSA_R_INVALID_DIGEST                             157
+# define RSA_R_INVALID_DIGEST_LENGTH                      143
+# define RSA_R_INVALID_HEADER                             137
+# define RSA_R_INVALID_LABEL                              160
+# define RSA_R_INVALID_MESSAGE_LENGTH                     131
+# define RSA_R_INVALID_MGF1_MD                            156
+# define RSA_R_INVALID_MULTI_PRIME_KEY                    167
+# define RSA_R_INVALID_OAEP_PARAMETERS                    161
+# define RSA_R_INVALID_PADDING                            138
+# define RSA_R_INVALID_PADDING_MODE                       141
+# define RSA_R_INVALID_PSS_PARAMETERS                     149
+# define RSA_R_INVALID_PSS_SALTLEN                        146
+# define RSA_R_INVALID_SALT_LENGTH                        150
+# define RSA_R_INVALID_TRAILER                            139
+# define RSA_R_INVALID_X931_DIGEST                        142
+# define RSA_R_IQMP_NOT_INVERSE_OF_Q                      126
+# define RSA_R_KEY_PRIME_NUM_INVALID                      165
+# define RSA_R_KEY_SIZE_TOO_SMALL                         120
+# define RSA_R_LAST_OCTET_INVALID                         134
+# define RSA_R_MGF1_DIGEST_NOT_ALLOWED                    152
+# define RSA_R_MODULUS_TOO_LARGE                          105
+# define RSA_R_MP_COEFFICIENT_NOT_INVERSE_OF_R            168
+# define RSA_R_MP_EXPONENT_NOT_CONGRUENT_TO_D             169
+# define RSA_R_MP_R_NOT_PRIME                             170
+# define RSA_R_NO_PUBLIC_EXPONENT                         140
+# define RSA_R_NULL_BEFORE_BLOCK_MISSING                  113
+# define RSA_R_N_DOES_NOT_EQUAL_PRODUCT_OF_PRIMES         172
+# define RSA_R_N_DOES_NOT_EQUAL_P_Q                       127
+# define RSA_R_OAEP_DECODING_ERROR                        121
+# define RSA_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE   148
+# define RSA_R_PADDING_CHECK_FAILED                       114
+# define RSA_R_PKCS_DECODING_ERROR                        159
+# define RSA_R_PSS_SALTLEN_TOO_SMALL                      164
+# define RSA_R_P_NOT_PRIME                                128
+# define RSA_R_Q_NOT_PRIME                                129
+# define RSA_R_RSA_OPERATIONS_NOT_SUPPORTED               130
+# define RSA_R_SLEN_CHECK_FAILED                          136
+# define RSA_R_SLEN_RECOVERY_FAILED                       135
+# define RSA_R_SSLV3_ROLLBACK_ATTACK                      115
+# define RSA_R_THE_ASN1_OBJECT_IDENTIFIER_IS_NOT_KNOWN_FOR_THIS_MD 116
+# define RSA_R_UNKNOWN_ALGORITHM_TYPE                     117
+# define RSA_R_UNKNOWN_DIGEST                             166
+# define RSA_R_UNKNOWN_MASK_DIGEST                        151
+# define RSA_R_UNKNOWN_PADDING_TYPE                       118
+# define RSA_R_UNSUPPORTED_ENCRYPTION_TYPE                162
+# define RSA_R_UNSUPPORTED_LABEL_SOURCE                   163
+# define RSA_R_UNSUPPORTED_MASK_ALGORITHM                 153
+# define RSA_R_UNSUPPORTED_MASK_PARAMETER                 154
+# define RSA_R_UNSUPPORTED_SIGNATURE_TYPE                 155
+# define RSA_R_VALUE_MISSING                              147
+# define RSA_R_WRONG_SIGNATURE_LENGTH                     119
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/safestack.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/safestack.h
new file mode 100644
index 000000000..38b557897
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/safestack.h
@@ -0,0 +1,207 @@
+/*
+ * Copyright 1999-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_SAFESTACK_H
+# define HEADER_SAFESTACK_H
+
+# include <openssl/stack.h>
+# include <openssl/e_os2.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+# define STACK_OF(type) struct stack_st_##type
+
+# define SKM_DEFINE_STACK_OF(t1, t2, t3) \
+    STACK_OF(t1); \
+    typedef int (*sk_##t1##_compfunc)(const t3 * const *a, const t3 *const *b); \
+    typedef void (*sk_##t1##_freefunc)(t3 *a); \
+    typedef t3 * (*sk_##t1##_copyfunc)(const t3 *a); \
+    static ossl_unused ossl_inline int sk_##t1##_num(const STACK_OF(t1) *sk) \
+    { \
+        return OPENSSL_sk_num((const OPENSSL_STACK *)sk); \
+    } \
+    static ossl_unused ossl_inline t2 *sk_##t1##_value(const STACK_OF(t1) *sk, int idx) \
+    { \
+        return (t2 *)OPENSSL_sk_value((const OPENSSL_STACK *)sk, idx); \
+    } \
+    static ossl_unused ossl_inline STACK_OF(t1) *sk_##t1##_new(sk_##t1##_compfunc compare) \
+    { \
+        return (STACK_OF(t1) *)OPENSSL_sk_new((OPENSSL_sk_compfunc)compare); \
+    } \
+    static ossl_unused ossl_inline STACK_OF(t1) *sk_##t1##_new_null(void) \
+    { \
+        return (STACK_OF(t1) *)OPENSSL_sk_new_null(); \
+    } \
+    static ossl_unused ossl_inline STACK_OF(t1) *sk_##t1##_new_reserve(sk_##t1##_compfunc compare, int n) \
+    { \
+        return (STACK_OF(t1) *)OPENSSL_sk_new_reserve((OPENSSL_sk_compfunc)compare, n); \
+    } \
+    static ossl_unused ossl_inline int sk_##t1##_reserve(STACK_OF(t1) *sk, int n) \
+    { \
+        return OPENSSL_sk_reserve((OPENSSL_STACK *)sk, n); \
+    } \
+    static ossl_unused ossl_inline void sk_##t1##_free(STACK_OF(t1) *sk) \
+    { \
+        OPENSSL_sk_free((OPENSSL_STACK *)sk); \
+    } \
+    static ossl_unused ossl_inline void sk_##t1##_zero(STACK_OF(t1) *sk) \
+    { \
+        OPENSSL_sk_zero((OPENSSL_STACK *)sk); \
+    } \
+    static ossl_unused ossl_inline t2 *sk_##t1##_delete(STACK_OF(t1) *sk, int i) \
+    { \
+        return (t2 *)OPENSSL_sk_delete((OPENSSL_STACK *)sk, i); \
+    } \
+    static ossl_unused ossl_inline t2 *sk_##t1##_delete_ptr(STACK_OF(t1) *sk, t2 *ptr) \
+    { \
+        return (t2 *)OPENSSL_sk_delete_ptr((OPENSSL_STACK *)sk, \
+                                           (const void *)ptr); \
+    } \
+    static ossl_unused ossl_inline int sk_##t1##_push(STACK_OF(t1) *sk, t2 *ptr) \
+    { \
+        return OPENSSL_sk_push((OPENSSL_STACK *)sk, (const void *)ptr); \
+    } \
+    static ossl_unused ossl_inline int sk_##t1##_unshift(STACK_OF(t1) *sk, t2 *ptr) \
+    { \
+        return OPENSSL_sk_unshift((OPENSSL_STACK *)sk, (const void *)ptr); \
+    } \
+    static ossl_unused ossl_inline t2 *sk_##t1##_pop(STACK_OF(t1) *sk) \
+    { \
+        return (t2 *)OPENSSL_sk_pop((OPENSSL_STACK *)sk); \
+    } \
+    static ossl_unused ossl_inline t2 *sk_##t1##_shift(STACK_OF(t1) *sk) \
+    { \
+        return (t2 *)OPENSSL_sk_shift((OPENSSL_STACK *)sk); \
+    } \
+    static ossl_unused ossl_inline void sk_##t1##_pop_free(STACK_OF(t1) *sk, sk_##t1##_freefunc freefunc) \
+    { \
+        OPENSSL_sk_pop_free((OPENSSL_STACK *)sk, (OPENSSL_sk_freefunc)freefunc); \
+    } \
+    static ossl_unused ossl_inline int sk_##t1##_insert(STACK_OF(t1) *sk, t2 *ptr, int idx) \
+    { \
+        return OPENSSL_sk_insert((OPENSSL_STACK *)sk, (const void *)ptr, idx); \
+    } \
+    static ossl_unused ossl_inline t2 *sk_##t1##_set(STACK_OF(t1) *sk, int idx, t2 *ptr) \
+    { \
+        return (t2 *)OPENSSL_sk_set((OPENSSL_STACK *)sk, idx, (const void *)ptr); \
+    } \
+    static ossl_unused ossl_inline int sk_##t1##_find(STACK_OF(t1) *sk, t2 *ptr) \
+    { \
+        return OPENSSL_sk_find((OPENSSL_STACK *)sk, (const void *)ptr); \
+    } \
+    static ossl_unused ossl_inline int sk_##t1##_find_ex(STACK_OF(t1) *sk, t2 *ptr) \
+    { \
+        return OPENSSL_sk_find_ex((OPENSSL_STACK *)sk, (const void *)ptr); \
+    } \
+    static ossl_unused ossl_inline void sk_##t1##_sort(STACK_OF(t1) *sk) \
+    { \
+        OPENSSL_sk_sort((OPENSSL_STACK *)sk); \
+    } \
+    static ossl_unused ossl_inline int sk_##t1##_is_sorted(const STACK_OF(t1) *sk) \
+    { \
+        return OPENSSL_sk_is_sorted((const OPENSSL_STACK *)sk); \
+    } \
+    static ossl_unused ossl_inline STACK_OF(t1) * sk_##t1##_dup(const STACK_OF(t1) *sk) \
+    { \
+        return (STACK_OF(t1) *)OPENSSL_sk_dup((const OPENSSL_STACK *)sk); \
+    } \
+    static ossl_unused ossl_inline STACK_OF(t1) *sk_##t1##_deep_copy(const STACK_OF(t1) *sk, \
+                                                    sk_##t1##_copyfunc copyfunc, \
+                                                    sk_##t1##_freefunc freefunc) \
+    { \
+        return (STACK_OF(t1) *)OPENSSL_sk_deep_copy((const OPENSSL_STACK *)sk, \
+                                            (OPENSSL_sk_copyfunc)copyfunc, \
+                                            (OPENSSL_sk_freefunc)freefunc); \
+    } \
+    static ossl_unused ossl_inline sk_##t1##_compfunc sk_##t1##_set_cmp_func(STACK_OF(t1) *sk, sk_##t1##_compfunc compare) \
+    { \
+        return (sk_##t1##_compfunc)OPENSSL_sk_set_cmp_func((OPENSSL_STACK *)sk, (OPENSSL_sk_compfunc)compare); \
+    }
+
+# define DEFINE_SPECIAL_STACK_OF(t1, t2) SKM_DEFINE_STACK_OF(t1, t2, t2)
+# define DEFINE_STACK_OF(t) SKM_DEFINE_STACK_OF(t, t, t)
+# define DEFINE_SPECIAL_STACK_OF_CONST(t1, t2) \
+            SKM_DEFINE_STACK_OF(t1, const t2, t2)
+# define DEFINE_STACK_OF_CONST(t) SKM_DEFINE_STACK_OF(t, const t, t)
+
+/*-
+ * Strings are special: normally an lhash entry will point to a single
+ * (somewhat) mutable object. In the case of strings:
+ *
+ * a) Instead of a single char, there is an array of chars, NUL-terminated.
+ * b) The string may have be immutable.
+ *
+ * So, they need their own declarations. Especially important for
+ * type-checking tools, such as Deputy.
+ *
+ * In practice, however, it appears to be hard to have a const
+ * string. For now, I'm settling for dealing with the fact it is a
+ * string at all.
+ */
+typedef char *OPENSSL_STRING;
+typedef const char *OPENSSL_CSTRING;
+
+/*-
+ * Confusingly, LHASH_OF(STRING) deals with char ** throughout, but
+ * STACK_OF(STRING) is really more like STACK_OF(char), only, as mentioned
+ * above, instead of a single char each entry is a NUL-terminated array of
+ * chars. So, we have to implement STRING specially for STACK_OF. This is
+ * dealt with in the autogenerated macros below.
+ */
+DEFINE_SPECIAL_STACK_OF(OPENSSL_STRING, char)
+DEFINE_SPECIAL_STACK_OF_CONST(OPENSSL_CSTRING, char)
+
+/*
+ * Similarly, we sometimes use a block of characters, NOT nul-terminated.
+ * These should also be distinguished from "normal" stacks.
+ */
+typedef void *OPENSSL_BLOCK;
+DEFINE_SPECIAL_STACK_OF(OPENSSL_BLOCK, void)
+
+/*
+ * If called without higher optimization (min. -xO3) the Oracle Developer
+ * Studio compiler generates code for the defined (static inline) functions
+ * above.
+ * This would later lead to the linker complaining about missing symbols when
+ * this header file is included but the resulting object is not linked against
+ * the Crypto library (openssl#6912).
+ */
+# ifdef __SUNPRO_C
+#  pragma weak OPENSSL_sk_num
+#  pragma weak OPENSSL_sk_value
+#  pragma weak OPENSSL_sk_new
+#  pragma weak OPENSSL_sk_new_null
+#  pragma weak OPENSSL_sk_new_reserve
+#  pragma weak OPENSSL_sk_reserve
+#  pragma weak OPENSSL_sk_free
+#  pragma weak OPENSSL_sk_zero
+#  pragma weak OPENSSL_sk_delete
+#  pragma weak OPENSSL_sk_delete_ptr
+#  pragma weak OPENSSL_sk_push
+#  pragma weak OPENSSL_sk_unshift
+#  pragma weak OPENSSL_sk_pop
+#  pragma weak OPENSSL_sk_shift
+#  pragma weak OPENSSL_sk_pop_free
+#  pragma weak OPENSSL_sk_insert
+#  pragma weak OPENSSL_sk_set
+#  pragma weak OPENSSL_sk_find
+#  pragma weak OPENSSL_sk_find_ex
+#  pragma weak OPENSSL_sk_sort
+#  pragma weak OPENSSL_sk_is_sorted
+#  pragma weak OPENSSL_sk_dup
+#  pragma weak OPENSSL_sk_deep_copy
+#  pragma weak OPENSSL_sk_set_cmp_func
+# endif /* __SUNPRO_C */
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/seed.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/seed.h
new file mode 100644
index 000000000..de10b0857
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/seed.h
@@ -0,0 +1,96 @@
+/*
+ * Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Copyright (c) 2007 KISA(Korea Information Security Agency). All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Neither the name of author nor the names of its contributors may
+ *    be used to endorse or promote products derived from this software
+ *    without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ */
+
+#ifndef HEADER_SEED_H
+# define HEADER_SEED_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_SEED
+# include <openssl/e_os2.h>
+# include <openssl/crypto.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+/* look whether we need 'long' to get 32 bits */
+# ifdef AES_LONG
+#  ifndef SEED_LONG
+#   define SEED_LONG 1
+#  endif
+# endif
+
+# include <sys/types.h>
+
+# define SEED_BLOCK_SIZE 16
+# define SEED_KEY_LENGTH 16
+
+typedef struct seed_key_st {
+# ifdef SEED_LONG
+    unsigned long data[32];
+# else
+    unsigned int data[32];
+# endif
+} SEED_KEY_SCHEDULE;
+
+void SEED_set_key(const unsigned char rawkey[SEED_KEY_LENGTH],
+                  SEED_KEY_SCHEDULE *ks);
+
+void SEED_encrypt(const unsigned char s[SEED_BLOCK_SIZE],
+                  unsigned char d[SEED_BLOCK_SIZE],
+                  const SEED_KEY_SCHEDULE *ks);
+void SEED_decrypt(const unsigned char s[SEED_BLOCK_SIZE],
+                  unsigned char d[SEED_BLOCK_SIZE],
+                  const SEED_KEY_SCHEDULE *ks);
+
+void SEED_ecb_encrypt(const unsigned char *in, unsigned char *out,
+                      const SEED_KEY_SCHEDULE *ks, int enc);
+void SEED_cbc_encrypt(const unsigned char *in, unsigned char *out, size_t len,
+                      const SEED_KEY_SCHEDULE *ks,
+                      unsigned char ivec[SEED_BLOCK_SIZE], int enc);
+void SEED_cfb128_encrypt(const unsigned char *in, unsigned char *out,
+                         size_t len, const SEED_KEY_SCHEDULE *ks,
+                         unsigned char ivec[SEED_BLOCK_SIZE], int *num,
+                         int enc);
+void SEED_ofb128_encrypt(const unsigned char *in, unsigned char *out,
+                         size_t len, const SEED_KEY_SCHEDULE *ks,
+                         unsigned char ivec[SEED_BLOCK_SIZE], int *num);
+
+# ifdef  __cplusplus
+}
+# endif
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/sha.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/sha.h
new file mode 100644
index 000000000..6a1eb0de8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/sha.h
@@ -0,0 +1,119 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_SHA_H
+# define HEADER_SHA_H
+
+# include <openssl/e_os2.h>
+# include <stddef.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+/*-
+ * !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+ * ! SHA_LONG has to be at least 32 bits wide.                    !
+ * !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+ */
+# define SHA_LONG unsigned int
+
+# define SHA_LBLOCK      16
+# define SHA_CBLOCK      (SHA_LBLOCK*4)/* SHA treats input data as a
+                                        * contiguous array of 32 bit wide
+                                        * big-endian values. */
+# define SHA_LAST_BLOCK  (SHA_CBLOCK-8)
+# define SHA_DIGEST_LENGTH 20
+
+typedef struct SHAstate_st {
+    SHA_LONG h0, h1, h2, h3, h4;
+    SHA_LONG Nl, Nh;
+    SHA_LONG data[SHA_LBLOCK];
+    unsigned int num;
+} SHA_CTX;
+
+int SHA1_Init(SHA_CTX *c);
+int SHA1_Update(SHA_CTX *c, const void *data, size_t len);
+int SHA1_Final(unsigned char *md, SHA_CTX *c);
+unsigned char *SHA1(const unsigned char *d, size_t n, unsigned char *md);
+void SHA1_Transform(SHA_CTX *c, const unsigned char *data);
+
+# define SHA256_CBLOCK   (SHA_LBLOCK*4)/* SHA-256 treats input data as a
+                                        * contiguous array of 32 bit wide
+                                        * big-endian values. */
+
+typedef struct SHA256state_st {
+    SHA_LONG h[8];
+    SHA_LONG Nl, Nh;
+    SHA_LONG data[SHA_LBLOCK];
+    unsigned int num, md_len;
+} SHA256_CTX;
+
+int SHA224_Init(SHA256_CTX *c);
+int SHA224_Update(SHA256_CTX *c, const void *data, size_t len);
+int SHA224_Final(unsigned char *md, SHA256_CTX *c);
+unsigned char *SHA224(const unsigned char *d, size_t n, unsigned char *md);
+int SHA256_Init(SHA256_CTX *c);
+int SHA256_Update(SHA256_CTX *c, const void *data, size_t len);
+int SHA256_Final(unsigned char *md, SHA256_CTX *c);
+unsigned char *SHA256(const unsigned char *d, size_t n, unsigned char *md);
+void SHA256_Transform(SHA256_CTX *c, const unsigned char *data);
+
+# define SHA224_DIGEST_LENGTH    28
+# define SHA256_DIGEST_LENGTH    32
+# define SHA384_DIGEST_LENGTH    48
+# define SHA512_DIGEST_LENGTH    64
+
+/*
+ * Unlike 32-bit digest algorithms, SHA-512 *relies* on SHA_LONG64
+ * being exactly 64-bit wide. See Implementation Notes in sha512.c
+ * for further details.
+ */
+/*
+ * SHA-512 treats input data as a
+ * contiguous array of 64 bit
+ * wide big-endian values.
+ */
+# define SHA512_CBLOCK   (SHA_LBLOCK*8)
+# if (defined(_WIN32) || defined(_WIN64)) && !defined(__MINGW32__)
+#  define SHA_LONG64 unsigned __int64
+#  define U64(C)     C##UI64
+# elif defined(__arch64__)
+#  define SHA_LONG64 unsigned long
+#  define U64(C)     C##UL
+# else
+#  define SHA_LONG64 unsigned long long
+#  define U64(C)     C##ULL
+# endif
+
+typedef struct SHA512state_st {
+    SHA_LONG64 h[8];
+    SHA_LONG64 Nl, Nh;
+    union {
+        SHA_LONG64 d[SHA_LBLOCK];
+        unsigned char p[SHA512_CBLOCK];
+    } u;
+    unsigned int num, md_len;
+} SHA512_CTX;
+
+int SHA384_Init(SHA512_CTX *c);
+int SHA384_Update(SHA512_CTX *c, const void *data, size_t len);
+int SHA384_Final(unsigned char *md, SHA512_CTX *c);
+unsigned char *SHA384(const unsigned char *d, size_t n, unsigned char *md);
+int SHA512_Init(SHA512_CTX *c);
+int SHA512_Update(SHA512_CTX *c, const void *data, size_t len);
+int SHA512_Final(unsigned char *md, SHA512_CTX *c);
+unsigned char *SHA512(const unsigned char *d, size_t n, unsigned char *md);
+void SHA512_Transform(SHA512_CTX *c, const unsigned char *data);
+
+#ifdef  __cplusplus
+}
+#endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/srp.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/srp.h
new file mode 100644
index 000000000..aaf13558e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/srp.h
@@ -0,0 +1,135 @@
+/*
+ * Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2004, EdelKey Project. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Christophe Renou and Peter Sylvester,
+ * for the EdelKey project.
+ */
+
+#ifndef HEADER_SRP_H
+# define HEADER_SRP_H
+
+#include <openssl/opensslconf.h>
+
+#ifndef OPENSSL_NO_SRP
+# include <stdio.h>
+# include <string.h>
+# include <openssl/safestack.h>
+# include <openssl/bn.h>
+# include <openssl/crypto.h>
+
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+typedef struct SRP_gN_cache_st {
+    char *b64_bn;
+    BIGNUM *bn;
+} SRP_gN_cache;
+
+
+DEFINE_STACK_OF(SRP_gN_cache)
+
+typedef struct SRP_user_pwd_st {
+    /* Owned by us. */
+    char *id;
+    BIGNUM *s;
+    BIGNUM *v;
+    /* Not owned by us. */
+    const BIGNUM *g;
+    const BIGNUM *N;
+    /* Owned by us. */
+    char *info;
+} SRP_user_pwd;
+
+void SRP_user_pwd_free(SRP_user_pwd *user_pwd);
+
+DEFINE_STACK_OF(SRP_user_pwd)
+
+typedef struct SRP_VBASE_st {
+    STACK_OF(SRP_user_pwd) *users_pwd;
+    STACK_OF(SRP_gN_cache) *gN_cache;
+/* to simulate a user */
+    char *seed_key;
+    const BIGNUM *default_g;
+    const BIGNUM *default_N;
+} SRP_VBASE;
+
+/*
+ * Internal structure storing N and g pair
+ */
+typedef struct SRP_gN_st {
+    char *id;
+    const BIGNUM *g;
+    const BIGNUM *N;
+} SRP_gN;
+
+DEFINE_STACK_OF(SRP_gN)
+
+SRP_VBASE *SRP_VBASE_new(char *seed_key);
+void SRP_VBASE_free(SRP_VBASE *vb);
+int SRP_VBASE_init(SRP_VBASE *vb, char *verifier_file);
+
+/* This method ignores the configured seed and fails for an unknown user. */
+DEPRECATEDIN_1_1_0(SRP_user_pwd *SRP_VBASE_get_by_user(SRP_VBASE *vb, char *username))
+/* NOTE: unlike in SRP_VBASE_get_by_user, caller owns the returned pointer.*/
+SRP_user_pwd *SRP_VBASE_get1_by_user(SRP_VBASE *vb, char *username);
+
+char *SRP_create_verifier(const char *user, const char *pass, char **salt,
+                          char **verifier, const char *N, const char *g);
+int SRP_create_verifier_BN(const char *user, const char *pass, BIGNUM **salt,
+                           BIGNUM **verifier, const BIGNUM *N,
+                           const BIGNUM *g);
+
+# define SRP_NO_ERROR 0
+# define SRP_ERR_VBASE_INCOMPLETE_FILE 1
+# define SRP_ERR_VBASE_BN_LIB 2
+# define SRP_ERR_OPEN_FILE 3
+# define SRP_ERR_MEMORY 4
+
+# define DB_srptype      0
+# define DB_srpverifier  1
+# define DB_srpsalt      2
+# define DB_srpid        3
+# define DB_srpgN        4
+# define DB_srpinfo      5
+# undef  DB_NUMBER
+# define DB_NUMBER       6
+
+# define DB_SRP_INDEX    'I'
+# define DB_SRP_VALID    'V'
+# define DB_SRP_REVOKED  'R'
+# define DB_SRP_MODIF    'v'
+
+/* see srp.c */
+char *SRP_check_known_gN_param(const BIGNUM *g, const BIGNUM *N);
+SRP_gN *SRP_get_default_gN(const char *id);
+
+/* server side .... */
+BIGNUM *SRP_Calc_server_key(const BIGNUM *A, const BIGNUM *v, const BIGNUM *u,
+                            const BIGNUM *b, const BIGNUM *N);
+BIGNUM *SRP_Calc_B(const BIGNUM *b, const BIGNUM *N, const BIGNUM *g,
+                   const BIGNUM *v);
+int SRP_Verify_A_mod_N(const BIGNUM *A, const BIGNUM *N);
+BIGNUM *SRP_Calc_u(const BIGNUM *A, const BIGNUM *B, const BIGNUM *N);
+
+/* client side .... */
+BIGNUM *SRP_Calc_x(const BIGNUM *s, const char *user, const char *pass);
+BIGNUM *SRP_Calc_A(const BIGNUM *a, const BIGNUM *N, const BIGNUM *g);
+BIGNUM *SRP_Calc_client_key(const BIGNUM *N, const BIGNUM *B, const BIGNUM *g,
+                            const BIGNUM *x, const BIGNUM *a, const BIGNUM *u);
+int SRP_Verify_B_mod_N(const BIGNUM *B, const BIGNUM *N);
+
+# define SRP_MINIMAL_N 1024
+
+# ifdef  __cplusplus
+}
+# endif
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/srtp.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/srtp.h
new file mode 100644
index 000000000..0b57c2356
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/srtp.h
@@ -0,0 +1,50 @@
+/*
+ * Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * DTLS code by Eric Rescorla <ekr@rtfm.com>
+ *
+ * Copyright (C) 2006, Network Resonance, Inc. Copyright (C) 2011, RTFM, Inc.
+ */
+
+#ifndef HEADER_D1_SRTP_H
+# define HEADER_D1_SRTP_H
+
+# include <openssl/ssl.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+# define SRTP_AES128_CM_SHA1_80 0x0001
+# define SRTP_AES128_CM_SHA1_32 0x0002
+# define SRTP_AES128_F8_SHA1_80 0x0003
+# define SRTP_AES128_F8_SHA1_32 0x0004
+# define SRTP_NULL_SHA1_80      0x0005
+# define SRTP_NULL_SHA1_32      0x0006
+
+/* AEAD SRTP protection profiles from RFC 7714 */
+# define SRTP_AEAD_AES_128_GCM  0x0007
+# define SRTP_AEAD_AES_256_GCM  0x0008
+
+# ifndef OPENSSL_NO_SRTP
+
+__owur int SSL_CTX_set_tlsext_use_srtp(SSL_CTX *ctx, const char *profiles);
+__owur int SSL_set_tlsext_use_srtp(SSL *ssl, const char *profiles);
+
+__owur STACK_OF(SRTP_PROTECTION_PROFILE) *SSL_get_srtp_profiles(SSL *ssl);
+__owur SRTP_PROTECTION_PROFILE *SSL_get_selected_srtp_profile(SSL *s);
+
+# endif
+
+#ifdef  __cplusplus
+}
+#endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/ssl.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ssl.h
new file mode 100644
index 000000000..48e1152a2
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ssl.h
@@ -0,0 +1,2438 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ * Copyright 2005 Nokia. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_SSL_H
+# define HEADER_SSL_H
+
+# include <openssl/e_os2.h>
+# include <openssl/opensslconf.h>
+# include <openssl/comp.h>
+# include <openssl/bio.h>
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  include <openssl/x509.h>
+#  include <openssl/crypto.h>
+#  include <openssl/buffer.h>
+# endif
+# include <openssl/lhash.h>
+# include <openssl/pem.h>
+# include <openssl/hmac.h>
+# include <openssl/async.h>
+
+# include <openssl/safestack.h>
+# include <openssl/symhacks.h>
+# include <openssl/ct.h>
+# include <openssl/sslerr.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+/* OpenSSL version number for ASN.1 encoding of the session information */
+/*-
+ * Version 0 - initial version
+ * Version 1 - added the optional peer certificate
+ */
+# define SSL_SESSION_ASN1_VERSION 0x0001
+
+# define SSL_MAX_SSL_SESSION_ID_LENGTH           32
+# define SSL_MAX_SID_CTX_LENGTH                  32
+
+# define SSL_MIN_RSA_MODULUS_LENGTH_IN_BYTES     (512/8)
+# define SSL_MAX_KEY_ARG_LENGTH                  8
+# define SSL_MAX_MASTER_KEY_LENGTH               48
+
+/* The maximum number of encrypt/decrypt pipelines we can support */
+# define SSL_MAX_PIPELINES  32
+
+/* text strings for the ciphers */
+
+/* These are used to specify which ciphers to use and not to use */
+
+# define SSL_TXT_LOW             "LOW"
+# define SSL_TXT_MEDIUM          "MEDIUM"
+# define SSL_TXT_HIGH            "HIGH"
+# define SSL_TXT_FIPS            "FIPS"
+
+# define SSL_TXT_aNULL           "aNULL"
+# define SSL_TXT_eNULL           "eNULL"
+# define SSL_TXT_NULL            "NULL"
+
+# define SSL_TXT_kRSA            "kRSA"
+# define SSL_TXT_kDHr            "kDHr"/* this cipher class has been removed */
+# define SSL_TXT_kDHd            "kDHd"/* this cipher class has been removed */
+# define SSL_TXT_kDH             "kDH"/* this cipher class has been removed */
+# define SSL_TXT_kEDH            "kEDH"/* alias for kDHE */
+# define SSL_TXT_kDHE            "kDHE"
+# define SSL_TXT_kECDHr          "kECDHr"/* this cipher class has been removed */
+# define SSL_TXT_kECDHe          "kECDHe"/* this cipher class has been removed */
+# define SSL_TXT_kECDH           "kECDH"/* this cipher class has been removed */
+# define SSL_TXT_kEECDH          "kEECDH"/* alias for kECDHE */
+# define SSL_TXT_kECDHE          "kECDHE"
+# define SSL_TXT_kPSK            "kPSK"
+# define SSL_TXT_kRSAPSK         "kRSAPSK"
+# define SSL_TXT_kECDHEPSK       "kECDHEPSK"
+# define SSL_TXT_kDHEPSK         "kDHEPSK"
+# define SSL_TXT_kGOST           "kGOST"
+# define SSL_TXT_kSRP            "kSRP"
+
+# define SSL_TXT_aRSA            "aRSA"
+# define SSL_TXT_aDSS            "aDSS"
+# define SSL_TXT_aDH             "aDH"/* this cipher class has been removed */
+# define SSL_TXT_aECDH           "aECDH"/* this cipher class has been removed */
+# define SSL_TXT_aECDSA          "aECDSA"
+# define SSL_TXT_aPSK            "aPSK"
+# define SSL_TXT_aGOST94         "aGOST94"
+# define SSL_TXT_aGOST01         "aGOST01"
+# define SSL_TXT_aGOST12         "aGOST12"
+# define SSL_TXT_aGOST           "aGOST"
+# define SSL_TXT_aSRP            "aSRP"
+
+# define SSL_TXT_DSS             "DSS"
+# define SSL_TXT_DH              "DH"
+# define SSL_TXT_DHE             "DHE"/* same as "kDHE:-ADH" */
+# define SSL_TXT_EDH             "EDH"/* alias for DHE */
+# define SSL_TXT_ADH             "ADH"
+# define SSL_TXT_RSA             "RSA"
+# define SSL_TXT_ECDH            "ECDH"
+# define SSL_TXT_EECDH           "EECDH"/* alias for ECDHE" */
+# define SSL_TXT_ECDHE           "ECDHE"/* same as "kECDHE:-AECDH" */
+# define SSL_TXT_AECDH           "AECDH"
+# define SSL_TXT_ECDSA           "ECDSA"
+# define SSL_TXT_PSK             "PSK"
+# define SSL_TXT_SRP             "SRP"
+
+# define SSL_TXT_DES             "DES"
+# define SSL_TXT_3DES            "3DES"
+# define SSL_TXT_RC4             "RC4"
+# define SSL_TXT_RC2             "RC2"
+# define SSL_TXT_IDEA            "IDEA"
+# define SSL_TXT_SEED            "SEED"
+# define SSL_TXT_AES128          "AES128"
+# define SSL_TXT_AES256          "AES256"
+# define SSL_TXT_AES             "AES"
+# define SSL_TXT_AES_GCM         "AESGCM"
+# define SSL_TXT_AES_CCM         "AESCCM"
+# define SSL_TXT_AES_CCM_8       "AESCCM8"
+# define SSL_TXT_CAMELLIA128     "CAMELLIA128"
+# define SSL_TXT_CAMELLIA256     "CAMELLIA256"
+# define SSL_TXT_CAMELLIA        "CAMELLIA"
+# define SSL_TXT_CHACHA20        "CHACHA20"
+# define SSL_TXT_GOST            "GOST89"
+# define SSL_TXT_ARIA            "ARIA"
+# define SSL_TXT_ARIA_GCM        "ARIAGCM"
+# define SSL_TXT_ARIA128         "ARIA128"
+# define SSL_TXT_ARIA256         "ARIA256"
+
+# define SSL_TXT_MD5             "MD5"
+# define SSL_TXT_SHA1            "SHA1"
+# define SSL_TXT_SHA             "SHA"/* same as "SHA1" */
+# define SSL_TXT_GOST94          "GOST94"
+# define SSL_TXT_GOST89MAC       "GOST89MAC"
+# define SSL_TXT_GOST12          "GOST12"
+# define SSL_TXT_GOST89MAC12     "GOST89MAC12"
+# define SSL_TXT_SHA256          "SHA256"
+# define SSL_TXT_SHA384          "SHA384"
+
+# define SSL_TXT_SSLV3           "SSLv3"
+# define SSL_TXT_TLSV1           "TLSv1"
+# define SSL_TXT_TLSV1_1         "TLSv1.1"
+# define SSL_TXT_TLSV1_2         "TLSv1.2"
+
+# define SSL_TXT_ALL             "ALL"
+
+/*-
+ * COMPLEMENTOF* definitions. These identifiers are used to (de-select)
+ * ciphers normally not being used.
+ * Example: "RC4" will activate all ciphers using RC4 including ciphers
+ * without authentication, which would normally disabled by DEFAULT (due
+ * the "!ADH" being part of default). Therefore "RC4:!COMPLEMENTOFDEFAULT"
+ * will make sure that it is also disabled in the specific selection.
+ * COMPLEMENTOF* identifiers are portable between version, as adjustments
+ * to the default cipher setup will also be included here.
+ *
+ * COMPLEMENTOFDEFAULT does not experience the same special treatment that
+ * DEFAULT gets, as only selection is being done and no sorting as needed
+ * for DEFAULT.
+ */
+# define SSL_TXT_CMPALL          "COMPLEMENTOFALL"
+# define SSL_TXT_CMPDEF          "COMPLEMENTOFDEFAULT"
+
+/*
+ * The following cipher list is used by default. It also is substituted when
+ * an application-defined cipher list string starts with 'DEFAULT'.
+ * This applies to ciphersuites for TLSv1.2 and below.
+ */
+# define SSL_DEFAULT_CIPHER_LIST "ALL:!COMPLEMENTOFDEFAULT:!eNULL"
+/* This is the default set of TLSv1.3 ciphersuites */
+# if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305)
+#  define TLS_DEFAULT_CIPHERSUITES "TLS_AES_256_GCM_SHA384:" \
+                                   "TLS_CHACHA20_POLY1305_SHA256:" \
+                                   "TLS_AES_128_GCM_SHA256"
+# else
+#  define TLS_DEFAULT_CIPHERSUITES "TLS_AES_256_GCM_SHA384:" \
+                                   "TLS_AES_128_GCM_SHA256"
+#endif
+/*
+ * As of OpenSSL 1.0.0, ssl_create_cipher_list() in ssl/ssl_ciph.c always
+ * starts with a reasonable order, and all we have to do for DEFAULT is
+ * throwing out anonymous and unencrypted ciphersuites! (The latter are not
+ * actually enabled by ALL, but "ALL:RSA" would enable some of them.)
+ */
+
+/* Used in SSL_set_shutdown()/SSL_get_shutdown(); */
+# define SSL_SENT_SHUTDOWN       1
+# define SSL_RECEIVED_SHUTDOWN   2
+
+#ifdef __cplusplus
+}
+#endif
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+# define SSL_FILETYPE_ASN1       X509_FILETYPE_ASN1
+# define SSL_FILETYPE_PEM        X509_FILETYPE_PEM
+
+/*
+ * This is needed to stop compilers complaining about the 'struct ssl_st *'
+ * function parameters used to prototype callbacks in SSL_CTX.
+ */
+typedef struct ssl_st *ssl_crock_st;
+typedef struct tls_session_ticket_ext_st TLS_SESSION_TICKET_EXT;
+typedef struct ssl_method_st SSL_METHOD;
+typedef struct ssl_cipher_st SSL_CIPHER;
+typedef struct ssl_session_st SSL_SESSION;
+typedef struct tls_sigalgs_st TLS_SIGALGS;
+typedef struct ssl_conf_ctx_st SSL_CONF_CTX;
+typedef struct ssl_comp_st SSL_COMP;
+
+STACK_OF(SSL_CIPHER);
+STACK_OF(SSL_COMP);
+
+/* SRTP protection profiles for use with the use_srtp extension (RFC 5764)*/
+typedef struct srtp_protection_profile_st {
+    const char *name;
+    unsigned long id;
+} SRTP_PROTECTION_PROFILE;
+
+DEFINE_STACK_OF(SRTP_PROTECTION_PROFILE)
+
+typedef int (*tls_session_ticket_ext_cb_fn)(SSL *s, const unsigned char *data,
+                                            int len, void *arg);
+typedef int (*tls_session_secret_cb_fn)(SSL *s, void *secret, int *secret_len,
+                                        STACK_OF(SSL_CIPHER) *peer_ciphers,
+                                        const SSL_CIPHER **cipher, void *arg);
+
+/* Extension context codes */
+/* This extension is only allowed in TLS */
+#define SSL_EXT_TLS_ONLY                        0x0001
+/* This extension is only allowed in DTLS */
+#define SSL_EXT_DTLS_ONLY                       0x0002
+/* Some extensions may be allowed in DTLS but we don't implement them for it */
+#define SSL_EXT_TLS_IMPLEMENTATION_ONLY         0x0004
+/* Most extensions are not defined for SSLv3 but EXT_TYPE_renegotiate is */
+#define SSL_EXT_SSL3_ALLOWED                    0x0008
+/* Extension is only defined for TLS1.2 and below */
+#define SSL_EXT_TLS1_2_AND_BELOW_ONLY           0x0010
+/* Extension is only defined for TLS1.3 and above */
+#define SSL_EXT_TLS1_3_ONLY                     0x0020
+/* Ignore this extension during parsing if we are resuming */
+#define SSL_EXT_IGNORE_ON_RESUMPTION            0x0040
+#define SSL_EXT_CLIENT_HELLO                    0x0080
+/* Really means TLS1.2 or below */
+#define SSL_EXT_TLS1_2_SERVER_HELLO             0x0100
+#define SSL_EXT_TLS1_3_SERVER_HELLO             0x0200
+#define SSL_EXT_TLS1_3_ENCRYPTED_EXTENSIONS     0x0400
+#define SSL_EXT_TLS1_3_HELLO_RETRY_REQUEST      0x0800
+#define SSL_EXT_TLS1_3_CERTIFICATE              0x1000
+#define SSL_EXT_TLS1_3_NEW_SESSION_TICKET       0x2000
+#define SSL_EXT_TLS1_3_CERTIFICATE_REQUEST      0x4000
+
+/* Typedefs for handling custom extensions */
+
+typedef int (*custom_ext_add_cb)(SSL *s, unsigned int ext_type,
+                                 const unsigned char **out, size_t *outlen,
+                                 int *al, void *add_arg);
+
+typedef void (*custom_ext_free_cb)(SSL *s, unsigned int ext_type,
+                                   const unsigned char *out, void *add_arg);
+
+typedef int (*custom_ext_parse_cb)(SSL *s, unsigned int ext_type,
+                                   const unsigned char *in, size_t inlen,
+                                   int *al, void *parse_arg);
+
+
+typedef int (*SSL_custom_ext_add_cb_ex)(SSL *s, unsigned int ext_type,
+                                        unsigned int context,
+                                        const unsigned char **out,
+                                        size_t *outlen, X509 *x,
+                                        size_t chainidx,
+                                        int *al, void *add_arg);
+
+typedef void (*SSL_custom_ext_free_cb_ex)(SSL *s, unsigned int ext_type,
+                                          unsigned int context,
+                                          const unsigned char *out,
+                                          void *add_arg);
+
+typedef int (*SSL_custom_ext_parse_cb_ex)(SSL *s, unsigned int ext_type,
+                                          unsigned int context,
+                                          const unsigned char *in,
+                                          size_t inlen, X509 *x,
+                                          size_t chainidx,
+                                          int *al, void *parse_arg);
+
+/* Typedef for verification callback */
+typedef int (*SSL_verify_cb)(int preverify_ok, X509_STORE_CTX *x509_ctx);
+
+/*
+ * Some values are reserved until OpenSSL 1.2.0 because they were previously
+ * included in SSL_OP_ALL in a 1.1.x release.
+ *
+ * Reserved value (until OpenSSL 1.2.0)                  0x00000001U
+ * Reserved value (until OpenSSL 1.2.0)                  0x00000002U
+ */
+/* Allow initial connection to servers that don't support RI */
+# define SSL_OP_LEGACY_SERVER_CONNECT                    0x00000004U
+
+/* Reserved value (until OpenSSL 1.2.0)                  0x00000008U */
+# define SSL_OP_TLSEXT_PADDING                           0x00000010U
+/* Reserved value (until OpenSSL 1.2.0)                  0x00000020U */
+# define SSL_OP_SAFARI_ECDHE_ECDSA_BUG                   0x00000040U
+/*
+ * Reserved value (until OpenSSL 1.2.0)                  0x00000080U
+ * Reserved value (until OpenSSL 1.2.0)                  0x00000100U
+ * Reserved value (until OpenSSL 1.2.0)                  0x00000200U
+ */
+
+/* In TLSv1.3 allow a non-(ec)dhe based kex_mode */
+# define SSL_OP_ALLOW_NO_DHE_KEX                         0x00000400U
+
+/*
+ * Disable SSL 3.0/TLS 1.0 CBC vulnerability workaround that was added in
+ * OpenSSL 0.9.6d.  Usually (depending on the application protocol) the
+ * workaround is not needed.  Unfortunately some broken SSL/TLS
+ * implementations cannot handle it at all, which is why we include it in
+ * SSL_OP_ALL. Added in 0.9.6e
+ */
+# define SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS              0x00000800U
+
+/* DTLS options */
+# define SSL_OP_NO_QUERY_MTU                             0x00001000U
+/* Turn on Cookie Exchange (on relevant for servers) */
+# define SSL_OP_COOKIE_EXCHANGE                          0x00002000U
+/* Don't use RFC4507 ticket extension */
+# define SSL_OP_NO_TICKET                                0x00004000U
+# ifndef OPENSSL_NO_DTLS1_METHOD
+/* Use Cisco's "speshul" version of DTLS_BAD_VER
+ * (only with deprecated DTLSv1_client_method())  */
+#  define SSL_OP_CISCO_ANYCONNECT                        0x00008000U
+# endif
+
+/* As server, disallow session resumption on renegotiation */
+# define SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION   0x00010000U
+/* Don't use compression even if supported */
+# define SSL_OP_NO_COMPRESSION                           0x00020000U
+/* Permit unsafe legacy renegotiation */
+# define SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION        0x00040000U
+/* Disable encrypt-then-mac */
+# define SSL_OP_NO_ENCRYPT_THEN_MAC                      0x00080000U
+
+/*
+ * Enable TLSv1.3 Compatibility mode. This is on by default. A future version
+ * of OpenSSL may have this disabled by default.
+ */
+# define SSL_OP_ENABLE_MIDDLEBOX_COMPAT                  0x00100000U
+
+/* Prioritize Chacha20Poly1305 when client does.
+ * Modifies SSL_OP_CIPHER_SERVER_PREFERENCE */
+# define SSL_OP_PRIORITIZE_CHACHA                        0x00200000U
+
+/*
+ * Set on servers to choose the cipher according to the server's preferences
+ */
+# define SSL_OP_CIPHER_SERVER_PREFERENCE                 0x00400000U
+/*
+ * If set, a server will allow a client to issue a SSLv3.0 version number as
+ * latest version supported in the premaster secret, even when TLSv1.0
+ * (version 3.1) was announced in the client hello. Normally this is
+ * forbidden to prevent version rollback attacks.
+ */
+# define SSL_OP_TLS_ROLLBACK_BUG                         0x00800000U
+
+/*
+ * Switches off automatic TLSv1.3 anti-replay protection for early data. This
+ * is a server-side option only (no effect on the client).
+ */
+# define SSL_OP_NO_ANTI_REPLAY                           0x01000000U
+
+# define SSL_OP_NO_SSLv3                                 0x02000000U
+# define SSL_OP_NO_TLSv1                                 0x04000000U
+# define SSL_OP_NO_TLSv1_2                               0x08000000U
+# define SSL_OP_NO_TLSv1_1                               0x10000000U
+# define SSL_OP_NO_TLSv1_3                               0x20000000U
+
+# define SSL_OP_NO_DTLSv1                                0x04000000U
+# define SSL_OP_NO_DTLSv1_2                              0x08000000U
+
+# define SSL_OP_NO_SSL_MASK (SSL_OP_NO_SSLv3|\
+        SSL_OP_NO_TLSv1|SSL_OP_NO_TLSv1_1|SSL_OP_NO_TLSv1_2|SSL_OP_NO_TLSv1_3)
+# define SSL_OP_NO_DTLS_MASK (SSL_OP_NO_DTLSv1|SSL_OP_NO_DTLSv1_2)
+
+/* Disallow all renegotiation */
+# define SSL_OP_NO_RENEGOTIATION                         0x40000000U
+
+/*
+ * Make server add server-hello extension from early version of cryptopro
+ * draft, when GOST ciphersuite is negotiated. Required for interoperability
+ * with CryptoPro CSP 3.x
+ */
+# define SSL_OP_CRYPTOPRO_TLSEXT_BUG                     0x80000000U
+
+/*
+ * SSL_OP_ALL: various bug workarounds that should be rather harmless.
+ * This used to be 0x000FFFFFL before 0.9.7.
+ * This used to be 0x80000BFFU before 1.1.1.
+ */
+# define SSL_OP_ALL        (SSL_OP_CRYPTOPRO_TLSEXT_BUG|\
+                            SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS|\
+                            SSL_OP_LEGACY_SERVER_CONNECT|\
+                            SSL_OP_TLSEXT_PADDING|\
+                            SSL_OP_SAFARI_ECDHE_ECDSA_BUG)
+
+/* OBSOLETE OPTIONS: retained for compatibility */
+
+/* Removed from OpenSSL 1.1.0. Was 0x00000001L */
+/* Related to removed SSLv2. */
+# define SSL_OP_MICROSOFT_SESS_ID_BUG                    0x0
+/* Removed from OpenSSL 1.1.0. Was 0x00000002L */
+/* Related to removed SSLv2. */
+# define SSL_OP_NETSCAPE_CHALLENGE_BUG                   0x0
+/* Removed from OpenSSL 0.9.8q and 1.0.0c. Was 0x00000008L */
+/* Dead forever, see CVE-2010-4180 */
+# define SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG         0x0
+/* Removed from OpenSSL 1.0.1h and 1.0.2. Was 0x00000010L */
+/* Refers to ancient SSLREF and SSLv2. */
+# define SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG              0x0
+/* Removed from OpenSSL 1.1.0. Was 0x00000020 */
+# define SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER               0x0
+/* Removed from OpenSSL 0.9.7h and 0.9.8b. Was 0x00000040L */
+# define SSL_OP_MSIE_SSLV2_RSA_PADDING                   0x0
+/* Removed from OpenSSL 1.1.0. Was 0x00000080 */
+/* Ancient SSLeay version. */
+# define SSL_OP_SSLEAY_080_CLIENT_DH_BUG                 0x0
+/* Removed from OpenSSL 1.1.0. Was 0x00000100L */
+# define SSL_OP_TLS_D5_BUG                               0x0
+/* Removed from OpenSSL 1.1.0. Was 0x00000200L */
+# define SSL_OP_TLS_BLOCK_PADDING_BUG                    0x0
+/* Removed from OpenSSL 1.1.0. Was 0x00080000L */
+# define SSL_OP_SINGLE_ECDH_USE                          0x0
+/* Removed from OpenSSL 1.1.0. Was 0x00100000L */
+# define SSL_OP_SINGLE_DH_USE                            0x0
+/* Removed from OpenSSL 1.0.1k and 1.0.2. Was 0x00200000L */
+# define SSL_OP_EPHEMERAL_RSA                            0x0
+/* Removed from OpenSSL 1.1.0. Was 0x01000000L */
+# define SSL_OP_NO_SSLv2                                 0x0
+/* Removed from OpenSSL 1.0.1. Was 0x08000000L */
+# define SSL_OP_PKCS1_CHECK_1                            0x0
+/* Removed from OpenSSL 1.0.1. Was 0x10000000L */
+# define SSL_OP_PKCS1_CHECK_2                            0x0
+/* Removed from OpenSSL 1.1.0. Was 0x20000000L */
+# define SSL_OP_NETSCAPE_CA_DN_BUG                       0x0
+/* Removed from OpenSSL 1.1.0. Was 0x40000000L */
+# define SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG          0x0
+
+/*
+ * Allow SSL_write(..., n) to return r with 0 < r < n (i.e. report success
+ * when just a single record has been written):
+ */
+# define SSL_MODE_ENABLE_PARTIAL_WRITE       0x00000001U
+/*
+ * Make it possible to retry SSL_write() with changed buffer location (buffer
+ * contents must stay the same!); this is not the default to avoid the
+ * misconception that non-blocking SSL_write() behaves like non-blocking
+ * write():
+ */
+# define SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER 0x00000002U
+/*
+ * Never bother the application with retries if the transport is blocking:
+ */
+# define SSL_MODE_AUTO_RETRY 0x00000004U
+/* Don't attempt to automatically build certificate chain */
+# define SSL_MODE_NO_AUTO_CHAIN 0x00000008U
+/*
+ * Save RAM by releasing read and write buffers when they're empty. (SSL3 and
+ * TLS only.) Released buffers are freed.
+ */
+# define SSL_MODE_RELEASE_BUFFERS 0x00000010U
+/*
+ * Send the current time in the Random fields of the ClientHello and
+ * ServerHello records for compatibility with hypothetical implementations
+ * that require it.
+ */
+# define SSL_MODE_SEND_CLIENTHELLO_TIME 0x00000020U
+# define SSL_MODE_SEND_SERVERHELLO_TIME 0x00000040U
+/*
+ * Send TLS_FALLBACK_SCSV in the ClientHello. To be set only by applications
+ * that reconnect with a downgraded protocol version; see
+ * draft-ietf-tls-downgrade-scsv-00 for details. DO NOT ENABLE THIS if your
+ * application attempts a normal handshake. Only use this in explicit
+ * fallback retries, following the guidance in
+ * draft-ietf-tls-downgrade-scsv-00.
+ */
+# define SSL_MODE_SEND_FALLBACK_SCSV 0x00000080U
+/*
+ * Support Asynchronous operation
+ */
+# define SSL_MODE_ASYNC 0x00000100U
+
+/*
+ * When using DTLS/SCTP, include the terminating zero in the label
+ * used for computing the endpoint-pair shared secret. Required for
+ * interoperability with implementations having this bug like these
+ * older version of OpenSSL:
+ * - OpenSSL 1.0.0 series
+ * - OpenSSL 1.0.1 series
+ * - OpenSSL 1.0.2 series
+ * - OpenSSL 1.1.0 series
+ * - OpenSSL 1.1.1 and 1.1.1a
+ */
+# define SSL_MODE_DTLS_SCTP_LABEL_LENGTH_BUG 0x00000400U
+
+/* Cert related flags */
+/*
+ * Many implementations ignore some aspects of the TLS standards such as
+ * enforcing certificate chain algorithms. When this is set we enforce them.
+ */
+# define SSL_CERT_FLAG_TLS_STRICT                0x00000001U
+
+/* Suite B modes, takes same values as certificate verify flags */
+# define SSL_CERT_FLAG_SUITEB_128_LOS_ONLY       0x10000
+/* Suite B 192 bit only mode */
+# define SSL_CERT_FLAG_SUITEB_192_LOS            0x20000
+/* Suite B 128 bit mode allowing 192 bit algorithms */
+# define SSL_CERT_FLAG_SUITEB_128_LOS            0x30000
+
+/* Perform all sorts of protocol violations for testing purposes */
+# define SSL_CERT_FLAG_BROKEN_PROTOCOL           0x10000000
+
+/* Flags for building certificate chains */
+/* Treat any existing certificates as untrusted CAs */
+# define SSL_BUILD_CHAIN_FLAG_UNTRUSTED          0x1
+/* Don't include root CA in chain */
+# define SSL_BUILD_CHAIN_FLAG_NO_ROOT            0x2
+/* Just check certificates already there */
+# define SSL_BUILD_CHAIN_FLAG_CHECK              0x4
+/* Ignore verification errors */
+# define SSL_BUILD_CHAIN_FLAG_IGNORE_ERROR       0x8
+/* Clear verification errors from queue */
+# define SSL_BUILD_CHAIN_FLAG_CLEAR_ERROR        0x10
+
+/* Flags returned by SSL_check_chain */
+/* Certificate can be used with this session */
+# define CERT_PKEY_VALID         0x1
+/* Certificate can also be used for signing */
+# define CERT_PKEY_SIGN          0x2
+/* EE certificate signing algorithm OK */
+# define CERT_PKEY_EE_SIGNATURE  0x10
+/* CA signature algorithms OK */
+# define CERT_PKEY_CA_SIGNATURE  0x20
+/* EE certificate parameters OK */
+# define CERT_PKEY_EE_PARAM      0x40
+/* CA certificate parameters OK */
+# define CERT_PKEY_CA_PARAM      0x80
+/* Signing explicitly allowed as opposed to SHA1 fallback */
+# define CERT_PKEY_EXPLICIT_SIGN 0x100
+/* Client CA issuer names match (always set for server cert) */
+# define CERT_PKEY_ISSUER_NAME   0x200
+/* Cert type matches client types (always set for server cert) */
+# define CERT_PKEY_CERT_TYPE     0x400
+/* Cert chain suitable to Suite B */
+# define CERT_PKEY_SUITEB        0x800
+
+# define SSL_CONF_FLAG_CMDLINE           0x1
+# define SSL_CONF_FLAG_FILE              0x2
+# define SSL_CONF_FLAG_CLIENT            0x4
+# define SSL_CONF_FLAG_SERVER            0x8
+# define SSL_CONF_FLAG_SHOW_ERRORS       0x10
+# define SSL_CONF_FLAG_CERTIFICATE       0x20
+# define SSL_CONF_FLAG_REQUIRE_PRIVATE   0x40
+/* Configuration value types */
+# define SSL_CONF_TYPE_UNKNOWN           0x0
+# define SSL_CONF_TYPE_STRING            0x1
+# define SSL_CONF_TYPE_FILE              0x2
+# define SSL_CONF_TYPE_DIR               0x3
+# define SSL_CONF_TYPE_NONE              0x4
+
+/* Maximum length of the application-controlled segment of a a TLSv1.3 cookie */
+# define SSL_COOKIE_LENGTH                       4096
+
+/*
+ * Note: SSL[_CTX]_set_{options,mode} use |= op on the previous value, they
+ * cannot be used to clear bits.
+ */
+
+unsigned long SSL_CTX_get_options(const SSL_CTX *ctx);
+unsigned long SSL_get_options(const SSL *s);
+unsigned long SSL_CTX_clear_options(SSL_CTX *ctx, unsigned long op);
+unsigned long SSL_clear_options(SSL *s, unsigned long op);
+unsigned long SSL_CTX_set_options(SSL_CTX *ctx, unsigned long op);
+unsigned long SSL_set_options(SSL *s, unsigned long op);
+
+# define SSL_CTX_set_mode(ctx,op) \
+        SSL_CTX_ctrl((ctx),SSL_CTRL_MODE,(op),NULL)
+# define SSL_CTX_clear_mode(ctx,op) \
+        SSL_CTX_ctrl((ctx),SSL_CTRL_CLEAR_MODE,(op),NULL)
+# define SSL_CTX_get_mode(ctx) \
+        SSL_CTX_ctrl((ctx),SSL_CTRL_MODE,0,NULL)
+# define SSL_clear_mode(ssl,op) \
+        SSL_ctrl((ssl),SSL_CTRL_CLEAR_MODE,(op),NULL)
+# define SSL_set_mode(ssl,op) \
+        SSL_ctrl((ssl),SSL_CTRL_MODE,(op),NULL)
+# define SSL_get_mode(ssl) \
+        SSL_ctrl((ssl),SSL_CTRL_MODE,0,NULL)
+# define SSL_set_mtu(ssl, mtu) \
+        SSL_ctrl((ssl),SSL_CTRL_SET_MTU,(mtu),NULL)
+# define DTLS_set_link_mtu(ssl, mtu) \
+        SSL_ctrl((ssl),DTLS_CTRL_SET_LINK_MTU,(mtu),NULL)
+# define DTLS_get_link_min_mtu(ssl) \
+        SSL_ctrl((ssl),DTLS_CTRL_GET_LINK_MIN_MTU,0,NULL)
+
+# define SSL_get_secure_renegotiation_support(ssl) \
+        SSL_ctrl((ssl), SSL_CTRL_GET_RI_SUPPORT, 0, NULL)
+
+# ifndef OPENSSL_NO_HEARTBEATS
+#  define SSL_heartbeat(ssl) \
+        SSL_ctrl((ssl),SSL_CTRL_DTLS_EXT_SEND_HEARTBEAT,0,NULL)
+# endif
+
+# define SSL_CTX_set_cert_flags(ctx,op) \
+        SSL_CTX_ctrl((ctx),SSL_CTRL_CERT_FLAGS,(op),NULL)
+# define SSL_set_cert_flags(s,op) \
+        SSL_ctrl((s),SSL_CTRL_CERT_FLAGS,(op),NULL)
+# define SSL_CTX_clear_cert_flags(ctx,op) \
+        SSL_CTX_ctrl((ctx),SSL_CTRL_CLEAR_CERT_FLAGS,(op),NULL)
+# define SSL_clear_cert_flags(s,op) \
+        SSL_ctrl((s),SSL_CTRL_CLEAR_CERT_FLAGS,(op),NULL)
+
+void SSL_CTX_set_msg_callback(SSL_CTX *ctx,
+                              void (*cb) (int write_p, int version,
+                                          int content_type, const void *buf,
+                                          size_t len, SSL *ssl, void *arg));
+void SSL_set_msg_callback(SSL *ssl,
+                          void (*cb) (int write_p, int version,
+                                      int content_type, const void *buf,
+                                      size_t len, SSL *ssl, void *arg));
+# define SSL_CTX_set_msg_callback_arg(ctx, arg) SSL_CTX_ctrl((ctx), SSL_CTRL_SET_MSG_CALLBACK_ARG, 0, (arg))
+# define SSL_set_msg_callback_arg(ssl, arg) SSL_ctrl((ssl), SSL_CTRL_SET_MSG_CALLBACK_ARG, 0, (arg))
+
+# define SSL_get_extms_support(s) \
+        SSL_ctrl((s),SSL_CTRL_GET_EXTMS_SUPPORT,0,NULL)
+
+# ifndef OPENSSL_NO_SRP
+
+/* see tls_srp.c */
+__owur int SSL_SRP_CTX_init(SSL *s);
+__owur int SSL_CTX_SRP_CTX_init(SSL_CTX *ctx);
+int SSL_SRP_CTX_free(SSL *ctx);
+int SSL_CTX_SRP_CTX_free(SSL_CTX *ctx);
+__owur int SSL_srp_server_param_with_username(SSL *s, int *ad);
+__owur int SRP_Calc_A_param(SSL *s);
+
+# endif
+
+/* 100k max cert list */
+# define SSL_MAX_CERT_LIST_DEFAULT 1024*100
+
+# define SSL_SESSION_CACHE_MAX_SIZE_DEFAULT      (1024*20)
+
+/*
+ * This callback type is used inside SSL_CTX, SSL, and in the functions that
+ * set them. It is used to override the generation of SSL/TLS session IDs in
+ * a server. Return value should be zero on an error, non-zero to proceed.
+ * Also, callbacks should themselves check if the id they generate is unique
+ * otherwise the SSL handshake will fail with an error - callbacks can do
+ * this using the 'ssl' value they're passed by;
+ * SSL_has_matching_session_id(ssl, id, *id_len) The length value passed in
+ * is set at the maximum size the session ID can be. In SSLv3/TLSv1 it is 32
+ * bytes. The callback can alter this length to be less if desired. It is
+ * also an error for the callback to set the size to zero.
+ */
+typedef int (*GEN_SESSION_CB) (SSL *ssl, unsigned char *id,
+                               unsigned int *id_len);
+
+# define SSL_SESS_CACHE_OFF                      0x0000
+# define SSL_SESS_CACHE_CLIENT                   0x0001
+# define SSL_SESS_CACHE_SERVER                   0x0002
+# define SSL_SESS_CACHE_BOTH     (SSL_SESS_CACHE_CLIENT|SSL_SESS_CACHE_SERVER)
+# define SSL_SESS_CACHE_NO_AUTO_CLEAR            0x0080
+/* enough comments already ... see SSL_CTX_set_session_cache_mode(3) */
+# define SSL_SESS_CACHE_NO_INTERNAL_LOOKUP       0x0100
+# define SSL_SESS_CACHE_NO_INTERNAL_STORE        0x0200
+# define SSL_SESS_CACHE_NO_INTERNAL \
+        (SSL_SESS_CACHE_NO_INTERNAL_LOOKUP|SSL_SESS_CACHE_NO_INTERNAL_STORE)
+
+LHASH_OF(SSL_SESSION) *SSL_CTX_sessions(SSL_CTX *ctx);
+# define SSL_CTX_sess_number(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SESS_NUMBER,0,NULL)
+# define SSL_CTX_sess_connect(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SESS_CONNECT,0,NULL)
+# define SSL_CTX_sess_connect_good(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SESS_CONNECT_GOOD,0,NULL)
+# define SSL_CTX_sess_connect_renegotiate(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SESS_CONNECT_RENEGOTIATE,0,NULL)
+# define SSL_CTX_sess_accept(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SESS_ACCEPT,0,NULL)
+# define SSL_CTX_sess_accept_renegotiate(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SESS_ACCEPT_RENEGOTIATE,0,NULL)
+# define SSL_CTX_sess_accept_good(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SESS_ACCEPT_GOOD,0,NULL)
+# define SSL_CTX_sess_hits(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SESS_HIT,0,NULL)
+# define SSL_CTX_sess_cb_hits(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SESS_CB_HIT,0,NULL)
+# define SSL_CTX_sess_misses(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SESS_MISSES,0,NULL)
+# define SSL_CTX_sess_timeouts(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SESS_TIMEOUTS,0,NULL)
+# define SSL_CTX_sess_cache_full(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SESS_CACHE_FULL,0,NULL)
+
+void SSL_CTX_sess_set_new_cb(SSL_CTX *ctx,
+                             int (*new_session_cb) (struct ssl_st *ssl,
+                                                    SSL_SESSION *sess));
+int (*SSL_CTX_sess_get_new_cb(SSL_CTX *ctx)) (struct ssl_st *ssl,
+                                              SSL_SESSION *sess);
+void SSL_CTX_sess_set_remove_cb(SSL_CTX *ctx,
+                                void (*remove_session_cb) (struct ssl_ctx_st
+                                                           *ctx,
+                                                           SSL_SESSION *sess));
+void (*SSL_CTX_sess_get_remove_cb(SSL_CTX *ctx)) (struct ssl_ctx_st *ctx,
+                                                  SSL_SESSION *sess);
+void SSL_CTX_sess_set_get_cb(SSL_CTX *ctx,
+                             SSL_SESSION *(*get_session_cb) (struct ssl_st
+                                                             *ssl,
+                                                             const unsigned char
+                                                             *data, int len,
+                                                             int *copy));
+SSL_SESSION *(*SSL_CTX_sess_get_get_cb(SSL_CTX *ctx)) (struct ssl_st *ssl,
+                                                       const unsigned char *data,
+                                                       int len, int *copy);
+void SSL_CTX_set_info_callback(SSL_CTX *ctx,
+                               void (*cb) (const SSL *ssl, int type, int val));
+void (*SSL_CTX_get_info_callback(SSL_CTX *ctx)) (const SSL *ssl, int type,
+                                                 int val);
+void SSL_CTX_set_client_cert_cb(SSL_CTX *ctx,
+                                int (*client_cert_cb) (SSL *ssl, X509 **x509,
+                                                       EVP_PKEY **pkey));
+int (*SSL_CTX_get_client_cert_cb(SSL_CTX *ctx)) (SSL *ssl, X509 **x509,
+                                                 EVP_PKEY **pkey);
+# ifndef OPENSSL_NO_ENGINE
+__owur int SSL_CTX_set_client_cert_engine(SSL_CTX *ctx, ENGINE *e);
+# endif
+void SSL_CTX_set_cookie_generate_cb(SSL_CTX *ctx,
+                                    int (*app_gen_cookie_cb) (SSL *ssl,
+                                                              unsigned char
+                                                              *cookie,
+                                                              unsigned int
+                                                              *cookie_len));
+void SSL_CTX_set_cookie_verify_cb(SSL_CTX *ctx,
+                                  int (*app_verify_cookie_cb) (SSL *ssl,
+                                                               const unsigned
+                                                               char *cookie,
+                                                               unsigned int
+                                                               cookie_len));
+
+void SSL_CTX_set_stateless_cookie_generate_cb(
+    SSL_CTX *ctx,
+    int (*gen_stateless_cookie_cb) (SSL *ssl,
+                                    unsigned char *cookie,
+                                    size_t *cookie_len));
+void SSL_CTX_set_stateless_cookie_verify_cb(
+    SSL_CTX *ctx,
+    int (*verify_stateless_cookie_cb) (SSL *ssl,
+                                       const unsigned char *cookie,
+                                       size_t cookie_len));
+# ifndef OPENSSL_NO_NEXTPROTONEG
+
+typedef int (*SSL_CTX_npn_advertised_cb_func)(SSL *ssl,
+                                              const unsigned char **out,
+                                              unsigned int *outlen,
+                                              void *arg);
+void SSL_CTX_set_next_protos_advertised_cb(SSL_CTX *s,
+                                           SSL_CTX_npn_advertised_cb_func cb,
+                                           void *arg);
+#  define SSL_CTX_set_npn_advertised_cb SSL_CTX_set_next_protos_advertised_cb
+
+typedef int (*SSL_CTX_npn_select_cb_func)(SSL *s,
+                                          unsigned char **out,
+                                          unsigned char *outlen,
+                                          const unsigned char *in,
+                                          unsigned int inlen,
+                                          void *arg);
+void SSL_CTX_set_next_proto_select_cb(SSL_CTX *s,
+                                      SSL_CTX_npn_select_cb_func cb,
+                                      void *arg);
+#  define SSL_CTX_set_npn_select_cb SSL_CTX_set_next_proto_select_cb
+
+void SSL_get0_next_proto_negotiated(const SSL *s, const unsigned char **data,
+                                    unsigned *len);
+#  define SSL_get0_npn_negotiated SSL_get0_next_proto_negotiated
+# endif
+
+__owur int SSL_select_next_proto(unsigned char **out, unsigned char *outlen,
+                                 const unsigned char *in, unsigned int inlen,
+                                 const unsigned char *client,
+                                 unsigned int client_len);
+
+# define OPENSSL_NPN_UNSUPPORTED 0
+# define OPENSSL_NPN_NEGOTIATED  1
+# define OPENSSL_NPN_NO_OVERLAP  2
+
+__owur int SSL_CTX_set_alpn_protos(SSL_CTX *ctx, const unsigned char *protos,
+                                   unsigned int protos_len);
+__owur int SSL_set_alpn_protos(SSL *ssl, const unsigned char *protos,
+                               unsigned int protos_len);
+typedef int (*SSL_CTX_alpn_select_cb_func)(SSL *ssl,
+                                           const unsigned char **out,
+                                           unsigned char *outlen,
+                                           const unsigned char *in,
+                                           unsigned int inlen,
+                                           void *arg);
+void SSL_CTX_set_alpn_select_cb(SSL_CTX *ctx,
+                                SSL_CTX_alpn_select_cb_func cb,
+                                void *arg);
+void SSL_get0_alpn_selected(const SSL *ssl, const unsigned char **data,
+                            unsigned int *len);
+
+# ifndef OPENSSL_NO_PSK
+/*
+ * the maximum length of the buffer given to callbacks containing the
+ * resulting identity/psk
+ */
+#  define PSK_MAX_IDENTITY_LEN 128
+#  define PSK_MAX_PSK_LEN 256
+typedef unsigned int (*SSL_psk_client_cb_func)(SSL *ssl,
+                                               const char *hint,
+                                               char *identity,
+                                               unsigned int max_identity_len,
+                                               unsigned char *psk,
+                                               unsigned int max_psk_len);
+void SSL_CTX_set_psk_client_callback(SSL_CTX *ctx, SSL_psk_client_cb_func cb);
+void SSL_set_psk_client_callback(SSL *ssl, SSL_psk_client_cb_func cb);
+
+typedef unsigned int (*SSL_psk_server_cb_func)(SSL *ssl,
+                                               const char *identity,
+                                               unsigned char *psk,
+                                               unsigned int max_psk_len);
+void SSL_CTX_set_psk_server_callback(SSL_CTX *ctx, SSL_psk_server_cb_func cb);
+void SSL_set_psk_server_callback(SSL *ssl, SSL_psk_server_cb_func cb);
+
+__owur int SSL_CTX_use_psk_identity_hint(SSL_CTX *ctx, const char *identity_hint);
+__owur int SSL_use_psk_identity_hint(SSL *s, const char *identity_hint);
+const char *SSL_get_psk_identity_hint(const SSL *s);
+const char *SSL_get_psk_identity(const SSL *s);
+# endif
+
+typedef int (*SSL_psk_find_session_cb_func)(SSL *ssl,
+                                            const unsigned char *identity,
+                                            size_t identity_len,
+                                            SSL_SESSION **sess);
+typedef int (*SSL_psk_use_session_cb_func)(SSL *ssl, const EVP_MD *md,
+                                           const unsigned char **id,
+                                           size_t *idlen,
+                                           SSL_SESSION **sess);
+
+void SSL_set_psk_find_session_callback(SSL *s, SSL_psk_find_session_cb_func cb);
+void SSL_CTX_set_psk_find_session_callback(SSL_CTX *ctx,
+                                           SSL_psk_find_session_cb_func cb);
+void SSL_set_psk_use_session_callback(SSL *s, SSL_psk_use_session_cb_func cb);
+void SSL_CTX_set_psk_use_session_callback(SSL_CTX *ctx,
+                                          SSL_psk_use_session_cb_func cb);
+
+/* Register callbacks to handle custom TLS Extensions for client or server. */
+
+__owur int SSL_CTX_has_client_custom_ext(const SSL_CTX *ctx,
+                                         unsigned int ext_type);
+
+__owur int SSL_CTX_add_client_custom_ext(SSL_CTX *ctx,
+                                         unsigned int ext_type,
+                                         custom_ext_add_cb add_cb,
+                                         custom_ext_free_cb free_cb,
+                                         void *add_arg,
+                                         custom_ext_parse_cb parse_cb,
+                                         void *parse_arg);
+
+__owur int SSL_CTX_add_server_custom_ext(SSL_CTX *ctx,
+                                         unsigned int ext_type,
+                                         custom_ext_add_cb add_cb,
+                                         custom_ext_free_cb free_cb,
+                                         void *add_arg,
+                                         custom_ext_parse_cb parse_cb,
+                                         void *parse_arg);
+
+__owur int SSL_CTX_add_custom_ext(SSL_CTX *ctx, unsigned int ext_type,
+                                  unsigned int context,
+                                  SSL_custom_ext_add_cb_ex add_cb,
+                                  SSL_custom_ext_free_cb_ex free_cb,
+                                  void *add_arg,
+                                  SSL_custom_ext_parse_cb_ex parse_cb,
+                                  void *parse_arg);
+
+__owur int SSL_extension_supported(unsigned int ext_type);
+
+# define SSL_NOTHING            1
+# define SSL_WRITING            2
+# define SSL_READING            3
+# define SSL_X509_LOOKUP        4
+# define SSL_ASYNC_PAUSED       5
+# define SSL_ASYNC_NO_JOBS      6
+# define SSL_CLIENT_HELLO_CB    7
+
+/* These will only be used when doing non-blocking IO */
+# define SSL_want_nothing(s)         (SSL_want(s) == SSL_NOTHING)
+# define SSL_want_read(s)            (SSL_want(s) == SSL_READING)
+# define SSL_want_write(s)           (SSL_want(s) == SSL_WRITING)
+# define SSL_want_x509_lookup(s)     (SSL_want(s) == SSL_X509_LOOKUP)
+# define SSL_want_async(s)           (SSL_want(s) == SSL_ASYNC_PAUSED)
+# define SSL_want_async_job(s)       (SSL_want(s) == SSL_ASYNC_NO_JOBS)
+# define SSL_want_client_hello_cb(s) (SSL_want(s) == SSL_CLIENT_HELLO_CB)
+
+# define SSL_MAC_FLAG_READ_MAC_STREAM 1
+# define SSL_MAC_FLAG_WRITE_MAC_STREAM 2
+
+/*
+ * A callback for logging out TLS key material. This callback should log out
+ * |line| followed by a newline.
+ */
+typedef void (*SSL_CTX_keylog_cb_func)(const SSL *ssl, const char *line);
+
+/*
+ * SSL_CTX_set_keylog_callback configures a callback to log key material. This
+ * is intended for debugging use with tools like Wireshark. The cb function
+ * should log line followed by a newline.
+ */
+void SSL_CTX_set_keylog_callback(SSL_CTX *ctx, SSL_CTX_keylog_cb_func cb);
+
+/*
+ * SSL_CTX_get_keylog_callback returns the callback configured by
+ * SSL_CTX_set_keylog_callback.
+ */
+SSL_CTX_keylog_cb_func SSL_CTX_get_keylog_callback(const SSL_CTX *ctx);
+
+int SSL_CTX_set_max_early_data(SSL_CTX *ctx, uint32_t max_early_data);
+uint32_t SSL_CTX_get_max_early_data(const SSL_CTX *ctx);
+int SSL_set_max_early_data(SSL *s, uint32_t max_early_data);
+uint32_t SSL_get_max_early_data(const SSL *s);
+int SSL_CTX_set_recv_max_early_data(SSL_CTX *ctx, uint32_t recv_max_early_data);
+uint32_t SSL_CTX_get_recv_max_early_data(const SSL_CTX *ctx);
+int SSL_set_recv_max_early_data(SSL *s, uint32_t recv_max_early_data);
+uint32_t SSL_get_recv_max_early_data(const SSL *s);
+
+#ifdef __cplusplus
+}
+#endif
+
+# include <openssl/ssl2.h>
+# include <openssl/ssl3.h>
+# include <openssl/tls1.h>      /* This is mostly sslv3 with a few tweaks */
+# include <openssl/dtls1.h>     /* Datagram TLS */
+# include <openssl/srtp.h>      /* Support for the use_srtp extension */
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+/*
+ * These need to be after the above set of includes due to a compiler bug
+ * in VisualStudio 2015
+ */
+DEFINE_STACK_OF_CONST(SSL_CIPHER)
+DEFINE_STACK_OF(SSL_COMP)
+
+/* compatibility */
+# define SSL_set_app_data(s,arg)         (SSL_set_ex_data(s,0,(char *)(arg)))
+# define SSL_get_app_data(s)             (SSL_get_ex_data(s,0))
+# define SSL_SESSION_set_app_data(s,a)   (SSL_SESSION_set_ex_data(s,0, \
+                                                                  (char *)(a)))
+# define SSL_SESSION_get_app_data(s)     (SSL_SESSION_get_ex_data(s,0))
+# define SSL_CTX_get_app_data(ctx)       (SSL_CTX_get_ex_data(ctx,0))
+# define SSL_CTX_set_app_data(ctx,arg)   (SSL_CTX_set_ex_data(ctx,0, \
+                                                              (char *)(arg)))
+DEPRECATEDIN_1_1_0(void SSL_set_debug(SSL *s, int debug))
+
+/* TLSv1.3 KeyUpdate message types */
+/* -1 used so that this is an invalid value for the on-the-wire protocol */
+#define SSL_KEY_UPDATE_NONE             -1
+/* Values as defined for the on-the-wire protocol */
+#define SSL_KEY_UPDATE_NOT_REQUESTED     0
+#define SSL_KEY_UPDATE_REQUESTED         1
+
+/*
+ * The valid handshake states (one for each type message sent and one for each
+ * type of message received). There are also two "special" states:
+ * TLS = TLS or DTLS state
+ * DTLS = DTLS specific state
+ * CR/SR = Client Read/Server Read
+ * CW/SW = Client Write/Server Write
+ *
+ * The "special" states are:
+ * TLS_ST_BEFORE = No handshake has been initiated yet
+ * TLS_ST_OK = A handshake has been successfully completed
+ */
+typedef enum {
+    TLS_ST_BEFORE,
+    TLS_ST_OK,
+    DTLS_ST_CR_HELLO_VERIFY_REQUEST,
+    TLS_ST_CR_SRVR_HELLO,
+    TLS_ST_CR_CERT,
+    TLS_ST_CR_CERT_STATUS,
+    TLS_ST_CR_KEY_EXCH,
+    TLS_ST_CR_CERT_REQ,
+    TLS_ST_CR_SRVR_DONE,
+    TLS_ST_CR_SESSION_TICKET,
+    TLS_ST_CR_CHANGE,
+    TLS_ST_CR_FINISHED,
+    TLS_ST_CW_CLNT_HELLO,
+    TLS_ST_CW_CERT,
+    TLS_ST_CW_KEY_EXCH,
+    TLS_ST_CW_CERT_VRFY,
+    TLS_ST_CW_CHANGE,
+    TLS_ST_CW_NEXT_PROTO,
+    TLS_ST_CW_FINISHED,
+    TLS_ST_SW_HELLO_REQ,
+    TLS_ST_SR_CLNT_HELLO,
+    DTLS_ST_SW_HELLO_VERIFY_REQUEST,
+    TLS_ST_SW_SRVR_HELLO,
+    TLS_ST_SW_CERT,
+    TLS_ST_SW_KEY_EXCH,
+    TLS_ST_SW_CERT_REQ,
+    TLS_ST_SW_SRVR_DONE,
+    TLS_ST_SR_CERT,
+    TLS_ST_SR_KEY_EXCH,
+    TLS_ST_SR_CERT_VRFY,
+    TLS_ST_SR_NEXT_PROTO,
+    TLS_ST_SR_CHANGE,
+    TLS_ST_SR_FINISHED,
+    TLS_ST_SW_SESSION_TICKET,
+    TLS_ST_SW_CERT_STATUS,
+    TLS_ST_SW_CHANGE,
+    TLS_ST_SW_FINISHED,
+    TLS_ST_SW_ENCRYPTED_EXTENSIONS,
+    TLS_ST_CR_ENCRYPTED_EXTENSIONS,
+    TLS_ST_CR_CERT_VRFY,
+    TLS_ST_SW_CERT_VRFY,
+    TLS_ST_CR_HELLO_REQ,
+    TLS_ST_SW_KEY_UPDATE,
+    TLS_ST_CW_KEY_UPDATE,
+    TLS_ST_SR_KEY_UPDATE,
+    TLS_ST_CR_KEY_UPDATE,
+    TLS_ST_EARLY_DATA,
+    TLS_ST_PENDING_EARLY_DATA_END,
+    TLS_ST_CW_END_OF_EARLY_DATA,
+    TLS_ST_SR_END_OF_EARLY_DATA
+} OSSL_HANDSHAKE_STATE;
+
+/*
+ * Most of the following state values are no longer used and are defined to be
+ * the closest equivalent value in the current state machine code. Not all
+ * defines have an equivalent and are set to a dummy value (-1). SSL_ST_CONNECT
+ * and SSL_ST_ACCEPT are still in use in the definition of SSL_CB_ACCEPT_LOOP,
+ * SSL_CB_ACCEPT_EXIT, SSL_CB_CONNECT_LOOP and SSL_CB_CONNECT_EXIT.
+ */
+
+# define SSL_ST_CONNECT                  0x1000
+# define SSL_ST_ACCEPT                   0x2000
+
+# define SSL_ST_MASK                     0x0FFF
+
+# define SSL_CB_LOOP                     0x01
+# define SSL_CB_EXIT                     0x02
+# define SSL_CB_READ                     0x04
+# define SSL_CB_WRITE                    0x08
+# define SSL_CB_ALERT                    0x4000/* used in callback */
+# define SSL_CB_READ_ALERT               (SSL_CB_ALERT|SSL_CB_READ)
+# define SSL_CB_WRITE_ALERT              (SSL_CB_ALERT|SSL_CB_WRITE)
+# define SSL_CB_ACCEPT_LOOP              (SSL_ST_ACCEPT|SSL_CB_LOOP)
+# define SSL_CB_ACCEPT_EXIT              (SSL_ST_ACCEPT|SSL_CB_EXIT)
+# define SSL_CB_CONNECT_LOOP             (SSL_ST_CONNECT|SSL_CB_LOOP)
+# define SSL_CB_CONNECT_EXIT             (SSL_ST_CONNECT|SSL_CB_EXIT)
+# define SSL_CB_HANDSHAKE_START          0x10
+# define SSL_CB_HANDSHAKE_DONE           0x20
+
+/* Is the SSL_connection established? */
+# define SSL_in_connect_init(a)          (SSL_in_init(a) && !SSL_is_server(a))
+# define SSL_in_accept_init(a)           (SSL_in_init(a) && SSL_is_server(a))
+int SSL_in_init(const SSL *s);
+int SSL_in_before(const SSL *s);
+int SSL_is_init_finished(const SSL *s);
+
+/*
+ * The following 3 states are kept in ssl->rlayer.rstate when reads fail, you
+ * should not need these
+ */
+# define SSL_ST_READ_HEADER                      0xF0
+# define SSL_ST_READ_BODY                        0xF1
+# define SSL_ST_READ_DONE                        0xF2
+
+/*-
+ * Obtain latest Finished message
+ *   -- that we sent (SSL_get_finished)
+ *   -- that we expected from peer (SSL_get_peer_finished).
+ * Returns length (0 == no Finished so far), copies up to 'count' bytes.
+ */
+size_t SSL_get_finished(const SSL *s, void *buf, size_t count);
+size_t SSL_get_peer_finished(const SSL *s, void *buf, size_t count);
+
+/*
+ * use either SSL_VERIFY_NONE or SSL_VERIFY_PEER, the last 3 options are
+ * 'ored' with SSL_VERIFY_PEER if they are desired
+ */
+# define SSL_VERIFY_NONE                 0x00
+# define SSL_VERIFY_PEER                 0x01
+# define SSL_VERIFY_FAIL_IF_NO_PEER_CERT 0x02
+# define SSL_VERIFY_CLIENT_ONCE          0x04
+# define SSL_VERIFY_POST_HANDSHAKE       0x08
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define OpenSSL_add_ssl_algorithms()   SSL_library_init()
+#  define SSLeay_add_ssl_algorithms()    SSL_library_init()
+# endif
+
+/* More backward compatibility */
+# define SSL_get_cipher(s) \
+                SSL_CIPHER_get_name(SSL_get_current_cipher(s))
+# define SSL_get_cipher_bits(s,np) \
+                SSL_CIPHER_get_bits(SSL_get_current_cipher(s),np)
+# define SSL_get_cipher_version(s) \
+                SSL_CIPHER_get_version(SSL_get_current_cipher(s))
+# define SSL_get_cipher_name(s) \
+                SSL_CIPHER_get_name(SSL_get_current_cipher(s))
+# define SSL_get_time(a)         SSL_SESSION_get_time(a)
+# define SSL_set_time(a,b)       SSL_SESSION_set_time((a),(b))
+# define SSL_get_timeout(a)      SSL_SESSION_get_timeout(a)
+# define SSL_set_timeout(a,b)    SSL_SESSION_set_timeout((a),(b))
+
+# define d2i_SSL_SESSION_bio(bp,s_id) ASN1_d2i_bio_of(SSL_SESSION,SSL_SESSION_new,d2i_SSL_SESSION,bp,s_id)
+# define i2d_SSL_SESSION_bio(bp,s_id) ASN1_i2d_bio_of(SSL_SESSION,i2d_SSL_SESSION,bp,s_id)
+
+DECLARE_PEM_rw(SSL_SESSION, SSL_SESSION)
+# define SSL_AD_REASON_OFFSET            1000/* offset to get SSL_R_... value
+                                              * from SSL_AD_... */
+/* These alert types are for SSLv3 and TLSv1 */
+# define SSL_AD_CLOSE_NOTIFY             SSL3_AD_CLOSE_NOTIFY
+/* fatal */
+# define SSL_AD_UNEXPECTED_MESSAGE       SSL3_AD_UNEXPECTED_MESSAGE
+/* fatal */
+# define SSL_AD_BAD_RECORD_MAC           SSL3_AD_BAD_RECORD_MAC
+# define SSL_AD_DECRYPTION_FAILED        TLS1_AD_DECRYPTION_FAILED
+# define SSL_AD_RECORD_OVERFLOW          TLS1_AD_RECORD_OVERFLOW
+/* fatal */
+# define SSL_AD_DECOMPRESSION_FAILURE    SSL3_AD_DECOMPRESSION_FAILURE
+/* fatal */
+# define SSL_AD_HANDSHAKE_FAILURE        SSL3_AD_HANDSHAKE_FAILURE
+/* Not for TLS */
+# define SSL_AD_NO_CERTIFICATE           SSL3_AD_NO_CERTIFICATE
+# define SSL_AD_BAD_CERTIFICATE          SSL3_AD_BAD_CERTIFICATE
+# define SSL_AD_UNSUPPORTED_CERTIFICATE  SSL3_AD_UNSUPPORTED_CERTIFICATE
+# define SSL_AD_CERTIFICATE_REVOKED      SSL3_AD_CERTIFICATE_REVOKED
+# define SSL_AD_CERTIFICATE_EXPIRED      SSL3_AD_CERTIFICATE_EXPIRED
+# define SSL_AD_CERTIFICATE_UNKNOWN      SSL3_AD_CERTIFICATE_UNKNOWN
+/* fatal */
+# define SSL_AD_ILLEGAL_PARAMETER        SSL3_AD_ILLEGAL_PARAMETER
+/* fatal */
+# define SSL_AD_UNKNOWN_CA               TLS1_AD_UNKNOWN_CA
+/* fatal */
+# define SSL_AD_ACCESS_DENIED            TLS1_AD_ACCESS_DENIED
+/* fatal */
+# define SSL_AD_DECODE_ERROR             TLS1_AD_DECODE_ERROR
+# define SSL_AD_DECRYPT_ERROR            TLS1_AD_DECRYPT_ERROR
+/* fatal */
+# define SSL_AD_EXPORT_RESTRICTION       TLS1_AD_EXPORT_RESTRICTION
+/* fatal */
+# define SSL_AD_PROTOCOL_VERSION         TLS1_AD_PROTOCOL_VERSION
+/* fatal */
+# define SSL_AD_INSUFFICIENT_SECURITY    TLS1_AD_INSUFFICIENT_SECURITY
+/* fatal */
+# define SSL_AD_INTERNAL_ERROR           TLS1_AD_INTERNAL_ERROR
+# define SSL_AD_USER_CANCELLED           TLS1_AD_USER_CANCELLED
+# define SSL_AD_NO_RENEGOTIATION         TLS1_AD_NO_RENEGOTIATION
+# define SSL_AD_MISSING_EXTENSION        TLS13_AD_MISSING_EXTENSION
+# define SSL_AD_CERTIFICATE_REQUIRED     TLS13_AD_CERTIFICATE_REQUIRED
+# define SSL_AD_UNSUPPORTED_EXTENSION    TLS1_AD_UNSUPPORTED_EXTENSION
+# define SSL_AD_CERTIFICATE_UNOBTAINABLE TLS1_AD_CERTIFICATE_UNOBTAINABLE
+# define SSL_AD_UNRECOGNIZED_NAME        TLS1_AD_UNRECOGNIZED_NAME
+# define SSL_AD_BAD_CERTIFICATE_STATUS_RESPONSE TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE
+# define SSL_AD_BAD_CERTIFICATE_HASH_VALUE TLS1_AD_BAD_CERTIFICATE_HASH_VALUE
+/* fatal */
+# define SSL_AD_UNKNOWN_PSK_IDENTITY     TLS1_AD_UNKNOWN_PSK_IDENTITY
+/* fatal */
+# define SSL_AD_INAPPROPRIATE_FALLBACK   TLS1_AD_INAPPROPRIATE_FALLBACK
+# define SSL_AD_NO_APPLICATION_PROTOCOL  TLS1_AD_NO_APPLICATION_PROTOCOL
+# define SSL_ERROR_NONE                  0
+# define SSL_ERROR_SSL                   1
+# define SSL_ERROR_WANT_READ             2
+# define SSL_ERROR_WANT_WRITE            3
+# define SSL_ERROR_WANT_X509_LOOKUP      4
+# define SSL_ERROR_SYSCALL               5/* look at error stack/return
+                                           * value/errno */
+# define SSL_ERROR_ZERO_RETURN           6
+# define SSL_ERROR_WANT_CONNECT          7
+# define SSL_ERROR_WANT_ACCEPT           8
+# define SSL_ERROR_WANT_ASYNC            9
+# define SSL_ERROR_WANT_ASYNC_JOB       10
+# define SSL_ERROR_WANT_CLIENT_HELLO_CB 11
+# define SSL_CTRL_SET_TMP_DH                     3
+# define SSL_CTRL_SET_TMP_ECDH                   4
+# define SSL_CTRL_SET_TMP_DH_CB                  6
+# define SSL_CTRL_GET_CLIENT_CERT_REQUEST        9
+# define SSL_CTRL_GET_NUM_RENEGOTIATIONS         10
+# define SSL_CTRL_CLEAR_NUM_RENEGOTIATIONS       11
+# define SSL_CTRL_GET_TOTAL_RENEGOTIATIONS       12
+# define SSL_CTRL_GET_FLAGS                      13
+# define SSL_CTRL_EXTRA_CHAIN_CERT               14
+# define SSL_CTRL_SET_MSG_CALLBACK               15
+# define SSL_CTRL_SET_MSG_CALLBACK_ARG           16
+/* only applies to datagram connections */
+# define SSL_CTRL_SET_MTU                17
+/* Stats */
+# define SSL_CTRL_SESS_NUMBER                    20
+# define SSL_CTRL_SESS_CONNECT                   21
+# define SSL_CTRL_SESS_CONNECT_GOOD              22
+# define SSL_CTRL_SESS_CONNECT_RENEGOTIATE       23
+# define SSL_CTRL_SESS_ACCEPT                    24
+# define SSL_CTRL_SESS_ACCEPT_GOOD               25
+# define SSL_CTRL_SESS_ACCEPT_RENEGOTIATE        26
+# define SSL_CTRL_SESS_HIT                       27
+# define SSL_CTRL_SESS_CB_HIT                    28
+# define SSL_CTRL_SESS_MISSES                    29
+# define SSL_CTRL_SESS_TIMEOUTS                  30
+# define SSL_CTRL_SESS_CACHE_FULL                31
+# define SSL_CTRL_MODE                           33
+# define SSL_CTRL_GET_READ_AHEAD                 40
+# define SSL_CTRL_SET_READ_AHEAD                 41
+# define SSL_CTRL_SET_SESS_CACHE_SIZE            42
+# define SSL_CTRL_GET_SESS_CACHE_SIZE            43
+# define SSL_CTRL_SET_SESS_CACHE_MODE            44
+# define SSL_CTRL_GET_SESS_CACHE_MODE            45
+# define SSL_CTRL_GET_MAX_CERT_LIST              50
+# define SSL_CTRL_SET_MAX_CERT_LIST              51
+# define SSL_CTRL_SET_MAX_SEND_FRAGMENT          52
+/* see tls1.h for macros based on these */
+# define SSL_CTRL_SET_TLSEXT_SERVERNAME_CB       53
+# define SSL_CTRL_SET_TLSEXT_SERVERNAME_ARG      54
+# define SSL_CTRL_SET_TLSEXT_HOSTNAME            55
+# define SSL_CTRL_SET_TLSEXT_DEBUG_CB            56
+# define SSL_CTRL_SET_TLSEXT_DEBUG_ARG           57
+# define SSL_CTRL_GET_TLSEXT_TICKET_KEYS         58
+# define SSL_CTRL_SET_TLSEXT_TICKET_KEYS         59
+/*# define SSL_CTRL_SET_TLSEXT_OPAQUE_PRF_INPUT    60 */
+/*# define SSL_CTRL_SET_TLSEXT_OPAQUE_PRF_INPUT_CB 61 */
+/*# define SSL_CTRL_SET_TLSEXT_OPAQUE_PRF_INPUT_CB_ARG 62 */
+# define SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB       63
+# define SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB_ARG   64
+# define SSL_CTRL_SET_TLSEXT_STATUS_REQ_TYPE     65
+# define SSL_CTRL_GET_TLSEXT_STATUS_REQ_EXTS     66
+# define SSL_CTRL_SET_TLSEXT_STATUS_REQ_EXTS     67
+# define SSL_CTRL_GET_TLSEXT_STATUS_REQ_IDS      68
+# define SSL_CTRL_SET_TLSEXT_STATUS_REQ_IDS      69
+# define SSL_CTRL_GET_TLSEXT_STATUS_REQ_OCSP_RESP        70
+# define SSL_CTRL_SET_TLSEXT_STATUS_REQ_OCSP_RESP        71
+# define SSL_CTRL_SET_TLSEXT_TICKET_KEY_CB       72
+# define SSL_CTRL_SET_TLS_EXT_SRP_USERNAME_CB    75
+# define SSL_CTRL_SET_SRP_VERIFY_PARAM_CB                76
+# define SSL_CTRL_SET_SRP_GIVE_CLIENT_PWD_CB             77
+# define SSL_CTRL_SET_SRP_ARG            78
+# define SSL_CTRL_SET_TLS_EXT_SRP_USERNAME               79
+# define SSL_CTRL_SET_TLS_EXT_SRP_STRENGTH               80
+# define SSL_CTRL_SET_TLS_EXT_SRP_PASSWORD               81
+# ifndef OPENSSL_NO_HEARTBEATS
+#  define SSL_CTRL_DTLS_EXT_SEND_HEARTBEAT               85
+#  define SSL_CTRL_GET_DTLS_EXT_HEARTBEAT_PENDING        86
+#  define SSL_CTRL_SET_DTLS_EXT_HEARTBEAT_NO_REQUESTS    87
+# endif
+# define DTLS_CTRL_GET_TIMEOUT           73
+# define DTLS_CTRL_HANDLE_TIMEOUT        74
+# define SSL_CTRL_GET_RI_SUPPORT                 76
+# define SSL_CTRL_CLEAR_MODE                     78
+# define SSL_CTRL_SET_NOT_RESUMABLE_SESS_CB      79
+# define SSL_CTRL_GET_EXTRA_CHAIN_CERTS          82
+# define SSL_CTRL_CLEAR_EXTRA_CHAIN_CERTS        83
+# define SSL_CTRL_CHAIN                          88
+# define SSL_CTRL_CHAIN_CERT                     89
+# define SSL_CTRL_GET_GROUPS                     90
+# define SSL_CTRL_SET_GROUPS                     91
+# define SSL_CTRL_SET_GROUPS_LIST                92
+# define SSL_CTRL_GET_SHARED_GROUP               93
+# define SSL_CTRL_SET_SIGALGS                    97
+# define SSL_CTRL_SET_SIGALGS_LIST               98
+# define SSL_CTRL_CERT_FLAGS                     99
+# define SSL_CTRL_CLEAR_CERT_FLAGS               100
+# define SSL_CTRL_SET_CLIENT_SIGALGS             101
+# define SSL_CTRL_SET_CLIENT_SIGALGS_LIST        102
+# define SSL_CTRL_GET_CLIENT_CERT_TYPES          103
+# define SSL_CTRL_SET_CLIENT_CERT_TYPES          104
+# define SSL_CTRL_BUILD_CERT_CHAIN               105
+# define SSL_CTRL_SET_VERIFY_CERT_STORE          106
+# define SSL_CTRL_SET_CHAIN_CERT_STORE           107
+# define SSL_CTRL_GET_PEER_SIGNATURE_NID         108
+# define SSL_CTRL_GET_PEER_TMP_KEY               109
+# define SSL_CTRL_GET_RAW_CIPHERLIST             110
+# define SSL_CTRL_GET_EC_POINT_FORMATS           111
+# define SSL_CTRL_GET_CHAIN_CERTS                115
+# define SSL_CTRL_SELECT_CURRENT_CERT            116
+# define SSL_CTRL_SET_CURRENT_CERT               117
+# define SSL_CTRL_SET_DH_AUTO                    118
+# define DTLS_CTRL_SET_LINK_MTU                  120
+# define DTLS_CTRL_GET_LINK_MIN_MTU              121
+# define SSL_CTRL_GET_EXTMS_SUPPORT              122
+# define SSL_CTRL_SET_MIN_PROTO_VERSION          123
+# define SSL_CTRL_SET_MAX_PROTO_VERSION          124
+# define SSL_CTRL_SET_SPLIT_SEND_FRAGMENT        125
+# define SSL_CTRL_SET_MAX_PIPELINES              126
+# define SSL_CTRL_GET_TLSEXT_STATUS_REQ_TYPE     127
+# define SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB       128
+# define SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB_ARG   129
+# define SSL_CTRL_GET_MIN_PROTO_VERSION          130
+# define SSL_CTRL_GET_MAX_PROTO_VERSION          131
+# define SSL_CTRL_GET_SIGNATURE_NID              132
+# define SSL_CTRL_GET_TMP_KEY                    133
+# define SSL_CERT_SET_FIRST                      1
+# define SSL_CERT_SET_NEXT                       2
+# define SSL_CERT_SET_SERVER                     3
+# define DTLSv1_get_timeout(ssl, arg) \
+        SSL_ctrl(ssl,DTLS_CTRL_GET_TIMEOUT,0, (void *)(arg))
+# define DTLSv1_handle_timeout(ssl) \
+        SSL_ctrl(ssl,DTLS_CTRL_HANDLE_TIMEOUT,0, NULL)
+# define SSL_num_renegotiations(ssl) \
+        SSL_ctrl((ssl),SSL_CTRL_GET_NUM_RENEGOTIATIONS,0,NULL)
+# define SSL_clear_num_renegotiations(ssl) \
+        SSL_ctrl((ssl),SSL_CTRL_CLEAR_NUM_RENEGOTIATIONS,0,NULL)
+# define SSL_total_renegotiations(ssl) \
+        SSL_ctrl((ssl),SSL_CTRL_GET_TOTAL_RENEGOTIATIONS,0,NULL)
+# define SSL_CTX_set_tmp_dh(ctx,dh) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_TMP_DH,0,(char *)(dh))
+# define SSL_CTX_set_tmp_ecdh(ctx,ecdh) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_TMP_ECDH,0,(char *)(ecdh))
+# define SSL_CTX_set_dh_auto(ctx, onoff) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_DH_AUTO,onoff,NULL)
+# define SSL_set_dh_auto(s, onoff) \
+        SSL_ctrl(s,SSL_CTRL_SET_DH_AUTO,onoff,NULL)
+# define SSL_set_tmp_dh(ssl,dh) \
+        SSL_ctrl(ssl,SSL_CTRL_SET_TMP_DH,0,(char *)(dh))
+# define SSL_set_tmp_ecdh(ssl,ecdh) \
+        SSL_ctrl(ssl,SSL_CTRL_SET_TMP_ECDH,0,(char *)(ecdh))
+# define SSL_CTX_add_extra_chain_cert(ctx,x509) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_EXTRA_CHAIN_CERT,0,(char *)(x509))
+# define SSL_CTX_get_extra_chain_certs(ctx,px509) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_GET_EXTRA_CHAIN_CERTS,0,px509)
+# define SSL_CTX_get_extra_chain_certs_only(ctx,px509) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_GET_EXTRA_CHAIN_CERTS,1,px509)
+# define SSL_CTX_clear_extra_chain_certs(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_CLEAR_EXTRA_CHAIN_CERTS,0,NULL)
+# define SSL_CTX_set0_chain(ctx,sk) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_CHAIN,0,(char *)(sk))
+# define SSL_CTX_set1_chain(ctx,sk) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_CHAIN,1,(char *)(sk))
+# define SSL_CTX_add0_chain_cert(ctx,x509) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_CHAIN_CERT,0,(char *)(x509))
+# define SSL_CTX_add1_chain_cert(ctx,x509) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_CHAIN_CERT,1,(char *)(x509))
+# define SSL_CTX_get0_chain_certs(ctx,px509) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_GET_CHAIN_CERTS,0,px509)
+# define SSL_CTX_clear_chain_certs(ctx) \
+        SSL_CTX_set0_chain(ctx,NULL)
+# define SSL_CTX_build_cert_chain(ctx, flags) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_BUILD_CERT_CHAIN, flags, NULL)
+# define SSL_CTX_select_current_cert(ctx,x509) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SELECT_CURRENT_CERT,0,(char *)(x509))
+# define SSL_CTX_set_current_cert(ctx, op) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_CURRENT_CERT, op, NULL)
+# define SSL_CTX_set0_verify_cert_store(ctx,st) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_VERIFY_CERT_STORE,0,(char *)(st))
+# define SSL_CTX_set1_verify_cert_store(ctx,st) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_VERIFY_CERT_STORE,1,(char *)(st))
+# define SSL_CTX_set0_chain_cert_store(ctx,st) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_CHAIN_CERT_STORE,0,(char *)(st))
+# define SSL_CTX_set1_chain_cert_store(ctx,st) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_CHAIN_CERT_STORE,1,(char *)(st))
+# define SSL_set0_chain(ctx,sk) \
+        SSL_ctrl(ctx,SSL_CTRL_CHAIN,0,(char *)(sk))
+# define SSL_set1_chain(ctx,sk) \
+        SSL_ctrl(ctx,SSL_CTRL_CHAIN,1,(char *)(sk))
+# define SSL_add0_chain_cert(ctx,x509) \
+        SSL_ctrl(ctx,SSL_CTRL_CHAIN_CERT,0,(char *)(x509))
+# define SSL_add1_chain_cert(ctx,x509) \
+        SSL_ctrl(ctx,SSL_CTRL_CHAIN_CERT,1,(char *)(x509))
+# define SSL_get0_chain_certs(ctx,px509) \
+        SSL_ctrl(ctx,SSL_CTRL_GET_CHAIN_CERTS,0,px509)
+# define SSL_clear_chain_certs(ctx) \
+        SSL_set0_chain(ctx,NULL)
+# define SSL_build_cert_chain(s, flags) \
+        SSL_ctrl(s,SSL_CTRL_BUILD_CERT_CHAIN, flags, NULL)
+# define SSL_select_current_cert(ctx,x509) \
+        SSL_ctrl(ctx,SSL_CTRL_SELECT_CURRENT_CERT,0,(char *)(x509))
+# define SSL_set_current_cert(ctx,op) \
+        SSL_ctrl(ctx,SSL_CTRL_SET_CURRENT_CERT, op, NULL)
+# define SSL_set0_verify_cert_store(s,st) \
+        SSL_ctrl(s,SSL_CTRL_SET_VERIFY_CERT_STORE,0,(char *)(st))
+# define SSL_set1_verify_cert_store(s,st) \
+        SSL_ctrl(s,SSL_CTRL_SET_VERIFY_CERT_STORE,1,(char *)(st))
+# define SSL_set0_chain_cert_store(s,st) \
+        SSL_ctrl(s,SSL_CTRL_SET_CHAIN_CERT_STORE,0,(char *)(st))
+# define SSL_set1_chain_cert_store(s,st) \
+        SSL_ctrl(s,SSL_CTRL_SET_CHAIN_CERT_STORE,1,(char *)(st))
+# define SSL_get1_groups(ctx, s) \
+        SSL_ctrl(ctx,SSL_CTRL_GET_GROUPS,0,(char *)(s))
+# define SSL_CTX_set1_groups(ctx, glist, glistlen) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_GROUPS,glistlen,(char *)(glist))
+# define SSL_CTX_set1_groups_list(ctx, s) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_GROUPS_LIST,0,(char *)(s))
+# define SSL_set1_groups(ctx, glist, glistlen) \
+        SSL_ctrl(ctx,SSL_CTRL_SET_GROUPS,glistlen,(char *)(glist))
+# define SSL_set1_groups_list(ctx, s) \
+        SSL_ctrl(ctx,SSL_CTRL_SET_GROUPS_LIST,0,(char *)(s))
+# define SSL_get_shared_group(s, n) \
+        SSL_ctrl(s,SSL_CTRL_GET_SHARED_GROUP,n,NULL)
+# define SSL_CTX_set1_sigalgs(ctx, slist, slistlen) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_SIGALGS,slistlen,(int *)(slist))
+# define SSL_CTX_set1_sigalgs_list(ctx, s) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_SIGALGS_LIST,0,(char *)(s))
+# define SSL_set1_sigalgs(ctx, slist, slistlen) \
+        SSL_ctrl(ctx,SSL_CTRL_SET_SIGALGS,slistlen,(int *)(slist))
+# define SSL_set1_sigalgs_list(ctx, s) \
+        SSL_ctrl(ctx,SSL_CTRL_SET_SIGALGS_LIST,0,(char *)(s))
+# define SSL_CTX_set1_client_sigalgs(ctx, slist, slistlen) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_CLIENT_SIGALGS,slistlen,(int *)(slist))
+# define SSL_CTX_set1_client_sigalgs_list(ctx, s) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_CLIENT_SIGALGS_LIST,0,(char *)(s))
+# define SSL_set1_client_sigalgs(ctx, slist, slistlen) \
+        SSL_ctrl(ctx,SSL_CTRL_SET_CLIENT_SIGALGS,clistlen,(int *)(slist))
+# define SSL_set1_client_sigalgs_list(ctx, s) \
+        SSL_ctrl(ctx,SSL_CTRL_SET_CLIENT_SIGALGS_LIST,0,(char *)(s))
+# define SSL_get0_certificate_types(s, clist) \
+        SSL_ctrl(s, SSL_CTRL_GET_CLIENT_CERT_TYPES, 0, (char *)(clist))
+# define SSL_CTX_set1_client_certificate_types(ctx, clist, clistlen) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_CLIENT_CERT_TYPES,clistlen, \
+                     (char *)(clist))
+# define SSL_set1_client_certificate_types(s, clist, clistlen) \
+        SSL_ctrl(s,SSL_CTRL_SET_CLIENT_CERT_TYPES,clistlen,(char *)(clist))
+# define SSL_get_signature_nid(s, pn) \
+        SSL_ctrl(s,SSL_CTRL_GET_SIGNATURE_NID,0,pn)
+# define SSL_get_peer_signature_nid(s, pn) \
+        SSL_ctrl(s,SSL_CTRL_GET_PEER_SIGNATURE_NID,0,pn)
+# define SSL_get_peer_tmp_key(s, pk) \
+        SSL_ctrl(s,SSL_CTRL_GET_PEER_TMP_KEY,0,pk)
+# define SSL_get_tmp_key(s, pk) \
+        SSL_ctrl(s,SSL_CTRL_GET_TMP_KEY,0,pk)
+# define SSL_get0_raw_cipherlist(s, plst) \
+        SSL_ctrl(s,SSL_CTRL_GET_RAW_CIPHERLIST,0,plst)
+# define SSL_get0_ec_point_formats(s, plst) \
+        SSL_ctrl(s,SSL_CTRL_GET_EC_POINT_FORMATS,0,plst)
+# define SSL_CTX_set_min_proto_version(ctx, version) \
+        SSL_CTX_ctrl(ctx, SSL_CTRL_SET_MIN_PROTO_VERSION, version, NULL)
+# define SSL_CTX_set_max_proto_version(ctx, version) \
+        SSL_CTX_ctrl(ctx, SSL_CTRL_SET_MAX_PROTO_VERSION, version, NULL)
+# define SSL_CTX_get_min_proto_version(ctx) \
+        SSL_CTX_ctrl(ctx, SSL_CTRL_GET_MIN_PROTO_VERSION, 0, NULL)
+# define SSL_CTX_get_max_proto_version(ctx) \
+        SSL_CTX_ctrl(ctx, SSL_CTRL_GET_MAX_PROTO_VERSION, 0, NULL)
+# define SSL_set_min_proto_version(s, version) \
+        SSL_ctrl(s, SSL_CTRL_SET_MIN_PROTO_VERSION, version, NULL)
+# define SSL_set_max_proto_version(s, version) \
+        SSL_ctrl(s, SSL_CTRL_SET_MAX_PROTO_VERSION, version, NULL)
+# define SSL_get_min_proto_version(s) \
+        SSL_ctrl(s, SSL_CTRL_GET_MIN_PROTO_VERSION, 0, NULL)
+# define SSL_get_max_proto_version(s) \
+        SSL_ctrl(s, SSL_CTRL_GET_MAX_PROTO_VERSION, 0, NULL)
+
+/* Backwards compatibility, original 1.1.0 names */
+# define SSL_CTRL_GET_SERVER_TMP_KEY \
+         SSL_CTRL_GET_PEER_TMP_KEY
+# define SSL_get_server_tmp_key(s, pk) \
+         SSL_get_peer_tmp_key(s, pk)
+
+/*
+ * The following symbol names are old and obsolete. They are kept
+ * for compatibility reasons only and should not be used anymore.
+ */
+# define SSL_CTRL_GET_CURVES           SSL_CTRL_GET_GROUPS
+# define SSL_CTRL_SET_CURVES           SSL_CTRL_SET_GROUPS
+# define SSL_CTRL_SET_CURVES_LIST      SSL_CTRL_SET_GROUPS_LIST
+# define SSL_CTRL_GET_SHARED_CURVE     SSL_CTRL_GET_SHARED_GROUP
+
+# define SSL_get1_curves               SSL_get1_groups
+# define SSL_CTX_set1_curves           SSL_CTX_set1_groups
+# define SSL_CTX_set1_curves_list      SSL_CTX_set1_groups_list
+# define SSL_set1_curves               SSL_set1_groups
+# define SSL_set1_curves_list          SSL_set1_groups_list
+# define SSL_get_shared_curve          SSL_get_shared_group
+
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+/* Provide some compatibility macros for removed functionality. */
+#  define SSL_CTX_need_tmp_RSA(ctx)                0
+#  define SSL_CTX_set_tmp_rsa(ctx,rsa)             1
+#  define SSL_need_tmp_RSA(ssl)                    0
+#  define SSL_set_tmp_rsa(ssl,rsa)                 1
+#  define SSL_CTX_set_ecdh_auto(dummy, onoff)      ((onoff) != 0)
+#  define SSL_set_ecdh_auto(dummy, onoff)          ((onoff) != 0)
+/*
+ * We "pretend" to call the callback to avoid warnings about unused static
+ * functions.
+ */
+#  define SSL_CTX_set_tmp_rsa_callback(ctx, cb)    while(0) (cb)(NULL, 0, 0)
+#  define SSL_set_tmp_rsa_callback(ssl, cb)        while(0) (cb)(NULL, 0, 0)
+# endif
+__owur const BIO_METHOD *BIO_f_ssl(void);
+__owur BIO *BIO_new_ssl(SSL_CTX *ctx, int client);
+__owur BIO *BIO_new_ssl_connect(SSL_CTX *ctx);
+__owur BIO *BIO_new_buffer_ssl_connect(SSL_CTX *ctx);
+__owur int BIO_ssl_copy_session_id(BIO *to, BIO *from);
+void BIO_ssl_shutdown(BIO *ssl_bio);
+
+__owur int SSL_CTX_set_cipher_list(SSL_CTX *, const char *str);
+__owur SSL_CTX *SSL_CTX_new(const SSL_METHOD *meth);
+int SSL_CTX_up_ref(SSL_CTX *ctx);
+void SSL_CTX_free(SSL_CTX *);
+__owur long SSL_CTX_set_timeout(SSL_CTX *ctx, long t);
+__owur long SSL_CTX_get_timeout(const SSL_CTX *ctx);
+__owur X509_STORE *SSL_CTX_get_cert_store(const SSL_CTX *);
+void SSL_CTX_set_cert_store(SSL_CTX *, X509_STORE *);
+void SSL_CTX_set1_cert_store(SSL_CTX *, X509_STORE *);
+__owur int SSL_want(const SSL *s);
+__owur int SSL_clear(SSL *s);
+
+void SSL_CTX_flush_sessions(SSL_CTX *ctx, long tm);
+
+__owur const SSL_CIPHER *SSL_get_current_cipher(const SSL *s);
+__owur const SSL_CIPHER *SSL_get_pending_cipher(const SSL *s);
+__owur int SSL_CIPHER_get_bits(const SSL_CIPHER *c, int *alg_bits);
+__owur const char *SSL_CIPHER_get_version(const SSL_CIPHER *c);
+__owur const char *SSL_CIPHER_get_name(const SSL_CIPHER *c);
+__owur const char *SSL_CIPHER_standard_name(const SSL_CIPHER *c);
+__owur const char *OPENSSL_cipher_name(const char *rfc_name);
+__owur uint32_t SSL_CIPHER_get_id(const SSL_CIPHER *c);
+__owur uint16_t SSL_CIPHER_get_protocol_id(const SSL_CIPHER *c);
+__owur int SSL_CIPHER_get_kx_nid(const SSL_CIPHER *c);
+__owur int SSL_CIPHER_get_auth_nid(const SSL_CIPHER *c);
+__owur const EVP_MD *SSL_CIPHER_get_handshake_digest(const SSL_CIPHER *c);
+__owur int SSL_CIPHER_is_aead(const SSL_CIPHER *c);
+
+__owur int SSL_get_fd(const SSL *s);
+__owur int SSL_get_rfd(const SSL *s);
+__owur int SSL_get_wfd(const SSL *s);
+__owur const char *SSL_get_cipher_list(const SSL *s, int n);
+__owur char *SSL_get_shared_ciphers(const SSL *s, char *buf, int size);
+__owur int SSL_get_read_ahead(const SSL *s);
+__owur int SSL_pending(const SSL *s);
+__owur int SSL_has_pending(const SSL *s);
+# ifndef OPENSSL_NO_SOCK
+__owur int SSL_set_fd(SSL *s, int fd);
+__owur int SSL_set_rfd(SSL *s, int fd);
+__owur int SSL_set_wfd(SSL *s, int fd);
+# endif
+void SSL_set0_rbio(SSL *s, BIO *rbio);
+void SSL_set0_wbio(SSL *s, BIO *wbio);
+void SSL_set_bio(SSL *s, BIO *rbio, BIO *wbio);
+__owur BIO *SSL_get_rbio(const SSL *s);
+__owur BIO *SSL_get_wbio(const SSL *s);
+__owur int SSL_set_cipher_list(SSL *s, const char *str);
+__owur int SSL_CTX_set_ciphersuites(SSL_CTX *ctx, const char *str);
+__owur int SSL_set_ciphersuites(SSL *s, const char *str);
+void SSL_set_read_ahead(SSL *s, int yes);
+__owur int SSL_get_verify_mode(const SSL *s);
+__owur int SSL_get_verify_depth(const SSL *s);
+__owur SSL_verify_cb SSL_get_verify_callback(const SSL *s);
+void SSL_set_verify(SSL *s, int mode, SSL_verify_cb callback);
+void SSL_set_verify_depth(SSL *s, int depth);
+void SSL_set_cert_cb(SSL *s, int (*cb) (SSL *ssl, void *arg), void *arg);
+# ifndef OPENSSL_NO_RSA
+__owur int SSL_use_RSAPrivateKey(SSL *ssl, RSA *rsa);
+__owur int SSL_use_RSAPrivateKey_ASN1(SSL *ssl, const unsigned char *d,
+                                      long len);
+# endif
+__owur int SSL_use_PrivateKey(SSL *ssl, EVP_PKEY *pkey);
+__owur int SSL_use_PrivateKey_ASN1(int pk, SSL *ssl, const unsigned char *d,
+                                   long len);
+__owur int SSL_use_certificate(SSL *ssl, X509 *x);
+__owur int SSL_use_certificate_ASN1(SSL *ssl, const unsigned char *d, int len);
+__owur int SSL_use_cert_and_key(SSL *ssl, X509 *x509, EVP_PKEY *privatekey,
+                                STACK_OF(X509) *chain, int override);
+
+
+/* serverinfo file format versions */
+# define SSL_SERVERINFOV1   1
+# define SSL_SERVERINFOV2   2
+
+/* Set serverinfo data for the current active cert. */
+__owur int SSL_CTX_use_serverinfo(SSL_CTX *ctx, const unsigned char *serverinfo,
+                                  size_t serverinfo_length);
+__owur int SSL_CTX_use_serverinfo_ex(SSL_CTX *ctx, unsigned int version,
+                                     const unsigned char *serverinfo,
+                                     size_t serverinfo_length);
+__owur int SSL_CTX_use_serverinfo_file(SSL_CTX *ctx, const char *file);
+
+#ifndef OPENSSL_NO_RSA
+__owur int SSL_use_RSAPrivateKey_file(SSL *ssl, const char *file, int type);
+#endif
+
+__owur int SSL_use_PrivateKey_file(SSL *ssl, const char *file, int type);
+__owur int SSL_use_certificate_file(SSL *ssl, const char *file, int type);
+
+#ifndef OPENSSL_NO_RSA
+__owur int SSL_CTX_use_RSAPrivateKey_file(SSL_CTX *ctx, const char *file,
+                                          int type);
+#endif
+__owur int SSL_CTX_use_PrivateKey_file(SSL_CTX *ctx, const char *file,
+                                       int type);
+__owur int SSL_CTX_use_certificate_file(SSL_CTX *ctx, const char *file,
+                                        int type);
+/* PEM type */
+__owur int SSL_CTX_use_certificate_chain_file(SSL_CTX *ctx, const char *file);
+__owur int SSL_use_certificate_chain_file(SSL *ssl, const char *file);
+__owur STACK_OF(X509_NAME) *SSL_load_client_CA_file(const char *file);
+__owur int SSL_add_file_cert_subjects_to_stack(STACK_OF(X509_NAME) *stackCAs,
+                                               const char *file);
+int SSL_add_dir_cert_subjects_to_stack(STACK_OF(X509_NAME) *stackCAs,
+                                       const char *dir);
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define SSL_load_error_strings() \
+    OPENSSL_init_ssl(OPENSSL_INIT_LOAD_SSL_STRINGS \
+                     | OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL)
+# endif
+
+__owur const char *SSL_state_string(const SSL *s);
+__owur const char *SSL_rstate_string(const SSL *s);
+__owur const char *SSL_state_string_long(const SSL *s);
+__owur const char *SSL_rstate_string_long(const SSL *s);
+__owur long SSL_SESSION_get_time(const SSL_SESSION *s);
+__owur long SSL_SESSION_set_time(SSL_SESSION *s, long t);
+__owur long SSL_SESSION_get_timeout(const SSL_SESSION *s);
+__owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
+__owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
+__owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
+
+__owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
+__owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
+void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
+                                    const unsigned char **alpn,
+                                    size_t *len);
+__owur int SSL_SESSION_set1_alpn_selected(SSL_SESSION *s,
+                                          const unsigned char *alpn,
+                                          size_t len);
+__owur const SSL_CIPHER *SSL_SESSION_get0_cipher(const SSL_SESSION *s);
+__owur int SSL_SESSION_set_cipher(SSL_SESSION *s, const SSL_CIPHER *cipher);
+__owur int SSL_SESSION_has_ticket(const SSL_SESSION *s);
+__owur unsigned long SSL_SESSION_get_ticket_lifetime_hint(const SSL_SESSION *s);
+void SSL_SESSION_get0_ticket(const SSL_SESSION *s, const unsigned char **tick,
+                             size_t *len);
+__owur uint32_t SSL_SESSION_get_max_early_data(const SSL_SESSION *s);
+__owur int SSL_SESSION_set_max_early_data(SSL_SESSION *s,
+                                          uint32_t max_early_data);
+__owur int SSL_copy_session_id(SSL *to, const SSL *from);
+__owur X509 *SSL_SESSION_get0_peer(SSL_SESSION *s);
+__owur int SSL_SESSION_set1_id_context(SSL_SESSION *s,
+                                       const unsigned char *sid_ctx,
+                                       unsigned int sid_ctx_len);
+__owur int SSL_SESSION_set1_id(SSL_SESSION *s, const unsigned char *sid,
+                               unsigned int sid_len);
+__owur int SSL_SESSION_is_resumable(const SSL_SESSION *s);
+
+__owur SSL_SESSION *SSL_SESSION_new(void);
+__owur SSL_SESSION *SSL_SESSION_dup(SSL_SESSION *src);
+const unsigned char *SSL_SESSION_get_id(const SSL_SESSION *s,
+                                        unsigned int *len);
+const unsigned char *SSL_SESSION_get0_id_context(const SSL_SESSION *s,
+                                                 unsigned int *len);
+__owur unsigned int SSL_SESSION_get_compress_id(const SSL_SESSION *s);
+# ifndef OPENSSL_NO_STDIO
+int SSL_SESSION_print_fp(FILE *fp, const SSL_SESSION *ses);
+# endif
+int SSL_SESSION_print(BIO *fp, const SSL_SESSION *ses);
+int SSL_SESSION_print_keylog(BIO *bp, const SSL_SESSION *x);
+int SSL_SESSION_up_ref(SSL_SESSION *ses);
+void SSL_SESSION_free(SSL_SESSION *ses);
+__owur int i2d_SSL_SESSION(SSL_SESSION *in, unsigned char **pp);
+__owur int SSL_set_session(SSL *to, SSL_SESSION *session);
+int SSL_CTX_add_session(SSL_CTX *ctx, SSL_SESSION *session);
+int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *session);
+__owur int SSL_CTX_set_generate_session_id(SSL_CTX *ctx, GEN_SESSION_CB cb);
+__owur int SSL_set_generate_session_id(SSL *s, GEN_SESSION_CB cb);
+__owur int SSL_has_matching_session_id(const SSL *s,
+                                       const unsigned char *id,
+                                       unsigned int id_len);
+SSL_SESSION *d2i_SSL_SESSION(SSL_SESSION **a, const unsigned char **pp,
+                             long length);
+
+# ifdef HEADER_X509_H
+__owur X509 *SSL_get_peer_certificate(const SSL *s);
+# endif
+
+__owur STACK_OF(X509) *SSL_get_peer_cert_chain(const SSL *s);
+
+__owur int SSL_CTX_get_verify_mode(const SSL_CTX *ctx);
+__owur int SSL_CTX_get_verify_depth(const SSL_CTX *ctx);
+__owur SSL_verify_cb SSL_CTX_get_verify_callback(const SSL_CTX *ctx);
+void SSL_CTX_set_verify(SSL_CTX *ctx, int mode, SSL_verify_cb callback);
+void SSL_CTX_set_verify_depth(SSL_CTX *ctx, int depth);
+void SSL_CTX_set_cert_verify_callback(SSL_CTX *ctx,
+                                      int (*cb) (X509_STORE_CTX *, void *),
+                                      void *arg);
+void SSL_CTX_set_cert_cb(SSL_CTX *c, int (*cb) (SSL *ssl, void *arg),
+                         void *arg);
+# ifndef OPENSSL_NO_RSA
+__owur int SSL_CTX_use_RSAPrivateKey(SSL_CTX *ctx, RSA *rsa);
+__owur int SSL_CTX_use_RSAPrivateKey_ASN1(SSL_CTX *ctx, const unsigned char *d,
+                                          long len);
+# endif
+__owur int SSL_CTX_use_PrivateKey(SSL_CTX *ctx, EVP_PKEY *pkey);
+__owur int SSL_CTX_use_PrivateKey_ASN1(int pk, SSL_CTX *ctx,
+                                       const unsigned char *d, long len);
+__owur int SSL_CTX_use_certificate(SSL_CTX *ctx, X509 *x);
+__owur int SSL_CTX_use_certificate_ASN1(SSL_CTX *ctx, int len,
+                                        const unsigned char *d);
+__owur int SSL_CTX_use_cert_and_key(SSL_CTX *ctx, X509 *x509, EVP_PKEY *privatekey,
+                                    STACK_OF(X509) *chain, int override);
+
+void SSL_CTX_set_default_passwd_cb(SSL_CTX *ctx, pem_password_cb *cb);
+void SSL_CTX_set_default_passwd_cb_userdata(SSL_CTX *ctx, void *u);
+pem_password_cb *SSL_CTX_get_default_passwd_cb(SSL_CTX *ctx);
+void *SSL_CTX_get_default_passwd_cb_userdata(SSL_CTX *ctx);
+void SSL_set_default_passwd_cb(SSL *s, pem_password_cb *cb);
+void SSL_set_default_passwd_cb_userdata(SSL *s, void *u);
+pem_password_cb *SSL_get_default_passwd_cb(SSL *s);
+void *SSL_get_default_passwd_cb_userdata(SSL *s);
+
+__owur int SSL_CTX_check_private_key(const SSL_CTX *ctx);
+__owur int SSL_check_private_key(const SSL *ctx);
+
+__owur int SSL_CTX_set_session_id_context(SSL_CTX *ctx,
+                                          const unsigned char *sid_ctx,
+                                          unsigned int sid_ctx_len);
+
+SSL *SSL_new(SSL_CTX *ctx);
+int SSL_up_ref(SSL *s);
+int SSL_is_dtls(const SSL *s);
+__owur int SSL_set_session_id_context(SSL *ssl, const unsigned char *sid_ctx,
+                                      unsigned int sid_ctx_len);
+
+__owur int SSL_CTX_set_purpose(SSL_CTX *ctx, int purpose);
+__owur int SSL_set_purpose(SSL *ssl, int purpose);
+__owur int SSL_CTX_set_trust(SSL_CTX *ctx, int trust);
+__owur int SSL_set_trust(SSL *ssl, int trust);
+
+__owur int SSL_set1_host(SSL *s, const char *hostname);
+__owur int SSL_add1_host(SSL *s, const char *hostname);
+__owur const char *SSL_get0_peername(SSL *s);
+void SSL_set_hostflags(SSL *s, unsigned int flags);
+
+__owur int SSL_CTX_dane_enable(SSL_CTX *ctx);
+__owur int SSL_CTX_dane_mtype_set(SSL_CTX *ctx, const EVP_MD *md,
+                                  uint8_t mtype, uint8_t ord);
+__owur int SSL_dane_enable(SSL *s, const char *basedomain);
+__owur int SSL_dane_tlsa_add(SSL *s, uint8_t usage, uint8_t selector,
+                             uint8_t mtype, unsigned const char *data, size_t dlen);
+__owur int SSL_get0_dane_authority(SSL *s, X509 **mcert, EVP_PKEY **mspki);
+__owur int SSL_get0_dane_tlsa(SSL *s, uint8_t *usage, uint8_t *selector,
+                              uint8_t *mtype, unsigned const char **data,
+                              size_t *dlen);
+/*
+ * Bridge opacity barrier between libcrypt and libssl, also needed to support
+ * offline testing in test/danetest.c
+ */
+SSL_DANE *SSL_get0_dane(SSL *ssl);
+/*
+ * DANE flags
+ */
+unsigned long SSL_CTX_dane_set_flags(SSL_CTX *ctx, unsigned long flags);
+unsigned long SSL_CTX_dane_clear_flags(SSL_CTX *ctx, unsigned long flags);
+unsigned long SSL_dane_set_flags(SSL *ssl, unsigned long flags);
+unsigned long SSL_dane_clear_flags(SSL *ssl, unsigned long flags);
+
+__owur int SSL_CTX_set1_param(SSL_CTX *ctx, X509_VERIFY_PARAM *vpm);
+__owur int SSL_set1_param(SSL *ssl, X509_VERIFY_PARAM *vpm);
+
+__owur X509_VERIFY_PARAM *SSL_CTX_get0_param(SSL_CTX *ctx);
+__owur X509_VERIFY_PARAM *SSL_get0_param(SSL *ssl);
+
+# ifndef OPENSSL_NO_SRP
+int SSL_CTX_set_srp_username(SSL_CTX *ctx, char *name);
+int SSL_CTX_set_srp_password(SSL_CTX *ctx, char *password);
+int SSL_CTX_set_srp_strength(SSL_CTX *ctx, int strength);
+int SSL_CTX_set_srp_client_pwd_callback(SSL_CTX *ctx,
+                                        char *(*cb) (SSL *, void *));
+int SSL_CTX_set_srp_verify_param_callback(SSL_CTX *ctx,
+                                          int (*cb) (SSL *, void *));
+int SSL_CTX_set_srp_username_callback(SSL_CTX *ctx,
+                                      int (*cb) (SSL *, int *, void *));
+int SSL_CTX_set_srp_cb_arg(SSL_CTX *ctx, void *arg);
+
+int SSL_set_srp_server_param(SSL *s, const BIGNUM *N, const BIGNUM *g,
+                             BIGNUM *sa, BIGNUM *v, char *info);
+int SSL_set_srp_server_param_pw(SSL *s, const char *user, const char *pass,
+                                const char *grp);
+
+__owur BIGNUM *SSL_get_srp_g(SSL *s);
+__owur BIGNUM *SSL_get_srp_N(SSL *s);
+
+__owur char *SSL_get_srp_username(SSL *s);
+__owur char *SSL_get_srp_userinfo(SSL *s);
+# endif
+
+/*
+ * ClientHello callback and helpers.
+ */
+
+# define SSL_CLIENT_HELLO_SUCCESS 1
+# define SSL_CLIENT_HELLO_ERROR   0
+# define SSL_CLIENT_HELLO_RETRY   (-1)
+
+typedef int (*SSL_client_hello_cb_fn) (SSL *s, int *al, void *arg);
+void SSL_CTX_set_client_hello_cb(SSL_CTX *c, SSL_client_hello_cb_fn cb,
+                                 void *arg);
+int SSL_client_hello_isv2(SSL *s);
+unsigned int SSL_client_hello_get0_legacy_version(SSL *s);
+size_t SSL_client_hello_get0_random(SSL *s, const unsigned char **out);
+size_t SSL_client_hello_get0_session_id(SSL *s, const unsigned char **out);
+size_t SSL_client_hello_get0_ciphers(SSL *s, const unsigned char **out);
+size_t SSL_client_hello_get0_compression_methods(SSL *s,
+                                                 const unsigned char **out);
+int SSL_client_hello_get1_extensions_present(SSL *s, int **out, size_t *outlen);
+int SSL_client_hello_get0_ext(SSL *s, unsigned int type,
+                              const unsigned char **out, size_t *outlen);
+
+void SSL_certs_clear(SSL *s);
+void SSL_free(SSL *ssl);
+# ifdef OSSL_ASYNC_FD
+/*
+ * Windows application developer has to include windows.h to use these.
+ */
+__owur int SSL_waiting_for_async(SSL *s);
+__owur int SSL_get_all_async_fds(SSL *s, OSSL_ASYNC_FD *fds, size_t *numfds);
+__owur int SSL_get_changed_async_fds(SSL *s, OSSL_ASYNC_FD *addfd,
+                                     size_t *numaddfds, OSSL_ASYNC_FD *delfd,
+                                     size_t *numdelfds);
+# endif
+__owur int SSL_accept(SSL *ssl);
+__owur int SSL_stateless(SSL *s);
+__owur int SSL_connect(SSL *ssl);
+__owur int SSL_read(SSL *ssl, void *buf, int num);
+__owur int SSL_read_ex(SSL *ssl, void *buf, size_t num, size_t *readbytes);
+
+# define SSL_READ_EARLY_DATA_ERROR   0
+# define SSL_READ_EARLY_DATA_SUCCESS 1
+# define SSL_READ_EARLY_DATA_FINISH  2
+
+__owur int SSL_read_early_data(SSL *s, void *buf, size_t num,
+                               size_t *readbytes);
+__owur int SSL_peek(SSL *ssl, void *buf, int num);
+__owur int SSL_peek_ex(SSL *ssl, void *buf, size_t num, size_t *readbytes);
+__owur int SSL_write(SSL *ssl, const void *buf, int num);
+__owur int SSL_write_ex(SSL *s, const void *buf, size_t num, size_t *written);
+__owur int SSL_write_early_data(SSL *s, const void *buf, size_t num,
+                                size_t *written);
+long SSL_ctrl(SSL *ssl, int cmd, long larg, void *parg);
+long SSL_callback_ctrl(SSL *, int, void (*)(void));
+long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
+long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
+
+# define SSL_EARLY_DATA_NOT_SENT    0
+# define SSL_EARLY_DATA_REJECTED    1
+# define SSL_EARLY_DATA_ACCEPTED    2
+
+__owur int SSL_get_early_data_status(const SSL *s);
+
+__owur int SSL_get_error(const SSL *s, int ret_code);
+__owur const char *SSL_get_version(const SSL *s);
+
+/* This sets the 'default' SSL version that SSL_new() will create */
+__owur int SSL_CTX_set_ssl_version(SSL_CTX *ctx, const SSL_METHOD *meth);
+
+# ifndef OPENSSL_NO_SSL3_METHOD
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *SSLv3_method(void)) /* SSLv3 */
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *SSLv3_server_method(void))
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *SSLv3_client_method(void))
+# endif
+
+#define SSLv23_method           TLS_method
+#define SSLv23_server_method    TLS_server_method
+#define SSLv23_client_method    TLS_client_method
+
+/* Negotiate highest available SSL/TLS version */
+__owur const SSL_METHOD *TLS_method(void);
+__owur const SSL_METHOD *TLS_server_method(void);
+__owur const SSL_METHOD *TLS_client_method(void);
+
+# ifndef OPENSSL_NO_TLS1_METHOD
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *TLSv1_method(void)) /* TLSv1.0 */
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *TLSv1_server_method(void))
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *TLSv1_client_method(void))
+# endif
+
+# ifndef OPENSSL_NO_TLS1_1_METHOD
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *TLSv1_1_method(void)) /* TLSv1.1 */
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *TLSv1_1_server_method(void))
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *TLSv1_1_client_method(void))
+# endif
+
+# ifndef OPENSSL_NO_TLS1_2_METHOD
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *TLSv1_2_method(void)) /* TLSv1.2 */
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *TLSv1_2_server_method(void))
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *TLSv1_2_client_method(void))
+# endif
+
+# ifndef OPENSSL_NO_DTLS1_METHOD
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *DTLSv1_method(void)) /* DTLSv1.0 */
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *DTLSv1_server_method(void))
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *DTLSv1_client_method(void))
+# endif
+
+# ifndef OPENSSL_NO_DTLS1_2_METHOD
+/* DTLSv1.2 */
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *DTLSv1_2_method(void))
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *DTLSv1_2_server_method(void))
+DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *DTLSv1_2_client_method(void))
+# endif
+
+__owur const SSL_METHOD *DTLS_method(void); /* DTLS 1.0 and 1.2 */
+__owur const SSL_METHOD *DTLS_server_method(void); /* DTLS 1.0 and 1.2 */
+__owur const SSL_METHOD *DTLS_client_method(void); /* DTLS 1.0 and 1.2 */
+
+__owur size_t DTLS_get_data_mtu(const SSL *s);
+
+__owur STACK_OF(SSL_CIPHER) *SSL_get_ciphers(const SSL *s);
+__owur STACK_OF(SSL_CIPHER) *SSL_CTX_get_ciphers(const SSL_CTX *ctx);
+__owur STACK_OF(SSL_CIPHER) *SSL_get_client_ciphers(const SSL *s);
+__owur STACK_OF(SSL_CIPHER) *SSL_get1_supported_ciphers(SSL *s);
+
+__owur int SSL_do_handshake(SSL *s);
+int SSL_key_update(SSL *s, int updatetype);
+int SSL_get_key_update_type(const SSL *s);
+int SSL_renegotiate(SSL *s);
+int SSL_renegotiate_abbreviated(SSL *s);
+__owur int SSL_renegotiate_pending(const SSL *s);
+int SSL_shutdown(SSL *s);
+__owur int SSL_verify_client_post_handshake(SSL *s);
+void SSL_CTX_set_post_handshake_auth(SSL_CTX *ctx, int val);
+void SSL_set_post_handshake_auth(SSL *s, int val);
+
+__owur const SSL_METHOD *SSL_CTX_get_ssl_method(const SSL_CTX *ctx);
+__owur const SSL_METHOD *SSL_get_ssl_method(const SSL *s);
+__owur int SSL_set_ssl_method(SSL *s, const SSL_METHOD *method);
+__owur const char *SSL_alert_type_string_long(int value);
+__owur const char *SSL_alert_type_string(int value);
+__owur const char *SSL_alert_desc_string_long(int value);
+__owur const char *SSL_alert_desc_string(int value);
+
+void SSL_set0_CA_list(SSL *s, STACK_OF(X509_NAME) *name_list);
+void SSL_CTX_set0_CA_list(SSL_CTX *ctx, STACK_OF(X509_NAME) *name_list);
+__owur const STACK_OF(X509_NAME) *SSL_get0_CA_list(const SSL *s);
+__owur const STACK_OF(X509_NAME) *SSL_CTX_get0_CA_list(const SSL_CTX *ctx);
+__owur int SSL_add1_to_CA_list(SSL *ssl, const X509 *x);
+__owur int SSL_CTX_add1_to_CA_list(SSL_CTX *ctx, const X509 *x);
+__owur const STACK_OF(X509_NAME) *SSL_get0_peer_CA_list(const SSL *s);
+
+void SSL_set_client_CA_list(SSL *s, STACK_OF(X509_NAME) *name_list);
+void SSL_CTX_set_client_CA_list(SSL_CTX *ctx, STACK_OF(X509_NAME) *name_list);
+__owur STACK_OF(X509_NAME) *SSL_get_client_CA_list(const SSL *s);
+__owur STACK_OF(X509_NAME) *SSL_CTX_get_client_CA_list(const SSL_CTX *s);
+__owur int SSL_add_client_CA(SSL *ssl, X509 *x);
+__owur int SSL_CTX_add_client_CA(SSL_CTX *ctx, X509 *x);
+
+void SSL_set_connect_state(SSL *s);
+void SSL_set_accept_state(SSL *s);
+
+__owur long SSL_get_default_timeout(const SSL *s);
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define SSL_library_init() OPENSSL_init_ssl(0, NULL)
+# endif
+
+__owur char *SSL_CIPHER_description(const SSL_CIPHER *, char *buf, int size);
+__owur STACK_OF(X509_NAME) *SSL_dup_CA_list(const STACK_OF(X509_NAME) *sk);
+
+__owur SSL *SSL_dup(SSL *ssl);
+
+__owur X509 *SSL_get_certificate(const SSL *ssl);
+/*
+ * EVP_PKEY
+ */
+struct evp_pkey_st *SSL_get_privatekey(const SSL *ssl);
+
+__owur X509 *SSL_CTX_get0_certificate(const SSL_CTX *ctx);
+__owur EVP_PKEY *SSL_CTX_get0_privatekey(const SSL_CTX *ctx);
+
+void SSL_CTX_set_quiet_shutdown(SSL_CTX *ctx, int mode);
+__owur int SSL_CTX_get_quiet_shutdown(const SSL_CTX *ctx);
+void SSL_set_quiet_shutdown(SSL *ssl, int mode);
+__owur int SSL_get_quiet_shutdown(const SSL *ssl);
+void SSL_set_shutdown(SSL *ssl, int mode);
+__owur int SSL_get_shutdown(const SSL *ssl);
+__owur int SSL_version(const SSL *ssl);
+__owur int SSL_client_version(const SSL *s);
+__owur int SSL_CTX_set_default_verify_paths(SSL_CTX *ctx);
+__owur int SSL_CTX_set_default_verify_dir(SSL_CTX *ctx);
+__owur int SSL_CTX_set_default_verify_file(SSL_CTX *ctx);
+__owur int SSL_CTX_load_verify_locations(SSL_CTX *ctx, const char *CAfile,
+                                         const char *CApath);
+# define SSL_get0_session SSL_get_session/* just peek at pointer */
+__owur SSL_SESSION *SSL_get_session(const SSL *ssl);
+__owur SSL_SESSION *SSL_get1_session(SSL *ssl); /* obtain a reference count */
+__owur SSL_CTX *SSL_get_SSL_CTX(const SSL *ssl);
+SSL_CTX *SSL_set_SSL_CTX(SSL *ssl, SSL_CTX *ctx);
+void SSL_set_info_callback(SSL *ssl,
+                           void (*cb) (const SSL *ssl, int type, int val));
+void (*SSL_get_info_callback(const SSL *ssl)) (const SSL *ssl, int type,
+                                               int val);
+__owur OSSL_HANDSHAKE_STATE SSL_get_state(const SSL *ssl);
+
+void SSL_set_verify_result(SSL *ssl, long v);
+__owur long SSL_get_verify_result(const SSL *ssl);
+__owur STACK_OF(X509) *SSL_get0_verified_chain(const SSL *s);
+
+__owur size_t SSL_get_client_random(const SSL *ssl, unsigned char *out,
+                                    size_t outlen);
+__owur size_t SSL_get_server_random(const SSL *ssl, unsigned char *out,
+                                    size_t outlen);
+__owur size_t SSL_SESSION_get_master_key(const SSL_SESSION *sess,
+                                         unsigned char *out, size_t outlen);
+__owur int SSL_SESSION_set1_master_key(SSL_SESSION *sess,
+                                       const unsigned char *in, size_t len);
+uint8_t SSL_SESSION_get_max_fragment_length(const SSL_SESSION *sess);
+
+#define SSL_get_ex_new_index(l, p, newf, dupf, freef) \
+    CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_SSL, l, p, newf, dupf, freef)
+__owur int SSL_set_ex_data(SSL *ssl, int idx, void *data);
+void *SSL_get_ex_data(const SSL *ssl, int idx);
+#define SSL_SESSION_get_ex_new_index(l, p, newf, dupf, freef) \
+    CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_SSL_SESSION, l, p, newf, dupf, freef)
+__owur int SSL_SESSION_set_ex_data(SSL_SESSION *ss, int idx, void *data);
+void *SSL_SESSION_get_ex_data(const SSL_SESSION *ss, int idx);
+#define SSL_CTX_get_ex_new_index(l, p, newf, dupf, freef) \
+    CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_SSL_CTX, l, p, newf, dupf, freef)
+__owur int SSL_CTX_set_ex_data(SSL_CTX *ssl, int idx, void *data);
+void *SSL_CTX_get_ex_data(const SSL_CTX *ssl, int idx);
+
+__owur int SSL_get_ex_data_X509_STORE_CTX_idx(void);
+
+# define SSL_CTX_sess_set_cache_size(ctx,t) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_SESS_CACHE_SIZE,t,NULL)
+# define SSL_CTX_sess_get_cache_size(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_GET_SESS_CACHE_SIZE,0,NULL)
+# define SSL_CTX_set_session_cache_mode(ctx,m) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_SESS_CACHE_MODE,m,NULL)
+# define SSL_CTX_get_session_cache_mode(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_GET_SESS_CACHE_MODE,0,NULL)
+
+# define SSL_CTX_get_default_read_ahead(ctx) SSL_CTX_get_read_ahead(ctx)
+# define SSL_CTX_set_default_read_ahead(ctx,m) SSL_CTX_set_read_ahead(ctx,m)
+# define SSL_CTX_get_read_ahead(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_GET_READ_AHEAD,0,NULL)
+# define SSL_CTX_set_read_ahead(ctx,m) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_READ_AHEAD,m,NULL)
+# define SSL_CTX_get_max_cert_list(ctx) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_GET_MAX_CERT_LIST,0,NULL)
+# define SSL_CTX_set_max_cert_list(ctx,m) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_MAX_CERT_LIST,m,NULL)
+# define SSL_get_max_cert_list(ssl) \
+        SSL_ctrl(ssl,SSL_CTRL_GET_MAX_CERT_LIST,0,NULL)
+# define SSL_set_max_cert_list(ssl,m) \
+        SSL_ctrl(ssl,SSL_CTRL_SET_MAX_CERT_LIST,m,NULL)
+
+# define SSL_CTX_set_max_send_fragment(ctx,m) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_MAX_SEND_FRAGMENT,m,NULL)
+# define SSL_set_max_send_fragment(ssl,m) \
+        SSL_ctrl(ssl,SSL_CTRL_SET_MAX_SEND_FRAGMENT,m,NULL)
+# define SSL_CTX_set_split_send_fragment(ctx,m) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_SPLIT_SEND_FRAGMENT,m,NULL)
+# define SSL_set_split_send_fragment(ssl,m) \
+        SSL_ctrl(ssl,SSL_CTRL_SET_SPLIT_SEND_FRAGMENT,m,NULL)
+# define SSL_CTX_set_max_pipelines(ctx,m) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_MAX_PIPELINES,m,NULL)
+# define SSL_set_max_pipelines(ssl,m) \
+        SSL_ctrl(ssl,SSL_CTRL_SET_MAX_PIPELINES,m,NULL)
+
+void SSL_CTX_set_default_read_buffer_len(SSL_CTX *ctx, size_t len);
+void SSL_set_default_read_buffer_len(SSL *s, size_t len);
+
+# ifndef OPENSSL_NO_DH
+/* NB: the |keylength| is only applicable when is_export is true */
+void SSL_CTX_set_tmp_dh_callback(SSL_CTX *ctx,
+                                 DH *(*dh) (SSL *ssl, int is_export,
+                                            int keylength));
+void SSL_set_tmp_dh_callback(SSL *ssl,
+                             DH *(*dh) (SSL *ssl, int is_export,
+                                        int keylength));
+# endif
+
+__owur const COMP_METHOD *SSL_get_current_compression(const SSL *s);
+__owur const COMP_METHOD *SSL_get_current_expansion(const SSL *s);
+__owur const char *SSL_COMP_get_name(const COMP_METHOD *comp);
+__owur const char *SSL_COMP_get0_name(const SSL_COMP *comp);
+__owur int SSL_COMP_get_id(const SSL_COMP *comp);
+STACK_OF(SSL_COMP) *SSL_COMP_get_compression_methods(void);
+__owur STACK_OF(SSL_COMP) *SSL_COMP_set0_compression_methods(STACK_OF(SSL_COMP)
+                                                             *meths);
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define SSL_COMP_free_compression_methods() while(0) continue
+# endif
+__owur int SSL_COMP_add_compression_method(int id, COMP_METHOD *cm);
+
+const SSL_CIPHER *SSL_CIPHER_find(SSL *ssl, const unsigned char *ptr);
+int SSL_CIPHER_get_cipher_nid(const SSL_CIPHER *c);
+int SSL_CIPHER_get_digest_nid(const SSL_CIPHER *c);
+int SSL_bytes_to_cipher_list(SSL *s, const unsigned char *bytes, size_t len,
+                             int isv2format, STACK_OF(SSL_CIPHER) **sk,
+                             STACK_OF(SSL_CIPHER) **scsvs);
+
+/* TLS extensions functions */
+__owur int SSL_set_session_ticket_ext(SSL *s, void *ext_data, int ext_len);
+
+__owur int SSL_set_session_ticket_ext_cb(SSL *s,
+                                         tls_session_ticket_ext_cb_fn cb,
+                                         void *arg);
+
+/* Pre-shared secret session resumption functions */
+__owur int SSL_set_session_secret_cb(SSL *s,
+                                     tls_session_secret_cb_fn session_secret_cb,
+                                     void *arg);
+
+void SSL_CTX_set_not_resumable_session_callback(SSL_CTX *ctx,
+                                                int (*cb) (SSL *ssl,
+                                                           int
+                                                           is_forward_secure));
+
+void SSL_set_not_resumable_session_callback(SSL *ssl,
+                                            int (*cb) (SSL *ssl,
+                                                       int is_forward_secure));
+
+void SSL_CTX_set_record_padding_callback(SSL_CTX *ctx,
+                                         size_t (*cb) (SSL *ssl, int type,
+                                                       size_t len, void *arg));
+void SSL_CTX_set_record_padding_callback_arg(SSL_CTX *ctx, void *arg);
+void *SSL_CTX_get_record_padding_callback_arg(const SSL_CTX *ctx);
+int SSL_CTX_set_block_padding(SSL_CTX *ctx, size_t block_size);
+
+void SSL_set_record_padding_callback(SSL *ssl,
+                                    size_t (*cb) (SSL *ssl, int type,
+                                                  size_t len, void *arg));
+void SSL_set_record_padding_callback_arg(SSL *ssl, void *arg);
+void *SSL_get_record_padding_callback_arg(const SSL *ssl);
+int SSL_set_block_padding(SSL *ssl, size_t block_size);
+
+int SSL_set_num_tickets(SSL *s, size_t num_tickets);
+size_t SSL_get_num_tickets(const SSL *s);
+int SSL_CTX_set_num_tickets(SSL_CTX *ctx, size_t num_tickets);
+size_t SSL_CTX_get_num_tickets(const SSL_CTX *ctx);
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define SSL_cache_hit(s) SSL_session_reused(s)
+# endif
+
+__owur int SSL_session_reused(SSL *s);
+__owur int SSL_is_server(const SSL *s);
+
+__owur __owur SSL_CONF_CTX *SSL_CONF_CTX_new(void);
+int SSL_CONF_CTX_finish(SSL_CONF_CTX *cctx);
+void SSL_CONF_CTX_free(SSL_CONF_CTX *cctx);
+unsigned int SSL_CONF_CTX_set_flags(SSL_CONF_CTX *cctx, unsigned int flags);
+__owur unsigned int SSL_CONF_CTX_clear_flags(SSL_CONF_CTX *cctx,
+                                             unsigned int flags);
+__owur int SSL_CONF_CTX_set1_prefix(SSL_CONF_CTX *cctx, const char *pre);
+
+void SSL_CONF_CTX_set_ssl(SSL_CONF_CTX *cctx, SSL *ssl);
+void SSL_CONF_CTX_set_ssl_ctx(SSL_CONF_CTX *cctx, SSL_CTX *ctx);
+
+__owur int SSL_CONF_cmd(SSL_CONF_CTX *cctx, const char *cmd, const char *value);
+__owur int SSL_CONF_cmd_argv(SSL_CONF_CTX *cctx, int *pargc, char ***pargv);
+__owur int SSL_CONF_cmd_value_type(SSL_CONF_CTX *cctx, const char *cmd);
+
+void SSL_add_ssl_module(void);
+int SSL_config(SSL *s, const char *name);
+int SSL_CTX_config(SSL_CTX *ctx, const char *name);
+
+# ifndef OPENSSL_NO_SSL_TRACE
+void SSL_trace(int write_p, int version, int content_type,
+               const void *buf, size_t len, SSL *ssl, void *arg);
+# endif
+
+# ifndef OPENSSL_NO_SOCK
+int DTLSv1_listen(SSL *s, BIO_ADDR *client);
+# endif
+
+# ifndef OPENSSL_NO_CT
+
+/*
+ * A callback for verifying that the received SCTs are sufficient.
+ * Expected to return 1 if they are sufficient, otherwise 0.
+ * May return a negative integer if an error occurs.
+ * A connection should be aborted if the SCTs are deemed insufficient.
+ */
+typedef int (*ssl_ct_validation_cb)(const CT_POLICY_EVAL_CTX *ctx,
+                                    const STACK_OF(SCT) *scts, void *arg);
+
+/*
+ * Sets a |callback| that is invoked upon receipt of ServerHelloDone to validate
+ * the received SCTs.
+ * If the callback returns a non-positive result, the connection is terminated.
+ * Call this function before beginning a handshake.
+ * If a NULL |callback| is provided, SCT validation is disabled.
+ * |arg| is arbitrary userdata that will be passed to the callback whenever it
+ * is invoked. Ownership of |arg| remains with the caller.
+ *
+ * NOTE: A side-effect of setting a CT callback is that an OCSP stapled response
+ *       will be requested.
+ */
+int SSL_set_ct_validation_callback(SSL *s, ssl_ct_validation_cb callback,
+                                   void *arg);
+int SSL_CTX_set_ct_validation_callback(SSL_CTX *ctx,
+                                       ssl_ct_validation_cb callback,
+                                       void *arg);
+#define SSL_disable_ct(s) \
+        ((void) SSL_set_validation_callback((s), NULL, NULL))
+#define SSL_CTX_disable_ct(ctx) \
+        ((void) SSL_CTX_set_validation_callback((ctx), NULL, NULL))
+
+/*
+ * The validation type enumerates the available behaviours of the built-in SSL
+ * CT validation callback selected via SSL_enable_ct() and SSL_CTX_enable_ct().
+ * The underlying callback is a static function in libssl.
+ */
+enum {
+    SSL_CT_VALIDATION_PERMISSIVE = 0,
+    SSL_CT_VALIDATION_STRICT
+};
+
+/*
+ * Enable CT by setting up a callback that implements one of the built-in
+ * validation variants.  The SSL_CT_VALIDATION_PERMISSIVE variant always
+ * continues the handshake, the application can make appropriate decisions at
+ * handshake completion.  The SSL_CT_VALIDATION_STRICT variant requires at
+ * least one valid SCT, or else handshake termination will be requested.  The
+ * handshake may continue anyway if SSL_VERIFY_NONE is in effect.
+ */
+int SSL_enable_ct(SSL *s, int validation_mode);
+int SSL_CTX_enable_ct(SSL_CTX *ctx, int validation_mode);
+
+/*
+ * Report whether a non-NULL callback is enabled.
+ */
+int SSL_ct_is_enabled(const SSL *s);
+int SSL_CTX_ct_is_enabled(const SSL_CTX *ctx);
+
+/* Gets the SCTs received from a connection */
+const STACK_OF(SCT) *SSL_get0_peer_scts(SSL *s);
+
+/*
+ * Loads the CT log list from the default location.
+ * If a CTLOG_STORE has previously been set using SSL_CTX_set_ctlog_store,
+ * the log information loaded from this file will be appended to the
+ * CTLOG_STORE.
+ * Returns 1 on success, 0 otherwise.
+ */
+int SSL_CTX_set_default_ctlog_list_file(SSL_CTX *ctx);
+
+/*
+ * Loads the CT log list from the specified file path.
+ * If a CTLOG_STORE has previously been set using SSL_CTX_set_ctlog_store,
+ * the log information loaded from this file will be appended to the
+ * CTLOG_STORE.
+ * Returns 1 on success, 0 otherwise.
+ */
+int SSL_CTX_set_ctlog_list_file(SSL_CTX *ctx, const char *path);
+
+/*
+ * Sets the CT log list used by all SSL connections created from this SSL_CTX.
+ * Ownership of the CTLOG_STORE is transferred to the SSL_CTX.
+ */
+void SSL_CTX_set0_ctlog_store(SSL_CTX *ctx, CTLOG_STORE *logs);
+
+/*
+ * Gets the CT log list used by all SSL connections created from this SSL_CTX.
+ * This will be NULL unless one of the following functions has been called:
+ * - SSL_CTX_set_default_ctlog_list_file
+ * - SSL_CTX_set_ctlog_list_file
+ * - SSL_CTX_set_ctlog_store
+ */
+const CTLOG_STORE *SSL_CTX_get0_ctlog_store(const SSL_CTX *ctx);
+
+# endif /* OPENSSL_NO_CT */
+
+/* What the "other" parameter contains in security callback */
+/* Mask for type */
+# define SSL_SECOP_OTHER_TYPE    0xffff0000
+# define SSL_SECOP_OTHER_NONE    0
+# define SSL_SECOP_OTHER_CIPHER  (1 << 16)
+# define SSL_SECOP_OTHER_CURVE   (2 << 16)
+# define SSL_SECOP_OTHER_DH      (3 << 16)
+# define SSL_SECOP_OTHER_PKEY    (4 << 16)
+# define SSL_SECOP_OTHER_SIGALG  (5 << 16)
+# define SSL_SECOP_OTHER_CERT    (6 << 16)
+
+/* Indicated operation refers to peer key or certificate */
+# define SSL_SECOP_PEER          0x1000
+
+/* Values for "op" parameter in security callback */
+
+/* Called to filter ciphers */
+/* Ciphers client supports */
+# define SSL_SECOP_CIPHER_SUPPORTED      (1 | SSL_SECOP_OTHER_CIPHER)
+/* Cipher shared by client/server */
+# define SSL_SECOP_CIPHER_SHARED         (2 | SSL_SECOP_OTHER_CIPHER)
+/* Sanity check of cipher server selects */
+# define SSL_SECOP_CIPHER_CHECK          (3 | SSL_SECOP_OTHER_CIPHER)
+/* Curves supported by client */
+# define SSL_SECOP_CURVE_SUPPORTED       (4 | SSL_SECOP_OTHER_CURVE)
+/* Curves shared by client/server */
+# define SSL_SECOP_CURVE_SHARED          (5 | SSL_SECOP_OTHER_CURVE)
+/* Sanity check of curve server selects */
+# define SSL_SECOP_CURVE_CHECK           (6 | SSL_SECOP_OTHER_CURVE)
+/* Temporary DH key */
+# define SSL_SECOP_TMP_DH                (7 | SSL_SECOP_OTHER_PKEY)
+/* SSL/TLS version */
+# define SSL_SECOP_VERSION               (9 | SSL_SECOP_OTHER_NONE)
+/* Session tickets */
+# define SSL_SECOP_TICKET                (10 | SSL_SECOP_OTHER_NONE)
+/* Supported signature algorithms sent to peer */
+# define SSL_SECOP_SIGALG_SUPPORTED      (11 | SSL_SECOP_OTHER_SIGALG)
+/* Shared signature algorithm */
+# define SSL_SECOP_SIGALG_SHARED         (12 | SSL_SECOP_OTHER_SIGALG)
+/* Sanity check signature algorithm allowed */
+# define SSL_SECOP_SIGALG_CHECK          (13 | SSL_SECOP_OTHER_SIGALG)
+/* Used to get mask of supported public key signature algorithms */
+# define SSL_SECOP_SIGALG_MASK           (14 | SSL_SECOP_OTHER_SIGALG)
+/* Use to see if compression is allowed */
+# define SSL_SECOP_COMPRESSION           (15 | SSL_SECOP_OTHER_NONE)
+/* EE key in certificate */
+# define SSL_SECOP_EE_KEY                (16 | SSL_SECOP_OTHER_CERT)
+/* CA key in certificate */
+# define SSL_SECOP_CA_KEY                (17 | SSL_SECOP_OTHER_CERT)
+/* CA digest algorithm in certificate */
+# define SSL_SECOP_CA_MD                 (18 | SSL_SECOP_OTHER_CERT)
+/* Peer EE key in certificate */
+# define SSL_SECOP_PEER_EE_KEY           (SSL_SECOP_EE_KEY | SSL_SECOP_PEER)
+/* Peer CA key in certificate */
+# define SSL_SECOP_PEER_CA_KEY           (SSL_SECOP_CA_KEY | SSL_SECOP_PEER)
+/* Peer CA digest algorithm in certificate */
+# define SSL_SECOP_PEER_CA_MD            (SSL_SECOP_CA_MD | SSL_SECOP_PEER)
+
+void SSL_set_security_level(SSL *s, int level);
+__owur int SSL_get_security_level(const SSL *s);
+void SSL_set_security_callback(SSL *s,
+                               int (*cb) (const SSL *s, const SSL_CTX *ctx,
+                                          int op, int bits, int nid,
+                                          void *other, void *ex));
+int (*SSL_get_security_callback(const SSL *s)) (const SSL *s,
+                                                const SSL_CTX *ctx, int op,
+                                                int bits, int nid, void *other,
+                                                void *ex);
+void SSL_set0_security_ex_data(SSL *s, void *ex);
+__owur void *SSL_get0_security_ex_data(const SSL *s);
+
+void SSL_CTX_set_security_level(SSL_CTX *ctx, int level);
+__owur int SSL_CTX_get_security_level(const SSL_CTX *ctx);
+void SSL_CTX_set_security_callback(SSL_CTX *ctx,
+                                   int (*cb) (const SSL *s, const SSL_CTX *ctx,
+                                              int op, int bits, int nid,
+                                              void *other, void *ex));
+int (*SSL_CTX_get_security_callback(const SSL_CTX *ctx)) (const SSL *s,
+                                                          const SSL_CTX *ctx,
+                                                          int op, int bits,
+                                                          int nid,
+                                                          void *other,
+                                                          void *ex);
+void SSL_CTX_set0_security_ex_data(SSL_CTX *ctx, void *ex);
+__owur void *SSL_CTX_get0_security_ex_data(const SSL_CTX *ctx);
+
+/* OPENSSL_INIT flag 0x010000 reserved for internal use */
+# define OPENSSL_INIT_NO_LOAD_SSL_STRINGS    0x00100000L
+# define OPENSSL_INIT_LOAD_SSL_STRINGS       0x00200000L
+
+# define OPENSSL_INIT_SSL_DEFAULT \
+        (OPENSSL_INIT_LOAD_SSL_STRINGS | OPENSSL_INIT_LOAD_CRYPTO_STRINGS)
+
+int OPENSSL_init_ssl(uint64_t opts, const OPENSSL_INIT_SETTINGS *settings);
+
+# ifndef OPENSSL_NO_UNIT_TEST
+__owur const struct openssl_ssl_test_functions *SSL_test_functions(void);
+# endif
+
+__owur int SSL_free_buffers(SSL *ssl);
+__owur int SSL_alloc_buffers(SSL *ssl);
+
+/* Status codes passed to the decrypt session ticket callback. Some of these
+ * are for internal use only and are never passed to the callback. */
+typedef int SSL_TICKET_STATUS;
+
+/* Support for ticket appdata */
+/* fatal error, malloc failure */
+# define SSL_TICKET_FATAL_ERR_MALLOC 0
+/* fatal error, either from parsing or decrypting the ticket */
+# define SSL_TICKET_FATAL_ERR_OTHER  1
+/* No ticket present */
+# define SSL_TICKET_NONE             2
+/* Empty ticket present */
+# define SSL_TICKET_EMPTY            3
+/* the ticket couldn't be decrypted */
+# define SSL_TICKET_NO_DECRYPT       4
+/* a ticket was successfully decrypted */
+# define SSL_TICKET_SUCCESS          5
+/* same as above but the ticket needs to be renewed */
+# define SSL_TICKET_SUCCESS_RENEW    6
+
+/* Return codes for the decrypt session ticket callback */
+typedef int SSL_TICKET_RETURN;
+
+/* An error occurred */
+#define SSL_TICKET_RETURN_ABORT             0
+/* Do not use the ticket, do not send a renewed ticket to the client */
+#define SSL_TICKET_RETURN_IGNORE            1
+/* Do not use the ticket, send a renewed ticket to the client */
+#define SSL_TICKET_RETURN_IGNORE_RENEW      2
+/* Use the ticket, do not send a renewed ticket to the client */
+#define SSL_TICKET_RETURN_USE               3
+/* Use the ticket, send a renewed ticket to the client */
+#define SSL_TICKET_RETURN_USE_RENEW         4
+
+typedef int (*SSL_CTX_generate_session_ticket_fn)(SSL *s, void *arg);
+typedef SSL_TICKET_RETURN (*SSL_CTX_decrypt_session_ticket_fn)(SSL *s, SSL_SESSION *ss,
+                                                               const unsigned char *keyname,
+                                                               size_t keyname_length,
+                                                               SSL_TICKET_STATUS status,
+                                                               void *arg);
+int SSL_CTX_set_session_ticket_cb(SSL_CTX *ctx,
+                                  SSL_CTX_generate_session_ticket_fn gen_cb,
+                                  SSL_CTX_decrypt_session_ticket_fn dec_cb,
+                                  void *arg);
+int SSL_SESSION_set1_ticket_appdata(SSL_SESSION *ss, const void *data, size_t len);
+int SSL_SESSION_get0_ticket_appdata(SSL_SESSION *ss, void **data, size_t *len);
+
+extern const char SSL_version_str[];
+
+typedef unsigned int (*DTLS_timer_cb)(SSL *s, unsigned int timer_us);
+
+void DTLS_set_timer_cb(SSL *s, DTLS_timer_cb cb);
+
+
+typedef int (*SSL_allow_early_data_cb_fn)(SSL *s, void *arg);
+void SSL_CTX_set_allow_early_data_cb(SSL_CTX *ctx,
+                                     SSL_allow_early_data_cb_fn cb,
+                                     void *arg);
+void SSL_set_allow_early_data_cb(SSL *s,
+                                 SSL_allow_early_data_cb_fn cb,
+                                 void *arg);
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/ssl2.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ssl2.h
new file mode 100644
index 000000000..5321bd272
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ssl2.h
@@ -0,0 +1,24 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_SSL2_H
+# define HEADER_SSL2_H
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+# define SSL2_VERSION            0x0002
+
+# define SSL2_MT_CLIENT_HELLO            1
+
+#ifdef  __cplusplus
+}
+#endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/ssl3.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ssl3.h
new file mode 100644
index 000000000..8d01fcc48
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ssl3.h
@@ -0,0 +1,339 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_SSL3_H
+# define HEADER_SSL3_H
+
+# include <openssl/comp.h>
+# include <openssl/buffer.h>
+# include <openssl/evp.h>
+# include <openssl/ssl.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+/*
+ * Signalling cipher suite value from RFC 5746
+ * (TLS_EMPTY_RENEGOTIATION_INFO_SCSV)
+ */
+# define SSL3_CK_SCSV                            0x030000FF
+
+/*
+ * Signalling cipher suite value from draft-ietf-tls-downgrade-scsv-00
+ * (TLS_FALLBACK_SCSV)
+ */
+# define SSL3_CK_FALLBACK_SCSV                   0x03005600
+
+# define SSL3_CK_RSA_NULL_MD5                    0x03000001
+# define SSL3_CK_RSA_NULL_SHA                    0x03000002
+# define SSL3_CK_RSA_RC4_40_MD5                  0x03000003
+# define SSL3_CK_RSA_RC4_128_MD5                 0x03000004
+# define SSL3_CK_RSA_RC4_128_SHA                 0x03000005
+# define SSL3_CK_RSA_RC2_40_MD5                  0x03000006
+# define SSL3_CK_RSA_IDEA_128_SHA                0x03000007
+# define SSL3_CK_RSA_DES_40_CBC_SHA              0x03000008
+# define SSL3_CK_RSA_DES_64_CBC_SHA              0x03000009
+# define SSL3_CK_RSA_DES_192_CBC3_SHA            0x0300000A
+
+# define SSL3_CK_DH_DSS_DES_40_CBC_SHA           0x0300000B
+# define SSL3_CK_DH_DSS_DES_64_CBC_SHA           0x0300000C
+# define SSL3_CK_DH_DSS_DES_192_CBC3_SHA         0x0300000D
+# define SSL3_CK_DH_RSA_DES_40_CBC_SHA           0x0300000E
+# define SSL3_CK_DH_RSA_DES_64_CBC_SHA           0x0300000F
+# define SSL3_CK_DH_RSA_DES_192_CBC3_SHA         0x03000010
+
+# define SSL3_CK_DHE_DSS_DES_40_CBC_SHA          0x03000011
+# define SSL3_CK_EDH_DSS_DES_40_CBC_SHA          SSL3_CK_DHE_DSS_DES_40_CBC_SHA
+# define SSL3_CK_DHE_DSS_DES_64_CBC_SHA          0x03000012
+# define SSL3_CK_EDH_DSS_DES_64_CBC_SHA          SSL3_CK_DHE_DSS_DES_64_CBC_SHA
+# define SSL3_CK_DHE_DSS_DES_192_CBC3_SHA        0x03000013
+# define SSL3_CK_EDH_DSS_DES_192_CBC3_SHA        SSL3_CK_DHE_DSS_DES_192_CBC3_SHA
+# define SSL3_CK_DHE_RSA_DES_40_CBC_SHA          0x03000014
+# define SSL3_CK_EDH_RSA_DES_40_CBC_SHA          SSL3_CK_DHE_RSA_DES_40_CBC_SHA
+# define SSL3_CK_DHE_RSA_DES_64_CBC_SHA          0x03000015
+# define SSL3_CK_EDH_RSA_DES_64_CBC_SHA          SSL3_CK_DHE_RSA_DES_64_CBC_SHA
+# define SSL3_CK_DHE_RSA_DES_192_CBC3_SHA        0x03000016
+# define SSL3_CK_EDH_RSA_DES_192_CBC3_SHA        SSL3_CK_DHE_RSA_DES_192_CBC3_SHA
+
+# define SSL3_CK_ADH_RC4_40_MD5                  0x03000017
+# define SSL3_CK_ADH_RC4_128_MD5                 0x03000018
+# define SSL3_CK_ADH_DES_40_CBC_SHA              0x03000019
+# define SSL3_CK_ADH_DES_64_CBC_SHA              0x0300001A
+# define SSL3_CK_ADH_DES_192_CBC_SHA             0x0300001B
+
+/* a bundle of RFC standard cipher names, generated from ssl3_ciphers[] */
+# define SSL3_RFC_RSA_NULL_MD5                   "TLS_RSA_WITH_NULL_MD5"
+# define SSL3_RFC_RSA_NULL_SHA                   "TLS_RSA_WITH_NULL_SHA"
+# define SSL3_RFC_RSA_DES_192_CBC3_SHA           "TLS_RSA_WITH_3DES_EDE_CBC_SHA"
+# define SSL3_RFC_DHE_DSS_DES_192_CBC3_SHA       "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"
+# define SSL3_RFC_DHE_RSA_DES_192_CBC3_SHA       "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"
+# define SSL3_RFC_ADH_DES_192_CBC_SHA            "TLS_DH_anon_WITH_3DES_EDE_CBC_SHA"
+# define SSL3_RFC_RSA_IDEA_128_SHA               "TLS_RSA_WITH_IDEA_CBC_SHA"
+# define SSL3_RFC_RSA_RC4_128_MD5                "TLS_RSA_WITH_RC4_128_MD5"
+# define SSL3_RFC_RSA_RC4_128_SHA                "TLS_RSA_WITH_RC4_128_SHA"
+# define SSL3_RFC_ADH_RC4_128_MD5                "TLS_DH_anon_WITH_RC4_128_MD5"
+
+# define SSL3_TXT_RSA_NULL_MD5                   "NULL-MD5"
+# define SSL3_TXT_RSA_NULL_SHA                   "NULL-SHA"
+# define SSL3_TXT_RSA_RC4_40_MD5                 "EXP-RC4-MD5"
+# define SSL3_TXT_RSA_RC4_128_MD5                "RC4-MD5"
+# define SSL3_TXT_RSA_RC4_128_SHA                "RC4-SHA"
+# define SSL3_TXT_RSA_RC2_40_MD5                 "EXP-RC2-CBC-MD5"
+# define SSL3_TXT_RSA_IDEA_128_SHA               "IDEA-CBC-SHA"
+# define SSL3_TXT_RSA_DES_40_CBC_SHA             "EXP-DES-CBC-SHA"
+# define SSL3_TXT_RSA_DES_64_CBC_SHA             "DES-CBC-SHA"
+# define SSL3_TXT_RSA_DES_192_CBC3_SHA           "DES-CBC3-SHA"
+
+# define SSL3_TXT_DH_DSS_DES_40_CBC_SHA          "EXP-DH-DSS-DES-CBC-SHA"
+# define SSL3_TXT_DH_DSS_DES_64_CBC_SHA          "DH-DSS-DES-CBC-SHA"
+# define SSL3_TXT_DH_DSS_DES_192_CBC3_SHA        "DH-DSS-DES-CBC3-SHA"
+# define SSL3_TXT_DH_RSA_DES_40_CBC_SHA          "EXP-DH-RSA-DES-CBC-SHA"
+# define SSL3_TXT_DH_RSA_DES_64_CBC_SHA          "DH-RSA-DES-CBC-SHA"
+# define SSL3_TXT_DH_RSA_DES_192_CBC3_SHA        "DH-RSA-DES-CBC3-SHA"
+
+# define SSL3_TXT_DHE_DSS_DES_40_CBC_SHA         "EXP-DHE-DSS-DES-CBC-SHA"
+# define SSL3_TXT_DHE_DSS_DES_64_CBC_SHA         "DHE-DSS-DES-CBC-SHA"
+# define SSL3_TXT_DHE_DSS_DES_192_CBC3_SHA       "DHE-DSS-DES-CBC3-SHA"
+# define SSL3_TXT_DHE_RSA_DES_40_CBC_SHA         "EXP-DHE-RSA-DES-CBC-SHA"
+# define SSL3_TXT_DHE_RSA_DES_64_CBC_SHA         "DHE-RSA-DES-CBC-SHA"
+# define SSL3_TXT_DHE_RSA_DES_192_CBC3_SHA       "DHE-RSA-DES-CBC3-SHA"
+
+/*
+ * This next block of six "EDH" labels is for backward compatibility with
+ * older versions of OpenSSL.  New code should use the six "DHE" labels above
+ * instead:
+ */
+# define SSL3_TXT_EDH_DSS_DES_40_CBC_SHA         "EXP-EDH-DSS-DES-CBC-SHA"
+# define SSL3_TXT_EDH_DSS_DES_64_CBC_SHA         "EDH-DSS-DES-CBC-SHA"
+# define SSL3_TXT_EDH_DSS_DES_192_CBC3_SHA       "EDH-DSS-DES-CBC3-SHA"
+# define SSL3_TXT_EDH_RSA_DES_40_CBC_SHA         "EXP-EDH-RSA-DES-CBC-SHA"
+# define SSL3_TXT_EDH_RSA_DES_64_CBC_SHA         "EDH-RSA-DES-CBC-SHA"
+# define SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA       "EDH-RSA-DES-CBC3-SHA"
+
+# define SSL3_TXT_ADH_RC4_40_MD5                 "EXP-ADH-RC4-MD5"
+# define SSL3_TXT_ADH_RC4_128_MD5                "ADH-RC4-MD5"
+# define SSL3_TXT_ADH_DES_40_CBC_SHA             "EXP-ADH-DES-CBC-SHA"
+# define SSL3_TXT_ADH_DES_64_CBC_SHA             "ADH-DES-CBC-SHA"
+# define SSL3_TXT_ADH_DES_192_CBC_SHA            "ADH-DES-CBC3-SHA"
+
+# define SSL3_SSL_SESSION_ID_LENGTH              32
+# define SSL3_MAX_SSL_SESSION_ID_LENGTH          32
+
+# define SSL3_MASTER_SECRET_SIZE                 48
+# define SSL3_RANDOM_SIZE                        32
+# define SSL3_SESSION_ID_SIZE                    32
+# define SSL3_RT_HEADER_LENGTH                   5
+
+# define SSL3_HM_HEADER_LENGTH                  4
+
+# ifndef SSL3_ALIGN_PAYLOAD
+ /*
+  * Some will argue that this increases memory footprint, but it's not
+  * actually true. Point is that malloc has to return at least 64-bit aligned
+  * pointers, meaning that allocating 5 bytes wastes 3 bytes in either case.
+  * Suggested pre-gaping simply moves these wasted bytes from the end of
+  * allocated region to its front, but makes data payload aligned, which
+  * improves performance:-)
+  */
+#  define SSL3_ALIGN_PAYLOAD                     8
+# else
+#  if (SSL3_ALIGN_PAYLOAD&(SSL3_ALIGN_PAYLOAD-1))!=0
+#   error "insane SSL3_ALIGN_PAYLOAD"
+#   undef SSL3_ALIGN_PAYLOAD
+#  endif
+# endif
+
+/*
+ * This is the maximum MAC (digest) size used by the SSL library. Currently
+ * maximum of 20 is used by SHA1, but we reserve for future extension for
+ * 512-bit hashes.
+ */
+
+# define SSL3_RT_MAX_MD_SIZE                     64
+
+/*
+ * Maximum block size used in all ciphersuites. Currently 16 for AES.
+ */
+
+# define SSL_RT_MAX_CIPHER_BLOCK_SIZE            16
+
+# define SSL3_RT_MAX_EXTRA                       (16384)
+
+/* Maximum plaintext length: defined by SSL/TLS standards */
+# define SSL3_RT_MAX_PLAIN_LENGTH                16384
+/* Maximum compression overhead: defined by SSL/TLS standards */
+# define SSL3_RT_MAX_COMPRESSED_OVERHEAD         1024
+
+/*
+ * The standards give a maximum encryption overhead of 1024 bytes. In
+ * practice the value is lower than this. The overhead is the maximum number
+ * of padding bytes (256) plus the mac size.
+ */
+# define SSL3_RT_MAX_ENCRYPTED_OVERHEAD        (256 + SSL3_RT_MAX_MD_SIZE)
+# define SSL3_RT_MAX_TLS13_ENCRYPTED_OVERHEAD  256
+
+/*
+ * OpenSSL currently only uses a padding length of at most one block so the
+ * send overhead is smaller.
+ */
+
+# define SSL3_RT_SEND_MAX_ENCRYPTED_OVERHEAD \
+                        (SSL_RT_MAX_CIPHER_BLOCK_SIZE + SSL3_RT_MAX_MD_SIZE)
+
+/* If compression isn't used don't include the compression overhead */
+
+# ifdef OPENSSL_NO_COMP
+#  define SSL3_RT_MAX_COMPRESSED_LENGTH           SSL3_RT_MAX_PLAIN_LENGTH
+# else
+#  define SSL3_RT_MAX_COMPRESSED_LENGTH   \
+            (SSL3_RT_MAX_PLAIN_LENGTH+SSL3_RT_MAX_COMPRESSED_OVERHEAD)
+# endif
+# define SSL3_RT_MAX_ENCRYPTED_LENGTH    \
+            (SSL3_RT_MAX_ENCRYPTED_OVERHEAD+SSL3_RT_MAX_COMPRESSED_LENGTH)
+# define SSL3_RT_MAX_TLS13_ENCRYPTED_LENGTH \
+            (SSL3_RT_MAX_PLAIN_LENGTH + SSL3_RT_MAX_TLS13_ENCRYPTED_OVERHEAD)
+# define SSL3_RT_MAX_PACKET_SIZE         \
+            (SSL3_RT_MAX_ENCRYPTED_LENGTH+SSL3_RT_HEADER_LENGTH)
+
+# define SSL3_MD_CLIENT_FINISHED_CONST   "\x43\x4C\x4E\x54"
+# define SSL3_MD_SERVER_FINISHED_CONST   "\x53\x52\x56\x52"
+
+# define SSL3_VERSION                    0x0300
+# define SSL3_VERSION_MAJOR              0x03
+# define SSL3_VERSION_MINOR              0x00
+
+# define SSL3_RT_CHANGE_CIPHER_SPEC      20
+# define SSL3_RT_ALERT                   21
+# define SSL3_RT_HANDSHAKE               22
+# define SSL3_RT_APPLICATION_DATA        23
+# define DTLS1_RT_HEARTBEAT              24
+
+/* Pseudo content types to indicate additional parameters */
+# define TLS1_RT_CRYPTO                  0x1000
+# define TLS1_RT_CRYPTO_PREMASTER        (TLS1_RT_CRYPTO | 0x1)
+# define TLS1_RT_CRYPTO_CLIENT_RANDOM    (TLS1_RT_CRYPTO | 0x2)
+# define TLS1_RT_CRYPTO_SERVER_RANDOM    (TLS1_RT_CRYPTO | 0x3)
+# define TLS1_RT_CRYPTO_MASTER           (TLS1_RT_CRYPTO | 0x4)
+
+# define TLS1_RT_CRYPTO_READ             0x0000
+# define TLS1_RT_CRYPTO_WRITE            0x0100
+# define TLS1_RT_CRYPTO_MAC              (TLS1_RT_CRYPTO | 0x5)
+# define TLS1_RT_CRYPTO_KEY              (TLS1_RT_CRYPTO | 0x6)
+# define TLS1_RT_CRYPTO_IV               (TLS1_RT_CRYPTO | 0x7)
+# define TLS1_RT_CRYPTO_FIXED_IV         (TLS1_RT_CRYPTO | 0x8)
+
+/* Pseudo content types for SSL/TLS header info */
+# define SSL3_RT_HEADER                  0x100
+# define SSL3_RT_INNER_CONTENT_TYPE      0x101
+
+# define SSL3_AL_WARNING                 1
+# define SSL3_AL_FATAL                   2
+
+# define SSL3_AD_CLOSE_NOTIFY             0
+# define SSL3_AD_UNEXPECTED_MESSAGE      10/* fatal */
+# define SSL3_AD_BAD_RECORD_MAC          20/* fatal */
+# define SSL3_AD_DECOMPRESSION_FAILURE   30/* fatal */
+# define SSL3_AD_HANDSHAKE_FAILURE       40/* fatal */
+# define SSL3_AD_NO_CERTIFICATE          41
+# define SSL3_AD_BAD_CERTIFICATE         42
+# define SSL3_AD_UNSUPPORTED_CERTIFICATE 43
+# define SSL3_AD_CERTIFICATE_REVOKED     44
+# define SSL3_AD_CERTIFICATE_EXPIRED     45
+# define SSL3_AD_CERTIFICATE_UNKNOWN     46
+# define SSL3_AD_ILLEGAL_PARAMETER       47/* fatal */
+
+# define TLS1_HB_REQUEST         1
+# define TLS1_HB_RESPONSE        2
+
+
+# define SSL3_CT_RSA_SIGN                        1
+# define SSL3_CT_DSS_SIGN                        2
+# define SSL3_CT_RSA_FIXED_DH                    3
+# define SSL3_CT_DSS_FIXED_DH                    4
+# define SSL3_CT_RSA_EPHEMERAL_DH                5
+# define SSL3_CT_DSS_EPHEMERAL_DH                6
+# define SSL3_CT_FORTEZZA_DMS                    20
+/*
+ * SSL3_CT_NUMBER is used to size arrays and it must be large enough to
+ * contain all of the cert types defined for *either* SSLv3 and TLSv1.
+ */
+# define SSL3_CT_NUMBER                  10
+
+# if defined(TLS_CT_NUMBER)
+#  if TLS_CT_NUMBER != SSL3_CT_NUMBER
+#    error "SSL/TLS CT_NUMBER values do not match"
+#  endif
+# endif
+
+/* No longer used as of OpenSSL 1.1.1 */
+# define SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS       0x0001
+
+/* Removed from OpenSSL 1.1.0 */
+# define TLS1_FLAGS_TLS_PADDING_BUG              0x0
+
+# define TLS1_FLAGS_SKIP_CERT_VERIFY             0x0010
+
+/* Set if we encrypt then mac instead of usual mac then encrypt */
+# define TLS1_FLAGS_ENCRYPT_THEN_MAC_READ        0x0100
+# define TLS1_FLAGS_ENCRYPT_THEN_MAC             TLS1_FLAGS_ENCRYPT_THEN_MAC_READ
+
+/* Set if extended master secret extension received from peer */
+# define TLS1_FLAGS_RECEIVED_EXTMS               0x0200
+
+# define TLS1_FLAGS_ENCRYPT_THEN_MAC_WRITE       0x0400
+
+# define TLS1_FLAGS_STATELESS                    0x0800
+
+# define SSL3_MT_HELLO_REQUEST                   0
+# define SSL3_MT_CLIENT_HELLO                    1
+# define SSL3_MT_SERVER_HELLO                    2
+# define SSL3_MT_NEWSESSION_TICKET               4
+# define SSL3_MT_END_OF_EARLY_DATA               5
+# define SSL3_MT_ENCRYPTED_EXTENSIONS            8
+# define SSL3_MT_CERTIFICATE                     11
+# define SSL3_MT_SERVER_KEY_EXCHANGE             12
+# define SSL3_MT_CERTIFICATE_REQUEST             13
+# define SSL3_MT_SERVER_DONE                     14
+# define SSL3_MT_CERTIFICATE_VERIFY              15
+# define SSL3_MT_CLIENT_KEY_EXCHANGE             16
+# define SSL3_MT_FINISHED                        20
+# define SSL3_MT_CERTIFICATE_URL                 21
+# define SSL3_MT_CERTIFICATE_STATUS              22
+# define SSL3_MT_SUPPLEMENTAL_DATA               23
+# define SSL3_MT_KEY_UPDATE                      24
+# ifndef OPENSSL_NO_NEXTPROTONEG
+#  define SSL3_MT_NEXT_PROTO                     67
+# endif
+# define SSL3_MT_MESSAGE_HASH                    254
+# define DTLS1_MT_HELLO_VERIFY_REQUEST           3
+
+/* Dummy message type for handling CCS like a normal handshake message */
+# define SSL3_MT_CHANGE_CIPHER_SPEC              0x0101
+
+# define SSL3_MT_CCS                             1
+
+/* These are used when changing over to a new cipher */
+# define SSL3_CC_READ            0x001
+# define SSL3_CC_WRITE           0x002
+# define SSL3_CC_CLIENT          0x010
+# define SSL3_CC_SERVER          0x020
+# define SSL3_CC_EARLY           0x040
+# define SSL3_CC_HANDSHAKE       0x080
+# define SSL3_CC_APPLICATION     0x100
+# define SSL3_CHANGE_CIPHER_CLIENT_WRITE (SSL3_CC_CLIENT|SSL3_CC_WRITE)
+# define SSL3_CHANGE_CIPHER_SERVER_READ  (SSL3_CC_SERVER|SSL3_CC_READ)
+# define SSL3_CHANGE_CIPHER_CLIENT_READ  (SSL3_CC_CLIENT|SSL3_CC_READ)
+# define SSL3_CHANGE_CIPHER_SERVER_WRITE (SSL3_CC_SERVER|SSL3_CC_WRITE)
+
+#ifdef  __cplusplus
+}
+#endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/sslerr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/sslerr.h
new file mode 100644
index 000000000..a50a075b4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/sslerr.h
@@ -0,0 +1,768 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_SSLERR_H
+# define HEADER_SSLERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_SSL_strings(void);
+
+/*
+ * SSL function codes.
+ */
+# define SSL_F_ADD_CLIENT_KEY_SHARE_EXT                   438
+# define SSL_F_ADD_KEY_SHARE                              512
+# define SSL_F_BYTES_TO_CIPHER_LIST                       519
+# define SSL_F_CHECK_SUITEB_CIPHER_LIST                   331
+# define SSL_F_CIPHERSUITE_CB                             622
+# define SSL_F_CONSTRUCT_CA_NAMES                         552
+# define SSL_F_CONSTRUCT_KEY_EXCHANGE_TBS                 553
+# define SSL_F_CONSTRUCT_STATEFUL_TICKET                  636
+# define SSL_F_CONSTRUCT_STATELESS_TICKET                 637
+# define SSL_F_CREATE_SYNTHETIC_MESSAGE_HASH              539
+# define SSL_F_CREATE_TICKET_PREQUEL                      638
+# define SSL_F_CT_MOVE_SCTS                               345
+# define SSL_F_CT_STRICT                                  349
+# define SSL_F_CUSTOM_EXT_ADD                             554
+# define SSL_F_CUSTOM_EXT_PARSE                           555
+# define SSL_F_D2I_SSL_SESSION                            103
+# define SSL_F_DANE_CTX_ENABLE                            347
+# define SSL_F_DANE_MTYPE_SET                             393
+# define SSL_F_DANE_TLSA_ADD                              394
+# define SSL_F_DERIVE_SECRET_KEY_AND_IV                   514
+# define SSL_F_DO_DTLS1_WRITE                             245
+# define SSL_F_DO_SSL3_WRITE                              104
+# define SSL_F_DTLS1_BUFFER_RECORD                        247
+# define SSL_F_DTLS1_CHECK_TIMEOUT_NUM                    318
+# define SSL_F_DTLS1_HEARTBEAT                            305
+# define SSL_F_DTLS1_HM_FRAGMENT_NEW                      623
+# define SSL_F_DTLS1_PREPROCESS_FRAGMENT                  288
+# define SSL_F_DTLS1_PROCESS_BUFFERED_RECORDS             424
+# define SSL_F_DTLS1_PROCESS_RECORD                       257
+# define SSL_F_DTLS1_READ_BYTES                           258
+# define SSL_F_DTLS1_READ_FAILED                          339
+# define SSL_F_DTLS1_RETRANSMIT_MESSAGE                   390
+# define SSL_F_DTLS1_WRITE_APP_DATA_BYTES                 268
+# define SSL_F_DTLS1_WRITE_BYTES                          545
+# define SSL_F_DTLSV1_LISTEN                              350
+# define SSL_F_DTLS_CONSTRUCT_CHANGE_CIPHER_SPEC          371
+# define SSL_F_DTLS_CONSTRUCT_HELLO_VERIFY_REQUEST        385
+# define SSL_F_DTLS_GET_REASSEMBLED_MESSAGE               370
+# define SSL_F_DTLS_PROCESS_HELLO_VERIFY                  386
+# define SSL_F_DTLS_RECORD_LAYER_NEW                      635
+# define SSL_F_DTLS_WAIT_FOR_DRY                          592
+# define SSL_F_EARLY_DATA_COUNT_OK                        532
+# define SSL_F_FINAL_EARLY_DATA                           556
+# define SSL_F_FINAL_EC_PT_FORMATS                        485
+# define SSL_F_FINAL_EMS                                  486
+# define SSL_F_FINAL_KEY_SHARE                            503
+# define SSL_F_FINAL_MAXFRAGMENTLEN                       557
+# define SSL_F_FINAL_RENEGOTIATE                          483
+# define SSL_F_FINAL_SERVER_NAME                          558
+# define SSL_F_FINAL_SIG_ALGS                             497
+# define SSL_F_GET_CERT_VERIFY_TBS_DATA                   588
+# define SSL_F_NSS_KEYLOG_INT                             500
+# define SSL_F_OPENSSL_INIT_SSL                           342
+# define SSL_F_OSSL_STATEM_CLIENT13_READ_TRANSITION       436
+# define SSL_F_OSSL_STATEM_CLIENT13_WRITE_TRANSITION      598
+# define SSL_F_OSSL_STATEM_CLIENT_CONSTRUCT_MESSAGE       430
+# define SSL_F_OSSL_STATEM_CLIENT_POST_PROCESS_MESSAGE    593
+# define SSL_F_OSSL_STATEM_CLIENT_PROCESS_MESSAGE         594
+# define SSL_F_OSSL_STATEM_CLIENT_READ_TRANSITION         417
+# define SSL_F_OSSL_STATEM_CLIENT_WRITE_TRANSITION        599
+# define SSL_F_OSSL_STATEM_SERVER13_READ_TRANSITION       437
+# define SSL_F_OSSL_STATEM_SERVER13_WRITE_TRANSITION      600
+# define SSL_F_OSSL_STATEM_SERVER_CONSTRUCT_MESSAGE       431
+# define SSL_F_OSSL_STATEM_SERVER_POST_PROCESS_MESSAGE    601
+# define SSL_F_OSSL_STATEM_SERVER_POST_WORK               602
+# define SSL_F_OSSL_STATEM_SERVER_PROCESS_MESSAGE         603
+# define SSL_F_OSSL_STATEM_SERVER_READ_TRANSITION         418
+# define SSL_F_OSSL_STATEM_SERVER_WRITE_TRANSITION        604
+# define SSL_F_PARSE_CA_NAMES                             541
+# define SSL_F_PITEM_NEW                                  624
+# define SSL_F_PQUEUE_NEW                                 625
+# define SSL_F_PROCESS_KEY_SHARE_EXT                      439
+# define SSL_F_READ_STATE_MACHINE                         352
+# define SSL_F_SET_CLIENT_CIPHERSUITE                     540
+# define SSL_F_SRP_GENERATE_CLIENT_MASTER_SECRET          595
+# define SSL_F_SRP_GENERATE_SERVER_MASTER_SECRET          589
+# define SSL_F_SRP_VERIFY_SERVER_PARAM                    596
+# define SSL_F_SSL3_CHANGE_CIPHER_STATE                   129
+# define SSL_F_SSL3_CHECK_CERT_AND_ALGORITHM              130
+# define SSL_F_SSL3_CTRL                                  213
+# define SSL_F_SSL3_CTX_CTRL                              133
+# define SSL_F_SSL3_DIGEST_CACHED_RECORDS                 293
+# define SSL_F_SSL3_DO_CHANGE_CIPHER_SPEC                 292
+# define SSL_F_SSL3_ENC                                   608
+# define SSL_F_SSL3_FINAL_FINISH_MAC                      285
+# define SSL_F_SSL3_FINISH_MAC                            587
+# define SSL_F_SSL3_GENERATE_KEY_BLOCK                    238
+# define SSL_F_SSL3_GENERATE_MASTER_SECRET                388
+# define SSL_F_SSL3_GET_RECORD                            143
+# define SSL_F_SSL3_INIT_FINISHED_MAC                     397
+# define SSL_F_SSL3_OUTPUT_CERT_CHAIN                     147
+# define SSL_F_SSL3_READ_BYTES                            148
+# define SSL_F_SSL3_READ_N                                149
+# define SSL_F_SSL3_SETUP_KEY_BLOCK                       157
+# define SSL_F_SSL3_SETUP_READ_BUFFER                     156
+# define SSL_F_SSL3_SETUP_WRITE_BUFFER                    291
+# define SSL_F_SSL3_WRITE_BYTES                           158
+# define SSL_F_SSL3_WRITE_PENDING                         159
+# define SSL_F_SSL_ADD_CERT_CHAIN                         316
+# define SSL_F_SSL_ADD_CERT_TO_BUF                        319
+# define SSL_F_SSL_ADD_CERT_TO_WPACKET                    493
+# define SSL_F_SSL_ADD_CLIENTHELLO_RENEGOTIATE_EXT        298
+# define SSL_F_SSL_ADD_CLIENTHELLO_TLSEXT                 277
+# define SSL_F_SSL_ADD_CLIENTHELLO_USE_SRTP_EXT           307
+# define SSL_F_SSL_ADD_DIR_CERT_SUBJECTS_TO_STACK         215
+# define SSL_F_SSL_ADD_FILE_CERT_SUBJECTS_TO_STACK        216
+# define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        299
+# define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 278
+# define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           308
+# define SSL_F_SSL_BAD_METHOD                             160
+# define SSL_F_SSL_BUILD_CERT_CHAIN                       332
+# define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   161
+# define SSL_F_SSL_CACHE_CIPHERLIST                       520
+# define SSL_F_SSL_CERT_ADD0_CHAIN_CERT                   346
+# define SSL_F_SSL_CERT_DUP                               221
+# define SSL_F_SSL_CERT_NEW                               162
+# define SSL_F_SSL_CERT_SET0_CHAIN                        340
+# define SSL_F_SSL_CHECK_PRIVATE_KEY                      163
+# define SSL_F_SSL_CHECK_SERVERHELLO_TLSEXT               280
+# define SSL_F_SSL_CHECK_SRP_EXT_CLIENTHELLO              606
+# define SSL_F_SSL_CHECK_SRVR_ECC_CERT_AND_ALG            279
+# define SSL_F_SSL_CHOOSE_CLIENT_VERSION                  607
+# define SSL_F_SSL_CIPHER_DESCRIPTION                     626
+# define SSL_F_SSL_CIPHER_LIST_TO_BYTES                   425
+# define SSL_F_SSL_CIPHER_PROCESS_RULESTR                 230
+# define SSL_F_SSL_CIPHER_STRENGTH_SORT                   231
+# define SSL_F_SSL_CLEAR                                  164
+# define SSL_F_SSL_CLIENT_HELLO_GET1_EXTENSIONS_PRESENT   627
+# define SSL_F_SSL_COMP_ADD_COMPRESSION_METHOD            165
+# define SSL_F_SSL_CONF_CMD                               334
+# define SSL_F_SSL_CREATE_CIPHER_LIST                     166
+# define SSL_F_SSL_CTRL                                   232
+# define SSL_F_SSL_CTX_CHECK_PRIVATE_KEY                  168
+# define SSL_F_SSL_CTX_ENABLE_CT                          398
+# define SSL_F_SSL_CTX_MAKE_PROFILES                      309
+# define SSL_F_SSL_CTX_NEW                                169
+# define SSL_F_SSL_CTX_SET_ALPN_PROTOS                    343
+# define SSL_F_SSL_CTX_SET_CIPHER_LIST                    269
+# define SSL_F_SSL_CTX_SET_CLIENT_CERT_ENGINE             290
+# define SSL_F_SSL_CTX_SET_CT_VALIDATION_CALLBACK         396
+# define SSL_F_SSL_CTX_SET_SESSION_ID_CONTEXT             219
+# define SSL_F_SSL_CTX_SET_SSL_VERSION                    170
+# define SSL_F_SSL_CTX_SET_TLSEXT_MAX_FRAGMENT_LENGTH     551
+# define SSL_F_SSL_CTX_USE_CERTIFICATE                    171
+# define SSL_F_SSL_CTX_USE_CERTIFICATE_ASN1               172
+# define SSL_F_SSL_CTX_USE_CERTIFICATE_FILE               173
+# define SSL_F_SSL_CTX_USE_PRIVATEKEY                     174
+# define SSL_F_SSL_CTX_USE_PRIVATEKEY_ASN1                175
+# define SSL_F_SSL_CTX_USE_PRIVATEKEY_FILE                176
+# define SSL_F_SSL_CTX_USE_PSK_IDENTITY_HINT              272
+# define SSL_F_SSL_CTX_USE_RSAPRIVATEKEY                  177
+# define SSL_F_SSL_CTX_USE_RSAPRIVATEKEY_ASN1             178
+# define SSL_F_SSL_CTX_USE_RSAPRIVATEKEY_FILE             179
+# define SSL_F_SSL_CTX_USE_SERVERINFO                     336
+# define SSL_F_SSL_CTX_USE_SERVERINFO_EX                  543
+# define SSL_F_SSL_CTX_USE_SERVERINFO_FILE                337
+# define SSL_F_SSL_DANE_DUP                               403
+# define SSL_F_SSL_DANE_ENABLE                            395
+# define SSL_F_SSL_DERIVE                                 590
+# define SSL_F_SSL_DO_CONFIG                              391
+# define SSL_F_SSL_DO_HANDSHAKE                           180
+# define SSL_F_SSL_DUP_CA_LIST                            408
+# define SSL_F_SSL_ENABLE_CT                              402
+# define SSL_F_SSL_GENERATE_PKEY_GROUP                    559
+# define SSL_F_SSL_GENERATE_SESSION_ID                    547
+# define SSL_F_SSL_GET_NEW_SESSION                        181
+# define SSL_F_SSL_GET_PREV_SESSION                       217
+# define SSL_F_SSL_GET_SERVER_CERT_INDEX                  322
+# define SSL_F_SSL_GET_SIGN_PKEY                          183
+# define SSL_F_SSL_HANDSHAKE_HASH                         560
+# define SSL_F_SSL_INIT_WBIO_BUFFER                       184
+# define SSL_F_SSL_KEY_UPDATE                             515
+# define SSL_F_SSL_LOAD_CLIENT_CA_FILE                    185
+# define SSL_F_SSL_LOG_MASTER_SECRET                      498
+# define SSL_F_SSL_LOG_RSA_CLIENT_KEY_EXCHANGE            499
+# define SSL_F_SSL_MODULE_INIT                            392
+# define SSL_F_SSL_NEW                                    186
+# define SSL_F_SSL_NEXT_PROTO_VALIDATE                    565
+# define SSL_F_SSL_PARSE_CLIENTHELLO_RENEGOTIATE_EXT      300
+# define SSL_F_SSL_PARSE_CLIENTHELLO_TLSEXT               302
+# define SSL_F_SSL_PARSE_CLIENTHELLO_USE_SRTP_EXT         310
+# define SSL_F_SSL_PARSE_SERVERHELLO_RENEGOTIATE_EXT      301
+# define SSL_F_SSL_PARSE_SERVERHELLO_TLSEXT               303
+# define SSL_F_SSL_PARSE_SERVERHELLO_USE_SRTP_EXT         311
+# define SSL_F_SSL_PEEK                                   270
+# define SSL_F_SSL_PEEK_EX                                432
+# define SSL_F_SSL_PEEK_INTERNAL                          522
+# define SSL_F_SSL_READ                                   223
+# define SSL_F_SSL_READ_EARLY_DATA                        529
+# define SSL_F_SSL_READ_EX                                434
+# define SSL_F_SSL_READ_INTERNAL                          523
+# define SSL_F_SSL_RENEGOTIATE                            516
+# define SSL_F_SSL_RENEGOTIATE_ABBREVIATED                546
+# define SSL_F_SSL_SCAN_CLIENTHELLO_TLSEXT                320
+# define SSL_F_SSL_SCAN_SERVERHELLO_TLSEXT                321
+# define SSL_F_SSL_SESSION_DUP                            348
+# define SSL_F_SSL_SESSION_NEW                            189
+# define SSL_F_SSL_SESSION_PRINT_FP                       190
+# define SSL_F_SSL_SESSION_SET1_ID                        423
+# define SSL_F_SSL_SESSION_SET1_ID_CONTEXT                312
+# define SSL_F_SSL_SET_ALPN_PROTOS                        344
+# define SSL_F_SSL_SET_CERT                               191
+# define SSL_F_SSL_SET_CERT_AND_KEY                       621
+# define SSL_F_SSL_SET_CIPHER_LIST                        271
+# define SSL_F_SSL_SET_CT_VALIDATION_CALLBACK             399
+# define SSL_F_SSL_SET_FD                                 192
+# define SSL_F_SSL_SET_PKEY                               193
+# define SSL_F_SSL_SET_RFD                                194
+# define SSL_F_SSL_SET_SESSION                            195
+# define SSL_F_SSL_SET_SESSION_ID_CONTEXT                 218
+# define SSL_F_SSL_SET_SESSION_TICKET_EXT                 294
+# define SSL_F_SSL_SET_TLSEXT_MAX_FRAGMENT_LENGTH         550
+# define SSL_F_SSL_SET_WFD                                196
+# define SSL_F_SSL_SHUTDOWN                               224
+# define SSL_F_SSL_SRP_CTX_INIT                           313
+# define SSL_F_SSL_START_ASYNC_JOB                        389
+# define SSL_F_SSL_UNDEFINED_FUNCTION                     197
+# define SSL_F_SSL_UNDEFINED_VOID_FUNCTION                244
+# define SSL_F_SSL_USE_CERTIFICATE                        198
+# define SSL_F_SSL_USE_CERTIFICATE_ASN1                   199
+# define SSL_F_SSL_USE_CERTIFICATE_FILE                   200
+# define SSL_F_SSL_USE_PRIVATEKEY                         201
+# define SSL_F_SSL_USE_PRIVATEKEY_ASN1                    202
+# define SSL_F_SSL_USE_PRIVATEKEY_FILE                    203
+# define SSL_F_SSL_USE_PSK_IDENTITY_HINT                  273
+# define SSL_F_SSL_USE_RSAPRIVATEKEY                      204
+# define SSL_F_SSL_USE_RSAPRIVATEKEY_ASN1                 205
+# define SSL_F_SSL_USE_RSAPRIVATEKEY_FILE                 206
+# define SSL_F_SSL_VALIDATE_CT                            400
+# define SSL_F_SSL_VERIFY_CERT_CHAIN                      207
+# define SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE           616
+# define SSL_F_SSL_WRITE                                  208
+# define SSL_F_SSL_WRITE_EARLY_DATA                       526
+# define SSL_F_SSL_WRITE_EARLY_FINISH                     527
+# define SSL_F_SSL_WRITE_EX                               433
+# define SSL_F_SSL_WRITE_INTERNAL                         524
+# define SSL_F_STATE_MACHINE                              353
+# define SSL_F_TLS12_CHECK_PEER_SIGALG                    333
+# define SSL_F_TLS12_COPY_SIGALGS                         533
+# define SSL_F_TLS13_CHANGE_CIPHER_STATE                  440
+# define SSL_F_TLS13_ENC                                  609
+# define SSL_F_TLS13_FINAL_FINISH_MAC                     605
+# define SSL_F_TLS13_GENERATE_SECRET                      591
+# define SSL_F_TLS13_HKDF_EXPAND                          561
+# define SSL_F_TLS13_RESTORE_HANDSHAKE_DIGEST_FOR_PHA     617
+# define SSL_F_TLS13_SAVE_HANDSHAKE_DIGEST_FOR_PHA        618
+# define SSL_F_TLS13_SETUP_KEY_BLOCK                      441
+# define SSL_F_TLS1_CHANGE_CIPHER_STATE                   209
+# define SSL_F_TLS1_CHECK_DUPLICATE_EXTENSIONS            341
+# define SSL_F_TLS1_ENC                                   401
+# define SSL_F_TLS1_EXPORT_KEYING_MATERIAL                314
+# define SSL_F_TLS1_GET_CURVELIST                         338
+# define SSL_F_TLS1_PRF                                   284
+# define SSL_F_TLS1_SAVE_U16                              628
+# define SSL_F_TLS1_SETUP_KEY_BLOCK                       211
+# define SSL_F_TLS1_SET_GROUPS                            629
+# define SSL_F_TLS1_SET_RAW_SIGALGS                       630
+# define SSL_F_TLS1_SET_SERVER_SIGALGS                    335
+# define SSL_F_TLS1_SET_SHARED_SIGALGS                    631
+# define SSL_F_TLS1_SET_SIGALGS                           632
+# define SSL_F_TLS_CHOOSE_SIGALG                          513
+# define SSL_F_TLS_CLIENT_KEY_EXCHANGE_POST_WORK          354
+# define SSL_F_TLS_COLLECT_EXTENSIONS                     435
+# define SSL_F_TLS_CONSTRUCT_CERTIFICATE_AUTHORITIES      542
+# define SSL_F_TLS_CONSTRUCT_CERTIFICATE_REQUEST          372
+# define SSL_F_TLS_CONSTRUCT_CERT_STATUS                  429
+# define SSL_F_TLS_CONSTRUCT_CERT_STATUS_BODY             494
+# define SSL_F_TLS_CONSTRUCT_CERT_VERIFY                  496
+# define SSL_F_TLS_CONSTRUCT_CHANGE_CIPHER_SPEC           427
+# define SSL_F_TLS_CONSTRUCT_CKE_DHE                      404
+# define SSL_F_TLS_CONSTRUCT_CKE_ECDHE                    405
+# define SSL_F_TLS_CONSTRUCT_CKE_GOST                     406
+# define SSL_F_TLS_CONSTRUCT_CKE_PSK_PREAMBLE             407
+# define SSL_F_TLS_CONSTRUCT_CKE_RSA                      409
+# define SSL_F_TLS_CONSTRUCT_CKE_SRP                      410
+# define SSL_F_TLS_CONSTRUCT_CLIENT_CERTIFICATE           484
+# define SSL_F_TLS_CONSTRUCT_CLIENT_HELLO                 487
+# define SSL_F_TLS_CONSTRUCT_CLIENT_KEY_EXCHANGE          488
+# define SSL_F_TLS_CONSTRUCT_CLIENT_VERIFY                489
+# define SSL_F_TLS_CONSTRUCT_CTOS_ALPN                    466
+# define SSL_F_TLS_CONSTRUCT_CTOS_CERTIFICATE             355
+# define SSL_F_TLS_CONSTRUCT_CTOS_COOKIE                  535
+# define SSL_F_TLS_CONSTRUCT_CTOS_EARLY_DATA              530
+# define SSL_F_TLS_CONSTRUCT_CTOS_EC_PT_FORMATS           467
+# define SSL_F_TLS_CONSTRUCT_CTOS_EMS                     468
+# define SSL_F_TLS_CONSTRUCT_CTOS_ETM                     469
+# define SSL_F_TLS_CONSTRUCT_CTOS_HELLO                   356
+# define SSL_F_TLS_CONSTRUCT_CTOS_KEY_EXCHANGE            357
+# define SSL_F_TLS_CONSTRUCT_CTOS_KEY_SHARE               470
+# define SSL_F_TLS_CONSTRUCT_CTOS_MAXFRAGMENTLEN          549
+# define SSL_F_TLS_CONSTRUCT_CTOS_NPN                     471
+# define SSL_F_TLS_CONSTRUCT_CTOS_PADDING                 472
+# define SSL_F_TLS_CONSTRUCT_CTOS_POST_HANDSHAKE_AUTH     619
+# define SSL_F_TLS_CONSTRUCT_CTOS_PSK                     501
+# define SSL_F_TLS_CONSTRUCT_CTOS_PSK_KEX_MODES           509
+# define SSL_F_TLS_CONSTRUCT_CTOS_RENEGOTIATE             473
+# define SSL_F_TLS_CONSTRUCT_CTOS_SCT                     474
+# define SSL_F_TLS_CONSTRUCT_CTOS_SERVER_NAME             475
+# define SSL_F_TLS_CONSTRUCT_CTOS_SESSION_TICKET          476
+# define SSL_F_TLS_CONSTRUCT_CTOS_SIG_ALGS                477
+# define SSL_F_TLS_CONSTRUCT_CTOS_SRP                     478
+# define SSL_F_TLS_CONSTRUCT_CTOS_STATUS_REQUEST          479
+# define SSL_F_TLS_CONSTRUCT_CTOS_SUPPORTED_GROUPS        480
+# define SSL_F_TLS_CONSTRUCT_CTOS_SUPPORTED_VERSIONS      481
+# define SSL_F_TLS_CONSTRUCT_CTOS_USE_SRTP                482
+# define SSL_F_TLS_CONSTRUCT_CTOS_VERIFY                  358
+# define SSL_F_TLS_CONSTRUCT_ENCRYPTED_EXTENSIONS         443
+# define SSL_F_TLS_CONSTRUCT_END_OF_EARLY_DATA            536
+# define SSL_F_TLS_CONSTRUCT_EXTENSIONS                   447
+# define SSL_F_TLS_CONSTRUCT_FINISHED                     359
+# define SSL_F_TLS_CONSTRUCT_HELLO_REQUEST                373
+# define SSL_F_TLS_CONSTRUCT_HELLO_RETRY_REQUEST          510
+# define SSL_F_TLS_CONSTRUCT_KEY_UPDATE                   517
+# define SSL_F_TLS_CONSTRUCT_NEW_SESSION_TICKET           428
+# define SSL_F_TLS_CONSTRUCT_NEXT_PROTO                   426
+# define SSL_F_TLS_CONSTRUCT_SERVER_CERTIFICATE           490
+# define SSL_F_TLS_CONSTRUCT_SERVER_HELLO                 491
+# define SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE          492
+# define SSL_F_TLS_CONSTRUCT_STOC_ALPN                    451
+# define SSL_F_TLS_CONSTRUCT_STOC_CERTIFICATE             374
+# define SSL_F_TLS_CONSTRUCT_STOC_COOKIE                  613
+# define SSL_F_TLS_CONSTRUCT_STOC_CRYPTOPRO_BUG           452
+# define SSL_F_TLS_CONSTRUCT_STOC_DONE                    375
+# define SSL_F_TLS_CONSTRUCT_STOC_EARLY_DATA              531
+# define SSL_F_TLS_CONSTRUCT_STOC_EARLY_DATA_INFO         525
+# define SSL_F_TLS_CONSTRUCT_STOC_EC_PT_FORMATS           453
+# define SSL_F_TLS_CONSTRUCT_STOC_EMS                     454
+# define SSL_F_TLS_CONSTRUCT_STOC_ETM                     455
+# define SSL_F_TLS_CONSTRUCT_STOC_HELLO                   376
+# define SSL_F_TLS_CONSTRUCT_STOC_KEY_EXCHANGE            377
+# define SSL_F_TLS_CONSTRUCT_STOC_KEY_SHARE               456
+# define SSL_F_TLS_CONSTRUCT_STOC_MAXFRAGMENTLEN          548
+# define SSL_F_TLS_CONSTRUCT_STOC_NEXT_PROTO_NEG          457
+# define SSL_F_TLS_CONSTRUCT_STOC_PSK                     504
+# define SSL_F_TLS_CONSTRUCT_STOC_RENEGOTIATE             458
+# define SSL_F_TLS_CONSTRUCT_STOC_SERVER_NAME             459
+# define SSL_F_TLS_CONSTRUCT_STOC_SESSION_TICKET          460
+# define SSL_F_TLS_CONSTRUCT_STOC_STATUS_REQUEST          461
+# define SSL_F_TLS_CONSTRUCT_STOC_SUPPORTED_GROUPS        544
+# define SSL_F_TLS_CONSTRUCT_STOC_SUPPORTED_VERSIONS      611
+# define SSL_F_TLS_CONSTRUCT_STOC_USE_SRTP                462
+# define SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO        521
+# define SSL_F_TLS_FINISH_HANDSHAKE                       597
+# define SSL_F_TLS_GET_MESSAGE_BODY                       351
+# define SSL_F_TLS_GET_MESSAGE_HEADER                     387
+# define SSL_F_TLS_HANDLE_ALPN                            562
+# define SSL_F_TLS_HANDLE_STATUS_REQUEST                  563
+# define SSL_F_TLS_PARSE_CERTIFICATE_AUTHORITIES          566
+# define SSL_F_TLS_PARSE_CLIENTHELLO_TLSEXT               449
+# define SSL_F_TLS_PARSE_CTOS_ALPN                        567
+# define SSL_F_TLS_PARSE_CTOS_COOKIE                      614
+# define SSL_F_TLS_PARSE_CTOS_EARLY_DATA                  568
+# define SSL_F_TLS_PARSE_CTOS_EC_PT_FORMATS               569
+# define SSL_F_TLS_PARSE_CTOS_EMS                         570
+# define SSL_F_TLS_PARSE_CTOS_KEY_SHARE                   463
+# define SSL_F_TLS_PARSE_CTOS_MAXFRAGMENTLEN              571
+# define SSL_F_TLS_PARSE_CTOS_POST_HANDSHAKE_AUTH         620
+# define SSL_F_TLS_PARSE_CTOS_PSK                         505
+# define SSL_F_TLS_PARSE_CTOS_PSK_KEX_MODES               572
+# define SSL_F_TLS_PARSE_CTOS_RENEGOTIATE                 464
+# define SSL_F_TLS_PARSE_CTOS_SERVER_NAME                 573
+# define SSL_F_TLS_PARSE_CTOS_SESSION_TICKET              574
+# define SSL_F_TLS_PARSE_CTOS_SIG_ALGS                    575
+# define SSL_F_TLS_PARSE_CTOS_SIG_ALGS_CERT               615
+# define SSL_F_TLS_PARSE_CTOS_SRP                         576
+# define SSL_F_TLS_PARSE_CTOS_STATUS_REQUEST              577
+# define SSL_F_TLS_PARSE_CTOS_SUPPORTED_GROUPS            578
+# define SSL_F_TLS_PARSE_CTOS_USE_SRTP                    465
+# define SSL_F_TLS_PARSE_STOC_ALPN                        579
+# define SSL_F_TLS_PARSE_STOC_COOKIE                      534
+# define SSL_F_TLS_PARSE_STOC_EARLY_DATA                  538
+# define SSL_F_TLS_PARSE_STOC_EARLY_DATA_INFO             528
+# define SSL_F_TLS_PARSE_STOC_EC_PT_FORMATS               580
+# define SSL_F_TLS_PARSE_STOC_KEY_SHARE                   445
+# define SSL_F_TLS_PARSE_STOC_MAXFRAGMENTLEN              581
+# define SSL_F_TLS_PARSE_STOC_NPN                         582
+# define SSL_F_TLS_PARSE_STOC_PSK                         502
+# define SSL_F_TLS_PARSE_STOC_RENEGOTIATE                 448
+# define SSL_F_TLS_PARSE_STOC_SCT                         564
+# define SSL_F_TLS_PARSE_STOC_SERVER_NAME                 583
+# define SSL_F_TLS_PARSE_STOC_SESSION_TICKET              584
+# define SSL_F_TLS_PARSE_STOC_STATUS_REQUEST              585
+# define SSL_F_TLS_PARSE_STOC_SUPPORTED_VERSIONS          612
+# define SSL_F_TLS_PARSE_STOC_USE_SRTP                    446
+# define SSL_F_TLS_POST_PROCESS_CLIENT_HELLO              378
+# define SSL_F_TLS_POST_PROCESS_CLIENT_KEY_EXCHANGE       384
+# define SSL_F_TLS_PREPARE_CLIENT_CERTIFICATE             360
+# define SSL_F_TLS_PROCESS_AS_HELLO_RETRY_REQUEST         610
+# define SSL_F_TLS_PROCESS_CERTIFICATE_REQUEST            361
+# define SSL_F_TLS_PROCESS_CERT_STATUS                    362
+# define SSL_F_TLS_PROCESS_CERT_STATUS_BODY               495
+# define SSL_F_TLS_PROCESS_CERT_VERIFY                    379
+# define SSL_F_TLS_PROCESS_CHANGE_CIPHER_SPEC             363
+# define SSL_F_TLS_PROCESS_CKE_DHE                        411
+# define SSL_F_TLS_PROCESS_CKE_ECDHE                      412
+# define SSL_F_TLS_PROCESS_CKE_GOST                       413
+# define SSL_F_TLS_PROCESS_CKE_PSK_PREAMBLE               414
+# define SSL_F_TLS_PROCESS_CKE_RSA                        415
+# define SSL_F_TLS_PROCESS_CKE_SRP                        416
+# define SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE             380
+# define SSL_F_TLS_PROCESS_CLIENT_HELLO                   381
+# define SSL_F_TLS_PROCESS_CLIENT_KEY_EXCHANGE            382
+# define SSL_F_TLS_PROCESS_ENCRYPTED_EXTENSIONS           444
+# define SSL_F_TLS_PROCESS_END_OF_EARLY_DATA              537
+# define SSL_F_TLS_PROCESS_FINISHED                       364
+# define SSL_F_TLS_PROCESS_HELLO_REQ                      507
+# define SSL_F_TLS_PROCESS_HELLO_RETRY_REQUEST            511
+# define SSL_F_TLS_PROCESS_INITIAL_SERVER_FLIGHT          442
+# define SSL_F_TLS_PROCESS_KEY_EXCHANGE                   365
+# define SSL_F_TLS_PROCESS_KEY_UPDATE                     518
+# define SSL_F_TLS_PROCESS_NEW_SESSION_TICKET             366
+# define SSL_F_TLS_PROCESS_NEXT_PROTO                     383
+# define SSL_F_TLS_PROCESS_SERVER_CERTIFICATE             367
+# define SSL_F_TLS_PROCESS_SERVER_DONE                    368
+# define SSL_F_TLS_PROCESS_SERVER_HELLO                   369
+# define SSL_F_TLS_PROCESS_SKE_DHE                        419
+# define SSL_F_TLS_PROCESS_SKE_ECDHE                      420
+# define SSL_F_TLS_PROCESS_SKE_PSK_PREAMBLE               421
+# define SSL_F_TLS_PROCESS_SKE_SRP                        422
+# define SSL_F_TLS_PSK_DO_BINDER                          506
+# define SSL_F_TLS_SCAN_CLIENTHELLO_TLSEXT                450
+# define SSL_F_TLS_SETUP_HANDSHAKE                        508
+# define SSL_F_USE_CERTIFICATE_CHAIN_FILE                 220
+# define SSL_F_WPACKET_INTERN_INIT_LEN                    633
+# define SSL_F_WPACKET_START_SUB_PACKET_LEN__             634
+# define SSL_F_WRITE_STATE_MACHINE                        586
+
+/*
+ * SSL reason codes.
+ */
+# define SSL_R_APPLICATION_DATA_AFTER_CLOSE_NOTIFY        291
+# define SSL_R_APP_DATA_IN_HANDSHAKE                      100
+# define SSL_R_ATTEMPT_TO_REUSE_SESSION_IN_DIFFERENT_CONTEXT 272
+# define SSL_R_AT_LEAST_TLS_1_0_NEEDED_IN_FIPS_MODE       143
+# define SSL_R_AT_LEAST_TLS_1_2_NEEDED_IN_SUITEB_MODE     158
+# define SSL_R_BAD_CHANGE_CIPHER_SPEC                     103
+# define SSL_R_BAD_CIPHER                                 186
+# define SSL_R_BAD_DATA                                   390
+# define SSL_R_BAD_DATA_RETURNED_BY_CALLBACK              106
+# define SSL_R_BAD_DECOMPRESSION                          107
+# define SSL_R_BAD_DH_VALUE                               102
+# define SSL_R_BAD_DIGEST_LENGTH                          111
+# define SSL_R_BAD_EARLY_DATA                             233
+# define SSL_R_BAD_ECC_CERT                               304
+# define SSL_R_BAD_ECPOINT                                306
+# define SSL_R_BAD_EXTENSION                              110
+# define SSL_R_BAD_HANDSHAKE_LENGTH                       332
+# define SSL_R_BAD_HANDSHAKE_STATE                        236
+# define SSL_R_BAD_HELLO_REQUEST                          105
+# define SSL_R_BAD_HRR_VERSION                            263
+# define SSL_R_BAD_KEY_SHARE                              108
+# define SSL_R_BAD_KEY_UPDATE                             122
+# define SSL_R_BAD_LEGACY_VERSION                         292
+# define SSL_R_BAD_LENGTH                                 271
+# define SSL_R_BAD_PACKET                                 240
+# define SSL_R_BAD_PACKET_LENGTH                          115
+# define SSL_R_BAD_PROTOCOL_VERSION_NUMBER                116
+# define SSL_R_BAD_PSK                                    219
+# define SSL_R_BAD_PSK_IDENTITY                           114
+# define SSL_R_BAD_RECORD_TYPE                            443
+# define SSL_R_BAD_RSA_ENCRYPT                            119
+# define SSL_R_BAD_SIGNATURE                              123
+# define SSL_R_BAD_SRP_A_LENGTH                           347
+# define SSL_R_BAD_SRP_PARAMETERS                         371
+# define SSL_R_BAD_SRTP_MKI_VALUE                         352
+# define SSL_R_BAD_SRTP_PROTECTION_PROFILE_LIST           353
+# define SSL_R_BAD_SSL_FILETYPE                           124
+# define SSL_R_BAD_VALUE                                  384
+# define SSL_R_BAD_WRITE_RETRY                            127
+# define SSL_R_BINDER_DOES_NOT_VERIFY                     253
+# define SSL_R_BIO_NOT_SET                                128
+# define SSL_R_BLOCK_CIPHER_PAD_IS_WRONG                  129
+# define SSL_R_BN_LIB                                     130
+# define SSL_R_CALLBACK_FAILED                            234
+# define SSL_R_CANNOT_CHANGE_CIPHER                       109
+# define SSL_R_CA_DN_LENGTH_MISMATCH                      131
+# define SSL_R_CA_KEY_TOO_SMALL                           397
+# define SSL_R_CA_MD_TOO_WEAK                             398
+# define SSL_R_CCS_RECEIVED_EARLY                         133
+# define SSL_R_CERTIFICATE_VERIFY_FAILED                  134
+# define SSL_R_CERT_CB_ERROR                              377
+# define SSL_R_CERT_LENGTH_MISMATCH                       135
+# define SSL_R_CIPHERSUITE_DIGEST_HAS_CHANGED             218
+# define SSL_R_CIPHER_CODE_WRONG_LENGTH                   137
+# define SSL_R_CIPHER_OR_HASH_UNAVAILABLE                 138
+# define SSL_R_CLIENTHELLO_TLSEXT                         226
+# define SSL_R_COMPRESSED_LENGTH_TOO_LONG                 140
+# define SSL_R_COMPRESSION_DISABLED                       343
+# define SSL_R_COMPRESSION_FAILURE                        141
+# define SSL_R_COMPRESSION_ID_NOT_WITHIN_PRIVATE_RANGE    307
+# define SSL_R_COMPRESSION_LIBRARY_ERROR                  142
+# define SSL_R_CONNECTION_TYPE_NOT_SET                    144
+# define SSL_R_CONTEXT_NOT_DANE_ENABLED                   167
+# define SSL_R_COOKIE_GEN_CALLBACK_FAILURE                400
+# define SSL_R_COOKIE_MISMATCH                            308
+# define SSL_R_CUSTOM_EXT_HANDLER_ALREADY_INSTALLED       206
+# define SSL_R_DANE_ALREADY_ENABLED                       172
+# define SSL_R_DANE_CANNOT_OVERRIDE_MTYPE_FULL            173
+# define SSL_R_DANE_NOT_ENABLED                           175
+# define SSL_R_DANE_TLSA_BAD_CERTIFICATE                  180
+# define SSL_R_DANE_TLSA_BAD_CERTIFICATE_USAGE            184
+# define SSL_R_DANE_TLSA_BAD_DATA_LENGTH                  189
+# define SSL_R_DANE_TLSA_BAD_DIGEST_LENGTH                192
+# define SSL_R_DANE_TLSA_BAD_MATCHING_TYPE                200
+# define SSL_R_DANE_TLSA_BAD_PUBLIC_KEY                   201
+# define SSL_R_DANE_TLSA_BAD_SELECTOR                     202
+# define SSL_R_DANE_TLSA_NULL_DATA                        203
+# define SSL_R_DATA_BETWEEN_CCS_AND_FINISHED              145
+# define SSL_R_DATA_LENGTH_TOO_LONG                       146
+# define SSL_R_DECRYPTION_FAILED                          147
+# define SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC        281
+# define SSL_R_DH_KEY_TOO_SMALL                           394
+# define SSL_R_DH_PUBLIC_VALUE_LENGTH_IS_WRONG            148
+# define SSL_R_DIGEST_CHECK_FAILED                        149
+# define SSL_R_DTLS_MESSAGE_TOO_BIG                       334
+# define SSL_R_DUPLICATE_COMPRESSION_ID                   309
+# define SSL_R_ECC_CERT_NOT_FOR_SIGNING                   318
+# define SSL_R_ECDH_REQUIRED_FOR_SUITEB_MODE              374
+# define SSL_R_EE_KEY_TOO_SMALL                           399
+# define SSL_R_EMPTY_SRTP_PROTECTION_PROFILE_LIST         354
+# define SSL_R_ENCRYPTED_LENGTH_TOO_LONG                  150
+# define SSL_R_ERROR_IN_RECEIVED_CIPHER_LIST              151
+# define SSL_R_ERROR_SETTING_TLSA_BASE_DOMAIN             204
+# define SSL_R_EXCEEDS_MAX_FRAGMENT_SIZE                  194
+# define SSL_R_EXCESSIVE_MESSAGE_SIZE                     152
+# define SSL_R_EXTENSION_NOT_RECEIVED                     279
+# define SSL_R_EXTRA_DATA_IN_MESSAGE                      153
+# define SSL_R_EXT_LENGTH_MISMATCH                        163
+# define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
+# define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
+# define SSL_R_HTTPS_PROXY_REQUEST                        155
+# define SSL_R_HTTP_REQUEST                               156
+# define SSL_R_ILLEGAL_POINT_COMPRESSION                  162
+# define SSL_R_ILLEGAL_SUITEB_DIGEST                      380
+# define SSL_R_INAPPROPRIATE_FALLBACK                     373
+# define SSL_R_INCONSISTENT_COMPRESSION                   340
+# define SSL_R_INCONSISTENT_EARLY_DATA_ALPN               222
+# define SSL_R_INCONSISTENT_EARLY_DATA_SNI                231
+# define SSL_R_INCONSISTENT_EXTMS                         104
+# define SSL_R_INSUFFICIENT_SECURITY                      241
+# define SSL_R_INVALID_ALERT                              205
+# define SSL_R_INVALID_CCS_MESSAGE                        260
+# define SSL_R_INVALID_CERTIFICATE_OR_ALG                 238
+# define SSL_R_INVALID_COMMAND                            280
+# define SSL_R_INVALID_COMPRESSION_ALGORITHM              341
+# define SSL_R_INVALID_CONFIG                             283
+# define SSL_R_INVALID_CONFIGURATION_NAME                 113
+# define SSL_R_INVALID_CONTEXT                            282
+# define SSL_R_INVALID_CT_VALIDATION_TYPE                 212
+# define SSL_R_INVALID_KEY_UPDATE_TYPE                    120
+# define SSL_R_INVALID_MAX_EARLY_DATA                     174
+# define SSL_R_INVALID_NULL_CMD_NAME                      385
+# define SSL_R_INVALID_SEQUENCE_NUMBER                    402
+# define SSL_R_INVALID_SERVERINFO_DATA                    388
+# define SSL_R_INVALID_SESSION_ID                         999
+# define SSL_R_INVALID_SRP_USERNAME                       357
+# define SSL_R_INVALID_STATUS_RESPONSE                    328
+# define SSL_R_INVALID_TICKET_KEYS_LENGTH                 325
+# define SSL_R_LENGTH_MISMATCH                            159
+# define SSL_R_LENGTH_TOO_LONG                            404
+# define SSL_R_LENGTH_TOO_SHORT                           160
+# define SSL_R_LIBRARY_BUG                                274
+# define SSL_R_LIBRARY_HAS_NO_CIPHERS                     161
+# define SSL_R_MISSING_DSA_SIGNING_CERT                   165
+# define SSL_R_MISSING_ECDSA_SIGNING_CERT                 381
+# define SSL_R_MISSING_FATAL                              256
+# define SSL_R_MISSING_PARAMETERS                         290
+# define SSL_R_MISSING_RSA_CERTIFICATE                    168
+# define SSL_R_MISSING_RSA_ENCRYPTING_CERT                169
+# define SSL_R_MISSING_RSA_SIGNING_CERT                   170
+# define SSL_R_MISSING_SIGALGS_EXTENSION                  112
+# define SSL_R_MISSING_SIGNING_CERT                       221
+# define SSL_R_MISSING_SRP_PARAM                          358
+# define SSL_R_MISSING_SUPPORTED_GROUPS_EXTENSION         209
+# define SSL_R_MISSING_TMP_DH_KEY                         171
+# define SSL_R_MISSING_TMP_ECDH_KEY                       311
+# define SSL_R_MIXED_HANDSHAKE_AND_NON_HANDSHAKE_DATA     293
+# define SSL_R_NOT_ON_RECORD_BOUNDARY                     182
+# define SSL_R_NOT_REPLACING_CERTIFICATE                  289
+# define SSL_R_NOT_SERVER                                 284
+# define SSL_R_NO_APPLICATION_PROTOCOL                    235
+# define SSL_R_NO_CERTIFICATES_RETURNED                   176
+# define SSL_R_NO_CERTIFICATE_ASSIGNED                    177
+# define SSL_R_NO_CERTIFICATE_SET                         179
+# define SSL_R_NO_CHANGE_FOLLOWING_HRR                    214
+# define SSL_R_NO_CIPHERS_AVAILABLE                       181
+# define SSL_R_NO_CIPHERS_SPECIFIED                       183
+# define SSL_R_NO_CIPHER_MATCH                            185
+# define SSL_R_NO_CLIENT_CERT_METHOD                      331
+# define SSL_R_NO_COMPRESSION_SPECIFIED                   187
+# define SSL_R_NO_COOKIE_CALLBACK_SET                     287
+# define SSL_R_NO_GOST_CERTIFICATE_SENT_BY_PEER           330
+# define SSL_R_NO_METHOD_SPECIFIED                        188
+# define SSL_R_NO_PEM_EXTENSIONS                          389
+# define SSL_R_NO_PRIVATE_KEY_ASSIGNED                    190
+# define SSL_R_NO_PROTOCOLS_AVAILABLE                     191
+# define SSL_R_NO_RENEGOTIATION                           339
+# define SSL_R_NO_REQUIRED_DIGEST                         324
+# define SSL_R_NO_SHARED_CIPHER                           193
+# define SSL_R_NO_SHARED_GROUPS                           410
+# define SSL_R_NO_SHARED_SIGNATURE_ALGORITHMS             376
+# define SSL_R_NO_SRTP_PROFILES                           359
+# define SSL_R_NO_SUITABLE_KEY_SHARE                      101
+# define SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM            118
+# define SSL_R_NO_VALID_SCTS                              216
+# define SSL_R_NO_VERIFY_COOKIE_CALLBACK                  403
+# define SSL_R_NULL_SSL_CTX                               195
+# define SSL_R_NULL_SSL_METHOD_PASSED                     196
+# define SSL_R_OLD_SESSION_CIPHER_NOT_RETURNED            197
+# define SSL_R_OLD_SESSION_COMPRESSION_ALGORITHM_NOT_RETURNED 344
+# define SSL_R_OVERFLOW_ERROR                             237
+# define SSL_R_PACKET_LENGTH_TOO_LONG                     198
+# define SSL_R_PARSE_TLSEXT                               227
+# define SSL_R_PATH_TOO_LONG                              270
+# define SSL_R_PEER_DID_NOT_RETURN_A_CERTIFICATE          199
+# define SSL_R_PEM_NAME_BAD_PREFIX                        391
+# define SSL_R_PEM_NAME_TOO_SHORT                         392
+# define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
+# define SSL_R_PRIVATE_KEY_MISMATCH                       288
+# define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
+# define SSL_R_PSK_IDENTITY_NOT_FOUND                     223
+# define SSL_R_PSK_NO_CLIENT_CB                           224
+# define SSL_R_PSK_NO_SERVER_CB                           225
+# define SSL_R_READ_BIO_NOT_SET                           211
+# define SSL_R_READ_TIMEOUT_EXPIRED                       312
+# define SSL_R_RECORD_LENGTH_MISMATCH                     213
+# define SSL_R_RECORD_TOO_SMALL                           298
+# define SSL_R_RENEGOTIATE_EXT_TOO_LONG                   335
+# define SSL_R_RENEGOTIATION_ENCODING_ERR                 336
+# define SSL_R_RENEGOTIATION_MISMATCH                     337
+# define SSL_R_REQUEST_PENDING                            285
+# define SSL_R_REQUEST_SENT                               286
+# define SSL_R_REQUIRED_CIPHER_MISSING                    215
+# define SSL_R_REQUIRED_COMPRESSION_ALGORITHM_MISSING     342
+# define SSL_R_SCSV_RECEIVED_WHEN_RENEGOTIATING           345
+# define SSL_R_SCT_VERIFICATION_FAILED                    208
+# define SSL_R_SERVERHELLO_TLSEXT                         275
+# define SSL_R_SESSION_ID_CONTEXT_UNINITIALIZED           277
+# define SSL_R_SHUTDOWN_WHILE_IN_INIT                     407
+# define SSL_R_SIGNATURE_ALGORITHMS_ERROR                 360
+# define SSL_R_SIGNATURE_FOR_NON_SIGNING_CERTIFICATE      220
+# define SSL_R_SRP_A_CALC                                 361
+# define SSL_R_SRTP_COULD_NOT_ALLOCATE_PROFILES           362
+# define SSL_R_SRTP_PROTECTION_PROFILE_LIST_TOO_LONG      363
+# define SSL_R_SRTP_UNKNOWN_PROTECTION_PROFILE            364
+# define SSL_R_SSL3_EXT_INVALID_MAX_FRAGMENT_LENGTH       232
+# define SSL_R_SSL3_EXT_INVALID_SERVERNAME                319
+# define SSL_R_SSL3_EXT_INVALID_SERVERNAME_TYPE           320
+# define SSL_R_SSL3_SESSION_ID_TOO_LONG                   300
+# define SSL_R_SSLV3_ALERT_BAD_CERTIFICATE                1042
+# define SSL_R_SSLV3_ALERT_BAD_RECORD_MAC                 1020
+# define SSL_R_SSLV3_ALERT_CERTIFICATE_EXPIRED            1045
+# define SSL_R_SSLV3_ALERT_CERTIFICATE_REVOKED            1044
+# define SSL_R_SSLV3_ALERT_CERTIFICATE_UNKNOWN            1046
+# define SSL_R_SSLV3_ALERT_DECOMPRESSION_FAILURE          1030
+# define SSL_R_SSLV3_ALERT_HANDSHAKE_FAILURE              1040
+# define SSL_R_SSLV3_ALERT_ILLEGAL_PARAMETER              1047
+# define SSL_R_SSLV3_ALERT_NO_CERTIFICATE                 1041
+# define SSL_R_SSLV3_ALERT_UNEXPECTED_MESSAGE             1010
+# define SSL_R_SSLV3_ALERT_UNSUPPORTED_CERTIFICATE        1043
+# define SSL_R_SSL_COMMAND_SECTION_EMPTY                  117
+# define SSL_R_SSL_COMMAND_SECTION_NOT_FOUND              125
+# define SSL_R_SSL_CTX_HAS_NO_DEFAULT_SSL_VERSION         228
+# define SSL_R_SSL_HANDSHAKE_FAILURE                      229
+# define SSL_R_SSL_LIBRARY_HAS_NO_CIPHERS                 230
+# define SSL_R_SSL_NEGATIVE_LENGTH                        372
+# define SSL_R_SSL_SECTION_EMPTY                          126
+# define SSL_R_SSL_SECTION_NOT_FOUND                      136
+# define SSL_R_SSL_SESSION_ID_CALLBACK_FAILED             301
+# define SSL_R_SSL_SESSION_ID_CONFLICT                    302
+# define SSL_R_SSL_SESSION_ID_CONTEXT_TOO_LONG            273
+# define SSL_R_SSL_SESSION_ID_HAS_BAD_LENGTH              303
+# define SSL_R_SSL_SESSION_ID_TOO_LONG                    408
+# define SSL_R_SSL_SESSION_VERSION_MISMATCH               210
+# define SSL_R_STILL_IN_INIT                              121
+# define SSL_R_TLSV13_ALERT_CERTIFICATE_REQUIRED          1116
+# define SSL_R_TLSV13_ALERT_MISSING_EXTENSION             1109
+# define SSL_R_TLSV1_ALERT_ACCESS_DENIED                  1049
+# define SSL_R_TLSV1_ALERT_DECODE_ERROR                   1050
+# define SSL_R_TLSV1_ALERT_DECRYPTION_FAILED              1021
+# define SSL_R_TLSV1_ALERT_DECRYPT_ERROR                  1051
+# define SSL_R_TLSV1_ALERT_EXPORT_RESTRICTION             1060
+# define SSL_R_TLSV1_ALERT_INAPPROPRIATE_FALLBACK         1086
+# define SSL_R_TLSV1_ALERT_INSUFFICIENT_SECURITY          1071
+# define SSL_R_TLSV1_ALERT_INTERNAL_ERROR                 1080
+# define SSL_R_TLSV1_ALERT_NO_RENEGOTIATION               1100
+# define SSL_R_TLSV1_ALERT_PROTOCOL_VERSION               1070
+# define SSL_R_TLSV1_ALERT_RECORD_OVERFLOW                1022
+# define SSL_R_TLSV1_ALERT_UNKNOWN_CA                     1048
+# define SSL_R_TLSV1_ALERT_USER_CANCELLED                 1090
+# define SSL_R_TLSV1_BAD_CERTIFICATE_HASH_VALUE           1114
+# define SSL_R_TLSV1_BAD_CERTIFICATE_STATUS_RESPONSE      1113
+# define SSL_R_TLSV1_CERTIFICATE_UNOBTAINABLE             1111
+# define SSL_R_TLSV1_UNRECOGNIZED_NAME                    1112
+# define SSL_R_TLSV1_UNSUPPORTED_EXTENSION                1110
+# define SSL_R_TLS_HEARTBEAT_PEER_DOESNT_ACCEPT           365
+# define SSL_R_TLS_HEARTBEAT_PENDING                      366
+# define SSL_R_TLS_ILLEGAL_EXPORTER_LABEL                 367
+# define SSL_R_TLS_INVALID_ECPOINTFORMAT_LIST             157
+# define SSL_R_TOO_MANY_KEY_UPDATES                       132
+# define SSL_R_TOO_MANY_WARN_ALERTS                       409
+# define SSL_R_TOO_MUCH_EARLY_DATA                        164
+# define SSL_R_UNABLE_TO_FIND_ECDH_PARAMETERS             314
+# define SSL_R_UNABLE_TO_FIND_PUBLIC_KEY_PARAMETERS       239
+# define SSL_R_UNABLE_TO_LOAD_SSL3_MD5_ROUTINES           242
+# define SSL_R_UNABLE_TO_LOAD_SSL3_SHA1_ROUTINES          243
+# define SSL_R_UNEXPECTED_CCS_MESSAGE                     262
+# define SSL_R_UNEXPECTED_END_OF_EARLY_DATA               178
+# define SSL_R_UNEXPECTED_MESSAGE                         244
+# define SSL_R_UNEXPECTED_RECORD                          245
+# define SSL_R_UNINITIALIZED                              276
+# define SSL_R_UNKNOWN_ALERT_TYPE                         246
+# define SSL_R_UNKNOWN_CERTIFICATE_TYPE                   247
+# define SSL_R_UNKNOWN_CIPHER_RETURNED                    248
+# define SSL_R_UNKNOWN_CIPHER_TYPE                        249
+# define SSL_R_UNKNOWN_CMD_NAME                           386
+# define SSL_R_UNKNOWN_COMMAND                            139
+# define SSL_R_UNKNOWN_DIGEST                             368
+# define SSL_R_UNKNOWN_KEY_EXCHANGE_TYPE                  250
+# define SSL_R_UNKNOWN_PKEY_TYPE                          251
+# define SSL_R_UNKNOWN_PROTOCOL                           252
+# define SSL_R_UNKNOWN_SSL_VERSION                        254
+# define SSL_R_UNKNOWN_STATE                              255
+# define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
+# define SSL_R_UNSOLICITED_EXTENSION                      217
+# define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
+# define SSL_R_UNSUPPORTED_PROTOCOL                       258
+# define SSL_R_UNSUPPORTED_SSL_VERSION                    259
+# define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
+# define SSL_R_VERSION_TOO_HIGH                           166
+# define SSL_R_VERSION_TOO_LOW                            396
+# define SSL_R_WRONG_CERTIFICATE_TYPE                     383
+# define SSL_R_WRONG_CIPHER_RETURNED                      261
+# define SSL_R_WRONG_CURVE                                378
+# define SSL_R_WRONG_SIGNATURE_LENGTH                     264
+# define SSL_R_WRONG_SIGNATURE_SIZE                       265
+# define SSL_R_WRONG_SIGNATURE_TYPE                       370
+# define SSL_R_WRONG_SSL_VERSION                          266
+# define SSL_R_WRONG_VERSION_NUMBER                       267
+# define SSL_R_X509_LIB                                   268
+# define SSL_R_X509_VERIFICATION_SETUP_PROBLEMS           269
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/stack.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/stack.h
new file mode 100644
index 000000000..cfc075057
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/stack.h
@@ -0,0 +1,83 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_STACK_H
+# define HEADER_STACK_H
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+typedef struct stack_st OPENSSL_STACK; /* Use STACK_OF(...) instead */
+
+typedef int (*OPENSSL_sk_compfunc)(const void *, const void *);
+typedef void (*OPENSSL_sk_freefunc)(void *);
+typedef void *(*OPENSSL_sk_copyfunc)(const void *);
+
+int OPENSSL_sk_num(const OPENSSL_STACK *);
+void *OPENSSL_sk_value(const OPENSSL_STACK *, int);
+
+void *OPENSSL_sk_set(OPENSSL_STACK *st, int i, const void *data);
+
+OPENSSL_STACK *OPENSSL_sk_new(OPENSSL_sk_compfunc cmp);
+OPENSSL_STACK *OPENSSL_sk_new_null(void);
+OPENSSL_STACK *OPENSSL_sk_new_reserve(OPENSSL_sk_compfunc c, int n);
+int OPENSSL_sk_reserve(OPENSSL_STACK *st, int n);
+void OPENSSL_sk_free(OPENSSL_STACK *);
+void OPENSSL_sk_pop_free(OPENSSL_STACK *st, void (*func) (void *));
+OPENSSL_STACK *OPENSSL_sk_deep_copy(const OPENSSL_STACK *,
+                                    OPENSSL_sk_copyfunc c,
+                                    OPENSSL_sk_freefunc f);
+int OPENSSL_sk_insert(OPENSSL_STACK *sk, const void *data, int where);
+void *OPENSSL_sk_delete(OPENSSL_STACK *st, int loc);
+void *OPENSSL_sk_delete_ptr(OPENSSL_STACK *st, const void *p);
+int OPENSSL_sk_find(OPENSSL_STACK *st, const void *data);
+int OPENSSL_sk_find_ex(OPENSSL_STACK *st, const void *data);
+int OPENSSL_sk_push(OPENSSL_STACK *st, const void *data);
+int OPENSSL_sk_unshift(OPENSSL_STACK *st, const void *data);
+void *OPENSSL_sk_shift(OPENSSL_STACK *st);
+void *OPENSSL_sk_pop(OPENSSL_STACK *st);
+void OPENSSL_sk_zero(OPENSSL_STACK *st);
+OPENSSL_sk_compfunc OPENSSL_sk_set_cmp_func(OPENSSL_STACK *sk,
+                                            OPENSSL_sk_compfunc cmp);
+OPENSSL_STACK *OPENSSL_sk_dup(const OPENSSL_STACK *st);
+void OPENSSL_sk_sort(OPENSSL_STACK *st);
+int OPENSSL_sk_is_sorted(const OPENSSL_STACK *st);
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define _STACK OPENSSL_STACK
+#  define sk_num OPENSSL_sk_num
+#  define sk_value OPENSSL_sk_value
+#  define sk_set OPENSSL_sk_set
+#  define sk_new OPENSSL_sk_new
+#  define sk_new_null OPENSSL_sk_new_null
+#  define sk_free OPENSSL_sk_free
+#  define sk_pop_free OPENSSL_sk_pop_free
+#  define sk_deep_copy OPENSSL_sk_deep_copy
+#  define sk_insert OPENSSL_sk_insert
+#  define sk_delete OPENSSL_sk_delete
+#  define sk_delete_ptr OPENSSL_sk_delete_ptr
+#  define sk_find OPENSSL_sk_find
+#  define sk_find_ex OPENSSL_sk_find_ex
+#  define sk_push OPENSSL_sk_push
+#  define sk_unshift OPENSSL_sk_unshift
+#  define sk_shift OPENSSL_sk_shift
+#  define sk_pop OPENSSL_sk_pop
+#  define sk_zero OPENSSL_sk_zero
+#  define sk_set_cmp_func OPENSSL_sk_set_cmp_func
+#  define sk_dup OPENSSL_sk_dup
+#  define sk_sort OPENSSL_sk_sort
+#  define sk_is_sorted OPENSSL_sk_is_sorted
+# endif
+
+#ifdef  __cplusplus
+}
+#endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/store.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/store.h
new file mode 100644
index 000000000..7b43e8bd0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/store.h
@@ -0,0 +1,266 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_OSSL_STORE_H
+# define HEADER_OSSL_STORE_H
+
+# include <stdarg.h>
+# include <openssl/ossl_typ.h>
+# include <openssl/pem.h>
+# include <openssl/storeerr.h>
+
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+/*-
+ *  The main OSSL_STORE functions.
+ *  ------------------------------
+ *
+ *  These allow applications to open a channel to a resource with supported
+ *  data (keys, certs, crls, ...), read the data a piece at a time and decide
+ *  what to do with it, and finally close.
+ */
+
+typedef struct ossl_store_ctx_st OSSL_STORE_CTX;
+
+/*
+ * Typedef for the OSSL_STORE_INFO post processing callback.  This can be used
+ * to massage the given OSSL_STORE_INFO, or to drop it entirely (by returning
+ * NULL).
+ */
+typedef OSSL_STORE_INFO *(*OSSL_STORE_post_process_info_fn)(OSSL_STORE_INFO *,
+                                                            void *);
+
+/*
+ * Open a channel given a URI.  The given UI method will be used any time the
+ * loader needs extra input, for example when a password or pin is needed, and
+ * will be passed the same user data every time it's needed in this context.
+ *
+ * Returns a context reference which represents the channel to communicate
+ * through.
+ */
+OSSL_STORE_CTX *OSSL_STORE_open(const char *uri, const UI_METHOD *ui_method,
+                                void *ui_data,
+                                OSSL_STORE_post_process_info_fn post_process,
+                                void *post_process_data);
+
+/*
+ * Control / fine tune the OSSL_STORE channel.  |cmd| determines what is to be
+ * done, and depends on the underlying loader (use OSSL_STORE_get0_scheme to
+ * determine which loader is used), except for common commands (see below).
+ * Each command takes different arguments.
+ */
+int OSSL_STORE_ctrl(OSSL_STORE_CTX *ctx, int cmd, ... /* args */);
+int OSSL_STORE_vctrl(OSSL_STORE_CTX *ctx, int cmd, va_list args);
+
+/*
+ * Common ctrl commands that different loaders may choose to support.
+ */
+/* int on = 0 or 1; STORE_ctrl(ctx, STORE_C_USE_SECMEM, &on); */
+# define OSSL_STORE_C_USE_SECMEM      1
+/* Where custom commands start */
+# define OSSL_STORE_C_CUSTOM_START    100
+
+/*
+ * Read one data item (a key, a cert, a CRL) that is supported by the OSSL_STORE
+ * functionality, given a context.
+ * Returns a OSSL_STORE_INFO pointer, from which OpenSSL typed data can be
+ * extracted with OSSL_STORE_INFO_get0_PKEY(), OSSL_STORE_INFO_get0_CERT(), ...
+ * NULL is returned on error, which may include that the data found at the URI
+ * can't be figured out for certain or is ambiguous.
+ */
+OSSL_STORE_INFO *OSSL_STORE_load(OSSL_STORE_CTX *ctx);
+
+/*
+ * Check if end of data (end of file) is reached
+ * Returns 1 on end, 0 otherwise.
+ */
+int OSSL_STORE_eof(OSSL_STORE_CTX *ctx);
+
+/*
+ * Check if an error occured
+ * Returns 1 if it did, 0 otherwise.
+ */
+int OSSL_STORE_error(OSSL_STORE_CTX *ctx);
+
+/*
+ * Close the channel
+ * Returns 1 on success, 0 on error.
+ */
+int OSSL_STORE_close(OSSL_STORE_CTX *ctx);
+
+
+/*-
+ *  Extracting OpenSSL types from and creating new OSSL_STORE_INFOs
+ *  ---------------------------------------------------------------
+ */
+
+/*
+ * Types of data that can be ossl_stored in a OSSL_STORE_INFO.
+ * OSSL_STORE_INFO_NAME is typically found when getting a listing of
+ * available "files" / "tokens" / what have you.
+ */
+# define OSSL_STORE_INFO_NAME           1   /* char * */
+# define OSSL_STORE_INFO_PARAMS         2   /* EVP_PKEY * */
+# define OSSL_STORE_INFO_PKEY           3   /* EVP_PKEY * */
+# define OSSL_STORE_INFO_CERT           4   /* X509 * */
+# define OSSL_STORE_INFO_CRL            5   /* X509_CRL * */
+
+/*
+ * Functions to generate OSSL_STORE_INFOs, one function for each type we
+ * support having in them, as well as a generic constructor.
+ *
+ * In all cases, ownership of the object is transfered to the OSSL_STORE_INFO
+ * and will therefore be freed when the OSSL_STORE_INFO is freed.
+ */
+OSSL_STORE_INFO *OSSL_STORE_INFO_new_NAME(char *name);
+int OSSL_STORE_INFO_set0_NAME_description(OSSL_STORE_INFO *info, char *desc);
+OSSL_STORE_INFO *OSSL_STORE_INFO_new_PARAMS(EVP_PKEY *params);
+OSSL_STORE_INFO *OSSL_STORE_INFO_new_PKEY(EVP_PKEY *pkey);
+OSSL_STORE_INFO *OSSL_STORE_INFO_new_CERT(X509 *x509);
+OSSL_STORE_INFO *OSSL_STORE_INFO_new_CRL(X509_CRL *crl);
+
+/*
+ * Functions to try to extract data from a OSSL_STORE_INFO.
+ */
+int OSSL_STORE_INFO_get_type(const OSSL_STORE_INFO *info);
+const char *OSSL_STORE_INFO_get0_NAME(const OSSL_STORE_INFO *info);
+char *OSSL_STORE_INFO_get1_NAME(const OSSL_STORE_INFO *info);
+const char *OSSL_STORE_INFO_get0_NAME_description(const OSSL_STORE_INFO *info);
+char *OSSL_STORE_INFO_get1_NAME_description(const OSSL_STORE_INFO *info);
+EVP_PKEY *OSSL_STORE_INFO_get0_PARAMS(const OSSL_STORE_INFO *info);
+EVP_PKEY *OSSL_STORE_INFO_get1_PARAMS(const OSSL_STORE_INFO *info);
+EVP_PKEY *OSSL_STORE_INFO_get0_PKEY(const OSSL_STORE_INFO *info);
+EVP_PKEY *OSSL_STORE_INFO_get1_PKEY(const OSSL_STORE_INFO *info);
+X509 *OSSL_STORE_INFO_get0_CERT(const OSSL_STORE_INFO *info);
+X509 *OSSL_STORE_INFO_get1_CERT(const OSSL_STORE_INFO *info);
+X509_CRL *OSSL_STORE_INFO_get0_CRL(const OSSL_STORE_INFO *info);
+X509_CRL *OSSL_STORE_INFO_get1_CRL(const OSSL_STORE_INFO *info);
+
+const char *OSSL_STORE_INFO_type_string(int type);
+
+/*
+ * Free the OSSL_STORE_INFO
+ */
+void OSSL_STORE_INFO_free(OSSL_STORE_INFO *info);
+
+
+/*-
+ *  Functions to construct a search URI from a base URI and search criteria
+ *  -----------------------------------------------------------------------
+ */
+
+/* OSSL_STORE search types */
+# define OSSL_STORE_SEARCH_BY_NAME              1 /* subject in certs, issuer in CRLs */
+# define OSSL_STORE_SEARCH_BY_ISSUER_SERIAL     2
+# define OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT   3
+# define OSSL_STORE_SEARCH_BY_ALIAS             4
+
+/* To check what search types the scheme handler supports */
+int OSSL_STORE_supports_search(OSSL_STORE_CTX *ctx, int search_type);
+
+/* Search term constructors */
+/*
+ * The input is considered to be owned by the caller, and must therefore
+ * remain present throughout the lifetime of the returned OSSL_STORE_SEARCH
+ */
+OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_name(X509_NAME *name);
+OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_issuer_serial(X509_NAME *name,
+                                                      const ASN1_INTEGER
+                                                      *serial);
+OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_key_fingerprint(const EVP_MD *digest,
+                                                        const unsigned char
+                                                        *bytes, size_t len);
+OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_alias(const char *alias);
+
+/* Search term destructor */
+void OSSL_STORE_SEARCH_free(OSSL_STORE_SEARCH *search);
+
+/* Search term accessors */
+int OSSL_STORE_SEARCH_get_type(const OSSL_STORE_SEARCH *criterion);
+X509_NAME *OSSL_STORE_SEARCH_get0_name(OSSL_STORE_SEARCH *criterion);
+const ASN1_INTEGER *OSSL_STORE_SEARCH_get0_serial(const OSSL_STORE_SEARCH
+                                                  *criterion);
+const unsigned char *OSSL_STORE_SEARCH_get0_bytes(const OSSL_STORE_SEARCH
+                                                  *criterion, size_t *length);
+const char *OSSL_STORE_SEARCH_get0_string(const OSSL_STORE_SEARCH *criterion);
+const EVP_MD *OSSL_STORE_SEARCH_get0_digest(const OSSL_STORE_SEARCH *criterion);
+
+/*
+ * Add search criterion and expected return type (which can be unspecified)
+ * to the loading channel.  This MUST happen before the first OSSL_STORE_load().
+ */
+int OSSL_STORE_expect(OSSL_STORE_CTX *ctx, int expected_type);
+int OSSL_STORE_find(OSSL_STORE_CTX *ctx, OSSL_STORE_SEARCH *search);
+
+
+/*-
+ *  Function to register a loader for the given URI scheme.
+ *  -------------------------------------------------------
+ *
+ *  The loader receives all the main components of an URI except for the
+ *  scheme.
+ */
+
+typedef struct ossl_store_loader_st OSSL_STORE_LOADER;
+OSSL_STORE_LOADER *OSSL_STORE_LOADER_new(ENGINE *e, const char *scheme);
+const ENGINE *OSSL_STORE_LOADER_get0_engine(const OSSL_STORE_LOADER *loader);
+const char *OSSL_STORE_LOADER_get0_scheme(const OSSL_STORE_LOADER *loader);
+/* struct ossl_store_loader_ctx_st is defined differently by each loader */
+typedef struct ossl_store_loader_ctx_st OSSL_STORE_LOADER_CTX;
+typedef OSSL_STORE_LOADER_CTX *(*OSSL_STORE_open_fn)(const OSSL_STORE_LOADER
+                                                     *loader,
+                                                     const char *uri,
+                                                     const UI_METHOD *ui_method,
+                                                     void *ui_data);
+int OSSL_STORE_LOADER_set_open(OSSL_STORE_LOADER *loader,
+                               OSSL_STORE_open_fn open_function);
+typedef int (*OSSL_STORE_ctrl_fn)(OSSL_STORE_LOADER_CTX *ctx, int cmd,
+                                  va_list args);
+int OSSL_STORE_LOADER_set_ctrl(OSSL_STORE_LOADER *loader,
+                               OSSL_STORE_ctrl_fn ctrl_function);
+typedef int (*OSSL_STORE_expect_fn)(OSSL_STORE_LOADER_CTX *ctx, int expected);
+int OSSL_STORE_LOADER_set_expect(OSSL_STORE_LOADER *loader,
+                                 OSSL_STORE_expect_fn expect_function);
+typedef int (*OSSL_STORE_find_fn)(OSSL_STORE_LOADER_CTX *ctx,
+                                  OSSL_STORE_SEARCH *criteria);
+int OSSL_STORE_LOADER_set_find(OSSL_STORE_LOADER *loader,
+                               OSSL_STORE_find_fn find_function);
+typedef OSSL_STORE_INFO *(*OSSL_STORE_load_fn)(OSSL_STORE_LOADER_CTX *ctx,
+                                               const UI_METHOD *ui_method,
+                                               void *ui_data);
+int OSSL_STORE_LOADER_set_load(OSSL_STORE_LOADER *loader,
+                               OSSL_STORE_load_fn load_function);
+typedef int (*OSSL_STORE_eof_fn)(OSSL_STORE_LOADER_CTX *ctx);
+int OSSL_STORE_LOADER_set_eof(OSSL_STORE_LOADER *loader,
+                              OSSL_STORE_eof_fn eof_function);
+typedef int (*OSSL_STORE_error_fn)(OSSL_STORE_LOADER_CTX *ctx);
+int OSSL_STORE_LOADER_set_error(OSSL_STORE_LOADER *loader,
+                                OSSL_STORE_error_fn error_function);
+typedef int (*OSSL_STORE_close_fn)(OSSL_STORE_LOADER_CTX *ctx);
+int OSSL_STORE_LOADER_set_close(OSSL_STORE_LOADER *loader,
+                                OSSL_STORE_close_fn close_function);
+void OSSL_STORE_LOADER_free(OSSL_STORE_LOADER *loader);
+
+int OSSL_STORE_register_loader(OSSL_STORE_LOADER *loader);
+OSSL_STORE_LOADER *OSSL_STORE_unregister_loader(const char *scheme);
+
+/*-
+ *  Functions to list STORE loaders
+ *  -------------------------------
+ */
+int OSSL_STORE_do_all_loaders(void (*do_function) (const OSSL_STORE_LOADER
+                                                   *loader, void *do_arg),
+                              void *do_arg);
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/storeerr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/storeerr.h
new file mode 100644
index 000000000..33d0ab790
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/storeerr.h
@@ -0,0 +1,87 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_OSSL_STOREERR_H
+# define HEADER_OSSL_STOREERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_OSSL_STORE_strings(void);
+
+/*
+ * OSSL_STORE function codes.
+ */
+# define OSSL_STORE_F_FILE_CTRL                           129
+# define OSSL_STORE_F_FILE_FIND                           138
+# define OSSL_STORE_F_FILE_GET_PASS                       118
+# define OSSL_STORE_F_FILE_LOAD                           119
+# define OSSL_STORE_F_FILE_LOAD_TRY_DECODE                124
+# define OSSL_STORE_F_FILE_NAME_TO_URI                    126
+# define OSSL_STORE_F_FILE_OPEN                           120
+# define OSSL_STORE_F_OSSL_STORE_ATTACH_PEM_BIO           127
+# define OSSL_STORE_F_OSSL_STORE_EXPECT                   130
+# define OSSL_STORE_F_OSSL_STORE_FILE_ATTACH_PEM_BIO_INT  128
+# define OSSL_STORE_F_OSSL_STORE_FIND                     131
+# define OSSL_STORE_F_OSSL_STORE_GET0_LOADER_INT          100
+# define OSSL_STORE_F_OSSL_STORE_INFO_GET1_CERT           101
+# define OSSL_STORE_F_OSSL_STORE_INFO_GET1_CRL            102
+# define OSSL_STORE_F_OSSL_STORE_INFO_GET1_NAME           103
+# define OSSL_STORE_F_OSSL_STORE_INFO_GET1_NAME_DESCRIPTION 135
+# define OSSL_STORE_F_OSSL_STORE_INFO_GET1_PARAMS         104
+# define OSSL_STORE_F_OSSL_STORE_INFO_GET1_PKEY           105
+# define OSSL_STORE_F_OSSL_STORE_INFO_NEW_CERT            106
+# define OSSL_STORE_F_OSSL_STORE_INFO_NEW_CRL             107
+# define OSSL_STORE_F_OSSL_STORE_INFO_NEW_EMBEDDED        123
+# define OSSL_STORE_F_OSSL_STORE_INFO_NEW_NAME            109
+# define OSSL_STORE_F_OSSL_STORE_INFO_NEW_PARAMS          110
+# define OSSL_STORE_F_OSSL_STORE_INFO_NEW_PKEY            111
+# define OSSL_STORE_F_OSSL_STORE_INFO_SET0_NAME_DESCRIPTION 134
+# define OSSL_STORE_F_OSSL_STORE_INIT_ONCE                112
+# define OSSL_STORE_F_OSSL_STORE_LOADER_NEW               113
+# define OSSL_STORE_F_OSSL_STORE_OPEN                     114
+# define OSSL_STORE_F_OSSL_STORE_OPEN_INT                 115
+# define OSSL_STORE_F_OSSL_STORE_REGISTER_LOADER_INT      117
+# define OSSL_STORE_F_OSSL_STORE_SEARCH_BY_ALIAS          132
+# define OSSL_STORE_F_OSSL_STORE_SEARCH_BY_ISSUER_SERIAL  133
+# define OSSL_STORE_F_OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT 136
+# define OSSL_STORE_F_OSSL_STORE_SEARCH_BY_NAME           137
+# define OSSL_STORE_F_OSSL_STORE_UNREGISTER_LOADER_INT    116
+# define OSSL_STORE_F_TRY_DECODE_PARAMS                   121
+# define OSSL_STORE_F_TRY_DECODE_PKCS12                   122
+# define OSSL_STORE_F_TRY_DECODE_PKCS8ENCRYPTED           125
+
+/*
+ * OSSL_STORE reason codes.
+ */
+# define OSSL_STORE_R_AMBIGUOUS_CONTENT_TYPE              107
+# define OSSL_STORE_R_BAD_PASSWORD_READ                   115
+# define OSSL_STORE_R_ERROR_VERIFYING_PKCS12_MAC          113
+# define OSSL_STORE_R_FINGERPRINT_SIZE_DOES_NOT_MATCH_DIGEST 121
+# define OSSL_STORE_R_INVALID_SCHEME                      106
+# define OSSL_STORE_R_IS_NOT_A                            112
+# define OSSL_STORE_R_LOADER_INCOMPLETE                   116
+# define OSSL_STORE_R_LOADING_STARTED                     117
+# define OSSL_STORE_R_NOT_A_CERTIFICATE                   100
+# define OSSL_STORE_R_NOT_A_CRL                           101
+# define OSSL_STORE_R_NOT_A_KEY                           102
+# define OSSL_STORE_R_NOT_A_NAME                          103
+# define OSSL_STORE_R_NOT_PARAMETERS                      104
+# define OSSL_STORE_R_PASSPHRASE_CALLBACK_ERROR           114
+# define OSSL_STORE_R_PATH_MUST_BE_ABSOLUTE               108
+# define OSSL_STORE_R_SEARCH_ONLY_SUPPORTED_FOR_DIRECTORIES 119
+# define OSSL_STORE_R_UI_PROCESS_INTERRUPTED_OR_CANCELLED 109
+# define OSSL_STORE_R_UNREGISTERED_SCHEME                 105
+# define OSSL_STORE_R_UNSUPPORTED_CONTENT_TYPE            110
+# define OSSL_STORE_R_UNSUPPORTED_OPERATION               118
+# define OSSL_STORE_R_UNSUPPORTED_SEARCH_TYPE             120
+# define OSSL_STORE_R_URI_AUTHORITY_UNSUPPORTED           111
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/symhacks.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/symhacks.h
new file mode 100644
index 000000000..156ea6e4e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/symhacks.h
@@ -0,0 +1,37 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_SYMHACKS_H
+# define HEADER_SYMHACKS_H
+
+# include <openssl/e_os2.h>
+
+/* Case insensitive linking causes problems.... */
+# if defined(OPENSSL_SYS_VMS)
+#  undef ERR_load_CRYPTO_strings
+#  define ERR_load_CRYPTO_strings                 ERR_load_CRYPTOlib_strings
+#  undef OCSP_crlID_new
+#  define OCSP_crlID_new                          OCSP_crlID2_new
+
+#  undef d2i_ECPARAMETERS
+#  define d2i_ECPARAMETERS                        d2i_UC_ECPARAMETERS
+#  undef i2d_ECPARAMETERS
+#  define i2d_ECPARAMETERS                        i2d_UC_ECPARAMETERS
+#  undef d2i_ECPKPARAMETERS
+#  define d2i_ECPKPARAMETERS                      d2i_UC_ECPKPARAMETERS
+#  undef i2d_ECPKPARAMETERS
+#  define i2d_ECPKPARAMETERS                      i2d_UC_ECPKPARAMETERS
+
+/* This one clashes with CMS_data_create */
+#  undef cms_Data_create
+#  define cms_Data_create                         priv_cms_Data_create
+
+# endif
+
+#endif                          /* ! defined HEADER_VMS_IDHACKS_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/tls1.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/tls1.h
new file mode 100644
index 000000000..e13b5dd4b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/tls1.h
@@ -0,0 +1,1237 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ * Copyright 2005 Nokia. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_TLS1_H
+# define HEADER_TLS1_H
+
+# include <openssl/buffer.h>
+# include <openssl/x509.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+/* Default security level if not overridden at config time */
+# ifndef OPENSSL_TLS_SECURITY_LEVEL
+#  define OPENSSL_TLS_SECURITY_LEVEL 1
+# endif
+
+# define TLS1_VERSION                    0x0301
+# define TLS1_1_VERSION                  0x0302
+# define TLS1_2_VERSION                  0x0303
+# define TLS1_3_VERSION                  0x0304
+# define TLS_MAX_VERSION                 TLS1_3_VERSION
+
+/* Special value for method supporting multiple versions */
+# define TLS_ANY_VERSION                 0x10000
+
+# define TLS1_VERSION_MAJOR              0x03
+# define TLS1_VERSION_MINOR              0x01
+
+# define TLS1_1_VERSION_MAJOR            0x03
+# define TLS1_1_VERSION_MINOR            0x02
+
+# define TLS1_2_VERSION_MAJOR            0x03
+# define TLS1_2_VERSION_MINOR            0x03
+
+# define TLS1_get_version(s) \
+        ((SSL_version(s) >> 8) == TLS1_VERSION_MAJOR ? SSL_version(s) : 0)
+
+# define TLS1_get_client_version(s) \
+        ((SSL_client_version(s) >> 8) == TLS1_VERSION_MAJOR ? SSL_client_version(s) : 0)
+
+# define TLS1_AD_DECRYPTION_FAILED       21
+# define TLS1_AD_RECORD_OVERFLOW         22
+# define TLS1_AD_UNKNOWN_CA              48/* fatal */
+# define TLS1_AD_ACCESS_DENIED           49/* fatal */
+# define TLS1_AD_DECODE_ERROR            50/* fatal */
+# define TLS1_AD_DECRYPT_ERROR           51
+# define TLS1_AD_EXPORT_RESTRICTION      60/* fatal */
+# define TLS1_AD_PROTOCOL_VERSION        70/* fatal */
+# define TLS1_AD_INSUFFICIENT_SECURITY   71/* fatal */
+# define TLS1_AD_INTERNAL_ERROR          80/* fatal */
+# define TLS1_AD_INAPPROPRIATE_FALLBACK  86/* fatal */
+# define TLS1_AD_USER_CANCELLED          90
+# define TLS1_AD_NO_RENEGOTIATION        100
+/* TLSv1.3 alerts */
+# define TLS13_AD_MISSING_EXTENSION      109 /* fatal */
+# define TLS13_AD_CERTIFICATE_REQUIRED   116 /* fatal */
+/* codes 110-114 are from RFC3546 */
+# define TLS1_AD_UNSUPPORTED_EXTENSION   110
+# define TLS1_AD_CERTIFICATE_UNOBTAINABLE 111
+# define TLS1_AD_UNRECOGNIZED_NAME       112
+# define TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE 113
+# define TLS1_AD_BAD_CERTIFICATE_HASH_VALUE 114
+# define TLS1_AD_UNKNOWN_PSK_IDENTITY    115/* fatal */
+# define TLS1_AD_NO_APPLICATION_PROTOCOL 120 /* fatal */
+
+/* ExtensionType values from RFC3546 / RFC4366 / RFC6066 */
+# define TLSEXT_TYPE_server_name                 0
+# define TLSEXT_TYPE_max_fragment_length         1
+# define TLSEXT_TYPE_client_certificate_url      2
+# define TLSEXT_TYPE_trusted_ca_keys             3
+# define TLSEXT_TYPE_truncated_hmac              4
+# define TLSEXT_TYPE_status_request              5
+/* ExtensionType values from RFC4681 */
+# define TLSEXT_TYPE_user_mapping                6
+/* ExtensionType values from RFC5878 */
+# define TLSEXT_TYPE_client_authz                7
+# define TLSEXT_TYPE_server_authz                8
+/* ExtensionType values from RFC6091 */
+# define TLSEXT_TYPE_cert_type           9
+
+/* ExtensionType values from RFC4492 */
+/*
+ * Prior to TLSv1.3 the supported_groups extension was known as
+ * elliptic_curves
+ */
+# define TLSEXT_TYPE_supported_groups            10
+# define TLSEXT_TYPE_elliptic_curves             TLSEXT_TYPE_supported_groups
+# define TLSEXT_TYPE_ec_point_formats            11
+
+
+/* ExtensionType value from RFC5054 */
+# define TLSEXT_TYPE_srp                         12
+
+/* ExtensionType values from RFC5246 */
+# define TLSEXT_TYPE_signature_algorithms        13
+
+/* ExtensionType value from RFC5764 */
+# define TLSEXT_TYPE_use_srtp    14
+
+/* ExtensionType value from RFC5620 */
+# define TLSEXT_TYPE_heartbeat   15
+
+/* ExtensionType value from RFC7301 */
+# define TLSEXT_TYPE_application_layer_protocol_negotiation 16
+
+/*
+ * Extension type for Certificate Transparency
+ * https://tools.ietf.org/html/rfc6962#section-3.3.1
+ */
+# define TLSEXT_TYPE_signed_certificate_timestamp    18
+
+/*
+ * ExtensionType value for TLS padding extension.
+ * http://tools.ietf.org/html/draft-agl-tls-padding
+ */
+# define TLSEXT_TYPE_padding     21
+
+/* ExtensionType value from RFC7366 */
+# define TLSEXT_TYPE_encrypt_then_mac    22
+
+/* ExtensionType value from RFC7627 */
+# define TLSEXT_TYPE_extended_master_secret      23
+
+/* ExtensionType value from RFC4507 */
+# define TLSEXT_TYPE_session_ticket              35
+
+/* As defined for TLS1.3 */
+# define TLSEXT_TYPE_psk                         41
+# define TLSEXT_TYPE_early_data                  42
+# define TLSEXT_TYPE_supported_versions          43
+# define TLSEXT_TYPE_cookie                      44
+# define TLSEXT_TYPE_psk_kex_modes               45
+# define TLSEXT_TYPE_certificate_authorities     47
+# define TLSEXT_TYPE_post_handshake_auth         49
+# define TLSEXT_TYPE_signature_algorithms_cert   50
+# define TLSEXT_TYPE_key_share                   51
+
+/* Temporary extension type */
+# define TLSEXT_TYPE_renegotiate                 0xff01
+
+# ifndef OPENSSL_NO_NEXTPROTONEG
+/* This is not an IANA defined extension number */
+#  define TLSEXT_TYPE_next_proto_neg              13172
+# endif
+
+/* NameType value from RFC3546 */
+# define TLSEXT_NAMETYPE_host_name 0
+/* status request value from RFC3546 */
+# define TLSEXT_STATUSTYPE_ocsp 1
+
+/* ECPointFormat values from RFC4492 */
+# define TLSEXT_ECPOINTFORMAT_first                      0
+# define TLSEXT_ECPOINTFORMAT_uncompressed               0
+# define TLSEXT_ECPOINTFORMAT_ansiX962_compressed_prime  1
+# define TLSEXT_ECPOINTFORMAT_ansiX962_compressed_char2  2
+# define TLSEXT_ECPOINTFORMAT_last                       2
+
+/* Signature and hash algorithms from RFC5246 */
+# define TLSEXT_signature_anonymous                      0
+# define TLSEXT_signature_rsa                            1
+# define TLSEXT_signature_dsa                            2
+# define TLSEXT_signature_ecdsa                          3
+# define TLSEXT_signature_gostr34102001                  237
+# define TLSEXT_signature_gostr34102012_256              238
+# define TLSEXT_signature_gostr34102012_512              239
+
+/* Total number of different signature algorithms */
+# define TLSEXT_signature_num                            7
+
+# define TLSEXT_hash_none                                0
+# define TLSEXT_hash_md5                                 1
+# define TLSEXT_hash_sha1                                2
+# define TLSEXT_hash_sha224                              3
+# define TLSEXT_hash_sha256                              4
+# define TLSEXT_hash_sha384                              5
+# define TLSEXT_hash_sha512                              6
+# define TLSEXT_hash_gostr3411                           237
+# define TLSEXT_hash_gostr34112012_256                   238
+# define TLSEXT_hash_gostr34112012_512                   239
+
+/* Total number of different digest algorithms */
+
+# define TLSEXT_hash_num                                 10
+
+/* Flag set for unrecognised algorithms */
+# define TLSEXT_nid_unknown                              0x1000000
+
+/* ECC curves */
+
+# define TLSEXT_curve_P_256                              23
+# define TLSEXT_curve_P_384                              24
+
+/* OpenSSL value to disable maximum fragment length extension */
+# define TLSEXT_max_fragment_length_DISABLED    0
+/* Allowed values for max fragment length extension */
+# define TLSEXT_max_fragment_length_512         1
+# define TLSEXT_max_fragment_length_1024        2
+# define TLSEXT_max_fragment_length_2048        3
+# define TLSEXT_max_fragment_length_4096        4
+
+int SSL_CTX_set_tlsext_max_fragment_length(SSL_CTX *ctx, uint8_t mode);
+int SSL_set_tlsext_max_fragment_length(SSL *ssl, uint8_t mode);
+
+# define TLSEXT_MAXLEN_host_name 255
+
+__owur const char *SSL_get_servername(const SSL *s, const int type);
+__owur int SSL_get_servername_type(const SSL *s);
+/*
+ * SSL_export_keying_material exports a value derived from the master secret,
+ * as specified in RFC 5705. It writes |olen| bytes to |out| given a label and
+ * optional context. (Since a zero length context is allowed, the |use_context|
+ * flag controls whether a context is included.) It returns 1 on success and
+ * 0 or -1 otherwise.
+ */
+__owur int SSL_export_keying_material(SSL *s, unsigned char *out, size_t olen,
+                                      const char *label, size_t llen,
+                                      const unsigned char *context,
+                                      size_t contextlen, int use_context);
+
+/*
+ * SSL_export_keying_material_early exports a value derived from the
+ * early exporter master secret, as specified in
+ * https://tools.ietf.org/html/draft-ietf-tls-tls13-23. It writes
+ * |olen| bytes to |out| given a label and optional context. It
+ * returns 1 on success and 0 otherwise.
+ */
+__owur int SSL_export_keying_material_early(SSL *s, unsigned char *out,
+                                            size_t olen, const char *label,
+                                            size_t llen,
+                                            const unsigned char *context,
+                                            size_t contextlen);
+
+int SSL_get_peer_signature_type_nid(const SSL *s, int *pnid);
+int SSL_get_signature_type_nid(const SSL *s, int *pnid);
+
+int SSL_get_sigalgs(SSL *s, int idx,
+                    int *psign, int *phash, int *psignandhash,
+                    unsigned char *rsig, unsigned char *rhash);
+
+int SSL_get_shared_sigalgs(SSL *s, int idx,
+                           int *psign, int *phash, int *psignandhash,
+                           unsigned char *rsig, unsigned char *rhash);
+
+__owur int SSL_check_chain(SSL *s, X509 *x, EVP_PKEY *pk, STACK_OF(X509) *chain);
+
+# define SSL_set_tlsext_host_name(s,name) \
+        SSL_ctrl(s,SSL_CTRL_SET_TLSEXT_HOSTNAME,TLSEXT_NAMETYPE_host_name,\
+                (void *)name)
+
+# define SSL_set_tlsext_debug_callback(ssl, cb) \
+        SSL_callback_ctrl(ssl,SSL_CTRL_SET_TLSEXT_DEBUG_CB,\
+                (void (*)(void))cb)
+
+# define SSL_set_tlsext_debug_arg(ssl, arg) \
+        SSL_ctrl(ssl,SSL_CTRL_SET_TLSEXT_DEBUG_ARG,0,arg)
+
+# define SSL_get_tlsext_status_type(ssl) \
+        SSL_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_TYPE,0,NULL)
+
+# define SSL_set_tlsext_status_type(ssl, type) \
+        SSL_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_TYPE,type,NULL)
+
+# define SSL_get_tlsext_status_exts(ssl, arg) \
+        SSL_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_EXTS,0,arg)
+
+# define SSL_set_tlsext_status_exts(ssl, arg) \
+        SSL_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_EXTS,0,arg)
+
+# define SSL_get_tlsext_status_ids(ssl, arg) \
+        SSL_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_IDS,0,arg)
+
+# define SSL_set_tlsext_status_ids(ssl, arg) \
+        SSL_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_IDS,0,arg)
+
+# define SSL_get_tlsext_status_ocsp_resp(ssl, arg) \
+        SSL_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_OCSP_RESP,0,arg)
+
+# define SSL_set_tlsext_status_ocsp_resp(ssl, arg, arglen) \
+        SSL_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_OCSP_RESP,arglen,arg)
+
+# define SSL_CTX_set_tlsext_servername_callback(ctx, cb) \
+        SSL_CTX_callback_ctrl(ctx,SSL_CTRL_SET_TLSEXT_SERVERNAME_CB,\
+                (void (*)(void))cb)
+
+# define SSL_TLSEXT_ERR_OK 0
+# define SSL_TLSEXT_ERR_ALERT_WARNING 1
+# define SSL_TLSEXT_ERR_ALERT_FATAL 2
+# define SSL_TLSEXT_ERR_NOACK 3
+
+# define SSL_CTX_set_tlsext_servername_arg(ctx, arg) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_TLSEXT_SERVERNAME_ARG,0,arg)
+
+# define SSL_CTX_get_tlsext_ticket_keys(ctx, keys, keylen) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_GET_TLSEXT_TICKET_KEYS,keylen,keys)
+# define SSL_CTX_set_tlsext_ticket_keys(ctx, keys, keylen) \
+        SSL_CTX_ctrl(ctx,SSL_CTRL_SET_TLSEXT_TICKET_KEYS,keylen,keys)
+
+# define SSL_CTX_get_tlsext_status_cb(ssl, cb) \
+        SSL_CTX_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB,0,(void *)cb)
+# define SSL_CTX_set_tlsext_status_cb(ssl, cb) \
+        SSL_CTX_callback_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB,\
+                (void (*)(void))cb)
+
+# define SSL_CTX_get_tlsext_status_arg(ssl, arg) \
+        SSL_CTX_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB_ARG,0,arg)
+# define SSL_CTX_set_tlsext_status_arg(ssl, arg) \
+        SSL_CTX_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB_ARG,0,arg)
+
+# define SSL_CTX_set_tlsext_status_type(ssl, type) \
+        SSL_CTX_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_TYPE,type,NULL)
+
+# define SSL_CTX_get_tlsext_status_type(ssl) \
+        SSL_CTX_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_TYPE,0,NULL)
+
+# define SSL_CTX_set_tlsext_ticket_key_cb(ssl, cb) \
+        SSL_CTX_callback_ctrl(ssl,SSL_CTRL_SET_TLSEXT_TICKET_KEY_CB,\
+                (void (*)(void))cb)
+
+# ifndef OPENSSL_NO_HEARTBEATS
+#  define SSL_DTLSEXT_HB_ENABLED                   0x01
+#  define SSL_DTLSEXT_HB_DONT_SEND_REQUESTS        0x02
+#  define SSL_DTLSEXT_HB_DONT_RECV_REQUESTS        0x04
+#  define SSL_get_dtlsext_heartbeat_pending(ssl) \
+        SSL_ctrl(ssl,SSL_CTRL_GET_DTLS_EXT_HEARTBEAT_PENDING,0,NULL)
+#  define SSL_set_dtlsext_heartbeat_no_requests(ssl, arg) \
+        SSL_ctrl(ssl,SSL_CTRL_SET_DTLS_EXT_HEARTBEAT_NO_REQUESTS,arg,NULL)
+
+#  if OPENSSL_API_COMPAT < 0x10100000L
+#   define SSL_CTRL_TLS_EXT_SEND_HEARTBEAT \
+        SSL_CTRL_DTLS_EXT_SEND_HEARTBEAT
+#   define SSL_CTRL_GET_TLS_EXT_HEARTBEAT_PENDING \
+        SSL_CTRL_GET_DTLS_EXT_HEARTBEAT_PENDING
+#   define SSL_CTRL_SET_TLS_EXT_HEARTBEAT_NO_REQUESTS \
+        SSL_CTRL_SET_DTLS_EXT_HEARTBEAT_NO_REQUESTS
+#   define SSL_TLSEXT_HB_ENABLED \
+        SSL_DTLSEXT_HB_ENABLED
+#   define SSL_TLSEXT_HB_DONT_SEND_REQUESTS \
+        SSL_DTLSEXT_HB_DONT_SEND_REQUESTS
+#   define SSL_TLSEXT_HB_DONT_RECV_REQUESTS \
+        SSL_DTLSEXT_HB_DONT_RECV_REQUESTS
+#   define SSL_get_tlsext_heartbeat_pending(ssl) \
+        SSL_get_dtlsext_heartbeat_pending(ssl)
+#   define SSL_set_tlsext_heartbeat_no_requests(ssl, arg) \
+        SSL_set_dtlsext_heartbeat_no_requests(ssl,arg)
+#  endif
+# endif
+
+/* PSK ciphersuites from 4279 */
+# define TLS1_CK_PSK_WITH_RC4_128_SHA                    0x0300008A
+# define TLS1_CK_PSK_WITH_3DES_EDE_CBC_SHA               0x0300008B
+# define TLS1_CK_PSK_WITH_AES_128_CBC_SHA                0x0300008C
+# define TLS1_CK_PSK_WITH_AES_256_CBC_SHA                0x0300008D
+# define TLS1_CK_DHE_PSK_WITH_RC4_128_SHA                0x0300008E
+# define TLS1_CK_DHE_PSK_WITH_3DES_EDE_CBC_SHA           0x0300008F
+# define TLS1_CK_DHE_PSK_WITH_AES_128_CBC_SHA            0x03000090
+# define TLS1_CK_DHE_PSK_WITH_AES_256_CBC_SHA            0x03000091
+# define TLS1_CK_RSA_PSK_WITH_RC4_128_SHA                0x03000092
+# define TLS1_CK_RSA_PSK_WITH_3DES_EDE_CBC_SHA           0x03000093
+# define TLS1_CK_RSA_PSK_WITH_AES_128_CBC_SHA            0x03000094
+# define TLS1_CK_RSA_PSK_WITH_AES_256_CBC_SHA            0x03000095
+
+/* PSK ciphersuites from 5487 */
+# define TLS1_CK_PSK_WITH_AES_128_GCM_SHA256             0x030000A8
+# define TLS1_CK_PSK_WITH_AES_256_GCM_SHA384             0x030000A9
+# define TLS1_CK_DHE_PSK_WITH_AES_128_GCM_SHA256         0x030000AA
+# define TLS1_CK_DHE_PSK_WITH_AES_256_GCM_SHA384         0x030000AB
+# define TLS1_CK_RSA_PSK_WITH_AES_128_GCM_SHA256         0x030000AC
+# define TLS1_CK_RSA_PSK_WITH_AES_256_GCM_SHA384         0x030000AD
+# define TLS1_CK_PSK_WITH_AES_128_CBC_SHA256             0x030000AE
+# define TLS1_CK_PSK_WITH_AES_256_CBC_SHA384             0x030000AF
+# define TLS1_CK_PSK_WITH_NULL_SHA256                    0x030000B0
+# define TLS1_CK_PSK_WITH_NULL_SHA384                    0x030000B1
+# define TLS1_CK_DHE_PSK_WITH_AES_128_CBC_SHA256         0x030000B2
+# define TLS1_CK_DHE_PSK_WITH_AES_256_CBC_SHA384         0x030000B3
+# define TLS1_CK_DHE_PSK_WITH_NULL_SHA256                0x030000B4
+# define TLS1_CK_DHE_PSK_WITH_NULL_SHA384                0x030000B5
+# define TLS1_CK_RSA_PSK_WITH_AES_128_CBC_SHA256         0x030000B6
+# define TLS1_CK_RSA_PSK_WITH_AES_256_CBC_SHA384         0x030000B7
+# define TLS1_CK_RSA_PSK_WITH_NULL_SHA256                0x030000B8
+# define TLS1_CK_RSA_PSK_WITH_NULL_SHA384                0x030000B9
+
+/* NULL PSK ciphersuites from RFC4785 */
+# define TLS1_CK_PSK_WITH_NULL_SHA                       0x0300002C
+# define TLS1_CK_DHE_PSK_WITH_NULL_SHA                   0x0300002D
+# define TLS1_CK_RSA_PSK_WITH_NULL_SHA                   0x0300002E
+
+/* AES ciphersuites from RFC3268 */
+# define TLS1_CK_RSA_WITH_AES_128_SHA                    0x0300002F
+# define TLS1_CK_DH_DSS_WITH_AES_128_SHA                 0x03000030
+# define TLS1_CK_DH_RSA_WITH_AES_128_SHA                 0x03000031
+# define TLS1_CK_DHE_DSS_WITH_AES_128_SHA                0x03000032
+# define TLS1_CK_DHE_RSA_WITH_AES_128_SHA                0x03000033
+# define TLS1_CK_ADH_WITH_AES_128_SHA                    0x03000034
+# define TLS1_CK_RSA_WITH_AES_256_SHA                    0x03000035
+# define TLS1_CK_DH_DSS_WITH_AES_256_SHA                 0x03000036
+# define TLS1_CK_DH_RSA_WITH_AES_256_SHA                 0x03000037
+# define TLS1_CK_DHE_DSS_WITH_AES_256_SHA                0x03000038
+# define TLS1_CK_DHE_RSA_WITH_AES_256_SHA                0x03000039
+# define TLS1_CK_ADH_WITH_AES_256_SHA                    0x0300003A
+
+/* TLS v1.2 ciphersuites */
+# define TLS1_CK_RSA_WITH_NULL_SHA256                    0x0300003B
+# define TLS1_CK_RSA_WITH_AES_128_SHA256                 0x0300003C
+# define TLS1_CK_RSA_WITH_AES_256_SHA256                 0x0300003D
+# define TLS1_CK_DH_DSS_WITH_AES_128_SHA256              0x0300003E
+# define TLS1_CK_DH_RSA_WITH_AES_128_SHA256              0x0300003F
+# define TLS1_CK_DHE_DSS_WITH_AES_128_SHA256             0x03000040
+
+/* Camellia ciphersuites from RFC4132 */
+# define TLS1_CK_RSA_WITH_CAMELLIA_128_CBC_SHA           0x03000041
+# define TLS1_CK_DH_DSS_WITH_CAMELLIA_128_CBC_SHA        0x03000042
+# define TLS1_CK_DH_RSA_WITH_CAMELLIA_128_CBC_SHA        0x03000043
+# define TLS1_CK_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA       0x03000044
+# define TLS1_CK_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA       0x03000045
+# define TLS1_CK_ADH_WITH_CAMELLIA_128_CBC_SHA           0x03000046
+
+/* TLS v1.2 ciphersuites */
+# define TLS1_CK_DHE_RSA_WITH_AES_128_SHA256             0x03000067
+# define TLS1_CK_DH_DSS_WITH_AES_256_SHA256              0x03000068
+# define TLS1_CK_DH_RSA_WITH_AES_256_SHA256              0x03000069
+# define TLS1_CK_DHE_DSS_WITH_AES_256_SHA256             0x0300006A
+# define TLS1_CK_DHE_RSA_WITH_AES_256_SHA256             0x0300006B
+# define TLS1_CK_ADH_WITH_AES_128_SHA256                 0x0300006C
+# define TLS1_CK_ADH_WITH_AES_256_SHA256                 0x0300006D
+
+/* Camellia ciphersuites from RFC4132 */
+# define TLS1_CK_RSA_WITH_CAMELLIA_256_CBC_SHA           0x03000084
+# define TLS1_CK_DH_DSS_WITH_CAMELLIA_256_CBC_SHA        0x03000085
+# define TLS1_CK_DH_RSA_WITH_CAMELLIA_256_CBC_SHA        0x03000086
+# define TLS1_CK_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA       0x03000087
+# define TLS1_CK_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA       0x03000088
+# define TLS1_CK_ADH_WITH_CAMELLIA_256_CBC_SHA           0x03000089
+
+/* SEED ciphersuites from RFC4162 */
+# define TLS1_CK_RSA_WITH_SEED_SHA                       0x03000096
+# define TLS1_CK_DH_DSS_WITH_SEED_SHA                    0x03000097
+# define TLS1_CK_DH_RSA_WITH_SEED_SHA                    0x03000098
+# define TLS1_CK_DHE_DSS_WITH_SEED_SHA                   0x03000099
+# define TLS1_CK_DHE_RSA_WITH_SEED_SHA                   0x0300009A
+# define TLS1_CK_ADH_WITH_SEED_SHA                       0x0300009B
+
+/* TLS v1.2 GCM ciphersuites from RFC5288 */
+# define TLS1_CK_RSA_WITH_AES_128_GCM_SHA256             0x0300009C
+# define TLS1_CK_RSA_WITH_AES_256_GCM_SHA384             0x0300009D
+# define TLS1_CK_DHE_RSA_WITH_AES_128_GCM_SHA256         0x0300009E
+# define TLS1_CK_DHE_RSA_WITH_AES_256_GCM_SHA384         0x0300009F
+# define TLS1_CK_DH_RSA_WITH_AES_128_GCM_SHA256          0x030000A0
+# define TLS1_CK_DH_RSA_WITH_AES_256_GCM_SHA384          0x030000A1
+# define TLS1_CK_DHE_DSS_WITH_AES_128_GCM_SHA256         0x030000A2
+# define TLS1_CK_DHE_DSS_WITH_AES_256_GCM_SHA384         0x030000A3
+# define TLS1_CK_DH_DSS_WITH_AES_128_GCM_SHA256          0x030000A4
+# define TLS1_CK_DH_DSS_WITH_AES_256_GCM_SHA384          0x030000A5
+# define TLS1_CK_ADH_WITH_AES_128_GCM_SHA256             0x030000A6
+# define TLS1_CK_ADH_WITH_AES_256_GCM_SHA384             0x030000A7
+
+/* CCM ciphersuites from RFC6655 */
+# define TLS1_CK_RSA_WITH_AES_128_CCM                    0x0300C09C
+# define TLS1_CK_RSA_WITH_AES_256_CCM                    0x0300C09D
+# define TLS1_CK_DHE_RSA_WITH_AES_128_CCM                0x0300C09E
+# define TLS1_CK_DHE_RSA_WITH_AES_256_CCM                0x0300C09F
+# define TLS1_CK_RSA_WITH_AES_128_CCM_8                  0x0300C0A0
+# define TLS1_CK_RSA_WITH_AES_256_CCM_8                  0x0300C0A1
+# define TLS1_CK_DHE_RSA_WITH_AES_128_CCM_8              0x0300C0A2
+# define TLS1_CK_DHE_RSA_WITH_AES_256_CCM_8              0x0300C0A3
+# define TLS1_CK_PSK_WITH_AES_128_CCM                    0x0300C0A4
+# define TLS1_CK_PSK_WITH_AES_256_CCM                    0x0300C0A5
+# define TLS1_CK_DHE_PSK_WITH_AES_128_CCM                0x0300C0A6
+# define TLS1_CK_DHE_PSK_WITH_AES_256_CCM                0x0300C0A7
+# define TLS1_CK_PSK_WITH_AES_128_CCM_8                  0x0300C0A8
+# define TLS1_CK_PSK_WITH_AES_256_CCM_8                  0x0300C0A9
+# define TLS1_CK_DHE_PSK_WITH_AES_128_CCM_8              0x0300C0AA
+# define TLS1_CK_DHE_PSK_WITH_AES_256_CCM_8              0x0300C0AB
+
+/* CCM ciphersuites from RFC7251 */
+# define TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CCM            0x0300C0AC
+# define TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CCM            0x0300C0AD
+# define TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CCM_8          0x0300C0AE
+# define TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CCM_8          0x0300C0AF
+
+/* TLS 1.2 Camellia SHA-256 ciphersuites from RFC5932 */
+# define TLS1_CK_RSA_WITH_CAMELLIA_128_CBC_SHA256                0x030000BA
+# define TLS1_CK_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256             0x030000BB
+# define TLS1_CK_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256             0x030000BC
+# define TLS1_CK_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256            0x030000BD
+# define TLS1_CK_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256            0x030000BE
+# define TLS1_CK_ADH_WITH_CAMELLIA_128_CBC_SHA256                0x030000BF
+
+# define TLS1_CK_RSA_WITH_CAMELLIA_256_CBC_SHA256                0x030000C0
+# define TLS1_CK_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256             0x030000C1
+# define TLS1_CK_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256             0x030000C2
+# define TLS1_CK_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256            0x030000C3
+# define TLS1_CK_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256            0x030000C4
+# define TLS1_CK_ADH_WITH_CAMELLIA_256_CBC_SHA256                0x030000C5
+
+/* ECC ciphersuites from RFC4492 */
+# define TLS1_CK_ECDH_ECDSA_WITH_NULL_SHA                0x0300C001
+# define TLS1_CK_ECDH_ECDSA_WITH_RC4_128_SHA             0x0300C002
+# define TLS1_CK_ECDH_ECDSA_WITH_DES_192_CBC3_SHA        0x0300C003
+# define TLS1_CK_ECDH_ECDSA_WITH_AES_128_CBC_SHA         0x0300C004
+# define TLS1_CK_ECDH_ECDSA_WITH_AES_256_CBC_SHA         0x0300C005
+
+# define TLS1_CK_ECDHE_ECDSA_WITH_NULL_SHA               0x0300C006
+# define TLS1_CK_ECDHE_ECDSA_WITH_RC4_128_SHA            0x0300C007
+# define TLS1_CK_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA       0x0300C008
+# define TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA        0x0300C009
+# define TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA        0x0300C00A
+
+# define TLS1_CK_ECDH_RSA_WITH_NULL_SHA                  0x0300C00B
+# define TLS1_CK_ECDH_RSA_WITH_RC4_128_SHA               0x0300C00C
+# define TLS1_CK_ECDH_RSA_WITH_DES_192_CBC3_SHA          0x0300C00D
+# define TLS1_CK_ECDH_RSA_WITH_AES_128_CBC_SHA           0x0300C00E
+# define TLS1_CK_ECDH_RSA_WITH_AES_256_CBC_SHA           0x0300C00F
+
+# define TLS1_CK_ECDHE_RSA_WITH_NULL_SHA                 0x0300C010
+# define TLS1_CK_ECDHE_RSA_WITH_RC4_128_SHA              0x0300C011
+# define TLS1_CK_ECDHE_RSA_WITH_DES_192_CBC3_SHA         0x0300C012
+# define TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA          0x0300C013
+# define TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA          0x0300C014
+
+# define TLS1_CK_ECDH_anon_WITH_NULL_SHA                 0x0300C015
+# define TLS1_CK_ECDH_anon_WITH_RC4_128_SHA              0x0300C016
+# define TLS1_CK_ECDH_anon_WITH_DES_192_CBC3_SHA         0x0300C017
+# define TLS1_CK_ECDH_anon_WITH_AES_128_CBC_SHA          0x0300C018
+# define TLS1_CK_ECDH_anon_WITH_AES_256_CBC_SHA          0x0300C019
+
+/* SRP ciphersuites from RFC 5054 */
+# define TLS1_CK_SRP_SHA_WITH_3DES_EDE_CBC_SHA           0x0300C01A
+# define TLS1_CK_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA       0x0300C01B
+# define TLS1_CK_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA       0x0300C01C
+# define TLS1_CK_SRP_SHA_WITH_AES_128_CBC_SHA            0x0300C01D
+# define TLS1_CK_SRP_SHA_RSA_WITH_AES_128_CBC_SHA        0x0300C01E
+# define TLS1_CK_SRP_SHA_DSS_WITH_AES_128_CBC_SHA        0x0300C01F
+# define TLS1_CK_SRP_SHA_WITH_AES_256_CBC_SHA            0x0300C020
+# define TLS1_CK_SRP_SHA_RSA_WITH_AES_256_CBC_SHA        0x0300C021
+# define TLS1_CK_SRP_SHA_DSS_WITH_AES_256_CBC_SHA        0x0300C022
+
+/* ECDH HMAC based ciphersuites from RFC5289 */
+# define TLS1_CK_ECDHE_ECDSA_WITH_AES_128_SHA256         0x0300C023
+# define TLS1_CK_ECDHE_ECDSA_WITH_AES_256_SHA384         0x0300C024
+# define TLS1_CK_ECDH_ECDSA_WITH_AES_128_SHA256          0x0300C025
+# define TLS1_CK_ECDH_ECDSA_WITH_AES_256_SHA384          0x0300C026
+# define TLS1_CK_ECDHE_RSA_WITH_AES_128_SHA256           0x0300C027
+# define TLS1_CK_ECDHE_RSA_WITH_AES_256_SHA384           0x0300C028
+# define TLS1_CK_ECDH_RSA_WITH_AES_128_SHA256            0x0300C029
+# define TLS1_CK_ECDH_RSA_WITH_AES_256_SHA384            0x0300C02A
+
+/* ECDH GCM based ciphersuites from RFC5289 */
+# define TLS1_CK_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256     0x0300C02B
+# define TLS1_CK_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384     0x0300C02C
+# define TLS1_CK_ECDH_ECDSA_WITH_AES_128_GCM_SHA256      0x0300C02D
+# define TLS1_CK_ECDH_ECDSA_WITH_AES_256_GCM_SHA384      0x0300C02E
+# define TLS1_CK_ECDHE_RSA_WITH_AES_128_GCM_SHA256       0x0300C02F
+# define TLS1_CK_ECDHE_RSA_WITH_AES_256_GCM_SHA384       0x0300C030
+# define TLS1_CK_ECDH_RSA_WITH_AES_128_GCM_SHA256        0x0300C031
+# define TLS1_CK_ECDH_RSA_WITH_AES_256_GCM_SHA384        0x0300C032
+
+/* ECDHE PSK ciphersuites from RFC5489 */
+# define TLS1_CK_ECDHE_PSK_WITH_RC4_128_SHA              0x0300C033
+# define TLS1_CK_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA         0x0300C034
+# define TLS1_CK_ECDHE_PSK_WITH_AES_128_CBC_SHA          0x0300C035
+# define TLS1_CK_ECDHE_PSK_WITH_AES_256_CBC_SHA          0x0300C036
+
+# define TLS1_CK_ECDHE_PSK_WITH_AES_128_CBC_SHA256       0x0300C037
+# define TLS1_CK_ECDHE_PSK_WITH_AES_256_CBC_SHA384       0x0300C038
+
+/* NULL PSK ciphersuites from RFC4785 */
+# define TLS1_CK_ECDHE_PSK_WITH_NULL_SHA                 0x0300C039
+# define TLS1_CK_ECDHE_PSK_WITH_NULL_SHA256              0x0300C03A
+# define TLS1_CK_ECDHE_PSK_WITH_NULL_SHA384              0x0300C03B
+
+/* Camellia-CBC ciphersuites from RFC6367 */
+# define TLS1_CK_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 0x0300C072
+# define TLS1_CK_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 0x0300C073
+# define TLS1_CK_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256  0x0300C074
+# define TLS1_CK_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384  0x0300C075
+# define TLS1_CK_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256   0x0300C076
+# define TLS1_CK_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384   0x0300C077
+# define TLS1_CK_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256    0x0300C078
+# define TLS1_CK_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384    0x0300C079
+
+# define TLS1_CK_PSK_WITH_CAMELLIA_128_CBC_SHA256         0x0300C094
+# define TLS1_CK_PSK_WITH_CAMELLIA_256_CBC_SHA384         0x0300C095
+# define TLS1_CK_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256     0x0300C096
+# define TLS1_CK_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384     0x0300C097
+# define TLS1_CK_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256     0x0300C098
+# define TLS1_CK_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384     0x0300C099
+# define TLS1_CK_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256   0x0300C09A
+# define TLS1_CK_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384   0x0300C09B
+
+/* draft-ietf-tls-chacha20-poly1305-03 */
+# define TLS1_CK_ECDHE_RSA_WITH_CHACHA20_POLY1305         0x0300CCA8
+# define TLS1_CK_ECDHE_ECDSA_WITH_CHACHA20_POLY1305       0x0300CCA9
+# define TLS1_CK_DHE_RSA_WITH_CHACHA20_POLY1305           0x0300CCAA
+# define TLS1_CK_PSK_WITH_CHACHA20_POLY1305               0x0300CCAB
+# define TLS1_CK_ECDHE_PSK_WITH_CHACHA20_POLY1305         0x0300CCAC
+# define TLS1_CK_DHE_PSK_WITH_CHACHA20_POLY1305           0x0300CCAD
+# define TLS1_CK_RSA_PSK_WITH_CHACHA20_POLY1305           0x0300CCAE
+
+/* TLS v1.3 ciphersuites */
+# define TLS1_3_CK_AES_128_GCM_SHA256                     0x03001301
+# define TLS1_3_CK_AES_256_GCM_SHA384                     0x03001302
+# define TLS1_3_CK_CHACHA20_POLY1305_SHA256               0x03001303
+# define TLS1_3_CK_AES_128_CCM_SHA256                     0x03001304
+# define TLS1_3_CK_AES_128_CCM_8_SHA256                   0x03001305
+
+/* Aria ciphersuites from RFC6209 */
+# define TLS1_CK_RSA_WITH_ARIA_128_GCM_SHA256             0x0300C050
+# define TLS1_CK_RSA_WITH_ARIA_256_GCM_SHA384             0x0300C051
+# define TLS1_CK_DHE_RSA_WITH_ARIA_128_GCM_SHA256         0x0300C052
+# define TLS1_CK_DHE_RSA_WITH_ARIA_256_GCM_SHA384         0x0300C053
+# define TLS1_CK_DH_RSA_WITH_ARIA_128_GCM_SHA256          0x0300C054
+# define TLS1_CK_DH_RSA_WITH_ARIA_256_GCM_SHA384          0x0300C055
+# define TLS1_CK_DHE_DSS_WITH_ARIA_128_GCM_SHA256         0x0300C056
+# define TLS1_CK_DHE_DSS_WITH_ARIA_256_GCM_SHA384         0x0300C057
+# define TLS1_CK_DH_DSS_WITH_ARIA_128_GCM_SHA256          0x0300C058
+# define TLS1_CK_DH_DSS_WITH_ARIA_256_GCM_SHA384          0x0300C059
+# define TLS1_CK_DH_anon_WITH_ARIA_128_GCM_SHA256         0x0300C05A
+# define TLS1_CK_DH_anon_WITH_ARIA_256_GCM_SHA384         0x0300C05B
+# define TLS1_CK_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256     0x0300C05C
+# define TLS1_CK_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384     0x0300C05D
+# define TLS1_CK_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256      0x0300C05E
+# define TLS1_CK_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384      0x0300C05F
+# define TLS1_CK_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256       0x0300C060
+# define TLS1_CK_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384       0x0300C061
+# define TLS1_CK_ECDH_RSA_WITH_ARIA_128_GCM_SHA256        0x0300C062
+# define TLS1_CK_ECDH_RSA_WITH_ARIA_256_GCM_SHA384        0x0300C063
+# define TLS1_CK_PSK_WITH_ARIA_128_GCM_SHA256             0x0300C06A
+# define TLS1_CK_PSK_WITH_ARIA_256_GCM_SHA384             0x0300C06B
+# define TLS1_CK_DHE_PSK_WITH_ARIA_128_GCM_SHA256         0x0300C06C
+# define TLS1_CK_DHE_PSK_WITH_ARIA_256_GCM_SHA384         0x0300C06D
+# define TLS1_CK_RSA_PSK_WITH_ARIA_128_GCM_SHA256         0x0300C06E
+# define TLS1_CK_RSA_PSK_WITH_ARIA_256_GCM_SHA384         0x0300C06F
+
+/* a bundle of RFC standard cipher names, generated from ssl3_ciphers[] */
+# define TLS1_RFC_RSA_WITH_AES_128_SHA                   "TLS_RSA_WITH_AES_128_CBC_SHA"
+# define TLS1_RFC_DHE_DSS_WITH_AES_128_SHA               "TLS_DHE_DSS_WITH_AES_128_CBC_SHA"
+# define TLS1_RFC_DHE_RSA_WITH_AES_128_SHA               "TLS_DHE_RSA_WITH_AES_128_CBC_SHA"
+# define TLS1_RFC_ADH_WITH_AES_128_SHA                   "TLS_DH_anon_WITH_AES_128_CBC_SHA"
+# define TLS1_RFC_RSA_WITH_AES_256_SHA                   "TLS_RSA_WITH_AES_256_CBC_SHA"
+# define TLS1_RFC_DHE_DSS_WITH_AES_256_SHA               "TLS_DHE_DSS_WITH_AES_256_CBC_SHA"
+# define TLS1_RFC_DHE_RSA_WITH_AES_256_SHA               "TLS_DHE_RSA_WITH_AES_256_CBC_SHA"
+# define TLS1_RFC_ADH_WITH_AES_256_SHA                   "TLS_DH_anon_WITH_AES_256_CBC_SHA"
+# define TLS1_RFC_RSA_WITH_NULL_SHA256                   "TLS_RSA_WITH_NULL_SHA256"
+# define TLS1_RFC_RSA_WITH_AES_128_SHA256                "TLS_RSA_WITH_AES_128_CBC_SHA256"
+# define TLS1_RFC_RSA_WITH_AES_256_SHA256                "TLS_RSA_WITH_AES_256_CBC_SHA256"
+# define TLS1_RFC_DHE_DSS_WITH_AES_128_SHA256            "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256"
+# define TLS1_RFC_DHE_RSA_WITH_AES_128_SHA256            "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256"
+# define TLS1_RFC_DHE_DSS_WITH_AES_256_SHA256            "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256"
+# define TLS1_RFC_DHE_RSA_WITH_AES_256_SHA256            "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256"
+# define TLS1_RFC_ADH_WITH_AES_128_SHA256                "TLS_DH_anon_WITH_AES_128_CBC_SHA256"
+# define TLS1_RFC_ADH_WITH_AES_256_SHA256                "TLS_DH_anon_WITH_AES_256_CBC_SHA256"
+# define TLS1_RFC_RSA_WITH_AES_128_GCM_SHA256            "TLS_RSA_WITH_AES_128_GCM_SHA256"
+# define TLS1_RFC_RSA_WITH_AES_256_GCM_SHA384            "TLS_RSA_WITH_AES_256_GCM_SHA384"
+# define TLS1_RFC_DHE_RSA_WITH_AES_128_GCM_SHA256        "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256"
+# define TLS1_RFC_DHE_RSA_WITH_AES_256_GCM_SHA384        "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384"
+# define TLS1_RFC_DHE_DSS_WITH_AES_128_GCM_SHA256        "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256"
+# define TLS1_RFC_DHE_DSS_WITH_AES_256_GCM_SHA384        "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384"
+# define TLS1_RFC_ADH_WITH_AES_128_GCM_SHA256            "TLS_DH_anon_WITH_AES_128_GCM_SHA256"
+# define TLS1_RFC_ADH_WITH_AES_256_GCM_SHA384            "TLS_DH_anon_WITH_AES_256_GCM_SHA384"
+# define TLS1_RFC_RSA_WITH_AES_128_CCM                   "TLS_RSA_WITH_AES_128_CCM"
+# define TLS1_RFC_RSA_WITH_AES_256_CCM                   "TLS_RSA_WITH_AES_256_CCM"
+# define TLS1_RFC_DHE_RSA_WITH_AES_128_CCM               "TLS_DHE_RSA_WITH_AES_128_CCM"
+# define TLS1_RFC_DHE_RSA_WITH_AES_256_CCM               "TLS_DHE_RSA_WITH_AES_256_CCM"
+# define TLS1_RFC_RSA_WITH_AES_128_CCM_8                 "TLS_RSA_WITH_AES_128_CCM_8"
+# define TLS1_RFC_RSA_WITH_AES_256_CCM_8                 "TLS_RSA_WITH_AES_256_CCM_8"
+# define TLS1_RFC_DHE_RSA_WITH_AES_128_CCM_8             "TLS_DHE_RSA_WITH_AES_128_CCM_8"
+# define TLS1_RFC_DHE_RSA_WITH_AES_256_CCM_8             "TLS_DHE_RSA_WITH_AES_256_CCM_8"
+# define TLS1_RFC_PSK_WITH_AES_128_CCM                   "TLS_PSK_WITH_AES_128_CCM"
+# define TLS1_RFC_PSK_WITH_AES_256_CCM                   "TLS_PSK_WITH_AES_256_CCM"
+# define TLS1_RFC_DHE_PSK_WITH_AES_128_CCM               "TLS_DHE_PSK_WITH_AES_128_CCM"
+# define TLS1_RFC_DHE_PSK_WITH_AES_256_CCM               "TLS_DHE_PSK_WITH_AES_256_CCM"
+# define TLS1_RFC_PSK_WITH_AES_128_CCM_8                 "TLS_PSK_WITH_AES_128_CCM_8"
+# define TLS1_RFC_PSK_WITH_AES_256_CCM_8                 "TLS_PSK_WITH_AES_256_CCM_8"
+# define TLS1_RFC_DHE_PSK_WITH_AES_128_CCM_8             "TLS_PSK_DHE_WITH_AES_128_CCM_8"
+# define TLS1_RFC_DHE_PSK_WITH_AES_256_CCM_8             "TLS_PSK_DHE_WITH_AES_256_CCM_8"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_AES_128_CCM           "TLS_ECDHE_ECDSA_WITH_AES_128_CCM"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_AES_256_CCM           "TLS_ECDHE_ECDSA_WITH_AES_256_CCM"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_AES_128_CCM_8         "TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_AES_256_CCM_8         "TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8"
+# define TLS1_3_RFC_AES_128_GCM_SHA256                   "TLS_AES_128_GCM_SHA256"
+# define TLS1_3_RFC_AES_256_GCM_SHA384                   "TLS_AES_256_GCM_SHA384"
+# define TLS1_3_RFC_CHACHA20_POLY1305_SHA256             "TLS_CHACHA20_POLY1305_SHA256"
+# define TLS1_3_RFC_AES_128_CCM_SHA256                   "TLS_AES_128_CCM_SHA256"
+# define TLS1_3_RFC_AES_128_CCM_8_SHA256                 "TLS_AES_128_CCM_8_SHA256"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_NULL_SHA              "TLS_ECDHE_ECDSA_WITH_NULL_SHA"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA      "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_AES_128_CBC_SHA       "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_AES_256_CBC_SHA       "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"
+# define TLS1_RFC_ECDHE_RSA_WITH_NULL_SHA                "TLS_ECDHE_RSA_WITH_NULL_SHA"
+# define TLS1_RFC_ECDHE_RSA_WITH_DES_192_CBC3_SHA        "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"
+# define TLS1_RFC_ECDHE_RSA_WITH_AES_128_CBC_SHA         "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
+# define TLS1_RFC_ECDHE_RSA_WITH_AES_256_CBC_SHA         "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
+# define TLS1_RFC_ECDH_anon_WITH_NULL_SHA                "TLS_ECDH_anon_WITH_NULL_SHA"
+# define TLS1_RFC_ECDH_anon_WITH_DES_192_CBC3_SHA        "TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA"
+# define TLS1_RFC_ECDH_anon_WITH_AES_128_CBC_SHA         "TLS_ECDH_anon_WITH_AES_128_CBC_SHA"
+# define TLS1_RFC_ECDH_anon_WITH_AES_256_CBC_SHA         "TLS_ECDH_anon_WITH_AES_256_CBC_SHA"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_AES_128_SHA256        "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_AES_256_SHA384        "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384"
+# define TLS1_RFC_ECDHE_RSA_WITH_AES_128_SHA256          "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
+# define TLS1_RFC_ECDHE_RSA_WITH_AES_256_SHA384          "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256    "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384    "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
+# define TLS1_RFC_ECDHE_RSA_WITH_AES_128_GCM_SHA256      "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
+# define TLS1_RFC_ECDHE_RSA_WITH_AES_256_GCM_SHA384      "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
+# define TLS1_RFC_PSK_WITH_NULL_SHA                      "TLS_PSK_WITH_NULL_SHA"
+# define TLS1_RFC_DHE_PSK_WITH_NULL_SHA                  "TLS_DHE_PSK_WITH_NULL_SHA"
+# define TLS1_RFC_RSA_PSK_WITH_NULL_SHA                  "TLS_RSA_PSK_WITH_NULL_SHA"
+# define TLS1_RFC_PSK_WITH_3DES_EDE_CBC_SHA              "TLS_PSK_WITH_3DES_EDE_CBC_SHA"
+# define TLS1_RFC_PSK_WITH_AES_128_CBC_SHA               "TLS_PSK_WITH_AES_128_CBC_SHA"
+# define TLS1_RFC_PSK_WITH_AES_256_CBC_SHA               "TLS_PSK_WITH_AES_256_CBC_SHA"
+# define TLS1_RFC_DHE_PSK_WITH_3DES_EDE_CBC_SHA          "TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA"
+# define TLS1_RFC_DHE_PSK_WITH_AES_128_CBC_SHA           "TLS_DHE_PSK_WITH_AES_128_CBC_SHA"
+# define TLS1_RFC_DHE_PSK_WITH_AES_256_CBC_SHA           "TLS_DHE_PSK_WITH_AES_256_CBC_SHA"
+# define TLS1_RFC_RSA_PSK_WITH_3DES_EDE_CBC_SHA          "TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA"
+# define TLS1_RFC_RSA_PSK_WITH_AES_128_CBC_SHA           "TLS_RSA_PSK_WITH_AES_128_CBC_SHA"
+# define TLS1_RFC_RSA_PSK_WITH_AES_256_CBC_SHA           "TLS_RSA_PSK_WITH_AES_256_CBC_SHA"
+# define TLS1_RFC_PSK_WITH_AES_128_GCM_SHA256            "TLS_PSK_WITH_AES_128_GCM_SHA256"
+# define TLS1_RFC_PSK_WITH_AES_256_GCM_SHA384            "TLS_PSK_WITH_AES_256_GCM_SHA384"
+# define TLS1_RFC_DHE_PSK_WITH_AES_128_GCM_SHA256        "TLS_DHE_PSK_WITH_AES_128_GCM_SHA256"
+# define TLS1_RFC_DHE_PSK_WITH_AES_256_GCM_SHA384        "TLS_DHE_PSK_WITH_AES_256_GCM_SHA384"
+# define TLS1_RFC_RSA_PSK_WITH_AES_128_GCM_SHA256        "TLS_RSA_PSK_WITH_AES_128_GCM_SHA256"
+# define TLS1_RFC_RSA_PSK_WITH_AES_256_GCM_SHA384        "TLS_RSA_PSK_WITH_AES_256_GCM_SHA384"
+# define TLS1_RFC_PSK_WITH_AES_128_CBC_SHA256            "TLS_PSK_WITH_AES_128_CBC_SHA256"
+# define TLS1_RFC_PSK_WITH_AES_256_CBC_SHA384            "TLS_PSK_WITH_AES_256_CBC_SHA384"
+# define TLS1_RFC_PSK_WITH_NULL_SHA256                   "TLS_PSK_WITH_NULL_SHA256"
+# define TLS1_RFC_PSK_WITH_NULL_SHA384                   "TLS_PSK_WITH_NULL_SHA384"
+# define TLS1_RFC_DHE_PSK_WITH_AES_128_CBC_SHA256        "TLS_DHE_PSK_WITH_AES_128_CBC_SHA256"
+# define TLS1_RFC_DHE_PSK_WITH_AES_256_CBC_SHA384        "TLS_DHE_PSK_WITH_AES_256_CBC_SHA384"
+# define TLS1_RFC_DHE_PSK_WITH_NULL_SHA256               "TLS_DHE_PSK_WITH_NULL_SHA256"
+# define TLS1_RFC_DHE_PSK_WITH_NULL_SHA384               "TLS_DHE_PSK_WITH_NULL_SHA384"
+# define TLS1_RFC_RSA_PSK_WITH_AES_128_CBC_SHA256        "TLS_RSA_PSK_WITH_AES_128_CBC_SHA256"
+# define TLS1_RFC_RSA_PSK_WITH_AES_256_CBC_SHA384        "TLS_RSA_PSK_WITH_AES_256_CBC_SHA384"
+# define TLS1_RFC_RSA_PSK_WITH_NULL_SHA256               "TLS_RSA_PSK_WITH_NULL_SHA256"
+# define TLS1_RFC_RSA_PSK_WITH_NULL_SHA384               "TLS_RSA_PSK_WITH_NULL_SHA384"
+# define TLS1_RFC_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA        "TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA"
+# define TLS1_RFC_ECDHE_PSK_WITH_AES_128_CBC_SHA         "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA"
+# define TLS1_RFC_ECDHE_PSK_WITH_AES_256_CBC_SHA         "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA"
+# define TLS1_RFC_ECDHE_PSK_WITH_AES_128_CBC_SHA256      "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256"
+# define TLS1_RFC_ECDHE_PSK_WITH_AES_256_CBC_SHA384      "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384"
+# define TLS1_RFC_ECDHE_PSK_WITH_NULL_SHA                "TLS_ECDHE_PSK_WITH_NULL_SHA"
+# define TLS1_RFC_ECDHE_PSK_WITH_NULL_SHA256             "TLS_ECDHE_PSK_WITH_NULL_SHA256"
+# define TLS1_RFC_ECDHE_PSK_WITH_NULL_SHA384             "TLS_ECDHE_PSK_WITH_NULL_SHA384"
+# define TLS1_RFC_SRP_SHA_WITH_3DES_EDE_CBC_SHA          "TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA"
+# define TLS1_RFC_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA      "TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA"
+# define TLS1_RFC_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA      "TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA"
+# define TLS1_RFC_SRP_SHA_WITH_AES_128_CBC_SHA           "TLS_SRP_SHA_WITH_AES_128_CBC_SHA"
+# define TLS1_RFC_SRP_SHA_RSA_WITH_AES_128_CBC_SHA       "TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA"
+# define TLS1_RFC_SRP_SHA_DSS_WITH_AES_128_CBC_SHA       "TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA"
+# define TLS1_RFC_SRP_SHA_WITH_AES_256_CBC_SHA           "TLS_SRP_SHA_WITH_AES_256_CBC_SHA"
+# define TLS1_RFC_SRP_SHA_RSA_WITH_AES_256_CBC_SHA       "TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA"
+# define TLS1_RFC_SRP_SHA_DSS_WITH_AES_256_CBC_SHA       "TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA"
+# define TLS1_RFC_DHE_RSA_WITH_CHACHA20_POLY1305         "TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256"
+# define TLS1_RFC_ECDHE_RSA_WITH_CHACHA20_POLY1305       "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_CHACHA20_POLY1305     "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256"
+# define TLS1_RFC_PSK_WITH_CHACHA20_POLY1305             "TLS_PSK_WITH_CHACHA20_POLY1305_SHA256"
+# define TLS1_RFC_ECDHE_PSK_WITH_CHACHA20_POLY1305       "TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256"
+# define TLS1_RFC_DHE_PSK_WITH_CHACHA20_POLY1305         "TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256"
+# define TLS1_RFC_RSA_PSK_WITH_CHACHA20_POLY1305         "TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256"
+# define TLS1_RFC_RSA_WITH_CAMELLIA_128_CBC_SHA256       "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256"
+# define TLS1_RFC_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256   "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256"
+# define TLS1_RFC_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256   "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256"
+# define TLS1_RFC_ADH_WITH_CAMELLIA_128_CBC_SHA256       "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256"
+# define TLS1_RFC_RSA_WITH_CAMELLIA_256_CBC_SHA256       "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256"
+# define TLS1_RFC_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256   "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256"
+# define TLS1_RFC_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256   "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256"
+# define TLS1_RFC_ADH_WITH_CAMELLIA_256_CBC_SHA256       "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256"
+# define TLS1_RFC_RSA_WITH_CAMELLIA_256_CBC_SHA          "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA"
+# define TLS1_RFC_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA      "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA"
+# define TLS1_RFC_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA      "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA"
+# define TLS1_RFC_ADH_WITH_CAMELLIA_256_CBC_SHA          "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA"
+# define TLS1_RFC_RSA_WITH_CAMELLIA_128_CBC_SHA          "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA"
+# define TLS1_RFC_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA      "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA"
+# define TLS1_RFC_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA      "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA"
+# define TLS1_RFC_ADH_WITH_CAMELLIA_128_CBC_SHA          "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 "TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 "TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384"
+# define TLS1_RFC_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 "TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256"
+# define TLS1_RFC_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 "TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384"
+# define TLS1_RFC_PSK_WITH_CAMELLIA_128_CBC_SHA256       "TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256"
+# define TLS1_RFC_PSK_WITH_CAMELLIA_256_CBC_SHA384       "TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384"
+# define TLS1_RFC_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256   "TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256"
+# define TLS1_RFC_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384   "TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384"
+# define TLS1_RFC_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256   "TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256"
+# define TLS1_RFC_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384   "TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384"
+# define TLS1_RFC_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 "TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256"
+# define TLS1_RFC_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 "TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384"
+# define TLS1_RFC_RSA_WITH_SEED_SHA                      "TLS_RSA_WITH_SEED_CBC_SHA"
+# define TLS1_RFC_DHE_DSS_WITH_SEED_SHA                  "TLS_DHE_DSS_WITH_SEED_CBC_SHA"
+# define TLS1_RFC_DHE_RSA_WITH_SEED_SHA                  "TLS_DHE_RSA_WITH_SEED_CBC_SHA"
+# define TLS1_RFC_ADH_WITH_SEED_SHA                      "TLS_DH_anon_WITH_SEED_CBC_SHA"
+# define TLS1_RFC_ECDHE_PSK_WITH_RC4_128_SHA             "TLS_ECDHE_PSK_WITH_RC4_128_SHA"
+# define TLS1_RFC_ECDH_anon_WITH_RC4_128_SHA             "TLS_ECDH_anon_WITH_RC4_128_SHA"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_RC4_128_SHA           "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA"
+# define TLS1_RFC_ECDHE_RSA_WITH_RC4_128_SHA             "TLS_ECDHE_RSA_WITH_RC4_128_SHA"
+# define TLS1_RFC_PSK_WITH_RC4_128_SHA                   "TLS_PSK_WITH_RC4_128_SHA"
+# define TLS1_RFC_RSA_PSK_WITH_RC4_128_SHA               "TLS_RSA_PSK_WITH_RC4_128_SHA"
+# define TLS1_RFC_DHE_PSK_WITH_RC4_128_SHA               "TLS_DHE_PSK_WITH_RC4_128_SHA"
+# define TLS1_RFC_RSA_WITH_ARIA_128_GCM_SHA256           "TLS_RSA_WITH_ARIA_128_GCM_SHA256"
+# define TLS1_RFC_RSA_WITH_ARIA_256_GCM_SHA384           "TLS_RSA_WITH_ARIA_256_GCM_SHA384"
+# define TLS1_RFC_DHE_RSA_WITH_ARIA_128_GCM_SHA256       "TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256"
+# define TLS1_RFC_DHE_RSA_WITH_ARIA_256_GCM_SHA384       "TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384"
+# define TLS1_RFC_DH_RSA_WITH_ARIA_128_GCM_SHA256        "TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256"
+# define TLS1_RFC_DH_RSA_WITH_ARIA_256_GCM_SHA384        "TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384"
+# define TLS1_RFC_DHE_DSS_WITH_ARIA_128_GCM_SHA256       "TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256"
+# define TLS1_RFC_DHE_DSS_WITH_ARIA_256_GCM_SHA384       "TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384"
+# define TLS1_RFC_DH_DSS_WITH_ARIA_128_GCM_SHA256        "TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256"
+# define TLS1_RFC_DH_DSS_WITH_ARIA_256_GCM_SHA384        "TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384"
+# define TLS1_RFC_DH_anon_WITH_ARIA_128_GCM_SHA256       "TLS_DH_anon_WITH_ARIA_128_GCM_SHA256"
+# define TLS1_RFC_DH_anon_WITH_ARIA_256_GCM_SHA384       "TLS_DH_anon_WITH_ARIA_256_GCM_SHA384"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256   "TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256"
+# define TLS1_RFC_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384   "TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384"
+# define TLS1_RFC_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256    "TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256"
+# define TLS1_RFC_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384    "TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384"
+# define TLS1_RFC_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256     "TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256"
+# define TLS1_RFC_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384     "TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384"
+# define TLS1_RFC_ECDH_RSA_WITH_ARIA_128_GCM_SHA256      "TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256"
+# define TLS1_RFC_ECDH_RSA_WITH_ARIA_256_GCM_SHA384      "TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384"
+# define TLS1_RFC_PSK_WITH_ARIA_128_GCM_SHA256           "TLS_PSK_WITH_ARIA_128_GCM_SHA256"
+# define TLS1_RFC_PSK_WITH_ARIA_256_GCM_SHA384           "TLS_PSK_WITH_ARIA_256_GCM_SHA384"
+# define TLS1_RFC_DHE_PSK_WITH_ARIA_128_GCM_SHA256       "TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256"
+# define TLS1_RFC_DHE_PSK_WITH_ARIA_256_GCM_SHA384       "TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384"
+# define TLS1_RFC_RSA_PSK_WITH_ARIA_128_GCM_SHA256       "TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256"
+# define TLS1_RFC_RSA_PSK_WITH_ARIA_256_GCM_SHA384       "TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384"
+
+
+/*
+ * XXX Backward compatibility alert: Older versions of OpenSSL gave some DHE
+ * ciphers names with "EDH" instead of "DHE".  Going forward, we should be
+ * using DHE everywhere, though we may indefinitely maintain aliases for
+ * users or configurations that used "EDH"
+ */
+# define TLS1_TXT_DHE_DSS_WITH_RC4_128_SHA               "DHE-DSS-RC4-SHA"
+
+# define TLS1_TXT_PSK_WITH_NULL_SHA                      "PSK-NULL-SHA"
+# define TLS1_TXT_DHE_PSK_WITH_NULL_SHA                  "DHE-PSK-NULL-SHA"
+# define TLS1_TXT_RSA_PSK_WITH_NULL_SHA                  "RSA-PSK-NULL-SHA"
+
+/* AES ciphersuites from RFC3268 */
+# define TLS1_TXT_RSA_WITH_AES_128_SHA                   "AES128-SHA"
+# define TLS1_TXT_DH_DSS_WITH_AES_128_SHA                "DH-DSS-AES128-SHA"
+# define TLS1_TXT_DH_RSA_WITH_AES_128_SHA                "DH-RSA-AES128-SHA"
+# define TLS1_TXT_DHE_DSS_WITH_AES_128_SHA               "DHE-DSS-AES128-SHA"
+# define TLS1_TXT_DHE_RSA_WITH_AES_128_SHA               "DHE-RSA-AES128-SHA"
+# define TLS1_TXT_ADH_WITH_AES_128_SHA                   "ADH-AES128-SHA"
+
+# define TLS1_TXT_RSA_WITH_AES_256_SHA                   "AES256-SHA"
+# define TLS1_TXT_DH_DSS_WITH_AES_256_SHA                "DH-DSS-AES256-SHA"
+# define TLS1_TXT_DH_RSA_WITH_AES_256_SHA                "DH-RSA-AES256-SHA"
+# define TLS1_TXT_DHE_DSS_WITH_AES_256_SHA               "DHE-DSS-AES256-SHA"
+# define TLS1_TXT_DHE_RSA_WITH_AES_256_SHA               "DHE-RSA-AES256-SHA"
+# define TLS1_TXT_ADH_WITH_AES_256_SHA                   "ADH-AES256-SHA"
+
+/* ECC ciphersuites from RFC4492 */
+# define TLS1_TXT_ECDH_ECDSA_WITH_NULL_SHA               "ECDH-ECDSA-NULL-SHA"
+# define TLS1_TXT_ECDH_ECDSA_WITH_RC4_128_SHA            "ECDH-ECDSA-RC4-SHA"
+# define TLS1_TXT_ECDH_ECDSA_WITH_DES_192_CBC3_SHA       "ECDH-ECDSA-DES-CBC3-SHA"
+# define TLS1_TXT_ECDH_ECDSA_WITH_AES_128_CBC_SHA        "ECDH-ECDSA-AES128-SHA"
+# define TLS1_TXT_ECDH_ECDSA_WITH_AES_256_CBC_SHA        "ECDH-ECDSA-AES256-SHA"
+
+# define TLS1_TXT_ECDHE_ECDSA_WITH_NULL_SHA              "ECDHE-ECDSA-NULL-SHA"
+# define TLS1_TXT_ECDHE_ECDSA_WITH_RC4_128_SHA           "ECDHE-ECDSA-RC4-SHA"
+# define TLS1_TXT_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA      "ECDHE-ECDSA-DES-CBC3-SHA"
+# define TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA       "ECDHE-ECDSA-AES128-SHA"
+# define TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CBC_SHA       "ECDHE-ECDSA-AES256-SHA"
+
+# define TLS1_TXT_ECDH_RSA_WITH_NULL_SHA                 "ECDH-RSA-NULL-SHA"
+# define TLS1_TXT_ECDH_RSA_WITH_RC4_128_SHA              "ECDH-RSA-RC4-SHA"
+# define TLS1_TXT_ECDH_RSA_WITH_DES_192_CBC3_SHA         "ECDH-RSA-DES-CBC3-SHA"
+# define TLS1_TXT_ECDH_RSA_WITH_AES_128_CBC_SHA          "ECDH-RSA-AES128-SHA"
+# define TLS1_TXT_ECDH_RSA_WITH_AES_256_CBC_SHA          "ECDH-RSA-AES256-SHA"
+
+# define TLS1_TXT_ECDHE_RSA_WITH_NULL_SHA                "ECDHE-RSA-NULL-SHA"
+# define TLS1_TXT_ECDHE_RSA_WITH_RC4_128_SHA             "ECDHE-RSA-RC4-SHA"
+# define TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA        "ECDHE-RSA-DES-CBC3-SHA"
+# define TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA         "ECDHE-RSA-AES128-SHA"
+# define TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA         "ECDHE-RSA-AES256-SHA"
+
+# define TLS1_TXT_ECDH_anon_WITH_NULL_SHA                "AECDH-NULL-SHA"
+# define TLS1_TXT_ECDH_anon_WITH_RC4_128_SHA             "AECDH-RC4-SHA"
+# define TLS1_TXT_ECDH_anon_WITH_DES_192_CBC3_SHA        "AECDH-DES-CBC3-SHA"
+# define TLS1_TXT_ECDH_anon_WITH_AES_128_CBC_SHA         "AECDH-AES128-SHA"
+# define TLS1_TXT_ECDH_anon_WITH_AES_256_CBC_SHA         "AECDH-AES256-SHA"
+
+/* PSK ciphersuites from RFC 4279 */
+# define TLS1_TXT_PSK_WITH_RC4_128_SHA                   "PSK-RC4-SHA"
+# define TLS1_TXT_PSK_WITH_3DES_EDE_CBC_SHA              "PSK-3DES-EDE-CBC-SHA"
+# define TLS1_TXT_PSK_WITH_AES_128_CBC_SHA               "PSK-AES128-CBC-SHA"
+# define TLS1_TXT_PSK_WITH_AES_256_CBC_SHA               "PSK-AES256-CBC-SHA"
+
+# define TLS1_TXT_DHE_PSK_WITH_RC4_128_SHA               "DHE-PSK-RC4-SHA"
+# define TLS1_TXT_DHE_PSK_WITH_3DES_EDE_CBC_SHA          "DHE-PSK-3DES-EDE-CBC-SHA"
+# define TLS1_TXT_DHE_PSK_WITH_AES_128_CBC_SHA           "DHE-PSK-AES128-CBC-SHA"
+# define TLS1_TXT_DHE_PSK_WITH_AES_256_CBC_SHA           "DHE-PSK-AES256-CBC-SHA"
+# define TLS1_TXT_RSA_PSK_WITH_RC4_128_SHA               "RSA-PSK-RC4-SHA"
+# define TLS1_TXT_RSA_PSK_WITH_3DES_EDE_CBC_SHA          "RSA-PSK-3DES-EDE-CBC-SHA"
+# define TLS1_TXT_RSA_PSK_WITH_AES_128_CBC_SHA           "RSA-PSK-AES128-CBC-SHA"
+# define TLS1_TXT_RSA_PSK_WITH_AES_256_CBC_SHA           "RSA-PSK-AES256-CBC-SHA"
+
+/* PSK ciphersuites from RFC 5487 */
+# define TLS1_TXT_PSK_WITH_AES_128_GCM_SHA256            "PSK-AES128-GCM-SHA256"
+# define TLS1_TXT_PSK_WITH_AES_256_GCM_SHA384            "PSK-AES256-GCM-SHA384"
+# define TLS1_TXT_DHE_PSK_WITH_AES_128_GCM_SHA256        "DHE-PSK-AES128-GCM-SHA256"
+# define TLS1_TXT_DHE_PSK_WITH_AES_256_GCM_SHA384        "DHE-PSK-AES256-GCM-SHA384"
+# define TLS1_TXT_RSA_PSK_WITH_AES_128_GCM_SHA256        "RSA-PSK-AES128-GCM-SHA256"
+# define TLS1_TXT_RSA_PSK_WITH_AES_256_GCM_SHA384        "RSA-PSK-AES256-GCM-SHA384"
+
+# define TLS1_TXT_PSK_WITH_AES_128_CBC_SHA256            "PSK-AES128-CBC-SHA256"
+# define TLS1_TXT_PSK_WITH_AES_256_CBC_SHA384            "PSK-AES256-CBC-SHA384"
+# define TLS1_TXT_PSK_WITH_NULL_SHA256                   "PSK-NULL-SHA256"
+# define TLS1_TXT_PSK_WITH_NULL_SHA384                   "PSK-NULL-SHA384"
+
+# define TLS1_TXT_DHE_PSK_WITH_AES_128_CBC_SHA256        "DHE-PSK-AES128-CBC-SHA256"
+# define TLS1_TXT_DHE_PSK_WITH_AES_256_CBC_SHA384        "DHE-PSK-AES256-CBC-SHA384"
+# define TLS1_TXT_DHE_PSK_WITH_NULL_SHA256               "DHE-PSK-NULL-SHA256"
+# define TLS1_TXT_DHE_PSK_WITH_NULL_SHA384               "DHE-PSK-NULL-SHA384"
+
+# define TLS1_TXT_RSA_PSK_WITH_AES_128_CBC_SHA256        "RSA-PSK-AES128-CBC-SHA256"
+# define TLS1_TXT_RSA_PSK_WITH_AES_256_CBC_SHA384        "RSA-PSK-AES256-CBC-SHA384"
+# define TLS1_TXT_RSA_PSK_WITH_NULL_SHA256               "RSA-PSK-NULL-SHA256"
+# define TLS1_TXT_RSA_PSK_WITH_NULL_SHA384               "RSA-PSK-NULL-SHA384"
+
+/* SRP ciphersuite from RFC 5054 */
+# define TLS1_TXT_SRP_SHA_WITH_3DES_EDE_CBC_SHA          "SRP-3DES-EDE-CBC-SHA"
+# define TLS1_TXT_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA      "SRP-RSA-3DES-EDE-CBC-SHA"
+# define TLS1_TXT_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA      "SRP-DSS-3DES-EDE-CBC-SHA"
+# define TLS1_TXT_SRP_SHA_WITH_AES_128_CBC_SHA           "SRP-AES-128-CBC-SHA"
+# define TLS1_TXT_SRP_SHA_RSA_WITH_AES_128_CBC_SHA       "SRP-RSA-AES-128-CBC-SHA"
+# define TLS1_TXT_SRP_SHA_DSS_WITH_AES_128_CBC_SHA       "SRP-DSS-AES-128-CBC-SHA"
+# define TLS1_TXT_SRP_SHA_WITH_AES_256_CBC_SHA           "SRP-AES-256-CBC-SHA"
+# define TLS1_TXT_SRP_SHA_RSA_WITH_AES_256_CBC_SHA       "SRP-RSA-AES-256-CBC-SHA"
+# define TLS1_TXT_SRP_SHA_DSS_WITH_AES_256_CBC_SHA       "SRP-DSS-AES-256-CBC-SHA"
+
+/* Camellia ciphersuites from RFC4132 */
+# define TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA          "CAMELLIA128-SHA"
+# define TLS1_TXT_DH_DSS_WITH_CAMELLIA_128_CBC_SHA       "DH-DSS-CAMELLIA128-SHA"
+# define TLS1_TXT_DH_RSA_WITH_CAMELLIA_128_CBC_SHA       "DH-RSA-CAMELLIA128-SHA"
+# define TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA      "DHE-DSS-CAMELLIA128-SHA"
+# define TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA      "DHE-RSA-CAMELLIA128-SHA"
+# define TLS1_TXT_ADH_WITH_CAMELLIA_128_CBC_SHA          "ADH-CAMELLIA128-SHA"
+
+# define TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA          "CAMELLIA256-SHA"
+# define TLS1_TXT_DH_DSS_WITH_CAMELLIA_256_CBC_SHA       "DH-DSS-CAMELLIA256-SHA"
+# define TLS1_TXT_DH_RSA_WITH_CAMELLIA_256_CBC_SHA       "DH-RSA-CAMELLIA256-SHA"
+# define TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA      "DHE-DSS-CAMELLIA256-SHA"
+# define TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA      "DHE-RSA-CAMELLIA256-SHA"
+# define TLS1_TXT_ADH_WITH_CAMELLIA_256_CBC_SHA          "ADH-CAMELLIA256-SHA"
+
+/* TLS 1.2 Camellia SHA-256 ciphersuites from RFC5932 */
+# define TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA256               "CAMELLIA128-SHA256"
+# define TLS1_TXT_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256            "DH-DSS-CAMELLIA128-SHA256"
+# define TLS1_TXT_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256            "DH-RSA-CAMELLIA128-SHA256"
+# define TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256           "DHE-DSS-CAMELLIA128-SHA256"
+# define TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256           "DHE-RSA-CAMELLIA128-SHA256"
+# define TLS1_TXT_ADH_WITH_CAMELLIA_128_CBC_SHA256               "ADH-CAMELLIA128-SHA256"
+
+# define TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA256               "CAMELLIA256-SHA256"
+# define TLS1_TXT_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256            "DH-DSS-CAMELLIA256-SHA256"
+# define TLS1_TXT_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256            "DH-RSA-CAMELLIA256-SHA256"
+# define TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256           "DHE-DSS-CAMELLIA256-SHA256"
+# define TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256           "DHE-RSA-CAMELLIA256-SHA256"
+# define TLS1_TXT_ADH_WITH_CAMELLIA_256_CBC_SHA256               "ADH-CAMELLIA256-SHA256"
+
+# define TLS1_TXT_PSK_WITH_CAMELLIA_128_CBC_SHA256               "PSK-CAMELLIA128-SHA256"
+# define TLS1_TXT_PSK_WITH_CAMELLIA_256_CBC_SHA384               "PSK-CAMELLIA256-SHA384"
+# define TLS1_TXT_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256           "DHE-PSK-CAMELLIA128-SHA256"
+# define TLS1_TXT_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384           "DHE-PSK-CAMELLIA256-SHA384"
+# define TLS1_TXT_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256           "RSA-PSK-CAMELLIA128-SHA256"
+# define TLS1_TXT_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384           "RSA-PSK-CAMELLIA256-SHA384"
+# define TLS1_TXT_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256         "ECDHE-PSK-CAMELLIA128-SHA256"
+# define TLS1_TXT_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384         "ECDHE-PSK-CAMELLIA256-SHA384"
+
+/* SEED ciphersuites from RFC4162 */
+# define TLS1_TXT_RSA_WITH_SEED_SHA                      "SEED-SHA"
+# define TLS1_TXT_DH_DSS_WITH_SEED_SHA                   "DH-DSS-SEED-SHA"
+# define TLS1_TXT_DH_RSA_WITH_SEED_SHA                   "DH-RSA-SEED-SHA"
+# define TLS1_TXT_DHE_DSS_WITH_SEED_SHA                  "DHE-DSS-SEED-SHA"
+# define TLS1_TXT_DHE_RSA_WITH_SEED_SHA                  "DHE-RSA-SEED-SHA"
+# define TLS1_TXT_ADH_WITH_SEED_SHA                      "ADH-SEED-SHA"
+
+/* TLS v1.2 ciphersuites */
+# define TLS1_TXT_RSA_WITH_NULL_SHA256                   "NULL-SHA256"
+# define TLS1_TXT_RSA_WITH_AES_128_SHA256                "AES128-SHA256"
+# define TLS1_TXT_RSA_WITH_AES_256_SHA256                "AES256-SHA256"
+# define TLS1_TXT_DH_DSS_WITH_AES_128_SHA256             "DH-DSS-AES128-SHA256"
+# define TLS1_TXT_DH_RSA_WITH_AES_128_SHA256             "DH-RSA-AES128-SHA256"
+# define TLS1_TXT_DHE_DSS_WITH_AES_128_SHA256            "DHE-DSS-AES128-SHA256"
+# define TLS1_TXT_DHE_RSA_WITH_AES_128_SHA256            "DHE-RSA-AES128-SHA256"
+# define TLS1_TXT_DH_DSS_WITH_AES_256_SHA256             "DH-DSS-AES256-SHA256"
+# define TLS1_TXT_DH_RSA_WITH_AES_256_SHA256             "DH-RSA-AES256-SHA256"
+# define TLS1_TXT_DHE_DSS_WITH_AES_256_SHA256            "DHE-DSS-AES256-SHA256"
+# define TLS1_TXT_DHE_RSA_WITH_AES_256_SHA256            "DHE-RSA-AES256-SHA256"
+# define TLS1_TXT_ADH_WITH_AES_128_SHA256                "ADH-AES128-SHA256"
+# define TLS1_TXT_ADH_WITH_AES_256_SHA256                "ADH-AES256-SHA256"
+
+/* TLS v1.2 GCM ciphersuites from RFC5288 */
+# define TLS1_TXT_RSA_WITH_AES_128_GCM_SHA256            "AES128-GCM-SHA256"
+# define TLS1_TXT_RSA_WITH_AES_256_GCM_SHA384            "AES256-GCM-SHA384"
+# define TLS1_TXT_DHE_RSA_WITH_AES_128_GCM_SHA256        "DHE-RSA-AES128-GCM-SHA256"
+# define TLS1_TXT_DHE_RSA_WITH_AES_256_GCM_SHA384        "DHE-RSA-AES256-GCM-SHA384"
+# define TLS1_TXT_DH_RSA_WITH_AES_128_GCM_SHA256         "DH-RSA-AES128-GCM-SHA256"
+# define TLS1_TXT_DH_RSA_WITH_AES_256_GCM_SHA384         "DH-RSA-AES256-GCM-SHA384"
+# define TLS1_TXT_DHE_DSS_WITH_AES_128_GCM_SHA256        "DHE-DSS-AES128-GCM-SHA256"
+# define TLS1_TXT_DHE_DSS_WITH_AES_256_GCM_SHA384        "DHE-DSS-AES256-GCM-SHA384"
+# define TLS1_TXT_DH_DSS_WITH_AES_128_GCM_SHA256         "DH-DSS-AES128-GCM-SHA256"
+# define TLS1_TXT_DH_DSS_WITH_AES_256_GCM_SHA384         "DH-DSS-AES256-GCM-SHA384"
+# define TLS1_TXT_ADH_WITH_AES_128_GCM_SHA256            "ADH-AES128-GCM-SHA256"
+# define TLS1_TXT_ADH_WITH_AES_256_GCM_SHA384            "ADH-AES256-GCM-SHA384"
+
+/* CCM ciphersuites from RFC6655 */
+# define TLS1_TXT_RSA_WITH_AES_128_CCM                   "AES128-CCM"
+# define TLS1_TXT_RSA_WITH_AES_256_CCM                   "AES256-CCM"
+# define TLS1_TXT_DHE_RSA_WITH_AES_128_CCM               "DHE-RSA-AES128-CCM"
+# define TLS1_TXT_DHE_RSA_WITH_AES_256_CCM               "DHE-RSA-AES256-CCM"
+
+# define TLS1_TXT_RSA_WITH_AES_128_CCM_8                 "AES128-CCM8"
+# define TLS1_TXT_RSA_WITH_AES_256_CCM_8                 "AES256-CCM8"
+# define TLS1_TXT_DHE_RSA_WITH_AES_128_CCM_8             "DHE-RSA-AES128-CCM8"
+# define TLS1_TXT_DHE_RSA_WITH_AES_256_CCM_8             "DHE-RSA-AES256-CCM8"
+
+# define TLS1_TXT_PSK_WITH_AES_128_CCM                   "PSK-AES128-CCM"
+# define TLS1_TXT_PSK_WITH_AES_256_CCM                   "PSK-AES256-CCM"
+# define TLS1_TXT_DHE_PSK_WITH_AES_128_CCM               "DHE-PSK-AES128-CCM"
+# define TLS1_TXT_DHE_PSK_WITH_AES_256_CCM               "DHE-PSK-AES256-CCM"
+
+# define TLS1_TXT_PSK_WITH_AES_128_CCM_8                 "PSK-AES128-CCM8"
+# define TLS1_TXT_PSK_WITH_AES_256_CCM_8                 "PSK-AES256-CCM8"
+# define TLS1_TXT_DHE_PSK_WITH_AES_128_CCM_8             "DHE-PSK-AES128-CCM8"
+# define TLS1_TXT_DHE_PSK_WITH_AES_256_CCM_8             "DHE-PSK-AES256-CCM8"
+
+/* CCM ciphersuites from RFC7251 */
+# define TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CCM       "ECDHE-ECDSA-AES128-CCM"
+# define TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CCM       "ECDHE-ECDSA-AES256-CCM"
+# define TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CCM_8     "ECDHE-ECDSA-AES128-CCM8"
+# define TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CCM_8     "ECDHE-ECDSA-AES256-CCM8"
+
+/* ECDH HMAC based ciphersuites from RFC5289 */
+# define TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_SHA256    "ECDHE-ECDSA-AES128-SHA256"
+# define TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_SHA384    "ECDHE-ECDSA-AES256-SHA384"
+# define TLS1_TXT_ECDH_ECDSA_WITH_AES_128_SHA256     "ECDH-ECDSA-AES128-SHA256"
+# define TLS1_TXT_ECDH_ECDSA_WITH_AES_256_SHA384     "ECDH-ECDSA-AES256-SHA384"
+# define TLS1_TXT_ECDHE_RSA_WITH_AES_128_SHA256      "ECDHE-RSA-AES128-SHA256"
+# define TLS1_TXT_ECDHE_RSA_WITH_AES_256_SHA384      "ECDHE-RSA-AES256-SHA384"
+# define TLS1_TXT_ECDH_RSA_WITH_AES_128_SHA256       "ECDH-RSA-AES128-SHA256"
+# define TLS1_TXT_ECDH_RSA_WITH_AES_256_SHA384       "ECDH-RSA-AES256-SHA384"
+
+/* ECDH GCM based ciphersuites from RFC5289 */
+# define TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256    "ECDHE-ECDSA-AES128-GCM-SHA256"
+# define TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384    "ECDHE-ECDSA-AES256-GCM-SHA384"
+# define TLS1_TXT_ECDH_ECDSA_WITH_AES_128_GCM_SHA256     "ECDH-ECDSA-AES128-GCM-SHA256"
+# define TLS1_TXT_ECDH_ECDSA_WITH_AES_256_GCM_SHA384     "ECDH-ECDSA-AES256-GCM-SHA384"
+# define TLS1_TXT_ECDHE_RSA_WITH_AES_128_GCM_SHA256      "ECDHE-RSA-AES128-GCM-SHA256"
+# define TLS1_TXT_ECDHE_RSA_WITH_AES_256_GCM_SHA384      "ECDHE-RSA-AES256-GCM-SHA384"
+# define TLS1_TXT_ECDH_RSA_WITH_AES_128_GCM_SHA256       "ECDH-RSA-AES128-GCM-SHA256"
+# define TLS1_TXT_ECDH_RSA_WITH_AES_256_GCM_SHA384       "ECDH-RSA-AES256-GCM-SHA384"
+
+/* TLS v1.2 PSK GCM ciphersuites from RFC5487 */
+# define TLS1_TXT_PSK_WITH_AES_128_GCM_SHA256            "PSK-AES128-GCM-SHA256"
+# define TLS1_TXT_PSK_WITH_AES_256_GCM_SHA384            "PSK-AES256-GCM-SHA384"
+
+/* ECDHE PSK ciphersuites from RFC 5489 */
+# define TLS1_TXT_ECDHE_PSK_WITH_RC4_128_SHA               "ECDHE-PSK-RC4-SHA"
+# define TLS1_TXT_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA          "ECDHE-PSK-3DES-EDE-CBC-SHA"
+# define TLS1_TXT_ECDHE_PSK_WITH_AES_128_CBC_SHA           "ECDHE-PSK-AES128-CBC-SHA"
+# define TLS1_TXT_ECDHE_PSK_WITH_AES_256_CBC_SHA           "ECDHE-PSK-AES256-CBC-SHA"
+
+# define TLS1_TXT_ECDHE_PSK_WITH_AES_128_CBC_SHA256        "ECDHE-PSK-AES128-CBC-SHA256"
+# define TLS1_TXT_ECDHE_PSK_WITH_AES_256_CBC_SHA384        "ECDHE-PSK-AES256-CBC-SHA384"
+
+# define TLS1_TXT_ECDHE_PSK_WITH_NULL_SHA                  "ECDHE-PSK-NULL-SHA"
+# define TLS1_TXT_ECDHE_PSK_WITH_NULL_SHA256               "ECDHE-PSK-NULL-SHA256"
+# define TLS1_TXT_ECDHE_PSK_WITH_NULL_SHA384               "ECDHE-PSK-NULL-SHA384"
+
+/* Camellia-CBC ciphersuites from RFC6367 */
+# define TLS1_TXT_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 "ECDHE-ECDSA-CAMELLIA128-SHA256"
+# define TLS1_TXT_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 "ECDHE-ECDSA-CAMELLIA256-SHA384"
+# define TLS1_TXT_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256  "ECDH-ECDSA-CAMELLIA128-SHA256"
+# define TLS1_TXT_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384  "ECDH-ECDSA-CAMELLIA256-SHA384"
+# define TLS1_TXT_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256   "ECDHE-RSA-CAMELLIA128-SHA256"
+# define TLS1_TXT_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384   "ECDHE-RSA-CAMELLIA256-SHA384"
+# define TLS1_TXT_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256    "ECDH-RSA-CAMELLIA128-SHA256"
+# define TLS1_TXT_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384    "ECDH-RSA-CAMELLIA256-SHA384"
+
+/* draft-ietf-tls-chacha20-poly1305-03 */
+# define TLS1_TXT_ECDHE_RSA_WITH_CHACHA20_POLY1305         "ECDHE-RSA-CHACHA20-POLY1305"
+# define TLS1_TXT_ECDHE_ECDSA_WITH_CHACHA20_POLY1305       "ECDHE-ECDSA-CHACHA20-POLY1305"
+# define TLS1_TXT_DHE_RSA_WITH_CHACHA20_POLY1305           "DHE-RSA-CHACHA20-POLY1305"
+# define TLS1_TXT_PSK_WITH_CHACHA20_POLY1305               "PSK-CHACHA20-POLY1305"
+# define TLS1_TXT_ECDHE_PSK_WITH_CHACHA20_POLY1305         "ECDHE-PSK-CHACHA20-POLY1305"
+# define TLS1_TXT_DHE_PSK_WITH_CHACHA20_POLY1305           "DHE-PSK-CHACHA20-POLY1305"
+# define TLS1_TXT_RSA_PSK_WITH_CHACHA20_POLY1305           "RSA-PSK-CHACHA20-POLY1305"
+
+/* Aria ciphersuites from RFC6209 */
+# define TLS1_TXT_RSA_WITH_ARIA_128_GCM_SHA256             "ARIA128-GCM-SHA256"
+# define TLS1_TXT_RSA_WITH_ARIA_256_GCM_SHA384             "ARIA256-GCM-SHA384"
+# define TLS1_TXT_DHE_RSA_WITH_ARIA_128_GCM_SHA256         "DHE-RSA-ARIA128-GCM-SHA256"
+# define TLS1_TXT_DHE_RSA_WITH_ARIA_256_GCM_SHA384         "DHE-RSA-ARIA256-GCM-SHA384"
+# define TLS1_TXT_DH_RSA_WITH_ARIA_128_GCM_SHA256          "DH-RSA-ARIA128-GCM-SHA256"
+# define TLS1_TXT_DH_RSA_WITH_ARIA_256_GCM_SHA384          "DH-RSA-ARIA256-GCM-SHA384"
+# define TLS1_TXT_DHE_DSS_WITH_ARIA_128_GCM_SHA256         "DHE-DSS-ARIA128-GCM-SHA256"
+# define TLS1_TXT_DHE_DSS_WITH_ARIA_256_GCM_SHA384         "DHE-DSS-ARIA256-GCM-SHA384"
+# define TLS1_TXT_DH_DSS_WITH_ARIA_128_GCM_SHA256          "DH-DSS-ARIA128-GCM-SHA256"
+# define TLS1_TXT_DH_DSS_WITH_ARIA_256_GCM_SHA384          "DH-DSS-ARIA256-GCM-SHA384"
+# define TLS1_TXT_DH_anon_WITH_ARIA_128_GCM_SHA256         "ADH-ARIA128-GCM-SHA256"
+# define TLS1_TXT_DH_anon_WITH_ARIA_256_GCM_SHA384         "ADH-ARIA256-GCM-SHA384"
+# define TLS1_TXT_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256     "ECDHE-ECDSA-ARIA128-GCM-SHA256"
+# define TLS1_TXT_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384     "ECDHE-ECDSA-ARIA256-GCM-SHA384"
+# define TLS1_TXT_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256      "ECDH-ECDSA-ARIA128-GCM-SHA256"
+# define TLS1_TXT_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384      "ECDH-ECDSA-ARIA256-GCM-SHA384"
+# define TLS1_TXT_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256       "ECDHE-ARIA128-GCM-SHA256"
+# define TLS1_TXT_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384       "ECDHE-ARIA256-GCM-SHA384"
+# define TLS1_TXT_ECDH_RSA_WITH_ARIA_128_GCM_SHA256        "ECDH-ARIA128-GCM-SHA256"
+# define TLS1_TXT_ECDH_RSA_WITH_ARIA_256_GCM_SHA384        "ECDH-ARIA256-GCM-SHA384"
+# define TLS1_TXT_PSK_WITH_ARIA_128_GCM_SHA256             "PSK-ARIA128-GCM-SHA256"
+# define TLS1_TXT_PSK_WITH_ARIA_256_GCM_SHA384             "PSK-ARIA256-GCM-SHA384"
+# define TLS1_TXT_DHE_PSK_WITH_ARIA_128_GCM_SHA256         "DHE-PSK-ARIA128-GCM-SHA256"
+# define TLS1_TXT_DHE_PSK_WITH_ARIA_256_GCM_SHA384         "DHE-PSK-ARIA256-GCM-SHA384"
+# define TLS1_TXT_RSA_PSK_WITH_ARIA_128_GCM_SHA256         "RSA-PSK-ARIA128-GCM-SHA256"
+# define TLS1_TXT_RSA_PSK_WITH_ARIA_256_GCM_SHA384         "RSA-PSK-ARIA256-GCM-SHA384"
+
+# define TLS_CT_RSA_SIGN                 1
+# define TLS_CT_DSS_SIGN                 2
+# define TLS_CT_RSA_FIXED_DH             3
+# define TLS_CT_DSS_FIXED_DH             4
+# define TLS_CT_ECDSA_SIGN               64
+# define TLS_CT_RSA_FIXED_ECDH           65
+# define TLS_CT_ECDSA_FIXED_ECDH         66
+# define TLS_CT_GOST01_SIGN              22
+# define TLS_CT_GOST12_SIGN              238
+# define TLS_CT_GOST12_512_SIGN          239
+
+/*
+ * when correcting this number, correct also SSL3_CT_NUMBER in ssl3.h (see
+ * comment there)
+ */
+# define TLS_CT_NUMBER                   10
+
+# if defined(SSL3_CT_NUMBER)
+#  if TLS_CT_NUMBER != SSL3_CT_NUMBER
+#    error "SSL/TLS CT_NUMBER values do not match"
+#  endif
+# endif
+
+# define TLS1_FINISH_MAC_LENGTH          12
+
+# define TLS_MD_MAX_CONST_SIZE                   22
+# define TLS_MD_CLIENT_FINISH_CONST              "client finished"
+# define TLS_MD_CLIENT_FINISH_CONST_SIZE         15
+# define TLS_MD_SERVER_FINISH_CONST              "server finished"
+# define TLS_MD_SERVER_FINISH_CONST_SIZE         15
+# define TLS_MD_KEY_EXPANSION_CONST              "key expansion"
+# define TLS_MD_KEY_EXPANSION_CONST_SIZE         13
+# define TLS_MD_CLIENT_WRITE_KEY_CONST           "client write key"
+# define TLS_MD_CLIENT_WRITE_KEY_CONST_SIZE      16
+# define TLS_MD_SERVER_WRITE_KEY_CONST           "server write key"
+# define TLS_MD_SERVER_WRITE_KEY_CONST_SIZE      16
+# define TLS_MD_IV_BLOCK_CONST                   "IV block"
+# define TLS_MD_IV_BLOCK_CONST_SIZE              8
+# define TLS_MD_MASTER_SECRET_CONST              "master secret"
+# define TLS_MD_MASTER_SECRET_CONST_SIZE         13
+# define TLS_MD_EXTENDED_MASTER_SECRET_CONST     "extended master secret"
+# define TLS_MD_EXTENDED_MASTER_SECRET_CONST_SIZE        22
+
+# ifdef CHARSET_EBCDIC
+#  undef TLS_MD_CLIENT_FINISH_CONST
+/*
+ * client finished
+ */
+#  define TLS_MD_CLIENT_FINISH_CONST    "\x63\x6c\x69\x65\x6e\x74\x20\x66\x69\x6e\x69\x73\x68\x65\x64"
+
+#  undef TLS_MD_SERVER_FINISH_CONST
+/*
+ * server finished
+ */
+#  define TLS_MD_SERVER_FINISH_CONST    "\x73\x65\x72\x76\x65\x72\x20\x66\x69\x6e\x69\x73\x68\x65\x64"
+
+#  undef TLS_MD_SERVER_WRITE_KEY_CONST
+/*
+ * server write key
+ */
+#  define TLS_MD_SERVER_WRITE_KEY_CONST "\x73\x65\x72\x76\x65\x72\x20\x77\x72\x69\x74\x65\x20\x6b\x65\x79"
+
+#  undef TLS_MD_KEY_EXPANSION_CONST
+/*
+ * key expansion
+ */
+#  define TLS_MD_KEY_EXPANSION_CONST    "\x6b\x65\x79\x20\x65\x78\x70\x61\x6e\x73\x69\x6f\x6e"
+
+#  undef TLS_MD_CLIENT_WRITE_KEY_CONST
+/*
+ * client write key
+ */
+#  define TLS_MD_CLIENT_WRITE_KEY_CONST "\x63\x6c\x69\x65\x6e\x74\x20\x77\x72\x69\x74\x65\x20\x6b\x65\x79"
+
+#  undef TLS_MD_SERVER_WRITE_KEY_CONST
+/*
+ * server write key
+ */
+#  define TLS_MD_SERVER_WRITE_KEY_CONST "\x73\x65\x72\x76\x65\x72\x20\x77\x72\x69\x74\x65\x20\x6b\x65\x79"
+
+#  undef TLS_MD_IV_BLOCK_CONST
+/*
+ * IV block
+ */
+#  define TLS_MD_IV_BLOCK_CONST         "\x49\x56\x20\x62\x6c\x6f\x63\x6b"
+
+#  undef TLS_MD_MASTER_SECRET_CONST
+/*
+ * master secret
+ */
+#  define TLS_MD_MASTER_SECRET_CONST    "\x6d\x61\x73\x74\x65\x72\x20\x73\x65\x63\x72\x65\x74"
+#  undef TLS_MD_EXTENDED_MASTER_SECRET_CONST
+/*
+ * extended master secret
+ */
+#  define TLS_MD_EXTENDED_MASTER_SECRET_CONST    "\x65\x78\x74\x65\x63\x64\x65\x64\x20\x6d\x61\x73\x74\x65\x72\x20\x73\x65\x63\x72\x65\x74"
+# endif
+
+/* TLS Session Ticket extension struct */
+struct tls_session_ticket_ext_st {
+    unsigned short length;
+    void *data;
+};
+
+#ifdef  __cplusplus
+}
+#endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/ts.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ts.h
new file mode 100644
index 000000000..3b58aa527
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ts.h
@@ -0,0 +1,559 @@
+/*
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_TS_H
+# define HEADER_TS_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_TS
+# include <openssl/symhacks.h>
+# include <openssl/buffer.h>
+# include <openssl/evp.h>
+# include <openssl/bio.h>
+# include <openssl/asn1.h>
+# include <openssl/safestack.h>
+# include <openssl/rsa.h>
+# include <openssl/dsa.h>
+# include <openssl/dh.h>
+# include <openssl/tserr.h>
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+# include <openssl/x509.h>
+# include <openssl/x509v3.h>
+
+typedef struct TS_msg_imprint_st TS_MSG_IMPRINT;
+typedef struct TS_req_st TS_REQ;
+typedef struct TS_accuracy_st TS_ACCURACY;
+typedef struct TS_tst_info_st TS_TST_INFO;
+
+/* Possible values for status. */
+# define TS_STATUS_GRANTED                       0
+# define TS_STATUS_GRANTED_WITH_MODS             1
+# define TS_STATUS_REJECTION                     2
+# define TS_STATUS_WAITING                       3
+# define TS_STATUS_REVOCATION_WARNING            4
+# define TS_STATUS_REVOCATION_NOTIFICATION       5
+
+/* Possible values for failure_info. */
+# define TS_INFO_BAD_ALG                 0
+# define TS_INFO_BAD_REQUEST             2
+# define TS_INFO_BAD_DATA_FORMAT         5
+# define TS_INFO_TIME_NOT_AVAILABLE      14
+# define TS_INFO_UNACCEPTED_POLICY       15
+# define TS_INFO_UNACCEPTED_EXTENSION    16
+# define TS_INFO_ADD_INFO_NOT_AVAILABLE  17
+# define TS_INFO_SYSTEM_FAILURE          25
+
+
+typedef struct TS_status_info_st TS_STATUS_INFO;
+typedef struct ESS_issuer_serial ESS_ISSUER_SERIAL;
+typedef struct ESS_cert_id ESS_CERT_ID;
+typedef struct ESS_signing_cert ESS_SIGNING_CERT;
+
+DEFINE_STACK_OF(ESS_CERT_ID)
+
+typedef struct ESS_cert_id_v2_st ESS_CERT_ID_V2;
+typedef struct ESS_signing_cert_v2_st ESS_SIGNING_CERT_V2;
+
+DEFINE_STACK_OF(ESS_CERT_ID_V2)
+
+typedef struct TS_resp_st TS_RESP;
+
+TS_REQ *TS_REQ_new(void);
+void TS_REQ_free(TS_REQ *a);
+int i2d_TS_REQ(const TS_REQ *a, unsigned char **pp);
+TS_REQ *d2i_TS_REQ(TS_REQ **a, const unsigned char **pp, long length);
+
+TS_REQ *TS_REQ_dup(TS_REQ *a);
+
+#ifndef OPENSSL_NO_STDIO
+TS_REQ *d2i_TS_REQ_fp(FILE *fp, TS_REQ **a);
+int i2d_TS_REQ_fp(FILE *fp, TS_REQ *a);
+#endif
+TS_REQ *d2i_TS_REQ_bio(BIO *fp, TS_REQ **a);
+int i2d_TS_REQ_bio(BIO *fp, TS_REQ *a);
+
+TS_MSG_IMPRINT *TS_MSG_IMPRINT_new(void);
+void TS_MSG_IMPRINT_free(TS_MSG_IMPRINT *a);
+int i2d_TS_MSG_IMPRINT(const TS_MSG_IMPRINT *a, unsigned char **pp);
+TS_MSG_IMPRINT *d2i_TS_MSG_IMPRINT(TS_MSG_IMPRINT **a,
+                                   const unsigned char **pp, long length);
+
+TS_MSG_IMPRINT *TS_MSG_IMPRINT_dup(TS_MSG_IMPRINT *a);
+
+#ifndef OPENSSL_NO_STDIO
+TS_MSG_IMPRINT *d2i_TS_MSG_IMPRINT_fp(FILE *fp, TS_MSG_IMPRINT **a);
+int i2d_TS_MSG_IMPRINT_fp(FILE *fp, TS_MSG_IMPRINT *a);
+#endif
+TS_MSG_IMPRINT *d2i_TS_MSG_IMPRINT_bio(BIO *bio, TS_MSG_IMPRINT **a);
+int i2d_TS_MSG_IMPRINT_bio(BIO *bio, TS_MSG_IMPRINT *a);
+
+TS_RESP *TS_RESP_new(void);
+void TS_RESP_free(TS_RESP *a);
+int i2d_TS_RESP(const TS_RESP *a, unsigned char **pp);
+TS_RESP *d2i_TS_RESP(TS_RESP **a, const unsigned char **pp, long length);
+TS_TST_INFO *PKCS7_to_TS_TST_INFO(PKCS7 *token);
+TS_RESP *TS_RESP_dup(TS_RESP *a);
+
+#ifndef OPENSSL_NO_STDIO
+TS_RESP *d2i_TS_RESP_fp(FILE *fp, TS_RESP **a);
+int i2d_TS_RESP_fp(FILE *fp, TS_RESP *a);
+#endif
+TS_RESP *d2i_TS_RESP_bio(BIO *bio, TS_RESP **a);
+int i2d_TS_RESP_bio(BIO *bio, TS_RESP *a);
+
+TS_STATUS_INFO *TS_STATUS_INFO_new(void);
+void TS_STATUS_INFO_free(TS_STATUS_INFO *a);
+int i2d_TS_STATUS_INFO(const TS_STATUS_INFO *a, unsigned char **pp);
+TS_STATUS_INFO *d2i_TS_STATUS_INFO(TS_STATUS_INFO **a,
+                                   const unsigned char **pp, long length);
+TS_STATUS_INFO *TS_STATUS_INFO_dup(TS_STATUS_INFO *a);
+
+TS_TST_INFO *TS_TST_INFO_new(void);
+void TS_TST_INFO_free(TS_TST_INFO *a);
+int i2d_TS_TST_INFO(const TS_TST_INFO *a, unsigned char **pp);
+TS_TST_INFO *d2i_TS_TST_INFO(TS_TST_INFO **a, const unsigned char **pp,
+                             long length);
+TS_TST_INFO *TS_TST_INFO_dup(TS_TST_INFO *a);
+
+#ifndef OPENSSL_NO_STDIO
+TS_TST_INFO *d2i_TS_TST_INFO_fp(FILE *fp, TS_TST_INFO **a);
+int i2d_TS_TST_INFO_fp(FILE *fp, TS_TST_INFO *a);
+#endif
+TS_TST_INFO *d2i_TS_TST_INFO_bio(BIO *bio, TS_TST_INFO **a);
+int i2d_TS_TST_INFO_bio(BIO *bio, TS_TST_INFO *a);
+
+TS_ACCURACY *TS_ACCURACY_new(void);
+void TS_ACCURACY_free(TS_ACCURACY *a);
+int i2d_TS_ACCURACY(const TS_ACCURACY *a, unsigned char **pp);
+TS_ACCURACY *d2i_TS_ACCURACY(TS_ACCURACY **a, const unsigned char **pp,
+                             long length);
+TS_ACCURACY *TS_ACCURACY_dup(TS_ACCURACY *a);
+
+ESS_ISSUER_SERIAL *ESS_ISSUER_SERIAL_new(void);
+void ESS_ISSUER_SERIAL_free(ESS_ISSUER_SERIAL *a);
+int i2d_ESS_ISSUER_SERIAL(const ESS_ISSUER_SERIAL *a, unsigned char **pp);
+ESS_ISSUER_SERIAL *d2i_ESS_ISSUER_SERIAL(ESS_ISSUER_SERIAL **a,
+                                         const unsigned char **pp,
+                                         long length);
+ESS_ISSUER_SERIAL *ESS_ISSUER_SERIAL_dup(ESS_ISSUER_SERIAL *a);
+
+ESS_CERT_ID *ESS_CERT_ID_new(void);
+void ESS_CERT_ID_free(ESS_CERT_ID *a);
+int i2d_ESS_CERT_ID(const ESS_CERT_ID *a, unsigned char **pp);
+ESS_CERT_ID *d2i_ESS_CERT_ID(ESS_CERT_ID **a, const unsigned char **pp,
+                             long length);
+ESS_CERT_ID *ESS_CERT_ID_dup(ESS_CERT_ID *a);
+
+ESS_SIGNING_CERT *ESS_SIGNING_CERT_new(void);
+void ESS_SIGNING_CERT_free(ESS_SIGNING_CERT *a);
+int i2d_ESS_SIGNING_CERT(const ESS_SIGNING_CERT *a, unsigned char **pp);
+ESS_SIGNING_CERT *d2i_ESS_SIGNING_CERT(ESS_SIGNING_CERT **a,
+                                       const unsigned char **pp, long length);
+ESS_SIGNING_CERT *ESS_SIGNING_CERT_dup(ESS_SIGNING_CERT *a);
+
+ESS_CERT_ID_V2 *ESS_CERT_ID_V2_new(void);
+void ESS_CERT_ID_V2_free(ESS_CERT_ID_V2 *a);
+int i2d_ESS_CERT_ID_V2(const ESS_CERT_ID_V2 *a, unsigned char **pp);
+ESS_CERT_ID_V2 *d2i_ESS_CERT_ID_V2(ESS_CERT_ID_V2 **a,
+                                   const unsigned char **pp, long length);
+ESS_CERT_ID_V2 *ESS_CERT_ID_V2_dup(ESS_CERT_ID_V2 *a);
+
+ESS_SIGNING_CERT_V2 *ESS_SIGNING_CERT_V2_new(void);
+void ESS_SIGNING_CERT_V2_free(ESS_SIGNING_CERT_V2 *a);
+int i2d_ESS_SIGNING_CERT_V2(const ESS_SIGNING_CERT_V2 *a, unsigned char **pp);
+ESS_SIGNING_CERT_V2 *d2i_ESS_SIGNING_CERT_V2(ESS_SIGNING_CERT_V2 **a,
+                                             const unsigned char **pp,
+                                             long length);
+ESS_SIGNING_CERT_V2 *ESS_SIGNING_CERT_V2_dup(ESS_SIGNING_CERT_V2 *a);
+
+int TS_REQ_set_version(TS_REQ *a, long version);
+long TS_REQ_get_version(const TS_REQ *a);
+
+int TS_STATUS_INFO_set_status(TS_STATUS_INFO *a, int i);
+const ASN1_INTEGER *TS_STATUS_INFO_get0_status(const TS_STATUS_INFO *a);
+
+const STACK_OF(ASN1_UTF8STRING) *
+TS_STATUS_INFO_get0_text(const TS_STATUS_INFO *a);
+
+const ASN1_BIT_STRING *
+TS_STATUS_INFO_get0_failure_info(const TS_STATUS_INFO *a);
+
+int TS_REQ_set_msg_imprint(TS_REQ *a, TS_MSG_IMPRINT *msg_imprint);
+TS_MSG_IMPRINT *TS_REQ_get_msg_imprint(TS_REQ *a);
+
+int TS_MSG_IMPRINT_set_algo(TS_MSG_IMPRINT *a, X509_ALGOR *alg);
+X509_ALGOR *TS_MSG_IMPRINT_get_algo(TS_MSG_IMPRINT *a);
+
+int TS_MSG_IMPRINT_set_msg(TS_MSG_IMPRINT *a, unsigned char *d, int len);
+ASN1_OCTET_STRING *TS_MSG_IMPRINT_get_msg(TS_MSG_IMPRINT *a);
+
+int TS_REQ_set_policy_id(TS_REQ *a, const ASN1_OBJECT *policy);
+ASN1_OBJECT *TS_REQ_get_policy_id(TS_REQ *a);
+
+int TS_REQ_set_nonce(TS_REQ *a, const ASN1_INTEGER *nonce);
+const ASN1_INTEGER *TS_REQ_get_nonce(const TS_REQ *a);
+
+int TS_REQ_set_cert_req(TS_REQ *a, int cert_req);
+int TS_REQ_get_cert_req(const TS_REQ *a);
+
+STACK_OF(X509_EXTENSION) *TS_REQ_get_exts(TS_REQ *a);
+void TS_REQ_ext_free(TS_REQ *a);
+int TS_REQ_get_ext_count(TS_REQ *a);
+int TS_REQ_get_ext_by_NID(TS_REQ *a, int nid, int lastpos);
+int TS_REQ_get_ext_by_OBJ(TS_REQ *a, const ASN1_OBJECT *obj, int lastpos);
+int TS_REQ_get_ext_by_critical(TS_REQ *a, int crit, int lastpos);
+X509_EXTENSION *TS_REQ_get_ext(TS_REQ *a, int loc);
+X509_EXTENSION *TS_REQ_delete_ext(TS_REQ *a, int loc);
+int TS_REQ_add_ext(TS_REQ *a, X509_EXTENSION *ex, int loc);
+void *TS_REQ_get_ext_d2i(TS_REQ *a, int nid, int *crit, int *idx);
+
+/* Function declarations for TS_REQ defined in ts/ts_req_print.c */
+
+int TS_REQ_print_bio(BIO *bio, TS_REQ *a);
+
+/* Function declarations for TS_RESP defined in ts/ts_resp_utils.c */
+
+int TS_RESP_set_status_info(TS_RESP *a, TS_STATUS_INFO *info);
+TS_STATUS_INFO *TS_RESP_get_status_info(TS_RESP *a);
+
+/* Caller loses ownership of PKCS7 and TS_TST_INFO objects. */
+void TS_RESP_set_tst_info(TS_RESP *a, PKCS7 *p7, TS_TST_INFO *tst_info);
+PKCS7 *TS_RESP_get_token(TS_RESP *a);
+TS_TST_INFO *TS_RESP_get_tst_info(TS_RESP *a);
+
+int TS_TST_INFO_set_version(TS_TST_INFO *a, long version);
+long TS_TST_INFO_get_version(const TS_TST_INFO *a);
+
+int TS_TST_INFO_set_policy_id(TS_TST_INFO *a, ASN1_OBJECT *policy_id);
+ASN1_OBJECT *TS_TST_INFO_get_policy_id(TS_TST_INFO *a);
+
+int TS_TST_INFO_set_msg_imprint(TS_TST_INFO *a, TS_MSG_IMPRINT *msg_imprint);
+TS_MSG_IMPRINT *TS_TST_INFO_get_msg_imprint(TS_TST_INFO *a);
+
+int TS_TST_INFO_set_serial(TS_TST_INFO *a, const ASN1_INTEGER *serial);
+const ASN1_INTEGER *TS_TST_INFO_get_serial(const TS_TST_INFO *a);
+
+int TS_TST_INFO_set_time(TS_TST_INFO *a, const ASN1_GENERALIZEDTIME *gtime);
+const ASN1_GENERALIZEDTIME *TS_TST_INFO_get_time(const TS_TST_INFO *a);
+
+int TS_TST_INFO_set_accuracy(TS_TST_INFO *a, TS_ACCURACY *accuracy);
+TS_ACCURACY *TS_TST_INFO_get_accuracy(TS_TST_INFO *a);
+
+int TS_ACCURACY_set_seconds(TS_ACCURACY *a, const ASN1_INTEGER *seconds);
+const ASN1_INTEGER *TS_ACCURACY_get_seconds(const TS_ACCURACY *a);
+
+int TS_ACCURACY_set_millis(TS_ACCURACY *a, const ASN1_INTEGER *millis);
+const ASN1_INTEGER *TS_ACCURACY_get_millis(const TS_ACCURACY *a);
+
+int TS_ACCURACY_set_micros(TS_ACCURACY *a, const ASN1_INTEGER *micros);
+const ASN1_INTEGER *TS_ACCURACY_get_micros(const TS_ACCURACY *a);
+
+int TS_TST_INFO_set_ordering(TS_TST_INFO *a, int ordering);
+int TS_TST_INFO_get_ordering(const TS_TST_INFO *a);
+
+int TS_TST_INFO_set_nonce(TS_TST_INFO *a, const ASN1_INTEGER *nonce);
+const ASN1_INTEGER *TS_TST_INFO_get_nonce(const TS_TST_INFO *a);
+
+int TS_TST_INFO_set_tsa(TS_TST_INFO *a, GENERAL_NAME *tsa);
+GENERAL_NAME *TS_TST_INFO_get_tsa(TS_TST_INFO *a);
+
+STACK_OF(X509_EXTENSION) *TS_TST_INFO_get_exts(TS_TST_INFO *a);
+void TS_TST_INFO_ext_free(TS_TST_INFO *a);
+int TS_TST_INFO_get_ext_count(TS_TST_INFO *a);
+int TS_TST_INFO_get_ext_by_NID(TS_TST_INFO *a, int nid, int lastpos);
+int TS_TST_INFO_get_ext_by_OBJ(TS_TST_INFO *a, const ASN1_OBJECT *obj,
+                               int lastpos);
+int TS_TST_INFO_get_ext_by_critical(TS_TST_INFO *a, int crit, int lastpos);
+X509_EXTENSION *TS_TST_INFO_get_ext(TS_TST_INFO *a, int loc);
+X509_EXTENSION *TS_TST_INFO_delete_ext(TS_TST_INFO *a, int loc);
+int TS_TST_INFO_add_ext(TS_TST_INFO *a, X509_EXTENSION *ex, int loc);
+void *TS_TST_INFO_get_ext_d2i(TS_TST_INFO *a, int nid, int *crit, int *idx);
+
+/*
+ * Declarations related to response generation, defined in ts/ts_resp_sign.c.
+ */
+
+/* Optional flags for response generation. */
+
+/* Don't include the TSA name in response. */
+# define TS_TSA_NAME             0x01
+
+/* Set ordering to true in response. */
+# define TS_ORDERING             0x02
+
+/*
+ * Include the signer certificate and the other specified certificates in
+ * the ESS signing certificate attribute beside the PKCS7 signed data.
+ * Only the signer certificates is included by default.
+ */
+# define TS_ESS_CERT_ID_CHAIN    0x04
+
+/* Forward declaration. */
+struct TS_resp_ctx;
+
+/* This must return a unique number less than 160 bits long. */
+typedef ASN1_INTEGER *(*TS_serial_cb) (struct TS_resp_ctx *, void *);
+
+/*
+ * This must return the seconds and microseconds since Jan 1, 1970 in the sec
+ * and usec variables allocated by the caller. Return non-zero for success
+ * and zero for failure.
+ */
+typedef int (*TS_time_cb) (struct TS_resp_ctx *, void *, long *sec,
+                           long *usec);
+
+/*
+ * This must process the given extension. It can modify the TS_TST_INFO
+ * object of the context. Return values: !0 (processed), 0 (error, it must
+ * set the status info/failure info of the response).
+ */
+typedef int (*TS_extension_cb) (struct TS_resp_ctx *, X509_EXTENSION *,
+                                void *);
+
+typedef struct TS_resp_ctx TS_RESP_CTX;
+
+DEFINE_STACK_OF_CONST(EVP_MD)
+
+/* Creates a response context that can be used for generating responses. */
+TS_RESP_CTX *TS_RESP_CTX_new(void);
+void TS_RESP_CTX_free(TS_RESP_CTX *ctx);
+
+/* This parameter must be set. */
+int TS_RESP_CTX_set_signer_cert(TS_RESP_CTX *ctx, X509 *signer);
+
+/* This parameter must be set. */
+int TS_RESP_CTX_set_signer_key(TS_RESP_CTX *ctx, EVP_PKEY *key);
+
+int TS_RESP_CTX_set_signer_digest(TS_RESP_CTX *ctx,
+                                  const EVP_MD *signer_digest);
+int TS_RESP_CTX_set_ess_cert_id_digest(TS_RESP_CTX *ctx, const EVP_MD *md);
+
+/* This parameter must be set. */
+int TS_RESP_CTX_set_def_policy(TS_RESP_CTX *ctx, const ASN1_OBJECT *def_policy);
+
+/* No additional certs are included in the response by default. */
+int TS_RESP_CTX_set_certs(TS_RESP_CTX *ctx, STACK_OF(X509) *certs);
+
+/*
+ * Adds a new acceptable policy, only the default policy is accepted by
+ * default.
+ */
+int TS_RESP_CTX_add_policy(TS_RESP_CTX *ctx, const ASN1_OBJECT *policy);
+
+/*
+ * Adds a new acceptable message digest. Note that no message digests are
+ * accepted by default. The md argument is shared with the caller.
+ */
+int TS_RESP_CTX_add_md(TS_RESP_CTX *ctx, const EVP_MD *md);
+
+/* Accuracy is not included by default. */
+int TS_RESP_CTX_set_accuracy(TS_RESP_CTX *ctx,
+                             int secs, int millis, int micros);
+
+/*
+ * Clock precision digits, i.e. the number of decimal digits: '0' means sec,
+ * '3' msec, '6' usec, and so on. Default is 0.
+ */
+int TS_RESP_CTX_set_clock_precision_digits(TS_RESP_CTX *ctx,
+                                           unsigned clock_precision_digits);
+/* At most we accept usec precision. */
+# define TS_MAX_CLOCK_PRECISION_DIGITS   6
+
+/* Maximum status message length */
+# define TS_MAX_STATUS_LENGTH   (1024 * 1024)
+
+/* No flags are set by default. */
+void TS_RESP_CTX_add_flags(TS_RESP_CTX *ctx, int flags);
+
+/* Default callback always returns a constant. */
+void TS_RESP_CTX_set_serial_cb(TS_RESP_CTX *ctx, TS_serial_cb cb, void *data);
+
+/* Default callback uses the gettimeofday() and gmtime() system calls. */
+void TS_RESP_CTX_set_time_cb(TS_RESP_CTX *ctx, TS_time_cb cb, void *data);
+
+/*
+ * Default callback rejects all extensions. The extension callback is called
+ * when the TS_TST_INFO object is already set up and not signed yet.
+ */
+/* FIXME: extension handling is not tested yet. */
+void TS_RESP_CTX_set_extension_cb(TS_RESP_CTX *ctx,
+                                  TS_extension_cb cb, void *data);
+
+/* The following methods can be used in the callbacks. */
+int TS_RESP_CTX_set_status_info(TS_RESP_CTX *ctx,
+                                int status, const char *text);
+
+/* Sets the status info only if it is still TS_STATUS_GRANTED. */
+int TS_RESP_CTX_set_status_info_cond(TS_RESP_CTX *ctx,
+                                     int status, const char *text);
+
+int TS_RESP_CTX_add_failure_info(TS_RESP_CTX *ctx, int failure);
+
+/* The get methods below can be used in the extension callback. */
+TS_REQ *TS_RESP_CTX_get_request(TS_RESP_CTX *ctx);
+
+TS_TST_INFO *TS_RESP_CTX_get_tst_info(TS_RESP_CTX *ctx);
+
+/*
+ * Creates the signed TS_TST_INFO and puts it in TS_RESP.
+ * In case of errors it sets the status info properly.
+ * Returns NULL only in case of memory allocation/fatal error.
+ */
+TS_RESP *TS_RESP_create_response(TS_RESP_CTX *ctx, BIO *req_bio);
+
+/*
+ * Declarations related to response verification,
+ * they are defined in ts/ts_resp_verify.c.
+ */
+
+int TS_RESP_verify_signature(PKCS7 *token, STACK_OF(X509) *certs,
+                             X509_STORE *store, X509 **signer_out);
+
+/* Context structure for the generic verify method. */
+
+/* Verify the signer's certificate and the signature of the response. */
+# define TS_VFY_SIGNATURE        (1u << 0)
+/* Verify the version number of the response. */
+# define TS_VFY_VERSION          (1u << 1)
+/* Verify if the policy supplied by the user matches the policy of the TSA. */
+# define TS_VFY_POLICY           (1u << 2)
+/*
+ * Verify the message imprint provided by the user. This flag should not be
+ * specified with TS_VFY_DATA.
+ */
+# define TS_VFY_IMPRINT          (1u << 3)
+/*
+ * Verify the message imprint computed by the verify method from the user
+ * provided data and the MD algorithm of the response. This flag should not
+ * be specified with TS_VFY_IMPRINT.
+ */
+# define TS_VFY_DATA             (1u << 4)
+/* Verify the nonce value. */
+# define TS_VFY_NONCE            (1u << 5)
+/* Verify if the TSA name field matches the signer certificate. */
+# define TS_VFY_SIGNER           (1u << 6)
+/* Verify if the TSA name field equals to the user provided name. */
+# define TS_VFY_TSA_NAME         (1u << 7)
+
+/* You can use the following convenience constants. */
+# define TS_VFY_ALL_IMPRINT      (TS_VFY_SIGNATURE       \
+                                 | TS_VFY_VERSION       \
+                                 | TS_VFY_POLICY        \
+                                 | TS_VFY_IMPRINT       \
+                                 | TS_VFY_NONCE         \
+                                 | TS_VFY_SIGNER        \
+                                 | TS_VFY_TSA_NAME)
+# define TS_VFY_ALL_DATA         (TS_VFY_SIGNATURE       \
+                                 | TS_VFY_VERSION       \
+                                 | TS_VFY_POLICY        \
+                                 | TS_VFY_DATA          \
+                                 | TS_VFY_NONCE         \
+                                 | TS_VFY_SIGNER        \
+                                 | TS_VFY_TSA_NAME)
+
+typedef struct TS_verify_ctx TS_VERIFY_CTX;
+
+int TS_RESP_verify_response(TS_VERIFY_CTX *ctx, TS_RESP *response);
+int TS_RESP_verify_token(TS_VERIFY_CTX *ctx, PKCS7 *token);
+
+/*
+ * Declarations related to response verification context,
+ */
+TS_VERIFY_CTX *TS_VERIFY_CTX_new(void);
+void TS_VERIFY_CTX_init(TS_VERIFY_CTX *ctx);
+void TS_VERIFY_CTX_free(TS_VERIFY_CTX *ctx);
+void TS_VERIFY_CTX_cleanup(TS_VERIFY_CTX *ctx);
+int TS_VERIFY_CTX_set_flags(TS_VERIFY_CTX *ctx, int f);
+int TS_VERIFY_CTX_add_flags(TS_VERIFY_CTX *ctx, int f);
+BIO *TS_VERIFY_CTX_set_data(TS_VERIFY_CTX *ctx, BIO *b);
+unsigned char *TS_VERIFY_CTX_set_imprint(TS_VERIFY_CTX *ctx,
+                                         unsigned char *hexstr, long len);
+X509_STORE *TS_VERIFY_CTX_set_store(TS_VERIFY_CTX *ctx, X509_STORE *s);
+STACK_OF(X509) *TS_VERIFY_CTS_set_certs(TS_VERIFY_CTX *ctx, STACK_OF(X509) *certs);
+
+/*-
+ * If ctx is NULL, it allocates and returns a new object, otherwise
+ * it returns ctx. It initialises all the members as follows:
+ * flags = TS_VFY_ALL_IMPRINT & ~(TS_VFY_TSA_NAME | TS_VFY_SIGNATURE)
+ * certs = NULL
+ * store = NULL
+ * policy = policy from the request or NULL if absent (in this case
+ *      TS_VFY_POLICY is cleared from flags as well)
+ * md_alg = MD algorithm from request
+ * imprint, imprint_len = imprint from request
+ * data = NULL
+ * nonce, nonce_len = nonce from the request or NULL if absent (in this case
+ *      TS_VFY_NONCE is cleared from flags as well)
+ * tsa_name = NULL
+ * Important: after calling this method TS_VFY_SIGNATURE should be added!
+ */
+TS_VERIFY_CTX *TS_REQ_to_TS_VERIFY_CTX(TS_REQ *req, TS_VERIFY_CTX *ctx);
+
+/* Function declarations for TS_RESP defined in ts/ts_resp_print.c */
+
+int TS_RESP_print_bio(BIO *bio, TS_RESP *a);
+int TS_STATUS_INFO_print_bio(BIO *bio, TS_STATUS_INFO *a);
+int TS_TST_INFO_print_bio(BIO *bio, TS_TST_INFO *a);
+
+/* Common utility functions defined in ts/ts_lib.c */
+
+int TS_ASN1_INTEGER_print_bio(BIO *bio, const ASN1_INTEGER *num);
+int TS_OBJ_print_bio(BIO *bio, const ASN1_OBJECT *obj);
+int TS_ext_print_bio(BIO *bio, const STACK_OF(X509_EXTENSION) *extensions);
+int TS_X509_ALGOR_print_bio(BIO *bio, const X509_ALGOR *alg);
+int TS_MSG_IMPRINT_print_bio(BIO *bio, TS_MSG_IMPRINT *msg);
+
+/*
+ * Function declarations for handling configuration options, defined in
+ * ts/ts_conf.c
+ */
+
+X509 *TS_CONF_load_cert(const char *file);
+STACK_OF(X509) *TS_CONF_load_certs(const char *file);
+EVP_PKEY *TS_CONF_load_key(const char *file, const char *pass);
+const char *TS_CONF_get_tsa_section(CONF *conf, const char *section);
+int TS_CONF_set_serial(CONF *conf, const char *section, TS_serial_cb cb,
+                       TS_RESP_CTX *ctx);
+#ifndef OPENSSL_NO_ENGINE
+int TS_CONF_set_crypto_device(CONF *conf, const char *section,
+                              const char *device);
+int TS_CONF_set_default_engine(const char *name);
+#endif
+int TS_CONF_set_signer_cert(CONF *conf, const char *section,
+                            const char *cert, TS_RESP_CTX *ctx);
+int TS_CONF_set_certs(CONF *conf, const char *section, const char *certs,
+                      TS_RESP_CTX *ctx);
+int TS_CONF_set_signer_key(CONF *conf, const char *section,
+                           const char *key, const char *pass,
+                           TS_RESP_CTX *ctx);
+int TS_CONF_set_signer_digest(CONF *conf, const char *section,
+                               const char *md, TS_RESP_CTX *ctx);
+int TS_CONF_set_def_policy(CONF *conf, const char *section,
+                           const char *policy, TS_RESP_CTX *ctx);
+int TS_CONF_set_policies(CONF *conf, const char *section, TS_RESP_CTX *ctx);
+int TS_CONF_set_digests(CONF *conf, const char *section, TS_RESP_CTX *ctx);
+int TS_CONF_set_accuracy(CONF *conf, const char *section, TS_RESP_CTX *ctx);
+int TS_CONF_set_clock_precision_digits(CONF *conf, const char *section,
+                                       TS_RESP_CTX *ctx);
+int TS_CONF_set_ordering(CONF *conf, const char *section, TS_RESP_CTX *ctx);
+int TS_CONF_set_tsa_name(CONF *conf, const char *section, TS_RESP_CTX *ctx);
+int TS_CONF_set_ess_cert_id_chain(CONF *conf, const char *section,
+                                  TS_RESP_CTX *ctx);
+int TS_CONF_set_ess_cert_id_digest(CONF *conf, const char *section,
+                                      TS_RESP_CTX *ctx);
+
+#  ifdef  __cplusplus
+}
+#  endif
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/tserr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/tserr.h
new file mode 100644
index 000000000..3e0492565
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/tserr.h
@@ -0,0 +1,128 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_TSERR_H
+# define HEADER_TSERR_H
+
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_TS
+
+#  ifdef  __cplusplus
+extern "C"
+#  endif
+int ERR_load_TS_strings(void);
+
+/*
+ * TS function codes.
+ */
+#  define TS_F_DEF_SERIAL_CB                               110
+#  define TS_F_DEF_TIME_CB                                 111
+#  define TS_F_ESS_ADD_SIGNING_CERT                        112
+#  define TS_F_ESS_ADD_SIGNING_CERT_V2                     147
+#  define TS_F_ESS_CERT_ID_NEW_INIT                        113
+#  define TS_F_ESS_CERT_ID_V2_NEW_INIT                     156
+#  define TS_F_ESS_SIGNING_CERT_NEW_INIT                   114
+#  define TS_F_ESS_SIGNING_CERT_V2_NEW_INIT                157
+#  define TS_F_INT_TS_RESP_VERIFY_TOKEN                    149
+#  define TS_F_PKCS7_TO_TS_TST_INFO                        148
+#  define TS_F_TS_ACCURACY_SET_MICROS                      115
+#  define TS_F_TS_ACCURACY_SET_MILLIS                      116
+#  define TS_F_TS_ACCURACY_SET_SECONDS                     117
+#  define TS_F_TS_CHECK_IMPRINTS                           100
+#  define TS_F_TS_CHECK_NONCES                             101
+#  define TS_F_TS_CHECK_POLICY                             102
+#  define TS_F_TS_CHECK_SIGNING_CERTS                      103
+#  define TS_F_TS_CHECK_STATUS_INFO                        104
+#  define TS_F_TS_COMPUTE_IMPRINT                          145
+#  define TS_F_TS_CONF_INVALID                             151
+#  define TS_F_TS_CONF_LOAD_CERT                           153
+#  define TS_F_TS_CONF_LOAD_CERTS                          154
+#  define TS_F_TS_CONF_LOAD_KEY                            155
+#  define TS_F_TS_CONF_LOOKUP_FAIL                         152
+#  define TS_F_TS_CONF_SET_DEFAULT_ENGINE                  146
+#  define TS_F_TS_GET_STATUS_TEXT                          105
+#  define TS_F_TS_MSG_IMPRINT_SET_ALGO                     118
+#  define TS_F_TS_REQ_SET_MSG_IMPRINT                      119
+#  define TS_F_TS_REQ_SET_NONCE                            120
+#  define TS_F_TS_REQ_SET_POLICY_ID                        121
+#  define TS_F_TS_RESP_CREATE_RESPONSE                     122
+#  define TS_F_TS_RESP_CREATE_TST_INFO                     123
+#  define TS_F_TS_RESP_CTX_ADD_FAILURE_INFO                124
+#  define TS_F_TS_RESP_CTX_ADD_MD                          125
+#  define TS_F_TS_RESP_CTX_ADD_POLICY                      126
+#  define TS_F_TS_RESP_CTX_NEW                             127
+#  define TS_F_TS_RESP_CTX_SET_ACCURACY                    128
+#  define TS_F_TS_RESP_CTX_SET_CERTS                       129
+#  define TS_F_TS_RESP_CTX_SET_DEF_POLICY                  130
+#  define TS_F_TS_RESP_CTX_SET_SIGNER_CERT                 131
+#  define TS_F_TS_RESP_CTX_SET_STATUS_INFO                 132
+#  define TS_F_TS_RESP_GET_POLICY                          133
+#  define TS_F_TS_RESP_SET_GENTIME_WITH_PRECISION          134
+#  define TS_F_TS_RESP_SET_STATUS_INFO                     135
+#  define TS_F_TS_RESP_SET_TST_INFO                        150
+#  define TS_F_TS_RESP_SIGN                                136
+#  define TS_F_TS_RESP_VERIFY_SIGNATURE                    106
+#  define TS_F_TS_TST_INFO_SET_ACCURACY                    137
+#  define TS_F_TS_TST_INFO_SET_MSG_IMPRINT                 138
+#  define TS_F_TS_TST_INFO_SET_NONCE                       139
+#  define TS_F_TS_TST_INFO_SET_POLICY_ID                   140
+#  define TS_F_TS_TST_INFO_SET_SERIAL                      141
+#  define TS_F_TS_TST_INFO_SET_TIME                        142
+#  define TS_F_TS_TST_INFO_SET_TSA                         143
+#  define TS_F_TS_VERIFY                                   108
+#  define TS_F_TS_VERIFY_CERT                              109
+#  define TS_F_TS_VERIFY_CTX_NEW                           144
+
+/*
+ * TS reason codes.
+ */
+#  define TS_R_BAD_PKCS7_TYPE                              132
+#  define TS_R_BAD_TYPE                                    133
+#  define TS_R_CANNOT_LOAD_CERT                            137
+#  define TS_R_CANNOT_LOAD_KEY                             138
+#  define TS_R_CERTIFICATE_VERIFY_ERROR                    100
+#  define TS_R_COULD_NOT_SET_ENGINE                        127
+#  define TS_R_COULD_NOT_SET_TIME                          115
+#  define TS_R_DETACHED_CONTENT                            134
+#  define TS_R_ESS_ADD_SIGNING_CERT_ERROR                  116
+#  define TS_R_ESS_ADD_SIGNING_CERT_V2_ERROR               139
+#  define TS_R_ESS_SIGNING_CERTIFICATE_ERROR               101
+#  define TS_R_INVALID_NULL_POINTER                        102
+#  define TS_R_INVALID_SIGNER_CERTIFICATE_PURPOSE          117
+#  define TS_R_MESSAGE_IMPRINT_MISMATCH                    103
+#  define TS_R_NONCE_MISMATCH                              104
+#  define TS_R_NONCE_NOT_RETURNED                          105
+#  define TS_R_NO_CONTENT                                  106
+#  define TS_R_NO_TIME_STAMP_TOKEN                         107
+#  define TS_R_PKCS7_ADD_SIGNATURE_ERROR                   118
+#  define TS_R_PKCS7_ADD_SIGNED_ATTR_ERROR                 119
+#  define TS_R_PKCS7_TO_TS_TST_INFO_FAILED                 129
+#  define TS_R_POLICY_MISMATCH                             108
+#  define TS_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE      120
+#  define TS_R_RESPONSE_SETUP_ERROR                        121
+#  define TS_R_SIGNATURE_FAILURE                           109
+#  define TS_R_THERE_MUST_BE_ONE_SIGNER                    110
+#  define TS_R_TIME_SYSCALL_ERROR                          122
+#  define TS_R_TOKEN_NOT_PRESENT                           130
+#  define TS_R_TOKEN_PRESENT                               131
+#  define TS_R_TSA_NAME_MISMATCH                           111
+#  define TS_R_TSA_UNTRUSTED                               112
+#  define TS_R_TST_INFO_SETUP_ERROR                        123
+#  define TS_R_TS_DATASIGN                                 124
+#  define TS_R_UNACCEPTABLE_POLICY                         125
+#  define TS_R_UNSUPPORTED_MD_ALGORITHM                    126
+#  define TS_R_UNSUPPORTED_VERSION                         113
+#  define TS_R_VAR_BAD_VALUE                               135
+#  define TS_R_VAR_LOOKUP_FAILURE                          136
+#  define TS_R_WRONG_CONTENT_TYPE                          114
+
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/txt_db.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/txt_db.h
new file mode 100644
index 000000000..ec981a439
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/txt_db.h
@@ -0,0 +1,57 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_TXT_DB_H
+# define HEADER_TXT_DB_H
+
+# include <openssl/opensslconf.h>
+# include <openssl/bio.h>
+# include <openssl/safestack.h>
+# include <openssl/lhash.h>
+
+# define DB_ERROR_OK                     0
+# define DB_ERROR_MALLOC                 1
+# define DB_ERROR_INDEX_CLASH            2
+# define DB_ERROR_INDEX_OUT_OF_RANGE     3
+# define DB_ERROR_NO_INDEX               4
+# define DB_ERROR_INSERT_INDEX_CLASH     5
+# define DB_ERROR_WRONG_NUM_FIELDS       6
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+typedef OPENSSL_STRING *OPENSSL_PSTRING;
+DEFINE_SPECIAL_STACK_OF(OPENSSL_PSTRING, OPENSSL_STRING)
+
+typedef struct txt_db_st {
+    int num_fields;
+    STACK_OF(OPENSSL_PSTRING) *data;
+    LHASH_OF(OPENSSL_STRING) **index;
+    int (**qual) (OPENSSL_STRING *);
+    long error;
+    long arg1;
+    long arg2;
+    OPENSSL_STRING *arg_row;
+} TXT_DB;
+
+TXT_DB *TXT_DB_read(BIO *in, int num);
+long TXT_DB_write(BIO *out, TXT_DB *db);
+int TXT_DB_create_index(TXT_DB *db, int field, int (*qual) (OPENSSL_STRING *),
+                        OPENSSL_LH_HASHFUNC hash, OPENSSL_LH_COMPFUNC cmp);
+void TXT_DB_free(TXT_DB *db);
+OPENSSL_STRING *TXT_DB_get_by_index(TXT_DB *db, int idx,
+                                    OPENSSL_STRING *value);
+int TXT_DB_insert(TXT_DB *db, OPENSSL_STRING *value);
+
+#ifdef  __cplusplus
+}
+#endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/ui.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ui.h
new file mode 100644
index 000000000..7c721ec81
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/ui.h
@@ -0,0 +1,368 @@
+/*
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_UI_H
+# define HEADER_UI_H
+
+# include <openssl/opensslconf.h>
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  include <openssl/crypto.h>
+# endif
+# include <openssl/safestack.h>
+# include <openssl/pem.h>
+# include <openssl/ossl_typ.h>
+# include <openssl/uierr.h>
+
+/* For compatibility reasons, the macro OPENSSL_NO_UI is currently retained */
+# if OPENSSL_API_COMPAT < 0x10200000L
+#  ifdef OPENSSL_NO_UI_CONSOLE
+#   define OPENSSL_NO_UI
+#  endif
+# endif
+
+# ifdef  __cplusplus
+extern "C" {
+# endif
+
+/*
+ * All the following functions return -1 or NULL on error and in some cases
+ * (UI_process()) -2 if interrupted or in some other way cancelled. When
+ * everything is fine, they return 0, a positive value or a non-NULL pointer,
+ * all depending on their purpose.
+ */
+
+/* Creators and destructor.   */
+UI *UI_new(void);
+UI *UI_new_method(const UI_METHOD *method);
+void UI_free(UI *ui);
+
+/*-
+   The following functions are used to add strings to be printed and prompt
+   strings to prompt for data.  The names are UI_{add,dup}_<function>_string
+   and UI_{add,dup}_input_boolean.
+
+   UI_{add,dup}_<function>_string have the following meanings:
+        add     add a text or prompt string.  The pointers given to these
+                functions are used verbatim, no copying is done.
+        dup     make a copy of the text or prompt string, then add the copy
+                to the collection of strings in the user interface.
+        <function>
+                The function is a name for the functionality that the given
+                string shall be used for.  It can be one of:
+                        input   use the string as data prompt.
+                        verify  use the string as verification prompt.  This
+                                is used to verify a previous input.
+                        info    use the string for informational output.
+                        error   use the string for error output.
+   Honestly, there's currently no difference between info and error for the
+   moment.
+
+   UI_{add,dup}_input_boolean have the same semantics for "add" and "dup",
+   and are typically used when one wants to prompt for a yes/no response.
+
+   All of the functions in this group take a UI and a prompt string.
+   The string input and verify addition functions also take a flag argument,
+   a buffer for the result to end up with, a minimum input size and a maximum
+   input size (the result buffer MUST be large enough to be able to contain
+   the maximum number of characters).  Additionally, the verify addition
+   functions takes another buffer to compare the result against.
+   The boolean input functions take an action description string (which should
+   be safe to ignore if the expected user action is obvious, for example with
+   a dialog box with an OK button and a Cancel button), a string of acceptable
+   characters to mean OK and to mean Cancel.  The two last strings are checked
+   to make sure they don't have common characters.  Additionally, the same
+   flag argument as for the string input is taken, as well as a result buffer.
+   The result buffer is required to be at least one byte long.  Depending on
+   the answer, the first character from the OK or the Cancel character strings
+   will be stored in the first byte of the result buffer.  No NUL will be
+   added, so the result is *not* a string.
+
+   On success, the all return an index of the added information.  That index
+   is useful when retrieving results with UI_get0_result(). */
+int UI_add_input_string(UI *ui, const char *prompt, int flags,
+                        char *result_buf, int minsize, int maxsize);
+int UI_dup_input_string(UI *ui, const char *prompt, int flags,
+                        char *result_buf, int minsize, int maxsize);
+int UI_add_verify_string(UI *ui, const char *prompt, int flags,
+                         char *result_buf, int minsize, int maxsize,
+                         const char *test_buf);
+int UI_dup_verify_string(UI *ui, const char *prompt, int flags,
+                         char *result_buf, int minsize, int maxsize,
+                         const char *test_buf);
+int UI_add_input_boolean(UI *ui, const char *prompt, const char *action_desc,
+                         const char *ok_chars, const char *cancel_chars,
+                         int flags, char *result_buf);
+int UI_dup_input_boolean(UI *ui, const char *prompt, const char *action_desc,
+                         const char *ok_chars, const char *cancel_chars,
+                         int flags, char *result_buf);
+int UI_add_info_string(UI *ui, const char *text);
+int UI_dup_info_string(UI *ui, const char *text);
+int UI_add_error_string(UI *ui, const char *text);
+int UI_dup_error_string(UI *ui, const char *text);
+
+/* These are the possible flags.  They can be or'ed together. */
+/* Use to have echoing of input */
+# define UI_INPUT_FLAG_ECHO              0x01
+/*
+ * Use a default password.  Where that password is found is completely up to
+ * the application, it might for example be in the user data set with
+ * UI_add_user_data().  It is not recommended to have more than one input in
+ * each UI being marked with this flag, or the application might get
+ * confused.
+ */
+# define UI_INPUT_FLAG_DEFAULT_PWD       0x02
+
+/*-
+ * The user of these routines may want to define flags of their own.  The core
+ * UI won't look at those, but will pass them on to the method routines.  They
+ * must use higher bits so they don't get confused with the UI bits above.
+ * UI_INPUT_FLAG_USER_BASE tells which is the lowest bit to use.  A good
+ * example of use is this:
+ *
+ *    #define MY_UI_FLAG1       (0x01 << UI_INPUT_FLAG_USER_BASE)
+ *
+*/
+# define UI_INPUT_FLAG_USER_BASE 16
+
+/*-
+ * The following function helps construct a prompt.  object_desc is a
+ * textual short description of the object, for example "pass phrase",
+ * and object_name is the name of the object (might be a card name or
+ * a file name.
+ * The returned string shall always be allocated on the heap with
+ * OPENSSL_malloc(), and need to be free'd with OPENSSL_free().
+ *
+ * If the ui_method doesn't contain a pointer to a user-defined prompt
+ * constructor, a default string is built, looking like this:
+ *
+ *       "Enter {object_desc} for {object_name}:"
+ *
+ * So, if object_desc has the value "pass phrase" and object_name has
+ * the value "foo.key", the resulting string is:
+ *
+ *       "Enter pass phrase for foo.key:"
+*/
+char *UI_construct_prompt(UI *ui_method,
+                          const char *object_desc, const char *object_name);
+
+/*
+ * The following function is used to store a pointer to user-specific data.
+ * Any previous such pointer will be returned and replaced.
+ *
+ * For callback purposes, this function makes a lot more sense than using
+ * ex_data, since the latter requires that different parts of OpenSSL or
+ * applications share the same ex_data index.
+ *
+ * Note that the UI_OpenSSL() method completely ignores the user data. Other
+ * methods may not, however.
+ */
+void *UI_add_user_data(UI *ui, void *user_data);
+/*
+ * Alternatively, this function is used to duplicate the user data.
+ * This uses the duplicator method function.  The destroy function will
+ * be used to free the user data in this case.
+ */
+int UI_dup_user_data(UI *ui, void *user_data);
+/* We need a user data retrieving function as well.  */
+void *UI_get0_user_data(UI *ui);
+
+/* Return the result associated with a prompt given with the index i. */
+const char *UI_get0_result(UI *ui, int i);
+int UI_get_result_length(UI *ui, int i);
+
+/* When all strings have been added, process the whole thing. */
+int UI_process(UI *ui);
+
+/*
+ * Give a user interface parameterised control commands.  This can be used to
+ * send down an integer, a data pointer or a function pointer, as well as be
+ * used to get information from a UI.
+ */
+int UI_ctrl(UI *ui, int cmd, long i, void *p, void (*f) (void));
+
+/* The commands */
+/*
+ * Use UI_CONTROL_PRINT_ERRORS with the value 1 to have UI_process print the
+ * OpenSSL error stack before printing any info or added error messages and
+ * before any prompting.
+ */
+# define UI_CTRL_PRINT_ERRORS            1
+/*
+ * Check if a UI_process() is possible to do again with the same instance of
+ * a user interface.  This makes UI_ctrl() return 1 if it is redoable, and 0
+ * if not.
+ */
+# define UI_CTRL_IS_REDOABLE             2
+
+/* Some methods may use extra data */
+# define UI_set_app_data(s,arg)         UI_set_ex_data(s,0,arg)
+# define UI_get_app_data(s)             UI_get_ex_data(s,0)
+
+# define UI_get_ex_new_index(l, p, newf, dupf, freef) \
+    CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_UI, l, p, newf, dupf, freef)
+int UI_set_ex_data(UI *r, int idx, void *arg);
+void *UI_get_ex_data(UI *r, int idx);
+
+/* Use specific methods instead of the built-in one */
+void UI_set_default_method(const UI_METHOD *meth);
+const UI_METHOD *UI_get_default_method(void);
+const UI_METHOD *UI_get_method(UI *ui);
+const UI_METHOD *UI_set_method(UI *ui, const UI_METHOD *meth);
+
+# ifndef OPENSSL_NO_UI_CONSOLE
+
+/* The method with all the built-in thingies */
+UI_METHOD *UI_OpenSSL(void);
+
+# endif
+
+/*
+ * NULL method.  Literally does nothing, but may serve as a placeholder
+ * to avoid internal default.
+ */
+const UI_METHOD *UI_null(void);
+
+/* ---------- For method writers ---------- */
+/*-
+   A method contains a number of functions that implement the low level
+   of the User Interface.  The functions are:
+
+        an opener       This function starts a session, maybe by opening
+                        a channel to a tty, or by opening a window.
+        a writer        This function is called to write a given string,
+                        maybe to the tty, maybe as a field label in a
+                        window.
+        a flusher       This function is called to flush everything that
+                        has been output so far.  It can be used to actually
+                        display a dialog box after it has been built.
+        a reader        This function is called to read a given prompt,
+                        maybe from the tty, maybe from a field in a
+                        window.  Note that it's called with all string
+                        structures, not only the prompt ones, so it must
+                        check such things itself.
+        a closer        This function closes the session, maybe by closing
+                        the channel to the tty, or closing the window.
+
+   All these functions are expected to return:
+
+        0       on error.
+        1       on success.
+        -1      on out-of-band events, for example if some prompting has
+                been canceled (by pressing Ctrl-C, for example).  This is
+                only checked when returned by the flusher or the reader.
+
+   The way this is used, the opener is first called, then the writer for all
+   strings, then the flusher, then the reader for all strings and finally the
+   closer.  Note that if you want to prompt from a terminal or other command
+   line interface, the best is to have the reader also write the prompts
+   instead of having the writer do it.  If you want to prompt from a dialog
+   box, the writer can be used to build up the contents of the box, and the
+   flusher to actually display the box and run the event loop until all data
+   has been given, after which the reader only grabs the given data and puts
+   them back into the UI strings.
+
+   All method functions take a UI as argument.  Additionally, the writer and
+   the reader take a UI_STRING.
+*/
+
+/*
+ * The UI_STRING type is the data structure that contains all the needed info
+ * about a string or a prompt, including test data for a verification prompt.
+ */
+typedef struct ui_string_st UI_STRING;
+DEFINE_STACK_OF(UI_STRING)
+
+/*
+ * The different types of strings that are currently supported. This is only
+ * needed by method authors.
+ */
+enum UI_string_types {
+    UIT_NONE = 0,
+    UIT_PROMPT,                 /* Prompt for a string */
+    UIT_VERIFY,                 /* Prompt for a string and verify */
+    UIT_BOOLEAN,                /* Prompt for a yes/no response */
+    UIT_INFO,                   /* Send info to the user */
+    UIT_ERROR                   /* Send an error message to the user */
+};
+
+/* Create and manipulate methods */
+UI_METHOD *UI_create_method(const char *name);
+void UI_destroy_method(UI_METHOD *ui_method);
+int UI_method_set_opener(UI_METHOD *method, int (*opener) (UI *ui));
+int UI_method_set_writer(UI_METHOD *method,
+                         int (*writer) (UI *ui, UI_STRING *uis));
+int UI_method_set_flusher(UI_METHOD *method, int (*flusher) (UI *ui));
+int UI_method_set_reader(UI_METHOD *method,
+                         int (*reader) (UI *ui, UI_STRING *uis));
+int UI_method_set_closer(UI_METHOD *method, int (*closer) (UI *ui));
+int UI_method_set_data_duplicator(UI_METHOD *method,
+                                  void *(*duplicator) (UI *ui, void *ui_data),
+                                  void (*destructor)(UI *ui, void *ui_data));
+int UI_method_set_prompt_constructor(UI_METHOD *method,
+                                     char *(*prompt_constructor) (UI *ui,
+                                                                  const char
+                                                                  *object_desc,
+                                                                  const char
+                                                                  *object_name));
+int UI_method_set_ex_data(UI_METHOD *method, int idx, void *data);
+int (*UI_method_get_opener(const UI_METHOD *method)) (UI *);
+int (*UI_method_get_writer(const UI_METHOD *method)) (UI *, UI_STRING *);
+int (*UI_method_get_flusher(const UI_METHOD *method)) (UI *);
+int (*UI_method_get_reader(const UI_METHOD *method)) (UI *, UI_STRING *);
+int (*UI_method_get_closer(const UI_METHOD *method)) (UI *);
+char *(*UI_method_get_prompt_constructor(const UI_METHOD *method))
+    (UI *, const char *, const char *);
+void *(*UI_method_get_data_duplicator(const UI_METHOD *method)) (UI *, void *);
+void (*UI_method_get_data_destructor(const UI_METHOD *method)) (UI *, void *);
+const void *UI_method_get_ex_data(const UI_METHOD *method, int idx);
+
+/*
+ * The following functions are helpers for method writers to access relevant
+ * data from a UI_STRING.
+ */
+
+/* Return type of the UI_STRING */
+enum UI_string_types UI_get_string_type(UI_STRING *uis);
+/* Return input flags of the UI_STRING */
+int UI_get_input_flags(UI_STRING *uis);
+/* Return the actual string to output (the prompt, info or error) */
+const char *UI_get0_output_string(UI_STRING *uis);
+/*
+ * Return the optional action string to output (the boolean prompt
+ * instruction)
+ */
+const char *UI_get0_action_string(UI_STRING *uis);
+/* Return the result of a prompt */
+const char *UI_get0_result_string(UI_STRING *uis);
+int UI_get_result_string_length(UI_STRING *uis);
+/*
+ * Return the string to test the result against.  Only useful with verifies.
+ */
+const char *UI_get0_test_string(UI_STRING *uis);
+/* Return the required minimum size of the result */
+int UI_get_result_minsize(UI_STRING *uis);
+/* Return the required maximum size of the result */
+int UI_get_result_maxsize(UI_STRING *uis);
+/* Set the result of a UI_STRING. */
+int UI_set_result(UI *ui, UI_STRING *uis, const char *result);
+int UI_set_result_ex(UI *ui, UI_STRING *uis, const char *result, int len);
+
+/* A couple of popular utility functions */
+int UI_UTIL_read_pw_string(char *buf, int length, const char *prompt,
+                           int verify);
+int UI_UTIL_read_pw(char *buf, char *buff, int size, const char *prompt,
+                    int verify);
+UI_METHOD *UI_UTIL_wrap_read_pem_callback(pem_password_cb *cb, int rwflag);
+
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/uierr.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/uierr.h
new file mode 100644
index 000000000..72fd9a9db
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/uierr.h
@@ -0,0 +1,61 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_UIERR_H
+# define HEADER_UIERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_UI_strings(void);
+
+/*
+ * UI function codes.
+ */
+# define UI_F_CLOSE_CONSOLE                               115
+# define UI_F_ECHO_CONSOLE                                116
+# define UI_F_GENERAL_ALLOCATE_BOOLEAN                    108
+# define UI_F_GENERAL_ALLOCATE_PROMPT                     109
+# define UI_F_NOECHO_CONSOLE                              117
+# define UI_F_OPEN_CONSOLE                                114
+# define UI_F_UI_CONSTRUCT_PROMPT                         121
+# define UI_F_UI_CREATE_METHOD                            112
+# define UI_F_UI_CTRL                                     111
+# define UI_F_UI_DUP_ERROR_STRING                         101
+# define UI_F_UI_DUP_INFO_STRING                          102
+# define UI_F_UI_DUP_INPUT_BOOLEAN                        110
+# define UI_F_UI_DUP_INPUT_STRING                         103
+# define UI_F_UI_DUP_USER_DATA                            118
+# define UI_F_UI_DUP_VERIFY_STRING                        106
+# define UI_F_UI_GET0_RESULT                              107
+# define UI_F_UI_GET_RESULT_LENGTH                        119
+# define UI_F_UI_NEW_METHOD                               104
+# define UI_F_UI_PROCESS                                  113
+# define UI_F_UI_SET_RESULT                               105
+# define UI_F_UI_SET_RESULT_EX                            120
+
+/*
+ * UI reason codes.
+ */
+# define UI_R_COMMON_OK_AND_CANCEL_CHARACTERS             104
+# define UI_R_INDEX_TOO_LARGE                             102
+# define UI_R_INDEX_TOO_SMALL                             103
+# define UI_R_NO_RESULT_BUFFER                            105
+# define UI_R_PROCESSING_ERROR                            107
+# define UI_R_RESULT_TOO_LARGE                            100
+# define UI_R_RESULT_TOO_SMALL                            101
+# define UI_R_SYSASSIGN_ERROR                             109
+# define UI_R_SYSDASSGN_ERROR                             110
+# define UI_R_SYSQIOW_ERROR                               111
+# define UI_R_UNKNOWN_CONTROL_COMMAND                     106
+# define UI_R_UNKNOWN_TTYGET_ERRNO_VALUE                  108
+# define UI_R_USER_DATA_DUPLICATION_UNSUPPORTED           112
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/whrlpool.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/whrlpool.h
new file mode 100644
index 000000000..20ea3503b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/whrlpool.h
@@ -0,0 +1,48 @@
+/*
+ * Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_WHRLPOOL_H
+# define HEADER_WHRLPOOL_H
+
+#include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_WHIRLPOOL
+# include <openssl/e_os2.h>
+# include <stddef.h>
+# ifdef __cplusplus
+extern "C" {
+# endif
+
+# define WHIRLPOOL_DIGEST_LENGTH (512/8)
+# define WHIRLPOOL_BBLOCK        512
+# define WHIRLPOOL_COUNTER       (256/8)
+
+typedef struct {
+    union {
+        unsigned char c[WHIRLPOOL_DIGEST_LENGTH];
+        /* double q is here to ensure 64-bit alignment */
+        double q[WHIRLPOOL_DIGEST_LENGTH / sizeof(double)];
+    } H;
+    unsigned char data[WHIRLPOOL_BBLOCK / 8];
+    unsigned int bitoff;
+    size_t bitlen[WHIRLPOOL_COUNTER / sizeof(size_t)];
+} WHIRLPOOL_CTX;
+
+int WHIRLPOOL_Init(WHIRLPOOL_CTX *c);
+int WHIRLPOOL_Update(WHIRLPOOL_CTX *c, const void *inp, size_t bytes);
+void WHIRLPOOL_BitUpdate(WHIRLPOOL_CTX *c, const void *inp, size_t bits);
+int WHIRLPOOL_Final(unsigned char *md, WHIRLPOOL_CTX *c);
+unsigned char *WHIRLPOOL(const void *inp, size_t bytes, unsigned char *md);
+
+# ifdef __cplusplus
+}
+# endif
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/x509.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/x509.h
new file mode 100644
index 000000000..39ca0ba57
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/x509.h
@@ -0,0 +1,1047 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_X509_H
+# define HEADER_X509_H
+
+# include <openssl/e_os2.h>
+# include <openssl/ossl_typ.h>
+# include <openssl/symhacks.h>
+# include <openssl/buffer.h>
+# include <openssl/evp.h>
+# include <openssl/bio.h>
+# include <openssl/asn1.h>
+# include <openssl/safestack.h>
+# include <openssl/ec.h>
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  include <openssl/rsa.h>
+#  include <openssl/dsa.h>
+#  include <openssl/dh.h>
+# endif
+
+# include <openssl/sha.h>
+# include <openssl/x509err.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+
+/* Flags for X509_get_signature_info() */
+/* Signature info is valid */
+# define X509_SIG_INFO_VALID     0x1
+/* Signature is suitable for TLS use */
+# define X509_SIG_INFO_TLS       0x2
+
+# define X509_FILETYPE_PEM       1
+# define X509_FILETYPE_ASN1      2
+# define X509_FILETYPE_DEFAULT   3
+
+# define X509v3_KU_DIGITAL_SIGNATURE     0x0080
+# define X509v3_KU_NON_REPUDIATION       0x0040
+# define X509v3_KU_KEY_ENCIPHERMENT      0x0020
+# define X509v3_KU_DATA_ENCIPHERMENT     0x0010
+# define X509v3_KU_KEY_AGREEMENT         0x0008
+# define X509v3_KU_KEY_CERT_SIGN         0x0004
+# define X509v3_KU_CRL_SIGN              0x0002
+# define X509v3_KU_ENCIPHER_ONLY         0x0001
+# define X509v3_KU_DECIPHER_ONLY         0x8000
+# define X509v3_KU_UNDEF                 0xffff
+
+struct X509_algor_st {
+    ASN1_OBJECT *algorithm;
+    ASN1_TYPE *parameter;
+} /* X509_ALGOR */ ;
+
+typedef STACK_OF(X509_ALGOR) X509_ALGORS;
+
+typedef struct X509_val_st {
+    ASN1_TIME *notBefore;
+    ASN1_TIME *notAfter;
+} X509_VAL;
+
+typedef struct X509_sig_st X509_SIG;
+
+typedef struct X509_name_entry_st X509_NAME_ENTRY;
+
+DEFINE_STACK_OF(X509_NAME_ENTRY)
+
+DEFINE_STACK_OF(X509_NAME)
+
+# define X509_EX_V_NETSCAPE_HACK         0x8000
+# define X509_EX_V_INIT                  0x0001
+typedef struct X509_extension_st X509_EXTENSION;
+
+typedef STACK_OF(X509_EXTENSION) X509_EXTENSIONS;
+
+DEFINE_STACK_OF(X509_EXTENSION)
+
+typedef struct x509_attributes_st X509_ATTRIBUTE;
+
+DEFINE_STACK_OF(X509_ATTRIBUTE)
+
+typedef struct X509_req_info_st X509_REQ_INFO;
+
+typedef struct X509_req_st X509_REQ;
+
+typedef struct x509_cert_aux_st X509_CERT_AUX;
+
+typedef struct x509_cinf_st X509_CINF;
+
+DEFINE_STACK_OF(X509)
+
+/* This is used for a table of trust checking functions */
+
+typedef struct x509_trust_st {
+    int trust;
+    int flags;
+    int (*check_trust) (struct x509_trust_st *, X509 *, int);
+    char *name;
+    int arg1;
+    void *arg2;
+} X509_TRUST;
+
+DEFINE_STACK_OF(X509_TRUST)
+
+/* standard trust ids */
+
+# define X509_TRUST_DEFAULT      0 /* Only valid in purpose settings */
+
+# define X509_TRUST_COMPAT       1
+# define X509_TRUST_SSL_CLIENT   2
+# define X509_TRUST_SSL_SERVER   3
+# define X509_TRUST_EMAIL        4
+# define X509_TRUST_OBJECT_SIGN  5
+# define X509_TRUST_OCSP_SIGN    6
+# define X509_TRUST_OCSP_REQUEST 7
+# define X509_TRUST_TSA          8
+
+/* Keep these up to date! */
+# define X509_TRUST_MIN          1
+# define X509_TRUST_MAX          8
+
+/* trust_flags values */
+# define X509_TRUST_DYNAMIC      (1U << 0)
+# define X509_TRUST_DYNAMIC_NAME (1U << 1)
+/* No compat trust if self-signed, preempts "DO_SS" */
+# define X509_TRUST_NO_SS_COMPAT (1U << 2)
+/* Compat trust if no explicit accepted trust EKUs */
+# define X509_TRUST_DO_SS_COMPAT (1U << 3)
+/* Accept "anyEKU" as a wildcard trust OID */
+# define X509_TRUST_OK_ANY_EKU   (1U << 4)
+
+/* check_trust return codes */
+
+# define X509_TRUST_TRUSTED      1
+# define X509_TRUST_REJECTED     2
+# define X509_TRUST_UNTRUSTED    3
+
+/* Flags for X509_print_ex() */
+
+# define X509_FLAG_COMPAT                0
+# define X509_FLAG_NO_HEADER             1L
+# define X509_FLAG_NO_VERSION            (1L << 1)
+# define X509_FLAG_NO_SERIAL             (1L << 2)
+# define X509_FLAG_NO_SIGNAME            (1L << 3)
+# define X509_FLAG_NO_ISSUER             (1L << 4)
+# define X509_FLAG_NO_VALIDITY           (1L << 5)
+# define X509_FLAG_NO_SUBJECT            (1L << 6)
+# define X509_FLAG_NO_PUBKEY             (1L << 7)
+# define X509_FLAG_NO_EXTENSIONS         (1L << 8)
+# define X509_FLAG_NO_SIGDUMP            (1L << 9)
+# define X509_FLAG_NO_AUX                (1L << 10)
+# define X509_FLAG_NO_ATTRIBUTES         (1L << 11)
+# define X509_FLAG_NO_IDS                (1L << 12)
+
+/* Flags specific to X509_NAME_print_ex() */
+
+/* The field separator information */
+
+# define XN_FLAG_SEP_MASK        (0xf << 16)
+
+# define XN_FLAG_COMPAT          0/* Traditional; use old X509_NAME_print */
+# define XN_FLAG_SEP_COMMA_PLUS  (1 << 16)/* RFC2253 ,+ */
+# define XN_FLAG_SEP_CPLUS_SPC   (2 << 16)/* ,+ spaced: more readable */
+# define XN_FLAG_SEP_SPLUS_SPC   (3 << 16)/* ;+ spaced */
+# define XN_FLAG_SEP_MULTILINE   (4 << 16)/* One line per field */
+
+# define XN_FLAG_DN_REV          (1 << 20)/* Reverse DN order */
+
+/* How the field name is shown */
+
+# define XN_FLAG_FN_MASK         (0x3 << 21)
+
+# define XN_FLAG_FN_SN           0/* Object short name */
+# define XN_FLAG_FN_LN           (1 << 21)/* Object long name */
+# define XN_FLAG_FN_OID          (2 << 21)/* Always use OIDs */
+# define XN_FLAG_FN_NONE         (3 << 21)/* No field names */
+
+# define XN_FLAG_SPC_EQ          (1 << 23)/* Put spaces round '=' */
+
+/*
+ * This determines if we dump fields we don't recognise: RFC2253 requires
+ * this.
+ */
+
+# define XN_FLAG_DUMP_UNKNOWN_FIELDS (1 << 24)
+
+# define XN_FLAG_FN_ALIGN        (1 << 25)/* Align field names to 20
+                                           * characters */
+
+/* Complete set of RFC2253 flags */
+
+# define XN_FLAG_RFC2253 (ASN1_STRFLGS_RFC2253 | \
+                        XN_FLAG_SEP_COMMA_PLUS | \
+                        XN_FLAG_DN_REV | \
+                        XN_FLAG_FN_SN | \
+                        XN_FLAG_DUMP_UNKNOWN_FIELDS)
+
+/* readable oneline form */
+
+# define XN_FLAG_ONELINE (ASN1_STRFLGS_RFC2253 | \
+                        ASN1_STRFLGS_ESC_QUOTE | \
+                        XN_FLAG_SEP_CPLUS_SPC | \
+                        XN_FLAG_SPC_EQ | \
+                        XN_FLAG_FN_SN)
+
+/* readable multiline form */
+
+# define XN_FLAG_MULTILINE (ASN1_STRFLGS_ESC_CTRL | \
+                        ASN1_STRFLGS_ESC_MSB | \
+                        XN_FLAG_SEP_MULTILINE | \
+                        XN_FLAG_SPC_EQ | \
+                        XN_FLAG_FN_LN | \
+                        XN_FLAG_FN_ALIGN)
+
+DEFINE_STACK_OF(X509_REVOKED)
+
+typedef struct X509_crl_info_st X509_CRL_INFO;
+
+DEFINE_STACK_OF(X509_CRL)
+
+typedef struct private_key_st {
+    int version;
+    /* The PKCS#8 data types */
+    X509_ALGOR *enc_algor;
+    ASN1_OCTET_STRING *enc_pkey; /* encrypted pub key */
+    /* When decrypted, the following will not be NULL */
+    EVP_PKEY *dec_pkey;
+    /* used to encrypt and decrypt */
+    int key_length;
+    char *key_data;
+    int key_free;               /* true if we should auto free key_data */
+    /* expanded version of 'enc_algor' */
+    EVP_CIPHER_INFO cipher;
+} X509_PKEY;
+
+typedef struct X509_info_st {
+    X509 *x509;
+    X509_CRL *crl;
+    X509_PKEY *x_pkey;
+    EVP_CIPHER_INFO enc_cipher;
+    int enc_len;
+    char *enc_data;
+} X509_INFO;
+
+DEFINE_STACK_OF(X509_INFO)
+
+/*
+ * The next 2 structures and their 8 routines are used to manipulate Netscape's
+ * spki structures - useful if you are writing a CA web page
+ */
+typedef struct Netscape_spkac_st {
+    X509_PUBKEY *pubkey;
+    ASN1_IA5STRING *challenge;  /* challenge sent in atlas >= PR2 */
+} NETSCAPE_SPKAC;
+
+typedef struct Netscape_spki_st {
+    NETSCAPE_SPKAC *spkac;      /* signed public key and challenge */
+    X509_ALGOR sig_algor;
+    ASN1_BIT_STRING *signature;
+} NETSCAPE_SPKI;
+
+/* Netscape certificate sequence structure */
+typedef struct Netscape_certificate_sequence {
+    ASN1_OBJECT *type;
+    STACK_OF(X509) *certs;
+} NETSCAPE_CERT_SEQUENCE;
+
+/*- Unused (and iv length is wrong)
+typedef struct CBCParameter_st
+        {
+        unsigned char iv[8];
+        } CBC_PARAM;
+*/
+
+/* Password based encryption structure */
+
+typedef struct PBEPARAM_st {
+    ASN1_OCTET_STRING *salt;
+    ASN1_INTEGER *iter;
+} PBEPARAM;
+
+/* Password based encryption V2 structures */
+
+typedef struct PBE2PARAM_st {
+    X509_ALGOR *keyfunc;
+    X509_ALGOR *encryption;
+} PBE2PARAM;
+
+typedef struct PBKDF2PARAM_st {
+/* Usually OCTET STRING but could be anything */
+    ASN1_TYPE *salt;
+    ASN1_INTEGER *iter;
+    ASN1_INTEGER *keylength;
+    X509_ALGOR *prf;
+} PBKDF2PARAM;
+
+#ifndef OPENSSL_NO_SCRYPT
+typedef struct SCRYPT_PARAMS_st {
+    ASN1_OCTET_STRING *salt;
+    ASN1_INTEGER *costParameter;
+    ASN1_INTEGER *blockSize;
+    ASN1_INTEGER *parallelizationParameter;
+    ASN1_INTEGER *keyLength;
+} SCRYPT_PARAMS;
+#endif
+
+#ifdef  __cplusplus
+}
+#endif
+
+# include <openssl/x509_vfy.h>
+# include <openssl/pkcs7.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+# define X509_EXT_PACK_UNKNOWN   1
+# define X509_EXT_PACK_STRING    2
+
+# define         X509_extract_key(x)     X509_get_pubkey(x)/*****/
+# define         X509_REQ_extract_key(a) X509_REQ_get_pubkey(a)
+# define         X509_name_cmp(a,b)      X509_NAME_cmp((a),(b))
+
+void X509_CRL_set_default_method(const X509_CRL_METHOD *meth);
+X509_CRL_METHOD *X509_CRL_METHOD_new(int (*crl_init) (X509_CRL *crl),
+                                     int (*crl_free) (X509_CRL *crl),
+                                     int (*crl_lookup) (X509_CRL *crl,
+                                                        X509_REVOKED **ret,
+                                                        ASN1_INTEGER *ser,
+                                                        X509_NAME *issuer),
+                                     int (*crl_verify) (X509_CRL *crl,
+                                                        EVP_PKEY *pk));
+void X509_CRL_METHOD_free(X509_CRL_METHOD *m);
+
+void X509_CRL_set_meth_data(X509_CRL *crl, void *dat);
+void *X509_CRL_get_meth_data(X509_CRL *crl);
+
+const char *X509_verify_cert_error_string(long n);
+
+int X509_verify(X509 *a, EVP_PKEY *r);
+
+int X509_REQ_verify(X509_REQ *a, EVP_PKEY *r);
+int X509_CRL_verify(X509_CRL *a, EVP_PKEY *r);
+int NETSCAPE_SPKI_verify(NETSCAPE_SPKI *a, EVP_PKEY *r);
+
+NETSCAPE_SPKI *NETSCAPE_SPKI_b64_decode(const char *str, int len);
+char *NETSCAPE_SPKI_b64_encode(NETSCAPE_SPKI *x);
+EVP_PKEY *NETSCAPE_SPKI_get_pubkey(NETSCAPE_SPKI *x);
+int NETSCAPE_SPKI_set_pubkey(NETSCAPE_SPKI *x, EVP_PKEY *pkey);
+
+int NETSCAPE_SPKI_print(BIO *out, NETSCAPE_SPKI *spki);
+
+int X509_signature_dump(BIO *bp, const ASN1_STRING *sig, int indent);
+int X509_signature_print(BIO *bp, const X509_ALGOR *alg,
+                         const ASN1_STRING *sig);
+
+int X509_sign(X509 *x, EVP_PKEY *pkey, const EVP_MD *md);
+int X509_sign_ctx(X509 *x, EVP_MD_CTX *ctx);
+# ifndef OPENSSL_NO_OCSP
+int X509_http_nbio(OCSP_REQ_CTX *rctx, X509 **pcert);
+# endif
+int X509_REQ_sign(X509_REQ *x, EVP_PKEY *pkey, const EVP_MD *md);
+int X509_REQ_sign_ctx(X509_REQ *x, EVP_MD_CTX *ctx);
+int X509_CRL_sign(X509_CRL *x, EVP_PKEY *pkey, const EVP_MD *md);
+int X509_CRL_sign_ctx(X509_CRL *x, EVP_MD_CTX *ctx);
+# ifndef OPENSSL_NO_OCSP
+int X509_CRL_http_nbio(OCSP_REQ_CTX *rctx, X509_CRL **pcrl);
+# endif
+int NETSCAPE_SPKI_sign(NETSCAPE_SPKI *x, EVP_PKEY *pkey, const EVP_MD *md);
+
+int X509_pubkey_digest(const X509 *data, const EVP_MD *type,
+                       unsigned char *md, unsigned int *len);
+int X509_digest(const X509 *data, const EVP_MD *type,
+                unsigned char *md, unsigned int *len);
+int X509_CRL_digest(const X509_CRL *data, const EVP_MD *type,
+                    unsigned char *md, unsigned int *len);
+int X509_REQ_digest(const X509_REQ *data, const EVP_MD *type,
+                    unsigned char *md, unsigned int *len);
+int X509_NAME_digest(const X509_NAME *data, const EVP_MD *type,
+                     unsigned char *md, unsigned int *len);
+
+# ifndef OPENSSL_NO_STDIO
+X509 *d2i_X509_fp(FILE *fp, X509 **x509);
+int i2d_X509_fp(FILE *fp, X509 *x509);
+X509_CRL *d2i_X509_CRL_fp(FILE *fp, X509_CRL **crl);
+int i2d_X509_CRL_fp(FILE *fp, X509_CRL *crl);
+X509_REQ *d2i_X509_REQ_fp(FILE *fp, X509_REQ **req);
+int i2d_X509_REQ_fp(FILE *fp, X509_REQ *req);
+#  ifndef OPENSSL_NO_RSA
+RSA *d2i_RSAPrivateKey_fp(FILE *fp, RSA **rsa);
+int i2d_RSAPrivateKey_fp(FILE *fp, RSA *rsa);
+RSA *d2i_RSAPublicKey_fp(FILE *fp, RSA **rsa);
+int i2d_RSAPublicKey_fp(FILE *fp, RSA *rsa);
+RSA *d2i_RSA_PUBKEY_fp(FILE *fp, RSA **rsa);
+int i2d_RSA_PUBKEY_fp(FILE *fp, RSA *rsa);
+#  endif
+#  ifndef OPENSSL_NO_DSA
+DSA *d2i_DSA_PUBKEY_fp(FILE *fp, DSA **dsa);
+int i2d_DSA_PUBKEY_fp(FILE *fp, DSA *dsa);
+DSA *d2i_DSAPrivateKey_fp(FILE *fp, DSA **dsa);
+int i2d_DSAPrivateKey_fp(FILE *fp, DSA *dsa);
+#  endif
+#  ifndef OPENSSL_NO_EC
+EC_KEY *d2i_EC_PUBKEY_fp(FILE *fp, EC_KEY **eckey);
+int i2d_EC_PUBKEY_fp(FILE *fp, EC_KEY *eckey);
+EC_KEY *d2i_ECPrivateKey_fp(FILE *fp, EC_KEY **eckey);
+int i2d_ECPrivateKey_fp(FILE *fp, EC_KEY *eckey);
+#  endif
+X509_SIG *d2i_PKCS8_fp(FILE *fp, X509_SIG **p8);
+int i2d_PKCS8_fp(FILE *fp, X509_SIG *p8);
+PKCS8_PRIV_KEY_INFO *d2i_PKCS8_PRIV_KEY_INFO_fp(FILE *fp,
+                                                PKCS8_PRIV_KEY_INFO **p8inf);
+int i2d_PKCS8_PRIV_KEY_INFO_fp(FILE *fp, PKCS8_PRIV_KEY_INFO *p8inf);
+int i2d_PKCS8PrivateKeyInfo_fp(FILE *fp, EVP_PKEY *key);
+int i2d_PrivateKey_fp(FILE *fp, EVP_PKEY *pkey);
+EVP_PKEY *d2i_PrivateKey_fp(FILE *fp, EVP_PKEY **a);
+int i2d_PUBKEY_fp(FILE *fp, EVP_PKEY *pkey);
+EVP_PKEY *d2i_PUBKEY_fp(FILE *fp, EVP_PKEY **a);
+# endif
+
+X509 *d2i_X509_bio(BIO *bp, X509 **x509);
+int i2d_X509_bio(BIO *bp, X509 *x509);
+X509_CRL *d2i_X509_CRL_bio(BIO *bp, X509_CRL **crl);
+int i2d_X509_CRL_bio(BIO *bp, X509_CRL *crl);
+X509_REQ *d2i_X509_REQ_bio(BIO *bp, X509_REQ **req);
+int i2d_X509_REQ_bio(BIO *bp, X509_REQ *req);
+#  ifndef OPENSSL_NO_RSA
+RSA *d2i_RSAPrivateKey_bio(BIO *bp, RSA **rsa);
+int i2d_RSAPrivateKey_bio(BIO *bp, RSA *rsa);
+RSA *d2i_RSAPublicKey_bio(BIO *bp, RSA **rsa);
+int i2d_RSAPublicKey_bio(BIO *bp, RSA *rsa);
+RSA *d2i_RSA_PUBKEY_bio(BIO *bp, RSA **rsa);
+int i2d_RSA_PUBKEY_bio(BIO *bp, RSA *rsa);
+#  endif
+#  ifndef OPENSSL_NO_DSA
+DSA *d2i_DSA_PUBKEY_bio(BIO *bp, DSA **dsa);
+int i2d_DSA_PUBKEY_bio(BIO *bp, DSA *dsa);
+DSA *d2i_DSAPrivateKey_bio(BIO *bp, DSA **dsa);
+int i2d_DSAPrivateKey_bio(BIO *bp, DSA *dsa);
+#  endif
+#  ifndef OPENSSL_NO_EC
+EC_KEY *d2i_EC_PUBKEY_bio(BIO *bp, EC_KEY **eckey);
+int i2d_EC_PUBKEY_bio(BIO *bp, EC_KEY *eckey);
+EC_KEY *d2i_ECPrivateKey_bio(BIO *bp, EC_KEY **eckey);
+int i2d_ECPrivateKey_bio(BIO *bp, EC_KEY *eckey);
+#  endif
+X509_SIG *d2i_PKCS8_bio(BIO *bp, X509_SIG **p8);
+int i2d_PKCS8_bio(BIO *bp, X509_SIG *p8);
+PKCS8_PRIV_KEY_INFO *d2i_PKCS8_PRIV_KEY_INFO_bio(BIO *bp,
+                                                 PKCS8_PRIV_KEY_INFO **p8inf);
+int i2d_PKCS8_PRIV_KEY_INFO_bio(BIO *bp, PKCS8_PRIV_KEY_INFO *p8inf);
+int i2d_PKCS8PrivateKeyInfo_bio(BIO *bp, EVP_PKEY *key);
+int i2d_PrivateKey_bio(BIO *bp, EVP_PKEY *pkey);
+EVP_PKEY *d2i_PrivateKey_bio(BIO *bp, EVP_PKEY **a);
+int i2d_PUBKEY_bio(BIO *bp, EVP_PKEY *pkey);
+EVP_PKEY *d2i_PUBKEY_bio(BIO *bp, EVP_PKEY **a);
+
+X509 *X509_dup(X509 *x509);
+X509_ATTRIBUTE *X509_ATTRIBUTE_dup(X509_ATTRIBUTE *xa);
+X509_EXTENSION *X509_EXTENSION_dup(X509_EXTENSION *ex);
+X509_CRL *X509_CRL_dup(X509_CRL *crl);
+X509_REVOKED *X509_REVOKED_dup(X509_REVOKED *rev);
+X509_REQ *X509_REQ_dup(X509_REQ *req);
+X509_ALGOR *X509_ALGOR_dup(X509_ALGOR *xn);
+int X509_ALGOR_set0(X509_ALGOR *alg, ASN1_OBJECT *aobj, int ptype,
+                    void *pval);
+void X509_ALGOR_get0(const ASN1_OBJECT **paobj, int *pptype,
+                     const void **ppval, const X509_ALGOR *algor);
+void X509_ALGOR_set_md(X509_ALGOR *alg, const EVP_MD *md);
+int X509_ALGOR_cmp(const X509_ALGOR *a, const X509_ALGOR *b);
+
+X509_NAME *X509_NAME_dup(X509_NAME *xn);
+X509_NAME_ENTRY *X509_NAME_ENTRY_dup(X509_NAME_ENTRY *ne);
+
+int X509_cmp_time(const ASN1_TIME *s, time_t *t);
+int X509_cmp_current_time(const ASN1_TIME *s);
+ASN1_TIME *X509_time_adj(ASN1_TIME *s, long adj, time_t *t);
+ASN1_TIME *X509_time_adj_ex(ASN1_TIME *s,
+                            int offset_day, long offset_sec, time_t *t);
+ASN1_TIME *X509_gmtime_adj(ASN1_TIME *s, long adj);
+
+const char *X509_get_default_cert_area(void);
+const char *X509_get_default_cert_dir(void);
+const char *X509_get_default_cert_file(void);
+const char *X509_get_default_cert_dir_env(void);
+const char *X509_get_default_cert_file_env(void);
+const char *X509_get_default_private_dir(void);
+
+X509_REQ *X509_to_X509_REQ(X509 *x, EVP_PKEY *pkey, const EVP_MD *md);
+X509 *X509_REQ_to_X509(X509_REQ *r, int days, EVP_PKEY *pkey);
+
+DECLARE_ASN1_FUNCTIONS(X509_ALGOR)
+DECLARE_ASN1_ENCODE_FUNCTIONS(X509_ALGORS, X509_ALGORS, X509_ALGORS)
+DECLARE_ASN1_FUNCTIONS(X509_VAL)
+
+DECLARE_ASN1_FUNCTIONS(X509_PUBKEY)
+
+int X509_PUBKEY_set(X509_PUBKEY **x, EVP_PKEY *pkey);
+EVP_PKEY *X509_PUBKEY_get0(X509_PUBKEY *key);
+EVP_PKEY *X509_PUBKEY_get(X509_PUBKEY *key);
+int X509_get_pubkey_parameters(EVP_PKEY *pkey, STACK_OF(X509) *chain);
+long X509_get_pathlen(X509 *x);
+int i2d_PUBKEY(EVP_PKEY *a, unsigned char **pp);
+EVP_PKEY *d2i_PUBKEY(EVP_PKEY **a, const unsigned char **pp, long length);
+# ifndef OPENSSL_NO_RSA
+int i2d_RSA_PUBKEY(RSA *a, unsigned char **pp);
+RSA *d2i_RSA_PUBKEY(RSA **a, const unsigned char **pp, long length);
+# endif
+# ifndef OPENSSL_NO_DSA
+int i2d_DSA_PUBKEY(DSA *a, unsigned char **pp);
+DSA *d2i_DSA_PUBKEY(DSA **a, const unsigned char **pp, long length);
+# endif
+# ifndef OPENSSL_NO_EC
+int i2d_EC_PUBKEY(EC_KEY *a, unsigned char **pp);
+EC_KEY *d2i_EC_PUBKEY(EC_KEY **a, const unsigned char **pp, long length);
+# endif
+
+DECLARE_ASN1_FUNCTIONS(X509_SIG)
+void X509_SIG_get0(const X509_SIG *sig, const X509_ALGOR **palg,
+                   const ASN1_OCTET_STRING **pdigest);
+void X509_SIG_getm(X509_SIG *sig, X509_ALGOR **palg,
+                   ASN1_OCTET_STRING **pdigest);
+
+DECLARE_ASN1_FUNCTIONS(X509_REQ_INFO)
+DECLARE_ASN1_FUNCTIONS(X509_REQ)
+
+DECLARE_ASN1_FUNCTIONS(X509_ATTRIBUTE)
+X509_ATTRIBUTE *X509_ATTRIBUTE_create(int nid, int atrtype, void *value);
+
+DECLARE_ASN1_FUNCTIONS(X509_EXTENSION)
+DECLARE_ASN1_ENCODE_FUNCTIONS(X509_EXTENSIONS, X509_EXTENSIONS, X509_EXTENSIONS)
+
+DECLARE_ASN1_FUNCTIONS(X509_NAME_ENTRY)
+
+DECLARE_ASN1_FUNCTIONS(X509_NAME)
+
+int X509_NAME_set(X509_NAME **xn, X509_NAME *name);
+
+DECLARE_ASN1_FUNCTIONS(X509_CINF)
+
+DECLARE_ASN1_FUNCTIONS(X509)
+DECLARE_ASN1_FUNCTIONS(X509_CERT_AUX)
+
+#define X509_get_ex_new_index(l, p, newf, dupf, freef) \
+    CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_X509, l, p, newf, dupf, freef)
+int X509_set_ex_data(X509 *r, int idx, void *arg);
+void *X509_get_ex_data(X509 *r, int idx);
+int i2d_X509_AUX(X509 *a, unsigned char **pp);
+X509 *d2i_X509_AUX(X509 **a, const unsigned char **pp, long length);
+
+int i2d_re_X509_tbs(X509 *x, unsigned char **pp);
+
+int X509_SIG_INFO_get(const X509_SIG_INFO *siginf, int *mdnid, int *pknid,
+                      int *secbits, uint32_t *flags);
+void X509_SIG_INFO_set(X509_SIG_INFO *siginf, int mdnid, int pknid,
+                       int secbits, uint32_t flags);
+
+int X509_get_signature_info(X509 *x, int *mdnid, int *pknid, int *secbits,
+                            uint32_t *flags);
+
+void X509_get0_signature(const ASN1_BIT_STRING **psig,
+                         const X509_ALGOR **palg, const X509 *x);
+int X509_get_signature_nid(const X509 *x);
+
+int X509_trusted(const X509 *x);
+int X509_alias_set1(X509 *x, const unsigned char *name, int len);
+int X509_keyid_set1(X509 *x, const unsigned char *id, int len);
+unsigned char *X509_alias_get0(X509 *x, int *len);
+unsigned char *X509_keyid_get0(X509 *x, int *len);
+int (*X509_TRUST_set_default(int (*trust) (int, X509 *, int))) (int, X509 *,
+                                                                int);
+int X509_TRUST_set(int *t, int trust);
+int X509_add1_trust_object(X509 *x, const ASN1_OBJECT *obj);
+int X509_add1_reject_object(X509 *x, const ASN1_OBJECT *obj);
+void X509_trust_clear(X509 *x);
+void X509_reject_clear(X509 *x);
+
+STACK_OF(ASN1_OBJECT) *X509_get0_trust_objects(X509 *x);
+STACK_OF(ASN1_OBJECT) *X509_get0_reject_objects(X509 *x);
+
+DECLARE_ASN1_FUNCTIONS(X509_REVOKED)
+DECLARE_ASN1_FUNCTIONS(X509_CRL_INFO)
+DECLARE_ASN1_FUNCTIONS(X509_CRL)
+
+int X509_CRL_add0_revoked(X509_CRL *crl, X509_REVOKED *rev);
+int X509_CRL_get0_by_serial(X509_CRL *crl,
+                            X509_REVOKED **ret, ASN1_INTEGER *serial);
+int X509_CRL_get0_by_cert(X509_CRL *crl, X509_REVOKED **ret, X509 *x);
+
+X509_PKEY *X509_PKEY_new(void);
+void X509_PKEY_free(X509_PKEY *a);
+
+DECLARE_ASN1_FUNCTIONS(NETSCAPE_SPKI)
+DECLARE_ASN1_FUNCTIONS(NETSCAPE_SPKAC)
+DECLARE_ASN1_FUNCTIONS(NETSCAPE_CERT_SEQUENCE)
+
+X509_INFO *X509_INFO_new(void);
+void X509_INFO_free(X509_INFO *a);
+char *X509_NAME_oneline(const X509_NAME *a, char *buf, int size);
+
+int ASN1_verify(i2d_of_void *i2d, X509_ALGOR *algor1,
+                ASN1_BIT_STRING *signature, char *data, EVP_PKEY *pkey);
+
+int ASN1_digest(i2d_of_void *i2d, const EVP_MD *type, char *data,
+                unsigned char *md, unsigned int *len);
+
+int ASN1_sign(i2d_of_void *i2d, X509_ALGOR *algor1,
+              X509_ALGOR *algor2, ASN1_BIT_STRING *signature,
+              char *data, EVP_PKEY *pkey, const EVP_MD *type);
+
+int ASN1_item_digest(const ASN1_ITEM *it, const EVP_MD *type, void *data,
+                     unsigned char *md, unsigned int *len);
+
+int ASN1_item_verify(const ASN1_ITEM *it, X509_ALGOR *algor1,
+                     ASN1_BIT_STRING *signature, void *data, EVP_PKEY *pkey);
+
+int ASN1_item_sign(const ASN1_ITEM *it, X509_ALGOR *algor1,
+                   X509_ALGOR *algor2, ASN1_BIT_STRING *signature, void *data,
+                   EVP_PKEY *pkey, const EVP_MD *type);
+int ASN1_item_sign_ctx(const ASN1_ITEM *it, X509_ALGOR *algor1,
+                       X509_ALGOR *algor2, ASN1_BIT_STRING *signature,
+                       void *asn, EVP_MD_CTX *ctx);
+
+long X509_get_version(const X509 *x);
+int X509_set_version(X509 *x, long version);
+int X509_set_serialNumber(X509 *x, ASN1_INTEGER *serial);
+ASN1_INTEGER *X509_get_serialNumber(X509 *x);
+const ASN1_INTEGER *X509_get0_serialNumber(const X509 *x);
+int X509_set_issuer_name(X509 *x, X509_NAME *name);
+X509_NAME *X509_get_issuer_name(const X509 *a);
+int X509_set_subject_name(X509 *x, X509_NAME *name);
+X509_NAME *X509_get_subject_name(const X509 *a);
+const ASN1_TIME * X509_get0_notBefore(const X509 *x);
+ASN1_TIME *X509_getm_notBefore(const X509 *x);
+int X509_set1_notBefore(X509 *x, const ASN1_TIME *tm);
+const ASN1_TIME *X509_get0_notAfter(const X509 *x);
+ASN1_TIME *X509_getm_notAfter(const X509 *x);
+int X509_set1_notAfter(X509 *x, const ASN1_TIME *tm);
+int X509_set_pubkey(X509 *x, EVP_PKEY *pkey);
+int X509_up_ref(X509 *x);
+int X509_get_signature_type(const X509 *x);
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define X509_get_notBefore X509_getm_notBefore
+#  define X509_get_notAfter X509_getm_notAfter
+#  define X509_set_notBefore X509_set1_notBefore
+#  define X509_set_notAfter X509_set1_notAfter
+#endif
+
+
+/*
+ * This one is only used so that a binary form can output, as in
+ * i2d_X509_PUBKEY(X509_get_X509_PUBKEY(x), &buf)
+ */
+X509_PUBKEY *X509_get_X509_PUBKEY(const X509 *x);
+const STACK_OF(X509_EXTENSION) *X509_get0_extensions(const X509 *x);
+void X509_get0_uids(const X509 *x, const ASN1_BIT_STRING **piuid,
+                    const ASN1_BIT_STRING **psuid);
+const X509_ALGOR *X509_get0_tbs_sigalg(const X509 *x);
+
+EVP_PKEY *X509_get0_pubkey(const X509 *x);
+EVP_PKEY *X509_get_pubkey(X509 *x);
+ASN1_BIT_STRING *X509_get0_pubkey_bitstr(const X509 *x);
+int X509_certificate_type(const X509 *x, const EVP_PKEY *pubkey);
+
+long X509_REQ_get_version(const X509_REQ *req);
+int X509_REQ_set_version(X509_REQ *x, long version);
+X509_NAME *X509_REQ_get_subject_name(const X509_REQ *req);
+int X509_REQ_set_subject_name(X509_REQ *req, X509_NAME *name);
+void X509_REQ_get0_signature(const X509_REQ *req, const ASN1_BIT_STRING **psig,
+                             const X509_ALGOR **palg);
+int X509_REQ_get_signature_nid(const X509_REQ *req);
+int i2d_re_X509_REQ_tbs(X509_REQ *req, unsigned char **pp);
+int X509_REQ_set_pubkey(X509_REQ *x, EVP_PKEY *pkey);
+EVP_PKEY *X509_REQ_get_pubkey(X509_REQ *req);
+EVP_PKEY *X509_REQ_get0_pubkey(X509_REQ *req);
+X509_PUBKEY *X509_REQ_get_X509_PUBKEY(X509_REQ *req);
+int X509_REQ_extension_nid(int nid);
+int *X509_REQ_get_extension_nids(void);
+void X509_REQ_set_extension_nids(int *nids);
+STACK_OF(X509_EXTENSION) *X509_REQ_get_extensions(X509_REQ *req);
+int X509_REQ_add_extensions_nid(X509_REQ *req, STACK_OF(X509_EXTENSION) *exts,
+                                int nid);
+int X509_REQ_add_extensions(X509_REQ *req, STACK_OF(X509_EXTENSION) *exts);
+int X509_REQ_get_attr_count(const X509_REQ *req);
+int X509_REQ_get_attr_by_NID(const X509_REQ *req, int nid, int lastpos);
+int X509_REQ_get_attr_by_OBJ(const X509_REQ *req, const ASN1_OBJECT *obj,
+                             int lastpos);
+X509_ATTRIBUTE *X509_REQ_get_attr(const X509_REQ *req, int loc);
+X509_ATTRIBUTE *X509_REQ_delete_attr(X509_REQ *req, int loc);
+int X509_REQ_add1_attr(X509_REQ *req, X509_ATTRIBUTE *attr);
+int X509_REQ_add1_attr_by_OBJ(X509_REQ *req,
+                              const ASN1_OBJECT *obj, int type,
+                              const unsigned char *bytes, int len);
+int X509_REQ_add1_attr_by_NID(X509_REQ *req,
+                              int nid, int type,
+                              const unsigned char *bytes, int len);
+int X509_REQ_add1_attr_by_txt(X509_REQ *req,
+                              const char *attrname, int type,
+                              const unsigned char *bytes, int len);
+
+int X509_CRL_set_version(X509_CRL *x, long version);
+int X509_CRL_set_issuer_name(X509_CRL *x, X509_NAME *name);
+int X509_CRL_set1_lastUpdate(X509_CRL *x, const ASN1_TIME *tm);
+int X509_CRL_set1_nextUpdate(X509_CRL *x, const ASN1_TIME *tm);
+int X509_CRL_sort(X509_CRL *crl);
+int X509_CRL_up_ref(X509_CRL *crl);
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define X509_CRL_set_lastUpdate X509_CRL_set1_lastUpdate
+#  define X509_CRL_set_nextUpdate X509_CRL_set1_nextUpdate
+#endif
+
+long X509_CRL_get_version(const X509_CRL *crl);
+const ASN1_TIME *X509_CRL_get0_lastUpdate(const X509_CRL *crl);
+const ASN1_TIME *X509_CRL_get0_nextUpdate(const X509_CRL *crl);
+DEPRECATEDIN_1_1_0(ASN1_TIME *X509_CRL_get_lastUpdate(X509_CRL *crl))
+DEPRECATEDIN_1_1_0(ASN1_TIME *X509_CRL_get_nextUpdate(X509_CRL *crl))
+X509_NAME *X509_CRL_get_issuer(const X509_CRL *crl);
+const STACK_OF(X509_EXTENSION) *X509_CRL_get0_extensions(const X509_CRL *crl);
+STACK_OF(X509_REVOKED) *X509_CRL_get_REVOKED(X509_CRL *crl);
+void X509_CRL_get0_signature(const X509_CRL *crl, const ASN1_BIT_STRING **psig,
+                             const X509_ALGOR **palg);
+int X509_CRL_get_signature_nid(const X509_CRL *crl);
+int i2d_re_X509_CRL_tbs(X509_CRL *req, unsigned char **pp);
+
+const ASN1_INTEGER *X509_REVOKED_get0_serialNumber(const X509_REVOKED *x);
+int X509_REVOKED_set_serialNumber(X509_REVOKED *x, ASN1_INTEGER *serial);
+const ASN1_TIME *X509_REVOKED_get0_revocationDate(const X509_REVOKED *x);
+int X509_REVOKED_set_revocationDate(X509_REVOKED *r, ASN1_TIME *tm);
+const STACK_OF(X509_EXTENSION) *
+X509_REVOKED_get0_extensions(const X509_REVOKED *r);
+
+X509_CRL *X509_CRL_diff(X509_CRL *base, X509_CRL *newer,
+                        EVP_PKEY *skey, const EVP_MD *md, unsigned int flags);
+
+int X509_REQ_check_private_key(X509_REQ *x509, EVP_PKEY *pkey);
+
+int X509_check_private_key(const X509 *x509, const EVP_PKEY *pkey);
+int X509_chain_check_suiteb(int *perror_depth,
+                            X509 *x, STACK_OF(X509) *chain,
+                            unsigned long flags);
+int X509_CRL_check_suiteb(X509_CRL *crl, EVP_PKEY *pk, unsigned long flags);
+STACK_OF(X509) *X509_chain_up_ref(STACK_OF(X509) *chain);
+
+int X509_issuer_and_serial_cmp(const X509 *a, const X509 *b);
+unsigned long X509_issuer_and_serial_hash(X509 *a);
+
+int X509_issuer_name_cmp(const X509 *a, const X509 *b);
+unsigned long X509_issuer_name_hash(X509 *a);
+
+int X509_subject_name_cmp(const X509 *a, const X509 *b);
+unsigned long X509_subject_name_hash(X509 *x);
+
+# ifndef OPENSSL_NO_MD5
+unsigned long X509_issuer_name_hash_old(X509 *a);
+unsigned long X509_subject_name_hash_old(X509 *x);
+# endif
+
+int X509_cmp(const X509 *a, const X509 *b);
+int X509_NAME_cmp(const X509_NAME *a, const X509_NAME *b);
+unsigned long X509_NAME_hash(X509_NAME *x);
+unsigned long X509_NAME_hash_old(X509_NAME *x);
+
+int X509_CRL_cmp(const X509_CRL *a, const X509_CRL *b);
+int X509_CRL_match(const X509_CRL *a, const X509_CRL *b);
+int X509_aux_print(BIO *out, X509 *x, int indent);
+# ifndef OPENSSL_NO_STDIO
+int X509_print_ex_fp(FILE *bp, X509 *x, unsigned long nmflag,
+                     unsigned long cflag);
+int X509_print_fp(FILE *bp, X509 *x);
+int X509_CRL_print_fp(FILE *bp, X509_CRL *x);
+int X509_REQ_print_fp(FILE *bp, X509_REQ *req);
+int X509_NAME_print_ex_fp(FILE *fp, const X509_NAME *nm, int indent,
+                          unsigned long flags);
+# endif
+
+int X509_NAME_print(BIO *bp, const X509_NAME *name, int obase);
+int X509_NAME_print_ex(BIO *out, const X509_NAME *nm, int indent,
+                       unsigned long flags);
+int X509_print_ex(BIO *bp, X509 *x, unsigned long nmflag,
+                  unsigned long cflag);
+int X509_print(BIO *bp, X509 *x);
+int X509_ocspid_print(BIO *bp, X509 *x);
+int X509_CRL_print_ex(BIO *out, X509_CRL *x, unsigned long nmflag);
+int X509_CRL_print(BIO *bp, X509_CRL *x);
+int X509_REQ_print_ex(BIO *bp, X509_REQ *x, unsigned long nmflag,
+                      unsigned long cflag);
+int X509_REQ_print(BIO *bp, X509_REQ *req);
+
+int X509_NAME_entry_count(const X509_NAME *name);
+int X509_NAME_get_text_by_NID(X509_NAME *name, int nid, char *buf, int len);
+int X509_NAME_get_text_by_OBJ(X509_NAME *name, const ASN1_OBJECT *obj,
+                              char *buf, int len);
+
+/*
+ * NOTE: you should be passing -1, not 0 as lastpos. The functions that use
+ * lastpos, search after that position on.
+ */
+int X509_NAME_get_index_by_NID(X509_NAME *name, int nid, int lastpos);
+int X509_NAME_get_index_by_OBJ(X509_NAME *name, const ASN1_OBJECT *obj,
+                               int lastpos);
+X509_NAME_ENTRY *X509_NAME_get_entry(const X509_NAME *name, int loc);
+X509_NAME_ENTRY *X509_NAME_delete_entry(X509_NAME *name, int loc);
+int X509_NAME_add_entry(X509_NAME *name, const X509_NAME_ENTRY *ne,
+                        int loc, int set);
+int X509_NAME_add_entry_by_OBJ(X509_NAME *name, const ASN1_OBJECT *obj, int type,
+                               const unsigned char *bytes, int len, int loc,
+                               int set);
+int X509_NAME_add_entry_by_NID(X509_NAME *name, int nid, int type,
+                               const unsigned char *bytes, int len, int loc,
+                               int set);
+X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_txt(X509_NAME_ENTRY **ne,
+                                               const char *field, int type,
+                                               const unsigned char *bytes,
+                                               int len);
+X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_NID(X509_NAME_ENTRY **ne, int nid,
+                                               int type,
+                                               const unsigned char *bytes,
+                                               int len);
+int X509_NAME_add_entry_by_txt(X509_NAME *name, const char *field, int type,
+                               const unsigned char *bytes, int len, int loc,
+                               int set);
+X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_OBJ(X509_NAME_ENTRY **ne,
+                                               const ASN1_OBJECT *obj, int type,
+                                               const unsigned char *bytes,
+                                               int len);
+int X509_NAME_ENTRY_set_object(X509_NAME_ENTRY *ne, const ASN1_OBJECT *obj);
+int X509_NAME_ENTRY_set_data(X509_NAME_ENTRY *ne, int type,
+                             const unsigned char *bytes, int len);
+ASN1_OBJECT *X509_NAME_ENTRY_get_object(const X509_NAME_ENTRY *ne);
+ASN1_STRING * X509_NAME_ENTRY_get_data(const X509_NAME_ENTRY *ne);
+int X509_NAME_ENTRY_set(const X509_NAME_ENTRY *ne);
+
+int X509_NAME_get0_der(X509_NAME *nm, const unsigned char **pder,
+                       size_t *pderlen);
+
+int X509v3_get_ext_count(const STACK_OF(X509_EXTENSION) *x);
+int X509v3_get_ext_by_NID(const STACK_OF(X509_EXTENSION) *x,
+                          int nid, int lastpos);
+int X509v3_get_ext_by_OBJ(const STACK_OF(X509_EXTENSION) *x,
+                          const ASN1_OBJECT *obj, int lastpos);
+int X509v3_get_ext_by_critical(const STACK_OF(X509_EXTENSION) *x,
+                               int crit, int lastpos);
+X509_EXTENSION *X509v3_get_ext(const STACK_OF(X509_EXTENSION) *x, int loc);
+X509_EXTENSION *X509v3_delete_ext(STACK_OF(X509_EXTENSION) *x, int loc);
+STACK_OF(X509_EXTENSION) *X509v3_add_ext(STACK_OF(X509_EXTENSION) **x,
+                                         X509_EXTENSION *ex, int loc);
+
+int X509_get_ext_count(const X509 *x);
+int X509_get_ext_by_NID(const X509 *x, int nid, int lastpos);
+int X509_get_ext_by_OBJ(const X509 *x, const ASN1_OBJECT *obj, int lastpos);
+int X509_get_ext_by_critical(const X509 *x, int crit, int lastpos);
+X509_EXTENSION *X509_get_ext(const X509 *x, int loc);
+X509_EXTENSION *X509_delete_ext(X509 *x, int loc);
+int X509_add_ext(X509 *x, X509_EXTENSION *ex, int loc);
+void *X509_get_ext_d2i(const X509 *x, int nid, int *crit, int *idx);
+int X509_add1_ext_i2d(X509 *x, int nid, void *value, int crit,
+                      unsigned long flags);
+
+int X509_CRL_get_ext_count(const X509_CRL *x);
+int X509_CRL_get_ext_by_NID(const X509_CRL *x, int nid, int lastpos);
+int X509_CRL_get_ext_by_OBJ(const X509_CRL *x, const ASN1_OBJECT *obj,
+                            int lastpos);
+int X509_CRL_get_ext_by_critical(const X509_CRL *x, int crit, int lastpos);
+X509_EXTENSION *X509_CRL_get_ext(const X509_CRL *x, int loc);
+X509_EXTENSION *X509_CRL_delete_ext(X509_CRL *x, int loc);
+int X509_CRL_add_ext(X509_CRL *x, X509_EXTENSION *ex, int loc);
+void *X509_CRL_get_ext_d2i(const X509_CRL *x, int nid, int *crit, int *idx);
+int X509_CRL_add1_ext_i2d(X509_CRL *x, int nid, void *value, int crit,
+                          unsigned long flags);
+
+int X509_REVOKED_get_ext_count(const X509_REVOKED *x);
+int X509_REVOKED_get_ext_by_NID(const X509_REVOKED *x, int nid, int lastpos);
+int X509_REVOKED_get_ext_by_OBJ(const X509_REVOKED *x, const ASN1_OBJECT *obj,
+                                int lastpos);
+int X509_REVOKED_get_ext_by_critical(const X509_REVOKED *x, int crit,
+                                     int lastpos);
+X509_EXTENSION *X509_REVOKED_get_ext(const X509_REVOKED *x, int loc);
+X509_EXTENSION *X509_REVOKED_delete_ext(X509_REVOKED *x, int loc);
+int X509_REVOKED_add_ext(X509_REVOKED *x, X509_EXTENSION *ex, int loc);
+void *X509_REVOKED_get_ext_d2i(const X509_REVOKED *x, int nid, int *crit,
+                               int *idx);
+int X509_REVOKED_add1_ext_i2d(X509_REVOKED *x, int nid, void *value, int crit,
+                              unsigned long flags);
+
+X509_EXTENSION *X509_EXTENSION_create_by_NID(X509_EXTENSION **ex,
+                                             int nid, int crit,
+                                             ASN1_OCTET_STRING *data);
+X509_EXTENSION *X509_EXTENSION_create_by_OBJ(X509_EXTENSION **ex,
+                                             const ASN1_OBJECT *obj, int crit,
+                                             ASN1_OCTET_STRING *data);
+int X509_EXTENSION_set_object(X509_EXTENSION *ex, const ASN1_OBJECT *obj);
+int X509_EXTENSION_set_critical(X509_EXTENSION *ex, int crit);
+int X509_EXTENSION_set_data(X509_EXTENSION *ex, ASN1_OCTET_STRING *data);
+ASN1_OBJECT *X509_EXTENSION_get_object(X509_EXTENSION *ex);
+ASN1_OCTET_STRING *X509_EXTENSION_get_data(X509_EXTENSION *ne);
+int X509_EXTENSION_get_critical(const X509_EXTENSION *ex);
+
+int X509at_get_attr_count(const STACK_OF(X509_ATTRIBUTE) *x);
+int X509at_get_attr_by_NID(const STACK_OF(X509_ATTRIBUTE) *x, int nid,
+                           int lastpos);
+int X509at_get_attr_by_OBJ(const STACK_OF(X509_ATTRIBUTE) *sk,
+                           const ASN1_OBJECT *obj, int lastpos);
+X509_ATTRIBUTE *X509at_get_attr(const STACK_OF(X509_ATTRIBUTE) *x, int loc);
+X509_ATTRIBUTE *X509at_delete_attr(STACK_OF(X509_ATTRIBUTE) *x, int loc);
+STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr(STACK_OF(X509_ATTRIBUTE) **x,
+                                           X509_ATTRIBUTE *attr);
+STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_OBJ(STACK_OF(X509_ATTRIBUTE)
+                                                  **x, const ASN1_OBJECT *obj,
+                                                  int type,
+                                                  const unsigned char *bytes,
+                                                  int len);
+STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_NID(STACK_OF(X509_ATTRIBUTE)
+                                                  **x, int nid, int type,
+                                                  const unsigned char *bytes,
+                                                  int len);
+STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_txt(STACK_OF(X509_ATTRIBUTE)
+                                                  **x, const char *attrname,
+                                                  int type,
+                                                  const unsigned char *bytes,
+                                                  int len);
+void *X509at_get0_data_by_OBJ(STACK_OF(X509_ATTRIBUTE) *x,
+                              const ASN1_OBJECT *obj, int lastpos, int type);
+X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_NID(X509_ATTRIBUTE **attr, int nid,
+                                             int atrtype, const void *data,
+                                             int len);
+X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_OBJ(X509_ATTRIBUTE **attr,
+                                             const ASN1_OBJECT *obj,
+                                             int atrtype, const void *data,
+                                             int len);
+X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_txt(X509_ATTRIBUTE **attr,
+                                             const char *atrname, int type,
+                                             const unsigned char *bytes,
+                                             int len);
+int X509_ATTRIBUTE_set1_object(X509_ATTRIBUTE *attr, const ASN1_OBJECT *obj);
+int X509_ATTRIBUTE_set1_data(X509_ATTRIBUTE *attr, int attrtype,
+                             const void *data, int len);
+void *X509_ATTRIBUTE_get0_data(X509_ATTRIBUTE *attr, int idx, int atrtype,
+                               void *data);
+int X509_ATTRIBUTE_count(const X509_ATTRIBUTE *attr);
+ASN1_OBJECT *X509_ATTRIBUTE_get0_object(X509_ATTRIBUTE *attr);
+ASN1_TYPE *X509_ATTRIBUTE_get0_type(X509_ATTRIBUTE *attr, int idx);
+
+int EVP_PKEY_get_attr_count(const EVP_PKEY *key);
+int EVP_PKEY_get_attr_by_NID(const EVP_PKEY *key, int nid, int lastpos);
+int EVP_PKEY_get_attr_by_OBJ(const EVP_PKEY *key, const ASN1_OBJECT *obj,
+                             int lastpos);
+X509_ATTRIBUTE *EVP_PKEY_get_attr(const EVP_PKEY *key, int loc);
+X509_ATTRIBUTE *EVP_PKEY_delete_attr(EVP_PKEY *key, int loc);
+int EVP_PKEY_add1_attr(EVP_PKEY *key, X509_ATTRIBUTE *attr);
+int EVP_PKEY_add1_attr_by_OBJ(EVP_PKEY *key,
+                              const ASN1_OBJECT *obj, int type,
+                              const unsigned char *bytes, int len);
+int EVP_PKEY_add1_attr_by_NID(EVP_PKEY *key,
+                              int nid, int type,
+                              const unsigned char *bytes, int len);
+int EVP_PKEY_add1_attr_by_txt(EVP_PKEY *key,
+                              const char *attrname, int type,
+                              const unsigned char *bytes, int len);
+
+int X509_verify_cert(X509_STORE_CTX *ctx);
+
+/* lookup a cert from a X509 STACK */
+X509 *X509_find_by_issuer_and_serial(STACK_OF(X509) *sk, X509_NAME *name,
+                                     ASN1_INTEGER *serial);
+X509 *X509_find_by_subject(STACK_OF(X509) *sk, X509_NAME *name);
+
+DECLARE_ASN1_FUNCTIONS(PBEPARAM)
+DECLARE_ASN1_FUNCTIONS(PBE2PARAM)
+DECLARE_ASN1_FUNCTIONS(PBKDF2PARAM)
+#ifndef OPENSSL_NO_SCRYPT
+DECLARE_ASN1_FUNCTIONS(SCRYPT_PARAMS)
+#endif
+
+int PKCS5_pbe_set0_algor(X509_ALGOR *algor, int alg, int iter,
+                         const unsigned char *salt, int saltlen);
+
+X509_ALGOR *PKCS5_pbe_set(int alg, int iter,
+                          const unsigned char *salt, int saltlen);
+X509_ALGOR *PKCS5_pbe2_set(const EVP_CIPHER *cipher, int iter,
+                           unsigned char *salt, int saltlen);
+X509_ALGOR *PKCS5_pbe2_set_iv(const EVP_CIPHER *cipher, int iter,
+                              unsigned char *salt, int saltlen,
+                              unsigned char *aiv, int prf_nid);
+
+#ifndef OPENSSL_NO_SCRYPT
+X509_ALGOR *PKCS5_pbe2_set_scrypt(const EVP_CIPHER *cipher,
+                                  const unsigned char *salt, int saltlen,
+                                  unsigned char *aiv, uint64_t N, uint64_t r,
+                                  uint64_t p);
+#endif
+
+X509_ALGOR *PKCS5_pbkdf2_set(int iter, unsigned char *salt, int saltlen,
+                             int prf_nid, int keylen);
+
+/* PKCS#8 utilities */
+
+DECLARE_ASN1_FUNCTIONS(PKCS8_PRIV_KEY_INFO)
+
+EVP_PKEY *EVP_PKCS82PKEY(const PKCS8_PRIV_KEY_INFO *p8);
+PKCS8_PRIV_KEY_INFO *EVP_PKEY2PKCS8(EVP_PKEY *pkey);
+
+int PKCS8_pkey_set0(PKCS8_PRIV_KEY_INFO *priv, ASN1_OBJECT *aobj,
+                    int version, int ptype, void *pval,
+                    unsigned char *penc, int penclen);
+int PKCS8_pkey_get0(const ASN1_OBJECT **ppkalg,
+                    const unsigned char **pk, int *ppklen,
+                    const X509_ALGOR **pa, const PKCS8_PRIV_KEY_INFO *p8);
+
+const STACK_OF(X509_ATTRIBUTE) *
+PKCS8_pkey_get0_attrs(const PKCS8_PRIV_KEY_INFO *p8);
+int PKCS8_pkey_add1_attr_by_NID(PKCS8_PRIV_KEY_INFO *p8, int nid, int type,
+                                const unsigned char *bytes, int len);
+
+int X509_PUBKEY_set0_param(X509_PUBKEY *pub, ASN1_OBJECT *aobj,
+                           int ptype, void *pval,
+                           unsigned char *penc, int penclen);
+int X509_PUBKEY_get0_param(ASN1_OBJECT **ppkalg,
+                           const unsigned char **pk, int *ppklen,
+                           X509_ALGOR **pa, X509_PUBKEY *pub);
+
+int X509_check_trust(X509 *x, int id, int flags);
+int X509_TRUST_get_count(void);
+X509_TRUST *X509_TRUST_get0(int idx);
+int X509_TRUST_get_by_id(int id);
+int X509_TRUST_add(int id, int flags, int (*ck) (X509_TRUST *, X509 *, int),
+                   const char *name, int arg1, void *arg2);
+void X509_TRUST_cleanup(void);
+int X509_TRUST_get_flags(const X509_TRUST *xp);
+char *X509_TRUST_get0_name(const X509_TRUST *xp);
+int X509_TRUST_get_trust(const X509_TRUST *xp);
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/x509_vfy.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/x509_vfy.h
new file mode 100644
index 000000000..adb8bce7c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/x509_vfy.h
@@ -0,0 +1,628 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_X509_VFY_H
+# define HEADER_X509_VFY_H
+
+/*
+ * Protect against recursion, x509.h and x509_vfy.h each include the other.
+ */
+# ifndef HEADER_X509_H
+#  include <openssl/x509.h>
+# endif
+
+# include <openssl/opensslconf.h>
+# include <openssl/lhash.h>
+# include <openssl/bio.h>
+# include <openssl/crypto.h>
+# include <openssl/symhacks.h>
+
+#ifdef  __cplusplus
+extern "C" {
+#endif
+
+/*-
+SSL_CTX -> X509_STORE
+                -> X509_LOOKUP
+                        ->X509_LOOKUP_METHOD
+                -> X509_LOOKUP
+                        ->X509_LOOKUP_METHOD
+
+SSL     -> X509_STORE_CTX
+                ->X509_STORE
+
+The X509_STORE holds the tables etc for verification stuff.
+A X509_STORE_CTX is used while validating a single certificate.
+The X509_STORE has X509_LOOKUPs for looking up certs.
+The X509_STORE then calls a function to actually verify the
+certificate chain.
+*/
+
+typedef enum {
+    X509_LU_NONE = 0,
+    X509_LU_X509, X509_LU_CRL
+} X509_LOOKUP_TYPE;
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+#define X509_LU_RETRY   -1
+#define X509_LU_FAIL    0
+#endif
+
+DEFINE_STACK_OF(X509_LOOKUP)
+DEFINE_STACK_OF(X509_OBJECT)
+DEFINE_STACK_OF(X509_VERIFY_PARAM)
+
+int X509_STORE_set_depth(X509_STORE *store, int depth);
+
+typedef int (*X509_STORE_CTX_verify_cb)(int, X509_STORE_CTX *);
+typedef int (*X509_STORE_CTX_verify_fn)(X509_STORE_CTX *);
+typedef int (*X509_STORE_CTX_get_issuer_fn)(X509 **issuer,
+                                            X509_STORE_CTX *ctx, X509 *x);
+typedef int (*X509_STORE_CTX_check_issued_fn)(X509_STORE_CTX *ctx,
+                                              X509 *x, X509 *issuer);
+typedef int (*X509_STORE_CTX_check_revocation_fn)(X509_STORE_CTX *ctx);
+typedef int (*X509_STORE_CTX_get_crl_fn)(X509_STORE_CTX *ctx,
+                                         X509_CRL **crl, X509 *x);
+typedef int (*X509_STORE_CTX_check_crl_fn)(X509_STORE_CTX *ctx, X509_CRL *crl);
+typedef int (*X509_STORE_CTX_cert_crl_fn)(X509_STORE_CTX *ctx,
+                                          X509_CRL *crl, X509 *x);
+typedef int (*X509_STORE_CTX_check_policy_fn)(X509_STORE_CTX *ctx);
+typedef STACK_OF(X509) *(*X509_STORE_CTX_lookup_certs_fn)(X509_STORE_CTX *ctx,
+                                                          X509_NAME *nm);
+typedef STACK_OF(X509_CRL) *(*X509_STORE_CTX_lookup_crls_fn)(X509_STORE_CTX *ctx,
+                                                             X509_NAME *nm);
+typedef int (*X509_STORE_CTX_cleanup_fn)(X509_STORE_CTX *ctx);
+
+
+void X509_STORE_CTX_set_depth(X509_STORE_CTX *ctx, int depth);
+
+# define X509_STORE_CTX_set_app_data(ctx,data) \
+        X509_STORE_CTX_set_ex_data(ctx,0,data)
+# define X509_STORE_CTX_get_app_data(ctx) \
+        X509_STORE_CTX_get_ex_data(ctx,0)
+
+# define X509_L_FILE_LOAD        1
+# define X509_L_ADD_DIR          2
+
+# define X509_LOOKUP_load_file(x,name,type) \
+                X509_LOOKUP_ctrl((x),X509_L_FILE_LOAD,(name),(long)(type),NULL)
+
+# define X509_LOOKUP_add_dir(x,name,type) \
+                X509_LOOKUP_ctrl((x),X509_L_ADD_DIR,(name),(long)(type),NULL)
+
+# define         X509_V_OK                                       0
+# define         X509_V_ERR_UNSPECIFIED                          1
+# define         X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT            2
+# define         X509_V_ERR_UNABLE_TO_GET_CRL                    3
+# define         X509_V_ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE     4
+# define         X509_V_ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE      5
+# define         X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY   6
+# define         X509_V_ERR_CERT_SIGNATURE_FAILURE               7
+# define         X509_V_ERR_CRL_SIGNATURE_FAILURE                8
+# define         X509_V_ERR_CERT_NOT_YET_VALID                   9
+# define         X509_V_ERR_CERT_HAS_EXPIRED                     10
+# define         X509_V_ERR_CRL_NOT_YET_VALID                    11
+# define         X509_V_ERR_CRL_HAS_EXPIRED                      12
+# define         X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD       13
+# define         X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD        14
+# define         X509_V_ERR_ERROR_IN_CRL_LAST_UPDATE_FIELD       15
+# define         X509_V_ERR_ERROR_IN_CRL_NEXT_UPDATE_FIELD       16
+# define         X509_V_ERR_OUT_OF_MEM                           17
+# define         X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT          18
+# define         X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN            19
+# define         X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY    20
+# define         X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE      21
+# define         X509_V_ERR_CERT_CHAIN_TOO_LONG                  22
+# define         X509_V_ERR_CERT_REVOKED                         23
+# define         X509_V_ERR_INVALID_CA                           24
+# define         X509_V_ERR_PATH_LENGTH_EXCEEDED                 25
+# define         X509_V_ERR_INVALID_PURPOSE                      26
+# define         X509_V_ERR_CERT_UNTRUSTED                       27
+# define         X509_V_ERR_CERT_REJECTED                        28
+/* These are 'informational' when looking for issuer cert */
+# define         X509_V_ERR_SUBJECT_ISSUER_MISMATCH              29
+# define         X509_V_ERR_AKID_SKID_MISMATCH                   30
+# define         X509_V_ERR_AKID_ISSUER_SERIAL_MISMATCH          31
+# define         X509_V_ERR_KEYUSAGE_NO_CERTSIGN                 32
+# define         X509_V_ERR_UNABLE_TO_GET_CRL_ISSUER             33
+# define         X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION         34
+# define         X509_V_ERR_KEYUSAGE_NO_CRL_SIGN                 35
+# define         X509_V_ERR_UNHANDLED_CRITICAL_CRL_EXTENSION     36
+# define         X509_V_ERR_INVALID_NON_CA                       37
+# define         X509_V_ERR_PROXY_PATH_LENGTH_EXCEEDED           38
+# define         X509_V_ERR_KEYUSAGE_NO_DIGITAL_SIGNATURE        39
+# define         X509_V_ERR_PROXY_CERTIFICATES_NOT_ALLOWED       40
+# define         X509_V_ERR_INVALID_EXTENSION                    41
+# define         X509_V_ERR_INVALID_POLICY_EXTENSION             42
+# define         X509_V_ERR_NO_EXPLICIT_POLICY                   43
+# define         X509_V_ERR_DIFFERENT_CRL_SCOPE                  44
+# define         X509_V_ERR_UNSUPPORTED_EXTENSION_FEATURE        45
+# define         X509_V_ERR_UNNESTED_RESOURCE                    46
+# define         X509_V_ERR_PERMITTED_VIOLATION                  47
+# define         X509_V_ERR_EXCLUDED_VIOLATION                   48
+# define         X509_V_ERR_SUBTREE_MINMAX                       49
+/* The application is not happy */
+# define         X509_V_ERR_APPLICATION_VERIFICATION             50
+# define         X509_V_ERR_UNSUPPORTED_CONSTRAINT_TYPE          51
+# define         X509_V_ERR_UNSUPPORTED_CONSTRAINT_SYNTAX        52
+# define         X509_V_ERR_UNSUPPORTED_NAME_SYNTAX              53
+# define         X509_V_ERR_CRL_PATH_VALIDATION_ERROR            54
+/* Another issuer check debug option */
+# define         X509_V_ERR_PATH_LOOP                            55
+/* Suite B mode algorithm violation */
+# define         X509_V_ERR_SUITE_B_INVALID_VERSION              56
+# define         X509_V_ERR_SUITE_B_INVALID_ALGORITHM            57
+# define         X509_V_ERR_SUITE_B_INVALID_CURVE                58
+# define         X509_V_ERR_SUITE_B_INVALID_SIGNATURE_ALGORITHM  59
+# define         X509_V_ERR_SUITE_B_LOS_NOT_ALLOWED              60
+# define         X509_V_ERR_SUITE_B_CANNOT_SIGN_P_384_WITH_P_256 61
+/* Host, email and IP check errors */
+# define         X509_V_ERR_HOSTNAME_MISMATCH                    62
+# define         X509_V_ERR_EMAIL_MISMATCH                       63
+# define         X509_V_ERR_IP_ADDRESS_MISMATCH                  64
+/* DANE TLSA errors */
+# define         X509_V_ERR_DANE_NO_MATCH                        65
+/* security level errors */
+# define         X509_V_ERR_EE_KEY_TOO_SMALL                     66
+# define         X509_V_ERR_CA_KEY_TOO_SMALL                     67
+# define         X509_V_ERR_CA_MD_TOO_WEAK                       68
+/* Caller error */
+# define         X509_V_ERR_INVALID_CALL                         69
+/* Issuer lookup error */
+# define         X509_V_ERR_STORE_LOOKUP                         70
+/* Certificate transparency */
+# define         X509_V_ERR_NO_VALID_SCTS                        71
+
+# define         X509_V_ERR_PROXY_SUBJECT_NAME_VIOLATION         72
+/* OCSP status errors */
+# define         X509_V_ERR_OCSP_VERIFY_NEEDED                   73  /* Need OCSP verification */
+# define         X509_V_ERR_OCSP_VERIFY_FAILED                   74  /* Couldn't verify cert through OCSP */
+# define         X509_V_ERR_OCSP_CERT_UNKNOWN                    75  /* Certificate wasn't recognized by the OCSP responder */
+
+/* Certificate verify flags */
+
+# if OPENSSL_API_COMPAT < 0x10100000L
+#  define X509_V_FLAG_CB_ISSUER_CHECK             0x0   /* Deprecated */
+# endif
+/* Use check time instead of current time */
+# define X509_V_FLAG_USE_CHECK_TIME              0x2
+/* Lookup CRLs */
+# define X509_V_FLAG_CRL_CHECK                   0x4
+/* Lookup CRLs for whole chain */
+# define X509_V_FLAG_CRL_CHECK_ALL               0x8
+/* Ignore unhandled critical extensions */
+# define X509_V_FLAG_IGNORE_CRITICAL             0x10
+/* Disable workarounds for broken certificates */
+# define X509_V_FLAG_X509_STRICT                 0x20
+/* Enable proxy certificate validation */
+# define X509_V_FLAG_ALLOW_PROXY_CERTS           0x40
+/* Enable policy checking */
+# define X509_V_FLAG_POLICY_CHECK                0x80
+/* Policy variable require-explicit-policy */
+# define X509_V_FLAG_EXPLICIT_POLICY             0x100
+/* Policy variable inhibit-any-policy */
+# define X509_V_FLAG_INHIBIT_ANY                 0x200
+/* Policy variable inhibit-policy-mapping */
+# define X509_V_FLAG_INHIBIT_MAP                 0x400
+/* Notify callback that policy is OK */
+# define X509_V_FLAG_NOTIFY_POLICY               0x800
+/* Extended CRL features such as indirect CRLs, alternate CRL signing keys */
+# define X509_V_FLAG_EXTENDED_CRL_SUPPORT        0x1000
+/* Delta CRL support */
+# define X509_V_FLAG_USE_DELTAS                  0x2000
+/* Check self-signed CA signature */
+# define X509_V_FLAG_CHECK_SS_SIGNATURE          0x4000
+/* Use trusted store first */
+# define X509_V_FLAG_TRUSTED_FIRST               0x8000
+/* Suite B 128 bit only mode: not normally used */
+# define X509_V_FLAG_SUITEB_128_LOS_ONLY         0x10000
+/* Suite B 192 bit only mode */
+# define X509_V_FLAG_SUITEB_192_LOS              0x20000
+/* Suite B 128 bit mode allowing 192 bit algorithms */
+# define X509_V_FLAG_SUITEB_128_LOS              0x30000
+/* Allow partial chains if at least one certificate is in trusted store */
+# define X509_V_FLAG_PARTIAL_CHAIN               0x80000
+/*
+ * If the initial chain is not trusted, do not attempt to build an alternative
+ * chain. Alternate chain checking was introduced in 1.1.0. Setting this flag
+ * will force the behaviour to match that of previous versions.
+ */
+# define X509_V_FLAG_NO_ALT_CHAINS               0x100000
+/* Do not check certificate/CRL validity against current time */
+# define X509_V_FLAG_NO_CHECK_TIME               0x200000
+
+# define X509_VP_FLAG_DEFAULT                    0x1
+# define X509_VP_FLAG_OVERWRITE                  0x2
+# define X509_VP_FLAG_RESET_FLAGS                0x4
+# define X509_VP_FLAG_LOCKED                     0x8
+# define X509_VP_FLAG_ONCE                       0x10
+
+/* Internal use: mask of policy related options */
+# define X509_V_FLAG_POLICY_MASK (X509_V_FLAG_POLICY_CHECK \
+                                | X509_V_FLAG_EXPLICIT_POLICY \
+                                | X509_V_FLAG_INHIBIT_ANY \
+                                | X509_V_FLAG_INHIBIT_MAP)
+
+int X509_OBJECT_idx_by_subject(STACK_OF(X509_OBJECT) *h, X509_LOOKUP_TYPE type,
+                               X509_NAME *name);
+X509_OBJECT *X509_OBJECT_retrieve_by_subject(STACK_OF(X509_OBJECT) *h,
+                                             X509_LOOKUP_TYPE type,
+                                             X509_NAME *name);
+X509_OBJECT *X509_OBJECT_retrieve_match(STACK_OF(X509_OBJECT) *h,
+                                        X509_OBJECT *x);
+int X509_OBJECT_up_ref_count(X509_OBJECT *a);
+X509_OBJECT *X509_OBJECT_new(void);
+void X509_OBJECT_free(X509_OBJECT *a);
+X509_LOOKUP_TYPE X509_OBJECT_get_type(const X509_OBJECT *a);
+X509 *X509_OBJECT_get0_X509(const X509_OBJECT *a);
+int X509_OBJECT_set1_X509(X509_OBJECT *a, X509 *obj);
+X509_CRL *X509_OBJECT_get0_X509_CRL(X509_OBJECT *a);
+int X509_OBJECT_set1_X509_CRL(X509_OBJECT *a, X509_CRL *obj);
+X509_STORE *X509_STORE_new(void);
+void X509_STORE_free(X509_STORE *v);
+int X509_STORE_lock(X509_STORE *ctx);
+int X509_STORE_unlock(X509_STORE *ctx);
+int X509_STORE_up_ref(X509_STORE *v);
+STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(X509_STORE *v);
+
+STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *st, X509_NAME *nm);
+STACK_OF(X509_CRL) *X509_STORE_CTX_get1_crls(X509_STORE_CTX *st, X509_NAME *nm);
+int X509_STORE_set_flags(X509_STORE *ctx, unsigned long flags);
+int X509_STORE_set_purpose(X509_STORE *ctx, int purpose);
+int X509_STORE_set_trust(X509_STORE *ctx, int trust);
+int X509_STORE_set1_param(X509_STORE *ctx, X509_VERIFY_PARAM *pm);
+X509_VERIFY_PARAM *X509_STORE_get0_param(X509_STORE *ctx);
+
+void X509_STORE_set_verify(X509_STORE *ctx, X509_STORE_CTX_verify_fn verify);
+#define X509_STORE_set_verify_func(ctx, func) \
+            X509_STORE_set_verify((ctx),(func))
+void X509_STORE_CTX_set_verify(X509_STORE_CTX *ctx,
+                               X509_STORE_CTX_verify_fn verify);
+X509_STORE_CTX_verify_fn X509_STORE_get_verify(X509_STORE *ctx);
+void X509_STORE_set_verify_cb(X509_STORE *ctx,
+                              X509_STORE_CTX_verify_cb verify_cb);
+# define X509_STORE_set_verify_cb_func(ctx,func) \
+            X509_STORE_set_verify_cb((ctx),(func))
+X509_STORE_CTX_verify_cb X509_STORE_get_verify_cb(X509_STORE *ctx);
+void X509_STORE_set_get_issuer(X509_STORE *ctx,
+                               X509_STORE_CTX_get_issuer_fn get_issuer);
+X509_STORE_CTX_get_issuer_fn X509_STORE_get_get_issuer(X509_STORE *ctx);
+void X509_STORE_set_check_issued(X509_STORE *ctx,
+                                 X509_STORE_CTX_check_issued_fn check_issued);
+X509_STORE_CTX_check_issued_fn X509_STORE_get_check_issued(X509_STORE *ctx);
+void X509_STORE_set_check_revocation(X509_STORE *ctx,
+                                     X509_STORE_CTX_check_revocation_fn check_revocation);
+X509_STORE_CTX_check_revocation_fn X509_STORE_get_check_revocation(X509_STORE *ctx);
+void X509_STORE_set_get_crl(X509_STORE *ctx,
+                            X509_STORE_CTX_get_crl_fn get_crl);
+X509_STORE_CTX_get_crl_fn X509_STORE_get_get_crl(X509_STORE *ctx);
+void X509_STORE_set_check_crl(X509_STORE *ctx,
+                              X509_STORE_CTX_check_crl_fn check_crl);
+X509_STORE_CTX_check_crl_fn X509_STORE_get_check_crl(X509_STORE *ctx);
+void X509_STORE_set_cert_crl(X509_STORE *ctx,
+                             X509_STORE_CTX_cert_crl_fn cert_crl);
+X509_STORE_CTX_cert_crl_fn X509_STORE_get_cert_crl(X509_STORE *ctx);
+void X509_STORE_set_check_policy(X509_STORE *ctx,
+                                 X509_STORE_CTX_check_policy_fn check_policy);
+X509_STORE_CTX_check_policy_fn X509_STORE_get_check_policy(X509_STORE *ctx);
+void X509_STORE_set_lookup_certs(X509_STORE *ctx,
+                                 X509_STORE_CTX_lookup_certs_fn lookup_certs);
+X509_STORE_CTX_lookup_certs_fn X509_STORE_get_lookup_certs(X509_STORE *ctx);
+void X509_STORE_set_lookup_crls(X509_STORE *ctx,
+                                X509_STORE_CTX_lookup_crls_fn lookup_crls);
+#define X509_STORE_set_lookup_crls_cb(ctx, func) \
+    X509_STORE_set_lookup_crls((ctx), (func))
+X509_STORE_CTX_lookup_crls_fn X509_STORE_get_lookup_crls(X509_STORE *ctx);
+void X509_STORE_set_cleanup(X509_STORE *ctx,
+                            X509_STORE_CTX_cleanup_fn cleanup);
+X509_STORE_CTX_cleanup_fn X509_STORE_get_cleanup(X509_STORE *ctx);
+
+#define X509_STORE_get_ex_new_index(l, p, newf, dupf, freef) \
+    CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_X509_STORE, l, p, newf, dupf, freef)
+int X509_STORE_set_ex_data(X509_STORE *ctx, int idx, void *data);
+void *X509_STORE_get_ex_data(X509_STORE *ctx, int idx);
+
+X509_STORE_CTX *X509_STORE_CTX_new(void);
+
+int X509_STORE_CTX_get1_issuer(X509 **issuer, X509_STORE_CTX *ctx, X509 *x);
+
+void X509_STORE_CTX_free(X509_STORE_CTX *ctx);
+int X509_STORE_CTX_init(X509_STORE_CTX *ctx, X509_STORE *store,
+                        X509 *x509, STACK_OF(X509) *chain);
+void X509_STORE_CTX_set0_trusted_stack(X509_STORE_CTX *ctx, STACK_OF(X509) *sk);
+void X509_STORE_CTX_cleanup(X509_STORE_CTX *ctx);
+
+X509_STORE *X509_STORE_CTX_get0_store(X509_STORE_CTX *ctx);
+X509 *X509_STORE_CTX_get0_cert(X509_STORE_CTX *ctx);
+STACK_OF(X509)* X509_STORE_CTX_get0_untrusted(X509_STORE_CTX *ctx);
+void X509_STORE_CTX_set0_untrusted(X509_STORE_CTX *ctx, STACK_OF(X509) *sk);
+void X509_STORE_CTX_set_verify_cb(X509_STORE_CTX *ctx,
+                                  X509_STORE_CTX_verify_cb verify);
+X509_STORE_CTX_verify_cb X509_STORE_CTX_get_verify_cb(X509_STORE_CTX *ctx);
+X509_STORE_CTX_verify_fn X509_STORE_CTX_get_verify(X509_STORE_CTX *ctx);
+X509_STORE_CTX_get_issuer_fn X509_STORE_CTX_get_get_issuer(X509_STORE_CTX *ctx);
+X509_STORE_CTX_check_issued_fn X509_STORE_CTX_get_check_issued(X509_STORE_CTX *ctx);
+X509_STORE_CTX_check_revocation_fn X509_STORE_CTX_get_check_revocation(X509_STORE_CTX *ctx);
+X509_STORE_CTX_get_crl_fn X509_STORE_CTX_get_get_crl(X509_STORE_CTX *ctx);
+X509_STORE_CTX_check_crl_fn X509_STORE_CTX_get_check_crl(X509_STORE_CTX *ctx);
+X509_STORE_CTX_cert_crl_fn X509_STORE_CTX_get_cert_crl(X509_STORE_CTX *ctx);
+X509_STORE_CTX_check_policy_fn X509_STORE_CTX_get_check_policy(X509_STORE_CTX *ctx);
+X509_STORE_CTX_lookup_certs_fn X509_STORE_CTX_get_lookup_certs(X509_STORE_CTX *ctx);
+X509_STORE_CTX_lookup_crls_fn X509_STORE_CTX_get_lookup_crls(X509_STORE_CTX *ctx);
+X509_STORE_CTX_cleanup_fn X509_STORE_CTX_get_cleanup(X509_STORE_CTX *ctx);
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+# define X509_STORE_CTX_get_chain X509_STORE_CTX_get0_chain
+# define X509_STORE_CTX_set_chain X509_STORE_CTX_set0_untrusted
+# define X509_STORE_CTX_trusted_stack X509_STORE_CTX_set0_trusted_stack
+# define X509_STORE_get_by_subject X509_STORE_CTX_get_by_subject
+# define X509_STORE_get1_certs X509_STORE_CTX_get1_certs
+# define X509_STORE_get1_crls X509_STORE_CTX_get1_crls
+/* the following macro is misspelled; use X509_STORE_get1_certs instead */
+# define X509_STORE_get1_cert X509_STORE_CTX_get1_certs
+/* the following macro is misspelled; use X509_STORE_get1_crls instead */
+# define X509_STORE_get1_crl X509_STORE_CTX_get1_crls
+#endif
+
+X509_LOOKUP *X509_STORE_add_lookup(X509_STORE *v, X509_LOOKUP_METHOD *m);
+X509_LOOKUP_METHOD *X509_LOOKUP_hash_dir(void);
+X509_LOOKUP_METHOD *X509_LOOKUP_file(void);
+
+typedef int (*X509_LOOKUP_ctrl_fn)(X509_LOOKUP *ctx, int cmd, const char *argc,
+                                   long argl, char **ret);
+typedef int (*X509_LOOKUP_get_by_subject_fn)(X509_LOOKUP *ctx,
+                                             X509_LOOKUP_TYPE type,
+                                             X509_NAME *name,
+                                             X509_OBJECT *ret);
+typedef int (*X509_LOOKUP_get_by_issuer_serial_fn)(X509_LOOKUP *ctx,
+                                                   X509_LOOKUP_TYPE type,
+                                                   X509_NAME *name,
+                                                   ASN1_INTEGER *serial,
+                                                   X509_OBJECT *ret);
+typedef int (*X509_LOOKUP_get_by_fingerprint_fn)(X509_LOOKUP *ctx,
+                                                 X509_LOOKUP_TYPE type,
+                                                 const unsigned char* bytes,
+                                                 int len,
+                                                 X509_OBJECT *ret);
+typedef int (*X509_LOOKUP_get_by_alias_fn)(X509_LOOKUP *ctx,
+                                           X509_LOOKUP_TYPE type,
+                                           const char *str,
+                                           int len,
+                                           X509_OBJECT *ret);
+
+X509_LOOKUP_METHOD *X509_LOOKUP_meth_new(const char *name);
+void X509_LOOKUP_meth_free(X509_LOOKUP_METHOD *method);
+
+int X509_LOOKUP_meth_set_new_item(X509_LOOKUP_METHOD *method,
+                                  int (*new_item) (X509_LOOKUP *ctx));
+int (*X509_LOOKUP_meth_get_new_item(const X509_LOOKUP_METHOD* method))
+    (X509_LOOKUP *ctx);
+
+int X509_LOOKUP_meth_set_free(X509_LOOKUP_METHOD *method,
+                              void (*free_fn) (X509_LOOKUP *ctx));
+void (*X509_LOOKUP_meth_get_free(const X509_LOOKUP_METHOD* method))
+    (X509_LOOKUP *ctx);
+
+int X509_LOOKUP_meth_set_init(X509_LOOKUP_METHOD *method,
+                              int (*init) (X509_LOOKUP *ctx));
+int (*X509_LOOKUP_meth_get_init(const X509_LOOKUP_METHOD* method))
+    (X509_LOOKUP *ctx);
+
+int X509_LOOKUP_meth_set_shutdown(X509_LOOKUP_METHOD *method,
+                                  int (*shutdown) (X509_LOOKUP *ctx));
+int (*X509_LOOKUP_meth_get_shutdown(const X509_LOOKUP_METHOD* method))
+    (X509_LOOKUP *ctx);
+
+int X509_LOOKUP_meth_set_ctrl(X509_LOOKUP_METHOD *method,
+                              X509_LOOKUP_ctrl_fn ctrl_fn);
+X509_LOOKUP_ctrl_fn X509_LOOKUP_meth_get_ctrl(const X509_LOOKUP_METHOD *method);
+
+int X509_LOOKUP_meth_set_get_by_subject(X509_LOOKUP_METHOD *method,
+                                        X509_LOOKUP_get_by_subject_fn fn);
+X509_LOOKUP_get_by_subject_fn X509_LOOKUP_meth_get_get_by_subject(
+    const X509_LOOKUP_METHOD *method);
+
+int X509_LOOKUP_meth_set_get_by_issuer_serial(X509_LOOKUP_METHOD *method,
+    X509_LOOKUP_get_by_issuer_serial_fn fn);
+X509_LOOKUP_get_by_issuer_serial_fn X509_LOOKUP_meth_get_get_by_issuer_serial(
+    const X509_LOOKUP_METHOD *method);
+
+int X509_LOOKUP_meth_set_get_by_fingerprint(X509_LOOKUP_METHOD *method,
+    X509_LOOKUP_get_by_fingerprint_fn fn);
+X509_LOOKUP_get_by_fingerprint_fn X509_LOOKUP_meth_get_get_by_fingerprint(
+    const X509_LOOKUP_METHOD *method);
+
+int X509_LOOKUP_meth_set_get_by_alias(X509_LOOKUP_METHOD *method,
+                                      X509_LOOKUP_get_by_alias_fn fn);
+X509_LOOKUP_get_by_alias_fn X509_LOOKUP_meth_get_get_by_alias(
+    const X509_LOOKUP_METHOD *method);
+
+
+int X509_STORE_add_cert(X509_STORE *ctx, X509 *x);
+int X509_STORE_add_crl(X509_STORE *ctx, X509_CRL *x);
+
+int X509_STORE_CTX_get_by_subject(X509_STORE_CTX *vs, X509_LOOKUP_TYPE type,
+                                  X509_NAME *name, X509_OBJECT *ret);
+X509_OBJECT *X509_STORE_CTX_get_obj_by_subject(X509_STORE_CTX *vs,
+                                               X509_LOOKUP_TYPE type,
+                                               X509_NAME *name);
+
+int X509_LOOKUP_ctrl(X509_LOOKUP *ctx, int cmd, const char *argc,
+                     long argl, char **ret);
+
+int X509_load_cert_file(X509_LOOKUP *ctx, const char *file, int type);
+int X509_load_crl_file(X509_LOOKUP *ctx, const char *file, int type);
+int X509_load_cert_crl_file(X509_LOOKUP *ctx, const char *file, int type);
+
+X509_LOOKUP *X509_LOOKUP_new(X509_LOOKUP_METHOD *method);
+void X509_LOOKUP_free(X509_LOOKUP *ctx);
+int X509_LOOKUP_init(X509_LOOKUP *ctx);
+int X509_LOOKUP_by_subject(X509_LOOKUP *ctx, X509_LOOKUP_TYPE type,
+                           X509_NAME *name, X509_OBJECT *ret);
+int X509_LOOKUP_by_issuer_serial(X509_LOOKUP *ctx, X509_LOOKUP_TYPE type,
+                                 X509_NAME *name, ASN1_INTEGER *serial,
+                                 X509_OBJECT *ret);
+int X509_LOOKUP_by_fingerprint(X509_LOOKUP *ctx, X509_LOOKUP_TYPE type,
+                               const unsigned char *bytes, int len,
+                               X509_OBJECT *ret);
+int X509_LOOKUP_by_alias(X509_LOOKUP *ctx, X509_LOOKUP_TYPE type,
+                         const char *str, int len, X509_OBJECT *ret);
+int X509_LOOKUP_set_method_data(X509_LOOKUP *ctx, void *data);
+void *X509_LOOKUP_get_method_data(const X509_LOOKUP *ctx);
+X509_STORE *X509_LOOKUP_get_store(const X509_LOOKUP *ctx);
+int X509_LOOKUP_shutdown(X509_LOOKUP *ctx);
+
+int X509_STORE_load_locations(X509_STORE *ctx,
+                              const char *file, const char *dir);
+int X509_STORE_set_default_paths(X509_STORE *ctx);
+
+#define X509_STORE_CTX_get_ex_new_index(l, p, newf, dupf, freef) \
+    CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_X509_STORE_CTX, l, p, newf, dupf, freef)
+int X509_STORE_CTX_set_ex_data(X509_STORE_CTX *ctx, int idx, void *data);
+void *X509_STORE_CTX_get_ex_data(X509_STORE_CTX *ctx, int idx);
+int X509_STORE_CTX_get_error(X509_STORE_CTX *ctx);
+void X509_STORE_CTX_set_error(X509_STORE_CTX *ctx, int s);
+int X509_STORE_CTX_get_error_depth(X509_STORE_CTX *ctx);
+void X509_STORE_CTX_set_error_depth(X509_STORE_CTX *ctx, int depth);
+X509 *X509_STORE_CTX_get_current_cert(X509_STORE_CTX *ctx);
+void X509_STORE_CTX_set_current_cert(X509_STORE_CTX *ctx, X509 *x);
+X509 *X509_STORE_CTX_get0_current_issuer(X509_STORE_CTX *ctx);
+X509_CRL *X509_STORE_CTX_get0_current_crl(X509_STORE_CTX *ctx);
+X509_STORE_CTX *X509_STORE_CTX_get0_parent_ctx(X509_STORE_CTX *ctx);
+STACK_OF(X509) *X509_STORE_CTX_get0_chain(X509_STORE_CTX *ctx);
+STACK_OF(X509) *X509_STORE_CTX_get1_chain(X509_STORE_CTX *ctx);
+void X509_STORE_CTX_set_cert(X509_STORE_CTX *c, X509 *x);
+void X509_STORE_CTX_set0_verified_chain(X509_STORE_CTX *c, STACK_OF(X509) *sk);
+void X509_STORE_CTX_set0_crls(X509_STORE_CTX *c, STACK_OF(X509_CRL) *sk);
+int X509_STORE_CTX_set_purpose(X509_STORE_CTX *ctx, int purpose);
+int X509_STORE_CTX_set_trust(X509_STORE_CTX *ctx, int trust);
+int X509_STORE_CTX_purpose_inherit(X509_STORE_CTX *ctx, int def_purpose,
+                                   int purpose, int trust);
+void X509_STORE_CTX_set_flags(X509_STORE_CTX *ctx, unsigned long flags);
+void X509_STORE_CTX_set_time(X509_STORE_CTX *ctx, unsigned long flags,
+                             time_t t);
+
+X509_POLICY_TREE *X509_STORE_CTX_get0_policy_tree(X509_STORE_CTX *ctx);
+int X509_STORE_CTX_get_explicit_policy(X509_STORE_CTX *ctx);
+int X509_STORE_CTX_get_num_untrusted(X509_STORE_CTX *ctx);
+
+X509_VERIFY_PARAM *X509_STORE_CTX_get0_param(X509_STORE_CTX *ctx);
+void X509_STORE_CTX_set0_param(X509_STORE_CTX *ctx, X509_VERIFY_PARAM *param);
+int X509_STORE_CTX_set_default(X509_STORE_CTX *ctx, const char *name);
+
+/*
+ * Bridge opacity barrier between libcrypt and libssl, also needed to support
+ * offline testing in test/danetest.c
+ */
+void X509_STORE_CTX_set0_dane(X509_STORE_CTX *ctx, SSL_DANE *dane);
+#define DANE_FLAG_NO_DANE_EE_NAMECHECKS (1L << 0)
+
+/* X509_VERIFY_PARAM functions */
+
+X509_VERIFY_PARAM *X509_VERIFY_PARAM_new(void);
+void X509_VERIFY_PARAM_free(X509_VERIFY_PARAM *param);
+int X509_VERIFY_PARAM_inherit(X509_VERIFY_PARAM *to,
+                              const X509_VERIFY_PARAM *from);
+int X509_VERIFY_PARAM_set1(X509_VERIFY_PARAM *to,
+                           const X509_VERIFY_PARAM *from);
+int X509_VERIFY_PARAM_set1_name(X509_VERIFY_PARAM *param, const char *name);
+int X509_VERIFY_PARAM_set_flags(X509_VERIFY_PARAM *param,
+                                unsigned long flags);
+int X509_VERIFY_PARAM_clear_flags(X509_VERIFY_PARAM *param,
+                                  unsigned long flags);
+unsigned long X509_VERIFY_PARAM_get_flags(X509_VERIFY_PARAM *param);
+int X509_VERIFY_PARAM_set_purpose(X509_VERIFY_PARAM *param, int purpose);
+int X509_VERIFY_PARAM_set_trust(X509_VERIFY_PARAM *param, int trust);
+void X509_VERIFY_PARAM_set_depth(X509_VERIFY_PARAM *param, int depth);
+void X509_VERIFY_PARAM_set_auth_level(X509_VERIFY_PARAM *param, int auth_level);
+time_t X509_VERIFY_PARAM_get_time(const X509_VERIFY_PARAM *param);
+void X509_VERIFY_PARAM_set_time(X509_VERIFY_PARAM *param, time_t t);
+int X509_VERIFY_PARAM_add0_policy(X509_VERIFY_PARAM *param,
+                                  ASN1_OBJECT *policy);
+int X509_VERIFY_PARAM_set1_policies(X509_VERIFY_PARAM *param,
+                                    STACK_OF(ASN1_OBJECT) *policies);
+
+int X509_VERIFY_PARAM_set_inh_flags(X509_VERIFY_PARAM *param,
+                                    uint32_t flags);
+uint32_t X509_VERIFY_PARAM_get_inh_flags(const X509_VERIFY_PARAM *param);
+
+int X509_VERIFY_PARAM_set1_host(X509_VERIFY_PARAM *param,
+                                const char *name, size_t namelen);
+int X509_VERIFY_PARAM_add1_host(X509_VERIFY_PARAM *param,
+                                const char *name, size_t namelen);
+void X509_VERIFY_PARAM_set_hostflags(X509_VERIFY_PARAM *param,
+                                     unsigned int flags);
+unsigned int X509_VERIFY_PARAM_get_hostflags(const X509_VERIFY_PARAM *param);
+char *X509_VERIFY_PARAM_get0_peername(X509_VERIFY_PARAM *);
+void X509_VERIFY_PARAM_move_peername(X509_VERIFY_PARAM *, X509_VERIFY_PARAM *);
+int X509_VERIFY_PARAM_set1_email(X509_VERIFY_PARAM *param,
+                                 const char *email, size_t emaillen);
+int X509_VERIFY_PARAM_set1_ip(X509_VERIFY_PARAM *param,
+                              const unsigned char *ip, size_t iplen);
+int X509_VERIFY_PARAM_set1_ip_asc(X509_VERIFY_PARAM *param,
+                                  const char *ipasc);
+
+int X509_VERIFY_PARAM_get_depth(const X509_VERIFY_PARAM *param);
+int X509_VERIFY_PARAM_get_auth_level(const X509_VERIFY_PARAM *param);
+const char *X509_VERIFY_PARAM_get0_name(const X509_VERIFY_PARAM *param);
+
+int X509_VERIFY_PARAM_add0_table(X509_VERIFY_PARAM *param);
+int X509_VERIFY_PARAM_get_count(void);
+const X509_VERIFY_PARAM *X509_VERIFY_PARAM_get0(int id);
+const X509_VERIFY_PARAM *X509_VERIFY_PARAM_lookup(const char *name);
+void X509_VERIFY_PARAM_table_cleanup(void);
+
+/* Non positive return values are errors */
+#define X509_PCY_TREE_FAILURE  -2 /* Failure to satisfy explicit policy */
+#define X509_PCY_TREE_INVALID  -1 /* Inconsistent or invalid extensions */
+#define X509_PCY_TREE_INTERNAL  0 /* Internal error, most likely malloc */
+
+/*
+ * Positive return values form a bit mask, all but the first are internal to
+ * the library and don't appear in results from X509_policy_check().
+ */
+#define X509_PCY_TREE_VALID     1 /* The policy tree is valid */
+#define X509_PCY_TREE_EMPTY     2 /* The policy tree is empty */
+#define X509_PCY_TREE_EXPLICIT  4 /* Explicit policy required */
+
+int X509_policy_check(X509_POLICY_TREE **ptree, int *pexplicit_policy,
+                      STACK_OF(X509) *certs,
+                      STACK_OF(ASN1_OBJECT) *policy_oids, unsigned int flags);
+
+void X509_policy_tree_free(X509_POLICY_TREE *tree);
+
+int X509_policy_tree_level_count(const X509_POLICY_TREE *tree);
+X509_POLICY_LEVEL *X509_policy_tree_get0_level(const X509_POLICY_TREE *tree,
+                                               int i);
+
+STACK_OF(X509_POLICY_NODE) *X509_policy_tree_get0_policies(const
+                                                           X509_POLICY_TREE
+                                                           *tree);
+
+STACK_OF(X509_POLICY_NODE) *X509_policy_tree_get0_user_policies(const
+                                                                X509_POLICY_TREE
+                                                                *tree);
+
+int X509_policy_level_node_count(X509_POLICY_LEVEL *level);
+
+X509_POLICY_NODE *X509_policy_level_get0_node(X509_POLICY_LEVEL *level,
+                                              int i);
+
+const ASN1_OBJECT *X509_policy_node_get0_policy(const X509_POLICY_NODE *node);
+
+STACK_OF(POLICYQUALINFO) *X509_policy_node_get0_qualifiers(const
+                                                           X509_POLICY_NODE
+                                                           *node);
+const X509_POLICY_NODE *X509_policy_node_get0_parent(const X509_POLICY_NODE
+                                                     *node);
+
+#ifdef  __cplusplus
+}
+#endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/x509err.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/x509err.h
new file mode 100644
index 000000000..b1d6a8709
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/x509err.h
@@ -0,0 +1,125 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_X509ERR_H
+# define HEADER_X509ERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_X509_strings(void);
+
+/*
+ * X509 function codes.
+ */
+# define X509_F_ADD_CERT_DIR                              100
+# define X509_F_BUILD_CHAIN                               106
+# define X509_F_BY_FILE_CTRL                              101
+# define X509_F_CHECK_NAME_CONSTRAINTS                    149
+# define X509_F_CHECK_POLICY                              145
+# define X509_F_DANE_I2D                                  107
+# define X509_F_DIR_CTRL                                  102
+# define X509_F_GET_CERT_BY_SUBJECT                       103
+# define X509_F_I2D_X509_AUX                              151
+# define X509_F_LOOKUP_CERTS_SK                           152
+# define X509_F_NETSCAPE_SPKI_B64_DECODE                  129
+# define X509_F_NETSCAPE_SPKI_B64_ENCODE                  130
+# define X509_F_NEW_DIR                                   153
+# define X509_F_X509AT_ADD1_ATTR                          135
+# define X509_F_X509V3_ADD_EXT                            104
+# define X509_F_X509_ATTRIBUTE_CREATE_BY_NID              136
+# define X509_F_X509_ATTRIBUTE_CREATE_BY_OBJ              137
+# define X509_F_X509_ATTRIBUTE_CREATE_BY_TXT              140
+# define X509_F_X509_ATTRIBUTE_GET0_DATA                  139
+# define X509_F_X509_ATTRIBUTE_SET1_DATA                  138
+# define X509_F_X509_CHECK_PRIVATE_KEY                    128
+# define X509_F_X509_CRL_DIFF                             105
+# define X509_F_X509_CRL_METHOD_NEW                       154
+# define X509_F_X509_CRL_PRINT_FP                         147
+# define X509_F_X509_EXTENSION_CREATE_BY_NID              108
+# define X509_F_X509_EXTENSION_CREATE_BY_OBJ              109
+# define X509_F_X509_GET_PUBKEY_PARAMETERS                110
+# define X509_F_X509_LOAD_CERT_CRL_FILE                   132
+# define X509_F_X509_LOAD_CERT_FILE                       111
+# define X509_F_X509_LOAD_CRL_FILE                        112
+# define X509_F_X509_LOOKUP_METH_NEW                      160
+# define X509_F_X509_LOOKUP_NEW                           155
+# define X509_F_X509_NAME_ADD_ENTRY                       113
+# define X509_F_X509_NAME_CANON                           156
+# define X509_F_X509_NAME_ENTRY_CREATE_BY_NID             114
+# define X509_F_X509_NAME_ENTRY_CREATE_BY_TXT             131
+# define X509_F_X509_NAME_ENTRY_SET_OBJECT                115
+# define X509_F_X509_NAME_ONELINE                         116
+# define X509_F_X509_NAME_PRINT                           117
+# define X509_F_X509_OBJECT_NEW                           150
+# define X509_F_X509_PRINT_EX_FP                          118
+# define X509_F_X509_PUBKEY_DECODE                        148
+# define X509_F_X509_PUBKEY_GET0                          119
+# define X509_F_X509_PUBKEY_SET                           120
+# define X509_F_X509_REQ_CHECK_PRIVATE_KEY                144
+# define X509_F_X509_REQ_PRINT_EX                         121
+# define X509_F_X509_REQ_PRINT_FP                         122
+# define X509_F_X509_REQ_TO_X509                          123
+# define X509_F_X509_STORE_ADD_CERT                       124
+# define X509_F_X509_STORE_ADD_CRL                        125
+# define X509_F_X509_STORE_ADD_LOOKUP                     157
+# define X509_F_X509_STORE_CTX_GET1_ISSUER                146
+# define X509_F_X509_STORE_CTX_INIT                       143
+# define X509_F_X509_STORE_CTX_NEW                        142
+# define X509_F_X509_STORE_CTX_PURPOSE_INHERIT            134
+# define X509_F_X509_STORE_NEW                            158
+# define X509_F_X509_TO_X509_REQ                          126
+# define X509_F_X509_TRUST_ADD                            133
+# define X509_F_X509_TRUST_SET                            141
+# define X509_F_X509_VERIFY_CERT                          127
+# define X509_F_X509_VERIFY_PARAM_NEW                     159
+
+/*
+ * X509 reason codes.
+ */
+# define X509_R_AKID_MISMATCH                             110
+# define X509_R_BAD_SELECTOR                              133
+# define X509_R_BAD_X509_FILETYPE                         100
+# define X509_R_BASE64_DECODE_ERROR                       118
+# define X509_R_CANT_CHECK_DH_KEY                         114
+# define X509_R_CERT_ALREADY_IN_HASH_TABLE                101
+# define X509_R_CRL_ALREADY_DELTA                         127
+# define X509_R_CRL_VERIFY_FAILURE                        131
+# define X509_R_IDP_MISMATCH                              128
+# define X509_R_INVALID_DIRECTORY                         113
+# define X509_R_INVALID_FIELD_NAME                        119
+# define X509_R_INVALID_TRUST                             123
+# define X509_R_ISSUER_MISMATCH                           129
+# define X509_R_KEY_TYPE_MISMATCH                         115
+# define X509_R_KEY_VALUES_MISMATCH                       116
+# define X509_R_LOADING_CERT_DIR                          103
+# define X509_R_LOADING_DEFAULTS                          104
+# define X509_R_METHOD_NOT_SUPPORTED                      124
+# define X509_R_NAME_TOO_LONG                             134
+# define X509_R_NEWER_CRL_NOT_NEWER                       132
+# define X509_R_NO_CERTIFICATE_FOUND                      135
+# define X509_R_NO_CERTIFICATE_OR_CRL_FOUND               136
+# define X509_R_NO_CERT_SET_FOR_US_TO_VERIFY              105
+# define X509_R_NO_CRL_FOUND                              137
+# define X509_R_NO_CRL_NUMBER                             130
+# define X509_R_PUBLIC_KEY_DECODE_ERROR                   125
+# define X509_R_PUBLIC_KEY_ENCODE_ERROR                   126
+# define X509_R_SHOULD_RETRY                              106
+# define X509_R_UNABLE_TO_FIND_PARAMETERS_IN_CHAIN        107
+# define X509_R_UNABLE_TO_GET_CERTS_PUBLIC_KEY            108
+# define X509_R_UNKNOWN_KEY_TYPE                          117
+# define X509_R_UNKNOWN_NID                               109
+# define X509_R_UNKNOWN_PURPOSE_ID                        121
+# define X509_R_UNKNOWN_TRUST_ID                          120
+# define X509_R_UNSUPPORTED_ALGORITHM                     111
+# define X509_R_WRONG_LOOKUP_TYPE                         112
+# define X509_R_WRONG_TYPE                                122
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/x509v3.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/x509v3.h
new file mode 100644
index 000000000..fe1791c68
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/x509v3.h
@@ -0,0 +1,935 @@
+/*
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_X509V3_H
+# define HEADER_X509V3_H
+
+# include <openssl/bio.h>
+# include <openssl/x509.h>
+# include <openssl/conf.h>
+# include <openssl/x509v3err.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/* Forward reference */
+struct v3_ext_method;
+struct v3_ext_ctx;
+
+/* Useful typedefs */
+
+typedef void *(*X509V3_EXT_NEW)(void);
+typedef void (*X509V3_EXT_FREE) (void *);
+typedef void *(*X509V3_EXT_D2I)(void *, const unsigned char **, long);
+typedef int (*X509V3_EXT_I2D) (void *, unsigned char **);
+typedef STACK_OF(CONF_VALUE) *
+    (*X509V3_EXT_I2V) (const struct v3_ext_method *method, void *ext,
+                       STACK_OF(CONF_VALUE) *extlist);
+typedef void *(*X509V3_EXT_V2I)(const struct v3_ext_method *method,
+                                struct v3_ext_ctx *ctx,
+                                STACK_OF(CONF_VALUE) *values);
+typedef char *(*X509V3_EXT_I2S)(const struct v3_ext_method *method,
+                                void *ext);
+typedef void *(*X509V3_EXT_S2I)(const struct v3_ext_method *method,
+                                struct v3_ext_ctx *ctx, const char *str);
+typedef int (*X509V3_EXT_I2R) (const struct v3_ext_method *method, void *ext,
+                               BIO *out, int indent);
+typedef void *(*X509V3_EXT_R2I)(const struct v3_ext_method *method,
+                                struct v3_ext_ctx *ctx, const char *str);
+
+/* V3 extension structure */
+
+struct v3_ext_method {
+    int ext_nid;
+    int ext_flags;
+/* If this is set the following four fields are ignored */
+    ASN1_ITEM_EXP *it;
+/* Old style ASN1 calls */
+    X509V3_EXT_NEW ext_new;
+    X509V3_EXT_FREE ext_free;
+    X509V3_EXT_D2I d2i;
+    X509V3_EXT_I2D i2d;
+/* The following pair is used for string extensions */
+    X509V3_EXT_I2S i2s;
+    X509V3_EXT_S2I s2i;
+/* The following pair is used for multi-valued extensions */
+    X509V3_EXT_I2V i2v;
+    X509V3_EXT_V2I v2i;
+/* The following are used for raw extensions */
+    X509V3_EXT_I2R i2r;
+    X509V3_EXT_R2I r2i;
+    void *usr_data;             /* Any extension specific data */
+};
+
+typedef struct X509V3_CONF_METHOD_st {
+    char *(*get_string) (void *db, const char *section, const char *value);
+    STACK_OF(CONF_VALUE) *(*get_section) (void *db, const char *section);
+    void (*free_string) (void *db, char *string);
+    void (*free_section) (void *db, STACK_OF(CONF_VALUE) *section);
+} X509V3_CONF_METHOD;
+
+/* Context specific info */
+struct v3_ext_ctx {
+# define CTX_TEST 0x1
+# define X509V3_CTX_REPLACE 0x2
+    int flags;
+    X509 *issuer_cert;
+    X509 *subject_cert;
+    X509_REQ *subject_req;
+    X509_CRL *crl;
+    X509V3_CONF_METHOD *db_meth;
+    void *db;
+/* Maybe more here */
+};
+
+typedef struct v3_ext_method X509V3_EXT_METHOD;
+
+DEFINE_STACK_OF(X509V3_EXT_METHOD)
+
+/* ext_flags values */
+# define X509V3_EXT_DYNAMIC      0x1
+# define X509V3_EXT_CTX_DEP      0x2
+# define X509V3_EXT_MULTILINE    0x4
+
+typedef BIT_STRING_BITNAME ENUMERATED_NAMES;
+
+typedef struct BASIC_CONSTRAINTS_st {
+    int ca;
+    ASN1_INTEGER *pathlen;
+} BASIC_CONSTRAINTS;
+
+typedef struct PKEY_USAGE_PERIOD_st {
+    ASN1_GENERALIZEDTIME *notBefore;
+    ASN1_GENERALIZEDTIME *notAfter;
+} PKEY_USAGE_PERIOD;
+
+typedef struct otherName_st {
+    ASN1_OBJECT *type_id;
+    ASN1_TYPE *value;
+} OTHERNAME;
+
+typedef struct EDIPartyName_st {
+    ASN1_STRING *nameAssigner;
+    ASN1_STRING *partyName;
+} EDIPARTYNAME;
+
+typedef struct GENERAL_NAME_st {
+# define GEN_OTHERNAME   0
+# define GEN_EMAIL       1
+# define GEN_DNS         2
+# define GEN_X400        3
+# define GEN_DIRNAME     4
+# define GEN_EDIPARTY    5
+# define GEN_URI         6
+# define GEN_IPADD       7
+# define GEN_RID         8
+    int type;
+    union {
+        char *ptr;
+        OTHERNAME *otherName;   /* otherName */
+        ASN1_IA5STRING *rfc822Name;
+        ASN1_IA5STRING *dNSName;
+        ASN1_TYPE *x400Address;
+        X509_NAME *directoryName;
+        EDIPARTYNAME *ediPartyName;
+        ASN1_IA5STRING *uniformResourceIdentifier;
+        ASN1_OCTET_STRING *iPAddress;
+        ASN1_OBJECT *registeredID;
+        /* Old names */
+        ASN1_OCTET_STRING *ip;  /* iPAddress */
+        X509_NAME *dirn;        /* dirn */
+        ASN1_IA5STRING *ia5;    /* rfc822Name, dNSName,
+                                 * uniformResourceIdentifier */
+        ASN1_OBJECT *rid;       /* registeredID */
+        ASN1_TYPE *other;       /* x400Address */
+    } d;
+} GENERAL_NAME;
+
+typedef struct ACCESS_DESCRIPTION_st {
+    ASN1_OBJECT *method;
+    GENERAL_NAME *location;
+} ACCESS_DESCRIPTION;
+
+typedef STACK_OF(ACCESS_DESCRIPTION) AUTHORITY_INFO_ACCESS;
+
+typedef STACK_OF(ASN1_OBJECT) EXTENDED_KEY_USAGE;
+
+typedef STACK_OF(ASN1_INTEGER) TLS_FEATURE;
+
+DEFINE_STACK_OF(GENERAL_NAME)
+typedef STACK_OF(GENERAL_NAME) GENERAL_NAMES;
+DEFINE_STACK_OF(GENERAL_NAMES)
+
+DEFINE_STACK_OF(ACCESS_DESCRIPTION)
+
+typedef struct DIST_POINT_NAME_st {
+    int type;
+    union {
+        GENERAL_NAMES *fullname;
+        STACK_OF(X509_NAME_ENTRY) *relativename;
+    } name;
+/* If relativename then this contains the full distribution point name */
+    X509_NAME *dpname;
+} DIST_POINT_NAME;
+/* All existing reasons */
+# define CRLDP_ALL_REASONS       0x807f
+
+# define CRL_REASON_NONE                         -1
+# define CRL_REASON_UNSPECIFIED                  0
+# define CRL_REASON_KEY_COMPROMISE               1
+# define CRL_REASON_CA_COMPROMISE                2
+# define CRL_REASON_AFFILIATION_CHANGED          3
+# define CRL_REASON_SUPERSEDED                   4
+# define CRL_REASON_CESSATION_OF_OPERATION       5
+# define CRL_REASON_CERTIFICATE_HOLD             6
+# define CRL_REASON_REMOVE_FROM_CRL              8
+# define CRL_REASON_PRIVILEGE_WITHDRAWN          9
+# define CRL_REASON_AA_COMPROMISE                10
+
+struct DIST_POINT_st {
+    DIST_POINT_NAME *distpoint;
+    ASN1_BIT_STRING *reasons;
+    GENERAL_NAMES *CRLissuer;
+    int dp_reasons;
+};
+
+typedef STACK_OF(DIST_POINT) CRL_DIST_POINTS;
+
+DEFINE_STACK_OF(DIST_POINT)
+
+struct AUTHORITY_KEYID_st {
+    ASN1_OCTET_STRING *keyid;
+    GENERAL_NAMES *issuer;
+    ASN1_INTEGER *serial;
+};
+
+/* Strong extranet structures */
+
+typedef struct SXNET_ID_st {
+    ASN1_INTEGER *zone;
+    ASN1_OCTET_STRING *user;
+} SXNETID;
+
+DEFINE_STACK_OF(SXNETID)
+
+typedef struct SXNET_st {
+    ASN1_INTEGER *version;
+    STACK_OF(SXNETID) *ids;
+} SXNET;
+
+typedef struct NOTICEREF_st {
+    ASN1_STRING *organization;
+    STACK_OF(ASN1_INTEGER) *noticenos;
+} NOTICEREF;
+
+typedef struct USERNOTICE_st {
+    NOTICEREF *noticeref;
+    ASN1_STRING *exptext;
+} USERNOTICE;
+
+typedef struct POLICYQUALINFO_st {
+    ASN1_OBJECT *pqualid;
+    union {
+        ASN1_IA5STRING *cpsuri;
+        USERNOTICE *usernotice;
+        ASN1_TYPE *other;
+    } d;
+} POLICYQUALINFO;
+
+DEFINE_STACK_OF(POLICYQUALINFO)
+
+typedef struct POLICYINFO_st {
+    ASN1_OBJECT *policyid;
+    STACK_OF(POLICYQUALINFO) *qualifiers;
+} POLICYINFO;
+
+typedef STACK_OF(POLICYINFO) CERTIFICATEPOLICIES;
+
+DEFINE_STACK_OF(POLICYINFO)
+
+typedef struct POLICY_MAPPING_st {
+    ASN1_OBJECT *issuerDomainPolicy;
+    ASN1_OBJECT *subjectDomainPolicy;
+} POLICY_MAPPING;
+
+DEFINE_STACK_OF(POLICY_MAPPING)
+
+typedef STACK_OF(POLICY_MAPPING) POLICY_MAPPINGS;
+
+typedef struct GENERAL_SUBTREE_st {
+    GENERAL_NAME *base;
+    ASN1_INTEGER *minimum;
+    ASN1_INTEGER *maximum;
+} GENERAL_SUBTREE;
+
+DEFINE_STACK_OF(GENERAL_SUBTREE)
+
+struct NAME_CONSTRAINTS_st {
+    STACK_OF(GENERAL_SUBTREE) *permittedSubtrees;
+    STACK_OF(GENERAL_SUBTREE) *excludedSubtrees;
+};
+
+typedef struct POLICY_CONSTRAINTS_st {
+    ASN1_INTEGER *requireExplicitPolicy;
+    ASN1_INTEGER *inhibitPolicyMapping;
+} POLICY_CONSTRAINTS;
+
+/* Proxy certificate structures, see RFC 3820 */
+typedef struct PROXY_POLICY_st {
+    ASN1_OBJECT *policyLanguage;
+    ASN1_OCTET_STRING *policy;
+} PROXY_POLICY;
+
+typedef struct PROXY_CERT_INFO_EXTENSION_st {
+    ASN1_INTEGER *pcPathLengthConstraint;
+    PROXY_POLICY *proxyPolicy;
+} PROXY_CERT_INFO_EXTENSION;
+
+DECLARE_ASN1_FUNCTIONS(PROXY_POLICY)
+DECLARE_ASN1_FUNCTIONS(PROXY_CERT_INFO_EXTENSION)
+
+struct ISSUING_DIST_POINT_st {
+    DIST_POINT_NAME *distpoint;
+    int onlyuser;
+    int onlyCA;
+    ASN1_BIT_STRING *onlysomereasons;
+    int indirectCRL;
+    int onlyattr;
+};
+
+/* Values in idp_flags field */
+/* IDP present */
+# define IDP_PRESENT     0x1
+/* IDP values inconsistent */
+# define IDP_INVALID     0x2
+/* onlyuser true */
+# define IDP_ONLYUSER    0x4
+/* onlyCA true */
+# define IDP_ONLYCA      0x8
+/* onlyattr true */
+# define IDP_ONLYATTR    0x10
+/* indirectCRL true */
+# define IDP_INDIRECT    0x20
+/* onlysomereasons present */
+# define IDP_REASONS     0x40
+
+# define X509V3_conf_err(val) ERR_add_error_data(6, \
+                        "section:", (val)->section, \
+                        ",name:", (val)->name, ",value:", (val)->value)
+
+# define X509V3_set_ctx_test(ctx) \
+                        X509V3_set_ctx(ctx, NULL, NULL, NULL, NULL, CTX_TEST)
+# define X509V3_set_ctx_nodb(ctx) (ctx)->db = NULL;
+
+# define EXT_BITSTRING(nid, table) { nid, 0, ASN1_ITEM_ref(ASN1_BIT_STRING), \
+                        0,0,0,0, \
+                        0,0, \
+                        (X509V3_EXT_I2V)i2v_ASN1_BIT_STRING, \
+                        (X509V3_EXT_V2I)v2i_ASN1_BIT_STRING, \
+                        NULL, NULL, \
+                        table}
+
+# define EXT_IA5STRING(nid) { nid, 0, ASN1_ITEM_ref(ASN1_IA5STRING), \
+                        0,0,0,0, \
+                        (X509V3_EXT_I2S)i2s_ASN1_IA5STRING, \
+                        (X509V3_EXT_S2I)s2i_ASN1_IA5STRING, \
+                        0,0,0,0, \
+                        NULL}
+
+# define EXT_END { -1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}
+
+/* X509_PURPOSE stuff */
+
+# define EXFLAG_BCONS            0x1
+# define EXFLAG_KUSAGE           0x2
+# define EXFLAG_XKUSAGE          0x4
+# define EXFLAG_NSCERT           0x8
+
+# define EXFLAG_CA               0x10
+/* Really self issued not necessarily self signed */
+# define EXFLAG_SI               0x20
+# define EXFLAG_V1               0x40
+# define EXFLAG_INVALID          0x80
+/* EXFLAG_SET is set to indicate that some values have been precomputed */
+# define EXFLAG_SET              0x100
+# define EXFLAG_CRITICAL         0x200
+# define EXFLAG_PROXY            0x400
+
+# define EXFLAG_INVALID_POLICY   0x800
+# define EXFLAG_FRESHEST         0x1000
+/* Self signed */
+# define EXFLAG_SS               0x2000
+
+# define KU_DIGITAL_SIGNATURE    0x0080
+# define KU_NON_REPUDIATION      0x0040
+# define KU_KEY_ENCIPHERMENT     0x0020
+# define KU_DATA_ENCIPHERMENT    0x0010
+# define KU_KEY_AGREEMENT        0x0008
+# define KU_KEY_CERT_SIGN        0x0004
+# define KU_CRL_SIGN             0x0002
+# define KU_ENCIPHER_ONLY        0x0001
+# define KU_DECIPHER_ONLY        0x8000
+
+# define NS_SSL_CLIENT           0x80
+# define NS_SSL_SERVER           0x40
+# define NS_SMIME                0x20
+# define NS_OBJSIGN              0x10
+# define NS_SSL_CA               0x04
+# define NS_SMIME_CA             0x02
+# define NS_OBJSIGN_CA           0x01
+# define NS_ANY_CA               (NS_SSL_CA|NS_SMIME_CA|NS_OBJSIGN_CA)
+
+# define XKU_SSL_SERVER          0x1
+# define XKU_SSL_CLIENT          0x2
+# define XKU_SMIME               0x4
+# define XKU_CODE_SIGN           0x8
+# define XKU_SGC                 0x10
+# define XKU_OCSP_SIGN           0x20
+# define XKU_TIMESTAMP           0x40
+# define XKU_DVCS                0x80
+# define XKU_ANYEKU              0x100
+
+# define X509_PURPOSE_DYNAMIC    0x1
+# define X509_PURPOSE_DYNAMIC_NAME       0x2
+
+typedef struct x509_purpose_st {
+    int purpose;
+    int trust;                  /* Default trust ID */
+    int flags;
+    int (*check_purpose) (const struct x509_purpose_st *, const X509 *, int);
+    char *name;
+    char *sname;
+    void *usr_data;
+} X509_PURPOSE;
+
+# define X509_PURPOSE_SSL_CLIENT         1
+# define X509_PURPOSE_SSL_SERVER         2
+# define X509_PURPOSE_NS_SSL_SERVER      3
+# define X509_PURPOSE_SMIME_SIGN         4
+# define X509_PURPOSE_SMIME_ENCRYPT      5
+# define X509_PURPOSE_CRL_SIGN           6
+# define X509_PURPOSE_ANY                7
+# define X509_PURPOSE_OCSP_HELPER        8
+# define X509_PURPOSE_TIMESTAMP_SIGN     9
+
+# define X509_PURPOSE_MIN                1
+# define X509_PURPOSE_MAX                9
+
+/* Flags for X509V3_EXT_print() */
+
+# define X509V3_EXT_UNKNOWN_MASK         (0xfL << 16)
+/* Return error for unknown extensions */
+# define X509V3_EXT_DEFAULT              0
+/* Print error for unknown extensions */
+# define X509V3_EXT_ERROR_UNKNOWN        (1L << 16)
+/* ASN1 parse unknown extensions */
+# define X509V3_EXT_PARSE_UNKNOWN        (2L << 16)
+/* BIO_dump unknown extensions */
+# define X509V3_EXT_DUMP_UNKNOWN         (3L << 16)
+
+/* Flags for X509V3_add1_i2d */
+
+# define X509V3_ADD_OP_MASK              0xfL
+# define X509V3_ADD_DEFAULT              0L
+# define X509V3_ADD_APPEND               1L
+# define X509V3_ADD_REPLACE              2L
+# define X509V3_ADD_REPLACE_EXISTING     3L
+# define X509V3_ADD_KEEP_EXISTING        4L
+# define X509V3_ADD_DELETE               5L
+# define X509V3_ADD_SILENT               0x10
+
+DEFINE_STACK_OF(X509_PURPOSE)
+
+DECLARE_ASN1_FUNCTIONS(BASIC_CONSTRAINTS)
+
+DECLARE_ASN1_FUNCTIONS(SXNET)
+DECLARE_ASN1_FUNCTIONS(SXNETID)
+
+int SXNET_add_id_asc(SXNET **psx, const char *zone, const char *user, int userlen);
+int SXNET_add_id_ulong(SXNET **psx, unsigned long lzone, const char *user,
+                       int userlen);
+int SXNET_add_id_INTEGER(SXNET **psx, ASN1_INTEGER *izone, const char *user,
+                         int userlen);
+
+ASN1_OCTET_STRING *SXNET_get_id_asc(SXNET *sx, const char *zone);
+ASN1_OCTET_STRING *SXNET_get_id_ulong(SXNET *sx, unsigned long lzone);
+ASN1_OCTET_STRING *SXNET_get_id_INTEGER(SXNET *sx, ASN1_INTEGER *zone);
+
+DECLARE_ASN1_FUNCTIONS(AUTHORITY_KEYID)
+
+DECLARE_ASN1_FUNCTIONS(PKEY_USAGE_PERIOD)
+
+DECLARE_ASN1_FUNCTIONS(GENERAL_NAME)
+GENERAL_NAME *GENERAL_NAME_dup(GENERAL_NAME *a);
+int GENERAL_NAME_cmp(GENERAL_NAME *a, GENERAL_NAME *b);
+
+ASN1_BIT_STRING *v2i_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
+                                     X509V3_CTX *ctx,
+                                     STACK_OF(CONF_VALUE) *nval);
+STACK_OF(CONF_VALUE) *i2v_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
+                                          ASN1_BIT_STRING *bits,
+                                          STACK_OF(CONF_VALUE) *extlist);
+char *i2s_ASN1_IA5STRING(X509V3_EXT_METHOD *method, ASN1_IA5STRING *ia5);
+ASN1_IA5STRING *s2i_ASN1_IA5STRING(X509V3_EXT_METHOD *method,
+                                   X509V3_CTX *ctx, const char *str);
+
+STACK_OF(CONF_VALUE) *i2v_GENERAL_NAME(X509V3_EXT_METHOD *method,
+                                       GENERAL_NAME *gen,
+                                       STACK_OF(CONF_VALUE) *ret);
+int GENERAL_NAME_print(BIO *out, GENERAL_NAME *gen);
+
+DECLARE_ASN1_FUNCTIONS(GENERAL_NAMES)
+
+STACK_OF(CONF_VALUE) *i2v_GENERAL_NAMES(X509V3_EXT_METHOD *method,
+                                        GENERAL_NAMES *gen,
+                                        STACK_OF(CONF_VALUE) *extlist);
+GENERAL_NAMES *v2i_GENERAL_NAMES(const X509V3_EXT_METHOD *method,
+                                 X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval);
+
+DECLARE_ASN1_FUNCTIONS(OTHERNAME)
+DECLARE_ASN1_FUNCTIONS(EDIPARTYNAME)
+int OTHERNAME_cmp(OTHERNAME *a, OTHERNAME *b);
+void GENERAL_NAME_set0_value(GENERAL_NAME *a, int type, void *value);
+void *GENERAL_NAME_get0_value(GENERAL_NAME *a, int *ptype);
+int GENERAL_NAME_set0_othername(GENERAL_NAME *gen,
+                                ASN1_OBJECT *oid, ASN1_TYPE *value);
+int GENERAL_NAME_get0_otherName(GENERAL_NAME *gen,
+                                ASN1_OBJECT **poid, ASN1_TYPE **pvalue);
+
+char *i2s_ASN1_OCTET_STRING(X509V3_EXT_METHOD *method,
+                            const ASN1_OCTET_STRING *ia5);
+ASN1_OCTET_STRING *s2i_ASN1_OCTET_STRING(X509V3_EXT_METHOD *method,
+                                         X509V3_CTX *ctx, const char *str);
+
+DECLARE_ASN1_FUNCTIONS(EXTENDED_KEY_USAGE)
+int i2a_ACCESS_DESCRIPTION(BIO *bp, const ACCESS_DESCRIPTION *a);
+
+DECLARE_ASN1_ALLOC_FUNCTIONS(TLS_FEATURE)
+
+DECLARE_ASN1_FUNCTIONS(CERTIFICATEPOLICIES)
+DECLARE_ASN1_FUNCTIONS(POLICYINFO)
+DECLARE_ASN1_FUNCTIONS(POLICYQUALINFO)
+DECLARE_ASN1_FUNCTIONS(USERNOTICE)
+DECLARE_ASN1_FUNCTIONS(NOTICEREF)
+
+DECLARE_ASN1_FUNCTIONS(CRL_DIST_POINTS)
+DECLARE_ASN1_FUNCTIONS(DIST_POINT)
+DECLARE_ASN1_FUNCTIONS(DIST_POINT_NAME)
+DECLARE_ASN1_FUNCTIONS(ISSUING_DIST_POINT)
+
+int DIST_POINT_set_dpname(DIST_POINT_NAME *dpn, X509_NAME *iname);
+
+int NAME_CONSTRAINTS_check(X509 *x, NAME_CONSTRAINTS *nc);
+int NAME_CONSTRAINTS_check_CN(X509 *x, NAME_CONSTRAINTS *nc);
+
+DECLARE_ASN1_FUNCTIONS(ACCESS_DESCRIPTION)
+DECLARE_ASN1_FUNCTIONS(AUTHORITY_INFO_ACCESS)
+
+DECLARE_ASN1_ITEM(POLICY_MAPPING)
+DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_MAPPING)
+DECLARE_ASN1_ITEM(POLICY_MAPPINGS)
+
+DECLARE_ASN1_ITEM(GENERAL_SUBTREE)
+DECLARE_ASN1_ALLOC_FUNCTIONS(GENERAL_SUBTREE)
+
+DECLARE_ASN1_ITEM(NAME_CONSTRAINTS)
+DECLARE_ASN1_ALLOC_FUNCTIONS(NAME_CONSTRAINTS)
+
+DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_CONSTRAINTS)
+DECLARE_ASN1_ITEM(POLICY_CONSTRAINTS)
+
+GENERAL_NAME *a2i_GENERAL_NAME(GENERAL_NAME *out,
+                               const X509V3_EXT_METHOD *method,
+                               X509V3_CTX *ctx, int gen_type,
+                               const char *value, int is_nc);
+
+# ifdef HEADER_CONF_H
+GENERAL_NAME *v2i_GENERAL_NAME(const X509V3_EXT_METHOD *method,
+                               X509V3_CTX *ctx, CONF_VALUE *cnf);
+GENERAL_NAME *v2i_GENERAL_NAME_ex(GENERAL_NAME *out,
+                                  const X509V3_EXT_METHOD *method,
+                                  X509V3_CTX *ctx, CONF_VALUE *cnf,
+                                  int is_nc);
+void X509V3_conf_free(CONF_VALUE *val);
+
+X509_EXTENSION *X509V3_EXT_nconf_nid(CONF *conf, X509V3_CTX *ctx, int ext_nid,
+                                     const char *value);
+X509_EXTENSION *X509V3_EXT_nconf(CONF *conf, X509V3_CTX *ctx, const char *name,
+                                 const char *value);
+int X509V3_EXT_add_nconf_sk(CONF *conf, X509V3_CTX *ctx, const char *section,
+                            STACK_OF(X509_EXTENSION) **sk);
+int X509V3_EXT_add_nconf(CONF *conf, X509V3_CTX *ctx, const char *section,
+                         X509 *cert);
+int X509V3_EXT_REQ_add_nconf(CONF *conf, X509V3_CTX *ctx, const char *section,
+                             X509_REQ *req);
+int X509V3_EXT_CRL_add_nconf(CONF *conf, X509V3_CTX *ctx, const char *section,
+                             X509_CRL *crl);
+
+X509_EXTENSION *X509V3_EXT_conf_nid(LHASH_OF(CONF_VALUE) *conf,
+                                    X509V3_CTX *ctx, int ext_nid,
+                                    const char *value);
+X509_EXTENSION *X509V3_EXT_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
+                                const char *name, const char *value);
+int X509V3_EXT_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
+                        const char *section, X509 *cert);
+int X509V3_EXT_REQ_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
+                            const char *section, X509_REQ *req);
+int X509V3_EXT_CRL_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
+                            const char *section, X509_CRL *crl);
+
+int X509V3_add_value_bool_nf(const char *name, int asn1_bool,
+                             STACK_OF(CONF_VALUE) **extlist);
+int X509V3_get_value_bool(const CONF_VALUE *value, int *asn1_bool);
+int X509V3_get_value_int(const CONF_VALUE *value, ASN1_INTEGER **aint);
+void X509V3_set_nconf(X509V3_CTX *ctx, CONF *conf);
+void X509V3_set_conf_lhash(X509V3_CTX *ctx, LHASH_OF(CONF_VALUE) *lhash);
+# endif
+
+char *X509V3_get_string(X509V3_CTX *ctx, const char *name, const char *section);
+STACK_OF(CONF_VALUE) *X509V3_get_section(X509V3_CTX *ctx, const char *section);
+void X509V3_string_free(X509V3_CTX *ctx, char *str);
+void X509V3_section_free(X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *section);
+void X509V3_set_ctx(X509V3_CTX *ctx, X509 *issuer, X509 *subject,
+                    X509_REQ *req, X509_CRL *crl, int flags);
+
+int X509V3_add_value(const char *name, const char *value,
+                     STACK_OF(CONF_VALUE) **extlist);
+int X509V3_add_value_uchar(const char *name, const unsigned char *value,
+                           STACK_OF(CONF_VALUE) **extlist);
+int X509V3_add_value_bool(const char *name, int asn1_bool,
+                          STACK_OF(CONF_VALUE) **extlist);
+int X509V3_add_value_int(const char *name, const ASN1_INTEGER *aint,
+                         STACK_OF(CONF_VALUE) **extlist);
+char *i2s_ASN1_INTEGER(X509V3_EXT_METHOD *meth, const ASN1_INTEGER *aint);
+ASN1_INTEGER *s2i_ASN1_INTEGER(X509V3_EXT_METHOD *meth, const char *value);
+char *i2s_ASN1_ENUMERATED(X509V3_EXT_METHOD *meth, const ASN1_ENUMERATED *aint);
+char *i2s_ASN1_ENUMERATED_TABLE(X509V3_EXT_METHOD *meth,
+                                const ASN1_ENUMERATED *aint);
+int X509V3_EXT_add(X509V3_EXT_METHOD *ext);
+int X509V3_EXT_add_list(X509V3_EXT_METHOD *extlist);
+int X509V3_EXT_add_alias(int nid_to, int nid_from);
+void X509V3_EXT_cleanup(void);
+
+const X509V3_EXT_METHOD *X509V3_EXT_get(X509_EXTENSION *ext);
+const X509V3_EXT_METHOD *X509V3_EXT_get_nid(int nid);
+int X509V3_add_standard_extensions(void);
+STACK_OF(CONF_VALUE) *X509V3_parse_list(const char *line);
+void *X509V3_EXT_d2i(X509_EXTENSION *ext);
+void *X509V3_get_d2i(const STACK_OF(X509_EXTENSION) *x, int nid, int *crit,
+                     int *idx);
+
+X509_EXTENSION *X509V3_EXT_i2d(int ext_nid, int crit, void *ext_struc);
+int X509V3_add1_i2d(STACK_OF(X509_EXTENSION) **x, int nid, void *value,
+                    int crit, unsigned long flags);
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+/* The new declarations are in crypto.h, but the old ones were here. */
+# define hex_to_string OPENSSL_buf2hexstr
+# define string_to_hex OPENSSL_hexstr2buf
+#endif
+
+void X509V3_EXT_val_prn(BIO *out, STACK_OF(CONF_VALUE) *val, int indent,
+                        int ml);
+int X509V3_EXT_print(BIO *out, X509_EXTENSION *ext, unsigned long flag,
+                     int indent);
+#ifndef OPENSSL_NO_STDIO
+int X509V3_EXT_print_fp(FILE *out, X509_EXTENSION *ext, int flag, int indent);
+#endif
+int X509V3_extensions_print(BIO *out, const char *title,
+                            const STACK_OF(X509_EXTENSION) *exts,
+                            unsigned long flag, int indent);
+
+int X509_check_ca(X509 *x);
+int X509_check_purpose(X509 *x, int id, int ca);
+int X509_supported_extension(X509_EXTENSION *ex);
+int X509_PURPOSE_set(int *p, int purpose);
+int X509_check_issued(X509 *issuer, X509 *subject);
+int X509_check_akid(X509 *issuer, AUTHORITY_KEYID *akid);
+void X509_set_proxy_flag(X509 *x);
+void X509_set_proxy_pathlen(X509 *x, long l);
+long X509_get_proxy_pathlen(X509 *x);
+
+uint32_t X509_get_extension_flags(X509 *x);
+uint32_t X509_get_key_usage(X509 *x);
+uint32_t X509_get_extended_key_usage(X509 *x);
+const ASN1_OCTET_STRING *X509_get0_subject_key_id(X509 *x);
+const ASN1_OCTET_STRING *X509_get0_authority_key_id(X509 *x);
+
+int X509_PURPOSE_get_count(void);
+X509_PURPOSE *X509_PURPOSE_get0(int idx);
+int X509_PURPOSE_get_by_sname(const char *sname);
+int X509_PURPOSE_get_by_id(int id);
+int X509_PURPOSE_add(int id, int trust, int flags,
+                     int (*ck) (const X509_PURPOSE *, const X509 *, int),
+                     const char *name, const char *sname, void *arg);
+char *X509_PURPOSE_get0_name(const X509_PURPOSE *xp);
+char *X509_PURPOSE_get0_sname(const X509_PURPOSE *xp);
+int X509_PURPOSE_get_trust(const X509_PURPOSE *xp);
+void X509_PURPOSE_cleanup(void);
+int X509_PURPOSE_get_id(const X509_PURPOSE *);
+
+STACK_OF(OPENSSL_STRING) *X509_get1_email(X509 *x);
+STACK_OF(OPENSSL_STRING) *X509_REQ_get1_email(X509_REQ *x);
+void X509_email_free(STACK_OF(OPENSSL_STRING) *sk);
+STACK_OF(OPENSSL_STRING) *X509_get1_ocsp(X509 *x);
+/* Flags for X509_check_* functions */
+
+/*
+ * Always check subject name for host match even if subject alt names present
+ */
+# define X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT    0x1
+/* Disable wildcard matching for dnsName fields and common name. */
+# define X509_CHECK_FLAG_NO_WILDCARDS    0x2
+/* Wildcards must not match a partial label. */
+# define X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS 0x4
+/* Allow (non-partial) wildcards to match multiple labels. */
+# define X509_CHECK_FLAG_MULTI_LABEL_WILDCARDS 0x8
+/* Constraint verifier subdomain patterns to match a single labels. */
+# define X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS 0x10
+/* Never check the subject CN */
+# define X509_CHECK_FLAG_NEVER_CHECK_SUBJECT    0x20
+/*
+ * Match reference identifiers starting with "." to any sub-domain.
+ * This is a non-public flag, turned on implicitly when the subject
+ * reference identity is a DNS name.
+ */
+# define _X509_CHECK_FLAG_DOT_SUBDOMAINS 0x8000
+
+int X509_check_host(X509 *x, const char *chk, size_t chklen,
+                    unsigned int flags, char **peername);
+int X509_check_email(X509 *x, const char *chk, size_t chklen,
+                     unsigned int flags);
+int X509_check_ip(X509 *x, const unsigned char *chk, size_t chklen,
+                  unsigned int flags);
+int X509_check_ip_asc(X509 *x, const char *ipasc, unsigned int flags);
+
+ASN1_OCTET_STRING *a2i_IPADDRESS(const char *ipasc);
+ASN1_OCTET_STRING *a2i_IPADDRESS_NC(const char *ipasc);
+int X509V3_NAME_from_section(X509_NAME *nm, STACK_OF(CONF_VALUE) *dn_sk,
+                             unsigned long chtype);
+
+void X509_POLICY_NODE_print(BIO *out, X509_POLICY_NODE *node, int indent);
+DEFINE_STACK_OF(X509_POLICY_NODE)
+
+#ifndef OPENSSL_NO_RFC3779
+typedef struct ASRange_st {
+    ASN1_INTEGER *min, *max;
+} ASRange;
+
+# define ASIdOrRange_id          0
+# define ASIdOrRange_range       1
+
+typedef struct ASIdOrRange_st {
+    int type;
+    union {
+        ASN1_INTEGER *id;
+        ASRange *range;
+    } u;
+} ASIdOrRange;
+
+typedef STACK_OF(ASIdOrRange) ASIdOrRanges;
+DEFINE_STACK_OF(ASIdOrRange)
+
+# define ASIdentifierChoice_inherit              0
+# define ASIdentifierChoice_asIdsOrRanges        1
+
+typedef struct ASIdentifierChoice_st {
+    int type;
+    union {
+        ASN1_NULL *inherit;
+        ASIdOrRanges *asIdsOrRanges;
+    } u;
+} ASIdentifierChoice;
+
+typedef struct ASIdentifiers_st {
+    ASIdentifierChoice *asnum, *rdi;
+} ASIdentifiers;
+
+DECLARE_ASN1_FUNCTIONS(ASRange)
+DECLARE_ASN1_FUNCTIONS(ASIdOrRange)
+DECLARE_ASN1_FUNCTIONS(ASIdentifierChoice)
+DECLARE_ASN1_FUNCTIONS(ASIdentifiers)
+
+typedef struct IPAddressRange_st {
+    ASN1_BIT_STRING *min, *max;
+} IPAddressRange;
+
+# define IPAddressOrRange_addressPrefix  0
+# define IPAddressOrRange_addressRange   1
+
+typedef struct IPAddressOrRange_st {
+    int type;
+    union {
+        ASN1_BIT_STRING *addressPrefix;
+        IPAddressRange *addressRange;
+    } u;
+} IPAddressOrRange;
+
+typedef STACK_OF(IPAddressOrRange) IPAddressOrRanges;
+DEFINE_STACK_OF(IPAddressOrRange)
+
+# define IPAddressChoice_inherit                 0
+# define IPAddressChoice_addressesOrRanges       1
+
+typedef struct IPAddressChoice_st {
+    int type;
+    union {
+        ASN1_NULL *inherit;
+        IPAddressOrRanges *addressesOrRanges;
+    } u;
+} IPAddressChoice;
+
+typedef struct IPAddressFamily_st {
+    ASN1_OCTET_STRING *addressFamily;
+    IPAddressChoice *ipAddressChoice;
+} IPAddressFamily;
+
+typedef STACK_OF(IPAddressFamily) IPAddrBlocks;
+DEFINE_STACK_OF(IPAddressFamily)
+
+DECLARE_ASN1_FUNCTIONS(IPAddressRange)
+DECLARE_ASN1_FUNCTIONS(IPAddressOrRange)
+DECLARE_ASN1_FUNCTIONS(IPAddressChoice)
+DECLARE_ASN1_FUNCTIONS(IPAddressFamily)
+
+/*
+ * API tag for elements of the ASIdentifer SEQUENCE.
+ */
+# define V3_ASID_ASNUM   0
+# define V3_ASID_RDI     1
+
+/*
+ * AFI values, assigned by IANA.  It'd be nice to make the AFI
+ * handling code totally generic, but there are too many little things
+ * that would need to be defined for other address families for it to
+ * be worth the trouble.
+ */
+# define IANA_AFI_IPV4   1
+# define IANA_AFI_IPV6   2
+
+/*
+ * Utilities to construct and extract values from RFC3779 extensions,
+ * since some of the encodings (particularly for IP address prefixes
+ * and ranges) are a bit tedious to work with directly.
+ */
+int X509v3_asid_add_inherit(ASIdentifiers *asid, int which);
+int X509v3_asid_add_id_or_range(ASIdentifiers *asid, int which,
+                                ASN1_INTEGER *min, ASN1_INTEGER *max);
+int X509v3_addr_add_inherit(IPAddrBlocks *addr,
+                            const unsigned afi, const unsigned *safi);
+int X509v3_addr_add_prefix(IPAddrBlocks *addr,
+                           const unsigned afi, const unsigned *safi,
+                           unsigned char *a, const int prefixlen);
+int X509v3_addr_add_range(IPAddrBlocks *addr,
+                          const unsigned afi, const unsigned *safi,
+                          unsigned char *min, unsigned char *max);
+unsigned X509v3_addr_get_afi(const IPAddressFamily *f);
+int X509v3_addr_get_range(IPAddressOrRange *aor, const unsigned afi,
+                          unsigned char *min, unsigned char *max,
+                          const int length);
+
+/*
+ * Canonical forms.
+ */
+int X509v3_asid_is_canonical(ASIdentifiers *asid);
+int X509v3_addr_is_canonical(IPAddrBlocks *addr);
+int X509v3_asid_canonize(ASIdentifiers *asid);
+int X509v3_addr_canonize(IPAddrBlocks *addr);
+
+/*
+ * Tests for inheritance and containment.
+ */
+int X509v3_asid_inherits(ASIdentifiers *asid);
+int X509v3_addr_inherits(IPAddrBlocks *addr);
+int X509v3_asid_subset(ASIdentifiers *a, ASIdentifiers *b);
+int X509v3_addr_subset(IPAddrBlocks *a, IPAddrBlocks *b);
+
+/*
+ * Check whether RFC 3779 extensions nest properly in chains.
+ */
+int X509v3_asid_validate_path(X509_STORE_CTX *);
+int X509v3_addr_validate_path(X509_STORE_CTX *);
+int X509v3_asid_validate_resource_set(STACK_OF(X509) *chain,
+                                      ASIdentifiers *ext,
+                                      int allow_inheritance);
+int X509v3_addr_validate_resource_set(STACK_OF(X509) *chain,
+                                      IPAddrBlocks *ext, int allow_inheritance);
+
+#endif                         /* OPENSSL_NO_RFC3779 */
+
+DEFINE_STACK_OF(ASN1_STRING)
+
+/*
+ * Admission Syntax
+ */
+typedef struct NamingAuthority_st NAMING_AUTHORITY;
+typedef struct ProfessionInfo_st PROFESSION_INFO;
+typedef struct Admissions_st ADMISSIONS;
+typedef struct AdmissionSyntax_st ADMISSION_SYNTAX;
+DECLARE_ASN1_FUNCTIONS(NAMING_AUTHORITY)
+DECLARE_ASN1_FUNCTIONS(PROFESSION_INFO)
+DECLARE_ASN1_FUNCTIONS(ADMISSIONS)
+DECLARE_ASN1_FUNCTIONS(ADMISSION_SYNTAX)
+DEFINE_STACK_OF(ADMISSIONS)
+DEFINE_STACK_OF(PROFESSION_INFO)
+typedef STACK_OF(PROFESSION_INFO) PROFESSION_INFOS;
+
+const ASN1_OBJECT *NAMING_AUTHORITY_get0_authorityId(
+    const NAMING_AUTHORITY *n);
+const ASN1_IA5STRING *NAMING_AUTHORITY_get0_authorityURL(
+    const NAMING_AUTHORITY *n);
+const ASN1_STRING *NAMING_AUTHORITY_get0_authorityText(
+    const NAMING_AUTHORITY *n);
+void NAMING_AUTHORITY_set0_authorityId(NAMING_AUTHORITY *n,
+    ASN1_OBJECT* namingAuthorityId);
+void NAMING_AUTHORITY_set0_authorityURL(NAMING_AUTHORITY *n,
+    ASN1_IA5STRING* namingAuthorityUrl);
+void NAMING_AUTHORITY_set0_authorityText(NAMING_AUTHORITY *n,
+    ASN1_STRING* namingAuthorityText);
+
+const GENERAL_NAME *ADMISSION_SYNTAX_get0_admissionAuthority(
+    const ADMISSION_SYNTAX *as);
+void ADMISSION_SYNTAX_set0_admissionAuthority(
+    ADMISSION_SYNTAX *as, GENERAL_NAME *aa);
+const STACK_OF(ADMISSIONS) *ADMISSION_SYNTAX_get0_contentsOfAdmissions(
+    const ADMISSION_SYNTAX *as);
+void ADMISSION_SYNTAX_set0_contentsOfAdmissions(
+    ADMISSION_SYNTAX *as, STACK_OF(ADMISSIONS) *a);
+const GENERAL_NAME *ADMISSIONS_get0_admissionAuthority(const ADMISSIONS *a);
+void ADMISSIONS_set0_admissionAuthority(ADMISSIONS *a, GENERAL_NAME *aa);
+const NAMING_AUTHORITY *ADMISSIONS_get0_namingAuthority(const ADMISSIONS *a);
+void ADMISSIONS_set0_namingAuthority(ADMISSIONS *a, NAMING_AUTHORITY *na);
+const PROFESSION_INFOS *ADMISSIONS_get0_professionInfos(const ADMISSIONS *a);
+void ADMISSIONS_set0_professionInfos(ADMISSIONS *a, PROFESSION_INFOS *pi);
+const ASN1_OCTET_STRING *PROFESSION_INFO_get0_addProfessionInfo(
+    const PROFESSION_INFO *pi);
+void PROFESSION_INFO_set0_addProfessionInfo(
+    PROFESSION_INFO *pi, ASN1_OCTET_STRING *aos);
+const NAMING_AUTHORITY *PROFESSION_INFO_get0_namingAuthority(
+    const PROFESSION_INFO *pi);
+void PROFESSION_INFO_set0_namingAuthority(
+    PROFESSION_INFO *pi, NAMING_AUTHORITY *na);
+const STACK_OF(ASN1_STRING) *PROFESSION_INFO_get0_professionItems(
+    const PROFESSION_INFO *pi);
+void PROFESSION_INFO_set0_professionItems(
+    PROFESSION_INFO *pi, STACK_OF(ASN1_STRING) *as);
+const STACK_OF(ASN1_OBJECT) *PROFESSION_INFO_get0_professionOIDs(
+    const PROFESSION_INFO *pi);
+void PROFESSION_INFO_set0_professionOIDs(
+    PROFESSION_INFO *pi, STACK_OF(ASN1_OBJECT) *po);
+const ASN1_PRINTABLESTRING *PROFESSION_INFO_get0_registrationNumber(
+    const PROFESSION_INFO *pi);
+void PROFESSION_INFO_set0_registrationNumber(
+    PROFESSION_INFO *pi, ASN1_PRINTABLESTRING *rn);
+
+# ifdef  __cplusplus
+}
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/include/openssl/x509v3err.h b/trunk/3rdparty/openssl-1.1-fit/include/openssl/x509v3err.h
new file mode 100644
index 000000000..6b3df12b6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/include/openssl/x509v3err.h
@@ -0,0 +1,158 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_X509V3ERR_H
+# define HEADER_X509V3ERR_H
+
+# ifdef  __cplusplus
+extern "C"
+# endif
+int ERR_load_X509V3_strings(void);
+
+/*
+ * X509V3 function codes.
+ */
+# define X509V3_F_A2I_GENERAL_NAME                        164
+# define X509V3_F_ADDR_VALIDATE_PATH_INTERNAL             166
+# define X509V3_F_ASIDENTIFIERCHOICE_CANONIZE             161
+# define X509V3_F_ASIDENTIFIERCHOICE_IS_CANONICAL         162
+# define X509V3_F_BIGNUM_TO_STRING                        167
+# define X509V3_F_COPY_EMAIL                              122
+# define X509V3_F_COPY_ISSUER                             123
+# define X509V3_F_DO_DIRNAME                              144
+# define X509V3_F_DO_EXT_I2D                              135
+# define X509V3_F_DO_EXT_NCONF                            151
+# define X509V3_F_GNAMES_FROM_SECTNAME                    156
+# define X509V3_F_I2S_ASN1_ENUMERATED                     121
+# define X509V3_F_I2S_ASN1_IA5STRING                      149
+# define X509V3_F_I2S_ASN1_INTEGER                        120
+# define X509V3_F_I2V_AUTHORITY_INFO_ACCESS               138
+# define X509V3_F_LEVEL_ADD_NODE                          168
+# define X509V3_F_NOTICE_SECTION                          132
+# define X509V3_F_NREF_NOS                                133
+# define X509V3_F_POLICY_CACHE_CREATE                     169
+# define X509V3_F_POLICY_CACHE_NEW                        170
+# define X509V3_F_POLICY_DATA_NEW                         171
+# define X509V3_F_POLICY_SECTION                          131
+# define X509V3_F_PROCESS_PCI_VALUE                       150
+# define X509V3_F_R2I_CERTPOL                             130
+# define X509V3_F_R2I_PCI                                 155
+# define X509V3_F_S2I_ASN1_IA5STRING                      100
+# define X509V3_F_S2I_ASN1_INTEGER                        108
+# define X509V3_F_S2I_ASN1_OCTET_STRING                   112
+# define X509V3_F_S2I_SKEY_ID                             115
+# define X509V3_F_SET_DIST_POINT_NAME                     158
+# define X509V3_F_SXNET_ADD_ID_ASC                        125
+# define X509V3_F_SXNET_ADD_ID_INTEGER                    126
+# define X509V3_F_SXNET_ADD_ID_ULONG                      127
+# define X509V3_F_SXNET_GET_ID_ASC                        128
+# define X509V3_F_SXNET_GET_ID_ULONG                      129
+# define X509V3_F_TREE_INIT                               172
+# define X509V3_F_V2I_ASIDENTIFIERS                       163
+# define X509V3_F_V2I_ASN1_BIT_STRING                     101
+# define X509V3_F_V2I_AUTHORITY_INFO_ACCESS               139
+# define X509V3_F_V2I_AUTHORITY_KEYID                     119
+# define X509V3_F_V2I_BASIC_CONSTRAINTS                   102
+# define X509V3_F_V2I_CRLD                                134
+# define X509V3_F_V2I_EXTENDED_KEY_USAGE                  103
+# define X509V3_F_V2I_GENERAL_NAMES                       118
+# define X509V3_F_V2I_GENERAL_NAME_EX                     117
+# define X509V3_F_V2I_IDP                                 157
+# define X509V3_F_V2I_IPADDRBLOCKS                        159
+# define X509V3_F_V2I_ISSUER_ALT                          153
+# define X509V3_F_V2I_NAME_CONSTRAINTS                    147
+# define X509V3_F_V2I_POLICY_CONSTRAINTS                  146
+# define X509V3_F_V2I_POLICY_MAPPINGS                     145
+# define X509V3_F_V2I_SUBJECT_ALT                         154
+# define X509V3_F_V2I_TLS_FEATURE                         165
+# define X509V3_F_V3_GENERIC_EXTENSION                    116
+# define X509V3_F_X509V3_ADD1_I2D                         140
+# define X509V3_F_X509V3_ADD_VALUE                        105
+# define X509V3_F_X509V3_EXT_ADD                          104
+# define X509V3_F_X509V3_EXT_ADD_ALIAS                    106
+# define X509V3_F_X509V3_EXT_I2D                          136
+# define X509V3_F_X509V3_EXT_NCONF                        152
+# define X509V3_F_X509V3_GET_SECTION                      142
+# define X509V3_F_X509V3_GET_STRING                       143
+# define X509V3_F_X509V3_GET_VALUE_BOOL                   110
+# define X509V3_F_X509V3_PARSE_LIST                       109
+# define X509V3_F_X509_PURPOSE_ADD                        137
+# define X509V3_F_X509_PURPOSE_SET                        141
+
+/*
+ * X509V3 reason codes.
+ */
+# define X509V3_R_BAD_IP_ADDRESS                          118
+# define X509V3_R_BAD_OBJECT                              119
+# define X509V3_R_BN_DEC2BN_ERROR                         100
+# define X509V3_R_BN_TO_ASN1_INTEGER_ERROR                101
+# define X509V3_R_DIRNAME_ERROR                           149
+# define X509V3_R_DISTPOINT_ALREADY_SET                   160
+# define X509V3_R_DUPLICATE_ZONE_ID                       133
+# define X509V3_R_ERROR_CONVERTING_ZONE                   131
+# define X509V3_R_ERROR_CREATING_EXTENSION                144
+# define X509V3_R_ERROR_IN_EXTENSION                      128
+# define X509V3_R_EXPECTED_A_SECTION_NAME                 137
+# define X509V3_R_EXTENSION_EXISTS                        145
+# define X509V3_R_EXTENSION_NAME_ERROR                    115
+# define X509V3_R_EXTENSION_NOT_FOUND                     102
+# define X509V3_R_EXTENSION_SETTING_NOT_SUPPORTED         103
+# define X509V3_R_EXTENSION_VALUE_ERROR                   116
+# define X509V3_R_ILLEGAL_EMPTY_EXTENSION                 151
+# define X509V3_R_INCORRECT_POLICY_SYNTAX_TAG             152
+# define X509V3_R_INVALID_ASNUMBER                        162
+# define X509V3_R_INVALID_ASRANGE                         163
+# define X509V3_R_INVALID_BOOLEAN_STRING                  104
+# define X509V3_R_INVALID_EXTENSION_STRING                105
+# define X509V3_R_INVALID_INHERITANCE                     165
+# define X509V3_R_INVALID_IPADDRESS                       166
+# define X509V3_R_INVALID_MULTIPLE_RDNS                   161
+# define X509V3_R_INVALID_NAME                            106
+# define X509V3_R_INVALID_NULL_ARGUMENT                   107
+# define X509V3_R_INVALID_NULL_NAME                       108
+# define X509V3_R_INVALID_NULL_VALUE                      109
+# define X509V3_R_INVALID_NUMBER                          140
+# define X509V3_R_INVALID_NUMBERS                         141
+# define X509V3_R_INVALID_OBJECT_IDENTIFIER               110
+# define X509V3_R_INVALID_OPTION                          138
+# define X509V3_R_INVALID_POLICY_IDENTIFIER               134
+# define X509V3_R_INVALID_PROXY_POLICY_SETTING            153
+# define X509V3_R_INVALID_PURPOSE                         146
+# define X509V3_R_INVALID_SAFI                            164
+# define X509V3_R_INVALID_SECTION                         135
+# define X509V3_R_INVALID_SYNTAX                          143
+# define X509V3_R_ISSUER_DECODE_ERROR                     126
+# define X509V3_R_MISSING_VALUE                           124
+# define X509V3_R_NEED_ORGANIZATION_AND_NUMBERS           142
+# define X509V3_R_NO_CONFIG_DATABASE                      136
+# define X509V3_R_NO_ISSUER_CERTIFICATE                   121
+# define X509V3_R_NO_ISSUER_DETAILS                       127
+# define X509V3_R_NO_POLICY_IDENTIFIER                    139
+# define X509V3_R_NO_PROXY_CERT_POLICY_LANGUAGE_DEFINED   154
+# define X509V3_R_NO_PUBLIC_KEY                           114
+# define X509V3_R_NO_SUBJECT_DETAILS                      125
+# define X509V3_R_OPERATION_NOT_DEFINED                   148
+# define X509V3_R_OTHERNAME_ERROR                         147
+# define X509V3_R_POLICY_LANGUAGE_ALREADY_DEFINED         155
+# define X509V3_R_POLICY_PATH_LENGTH                      156
+# define X509V3_R_POLICY_PATH_LENGTH_ALREADY_DEFINED      157
+# define X509V3_R_POLICY_WHEN_PROXY_LANGUAGE_REQUIRES_NO_POLICY 159
+# define X509V3_R_SECTION_NOT_FOUND                       150
+# define X509V3_R_UNABLE_TO_GET_ISSUER_DETAILS            122
+# define X509V3_R_UNABLE_TO_GET_ISSUER_KEYID              123
+# define X509V3_R_UNKNOWN_BIT_STRING_ARGUMENT             111
+# define X509V3_R_UNKNOWN_EXTENSION                       129
+# define X509V3_R_UNKNOWN_EXTENSION_NAME                  130
+# define X509V3_R_UNKNOWN_OPTION                          120
+# define X509V3_R_UNSUPPORTED_OPTION                      117
+# define X509V3_R_UNSUPPORTED_TYPE                        167
+# define X509V3_R_USER_TOO_LONG                           132
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/ms/applink.c b/trunk/3rdparty/openssl-1.1-fit/ms/applink.c
new file mode 100644
index 000000000..238dbff35
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ms/applink.c
@@ -0,0 +1,138 @@
+/*
+ * Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#define APPLINK_STDIN   1
+#define APPLINK_STDOUT  2
+#define APPLINK_STDERR  3
+#define APPLINK_FPRINTF 4
+#define APPLINK_FGETS   5
+#define APPLINK_FREAD   6
+#define APPLINK_FWRITE  7
+#define APPLINK_FSETMOD 8
+#define APPLINK_FEOF    9
+#define APPLINK_FCLOSE  10      /* should not be used */
+
+#define APPLINK_FOPEN   11      /* solely for completeness */
+#define APPLINK_FSEEK   12
+#define APPLINK_FTELL   13
+#define APPLINK_FFLUSH  14
+#define APPLINK_FERROR  15
+#define APPLINK_CLEARERR 16
+#define APPLINK_FILENO  17      /* to be used with below */
+
+#define APPLINK_OPEN    18      /* formally can't be used, as flags can vary */
+#define APPLINK_READ    19
+#define APPLINK_WRITE   20
+#define APPLINK_LSEEK   21
+#define APPLINK_CLOSE   22
+#define APPLINK_MAX     22      /* always same as last macro */
+
+#ifndef APPMACROS_ONLY
+# include <stdio.h>
+# include <io.h>
+# include <fcntl.h>
+
+static void *app_stdin(void)
+{
+    return stdin;
+}
+
+static void *app_stdout(void)
+{
+    return stdout;
+}
+
+static void *app_stderr(void)
+{
+    return stderr;
+}
+
+static int app_feof(FILE *fp)
+{
+    return feof(fp);
+}
+
+static int app_ferror(FILE *fp)
+{
+    return ferror(fp);
+}
+
+static void app_clearerr(FILE *fp)
+{
+    clearerr(fp);
+}
+
+static int app_fileno(FILE *fp)
+{
+    return _fileno(fp);
+}
+
+static int app_fsetmod(FILE *fp, char mod)
+{
+    return _setmode(_fileno(fp), mod == 'b' ? _O_BINARY : _O_TEXT);
+}
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+__declspec(dllexport)
+void **
+# if defined(__BORLANDC__)
+/*
+ * __stdcall appears to be the only way to get the name
+ * decoration right with Borland C. Otherwise it works
+ * purely incidentally, as we pass no parameters.
+ */
+__stdcall
+# else
+__cdecl
+# endif
+OPENSSL_Applink(void)
+{
+    static int once = 1;
+    static void *OPENSSL_ApplinkTable[APPLINK_MAX + 1] =
+        { (void *)APPLINK_MAX };
+
+    if (once) {
+        OPENSSL_ApplinkTable[APPLINK_STDIN] = app_stdin;
+        OPENSSL_ApplinkTable[APPLINK_STDOUT] = app_stdout;
+        OPENSSL_ApplinkTable[APPLINK_STDERR] = app_stderr;
+        OPENSSL_ApplinkTable[APPLINK_FPRINTF] = fprintf;
+        OPENSSL_ApplinkTable[APPLINK_FGETS] = fgets;
+        OPENSSL_ApplinkTable[APPLINK_FREAD] = fread;
+        OPENSSL_ApplinkTable[APPLINK_FWRITE] = fwrite;
+        OPENSSL_ApplinkTable[APPLINK_FSETMOD] = app_fsetmod;
+        OPENSSL_ApplinkTable[APPLINK_FEOF] = app_feof;
+        OPENSSL_ApplinkTable[APPLINK_FCLOSE] = fclose;
+
+        OPENSSL_ApplinkTable[APPLINK_FOPEN] = fopen;
+        OPENSSL_ApplinkTable[APPLINK_FSEEK] = fseek;
+        OPENSSL_ApplinkTable[APPLINK_FTELL] = ftell;
+        OPENSSL_ApplinkTable[APPLINK_FFLUSH] = fflush;
+        OPENSSL_ApplinkTable[APPLINK_FERROR] = app_ferror;
+        OPENSSL_ApplinkTable[APPLINK_CLEARERR] = app_clearerr;
+        OPENSSL_ApplinkTable[APPLINK_FILENO] = app_fileno;
+
+        OPENSSL_ApplinkTable[APPLINK_OPEN] = _open;
+        OPENSSL_ApplinkTable[APPLINK_READ] = _read;
+        OPENSSL_ApplinkTable[APPLINK_WRITE] = _write;
+        OPENSSL_ApplinkTable[APPLINK_LSEEK] = _lseek;
+        OPENSSL_ApplinkTable[APPLINK_CLOSE] = _close;
+
+        once = 0;
+    }
+
+    return OPENSSL_ApplinkTable;
+}
+
+#ifdef __cplusplus
+}
+#endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/ms/cmp.pl b/trunk/3rdparty/openssl-1.1-fit/ms/cmp.pl
new file mode 100755
index 000000000..265ce56ed
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ms/cmp.pl
@@ -0,0 +1,53 @@
+#! /usr/bin/env perl
+# Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+($#ARGV == 1) || die "usage: cmp.pl <file1> <file2>\n";
+
+open(IN0,"<$ARGV[0]") || die "unable to open $ARGV[0]\n";
+open(IN1,"<$ARGV[1]") || die "unable to open $ARGV[1]\n";
+binmode IN0;
+binmode IN1;
+
+$tot=0;
+$ret=1;
+for (;;)
+{
+    $n1=sysread(IN0,$b1,4096);
+    $n2=sysread(IN1,$b2,4096);
+
+    last if ($n1 != $n2);
+    last if ($b1 ne $b2);
+    last if ($n1 < 0);
+    if ($n1 == 0)
+    {
+        $ret=0;
+        last;
+    }
+    $tot+=$n1;
+}
+
+close(IN0);
+close(IN1);
+if ($ret)
+{
+    printf STDERR "$ARGV[0] and $ARGV[1] are different\n";
+    @a1=unpack("C*",$b1);
+    @a2=unpack("C*",$b2);
+    for ($i=0; $i<=$#a1; $i++)
+    {
+        if ($a1[$i] ne $a2[$i])
+        {
+            printf "%02X %02X <<\n",$a1[$i],$a2[$i];
+            last;
+        }
+    }
+    $nm=$tot+$n1;
+    $tot+=$i+1;
+    printf STDERR "diff at char $tot of $nm\n";
+}
+exit($ret);
diff --git a/trunk/3rdparty/openssl-1.1-fit/ms/uplink-common.pl b/trunk/3rdparty/openssl-1.1-fit/ms/uplink-common.pl
new file mode 100755
index 000000000..e2ab59456
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ms/uplink-common.pl
@@ -0,0 +1,28 @@
+#! /usr/bin/env perl
+# Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# pull APPLINK_MAX value from applink.c...
+$applink_c=$0;
+$applink_c=~s|[^/\\]+$||g;
+$applink_c.="applink.c";
+open(INPUT,$applink_c) || die "can't open $applink_c: $!";
+@max=grep {/APPLINK_MAX\s+(\d+)/} <INPUT>;
+close(INPUT);
+($#max==0) or die "can't find APPLINK_MAX in $applink_c";
+
+$max[0]=~/APPLINK_MAX\s+(\d+)/;
+$N=$1;	# number of entries in OPENSSL_UplinkTable not including
+	# OPENSSL_UplinkTable[0], which contains this value...
+
+1;
+
+# Idea is to fill the OPENSSL_UplinkTable with pointers to stubs
+# which invoke 'void OPENSSL_Uplink (ULONG_PTR *table,int index)';
+# and then dereference themselves. Latter shall result in endless
+# loop *unless* OPENSSL_Uplink does not replace 'table[index]' with
+# something else, e.g. as 'table[index]=unimplemented;'...
diff --git a/trunk/3rdparty/openssl-1.1-fit/ms/uplink-ia64.pl b/trunk/3rdparty/openssl-1.1-fit/ms/uplink-ia64.pl
new file mode 100755
index 000000000..0636f13e7
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ms/uplink-ia64.pl
@@ -0,0 +1,61 @@
+#! /usr/bin/env perl
+# Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+$output = pop;
+open STDOUT,">$output";
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC,"${dir}.");
+
+require "uplink-common.pl";
+
+local $V=8;	# max number of args uplink functions may accept...
+my $loc0 = "r".(32+$V);
+print <<___;
+.text
+.global	OPENSSL_Uplink#
+.type	OPENSSL_Uplink#,\@function
+
+___
+for ($i=1;$i<=$N;$i++) {
+print <<___;
+.proc	lazy$i#
+lazy$i:
+	.prologue
+{ .mii;	.save	ar.pfs,$loc0
+	alloc	loc0=ar.pfs,$V,3,2,0
+	.save	b0,loc1
+	mov	loc1=b0
+	addl	loc2=\@ltoff(OPENSSL_UplinkTable#),gp	};;
+	.body
+{ .mmi;	ld8	out0=[loc2]
+	mov	out1=$i					};;
+{ .mib;	add	loc2=8*$i,out0
+	br.call.sptk.many	b0=OPENSSL_Uplink#	};;
+{ .mmi;	ld8	r31=[loc2];;
+	ld8	r30=[r31],8				};;
+{ .mii;	ld8	gp=[r31]
+	mov	b6=r30
+	mov	b0=loc1					};;
+{ .mib;	mov	ar.pfs=loc0
+	br.many	b6					};;
+.endp	lazy$i#
+
+___
+}
+print <<___;
+.data
+.global OPENSSL_UplinkTable#
+OPENSSL_UplinkTable:    data8   $N      // amount of following entries
+___
+for ($i=1;$i<=$N;$i++) {   print "      data8   \@fptr(lazy$i#)\n";   }
+print <<___;
+.size   OPENSSL_UplinkTable,.-OPENSSL_UplinkTable#
+___
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/ms/uplink-x86.pl b/trunk/3rdparty/openssl-1.1-fit/ms/uplink-x86.pl
new file mode 100755
index 000000000..e79cff72d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ms/uplink-x86.pl
@@ -0,0 +1,44 @@
+#! /usr/bin/env perl
+# Copyright 2008-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+push(@INC, "${dir}.", "${dir}../crypto/perlasm");
+require "x86asm.pl";
+
+require "uplink-common.pl";
+
+$output = pop;
+open STDOUT,">$output";
+
+&asm_init($ARGV[0]);
+
+&external_label("OPENSSL_Uplink");
+&public_label("OPENSSL_UplinkTable");
+
+for ($i=1;$i<=$N;$i++) {
+&function_begin_B("_\$lazy${i}");
+	&lea	("eax",&DWP(&label("OPENSSL_UplinkTable")));
+	&push	($i);
+	&push	("eax");
+	&call	(&label("OPENSSL_Uplink"));
+	&pop	("eax");
+	&add	("esp",4);
+	&jmp_ptr(&DWP(4*$i,"eax"));
+&function_end_B("_\$lazy${i}");
+}
+
+&dataseg();
+&align(4);
+&set_label("OPENSSL_UplinkTable");
+&data_word($N);
+for ($i=1;$i<=$N;$i++) {
+&data_word(&label("_\$lazy${i}"));
+}
+&asm_finish();
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/ms/uplink-x86_64.pl b/trunk/3rdparty/openssl-1.1-fit/ms/uplink-x86_64.pl
new file mode 100755
index 000000000..1f244504c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ms/uplink-x86_64.pl
@@ -0,0 +1,71 @@
+#! /usr/bin/env perl
+# Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+$output=pop;
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+open OUT,"| \"$^X\" \"${dir}../crypto/perlasm/x86_64-xlate.pl\" \"$output\"";
+*STDOUT=*OUT;
+push(@INC,"${dir}.");
+
+require "uplink-common.pl";
+
+$prefix="_lazy";
+
+print <<___;
+.text
+.extern	OPENSSL_Uplink
+.globl	OPENSSL_UplinkTable
+___
+for ($i=1;$i<=$N;$i++) {
+print <<___;
+.type	$prefix${i},\@abi-omnipotent
+.align	16
+$prefix${i}:
+	.byte	0x48,0x83,0xEC,0x28	# sub rsp,40
+	mov	%rcx,48(%rsp)
+	mov	%rdx,56(%rsp)
+	mov	%r8,64(%rsp)
+	mov	%r9,72(%rsp)
+	lea	OPENSSL_UplinkTable(%rip),%rcx
+	mov	\$$i,%rdx
+	call	OPENSSL_Uplink
+	mov	48(%rsp),%rcx
+	mov	56(%rsp),%rdx
+	mov	64(%rsp),%r8
+	mov	72(%rsp),%r9
+	lea	OPENSSL_UplinkTable(%rip),%rax
+	add	\$40,%rsp
+	jmp	*8*$i(%rax)
+$prefix${i}_end:
+.size	$prefix${i},.-$prefix${i}
+___
+}
+print <<___;
+.data
+OPENSSL_UplinkTable:
+        .quad   $N
+___
+for ($i=1;$i<=$N;$i++) {   print "      .quad   $prefix$i\n";   }
+print <<___;
+.section	.pdata,"r"
+.align		4
+___
+for ($i=1;$i<=$N;$i++) {
+print <<___;
+	.rva	$prefix${i},$prefix${i}_end,${prefix}_unwind_info
+___
+}
+print <<___;
+.section	.xdata,"r"
+.align		8
+${prefix}_unwind_info:
+	.byte	0x01,0x04,0x01,0x00
+	.byte	0x04,0x42,0x00,0x00
+___
+
+close STDOUT;
diff --git a/trunk/3rdparty/openssl-1.1-fit/ms/uplink.c b/trunk/3rdparty/openssl-1.1-fit/ms/uplink.c
new file mode 100644
index 000000000..cd4e96b78
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ms/uplink.c
@@ -0,0 +1,135 @@
+/*
+ * Copyright 2004-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#if (defined(_WIN64) || defined(_WIN32_WCE)) && !defined(UNICODE)
+# define UNICODE
+#endif
+#if defined(UNICODE) && !defined(_UNICODE)
+# define _UNICODE
+#endif
+#if defined(_UNICODE) && !defined(UNICODE)
+# define UNICODE
+#endif
+
+#include <windows.h>
+#include <tchar.h>
+#include <stdio.h>
+#include "uplink.h"
+void OPENSSL_showfatal(const char *, ...);
+
+static TCHAR msg[128];
+
+static void unimplemented(void)
+{
+    OPENSSL_showfatal(sizeof(TCHAR) == sizeof(char) ? "%s\n" : "%S\n", msg);
+    TerminateProcess(GetCurrentProcess(), 1);
+}
+
+void OPENSSL_Uplink(volatile void **table, int index)
+{
+    static HMODULE volatile apphandle = NULL;
+    static void **volatile applinktable = NULL;
+    int len;
+    void (*func) (void) = unimplemented;
+    HANDLE h;
+    void **p;
+
+    /*
+     * Note that the below code is not MT-safe in respect to msg buffer, but
+     * what's the worst thing that can happen? Error message might be
+     * misleading or corrupted. As error condition is fatal and should never
+     * be risen, I accept the risk...
+     */
+    /*
+     * One can argue that I should have used InterlockedExchangePointer or
+     * something to update static variables and table[]. Well, store
+     * instructions are as atomic as they can get and assigned values are
+     * effectively constant... So that volatile qualifier should be
+     * sufficient [it prohibits compiler to reorder memory access
+     * instructions].
+     */
+    do {
+        len = _sntprintf(msg, sizeof(msg) / sizeof(TCHAR),
+                         _T("OPENSSL_Uplink(%p,%02X): "), table, index);
+        _tcscpy(msg + len, _T("unimplemented function"));
+
+        if ((h = apphandle) == NULL) {
+            if ((h = GetModuleHandle(NULL)) == NULL) {
+                apphandle = (HMODULE) - 1;
+                _tcscpy(msg + len, _T("no host application"));
+                break;
+            }
+            apphandle = h;
+        }
+        if ((h = apphandle) == (HMODULE) - 1) /* revalidate */
+            break;
+
+        if (applinktable == NULL) {
+            void **(*applink) ();
+
+            applink = (void **(*)())GetProcAddress(h, "OPENSSL_Applink");
+            if (applink == NULL) {
+                apphandle = (HMODULE) - 1;
+                _tcscpy(msg + len, _T("no OPENSSL_Applink"));
+                break;
+            }
+            p = (*applink) ();
+            if (p == NULL) {
+                apphandle = (HMODULE) - 1;
+                _tcscpy(msg + len, _T("no ApplinkTable"));
+                break;
+            }
+            applinktable = p;
+        } else
+            p = applinktable;
+
+        if (index > (int)p[0])
+            break;
+
+        if (p[index])
+            func = p[index];
+    } while (0);
+
+    table[index] = func;
+}
+
+#if defined(_MSC_VER) && defined(_M_IX86)
+# define LAZY(i)         \
+__declspec(naked) static void lazy##i (void) {  \
+        _asm    push i                          \
+        _asm    push OFFSET OPENSSL_UplinkTable \
+        _asm    call OPENSSL_Uplink             \
+        _asm    add  esp,8                      \
+        _asm    jmp  OPENSSL_UplinkTable+4*i    }
+
+# if APPLINK_MAX>25
+#  error "Add more stubs..."
+# endif
+/* make some in advance... */
+LAZY(1) LAZY(2) LAZY(3) LAZY(4) LAZY(5)
+    LAZY(6) LAZY(7) LAZY(8) LAZY(9) LAZY(10)
+    LAZY(11) LAZY(12) LAZY(13) LAZY(14) LAZY(15)
+    LAZY(16) LAZY(17) LAZY(18) LAZY(19) LAZY(20)
+    LAZY(21) LAZY(22) LAZY(23) LAZY(24) LAZY(25)
+void *OPENSSL_UplinkTable[] = {
+    (void *)APPLINK_MAX,
+    lazy1, lazy2, lazy3, lazy4, lazy5,
+    lazy6, lazy7, lazy8, lazy9, lazy10,
+    lazy11, lazy12, lazy13, lazy14, lazy15,
+    lazy16, lazy17, lazy18, lazy19, lazy20,
+    lazy21, lazy22, lazy23, lazy24, lazy25,
+};
+#endif
+
+#ifdef SELFTEST
+main()
+{
+    UP_fprintf(UP_stdout, "hello, world!\n");
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/ms/uplink.h b/trunk/3rdparty/openssl-1.1-fit/ms/uplink.h
new file mode 100644
index 000000000..f6cd0380a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ms/uplink.h
@@ -0,0 +1,38 @@
+/*
+ * Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#define APPMACROS_ONLY
+#include "applink.c"
+
+extern void *OPENSSL_UplinkTable[];
+
+#define UP_stdin  (*(void *(*)(void))OPENSSL_UplinkTable[APPLINK_STDIN])()
+#define UP_stdout (*(void *(*)(void))OPENSSL_UplinkTable[APPLINK_STDOUT])()
+#define UP_stderr (*(void *(*)(void))OPENSSL_UplinkTable[APPLINK_STDERR])()
+#define UP_fprintf (*(int (*)(void *,const char *,...))OPENSSL_UplinkTable[APPLINK_FPRINTF])
+#define UP_fgets  (*(char *(*)(char *,int,void *))OPENSSL_UplinkTable[APPLINK_FGETS])
+#define UP_fread  (*(size_t (*)(void *,size_t,size_t,void *))OPENSSL_UplinkTable[APPLINK_FREAD])
+#define UP_fwrite (*(size_t (*)(const void *,size_t,size_t,void *))OPENSSL_UplinkTable[APPLINK_FWRITE])
+#define UP_fsetmod (*(int (*)(void *,char))OPENSSL_UplinkTable[APPLINK_FSETMOD])
+#define UP_feof   (*(int (*)(void *))OPENSSL_UplinkTable[APPLINK_FEOF])
+#define UP_fclose (*(int (*)(void *))OPENSSL_UplinkTable[APPLINK_FCLOSE])
+
+#define UP_fopen  (*(void *(*)(const char *,const char *))OPENSSL_UplinkTable[APPLINK_FOPEN])
+#define UP_fseek  (*(int (*)(void *,long,int))OPENSSL_UplinkTable[APPLINK_FSEEK])
+#define UP_ftell  (*(long (*)(void *))OPENSSL_UplinkTable[APPLINK_FTELL])
+#define UP_fflush (*(int (*)(void *))OPENSSL_UplinkTable[APPLINK_FFLUSH])
+#define UP_ferror (*(int (*)(void *))OPENSSL_UplinkTable[APPLINK_FERROR])
+#define UP_clearerr (*(void (*)(void *))OPENSSL_UplinkTable[APPLINK_CLEARERR])
+#define UP_fileno (*(int (*)(void *))OPENSSL_UplinkTable[APPLINK_FILENO])
+
+#define UP_open   (*(int (*)(const char *,int,...))OPENSSL_UplinkTable[APPLINK_OPEN])
+#define UP_read   (*(ossl_ssize_t (*)(int,void *,size_t))OPENSSL_UplinkTable[APPLINK_READ])
+#define UP_write  (*(ossl_ssize_t (*)(int,const void *,size_t))OPENSSL_UplinkTable[APPLINK_WRITE])
+#define UP_lseek  (*(long (*)(int,long,int))OPENSSL_UplinkTable[APPLINK_LSEEK])
+#define UP_close  (*(int (*)(int))OPENSSL_UplinkTable[APPLINK_CLOSE])
diff --git a/trunk/3rdparty/openssl-1.1-fit/os-dep/haiku.h b/trunk/3rdparty/openssl-1.1-fit/os-dep/haiku.h
new file mode 100644
index 000000000..7e908efaa
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/os-dep/haiku.h
@@ -0,0 +1,2 @@
+#include <sys/select.h>
+#include <sys/time.h>
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/bio_ssl.c b/trunk/3rdparty/openssl-1.1-fit/ssl/bio_ssl.c
new file mode 100644
index 000000000..d1876d8b8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/bio_ssl.c
@@ -0,0 +1,505 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <errno.h>
+#include <openssl/crypto.h>
+#include "internal/bio.h"
+#include <openssl/err.h>
+#include "ssl_locl.h"
+
+static int ssl_write(BIO *h, const char *buf, size_t size, size_t *written);
+static int ssl_read(BIO *b, char *buf, size_t size, size_t *readbytes);
+static int ssl_puts(BIO *h, const char *str);
+static long ssl_ctrl(BIO *h, int cmd, long arg1, void *arg2);
+static int ssl_new(BIO *h);
+static int ssl_free(BIO *data);
+static long ssl_callback_ctrl(BIO *h, int cmd, BIO_info_cb *fp);
+typedef struct bio_ssl_st {
+    SSL *ssl;                   /* The ssl handle :-) */
+    /* re-negotiate every time the total number of bytes is this size */
+    int num_renegotiates;
+    unsigned long renegotiate_count;
+    size_t byte_count;
+    unsigned long renegotiate_timeout;
+    unsigned long last_time;
+} BIO_SSL;
+
+static const BIO_METHOD methods_sslp = {
+    BIO_TYPE_SSL,
+    "ssl",
+    ssl_write,
+    NULL,                       /* ssl_write_old, */
+    ssl_read,
+    NULL,                       /* ssl_read_old,  */
+    ssl_puts,
+    NULL,                       /* ssl_gets,      */
+    ssl_ctrl,
+    ssl_new,
+    ssl_free,
+    ssl_callback_ctrl,
+};
+
+const BIO_METHOD *BIO_f_ssl(void)
+{
+    return &methods_sslp;
+}
+
+static int ssl_new(BIO *bi)
+{
+    BIO_SSL *bs = OPENSSL_zalloc(sizeof(*bs));
+
+    if (bs == NULL) {
+        BIOerr(BIO_F_SSL_NEW, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    BIO_set_init(bi, 0);
+    BIO_set_data(bi, bs);
+    /* Clear all flags */
+    BIO_clear_flags(bi, ~0);
+
+    return 1;
+}
+
+static int ssl_free(BIO *a)
+{
+    BIO_SSL *bs;
+
+    if (a == NULL)
+        return 0;
+    bs = BIO_get_data(a);
+    if (bs->ssl != NULL)
+        SSL_shutdown(bs->ssl);
+    if (BIO_get_shutdown(a)) {
+        if (BIO_get_init(a))
+            SSL_free(bs->ssl);
+        /* Clear all flags */
+        BIO_clear_flags(a, ~0);
+        BIO_set_init(a, 0);
+    }
+    OPENSSL_free(bs);
+    return 1;
+}
+
+static int ssl_read(BIO *b, char *buf, size_t size, size_t *readbytes)
+{
+    int ret = 1;
+    BIO_SSL *sb;
+    SSL *ssl;
+    int retry_reason = 0;
+    int r = 0;
+
+    if (buf == NULL)
+        return 0;
+    sb = BIO_get_data(b);
+    ssl = sb->ssl;
+
+    BIO_clear_retry_flags(b);
+
+    ret = ssl_read_internal(ssl, buf, size, readbytes);
+
+    switch (SSL_get_error(ssl, ret)) {
+    case SSL_ERROR_NONE:
+        if (sb->renegotiate_count > 0) {
+            sb->byte_count += *readbytes;
+            if (sb->byte_count > sb->renegotiate_count) {
+                sb->byte_count = 0;
+                sb->num_renegotiates++;
+                SSL_renegotiate(ssl);
+                r = 1;
+            }
+        }
+        if ((sb->renegotiate_timeout > 0) && (!r)) {
+            unsigned long tm;
+
+            tm = (unsigned long)time(NULL);
+            if (tm > sb->last_time + sb->renegotiate_timeout) {
+                sb->last_time = tm;
+                sb->num_renegotiates++;
+                SSL_renegotiate(ssl);
+            }
+        }
+
+        break;
+    case SSL_ERROR_WANT_READ:
+        BIO_set_retry_read(b);
+        break;
+    case SSL_ERROR_WANT_WRITE:
+        BIO_set_retry_write(b);
+        break;
+    case SSL_ERROR_WANT_X509_LOOKUP:
+        BIO_set_retry_special(b);
+        retry_reason = BIO_RR_SSL_X509_LOOKUP;
+        break;
+    case SSL_ERROR_WANT_ACCEPT:
+        BIO_set_retry_special(b);
+        retry_reason = BIO_RR_ACCEPT;
+        break;
+    case SSL_ERROR_WANT_CONNECT:
+        BIO_set_retry_special(b);
+        retry_reason = BIO_RR_CONNECT;
+        break;
+    case SSL_ERROR_SYSCALL:
+    case SSL_ERROR_SSL:
+    case SSL_ERROR_ZERO_RETURN:
+    default:
+        break;
+    }
+
+    BIO_set_retry_reason(b, retry_reason);
+
+    return ret;
+}
+
+static int ssl_write(BIO *b, const char *buf, size_t size, size_t *written)
+{
+    int ret, r = 0;
+    int retry_reason = 0;
+    SSL *ssl;
+    BIO_SSL *bs;
+
+    if (buf == NULL)
+        return 0;
+    bs = BIO_get_data(b);
+    ssl = bs->ssl;
+
+    BIO_clear_retry_flags(b);
+
+    ret = ssl_write_internal(ssl, buf, size, written);
+
+    switch (SSL_get_error(ssl, ret)) {
+    case SSL_ERROR_NONE:
+        if (bs->renegotiate_count > 0) {
+            bs->byte_count += *written;
+            if (bs->byte_count > bs->renegotiate_count) {
+                bs->byte_count = 0;
+                bs->num_renegotiates++;
+                SSL_renegotiate(ssl);
+                r = 1;
+            }
+        }
+        if ((bs->renegotiate_timeout > 0) && (!r)) {
+            unsigned long tm;
+
+            tm = (unsigned long)time(NULL);
+            if (tm > bs->last_time + bs->renegotiate_timeout) {
+                bs->last_time = tm;
+                bs->num_renegotiates++;
+                SSL_renegotiate(ssl);
+            }
+        }
+        break;
+    case SSL_ERROR_WANT_WRITE:
+        BIO_set_retry_write(b);
+        break;
+    case SSL_ERROR_WANT_READ:
+        BIO_set_retry_read(b);
+        break;
+    case SSL_ERROR_WANT_X509_LOOKUP:
+        BIO_set_retry_special(b);
+        retry_reason = BIO_RR_SSL_X509_LOOKUP;
+        break;
+    case SSL_ERROR_WANT_CONNECT:
+        BIO_set_retry_special(b);
+        retry_reason = BIO_RR_CONNECT;
+    case SSL_ERROR_SYSCALL:
+    case SSL_ERROR_SSL:
+    default:
+        break;
+    }
+
+    BIO_set_retry_reason(b, retry_reason);
+
+    return ret;
+}
+
+static long ssl_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    SSL **sslp, *ssl;
+    BIO_SSL *bs, *dbs;
+    BIO *dbio, *bio;
+    long ret = 1;
+    BIO *next;
+
+    bs = BIO_get_data(b);
+    next = BIO_next(b);
+    ssl = bs->ssl;
+    if ((ssl == NULL) && (cmd != BIO_C_SET_SSL))
+        return 0;
+    switch (cmd) {
+    case BIO_CTRL_RESET:
+        SSL_shutdown(ssl);
+
+        if (ssl->handshake_func == ssl->method->ssl_connect)
+            SSL_set_connect_state(ssl);
+        else if (ssl->handshake_func == ssl->method->ssl_accept)
+            SSL_set_accept_state(ssl);
+
+        if (!SSL_clear(ssl)) {
+            ret = 0;
+            break;
+        }
+
+        if (next != NULL)
+            ret = BIO_ctrl(next, cmd, num, ptr);
+        else if (ssl->rbio != NULL)
+            ret = BIO_ctrl(ssl->rbio, cmd, num, ptr);
+        else
+            ret = 1;
+        break;
+    case BIO_CTRL_INFO:
+        ret = 0;
+        break;
+    case BIO_C_SSL_MODE:
+        if (num)                /* client mode */
+            SSL_set_connect_state(ssl);
+        else
+            SSL_set_accept_state(ssl);
+        break;
+    case BIO_C_SET_SSL_RENEGOTIATE_TIMEOUT:
+        ret = bs->renegotiate_timeout;
+        if (num < 60)
+            num = 5;
+        bs->renegotiate_timeout = (unsigned long)num;
+        bs->last_time = (unsigned long)time(NULL);
+        break;
+    case BIO_C_SET_SSL_RENEGOTIATE_BYTES:
+        ret = bs->renegotiate_count;
+        if ((long)num >= 512)
+            bs->renegotiate_count = (unsigned long)num;
+        break;
+    case BIO_C_GET_SSL_NUM_RENEGOTIATES:
+        ret = bs->num_renegotiates;
+        break;
+    case BIO_C_SET_SSL:
+        if (ssl != NULL) {
+            ssl_free(b);
+            if (!ssl_new(b))
+                return 0;
+        }
+        BIO_set_shutdown(b, num);
+        ssl = (SSL *)ptr;
+        bs->ssl = ssl;
+        bio = SSL_get_rbio(ssl);
+        if (bio != NULL) {
+            if (next != NULL)
+                BIO_push(bio, next);
+            BIO_set_next(b, bio);
+            BIO_up_ref(bio);
+        }
+        BIO_set_init(b, 1);
+        break;
+    case BIO_C_GET_SSL:
+        if (ptr != NULL) {
+            sslp = (SSL **)ptr;
+            *sslp = ssl;
+        } else
+            ret = 0;
+        break;
+    case BIO_CTRL_GET_CLOSE:
+        ret = BIO_get_shutdown(b);
+        break;
+    case BIO_CTRL_SET_CLOSE:
+        BIO_set_shutdown(b, (int)num);
+        break;
+    case BIO_CTRL_WPENDING:
+        ret = BIO_ctrl(ssl->wbio, cmd, num, ptr);
+        break;
+    case BIO_CTRL_PENDING:
+        ret = SSL_pending(ssl);
+        if (ret == 0)
+            ret = BIO_pending(ssl->rbio);
+        break;
+    case BIO_CTRL_FLUSH:
+        BIO_clear_retry_flags(b);
+        ret = BIO_ctrl(ssl->wbio, cmd, num, ptr);
+        BIO_copy_next_retry(b);
+        break;
+    case BIO_CTRL_PUSH:
+        if ((next != NULL) && (next != ssl->rbio)) {
+            /*
+             * We are going to pass ownership of next to the SSL object...but
+             * we don't own a reference to pass yet - so up ref
+             */
+            BIO_up_ref(next);
+            SSL_set_bio(ssl, next, next);
+        }
+        break;
+    case BIO_CTRL_POP:
+        /* Only detach if we are the BIO explicitly being popped */
+        if (b == ptr) {
+            /* This will clear the reference we obtained during push */
+            SSL_set_bio(ssl, NULL, NULL);
+        }
+        break;
+    case BIO_C_DO_STATE_MACHINE:
+        BIO_clear_retry_flags(b);
+
+        BIO_set_retry_reason(b, 0);
+        ret = (int)SSL_do_handshake(ssl);
+
+        switch (SSL_get_error(ssl, (int)ret)) {
+        case SSL_ERROR_WANT_READ:
+            BIO_set_flags(b, BIO_FLAGS_READ | BIO_FLAGS_SHOULD_RETRY);
+            break;
+        case SSL_ERROR_WANT_WRITE:
+            BIO_set_flags(b, BIO_FLAGS_WRITE | BIO_FLAGS_SHOULD_RETRY);
+            break;
+        case SSL_ERROR_WANT_CONNECT:
+            BIO_set_flags(b, BIO_FLAGS_IO_SPECIAL | BIO_FLAGS_SHOULD_RETRY);
+            BIO_set_retry_reason(b, BIO_get_retry_reason(next));
+            break;
+        case SSL_ERROR_WANT_X509_LOOKUP:
+            BIO_set_retry_special(b);
+            BIO_set_retry_reason(b, BIO_RR_SSL_X509_LOOKUP);
+            break;
+        default:
+            break;
+        }
+        break;
+    case BIO_CTRL_DUP:
+        dbio = (BIO *)ptr;
+        dbs = BIO_get_data(dbio);
+        SSL_free(dbs->ssl);
+        dbs->ssl = SSL_dup(ssl);
+        dbs->num_renegotiates = bs->num_renegotiates;
+        dbs->renegotiate_count = bs->renegotiate_count;
+        dbs->byte_count = bs->byte_count;
+        dbs->renegotiate_timeout = bs->renegotiate_timeout;
+        dbs->last_time = bs->last_time;
+        ret = (dbs->ssl != NULL);
+        break;
+    case BIO_C_GET_FD:
+        ret = BIO_ctrl(ssl->rbio, cmd, num, ptr);
+        break;
+    case BIO_CTRL_SET_CALLBACK:
+        ret = 0; /* use callback ctrl */
+        break;
+    default:
+        ret = BIO_ctrl(ssl->rbio, cmd, num, ptr);
+        break;
+    }
+    return ret;
+}
+
+static long ssl_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
+{
+    SSL *ssl;
+    BIO_SSL *bs;
+    long ret = 1;
+
+    bs = BIO_get_data(b);
+    ssl = bs->ssl;
+    switch (cmd) {
+    case BIO_CTRL_SET_CALLBACK:
+        ret = BIO_callback_ctrl(ssl->rbio, cmd, fp);
+        break;
+    default:
+        ret = 0;
+        break;
+    }
+    return ret;
+}
+
+static int ssl_puts(BIO *bp, const char *str)
+{
+    int n, ret;
+
+    n = strlen(str);
+    ret = BIO_write(bp, str, n);
+    return ret;
+}
+
+BIO *BIO_new_buffer_ssl_connect(SSL_CTX *ctx)
+{
+#ifndef OPENSSL_NO_SOCK
+    BIO *ret = NULL, *buf = NULL, *ssl = NULL;
+
+    if ((buf = BIO_new(BIO_f_buffer())) == NULL)
+        return NULL;
+    if ((ssl = BIO_new_ssl_connect(ctx)) == NULL)
+        goto err;
+    if ((ret = BIO_push(buf, ssl)) == NULL)
+        goto err;
+    return ret;
+ err:
+    BIO_free(buf);
+    BIO_free(ssl);
+#endif
+    return NULL;
+}
+
+BIO *BIO_new_ssl_connect(SSL_CTX *ctx)
+{
+#ifndef OPENSSL_NO_SOCK
+    BIO *ret = NULL, *con = NULL, *ssl = NULL;
+
+    if ((con = BIO_new(BIO_s_connect())) == NULL)
+        return NULL;
+    if ((ssl = BIO_new_ssl(ctx, 1)) == NULL)
+        goto err;
+    if ((ret = BIO_push(ssl, con)) == NULL)
+        goto err;
+    return ret;
+ err:
+    BIO_free(con);
+#endif
+    return NULL;
+}
+
+BIO *BIO_new_ssl(SSL_CTX *ctx, int client)
+{
+    BIO *ret;
+    SSL *ssl;
+
+    if ((ret = BIO_new(BIO_f_ssl())) == NULL)
+        return NULL;
+    if ((ssl = SSL_new(ctx)) == NULL) {
+        BIO_free(ret);
+        return NULL;
+    }
+    if (client)
+        SSL_set_connect_state(ssl);
+    else
+        SSL_set_accept_state(ssl);
+
+    BIO_set_ssl(ret, ssl, BIO_CLOSE);
+    return ret;
+}
+
+int BIO_ssl_copy_session_id(BIO *t, BIO *f)
+{
+    BIO_SSL *tdata, *fdata;
+    t = BIO_find_type(t, BIO_TYPE_SSL);
+    f = BIO_find_type(f, BIO_TYPE_SSL);
+    if ((t == NULL) || (f == NULL))
+        return 0;
+    tdata = BIO_get_data(t);
+    fdata = BIO_get_data(f);
+    if ((tdata->ssl == NULL) || (fdata->ssl == NULL))
+        return 0;
+    if (!SSL_copy_session_id(tdata->ssl, (fdata->ssl)))
+        return 0;
+    return 1;
+}
+
+void BIO_ssl_shutdown(BIO *b)
+{
+    BIO_SSL *bdata;
+
+    for (; b != NULL; b = BIO_next(b)) {
+        if (BIO_method_type(b) != BIO_TYPE_SSL)
+            continue;
+        bdata = BIO_get_data(b);
+        if (bdata != NULL && bdata->ssl != NULL)
+            SSL_shutdown(bdata->ssl);
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/build.info b/trunk/3rdparty/openssl-1.1-fit/ssl/build.info
new file mode 100644
index 000000000..bb2f1deb5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/build.info
@@ -0,0 +1,15 @@
+LIBS=../libssl
+SOURCE[../libssl]=\
+        pqueue.c packet.c \
+        statem/statem_srvr.c statem/statem_clnt.c  s3_lib.c  s3_enc.c record/rec_layer_s3.c \
+        statem/statem_lib.c statem/extensions.c statem/extensions_srvr.c \
+        statem/extensions_clnt.c statem/extensions_cust.c s3_cbc.c s3_msg.c \
+        methods.c   t1_lib.c  t1_enc.c tls13_enc.c \
+        d1_lib.c  record/rec_layer_d1.c d1_msg.c \
+        statem/statem_dtls.c d1_srtp.c \
+        ssl_lib.c ssl_cert.c ssl_sess.c \
+        ssl_ciph.c ssl_stat.c ssl_rsa.c \
+        ssl_asn1.c ssl_txt.c ssl_init.c ssl_conf.c  ssl_mcnf.c \
+        bio_ssl.c ssl_err.c tls_srp.c t1_trce.c ssl_utst.c \
+        record/ssl3_buffer.c record/ssl3_record.c record/dtls1_bitmap.c \
+        statem/statem.c record/ssl3_record_tls13.c
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/d1_lib.c b/trunk/3rdparty/openssl-1.1-fit/ssl/d1_lib.c
new file mode 100644
index 000000000..fcda32754
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/d1_lib.c
@@ -0,0 +1,972 @@
+/*
+ * Copyright 2005-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+#include <stdio.h>
+#include <openssl/objects.h>
+#include <openssl/rand.h>
+#include "ssl_locl.h"
+
+static void get_current_time(struct timeval *t);
+static int dtls1_handshake_write(SSL *s);
+static size_t dtls1_link_min_mtu(void);
+
+/* XDTLS:  figure out the right values */
+static const size_t g_probable_mtu[] = { 1500, 512, 256 };
+
+const SSL3_ENC_METHOD DTLSv1_enc_data = {
+    tls1_enc,
+    tls1_mac,
+    tls1_setup_key_block,
+    tls1_generate_master_secret,
+    tls1_change_cipher_state,
+    tls1_final_finish_mac,
+    TLS_MD_CLIENT_FINISH_CONST, TLS_MD_CLIENT_FINISH_CONST_SIZE,
+    TLS_MD_SERVER_FINISH_CONST, TLS_MD_SERVER_FINISH_CONST_SIZE,
+    tls1_alert_code,
+    tls1_export_keying_material,
+    SSL_ENC_FLAG_DTLS | SSL_ENC_FLAG_EXPLICIT_IV,
+    dtls1_set_handshake_header,
+    dtls1_close_construct_packet,
+    dtls1_handshake_write
+};
+
+const SSL3_ENC_METHOD DTLSv1_2_enc_data = {
+    tls1_enc,
+    tls1_mac,
+    tls1_setup_key_block,
+    tls1_generate_master_secret,
+    tls1_change_cipher_state,
+    tls1_final_finish_mac,
+    TLS_MD_CLIENT_FINISH_CONST, TLS_MD_CLIENT_FINISH_CONST_SIZE,
+    TLS_MD_SERVER_FINISH_CONST, TLS_MD_SERVER_FINISH_CONST_SIZE,
+    tls1_alert_code,
+    tls1_export_keying_material,
+    SSL_ENC_FLAG_DTLS | SSL_ENC_FLAG_EXPLICIT_IV | SSL_ENC_FLAG_SIGALGS
+        | SSL_ENC_FLAG_SHA256_PRF | SSL_ENC_FLAG_TLS1_2_CIPHERS,
+    dtls1_set_handshake_header,
+    dtls1_close_construct_packet,
+    dtls1_handshake_write
+};
+
+long dtls1_default_timeout(void)
+{
+    /*
+     * 2 hours, the 24 hours mentioned in the DTLSv1 spec is way too long for
+     * http, the cache would over fill
+     */
+    return (60 * 60 * 2);
+}
+
+int dtls1_new(SSL *s)
+{
+    DTLS1_STATE *d1;
+
+    if (!DTLS_RECORD_LAYER_new(&s->rlayer)) {
+        return 0;
+    }
+
+    if (!ssl3_new(s))
+        return 0;
+    if ((d1 = OPENSSL_zalloc(sizeof(*d1))) == NULL) {
+        ssl3_free(s);
+        return 0;
+    }
+
+    d1->buffered_messages = pqueue_new();
+    d1->sent_messages = pqueue_new();
+
+    if (s->server) {
+        d1->cookie_len = sizeof(s->d1->cookie);
+    }
+
+    d1->link_mtu = 0;
+    d1->mtu = 0;
+
+    if (d1->buffered_messages == NULL || d1->sent_messages == NULL) {
+        pqueue_free(d1->buffered_messages);
+        pqueue_free(d1->sent_messages);
+        OPENSSL_free(d1);
+        ssl3_free(s);
+        return 0;
+    }
+
+    s->d1 = d1;
+
+    if (!s->method->ssl_clear(s))
+        return 0;
+
+    return 1;
+}
+
+static void dtls1_clear_queues(SSL *s)
+{
+    dtls1_clear_received_buffer(s);
+    dtls1_clear_sent_buffer(s);
+}
+
+void dtls1_clear_received_buffer(SSL *s)
+{
+    pitem *item = NULL;
+    hm_fragment *frag = NULL;
+
+    while ((item = pqueue_pop(s->d1->buffered_messages)) != NULL) {
+        frag = (hm_fragment *)item->data;
+        dtls1_hm_fragment_free(frag);
+        pitem_free(item);
+    }
+}
+
+void dtls1_clear_sent_buffer(SSL *s)
+{
+    pitem *item = NULL;
+    hm_fragment *frag = NULL;
+
+    while ((item = pqueue_pop(s->d1->sent_messages)) != NULL) {
+        frag = (hm_fragment *)item->data;
+        dtls1_hm_fragment_free(frag);
+        pitem_free(item);
+    }
+}
+
+
+void dtls1_free(SSL *s)
+{
+    DTLS_RECORD_LAYER_free(&s->rlayer);
+
+    ssl3_free(s);
+
+    dtls1_clear_queues(s);
+
+    pqueue_free(s->d1->buffered_messages);
+    pqueue_free(s->d1->sent_messages);
+
+    OPENSSL_free(s->d1);
+    s->d1 = NULL;
+}
+
+int dtls1_clear(SSL *s)
+{
+    pqueue *buffered_messages;
+    pqueue *sent_messages;
+    size_t mtu;
+    size_t link_mtu;
+
+    DTLS_RECORD_LAYER_clear(&s->rlayer);
+
+    if (s->d1) {
+        DTLS_timer_cb timer_cb = s->d1->timer_cb;
+
+        buffered_messages = s->d1->buffered_messages;
+        sent_messages = s->d1->sent_messages;
+        mtu = s->d1->mtu;
+        link_mtu = s->d1->link_mtu;
+
+        dtls1_clear_queues(s);
+
+        memset(s->d1, 0, sizeof(*s->d1));
+
+        /* Restore the timer callback from previous state */
+        s->d1->timer_cb = timer_cb;
+
+        if (s->server) {
+            s->d1->cookie_len = sizeof(s->d1->cookie);
+        }
+
+        if (SSL_get_options(s) & SSL_OP_NO_QUERY_MTU) {
+            s->d1->mtu = mtu;
+            s->d1->link_mtu = link_mtu;
+        }
+
+        s->d1->buffered_messages = buffered_messages;
+        s->d1->sent_messages = sent_messages;
+    }
+
+    if (!ssl3_clear(s))
+        return 0;
+
+    if (s->method->version == DTLS_ANY_VERSION)
+        s->version = DTLS_MAX_VERSION;
+#ifndef OPENSSL_NO_DTLS1_METHOD
+    else if (s->options & SSL_OP_CISCO_ANYCONNECT)
+        s->client_version = s->version = DTLS1_BAD_VER;
+#endif
+    else
+        s->version = s->method->version;
+
+    return 1;
+}
+
+long dtls1_ctrl(SSL *s, int cmd, long larg, void *parg)
+{
+    int ret = 0;
+
+    switch (cmd) {
+    case DTLS_CTRL_GET_TIMEOUT:
+        if (dtls1_get_timeout(s, (struct timeval *)parg) != NULL) {
+            ret = 1;
+        }
+        break;
+    case DTLS_CTRL_HANDLE_TIMEOUT:
+        ret = dtls1_handle_timeout(s);
+        break;
+    case DTLS_CTRL_SET_LINK_MTU:
+        if (larg < (long)dtls1_link_min_mtu())
+            return 0;
+        s->d1->link_mtu = larg;
+        return 1;
+    case DTLS_CTRL_GET_LINK_MIN_MTU:
+        return (long)dtls1_link_min_mtu();
+    case SSL_CTRL_SET_MTU:
+        /*
+         *  We may not have a BIO set yet so can't call dtls1_min_mtu()
+         *  We'll have to make do with dtls1_link_min_mtu() and max overhead
+         */
+        if (larg < (long)dtls1_link_min_mtu() - DTLS1_MAX_MTU_OVERHEAD)
+            return 0;
+        s->d1->mtu = larg;
+        return larg;
+    default:
+        ret = ssl3_ctrl(s, cmd, larg, parg);
+        break;
+    }
+    return ret;
+}
+
+void dtls1_start_timer(SSL *s)
+{
+    unsigned int sec, usec;
+
+#ifndef OPENSSL_NO_SCTP
+    /* Disable timer for SCTP */
+    if (BIO_dgram_is_sctp(SSL_get_wbio(s))) {
+        memset(&s->d1->next_timeout, 0, sizeof(s->d1->next_timeout));
+        return;
+    }
+#endif
+
+    /*
+     * If timer is not set, initialize duration with 1 second or
+     * a user-specified value if the timer callback is installed.
+     */
+    if (s->d1->next_timeout.tv_sec == 0 && s->d1->next_timeout.tv_usec == 0) {
+
+        if (s->d1->timer_cb != NULL)
+            s->d1->timeout_duration_us = s->d1->timer_cb(s, 0);
+        else
+            s->d1->timeout_duration_us = 1000000;
+    }
+
+    /* Set timeout to current time */
+    get_current_time(&(s->d1->next_timeout));
+
+    /* Add duration to current time */
+
+    sec  = s->d1->timeout_duration_us / 1000000;
+    usec = s->d1->timeout_duration_us - (sec * 1000000);
+
+    s->d1->next_timeout.tv_sec  += sec;
+    s->d1->next_timeout.tv_usec += usec;
+
+    if (s->d1->next_timeout.tv_usec >= 1000000) {
+        s->d1->next_timeout.tv_sec++;
+        s->d1->next_timeout.tv_usec -= 1000000;
+    }
+
+    BIO_ctrl(SSL_get_rbio(s), BIO_CTRL_DGRAM_SET_NEXT_TIMEOUT, 0,
+             &(s->d1->next_timeout));
+}
+
+struct timeval *dtls1_get_timeout(SSL *s, struct timeval *timeleft)
+{
+    struct timeval timenow;
+
+    /* If no timeout is set, just return NULL */
+    if (s->d1->next_timeout.tv_sec == 0 && s->d1->next_timeout.tv_usec == 0) {
+        return NULL;
+    }
+
+    /* Get current time */
+    get_current_time(&timenow);
+
+    /* If timer already expired, set remaining time to 0 */
+    if (s->d1->next_timeout.tv_sec < timenow.tv_sec ||
+        (s->d1->next_timeout.tv_sec == timenow.tv_sec &&
+         s->d1->next_timeout.tv_usec <= timenow.tv_usec)) {
+        memset(timeleft, 0, sizeof(*timeleft));
+        return timeleft;
+    }
+
+    /* Calculate time left until timer expires */
+    memcpy(timeleft, &(s->d1->next_timeout), sizeof(struct timeval));
+    timeleft->tv_sec -= timenow.tv_sec;
+    timeleft->tv_usec -= timenow.tv_usec;
+    if (timeleft->tv_usec < 0) {
+        timeleft->tv_sec--;
+        timeleft->tv_usec += 1000000;
+    }
+
+    /*
+     * If remaining time is less than 15 ms, set it to 0 to prevent issues
+     * because of small divergences with socket timeouts.
+     */
+    if (timeleft->tv_sec == 0 && timeleft->tv_usec < 15000) {
+        memset(timeleft, 0, sizeof(*timeleft));
+    }
+
+    return timeleft;
+}
+
+int dtls1_is_timer_expired(SSL *s)
+{
+    struct timeval timeleft;
+
+    /* Get time left until timeout, return false if no timer running */
+    if (dtls1_get_timeout(s, &timeleft) == NULL) {
+        return 0;
+    }
+
+    /* Return false if timer is not expired yet */
+    if (timeleft.tv_sec > 0 || timeleft.tv_usec > 0) {
+        return 0;
+    }
+
+    /* Timer expired, so return true */
+    return 1;
+}
+
+void dtls1_double_timeout(SSL *s)
+{
+    s->d1->timeout_duration_us *= 2;
+    if (s->d1->timeout_duration_us > 60000000)
+        s->d1->timeout_duration_us = 60000000;
+    dtls1_start_timer(s);
+}
+
+void dtls1_stop_timer(SSL *s)
+{
+    /* Reset everything */
+    memset(&s->d1->timeout, 0, sizeof(s->d1->timeout));
+    memset(&s->d1->next_timeout, 0, sizeof(s->d1->next_timeout));
+    s->d1->timeout_duration_us = 1000000;
+    BIO_ctrl(SSL_get_rbio(s), BIO_CTRL_DGRAM_SET_NEXT_TIMEOUT, 0,
+             &(s->d1->next_timeout));
+    /* Clear retransmission buffer */
+    dtls1_clear_sent_buffer(s);
+}
+
+int dtls1_check_timeout_num(SSL *s)
+{
+    size_t mtu;
+
+    s->d1->timeout.num_alerts++;
+
+    /* Reduce MTU after 2 unsuccessful retransmissions */
+    if (s->d1->timeout.num_alerts > 2
+        && !(SSL_get_options(s) & SSL_OP_NO_QUERY_MTU)) {
+        mtu =
+            BIO_ctrl(SSL_get_wbio(s), BIO_CTRL_DGRAM_GET_FALLBACK_MTU, 0, NULL);
+        if (mtu < s->d1->mtu)
+            s->d1->mtu = mtu;
+    }
+
+    if (s->d1->timeout.num_alerts > DTLS1_TMO_ALERT_COUNT) {
+        /* fail the connection, enough alerts have been sent */
+        SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_DTLS1_CHECK_TIMEOUT_NUM,
+                 SSL_R_READ_TIMEOUT_EXPIRED);
+        return -1;
+    }
+
+    return 0;
+}
+
+int dtls1_handle_timeout(SSL *s)
+{
+    /* if no timer is expired, don't do anything */
+    if (!dtls1_is_timer_expired(s)) {
+        return 0;
+    }
+
+    if (s->d1->timer_cb != NULL)
+        s->d1->timeout_duration_us = s->d1->timer_cb(s, s->d1->timeout_duration_us);
+    else
+        dtls1_double_timeout(s);
+
+    if (dtls1_check_timeout_num(s) < 0) {
+        /* SSLfatal() already called */
+        return -1;
+    }
+
+    s->d1->timeout.read_timeouts++;
+    if (s->d1->timeout.read_timeouts > DTLS1_TMO_READ_COUNT) {
+        s->d1->timeout.read_timeouts = 1;
+    }
+
+    dtls1_start_timer(s);
+    /* Calls SSLfatal() if required */
+    return dtls1_retransmit_buffered_messages(s);
+}
+
+static void get_current_time(struct timeval *t)
+{
+#if defined(_WIN32)
+    SYSTEMTIME st;
+    union {
+        unsigned __int64 ul;
+        FILETIME ft;
+    } now;
+
+    GetSystemTime(&st);
+    SystemTimeToFileTime(&st, &now.ft);
+    /* re-bias to 1/1/1970 */
+# ifdef  __MINGW32__
+    now.ul -= 116444736000000000ULL;
+# else
+    /* *INDENT-OFF* */
+    now.ul -= 116444736000000000UI64;
+    /* *INDENT-ON* */
+# endif
+    t->tv_sec = (long)(now.ul / 10000000);
+    t->tv_usec = ((int)(now.ul % 10000000)) / 10;
+#else
+    gettimeofday(t, NULL);
+#endif
+}
+
+#define LISTEN_SUCCESS              2
+#define LISTEN_SEND_VERIFY_REQUEST  1
+
+#ifndef OPENSSL_NO_SOCK
+int DTLSv1_listen(SSL *s, BIO_ADDR *client)
+{
+    int next, n, ret = 0;
+    unsigned char cookie[DTLS1_COOKIE_LENGTH];
+    unsigned char seq[SEQ_NUM_SIZE];
+    const unsigned char *data;
+    unsigned char *buf, *wbuf;
+    size_t fragoff, fraglen, msglen, reclen, align = 0;
+    unsigned int rectype, versmajor, msgseq, msgtype, clientvers, cookielen;
+    BIO *rbio, *wbio;
+    BIO_ADDR *tmpclient = NULL;
+    PACKET pkt, msgpkt, msgpayload, session, cookiepkt;
+
+    if (s->handshake_func == NULL) {
+        /* Not properly initialized yet */
+        SSL_set_accept_state(s);
+    }
+
+    /* Ensure there is no state left over from a previous invocation */
+    if (!SSL_clear(s))
+        return -1;
+
+    ERR_clear_error();
+
+    rbio = SSL_get_rbio(s);
+    wbio = SSL_get_wbio(s);
+
+    if (!rbio || !wbio) {
+        SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_BIO_NOT_SET);
+        return -1;
+    }
+
+    /*
+     * Note: This check deliberately excludes DTLS1_BAD_VER because that version
+     * requires the MAC to be calculated *including* the first ClientHello
+     * (without the cookie). Since DTLSv1_listen is stateless that cannot be
+     * supported. DTLS1_BAD_VER must use cookies in a stateful manner (e.g. via
+     * SSL_accept)
+     */
+    if ((s->version & 0xff00) != (DTLS1_VERSION & 0xff00)) {
+        SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_UNSUPPORTED_SSL_VERSION);
+        return -1;
+    }
+
+    if (!ssl3_setup_buffers(s)) {
+        /* SSLerr already called */
+        return -1;
+    }
+    buf = RECORD_LAYER_get_rbuf(&s->rlayer)->buf;
+    wbuf = RECORD_LAYER_get_wbuf(&s->rlayer)[0].buf;
+#if defined(SSL3_ALIGN_PAYLOAD)
+# if SSL3_ALIGN_PAYLOAD != 0
+    /*
+     * Using SSL3_RT_HEADER_LENGTH here instead of DTLS1_RT_HEADER_LENGTH for
+     * consistency with ssl3_read_n. In practice it should make no difference
+     * for sensible values of SSL3_ALIGN_PAYLOAD because the difference between
+     * SSL3_RT_HEADER_LENGTH and DTLS1_RT_HEADER_LENGTH is exactly 8
+     */
+    align = (size_t)buf + SSL3_RT_HEADER_LENGTH;
+    align = SSL3_ALIGN_PAYLOAD - 1 - ((align - 1) % SSL3_ALIGN_PAYLOAD);
+# endif
+#endif
+    buf += align;
+
+    do {
+        /* Get a packet */
+
+        clear_sys_error();
+        n = BIO_read(rbio, buf, SSL3_RT_MAX_PLAIN_LENGTH
+                                + DTLS1_RT_HEADER_LENGTH);
+        if (n <= 0) {
+            if (BIO_should_retry(rbio)) {
+                /* Non-blocking IO */
+                goto end;
+            }
+            return -1;
+        }
+
+        if (!PACKET_buf_init(&pkt, buf, n)) {
+            SSLerr(SSL_F_DTLSV1_LISTEN, ERR_R_INTERNAL_ERROR);
+            return -1;
+        }
+
+        /*
+         * Parse the received record. If there are any problems with it we just
+         * dump it - with no alert. RFC6347 says this "Unlike TLS, DTLS is
+         * resilient in the face of invalid records (e.g., invalid formatting,
+         * length, MAC, etc.).  In general, invalid records SHOULD be silently
+         * discarded, thus preserving the association; however, an error MAY be
+         * logged for diagnostic purposes."
+         */
+
+        /* this packet contained a partial record, dump it */
+        if (n < DTLS1_RT_HEADER_LENGTH) {
+            SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_RECORD_TOO_SMALL);
+            goto end;
+        }
+
+        if (s->msg_callback)
+            s->msg_callback(0, 0, SSL3_RT_HEADER, buf,
+                            DTLS1_RT_HEADER_LENGTH, s, s->msg_callback_arg);
+
+        /* Get the record header */
+        if (!PACKET_get_1(&pkt, &rectype)
+            || !PACKET_get_1(&pkt, &versmajor)) {
+            SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_LENGTH_MISMATCH);
+            goto end;
+        }
+
+        if (rectype != SSL3_RT_HANDSHAKE) {
+            SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_UNEXPECTED_MESSAGE);
+            goto end;
+        }
+
+        /*
+         * Check record version number. We only check that the major version is
+         * the same.
+         */
+        if (versmajor != DTLS1_VERSION_MAJOR) {
+            SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_BAD_PROTOCOL_VERSION_NUMBER);
+            goto end;
+        }
+
+        if (!PACKET_forward(&pkt, 1)
+            /* Save the sequence number: 64 bits, with top 2 bytes = epoch */
+            || !PACKET_copy_bytes(&pkt, seq, SEQ_NUM_SIZE)
+            || !PACKET_get_length_prefixed_2(&pkt, &msgpkt)) {
+            SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_LENGTH_MISMATCH);
+            goto end;
+        }
+        reclen = PACKET_remaining(&msgpkt);
+        /*
+         * We allow data remaining at the end of the packet because there could
+         * be a second record (but we ignore it)
+         */
+
+        /* This is an initial ClientHello so the epoch has to be 0 */
+        if (seq[0] != 0 || seq[1] != 0) {
+            SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_UNEXPECTED_MESSAGE);
+            goto end;
+        }
+
+        /* Get a pointer to the raw message for the later callback */
+        data = PACKET_data(&msgpkt);
+
+        /* Finished processing the record header, now process the message */
+        if (!PACKET_get_1(&msgpkt, &msgtype)
+            || !PACKET_get_net_3_len(&msgpkt, &msglen)
+            || !PACKET_get_net_2(&msgpkt, &msgseq)
+            || !PACKET_get_net_3_len(&msgpkt, &fragoff)
+            || !PACKET_get_net_3_len(&msgpkt, &fraglen)
+            || !PACKET_get_sub_packet(&msgpkt, &msgpayload, fraglen)
+            || PACKET_remaining(&msgpkt) != 0) {
+            SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_LENGTH_MISMATCH);
+            goto end;
+        }
+
+        if (msgtype != SSL3_MT_CLIENT_HELLO) {
+            SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_UNEXPECTED_MESSAGE);
+            goto end;
+        }
+
+        /* Message sequence number can only be 0 or 1 */
+        if (msgseq > 2) {
+            SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_INVALID_SEQUENCE_NUMBER);
+            goto end;
+        }
+
+        /*
+         * We don't support fragment reassembly for ClientHellos whilst
+         * listening because that would require server side state (which is
+         * against the whole point of the ClientHello/HelloVerifyRequest
+         * mechanism). Instead we only look at the first ClientHello fragment
+         * and require that the cookie must be contained within it.
+         */
+        if (fragoff != 0 || fraglen > msglen) {
+            /* Non initial ClientHello fragment (or bad fragment) */
+            SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_FRAGMENTED_CLIENT_HELLO);
+            goto end;
+        }
+
+        if (s->msg_callback)
+            s->msg_callback(0, s->version, SSL3_RT_HANDSHAKE, data,
+                            fraglen + DTLS1_HM_HEADER_LENGTH, s,
+                            s->msg_callback_arg);
+
+        if (!PACKET_get_net_2(&msgpayload, &clientvers)) {
+            SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_LENGTH_MISMATCH);
+            goto end;
+        }
+
+        /*
+         * Verify client version is supported
+         */
+        if (DTLS_VERSION_LT(clientvers, (unsigned int)s->method->version) &&
+            s->method->version != DTLS_ANY_VERSION) {
+            SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_WRONG_VERSION_NUMBER);
+            goto end;
+        }
+
+        if (!PACKET_forward(&msgpayload, SSL3_RANDOM_SIZE)
+            || !PACKET_get_length_prefixed_1(&msgpayload, &session)
+            || !PACKET_get_length_prefixed_1(&msgpayload, &cookiepkt)) {
+            /*
+             * Could be malformed or the cookie does not fit within the initial
+             * ClientHello fragment. Either way we can't handle it.
+             */
+            SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_LENGTH_MISMATCH);
+            goto end;
+        }
+
+        /*
+         * Check if we have a cookie or not. If not we need to send a
+         * HelloVerifyRequest.
+         */
+        if (PACKET_remaining(&cookiepkt) == 0) {
+            next = LISTEN_SEND_VERIFY_REQUEST;
+        } else {
+            /*
+             * We have a cookie, so lets check it.
+             */
+            if (s->ctx->app_verify_cookie_cb == NULL) {
+                SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_NO_VERIFY_COOKIE_CALLBACK);
+                /* This is fatal */
+                return -1;
+            }
+            if (s->ctx->app_verify_cookie_cb(s, PACKET_data(&cookiepkt),
+                    (unsigned int)PACKET_remaining(&cookiepkt)) == 0) {
+                /*
+                 * We treat invalid cookies in the same was as no cookie as
+                 * per RFC6347
+                 */
+                next = LISTEN_SEND_VERIFY_REQUEST;
+            } else {
+                /* Cookie verification succeeded */
+                next = LISTEN_SUCCESS;
+            }
+        }
+
+        if (next == LISTEN_SEND_VERIFY_REQUEST) {
+            WPACKET wpkt;
+            unsigned int version;
+            size_t wreclen;
+
+            /*
+             * There was no cookie in the ClientHello so we need to send a
+             * HelloVerifyRequest. If this fails we do not worry about trying
+             * to resend, we just drop it.
+             */
+
+            /* Generate the cookie */
+            if (s->ctx->app_gen_cookie_cb == NULL ||
+                s->ctx->app_gen_cookie_cb(s, cookie, &cookielen) == 0 ||
+                cookielen > 255) {
+                SSLerr(SSL_F_DTLSV1_LISTEN, SSL_R_COOKIE_GEN_CALLBACK_FAILURE);
+                /* This is fatal */
+                return -1;
+            }
+
+            /*
+             * Special case: for hello verify request, client version 1.0 and we
+             * haven't decided which version to use yet send back using version
+             * 1.0 header: otherwise some clients will ignore it.
+             */
+            version = (s->method->version == DTLS_ANY_VERSION) ? DTLS1_VERSION
+                                                               : s->version;
+
+            /* Construct the record and message headers */
+            if (!WPACKET_init_static_len(&wpkt,
+                                         wbuf,
+                                         ssl_get_max_send_fragment(s)
+                                         + DTLS1_RT_HEADER_LENGTH,
+                                         0)
+                    || !WPACKET_put_bytes_u8(&wpkt, SSL3_RT_HANDSHAKE)
+                    || !WPACKET_put_bytes_u16(&wpkt, version)
+                       /*
+                        * Record sequence number is always the same as in the
+                        * received ClientHello
+                        */
+                    || !WPACKET_memcpy(&wpkt, seq, SEQ_NUM_SIZE)
+                       /* End of record, start sub packet for message */
+                    || !WPACKET_start_sub_packet_u16(&wpkt)
+                       /* Message type */
+                    || !WPACKET_put_bytes_u8(&wpkt,
+                                             DTLS1_MT_HELLO_VERIFY_REQUEST)
+                       /*
+                        * Message length - doesn't follow normal TLS convention:
+                        * the length isn't the last thing in the message header.
+                        * We'll need to fill this in later when we know the
+                        * length. Set it to zero for now
+                        */
+                    || !WPACKET_put_bytes_u24(&wpkt, 0)
+                       /*
+                        * Message sequence number is always 0 for a
+                        * HelloVerifyRequest
+                        */
+                    || !WPACKET_put_bytes_u16(&wpkt, 0)
+                       /*
+                        * We never fragment a HelloVerifyRequest, so fragment
+                        * offset is 0
+                        */
+                    || !WPACKET_put_bytes_u24(&wpkt, 0)
+                       /*
+                        * Fragment length is the same as message length, but
+                        * this *is* the last thing in the message header so we
+                        * can just start a sub-packet. No need to come back
+                        * later for this one.
+                        */
+                    || !WPACKET_start_sub_packet_u24(&wpkt)
+                       /* Create the actual HelloVerifyRequest body */
+                    || !dtls_raw_hello_verify_request(&wpkt, cookie, cookielen)
+                       /* Close message body */
+                    || !WPACKET_close(&wpkt)
+                       /* Close record body */
+                    || !WPACKET_close(&wpkt)
+                    || !WPACKET_get_total_written(&wpkt, &wreclen)
+                    || !WPACKET_finish(&wpkt)) {
+                SSLerr(SSL_F_DTLSV1_LISTEN, ERR_R_INTERNAL_ERROR);
+                WPACKET_cleanup(&wpkt);
+                /* This is fatal */
+                return -1;
+            }
+
+            /*
+             * Fix up the message len in the message header. Its the same as the
+             * fragment len which has been filled in by WPACKET, so just copy
+             * that. Destination for the message len is after the record header
+             * plus one byte for the message content type. The source is the
+             * last 3 bytes of the message header
+             */
+            memcpy(&wbuf[DTLS1_RT_HEADER_LENGTH + 1],
+                   &wbuf[DTLS1_RT_HEADER_LENGTH + DTLS1_HM_HEADER_LENGTH - 3],
+                   3);
+
+            if (s->msg_callback)
+                s->msg_callback(1, 0, SSL3_RT_HEADER, buf,
+                                DTLS1_RT_HEADER_LENGTH, s, s->msg_callback_arg);
+
+            if ((tmpclient = BIO_ADDR_new()) == NULL) {
+                SSLerr(SSL_F_DTLSV1_LISTEN, ERR_R_MALLOC_FAILURE);
+                goto end;
+            }
+
+            /*
+             * This is unnecessary if rbio and wbio are one and the same - but
+             * maybe they're not. We ignore errors here - some BIOs do not
+             * support this.
+             */
+            if (BIO_dgram_get_peer(rbio, tmpclient) > 0) {
+                (void)BIO_dgram_set_peer(wbio, tmpclient);
+            }
+            BIO_ADDR_free(tmpclient);
+            tmpclient = NULL;
+
+            /* TODO(size_t): convert this call */
+            if (BIO_write(wbio, wbuf, wreclen) < (int)wreclen) {
+                if (BIO_should_retry(wbio)) {
+                    /*
+                     * Non-blocking IO...but we're stateless, so we're just
+                     * going to drop this packet.
+                     */
+                    goto end;
+                }
+                return -1;
+            }
+
+            if (BIO_flush(wbio) <= 0) {
+                if (BIO_should_retry(wbio)) {
+                    /*
+                     * Non-blocking IO...but we're stateless, so we're just
+                     * going to drop this packet.
+                     */
+                    goto end;
+                }
+                return -1;
+            }
+        }
+    } while (next != LISTEN_SUCCESS);
+
+    /*
+     * Set expected sequence numbers to continue the handshake.
+     */
+    s->d1->handshake_read_seq = 1;
+    s->d1->handshake_write_seq = 1;
+    s->d1->next_handshake_write_seq = 1;
+    DTLS_RECORD_LAYER_set_write_sequence(&s->rlayer, seq);
+
+    /*
+     * We are doing cookie exchange, so make sure we set that option in the
+     * SSL object
+     */
+    SSL_set_options(s, SSL_OP_COOKIE_EXCHANGE);
+
+    /*
+     * Tell the state machine that we've done the initial hello verify
+     * exchange
+     */
+    ossl_statem_set_hello_verify_done(s);
+
+    /*
+     * Some BIOs may not support this. If we fail we clear the client address
+     */
+    if (BIO_dgram_get_peer(rbio, client) <= 0)
+        BIO_ADDR_clear(client);
+
+    /* Buffer the record in the processed_rcds queue */
+    if (!dtls_buffer_listen_record(s, reclen, seq, align))
+        return -1;
+
+    ret = 1;
+ end:
+    BIO_ADDR_free(tmpclient);
+    return ret;
+}
+#endif
+
+static int dtls1_handshake_write(SSL *s)
+{
+    return dtls1_do_write(s, SSL3_RT_HANDSHAKE);
+}
+
+int dtls1_shutdown(SSL *s)
+{
+    int ret;
+#ifndef OPENSSL_NO_SCTP
+    BIO *wbio;
+
+    wbio = SSL_get_wbio(s);
+    if (wbio != NULL && BIO_dgram_is_sctp(wbio) &&
+        !(s->shutdown & SSL_SENT_SHUTDOWN)) {
+        ret = BIO_dgram_sctp_wait_for_dry(wbio);
+        if (ret < 0)
+            return -1;
+
+        if (ret == 0)
+            BIO_ctrl(SSL_get_wbio(s), BIO_CTRL_DGRAM_SCTP_SAVE_SHUTDOWN, 1,
+                     NULL);
+    }
+#endif
+    ret = ssl3_shutdown(s);
+#ifndef OPENSSL_NO_SCTP
+    BIO_ctrl(SSL_get_wbio(s), BIO_CTRL_DGRAM_SCTP_SAVE_SHUTDOWN, 0, NULL);
+#endif
+    return ret;
+}
+
+int dtls1_query_mtu(SSL *s)
+{
+    if (s->d1->link_mtu) {
+        s->d1->mtu =
+            s->d1->link_mtu - BIO_dgram_get_mtu_overhead(SSL_get_wbio(s));
+        s->d1->link_mtu = 0;
+    }
+
+    /* AHA!  Figure out the MTU, and stick to the right size */
+    if (s->d1->mtu < dtls1_min_mtu(s)) {
+        if (!(SSL_get_options(s) & SSL_OP_NO_QUERY_MTU)) {
+            s->d1->mtu =
+                BIO_ctrl(SSL_get_wbio(s), BIO_CTRL_DGRAM_QUERY_MTU, 0, NULL);
+
+            /*
+             * I've seen the kernel return bogus numbers when it doesn't know
+             * (initial write), so just make sure we have a reasonable number
+             */
+            if (s->d1->mtu < dtls1_min_mtu(s)) {
+                /* Set to min mtu */
+                s->d1->mtu = dtls1_min_mtu(s);
+                BIO_ctrl(SSL_get_wbio(s), BIO_CTRL_DGRAM_SET_MTU,
+                         (long)s->d1->mtu, NULL);
+            }
+        } else
+            return 0;
+    }
+    return 1;
+}
+
+static size_t dtls1_link_min_mtu(void)
+{
+    return (g_probable_mtu[(sizeof(g_probable_mtu) /
+                            sizeof(g_probable_mtu[0])) - 1]);
+}
+
+size_t dtls1_min_mtu(SSL *s)
+{
+    return dtls1_link_min_mtu() - BIO_dgram_get_mtu_overhead(SSL_get_wbio(s));
+}
+
+size_t DTLS_get_data_mtu(const SSL *s)
+{
+    size_t mac_overhead, int_overhead, blocksize, ext_overhead;
+    const SSL_CIPHER *ciph = SSL_get_current_cipher(s);
+    size_t mtu = s->d1->mtu;
+
+    if (ciph == NULL)
+        return 0;
+
+    if (!ssl_cipher_get_overhead(ciph, &mac_overhead, &int_overhead,
+                                 &blocksize, &ext_overhead))
+        return 0;
+
+    if (SSL_READ_ETM(s))
+        ext_overhead += mac_overhead;
+    else
+        int_overhead += mac_overhead;
+
+    /* Subtract external overhead (e.g. IV/nonce, separate MAC) */
+    if (ext_overhead + DTLS1_RT_HEADER_LENGTH >= mtu)
+        return 0;
+    mtu -= ext_overhead + DTLS1_RT_HEADER_LENGTH;
+
+    /* Round encrypted payload down to cipher block size (for CBC etc.)
+     * No check for overflow since 'mtu % blocksize' cannot exceed mtu. */
+    if (blocksize)
+        mtu -= (mtu % blocksize);
+
+    /* Subtract internal overhead (e.g. CBC padding len byte) */
+    if (int_overhead >= mtu)
+        return 0;
+    mtu -= int_overhead;
+
+    return mtu;
+}
+
+void DTLS_set_timer_cb(SSL *s, DTLS_timer_cb cb)
+{
+    s->d1->timer_cb = cb;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/d1_msg.c b/trunk/3rdparty/openssl-1.1-fit/ssl/d1_msg.c
new file mode 100644
index 000000000..5906e88ca
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/d1_msg.c
@@ -0,0 +1,73 @@
+/*
+ * Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "ssl_locl.h"
+
+int dtls1_write_app_data_bytes(SSL *s, int type, const void *buf_, size_t len,
+                               size_t *written)
+{
+    int i;
+
+    if (SSL_in_init(s) && !ossl_statem_get_in_handshake(s)) {
+        i = s->handshake_func(s);
+        if (i < 0)
+            return i;
+        if (i == 0) {
+            SSLerr(SSL_F_DTLS1_WRITE_APP_DATA_BYTES,
+                   SSL_R_SSL_HANDSHAKE_FAILURE);
+            return -1;
+        }
+    }
+
+    if (len > SSL3_RT_MAX_PLAIN_LENGTH) {
+        SSLerr(SSL_F_DTLS1_WRITE_APP_DATA_BYTES, SSL_R_DTLS_MESSAGE_TOO_BIG);
+        return -1;
+    }
+
+    return dtls1_write_bytes(s, type, buf_, len, written);
+}
+
+int dtls1_dispatch_alert(SSL *s)
+{
+    int i, j;
+    void (*cb) (const SSL *ssl, int type, int val) = NULL;
+    unsigned char buf[DTLS1_AL_HEADER_LENGTH];
+    unsigned char *ptr = &buf[0];
+    size_t written;
+
+    s->s3->alert_dispatch = 0;
+
+    memset(buf, 0, sizeof(buf));
+    *ptr++ = s->s3->send_alert[0];
+    *ptr++ = s->s3->send_alert[1];
+
+    i = do_dtls1_write(s, SSL3_RT_ALERT, &buf[0], sizeof(buf), 0, &written);
+    if (i <= 0) {
+        s->s3->alert_dispatch = 1;
+        /* fprintf( stderr, "not done with alert\n" ); */
+    } else {
+        if (s->s3->send_alert[0] == SSL3_AL_FATAL)
+            (void)BIO_flush(s->wbio);
+
+        if (s->msg_callback)
+            s->msg_callback(1, s->version, SSL3_RT_ALERT, s->s3->send_alert,
+                            2, s, s->msg_callback_arg);
+
+        if (s->info_callback != NULL)
+            cb = s->info_callback;
+        else if (s->ctx->info_callback != NULL)
+            cb = s->ctx->info_callback;
+
+        if (cb != NULL) {
+            j = (s->s3->send_alert[0] << 8) | s->s3->send_alert[1];
+            cb(s, SSL_CB_WRITE_ALERT, j);
+        }
+    }
+    return i;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/d1_srtp.c b/trunk/3rdparty/openssl-1.1-fit/ssl/d1_srtp.c
new file mode 100644
index 000000000..ff8f0c571
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/d1_srtp.c
@@ -0,0 +1,139 @@
+/*
+ * Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * DTLS code by Eric Rescorla <ekr@rtfm.com>
+ *
+ * Copyright (C) 2006, Network Resonance, Inc. Copyright (C) 2011, RTFM, Inc.
+ */
+
+#include <stdio.h>
+#include <openssl/objects.h>
+#include "ssl_locl.h"
+
+#ifndef OPENSSL_NO_SRTP
+
+static SRTP_PROTECTION_PROFILE srtp_known_profiles[] = {
+    {
+     "SRTP_AES128_CM_SHA1_80",
+     SRTP_AES128_CM_SHA1_80,
+     },
+    {
+     "SRTP_AES128_CM_SHA1_32",
+     SRTP_AES128_CM_SHA1_32,
+     },
+    {
+     "SRTP_AEAD_AES_128_GCM",
+     SRTP_AEAD_AES_128_GCM,
+     },
+    {
+     "SRTP_AEAD_AES_256_GCM",
+     SRTP_AEAD_AES_256_GCM,
+     },
+    {0}
+};
+
+static int find_profile_by_name(char *profile_name,
+                                SRTP_PROTECTION_PROFILE **pptr, size_t len)
+{
+    SRTP_PROTECTION_PROFILE *p;
+
+    p = srtp_known_profiles;
+    while (p->name) {
+        if ((len == strlen(p->name))
+            && strncmp(p->name, profile_name, len) == 0) {
+            *pptr = p;
+            return 0;
+        }
+
+        p++;
+    }
+
+    return 1;
+}
+
+static int ssl_ctx_make_profiles(const char *profiles_string,
+                                 STACK_OF(SRTP_PROTECTION_PROFILE) **out)
+{
+    STACK_OF(SRTP_PROTECTION_PROFILE) *profiles;
+
+    char *col;
+    char *ptr = (char *)profiles_string;
+    SRTP_PROTECTION_PROFILE *p;
+
+    if ((profiles = sk_SRTP_PROTECTION_PROFILE_new_null()) == NULL) {
+        SSLerr(SSL_F_SSL_CTX_MAKE_PROFILES,
+               SSL_R_SRTP_COULD_NOT_ALLOCATE_PROFILES);
+        return 1;
+    }
+
+    do {
+        col = strchr(ptr, ':');
+
+        if (!find_profile_by_name(ptr, &p, col ? (size_t)(col - ptr)
+                                               : strlen(ptr))) {
+            if (sk_SRTP_PROTECTION_PROFILE_find(profiles, p) >= 0) {
+                SSLerr(SSL_F_SSL_CTX_MAKE_PROFILES,
+                       SSL_R_BAD_SRTP_PROTECTION_PROFILE_LIST);
+                goto err;
+            }
+
+            if (!sk_SRTP_PROTECTION_PROFILE_push(profiles, p)) {
+                SSLerr(SSL_F_SSL_CTX_MAKE_PROFILES,
+                       SSL_R_SRTP_COULD_NOT_ALLOCATE_PROFILES);
+                goto err;
+            }
+        } else {
+            SSLerr(SSL_F_SSL_CTX_MAKE_PROFILES,
+                   SSL_R_SRTP_UNKNOWN_PROTECTION_PROFILE);
+            goto err;
+        }
+
+        if (col)
+            ptr = col + 1;
+    } while (col);
+
+    sk_SRTP_PROTECTION_PROFILE_free(*out);
+
+    *out = profiles;
+
+    return 0;
+ err:
+    sk_SRTP_PROTECTION_PROFILE_free(profiles);
+    return 1;
+}
+
+int SSL_CTX_set_tlsext_use_srtp(SSL_CTX *ctx, const char *profiles)
+{
+    return ssl_ctx_make_profiles(profiles, &ctx->srtp_profiles);
+}
+
+int SSL_set_tlsext_use_srtp(SSL *s, const char *profiles)
+{
+    return ssl_ctx_make_profiles(profiles, &s->srtp_profiles);
+}
+
+STACK_OF(SRTP_PROTECTION_PROFILE) *SSL_get_srtp_profiles(SSL *s)
+{
+    if (s != NULL) {
+        if (s->srtp_profiles != NULL) {
+            return s->srtp_profiles;
+        } else if ((s->ctx != NULL) && (s->ctx->srtp_profiles != NULL)) {
+            return s->ctx->srtp_profiles;
+        }
+    }
+
+    return NULL;
+}
+
+SRTP_PROTECTION_PROFILE *SSL_get_selected_srtp_profile(SSL *s)
+{
+    return s->srtp_profile;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/methods.c b/trunk/3rdparty/openssl-1.1-fit/ssl/methods.c
new file mode 100644
index 000000000..348efe467
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/methods.c
@@ -0,0 +1,278 @@
+/*
+ * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <openssl/objects.h>
+#include "ssl_locl.h"
+
+/*-
+ * TLS/SSLv3 methods
+ */
+
+IMPLEMENT_tls_meth_func(TLS_ANY_VERSION, 0, 0,
+                        TLS_method,
+                        ossl_statem_accept,
+                        ossl_statem_connect, TLSv1_2_enc_data)
+IMPLEMENT_tls_meth_func(TLS1_3_VERSION, 0, SSL_OP_NO_TLSv1_3,
+                        tlsv1_3_method,
+                        ossl_statem_accept,
+                        ossl_statem_connect, TLSv1_3_enc_data)
+#ifndef OPENSSL_NO_TLS1_2_METHOD
+IMPLEMENT_tls_meth_func(TLS1_2_VERSION, 0, SSL_OP_NO_TLSv1_2,
+                        tlsv1_2_method,
+                        ossl_statem_accept,
+                        ossl_statem_connect, TLSv1_2_enc_data)
+#endif
+#ifndef OPENSSL_NO_TLS1_1_METHOD
+IMPLEMENT_tls_meth_func(TLS1_1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_TLSv1_1,
+                        tlsv1_1_method,
+                        ossl_statem_accept,
+                        ossl_statem_connect, TLSv1_1_enc_data)
+#endif
+#ifndef OPENSSL_NO_TLS1_METHOD
+IMPLEMENT_tls_meth_func(TLS1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_TLSv1,
+                        tlsv1_method,
+                        ossl_statem_accept, ossl_statem_connect, TLSv1_enc_data)
+#endif
+#ifndef OPENSSL_NO_SSL3_METHOD
+IMPLEMENT_ssl3_meth_func(sslv3_method, ossl_statem_accept, ossl_statem_connect)
+#endif
+/*-
+ * TLS/SSLv3 server methods
+ */
+IMPLEMENT_tls_meth_func(TLS_ANY_VERSION, 0, 0,
+                        TLS_server_method,
+                        ossl_statem_accept,
+                        ssl_undefined_function, TLSv1_2_enc_data)
+IMPLEMENT_tls_meth_func(TLS1_3_VERSION, 0, SSL_OP_NO_TLSv1_3,
+                        tlsv1_3_server_method,
+                        ossl_statem_accept,
+                        ssl_undefined_function, TLSv1_3_enc_data)
+#ifndef OPENSSL_NO_TLS1_2_METHOD
+IMPLEMENT_tls_meth_func(TLS1_2_VERSION, 0, SSL_OP_NO_TLSv1_2,
+                        tlsv1_2_server_method,
+                        ossl_statem_accept,
+                        ssl_undefined_function, TLSv1_2_enc_data)
+#endif
+#ifndef OPENSSL_NO_TLS1_1_METHOD
+IMPLEMENT_tls_meth_func(TLS1_1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_TLSv1_1,
+                        tlsv1_1_server_method,
+                        ossl_statem_accept,
+                        ssl_undefined_function, TLSv1_1_enc_data)
+#endif
+#ifndef OPENSSL_NO_TLS1_METHOD
+IMPLEMENT_tls_meth_func(TLS1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_TLSv1,
+                        tlsv1_server_method,
+                        ossl_statem_accept,
+                        ssl_undefined_function, TLSv1_enc_data)
+#endif
+#ifndef OPENSSL_NO_SSL3_METHOD
+IMPLEMENT_ssl3_meth_func(sslv3_server_method,
+                         ossl_statem_accept, ssl_undefined_function)
+#endif
+/*-
+ * TLS/SSLv3 client methods
+ */
+IMPLEMENT_tls_meth_func(TLS_ANY_VERSION, 0, 0,
+                        TLS_client_method,
+                        ssl_undefined_function,
+                        ossl_statem_connect, TLSv1_2_enc_data)
+IMPLEMENT_tls_meth_func(TLS1_3_VERSION, 0, SSL_OP_NO_TLSv1_3,
+                        tlsv1_3_client_method,
+                        ssl_undefined_function,
+                        ossl_statem_connect, TLSv1_3_enc_data)
+#ifndef OPENSSL_NO_TLS1_2_METHOD
+IMPLEMENT_tls_meth_func(TLS1_2_VERSION, 0, SSL_OP_NO_TLSv1_2,
+                        tlsv1_2_client_method,
+                        ssl_undefined_function,
+                        ossl_statem_connect, TLSv1_2_enc_data)
+#endif
+#ifndef OPENSSL_NO_TLS1_1_METHOD
+IMPLEMENT_tls_meth_func(TLS1_1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_TLSv1_1,
+                        tlsv1_1_client_method,
+                        ssl_undefined_function,
+                        ossl_statem_connect, TLSv1_1_enc_data)
+#endif
+#ifndef OPENSSL_NO_TLS1_METHOD
+IMPLEMENT_tls_meth_func(TLS1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_TLSv1,
+                        tlsv1_client_method,
+                        ssl_undefined_function,
+                        ossl_statem_connect, TLSv1_enc_data)
+#endif
+#ifndef OPENSSL_NO_SSL3_METHOD
+IMPLEMENT_ssl3_meth_func(sslv3_client_method,
+                         ssl_undefined_function, ossl_statem_connect)
+#endif
+/*-
+ * DTLS methods
+ */
+#ifndef OPENSSL_NO_DTLS1_METHOD
+IMPLEMENT_dtls1_meth_func(DTLS1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_DTLSv1,
+                          dtlsv1_method,
+                          ossl_statem_accept,
+                          ossl_statem_connect, DTLSv1_enc_data)
+#endif
+#ifndef OPENSSL_NO_DTLS1_2_METHOD
+IMPLEMENT_dtls1_meth_func(DTLS1_2_VERSION, 0, SSL_OP_NO_DTLSv1_2,
+                          dtlsv1_2_method,
+                          ossl_statem_accept,
+                          ossl_statem_connect, DTLSv1_2_enc_data)
+#endif
+IMPLEMENT_dtls1_meth_func(DTLS_ANY_VERSION, 0, 0,
+                          DTLS_method,
+                          ossl_statem_accept,
+                          ossl_statem_connect, DTLSv1_2_enc_data)
+
+/*-
+ * DTLS server methods
+ */
+#ifndef OPENSSL_NO_DTLS1_METHOD
+IMPLEMENT_dtls1_meth_func(DTLS1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_DTLSv1,
+                          dtlsv1_server_method,
+                          ossl_statem_accept,
+                          ssl_undefined_function, DTLSv1_enc_data)
+#endif
+#ifndef OPENSSL_NO_DTLS1_2_METHOD
+IMPLEMENT_dtls1_meth_func(DTLS1_2_VERSION, 0, SSL_OP_NO_DTLSv1_2,
+                          dtlsv1_2_server_method,
+                          ossl_statem_accept,
+                          ssl_undefined_function, DTLSv1_2_enc_data)
+#endif
+IMPLEMENT_dtls1_meth_func(DTLS_ANY_VERSION, 0, 0,
+                          DTLS_server_method,
+                          ossl_statem_accept,
+                          ssl_undefined_function, DTLSv1_2_enc_data)
+
+/*-
+ * DTLS client methods
+ */
+#ifndef OPENSSL_NO_DTLS1_METHOD
+IMPLEMENT_dtls1_meth_func(DTLS1_VERSION, SSL_METHOD_NO_SUITEB, SSL_OP_NO_DTLSv1,
+                          dtlsv1_client_method,
+                          ssl_undefined_function,
+                          ossl_statem_connect, DTLSv1_enc_data)
+IMPLEMENT_dtls1_meth_func(DTLS1_BAD_VER, SSL_METHOD_NO_SUITEB, SSL_OP_NO_DTLSv1,
+                          dtls_bad_ver_client_method,
+                          ssl_undefined_function,
+                          ossl_statem_connect, DTLSv1_enc_data)
+#endif
+#ifndef OPENSSL_NO_DTLS1_2_METHOD
+IMPLEMENT_dtls1_meth_func(DTLS1_2_VERSION, 0, SSL_OP_NO_DTLSv1_2,
+                          dtlsv1_2_client_method,
+                          ssl_undefined_function,
+                          ossl_statem_connect, DTLSv1_2_enc_data)
+#endif
+IMPLEMENT_dtls1_meth_func(DTLS_ANY_VERSION, 0, 0,
+                          DTLS_client_method,
+                          ssl_undefined_function,
+                          ossl_statem_connect, DTLSv1_2_enc_data)
+#if OPENSSL_API_COMPAT < 0x10100000L
+# ifndef OPENSSL_NO_TLS1_2_METHOD
+const SSL_METHOD *TLSv1_2_method(void)
+{
+    return tlsv1_2_method();
+}
+
+const SSL_METHOD *TLSv1_2_server_method(void)
+{
+    return tlsv1_2_server_method();
+}
+
+const SSL_METHOD *TLSv1_2_client_method(void)
+{
+    return tlsv1_2_client_method();
+}
+# endif
+
+# ifndef OPENSSL_NO_TLS1_1_METHOD
+const SSL_METHOD *TLSv1_1_method(void)
+{
+    return tlsv1_1_method();
+}
+
+const SSL_METHOD *TLSv1_1_server_method(void)
+{
+    return tlsv1_1_server_method();
+}
+
+const SSL_METHOD *TLSv1_1_client_method(void)
+{
+    return tlsv1_1_client_method();
+}
+# endif
+
+# ifndef OPENSSL_NO_TLS1_METHOD
+const SSL_METHOD *TLSv1_method(void)
+{
+    return tlsv1_method();
+}
+
+const SSL_METHOD *TLSv1_server_method(void)
+{
+    return tlsv1_server_method();
+}
+
+const SSL_METHOD *TLSv1_client_method(void)
+{
+    return tlsv1_client_method();
+}
+# endif
+
+# ifndef OPENSSL_NO_SSL3_METHOD
+const SSL_METHOD *SSLv3_method(void)
+{
+    return sslv3_method();
+}
+
+const SSL_METHOD *SSLv3_server_method(void)
+{
+    return sslv3_server_method();
+}
+
+const SSL_METHOD *SSLv3_client_method(void)
+{
+    return sslv3_client_method();
+}
+# endif
+
+# ifndef OPENSSL_NO_DTLS1_2_METHOD
+const SSL_METHOD *DTLSv1_2_method(void)
+{
+    return dtlsv1_2_method();
+}
+
+const SSL_METHOD *DTLSv1_2_server_method(void)
+{
+    return dtlsv1_2_server_method();
+}
+
+const SSL_METHOD *DTLSv1_2_client_method(void)
+{
+    return dtlsv1_2_client_method();
+}
+# endif
+
+# ifndef OPENSSL_NO_DTLS1_METHOD
+const SSL_METHOD *DTLSv1_method(void)
+{
+    return dtlsv1_method();
+}
+
+const SSL_METHOD *DTLSv1_server_method(void)
+{
+    return dtlsv1_server_method();
+}
+
+const SSL_METHOD *DTLSv1_client_method(void)
+{
+    return dtlsv1_client_method();
+}
+# endif
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/packet.c b/trunk/3rdparty/openssl-1.1-fit/ssl/packet.c
new file mode 100644
index 000000000..95031430e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/packet.c
@@ -0,0 +1,424 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include "packet_locl.h"
+#include <openssl/sslerr.h>
+
+#define DEFAULT_BUF_SIZE    256
+
+int WPACKET_allocate_bytes(WPACKET *pkt, size_t len, unsigned char **allocbytes)
+{
+    if (!WPACKET_reserve_bytes(pkt, len, allocbytes))
+        return 0;
+
+    pkt->written += len;
+    pkt->curr += len;
+    return 1;
+}
+
+int WPACKET_sub_allocate_bytes__(WPACKET *pkt, size_t len,
+                                 unsigned char **allocbytes, size_t lenbytes)
+{
+    if (!WPACKET_start_sub_packet_len__(pkt, lenbytes)
+            || !WPACKET_allocate_bytes(pkt, len, allocbytes)
+            || !WPACKET_close(pkt))
+        return 0;
+
+    return 1;
+}
+
+#define GETBUF(p)   (((p)->staticbuf != NULL) \
+                     ? (p)->staticbuf : (unsigned char *)(p)->buf->data)
+
+int WPACKET_reserve_bytes(WPACKET *pkt, size_t len, unsigned char **allocbytes)
+{
+    /* Internal API, so should not fail */
+    if (!ossl_assert(pkt->subs != NULL && len != 0))
+        return 0;
+
+    if (pkt->maxsize - pkt->written < len)
+        return 0;
+
+    if (pkt->staticbuf == NULL && (pkt->buf->length - pkt->written < len)) {
+        size_t newlen;
+        size_t reflen;
+
+        reflen = (len > pkt->buf->length) ? len : pkt->buf->length;
+
+        if (reflen > SIZE_MAX / 2) {
+            newlen = SIZE_MAX;
+        } else {
+            newlen = reflen * 2;
+            if (newlen < DEFAULT_BUF_SIZE)
+                newlen = DEFAULT_BUF_SIZE;
+        }
+        if (BUF_MEM_grow(pkt->buf, newlen) == 0)
+            return 0;
+    }
+    if (allocbytes != NULL)
+        *allocbytes = WPACKET_get_curr(pkt);
+
+    return 1;
+}
+
+int WPACKET_sub_reserve_bytes__(WPACKET *pkt, size_t len,
+                                unsigned char **allocbytes, size_t lenbytes)
+{
+    if (!WPACKET_reserve_bytes(pkt, lenbytes + len, allocbytes))
+        return 0;
+
+    *allocbytes += lenbytes;
+
+    return 1;
+}
+
+static size_t maxmaxsize(size_t lenbytes)
+{
+    if (lenbytes >= sizeof(size_t) || lenbytes == 0)
+        return SIZE_MAX;
+
+    return ((size_t)1 << (lenbytes * 8)) - 1 + lenbytes;
+}
+
+static int wpacket_intern_init_len(WPACKET *pkt, size_t lenbytes)
+{
+    unsigned char *lenchars;
+
+    pkt->curr = 0;
+    pkt->written = 0;
+
+    if ((pkt->subs = OPENSSL_zalloc(sizeof(*pkt->subs))) == NULL) {
+        SSLerr(SSL_F_WPACKET_INTERN_INIT_LEN, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    if (lenbytes == 0)
+        return 1;
+
+    pkt->subs->pwritten = lenbytes;
+    pkt->subs->lenbytes = lenbytes;
+
+    if (!WPACKET_allocate_bytes(pkt, lenbytes, &lenchars)) {
+        OPENSSL_free(pkt->subs);
+        pkt->subs = NULL;
+        return 0;
+    }
+    pkt->subs->packet_len = lenchars - GETBUF(pkt);
+
+    return 1;
+}
+
+int WPACKET_init_static_len(WPACKET *pkt, unsigned char *buf, size_t len,
+                            size_t lenbytes)
+{
+    size_t max = maxmaxsize(lenbytes);
+
+    /* Internal API, so should not fail */
+    if (!ossl_assert(buf != NULL && len > 0))
+        return 0;
+
+    pkt->staticbuf = buf;
+    pkt->buf = NULL;
+    pkt->maxsize = (max < len) ? max : len;
+
+    return wpacket_intern_init_len(pkt, lenbytes);
+}
+
+int WPACKET_init_len(WPACKET *pkt, BUF_MEM *buf, size_t lenbytes)
+{
+    /* Internal API, so should not fail */
+    if (!ossl_assert(buf != NULL))
+        return 0;
+
+    pkt->staticbuf = NULL;
+    pkt->buf = buf;
+    pkt->maxsize = maxmaxsize(lenbytes);
+
+    return wpacket_intern_init_len(pkt, lenbytes);
+}
+
+int WPACKET_init(WPACKET *pkt, BUF_MEM *buf)
+{
+    return WPACKET_init_len(pkt, buf, 0);
+}
+
+int WPACKET_set_flags(WPACKET *pkt, unsigned int flags)
+{
+    /* Internal API, so should not fail */
+    if (!ossl_assert(pkt->subs != NULL))
+        return 0;
+
+    pkt->subs->flags = flags;
+
+    return 1;
+}
+
+/* Store the |value| of length |len| at location |data| */
+static int put_value(unsigned char *data, size_t value, size_t len)
+{
+    for (data += len - 1; len > 0; len--) {
+        *data = (unsigned char)(value & 0xff);
+        data--;
+        value >>= 8;
+    }
+
+    /* Check whether we could fit the value in the assigned number of bytes */
+    if (value > 0)
+        return 0;
+
+    return 1;
+}
+
+
+/*
+ * Internal helper function used by WPACKET_close(), WPACKET_finish() and
+ * WPACKET_fill_lengths() to close a sub-packet and write out its length if
+ * necessary. If |doclose| is 0 then it goes through the motions of closing
+ * (i.e. it fills in all the lengths), but doesn't actually close anything.
+ */
+static int wpacket_intern_close(WPACKET *pkt, WPACKET_SUB *sub, int doclose)
+{
+    size_t packlen = pkt->written - sub->pwritten;
+
+    if (packlen == 0
+            && (sub->flags & WPACKET_FLAGS_NON_ZERO_LENGTH) != 0)
+        return 0;
+
+    if (packlen == 0
+            && sub->flags & WPACKET_FLAGS_ABANDON_ON_ZERO_LENGTH) {
+        /* We can't handle this case. Return an error */
+        if (!doclose)
+            return 0;
+
+        /* Deallocate any bytes allocated for the length of the WPACKET */
+        if ((pkt->curr - sub->lenbytes) == sub->packet_len) {
+            pkt->written -= sub->lenbytes;
+            pkt->curr -= sub->lenbytes;
+        }
+
+        /* Don't write out the packet length */
+        sub->packet_len = 0;
+        sub->lenbytes = 0;
+    }
+
+    /* Write out the WPACKET length if needed */
+    if (sub->lenbytes > 0
+                && !put_value(&GETBUF(pkt)[sub->packet_len], packlen,
+                              sub->lenbytes))
+            return 0;
+
+    if (doclose) {
+        pkt->subs = sub->parent;
+        OPENSSL_free(sub);
+    }
+
+    return 1;
+}
+
+int WPACKET_fill_lengths(WPACKET *pkt)
+{
+    WPACKET_SUB *sub;
+
+    if (!ossl_assert(pkt->subs != NULL))
+        return 0;
+
+    for (sub = pkt->subs; sub != NULL; sub = sub->parent) {
+        if (!wpacket_intern_close(pkt, sub, 0))
+            return 0;
+    }
+
+    return 1;
+}
+
+int WPACKET_close(WPACKET *pkt)
+{
+    /*
+     * Internal API, so should not fail - but we do negative testing of this
+     * so no assert (otherwise the tests fail)
+     */
+    if (pkt->subs == NULL || pkt->subs->parent == NULL)
+        return 0;
+
+    return wpacket_intern_close(pkt, pkt->subs, 1);
+}
+
+int WPACKET_finish(WPACKET *pkt)
+{
+    int ret;
+
+    /*
+     * Internal API, so should not fail - but we do negative testing of this
+     * so no assert (otherwise the tests fail)
+     */
+    if (pkt->subs == NULL || pkt->subs->parent != NULL)
+        return 0;
+
+    ret = wpacket_intern_close(pkt, pkt->subs, 1);
+    if (ret) {
+        OPENSSL_free(pkt->subs);
+        pkt->subs = NULL;
+    }
+
+    return ret;
+}
+
+int WPACKET_start_sub_packet_len__(WPACKET *pkt, size_t lenbytes)
+{
+    WPACKET_SUB *sub;
+    unsigned char *lenchars;
+
+    /* Internal API, so should not fail */
+    if (!ossl_assert(pkt->subs != NULL))
+        return 0;
+
+    if ((sub = OPENSSL_zalloc(sizeof(*sub))) == NULL) {
+        SSLerr(SSL_F_WPACKET_START_SUB_PACKET_LEN__, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    sub->parent = pkt->subs;
+    pkt->subs = sub;
+    sub->pwritten = pkt->written + lenbytes;
+    sub->lenbytes = lenbytes;
+
+    if (lenbytes == 0) {
+        sub->packet_len = 0;
+        return 1;
+    }
+
+    if (!WPACKET_allocate_bytes(pkt, lenbytes, &lenchars))
+        return 0;
+    /* Convert to an offset in case the underlying BUF_MEM gets realloc'd */
+    sub->packet_len = lenchars - GETBUF(pkt);
+
+    return 1;
+}
+
+int WPACKET_start_sub_packet(WPACKET *pkt)
+{
+    return WPACKET_start_sub_packet_len__(pkt, 0);
+}
+
+int WPACKET_put_bytes__(WPACKET *pkt, unsigned int val, size_t size)
+{
+    unsigned char *data;
+
+    /* Internal API, so should not fail */
+    if (!ossl_assert(size <= sizeof(unsigned int))
+            || !WPACKET_allocate_bytes(pkt, size, &data)
+            || !put_value(data, val, size))
+        return 0;
+
+    return 1;
+}
+
+int WPACKET_set_max_size(WPACKET *pkt, size_t maxsize)
+{
+    WPACKET_SUB *sub;
+    size_t lenbytes;
+
+    /* Internal API, so should not fail */
+    if (!ossl_assert(pkt->subs != NULL))
+        return 0;
+
+    /* Find the WPACKET_SUB for the top level */
+    for (sub = pkt->subs; sub->parent != NULL; sub = sub->parent)
+        continue;
+
+    lenbytes = sub->lenbytes;
+    if (lenbytes == 0)
+        lenbytes = sizeof(pkt->maxsize);
+
+    if (maxmaxsize(lenbytes) < maxsize || maxsize < pkt->written)
+        return 0;
+
+    pkt->maxsize = maxsize;
+
+    return 1;
+}
+
+int WPACKET_memset(WPACKET *pkt, int ch, size_t len)
+{
+    unsigned char *dest;
+
+    if (len == 0)
+        return 1;
+
+    if (!WPACKET_allocate_bytes(pkt, len, &dest))
+        return 0;
+
+    memset(dest, ch, len);
+
+    return 1;
+}
+
+int WPACKET_memcpy(WPACKET *pkt, const void *src, size_t len)
+{
+    unsigned char *dest;
+
+    if (len == 0)
+        return 1;
+
+    if (!WPACKET_allocate_bytes(pkt, len, &dest))
+        return 0;
+
+    memcpy(dest, src, len);
+
+    return 1;
+}
+
+int WPACKET_sub_memcpy__(WPACKET *pkt, const void *src, size_t len,
+                         size_t lenbytes)
+{
+    if (!WPACKET_start_sub_packet_len__(pkt, lenbytes)
+            || !WPACKET_memcpy(pkt, src, len)
+            || !WPACKET_close(pkt))
+        return 0;
+
+    return 1;
+}
+
+int WPACKET_get_total_written(WPACKET *pkt, size_t *written)
+{
+    /* Internal API, so should not fail */
+    if (!ossl_assert(written != NULL))
+        return 0;
+
+    *written = pkt->written;
+
+    return 1;
+}
+
+int WPACKET_get_length(WPACKET *pkt, size_t *len)
+{
+    /* Internal API, so should not fail */
+    if (!ossl_assert(pkt->subs != NULL && len != NULL))
+        return 0;
+
+    *len = pkt->written - pkt->subs->pwritten;
+
+    return 1;
+}
+
+unsigned char *WPACKET_get_curr(WPACKET *pkt)
+{
+    return GETBUF(pkt) + pkt->curr;
+}
+
+void WPACKET_cleanup(WPACKET *pkt)
+{
+    WPACKET_SUB *sub, *parent;
+
+    for (sub = pkt->subs; sub != NULL; sub = parent) {
+        parent = sub->parent;
+        OPENSSL_free(sub);
+    }
+    pkt->subs = NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/packet_locl.h b/trunk/3rdparty/openssl-1.1-fit/ssl/packet_locl.h
new file mode 100644
index 000000000..860360b8b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/packet_locl.h
@@ -0,0 +1,874 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_PACKET_LOCL_H
+# define HEADER_PACKET_LOCL_H
+
+# include <string.h>
+# include <openssl/bn.h>
+# include <openssl/buffer.h>
+# include <openssl/crypto.h>
+# include <openssl/e_os2.h>
+
+# include "internal/numbers.h"
+
+typedef struct {
+    /* Pointer to where we are currently reading from */
+    const unsigned char *curr;
+    /* Number of bytes remaining */
+    size_t remaining;
+} PACKET;
+
+/* Internal unchecked shorthand; don't use outside this file. */
+static ossl_inline void packet_forward(PACKET *pkt, size_t len)
+{
+    pkt->curr += len;
+    pkt->remaining -= len;
+}
+
+/*
+ * Returns the number of bytes remaining to be read in the PACKET
+ */
+static ossl_inline size_t PACKET_remaining(const PACKET *pkt)
+{
+    return pkt->remaining;
+}
+
+/*
+ * Returns a pointer to the first byte after the packet data.
+ * Useful for integrating with non-PACKET parsing code.
+ * Specifically, we use PACKET_end() to verify that a d2i_... call
+ * has consumed the entire packet contents.
+ */
+static ossl_inline const unsigned char *PACKET_end(const PACKET *pkt)
+{
+    return pkt->curr + pkt->remaining;
+}
+
+/*
+ * Returns a pointer to the PACKET's current position.
+ * For use in non-PACKETized APIs.
+ */
+static ossl_inline const unsigned char *PACKET_data(const PACKET *pkt)
+{
+    return pkt->curr;
+}
+
+/*
+ * Initialise a PACKET with |len| bytes held in |buf|. This does not make a
+ * copy of the data so |buf| must be present for the whole time that the PACKET
+ * is being used.
+ */
+__owur static ossl_inline int PACKET_buf_init(PACKET *pkt,
+                                              const unsigned char *buf,
+                                              size_t len)
+{
+    /* Sanity check for negative values. */
+    if (len > (size_t)(SIZE_MAX / 2))
+        return 0;
+
+    pkt->curr = buf;
+    pkt->remaining = len;
+    return 1;
+}
+
+/* Initialize a PACKET to hold zero bytes. */
+static ossl_inline void PACKET_null_init(PACKET *pkt)
+{
+    pkt->curr = NULL;
+    pkt->remaining = 0;
+}
+
+/*
+ * Returns 1 if the packet has length |num| and its contents equal the |num|
+ * bytes read from |ptr|. Returns 0 otherwise (lengths or contents not equal).
+ * If lengths are equal, performs the comparison in constant time.
+ */
+__owur static ossl_inline int PACKET_equal(const PACKET *pkt, const void *ptr,
+                                           size_t num)
+{
+    if (PACKET_remaining(pkt) != num)
+        return 0;
+    return CRYPTO_memcmp(pkt->curr, ptr, num) == 0;
+}
+
+/*
+ * Peek ahead and initialize |subpkt| with the next |len| bytes read from |pkt|.
+ * Data is not copied: the |subpkt| packet will share its underlying buffer with
+ * the original |pkt|, so data wrapped by |pkt| must outlive the |subpkt|.
+ */
+__owur static ossl_inline int PACKET_peek_sub_packet(const PACKET *pkt,
+                                                     PACKET *subpkt, size_t len)
+{
+    if (PACKET_remaining(pkt) < len)
+        return 0;
+
+    return PACKET_buf_init(subpkt, pkt->curr, len);
+}
+
+/*
+ * Initialize |subpkt| with the next |len| bytes read from |pkt|. Data is not
+ * copied: the |subpkt| packet will share its underlying buffer with the
+ * original |pkt|, so data wrapped by |pkt| must outlive the |subpkt|.
+ */
+__owur static ossl_inline int PACKET_get_sub_packet(PACKET *pkt,
+                                                    PACKET *subpkt, size_t len)
+{
+    if (!PACKET_peek_sub_packet(pkt, subpkt, len))
+        return 0;
+
+    packet_forward(pkt, len);
+
+    return 1;
+}
+
+/*
+ * Peek ahead at 2 bytes in network order from |pkt| and store the value in
+ * |*data|
+ */
+__owur static ossl_inline int PACKET_peek_net_2(const PACKET *pkt,
+                                                unsigned int *data)
+{
+    if (PACKET_remaining(pkt) < 2)
+        return 0;
+
+    *data = ((unsigned int)(*pkt->curr)) << 8;
+    *data |= *(pkt->curr + 1);
+
+    return 1;
+}
+
+/* Equivalent of n2s */
+/* Get 2 bytes in network order from |pkt| and store the value in |*data| */
+__owur static ossl_inline int PACKET_get_net_2(PACKET *pkt, unsigned int *data)
+{
+    if (!PACKET_peek_net_2(pkt, data))
+        return 0;
+
+    packet_forward(pkt, 2);
+
+    return 1;
+}
+
+/* Same as PACKET_get_net_2() but for a size_t */
+__owur static ossl_inline int PACKET_get_net_2_len(PACKET *pkt, size_t *data)
+{
+    unsigned int i;
+    int ret = PACKET_get_net_2(pkt, &i);
+
+    if (ret)
+        *data = (size_t)i;
+
+    return ret;
+}
+
+/*
+ * Peek ahead at 3 bytes in network order from |pkt| and store the value in
+ * |*data|
+ */
+__owur static ossl_inline int PACKET_peek_net_3(const PACKET *pkt,
+                                                unsigned long *data)
+{
+    if (PACKET_remaining(pkt) < 3)
+        return 0;
+
+    *data = ((unsigned long)(*pkt->curr)) << 16;
+    *data |= ((unsigned long)(*(pkt->curr + 1))) << 8;
+    *data |= *(pkt->curr + 2);
+
+    return 1;
+}
+
+/* Equivalent of n2l3 */
+/* Get 3 bytes in network order from |pkt| and store the value in |*data| */
+__owur static ossl_inline int PACKET_get_net_3(PACKET *pkt, unsigned long *data)
+{
+    if (!PACKET_peek_net_3(pkt, data))
+        return 0;
+
+    packet_forward(pkt, 3);
+
+    return 1;
+}
+
+/* Same as PACKET_get_net_3() but for a size_t */
+__owur static ossl_inline int PACKET_get_net_3_len(PACKET *pkt, size_t *data)
+{
+    unsigned long i;
+    int ret = PACKET_get_net_3(pkt, &i);
+
+    if (ret)
+        *data = (size_t)i;
+
+    return ret;
+}
+
+/*
+ * Peek ahead at 4 bytes in network order from |pkt| and store the value in
+ * |*data|
+ */
+__owur static ossl_inline int PACKET_peek_net_4(const PACKET *pkt,
+                                                unsigned long *data)
+{
+    if (PACKET_remaining(pkt) < 4)
+        return 0;
+
+    *data = ((unsigned long)(*pkt->curr)) << 24;
+    *data |= ((unsigned long)(*(pkt->curr + 1))) << 16;
+    *data |= ((unsigned long)(*(pkt->curr + 2))) << 8;
+    *data |= *(pkt->curr + 3);
+
+    return 1;
+}
+
+/* Equivalent of n2l */
+/* Get 4 bytes in network order from |pkt| and store the value in |*data| */
+__owur static ossl_inline int PACKET_get_net_4(PACKET *pkt, unsigned long *data)
+{
+    if (!PACKET_peek_net_4(pkt, data))
+        return 0;
+
+    packet_forward(pkt, 4);
+
+    return 1;
+}
+
+/* Same as PACKET_get_net_4() but for a size_t */
+__owur static ossl_inline int PACKET_get_net_4_len(PACKET *pkt, size_t *data)
+{
+    unsigned long i;
+    int ret = PACKET_get_net_4(pkt, &i);
+
+    if (ret)
+        *data = (size_t)i;
+
+    return ret;
+}
+
+/* Peek ahead at 1 byte from |pkt| and store the value in |*data| */
+__owur static ossl_inline int PACKET_peek_1(const PACKET *pkt,
+                                            unsigned int *data)
+{
+    if (!PACKET_remaining(pkt))
+        return 0;
+
+    *data = *pkt->curr;
+
+    return 1;
+}
+
+/* Get 1 byte from |pkt| and store the value in |*data| */
+__owur static ossl_inline int PACKET_get_1(PACKET *pkt, unsigned int *data)
+{
+    if (!PACKET_peek_1(pkt, data))
+        return 0;
+
+    packet_forward(pkt, 1);
+
+    return 1;
+}
+
+/* Same as PACKET_get_1() but for a size_t */
+__owur static ossl_inline int PACKET_get_1_len(PACKET *pkt, size_t *data)
+{
+    unsigned int i;
+    int ret = PACKET_get_1(pkt, &i);
+
+    if (ret)
+        *data = (size_t)i;
+
+    return ret;
+}
+
+/*
+ * Peek ahead at 4 bytes in reverse network order from |pkt| and store the value
+ * in |*data|
+ */
+__owur static ossl_inline int PACKET_peek_4(const PACKET *pkt,
+                                            unsigned long *data)
+{
+    if (PACKET_remaining(pkt) < 4)
+        return 0;
+
+    *data = *pkt->curr;
+    *data |= ((unsigned long)(*(pkt->curr + 1))) << 8;
+    *data |= ((unsigned long)(*(pkt->curr + 2))) << 16;
+    *data |= ((unsigned long)(*(pkt->curr + 3))) << 24;
+
+    return 1;
+}
+
+/* Equivalent of c2l */
+/*
+ * Get 4 bytes in reverse network order from |pkt| and store the value in
+ * |*data|
+ */
+__owur static ossl_inline int PACKET_get_4(PACKET *pkt, unsigned long *data)
+{
+    if (!PACKET_peek_4(pkt, data))
+        return 0;
+
+    packet_forward(pkt, 4);
+
+    return 1;
+}
+
+/*
+ * Peek ahead at |len| bytes from the |pkt| and store a pointer to them in
+ * |*data|. This just points at the underlying buffer that |pkt| is using. The
+ * caller should not free this data directly (it will be freed when the
+ * underlying buffer gets freed
+ */
+__owur static ossl_inline int PACKET_peek_bytes(const PACKET *pkt,
+                                                const unsigned char **data,
+                                                size_t len)
+{
+    if (PACKET_remaining(pkt) < len)
+        return 0;
+
+    *data = pkt->curr;
+
+    return 1;
+}
+
+/*
+ * Read |len| bytes from the |pkt| and store a pointer to them in |*data|. This
+ * just points at the underlying buffer that |pkt| is using. The caller should
+ * not free this data directly (it will be freed when the underlying buffer gets
+ * freed
+ */
+__owur static ossl_inline int PACKET_get_bytes(PACKET *pkt,
+                                               const unsigned char **data,
+                                               size_t len)
+{
+    if (!PACKET_peek_bytes(pkt, data, len))
+        return 0;
+
+    packet_forward(pkt, len);
+
+    return 1;
+}
+
+/* Peek ahead at |len| bytes from |pkt| and copy them to |data| */
+__owur static ossl_inline int PACKET_peek_copy_bytes(const PACKET *pkt,
+                                                     unsigned char *data,
+                                                     size_t len)
+{
+    if (PACKET_remaining(pkt) < len)
+        return 0;
+
+    memcpy(data, pkt->curr, len);
+
+    return 1;
+}
+
+/*
+ * Read |len| bytes from |pkt| and copy them to |data|.
+ * The caller is responsible for ensuring that |data| can hold |len| bytes.
+ */
+__owur static ossl_inline int PACKET_copy_bytes(PACKET *pkt,
+                                                unsigned char *data, size_t len)
+{
+    if (!PACKET_peek_copy_bytes(pkt, data, len))
+        return 0;
+
+    packet_forward(pkt, len);
+
+    return 1;
+}
+
+/*
+ * Copy packet data to |dest|, and set |len| to the number of copied bytes.
+ * If the packet has more than |dest_len| bytes, nothing is copied.
+ * Returns 1 if the packet data fits in |dest_len| bytes, 0 otherwise.
+ * Does not forward PACKET position (because it is typically the last thing
+ * done with a given PACKET).
+ */
+__owur static ossl_inline int PACKET_copy_all(const PACKET *pkt,
+                                              unsigned char *dest,
+                                              size_t dest_len, size_t *len)
+{
+    if (PACKET_remaining(pkt) > dest_len) {
+        *len = 0;
+        return 0;
+    }
+    *len = pkt->remaining;
+    memcpy(dest, pkt->curr, pkt->remaining);
+    return 1;
+}
+
+/*
+ * Copy |pkt| bytes to a newly allocated buffer and store a pointer to the
+ * result in |*data|, and the length in |len|.
+ * If |*data| is not NULL, the old data is OPENSSL_free'd.
+ * If the packet is empty, or malloc fails, |*data| will be set to NULL.
+ * Returns 1 if the malloc succeeds and 0 otherwise.
+ * Does not forward PACKET position (because it is typically the last thing
+ * done with a given PACKET).
+ */
+__owur static ossl_inline int PACKET_memdup(const PACKET *pkt,
+                                            unsigned char **data, size_t *len)
+{
+    size_t length;
+
+    OPENSSL_free(*data);
+    *data = NULL;
+    *len = 0;
+
+    length = PACKET_remaining(pkt);
+
+    if (length == 0)
+        return 1;
+
+    *data = OPENSSL_memdup(pkt->curr, length);
+    if (*data == NULL)
+        return 0;
+
+    *len = length;
+    return 1;
+}
+
+/*
+ * Read a C string from |pkt| and copy to a newly allocated, NUL-terminated
+ * buffer. Store a pointer to the result in |*data|.
+ * If |*data| is not NULL, the old data is OPENSSL_free'd.
+ * If the data in |pkt| does not contain a NUL-byte, the entire data is
+ * copied and NUL-terminated.
+ * Returns 1 if the malloc succeeds and 0 otherwise.
+ * Does not forward PACKET position (because it is typically the last thing done
+ * with a given PACKET).
+ */
+__owur static ossl_inline int PACKET_strndup(const PACKET *pkt, char **data)
+{
+    OPENSSL_free(*data);
+
+    /* This will succeed on an empty packet, unless pkt->curr == NULL. */
+    *data = OPENSSL_strndup((const char *)pkt->curr, PACKET_remaining(pkt));
+    return (*data != NULL);
+}
+
+/* Returns 1 if |pkt| contains at least one 0-byte, 0 otherwise. */
+static ossl_inline int PACKET_contains_zero_byte(const PACKET *pkt)
+{
+    return memchr(pkt->curr, 0, pkt->remaining) != NULL;
+}
+
+/* Move the current reading position forward |len| bytes */
+__owur static ossl_inline int PACKET_forward(PACKET *pkt, size_t len)
+{
+    if (PACKET_remaining(pkt) < len)
+        return 0;
+
+    packet_forward(pkt, len);
+
+    return 1;
+}
+
+/*
+ * Reads a variable-length vector prefixed with a one-byte length, and stores
+ * the contents in |subpkt|. |pkt| can equal |subpkt|.
+ * Data is not copied: the |subpkt| packet will share its underlying buffer with
+ * the original |pkt|, so data wrapped by |pkt| must outlive the |subpkt|.
+ * Upon failure, the original |pkt| and |subpkt| are not modified.
+ */
+__owur static ossl_inline int PACKET_get_length_prefixed_1(PACKET *pkt,
+                                                           PACKET *subpkt)
+{
+    unsigned int length;
+    const unsigned char *data;
+    PACKET tmp = *pkt;
+    if (!PACKET_get_1(&tmp, &length) ||
+        !PACKET_get_bytes(&tmp, &data, (size_t)length)) {
+        return 0;
+    }
+
+    *pkt = tmp;
+    subpkt->curr = data;
+    subpkt->remaining = length;
+
+    return 1;
+}
+
+/*
+ * Like PACKET_get_length_prefixed_1, but additionally, fails when there are
+ * leftover bytes in |pkt|.
+ */
+__owur static ossl_inline int PACKET_as_length_prefixed_1(PACKET *pkt,
+                                                          PACKET *subpkt)
+{
+    unsigned int length;
+    const unsigned char *data;
+    PACKET tmp = *pkt;
+    if (!PACKET_get_1(&tmp, &length) ||
+        !PACKET_get_bytes(&tmp, &data, (size_t)length) ||
+        PACKET_remaining(&tmp) != 0) {
+        return 0;
+    }
+
+    *pkt = tmp;
+    subpkt->curr = data;
+    subpkt->remaining = length;
+
+    return 1;
+}
+
+/*
+ * Reads a variable-length vector prefixed with a two-byte length, and stores
+ * the contents in |subpkt|. |pkt| can equal |subpkt|.
+ * Data is not copied: the |subpkt| packet will share its underlying buffer with
+ * the original |pkt|, so data wrapped by |pkt| must outlive the |subpkt|.
+ * Upon failure, the original |pkt| and |subpkt| are not modified.
+ */
+__owur static ossl_inline int PACKET_get_length_prefixed_2(PACKET *pkt,
+                                                           PACKET *subpkt)
+{
+    unsigned int length;
+    const unsigned char *data;
+    PACKET tmp = *pkt;
+
+    if (!PACKET_get_net_2(&tmp, &length) ||
+        !PACKET_get_bytes(&tmp, &data, (size_t)length)) {
+        return 0;
+    }
+
+    *pkt = tmp;
+    subpkt->curr = data;
+    subpkt->remaining = length;
+
+    return 1;
+}
+
+/*
+ * Like PACKET_get_length_prefixed_2, but additionally, fails when there are
+ * leftover bytes in |pkt|.
+ */
+__owur static ossl_inline int PACKET_as_length_prefixed_2(PACKET *pkt,
+                                                          PACKET *subpkt)
+{
+    unsigned int length;
+    const unsigned char *data;
+    PACKET tmp = *pkt;
+
+    if (!PACKET_get_net_2(&tmp, &length) ||
+        !PACKET_get_bytes(&tmp, &data, (size_t)length) ||
+        PACKET_remaining(&tmp) != 0) {
+        return 0;
+    }
+
+    *pkt = tmp;
+    subpkt->curr = data;
+    subpkt->remaining = length;
+
+    return 1;
+}
+
+/*
+ * Reads a variable-length vector prefixed with a three-byte length, and stores
+ * the contents in |subpkt|. |pkt| can equal |subpkt|.
+ * Data is not copied: the |subpkt| packet will share its underlying buffer with
+ * the original |pkt|, so data wrapped by |pkt| must outlive the |subpkt|.
+ * Upon failure, the original |pkt| and |subpkt| are not modified.
+ */
+__owur static ossl_inline int PACKET_get_length_prefixed_3(PACKET *pkt,
+                                                           PACKET *subpkt)
+{
+    unsigned long length;
+    const unsigned char *data;
+    PACKET tmp = *pkt;
+    if (!PACKET_get_net_3(&tmp, &length) ||
+        !PACKET_get_bytes(&tmp, &data, (size_t)length)) {
+        return 0;
+    }
+
+    *pkt = tmp;
+    subpkt->curr = data;
+    subpkt->remaining = length;
+
+    return 1;
+}
+
+/* Writeable packets */
+
+typedef struct wpacket_sub WPACKET_SUB;
+struct wpacket_sub {
+    /* The parent WPACKET_SUB if we have one or NULL otherwise */
+    WPACKET_SUB *parent;
+
+    /*
+     * Offset into the buffer where the length of this WPACKET goes. We use an
+     * offset in case the buffer grows and gets reallocated.
+     */
+    size_t packet_len;
+
+    /* Number of bytes in the packet_len or 0 if we don't write the length */
+    size_t lenbytes;
+
+    /* Number of bytes written to the buf prior to this packet starting */
+    size_t pwritten;
+
+    /* Flags for this sub-packet */
+    unsigned int flags;
+};
+
+typedef struct wpacket_st WPACKET;
+struct wpacket_st {
+    /* The buffer where we store the output data */
+    BUF_MEM *buf;
+
+    /* Fixed sized buffer which can be used as an alternative to buf */
+    unsigned char *staticbuf;
+
+    /*
+     * Offset into the buffer where we are currently writing. We use an offset
+     * in case the buffer grows and gets reallocated.
+     */
+    size_t curr;
+
+    /* Number of bytes written so far */
+    size_t written;
+
+    /* Maximum number of bytes we will allow to be written to this WPACKET */
+    size_t maxsize;
+
+    /* Our sub-packets (always at least one if not finished) */
+    WPACKET_SUB *subs;
+};
+
+/* Flags */
+
+/* Default */
+#define WPACKET_FLAGS_NONE                      0
+
+/* Error on WPACKET_close() if no data written to the WPACKET */
+#define WPACKET_FLAGS_NON_ZERO_LENGTH           1
+
+/*
+ * Abandon all changes on WPACKET_close() if no data written to the WPACKET,
+ * i.e. this does not write out a zero packet length
+ */
+#define WPACKET_FLAGS_ABANDON_ON_ZERO_LENGTH    2
+
+
+/*
+ * Initialise a WPACKET with the buffer in |buf|. The buffer must exist
+ * for the whole time that the WPACKET is being used. Additionally |lenbytes| of
+ * data is preallocated at the start of the buffer to store the length of the
+ * WPACKET once we know it.
+ */
+int WPACKET_init_len(WPACKET *pkt, BUF_MEM *buf, size_t lenbytes);
+
+/*
+ * Same as WPACKET_init_len except there is no preallocation of the WPACKET
+ * length.
+ */
+int WPACKET_init(WPACKET *pkt, BUF_MEM *buf);
+
+/*
+ * Same as WPACKET_init_len except we do not use a growable BUF_MEM structure.
+ * A fixed buffer of memory |buf| of size |len| is used instead. A failure will
+ * occur if you attempt to write beyond the end of the buffer
+ */
+int WPACKET_init_static_len(WPACKET *pkt, unsigned char *buf, size_t len,
+                            size_t lenbytes);
+/*
+ * Set the flags to be applied to the current sub-packet
+ */
+int WPACKET_set_flags(WPACKET *pkt, unsigned int flags);
+
+/*
+ * Closes the most recent sub-packet. It also writes out the length of the
+ * packet to the required location (normally the start of the WPACKET) if
+ * appropriate. The top level WPACKET should be closed using WPACKET_finish()
+ * instead of this function.
+ */
+int WPACKET_close(WPACKET *pkt);
+
+/*
+ * The same as WPACKET_close() but only for the top most WPACKET. Additionally
+ * frees memory resources for this WPACKET.
+ */
+int WPACKET_finish(WPACKET *pkt);
+
+/*
+ * Iterate through all the sub-packets and write out their lengths as if they
+ * were being closed. The lengths will be overwritten with the final lengths
+ * when the sub-packets are eventually closed (which may be different if more
+ * data is added to the WPACKET). This function fails if a sub-packet is of 0
+ * length and WPACKET_FLAGS_ABANDON_ON_ZERO_LENGTH is set.
+ */
+int WPACKET_fill_lengths(WPACKET *pkt);
+
+/*
+ * Initialise a new sub-packet. Additionally |lenbytes| of data is preallocated
+ * at the start of the sub-packet to store its length once we know it. Don't
+ * call this directly. Use the convenience macros below instead.
+ */
+int WPACKET_start_sub_packet_len__(WPACKET *pkt, size_t lenbytes);
+
+/*
+ * Convenience macros for calling WPACKET_start_sub_packet_len with different
+ * lengths
+ */
+#define WPACKET_start_sub_packet_u8(pkt) \
+    WPACKET_start_sub_packet_len__((pkt), 1)
+#define WPACKET_start_sub_packet_u16(pkt) \
+    WPACKET_start_sub_packet_len__((pkt), 2)
+#define WPACKET_start_sub_packet_u24(pkt) \
+    WPACKET_start_sub_packet_len__((pkt), 3)
+#define WPACKET_start_sub_packet_u32(pkt) \
+    WPACKET_start_sub_packet_len__((pkt), 4)
+
+/*
+ * Same as WPACKET_start_sub_packet_len__() except no bytes are pre-allocated
+ * for the sub-packet length.
+ */
+int WPACKET_start_sub_packet(WPACKET *pkt);
+
+/*
+ * Allocate bytes in the WPACKET for the output. This reserves the bytes
+ * and counts them as "written", but doesn't actually do the writing. A pointer
+ * to the allocated bytes is stored in |*allocbytes|. |allocbytes| may be NULL.
+ * WARNING: the allocated bytes must be filled in immediately, without further
+ * WPACKET_* calls. If not then the underlying buffer may be realloc'd and
+ * change its location.
+ */
+int WPACKET_allocate_bytes(WPACKET *pkt, size_t len,
+                           unsigned char **allocbytes);
+
+/*
+ * The same as WPACKET_allocate_bytes() except additionally a new sub-packet is
+ * started for the allocated bytes, and then closed immediately afterwards. The
+ * number of length bytes for the sub-packet is in |lenbytes|. Don't call this
+ * directly. Use the convenience macros below instead.
+ */
+int WPACKET_sub_allocate_bytes__(WPACKET *pkt, size_t len,
+                                 unsigned char **allocbytes, size_t lenbytes);
+
+/*
+ * Convenience macros for calling WPACKET_sub_allocate_bytes with different
+ * lengths
+ */
+#define WPACKET_sub_allocate_bytes_u8(pkt, len, bytes) \
+    WPACKET_sub_allocate_bytes__((pkt), (len), (bytes), 1)
+#define WPACKET_sub_allocate_bytes_u16(pkt, len, bytes) \
+    WPACKET_sub_allocate_bytes__((pkt), (len), (bytes), 2)
+#define WPACKET_sub_allocate_bytes_u24(pkt, len, bytes) \
+    WPACKET_sub_allocate_bytes__((pkt), (len), (bytes), 3)
+#define WPACKET_sub_allocate_bytes_u32(pkt, len, bytes) \
+    WPACKET_sub_allocate_bytes__((pkt), (len), (bytes), 4)
+
+/*
+ * The same as WPACKET_allocate_bytes() except the reserved bytes are not
+ * actually counted as written. Typically this will be for when we don't know
+ * how big arbitrary data is going to be up front, but we do know what the
+ * maximum size will be. If this function is used, then it should be immediately
+ * followed by a WPACKET_allocate_bytes() call before any other WPACKET
+ * functions are called (unless the write to the allocated bytes is abandoned).
+ *
+ * For example: If we are generating a signature, then the size of that
+ * signature may not be known in advance. We can use WPACKET_reserve_bytes() to
+ * handle this:
+ *
+ *  if (!WPACKET_sub_reserve_bytes_u16(&pkt, EVP_PKEY_size(pkey), &sigbytes1)
+ *          || EVP_SignFinal(md_ctx, sigbytes1, &siglen, pkey) <= 0
+ *          || !WPACKET_sub_allocate_bytes_u16(&pkt, siglen, &sigbytes2)
+ *          || sigbytes1 != sigbytes2)
+ *      goto err;
+ */
+int WPACKET_reserve_bytes(WPACKET *pkt, size_t len, unsigned char **allocbytes);
+
+/*
+ * The "reserve_bytes" equivalent of WPACKET_sub_allocate_bytes__()
+ */
+int WPACKET_sub_reserve_bytes__(WPACKET *pkt, size_t len,
+                                 unsigned char **allocbytes, size_t lenbytes);
+
+/*
+ * Convenience macros for  WPACKET_sub_reserve_bytes with different lengths
+ */
+#define WPACKET_sub_reserve_bytes_u8(pkt, len, bytes) \
+    WPACKET_reserve_bytes__((pkt), (len), (bytes), 1)
+#define WPACKET_sub_reserve_bytes_u16(pkt, len, bytes) \
+    WPACKET_sub_reserve_bytes__((pkt), (len), (bytes), 2)
+#define WPACKET_sub_reserve_bytes_u24(pkt, len, bytes) \
+    WPACKET_sub_reserve_bytes__((pkt), (len), (bytes), 3)
+#define WPACKET_sub_reserve_bytes_u32(pkt, len, bytes) \
+    WPACKET_sub_reserve_bytes__((pkt), (len), (bytes), 4)
+
+/*
+ * Write the value stored in |val| into the WPACKET. The value will consume
+ * |bytes| amount of storage. An error will occur if |val| cannot be
+ * accommodated in |bytes| storage, e.g. attempting to write the value 256 into
+ * 1 byte will fail. Don't call this directly. Use the convenience macros below
+ * instead.
+ */
+int WPACKET_put_bytes__(WPACKET *pkt, unsigned int val, size_t bytes);
+
+/*
+ * Convenience macros for calling WPACKET_put_bytes with different
+ * lengths
+ */
+#define WPACKET_put_bytes_u8(pkt, val) \
+    WPACKET_put_bytes__((pkt), (val), 1)
+#define WPACKET_put_bytes_u16(pkt, val) \
+    WPACKET_put_bytes__((pkt), (val), 2)
+#define WPACKET_put_bytes_u24(pkt, val) \
+    WPACKET_put_bytes__((pkt), (val), 3)
+#define WPACKET_put_bytes_u32(pkt, val) \
+    WPACKET_put_bytes__((pkt), (val), 4)
+
+/* Set a maximum size that we will not allow the WPACKET to grow beyond */
+int WPACKET_set_max_size(WPACKET *pkt, size_t maxsize);
+
+/* Copy |len| bytes of data from |*src| into the WPACKET. */
+int WPACKET_memcpy(WPACKET *pkt, const void *src, size_t len);
+
+/* Set |len| bytes of data to |ch| into the WPACKET. */
+int WPACKET_memset(WPACKET *pkt, int ch, size_t len);
+
+/*
+ * Copy |len| bytes of data from |*src| into the WPACKET and prefix with its
+ * length (consuming |lenbytes| of data for the length). Don't call this
+ * directly. Use the convenience macros below instead.
+ */
+int WPACKET_sub_memcpy__(WPACKET *pkt, const void *src, size_t len,
+                       size_t lenbytes);
+
+/* Convenience macros for calling WPACKET_sub_memcpy with different lengths */
+#define WPACKET_sub_memcpy_u8(pkt, src, len) \
+    WPACKET_sub_memcpy__((pkt), (src), (len), 1)
+#define WPACKET_sub_memcpy_u16(pkt, src, len) \
+    WPACKET_sub_memcpy__((pkt), (src), (len), 2)
+#define WPACKET_sub_memcpy_u24(pkt, src, len) \
+    WPACKET_sub_memcpy__((pkt), (src), (len), 3)
+#define WPACKET_sub_memcpy_u32(pkt, src, len) \
+    WPACKET_sub_memcpy__((pkt), (src), (len), 4)
+
+/*
+ * Return the total number of bytes written so far to the underlying buffer
+ * including any storage allocated for length bytes
+ */
+int WPACKET_get_total_written(WPACKET *pkt, size_t *written);
+
+/*
+ * Returns the length of the current sub-packet. This excludes any bytes
+ * allocated for the length itself.
+ */
+int WPACKET_get_length(WPACKET *pkt, size_t *len);
+
+/*
+ * Returns a pointer to the current write location, but does not allocate any
+ * bytes.
+ */
+unsigned char *WPACKET_get_curr(WPACKET *pkt);
+
+/* Release resources in a WPACKET if a failure has occurred. */
+void WPACKET_cleanup(WPACKET *pkt);
+
+#endif                          /* HEADER_PACKET_LOCL_H */
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/pqueue.c b/trunk/3rdparty/openssl-1.1-fit/ssl/pqueue.c
new file mode 100644
index 000000000..548a7a443
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/pqueue.c
@@ -0,0 +1,158 @@
+/*
+ * Copyright 2005-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "ssl_locl.h"
+#include <openssl/bn.h>
+
+struct pqueue_st {
+    pitem *items;
+    int count;
+};
+
+pitem *pitem_new(unsigned char *prio64be, void *data)
+{
+    pitem *item = OPENSSL_malloc(sizeof(*item));
+
+    if (item == NULL) {
+        SSLerr(SSL_F_PITEM_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    memcpy(item->priority, prio64be, sizeof(item->priority));
+    item->data = data;
+    item->next = NULL;
+    return item;
+}
+
+void pitem_free(pitem *item)
+{
+    OPENSSL_free(item);
+}
+
+pqueue *pqueue_new(void)
+{
+    pqueue *pq = OPENSSL_zalloc(sizeof(*pq));
+
+    if (pq == NULL)
+        SSLerr(SSL_F_PQUEUE_NEW, ERR_R_MALLOC_FAILURE);
+
+    return pq;
+}
+
+void pqueue_free(pqueue *pq)
+{
+    OPENSSL_free(pq);
+}
+
+pitem *pqueue_insert(pqueue *pq, pitem *item)
+{
+    pitem *curr, *next;
+
+    if (pq->items == NULL) {
+        pq->items = item;
+        return item;
+    }
+
+    for (curr = NULL, next = pq->items;
+         next != NULL; curr = next, next = next->next) {
+        /*
+         * we can compare 64-bit value in big-endian encoding with memcmp:-)
+         */
+        int cmp = memcmp(next->priority, item->priority, 8);
+        if (cmp > 0) {          /* next > item */
+            item->next = next;
+
+            if (curr == NULL)
+                pq->items = item;
+            else
+                curr->next = item;
+
+            return item;
+        }
+
+        else if (cmp == 0)      /* duplicates not allowed */
+            return NULL;
+    }
+
+    item->next = NULL;
+    curr->next = item;
+
+    return item;
+}
+
+pitem *pqueue_peek(pqueue *pq)
+{
+    return pq->items;
+}
+
+pitem *pqueue_pop(pqueue *pq)
+{
+    pitem *item = pq->items;
+
+    if (pq->items != NULL)
+        pq->items = pq->items->next;
+
+    return item;
+}
+
+pitem *pqueue_find(pqueue *pq, unsigned char *prio64be)
+{
+    pitem *next;
+    pitem *found = NULL;
+
+    if (pq->items == NULL)
+        return NULL;
+
+    for (next = pq->items; next->next != NULL; next = next->next) {
+        if (memcmp(next->priority, prio64be, 8) == 0) {
+            found = next;
+            break;
+        }
+    }
+
+    /* check the one last node */
+    if (memcmp(next->priority, prio64be, 8) == 0)
+        found = next;
+
+    if (!found)
+        return NULL;
+
+    return found;
+}
+
+pitem *pqueue_iterator(pqueue *pq)
+{
+    return pqueue_peek(pq);
+}
+
+pitem *pqueue_next(piterator *item)
+{
+    pitem *ret;
+
+    if (item == NULL || *item == NULL)
+        return NULL;
+
+    /* *item != NULL */
+    ret = *item;
+    *item = (*item)->next;
+
+    return ret;
+}
+
+size_t pqueue_size(pqueue *pq)
+{
+    pitem *item = pq->items;
+    size_t count = 0;
+
+    while (item != NULL) {
+        count++;
+        item = item->next;
+    }
+    return count;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/record/README b/trunk/3rdparty/openssl-1.1-fit/ssl/record/README
new file mode 100644
index 000000000..987e9fd30
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/record/README
@@ -0,0 +1,74 @@
+Record Layer Design
+===================
+
+This file provides some guidance on the thinking behind the design of the
+record layer code to aid future maintenance.
+
+The record layer is divided into a number of components. At the time of writing
+there are four: SSL3_RECORD, SSL3_BUFFER, DLTS1_BITMAP and RECORD_LAYER. Each
+of these components is defined by:
+1) A struct definition of the same name as the component
+2) A set of source files that define the functions for that component
+3) A set of accessor macros
+
+All struct definitions are in record.h. The functions and macros are either
+defined in record.h or record_locl.h dependent on whether they are intended to
+be private to the record layer, or whether they form part of the API to the rest
+of libssl.
+
+The source files map to components as follows:
+
+dtls1_bitmap.c                                   -> DTLS1_BITMAP component
+ssl3_buffer.c                                    -> SSL3_BUFFER component
+ssl3_record.c                                    -> SSL3_RECORD component
+rec_layer_s3.c, rec_layer_d1.c                   -> RECORD_LAYER component
+
+The RECORD_LAYER component is a facade pattern, i.e. it provides a simplified
+interface to the record layer for the rest of libssl. The other 3 components are
+entirely private to the record layer and therefore should never be accessed
+directly by libssl.
+
+Any component can directly access its own members - they are private to that
+component, e.g. ssl3_buffer.c can access members of the SSL3_BUFFER struct
+without using a macro. No component can directly access the members of another
+component, e.g. ssl3_buffer cannot reach inside the RECORD_LAYER component to
+directly access its members. Instead components use accessor macros, so if code
+in ssl3_buffer.c wants to access the members of the RECORD_LAYER it uses the
+RECORD_LAYER_* macros.
+
+Conceptually it looks like this:
+
+                        libssl
+                           |
+---------------------------|-----record.h--------------------------------------
+                           |
+                    _______V______________
+                   |                      |
+                   |    RECORD_LAYER      |
+                   |                      |
+                   |    rec_layer_s3.c    |
+                   |          ^           |
+                   | _________|__________ |
+                   ||                    ||
+                   || DTLS1_RECORD_LAYER ||
+                   ||                    ||
+                   || rec_layer_d1.c     ||
+                   ||____________________||
+                   |______________________|
+        record_locl.h     ^   ^   ^
+         _________________|   |   |_________________
+        |                     |                     |
+   _____V_________      ______V________      _______V________
+  |               |    |               |    |                |
+  | SSL3_BUFFER   |    | SSL3_RECORD   |    | DTLS1_BITMAP   |
+  |               |--->|               |    |                |
+  | ssl3_buffer.c |    | ssl3_record.c |    | dtls1_bitmap.c |
+  |_______________|    |_______________|    |________________|
+
+
+The two RECORD_LAYER source files build on each other, i.e.
+the main one is rec_layer_s3.c which provides the core SSL/TLS layer. The second
+one is rec_layer_d1.c which builds off of the SSL/TLS code to provide DTLS
+specific capabilities. It uses some DTLS specific RECORD_LAYER component members
+which should only be accessed from rec_layer_d1.c. These are held in the
+DTLS1_RECORD_LAYER struct.
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/record/dtls1_bitmap.c b/trunk/3rdparty/openssl-1.1-fit/ssl/record/dtls1_bitmap.c
new file mode 100644
index 000000000..5923c5371
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/record/dtls1_bitmap.c
@@ -0,0 +1,78 @@
+/*
+ * Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "../ssl_locl.h"
+#include "record_locl.h"
+
+/* mod 128 saturating subtract of two 64-bit values in big-endian order */
+static int satsub64be(const unsigned char *v1, const unsigned char *v2)
+{
+    int64_t ret;
+    uint64_t l1, l2;
+
+    n2l8(v1, l1);
+    n2l8(v2, l2);
+
+    ret = l1 - l2;
+
+    /* We do not permit wrap-around */
+    if (l1 > l2 && ret < 0)
+        return 128;
+    else if (l2 > l1 && ret > 0)
+        return -128;
+
+    if (ret > 128)
+        return 128;
+    else if (ret < -128)
+        return -128;
+    else
+        return (int)ret;
+}
+
+int dtls1_record_replay_check(SSL *s, DTLS1_BITMAP *bitmap)
+{
+    int cmp;
+    unsigned int shift;
+    const unsigned char *seq = s->rlayer.read_sequence;
+
+    cmp = satsub64be(seq, bitmap->max_seq_num);
+    if (cmp > 0) {
+        SSL3_RECORD_set_seq_num(RECORD_LAYER_get_rrec(&s->rlayer), seq);
+        return 1;               /* this record in new */
+    }
+    shift = -cmp;
+    if (shift >= sizeof(bitmap->map) * 8)
+        return 0;               /* stale, outside the window */
+    else if (bitmap->map & (1UL << shift))
+        return 0;               /* record previously received */
+
+    SSL3_RECORD_set_seq_num(RECORD_LAYER_get_rrec(&s->rlayer), seq);
+    return 1;
+}
+
+void dtls1_record_bitmap_update(SSL *s, DTLS1_BITMAP *bitmap)
+{
+    int cmp;
+    unsigned int shift;
+    const unsigned char *seq = RECORD_LAYER_get_read_sequence(&s->rlayer);
+
+    cmp = satsub64be(seq, bitmap->max_seq_num);
+    if (cmp > 0) {
+        shift = cmp;
+        if (shift < sizeof(bitmap->map) * 8)
+            bitmap->map <<= shift, bitmap->map |= 1UL;
+        else
+            bitmap->map = 1UL;
+        memcpy(bitmap->max_seq_num, seq, SEQ_NUM_SIZE);
+    } else {
+        shift = -cmp;
+        if (shift < sizeof(bitmap->map) * 8)
+            bitmap->map |= 1UL << shift;
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/record/rec_layer_d1.c b/trunk/3rdparty/openssl-1.1-fit/ssl/record/rec_layer_d1.c
new file mode 100644
index 000000000..cb5d54ef5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/record/rec_layer_d1.c
@@ -0,0 +1,1059 @@
+/*
+ * Copyright 2005-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <errno.h>
+#include "../ssl_locl.h"
+#include <openssl/evp.h>
+#include <openssl/buffer.h>
+#include "record_locl.h"
+#include "../packet_locl.h"
+#include "internal/cryptlib.h"
+
+int DTLS_RECORD_LAYER_new(RECORD_LAYER *rl)
+{
+    DTLS_RECORD_LAYER *d;
+
+    if ((d = OPENSSL_malloc(sizeof(*d))) == NULL) {
+        SSLerr(SSL_F_DTLS_RECORD_LAYER_NEW, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    rl->d = d;
+
+    d->unprocessed_rcds.q = pqueue_new();
+    d->processed_rcds.q = pqueue_new();
+    d->buffered_app_data.q = pqueue_new();
+
+    if (d->unprocessed_rcds.q == NULL || d->processed_rcds.q == NULL
+        || d->buffered_app_data.q == NULL) {
+        pqueue_free(d->unprocessed_rcds.q);
+        pqueue_free(d->processed_rcds.q);
+        pqueue_free(d->buffered_app_data.q);
+        OPENSSL_free(d);
+        rl->d = NULL;
+        return 0;
+    }
+
+    return 1;
+}
+
+void DTLS_RECORD_LAYER_free(RECORD_LAYER *rl)
+{
+    DTLS_RECORD_LAYER_clear(rl);
+    pqueue_free(rl->d->unprocessed_rcds.q);
+    pqueue_free(rl->d->processed_rcds.q);
+    pqueue_free(rl->d->buffered_app_data.q);
+    OPENSSL_free(rl->d);
+    rl->d = NULL;
+}
+
+void DTLS_RECORD_LAYER_clear(RECORD_LAYER *rl)
+{
+    DTLS_RECORD_LAYER *d;
+    pitem *item = NULL;
+    DTLS1_RECORD_DATA *rdata;
+    pqueue *unprocessed_rcds;
+    pqueue *processed_rcds;
+    pqueue *buffered_app_data;
+
+    d = rl->d;
+
+    while ((item = pqueue_pop(d->unprocessed_rcds.q)) != NULL) {
+        rdata = (DTLS1_RECORD_DATA *)item->data;
+        OPENSSL_free(rdata->rbuf.buf);
+        OPENSSL_free(item->data);
+        pitem_free(item);
+    }
+
+    while ((item = pqueue_pop(d->processed_rcds.q)) != NULL) {
+        rdata = (DTLS1_RECORD_DATA *)item->data;
+        OPENSSL_free(rdata->rbuf.buf);
+        OPENSSL_free(item->data);
+        pitem_free(item);
+    }
+
+    while ((item = pqueue_pop(d->buffered_app_data.q)) != NULL) {
+        rdata = (DTLS1_RECORD_DATA *)item->data;
+        OPENSSL_free(rdata->rbuf.buf);
+        OPENSSL_free(item->data);
+        pitem_free(item);
+    }
+
+    unprocessed_rcds = d->unprocessed_rcds.q;
+    processed_rcds = d->processed_rcds.q;
+    buffered_app_data = d->buffered_app_data.q;
+    memset(d, 0, sizeof(*d));
+    d->unprocessed_rcds.q = unprocessed_rcds;
+    d->processed_rcds.q = processed_rcds;
+    d->buffered_app_data.q = buffered_app_data;
+}
+
+void DTLS_RECORD_LAYER_set_saved_w_epoch(RECORD_LAYER *rl, unsigned short e)
+{
+    if (e == rl->d->w_epoch - 1) {
+        memcpy(rl->d->curr_write_sequence,
+               rl->write_sequence, sizeof(rl->write_sequence));
+        memcpy(rl->write_sequence,
+               rl->d->last_write_sequence, sizeof(rl->write_sequence));
+    } else if (e == rl->d->w_epoch + 1) {
+        memcpy(rl->d->last_write_sequence,
+               rl->write_sequence, sizeof(unsigned char[8]));
+        memcpy(rl->write_sequence,
+               rl->d->curr_write_sequence, sizeof(rl->write_sequence));
+    }
+    rl->d->w_epoch = e;
+}
+
+void DTLS_RECORD_LAYER_set_write_sequence(RECORD_LAYER *rl, unsigned char *seq)
+{
+    memcpy(rl->write_sequence, seq, SEQ_NUM_SIZE);
+}
+
+/* copy buffered record into SSL structure */
+static int dtls1_copy_record(SSL *s, pitem *item)
+{
+    DTLS1_RECORD_DATA *rdata;
+
+    rdata = (DTLS1_RECORD_DATA *)item->data;
+
+    SSL3_BUFFER_release(&s->rlayer.rbuf);
+
+    s->rlayer.packet = rdata->packet;
+    s->rlayer.packet_length = rdata->packet_length;
+    memcpy(&s->rlayer.rbuf, &(rdata->rbuf), sizeof(SSL3_BUFFER));
+    memcpy(&s->rlayer.rrec, &(rdata->rrec), sizeof(SSL3_RECORD));
+
+    /* Set proper sequence number for mac calculation */
+    memcpy(&(s->rlayer.read_sequence[2]), &(rdata->packet[5]), 6);
+
+    return 1;
+}
+
+int dtls1_buffer_record(SSL *s, record_pqueue *queue, unsigned char *priority)
+{
+    DTLS1_RECORD_DATA *rdata;
+    pitem *item;
+
+    /* Limit the size of the queue to prevent DOS attacks */
+    if (pqueue_size(queue->q) >= 100)
+        return 0;
+
+    rdata = OPENSSL_malloc(sizeof(*rdata));
+    item = pitem_new(priority, rdata);
+    if (rdata == NULL || item == NULL) {
+        OPENSSL_free(rdata);
+        pitem_free(item);
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DTLS1_BUFFER_RECORD,
+                 ERR_R_INTERNAL_ERROR);
+        return -1;
+    }
+
+    rdata->packet = s->rlayer.packet;
+    rdata->packet_length = s->rlayer.packet_length;
+    memcpy(&(rdata->rbuf), &s->rlayer.rbuf, sizeof(SSL3_BUFFER));
+    memcpy(&(rdata->rrec), &s->rlayer.rrec, sizeof(SSL3_RECORD));
+
+    item->data = rdata;
+
+#ifndef OPENSSL_NO_SCTP
+    /* Store bio_dgram_sctp_rcvinfo struct */
+    if (BIO_dgram_is_sctp(SSL_get_rbio(s)) &&
+        (SSL_get_state(s) == TLS_ST_SR_FINISHED
+         || SSL_get_state(s) == TLS_ST_CR_FINISHED)) {
+        BIO_ctrl(SSL_get_rbio(s), BIO_CTRL_DGRAM_SCTP_GET_RCVINFO,
+                 sizeof(rdata->recordinfo), &rdata->recordinfo);
+    }
+#endif
+
+    s->rlayer.packet = NULL;
+    s->rlayer.packet_length = 0;
+    memset(&s->rlayer.rbuf, 0, sizeof(s->rlayer.rbuf));
+    memset(&s->rlayer.rrec, 0, sizeof(s->rlayer.rrec));
+
+    if (!ssl3_setup_buffers(s)) {
+        /* SSLfatal() already called */
+        OPENSSL_free(rdata->rbuf.buf);
+        OPENSSL_free(rdata);
+        pitem_free(item);
+        return -1;
+    }
+
+    if (pqueue_insert(queue->q, item) == NULL) {
+        /* Must be a duplicate so ignore it */
+        OPENSSL_free(rdata->rbuf.buf);
+        OPENSSL_free(rdata);
+        pitem_free(item);
+    }
+
+    return 1;
+}
+
+int dtls1_retrieve_buffered_record(SSL *s, record_pqueue *queue)
+{
+    pitem *item;
+
+    item = pqueue_pop(queue->q);
+    if (item) {
+        dtls1_copy_record(s, item);
+
+        OPENSSL_free(item->data);
+        pitem_free(item);
+
+        return 1;
+    }
+
+    return 0;
+}
+
+/*
+ * retrieve a buffered record that belongs to the new epoch, i.e., not
+ * processed yet
+ */
+#define dtls1_get_unprocessed_record(s) \
+                   dtls1_retrieve_buffered_record((s), \
+                   &((s)->rlayer.d->unprocessed_rcds))
+
+int dtls1_process_buffered_records(SSL *s)
+{
+    pitem *item;
+    SSL3_BUFFER *rb;
+    SSL3_RECORD *rr;
+    DTLS1_BITMAP *bitmap;
+    unsigned int is_next_epoch;
+    int replayok = 1;
+
+    item = pqueue_peek(s->rlayer.d->unprocessed_rcds.q);
+    if (item) {
+        /* Check if epoch is current. */
+        if (s->rlayer.d->unprocessed_rcds.epoch != s->rlayer.d->r_epoch)
+            return 1;         /* Nothing to do. */
+
+        rr = RECORD_LAYER_get_rrec(&s->rlayer);
+
+        rb = RECORD_LAYER_get_rbuf(&s->rlayer);
+
+        if (SSL3_BUFFER_get_left(rb) > 0) {
+            /*
+             * We've still got data from the current packet to read. There could
+             * be a record from the new epoch in it - so don't overwrite it
+             * with the unprocessed records yet (we'll do it when we've
+             * finished reading the current packet).
+             */
+            return 1;
+        }
+
+        /* Process all the records. */
+        while (pqueue_peek(s->rlayer.d->unprocessed_rcds.q)) {
+            dtls1_get_unprocessed_record(s);
+            bitmap = dtls1_get_bitmap(s, rr, &is_next_epoch);
+            if (bitmap == NULL) {
+                /*
+                 * Should not happen. This will only ever be NULL when the
+                 * current record is from a different epoch. But that cannot
+                 * be the case because we already checked the epoch above
+                 */
+                 SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                          SSL_F_DTLS1_PROCESS_BUFFERED_RECORDS,
+                          ERR_R_INTERNAL_ERROR);
+                 return 0;
+            }
+#ifndef OPENSSL_NO_SCTP
+            /* Only do replay check if no SCTP bio */
+            if (!BIO_dgram_is_sctp(SSL_get_rbio(s)))
+#endif
+            {
+                /*
+                 * Check whether this is a repeat, or aged record. We did this
+                 * check once already when we first received the record - but
+                 * we might have updated the window since then due to
+                 * records we subsequently processed.
+                 */
+                replayok = dtls1_record_replay_check(s, bitmap);
+            }
+
+            if (!replayok || !dtls1_process_record(s, bitmap)) {
+                if (ossl_statem_in_error(s)) {
+                    /* dtls1_process_record called SSLfatal() */
+                    return -1;
+                }
+                /* dump this record */
+                rr->length = 0;
+                RECORD_LAYER_reset_packet_length(&s->rlayer);
+                continue;
+            }
+
+            if (dtls1_buffer_record(s, &(s->rlayer.d->processed_rcds),
+                    SSL3_RECORD_get_seq_num(s->rlayer.rrec)) < 0) {
+                /* SSLfatal() already called */
+                return 0;
+            }
+        }
+    }
+
+    /*
+     * sync epoch numbers once all the unprocessed records have been
+     * processed
+     */
+    s->rlayer.d->processed_rcds.epoch = s->rlayer.d->r_epoch;
+    s->rlayer.d->unprocessed_rcds.epoch = s->rlayer.d->r_epoch + 1;
+
+    return 1;
+}
+
+/*-
+ * Return up to 'len' payload bytes received in 'type' records.
+ * 'type' is one of the following:
+ *
+ *   -  SSL3_RT_HANDSHAKE (when ssl3_get_message calls us)
+ *   -  SSL3_RT_APPLICATION_DATA (when ssl3_read calls us)
+ *   -  0 (during a shutdown, no data has to be returned)
+ *
+ * If we don't have stored data to work from, read a SSL/TLS record first
+ * (possibly multiple records if we still don't have anything to return).
+ *
+ * This function must handle any surprises the peer may have for us, such as
+ * Alert records (e.g. close_notify) or renegotiation requests. ChangeCipherSpec
+ * messages are treated as if they were handshake messages *if* the |recd_type|
+ * argument is non NULL.
+ * Also if record payloads contain fragments too small to process, we store
+ * them until there is enough for the respective protocol (the record protocol
+ * may use arbitrary fragmentation and even interleaving):
+ *     Change cipher spec protocol
+ *             just 1 byte needed, no need for keeping anything stored
+ *     Alert protocol
+ *             2 bytes needed (AlertLevel, AlertDescription)
+ *     Handshake protocol
+ *             4 bytes needed (HandshakeType, uint24 length) -- we just have
+ *             to detect unexpected Client Hello and Hello Request messages
+ *             here, anything else is handled by higher layers
+ *     Application data protocol
+ *             none of our business
+ */
+int dtls1_read_bytes(SSL *s, int type, int *recvd_type, unsigned char *buf,
+                     size_t len, int peek, size_t *readbytes)
+{
+    int i, j, iret;
+    size_t n;
+    SSL3_RECORD *rr;
+    void (*cb) (const SSL *ssl, int type2, int val) = NULL;
+
+    if (!SSL3_BUFFER_is_initialised(&s->rlayer.rbuf)) {
+        /* Not initialized yet */
+        if (!ssl3_setup_buffers(s)) {
+            /* SSLfatal() already called */
+            return -1;
+        }
+    }
+
+    if ((type && (type != SSL3_RT_APPLICATION_DATA) &&
+         (type != SSL3_RT_HANDSHAKE)) ||
+        (peek && (type != SSL3_RT_APPLICATION_DATA))) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DTLS1_READ_BYTES,
+                 ERR_R_INTERNAL_ERROR);
+        return -1;
+    }
+
+    if (!ossl_statem_get_in_handshake(s) && SSL_in_init(s)) {
+        /* type == SSL3_RT_APPLICATION_DATA */
+        i = s->handshake_func(s);
+        /* SSLfatal() already called if appropriate */
+        if (i < 0)
+            return i;
+        if (i == 0)
+            return -1;
+    }
+
+ start:
+    s->rwstate = SSL_NOTHING;
+
+    /*-
+     * s->s3->rrec.type         - is the type of record
+     * s->s3->rrec.data,    - data
+     * s->s3->rrec.off,     - offset into 'data' for next read
+     * s->s3->rrec.length,  - number of bytes.
+     */
+    rr = s->rlayer.rrec;
+
+    /*
+     * We are not handshaking and have no data yet, so process data buffered
+     * during the last handshake in advance, if any.
+     */
+    if (SSL_is_init_finished(s) && SSL3_RECORD_get_length(rr) == 0) {
+        pitem *item;
+        item = pqueue_pop(s->rlayer.d->buffered_app_data.q);
+        if (item) {
+#ifndef OPENSSL_NO_SCTP
+            /* Restore bio_dgram_sctp_rcvinfo struct */
+            if (BIO_dgram_is_sctp(SSL_get_rbio(s))) {
+                DTLS1_RECORD_DATA *rdata = (DTLS1_RECORD_DATA *)item->data;
+                BIO_ctrl(SSL_get_rbio(s), BIO_CTRL_DGRAM_SCTP_SET_RCVINFO,
+                         sizeof(rdata->recordinfo), &rdata->recordinfo);
+            }
+#endif
+
+            dtls1_copy_record(s, item);
+
+            OPENSSL_free(item->data);
+            pitem_free(item);
+        }
+    }
+
+    /* Check for timeout */
+    if (dtls1_handle_timeout(s) > 0) {
+        goto start;
+    } else if (ossl_statem_in_error(s)) {
+        /* dtls1_handle_timeout() has failed with a fatal error */
+        return -1;
+    }
+
+    /* get new packet if necessary */
+    if ((SSL3_RECORD_get_length(rr) == 0)
+        || (s->rlayer.rstate == SSL_ST_READ_BODY)) {
+        RECORD_LAYER_set_numrpipes(&s->rlayer, 0);
+        iret = dtls1_get_record(s);
+        if (iret <= 0) {
+            iret = dtls1_read_failed(s, iret);
+            /*
+             * Anything other than a timeout is an error. SSLfatal() already
+             * called if appropriate.
+             */
+            if (iret <= 0)
+                return iret;
+            else
+                goto start;
+        }
+        RECORD_LAYER_set_numrpipes(&s->rlayer, 1);
+    }
+
+    /*
+     * Reset the count of consecutive warning alerts if we've got a non-empty
+     * record that isn't an alert.
+     */
+    if (SSL3_RECORD_get_type(rr) != SSL3_RT_ALERT
+            && SSL3_RECORD_get_length(rr) != 0)
+        s->rlayer.alert_count = 0;
+
+    /* we now have a packet which can be read and processed */
+
+    if (s->s3->change_cipher_spec /* set when we receive ChangeCipherSpec,
+                                   * reset by ssl3_get_finished */
+        && (SSL3_RECORD_get_type(rr) != SSL3_RT_HANDSHAKE)) {
+        /*
+         * We now have application data between CCS and Finished. Most likely
+         * the packets were reordered on their way, so buffer the application
+         * data for later processing rather than dropping the connection.
+         */
+        if (dtls1_buffer_record(s, &(s->rlayer.d->buffered_app_data),
+                                SSL3_RECORD_get_seq_num(rr)) < 0) {
+            /* SSLfatal() already called */
+            return -1;
+        }
+        SSL3_RECORD_set_length(rr, 0);
+        SSL3_RECORD_set_read(rr);
+        goto start;
+    }
+
+    /*
+     * If the other end has shut down, throw anything we read away (even in
+     * 'peek' mode)
+     */
+    if (s->shutdown & SSL_RECEIVED_SHUTDOWN) {
+        SSL3_RECORD_set_length(rr, 0);
+        SSL3_RECORD_set_read(rr);
+        s->rwstate = SSL_NOTHING;
+        return 0;
+    }
+
+    if (type == SSL3_RECORD_get_type(rr)
+        || (SSL3_RECORD_get_type(rr) == SSL3_RT_CHANGE_CIPHER_SPEC
+            && type == SSL3_RT_HANDSHAKE && recvd_type != NULL)) {
+        /*
+         * SSL3_RT_APPLICATION_DATA or
+         * SSL3_RT_HANDSHAKE or
+         * SSL3_RT_CHANGE_CIPHER_SPEC
+         */
+        /*
+         * make sure that we are not getting application data when we are
+         * doing a handshake for the first time
+         */
+        if (SSL_in_init(s) && (type == SSL3_RT_APPLICATION_DATA) &&
+            (s->enc_read_ctx == NULL)) {
+            SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_DTLS1_READ_BYTES,
+                     SSL_R_APP_DATA_IN_HANDSHAKE);
+            return -1;
+        }
+
+        if (recvd_type != NULL)
+            *recvd_type = SSL3_RECORD_get_type(rr);
+
+        if (len == 0) {
+            /*
+             * Mark a zero length record as read. This ensures multiple calls to
+             * SSL_read() with a zero length buffer will eventually cause
+             * SSL_pending() to report data as being available.
+             */
+            if (SSL3_RECORD_get_length(rr) == 0)
+                SSL3_RECORD_set_read(rr);
+            return 0;
+        }
+
+        if (len > SSL3_RECORD_get_length(rr))
+            n = SSL3_RECORD_get_length(rr);
+        else
+            n = len;
+
+        memcpy(buf, &(SSL3_RECORD_get_data(rr)[SSL3_RECORD_get_off(rr)]), n);
+        if (peek) {
+            if (SSL3_RECORD_get_length(rr) == 0)
+                SSL3_RECORD_set_read(rr);
+        } else {
+            SSL3_RECORD_sub_length(rr, n);
+            SSL3_RECORD_add_off(rr, n);
+            if (SSL3_RECORD_get_length(rr) == 0) {
+                s->rlayer.rstate = SSL_ST_READ_HEADER;
+                SSL3_RECORD_set_off(rr, 0);
+                SSL3_RECORD_set_read(rr);
+            }
+        }
+#ifndef OPENSSL_NO_SCTP
+        /*
+         * We might had to delay a close_notify alert because of reordered
+         * app data. If there was an alert and there is no message to read
+         * anymore, finally set shutdown.
+         */
+        if (BIO_dgram_is_sctp(SSL_get_rbio(s)) &&
+            s->d1->shutdown_received
+            && !BIO_dgram_sctp_msg_waiting(SSL_get_rbio(s))) {
+            s->shutdown |= SSL_RECEIVED_SHUTDOWN;
+            return 0;
+        }
+#endif
+        *readbytes = n;
+        return 1;
+    }
+
+    /*
+     * If we get here, then type != rr->type; if we have a handshake message,
+     * then it was unexpected (Hello Request or Client Hello).
+     */
+
+    if (SSL3_RECORD_get_type(rr) == SSL3_RT_ALERT) {
+        unsigned int alert_level, alert_descr;
+        unsigned char *alert_bytes = SSL3_RECORD_get_data(rr)
+                                     + SSL3_RECORD_get_off(rr);
+        PACKET alert;
+
+        if (!PACKET_buf_init(&alert, alert_bytes, SSL3_RECORD_get_length(rr))
+                || !PACKET_get_1(&alert, &alert_level)
+                || !PACKET_get_1(&alert, &alert_descr)
+                || PACKET_remaining(&alert) != 0) {
+            SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_DTLS1_READ_BYTES,
+                     SSL_R_INVALID_ALERT);
+            return -1;
+        }
+
+        if (s->msg_callback)
+            s->msg_callback(0, s->version, SSL3_RT_ALERT, alert_bytes, 2, s,
+                            s->msg_callback_arg);
+
+        if (s->info_callback != NULL)
+            cb = s->info_callback;
+        else if (s->ctx->info_callback != NULL)
+            cb = s->ctx->info_callback;
+
+        if (cb != NULL) {
+            j = (alert_level << 8) | alert_descr;
+            cb(s, SSL_CB_READ_ALERT, j);
+        }
+
+        if (alert_level == SSL3_AL_WARNING) {
+            s->s3->warn_alert = alert_descr;
+            SSL3_RECORD_set_read(rr);
+
+            s->rlayer.alert_count++;
+            if (s->rlayer.alert_count == MAX_WARN_ALERT_COUNT) {
+                SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_DTLS1_READ_BYTES,
+                         SSL_R_TOO_MANY_WARN_ALERTS);
+                return -1;
+            }
+
+            if (alert_descr == SSL_AD_CLOSE_NOTIFY) {
+#ifndef OPENSSL_NO_SCTP
+                /*
+                 * With SCTP and streams the socket may deliver app data
+                 * after a close_notify alert. We have to check this first so
+                 * that nothing gets discarded.
+                 */
+                if (BIO_dgram_is_sctp(SSL_get_rbio(s)) &&
+                    BIO_dgram_sctp_msg_waiting(SSL_get_rbio(s))) {
+                    s->d1->shutdown_received = 1;
+                    s->rwstate = SSL_READING;
+                    BIO_clear_retry_flags(SSL_get_rbio(s));
+                    BIO_set_retry_read(SSL_get_rbio(s));
+                    return -1;
+                }
+#endif
+                s->shutdown |= SSL_RECEIVED_SHUTDOWN;
+                return 0;
+            }
+        } else if (alert_level == SSL3_AL_FATAL) {
+            char tmp[16];
+
+            s->rwstate = SSL_NOTHING;
+            s->s3->fatal_alert = alert_descr;
+            SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_DTLS1_READ_BYTES,
+                     SSL_AD_REASON_OFFSET + alert_descr);
+            BIO_snprintf(tmp, sizeof tmp, "%d", alert_descr);
+            ERR_add_error_data(2, "SSL alert number ", tmp);
+            s->shutdown |= SSL_RECEIVED_SHUTDOWN;
+            SSL3_RECORD_set_read(rr);
+            SSL_CTX_remove_session(s->session_ctx, s->session);
+            return 0;
+        } else {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_DTLS1_READ_BYTES,
+                     SSL_R_UNKNOWN_ALERT_TYPE);
+            return -1;
+        }
+
+        goto start;
+    }
+
+    if (s->shutdown & SSL_SENT_SHUTDOWN) { /* but we have not received a
+                                            * shutdown */
+        s->rwstate = SSL_NOTHING;
+        SSL3_RECORD_set_length(rr, 0);
+        SSL3_RECORD_set_read(rr);
+        return 0;
+    }
+
+    if (SSL3_RECORD_get_type(rr) == SSL3_RT_CHANGE_CIPHER_SPEC) {
+        /*
+         * We can't process a CCS now, because previous handshake messages
+         * are still missing, so just drop it.
+         */
+        SSL3_RECORD_set_length(rr, 0);
+        SSL3_RECORD_set_read(rr);
+        goto start;
+    }
+
+    /*
+     * Unexpected handshake message (Client Hello, or protocol violation)
+     */
+    if ((SSL3_RECORD_get_type(rr) == SSL3_RT_HANDSHAKE) &&
+            !ossl_statem_get_in_handshake(s)) {
+        struct hm_header_st msg_hdr;
+
+        /*
+         * This may just be a stale retransmit. Also sanity check that we have
+         * at least enough record bytes for a message header
+         */
+        if (SSL3_RECORD_get_epoch(rr) != s->rlayer.d->r_epoch
+                || SSL3_RECORD_get_length(rr) < DTLS1_HM_HEADER_LENGTH) {
+            SSL3_RECORD_set_length(rr, 0);
+            SSL3_RECORD_set_read(rr);
+            goto start;
+        }
+
+        dtls1_get_message_header(rr->data, &msg_hdr);
+
+        /*
+         * If we are server, we may have a repeated FINISHED of the client
+         * here, then retransmit our CCS and FINISHED.
+         */
+        if (msg_hdr.type == SSL3_MT_FINISHED) {
+            if (dtls1_check_timeout_num(s) < 0) {
+                /* SSLfatal) already called */
+                return -1;
+            }
+
+            if (dtls1_retransmit_buffered_messages(s) <= 0) {
+                /* Fail if we encountered a fatal error */
+                if (ossl_statem_in_error(s))
+                    return -1;
+            }
+            SSL3_RECORD_set_length(rr, 0);
+            SSL3_RECORD_set_read(rr);
+            if (!(s->mode & SSL_MODE_AUTO_RETRY)) {
+                if (SSL3_BUFFER_get_left(&s->rlayer.rbuf) == 0) {
+                    /* no read-ahead left? */
+                    BIO *bio;
+
+                    s->rwstate = SSL_READING;
+                    bio = SSL_get_rbio(s);
+                    BIO_clear_retry_flags(bio);
+                    BIO_set_retry_read(bio);
+                    return -1;
+                }
+            }
+            goto start;
+        }
+
+        /*
+         * To get here we must be trying to read app data but found handshake
+         * data. But if we're trying to read app data, and we're not in init
+         * (which is tested for at the top of this function) then init must be
+         * finished
+         */
+        if (!ossl_assert(SSL_is_init_finished(s))) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DTLS1_READ_BYTES,
+                     ERR_R_INTERNAL_ERROR);
+            return -1;
+        }
+
+        /* We found handshake data, so we're going back into init */
+        ossl_statem_set_in_init(s, 1);
+
+        i = s->handshake_func(s);
+        /* SSLfatal() called if appropriate */
+        if (i < 0)
+            return i;
+        if (i == 0)
+            return -1;
+
+        if (!(s->mode & SSL_MODE_AUTO_RETRY)) {
+            if (SSL3_BUFFER_get_left(&s->rlayer.rbuf) == 0) {
+                /* no read-ahead left? */
+                BIO *bio;
+                /*
+                 * In the case where we try to read application data, but we
+                 * trigger an SSL handshake, we return -1 with the retry
+                 * option set.  Otherwise renegotiation may cause nasty
+                 * problems in the blocking world
+                 */
+                s->rwstate = SSL_READING;
+                bio = SSL_get_rbio(s);
+                BIO_clear_retry_flags(bio);
+                BIO_set_retry_read(bio);
+                return -1;
+            }
+        }
+        goto start;
+    }
+
+    switch (SSL3_RECORD_get_type(rr)) {
+    default:
+        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_DTLS1_READ_BYTES,
+                 SSL_R_UNEXPECTED_RECORD);
+        return -1;
+    case SSL3_RT_CHANGE_CIPHER_SPEC:
+    case SSL3_RT_ALERT:
+    case SSL3_RT_HANDSHAKE:
+        /*
+         * we already handled all of these, with the possible exception of
+         * SSL3_RT_HANDSHAKE when ossl_statem_get_in_handshake(s) is true, but
+         * that should not happen when type != rr->type
+         */
+        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_DTLS1_READ_BYTES,
+                 ERR_R_INTERNAL_ERROR);
+        return -1;
+    case SSL3_RT_APPLICATION_DATA:
+        /*
+         * At this point, we were expecting handshake data, but have
+         * application data.  If the library was running inside ssl3_read()
+         * (i.e. in_read_app_data is set) and it makes sense to read
+         * application data at this point (session renegotiation not yet
+         * started), we will indulge it.
+         */
+        if (s->s3->in_read_app_data &&
+            (s->s3->total_renegotiations != 0) &&
+            ossl_statem_app_data_allowed(s)) {
+            s->s3->in_read_app_data = 2;
+            return -1;
+        } else {
+            SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_DTLS1_READ_BYTES,
+                     SSL_R_UNEXPECTED_RECORD);
+            return -1;
+        }
+    }
+    /* not reached */
+}
+
+/*
+ * Call this to write data in records of type 'type' It will return <= 0 if
+ * not all data has been sent or non-blocking IO.
+ */
+int dtls1_write_bytes(SSL *s, int type, const void *buf, size_t len,
+                      size_t *written)
+{
+    int i;
+
+    if (!ossl_assert(len <= SSL3_RT_MAX_PLAIN_LENGTH)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DTLS1_WRITE_BYTES,
+                 ERR_R_INTERNAL_ERROR);
+        return -1;
+    }
+    s->rwstate = SSL_NOTHING;
+    i = do_dtls1_write(s, type, buf, len, 0, written);
+    return i;
+}
+
+int do_dtls1_write(SSL *s, int type, const unsigned char *buf,
+                   size_t len, int create_empty_fragment, size_t *written)
+{
+    unsigned char *p, *pseq;
+    int i, mac_size, clear = 0;
+    size_t prefix_len = 0;
+    int eivlen;
+    SSL3_RECORD wr;
+    SSL3_BUFFER *wb;
+    SSL_SESSION *sess;
+
+    wb = &s->rlayer.wbuf[0];
+
+    /*
+     * first check if there is a SSL3_BUFFER still being written out.  This
+     * will happen with non blocking IO
+     */
+    if (!ossl_assert(SSL3_BUFFER_get_left(wb) == 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_DTLS1_WRITE,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    /* If we have an alert to send, lets send it */
+    if (s->s3->alert_dispatch) {
+        i = s->method->ssl_dispatch_alert(s);
+        if (i <= 0)
+            return i;
+        /* if it went, fall through and send more stuff */
+    }
+
+    if (len == 0 && !create_empty_fragment)
+        return 0;
+
+    if (len > ssl_get_max_send_fragment(s)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_DTLS1_WRITE,
+                 SSL_R_EXCEEDS_MAX_FRAGMENT_SIZE);
+        return 0;
+    }
+
+    sess = s->session;
+
+    if ((sess == NULL) ||
+        (s->enc_write_ctx == NULL) || (EVP_MD_CTX_md(s->write_hash) == NULL))
+        clear = 1;
+
+    if (clear)
+        mac_size = 0;
+    else {
+        mac_size = EVP_MD_CTX_size(s->write_hash);
+        if (mac_size < 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_DTLS1_WRITE,
+                     SSL_R_EXCEEDS_MAX_FRAGMENT_SIZE);
+            return -1;
+        }
+    }
+
+    p = SSL3_BUFFER_get_buf(wb) + prefix_len;
+
+    /* write the header */
+
+    *(p++) = type & 0xff;
+    SSL3_RECORD_set_type(&wr, type);
+    /*
+     * Special case: for hello verify request, client version 1.0 and we
+     * haven't decided which version to use yet send back using version 1.0
+     * header: otherwise some clients will ignore it.
+     */
+    if (s->method->version == DTLS_ANY_VERSION &&
+        s->max_proto_version != DTLS1_BAD_VER) {
+        *(p++) = DTLS1_VERSION >> 8;
+        *(p++) = DTLS1_VERSION & 0xff;
+    } else {
+        *(p++) = s->version >> 8;
+        *(p++) = s->version & 0xff;
+    }
+
+    /* field where we are to write out packet epoch, seq num and len */
+    pseq = p;
+    p += 10;
+
+    /* Explicit IV length, block ciphers appropriate version flag */
+    if (s->enc_write_ctx) {
+        int mode = EVP_CIPHER_CTX_mode(s->enc_write_ctx);
+        if (mode == EVP_CIPH_CBC_MODE) {
+            eivlen = EVP_CIPHER_CTX_iv_length(s->enc_write_ctx);
+            if (eivlen <= 1)
+                eivlen = 0;
+        }
+        /* Need explicit part of IV for GCM mode */
+        else if (mode == EVP_CIPH_GCM_MODE)
+            eivlen = EVP_GCM_TLS_EXPLICIT_IV_LEN;
+        else if (mode == EVP_CIPH_CCM_MODE)
+            eivlen = EVP_CCM_TLS_EXPLICIT_IV_LEN;
+        else
+            eivlen = 0;
+    } else
+        eivlen = 0;
+
+    /* lets setup the record stuff. */
+    SSL3_RECORD_set_data(&wr, p + eivlen); /* make room for IV in case of CBC */
+    SSL3_RECORD_set_length(&wr, len);
+    SSL3_RECORD_set_input(&wr, (unsigned char *)buf);
+
+    /*
+     * we now 'read' from wr.input, wr.length bytes into wr.data
+     */
+
+    /* first we compress */
+    if (s->compress != NULL) {
+        if (!ssl3_do_compress(s, &wr)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_DTLS1_WRITE,
+                     SSL_R_COMPRESSION_FAILURE);
+            return -1;
+        }
+    } else {
+        memcpy(SSL3_RECORD_get_data(&wr), SSL3_RECORD_get_input(&wr),
+               SSL3_RECORD_get_length(&wr));
+        SSL3_RECORD_reset_input(&wr);
+    }
+
+    /*
+     * we should still have the output to wr.data and the input from
+     * wr.input.  Length should be wr.length. wr.data still points in the
+     * wb->buf
+     */
+
+    if (!SSL_WRITE_ETM(s) && mac_size != 0) {
+        if (!s->method->ssl3_enc->mac(s, &wr,
+                                      &(p[SSL3_RECORD_get_length(&wr) + eivlen]),
+                                      1)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_DTLS1_WRITE,
+                     ERR_R_INTERNAL_ERROR);
+            return -1;
+        }
+        SSL3_RECORD_add_length(&wr, mac_size);
+    }
+
+    /* this is true regardless of mac size */
+    SSL3_RECORD_set_data(&wr, p);
+    SSL3_RECORD_reset_input(&wr);
+
+    if (eivlen)
+        SSL3_RECORD_add_length(&wr, eivlen);
+
+    if (s->method->ssl3_enc->enc(s, &wr, 1, 1) < 1) {
+        if (!ossl_statem_in_error(s)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_DTLS1_WRITE,
+                     ERR_R_INTERNAL_ERROR);
+        }
+        return -1;
+    }
+
+    if (SSL_WRITE_ETM(s) && mac_size != 0) {
+        if (!s->method->ssl3_enc->mac(s, &wr,
+                                      &(p[SSL3_RECORD_get_length(&wr)]), 1)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_DTLS1_WRITE,
+                     ERR_R_INTERNAL_ERROR);
+            return -1;
+        }
+        SSL3_RECORD_add_length(&wr, mac_size);
+    }
+
+    /* record length after mac and block padding */
+
+    /* there's only one epoch between handshake and app data */
+
+    s2n(s->rlayer.d->w_epoch, pseq);
+
+    memcpy(pseq, &(s->rlayer.write_sequence[2]), 6);
+    pseq += 6;
+    s2n(SSL3_RECORD_get_length(&wr), pseq);
+
+    if (s->msg_callback)
+        s->msg_callback(1, 0, SSL3_RT_HEADER, pseq - DTLS1_RT_HEADER_LENGTH,
+                        DTLS1_RT_HEADER_LENGTH, s, s->msg_callback_arg);
+
+    /*
+     * we should now have wr.data pointing to the encrypted data, which is
+     * wr->length long
+     */
+    SSL3_RECORD_set_type(&wr, type); /* not needed but helps for debugging */
+    SSL3_RECORD_add_length(&wr, DTLS1_RT_HEADER_LENGTH);
+
+    ssl3_record_sequence_update(&(s->rlayer.write_sequence[0]));
+
+    if (create_empty_fragment) {
+        /*
+         * we are in a recursive call; just return the length, don't write
+         * out anything here
+         */
+        *written = wr.length;
+        return 1;
+    }
+
+    /* now let's set up wb */
+    SSL3_BUFFER_set_left(wb, prefix_len + SSL3_RECORD_get_length(&wr));
+    SSL3_BUFFER_set_offset(wb, 0);
+
+    /*
+     * memorize arguments so that ssl3_write_pending can detect bad write
+     * retries later
+     */
+    s->rlayer.wpend_tot = len;
+    s->rlayer.wpend_buf = buf;
+    s->rlayer.wpend_type = type;
+    s->rlayer.wpend_ret = len;
+
+    /* we now just need to write the buffer. Calls SSLfatal() as required. */
+    return ssl3_write_pending(s, type, buf, len, written);
+}
+
+DTLS1_BITMAP *dtls1_get_bitmap(SSL *s, SSL3_RECORD *rr,
+                               unsigned int *is_next_epoch)
+{
+
+    *is_next_epoch = 0;
+
+    /* In current epoch, accept HM, CCS, DATA, & ALERT */
+    if (rr->epoch == s->rlayer.d->r_epoch)
+        return &s->rlayer.d->bitmap;
+
+    /*
+     * Only HM and ALERT messages can be from the next epoch and only if we
+     * have already processed all of the unprocessed records from the last
+     * epoch
+     */
+    else if (rr->epoch == (unsigned long)(s->rlayer.d->r_epoch + 1) &&
+             s->rlayer.d->unprocessed_rcds.epoch != s->rlayer.d->r_epoch &&
+             (rr->type == SSL3_RT_HANDSHAKE || rr->type == SSL3_RT_ALERT)) {
+        *is_next_epoch = 1;
+        return &s->rlayer.d->next_bitmap;
+    }
+
+    return NULL;
+}
+
+void dtls1_reset_seq_numbers(SSL *s, int rw)
+{
+    unsigned char *seq;
+    unsigned int seq_bytes = sizeof(s->rlayer.read_sequence);
+
+    if (rw & SSL3_CC_READ) {
+        seq = s->rlayer.read_sequence;
+        s->rlayer.d->r_epoch++;
+        memcpy(&s->rlayer.d->bitmap, &s->rlayer.d->next_bitmap,
+               sizeof(s->rlayer.d->bitmap));
+        memset(&s->rlayer.d->next_bitmap, 0, sizeof(s->rlayer.d->next_bitmap));
+
+        /*
+         * We must not use any buffered messages received from the previous
+         * epoch
+         */
+        dtls1_clear_received_buffer(s);
+    } else {
+        seq = s->rlayer.write_sequence;
+        memcpy(s->rlayer.d->last_write_sequence, seq,
+               sizeof(s->rlayer.write_sequence));
+        s->rlayer.d->w_epoch++;
+    }
+
+    memset(seq, 0, seq_bytes);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/record/rec_layer_s3.c b/trunk/3rdparty/openssl-1.1-fit/ssl/record/rec_layer_s3.c
new file mode 100644
index 000000000..b2f97ef90
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/record/rec_layer_s3.c
@@ -0,0 +1,1771 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <limits.h>
+#include <errno.h>
+#include "../ssl_locl.h"
+#include <openssl/evp.h>
+#include <openssl/buffer.h>
+#include <openssl/rand.h>
+#include "record_locl.h"
+#include "../packet_locl.h"
+
+#if     defined(OPENSSL_SMALL_FOOTPRINT) || \
+        !(      defined(AES_ASM) &&     ( \
+                defined(__x86_64)       || defined(__x86_64__)  || \
+                defined(_M_AMD64)       || defined(_M_X64)      ) \
+        )
+# undef EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK
+# define EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK 0
+#endif
+
+void RECORD_LAYER_init(RECORD_LAYER *rl, SSL *s)
+{
+    rl->s = s;
+    RECORD_LAYER_set_first_record(&s->rlayer);
+    SSL3_RECORD_clear(rl->rrec, SSL_MAX_PIPELINES);
+}
+
+void RECORD_LAYER_clear(RECORD_LAYER *rl)
+{
+    rl->rstate = SSL_ST_READ_HEADER;
+
+    /*
+     * Do I need to clear read_ahead? As far as I can tell read_ahead did not
+     * previously get reset by SSL_clear...so I'll keep it that way..but is
+     * that right?
+     */
+
+    rl->packet = NULL;
+    rl->packet_length = 0;
+    rl->wnum = 0;
+    memset(rl->handshake_fragment, 0, sizeof(rl->handshake_fragment));
+    rl->handshake_fragment_len = 0;
+    rl->wpend_tot = 0;
+    rl->wpend_type = 0;
+    rl->wpend_ret = 0;
+    rl->wpend_buf = NULL;
+
+    SSL3_BUFFER_clear(&rl->rbuf);
+    ssl3_release_write_buffer(rl->s);
+    rl->numrpipes = 0;
+    SSL3_RECORD_clear(rl->rrec, SSL_MAX_PIPELINES);
+
+    RECORD_LAYER_reset_read_sequence(rl);
+    RECORD_LAYER_reset_write_sequence(rl);
+
+    if (rl->d)
+        DTLS_RECORD_LAYER_clear(rl);
+}
+
+void RECORD_LAYER_release(RECORD_LAYER *rl)
+{
+    if (SSL3_BUFFER_is_initialised(&rl->rbuf))
+        ssl3_release_read_buffer(rl->s);
+    if (rl->numwpipes > 0)
+        ssl3_release_write_buffer(rl->s);
+    SSL3_RECORD_release(rl->rrec, SSL_MAX_PIPELINES);
+}
+
+/* Checks if we have unprocessed read ahead data pending */
+int RECORD_LAYER_read_pending(const RECORD_LAYER *rl)
+{
+    return SSL3_BUFFER_get_left(&rl->rbuf) != 0;
+}
+
+/* Checks if we have decrypted unread record data pending */
+int RECORD_LAYER_processed_read_pending(const RECORD_LAYER *rl)
+{
+    size_t curr_rec = 0, num_recs = RECORD_LAYER_get_numrpipes(rl);
+    const SSL3_RECORD *rr = rl->rrec;
+
+    while (curr_rec < num_recs && SSL3_RECORD_is_read(&rr[curr_rec]))
+        curr_rec++;
+
+    return curr_rec < num_recs;
+}
+
+int RECORD_LAYER_write_pending(const RECORD_LAYER *rl)
+{
+    return (rl->numwpipes > 0)
+        && SSL3_BUFFER_get_left(&rl->wbuf[rl->numwpipes - 1]) != 0;
+}
+
+void RECORD_LAYER_reset_read_sequence(RECORD_LAYER *rl)
+{
+    memset(rl->read_sequence, 0, sizeof(rl->read_sequence));
+}
+
+void RECORD_LAYER_reset_write_sequence(RECORD_LAYER *rl)
+{
+    memset(rl->write_sequence, 0, sizeof(rl->write_sequence));
+}
+
+size_t ssl3_pending(const SSL *s)
+{
+    size_t i, num = 0;
+
+    if (s->rlayer.rstate == SSL_ST_READ_BODY)
+        return 0;
+
+    for (i = 0; i < RECORD_LAYER_get_numrpipes(&s->rlayer); i++) {
+        if (SSL3_RECORD_get_type(&s->rlayer.rrec[i])
+            != SSL3_RT_APPLICATION_DATA)
+            return 0;
+        num += SSL3_RECORD_get_length(&s->rlayer.rrec[i]);
+    }
+
+    return num;
+}
+
+void SSL_CTX_set_default_read_buffer_len(SSL_CTX *ctx, size_t len)
+{
+    ctx->default_read_buf_len = len;
+}
+
+void SSL_set_default_read_buffer_len(SSL *s, size_t len)
+{
+    SSL3_BUFFER_set_default_len(RECORD_LAYER_get_rbuf(&s->rlayer), len);
+}
+
+const char *SSL_rstate_string_long(const SSL *s)
+{
+    switch (s->rlayer.rstate) {
+    case SSL_ST_READ_HEADER:
+        return "read header";
+    case SSL_ST_READ_BODY:
+        return "read body";
+    case SSL_ST_READ_DONE:
+        return "read done";
+    default:
+        return "unknown";
+    }
+}
+
+const char *SSL_rstate_string(const SSL *s)
+{
+    switch (s->rlayer.rstate) {
+    case SSL_ST_READ_HEADER:
+        return "RH";
+    case SSL_ST_READ_BODY:
+        return "RB";
+    case SSL_ST_READ_DONE:
+        return "RD";
+    default:
+        return "unknown";
+    }
+}
+
+/*
+ * Return values are as per SSL_read()
+ */
+int ssl3_read_n(SSL *s, size_t n, size_t max, int extend, int clearold,
+                size_t *readbytes)
+{
+    /*
+     * If extend == 0, obtain new n-byte packet; if extend == 1, increase
+     * packet by another n bytes. The packet will be in the sub-array of
+     * s->s3->rbuf.buf specified by s->packet and s->packet_length. (If
+     * s->rlayer.read_ahead is set, 'max' bytes may be stored in rbuf [plus
+     * s->packet_length bytes if extend == 1].)
+     * if clearold == 1, move the packet to the start of the buffer; if
+     * clearold == 0 then leave any old packets where they were
+     */
+    size_t len, left, align = 0;
+    unsigned char *pkt;
+    SSL3_BUFFER *rb;
+
+    if (n == 0)
+        return 0;
+
+    rb = &s->rlayer.rbuf;
+    if (rb->buf == NULL)
+        if (!ssl3_setup_read_buffer(s)) {
+            /* SSLfatal() already called */
+            return -1;
+        }
+
+    left = rb->left;
+#if defined(SSL3_ALIGN_PAYLOAD) && SSL3_ALIGN_PAYLOAD!=0
+    align = (size_t)rb->buf + SSL3_RT_HEADER_LENGTH;
+    align = SSL3_ALIGN_PAYLOAD - 1 - ((align - 1) % SSL3_ALIGN_PAYLOAD);
+#endif
+
+    if (!extend) {
+        /* start with empty packet ... */
+        if (left == 0)
+            rb->offset = align;
+        else if (align != 0 && left >= SSL3_RT_HEADER_LENGTH) {
+            /*
+             * check if next packet length is large enough to justify payload
+             * alignment...
+             */
+            pkt = rb->buf + rb->offset;
+            if (pkt[0] == SSL3_RT_APPLICATION_DATA
+                && (pkt[3] << 8 | pkt[4]) >= 128) {
+                /*
+                 * Note that even if packet is corrupted and its length field
+                 * is insane, we can only be led to wrong decision about
+                 * whether memmove will occur or not. Header values has no
+                 * effect on memmove arguments and therefore no buffer
+                 * overrun can be triggered.
+                 */
+                memmove(rb->buf + align, pkt, left);
+                rb->offset = align;
+            }
+        }
+        s->rlayer.packet = rb->buf + rb->offset;
+        s->rlayer.packet_length = 0;
+        /* ... now we can act as if 'extend' was set */
+    }
+
+    len = s->rlayer.packet_length;
+    pkt = rb->buf + align;
+    /*
+     * Move any available bytes to front of buffer: 'len' bytes already
+     * pointed to by 'packet', 'left' extra ones at the end
+     */
+    if (s->rlayer.packet != pkt && clearold == 1) {
+        memmove(pkt, s->rlayer.packet, len + left);
+        s->rlayer.packet = pkt;
+        rb->offset = len + align;
+    }
+
+    /*
+     * For DTLS/UDP reads should not span multiple packets because the read
+     * operation returns the whole packet at once (as long as it fits into
+     * the buffer).
+     */
+    if (SSL_IS_DTLS(s)) {
+        if (left == 0 && extend)
+            return 0;
+        if (left > 0 && n > left)
+            n = left;
+    }
+
+    /* if there is enough in the buffer from a previous read, take some */
+    if (left >= n) {
+        s->rlayer.packet_length += n;
+        rb->left = left - n;
+        rb->offset += n;
+        *readbytes = n;
+        return 1;
+    }
+
+    /* else we need to read more data */
+
+    if (n > rb->len - rb->offset) {
+        /* does not happen */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_READ_N,
+                 ERR_R_INTERNAL_ERROR);
+        return -1;
+    }
+
+    /* We always act like read_ahead is set for DTLS */
+    if (!s->rlayer.read_ahead && !SSL_IS_DTLS(s))
+        /* ignore max parameter */
+        max = n;
+    else {
+        if (max < n)
+            max = n;
+        if (max > rb->len - rb->offset)
+            max = rb->len - rb->offset;
+    }
+
+    while (left < n) {
+        size_t bioread = 0;
+        int ret;
+
+        /*
+         * Now we have len+left bytes at the front of s->s3->rbuf.buf and
+         * need to read in more until we have len+n (up to len+max if
+         * possible)
+         */
+
+        clear_sys_error();
+        if (s->rbio != NULL) {
+            s->rwstate = SSL_READING;
+            /* TODO(size_t): Convert this function */
+            ret = BIO_read(s->rbio, pkt + len + left, max - left);
+            if (ret >= 0)
+                bioread = ret;
+        } else {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_READ_N,
+                     SSL_R_READ_BIO_NOT_SET);
+            ret = -1;
+        }
+
+        if (ret <= 0) {
+            rb->left = left;
+            if (s->mode & SSL_MODE_RELEASE_BUFFERS && !SSL_IS_DTLS(s))
+                if (len + left == 0)
+                    ssl3_release_read_buffer(s);
+            return ret;
+        }
+        left += bioread;
+        /*
+         * reads should *never* span multiple packets for DTLS because the
+         * underlying transport protocol is message oriented as opposed to
+         * byte oriented as in the TLS case.
+         */
+        if (SSL_IS_DTLS(s)) {
+            if (n > left)
+                n = left;       /* makes the while condition false */
+        }
+    }
+
+    /* done reading, now the book-keeping */
+    rb->offset += n;
+    rb->left = left - n;
+    s->rlayer.packet_length += n;
+    s->rwstate = SSL_NOTHING;
+    *readbytes = n;
+    return 1;
+}
+
+/*
+ * Call this to write data in records of type 'type' It will return <= 0 if
+ * not all data has been sent or non-blocking IO.
+ */
+int ssl3_write_bytes(SSL *s, int type, const void *buf_, size_t len,
+                     size_t *written)
+{
+    const unsigned char *buf = buf_;
+    size_t tot;
+    size_t n, max_send_fragment, split_send_fragment, maxpipes;
+#if !defined(OPENSSL_NO_MULTIBLOCK) && EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK
+    size_t nw;
+#endif
+    SSL3_BUFFER *wb = &s->rlayer.wbuf[0];
+    int i;
+    size_t tmpwrit;
+
+    s->rwstate = SSL_NOTHING;
+    tot = s->rlayer.wnum;
+    /*
+     * ensure that if we end up with a smaller value of data to write out
+     * than the original len from a write which didn't complete for
+     * non-blocking I/O and also somehow ended up avoiding the check for
+     * this in ssl3_write_pending/SSL_R_BAD_WRITE_RETRY as it must never be
+     * possible to end up with (len-tot) as a large number that will then
+     * promptly send beyond the end of the users buffer ... so we trap and
+     * report the error in a way the user will notice
+     */
+    if ((len < s->rlayer.wnum)
+        || ((wb->left != 0) && (len < (s->rlayer.wnum + s->rlayer.wpend_tot)))) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_WRITE_BYTES,
+                 SSL_R_BAD_LENGTH);
+        return -1;
+    }
+
+    if (s->early_data_state == SSL_EARLY_DATA_WRITING
+            && !early_data_count_ok(s, len, 0, 1)) {
+        /* SSLfatal() already called */
+        return -1;
+    }
+
+    s->rlayer.wnum = 0;
+
+    /*
+     * When writing early data on the server side we could be "in_init" in
+     * between receiving the EoED and the CF - but we don't want to handle those
+     * messages yet.
+     */
+    if (SSL_in_init(s) && !ossl_statem_get_in_handshake(s)
+            && s->early_data_state != SSL_EARLY_DATA_UNAUTH_WRITING) {
+        i = s->handshake_func(s);
+        /* SSLfatal() already called */
+        if (i < 0)
+            return i;
+        if (i == 0) {
+            return -1;
+        }
+    }
+
+    /*
+     * first check if there is a SSL3_BUFFER still being written out.  This
+     * will happen with non blocking IO
+     */
+    if (wb->left != 0) {
+        /* SSLfatal() already called if appropriate */
+        i = ssl3_write_pending(s, type, &buf[tot], s->rlayer.wpend_tot,
+                               &tmpwrit);
+        if (i <= 0) {
+            /* XXX should we ssl3_release_write_buffer if i<0? */
+            s->rlayer.wnum = tot;
+            return i;
+        }
+        tot += tmpwrit;               /* this might be last fragment */
+    }
+#if !defined(OPENSSL_NO_MULTIBLOCK) && EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK
+    /*
+     * Depending on platform multi-block can deliver several *times*
+     * better performance. Downside is that it has to allocate
+     * jumbo buffer to accommodate up to 8 records, but the
+     * compromise is considered worthy.
+     */
+    if (type == SSL3_RT_APPLICATION_DATA &&
+        len >= 4 * (max_send_fragment = ssl_get_max_send_fragment(s)) &&
+        s->compress == NULL && s->msg_callback == NULL &&
+        !SSL_WRITE_ETM(s) && SSL_USE_EXPLICIT_IV(s) &&
+        EVP_CIPHER_flags(EVP_CIPHER_CTX_cipher(s->enc_write_ctx)) &
+        EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK) {
+        unsigned char aad[13];
+        EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM mb_param;
+        size_t packlen;
+        int packleni;
+
+        /* minimize address aliasing conflicts */
+        if ((max_send_fragment & 0xfff) == 0)
+            max_send_fragment -= 512;
+
+        if (tot == 0 || wb->buf == NULL) { /* allocate jumbo buffer */
+            ssl3_release_write_buffer(s);
+
+            packlen = EVP_CIPHER_CTX_ctrl(s->enc_write_ctx,
+                                          EVP_CTRL_TLS1_1_MULTIBLOCK_MAX_BUFSIZE,
+                                          (int)max_send_fragment, NULL);
+
+            if (len >= 8 * max_send_fragment)
+                packlen *= 8;
+            else
+                packlen *= 4;
+
+            if (!ssl3_setup_write_buffer(s, 1, packlen)) {
+                /* SSLfatal() already called */
+                return -1;
+            }
+        } else if (tot == len) { /* done? */
+            /* free jumbo buffer */
+            ssl3_release_write_buffer(s);
+            *written = tot;
+            return 1;
+        }
+
+        n = (len - tot);
+        for (;;) {
+            if (n < 4 * max_send_fragment) {
+                /* free jumbo buffer */
+                ssl3_release_write_buffer(s);
+                break;
+            }
+
+            if (s->s3->alert_dispatch) {
+                i = s->method->ssl_dispatch_alert(s);
+                if (i <= 0) {
+                    /* SSLfatal() already called if appropriate */
+                    s->rlayer.wnum = tot;
+                    return i;
+                }
+            }
+
+            if (n >= 8 * max_send_fragment)
+                nw = max_send_fragment * (mb_param.interleave = 8);
+            else
+                nw = max_send_fragment * (mb_param.interleave = 4);
+
+            memcpy(aad, s->rlayer.write_sequence, 8);
+            aad[8] = type;
+            aad[9] = (unsigned char)(s->version >> 8);
+            aad[10] = (unsigned char)(s->version);
+            aad[11] = 0;
+            aad[12] = 0;
+            mb_param.out = NULL;
+            mb_param.inp = aad;
+            mb_param.len = nw;
+
+            packleni = EVP_CIPHER_CTX_ctrl(s->enc_write_ctx,
+                                          EVP_CTRL_TLS1_1_MULTIBLOCK_AAD,
+                                          sizeof(mb_param), &mb_param);
+            packlen = (size_t)packleni;
+            if (packleni <= 0 || packlen > wb->len) { /* never happens */
+                /* free jumbo buffer */
+                ssl3_release_write_buffer(s);
+                break;
+            }
+
+            mb_param.out = wb->buf;
+            mb_param.inp = &buf[tot];
+            mb_param.len = nw;
+
+            if (EVP_CIPHER_CTX_ctrl(s->enc_write_ctx,
+                                    EVP_CTRL_TLS1_1_MULTIBLOCK_ENCRYPT,
+                                    sizeof(mb_param), &mb_param) <= 0)
+                return -1;
+
+            s->rlayer.write_sequence[7] += mb_param.interleave;
+            if (s->rlayer.write_sequence[7] < mb_param.interleave) {
+                int j = 6;
+                while (j >= 0 && (++s->rlayer.write_sequence[j--]) == 0) ;
+            }
+
+            wb->offset = 0;
+            wb->left = packlen;
+
+            s->rlayer.wpend_tot = nw;
+            s->rlayer.wpend_buf = &buf[tot];
+            s->rlayer.wpend_type = type;
+            s->rlayer.wpend_ret = nw;
+
+            i = ssl3_write_pending(s, type, &buf[tot], nw, &tmpwrit);
+            if (i <= 0) {
+                /* SSLfatal() already called if appropriate */
+                if (i < 0 && (!s->wbio || !BIO_should_retry(s->wbio))) {
+                    /* free jumbo buffer */
+                    ssl3_release_write_buffer(s);
+                }
+                s->rlayer.wnum = tot;
+                return i;
+            }
+            if (tmpwrit == n) {
+                /* free jumbo buffer */
+                ssl3_release_write_buffer(s);
+                *written = tot + tmpwrit;
+                return 1;
+            }
+            n -= tmpwrit;
+            tot += tmpwrit;
+        }
+    } else
+#endif  /* !defined(OPENSSL_NO_MULTIBLOCK) && EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK */
+    if (tot == len) {           /* done? */
+        if (s->mode & SSL_MODE_RELEASE_BUFFERS && !SSL_IS_DTLS(s))
+            ssl3_release_write_buffer(s);
+
+        *written = tot;
+        return 1;
+    }
+
+    n = (len - tot);
+
+    max_send_fragment = ssl_get_max_send_fragment(s);
+    split_send_fragment = ssl_get_split_send_fragment(s);
+    /*
+     * If max_pipelines is 0 then this means "undefined" and we default to
+     * 1 pipeline. Similarly if the cipher does not support pipelined
+     * processing then we also only use 1 pipeline, or if we're not using
+     * explicit IVs
+     */
+    maxpipes = s->max_pipelines;
+    if (maxpipes > SSL_MAX_PIPELINES) {
+        /*
+         * We should have prevented this when we set max_pipelines so we
+         * shouldn't get here
+         */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_WRITE_BYTES,
+                 ERR_R_INTERNAL_ERROR);
+        return -1;
+    }
+    if (maxpipes == 0
+        || s->enc_write_ctx == NULL
+        || !(EVP_CIPHER_flags(EVP_CIPHER_CTX_cipher(s->enc_write_ctx))
+             & EVP_CIPH_FLAG_PIPELINE)
+        || !SSL_USE_EXPLICIT_IV(s))
+        maxpipes = 1;
+    if (max_send_fragment == 0 || split_send_fragment == 0
+        || split_send_fragment > max_send_fragment) {
+        /*
+         * We should have prevented this when we set/get the split and max send
+         * fragments so we shouldn't get here
+         */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_WRITE_BYTES,
+                 ERR_R_INTERNAL_ERROR);
+        return -1;
+    }
+
+    for (;;) {
+        size_t pipelens[SSL_MAX_PIPELINES], tmppipelen, remain;
+        size_t numpipes, j;
+
+        if (n == 0)
+            numpipes = 1;
+        else
+            numpipes = ((n - 1) / split_send_fragment) + 1;
+        if (numpipes > maxpipes)
+            numpipes = maxpipes;
+
+        if (n / numpipes >= max_send_fragment) {
+            /*
+             * We have enough data to completely fill all available
+             * pipelines
+             */
+            for (j = 0; j < numpipes; j++) {
+                pipelens[j] = max_send_fragment;
+            }
+        } else {
+            /* We can partially fill all available pipelines */
+            tmppipelen = n / numpipes;
+            remain = n % numpipes;
+            for (j = 0; j < numpipes; j++) {
+                pipelens[j] = tmppipelen;
+                if (j < remain)
+                    pipelens[j]++;
+            }
+        }
+
+        i = do_ssl3_write(s, type, &(buf[tot]), pipelens, numpipes, 0,
+                          &tmpwrit);
+        if (i <= 0) {
+            /* SSLfatal() already called if appropriate */
+            /* XXX should we ssl3_release_write_buffer if i<0? */
+            s->rlayer.wnum = tot;
+            return i;
+        }
+
+        if (tmpwrit == n ||
+            (type == SSL3_RT_APPLICATION_DATA &&
+             (s->mode & SSL_MODE_ENABLE_PARTIAL_WRITE))) {
+            /*
+             * next chunk of data should get another prepended empty fragment
+             * in ciphersuites with known-IV weakness:
+             */
+            s->s3->empty_fragment_done = 0;
+
+            if ((i == (int)n) && s->mode & SSL_MODE_RELEASE_BUFFERS &&
+                !SSL_IS_DTLS(s))
+                ssl3_release_write_buffer(s);
+
+            *written = tot + tmpwrit;
+            return 1;
+        }
+
+        n -= tmpwrit;
+        tot += tmpwrit;
+    }
+}
+
+int do_ssl3_write(SSL *s, int type, const unsigned char *buf,
+                  size_t *pipelens, size_t numpipes,
+                  int create_empty_fragment, size_t *written)
+{
+    WPACKET pkt[SSL_MAX_PIPELINES];
+    SSL3_RECORD wr[SSL_MAX_PIPELINES];
+    WPACKET *thispkt;
+    SSL3_RECORD *thiswr;
+    unsigned char *recordstart;
+    int i, mac_size, clear = 0;
+    size_t prefix_len = 0;
+    int eivlen = 0;
+    size_t align = 0;
+    SSL3_BUFFER *wb;
+    SSL_SESSION *sess;
+    size_t totlen = 0, len, wpinited = 0;
+    size_t j;
+
+    for (j = 0; j < numpipes; j++)
+        totlen += pipelens[j];
+    /*
+     * first check if there is a SSL3_BUFFER still being written out.  This
+     * will happen with non blocking IO
+     */
+    if (RECORD_LAYER_write_pending(&s->rlayer)) {
+        /* Calls SSLfatal() as required */
+        return ssl3_write_pending(s, type, buf, totlen, written);
+    }
+
+    /* If we have an alert to send, lets send it */
+    if (s->s3->alert_dispatch) {
+        i = s->method->ssl_dispatch_alert(s);
+        if (i <= 0) {
+            /* SSLfatal() already called if appropriate */
+            return i;
+        }
+        /* if it went, fall through and send more stuff */
+    }
+
+    if (s->rlayer.numwpipes < numpipes) {
+        if (!ssl3_setup_write_buffer(s, numpipes, 0)) {
+            /* SSLfatal() already called */
+            return -1;
+        }
+    }
+
+    if (totlen == 0 && !create_empty_fragment)
+        return 0;
+
+    sess = s->session;
+
+    if ((sess == NULL) ||
+        (s->enc_write_ctx == NULL) || (EVP_MD_CTX_md(s->write_hash) == NULL)) {
+        clear = s->enc_write_ctx ? 0 : 1; /* must be AEAD cipher */
+        mac_size = 0;
+    } else {
+        /* TODO(siz_t): Convert me */
+        mac_size = EVP_MD_CTX_size(s->write_hash);
+        if (mac_size < 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+    }
+
+    /*
+     * 'create_empty_fragment' is true only when this function calls itself
+     */
+    if (!clear && !create_empty_fragment && !s->s3->empty_fragment_done) {
+        /*
+         * countermeasure against known-IV weakness in CBC ciphersuites (see
+         * http://www.openssl.org/~bodo/tls-cbc.txt)
+         */
+
+        if (s->s3->need_empty_fragments && type == SSL3_RT_APPLICATION_DATA) {
+            /*
+             * recursive function call with 'create_empty_fragment' set; this
+             * prepares and buffers the data for an empty fragment (these
+             * 'prefix_len' bytes are sent out later together with the actual
+             * payload)
+             */
+            size_t tmppipelen = 0;
+            int ret;
+
+            ret = do_ssl3_write(s, type, buf, &tmppipelen, 1, 1, &prefix_len);
+            if (ret <= 0) {
+                /* SSLfatal() already called if appropriate */
+                goto err;
+            }
+
+            if (prefix_len >
+                (SSL3_RT_HEADER_LENGTH + SSL3_RT_SEND_MAX_ENCRYPTED_OVERHEAD)) {
+                /* insufficient space */
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                         ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+        }
+
+        s->s3->empty_fragment_done = 1;
+    }
+
+    if (create_empty_fragment) {
+        wb = &s->rlayer.wbuf[0];
+#if defined(SSL3_ALIGN_PAYLOAD) && SSL3_ALIGN_PAYLOAD!=0
+        /*
+         * extra fragment would be couple of cipher blocks, which would be
+         * multiple of SSL3_ALIGN_PAYLOAD, so if we want to align the real
+         * payload, then we can just pretend we simply have two headers.
+         */
+        align = (size_t)SSL3_BUFFER_get_buf(wb) + 2 * SSL3_RT_HEADER_LENGTH;
+        align = SSL3_ALIGN_PAYLOAD - 1 - ((align - 1) % SSL3_ALIGN_PAYLOAD);
+#endif
+        SSL3_BUFFER_set_offset(wb, align);
+        if (!WPACKET_init_static_len(&pkt[0], SSL3_BUFFER_get_buf(wb),
+                                     SSL3_BUFFER_get_len(wb), 0)
+                || !WPACKET_allocate_bytes(&pkt[0], align, NULL)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        wpinited = 1;
+    } else if (prefix_len) {
+        wb = &s->rlayer.wbuf[0];
+        if (!WPACKET_init_static_len(&pkt[0],
+                                     SSL3_BUFFER_get_buf(wb),
+                                     SSL3_BUFFER_get_len(wb), 0)
+                || !WPACKET_allocate_bytes(&pkt[0], SSL3_BUFFER_get_offset(wb)
+                                                    + prefix_len, NULL)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        wpinited = 1;
+    } else {
+        for (j = 0; j < numpipes; j++) {
+            thispkt = &pkt[j];
+
+            wb = &s->rlayer.wbuf[j];
+#if defined(SSL3_ALIGN_PAYLOAD) && SSL3_ALIGN_PAYLOAD != 0
+            align = (size_t)SSL3_BUFFER_get_buf(wb) + SSL3_RT_HEADER_LENGTH;
+            align = SSL3_ALIGN_PAYLOAD - 1 - ((align - 1) % SSL3_ALIGN_PAYLOAD);
+#endif
+            SSL3_BUFFER_set_offset(wb, align);
+            if (!WPACKET_init_static_len(thispkt, SSL3_BUFFER_get_buf(wb),
+                                         SSL3_BUFFER_get_len(wb), 0)
+                    || !WPACKET_allocate_bytes(thispkt, align, NULL)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                         ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+            wpinited++;
+        }
+    }
+
+    /* Explicit IV length, block ciphers appropriate version flag */
+    if (s->enc_write_ctx && SSL_USE_EXPLICIT_IV(s) && !SSL_TREAT_AS_TLS13(s)) {
+        int mode = EVP_CIPHER_CTX_mode(s->enc_write_ctx);
+        if (mode == EVP_CIPH_CBC_MODE) {
+            /* TODO(size_t): Convert me */
+            eivlen = EVP_CIPHER_CTX_iv_length(s->enc_write_ctx);
+            if (eivlen <= 1)
+                eivlen = 0;
+        } else if (mode == EVP_CIPH_GCM_MODE) {
+            /* Need explicit part of IV for GCM mode */
+            eivlen = EVP_GCM_TLS_EXPLICIT_IV_LEN;
+        } else if (mode == EVP_CIPH_CCM_MODE) {
+            eivlen = EVP_CCM_TLS_EXPLICIT_IV_LEN;
+        }
+    }
+
+    totlen = 0;
+    /* Clear our SSL3_RECORD structures */
+    memset(wr, 0, sizeof(wr));
+    for (j = 0; j < numpipes; j++) {
+        unsigned int version = (s->version == TLS1_3_VERSION) ? TLS1_2_VERSION
+                                                              : s->version;
+        unsigned char *compressdata = NULL;
+        size_t maxcomplen;
+        unsigned int rectype;
+
+        thispkt = &pkt[j];
+        thiswr = &wr[j];
+
+        /*
+         * In TLSv1.3, once encrypting, we always use application data for the
+         * record type
+         */
+        if (SSL_TREAT_AS_TLS13(s)
+                && s->enc_write_ctx != NULL
+                && (s->statem.enc_write_state != ENC_WRITE_STATE_WRITE_PLAIN_ALERTS
+                    || type != SSL3_RT_ALERT))
+            rectype = SSL3_RT_APPLICATION_DATA;
+        else
+            rectype = type;
+        SSL3_RECORD_set_type(thiswr, rectype);
+
+        /*
+         * Some servers hang if initial client hello is larger than 256 bytes
+         * and record version number > TLS 1.0
+         */
+        if (SSL_get_state(s) == TLS_ST_CW_CLNT_HELLO
+                && !s->renegotiate
+                && TLS1_get_version(s) > TLS1_VERSION
+                && s->hello_retry_request == SSL_HRR_NONE)
+            version = TLS1_VERSION;
+        SSL3_RECORD_set_rec_version(thiswr, version);
+
+        maxcomplen = pipelens[j];
+        if (s->compress != NULL)
+            maxcomplen += SSL3_RT_MAX_COMPRESSED_OVERHEAD;
+
+        /* write the header */
+        if (!WPACKET_put_bytes_u8(thispkt, rectype)
+                || !WPACKET_put_bytes_u16(thispkt, version)
+                || !WPACKET_start_sub_packet_u16(thispkt)
+                || (eivlen > 0
+                    && !WPACKET_allocate_bytes(thispkt, eivlen, NULL))
+                || (maxcomplen > 0
+                    && !WPACKET_reserve_bytes(thispkt, maxcomplen,
+                                              &compressdata))) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        /* lets setup the record stuff. */
+        SSL3_RECORD_set_data(thiswr, compressdata);
+        SSL3_RECORD_set_length(thiswr, pipelens[j]);
+        SSL3_RECORD_set_input(thiswr, (unsigned char *)&buf[totlen]);
+        totlen += pipelens[j];
+
+        /*
+         * we now 'read' from thiswr->input, thiswr->length bytes into
+         * thiswr->data
+         */
+
+        /* first we compress */
+        if (s->compress != NULL) {
+            if (!ssl3_do_compress(s, thiswr)
+                    || !WPACKET_allocate_bytes(thispkt, thiswr->length, NULL)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                         SSL_R_COMPRESSION_FAILURE);
+                goto err;
+            }
+        } else {
+            if (!WPACKET_memcpy(thispkt, thiswr->input, thiswr->length)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                         ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+            SSL3_RECORD_reset_input(&wr[j]);
+        }
+
+        if (SSL_TREAT_AS_TLS13(s)
+                && s->enc_write_ctx != NULL
+                && (s->statem.enc_write_state != ENC_WRITE_STATE_WRITE_PLAIN_ALERTS
+                    || type != SSL3_RT_ALERT)) {
+            size_t rlen, max_send_fragment;
+
+            if (!WPACKET_put_bytes_u8(thispkt, type)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                         ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+            SSL3_RECORD_add_length(thiswr, 1);
+
+            /* Add TLS1.3 padding */
+            max_send_fragment = ssl_get_max_send_fragment(s);
+            rlen = SSL3_RECORD_get_length(thiswr);
+            if (rlen < max_send_fragment) {
+                size_t padding = 0;
+                size_t max_padding = max_send_fragment - rlen;
+                if (s->record_padding_cb != NULL) {
+                    padding = s->record_padding_cb(s, type, rlen, s->record_padding_arg);
+                } else if (s->block_padding > 0) {
+                    size_t mask = s->block_padding - 1;
+                    size_t remainder;
+
+                    /* optimize for power of 2 */
+                    if ((s->block_padding & mask) == 0)
+                        remainder = rlen & mask;
+                    else
+                        remainder = rlen % s->block_padding;
+                    /* don't want to add a block of padding if we don't have to */
+                    if (remainder == 0)
+                        padding = 0;
+                    else
+                        padding = s->block_padding - remainder;
+                }
+                if (padding > 0) {
+                    /* do not allow the record to exceed max plaintext length */
+                    if (padding > max_padding)
+                        padding = max_padding;
+                    if (!WPACKET_memset(thispkt, 0, padding)) {
+                        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                                 ERR_R_INTERNAL_ERROR);
+                        goto err;
+                    }
+                    SSL3_RECORD_add_length(thiswr, padding);
+                }
+            }
+        }
+
+        /*
+         * we should still have the output to thiswr->data and the input from
+         * wr->input. Length should be thiswr->length. thiswr->data still points
+         * in the wb->buf
+         */
+
+        if (!SSL_WRITE_ETM(s) && mac_size != 0) {
+            unsigned char *mac;
+
+            if (!WPACKET_allocate_bytes(thispkt, mac_size, &mac)
+                    || !s->method->ssl3_enc->mac(s, thiswr, mac, 1)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                         ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+        }
+
+        /*
+         * Reserve some bytes for any growth that may occur during encryption.
+         * This will be at most one cipher block or the tag length if using
+         * AEAD. SSL_RT_MAX_CIPHER_BLOCK_SIZE covers either case.
+         */
+        if (!WPACKET_reserve_bytes(thispkt, SSL_RT_MAX_CIPHER_BLOCK_SIZE,
+                                   NULL)
+                   /*
+                    * We also need next the amount of bytes written to this
+                    * sub-packet
+                    */
+                || !WPACKET_get_length(thispkt, &len)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        /* Get a pointer to the start of this record excluding header */
+        recordstart = WPACKET_get_curr(thispkt) - len;
+
+        SSL3_RECORD_set_data(thiswr, recordstart);
+        SSL3_RECORD_reset_input(thiswr);
+        SSL3_RECORD_set_length(thiswr, len);
+    }
+
+    if (s->statem.enc_write_state == ENC_WRITE_STATE_WRITE_PLAIN_ALERTS) {
+        /*
+         * We haven't actually negotiated the version yet, but we're trying to
+         * send early data - so we need to use the tls13enc function.
+         */
+        if (tls13_enc(s, wr, numpipes, 1) < 1) {
+            if (!ossl_statem_in_error(s)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                         ERR_R_INTERNAL_ERROR);
+            }
+            goto err;
+        }
+    } else {
+        if (s->method->ssl3_enc->enc(s, wr, numpipes, 1) < 1) {
+            if (!ossl_statem_in_error(s)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                         ERR_R_INTERNAL_ERROR);
+            }
+            goto err;
+        }
+    }
+
+    for (j = 0; j < numpipes; j++) {
+        size_t origlen;
+
+        thispkt = &pkt[j];
+        thiswr = &wr[j];
+
+        /* Allocate bytes for the encryption overhead */
+        if (!WPACKET_get_length(thispkt, &origlen)
+                   /* Encryption should never shrink the data! */
+                || origlen > thiswr->length
+                || (thiswr->length > origlen
+                    && !WPACKET_allocate_bytes(thispkt,
+                                               thiswr->length - origlen, NULL))) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        if (SSL_WRITE_ETM(s) && mac_size != 0) {
+            unsigned char *mac;
+
+            if (!WPACKET_allocate_bytes(thispkt, mac_size, &mac)
+                    || !s->method->ssl3_enc->mac(s, thiswr, mac, 1)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                         ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+            SSL3_RECORD_add_length(thiswr, mac_size);
+        }
+
+        if (!WPACKET_get_length(thispkt, &len)
+                || !WPACKET_close(thispkt)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        if (s->msg_callback) {
+            recordstart = WPACKET_get_curr(thispkt) - len
+                          - SSL3_RT_HEADER_LENGTH;
+            s->msg_callback(1, 0, SSL3_RT_HEADER, recordstart,
+                            SSL3_RT_HEADER_LENGTH, s,
+                            s->msg_callback_arg);
+
+            if (SSL_TREAT_AS_TLS13(s) && s->enc_write_ctx != NULL) {
+                unsigned char ctype = type;
+
+                s->msg_callback(1, s->version, SSL3_RT_INNER_CONTENT_TYPE,
+                                &ctype, 1, s, s->msg_callback_arg);
+            }
+        }
+
+        if (!WPACKET_finish(thispkt)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        /*
+         * we should now have thiswr->data pointing to the encrypted data, which
+         * is thiswr->length long
+         */
+        SSL3_RECORD_set_type(thiswr, type); /* not needed but helps for
+                                             * debugging */
+        SSL3_RECORD_add_length(thiswr, SSL3_RT_HEADER_LENGTH);
+
+        if (create_empty_fragment) {
+            /*
+             * we are in a recursive call; just return the length, don't write
+             * out anything here
+             */
+            if (j > 0) {
+                /* We should never be pipelining an empty fragment!! */
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DO_SSL3_WRITE,
+                         ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+            *written = SSL3_RECORD_get_length(thiswr);
+            return 1;
+        }
+
+        /* now let's set up wb */
+        SSL3_BUFFER_set_left(&s->rlayer.wbuf[j],
+                             prefix_len + SSL3_RECORD_get_length(thiswr));
+    }
+
+    /*
+     * memorize arguments so that ssl3_write_pending can detect bad write
+     * retries later
+     */
+    s->rlayer.wpend_tot = totlen;
+    s->rlayer.wpend_buf = buf;
+    s->rlayer.wpend_type = type;
+    s->rlayer.wpend_ret = totlen;
+
+    /* we now just need to write the buffer */
+    return ssl3_write_pending(s, type, buf, totlen, written);
+ err:
+    for (j = 0; j < wpinited; j++)
+        WPACKET_cleanup(&pkt[j]);
+    return -1;
+}
+
+/* if s->s3->wbuf.left != 0, we need to call this
+ *
+ * Return values are as per SSL_write()
+ */
+int ssl3_write_pending(SSL *s, int type, const unsigned char *buf, size_t len,
+                       size_t *written)
+{
+    int i;
+    SSL3_BUFFER *wb = s->rlayer.wbuf;
+    size_t currbuf = 0;
+    size_t tmpwrit = 0;
+
+    if ((s->rlayer.wpend_tot > len)
+        || (!(s->mode & SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER)
+            && (s->rlayer.wpend_buf != buf))
+        || (s->rlayer.wpend_type != type)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_WRITE_PENDING,
+                 SSL_R_BAD_WRITE_RETRY);
+        return -1;
+    }
+
+    for (;;) {
+        /* Loop until we find a buffer we haven't written out yet */
+        if (SSL3_BUFFER_get_left(&wb[currbuf]) == 0
+            && currbuf < s->rlayer.numwpipes - 1) {
+            currbuf++;
+            continue;
+        }
+        clear_sys_error();
+        if (s->wbio != NULL) {
+            s->rwstate = SSL_WRITING;
+            /* TODO(size_t): Convert this call */
+            i = BIO_write(s->wbio, (char *)
+                          &(SSL3_BUFFER_get_buf(&wb[currbuf])
+                            [SSL3_BUFFER_get_offset(&wb[currbuf])]),
+                          (unsigned int)SSL3_BUFFER_get_left(&wb[currbuf]));
+            if (i >= 0)
+                tmpwrit = i;
+        } else {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_WRITE_PENDING,
+                     SSL_R_BIO_NOT_SET);
+            i = -1;
+        }
+        if (i > 0 && tmpwrit == SSL3_BUFFER_get_left(&wb[currbuf])) {
+            SSL3_BUFFER_set_left(&wb[currbuf], 0);
+            SSL3_BUFFER_add_offset(&wb[currbuf], tmpwrit);
+            if (currbuf + 1 < s->rlayer.numwpipes)
+                continue;
+            s->rwstate = SSL_NOTHING;
+            *written = s->rlayer.wpend_ret;
+            return 1;
+        } else if (i <= 0) {
+            if (SSL_IS_DTLS(s)) {
+                /*
+                 * For DTLS, just drop it. That's kind of the whole point in
+                 * using a datagram service
+                 */
+                SSL3_BUFFER_set_left(&wb[currbuf], 0);
+            }
+            return i;
+        }
+        SSL3_BUFFER_add_offset(&wb[currbuf], tmpwrit);
+        SSL3_BUFFER_sub_left(&wb[currbuf], tmpwrit);
+    }
+}
+
+/*-
+ * Return up to 'len' payload bytes received in 'type' records.
+ * 'type' is one of the following:
+ *
+ *   -  SSL3_RT_HANDSHAKE (when ssl3_get_message calls us)
+ *   -  SSL3_RT_APPLICATION_DATA (when ssl3_read calls us)
+ *   -  0 (during a shutdown, no data has to be returned)
+ *
+ * If we don't have stored data to work from, read a SSL/TLS record first
+ * (possibly multiple records if we still don't have anything to return).
+ *
+ * This function must handle any surprises the peer may have for us, such as
+ * Alert records (e.g. close_notify) or renegotiation requests. ChangeCipherSpec
+ * messages are treated as if they were handshake messages *if* the |recd_type|
+ * argument is non NULL.
+ * Also if record payloads contain fragments too small to process, we store
+ * them until there is enough for the respective protocol (the record protocol
+ * may use arbitrary fragmentation and even interleaving):
+ *     Change cipher spec protocol
+ *             just 1 byte needed, no need for keeping anything stored
+ *     Alert protocol
+ *             2 bytes needed (AlertLevel, AlertDescription)
+ *     Handshake protocol
+ *             4 bytes needed (HandshakeType, uint24 length) -- we just have
+ *             to detect unexpected Client Hello and Hello Request messages
+ *             here, anything else is handled by higher layers
+ *     Application data protocol
+ *             none of our business
+ */
+int ssl3_read_bytes(SSL *s, int type, int *recvd_type, unsigned char *buf,
+                    size_t len, int peek, size_t *readbytes)
+{
+    int i, j, ret;
+    size_t n, curr_rec, num_recs, totalbytes;
+    SSL3_RECORD *rr;
+    SSL3_BUFFER *rbuf;
+    void (*cb) (const SSL *ssl, int type2, int val) = NULL;
+    int is_tls13 = SSL_IS_TLS13(s);
+
+    rbuf = &s->rlayer.rbuf;
+
+    if (!SSL3_BUFFER_is_initialised(rbuf)) {
+        /* Not initialized yet */
+        if (!ssl3_setup_read_buffer(s)) {
+            /* SSLfatal() already called */
+            return -1;
+        }
+    }
+
+    if ((type && (type != SSL3_RT_APPLICATION_DATA)
+         && (type != SSL3_RT_HANDSHAKE)) || (peek
+                                             && (type !=
+                                                 SSL3_RT_APPLICATION_DATA))) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_READ_BYTES,
+                 ERR_R_INTERNAL_ERROR);
+        return -1;
+    }
+
+    if ((type == SSL3_RT_HANDSHAKE) && (s->rlayer.handshake_fragment_len > 0))
+        /* (partially) satisfy request from storage */
+    {
+        unsigned char *src = s->rlayer.handshake_fragment;
+        unsigned char *dst = buf;
+        unsigned int k;
+
+        /* peek == 0 */
+        n = 0;
+        while ((len > 0) && (s->rlayer.handshake_fragment_len > 0)) {
+            *dst++ = *src++;
+            len--;
+            s->rlayer.handshake_fragment_len--;
+            n++;
+        }
+        /* move any remaining fragment bytes: */
+        for (k = 0; k < s->rlayer.handshake_fragment_len; k++)
+            s->rlayer.handshake_fragment[k] = *src++;
+
+        if (recvd_type != NULL)
+            *recvd_type = SSL3_RT_HANDSHAKE;
+
+        *readbytes = n;
+        return 1;
+    }
+
+    /*
+     * Now s->rlayer.handshake_fragment_len == 0 if type == SSL3_RT_HANDSHAKE.
+     */
+
+    if (!ossl_statem_get_in_handshake(s) && SSL_in_init(s)) {
+        /* type == SSL3_RT_APPLICATION_DATA */
+        i = s->handshake_func(s);
+        /* SSLfatal() already called */
+        if (i < 0)
+            return i;
+        if (i == 0)
+            return -1;
+    }
+ start:
+    s->rwstate = SSL_NOTHING;
+
+    /*-
+     * For each record 'i' up to |num_recs]
+     * rr[i].type     - is the type of record
+     * rr[i].data,    - data
+     * rr[i].off,     - offset into 'data' for next read
+     * rr[i].length,  - number of bytes.
+     */
+    rr = s->rlayer.rrec;
+    num_recs = RECORD_LAYER_get_numrpipes(&s->rlayer);
+
+    do {
+        /* get new records if necessary */
+        if (num_recs == 0) {
+            ret = ssl3_get_record(s);
+            if (ret <= 0) {
+                /* SSLfatal() already called if appropriate */
+                return ret;
+            }
+            num_recs = RECORD_LAYER_get_numrpipes(&s->rlayer);
+            if (num_recs == 0) {
+                /* Shouldn't happen */
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_READ_BYTES,
+                         ERR_R_INTERNAL_ERROR);
+                return -1;
+            }
+        }
+        /* Skip over any records we have already read */
+        for (curr_rec = 0;
+             curr_rec < num_recs && SSL3_RECORD_is_read(&rr[curr_rec]);
+             curr_rec++) ;
+        if (curr_rec == num_recs) {
+            RECORD_LAYER_set_numrpipes(&s->rlayer, 0);
+            num_recs = 0;
+            curr_rec = 0;
+        }
+    } while (num_recs == 0);
+    rr = &rr[curr_rec];
+
+    if (s->rlayer.handshake_fragment_len > 0
+            && SSL3_RECORD_get_type(rr) != SSL3_RT_HANDSHAKE
+            && SSL_IS_TLS13(s)) {
+        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_SSL3_READ_BYTES,
+                 SSL_R_MIXED_HANDSHAKE_AND_NON_HANDSHAKE_DATA);
+        return -1;
+    }
+
+    /*
+     * Reset the count of consecutive warning alerts if we've got a non-empty
+     * record that isn't an alert.
+     */
+    if (SSL3_RECORD_get_type(rr) != SSL3_RT_ALERT
+            && SSL3_RECORD_get_length(rr) != 0)
+        s->rlayer.alert_count = 0;
+
+    /* we now have a packet which can be read and processed */
+
+    if (s->s3->change_cipher_spec /* set when we receive ChangeCipherSpec,
+                                   * reset by ssl3_get_finished */
+        && (SSL3_RECORD_get_type(rr) != SSL3_RT_HANDSHAKE)) {
+        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_SSL3_READ_BYTES,
+                 SSL_R_DATA_BETWEEN_CCS_AND_FINISHED);
+        return -1;
+    }
+
+    /*
+     * If the other end has shut down, throw anything we read away (even in
+     * 'peek' mode)
+     */
+    if (s->shutdown & SSL_RECEIVED_SHUTDOWN) {
+        SSL3_RECORD_set_length(rr, 0);
+        s->rwstate = SSL_NOTHING;
+        return 0;
+    }
+
+    if (type == SSL3_RECORD_get_type(rr)
+        || (SSL3_RECORD_get_type(rr) == SSL3_RT_CHANGE_CIPHER_SPEC
+            && type == SSL3_RT_HANDSHAKE && recvd_type != NULL
+            && !is_tls13)) {
+        /*
+         * SSL3_RT_APPLICATION_DATA or
+         * SSL3_RT_HANDSHAKE or
+         * SSL3_RT_CHANGE_CIPHER_SPEC
+         */
+        /*
+         * make sure that we are not getting application data when we are
+         * doing a handshake for the first time
+         */
+        if (SSL_in_init(s) && (type == SSL3_RT_APPLICATION_DATA) &&
+            (s->enc_read_ctx == NULL)) {
+            SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_SSL3_READ_BYTES,
+                     SSL_R_APP_DATA_IN_HANDSHAKE);
+            return -1;
+        }
+
+        if (type == SSL3_RT_HANDSHAKE
+            && SSL3_RECORD_get_type(rr) == SSL3_RT_CHANGE_CIPHER_SPEC
+            && s->rlayer.handshake_fragment_len > 0) {
+            SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_SSL3_READ_BYTES,
+                     SSL_R_CCS_RECEIVED_EARLY);
+            return -1;
+        }
+
+        if (recvd_type != NULL)
+            *recvd_type = SSL3_RECORD_get_type(rr);
+
+        if (len == 0) {
+            /*
+             * Mark a zero length record as read. This ensures multiple calls to
+             * SSL_read() with a zero length buffer will eventually cause
+             * SSL_pending() to report data as being available.
+             */
+            if (SSL3_RECORD_get_length(rr) == 0)
+                SSL3_RECORD_set_read(rr);
+            return 0;
+        }
+
+        totalbytes = 0;
+        do {
+            if (len - totalbytes > SSL3_RECORD_get_length(rr))
+                n = SSL3_RECORD_get_length(rr);
+            else
+                n = len - totalbytes;
+
+            memcpy(buf, &(rr->data[rr->off]), n);
+            buf += n;
+            if (peek) {
+                /* Mark any zero length record as consumed CVE-2016-6305 */
+                if (SSL3_RECORD_get_length(rr) == 0)
+                    SSL3_RECORD_set_read(rr);
+            } else {
+                SSL3_RECORD_sub_length(rr, n);
+                SSL3_RECORD_add_off(rr, n);
+                if (SSL3_RECORD_get_length(rr) == 0) {
+                    s->rlayer.rstate = SSL_ST_READ_HEADER;
+                    SSL3_RECORD_set_off(rr, 0);
+                    SSL3_RECORD_set_read(rr);
+                }
+            }
+            if (SSL3_RECORD_get_length(rr) == 0
+                || (peek && n == SSL3_RECORD_get_length(rr))) {
+                curr_rec++;
+                rr++;
+            }
+            totalbytes += n;
+        } while (type == SSL3_RT_APPLICATION_DATA && curr_rec < num_recs
+                 && totalbytes < len);
+        if (totalbytes == 0) {
+            /* We must have read empty records. Get more data */
+            goto start;
+        }
+        if (!peek && curr_rec == num_recs
+            && (s->mode & SSL_MODE_RELEASE_BUFFERS)
+            && SSL3_BUFFER_get_left(rbuf) == 0)
+            ssl3_release_read_buffer(s);
+        *readbytes = totalbytes;
+        return 1;
+    }
+
+    /*
+     * If we get here, then type != rr->type; if we have a handshake message,
+     * then it was unexpected (Hello Request or Client Hello) or invalid (we
+     * were actually expecting a CCS).
+     */
+
+    /*
+     * Lets just double check that we've not got an SSLv2 record
+     */
+    if (rr->rec_version == SSL2_VERSION) {
+        /*
+         * Should never happen. ssl3_get_record() should only give us an SSLv2
+         * record back if this is the first packet and we are looking for an
+         * initial ClientHello. Therefore |type| should always be equal to
+         * |rr->type|. If not then something has gone horribly wrong
+         */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_READ_BYTES,
+                 ERR_R_INTERNAL_ERROR);
+        return -1;
+    }
+
+    if (s->method->version == TLS_ANY_VERSION
+        && (s->server || rr->type != SSL3_RT_ALERT)) {
+        /*
+         * If we've got this far and still haven't decided on what version
+         * we're using then this must be a client side alert we're dealing with
+         * (we don't allow heartbeats yet). We shouldn't be receiving anything
+         * other than a ClientHello if we are a server.
+         */
+        s->version = rr->rec_version;
+        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_SSL3_READ_BYTES,
+                 SSL_R_UNEXPECTED_MESSAGE);
+        return -1;
+    }
+
+    /*-
+     * s->rlayer.handshake_fragment_len == 4  iff  rr->type == SSL3_RT_HANDSHAKE;
+     * (Possibly rr is 'empty' now, i.e. rr->length may be 0.)
+     */
+
+    if (SSL3_RECORD_get_type(rr) == SSL3_RT_ALERT) {
+        unsigned int alert_level, alert_descr;
+        unsigned char *alert_bytes = SSL3_RECORD_get_data(rr)
+                                     + SSL3_RECORD_get_off(rr);
+        PACKET alert;
+
+        if (!PACKET_buf_init(&alert, alert_bytes, SSL3_RECORD_get_length(rr))
+                || !PACKET_get_1(&alert, &alert_level)
+                || !PACKET_get_1(&alert, &alert_descr)
+                || PACKET_remaining(&alert) != 0) {
+            SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_SSL3_READ_BYTES,
+                     SSL_R_INVALID_ALERT);
+            return -1;
+        }
+
+        if (s->msg_callback)
+            s->msg_callback(0, s->version, SSL3_RT_ALERT, alert_bytes, 2, s,
+                            s->msg_callback_arg);
+
+        if (s->info_callback != NULL)
+            cb = s->info_callback;
+        else if (s->ctx->info_callback != NULL)
+            cb = s->ctx->info_callback;
+
+        if (cb != NULL) {
+            j = (alert_level << 8) | alert_descr;
+            cb(s, SSL_CB_READ_ALERT, j);
+        }
+
+        if (alert_level == SSL3_AL_WARNING
+                || (is_tls13 && alert_descr == SSL_AD_USER_CANCELLED)) {
+            s->s3->warn_alert = alert_descr;
+            SSL3_RECORD_set_read(rr);
+
+            s->rlayer.alert_count++;
+            if (s->rlayer.alert_count == MAX_WARN_ALERT_COUNT) {
+                SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_SSL3_READ_BYTES,
+                         SSL_R_TOO_MANY_WARN_ALERTS);
+                return -1;
+            }
+        }
+
+        /*
+         * Apart from close_notify the only other warning alert in TLSv1.3
+         * is user_cancelled - which we just ignore.
+         */
+        if (is_tls13 && alert_descr == SSL_AD_USER_CANCELLED) {
+            goto start;
+        } else if (alert_descr == SSL_AD_CLOSE_NOTIFY
+                && (is_tls13 || alert_level == SSL3_AL_WARNING)) {
+            s->shutdown |= SSL_RECEIVED_SHUTDOWN;
+            return 0;
+        } else if (alert_level == SSL3_AL_FATAL || is_tls13) {
+            char tmp[16];
+
+            s->rwstate = SSL_NOTHING;
+            s->s3->fatal_alert = alert_descr;
+            SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_SSL3_READ_BYTES,
+                     SSL_AD_REASON_OFFSET + alert_descr);
+            BIO_snprintf(tmp, sizeof tmp, "%d", alert_descr);
+            ERR_add_error_data(2, "SSL alert number ", tmp);
+            s->shutdown |= SSL_RECEIVED_SHUTDOWN;
+            SSL3_RECORD_set_read(rr);
+            SSL_CTX_remove_session(s->session_ctx, s->session);
+            return 0;
+        } else if (alert_descr == SSL_AD_NO_RENEGOTIATION) {
+            /*
+             * This is a warning but we receive it if we requested
+             * renegotiation and the peer denied it. Terminate with a fatal
+             * alert because if application tried to renegotiate it
+             * presumably had a good reason and expects it to succeed. In
+             * future we might have a renegotiation where we don't care if
+             * the peer refused it where we carry on.
+             */
+            SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_SSL3_READ_BYTES,
+                     SSL_R_NO_RENEGOTIATION);
+            return -1;
+        } else if (alert_level == SSL3_AL_WARNING) {
+            /* We ignore any other warning alert in TLSv1.2 and below */
+            goto start;
+        }
+
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_SSL3_READ_BYTES,
+                 SSL_R_UNKNOWN_ALERT_TYPE);
+        return -1;
+    }
+
+    if ((s->shutdown & SSL_SENT_SHUTDOWN) != 0) {
+        if (SSL3_RECORD_get_type(rr) == SSL3_RT_HANDSHAKE) {
+            BIO *rbio;
+
+            /*
+             * We ignore any handshake messages sent to us unless they are
+             * TLSv1.3 in which case we want to process them. For all other
+             * handshake messages we can't do anything reasonable with them
+             * because we are unable to write any response due to having already
+             * sent close_notify.
+             */
+            if (!SSL_IS_TLS13(s)) {
+                SSL3_RECORD_set_length(rr, 0);
+                SSL3_RECORD_set_read(rr);
+
+                if ((s->mode & SSL_MODE_AUTO_RETRY) != 0)
+                    goto start;
+
+                s->rwstate = SSL_READING;
+                rbio = SSL_get_rbio(s);
+                BIO_clear_retry_flags(rbio);
+                BIO_set_retry_read(rbio);
+                return -1;
+            }
+        } else {
+            /*
+             * The peer is continuing to send application data, but we have
+             * already sent close_notify. If this was expected we should have
+             * been called via SSL_read() and this would have been handled
+             * above.
+             * No alert sent because we already sent close_notify
+             */
+            SSL3_RECORD_set_length(rr, 0);
+            SSL3_RECORD_set_read(rr);
+            SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_SSL3_READ_BYTES,
+                     SSL_R_APPLICATION_DATA_AFTER_CLOSE_NOTIFY);
+            return -1;
+        }
+    }
+
+    /*
+     * For handshake data we have 'fragment' storage, so fill that so that we
+     * can process the header at a fixed place. This is done after the
+     * "SHUTDOWN" code above to avoid filling the fragment storage with data
+     * that we're just going to discard.
+     */
+    if (SSL3_RECORD_get_type(rr) == SSL3_RT_HANDSHAKE) {
+        size_t dest_maxlen = sizeof(s->rlayer.handshake_fragment);
+        unsigned char *dest = s->rlayer.handshake_fragment;
+        size_t *dest_len = &s->rlayer.handshake_fragment_len;
+
+        n = dest_maxlen - *dest_len; /* available space in 'dest' */
+        if (SSL3_RECORD_get_length(rr) < n)
+            n = SSL3_RECORD_get_length(rr); /* available bytes */
+
+        /* now move 'n' bytes: */
+        memcpy(dest + *dest_len,
+               SSL3_RECORD_get_data(rr) + SSL3_RECORD_get_off(rr), n);
+        SSL3_RECORD_add_off(rr, n);
+        SSL3_RECORD_sub_length(rr, n);
+        *dest_len += n;
+        if (SSL3_RECORD_get_length(rr) == 0)
+            SSL3_RECORD_set_read(rr);
+
+        if (*dest_len < dest_maxlen)
+            goto start;     /* fragment was too small */
+    }
+
+    if (SSL3_RECORD_get_type(rr) == SSL3_RT_CHANGE_CIPHER_SPEC) {
+        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_SSL3_READ_BYTES,
+                 SSL_R_CCS_RECEIVED_EARLY);
+        return -1;
+    }
+
+    /*
+     * Unexpected handshake message (ClientHello, NewSessionTicket (TLS1.3) or
+     * protocol violation)
+     */
+    if ((s->rlayer.handshake_fragment_len >= 4)
+            && !ossl_statem_get_in_handshake(s)) {
+        int ined = (s->early_data_state == SSL_EARLY_DATA_READING);
+
+        /* We found handshake data, so we're going back into init */
+        ossl_statem_set_in_init(s, 1);
+
+        i = s->handshake_func(s);
+        /* SSLfatal() already called if appropriate */
+        if (i < 0)
+            return i;
+        if (i == 0) {
+            return -1;
+        }
+
+        /*
+         * If we were actually trying to read early data and we found a
+         * handshake message, then we don't want to continue to try and read
+         * the application data any more. It won't be "early" now.
+         */
+        if (ined)
+            return -1;
+
+        if (!(s->mode & SSL_MODE_AUTO_RETRY)) {
+            if (SSL3_BUFFER_get_left(rbuf) == 0) {
+                /* no read-ahead left? */
+                BIO *bio;
+                /*
+                 * In the case where we try to read application data, but we
+                 * trigger an SSL handshake, we return -1 with the retry
+                 * option set.  Otherwise renegotiation may cause nasty
+                 * problems in the blocking world
+                 */
+                s->rwstate = SSL_READING;
+                bio = SSL_get_rbio(s);
+                BIO_clear_retry_flags(bio);
+                BIO_set_retry_read(bio);
+                return -1;
+            }
+        }
+        goto start;
+    }
+
+    switch (SSL3_RECORD_get_type(rr)) {
+    default:
+        /*
+         * TLS 1.0 and 1.1 say you SHOULD ignore unrecognised record types, but
+         * TLS 1.2 says you MUST send an unexpected message alert. We use the
+         * TLS 1.2 behaviour for all protocol versions to prevent issues where
+         * no progress is being made and the peer continually sends unrecognised
+         * record types, using up resources processing them.
+         */
+        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_SSL3_READ_BYTES,
+                 SSL_R_UNEXPECTED_RECORD);
+        return -1;
+    case SSL3_RT_CHANGE_CIPHER_SPEC:
+    case SSL3_RT_ALERT:
+    case SSL3_RT_HANDSHAKE:
+        /*
+         * we already handled all of these, with the possible exception of
+         * SSL3_RT_HANDSHAKE when ossl_statem_get_in_handshake(s) is true, but
+         * that should not happen when type != rr->type
+         */
+        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_SSL3_READ_BYTES,
+                 ERR_R_INTERNAL_ERROR);
+        return -1;
+    case SSL3_RT_APPLICATION_DATA:
+        /*
+         * At this point, we were expecting handshake data, but have
+         * application data.  If the library was running inside ssl3_read()
+         * (i.e. in_read_app_data is set) and it makes sense to read
+         * application data at this point (session renegotiation not yet
+         * started), we will indulge it.
+         */
+        if (ossl_statem_app_data_allowed(s)) {
+            s->s3->in_read_app_data = 2;
+            return -1;
+        } else if (ossl_statem_skip_early_data(s)) {
+            /*
+             * This can happen after a client sends a CH followed by early_data,
+             * but the server responds with a HelloRetryRequest. The server
+             * reads the next record from the client expecting to find a
+             * plaintext ClientHello but gets a record which appears to be
+             * application data. The trial decrypt "works" because null
+             * decryption was applied. We just skip it and move on to the next
+             * record.
+             */
+            if (!early_data_count_ok(s, rr->length,
+                                     EARLY_DATA_CIPHERTEXT_OVERHEAD, 0)) {
+                /* SSLfatal() already called */
+                return -1;
+            }
+            SSL3_RECORD_set_read(rr);
+            goto start;
+        } else {
+            SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_SSL3_READ_BYTES,
+                     SSL_R_UNEXPECTED_RECORD);
+            return -1;
+        }
+    }
+}
+
+void ssl3_record_sequence_update(unsigned char *seq)
+{
+    int i;
+
+    for (i = 7; i >= 0; i--) {
+        ++seq[i];
+        if (seq[i] != 0)
+            break;
+    }
+}
+
+/*
+ * Returns true if the current rrec was sent in SSLv2 backwards compatible
+ * format and false otherwise.
+ */
+int RECORD_LAYER_is_sslv2_record(RECORD_LAYER *rl)
+{
+    return SSL3_RECORD_is_sslv2_record(&rl->rrec[0]);
+}
+
+/*
+ * Returns the length in bytes of the current rrec
+ */
+size_t RECORD_LAYER_get_rrec_length(RECORD_LAYER *rl)
+{
+    return SSL3_RECORD_get_length(&rl->rrec[0]);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/record/record.h b/trunk/3rdparty/openssl-1.1-fit/ssl/record/record.h
new file mode 100644
index 000000000..af56206e0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/record/record.h
@@ -0,0 +1,236 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*****************************************************************************
+ *                                                                           *
+ * These structures should be considered PRIVATE to the record layer. No     *
+ * non-record layer code should be using these structures in any way.        *
+ *                                                                           *
+ *****************************************************************************/
+
+typedef struct ssl3_buffer_st {
+    /* at least SSL3_RT_MAX_PACKET_SIZE bytes, see ssl3_setup_buffers() */
+    unsigned char *buf;
+    /* default buffer size (or 0 if no default set) */
+    size_t default_len;
+    /* buffer size */
+    size_t len;
+    /* where to 'copy from' */
+    size_t offset;
+    /* how many bytes left */
+    size_t left;
+} SSL3_BUFFER;
+
+#define SEQ_NUM_SIZE                            8
+
+typedef struct ssl3_record_st {
+    /* Record layer version */
+    /* r */
+    int rec_version;
+    /* type of record */
+    /* r */
+    int type;
+    /* How many bytes available */
+    /* rw */
+    size_t length;
+    /*
+     * How many bytes were available before padding was removed? This is used
+     * to implement the MAC check in constant time for CBC records.
+     */
+    /* rw */
+    size_t orig_len;
+    /* read/write offset into 'buf' */
+    /* r */
+    size_t off;
+    /* pointer to the record data */
+    /* rw */
+    unsigned char *data;
+    /* where the decode bytes are */
+    /* rw */
+    unsigned char *input;
+    /* only used with decompression - malloc()ed */
+    /* r */
+    unsigned char *comp;
+    /* Whether the data from this record has already been read or not */
+    /* r */
+    unsigned int read;
+    /* epoch number, needed by DTLS1 */
+    /* r */
+    unsigned long epoch;
+    /* sequence number, needed by DTLS1 */
+    /* r */
+    unsigned char seq_num[SEQ_NUM_SIZE];
+} SSL3_RECORD;
+
+typedef struct dtls1_bitmap_st {
+    /* Track 32 packets on 32-bit systems and 64 - on 64-bit systems */
+    unsigned long map;
+    /* Max record number seen so far, 64-bit value in big-endian encoding */
+    unsigned char max_seq_num[SEQ_NUM_SIZE];
+} DTLS1_BITMAP;
+
+typedef struct record_pqueue_st {
+    unsigned short epoch;
+    struct pqueue_st *q;
+} record_pqueue;
+
+typedef struct dtls1_record_data_st {
+    unsigned char *packet;
+    size_t packet_length;
+    SSL3_BUFFER rbuf;
+    SSL3_RECORD rrec;
+#ifndef OPENSSL_NO_SCTP
+    struct bio_dgram_sctp_rcvinfo recordinfo;
+#endif
+} DTLS1_RECORD_DATA;
+
+typedef struct dtls_record_layer_st {
+    /*
+     * The current data and handshake epoch.  This is initially
+     * undefined, and starts at zero once the initial handshake is
+     * completed
+     */
+    unsigned short r_epoch;
+    unsigned short w_epoch;
+    /* records being received in the current epoch */
+    DTLS1_BITMAP bitmap;
+    /* renegotiation starts a new set of sequence numbers */
+    DTLS1_BITMAP next_bitmap;
+    /* Received handshake records (processed and unprocessed) */
+    record_pqueue unprocessed_rcds;
+    record_pqueue processed_rcds;
+    /*
+     * Buffered application records. Only for records between CCS and
+     * Finished to prevent either protocol violation or unnecessary message
+     * loss.
+     */
+    record_pqueue buffered_app_data;
+    /* save last and current sequence numbers for retransmissions */
+    unsigned char last_write_sequence[8];
+    unsigned char curr_write_sequence[8];
+} DTLS_RECORD_LAYER;
+
+/*****************************************************************************
+ *                                                                           *
+ * This structure should be considered "opaque" to anything outside of the   *
+ * record layer. No non-record layer code should be accessing the members of *
+ * this structure.                                                           *
+ *                                                                           *
+ *****************************************************************************/
+
+typedef struct record_layer_st {
+    /* The parent SSL structure */
+    SSL *s;
+    /*
+     * Read as many input bytes as possible (for
+     * non-blocking reads)
+     */
+    int read_ahead;
+    /* where we are when reading */
+    int rstate;
+    /* How many pipelines can be used to read data */
+    size_t numrpipes;
+    /* How many pipelines can be used to write data */
+    size_t numwpipes;
+    /* read IO goes into here */
+    SSL3_BUFFER rbuf;
+    /* write IO goes into here */
+    SSL3_BUFFER wbuf[SSL_MAX_PIPELINES];
+    /* each decoded record goes in here */
+    SSL3_RECORD rrec[SSL_MAX_PIPELINES];
+    /* used internally to point at a raw packet */
+    unsigned char *packet;
+    size_t packet_length;
+    /* number of bytes sent so far */
+    size_t wnum;
+    unsigned char handshake_fragment[4];
+    size_t handshake_fragment_len;
+    /* The number of consecutive empty records we have received */
+    size_t empty_record_count;
+    /* partial write - check the numbers match */
+    /* number bytes written */
+    size_t wpend_tot;
+    int wpend_type;
+    /* number of bytes submitted */
+    size_t wpend_ret;
+    const unsigned char *wpend_buf;
+    unsigned char read_sequence[SEQ_NUM_SIZE];
+    unsigned char write_sequence[SEQ_NUM_SIZE];
+    /* Set to true if this is the first record in a connection */
+    unsigned int is_first_record;
+    /* Count of the number of consecutive warning alerts received */
+    unsigned int alert_count;
+    DTLS_RECORD_LAYER *d;
+} RECORD_LAYER;
+
+/*****************************************************************************
+ *                                                                           *
+ * The following macros/functions represent the libssl internal API to the   *
+ * record layer. Any libssl code may call these functions/macros             *
+ *                                                                           *
+ *****************************************************************************/
+
+#define MIN_SSL2_RECORD_LEN     9
+
+#define RECORD_LAYER_set_read_ahead(rl, ra)     ((rl)->read_ahead = (ra))
+#define RECORD_LAYER_get_read_ahead(rl)         ((rl)->read_ahead)
+#define RECORD_LAYER_get_packet(rl)             ((rl)->packet)
+#define RECORD_LAYER_get_packet_length(rl)      ((rl)->packet_length)
+#define RECORD_LAYER_add_packet_length(rl, inc) ((rl)->packet_length += (inc))
+#define DTLS_RECORD_LAYER_get_w_epoch(rl)       ((rl)->d->w_epoch)
+#define DTLS_RECORD_LAYER_get_processed_rcds(rl) \
+                                                ((rl)->d->processed_rcds)
+#define DTLS_RECORD_LAYER_get_unprocessed_rcds(rl) \
+                                                ((rl)->d->unprocessed_rcds)
+#define RECORD_LAYER_get_rbuf(rl)               (&(rl)->rbuf)
+#define RECORD_LAYER_get_wbuf(rl)               ((rl)->wbuf)
+
+void RECORD_LAYER_init(RECORD_LAYER *rl, SSL *s);
+void RECORD_LAYER_clear(RECORD_LAYER *rl);
+void RECORD_LAYER_release(RECORD_LAYER *rl);
+int RECORD_LAYER_read_pending(const RECORD_LAYER *rl);
+int RECORD_LAYER_processed_read_pending(const RECORD_LAYER *rl);
+int RECORD_LAYER_write_pending(const RECORD_LAYER *rl);
+void RECORD_LAYER_reset_read_sequence(RECORD_LAYER *rl);
+void RECORD_LAYER_reset_write_sequence(RECORD_LAYER *rl);
+int RECORD_LAYER_is_sslv2_record(RECORD_LAYER *rl);
+size_t RECORD_LAYER_get_rrec_length(RECORD_LAYER *rl);
+__owur size_t ssl3_pending(const SSL *s);
+__owur int ssl3_write_bytes(SSL *s, int type, const void *buf, size_t len,
+                            size_t *written);
+int do_ssl3_write(SSL *s, int type, const unsigned char *buf,
+                  size_t *pipelens, size_t numpipes,
+                  int create_empty_fragment, size_t *written);
+__owur int ssl3_read_bytes(SSL *s, int type, int *recvd_type,
+                           unsigned char *buf, size_t len, int peek,
+                           size_t *readbytes);
+__owur int ssl3_setup_buffers(SSL *s);
+__owur int ssl3_enc(SSL *s, SSL3_RECORD *inrecs, size_t n_recs, int send);
+__owur int n_ssl3_mac(SSL *ssl, SSL3_RECORD *rec, unsigned char *md, int send);
+__owur int ssl3_write_pending(SSL *s, int type, const unsigned char *buf, size_t len,
+                              size_t *written);
+__owur int tls1_enc(SSL *s, SSL3_RECORD *recs, size_t n_recs, int send);
+__owur int tls1_mac(SSL *ssl, SSL3_RECORD *rec, unsigned char *md, int send);
+__owur int tls13_enc(SSL *s, SSL3_RECORD *recs, size_t n_recs, int send);
+int DTLS_RECORD_LAYER_new(RECORD_LAYER *rl);
+void DTLS_RECORD_LAYER_free(RECORD_LAYER *rl);
+void DTLS_RECORD_LAYER_clear(RECORD_LAYER *rl);
+void DTLS_RECORD_LAYER_set_saved_w_epoch(RECORD_LAYER *rl, unsigned short e);
+void DTLS_RECORD_LAYER_clear(RECORD_LAYER *rl);
+void DTLS_RECORD_LAYER_set_write_sequence(RECORD_LAYER *rl, unsigned char *seq);
+__owur int dtls1_read_bytes(SSL *s, int type, int *recvd_type,
+                            unsigned char *buf, size_t len, int peek,
+                            size_t *readbytes);
+__owur int dtls1_write_bytes(SSL *s, int type, const void *buf, size_t len,
+                             size_t *written);
+int do_dtls1_write(SSL *s, int type, const unsigned char *buf,
+                   size_t len, int create_empty_fragment, size_t *written);
+void dtls1_reset_seq_numbers(SSL *s, int rw);
+int dtls_buffer_listen_record(SSL *s, size_t len, unsigned char *seq,
+                              size_t off);
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/record/record_locl.h b/trunk/3rdparty/openssl-1.1-fit/ssl/record/record_locl.h
new file mode 100644
index 000000000..5e8dd7f70
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/record/record_locl.h
@@ -0,0 +1,116 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*****************************************************************************
+ *                                                                           *
+ * The following macros/functions are PRIVATE to the record layer. They      *
+ * should NOT be used outside of the record layer.                           *
+ *                                                                           *
+ *****************************************************************************/
+
+#define MAX_WARN_ALERT_COUNT    5
+
+/* Functions/macros provided by the RECORD_LAYER component */
+
+#define RECORD_LAYER_get_rrec(rl)               ((rl)->rrec)
+#define RECORD_LAYER_set_packet(rl, p)          ((rl)->packet = (p))
+#define RECORD_LAYER_reset_packet_length(rl)    ((rl)->packet_length = 0)
+#define RECORD_LAYER_get_rstate(rl)             ((rl)->rstate)
+#define RECORD_LAYER_set_rstate(rl, st)         ((rl)->rstate = (st))
+#define RECORD_LAYER_get_read_sequence(rl)      ((rl)->read_sequence)
+#define RECORD_LAYER_get_write_sequence(rl)     ((rl)->write_sequence)
+#define RECORD_LAYER_get_numrpipes(rl)          ((rl)->numrpipes)
+#define RECORD_LAYER_set_numrpipes(rl, n)       ((rl)->numrpipes = (n))
+#define RECORD_LAYER_inc_empty_record_count(rl) ((rl)->empty_record_count++)
+#define RECORD_LAYER_reset_empty_record_count(rl) \
+                                                ((rl)->empty_record_count = 0)
+#define RECORD_LAYER_get_empty_record_count(rl) ((rl)->empty_record_count)
+#define RECORD_LAYER_is_first_record(rl)        ((rl)->is_first_record)
+#define RECORD_LAYER_set_first_record(rl)       ((rl)->is_first_record = 1)
+#define RECORD_LAYER_clear_first_record(rl)     ((rl)->is_first_record = 0)
+#define DTLS_RECORD_LAYER_get_r_epoch(rl)       ((rl)->d->r_epoch)
+
+__owur int ssl3_read_n(SSL *s, size_t n, size_t max, int extend, int clearold,
+                       size_t *readbytes);
+
+DTLS1_BITMAP *dtls1_get_bitmap(SSL *s, SSL3_RECORD *rr,
+                               unsigned int *is_next_epoch);
+int dtls1_process_buffered_records(SSL *s);
+int dtls1_retrieve_buffered_record(SSL *s, record_pqueue *queue);
+int dtls1_buffer_record(SSL *s, record_pqueue *q, unsigned char *priority);
+void ssl3_record_sequence_update(unsigned char *seq);
+
+/* Functions provided by the DTLS1_BITMAP component */
+
+int dtls1_record_replay_check(SSL *s, DTLS1_BITMAP *bitmap);
+void dtls1_record_bitmap_update(SSL *s, DTLS1_BITMAP *bitmap);
+
+/* Macros/functions provided by the SSL3_BUFFER component */
+
+#define SSL3_BUFFER_get_buf(b)              ((b)->buf)
+#define SSL3_BUFFER_set_buf(b, n)           ((b)->buf = (n))
+#define SSL3_BUFFER_get_len(b)              ((b)->len)
+#define SSL3_BUFFER_set_len(b, l)           ((b)->len = (l))
+#define SSL3_BUFFER_get_left(b)             ((b)->left)
+#define SSL3_BUFFER_set_left(b, l)          ((b)->left = (l))
+#define SSL3_BUFFER_sub_left(b, l)          ((b)->left -= (l))
+#define SSL3_BUFFER_get_offset(b)           ((b)->offset)
+#define SSL3_BUFFER_set_offset(b, o)        ((b)->offset = (o))
+#define SSL3_BUFFER_add_offset(b, o)        ((b)->offset += (o))
+#define SSL3_BUFFER_is_initialised(b)       ((b)->buf != NULL)
+#define SSL3_BUFFER_set_default_len(b, l)   ((b)->default_len = (l))
+
+void SSL3_BUFFER_clear(SSL3_BUFFER *b);
+void SSL3_BUFFER_set_data(SSL3_BUFFER *b, const unsigned char *d, size_t n);
+void SSL3_BUFFER_release(SSL3_BUFFER *b);
+__owur int ssl3_setup_read_buffer(SSL *s);
+__owur int ssl3_setup_write_buffer(SSL *s, size_t numwpipes, size_t len);
+int ssl3_release_read_buffer(SSL *s);
+int ssl3_release_write_buffer(SSL *s);
+
+/* Macros/functions provided by the SSL3_RECORD component */
+
+#define SSL3_RECORD_get_type(r)                 ((r)->type)
+#define SSL3_RECORD_set_type(r, t)              ((r)->type = (t))
+#define SSL3_RECORD_set_rec_version(r, v)       ((r)->rec_version = (v))
+#define SSL3_RECORD_get_length(r)               ((r)->length)
+#define SSL3_RECORD_set_length(r, l)            ((r)->length = (l))
+#define SSL3_RECORD_add_length(r, l)            ((r)->length += (l))
+#define SSL3_RECORD_sub_length(r, l)            ((r)->length -= (l))
+#define SSL3_RECORD_get_data(r)                 ((r)->data)
+#define SSL3_RECORD_set_data(r, d)              ((r)->data = (d))
+#define SSL3_RECORD_get_input(r)                ((r)->input)
+#define SSL3_RECORD_set_input(r, i)             ((r)->input = (i))
+#define SSL3_RECORD_reset_input(r)              ((r)->input = (r)->data)
+#define SSL3_RECORD_get_seq_num(r)              ((r)->seq_num)
+#define SSL3_RECORD_get_off(r)                  ((r)->off)
+#define SSL3_RECORD_set_off(r, o)               ((r)->off = (o))
+#define SSL3_RECORD_add_off(r, o)               ((r)->off += (o))
+#define SSL3_RECORD_get_epoch(r)                ((r)->epoch)
+#define SSL3_RECORD_is_sslv2_record(r) \
+            ((r)->rec_version == SSL2_VERSION)
+#define SSL3_RECORD_is_read(r)                  ((r)->read)
+#define SSL3_RECORD_set_read(r)                 ((r)->read = 1)
+
+void SSL3_RECORD_clear(SSL3_RECORD *r, size_t);
+void SSL3_RECORD_release(SSL3_RECORD *r, size_t num_recs);
+void SSL3_RECORD_set_seq_num(SSL3_RECORD *r, const unsigned char *seq_num);
+int ssl3_get_record(SSL *s);
+__owur int ssl3_do_compress(SSL *ssl, SSL3_RECORD *wr);
+__owur int ssl3_do_uncompress(SSL *ssl, SSL3_RECORD *rr);
+int ssl3_cbc_copy_mac(unsigned char *out,
+                       const SSL3_RECORD *rec, size_t md_size);
+__owur int ssl3_cbc_remove_padding(SSL3_RECORD *rec,
+                                   size_t block_size, size_t mac_size);
+__owur int tls1_cbc_remove_padding(const SSL *s,
+                                   SSL3_RECORD *rec,
+                                   size_t block_size, size_t mac_size);
+int dtls1_process_record(SSL *s, DTLS1_BITMAP *bitmap);
+__owur int dtls1_get_record(SSL *s);
+int early_data_count_ok(SSL *s, size_t length, size_t overhead, int send);
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/record/ssl3_buffer.c b/trunk/3rdparty/openssl-1.1-fit/ssl/record/ssl3_buffer.c
new file mode 100644
index 000000000..53bd4cb19
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/record/ssl3_buffer.c
@@ -0,0 +1,179 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "../ssl_locl.h"
+#include "record_locl.h"
+
+void SSL3_BUFFER_set_data(SSL3_BUFFER *b, const unsigned char *d, size_t n)
+{
+    if (d != NULL)
+        memcpy(b->buf, d, n);
+    b->left = n;
+    b->offset = 0;
+}
+
+/*
+ * Clear the contents of an SSL3_BUFFER but retain any memory allocated. Also
+ * retains the default_len setting
+ */
+void SSL3_BUFFER_clear(SSL3_BUFFER *b)
+{
+    b->offset = 0;
+    b->left = 0;
+}
+
+void SSL3_BUFFER_release(SSL3_BUFFER *b)
+{
+    OPENSSL_free(b->buf);
+    b->buf = NULL;
+}
+
+int ssl3_setup_read_buffer(SSL *s)
+{
+    unsigned char *p;
+    size_t len, align = 0, headerlen;
+    SSL3_BUFFER *b;
+
+    b = RECORD_LAYER_get_rbuf(&s->rlayer);
+
+    if (SSL_IS_DTLS(s))
+        headerlen = DTLS1_RT_HEADER_LENGTH;
+    else
+        headerlen = SSL3_RT_HEADER_LENGTH;
+
+#if defined(SSL3_ALIGN_PAYLOAD) && SSL3_ALIGN_PAYLOAD!=0
+    align = (-SSL3_RT_HEADER_LENGTH) & (SSL3_ALIGN_PAYLOAD - 1);
+#endif
+
+    if (b->buf == NULL) {
+        len = SSL3_RT_MAX_PLAIN_LENGTH
+            + SSL3_RT_MAX_ENCRYPTED_OVERHEAD + headerlen + align;
+#ifndef OPENSSL_NO_COMP
+        if (ssl_allow_compression(s))
+            len += SSL3_RT_MAX_COMPRESSED_OVERHEAD;
+#endif
+        if (b->default_len > len)
+            len = b->default_len;
+        if ((p = OPENSSL_malloc(len)) == NULL) {
+            /*
+             * We've got a malloc failure, and we're still initialising buffers.
+             * We assume we're so doomed that we won't even be able to send an
+             * alert.
+             */
+            SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_SSL3_SETUP_READ_BUFFER,
+                     ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        b->buf = p;
+        b->len = len;
+    }
+
+    RECORD_LAYER_set_packet(&s->rlayer, &(b->buf[0]));
+    return 1;
+}
+
+int ssl3_setup_write_buffer(SSL *s, size_t numwpipes, size_t len)
+{
+    unsigned char *p;
+    size_t align = 0, headerlen;
+    SSL3_BUFFER *wb;
+    size_t currpipe;
+
+    s->rlayer.numwpipes = numwpipes;
+
+    if (len == 0) {
+        if (SSL_IS_DTLS(s))
+            headerlen = DTLS1_RT_HEADER_LENGTH + 1;
+        else
+            headerlen = SSL3_RT_HEADER_LENGTH;
+
+#if defined(SSL3_ALIGN_PAYLOAD) && SSL3_ALIGN_PAYLOAD!=0
+        align = (-SSL3_RT_HEADER_LENGTH) & (SSL3_ALIGN_PAYLOAD - 1);
+#endif
+
+        len = ssl_get_max_send_fragment(s)
+            + SSL3_RT_SEND_MAX_ENCRYPTED_OVERHEAD + headerlen + align;
+#ifndef OPENSSL_NO_COMP
+        if (ssl_allow_compression(s))
+            len += SSL3_RT_MAX_COMPRESSED_OVERHEAD;
+#endif
+        if (!(s->options & SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS))
+            len += headerlen + align + SSL3_RT_SEND_MAX_ENCRYPTED_OVERHEAD;
+    }
+
+    wb = RECORD_LAYER_get_wbuf(&s->rlayer);
+    for (currpipe = 0; currpipe < numwpipes; currpipe++) {
+        SSL3_BUFFER *thiswb = &wb[currpipe];
+
+        if (thiswb->buf != NULL && thiswb->len != len) {
+            OPENSSL_free(thiswb->buf);
+            thiswb->buf = NULL;         /* force reallocation */
+        }
+
+        if (thiswb->buf == NULL) {
+            p = OPENSSL_malloc(len);
+            if (p == NULL) {
+                s->rlayer.numwpipes = currpipe;
+                /*
+                 * We've got a malloc failure, and we're still initialising
+                 * buffers. We assume we're so doomed that we won't even be able
+                 * to send an alert.
+                 */
+                SSLfatal(s, SSL_AD_NO_ALERT,
+                         SSL_F_SSL3_SETUP_WRITE_BUFFER, ERR_R_MALLOC_FAILURE);
+                return 0;
+            }
+            memset(thiswb, 0, sizeof(SSL3_BUFFER));
+            thiswb->buf = p;
+            thiswb->len = len;
+        }
+    }
+
+    return 1;
+}
+
+int ssl3_setup_buffers(SSL *s)
+{
+    if (!ssl3_setup_read_buffer(s)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+    if (!ssl3_setup_write_buffer(s, 1, 0)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+    return 1;
+}
+
+int ssl3_release_write_buffer(SSL *s)
+{
+    SSL3_BUFFER *wb;
+    size_t pipes;
+
+    pipes = s->rlayer.numwpipes;
+    while (pipes > 0) {
+        wb = &RECORD_LAYER_get_wbuf(&s->rlayer)[pipes - 1];
+
+        OPENSSL_free(wb->buf);
+        wb->buf = NULL;
+        pipes--;
+    }
+    s->rlayer.numwpipes = 0;
+    return 1;
+}
+
+int ssl3_release_read_buffer(SSL *s)
+{
+    SSL3_BUFFER *b;
+
+    b = RECORD_LAYER_get_rbuf(&s->rlayer);
+    OPENSSL_free(b->buf);
+    b->buf = NULL;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/record/ssl3_record.c b/trunk/3rdparty/openssl-1.1-fit/ssl/record/ssl3_record.c
new file mode 100644
index 000000000..e59ac5a67
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/record/ssl3_record.c
@@ -0,0 +1,2057 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "../ssl_locl.h"
+#include "internal/constant_time_locl.h"
+#include <openssl/rand.h>
+#include "record_locl.h"
+#include "internal/cryptlib.h"
+
+static const unsigned char ssl3_pad_1[48] = {
+    0x36, 0x36, 0x36, 0x36, 0x36, 0x36, 0x36, 0x36,
+    0x36, 0x36, 0x36, 0x36, 0x36, 0x36, 0x36, 0x36,
+    0x36, 0x36, 0x36, 0x36, 0x36, 0x36, 0x36, 0x36,
+    0x36, 0x36, 0x36, 0x36, 0x36, 0x36, 0x36, 0x36,
+    0x36, 0x36, 0x36, 0x36, 0x36, 0x36, 0x36, 0x36,
+    0x36, 0x36, 0x36, 0x36, 0x36, 0x36, 0x36, 0x36
+};
+
+static const unsigned char ssl3_pad_2[48] = {
+    0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c,
+    0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c,
+    0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c,
+    0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c,
+    0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c,
+    0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c, 0x5c
+};
+
+/*
+ * Clear the contents of an SSL3_RECORD but retain any memory allocated
+ */
+void SSL3_RECORD_clear(SSL3_RECORD *r, size_t num_recs)
+{
+    unsigned char *comp;
+    size_t i;
+
+    for (i = 0; i < num_recs; i++) {
+        comp = r[i].comp;
+
+        memset(&r[i], 0, sizeof(*r));
+        r[i].comp = comp;
+    }
+}
+
+void SSL3_RECORD_release(SSL3_RECORD *r, size_t num_recs)
+{
+    size_t i;
+
+    for (i = 0; i < num_recs; i++) {
+        OPENSSL_free(r[i].comp);
+        r[i].comp = NULL;
+    }
+}
+
+void SSL3_RECORD_set_seq_num(SSL3_RECORD *r, const unsigned char *seq_num)
+{
+    memcpy(r->seq_num, seq_num, SEQ_NUM_SIZE);
+}
+
+/*
+ * Peeks ahead into "read_ahead" data to see if we have a whole record waiting
+ * for us in the buffer.
+ */
+static int ssl3_record_app_data_waiting(SSL *s)
+{
+    SSL3_BUFFER *rbuf;
+    size_t left, len;
+    unsigned char *p;
+
+    rbuf = RECORD_LAYER_get_rbuf(&s->rlayer);
+
+    p = SSL3_BUFFER_get_buf(rbuf);
+    if (p == NULL)
+        return 0;
+
+    left = SSL3_BUFFER_get_left(rbuf);
+
+    if (left < SSL3_RT_HEADER_LENGTH)
+        return 0;
+
+    p += SSL3_BUFFER_get_offset(rbuf);
+
+    /*
+     * We only check the type and record length, we will sanity check version
+     * etc later
+     */
+    if (*p != SSL3_RT_APPLICATION_DATA)
+        return 0;
+
+    p += 3;
+    n2s(p, len);
+
+    if (left < SSL3_RT_HEADER_LENGTH + len)
+        return 0;
+
+    return 1;
+}
+
+int early_data_count_ok(SSL *s, size_t length, size_t overhead, int send)
+{
+    uint32_t max_early_data;
+    SSL_SESSION *sess = s->session;
+
+    /*
+     * If we are a client then we always use the max_early_data from the
+     * session/psksession. Otherwise we go with the lowest out of the max early
+     * data set in the session and the configured max_early_data.
+     */
+    if (!s->server && sess->ext.max_early_data == 0) {
+        if (!ossl_assert(s->psksession != NULL
+                         && s->psksession->ext.max_early_data > 0)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_EARLY_DATA_COUNT_OK,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+        sess = s->psksession;
+    }
+
+    if (!s->server)
+        max_early_data = sess->ext.max_early_data;
+    else if (s->ext.early_data != SSL_EARLY_DATA_ACCEPTED)
+        max_early_data = s->recv_max_early_data;
+    else
+        max_early_data = s->recv_max_early_data < sess->ext.max_early_data
+                         ? s->recv_max_early_data : sess->ext.max_early_data;
+
+    if (max_early_data == 0) {
+        SSLfatal(s, send ? SSL_AD_INTERNAL_ERROR : SSL_AD_UNEXPECTED_MESSAGE,
+                 SSL_F_EARLY_DATA_COUNT_OK, SSL_R_TOO_MUCH_EARLY_DATA);
+        return 0;
+    }
+
+    /* If we are dealing with ciphertext we need to allow for the overhead */
+    max_early_data += overhead;
+
+    if (s->early_data_count + length > max_early_data) {
+        SSLfatal(s, send ? SSL_AD_INTERNAL_ERROR : SSL_AD_UNEXPECTED_MESSAGE,
+                 SSL_F_EARLY_DATA_COUNT_OK, SSL_R_TOO_MUCH_EARLY_DATA);
+        return 0;
+    }
+    s->early_data_count += length;
+
+    return 1;
+}
+
+/*
+ * MAX_EMPTY_RECORDS defines the number of consecutive, empty records that
+ * will be processed per call to ssl3_get_record. Without this limit an
+ * attacker could send empty records at a faster rate than we can process and
+ * cause ssl3_get_record to loop forever.
+ */
+#define MAX_EMPTY_RECORDS 32
+
+#define SSL2_RT_HEADER_LENGTH   2
+/*-
+ * Call this to get new input records.
+ * It will return <= 0 if more data is needed, normally due to an error
+ * or non-blocking IO.
+ * When it finishes, |numrpipes| records have been decoded. For each record 'i':
+ * rr[i].type    - is the type of record
+ * rr[i].data,   - data
+ * rr[i].length, - number of bytes
+ * Multiple records will only be returned if the record types are all
+ * SSL3_RT_APPLICATION_DATA. The number of records returned will always be <=
+ * |max_pipelines|
+ */
+/* used only by ssl3_read_bytes */
+int ssl3_get_record(SSL *s)
+{
+    int enc_err, rret;
+    int i;
+    size_t more, n;
+    SSL3_RECORD *rr, *thisrr;
+    SSL3_BUFFER *rbuf;
+    SSL_SESSION *sess;
+    unsigned char *p;
+    unsigned char md[EVP_MAX_MD_SIZE];
+    unsigned int version;
+    size_t mac_size;
+    int imac_size;
+    size_t num_recs = 0, max_recs, j;
+    PACKET pkt, sslv2pkt;
+    size_t first_rec_len;
+
+    rr = RECORD_LAYER_get_rrec(&s->rlayer);
+    rbuf = RECORD_LAYER_get_rbuf(&s->rlayer);
+    max_recs = s->max_pipelines;
+    if (max_recs == 0)
+        max_recs = 1;
+    sess = s->session;
+
+    do {
+        thisrr = &rr[num_recs];
+
+        /* check if we have the header */
+        if ((RECORD_LAYER_get_rstate(&s->rlayer) != SSL_ST_READ_BODY) ||
+            (RECORD_LAYER_get_packet_length(&s->rlayer)
+             < SSL3_RT_HEADER_LENGTH)) {
+            size_t sslv2len;
+            unsigned int type;
+
+            rret = ssl3_read_n(s, SSL3_RT_HEADER_LENGTH,
+                               SSL3_BUFFER_get_len(rbuf), 0,
+                               num_recs == 0 ? 1 : 0, &n);
+            if (rret <= 0)
+                return rret;     /* error or non-blocking */
+            RECORD_LAYER_set_rstate(&s->rlayer, SSL_ST_READ_BODY);
+
+            p = RECORD_LAYER_get_packet(&s->rlayer);
+            if (!PACKET_buf_init(&pkt, RECORD_LAYER_get_packet(&s->rlayer),
+                                 RECORD_LAYER_get_packet_length(&s->rlayer))) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_GET_RECORD,
+                         ERR_R_INTERNAL_ERROR);
+                return -1;
+            }
+            sslv2pkt = pkt;
+            if (!PACKET_get_net_2_len(&sslv2pkt, &sslv2len)
+                    || !PACKET_get_1(&sslv2pkt, &type)) {
+                SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_SSL3_GET_RECORD,
+                         ERR_R_INTERNAL_ERROR);
+                return -1;
+            }
+            /*
+             * The first record received by the server may be a V2ClientHello.
+             */
+            if (s->server && RECORD_LAYER_is_first_record(&s->rlayer)
+                    && (sslv2len & 0x8000) != 0
+                    && (type == SSL2_MT_CLIENT_HELLO)) {
+                /*
+                 *  SSLv2 style record
+                 *
+                 * |num_recs| here will actually always be 0 because
+                 * |num_recs > 0| only ever occurs when we are processing
+                 * multiple app data records - which we know isn't the case here
+                 * because it is an SSLv2ClientHello. We keep it using
+                 * |num_recs| for the sake of consistency
+                 */
+                thisrr->type = SSL3_RT_HANDSHAKE;
+                thisrr->rec_version = SSL2_VERSION;
+
+                thisrr->length = sslv2len & 0x7fff;
+
+                if (thisrr->length > SSL3_BUFFER_get_len(rbuf)
+                    - SSL2_RT_HEADER_LENGTH) {
+                    SSLfatal(s, SSL_AD_RECORD_OVERFLOW, SSL_F_SSL3_GET_RECORD,
+                             SSL_R_PACKET_LENGTH_TOO_LONG);
+                    return -1;
+                }
+
+                if (thisrr->length < MIN_SSL2_RECORD_LEN) {
+                    SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_SSL3_GET_RECORD,
+                             SSL_R_LENGTH_TOO_SHORT);
+                    return -1;
+                }
+            } else {
+                /* SSLv3+ style record */
+                if (s->msg_callback)
+                    s->msg_callback(0, 0, SSL3_RT_HEADER, p, 5, s,
+                                    s->msg_callback_arg);
+
+                /* Pull apart the header into the SSL3_RECORD */
+                if (!PACKET_get_1(&pkt, &type)
+                        || !PACKET_get_net_2(&pkt, &version)
+                        || !PACKET_get_net_2_len(&pkt, &thisrr->length)) {
+                    SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_SSL3_GET_RECORD,
+                             ERR_R_INTERNAL_ERROR);
+                    return -1;
+                }
+                thisrr->type = type;
+                thisrr->rec_version = version;
+
+                /*
+                 * Lets check version. In TLSv1.3 we only check this field
+                 * when encryption is occurring (see later check). For the
+                 * ServerHello after an HRR we haven't actually selected TLSv1.3
+                 * yet, but we still treat it as TLSv1.3, so we must check for
+                 * that explicitly
+                 */
+                if (!s->first_packet && !SSL_IS_TLS13(s)
+                        && s->hello_retry_request != SSL_HRR_PENDING
+                        && version != (unsigned int)s->version) {
+                    if ((s->version & 0xFF00) == (version & 0xFF00)
+                        && !s->enc_write_ctx && !s->write_hash) {
+                        if (thisrr->type == SSL3_RT_ALERT) {
+                            /*
+                             * The record is using an incorrect version number,
+                             * but what we've got appears to be an alert. We
+                             * haven't read the body yet to check whether its a
+                             * fatal or not - but chances are it is. We probably
+                             * shouldn't send a fatal alert back. We'll just
+                             * end.
+                             */
+                            SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_SSL3_GET_RECORD,
+                                     SSL_R_WRONG_VERSION_NUMBER);
+                            return -1;
+                        }
+                        /*
+                         * Send back error using their minor version number :-)
+                         */
+                        s->version = (unsigned short)version;
+                    }
+                    SSLfatal(s, SSL_AD_PROTOCOL_VERSION, SSL_F_SSL3_GET_RECORD,
+                             SSL_R_WRONG_VERSION_NUMBER);
+                    return -1;
+                }
+
+                if ((version >> 8) != SSL3_VERSION_MAJOR) {
+                    if (RECORD_LAYER_is_first_record(&s->rlayer)) {
+                        /* Go back to start of packet, look at the five bytes
+                         * that we have. */
+                        p = RECORD_LAYER_get_packet(&s->rlayer);
+                        if (strncmp((char *)p, "GET ", 4) == 0 ||
+                            strncmp((char *)p, "POST ", 5) == 0 ||
+                            strncmp((char *)p, "HEAD ", 5) == 0 ||
+                            strncmp((char *)p, "PUT ", 4) == 0) {
+                            SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_SSL3_GET_RECORD,
+                                     SSL_R_HTTP_REQUEST);
+                            return -1;
+                        } else if (strncmp((char *)p, "CONNE", 5) == 0) {
+                            SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_SSL3_GET_RECORD,
+                                     SSL_R_HTTPS_PROXY_REQUEST);
+                            return -1;
+                        }
+
+                        /* Doesn't look like TLS - don't send an alert */
+                        SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_SSL3_GET_RECORD,
+                                 SSL_R_WRONG_VERSION_NUMBER);
+                        return -1;
+                    } else {
+                        SSLfatal(s, SSL_AD_PROTOCOL_VERSION,
+                                 SSL_F_SSL3_GET_RECORD,
+                                 SSL_R_WRONG_VERSION_NUMBER);
+                        return -1;
+                    }
+                }
+
+                if (SSL_IS_TLS13(s) && s->enc_read_ctx != NULL) {
+                    if (thisrr->type != SSL3_RT_APPLICATION_DATA
+                            && (thisrr->type != SSL3_RT_CHANGE_CIPHER_SPEC
+                                || !SSL_IS_FIRST_HANDSHAKE(s))
+                            && (thisrr->type != SSL3_RT_ALERT
+                                || s->statem.enc_read_state
+                                   != ENC_READ_STATE_ALLOW_PLAIN_ALERTS)) {
+                        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE,
+                                 SSL_F_SSL3_GET_RECORD, SSL_R_BAD_RECORD_TYPE);
+                        return -1;
+                    }
+                    if (thisrr->rec_version != TLS1_2_VERSION) {
+                        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_SSL3_GET_RECORD,
+                                 SSL_R_WRONG_VERSION_NUMBER);
+                        return -1;
+                    }
+                }
+
+                if (thisrr->length >
+                    SSL3_BUFFER_get_len(rbuf) - SSL3_RT_HEADER_LENGTH) {
+                    SSLfatal(s, SSL_AD_RECORD_OVERFLOW, SSL_F_SSL3_GET_RECORD,
+                             SSL_R_PACKET_LENGTH_TOO_LONG);
+                    return -1;
+                }
+            }
+
+            /* now s->rlayer.rstate == SSL_ST_READ_BODY */
+        }
+
+        if (SSL_IS_TLS13(s)) {
+            if (thisrr->length > SSL3_RT_MAX_TLS13_ENCRYPTED_LENGTH) {
+                SSLfatal(s, SSL_AD_RECORD_OVERFLOW, SSL_F_SSL3_GET_RECORD,
+                         SSL_R_ENCRYPTED_LENGTH_TOO_LONG);
+                return -1;
+            }
+        } else {
+            size_t len = SSL3_RT_MAX_ENCRYPTED_LENGTH;
+
+#ifndef OPENSSL_NO_COMP
+            /*
+             * If OPENSSL_NO_COMP is defined then SSL3_RT_MAX_ENCRYPTED_LENGTH
+             * does not include the compression overhead anyway.
+             */
+            if (s->expand == NULL)
+                len -= SSL3_RT_MAX_COMPRESSED_OVERHEAD;
+#endif
+
+            if (thisrr->length > len) {
+                SSLfatal(s, SSL_AD_RECORD_OVERFLOW, SSL_F_SSL3_GET_RECORD,
+                         SSL_R_ENCRYPTED_LENGTH_TOO_LONG);
+                return -1;
+            }
+        }
+
+        /*
+         * s->rlayer.rstate == SSL_ST_READ_BODY, get and decode the data.
+         * Calculate how much more data we need to read for the rest of the
+         * record
+         */
+        if (thisrr->rec_version == SSL2_VERSION) {
+            more = thisrr->length + SSL2_RT_HEADER_LENGTH
+                - SSL3_RT_HEADER_LENGTH;
+        } else {
+            more = thisrr->length;
+        }
+        if (more > 0) {
+            /* now s->packet_length == SSL3_RT_HEADER_LENGTH */
+
+            rret = ssl3_read_n(s, more, more, 1, 0, &n);
+            if (rret <= 0)
+                return rret;     /* error or non-blocking io */
+        }
+
+        /* set state for later operations */
+        RECORD_LAYER_set_rstate(&s->rlayer, SSL_ST_READ_HEADER);
+
+        /*
+         * At this point, s->packet_length == SSL3_RT_HEADER_LENGTH
+         * + thisrr->length, or s->packet_length == SSL2_RT_HEADER_LENGTH
+         * + thisrr->length and we have that many bytes in s->packet
+         */
+        if (thisrr->rec_version == SSL2_VERSION) {
+            thisrr->input =
+                &(RECORD_LAYER_get_packet(&s->rlayer)[SSL2_RT_HEADER_LENGTH]);
+        } else {
+            thisrr->input =
+                &(RECORD_LAYER_get_packet(&s->rlayer)[SSL3_RT_HEADER_LENGTH]);
+        }
+
+        /*
+         * ok, we can now read from 's->packet' data into 'thisrr' thisrr->input
+         * points at thisrr->length bytes, which need to be copied into
+         * thisrr->data by either the decryption or by the decompression When
+         * the data is 'copied' into the thisrr->data buffer, thisrr->input will
+         * be pointed at the new buffer
+         */
+
+        /*
+         * We now have - encrypted [ MAC [ compressed [ plain ] ] ]
+         * thisrr->length bytes of encrypted compressed stuff.
+         */
+
+        /* decrypt in place in 'thisrr->input' */
+        thisrr->data = thisrr->input;
+        thisrr->orig_len = thisrr->length;
+
+        /* Mark this record as not read by upper layers yet */
+        thisrr->read = 0;
+
+        num_recs++;
+
+        /* we have pulled in a full packet so zero things */
+        RECORD_LAYER_reset_packet_length(&s->rlayer);
+        RECORD_LAYER_clear_first_record(&s->rlayer);
+    } while (num_recs < max_recs
+             && thisrr->type == SSL3_RT_APPLICATION_DATA
+             && SSL_USE_EXPLICIT_IV(s)
+             && s->enc_read_ctx != NULL
+             && (EVP_CIPHER_flags(EVP_CIPHER_CTX_cipher(s->enc_read_ctx))
+                 & EVP_CIPH_FLAG_PIPELINE)
+             && ssl3_record_app_data_waiting(s));
+
+    if (num_recs == 1
+            && thisrr->type == SSL3_RT_CHANGE_CIPHER_SPEC
+            && (SSL_IS_TLS13(s) || s->hello_retry_request != SSL_HRR_NONE)
+            && SSL_IS_FIRST_HANDSHAKE(s)) {
+        /*
+         * CCS messages must be exactly 1 byte long, containing the value 0x01
+         */
+        if (thisrr->length != 1 || thisrr->data[0] != 0x01) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_SSL3_GET_RECORD,
+                     SSL_R_INVALID_CCS_MESSAGE);
+            return -1;
+        }
+        /*
+         * CCS messages are ignored in TLSv1.3. We treat it like an empty
+         * handshake record
+         */
+        thisrr->type = SSL3_RT_HANDSHAKE;
+        RECORD_LAYER_inc_empty_record_count(&s->rlayer);
+        if (RECORD_LAYER_get_empty_record_count(&s->rlayer)
+            > MAX_EMPTY_RECORDS) {
+            SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_SSL3_GET_RECORD,
+                     SSL_R_UNEXPECTED_CCS_MESSAGE);
+            return -1;
+        }
+        thisrr->read = 1;
+        RECORD_LAYER_set_numrpipes(&s->rlayer, 1);
+
+        return 1;
+    }
+
+    /*
+     * If in encrypt-then-mac mode calculate mac from encrypted record. All
+     * the details below are public so no timing details can leak.
+     */
+    if (SSL_READ_ETM(s) && s->read_hash) {
+        unsigned char *mac;
+        /* TODO(size_t): convert this to do size_t properly */
+        imac_size = EVP_MD_CTX_size(s->read_hash);
+        if (!ossl_assert(imac_size >= 0 && imac_size <= EVP_MAX_MD_SIZE)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_GET_RECORD,
+                         ERR_LIB_EVP);
+                return -1;
+        }
+        mac_size = (size_t)imac_size;
+        for (j = 0; j < num_recs; j++) {
+            thisrr = &rr[j];
+
+            if (thisrr->length < mac_size) {
+                SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_SSL3_GET_RECORD,
+                         SSL_R_LENGTH_TOO_SHORT);
+                return -1;
+            }
+            thisrr->length -= mac_size;
+            mac = thisrr->data + thisrr->length;
+            i = s->method->ssl3_enc->mac(s, thisrr, md, 0 /* not send */ );
+            if (i == 0 || CRYPTO_memcmp(md, mac, mac_size) != 0) {
+                SSLfatal(s, SSL_AD_BAD_RECORD_MAC, SSL_F_SSL3_GET_RECORD,
+                       SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC);
+                return -1;
+            }
+        }
+    }
+
+    first_rec_len = rr[0].length;
+
+    enc_err = s->method->ssl3_enc->enc(s, rr, num_recs, 0);
+
+    /*-
+     * enc_err is:
+     *    0: (in non-constant time) if the record is publicly invalid.
+     *    1: if the padding is valid
+     *    -1: if the padding is invalid
+     */
+    if (enc_err == 0) {
+        if (ossl_statem_in_error(s)) {
+            /* SSLfatal() already got called */
+            return -1;
+        }
+        if (num_recs == 1 && ossl_statem_skip_early_data(s)) {
+            /*
+             * Valid early_data that we cannot decrypt might fail here as
+             * publicly invalid. We treat it like an empty record.
+             */
+
+            thisrr = &rr[0];
+
+            if (!early_data_count_ok(s, thisrr->length,
+                                     EARLY_DATA_CIPHERTEXT_OVERHEAD, 0)) {
+                /* SSLfatal() already called */
+                return -1;
+            }
+
+            thisrr->length = 0;
+            thisrr->read = 1;
+            RECORD_LAYER_set_numrpipes(&s->rlayer, 1);
+            RECORD_LAYER_reset_read_sequence(&s->rlayer);
+            return 1;
+        }
+        SSLfatal(s, SSL_AD_DECRYPTION_FAILED, SSL_F_SSL3_GET_RECORD,
+                 SSL_R_BLOCK_CIPHER_PAD_IS_WRONG);
+        return -1;
+    }
+#ifdef SSL_DEBUG
+    printf("dec %lu\n", (unsigned long)rr[0].length);
+    {
+        size_t z;
+        for (z = 0; z < rr[0].length; z++)
+            printf("%02X%c", rr[0].data[z], ((z + 1) % 16) ? ' ' : '\n');
+    }
+    printf("\n");
+#endif
+
+    /* r->length is now the compressed data plus mac */
+    if ((sess != NULL) &&
+        (s->enc_read_ctx != NULL) &&
+        (!SSL_READ_ETM(s) && EVP_MD_CTX_md(s->read_hash) != NULL)) {
+        /* s->read_hash != NULL => mac_size != -1 */
+        unsigned char *mac = NULL;
+        unsigned char mac_tmp[EVP_MAX_MD_SIZE];
+
+        mac_size = EVP_MD_CTX_size(s->read_hash);
+        if (!ossl_assert(mac_size <= EVP_MAX_MD_SIZE)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_GET_RECORD,
+                     ERR_R_INTERNAL_ERROR);
+            return -1;
+        }
+
+        for (j = 0; j < num_recs; j++) {
+            thisrr = &rr[j];
+            /*
+             * orig_len is the length of the record before any padding was
+             * removed. This is public information, as is the MAC in use,
+             * therefore we can safely process the record in a different amount
+             * of time if it's too short to possibly contain a MAC.
+             */
+            if (thisrr->orig_len < mac_size ||
+                /* CBC records must have a padding length byte too. */
+                (EVP_CIPHER_CTX_mode(s->enc_read_ctx) == EVP_CIPH_CBC_MODE &&
+                 thisrr->orig_len < mac_size + 1)) {
+                SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_SSL3_GET_RECORD,
+                         SSL_R_LENGTH_TOO_SHORT);
+                return -1;
+            }
+
+            if (EVP_CIPHER_CTX_mode(s->enc_read_ctx) == EVP_CIPH_CBC_MODE) {
+                /*
+                 * We update the length so that the TLS header bytes can be
+                 * constructed correctly but we need to extract the MAC in
+                 * constant time from within the record, without leaking the
+                 * contents of the padding bytes.
+                 */
+                mac = mac_tmp;
+                if (!ssl3_cbc_copy_mac(mac_tmp, thisrr, mac_size)) {
+                    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_GET_RECORD,
+                             ERR_R_INTERNAL_ERROR);
+                    return -1;
+                }
+                thisrr->length -= mac_size;
+            } else {
+                /*
+                 * In this case there's no padding, so |rec->orig_len| equals
+                 * |rec->length| and we checked that there's enough bytes for
+                 * |mac_size| above.
+                 */
+                thisrr->length -= mac_size;
+                mac = &thisrr->data[thisrr->length];
+            }
+
+            i = s->method->ssl3_enc->mac(s, thisrr, md, 0 /* not send */ );
+            if (i == 0 || mac == NULL
+                || CRYPTO_memcmp(md, mac, (size_t)mac_size) != 0)
+                enc_err = -1;
+            if (thisrr->length > SSL3_RT_MAX_COMPRESSED_LENGTH + mac_size)
+                enc_err = -1;
+        }
+    }
+
+    if (enc_err < 0) {
+        if (ossl_statem_in_error(s)) {
+            /* We already called SSLfatal() */
+            return -1;
+        }
+        if (num_recs == 1 && ossl_statem_skip_early_data(s)) {
+            /*
+             * We assume this is unreadable early_data - we treat it like an
+             * empty record
+             */
+
+            /*
+             * The record length may have been modified by the mac check above
+             * so we use the previously saved value
+             */
+            if (!early_data_count_ok(s, first_rec_len,
+                                     EARLY_DATA_CIPHERTEXT_OVERHEAD, 0)) {
+                /* SSLfatal() already called */
+                return -1;
+            }
+
+            thisrr = &rr[0];
+            thisrr->length = 0;
+            thisrr->read = 1;
+            RECORD_LAYER_set_numrpipes(&s->rlayer, 1);
+            RECORD_LAYER_reset_read_sequence(&s->rlayer);
+            return 1;
+        }
+        /*
+         * A separate 'decryption_failed' alert was introduced with TLS 1.0,
+         * SSL 3.0 only has 'bad_record_mac'.  But unless a decryption
+         * failure is directly visible from the ciphertext anyway, we should
+         * not reveal which kind of error occurred -- this might become
+         * visible to an attacker (e.g. via a logfile)
+         */
+        SSLfatal(s, SSL_AD_BAD_RECORD_MAC, SSL_F_SSL3_GET_RECORD,
+                 SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC);
+        return -1;
+    }
+
+    for (j = 0; j < num_recs; j++) {
+        thisrr = &rr[j];
+
+        /* thisrr->length is now just compressed */
+        if (s->expand != NULL) {
+            if (thisrr->length > SSL3_RT_MAX_COMPRESSED_LENGTH) {
+                SSLfatal(s, SSL_AD_RECORD_OVERFLOW, SSL_F_SSL3_GET_RECORD,
+                         SSL_R_COMPRESSED_LENGTH_TOO_LONG);
+                return -1;
+            }
+            if (!ssl3_do_uncompress(s, thisrr)) {
+                SSLfatal(s, SSL_AD_DECOMPRESSION_FAILURE, SSL_F_SSL3_GET_RECORD,
+                         SSL_R_BAD_DECOMPRESSION);
+                return -1;
+            }
+        }
+
+        if (SSL_IS_TLS13(s)
+                && s->enc_read_ctx != NULL
+                && thisrr->type != SSL3_RT_ALERT) {
+            size_t end;
+
+            if (thisrr->length == 0
+                    || thisrr->type != SSL3_RT_APPLICATION_DATA) {
+                SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_SSL3_GET_RECORD,
+                         SSL_R_BAD_RECORD_TYPE);
+                return -1;
+            }
+
+            /* Strip trailing padding */
+            for (end = thisrr->length - 1; end > 0 && thisrr->data[end] == 0;
+                 end--)
+                continue;
+
+            thisrr->length = end;
+            thisrr->type = thisrr->data[end];
+            if (thisrr->type != SSL3_RT_APPLICATION_DATA
+                    && thisrr->type != SSL3_RT_ALERT
+                    && thisrr->type != SSL3_RT_HANDSHAKE) {
+                SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_SSL3_GET_RECORD,
+                         SSL_R_BAD_RECORD_TYPE);
+                return -1;
+            }
+            if (s->msg_callback)
+                s->msg_callback(0, s->version, SSL3_RT_INNER_CONTENT_TYPE,
+                                &thisrr->data[end], 1, s, s->msg_callback_arg);
+        }
+
+        /*
+         * TLSv1.3 alert and handshake records are required to be non-zero in
+         * length.
+         */
+        if (SSL_IS_TLS13(s)
+                && (thisrr->type == SSL3_RT_HANDSHAKE
+                    || thisrr->type == SSL3_RT_ALERT)
+                && thisrr->length == 0) {
+            SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_SSL3_GET_RECORD,
+                     SSL_R_BAD_LENGTH);
+            return -1;
+        }
+
+        if (thisrr->length > SSL3_RT_MAX_PLAIN_LENGTH) {
+            SSLfatal(s, SSL_AD_RECORD_OVERFLOW, SSL_F_SSL3_GET_RECORD,
+                     SSL_R_DATA_LENGTH_TOO_LONG);
+            return -1;
+        }
+
+        /* If received packet overflows current Max Fragment Length setting */
+        if (s->session != NULL && USE_MAX_FRAGMENT_LENGTH_EXT(s->session)
+                && thisrr->length > GET_MAX_FRAGMENT_LENGTH(s->session)) {
+            SSLfatal(s, SSL_AD_RECORD_OVERFLOW, SSL_F_SSL3_GET_RECORD,
+                     SSL_R_DATA_LENGTH_TOO_LONG);
+            return -1;
+        }
+
+        thisrr->off = 0;
+        /*-
+         * So at this point the following is true
+         * thisrr->type   is the type of record
+         * thisrr->length == number of bytes in record
+         * thisrr->off    == offset to first valid byte
+         * thisrr->data   == where to take bytes from, increment after use :-).
+         */
+
+        /* just read a 0 length packet */
+        if (thisrr->length == 0) {
+            RECORD_LAYER_inc_empty_record_count(&s->rlayer);
+            if (RECORD_LAYER_get_empty_record_count(&s->rlayer)
+                > MAX_EMPTY_RECORDS) {
+                SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_SSL3_GET_RECORD,
+                         SSL_R_RECORD_TOO_SMALL);
+                return -1;
+            }
+        } else {
+            RECORD_LAYER_reset_empty_record_count(&s->rlayer);
+        }
+    }
+
+    if (s->early_data_state == SSL_EARLY_DATA_READING) {
+        thisrr = &rr[0];
+        if (thisrr->type == SSL3_RT_APPLICATION_DATA
+                && !early_data_count_ok(s, thisrr->length, 0, 0)) {
+            /* SSLfatal already called */
+            return -1;
+        }
+    }
+
+    RECORD_LAYER_set_numrpipes(&s->rlayer, num_recs);
+    return 1;
+}
+
+int ssl3_do_uncompress(SSL *ssl, SSL3_RECORD *rr)
+{
+#ifndef OPENSSL_NO_COMP
+    int i;
+
+    if (rr->comp == NULL) {
+        rr->comp = (unsigned char *)
+            OPENSSL_malloc(SSL3_RT_MAX_ENCRYPTED_LENGTH);
+    }
+    if (rr->comp == NULL)
+        return 0;
+
+    /* TODO(size_t): Convert this call */
+    i = COMP_expand_block(ssl->expand, rr->comp,
+                          SSL3_RT_MAX_PLAIN_LENGTH, rr->data, (int)rr->length);
+    if (i < 0)
+        return 0;
+    else
+        rr->length = i;
+    rr->data = rr->comp;
+#endif
+    return 1;
+}
+
+int ssl3_do_compress(SSL *ssl, SSL3_RECORD *wr)
+{
+#ifndef OPENSSL_NO_COMP
+    int i;
+
+    /* TODO(size_t): Convert this call */
+    i = COMP_compress_block(ssl->compress, wr->data,
+                            (int)(wr->length + SSL3_RT_MAX_COMPRESSED_OVERHEAD),
+                            wr->input, (int)wr->length);
+    if (i < 0)
+        return 0;
+    else
+        wr->length = i;
+
+    wr->input = wr->data;
+#endif
+    return 1;
+}
+
+/*-
+ * ssl3_enc encrypts/decrypts |n_recs| records in |inrecs|.  Will call
+ * SSLfatal() for internal errors, but not otherwise.
+ *
+ * Returns:
+ *   0: (in non-constant time) if the record is publically invalid (i.e. too
+ *       short etc).
+ *   1: if the record's padding is valid / the encryption was successful.
+ *   -1: if the record's padding is invalid or, if sending, an internal error
+ *       occurred.
+ */
+int ssl3_enc(SSL *s, SSL3_RECORD *inrecs, size_t n_recs, int sending)
+{
+    SSL3_RECORD *rec;
+    EVP_CIPHER_CTX *ds;
+    size_t l, i;
+    size_t bs, mac_size = 0;
+    int imac_size;
+    const EVP_CIPHER *enc;
+
+    rec = inrecs;
+    /*
+     * We shouldn't ever be called with more than one record in the SSLv3 case
+     */
+    if (n_recs != 1)
+        return 0;
+    if (sending) {
+        ds = s->enc_write_ctx;
+        if (s->enc_write_ctx == NULL)
+            enc = NULL;
+        else
+            enc = EVP_CIPHER_CTX_cipher(s->enc_write_ctx);
+    } else {
+        ds = s->enc_read_ctx;
+        if (s->enc_read_ctx == NULL)
+            enc = NULL;
+        else
+            enc = EVP_CIPHER_CTX_cipher(s->enc_read_ctx);
+    }
+
+    if ((s->session == NULL) || (ds == NULL) || (enc == NULL)) {
+        memmove(rec->data, rec->input, rec->length);
+        rec->input = rec->data;
+    } else {
+        l = rec->length;
+        /* TODO(size_t): Convert this call */
+        bs = EVP_CIPHER_CTX_block_size(ds);
+
+        /* COMPRESS */
+
+        if ((bs != 1) && sending) {
+            i = bs - (l % bs);
+
+            /* we need to add 'i-1' padding bytes */
+            l += i;
+            /*
+             * the last of these zero bytes will be overwritten with the
+             * padding length.
+             */
+            memset(&rec->input[rec->length], 0, i);
+            rec->length += i;
+            rec->input[l - 1] = (unsigned char)(i - 1);
+        }
+
+        if (!sending) {
+            if (l == 0 || l % bs != 0)
+                return 0;
+            /* otherwise, rec->length >= bs */
+        }
+
+        /* TODO(size_t): Convert this call */
+        if (EVP_Cipher(ds, rec->data, rec->input, (unsigned int)l) < 1)
+            return -1;
+
+        if (EVP_MD_CTX_md(s->read_hash) != NULL) {
+            /* TODO(size_t): convert me */
+            imac_size = EVP_MD_CTX_size(s->read_hash);
+            if (imac_size < 0) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_ENC,
+                         ERR_R_INTERNAL_ERROR);
+                return -1;
+            }
+            mac_size = (size_t)imac_size;
+        }
+        if ((bs != 1) && !sending)
+            return ssl3_cbc_remove_padding(rec, bs, mac_size);
+    }
+    return 1;
+}
+
+#define MAX_PADDING 256
+/*-
+ * tls1_enc encrypts/decrypts |n_recs| in |recs|.  Will call SSLfatal() for
+ * internal errors, but not otherwise.
+ *
+ * Returns:
+ *   0: (in non-constant time) if the record is publically invalid (i.e. too
+ *       short etc).
+ *   1: if the record's padding is valid / the encryption was successful.
+ *   -1: if the record's padding/AEAD-authenticator is invalid or, if sending,
+ *       an internal error occurred.
+ */
+int tls1_enc(SSL *s, SSL3_RECORD *recs, size_t n_recs, int sending)
+{
+    EVP_CIPHER_CTX *ds;
+    size_t reclen[SSL_MAX_PIPELINES];
+    unsigned char buf[SSL_MAX_PIPELINES][EVP_AEAD_TLS1_AAD_LEN];
+    int i, pad = 0, ret, tmpr;
+    size_t bs, mac_size = 0, ctr, padnum, loop;
+    unsigned char padval;
+    int imac_size;
+    const EVP_CIPHER *enc;
+
+    if (n_recs == 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_ENC,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (sending) {
+        if (EVP_MD_CTX_md(s->write_hash)) {
+            int n = EVP_MD_CTX_size(s->write_hash);
+            if (!ossl_assert(n >= 0)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_ENC,
+                         ERR_R_INTERNAL_ERROR);
+                return -1;
+            }
+        }
+        ds = s->enc_write_ctx;
+        if (s->enc_write_ctx == NULL)
+            enc = NULL;
+        else {
+            int ivlen;
+            enc = EVP_CIPHER_CTX_cipher(s->enc_write_ctx);
+            /* For TLSv1.1 and later explicit IV */
+            if (SSL_USE_EXPLICIT_IV(s)
+                && EVP_CIPHER_mode(enc) == EVP_CIPH_CBC_MODE)
+                ivlen = EVP_CIPHER_iv_length(enc);
+            else
+                ivlen = 0;
+            if (ivlen > 1) {
+                for (ctr = 0; ctr < n_recs; ctr++) {
+                    if (recs[ctr].data != recs[ctr].input) {
+                        /*
+                         * we can't write into the input stream: Can this ever
+                         * happen?? (steve)
+                         */
+                        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_ENC,
+                                 ERR_R_INTERNAL_ERROR);
+                        return -1;
+                    } else if (RAND_bytes(recs[ctr].input, ivlen) <= 0) {
+                        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_ENC,
+                                 ERR_R_INTERNAL_ERROR);
+                        return -1;
+                    }
+                }
+            }
+        }
+    } else {
+        if (EVP_MD_CTX_md(s->read_hash)) {
+            int n = EVP_MD_CTX_size(s->read_hash);
+            if (!ossl_assert(n >= 0)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_ENC,
+                         ERR_R_INTERNAL_ERROR);
+                return -1;
+            }
+        }
+        ds = s->enc_read_ctx;
+        if (s->enc_read_ctx == NULL)
+            enc = NULL;
+        else
+            enc = EVP_CIPHER_CTX_cipher(s->enc_read_ctx);
+    }
+
+    if ((s->session == NULL) || (ds == NULL) || (enc == NULL)) {
+        for (ctr = 0; ctr < n_recs; ctr++) {
+            memmove(recs[ctr].data, recs[ctr].input, recs[ctr].length);
+            recs[ctr].input = recs[ctr].data;
+        }
+        ret = 1;
+    } else {
+        bs = EVP_CIPHER_block_size(EVP_CIPHER_CTX_cipher(ds));
+
+        if (n_recs > 1) {
+            if (!(EVP_CIPHER_flags(EVP_CIPHER_CTX_cipher(ds))
+                  & EVP_CIPH_FLAG_PIPELINE)) {
+                /*
+                 * We shouldn't have been called with pipeline data if the
+                 * cipher doesn't support pipelining
+                 */
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_ENC,
+                         SSL_R_PIPELINE_FAILURE);
+                return -1;
+            }
+        }
+        for (ctr = 0; ctr < n_recs; ctr++) {
+            reclen[ctr] = recs[ctr].length;
+
+            if (EVP_CIPHER_flags(EVP_CIPHER_CTX_cipher(ds))
+                & EVP_CIPH_FLAG_AEAD_CIPHER) {
+                unsigned char *seq;
+
+                seq = sending ? RECORD_LAYER_get_write_sequence(&s->rlayer)
+                    : RECORD_LAYER_get_read_sequence(&s->rlayer);
+
+                if (SSL_IS_DTLS(s)) {
+                    /* DTLS does not support pipelining */
+                    unsigned char dtlsseq[9], *p = dtlsseq;
+
+                    s2n(sending ? DTLS_RECORD_LAYER_get_w_epoch(&s->rlayer) :
+                        DTLS_RECORD_LAYER_get_r_epoch(&s->rlayer), p);
+                    memcpy(p, &seq[2], 6);
+                    memcpy(buf[ctr], dtlsseq, 8);
+                } else {
+                    memcpy(buf[ctr], seq, 8);
+                    for (i = 7; i >= 0; i--) { /* increment */
+                        ++seq[i];
+                        if (seq[i] != 0)
+                            break;
+                    }
+                }
+
+                buf[ctr][8] = recs[ctr].type;
+                buf[ctr][9] = (unsigned char)(s->version >> 8);
+                buf[ctr][10] = (unsigned char)(s->version);
+                buf[ctr][11] = (unsigned char)(recs[ctr].length >> 8);
+                buf[ctr][12] = (unsigned char)(recs[ctr].length & 0xff);
+                pad = EVP_CIPHER_CTX_ctrl(ds, EVP_CTRL_AEAD_TLS1_AAD,
+                                          EVP_AEAD_TLS1_AAD_LEN, buf[ctr]);
+                if (pad <= 0) {
+                    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_ENC,
+                             ERR_R_INTERNAL_ERROR);
+                    return -1;
+                }
+
+                if (sending) {
+                    reclen[ctr] += pad;
+                    recs[ctr].length += pad;
+                }
+
+            } else if ((bs != 1) && sending) {
+                padnum = bs - (reclen[ctr] % bs);
+
+                /* Add weird padding of upto 256 bytes */
+
+                if (padnum > MAX_PADDING) {
+                    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_ENC,
+                             ERR_R_INTERNAL_ERROR);
+                    return -1;
+                }
+                /* we need to add 'padnum' padding bytes of value padval */
+                padval = (unsigned char)(padnum - 1);
+                for (loop = reclen[ctr]; loop < reclen[ctr] + padnum; loop++)
+                    recs[ctr].input[loop] = padval;
+                reclen[ctr] += padnum;
+                recs[ctr].length += padnum;
+            }
+
+            if (!sending) {
+                if (reclen[ctr] == 0 || reclen[ctr] % bs != 0)
+                    return 0;
+            }
+        }
+        if (n_recs > 1) {
+            unsigned char *data[SSL_MAX_PIPELINES];
+
+            /* Set the output buffers */
+            for (ctr = 0; ctr < n_recs; ctr++) {
+                data[ctr] = recs[ctr].data;
+            }
+            if (EVP_CIPHER_CTX_ctrl(ds, EVP_CTRL_SET_PIPELINE_OUTPUT_BUFS,
+                                    (int)n_recs, data) <= 0) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_ENC,
+                         SSL_R_PIPELINE_FAILURE);
+                return -1;
+            }
+            /* Set the input buffers */
+            for (ctr = 0; ctr < n_recs; ctr++) {
+                data[ctr] = recs[ctr].input;
+            }
+            if (EVP_CIPHER_CTX_ctrl(ds, EVP_CTRL_SET_PIPELINE_INPUT_BUFS,
+                                    (int)n_recs, data) <= 0
+                || EVP_CIPHER_CTX_ctrl(ds, EVP_CTRL_SET_PIPELINE_INPUT_LENS,
+                                       (int)n_recs, reclen) <= 0) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_ENC,
+                         SSL_R_PIPELINE_FAILURE);
+                return -1;
+            }
+        }
+
+        /* TODO(size_t): Convert this call */
+        tmpr = EVP_Cipher(ds, recs[0].data, recs[0].input,
+                          (unsigned int)reclen[0]);
+        if ((EVP_CIPHER_flags(EVP_CIPHER_CTX_cipher(ds))
+             & EVP_CIPH_FLAG_CUSTOM_CIPHER)
+            ? (tmpr < 0)
+            : (tmpr == 0))
+            return -1;          /* AEAD can fail to verify MAC */
+
+        if (sending == 0) {
+            if (EVP_CIPHER_mode(enc) == EVP_CIPH_GCM_MODE) {
+                for (ctr = 0; ctr < n_recs; ctr++) {
+                    recs[ctr].data += EVP_GCM_TLS_EXPLICIT_IV_LEN;
+                    recs[ctr].input += EVP_GCM_TLS_EXPLICIT_IV_LEN;
+                    recs[ctr].length -= EVP_GCM_TLS_EXPLICIT_IV_LEN;
+                }
+            } else if (EVP_CIPHER_mode(enc) == EVP_CIPH_CCM_MODE) {
+                for (ctr = 0; ctr < n_recs; ctr++) {
+                    recs[ctr].data += EVP_CCM_TLS_EXPLICIT_IV_LEN;
+                    recs[ctr].input += EVP_CCM_TLS_EXPLICIT_IV_LEN;
+                    recs[ctr].length -= EVP_CCM_TLS_EXPLICIT_IV_LEN;
+                }
+            }
+        }
+
+        ret = 1;
+        if (!SSL_READ_ETM(s) && EVP_MD_CTX_md(s->read_hash) != NULL) {
+            imac_size = EVP_MD_CTX_size(s->read_hash);
+            if (imac_size < 0) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_ENC,
+                         ERR_R_INTERNAL_ERROR);
+                return -1;
+            }
+            mac_size = (size_t)imac_size;
+        }
+        if ((bs != 1) && !sending) {
+            int tmpret;
+            for (ctr = 0; ctr < n_recs; ctr++) {
+                tmpret = tls1_cbc_remove_padding(s, &recs[ctr], bs, mac_size);
+                /*
+                 * If tmpret == 0 then this means publicly invalid so we can
+                 * short circuit things here. Otherwise we must respect constant
+                 * time behaviour.
+                 */
+                if (tmpret == 0)
+                    return 0;
+                ret = constant_time_select_int(constant_time_eq_int(tmpret, 1),
+                                               ret, -1);
+            }
+        }
+        if (pad && !sending) {
+            for (ctr = 0; ctr < n_recs; ctr++) {
+                recs[ctr].length -= pad;
+            }
+        }
+    }
+    return ret;
+}
+
+int n_ssl3_mac(SSL *ssl, SSL3_RECORD *rec, unsigned char *md, int sending)
+{
+    unsigned char *mac_sec, *seq;
+    const EVP_MD_CTX *hash;
+    unsigned char *p, rec_char;
+    size_t md_size;
+    size_t npad;
+    int t;
+
+    if (sending) {
+        mac_sec = &(ssl->s3->write_mac_secret[0]);
+        seq = RECORD_LAYER_get_write_sequence(&ssl->rlayer);
+        hash = ssl->write_hash;
+    } else {
+        mac_sec = &(ssl->s3->read_mac_secret[0]);
+        seq = RECORD_LAYER_get_read_sequence(&ssl->rlayer);
+        hash = ssl->read_hash;
+    }
+
+    t = EVP_MD_CTX_size(hash);
+    if (t < 0)
+        return 0;
+    md_size = t;
+    npad = (48 / md_size) * md_size;
+
+    if (!sending &&
+        EVP_CIPHER_CTX_mode(ssl->enc_read_ctx) == EVP_CIPH_CBC_MODE &&
+        ssl3_cbc_record_digest_supported(hash)) {
+        /*
+         * This is a CBC-encrypted record. We must avoid leaking any
+         * timing-side channel information about how many blocks of data we
+         * are hashing because that gives an attacker a timing-oracle.
+         */
+
+        /*-
+         * npad is, at most, 48 bytes and that's with MD5:
+         *   16 + 48 + 8 (sequence bytes) + 1 + 2 = 75.
+         *
+         * With SHA-1 (the largest hash speced for SSLv3) the hash size
+         * goes up 4, but npad goes down by 8, resulting in a smaller
+         * total size.
+         */
+        unsigned char header[75];
+        size_t j = 0;
+        memcpy(header + j, mac_sec, md_size);
+        j += md_size;
+        memcpy(header + j, ssl3_pad_1, npad);
+        j += npad;
+        memcpy(header + j, seq, 8);
+        j += 8;
+        header[j++] = rec->type;
+        header[j++] = (unsigned char)(rec->length >> 8);
+        header[j++] = (unsigned char)(rec->length & 0xff);
+
+        /* Final param == is SSLv3 */
+        if (ssl3_cbc_digest_record(hash,
+                                   md, &md_size,
+                                   header, rec->input,
+                                   rec->length + md_size, rec->orig_len,
+                                   mac_sec, md_size, 1) <= 0)
+            return 0;
+    } else {
+        unsigned int md_size_u;
+        /* Chop the digest off the end :-) */
+        EVP_MD_CTX *md_ctx = EVP_MD_CTX_new();
+
+        if (md_ctx == NULL)
+            return 0;
+
+        rec_char = rec->type;
+        p = md;
+        s2n(rec->length, p);
+        if (EVP_MD_CTX_copy_ex(md_ctx, hash) <= 0
+            || EVP_DigestUpdate(md_ctx, mac_sec, md_size) <= 0
+            || EVP_DigestUpdate(md_ctx, ssl3_pad_1, npad) <= 0
+            || EVP_DigestUpdate(md_ctx, seq, 8) <= 0
+            || EVP_DigestUpdate(md_ctx, &rec_char, 1) <= 0
+            || EVP_DigestUpdate(md_ctx, md, 2) <= 0
+            || EVP_DigestUpdate(md_ctx, rec->input, rec->length) <= 0
+            || EVP_DigestFinal_ex(md_ctx, md, NULL) <= 0
+            || EVP_MD_CTX_copy_ex(md_ctx, hash) <= 0
+            || EVP_DigestUpdate(md_ctx, mac_sec, md_size) <= 0
+            || EVP_DigestUpdate(md_ctx, ssl3_pad_2, npad) <= 0
+            || EVP_DigestUpdate(md_ctx, md, md_size) <= 0
+            || EVP_DigestFinal_ex(md_ctx, md, &md_size_u) <= 0) {
+            EVP_MD_CTX_free(md_ctx);
+            return 0;
+        }
+
+        EVP_MD_CTX_free(md_ctx);
+    }
+
+    ssl3_record_sequence_update(seq);
+    return 1;
+}
+
+int tls1_mac(SSL *ssl, SSL3_RECORD *rec, unsigned char *md, int sending)
+{
+    unsigned char *seq;
+    EVP_MD_CTX *hash;
+    size_t md_size;
+    int i;
+    EVP_MD_CTX *hmac = NULL, *mac_ctx;
+    unsigned char header[13];
+    int stream_mac = (sending ? (ssl->mac_flags & SSL_MAC_FLAG_WRITE_MAC_STREAM)
+                      : (ssl->mac_flags & SSL_MAC_FLAG_READ_MAC_STREAM));
+    int t;
+
+    if (sending) {
+        seq = RECORD_LAYER_get_write_sequence(&ssl->rlayer);
+        hash = ssl->write_hash;
+    } else {
+        seq = RECORD_LAYER_get_read_sequence(&ssl->rlayer);
+        hash = ssl->read_hash;
+    }
+
+    t = EVP_MD_CTX_size(hash);
+    if (!ossl_assert(t >= 0))
+        return 0;
+    md_size = t;
+
+    /* I should fix this up TLS TLS TLS TLS TLS XXXXXXXX */
+    if (stream_mac) {
+        mac_ctx = hash;
+    } else {
+        hmac = EVP_MD_CTX_new();
+        if (hmac == NULL || !EVP_MD_CTX_copy(hmac, hash)) {
+            EVP_MD_CTX_free(hmac);
+            return 0;
+        }
+        mac_ctx = hmac;
+    }
+
+    if (SSL_IS_DTLS(ssl)) {
+        unsigned char dtlsseq[8], *p = dtlsseq;
+
+        s2n(sending ? DTLS_RECORD_LAYER_get_w_epoch(&ssl->rlayer) :
+            DTLS_RECORD_LAYER_get_r_epoch(&ssl->rlayer), p);
+        memcpy(p, &seq[2], 6);
+
+        memcpy(header, dtlsseq, 8);
+    } else
+        memcpy(header, seq, 8);
+
+    header[8] = rec->type;
+    header[9] = (unsigned char)(ssl->version >> 8);
+    header[10] = (unsigned char)(ssl->version);
+    header[11] = (unsigned char)(rec->length >> 8);
+    header[12] = (unsigned char)(rec->length & 0xff);
+
+    if (!sending && !SSL_READ_ETM(ssl) &&
+        EVP_CIPHER_CTX_mode(ssl->enc_read_ctx) == EVP_CIPH_CBC_MODE &&
+        ssl3_cbc_record_digest_supported(mac_ctx)) {
+        /*
+         * This is a CBC-encrypted record. We must avoid leaking any
+         * timing-side channel information about how many blocks of data we
+         * are hashing because that gives an attacker a timing-oracle.
+         */
+        /* Final param == not SSLv3 */
+        if (ssl3_cbc_digest_record(mac_ctx,
+                                   md, &md_size,
+                                   header, rec->input,
+                                   rec->length + md_size, rec->orig_len,
+                                   ssl->s3->read_mac_secret,
+                                   ssl->s3->read_mac_secret_size, 0) <= 0) {
+            EVP_MD_CTX_free(hmac);
+            return 0;
+        }
+    } else {
+        /* TODO(size_t): Convert these calls */
+        if (EVP_DigestSignUpdate(mac_ctx, header, sizeof(header)) <= 0
+            || EVP_DigestSignUpdate(mac_ctx, rec->input, rec->length) <= 0
+            || EVP_DigestSignFinal(mac_ctx, md, &md_size) <= 0) {
+            EVP_MD_CTX_free(hmac);
+            return 0;
+        }
+    }
+
+    EVP_MD_CTX_free(hmac);
+
+#ifdef SSL_DEBUG
+    fprintf(stderr, "seq=");
+    {
+        int z;
+        for (z = 0; z < 8; z++)
+            fprintf(stderr, "%02X ", seq[z]);
+        fprintf(stderr, "\n");
+    }
+    fprintf(stderr, "rec=");
+    {
+        size_t z;
+        for (z = 0; z < rec->length; z++)
+            fprintf(stderr, "%02X ", rec->data[z]);
+        fprintf(stderr, "\n");
+    }
+#endif
+
+    if (!SSL_IS_DTLS(ssl)) {
+        for (i = 7; i >= 0; i--) {
+            ++seq[i];
+            if (seq[i] != 0)
+                break;
+        }
+    }
+#ifdef SSL_DEBUG
+    {
+        unsigned int z;
+        for (z = 0; z < md_size; z++)
+            fprintf(stderr, "%02X ", md[z]);
+        fprintf(stderr, "\n");
+    }
+#endif
+    return 1;
+}
+
+/*-
+ * ssl3_cbc_remove_padding removes padding from the decrypted, SSLv3, CBC
+ * record in |rec| by updating |rec->length| in constant time.
+ *
+ * block_size: the block size of the cipher used to encrypt the record.
+ * returns:
+ *   0: (in non-constant time) if the record is publicly invalid.
+ *   1: if the padding was valid
+ *  -1: otherwise.
+ */
+int ssl3_cbc_remove_padding(SSL3_RECORD *rec,
+                            size_t block_size, size_t mac_size)
+{
+    size_t padding_length;
+    size_t good;
+    const size_t overhead = 1 /* padding length byte */  + mac_size;
+
+    /*
+     * These lengths are all public so we can test them in non-constant time.
+     */
+    if (overhead > rec->length)
+        return 0;
+
+    padding_length = rec->data[rec->length - 1];
+    good = constant_time_ge_s(rec->length, padding_length + overhead);
+    /* SSLv3 requires that the padding is minimal. */
+    good &= constant_time_ge_s(block_size, padding_length + 1);
+    rec->length -= good & (padding_length + 1);
+    return constant_time_select_int_s(good, 1, -1);
+}
+
+/*-
+ * tls1_cbc_remove_padding removes the CBC padding from the decrypted, TLS, CBC
+ * record in |rec| in constant time and returns 1 if the padding is valid and
+ * -1 otherwise. It also removes any explicit IV from the start of the record
+ * without leaking any timing about whether there was enough space after the
+ * padding was removed.
+ *
+ * block_size: the block size of the cipher used to encrypt the record.
+ * returns:
+ *   0: (in non-constant time) if the record is publicly invalid.
+ *   1: if the padding was valid
+ *  -1: otherwise.
+ */
+int tls1_cbc_remove_padding(const SSL *s,
+                            SSL3_RECORD *rec,
+                            size_t block_size, size_t mac_size)
+{
+    size_t good;
+    size_t padding_length, to_check, i;
+    const size_t overhead = 1 /* padding length byte */  + mac_size;
+    /* Check if version requires explicit IV */
+    if (SSL_USE_EXPLICIT_IV(s)) {
+        /*
+         * These lengths are all public so we can test them in non-constant
+         * time.
+         */
+        if (overhead + block_size > rec->length)
+            return 0;
+        /* We can now safely skip explicit IV */
+        rec->data += block_size;
+        rec->input += block_size;
+        rec->length -= block_size;
+        rec->orig_len -= block_size;
+    } else if (overhead > rec->length)
+        return 0;
+
+    padding_length = rec->data[rec->length - 1];
+
+    if (EVP_CIPHER_flags(EVP_CIPHER_CTX_cipher(s->enc_read_ctx)) &
+        EVP_CIPH_FLAG_AEAD_CIPHER) {
+        /* padding is already verified */
+        rec->length -= padding_length + 1;
+        return 1;
+    }
+
+    good = constant_time_ge_s(rec->length, overhead + padding_length);
+    /*
+     * The padding consists of a length byte at the end of the record and
+     * then that many bytes of padding, all with the same value as the length
+     * byte. Thus, with the length byte included, there are i+1 bytes of
+     * padding. We can't check just |padding_length+1| bytes because that
+     * leaks decrypted information. Therefore we always have to check the
+     * maximum amount of padding possible. (Again, the length of the record
+     * is public information so we can use it.)
+     */
+    to_check = 256;            /* maximum amount of padding, inc length byte. */
+    if (to_check > rec->length)
+        to_check = rec->length;
+
+    for (i = 0; i < to_check; i++) {
+        unsigned char mask = constant_time_ge_8_s(padding_length, i);
+        unsigned char b = rec->data[rec->length - 1 - i];
+        /*
+         * The final |padding_length+1| bytes should all have the value
+         * |padding_length|. Therefore the XOR should be zero.
+         */
+        good &= ~(mask & (padding_length ^ b));
+    }
+
+    /*
+     * If any of the final |padding_length+1| bytes had the wrong value, one
+     * or more of the lower eight bits of |good| will be cleared.
+     */
+    good = constant_time_eq_s(0xff, good & 0xff);
+    rec->length -= good & (padding_length + 1);
+
+    return constant_time_select_int_s(good, 1, -1);
+}
+
+/*-
+ * ssl3_cbc_copy_mac copies |md_size| bytes from the end of |rec| to |out| in
+ * constant time (independent of the concrete value of rec->length, which may
+ * vary within a 256-byte window).
+ *
+ * ssl3_cbc_remove_padding or tls1_cbc_remove_padding must be called prior to
+ * this function.
+ *
+ * On entry:
+ *   rec->orig_len >= md_size
+ *   md_size <= EVP_MAX_MD_SIZE
+ *
+ * If CBC_MAC_ROTATE_IN_PLACE is defined then the rotation is performed with
+ * variable accesses in a 64-byte-aligned buffer. Assuming that this fits into
+ * a single or pair of cache-lines, then the variable memory accesses don't
+ * actually affect the timing. CPUs with smaller cache-lines [if any] are
+ * not multi-core and are not considered vulnerable to cache-timing attacks.
+ */
+#define CBC_MAC_ROTATE_IN_PLACE
+
+int ssl3_cbc_copy_mac(unsigned char *out,
+                       const SSL3_RECORD *rec, size_t md_size)
+{
+#if defined(CBC_MAC_ROTATE_IN_PLACE)
+    unsigned char rotated_mac_buf[64 + EVP_MAX_MD_SIZE];
+    unsigned char *rotated_mac;
+#else
+    unsigned char rotated_mac[EVP_MAX_MD_SIZE];
+#endif
+
+    /*
+     * mac_end is the index of |rec->data| just after the end of the MAC.
+     */
+    size_t mac_end = rec->length;
+    size_t mac_start = mac_end - md_size;
+    size_t in_mac;
+    /*
+     * scan_start contains the number of bytes that we can ignore because the
+     * MAC's position can only vary by 255 bytes.
+     */
+    size_t scan_start = 0;
+    size_t i, j;
+    size_t rotate_offset;
+
+    if (!ossl_assert(rec->orig_len >= md_size
+                     && md_size <= EVP_MAX_MD_SIZE))
+        return 0;
+
+#if defined(CBC_MAC_ROTATE_IN_PLACE)
+    rotated_mac = rotated_mac_buf + ((0 - (size_t)rotated_mac_buf) & 63);
+#endif
+
+    /* This information is public so it's safe to branch based on it. */
+    if (rec->orig_len > md_size + 255 + 1)
+        scan_start = rec->orig_len - (md_size + 255 + 1);
+
+    in_mac = 0;
+    rotate_offset = 0;
+    memset(rotated_mac, 0, md_size);
+    for (i = scan_start, j = 0; i < rec->orig_len; i++) {
+        size_t mac_started = constant_time_eq_s(i, mac_start);
+        size_t mac_ended = constant_time_lt_s(i, mac_end);
+        unsigned char b = rec->data[i];
+
+        in_mac |= mac_started;
+        in_mac &= mac_ended;
+        rotate_offset |= j & mac_started;
+        rotated_mac[j++] |= b & in_mac;
+        j &= constant_time_lt_s(j, md_size);
+    }
+
+    /* Now rotate the MAC */
+#if defined(CBC_MAC_ROTATE_IN_PLACE)
+    j = 0;
+    for (i = 0; i < md_size; i++) {
+        /* in case cache-line is 32 bytes, touch second line */
+        ((volatile unsigned char *)rotated_mac)[rotate_offset ^ 32];
+        out[j++] = rotated_mac[rotate_offset++];
+        rotate_offset &= constant_time_lt_s(rotate_offset, md_size);
+    }
+#else
+    memset(out, 0, md_size);
+    rotate_offset = md_size - rotate_offset;
+    rotate_offset &= constant_time_lt_s(rotate_offset, md_size);
+    for (i = 0; i < md_size; i++) {
+        for (j = 0; j < md_size; j++)
+            out[j] |= rotated_mac[i] & constant_time_eq_8_s(j, rotate_offset);
+        rotate_offset++;
+        rotate_offset &= constant_time_lt_s(rotate_offset, md_size);
+    }
+#endif
+
+    return 1;
+}
+
+int dtls1_process_record(SSL *s, DTLS1_BITMAP *bitmap)
+{
+    int i;
+    int enc_err;
+    SSL_SESSION *sess;
+    SSL3_RECORD *rr;
+    int imac_size;
+    size_t mac_size;
+    unsigned char md[EVP_MAX_MD_SIZE];
+
+    rr = RECORD_LAYER_get_rrec(&s->rlayer);
+    sess = s->session;
+
+    /*
+     * At this point, s->packet_length == SSL3_RT_HEADER_LNGTH + rr->length,
+     * and we have that many bytes in s->packet
+     */
+    rr->input = &(RECORD_LAYER_get_packet(&s->rlayer)[DTLS1_RT_HEADER_LENGTH]);
+
+    /*
+     * ok, we can now read from 's->packet' data into 'rr' rr->input points
+     * at rr->length bytes, which need to be copied into rr->data by either
+     * the decryption or by the decompression When the data is 'copied' into
+     * the rr->data buffer, rr->input will be pointed at the new buffer
+     */
+
+    /*
+     * We now have - encrypted [ MAC [ compressed [ plain ] ] ] rr->length
+     * bytes of encrypted compressed stuff.
+     */
+
+    /* check is not needed I believe */
+    if (rr->length > SSL3_RT_MAX_ENCRYPTED_LENGTH) {
+        SSLfatal(s, SSL_AD_RECORD_OVERFLOW, SSL_F_DTLS1_PROCESS_RECORD,
+                 SSL_R_ENCRYPTED_LENGTH_TOO_LONG);
+        return 0;
+    }
+
+    /* decrypt in place in 'rr->input' */
+    rr->data = rr->input;
+    rr->orig_len = rr->length;
+
+    if (SSL_READ_ETM(s) && s->read_hash) {
+        unsigned char *mac;
+        mac_size = EVP_MD_CTX_size(s->read_hash);
+        if (!ossl_assert(mac_size <= EVP_MAX_MD_SIZE)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DTLS1_PROCESS_RECORD,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+        if (rr->orig_len < mac_size) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_DTLS1_PROCESS_RECORD,
+                     SSL_R_LENGTH_TOO_SHORT);
+            return 0;
+        }
+        rr->length -= mac_size;
+        mac = rr->data + rr->length;
+        i = s->method->ssl3_enc->mac(s, rr, md, 0 /* not send */ );
+        if (i == 0 || CRYPTO_memcmp(md, mac, (size_t)mac_size) != 0) {
+            SSLfatal(s, SSL_AD_BAD_RECORD_MAC, SSL_F_DTLS1_PROCESS_RECORD,
+                   SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC);
+            return 0;
+        }
+    }
+
+    enc_err = s->method->ssl3_enc->enc(s, rr, 1, 0);
+    /*-
+     * enc_err is:
+     *    0: (in non-constant time) if the record is publically invalid.
+     *    1: if the padding is valid
+     *   -1: if the padding is invalid
+     */
+    if (enc_err == 0) {
+        if (ossl_statem_in_error(s)) {
+            /* SSLfatal() got called */
+            return 0;
+        }
+        /* For DTLS we simply ignore bad packets. */
+        rr->length = 0;
+        RECORD_LAYER_reset_packet_length(&s->rlayer);
+        return 0;
+    }
+#ifdef SSL_DEBUG
+    printf("dec %ld\n", rr->length);
+    {
+        size_t z;
+        for (z = 0; z < rr->length; z++)
+            printf("%02X%c", rr->data[z], ((z + 1) % 16) ? ' ' : '\n');
+    }
+    printf("\n");
+#endif
+
+    /* r->length is now the compressed data plus mac */
+    if ((sess != NULL) && !SSL_READ_ETM(s) &&
+        (s->enc_read_ctx != NULL) && (EVP_MD_CTX_md(s->read_hash) != NULL)) {
+        /* s->read_hash != NULL => mac_size != -1 */
+        unsigned char *mac = NULL;
+        unsigned char mac_tmp[EVP_MAX_MD_SIZE];
+
+        /* TODO(size_t): Convert this to do size_t properly */
+        imac_size = EVP_MD_CTX_size(s->read_hash);
+        if (imac_size < 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DTLS1_PROCESS_RECORD,
+                     ERR_LIB_EVP);
+            return 0;
+        }
+        mac_size = (size_t)imac_size;
+        if (!ossl_assert(mac_size <= EVP_MAX_MD_SIZE)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DTLS1_PROCESS_RECORD,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+
+        /*
+         * orig_len is the length of the record before any padding was
+         * removed. This is public information, as is the MAC in use,
+         * therefore we can safely process the record in a different amount
+         * of time if it's too short to possibly contain a MAC.
+         */
+        if (rr->orig_len < mac_size ||
+            /* CBC records must have a padding length byte too. */
+            (EVP_CIPHER_CTX_mode(s->enc_read_ctx) == EVP_CIPH_CBC_MODE &&
+             rr->orig_len < mac_size + 1)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_DTLS1_PROCESS_RECORD,
+                     SSL_R_LENGTH_TOO_SHORT);
+            return 0;
+        }
+
+        if (EVP_CIPHER_CTX_mode(s->enc_read_ctx) == EVP_CIPH_CBC_MODE) {
+            /*
+             * We update the length so that the TLS header bytes can be
+             * constructed correctly but we need to extract the MAC in
+             * constant time from within the record, without leaking the
+             * contents of the padding bytes.
+             */
+            mac = mac_tmp;
+            if (!ssl3_cbc_copy_mac(mac_tmp, rr, mac_size)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DTLS1_PROCESS_RECORD,
+                         ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+            rr->length -= mac_size;
+        } else {
+            /*
+             * In this case there's no padding, so |rec->orig_len| equals
+             * |rec->length| and we checked that there's enough bytes for
+             * |mac_size| above.
+             */
+            rr->length -= mac_size;
+            mac = &rr->data[rr->length];
+        }
+
+        i = s->method->ssl3_enc->mac(s, rr, md, 0 /* not send */ );
+        if (i == 0 || mac == NULL
+            || CRYPTO_memcmp(md, mac, mac_size) != 0)
+            enc_err = -1;
+        if (rr->length > SSL3_RT_MAX_COMPRESSED_LENGTH + mac_size)
+            enc_err = -1;
+    }
+
+    if (enc_err < 0) {
+        /* decryption failed, silently discard message */
+        rr->length = 0;
+        RECORD_LAYER_reset_packet_length(&s->rlayer);
+        return 0;
+    }
+
+    /* r->length is now just compressed */
+    if (s->expand != NULL) {
+        if (rr->length > SSL3_RT_MAX_COMPRESSED_LENGTH) {
+            SSLfatal(s, SSL_AD_RECORD_OVERFLOW, SSL_F_DTLS1_PROCESS_RECORD,
+                     SSL_R_COMPRESSED_LENGTH_TOO_LONG);
+            return 0;
+        }
+        if (!ssl3_do_uncompress(s, rr)) {
+            SSLfatal(s, SSL_AD_DECOMPRESSION_FAILURE,
+                     SSL_F_DTLS1_PROCESS_RECORD, SSL_R_BAD_DECOMPRESSION);
+            return 0;
+        }
+    }
+
+    if (rr->length > SSL3_RT_MAX_PLAIN_LENGTH) {
+        SSLfatal(s, SSL_AD_RECORD_OVERFLOW, SSL_F_DTLS1_PROCESS_RECORD,
+                 SSL_R_DATA_LENGTH_TOO_LONG);
+        return 0;
+    }
+
+    rr->off = 0;
+    /*-
+     * So at this point the following is true
+     * ssl->s3->rrec.type   is the type of record
+     * ssl->s3->rrec.length == number of bytes in record
+     * ssl->s3->rrec.off    == offset to first valid byte
+     * ssl->s3->rrec.data   == where to take bytes from, increment
+     *                         after use :-).
+     */
+
+    /* we have pulled in a full packet so zero things */
+    RECORD_LAYER_reset_packet_length(&s->rlayer);
+
+    /* Mark receipt of record. */
+    dtls1_record_bitmap_update(s, bitmap);
+
+    return 1;
+}
+
+/*
+ * Retrieve a buffered record that belongs to the current epoch, i.e. processed
+ */
+#define dtls1_get_processed_record(s) \
+                   dtls1_retrieve_buffered_record((s), \
+                   &(DTLS_RECORD_LAYER_get_processed_rcds(&s->rlayer)))
+
+/*-
+ * Call this to get a new input record.
+ * It will return <= 0 if more data is needed, normally due to an error
+ * or non-blocking IO.
+ * When it finishes, one packet has been decoded and can be found in
+ * ssl->s3->rrec.type    - is the type of record
+ * ssl->s3->rrec.data,   - data
+ * ssl->s3->rrec.length, - number of bytes
+ */
+/* used only by dtls1_read_bytes */
+int dtls1_get_record(SSL *s)
+{
+    int ssl_major, ssl_minor;
+    int rret;
+    size_t more, n;
+    SSL3_RECORD *rr;
+    unsigned char *p = NULL;
+    unsigned short version;
+    DTLS1_BITMAP *bitmap;
+    unsigned int is_next_epoch;
+
+    rr = RECORD_LAYER_get_rrec(&s->rlayer);
+
+ again:
+    /*
+     * The epoch may have changed.  If so, process all the pending records.
+     * This is a non-blocking operation.
+     */
+    if (!dtls1_process_buffered_records(s)) {
+        /* SSLfatal() already called */
+        return -1;
+    }
+
+    /* if we're renegotiating, then there may be buffered records */
+    if (dtls1_get_processed_record(s))
+        return 1;
+
+    /* get something from the wire */
+
+    /* check if we have the header */
+    if ((RECORD_LAYER_get_rstate(&s->rlayer) != SSL_ST_READ_BODY) ||
+        (RECORD_LAYER_get_packet_length(&s->rlayer) < DTLS1_RT_HEADER_LENGTH)) {
+        rret = ssl3_read_n(s, DTLS1_RT_HEADER_LENGTH,
+                           SSL3_BUFFER_get_len(&s->rlayer.rbuf), 0, 1, &n);
+        /* read timeout is handled by dtls1_read_bytes */
+        if (rret <= 0) {
+            /* SSLfatal() already called if appropriate */
+            return rret;         /* error or non-blocking */
+        }
+
+        /* this packet contained a partial record, dump it */
+        if (RECORD_LAYER_get_packet_length(&s->rlayer) !=
+            DTLS1_RT_HEADER_LENGTH) {
+            RECORD_LAYER_reset_packet_length(&s->rlayer);
+            goto again;
+        }
+
+        RECORD_LAYER_set_rstate(&s->rlayer, SSL_ST_READ_BODY);
+
+        p = RECORD_LAYER_get_packet(&s->rlayer);
+
+        if (s->msg_callback)
+            s->msg_callback(0, 0, SSL3_RT_HEADER, p, DTLS1_RT_HEADER_LENGTH,
+                            s, s->msg_callback_arg);
+
+        /* Pull apart the header into the DTLS1_RECORD */
+        rr->type = *(p++);
+        ssl_major = *(p++);
+        ssl_minor = *(p++);
+        version = (ssl_major << 8) | ssl_minor;
+
+        /* sequence number is 64 bits, with top 2 bytes = epoch */
+        n2s(p, rr->epoch);
+
+        memcpy(&(RECORD_LAYER_get_read_sequence(&s->rlayer)[2]), p, 6);
+        p += 6;
+
+        n2s(p, rr->length);
+        rr->read = 0;
+
+        /*
+         * Lets check the version. We tolerate alerts that don't have the exact
+         * version number (e.g. because of protocol version errors)
+         */
+        if (!s->first_packet && rr->type != SSL3_RT_ALERT) {
+            if (version != s->version) {
+                /* unexpected version, silently discard */
+                rr->length = 0;
+                rr->read = 1;
+                RECORD_LAYER_reset_packet_length(&s->rlayer);
+                goto again;
+            }
+        }
+
+        if ((version & 0xff00) != (s->version & 0xff00)) {
+            /* wrong version, silently discard record */
+            rr->length = 0;
+            rr->read = 1;
+            RECORD_LAYER_reset_packet_length(&s->rlayer);
+            goto again;
+        }
+
+        if (rr->length > SSL3_RT_MAX_ENCRYPTED_LENGTH) {
+            /* record too long, silently discard it */
+            rr->length = 0;
+            rr->read = 1;
+            RECORD_LAYER_reset_packet_length(&s->rlayer);
+            goto again;
+        }
+
+        /* If received packet overflows own-client Max Fragment Length setting */
+        if (s->session != NULL && USE_MAX_FRAGMENT_LENGTH_EXT(s->session)
+                && rr->length > GET_MAX_FRAGMENT_LENGTH(s->session)) {
+            /* record too long, silently discard it */
+            rr->length = 0;
+            rr->read = 1;
+            RECORD_LAYER_reset_packet_length(&s->rlayer);
+            goto again;
+        }
+
+        /* now s->rlayer.rstate == SSL_ST_READ_BODY */
+    }
+
+    /* s->rlayer.rstate == SSL_ST_READ_BODY, get and decode the data */
+
+    if (rr->length >
+        RECORD_LAYER_get_packet_length(&s->rlayer) - DTLS1_RT_HEADER_LENGTH) {
+        /* now s->packet_length == DTLS1_RT_HEADER_LENGTH */
+        more = rr->length;
+        rret = ssl3_read_n(s, more, more, 1, 1, &n);
+        /* this packet contained a partial record, dump it */
+        if (rret <= 0 || n != more) {
+            if (ossl_statem_in_error(s)) {
+                /* ssl3_read_n() called SSLfatal() */
+                return -1;
+            }
+            rr->length = 0;
+            rr->read = 1;
+            RECORD_LAYER_reset_packet_length(&s->rlayer);
+            goto again;
+        }
+
+        /*
+         * now n == rr->length, and s->packet_length ==
+         * DTLS1_RT_HEADER_LENGTH + rr->length
+         */
+    }
+    /* set state for later operations */
+    RECORD_LAYER_set_rstate(&s->rlayer, SSL_ST_READ_HEADER);
+
+    /* match epochs.  NULL means the packet is dropped on the floor */
+    bitmap = dtls1_get_bitmap(s, rr, &is_next_epoch);
+    if (bitmap == NULL) {
+        rr->length = 0;
+        RECORD_LAYER_reset_packet_length(&s->rlayer); /* dump this record */
+        goto again;             /* get another record */
+    }
+#ifndef OPENSSL_NO_SCTP
+    /* Only do replay check if no SCTP bio */
+    if (!BIO_dgram_is_sctp(SSL_get_rbio(s))) {
+#endif
+        /* Check whether this is a repeat, or aged record. */
+        /*
+         * TODO: Does it make sense to have replay protection in epoch 0 where
+         * we have no integrity negotiated yet?
+         */
+        if (!dtls1_record_replay_check(s, bitmap)) {
+            rr->length = 0;
+            rr->read = 1;
+            RECORD_LAYER_reset_packet_length(&s->rlayer); /* dump this record */
+            goto again;         /* get another record */
+        }
+#ifndef OPENSSL_NO_SCTP
+    }
+#endif
+
+    /* just read a 0 length packet */
+    if (rr->length == 0) {
+        rr->read = 1;
+        goto again;
+    }
+
+    /*
+     * If this record is from the next epoch (either HM or ALERT), and a
+     * handshake is currently in progress, buffer it since it cannot be
+     * processed at this time.
+     */
+    if (is_next_epoch) {
+        if ((SSL_in_init(s) || ossl_statem_get_in_handshake(s))) {
+            if (dtls1_buffer_record (s,
+                    &(DTLS_RECORD_LAYER_get_unprocessed_rcds(&s->rlayer)),
+                    rr->seq_num) < 0) {
+                /* SSLfatal() already called */
+                return -1;
+            }
+        }
+        rr->length = 0;
+        rr->read = 1;
+        RECORD_LAYER_reset_packet_length(&s->rlayer);
+        goto again;
+    }
+
+    if (!dtls1_process_record(s, bitmap)) {
+        if (ossl_statem_in_error(s)) {
+            /* dtls1_process_record() called SSLfatal */
+            return -1;
+        }
+        rr->length = 0;
+        rr->read = 1;
+        RECORD_LAYER_reset_packet_length(&s->rlayer); /* dump this record */
+        goto again;             /* get another record */
+    }
+
+    return 1;
+
+}
+
+int dtls_buffer_listen_record(SSL *s, size_t len, unsigned char *seq, size_t off)
+{
+    SSL3_RECORD *rr;
+
+    rr = RECORD_LAYER_get_rrec(&s->rlayer);
+    memset(rr, 0, sizeof(SSL3_RECORD));
+
+    rr->length = len;
+    rr->type = SSL3_RT_HANDSHAKE;
+    memcpy(rr->seq_num, seq, sizeof(rr->seq_num));
+    rr->off = off;
+
+    s->rlayer.packet = RECORD_LAYER_get_rbuf(&s->rlayer)->buf;
+    s->rlayer.packet_length = DTLS1_RT_HEADER_LENGTH + len;
+    rr->data = s->rlayer.packet + DTLS1_RT_HEADER_LENGTH;
+
+    if (dtls1_buffer_record(s, &(s->rlayer.d->processed_rcds),
+                            SSL3_RECORD_get_seq_num(s->rlayer.rrec)) <= 0) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/record/ssl3_record_tls13.c b/trunk/3rdparty/openssl-1.1-fit/ssl/record/ssl3_record_tls13.c
new file mode 100644
index 000000000..a11ed483e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/record/ssl3_record_tls13.c
@@ -0,0 +1,196 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "../ssl_locl.h"
+#include "record_locl.h"
+#include "internal/cryptlib.h"
+
+/*-
+ * tls13_enc encrypts/decrypts |n_recs| in |recs|. Will call SSLfatal() for
+ * internal errors, but not otherwise.
+ *
+ * Returns:
+ *    0: (in non-constant time) if the record is publically invalid (i.e. too
+ *        short etc).
+ *    1: if the record encryption was successful.
+ *   -1: if the record's AEAD-authenticator is invalid or, if sending,
+ *       an internal error occurred.
+ */
+int tls13_enc(SSL *s, SSL3_RECORD *recs, size_t n_recs, int sending)
+{
+    EVP_CIPHER_CTX *ctx;
+    unsigned char iv[EVP_MAX_IV_LENGTH], recheader[SSL3_RT_HEADER_LENGTH];
+    size_t ivlen, taglen, offset, loop, hdrlen;
+    unsigned char *staticiv;
+    unsigned char *seq;
+    int lenu, lenf;
+    SSL3_RECORD *rec = &recs[0];
+    uint32_t alg_enc;
+    WPACKET wpkt;
+
+    if (n_recs != 1) {
+        /* Should not happen */
+        /* TODO(TLS1.3): Support pipelining */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS13_ENC,
+                 ERR_R_INTERNAL_ERROR);
+        return -1;
+    }
+
+    if (sending) {
+        ctx = s->enc_write_ctx;
+        staticiv = s->write_iv;
+        seq = RECORD_LAYER_get_write_sequence(&s->rlayer);
+    } else {
+        ctx = s->enc_read_ctx;
+        staticiv = s->read_iv;
+        seq = RECORD_LAYER_get_read_sequence(&s->rlayer);
+    }
+
+    /*
+     * If we're sending an alert and ctx != NULL then we must be forcing
+     * plaintext alerts. If we're reading and ctx != NULL then we allow
+     * plaintext alerts at certain points in the handshake. If we've got this
+     * far then we have already validated that a plaintext alert is ok here.
+     */
+    if (ctx == NULL || rec->type == SSL3_RT_ALERT) {
+        memmove(rec->data, rec->input, rec->length);
+        rec->input = rec->data;
+        return 1;
+    }
+
+    ivlen = EVP_CIPHER_CTX_iv_length(ctx);
+
+    if (s->early_data_state == SSL_EARLY_DATA_WRITING
+            || s->early_data_state == SSL_EARLY_DATA_WRITE_RETRY) {
+        if (s->session != NULL && s->session->ext.max_early_data > 0) {
+            alg_enc = s->session->cipher->algorithm_enc;
+        } else {
+            if (!ossl_assert(s->psksession != NULL
+                             && s->psksession->ext.max_early_data > 0)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS13_ENC,
+                         ERR_R_INTERNAL_ERROR);
+                return -1;
+            }
+            alg_enc = s->psksession->cipher->algorithm_enc;
+        }
+    } else {
+        /*
+         * To get here we must have selected a ciphersuite - otherwise ctx would
+         * be NULL
+         */
+        if (!ossl_assert(s->s3->tmp.new_cipher != NULL)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS13_ENC,
+                     ERR_R_INTERNAL_ERROR);
+            return -1;
+        }
+        alg_enc = s->s3->tmp.new_cipher->algorithm_enc;
+    }
+
+    if (alg_enc & SSL_AESCCM) {
+        if (alg_enc & (SSL_AES128CCM8 | SSL_AES256CCM8))
+            taglen = EVP_CCM8_TLS_TAG_LEN;
+         else
+            taglen = EVP_CCM_TLS_TAG_LEN;
+         if (sending && EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_SET_TAG, taglen,
+                                         NULL) <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS13_ENC,
+                     ERR_R_INTERNAL_ERROR);
+            return -1;
+        }
+    } else if (alg_enc & SSL_AESGCM) {
+        taglen = EVP_GCM_TLS_TAG_LEN;
+    } else if (alg_enc & SSL_CHACHA20) {
+        taglen = EVP_CHACHAPOLY_TLS_TAG_LEN;
+    } else {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS13_ENC,
+                 ERR_R_INTERNAL_ERROR);
+        return -1;
+    }
+
+    if (!sending) {
+        /*
+         * Take off tag. There must be at least one byte of content type as
+         * well as the tag
+         */
+        if (rec->length < taglen + 1)
+            return 0;
+        rec->length -= taglen;
+    }
+
+    /* Set up IV */
+    if (ivlen < SEQ_NUM_SIZE) {
+        /* Should not happen */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS13_ENC,
+                 ERR_R_INTERNAL_ERROR);
+        return -1;
+    }
+    offset = ivlen - SEQ_NUM_SIZE;
+    memcpy(iv, staticiv, offset);
+    for (loop = 0; loop < SEQ_NUM_SIZE; loop++)
+        iv[offset + loop] = staticiv[offset + loop] ^ seq[loop];
+
+    /* Increment the sequence counter */
+    for (loop = SEQ_NUM_SIZE; loop > 0; loop--) {
+        ++seq[loop - 1];
+        if (seq[loop - 1] != 0)
+            break;
+    }
+    if (loop == 0) {
+        /* Sequence has wrapped */
+        return -1;
+    }
+
+    /* TODO(size_t): lenu/lenf should be a size_t but EVP doesn't support it */
+    if (EVP_CipherInit_ex(ctx, NULL, NULL, NULL, iv, sending) <= 0
+            || (!sending && EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_SET_TAG,
+                                             taglen,
+                                             rec->data + rec->length) <= 0)) {
+        return -1;
+    }
+
+    /* Set up the AAD */
+    if (!WPACKET_init_static_len(&wpkt, recheader, sizeof(recheader), 0)
+            || !WPACKET_put_bytes_u8(&wpkt, rec->type)
+            || !WPACKET_put_bytes_u16(&wpkt, rec->rec_version)
+            || !WPACKET_put_bytes_u16(&wpkt, rec->length + taglen)
+            || !WPACKET_get_total_written(&wpkt, &hdrlen)
+            || hdrlen != SSL3_RT_HEADER_LENGTH
+            || !WPACKET_finish(&wpkt)) {
+        WPACKET_cleanup(&wpkt);
+        return -1;
+    }
+
+    /*
+     * For CCM we must explicitly set the total plaintext length before we add
+     * any AAD.
+     */
+    if (((alg_enc & SSL_AESCCM) != 0
+                 && EVP_CipherUpdate(ctx, NULL, &lenu, NULL,
+                                     (unsigned int)rec->length) <= 0)
+            || EVP_CipherUpdate(ctx, NULL, &lenu, recheader,
+                                sizeof(recheader)) <= 0
+            || EVP_CipherUpdate(ctx, rec->data, &lenu, rec->input,
+                                (unsigned int)rec->length) <= 0
+            || EVP_CipherFinal_ex(ctx, rec->data + lenu, &lenf) <= 0
+            || (size_t)(lenu + lenf) != rec->length) {
+        return -1;
+    }
+    if (sending) {
+        /* Add the tag */
+        if (EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_GET_TAG, taglen,
+                                rec->data + rec->length) <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS13_ENC,
+                     ERR_R_INTERNAL_ERROR);
+            return -1;
+        }
+        rec->length += taglen;
+    }
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/s3_cbc.c b/trunk/3rdparty/openssl-1.1-fit/ssl/s3_cbc.c
new file mode 100644
index 000000000..8377d7fe1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/s3_cbc.c
@@ -0,0 +1,487 @@
+/*
+ * Copyright 2012-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/constant_time_locl.h"
+#include "ssl_locl.h"
+#include "internal/cryptlib.h"
+
+#include <openssl/md5.h>
+#include <openssl/sha.h>
+
+/*
+ * MAX_HASH_BIT_COUNT_BYTES is the maximum number of bytes in the hash's
+ * length field. (SHA-384/512 have 128-bit length.)
+ */
+#define MAX_HASH_BIT_COUNT_BYTES 16
+
+/*
+ * MAX_HASH_BLOCK_SIZE is the maximum hash block size that we'll support.
+ * Currently SHA-384/512 has a 128-byte block size and that's the largest
+ * supported by TLS.)
+ */
+#define MAX_HASH_BLOCK_SIZE 128
+
+/*
+ * u32toLE serialises an unsigned, 32-bit number (n) as four bytes at (p) in
+ * little-endian order. The value of p is advanced by four.
+ */
+#define u32toLE(n, p) \
+        (*((p)++)=(unsigned char)(n), \
+         *((p)++)=(unsigned char)(n>>8), \
+         *((p)++)=(unsigned char)(n>>16), \
+         *((p)++)=(unsigned char)(n>>24))
+
+/*
+ * These functions serialize the state of a hash and thus perform the
+ * standard "final" operation without adding the padding and length that such
+ * a function typically does.
+ */
+static void tls1_md5_final_raw(void *ctx, unsigned char *md_out)
+{
+    MD5_CTX *md5 = ctx;
+    u32toLE(md5->A, md_out);
+    u32toLE(md5->B, md_out);
+    u32toLE(md5->C, md_out);
+    u32toLE(md5->D, md_out);
+}
+
+static void tls1_sha1_final_raw(void *ctx, unsigned char *md_out)
+{
+    SHA_CTX *sha1 = ctx;
+    l2n(sha1->h0, md_out);
+    l2n(sha1->h1, md_out);
+    l2n(sha1->h2, md_out);
+    l2n(sha1->h3, md_out);
+    l2n(sha1->h4, md_out);
+}
+
+static void tls1_sha256_final_raw(void *ctx, unsigned char *md_out)
+{
+    SHA256_CTX *sha256 = ctx;
+    unsigned i;
+
+    for (i = 0; i < 8; i++) {
+        l2n(sha256->h[i], md_out);
+    }
+}
+
+static void tls1_sha512_final_raw(void *ctx, unsigned char *md_out)
+{
+    SHA512_CTX *sha512 = ctx;
+    unsigned i;
+
+    for (i = 0; i < 8; i++) {
+        l2n8(sha512->h[i], md_out);
+    }
+}
+
+#undef  LARGEST_DIGEST_CTX
+#define LARGEST_DIGEST_CTX SHA512_CTX
+
+/*
+ * ssl3_cbc_record_digest_supported returns 1 iff |ctx| uses a hash function
+ * which ssl3_cbc_digest_record supports.
+ */
+char ssl3_cbc_record_digest_supported(const EVP_MD_CTX *ctx)
+{
+    switch (EVP_MD_CTX_type(ctx)) {
+    case NID_md5:
+    case NID_sha1:
+    case NID_sha224:
+    case NID_sha256:
+    case NID_sha384:
+    case NID_sha512:
+        return 1;
+    default:
+        return 0;
+    }
+}
+
+/*-
+ * ssl3_cbc_digest_record computes the MAC of a decrypted, padded SSLv3/TLS
+ * record.
+ *
+ *   ctx: the EVP_MD_CTX from which we take the hash function.
+ *     ssl3_cbc_record_digest_supported must return true for this EVP_MD_CTX.
+ *   md_out: the digest output. At most EVP_MAX_MD_SIZE bytes will be written.
+ *   md_out_size: if non-NULL, the number of output bytes is written here.
+ *   header: the 13-byte, TLS record header.
+ *   data: the record data itself, less any preceding explicit IV.
+ *   data_plus_mac_size: the secret, reported length of the data and MAC
+ *     once the padding has been removed.
+ *   data_plus_mac_plus_padding_size: the public length of the whole
+ *     record, including padding.
+ *   is_sslv3: non-zero if we are to use SSLv3. Otherwise, TLS.
+ *
+ * On entry: by virtue of having been through one of the remove_padding
+ * functions, above, we know that data_plus_mac_size is large enough to contain
+ * a padding byte and MAC. (If the padding was invalid, it might contain the
+ * padding too. )
+ * Returns 1 on success or 0 on error
+ */
+int ssl3_cbc_digest_record(const EVP_MD_CTX *ctx,
+                           unsigned char *md_out,
+                           size_t *md_out_size,
+                           const unsigned char header[13],
+                           const unsigned char *data,
+                           size_t data_plus_mac_size,
+                           size_t data_plus_mac_plus_padding_size,
+                           const unsigned char *mac_secret,
+                           size_t mac_secret_length, char is_sslv3)
+{
+    union {
+        double align;
+        unsigned char c[sizeof(LARGEST_DIGEST_CTX)];
+    } md_state;
+    void (*md_final_raw) (void *ctx, unsigned char *md_out);
+    void (*md_transform) (void *ctx, const unsigned char *block);
+    size_t md_size, md_block_size = 64;
+    size_t sslv3_pad_length = 40, header_length, variance_blocks,
+        len, max_mac_bytes, num_blocks,
+        num_starting_blocks, k, mac_end_offset, c, index_a, index_b;
+    size_t bits;          /* at most 18 bits */
+    unsigned char length_bytes[MAX_HASH_BIT_COUNT_BYTES];
+    /* hmac_pad is the masked HMAC key. */
+    unsigned char hmac_pad[MAX_HASH_BLOCK_SIZE];
+    unsigned char first_block[MAX_HASH_BLOCK_SIZE];
+    unsigned char mac_out[EVP_MAX_MD_SIZE];
+    size_t i, j;
+    unsigned md_out_size_u;
+    EVP_MD_CTX *md_ctx = NULL;
+    /*
+     * mdLengthSize is the number of bytes in the length field that
+     * terminates * the hash.
+     */
+    size_t md_length_size = 8;
+    char length_is_big_endian = 1;
+    int ret;
+
+    /*
+     * This is a, hopefully redundant, check that allows us to forget about
+     * many possible overflows later in this function.
+     */
+    if (!ossl_assert(data_plus_mac_plus_padding_size < 1024 * 1024))
+        return 0;
+
+    switch (EVP_MD_CTX_type(ctx)) {
+    case NID_md5:
+        if (MD5_Init((MD5_CTX *)md_state.c) <= 0)
+            return 0;
+        md_final_raw = tls1_md5_final_raw;
+        md_transform =
+            (void (*)(void *ctx, const unsigned char *block))MD5_Transform;
+        md_size = 16;
+        sslv3_pad_length = 48;
+        length_is_big_endian = 0;
+        break;
+    case NID_sha1:
+        if (SHA1_Init((SHA_CTX *)md_state.c) <= 0)
+            return 0;
+        md_final_raw = tls1_sha1_final_raw;
+        md_transform =
+            (void (*)(void *ctx, const unsigned char *block))SHA1_Transform;
+        md_size = 20;
+        break;
+    case NID_sha224:
+        if (SHA224_Init((SHA256_CTX *)md_state.c) <= 0)
+            return 0;
+        md_final_raw = tls1_sha256_final_raw;
+        md_transform =
+            (void (*)(void *ctx, const unsigned char *block))SHA256_Transform;
+        md_size = 224 / 8;
+        break;
+    case NID_sha256:
+        if (SHA256_Init((SHA256_CTX *)md_state.c) <= 0)
+            return 0;
+        md_final_raw = tls1_sha256_final_raw;
+        md_transform =
+            (void (*)(void *ctx, const unsigned char *block))SHA256_Transform;
+        md_size = 32;
+        break;
+    case NID_sha384:
+        if (SHA384_Init((SHA512_CTX *)md_state.c) <= 0)
+            return 0;
+        md_final_raw = tls1_sha512_final_raw;
+        md_transform =
+            (void (*)(void *ctx, const unsigned char *block))SHA512_Transform;
+        md_size = 384 / 8;
+        md_block_size = 128;
+        md_length_size = 16;
+        break;
+    case NID_sha512:
+        if (SHA512_Init((SHA512_CTX *)md_state.c) <= 0)
+            return 0;
+        md_final_raw = tls1_sha512_final_raw;
+        md_transform =
+            (void (*)(void *ctx, const unsigned char *block))SHA512_Transform;
+        md_size = 64;
+        md_block_size = 128;
+        md_length_size = 16;
+        break;
+    default:
+        /*
+         * ssl3_cbc_record_digest_supported should have been called first to
+         * check that the hash function is supported.
+         */
+        if (md_out_size != NULL)
+            *md_out_size = 0;
+        return ossl_assert(0);
+    }
+
+    if (!ossl_assert(md_length_size <= MAX_HASH_BIT_COUNT_BYTES)
+            || !ossl_assert(md_block_size <= MAX_HASH_BLOCK_SIZE)
+            || !ossl_assert(md_size <= EVP_MAX_MD_SIZE))
+        return 0;
+
+    header_length = 13;
+    if (is_sslv3) {
+        header_length = mac_secret_length + sslv3_pad_length + 8 /* sequence
+                                                                  * number */  +
+            1 /* record type */  +
+            2 /* record length */ ;
+    }
+
+    /*
+     * variance_blocks is the number of blocks of the hash that we have to
+     * calculate in constant time because they could be altered by the
+     * padding value. In SSLv3, the padding must be minimal so the end of
+     * the plaintext varies by, at most, 15+20 = 35 bytes. (We conservatively
+     * assume that the MAC size varies from 0..20 bytes.) In case the 9 bytes
+     * of hash termination (0x80 + 64-bit length) don't fit in the final
+     * block, we say that the final two blocks can vary based on the padding.
+     * TLSv1 has MACs up to 48 bytes long (SHA-384) and the padding is not
+     * required to be minimal. Therefore we say that the final |variance_blocks|
+     * blocks can
+     * vary based on the padding. Later in the function, if the message is
+     * short and there obviously cannot be this many blocks then
+     * variance_blocks can be reduced.
+     */
+    variance_blocks = is_sslv3 ? 2 : ( ((255 + 1 + md_size + md_block_size - 1) / md_block_size) + 1);
+    /*
+     * From now on we're dealing with the MAC, which conceptually has 13
+     * bytes of `header' before the start of the data (TLS) or 71/75 bytes
+     * (SSLv3)
+     */
+    len = data_plus_mac_plus_padding_size + header_length;
+    /*
+     * max_mac_bytes contains the maximum bytes of bytes in the MAC,
+     * including * |header|, assuming that there's no padding.
+     */
+    max_mac_bytes = len - md_size - 1;
+    /* num_blocks is the maximum number of hash blocks. */
+    num_blocks =
+        (max_mac_bytes + 1 + md_length_size + md_block_size -
+         1) / md_block_size;
+    /*
+     * In order to calculate the MAC in constant time we have to handle the
+     * final blocks specially because the padding value could cause the end
+     * to appear somewhere in the final |variance_blocks| blocks and we can't
+     * leak where. However, |num_starting_blocks| worth of data can be hashed
+     * right away because no padding value can affect whether they are
+     * plaintext.
+     */
+    num_starting_blocks = 0;
+    /*
+     * k is the starting byte offset into the conceptual header||data where
+     * we start processing.
+     */
+    k = 0;
+    /*
+     * mac_end_offset is the index just past the end of the data to be MACed.
+     */
+    mac_end_offset = data_plus_mac_size + header_length - md_size;
+    /*
+     * c is the index of the 0x80 byte in the final hash block that contains
+     * application data.
+     */
+    c = mac_end_offset % md_block_size;
+    /*
+     * index_a is the hash block number that contains the 0x80 terminating
+     * value.
+     */
+    index_a = mac_end_offset / md_block_size;
+    /*
+     * index_b is the hash block number that contains the 64-bit hash length,
+     * in bits.
+     */
+    index_b = (mac_end_offset + md_length_size) / md_block_size;
+    /*
+     * bits is the hash-length in bits. It includes the additional hash block
+     * for the masked HMAC key, or whole of |header| in the case of SSLv3.
+     */
+
+    /*
+     * For SSLv3, if we're going to have any starting blocks then we need at
+     * least two because the header is larger than a single block.
+     */
+    if (num_blocks > variance_blocks + (is_sslv3 ? 1 : 0)) {
+        num_starting_blocks = num_blocks - variance_blocks;
+        k = md_block_size * num_starting_blocks;
+    }
+
+    bits = 8 * mac_end_offset;
+    if (!is_sslv3) {
+        /*
+         * Compute the initial HMAC block. For SSLv3, the padding and secret
+         * bytes are included in |header| because they take more than a
+         * single block.
+         */
+        bits += 8 * md_block_size;
+        memset(hmac_pad, 0, md_block_size);
+        if (!ossl_assert(mac_secret_length <= sizeof(hmac_pad)))
+            return 0;
+        memcpy(hmac_pad, mac_secret, mac_secret_length);
+        for (i = 0; i < md_block_size; i++)
+            hmac_pad[i] ^= 0x36;
+
+        md_transform(md_state.c, hmac_pad);
+    }
+
+    if (length_is_big_endian) {
+        memset(length_bytes, 0, md_length_size - 4);
+        length_bytes[md_length_size - 4] = (unsigned char)(bits >> 24);
+        length_bytes[md_length_size - 3] = (unsigned char)(bits >> 16);
+        length_bytes[md_length_size - 2] = (unsigned char)(bits >> 8);
+        length_bytes[md_length_size - 1] = (unsigned char)bits;
+    } else {
+        memset(length_bytes, 0, md_length_size);
+        length_bytes[md_length_size - 5] = (unsigned char)(bits >> 24);
+        length_bytes[md_length_size - 6] = (unsigned char)(bits >> 16);
+        length_bytes[md_length_size - 7] = (unsigned char)(bits >> 8);
+        length_bytes[md_length_size - 8] = (unsigned char)bits;
+    }
+
+    if (k > 0) {
+        if (is_sslv3) {
+            size_t overhang;
+
+            /*
+             * The SSLv3 header is larger than a single block. overhang is
+             * the number of bytes beyond a single block that the header
+             * consumes: either 7 bytes (SHA1) or 11 bytes (MD5). There are no
+             * ciphersuites in SSLv3 that are not SHA1 or MD5 based and
+             * therefore we can be confident that the header_length will be
+             * greater than |md_block_size|. However we add a sanity check just
+             * in case
+             */
+            if (header_length <= md_block_size) {
+                /* Should never happen */
+                return 0;
+            }
+            overhang = header_length - md_block_size;
+            md_transform(md_state.c, header);
+            memcpy(first_block, header + md_block_size, overhang);
+            memcpy(first_block + overhang, data, md_block_size - overhang);
+            md_transform(md_state.c, first_block);
+            for (i = 1; i < k / md_block_size - 1; i++)
+                md_transform(md_state.c, data + md_block_size * i - overhang);
+        } else {
+            /* k is a multiple of md_block_size. */
+            memcpy(first_block, header, 13);
+            memcpy(first_block + 13, data, md_block_size - 13);
+            md_transform(md_state.c, first_block);
+            for (i = 1; i < k / md_block_size; i++)
+                md_transform(md_state.c, data + md_block_size * i - 13);
+        }
+    }
+
+    memset(mac_out, 0, sizeof(mac_out));
+
+    /*
+     * We now process the final hash blocks. For each block, we construct it
+     * in constant time. If the |i==index_a| then we'll include the 0x80
+     * bytes and zero pad etc. For each block we selectively copy it, in
+     * constant time, to |mac_out|.
+     */
+    for (i = num_starting_blocks; i <= num_starting_blocks + variance_blocks;
+         i++) {
+        unsigned char block[MAX_HASH_BLOCK_SIZE];
+        unsigned char is_block_a = constant_time_eq_8_s(i, index_a);
+        unsigned char is_block_b = constant_time_eq_8_s(i, index_b);
+        for (j = 0; j < md_block_size; j++) {
+            unsigned char b = 0, is_past_c, is_past_cp1;
+            if (k < header_length)
+                b = header[k];
+            else if (k < data_plus_mac_plus_padding_size + header_length)
+                b = data[k - header_length];
+            k++;
+
+            is_past_c = is_block_a & constant_time_ge_8_s(j, c);
+            is_past_cp1 = is_block_a & constant_time_ge_8_s(j, c + 1);
+            /*
+             * If this is the block containing the end of the application
+             * data, and we are at the offset for the 0x80 value, then
+             * overwrite b with 0x80.
+             */
+            b = constant_time_select_8(is_past_c, 0x80, b);
+            /*
+             * If this block contains the end of the application data
+             * and we're past the 0x80 value then just write zero.
+             */
+            b = b & ~is_past_cp1;
+            /*
+             * If this is index_b (the final block), but not index_a (the end
+             * of the data), then the 64-bit length didn't fit into index_a
+             * and we're having to add an extra block of zeros.
+             */
+            b &= ~is_block_b | is_block_a;
+
+            /*
+             * The final bytes of one of the blocks contains the length.
+             */
+            if (j >= md_block_size - md_length_size) {
+                /* If this is index_b, write a length byte. */
+                b = constant_time_select_8(is_block_b,
+                                           length_bytes[j -
+                                                        (md_block_size -
+                                                         md_length_size)], b);
+            }
+            block[j] = b;
+        }
+
+        md_transform(md_state.c, block);
+        md_final_raw(md_state.c, block);
+        /* If this is index_b, copy the hash value to |mac_out|. */
+        for (j = 0; j < md_size; j++)
+            mac_out[j] |= block[j] & is_block_b;
+    }
+
+    md_ctx = EVP_MD_CTX_new();
+    if (md_ctx == NULL)
+        goto err;
+    if (EVP_DigestInit_ex(md_ctx, EVP_MD_CTX_md(ctx), NULL /* engine */ ) <= 0)
+        goto err;
+    if (is_sslv3) {
+        /* We repurpose |hmac_pad| to contain the SSLv3 pad2 block. */
+        memset(hmac_pad, 0x5c, sslv3_pad_length);
+
+        if (EVP_DigestUpdate(md_ctx, mac_secret, mac_secret_length) <= 0
+            || EVP_DigestUpdate(md_ctx, hmac_pad, sslv3_pad_length) <= 0
+            || EVP_DigestUpdate(md_ctx, mac_out, md_size) <= 0)
+            goto err;
+    } else {
+        /* Complete the HMAC in the standard manner. */
+        for (i = 0; i < md_block_size; i++)
+            hmac_pad[i] ^= 0x6a;
+
+        if (EVP_DigestUpdate(md_ctx, hmac_pad, md_block_size) <= 0
+            || EVP_DigestUpdate(md_ctx, mac_out, md_size) <= 0)
+            goto err;
+    }
+    /* TODO(size_t): Convert me */
+    ret = EVP_DigestFinal(md_ctx, md_out, &md_out_size_u);
+    if (ret && md_out_size)
+        *md_out_size = md_out_size_u;
+    EVP_MD_CTX_free(md_ctx);
+
+    return 1;
+ err:
+    EVP_MD_CTX_free(md_ctx);
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/s3_enc.c b/trunk/3rdparty/openssl-1.1-fit/ssl/s3_enc.c
new file mode 100644
index 000000000..2e185e9fb
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/s3_enc.c
@@ -0,0 +1,595 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2005 Nokia. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "ssl_locl.h"
+#include <openssl/evp.h>
+#include <openssl/md5.h>
+#include "internal/cryptlib.h"
+
+static int ssl3_generate_key_block(SSL *s, unsigned char *km, int num)
+{
+    EVP_MD_CTX *m5;
+    EVP_MD_CTX *s1;
+    unsigned char buf[16], smd[SHA_DIGEST_LENGTH];
+    unsigned char c = 'A';
+    unsigned int i, j, k;
+    int ret = 0;
+
+#ifdef CHARSET_EBCDIC
+    c = os_toascii[c];          /* 'A' in ASCII */
+#endif
+    k = 0;
+    m5 = EVP_MD_CTX_new();
+    s1 = EVP_MD_CTX_new();
+    if (m5 == NULL || s1 == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_GENERATE_KEY_BLOCK,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    EVP_MD_CTX_set_flags(m5, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
+    for (i = 0; (int)i < num; i += MD5_DIGEST_LENGTH) {
+        k++;
+        if (k > sizeof(buf)) {
+            /* bug: 'buf' is too small for this ciphersuite */
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_GENERATE_KEY_BLOCK,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        for (j = 0; j < k; j++)
+            buf[j] = c;
+        c++;
+        if (!EVP_DigestInit_ex(s1, EVP_sha1(), NULL)
+            || !EVP_DigestUpdate(s1, buf, k)
+            || !EVP_DigestUpdate(s1, s->session->master_key,
+                                 s->session->master_key_length)
+            || !EVP_DigestUpdate(s1, s->s3->server_random, SSL3_RANDOM_SIZE)
+            || !EVP_DigestUpdate(s1, s->s3->client_random, SSL3_RANDOM_SIZE)
+            || !EVP_DigestFinal_ex(s1, smd, NULL)
+            || !EVP_DigestInit_ex(m5, EVP_md5(), NULL)
+            || !EVP_DigestUpdate(m5, s->session->master_key,
+                                 s->session->master_key_length)
+            || !EVP_DigestUpdate(m5, smd, SHA_DIGEST_LENGTH)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_GENERATE_KEY_BLOCK,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        if ((int)(i + MD5_DIGEST_LENGTH) > num) {
+            if (!EVP_DigestFinal_ex(m5, smd, NULL)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_SSL3_GENERATE_KEY_BLOCK, ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+            memcpy(km, smd, (num - i));
+        } else {
+            if (!EVP_DigestFinal_ex(m5, km, NULL)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_SSL3_GENERATE_KEY_BLOCK, ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+        }
+
+        km += MD5_DIGEST_LENGTH;
+    }
+    OPENSSL_cleanse(smd, sizeof(smd));
+    ret = 1;
+ err:
+    EVP_MD_CTX_free(m5);
+    EVP_MD_CTX_free(s1);
+    return ret;
+}
+
+int ssl3_change_cipher_state(SSL *s, int which)
+{
+    unsigned char *p, *mac_secret;
+    unsigned char *ms, *key, *iv;
+    EVP_CIPHER_CTX *dd;
+    const EVP_CIPHER *c;
+#ifndef OPENSSL_NO_COMP
+    COMP_METHOD *comp;
+#endif
+    const EVP_MD *m;
+    int mdi;
+    size_t n, i, j, k, cl;
+    int reuse_dd = 0;
+
+    c = s->s3->tmp.new_sym_enc;
+    m = s->s3->tmp.new_hash;
+    /* m == NULL will lead to a crash later */
+    if (!ossl_assert(m != NULL)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_CHANGE_CIPHER_STATE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+#ifndef OPENSSL_NO_COMP
+    if (s->s3->tmp.new_compression == NULL)
+        comp = NULL;
+    else
+        comp = s->s3->tmp.new_compression->method;
+#endif
+
+    if (which & SSL3_CC_READ) {
+        if (s->enc_read_ctx != NULL) {
+            reuse_dd = 1;
+        } else if ((s->enc_read_ctx = EVP_CIPHER_CTX_new()) == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_CHANGE_CIPHER_STATE,
+                     ERR_R_MALLOC_FAILURE);
+            goto err;
+        } else {
+            /*
+             * make sure it's initialised in case we exit later with an error
+             */
+            EVP_CIPHER_CTX_reset(s->enc_read_ctx);
+        }
+        dd = s->enc_read_ctx;
+
+        if (ssl_replace_hash(&s->read_hash, m) == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_CHANGE_CIPHER_STATE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+#ifndef OPENSSL_NO_COMP
+        /* COMPRESS */
+        COMP_CTX_free(s->expand);
+        s->expand = NULL;
+        if (comp != NULL) {
+            s->expand = COMP_CTX_new(comp);
+            if (s->expand == NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_SSL3_CHANGE_CIPHER_STATE,
+                         SSL_R_COMPRESSION_LIBRARY_ERROR);
+                goto err;
+            }
+        }
+#endif
+        RECORD_LAYER_reset_read_sequence(&s->rlayer);
+        mac_secret = &(s->s3->read_mac_secret[0]);
+    } else {
+        s->statem.enc_write_state = ENC_WRITE_STATE_INVALID;
+        if (s->enc_write_ctx != NULL) {
+            reuse_dd = 1;
+        } else if ((s->enc_write_ctx = EVP_CIPHER_CTX_new()) == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_CHANGE_CIPHER_STATE,
+                     ERR_R_MALLOC_FAILURE);
+            goto err;
+        } else {
+            /*
+             * make sure it's initialised in case we exit later with an error
+             */
+            EVP_CIPHER_CTX_reset(s->enc_write_ctx);
+        }
+        dd = s->enc_write_ctx;
+        if (ssl_replace_hash(&s->write_hash, m) == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_CHANGE_CIPHER_STATE,
+                     ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+#ifndef OPENSSL_NO_COMP
+        /* COMPRESS */
+        COMP_CTX_free(s->compress);
+        s->compress = NULL;
+        if (comp != NULL) {
+            s->compress = COMP_CTX_new(comp);
+            if (s->compress == NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_SSL3_CHANGE_CIPHER_STATE,
+                         SSL_R_COMPRESSION_LIBRARY_ERROR);
+                goto err;
+            }
+        }
+#endif
+        RECORD_LAYER_reset_write_sequence(&s->rlayer);
+        mac_secret = &(s->s3->write_mac_secret[0]);
+    }
+
+    if (reuse_dd)
+        EVP_CIPHER_CTX_reset(dd);
+
+    p = s->s3->tmp.key_block;
+    mdi = EVP_MD_size(m);
+    if (mdi < 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_CHANGE_CIPHER_STATE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    i = mdi;
+    cl = EVP_CIPHER_key_length(c);
+    j = cl;
+    k = EVP_CIPHER_iv_length(c);
+    if ((which == SSL3_CHANGE_CIPHER_CLIENT_WRITE) ||
+        (which == SSL3_CHANGE_CIPHER_SERVER_READ)) {
+        ms = &(p[0]);
+        n = i + i;
+        key = &(p[n]);
+        n += j + j;
+        iv = &(p[n]);
+        n += k + k;
+    } else {
+        n = i;
+        ms = &(p[n]);
+        n += i + j;
+        key = &(p[n]);
+        n += j + k;
+        iv = &(p[n]);
+        n += k;
+    }
+
+    if (n > s->s3->tmp.key_block_length) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_CHANGE_CIPHER_STATE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    memcpy(mac_secret, ms, i);
+
+    if (!EVP_CipherInit_ex(dd, c, NULL, key, iv, (which & SSL3_CC_WRITE))) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_CHANGE_CIPHER_STATE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    s->statem.enc_write_state = ENC_WRITE_STATE_VALID;
+    return 1;
+ err:
+    return 0;
+}
+
+int ssl3_setup_key_block(SSL *s)
+{
+    unsigned char *p;
+    const EVP_CIPHER *c;
+    const EVP_MD *hash;
+    int num;
+    int ret = 0;
+    SSL_COMP *comp;
+
+    if (s->s3->tmp.key_block_length != 0)
+        return 1;
+
+    if (!ssl_cipher_get_evp(s->session, &c, &hash, NULL, NULL, &comp, 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_SETUP_KEY_BLOCK,
+                 SSL_R_CIPHER_OR_HASH_UNAVAILABLE);
+        return 0;
+    }
+
+    s->s3->tmp.new_sym_enc = c;
+    s->s3->tmp.new_hash = hash;
+#ifdef OPENSSL_NO_COMP
+    s->s3->tmp.new_compression = NULL;
+#else
+    s->s3->tmp.new_compression = comp;
+#endif
+
+    num = EVP_MD_size(hash);
+    if (num < 0)
+        return 0;
+
+    num = EVP_CIPHER_key_length(c) + num + EVP_CIPHER_iv_length(c);
+    num *= 2;
+
+    ssl3_cleanup_key_block(s);
+
+    if ((p = OPENSSL_malloc(num)) == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_SETUP_KEY_BLOCK,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    s->s3->tmp.key_block_length = num;
+    s->s3->tmp.key_block = p;
+
+    /* Calls SSLfatal() as required */
+    ret = ssl3_generate_key_block(s, p, num);
+
+    if (!(s->options & SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS)) {
+        /*
+         * enable vulnerability countermeasure for CBC ciphers with known-IV
+         * problem (http://www.openssl.org/~bodo/tls-cbc.txt)
+         */
+        s->s3->need_empty_fragments = 1;
+
+        if (s->session->cipher != NULL) {
+            if (s->session->cipher->algorithm_enc == SSL_eNULL)
+                s->s3->need_empty_fragments = 0;
+
+#ifndef OPENSSL_NO_RC4
+            if (s->session->cipher->algorithm_enc == SSL_RC4)
+                s->s3->need_empty_fragments = 0;
+#endif
+        }
+    }
+
+    return ret;
+}
+
+void ssl3_cleanup_key_block(SSL *s)
+{
+    OPENSSL_clear_free(s->s3->tmp.key_block, s->s3->tmp.key_block_length);
+    s->s3->tmp.key_block = NULL;
+    s->s3->tmp.key_block_length = 0;
+}
+
+int ssl3_init_finished_mac(SSL *s)
+{
+    BIO *buf = BIO_new(BIO_s_mem());
+
+    if (buf == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_INIT_FINISHED_MAC,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ssl3_free_digest_list(s);
+    s->s3->handshake_buffer = buf;
+    (void)BIO_set_close(s->s3->handshake_buffer, BIO_CLOSE);
+    return 1;
+}
+
+/*
+ * Free digest list. Also frees handshake buffer since they are always freed
+ * together.
+ */
+
+void ssl3_free_digest_list(SSL *s)
+{
+    BIO_free(s->s3->handshake_buffer);
+    s->s3->handshake_buffer = NULL;
+    EVP_MD_CTX_free(s->s3->handshake_dgst);
+    s->s3->handshake_dgst = NULL;
+}
+
+int ssl3_finish_mac(SSL *s, const unsigned char *buf, size_t len)
+{
+    int ret;
+
+    if (s->s3->handshake_dgst == NULL) {
+        /* Note: this writes to a memory BIO so a failure is a fatal error */
+        if (len > INT_MAX) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_FINISH_MAC,
+                     SSL_R_OVERFLOW_ERROR);
+            return 0;
+        }
+        ret = BIO_write(s->s3->handshake_buffer, (void *)buf, (int)len);
+        if (ret <= 0 || ret != (int)len) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_FINISH_MAC,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+    } else {
+        ret = EVP_DigestUpdate(s->s3->handshake_dgst, buf, len);
+        if (!ret) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_FINISH_MAC,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+    }
+    return 1;
+}
+
+int ssl3_digest_cached_records(SSL *s, int keep)
+{
+    const EVP_MD *md;
+    long hdatalen;
+    void *hdata;
+
+    if (s->s3->handshake_dgst == NULL) {
+        hdatalen = BIO_get_mem_data(s->s3->handshake_buffer, &hdata);
+        if (hdatalen <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_DIGEST_CACHED_RECORDS,
+                     SSL_R_BAD_HANDSHAKE_LENGTH);
+            return 0;
+        }
+
+        s->s3->handshake_dgst = EVP_MD_CTX_new();
+        if (s->s3->handshake_dgst == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_DIGEST_CACHED_RECORDS,
+                     ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+
+        md = ssl_handshake_md(s);
+        if (md == NULL || !EVP_DigestInit_ex(s->s3->handshake_dgst, md, NULL)
+            || !EVP_DigestUpdate(s->s3->handshake_dgst, hdata, hdatalen)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_DIGEST_CACHED_RECORDS,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+    }
+    if (keep == 0) {
+        BIO_free(s->s3->handshake_buffer);
+        s->s3->handshake_buffer = NULL;
+    }
+
+    return 1;
+}
+
+size_t ssl3_final_finish_mac(SSL *s, const char *sender, size_t len,
+                             unsigned char *p)
+{
+    int ret;
+    EVP_MD_CTX *ctx = NULL;
+
+    if (!ssl3_digest_cached_records(s, 0)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    if (EVP_MD_CTX_type(s->s3->handshake_dgst) != NID_md5_sha1) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_FINAL_FINISH_MAC,
+                 SSL_R_NO_REQUIRED_DIGEST);
+        return 0;
+    }
+
+    ctx = EVP_MD_CTX_new();
+    if (ctx == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_FINAL_FINISH_MAC,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    if (!EVP_MD_CTX_copy_ex(ctx, s->s3->handshake_dgst)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_FINAL_FINISH_MAC,
+                 ERR_R_INTERNAL_ERROR);
+        ret = 0;
+        goto err;
+    }
+
+    ret = EVP_MD_CTX_size(ctx);
+    if (ret < 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_FINAL_FINISH_MAC,
+                 ERR_R_INTERNAL_ERROR);
+        ret = 0;
+        goto err;
+    }
+
+    if ((sender != NULL && EVP_DigestUpdate(ctx, sender, len) <= 0)
+        || EVP_MD_CTX_ctrl(ctx, EVP_CTRL_SSL3_MASTER_SECRET,
+                           (int)s->session->master_key_length,
+                           s->session->master_key) <= 0
+        || EVP_DigestFinal_ex(ctx, p, NULL) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_FINAL_FINISH_MAC,
+                 ERR_R_INTERNAL_ERROR);
+        ret = 0;
+    }
+
+ err:
+    EVP_MD_CTX_free(ctx);
+
+    return ret;
+}
+
+int ssl3_generate_master_secret(SSL *s, unsigned char *out, unsigned char *p,
+                                size_t len, size_t *secret_size)
+{
+    static const unsigned char *salt[3] = {
+#ifndef CHARSET_EBCDIC
+        (const unsigned char *)"A",
+        (const unsigned char *)"BB",
+        (const unsigned char *)"CCC",
+#else
+        (const unsigned char *)"\x41",
+        (const unsigned char *)"\x42\x42",
+        (const unsigned char *)"\x43\x43\x43",
+#endif
+    };
+    unsigned char buf[EVP_MAX_MD_SIZE];
+    EVP_MD_CTX *ctx = EVP_MD_CTX_new();
+    int i, ret = 1;
+    unsigned int n;
+    size_t ret_secret_size = 0;
+
+    if (ctx == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_GENERATE_MASTER_SECRET,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    for (i = 0; i < 3; i++) {
+        if (EVP_DigestInit_ex(ctx, s->ctx->sha1, NULL) <= 0
+            || EVP_DigestUpdate(ctx, salt[i],
+                                strlen((const char *)salt[i])) <= 0
+            || EVP_DigestUpdate(ctx, p, len) <= 0
+            || EVP_DigestUpdate(ctx, &(s->s3->client_random[0]),
+                                SSL3_RANDOM_SIZE) <= 0
+            || EVP_DigestUpdate(ctx, &(s->s3->server_random[0]),
+                                SSL3_RANDOM_SIZE) <= 0
+               /* TODO(size_t) : convert me */
+            || EVP_DigestFinal_ex(ctx, buf, &n) <= 0
+            || EVP_DigestInit_ex(ctx, s->ctx->md5, NULL) <= 0
+            || EVP_DigestUpdate(ctx, p, len) <= 0
+            || EVP_DigestUpdate(ctx, buf, n) <= 0
+            || EVP_DigestFinal_ex(ctx, out, &n) <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_SSL3_GENERATE_MASTER_SECRET, ERR_R_INTERNAL_ERROR);
+            ret = 0;
+            break;
+        }
+        out += n;
+        ret_secret_size += n;
+    }
+    EVP_MD_CTX_free(ctx);
+
+    OPENSSL_cleanse(buf, sizeof(buf));
+    if (ret)
+        *secret_size = ret_secret_size;
+    return ret;
+}
+
+int ssl3_alert_code(int code)
+{
+    switch (code) {
+    case SSL_AD_CLOSE_NOTIFY:
+        return SSL3_AD_CLOSE_NOTIFY;
+    case SSL_AD_UNEXPECTED_MESSAGE:
+        return SSL3_AD_UNEXPECTED_MESSAGE;
+    case SSL_AD_BAD_RECORD_MAC:
+        return SSL3_AD_BAD_RECORD_MAC;
+    case SSL_AD_DECRYPTION_FAILED:
+        return SSL3_AD_BAD_RECORD_MAC;
+    case SSL_AD_RECORD_OVERFLOW:
+        return SSL3_AD_BAD_RECORD_MAC;
+    case SSL_AD_DECOMPRESSION_FAILURE:
+        return SSL3_AD_DECOMPRESSION_FAILURE;
+    case SSL_AD_HANDSHAKE_FAILURE:
+        return SSL3_AD_HANDSHAKE_FAILURE;
+    case SSL_AD_NO_CERTIFICATE:
+        return SSL3_AD_NO_CERTIFICATE;
+    case SSL_AD_BAD_CERTIFICATE:
+        return SSL3_AD_BAD_CERTIFICATE;
+    case SSL_AD_UNSUPPORTED_CERTIFICATE:
+        return SSL3_AD_UNSUPPORTED_CERTIFICATE;
+    case SSL_AD_CERTIFICATE_REVOKED:
+        return SSL3_AD_CERTIFICATE_REVOKED;
+    case SSL_AD_CERTIFICATE_EXPIRED:
+        return SSL3_AD_CERTIFICATE_EXPIRED;
+    case SSL_AD_CERTIFICATE_UNKNOWN:
+        return SSL3_AD_CERTIFICATE_UNKNOWN;
+    case SSL_AD_ILLEGAL_PARAMETER:
+        return SSL3_AD_ILLEGAL_PARAMETER;
+    case SSL_AD_UNKNOWN_CA:
+        return SSL3_AD_BAD_CERTIFICATE;
+    case SSL_AD_ACCESS_DENIED:
+        return SSL3_AD_HANDSHAKE_FAILURE;
+    case SSL_AD_DECODE_ERROR:
+        return SSL3_AD_HANDSHAKE_FAILURE;
+    case SSL_AD_DECRYPT_ERROR:
+        return SSL3_AD_HANDSHAKE_FAILURE;
+    case SSL_AD_EXPORT_RESTRICTION:
+        return SSL3_AD_HANDSHAKE_FAILURE;
+    case SSL_AD_PROTOCOL_VERSION:
+        return SSL3_AD_HANDSHAKE_FAILURE;
+    case SSL_AD_INSUFFICIENT_SECURITY:
+        return SSL3_AD_HANDSHAKE_FAILURE;
+    case SSL_AD_INTERNAL_ERROR:
+        return SSL3_AD_HANDSHAKE_FAILURE;
+    case SSL_AD_USER_CANCELLED:
+        return SSL3_AD_HANDSHAKE_FAILURE;
+    case SSL_AD_NO_RENEGOTIATION:
+        return -1;            /* Don't send it :-) */
+    case SSL_AD_UNSUPPORTED_EXTENSION:
+        return SSL3_AD_HANDSHAKE_FAILURE;
+    case SSL_AD_CERTIFICATE_UNOBTAINABLE:
+        return SSL3_AD_HANDSHAKE_FAILURE;
+    case SSL_AD_UNRECOGNIZED_NAME:
+        return SSL3_AD_HANDSHAKE_FAILURE;
+    case SSL_AD_BAD_CERTIFICATE_STATUS_RESPONSE:
+        return SSL3_AD_HANDSHAKE_FAILURE;
+    case SSL_AD_BAD_CERTIFICATE_HASH_VALUE:
+        return SSL3_AD_HANDSHAKE_FAILURE;
+    case SSL_AD_UNKNOWN_PSK_IDENTITY:
+        return TLS1_AD_UNKNOWN_PSK_IDENTITY;
+    case SSL_AD_INAPPROPRIATE_FALLBACK:
+        return TLS1_AD_INAPPROPRIATE_FALLBACK;
+    case SSL_AD_NO_APPLICATION_PROTOCOL:
+        return TLS1_AD_NO_APPLICATION_PROTOCOL;
+    case SSL_AD_CERTIFICATE_REQUIRED:
+        return SSL_AD_HANDSHAKE_FAILURE;
+    default:
+        return -1;
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/s3_lib.c b/trunk/3rdparty/openssl-1.1-fit/ssl/s3_lib.c
new file mode 100644
index 000000000..99ae48199
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/s3_lib.c
@@ -0,0 +1,4864 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ * Copyright 2005 Nokia. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <openssl/objects.h>
+#include "internal/nelem.h"
+#include "ssl_locl.h"
+#include <openssl/md5.h>
+#include <openssl/dh.h>
+#include <openssl/rand.h>
+#include "internal/cryptlib.h"
+
+#define TLS13_NUM_CIPHERS       OSSL_NELEM(tls13_ciphers)
+#define SSL3_NUM_CIPHERS        OSSL_NELEM(ssl3_ciphers)
+#define SSL3_NUM_SCSVS          OSSL_NELEM(ssl3_scsvs)
+
+/* TLSv1.3 downgrade protection sentinel values */
+const unsigned char tls11downgrade[] = {
+    0x44, 0x4f, 0x57, 0x4e, 0x47, 0x52, 0x44, 0x00
+};
+const unsigned char tls12downgrade[] = {
+    0x44, 0x4f, 0x57, 0x4e, 0x47, 0x52, 0x44, 0x01
+};
+
+/* The list of available TLSv1.3 ciphers */
+static SSL_CIPHER tls13_ciphers[] = {
+    {
+        1,
+        TLS1_3_RFC_AES_128_GCM_SHA256,
+        TLS1_3_RFC_AES_128_GCM_SHA256,
+        TLS1_3_CK_AES_128_GCM_SHA256,
+        SSL_kANY,
+        SSL_aANY,
+        SSL_AES128GCM,
+        SSL_AEAD,
+        TLS1_3_VERSION, TLS1_3_VERSION,
+        0, 0,
+        SSL_HIGH,
+        SSL_HANDSHAKE_MAC_SHA256,
+        128,
+        128,
+    }, {
+        1,
+        TLS1_3_RFC_AES_256_GCM_SHA384,
+        TLS1_3_RFC_AES_256_GCM_SHA384,
+        TLS1_3_CK_AES_256_GCM_SHA384,
+        SSL_kANY,
+        SSL_aANY,
+        SSL_AES256GCM,
+        SSL_AEAD,
+        TLS1_3_VERSION, TLS1_3_VERSION,
+        0, 0,
+        SSL_HIGH,
+        SSL_HANDSHAKE_MAC_SHA384,
+        256,
+        256,
+    },
+#if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305)
+    {
+        1,
+        TLS1_3_RFC_CHACHA20_POLY1305_SHA256,
+        TLS1_3_RFC_CHACHA20_POLY1305_SHA256,
+        TLS1_3_CK_CHACHA20_POLY1305_SHA256,
+        SSL_kANY,
+        SSL_aANY,
+        SSL_CHACHA20POLY1305,
+        SSL_AEAD,
+        TLS1_3_VERSION, TLS1_3_VERSION,
+        0, 0,
+        SSL_HIGH,
+        SSL_HANDSHAKE_MAC_SHA256,
+        256,
+        256,
+    },
+#endif
+    {
+        1,
+        TLS1_3_RFC_AES_128_CCM_SHA256,
+        TLS1_3_RFC_AES_128_CCM_SHA256,
+        TLS1_3_CK_AES_128_CCM_SHA256,
+        SSL_kANY,
+        SSL_aANY,
+        SSL_AES128CCM,
+        SSL_AEAD,
+        TLS1_3_VERSION, TLS1_3_VERSION,
+        0, 0,
+        SSL_NOT_DEFAULT | SSL_HIGH,
+        SSL_HANDSHAKE_MAC_SHA256,
+        128,
+        128,
+    }, {
+        1,
+        TLS1_3_RFC_AES_128_CCM_8_SHA256,
+        TLS1_3_RFC_AES_128_CCM_8_SHA256,
+        TLS1_3_CK_AES_128_CCM_8_SHA256,
+        SSL_kANY,
+        SSL_aANY,
+        SSL_AES128CCM8,
+        SSL_AEAD,
+        TLS1_3_VERSION, TLS1_3_VERSION,
+        0, 0,
+        SSL_NOT_DEFAULT | SSL_HIGH,
+        SSL_HANDSHAKE_MAC_SHA256,
+        128,
+        128,
+    }
+};
+
+/*
+ * The list of available ciphers, mostly organized into the following
+ * groups:
+ *      Always there
+ *      EC
+ *      PSK
+ *      SRP (within that: RSA EC PSK)
+ *      Cipher families: Chacha/poly, Camellia, Gost, IDEA, SEED
+ *      Weak ciphers
+ */
+static SSL_CIPHER ssl3_ciphers[] = {
+    {
+     1,
+     SSL3_TXT_RSA_NULL_MD5,
+     SSL3_RFC_RSA_NULL_MD5,
+     SSL3_CK_RSA_NULL_MD5,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_eNULL,
+     SSL_MD5,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     0,
+     0,
+     },
+    {
+     1,
+     SSL3_TXT_RSA_NULL_SHA,
+     SSL3_RFC_RSA_NULL_SHA,
+     SSL3_CK_RSA_NULL_SHA,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_eNULL,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     0,
+     0,
+     },
+#ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
+    {
+     1,
+     SSL3_TXT_RSA_DES_192_CBC3_SHA,
+     SSL3_RFC_RSA_DES_192_CBC3_SHA,
+     SSL3_CK_RSA_DES_192_CBC3_SHA,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_3DES,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     112,
+     168,
+     },
+    {
+     1,
+     SSL3_TXT_DHE_DSS_DES_192_CBC3_SHA,
+     SSL3_RFC_DHE_DSS_DES_192_CBC3_SHA,
+     SSL3_CK_DHE_DSS_DES_192_CBC3_SHA,
+     SSL_kDHE,
+     SSL_aDSS,
+     SSL_3DES,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     112,
+     168,
+     },
+    {
+     1,
+     SSL3_TXT_DHE_RSA_DES_192_CBC3_SHA,
+     SSL3_RFC_DHE_RSA_DES_192_CBC3_SHA,
+     SSL3_CK_DHE_RSA_DES_192_CBC3_SHA,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_3DES,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     112,
+     168,
+     },
+    {
+     1,
+     SSL3_TXT_ADH_DES_192_CBC_SHA,
+     SSL3_RFC_ADH_DES_192_CBC_SHA,
+     SSL3_CK_ADH_DES_192_CBC_SHA,
+     SSL_kDHE,
+     SSL_aNULL,
+     SSL_3DES,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     112,
+     168,
+     },
+#endif
+    {
+     1,
+     TLS1_TXT_RSA_WITH_AES_128_SHA,
+     TLS1_RFC_RSA_WITH_AES_128_SHA,
+     TLS1_CK_RSA_WITH_AES_128_SHA,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_AES128,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_DSS_WITH_AES_128_SHA,
+     TLS1_RFC_DHE_DSS_WITH_AES_128_SHA,
+     TLS1_CK_DHE_DSS_WITH_AES_128_SHA,
+     SSL_kDHE,
+     SSL_aDSS,
+     SSL_AES128,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_AES_128_SHA,
+     TLS1_RFC_DHE_RSA_WITH_AES_128_SHA,
+     TLS1_CK_DHE_RSA_WITH_AES_128_SHA,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_AES128,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ADH_WITH_AES_128_SHA,
+     TLS1_RFC_ADH_WITH_AES_128_SHA,
+     TLS1_CK_ADH_WITH_AES_128_SHA,
+     SSL_kDHE,
+     SSL_aNULL,
+     SSL_AES128,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_WITH_AES_256_SHA,
+     TLS1_RFC_RSA_WITH_AES_256_SHA,
+     TLS1_CK_RSA_WITH_AES_256_SHA,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_AES256,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_DSS_WITH_AES_256_SHA,
+     TLS1_RFC_DHE_DSS_WITH_AES_256_SHA,
+     TLS1_CK_DHE_DSS_WITH_AES_256_SHA,
+     SSL_kDHE,
+     SSL_aDSS,
+     SSL_AES256,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_AES_256_SHA,
+     TLS1_RFC_DHE_RSA_WITH_AES_256_SHA,
+     TLS1_CK_DHE_RSA_WITH_AES_256_SHA,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_AES256,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ADH_WITH_AES_256_SHA,
+     TLS1_RFC_ADH_WITH_AES_256_SHA,
+     TLS1_CK_ADH_WITH_AES_256_SHA,
+     SSL_kDHE,
+     SSL_aNULL,
+     SSL_AES256,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_WITH_NULL_SHA256,
+     TLS1_RFC_RSA_WITH_NULL_SHA256,
+     TLS1_CK_RSA_WITH_NULL_SHA256,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_eNULL,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     0,
+     0,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_WITH_AES_128_SHA256,
+     TLS1_RFC_RSA_WITH_AES_128_SHA256,
+     TLS1_CK_RSA_WITH_AES_128_SHA256,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_AES128,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_WITH_AES_256_SHA256,
+     TLS1_RFC_RSA_WITH_AES_256_SHA256,
+     TLS1_CK_RSA_WITH_AES_256_SHA256,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_AES256,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_DSS_WITH_AES_128_SHA256,
+     TLS1_RFC_DHE_DSS_WITH_AES_128_SHA256,
+     TLS1_CK_DHE_DSS_WITH_AES_128_SHA256,
+     SSL_kDHE,
+     SSL_aDSS,
+     SSL_AES128,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_AES_128_SHA256,
+     TLS1_RFC_DHE_RSA_WITH_AES_128_SHA256,
+     TLS1_CK_DHE_RSA_WITH_AES_128_SHA256,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_AES128,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_DSS_WITH_AES_256_SHA256,
+     TLS1_RFC_DHE_DSS_WITH_AES_256_SHA256,
+     TLS1_CK_DHE_DSS_WITH_AES_256_SHA256,
+     SSL_kDHE,
+     SSL_aDSS,
+     SSL_AES256,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_AES_256_SHA256,
+     TLS1_RFC_DHE_RSA_WITH_AES_256_SHA256,
+     TLS1_CK_DHE_RSA_WITH_AES_256_SHA256,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_AES256,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ADH_WITH_AES_128_SHA256,
+     TLS1_RFC_ADH_WITH_AES_128_SHA256,
+     TLS1_CK_ADH_WITH_AES_128_SHA256,
+     SSL_kDHE,
+     SSL_aNULL,
+     SSL_AES128,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ADH_WITH_AES_256_SHA256,
+     TLS1_RFC_ADH_WITH_AES_256_SHA256,
+     TLS1_CK_ADH_WITH_AES_256_SHA256,
+     SSL_kDHE,
+     SSL_aNULL,
+     SSL_AES256,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_WITH_AES_128_GCM_SHA256,
+     TLS1_RFC_RSA_WITH_AES_128_GCM_SHA256,
+     TLS1_CK_RSA_WITH_AES_128_GCM_SHA256,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_AES128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_WITH_AES_256_GCM_SHA384,
+     TLS1_RFC_RSA_WITH_AES_256_GCM_SHA384,
+     TLS1_CK_RSA_WITH_AES_256_GCM_SHA384,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_AES256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_AES_128_GCM_SHA256,
+     TLS1_RFC_DHE_RSA_WITH_AES_128_GCM_SHA256,
+     TLS1_CK_DHE_RSA_WITH_AES_128_GCM_SHA256,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_AES128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_AES_256_GCM_SHA384,
+     TLS1_RFC_DHE_RSA_WITH_AES_256_GCM_SHA384,
+     TLS1_CK_DHE_RSA_WITH_AES_256_GCM_SHA384,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_AES256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_DSS_WITH_AES_128_GCM_SHA256,
+     TLS1_RFC_DHE_DSS_WITH_AES_128_GCM_SHA256,
+     TLS1_CK_DHE_DSS_WITH_AES_128_GCM_SHA256,
+     SSL_kDHE,
+     SSL_aDSS,
+     SSL_AES128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_DSS_WITH_AES_256_GCM_SHA384,
+     TLS1_RFC_DHE_DSS_WITH_AES_256_GCM_SHA384,
+     TLS1_CK_DHE_DSS_WITH_AES_256_GCM_SHA384,
+     SSL_kDHE,
+     SSL_aDSS,
+     SSL_AES256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ADH_WITH_AES_128_GCM_SHA256,
+     TLS1_RFC_ADH_WITH_AES_128_GCM_SHA256,
+     TLS1_CK_ADH_WITH_AES_128_GCM_SHA256,
+     SSL_kDHE,
+     SSL_aNULL,
+     SSL_AES128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ADH_WITH_AES_256_GCM_SHA384,
+     TLS1_RFC_ADH_WITH_AES_256_GCM_SHA384,
+     TLS1_CK_ADH_WITH_AES_256_GCM_SHA384,
+     SSL_kDHE,
+     SSL_aNULL,
+     SSL_AES256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_WITH_AES_128_CCM,
+     TLS1_RFC_RSA_WITH_AES_128_CCM,
+     TLS1_CK_RSA_WITH_AES_128_CCM,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_AES128CCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_WITH_AES_256_CCM,
+     TLS1_RFC_RSA_WITH_AES_256_CCM,
+     TLS1_CK_RSA_WITH_AES_256_CCM,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_AES256CCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_AES_128_CCM,
+     TLS1_RFC_DHE_RSA_WITH_AES_128_CCM,
+     TLS1_CK_DHE_RSA_WITH_AES_128_CCM,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_AES128CCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_AES_256_CCM,
+     TLS1_RFC_DHE_RSA_WITH_AES_256_CCM,
+     TLS1_CK_DHE_RSA_WITH_AES_256_CCM,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_AES256CCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_WITH_AES_128_CCM_8,
+     TLS1_RFC_RSA_WITH_AES_128_CCM_8,
+     TLS1_CK_RSA_WITH_AES_128_CCM_8,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_AES128CCM8,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_WITH_AES_256_CCM_8,
+     TLS1_RFC_RSA_WITH_AES_256_CCM_8,
+     TLS1_CK_RSA_WITH_AES_256_CCM_8,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_AES256CCM8,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_AES_128_CCM_8,
+     TLS1_RFC_DHE_RSA_WITH_AES_128_CCM_8,
+     TLS1_CK_DHE_RSA_WITH_AES_128_CCM_8,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_AES128CCM8,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_AES_256_CCM_8,
+     TLS1_RFC_DHE_RSA_WITH_AES_256_CCM_8,
+     TLS1_CK_DHE_RSA_WITH_AES_256_CCM_8,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_AES256CCM8,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_AES_128_CCM,
+     TLS1_RFC_PSK_WITH_AES_128_CCM,
+     TLS1_CK_PSK_WITH_AES_128_CCM,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_AES128CCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_AES_256_CCM,
+     TLS1_RFC_PSK_WITH_AES_256_CCM,
+     TLS1_CK_PSK_WITH_AES_256_CCM,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_AES256CCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_AES_128_CCM,
+     TLS1_RFC_DHE_PSK_WITH_AES_128_CCM,
+     TLS1_CK_DHE_PSK_WITH_AES_128_CCM,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_AES128CCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_AES_256_CCM,
+     TLS1_RFC_DHE_PSK_WITH_AES_256_CCM,
+     TLS1_CK_DHE_PSK_WITH_AES_256_CCM,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_AES256CCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_AES_128_CCM_8,
+     TLS1_RFC_PSK_WITH_AES_128_CCM_8,
+     TLS1_CK_PSK_WITH_AES_128_CCM_8,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_AES128CCM8,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_AES_256_CCM_8,
+     TLS1_RFC_PSK_WITH_AES_256_CCM_8,
+     TLS1_CK_PSK_WITH_AES_256_CCM_8,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_AES256CCM8,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_AES_128_CCM_8,
+     TLS1_RFC_DHE_PSK_WITH_AES_128_CCM_8,
+     TLS1_CK_DHE_PSK_WITH_AES_128_CCM_8,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_AES128CCM8,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_AES_256_CCM_8,
+     TLS1_RFC_DHE_PSK_WITH_AES_256_CCM_8,
+     TLS1_CK_DHE_PSK_WITH_AES_256_CCM_8,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_AES256CCM8,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CCM,
+     TLS1_RFC_ECDHE_ECDSA_WITH_AES_128_CCM,
+     TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CCM,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_AES128CCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CCM,
+     TLS1_RFC_ECDHE_ECDSA_WITH_AES_256_CCM,
+     TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CCM,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_AES256CCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CCM_8,
+     TLS1_RFC_ECDHE_ECDSA_WITH_AES_128_CCM_8,
+     TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CCM_8,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_AES128CCM8,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CCM_8,
+     TLS1_RFC_ECDHE_ECDSA_WITH_AES_256_CCM_8,
+     TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CCM_8,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_AES256CCM8,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_NULL_SHA,
+     TLS1_RFC_ECDHE_ECDSA_WITH_NULL_SHA,
+     TLS1_CK_ECDHE_ECDSA_WITH_NULL_SHA,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_eNULL,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     0,
+     0,
+     },
+# ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA,
+     TLS1_RFC_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA,
+     TLS1_CK_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_3DES,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     112,
+     168,
+     },
+# endif
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
+     TLS1_RFC_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
+     TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_AES128,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
+     TLS1_RFC_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
+     TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_AES256,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_RSA_WITH_NULL_SHA,
+     TLS1_RFC_ECDHE_RSA_WITH_NULL_SHA,
+     TLS1_CK_ECDHE_RSA_WITH_NULL_SHA,
+     SSL_kECDHE,
+     SSL_aRSA,
+     SSL_eNULL,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     0,
+     0,
+     },
+# ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
+    {
+     1,
+     TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA,
+     TLS1_RFC_ECDHE_RSA_WITH_DES_192_CBC3_SHA,
+     TLS1_CK_ECDHE_RSA_WITH_DES_192_CBC3_SHA,
+     SSL_kECDHE,
+     SSL_aRSA,
+     SSL_3DES,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     112,
+     168,
+     },
+# endif
+    {
+     1,
+     TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA,
+     TLS1_RFC_ECDHE_RSA_WITH_AES_128_CBC_SHA,
+     TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA,
+     SSL_kECDHE,
+     SSL_aRSA,
+     SSL_AES128,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA,
+     TLS1_RFC_ECDHE_RSA_WITH_AES_256_CBC_SHA,
+     TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA,
+     SSL_kECDHE,
+     SSL_aRSA,
+     SSL_AES256,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDH_anon_WITH_NULL_SHA,
+     TLS1_RFC_ECDH_anon_WITH_NULL_SHA,
+     TLS1_CK_ECDH_anon_WITH_NULL_SHA,
+     SSL_kECDHE,
+     SSL_aNULL,
+     SSL_eNULL,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     0,
+     0,
+     },
+# ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
+    {
+     1,
+     TLS1_TXT_ECDH_anon_WITH_DES_192_CBC3_SHA,
+     TLS1_RFC_ECDH_anon_WITH_DES_192_CBC3_SHA,
+     TLS1_CK_ECDH_anon_WITH_DES_192_CBC3_SHA,
+     SSL_kECDHE,
+     SSL_aNULL,
+     SSL_3DES,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     112,
+     168,
+     },
+# endif
+    {
+     1,
+     TLS1_TXT_ECDH_anon_WITH_AES_128_CBC_SHA,
+     TLS1_RFC_ECDH_anon_WITH_AES_128_CBC_SHA,
+     TLS1_CK_ECDH_anon_WITH_AES_128_CBC_SHA,
+     SSL_kECDHE,
+     SSL_aNULL,
+     SSL_AES128,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDH_anon_WITH_AES_256_CBC_SHA,
+     TLS1_RFC_ECDH_anon_WITH_AES_256_CBC_SHA,
+     TLS1_CK_ECDH_anon_WITH_AES_256_CBC_SHA,
+     SSL_kECDHE,
+     SSL_aNULL,
+     SSL_AES256,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_SHA256,
+     TLS1_RFC_ECDHE_ECDSA_WITH_AES_128_SHA256,
+     TLS1_CK_ECDHE_ECDSA_WITH_AES_128_SHA256,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_AES128,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_SHA384,
+     TLS1_RFC_ECDHE_ECDSA_WITH_AES_256_SHA384,
+     TLS1_CK_ECDHE_ECDSA_WITH_AES_256_SHA384,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_AES256,
+     SSL_SHA384,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_RSA_WITH_AES_128_SHA256,
+     TLS1_RFC_ECDHE_RSA_WITH_AES_128_SHA256,
+     TLS1_CK_ECDHE_RSA_WITH_AES_128_SHA256,
+     SSL_kECDHE,
+     SSL_aRSA,
+     SSL_AES128,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_RSA_WITH_AES_256_SHA384,
+     TLS1_RFC_ECDHE_RSA_WITH_AES_256_SHA384,
+     TLS1_CK_ECDHE_RSA_WITH_AES_256_SHA384,
+     SSL_kECDHE,
+     SSL_aRSA,
+     SSL_AES256,
+     SSL_SHA384,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
+     TLS1_RFC_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
+     TLS1_CK_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_AES128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
+     TLS1_RFC_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
+     TLS1_CK_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_AES256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
+     TLS1_RFC_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
+     TLS1_CK_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
+     SSL_kECDHE,
+     SSL_aRSA,
+     SSL_AES128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
+     TLS1_RFC_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
+     TLS1_CK_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
+     SSL_kECDHE,
+     SSL_aRSA,
+     SSL_AES256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_NULL_SHA,
+     TLS1_RFC_PSK_WITH_NULL_SHA,
+     TLS1_CK_PSK_WITH_NULL_SHA,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_eNULL,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     0,
+     0,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_NULL_SHA,
+     TLS1_RFC_DHE_PSK_WITH_NULL_SHA,
+     TLS1_CK_DHE_PSK_WITH_NULL_SHA,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_eNULL,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     0,
+     0,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_PSK_WITH_NULL_SHA,
+     TLS1_RFC_RSA_PSK_WITH_NULL_SHA,
+     TLS1_CK_RSA_PSK_WITH_NULL_SHA,
+     SSL_kRSAPSK,
+     SSL_aRSA,
+     SSL_eNULL,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     0,
+     0,
+     },
+# ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
+    {
+     1,
+     TLS1_TXT_PSK_WITH_3DES_EDE_CBC_SHA,
+     TLS1_RFC_PSK_WITH_3DES_EDE_CBC_SHA,
+     TLS1_CK_PSK_WITH_3DES_EDE_CBC_SHA,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_3DES,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     112,
+     168,
+     },
+# endif
+    {
+     1,
+     TLS1_TXT_PSK_WITH_AES_128_CBC_SHA,
+     TLS1_RFC_PSK_WITH_AES_128_CBC_SHA,
+     TLS1_CK_PSK_WITH_AES_128_CBC_SHA,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_AES128,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_AES_256_CBC_SHA,
+     TLS1_RFC_PSK_WITH_AES_256_CBC_SHA,
+     TLS1_CK_PSK_WITH_AES_256_CBC_SHA,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_AES256,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+# ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_3DES_EDE_CBC_SHA,
+     TLS1_RFC_DHE_PSK_WITH_3DES_EDE_CBC_SHA,
+     TLS1_CK_DHE_PSK_WITH_3DES_EDE_CBC_SHA,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_3DES,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     112,
+     168,
+     },
+# endif
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_AES_128_CBC_SHA,
+     TLS1_RFC_DHE_PSK_WITH_AES_128_CBC_SHA,
+     TLS1_CK_DHE_PSK_WITH_AES_128_CBC_SHA,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_AES128,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_AES_256_CBC_SHA,
+     TLS1_RFC_DHE_PSK_WITH_AES_256_CBC_SHA,
+     TLS1_CK_DHE_PSK_WITH_AES_256_CBC_SHA,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_AES256,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+# ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
+    {
+     1,
+     TLS1_TXT_RSA_PSK_WITH_3DES_EDE_CBC_SHA,
+     TLS1_RFC_RSA_PSK_WITH_3DES_EDE_CBC_SHA,
+     TLS1_CK_RSA_PSK_WITH_3DES_EDE_CBC_SHA,
+     SSL_kRSAPSK,
+     SSL_aRSA,
+     SSL_3DES,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     112,
+     168,
+     },
+# endif
+    {
+     1,
+     TLS1_TXT_RSA_PSK_WITH_AES_128_CBC_SHA,
+     TLS1_RFC_RSA_PSK_WITH_AES_128_CBC_SHA,
+     TLS1_CK_RSA_PSK_WITH_AES_128_CBC_SHA,
+     SSL_kRSAPSK,
+     SSL_aRSA,
+     SSL_AES128,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_PSK_WITH_AES_256_CBC_SHA,
+     TLS1_RFC_RSA_PSK_WITH_AES_256_CBC_SHA,
+     TLS1_CK_RSA_PSK_WITH_AES_256_CBC_SHA,
+     SSL_kRSAPSK,
+     SSL_aRSA,
+     SSL_AES256,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_AES_128_GCM_SHA256,
+     TLS1_RFC_PSK_WITH_AES_128_GCM_SHA256,
+     TLS1_CK_PSK_WITH_AES_128_GCM_SHA256,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_AES128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_AES_256_GCM_SHA384,
+     TLS1_RFC_PSK_WITH_AES_256_GCM_SHA384,
+     TLS1_CK_PSK_WITH_AES_256_GCM_SHA384,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_AES256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_AES_128_GCM_SHA256,
+     TLS1_RFC_DHE_PSK_WITH_AES_128_GCM_SHA256,
+     TLS1_CK_DHE_PSK_WITH_AES_128_GCM_SHA256,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_AES128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_AES_256_GCM_SHA384,
+     TLS1_RFC_DHE_PSK_WITH_AES_256_GCM_SHA384,
+     TLS1_CK_DHE_PSK_WITH_AES_256_GCM_SHA384,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_AES256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_PSK_WITH_AES_128_GCM_SHA256,
+     TLS1_RFC_RSA_PSK_WITH_AES_128_GCM_SHA256,
+     TLS1_CK_RSA_PSK_WITH_AES_128_GCM_SHA256,
+     SSL_kRSAPSK,
+     SSL_aRSA,
+     SSL_AES128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_PSK_WITH_AES_256_GCM_SHA384,
+     TLS1_RFC_RSA_PSK_WITH_AES_256_GCM_SHA384,
+     TLS1_CK_RSA_PSK_WITH_AES_256_GCM_SHA384,
+     SSL_kRSAPSK,
+     SSL_aRSA,
+     SSL_AES256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_AES_128_CBC_SHA256,
+     TLS1_RFC_PSK_WITH_AES_128_CBC_SHA256,
+     TLS1_CK_PSK_WITH_AES_128_CBC_SHA256,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_AES128,
+     SSL_SHA256,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_AES_256_CBC_SHA384,
+     TLS1_RFC_PSK_WITH_AES_256_CBC_SHA384,
+     TLS1_CK_PSK_WITH_AES_256_CBC_SHA384,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_AES256,
+     SSL_SHA384,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_NULL_SHA256,
+     TLS1_RFC_PSK_WITH_NULL_SHA256,
+     TLS1_CK_PSK_WITH_NULL_SHA256,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_eNULL,
+     SSL_SHA256,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     0,
+     0,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_NULL_SHA384,
+     TLS1_RFC_PSK_WITH_NULL_SHA384,
+     TLS1_CK_PSK_WITH_NULL_SHA384,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_eNULL,
+     SSL_SHA384,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     0,
+     0,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_AES_128_CBC_SHA256,
+     TLS1_RFC_DHE_PSK_WITH_AES_128_CBC_SHA256,
+     TLS1_CK_DHE_PSK_WITH_AES_128_CBC_SHA256,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_AES128,
+     SSL_SHA256,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_AES_256_CBC_SHA384,
+     TLS1_RFC_DHE_PSK_WITH_AES_256_CBC_SHA384,
+     TLS1_CK_DHE_PSK_WITH_AES_256_CBC_SHA384,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_AES256,
+     SSL_SHA384,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_NULL_SHA256,
+     TLS1_RFC_DHE_PSK_WITH_NULL_SHA256,
+     TLS1_CK_DHE_PSK_WITH_NULL_SHA256,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_eNULL,
+     SSL_SHA256,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     0,
+     0,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_NULL_SHA384,
+     TLS1_RFC_DHE_PSK_WITH_NULL_SHA384,
+     TLS1_CK_DHE_PSK_WITH_NULL_SHA384,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_eNULL,
+     SSL_SHA384,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     0,
+     0,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_PSK_WITH_AES_128_CBC_SHA256,
+     TLS1_RFC_RSA_PSK_WITH_AES_128_CBC_SHA256,
+     TLS1_CK_RSA_PSK_WITH_AES_128_CBC_SHA256,
+     SSL_kRSAPSK,
+     SSL_aRSA,
+     SSL_AES128,
+     SSL_SHA256,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_PSK_WITH_AES_256_CBC_SHA384,
+     TLS1_RFC_RSA_PSK_WITH_AES_256_CBC_SHA384,
+     TLS1_CK_RSA_PSK_WITH_AES_256_CBC_SHA384,
+     SSL_kRSAPSK,
+     SSL_aRSA,
+     SSL_AES256,
+     SSL_SHA384,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_PSK_WITH_NULL_SHA256,
+     TLS1_RFC_RSA_PSK_WITH_NULL_SHA256,
+     TLS1_CK_RSA_PSK_WITH_NULL_SHA256,
+     SSL_kRSAPSK,
+     SSL_aRSA,
+     SSL_eNULL,
+     SSL_SHA256,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     0,
+     0,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_PSK_WITH_NULL_SHA384,
+     TLS1_RFC_RSA_PSK_WITH_NULL_SHA384,
+     TLS1_CK_RSA_PSK_WITH_NULL_SHA384,
+     SSL_kRSAPSK,
+     SSL_aRSA,
+     SSL_eNULL,
+     SSL_SHA384,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     0,
+     0,
+     },
+#  ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
+    {
+     1,
+     TLS1_TXT_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA,
+     TLS1_RFC_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA,
+     TLS1_CK_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA,
+     SSL_kECDHEPSK,
+     SSL_aPSK,
+     SSL_3DES,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     112,
+     168,
+     },
+#  endif
+    {
+     1,
+     TLS1_TXT_ECDHE_PSK_WITH_AES_128_CBC_SHA,
+     TLS1_RFC_ECDHE_PSK_WITH_AES_128_CBC_SHA,
+     TLS1_CK_ECDHE_PSK_WITH_AES_128_CBC_SHA,
+     SSL_kECDHEPSK,
+     SSL_aPSK,
+     SSL_AES128,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_PSK_WITH_AES_256_CBC_SHA,
+     TLS1_RFC_ECDHE_PSK_WITH_AES_256_CBC_SHA,
+     TLS1_CK_ECDHE_PSK_WITH_AES_256_CBC_SHA,
+     SSL_kECDHEPSK,
+     SSL_aPSK,
+     SSL_AES256,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_PSK_WITH_AES_128_CBC_SHA256,
+     TLS1_RFC_ECDHE_PSK_WITH_AES_128_CBC_SHA256,
+     TLS1_CK_ECDHE_PSK_WITH_AES_128_CBC_SHA256,
+     SSL_kECDHEPSK,
+     SSL_aPSK,
+     SSL_AES128,
+     SSL_SHA256,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_PSK_WITH_AES_256_CBC_SHA384,
+     TLS1_RFC_ECDHE_PSK_WITH_AES_256_CBC_SHA384,
+     TLS1_CK_ECDHE_PSK_WITH_AES_256_CBC_SHA384,
+     SSL_kECDHEPSK,
+     SSL_aPSK,
+     SSL_AES256,
+     SSL_SHA384,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_PSK_WITH_NULL_SHA,
+     TLS1_RFC_ECDHE_PSK_WITH_NULL_SHA,
+     TLS1_CK_ECDHE_PSK_WITH_NULL_SHA,
+     SSL_kECDHEPSK,
+     SSL_aPSK,
+     SSL_eNULL,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     0,
+     0,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_PSK_WITH_NULL_SHA256,
+     TLS1_RFC_ECDHE_PSK_WITH_NULL_SHA256,
+     TLS1_CK_ECDHE_PSK_WITH_NULL_SHA256,
+     SSL_kECDHEPSK,
+     SSL_aPSK,
+     SSL_eNULL,
+     SSL_SHA256,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     0,
+     0,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_PSK_WITH_NULL_SHA384,
+     TLS1_RFC_ECDHE_PSK_WITH_NULL_SHA384,
+     TLS1_CK_ECDHE_PSK_WITH_NULL_SHA384,
+     SSL_kECDHEPSK,
+     SSL_aPSK,
+     SSL_eNULL,
+     SSL_SHA384,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_STRONG_NONE | SSL_FIPS,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     0,
+     0,
+     },
+
+# ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
+    {
+     1,
+     TLS1_TXT_SRP_SHA_WITH_3DES_EDE_CBC_SHA,
+     TLS1_RFC_SRP_SHA_WITH_3DES_EDE_CBC_SHA,
+     TLS1_CK_SRP_SHA_WITH_3DES_EDE_CBC_SHA,
+     SSL_kSRP,
+     SSL_aSRP,
+     SSL_3DES,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     112,
+     168,
+     },
+    {
+     1,
+     TLS1_TXT_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA,
+     TLS1_RFC_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA,
+     TLS1_CK_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA,
+     SSL_kSRP,
+     SSL_aRSA,
+     SSL_3DES,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     112,
+     168,
+     },
+    {
+     1,
+     TLS1_TXT_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA,
+     TLS1_RFC_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA,
+     TLS1_CK_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA,
+     SSL_kSRP,
+     SSL_aDSS,
+     SSL_3DES,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     112,
+     168,
+     },
+# endif
+    {
+     1,
+     TLS1_TXT_SRP_SHA_WITH_AES_128_CBC_SHA,
+     TLS1_RFC_SRP_SHA_WITH_AES_128_CBC_SHA,
+     TLS1_CK_SRP_SHA_WITH_AES_128_CBC_SHA,
+     SSL_kSRP,
+     SSL_aSRP,
+     SSL_AES128,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_SRP_SHA_RSA_WITH_AES_128_CBC_SHA,
+     TLS1_RFC_SRP_SHA_RSA_WITH_AES_128_CBC_SHA,
+     TLS1_CK_SRP_SHA_RSA_WITH_AES_128_CBC_SHA,
+     SSL_kSRP,
+     SSL_aRSA,
+     SSL_AES128,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_SRP_SHA_DSS_WITH_AES_128_CBC_SHA,
+     TLS1_RFC_SRP_SHA_DSS_WITH_AES_128_CBC_SHA,
+     TLS1_CK_SRP_SHA_DSS_WITH_AES_128_CBC_SHA,
+     SSL_kSRP,
+     SSL_aDSS,
+     SSL_AES128,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_SRP_SHA_WITH_AES_256_CBC_SHA,
+     TLS1_RFC_SRP_SHA_WITH_AES_256_CBC_SHA,
+     TLS1_CK_SRP_SHA_WITH_AES_256_CBC_SHA,
+     SSL_kSRP,
+     SSL_aSRP,
+     SSL_AES256,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_SRP_SHA_RSA_WITH_AES_256_CBC_SHA,
+     TLS1_RFC_SRP_SHA_RSA_WITH_AES_256_CBC_SHA,
+     TLS1_CK_SRP_SHA_RSA_WITH_AES_256_CBC_SHA,
+     SSL_kSRP,
+     SSL_aRSA,
+     SSL_AES256,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_SRP_SHA_DSS_WITH_AES_256_CBC_SHA,
+     TLS1_RFC_SRP_SHA_DSS_WITH_AES_256_CBC_SHA,
+     TLS1_CK_SRP_SHA_DSS_WITH_AES_256_CBC_SHA,
+     SSL_kSRP,
+     SSL_aDSS,
+     SSL_AES256,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+
+#if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305)
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_CHACHA20_POLY1305,
+     TLS1_RFC_DHE_RSA_WITH_CHACHA20_POLY1305,
+     TLS1_CK_DHE_RSA_WITH_CHACHA20_POLY1305,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_CHACHA20POLY1305,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_RSA_WITH_CHACHA20_POLY1305,
+     TLS1_RFC_ECDHE_RSA_WITH_CHACHA20_POLY1305,
+     TLS1_CK_ECDHE_RSA_WITH_CHACHA20_POLY1305,
+     SSL_kECDHE,
+     SSL_aRSA,
+     SSL_CHACHA20POLY1305,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,
+     TLS1_RFC_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,
+     TLS1_CK_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_CHACHA20POLY1305,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_CHACHA20_POLY1305,
+     TLS1_RFC_PSK_WITH_CHACHA20_POLY1305,
+     TLS1_CK_PSK_WITH_CHACHA20_POLY1305,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_CHACHA20POLY1305,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_PSK_WITH_CHACHA20_POLY1305,
+     TLS1_RFC_ECDHE_PSK_WITH_CHACHA20_POLY1305,
+     TLS1_CK_ECDHE_PSK_WITH_CHACHA20_POLY1305,
+     SSL_kECDHEPSK,
+     SSL_aPSK,
+     SSL_CHACHA20POLY1305,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_CHACHA20_POLY1305,
+     TLS1_RFC_DHE_PSK_WITH_CHACHA20_POLY1305,
+     TLS1_CK_DHE_PSK_WITH_CHACHA20_POLY1305,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_CHACHA20POLY1305,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_PSK_WITH_CHACHA20_POLY1305,
+     TLS1_RFC_RSA_PSK_WITH_CHACHA20_POLY1305,
+     TLS1_CK_RSA_PSK_WITH_CHACHA20_POLY1305,
+     SSL_kRSAPSK,
+     SSL_aRSA,
+     SSL_CHACHA20POLY1305,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+#endif                          /* !defined(OPENSSL_NO_CHACHA) &&
+                                 * !defined(OPENSSL_NO_POLY1305) */
+
+#ifndef OPENSSL_NO_CAMELLIA
+    {
+     1,
+     TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_RFC_RSA_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_CK_RSA_WITH_CAMELLIA_128_CBC_SHA256,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_CAMELLIA128,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_RFC_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_CK_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256,
+     SSL_kEDH,
+     SSL_aDSS,
+     SSL_CAMELLIA128,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_RFC_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_CK_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
+     SSL_kEDH,
+     SSL_aRSA,
+     SSL_CAMELLIA128,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ADH_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_RFC_ADH_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_CK_ADH_WITH_CAMELLIA_128_CBC_SHA256,
+     SSL_kEDH,
+     SSL_aNULL,
+     SSL_CAMELLIA128,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA256,
+     TLS1_RFC_RSA_WITH_CAMELLIA_256_CBC_SHA256,
+     TLS1_CK_RSA_WITH_CAMELLIA_256_CBC_SHA256,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_CAMELLIA256,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256,
+     TLS1_RFC_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256,
+     TLS1_CK_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256,
+     SSL_kEDH,
+     SSL_aDSS,
+     SSL_CAMELLIA256,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256,
+     TLS1_RFC_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256,
+     TLS1_CK_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256,
+     SSL_kEDH,
+     SSL_aRSA,
+     SSL_CAMELLIA256,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ADH_WITH_CAMELLIA_256_CBC_SHA256,
+     TLS1_RFC_ADH_WITH_CAMELLIA_256_CBC_SHA256,
+     TLS1_CK_ADH_WITH_CAMELLIA_256_CBC_SHA256,
+     SSL_kEDH,
+     SSL_aNULL,
+     SSL_CAMELLIA256,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA,
+     TLS1_RFC_RSA_WITH_CAMELLIA_256_CBC_SHA,
+     TLS1_CK_RSA_WITH_CAMELLIA_256_CBC_SHA,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_CAMELLIA256,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA,
+     TLS1_RFC_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA,
+     TLS1_CK_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA,
+     SSL_kDHE,
+     SSL_aDSS,
+     SSL_CAMELLIA256,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA,
+     TLS1_RFC_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA,
+     TLS1_CK_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_CAMELLIA256,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ADH_WITH_CAMELLIA_256_CBC_SHA,
+     TLS1_RFC_ADH_WITH_CAMELLIA_256_CBC_SHA,
+     TLS1_CK_ADH_WITH_CAMELLIA_256_CBC_SHA,
+     SSL_kDHE,
+     SSL_aNULL,
+     SSL_CAMELLIA256,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA,
+     TLS1_RFC_RSA_WITH_CAMELLIA_128_CBC_SHA,
+     TLS1_CK_RSA_WITH_CAMELLIA_128_CBC_SHA,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_CAMELLIA128,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA,
+     TLS1_RFC_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA,
+     TLS1_CK_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA,
+     SSL_kDHE,
+     SSL_aDSS,
+     SSL_CAMELLIA128,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA,
+     TLS1_RFC_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA,
+     TLS1_CK_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_CAMELLIA128,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ADH_WITH_CAMELLIA_128_CBC_SHA,
+     TLS1_RFC_ADH_WITH_CAMELLIA_128_CBC_SHA,
+     TLS1_CK_ADH_WITH_CAMELLIA_128_CBC_SHA,
+     SSL_kDHE,
+     SSL_aNULL,
+     SSL_CAMELLIA128,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_RFC_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_CK_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_CAMELLIA128,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384,
+     TLS1_RFC_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384,
+     TLS1_CK_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_CAMELLIA256,
+     SSL_SHA384,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_RFC_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_CK_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,
+     SSL_kECDHE,
+     SSL_aRSA,
+     SSL_CAMELLIA128,
+     SSL_SHA256,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384,
+     TLS1_RFC_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384,
+     TLS1_CK_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384,
+     SSL_kECDHE,
+     SSL_aRSA,
+     SSL_CAMELLIA256,
+     SSL_SHA384,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_RFC_PSK_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_CK_PSK_WITH_CAMELLIA_128_CBC_SHA256,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_CAMELLIA128,
+     SSL_SHA256,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_CAMELLIA_256_CBC_SHA384,
+     TLS1_RFC_PSK_WITH_CAMELLIA_256_CBC_SHA384,
+     TLS1_CK_PSK_WITH_CAMELLIA_256_CBC_SHA384,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_CAMELLIA256,
+     SSL_SHA384,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_RFC_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_CK_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_CAMELLIA128,
+     SSL_SHA256,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,
+     TLS1_RFC_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,
+     TLS1_CK_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_CAMELLIA256,
+     SSL_SHA384,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_RFC_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_CK_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256,
+     SSL_kRSAPSK,
+     SSL_aRSA,
+     SSL_CAMELLIA128,
+     SSL_SHA256,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384,
+     TLS1_RFC_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384,
+     TLS1_CK_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384,
+     SSL_kRSAPSK,
+     SSL_aRSA,
+     SSL_CAMELLIA256,
+     SSL_SHA384,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_RFC_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
+     TLS1_CK_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,
+     SSL_kECDHEPSK,
+     SSL_aPSK,
+     SSL_CAMELLIA128,
+     SSL_SHA256,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,
+     TLS1_RFC_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,
+     TLS1_CK_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,
+     SSL_kECDHEPSK,
+     SSL_aPSK,
+     SSL_CAMELLIA256,
+     SSL_SHA384,
+     TLS1_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+#endif                          /* OPENSSL_NO_CAMELLIA */
+
+#ifndef OPENSSL_NO_GOST
+    {
+     1,
+     "GOST2001-GOST89-GOST89",
+     "TLS_GOSTR341001_WITH_28147_CNT_IMIT",
+     0x3000081,
+     SSL_kGOST,
+     SSL_aGOST01,
+     SSL_eGOST2814789CNT,
+     SSL_GOST89MAC,
+     TLS1_VERSION, TLS1_2_VERSION,
+     0, 0,
+     SSL_HIGH,
+     SSL_HANDSHAKE_MAC_GOST94 | TLS1_PRF_GOST94 | TLS1_STREAM_MAC,
+     256,
+     256,
+     },
+    {
+     1,
+     "GOST2001-NULL-GOST94",
+     "TLS_GOSTR341001_WITH_NULL_GOSTR3411",
+     0x3000083,
+     SSL_kGOST,
+     SSL_aGOST01,
+     SSL_eNULL,
+     SSL_GOST94,
+     TLS1_VERSION, TLS1_2_VERSION,
+     0, 0,
+     SSL_STRONG_NONE,
+     SSL_HANDSHAKE_MAC_GOST94 | TLS1_PRF_GOST94,
+     0,
+     0,
+     },
+    {
+     1,
+     "GOST2012-GOST8912-GOST8912",
+     NULL,
+     0x0300ff85,
+     SSL_kGOST,
+     SSL_aGOST12 | SSL_aGOST01,
+     SSL_eGOST2814789CNT12,
+     SSL_GOST89MAC12,
+     TLS1_VERSION, TLS1_2_VERSION,
+     0, 0,
+     SSL_HIGH,
+     SSL_HANDSHAKE_MAC_GOST12_256 | TLS1_PRF_GOST12_256 | TLS1_STREAM_MAC,
+     256,
+     256,
+     },
+    {
+     1,
+     "GOST2012-NULL-GOST12",
+     NULL,
+     0x0300ff87,
+     SSL_kGOST,
+     SSL_aGOST12 | SSL_aGOST01,
+     SSL_eNULL,
+     SSL_GOST12_256,
+     TLS1_VERSION, TLS1_2_VERSION,
+     0, 0,
+     SSL_STRONG_NONE,
+     SSL_HANDSHAKE_MAC_GOST12_256 | TLS1_PRF_GOST12_256 | TLS1_STREAM_MAC,
+     0,
+     0,
+     },
+#endif                          /* OPENSSL_NO_GOST */
+
+#ifndef OPENSSL_NO_IDEA
+    {
+     1,
+     SSL3_TXT_RSA_IDEA_128_SHA,
+     SSL3_RFC_RSA_IDEA_128_SHA,
+     SSL3_CK_RSA_IDEA_128_SHA,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_IDEA,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_1_VERSION,
+     DTLS1_BAD_VER, DTLS1_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+#endif
+
+#ifndef OPENSSL_NO_SEED
+    {
+     1,
+     TLS1_TXT_RSA_WITH_SEED_SHA,
+     TLS1_RFC_RSA_WITH_SEED_SHA,
+     TLS1_CK_RSA_WITH_SEED_SHA,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_SEED,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_DSS_WITH_SEED_SHA,
+     TLS1_RFC_DHE_DSS_WITH_SEED_SHA,
+     TLS1_CK_DHE_DSS_WITH_SEED_SHA,
+     SSL_kDHE,
+     SSL_aDSS,
+     SSL_SEED,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_SEED_SHA,
+     TLS1_RFC_DHE_RSA_WITH_SEED_SHA,
+     TLS1_CK_DHE_RSA_WITH_SEED_SHA,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_SEED,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ADH_WITH_SEED_SHA,
+     TLS1_RFC_ADH_WITH_SEED_SHA,
+     TLS1_CK_ADH_WITH_SEED_SHA,
+     SSL_kDHE,
+     SSL_aNULL,
+     SSL_SEED,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     DTLS1_BAD_VER, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+#endif                          /* OPENSSL_NO_SEED */
+
+#ifndef OPENSSL_NO_WEAK_SSL_CIPHERS
+    {
+     1,
+     SSL3_TXT_RSA_RC4_128_MD5,
+     SSL3_RFC_RSA_RC4_128_MD5,
+     SSL3_CK_RSA_RC4_128_MD5,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_RC4,
+     SSL_MD5,
+     SSL3_VERSION, TLS1_2_VERSION,
+     0, 0,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     SSL3_TXT_RSA_RC4_128_SHA,
+     SSL3_RFC_RSA_RC4_128_SHA,
+     SSL3_CK_RSA_RC4_128_SHA,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_RC4,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     0, 0,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     SSL3_TXT_ADH_RC4_128_MD5,
+     SSL3_RFC_ADH_RC4_128_MD5,
+     SSL3_CK_ADH_RC4_128_MD5,
+     SSL_kDHE,
+     SSL_aNULL,
+     SSL_RC4,
+     SSL_MD5,
+     SSL3_VERSION, TLS1_2_VERSION,
+     0, 0,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_PSK_WITH_RC4_128_SHA,
+     TLS1_RFC_ECDHE_PSK_WITH_RC4_128_SHA,
+     TLS1_CK_ECDHE_PSK_WITH_RC4_128_SHA,
+     SSL_kECDHEPSK,
+     SSL_aPSK,
+     SSL_RC4,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     0, 0,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDH_anon_WITH_RC4_128_SHA,
+     TLS1_RFC_ECDH_anon_WITH_RC4_128_SHA,
+     TLS1_CK_ECDH_anon_WITH_RC4_128_SHA,
+     SSL_kECDHE,
+     SSL_aNULL,
+     SSL_RC4,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     0, 0,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_RC4_128_SHA,
+     TLS1_RFC_ECDHE_ECDSA_WITH_RC4_128_SHA,
+     TLS1_CK_ECDHE_ECDSA_WITH_RC4_128_SHA,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_RC4,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     0, 0,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_RSA_WITH_RC4_128_SHA,
+     TLS1_RFC_ECDHE_RSA_WITH_RC4_128_SHA,
+     TLS1_CK_ECDHE_RSA_WITH_RC4_128_SHA,
+     SSL_kECDHE,
+     SSL_aRSA,
+     SSL_RC4,
+     SSL_SHA1,
+     TLS1_VERSION, TLS1_2_VERSION,
+     0, 0,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_RC4_128_SHA,
+     TLS1_RFC_PSK_WITH_RC4_128_SHA,
+     TLS1_CK_PSK_WITH_RC4_128_SHA,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_RC4,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     0, 0,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_PSK_WITH_RC4_128_SHA,
+     TLS1_RFC_RSA_PSK_WITH_RC4_128_SHA,
+     TLS1_CK_RSA_PSK_WITH_RC4_128_SHA,
+     SSL_kRSAPSK,
+     SSL_aRSA,
+     SSL_RC4,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     0, 0,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_RC4_128_SHA,
+     TLS1_RFC_DHE_PSK_WITH_RC4_128_SHA,
+     TLS1_CK_DHE_PSK_WITH_RC4_128_SHA,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_RC4,
+     SSL_SHA1,
+     SSL3_VERSION, TLS1_2_VERSION,
+     0, 0,
+     SSL_NOT_DEFAULT | SSL_MEDIUM,
+     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,
+     128,
+     128,
+     },
+#endif                          /* OPENSSL_NO_WEAK_SSL_CIPHERS */
+
+#ifndef OPENSSL_NO_ARIA
+    {
+     1,
+     TLS1_TXT_RSA_WITH_ARIA_128_GCM_SHA256,
+     TLS1_RFC_RSA_WITH_ARIA_128_GCM_SHA256,
+     TLS1_CK_RSA_WITH_ARIA_128_GCM_SHA256,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_ARIA128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_WITH_ARIA_256_GCM_SHA384,
+     TLS1_RFC_RSA_WITH_ARIA_256_GCM_SHA384,
+     TLS1_CK_RSA_WITH_ARIA_256_GCM_SHA384,
+     SSL_kRSA,
+     SSL_aRSA,
+     SSL_ARIA256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_ARIA_128_GCM_SHA256,
+     TLS1_RFC_DHE_RSA_WITH_ARIA_128_GCM_SHA256,
+     TLS1_CK_DHE_RSA_WITH_ARIA_128_GCM_SHA256,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_ARIA128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_RSA_WITH_ARIA_256_GCM_SHA384,
+     TLS1_RFC_DHE_RSA_WITH_ARIA_256_GCM_SHA384,
+     TLS1_CK_DHE_RSA_WITH_ARIA_256_GCM_SHA384,
+     SSL_kDHE,
+     SSL_aRSA,
+     SSL_ARIA256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_DSS_WITH_ARIA_128_GCM_SHA256,
+     TLS1_RFC_DHE_DSS_WITH_ARIA_128_GCM_SHA256,
+     TLS1_CK_DHE_DSS_WITH_ARIA_128_GCM_SHA256,
+     SSL_kDHE,
+     SSL_aDSS,
+     SSL_ARIA128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_DSS_WITH_ARIA_256_GCM_SHA384,
+     TLS1_RFC_DHE_DSS_WITH_ARIA_256_GCM_SHA384,
+     TLS1_CK_DHE_DSS_WITH_ARIA_256_GCM_SHA384,
+     SSL_kDHE,
+     SSL_aDSS,
+     SSL_ARIA256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256,
+     TLS1_RFC_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256,
+     TLS1_CK_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_ARIA128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384,
+     TLS1_RFC_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384,
+     TLS1_CK_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384,
+     SSL_kECDHE,
+     SSL_aECDSA,
+     SSL_ARIA256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256,
+     TLS1_RFC_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256,
+     TLS1_CK_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256,
+     SSL_kECDHE,
+     SSL_aRSA,
+     SSL_ARIA128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384,
+     TLS1_RFC_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384,
+     TLS1_CK_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384,
+     SSL_kECDHE,
+     SSL_aRSA,
+     SSL_ARIA256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_ARIA_128_GCM_SHA256,
+     TLS1_RFC_PSK_WITH_ARIA_128_GCM_SHA256,
+     TLS1_CK_PSK_WITH_ARIA_128_GCM_SHA256,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_ARIA128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_PSK_WITH_ARIA_256_GCM_SHA384,
+     TLS1_RFC_PSK_WITH_ARIA_256_GCM_SHA384,
+     TLS1_CK_PSK_WITH_ARIA_256_GCM_SHA384,
+     SSL_kPSK,
+     SSL_aPSK,
+     SSL_ARIA256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_ARIA_128_GCM_SHA256,
+     TLS1_RFC_DHE_PSK_WITH_ARIA_128_GCM_SHA256,
+     TLS1_CK_DHE_PSK_WITH_ARIA_128_GCM_SHA256,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_ARIA128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_DHE_PSK_WITH_ARIA_256_GCM_SHA384,
+     TLS1_RFC_DHE_PSK_WITH_ARIA_256_GCM_SHA384,
+     TLS1_CK_DHE_PSK_WITH_ARIA_256_GCM_SHA384,
+     SSL_kDHEPSK,
+     SSL_aPSK,
+     SSL_ARIA256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_PSK_WITH_ARIA_128_GCM_SHA256,
+     TLS1_RFC_RSA_PSK_WITH_ARIA_128_GCM_SHA256,
+     TLS1_CK_RSA_PSK_WITH_ARIA_128_GCM_SHA256,
+     SSL_kRSAPSK,
+     SSL_aRSA,
+     SSL_ARIA128GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256,
+     128,
+     128,
+     },
+    {
+     1,
+     TLS1_TXT_RSA_PSK_WITH_ARIA_256_GCM_SHA384,
+     TLS1_RFC_RSA_PSK_WITH_ARIA_256_GCM_SHA384,
+     TLS1_CK_RSA_PSK_WITH_ARIA_256_GCM_SHA384,
+     SSL_kRSAPSK,
+     SSL_aRSA,
+     SSL_ARIA256GCM,
+     SSL_AEAD,
+     TLS1_2_VERSION, TLS1_2_VERSION,
+     DTLS1_2_VERSION, DTLS1_2_VERSION,
+     SSL_NOT_DEFAULT | SSL_HIGH,
+     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,
+     256,
+     256,
+     },
+#endif /* OPENSSL_NO_ARIA */
+};
+
+/*
+ * The list of known Signalling Cipher-Suite Value "ciphers", non-valid
+ * values stuffed into the ciphers field of the wire protocol for signalling
+ * purposes.
+ */
+static SSL_CIPHER ssl3_scsvs[] = {
+    {
+     0,
+     "TLS_EMPTY_RENEGOTIATION_INFO_SCSV",
+     "TLS_EMPTY_RENEGOTIATION_INFO_SCSV",
+     SSL3_CK_SCSV,
+     0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+    },
+    {
+     0,
+     "TLS_FALLBACK_SCSV",
+     "TLS_FALLBACK_SCSV",
+     SSL3_CK_FALLBACK_SCSV,
+     0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+    },
+};
+
+static int cipher_compare(const void *a, const void *b)
+{
+    const SSL_CIPHER *ap = (const SSL_CIPHER *)a;
+    const SSL_CIPHER *bp = (const SSL_CIPHER *)b;
+
+    if (ap->id == bp->id)
+        return 0;
+    return ap->id < bp->id ? -1 : 1;
+}
+
+void ssl_sort_cipher_list(void)
+{
+    qsort(tls13_ciphers, TLS13_NUM_CIPHERS, sizeof(tls13_ciphers[0]),
+          cipher_compare);
+    qsort(ssl3_ciphers, SSL3_NUM_CIPHERS, sizeof(ssl3_ciphers[0]),
+          cipher_compare);
+    qsort(ssl3_scsvs, SSL3_NUM_SCSVS, sizeof(ssl3_scsvs[0]), cipher_compare);
+}
+
+static int ssl_undefined_function_1(SSL *ssl, unsigned char *r, size_t s,
+                                    const char * t, size_t u,
+                                    const unsigned char * v, size_t w, int x)
+{
+    (void)r;
+    (void)s;
+    (void)t;
+    (void)u;
+    (void)v;
+    (void)w;
+    (void)x;
+    return ssl_undefined_function(ssl);
+}
+
+const SSL3_ENC_METHOD SSLv3_enc_data = {
+    ssl3_enc,
+    n_ssl3_mac,
+    ssl3_setup_key_block,
+    ssl3_generate_master_secret,
+    ssl3_change_cipher_state,
+    ssl3_final_finish_mac,
+    SSL3_MD_CLIENT_FINISHED_CONST, 4,
+    SSL3_MD_SERVER_FINISHED_CONST, 4,
+    ssl3_alert_code,
+    ssl_undefined_function_1,
+    0,
+    ssl3_set_handshake_header,
+    tls_close_construct_packet,
+    ssl3_handshake_write
+};
+
+long ssl3_default_timeout(void)
+{
+    /*
+     * 2 hours, the 24 hours mentioned in the SSLv3 spec is way too long for
+     * http, the cache would over fill
+     */
+    return (60 * 60 * 2);
+}
+
+int ssl3_num_ciphers(void)
+{
+    return SSL3_NUM_CIPHERS;
+}
+
+const SSL_CIPHER *ssl3_get_cipher(unsigned int u)
+{
+    if (u < SSL3_NUM_CIPHERS)
+        return &(ssl3_ciphers[SSL3_NUM_CIPHERS - 1 - u]);
+    else
+        return NULL;
+}
+
+int ssl3_set_handshake_header(SSL *s, WPACKET *pkt, int htype)
+{
+    /* No header in the event of a CCS */
+    if (htype == SSL3_MT_CHANGE_CIPHER_SPEC)
+        return 1;
+
+    /* Set the content type and 3 bytes for the message len */
+    if (!WPACKET_put_bytes_u8(pkt, htype)
+            || !WPACKET_start_sub_packet_u24(pkt))
+        return 0;
+
+    return 1;
+}
+
+int ssl3_handshake_write(SSL *s)
+{
+    return ssl3_do_write(s, SSL3_RT_HANDSHAKE);
+}
+
+int ssl3_new(SSL *s)
+{
+    SSL3_STATE *s3;
+
+    if ((s3 = OPENSSL_zalloc(sizeof(*s3))) == NULL)
+        goto err;
+    s->s3 = s3;
+
+#ifndef OPENSSL_NO_SRP
+    if (!SSL_SRP_CTX_init(s))
+        goto err;
+#endif
+
+    if (!s->method->ssl_clear(s))
+        return 0;
+
+    return 1;
+ err:
+    return 0;
+}
+
+void ssl3_free(SSL *s)
+{
+    if (s == NULL || s->s3 == NULL)
+        return;
+
+    ssl3_cleanup_key_block(s);
+
+#if !defined(OPENSSL_NO_EC) || !defined(OPENSSL_NO_DH)
+    EVP_PKEY_free(s->s3->peer_tmp);
+    s->s3->peer_tmp = NULL;
+    EVP_PKEY_free(s->s3->tmp.pkey);
+    s->s3->tmp.pkey = NULL;
+#endif
+
+    OPENSSL_free(s->s3->tmp.ctype);
+    sk_X509_NAME_pop_free(s->s3->tmp.peer_ca_names, X509_NAME_free);
+    OPENSSL_free(s->s3->tmp.ciphers_raw);
+    OPENSSL_clear_free(s->s3->tmp.pms, s->s3->tmp.pmslen);
+    OPENSSL_free(s->s3->tmp.peer_sigalgs);
+    OPENSSL_free(s->s3->tmp.peer_cert_sigalgs);
+    ssl3_free_digest_list(s);
+    OPENSSL_free(s->s3->alpn_selected);
+    OPENSSL_free(s->s3->alpn_proposed);
+
+#ifndef OPENSSL_NO_SRP
+    SSL_SRP_CTX_free(s);
+#endif
+    OPENSSL_clear_free(s->s3, sizeof(*s->s3));
+    s->s3 = NULL;
+}
+
+int ssl3_clear(SSL *s)
+{
+    ssl3_cleanup_key_block(s);
+    OPENSSL_free(s->s3->tmp.ctype);
+    sk_X509_NAME_pop_free(s->s3->tmp.peer_ca_names, X509_NAME_free);
+    OPENSSL_free(s->s3->tmp.ciphers_raw);
+    OPENSSL_clear_free(s->s3->tmp.pms, s->s3->tmp.pmslen);
+    OPENSSL_free(s->s3->tmp.peer_sigalgs);
+    OPENSSL_free(s->s3->tmp.peer_cert_sigalgs);
+
+#if !defined(OPENSSL_NO_EC) || !defined(OPENSSL_NO_DH)
+    EVP_PKEY_free(s->s3->tmp.pkey);
+    EVP_PKEY_free(s->s3->peer_tmp);
+#endif                          /* !OPENSSL_NO_EC */
+
+    ssl3_free_digest_list(s);
+
+    OPENSSL_free(s->s3->alpn_selected);
+    OPENSSL_free(s->s3->alpn_proposed);
+
+    /* NULL/zero-out everything in the s3 struct */
+    memset(s->s3, 0, sizeof(*s->s3));
+
+    if (!ssl_free_wbio_buffer(s))
+        return 0;
+
+    s->version = SSL3_VERSION;
+
+#if !defined(OPENSSL_NO_NEXTPROTONEG)
+    OPENSSL_free(s->ext.npn);
+    s->ext.npn = NULL;
+    s->ext.npn_len = 0;
+#endif
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_SRP
+static char *srp_password_from_info_cb(SSL *s, void *arg)
+{
+    return OPENSSL_strdup(s->srp_ctx.info);
+}
+#endif
+
+static int ssl3_set_req_cert_type(CERT *c, const unsigned char *p, size_t len);
+
+long ssl3_ctrl(SSL *s, int cmd, long larg, void *parg)
+{
+    int ret = 0;
+
+    switch (cmd) {
+    case SSL_CTRL_GET_CLIENT_CERT_REQUEST:
+        break;
+    case SSL_CTRL_GET_NUM_RENEGOTIATIONS:
+        ret = s->s3->num_renegotiations;
+        break;
+    case SSL_CTRL_CLEAR_NUM_RENEGOTIATIONS:
+        ret = s->s3->num_renegotiations;
+        s->s3->num_renegotiations = 0;
+        break;
+    case SSL_CTRL_GET_TOTAL_RENEGOTIATIONS:
+        ret = s->s3->total_renegotiations;
+        break;
+    case SSL_CTRL_GET_FLAGS:
+        ret = (int)(s->s3->flags);
+        break;
+#ifndef OPENSSL_NO_DH
+    case SSL_CTRL_SET_TMP_DH:
+        {
+            DH *dh = (DH *)parg;
+            EVP_PKEY *pkdh = NULL;
+            if (dh == NULL) {
+                SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
+                return ret;
+            }
+            pkdh = ssl_dh_to_pkey(dh);
+            if (pkdh == NULL) {
+                SSLerr(SSL_F_SSL3_CTRL, ERR_R_MALLOC_FAILURE);
+                return 0;
+            }
+            if (!ssl_security(s, SSL_SECOP_TMP_DH,
+                              EVP_PKEY_security_bits(pkdh), 0, pkdh)) {
+                SSLerr(SSL_F_SSL3_CTRL, SSL_R_DH_KEY_TOO_SMALL);
+                EVP_PKEY_free(pkdh);
+                return ret;
+            }
+            EVP_PKEY_free(s->cert->dh_tmp);
+            s->cert->dh_tmp = pkdh;
+            ret = 1;
+        }
+        break;
+    case SSL_CTRL_SET_TMP_DH_CB:
+        {
+            SSLerr(SSL_F_SSL3_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+            return ret;
+        }
+    case SSL_CTRL_SET_DH_AUTO:
+        s->cert->dh_tmp_auto = larg;
+        return 1;
+#endif
+#ifndef OPENSSL_NO_EC
+    case SSL_CTRL_SET_TMP_ECDH:
+        {
+            const EC_GROUP *group = NULL;
+            int nid;
+
+            if (parg == NULL) {
+                SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
+                return 0;
+            }
+            group = EC_KEY_get0_group((const EC_KEY *)parg);
+            if (group == NULL) {
+                SSLerr(SSL_F_SSL3_CTRL, EC_R_MISSING_PARAMETERS);
+                return 0;
+            }
+            nid = EC_GROUP_get_curve_name(group);
+            if (nid == NID_undef)
+                return 0;
+            return tls1_set_groups(&s->ext.supportedgroups,
+                                   &s->ext.supportedgroups_len,
+                                   &nid, 1);
+        }
+        break;
+#endif                          /* !OPENSSL_NO_EC */
+    case SSL_CTRL_SET_TLSEXT_HOSTNAME:
+        /*
+         * TODO(OpenSSL1.2)
+         * This API is only used for a client to set what SNI it will request
+         * from the server, but we currently allow it to be used on servers
+         * as well, which is a programming error.  Currently we just clear
+         * the field in SSL_do_handshake() for server SSLs, but when we can
+         * make ABI-breaking changes, we may want to make use of this API
+         * an error on server SSLs.
+         */
+        if (larg == TLSEXT_NAMETYPE_host_name) {
+            size_t len;
+
+            OPENSSL_free(s->ext.hostname);
+            s->ext.hostname = NULL;
+
+            ret = 1;
+            if (parg == NULL)
+                break;
+            len = strlen((char *)parg);
+            if (len == 0 || len > TLSEXT_MAXLEN_host_name) {
+                SSLerr(SSL_F_SSL3_CTRL, SSL_R_SSL3_EXT_INVALID_SERVERNAME);
+                return 0;
+            }
+            if ((s->ext.hostname = OPENSSL_strdup((char *)parg)) == NULL) {
+                SSLerr(SSL_F_SSL3_CTRL, ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+        } else {
+            SSLerr(SSL_F_SSL3_CTRL, SSL_R_SSL3_EXT_INVALID_SERVERNAME_TYPE);
+            return 0;
+        }
+        break;
+    case SSL_CTRL_SET_TLSEXT_DEBUG_ARG:
+        s->ext.debug_arg = parg;
+        ret = 1;
+        break;
+
+    case SSL_CTRL_GET_TLSEXT_STATUS_REQ_TYPE:
+        ret = s->ext.status_type;
+        break;
+
+    case SSL_CTRL_SET_TLSEXT_STATUS_REQ_TYPE:
+        s->ext.status_type = larg;
+        ret = 1;
+        break;
+
+    case SSL_CTRL_GET_TLSEXT_STATUS_REQ_EXTS:
+        *(STACK_OF(X509_EXTENSION) **)parg = s->ext.ocsp.exts;
+        ret = 1;
+        break;
+
+    case SSL_CTRL_SET_TLSEXT_STATUS_REQ_EXTS:
+        s->ext.ocsp.exts = parg;
+        ret = 1;
+        break;
+
+    case SSL_CTRL_GET_TLSEXT_STATUS_REQ_IDS:
+        *(STACK_OF(OCSP_RESPID) **)parg = s->ext.ocsp.ids;
+        ret = 1;
+        break;
+
+    case SSL_CTRL_SET_TLSEXT_STATUS_REQ_IDS:
+        s->ext.ocsp.ids = parg;
+        ret = 1;
+        break;
+
+    case SSL_CTRL_GET_TLSEXT_STATUS_REQ_OCSP_RESP:
+        *(unsigned char **)parg = s->ext.ocsp.resp;
+        if (s->ext.ocsp.resp_len == 0
+                || s->ext.ocsp.resp_len > LONG_MAX)
+            return -1;
+        return (long)s->ext.ocsp.resp_len;
+
+    case SSL_CTRL_SET_TLSEXT_STATUS_REQ_OCSP_RESP:
+        OPENSSL_free(s->ext.ocsp.resp);
+        s->ext.ocsp.resp = parg;
+        s->ext.ocsp.resp_len = larg;
+        ret = 1;
+        break;
+
+#ifndef OPENSSL_NO_HEARTBEATS
+    case SSL_CTRL_DTLS_EXT_SEND_HEARTBEAT:
+    case SSL_CTRL_GET_DTLS_EXT_HEARTBEAT_PENDING:
+    case SSL_CTRL_SET_DTLS_EXT_HEARTBEAT_NO_REQUESTS:
+        break;
+#endif
+
+    case SSL_CTRL_CHAIN:
+        if (larg)
+            return ssl_cert_set1_chain(s, NULL, (STACK_OF(X509) *)parg);
+        else
+            return ssl_cert_set0_chain(s, NULL, (STACK_OF(X509) *)parg);
+
+    case SSL_CTRL_CHAIN_CERT:
+        if (larg)
+            return ssl_cert_add1_chain_cert(s, NULL, (X509 *)parg);
+        else
+            return ssl_cert_add0_chain_cert(s, NULL, (X509 *)parg);
+
+    case SSL_CTRL_GET_CHAIN_CERTS:
+        *(STACK_OF(X509) **)parg = s->cert->key->chain;
+        break;
+
+    case SSL_CTRL_SELECT_CURRENT_CERT:
+        return ssl_cert_select_current(s->cert, (X509 *)parg);
+
+    case SSL_CTRL_SET_CURRENT_CERT:
+        if (larg == SSL_CERT_SET_SERVER) {
+            const SSL_CIPHER *cipher;
+            if (!s->server)
+                return 0;
+            cipher = s->s3->tmp.new_cipher;
+            if (cipher == NULL)
+                return 0;
+            /*
+             * No certificate for unauthenticated ciphersuites or using SRP
+             * authentication
+             */
+            if (cipher->algorithm_auth & (SSL_aNULL | SSL_aSRP))
+                return 2;
+            if (s->s3->tmp.cert == NULL)
+                return 0;
+            s->cert->key = s->s3->tmp.cert;
+            return 1;
+        }
+        return ssl_cert_set_current(s->cert, larg);
+
+#ifndef OPENSSL_NO_EC
+    case SSL_CTRL_GET_GROUPS:
+        {
+            uint16_t *clist;
+            size_t clistlen;
+
+            if (!s->session)
+                return 0;
+            clist = s->session->ext.supportedgroups;
+            clistlen = s->session->ext.supportedgroups_len;
+            if (parg) {
+                size_t i;
+                int *cptr = parg;
+
+                for (i = 0; i < clistlen; i++) {
+                    const TLS_GROUP_INFO *cinf = tls1_group_id_lookup(clist[i]);
+
+                    if (cinf != NULL)
+                        cptr[i] = cinf->nid;
+                    else
+                        cptr[i] = TLSEXT_nid_unknown | clist[i];
+                }
+            }
+            return (int)clistlen;
+        }
+
+    case SSL_CTRL_SET_GROUPS:
+        return tls1_set_groups(&s->ext.supportedgroups,
+                               &s->ext.supportedgroups_len, parg, larg);
+
+    case SSL_CTRL_SET_GROUPS_LIST:
+        return tls1_set_groups_list(&s->ext.supportedgroups,
+                                    &s->ext.supportedgroups_len, parg);
+
+    case SSL_CTRL_GET_SHARED_GROUP:
+        {
+            uint16_t id = tls1_shared_group(s, larg);
+
+            if (larg != -1) {
+                const TLS_GROUP_INFO *ginf = tls1_group_id_lookup(id);
+
+                return ginf == NULL ? 0 : ginf->nid;
+            }
+            return id;
+        }
+#endif
+    case SSL_CTRL_SET_SIGALGS:
+        return tls1_set_sigalgs(s->cert, parg, larg, 0);
+
+    case SSL_CTRL_SET_SIGALGS_LIST:
+        return tls1_set_sigalgs_list(s->cert, parg, 0);
+
+    case SSL_CTRL_SET_CLIENT_SIGALGS:
+        return tls1_set_sigalgs(s->cert, parg, larg, 1);
+
+    case SSL_CTRL_SET_CLIENT_SIGALGS_LIST:
+        return tls1_set_sigalgs_list(s->cert, parg, 1);
+
+    case SSL_CTRL_GET_CLIENT_CERT_TYPES:
+        {
+            const unsigned char **pctype = parg;
+            if (s->server || !s->s3->tmp.cert_req)
+                return 0;
+            if (pctype)
+                *pctype = s->s3->tmp.ctype;
+            return s->s3->tmp.ctype_len;
+        }
+
+    case SSL_CTRL_SET_CLIENT_CERT_TYPES:
+        if (!s->server)
+            return 0;
+        return ssl3_set_req_cert_type(s->cert, parg, larg);
+
+    case SSL_CTRL_BUILD_CERT_CHAIN:
+        return ssl_build_cert_chain(s, NULL, larg);
+
+    case SSL_CTRL_SET_VERIFY_CERT_STORE:
+        return ssl_cert_set_cert_store(s->cert, parg, 0, larg);
+
+    case SSL_CTRL_SET_CHAIN_CERT_STORE:
+        return ssl_cert_set_cert_store(s->cert, parg, 1, larg);
+
+    case SSL_CTRL_GET_PEER_SIGNATURE_NID:
+        if (s->s3->tmp.peer_sigalg == NULL)
+            return 0;
+        *(int *)parg = s->s3->tmp.peer_sigalg->hash;
+        return 1;
+
+    case SSL_CTRL_GET_SIGNATURE_NID:
+        if (s->s3->tmp.sigalg == NULL)
+            return 0;
+        *(int *)parg = s->s3->tmp.sigalg->hash;
+        return 1;
+
+    case SSL_CTRL_GET_PEER_TMP_KEY:
+#if !defined(OPENSSL_NO_DH) || !defined(OPENSSL_NO_EC)
+        if (s->session == NULL || s->s3->peer_tmp == NULL) {
+            return 0;
+        } else {
+            EVP_PKEY_up_ref(s->s3->peer_tmp);
+            *(EVP_PKEY **)parg = s->s3->peer_tmp;
+            return 1;
+        }
+#else
+        return 0;
+#endif
+
+    case SSL_CTRL_GET_TMP_KEY:
+#if !defined(OPENSSL_NO_DH) || !defined(OPENSSL_NO_EC)
+        if (s->session == NULL || s->s3->tmp.pkey == NULL) {
+            return 0;
+        } else {
+            EVP_PKEY_up_ref(s->s3->tmp.pkey);
+            *(EVP_PKEY **)parg = s->s3->tmp.pkey;
+            return 1;
+        }
+#else
+        return 0;
+#endif
+
+#ifndef OPENSSL_NO_EC
+    case SSL_CTRL_GET_EC_POINT_FORMATS:
+        {
+            SSL_SESSION *sess = s->session;
+            const unsigned char **pformat = parg;
+
+            if (sess == NULL || sess->ext.ecpointformats == NULL)
+                return 0;
+            *pformat = sess->ext.ecpointformats;
+            return (int)sess->ext.ecpointformats_len;
+        }
+#endif
+
+    default:
+        break;
+    }
+    return ret;
+}
+
+long ssl3_callback_ctrl(SSL *s, int cmd, void (*fp) (void))
+{
+    int ret = 0;
+
+    switch (cmd) {
+#ifndef OPENSSL_NO_DH
+    case SSL_CTRL_SET_TMP_DH_CB:
+        {
+            s->cert->dh_tmp_cb = (DH *(*)(SSL *, int, int))fp;
+        }
+        break;
+#endif
+    case SSL_CTRL_SET_TLSEXT_DEBUG_CB:
+        s->ext.debug_cb = (void (*)(SSL *, int, int,
+                                    const unsigned char *, int, void *))fp;
+        break;
+
+    case SSL_CTRL_SET_NOT_RESUMABLE_SESS_CB:
+        {
+            s->not_resumable_session_cb = (int (*)(SSL *, int))fp;
+        }
+        break;
+    default:
+        break;
+    }
+    return ret;
+}
+
+long ssl3_ctx_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg)
+{
+    switch (cmd) {
+#ifndef OPENSSL_NO_DH
+    case SSL_CTRL_SET_TMP_DH:
+        {
+            DH *dh = (DH *)parg;
+            EVP_PKEY *pkdh = NULL;
+            if (dh == NULL) {
+                SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_PASSED_NULL_PARAMETER);
+                return 0;
+            }
+            pkdh = ssl_dh_to_pkey(dh);
+            if (pkdh == NULL) {
+                SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_MALLOC_FAILURE);
+                return 0;
+            }
+            if (!ssl_ctx_security(ctx, SSL_SECOP_TMP_DH,
+                                  EVP_PKEY_security_bits(pkdh), 0, pkdh)) {
+                SSLerr(SSL_F_SSL3_CTX_CTRL, SSL_R_DH_KEY_TOO_SMALL);
+                EVP_PKEY_free(pkdh);
+                return 0;
+            }
+            EVP_PKEY_free(ctx->cert->dh_tmp);
+            ctx->cert->dh_tmp = pkdh;
+            return 1;
+        }
+    case SSL_CTRL_SET_TMP_DH_CB:
+        {
+            SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+            return 0;
+        }
+    case SSL_CTRL_SET_DH_AUTO:
+        ctx->cert->dh_tmp_auto = larg;
+        return 1;
+#endif
+#ifndef OPENSSL_NO_EC
+    case SSL_CTRL_SET_TMP_ECDH:
+        {
+            const EC_GROUP *group = NULL;
+            int nid;
+
+            if (parg == NULL) {
+                SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_PASSED_NULL_PARAMETER);
+                return 0;
+            }
+            group = EC_KEY_get0_group((const EC_KEY *)parg);
+            if (group == NULL) {
+                SSLerr(SSL_F_SSL3_CTX_CTRL, EC_R_MISSING_PARAMETERS);
+                return 0;
+            }
+            nid = EC_GROUP_get_curve_name(group);
+            if (nid == NID_undef)
+                return 0;
+            return tls1_set_groups(&ctx->ext.supportedgroups,
+                                   &ctx->ext.supportedgroups_len,
+                                   &nid, 1);
+        }
+#endif                          /* !OPENSSL_NO_EC */
+    case SSL_CTRL_SET_TLSEXT_SERVERNAME_ARG:
+        ctx->ext.servername_arg = parg;
+        break;
+    case SSL_CTRL_SET_TLSEXT_TICKET_KEYS:
+    case SSL_CTRL_GET_TLSEXT_TICKET_KEYS:
+        {
+            unsigned char *keys = parg;
+            long tick_keylen = (sizeof(ctx->ext.tick_key_name) +
+                                sizeof(ctx->ext.secure->tick_hmac_key) +
+                                sizeof(ctx->ext.secure->tick_aes_key));
+            if (keys == NULL)
+                return tick_keylen;
+            if (larg != tick_keylen) {
+                SSLerr(SSL_F_SSL3_CTX_CTRL, SSL_R_INVALID_TICKET_KEYS_LENGTH);
+                return 0;
+            }
+            if (cmd == SSL_CTRL_SET_TLSEXT_TICKET_KEYS) {
+                memcpy(ctx->ext.tick_key_name, keys,
+                       sizeof(ctx->ext.tick_key_name));
+                memcpy(ctx->ext.secure->tick_hmac_key,
+                       keys + sizeof(ctx->ext.tick_key_name),
+                       sizeof(ctx->ext.secure->tick_hmac_key));
+                memcpy(ctx->ext.secure->tick_aes_key,
+                       keys + sizeof(ctx->ext.tick_key_name) +
+                       sizeof(ctx->ext.secure->tick_hmac_key),
+                       sizeof(ctx->ext.secure->tick_aes_key));
+            } else {
+                memcpy(keys, ctx->ext.tick_key_name,
+                       sizeof(ctx->ext.tick_key_name));
+                memcpy(keys + sizeof(ctx->ext.tick_key_name),
+                       ctx->ext.secure->tick_hmac_key,
+                       sizeof(ctx->ext.secure->tick_hmac_key));
+                memcpy(keys + sizeof(ctx->ext.tick_key_name) +
+                       sizeof(ctx->ext.secure->tick_hmac_key),
+                       ctx->ext.secure->tick_aes_key,
+                       sizeof(ctx->ext.secure->tick_aes_key));
+            }
+            return 1;
+        }
+
+    case SSL_CTRL_GET_TLSEXT_STATUS_REQ_TYPE:
+        return ctx->ext.status_type;
+
+    case SSL_CTRL_SET_TLSEXT_STATUS_REQ_TYPE:
+        ctx->ext.status_type = larg;
+        break;
+
+    case SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB_ARG:
+        ctx->ext.status_arg = parg;
+        return 1;
+
+    case SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB_ARG:
+        *(void**)parg = ctx->ext.status_arg;
+        break;
+
+    case SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB:
+        *(int (**)(SSL*, void*))parg = ctx->ext.status_cb;
+        break;
+
+#ifndef OPENSSL_NO_SRP
+    case SSL_CTRL_SET_TLS_EXT_SRP_USERNAME:
+        ctx->srp_ctx.srp_Mask |= SSL_kSRP;
+        OPENSSL_free(ctx->srp_ctx.login);
+        ctx->srp_ctx.login = NULL;
+        if (parg == NULL)
+            break;
+        if (strlen((const char *)parg) > 255 || strlen((const char *)parg) < 1) {
+            SSLerr(SSL_F_SSL3_CTX_CTRL, SSL_R_INVALID_SRP_USERNAME);
+            return 0;
+        }
+        if ((ctx->srp_ctx.login = OPENSSL_strdup((char *)parg)) == NULL) {
+            SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+        break;
+    case SSL_CTRL_SET_TLS_EXT_SRP_PASSWORD:
+        ctx->srp_ctx.SRP_give_srp_client_pwd_callback =
+            srp_password_from_info_cb;
+        if (ctx->srp_ctx.info != NULL)
+            OPENSSL_free(ctx->srp_ctx.info);
+        if ((ctx->srp_ctx.info = BUF_strdup((char *)parg)) == NULL) {
+            SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+        break;
+    case SSL_CTRL_SET_SRP_ARG:
+        ctx->srp_ctx.srp_Mask |= SSL_kSRP;
+        ctx->srp_ctx.SRP_cb_arg = parg;
+        break;
+
+    case SSL_CTRL_SET_TLS_EXT_SRP_STRENGTH:
+        ctx->srp_ctx.strength = larg;
+        break;
+#endif
+
+#ifndef OPENSSL_NO_EC
+    case SSL_CTRL_SET_GROUPS:
+        return tls1_set_groups(&ctx->ext.supportedgroups,
+                               &ctx->ext.supportedgroups_len,
+                               parg, larg);
+
+    case SSL_CTRL_SET_GROUPS_LIST:
+        return tls1_set_groups_list(&ctx->ext.supportedgroups,
+                                    &ctx->ext.supportedgroups_len,
+                                    parg);
+#endif
+    case SSL_CTRL_SET_SIGALGS:
+        return tls1_set_sigalgs(ctx->cert, parg, larg, 0);
+
+    case SSL_CTRL_SET_SIGALGS_LIST:
+        return tls1_set_sigalgs_list(ctx->cert, parg, 0);
+
+    case SSL_CTRL_SET_CLIENT_SIGALGS:
+        return tls1_set_sigalgs(ctx->cert, parg, larg, 1);
+
+    case SSL_CTRL_SET_CLIENT_SIGALGS_LIST:
+        return tls1_set_sigalgs_list(ctx->cert, parg, 1);
+
+    case SSL_CTRL_SET_CLIENT_CERT_TYPES:
+        return ssl3_set_req_cert_type(ctx->cert, parg, larg);
+
+    case SSL_CTRL_BUILD_CERT_CHAIN:
+        return ssl_build_cert_chain(NULL, ctx, larg);
+
+    case SSL_CTRL_SET_VERIFY_CERT_STORE:
+        return ssl_cert_set_cert_store(ctx->cert, parg, 0, larg);
+
+    case SSL_CTRL_SET_CHAIN_CERT_STORE:
+        return ssl_cert_set_cert_store(ctx->cert, parg, 1, larg);
+
+        /* A Thawte special :-) */
+    case SSL_CTRL_EXTRA_CHAIN_CERT:
+        if (ctx->extra_certs == NULL) {
+            if ((ctx->extra_certs = sk_X509_new_null()) == NULL) {
+                SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_MALLOC_FAILURE);
+                return 0;
+            }
+        }
+        if (!sk_X509_push(ctx->extra_certs, (X509 *)parg)) {
+            SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        break;
+
+    case SSL_CTRL_GET_EXTRA_CHAIN_CERTS:
+        if (ctx->extra_certs == NULL && larg == 0)
+            *(STACK_OF(X509) **)parg = ctx->cert->key->chain;
+        else
+            *(STACK_OF(X509) **)parg = ctx->extra_certs;
+        break;
+
+    case SSL_CTRL_CLEAR_EXTRA_CHAIN_CERTS:
+        sk_X509_pop_free(ctx->extra_certs, X509_free);
+        ctx->extra_certs = NULL;
+        break;
+
+    case SSL_CTRL_CHAIN:
+        if (larg)
+            return ssl_cert_set1_chain(NULL, ctx, (STACK_OF(X509) *)parg);
+        else
+            return ssl_cert_set0_chain(NULL, ctx, (STACK_OF(X509) *)parg);
+
+    case SSL_CTRL_CHAIN_CERT:
+        if (larg)
+            return ssl_cert_add1_chain_cert(NULL, ctx, (X509 *)parg);
+        else
+            return ssl_cert_add0_chain_cert(NULL, ctx, (X509 *)parg);
+
+    case SSL_CTRL_GET_CHAIN_CERTS:
+        *(STACK_OF(X509) **)parg = ctx->cert->key->chain;
+        break;
+
+    case SSL_CTRL_SELECT_CURRENT_CERT:
+        return ssl_cert_select_current(ctx->cert, (X509 *)parg);
+
+    case SSL_CTRL_SET_CURRENT_CERT:
+        return ssl_cert_set_current(ctx->cert, larg);
+
+    default:
+        return 0;
+    }
+    return 1;
+}
+
+long ssl3_ctx_callback_ctrl(SSL_CTX *ctx, int cmd, void (*fp) (void))
+{
+    switch (cmd) {
+#ifndef OPENSSL_NO_DH
+    case SSL_CTRL_SET_TMP_DH_CB:
+        {
+            ctx->cert->dh_tmp_cb = (DH *(*)(SSL *, int, int))fp;
+        }
+        break;
+#endif
+    case SSL_CTRL_SET_TLSEXT_SERVERNAME_CB:
+        ctx->ext.servername_cb = (int (*)(SSL *, int *, void *))fp;
+        break;
+
+    case SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB:
+        ctx->ext.status_cb = (int (*)(SSL *, void *))fp;
+        break;
+
+    case SSL_CTRL_SET_TLSEXT_TICKET_KEY_CB:
+        ctx->ext.ticket_key_cb = (int (*)(SSL *, unsigned char *,
+                                             unsigned char *,
+                                             EVP_CIPHER_CTX *,
+                                             HMAC_CTX *, int))fp;
+        break;
+
+#ifndef OPENSSL_NO_SRP
+    case SSL_CTRL_SET_SRP_VERIFY_PARAM_CB:
+        ctx->srp_ctx.srp_Mask |= SSL_kSRP;
+        ctx->srp_ctx.SRP_verify_param_callback = (int (*)(SSL *, void *))fp;
+        break;
+    case SSL_CTRL_SET_TLS_EXT_SRP_USERNAME_CB:
+        ctx->srp_ctx.srp_Mask |= SSL_kSRP;
+        ctx->srp_ctx.TLS_ext_srp_username_callback =
+            (int (*)(SSL *, int *, void *))fp;
+        break;
+    case SSL_CTRL_SET_SRP_GIVE_CLIENT_PWD_CB:
+        ctx->srp_ctx.srp_Mask |= SSL_kSRP;
+        ctx->srp_ctx.SRP_give_srp_client_pwd_callback =
+            (char *(*)(SSL *, void *))fp;
+        break;
+#endif
+    case SSL_CTRL_SET_NOT_RESUMABLE_SESS_CB:
+        {
+            ctx->not_resumable_session_cb = (int (*)(SSL *, int))fp;
+        }
+        break;
+    default:
+        return 0;
+    }
+    return 1;
+}
+
+const SSL_CIPHER *ssl3_get_cipher_by_id(uint32_t id)
+{
+    SSL_CIPHER c;
+    const SSL_CIPHER *cp;
+
+    c.id = id;
+    cp = OBJ_bsearch_ssl_cipher_id(&c, tls13_ciphers, TLS13_NUM_CIPHERS);
+    if (cp != NULL)
+        return cp;
+    cp = OBJ_bsearch_ssl_cipher_id(&c, ssl3_ciphers, SSL3_NUM_CIPHERS);
+    if (cp != NULL)
+        return cp;
+    return OBJ_bsearch_ssl_cipher_id(&c, ssl3_scsvs, SSL3_NUM_SCSVS);
+}
+
+const SSL_CIPHER *ssl3_get_cipher_by_std_name(const char *stdname)
+{
+    SSL_CIPHER *c = NULL, *tbl;
+    SSL_CIPHER *alltabs[] = {tls13_ciphers, ssl3_ciphers};
+    size_t i, j, tblsize[] = {TLS13_NUM_CIPHERS, SSL3_NUM_CIPHERS};
+
+    /* this is not efficient, necessary to optimize this? */
+    for (j = 0; j < OSSL_NELEM(alltabs); j++) {
+        for (i = 0, tbl = alltabs[j]; i < tblsize[j]; i++, tbl++) {
+            if (tbl->stdname == NULL)
+                continue;
+            if (strcmp(stdname, tbl->stdname) == 0) {
+                c = tbl;
+                break;
+            }
+        }
+    }
+    if (c == NULL) {
+        tbl = ssl3_scsvs;
+        for (i = 0; i < SSL3_NUM_SCSVS; i++, tbl++) {
+            if (strcmp(stdname, tbl->stdname) == 0) {
+                c = tbl;
+                break;
+            }
+        }
+    }
+    return c;
+}
+
+/*
+ * This function needs to check if the ciphers required are actually
+ * available
+ */
+const SSL_CIPHER *ssl3_get_cipher_by_char(const unsigned char *p)
+{
+    return ssl3_get_cipher_by_id(SSL3_CK_CIPHERSUITE_FLAG
+                                 | ((uint32_t)p[0] << 8L)
+                                 | (uint32_t)p[1]);
+}
+
+int ssl3_put_cipher_by_char(const SSL_CIPHER *c, WPACKET *pkt, size_t *len)
+{
+    if ((c->id & 0xff000000) != SSL3_CK_CIPHERSUITE_FLAG) {
+        *len = 0;
+        return 1;
+    }
+
+    if (!WPACKET_put_bytes_u16(pkt, c->id & 0xffff))
+        return 0;
+
+    *len = 2;
+    return 1;
+}
+
+/*
+ * ssl3_choose_cipher - choose a cipher from those offered by the client
+ * @s: SSL connection
+ * @clnt: ciphers offered by the client
+ * @srvr: ciphers enabled on the server?
+ *
+ * Returns the selected cipher or NULL when no common ciphers.
+ */
+const SSL_CIPHER *ssl3_choose_cipher(SSL *s, STACK_OF(SSL_CIPHER) *clnt,
+                                     STACK_OF(SSL_CIPHER) *srvr)
+{
+    const SSL_CIPHER *c, *ret = NULL;
+    STACK_OF(SSL_CIPHER) *prio, *allow;
+    int i, ii, ok, prefer_sha256 = 0;
+    unsigned long alg_k = 0, alg_a = 0, mask_k = 0, mask_a = 0;
+    const EVP_MD *mdsha256 = EVP_sha256();
+#ifndef OPENSSL_NO_CHACHA
+    STACK_OF(SSL_CIPHER) *prio_chacha = NULL;
+#endif
+
+    /* Let's see which ciphers we can support */
+
+    /*
+     * Do not set the compare functions, because this may lead to a
+     * reordering by "id". We want to keep the original ordering. We may pay
+     * a price in performance during sk_SSL_CIPHER_find(), but would have to
+     * pay with the price of sk_SSL_CIPHER_dup().
+     */
+
+#ifdef CIPHER_DEBUG
+    fprintf(stderr, "Server has %d from %p:\n", sk_SSL_CIPHER_num(srvr),
+            (void *)srvr);
+    for (i = 0; i < sk_SSL_CIPHER_num(srvr); ++i) {
+        c = sk_SSL_CIPHER_value(srvr, i);
+        fprintf(stderr, "%p:%s\n", (void *)c, c->name);
+    }
+    fprintf(stderr, "Client sent %d from %p:\n", sk_SSL_CIPHER_num(clnt),
+            (void *)clnt);
+    for (i = 0; i < sk_SSL_CIPHER_num(clnt); ++i) {
+        c = sk_SSL_CIPHER_value(clnt, i);
+        fprintf(stderr, "%p:%s\n", (void *)c, c->name);
+    }
+#endif
+
+    /* SUITE-B takes precedence over server preference and ChaCha priortiy */
+    if (tls1_suiteb(s)) {
+        prio = srvr;
+        allow = clnt;
+    } else if (s->options & SSL_OP_CIPHER_SERVER_PREFERENCE) {
+        prio = srvr;
+        allow = clnt;
+#ifndef OPENSSL_NO_CHACHA
+        /* If ChaCha20 is at the top of the client preference list,
+           and there are ChaCha20 ciphers in the server list, then
+           temporarily prioritize all ChaCha20 ciphers in the servers list. */
+        if (s->options & SSL_OP_PRIORITIZE_CHACHA && sk_SSL_CIPHER_num(clnt) > 0) {
+            c = sk_SSL_CIPHER_value(clnt, 0);
+            if (c->algorithm_enc == SSL_CHACHA20POLY1305) {
+                /* ChaCha20 is client preferred, check server... */
+                int num = sk_SSL_CIPHER_num(srvr);
+                int found = 0;
+                for (i = 0; i < num; i++) {
+                    c = sk_SSL_CIPHER_value(srvr, i);
+                    if (c->algorithm_enc == SSL_CHACHA20POLY1305) {
+                        found = 1;
+                        break;
+                    }
+                }
+                if (found) {
+                    prio_chacha = sk_SSL_CIPHER_new_reserve(NULL, num);
+                    /* if reserve fails, then there's likely a memory issue */
+                    if (prio_chacha != NULL) {
+                        /* Put all ChaCha20 at the top, starting with the one we just found */
+                        sk_SSL_CIPHER_push(prio_chacha, c);
+                        for (i++; i < num; i++) {
+                            c = sk_SSL_CIPHER_value(srvr, i);
+                            if (c->algorithm_enc == SSL_CHACHA20POLY1305)
+                                sk_SSL_CIPHER_push(prio_chacha, c);
+                        }
+                        /* Pull in the rest */
+                        for (i = 0; i < num; i++) {
+                            c = sk_SSL_CIPHER_value(srvr, i);
+                            if (c->algorithm_enc != SSL_CHACHA20POLY1305)
+                                sk_SSL_CIPHER_push(prio_chacha, c);
+                        }
+                        prio = prio_chacha;
+                    }
+                }
+            }
+        }
+# endif
+    } else {
+        prio = clnt;
+        allow = srvr;
+    }
+
+    if (SSL_IS_TLS13(s)) {
+#ifndef OPENSSL_NO_PSK
+        int j;
+
+        /*
+         * If we allow "old" style PSK callbacks, and we have no certificate (so
+         * we're not going to succeed without a PSK anyway), and we're in
+         * TLSv1.3 then the default hash for a PSK is SHA-256 (as per the
+         * TLSv1.3 spec). Therefore we should prioritise ciphersuites using
+         * that.
+         */
+        if (s->psk_server_callback != NULL) {
+            for (j = 0; j < SSL_PKEY_NUM && !ssl_has_cert(s, j); j++);
+            if (j == SSL_PKEY_NUM) {
+                /* There are no certificates */
+                prefer_sha256 = 1;
+            }
+        }
+#endif
+    } else {
+        tls1_set_cert_validity(s);
+        ssl_set_masks(s);
+    }
+
+    for (i = 0; i < sk_SSL_CIPHER_num(prio); i++) {
+        c = sk_SSL_CIPHER_value(prio, i);
+
+        /* Skip ciphers not supported by the protocol version */
+        if (!SSL_IS_DTLS(s) &&
+            ((s->version < c->min_tls) || (s->version > c->max_tls)))
+            continue;
+        if (SSL_IS_DTLS(s) &&
+            (DTLS_VERSION_LT(s->version, c->min_dtls) ||
+             DTLS_VERSION_GT(s->version, c->max_dtls)))
+            continue;
+
+        /*
+         * Since TLS 1.3 ciphersuites can be used with any auth or
+         * key exchange scheme skip tests.
+         */
+        if (!SSL_IS_TLS13(s)) {
+            mask_k = s->s3->tmp.mask_k;
+            mask_a = s->s3->tmp.mask_a;
+#ifndef OPENSSL_NO_SRP
+            if (s->srp_ctx.srp_Mask & SSL_kSRP) {
+                mask_k |= SSL_kSRP;
+                mask_a |= SSL_aSRP;
+            }
+#endif
+
+            alg_k = c->algorithm_mkey;
+            alg_a = c->algorithm_auth;
+
+#ifndef OPENSSL_NO_PSK
+            /* with PSK there must be server callback set */
+            if ((alg_k & SSL_PSK) && s->psk_server_callback == NULL)
+                continue;
+#endif                          /* OPENSSL_NO_PSK */
+
+            ok = (alg_k & mask_k) && (alg_a & mask_a);
+#ifdef CIPHER_DEBUG
+            fprintf(stderr, "%d:[%08lX:%08lX:%08lX:%08lX]%p:%s\n", ok, alg_k,
+                    alg_a, mask_k, mask_a, (void *)c, c->name);
+#endif
+
+#ifndef OPENSSL_NO_EC
+            /*
+             * if we are considering an ECC cipher suite that uses an ephemeral
+             * EC key check it
+             */
+            if (alg_k & SSL_kECDHE)
+                ok = ok && tls1_check_ec_tmp_key(s, c->id);
+#endif                          /* OPENSSL_NO_EC */
+
+            if (!ok)
+                continue;
+        }
+        ii = sk_SSL_CIPHER_find(allow, c);
+        if (ii >= 0) {
+            /* Check security callback permits this cipher */
+            if (!ssl_security(s, SSL_SECOP_CIPHER_SHARED,
+                              c->strength_bits, 0, (void *)c))
+                continue;
+#if !defined(OPENSSL_NO_EC)
+            if ((alg_k & SSL_kECDHE) && (alg_a & SSL_aECDSA)
+                && s->s3->is_probably_safari) {
+                if (!ret)
+                    ret = sk_SSL_CIPHER_value(allow, ii);
+                continue;
+            }
+#endif
+            if (prefer_sha256) {
+                const SSL_CIPHER *tmp = sk_SSL_CIPHER_value(allow, ii);
+
+                if (ssl_md(tmp->algorithm2) == mdsha256) {
+                    ret = tmp;
+                    break;
+                }
+                if (ret == NULL)
+                    ret = tmp;
+                continue;
+            }
+            ret = sk_SSL_CIPHER_value(allow, ii);
+            break;
+        }
+    }
+#ifndef OPENSSL_NO_CHACHA
+    sk_SSL_CIPHER_free(prio_chacha);
+#endif
+    return ret;
+}
+
+int ssl3_get_req_cert_type(SSL *s, WPACKET *pkt)
+{
+    uint32_t alg_k, alg_a = 0;
+
+    /* If we have custom certificate types set, use them */
+    if (s->cert->ctype)
+        return WPACKET_memcpy(pkt, s->cert->ctype, s->cert->ctype_len);
+    /* Get mask of algorithms disabled by signature list */
+    ssl_set_sig_mask(&alg_a, s, SSL_SECOP_SIGALG_MASK);
+
+    alg_k = s->s3->tmp.new_cipher->algorithm_mkey;
+
+#ifndef OPENSSL_NO_GOST
+    if (s->version >= TLS1_VERSION && (alg_k & SSL_kGOST))
+            return WPACKET_put_bytes_u8(pkt, TLS_CT_GOST01_SIGN)
+                    && WPACKET_put_bytes_u8(pkt, TLS_CT_GOST12_SIGN)
+                    && WPACKET_put_bytes_u8(pkt, TLS_CT_GOST12_512_SIGN);
+#endif
+
+    if ((s->version == SSL3_VERSION) && (alg_k & SSL_kDHE)) {
+#ifndef OPENSSL_NO_DH
+# ifndef OPENSSL_NO_RSA
+        if (!WPACKET_put_bytes_u8(pkt, SSL3_CT_RSA_EPHEMERAL_DH))
+            return 0;
+# endif
+# ifndef OPENSSL_NO_DSA
+        if (!WPACKET_put_bytes_u8(pkt, SSL3_CT_DSS_EPHEMERAL_DH))
+            return 0;
+# endif
+#endif                          /* !OPENSSL_NO_DH */
+    }
+#ifndef OPENSSL_NO_RSA
+    if (!(alg_a & SSL_aRSA) && !WPACKET_put_bytes_u8(pkt, SSL3_CT_RSA_SIGN))
+        return 0;
+#endif
+#ifndef OPENSSL_NO_DSA
+    if (!(alg_a & SSL_aDSS) && !WPACKET_put_bytes_u8(pkt, SSL3_CT_DSS_SIGN))
+        return 0;
+#endif
+#ifndef OPENSSL_NO_EC
+    /*
+     * ECDSA certs can be used with RSA cipher suites too so we don't
+     * need to check for SSL_kECDH or SSL_kECDHE
+     */
+    if (s->version >= TLS1_VERSION
+            && !(alg_a & SSL_aECDSA)
+            && !WPACKET_put_bytes_u8(pkt, TLS_CT_ECDSA_SIGN))
+        return 0;
+#endif
+    return 1;
+}
+
+static int ssl3_set_req_cert_type(CERT *c, const unsigned char *p, size_t len)
+{
+    OPENSSL_free(c->ctype);
+    c->ctype = NULL;
+    c->ctype_len = 0;
+    if (p == NULL || len == 0)
+        return 1;
+    if (len > 0xff)
+        return 0;
+    c->ctype = OPENSSL_memdup(p, len);
+    if (c->ctype == NULL)
+        return 0;
+    c->ctype_len = len;
+    return 1;
+}
+
+int ssl3_shutdown(SSL *s)
+{
+    int ret;
+
+    /*
+     * Don't do anything much if we have not done the handshake or we don't
+     * want to send messages :-)
+     */
+    if (s->quiet_shutdown || SSL_in_before(s)) {
+        s->shutdown = (SSL_SENT_SHUTDOWN | SSL_RECEIVED_SHUTDOWN);
+        return 1;
+    }
+
+    if (!(s->shutdown & SSL_SENT_SHUTDOWN)) {
+        s->shutdown |= SSL_SENT_SHUTDOWN;
+        ssl3_send_alert(s, SSL3_AL_WARNING, SSL_AD_CLOSE_NOTIFY);
+        /*
+         * our shutdown alert has been sent now, and if it still needs to be
+         * written, s->s3->alert_dispatch will be true
+         */
+        if (s->s3->alert_dispatch)
+            return -1;        /* return WANT_WRITE */
+    } else if (s->s3->alert_dispatch) {
+        /* resend it if not sent */
+        ret = s->method->ssl_dispatch_alert(s);
+        if (ret == -1) {
+            /*
+             * we only get to return -1 here the 2nd/Nth invocation, we must
+             * have already signalled return 0 upon a previous invocation,
+             * return WANT_WRITE
+             */
+            return ret;
+        }
+    } else if (!(s->shutdown & SSL_RECEIVED_SHUTDOWN)) {
+        size_t readbytes;
+        /*
+         * If we are waiting for a close from our peer, we are closed
+         */
+        s->method->ssl_read_bytes(s, 0, NULL, NULL, 0, 0, &readbytes);
+        if (!(s->shutdown & SSL_RECEIVED_SHUTDOWN)) {
+            return -1;        /* return WANT_READ */
+        }
+    }
+
+    if ((s->shutdown == (SSL_SENT_SHUTDOWN | SSL_RECEIVED_SHUTDOWN)) &&
+        !s->s3->alert_dispatch)
+        return 1;
+    else
+        return 0;
+}
+
+int ssl3_write(SSL *s, const void *buf, size_t len, size_t *written)
+{
+    clear_sys_error();
+    if (s->s3->renegotiate)
+        ssl3_renegotiate_check(s, 0);
+
+    return s->method->ssl_write_bytes(s, SSL3_RT_APPLICATION_DATA, buf, len,
+                                      written);
+}
+
+static int ssl3_read_internal(SSL *s, void *buf, size_t len, int peek,
+                              size_t *readbytes)
+{
+    int ret;
+
+    clear_sys_error();
+    if (s->s3->renegotiate)
+        ssl3_renegotiate_check(s, 0);
+    s->s3->in_read_app_data = 1;
+    ret =
+        s->method->ssl_read_bytes(s, SSL3_RT_APPLICATION_DATA, NULL, buf, len,
+                                  peek, readbytes);
+    if ((ret == -1) && (s->s3->in_read_app_data == 2)) {
+        /*
+         * ssl3_read_bytes decided to call s->handshake_func, which called
+         * ssl3_read_bytes to read handshake data. However, ssl3_read_bytes
+         * actually found application data and thinks that application data
+         * makes sense here; so disable handshake processing and try to read
+         * application data again.
+         */
+        ossl_statem_set_in_handshake(s, 1);
+        ret =
+            s->method->ssl_read_bytes(s, SSL3_RT_APPLICATION_DATA, NULL, buf,
+                                      len, peek, readbytes);
+        ossl_statem_set_in_handshake(s, 0);
+    } else
+        s->s3->in_read_app_data = 0;
+
+    return ret;
+}
+
+int ssl3_read(SSL *s, void *buf, size_t len, size_t *readbytes)
+{
+    return ssl3_read_internal(s, buf, len, 0, readbytes);
+}
+
+int ssl3_peek(SSL *s, void *buf, size_t len, size_t *readbytes)
+{
+    return ssl3_read_internal(s, buf, len, 1, readbytes);
+}
+
+int ssl3_renegotiate(SSL *s)
+{
+    if (s->handshake_func == NULL)
+        return 1;
+
+    s->s3->renegotiate = 1;
+    return 1;
+}
+
+/*
+ * Check if we are waiting to do a renegotiation and if so whether now is a
+ * good time to do it. If |initok| is true then we are being called from inside
+ * the state machine so ignore the result of SSL_in_init(s). Otherwise we
+ * should not do a renegotiation if SSL_in_init(s) is true. Returns 1 if we
+ * should do a renegotiation now and sets up the state machine for it. Otherwise
+ * returns 0.
+ */
+int ssl3_renegotiate_check(SSL *s, int initok)
+{
+    int ret = 0;
+
+    if (s->s3->renegotiate) {
+        if (!RECORD_LAYER_read_pending(&s->rlayer)
+            && !RECORD_LAYER_write_pending(&s->rlayer)
+            && (initok || !SSL_in_init(s))) {
+            /*
+             * if we are the server, and we have sent a 'RENEGOTIATE'
+             * message, we need to set the state machine into the renegotiate
+             * state.
+             */
+            ossl_statem_set_renegotiate(s);
+            s->s3->renegotiate = 0;
+            s->s3->num_renegotiations++;
+            s->s3->total_renegotiations++;
+            ret = 1;
+        }
+    }
+    return ret;
+}
+
+/*
+ * If we are using default SHA1+MD5 algorithms switch to new SHA256 PRF and
+ * handshake macs if required.
+ *
+ * If PSK and using SHA384 for TLS < 1.2 switch to default.
+ */
+long ssl_get_algorithm2(SSL *s)
+{
+    long alg2;
+    if (s->s3 == NULL || s->s3->tmp.new_cipher == NULL)
+        return -1;
+    alg2 = s->s3->tmp.new_cipher->algorithm2;
+    if (s->method->ssl3_enc->enc_flags & SSL_ENC_FLAG_SHA256_PRF) {
+        if (alg2 == (SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF))
+            return SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256;
+    } else if (s->s3->tmp.new_cipher->algorithm_mkey & SSL_PSK) {
+        if (alg2 == (SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384))
+            return SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF;
+    }
+    return alg2;
+}
+
+/*
+ * Fill a ClientRandom or ServerRandom field of length len. Returns <= 0 on
+ * failure, 1 on success.
+ */
+int ssl_fill_hello_random(SSL *s, int server, unsigned char *result, size_t len,
+                          DOWNGRADE dgrd)
+{
+    int send_time = 0, ret;
+
+    if (len < 4)
+        return 0;
+    if (server)
+        send_time = (s->mode & SSL_MODE_SEND_SERVERHELLO_TIME) != 0;
+    else
+        send_time = (s->mode & SSL_MODE_SEND_CLIENTHELLO_TIME) != 0;
+    if (send_time) {
+        unsigned long Time = (unsigned long)time(NULL);
+        unsigned char *p = result;
+
+        l2n(Time, p);
+        ret = RAND_bytes(p, len - 4);
+    } else {
+        ret = RAND_bytes(result, len);
+    }
+
+    if (ret > 0) {
+        if (!ossl_assert(sizeof(tls11downgrade) < len)
+                || !ossl_assert(sizeof(tls12downgrade) < len))
+             return 0;
+        if (dgrd == DOWNGRADE_TO_1_2)
+            memcpy(result + len - sizeof(tls12downgrade), tls12downgrade,
+                   sizeof(tls12downgrade));
+        else if (dgrd == DOWNGRADE_TO_1_1)
+            memcpy(result + len - sizeof(tls11downgrade), tls11downgrade,
+                   sizeof(tls11downgrade));
+    }
+
+    return ret;
+}
+
+int ssl_generate_master_secret(SSL *s, unsigned char *pms, size_t pmslen,
+                               int free_pms)
+{
+    unsigned long alg_k = s->s3->tmp.new_cipher->algorithm_mkey;
+    int ret = 0;
+
+    if (alg_k & SSL_PSK) {
+#ifndef OPENSSL_NO_PSK
+        unsigned char *pskpms, *t;
+        size_t psklen = s->s3->tmp.psklen;
+        size_t pskpmslen;
+
+        /* create PSK premaster_secret */
+
+        /* For plain PSK "other_secret" is psklen zeroes */
+        if (alg_k & SSL_kPSK)
+            pmslen = psklen;
+
+        pskpmslen = 4 + pmslen + psklen;
+        pskpms = OPENSSL_malloc(pskpmslen);
+        if (pskpms == NULL)
+            goto err;
+        t = pskpms;
+        s2n(pmslen, t);
+        if (alg_k & SSL_kPSK)
+            memset(t, 0, pmslen);
+        else
+            memcpy(t, pms, pmslen);
+        t += pmslen;
+        s2n(psklen, t);
+        memcpy(t, s->s3->tmp.psk, psklen);
+
+        OPENSSL_clear_free(s->s3->tmp.psk, psklen);
+        s->s3->tmp.psk = NULL;
+        if (!s->method->ssl3_enc->generate_master_secret(s,
+                    s->session->master_key,pskpms, pskpmslen,
+                    &s->session->master_key_length)) {
+            OPENSSL_clear_free(pskpms, pskpmslen);
+            /* SSLfatal() already called */
+            goto err;
+        }
+        OPENSSL_clear_free(pskpms, pskpmslen);
+#else
+        /* Should never happen */
+        goto err;
+#endif
+    } else {
+        if (!s->method->ssl3_enc->generate_master_secret(s,
+                s->session->master_key, pms, pmslen,
+                &s->session->master_key_length)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    }
+
+    ret = 1;
+ err:
+    if (pms) {
+        if (free_pms)
+            OPENSSL_clear_free(pms, pmslen);
+        else
+            OPENSSL_cleanse(pms, pmslen);
+    }
+    if (s->server == 0)
+        s->s3->tmp.pms = NULL;
+    return ret;
+}
+
+/* Generate a private key from parameters */
+EVP_PKEY *ssl_generate_pkey(EVP_PKEY *pm)
+{
+    EVP_PKEY_CTX *pctx = NULL;
+    EVP_PKEY *pkey = NULL;
+
+    if (pm == NULL)
+        return NULL;
+    pctx = EVP_PKEY_CTX_new(pm, NULL);
+    if (pctx == NULL)
+        goto err;
+    if (EVP_PKEY_keygen_init(pctx) <= 0)
+        goto err;
+    if (EVP_PKEY_keygen(pctx, &pkey) <= 0) {
+        EVP_PKEY_free(pkey);
+        pkey = NULL;
+    }
+
+    err:
+    EVP_PKEY_CTX_free(pctx);
+    return pkey;
+}
+#ifndef OPENSSL_NO_EC
+/* Generate a private key from a group ID */
+EVP_PKEY *ssl_generate_pkey_group(SSL *s, uint16_t id)
+{
+    EVP_PKEY_CTX *pctx = NULL;
+    EVP_PKEY *pkey = NULL;
+    const TLS_GROUP_INFO *ginf = tls1_group_id_lookup(id);
+    uint16_t gtype;
+
+    if (ginf == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GENERATE_PKEY_GROUP,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    gtype = ginf->flags & TLS_CURVE_TYPE;
+    if (gtype == TLS_CURVE_CUSTOM)
+        pctx = EVP_PKEY_CTX_new_id(ginf->nid, NULL);
+    else
+        pctx = EVP_PKEY_CTX_new_id(EVP_PKEY_EC, NULL);
+    if (pctx == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GENERATE_PKEY_GROUP,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if (EVP_PKEY_keygen_init(pctx) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GENERATE_PKEY_GROUP,
+                 ERR_R_EVP_LIB);
+        goto err;
+    }
+    if (gtype != TLS_CURVE_CUSTOM
+            && EVP_PKEY_CTX_set_ec_paramgen_curve_nid(pctx, ginf->nid) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GENERATE_PKEY_GROUP,
+                 ERR_R_EVP_LIB);
+        goto err;
+    }
+    if (EVP_PKEY_keygen(pctx, &pkey) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GENERATE_PKEY_GROUP,
+                 ERR_R_EVP_LIB);
+        EVP_PKEY_free(pkey);
+        pkey = NULL;
+    }
+
+ err:
+    EVP_PKEY_CTX_free(pctx);
+    return pkey;
+}
+
+/*
+ * Generate parameters from a group ID
+ */
+EVP_PKEY *ssl_generate_param_group(uint16_t id)
+{
+    EVP_PKEY_CTX *pctx = NULL;
+    EVP_PKEY *pkey = NULL;
+    const TLS_GROUP_INFO *ginf = tls1_group_id_lookup(id);
+
+    if (ginf == NULL)
+        goto err;
+
+    if ((ginf->flags & TLS_CURVE_TYPE) == TLS_CURVE_CUSTOM) {
+        pkey = EVP_PKEY_new();
+        if (pkey != NULL && EVP_PKEY_set_type(pkey, ginf->nid))
+            return pkey;
+        EVP_PKEY_free(pkey);
+        return NULL;
+    }
+
+    pctx = EVP_PKEY_CTX_new_id(EVP_PKEY_EC, NULL);
+    if (pctx == NULL)
+        goto err;
+    if (EVP_PKEY_paramgen_init(pctx) <= 0)
+        goto err;
+    if (EVP_PKEY_CTX_set_ec_paramgen_curve_nid(pctx, ginf->nid) <= 0)
+        goto err;
+    if (EVP_PKEY_paramgen(pctx, &pkey) <= 0) {
+        EVP_PKEY_free(pkey);
+        pkey = NULL;
+    }
+
+ err:
+    EVP_PKEY_CTX_free(pctx);
+    return pkey;
+}
+#endif
+
+/* Derive secrets for ECDH/DH */
+int ssl_derive(SSL *s, EVP_PKEY *privkey, EVP_PKEY *pubkey, int gensecret)
+{
+    int rv = 0;
+    unsigned char *pms = NULL;
+    size_t pmslen = 0;
+    EVP_PKEY_CTX *pctx;
+
+    if (privkey == NULL || pubkey == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_DERIVE,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    pctx = EVP_PKEY_CTX_new(privkey, NULL);
+
+    if (EVP_PKEY_derive_init(pctx) <= 0
+        || EVP_PKEY_derive_set_peer(pctx, pubkey) <= 0
+        || EVP_PKEY_derive(pctx, NULL, &pmslen) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_DERIVE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    pms = OPENSSL_malloc(pmslen);
+    if (pms == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_DERIVE,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (EVP_PKEY_derive(pctx, pms, &pmslen) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_DERIVE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    if (gensecret) {
+        /* SSLfatal() called as appropriate in the below functions */
+        if (SSL_IS_TLS13(s)) {
+            /*
+             * If we are resuming then we already generated the early secret
+             * when we created the ClientHello, so don't recreate it.
+             */
+            if (!s->hit)
+                rv = tls13_generate_secret(s, ssl_handshake_md(s), NULL, NULL,
+                                           0,
+                                           (unsigned char *)&s->early_secret);
+            else
+                rv = 1;
+
+            rv = rv && tls13_generate_handshake_secret(s, pms, pmslen);
+        } else {
+            rv = ssl_generate_master_secret(s, pms, pmslen, 0);
+        }
+    } else {
+        /* Save premaster secret */
+        s->s3->tmp.pms = pms;
+        s->s3->tmp.pmslen = pmslen;
+        pms = NULL;
+        rv = 1;
+    }
+
+ err:
+    OPENSSL_clear_free(pms, pmslen);
+    EVP_PKEY_CTX_free(pctx);
+    return rv;
+}
+
+#ifndef OPENSSL_NO_DH
+EVP_PKEY *ssl_dh_to_pkey(DH *dh)
+{
+    EVP_PKEY *ret;
+    if (dh == NULL)
+        return NULL;
+    ret = EVP_PKEY_new();
+    if (EVP_PKEY_set1_DH(ret, dh) <= 0) {
+        EVP_PKEY_free(ret);
+        return NULL;
+    }
+    return ret;
+}
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/s3_msg.c b/trunk/3rdparty/openssl-1.1-fit/ssl/s3_msg.c
new file mode 100644
index 000000000..42382547f
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/s3_msg.c
@@ -0,0 +1,104 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "ssl_locl.h"
+
+int ssl3_do_change_cipher_spec(SSL *s)
+{
+    int i;
+
+    if (s->server)
+        i = SSL3_CHANGE_CIPHER_SERVER_READ;
+    else
+        i = SSL3_CHANGE_CIPHER_CLIENT_READ;
+
+    if (s->s3->tmp.key_block == NULL) {
+        if (s->session == NULL || s->session->master_key_length == 0) {
+            /* might happen if dtls1_read_bytes() calls this */
+            SSLerr(SSL_F_SSL3_DO_CHANGE_CIPHER_SPEC, SSL_R_CCS_RECEIVED_EARLY);
+            return 0;
+        }
+
+        s->session->cipher = s->s3->tmp.new_cipher;
+        if (!s->method->ssl3_enc->setup_key_block(s))
+            return 0;
+    }
+
+    if (!s->method->ssl3_enc->change_cipher_state(s, i))
+        return 0;
+
+    return 1;
+}
+
+int ssl3_send_alert(SSL *s, int level, int desc)
+{
+    /* Map tls/ssl alert value to correct one */
+    if (SSL_TREAT_AS_TLS13(s))
+        desc = tls13_alert_code(desc);
+    else
+        desc = s->method->ssl3_enc->alert_value(desc);
+    if (s->version == SSL3_VERSION && desc == SSL_AD_PROTOCOL_VERSION)
+        desc = SSL_AD_HANDSHAKE_FAILURE; /* SSL 3.0 does not have
+                                          * protocol_version alerts */
+    if (desc < 0)
+        return -1;
+    /* If a fatal one, remove from cache */
+    if ((level == SSL3_AL_FATAL) && (s->session != NULL))
+        SSL_CTX_remove_session(s->session_ctx, s->session);
+
+    s->s3->alert_dispatch = 1;
+    s->s3->send_alert[0] = level;
+    s->s3->send_alert[1] = desc;
+    if (!RECORD_LAYER_write_pending(&s->rlayer)) {
+        /* data still being written out? */
+        return s->method->ssl_dispatch_alert(s);
+    }
+    /*
+     * else data is still being written out, we will get written some time in
+     * the future
+     */
+    return -1;
+}
+
+int ssl3_dispatch_alert(SSL *s)
+{
+    int i, j;
+    size_t alertlen;
+    void (*cb) (const SSL *ssl, int type, int val) = NULL;
+    size_t written;
+
+    s->s3->alert_dispatch = 0;
+    alertlen = 2;
+    i = do_ssl3_write(s, SSL3_RT_ALERT, &s->s3->send_alert[0], &alertlen, 1, 0,
+                      &written);
+    if (i <= 0) {
+        s->s3->alert_dispatch = 1;
+    } else {
+        /*
+         * Alert sent to BIO - now flush. If the message does not get sent due
+         * to non-blocking IO, we will not worry too much.
+         */
+        (void)BIO_flush(s->wbio);
+
+        if (s->msg_callback)
+            s->msg_callback(1, s->version, SSL3_RT_ALERT, s->s3->send_alert,
+                            2, s, s->msg_callback_arg);
+
+        if (s->info_callback != NULL)
+            cb = s->info_callback;
+        else if (s->ctx->info_callback != NULL)
+            cb = s->ctx->info_callback;
+
+        if (cb != NULL) {
+            j = (s->s3->send_alert[0] << 8) | s->s3->send_alert[1];
+            cb(s, SSL_CB_WRITE_ALERT, j);
+        }
+    }
+    return i;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_asn1.c b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_asn1.c
new file mode 100644
index 000000000..b56c5e96c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_asn1.c
@@ -0,0 +1,393 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2005 Nokia. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include "ssl_locl.h"
+#include <openssl/asn1t.h>
+#include <openssl/x509.h>
+
+typedef struct {
+    uint32_t version;
+    int32_t ssl_version;
+    ASN1_OCTET_STRING *cipher;
+    ASN1_OCTET_STRING *comp_id;
+    ASN1_OCTET_STRING *master_key;
+    ASN1_OCTET_STRING *session_id;
+    ASN1_OCTET_STRING *key_arg;
+    int64_t time;
+    int64_t timeout;
+    X509 *peer;
+    ASN1_OCTET_STRING *session_id_context;
+    int32_t verify_result;
+    ASN1_OCTET_STRING *tlsext_hostname;
+    uint64_t tlsext_tick_lifetime_hint;
+    uint32_t tlsext_tick_age_add;
+    ASN1_OCTET_STRING *tlsext_tick;
+#ifndef OPENSSL_NO_PSK
+    ASN1_OCTET_STRING *psk_identity_hint;
+    ASN1_OCTET_STRING *psk_identity;
+#endif
+#ifndef OPENSSL_NO_SRP
+    ASN1_OCTET_STRING *srp_username;
+#endif
+    uint64_t flags;
+    uint32_t max_early_data;
+    ASN1_OCTET_STRING *alpn_selected;
+    uint32_t tlsext_max_fragment_len_mode;
+    ASN1_OCTET_STRING *ticket_appdata;
+} SSL_SESSION_ASN1;
+
+ASN1_SEQUENCE(SSL_SESSION_ASN1) = {
+    ASN1_EMBED(SSL_SESSION_ASN1, version, UINT32),
+    ASN1_EMBED(SSL_SESSION_ASN1, ssl_version, INT32),
+    ASN1_SIMPLE(SSL_SESSION_ASN1, cipher, ASN1_OCTET_STRING),
+    ASN1_SIMPLE(SSL_SESSION_ASN1, session_id, ASN1_OCTET_STRING),
+    ASN1_SIMPLE(SSL_SESSION_ASN1, master_key, ASN1_OCTET_STRING),
+    ASN1_IMP_OPT(SSL_SESSION_ASN1, key_arg, ASN1_OCTET_STRING, 0),
+    ASN1_EXP_OPT_EMBED(SSL_SESSION_ASN1, time, ZINT64, 1),
+    ASN1_EXP_OPT_EMBED(SSL_SESSION_ASN1, timeout, ZINT64, 2),
+    ASN1_EXP_OPT(SSL_SESSION_ASN1, peer, X509, 3),
+    ASN1_EXP_OPT(SSL_SESSION_ASN1, session_id_context, ASN1_OCTET_STRING, 4),
+    ASN1_EXP_OPT_EMBED(SSL_SESSION_ASN1, verify_result, ZINT32, 5),
+    ASN1_EXP_OPT(SSL_SESSION_ASN1, tlsext_hostname, ASN1_OCTET_STRING, 6),
+#ifndef OPENSSL_NO_PSK
+    ASN1_EXP_OPT(SSL_SESSION_ASN1, psk_identity_hint, ASN1_OCTET_STRING, 7),
+    ASN1_EXP_OPT(SSL_SESSION_ASN1, psk_identity, ASN1_OCTET_STRING, 8),
+#endif
+    ASN1_EXP_OPT_EMBED(SSL_SESSION_ASN1, tlsext_tick_lifetime_hint, ZUINT64, 9),
+    ASN1_EXP_OPT(SSL_SESSION_ASN1, tlsext_tick, ASN1_OCTET_STRING, 10),
+    ASN1_EXP_OPT(SSL_SESSION_ASN1, comp_id, ASN1_OCTET_STRING, 11),
+#ifndef OPENSSL_NO_SRP
+    ASN1_EXP_OPT(SSL_SESSION_ASN1, srp_username, ASN1_OCTET_STRING, 12),
+#endif
+    ASN1_EXP_OPT_EMBED(SSL_SESSION_ASN1, flags, ZUINT64, 13),
+    ASN1_EXP_OPT_EMBED(SSL_SESSION_ASN1, tlsext_tick_age_add, ZUINT32, 14),
+    ASN1_EXP_OPT_EMBED(SSL_SESSION_ASN1, max_early_data, ZUINT32, 15),
+    ASN1_EXP_OPT(SSL_SESSION_ASN1, alpn_selected, ASN1_OCTET_STRING, 16),
+    ASN1_EXP_OPT_EMBED(SSL_SESSION_ASN1, tlsext_max_fragment_len_mode, ZUINT32, 17),
+    ASN1_EXP_OPT(SSL_SESSION_ASN1, ticket_appdata, ASN1_OCTET_STRING, 18)
+} static_ASN1_SEQUENCE_END(SSL_SESSION_ASN1)
+
+IMPLEMENT_STATIC_ASN1_ENCODE_FUNCTIONS(SSL_SESSION_ASN1)
+
+/* Utility functions for i2d_SSL_SESSION */
+
+/* Initialise OCTET STRING from buffer and length */
+
+static void ssl_session_oinit(ASN1_OCTET_STRING **dest, ASN1_OCTET_STRING *os,
+                              unsigned char *data, size_t len)
+{
+    os->data = data;
+    os->length = (int)len;
+    os->flags = 0;
+    *dest = os;
+}
+
+/* Initialise OCTET STRING from string */
+static void ssl_session_sinit(ASN1_OCTET_STRING **dest, ASN1_OCTET_STRING *os,
+                              char *data)
+{
+    if (data != NULL)
+        ssl_session_oinit(dest, os, (unsigned char *)data, strlen(data));
+    else
+        *dest = NULL;
+}
+
+int i2d_SSL_SESSION(SSL_SESSION *in, unsigned char **pp)
+{
+
+    SSL_SESSION_ASN1 as;
+
+    ASN1_OCTET_STRING cipher;
+    unsigned char cipher_data[2];
+    ASN1_OCTET_STRING master_key, session_id, sid_ctx;
+
+#ifndef OPENSSL_NO_COMP
+    ASN1_OCTET_STRING comp_id;
+    unsigned char comp_id_data;
+#endif
+    ASN1_OCTET_STRING tlsext_hostname, tlsext_tick;
+#ifndef OPENSSL_NO_SRP
+    ASN1_OCTET_STRING srp_username;
+#endif
+#ifndef OPENSSL_NO_PSK
+    ASN1_OCTET_STRING psk_identity, psk_identity_hint;
+#endif
+    ASN1_OCTET_STRING alpn_selected;
+    ASN1_OCTET_STRING ticket_appdata;
+
+    long l;
+
+    if ((in == NULL) || ((in->cipher == NULL) && (in->cipher_id == 0)))
+        return 0;
+
+    memset(&as, 0, sizeof(as));
+
+    as.version = SSL_SESSION_ASN1_VERSION;
+    as.ssl_version = in->ssl_version;
+
+    if (in->cipher == NULL)
+        l = in->cipher_id;
+    else
+        l = in->cipher->id;
+    cipher_data[0] = ((unsigned char)(l >> 8L)) & 0xff;
+    cipher_data[1] = ((unsigned char)(l)) & 0xff;
+
+    ssl_session_oinit(&as.cipher, &cipher, cipher_data, 2);
+
+#ifndef OPENSSL_NO_COMP
+    if (in->compress_meth) {
+        comp_id_data = (unsigned char)in->compress_meth;
+        ssl_session_oinit(&as.comp_id, &comp_id, &comp_id_data, 1);
+    }
+#endif
+
+    ssl_session_oinit(&as.master_key, &master_key,
+                      in->master_key, in->master_key_length);
+
+    ssl_session_oinit(&as.session_id, &session_id,
+                      in->session_id, in->session_id_length);
+
+    ssl_session_oinit(&as.session_id_context, &sid_ctx,
+                      in->sid_ctx, in->sid_ctx_length);
+
+    as.time = in->time;
+    as.timeout = in->timeout;
+    as.verify_result = in->verify_result;
+
+    as.peer = in->peer;
+
+    ssl_session_sinit(&as.tlsext_hostname, &tlsext_hostname,
+                      in->ext.hostname);
+    if (in->ext.tick) {
+        ssl_session_oinit(&as.tlsext_tick, &tlsext_tick,
+                          in->ext.tick, in->ext.ticklen);
+    }
+    if (in->ext.tick_lifetime_hint > 0)
+        as.tlsext_tick_lifetime_hint = in->ext.tick_lifetime_hint;
+    as.tlsext_tick_age_add = in->ext.tick_age_add;
+#ifndef OPENSSL_NO_PSK
+    ssl_session_sinit(&as.psk_identity_hint, &psk_identity_hint,
+                      in->psk_identity_hint);
+    ssl_session_sinit(&as.psk_identity, &psk_identity, in->psk_identity);
+#endif                          /* OPENSSL_NO_PSK */
+#ifndef OPENSSL_NO_SRP
+    ssl_session_sinit(&as.srp_username, &srp_username, in->srp_username);
+#endif                          /* OPENSSL_NO_SRP */
+
+    as.flags = in->flags;
+    as.max_early_data = in->ext.max_early_data;
+
+    if (in->ext.alpn_selected == NULL)
+        as.alpn_selected = NULL;
+    else
+        ssl_session_oinit(&as.alpn_selected, &alpn_selected,
+                          in->ext.alpn_selected, in->ext.alpn_selected_len);
+
+    as.tlsext_max_fragment_len_mode = in->ext.max_fragment_len_mode;
+
+    if (in->ticket_appdata == NULL)
+        as.ticket_appdata = NULL;
+    else
+        ssl_session_oinit(&as.ticket_appdata, &ticket_appdata,
+                          in->ticket_appdata, in->ticket_appdata_len);
+
+    return i2d_SSL_SESSION_ASN1(&as, pp);
+
+}
+
+/* Utility functions for d2i_SSL_SESSION */
+
+/* OPENSSL_strndup an OCTET STRING */
+
+static int ssl_session_strndup(char **pdst, ASN1_OCTET_STRING *src)
+{
+    OPENSSL_free(*pdst);
+    *pdst = NULL;
+    if (src == NULL)
+        return 1;
+    *pdst = OPENSSL_strndup((char *)src->data, src->length);
+    if (*pdst == NULL)
+        return 0;
+    return 1;
+}
+
+/* Copy an OCTET STRING, return error if it exceeds maximum length */
+
+static int ssl_session_memcpy(unsigned char *dst, size_t *pdstlen,
+                              ASN1_OCTET_STRING *src, size_t maxlen)
+{
+    if (src == NULL) {
+        *pdstlen = 0;
+        return 1;
+    }
+    if (src->length < 0 || src->length > (int)maxlen)
+        return 0;
+    memcpy(dst, src->data, src->length);
+    *pdstlen = src->length;
+    return 1;
+}
+
+SSL_SESSION *d2i_SSL_SESSION(SSL_SESSION **a, const unsigned char **pp,
+                             long length)
+{
+    long id;
+    size_t tmpl;
+    const unsigned char *p = *pp;
+    SSL_SESSION_ASN1 *as = NULL;
+    SSL_SESSION *ret = NULL;
+
+    as = d2i_SSL_SESSION_ASN1(NULL, &p, length);
+    /* ASN.1 code returns suitable error */
+    if (as == NULL)
+        goto err;
+
+    if (!a || !*a) {
+        ret = SSL_SESSION_new();
+        if (ret == NULL)
+            goto err;
+    } else {
+        ret = *a;
+    }
+
+    if (as->version != SSL_SESSION_ASN1_VERSION) {
+        SSLerr(SSL_F_D2I_SSL_SESSION, SSL_R_UNKNOWN_SSL_VERSION);
+        goto err;
+    }
+
+    if ((as->ssl_version >> 8) != SSL3_VERSION_MAJOR
+        && (as->ssl_version >> 8) != DTLS1_VERSION_MAJOR
+        && as->ssl_version != DTLS1_BAD_VER) {
+        SSLerr(SSL_F_D2I_SSL_SESSION, SSL_R_UNSUPPORTED_SSL_VERSION);
+        goto err;
+    }
+
+    ret->ssl_version = (int)as->ssl_version;
+
+    if (as->cipher->length != 2) {
+        SSLerr(SSL_F_D2I_SSL_SESSION, SSL_R_CIPHER_CODE_WRONG_LENGTH);
+        goto err;
+    }
+
+    id = 0x03000000L | ((unsigned long)as->cipher->data[0] << 8L)
+                     | (unsigned long)as->cipher->data[1];
+
+    ret->cipher_id = id;
+    ret->cipher = ssl3_get_cipher_by_id(id);
+    if (ret->cipher == NULL)
+        goto err;
+
+    if (!ssl_session_memcpy(ret->session_id, &ret->session_id_length,
+                            as->session_id, SSL3_MAX_SSL_SESSION_ID_LENGTH))
+        goto err;
+
+    if (!ssl_session_memcpy(ret->master_key, &tmpl,
+                            as->master_key, TLS13_MAX_RESUMPTION_PSK_LENGTH))
+        goto err;
+
+    ret->master_key_length = tmpl;
+
+    if (as->time != 0)
+        ret->time = (long)as->time;
+    else
+        ret->time = (long)time(NULL);
+
+    if (as->timeout != 0)
+        ret->timeout = (long)as->timeout;
+    else
+        ret->timeout = 3;
+
+    X509_free(ret->peer);
+    ret->peer = as->peer;
+    as->peer = NULL;
+
+    if (!ssl_session_memcpy(ret->sid_ctx, &ret->sid_ctx_length,
+                            as->session_id_context, SSL_MAX_SID_CTX_LENGTH))
+        goto err;
+
+    /* NB: this defaults to zero which is X509_V_OK */
+    ret->verify_result = as->verify_result;
+
+    if (!ssl_session_strndup(&ret->ext.hostname, as->tlsext_hostname))
+        goto err;
+
+#ifndef OPENSSL_NO_PSK
+    if (!ssl_session_strndup(&ret->psk_identity_hint, as->psk_identity_hint))
+        goto err;
+    if (!ssl_session_strndup(&ret->psk_identity, as->psk_identity))
+        goto err;
+#endif
+
+    ret->ext.tick_lifetime_hint = (unsigned long)as->tlsext_tick_lifetime_hint;
+    ret->ext.tick_age_add = as->tlsext_tick_age_add;
+    OPENSSL_free(ret->ext.tick);
+    if (as->tlsext_tick != NULL) {
+        ret->ext.tick = as->tlsext_tick->data;
+        ret->ext.ticklen = as->tlsext_tick->length;
+        as->tlsext_tick->data = NULL;
+    } else {
+        ret->ext.tick = NULL;
+    }
+#ifndef OPENSSL_NO_COMP
+    if (as->comp_id) {
+        if (as->comp_id->length != 1) {
+            SSLerr(SSL_F_D2I_SSL_SESSION, SSL_R_BAD_LENGTH);
+            goto err;
+        }
+        ret->compress_meth = as->comp_id->data[0];
+    } else {
+        ret->compress_meth = 0;
+    }
+#endif
+
+#ifndef OPENSSL_NO_SRP
+    if (!ssl_session_strndup(&ret->srp_username, as->srp_username))
+        goto err;
+#endif                          /* OPENSSL_NO_SRP */
+    /* Flags defaults to zero which is fine */
+    ret->flags = (int32_t)as->flags;
+    ret->ext.max_early_data = as->max_early_data;
+
+    OPENSSL_free(ret->ext.alpn_selected);
+    if (as->alpn_selected != NULL) {
+        ret->ext.alpn_selected = as->alpn_selected->data;
+        ret->ext.alpn_selected_len = as->alpn_selected->length;
+        as->alpn_selected->data = NULL;
+    } else {
+        ret->ext.alpn_selected = NULL;
+        ret->ext.alpn_selected_len = 0;
+    }
+
+    ret->ext.max_fragment_len_mode = as->tlsext_max_fragment_len_mode;
+
+    OPENSSL_free(ret->ticket_appdata);
+    if (as->ticket_appdata != NULL) {
+        ret->ticket_appdata = as->ticket_appdata->data;
+        ret->ticket_appdata_len = as->ticket_appdata->length;
+        as->ticket_appdata->data = NULL;
+    } else {
+        ret->ticket_appdata = NULL;
+        ret->ticket_appdata_len = 0;
+    }
+
+    M_ASN1_free_of(as, SSL_SESSION_ASN1);
+
+    if ((a != NULL) && (*a == NULL))
+        *a = ret;
+    *pp = p;
+    return ret;
+
+ err:
+    M_ASN1_free_of(as, SSL_SESSION_ASN1);
+    if ((a == NULL) || (*a != ret))
+        SSL_SESSION_free(ret);
+    return NULL;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_cert.c b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_cert.c
new file mode 100644
index 000000000..331450789
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_cert.c
@@ -0,0 +1,1040 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <sys/types.h>
+
+#include "internal/nelem.h"
+#include "internal/o_dir.h"
+#include <openssl/bio.h>
+#include <openssl/pem.h>
+#include <openssl/x509v3.h>
+#include <openssl/dh.h>
+#include <openssl/bn.h>
+#include <openssl/crypto.h>
+#include "internal/refcount.h"
+#include "ssl_locl.h"
+#include "ssl_cert_table.h"
+#include "internal/thread_once.h"
+
+static int ssl_security_default_callback(const SSL *s, const SSL_CTX *ctx,
+                                         int op, int bits, int nid, void *other,
+                                         void *ex);
+
+static CRYPTO_ONCE ssl_x509_store_ctx_once = CRYPTO_ONCE_STATIC_INIT;
+static volatile int ssl_x509_store_ctx_idx = -1;
+
+DEFINE_RUN_ONCE_STATIC(ssl_x509_store_ctx_init)
+{
+    ssl_x509_store_ctx_idx = X509_STORE_CTX_get_ex_new_index(0,
+                                                             "SSL for verify callback",
+                                                             NULL, NULL, NULL);
+    return ssl_x509_store_ctx_idx >= 0;
+}
+
+int SSL_get_ex_data_X509_STORE_CTX_idx(void)
+{
+
+    if (!RUN_ONCE(&ssl_x509_store_ctx_once, ssl_x509_store_ctx_init))
+        return -1;
+    return ssl_x509_store_ctx_idx;
+}
+
+CERT *ssl_cert_new(void)
+{
+    CERT *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    if (ret == NULL) {
+        SSLerr(SSL_F_SSL_CERT_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ret->key = &(ret->pkeys[SSL_PKEY_RSA]);
+    ret->references = 1;
+    ret->sec_cb = ssl_security_default_callback;
+    ret->sec_level = OPENSSL_TLS_SECURITY_LEVEL;
+    ret->sec_ex = NULL;
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        SSLerr(SSL_F_SSL_CERT_NEW, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+
+    return ret;
+}
+
+CERT *ssl_cert_dup(CERT *cert)
+{
+    CERT *ret = OPENSSL_zalloc(sizeof(*ret));
+    int i;
+
+    if (ret == NULL) {
+        SSLerr(SSL_F_SSL_CERT_DUP, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ret->references = 1;
+    ret->key = &ret->pkeys[cert->key - cert->pkeys];
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        SSLerr(SSL_F_SSL_CERT_DUP, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+#ifndef OPENSSL_NO_DH
+    if (cert->dh_tmp != NULL) {
+        ret->dh_tmp = cert->dh_tmp;
+        EVP_PKEY_up_ref(ret->dh_tmp);
+    }
+    ret->dh_tmp_cb = cert->dh_tmp_cb;
+    ret->dh_tmp_auto = cert->dh_tmp_auto;
+#endif
+
+    for (i = 0; i < SSL_PKEY_NUM; i++) {
+        CERT_PKEY *cpk = cert->pkeys + i;
+        CERT_PKEY *rpk = ret->pkeys + i;
+        if (cpk->x509 != NULL) {
+            rpk->x509 = cpk->x509;
+            X509_up_ref(rpk->x509);
+        }
+
+        if (cpk->privatekey != NULL) {
+            rpk->privatekey = cpk->privatekey;
+            EVP_PKEY_up_ref(cpk->privatekey);
+        }
+
+        if (cpk->chain) {
+            rpk->chain = X509_chain_up_ref(cpk->chain);
+            if (!rpk->chain) {
+                SSLerr(SSL_F_SSL_CERT_DUP, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+        }
+        if (cert->pkeys[i].serverinfo != NULL) {
+            /* Just copy everything. */
+            ret->pkeys[i].serverinfo =
+                OPENSSL_malloc(cert->pkeys[i].serverinfo_length);
+            if (ret->pkeys[i].serverinfo == NULL) {
+                SSLerr(SSL_F_SSL_CERT_DUP, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            ret->pkeys[i].serverinfo_length = cert->pkeys[i].serverinfo_length;
+            memcpy(ret->pkeys[i].serverinfo,
+                   cert->pkeys[i].serverinfo, cert->pkeys[i].serverinfo_length);
+        }
+    }
+
+    /* Configured sigalgs copied across */
+    if (cert->conf_sigalgs) {
+        ret->conf_sigalgs = OPENSSL_malloc(cert->conf_sigalgslen
+                                           * sizeof(*cert->conf_sigalgs));
+        if (ret->conf_sigalgs == NULL)
+            goto err;
+        memcpy(ret->conf_sigalgs, cert->conf_sigalgs,
+               cert->conf_sigalgslen * sizeof(*cert->conf_sigalgs));
+        ret->conf_sigalgslen = cert->conf_sigalgslen;
+    } else
+        ret->conf_sigalgs = NULL;
+
+    if (cert->client_sigalgs) {
+        ret->client_sigalgs = OPENSSL_malloc(cert->client_sigalgslen
+                                             * sizeof(*cert->client_sigalgs));
+        if (ret->client_sigalgs == NULL)
+            goto err;
+        memcpy(ret->client_sigalgs, cert->client_sigalgs,
+               cert->client_sigalgslen * sizeof(*cert->client_sigalgs));
+        ret->client_sigalgslen = cert->client_sigalgslen;
+    } else
+        ret->client_sigalgs = NULL;
+    /* Shared sigalgs also NULL */
+    ret->shared_sigalgs = NULL;
+    /* Copy any custom client certificate types */
+    if (cert->ctype) {
+        ret->ctype = OPENSSL_memdup(cert->ctype, cert->ctype_len);
+        if (ret->ctype == NULL)
+            goto err;
+        ret->ctype_len = cert->ctype_len;
+    }
+
+    ret->cert_flags = cert->cert_flags;
+
+    ret->cert_cb = cert->cert_cb;
+    ret->cert_cb_arg = cert->cert_cb_arg;
+
+    if (cert->verify_store) {
+        X509_STORE_up_ref(cert->verify_store);
+        ret->verify_store = cert->verify_store;
+    }
+
+    if (cert->chain_store) {
+        X509_STORE_up_ref(cert->chain_store);
+        ret->chain_store = cert->chain_store;
+    }
+
+    ret->sec_cb = cert->sec_cb;
+    ret->sec_level = cert->sec_level;
+    ret->sec_ex = cert->sec_ex;
+
+    if (!custom_exts_copy(&ret->custext, &cert->custext))
+        goto err;
+#ifndef OPENSSL_NO_PSK
+    if (cert->psk_identity_hint) {
+        ret->psk_identity_hint = OPENSSL_strdup(cert->psk_identity_hint);
+        if (ret->psk_identity_hint == NULL)
+            goto err;
+    }
+#endif
+    return ret;
+
+ err:
+    ssl_cert_free(ret);
+
+    return NULL;
+}
+
+/* Free up and clear all certificates and chains */
+
+void ssl_cert_clear_certs(CERT *c)
+{
+    int i;
+    if (c == NULL)
+        return;
+    for (i = 0; i < SSL_PKEY_NUM; i++) {
+        CERT_PKEY *cpk = c->pkeys + i;
+        X509_free(cpk->x509);
+        cpk->x509 = NULL;
+        EVP_PKEY_free(cpk->privatekey);
+        cpk->privatekey = NULL;
+        sk_X509_pop_free(cpk->chain, X509_free);
+        cpk->chain = NULL;
+        OPENSSL_free(cpk->serverinfo);
+        cpk->serverinfo = NULL;
+        cpk->serverinfo_length = 0;
+    }
+}
+
+void ssl_cert_free(CERT *c)
+{
+    int i;
+
+    if (c == NULL)
+        return;
+    CRYPTO_DOWN_REF(&c->references, &i, c->lock);
+    REF_PRINT_COUNT("CERT", c);
+    if (i > 0)
+        return;
+    REF_ASSERT_ISNT(i < 0);
+
+#ifndef OPENSSL_NO_DH
+    EVP_PKEY_free(c->dh_tmp);
+#endif
+
+    ssl_cert_clear_certs(c);
+    OPENSSL_free(c->conf_sigalgs);
+    OPENSSL_free(c->client_sigalgs);
+    OPENSSL_free(c->shared_sigalgs);
+    OPENSSL_free(c->ctype);
+    X509_STORE_free(c->verify_store);
+    X509_STORE_free(c->chain_store);
+    custom_exts_free(&c->custext);
+#ifndef OPENSSL_NO_PSK
+    OPENSSL_free(c->psk_identity_hint);
+#endif
+    CRYPTO_THREAD_lock_free(c->lock);
+    OPENSSL_free(c);
+}
+
+int ssl_cert_set0_chain(SSL *s, SSL_CTX *ctx, STACK_OF(X509) *chain)
+{
+    int i, r;
+    CERT_PKEY *cpk = s ? s->cert->key : ctx->cert->key;
+    if (!cpk)
+        return 0;
+    for (i = 0; i < sk_X509_num(chain); i++) {
+        r = ssl_security_cert(s, ctx, sk_X509_value(chain, i), 0, 0);
+        if (r != 1) {
+            SSLerr(SSL_F_SSL_CERT_SET0_CHAIN, r);
+            return 0;
+        }
+    }
+    sk_X509_pop_free(cpk->chain, X509_free);
+    cpk->chain = chain;
+    return 1;
+}
+
+int ssl_cert_set1_chain(SSL *s, SSL_CTX *ctx, STACK_OF(X509) *chain)
+{
+    STACK_OF(X509) *dchain;
+    if (!chain)
+        return ssl_cert_set0_chain(s, ctx, NULL);
+    dchain = X509_chain_up_ref(chain);
+    if (!dchain)
+        return 0;
+    if (!ssl_cert_set0_chain(s, ctx, dchain)) {
+        sk_X509_pop_free(dchain, X509_free);
+        return 0;
+    }
+    return 1;
+}
+
+int ssl_cert_add0_chain_cert(SSL *s, SSL_CTX *ctx, X509 *x)
+{
+    int r;
+    CERT_PKEY *cpk = s ? s->cert->key : ctx->cert->key;
+    if (!cpk)
+        return 0;
+    r = ssl_security_cert(s, ctx, x, 0, 0);
+    if (r != 1) {
+        SSLerr(SSL_F_SSL_CERT_ADD0_CHAIN_CERT, r);
+        return 0;
+    }
+    if (!cpk->chain)
+        cpk->chain = sk_X509_new_null();
+    if (!cpk->chain || !sk_X509_push(cpk->chain, x))
+        return 0;
+    return 1;
+}
+
+int ssl_cert_add1_chain_cert(SSL *s, SSL_CTX *ctx, X509 *x)
+{
+    if (!ssl_cert_add0_chain_cert(s, ctx, x))
+        return 0;
+    X509_up_ref(x);
+    return 1;
+}
+
+int ssl_cert_select_current(CERT *c, X509 *x)
+{
+    int i;
+    if (x == NULL)
+        return 0;
+    for (i = 0; i < SSL_PKEY_NUM; i++) {
+        CERT_PKEY *cpk = c->pkeys + i;
+        if (cpk->x509 == x && cpk->privatekey) {
+            c->key = cpk;
+            return 1;
+        }
+    }
+
+    for (i = 0; i < SSL_PKEY_NUM; i++) {
+        CERT_PKEY *cpk = c->pkeys + i;
+        if (cpk->privatekey && cpk->x509 && !X509_cmp(cpk->x509, x)) {
+            c->key = cpk;
+            return 1;
+        }
+    }
+    return 0;
+}
+
+int ssl_cert_set_current(CERT *c, long op)
+{
+    int i, idx;
+    if (!c)
+        return 0;
+    if (op == SSL_CERT_SET_FIRST)
+        idx = 0;
+    else if (op == SSL_CERT_SET_NEXT) {
+        idx = (int)(c->key - c->pkeys + 1);
+        if (idx >= SSL_PKEY_NUM)
+            return 0;
+    } else
+        return 0;
+    for (i = idx; i < SSL_PKEY_NUM; i++) {
+        CERT_PKEY *cpk = c->pkeys + i;
+        if (cpk->x509 && cpk->privatekey) {
+            c->key = cpk;
+            return 1;
+        }
+    }
+    return 0;
+}
+
+void ssl_cert_set_cert_cb(CERT *c, int (*cb) (SSL *ssl, void *arg), void *arg)
+{
+    c->cert_cb = cb;
+    c->cert_cb_arg = arg;
+}
+
+int ssl_verify_cert_chain(SSL *s, STACK_OF(X509) *sk)
+{
+    X509 *x;
+    int i = 0;
+    X509_STORE *verify_store;
+    X509_STORE_CTX *ctx = NULL;
+    X509_VERIFY_PARAM *param;
+
+    if ((sk == NULL) || (sk_X509_num(sk) == 0))
+        return 0;
+
+    if (s->cert->verify_store)
+        verify_store = s->cert->verify_store;
+    else
+        verify_store = s->ctx->cert_store;
+
+    ctx = X509_STORE_CTX_new();
+    if (ctx == NULL) {
+        SSLerr(SSL_F_SSL_VERIFY_CERT_CHAIN, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    x = sk_X509_value(sk, 0);
+    if (!X509_STORE_CTX_init(ctx, verify_store, x, sk)) {
+        SSLerr(SSL_F_SSL_VERIFY_CERT_CHAIN, ERR_R_X509_LIB);
+        goto end;
+    }
+    param = X509_STORE_CTX_get0_param(ctx);
+    /*
+     * XXX: Separate @AUTHSECLEVEL and @TLSSECLEVEL would be useful at some
+     * point, for now a single @SECLEVEL sets the same policy for TLS crypto
+     * and PKI authentication.
+     */
+    X509_VERIFY_PARAM_set_auth_level(param, SSL_get_security_level(s));
+
+    /* Set suite B flags if needed */
+    X509_STORE_CTX_set_flags(ctx, tls1_suiteb(s));
+    if (!X509_STORE_CTX_set_ex_data
+        (ctx, SSL_get_ex_data_X509_STORE_CTX_idx(), s)) {
+        goto end;
+    }
+
+    /* Verify via DANE if enabled */
+    if (DANETLS_ENABLED(&s->dane))
+        X509_STORE_CTX_set0_dane(ctx, &s->dane);
+
+    /*
+     * We need to inherit the verify parameters. These can be determined by
+     * the context: if its a server it will verify SSL client certificates or
+     * vice versa.
+     */
+
+    X509_STORE_CTX_set_default(ctx, s->server ? "ssl_client" : "ssl_server");
+    /*
+     * Anything non-default in "s->param" should overwrite anything in the ctx.
+     */
+    X509_VERIFY_PARAM_set1(param, s->param);
+
+    if (s->verify_callback)
+        X509_STORE_CTX_set_verify_cb(ctx, s->verify_callback);
+
+    if (s->ctx->app_verify_callback != NULL)
+        i = s->ctx->app_verify_callback(ctx, s->ctx->app_verify_arg);
+    else
+        i = X509_verify_cert(ctx);
+
+    s->verify_result = X509_STORE_CTX_get_error(ctx);
+    sk_X509_pop_free(s->verified_chain, X509_free);
+    s->verified_chain = NULL;
+    if (X509_STORE_CTX_get0_chain(ctx) != NULL) {
+        s->verified_chain = X509_STORE_CTX_get1_chain(ctx);
+        if (s->verified_chain == NULL) {
+            SSLerr(SSL_F_SSL_VERIFY_CERT_CHAIN, ERR_R_MALLOC_FAILURE);
+            i = 0;
+        }
+    }
+
+    /* Move peername from the store context params to the SSL handle's */
+    X509_VERIFY_PARAM_move_peername(s->param, param);
+
+ end:
+    X509_STORE_CTX_free(ctx);
+    return i;
+}
+
+static void set0_CA_list(STACK_OF(X509_NAME) **ca_list,
+                        STACK_OF(X509_NAME) *name_list)
+{
+    sk_X509_NAME_pop_free(*ca_list, X509_NAME_free);
+    *ca_list = name_list;
+}
+
+STACK_OF(X509_NAME) *SSL_dup_CA_list(const STACK_OF(X509_NAME) *sk)
+{
+    int i;
+    const int num = sk_X509_NAME_num(sk);
+    STACK_OF(X509_NAME) *ret;
+    X509_NAME *name;
+
+    ret = sk_X509_NAME_new_reserve(NULL, num);
+    if (ret == NULL) {
+        SSLerr(SSL_F_SSL_DUP_CA_LIST, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+    for (i = 0; i < num; i++) {
+        name = X509_NAME_dup(sk_X509_NAME_value(sk, i));
+        if (name == NULL) {
+            SSLerr(SSL_F_SSL_DUP_CA_LIST, ERR_R_MALLOC_FAILURE);
+            sk_X509_NAME_pop_free(ret, X509_NAME_free);
+            return NULL;
+        }
+        sk_X509_NAME_push(ret, name);   /* Cannot fail after reserve call */
+    }
+    return ret;
+}
+
+void SSL_set0_CA_list(SSL *s, STACK_OF(X509_NAME) *name_list)
+{
+    set0_CA_list(&s->ca_names, name_list);
+}
+
+void SSL_CTX_set0_CA_list(SSL_CTX *ctx, STACK_OF(X509_NAME) *name_list)
+{
+    set0_CA_list(&ctx->ca_names, name_list);
+}
+
+const STACK_OF(X509_NAME) *SSL_CTX_get0_CA_list(const SSL_CTX *ctx)
+{
+    return ctx->ca_names;
+}
+
+const STACK_OF(X509_NAME) *SSL_get0_CA_list(const SSL *s)
+{
+    return s->ca_names != NULL ? s->ca_names : s->ctx->ca_names;
+}
+
+void SSL_CTX_set_client_CA_list(SSL_CTX *ctx, STACK_OF(X509_NAME) *name_list)
+{
+    set0_CA_list(&ctx->client_ca_names, name_list);
+}
+
+STACK_OF(X509_NAME) *SSL_CTX_get_client_CA_list(const SSL_CTX *ctx)
+{
+    return ctx->client_ca_names;
+}
+
+void SSL_set_client_CA_list(SSL *s, STACK_OF(X509_NAME) *name_list)
+{
+    set0_CA_list(&s->client_ca_names, name_list);
+}
+
+const STACK_OF(X509_NAME) *SSL_get0_peer_CA_list(const SSL *s)
+{
+    return s->s3 != NULL ? s->s3->tmp.peer_ca_names : NULL;
+}
+
+STACK_OF(X509_NAME) *SSL_get_client_CA_list(const SSL *s)
+{
+    if (!s->server)
+        return s->s3 != NULL ?  s->s3->tmp.peer_ca_names : NULL;
+    return s->client_ca_names != NULL ?  s->client_ca_names
+                                      : s->ctx->client_ca_names;
+}
+
+static int add_ca_name(STACK_OF(X509_NAME) **sk, const X509 *x)
+{
+    X509_NAME *name;
+
+    if (x == NULL)
+        return 0;
+    if (*sk == NULL && ((*sk = sk_X509_NAME_new_null()) == NULL))
+        return 0;
+
+    if ((name = X509_NAME_dup(X509_get_subject_name(x))) == NULL)
+        return 0;
+
+    if (!sk_X509_NAME_push(*sk, name)) {
+        X509_NAME_free(name);
+        return 0;
+    }
+    return 1;
+}
+
+int SSL_add1_to_CA_list(SSL *ssl, const X509 *x)
+{
+    return add_ca_name(&ssl->ca_names, x);
+}
+
+int SSL_CTX_add1_to_CA_list(SSL_CTX *ctx, const X509 *x)
+{
+    return add_ca_name(&ctx->ca_names, x);
+}
+
+/*
+ * The following two are older names are to be replaced with
+ * SSL(_CTX)_add1_to_CA_list
+ */
+int SSL_add_client_CA(SSL *ssl, X509 *x)
+{
+    return add_ca_name(&ssl->client_ca_names, x);
+}
+
+int SSL_CTX_add_client_CA(SSL_CTX *ctx, X509 *x)
+{
+    return add_ca_name(&ctx->client_ca_names, x);
+}
+
+static int xname_cmp(const X509_NAME *a, const X509_NAME *b)
+{
+    unsigned char *abuf = NULL, *bbuf = NULL;
+    int alen, blen, ret;
+
+    /* X509_NAME_cmp() itself casts away constness in this way, so
+     * assume it's safe:
+     */
+    alen = i2d_X509_NAME((X509_NAME *)a, &abuf);
+    blen = i2d_X509_NAME((X509_NAME *)b, &bbuf);
+
+    if (alen < 0 || blen < 0)
+        ret = -2;
+    else if (alen != blen)
+        ret = alen - blen;
+    else /* alen == blen */
+        ret = memcmp(abuf, bbuf, alen);
+
+    OPENSSL_free(abuf);
+    OPENSSL_free(bbuf);
+
+    return ret;
+}
+
+static int xname_sk_cmp(const X509_NAME *const *a, const X509_NAME *const *b)
+{
+    return xname_cmp(*a, *b);
+}
+
+static unsigned long xname_hash(const X509_NAME *a)
+{
+    return X509_NAME_hash((X509_NAME *)a);
+}
+
+/**
+ * Load CA certs from a file into a ::STACK. Note that it is somewhat misnamed;
+ * it doesn't really have anything to do with clients (except that a common use
+ * for a stack of CAs is to send it to the client). Actually, it doesn't have
+ * much to do with CAs, either, since it will load any old cert.
+ * \param file the file containing one or more certs.
+ * \return a ::STACK containing the certs.
+ */
+STACK_OF(X509_NAME) *SSL_load_client_CA_file(const char *file)
+{
+    BIO *in = BIO_new(BIO_s_file());
+    X509 *x = NULL;
+    X509_NAME *xn = NULL;
+    STACK_OF(X509_NAME) *ret = NULL;
+    LHASH_OF(X509_NAME) *name_hash = lh_X509_NAME_new(xname_hash, xname_cmp);
+
+    if ((name_hash == NULL) || (in == NULL)) {
+        SSLerr(SSL_F_SSL_LOAD_CLIENT_CA_FILE, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (!BIO_read_filename(in, file))
+        goto err;
+
+    for (;;) {
+        if (PEM_read_bio_X509(in, &x, NULL, NULL) == NULL)
+            break;
+        if (ret == NULL) {
+            ret = sk_X509_NAME_new_null();
+            if (ret == NULL) {
+                SSLerr(SSL_F_SSL_LOAD_CLIENT_CA_FILE, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+        }
+        if ((xn = X509_get_subject_name(x)) == NULL)
+            goto err;
+        /* check for duplicates */
+        xn = X509_NAME_dup(xn);
+        if (xn == NULL)
+            goto err;
+        if (lh_X509_NAME_retrieve(name_hash, xn) != NULL) {
+            /* Duplicate. */
+            X509_NAME_free(xn);
+            xn = NULL;
+        } else {
+            lh_X509_NAME_insert(name_hash, xn);
+            if (!sk_X509_NAME_push(ret, xn))
+                goto err;
+        }
+    }
+    goto done;
+
+ err:
+    X509_NAME_free(xn);
+    sk_X509_NAME_pop_free(ret, X509_NAME_free);
+    ret = NULL;
+ done:
+    BIO_free(in);
+    X509_free(x);
+    lh_X509_NAME_free(name_hash);
+    if (ret != NULL)
+        ERR_clear_error();
+    return ret;
+}
+
+/**
+ * Add a file of certs to a stack.
+ * \param stack the stack to add to.
+ * \param file the file to add from. All certs in this file that are not
+ * already in the stack will be added.
+ * \return 1 for success, 0 for failure. Note that in the case of failure some
+ * certs may have been added to \c stack.
+ */
+
+int SSL_add_file_cert_subjects_to_stack(STACK_OF(X509_NAME) *stack,
+                                        const char *file)
+{
+    BIO *in;
+    X509 *x = NULL;
+    X509_NAME *xn = NULL;
+    int ret = 1;
+    int (*oldcmp) (const X509_NAME *const *a, const X509_NAME *const *b);
+
+    oldcmp = sk_X509_NAME_set_cmp_func(stack, xname_sk_cmp);
+
+    in = BIO_new(BIO_s_file());
+
+    if (in == NULL) {
+        SSLerr(SSL_F_SSL_ADD_FILE_CERT_SUBJECTS_TO_STACK, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (!BIO_read_filename(in, file))
+        goto err;
+
+    for (;;) {
+        if (PEM_read_bio_X509(in, &x, NULL, NULL) == NULL)
+            break;
+        if ((xn = X509_get_subject_name(x)) == NULL)
+            goto err;
+        xn = X509_NAME_dup(xn);
+        if (xn == NULL)
+            goto err;
+        if (sk_X509_NAME_find(stack, xn) >= 0) {
+            /* Duplicate. */
+            X509_NAME_free(xn);
+        } else if (!sk_X509_NAME_push(stack, xn)) {
+            X509_NAME_free(xn);
+            goto err;
+        }
+    }
+
+    ERR_clear_error();
+    goto done;
+
+ err:
+    ret = 0;
+ done:
+    BIO_free(in);
+    X509_free(x);
+    (void)sk_X509_NAME_set_cmp_func(stack, oldcmp);
+    return ret;
+}
+
+/**
+ * Add a directory of certs to a stack.
+ * \param stack the stack to append to.
+ * \param dir the directory to append from. All files in this directory will be
+ * examined as potential certs. Any that are acceptable to
+ * SSL_add_dir_cert_subjects_to_stack() that are not already in the stack will be
+ * included.
+ * \return 1 for success, 0 for failure. Note that in the case of failure some
+ * certs may have been added to \c stack.
+ */
+
+int SSL_add_dir_cert_subjects_to_stack(STACK_OF(X509_NAME) *stack,
+                                       const char *dir)
+{
+    OPENSSL_DIR_CTX *d = NULL;
+    const char *filename;
+    int ret = 0;
+
+    /* Note that a side effect is that the CAs will be sorted by name */
+
+    while ((filename = OPENSSL_DIR_read(&d, dir))) {
+        char buf[1024];
+        int r;
+
+        if (strlen(dir) + strlen(filename) + 2 > sizeof(buf)) {
+            SSLerr(SSL_F_SSL_ADD_DIR_CERT_SUBJECTS_TO_STACK,
+                   SSL_R_PATH_TOO_LONG);
+            goto err;
+        }
+#ifdef OPENSSL_SYS_VMS
+        r = BIO_snprintf(buf, sizeof(buf), "%s%s", dir, filename);
+#else
+        r = BIO_snprintf(buf, sizeof(buf), "%s/%s", dir, filename);
+#endif
+        if (r <= 0 || r >= (int)sizeof(buf))
+            goto err;
+        if (!SSL_add_file_cert_subjects_to_stack(stack, buf))
+            goto err;
+    }
+
+    if (errno) {
+        SYSerr(SYS_F_OPENDIR, get_last_sys_error());
+        ERR_add_error_data(3, "OPENSSL_DIR_read(&ctx, '", dir, "')");
+        SSLerr(SSL_F_SSL_ADD_DIR_CERT_SUBJECTS_TO_STACK, ERR_R_SYS_LIB);
+        goto err;
+    }
+
+    ret = 1;
+
+ err:
+    if (d)
+        OPENSSL_DIR_end(&d);
+
+    return ret;
+}
+
+/* Build a certificate chain for current certificate */
+int ssl_build_cert_chain(SSL *s, SSL_CTX *ctx, int flags)
+{
+    CERT *c = s ? s->cert : ctx->cert;
+    CERT_PKEY *cpk = c->key;
+    X509_STORE *chain_store = NULL;
+    X509_STORE_CTX *xs_ctx = NULL;
+    STACK_OF(X509) *chain = NULL, *untrusted = NULL;
+    X509 *x;
+    int i, rv = 0;
+
+    if (!cpk->x509) {
+        SSLerr(SSL_F_SSL_BUILD_CERT_CHAIN, SSL_R_NO_CERTIFICATE_SET);
+        goto err;
+    }
+    /* Rearranging and check the chain: add everything to a store */
+    if (flags & SSL_BUILD_CHAIN_FLAG_CHECK) {
+        chain_store = X509_STORE_new();
+        if (chain_store == NULL)
+            goto err;
+        for (i = 0; i < sk_X509_num(cpk->chain); i++) {
+            x = sk_X509_value(cpk->chain, i);
+            if (!X509_STORE_add_cert(chain_store, x))
+                goto err;
+        }
+        /* Add EE cert too: it might be self signed */
+        if (!X509_STORE_add_cert(chain_store, cpk->x509))
+            goto err;
+    } else {
+        if (c->chain_store)
+            chain_store = c->chain_store;
+        else if (s)
+            chain_store = s->ctx->cert_store;
+        else
+            chain_store = ctx->cert_store;
+
+        if (flags & SSL_BUILD_CHAIN_FLAG_UNTRUSTED)
+            untrusted = cpk->chain;
+    }
+
+    xs_ctx = X509_STORE_CTX_new();
+    if (xs_ctx == NULL) {
+        SSLerr(SSL_F_SSL_BUILD_CERT_CHAIN, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if (!X509_STORE_CTX_init(xs_ctx, chain_store, cpk->x509, untrusted)) {
+        SSLerr(SSL_F_SSL_BUILD_CERT_CHAIN, ERR_R_X509_LIB);
+        goto err;
+    }
+    /* Set suite B flags if needed */
+    X509_STORE_CTX_set_flags(xs_ctx,
+                             c->cert_flags & SSL_CERT_FLAG_SUITEB_128_LOS);
+
+    i = X509_verify_cert(xs_ctx);
+    if (i <= 0 && flags & SSL_BUILD_CHAIN_FLAG_IGNORE_ERROR) {
+        if (flags & SSL_BUILD_CHAIN_FLAG_CLEAR_ERROR)
+            ERR_clear_error();
+        i = 1;
+        rv = 2;
+    }
+    if (i > 0)
+        chain = X509_STORE_CTX_get1_chain(xs_ctx);
+    if (i <= 0) {
+        SSLerr(SSL_F_SSL_BUILD_CERT_CHAIN, SSL_R_CERTIFICATE_VERIFY_FAILED);
+        i = X509_STORE_CTX_get_error(xs_ctx);
+        ERR_add_error_data(2, "Verify error:",
+                           X509_verify_cert_error_string(i));
+
+        goto err;
+    }
+    /* Remove EE certificate from chain */
+    x = sk_X509_shift(chain);
+    X509_free(x);
+    if (flags & SSL_BUILD_CHAIN_FLAG_NO_ROOT) {
+        if (sk_X509_num(chain) > 0) {
+            /* See if last cert is self signed */
+            x = sk_X509_value(chain, sk_X509_num(chain) - 1);
+            if (X509_get_extension_flags(x) & EXFLAG_SS) {
+                x = sk_X509_pop(chain);
+                X509_free(x);
+            }
+        }
+    }
+    /*
+     * Check security level of all CA certificates: EE will have been checked
+     * already.
+     */
+    for (i = 0; i < sk_X509_num(chain); i++) {
+        x = sk_X509_value(chain, i);
+        rv = ssl_security_cert(s, ctx, x, 0, 0);
+        if (rv != 1) {
+            SSLerr(SSL_F_SSL_BUILD_CERT_CHAIN, rv);
+            sk_X509_pop_free(chain, X509_free);
+            rv = 0;
+            goto err;
+        }
+    }
+    sk_X509_pop_free(cpk->chain, X509_free);
+    cpk->chain = chain;
+    if (rv == 0)
+        rv = 1;
+ err:
+    if (flags & SSL_BUILD_CHAIN_FLAG_CHECK)
+        X509_STORE_free(chain_store);
+    X509_STORE_CTX_free(xs_ctx);
+
+    return rv;
+}
+
+int ssl_cert_set_cert_store(CERT *c, X509_STORE *store, int chain, int ref)
+{
+    X509_STORE **pstore;
+    if (chain)
+        pstore = &c->chain_store;
+    else
+        pstore = &c->verify_store;
+    X509_STORE_free(*pstore);
+    *pstore = store;
+    if (ref && store)
+        X509_STORE_up_ref(store);
+    return 1;
+}
+
+static int ssl_security_default_callback(const SSL *s, const SSL_CTX *ctx,
+                                         int op, int bits, int nid, void *other,
+                                         void *ex)
+{
+    int level, minbits;
+    static const int minbits_table[5] = { 80, 112, 128, 192, 256 };
+    if (ctx)
+        level = SSL_CTX_get_security_level(ctx);
+    else
+        level = SSL_get_security_level(s);
+
+    if (level <= 0) {
+        /*
+         * No EDH keys weaker than 1024-bits even at level 0, otherwise,
+         * anything goes.
+         */
+        if (op == SSL_SECOP_TMP_DH && bits < 80)
+            return 0;
+        return 1;
+    }
+    if (level > 5)
+        level = 5;
+    minbits = minbits_table[level - 1];
+    switch (op) {
+    case SSL_SECOP_CIPHER_SUPPORTED:
+    case SSL_SECOP_CIPHER_SHARED:
+    case SSL_SECOP_CIPHER_CHECK:
+        {
+            const SSL_CIPHER *c = other;
+            /* No ciphers below security level */
+            if (bits < minbits)
+                return 0;
+            /* No unauthenticated ciphersuites */
+            if (c->algorithm_auth & SSL_aNULL)
+                return 0;
+            /* No MD5 mac ciphersuites */
+            if (c->algorithm_mac & SSL_MD5)
+                return 0;
+            /* SHA1 HMAC is 160 bits of security */
+            if (minbits > 160 && c->algorithm_mac & SSL_SHA1)
+                return 0;
+            /* Level 2: no RC4 */
+            if (level >= 2 && c->algorithm_enc == SSL_RC4)
+                return 0;
+            /* Level 3: forward secure ciphersuites only */
+            if (level >= 3 && c->min_tls != TLS1_3_VERSION &&
+                               !(c->algorithm_mkey & (SSL_kEDH | SSL_kEECDH)))
+                return 0;
+            break;
+        }
+    case SSL_SECOP_VERSION:
+        if (!SSL_IS_DTLS(s)) {
+            /* SSLv3 not allowed at level 2 */
+            if (nid <= SSL3_VERSION && level >= 2)
+                return 0;
+            /* TLS v1.1 and above only for level 3 */
+            if (nid <= TLS1_VERSION && level >= 3)
+                return 0;
+            /* TLS v1.2 only for level 4 and above */
+            if (nid <= TLS1_1_VERSION && level >= 4)
+                return 0;
+        } else {
+            /* DTLS v1.2 only for level 4 and above */
+            if (DTLS_VERSION_LT(nid, DTLS1_2_VERSION) && level >= 4)
+                return 0;
+        }
+        break;
+
+    case SSL_SECOP_COMPRESSION:
+        if (level >= 2)
+            return 0;
+        break;
+    case SSL_SECOP_TICKET:
+        if (level >= 3)
+            return 0;
+        break;
+    default:
+        if (bits < minbits)
+            return 0;
+    }
+    return 1;
+}
+
+int ssl_security(const SSL *s, int op, int bits, int nid, void *other)
+{
+    return s->cert->sec_cb(s, NULL, op, bits, nid, other, s->cert->sec_ex);
+}
+
+int ssl_ctx_security(const SSL_CTX *ctx, int op, int bits, int nid, void *other)
+{
+    return ctx->cert->sec_cb(NULL, ctx, op, bits, nid, other,
+                             ctx->cert->sec_ex);
+}
+
+int ssl_cert_lookup_by_nid(int nid, size_t *pidx)
+{
+    size_t i;
+
+    for (i = 0; i < OSSL_NELEM(ssl_cert_info); i++) {
+        if (ssl_cert_info[i].nid == nid) {
+            *pidx = i;
+            return 1;
+        }
+    }
+
+    return 0;
+}
+
+const SSL_CERT_LOOKUP *ssl_cert_lookup_by_pkey(const EVP_PKEY *pk, size_t *pidx)
+{
+    int nid = EVP_PKEY_id(pk);
+    size_t tmpidx;
+
+    if (nid == NID_undef)
+        return NULL;
+
+    if (!ssl_cert_lookup_by_nid(nid, &tmpidx))
+        return NULL;
+
+    if (pidx != NULL)
+        *pidx = tmpidx;
+
+    return &ssl_cert_info[tmpidx];
+}
+
+const SSL_CERT_LOOKUP *ssl_cert_lookup_by_idx(size_t idx)
+{
+    if (idx >= OSSL_NELEM(ssl_cert_info))
+        return NULL;
+    return &ssl_cert_info[idx];
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_cert_table.h b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_cert_table.h
new file mode 100644
index 000000000..0c47241c0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_cert_table.h
@@ -0,0 +1,23 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*
+ * Certificate table information. NB: table entries must match SSL_PKEY indices
+ */
+static const SSL_CERT_LOOKUP ssl_cert_info [] = {
+    {EVP_PKEY_RSA, SSL_aRSA}, /* SSL_PKEY_RSA */
+    {EVP_PKEY_RSA_PSS, SSL_aRSA}, /* SSL_PKEY_RSA_PSS_SIGN */
+    {EVP_PKEY_DSA, SSL_aDSS}, /* SSL_PKEY_DSA_SIGN */
+    {EVP_PKEY_EC, SSL_aECDSA}, /* SSL_PKEY_ECC */
+    {NID_id_GostR3410_2001, SSL_aGOST01}, /* SSL_PKEY_GOST01 */
+    {NID_id_GostR3410_2012_256, SSL_aGOST12}, /* SSL_PKEY_GOST12_256 */
+    {NID_id_GostR3410_2012_512, SSL_aGOST12}, /* SSL_PKEY_GOST12_512 */
+    {EVP_PKEY_ED25519, SSL_aECDSA}, /* SSL_PKEY_ED25519 */
+    {EVP_PKEY_ED448, SSL_aECDSA} /* SSL_PKEY_ED448 */
+};
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_ciph.c b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_ciph.c
new file mode 100644
index 000000000..b60d67aa0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_ciph.c
@@ -0,0 +1,2163 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ * Copyright 2005 Nokia. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <ctype.h>
+#include <openssl/objects.h>
+#include <openssl/comp.h>
+#include <openssl/engine.h>
+#include <openssl/crypto.h>
+#include <openssl/conf.h>
+#include "internal/nelem.h"
+#include "ssl_locl.h"
+#include "internal/thread_once.h"
+#include "internal/cryptlib.h"
+
+#define SSL_ENC_DES_IDX         0
+#define SSL_ENC_3DES_IDX        1
+#define SSL_ENC_RC4_IDX         2
+#define SSL_ENC_RC2_IDX         3
+#define SSL_ENC_IDEA_IDX        4
+#define SSL_ENC_NULL_IDX        5
+#define SSL_ENC_AES128_IDX      6
+#define SSL_ENC_AES256_IDX      7
+#define SSL_ENC_CAMELLIA128_IDX 8
+#define SSL_ENC_CAMELLIA256_IDX 9
+#define SSL_ENC_GOST89_IDX      10
+#define SSL_ENC_SEED_IDX        11
+#define SSL_ENC_AES128GCM_IDX   12
+#define SSL_ENC_AES256GCM_IDX   13
+#define SSL_ENC_AES128CCM_IDX   14
+#define SSL_ENC_AES256CCM_IDX   15
+#define SSL_ENC_AES128CCM8_IDX  16
+#define SSL_ENC_AES256CCM8_IDX  17
+#define SSL_ENC_GOST8912_IDX    18
+#define SSL_ENC_CHACHA_IDX      19
+#define SSL_ENC_ARIA128GCM_IDX  20
+#define SSL_ENC_ARIA256GCM_IDX  21
+#define SSL_ENC_NUM_IDX         22
+
+/* NB: make sure indices in these tables match values above */
+
+typedef struct {
+    uint32_t mask;
+    int nid;
+} ssl_cipher_table;
+
+/* Table of NIDs for each cipher */
+static const ssl_cipher_table ssl_cipher_table_cipher[SSL_ENC_NUM_IDX] = {
+    {SSL_DES, NID_des_cbc},     /* SSL_ENC_DES_IDX 0 */
+    {SSL_3DES, NID_des_ede3_cbc}, /* SSL_ENC_3DES_IDX 1 */
+    {SSL_RC4, NID_rc4},         /* SSL_ENC_RC4_IDX 2 */
+    {SSL_RC2, NID_rc2_cbc},     /* SSL_ENC_RC2_IDX 3 */
+    {SSL_IDEA, NID_idea_cbc},   /* SSL_ENC_IDEA_IDX 4 */
+    {SSL_eNULL, NID_undef},     /* SSL_ENC_NULL_IDX 5 */
+    {SSL_AES128, NID_aes_128_cbc}, /* SSL_ENC_AES128_IDX 6 */
+    {SSL_AES256, NID_aes_256_cbc}, /* SSL_ENC_AES256_IDX 7 */
+    {SSL_CAMELLIA128, NID_camellia_128_cbc}, /* SSL_ENC_CAMELLIA128_IDX 8 */
+    {SSL_CAMELLIA256, NID_camellia_256_cbc}, /* SSL_ENC_CAMELLIA256_IDX 9 */
+    {SSL_eGOST2814789CNT, NID_gost89_cnt}, /* SSL_ENC_GOST89_IDX 10 */
+    {SSL_SEED, NID_seed_cbc},   /* SSL_ENC_SEED_IDX 11 */
+    {SSL_AES128GCM, NID_aes_128_gcm}, /* SSL_ENC_AES128GCM_IDX 12 */
+    {SSL_AES256GCM, NID_aes_256_gcm}, /* SSL_ENC_AES256GCM_IDX 13 */
+    {SSL_AES128CCM, NID_aes_128_ccm}, /* SSL_ENC_AES128CCM_IDX 14 */
+    {SSL_AES256CCM, NID_aes_256_ccm}, /* SSL_ENC_AES256CCM_IDX 15 */
+    {SSL_AES128CCM8, NID_aes_128_ccm}, /* SSL_ENC_AES128CCM8_IDX 16 */
+    {SSL_AES256CCM8, NID_aes_256_ccm}, /* SSL_ENC_AES256CCM8_IDX 17 */
+    {SSL_eGOST2814789CNT12, NID_gost89_cnt_12}, /* SSL_ENC_GOST8912_IDX 18 */
+    {SSL_CHACHA20POLY1305, NID_chacha20_poly1305}, /* SSL_ENC_CHACHA_IDX 19 */
+    {SSL_ARIA128GCM, NID_aria_128_gcm}, /* SSL_ENC_ARIA128GCM_IDX 20 */
+    {SSL_ARIA256GCM, NID_aria_256_gcm}, /* SSL_ENC_ARIA256GCM_IDX 21 */
+};
+
+static const EVP_CIPHER *ssl_cipher_methods[SSL_ENC_NUM_IDX];
+
+#define SSL_COMP_NULL_IDX       0
+#define SSL_COMP_ZLIB_IDX       1
+#define SSL_COMP_NUM_IDX        2
+
+static STACK_OF(SSL_COMP) *ssl_comp_methods = NULL;
+
+#ifndef OPENSSL_NO_COMP
+static CRYPTO_ONCE ssl_load_builtin_comp_once = CRYPTO_ONCE_STATIC_INIT;
+#endif
+
+/*
+ * Constant SSL_MAX_DIGEST equal to size of digests array should be defined
+ * in the ssl_locl.h
+ */
+
+#define SSL_MD_NUM_IDX  SSL_MAX_DIGEST
+
+/* NB: make sure indices in this table matches values above */
+static const ssl_cipher_table ssl_cipher_table_mac[SSL_MD_NUM_IDX] = {
+    {SSL_MD5, NID_md5},         /* SSL_MD_MD5_IDX 0 */
+    {SSL_SHA1, NID_sha1},       /* SSL_MD_SHA1_IDX 1 */
+    {SSL_GOST94, NID_id_GostR3411_94}, /* SSL_MD_GOST94_IDX 2 */
+    {SSL_GOST89MAC, NID_id_Gost28147_89_MAC}, /* SSL_MD_GOST89MAC_IDX 3 */
+    {SSL_SHA256, NID_sha256},   /* SSL_MD_SHA256_IDX 4 */
+    {SSL_SHA384, NID_sha384},   /* SSL_MD_SHA384_IDX 5 */
+    {SSL_GOST12_256, NID_id_GostR3411_2012_256}, /* SSL_MD_GOST12_256_IDX 6 */
+    {SSL_GOST89MAC12, NID_gost_mac_12}, /* SSL_MD_GOST89MAC12_IDX 7 */
+    {SSL_GOST12_512, NID_id_GostR3411_2012_512}, /* SSL_MD_GOST12_512_IDX 8 */
+    {0, NID_md5_sha1},          /* SSL_MD_MD5_SHA1_IDX 9 */
+    {0, NID_sha224},            /* SSL_MD_SHA224_IDX 10 */
+    {0, NID_sha512}             /* SSL_MD_SHA512_IDX 11 */
+};
+
+static const EVP_MD *ssl_digest_methods[SSL_MD_NUM_IDX] = {
+    NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL
+};
+
+/* *INDENT-OFF* */
+static const ssl_cipher_table ssl_cipher_table_kx[] = {
+    {SSL_kRSA,      NID_kx_rsa},
+    {SSL_kECDHE,    NID_kx_ecdhe},
+    {SSL_kDHE,      NID_kx_dhe},
+    {SSL_kECDHEPSK, NID_kx_ecdhe_psk},
+    {SSL_kDHEPSK,   NID_kx_dhe_psk},
+    {SSL_kRSAPSK,   NID_kx_rsa_psk},
+    {SSL_kPSK,      NID_kx_psk},
+    {SSL_kSRP,      NID_kx_srp},
+    {SSL_kGOST,     NID_kx_gost},
+    {SSL_kANY,      NID_kx_any}
+};
+
+static const ssl_cipher_table ssl_cipher_table_auth[] = {
+    {SSL_aRSA,    NID_auth_rsa},
+    {SSL_aECDSA,  NID_auth_ecdsa},
+    {SSL_aPSK,    NID_auth_psk},
+    {SSL_aDSS,    NID_auth_dss},
+    {SSL_aGOST01, NID_auth_gost01},
+    {SSL_aGOST12, NID_auth_gost12},
+    {SSL_aSRP,    NID_auth_srp},
+    {SSL_aNULL,   NID_auth_null},
+    {SSL_aANY,    NID_auth_any}
+};
+/* *INDENT-ON* */
+
+/* Utility function for table lookup */
+static int ssl_cipher_info_find(const ssl_cipher_table * table,
+                                size_t table_cnt, uint32_t mask)
+{
+    size_t i;
+    for (i = 0; i < table_cnt; i++, table++) {
+        if (table->mask == mask)
+            return (int)i;
+    }
+    return -1;
+}
+
+#define ssl_cipher_info_lookup(table, x) \
+    ssl_cipher_info_find(table, OSSL_NELEM(table), x)
+
+/*
+ * PKEY_TYPE for GOST89MAC is known in advance, but, because implementation
+ * is engine-provided, we'll fill it only if corresponding EVP_PKEY_METHOD is
+ * found
+ */
+static int ssl_mac_pkey_id[SSL_MD_NUM_IDX] = {
+    /* MD5, SHA, GOST94, MAC89 */
+    EVP_PKEY_HMAC, EVP_PKEY_HMAC, EVP_PKEY_HMAC, NID_undef,
+    /* SHA256, SHA384, GOST2012_256, MAC89-12 */
+    EVP_PKEY_HMAC, EVP_PKEY_HMAC, EVP_PKEY_HMAC, NID_undef,
+    /* GOST2012_512 */
+    EVP_PKEY_HMAC,
+    /* MD5/SHA1, SHA224, SHA512 */
+    NID_undef, NID_undef, NID_undef
+};
+
+static size_t ssl_mac_secret_size[SSL_MD_NUM_IDX];
+
+#define CIPHER_ADD      1
+#define CIPHER_KILL     2
+#define CIPHER_DEL      3
+#define CIPHER_ORD      4
+#define CIPHER_SPECIAL  5
+/*
+ * Bump the ciphers to the top of the list.
+ * This rule isn't currently supported by the public cipherstring API.
+ */
+#define CIPHER_BUMP     6
+
+typedef struct cipher_order_st {
+    const SSL_CIPHER *cipher;
+    int active;
+    int dead;
+    struct cipher_order_st *next, *prev;
+} CIPHER_ORDER;
+
+static const SSL_CIPHER cipher_aliases[] = {
+    /* "ALL" doesn't include eNULL (must be specifically enabled) */
+    {0, SSL_TXT_ALL, NULL, 0, 0, 0, ~SSL_eNULL},
+    /* "COMPLEMENTOFALL" */
+    {0, SSL_TXT_CMPALL, NULL, 0, 0, 0, SSL_eNULL},
+
+    /*
+     * "COMPLEMENTOFDEFAULT" (does *not* include ciphersuites not found in
+     * ALL!)
+     */
+    {0, SSL_TXT_CMPDEF, NULL, 0, 0, 0, 0, 0, 0, 0, 0, 0, SSL_NOT_DEFAULT},
+
+    /*
+     * key exchange aliases (some of those using only a single bit here
+     * combine multiple key exchange algs according to the RFCs, e.g. kDHE
+     * combines DHE_DSS and DHE_RSA)
+     */
+    {0, SSL_TXT_kRSA, NULL, 0, SSL_kRSA},
+
+    {0, SSL_TXT_kEDH, NULL, 0, SSL_kDHE},
+    {0, SSL_TXT_kDHE, NULL, 0, SSL_kDHE},
+    {0, SSL_TXT_DH, NULL, 0, SSL_kDHE},
+
+    {0, SSL_TXT_kEECDH, NULL, 0, SSL_kECDHE},
+    {0, SSL_TXT_kECDHE, NULL, 0, SSL_kECDHE},
+    {0, SSL_TXT_ECDH, NULL, 0, SSL_kECDHE},
+
+    {0, SSL_TXT_kPSK, NULL, 0, SSL_kPSK},
+    {0, SSL_TXT_kRSAPSK, NULL, 0, SSL_kRSAPSK},
+    {0, SSL_TXT_kECDHEPSK, NULL, 0, SSL_kECDHEPSK},
+    {0, SSL_TXT_kDHEPSK, NULL, 0, SSL_kDHEPSK},
+    {0, SSL_TXT_kSRP, NULL, 0, SSL_kSRP},
+    {0, SSL_TXT_kGOST, NULL, 0, SSL_kGOST},
+
+    /* server authentication aliases */
+    {0, SSL_TXT_aRSA, NULL, 0, 0, SSL_aRSA},
+    {0, SSL_TXT_aDSS, NULL, 0, 0, SSL_aDSS},
+    {0, SSL_TXT_DSS, NULL, 0, 0, SSL_aDSS},
+    {0, SSL_TXT_aNULL, NULL, 0, 0, SSL_aNULL},
+    {0, SSL_TXT_aECDSA, NULL, 0, 0, SSL_aECDSA},
+    {0, SSL_TXT_ECDSA, NULL, 0, 0, SSL_aECDSA},
+    {0, SSL_TXT_aPSK, NULL, 0, 0, SSL_aPSK},
+    {0, SSL_TXT_aGOST01, NULL, 0, 0, SSL_aGOST01},
+    {0, SSL_TXT_aGOST12, NULL, 0, 0, SSL_aGOST12},
+    {0, SSL_TXT_aGOST, NULL, 0, 0, SSL_aGOST01 | SSL_aGOST12},
+    {0, SSL_TXT_aSRP, NULL, 0, 0, SSL_aSRP},
+
+    /* aliases combining key exchange and server authentication */
+    {0, SSL_TXT_EDH, NULL, 0, SSL_kDHE, ~SSL_aNULL},
+    {0, SSL_TXT_DHE, NULL, 0, SSL_kDHE, ~SSL_aNULL},
+    {0, SSL_TXT_EECDH, NULL, 0, SSL_kECDHE, ~SSL_aNULL},
+    {0, SSL_TXT_ECDHE, NULL, 0, SSL_kECDHE, ~SSL_aNULL},
+    {0, SSL_TXT_NULL, NULL, 0, 0, 0, SSL_eNULL},
+    {0, SSL_TXT_RSA, NULL, 0, SSL_kRSA, SSL_aRSA},
+    {0, SSL_TXT_ADH, NULL, 0, SSL_kDHE, SSL_aNULL},
+    {0, SSL_TXT_AECDH, NULL, 0, SSL_kECDHE, SSL_aNULL},
+    {0, SSL_TXT_PSK, NULL, 0, SSL_PSK},
+    {0, SSL_TXT_SRP, NULL, 0, SSL_kSRP},
+
+    /* symmetric encryption aliases */
+    {0, SSL_TXT_3DES, NULL, 0, 0, 0, SSL_3DES},
+    {0, SSL_TXT_RC4, NULL, 0, 0, 0, SSL_RC4},
+    {0, SSL_TXT_RC2, NULL, 0, 0, 0, SSL_RC2},
+    {0, SSL_TXT_IDEA, NULL, 0, 0, 0, SSL_IDEA},
+    {0, SSL_TXT_SEED, NULL, 0, 0, 0, SSL_SEED},
+    {0, SSL_TXT_eNULL, NULL, 0, 0, 0, SSL_eNULL},
+    {0, SSL_TXT_GOST, NULL, 0, 0, 0, SSL_eGOST2814789CNT | SSL_eGOST2814789CNT12},
+    {0, SSL_TXT_AES128, NULL, 0, 0, 0,
+     SSL_AES128 | SSL_AES128GCM | SSL_AES128CCM | SSL_AES128CCM8},
+    {0, SSL_TXT_AES256, NULL, 0, 0, 0,
+     SSL_AES256 | SSL_AES256GCM | SSL_AES256CCM | SSL_AES256CCM8},
+    {0, SSL_TXT_AES, NULL, 0, 0, 0, SSL_AES},
+    {0, SSL_TXT_AES_GCM, NULL, 0, 0, 0, SSL_AES128GCM | SSL_AES256GCM},
+    {0, SSL_TXT_AES_CCM, NULL, 0, 0, 0,
+     SSL_AES128CCM | SSL_AES256CCM | SSL_AES128CCM8 | SSL_AES256CCM8},
+    {0, SSL_TXT_AES_CCM_8, NULL, 0, 0, 0, SSL_AES128CCM8 | SSL_AES256CCM8},
+    {0, SSL_TXT_CAMELLIA128, NULL, 0, 0, 0, SSL_CAMELLIA128},
+    {0, SSL_TXT_CAMELLIA256, NULL, 0, 0, 0, SSL_CAMELLIA256},
+    {0, SSL_TXT_CAMELLIA, NULL, 0, 0, 0, SSL_CAMELLIA},
+    {0, SSL_TXT_CHACHA20, NULL, 0, 0, 0, SSL_CHACHA20},
+
+    {0, SSL_TXT_ARIA, NULL, 0, 0, 0, SSL_ARIA},
+    {0, SSL_TXT_ARIA_GCM, NULL, 0, 0, 0, SSL_ARIA128GCM | SSL_ARIA256GCM},
+    {0, SSL_TXT_ARIA128, NULL, 0, 0, 0, SSL_ARIA128GCM},
+    {0, SSL_TXT_ARIA256, NULL, 0, 0, 0, SSL_ARIA256GCM},
+
+    /* MAC aliases */
+    {0, SSL_TXT_MD5, NULL, 0, 0, 0, 0, SSL_MD5},
+    {0, SSL_TXT_SHA1, NULL, 0, 0, 0, 0, SSL_SHA1},
+    {0, SSL_TXT_SHA, NULL, 0, 0, 0, 0, SSL_SHA1},
+    {0, SSL_TXT_GOST94, NULL, 0, 0, 0, 0, SSL_GOST94},
+    {0, SSL_TXT_GOST89MAC, NULL, 0, 0, 0, 0, SSL_GOST89MAC | SSL_GOST89MAC12},
+    {0, SSL_TXT_SHA256, NULL, 0, 0, 0, 0, SSL_SHA256},
+    {0, SSL_TXT_SHA384, NULL, 0, 0, 0, 0, SSL_SHA384},
+    {0, SSL_TXT_GOST12, NULL, 0, 0, 0, 0, SSL_GOST12_256},
+
+    /* protocol version aliases */
+    {0, SSL_TXT_SSLV3, NULL, 0, 0, 0, 0, 0, SSL3_VERSION},
+    {0, SSL_TXT_TLSV1, NULL, 0, 0, 0, 0, 0, TLS1_VERSION},
+    {0, "TLSv1.0", NULL, 0, 0, 0, 0, 0, TLS1_VERSION},
+    {0, SSL_TXT_TLSV1_2, NULL, 0, 0, 0, 0, 0, TLS1_2_VERSION},
+
+    /* strength classes */
+    {0, SSL_TXT_LOW, NULL, 0, 0, 0, 0, 0, 0, 0, 0, 0, SSL_LOW},
+    {0, SSL_TXT_MEDIUM, NULL, 0, 0, 0, 0, 0, 0, 0, 0, 0, SSL_MEDIUM},
+    {0, SSL_TXT_HIGH, NULL, 0, 0, 0, 0, 0, 0, 0, 0, 0, SSL_HIGH},
+    /* FIPS 140-2 approved ciphersuite */
+    {0, SSL_TXT_FIPS, NULL, 0, 0, 0, ~SSL_eNULL, 0, 0, 0, 0, 0, SSL_FIPS},
+
+    /* "EDH-" aliases to "DHE-" labels (for backward compatibility) */
+    {0, SSL3_TXT_EDH_DSS_DES_192_CBC3_SHA, NULL, 0,
+     SSL_kDHE, SSL_aDSS, SSL_3DES, SSL_SHA1, 0, 0, 0, 0, SSL_HIGH | SSL_FIPS},
+    {0, SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA, NULL, 0,
+     SSL_kDHE, SSL_aRSA, SSL_3DES, SSL_SHA1, 0, 0, 0, 0, SSL_HIGH | SSL_FIPS},
+
+};
+
+/*
+ * Search for public key algorithm with given name and return its pkey_id if
+ * it is available. Otherwise return 0
+ */
+#ifdef OPENSSL_NO_ENGINE
+
+static int get_optional_pkey_id(const char *pkey_name)
+{
+    const EVP_PKEY_ASN1_METHOD *ameth;
+    int pkey_id = 0;
+    ameth = EVP_PKEY_asn1_find_str(NULL, pkey_name, -1);
+    if (ameth && EVP_PKEY_asn1_get0_info(&pkey_id, NULL, NULL, NULL, NULL,
+                                         ameth) > 0)
+        return pkey_id;
+    return 0;
+}
+
+#else
+
+static int get_optional_pkey_id(const char *pkey_name)
+{
+    const EVP_PKEY_ASN1_METHOD *ameth;
+    ENGINE *tmpeng = NULL;
+    int pkey_id = 0;
+    ameth = EVP_PKEY_asn1_find_str(&tmpeng, pkey_name, -1);
+    if (ameth) {
+        if (EVP_PKEY_asn1_get0_info(&pkey_id, NULL, NULL, NULL, NULL,
+                                    ameth) <= 0)
+            pkey_id = 0;
+    }
+    ENGINE_finish(tmpeng);
+    return pkey_id;
+}
+
+#endif
+
+/* masks of disabled algorithms */
+static uint32_t disabled_enc_mask;
+static uint32_t disabled_mac_mask;
+static uint32_t disabled_mkey_mask;
+static uint32_t disabled_auth_mask;
+
+int ssl_load_ciphers(void)
+{
+    size_t i;
+    const ssl_cipher_table *t;
+
+    disabled_enc_mask = 0;
+    ssl_sort_cipher_list();
+    for (i = 0, t = ssl_cipher_table_cipher; i < SSL_ENC_NUM_IDX; i++, t++) {
+        if (t->nid == NID_undef) {
+            ssl_cipher_methods[i] = NULL;
+        } else {
+            const EVP_CIPHER *cipher = EVP_get_cipherbynid(t->nid);
+            ssl_cipher_methods[i] = cipher;
+            if (cipher == NULL)
+                disabled_enc_mask |= t->mask;
+        }
+    }
+    disabled_mac_mask = 0;
+    for (i = 0, t = ssl_cipher_table_mac; i < SSL_MD_NUM_IDX; i++, t++) {
+        const EVP_MD *md = EVP_get_digestbynid(t->nid);
+        ssl_digest_methods[i] = md;
+        if (md == NULL) {
+            disabled_mac_mask |= t->mask;
+        } else {
+            int tmpsize = EVP_MD_size(md);
+            if (!ossl_assert(tmpsize >= 0))
+                return 0;
+            ssl_mac_secret_size[i] = tmpsize;
+        }
+    }
+    /* Make sure we can access MD5 and SHA1 */
+    if (!ossl_assert(ssl_digest_methods[SSL_MD_MD5_IDX] != NULL))
+        return 0;
+    if (!ossl_assert(ssl_digest_methods[SSL_MD_SHA1_IDX] != NULL))
+        return 0;
+
+    disabled_mkey_mask = 0;
+    disabled_auth_mask = 0;
+
+#ifdef OPENSSL_NO_RSA
+    disabled_mkey_mask |= SSL_kRSA | SSL_kRSAPSK;
+    disabled_auth_mask |= SSL_aRSA;
+#endif
+#ifdef OPENSSL_NO_DSA
+    disabled_auth_mask |= SSL_aDSS;
+#endif
+#ifdef OPENSSL_NO_DH
+    disabled_mkey_mask |= SSL_kDHE | SSL_kDHEPSK;
+#endif
+#ifdef OPENSSL_NO_EC
+    disabled_mkey_mask |= SSL_kECDHE | SSL_kECDHEPSK;
+    disabled_auth_mask |= SSL_aECDSA;
+#endif
+#ifdef OPENSSL_NO_PSK
+    disabled_mkey_mask |= SSL_PSK;
+    disabled_auth_mask |= SSL_aPSK;
+#endif
+#ifdef OPENSSL_NO_SRP
+    disabled_mkey_mask |= SSL_kSRP;
+#endif
+
+    /*
+     * Check for presence of GOST 34.10 algorithms, and if they are not
+     * present, disable appropriate auth and key exchange
+     */
+    ssl_mac_pkey_id[SSL_MD_GOST89MAC_IDX] = get_optional_pkey_id("gost-mac");
+    if (ssl_mac_pkey_id[SSL_MD_GOST89MAC_IDX])
+        ssl_mac_secret_size[SSL_MD_GOST89MAC_IDX] = 32;
+    else
+        disabled_mac_mask |= SSL_GOST89MAC;
+
+    ssl_mac_pkey_id[SSL_MD_GOST89MAC12_IDX] =
+        get_optional_pkey_id("gost-mac-12");
+    if (ssl_mac_pkey_id[SSL_MD_GOST89MAC12_IDX])
+        ssl_mac_secret_size[SSL_MD_GOST89MAC12_IDX] = 32;
+    else
+        disabled_mac_mask |= SSL_GOST89MAC12;
+
+    if (!get_optional_pkey_id("gost2001"))
+        disabled_auth_mask |= SSL_aGOST01 | SSL_aGOST12;
+    if (!get_optional_pkey_id("gost2012_256"))
+        disabled_auth_mask |= SSL_aGOST12;
+    if (!get_optional_pkey_id("gost2012_512"))
+        disabled_auth_mask |= SSL_aGOST12;
+    /*
+     * Disable GOST key exchange if no GOST signature algs are available *
+     */
+    if ((disabled_auth_mask & (SSL_aGOST01 | SSL_aGOST12)) ==
+        (SSL_aGOST01 | SSL_aGOST12))
+        disabled_mkey_mask |= SSL_kGOST;
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_COMP
+
+static int sk_comp_cmp(const SSL_COMP *const *a, const SSL_COMP *const *b)
+{
+    return ((*a)->id - (*b)->id);
+}
+
+DEFINE_RUN_ONCE_STATIC(do_load_builtin_compressions)
+{
+    SSL_COMP *comp = NULL;
+    COMP_METHOD *method = COMP_zlib();
+
+    CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_DISABLE);
+    ssl_comp_methods = sk_SSL_COMP_new(sk_comp_cmp);
+
+    if (COMP_get_type(method) != NID_undef && ssl_comp_methods != NULL) {
+        comp = OPENSSL_malloc(sizeof(*comp));
+        if (comp != NULL) {
+            comp->method = method;
+            comp->id = SSL_COMP_ZLIB_IDX;
+            comp->name = COMP_get_name(method);
+            sk_SSL_COMP_push(ssl_comp_methods, comp);
+            sk_SSL_COMP_sort(ssl_comp_methods);
+        }
+    }
+    CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ENABLE);
+    return 1;
+}
+
+static int load_builtin_compressions(void)
+{
+    return RUN_ONCE(&ssl_load_builtin_comp_once, do_load_builtin_compressions);
+}
+#endif
+
+int ssl_cipher_get_evp(const SSL_SESSION *s, const EVP_CIPHER **enc,
+                       const EVP_MD **md, int *mac_pkey_type,
+                       size_t *mac_secret_size, SSL_COMP **comp, int use_etm)
+{
+    int i;
+    const SSL_CIPHER *c;
+
+    c = s->cipher;
+    if (c == NULL)
+        return 0;
+    if (comp != NULL) {
+        SSL_COMP ctmp;
+#ifndef OPENSSL_NO_COMP
+        if (!load_builtin_compressions()) {
+            /*
+             * Currently don't care, since a failure only means that
+             * ssl_comp_methods is NULL, which is perfectly OK
+             */
+        }
+#endif
+        *comp = NULL;
+        ctmp.id = s->compress_meth;
+        if (ssl_comp_methods != NULL) {
+            i = sk_SSL_COMP_find(ssl_comp_methods, &ctmp);
+            *comp = sk_SSL_COMP_value(ssl_comp_methods, i);
+        }
+        /* If were only interested in comp then return success */
+        if ((enc == NULL) && (md == NULL))
+            return 1;
+    }
+
+    if ((enc == NULL) || (md == NULL))
+        return 0;
+
+    i = ssl_cipher_info_lookup(ssl_cipher_table_cipher, c->algorithm_enc);
+
+    if (i == -1) {
+        *enc = NULL;
+    } else {
+        if (i == SSL_ENC_NULL_IDX)
+            *enc = EVP_enc_null();
+        else
+            *enc = ssl_cipher_methods[i];
+    }
+
+    i = ssl_cipher_info_lookup(ssl_cipher_table_mac, c->algorithm_mac);
+    if (i == -1) {
+        *md = NULL;
+        if (mac_pkey_type != NULL)
+            *mac_pkey_type = NID_undef;
+        if (mac_secret_size != NULL)
+            *mac_secret_size = 0;
+        if (c->algorithm_mac == SSL_AEAD)
+            mac_pkey_type = NULL;
+    } else {
+        *md = ssl_digest_methods[i];
+        if (mac_pkey_type != NULL)
+            *mac_pkey_type = ssl_mac_pkey_id[i];
+        if (mac_secret_size != NULL)
+            *mac_secret_size = ssl_mac_secret_size[i];
+    }
+
+    if ((*enc != NULL) &&
+        (*md != NULL || (EVP_CIPHER_flags(*enc) & EVP_CIPH_FLAG_AEAD_CIPHER))
+        && (!mac_pkey_type || *mac_pkey_type != NID_undef)) {
+        const EVP_CIPHER *evp;
+
+        if (use_etm)
+            return 1;
+
+        if (s->ssl_version >> 8 != TLS1_VERSION_MAJOR ||
+            s->ssl_version < TLS1_VERSION)
+            return 1;
+
+        if (c->algorithm_enc == SSL_RC4 &&
+            c->algorithm_mac == SSL_MD5 &&
+            (evp = EVP_get_cipherbyname("RC4-HMAC-MD5")))
+            *enc = evp, *md = NULL;
+        else if (c->algorithm_enc == SSL_AES128 &&
+                 c->algorithm_mac == SSL_SHA1 &&
+                 (evp = EVP_get_cipherbyname("AES-128-CBC-HMAC-SHA1")))
+            *enc = evp, *md = NULL;
+        else if (c->algorithm_enc == SSL_AES256 &&
+                 c->algorithm_mac == SSL_SHA1 &&
+                 (evp = EVP_get_cipherbyname("AES-256-CBC-HMAC-SHA1")))
+            *enc = evp, *md = NULL;
+        else if (c->algorithm_enc == SSL_AES128 &&
+                 c->algorithm_mac == SSL_SHA256 &&
+                 (evp = EVP_get_cipherbyname("AES-128-CBC-HMAC-SHA256")))
+            *enc = evp, *md = NULL;
+        else if (c->algorithm_enc == SSL_AES256 &&
+                 c->algorithm_mac == SSL_SHA256 &&
+                 (evp = EVP_get_cipherbyname("AES-256-CBC-HMAC-SHA256")))
+            *enc = evp, *md = NULL;
+        return 1;
+    } else {
+        return 0;
+    }
+}
+
+const EVP_MD *ssl_md(int idx)
+{
+    idx &= SSL_HANDSHAKE_MAC_MASK;
+    if (idx < 0 || idx >= SSL_MD_NUM_IDX)
+        return NULL;
+    return ssl_digest_methods[idx];
+}
+
+const EVP_MD *ssl_handshake_md(SSL *s)
+{
+    return ssl_md(ssl_get_algorithm2(s));
+}
+
+const EVP_MD *ssl_prf_md(SSL *s)
+{
+    return ssl_md(ssl_get_algorithm2(s) >> TLS1_PRF_DGST_SHIFT);
+}
+
+#define ITEM_SEP(a) \
+        (((a) == ':') || ((a) == ' ') || ((a) == ';') || ((a) == ','))
+
+static void ll_append_tail(CIPHER_ORDER **head, CIPHER_ORDER *curr,
+                           CIPHER_ORDER **tail)
+{
+    if (curr == *tail)
+        return;
+    if (curr == *head)
+        *head = curr->next;
+    if (curr->prev != NULL)
+        curr->prev->next = curr->next;
+    if (curr->next != NULL)
+        curr->next->prev = curr->prev;
+    (*tail)->next = curr;
+    curr->prev = *tail;
+    curr->next = NULL;
+    *tail = curr;
+}
+
+static void ll_append_head(CIPHER_ORDER **head, CIPHER_ORDER *curr,
+                           CIPHER_ORDER **tail)
+{
+    if (curr == *head)
+        return;
+    if (curr == *tail)
+        *tail = curr->prev;
+    if (curr->next != NULL)
+        curr->next->prev = curr->prev;
+    if (curr->prev != NULL)
+        curr->prev->next = curr->next;
+    (*head)->prev = curr;
+    curr->next = *head;
+    curr->prev = NULL;
+    *head = curr;
+}
+
+static void ssl_cipher_collect_ciphers(const SSL_METHOD *ssl_method,
+                                       int num_of_ciphers,
+                                       uint32_t disabled_mkey,
+                                       uint32_t disabled_auth,
+                                       uint32_t disabled_enc,
+                                       uint32_t disabled_mac,
+                                       CIPHER_ORDER *co_list,
+                                       CIPHER_ORDER **head_p,
+                                       CIPHER_ORDER **tail_p)
+{
+    int i, co_list_num;
+    const SSL_CIPHER *c;
+
+    /*
+     * We have num_of_ciphers descriptions compiled in, depending on the
+     * method selected (SSLv3, TLSv1 etc).
+     * These will later be sorted in a linked list with at most num
+     * entries.
+     */
+
+    /* Get the initial list of ciphers */
+    co_list_num = 0;            /* actual count of ciphers */
+    for (i = 0; i < num_of_ciphers; i++) {
+        c = ssl_method->get_cipher(i);
+        /* drop those that use any of that is not available */
+        if (c == NULL || !c->valid)
+            continue;
+        if ((c->algorithm_mkey & disabled_mkey) ||
+            (c->algorithm_auth & disabled_auth) ||
+            (c->algorithm_enc & disabled_enc) ||
+            (c->algorithm_mac & disabled_mac))
+            continue;
+        if (((ssl_method->ssl3_enc->enc_flags & SSL_ENC_FLAG_DTLS) == 0) &&
+            c->min_tls == 0)
+            continue;
+        if (((ssl_method->ssl3_enc->enc_flags & SSL_ENC_FLAG_DTLS) != 0) &&
+            c->min_dtls == 0)
+            continue;
+
+        co_list[co_list_num].cipher = c;
+        co_list[co_list_num].next = NULL;
+        co_list[co_list_num].prev = NULL;
+        co_list[co_list_num].active = 0;
+        co_list_num++;
+    }
+
+    /*
+     * Prepare linked list from list entries
+     */
+    if (co_list_num > 0) {
+        co_list[0].prev = NULL;
+
+        if (co_list_num > 1) {
+            co_list[0].next = &co_list[1];
+
+            for (i = 1; i < co_list_num - 1; i++) {
+                co_list[i].prev = &co_list[i - 1];
+                co_list[i].next = &co_list[i + 1];
+            }
+
+            co_list[co_list_num - 1].prev = &co_list[co_list_num - 2];
+        }
+
+        co_list[co_list_num - 1].next = NULL;
+
+        *head_p = &co_list[0];
+        *tail_p = &co_list[co_list_num - 1];
+    }
+}
+
+static void ssl_cipher_collect_aliases(const SSL_CIPHER **ca_list,
+                                       int num_of_group_aliases,
+                                       uint32_t disabled_mkey,
+                                       uint32_t disabled_auth,
+                                       uint32_t disabled_enc,
+                                       uint32_t disabled_mac,
+                                       CIPHER_ORDER *head)
+{
+    CIPHER_ORDER *ciph_curr;
+    const SSL_CIPHER **ca_curr;
+    int i;
+    uint32_t mask_mkey = ~disabled_mkey;
+    uint32_t mask_auth = ~disabled_auth;
+    uint32_t mask_enc = ~disabled_enc;
+    uint32_t mask_mac = ~disabled_mac;
+
+    /*
+     * First, add the real ciphers as already collected
+     */
+    ciph_curr = head;
+    ca_curr = ca_list;
+    while (ciph_curr != NULL) {
+        *ca_curr = ciph_curr->cipher;
+        ca_curr++;
+        ciph_curr = ciph_curr->next;
+    }
+
+    /*
+     * Now we add the available ones from the cipher_aliases[] table.
+     * They represent either one or more algorithms, some of which
+     * in any affected category must be supported (set in enabled_mask),
+     * or represent a cipher strength value (will be added in any case because algorithms=0).
+     */
+    for (i = 0; i < num_of_group_aliases; i++) {
+        uint32_t algorithm_mkey = cipher_aliases[i].algorithm_mkey;
+        uint32_t algorithm_auth = cipher_aliases[i].algorithm_auth;
+        uint32_t algorithm_enc = cipher_aliases[i].algorithm_enc;
+        uint32_t algorithm_mac = cipher_aliases[i].algorithm_mac;
+
+        if (algorithm_mkey)
+            if ((algorithm_mkey & mask_mkey) == 0)
+                continue;
+
+        if (algorithm_auth)
+            if ((algorithm_auth & mask_auth) == 0)
+                continue;
+
+        if (algorithm_enc)
+            if ((algorithm_enc & mask_enc) == 0)
+                continue;
+
+        if (algorithm_mac)
+            if ((algorithm_mac & mask_mac) == 0)
+                continue;
+
+        *ca_curr = (SSL_CIPHER *)(cipher_aliases + i);
+        ca_curr++;
+    }
+
+    *ca_curr = NULL;            /* end of list */
+}
+
+static void ssl_cipher_apply_rule(uint32_t cipher_id, uint32_t alg_mkey,
+                                  uint32_t alg_auth, uint32_t alg_enc,
+                                  uint32_t alg_mac, int min_tls,
+                                  uint32_t algo_strength, int rule,
+                                  int32_t strength_bits, CIPHER_ORDER **head_p,
+                                  CIPHER_ORDER **tail_p)
+{
+    CIPHER_ORDER *head, *tail, *curr, *next, *last;
+    const SSL_CIPHER *cp;
+    int reverse = 0;
+
+#ifdef CIPHER_DEBUG
+    fprintf(stderr,
+            "Applying rule %d with %08x/%08x/%08x/%08x/%08x %08x (%d)\n",
+            rule, alg_mkey, alg_auth, alg_enc, alg_mac, min_tls,
+            algo_strength, strength_bits);
+#endif
+
+    if (rule == CIPHER_DEL || rule == CIPHER_BUMP)
+        reverse = 1;            /* needed to maintain sorting between currently
+                                 * deleted ciphers */
+
+    head = *head_p;
+    tail = *tail_p;
+
+    if (reverse) {
+        next = tail;
+        last = head;
+    } else {
+        next = head;
+        last = tail;
+    }
+
+    curr = NULL;
+    for (;;) {
+        if (curr == last)
+            break;
+
+        curr = next;
+
+        if (curr == NULL)
+            break;
+
+        next = reverse ? curr->prev : curr->next;
+
+        cp = curr->cipher;
+
+        /*
+         * Selection criteria is either the value of strength_bits
+         * or the algorithms used.
+         */
+        if (strength_bits >= 0) {
+            if (strength_bits != cp->strength_bits)
+                continue;
+        } else {
+#ifdef CIPHER_DEBUG
+            fprintf(stderr,
+                    "\nName: %s:\nAlgo = %08x/%08x/%08x/%08x/%08x Algo_strength = %08x\n",
+                    cp->name, cp->algorithm_mkey, cp->algorithm_auth,
+                    cp->algorithm_enc, cp->algorithm_mac, cp->min_tls,
+                    cp->algo_strength);
+#endif
+            if (cipher_id != 0 && (cipher_id != cp->id))
+                continue;
+            if (alg_mkey && !(alg_mkey & cp->algorithm_mkey))
+                continue;
+            if (alg_auth && !(alg_auth & cp->algorithm_auth))
+                continue;
+            if (alg_enc && !(alg_enc & cp->algorithm_enc))
+                continue;
+            if (alg_mac && !(alg_mac & cp->algorithm_mac))
+                continue;
+            if (min_tls && (min_tls != cp->min_tls))
+                continue;
+            if ((algo_strength & SSL_STRONG_MASK)
+                && !(algo_strength & SSL_STRONG_MASK & cp->algo_strength))
+                continue;
+            if ((algo_strength & SSL_DEFAULT_MASK)
+                && !(algo_strength & SSL_DEFAULT_MASK & cp->algo_strength))
+                continue;
+        }
+
+#ifdef CIPHER_DEBUG
+        fprintf(stderr, "Action = %d\n", rule);
+#endif
+
+        /* add the cipher if it has not been added yet. */
+        if (rule == CIPHER_ADD) {
+            /* reverse == 0 */
+            if (!curr->active) {
+                ll_append_tail(&head, curr, &tail);
+                curr->active = 1;
+            }
+        }
+        /* Move the added cipher to this location */
+        else if (rule == CIPHER_ORD) {
+            /* reverse == 0 */
+            if (curr->active) {
+                ll_append_tail(&head, curr, &tail);
+            }
+        } else if (rule == CIPHER_DEL) {
+            /* reverse == 1 */
+            if (curr->active) {
+                /*
+                 * most recently deleted ciphersuites get best positions for
+                 * any future CIPHER_ADD (note that the CIPHER_DEL loop works
+                 * in reverse to maintain the order)
+                 */
+                ll_append_head(&head, curr, &tail);
+                curr->active = 0;
+            }
+        } else if (rule == CIPHER_BUMP) {
+            if (curr->active)
+                ll_append_head(&head, curr, &tail);
+        } else if (rule == CIPHER_KILL) {
+            /* reverse == 0 */
+            if (head == curr)
+                head = curr->next;
+            else
+                curr->prev->next = curr->next;
+            if (tail == curr)
+                tail = curr->prev;
+            curr->active = 0;
+            if (curr->next != NULL)
+                curr->next->prev = curr->prev;
+            if (curr->prev != NULL)
+                curr->prev->next = curr->next;
+            curr->next = NULL;
+            curr->prev = NULL;
+        }
+    }
+
+    *head_p = head;
+    *tail_p = tail;
+}
+
+static int ssl_cipher_strength_sort(CIPHER_ORDER **head_p,
+                                    CIPHER_ORDER **tail_p)
+{
+    int32_t max_strength_bits;
+    int i, *number_uses;
+    CIPHER_ORDER *curr;
+
+    /*
+     * This routine sorts the ciphers with descending strength. The sorting
+     * must keep the pre-sorted sequence, so we apply the normal sorting
+     * routine as '+' movement to the end of the list.
+     */
+    max_strength_bits = 0;
+    curr = *head_p;
+    while (curr != NULL) {
+        if (curr->active && (curr->cipher->strength_bits > max_strength_bits))
+            max_strength_bits = curr->cipher->strength_bits;
+        curr = curr->next;
+    }
+
+    number_uses = OPENSSL_zalloc(sizeof(int) * (max_strength_bits + 1));
+    if (number_uses == NULL) {
+        SSLerr(SSL_F_SSL_CIPHER_STRENGTH_SORT, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    /*
+     * Now find the strength_bits values actually used
+     */
+    curr = *head_p;
+    while (curr != NULL) {
+        if (curr->active)
+            number_uses[curr->cipher->strength_bits]++;
+        curr = curr->next;
+    }
+    /*
+     * Go through the list of used strength_bits values in descending
+     * order.
+     */
+    for (i = max_strength_bits; i >= 0; i--)
+        if (number_uses[i] > 0)
+            ssl_cipher_apply_rule(0, 0, 0, 0, 0, 0, 0, CIPHER_ORD, i, head_p,
+                                  tail_p);
+
+    OPENSSL_free(number_uses);
+    return 1;
+}
+
+static int ssl_cipher_process_rulestr(const char *rule_str,
+                                      CIPHER_ORDER **head_p,
+                                      CIPHER_ORDER **tail_p,
+                                      const SSL_CIPHER **ca_list, CERT *c)
+{
+    uint32_t alg_mkey, alg_auth, alg_enc, alg_mac, algo_strength;
+    int min_tls;
+    const char *l, *buf;
+    int j, multi, found, rule, retval, ok, buflen;
+    uint32_t cipher_id = 0;
+    char ch;
+
+    retval = 1;
+    l = rule_str;
+    for ( ; ; ) {
+        ch = *l;
+
+        if (ch == '\0')
+            break;              /* done */
+        if (ch == '-') {
+            rule = CIPHER_DEL;
+            l++;
+        } else if (ch == '+') {
+            rule = CIPHER_ORD;
+            l++;
+        } else if (ch == '!') {
+            rule = CIPHER_KILL;
+            l++;
+        } else if (ch == '@') {
+            rule = CIPHER_SPECIAL;
+            l++;
+        } else {
+            rule = CIPHER_ADD;
+        }
+
+        if (ITEM_SEP(ch)) {
+            l++;
+            continue;
+        }
+
+        alg_mkey = 0;
+        alg_auth = 0;
+        alg_enc = 0;
+        alg_mac = 0;
+        min_tls = 0;
+        algo_strength = 0;
+
+        for (;;) {
+            ch = *l;
+            buf = l;
+            buflen = 0;
+#ifndef CHARSET_EBCDIC
+            while (((ch >= 'A') && (ch <= 'Z')) ||
+                   ((ch >= '0') && (ch <= '9')) ||
+                   ((ch >= 'a') && (ch <= 'z')) ||
+                   (ch == '-') || (ch == '.') || (ch == '='))
+#else
+            while (isalnum((unsigned char)ch) || (ch == '-') || (ch == '.')
+                   || (ch == '='))
+#endif
+            {
+                ch = *(++l);
+                buflen++;
+            }
+
+            if (buflen == 0) {
+                /*
+                 * We hit something we cannot deal with,
+                 * it is no command or separator nor
+                 * alphanumeric, so we call this an error.
+                 */
+                SSLerr(SSL_F_SSL_CIPHER_PROCESS_RULESTR, SSL_R_INVALID_COMMAND);
+                retval = found = 0;
+                l++;
+                break;
+            }
+
+            if (rule == CIPHER_SPECIAL) {
+                found = 0;      /* unused -- avoid compiler warning */
+                break;          /* special treatment */
+            }
+
+            /* check for multi-part specification */
+            if (ch == '+') {
+                multi = 1;
+                l++;
+            } else {
+                multi = 0;
+            }
+
+            /*
+             * Now search for the cipher alias in the ca_list. Be careful
+             * with the strncmp, because the "buflen" limitation
+             * will make the rule "ADH:SOME" and the cipher
+             * "ADH-MY-CIPHER" look like a match for buflen=3.
+             * So additionally check whether the cipher name found
+             * has the correct length. We can save a strlen() call:
+             * just checking for the '\0' at the right place is
+             * sufficient, we have to strncmp() anyway. (We cannot
+             * use strcmp(), because buf is not '\0' terminated.)
+             */
+            j = found = 0;
+            cipher_id = 0;
+            while (ca_list[j]) {
+                if (strncmp(buf, ca_list[j]->name, buflen) == 0
+                    && (ca_list[j]->name[buflen] == '\0')) {
+                    found = 1;
+                    break;
+                } else
+                    j++;
+            }
+
+            if (!found)
+                break;          /* ignore this entry */
+
+            if (ca_list[j]->algorithm_mkey) {
+                if (alg_mkey) {
+                    alg_mkey &= ca_list[j]->algorithm_mkey;
+                    if (!alg_mkey) {
+                        found = 0;
+                        break;
+                    }
+                } else {
+                    alg_mkey = ca_list[j]->algorithm_mkey;
+                }
+            }
+
+            if (ca_list[j]->algorithm_auth) {
+                if (alg_auth) {
+                    alg_auth &= ca_list[j]->algorithm_auth;
+                    if (!alg_auth) {
+                        found = 0;
+                        break;
+                    }
+                } else {
+                    alg_auth = ca_list[j]->algorithm_auth;
+                }
+            }
+
+            if (ca_list[j]->algorithm_enc) {
+                if (alg_enc) {
+                    alg_enc &= ca_list[j]->algorithm_enc;
+                    if (!alg_enc) {
+                        found = 0;
+                        break;
+                    }
+                } else {
+                    alg_enc = ca_list[j]->algorithm_enc;
+                }
+            }
+
+            if (ca_list[j]->algorithm_mac) {
+                if (alg_mac) {
+                    alg_mac &= ca_list[j]->algorithm_mac;
+                    if (!alg_mac) {
+                        found = 0;
+                        break;
+                    }
+                } else {
+                    alg_mac = ca_list[j]->algorithm_mac;
+                }
+            }
+
+            if (ca_list[j]->algo_strength & SSL_STRONG_MASK) {
+                if (algo_strength & SSL_STRONG_MASK) {
+                    algo_strength &=
+                        (ca_list[j]->algo_strength & SSL_STRONG_MASK) |
+                        ~SSL_STRONG_MASK;
+                    if (!(algo_strength & SSL_STRONG_MASK)) {
+                        found = 0;
+                        break;
+                    }
+                } else {
+                    algo_strength = ca_list[j]->algo_strength & SSL_STRONG_MASK;
+                }
+            }
+
+            if (ca_list[j]->algo_strength & SSL_DEFAULT_MASK) {
+                if (algo_strength & SSL_DEFAULT_MASK) {
+                    algo_strength &=
+                        (ca_list[j]->algo_strength & SSL_DEFAULT_MASK) |
+                        ~SSL_DEFAULT_MASK;
+                    if (!(algo_strength & SSL_DEFAULT_MASK)) {
+                        found = 0;
+                        break;
+                    }
+                } else {
+                    algo_strength |=
+                        ca_list[j]->algo_strength & SSL_DEFAULT_MASK;
+                }
+            }
+
+            if (ca_list[j]->valid) {
+                /*
+                 * explicit ciphersuite found; its protocol version does not
+                 * become part of the search pattern!
+                 */
+
+                cipher_id = ca_list[j]->id;
+            } else {
+                /*
+                 * not an explicit ciphersuite; only in this case, the
+                 * protocol version is considered part of the search pattern
+                 */
+
+                if (ca_list[j]->min_tls) {
+                    if (min_tls != 0 && min_tls != ca_list[j]->min_tls) {
+                        found = 0;
+                        break;
+                    } else {
+                        min_tls = ca_list[j]->min_tls;
+                    }
+                }
+            }
+
+            if (!multi)
+                break;
+        }
+
+        /*
+         * Ok, we have the rule, now apply it
+         */
+        if (rule == CIPHER_SPECIAL) { /* special command */
+            ok = 0;
+            if ((buflen == 8) && strncmp(buf, "STRENGTH", 8) == 0) {
+                ok = ssl_cipher_strength_sort(head_p, tail_p);
+            } else if (buflen == 10 && strncmp(buf, "SECLEVEL=", 9) == 0) {
+                int level = buf[9] - '0';
+                if (level < 0 || level > 5) {
+                    SSLerr(SSL_F_SSL_CIPHER_PROCESS_RULESTR,
+                           SSL_R_INVALID_COMMAND);
+                } else {
+                    c->sec_level = level;
+                    ok = 1;
+                }
+            } else {
+                SSLerr(SSL_F_SSL_CIPHER_PROCESS_RULESTR, SSL_R_INVALID_COMMAND);
+            }
+            if (ok == 0)
+                retval = 0;
+            /*
+             * We do not support any "multi" options
+             * together with "@", so throw away the
+             * rest of the command, if any left, until
+             * end or ':' is found.
+             */
+            while ((*l != '\0') && !ITEM_SEP(*l))
+                l++;
+        } else if (found) {
+            ssl_cipher_apply_rule(cipher_id,
+                                  alg_mkey, alg_auth, alg_enc, alg_mac,
+                                  min_tls, algo_strength, rule, -1, head_p,
+                                  tail_p);
+        } else {
+            while ((*l != '\0') && !ITEM_SEP(*l))
+                l++;
+        }
+        if (*l == '\0')
+            break;              /* done */
+    }
+
+    return retval;
+}
+
+#ifndef OPENSSL_NO_EC
+static int check_suiteb_cipher_list(const SSL_METHOD *meth, CERT *c,
+                                    const char **prule_str)
+{
+    unsigned int suiteb_flags = 0, suiteb_comb2 = 0;
+    if (strncmp(*prule_str, "SUITEB128ONLY", 13) == 0) {
+        suiteb_flags = SSL_CERT_FLAG_SUITEB_128_LOS_ONLY;
+    } else if (strncmp(*prule_str, "SUITEB128C2", 11) == 0) {
+        suiteb_comb2 = 1;
+        suiteb_flags = SSL_CERT_FLAG_SUITEB_128_LOS;
+    } else if (strncmp(*prule_str, "SUITEB128", 9) == 0) {
+        suiteb_flags = SSL_CERT_FLAG_SUITEB_128_LOS;
+    } else if (strncmp(*prule_str, "SUITEB192", 9) == 0) {
+        suiteb_flags = SSL_CERT_FLAG_SUITEB_192_LOS;
+    }
+
+    if (suiteb_flags) {
+        c->cert_flags &= ~SSL_CERT_FLAG_SUITEB_128_LOS;
+        c->cert_flags |= suiteb_flags;
+    } else {
+        suiteb_flags = c->cert_flags & SSL_CERT_FLAG_SUITEB_128_LOS;
+    }
+
+    if (!suiteb_flags)
+        return 1;
+    /* Check version: if TLS 1.2 ciphers allowed we can use Suite B */
+
+    if (!(meth->ssl3_enc->enc_flags & SSL_ENC_FLAG_TLS1_2_CIPHERS)) {
+        SSLerr(SSL_F_CHECK_SUITEB_CIPHER_LIST,
+               SSL_R_AT_LEAST_TLS_1_2_NEEDED_IN_SUITEB_MODE);
+        return 0;
+    }
+# ifndef OPENSSL_NO_EC
+    switch (suiteb_flags) {
+    case SSL_CERT_FLAG_SUITEB_128_LOS:
+        if (suiteb_comb2)
+            *prule_str = "ECDHE-ECDSA-AES256-GCM-SHA384";
+        else
+            *prule_str =
+                "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384";
+        break;
+    case SSL_CERT_FLAG_SUITEB_128_LOS_ONLY:
+        *prule_str = "ECDHE-ECDSA-AES128-GCM-SHA256";
+        break;
+    case SSL_CERT_FLAG_SUITEB_192_LOS:
+        *prule_str = "ECDHE-ECDSA-AES256-GCM-SHA384";
+        break;
+    }
+    return 1;
+# else
+    SSLerr(SSL_F_CHECK_SUITEB_CIPHER_LIST, SSL_R_ECDH_REQUIRED_FOR_SUITEB_MODE);
+    return 0;
+# endif
+}
+#endif
+
+static int ciphersuite_cb(const char *elem, int len, void *arg)
+{
+    STACK_OF(SSL_CIPHER) *ciphersuites = (STACK_OF(SSL_CIPHER) *)arg;
+    const SSL_CIPHER *cipher;
+    /* Arbitrary sized temp buffer for the cipher name. Should be big enough */
+    char name[80];
+
+    if (len > (int)(sizeof(name) - 1)) {
+        SSLerr(SSL_F_CIPHERSUITE_CB, SSL_R_NO_CIPHER_MATCH);
+        return 0;
+    }
+
+    memcpy(name, elem, len);
+    name[len] = '\0';
+
+    cipher = ssl3_get_cipher_by_std_name(name);
+    if (cipher == NULL) {
+        SSLerr(SSL_F_CIPHERSUITE_CB, SSL_R_NO_CIPHER_MATCH);
+        return 0;
+    }
+
+    if (!sk_SSL_CIPHER_push(ciphersuites, cipher)) {
+        SSLerr(SSL_F_CIPHERSUITE_CB, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    return 1;
+}
+
+static __owur int set_ciphersuites(STACK_OF(SSL_CIPHER) **currciphers, const char *str)
+{
+    STACK_OF(SSL_CIPHER) *newciphers = sk_SSL_CIPHER_new_null();
+
+    if (newciphers == NULL)
+        return 0;
+
+    /* Parse the list. We explicitly allow an empty list */
+    if (*str != '\0'
+            && !CONF_parse_list(str, ':', 1, ciphersuite_cb, newciphers)) {
+        sk_SSL_CIPHER_free(newciphers);
+        return 0;
+    }
+    sk_SSL_CIPHER_free(*currciphers);
+    *currciphers = newciphers;
+
+    return 1;
+}
+
+static int update_cipher_list_by_id(STACK_OF(SSL_CIPHER) **cipher_list_by_id,
+                                    STACK_OF(SSL_CIPHER) *cipherstack)
+{
+    STACK_OF(SSL_CIPHER) *tmp_cipher_list = sk_SSL_CIPHER_dup(cipherstack);
+
+    if (tmp_cipher_list == NULL) {
+        return 0;
+    }
+
+    sk_SSL_CIPHER_free(*cipher_list_by_id);
+    *cipher_list_by_id = tmp_cipher_list;
+
+    (void)sk_SSL_CIPHER_set_cmp_func(*cipher_list_by_id, ssl_cipher_ptr_id_cmp);
+    sk_SSL_CIPHER_sort(*cipher_list_by_id);
+
+    return 1;
+}
+
+static int update_cipher_list(STACK_OF(SSL_CIPHER) **cipher_list,
+                              STACK_OF(SSL_CIPHER) **cipher_list_by_id,
+                              STACK_OF(SSL_CIPHER) *tls13_ciphersuites)
+{
+    int i;
+    STACK_OF(SSL_CIPHER) *tmp_cipher_list = sk_SSL_CIPHER_dup(*cipher_list);
+
+    if (tmp_cipher_list == NULL)
+        return 0;
+
+    /*
+     * Delete any existing TLSv1.3 ciphersuites. These are always first in the
+     * list.
+     */
+    while (sk_SSL_CIPHER_num(tmp_cipher_list) > 0
+           && sk_SSL_CIPHER_value(tmp_cipher_list, 0)->min_tls
+              == TLS1_3_VERSION)
+        sk_SSL_CIPHER_delete(tmp_cipher_list, 0);
+
+    /* Insert the new TLSv1.3 ciphersuites */
+    for (i = 0; i < sk_SSL_CIPHER_num(tls13_ciphersuites); i++)
+        sk_SSL_CIPHER_insert(tmp_cipher_list,
+                             sk_SSL_CIPHER_value(tls13_ciphersuites, i), i);
+
+    if (!update_cipher_list_by_id(cipher_list_by_id, tmp_cipher_list))
+        return 0;
+
+    sk_SSL_CIPHER_free(*cipher_list);
+    *cipher_list = tmp_cipher_list;
+
+    return 1;
+}
+
+int SSL_CTX_set_ciphersuites(SSL_CTX *ctx, const char *str)
+{
+    int ret = set_ciphersuites(&(ctx->tls13_ciphersuites), str);
+
+    if (ret && ctx->cipher_list != NULL) {
+        /* We already have a cipher_list, so we need to update it */
+        return update_cipher_list(&ctx->cipher_list, &ctx->cipher_list_by_id,
+                                  ctx->tls13_ciphersuites);
+    }
+
+    return ret;
+}
+
+int SSL_set_ciphersuites(SSL *s, const char *str)
+{
+    int ret = set_ciphersuites(&(s->tls13_ciphersuites), str);
+
+    if (ret && s->cipher_list != NULL) {
+        /* We already have a cipher_list, so we need to update it */
+        return update_cipher_list(&s->cipher_list, &s->cipher_list_by_id,
+                                  s->tls13_ciphersuites);
+    }
+
+    return ret;
+}
+
+STACK_OF(SSL_CIPHER) *ssl_create_cipher_list(const SSL_METHOD *ssl_method,
+                                             STACK_OF(SSL_CIPHER) *tls13_ciphersuites,
+                                             STACK_OF(SSL_CIPHER) **cipher_list,
+                                             STACK_OF(SSL_CIPHER) **cipher_list_by_id,
+                                             const char *rule_str,
+                                             CERT *c)
+{
+    int ok, num_of_ciphers, num_of_alias_max, num_of_group_aliases, i;
+    uint32_t disabled_mkey, disabled_auth, disabled_enc, disabled_mac;
+    STACK_OF(SSL_CIPHER) *cipherstack;
+    const char *rule_p;
+    CIPHER_ORDER *co_list = NULL, *head = NULL, *tail = NULL, *curr;
+    const SSL_CIPHER **ca_list = NULL;
+
+    /*
+     * Return with error if nothing to do.
+     */
+    if (rule_str == NULL || cipher_list == NULL || cipher_list_by_id == NULL)
+        return NULL;
+#ifndef OPENSSL_NO_EC
+    if (!check_suiteb_cipher_list(ssl_method, c, &rule_str))
+        return NULL;
+#endif
+
+    /*
+     * To reduce the work to do we only want to process the compiled
+     * in algorithms, so we first get the mask of disabled ciphers.
+     */
+
+    disabled_mkey = disabled_mkey_mask;
+    disabled_auth = disabled_auth_mask;
+    disabled_enc = disabled_enc_mask;
+    disabled_mac = disabled_mac_mask;
+
+    /*
+     * Now we have to collect the available ciphers from the compiled
+     * in ciphers. We cannot get more than the number compiled in, so
+     * it is used for allocation.
+     */
+    num_of_ciphers = ssl_method->num_ciphers();
+
+    co_list = OPENSSL_malloc(sizeof(*co_list) * num_of_ciphers);
+    if (co_list == NULL) {
+        SSLerr(SSL_F_SSL_CREATE_CIPHER_LIST, ERR_R_MALLOC_FAILURE);
+        return NULL;          /* Failure */
+    }
+
+    ssl_cipher_collect_ciphers(ssl_method, num_of_ciphers,
+                               disabled_mkey, disabled_auth, disabled_enc,
+                               disabled_mac, co_list, &head, &tail);
+
+    /* Now arrange all ciphers by preference. */
+
+    /*
+     * Everything else being equal, prefer ephemeral ECDH over other key
+     * exchange mechanisms.
+     * For consistency, prefer ECDSA over RSA (though this only matters if the
+     * server has both certificates, and is using the DEFAULT, or a client
+     * preference).
+     */
+    ssl_cipher_apply_rule(0, SSL_kECDHE, SSL_aECDSA, 0, 0, 0, 0, CIPHER_ADD,
+                          -1, &head, &tail);
+    ssl_cipher_apply_rule(0, SSL_kECDHE, 0, 0, 0, 0, 0, CIPHER_ADD, -1, &head,
+                          &tail);
+    ssl_cipher_apply_rule(0, SSL_kECDHE, 0, 0, 0, 0, 0, CIPHER_DEL, -1, &head,
+                          &tail);
+
+    /* Within each strength group, we prefer GCM over CHACHA... */
+    ssl_cipher_apply_rule(0, 0, 0, SSL_AESGCM, 0, 0, 0, CIPHER_ADD, -1,
+                          &head, &tail);
+    ssl_cipher_apply_rule(0, 0, 0, SSL_CHACHA20, 0, 0, 0, CIPHER_ADD, -1,
+                          &head, &tail);
+
+    /*
+     * ...and generally, our preferred cipher is AES.
+     * Note that AEADs will be bumped to take preference after sorting by
+     * strength.
+     */
+    ssl_cipher_apply_rule(0, 0, 0, SSL_AES ^ SSL_AESGCM, 0, 0, 0, CIPHER_ADD,
+                          -1, &head, &tail);
+
+    /* Temporarily enable everything else for sorting */
+    ssl_cipher_apply_rule(0, 0, 0, 0, 0, 0, 0, CIPHER_ADD, -1, &head, &tail);
+
+    /* Low priority for MD5 */
+    ssl_cipher_apply_rule(0, 0, 0, 0, SSL_MD5, 0, 0, CIPHER_ORD, -1, &head,
+                          &tail);
+
+    /*
+     * Move anonymous ciphers to the end.  Usually, these will remain
+     * disabled. (For applications that allow them, they aren't too bad, but
+     * we prefer authenticated ciphers.)
+     */
+    ssl_cipher_apply_rule(0, 0, SSL_aNULL, 0, 0, 0, 0, CIPHER_ORD, -1, &head,
+                          &tail);
+
+    ssl_cipher_apply_rule(0, SSL_kRSA, 0, 0, 0, 0, 0, CIPHER_ORD, -1, &head,
+                          &tail);
+    ssl_cipher_apply_rule(0, SSL_kPSK, 0, 0, 0, 0, 0, CIPHER_ORD, -1, &head,
+                          &tail);
+
+    /* RC4 is sort-of broken -- move to the end */
+    ssl_cipher_apply_rule(0, 0, 0, SSL_RC4, 0, 0, 0, CIPHER_ORD, -1, &head,
+                          &tail);
+
+    /*
+     * Now sort by symmetric encryption strength.  The above ordering remains
+     * in force within each class
+     */
+    if (!ssl_cipher_strength_sort(&head, &tail)) {
+        OPENSSL_free(co_list);
+        return NULL;
+    }
+
+    /*
+     * Partially overrule strength sort to prefer TLS 1.2 ciphers/PRFs.
+     * TODO(openssl-team): is there an easier way to accomplish all this?
+     */
+    ssl_cipher_apply_rule(0, 0, 0, 0, 0, TLS1_2_VERSION, 0, CIPHER_BUMP, -1,
+                          &head, &tail);
+
+    /*
+     * Irrespective of strength, enforce the following order:
+     * (EC)DHE + AEAD > (EC)DHE > rest of AEAD > rest.
+     * Within each group, ciphers remain sorted by strength and previous
+     * preference, i.e.,
+     * 1) ECDHE > DHE
+     * 2) GCM > CHACHA
+     * 3) AES > rest
+     * 4) TLS 1.2 > legacy
+     *
+     * Because we now bump ciphers to the top of the list, we proceed in
+     * reverse order of preference.
+     */
+    ssl_cipher_apply_rule(0, 0, 0, 0, SSL_AEAD, 0, 0, CIPHER_BUMP, -1,
+                          &head, &tail);
+    ssl_cipher_apply_rule(0, SSL_kDHE | SSL_kECDHE, 0, 0, 0, 0, 0,
+                          CIPHER_BUMP, -1, &head, &tail);
+    ssl_cipher_apply_rule(0, SSL_kDHE | SSL_kECDHE, 0, 0, SSL_AEAD, 0, 0,
+                          CIPHER_BUMP, -1, &head, &tail);
+
+    /* Now disable everything (maintaining the ordering!) */
+    ssl_cipher_apply_rule(0, 0, 0, 0, 0, 0, 0, CIPHER_DEL, -1, &head, &tail);
+
+    /*
+     * We also need cipher aliases for selecting based on the rule_str.
+     * There might be two types of entries in the rule_str: 1) names
+     * of ciphers themselves 2) aliases for groups of ciphers.
+     * For 1) we need the available ciphers and for 2) the cipher
+     * groups of cipher_aliases added together in one list (otherwise
+     * we would be happy with just the cipher_aliases table).
+     */
+    num_of_group_aliases = OSSL_NELEM(cipher_aliases);
+    num_of_alias_max = num_of_ciphers + num_of_group_aliases + 1;
+    ca_list = OPENSSL_malloc(sizeof(*ca_list) * num_of_alias_max);
+    if (ca_list == NULL) {
+        OPENSSL_free(co_list);
+        SSLerr(SSL_F_SSL_CREATE_CIPHER_LIST, ERR_R_MALLOC_FAILURE);
+        return NULL;          /* Failure */
+    }
+    ssl_cipher_collect_aliases(ca_list, num_of_group_aliases,
+                               disabled_mkey, disabled_auth, disabled_enc,
+                               disabled_mac, head);
+
+    /*
+     * If the rule_string begins with DEFAULT, apply the default rule
+     * before using the (possibly available) additional rules.
+     */
+    ok = 1;
+    rule_p = rule_str;
+    if (strncmp(rule_str, "DEFAULT", 7) == 0) {
+        ok = ssl_cipher_process_rulestr(SSL_DEFAULT_CIPHER_LIST,
+                                        &head, &tail, ca_list, c);
+        rule_p += 7;
+        if (*rule_p == ':')
+            rule_p++;
+    }
+
+    if (ok && (strlen(rule_p) > 0))
+        ok = ssl_cipher_process_rulestr(rule_p, &head, &tail, ca_list, c);
+
+    OPENSSL_free(ca_list);      /* Not needed anymore */
+
+    if (!ok) {                  /* Rule processing failure */
+        OPENSSL_free(co_list);
+        return NULL;
+    }
+
+    /*
+     * Allocate new "cipherstack" for the result, return with error
+     * if we cannot get one.
+     */
+    if ((cipherstack = sk_SSL_CIPHER_new_null()) == NULL) {
+        OPENSSL_free(co_list);
+        return NULL;
+    }
+
+    /* Add TLSv1.3 ciphers first - we always prefer those if possible */
+    for (i = 0; i < sk_SSL_CIPHER_num(tls13_ciphersuites); i++) {
+        if (!sk_SSL_CIPHER_push(cipherstack,
+                                sk_SSL_CIPHER_value(tls13_ciphersuites, i))) {
+            sk_SSL_CIPHER_free(cipherstack);
+            return NULL;
+        }
+    }
+
+    /*
+     * The cipher selection for the list is done. The ciphers are added
+     * to the resulting precedence to the STACK_OF(SSL_CIPHER).
+     */
+    for (curr = head; curr != NULL; curr = curr->next) {
+        if (curr->active) {
+            if (!sk_SSL_CIPHER_push(cipherstack, curr->cipher)) {
+                OPENSSL_free(co_list);
+                sk_SSL_CIPHER_free(cipherstack);
+                return NULL;
+            }
+#ifdef CIPHER_DEBUG
+            fprintf(stderr, "<%s>\n", curr->cipher->name);
+#endif
+        }
+    }
+    OPENSSL_free(co_list);      /* Not needed any longer */
+
+    if (!update_cipher_list_by_id(cipher_list_by_id, cipherstack)) {
+        sk_SSL_CIPHER_free(cipherstack);
+        return NULL;
+    }
+    sk_SSL_CIPHER_free(*cipher_list);
+    *cipher_list = cipherstack;
+
+    return cipherstack;
+}
+
+char *SSL_CIPHER_description(const SSL_CIPHER *cipher, char *buf, int len)
+{
+    const char *ver;
+    const char *kx, *au, *enc, *mac;
+    uint32_t alg_mkey, alg_auth, alg_enc, alg_mac;
+    static const char *format = "%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s\n";
+
+    if (buf == NULL) {
+        len = 128;
+        if ((buf = OPENSSL_malloc(len)) == NULL) {
+            SSLerr(SSL_F_SSL_CIPHER_DESCRIPTION, ERR_R_MALLOC_FAILURE);
+            return NULL;
+        }
+    } else if (len < 128) {
+        return NULL;
+    }
+
+    alg_mkey = cipher->algorithm_mkey;
+    alg_auth = cipher->algorithm_auth;
+    alg_enc = cipher->algorithm_enc;
+    alg_mac = cipher->algorithm_mac;
+
+    ver = ssl_protocol_to_string(cipher->min_tls);
+
+    switch (alg_mkey) {
+    case SSL_kRSA:
+        kx = "RSA";
+        break;
+    case SSL_kDHE:
+        kx = "DH";
+        break;
+    case SSL_kECDHE:
+        kx = "ECDH";
+        break;
+    case SSL_kPSK:
+        kx = "PSK";
+        break;
+    case SSL_kRSAPSK:
+        kx = "RSAPSK";
+        break;
+    case SSL_kECDHEPSK:
+        kx = "ECDHEPSK";
+        break;
+    case SSL_kDHEPSK:
+        kx = "DHEPSK";
+        break;
+    case SSL_kSRP:
+        kx = "SRP";
+        break;
+    case SSL_kGOST:
+        kx = "GOST";
+        break;
+    case SSL_kANY:
+        kx = "any";
+        break;
+    default:
+        kx = "unknown";
+    }
+
+    switch (alg_auth) {
+    case SSL_aRSA:
+        au = "RSA";
+        break;
+    case SSL_aDSS:
+        au = "DSS";
+        break;
+    case SSL_aNULL:
+        au = "None";
+        break;
+    case SSL_aECDSA:
+        au = "ECDSA";
+        break;
+    case SSL_aPSK:
+        au = "PSK";
+        break;
+    case SSL_aSRP:
+        au = "SRP";
+        break;
+    case SSL_aGOST01:
+        au = "GOST01";
+        break;
+    /* New GOST ciphersuites have both SSL_aGOST12 and SSL_aGOST01 bits */
+    case (SSL_aGOST12 | SSL_aGOST01):
+        au = "GOST12";
+        break;
+    case SSL_aANY:
+        au = "any";
+        break;
+    default:
+        au = "unknown";
+        break;
+    }
+
+    switch (alg_enc) {
+    case SSL_DES:
+        enc = "DES(56)";
+        break;
+    case SSL_3DES:
+        enc = "3DES(168)";
+        break;
+    case SSL_RC4:
+        enc = "RC4(128)";
+        break;
+    case SSL_RC2:
+        enc = "RC2(128)";
+        break;
+    case SSL_IDEA:
+        enc = "IDEA(128)";
+        break;
+    case SSL_eNULL:
+        enc = "None";
+        break;
+    case SSL_AES128:
+        enc = "AES(128)";
+        break;
+    case SSL_AES256:
+        enc = "AES(256)";
+        break;
+    case SSL_AES128GCM:
+        enc = "AESGCM(128)";
+        break;
+    case SSL_AES256GCM:
+        enc = "AESGCM(256)";
+        break;
+    case SSL_AES128CCM:
+        enc = "AESCCM(128)";
+        break;
+    case SSL_AES256CCM:
+        enc = "AESCCM(256)";
+        break;
+    case SSL_AES128CCM8:
+        enc = "AESCCM8(128)";
+        break;
+    case SSL_AES256CCM8:
+        enc = "AESCCM8(256)";
+        break;
+    case SSL_CAMELLIA128:
+        enc = "Camellia(128)";
+        break;
+    case SSL_CAMELLIA256:
+        enc = "Camellia(256)";
+        break;
+    case SSL_ARIA128GCM:
+        enc = "ARIAGCM(128)";
+        break;
+    case SSL_ARIA256GCM:
+        enc = "ARIAGCM(256)";
+        break;
+    case SSL_SEED:
+        enc = "SEED(128)";
+        break;
+    case SSL_eGOST2814789CNT:
+    case SSL_eGOST2814789CNT12:
+        enc = "GOST89(256)";
+        break;
+    case SSL_CHACHA20POLY1305:
+        enc = "CHACHA20/POLY1305(256)";
+        break;
+    default:
+        enc = "unknown";
+        break;
+    }
+
+    switch (alg_mac) {
+    case SSL_MD5:
+        mac = "MD5";
+        break;
+    case SSL_SHA1:
+        mac = "SHA1";
+        break;
+    case SSL_SHA256:
+        mac = "SHA256";
+        break;
+    case SSL_SHA384:
+        mac = "SHA384";
+        break;
+    case SSL_AEAD:
+        mac = "AEAD";
+        break;
+    case SSL_GOST89MAC:
+    case SSL_GOST89MAC12:
+        mac = "GOST89";
+        break;
+    case SSL_GOST94:
+        mac = "GOST94";
+        break;
+    case SSL_GOST12_256:
+    case SSL_GOST12_512:
+        mac = "GOST2012";
+        break;
+    default:
+        mac = "unknown";
+        break;
+    }
+
+    BIO_snprintf(buf, len, format, cipher->name, ver, kx, au, enc, mac);
+
+    return buf;
+}
+
+const char *SSL_CIPHER_get_version(const SSL_CIPHER *c)
+{
+    if (c == NULL)
+        return "(NONE)";
+
+    /*
+     * Backwards-compatibility crutch.  In almost all contexts we report TLS
+     * 1.0 as "TLSv1", but for ciphers we report "TLSv1.0".
+     */
+    if (c->min_tls == TLS1_VERSION)
+        return "TLSv1.0";
+    return ssl_protocol_to_string(c->min_tls);
+}
+
+/* return the actual cipher being used */
+const char *SSL_CIPHER_get_name(const SSL_CIPHER *c)
+{
+    if (c != NULL)
+        return c->name;
+    return "(NONE)";
+}
+
+/* return the actual cipher being used in RFC standard name */
+const char *SSL_CIPHER_standard_name(const SSL_CIPHER *c)
+{
+    if (c != NULL)
+        return c->stdname;
+    return "(NONE)";
+}
+
+/* return the OpenSSL name based on given RFC standard name */
+const char *OPENSSL_cipher_name(const char *stdname)
+{
+    const SSL_CIPHER *c;
+
+    if (stdname == NULL)
+        return "(NONE)";
+    c = ssl3_get_cipher_by_std_name(stdname);
+    return SSL_CIPHER_get_name(c);
+}
+
+/* number of bits for symmetric cipher */
+int SSL_CIPHER_get_bits(const SSL_CIPHER *c, int *alg_bits)
+{
+    int ret = 0;
+
+    if (c != NULL) {
+        if (alg_bits != NULL)
+            *alg_bits = (int)c->alg_bits;
+        ret = (int)c->strength_bits;
+    }
+    return ret;
+}
+
+uint32_t SSL_CIPHER_get_id(const SSL_CIPHER *c)
+{
+    return c->id;
+}
+
+uint16_t SSL_CIPHER_get_protocol_id(const SSL_CIPHER *c)
+{
+    return c->id & 0xFFFF;
+}
+
+SSL_COMP *ssl3_comp_find(STACK_OF(SSL_COMP) *sk, int n)
+{
+    SSL_COMP *ctmp;
+    int i, nn;
+
+    if ((n == 0) || (sk == NULL))
+        return NULL;
+    nn = sk_SSL_COMP_num(sk);
+    for (i = 0; i < nn; i++) {
+        ctmp = sk_SSL_COMP_value(sk, i);
+        if (ctmp->id == n)
+            return ctmp;
+    }
+    return NULL;
+}
+
+#ifdef OPENSSL_NO_COMP
+STACK_OF(SSL_COMP) *SSL_COMP_get_compression_methods(void)
+{
+    return NULL;
+}
+
+STACK_OF(SSL_COMP) *SSL_COMP_set0_compression_methods(STACK_OF(SSL_COMP)
+                                                      *meths)
+{
+    return meths;
+}
+
+int SSL_COMP_add_compression_method(int id, COMP_METHOD *cm)
+{
+    return 1;
+}
+
+#else
+STACK_OF(SSL_COMP) *SSL_COMP_get_compression_methods(void)
+{
+    load_builtin_compressions();
+    return ssl_comp_methods;
+}
+
+STACK_OF(SSL_COMP) *SSL_COMP_set0_compression_methods(STACK_OF(SSL_COMP)
+                                                      *meths)
+{
+    STACK_OF(SSL_COMP) *old_meths = ssl_comp_methods;
+    ssl_comp_methods = meths;
+    return old_meths;
+}
+
+static void cmeth_free(SSL_COMP *cm)
+{
+    OPENSSL_free(cm);
+}
+
+void ssl_comp_free_compression_methods_int(void)
+{
+    STACK_OF(SSL_COMP) *old_meths = ssl_comp_methods;
+    ssl_comp_methods = NULL;
+    sk_SSL_COMP_pop_free(old_meths, cmeth_free);
+}
+
+int SSL_COMP_add_compression_method(int id, COMP_METHOD *cm)
+{
+    SSL_COMP *comp;
+
+    if (cm == NULL || COMP_get_type(cm) == NID_undef)
+        return 1;
+
+    /*-
+     * According to draft-ietf-tls-compression-04.txt, the
+     * compression number ranges should be the following:
+     *
+     *   0 to  63:  methods defined by the IETF
+     *  64 to 192:  external party methods assigned by IANA
+     * 193 to 255:  reserved for private use
+     */
+    if (id < 193 || id > 255) {
+        SSLerr(SSL_F_SSL_COMP_ADD_COMPRESSION_METHOD,
+               SSL_R_COMPRESSION_ID_NOT_WITHIN_PRIVATE_RANGE);
+        return 1;
+    }
+
+    CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_DISABLE);
+    comp = OPENSSL_malloc(sizeof(*comp));
+    if (comp == NULL) {
+        CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ENABLE);
+        SSLerr(SSL_F_SSL_COMP_ADD_COMPRESSION_METHOD, ERR_R_MALLOC_FAILURE);
+        return 1;
+    }
+
+    comp->id = id;
+    comp->method = cm;
+    load_builtin_compressions();
+    if (ssl_comp_methods && sk_SSL_COMP_find(ssl_comp_methods, comp) >= 0) {
+        OPENSSL_free(comp);
+        CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ENABLE);
+        SSLerr(SSL_F_SSL_COMP_ADD_COMPRESSION_METHOD,
+               SSL_R_DUPLICATE_COMPRESSION_ID);
+        return 1;
+    }
+    if (ssl_comp_methods == NULL || !sk_SSL_COMP_push(ssl_comp_methods, comp)) {
+        OPENSSL_free(comp);
+        CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ENABLE);
+        SSLerr(SSL_F_SSL_COMP_ADD_COMPRESSION_METHOD, ERR_R_MALLOC_FAILURE);
+        return 1;
+    }
+    CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ENABLE);
+    return 0;
+}
+#endif
+
+const char *SSL_COMP_get_name(const COMP_METHOD *comp)
+{
+#ifndef OPENSSL_NO_COMP
+    return comp ? COMP_get_name(comp) : NULL;
+#else
+    return NULL;
+#endif
+}
+
+const char *SSL_COMP_get0_name(const SSL_COMP *comp)
+{
+#ifndef OPENSSL_NO_COMP
+    return comp->name;
+#else
+    return NULL;
+#endif
+}
+
+int SSL_COMP_get_id(const SSL_COMP *comp)
+{
+#ifndef OPENSSL_NO_COMP
+    return comp->id;
+#else
+    return -1;
+#endif
+}
+
+const SSL_CIPHER *ssl_get_cipher_by_char(SSL *ssl, const unsigned char *ptr,
+                                         int all)
+{
+    const SSL_CIPHER *c = ssl->method->get_cipher_by_char(ptr);
+
+    if (c == NULL || (!all && c->valid == 0))
+        return NULL;
+    return c;
+}
+
+const SSL_CIPHER *SSL_CIPHER_find(SSL *ssl, const unsigned char *ptr)
+{
+    return ssl->method->get_cipher_by_char(ptr);
+}
+
+int SSL_CIPHER_get_cipher_nid(const SSL_CIPHER *c)
+{
+    int i;
+    if (c == NULL)
+        return NID_undef;
+    i = ssl_cipher_info_lookup(ssl_cipher_table_cipher, c->algorithm_enc);
+    if (i == -1)
+        return NID_undef;
+    return ssl_cipher_table_cipher[i].nid;
+}
+
+int SSL_CIPHER_get_digest_nid(const SSL_CIPHER *c)
+{
+    int i = ssl_cipher_info_lookup(ssl_cipher_table_mac, c->algorithm_mac);
+
+    if (i == -1)
+        return NID_undef;
+    return ssl_cipher_table_mac[i].nid;
+}
+
+int SSL_CIPHER_get_kx_nid(const SSL_CIPHER *c)
+{
+    int i = ssl_cipher_info_lookup(ssl_cipher_table_kx, c->algorithm_mkey);
+
+    if (i == -1)
+        return NID_undef;
+    return ssl_cipher_table_kx[i].nid;
+}
+
+int SSL_CIPHER_get_auth_nid(const SSL_CIPHER *c)
+{
+    int i = ssl_cipher_info_lookup(ssl_cipher_table_auth, c->algorithm_auth);
+
+    if (i == -1)
+        return NID_undef;
+    return ssl_cipher_table_auth[i].nid;
+}
+
+const EVP_MD *SSL_CIPHER_get_handshake_digest(const SSL_CIPHER *c)
+{
+    int idx = c->algorithm2 & SSL_HANDSHAKE_MAC_MASK;
+
+    if (idx < 0 || idx >= SSL_MD_NUM_IDX)
+        return NULL;
+    return ssl_digest_methods[idx];
+}
+
+int SSL_CIPHER_is_aead(const SSL_CIPHER *c)
+{
+    return (c->algorithm_mac & SSL_AEAD) ? 1 : 0;
+}
+
+int ssl_cipher_get_overhead(const SSL_CIPHER *c, size_t *mac_overhead,
+                            size_t *int_overhead, size_t *blocksize,
+                            size_t *ext_overhead)
+{
+    size_t mac = 0, in = 0, blk = 0, out = 0;
+
+    /* Some hard-coded numbers for the CCM/Poly1305 MAC overhead
+     * because there are no handy #defines for those. */
+    if (c->algorithm_enc & (SSL_AESGCM | SSL_ARIAGCM)) {
+        out = EVP_GCM_TLS_EXPLICIT_IV_LEN + EVP_GCM_TLS_TAG_LEN;
+    } else if (c->algorithm_enc & (SSL_AES128CCM | SSL_AES256CCM)) {
+        out = EVP_CCM_TLS_EXPLICIT_IV_LEN + 16;
+    } else if (c->algorithm_enc & (SSL_AES128CCM8 | SSL_AES256CCM8)) {
+        out = EVP_CCM_TLS_EXPLICIT_IV_LEN + 8;
+    } else if (c->algorithm_enc & SSL_CHACHA20POLY1305) {
+        out = 16;
+    } else if (c->algorithm_mac & SSL_AEAD) {
+        /* We're supposed to have handled all the AEAD modes above */
+        return 0;
+    } else {
+        /* Non-AEAD modes. Calculate MAC/cipher overhead separately */
+        int digest_nid = SSL_CIPHER_get_digest_nid(c);
+        const EVP_MD *e_md = EVP_get_digestbynid(digest_nid);
+
+        if (e_md == NULL)
+            return 0;
+
+        mac = EVP_MD_size(e_md);
+        if (c->algorithm_enc != SSL_eNULL) {
+            int cipher_nid = SSL_CIPHER_get_cipher_nid(c);
+            const EVP_CIPHER *e_ciph = EVP_get_cipherbynid(cipher_nid);
+
+            /* If it wasn't AEAD or SSL_eNULL, we expect it to be a
+               known CBC cipher. */
+            if (e_ciph == NULL ||
+                EVP_CIPHER_mode(e_ciph) != EVP_CIPH_CBC_MODE)
+                return 0;
+
+            in = 1; /* padding length byte */
+            out = EVP_CIPHER_iv_length(e_ciph);
+            blk = EVP_CIPHER_block_size(e_ciph);
+        }
+    }
+
+    *mac_overhead = mac;
+    *int_overhead = in;
+    *blocksize = blk;
+    *ext_overhead = out;
+
+    return 1;
+}
+
+int ssl_cert_is_disabled(size_t idx)
+{
+    const SSL_CERT_LOOKUP *cl = ssl_cert_lookup_by_idx(idx);
+
+    if (cl == NULL || (cl->amask & disabled_auth_mask) != 0)
+        return 1;
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_conf.c b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_conf.c
new file mode 100644
index 000000000..9c202708d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_conf.c
@@ -0,0 +1,993 @@
+/*
+ * Copyright 2012-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "ssl_locl.h"
+#include <openssl/conf.h>
+#include <openssl/objects.h>
+#include <openssl/dh.h>
+#include "internal/nelem.h"
+
+/*
+ * structure holding name tables. This is used for permitted elements in lists
+ * such as TLSv1.
+ */
+
+typedef struct {
+    const char *name;
+    int namelen;
+    unsigned int name_flags;
+    unsigned long option_value;
+} ssl_flag_tbl;
+
+/* Switch table: use for single command line switches like no_tls2 */
+typedef struct {
+    unsigned long option_value;
+    unsigned int name_flags;
+} ssl_switch_tbl;
+
+/* Sense of name is inverted e.g. "TLSv1" will clear SSL_OP_NO_TLSv1 */
+#define SSL_TFLAG_INV   0x1
+/* Mask for type of flag referred to */
+#define SSL_TFLAG_TYPE_MASK 0xf00
+/* Flag is for options */
+#define SSL_TFLAG_OPTION    0x000
+/* Flag is for cert_flags */
+#define SSL_TFLAG_CERT      0x100
+/* Flag is for verify mode */
+#define SSL_TFLAG_VFY       0x200
+/* Option can only be used for clients */
+#define SSL_TFLAG_CLIENT SSL_CONF_FLAG_CLIENT
+/* Option can only be used for servers */
+#define SSL_TFLAG_SERVER SSL_CONF_FLAG_SERVER
+#define SSL_TFLAG_BOTH (SSL_TFLAG_CLIENT|SSL_TFLAG_SERVER)
+
+#define SSL_FLAG_TBL(str, flag) \
+        {str, (int)(sizeof(str) - 1), SSL_TFLAG_BOTH, flag}
+#define SSL_FLAG_TBL_SRV(str, flag) \
+        {str, (int)(sizeof(str) - 1), SSL_TFLAG_SERVER, flag}
+#define SSL_FLAG_TBL_CLI(str, flag) \
+        {str, (int)(sizeof(str) - 1), SSL_TFLAG_CLIENT, flag}
+#define SSL_FLAG_TBL_INV(str, flag) \
+        {str, (int)(sizeof(str) - 1), SSL_TFLAG_INV|SSL_TFLAG_BOTH, flag}
+#define SSL_FLAG_TBL_SRV_INV(str, flag) \
+        {str, (int)(sizeof(str) - 1), SSL_TFLAG_INV|SSL_TFLAG_SERVER, flag}
+#define SSL_FLAG_TBL_CERT(str, flag) \
+        {str, (int)(sizeof(str) - 1), SSL_TFLAG_CERT|SSL_TFLAG_BOTH, flag}
+
+#define SSL_FLAG_VFY_CLI(str, flag) \
+        {str, (int)(sizeof(str) - 1), SSL_TFLAG_VFY | SSL_TFLAG_CLIENT, flag}
+#define SSL_FLAG_VFY_SRV(str, flag) \
+        {str, (int)(sizeof(str) - 1), SSL_TFLAG_VFY | SSL_TFLAG_SERVER, flag}
+
+/*
+ * Opaque structure containing SSL configuration context.
+ */
+
+struct ssl_conf_ctx_st {
+    /*
+     * Various flags indicating (among other things) which options we will
+     * recognise.
+     */
+    unsigned int flags;
+    /* Prefix and length of commands */
+    char *prefix;
+    size_t prefixlen;
+    /* SSL_CTX or SSL structure to perform operations on */
+    SSL_CTX *ctx;
+    SSL *ssl;
+    /* Pointer to SSL or SSL_CTX options field or NULL if none */
+    uint32_t *poptions;
+    /* Certificate filenames for each type */
+    char *cert_filename[SSL_PKEY_NUM];
+    /* Pointer to SSL or SSL_CTX cert_flags or NULL if none */
+    uint32_t *pcert_flags;
+    /* Pointer to SSL or SSL_CTX verify_mode or NULL if none */
+    uint32_t *pvfy_flags;
+    /* Pointer to SSL or SSL_CTX min_version field or NULL if none */
+    int *min_version;
+    /* Pointer to SSL or SSL_CTX max_version field or NULL if none */
+    int *max_version;
+    /* Current flag table being worked on */
+    const ssl_flag_tbl *tbl;
+    /* Size of table */
+    size_t ntbl;
+    /* Client CA names */
+    STACK_OF(X509_NAME) *canames;
+};
+
+static void ssl_set_option(SSL_CONF_CTX *cctx, unsigned int name_flags,
+                           unsigned long option_value, int onoff)
+{
+    uint32_t *pflags;
+    if (cctx->poptions == NULL)
+        return;
+    if (name_flags & SSL_TFLAG_INV)
+        onoff ^= 1;
+    switch (name_flags & SSL_TFLAG_TYPE_MASK) {
+
+    case SSL_TFLAG_CERT:
+        pflags = cctx->pcert_flags;
+        break;
+
+    case SSL_TFLAG_VFY:
+        pflags = cctx->pvfy_flags;
+        break;
+
+    case SSL_TFLAG_OPTION:
+        pflags = cctx->poptions;
+        break;
+
+    default:
+        return;
+
+    }
+    if (onoff)
+        *pflags |= option_value;
+    else
+        *pflags &= ~option_value;
+}
+
+static int ssl_match_option(SSL_CONF_CTX *cctx, const ssl_flag_tbl *tbl,
+                            const char *name, int namelen, int onoff)
+{
+    /* If name not relevant for context skip */
+    if (!(cctx->flags & tbl->name_flags & SSL_TFLAG_BOTH))
+        return 0;
+    if (namelen == -1) {
+        if (strcmp(tbl->name, name))
+            return 0;
+    } else if (tbl->namelen != namelen || strncasecmp(tbl->name, name, namelen))
+        return 0;
+    ssl_set_option(cctx, tbl->name_flags, tbl->option_value, onoff);
+    return 1;
+}
+
+static int ssl_set_option_list(const char *elem, int len, void *usr)
+{
+    SSL_CONF_CTX *cctx = usr;
+    size_t i;
+    const ssl_flag_tbl *tbl;
+    int onoff = 1;
+    /*
+     * len == -1 indicates not being called in list context, just for single
+     * command line switches, so don't allow +, -.
+     */
+    if (elem == NULL)
+        return 0;
+    if (len != -1) {
+        if (*elem == '+') {
+            elem++;
+            len--;
+            onoff = 1;
+        } else if (*elem == '-') {
+            elem++;
+            len--;
+            onoff = 0;
+        }
+    }
+    for (i = 0, tbl = cctx->tbl; i < cctx->ntbl; i++, tbl++) {
+        if (ssl_match_option(cctx, tbl, elem, len, onoff))
+            return 1;
+    }
+    return 0;
+}
+
+/* Set supported signature algorithms */
+static int cmd_SignatureAlgorithms(SSL_CONF_CTX *cctx, const char *value)
+{
+    int rv;
+    if (cctx->ssl)
+        rv = SSL_set1_sigalgs_list(cctx->ssl, value);
+    /* NB: ctx == NULL performs syntax checking only */
+    else
+        rv = SSL_CTX_set1_sigalgs_list(cctx->ctx, value);
+    return rv > 0;
+}
+
+/* Set supported client signature algorithms */
+static int cmd_ClientSignatureAlgorithms(SSL_CONF_CTX *cctx, const char *value)
+{
+    int rv;
+    if (cctx->ssl)
+        rv = SSL_set1_client_sigalgs_list(cctx->ssl, value);
+    /* NB: ctx == NULL performs syntax checking only */
+    else
+        rv = SSL_CTX_set1_client_sigalgs_list(cctx->ctx, value);
+    return rv > 0;
+}
+
+static int cmd_Groups(SSL_CONF_CTX *cctx, const char *value)
+{
+    int rv;
+    if (cctx->ssl)
+        rv = SSL_set1_groups_list(cctx->ssl, value);
+    /* NB: ctx == NULL performs syntax checking only */
+    else
+        rv = SSL_CTX_set1_groups_list(cctx->ctx, value);
+    return rv > 0;
+}
+
+/* This is the old name for cmd_Groups - retained for backwards compatibility */
+static int cmd_Curves(SSL_CONF_CTX *cctx, const char *value)
+{
+    return cmd_Groups(cctx, value);
+}
+
+#ifndef OPENSSL_NO_EC
+/* ECDH temporary parameters */
+static int cmd_ECDHParameters(SSL_CONF_CTX *cctx, const char *value)
+{
+    int rv = 1;
+    EC_KEY *ecdh;
+    int nid;
+
+    /* Ignore values supported by 1.0.2 for the automatic selection */
+    if ((cctx->flags & SSL_CONF_FLAG_FILE)
+            && (strcasecmp(value, "+automatic") == 0
+                || strcasecmp(value, "automatic") == 0))
+        return 1;
+    if ((cctx->flags & SSL_CONF_FLAG_CMDLINE) &&
+        strcmp(value, "auto") == 0)
+        return 1;
+
+    nid = EC_curve_nist2nid(value);
+    if (nid == NID_undef)
+        nid = OBJ_sn2nid(value);
+    if (nid == 0)
+        return 0;
+    ecdh = EC_KEY_new_by_curve_name(nid);
+    if (!ecdh)
+        return 0;
+    if (cctx->ctx)
+        rv = SSL_CTX_set_tmp_ecdh(cctx->ctx, ecdh);
+    else if (cctx->ssl)
+        rv = SSL_set_tmp_ecdh(cctx->ssl, ecdh);
+    EC_KEY_free(ecdh);
+
+    return rv > 0;
+}
+#endif
+static int cmd_CipherString(SSL_CONF_CTX *cctx, const char *value)
+{
+    int rv = 1;
+
+    if (cctx->ctx)
+        rv = SSL_CTX_set_cipher_list(cctx->ctx, value);
+    if (cctx->ssl)
+        rv = SSL_set_cipher_list(cctx->ssl, value);
+    return rv > 0;
+}
+
+static int cmd_Ciphersuites(SSL_CONF_CTX *cctx, const char *value)
+{
+    int rv = 1;
+
+    if (cctx->ctx)
+        rv = SSL_CTX_set_ciphersuites(cctx->ctx, value);
+    if (cctx->ssl)
+        rv = SSL_set_ciphersuites(cctx->ssl, value);
+    return rv > 0;
+}
+
+static int cmd_Protocol(SSL_CONF_CTX *cctx, const char *value)
+{
+    static const ssl_flag_tbl ssl_protocol_list[] = {
+        SSL_FLAG_TBL_INV("ALL", SSL_OP_NO_SSL_MASK),
+        SSL_FLAG_TBL_INV("SSLv2", SSL_OP_NO_SSLv2),
+        SSL_FLAG_TBL_INV("SSLv3", SSL_OP_NO_SSLv3),
+        SSL_FLAG_TBL_INV("TLSv1", SSL_OP_NO_TLSv1),
+        SSL_FLAG_TBL_INV("TLSv1.1", SSL_OP_NO_TLSv1_1),
+        SSL_FLAG_TBL_INV("TLSv1.2", SSL_OP_NO_TLSv1_2),
+        SSL_FLAG_TBL_INV("TLSv1.3", SSL_OP_NO_TLSv1_3),
+        SSL_FLAG_TBL_INV("DTLSv1", SSL_OP_NO_DTLSv1),
+        SSL_FLAG_TBL_INV("DTLSv1.2", SSL_OP_NO_DTLSv1_2)
+    };
+    cctx->tbl = ssl_protocol_list;
+    cctx->ntbl = OSSL_NELEM(ssl_protocol_list);
+    return CONF_parse_list(value, ',', 1, ssl_set_option_list, cctx);
+}
+
+/*
+ * protocol_from_string - converts a protocol version string to a number
+ *
+ * Returns -1 on failure or the version on success
+ */
+static int protocol_from_string(const char *value)
+{
+    struct protocol_versions {
+        const char *name;
+        int version;
+    };
+    static const struct protocol_versions versions[] = {
+        {"None", 0},
+        {"SSLv3", SSL3_VERSION},
+        {"TLSv1", TLS1_VERSION},
+        {"TLSv1.1", TLS1_1_VERSION},
+        {"TLSv1.2", TLS1_2_VERSION},
+        {"TLSv1.3", TLS1_3_VERSION},
+        {"DTLSv1", DTLS1_VERSION},
+        {"DTLSv1.2", DTLS1_2_VERSION}
+    };
+    size_t i;
+    size_t n = OSSL_NELEM(versions);
+
+    for (i = 0; i < n; i++)
+        if (strcmp(versions[i].name, value) == 0)
+            return versions[i].version;
+    return -1;
+}
+
+static int min_max_proto(SSL_CONF_CTX *cctx, const char *value, int *bound)
+{
+    int method_version;
+    int new_version;
+
+    if (cctx->ctx != NULL)
+        method_version = cctx->ctx->method->version;
+    else if (cctx->ssl != NULL)
+        method_version = cctx->ssl->ctx->method->version;
+    else
+        return 0;
+    if ((new_version = protocol_from_string(value)) < 0)
+        return 0;
+    return ssl_set_version_bound(method_version, new_version, bound);
+}
+
+/*
+ * cmd_MinProtocol - Set min protocol version
+ * @cctx: config structure to save settings in
+ * @value: The min protocol version in string form
+ *
+ * Returns 1 on success and 0 on failure.
+ */
+static int cmd_MinProtocol(SSL_CONF_CTX *cctx, const char *value)
+{
+    return min_max_proto(cctx, value, cctx->min_version);
+}
+
+/*
+ * cmd_MaxProtocol - Set max protocol version
+ * @cctx: config structure to save settings in
+ * @value: The max protocol version in string form
+ *
+ * Returns 1 on success and 0 on failure.
+ */
+static int cmd_MaxProtocol(SSL_CONF_CTX *cctx, const char *value)
+{
+    return min_max_proto(cctx, value, cctx->max_version);
+}
+
+static int cmd_Options(SSL_CONF_CTX *cctx, const char *value)
+{
+    static const ssl_flag_tbl ssl_option_list[] = {
+        SSL_FLAG_TBL_INV("SessionTicket", SSL_OP_NO_TICKET),
+        SSL_FLAG_TBL_INV("EmptyFragments",
+                         SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS),
+        SSL_FLAG_TBL("Bugs", SSL_OP_ALL),
+        SSL_FLAG_TBL_INV("Compression", SSL_OP_NO_COMPRESSION),
+        SSL_FLAG_TBL_SRV("ServerPreference", SSL_OP_CIPHER_SERVER_PREFERENCE),
+        SSL_FLAG_TBL_SRV("NoResumptionOnRenegotiation",
+                         SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION),
+        SSL_FLAG_TBL_SRV("DHSingle", SSL_OP_SINGLE_DH_USE),
+        SSL_FLAG_TBL_SRV("ECDHSingle", SSL_OP_SINGLE_ECDH_USE),
+        SSL_FLAG_TBL("UnsafeLegacyRenegotiation",
+                     SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION),
+        SSL_FLAG_TBL_INV("EncryptThenMac", SSL_OP_NO_ENCRYPT_THEN_MAC),
+        SSL_FLAG_TBL("NoRenegotiation", SSL_OP_NO_RENEGOTIATION),
+        SSL_FLAG_TBL("AllowNoDHEKEX", SSL_OP_ALLOW_NO_DHE_KEX),
+        SSL_FLAG_TBL("PrioritizeChaCha", SSL_OP_PRIORITIZE_CHACHA),
+        SSL_FLAG_TBL("MiddleboxCompat", SSL_OP_ENABLE_MIDDLEBOX_COMPAT),
+        SSL_FLAG_TBL_INV("AntiReplay", SSL_OP_NO_ANTI_REPLAY)
+    };
+    if (value == NULL)
+        return -3;
+    cctx->tbl = ssl_option_list;
+    cctx->ntbl = OSSL_NELEM(ssl_option_list);
+    return CONF_parse_list(value, ',', 1, ssl_set_option_list, cctx);
+}
+
+static int cmd_VerifyMode(SSL_CONF_CTX *cctx, const char *value)
+{
+    static const ssl_flag_tbl ssl_vfy_list[] = {
+        SSL_FLAG_VFY_CLI("Peer", SSL_VERIFY_PEER),
+        SSL_FLAG_VFY_SRV("Request", SSL_VERIFY_PEER),
+        SSL_FLAG_VFY_SRV("Require",
+                         SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT),
+        SSL_FLAG_VFY_SRV("Once", SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE),
+        SSL_FLAG_VFY_SRV("RequestPostHandshake",
+                         SSL_VERIFY_PEER | SSL_VERIFY_POST_HANDSHAKE),
+        SSL_FLAG_VFY_SRV("RequirePostHandshake",
+                         SSL_VERIFY_PEER | SSL_VERIFY_POST_HANDSHAKE |
+                         SSL_VERIFY_FAIL_IF_NO_PEER_CERT),
+    };
+    if (value == NULL)
+        return -3;
+    cctx->tbl = ssl_vfy_list;
+    cctx->ntbl = OSSL_NELEM(ssl_vfy_list);
+    return CONF_parse_list(value, ',', 1, ssl_set_option_list, cctx);
+}
+
+static int cmd_Certificate(SSL_CONF_CTX *cctx, const char *value)
+{
+    int rv = 1;
+    CERT *c = NULL;
+    if (cctx->ctx) {
+        rv = SSL_CTX_use_certificate_chain_file(cctx->ctx, value);
+        c = cctx->ctx->cert;
+    }
+    if (cctx->ssl) {
+        rv = SSL_use_certificate_chain_file(cctx->ssl, value);
+        c = cctx->ssl->cert;
+    }
+    if (rv > 0 && c && cctx->flags & SSL_CONF_FLAG_REQUIRE_PRIVATE) {
+        char **pfilename = &cctx->cert_filename[c->key - c->pkeys];
+        OPENSSL_free(*pfilename);
+        *pfilename = OPENSSL_strdup(value);
+        if (!*pfilename)
+            rv = 0;
+    }
+
+    return rv > 0;
+}
+
+static int cmd_PrivateKey(SSL_CONF_CTX *cctx, const char *value)
+{
+    int rv = 1;
+    if (!(cctx->flags & SSL_CONF_FLAG_CERTIFICATE))
+        return -2;
+    if (cctx->ctx)
+        rv = SSL_CTX_use_PrivateKey_file(cctx->ctx, value, SSL_FILETYPE_PEM);
+    if (cctx->ssl)
+        rv = SSL_use_PrivateKey_file(cctx->ssl, value, SSL_FILETYPE_PEM);
+    return rv > 0;
+}
+
+static int cmd_ServerInfoFile(SSL_CONF_CTX *cctx, const char *value)
+{
+    int rv = 1;
+    if (cctx->ctx)
+        rv = SSL_CTX_use_serverinfo_file(cctx->ctx, value);
+    return rv > 0;
+}
+
+static int do_store(SSL_CONF_CTX *cctx,
+                    const char *CAfile, const char *CApath, int verify_store)
+{
+    CERT *cert;
+    X509_STORE **st;
+    if (cctx->ctx)
+        cert = cctx->ctx->cert;
+    else if (cctx->ssl)
+        cert = cctx->ssl->cert;
+    else
+        return 1;
+    st = verify_store ? &cert->verify_store : &cert->chain_store;
+    if (*st == NULL) {
+        *st = X509_STORE_new();
+        if (*st == NULL)
+            return 0;
+    }
+    return X509_STORE_load_locations(*st, CAfile, CApath) > 0;
+}
+
+static int cmd_ChainCAPath(SSL_CONF_CTX *cctx, const char *value)
+{
+    return do_store(cctx, NULL, value, 0);
+}
+
+static int cmd_ChainCAFile(SSL_CONF_CTX *cctx, const char *value)
+{
+    return do_store(cctx, value, NULL, 0);
+}
+
+static int cmd_VerifyCAPath(SSL_CONF_CTX *cctx, const char *value)
+{
+    return do_store(cctx, NULL, value, 1);
+}
+
+static int cmd_VerifyCAFile(SSL_CONF_CTX *cctx, const char *value)
+{
+    return do_store(cctx, value, NULL, 1);
+}
+
+static int cmd_RequestCAFile(SSL_CONF_CTX *cctx, const char *value)
+{
+    if (cctx->canames == NULL)
+        cctx->canames = sk_X509_NAME_new_null();
+    if (cctx->canames == NULL)
+        return 0;
+    return SSL_add_file_cert_subjects_to_stack(cctx->canames, value);
+}
+
+static int cmd_ClientCAFile(SSL_CONF_CTX *cctx, const char *value)
+{
+    return cmd_RequestCAFile(cctx, value);
+}
+
+static int cmd_RequestCAPath(SSL_CONF_CTX *cctx, const char *value)
+{
+    if (cctx->canames == NULL)
+        cctx->canames = sk_X509_NAME_new_null();
+    if (cctx->canames == NULL)
+        return 0;
+    return SSL_add_dir_cert_subjects_to_stack(cctx->canames, value);
+}
+
+static int cmd_ClientCAPath(SSL_CONF_CTX *cctx, const char *value)
+{
+    return cmd_RequestCAPath(cctx, value);
+}
+
+#ifndef OPENSSL_NO_DH
+static int cmd_DHParameters(SSL_CONF_CTX *cctx, const char *value)
+{
+    int rv = 0;
+    DH *dh = NULL;
+    BIO *in = NULL;
+    if (cctx->ctx || cctx->ssl) {
+        in = BIO_new(BIO_s_file());
+        if (in == NULL)
+            goto end;
+        if (BIO_read_filename(in, value) <= 0)
+            goto end;
+        dh = PEM_read_bio_DHparams(in, NULL, NULL, NULL);
+        if (dh == NULL)
+            goto end;
+    } else
+        return 1;
+    if (cctx->ctx)
+        rv = SSL_CTX_set_tmp_dh(cctx->ctx, dh);
+    if (cctx->ssl)
+        rv = SSL_set_tmp_dh(cctx->ssl, dh);
+ end:
+    DH_free(dh);
+    BIO_free(in);
+    return rv > 0;
+}
+#endif
+
+static int cmd_RecordPadding(SSL_CONF_CTX *cctx, const char *value)
+{
+    int rv = 0;
+    int block_size = atoi(value);
+
+    /*
+     * All we care about is a non-negative value,
+     * the setters check the range
+     */
+    if (block_size >= 0) {
+        if (cctx->ctx)
+            rv = SSL_CTX_set_block_padding(cctx->ctx, block_size);
+        if (cctx->ssl)
+            rv = SSL_set_block_padding(cctx->ssl, block_size);
+    }
+    return rv;
+}
+
+
+static int cmd_NumTickets(SSL_CONF_CTX *cctx, const char *value)
+{
+    int rv = 0;
+    int num_tickets = atoi(value);
+
+    if (num_tickets >= 0) {
+        if (cctx->ctx)
+            rv = SSL_CTX_set_num_tickets(cctx->ctx, num_tickets);
+        if (cctx->ssl)
+            rv = SSL_set_num_tickets(cctx->ssl, num_tickets);
+    }
+    return rv;
+}
+
+typedef struct {
+    int (*cmd) (SSL_CONF_CTX *cctx, const char *value);
+    const char *str_file;
+    const char *str_cmdline;
+    unsigned short flags;
+    unsigned short value_type;
+} ssl_conf_cmd_tbl;
+
+/* Table of supported parameters */
+
+#define SSL_CONF_CMD(name, cmdopt, flags, type) \
+        {cmd_##name, #name, cmdopt, flags, type}
+
+#define SSL_CONF_CMD_STRING(name, cmdopt, flags) \
+        SSL_CONF_CMD(name, cmdopt, flags, SSL_CONF_TYPE_STRING)
+
+#define SSL_CONF_CMD_SWITCH(name, flags) \
+        {0, NULL, name, flags, SSL_CONF_TYPE_NONE}
+
+/* See apps/apps.h if you change this table. */
+static const ssl_conf_cmd_tbl ssl_conf_cmds[] = {
+    SSL_CONF_CMD_SWITCH("no_ssl3", 0),
+    SSL_CONF_CMD_SWITCH("no_tls1", 0),
+    SSL_CONF_CMD_SWITCH("no_tls1_1", 0),
+    SSL_CONF_CMD_SWITCH("no_tls1_2", 0),
+    SSL_CONF_CMD_SWITCH("no_tls1_3", 0),
+    SSL_CONF_CMD_SWITCH("bugs", 0),
+    SSL_CONF_CMD_SWITCH("no_comp", 0),
+    SSL_CONF_CMD_SWITCH("comp", 0),
+    SSL_CONF_CMD_SWITCH("ecdh_single", SSL_CONF_FLAG_SERVER),
+    SSL_CONF_CMD_SWITCH("no_ticket", 0),
+    SSL_CONF_CMD_SWITCH("serverpref", SSL_CONF_FLAG_SERVER),
+    SSL_CONF_CMD_SWITCH("legacy_renegotiation", 0),
+    SSL_CONF_CMD_SWITCH("legacy_server_connect", SSL_CONF_FLAG_SERVER),
+    SSL_CONF_CMD_SWITCH("no_renegotiation", 0),
+    SSL_CONF_CMD_SWITCH("no_resumption_on_reneg", SSL_CONF_FLAG_SERVER),
+    SSL_CONF_CMD_SWITCH("no_legacy_server_connect", SSL_CONF_FLAG_SERVER),
+    SSL_CONF_CMD_SWITCH("allow_no_dhe_kex", 0),
+    SSL_CONF_CMD_SWITCH("prioritize_chacha", SSL_CONF_FLAG_SERVER),
+    SSL_CONF_CMD_SWITCH("strict", 0),
+    SSL_CONF_CMD_SWITCH("no_middlebox", 0),
+    SSL_CONF_CMD_SWITCH("anti_replay", SSL_CONF_FLAG_SERVER),
+    SSL_CONF_CMD_SWITCH("no_anti_replay", SSL_CONF_FLAG_SERVER),
+    SSL_CONF_CMD_STRING(SignatureAlgorithms, "sigalgs", 0),
+    SSL_CONF_CMD_STRING(ClientSignatureAlgorithms, "client_sigalgs", 0),
+    SSL_CONF_CMD_STRING(Curves, "curves", 0),
+    SSL_CONF_CMD_STRING(Groups, "groups", 0),
+#ifndef OPENSSL_NO_EC
+    SSL_CONF_CMD_STRING(ECDHParameters, "named_curve", SSL_CONF_FLAG_SERVER),
+#endif
+    SSL_CONF_CMD_STRING(CipherString, "cipher", 0),
+    SSL_CONF_CMD_STRING(Ciphersuites, "ciphersuites", 0),
+    SSL_CONF_CMD_STRING(Protocol, NULL, 0),
+    SSL_CONF_CMD_STRING(MinProtocol, "min_protocol", 0),
+    SSL_CONF_CMD_STRING(MaxProtocol, "max_protocol", 0),
+    SSL_CONF_CMD_STRING(Options, NULL, 0),
+    SSL_CONF_CMD_STRING(VerifyMode, NULL, 0),
+    SSL_CONF_CMD(Certificate, "cert", SSL_CONF_FLAG_CERTIFICATE,
+                 SSL_CONF_TYPE_FILE),
+    SSL_CONF_CMD(PrivateKey, "key", SSL_CONF_FLAG_CERTIFICATE,
+                 SSL_CONF_TYPE_FILE),
+    SSL_CONF_CMD(ServerInfoFile, NULL,
+                 SSL_CONF_FLAG_SERVER | SSL_CONF_FLAG_CERTIFICATE,
+                 SSL_CONF_TYPE_FILE),
+    SSL_CONF_CMD(ChainCAPath, "chainCApath", SSL_CONF_FLAG_CERTIFICATE,
+                 SSL_CONF_TYPE_DIR),
+    SSL_CONF_CMD(ChainCAFile, "chainCAfile", SSL_CONF_FLAG_CERTIFICATE,
+                 SSL_CONF_TYPE_FILE),
+    SSL_CONF_CMD(VerifyCAPath, "verifyCApath", SSL_CONF_FLAG_CERTIFICATE,
+                 SSL_CONF_TYPE_DIR),
+    SSL_CONF_CMD(VerifyCAFile, "verifyCAfile", SSL_CONF_FLAG_CERTIFICATE,
+                 SSL_CONF_TYPE_FILE),
+    SSL_CONF_CMD(RequestCAFile, "requestCAFile", SSL_CONF_FLAG_CERTIFICATE,
+                 SSL_CONF_TYPE_FILE),
+    SSL_CONF_CMD(ClientCAFile, NULL,
+                 SSL_CONF_FLAG_SERVER | SSL_CONF_FLAG_CERTIFICATE,
+                 SSL_CONF_TYPE_FILE),
+    SSL_CONF_CMD(RequestCAPath, NULL, SSL_CONF_FLAG_CERTIFICATE,
+                 SSL_CONF_TYPE_DIR),
+    SSL_CONF_CMD(ClientCAPath, NULL,
+                 SSL_CONF_FLAG_SERVER | SSL_CONF_FLAG_CERTIFICATE,
+                 SSL_CONF_TYPE_DIR),
+#ifndef OPENSSL_NO_DH
+    SSL_CONF_CMD(DHParameters, "dhparam",
+                 SSL_CONF_FLAG_SERVER | SSL_CONF_FLAG_CERTIFICATE,
+                 SSL_CONF_TYPE_FILE),
+#endif
+    SSL_CONF_CMD_STRING(RecordPadding, "record_padding", 0),
+    SSL_CONF_CMD_STRING(NumTickets, "num_tickets", SSL_CONF_FLAG_SERVER),
+};
+
+/* Supported switches: must match order of switches in ssl_conf_cmds */
+static const ssl_switch_tbl ssl_cmd_switches[] = {
+    {SSL_OP_NO_SSLv3, 0},       /* no_ssl3 */
+    {SSL_OP_NO_TLSv1, 0},       /* no_tls1 */
+    {SSL_OP_NO_TLSv1_1, 0},     /* no_tls1_1 */
+    {SSL_OP_NO_TLSv1_2, 0},     /* no_tls1_2 */
+    {SSL_OP_NO_TLSv1_3, 0},     /* no_tls1_3 */
+    {SSL_OP_ALL, 0},            /* bugs */
+    {SSL_OP_NO_COMPRESSION, 0}, /* no_comp */
+    {SSL_OP_NO_COMPRESSION, SSL_TFLAG_INV}, /* comp */
+    {SSL_OP_SINGLE_ECDH_USE, 0}, /* ecdh_single */
+    {SSL_OP_NO_TICKET, 0},      /* no_ticket */
+    {SSL_OP_CIPHER_SERVER_PREFERENCE, 0}, /* serverpref */
+    /* legacy_renegotiation */
+    {SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION, 0},
+    /* legacy_server_connect */
+    {SSL_OP_LEGACY_SERVER_CONNECT, 0},
+    /* no_renegotiation */
+    {SSL_OP_NO_RENEGOTIATION, 0},
+    /* no_resumption_on_reneg */
+    {SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION, 0},
+    /* no_legacy_server_connect */
+    {SSL_OP_LEGACY_SERVER_CONNECT, SSL_TFLAG_INV},
+    /* allow_no_dhe_kex */
+    {SSL_OP_ALLOW_NO_DHE_KEX, 0},
+    /* chacha reprioritization */
+    {SSL_OP_PRIORITIZE_CHACHA, 0},
+    {SSL_CERT_FLAG_TLS_STRICT, SSL_TFLAG_CERT}, /* strict */
+    /* no_middlebox */
+    {SSL_OP_ENABLE_MIDDLEBOX_COMPAT, SSL_TFLAG_INV},
+    /* anti_replay */
+    {SSL_OP_NO_ANTI_REPLAY, SSL_TFLAG_INV},
+    /* no_anti_replay */
+    {SSL_OP_NO_ANTI_REPLAY, 0},
+};
+
+static int ssl_conf_cmd_skip_prefix(SSL_CONF_CTX *cctx, const char **pcmd)
+{
+    if (!pcmd || !*pcmd)
+        return 0;
+    /* If a prefix is set, check and skip */
+    if (cctx->prefix) {
+        if (strlen(*pcmd) <= cctx->prefixlen)
+            return 0;
+        if (cctx->flags & SSL_CONF_FLAG_CMDLINE &&
+            strncmp(*pcmd, cctx->prefix, cctx->prefixlen))
+            return 0;
+        if (cctx->flags & SSL_CONF_FLAG_FILE &&
+            strncasecmp(*pcmd, cctx->prefix, cctx->prefixlen))
+            return 0;
+        *pcmd += cctx->prefixlen;
+    } else if (cctx->flags & SSL_CONF_FLAG_CMDLINE) {
+        if (**pcmd != '-' || !(*pcmd)[1])
+            return 0;
+        *pcmd += 1;
+    }
+    return 1;
+}
+
+/* Determine if a command is allowed according to cctx flags */
+static int ssl_conf_cmd_allowed(SSL_CONF_CTX *cctx, const ssl_conf_cmd_tbl * t)
+{
+    unsigned int tfl = t->flags;
+    unsigned int cfl = cctx->flags;
+    if ((tfl & SSL_CONF_FLAG_SERVER) && !(cfl & SSL_CONF_FLAG_SERVER))
+        return 0;
+    if ((tfl & SSL_CONF_FLAG_CLIENT) && !(cfl & SSL_CONF_FLAG_CLIENT))
+        return 0;
+    if ((tfl & SSL_CONF_FLAG_CERTIFICATE)
+        && !(cfl & SSL_CONF_FLAG_CERTIFICATE))
+        return 0;
+    return 1;
+}
+
+static const ssl_conf_cmd_tbl *ssl_conf_cmd_lookup(SSL_CONF_CTX *cctx,
+                                                   const char *cmd)
+{
+    const ssl_conf_cmd_tbl *t;
+    size_t i;
+    if (cmd == NULL)
+        return NULL;
+
+    /* Look for matching parameter name in table */
+    for (i = 0, t = ssl_conf_cmds; i < OSSL_NELEM(ssl_conf_cmds); i++, t++) {
+        if (ssl_conf_cmd_allowed(cctx, t)) {
+            if (cctx->flags & SSL_CONF_FLAG_CMDLINE) {
+                if (t->str_cmdline && strcmp(t->str_cmdline, cmd) == 0)
+                    return t;
+            }
+            if (cctx->flags & SSL_CONF_FLAG_FILE) {
+                if (t->str_file && strcasecmp(t->str_file, cmd) == 0)
+                    return t;
+            }
+        }
+    }
+    return NULL;
+}
+
+static int ctrl_switch_option(SSL_CONF_CTX *cctx, const ssl_conf_cmd_tbl * cmd)
+{
+    /* Find index of command in table */
+    size_t idx = cmd - ssl_conf_cmds;
+    const ssl_switch_tbl *scmd;
+    /* Sanity check index */
+    if (idx >= OSSL_NELEM(ssl_cmd_switches))
+        return 0;
+    /* Obtain switches entry with same index */
+    scmd = ssl_cmd_switches + idx;
+    ssl_set_option(cctx, scmd->name_flags, scmd->option_value, 1);
+    return 1;
+}
+
+int SSL_CONF_cmd(SSL_CONF_CTX *cctx, const char *cmd, const char *value)
+{
+    const ssl_conf_cmd_tbl *runcmd;
+    if (cmd == NULL) {
+        SSLerr(SSL_F_SSL_CONF_CMD, SSL_R_INVALID_NULL_CMD_NAME);
+        return 0;
+    }
+
+    if (!ssl_conf_cmd_skip_prefix(cctx, &cmd))
+        return -2;
+
+    runcmd = ssl_conf_cmd_lookup(cctx, cmd);
+
+    if (runcmd) {
+        int rv;
+        if (runcmd->value_type == SSL_CONF_TYPE_NONE) {
+            return ctrl_switch_option(cctx, runcmd);
+        }
+        if (value == NULL)
+            return -3;
+        rv = runcmd->cmd(cctx, value);
+        if (rv > 0)
+            return 2;
+        if (rv == -2)
+            return -2;
+        if (cctx->flags & SSL_CONF_FLAG_SHOW_ERRORS) {
+            SSLerr(SSL_F_SSL_CONF_CMD, SSL_R_BAD_VALUE);
+            ERR_add_error_data(4, "cmd=", cmd, ", value=", value);
+        }
+        return 0;
+    }
+
+    if (cctx->flags & SSL_CONF_FLAG_SHOW_ERRORS) {
+        SSLerr(SSL_F_SSL_CONF_CMD, SSL_R_UNKNOWN_CMD_NAME);
+        ERR_add_error_data(2, "cmd=", cmd);
+    }
+
+    return -2;
+}
+
+int SSL_CONF_cmd_argv(SSL_CONF_CTX *cctx, int *pargc, char ***pargv)
+{
+    int rv;
+    const char *arg = NULL, *argn;
+    if (pargc && *pargc == 0)
+        return 0;
+    if (!pargc || *pargc > 0)
+        arg = **pargv;
+    if (arg == NULL)
+        return 0;
+    if (!pargc || *pargc > 1)
+        argn = (*pargv)[1];
+    else
+        argn = NULL;
+    cctx->flags &= ~SSL_CONF_FLAG_FILE;
+    cctx->flags |= SSL_CONF_FLAG_CMDLINE;
+    rv = SSL_CONF_cmd(cctx, arg, argn);
+    if (rv > 0) {
+        /* Success: update pargc, pargv */
+        (*pargv) += rv;
+        if (pargc)
+            (*pargc) -= rv;
+        return rv;
+    }
+    /* Unknown switch: indicate no arguments processed */
+    if (rv == -2)
+        return 0;
+    /* Some error occurred processing command, return fatal error */
+    if (rv == 0)
+        return -1;
+    return rv;
+}
+
+int SSL_CONF_cmd_value_type(SSL_CONF_CTX *cctx, const char *cmd)
+{
+    if (ssl_conf_cmd_skip_prefix(cctx, &cmd)) {
+        const ssl_conf_cmd_tbl *runcmd;
+        runcmd = ssl_conf_cmd_lookup(cctx, cmd);
+        if (runcmd)
+            return runcmd->value_type;
+    }
+    return SSL_CONF_TYPE_UNKNOWN;
+}
+
+SSL_CONF_CTX *SSL_CONF_CTX_new(void)
+{
+    SSL_CONF_CTX *ret = OPENSSL_zalloc(sizeof(*ret));
+
+    return ret;
+}
+
+int SSL_CONF_CTX_finish(SSL_CONF_CTX *cctx)
+{
+    /* See if any certificates are missing private keys */
+    size_t i;
+    CERT *c = NULL;
+    if (cctx->ctx)
+        c = cctx->ctx->cert;
+    else if (cctx->ssl)
+        c = cctx->ssl->cert;
+    if (c && cctx->flags & SSL_CONF_FLAG_REQUIRE_PRIVATE) {
+        for (i = 0; i < SSL_PKEY_NUM; i++) {
+            const char *p = cctx->cert_filename[i];
+            /*
+             * If missing private key try to load one from certificate file
+             */
+            if (p && !c->pkeys[i].privatekey) {
+                if (!cmd_PrivateKey(cctx, p))
+                    return 0;
+            }
+        }
+    }
+    if (cctx->canames) {
+        if (cctx->ssl)
+            SSL_set0_CA_list(cctx->ssl, cctx->canames);
+        else if (cctx->ctx)
+            SSL_CTX_set0_CA_list(cctx->ctx, cctx->canames);
+        else
+            sk_X509_NAME_pop_free(cctx->canames, X509_NAME_free);
+        cctx->canames = NULL;
+    }
+    return 1;
+}
+
+void SSL_CONF_CTX_free(SSL_CONF_CTX *cctx)
+{
+    if (cctx) {
+        size_t i;
+        for (i = 0; i < SSL_PKEY_NUM; i++)
+            OPENSSL_free(cctx->cert_filename[i]);
+        OPENSSL_free(cctx->prefix);
+        sk_X509_NAME_pop_free(cctx->canames, X509_NAME_free);
+        OPENSSL_free(cctx);
+    }
+}
+
+unsigned int SSL_CONF_CTX_set_flags(SSL_CONF_CTX *cctx, unsigned int flags)
+{
+    cctx->flags |= flags;
+    return cctx->flags;
+}
+
+unsigned int SSL_CONF_CTX_clear_flags(SSL_CONF_CTX *cctx, unsigned int flags)
+{
+    cctx->flags &= ~flags;
+    return cctx->flags;
+}
+
+int SSL_CONF_CTX_set1_prefix(SSL_CONF_CTX *cctx, const char *pre)
+{
+    char *tmp = NULL;
+    if (pre) {
+        tmp = OPENSSL_strdup(pre);
+        if (tmp == NULL)
+            return 0;
+    }
+    OPENSSL_free(cctx->prefix);
+    cctx->prefix = tmp;
+    if (tmp)
+        cctx->prefixlen = strlen(tmp);
+    else
+        cctx->prefixlen = 0;
+    return 1;
+}
+
+void SSL_CONF_CTX_set_ssl(SSL_CONF_CTX *cctx, SSL *ssl)
+{
+    cctx->ssl = ssl;
+    cctx->ctx = NULL;
+    if (ssl) {
+        cctx->poptions = &ssl->options;
+        cctx->min_version = &ssl->min_proto_version;
+        cctx->max_version = &ssl->max_proto_version;
+        cctx->pcert_flags = &ssl->cert->cert_flags;
+        cctx->pvfy_flags = &ssl->verify_mode;
+    } else {
+        cctx->poptions = NULL;
+        cctx->min_version = NULL;
+        cctx->max_version = NULL;
+        cctx->pcert_flags = NULL;
+        cctx->pvfy_flags = NULL;
+    }
+}
+
+void SSL_CONF_CTX_set_ssl_ctx(SSL_CONF_CTX *cctx, SSL_CTX *ctx)
+{
+    cctx->ctx = ctx;
+    cctx->ssl = NULL;
+    if (ctx) {
+        cctx->poptions = &ctx->options;
+        cctx->min_version = &ctx->min_proto_version;
+        cctx->max_version = &ctx->max_proto_version;
+        cctx->pcert_flags = &ctx->cert->cert_flags;
+        cctx->pvfy_flags = &ctx->verify_mode;
+    } else {
+        cctx->poptions = NULL;
+        cctx->min_version = NULL;
+        cctx->max_version = NULL;
+        cctx->pcert_flags = NULL;
+        cctx->pvfy_flags = NULL;
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_err.c b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_err.c
new file mode 100644
index 000000000..4b12ed148
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_err.c
@@ -0,0 +1,1277 @@
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include <openssl/sslerr.h>
+
+#ifndef OPENSSL_NO_ERR
+
+static const ERR_STRING_DATA SSL_str_functs[] = {
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_ADD_CLIENT_KEY_SHARE_EXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_ADD_KEY_SHARE, 0), "add_key_share"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_BYTES_TO_CIPHER_LIST, 0),
+     "bytes_to_cipher_list"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_CHECK_SUITEB_CIPHER_LIST, 0),
+     "check_suiteb_cipher_list"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_CIPHERSUITE_CB, 0), "ciphersuite_cb"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_CONSTRUCT_CA_NAMES, 0), "construct_ca_names"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_CONSTRUCT_KEY_EXCHANGE_TBS, 0),
+     "construct_key_exchange_tbs"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_CONSTRUCT_STATEFUL_TICKET, 0),
+     "construct_stateful_ticket"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_CONSTRUCT_STATELESS_TICKET, 0),
+     "construct_stateless_ticket"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_CREATE_SYNTHETIC_MESSAGE_HASH, 0),
+     "create_synthetic_message_hash"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_CREATE_TICKET_PREQUEL, 0),
+     "create_ticket_prequel"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_CT_MOVE_SCTS, 0), "ct_move_scts"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_CT_STRICT, 0), "ct_strict"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_CUSTOM_EXT_ADD, 0), "custom_ext_add"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_CUSTOM_EXT_PARSE, 0), "custom_ext_parse"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_D2I_SSL_SESSION, 0), "d2i_SSL_SESSION"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DANE_CTX_ENABLE, 0), "dane_ctx_enable"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DANE_MTYPE_SET, 0), "dane_mtype_set"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DANE_TLSA_ADD, 0), "dane_tlsa_add"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DERIVE_SECRET_KEY_AND_IV, 0),
+     "derive_secret_key_and_iv"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DO_DTLS1_WRITE, 0), "do_dtls1_write"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DO_SSL3_WRITE, 0), "do_ssl3_write"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS1_BUFFER_RECORD, 0),
+     "dtls1_buffer_record"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS1_CHECK_TIMEOUT_NUM, 0),
+     "dtls1_check_timeout_num"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS1_HEARTBEAT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS1_HM_FRAGMENT_NEW, 0),
+     "dtls1_hm_fragment_new"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS1_PREPROCESS_FRAGMENT, 0),
+     "dtls1_preprocess_fragment"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS1_PROCESS_BUFFERED_RECORDS, 0),
+     "dtls1_process_buffered_records"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS1_PROCESS_RECORD, 0),
+     "dtls1_process_record"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS1_READ_BYTES, 0), "dtls1_read_bytes"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS1_READ_FAILED, 0), "dtls1_read_failed"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS1_RETRANSMIT_MESSAGE, 0),
+     "dtls1_retransmit_message"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS1_WRITE_APP_DATA_BYTES, 0),
+     "dtls1_write_app_data_bytes"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS1_WRITE_BYTES, 0), "dtls1_write_bytes"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLSV1_LISTEN, 0), "DTLSv1_listen"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS_CONSTRUCT_CHANGE_CIPHER_SPEC, 0),
+     "dtls_construct_change_cipher_spec"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS_CONSTRUCT_HELLO_VERIFY_REQUEST, 0),
+     "dtls_construct_hello_verify_request"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS_GET_REASSEMBLED_MESSAGE, 0),
+     "dtls_get_reassembled_message"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS_PROCESS_HELLO_VERIFY, 0),
+     "dtls_process_hello_verify"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS_RECORD_LAYER_NEW, 0),
+     "DTLS_RECORD_LAYER_new"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_DTLS_WAIT_FOR_DRY, 0), "dtls_wait_for_dry"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_EARLY_DATA_COUNT_OK, 0),
+     "early_data_count_ok"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_FINAL_EARLY_DATA, 0), "final_early_data"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_FINAL_EC_PT_FORMATS, 0),
+     "final_ec_pt_formats"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_FINAL_EMS, 0), "final_ems"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_FINAL_KEY_SHARE, 0), "final_key_share"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_FINAL_MAXFRAGMENTLEN, 0),
+     "final_maxfragmentlen"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_FINAL_RENEGOTIATE, 0), "final_renegotiate"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_FINAL_SERVER_NAME, 0), "final_server_name"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_FINAL_SIG_ALGS, 0), "final_sig_algs"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_GET_CERT_VERIFY_TBS_DATA, 0),
+     "get_cert_verify_tbs_data"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_NSS_KEYLOG_INT, 0), "nss_keylog_int"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_OPENSSL_INIT_SSL, 0), "OPENSSL_init_ssl"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_OSSL_STATEM_CLIENT13_READ_TRANSITION, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_OSSL_STATEM_CLIENT13_WRITE_TRANSITION, 0),
+     "ossl_statem_client13_write_transition"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_OSSL_STATEM_CLIENT_CONSTRUCT_MESSAGE, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_OSSL_STATEM_CLIENT_POST_PROCESS_MESSAGE, 0),
+     "ossl_statem_client_post_process_message"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_OSSL_STATEM_CLIENT_PROCESS_MESSAGE, 0),
+     "ossl_statem_client_process_message"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_OSSL_STATEM_CLIENT_READ_TRANSITION, 0),
+     "ossl_statem_client_read_transition"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_OSSL_STATEM_CLIENT_WRITE_TRANSITION, 0),
+     "ossl_statem_client_write_transition"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_OSSL_STATEM_SERVER13_READ_TRANSITION, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_OSSL_STATEM_SERVER13_WRITE_TRANSITION, 0),
+     "ossl_statem_server13_write_transition"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_OSSL_STATEM_SERVER_CONSTRUCT_MESSAGE, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_OSSL_STATEM_SERVER_POST_PROCESS_MESSAGE, 0),
+     "ossl_statem_server_post_process_message"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_OSSL_STATEM_SERVER_POST_WORK, 0),
+     "ossl_statem_server_post_work"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_OSSL_STATEM_SERVER_PROCESS_MESSAGE, 0),
+     "ossl_statem_server_process_message"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_OSSL_STATEM_SERVER_READ_TRANSITION, 0),
+     "ossl_statem_server_read_transition"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_OSSL_STATEM_SERVER_WRITE_TRANSITION, 0),
+     "ossl_statem_server_write_transition"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_PARSE_CA_NAMES, 0), "parse_ca_names"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_PITEM_NEW, 0), "pitem_new"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_PQUEUE_NEW, 0), "pqueue_new"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_PROCESS_KEY_SHARE_EXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_READ_STATE_MACHINE, 0), "read_state_machine"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SET_CLIENT_CIPHERSUITE, 0),
+     "set_client_ciphersuite"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SRP_GENERATE_CLIENT_MASTER_SECRET, 0),
+     "srp_generate_client_master_secret"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SRP_GENERATE_SERVER_MASTER_SECRET, 0),
+     "srp_generate_server_master_secret"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SRP_VERIFY_SERVER_PARAM, 0),
+     "srp_verify_server_param"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_CHANGE_CIPHER_STATE, 0),
+     "ssl3_change_cipher_state"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_CHECK_CERT_AND_ALGORITHM, 0),
+     "ssl3_check_cert_and_algorithm"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_CTRL, 0), "ssl3_ctrl"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_CTX_CTRL, 0), "ssl3_ctx_ctrl"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_DIGEST_CACHED_RECORDS, 0),
+     "ssl3_digest_cached_records"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_DO_CHANGE_CIPHER_SPEC, 0),
+     "ssl3_do_change_cipher_spec"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_ENC, 0), "ssl3_enc"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_FINAL_FINISH_MAC, 0),
+     "ssl3_final_finish_mac"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_FINISH_MAC, 0), "ssl3_finish_mac"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_GENERATE_KEY_BLOCK, 0),
+     "ssl3_generate_key_block"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_GENERATE_MASTER_SECRET, 0),
+     "ssl3_generate_master_secret"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_GET_RECORD, 0), "ssl3_get_record"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_INIT_FINISHED_MAC, 0),
+     "ssl3_init_finished_mac"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_OUTPUT_CERT_CHAIN, 0),
+     "ssl3_output_cert_chain"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_READ_BYTES, 0), "ssl3_read_bytes"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_READ_N, 0), "ssl3_read_n"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_SETUP_KEY_BLOCK, 0),
+     "ssl3_setup_key_block"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_SETUP_READ_BUFFER, 0),
+     "ssl3_setup_read_buffer"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_SETUP_WRITE_BUFFER, 0),
+     "ssl3_setup_write_buffer"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_WRITE_BYTES, 0), "ssl3_write_bytes"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_WRITE_PENDING, 0), "ssl3_write_pending"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_ADD_CERT_CHAIN, 0), "ssl_add_cert_chain"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_ADD_CERT_TO_BUF, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_ADD_CERT_TO_WPACKET, 0),
+     "ssl_add_cert_to_wpacket"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_ADD_CLIENTHELLO_RENEGOTIATE_EXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_ADD_CLIENTHELLO_TLSEXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_ADD_CLIENTHELLO_USE_SRTP_EXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_ADD_DIR_CERT_SUBJECTS_TO_STACK, 0),
+     "SSL_add_dir_cert_subjects_to_stack"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_ADD_FILE_CERT_SUBJECTS_TO_STACK, 0),
+     "SSL_add_file_cert_subjects_to_stack"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_ADD_SERVERHELLO_TLSEXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_BAD_METHOD, 0), "ssl_bad_method"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_BUILD_CERT_CHAIN, 0),
+     "ssl_build_cert_chain"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_BYTES_TO_CIPHER_LIST, 0),
+     "SSL_bytes_to_cipher_list"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CACHE_CIPHERLIST, 0),
+     "ssl_cache_cipherlist"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CERT_ADD0_CHAIN_CERT, 0),
+     "ssl_cert_add0_chain_cert"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CERT_DUP, 0), "ssl_cert_dup"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CERT_NEW, 0), "ssl_cert_new"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CERT_SET0_CHAIN, 0),
+     "ssl_cert_set0_chain"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CHECK_PRIVATE_KEY, 0),
+     "SSL_check_private_key"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CHECK_SERVERHELLO_TLSEXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CHECK_SRP_EXT_CLIENTHELLO, 0),
+     "ssl_check_srp_ext_ClientHello"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CHECK_SRVR_ECC_CERT_AND_ALG, 0),
+     "ssl_check_srvr_ecc_cert_and_alg"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CHOOSE_CLIENT_VERSION, 0),
+     "ssl_choose_client_version"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CIPHER_DESCRIPTION, 0),
+     "SSL_CIPHER_description"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CIPHER_LIST_TO_BYTES, 0),
+     "ssl_cipher_list_to_bytes"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CIPHER_PROCESS_RULESTR, 0),
+     "ssl_cipher_process_rulestr"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CIPHER_STRENGTH_SORT, 0),
+     "ssl_cipher_strength_sort"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CLEAR, 0), "SSL_clear"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CLIENT_HELLO_GET1_EXTENSIONS_PRESENT, 0),
+     "SSL_client_hello_get1_extensions_present"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_COMP_ADD_COMPRESSION_METHOD, 0),
+     "SSL_COMP_add_compression_method"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CONF_CMD, 0), "SSL_CONF_cmd"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CREATE_CIPHER_LIST, 0),
+     "ssl_create_cipher_list"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTRL, 0), "SSL_ctrl"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_CHECK_PRIVATE_KEY, 0),
+     "SSL_CTX_check_private_key"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_ENABLE_CT, 0), "SSL_CTX_enable_ct"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_MAKE_PROFILES, 0),
+     "ssl_ctx_make_profiles"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_NEW, 0), "SSL_CTX_new"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_SET_ALPN_PROTOS, 0),
+     "SSL_CTX_set_alpn_protos"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_SET_CIPHER_LIST, 0),
+     "SSL_CTX_set_cipher_list"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_SET_CLIENT_CERT_ENGINE, 0),
+     "SSL_CTX_set_client_cert_engine"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_SET_CT_VALIDATION_CALLBACK, 0),
+     "SSL_CTX_set_ct_validation_callback"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_SET_SESSION_ID_CONTEXT, 0),
+     "SSL_CTX_set_session_id_context"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_SET_SSL_VERSION, 0),
+     "SSL_CTX_set_ssl_version"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_SET_TLSEXT_MAX_FRAGMENT_LENGTH, 0),
+     "SSL_CTX_set_tlsext_max_fragment_length"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_USE_CERTIFICATE, 0),
+     "SSL_CTX_use_certificate"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_USE_CERTIFICATE_ASN1, 0),
+     "SSL_CTX_use_certificate_ASN1"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_USE_CERTIFICATE_FILE, 0),
+     "SSL_CTX_use_certificate_file"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_USE_PRIVATEKEY, 0),
+     "SSL_CTX_use_PrivateKey"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_USE_PRIVATEKEY_ASN1, 0),
+     "SSL_CTX_use_PrivateKey_ASN1"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_USE_PRIVATEKEY_FILE, 0),
+     "SSL_CTX_use_PrivateKey_file"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_USE_PSK_IDENTITY_HINT, 0),
+     "SSL_CTX_use_psk_identity_hint"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_USE_RSAPRIVATEKEY, 0),
+     "SSL_CTX_use_RSAPrivateKey"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_USE_RSAPRIVATEKEY_ASN1, 0),
+     "SSL_CTX_use_RSAPrivateKey_ASN1"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_USE_RSAPRIVATEKEY_FILE, 0),
+     "SSL_CTX_use_RSAPrivateKey_file"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_USE_SERVERINFO, 0),
+     "SSL_CTX_use_serverinfo"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_USE_SERVERINFO_EX, 0),
+     "SSL_CTX_use_serverinfo_ex"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_CTX_USE_SERVERINFO_FILE, 0),
+     "SSL_CTX_use_serverinfo_file"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_DANE_DUP, 0), "ssl_dane_dup"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_DANE_ENABLE, 0), "SSL_dane_enable"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_DERIVE, 0), "ssl_derive"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_DO_CONFIG, 0), "ssl_do_config"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_DO_HANDSHAKE, 0), "SSL_do_handshake"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_DUP_CA_LIST, 0), "SSL_dup_CA_list"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_ENABLE_CT, 0), "SSL_enable_ct"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_GENERATE_PKEY_GROUP, 0),
+     "ssl_generate_pkey_group"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_GENERATE_SESSION_ID, 0),
+     "ssl_generate_session_id"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_GET_NEW_SESSION, 0),
+     "ssl_get_new_session"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_GET_PREV_SESSION, 0),
+     "ssl_get_prev_session"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_GET_SERVER_CERT_INDEX, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_GET_SIGN_PKEY, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_HANDSHAKE_HASH, 0), "ssl_handshake_hash"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_INIT_WBIO_BUFFER, 0),
+     "ssl_init_wbio_buffer"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_KEY_UPDATE, 0), "SSL_key_update"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_LOAD_CLIENT_CA_FILE, 0),
+     "SSL_load_client_CA_file"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_LOG_MASTER_SECRET, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_LOG_RSA_CLIENT_KEY_EXCHANGE, 0),
+     "ssl_log_rsa_client_key_exchange"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_MODULE_INIT, 0), "ssl_module_init"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_NEW, 0), "SSL_new"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_NEXT_PROTO_VALIDATE, 0),
+     "ssl_next_proto_validate"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_PARSE_CLIENTHELLO_RENEGOTIATE_EXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_PARSE_CLIENTHELLO_TLSEXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_PARSE_CLIENTHELLO_USE_SRTP_EXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_PARSE_SERVERHELLO_RENEGOTIATE_EXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_PARSE_SERVERHELLO_TLSEXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_PARSE_SERVERHELLO_USE_SRTP_EXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_PEEK, 0), "SSL_peek"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_PEEK_EX, 0), "SSL_peek_ex"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_PEEK_INTERNAL, 0), "ssl_peek_internal"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_READ, 0), "SSL_read"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_READ_EARLY_DATA, 0),
+     "SSL_read_early_data"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_READ_EX, 0), "SSL_read_ex"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_READ_INTERNAL, 0), "ssl_read_internal"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_RENEGOTIATE, 0), "SSL_renegotiate"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_RENEGOTIATE_ABBREVIATED, 0),
+     "SSL_renegotiate_abbreviated"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SCAN_CLIENTHELLO_TLSEXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SCAN_SERVERHELLO_TLSEXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SESSION_DUP, 0), "ssl_session_dup"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SESSION_NEW, 0), "SSL_SESSION_new"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SESSION_PRINT_FP, 0),
+     "SSL_SESSION_print_fp"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SESSION_SET1_ID, 0),
+     "SSL_SESSION_set1_id"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SESSION_SET1_ID_CONTEXT, 0),
+     "SSL_SESSION_set1_id_context"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SET_ALPN_PROTOS, 0),
+     "SSL_set_alpn_protos"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SET_CERT, 0), "ssl_set_cert"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SET_CERT_AND_KEY, 0),
+     "ssl_set_cert_and_key"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SET_CIPHER_LIST, 0),
+     "SSL_set_cipher_list"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SET_CT_VALIDATION_CALLBACK, 0),
+     "SSL_set_ct_validation_callback"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SET_FD, 0), "SSL_set_fd"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SET_PKEY, 0), "ssl_set_pkey"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SET_RFD, 0), "SSL_set_rfd"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SET_SESSION, 0), "SSL_set_session"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SET_SESSION_ID_CONTEXT, 0),
+     "SSL_set_session_id_context"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SET_SESSION_TICKET_EXT, 0),
+     "SSL_set_session_ticket_ext"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SET_TLSEXT_MAX_FRAGMENT_LENGTH, 0),
+     "SSL_set_tlsext_max_fragment_length"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SET_WFD, 0), "SSL_set_wfd"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SHUTDOWN, 0), "SSL_shutdown"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_SRP_CTX_INIT, 0), "SSL_SRP_CTX_init"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_START_ASYNC_JOB, 0),
+     "ssl_start_async_job"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_UNDEFINED_FUNCTION, 0),
+     "ssl_undefined_function"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_UNDEFINED_VOID_FUNCTION, 0),
+     "ssl_undefined_void_function"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_USE_CERTIFICATE, 0),
+     "SSL_use_certificate"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_USE_CERTIFICATE_ASN1, 0),
+     "SSL_use_certificate_ASN1"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_USE_CERTIFICATE_FILE, 0),
+     "SSL_use_certificate_file"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_USE_PRIVATEKEY, 0), "SSL_use_PrivateKey"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_USE_PRIVATEKEY_ASN1, 0),
+     "SSL_use_PrivateKey_ASN1"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_USE_PRIVATEKEY_FILE, 0),
+     "SSL_use_PrivateKey_file"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_USE_PSK_IDENTITY_HINT, 0),
+     "SSL_use_psk_identity_hint"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_USE_RSAPRIVATEKEY, 0),
+     "SSL_use_RSAPrivateKey"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_USE_RSAPRIVATEKEY_ASN1, 0),
+     "SSL_use_RSAPrivateKey_ASN1"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_USE_RSAPRIVATEKEY_FILE, 0),
+     "SSL_use_RSAPrivateKey_file"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_VALIDATE_CT, 0), "ssl_validate_ct"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_VERIFY_CERT_CHAIN, 0),
+     "ssl_verify_cert_chain"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, 0),
+     "SSL_verify_client_post_handshake"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_WRITE, 0), "SSL_write"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_WRITE_EARLY_DATA, 0),
+     "SSL_write_early_data"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_WRITE_EARLY_FINISH, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_WRITE_EX, 0), "SSL_write_ex"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_WRITE_INTERNAL, 0), "ssl_write_internal"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_STATE_MACHINE, 0), "state_machine"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS12_CHECK_PEER_SIGALG, 0),
+     "tls12_check_peer_sigalg"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS12_COPY_SIGALGS, 0), "tls12_copy_sigalgs"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS13_CHANGE_CIPHER_STATE, 0),
+     "tls13_change_cipher_state"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS13_ENC, 0), "tls13_enc"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS13_FINAL_FINISH_MAC, 0),
+     "tls13_final_finish_mac"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS13_GENERATE_SECRET, 0),
+     "tls13_generate_secret"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS13_HKDF_EXPAND, 0), "tls13_hkdf_expand"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS13_RESTORE_HANDSHAKE_DIGEST_FOR_PHA, 0),
+     "tls13_restore_handshake_digest_for_pha"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS13_SAVE_HANDSHAKE_DIGEST_FOR_PHA, 0),
+     "tls13_save_handshake_digest_for_pha"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS13_SETUP_KEY_BLOCK, 0),
+     "tls13_setup_key_block"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS1_CHANGE_CIPHER_STATE, 0),
+     "tls1_change_cipher_state"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS1_CHECK_DUPLICATE_EXTENSIONS, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS1_ENC, 0), "tls1_enc"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS1_EXPORT_KEYING_MATERIAL, 0),
+     "tls1_export_keying_material"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS1_GET_CURVELIST, 0), "tls1_get_curvelist"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS1_PRF, 0), "tls1_PRF"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS1_SAVE_U16, 0), "tls1_save_u16"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS1_SETUP_KEY_BLOCK, 0),
+     "tls1_setup_key_block"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS1_SET_GROUPS, 0), "tls1_set_groups"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS1_SET_RAW_SIGALGS, 0),
+     "tls1_set_raw_sigalgs"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS1_SET_SERVER_SIGALGS, 0),
+     "tls1_set_server_sigalgs"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS1_SET_SHARED_SIGALGS, 0),
+     "tls1_set_shared_sigalgs"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS1_SET_SIGALGS, 0), "tls1_set_sigalgs"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CHOOSE_SIGALG, 0), "tls_choose_sigalg"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CLIENT_KEY_EXCHANGE_POST_WORK, 0),
+     "tls_client_key_exchange_post_work"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_COLLECT_EXTENSIONS, 0),
+     "tls_collect_extensions"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CERTIFICATE_AUTHORITIES, 0),
+     "tls_construct_certificate_authorities"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CERTIFICATE_REQUEST, 0),
+     "tls_construct_certificate_request"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CERT_STATUS, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CERT_STATUS_BODY, 0),
+     "tls_construct_cert_status_body"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CERT_VERIFY, 0),
+     "tls_construct_cert_verify"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CHANGE_CIPHER_SPEC, 0),
+     "tls_construct_change_cipher_spec"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CKE_DHE, 0),
+     "tls_construct_cke_dhe"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CKE_ECDHE, 0),
+     "tls_construct_cke_ecdhe"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CKE_GOST, 0),
+     "tls_construct_cke_gost"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CKE_PSK_PREAMBLE, 0),
+     "tls_construct_cke_psk_preamble"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CKE_RSA, 0),
+     "tls_construct_cke_rsa"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CKE_SRP, 0),
+     "tls_construct_cke_srp"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CLIENT_CERTIFICATE, 0),
+     "tls_construct_client_certificate"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CLIENT_HELLO, 0),
+     "tls_construct_client_hello"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CLIENT_KEY_EXCHANGE, 0),
+     "tls_construct_client_key_exchange"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CLIENT_VERIFY, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_ALPN, 0),
+     "tls_construct_ctos_alpn"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_CERTIFICATE, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_COOKIE, 0),
+     "tls_construct_ctos_cookie"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_EARLY_DATA, 0),
+     "tls_construct_ctos_early_data"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_EC_PT_FORMATS, 0),
+     "tls_construct_ctos_ec_pt_formats"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_EMS, 0),
+     "tls_construct_ctos_ems"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_ETM, 0),
+     "tls_construct_ctos_etm"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_HELLO, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_KEY_EXCHANGE, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_KEY_SHARE, 0),
+     "tls_construct_ctos_key_share"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_MAXFRAGMENTLEN, 0),
+     "tls_construct_ctos_maxfragmentlen"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_NPN, 0),
+     "tls_construct_ctos_npn"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_PADDING, 0),
+     "tls_construct_ctos_padding"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_POST_HANDSHAKE_AUTH, 0),
+     "tls_construct_ctos_post_handshake_auth"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_PSK, 0),
+     "tls_construct_ctos_psk"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_PSK_KEX_MODES, 0),
+     "tls_construct_ctos_psk_kex_modes"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_RENEGOTIATE, 0),
+     "tls_construct_ctos_renegotiate"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_SCT, 0),
+     "tls_construct_ctos_sct"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_SERVER_NAME, 0),
+     "tls_construct_ctos_server_name"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_SESSION_TICKET, 0),
+     "tls_construct_ctos_session_ticket"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_SIG_ALGS, 0),
+     "tls_construct_ctos_sig_algs"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_SRP, 0),
+     "tls_construct_ctos_srp"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_STATUS_REQUEST, 0),
+     "tls_construct_ctos_status_request"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_SUPPORTED_GROUPS, 0),
+     "tls_construct_ctos_supported_groups"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_SUPPORTED_VERSIONS, 0),
+     "tls_construct_ctos_supported_versions"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_USE_SRTP, 0),
+     "tls_construct_ctos_use_srtp"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_VERIFY, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_ENCRYPTED_EXTENSIONS, 0),
+     "tls_construct_encrypted_extensions"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_END_OF_EARLY_DATA, 0),
+     "tls_construct_end_of_early_data"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_EXTENSIONS, 0),
+     "tls_construct_extensions"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_FINISHED, 0),
+     "tls_construct_finished"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_HELLO_REQUEST, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_HELLO_RETRY_REQUEST, 0),
+     "tls_construct_hello_retry_request"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_KEY_UPDATE, 0),
+     "tls_construct_key_update"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_NEW_SESSION_TICKET, 0),
+     "tls_construct_new_session_ticket"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_NEXT_PROTO, 0),
+     "tls_construct_next_proto"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_SERVER_CERTIFICATE, 0),
+     "tls_construct_server_certificate"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_SERVER_HELLO, 0),
+     "tls_construct_server_hello"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE, 0),
+     "tls_construct_server_key_exchange"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_ALPN, 0),
+     "tls_construct_stoc_alpn"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_CERTIFICATE, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_COOKIE, 0),
+     "tls_construct_stoc_cookie"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_CRYPTOPRO_BUG, 0),
+     "tls_construct_stoc_cryptopro_bug"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_DONE, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_EARLY_DATA, 0),
+     "tls_construct_stoc_early_data"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_EARLY_DATA_INFO, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_EC_PT_FORMATS, 0),
+     "tls_construct_stoc_ec_pt_formats"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_EMS, 0),
+     "tls_construct_stoc_ems"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_ETM, 0),
+     "tls_construct_stoc_etm"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_HELLO, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_KEY_EXCHANGE, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_KEY_SHARE, 0),
+     "tls_construct_stoc_key_share"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_MAXFRAGMENTLEN, 0),
+     "tls_construct_stoc_maxfragmentlen"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_NEXT_PROTO_NEG, 0),
+     "tls_construct_stoc_next_proto_neg"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_PSK, 0),
+     "tls_construct_stoc_psk"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_RENEGOTIATE, 0),
+     "tls_construct_stoc_renegotiate"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_SERVER_NAME, 0),
+     "tls_construct_stoc_server_name"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_SESSION_TICKET, 0),
+     "tls_construct_stoc_session_ticket"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_STATUS_REQUEST, 0),
+     "tls_construct_stoc_status_request"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_SUPPORTED_GROUPS, 0),
+     "tls_construct_stoc_supported_groups"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_SUPPORTED_VERSIONS, 0),
+     "tls_construct_stoc_supported_versions"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_STOC_USE_SRTP, 0),
+     "tls_construct_stoc_use_srtp"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO, 0),
+     "tls_early_post_process_client_hello"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_FINISH_HANDSHAKE, 0),
+     "tls_finish_handshake"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_GET_MESSAGE_BODY, 0),
+     "tls_get_message_body"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_GET_MESSAGE_HEADER, 0),
+     "tls_get_message_header"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_HANDLE_ALPN, 0), "tls_handle_alpn"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_HANDLE_STATUS_REQUEST, 0),
+     "tls_handle_status_request"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CERTIFICATE_AUTHORITIES, 0),
+     "tls_parse_certificate_authorities"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CLIENTHELLO_TLSEXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_ALPN, 0),
+     "tls_parse_ctos_alpn"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_COOKIE, 0),
+     "tls_parse_ctos_cookie"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_EARLY_DATA, 0),
+     "tls_parse_ctos_early_data"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_EC_PT_FORMATS, 0),
+     "tls_parse_ctos_ec_pt_formats"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_EMS, 0), "tls_parse_ctos_ems"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_KEY_SHARE, 0),
+     "tls_parse_ctos_key_share"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_MAXFRAGMENTLEN, 0),
+     "tls_parse_ctos_maxfragmentlen"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_POST_HANDSHAKE_AUTH, 0),
+     "tls_parse_ctos_post_handshake_auth"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_PSK, 0), "tls_parse_ctos_psk"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_PSK_KEX_MODES, 0),
+     "tls_parse_ctos_psk_kex_modes"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_RENEGOTIATE, 0),
+     "tls_parse_ctos_renegotiate"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_SERVER_NAME, 0),
+     "tls_parse_ctos_server_name"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_SESSION_TICKET, 0),
+     "tls_parse_ctos_session_ticket"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_SIG_ALGS, 0),
+     "tls_parse_ctos_sig_algs"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_SIG_ALGS_CERT, 0),
+     "tls_parse_ctos_sig_algs_cert"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_SRP, 0), "tls_parse_ctos_srp"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_STATUS_REQUEST, 0),
+     "tls_parse_ctos_status_request"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_SUPPORTED_GROUPS, 0),
+     "tls_parse_ctos_supported_groups"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_USE_SRTP, 0),
+     "tls_parse_ctos_use_srtp"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_STOC_ALPN, 0),
+     "tls_parse_stoc_alpn"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_STOC_COOKIE, 0),
+     "tls_parse_stoc_cookie"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_STOC_EARLY_DATA, 0),
+     "tls_parse_stoc_early_data"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_STOC_EARLY_DATA_INFO, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_STOC_EC_PT_FORMATS, 0),
+     "tls_parse_stoc_ec_pt_formats"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_STOC_KEY_SHARE, 0),
+     "tls_parse_stoc_key_share"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_STOC_MAXFRAGMENTLEN, 0),
+     "tls_parse_stoc_maxfragmentlen"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_STOC_NPN, 0), "tls_parse_stoc_npn"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_STOC_PSK, 0), "tls_parse_stoc_psk"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_STOC_RENEGOTIATE, 0),
+     "tls_parse_stoc_renegotiate"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_STOC_SCT, 0), "tls_parse_stoc_sct"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_STOC_SERVER_NAME, 0),
+     "tls_parse_stoc_server_name"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_STOC_SESSION_TICKET, 0),
+     "tls_parse_stoc_session_ticket"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_STOC_STATUS_REQUEST, 0),
+     "tls_parse_stoc_status_request"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_STOC_SUPPORTED_VERSIONS, 0),
+     "tls_parse_stoc_supported_versions"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_STOC_USE_SRTP, 0),
+     "tls_parse_stoc_use_srtp"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_POST_PROCESS_CLIENT_HELLO, 0),
+     "tls_post_process_client_hello"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_POST_PROCESS_CLIENT_KEY_EXCHANGE, 0),
+     "tls_post_process_client_key_exchange"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PREPARE_CLIENT_CERTIFICATE, 0),
+     "tls_prepare_client_certificate"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_AS_HELLO_RETRY_REQUEST, 0),
+     "tls_process_as_hello_retry_request"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_CERTIFICATE_REQUEST, 0),
+     "tls_process_certificate_request"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_CERT_STATUS, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_CERT_STATUS_BODY, 0),
+     "tls_process_cert_status_body"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_CERT_VERIFY, 0),
+     "tls_process_cert_verify"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_CHANGE_CIPHER_SPEC, 0),
+     "tls_process_change_cipher_spec"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_CKE_DHE, 0),
+     "tls_process_cke_dhe"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_CKE_ECDHE, 0),
+     "tls_process_cke_ecdhe"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_CKE_GOST, 0),
+     "tls_process_cke_gost"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_CKE_PSK_PREAMBLE, 0),
+     "tls_process_cke_psk_preamble"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_CKE_RSA, 0),
+     "tls_process_cke_rsa"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_CKE_SRP, 0),
+     "tls_process_cke_srp"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE, 0),
+     "tls_process_client_certificate"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_CLIENT_HELLO, 0),
+     "tls_process_client_hello"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_CLIENT_KEY_EXCHANGE, 0),
+     "tls_process_client_key_exchange"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_ENCRYPTED_EXTENSIONS, 0),
+     "tls_process_encrypted_extensions"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_END_OF_EARLY_DATA, 0),
+     "tls_process_end_of_early_data"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_FINISHED, 0),
+     "tls_process_finished"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_HELLO_REQ, 0),
+     "tls_process_hello_req"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_HELLO_RETRY_REQUEST, 0),
+     "tls_process_hello_retry_request"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_INITIAL_SERVER_FLIGHT, 0),
+     "tls_process_initial_server_flight"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_KEY_EXCHANGE, 0),
+     "tls_process_key_exchange"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_KEY_UPDATE, 0),
+     "tls_process_key_update"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_NEW_SESSION_TICKET, 0),
+     "tls_process_new_session_ticket"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_NEXT_PROTO, 0),
+     "tls_process_next_proto"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_SERVER_CERTIFICATE, 0),
+     "tls_process_server_certificate"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_SERVER_DONE, 0),
+     "tls_process_server_done"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_SERVER_HELLO, 0),
+     "tls_process_server_hello"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_SKE_DHE, 0),
+     "tls_process_ske_dhe"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_SKE_ECDHE, 0),
+     "tls_process_ske_ecdhe"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_SKE_PSK_PREAMBLE, 0),
+     "tls_process_ske_psk_preamble"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PROCESS_SKE_SRP, 0),
+     "tls_process_ske_srp"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PSK_DO_BINDER, 0), "tls_psk_do_binder"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_SCAN_CLIENTHELLO_TLSEXT, 0), ""},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_SETUP_HANDSHAKE, 0),
+     "tls_setup_handshake"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_USE_CERTIFICATE_CHAIN_FILE, 0),
+     "use_certificate_chain_file"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_WPACKET_INTERN_INIT_LEN, 0),
+     "wpacket_intern_init_len"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_WPACKET_START_SUB_PACKET_LEN__, 0),
+     "WPACKET_start_sub_packet_len__"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_WRITE_STATE_MACHINE, 0),
+     "write_state_machine"},
+    {0, NULL}
+};
+
+static const ERR_STRING_DATA SSL_str_reasons[] = {
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_APPLICATION_DATA_AFTER_CLOSE_NOTIFY),
+    "application data after close notify"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_APP_DATA_IN_HANDSHAKE),
+    "app data in handshake"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_ATTEMPT_TO_REUSE_SESSION_IN_DIFFERENT_CONTEXT),
+    "attempt to reuse session in different context"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_AT_LEAST_TLS_1_0_NEEDED_IN_FIPS_MODE),
+    "at least TLS 1.0 needed in FIPS mode"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_AT_LEAST_TLS_1_2_NEEDED_IN_SUITEB_MODE),
+    "at least (D)TLS 1.2 needed in Suite B mode"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_CHANGE_CIPHER_SPEC),
+    "bad change cipher spec"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_CIPHER), "bad cipher"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_DATA), "bad data"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_DATA_RETURNED_BY_CALLBACK),
+    "bad data returned by callback"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_DECOMPRESSION), "bad decompression"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_DH_VALUE), "bad dh value"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_DIGEST_LENGTH), "bad digest length"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_EARLY_DATA), "bad early data"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_ECC_CERT), "bad ecc cert"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_ECPOINT), "bad ecpoint"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_EXTENSION), "bad extension"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_HANDSHAKE_LENGTH),
+    "bad handshake length"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_HANDSHAKE_STATE),
+    "bad handshake state"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_HELLO_REQUEST), "bad hello request"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_HRR_VERSION), "bad hrr version"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_KEY_SHARE), "bad key share"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_KEY_UPDATE), "bad key update"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_LEGACY_VERSION), "bad legacy version"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_LENGTH), "bad length"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_PACKET), "bad packet"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_PACKET_LENGTH), "bad packet length"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_PROTOCOL_VERSION_NUMBER),
+    "bad protocol version number"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_PSK), "bad psk"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_PSK_IDENTITY), "bad psk identity"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_RECORD_TYPE), "bad record type"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_RSA_ENCRYPT), "bad rsa encrypt"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_SIGNATURE), "bad signature"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_SRP_A_LENGTH), "bad srp a length"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_SRP_PARAMETERS), "bad srp parameters"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_SRTP_MKI_VALUE), "bad srtp mki value"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_SRTP_PROTECTION_PROFILE_LIST),
+    "bad srtp protection profile list"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_SSL_FILETYPE), "bad ssl filetype"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_VALUE), "bad value"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BAD_WRITE_RETRY), "bad write retry"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BINDER_DOES_NOT_VERIFY),
+    "binder does not verify"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BIO_NOT_SET), "bio not set"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BLOCK_CIPHER_PAD_IS_WRONG),
+    "block cipher pad is wrong"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_BN_LIB), "bn lib"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_CALLBACK_FAILED), "callback failed"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_CANNOT_CHANGE_CIPHER),
+    "cannot change cipher"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_CA_DN_LENGTH_MISMATCH),
+    "ca dn length mismatch"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_CA_KEY_TOO_SMALL), "ca key too small"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_CA_MD_TOO_WEAK), "ca md too weak"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_CCS_RECEIVED_EARLY), "ccs received early"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_CERTIFICATE_VERIFY_FAILED),
+    "certificate verify failed"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_CERT_CB_ERROR), "cert cb error"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_CERT_LENGTH_MISMATCH),
+    "cert length mismatch"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_CIPHERSUITE_DIGEST_HAS_CHANGED),
+    "ciphersuite digest has changed"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_CIPHER_CODE_WRONG_LENGTH),
+    "cipher code wrong length"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_CIPHER_OR_HASH_UNAVAILABLE),
+    "cipher or hash unavailable"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_CLIENTHELLO_TLSEXT), "clienthello tlsext"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_COMPRESSED_LENGTH_TOO_LONG),
+    "compressed length too long"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_COMPRESSION_DISABLED),
+    "compression disabled"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_COMPRESSION_FAILURE),
+    "compression failure"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_COMPRESSION_ID_NOT_WITHIN_PRIVATE_RANGE),
+    "compression id not within private range"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_COMPRESSION_LIBRARY_ERROR),
+    "compression library error"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_CONNECTION_TYPE_NOT_SET),
+    "connection type not set"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_CONTEXT_NOT_DANE_ENABLED),
+    "context not dane enabled"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_COOKIE_GEN_CALLBACK_FAILURE),
+    "cookie gen callback failure"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_COOKIE_MISMATCH), "cookie mismatch"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_CUSTOM_EXT_HANDLER_ALREADY_INSTALLED),
+    "custom ext handler already installed"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DANE_ALREADY_ENABLED),
+    "dane already enabled"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DANE_CANNOT_OVERRIDE_MTYPE_FULL),
+    "dane cannot override mtype full"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DANE_NOT_ENABLED), "dane not enabled"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DANE_TLSA_BAD_CERTIFICATE),
+    "dane tlsa bad certificate"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DANE_TLSA_BAD_CERTIFICATE_USAGE),
+    "dane tlsa bad certificate usage"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DANE_TLSA_BAD_DATA_LENGTH),
+    "dane tlsa bad data length"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DANE_TLSA_BAD_DIGEST_LENGTH),
+    "dane tlsa bad digest length"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DANE_TLSA_BAD_MATCHING_TYPE),
+    "dane tlsa bad matching type"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DANE_TLSA_BAD_PUBLIC_KEY),
+    "dane tlsa bad public key"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DANE_TLSA_BAD_SELECTOR),
+    "dane tlsa bad selector"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DANE_TLSA_NULL_DATA),
+    "dane tlsa null data"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DATA_BETWEEN_CCS_AND_FINISHED),
+    "data between ccs and finished"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DATA_LENGTH_TOO_LONG),
+    "data length too long"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DECRYPTION_FAILED), "decryption failed"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC),
+    "decryption failed or bad record mac"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DH_KEY_TOO_SMALL), "dh key too small"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DH_PUBLIC_VALUE_LENGTH_IS_WRONG),
+    "dh public value length is wrong"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DIGEST_CHECK_FAILED),
+    "digest check failed"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DTLS_MESSAGE_TOO_BIG),
+    "dtls message too big"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_DUPLICATE_COMPRESSION_ID),
+    "duplicate compression id"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_ECC_CERT_NOT_FOR_SIGNING),
+    "ecc cert not for signing"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_ECDH_REQUIRED_FOR_SUITEB_MODE),
+    "ecdh required for suiteb mode"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_EE_KEY_TOO_SMALL), "ee key too small"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_EMPTY_SRTP_PROTECTION_PROFILE_LIST),
+    "empty srtp protection profile list"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_ENCRYPTED_LENGTH_TOO_LONG),
+    "encrypted length too long"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_ERROR_IN_RECEIVED_CIPHER_LIST),
+    "error in received cipher list"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_ERROR_SETTING_TLSA_BASE_DOMAIN),
+    "error setting tlsa base domain"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_EXCEEDS_MAX_FRAGMENT_SIZE),
+    "exceeds max fragment size"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_EXCESSIVE_MESSAGE_SIZE),
+    "excessive message size"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_EXTENSION_NOT_RECEIVED),
+    "extension not received"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_EXTRA_DATA_IN_MESSAGE),
+    "extra data in message"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_EXT_LENGTH_MISMATCH),
+    "ext length mismatch"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_FAILED_TO_INIT_ASYNC),
+    "failed to init async"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_FRAGMENTED_CLIENT_HELLO),
+    "fragmented client hello"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_GOT_A_FIN_BEFORE_A_CCS),
+    "got a fin before a ccs"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_HTTPS_PROXY_REQUEST),
+    "https proxy request"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_HTTP_REQUEST), "http request"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_ILLEGAL_POINT_COMPRESSION),
+    "illegal point compression"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_ILLEGAL_SUITEB_DIGEST),
+    "illegal Suite B digest"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INAPPROPRIATE_FALLBACK),
+    "inappropriate fallback"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INCONSISTENT_COMPRESSION),
+    "inconsistent compression"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INCONSISTENT_EARLY_DATA_ALPN),
+    "inconsistent early data alpn"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INCONSISTENT_EARLY_DATA_SNI),
+    "inconsistent early data sni"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INCONSISTENT_EXTMS), "inconsistent extms"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INSUFFICIENT_SECURITY),
+    "insufficient security"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_ALERT), "invalid alert"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_CCS_MESSAGE),
+    "invalid ccs message"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_CERTIFICATE_OR_ALG),
+    "invalid certificate or alg"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_COMMAND), "invalid command"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_COMPRESSION_ALGORITHM),
+    "invalid compression algorithm"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_CONFIG), "invalid config"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_CONFIGURATION_NAME),
+    "invalid configuration name"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_CONTEXT), "invalid context"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_CT_VALIDATION_TYPE),
+    "invalid ct validation type"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_KEY_UPDATE_TYPE),
+    "invalid key update type"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_MAX_EARLY_DATA),
+    "invalid max early data"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_NULL_CMD_NAME),
+    "invalid null cmd name"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_SEQUENCE_NUMBER),
+    "invalid sequence number"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_SERVERINFO_DATA),
+    "invalid serverinfo data"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_SESSION_ID), "invalid session id"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_SRP_USERNAME),
+    "invalid srp username"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_STATUS_RESPONSE),
+    "invalid status response"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_TICKET_KEYS_LENGTH),
+    "invalid ticket keys length"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_LENGTH_MISMATCH), "length mismatch"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_LENGTH_TOO_LONG), "length too long"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_LENGTH_TOO_SHORT), "length too short"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_LIBRARY_BUG), "library bug"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_LIBRARY_HAS_NO_CIPHERS),
+    "library has no ciphers"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_MISSING_DSA_SIGNING_CERT),
+    "missing dsa signing cert"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_MISSING_ECDSA_SIGNING_CERT),
+    "missing ecdsa signing cert"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_MISSING_FATAL), "missing fatal"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_MISSING_PARAMETERS), "missing parameters"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_MISSING_RSA_CERTIFICATE),
+    "missing rsa certificate"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_MISSING_RSA_ENCRYPTING_CERT),
+    "missing rsa encrypting cert"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_MISSING_RSA_SIGNING_CERT),
+    "missing rsa signing cert"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_MISSING_SIGALGS_EXTENSION),
+    "missing sigalgs extension"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_MISSING_SIGNING_CERT),
+    "missing signing cert"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_MISSING_SRP_PARAM),
+    "can't find SRP server param"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_MISSING_SUPPORTED_GROUPS_EXTENSION),
+    "missing supported groups extension"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_MISSING_TMP_DH_KEY), "missing tmp dh key"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_MISSING_TMP_ECDH_KEY),
+    "missing tmp ecdh key"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_MIXED_HANDSHAKE_AND_NON_HANDSHAKE_DATA),
+    "mixed handshake and non handshake data"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NOT_ON_RECORD_BOUNDARY),
+    "not on record boundary"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NOT_REPLACING_CERTIFICATE),
+    "not replacing certificate"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NOT_SERVER), "not server"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_APPLICATION_PROTOCOL),
+    "no application protocol"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_CERTIFICATES_RETURNED),
+    "no certificates returned"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_CERTIFICATE_ASSIGNED),
+    "no certificate assigned"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_CERTIFICATE_SET), "no certificate set"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_CHANGE_FOLLOWING_HRR),
+    "no change following hrr"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_CIPHERS_AVAILABLE),
+    "no ciphers available"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_CIPHERS_SPECIFIED),
+    "no ciphers specified"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_CIPHER_MATCH), "no cipher match"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_CLIENT_CERT_METHOD),
+    "no client cert method"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_COMPRESSION_SPECIFIED),
+    "no compression specified"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_COOKIE_CALLBACK_SET),
+    "no cookie callback set"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_GOST_CERTIFICATE_SENT_BY_PEER),
+    "Peer haven't sent GOST certificate, required for selected ciphersuite"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_METHOD_SPECIFIED),
+    "no method specified"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_PEM_EXTENSIONS), "no pem extensions"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_PRIVATE_KEY_ASSIGNED),
+    "no private key assigned"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_PROTOCOLS_AVAILABLE),
+    "no protocols available"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_RENEGOTIATION), "no renegotiation"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_REQUIRED_DIGEST), "no required digest"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_SHARED_CIPHER), "no shared cipher"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_SHARED_GROUPS), "no shared groups"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_SHARED_SIGNATURE_ALGORITHMS),
+    "no shared signature algorithms"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_SRTP_PROFILES), "no srtp profiles"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_SUITABLE_KEY_SHARE),
+    "no suitable key share"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM),
+    "no suitable signature algorithm"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_VALID_SCTS), "no valid scts"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_VERIFY_COOKIE_CALLBACK),
+    "no verify cookie callback"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NULL_SSL_CTX), "null ssl ctx"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NULL_SSL_METHOD_PASSED),
+    "null ssl method passed"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_OLD_SESSION_CIPHER_NOT_RETURNED),
+    "old session cipher not returned"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_OLD_SESSION_COMPRESSION_ALGORITHM_NOT_RETURNED),
+    "old session compression algorithm not returned"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_OVERFLOW_ERROR), "overflow error"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_PACKET_LENGTH_TOO_LONG),
+    "packet length too long"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_PARSE_TLSEXT), "parse tlsext"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_PATH_TOO_LONG), "path too long"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_PEER_DID_NOT_RETURN_A_CERTIFICATE),
+    "peer did not return a certificate"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_PEM_NAME_BAD_PREFIX),
+    "pem name bad prefix"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_PEM_NAME_TOO_SHORT), "pem name too short"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_PIPELINE_FAILURE), "pipeline failure"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR),
+    "post handshake auth encoding err"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_PRIVATE_KEY_MISMATCH),
+    "private key mismatch"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_PROTOCOL_IS_SHUTDOWN),
+    "protocol is shutdown"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_PSK_IDENTITY_NOT_FOUND),
+    "psk identity not found"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_PSK_NO_CLIENT_CB), "psk no client cb"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_PSK_NO_SERVER_CB), "psk no server cb"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_READ_BIO_NOT_SET), "read bio not set"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_READ_TIMEOUT_EXPIRED),
+    "read timeout expired"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_RECORD_LENGTH_MISMATCH),
+    "record length mismatch"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_RECORD_TOO_SMALL), "record too small"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_RENEGOTIATE_EXT_TOO_LONG),
+    "renegotiate ext too long"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_RENEGOTIATION_ENCODING_ERR),
+    "renegotiation encoding err"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_RENEGOTIATION_MISMATCH),
+    "renegotiation mismatch"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_REQUEST_PENDING), "request pending"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_REQUEST_SENT), "request sent"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_REQUIRED_CIPHER_MISSING),
+    "required cipher missing"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_REQUIRED_COMPRESSION_ALGORITHM_MISSING),
+    "required compression algorithm missing"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SCSV_RECEIVED_WHEN_RENEGOTIATING),
+    "scsv received when renegotiating"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SCT_VERIFICATION_FAILED),
+    "sct verification failed"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SERVERHELLO_TLSEXT), "serverhello tlsext"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SESSION_ID_CONTEXT_UNINITIALIZED),
+    "session id context uninitialized"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SHUTDOWN_WHILE_IN_INIT),
+    "shutdown while in init"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SIGNATURE_ALGORITHMS_ERROR),
+    "signature algorithms error"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SIGNATURE_FOR_NON_SIGNING_CERTIFICATE),
+    "signature for non signing certificate"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SRP_A_CALC), "error with the srp params"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SRTP_COULD_NOT_ALLOCATE_PROFILES),
+    "srtp could not allocate profiles"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SRTP_PROTECTION_PROFILE_LIST_TOO_LONG),
+    "srtp protection profile list too long"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SRTP_UNKNOWN_PROTECTION_PROFILE),
+    "srtp unknown protection profile"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL3_EXT_INVALID_MAX_FRAGMENT_LENGTH),
+    "ssl3 ext invalid max fragment length"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL3_EXT_INVALID_SERVERNAME),
+    "ssl3 ext invalid servername"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL3_EXT_INVALID_SERVERNAME_TYPE),
+    "ssl3 ext invalid servername type"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL3_SESSION_ID_TOO_LONG),
+    "ssl3 session id too long"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSLV3_ALERT_BAD_CERTIFICATE),
+    "sslv3 alert bad certificate"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSLV3_ALERT_BAD_RECORD_MAC),
+    "sslv3 alert bad record mac"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSLV3_ALERT_CERTIFICATE_EXPIRED),
+    "sslv3 alert certificate expired"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSLV3_ALERT_CERTIFICATE_REVOKED),
+    "sslv3 alert certificate revoked"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSLV3_ALERT_CERTIFICATE_UNKNOWN),
+    "sslv3 alert certificate unknown"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSLV3_ALERT_DECOMPRESSION_FAILURE),
+    "sslv3 alert decompression failure"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSLV3_ALERT_HANDSHAKE_FAILURE),
+    "sslv3 alert handshake failure"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSLV3_ALERT_ILLEGAL_PARAMETER),
+    "sslv3 alert illegal parameter"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSLV3_ALERT_NO_CERTIFICATE),
+    "sslv3 alert no certificate"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSLV3_ALERT_UNEXPECTED_MESSAGE),
+    "sslv3 alert unexpected message"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSLV3_ALERT_UNSUPPORTED_CERTIFICATE),
+    "sslv3 alert unsupported certificate"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL_COMMAND_SECTION_EMPTY),
+    "ssl command section empty"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL_COMMAND_SECTION_NOT_FOUND),
+    "ssl command section not found"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL_CTX_HAS_NO_DEFAULT_SSL_VERSION),
+    "ssl ctx has no default ssl version"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL_HANDSHAKE_FAILURE),
+    "ssl handshake failure"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL_LIBRARY_HAS_NO_CIPHERS),
+    "ssl library has no ciphers"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL_NEGATIVE_LENGTH),
+    "ssl negative length"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL_SECTION_EMPTY), "ssl section empty"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL_SECTION_NOT_FOUND),
+    "ssl section not found"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL_SESSION_ID_CALLBACK_FAILED),
+    "ssl session id callback failed"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL_SESSION_ID_CONFLICT),
+    "ssl session id conflict"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL_SESSION_ID_CONTEXT_TOO_LONG),
+    "ssl session id context too long"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL_SESSION_ID_HAS_BAD_LENGTH),
+    "ssl session id has bad length"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL_SESSION_ID_TOO_LONG),
+    "ssl session id too long"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_SSL_SESSION_VERSION_MISMATCH),
+    "ssl session version mismatch"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_STILL_IN_INIT), "still in init"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV13_ALERT_CERTIFICATE_REQUIRED),
+    "tlsv13 alert certificate required"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV13_ALERT_MISSING_EXTENSION),
+    "tlsv13 alert missing extension"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_ALERT_ACCESS_DENIED),
+    "tlsv1 alert access denied"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_ALERT_DECODE_ERROR),
+    "tlsv1 alert decode error"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_ALERT_DECRYPTION_FAILED),
+    "tlsv1 alert decryption failed"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_ALERT_DECRYPT_ERROR),
+    "tlsv1 alert decrypt error"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_ALERT_EXPORT_RESTRICTION),
+    "tlsv1 alert export restriction"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_ALERT_INAPPROPRIATE_FALLBACK),
+    "tlsv1 alert inappropriate fallback"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_ALERT_INSUFFICIENT_SECURITY),
+    "tlsv1 alert insufficient security"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_ALERT_INTERNAL_ERROR),
+    "tlsv1 alert internal error"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_ALERT_NO_RENEGOTIATION),
+    "tlsv1 alert no renegotiation"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_ALERT_PROTOCOL_VERSION),
+    "tlsv1 alert protocol version"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_ALERT_RECORD_OVERFLOW),
+    "tlsv1 alert record overflow"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_ALERT_UNKNOWN_CA),
+    "tlsv1 alert unknown ca"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_ALERT_USER_CANCELLED),
+    "tlsv1 alert user cancelled"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_BAD_CERTIFICATE_HASH_VALUE),
+    "tlsv1 bad certificate hash value"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_BAD_CERTIFICATE_STATUS_RESPONSE),
+    "tlsv1 bad certificate status response"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_CERTIFICATE_UNOBTAINABLE),
+    "tlsv1 certificate unobtainable"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_UNRECOGNIZED_NAME),
+    "tlsv1 unrecognized name"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLSV1_UNSUPPORTED_EXTENSION),
+    "tlsv1 unsupported extension"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLS_HEARTBEAT_PEER_DOESNT_ACCEPT),
+    "peer does not accept heartbeats"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLS_HEARTBEAT_PENDING),
+    "heartbeat request already pending"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLS_ILLEGAL_EXPORTER_LABEL),
+    "tls illegal exporter label"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TLS_INVALID_ECPOINTFORMAT_LIST),
+    "tls invalid ecpointformat list"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TOO_MANY_KEY_UPDATES),
+    "too many key updates"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TOO_MANY_WARN_ALERTS),
+    "too many warn alerts"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_TOO_MUCH_EARLY_DATA),
+    "too much early data"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNABLE_TO_FIND_ECDH_PARAMETERS),
+    "unable to find ecdh parameters"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNABLE_TO_FIND_PUBLIC_KEY_PARAMETERS),
+    "unable to find public key parameters"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNABLE_TO_LOAD_SSL3_MD5_ROUTINES),
+    "unable to load ssl3 md5 routines"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNABLE_TO_LOAD_SSL3_SHA1_ROUTINES),
+    "unable to load ssl3 sha1 routines"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNEXPECTED_CCS_MESSAGE),
+    "unexpected ccs message"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNEXPECTED_END_OF_EARLY_DATA),
+    "unexpected end of early data"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNEXPECTED_MESSAGE), "unexpected message"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNEXPECTED_RECORD), "unexpected record"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNINITIALIZED), "uninitialized"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNKNOWN_ALERT_TYPE), "unknown alert type"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNKNOWN_CERTIFICATE_TYPE),
+    "unknown certificate type"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNKNOWN_CIPHER_RETURNED),
+    "unknown cipher returned"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNKNOWN_CIPHER_TYPE),
+    "unknown cipher type"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNKNOWN_CMD_NAME), "unknown cmd name"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNKNOWN_COMMAND), "unknown command"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNKNOWN_DIGEST), "unknown digest"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNKNOWN_KEY_EXCHANGE_TYPE),
+    "unknown key exchange type"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNKNOWN_PKEY_TYPE), "unknown pkey type"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNKNOWN_PROTOCOL), "unknown protocol"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNKNOWN_SSL_VERSION),
+    "unknown ssl version"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNKNOWN_STATE), "unknown state"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED),
+    "unsafe legacy renegotiation disabled"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNSOLICITED_EXTENSION),
+    "unsolicited extension"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM),
+    "unsupported compression algorithm"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNSUPPORTED_ELLIPTIC_CURVE),
+    "unsupported elliptic curve"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNSUPPORTED_PROTOCOL),
+    "unsupported protocol"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNSUPPORTED_SSL_VERSION),
+    "unsupported ssl version"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_UNSUPPORTED_STATUS_TYPE),
+    "unsupported status type"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_USE_SRTP_NOT_NEGOTIATED),
+    "use srtp not negotiated"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_VERSION_TOO_HIGH), "version too high"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_VERSION_TOO_LOW), "version too low"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_WRONG_CERTIFICATE_TYPE),
+    "wrong certificate type"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_WRONG_CIPHER_RETURNED),
+    "wrong cipher returned"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_WRONG_CURVE), "wrong curve"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_WRONG_SIGNATURE_LENGTH),
+    "wrong signature length"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_WRONG_SIGNATURE_SIZE),
+    "wrong signature size"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_WRONG_SIGNATURE_TYPE),
+    "wrong signature type"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_WRONG_SSL_VERSION), "wrong ssl version"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_WRONG_VERSION_NUMBER),
+    "wrong version number"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_X509_LIB), "x509 lib"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_X509_VERIFICATION_SETUP_PROBLEMS),
+    "x509 verification setup problems"},
+    {0, NULL}
+};
+
+#endif
+
+int ERR_load_SSL_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(SSL_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(SSL_str_functs);
+        ERR_load_strings_const(SSL_str_reasons);
+    }
+#endif
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_init.c b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_init.c
new file mode 100644
index 000000000..f0969fa9b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_init.c
@@ -0,0 +1,221 @@
+/*
+ * Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "e_os.h"
+
+#include "internal/err.h"
+#include <openssl/crypto.h>
+#include <openssl/evp.h>
+#include "ssl_locl.h"
+#include "internal/thread_once.h"
+
+static int stopped;
+
+static void ssl_library_stop(void);
+
+static CRYPTO_ONCE ssl_base = CRYPTO_ONCE_STATIC_INIT;
+static int ssl_base_inited = 0;
+DEFINE_RUN_ONCE_STATIC(ossl_init_ssl_base)
+{
+#ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_ssl_base: "
+            "Adding SSL ciphers and digests\n");
+#endif
+#ifndef OPENSSL_NO_DES
+    EVP_add_cipher(EVP_des_cbc());
+    EVP_add_cipher(EVP_des_ede3_cbc());
+#endif
+#ifndef OPENSSL_NO_IDEA
+    EVP_add_cipher(EVP_idea_cbc());
+#endif
+#ifndef OPENSSL_NO_RC4
+    EVP_add_cipher(EVP_rc4());
+# ifndef OPENSSL_NO_MD5
+    EVP_add_cipher(EVP_rc4_hmac_md5());
+# endif
+#endif
+#ifndef OPENSSL_NO_RC2
+    EVP_add_cipher(EVP_rc2_cbc());
+    /*
+     * Not actually used for SSL/TLS but this makes PKCS#12 work if an
+     * application only calls SSL_library_init().
+     */
+    EVP_add_cipher(EVP_rc2_40_cbc());
+#endif
+    EVP_add_cipher(EVP_aes_128_cbc());
+    EVP_add_cipher(EVP_aes_192_cbc());
+    EVP_add_cipher(EVP_aes_256_cbc());
+    EVP_add_cipher(EVP_aes_128_gcm());
+    EVP_add_cipher(EVP_aes_256_gcm());
+    EVP_add_cipher(EVP_aes_128_ccm());
+    EVP_add_cipher(EVP_aes_256_ccm());
+    EVP_add_cipher(EVP_aes_128_cbc_hmac_sha1());
+    EVP_add_cipher(EVP_aes_256_cbc_hmac_sha1());
+    EVP_add_cipher(EVP_aes_128_cbc_hmac_sha256());
+    EVP_add_cipher(EVP_aes_256_cbc_hmac_sha256());
+#ifndef OPENSSL_NO_ARIA
+    EVP_add_cipher(EVP_aria_128_gcm());
+    EVP_add_cipher(EVP_aria_256_gcm());
+#endif
+#ifndef OPENSSL_NO_CAMELLIA
+    EVP_add_cipher(EVP_camellia_128_cbc());
+    EVP_add_cipher(EVP_camellia_256_cbc());
+#endif
+#if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305)
+    EVP_add_cipher(EVP_chacha20_poly1305());
+#endif
+
+#ifndef OPENSSL_NO_SEED
+    EVP_add_cipher(EVP_seed_cbc());
+#endif
+
+#ifndef OPENSSL_NO_MD5
+    EVP_add_digest(EVP_md5());
+    EVP_add_digest_alias(SN_md5, "ssl3-md5");
+    EVP_add_digest(EVP_md5_sha1());
+#endif
+    EVP_add_digest(EVP_sha1()); /* RSA with sha1 */
+    EVP_add_digest_alias(SN_sha1, "ssl3-sha1");
+    EVP_add_digest_alias(SN_sha1WithRSAEncryption, SN_sha1WithRSA);
+    EVP_add_digest(EVP_sha224());
+    EVP_add_digest(EVP_sha256());
+    EVP_add_digest(EVP_sha384());
+    EVP_add_digest(EVP_sha512());
+#ifndef OPENSSL_NO_COMP
+# ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_ssl_base: "
+            "SSL_COMP_get_compression_methods()\n");
+# endif
+    /*
+     * This will initialise the built-in compression algorithms. The value
+     * returned is a STACK_OF(SSL_COMP), but that can be discarded safely
+     */
+    SSL_COMP_get_compression_methods();
+#endif
+    /* initialize cipher/digest methods table */
+    if (!ssl_load_ciphers())
+        return 0;
+
+#ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_ssl_base: "
+            "SSL_add_ssl_module()\n");
+#endif
+    /*
+     * We ignore an error return here. Not much we can do - but not that bad
+     * either. We can still safely continue.
+     */
+    OPENSSL_atexit(ssl_library_stop);
+    ssl_base_inited = 1;
+    return 1;
+}
+
+static CRYPTO_ONCE ssl_strings = CRYPTO_ONCE_STATIC_INIT;
+static int ssl_strings_inited = 0;
+DEFINE_RUN_ONCE_STATIC(ossl_init_load_ssl_strings)
+{
+    /*
+     * OPENSSL_NO_AUTOERRINIT is provided here to prevent at compile time
+     * pulling in all the error strings during static linking
+     */
+#if !defined(OPENSSL_NO_ERR) && !defined(OPENSSL_NO_AUTOERRINIT)
+# ifdef OPENSSL_INIT_DEBUG
+    fprintf(stderr, "OPENSSL_INIT: ossl_init_load_ssl_strings: "
+            "ERR_load_SSL_strings()\n");
+# endif
+    ERR_load_SSL_strings();
+    ssl_strings_inited = 1;
+#endif
+    return 1;
+}
+
+DEFINE_RUN_ONCE_STATIC_ALT(ossl_init_no_load_ssl_strings,
+                           ossl_init_load_ssl_strings)
+{
+    /* Do nothing in this case */
+    return 1;
+}
+
+static void ssl_library_stop(void)
+{
+    /* Might be explicitly called and also by atexit */
+    if (stopped)
+        return;
+    stopped = 1;
+
+    if (ssl_base_inited) {
+#ifndef OPENSSL_NO_COMP
+# ifdef OPENSSL_INIT_DEBUG
+        fprintf(stderr, "OPENSSL_INIT: ssl_library_stop: "
+                "ssl_comp_free_compression_methods_int()\n");
+# endif
+        ssl_comp_free_compression_methods_int();
+#endif
+    }
+
+    if (ssl_strings_inited) {
+#ifdef OPENSSL_INIT_DEBUG
+        fprintf(stderr, "OPENSSL_INIT: ssl_library_stop: "
+                "err_free_strings_int()\n");
+#endif
+        /*
+         * If both crypto and ssl error strings are inited we will end up
+         * calling err_free_strings_int() twice - but that's ok. The second
+         * time will be a no-op. It's easier to do that than to try and track
+         * between the two libraries whether they have both been inited.
+         */
+        err_free_strings_int();
+    }
+}
+
+/*
+ * If this function is called with a non NULL settings value then it must be
+ * called prior to any threads making calls to any OpenSSL functions,
+ * i.e. passing a non-null settings value is assumed to be single-threaded.
+ */
+int OPENSSL_init_ssl(uint64_t opts, const OPENSSL_INIT_SETTINGS * settings)
+{
+    static int stoperrset = 0;
+
+    if (stopped) {
+        if (!stoperrset) {
+            /*
+             * We only ever set this once to avoid getting into an infinite
+             * loop where the error system keeps trying to init and fails so
+             * sets an error etc
+             */
+            stoperrset = 1;
+            SSLerr(SSL_F_OPENSSL_INIT_SSL, ERR_R_INIT_FAIL);
+        }
+        return 0;
+    }
+
+    opts |= OPENSSL_INIT_ADD_ALL_CIPHERS
+         |  OPENSSL_INIT_ADD_ALL_DIGESTS;
+#ifndef OPENSSL_NO_AUTOLOAD_CONFIG
+    if ((opts & OPENSSL_INIT_NO_LOAD_CONFIG) == 0)
+        opts |= OPENSSL_INIT_LOAD_CONFIG;
+#endif
+
+    if (!OPENSSL_init_crypto(opts, settings))
+        return 0;
+
+    if (!RUN_ONCE(&ssl_base, ossl_init_ssl_base))
+        return 0;
+
+    if ((opts & OPENSSL_INIT_NO_LOAD_SSL_STRINGS)
+        && !RUN_ONCE_ALT(&ssl_strings, ossl_init_no_load_ssl_strings,
+                         ossl_init_load_ssl_strings))
+        return 0;
+
+    if ((opts & OPENSSL_INIT_LOAD_SSL_STRINGS)
+        && !RUN_ONCE(&ssl_strings, ossl_init_load_ssl_strings))
+        return 0;
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_lib.c b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_lib.c
new file mode 100644
index 000000000..4440a9ffe
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_lib.c
@@ -0,0 +1,5581 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ * Copyright 2005 Nokia. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "ssl_locl.h"
+#include <openssl/objects.h>
+#include <openssl/x509v3.h>
+#include <openssl/rand.h>
+#include <openssl/rand_drbg.h>
+#include <openssl/ocsp.h>
+#include <openssl/dh.h>
+#include <openssl/engine.h>
+#include <openssl/async.h>
+#include <openssl/ct.h>
+#include "internal/cryptlib.h"
+#include "internal/refcount.h"
+
+const char SSL_version_str[] = OPENSSL_VERSION_TEXT;
+
+static int ssl_undefined_function_1(SSL *ssl, SSL3_RECORD *r, size_t s, int t)
+{
+    (void)r;
+    (void)s;
+    (void)t;
+    return ssl_undefined_function(ssl);
+}
+
+static int ssl_undefined_function_2(SSL *ssl, SSL3_RECORD *r, unsigned char *s,
+                                    int t)
+{
+    (void)r;
+    (void)s;
+    (void)t;
+    return ssl_undefined_function(ssl);
+}
+
+static int ssl_undefined_function_3(SSL *ssl, unsigned char *r,
+                                    unsigned char *s, size_t t, size_t *u)
+{
+    (void)r;
+    (void)s;
+    (void)t;
+    (void)u;
+    return ssl_undefined_function(ssl);
+}
+
+static int ssl_undefined_function_4(SSL *ssl, int r)
+{
+    (void)r;
+    return ssl_undefined_function(ssl);
+}
+
+static size_t ssl_undefined_function_5(SSL *ssl, const char *r, size_t s,
+                                       unsigned char *t)
+{
+    (void)r;
+    (void)s;
+    (void)t;
+    return ssl_undefined_function(ssl);
+}
+
+static int ssl_undefined_function_6(int r)
+{
+    (void)r;
+    return ssl_undefined_function(NULL);
+}
+
+static int ssl_undefined_function_7(SSL *ssl, unsigned char *r, size_t s,
+                                    const char *t, size_t u,
+                                    const unsigned char *v, size_t w, int x)
+{
+    (void)r;
+    (void)s;
+    (void)t;
+    (void)u;
+    (void)v;
+    (void)w;
+    (void)x;
+    return ssl_undefined_function(ssl);
+}
+
+SSL3_ENC_METHOD ssl3_undef_enc_method = {
+    ssl_undefined_function_1,
+    ssl_undefined_function_2,
+    ssl_undefined_function,
+    ssl_undefined_function_3,
+    ssl_undefined_function_4,
+    ssl_undefined_function_5,
+    NULL,                       /* client_finished_label */
+    0,                          /* client_finished_label_len */
+    NULL,                       /* server_finished_label */
+    0,                          /* server_finished_label_len */
+    ssl_undefined_function_6,
+    ssl_undefined_function_7,
+};
+
+struct ssl_async_args {
+    SSL *s;
+    void *buf;
+    size_t num;
+    enum { READFUNC, WRITEFUNC, OTHERFUNC } type;
+    union {
+        int (*func_read) (SSL *, void *, size_t, size_t *);
+        int (*func_write) (SSL *, const void *, size_t, size_t *);
+        int (*func_other) (SSL *);
+    } f;
+};
+
+static const struct {
+    uint8_t mtype;
+    uint8_t ord;
+    int nid;
+} dane_mds[] = {
+    {
+        DANETLS_MATCHING_FULL, 0, NID_undef
+    },
+    {
+        DANETLS_MATCHING_2256, 1, NID_sha256
+    },
+    {
+        DANETLS_MATCHING_2512, 2, NID_sha512
+    },
+};
+
+static int dane_ctx_enable(struct dane_ctx_st *dctx)
+{
+    const EVP_MD **mdevp;
+    uint8_t *mdord;
+    uint8_t mdmax = DANETLS_MATCHING_LAST;
+    int n = ((int)mdmax) + 1;   /* int to handle PrivMatch(255) */
+    size_t i;
+
+    if (dctx->mdevp != NULL)
+        return 1;
+
+    mdevp = OPENSSL_zalloc(n * sizeof(*mdevp));
+    mdord = OPENSSL_zalloc(n * sizeof(*mdord));
+
+    if (mdord == NULL || mdevp == NULL) {
+        OPENSSL_free(mdord);
+        OPENSSL_free(mdevp);
+        SSLerr(SSL_F_DANE_CTX_ENABLE, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    /* Install default entries */
+    for (i = 0; i < OSSL_NELEM(dane_mds); ++i) {
+        const EVP_MD *md;
+
+        if (dane_mds[i].nid == NID_undef ||
+            (md = EVP_get_digestbynid(dane_mds[i].nid)) == NULL)
+            continue;
+        mdevp[dane_mds[i].mtype] = md;
+        mdord[dane_mds[i].mtype] = dane_mds[i].ord;
+    }
+
+    dctx->mdevp = mdevp;
+    dctx->mdord = mdord;
+    dctx->mdmax = mdmax;
+
+    return 1;
+}
+
+static void dane_ctx_final(struct dane_ctx_st *dctx)
+{
+    OPENSSL_free(dctx->mdevp);
+    dctx->mdevp = NULL;
+
+    OPENSSL_free(dctx->mdord);
+    dctx->mdord = NULL;
+    dctx->mdmax = 0;
+}
+
+static void tlsa_free(danetls_record *t)
+{
+    if (t == NULL)
+        return;
+    OPENSSL_free(t->data);
+    EVP_PKEY_free(t->spki);
+    OPENSSL_free(t);
+}
+
+static void dane_final(SSL_DANE *dane)
+{
+    sk_danetls_record_pop_free(dane->trecs, tlsa_free);
+    dane->trecs = NULL;
+
+    sk_X509_pop_free(dane->certs, X509_free);
+    dane->certs = NULL;
+
+    X509_free(dane->mcert);
+    dane->mcert = NULL;
+    dane->mtlsa = NULL;
+    dane->mdpth = -1;
+    dane->pdpth = -1;
+}
+
+/*
+ * dane_copy - Copy dane configuration, sans verification state.
+ */
+static int ssl_dane_dup(SSL *to, SSL *from)
+{
+    int num;
+    int i;
+
+    if (!DANETLS_ENABLED(&from->dane))
+        return 1;
+
+    num = sk_danetls_record_num(from->dane.trecs);
+    dane_final(&to->dane);
+    to->dane.flags = from->dane.flags;
+    to->dane.dctx = &to->ctx->dane;
+    to->dane.trecs = sk_danetls_record_new_reserve(NULL, num);
+
+    if (to->dane.trecs == NULL) {
+        SSLerr(SSL_F_SSL_DANE_DUP, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    for (i = 0; i < num; ++i) {
+        danetls_record *t = sk_danetls_record_value(from->dane.trecs, i);
+
+        if (SSL_dane_tlsa_add(to, t->usage, t->selector, t->mtype,
+                              t->data, t->dlen) <= 0)
+            return 0;
+    }
+    return 1;
+}
+
+static int dane_mtype_set(struct dane_ctx_st *dctx,
+                          const EVP_MD *md, uint8_t mtype, uint8_t ord)
+{
+    int i;
+
+    if (mtype == DANETLS_MATCHING_FULL && md != NULL) {
+        SSLerr(SSL_F_DANE_MTYPE_SET, SSL_R_DANE_CANNOT_OVERRIDE_MTYPE_FULL);
+        return 0;
+    }
+
+    if (mtype > dctx->mdmax) {
+        const EVP_MD **mdevp;
+        uint8_t *mdord;
+        int n = ((int)mtype) + 1;
+
+        mdevp = OPENSSL_realloc(dctx->mdevp, n * sizeof(*mdevp));
+        if (mdevp == NULL) {
+            SSLerr(SSL_F_DANE_MTYPE_SET, ERR_R_MALLOC_FAILURE);
+            return -1;
+        }
+        dctx->mdevp = mdevp;
+
+        mdord = OPENSSL_realloc(dctx->mdord, n * sizeof(*mdord));
+        if (mdord == NULL) {
+            SSLerr(SSL_F_DANE_MTYPE_SET, ERR_R_MALLOC_FAILURE);
+            return -1;
+        }
+        dctx->mdord = mdord;
+
+        /* Zero-fill any gaps */
+        for (i = dctx->mdmax + 1; i < mtype; ++i) {
+            mdevp[i] = NULL;
+            mdord[i] = 0;
+        }
+
+        dctx->mdmax = mtype;
+    }
+
+    dctx->mdevp[mtype] = md;
+    /* Coerce ordinal of disabled matching types to 0 */
+    dctx->mdord[mtype] = (md == NULL) ? 0 : ord;
+
+    return 1;
+}
+
+static const EVP_MD *tlsa_md_get(SSL_DANE *dane, uint8_t mtype)
+{
+    if (mtype > dane->dctx->mdmax)
+        return NULL;
+    return dane->dctx->mdevp[mtype];
+}
+
+static int dane_tlsa_add(SSL_DANE *dane,
+                         uint8_t usage,
+                         uint8_t selector,
+                         uint8_t mtype, unsigned const char *data, size_t dlen)
+{
+    danetls_record *t;
+    const EVP_MD *md = NULL;
+    int ilen = (int)dlen;
+    int i;
+    int num;
+
+    if (dane->trecs == NULL) {
+        SSLerr(SSL_F_DANE_TLSA_ADD, SSL_R_DANE_NOT_ENABLED);
+        return -1;
+    }
+
+    if (ilen < 0 || dlen != (size_t)ilen) {
+        SSLerr(SSL_F_DANE_TLSA_ADD, SSL_R_DANE_TLSA_BAD_DATA_LENGTH);
+        return 0;
+    }
+
+    if (usage > DANETLS_USAGE_LAST) {
+        SSLerr(SSL_F_DANE_TLSA_ADD, SSL_R_DANE_TLSA_BAD_CERTIFICATE_USAGE);
+        return 0;
+    }
+
+    if (selector > DANETLS_SELECTOR_LAST) {
+        SSLerr(SSL_F_DANE_TLSA_ADD, SSL_R_DANE_TLSA_BAD_SELECTOR);
+        return 0;
+    }
+
+    if (mtype != DANETLS_MATCHING_FULL) {
+        md = tlsa_md_get(dane, mtype);
+        if (md == NULL) {
+            SSLerr(SSL_F_DANE_TLSA_ADD, SSL_R_DANE_TLSA_BAD_MATCHING_TYPE);
+            return 0;
+        }
+    }
+
+    if (md != NULL && dlen != (size_t)EVP_MD_size(md)) {
+        SSLerr(SSL_F_DANE_TLSA_ADD, SSL_R_DANE_TLSA_BAD_DIGEST_LENGTH);
+        return 0;
+    }
+    if (!data) {
+        SSLerr(SSL_F_DANE_TLSA_ADD, SSL_R_DANE_TLSA_NULL_DATA);
+        return 0;
+    }
+
+    if ((t = OPENSSL_zalloc(sizeof(*t))) == NULL) {
+        SSLerr(SSL_F_DANE_TLSA_ADD, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+
+    t->usage = usage;
+    t->selector = selector;
+    t->mtype = mtype;
+    t->data = OPENSSL_malloc(dlen);
+    if (t->data == NULL) {
+        tlsa_free(t);
+        SSLerr(SSL_F_DANE_TLSA_ADD, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+    memcpy(t->data, data, dlen);
+    t->dlen = dlen;
+
+    /* Validate and cache full certificate or public key */
+    if (mtype == DANETLS_MATCHING_FULL) {
+        const unsigned char *p = data;
+        X509 *cert = NULL;
+        EVP_PKEY *pkey = NULL;
+
+        switch (selector) {
+        case DANETLS_SELECTOR_CERT:
+            if (!d2i_X509(&cert, &p, ilen) || p < data ||
+                dlen != (size_t)(p - data)) {
+                tlsa_free(t);
+                SSLerr(SSL_F_DANE_TLSA_ADD, SSL_R_DANE_TLSA_BAD_CERTIFICATE);
+                return 0;
+            }
+            if (X509_get0_pubkey(cert) == NULL) {
+                tlsa_free(t);
+                SSLerr(SSL_F_DANE_TLSA_ADD, SSL_R_DANE_TLSA_BAD_CERTIFICATE);
+                return 0;
+            }
+
+            if ((DANETLS_USAGE_BIT(usage) & DANETLS_TA_MASK) == 0) {
+                X509_free(cert);
+                break;
+            }
+
+            /*
+             * For usage DANE-TA(2), we support authentication via "2 0 0" TLSA
+             * records that contain full certificates of trust-anchors that are
+             * not present in the wire chain.  For usage PKIX-TA(0), we augment
+             * the chain with untrusted Full(0) certificates from DNS, in case
+             * they are missing from the chain.
+             */
+            if ((dane->certs == NULL &&
+                 (dane->certs = sk_X509_new_null()) == NULL) ||
+                !sk_X509_push(dane->certs, cert)) {
+                SSLerr(SSL_F_DANE_TLSA_ADD, ERR_R_MALLOC_FAILURE);
+                X509_free(cert);
+                tlsa_free(t);
+                return -1;
+            }
+            break;
+
+        case DANETLS_SELECTOR_SPKI:
+            if (!d2i_PUBKEY(&pkey, &p, ilen) || p < data ||
+                dlen != (size_t)(p - data)) {
+                tlsa_free(t);
+                SSLerr(SSL_F_DANE_TLSA_ADD, SSL_R_DANE_TLSA_BAD_PUBLIC_KEY);
+                return 0;
+            }
+
+            /*
+             * For usage DANE-TA(2), we support authentication via "2 1 0" TLSA
+             * records that contain full bare keys of trust-anchors that are
+             * not present in the wire chain.
+             */
+            if (usage == DANETLS_USAGE_DANE_TA)
+                t->spki = pkey;
+            else
+                EVP_PKEY_free(pkey);
+            break;
+        }
+    }
+
+    /*-
+     * Find the right insertion point for the new record.
+     *
+     * See crypto/x509/x509_vfy.c.  We sort DANE-EE(3) records first, so that
+     * they can be processed first, as they require no chain building, and no
+     * expiration or hostname checks.  Because DANE-EE(3) is numerically
+     * largest, this is accomplished via descending sort by "usage".
+     *
+     * We also sort in descending order by matching ordinal to simplify
+     * the implementation of digest agility in the verification code.
+     *
+     * The choice of order for the selector is not significant, so we
+     * use the same descending order for consistency.
+     */
+    num = sk_danetls_record_num(dane->trecs);
+    for (i = 0; i < num; ++i) {
+        danetls_record *rec = sk_danetls_record_value(dane->trecs, i);
+
+        if (rec->usage > usage)
+            continue;
+        if (rec->usage < usage)
+            break;
+        if (rec->selector > selector)
+            continue;
+        if (rec->selector < selector)
+            break;
+        if (dane->dctx->mdord[rec->mtype] > dane->dctx->mdord[mtype])
+            continue;
+        break;
+    }
+
+    if (!sk_danetls_record_insert(dane->trecs, t, i)) {
+        tlsa_free(t);
+        SSLerr(SSL_F_DANE_TLSA_ADD, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+    dane->umask |= DANETLS_USAGE_BIT(usage);
+
+    return 1;
+}
+
+/*
+ * Return 0 if there is only one version configured and it was disabled
+ * at configure time.  Return 1 otherwise.
+ */
+static int ssl_check_allowed_versions(int min_version, int max_version)
+{
+    int minisdtls = 0, maxisdtls = 0;
+
+    /* Figure out if we're doing DTLS versions or TLS versions */
+    if (min_version == DTLS1_BAD_VER
+        || min_version >> 8 == DTLS1_VERSION_MAJOR)
+        minisdtls = 1;
+    if (max_version == DTLS1_BAD_VER
+        || max_version >> 8 == DTLS1_VERSION_MAJOR)
+        maxisdtls = 1;
+    /* A wildcard version of 0 could be DTLS or TLS. */
+    if ((minisdtls && !maxisdtls && max_version != 0)
+        || (maxisdtls && !minisdtls && min_version != 0)) {
+        /* Mixing DTLS and TLS versions will lead to sadness; deny it. */
+        return 0;
+    }
+
+    if (minisdtls || maxisdtls) {
+        /* Do DTLS version checks. */
+        if (min_version == 0)
+            /* Ignore DTLS1_BAD_VER */
+            min_version = DTLS1_VERSION;
+        if (max_version == 0)
+            max_version = DTLS1_2_VERSION;
+#ifdef OPENSSL_NO_DTLS1_2
+        if (max_version == DTLS1_2_VERSION)
+            max_version = DTLS1_VERSION;
+#endif
+#ifdef OPENSSL_NO_DTLS1
+        if (min_version == DTLS1_VERSION)
+            min_version = DTLS1_2_VERSION;
+#endif
+        /* Done massaging versions; do the check. */
+        if (0
+#ifdef OPENSSL_NO_DTLS1
+            || (DTLS_VERSION_GE(min_version, DTLS1_VERSION)
+                && DTLS_VERSION_GE(DTLS1_VERSION, max_version))
+#endif
+#ifdef OPENSSL_NO_DTLS1_2
+            || (DTLS_VERSION_GE(min_version, DTLS1_2_VERSION)
+                && DTLS_VERSION_GE(DTLS1_2_VERSION, max_version))
+#endif
+            )
+            return 0;
+    } else {
+        /* Regular TLS version checks. */
+        if (min_version == 0)
+            min_version = SSL3_VERSION;
+        if (max_version == 0)
+            max_version = TLS1_3_VERSION;
+#ifdef OPENSSL_NO_TLS1_3
+        if (max_version == TLS1_3_VERSION)
+            max_version = TLS1_2_VERSION;
+#endif
+#ifdef OPENSSL_NO_TLS1_2
+        if (max_version == TLS1_2_VERSION)
+            max_version = TLS1_1_VERSION;
+#endif
+#ifdef OPENSSL_NO_TLS1_1
+        if (max_version == TLS1_1_VERSION)
+            max_version = TLS1_VERSION;
+#endif
+#ifdef OPENSSL_NO_TLS1
+        if (max_version == TLS1_VERSION)
+            max_version = SSL3_VERSION;
+#endif
+#ifdef OPENSSL_NO_SSL3
+        if (min_version == SSL3_VERSION)
+            min_version = TLS1_VERSION;
+#endif
+#ifdef OPENSSL_NO_TLS1
+        if (min_version == TLS1_VERSION)
+            min_version = TLS1_1_VERSION;
+#endif
+#ifdef OPENSSL_NO_TLS1_1
+        if (min_version == TLS1_1_VERSION)
+            min_version = TLS1_2_VERSION;
+#endif
+#ifdef OPENSSL_NO_TLS1_2
+        if (min_version == TLS1_2_VERSION)
+            min_version = TLS1_3_VERSION;
+#endif
+        /* Done massaging versions; do the check. */
+        if (0
+#ifdef OPENSSL_NO_SSL3
+            || (min_version <= SSL3_VERSION && SSL3_VERSION <= max_version)
+#endif
+#ifdef OPENSSL_NO_TLS1
+            || (min_version <= TLS1_VERSION && TLS1_VERSION <= max_version)
+#endif
+#ifdef OPENSSL_NO_TLS1_1
+            || (min_version <= TLS1_1_VERSION && TLS1_1_VERSION <= max_version)
+#endif
+#ifdef OPENSSL_NO_TLS1_2
+            || (min_version <= TLS1_2_VERSION && TLS1_2_VERSION <= max_version)
+#endif
+#ifdef OPENSSL_NO_TLS1_3
+            || (min_version <= TLS1_3_VERSION && TLS1_3_VERSION <= max_version)
+#endif
+            )
+            return 0;
+    }
+    return 1;
+}
+
+static void clear_ciphers(SSL *s)
+{
+    /* clear the current cipher */
+    ssl_clear_cipher_ctx(s);
+    ssl_clear_hash_ctx(&s->read_hash);
+    ssl_clear_hash_ctx(&s->write_hash);
+}
+
+int SSL_clear(SSL *s)
+{
+    if (s->method == NULL) {
+        SSLerr(SSL_F_SSL_CLEAR, SSL_R_NO_METHOD_SPECIFIED);
+        return 0;
+    }
+
+    if (ssl_clear_bad_session(s)) {
+        SSL_SESSION_free(s->session);
+        s->session = NULL;
+    }
+    SSL_SESSION_free(s->psksession);
+    s->psksession = NULL;
+    OPENSSL_free(s->psksession_id);
+    s->psksession_id = NULL;
+    s->psksession_id_len = 0;
+    s->hello_retry_request = 0;
+    s->sent_tickets = 0;
+
+    s->error = 0;
+    s->hit = 0;
+    s->shutdown = 0;
+
+    if (s->renegotiate) {
+        SSLerr(SSL_F_SSL_CLEAR, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    ossl_statem_clear(s);
+
+    s->version = s->method->version;
+    s->client_version = s->version;
+    s->rwstate = SSL_NOTHING;
+
+    BUF_MEM_free(s->init_buf);
+    s->init_buf = NULL;
+    clear_ciphers(s);
+    s->first_packet = 0;
+
+    s->key_update = SSL_KEY_UPDATE_NONE;
+
+    EVP_MD_CTX_free(s->pha_dgst);
+    s->pha_dgst = NULL;
+
+    /* Reset DANE verification result state */
+    s->dane.mdpth = -1;
+    s->dane.pdpth = -1;
+    X509_free(s->dane.mcert);
+    s->dane.mcert = NULL;
+    s->dane.mtlsa = NULL;
+
+    /* Clear the verification result peername */
+    X509_VERIFY_PARAM_move_peername(s->param, NULL);
+
+    /*
+     * Check to see if we were changed into a different method, if so, revert
+     * back.
+     */
+    if (s->method != s->ctx->method) {
+        s->method->ssl_free(s);
+        s->method = s->ctx->method;
+        if (!s->method->ssl_new(s))
+            return 0;
+    } else {
+        if (!s->method->ssl_clear(s))
+            return 0;
+    }
+
+    RECORD_LAYER_clear(&s->rlayer);
+
+    return 1;
+}
+
+/** Used to change an SSL_CTXs default SSL method type */
+int SSL_CTX_set_ssl_version(SSL_CTX *ctx, const SSL_METHOD *meth)
+{
+    STACK_OF(SSL_CIPHER) *sk;
+
+    ctx->method = meth;
+
+    if (!SSL_CTX_set_ciphersuites(ctx, TLS_DEFAULT_CIPHERSUITES)) {
+        SSLerr(SSL_F_SSL_CTX_SET_SSL_VERSION, SSL_R_SSL_LIBRARY_HAS_NO_CIPHERS);
+        return 0;
+    }
+    sk = ssl_create_cipher_list(ctx->method,
+                                ctx->tls13_ciphersuites,
+                                &(ctx->cipher_list),
+                                &(ctx->cipher_list_by_id),
+                                SSL_DEFAULT_CIPHER_LIST, ctx->cert);
+    if ((sk == NULL) || (sk_SSL_CIPHER_num(sk) <= 0)) {
+        SSLerr(SSL_F_SSL_CTX_SET_SSL_VERSION, SSL_R_SSL_LIBRARY_HAS_NO_CIPHERS);
+        return 0;
+    }
+    return 1;
+}
+
+SSL *SSL_new(SSL_CTX *ctx)
+{
+    SSL *s;
+
+    if (ctx == NULL) {
+        SSLerr(SSL_F_SSL_NEW, SSL_R_NULL_SSL_CTX);
+        return NULL;
+    }
+    if (ctx->method == NULL) {
+        SSLerr(SSL_F_SSL_NEW, SSL_R_SSL_CTX_HAS_NO_DEFAULT_SSL_VERSION);
+        return NULL;
+    }
+
+    s = OPENSSL_zalloc(sizeof(*s));
+    if (s == NULL)
+        goto err;
+
+    s->references = 1;
+    s->lock = CRYPTO_THREAD_lock_new();
+    if (s->lock == NULL) {
+        OPENSSL_free(s);
+        s = NULL;
+        goto err;
+    }
+
+    RECORD_LAYER_init(&s->rlayer, s);
+
+    s->options = ctx->options;
+    s->dane.flags = ctx->dane.flags;
+    s->min_proto_version = ctx->min_proto_version;
+    s->max_proto_version = ctx->max_proto_version;
+    s->mode = ctx->mode;
+    s->max_cert_list = ctx->max_cert_list;
+    s->max_early_data = ctx->max_early_data;
+    s->recv_max_early_data = ctx->recv_max_early_data;
+    s->num_tickets = ctx->num_tickets;
+    s->pha_enabled = ctx->pha_enabled;
+
+    /* Shallow copy of the ciphersuites stack */
+    s->tls13_ciphersuites = sk_SSL_CIPHER_dup(ctx->tls13_ciphersuites);
+    if (s->tls13_ciphersuites == NULL)
+        goto err;
+
+    /*
+     * Earlier library versions used to copy the pointer to the CERT, not
+     * its contents; only when setting new parameters for the per-SSL
+     * copy, ssl_cert_new would be called (and the direct reference to
+     * the per-SSL_CTX settings would be lost, but those still were
+     * indirectly accessed for various purposes, and for that reason they
+     * used to be known as s->ctx->default_cert). Now we don't look at the
+     * SSL_CTX's CERT after having duplicated it once.
+     */
+    s->cert = ssl_cert_dup(ctx->cert);
+    if (s->cert == NULL)
+        goto err;
+
+    RECORD_LAYER_set_read_ahead(&s->rlayer, ctx->read_ahead);
+    s->msg_callback = ctx->msg_callback;
+    s->msg_callback_arg = ctx->msg_callback_arg;
+    s->verify_mode = ctx->verify_mode;
+    s->not_resumable_session_cb = ctx->not_resumable_session_cb;
+    s->record_padding_cb = ctx->record_padding_cb;
+    s->record_padding_arg = ctx->record_padding_arg;
+    s->block_padding = ctx->block_padding;
+    s->sid_ctx_length = ctx->sid_ctx_length;
+    if (!ossl_assert(s->sid_ctx_length <= sizeof(s->sid_ctx)))
+        goto err;
+    memcpy(&s->sid_ctx, &ctx->sid_ctx, sizeof(s->sid_ctx));
+    s->verify_callback = ctx->default_verify_callback;
+    s->generate_session_id = ctx->generate_session_id;
+
+    s->param = X509_VERIFY_PARAM_new();
+    if (s->param == NULL)
+        goto err;
+    X509_VERIFY_PARAM_inherit(s->param, ctx->param);
+    s->quiet_shutdown = ctx->quiet_shutdown;
+
+    s->ext.max_fragment_len_mode = ctx->ext.max_fragment_len_mode;
+    s->max_send_fragment = ctx->max_send_fragment;
+    s->split_send_fragment = ctx->split_send_fragment;
+    s->max_pipelines = ctx->max_pipelines;
+    if (s->max_pipelines > 1)
+        RECORD_LAYER_set_read_ahead(&s->rlayer, 1);
+    if (ctx->default_read_buf_len > 0)
+        SSL_set_default_read_buffer_len(s, ctx->default_read_buf_len);
+
+    SSL_CTX_up_ref(ctx);
+    s->ctx = ctx;
+    s->ext.debug_cb = 0;
+    s->ext.debug_arg = NULL;
+    s->ext.ticket_expected = 0;
+    s->ext.status_type = ctx->ext.status_type;
+    s->ext.status_expected = 0;
+    s->ext.ocsp.ids = NULL;
+    s->ext.ocsp.exts = NULL;
+    s->ext.ocsp.resp = NULL;
+    s->ext.ocsp.resp_len = 0;
+    SSL_CTX_up_ref(ctx);
+    s->session_ctx = ctx;
+#ifndef OPENSSL_NO_EC
+    if (ctx->ext.ecpointformats) {
+        s->ext.ecpointformats =
+            OPENSSL_memdup(ctx->ext.ecpointformats,
+                           ctx->ext.ecpointformats_len);
+        if (!s->ext.ecpointformats)
+            goto err;
+        s->ext.ecpointformats_len =
+            ctx->ext.ecpointformats_len;
+    }
+    if (ctx->ext.supportedgroups) {
+        s->ext.supportedgroups =
+            OPENSSL_memdup(ctx->ext.supportedgroups,
+                           ctx->ext.supportedgroups_len
+                                * sizeof(*ctx->ext.supportedgroups));
+        if (!s->ext.supportedgroups)
+            goto err;
+        s->ext.supportedgroups_len = ctx->ext.supportedgroups_len;
+    }
+#endif
+#ifndef OPENSSL_NO_NEXTPROTONEG
+    s->ext.npn = NULL;
+#endif
+
+    if (s->ctx->ext.alpn) {
+        s->ext.alpn = OPENSSL_malloc(s->ctx->ext.alpn_len);
+        if (s->ext.alpn == NULL)
+            goto err;
+        memcpy(s->ext.alpn, s->ctx->ext.alpn, s->ctx->ext.alpn_len);
+        s->ext.alpn_len = s->ctx->ext.alpn_len;
+    }
+
+    s->verified_chain = NULL;
+    s->verify_result = X509_V_OK;
+
+    s->default_passwd_callback = ctx->default_passwd_callback;
+    s->default_passwd_callback_userdata = ctx->default_passwd_callback_userdata;
+
+    s->method = ctx->method;
+
+    s->key_update = SSL_KEY_UPDATE_NONE;
+
+    s->allow_early_data_cb = ctx->allow_early_data_cb;
+    s->allow_early_data_cb_data = ctx->allow_early_data_cb_data;
+
+    if (!s->method->ssl_new(s))
+        goto err;
+
+    s->server = (ctx->method->ssl_accept == ssl_undefined_function) ? 0 : 1;
+
+    if (!SSL_clear(s))
+        goto err;
+
+    if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_SSL, s, &s->ex_data))
+        goto err;
+
+#ifndef OPENSSL_NO_PSK
+    s->psk_client_callback = ctx->psk_client_callback;
+    s->psk_server_callback = ctx->psk_server_callback;
+#endif
+    s->psk_find_session_cb = ctx->psk_find_session_cb;
+    s->psk_use_session_cb = ctx->psk_use_session_cb;
+
+    s->job = NULL;
+
+#ifndef OPENSSL_NO_CT
+    if (!SSL_set_ct_validation_callback(s, ctx->ct_validation_callback,
+                                        ctx->ct_validation_callback_arg))
+        goto err;
+#endif
+
+    return s;
+ err:
+    SSL_free(s);
+    SSLerr(SSL_F_SSL_NEW, ERR_R_MALLOC_FAILURE);
+    return NULL;
+}
+
+int SSL_is_dtls(const SSL *s)
+{
+    return SSL_IS_DTLS(s) ? 1 : 0;
+}
+
+int SSL_up_ref(SSL *s)
+{
+    int i;
+
+    if (CRYPTO_UP_REF(&s->references, &i, s->lock) <= 0)
+        return 0;
+
+    REF_PRINT_COUNT("SSL", s);
+    REF_ASSERT_ISNT(i < 2);
+    return ((i > 1) ? 1 : 0);
+}
+
+int SSL_CTX_set_session_id_context(SSL_CTX *ctx, const unsigned char *sid_ctx,
+                                   unsigned int sid_ctx_len)
+{
+    if (sid_ctx_len > sizeof(ctx->sid_ctx)) {
+        SSLerr(SSL_F_SSL_CTX_SET_SESSION_ID_CONTEXT,
+               SSL_R_SSL_SESSION_ID_CONTEXT_TOO_LONG);
+        return 0;
+    }
+    ctx->sid_ctx_length = sid_ctx_len;
+    memcpy(ctx->sid_ctx, sid_ctx, sid_ctx_len);
+
+    return 1;
+}
+
+int SSL_set_session_id_context(SSL *ssl, const unsigned char *sid_ctx,
+                               unsigned int sid_ctx_len)
+{
+    if (sid_ctx_len > SSL_MAX_SID_CTX_LENGTH) {
+        SSLerr(SSL_F_SSL_SET_SESSION_ID_CONTEXT,
+               SSL_R_SSL_SESSION_ID_CONTEXT_TOO_LONG);
+        return 0;
+    }
+    ssl->sid_ctx_length = sid_ctx_len;
+    memcpy(ssl->sid_ctx, sid_ctx, sid_ctx_len);
+
+    return 1;
+}
+
+int SSL_CTX_set_generate_session_id(SSL_CTX *ctx, GEN_SESSION_CB cb)
+{
+    CRYPTO_THREAD_write_lock(ctx->lock);
+    ctx->generate_session_id = cb;
+    CRYPTO_THREAD_unlock(ctx->lock);
+    return 1;
+}
+
+int SSL_set_generate_session_id(SSL *ssl, GEN_SESSION_CB cb)
+{
+    CRYPTO_THREAD_write_lock(ssl->lock);
+    ssl->generate_session_id = cb;
+    CRYPTO_THREAD_unlock(ssl->lock);
+    return 1;
+}
+
+int SSL_has_matching_session_id(const SSL *ssl, const unsigned char *id,
+                                unsigned int id_len)
+{
+    /*
+     * A quick examination of SSL_SESSION_hash and SSL_SESSION_cmp shows how
+     * we can "construct" a session to give us the desired check - i.e. to
+     * find if there's a session in the hash table that would conflict with
+     * any new session built out of this id/id_len and the ssl_version in use
+     * by this SSL.
+     */
+    SSL_SESSION r, *p;
+
+    if (id_len > sizeof(r.session_id))
+        return 0;
+
+    r.ssl_version = ssl->version;
+    r.session_id_length = id_len;
+    memcpy(r.session_id, id, id_len);
+
+    CRYPTO_THREAD_read_lock(ssl->session_ctx->lock);
+    p = lh_SSL_SESSION_retrieve(ssl->session_ctx->sessions, &r);
+    CRYPTO_THREAD_unlock(ssl->session_ctx->lock);
+    return (p != NULL);
+}
+
+int SSL_CTX_set_purpose(SSL_CTX *s, int purpose)
+{
+    return X509_VERIFY_PARAM_set_purpose(s->param, purpose);
+}
+
+int SSL_set_purpose(SSL *s, int purpose)
+{
+    return X509_VERIFY_PARAM_set_purpose(s->param, purpose);
+}
+
+int SSL_CTX_set_trust(SSL_CTX *s, int trust)
+{
+    return X509_VERIFY_PARAM_set_trust(s->param, trust);
+}
+
+int SSL_set_trust(SSL *s, int trust)
+{
+    return X509_VERIFY_PARAM_set_trust(s->param, trust);
+}
+
+int SSL_set1_host(SSL *s, const char *hostname)
+{
+    return X509_VERIFY_PARAM_set1_host(s->param, hostname, 0);
+}
+
+int SSL_add1_host(SSL *s, const char *hostname)
+{
+    return X509_VERIFY_PARAM_add1_host(s->param, hostname, 0);
+}
+
+void SSL_set_hostflags(SSL *s, unsigned int flags)
+{
+    X509_VERIFY_PARAM_set_hostflags(s->param, flags);
+}
+
+const char *SSL_get0_peername(SSL *s)
+{
+    return X509_VERIFY_PARAM_get0_peername(s->param);
+}
+
+int SSL_CTX_dane_enable(SSL_CTX *ctx)
+{
+    return dane_ctx_enable(&ctx->dane);
+}
+
+unsigned long SSL_CTX_dane_set_flags(SSL_CTX *ctx, unsigned long flags)
+{
+    unsigned long orig = ctx->dane.flags;
+
+    ctx->dane.flags |= flags;
+    return orig;
+}
+
+unsigned long SSL_CTX_dane_clear_flags(SSL_CTX *ctx, unsigned long flags)
+{
+    unsigned long orig = ctx->dane.flags;
+
+    ctx->dane.flags &= ~flags;
+    return orig;
+}
+
+int SSL_dane_enable(SSL *s, const char *basedomain)
+{
+    SSL_DANE *dane = &s->dane;
+
+    if (s->ctx->dane.mdmax == 0) {
+        SSLerr(SSL_F_SSL_DANE_ENABLE, SSL_R_CONTEXT_NOT_DANE_ENABLED);
+        return 0;
+    }
+    if (dane->trecs != NULL) {
+        SSLerr(SSL_F_SSL_DANE_ENABLE, SSL_R_DANE_ALREADY_ENABLED);
+        return 0;
+    }
+
+    /*
+     * Default SNI name.  This rejects empty names, while set1_host below
+     * accepts them and disables host name checks.  To avoid side-effects with
+     * invalid input, set the SNI name first.
+     */
+    if (s->ext.hostname == NULL) {
+        if (!SSL_set_tlsext_host_name(s, basedomain)) {
+            SSLerr(SSL_F_SSL_DANE_ENABLE, SSL_R_ERROR_SETTING_TLSA_BASE_DOMAIN);
+            return -1;
+        }
+    }
+
+    /* Primary RFC6125 reference identifier */
+    if (!X509_VERIFY_PARAM_set1_host(s->param, basedomain, 0)) {
+        SSLerr(SSL_F_SSL_DANE_ENABLE, SSL_R_ERROR_SETTING_TLSA_BASE_DOMAIN);
+        return -1;
+    }
+
+    dane->mdpth = -1;
+    dane->pdpth = -1;
+    dane->dctx = &s->ctx->dane;
+    dane->trecs = sk_danetls_record_new_null();
+
+    if (dane->trecs == NULL) {
+        SSLerr(SSL_F_SSL_DANE_ENABLE, ERR_R_MALLOC_FAILURE);
+        return -1;
+    }
+    return 1;
+}
+
+unsigned long SSL_dane_set_flags(SSL *ssl, unsigned long flags)
+{
+    unsigned long orig = ssl->dane.flags;
+
+    ssl->dane.flags |= flags;
+    return orig;
+}
+
+unsigned long SSL_dane_clear_flags(SSL *ssl, unsigned long flags)
+{
+    unsigned long orig = ssl->dane.flags;
+
+    ssl->dane.flags &= ~flags;
+    return orig;
+}
+
+int SSL_get0_dane_authority(SSL *s, X509 **mcert, EVP_PKEY **mspki)
+{
+    SSL_DANE *dane = &s->dane;
+
+    if (!DANETLS_ENABLED(dane) || s->verify_result != X509_V_OK)
+        return -1;
+    if (dane->mtlsa) {
+        if (mcert)
+            *mcert = dane->mcert;
+        if (mspki)
+            *mspki = (dane->mcert == NULL) ? dane->mtlsa->spki : NULL;
+    }
+    return dane->mdpth;
+}
+
+int SSL_get0_dane_tlsa(SSL *s, uint8_t *usage, uint8_t *selector,
+                       uint8_t *mtype, unsigned const char **data, size_t *dlen)
+{
+    SSL_DANE *dane = &s->dane;
+
+    if (!DANETLS_ENABLED(dane) || s->verify_result != X509_V_OK)
+        return -1;
+    if (dane->mtlsa) {
+        if (usage)
+            *usage = dane->mtlsa->usage;
+        if (selector)
+            *selector = dane->mtlsa->selector;
+        if (mtype)
+            *mtype = dane->mtlsa->mtype;
+        if (data)
+            *data = dane->mtlsa->data;
+        if (dlen)
+            *dlen = dane->mtlsa->dlen;
+    }
+    return dane->mdpth;
+}
+
+SSL_DANE *SSL_get0_dane(SSL *s)
+{
+    return &s->dane;
+}
+
+int SSL_dane_tlsa_add(SSL *s, uint8_t usage, uint8_t selector,
+                      uint8_t mtype, unsigned const char *data, size_t dlen)
+{
+    return dane_tlsa_add(&s->dane, usage, selector, mtype, data, dlen);
+}
+
+int SSL_CTX_dane_mtype_set(SSL_CTX *ctx, const EVP_MD *md, uint8_t mtype,
+                           uint8_t ord)
+{
+    return dane_mtype_set(&ctx->dane, md, mtype, ord);
+}
+
+int SSL_CTX_set1_param(SSL_CTX *ctx, X509_VERIFY_PARAM *vpm)
+{
+    return X509_VERIFY_PARAM_set1(ctx->param, vpm);
+}
+
+int SSL_set1_param(SSL *ssl, X509_VERIFY_PARAM *vpm)
+{
+    return X509_VERIFY_PARAM_set1(ssl->param, vpm);
+}
+
+X509_VERIFY_PARAM *SSL_CTX_get0_param(SSL_CTX *ctx)
+{
+    return ctx->param;
+}
+
+X509_VERIFY_PARAM *SSL_get0_param(SSL *ssl)
+{
+    return ssl->param;
+}
+
+void SSL_certs_clear(SSL *s)
+{
+    ssl_cert_clear_certs(s->cert);
+}
+
+void SSL_free(SSL *s)
+{
+    int i;
+
+    if (s == NULL)
+        return;
+    CRYPTO_DOWN_REF(&s->references, &i, s->lock);
+    REF_PRINT_COUNT("SSL", s);
+    if (i > 0)
+        return;
+    REF_ASSERT_ISNT(i < 0);
+
+    X509_VERIFY_PARAM_free(s->param);
+    dane_final(&s->dane);
+    CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL, s, &s->ex_data);
+
+    /* Ignore return value */
+    ssl_free_wbio_buffer(s);
+
+    BIO_free_all(s->wbio);
+    BIO_free_all(s->rbio);
+
+    BUF_MEM_free(s->init_buf);
+
+    /* add extra stuff */
+    sk_SSL_CIPHER_free(s->cipher_list);
+    sk_SSL_CIPHER_free(s->cipher_list_by_id);
+    sk_SSL_CIPHER_free(s->tls13_ciphersuites);
+
+    /* Make the next call work :-) */
+    if (s->session != NULL) {
+        ssl_clear_bad_session(s);
+        SSL_SESSION_free(s->session);
+    }
+    SSL_SESSION_free(s->psksession);
+    OPENSSL_free(s->psksession_id);
+
+    clear_ciphers(s);
+
+    ssl_cert_free(s->cert);
+    /* Free up if allocated */
+
+    OPENSSL_free(s->ext.hostname);
+    SSL_CTX_free(s->session_ctx);
+#ifndef OPENSSL_NO_EC
+    OPENSSL_free(s->ext.ecpointformats);
+    OPENSSL_free(s->ext.supportedgroups);
+#endif                          /* OPENSSL_NO_EC */
+    sk_X509_EXTENSION_pop_free(s->ext.ocsp.exts, X509_EXTENSION_free);
+#ifndef OPENSSL_NO_OCSP
+    sk_OCSP_RESPID_pop_free(s->ext.ocsp.ids, OCSP_RESPID_free);
+#endif
+#ifndef OPENSSL_NO_CT
+    SCT_LIST_free(s->scts);
+    OPENSSL_free(s->ext.scts);
+#endif
+    OPENSSL_free(s->ext.ocsp.resp);
+    OPENSSL_free(s->ext.alpn);
+    OPENSSL_free(s->ext.tls13_cookie);
+    OPENSSL_free(s->clienthello);
+    OPENSSL_free(s->pha_context);
+    EVP_MD_CTX_free(s->pha_dgst);
+
+    sk_X509_NAME_pop_free(s->ca_names, X509_NAME_free);
+    sk_X509_NAME_pop_free(s->client_ca_names, X509_NAME_free);
+
+    sk_X509_pop_free(s->verified_chain, X509_free);
+
+    if (s->method != NULL)
+        s->method->ssl_free(s);
+
+    RECORD_LAYER_release(&s->rlayer);
+
+    SSL_CTX_free(s->ctx);
+
+    ASYNC_WAIT_CTX_free(s->waitctx);
+
+#if !defined(OPENSSL_NO_NEXTPROTONEG)
+    OPENSSL_free(s->ext.npn);
+#endif
+
+#ifndef OPENSSL_NO_SRTP
+    sk_SRTP_PROTECTION_PROFILE_free(s->srtp_profiles);
+#endif
+
+    CRYPTO_THREAD_lock_free(s->lock);
+
+    OPENSSL_free(s);
+}
+
+void SSL_set0_rbio(SSL *s, BIO *rbio)
+{
+    BIO_free_all(s->rbio);
+    s->rbio = rbio;
+}
+
+void SSL_set0_wbio(SSL *s, BIO *wbio)
+{
+    /*
+     * If the output buffering BIO is still in place, remove it
+     */
+    if (s->bbio != NULL)
+        s->wbio = BIO_pop(s->wbio);
+
+    BIO_free_all(s->wbio);
+    s->wbio = wbio;
+
+    /* Re-attach |bbio| to the new |wbio|. */
+    if (s->bbio != NULL)
+        s->wbio = BIO_push(s->bbio, s->wbio);
+}
+
+void SSL_set_bio(SSL *s, BIO *rbio, BIO *wbio)
+{
+    /*
+     * For historical reasons, this function has many different cases in
+     * ownership handling.
+     */
+
+    /* If nothing has changed, do nothing */
+    if (rbio == SSL_get_rbio(s) && wbio == SSL_get_wbio(s))
+        return;
+
+    /*
+     * If the two arguments are equal then one fewer reference is granted by the
+     * caller than we want to take
+     */
+    if (rbio != NULL && rbio == wbio)
+        BIO_up_ref(rbio);
+
+    /*
+     * If only the wbio is changed only adopt one reference.
+     */
+    if (rbio == SSL_get_rbio(s)) {
+        SSL_set0_wbio(s, wbio);
+        return;
+    }
+    /*
+     * There is an asymmetry here for historical reasons. If only the rbio is
+     * changed AND the rbio and wbio were originally different, then we only
+     * adopt one reference.
+     */
+    if (wbio == SSL_get_wbio(s) && SSL_get_rbio(s) != SSL_get_wbio(s)) {
+        SSL_set0_rbio(s, rbio);
+        return;
+    }
+
+    /* Otherwise, adopt both references. */
+    SSL_set0_rbio(s, rbio);
+    SSL_set0_wbio(s, wbio);
+}
+
+BIO *SSL_get_rbio(const SSL *s)
+{
+    return s->rbio;
+}
+
+BIO *SSL_get_wbio(const SSL *s)
+{
+    if (s->bbio != NULL) {
+        /*
+         * If |bbio| is active, the true caller-configured BIO is its
+         * |next_bio|.
+         */
+        return BIO_next(s->bbio);
+    }
+    return s->wbio;
+}
+
+int SSL_get_fd(const SSL *s)
+{
+    return SSL_get_rfd(s);
+}
+
+int SSL_get_rfd(const SSL *s)
+{
+    int ret = -1;
+    BIO *b, *r;
+
+    b = SSL_get_rbio(s);
+    r = BIO_find_type(b, BIO_TYPE_DESCRIPTOR);
+    if (r != NULL)
+        BIO_get_fd(r, &ret);
+    return ret;
+}
+
+int SSL_get_wfd(const SSL *s)
+{
+    int ret = -1;
+    BIO *b, *r;
+
+    b = SSL_get_wbio(s);
+    r = BIO_find_type(b, BIO_TYPE_DESCRIPTOR);
+    if (r != NULL)
+        BIO_get_fd(r, &ret);
+    return ret;
+}
+
+#ifndef OPENSSL_NO_SOCK
+int SSL_set_fd(SSL *s, int fd)
+{
+    int ret = 0;
+    BIO *bio = NULL;
+
+    bio = BIO_new(BIO_s_socket());
+
+    if (bio == NULL) {
+        SSLerr(SSL_F_SSL_SET_FD, ERR_R_BUF_LIB);
+        goto err;
+    }
+    BIO_set_fd(bio, fd, BIO_NOCLOSE);
+    SSL_set_bio(s, bio, bio);
+    ret = 1;
+ err:
+    return ret;
+}
+
+int SSL_set_wfd(SSL *s, int fd)
+{
+    BIO *rbio = SSL_get_rbio(s);
+
+    if (rbio == NULL || BIO_method_type(rbio) != BIO_TYPE_SOCKET
+        || (int)BIO_get_fd(rbio, NULL) != fd) {
+        BIO *bio = BIO_new(BIO_s_socket());
+
+        if (bio == NULL) {
+            SSLerr(SSL_F_SSL_SET_WFD, ERR_R_BUF_LIB);
+            return 0;
+        }
+        BIO_set_fd(bio, fd, BIO_NOCLOSE);
+        SSL_set0_wbio(s, bio);
+    } else {
+        BIO_up_ref(rbio);
+        SSL_set0_wbio(s, rbio);
+    }
+    return 1;
+}
+
+int SSL_set_rfd(SSL *s, int fd)
+{
+    BIO *wbio = SSL_get_wbio(s);
+
+    if (wbio == NULL || BIO_method_type(wbio) != BIO_TYPE_SOCKET
+        || ((int)BIO_get_fd(wbio, NULL) != fd)) {
+        BIO *bio = BIO_new(BIO_s_socket());
+
+        if (bio == NULL) {
+            SSLerr(SSL_F_SSL_SET_RFD, ERR_R_BUF_LIB);
+            return 0;
+        }
+        BIO_set_fd(bio, fd, BIO_NOCLOSE);
+        SSL_set0_rbio(s, bio);
+    } else {
+        BIO_up_ref(wbio);
+        SSL_set0_rbio(s, wbio);
+    }
+
+    return 1;
+}
+#endif
+
+/* return length of latest Finished message we sent, copy to 'buf' */
+size_t SSL_get_finished(const SSL *s, void *buf, size_t count)
+{
+    size_t ret = 0;
+
+    if (s->s3 != NULL) {
+        ret = s->s3->tmp.finish_md_len;
+        if (count > ret)
+            count = ret;
+        memcpy(buf, s->s3->tmp.finish_md, count);
+    }
+    return ret;
+}
+
+/* return length of latest Finished message we expected, copy to 'buf' */
+size_t SSL_get_peer_finished(const SSL *s, void *buf, size_t count)
+{
+    size_t ret = 0;
+
+    if (s->s3 != NULL) {
+        ret = s->s3->tmp.peer_finish_md_len;
+        if (count > ret)
+            count = ret;
+        memcpy(buf, s->s3->tmp.peer_finish_md, count);
+    }
+    return ret;
+}
+
+int SSL_get_verify_mode(const SSL *s)
+{
+    return s->verify_mode;
+}
+
+int SSL_get_verify_depth(const SSL *s)
+{
+    return X509_VERIFY_PARAM_get_depth(s->param);
+}
+
+int (*SSL_get_verify_callback(const SSL *s)) (int, X509_STORE_CTX *) {
+    return s->verify_callback;
+}
+
+int SSL_CTX_get_verify_mode(const SSL_CTX *ctx)
+{
+    return ctx->verify_mode;
+}
+
+int SSL_CTX_get_verify_depth(const SSL_CTX *ctx)
+{
+    return X509_VERIFY_PARAM_get_depth(ctx->param);
+}
+
+int (*SSL_CTX_get_verify_callback(const SSL_CTX *ctx)) (int, X509_STORE_CTX *) {
+    return ctx->default_verify_callback;
+}
+
+void SSL_set_verify(SSL *s, int mode,
+                    int (*callback) (int ok, X509_STORE_CTX *ctx))
+{
+    s->verify_mode = mode;
+    if (callback != NULL)
+        s->verify_callback = callback;
+}
+
+void SSL_set_verify_depth(SSL *s, int depth)
+{
+    X509_VERIFY_PARAM_set_depth(s->param, depth);
+}
+
+void SSL_set_read_ahead(SSL *s, int yes)
+{
+    RECORD_LAYER_set_read_ahead(&s->rlayer, yes);
+}
+
+int SSL_get_read_ahead(const SSL *s)
+{
+    return RECORD_LAYER_get_read_ahead(&s->rlayer);
+}
+
+int SSL_pending(const SSL *s)
+{
+    size_t pending = s->method->ssl_pending(s);
+
+    /*
+     * SSL_pending cannot work properly if read-ahead is enabled
+     * (SSL_[CTX_]ctrl(..., SSL_CTRL_SET_READ_AHEAD, 1, NULL)), and it is
+     * impossible to fix since SSL_pending cannot report errors that may be
+     * observed while scanning the new data. (Note that SSL_pending() is
+     * often used as a boolean value, so we'd better not return -1.)
+     *
+     * SSL_pending also cannot work properly if the value >INT_MAX. In that case
+     * we just return INT_MAX.
+     */
+    return pending < INT_MAX ? (int)pending : INT_MAX;
+}
+
+int SSL_has_pending(const SSL *s)
+{
+    /*
+     * Similar to SSL_pending() but returns a 1 to indicate that we have
+     * unprocessed data available or 0 otherwise (as opposed to the number of
+     * bytes available). Unlike SSL_pending() this will take into account
+     * read_ahead data. A 1 return simply indicates that we have unprocessed
+     * data. That data may not result in any application data, or we may fail
+     * to parse the records for some reason.
+     */
+    if (RECORD_LAYER_processed_read_pending(&s->rlayer))
+        return 1;
+
+    return RECORD_LAYER_read_pending(&s->rlayer);
+}
+
+X509 *SSL_get_peer_certificate(const SSL *s)
+{
+    X509 *r;
+
+    if ((s == NULL) || (s->session == NULL))
+        r = NULL;
+    else
+        r = s->session->peer;
+
+    if (r == NULL)
+        return r;
+
+    X509_up_ref(r);
+
+    return r;
+}
+
+STACK_OF(X509) *SSL_get_peer_cert_chain(const SSL *s)
+{
+    STACK_OF(X509) *r;
+
+    if ((s == NULL) || (s->session == NULL))
+        r = NULL;
+    else
+        r = s->session->peer_chain;
+
+    /*
+     * If we are a client, cert_chain includes the peer's own certificate; if
+     * we are a server, it does not.
+     */
+
+    return r;
+}
+
+/*
+ * Now in theory, since the calling process own 't' it should be safe to
+ * modify.  We need to be able to read f without being hassled
+ */
+int SSL_copy_session_id(SSL *t, const SSL *f)
+{
+    int i;
+    /* Do we need to to SSL locking? */
+    if (!SSL_set_session(t, SSL_get_session(f))) {
+        return 0;
+    }
+
+    /*
+     * what if we are setup for one protocol version but want to talk another
+     */
+    if (t->method != f->method) {
+        t->method->ssl_free(t);
+        t->method = f->method;
+        if (t->method->ssl_new(t) == 0)
+            return 0;
+    }
+
+    CRYPTO_UP_REF(&f->cert->references, &i, f->cert->lock);
+    ssl_cert_free(t->cert);
+    t->cert = f->cert;
+    if (!SSL_set_session_id_context(t, f->sid_ctx, (int)f->sid_ctx_length)) {
+        return 0;
+    }
+
+    return 1;
+}
+
+/* Fix this so it checks all the valid key/cert options */
+int SSL_CTX_check_private_key(const SSL_CTX *ctx)
+{
+    if ((ctx == NULL) || (ctx->cert->key->x509 == NULL)) {
+        SSLerr(SSL_F_SSL_CTX_CHECK_PRIVATE_KEY, SSL_R_NO_CERTIFICATE_ASSIGNED);
+        return 0;
+    }
+    if (ctx->cert->key->privatekey == NULL) {
+        SSLerr(SSL_F_SSL_CTX_CHECK_PRIVATE_KEY, SSL_R_NO_PRIVATE_KEY_ASSIGNED);
+        return 0;
+    }
+    return X509_check_private_key
+            (ctx->cert->key->x509, ctx->cert->key->privatekey);
+}
+
+/* Fix this function so that it takes an optional type parameter */
+int SSL_check_private_key(const SSL *ssl)
+{
+    if (ssl == NULL) {
+        SSLerr(SSL_F_SSL_CHECK_PRIVATE_KEY, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    if (ssl->cert->key->x509 == NULL) {
+        SSLerr(SSL_F_SSL_CHECK_PRIVATE_KEY, SSL_R_NO_CERTIFICATE_ASSIGNED);
+        return 0;
+    }
+    if (ssl->cert->key->privatekey == NULL) {
+        SSLerr(SSL_F_SSL_CHECK_PRIVATE_KEY, SSL_R_NO_PRIVATE_KEY_ASSIGNED);
+        return 0;
+    }
+    return X509_check_private_key(ssl->cert->key->x509,
+                                   ssl->cert->key->privatekey);
+}
+
+int SSL_waiting_for_async(SSL *s)
+{
+    if (s->job)
+        return 1;
+
+    return 0;
+}
+
+int SSL_get_all_async_fds(SSL *s, OSSL_ASYNC_FD *fds, size_t *numfds)
+{
+    ASYNC_WAIT_CTX *ctx = s->waitctx;
+
+    if (ctx == NULL)
+        return 0;
+    return ASYNC_WAIT_CTX_get_all_fds(ctx, fds, numfds);
+}
+
+int SSL_get_changed_async_fds(SSL *s, OSSL_ASYNC_FD *addfd, size_t *numaddfds,
+                              OSSL_ASYNC_FD *delfd, size_t *numdelfds)
+{
+    ASYNC_WAIT_CTX *ctx = s->waitctx;
+
+    if (ctx == NULL)
+        return 0;
+    return ASYNC_WAIT_CTX_get_changed_fds(ctx, addfd, numaddfds, delfd,
+                                          numdelfds);
+}
+
+int SSL_accept(SSL *s)
+{
+    if (s->handshake_func == NULL) {
+        /* Not properly initialized yet */
+        SSL_set_accept_state(s);
+    }
+
+    return SSL_do_handshake(s);
+}
+
+int SSL_connect(SSL *s)
+{
+    if (s->handshake_func == NULL) {
+        /* Not properly initialized yet */
+        SSL_set_connect_state(s);
+    }
+
+    return SSL_do_handshake(s);
+}
+
+long SSL_get_default_timeout(const SSL *s)
+{
+    return s->method->get_timeout();
+}
+
+static int ssl_start_async_job(SSL *s, struct ssl_async_args *args,
+                               int (*func) (void *))
+{
+    int ret;
+    if (s->waitctx == NULL) {
+        s->waitctx = ASYNC_WAIT_CTX_new();
+        if (s->waitctx == NULL)
+            return -1;
+    }
+    switch (ASYNC_start_job(&s->job, s->waitctx, &ret, func, args,
+                            sizeof(struct ssl_async_args))) {
+    case ASYNC_ERR:
+        s->rwstate = SSL_NOTHING;
+        SSLerr(SSL_F_SSL_START_ASYNC_JOB, SSL_R_FAILED_TO_INIT_ASYNC);
+        return -1;
+    case ASYNC_PAUSE:
+        s->rwstate = SSL_ASYNC_PAUSED;
+        return -1;
+    case ASYNC_NO_JOBS:
+        s->rwstate = SSL_ASYNC_NO_JOBS;
+        return -1;
+    case ASYNC_FINISH:
+        s->job = NULL;
+        return ret;
+    default:
+        s->rwstate = SSL_NOTHING;
+        SSLerr(SSL_F_SSL_START_ASYNC_JOB, ERR_R_INTERNAL_ERROR);
+        /* Shouldn't happen */
+        return -1;
+    }
+}
+
+static int ssl_io_intern(void *vargs)
+{
+    struct ssl_async_args *args;
+    SSL *s;
+    void *buf;
+    size_t num;
+
+    args = (struct ssl_async_args *)vargs;
+    s = args->s;
+    buf = args->buf;
+    num = args->num;
+    switch (args->type) {
+    case READFUNC:
+        return args->f.func_read(s, buf, num, &s->asyncrw);
+    case WRITEFUNC:
+        return args->f.func_write(s, buf, num, &s->asyncrw);
+    case OTHERFUNC:
+        return args->f.func_other(s);
+    }
+    return -1;
+}
+
+int ssl_read_internal(SSL *s, void *buf, size_t num, size_t *readbytes)
+{
+    if (s->handshake_func == NULL) {
+        SSLerr(SSL_F_SSL_READ_INTERNAL, SSL_R_UNINITIALIZED);
+        return -1;
+    }
+
+    if (s->shutdown & SSL_RECEIVED_SHUTDOWN) {
+        s->rwstate = SSL_NOTHING;
+        return 0;
+    }
+
+    if (s->early_data_state == SSL_EARLY_DATA_CONNECT_RETRY
+                || s->early_data_state == SSL_EARLY_DATA_ACCEPT_RETRY) {
+        SSLerr(SSL_F_SSL_READ_INTERNAL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    /*
+     * If we are a client and haven't received the ServerHello etc then we
+     * better do that
+     */
+    ossl_statem_check_finish_init(s, 0);
+
+    if ((s->mode & SSL_MODE_ASYNC) && ASYNC_get_current_job() == NULL) {
+        struct ssl_async_args args;
+        int ret;
+
+        args.s = s;
+        args.buf = buf;
+        args.num = num;
+        args.type = READFUNC;
+        args.f.func_read = s->method->ssl_read;
+
+        ret = ssl_start_async_job(s, &args, ssl_io_intern);
+        *readbytes = s->asyncrw;
+        return ret;
+    } else {
+        return s->method->ssl_read(s, buf, num, readbytes);
+    }
+}
+
+int SSL_read(SSL *s, void *buf, int num)
+{
+    int ret;
+    size_t readbytes;
+
+    if (num < 0) {
+        SSLerr(SSL_F_SSL_READ, SSL_R_BAD_LENGTH);
+        return -1;
+    }
+
+    ret = ssl_read_internal(s, buf, (size_t)num, &readbytes);
+
+    /*
+     * The cast is safe here because ret should be <= INT_MAX because num is
+     * <= INT_MAX
+     */
+    if (ret > 0)
+        ret = (int)readbytes;
+
+    return ret;
+}
+
+int SSL_read_ex(SSL *s, void *buf, size_t num, size_t *readbytes)
+{
+    int ret = ssl_read_internal(s, buf, num, readbytes);
+
+    if (ret < 0)
+        ret = 0;
+    return ret;
+}
+
+int SSL_read_early_data(SSL *s, void *buf, size_t num, size_t *readbytes)
+{
+    int ret;
+
+    if (!s->server) {
+        SSLerr(SSL_F_SSL_READ_EARLY_DATA, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return SSL_READ_EARLY_DATA_ERROR;
+    }
+
+    switch (s->early_data_state) {
+    case SSL_EARLY_DATA_NONE:
+        if (!SSL_in_before(s)) {
+            SSLerr(SSL_F_SSL_READ_EARLY_DATA,
+                   ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+            return SSL_READ_EARLY_DATA_ERROR;
+        }
+        /* fall through */
+
+    case SSL_EARLY_DATA_ACCEPT_RETRY:
+        s->early_data_state = SSL_EARLY_DATA_ACCEPTING;
+        ret = SSL_accept(s);
+        if (ret <= 0) {
+            /* NBIO or error */
+            s->early_data_state = SSL_EARLY_DATA_ACCEPT_RETRY;
+            return SSL_READ_EARLY_DATA_ERROR;
+        }
+        /* fall through */
+
+    case SSL_EARLY_DATA_READ_RETRY:
+        if (s->ext.early_data == SSL_EARLY_DATA_ACCEPTED) {
+            s->early_data_state = SSL_EARLY_DATA_READING;
+            ret = SSL_read_ex(s, buf, num, readbytes);
+            /*
+             * State machine will update early_data_state to
+             * SSL_EARLY_DATA_FINISHED_READING if we get an EndOfEarlyData
+             * message
+             */
+            if (ret > 0 || (ret <= 0 && s->early_data_state
+                                        != SSL_EARLY_DATA_FINISHED_READING)) {
+                s->early_data_state = SSL_EARLY_DATA_READ_RETRY;
+                return ret > 0 ? SSL_READ_EARLY_DATA_SUCCESS
+                               : SSL_READ_EARLY_DATA_ERROR;
+            }
+        } else {
+            s->early_data_state = SSL_EARLY_DATA_FINISHED_READING;
+        }
+        *readbytes = 0;
+        return SSL_READ_EARLY_DATA_FINISH;
+
+    default:
+        SSLerr(SSL_F_SSL_READ_EARLY_DATA, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return SSL_READ_EARLY_DATA_ERROR;
+    }
+}
+
+int SSL_get_early_data_status(const SSL *s)
+{
+    return s->ext.early_data;
+}
+
+static int ssl_peek_internal(SSL *s, void *buf, size_t num, size_t *readbytes)
+{
+    if (s->handshake_func == NULL) {
+        SSLerr(SSL_F_SSL_PEEK_INTERNAL, SSL_R_UNINITIALIZED);
+        return -1;
+    }
+
+    if (s->shutdown & SSL_RECEIVED_SHUTDOWN) {
+        return 0;
+    }
+    if ((s->mode & SSL_MODE_ASYNC) && ASYNC_get_current_job() == NULL) {
+        struct ssl_async_args args;
+        int ret;
+
+        args.s = s;
+        args.buf = buf;
+        args.num = num;
+        args.type = READFUNC;
+        args.f.func_read = s->method->ssl_peek;
+
+        ret = ssl_start_async_job(s, &args, ssl_io_intern);
+        *readbytes = s->asyncrw;
+        return ret;
+    } else {
+        return s->method->ssl_peek(s, buf, num, readbytes);
+    }
+}
+
+int SSL_peek(SSL *s, void *buf, int num)
+{
+    int ret;
+    size_t readbytes;
+
+    if (num < 0) {
+        SSLerr(SSL_F_SSL_PEEK, SSL_R_BAD_LENGTH);
+        return -1;
+    }
+
+    ret = ssl_peek_internal(s, buf, (size_t)num, &readbytes);
+
+    /*
+     * The cast is safe here because ret should be <= INT_MAX because num is
+     * <= INT_MAX
+     */
+    if (ret > 0)
+        ret = (int)readbytes;
+
+    return ret;
+}
+
+
+int SSL_peek_ex(SSL *s, void *buf, size_t num, size_t *readbytes)
+{
+    int ret = ssl_peek_internal(s, buf, num, readbytes);
+
+    if (ret < 0)
+        ret = 0;
+    return ret;
+}
+
+int ssl_write_internal(SSL *s, const void *buf, size_t num, size_t *written)
+{
+    if (s->handshake_func == NULL) {
+        SSLerr(SSL_F_SSL_WRITE_INTERNAL, SSL_R_UNINITIALIZED);
+        return -1;
+    }
+
+    if (s->shutdown & SSL_SENT_SHUTDOWN) {
+        s->rwstate = SSL_NOTHING;
+        SSLerr(SSL_F_SSL_WRITE_INTERNAL, SSL_R_PROTOCOL_IS_SHUTDOWN);
+        return -1;
+    }
+
+    if (s->early_data_state == SSL_EARLY_DATA_CONNECT_RETRY
+                || s->early_data_state == SSL_EARLY_DATA_ACCEPT_RETRY
+                || s->early_data_state == SSL_EARLY_DATA_READ_RETRY) {
+        SSLerr(SSL_F_SSL_WRITE_INTERNAL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+    /* If we are a client and haven't sent the Finished we better do that */
+    ossl_statem_check_finish_init(s, 1);
+
+    if ((s->mode & SSL_MODE_ASYNC) && ASYNC_get_current_job() == NULL) {
+        int ret;
+        struct ssl_async_args args;
+
+        args.s = s;
+        args.buf = (void *)buf;
+        args.num = num;
+        args.type = WRITEFUNC;
+        args.f.func_write = s->method->ssl_write;
+
+        ret = ssl_start_async_job(s, &args, ssl_io_intern);
+        *written = s->asyncrw;
+        return ret;
+    } else {
+        return s->method->ssl_write(s, buf, num, written);
+    }
+}
+
+int SSL_write(SSL *s, const void *buf, int num)
+{
+    int ret;
+    size_t written;
+
+    if (num < 0) {
+        SSLerr(SSL_F_SSL_WRITE, SSL_R_BAD_LENGTH);
+        return -1;
+    }
+
+    ret = ssl_write_internal(s, buf, (size_t)num, &written);
+
+    /*
+     * The cast is safe here because ret should be <= INT_MAX because num is
+     * <= INT_MAX
+     */
+    if (ret > 0)
+        ret = (int)written;
+
+    return ret;
+}
+
+int SSL_write_ex(SSL *s, const void *buf, size_t num, size_t *written)
+{
+    int ret = ssl_write_internal(s, buf, num, written);
+
+    if (ret < 0)
+        ret = 0;
+    return ret;
+}
+
+int SSL_write_early_data(SSL *s, const void *buf, size_t num, size_t *written)
+{
+    int ret, early_data_state;
+    size_t writtmp;
+    uint32_t partialwrite;
+
+    switch (s->early_data_state) {
+    case SSL_EARLY_DATA_NONE:
+        if (s->server
+                || !SSL_in_before(s)
+                || ((s->session == NULL || s->session->ext.max_early_data == 0)
+                     && (s->psk_use_session_cb == NULL))) {
+            SSLerr(SSL_F_SSL_WRITE_EARLY_DATA,
+                   ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+            return 0;
+        }
+        /* fall through */
+
+    case SSL_EARLY_DATA_CONNECT_RETRY:
+        s->early_data_state = SSL_EARLY_DATA_CONNECTING;
+        ret = SSL_connect(s);
+        if (ret <= 0) {
+            /* NBIO or error */
+            s->early_data_state = SSL_EARLY_DATA_CONNECT_RETRY;
+            return 0;
+        }
+        /* fall through */
+
+    case SSL_EARLY_DATA_WRITE_RETRY:
+        s->early_data_state = SSL_EARLY_DATA_WRITING;
+        /*
+         * We disable partial write for early data because we don't keep track
+         * of how many bytes we've written between the SSL_write_ex() call and
+         * the flush if the flush needs to be retried)
+         */
+        partialwrite = s->mode & SSL_MODE_ENABLE_PARTIAL_WRITE;
+        s->mode &= ~SSL_MODE_ENABLE_PARTIAL_WRITE;
+        ret = SSL_write_ex(s, buf, num, &writtmp);
+        s->mode |= partialwrite;
+        if (!ret) {
+            s->early_data_state = SSL_EARLY_DATA_WRITE_RETRY;
+            return ret;
+        }
+        s->early_data_state = SSL_EARLY_DATA_WRITE_FLUSH;
+        /* fall through */
+
+    case SSL_EARLY_DATA_WRITE_FLUSH:
+        /* The buffering BIO is still in place so we need to flush it */
+        if (statem_flush(s) != 1)
+            return 0;
+        *written = num;
+        s->early_data_state = SSL_EARLY_DATA_WRITE_RETRY;
+        return 1;
+
+    case SSL_EARLY_DATA_FINISHED_READING:
+    case SSL_EARLY_DATA_READ_RETRY:
+        early_data_state = s->early_data_state;
+        /* We are a server writing to an unauthenticated client */
+        s->early_data_state = SSL_EARLY_DATA_UNAUTH_WRITING;
+        ret = SSL_write_ex(s, buf, num, written);
+        /* The buffering BIO is still in place */
+        if (ret)
+            (void)BIO_flush(s->wbio);
+        s->early_data_state = early_data_state;
+        return ret;
+
+    default:
+        SSLerr(SSL_F_SSL_WRITE_EARLY_DATA, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+}
+
+int SSL_shutdown(SSL *s)
+{
+    /*
+     * Note that this function behaves differently from what one might
+     * expect.  Return values are 0 for no success (yet), 1 for success; but
+     * calling it once is usually not enough, even if blocking I/O is used
+     * (see ssl3_shutdown).
+     */
+
+    if (s->handshake_func == NULL) {
+        SSLerr(SSL_F_SSL_SHUTDOWN, SSL_R_UNINITIALIZED);
+        return -1;
+    }
+
+    if (!SSL_in_init(s)) {
+        if ((s->mode & SSL_MODE_ASYNC) && ASYNC_get_current_job() == NULL) {
+            struct ssl_async_args args;
+
+            args.s = s;
+            args.type = OTHERFUNC;
+            args.f.func_other = s->method->ssl_shutdown;
+
+            return ssl_start_async_job(s, &args, ssl_io_intern);
+        } else {
+            return s->method->ssl_shutdown(s);
+        }
+    } else {
+        SSLerr(SSL_F_SSL_SHUTDOWN, SSL_R_SHUTDOWN_WHILE_IN_INIT);
+        return -1;
+    }
+}
+
+int SSL_key_update(SSL *s, int updatetype)
+{
+    /*
+     * TODO(TLS1.3): How will applications know whether TLSv1.3 has been
+     * negotiated, and that it is appropriate to call SSL_key_update() instead
+     * of SSL_renegotiate().
+     */
+    if (!SSL_IS_TLS13(s)) {
+        SSLerr(SSL_F_SSL_KEY_UPDATE, SSL_R_WRONG_SSL_VERSION);
+        return 0;
+    }
+
+    if (updatetype != SSL_KEY_UPDATE_NOT_REQUESTED
+            && updatetype != SSL_KEY_UPDATE_REQUESTED) {
+        SSLerr(SSL_F_SSL_KEY_UPDATE, SSL_R_INVALID_KEY_UPDATE_TYPE);
+        return 0;
+    }
+
+    if (!SSL_is_init_finished(s)) {
+        SSLerr(SSL_F_SSL_KEY_UPDATE, SSL_R_STILL_IN_INIT);
+        return 0;
+    }
+
+    ossl_statem_set_in_init(s, 1);
+    s->key_update = updatetype;
+    return 1;
+}
+
+int SSL_get_key_update_type(const SSL *s)
+{
+    return s->key_update;
+}
+
+int SSL_renegotiate(SSL *s)
+{
+    if (SSL_IS_TLS13(s)) {
+        SSLerr(SSL_F_SSL_RENEGOTIATE, SSL_R_WRONG_SSL_VERSION);
+        return 0;
+    }
+
+    if ((s->options & SSL_OP_NO_RENEGOTIATION)) {
+        SSLerr(SSL_F_SSL_RENEGOTIATE, SSL_R_NO_RENEGOTIATION);
+        return 0;
+    }
+
+    s->renegotiate = 1;
+    s->new_session = 1;
+
+    return s->method->ssl_renegotiate(s);
+}
+
+int SSL_renegotiate_abbreviated(SSL *s)
+{
+    if (SSL_IS_TLS13(s)) {
+        SSLerr(SSL_F_SSL_RENEGOTIATE_ABBREVIATED, SSL_R_WRONG_SSL_VERSION);
+        return 0;
+    }
+
+    if ((s->options & SSL_OP_NO_RENEGOTIATION)) {
+        SSLerr(SSL_F_SSL_RENEGOTIATE_ABBREVIATED, SSL_R_NO_RENEGOTIATION);
+        return 0;
+    }
+
+    s->renegotiate = 1;
+    s->new_session = 0;
+
+    return s->method->ssl_renegotiate(s);
+}
+
+int SSL_renegotiate_pending(const SSL *s)
+{
+    /*
+     * becomes true when negotiation is requested; false again once a
+     * handshake has finished
+     */
+    return (s->renegotiate != 0);
+}
+
+long SSL_ctrl(SSL *s, int cmd, long larg, void *parg)
+{
+    long l;
+
+    switch (cmd) {
+    case SSL_CTRL_GET_READ_AHEAD:
+        return RECORD_LAYER_get_read_ahead(&s->rlayer);
+    case SSL_CTRL_SET_READ_AHEAD:
+        l = RECORD_LAYER_get_read_ahead(&s->rlayer);
+        RECORD_LAYER_set_read_ahead(&s->rlayer, larg);
+        return l;
+
+    case SSL_CTRL_SET_MSG_CALLBACK_ARG:
+        s->msg_callback_arg = parg;
+        return 1;
+
+    case SSL_CTRL_MODE:
+        return (s->mode |= larg);
+    case SSL_CTRL_CLEAR_MODE:
+        return (s->mode &= ~larg);
+    case SSL_CTRL_GET_MAX_CERT_LIST:
+        return (long)s->max_cert_list;
+    case SSL_CTRL_SET_MAX_CERT_LIST:
+        if (larg < 0)
+            return 0;
+        l = (long)s->max_cert_list;
+        s->max_cert_list = (size_t)larg;
+        return l;
+    case SSL_CTRL_SET_MAX_SEND_FRAGMENT:
+        if (larg < 512 || larg > SSL3_RT_MAX_PLAIN_LENGTH)
+            return 0;
+        s->max_send_fragment = larg;
+        if (s->max_send_fragment < s->split_send_fragment)
+            s->split_send_fragment = s->max_send_fragment;
+        return 1;
+    case SSL_CTRL_SET_SPLIT_SEND_FRAGMENT:
+        if ((size_t)larg > s->max_send_fragment || larg == 0)
+            return 0;
+        s->split_send_fragment = larg;
+        return 1;
+    case SSL_CTRL_SET_MAX_PIPELINES:
+        if (larg < 1 || larg > SSL_MAX_PIPELINES)
+            return 0;
+        s->max_pipelines = larg;
+        if (larg > 1)
+            RECORD_LAYER_set_read_ahead(&s->rlayer, 1);
+        return 1;
+    case SSL_CTRL_GET_RI_SUPPORT:
+        if (s->s3)
+            return s->s3->send_connection_binding;
+        else
+            return 0;
+    case SSL_CTRL_CERT_FLAGS:
+        return (s->cert->cert_flags |= larg);
+    case SSL_CTRL_CLEAR_CERT_FLAGS:
+        return (s->cert->cert_flags &= ~larg);
+
+    case SSL_CTRL_GET_RAW_CIPHERLIST:
+        if (parg) {
+            if (s->s3->tmp.ciphers_raw == NULL)
+                return 0;
+            *(unsigned char **)parg = s->s3->tmp.ciphers_raw;
+            return (int)s->s3->tmp.ciphers_rawlen;
+        } else {
+            return TLS_CIPHER_LEN;
+        }
+    case SSL_CTRL_GET_EXTMS_SUPPORT:
+        if (!s->session || SSL_in_init(s) || ossl_statem_get_in_handshake(s))
+            return -1;
+        if (s->session->flags & SSL_SESS_FLAG_EXTMS)
+            return 1;
+        else
+            return 0;
+    case SSL_CTRL_SET_MIN_PROTO_VERSION:
+        return ssl_check_allowed_versions(larg, s->max_proto_version)
+               && ssl_set_version_bound(s->ctx->method->version, (int)larg,
+                                        &s->min_proto_version);
+    case SSL_CTRL_GET_MIN_PROTO_VERSION:
+        return s->min_proto_version;
+    case SSL_CTRL_SET_MAX_PROTO_VERSION:
+        return ssl_check_allowed_versions(s->min_proto_version, larg)
+               && ssl_set_version_bound(s->ctx->method->version, (int)larg,
+                                        &s->max_proto_version);
+    case SSL_CTRL_GET_MAX_PROTO_VERSION:
+        return s->max_proto_version;
+    default:
+        return s->method->ssl_ctrl(s, cmd, larg, parg);
+    }
+}
+
+long SSL_callback_ctrl(SSL *s, int cmd, void (*fp) (void))
+{
+    switch (cmd) {
+    case SSL_CTRL_SET_MSG_CALLBACK:
+        s->msg_callback = (void (*)
+                           (int write_p, int version, int content_type,
+                            const void *buf, size_t len, SSL *ssl,
+                            void *arg))(fp);
+        return 1;
+
+    default:
+        return s->method->ssl_callback_ctrl(s, cmd, fp);
+    }
+}
+
+LHASH_OF(SSL_SESSION) *SSL_CTX_sessions(SSL_CTX *ctx)
+{
+    return ctx->sessions;
+}
+
+long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg)
+{
+    long l;
+    /* For some cases with ctx == NULL perform syntax checks */
+    if (ctx == NULL) {
+        switch (cmd) {
+#ifndef OPENSSL_NO_EC
+        case SSL_CTRL_SET_GROUPS_LIST:
+            return tls1_set_groups_list(NULL, NULL, parg);
+#endif
+        case SSL_CTRL_SET_SIGALGS_LIST:
+        case SSL_CTRL_SET_CLIENT_SIGALGS_LIST:
+            return tls1_set_sigalgs_list(NULL, parg, 0);
+        default:
+            return 0;
+        }
+    }
+
+    switch (cmd) {
+    case SSL_CTRL_GET_READ_AHEAD:
+        return ctx->read_ahead;
+    case SSL_CTRL_SET_READ_AHEAD:
+        l = ctx->read_ahead;
+        ctx->read_ahead = larg;
+        return l;
+
+    case SSL_CTRL_SET_MSG_CALLBACK_ARG:
+        ctx->msg_callback_arg = parg;
+        return 1;
+
+    case SSL_CTRL_GET_MAX_CERT_LIST:
+        return (long)ctx->max_cert_list;
+    case SSL_CTRL_SET_MAX_CERT_LIST:
+        if (larg < 0)
+            return 0;
+        l = (long)ctx->max_cert_list;
+        ctx->max_cert_list = (size_t)larg;
+        return l;
+
+    case SSL_CTRL_SET_SESS_CACHE_SIZE:
+        if (larg < 0)
+            return 0;
+        l = (long)ctx->session_cache_size;
+        ctx->session_cache_size = (size_t)larg;
+        return l;
+    case SSL_CTRL_GET_SESS_CACHE_SIZE:
+        return (long)ctx->session_cache_size;
+    case SSL_CTRL_SET_SESS_CACHE_MODE:
+        l = ctx->session_cache_mode;
+        ctx->session_cache_mode = larg;
+        return l;
+    case SSL_CTRL_GET_SESS_CACHE_MODE:
+        return ctx->session_cache_mode;
+
+    case SSL_CTRL_SESS_NUMBER:
+        return lh_SSL_SESSION_num_items(ctx->sessions);
+    case SSL_CTRL_SESS_CONNECT:
+        return tsan_load(&ctx->stats.sess_connect);
+    case SSL_CTRL_SESS_CONNECT_GOOD:
+        return tsan_load(&ctx->stats.sess_connect_good);
+    case SSL_CTRL_SESS_CONNECT_RENEGOTIATE:
+        return tsan_load(&ctx->stats.sess_connect_renegotiate);
+    case SSL_CTRL_SESS_ACCEPT:
+        return tsan_load(&ctx->stats.sess_accept);
+    case SSL_CTRL_SESS_ACCEPT_GOOD:
+        return tsan_load(&ctx->stats.sess_accept_good);
+    case SSL_CTRL_SESS_ACCEPT_RENEGOTIATE:
+        return tsan_load(&ctx->stats.sess_accept_renegotiate);
+    case SSL_CTRL_SESS_HIT:
+        return tsan_load(&ctx->stats.sess_hit);
+    case SSL_CTRL_SESS_CB_HIT:
+        return tsan_load(&ctx->stats.sess_cb_hit);
+    case SSL_CTRL_SESS_MISSES:
+        return tsan_load(&ctx->stats.sess_miss);
+    case SSL_CTRL_SESS_TIMEOUTS:
+        return tsan_load(&ctx->stats.sess_timeout);
+    case SSL_CTRL_SESS_CACHE_FULL:
+        return tsan_load(&ctx->stats.sess_cache_full);
+    case SSL_CTRL_MODE:
+        return (ctx->mode |= larg);
+    case SSL_CTRL_CLEAR_MODE:
+        return (ctx->mode &= ~larg);
+    case SSL_CTRL_SET_MAX_SEND_FRAGMENT:
+        if (larg < 512 || larg > SSL3_RT_MAX_PLAIN_LENGTH)
+            return 0;
+        ctx->max_send_fragment = larg;
+        if (ctx->max_send_fragment < ctx->split_send_fragment)
+            ctx->split_send_fragment = ctx->max_send_fragment;
+        return 1;
+    case SSL_CTRL_SET_SPLIT_SEND_FRAGMENT:
+        if ((size_t)larg > ctx->max_send_fragment || larg == 0)
+            return 0;
+        ctx->split_send_fragment = larg;
+        return 1;
+    case SSL_CTRL_SET_MAX_PIPELINES:
+        if (larg < 1 || larg > SSL_MAX_PIPELINES)
+            return 0;
+        ctx->max_pipelines = larg;
+        return 1;
+    case SSL_CTRL_CERT_FLAGS:
+        return (ctx->cert->cert_flags |= larg);
+    case SSL_CTRL_CLEAR_CERT_FLAGS:
+        return (ctx->cert->cert_flags &= ~larg);
+    case SSL_CTRL_SET_MIN_PROTO_VERSION:
+        return ssl_check_allowed_versions(larg, ctx->max_proto_version)
+               && ssl_set_version_bound(ctx->method->version, (int)larg,
+                                        &ctx->min_proto_version);
+    case SSL_CTRL_GET_MIN_PROTO_VERSION:
+        return ctx->min_proto_version;
+    case SSL_CTRL_SET_MAX_PROTO_VERSION:
+        return ssl_check_allowed_versions(ctx->min_proto_version, larg)
+               && ssl_set_version_bound(ctx->method->version, (int)larg,
+                                        &ctx->max_proto_version);
+    case SSL_CTRL_GET_MAX_PROTO_VERSION:
+        return ctx->max_proto_version;
+    default:
+        return ctx->method->ssl_ctx_ctrl(ctx, cmd, larg, parg);
+    }
+}
+
+long SSL_CTX_callback_ctrl(SSL_CTX *ctx, int cmd, void (*fp) (void))
+{
+    switch (cmd) {
+    case SSL_CTRL_SET_MSG_CALLBACK:
+        ctx->msg_callback = (void (*)
+                             (int write_p, int version, int content_type,
+                              const void *buf, size_t len, SSL *ssl,
+                              void *arg))(fp);
+        return 1;
+
+    default:
+        return ctx->method->ssl_ctx_callback_ctrl(ctx, cmd, fp);
+    }
+}
+
+int ssl_cipher_id_cmp(const SSL_CIPHER *a, const SSL_CIPHER *b)
+{
+    if (a->id > b->id)
+        return 1;
+    if (a->id < b->id)
+        return -1;
+    return 0;
+}
+
+int ssl_cipher_ptr_id_cmp(const SSL_CIPHER *const *ap,
+                          const SSL_CIPHER *const *bp)
+{
+    if ((*ap)->id > (*bp)->id)
+        return 1;
+    if ((*ap)->id < (*bp)->id)
+        return -1;
+    return 0;
+}
+
+/** return a STACK of the ciphers available for the SSL and in order of
+ * preference */
+STACK_OF(SSL_CIPHER) *SSL_get_ciphers(const SSL *s)
+{
+    if (s != NULL) {
+        if (s->cipher_list != NULL) {
+            return s->cipher_list;
+        } else if ((s->ctx != NULL) && (s->ctx->cipher_list != NULL)) {
+            return s->ctx->cipher_list;
+        }
+    }
+    return NULL;
+}
+
+STACK_OF(SSL_CIPHER) *SSL_get_client_ciphers(const SSL *s)
+{
+    if ((s == NULL) || (s->session == NULL) || !s->server)
+        return NULL;
+    return s->session->ciphers;
+}
+
+STACK_OF(SSL_CIPHER) *SSL_get1_supported_ciphers(SSL *s)
+{
+    STACK_OF(SSL_CIPHER) *sk = NULL, *ciphers;
+    int i;
+
+    ciphers = SSL_get_ciphers(s);
+    if (!ciphers)
+        return NULL;
+    if (!ssl_set_client_disabled(s))
+        return NULL;
+    for (i = 0; i < sk_SSL_CIPHER_num(ciphers); i++) {
+        const SSL_CIPHER *c = sk_SSL_CIPHER_value(ciphers, i);
+        if (!ssl_cipher_disabled(s, c, SSL_SECOP_CIPHER_SUPPORTED, 0)) {
+            if (!sk)
+                sk = sk_SSL_CIPHER_new_null();
+            if (!sk)
+                return NULL;
+            if (!sk_SSL_CIPHER_push(sk, c)) {
+                sk_SSL_CIPHER_free(sk);
+                return NULL;
+            }
+        }
+    }
+    return sk;
+}
+
+/** return a STACK of the ciphers available for the SSL and in order of
+ * algorithm id */
+STACK_OF(SSL_CIPHER) *ssl_get_ciphers_by_id(SSL *s)
+{
+    if (s != NULL) {
+        if (s->cipher_list_by_id != NULL) {
+            return s->cipher_list_by_id;
+        } else if ((s->ctx != NULL) && (s->ctx->cipher_list_by_id != NULL)) {
+            return s->ctx->cipher_list_by_id;
+        }
+    }
+    return NULL;
+}
+
+/** The old interface to get the same thing as SSL_get_ciphers() */
+const char *SSL_get_cipher_list(const SSL *s, int n)
+{
+    const SSL_CIPHER *c;
+    STACK_OF(SSL_CIPHER) *sk;
+
+    if (s == NULL)
+        return NULL;
+    sk = SSL_get_ciphers(s);
+    if ((sk == NULL) || (sk_SSL_CIPHER_num(sk) <= n))
+        return NULL;
+    c = sk_SSL_CIPHER_value(sk, n);
+    if (c == NULL)
+        return NULL;
+    return c->name;
+}
+
+/** return a STACK of the ciphers available for the SSL_CTX and in order of
+ * preference */
+STACK_OF(SSL_CIPHER) *SSL_CTX_get_ciphers(const SSL_CTX *ctx)
+{
+    if (ctx != NULL)
+        return ctx->cipher_list;
+    return NULL;
+}
+
+/*
+ * Distinguish between ciphers controlled by set_ciphersuite() and
+ * set_cipher_list() when counting.
+ */
+static int cipher_list_tls12_num(STACK_OF(SSL_CIPHER) *sk)
+{
+    int i, num = 0;
+    const SSL_CIPHER *c;
+
+    if (sk == NULL)
+        return 0;
+    for (i = 0; i < sk_SSL_CIPHER_num(sk); ++i) {
+        c = sk_SSL_CIPHER_value(sk, i);
+        if (c->min_tls >= TLS1_3_VERSION)
+            continue;
+        num++;
+    }
+    return num;
+}
+
+/** specify the ciphers to be used by default by the SSL_CTX */
+int SSL_CTX_set_cipher_list(SSL_CTX *ctx, const char *str)
+{
+    STACK_OF(SSL_CIPHER) *sk;
+
+    sk = ssl_create_cipher_list(ctx->method, ctx->tls13_ciphersuites,
+                                &ctx->cipher_list, &ctx->cipher_list_by_id, str,
+                                ctx->cert);
+    /*
+     * ssl_create_cipher_list may return an empty stack if it was unable to
+     * find a cipher matching the given rule string (for example if the rule
+     * string specifies a cipher which has been disabled). This is not an
+     * error as far as ssl_create_cipher_list is concerned, and hence
+     * ctx->cipher_list and ctx->cipher_list_by_id has been updated.
+     */
+    if (sk == NULL)
+        return 0;
+    else if (cipher_list_tls12_num(sk) == 0) {
+        SSLerr(SSL_F_SSL_CTX_SET_CIPHER_LIST, SSL_R_NO_CIPHER_MATCH);
+        return 0;
+    }
+    return 1;
+}
+
+/** specify the ciphers to be used by the SSL */
+int SSL_set_cipher_list(SSL *s, const char *str)
+{
+    STACK_OF(SSL_CIPHER) *sk;
+
+    sk = ssl_create_cipher_list(s->ctx->method, s->tls13_ciphersuites,
+                                &s->cipher_list, &s->cipher_list_by_id, str,
+                                s->cert);
+    /* see comment in SSL_CTX_set_cipher_list */
+    if (sk == NULL)
+        return 0;
+    else if (cipher_list_tls12_num(sk) == 0) {
+        SSLerr(SSL_F_SSL_SET_CIPHER_LIST, SSL_R_NO_CIPHER_MATCH);
+        return 0;
+    }
+    return 1;
+}
+
+char *SSL_get_shared_ciphers(const SSL *s, char *buf, int size)
+{
+    char *p;
+    STACK_OF(SSL_CIPHER) *clntsk, *srvrsk;
+    const SSL_CIPHER *c;
+    int i;
+
+    if (!s->server
+            || s->session == NULL
+            || s->session->ciphers == NULL
+            || size < 2)
+        return NULL;
+
+    p = buf;
+    clntsk = s->session->ciphers;
+    srvrsk = SSL_get_ciphers(s);
+    if (clntsk == NULL || srvrsk == NULL)
+        return NULL;
+
+    if (sk_SSL_CIPHER_num(clntsk) == 0 || sk_SSL_CIPHER_num(srvrsk) == 0)
+        return NULL;
+
+    for (i = 0; i < sk_SSL_CIPHER_num(clntsk); i++) {
+        int n;
+
+        c = sk_SSL_CIPHER_value(clntsk, i);
+        if (sk_SSL_CIPHER_find(srvrsk, c) < 0)
+            continue;
+
+        n = strlen(c->name);
+        if (n + 1 > size) {
+            if (p != buf)
+                --p;
+            *p = '\0';
+            return buf;
+        }
+        strcpy(p, c->name);
+        p += n;
+        *(p++) = ':';
+        size -= n + 1;
+    }
+    p[-1] = '\0';
+    return buf;
+}
+
+/** return a servername extension value if provided in Client Hello, or NULL.
+ * So far, only host_name types are defined (RFC 3546).
+ */
+
+const char *SSL_get_servername(const SSL *s, const int type)
+{
+    if (type != TLSEXT_NAMETYPE_host_name)
+        return NULL;
+
+    /*
+     * SNI is not negotiated in pre-TLS-1.3 resumption flows, so fake up an
+     * SNI value to return if we are resuming/resumed.  N.B. that we still
+     * call the relevant callbacks for such resumption flows, and callbacks
+     * might error out if there is not a SNI value available.
+     */
+    if (s->hit)
+        return s->session->ext.hostname;
+    return s->ext.hostname;
+}
+
+int SSL_get_servername_type(const SSL *s)
+{
+    if (s->session
+        && (!s->ext.hostname ? s->session->
+            ext.hostname : s->ext.hostname))
+        return TLSEXT_NAMETYPE_host_name;
+    return -1;
+}
+
+/*
+ * SSL_select_next_proto implements the standard protocol selection. It is
+ * expected that this function is called from the callback set by
+ * SSL_CTX_set_next_proto_select_cb. The protocol data is assumed to be a
+ * vector of 8-bit, length prefixed byte strings. The length byte itself is
+ * not included in the length. A byte string of length 0 is invalid. No byte
+ * string may be truncated. The current, but experimental algorithm for
+ * selecting the protocol is: 1) If the server doesn't support NPN then this
+ * is indicated to the callback. In this case, the client application has to
+ * abort the connection or have a default application level protocol. 2) If
+ * the server supports NPN, but advertises an empty list then the client
+ * selects the first protocol in its list, but indicates via the API that this
+ * fallback case was enacted. 3) Otherwise, the client finds the first
+ * protocol in the server's list that it supports and selects this protocol.
+ * This is because it's assumed that the server has better information about
+ * which protocol a client should use. 4) If the client doesn't support any
+ * of the server's advertised protocols, then this is treated the same as
+ * case 2. It returns either OPENSSL_NPN_NEGOTIATED if a common protocol was
+ * found, or OPENSSL_NPN_NO_OVERLAP if the fallback case was reached.
+ */
+int SSL_select_next_proto(unsigned char **out, unsigned char *outlen,
+                          const unsigned char *server,
+                          unsigned int server_len,
+                          const unsigned char *client, unsigned int client_len)
+{
+    unsigned int i, j;
+    const unsigned char *result;
+    int status = OPENSSL_NPN_UNSUPPORTED;
+
+    /*
+     * For each protocol in server preference order, see if we support it.
+     */
+    for (i = 0; i < server_len;) {
+        for (j = 0; j < client_len;) {
+            if (server[i] == client[j] &&
+                memcmp(&server[i + 1], &client[j + 1], server[i]) == 0) {
+                /* We found a match */
+                result = &server[i];
+                status = OPENSSL_NPN_NEGOTIATED;
+                goto found;
+            }
+            j += client[j];
+            j++;
+        }
+        i += server[i];
+        i++;
+    }
+
+    /* There's no overlap between our protocols and the server's list. */
+    result = client;
+    status = OPENSSL_NPN_NO_OVERLAP;
+
+ found:
+    *out = (unsigned char *)result + 1;
+    *outlen = result[0];
+    return status;
+}
+
+#ifndef OPENSSL_NO_NEXTPROTONEG
+/*
+ * SSL_get0_next_proto_negotiated sets *data and *len to point to the
+ * client's requested protocol for this connection and returns 0. If the
+ * client didn't request any protocol, then *data is set to NULL. Note that
+ * the client can request any protocol it chooses. The value returned from
+ * this function need not be a member of the list of supported protocols
+ * provided by the callback.
+ */
+void SSL_get0_next_proto_negotiated(const SSL *s, const unsigned char **data,
+                                    unsigned *len)
+{
+    *data = s->ext.npn;
+    if (!*data) {
+        *len = 0;
+    } else {
+        *len = (unsigned int)s->ext.npn_len;
+    }
+}
+
+/*
+ * SSL_CTX_set_npn_advertised_cb sets a callback that is called when
+ * a TLS server needs a list of supported protocols for Next Protocol
+ * Negotiation. The returned list must be in wire format.  The list is
+ * returned by setting |out| to point to it and |outlen| to its length. This
+ * memory will not be modified, but one should assume that the SSL* keeps a
+ * reference to it. The callback should return SSL_TLSEXT_ERR_OK if it
+ * wishes to advertise. Otherwise, no such extension will be included in the
+ * ServerHello.
+ */
+void SSL_CTX_set_npn_advertised_cb(SSL_CTX *ctx,
+                                   SSL_CTX_npn_advertised_cb_func cb,
+                                   void *arg)
+{
+    ctx->ext.npn_advertised_cb = cb;
+    ctx->ext.npn_advertised_cb_arg = arg;
+}
+
+/*
+ * SSL_CTX_set_next_proto_select_cb sets a callback that is called when a
+ * client needs to select a protocol from the server's provided list. |out|
+ * must be set to point to the selected protocol (which may be within |in|).
+ * The length of the protocol name must be written into |outlen|. The
+ * server's advertised protocols are provided in |in| and |inlen|. The
+ * callback can assume that |in| is syntactically valid. The client must
+ * select a protocol. It is fatal to the connection if this callback returns
+ * a value other than SSL_TLSEXT_ERR_OK.
+ */
+void SSL_CTX_set_npn_select_cb(SSL_CTX *ctx,
+                               SSL_CTX_npn_select_cb_func cb,
+                               void *arg)
+{
+    ctx->ext.npn_select_cb = cb;
+    ctx->ext.npn_select_cb_arg = arg;
+}
+#endif
+
+/*
+ * SSL_CTX_set_alpn_protos sets the ALPN protocol list on |ctx| to |protos|.
+ * |protos| must be in wire-format (i.e. a series of non-empty, 8-bit
+ * length-prefixed strings). Returns 0 on success.
+ */
+int SSL_CTX_set_alpn_protos(SSL_CTX *ctx, const unsigned char *protos,
+                            unsigned int protos_len)
+{
+    OPENSSL_free(ctx->ext.alpn);
+    ctx->ext.alpn = OPENSSL_memdup(protos, protos_len);
+    if (ctx->ext.alpn == NULL) {
+        SSLerr(SSL_F_SSL_CTX_SET_ALPN_PROTOS, ERR_R_MALLOC_FAILURE);
+        return 1;
+    }
+    ctx->ext.alpn_len = protos_len;
+
+    return 0;
+}
+
+/*
+ * SSL_set_alpn_protos sets the ALPN protocol list on |ssl| to |protos|.
+ * |protos| must be in wire-format (i.e. a series of non-empty, 8-bit
+ * length-prefixed strings). Returns 0 on success.
+ */
+int SSL_set_alpn_protos(SSL *ssl, const unsigned char *protos,
+                        unsigned int protos_len)
+{
+    OPENSSL_free(ssl->ext.alpn);
+    ssl->ext.alpn = OPENSSL_memdup(protos, protos_len);
+    if (ssl->ext.alpn == NULL) {
+        SSLerr(SSL_F_SSL_SET_ALPN_PROTOS, ERR_R_MALLOC_FAILURE);
+        return 1;
+    }
+    ssl->ext.alpn_len = protos_len;
+
+    return 0;
+}
+
+/*
+ * SSL_CTX_set_alpn_select_cb sets a callback function on |ctx| that is
+ * called during ClientHello processing in order to select an ALPN protocol
+ * from the client's list of offered protocols.
+ */
+void SSL_CTX_set_alpn_select_cb(SSL_CTX *ctx,
+                                SSL_CTX_alpn_select_cb_func cb,
+                                void *arg)
+{
+    ctx->ext.alpn_select_cb = cb;
+    ctx->ext.alpn_select_cb_arg = arg;
+}
+
+/*
+ * SSL_get0_alpn_selected gets the selected ALPN protocol (if any) from |ssl|.
+ * On return it sets |*data| to point to |*len| bytes of protocol name
+ * (not including the leading length-prefix byte). If the server didn't
+ * respond with a negotiated protocol then |*len| will be zero.
+ */
+void SSL_get0_alpn_selected(const SSL *ssl, const unsigned char **data,
+                            unsigned int *len)
+{
+    *data = NULL;
+    if (ssl->s3)
+        *data = ssl->s3->alpn_selected;
+    if (*data == NULL)
+        *len = 0;
+    else
+        *len = (unsigned int)ssl->s3->alpn_selected_len;
+}
+
+int SSL_export_keying_material(SSL *s, unsigned char *out, size_t olen,
+                               const char *label, size_t llen,
+                               const unsigned char *context, size_t contextlen,
+                               int use_context)
+{
+    if (s->version < TLS1_VERSION && s->version != DTLS1_BAD_VER)
+        return -1;
+
+    return s->method->ssl3_enc->export_keying_material(s, out, olen, label,
+                                                       llen, context,
+                                                       contextlen, use_context);
+}
+
+int SSL_export_keying_material_early(SSL *s, unsigned char *out, size_t olen,
+                                     const char *label, size_t llen,
+                                     const unsigned char *context,
+                                     size_t contextlen)
+{
+    if (s->version != TLS1_3_VERSION)
+        return 0;
+
+    return tls13_export_keying_material_early(s, out, olen, label, llen,
+                                              context, contextlen);
+}
+
+static unsigned long ssl_session_hash(const SSL_SESSION *a)
+{
+    const unsigned char *session_id = a->session_id;
+    unsigned long l;
+    unsigned char tmp_storage[4];
+
+    if (a->session_id_length < sizeof(tmp_storage)) {
+        memset(tmp_storage, 0, sizeof(tmp_storage));
+        memcpy(tmp_storage, a->session_id, a->session_id_length);
+        session_id = tmp_storage;
+    }
+
+    l = (unsigned long)
+        ((unsigned long)session_id[0]) |
+        ((unsigned long)session_id[1] << 8L) |
+        ((unsigned long)session_id[2] << 16L) |
+        ((unsigned long)session_id[3] << 24L);
+    return l;
+}
+
+/*
+ * NB: If this function (or indeed the hash function which uses a sort of
+ * coarser function than this one) is changed, ensure
+ * SSL_CTX_has_matching_session_id() is checked accordingly. It relies on
+ * being able to construct an SSL_SESSION that will collide with any existing
+ * session with a matching session ID.
+ */
+static int ssl_session_cmp(const SSL_SESSION *a, const SSL_SESSION *b)
+{
+    if (a->ssl_version != b->ssl_version)
+        return 1;
+    if (a->session_id_length != b->session_id_length)
+        return 1;
+    return memcmp(a->session_id, b->session_id, a->session_id_length);
+}
+
+/*
+ * These wrapper functions should remain rather than redeclaring
+ * SSL_SESSION_hash and SSL_SESSION_cmp for void* types and casting each
+ * variable. The reason is that the functions aren't static, they're exposed
+ * via ssl.h.
+ */
+
+SSL_CTX *SSL_CTX_new(const SSL_METHOD *meth)
+{
+    SSL_CTX *ret = NULL;
+
+    if (meth == NULL) {
+        SSLerr(SSL_F_SSL_CTX_NEW, SSL_R_NULL_SSL_METHOD_PASSED);
+        return NULL;
+    }
+
+    if (!OPENSSL_init_ssl(OPENSSL_INIT_LOAD_SSL_STRINGS, NULL))
+        return NULL;
+
+    if (SSL_get_ex_data_X509_STORE_CTX_idx() < 0) {
+        SSLerr(SSL_F_SSL_CTX_NEW, SSL_R_X509_VERIFICATION_SETUP_PROBLEMS);
+        goto err;
+    }
+    ret = OPENSSL_zalloc(sizeof(*ret));
+    if (ret == NULL)
+        goto err;
+
+    ret->method = meth;
+    ret->min_proto_version = 0;
+    ret->max_proto_version = 0;
+    ret->mode = SSL_MODE_AUTO_RETRY;
+    ret->session_cache_mode = SSL_SESS_CACHE_SERVER;
+    ret->session_cache_size = SSL_SESSION_CACHE_MAX_SIZE_DEFAULT;
+    /* We take the system default. */
+    ret->session_timeout = meth->get_timeout();
+    ret->references = 1;
+    ret->lock = CRYPTO_THREAD_lock_new();
+    if (ret->lock == NULL) {
+        SSLerr(SSL_F_SSL_CTX_NEW, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ret);
+        return NULL;
+    }
+    ret->max_cert_list = SSL_MAX_CERT_LIST_DEFAULT;
+    ret->verify_mode = SSL_VERIFY_NONE;
+    if ((ret->cert = ssl_cert_new()) == NULL)
+        goto err;
+
+    ret->sessions = lh_SSL_SESSION_new(ssl_session_hash, ssl_session_cmp);
+    if (ret->sessions == NULL)
+        goto err;
+    ret->cert_store = X509_STORE_new();
+    if (ret->cert_store == NULL)
+        goto err;
+#ifndef OPENSSL_NO_CT
+    ret->ctlog_store = CTLOG_STORE_new();
+    if (ret->ctlog_store == NULL)
+        goto err;
+#endif
+
+    if (!SSL_CTX_set_ciphersuites(ret, TLS_DEFAULT_CIPHERSUITES))
+        goto err;
+
+    if (!ssl_create_cipher_list(ret->method,
+                                ret->tls13_ciphersuites,
+                                &ret->cipher_list, &ret->cipher_list_by_id,
+                                SSL_DEFAULT_CIPHER_LIST, ret->cert)
+        || sk_SSL_CIPHER_num(ret->cipher_list) <= 0) {
+        SSLerr(SSL_F_SSL_CTX_NEW, SSL_R_LIBRARY_HAS_NO_CIPHERS);
+        goto err2;
+    }
+
+    ret->param = X509_VERIFY_PARAM_new();
+    if (ret->param == NULL)
+        goto err;
+
+    if ((ret->md5 = EVP_get_digestbyname("ssl3-md5")) == NULL) {
+        SSLerr(SSL_F_SSL_CTX_NEW, SSL_R_UNABLE_TO_LOAD_SSL3_MD5_ROUTINES);
+        goto err2;
+    }
+    if ((ret->sha1 = EVP_get_digestbyname("ssl3-sha1")) == NULL) {
+        SSLerr(SSL_F_SSL_CTX_NEW, SSL_R_UNABLE_TO_LOAD_SSL3_SHA1_ROUTINES);
+        goto err2;
+    }
+
+    if ((ret->ca_names = sk_X509_NAME_new_null()) == NULL)
+        goto err;
+
+    if ((ret->client_ca_names = sk_X509_NAME_new_null()) == NULL)
+        goto err;
+
+    if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_SSL_CTX, ret, &ret->ex_data))
+        goto err;
+
+    if ((ret->ext.secure = OPENSSL_secure_zalloc(sizeof(*ret->ext.secure))) == NULL)
+        goto err;
+
+    /* No compression for DTLS */
+    if (!(meth->ssl3_enc->enc_flags & SSL_ENC_FLAG_DTLS))
+        ret->comp_methods = SSL_COMP_get_compression_methods();
+
+    ret->max_send_fragment = SSL3_RT_MAX_PLAIN_LENGTH;
+    ret->split_send_fragment = SSL3_RT_MAX_PLAIN_LENGTH;
+
+    /* Setup RFC5077 ticket keys */
+    if ((RAND_bytes(ret->ext.tick_key_name,
+                    sizeof(ret->ext.tick_key_name)) <= 0)
+        || (RAND_priv_bytes(ret->ext.secure->tick_hmac_key,
+                       sizeof(ret->ext.secure->tick_hmac_key)) <= 0)
+        || (RAND_priv_bytes(ret->ext.secure->tick_aes_key,
+                       sizeof(ret->ext.secure->tick_aes_key)) <= 0))
+        ret->options |= SSL_OP_NO_TICKET;
+
+    if (RAND_priv_bytes(ret->ext.cookie_hmac_key,
+                   sizeof(ret->ext.cookie_hmac_key)) <= 0)
+        goto err;
+
+#ifndef OPENSSL_NO_SRP
+    if (!SSL_CTX_SRP_CTX_init(ret))
+        goto err;
+#endif
+#ifndef OPENSSL_NO_ENGINE
+# ifdef OPENSSL_SSL_CLIENT_ENGINE_AUTO
+#  define eng_strx(x)     #x
+#  define eng_str(x)      eng_strx(x)
+    /* Use specific client engine automatically... ignore errors */
+    {
+        ENGINE *eng;
+        eng = ENGINE_by_id(eng_str(OPENSSL_SSL_CLIENT_ENGINE_AUTO));
+        if (!eng) {
+            ERR_clear_error();
+            ENGINE_load_builtin_engines();
+            eng = ENGINE_by_id(eng_str(OPENSSL_SSL_CLIENT_ENGINE_AUTO));
+        }
+        if (!eng || !SSL_CTX_set_client_cert_engine(ret, eng))
+            ERR_clear_error();
+    }
+# endif
+#endif
+    /*
+     * Default is to connect to non-RI servers. When RI is more widely
+     * deployed might change this.
+     */
+    ret->options |= SSL_OP_LEGACY_SERVER_CONNECT;
+    /*
+     * Disable compression by default to prevent CRIME. Applications can
+     * re-enable compression by configuring
+     * SSL_CTX_clear_options(ctx, SSL_OP_NO_COMPRESSION);
+     * or by using the SSL_CONF library. Similarly we also enable TLSv1.3
+     * middlebox compatibility by default. This may be disabled by default in
+     * a later OpenSSL version.
+     */
+    ret->options |= SSL_OP_NO_COMPRESSION | SSL_OP_ENABLE_MIDDLEBOX_COMPAT;
+
+    ret->ext.status_type = TLSEXT_STATUSTYPE_nothing;
+
+    /*
+     * We cannot usefully set a default max_early_data here (which gets
+     * propagated in SSL_new(), for the following reason: setting the
+     * SSL field causes tls_construct_stoc_early_data() to tell the
+     * client that early data will be accepted when constructing a TLS 1.3
+     * session ticket, and the client will accordingly send us early data
+     * when using that ticket (if the client has early data to send).
+     * However, in order for the early data to actually be consumed by
+     * the application, the application must also have calls to
+     * SSL_read_early_data(); otherwise we'll just skip past the early data
+     * and ignore it.  So, since the application must add calls to
+     * SSL_read_early_data(), we also require them to add
+     * calls to SSL_CTX_set_max_early_data() in order to use early data,
+     * eliminating the bandwidth-wasting early data in the case described
+     * above.
+     */
+    ret->max_early_data = 0;
+
+    /*
+     * Default recv_max_early_data is a fully loaded single record. Could be
+     * split across multiple records in practice. We set this differently to
+     * max_early_data so that, in the default case, we do not advertise any
+     * support for early_data, but if a client were to send us some (e.g.
+     * because of an old, stale ticket) then we will tolerate it and skip over
+     * it.
+     */
+    ret->recv_max_early_data = SSL3_RT_MAX_PLAIN_LENGTH;
+
+    /* By default we send two session tickets automatically in TLSv1.3 */
+    ret->num_tickets = 2;
+
+    ssl_ctx_system_config(ret);
+
+    return ret;
+ err:
+    SSLerr(SSL_F_SSL_CTX_NEW, ERR_R_MALLOC_FAILURE);
+ err2:
+    SSL_CTX_free(ret);
+    return NULL;
+}
+
+int SSL_CTX_up_ref(SSL_CTX *ctx)
+{
+    int i;
+
+    if (CRYPTO_UP_REF(&ctx->references, &i, ctx->lock) <= 0)
+        return 0;
+
+    REF_PRINT_COUNT("SSL_CTX", ctx);
+    REF_ASSERT_ISNT(i < 2);
+    return ((i > 1) ? 1 : 0);
+}
+
+void SSL_CTX_free(SSL_CTX *a)
+{
+    int i;
+
+    if (a == NULL)
+        return;
+
+    CRYPTO_DOWN_REF(&a->references, &i, a->lock);
+    REF_PRINT_COUNT("SSL_CTX", a);
+    if (i > 0)
+        return;
+    REF_ASSERT_ISNT(i < 0);
+
+    X509_VERIFY_PARAM_free(a->param);
+    dane_ctx_final(&a->dane);
+
+    /*
+     * Free internal session cache. However: the remove_cb() may reference
+     * the ex_data of SSL_CTX, thus the ex_data store can only be removed
+     * after the sessions were flushed.
+     * As the ex_data handling routines might also touch the session cache,
+     * the most secure solution seems to be: empty (flush) the cache, then
+     * free ex_data, then finally free the cache.
+     * (See ticket [openssl.org #212].)
+     */
+    if (a->sessions != NULL)
+        SSL_CTX_flush_sessions(a, 0);
+
+    CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);
+    lh_SSL_SESSION_free(a->sessions);
+    X509_STORE_free(a->cert_store);
+#ifndef OPENSSL_NO_CT
+    CTLOG_STORE_free(a->ctlog_store);
+#endif
+    sk_SSL_CIPHER_free(a->cipher_list);
+    sk_SSL_CIPHER_free(a->cipher_list_by_id);
+    sk_SSL_CIPHER_free(a->tls13_ciphersuites);
+    ssl_cert_free(a->cert);
+    sk_X509_NAME_pop_free(a->ca_names, X509_NAME_free);
+    sk_X509_NAME_pop_free(a->client_ca_names, X509_NAME_free);
+    sk_X509_pop_free(a->extra_certs, X509_free);
+    a->comp_methods = NULL;
+#ifndef OPENSSL_NO_SRTP
+    sk_SRTP_PROTECTION_PROFILE_free(a->srtp_profiles);
+#endif
+#ifndef OPENSSL_NO_SRP
+    SSL_CTX_SRP_CTX_free(a);
+#endif
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_finish(a->client_cert_engine);
+#endif
+
+#ifndef OPENSSL_NO_EC
+    OPENSSL_free(a->ext.ecpointformats);
+    OPENSSL_free(a->ext.supportedgroups);
+#endif
+    OPENSSL_free(a->ext.alpn);
+    OPENSSL_secure_free(a->ext.secure);
+
+    CRYPTO_THREAD_lock_free(a->lock);
+
+    OPENSSL_free(a);
+}
+
+void SSL_CTX_set_default_passwd_cb(SSL_CTX *ctx, pem_password_cb *cb)
+{
+    ctx->default_passwd_callback = cb;
+}
+
+void SSL_CTX_set_default_passwd_cb_userdata(SSL_CTX *ctx, void *u)
+{
+    ctx->default_passwd_callback_userdata = u;
+}
+
+pem_password_cb *SSL_CTX_get_default_passwd_cb(SSL_CTX *ctx)
+{
+    return ctx->default_passwd_callback;
+}
+
+void *SSL_CTX_get_default_passwd_cb_userdata(SSL_CTX *ctx)
+{
+    return ctx->default_passwd_callback_userdata;
+}
+
+void SSL_set_default_passwd_cb(SSL *s, pem_password_cb *cb)
+{
+    s->default_passwd_callback = cb;
+}
+
+void SSL_set_default_passwd_cb_userdata(SSL *s, void *u)
+{
+    s->default_passwd_callback_userdata = u;
+}
+
+pem_password_cb *SSL_get_default_passwd_cb(SSL *s)
+{
+    return s->default_passwd_callback;
+}
+
+void *SSL_get_default_passwd_cb_userdata(SSL *s)
+{
+    return s->default_passwd_callback_userdata;
+}
+
+void SSL_CTX_set_cert_verify_callback(SSL_CTX *ctx,
+                                      int (*cb) (X509_STORE_CTX *, void *),
+                                      void *arg)
+{
+    ctx->app_verify_callback = cb;
+    ctx->app_verify_arg = arg;
+}
+
+void SSL_CTX_set_verify(SSL_CTX *ctx, int mode,
+                        int (*cb) (int, X509_STORE_CTX *))
+{
+    ctx->verify_mode = mode;
+    ctx->default_verify_callback = cb;
+}
+
+void SSL_CTX_set_verify_depth(SSL_CTX *ctx, int depth)
+{
+    X509_VERIFY_PARAM_set_depth(ctx->param, depth);
+}
+
+void SSL_CTX_set_cert_cb(SSL_CTX *c, int (*cb) (SSL *ssl, void *arg), void *arg)
+{
+    ssl_cert_set_cert_cb(c->cert, cb, arg);
+}
+
+void SSL_set_cert_cb(SSL *s, int (*cb) (SSL *ssl, void *arg), void *arg)
+{
+    ssl_cert_set_cert_cb(s->cert, cb, arg);
+}
+
+void ssl_set_masks(SSL *s)
+{
+    CERT *c = s->cert;
+    uint32_t *pvalid = s->s3->tmp.valid_flags;
+    int rsa_enc, rsa_sign, dh_tmp, dsa_sign;
+    unsigned long mask_k, mask_a;
+#ifndef OPENSSL_NO_EC
+    int have_ecc_cert, ecdsa_ok;
+#endif
+    if (c == NULL)
+        return;
+
+#ifndef OPENSSL_NO_DH
+    dh_tmp = (c->dh_tmp != NULL || c->dh_tmp_cb != NULL || c->dh_tmp_auto);
+#else
+    dh_tmp = 0;
+#endif
+
+    rsa_enc = pvalid[SSL_PKEY_RSA] & CERT_PKEY_VALID;
+    rsa_sign = pvalid[SSL_PKEY_RSA] & CERT_PKEY_VALID;
+    dsa_sign = pvalid[SSL_PKEY_DSA_SIGN] & CERT_PKEY_VALID;
+#ifndef OPENSSL_NO_EC
+    have_ecc_cert = pvalid[SSL_PKEY_ECC] & CERT_PKEY_VALID;
+#endif
+    mask_k = 0;
+    mask_a = 0;
+
+#ifdef CIPHER_DEBUG
+    fprintf(stderr, "dht=%d re=%d rs=%d ds=%d\n",
+            dh_tmp, rsa_enc, rsa_sign, dsa_sign);
+#endif
+
+#ifndef OPENSSL_NO_GOST
+    if (ssl_has_cert(s, SSL_PKEY_GOST12_512)) {
+        mask_k |= SSL_kGOST;
+        mask_a |= SSL_aGOST12;
+    }
+    if (ssl_has_cert(s, SSL_PKEY_GOST12_256)) {
+        mask_k |= SSL_kGOST;
+        mask_a |= SSL_aGOST12;
+    }
+    if (ssl_has_cert(s, SSL_PKEY_GOST01)) {
+        mask_k |= SSL_kGOST;
+        mask_a |= SSL_aGOST01;
+    }
+#endif
+
+    if (rsa_enc)
+        mask_k |= SSL_kRSA;
+
+    if (dh_tmp)
+        mask_k |= SSL_kDHE;
+
+    /*
+     * If we only have an RSA-PSS certificate allow RSA authentication
+     * if TLS 1.2 and peer supports it.
+     */
+
+    if (rsa_enc || rsa_sign || (ssl_has_cert(s, SSL_PKEY_RSA_PSS_SIGN)
+                && pvalid[SSL_PKEY_RSA_PSS_SIGN] & CERT_PKEY_EXPLICIT_SIGN
+                && TLS1_get_version(s) == TLS1_2_VERSION))
+        mask_a |= SSL_aRSA;
+
+    if (dsa_sign) {
+        mask_a |= SSL_aDSS;
+    }
+
+    mask_a |= SSL_aNULL;
+
+    /*
+     * An ECC certificate may be usable for ECDH and/or ECDSA cipher suites
+     * depending on the key usage extension.
+     */
+#ifndef OPENSSL_NO_EC
+    if (have_ecc_cert) {
+        uint32_t ex_kusage;
+        ex_kusage = X509_get_key_usage(c->pkeys[SSL_PKEY_ECC].x509);
+        ecdsa_ok = ex_kusage & X509v3_KU_DIGITAL_SIGNATURE;
+        if (!(pvalid[SSL_PKEY_ECC] & CERT_PKEY_SIGN))
+            ecdsa_ok = 0;
+        if (ecdsa_ok)
+            mask_a |= SSL_aECDSA;
+    }
+    /* Allow Ed25519 for TLS 1.2 if peer supports it */
+    if (!(mask_a & SSL_aECDSA) && ssl_has_cert(s, SSL_PKEY_ED25519)
+            && pvalid[SSL_PKEY_ED25519] & CERT_PKEY_EXPLICIT_SIGN
+            && TLS1_get_version(s) == TLS1_2_VERSION)
+            mask_a |= SSL_aECDSA;
+
+    /* Allow Ed448 for TLS 1.2 if peer supports it */
+    if (!(mask_a & SSL_aECDSA) && ssl_has_cert(s, SSL_PKEY_ED448)
+            && pvalid[SSL_PKEY_ED448] & CERT_PKEY_EXPLICIT_SIGN
+            && TLS1_get_version(s) == TLS1_2_VERSION)
+            mask_a |= SSL_aECDSA;
+#endif
+
+#ifndef OPENSSL_NO_EC
+    mask_k |= SSL_kECDHE;
+#endif
+
+#ifndef OPENSSL_NO_PSK
+    mask_k |= SSL_kPSK;
+    mask_a |= SSL_aPSK;
+    if (mask_k & SSL_kRSA)
+        mask_k |= SSL_kRSAPSK;
+    if (mask_k & SSL_kDHE)
+        mask_k |= SSL_kDHEPSK;
+    if (mask_k & SSL_kECDHE)
+        mask_k |= SSL_kECDHEPSK;
+#endif
+
+    s->s3->tmp.mask_k = mask_k;
+    s->s3->tmp.mask_a = mask_a;
+}
+
+#ifndef OPENSSL_NO_EC
+
+int ssl_check_srvr_ecc_cert_and_alg(X509 *x, SSL *s)
+{
+    if (s->s3->tmp.new_cipher->algorithm_auth & SSL_aECDSA) {
+        /* key usage, if present, must allow signing */
+        if (!(X509_get_key_usage(x) & X509v3_KU_DIGITAL_SIGNATURE)) {
+            SSLerr(SSL_F_SSL_CHECK_SRVR_ECC_CERT_AND_ALG,
+                   SSL_R_ECC_CERT_NOT_FOR_SIGNING);
+            return 0;
+        }
+    }
+    return 1;                   /* all checks are ok */
+}
+
+#endif
+
+int ssl_get_server_cert_serverinfo(SSL *s, const unsigned char **serverinfo,
+                                   size_t *serverinfo_length)
+{
+    CERT_PKEY *cpk = s->s3->tmp.cert;
+    *serverinfo_length = 0;
+
+    if (cpk == NULL || cpk->serverinfo == NULL)
+        return 0;
+
+    *serverinfo = cpk->serverinfo;
+    *serverinfo_length = cpk->serverinfo_length;
+    return 1;
+}
+
+void ssl_update_cache(SSL *s, int mode)
+{
+    int i;
+
+    /*
+     * If the session_id_length is 0, we are not supposed to cache it, and it
+     * would be rather hard to do anyway :-)
+     */
+    if (s->session->session_id_length == 0)
+        return;
+
+    /*
+     * If sid_ctx_length is 0 there is no specific application context
+     * associated with this session, so when we try to resume it and
+     * SSL_VERIFY_PEER is requested to verify the client identity, we have no
+     * indication that this is actually a session for the proper application
+     * context, and the *handshake* will fail, not just the resumption attempt.
+     * Do not cache (on the server) these sessions that are not resumable
+     * (clients can set SSL_VERIFY_PEER without needing a sid_ctx set).
+     */
+    if (s->server && s->session->sid_ctx_length == 0
+            && (s->verify_mode & SSL_VERIFY_PEER) != 0)
+        return;
+
+    i = s->session_ctx->session_cache_mode;
+    if ((i & mode) != 0
+        && (!s->hit || SSL_IS_TLS13(s))) {
+        /*
+         * Add the session to the internal cache. In server side TLSv1.3 we
+         * normally don't do this because by default it's a full stateless ticket
+         * with only a dummy session id so there is no reason to cache it,
+         * unless:
+         * - we are doing early_data, in which case we cache so that we can
+         *   detect replays
+         * - the application has set a remove_session_cb so needs to know about
+         *   session timeout events
+         * - SSL_OP_NO_TICKET is set in which case it is a stateful ticket
+         */
+        if ((i & SSL_SESS_CACHE_NO_INTERNAL_STORE) == 0
+                && (!SSL_IS_TLS13(s)
+                    || !s->server
+                    || (s->max_early_data > 0
+                        && (s->options & SSL_OP_NO_ANTI_REPLAY) == 0)
+                    || s->session_ctx->remove_session_cb != NULL
+                    || (s->options & SSL_OP_NO_TICKET) != 0))
+            SSL_CTX_add_session(s->session_ctx, s->session);
+
+        /*
+         * Add the session to the external cache. We do this even in server side
+         * TLSv1.3 without early data because some applications just want to
+         * know about the creation of a session and aren't doing a full cache.
+         */
+        if (s->session_ctx->new_session_cb != NULL) {
+            SSL_SESSION_up_ref(s->session);
+            if (!s->session_ctx->new_session_cb(s, s->session))
+                SSL_SESSION_free(s->session);
+        }
+    }
+
+    /* auto flush every 255 connections */
+    if ((!(i & SSL_SESS_CACHE_NO_AUTO_CLEAR)) && ((i & mode) == mode)) {
+        TSAN_QUALIFIER int *stat;
+        if (mode & SSL_SESS_CACHE_CLIENT)
+            stat = &s->session_ctx->stats.sess_connect_good;
+        else
+            stat = &s->session_ctx->stats.sess_accept_good;
+        if ((tsan_load(stat) & 0xff) == 0xff)
+            SSL_CTX_flush_sessions(s->session_ctx, (unsigned long)time(NULL));
+    }
+}
+
+const SSL_METHOD *SSL_CTX_get_ssl_method(const SSL_CTX *ctx)
+{
+    return ctx->method;
+}
+
+const SSL_METHOD *SSL_get_ssl_method(const SSL *s)
+{
+    return s->method;
+}
+
+int SSL_set_ssl_method(SSL *s, const SSL_METHOD *meth)
+{
+    int ret = 1;
+
+    if (s->method != meth) {
+        const SSL_METHOD *sm = s->method;
+        int (*hf) (SSL *) = s->handshake_func;
+
+        if (sm->version == meth->version)
+            s->method = meth;
+        else {
+            sm->ssl_free(s);
+            s->method = meth;
+            ret = s->method->ssl_new(s);
+        }
+
+        if (hf == sm->ssl_connect)
+            s->handshake_func = meth->ssl_connect;
+        else if (hf == sm->ssl_accept)
+            s->handshake_func = meth->ssl_accept;
+    }
+    return ret;
+}
+
+int SSL_get_error(const SSL *s, int i)
+{
+    int reason;
+    unsigned long l;
+    BIO *bio;
+
+    if (i > 0)
+        return SSL_ERROR_NONE;
+
+    /*
+     * Make things return SSL_ERROR_SYSCALL when doing SSL_do_handshake etc,
+     * where we do encode the error
+     */
+    if ((l = ERR_peek_error()) != 0) {
+        if (ERR_GET_LIB(l) == ERR_LIB_SYS)
+            return SSL_ERROR_SYSCALL;
+        else
+            return SSL_ERROR_SSL;
+    }
+
+    if (SSL_want_read(s)) {
+        bio = SSL_get_rbio(s);
+        if (BIO_should_read(bio))
+            return SSL_ERROR_WANT_READ;
+        else if (BIO_should_write(bio))
+            /*
+             * This one doesn't make too much sense ... We never try to write
+             * to the rbio, and an application program where rbio and wbio
+             * are separate couldn't even know what it should wait for.
+             * However if we ever set s->rwstate incorrectly (so that we have
+             * SSL_want_read(s) instead of SSL_want_write(s)) and rbio and
+             * wbio *are* the same, this test works around that bug; so it
+             * might be safer to keep it.
+             */
+            return SSL_ERROR_WANT_WRITE;
+        else if (BIO_should_io_special(bio)) {
+            reason = BIO_get_retry_reason(bio);
+            if (reason == BIO_RR_CONNECT)
+                return SSL_ERROR_WANT_CONNECT;
+            else if (reason == BIO_RR_ACCEPT)
+                return SSL_ERROR_WANT_ACCEPT;
+            else
+                return SSL_ERROR_SYSCALL; /* unknown */
+        }
+    }
+
+    if (SSL_want_write(s)) {
+        /* Access wbio directly - in order to use the buffered bio if present */
+        bio = s->wbio;
+        if (BIO_should_write(bio))
+            return SSL_ERROR_WANT_WRITE;
+        else if (BIO_should_read(bio))
+            /*
+             * See above (SSL_want_read(s) with BIO_should_write(bio))
+             */
+            return SSL_ERROR_WANT_READ;
+        else if (BIO_should_io_special(bio)) {
+            reason = BIO_get_retry_reason(bio);
+            if (reason == BIO_RR_CONNECT)
+                return SSL_ERROR_WANT_CONNECT;
+            else if (reason == BIO_RR_ACCEPT)
+                return SSL_ERROR_WANT_ACCEPT;
+            else
+                return SSL_ERROR_SYSCALL;
+        }
+    }
+    if (SSL_want_x509_lookup(s))
+        return SSL_ERROR_WANT_X509_LOOKUP;
+    if (SSL_want_async(s))
+        return SSL_ERROR_WANT_ASYNC;
+    if (SSL_want_async_job(s))
+        return SSL_ERROR_WANT_ASYNC_JOB;
+    if (SSL_want_client_hello_cb(s))
+        return SSL_ERROR_WANT_CLIENT_HELLO_CB;
+
+    if ((s->shutdown & SSL_RECEIVED_SHUTDOWN) &&
+        (s->s3->warn_alert == SSL_AD_CLOSE_NOTIFY))
+        return SSL_ERROR_ZERO_RETURN;
+
+    return SSL_ERROR_SYSCALL;
+}
+
+static int ssl_do_handshake_intern(void *vargs)
+{
+    struct ssl_async_args *args;
+    SSL *s;
+
+    args = (struct ssl_async_args *)vargs;
+    s = args->s;
+
+    return s->handshake_func(s);
+}
+
+int SSL_do_handshake(SSL *s)
+{
+    int ret = 1;
+
+    if (s->handshake_func == NULL) {
+        SSLerr(SSL_F_SSL_DO_HANDSHAKE, SSL_R_CONNECTION_TYPE_NOT_SET);
+        return -1;
+    }
+
+    ossl_statem_check_finish_init(s, -1);
+
+    s->method->ssl_renegotiate_check(s, 0);
+
+    if (SSL_in_init(s) || SSL_in_before(s)) {
+        if ((s->mode & SSL_MODE_ASYNC) && ASYNC_get_current_job() == NULL) {
+            struct ssl_async_args args;
+
+            args.s = s;
+
+            ret = ssl_start_async_job(s, &args, ssl_do_handshake_intern);
+        } else {
+            ret = s->handshake_func(s);
+        }
+    }
+    return ret;
+}
+
+void SSL_set_accept_state(SSL *s)
+{
+    s->server = 1;
+    s->shutdown = 0;
+    ossl_statem_clear(s);
+    s->handshake_func = s->method->ssl_accept;
+    clear_ciphers(s);
+}
+
+void SSL_set_connect_state(SSL *s)
+{
+    s->server = 0;
+    s->shutdown = 0;
+    ossl_statem_clear(s);
+    s->handshake_func = s->method->ssl_connect;
+    clear_ciphers(s);
+}
+
+int ssl_undefined_function(SSL *s)
+{
+    SSLerr(SSL_F_SSL_UNDEFINED_FUNCTION, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+    return 0;
+}
+
+int ssl_undefined_void_function(void)
+{
+    SSLerr(SSL_F_SSL_UNDEFINED_VOID_FUNCTION,
+           ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+    return 0;
+}
+
+int ssl_undefined_const_function(const SSL *s)
+{
+    return 0;
+}
+
+const SSL_METHOD *ssl_bad_method(int ver)
+{
+    SSLerr(SSL_F_SSL_BAD_METHOD, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+    return NULL;
+}
+
+const char *ssl_protocol_to_string(int version)
+{
+    switch(version)
+    {
+    case TLS1_3_VERSION:
+        return "TLSv1.3";
+
+    case TLS1_2_VERSION:
+        return "TLSv1.2";
+
+    case TLS1_1_VERSION:
+        return "TLSv1.1";
+
+    case TLS1_VERSION:
+        return "TLSv1";
+
+    case SSL3_VERSION:
+        return "SSLv3";
+
+    case DTLS1_BAD_VER:
+        return "DTLSv0.9";
+
+    case DTLS1_VERSION:
+        return "DTLSv1";
+
+    case DTLS1_2_VERSION:
+        return "DTLSv1.2";
+
+    default:
+        return "unknown";
+    }
+}
+
+const char *SSL_get_version(const SSL *s)
+{
+    return ssl_protocol_to_string(s->version);
+}
+
+static int dup_ca_names(STACK_OF(X509_NAME) **dst, STACK_OF(X509_NAME) *src)
+{
+    STACK_OF(X509_NAME) *sk;
+    X509_NAME *xn;
+    int i;
+
+    if (src == NULL) {
+        *dst = NULL;
+        return 1;
+    }
+
+    if ((sk = sk_X509_NAME_new_null()) == NULL)
+        return 0;
+    for (i = 0; i < sk_X509_NAME_num(src); i++) {
+        xn = X509_NAME_dup(sk_X509_NAME_value(src, i));
+        if (xn == NULL) {
+            sk_X509_NAME_pop_free(sk, X509_NAME_free);
+            return 0;
+        }
+        if (sk_X509_NAME_insert(sk, xn, i) == 0) {
+            X509_NAME_free(xn);
+            sk_X509_NAME_pop_free(sk, X509_NAME_free);
+            return 0;
+        }
+    }
+    *dst = sk;
+
+    return 1;
+}
+
+SSL *SSL_dup(SSL *s)
+{
+    SSL *ret;
+    int i;
+
+    /* If we're not quiescent, just up_ref! */
+    if (!SSL_in_init(s) || !SSL_in_before(s)) {
+        CRYPTO_UP_REF(&s->references, &i, s->lock);
+        return s;
+    }
+
+    /*
+     * Otherwise, copy configuration state, and session if set.
+     */
+    if ((ret = SSL_new(SSL_get_SSL_CTX(s))) == NULL)
+        return NULL;
+
+    if (s->session != NULL) {
+        /*
+         * Arranges to share the same session via up_ref.  This "copies"
+         * session-id, SSL_METHOD, sid_ctx, and 'cert'
+         */
+        if (!SSL_copy_session_id(ret, s))
+            goto err;
+    } else {
+        /*
+         * No session has been established yet, so we have to expect that
+         * s->cert or ret->cert will be changed later -- they should not both
+         * point to the same object, and thus we can't use
+         * SSL_copy_session_id.
+         */
+        if (!SSL_set_ssl_method(ret, s->method))
+            goto err;
+
+        if (s->cert != NULL) {
+            ssl_cert_free(ret->cert);
+            ret->cert = ssl_cert_dup(s->cert);
+            if (ret->cert == NULL)
+                goto err;
+        }
+
+        if (!SSL_set_session_id_context(ret, s->sid_ctx,
+                                        (int)s->sid_ctx_length))
+            goto err;
+    }
+
+    if (!ssl_dane_dup(ret, s))
+        goto err;
+    ret->version = s->version;
+    ret->options = s->options;
+    ret->mode = s->mode;
+    SSL_set_max_cert_list(ret, SSL_get_max_cert_list(s));
+    SSL_set_read_ahead(ret, SSL_get_read_ahead(s));
+    ret->msg_callback = s->msg_callback;
+    ret->msg_callback_arg = s->msg_callback_arg;
+    SSL_set_verify(ret, SSL_get_verify_mode(s), SSL_get_verify_callback(s));
+    SSL_set_verify_depth(ret, SSL_get_verify_depth(s));
+    ret->generate_session_id = s->generate_session_id;
+
+    SSL_set_info_callback(ret, SSL_get_info_callback(s));
+
+    /* copy app data, a little dangerous perhaps */
+    if (!CRYPTO_dup_ex_data(CRYPTO_EX_INDEX_SSL, &ret->ex_data, &s->ex_data))
+        goto err;
+
+    /* setup rbio, and wbio */
+    if (s->rbio != NULL) {
+        if (!BIO_dup_state(s->rbio, (char *)&ret->rbio))
+            goto err;
+    }
+    if (s->wbio != NULL) {
+        if (s->wbio != s->rbio) {
+            if (!BIO_dup_state(s->wbio, (char *)&ret->wbio))
+                goto err;
+        } else {
+            BIO_up_ref(ret->rbio);
+            ret->wbio = ret->rbio;
+        }
+    }
+
+    ret->server = s->server;
+    if (s->handshake_func) {
+        if (s->server)
+            SSL_set_accept_state(ret);
+        else
+            SSL_set_connect_state(ret);
+    }
+    ret->shutdown = s->shutdown;
+    ret->hit = s->hit;
+
+    ret->default_passwd_callback = s->default_passwd_callback;
+    ret->default_passwd_callback_userdata = s->default_passwd_callback_userdata;
+
+    X509_VERIFY_PARAM_inherit(ret->param, s->param);
+
+    /* dup the cipher_list and cipher_list_by_id stacks */
+    if (s->cipher_list != NULL) {
+        if ((ret->cipher_list = sk_SSL_CIPHER_dup(s->cipher_list)) == NULL)
+            goto err;
+    }
+    if (s->cipher_list_by_id != NULL)
+        if ((ret->cipher_list_by_id = sk_SSL_CIPHER_dup(s->cipher_list_by_id))
+            == NULL)
+            goto err;
+
+    /* Dup the client_CA list */
+    if (!dup_ca_names(&ret->ca_names, s->ca_names)
+            || !dup_ca_names(&ret->client_ca_names, s->client_ca_names))
+        goto err;
+
+    return ret;
+
+ err:
+    SSL_free(ret);
+    return NULL;
+}
+
+void ssl_clear_cipher_ctx(SSL *s)
+{
+    if (s->enc_read_ctx != NULL) {
+        EVP_CIPHER_CTX_free(s->enc_read_ctx);
+        s->enc_read_ctx = NULL;
+    }
+    if (s->enc_write_ctx != NULL) {
+        EVP_CIPHER_CTX_free(s->enc_write_ctx);
+        s->enc_write_ctx = NULL;
+    }
+#ifndef OPENSSL_NO_COMP
+    COMP_CTX_free(s->expand);
+    s->expand = NULL;
+    COMP_CTX_free(s->compress);
+    s->compress = NULL;
+#endif
+}
+
+X509 *SSL_get_certificate(const SSL *s)
+{
+    if (s->cert != NULL)
+        return s->cert->key->x509;
+    else
+        return NULL;
+}
+
+EVP_PKEY *SSL_get_privatekey(const SSL *s)
+{
+    if (s->cert != NULL)
+        return s->cert->key->privatekey;
+    else
+        return NULL;
+}
+
+X509 *SSL_CTX_get0_certificate(const SSL_CTX *ctx)
+{
+    if (ctx->cert != NULL)
+        return ctx->cert->key->x509;
+    else
+        return NULL;
+}
+
+EVP_PKEY *SSL_CTX_get0_privatekey(const SSL_CTX *ctx)
+{
+    if (ctx->cert != NULL)
+        return ctx->cert->key->privatekey;
+    else
+        return NULL;
+}
+
+const SSL_CIPHER *SSL_get_current_cipher(const SSL *s)
+{
+    if ((s->session != NULL) && (s->session->cipher != NULL))
+        return s->session->cipher;
+    return NULL;
+}
+
+const SSL_CIPHER *SSL_get_pending_cipher(const SSL *s)
+{
+    return s->s3->tmp.new_cipher;
+}
+
+const COMP_METHOD *SSL_get_current_compression(const SSL *s)
+{
+#ifndef OPENSSL_NO_COMP
+    return s->compress ? COMP_CTX_get_method(s->compress) : NULL;
+#else
+    return NULL;
+#endif
+}
+
+const COMP_METHOD *SSL_get_current_expansion(const SSL *s)
+{
+#ifndef OPENSSL_NO_COMP
+    return s->expand ? COMP_CTX_get_method(s->expand) : NULL;
+#else
+    return NULL;
+#endif
+}
+
+int ssl_init_wbio_buffer(SSL *s)
+{
+    BIO *bbio;
+
+    if (s->bbio != NULL) {
+        /* Already buffered. */
+        return 1;
+    }
+
+    bbio = BIO_new(BIO_f_buffer());
+    if (bbio == NULL || !BIO_set_read_buffer_size(bbio, 1)) {
+        BIO_free(bbio);
+        SSLerr(SSL_F_SSL_INIT_WBIO_BUFFER, ERR_R_BUF_LIB);
+        return 0;
+    }
+    s->bbio = bbio;
+    s->wbio = BIO_push(bbio, s->wbio);
+
+    return 1;
+}
+
+int ssl_free_wbio_buffer(SSL *s)
+{
+    /* callers ensure s is never null */
+    if (s->bbio == NULL)
+        return 1;
+
+    s->wbio = BIO_pop(s->wbio);
+    BIO_free(s->bbio);
+    s->bbio = NULL;
+
+    return 1;
+}
+
+void SSL_CTX_set_quiet_shutdown(SSL_CTX *ctx, int mode)
+{
+    ctx->quiet_shutdown = mode;
+}
+
+int SSL_CTX_get_quiet_shutdown(const SSL_CTX *ctx)
+{
+    return ctx->quiet_shutdown;
+}
+
+void SSL_set_quiet_shutdown(SSL *s, int mode)
+{
+    s->quiet_shutdown = mode;
+}
+
+int SSL_get_quiet_shutdown(const SSL *s)
+{
+    return s->quiet_shutdown;
+}
+
+void SSL_set_shutdown(SSL *s, int mode)
+{
+    s->shutdown = mode;
+}
+
+int SSL_get_shutdown(const SSL *s)
+{
+    return s->shutdown;
+}
+
+int SSL_version(const SSL *s)
+{
+    return s->version;
+}
+
+int SSL_client_version(const SSL *s)
+{
+    return s->client_version;
+}
+
+SSL_CTX *SSL_get_SSL_CTX(const SSL *ssl)
+{
+    return ssl->ctx;
+}
+
+SSL_CTX *SSL_set_SSL_CTX(SSL *ssl, SSL_CTX *ctx)
+{
+    CERT *new_cert;
+    if (ssl->ctx == ctx)
+        return ssl->ctx;
+    if (ctx == NULL)
+        ctx = ssl->session_ctx;
+    new_cert = ssl_cert_dup(ctx->cert);
+    if (new_cert == NULL) {
+        return NULL;
+    }
+
+    if (!custom_exts_copy_flags(&new_cert->custext, &ssl->cert->custext)) {
+        ssl_cert_free(new_cert);
+        return NULL;
+    }
+
+    ssl_cert_free(ssl->cert);
+    ssl->cert = new_cert;
+
+    /*
+     * Program invariant: |sid_ctx| has fixed size (SSL_MAX_SID_CTX_LENGTH),
+     * so setter APIs must prevent invalid lengths from entering the system.
+     */
+    if (!ossl_assert(ssl->sid_ctx_length <= sizeof(ssl->sid_ctx)))
+        return NULL;
+
+    /*
+     * If the session ID context matches that of the parent SSL_CTX,
+     * inherit it from the new SSL_CTX as well. If however the context does
+     * not match (i.e., it was set per-ssl with SSL_set_session_id_context),
+     * leave it unchanged.
+     */
+    if ((ssl->ctx != NULL) &&
+        (ssl->sid_ctx_length == ssl->ctx->sid_ctx_length) &&
+        (memcmp(ssl->sid_ctx, ssl->ctx->sid_ctx, ssl->sid_ctx_length) == 0)) {
+        ssl->sid_ctx_length = ctx->sid_ctx_length;
+        memcpy(&ssl->sid_ctx, &ctx->sid_ctx, sizeof(ssl->sid_ctx));
+    }
+
+    SSL_CTX_up_ref(ctx);
+    SSL_CTX_free(ssl->ctx);     /* decrement reference count */
+    ssl->ctx = ctx;
+
+    return ssl->ctx;
+}
+
+int SSL_CTX_set_default_verify_paths(SSL_CTX *ctx)
+{
+    return X509_STORE_set_default_paths(ctx->cert_store);
+}
+
+int SSL_CTX_set_default_verify_dir(SSL_CTX *ctx)
+{
+    X509_LOOKUP *lookup;
+
+    lookup = X509_STORE_add_lookup(ctx->cert_store, X509_LOOKUP_hash_dir());
+    if (lookup == NULL)
+        return 0;
+    X509_LOOKUP_add_dir(lookup, NULL, X509_FILETYPE_DEFAULT);
+
+    /* Clear any errors if the default directory does not exist */
+    ERR_clear_error();
+
+    return 1;
+}
+
+int SSL_CTX_set_default_verify_file(SSL_CTX *ctx)
+{
+    X509_LOOKUP *lookup;
+
+    lookup = X509_STORE_add_lookup(ctx->cert_store, X509_LOOKUP_file());
+    if (lookup == NULL)
+        return 0;
+
+    X509_LOOKUP_load_file(lookup, NULL, X509_FILETYPE_DEFAULT);
+
+    /* Clear any errors if the default file does not exist */
+    ERR_clear_error();
+
+    return 1;
+}
+
+int SSL_CTX_load_verify_locations(SSL_CTX *ctx, const char *CAfile,
+                                  const char *CApath)
+{
+    return X509_STORE_load_locations(ctx->cert_store, CAfile, CApath);
+}
+
+void SSL_set_info_callback(SSL *ssl,
+                           void (*cb) (const SSL *ssl, int type, int val))
+{
+    ssl->info_callback = cb;
+}
+
+/*
+ * One compiler (Diab DCC) doesn't like argument names in returned function
+ * pointer.
+ */
+void (*SSL_get_info_callback(const SSL *ssl)) (const SSL * /* ssl */ ,
+                                               int /* type */ ,
+                                               int /* val */ ) {
+    return ssl->info_callback;
+}
+
+void SSL_set_verify_result(SSL *ssl, long arg)
+{
+    ssl->verify_result = arg;
+}
+
+long SSL_get_verify_result(const SSL *ssl)
+{
+    return ssl->verify_result;
+}
+
+size_t SSL_get_client_random(const SSL *ssl, unsigned char *out, size_t outlen)
+{
+    if (outlen == 0)
+        return sizeof(ssl->s3->client_random);
+    if (outlen > sizeof(ssl->s3->client_random))
+        outlen = sizeof(ssl->s3->client_random);
+    memcpy(out, ssl->s3->client_random, outlen);
+    return outlen;
+}
+
+size_t SSL_get_server_random(const SSL *ssl, unsigned char *out, size_t outlen)
+{
+    if (outlen == 0)
+        return sizeof(ssl->s3->server_random);
+    if (outlen > sizeof(ssl->s3->server_random))
+        outlen = sizeof(ssl->s3->server_random);
+    memcpy(out, ssl->s3->server_random, outlen);
+    return outlen;
+}
+
+size_t SSL_SESSION_get_master_key(const SSL_SESSION *session,
+                                  unsigned char *out, size_t outlen)
+{
+    if (outlen == 0)
+        return session->master_key_length;
+    if (outlen > session->master_key_length)
+        outlen = session->master_key_length;
+    memcpy(out, session->master_key, outlen);
+    return outlen;
+}
+
+int SSL_SESSION_set1_master_key(SSL_SESSION *sess, const unsigned char *in,
+                                size_t len)
+{
+    if (len > sizeof(sess->master_key))
+        return 0;
+
+    memcpy(sess->master_key, in, len);
+    sess->master_key_length = len;
+    return 1;
+}
+
+
+int SSL_set_ex_data(SSL *s, int idx, void *arg)
+{
+    return CRYPTO_set_ex_data(&s->ex_data, idx, arg);
+}
+
+void *SSL_get_ex_data(const SSL *s, int idx)
+{
+    return CRYPTO_get_ex_data(&s->ex_data, idx);
+}
+
+int SSL_CTX_set_ex_data(SSL_CTX *s, int idx, void *arg)
+{
+    return CRYPTO_set_ex_data(&s->ex_data, idx, arg);
+}
+
+void *SSL_CTX_get_ex_data(const SSL_CTX *s, int idx)
+{
+    return CRYPTO_get_ex_data(&s->ex_data, idx);
+}
+
+X509_STORE *SSL_CTX_get_cert_store(const SSL_CTX *ctx)
+{
+    return ctx->cert_store;
+}
+
+void SSL_CTX_set_cert_store(SSL_CTX *ctx, X509_STORE *store)
+{
+    X509_STORE_free(ctx->cert_store);
+    ctx->cert_store = store;
+}
+
+void SSL_CTX_set1_cert_store(SSL_CTX *ctx, X509_STORE *store)
+{
+    if (store != NULL)
+        X509_STORE_up_ref(store);
+    SSL_CTX_set_cert_store(ctx, store);
+}
+
+int SSL_want(const SSL *s)
+{
+    return s->rwstate;
+}
+
+/**
+ * \brief Set the callback for generating temporary DH keys.
+ * \param ctx the SSL context.
+ * \param dh the callback
+ */
+
+#ifndef OPENSSL_NO_DH
+void SSL_CTX_set_tmp_dh_callback(SSL_CTX *ctx,
+                                 DH *(*dh) (SSL *ssl, int is_export,
+                                            int keylength))
+{
+    SSL_CTX_callback_ctrl(ctx, SSL_CTRL_SET_TMP_DH_CB, (void (*)(void))dh);
+}
+
+void SSL_set_tmp_dh_callback(SSL *ssl, DH *(*dh) (SSL *ssl, int is_export,
+                                                  int keylength))
+{
+    SSL_callback_ctrl(ssl, SSL_CTRL_SET_TMP_DH_CB, (void (*)(void))dh);
+}
+#endif
+
+#ifndef OPENSSL_NO_PSK
+int SSL_CTX_use_psk_identity_hint(SSL_CTX *ctx, const char *identity_hint)
+{
+    if (identity_hint != NULL && strlen(identity_hint) > PSK_MAX_IDENTITY_LEN) {
+        SSLerr(SSL_F_SSL_CTX_USE_PSK_IDENTITY_HINT, SSL_R_DATA_LENGTH_TOO_LONG);
+        return 0;
+    }
+    OPENSSL_free(ctx->cert->psk_identity_hint);
+    if (identity_hint != NULL) {
+        ctx->cert->psk_identity_hint = OPENSSL_strdup(identity_hint);
+        if (ctx->cert->psk_identity_hint == NULL)
+            return 0;
+    } else
+        ctx->cert->psk_identity_hint = NULL;
+    return 1;
+}
+
+int SSL_use_psk_identity_hint(SSL *s, const char *identity_hint)
+{
+    if (s == NULL)
+        return 0;
+
+    if (identity_hint != NULL && strlen(identity_hint) > PSK_MAX_IDENTITY_LEN) {
+        SSLerr(SSL_F_SSL_USE_PSK_IDENTITY_HINT, SSL_R_DATA_LENGTH_TOO_LONG);
+        return 0;
+    }
+    OPENSSL_free(s->cert->psk_identity_hint);
+    if (identity_hint != NULL) {
+        s->cert->psk_identity_hint = OPENSSL_strdup(identity_hint);
+        if (s->cert->psk_identity_hint == NULL)
+            return 0;
+    } else
+        s->cert->psk_identity_hint = NULL;
+    return 1;
+}
+
+const char *SSL_get_psk_identity_hint(const SSL *s)
+{
+    if (s == NULL || s->session == NULL)
+        return NULL;
+    return s->session->psk_identity_hint;
+}
+
+const char *SSL_get_psk_identity(const SSL *s)
+{
+    if (s == NULL || s->session == NULL)
+        return NULL;
+    return s->session->psk_identity;
+}
+
+void SSL_set_psk_client_callback(SSL *s, SSL_psk_client_cb_func cb)
+{
+    s->psk_client_callback = cb;
+}
+
+void SSL_CTX_set_psk_client_callback(SSL_CTX *ctx, SSL_psk_client_cb_func cb)
+{
+    ctx->psk_client_callback = cb;
+}
+
+void SSL_set_psk_server_callback(SSL *s, SSL_psk_server_cb_func cb)
+{
+    s->psk_server_callback = cb;
+}
+
+void SSL_CTX_set_psk_server_callback(SSL_CTX *ctx, SSL_psk_server_cb_func cb)
+{
+    ctx->psk_server_callback = cb;
+}
+#endif
+
+void SSL_set_psk_find_session_callback(SSL *s, SSL_psk_find_session_cb_func cb)
+{
+    s->psk_find_session_cb = cb;
+}
+
+void SSL_CTX_set_psk_find_session_callback(SSL_CTX *ctx,
+                                           SSL_psk_find_session_cb_func cb)
+{
+    ctx->psk_find_session_cb = cb;
+}
+
+void SSL_set_psk_use_session_callback(SSL *s, SSL_psk_use_session_cb_func cb)
+{
+    s->psk_use_session_cb = cb;
+}
+
+void SSL_CTX_set_psk_use_session_callback(SSL_CTX *ctx,
+                                           SSL_psk_use_session_cb_func cb)
+{
+    ctx->psk_use_session_cb = cb;
+}
+
+void SSL_CTX_set_msg_callback(SSL_CTX *ctx,
+                              void (*cb) (int write_p, int version,
+                                          int content_type, const void *buf,
+                                          size_t len, SSL *ssl, void *arg))
+{
+    SSL_CTX_callback_ctrl(ctx, SSL_CTRL_SET_MSG_CALLBACK, (void (*)(void))cb);
+}
+
+void SSL_set_msg_callback(SSL *ssl,
+                          void (*cb) (int write_p, int version,
+                                      int content_type, const void *buf,
+                                      size_t len, SSL *ssl, void *arg))
+{
+    SSL_callback_ctrl(ssl, SSL_CTRL_SET_MSG_CALLBACK, (void (*)(void))cb);
+}
+
+void SSL_CTX_set_not_resumable_session_callback(SSL_CTX *ctx,
+                                                int (*cb) (SSL *ssl,
+                                                           int
+                                                           is_forward_secure))
+{
+    SSL_CTX_callback_ctrl(ctx, SSL_CTRL_SET_NOT_RESUMABLE_SESS_CB,
+                          (void (*)(void))cb);
+}
+
+void SSL_set_not_resumable_session_callback(SSL *ssl,
+                                            int (*cb) (SSL *ssl,
+                                                       int is_forward_secure))
+{
+    SSL_callback_ctrl(ssl, SSL_CTRL_SET_NOT_RESUMABLE_SESS_CB,
+                      (void (*)(void))cb);
+}
+
+void SSL_CTX_set_record_padding_callback(SSL_CTX *ctx,
+                                         size_t (*cb) (SSL *ssl, int type,
+                                                       size_t len, void *arg))
+{
+    ctx->record_padding_cb = cb;
+}
+
+void SSL_CTX_set_record_padding_callback_arg(SSL_CTX *ctx, void *arg)
+{
+    ctx->record_padding_arg = arg;
+}
+
+void *SSL_CTX_get_record_padding_callback_arg(const SSL_CTX *ctx)
+{
+    return ctx->record_padding_arg;
+}
+
+int SSL_CTX_set_block_padding(SSL_CTX *ctx, size_t block_size)
+{
+    /* block size of 0 or 1 is basically no padding */
+    if (block_size == 1)
+        ctx->block_padding = 0;
+    else if (block_size <= SSL3_RT_MAX_PLAIN_LENGTH)
+        ctx->block_padding = block_size;
+    else
+        return 0;
+    return 1;
+}
+
+void SSL_set_record_padding_callback(SSL *ssl,
+                                     size_t (*cb) (SSL *ssl, int type,
+                                                   size_t len, void *arg))
+{
+    ssl->record_padding_cb = cb;
+}
+
+void SSL_set_record_padding_callback_arg(SSL *ssl, void *arg)
+{
+    ssl->record_padding_arg = arg;
+}
+
+void *SSL_get_record_padding_callback_arg(const SSL *ssl)
+{
+    return ssl->record_padding_arg;
+}
+
+int SSL_set_block_padding(SSL *ssl, size_t block_size)
+{
+    /* block size of 0 or 1 is basically no padding */
+    if (block_size == 1)
+        ssl->block_padding = 0;
+    else if (block_size <= SSL3_RT_MAX_PLAIN_LENGTH)
+        ssl->block_padding = block_size;
+    else
+        return 0;
+    return 1;
+}
+
+int SSL_set_num_tickets(SSL *s, size_t num_tickets)
+{
+    s->num_tickets = num_tickets;
+
+    return 1;
+}
+
+size_t SSL_get_num_tickets(const SSL *s)
+{
+    return s->num_tickets;
+}
+
+int SSL_CTX_set_num_tickets(SSL_CTX *ctx, size_t num_tickets)
+{
+    ctx->num_tickets = num_tickets;
+
+    return 1;
+}
+
+size_t SSL_CTX_get_num_tickets(const SSL_CTX *ctx)
+{
+    return ctx->num_tickets;
+}
+
+/*
+ * Allocates new EVP_MD_CTX and sets pointer to it into given pointer
+ * variable, freeing EVP_MD_CTX previously stored in that variable, if any.
+ * If EVP_MD pointer is passed, initializes ctx with this |md|.
+ * Returns the newly allocated ctx;
+ */
+
+EVP_MD_CTX *ssl_replace_hash(EVP_MD_CTX **hash, const EVP_MD *md)
+{
+    ssl_clear_hash_ctx(hash);
+    *hash = EVP_MD_CTX_new();
+    if (*hash == NULL || (md && EVP_DigestInit_ex(*hash, md, NULL) <= 0)) {
+        EVP_MD_CTX_free(*hash);
+        *hash = NULL;
+        return NULL;
+    }
+    return *hash;
+}
+
+void ssl_clear_hash_ctx(EVP_MD_CTX **hash)
+{
+
+    EVP_MD_CTX_free(*hash);
+    *hash = NULL;
+}
+
+/* Retrieve handshake hashes */
+int ssl_handshake_hash(SSL *s, unsigned char *out, size_t outlen,
+                       size_t *hashlen)
+{
+    EVP_MD_CTX *ctx = NULL;
+    EVP_MD_CTX *hdgst = s->s3->handshake_dgst;
+    int hashleni = EVP_MD_CTX_size(hdgst);
+    int ret = 0;
+
+    if (hashleni < 0 || (size_t)hashleni > outlen) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_HANDSHAKE_HASH,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    ctx = EVP_MD_CTX_new();
+    if (ctx == NULL)
+        goto err;
+
+    if (!EVP_MD_CTX_copy_ex(ctx, hdgst)
+        || EVP_DigestFinal_ex(ctx, out, NULL) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_HANDSHAKE_HASH,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    *hashlen = hashleni;
+
+    ret = 1;
+ err:
+    EVP_MD_CTX_free(ctx);
+    return ret;
+}
+
+int SSL_session_reused(SSL *s)
+{
+    return s->hit;
+}
+
+int SSL_is_server(const SSL *s)
+{
+    return s->server;
+}
+
+#if OPENSSL_API_COMPAT < 0x10100000L
+void SSL_set_debug(SSL *s, int debug)
+{
+    /* Old function was do-nothing anyway... */
+    (void)s;
+    (void)debug;
+}
+#endif
+
+void SSL_set_security_level(SSL *s, int level)
+{
+    s->cert->sec_level = level;
+}
+
+int SSL_get_security_level(const SSL *s)
+{
+    return s->cert->sec_level;
+}
+
+void SSL_set_security_callback(SSL *s,
+                               int (*cb) (const SSL *s, const SSL_CTX *ctx,
+                                          int op, int bits, int nid,
+                                          void *other, void *ex))
+{
+    s->cert->sec_cb = cb;
+}
+
+int (*SSL_get_security_callback(const SSL *s)) (const SSL *s,
+                                                const SSL_CTX *ctx, int op,
+                                                int bits, int nid, void *other,
+                                                void *ex) {
+    return s->cert->sec_cb;
+}
+
+void SSL_set0_security_ex_data(SSL *s, void *ex)
+{
+    s->cert->sec_ex = ex;
+}
+
+void *SSL_get0_security_ex_data(const SSL *s)
+{
+    return s->cert->sec_ex;
+}
+
+void SSL_CTX_set_security_level(SSL_CTX *ctx, int level)
+{
+    ctx->cert->sec_level = level;
+}
+
+int SSL_CTX_get_security_level(const SSL_CTX *ctx)
+{
+    return ctx->cert->sec_level;
+}
+
+void SSL_CTX_set_security_callback(SSL_CTX *ctx,
+                                   int (*cb) (const SSL *s, const SSL_CTX *ctx,
+                                              int op, int bits, int nid,
+                                              void *other, void *ex))
+{
+    ctx->cert->sec_cb = cb;
+}
+
+int (*SSL_CTX_get_security_callback(const SSL_CTX *ctx)) (const SSL *s,
+                                                          const SSL_CTX *ctx,
+                                                          int op, int bits,
+                                                          int nid,
+                                                          void *other,
+                                                          void *ex) {
+    return ctx->cert->sec_cb;
+}
+
+void SSL_CTX_set0_security_ex_data(SSL_CTX *ctx, void *ex)
+{
+    ctx->cert->sec_ex = ex;
+}
+
+void *SSL_CTX_get0_security_ex_data(const SSL_CTX *ctx)
+{
+    return ctx->cert->sec_ex;
+}
+
+/*
+ * Get/Set/Clear options in SSL_CTX or SSL, formerly macros, now functions that
+ * can return unsigned long, instead of the generic long return value from the
+ * control interface.
+ */
+unsigned long SSL_CTX_get_options(const SSL_CTX *ctx)
+{
+    return ctx->options;
+}
+
+unsigned long SSL_get_options(const SSL *s)
+{
+    return s->options;
+}
+
+unsigned long SSL_CTX_set_options(SSL_CTX *ctx, unsigned long op)
+{
+    return ctx->options |= op;
+}
+
+unsigned long SSL_set_options(SSL *s, unsigned long op)
+{
+    return s->options |= op;
+}
+
+unsigned long SSL_CTX_clear_options(SSL_CTX *ctx, unsigned long op)
+{
+    return ctx->options &= ~op;
+}
+
+unsigned long SSL_clear_options(SSL *s, unsigned long op)
+{
+    return s->options &= ~op;
+}
+
+STACK_OF(X509) *SSL_get0_verified_chain(const SSL *s)
+{
+    return s->verified_chain;
+}
+
+IMPLEMENT_OBJ_BSEARCH_GLOBAL_CMP_FN(SSL_CIPHER, SSL_CIPHER, ssl_cipher_id);
+
+#ifndef OPENSSL_NO_CT
+
+/*
+ * Moves SCTs from the |src| stack to the |dst| stack.
+ * The source of each SCT will be set to |origin|.
+ * If |dst| points to a NULL pointer, a new stack will be created and owned by
+ * the caller.
+ * Returns the number of SCTs moved, or a negative integer if an error occurs.
+ */
+static int ct_move_scts(STACK_OF(SCT) **dst, STACK_OF(SCT) *src,
+                        sct_source_t origin)
+{
+    int scts_moved = 0;
+    SCT *sct = NULL;
+
+    if (*dst == NULL) {
+        *dst = sk_SCT_new_null();
+        if (*dst == NULL) {
+            SSLerr(SSL_F_CT_MOVE_SCTS, ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+    }
+
+    while ((sct = sk_SCT_pop(src)) != NULL) {
+        if (SCT_set_source(sct, origin) != 1)
+            goto err;
+
+        if (sk_SCT_push(*dst, sct) <= 0)
+            goto err;
+        scts_moved += 1;
+    }
+
+    return scts_moved;
+ err:
+    if (sct != NULL)
+        sk_SCT_push(src, sct);  /* Put the SCT back */
+    return -1;
+}
+
+/*
+ * Look for data collected during ServerHello and parse if found.
+ * Returns the number of SCTs extracted.
+ */
+static int ct_extract_tls_extension_scts(SSL *s)
+{
+    int scts_extracted = 0;
+
+    if (s->ext.scts != NULL) {
+        const unsigned char *p = s->ext.scts;
+        STACK_OF(SCT) *scts = o2i_SCT_LIST(NULL, &p, s->ext.scts_len);
+
+        scts_extracted = ct_move_scts(&s->scts, scts, SCT_SOURCE_TLS_EXTENSION);
+
+        SCT_LIST_free(scts);
+    }
+
+    return scts_extracted;
+}
+
+/*
+ * Checks for an OCSP response and then attempts to extract any SCTs found if it
+ * contains an SCT X509 extension. They will be stored in |s->scts|.
+ * Returns:
+ * - The number of SCTs extracted, assuming an OCSP response exists.
+ * - 0 if no OCSP response exists or it contains no SCTs.
+ * - A negative integer if an error occurs.
+ */
+static int ct_extract_ocsp_response_scts(SSL *s)
+{
+# ifndef OPENSSL_NO_OCSP
+    int scts_extracted = 0;
+    const unsigned char *p;
+    OCSP_BASICRESP *br = NULL;
+    OCSP_RESPONSE *rsp = NULL;
+    STACK_OF(SCT) *scts = NULL;
+    int i;
+
+    if (s->ext.ocsp.resp == NULL || s->ext.ocsp.resp_len == 0)
+        goto err;
+
+    p = s->ext.ocsp.resp;
+    rsp = d2i_OCSP_RESPONSE(NULL, &p, (int)s->ext.ocsp.resp_len);
+    if (rsp == NULL)
+        goto err;
+
+    br = OCSP_response_get1_basic(rsp);
+    if (br == NULL)
+        goto err;
+
+    for (i = 0; i < OCSP_resp_count(br); ++i) {
+        OCSP_SINGLERESP *single = OCSP_resp_get0(br, i);
+
+        if (single == NULL)
+            continue;
+
+        scts =
+            OCSP_SINGLERESP_get1_ext_d2i(single, NID_ct_cert_scts, NULL, NULL);
+        scts_extracted =
+            ct_move_scts(&s->scts, scts, SCT_SOURCE_OCSP_STAPLED_RESPONSE);
+        if (scts_extracted < 0)
+            goto err;
+    }
+ err:
+    SCT_LIST_free(scts);
+    OCSP_BASICRESP_free(br);
+    OCSP_RESPONSE_free(rsp);
+    return scts_extracted;
+# else
+    /* Behave as if no OCSP response exists */
+    return 0;
+# endif
+}
+
+/*
+ * Attempts to extract SCTs from the peer certificate.
+ * Return the number of SCTs extracted, or a negative integer if an error
+ * occurs.
+ */
+static int ct_extract_x509v3_extension_scts(SSL *s)
+{
+    int scts_extracted = 0;
+    X509 *cert = s->session != NULL ? s->session->peer : NULL;
+
+    if (cert != NULL) {
+        STACK_OF(SCT) *scts =
+            X509_get_ext_d2i(cert, NID_ct_precert_scts, NULL, NULL);
+
+        scts_extracted =
+            ct_move_scts(&s->scts, scts, SCT_SOURCE_X509V3_EXTENSION);
+
+        SCT_LIST_free(scts);
+    }
+
+    return scts_extracted;
+}
+
+/*
+ * Attempts to find all received SCTs by checking TLS extensions, the OCSP
+ * response (if it exists) and X509v3 extensions in the certificate.
+ * Returns NULL if an error occurs.
+ */
+const STACK_OF(SCT) *SSL_get0_peer_scts(SSL *s)
+{
+    if (!s->scts_parsed) {
+        if (ct_extract_tls_extension_scts(s) < 0 ||
+            ct_extract_ocsp_response_scts(s) < 0 ||
+            ct_extract_x509v3_extension_scts(s) < 0)
+            goto err;
+
+        s->scts_parsed = 1;
+    }
+    return s->scts;
+ err:
+    return NULL;
+}
+
+static int ct_permissive(const CT_POLICY_EVAL_CTX * ctx,
+                         const STACK_OF(SCT) *scts, void *unused_arg)
+{
+    return 1;
+}
+
+static int ct_strict(const CT_POLICY_EVAL_CTX * ctx,
+                     const STACK_OF(SCT) *scts, void *unused_arg)
+{
+    int count = scts != NULL ? sk_SCT_num(scts) : 0;
+    int i;
+
+    for (i = 0; i < count; ++i) {
+        SCT *sct = sk_SCT_value(scts, i);
+        int status = SCT_get_validation_status(sct);
+
+        if (status == SCT_VALIDATION_STATUS_VALID)
+            return 1;
+    }
+    SSLerr(SSL_F_CT_STRICT, SSL_R_NO_VALID_SCTS);
+    return 0;
+}
+
+int SSL_set_ct_validation_callback(SSL *s, ssl_ct_validation_cb callback,
+                                   void *arg)
+{
+    /*
+     * Since code exists that uses the custom extension handler for CT, look
+     * for this and throw an error if they have already registered to use CT.
+     */
+    if (callback != NULL && SSL_CTX_has_client_custom_ext(s->ctx,
+                                                          TLSEXT_TYPE_signed_certificate_timestamp))
+    {
+        SSLerr(SSL_F_SSL_SET_CT_VALIDATION_CALLBACK,
+               SSL_R_CUSTOM_EXT_HANDLER_ALREADY_INSTALLED);
+        return 0;
+    }
+
+    if (callback != NULL) {
+        /*
+         * If we are validating CT, then we MUST accept SCTs served via OCSP
+         */
+        if (!SSL_set_tlsext_status_type(s, TLSEXT_STATUSTYPE_ocsp))
+            return 0;
+    }
+
+    s->ct_validation_callback = callback;
+    s->ct_validation_callback_arg = arg;
+
+    return 1;
+}
+
+int SSL_CTX_set_ct_validation_callback(SSL_CTX *ctx,
+                                       ssl_ct_validation_cb callback, void *arg)
+{
+    /*
+     * Since code exists that uses the custom extension handler for CT, look for
+     * this and throw an error if they have already registered to use CT.
+     */
+    if (callback != NULL && SSL_CTX_has_client_custom_ext(ctx,
+                                                          TLSEXT_TYPE_signed_certificate_timestamp))
+    {
+        SSLerr(SSL_F_SSL_CTX_SET_CT_VALIDATION_CALLBACK,
+               SSL_R_CUSTOM_EXT_HANDLER_ALREADY_INSTALLED);
+        return 0;
+    }
+
+    ctx->ct_validation_callback = callback;
+    ctx->ct_validation_callback_arg = arg;
+    return 1;
+}
+
+int SSL_ct_is_enabled(const SSL *s)
+{
+    return s->ct_validation_callback != NULL;
+}
+
+int SSL_CTX_ct_is_enabled(const SSL_CTX *ctx)
+{
+    return ctx->ct_validation_callback != NULL;
+}
+
+int ssl_validate_ct(SSL *s)
+{
+    int ret = 0;
+    X509 *cert = s->session != NULL ? s->session->peer : NULL;
+    X509 *issuer;
+    SSL_DANE *dane = &s->dane;
+    CT_POLICY_EVAL_CTX *ctx = NULL;
+    const STACK_OF(SCT) *scts;
+
+    /*
+     * If no callback is set, the peer is anonymous, or its chain is invalid,
+     * skip SCT validation - just return success.  Applications that continue
+     * handshakes without certificates, with unverified chains, or pinned leaf
+     * certificates are outside the scope of the WebPKI and CT.
+     *
+     * The above exclusions notwithstanding the vast majority of peers will
+     * have rather ordinary certificate chains validated by typical
+     * applications that perform certificate verification and therefore will
+     * process SCTs when enabled.
+     */
+    if (s->ct_validation_callback == NULL || cert == NULL ||
+        s->verify_result != X509_V_OK ||
+        s->verified_chain == NULL || sk_X509_num(s->verified_chain) <= 1)
+        return 1;
+
+    /*
+     * CT not applicable for chains validated via DANE-TA(2) or DANE-EE(3)
+     * trust-anchors.  See https://tools.ietf.org/html/rfc7671#section-4.2
+     */
+    if (DANETLS_ENABLED(dane) && dane->mtlsa != NULL) {
+        switch (dane->mtlsa->usage) {
+        case DANETLS_USAGE_DANE_TA:
+        case DANETLS_USAGE_DANE_EE:
+            return 1;
+        }
+    }
+
+    ctx = CT_POLICY_EVAL_CTX_new();
+    if (ctx == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_VALIDATE_CT,
+                 ERR_R_MALLOC_FAILURE);
+        goto end;
+    }
+
+    issuer = sk_X509_value(s->verified_chain, 1);
+    CT_POLICY_EVAL_CTX_set1_cert(ctx, cert);
+    CT_POLICY_EVAL_CTX_set1_issuer(ctx, issuer);
+    CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE(ctx, s->ctx->ctlog_store);
+    CT_POLICY_EVAL_CTX_set_time(
+            ctx, (uint64_t)SSL_SESSION_get_time(SSL_get0_session(s)) * 1000);
+
+    scts = SSL_get0_peer_scts(s);
+
+    /*
+     * This function returns success (> 0) only when all the SCTs are valid, 0
+     * when some are invalid, and < 0 on various internal errors (out of
+     * memory, etc.).  Having some, or even all, invalid SCTs is not sufficient
+     * reason to abort the handshake, that decision is up to the callback.
+     * Therefore, we error out only in the unexpected case that the return
+     * value is negative.
+     *
+     * XXX: One might well argue that the return value of this function is an
+     * unfortunate design choice.  Its job is only to determine the validation
+     * status of each of the provided SCTs.  So long as it correctly separates
+     * the wheat from the chaff it should return success.  Failure in this case
+     * ought to correspond to an inability to carry out its duties.
+     */
+    if (SCT_LIST_validate(scts, ctx) < 0) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_SSL_VALIDATE_CT,
+                 SSL_R_SCT_VERIFICATION_FAILED);
+        goto end;
+    }
+
+    ret = s->ct_validation_callback(ctx, scts, s->ct_validation_callback_arg);
+    if (ret < 0)
+        ret = 0;                /* This function returns 0 on failure */
+    if (!ret)
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_SSL_VALIDATE_CT,
+                 SSL_R_CALLBACK_FAILED);
+
+ end:
+    CT_POLICY_EVAL_CTX_free(ctx);
+    /*
+     * With SSL_VERIFY_NONE the session may be cached and re-used despite a
+     * failure return code here.  Also the application may wish the complete
+     * the handshake, and then disconnect cleanly at a higher layer, after
+     * checking the verification status of the completed connection.
+     *
+     * We therefore force a certificate verification failure which will be
+     * visible via SSL_get_verify_result() and cached as part of any resumed
+     * session.
+     *
+     * Note: the permissive callback is for information gathering only, always
+     * returns success, and does not affect verification status.  Only the
+     * strict callback or a custom application-specified callback can trigger
+     * connection failure or record a verification error.
+     */
+    if (ret <= 0)
+        s->verify_result = X509_V_ERR_NO_VALID_SCTS;
+    return ret;
+}
+
+int SSL_CTX_enable_ct(SSL_CTX *ctx, int validation_mode)
+{
+    switch (validation_mode) {
+    default:
+        SSLerr(SSL_F_SSL_CTX_ENABLE_CT, SSL_R_INVALID_CT_VALIDATION_TYPE);
+        return 0;
+    case SSL_CT_VALIDATION_PERMISSIVE:
+        return SSL_CTX_set_ct_validation_callback(ctx, ct_permissive, NULL);
+    case SSL_CT_VALIDATION_STRICT:
+        return SSL_CTX_set_ct_validation_callback(ctx, ct_strict, NULL);
+    }
+}
+
+int SSL_enable_ct(SSL *s, int validation_mode)
+{
+    switch (validation_mode) {
+    default:
+        SSLerr(SSL_F_SSL_ENABLE_CT, SSL_R_INVALID_CT_VALIDATION_TYPE);
+        return 0;
+    case SSL_CT_VALIDATION_PERMISSIVE:
+        return SSL_set_ct_validation_callback(s, ct_permissive, NULL);
+    case SSL_CT_VALIDATION_STRICT:
+        return SSL_set_ct_validation_callback(s, ct_strict, NULL);
+    }
+}
+
+int SSL_CTX_set_default_ctlog_list_file(SSL_CTX *ctx)
+{
+    return CTLOG_STORE_load_default_file(ctx->ctlog_store);
+}
+
+int SSL_CTX_set_ctlog_list_file(SSL_CTX *ctx, const char *path)
+{
+    return CTLOG_STORE_load_file(ctx->ctlog_store, path);
+}
+
+void SSL_CTX_set0_ctlog_store(SSL_CTX *ctx, CTLOG_STORE * logs)
+{
+    CTLOG_STORE_free(ctx->ctlog_store);
+    ctx->ctlog_store = logs;
+}
+
+const CTLOG_STORE *SSL_CTX_get0_ctlog_store(const SSL_CTX *ctx)
+{
+    return ctx->ctlog_store;
+}
+
+#endif  /* OPENSSL_NO_CT */
+
+void SSL_CTX_set_client_hello_cb(SSL_CTX *c, SSL_client_hello_cb_fn cb,
+                                 void *arg)
+{
+    c->client_hello_cb = cb;
+    c->client_hello_cb_arg = arg;
+}
+
+int SSL_client_hello_isv2(SSL *s)
+{
+    if (s->clienthello == NULL)
+        return 0;
+    return s->clienthello->isv2;
+}
+
+unsigned int SSL_client_hello_get0_legacy_version(SSL *s)
+{
+    if (s->clienthello == NULL)
+        return 0;
+    return s->clienthello->legacy_version;
+}
+
+size_t SSL_client_hello_get0_random(SSL *s, const unsigned char **out)
+{
+    if (s->clienthello == NULL)
+        return 0;
+    if (out != NULL)
+        *out = s->clienthello->random;
+    return SSL3_RANDOM_SIZE;
+}
+
+size_t SSL_client_hello_get0_session_id(SSL *s, const unsigned char **out)
+{
+    if (s->clienthello == NULL)
+        return 0;
+    if (out != NULL)
+        *out = s->clienthello->session_id;
+    return s->clienthello->session_id_len;
+}
+
+size_t SSL_client_hello_get0_ciphers(SSL *s, const unsigned char **out)
+{
+    if (s->clienthello == NULL)
+        return 0;
+    if (out != NULL)
+        *out = PACKET_data(&s->clienthello->ciphersuites);
+    return PACKET_remaining(&s->clienthello->ciphersuites);
+}
+
+size_t SSL_client_hello_get0_compression_methods(SSL *s, const unsigned char **out)
+{
+    if (s->clienthello == NULL)
+        return 0;
+    if (out != NULL)
+        *out = s->clienthello->compressions;
+    return s->clienthello->compressions_len;
+}
+
+int SSL_client_hello_get1_extensions_present(SSL *s, int **out, size_t *outlen)
+{
+    RAW_EXTENSION *ext;
+    int *present;
+    size_t num = 0, i;
+
+    if (s->clienthello == NULL || out == NULL || outlen == NULL)
+        return 0;
+    for (i = 0; i < s->clienthello->pre_proc_exts_len; i++) {
+        ext = s->clienthello->pre_proc_exts + i;
+        if (ext->present)
+            num++;
+    }
+    if ((present = OPENSSL_malloc(sizeof(*present) * num)) == NULL) {
+        SSLerr(SSL_F_SSL_CLIENT_HELLO_GET1_EXTENSIONS_PRESENT,
+               ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    for (i = 0; i < s->clienthello->pre_proc_exts_len; i++) {
+        ext = s->clienthello->pre_proc_exts + i;
+        if (ext->present) {
+            if (ext->received_order >= num)
+                goto err;
+            present[ext->received_order] = ext->type;
+        }
+    }
+    *out = present;
+    *outlen = num;
+    return 1;
+ err:
+    OPENSSL_free(present);
+    return 0;
+}
+
+int SSL_client_hello_get0_ext(SSL *s, unsigned int type, const unsigned char **out,
+                       size_t *outlen)
+{
+    size_t i;
+    RAW_EXTENSION *r;
+
+    if (s->clienthello == NULL)
+        return 0;
+    for (i = 0; i < s->clienthello->pre_proc_exts_len; ++i) {
+        r = s->clienthello->pre_proc_exts + i;
+        if (r->present && r->type == type) {
+            if (out != NULL)
+                *out = PACKET_data(&r->data);
+            if (outlen != NULL)
+                *outlen = PACKET_remaining(&r->data);
+            return 1;
+        }
+    }
+    return 0;
+}
+
+int SSL_free_buffers(SSL *ssl)
+{
+    RECORD_LAYER *rl = &ssl->rlayer;
+
+    if (RECORD_LAYER_read_pending(rl) || RECORD_LAYER_write_pending(rl))
+        return 0;
+
+    RECORD_LAYER_release(rl);
+    return 1;
+}
+
+int SSL_alloc_buffers(SSL *ssl)
+{
+    return ssl3_setup_buffers(ssl);
+}
+
+void SSL_CTX_set_keylog_callback(SSL_CTX *ctx, SSL_CTX_keylog_cb_func cb)
+{
+    ctx->keylog_callback = cb;
+}
+
+SSL_CTX_keylog_cb_func SSL_CTX_get_keylog_callback(const SSL_CTX *ctx)
+{
+    return ctx->keylog_callback;
+}
+
+static int nss_keylog_int(const char *prefix,
+                          SSL *ssl,
+                          const uint8_t *parameter_1,
+                          size_t parameter_1_len,
+                          const uint8_t *parameter_2,
+                          size_t parameter_2_len)
+{
+    char *out = NULL;
+    char *cursor = NULL;
+    size_t out_len = 0;
+    size_t i;
+    size_t prefix_len;
+
+    if (ssl->ctx->keylog_callback == NULL)
+        return 1;
+
+    /*
+     * Our output buffer will contain the following strings, rendered with
+     * space characters in between, terminated by a NULL character: first the
+     * prefix, then the first parameter, then the second parameter. The
+     * meaning of each parameter depends on the specific key material being
+     * logged. Note that the first and second parameters are encoded in
+     * hexadecimal, so we need a buffer that is twice their lengths.
+     */
+    prefix_len = strlen(prefix);
+    out_len = prefix_len + (2 * parameter_1_len) + (2 * parameter_2_len) + 3;
+    if ((out = cursor = OPENSSL_malloc(out_len)) == NULL) {
+        SSLfatal(ssl, SSL_AD_INTERNAL_ERROR, SSL_F_NSS_KEYLOG_INT,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    strcpy(cursor, prefix);
+    cursor += prefix_len;
+    *cursor++ = ' ';
+
+    for (i = 0; i < parameter_1_len; i++) {
+        sprintf(cursor, "%02x", parameter_1[i]);
+        cursor += 2;
+    }
+    *cursor++ = ' ';
+
+    for (i = 0; i < parameter_2_len; i++) {
+        sprintf(cursor, "%02x", parameter_2[i]);
+        cursor += 2;
+    }
+    *cursor = '\0';
+
+    ssl->ctx->keylog_callback(ssl, (const char *)out);
+    OPENSSL_clear_free(out, out_len);
+    return 1;
+
+}
+
+int ssl_log_rsa_client_key_exchange(SSL *ssl,
+                                    const uint8_t *encrypted_premaster,
+                                    size_t encrypted_premaster_len,
+                                    const uint8_t *premaster,
+                                    size_t premaster_len)
+{
+    if (encrypted_premaster_len < 8) {
+        SSLfatal(ssl, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_SSL_LOG_RSA_CLIENT_KEY_EXCHANGE, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    /* We only want the first 8 bytes of the encrypted premaster as a tag. */
+    return nss_keylog_int("RSA",
+                          ssl,
+                          encrypted_premaster,
+                          8,
+                          premaster,
+                          premaster_len);
+}
+
+int ssl_log_secret(SSL *ssl,
+                   const char *label,
+                   const uint8_t *secret,
+                   size_t secret_len)
+{
+    return nss_keylog_int(label,
+                          ssl,
+                          ssl->s3->client_random,
+                          SSL3_RANDOM_SIZE,
+                          secret,
+                          secret_len);
+}
+
+#define SSLV2_CIPHER_LEN    3
+
+int ssl_cache_cipherlist(SSL *s, PACKET *cipher_suites, int sslv2format)
+{
+    int n;
+
+    n = sslv2format ? SSLV2_CIPHER_LEN : TLS_CIPHER_LEN;
+
+    if (PACKET_remaining(cipher_suites) == 0) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_SSL_CACHE_CIPHERLIST,
+                 SSL_R_NO_CIPHERS_SPECIFIED);
+        return 0;
+    }
+
+    if (PACKET_remaining(cipher_suites) % n != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_SSL_CACHE_CIPHERLIST,
+                 SSL_R_ERROR_IN_RECEIVED_CIPHER_LIST);
+        return 0;
+    }
+
+    OPENSSL_free(s->s3->tmp.ciphers_raw);
+    s->s3->tmp.ciphers_raw = NULL;
+    s->s3->tmp.ciphers_rawlen = 0;
+
+    if (sslv2format) {
+        size_t numciphers = PACKET_remaining(cipher_suites) / n;
+        PACKET sslv2ciphers = *cipher_suites;
+        unsigned int leadbyte;
+        unsigned char *raw;
+
+        /*
+         * We store the raw ciphers list in SSLv3+ format so we need to do some
+         * preprocessing to convert the list first. If there are any SSLv2 only
+         * ciphersuites with a non-zero leading byte then we are going to
+         * slightly over allocate because we won't store those. But that isn't a
+         * problem.
+         */
+        raw = OPENSSL_malloc(numciphers * TLS_CIPHER_LEN);
+        s->s3->tmp.ciphers_raw = raw;
+        if (raw == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_CACHE_CIPHERLIST,
+                     ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        for (s->s3->tmp.ciphers_rawlen = 0;
+             PACKET_remaining(&sslv2ciphers) > 0;
+             raw += TLS_CIPHER_LEN) {
+            if (!PACKET_get_1(&sslv2ciphers, &leadbyte)
+                    || (leadbyte == 0
+                        && !PACKET_copy_bytes(&sslv2ciphers, raw,
+                                              TLS_CIPHER_LEN))
+                    || (leadbyte != 0
+                        && !PACKET_forward(&sslv2ciphers, TLS_CIPHER_LEN))) {
+                SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_SSL_CACHE_CIPHERLIST,
+                         SSL_R_BAD_PACKET);
+                OPENSSL_free(s->s3->tmp.ciphers_raw);
+                s->s3->tmp.ciphers_raw = NULL;
+                s->s3->tmp.ciphers_rawlen = 0;
+                return 0;
+            }
+            if (leadbyte == 0)
+                s->s3->tmp.ciphers_rawlen += TLS_CIPHER_LEN;
+        }
+    } else if (!PACKET_memdup(cipher_suites, &s->s3->tmp.ciphers_raw,
+                           &s->s3->tmp.ciphers_rawlen)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_CACHE_CIPHERLIST,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    return 1;
+}
+
+int SSL_bytes_to_cipher_list(SSL *s, const unsigned char *bytes, size_t len,
+                             int isv2format, STACK_OF(SSL_CIPHER) **sk,
+                             STACK_OF(SSL_CIPHER) **scsvs)
+{
+    PACKET pkt;
+
+    if (!PACKET_buf_init(&pkt, bytes, len))
+        return 0;
+    return bytes_to_cipher_list(s, &pkt, sk, scsvs, isv2format, 0);
+}
+
+int bytes_to_cipher_list(SSL *s, PACKET *cipher_suites,
+                         STACK_OF(SSL_CIPHER) **skp,
+                         STACK_OF(SSL_CIPHER) **scsvs_out,
+                         int sslv2format, int fatal)
+{
+    const SSL_CIPHER *c;
+    STACK_OF(SSL_CIPHER) *sk = NULL;
+    STACK_OF(SSL_CIPHER) *scsvs = NULL;
+    int n;
+    /* 3 = SSLV2_CIPHER_LEN > TLS_CIPHER_LEN = 2. */
+    unsigned char cipher[SSLV2_CIPHER_LEN];
+
+    n = sslv2format ? SSLV2_CIPHER_LEN : TLS_CIPHER_LEN;
+
+    if (PACKET_remaining(cipher_suites) == 0) {
+        if (fatal)
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_BYTES_TO_CIPHER_LIST,
+                     SSL_R_NO_CIPHERS_SPECIFIED);
+        else
+            SSLerr(SSL_F_BYTES_TO_CIPHER_LIST, SSL_R_NO_CIPHERS_SPECIFIED);
+        return 0;
+    }
+
+    if (PACKET_remaining(cipher_suites) % n != 0) {
+        if (fatal)
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_BYTES_TO_CIPHER_LIST,
+                     SSL_R_ERROR_IN_RECEIVED_CIPHER_LIST);
+        else
+            SSLerr(SSL_F_BYTES_TO_CIPHER_LIST,
+                   SSL_R_ERROR_IN_RECEIVED_CIPHER_LIST);
+        return 0;
+    }
+
+    sk = sk_SSL_CIPHER_new_null();
+    scsvs = sk_SSL_CIPHER_new_null();
+    if (sk == NULL || scsvs == NULL) {
+        if (fatal)
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_BYTES_TO_CIPHER_LIST,
+                     ERR_R_MALLOC_FAILURE);
+        else
+            SSLerr(SSL_F_BYTES_TO_CIPHER_LIST, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    while (PACKET_copy_bytes(cipher_suites, cipher, n)) {
+        /*
+         * SSLv3 ciphers wrapped in an SSLv2-compatible ClientHello have the
+         * first byte set to zero, while true SSLv2 ciphers have a non-zero
+         * first byte. We don't support any true SSLv2 ciphers, so skip them.
+         */
+        if (sslv2format && cipher[0] != '\0')
+            continue;
+
+        /* For SSLv2-compat, ignore leading 0-byte. */
+        c = ssl_get_cipher_by_char(s, sslv2format ? &cipher[1] : cipher, 1);
+        if (c != NULL) {
+            if ((c->valid && !sk_SSL_CIPHER_push(sk, c)) ||
+                (!c->valid && !sk_SSL_CIPHER_push(scsvs, c))) {
+                if (fatal)
+                    SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                             SSL_F_BYTES_TO_CIPHER_LIST, ERR_R_MALLOC_FAILURE);
+                else
+                    SSLerr(SSL_F_BYTES_TO_CIPHER_LIST, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+        }
+    }
+    if (PACKET_remaining(cipher_suites) > 0) {
+        if (fatal)
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_BYTES_TO_CIPHER_LIST,
+                     SSL_R_BAD_LENGTH);
+        else
+            SSLerr(SSL_F_BYTES_TO_CIPHER_LIST, SSL_R_BAD_LENGTH);
+        goto err;
+    }
+
+    if (skp != NULL)
+        *skp = sk;
+    else
+        sk_SSL_CIPHER_free(sk);
+    if (scsvs_out != NULL)
+        *scsvs_out = scsvs;
+    else
+        sk_SSL_CIPHER_free(scsvs);
+    return 1;
+ err:
+    sk_SSL_CIPHER_free(sk);
+    sk_SSL_CIPHER_free(scsvs);
+    return 0;
+}
+
+int SSL_CTX_set_max_early_data(SSL_CTX *ctx, uint32_t max_early_data)
+{
+    ctx->max_early_data = max_early_data;
+
+    return 1;
+}
+
+uint32_t SSL_CTX_get_max_early_data(const SSL_CTX *ctx)
+{
+    return ctx->max_early_data;
+}
+
+int SSL_set_max_early_data(SSL *s, uint32_t max_early_data)
+{
+    s->max_early_data = max_early_data;
+
+    return 1;
+}
+
+uint32_t SSL_get_max_early_data(const SSL *s)
+{
+    return s->max_early_data;
+}
+
+int SSL_CTX_set_recv_max_early_data(SSL_CTX *ctx, uint32_t recv_max_early_data)
+{
+    ctx->recv_max_early_data = recv_max_early_data;
+
+    return 1;
+}
+
+uint32_t SSL_CTX_get_recv_max_early_data(const SSL_CTX *ctx)
+{
+    return ctx->recv_max_early_data;
+}
+
+int SSL_set_recv_max_early_data(SSL *s, uint32_t recv_max_early_data)
+{
+    s->recv_max_early_data = recv_max_early_data;
+
+    return 1;
+}
+
+uint32_t SSL_get_recv_max_early_data(const SSL *s)
+{
+    return s->recv_max_early_data;
+}
+
+__owur unsigned int ssl_get_max_send_fragment(const SSL *ssl)
+{
+    /* Return any active Max Fragment Len extension */
+    if (ssl->session != NULL && USE_MAX_FRAGMENT_LENGTH_EXT(ssl->session))
+        return GET_MAX_FRAGMENT_LENGTH(ssl->session);
+
+    /* return current SSL connection setting */
+    return ssl->max_send_fragment;
+}
+
+__owur unsigned int ssl_get_split_send_fragment(const SSL *ssl)
+{
+    /* Return a value regarding an active Max Fragment Len extension */
+    if (ssl->session != NULL && USE_MAX_FRAGMENT_LENGTH_EXT(ssl->session)
+        && ssl->split_send_fragment > GET_MAX_FRAGMENT_LENGTH(ssl->session))
+        return GET_MAX_FRAGMENT_LENGTH(ssl->session);
+
+    /* else limit |split_send_fragment| to current |max_send_fragment| */
+    if (ssl->split_send_fragment > ssl->max_send_fragment)
+        return ssl->max_send_fragment;
+
+    /* return current SSL connection setting */
+    return ssl->split_send_fragment;
+}
+
+int SSL_stateless(SSL *s)
+{
+    int ret;
+
+    /* Ensure there is no state left over from a previous invocation */
+    if (!SSL_clear(s))
+        return 0;
+
+    ERR_clear_error();
+
+    s->s3->flags |= TLS1_FLAGS_STATELESS;
+    ret = SSL_accept(s);
+    s->s3->flags &= ~TLS1_FLAGS_STATELESS;
+
+    if (ret > 0 && s->ext.cookieok)
+        return 1;
+
+    if (s->hello_retry_request == SSL_HRR_PENDING && !ossl_statem_in_error(s))
+        return 0;
+
+    return -1;
+}
+
+void SSL_CTX_set_post_handshake_auth(SSL_CTX *ctx, int val)
+{
+    ctx->pha_enabled = val;
+}
+
+void SSL_set_post_handshake_auth(SSL *ssl, int val)
+{
+    ssl->pha_enabled = val;
+}
+
+int SSL_verify_client_post_handshake(SSL *ssl)
+{
+    if (!SSL_IS_TLS13(ssl)) {
+        SSLerr(SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, SSL_R_WRONG_SSL_VERSION);
+        return 0;
+    }
+    if (!ssl->server) {
+        SSLerr(SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, SSL_R_NOT_SERVER);
+        return 0;
+    }
+
+    if (!SSL_is_init_finished(ssl)) {
+        SSLerr(SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, SSL_R_STILL_IN_INIT);
+        return 0;
+    }
+
+    switch (ssl->post_handshake_auth) {
+    case SSL_PHA_NONE:
+        SSLerr(SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, SSL_R_EXTENSION_NOT_RECEIVED);
+        return 0;
+    default:
+    case SSL_PHA_EXT_SENT:
+        SSLerr(SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, ERR_R_INTERNAL_ERROR);
+        return 0;
+    case SSL_PHA_EXT_RECEIVED:
+        break;
+    case SSL_PHA_REQUEST_PENDING:
+        SSLerr(SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, SSL_R_REQUEST_PENDING);
+        return 0;
+    case SSL_PHA_REQUESTED:
+        SSLerr(SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, SSL_R_REQUEST_SENT);
+        return 0;
+    }
+
+    ssl->post_handshake_auth = SSL_PHA_REQUEST_PENDING;
+
+    /* checks verify_mode and algorithm_auth */
+    if (!send_certificate_request(ssl)) {
+        ssl->post_handshake_auth = SSL_PHA_EXT_RECEIVED; /* restore on error */
+        SSLerr(SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, SSL_R_INVALID_CONFIG);
+        return 0;
+    }
+
+    ossl_statem_set_in_init(ssl, 1);
+    return 1;
+}
+
+int SSL_CTX_set_session_ticket_cb(SSL_CTX *ctx,
+                                  SSL_CTX_generate_session_ticket_fn gen_cb,
+                                  SSL_CTX_decrypt_session_ticket_fn dec_cb,
+                                  void *arg)
+{
+    ctx->generate_ticket_cb = gen_cb;
+    ctx->decrypt_ticket_cb = dec_cb;
+    ctx->ticket_cb_data = arg;
+    return 1;
+}
+
+void SSL_CTX_set_allow_early_data_cb(SSL_CTX *ctx,
+                                     SSL_allow_early_data_cb_fn cb,
+                                     void *arg)
+{
+    ctx->allow_early_data_cb = cb;
+    ctx->allow_early_data_cb_data = arg;
+}
+
+void SSL_set_allow_early_data_cb(SSL *s,
+                                 SSL_allow_early_data_cb_fn cb,
+                                 void *arg)
+{
+    s->allow_early_data_cb = cb;
+    s->allow_early_data_cb_data = arg;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_locl.h b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_locl.h
new file mode 100644
index 000000000..f326399e0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_locl.h
@@ -0,0 +1,2666 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ * Copyright 2005 Nokia. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_SSL_LOCL_H
+# define HEADER_SSL_LOCL_H
+
+# include "e_os.h"              /* struct timeval for DTLS */
+# include <stdlib.h>
+# include <time.h>
+# include <string.h>
+# include <errno.h>
+
+# include <openssl/buffer.h>
+# include <openssl/comp.h>
+# include <openssl/bio.h>
+# include <openssl/rsa.h>
+# include <openssl/dsa.h>
+# include <openssl/err.h>
+# include <openssl/ssl.h>
+# include <openssl/async.h>
+# include <openssl/symhacks.h>
+# include <openssl/ct.h>
+# include "record/record.h"
+# include "statem/statem.h"
+# include "packet_locl.h"
+# include "internal/dane.h"
+# include "internal/refcount.h"
+# include "internal/tsan_assist.h"
+
+# ifdef OPENSSL_BUILD_SHLIBSSL
+#  undef OPENSSL_EXTERN
+#  define OPENSSL_EXTERN OPENSSL_EXPORT
+# endif
+
+# define c2l(c,l)        (l = ((unsigned long)(*((c)++)))     , \
+                         l|=(((unsigned long)(*((c)++)))<< 8), \
+                         l|=(((unsigned long)(*((c)++)))<<16), \
+                         l|=(((unsigned long)(*((c)++)))<<24))
+
+/* NOTE - c is not incremented as per c2l */
+# define c2ln(c,l1,l2,n) { \
+                        c+=n; \
+                        l1=l2=0; \
+                        switch (n) { \
+                        case 8: l2 =((unsigned long)(*(--(c))))<<24; \
+                        case 7: l2|=((unsigned long)(*(--(c))))<<16; \
+                        case 6: l2|=((unsigned long)(*(--(c))))<< 8; \
+                        case 5: l2|=((unsigned long)(*(--(c))));     \
+                        case 4: l1 =((unsigned long)(*(--(c))))<<24; \
+                        case 3: l1|=((unsigned long)(*(--(c))))<<16; \
+                        case 2: l1|=((unsigned long)(*(--(c))))<< 8; \
+                        case 1: l1|=((unsigned long)(*(--(c))));     \
+                                } \
+                        }
+
+# define l2c(l,c)        (*((c)++)=(unsigned char)(((l)    )&0xff), \
+                         *((c)++)=(unsigned char)(((l)>> 8)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>16)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>24)&0xff))
+
+# define n2l(c,l)        (l =((unsigned long)(*((c)++)))<<24, \
+                         l|=((unsigned long)(*((c)++)))<<16, \
+                         l|=((unsigned long)(*((c)++)))<< 8, \
+                         l|=((unsigned long)(*((c)++))))
+
+# define n2l8(c,l)       (l =((uint64_t)(*((c)++)))<<56, \
+                         l|=((uint64_t)(*((c)++)))<<48, \
+                         l|=((uint64_t)(*((c)++)))<<40, \
+                         l|=((uint64_t)(*((c)++)))<<32, \
+                         l|=((uint64_t)(*((c)++)))<<24, \
+                         l|=((uint64_t)(*((c)++)))<<16, \
+                         l|=((uint64_t)(*((c)++)))<< 8, \
+                         l|=((uint64_t)(*((c)++))))
+
+
+# define l2n(l,c)        (*((c)++)=(unsigned char)(((l)>>24)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>16)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>> 8)&0xff), \
+                         *((c)++)=(unsigned char)(((l)    )&0xff))
+
+# define l2n6(l,c)       (*((c)++)=(unsigned char)(((l)>>40)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>32)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>24)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>16)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>> 8)&0xff), \
+                         *((c)++)=(unsigned char)(((l)    )&0xff))
+
+# define l2n8(l,c)       (*((c)++)=(unsigned char)(((l)>>56)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>48)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>40)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>32)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>24)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>>16)&0xff), \
+                         *((c)++)=(unsigned char)(((l)>> 8)&0xff), \
+                         *((c)++)=(unsigned char)(((l)    )&0xff))
+
+/* NOTE - c is not incremented as per l2c */
+# define l2cn(l1,l2,c,n) { \
+                        c+=n; \
+                        switch (n) { \
+                        case 8: *(--(c))=(unsigned char)(((l2)>>24)&0xff); \
+                        case 7: *(--(c))=(unsigned char)(((l2)>>16)&0xff); \
+                        case 6: *(--(c))=(unsigned char)(((l2)>> 8)&0xff); \
+                        case 5: *(--(c))=(unsigned char)(((l2)    )&0xff); \
+                        case 4: *(--(c))=(unsigned char)(((l1)>>24)&0xff); \
+                        case 3: *(--(c))=(unsigned char)(((l1)>>16)&0xff); \
+                        case 2: *(--(c))=(unsigned char)(((l1)>> 8)&0xff); \
+                        case 1: *(--(c))=(unsigned char)(((l1)    )&0xff); \
+                                } \
+                        }
+
+# define n2s(c,s)        ((s=(((unsigned int)((c)[0]))<< 8)| \
+                             (((unsigned int)((c)[1]))    )),(c)+=2)
+# define s2n(s,c)        (((c)[0]=(unsigned char)(((s)>> 8)&0xff), \
+                           (c)[1]=(unsigned char)(((s)    )&0xff)),(c)+=2)
+
+# define n2l3(c,l)       ((l =(((unsigned long)((c)[0]))<<16)| \
+                              (((unsigned long)((c)[1]))<< 8)| \
+                              (((unsigned long)((c)[2]))    )),(c)+=3)
+
+# define l2n3(l,c)       (((c)[0]=(unsigned char)(((l)>>16)&0xff), \
+                           (c)[1]=(unsigned char)(((l)>> 8)&0xff), \
+                           (c)[2]=(unsigned char)(((l)    )&0xff)),(c)+=3)
+
+/*
+ * DTLS version numbers are strange because they're inverted. Except for
+ * DTLS1_BAD_VER, which should be considered "lower" than the rest.
+ */
+# define dtls_ver_ordinal(v1) (((v1) == DTLS1_BAD_VER) ? 0xff00 : (v1))
+# define DTLS_VERSION_GT(v1, v2) (dtls_ver_ordinal(v1) < dtls_ver_ordinal(v2))
+# define DTLS_VERSION_GE(v1, v2) (dtls_ver_ordinal(v1) <= dtls_ver_ordinal(v2))
+# define DTLS_VERSION_LT(v1, v2) (dtls_ver_ordinal(v1) > dtls_ver_ordinal(v2))
+# define DTLS_VERSION_LE(v1, v2) (dtls_ver_ordinal(v1) >= dtls_ver_ordinal(v2))
+
+
+/*
+ * Define the Bitmasks for SSL_CIPHER.algorithms.
+ * This bits are used packed as dense as possible. If new methods/ciphers
+ * etc will be added, the bits a likely to change, so this information
+ * is for internal library use only, even though SSL_CIPHER.algorithms
+ * can be publicly accessed.
+ * Use the according functions for cipher management instead.
+ *
+ * The bit mask handling in the selection and sorting scheme in
+ * ssl_create_cipher_list() has only limited capabilities, reflecting
+ * that the different entities within are mutually exclusive:
+ * ONLY ONE BIT PER MASK CAN BE SET AT A TIME.
+ */
+
+/* Bits for algorithm_mkey (key exchange algorithm) */
+/* RSA key exchange */
+# define SSL_kRSA                0x00000001U
+/* tmp DH key no DH cert */
+# define SSL_kDHE                0x00000002U
+/* synonym */
+# define SSL_kEDH                SSL_kDHE
+/* ephemeral ECDH */
+# define SSL_kECDHE              0x00000004U
+/* synonym */
+# define SSL_kEECDH              SSL_kECDHE
+/* PSK */
+# define SSL_kPSK                0x00000008U
+/* GOST key exchange */
+# define SSL_kGOST               0x00000010U
+/* SRP */
+# define SSL_kSRP                0x00000020U
+
+# define SSL_kRSAPSK             0x00000040U
+# define SSL_kECDHEPSK           0x00000080U
+# define SSL_kDHEPSK             0x00000100U
+
+/* all PSK */
+
+# define SSL_PSK     (SSL_kPSK | SSL_kRSAPSK | SSL_kECDHEPSK | SSL_kDHEPSK)
+
+/* Any appropriate key exchange algorithm (for TLS 1.3 ciphersuites) */
+# define SSL_kANY                0x00000000U
+
+/* Bits for algorithm_auth (server authentication) */
+/* RSA auth */
+# define SSL_aRSA                0x00000001U
+/* DSS auth */
+# define SSL_aDSS                0x00000002U
+/* no auth (i.e. use ADH or AECDH) */
+# define SSL_aNULL               0x00000004U
+/* ECDSA auth*/
+# define SSL_aECDSA              0x00000008U
+/* PSK auth */
+# define SSL_aPSK                0x00000010U
+/* GOST R 34.10-2001 signature auth */
+# define SSL_aGOST01             0x00000020U
+/* SRP auth */
+# define SSL_aSRP                0x00000040U
+/* GOST R 34.10-2012 signature auth */
+# define SSL_aGOST12             0x00000080U
+/* Any appropriate signature auth (for TLS 1.3 ciphersuites) */
+# define SSL_aANY                0x00000000U
+/* All bits requiring a certificate */
+#define SSL_aCERT \
+    (SSL_aRSA | SSL_aDSS | SSL_aECDSA | SSL_aGOST01 | SSL_aGOST12)
+
+/* Bits for algorithm_enc (symmetric encryption) */
+# define SSL_DES                 0x00000001U
+# define SSL_3DES                0x00000002U
+# define SSL_RC4                 0x00000004U
+# define SSL_RC2                 0x00000008U
+# define SSL_IDEA                0x00000010U
+# define SSL_eNULL               0x00000020U
+# define SSL_AES128              0x00000040U
+# define SSL_AES256              0x00000080U
+# define SSL_CAMELLIA128         0x00000100U
+# define SSL_CAMELLIA256         0x00000200U
+# define SSL_eGOST2814789CNT     0x00000400U
+# define SSL_SEED                0x00000800U
+# define SSL_AES128GCM           0x00001000U
+# define SSL_AES256GCM           0x00002000U
+# define SSL_AES128CCM           0x00004000U
+# define SSL_AES256CCM           0x00008000U
+# define SSL_AES128CCM8          0x00010000U
+# define SSL_AES256CCM8          0x00020000U
+# define SSL_eGOST2814789CNT12   0x00040000U
+# define SSL_CHACHA20POLY1305    0x00080000U
+# define SSL_ARIA128GCM          0x00100000U
+# define SSL_ARIA256GCM          0x00200000U
+
+# define SSL_AESGCM              (SSL_AES128GCM | SSL_AES256GCM)
+# define SSL_AESCCM              (SSL_AES128CCM | SSL_AES256CCM | SSL_AES128CCM8 | SSL_AES256CCM8)
+# define SSL_AES                 (SSL_AES128|SSL_AES256|SSL_AESGCM|SSL_AESCCM)
+# define SSL_CAMELLIA            (SSL_CAMELLIA128|SSL_CAMELLIA256)
+# define SSL_CHACHA20            (SSL_CHACHA20POLY1305)
+# define SSL_ARIAGCM             (SSL_ARIA128GCM | SSL_ARIA256GCM)
+# define SSL_ARIA                (SSL_ARIAGCM)
+
+/* Bits for algorithm_mac (symmetric authentication) */
+
+# define SSL_MD5                 0x00000001U
+# define SSL_SHA1                0x00000002U
+# define SSL_GOST94      0x00000004U
+# define SSL_GOST89MAC   0x00000008U
+# define SSL_SHA256              0x00000010U
+# define SSL_SHA384              0x00000020U
+/* Not a real MAC, just an indication it is part of cipher */
+# define SSL_AEAD                0x00000040U
+# define SSL_GOST12_256          0x00000080U
+# define SSL_GOST89MAC12         0x00000100U
+# define SSL_GOST12_512          0x00000200U
+
+/*
+ * When adding new digest in the ssl_ciph.c and increment SSL_MD_NUM_IDX make
+ * sure to update this constant too
+ */
+
+# define SSL_MD_MD5_IDX  0
+# define SSL_MD_SHA1_IDX 1
+# define SSL_MD_GOST94_IDX 2
+# define SSL_MD_GOST89MAC_IDX 3
+# define SSL_MD_SHA256_IDX 4
+# define SSL_MD_SHA384_IDX 5
+# define SSL_MD_GOST12_256_IDX  6
+# define SSL_MD_GOST89MAC12_IDX 7
+# define SSL_MD_GOST12_512_IDX  8
+# define SSL_MD_MD5_SHA1_IDX 9
+# define SSL_MD_SHA224_IDX 10
+# define SSL_MD_SHA512_IDX 11
+# define SSL_MAX_DIGEST 12
+
+/* Bits for algorithm2 (handshake digests and other extra flags) */
+
+/* Bits 0-7 are handshake MAC */
+# define SSL_HANDSHAKE_MAC_MASK  0xFF
+# define SSL_HANDSHAKE_MAC_MD5_SHA1 SSL_MD_MD5_SHA1_IDX
+# define SSL_HANDSHAKE_MAC_SHA256   SSL_MD_SHA256_IDX
+# define SSL_HANDSHAKE_MAC_SHA384   SSL_MD_SHA384_IDX
+# define SSL_HANDSHAKE_MAC_GOST94 SSL_MD_GOST94_IDX
+# define SSL_HANDSHAKE_MAC_GOST12_256 SSL_MD_GOST12_256_IDX
+# define SSL_HANDSHAKE_MAC_GOST12_512 SSL_MD_GOST12_512_IDX
+# define SSL_HANDSHAKE_MAC_DEFAULT  SSL_HANDSHAKE_MAC_MD5_SHA1
+
+/* Bits 8-15 bits are PRF */
+# define TLS1_PRF_DGST_SHIFT 8
+# define TLS1_PRF_SHA1_MD5 (SSL_MD_MD5_SHA1_IDX << TLS1_PRF_DGST_SHIFT)
+# define TLS1_PRF_SHA256 (SSL_MD_SHA256_IDX << TLS1_PRF_DGST_SHIFT)
+# define TLS1_PRF_SHA384 (SSL_MD_SHA384_IDX << TLS1_PRF_DGST_SHIFT)
+# define TLS1_PRF_GOST94 (SSL_MD_GOST94_IDX << TLS1_PRF_DGST_SHIFT)
+# define TLS1_PRF_GOST12_256 (SSL_MD_GOST12_256_IDX << TLS1_PRF_DGST_SHIFT)
+# define TLS1_PRF_GOST12_512 (SSL_MD_GOST12_512_IDX << TLS1_PRF_DGST_SHIFT)
+# define TLS1_PRF            (SSL_MD_MD5_SHA1_IDX << TLS1_PRF_DGST_SHIFT)
+
+/*
+ * Stream MAC for GOST ciphersuites from cryptopro draft (currently this also
+ * goes into algorithm2)
+ */
+# define TLS1_STREAM_MAC 0x10000
+
+# define SSL_STRONG_MASK         0x0000001FU
+# define SSL_DEFAULT_MASK        0X00000020U
+
+# define SSL_STRONG_NONE         0x00000001U
+# define SSL_LOW                 0x00000002U
+# define SSL_MEDIUM              0x00000004U
+# define SSL_HIGH                0x00000008U
+# define SSL_FIPS                0x00000010U
+# define SSL_NOT_DEFAULT         0x00000020U
+
+/* we have used 0000003f - 26 bits left to go */
+
+/* Flag used on OpenSSL ciphersuite ids to indicate they are for SSLv3+ */
+# define SSL3_CK_CIPHERSUITE_FLAG                0x03000000
+
+/* Check if an SSL structure is using DTLS */
+# define SSL_IS_DTLS(s)  (s->method->ssl3_enc->enc_flags & SSL_ENC_FLAG_DTLS)
+
+/* Check if we are using TLSv1.3 */
+# define SSL_IS_TLS13(s) (!SSL_IS_DTLS(s) \
+                          && (s)->method->version >= TLS1_3_VERSION \
+                          && (s)->method->version != TLS_ANY_VERSION)
+
+# define SSL_TREAT_AS_TLS13(s) \
+    (SSL_IS_TLS13(s) || (s)->early_data_state == SSL_EARLY_DATA_CONNECTING \
+     || (s)->early_data_state == SSL_EARLY_DATA_CONNECT_RETRY \
+     || (s)->early_data_state == SSL_EARLY_DATA_WRITING \
+     || (s)->early_data_state == SSL_EARLY_DATA_WRITE_RETRY \
+     || (s)->hello_retry_request == SSL_HRR_PENDING)
+
+# define SSL_IS_FIRST_HANDSHAKE(S) ((s)->s3->tmp.finish_md_len == 0 \
+                                    || (s)->s3->tmp.peer_finish_md_len == 0)
+
+/* See if we need explicit IV */
+# define SSL_USE_EXPLICIT_IV(s)  \
+                (s->method->ssl3_enc->enc_flags & SSL_ENC_FLAG_EXPLICIT_IV)
+/*
+ * See if we use signature algorithms extension and signature algorithm
+ * before signatures.
+ */
+# define SSL_USE_SIGALGS(s)      \
+                        (s->method->ssl3_enc->enc_flags & SSL_ENC_FLAG_SIGALGS)
+/*
+ * Allow TLS 1.2 ciphersuites: applies to DTLS 1.2 as well as TLS 1.2: may
+ * apply to others in future.
+ */
+# define SSL_USE_TLS1_2_CIPHERS(s)       \
+                (s->method->ssl3_enc->enc_flags & SSL_ENC_FLAG_TLS1_2_CIPHERS)
+/*
+ * Determine if a client can use TLS 1.2 ciphersuites: can't rely on method
+ * flags because it may not be set to correct version yet.
+ */
+# define SSL_CLIENT_USE_TLS1_2_CIPHERS(s)        \
+    ((!SSL_IS_DTLS(s) && s->client_version >= TLS1_2_VERSION) || \
+     (SSL_IS_DTLS(s) && DTLS_VERSION_GE(s->client_version, DTLS1_2_VERSION)))
+/*
+ * Determine if a client should send signature algorithms extension:
+ * as with TLS1.2 cipher we can't rely on method flags.
+ */
+# define SSL_CLIENT_USE_SIGALGS(s)        \
+    SSL_CLIENT_USE_TLS1_2_CIPHERS(s)
+
+# define IS_MAX_FRAGMENT_LENGTH_EXT_VALID(value) \
+    (((value) >= TLSEXT_max_fragment_length_512) && \
+     ((value) <= TLSEXT_max_fragment_length_4096))
+# define USE_MAX_FRAGMENT_LENGTH_EXT(session) \
+    IS_MAX_FRAGMENT_LENGTH_EXT_VALID(session->ext.max_fragment_len_mode)
+# define GET_MAX_FRAGMENT_LENGTH(session) \
+    (512U << (session->ext.max_fragment_len_mode - 1))
+
+# define SSL_READ_ETM(s) (s->s3->flags & TLS1_FLAGS_ENCRYPT_THEN_MAC_READ)
+# define SSL_WRITE_ETM(s) (s->s3->flags & TLS1_FLAGS_ENCRYPT_THEN_MAC_WRITE)
+
+/* Mostly for SSLv3 */
+# define SSL_PKEY_RSA            0
+# define SSL_PKEY_RSA_PSS_SIGN   1
+# define SSL_PKEY_DSA_SIGN       2
+# define SSL_PKEY_ECC            3
+# define SSL_PKEY_GOST01         4
+# define SSL_PKEY_GOST12_256     5
+# define SSL_PKEY_GOST12_512     6
+# define SSL_PKEY_ED25519        7
+# define SSL_PKEY_ED448          8
+# define SSL_PKEY_NUM            9
+
+/*-
+ * SSL_kRSA <- RSA_ENC
+ * SSL_kDH  <- DH_ENC & (RSA_ENC | RSA_SIGN | DSA_SIGN)
+ * SSL_kDHE <- RSA_ENC | RSA_SIGN | DSA_SIGN
+ * SSL_aRSA <- RSA_ENC | RSA_SIGN
+ * SSL_aDSS <- DSA_SIGN
+ */
+
+/*-
+#define CERT_INVALID            0
+#define CERT_PUBLIC_KEY         1
+#define CERT_PRIVATE_KEY        2
+*/
+
+/* Post-Handshake Authentication state */
+typedef enum {
+    SSL_PHA_NONE = 0,
+    SSL_PHA_EXT_SENT,        /* client-side only: extension sent */
+    SSL_PHA_EXT_RECEIVED,    /* server-side only: extension received */
+    SSL_PHA_REQUEST_PENDING, /* server-side only: request pending */
+    SSL_PHA_REQUESTED        /* request received by client, or sent by server */
+} SSL_PHA_STATE;
+
+/* CipherSuite length. SSLv3 and all TLS versions. */
+# define TLS_CIPHER_LEN 2
+/* used to hold info on the particular ciphers used */
+struct ssl_cipher_st {
+    uint32_t valid;
+    const char *name;           /* text name */
+    const char *stdname;        /* RFC name */
+    uint32_t id;                /* id, 4 bytes, first is version */
+    /*
+     * changed in 1.0.0: these four used to be portions of a single value
+     * 'algorithms'
+     */
+    uint32_t algorithm_mkey;    /* key exchange algorithm */
+    uint32_t algorithm_auth;    /* server authentication */
+    uint32_t algorithm_enc;     /* symmetric encryption */
+    uint32_t algorithm_mac;     /* symmetric authentication */
+    int min_tls;                /* minimum SSL/TLS protocol version */
+    int max_tls;                /* maximum SSL/TLS protocol version */
+    int min_dtls;               /* minimum DTLS protocol version */
+    int max_dtls;               /* maximum DTLS protocol version */
+    uint32_t algo_strength;     /* strength and export flags */
+    uint32_t algorithm2;        /* Extra flags */
+    int32_t strength_bits;      /* Number of bits really used */
+    uint32_t alg_bits;          /* Number of bits for algorithm */
+};
+
+/* Used to hold SSL/TLS functions */
+struct ssl_method_st {
+    int version;
+    unsigned flags;
+    unsigned long mask;
+    int (*ssl_new) (SSL *s);
+    int (*ssl_clear) (SSL *s);
+    void (*ssl_free) (SSL *s);
+    int (*ssl_accept) (SSL *s);
+    int (*ssl_connect) (SSL *s);
+    int (*ssl_read) (SSL *s, void *buf, size_t len, size_t *readbytes);
+    int (*ssl_peek) (SSL *s, void *buf, size_t len, size_t *readbytes);
+    int (*ssl_write) (SSL *s, const void *buf, size_t len, size_t *written);
+    int (*ssl_shutdown) (SSL *s);
+    int (*ssl_renegotiate) (SSL *s);
+    int (*ssl_renegotiate_check) (SSL *s, int);
+    int (*ssl_read_bytes) (SSL *s, int type, int *recvd_type,
+                           unsigned char *buf, size_t len, int peek,
+                           size_t *readbytes);
+    int (*ssl_write_bytes) (SSL *s, int type, const void *buf_, size_t len,
+                            size_t *written);
+    int (*ssl_dispatch_alert) (SSL *s);
+    long (*ssl_ctrl) (SSL *s, int cmd, long larg, void *parg);
+    long (*ssl_ctx_ctrl) (SSL_CTX *ctx, int cmd, long larg, void *parg);
+    const SSL_CIPHER *(*get_cipher_by_char) (const unsigned char *ptr);
+    int (*put_cipher_by_char) (const SSL_CIPHER *cipher, WPACKET *pkt,
+                               size_t *len);
+    size_t (*ssl_pending) (const SSL *s);
+    int (*num_ciphers) (void);
+    const SSL_CIPHER *(*get_cipher) (unsigned ncipher);
+    long (*get_timeout) (void);
+    const struct ssl3_enc_method *ssl3_enc; /* Extra SSLv3/TLS stuff */
+    int (*ssl_version) (void);
+    long (*ssl_callback_ctrl) (SSL *s, int cb_id, void (*fp) (void));
+    long (*ssl_ctx_callback_ctrl) (SSL_CTX *s, int cb_id, void (*fp) (void));
+};
+
+/*
+ * Matches the length of PSK_MAX_PSK_LEN. We keep it the same value for
+ * consistency, even in the event of OPENSSL_NO_PSK being defined.
+ */
+# define TLS13_MAX_RESUMPTION_PSK_LENGTH      256
+
+/*-
+ * Lets make this into an ASN.1 type structure as follows
+ * SSL_SESSION_ID ::= SEQUENCE {
+ *      version                 INTEGER,        -- structure version number
+ *      SSLversion              INTEGER,        -- SSL version number
+ *      Cipher                  OCTET STRING,   -- the 3 byte cipher ID
+ *      Session_ID              OCTET STRING,   -- the Session ID
+ *      Master_key              OCTET STRING,   -- the master key
+ *      Key_Arg [ 0 ] IMPLICIT  OCTET STRING,   -- the optional Key argument
+ *      Time [ 1 ] EXPLICIT     INTEGER,        -- optional Start Time
+ *      Timeout [ 2 ] EXPLICIT  INTEGER,        -- optional Timeout ins seconds
+ *      Peer [ 3 ] EXPLICIT     X509,           -- optional Peer Certificate
+ *      Session_ID_context [ 4 ] EXPLICIT OCTET STRING,   -- the Session ID context
+ *      Verify_result [ 5 ] EXPLICIT INTEGER,   -- X509_V_... code for `Peer'
+ *      HostName [ 6 ] EXPLICIT OCTET STRING,   -- optional HostName from servername TLS extension
+ *      PSK_identity_hint [ 7 ] EXPLICIT OCTET STRING, -- optional PSK identity hint
+ *      PSK_identity [ 8 ] EXPLICIT OCTET STRING,  -- optional PSK identity
+ *      Ticket_lifetime_hint [9] EXPLICIT INTEGER, -- server's lifetime hint for session ticket
+ *      Ticket [10]             EXPLICIT OCTET STRING, -- session ticket (clients only)
+ *      Compression_meth [11]   EXPLICIT OCTET STRING, -- optional compression method
+ *      SRP_username [ 12 ] EXPLICIT OCTET STRING -- optional SRP username
+ *      flags [ 13 ] EXPLICIT INTEGER -- optional flags
+ *      }
+ * Look in ssl/ssl_asn1.c for more details
+ * I'm using EXPLICIT tags so I can read the damn things using asn1parse :-).
+ */
+struct ssl_session_st {
+    int ssl_version;            /* what ssl version session info is being kept
+                                 * in here? */
+    size_t master_key_length;
+
+    /* TLSv1.3 early_secret used for external PSKs */
+    unsigned char early_secret[EVP_MAX_MD_SIZE];
+    /*
+     * For <=TLS1.2 this is the master_key. For TLS1.3 this is the resumption
+     * PSK
+     */
+    unsigned char master_key[TLS13_MAX_RESUMPTION_PSK_LENGTH];
+    /* session_id - valid? */
+    size_t session_id_length;
+    unsigned char session_id[SSL_MAX_SSL_SESSION_ID_LENGTH];
+    /*
+     * this is used to determine whether the session is being reused in the
+     * appropriate context. It is up to the application to set this, via
+     * SSL_new
+     */
+    size_t sid_ctx_length;
+    unsigned char sid_ctx[SSL_MAX_SID_CTX_LENGTH];
+# ifndef OPENSSL_NO_PSK
+    char *psk_identity_hint;
+    char *psk_identity;
+# endif
+    /*
+     * Used to indicate that session resumption is not allowed. Applications
+     * can also set this bit for a new session via not_resumable_session_cb
+     * to disable session caching and tickets.
+     */
+    int not_resumable;
+    /* This is the cert and type for the other end. */
+    X509 *peer;
+    int peer_type;
+    /* Certificate chain peer sent. */
+    STACK_OF(X509) *peer_chain;
+    /*
+     * when app_verify_callback accepts a session where the peer's
+     * certificate is not ok, we must remember the error for session reuse:
+     */
+    long verify_result;         /* only for servers */
+    CRYPTO_REF_COUNT references;
+    long timeout;
+    long time;
+    unsigned int compress_meth; /* Need to lookup the method */
+    const SSL_CIPHER *cipher;
+    unsigned long cipher_id;    /* when ASN.1 loaded, this needs to be used to
+                                 * load the 'cipher' structure */
+    STACK_OF(SSL_CIPHER) *ciphers; /* ciphers offered by the client */
+    CRYPTO_EX_DATA ex_data;     /* application specific data */
+    /*
+     * These are used to make removal of session-ids more efficient and to
+     * implement a maximum cache size.
+     */
+    struct ssl_session_st *prev, *next;
+
+    struct {
+        char *hostname;
+# ifndef OPENSSL_NO_EC
+        size_t ecpointformats_len;
+        unsigned char *ecpointformats; /* peer's list */
+# endif                         /* OPENSSL_NO_EC */
+        size_t supportedgroups_len;
+        uint16_t *supportedgroups; /* peer's list */
+    /* RFC4507 info */
+        unsigned char *tick; /* Session ticket */
+        size_t ticklen;      /* Session ticket length */
+        /* Session lifetime hint in seconds */
+        unsigned long tick_lifetime_hint;
+        uint32_t tick_age_add;
+        int tick_identity;
+        /* Max number of bytes that can be sent as early data */
+        uint32_t max_early_data;
+        /* The ALPN protocol selected for this session */
+        unsigned char *alpn_selected;
+        size_t alpn_selected_len;
+        /*
+         * Maximum Fragment Length as per RFC 4366.
+         * If this value does not contain RFC 4366 allowed values (1-4) then
+         * either the Maximum Fragment Length Negotiation failed or was not
+         * performed at all.
+         */
+        uint8_t max_fragment_len_mode;
+    } ext;
+# ifndef OPENSSL_NO_SRP
+    char *srp_username;
+# endif
+    unsigned char *ticket_appdata;
+    size_t ticket_appdata_len;
+    uint32_t flags;
+    CRYPTO_RWLOCK *lock;
+};
+
+/* Extended master secret support */
+# define SSL_SESS_FLAG_EXTMS             0x1
+
+# ifndef OPENSSL_NO_SRP
+
+typedef struct srp_ctx_st {
+    /* param for all the callbacks */
+    void *SRP_cb_arg;
+    /* set client Hello login callback */
+    int (*TLS_ext_srp_username_callback) (SSL *, int *, void *);
+    /* set SRP N/g param callback for verification */
+    int (*SRP_verify_param_callback) (SSL *, void *);
+    /* set SRP client passwd callback */
+    char *(*SRP_give_srp_client_pwd_callback) (SSL *, void *);
+    char *login;
+    BIGNUM *N, *g, *s, *B, *A;
+    BIGNUM *a, *b, *v;
+    char *info;
+    int strength;
+    unsigned long srp_Mask;
+} SRP_CTX;
+
+# endif
+
+typedef enum {
+    SSL_EARLY_DATA_NONE = 0,
+    SSL_EARLY_DATA_CONNECT_RETRY,
+    SSL_EARLY_DATA_CONNECTING,
+    SSL_EARLY_DATA_WRITE_RETRY,
+    SSL_EARLY_DATA_WRITING,
+    SSL_EARLY_DATA_WRITE_FLUSH,
+    SSL_EARLY_DATA_UNAUTH_WRITING,
+    SSL_EARLY_DATA_FINISHED_WRITING,
+    SSL_EARLY_DATA_ACCEPT_RETRY,
+    SSL_EARLY_DATA_ACCEPTING,
+    SSL_EARLY_DATA_READ_RETRY,
+    SSL_EARLY_DATA_READING,
+    SSL_EARLY_DATA_FINISHED_READING
+} SSL_EARLY_DATA_STATE;
+
+/*
+ * We check that the amount of unreadable early data doesn't exceed
+ * max_early_data. max_early_data is given in plaintext bytes. However if it is
+ * unreadable then we only know the number of ciphertext bytes. We also don't
+ * know how much the overhead should be because it depends on the ciphersuite.
+ * We make a small allowance. We assume 5 records of actual data plus the end
+ * of early data alert record. Each record has a tag and a content type byte.
+ * The longest tag length we know of is EVP_GCM_TLS_TAG_LEN. We don't count the
+ * content of the alert record either which is 2 bytes.
+ */
+# define EARLY_DATA_CIPHERTEXT_OVERHEAD ((6 * (EVP_GCM_TLS_TAG_LEN + 1)) + 2)
+
+/*
+ * The allowance we have between the client's calculated ticket age and our own.
+ * We allow for 10 seconds (units are in ms). If a ticket is presented and the
+ * client's age calculation is different by more than this than our own then we
+ * do not allow that ticket for early_data.
+ */
+# define TICKET_AGE_ALLOWANCE   (10 * 1000)
+
+#define MAX_COMPRESSIONS_SIZE   255
+
+struct ssl_comp_st {
+    int id;
+    const char *name;
+    COMP_METHOD *method;
+};
+
+typedef struct raw_extension_st {
+    /* Raw packet data for the extension */
+    PACKET data;
+    /* Set to 1 if the extension is present or 0 otherwise */
+    int present;
+    /* Set to 1 if we have already parsed the extension or 0 otherwise */
+    int parsed;
+    /* The type of this extension, i.e. a TLSEXT_TYPE_* value */
+    unsigned int type;
+    /* Track what order extensions are received in (0-based). */
+    size_t received_order;
+} RAW_EXTENSION;
+
+typedef struct {
+    unsigned int isv2;
+    unsigned int legacy_version;
+    unsigned char random[SSL3_RANDOM_SIZE];
+    size_t session_id_len;
+    unsigned char session_id[SSL_MAX_SSL_SESSION_ID_LENGTH];
+    size_t dtls_cookie_len;
+    unsigned char dtls_cookie[DTLS1_COOKIE_LENGTH];
+    PACKET ciphersuites;
+    size_t compressions_len;
+    unsigned char compressions[MAX_COMPRESSIONS_SIZE];
+    PACKET extensions;
+    size_t pre_proc_exts_len;
+    RAW_EXTENSION *pre_proc_exts;
+} CLIENTHELLO_MSG;
+
+/*
+ * Extension index values NOTE: Any updates to these defines should be mirrored
+ * with equivalent updates to ext_defs in extensions.c
+ */
+typedef enum tlsext_index_en {
+    TLSEXT_IDX_renegotiate,
+    TLSEXT_IDX_server_name,
+    TLSEXT_IDX_max_fragment_length,
+    TLSEXT_IDX_srp,
+    TLSEXT_IDX_ec_point_formats,
+    TLSEXT_IDX_supported_groups,
+    TLSEXT_IDX_session_ticket,
+    TLSEXT_IDX_status_request,
+    TLSEXT_IDX_next_proto_neg,
+    TLSEXT_IDX_application_layer_protocol_negotiation,
+    TLSEXT_IDX_use_srtp,
+    TLSEXT_IDX_encrypt_then_mac,
+    TLSEXT_IDX_signed_certificate_timestamp,
+    TLSEXT_IDX_extended_master_secret,
+    TLSEXT_IDX_signature_algorithms_cert,
+    TLSEXT_IDX_post_handshake_auth,
+    TLSEXT_IDX_signature_algorithms,
+    TLSEXT_IDX_supported_versions,
+    TLSEXT_IDX_psk_kex_modes,
+    TLSEXT_IDX_key_share,
+    TLSEXT_IDX_cookie,
+    TLSEXT_IDX_cryptopro_bug,
+    TLSEXT_IDX_early_data,
+    TLSEXT_IDX_certificate_authorities,
+    TLSEXT_IDX_padding,
+    TLSEXT_IDX_psk,
+    /* Dummy index - must always be the last entry */
+    TLSEXT_IDX_num_builtins
+} TLSEXT_INDEX;
+
+DEFINE_LHASH_OF(SSL_SESSION);
+/* Needed in ssl_cert.c */
+DEFINE_LHASH_OF(X509_NAME);
+
+# define TLSEXT_KEYNAME_LENGTH  16
+# define TLSEXT_TICK_KEY_LENGTH 32
+
+typedef struct ssl_ctx_ext_secure_st {
+    unsigned char tick_hmac_key[TLSEXT_TICK_KEY_LENGTH];
+    unsigned char tick_aes_key[TLSEXT_TICK_KEY_LENGTH];
+} SSL_CTX_EXT_SECURE;
+
+struct ssl_ctx_st {
+    const SSL_METHOD *method;
+    STACK_OF(SSL_CIPHER) *cipher_list;
+    /* same as above but sorted for lookup */
+    STACK_OF(SSL_CIPHER) *cipher_list_by_id;
+    /* TLSv1.3 specific ciphersuites */
+    STACK_OF(SSL_CIPHER) *tls13_ciphersuites;
+    struct x509_store_st /* X509_STORE */ *cert_store;
+    LHASH_OF(SSL_SESSION) *sessions;
+    /*
+     * Most session-ids that will be cached, default is
+     * SSL_SESSION_CACHE_MAX_SIZE_DEFAULT. 0 is unlimited.
+     */
+    size_t session_cache_size;
+    struct ssl_session_st *session_cache_head;
+    struct ssl_session_st *session_cache_tail;
+    /*
+     * This can have one of 2 values, ored together, SSL_SESS_CACHE_CLIENT,
+     * SSL_SESS_CACHE_SERVER, Default is SSL_SESSION_CACHE_SERVER, which
+     * means only SSL_accept will cache SSL_SESSIONS.
+     */
+    uint32_t session_cache_mode;
+    /*
+     * If timeout is not 0, it is the default timeout value set when
+     * SSL_new() is called.  This has been put in to make life easier to set
+     * things up
+     */
+    long session_timeout;
+    /*
+     * If this callback is not null, it will be called each time a session id
+     * is added to the cache.  If this function returns 1, it means that the
+     * callback will do a SSL_SESSION_free() when it has finished using it.
+     * Otherwise, on 0, it means the callback has finished with it. If
+     * remove_session_cb is not null, it will be called when a session-id is
+     * removed from the cache.  After the call, OpenSSL will
+     * SSL_SESSION_free() it.
+     */
+    int (*new_session_cb) (struct ssl_st *ssl, SSL_SESSION *sess);
+    void (*remove_session_cb) (struct ssl_ctx_st *ctx, SSL_SESSION *sess);
+    SSL_SESSION *(*get_session_cb) (struct ssl_st *ssl,
+                                    const unsigned char *data, int len,
+                                    int *copy);
+    struct {
+        TSAN_QUALIFIER int sess_connect;       /* SSL new conn - started */
+        TSAN_QUALIFIER int sess_connect_renegotiate; /* SSL reneg - requested */
+        TSAN_QUALIFIER int sess_connect_good;  /* SSL new conne/reneg - finished */
+        TSAN_QUALIFIER int sess_accept;        /* SSL new accept - started */
+        TSAN_QUALIFIER int sess_accept_renegotiate; /* SSL reneg - requested */
+        TSAN_QUALIFIER int sess_accept_good;   /* SSL accept/reneg - finished */
+        TSAN_QUALIFIER int sess_miss;          /* session lookup misses */
+        TSAN_QUALIFIER int sess_timeout;       /* reuse attempt on timeouted session */
+        TSAN_QUALIFIER int sess_cache_full;    /* session removed due to full cache */
+        TSAN_QUALIFIER int sess_hit;           /* session reuse actually done */
+        TSAN_QUALIFIER int sess_cb_hit;        /* session-id that was not in
+                                                * the cache was passed back via
+                                                * the callback. This indicates
+                                                * that the application is
+                                                * supplying session-id's from
+                                                * other processes - spooky
+                                                * :-) */
+    } stats;
+
+    CRYPTO_REF_COUNT references;
+
+    /* if defined, these override the X509_verify_cert() calls */
+    int (*app_verify_callback) (X509_STORE_CTX *, void *);
+    void *app_verify_arg;
+    /*
+     * before OpenSSL 0.9.7, 'app_verify_arg' was ignored
+     * ('app_verify_callback' was called with just one argument)
+     */
+
+    /* Default password callback. */
+    pem_password_cb *default_passwd_callback;
+
+    /* Default password callback user data. */
+    void *default_passwd_callback_userdata;
+
+    /* get client cert callback */
+    int (*client_cert_cb) (SSL *ssl, X509 **x509, EVP_PKEY **pkey);
+
+    /* cookie generate callback */
+    int (*app_gen_cookie_cb) (SSL *ssl, unsigned char *cookie,
+                              unsigned int *cookie_len);
+
+    /* verify cookie callback */
+    int (*app_verify_cookie_cb) (SSL *ssl, const unsigned char *cookie,
+                                 unsigned int cookie_len);
+
+    /* TLS1.3 app-controlled cookie generate callback */
+    int (*gen_stateless_cookie_cb) (SSL *ssl, unsigned char *cookie,
+                                    size_t *cookie_len);
+
+    /* TLS1.3 verify app-controlled cookie callback */
+    int (*verify_stateless_cookie_cb) (SSL *ssl, const unsigned char *cookie,
+                                       size_t cookie_len);
+
+    CRYPTO_EX_DATA ex_data;
+
+    const EVP_MD *md5;          /* For SSLv3/TLSv1 'ssl3-md5' */
+    const EVP_MD *sha1;         /* For SSLv3/TLSv1 'ssl3->sha1' */
+
+    STACK_OF(X509) *extra_certs;
+    STACK_OF(SSL_COMP) *comp_methods; /* stack of SSL_COMP, SSLv3/TLSv1 */
+
+    /* Default values used when no per-SSL value is defined follow */
+
+    /* used if SSL's info_callback is NULL */
+    void (*info_callback) (const SSL *ssl, int type, int val);
+
+    /*
+     * What we put in certificate_authorities extension for TLS 1.3
+     * (ClientHello and CertificateRequest) or just client cert requests for
+     * earlier versions. If client_ca_names is populated then it is only used
+     * for client cert requests, and in preference to ca_names.
+     */
+    STACK_OF(X509_NAME) *ca_names;
+    STACK_OF(X509_NAME) *client_ca_names;
+
+    /*
+     * Default values to use in SSL structures follow (these are copied by
+     * SSL_new)
+     */
+
+    uint32_t options;
+    uint32_t mode;
+    int min_proto_version;
+    int max_proto_version;
+    size_t max_cert_list;
+
+    struct cert_st /* CERT */ *cert;
+    int read_ahead;
+
+    /* callback that allows applications to peek at protocol messages */
+    void (*msg_callback) (int write_p, int version, int content_type,
+                          const void *buf, size_t len, SSL *ssl, void *arg);
+    void *msg_callback_arg;
+
+    uint32_t verify_mode;
+    size_t sid_ctx_length;
+    unsigned char sid_ctx[SSL_MAX_SID_CTX_LENGTH];
+    /* called 'verify_callback' in the SSL */
+    int (*default_verify_callback) (int ok, X509_STORE_CTX *ctx);
+
+    /* Default generate session ID callback. */
+    GEN_SESSION_CB generate_session_id;
+
+    X509_VERIFY_PARAM *param;
+
+    int quiet_shutdown;
+
+# ifndef OPENSSL_NO_CT
+    CTLOG_STORE *ctlog_store;   /* CT Log Store */
+    /*
+     * Validates that the SCTs (Signed Certificate Timestamps) are sufficient.
+     * If they are not, the connection should be aborted.
+     */
+    ssl_ct_validation_cb ct_validation_callback;
+    void *ct_validation_callback_arg;
+# endif
+
+    /*
+     * If we're using more than one pipeline how should we divide the data
+     * up between the pipes?
+     */
+    size_t split_send_fragment;
+    /*
+     * Maximum amount of data to send in one fragment. actual record size can
+     * be more than this due to padding and MAC overheads.
+     */
+    size_t max_send_fragment;
+
+    /* Up to how many pipelines should we use? If 0 then 1 is assumed */
+    size_t max_pipelines;
+
+    /* The default read buffer length to use (0 means not set) */
+    size_t default_read_buf_len;
+
+# ifndef OPENSSL_NO_ENGINE
+    /*
+     * Engine to pass requests for client certs to
+     */
+    ENGINE *client_cert_engine;
+# endif
+
+    /* ClientHello callback.  Mostly for extensions, but not entirely. */
+    SSL_client_hello_cb_fn client_hello_cb;
+    void *client_hello_cb_arg;
+
+    /* TLS extensions. */
+    struct {
+        /* TLS extensions servername callback */
+        int (*servername_cb) (SSL *, int *, void *);
+        void *servername_arg;
+        /* RFC 4507 session ticket keys */
+        unsigned char tick_key_name[TLSEXT_KEYNAME_LENGTH];
+        SSL_CTX_EXT_SECURE *secure;
+        /* Callback to support customisation of ticket key setting */
+        int (*ticket_key_cb) (SSL *ssl,
+                              unsigned char *name, unsigned char *iv,
+                              EVP_CIPHER_CTX *ectx, HMAC_CTX *hctx, int enc);
+
+        /* certificate status request info */
+        /* Callback for status request */
+        int (*status_cb) (SSL *ssl, void *arg);
+        void *status_arg;
+        /* ext status type used for CSR extension (OCSP Stapling) */
+        int status_type;
+        /* RFC 4366 Maximum Fragment Length Negotiation */
+        uint8_t max_fragment_len_mode;
+
+# ifndef OPENSSL_NO_EC
+        /* EC extension values inherited by SSL structure */
+        size_t ecpointformats_len;
+        unsigned char *ecpointformats;
+        size_t supportedgroups_len;
+        uint16_t *supportedgroups;
+# endif                         /* OPENSSL_NO_EC */
+
+        /*
+         * ALPN information (we are in the process of transitioning from NPN to
+         * ALPN.)
+         */
+
+        /*-
+         * For a server, this contains a callback function that allows the
+         * server to select the protocol for the connection.
+         *   out: on successful return, this must point to the raw protocol
+         *        name (without the length prefix).
+         *   outlen: on successful return, this contains the length of |*out|.
+         *   in: points to the client's list of supported protocols in
+         *       wire-format.
+         *   inlen: the length of |in|.
+         */
+        int (*alpn_select_cb) (SSL *s,
+                               const unsigned char **out,
+                               unsigned char *outlen,
+                               const unsigned char *in,
+                               unsigned int inlen, void *arg);
+        void *alpn_select_cb_arg;
+
+        /*
+         * For a client, this contains the list of supported protocols in wire
+         * format.
+         */
+        unsigned char *alpn;
+        size_t alpn_len;
+
+# ifndef OPENSSL_NO_NEXTPROTONEG
+        /* Next protocol negotiation information */
+
+        /*
+         * For a server, this contains a callback function by which the set of
+         * advertised protocols can be provided.
+         */
+        SSL_CTX_npn_advertised_cb_func npn_advertised_cb;
+        void *npn_advertised_cb_arg;
+        /*
+         * For a client, this contains a callback function that selects the next
+         * protocol from the list provided by the server.
+         */
+        SSL_CTX_npn_select_cb_func npn_select_cb;
+        void *npn_select_cb_arg;
+# endif
+
+        unsigned char cookie_hmac_key[SHA256_DIGEST_LENGTH];
+    } ext;
+
+# ifndef OPENSSL_NO_PSK
+    SSL_psk_client_cb_func psk_client_callback;
+    SSL_psk_server_cb_func psk_server_callback;
+# endif
+    SSL_psk_find_session_cb_func psk_find_session_cb;
+    SSL_psk_use_session_cb_func psk_use_session_cb;
+
+# ifndef OPENSSL_NO_SRP
+    SRP_CTX srp_ctx;            /* ctx for SRP authentication */
+# endif
+
+    /* Shared DANE context */
+    struct dane_ctx_st dane;
+
+# ifndef OPENSSL_NO_SRTP
+    /* SRTP profiles we are willing to do from RFC 5764 */
+    STACK_OF(SRTP_PROTECTION_PROFILE) *srtp_profiles;
+# endif
+    /*
+     * Callback for disabling session caching and ticket support on a session
+     * basis, depending on the chosen cipher.
+     */
+    int (*not_resumable_session_cb) (SSL *ssl, int is_forward_secure);
+
+    CRYPTO_RWLOCK *lock;
+
+    /*
+     * Callback for logging key material for use with debugging tools like
+     * Wireshark. The callback should log `line` followed by a newline.
+     */
+    SSL_CTX_keylog_cb_func keylog_callback;
+
+    /*
+     * The maximum number of bytes advertised in session tickets that can be
+     * sent as early data.
+     */
+    uint32_t max_early_data;
+
+    /*
+     * The maximum number of bytes of early data that a server will tolerate
+     * (which should be at least as much as max_early_data).
+     */
+    uint32_t recv_max_early_data;
+
+    /* TLS1.3 padding callback */
+    size_t (*record_padding_cb)(SSL *s, int type, size_t len, void *arg);
+    void *record_padding_arg;
+    size_t block_padding;
+
+    /* Session ticket appdata */
+    SSL_CTX_generate_session_ticket_fn generate_ticket_cb;
+    SSL_CTX_decrypt_session_ticket_fn decrypt_ticket_cb;
+    void *ticket_cb_data;
+
+    /* The number of TLS1.3 tickets to automatically send */
+    size_t num_tickets;
+
+    /* Callback to determine if early_data is acceptable or not */
+    SSL_allow_early_data_cb_fn allow_early_data_cb;
+    void *allow_early_data_cb_data;
+
+    /* Do we advertise Post-handshake auth support? */
+    int pha_enabled;
+};
+
+struct ssl_st {
+    /*
+     * protocol version (one of SSL2_VERSION, SSL3_VERSION, TLS1_VERSION,
+     * DTLS1_VERSION)
+     */
+    int version;
+    /* SSLv3 */
+    const SSL_METHOD *method;
+    /*
+     * There are 2 BIO's even though they are normally both the same.  This
+     * is so data can be read and written to different handlers
+     */
+    /* used by SSL_read */
+    BIO *rbio;
+    /* used by SSL_write */
+    BIO *wbio;
+    /* used during session-id reuse to concatenate messages */
+    BIO *bbio;
+    /*
+     * This holds a variable that indicates what we were doing when a 0 or -1
+     * is returned.  This is needed for non-blocking IO so we know what
+     * request needs re-doing when in SSL_accept or SSL_connect
+     */
+    int rwstate;
+    int (*handshake_func) (SSL *);
+    /*
+     * Imagine that here's a boolean member "init" that is switched as soon
+     * as SSL_set_{accept/connect}_state is called for the first time, so
+     * that "state" and "handshake_func" are properly initialized.  But as
+     * handshake_func is == 0 until then, we use this test instead of an
+     * "init" member.
+     */
+    /* are we the server side? */
+    int server;
+    /*
+     * Generate a new session or reuse an old one.
+     * NB: For servers, the 'new' session may actually be a previously
+     * cached session or even the previous session unless
+     * SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION is set
+     */
+    int new_session;
+    /* don't send shutdown packets */
+    int quiet_shutdown;
+    /* we have shut things down, 0x01 sent, 0x02 for received */
+    int shutdown;
+    /* where we are */
+    OSSL_STATEM statem;
+    SSL_EARLY_DATA_STATE early_data_state;
+    BUF_MEM *init_buf;          /* buffer used during init */
+    void *init_msg;             /* pointer to handshake message body, set by
+                                 * ssl3_get_message() */
+    size_t init_num;               /* amount read/written */
+    size_t init_off;               /* amount read/written */
+    struct ssl3_state_st *s3;   /* SSLv3 variables */
+    struct dtls1_state_st *d1;  /* DTLSv1 variables */
+    /* callback that allows applications to peek at protocol messages */
+    void (*msg_callback) (int write_p, int version, int content_type,
+                          const void *buf, size_t len, SSL *ssl, void *arg);
+    void *msg_callback_arg;
+    int hit;                    /* reusing a previous session */
+    X509_VERIFY_PARAM *param;
+    /* Per connection DANE state */
+    SSL_DANE dane;
+    /* crypto */
+    STACK_OF(SSL_CIPHER) *cipher_list;
+    STACK_OF(SSL_CIPHER) *cipher_list_by_id;
+    /* TLSv1.3 specific ciphersuites */
+    STACK_OF(SSL_CIPHER) *tls13_ciphersuites;
+    /*
+     * These are the ones being used, the ones in SSL_SESSION are the ones to
+     * be 'copied' into these ones
+     */
+    uint32_t mac_flags;
+    /*
+     * The TLS1.3 secrets.
+     */
+    unsigned char early_secret[EVP_MAX_MD_SIZE];
+    unsigned char handshake_secret[EVP_MAX_MD_SIZE];
+    unsigned char master_secret[EVP_MAX_MD_SIZE];
+    unsigned char resumption_master_secret[EVP_MAX_MD_SIZE];
+    unsigned char client_finished_secret[EVP_MAX_MD_SIZE];
+    unsigned char server_finished_secret[EVP_MAX_MD_SIZE];
+    unsigned char server_finished_hash[EVP_MAX_MD_SIZE];
+    unsigned char handshake_traffic_hash[EVP_MAX_MD_SIZE];
+    unsigned char client_app_traffic_secret[EVP_MAX_MD_SIZE];
+    unsigned char server_app_traffic_secret[EVP_MAX_MD_SIZE];
+    unsigned char exporter_master_secret[EVP_MAX_MD_SIZE];
+    unsigned char early_exporter_master_secret[EVP_MAX_MD_SIZE];
+    EVP_CIPHER_CTX *enc_read_ctx; /* cryptographic state */
+    unsigned char read_iv[EVP_MAX_IV_LENGTH]; /* TLSv1.3 static read IV */
+    EVP_MD_CTX *read_hash;      /* used for mac generation */
+    COMP_CTX *compress;         /* compression */
+    COMP_CTX *expand;           /* uncompress */
+    EVP_CIPHER_CTX *enc_write_ctx; /* cryptographic state */
+    unsigned char write_iv[EVP_MAX_IV_LENGTH]; /* TLSv1.3 static write IV */
+    EVP_MD_CTX *write_hash;     /* used for mac generation */
+    /* session info */
+    /* client cert? */
+    /* This is used to hold the server certificate used */
+    struct cert_st /* CERT */ *cert;
+
+    /*
+     * The hash of all messages prior to the CertificateVerify, and the length
+     * of that hash.
+     */
+    unsigned char cert_verify_hash[EVP_MAX_MD_SIZE];
+    size_t cert_verify_hash_len;
+
+    /* Flag to indicate whether we should send a HelloRetryRequest or not */
+    enum {SSL_HRR_NONE = 0, SSL_HRR_PENDING, SSL_HRR_COMPLETE}
+        hello_retry_request;
+
+    /*
+     * the session_id_context is used to ensure sessions are only reused in
+     * the appropriate context
+     */
+    size_t sid_ctx_length;
+    unsigned char sid_ctx[SSL_MAX_SID_CTX_LENGTH];
+    /* This can also be in the session once a session is established */
+    SSL_SESSION *session;
+    /* TLSv1.3 PSK session */
+    SSL_SESSION *psksession;
+    unsigned char *psksession_id;
+    size_t psksession_id_len;
+    /* Default generate session ID callback. */
+    GEN_SESSION_CB generate_session_id;
+    /*
+     * The temporary TLSv1.3 session id. This isn't really a session id at all
+     * but is a random value sent in the legacy session id field.
+     */
+    unsigned char tmp_session_id[SSL_MAX_SSL_SESSION_ID_LENGTH];
+    size_t tmp_session_id_len;
+    /* Used in SSL3 */
+    /*
+     * 0 don't care about verify failure.
+     * 1 fail if verify fails
+     */
+    uint32_t verify_mode;
+    /* fail if callback returns 0 */
+    int (*verify_callback) (int ok, X509_STORE_CTX *ctx);
+    /* optional informational callback */
+    void (*info_callback) (const SSL *ssl, int type, int val);
+    /* error bytes to be written */
+    int error;
+    /* actual code */
+    int error_code;
+# ifndef OPENSSL_NO_PSK
+    SSL_psk_client_cb_func psk_client_callback;
+    SSL_psk_server_cb_func psk_server_callback;
+# endif
+    SSL_psk_find_session_cb_func psk_find_session_cb;
+    SSL_psk_use_session_cb_func psk_use_session_cb;
+
+    SSL_CTX *ctx;
+    /* Verified chain of peer */
+    STACK_OF(X509) *verified_chain;
+    long verify_result;
+    /* extra application data */
+    CRYPTO_EX_DATA ex_data;
+    /*
+     * What we put in certificate_authorities extension for TLS 1.3
+     * (ClientHello and CertificateRequest) or just client cert requests for
+     * earlier versions. If client_ca_names is populated then it is only used
+     * for client cert requests, and in preference to ca_names.
+     */
+    STACK_OF(X509_NAME) *ca_names;
+    STACK_OF(X509_NAME) *client_ca_names;
+    CRYPTO_REF_COUNT references;
+    /* protocol behaviour */
+    uint32_t options;
+    /* API behaviour */
+    uint32_t mode;
+    int min_proto_version;
+    int max_proto_version;
+    size_t max_cert_list;
+    int first_packet;
+    /*
+     * What was passed in ClientHello.legacy_version. Used for RSA pre-master
+     * secret and SSLv3/TLS (<=1.2) rollback check
+     */
+    int client_version;
+    /*
+     * If we're using more than one pipeline how should we divide the data
+     * up between the pipes?
+     */
+    size_t split_send_fragment;
+    /*
+     * Maximum amount of data to send in one fragment. actual record size can
+     * be more than this due to padding and MAC overheads.
+     */
+    size_t max_send_fragment;
+    /* Up to how many pipelines should we use? If 0 then 1 is assumed */
+    size_t max_pipelines;
+
+    struct {
+        /* Built-in extension flags */
+        uint8_t extflags[TLSEXT_IDX_num_builtins];
+        /* TLS extension debug callback */
+        void (*debug_cb)(SSL *s, int client_server, int type,
+                         const unsigned char *data, int len, void *arg);
+        void *debug_arg;
+        char *hostname;
+        /* certificate status request info */
+        /* Status type or -1 if no status type */
+        int status_type;
+        /* Raw extension data, if seen */
+        unsigned char *scts;
+        /* Length of raw extension data, if seen */
+        uint16_t scts_len;
+        /* Expect OCSP CertificateStatus message */
+        int status_expected;
+
+        struct {
+            /* OCSP status request only */
+            STACK_OF(OCSP_RESPID) *ids;
+            X509_EXTENSIONS *exts;
+            /* OCSP response received or to be sent */
+            unsigned char *resp;
+            size_t resp_len;
+        } ocsp;
+
+        /* RFC4507 session ticket expected to be received or sent */
+        int ticket_expected;
+# ifndef OPENSSL_NO_EC
+        size_t ecpointformats_len;
+        /* our list */
+        unsigned char *ecpointformats;
+# endif                         /* OPENSSL_NO_EC */
+        size_t supportedgroups_len;
+        /* our list */
+        uint16_t *supportedgroups;
+        /* TLS Session Ticket extension override */
+        TLS_SESSION_TICKET_EXT *session_ticket;
+        /* TLS Session Ticket extension callback */
+        tls_session_ticket_ext_cb_fn session_ticket_cb;
+        void *session_ticket_cb_arg;
+        /* TLS pre-shared secret session resumption */
+        tls_session_secret_cb_fn session_secret_cb;
+        void *session_secret_cb_arg;
+        /*
+         * For a client, this contains the list of supported protocols in wire
+         * format.
+         */
+        unsigned char *alpn;
+        size_t alpn_len;
+        /*
+         * Next protocol negotiation. For the client, this is the protocol that
+         * we sent in NextProtocol and is set when handling ServerHello
+         * extensions. For a server, this is the client's selected_protocol from
+         * NextProtocol and is set when handling the NextProtocol message, before
+         * the Finished message.
+         */
+        unsigned char *npn;
+        size_t npn_len;
+
+        /* The available PSK key exchange modes */
+        int psk_kex_mode;
+
+        /* Set to one if we have negotiated ETM */
+        int use_etm;
+
+        /* Are we expecting to receive early data? */
+        int early_data;
+        /* Is the session suitable for early data? */
+        int early_data_ok;
+
+        /* May be sent by a server in HRR. Must be echoed back in ClientHello */
+        unsigned char *tls13_cookie;
+        size_t tls13_cookie_len;
+        /* Have we received a cookie from the client? */
+        int cookieok;
+
+        /*
+         * Maximum Fragment Length as per RFC 4366.
+         * If this member contains one of the allowed values (1-4)
+         * then we should include Maximum Fragment Length Negotiation
+         * extension in Client Hello.
+         * Please note that value of this member does not have direct
+         * effect. The actual (binding) value is stored in SSL_SESSION,
+         * as this extension is optional on server side.
+         */
+        uint8_t max_fragment_len_mode;
+    } ext;
+
+    /*
+     * Parsed form of the ClientHello, kept around across client_hello_cb
+     * calls.
+     */
+    CLIENTHELLO_MSG *clienthello;
+
+    /*-
+     * no further mod of servername
+     * 0 : call the servername extension callback.
+     * 1 : prepare 2, allow last ack just after in server callback.
+     * 2 : don't call servername callback, no ack in server hello
+     */
+    int servername_done;
+# ifndef OPENSSL_NO_CT
+    /*
+     * Validates that the SCTs (Signed Certificate Timestamps) are sufficient.
+     * If they are not, the connection should be aborted.
+     */
+    ssl_ct_validation_cb ct_validation_callback;
+    /* User-supplied argument that is passed to the ct_validation_callback */
+    void *ct_validation_callback_arg;
+    /*
+     * Consolidated stack of SCTs from all sources.
+     * Lazily populated by CT_get_peer_scts(SSL*)
+     */
+    STACK_OF(SCT) *scts;
+    /* Have we attempted to find/parse SCTs yet? */
+    int scts_parsed;
+# endif
+    SSL_CTX *session_ctx;       /* initial ctx, used to store sessions */
+# ifndef OPENSSL_NO_SRTP
+    /* What we'll do */
+    STACK_OF(SRTP_PROTECTION_PROFILE) *srtp_profiles;
+    /* What's been chosen */
+    SRTP_PROTECTION_PROFILE *srtp_profile;
+# endif
+    /*-
+     * 1 if we are renegotiating.
+     * 2 if we are a server and are inside a handshake
+     * (i.e. not just sending a HelloRequest)
+     */
+    int renegotiate;
+    /* If sending a KeyUpdate is pending */
+    int key_update;
+    /* Post-handshake authentication state */
+    SSL_PHA_STATE post_handshake_auth;
+    int pha_enabled;
+    uint8_t* pha_context;
+    size_t pha_context_len;
+    int certreqs_sent;
+    EVP_MD_CTX *pha_dgst; /* this is just the digest through ClientFinished */
+
+# ifndef OPENSSL_NO_SRP
+    /* ctx for SRP authentication */
+    SRP_CTX srp_ctx;
+# endif
+    /*
+     * Callback for disabling session caching and ticket support on a session
+     * basis, depending on the chosen cipher.
+     */
+    int (*not_resumable_session_cb) (SSL *ssl, int is_forward_secure);
+    RECORD_LAYER rlayer;
+    /* Default password callback. */
+    pem_password_cb *default_passwd_callback;
+    /* Default password callback user data. */
+    void *default_passwd_callback_userdata;
+    /* Async Job info */
+    ASYNC_JOB *job;
+    ASYNC_WAIT_CTX *waitctx;
+    size_t asyncrw;
+
+    /*
+     * The maximum number of bytes advertised in session tickets that can be
+     * sent as early data.
+     */
+    uint32_t max_early_data;
+    /*
+     * The maximum number of bytes of early data that a server will tolerate
+     * (which should be at least as much as max_early_data).
+     */
+    uint32_t recv_max_early_data;
+
+    /*
+     * The number of bytes of early data received so far. If we accepted early
+     * data then this is a count of the plaintext bytes. If we rejected it then
+     * this is a count of the ciphertext bytes.
+     */
+    uint32_t early_data_count;
+
+    /* TLS1.3 padding callback */
+    size_t (*record_padding_cb)(SSL *s, int type, size_t len, void *arg);
+    void *record_padding_arg;
+    size_t block_padding;
+
+    CRYPTO_RWLOCK *lock;
+    RAND_DRBG *drbg;
+
+    /* The number of TLS1.3 tickets to automatically send */
+    size_t num_tickets;
+    /* The number of TLS1.3 tickets actually sent so far */
+    size_t sent_tickets;
+    /* The next nonce value to use when we send a ticket on this connection */
+    uint64_t next_ticket_nonce;
+
+    /* Callback to determine if early_data is acceptable or not */
+    SSL_allow_early_data_cb_fn allow_early_data_cb;
+    void *allow_early_data_cb_data;
+};
+
+/*
+ * Structure containing table entry of values associated with the signature
+ * algorithms (signature scheme) extension
+*/
+typedef struct sigalg_lookup_st {
+    /* TLS 1.3 signature scheme name */
+    const char *name;
+    /* Raw value used in extension */
+    uint16_t sigalg;
+    /* NID of hash algorithm or NID_undef if no hash */
+    int hash;
+    /* Index of hash algorithm or -1 if no hash algorithm */
+    int hash_idx;
+    /* NID of signature algorithm */
+    int sig;
+    /* Index of signature algorithm */
+    int sig_idx;
+    /* Combined hash and signature NID, if any */
+    int sigandhash;
+    /* Required public key curve (ECDSA only) */
+    int curve;
+} SIGALG_LOOKUP;
+
+typedef struct tls_group_info_st {
+    int nid;                    /* Curve NID */
+    int secbits;                /* Bits of security (from SP800-57) */
+    uint16_t flags;             /* Flags: currently just group type */
+} TLS_GROUP_INFO;
+
+/* flags values */
+# define TLS_CURVE_TYPE          0x3 /* Mask for group type */
+# define TLS_CURVE_PRIME         0x0
+# define TLS_CURVE_CHAR2         0x1
+# define TLS_CURVE_CUSTOM        0x2
+
+typedef struct cert_pkey_st CERT_PKEY;
+
+/*
+ * Structure containing table entry of certificate info corresponding to
+ * CERT_PKEY entries
+ */
+typedef struct {
+    int nid; /* NID of pubic key algorithm */
+    uint32_t amask; /* authmask corresponding to key type */
+} SSL_CERT_LOOKUP;
+
+typedef struct ssl3_state_st {
+    long flags;
+    size_t read_mac_secret_size;
+    unsigned char read_mac_secret[EVP_MAX_MD_SIZE];
+    size_t write_mac_secret_size;
+    unsigned char write_mac_secret[EVP_MAX_MD_SIZE];
+    unsigned char server_random[SSL3_RANDOM_SIZE];
+    unsigned char client_random[SSL3_RANDOM_SIZE];
+    /* flags for countermeasure against known-IV weakness */
+    int need_empty_fragments;
+    int empty_fragment_done;
+    /* used during startup, digest all incoming/outgoing packets */
+    BIO *handshake_buffer;
+    /*
+     * When handshake digest is determined, buffer is hashed and
+     * freed and MD_CTX for the required digest is stored here.
+     */
+    EVP_MD_CTX *handshake_dgst;
+    /*
+     * Set whenever an expected ChangeCipherSpec message is processed.
+     * Unset when the peer's Finished message is received.
+     * Unexpected ChangeCipherSpec messages trigger a fatal alert.
+     */
+    int change_cipher_spec;
+    int warn_alert;
+    int fatal_alert;
+    /*
+     * we allow one fatal and one warning alert to be outstanding, send close
+     * alert via the warning alert
+     */
+    int alert_dispatch;
+    unsigned char send_alert[2];
+    /*
+     * This flag is set when we should renegotiate ASAP, basically when there
+     * is no more data in the read or write buffers
+     */
+    int renegotiate;
+    int total_renegotiations;
+    int num_renegotiations;
+    int in_read_app_data;
+    struct {
+        /* actually only need to be 16+20 for SSLv3 and 12 for TLS */
+        unsigned char finish_md[EVP_MAX_MD_SIZE * 2];
+        size_t finish_md_len;
+        unsigned char peer_finish_md[EVP_MAX_MD_SIZE * 2];
+        size_t peer_finish_md_len;
+        size_t message_size;
+        int message_type;
+        /* used to hold the new cipher we are going to use */
+        const SSL_CIPHER *new_cipher;
+# if !defined(OPENSSL_NO_EC) || !defined(OPENSSL_NO_DH)
+        EVP_PKEY *pkey;         /* holds short lived DH/ECDH key */
+# endif
+        /* used for certificate requests */
+        int cert_req;
+        /* Certificate types in certificate request message. */
+        uint8_t *ctype;
+        size_t ctype_len;
+        /* Certificate authorities list peer sent */
+        STACK_OF(X509_NAME) *peer_ca_names;
+        size_t key_block_length;
+        unsigned char *key_block;
+        const EVP_CIPHER *new_sym_enc;
+        const EVP_MD *new_hash;
+        int new_mac_pkey_type;
+        size_t new_mac_secret_size;
+# ifndef OPENSSL_NO_COMP
+        const SSL_COMP *new_compression;
+# else
+        char *new_compression;
+# endif
+        int cert_request;
+        /* Raw values of the cipher list from a client */
+        unsigned char *ciphers_raw;
+        size_t ciphers_rawlen;
+        /* Temporary storage for premaster secret */
+        unsigned char *pms;
+        size_t pmslen;
+# ifndef OPENSSL_NO_PSK
+        /* Temporary storage for PSK key */
+        unsigned char *psk;
+        size_t psklen;
+# endif
+        /* Signature algorithm we actually use */
+        const SIGALG_LOOKUP *sigalg;
+        /* Pointer to certificate we use */
+        CERT_PKEY *cert;
+        /*
+         * signature algorithms peer reports: e.g. supported signature
+         * algorithms extension for server or as part of a certificate
+         * request for client.
+         * Keep track of the algorithms for TLS and X.509 usage separately.
+         */
+        uint16_t *peer_sigalgs;
+        uint16_t *peer_cert_sigalgs;
+        /* Size of above arrays */
+        size_t peer_sigalgslen;
+        size_t peer_cert_sigalgslen;
+        /* Sigalg peer actually uses */
+        const SIGALG_LOOKUP *peer_sigalg;
+        /*
+         * Set if corresponding CERT_PKEY can be used with current
+         * SSL session: e.g. appropriate curve, signature algorithms etc.
+         * If zero it can't be used at all.
+         */
+        uint32_t valid_flags[SSL_PKEY_NUM];
+        /*
+         * For servers the following masks are for the key and auth algorithms
+         * that are supported by the certs below. For clients they are masks of
+         * *disabled* algorithms based on the current session.
+         */
+        uint32_t mask_k;
+        uint32_t mask_a;
+        /*
+         * The following are used by the client to see if a cipher is allowed or
+         * not.  It contains the minimum and maximum version the client's using
+         * based on what it knows so far.
+         */
+        int min_ver;
+        int max_ver;
+    } tmp;
+
+    /* Connection binding to prevent renegotiation attacks */
+    unsigned char previous_client_finished[EVP_MAX_MD_SIZE];
+    size_t previous_client_finished_len;
+    unsigned char previous_server_finished[EVP_MAX_MD_SIZE];
+    size_t previous_server_finished_len;
+    int send_connection_binding; /* TODOEKR */
+
+# ifndef OPENSSL_NO_NEXTPROTONEG
+    /*
+     * Set if we saw the Next Protocol Negotiation extension from our peer.
+     */
+    int npn_seen;
+# endif
+
+    /*
+     * ALPN information (we are in the process of transitioning from NPN to
+     * ALPN.)
+     */
+
+    /*
+     * In a server these point to the selected ALPN protocol after the
+     * ClientHello has been processed. In a client these contain the protocol
+     * that the server selected once the ServerHello has been processed.
+     */
+    unsigned char *alpn_selected;
+    size_t alpn_selected_len;
+    /* used by the server to know what options were proposed */
+    unsigned char *alpn_proposed;
+    size_t alpn_proposed_len;
+    /* used by the client to know if it actually sent alpn */
+    int alpn_sent;
+
+# ifndef OPENSSL_NO_EC
+    /*
+     * This is set to true if we believe that this is a version of Safari
+     * running on OS X 10.6 or newer. We wish to know this because Safari on
+     * 10.8 .. 10.8.3 has broken ECDHE-ECDSA support.
+     */
+    char is_probably_safari;
+# endif                         /* !OPENSSL_NO_EC */
+
+    /* For clients: peer temporary key */
+# if !defined(OPENSSL_NO_EC) || !defined(OPENSSL_NO_DH)
+    /* The group_id for the DH/ECDH key */
+    uint16_t group_id;
+    EVP_PKEY *peer_tmp;
+# endif
+
+} SSL3_STATE;
+
+/* DTLS structures */
+
+# ifndef OPENSSL_NO_SCTP
+#  define DTLS1_SCTP_AUTH_LABEL   "EXPORTER_DTLS_OVER_SCTP"
+# endif
+
+/* Max MTU overhead we know about so far is 40 for IPv6 + 8 for UDP */
+# define DTLS1_MAX_MTU_OVERHEAD                   48
+
+/*
+ * Flag used in message reuse to indicate the buffer contains the record
+ * header as well as the handshake message header.
+ */
+# define DTLS1_SKIP_RECORD_HEADER                 2
+
+struct dtls1_retransmit_state {
+    EVP_CIPHER_CTX *enc_write_ctx; /* cryptographic state */
+    EVP_MD_CTX *write_hash;     /* used for mac generation */
+    COMP_CTX *compress;         /* compression */
+    SSL_SESSION *session;
+    unsigned short epoch;
+};
+
+struct hm_header_st {
+    unsigned char type;
+    size_t msg_len;
+    unsigned short seq;
+    size_t frag_off;
+    size_t frag_len;
+    unsigned int is_ccs;
+    struct dtls1_retransmit_state saved_retransmit_state;
+};
+
+struct dtls1_timeout_st {
+    /* Number of read timeouts so far */
+    unsigned int read_timeouts;
+    /* Number of write timeouts so far */
+    unsigned int write_timeouts;
+    /* Number of alerts received so far */
+    unsigned int num_alerts;
+};
+
+typedef struct hm_fragment_st {
+    struct hm_header_st msg_header;
+    unsigned char *fragment;
+    unsigned char *reassembly;
+} hm_fragment;
+
+typedef struct pqueue_st pqueue;
+typedef struct pitem_st pitem;
+
+struct pitem_st {
+    unsigned char priority[8];  /* 64-bit value in big-endian encoding */
+    void *data;
+    pitem *next;
+};
+
+typedef struct pitem_st *piterator;
+
+pitem *pitem_new(unsigned char *prio64be, void *data);
+void pitem_free(pitem *item);
+pqueue *pqueue_new(void);
+void pqueue_free(pqueue *pq);
+pitem *pqueue_insert(pqueue *pq, pitem *item);
+pitem *pqueue_peek(pqueue *pq);
+pitem *pqueue_pop(pqueue *pq);
+pitem *pqueue_find(pqueue *pq, unsigned char *prio64be);
+pitem *pqueue_iterator(pqueue *pq);
+pitem *pqueue_next(piterator *iter);
+size_t pqueue_size(pqueue *pq);
+
+typedef struct dtls1_state_st {
+    unsigned char cookie[DTLS1_COOKIE_LENGTH];
+    size_t cookie_len;
+    unsigned int cookie_verified;
+    /* handshake message numbers */
+    unsigned short handshake_write_seq;
+    unsigned short next_handshake_write_seq;
+    unsigned short handshake_read_seq;
+    /* Buffered handshake messages */
+    pqueue *buffered_messages;
+    /* Buffered (sent) handshake records */
+    pqueue *sent_messages;
+    size_t link_mtu;      /* max on-the-wire DTLS packet size */
+    size_t mtu;           /* max DTLS packet size */
+    struct hm_header_st w_msg_hdr;
+    struct hm_header_st r_msg_hdr;
+    struct dtls1_timeout_st timeout;
+    /*
+     * Indicates when the last handshake msg sent will timeout
+     */
+    struct timeval next_timeout;
+    /* Timeout duration */
+    unsigned int timeout_duration_us;
+
+    unsigned int retransmitting;
+# ifndef OPENSSL_NO_SCTP
+    int shutdown_received;
+# endif
+
+    DTLS_timer_cb timer_cb;
+
+} DTLS1_STATE;
+
+# ifndef OPENSSL_NO_EC
+/*
+ * From ECC-TLS draft, used in encoding the curve type in ECParameters
+ */
+#  define EXPLICIT_PRIME_CURVE_TYPE  1
+#  define EXPLICIT_CHAR2_CURVE_TYPE  2
+#  define NAMED_CURVE_TYPE           3
+# endif                         /* OPENSSL_NO_EC */
+
+struct cert_pkey_st {
+    X509 *x509;
+    EVP_PKEY *privatekey;
+    /* Chain for this certificate */
+    STACK_OF(X509) *chain;
+    /*-
+     * serverinfo data for this certificate.  The data is in TLS Extension
+     * wire format, specifically it's a series of records like:
+     *   uint16_t extension_type; // (RFC 5246, 7.4.1.4, Extension)
+     *   uint16_t length;
+     *   uint8_t data[length];
+     */
+    unsigned char *serverinfo;
+    size_t serverinfo_length;
+};
+/* Retrieve Suite B flags */
+# define tls1_suiteb(s)  (s->cert->cert_flags & SSL_CERT_FLAG_SUITEB_128_LOS)
+/* Uses to check strict mode: suite B modes are always strict */
+# define SSL_CERT_FLAGS_CHECK_TLS_STRICT \
+        (SSL_CERT_FLAG_SUITEB_128_LOS|SSL_CERT_FLAG_TLS_STRICT)
+
+typedef enum {
+    ENDPOINT_CLIENT = 0,
+    ENDPOINT_SERVER,
+    ENDPOINT_BOTH
+} ENDPOINT;
+
+
+typedef struct {
+    unsigned short ext_type;
+    ENDPOINT role;
+    /* The context which this extension applies to */
+    unsigned int context;
+    /*
+     * Per-connection flags relating to this extension type: not used if
+     * part of an SSL_CTX structure.
+     */
+    uint32_t ext_flags;
+    SSL_custom_ext_add_cb_ex add_cb;
+    SSL_custom_ext_free_cb_ex free_cb;
+    void *add_arg;
+    SSL_custom_ext_parse_cb_ex parse_cb;
+    void *parse_arg;
+} custom_ext_method;
+
+/* ext_flags values */
+
+/*
+ * Indicates an extension has been received. Used to check for unsolicited or
+ * duplicate extensions.
+ */
+# define SSL_EXT_FLAG_RECEIVED   0x1
+/*
+ * Indicates an extension has been sent: used to enable sending of
+ * corresponding ServerHello extension.
+ */
+# define SSL_EXT_FLAG_SENT       0x2
+
+typedef struct {
+    custom_ext_method *meths;
+    size_t meths_count;
+} custom_ext_methods;
+
+typedef struct cert_st {
+    /* Current active set */
+    /*
+     * ALWAYS points to an element of the pkeys array
+     * Probably it would make more sense to store
+     * an index, not a pointer.
+     */
+    CERT_PKEY *key;
+# ifndef OPENSSL_NO_DH
+    EVP_PKEY *dh_tmp;
+    DH *(*dh_tmp_cb) (SSL *ssl, int is_export, int keysize);
+    int dh_tmp_auto;
+# endif
+    /* Flags related to certificates */
+    uint32_t cert_flags;
+    CERT_PKEY pkeys[SSL_PKEY_NUM];
+    /* Custom certificate types sent in certificate request message. */
+    uint8_t *ctype;
+    size_t ctype_len;
+    /*
+     * supported signature algorithms. When set on a client this is sent in
+     * the client hello as the supported signature algorithms extension. For
+     * servers it represents the signature algorithms we are willing to use.
+     */
+    uint16_t *conf_sigalgs;
+    /* Size of above array */
+    size_t conf_sigalgslen;
+    /*
+     * Client authentication signature algorithms, if not set then uses
+     * conf_sigalgs. On servers these will be the signature algorithms sent
+     * to the client in a certificate request for TLS 1.2. On a client this
+     * represents the signature algorithms we are willing to use for client
+     * authentication.
+     */
+    uint16_t *client_sigalgs;
+    /* Size of above array */
+    size_t client_sigalgslen;
+    /*
+     * Signature algorithms shared by client and server: cached because these
+     * are used most often.
+     */
+    const SIGALG_LOOKUP **shared_sigalgs;
+    size_t shared_sigalgslen;
+    /*
+     * Certificate setup callback: if set is called whenever a certificate
+     * may be required (client or server). the callback can then examine any
+     * appropriate parameters and setup any certificates required. This
+     * allows advanced applications to select certificates on the fly: for
+     * example based on supported signature algorithms or curves.
+     */
+    int (*cert_cb) (SSL *ssl, void *arg);
+    void *cert_cb_arg;
+    /*
+     * Optional X509_STORE for chain building or certificate validation If
+     * NULL the parent SSL_CTX store is used instead.
+     */
+    X509_STORE *chain_store;
+    X509_STORE *verify_store;
+    /* Custom extensions */
+    custom_ext_methods custext;
+    /* Security callback */
+    int (*sec_cb) (const SSL *s, const SSL_CTX *ctx, int op, int bits, int nid,
+                   void *other, void *ex);
+    /* Security level */
+    int sec_level;
+    void *sec_ex;
+# ifndef OPENSSL_NO_PSK
+    /* If not NULL psk identity hint to use for servers */
+    char *psk_identity_hint;
+# endif
+    CRYPTO_REF_COUNT references;             /* >1 only if SSL_copy_session_id is used */
+    CRYPTO_RWLOCK *lock;
+} CERT;
+
+# define FP_ICC  (int (*)(const void *,const void *))
+
+/*
+ * This is for the SSLv3/TLSv1.0 differences in crypto/hash stuff It is a bit
+ * of a mess of functions, but hell, think of it as an opaque structure :-)
+ */
+typedef struct ssl3_enc_method {
+    int (*enc) (SSL *, SSL3_RECORD *, size_t, int);
+    int (*mac) (SSL *, SSL3_RECORD *, unsigned char *, int);
+    int (*setup_key_block) (SSL *);
+    int (*generate_master_secret) (SSL *, unsigned char *, unsigned char *,
+                                   size_t, size_t *);
+    int (*change_cipher_state) (SSL *, int);
+    size_t (*final_finish_mac) (SSL *, const char *, size_t, unsigned char *);
+    const char *client_finished_label;
+    size_t client_finished_label_len;
+    const char *server_finished_label;
+    size_t server_finished_label_len;
+    int (*alert_value) (int);
+    int (*export_keying_material) (SSL *, unsigned char *, size_t,
+                                   const char *, size_t,
+                                   const unsigned char *, size_t,
+                                   int use_context);
+    /* Various flags indicating protocol version requirements */
+    uint32_t enc_flags;
+    /* Set the handshake header */
+    int (*set_handshake_header) (SSL *s, WPACKET *pkt, int type);
+    /* Close construction of the handshake message */
+    int (*close_construct_packet) (SSL *s, WPACKET *pkt, int htype);
+    /* Write out handshake message */
+    int (*do_write) (SSL *s);
+} SSL3_ENC_METHOD;
+
+# define ssl_set_handshake_header(s, pkt, htype) \
+        s->method->ssl3_enc->set_handshake_header((s), (pkt), (htype))
+# define ssl_close_construct_packet(s, pkt, htype) \
+        s->method->ssl3_enc->close_construct_packet((s), (pkt), (htype))
+# define ssl_do_write(s)  s->method->ssl3_enc->do_write(s)
+
+/* Values for enc_flags */
+
+/* Uses explicit IV for CBC mode */
+# define SSL_ENC_FLAG_EXPLICIT_IV        0x1
+/* Uses signature algorithms extension */
+# define SSL_ENC_FLAG_SIGALGS            0x2
+/* Uses SHA256 default PRF */
+# define SSL_ENC_FLAG_SHA256_PRF         0x4
+/* Is DTLS */
+# define SSL_ENC_FLAG_DTLS               0x8
+/*
+ * Allow TLS 1.2 ciphersuites: applies to DTLS 1.2 as well as TLS 1.2: may
+ * apply to others in future.
+ */
+# define SSL_ENC_FLAG_TLS1_2_CIPHERS     0x10
+
+# ifndef OPENSSL_NO_COMP
+/* Used for holding the relevant compression methods loaded into SSL_CTX */
+typedef struct ssl3_comp_st {
+    int comp_id;                /* The identifier byte for this compression
+                                 * type */
+    char *name;                 /* Text name used for the compression type */
+    COMP_METHOD *method;        /* The method :-) */
+} SSL3_COMP;
+# endif
+
+typedef enum downgrade_en {
+    DOWNGRADE_NONE,
+    DOWNGRADE_TO_1_2,
+    DOWNGRADE_TO_1_1
+} DOWNGRADE;
+
+/*
+ * Dummy status type for the status_type extension. Indicates no status type
+ * set
+ */
+#define TLSEXT_STATUSTYPE_nothing  -1
+
+/* Sigalgs values */
+#define TLSEXT_SIGALG_ecdsa_secp256r1_sha256                    0x0403
+#define TLSEXT_SIGALG_ecdsa_secp384r1_sha384                    0x0503
+#define TLSEXT_SIGALG_ecdsa_secp521r1_sha512                    0x0603
+#define TLSEXT_SIGALG_ecdsa_sha224                              0x0303
+#define TLSEXT_SIGALG_ecdsa_sha1                                0x0203
+#define TLSEXT_SIGALG_rsa_pss_rsae_sha256                       0x0804
+#define TLSEXT_SIGALG_rsa_pss_rsae_sha384                       0x0805
+#define TLSEXT_SIGALG_rsa_pss_rsae_sha512                       0x0806
+#define TLSEXT_SIGALG_rsa_pss_pss_sha256                        0x0809
+#define TLSEXT_SIGALG_rsa_pss_pss_sha384                        0x080a
+#define TLSEXT_SIGALG_rsa_pss_pss_sha512                        0x080b
+#define TLSEXT_SIGALG_rsa_pkcs1_sha256                          0x0401
+#define TLSEXT_SIGALG_rsa_pkcs1_sha384                          0x0501
+#define TLSEXT_SIGALG_rsa_pkcs1_sha512                          0x0601
+#define TLSEXT_SIGALG_rsa_pkcs1_sha224                          0x0301
+#define TLSEXT_SIGALG_rsa_pkcs1_sha1                            0x0201
+#define TLSEXT_SIGALG_dsa_sha256                                0x0402
+#define TLSEXT_SIGALG_dsa_sha384                                0x0502
+#define TLSEXT_SIGALG_dsa_sha512                                0x0602
+#define TLSEXT_SIGALG_dsa_sha224                                0x0302
+#define TLSEXT_SIGALG_dsa_sha1                                  0x0202
+#define TLSEXT_SIGALG_gostr34102012_256_gostr34112012_256       0xeeee
+#define TLSEXT_SIGALG_gostr34102012_512_gostr34112012_512       0xefef
+#define TLSEXT_SIGALG_gostr34102001_gostr3411                   0xeded
+
+#define TLSEXT_SIGALG_ed25519                                   0x0807
+#define TLSEXT_SIGALG_ed448                                     0x0808
+
+/* Known PSK key exchange modes */
+#define TLSEXT_KEX_MODE_KE                                      0x00
+#define TLSEXT_KEX_MODE_KE_DHE                                  0x01
+
+/*
+ * Internal representations of key exchange modes
+ */
+#define TLSEXT_KEX_MODE_FLAG_NONE                               0
+#define TLSEXT_KEX_MODE_FLAG_KE                                 1
+#define TLSEXT_KEX_MODE_FLAG_KE_DHE                             2
+
+/* An invalid index into the TLSv1.3 PSK identities */
+#define TLSEXT_PSK_BAD_IDENTITY                                 -1
+
+#define SSL_USE_PSS(s) (s->s3->tmp.peer_sigalg != NULL && \
+                        s->s3->tmp.peer_sigalg->sig == EVP_PKEY_RSA_PSS)
+
+/* A dummy signature value not valid for TLSv1.2 signature algs */
+#define TLSEXT_signature_rsa_pss                                0x0101
+
+/* TLSv1.3 downgrade protection sentinel values */
+extern const unsigned char tls11downgrade[8];
+extern const unsigned char tls12downgrade[8];
+
+extern SSL3_ENC_METHOD ssl3_undef_enc_method;
+
+__owur const SSL_METHOD *ssl_bad_method(int ver);
+__owur const SSL_METHOD *sslv3_method(void);
+__owur const SSL_METHOD *sslv3_server_method(void);
+__owur const SSL_METHOD *sslv3_client_method(void);
+__owur const SSL_METHOD *tlsv1_method(void);
+__owur const SSL_METHOD *tlsv1_server_method(void);
+__owur const SSL_METHOD *tlsv1_client_method(void);
+__owur const SSL_METHOD *tlsv1_1_method(void);
+__owur const SSL_METHOD *tlsv1_1_server_method(void);
+__owur const SSL_METHOD *tlsv1_1_client_method(void);
+__owur const SSL_METHOD *tlsv1_2_method(void);
+__owur const SSL_METHOD *tlsv1_2_server_method(void);
+__owur const SSL_METHOD *tlsv1_2_client_method(void);
+__owur const SSL_METHOD *tlsv1_3_method(void);
+__owur const SSL_METHOD *tlsv1_3_server_method(void);
+__owur const SSL_METHOD *tlsv1_3_client_method(void);
+__owur const SSL_METHOD *dtlsv1_method(void);
+__owur const SSL_METHOD *dtlsv1_server_method(void);
+__owur const SSL_METHOD *dtlsv1_client_method(void);
+__owur const SSL_METHOD *dtls_bad_ver_client_method(void);
+__owur const SSL_METHOD *dtlsv1_2_method(void);
+__owur const SSL_METHOD *dtlsv1_2_server_method(void);
+__owur const SSL_METHOD *dtlsv1_2_client_method(void);
+
+extern const SSL3_ENC_METHOD TLSv1_enc_data;
+extern const SSL3_ENC_METHOD TLSv1_1_enc_data;
+extern const SSL3_ENC_METHOD TLSv1_2_enc_data;
+extern const SSL3_ENC_METHOD TLSv1_3_enc_data;
+extern const SSL3_ENC_METHOD SSLv3_enc_data;
+extern const SSL3_ENC_METHOD DTLSv1_enc_data;
+extern const SSL3_ENC_METHOD DTLSv1_2_enc_data;
+
+/*
+ * Flags for SSL methods
+ */
+# define SSL_METHOD_NO_FIPS      (1U<<0)
+# define SSL_METHOD_NO_SUITEB    (1U<<1)
+
+# define IMPLEMENT_tls_meth_func(version, flags, mask, func_name, s_accept, \
+                                 s_connect, enc_data) \
+const SSL_METHOD *func_name(void)  \
+        { \
+        static const SSL_METHOD func_name##_data= { \
+                version, \
+                flags, \
+                mask, \
+                tls1_new, \
+                tls1_clear, \
+                tls1_free, \
+                s_accept, \
+                s_connect, \
+                ssl3_read, \
+                ssl3_peek, \
+                ssl3_write, \
+                ssl3_shutdown, \
+                ssl3_renegotiate, \
+                ssl3_renegotiate_check, \
+                ssl3_read_bytes, \
+                ssl3_write_bytes, \
+                ssl3_dispatch_alert, \
+                ssl3_ctrl, \
+                ssl3_ctx_ctrl, \
+                ssl3_get_cipher_by_char, \
+                ssl3_put_cipher_by_char, \
+                ssl3_pending, \
+                ssl3_num_ciphers, \
+                ssl3_get_cipher, \
+                tls1_default_timeout, \
+                &enc_data, \
+                ssl_undefined_void_function, \
+                ssl3_callback_ctrl, \
+                ssl3_ctx_callback_ctrl, \
+        }; \
+        return &func_name##_data; \
+        }
+
+# define IMPLEMENT_ssl3_meth_func(func_name, s_accept, s_connect) \
+const SSL_METHOD *func_name(void)  \
+        { \
+        static const SSL_METHOD func_name##_data= { \
+                SSL3_VERSION, \
+                SSL_METHOD_NO_FIPS | SSL_METHOD_NO_SUITEB, \
+                SSL_OP_NO_SSLv3, \
+                ssl3_new, \
+                ssl3_clear, \
+                ssl3_free, \
+                s_accept, \
+                s_connect, \
+                ssl3_read, \
+                ssl3_peek, \
+                ssl3_write, \
+                ssl3_shutdown, \
+                ssl3_renegotiate, \
+                ssl3_renegotiate_check, \
+                ssl3_read_bytes, \
+                ssl3_write_bytes, \
+                ssl3_dispatch_alert, \
+                ssl3_ctrl, \
+                ssl3_ctx_ctrl, \
+                ssl3_get_cipher_by_char, \
+                ssl3_put_cipher_by_char, \
+                ssl3_pending, \
+                ssl3_num_ciphers, \
+                ssl3_get_cipher, \
+                ssl3_default_timeout, \
+                &SSLv3_enc_data, \
+                ssl_undefined_void_function, \
+                ssl3_callback_ctrl, \
+                ssl3_ctx_callback_ctrl, \
+        }; \
+        return &func_name##_data; \
+        }
+
+# define IMPLEMENT_dtls1_meth_func(version, flags, mask, func_name, s_accept, \
+                                        s_connect, enc_data) \
+const SSL_METHOD *func_name(void)  \
+        { \
+        static const SSL_METHOD func_name##_data= { \
+                version, \
+                flags, \
+                mask, \
+                dtls1_new, \
+                dtls1_clear, \
+                dtls1_free, \
+                s_accept, \
+                s_connect, \
+                ssl3_read, \
+                ssl3_peek, \
+                ssl3_write, \
+                dtls1_shutdown, \
+                ssl3_renegotiate, \
+                ssl3_renegotiate_check, \
+                dtls1_read_bytes, \
+                dtls1_write_app_data_bytes, \
+                dtls1_dispatch_alert, \
+                dtls1_ctrl, \
+                ssl3_ctx_ctrl, \
+                ssl3_get_cipher_by_char, \
+                ssl3_put_cipher_by_char, \
+                ssl3_pending, \
+                ssl3_num_ciphers, \
+                ssl3_get_cipher, \
+                dtls1_default_timeout, \
+                &enc_data, \
+                ssl_undefined_void_function, \
+                ssl3_callback_ctrl, \
+                ssl3_ctx_callback_ctrl, \
+        }; \
+        return &func_name##_data; \
+        }
+
+struct openssl_ssl_test_functions {
+    int (*p_ssl_init_wbio_buffer) (SSL *s);
+    int (*p_ssl3_setup_buffers) (SSL *s);
+};
+
+const char *ssl_protocol_to_string(int version);
+
+/* Returns true if certificate and private key for 'idx' are present */
+static ossl_inline int ssl_has_cert(const SSL *s, int idx)
+{
+    if (idx < 0 || idx >= SSL_PKEY_NUM)
+        return 0;
+    return s->cert->pkeys[idx].x509 != NULL
+        && s->cert->pkeys[idx].privatekey != NULL;
+}
+
+static ossl_inline void tls1_get_peer_groups(SSL *s, const uint16_t **pgroups,
+                                             size_t *pgroupslen)
+{
+    *pgroups = s->session->ext.supportedgroups;
+    *pgroupslen = s->session->ext.supportedgroups_len;
+}
+
+# ifndef OPENSSL_UNIT_TEST
+
+__owur int ssl_read_internal(SSL *s, void *buf, size_t num, size_t *readbytes);
+__owur int ssl_write_internal(SSL *s, const void *buf, size_t num, size_t *written);
+void ssl_clear_cipher_ctx(SSL *s);
+int ssl_clear_bad_session(SSL *s);
+__owur CERT *ssl_cert_new(void);
+__owur CERT *ssl_cert_dup(CERT *cert);
+void ssl_cert_clear_certs(CERT *c);
+void ssl_cert_free(CERT *c);
+__owur int ssl_generate_session_id(SSL *s, SSL_SESSION *ss);
+__owur int ssl_get_new_session(SSL *s, int session);
+__owur SSL_SESSION *lookup_sess_in_cache(SSL *s, const unsigned char *sess_id,
+                                         size_t sess_id_len);
+__owur int ssl_get_prev_session(SSL *s, CLIENTHELLO_MSG *hello);
+__owur SSL_SESSION *ssl_session_dup(SSL_SESSION *src, int ticket);
+__owur int ssl_cipher_id_cmp(const SSL_CIPHER *a, const SSL_CIPHER *b);
+DECLARE_OBJ_BSEARCH_GLOBAL_CMP_FN(SSL_CIPHER, SSL_CIPHER, ssl_cipher_id);
+__owur int ssl_cipher_ptr_id_cmp(const SSL_CIPHER *const *ap,
+                                 const SSL_CIPHER *const *bp);
+__owur STACK_OF(SSL_CIPHER) *ssl_create_cipher_list(const SSL_METHOD *ssl_method,
+                                                    STACK_OF(SSL_CIPHER) *tls13_ciphersuites,
+                                                    STACK_OF(SSL_CIPHER) **cipher_list,
+                                                    STACK_OF(SSL_CIPHER) **cipher_list_by_id,
+                                                    const char *rule_str,
+                                                    CERT *c);
+__owur int ssl_cache_cipherlist(SSL *s, PACKET *cipher_suites, int sslv2format);
+__owur int bytes_to_cipher_list(SSL *s, PACKET *cipher_suites,
+                                STACK_OF(SSL_CIPHER) **skp,
+                                STACK_OF(SSL_CIPHER) **scsvs, int sslv2format,
+                                int fatal);
+void ssl_update_cache(SSL *s, int mode);
+__owur int ssl_cipher_get_evp(const SSL_SESSION *s, const EVP_CIPHER **enc,
+                              const EVP_MD **md, int *mac_pkey_type,
+                              size_t *mac_secret_size, SSL_COMP **comp,
+                              int use_etm);
+__owur int ssl_cipher_get_overhead(const SSL_CIPHER *c, size_t *mac_overhead,
+                                   size_t *int_overhead, size_t *blocksize,
+                                   size_t *ext_overhead);
+__owur int ssl_cert_is_disabled(size_t idx);
+__owur const SSL_CIPHER *ssl_get_cipher_by_char(SSL *ssl,
+                                                const unsigned char *ptr,
+                                                int all);
+__owur int ssl_cert_set0_chain(SSL *s, SSL_CTX *ctx, STACK_OF(X509) *chain);
+__owur int ssl_cert_set1_chain(SSL *s, SSL_CTX *ctx, STACK_OF(X509) *chain);
+__owur int ssl_cert_add0_chain_cert(SSL *s, SSL_CTX *ctx, X509 *x);
+__owur int ssl_cert_add1_chain_cert(SSL *s, SSL_CTX *ctx, X509 *x);
+__owur int ssl_cert_select_current(CERT *c, X509 *x);
+__owur int ssl_cert_set_current(CERT *c, long arg);
+void ssl_cert_set_cert_cb(CERT *c, int (*cb) (SSL *ssl, void *arg), void *arg);
+
+__owur int ssl_verify_cert_chain(SSL *s, STACK_OF(X509) *sk);
+__owur int ssl_build_cert_chain(SSL *s, SSL_CTX *ctx, int flags);
+__owur int ssl_cert_set_cert_store(CERT *c, X509_STORE *store, int chain,
+                                   int ref);
+
+__owur int ssl_security(const SSL *s, int op, int bits, int nid, void *other);
+__owur int ssl_ctx_security(const SSL_CTX *ctx, int op, int bits, int nid,
+                            void *other);
+
+__owur int ssl_cert_lookup_by_nid(int nid, size_t *pidx);
+__owur const SSL_CERT_LOOKUP *ssl_cert_lookup_by_pkey(const EVP_PKEY *pk,
+                                                      size_t *pidx);
+__owur const SSL_CERT_LOOKUP *ssl_cert_lookup_by_idx(size_t idx);
+
+int ssl_undefined_function(SSL *s);
+__owur int ssl_undefined_void_function(void);
+__owur int ssl_undefined_const_function(const SSL *s);
+__owur int ssl_get_server_cert_serverinfo(SSL *s,
+                                          const unsigned char **serverinfo,
+                                          size_t *serverinfo_length);
+void ssl_set_masks(SSL *s);
+__owur STACK_OF(SSL_CIPHER) *ssl_get_ciphers_by_id(SSL *s);
+__owur int ssl_x509err2alert(int type);
+void ssl_sort_cipher_list(void);
+int ssl_load_ciphers(void);
+__owur int ssl_fill_hello_random(SSL *s, int server, unsigned char *field,
+                                 size_t len, DOWNGRADE dgrd);
+__owur int ssl_generate_master_secret(SSL *s, unsigned char *pms, size_t pmslen,
+                                      int free_pms);
+__owur EVP_PKEY *ssl_generate_pkey(EVP_PKEY *pm);
+__owur int ssl_derive(SSL *s, EVP_PKEY *privkey, EVP_PKEY *pubkey,
+                      int genmaster);
+__owur EVP_PKEY *ssl_dh_to_pkey(DH *dh);
+__owur unsigned int ssl_get_max_send_fragment(const SSL *ssl);
+__owur unsigned int ssl_get_split_send_fragment(const SSL *ssl);
+
+__owur const SSL_CIPHER *ssl3_get_cipher_by_id(uint32_t id);
+__owur const SSL_CIPHER *ssl3_get_cipher_by_std_name(const char *stdname);
+__owur const SSL_CIPHER *ssl3_get_cipher_by_char(const unsigned char *p);
+__owur int ssl3_put_cipher_by_char(const SSL_CIPHER *c, WPACKET *pkt,
+                                   size_t *len);
+int ssl3_init_finished_mac(SSL *s);
+__owur int ssl3_setup_key_block(SSL *s);
+__owur int ssl3_change_cipher_state(SSL *s, int which);
+void ssl3_cleanup_key_block(SSL *s);
+__owur int ssl3_do_write(SSL *s, int type);
+int ssl3_send_alert(SSL *s, int level, int desc);
+__owur int ssl3_generate_master_secret(SSL *s, unsigned char *out,
+                                       unsigned char *p, size_t len,
+                                       size_t *secret_size);
+__owur int ssl3_get_req_cert_type(SSL *s, WPACKET *pkt);
+__owur int ssl3_num_ciphers(void);
+__owur const SSL_CIPHER *ssl3_get_cipher(unsigned int u);
+int ssl3_renegotiate(SSL *ssl);
+int ssl3_renegotiate_check(SSL *ssl, int initok);
+__owur int ssl3_dispatch_alert(SSL *s);
+__owur size_t ssl3_final_finish_mac(SSL *s, const char *sender, size_t slen,
+                                    unsigned char *p);
+__owur int ssl3_finish_mac(SSL *s, const unsigned char *buf, size_t len);
+void ssl3_free_digest_list(SSL *s);
+__owur unsigned long ssl3_output_cert_chain(SSL *s, WPACKET *pkt,
+                                            CERT_PKEY *cpk);
+__owur const SSL_CIPHER *ssl3_choose_cipher(SSL *ssl,
+                                            STACK_OF(SSL_CIPHER) *clnt,
+                                            STACK_OF(SSL_CIPHER) *srvr);
+__owur int ssl3_digest_cached_records(SSL *s, int keep);
+__owur int ssl3_new(SSL *s);
+void ssl3_free(SSL *s);
+__owur int ssl3_read(SSL *s, void *buf, size_t len, size_t *readbytes);
+__owur int ssl3_peek(SSL *s, void *buf, size_t len, size_t *readbytes);
+__owur int ssl3_write(SSL *s, const void *buf, size_t len, size_t *written);
+__owur int ssl3_shutdown(SSL *s);
+int ssl3_clear(SSL *s);
+__owur long ssl3_ctrl(SSL *s, int cmd, long larg, void *parg);
+__owur long ssl3_ctx_ctrl(SSL_CTX *s, int cmd, long larg, void *parg);
+__owur long ssl3_callback_ctrl(SSL *s, int cmd, void (*fp) (void));
+__owur long ssl3_ctx_callback_ctrl(SSL_CTX *s, int cmd, void (*fp) (void));
+
+__owur int ssl3_do_change_cipher_spec(SSL *ssl);
+__owur long ssl3_default_timeout(void);
+
+__owur int ssl3_set_handshake_header(SSL *s, WPACKET *pkt, int htype);
+__owur int tls_close_construct_packet(SSL *s, WPACKET *pkt, int htype);
+__owur int tls_setup_handshake(SSL *s);
+__owur int dtls1_set_handshake_header(SSL *s, WPACKET *pkt, int htype);
+__owur int dtls1_close_construct_packet(SSL *s, WPACKET *pkt, int htype);
+__owur int ssl3_handshake_write(SSL *s);
+
+__owur int ssl_allow_compression(SSL *s);
+
+__owur int ssl_version_supported(const SSL *s, int version,
+                                 const SSL_METHOD **meth);
+
+__owur int ssl_set_client_hello_version(SSL *s);
+__owur int ssl_check_version_downgrade(SSL *s);
+__owur int ssl_set_version_bound(int method_version, int version, int *bound);
+__owur int ssl_choose_server_version(SSL *s, CLIENTHELLO_MSG *hello,
+                                     DOWNGRADE *dgrd);
+__owur int ssl_choose_client_version(SSL *s, int version,
+                                     RAW_EXTENSION *extensions);
+__owur int ssl_get_min_max_version(const SSL *s, int *min_version,
+                                   int *max_version, int *real_max);
+
+__owur long tls1_default_timeout(void);
+__owur int dtls1_do_write(SSL *s, int type);
+void dtls1_set_message_header(SSL *s,
+                              unsigned char mt,
+                              size_t len,
+                              size_t frag_off, size_t frag_len);
+
+int dtls1_write_app_data_bytes(SSL *s, int type, const void *buf_, size_t len,
+                               size_t *written);
+
+__owur int dtls1_read_failed(SSL *s, int code);
+__owur int dtls1_buffer_message(SSL *s, int ccs);
+__owur int dtls1_retransmit_message(SSL *s, unsigned short seq, int *found);
+__owur int dtls1_get_queue_priority(unsigned short seq, int is_ccs);
+int dtls1_retransmit_buffered_messages(SSL *s);
+void dtls1_clear_received_buffer(SSL *s);
+void dtls1_clear_sent_buffer(SSL *s);
+void dtls1_get_message_header(unsigned char *data,
+                              struct hm_header_st *msg_hdr);
+__owur long dtls1_default_timeout(void);
+__owur struct timeval *dtls1_get_timeout(SSL *s, struct timeval *timeleft);
+__owur int dtls1_check_timeout_num(SSL *s);
+__owur int dtls1_handle_timeout(SSL *s);
+void dtls1_start_timer(SSL *s);
+void dtls1_stop_timer(SSL *s);
+__owur int dtls1_is_timer_expired(SSL *s);
+void dtls1_double_timeout(SSL *s);
+__owur int dtls_raw_hello_verify_request(WPACKET *pkt, unsigned char *cookie,
+                                         size_t cookie_len);
+__owur size_t dtls1_min_mtu(SSL *s);
+void dtls1_hm_fragment_free(hm_fragment *frag);
+__owur int dtls1_query_mtu(SSL *s);
+
+__owur int tls1_new(SSL *s);
+void tls1_free(SSL *s);
+int tls1_clear(SSL *s);
+
+__owur int dtls1_new(SSL *s);
+void dtls1_free(SSL *s);
+int dtls1_clear(SSL *s);
+long dtls1_ctrl(SSL *s, int cmd, long larg, void *parg);
+__owur int dtls1_shutdown(SSL *s);
+
+__owur int dtls1_dispatch_alert(SSL *s);
+
+__owur int ssl_init_wbio_buffer(SSL *s);
+int ssl_free_wbio_buffer(SSL *s);
+
+__owur int tls1_change_cipher_state(SSL *s, int which);
+__owur int tls1_setup_key_block(SSL *s);
+__owur size_t tls1_final_finish_mac(SSL *s, const char *str, size_t slen,
+                                    unsigned char *p);
+__owur int tls1_generate_master_secret(SSL *s, unsigned char *out,
+                                       unsigned char *p, size_t len,
+                                       size_t *secret_size);
+__owur int tls13_setup_key_block(SSL *s);
+__owur size_t tls13_final_finish_mac(SSL *s, const char *str, size_t slen,
+                                     unsigned char *p);
+__owur int tls13_change_cipher_state(SSL *s, int which);
+__owur int tls13_update_key(SSL *s, int send);
+__owur int tls13_hkdf_expand(SSL *s, const EVP_MD *md,
+                             const unsigned char *secret,
+                             const unsigned char *label, size_t labellen,
+                             const unsigned char *data, size_t datalen,
+                             unsigned char *out, size_t outlen, int fatal);
+__owur int tls13_derive_key(SSL *s, const EVP_MD *md,
+                            const unsigned char *secret, unsigned char *key,
+                            size_t keylen);
+__owur int tls13_derive_iv(SSL *s, const EVP_MD *md,
+                           const unsigned char *secret, unsigned char *iv,
+                           size_t ivlen);
+__owur int tls13_derive_finishedkey(SSL *s, const EVP_MD *md,
+                                    const unsigned char *secret,
+                                    unsigned char *fin, size_t finlen);
+int tls13_generate_secret(SSL *s, const EVP_MD *md,
+                          const unsigned char *prevsecret,
+                          const unsigned char *insecret,
+                          size_t insecretlen,
+                          unsigned char *outsecret);
+__owur int tls13_generate_handshake_secret(SSL *s,
+                                           const unsigned char *insecret,
+                                           size_t insecretlen);
+__owur int tls13_generate_master_secret(SSL *s, unsigned char *out,
+                                        unsigned char *prev, size_t prevlen,
+                                        size_t *secret_size);
+__owur int tls1_export_keying_material(SSL *s, unsigned char *out, size_t olen,
+                                       const char *label, size_t llen,
+                                       const unsigned char *p, size_t plen,
+                                       int use_context);
+__owur int tls13_export_keying_material(SSL *s, unsigned char *out, size_t olen,
+                                        const char *label, size_t llen,
+                                        const unsigned char *context,
+                                        size_t contextlen, int use_context);
+__owur int tls13_export_keying_material_early(SSL *s, unsigned char *out,
+                                              size_t olen, const char *label,
+                                              size_t llen,
+                                              const unsigned char *context,
+                                              size_t contextlen);
+__owur int tls1_alert_code(int code);
+__owur int tls13_alert_code(int code);
+__owur int ssl3_alert_code(int code);
+
+#  ifndef OPENSSL_NO_EC
+__owur int ssl_check_srvr_ecc_cert_and_alg(X509 *x, SSL *s);
+#  endif
+
+SSL_COMP *ssl3_comp_find(STACK_OF(SSL_COMP) *sk, int n);
+
+#  ifndef OPENSSL_NO_EC
+
+__owur const TLS_GROUP_INFO *tls1_group_id_lookup(uint16_t curve_id);
+__owur int tls1_check_group_id(SSL *s, uint16_t group_id, int check_own_curves);
+__owur uint16_t tls1_shared_group(SSL *s, int nmatch);
+__owur int tls1_set_groups(uint16_t **pext, size_t *pextlen,
+                           int *curves, size_t ncurves);
+__owur int tls1_set_groups_list(uint16_t **pext, size_t *pextlen,
+                                const char *str);
+void tls1_get_formatlist(SSL *s, const unsigned char **pformats,
+                         size_t *num_formats);
+__owur int tls1_check_ec_tmp_key(SSL *s, unsigned long id);
+__owur EVP_PKEY *ssl_generate_pkey_group(SSL *s, uint16_t id);
+__owur EVP_PKEY *ssl_generate_param_group(uint16_t id);
+#  endif                        /* OPENSSL_NO_EC */
+
+__owur int tls_curve_allowed(SSL *s, uint16_t curve, int op);
+void tls1_get_supported_groups(SSL *s, const uint16_t **pgroups,
+                               size_t *pgroupslen);
+
+__owur int tls1_set_server_sigalgs(SSL *s);
+
+__owur SSL_TICKET_STATUS tls_get_ticket_from_client(SSL *s, CLIENTHELLO_MSG *hello,
+                                                    SSL_SESSION **ret);
+__owur SSL_TICKET_STATUS tls_decrypt_ticket(SSL *s, const unsigned char *etick,
+                                            size_t eticklen,
+                                            const unsigned char *sess_id,
+                                            size_t sesslen, SSL_SESSION **psess);
+
+__owur int tls_use_ticket(SSL *s);
+
+void ssl_set_sig_mask(uint32_t *pmask_a, SSL *s, int op);
+
+__owur int tls1_set_sigalgs_list(CERT *c, const char *str, int client);
+__owur int tls1_set_raw_sigalgs(CERT *c, const uint16_t *psigs, size_t salglen,
+                                int client);
+__owur int tls1_set_sigalgs(CERT *c, const int *salg, size_t salglen,
+                            int client);
+int tls1_check_chain(SSL *s, X509 *x, EVP_PKEY *pk, STACK_OF(X509) *chain,
+                     int idx);
+void tls1_set_cert_validity(SSL *s);
+
+#  ifndef OPENSSL_NO_CT
+__owur int ssl_validate_ct(SSL *s);
+#  endif
+
+#  ifndef OPENSSL_NO_DH
+__owur DH *ssl_get_auto_dh(SSL *s);
+#  endif
+
+__owur int ssl_security_cert(SSL *s, SSL_CTX *ctx, X509 *x, int vfy, int is_ee);
+__owur int ssl_security_cert_chain(SSL *s, STACK_OF(X509) *sk, X509 *ex,
+                                   int vfy);
+
+int tls_choose_sigalg(SSL *s, int fatalerrs);
+
+__owur EVP_MD_CTX *ssl_replace_hash(EVP_MD_CTX **hash, const EVP_MD *md);
+void ssl_clear_hash_ctx(EVP_MD_CTX **hash);
+__owur long ssl_get_algorithm2(SSL *s);
+__owur int tls12_copy_sigalgs(SSL *s, WPACKET *pkt,
+                              const uint16_t *psig, size_t psiglen);
+__owur int tls1_save_u16(PACKET *pkt, uint16_t **pdest, size_t *pdestlen);
+__owur int tls1_save_sigalgs(SSL *s, PACKET *pkt, int cert);
+__owur int tls1_process_sigalgs(SSL *s);
+__owur int tls1_set_peer_legacy_sigalg(SSL *s, const EVP_PKEY *pkey);
+__owur int tls1_lookup_md(const SIGALG_LOOKUP *lu, const EVP_MD **pmd);
+__owur size_t tls12_get_psigalgs(SSL *s, int sent, const uint16_t **psigs);
+#  ifndef OPENSSL_NO_EC
+__owur int tls_check_sigalg_curve(const SSL *s, int curve);
+#  endif
+__owur int tls12_check_peer_sigalg(SSL *s, uint16_t, EVP_PKEY *pkey);
+__owur int ssl_set_client_disabled(SSL *s);
+__owur int ssl_cipher_disabled(SSL *s, const SSL_CIPHER *c, int op, int echde);
+
+__owur int ssl_handshake_hash(SSL *s, unsigned char *out, size_t outlen,
+                                 size_t *hashlen);
+__owur const EVP_MD *ssl_md(int idx);
+__owur const EVP_MD *ssl_handshake_md(SSL *s);
+__owur const EVP_MD *ssl_prf_md(SSL *s);
+
+/*
+ * ssl_log_rsa_client_key_exchange logs |premaster| to the SSL_CTX associated
+ * with |ssl|, if logging is enabled. It returns one on success and zero on
+ * failure. The entry is identified by the first 8 bytes of
+ * |encrypted_premaster|.
+ */
+__owur int ssl_log_rsa_client_key_exchange(SSL *ssl,
+                                           const uint8_t *encrypted_premaster,
+                                           size_t encrypted_premaster_len,
+                                           const uint8_t *premaster,
+                                           size_t premaster_len);
+
+/*
+ * ssl_log_secret logs |secret| to the SSL_CTX associated with |ssl|, if
+ * logging is available. It returns one on success and zero on failure. It tags
+ * the entry with |label|.
+ */
+__owur int ssl_log_secret(SSL *ssl, const char *label,
+                          const uint8_t *secret, size_t secret_len);
+
+#define MASTER_SECRET_LABEL "CLIENT_RANDOM"
+#define CLIENT_EARLY_LABEL "CLIENT_EARLY_TRAFFIC_SECRET"
+#define CLIENT_HANDSHAKE_LABEL "CLIENT_HANDSHAKE_TRAFFIC_SECRET"
+#define SERVER_HANDSHAKE_LABEL "SERVER_HANDSHAKE_TRAFFIC_SECRET"
+#define CLIENT_APPLICATION_LABEL "CLIENT_TRAFFIC_SECRET_0"
+#define SERVER_APPLICATION_LABEL "SERVER_TRAFFIC_SECRET_0"
+#define EARLY_EXPORTER_SECRET_LABEL "EARLY_EXPORTER_SECRET"
+#define EXPORTER_SECRET_LABEL "EXPORTER_SECRET"
+
+/* s3_cbc.c */
+__owur char ssl3_cbc_record_digest_supported(const EVP_MD_CTX *ctx);
+__owur int ssl3_cbc_digest_record(const EVP_MD_CTX *ctx,
+                                  unsigned char *md_out,
+                                  size_t *md_out_size,
+                                  const unsigned char header[13],
+                                  const unsigned char *data,
+                                  size_t data_plus_mac_size,
+                                  size_t data_plus_mac_plus_padding_size,
+                                  const unsigned char *mac_secret,
+                                  size_t mac_secret_length, char is_sslv3);
+
+__owur int srp_generate_server_master_secret(SSL *s);
+__owur int srp_generate_client_master_secret(SSL *s);
+__owur int srp_verify_server_param(SSL *s);
+
+/* statem/statem_srvr.c */
+
+__owur int send_certificate_request(SSL *s);
+
+/* statem/extensions_cust.c */
+
+custom_ext_method *custom_ext_find(const custom_ext_methods *exts,
+                                   ENDPOINT role, unsigned int ext_type,
+                                   size_t *idx);
+
+void custom_ext_init(custom_ext_methods *meths);
+
+__owur int custom_ext_parse(SSL *s, unsigned int context, unsigned int ext_type,
+                            const unsigned char *ext_data, size_t ext_size,
+                            X509 *x, size_t chainidx);
+__owur int custom_ext_add(SSL *s, int context, WPACKET *pkt, X509 *x,
+                          size_t chainidx, int maxversion);
+
+__owur int custom_exts_copy(custom_ext_methods *dst,
+                            const custom_ext_methods *src);
+__owur int custom_exts_copy_flags(custom_ext_methods *dst,
+                                  const custom_ext_methods *src);
+void custom_exts_free(custom_ext_methods *exts);
+
+void ssl_comp_free_compression_methods_int(void);
+
+/* ssl_mcnf.c */
+void ssl_ctx_system_config(SSL_CTX *ctx);
+
+# else /* OPENSSL_UNIT_TEST */
+
+#  define ssl_init_wbio_buffer SSL_test_functions()->p_ssl_init_wbio_buffer
+#  define ssl3_setup_buffers SSL_test_functions()->p_ssl3_setup_buffers
+
+# endif
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_mcnf.c b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_mcnf.c
new file mode 100644
index 000000000..a0e265771
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_mcnf.c
@@ -0,0 +1,99 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <openssl/conf.h>
+#include <openssl/ssl.h>
+#include "ssl_locl.h"
+#include "internal/sslconf.h"
+
+/* SSL library configuration module. */
+
+void SSL_add_ssl_module(void)
+{
+    /* Do nothing. This will be added automatically by libcrypto */
+}
+
+static int ssl_do_config(SSL *s, SSL_CTX *ctx, const char *name, int system)
+{
+    SSL_CONF_CTX *cctx = NULL;
+    size_t i, idx, cmd_count;
+    int rv = 0;
+    unsigned int flags;
+    const SSL_METHOD *meth;
+    const SSL_CONF_CMD *cmds;
+
+    if (s == NULL && ctx == NULL) {
+        SSLerr(SSL_F_SSL_DO_CONFIG, ERR_R_PASSED_NULL_PARAMETER);
+        goto err;
+    }
+
+    if (name == NULL && system)
+        name = "system_default";
+    if (!conf_ssl_name_find(name, &idx)) {
+        if (!system) {
+            SSLerr(SSL_F_SSL_DO_CONFIG, SSL_R_INVALID_CONFIGURATION_NAME);
+            ERR_add_error_data(2, "name=", name);
+        }
+        goto err;
+    }
+    cmds = conf_ssl_get(idx, &name, &cmd_count);
+    cctx = SSL_CONF_CTX_new();
+    if (cctx == NULL)
+        goto err;
+    flags = SSL_CONF_FLAG_FILE;
+    if (!system)
+        flags |= SSL_CONF_FLAG_CERTIFICATE | SSL_CONF_FLAG_REQUIRE_PRIVATE;
+    if (s != NULL) {
+        meth = s->method;
+        SSL_CONF_CTX_set_ssl(cctx, s);
+    } else {
+        meth = ctx->method;
+        SSL_CONF_CTX_set_ssl_ctx(cctx, ctx);
+    }
+    if (meth->ssl_accept != ssl_undefined_function)
+        flags |= SSL_CONF_FLAG_SERVER;
+    if (meth->ssl_connect != ssl_undefined_function)
+        flags |= SSL_CONF_FLAG_CLIENT;
+    SSL_CONF_CTX_set_flags(cctx, flags);
+    for (i = 0; i < cmd_count; i++) {
+        char *cmdstr, *arg;
+
+        conf_ssl_get_cmd(cmds, i, &cmdstr, &arg);
+        rv = SSL_CONF_cmd(cctx, cmdstr, arg);
+        if (rv <= 0) {
+            if (rv == -2)
+                SSLerr(SSL_F_SSL_DO_CONFIG, SSL_R_UNKNOWN_COMMAND);
+            else
+                SSLerr(SSL_F_SSL_DO_CONFIG, SSL_R_BAD_VALUE);
+            ERR_add_error_data(6, "section=", name, ", cmd=", cmdstr,
+                               ", arg=", arg);
+            goto err;
+        }
+    }
+    rv = SSL_CONF_CTX_finish(cctx);
+ err:
+    SSL_CONF_CTX_free(cctx);
+    return rv <= 0 ? 0 : 1;
+}
+
+int SSL_config(SSL *s, const char *name)
+{
+    return ssl_do_config(s, NULL, name, 0);
+}
+
+int SSL_CTX_config(SSL_CTX *ctx, const char *name)
+{
+    return ssl_do_config(NULL, ctx, name, 0);
+}
+
+void ssl_ctx_system_config(SSL_CTX *ctx)
+{
+    ssl_do_config(NULL, ctx, NULL, 1);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_rsa.c b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_rsa.c
new file mode 100644
index 000000000..172e15f92
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_rsa.c
@@ -0,0 +1,1148 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "ssl_locl.h"
+#include "packet_locl.h"
+#include <openssl/bio.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+#include <openssl/pem.h>
+
+static int ssl_set_cert(CERT *c, X509 *x509);
+static int ssl_set_pkey(CERT *c, EVP_PKEY *pkey);
+
+#define  SYNTHV1CONTEXT     (SSL_EXT_TLS1_2_AND_BELOW_ONLY \
+                             | SSL_EXT_CLIENT_HELLO \
+                             | SSL_EXT_TLS1_2_SERVER_HELLO \
+                             | SSL_EXT_IGNORE_ON_RESUMPTION)
+
+int SSL_use_certificate(SSL *ssl, X509 *x)
+{
+    int rv;
+    if (x == NULL) {
+        SSLerr(SSL_F_SSL_USE_CERTIFICATE, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    rv = ssl_security_cert(ssl, NULL, x, 0, 1);
+    if (rv != 1) {
+        SSLerr(SSL_F_SSL_USE_CERTIFICATE, rv);
+        return 0;
+    }
+
+    return ssl_set_cert(ssl->cert, x);
+}
+
+int SSL_use_certificate_file(SSL *ssl, const char *file, int type)
+{
+    int j;
+    BIO *in;
+    int ret = 0;
+    X509 *x = NULL;
+
+    in = BIO_new(BIO_s_file());
+    if (in == NULL) {
+        SSLerr(SSL_F_SSL_USE_CERTIFICATE_FILE, ERR_R_BUF_LIB);
+        goto end;
+    }
+
+    if (BIO_read_filename(in, file) <= 0) {
+        SSLerr(SSL_F_SSL_USE_CERTIFICATE_FILE, ERR_R_SYS_LIB);
+        goto end;
+    }
+    if (type == SSL_FILETYPE_ASN1) {
+        j = ERR_R_ASN1_LIB;
+        x = d2i_X509_bio(in, NULL);
+    } else if (type == SSL_FILETYPE_PEM) {
+        j = ERR_R_PEM_LIB;
+        x = PEM_read_bio_X509(in, NULL, ssl->default_passwd_callback,
+                              ssl->default_passwd_callback_userdata);
+    } else {
+        SSLerr(SSL_F_SSL_USE_CERTIFICATE_FILE, SSL_R_BAD_SSL_FILETYPE);
+        goto end;
+    }
+
+    if (x == NULL) {
+        SSLerr(SSL_F_SSL_USE_CERTIFICATE_FILE, j);
+        goto end;
+    }
+
+    ret = SSL_use_certificate(ssl, x);
+ end:
+    X509_free(x);
+    BIO_free(in);
+    return ret;
+}
+
+int SSL_use_certificate_ASN1(SSL *ssl, const unsigned char *d, int len)
+{
+    X509 *x;
+    int ret;
+
+    x = d2i_X509(NULL, &d, (long)len);
+    if (x == NULL) {
+        SSLerr(SSL_F_SSL_USE_CERTIFICATE_ASN1, ERR_R_ASN1_LIB);
+        return 0;
+    }
+
+    ret = SSL_use_certificate(ssl, x);
+    X509_free(x);
+    return ret;
+}
+
+#ifndef OPENSSL_NO_RSA
+int SSL_use_RSAPrivateKey(SSL *ssl, RSA *rsa)
+{
+    EVP_PKEY *pkey;
+    int ret;
+
+    if (rsa == NULL) {
+        SSLerr(SSL_F_SSL_USE_RSAPRIVATEKEY, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    if ((pkey = EVP_PKEY_new()) == NULL) {
+        SSLerr(SSL_F_SSL_USE_RSAPRIVATEKEY, ERR_R_EVP_LIB);
+        return 0;
+    }
+
+    RSA_up_ref(rsa);
+    if (EVP_PKEY_assign_RSA(pkey, rsa) <= 0) {
+        RSA_free(rsa);
+        EVP_PKEY_free(pkey);
+        return 0;
+    }
+
+    ret = ssl_set_pkey(ssl->cert, pkey);
+    EVP_PKEY_free(pkey);
+    return ret;
+}
+#endif
+
+static int ssl_set_pkey(CERT *c, EVP_PKEY *pkey)
+{
+    size_t i;
+
+    if (ssl_cert_lookup_by_pkey(pkey, &i) == NULL) {
+        SSLerr(SSL_F_SSL_SET_PKEY, SSL_R_UNKNOWN_CERTIFICATE_TYPE);
+        return 0;
+    }
+
+    if (c->pkeys[i].x509 != NULL) {
+        EVP_PKEY *pktmp;
+        pktmp = X509_get0_pubkey(c->pkeys[i].x509);
+        if (pktmp == NULL) {
+            SSLerr(SSL_F_SSL_SET_PKEY, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        /*
+         * The return code from EVP_PKEY_copy_parameters is deliberately
+         * ignored. Some EVP_PKEY types cannot do this.
+         */
+        EVP_PKEY_copy_parameters(pktmp, pkey);
+        ERR_clear_error();
+
+#ifndef OPENSSL_NO_RSA
+        /*
+         * Don't check the public/private key, this is mostly for smart
+         * cards.
+         */
+        if (EVP_PKEY_id(pkey) == EVP_PKEY_RSA
+            && RSA_flags(EVP_PKEY_get0_RSA(pkey)) & RSA_METHOD_FLAG_NO_CHECK) ;
+        else
+#endif
+        if (!X509_check_private_key(c->pkeys[i].x509, pkey)) {
+            X509_free(c->pkeys[i].x509);
+            c->pkeys[i].x509 = NULL;
+            return 0;
+        }
+    }
+
+    EVP_PKEY_free(c->pkeys[i].privatekey);
+    EVP_PKEY_up_ref(pkey);
+    c->pkeys[i].privatekey = pkey;
+    c->key = &c->pkeys[i];
+    return 1;
+}
+
+#ifndef OPENSSL_NO_RSA
+int SSL_use_RSAPrivateKey_file(SSL *ssl, const char *file, int type)
+{
+    int j, ret = 0;
+    BIO *in;
+    RSA *rsa = NULL;
+
+    in = BIO_new(BIO_s_file());
+    if (in == NULL) {
+        SSLerr(SSL_F_SSL_USE_RSAPRIVATEKEY_FILE, ERR_R_BUF_LIB);
+        goto end;
+    }
+
+    if (BIO_read_filename(in, file) <= 0) {
+        SSLerr(SSL_F_SSL_USE_RSAPRIVATEKEY_FILE, ERR_R_SYS_LIB);
+        goto end;
+    }
+    if (type == SSL_FILETYPE_ASN1) {
+        j = ERR_R_ASN1_LIB;
+        rsa = d2i_RSAPrivateKey_bio(in, NULL);
+    } else if (type == SSL_FILETYPE_PEM) {
+        j = ERR_R_PEM_LIB;
+        rsa = PEM_read_bio_RSAPrivateKey(in, NULL,
+                                         ssl->default_passwd_callback,
+                                         ssl->default_passwd_callback_userdata);
+    } else {
+        SSLerr(SSL_F_SSL_USE_RSAPRIVATEKEY_FILE, SSL_R_BAD_SSL_FILETYPE);
+        goto end;
+    }
+    if (rsa == NULL) {
+        SSLerr(SSL_F_SSL_USE_RSAPRIVATEKEY_FILE, j);
+        goto end;
+    }
+    ret = SSL_use_RSAPrivateKey(ssl, rsa);
+    RSA_free(rsa);
+ end:
+    BIO_free(in);
+    return ret;
+}
+
+int SSL_use_RSAPrivateKey_ASN1(SSL *ssl, const unsigned char *d, long len)
+{
+    int ret;
+    const unsigned char *p;
+    RSA *rsa;
+
+    p = d;
+    if ((rsa = d2i_RSAPrivateKey(NULL, &p, (long)len)) == NULL) {
+        SSLerr(SSL_F_SSL_USE_RSAPRIVATEKEY_ASN1, ERR_R_ASN1_LIB);
+        return 0;
+    }
+
+    ret = SSL_use_RSAPrivateKey(ssl, rsa);
+    RSA_free(rsa);
+    return ret;
+}
+#endif                          /* !OPENSSL_NO_RSA */
+
+int SSL_use_PrivateKey(SSL *ssl, EVP_PKEY *pkey)
+{
+    int ret;
+
+    if (pkey == NULL) {
+        SSLerr(SSL_F_SSL_USE_PRIVATEKEY, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    ret = ssl_set_pkey(ssl->cert, pkey);
+    return ret;
+}
+
+int SSL_use_PrivateKey_file(SSL *ssl, const char *file, int type)
+{
+    int j, ret = 0;
+    BIO *in;
+    EVP_PKEY *pkey = NULL;
+
+    in = BIO_new(BIO_s_file());
+    if (in == NULL) {
+        SSLerr(SSL_F_SSL_USE_PRIVATEKEY_FILE, ERR_R_BUF_LIB);
+        goto end;
+    }
+
+    if (BIO_read_filename(in, file) <= 0) {
+        SSLerr(SSL_F_SSL_USE_PRIVATEKEY_FILE, ERR_R_SYS_LIB);
+        goto end;
+    }
+    if (type == SSL_FILETYPE_PEM) {
+        j = ERR_R_PEM_LIB;
+        pkey = PEM_read_bio_PrivateKey(in, NULL,
+                                       ssl->default_passwd_callback,
+                                       ssl->default_passwd_callback_userdata);
+    } else if (type == SSL_FILETYPE_ASN1) {
+        j = ERR_R_ASN1_LIB;
+        pkey = d2i_PrivateKey_bio(in, NULL);
+    } else {
+        SSLerr(SSL_F_SSL_USE_PRIVATEKEY_FILE, SSL_R_BAD_SSL_FILETYPE);
+        goto end;
+    }
+    if (pkey == NULL) {
+        SSLerr(SSL_F_SSL_USE_PRIVATEKEY_FILE, j);
+        goto end;
+    }
+    ret = SSL_use_PrivateKey(ssl, pkey);
+    EVP_PKEY_free(pkey);
+ end:
+    BIO_free(in);
+    return ret;
+}
+
+int SSL_use_PrivateKey_ASN1(int type, SSL *ssl, const unsigned char *d,
+                            long len)
+{
+    int ret;
+    const unsigned char *p;
+    EVP_PKEY *pkey;
+
+    p = d;
+    if ((pkey = d2i_PrivateKey(type, NULL, &p, (long)len)) == NULL) {
+        SSLerr(SSL_F_SSL_USE_PRIVATEKEY_ASN1, ERR_R_ASN1_LIB);
+        return 0;
+    }
+
+    ret = SSL_use_PrivateKey(ssl, pkey);
+    EVP_PKEY_free(pkey);
+    return ret;
+}
+
+int SSL_CTX_use_certificate(SSL_CTX *ctx, X509 *x)
+{
+    int rv;
+    if (x == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_CERTIFICATE, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    rv = ssl_security_cert(NULL, ctx, x, 0, 1);
+    if (rv != 1) {
+        SSLerr(SSL_F_SSL_CTX_USE_CERTIFICATE, rv);
+        return 0;
+    }
+    return ssl_set_cert(ctx->cert, x);
+}
+
+static int ssl_set_cert(CERT *c, X509 *x)
+{
+    EVP_PKEY *pkey;
+    size_t i;
+
+    pkey = X509_get0_pubkey(x);
+    if (pkey == NULL) {
+        SSLerr(SSL_F_SSL_SET_CERT, SSL_R_X509_LIB);
+        return 0;
+    }
+
+    if (ssl_cert_lookup_by_pkey(pkey, &i) == NULL) {
+        SSLerr(SSL_F_SSL_SET_CERT, SSL_R_UNKNOWN_CERTIFICATE_TYPE);
+        return 0;
+    }
+#ifndef OPENSSL_NO_EC
+    if (i == SSL_PKEY_ECC && !EC_KEY_can_sign(EVP_PKEY_get0_EC_KEY(pkey))) {
+        SSLerr(SSL_F_SSL_SET_CERT, SSL_R_ECC_CERT_NOT_FOR_SIGNING);
+        return 0;
+    }
+#endif
+    if (c->pkeys[i].privatekey != NULL) {
+        /*
+         * The return code from EVP_PKEY_copy_parameters is deliberately
+         * ignored. Some EVP_PKEY types cannot do this.
+         */
+        EVP_PKEY_copy_parameters(pkey, c->pkeys[i].privatekey);
+        ERR_clear_error();
+
+#ifndef OPENSSL_NO_RSA
+        /*
+         * Don't check the public/private key, this is mostly for smart
+         * cards.
+         */
+        if (EVP_PKEY_id(c->pkeys[i].privatekey) == EVP_PKEY_RSA
+            && RSA_flags(EVP_PKEY_get0_RSA(c->pkeys[i].privatekey)) &
+            RSA_METHOD_FLAG_NO_CHECK) ;
+        else
+#endif                          /* OPENSSL_NO_RSA */
+        if (!X509_check_private_key(x, c->pkeys[i].privatekey)) {
+            /*
+             * don't fail for a cert/key mismatch, just free current private
+             * key (when switching to a different cert & key, first this
+             * function should be used, then ssl_set_pkey
+             */
+            EVP_PKEY_free(c->pkeys[i].privatekey);
+            c->pkeys[i].privatekey = NULL;
+            /* clear error queue */
+            ERR_clear_error();
+        }
+    }
+
+    X509_free(c->pkeys[i].x509);
+    X509_up_ref(x);
+    c->pkeys[i].x509 = x;
+    c->key = &(c->pkeys[i]);
+
+    return 1;
+}
+
+int SSL_CTX_use_certificate_file(SSL_CTX *ctx, const char *file, int type)
+{
+    int j;
+    BIO *in;
+    int ret = 0;
+    X509 *x = NULL;
+
+    in = BIO_new(BIO_s_file());
+    if (in == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_CERTIFICATE_FILE, ERR_R_BUF_LIB);
+        goto end;
+    }
+
+    if (BIO_read_filename(in, file) <= 0) {
+        SSLerr(SSL_F_SSL_CTX_USE_CERTIFICATE_FILE, ERR_R_SYS_LIB);
+        goto end;
+    }
+    if (type == SSL_FILETYPE_ASN1) {
+        j = ERR_R_ASN1_LIB;
+        x = d2i_X509_bio(in, NULL);
+    } else if (type == SSL_FILETYPE_PEM) {
+        j = ERR_R_PEM_LIB;
+        x = PEM_read_bio_X509(in, NULL, ctx->default_passwd_callback,
+                              ctx->default_passwd_callback_userdata);
+    } else {
+        SSLerr(SSL_F_SSL_CTX_USE_CERTIFICATE_FILE, SSL_R_BAD_SSL_FILETYPE);
+        goto end;
+    }
+
+    if (x == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_CERTIFICATE_FILE, j);
+        goto end;
+    }
+
+    ret = SSL_CTX_use_certificate(ctx, x);
+ end:
+    X509_free(x);
+    BIO_free(in);
+    return ret;
+}
+
+int SSL_CTX_use_certificate_ASN1(SSL_CTX *ctx, int len, const unsigned char *d)
+{
+    X509 *x;
+    int ret;
+
+    x = d2i_X509(NULL, &d, (long)len);
+    if (x == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_CERTIFICATE_ASN1, ERR_R_ASN1_LIB);
+        return 0;
+    }
+
+    ret = SSL_CTX_use_certificate(ctx, x);
+    X509_free(x);
+    return ret;
+}
+
+#ifndef OPENSSL_NO_RSA
+int SSL_CTX_use_RSAPrivateKey(SSL_CTX *ctx, RSA *rsa)
+{
+    int ret;
+    EVP_PKEY *pkey;
+
+    if (rsa == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_RSAPRIVATEKEY, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    if ((pkey = EVP_PKEY_new()) == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_RSAPRIVATEKEY, ERR_R_EVP_LIB);
+        return 0;
+    }
+
+    RSA_up_ref(rsa);
+    if (EVP_PKEY_assign_RSA(pkey, rsa) <= 0) {
+        RSA_free(rsa);
+        EVP_PKEY_free(pkey);
+        return 0;
+    }
+
+    ret = ssl_set_pkey(ctx->cert, pkey);
+    EVP_PKEY_free(pkey);
+    return ret;
+}
+
+int SSL_CTX_use_RSAPrivateKey_file(SSL_CTX *ctx, const char *file, int type)
+{
+    int j, ret = 0;
+    BIO *in;
+    RSA *rsa = NULL;
+
+    in = BIO_new(BIO_s_file());
+    if (in == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_RSAPRIVATEKEY_FILE, ERR_R_BUF_LIB);
+        goto end;
+    }
+
+    if (BIO_read_filename(in, file) <= 0) {
+        SSLerr(SSL_F_SSL_CTX_USE_RSAPRIVATEKEY_FILE, ERR_R_SYS_LIB);
+        goto end;
+    }
+    if (type == SSL_FILETYPE_ASN1) {
+        j = ERR_R_ASN1_LIB;
+        rsa = d2i_RSAPrivateKey_bio(in, NULL);
+    } else if (type == SSL_FILETYPE_PEM) {
+        j = ERR_R_PEM_LIB;
+        rsa = PEM_read_bio_RSAPrivateKey(in, NULL,
+                                         ctx->default_passwd_callback,
+                                         ctx->default_passwd_callback_userdata);
+    } else {
+        SSLerr(SSL_F_SSL_CTX_USE_RSAPRIVATEKEY_FILE, SSL_R_BAD_SSL_FILETYPE);
+        goto end;
+    }
+    if (rsa == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_RSAPRIVATEKEY_FILE, j);
+        goto end;
+    }
+    ret = SSL_CTX_use_RSAPrivateKey(ctx, rsa);
+    RSA_free(rsa);
+ end:
+    BIO_free(in);
+    return ret;
+}
+
+int SSL_CTX_use_RSAPrivateKey_ASN1(SSL_CTX *ctx, const unsigned char *d,
+                                   long len)
+{
+    int ret;
+    const unsigned char *p;
+    RSA *rsa;
+
+    p = d;
+    if ((rsa = d2i_RSAPrivateKey(NULL, &p, (long)len)) == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_RSAPRIVATEKEY_ASN1, ERR_R_ASN1_LIB);
+        return 0;
+    }
+
+    ret = SSL_CTX_use_RSAPrivateKey(ctx, rsa);
+    RSA_free(rsa);
+    return ret;
+}
+#endif                          /* !OPENSSL_NO_RSA */
+
+int SSL_CTX_use_PrivateKey(SSL_CTX *ctx, EVP_PKEY *pkey)
+{
+    if (pkey == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_PRIVATEKEY, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    return ssl_set_pkey(ctx->cert, pkey);
+}
+
+int SSL_CTX_use_PrivateKey_file(SSL_CTX *ctx, const char *file, int type)
+{
+    int j, ret = 0;
+    BIO *in;
+    EVP_PKEY *pkey = NULL;
+
+    in = BIO_new(BIO_s_file());
+    if (in == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_PRIVATEKEY_FILE, ERR_R_BUF_LIB);
+        goto end;
+    }
+
+    if (BIO_read_filename(in, file) <= 0) {
+        SSLerr(SSL_F_SSL_CTX_USE_PRIVATEKEY_FILE, ERR_R_SYS_LIB);
+        goto end;
+    }
+    if (type == SSL_FILETYPE_PEM) {
+        j = ERR_R_PEM_LIB;
+        pkey = PEM_read_bio_PrivateKey(in, NULL,
+                                       ctx->default_passwd_callback,
+                                       ctx->default_passwd_callback_userdata);
+    } else if (type == SSL_FILETYPE_ASN1) {
+        j = ERR_R_ASN1_LIB;
+        pkey = d2i_PrivateKey_bio(in, NULL);
+    } else {
+        SSLerr(SSL_F_SSL_CTX_USE_PRIVATEKEY_FILE, SSL_R_BAD_SSL_FILETYPE);
+        goto end;
+    }
+    if (pkey == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_PRIVATEKEY_FILE, j);
+        goto end;
+    }
+    ret = SSL_CTX_use_PrivateKey(ctx, pkey);
+    EVP_PKEY_free(pkey);
+ end:
+    BIO_free(in);
+    return ret;
+}
+
+int SSL_CTX_use_PrivateKey_ASN1(int type, SSL_CTX *ctx,
+                                const unsigned char *d, long len)
+{
+    int ret;
+    const unsigned char *p;
+    EVP_PKEY *pkey;
+
+    p = d;
+    if ((pkey = d2i_PrivateKey(type, NULL, &p, (long)len)) == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_PRIVATEKEY_ASN1, ERR_R_ASN1_LIB);
+        return 0;
+    }
+
+    ret = SSL_CTX_use_PrivateKey(ctx, pkey);
+    EVP_PKEY_free(pkey);
+    return ret;
+}
+
+/*
+ * Read a file that contains our certificate in "PEM" format, possibly
+ * followed by a sequence of CA certificates that should be sent to the peer
+ * in the Certificate message.
+ */
+static int use_certificate_chain_file(SSL_CTX *ctx, SSL *ssl, const char *file)
+{
+    BIO *in;
+    int ret = 0;
+    X509 *x = NULL;
+    pem_password_cb *passwd_callback;
+    void *passwd_callback_userdata;
+
+    ERR_clear_error();          /* clear error stack for
+                                 * SSL_CTX_use_certificate() */
+
+    if (ctx != NULL) {
+        passwd_callback = ctx->default_passwd_callback;
+        passwd_callback_userdata = ctx->default_passwd_callback_userdata;
+    } else {
+        passwd_callback = ssl->default_passwd_callback;
+        passwd_callback_userdata = ssl->default_passwd_callback_userdata;
+    }
+
+    in = BIO_new(BIO_s_file());
+    if (in == NULL) {
+        SSLerr(SSL_F_USE_CERTIFICATE_CHAIN_FILE, ERR_R_BUF_LIB);
+        goto end;
+    }
+
+    if (BIO_read_filename(in, file) <= 0) {
+        SSLerr(SSL_F_USE_CERTIFICATE_CHAIN_FILE, ERR_R_SYS_LIB);
+        goto end;
+    }
+
+    x = PEM_read_bio_X509_AUX(in, NULL, passwd_callback,
+                              passwd_callback_userdata);
+    if (x == NULL) {
+        SSLerr(SSL_F_USE_CERTIFICATE_CHAIN_FILE, ERR_R_PEM_LIB);
+        goto end;
+    }
+
+    if (ctx)
+        ret = SSL_CTX_use_certificate(ctx, x);
+    else
+        ret = SSL_use_certificate(ssl, x);
+
+    if (ERR_peek_error() != 0)
+        ret = 0;                /* Key/certificate mismatch doesn't imply
+                                 * ret==0 ... */
+    if (ret) {
+        /*
+         * If we could set up our certificate, now proceed to the CA
+         * certificates.
+         */
+        X509 *ca;
+        int r;
+        unsigned long err;
+
+        if (ctx)
+            r = SSL_CTX_clear_chain_certs(ctx);
+        else
+            r = SSL_clear_chain_certs(ssl);
+
+        if (r == 0) {
+            ret = 0;
+            goto end;
+        }
+
+        while ((ca = PEM_read_bio_X509(in, NULL, passwd_callback,
+                                       passwd_callback_userdata))
+               != NULL) {
+            if (ctx)
+                r = SSL_CTX_add0_chain_cert(ctx, ca);
+            else
+                r = SSL_add0_chain_cert(ssl, ca);
+            /*
+             * Note that we must not free ca if it was successfully added to
+             * the chain (while we must free the main certificate, since its
+             * reference count is increased by SSL_CTX_use_certificate).
+             */
+            if (!r) {
+                X509_free(ca);
+                ret = 0;
+                goto end;
+            }
+        }
+        /* When the while loop ends, it's usually just EOF. */
+        err = ERR_peek_last_error();
+        if (ERR_GET_LIB(err) == ERR_LIB_PEM
+            && ERR_GET_REASON(err) == PEM_R_NO_START_LINE)
+            ERR_clear_error();
+        else
+            ret = 0;            /* some real error */
+    }
+
+ end:
+    X509_free(x);
+    BIO_free(in);
+    return ret;
+}
+
+int SSL_CTX_use_certificate_chain_file(SSL_CTX *ctx, const char *file)
+{
+    return use_certificate_chain_file(ctx, NULL, file);
+}
+
+int SSL_use_certificate_chain_file(SSL *ssl, const char *file)
+{
+    return use_certificate_chain_file(NULL, ssl, file);
+}
+
+static int serverinfo_find_extension(const unsigned char *serverinfo,
+                                     size_t serverinfo_length,
+                                     unsigned int extension_type,
+                                     const unsigned char **extension_data,
+                                     size_t *extension_length)
+{
+    PACKET pkt, data;
+
+    *extension_data = NULL;
+    *extension_length = 0;
+    if (serverinfo == NULL || serverinfo_length == 0)
+        return -1;
+
+    if (!PACKET_buf_init(&pkt, serverinfo, serverinfo_length))
+        return -1;
+
+    for (;;) {
+        unsigned int type = 0;
+        unsigned long context = 0;
+
+        /* end of serverinfo */
+        if (PACKET_remaining(&pkt) == 0)
+            return 0;           /* Extension not found */
+
+        if (!PACKET_get_net_4(&pkt, &context)
+                || !PACKET_get_net_2(&pkt, &type)
+                || !PACKET_get_length_prefixed_2(&pkt, &data))
+            return -1;
+
+        if (type == extension_type) {
+            *extension_data = PACKET_data(&data);
+            *extension_length = PACKET_remaining(&data);;
+            return 1;           /* Success */
+        }
+    }
+    /* Unreachable */
+}
+
+static int serverinfoex_srv_parse_cb(SSL *s, unsigned int ext_type,
+                                     unsigned int context,
+                                     const unsigned char *in,
+                                     size_t inlen, X509 *x, size_t chainidx,
+                                     int *al, void *arg)
+{
+
+    if (inlen != 0) {
+        *al = SSL_AD_DECODE_ERROR;
+        return 0;
+    }
+
+    return 1;
+}
+
+static int serverinfo_srv_parse_cb(SSL *s, unsigned int ext_type,
+                                   const unsigned char *in,
+                                   size_t inlen, int *al, void *arg)
+{
+    return serverinfoex_srv_parse_cb(s, ext_type, 0, in, inlen, NULL, 0, al,
+                                     arg);
+}
+
+static int serverinfoex_srv_add_cb(SSL *s, unsigned int ext_type,
+                                   unsigned int context,
+                                   const unsigned char **out,
+                                   size_t *outlen, X509 *x, size_t chainidx,
+                                   int *al, void *arg)
+{
+    const unsigned char *serverinfo = NULL;
+    size_t serverinfo_length = 0;
+
+    /* We only support extensions for the first Certificate */
+    if ((context & SSL_EXT_TLS1_3_CERTIFICATE) != 0 && chainidx > 0)
+        return 0;
+
+    /* Is there serverinfo data for the chosen server cert? */
+    if ((ssl_get_server_cert_serverinfo(s, &serverinfo,
+                                        &serverinfo_length)) != 0) {
+        /* Find the relevant extension from the serverinfo */
+        int retval = serverinfo_find_extension(serverinfo, serverinfo_length,
+                                               ext_type, out, outlen);
+        if (retval == -1) {
+            *al = SSL_AD_INTERNAL_ERROR;
+            return -1;          /* Error */
+        }
+        if (retval == 0)
+            return 0;           /* No extension found, don't send extension */
+        return 1;               /* Send extension */
+    }
+    return 0;                   /* No serverinfo data found, don't send
+                                 * extension */
+}
+
+static int serverinfo_srv_add_cb(SSL *s, unsigned int ext_type,
+                                 const unsigned char **out, size_t *outlen,
+                                 int *al, void *arg)
+{
+    return serverinfoex_srv_add_cb(s, ext_type, 0, out, outlen, NULL, 0, al,
+                                   arg);
+}
+
+/*
+ * With a NULL context, this function just checks that the serverinfo data
+ * parses correctly.  With a non-NULL context, it registers callbacks for
+ * the included extensions.
+ */
+static int serverinfo_process_buffer(unsigned int version,
+                                     const unsigned char *serverinfo,
+                                     size_t serverinfo_length, SSL_CTX *ctx)
+{
+    PACKET pkt;
+
+    if (serverinfo == NULL || serverinfo_length == 0)
+        return 0;
+
+    if (version != SSL_SERVERINFOV1 && version != SSL_SERVERINFOV2)
+        return 0;
+
+    if (!PACKET_buf_init(&pkt, serverinfo, serverinfo_length))
+        return 0;
+
+    while (PACKET_remaining(&pkt)) {
+        unsigned long context = 0;
+        unsigned int ext_type = 0;
+        PACKET data;
+
+        if ((version == SSL_SERVERINFOV2 && !PACKET_get_net_4(&pkt, &context))
+                || !PACKET_get_net_2(&pkt, &ext_type)
+                || !PACKET_get_length_prefixed_2(&pkt, &data))
+            return 0;
+
+        if (ctx == NULL)
+            continue;
+
+        /*
+         * The old style custom extensions API could be set separately for
+         * server/client, i.e. you could set one custom extension for a client,
+         * and *for the same extension in the same SSL_CTX* you could set a
+         * custom extension for the server as well. It seems quite weird to be
+         * setting a custom extension for both client and server in a single
+         * SSL_CTX - but theoretically possible. This isn't possible in the
+         * new API. Therefore, if we have V1 serverinfo we use the old API. We
+         * also use the old API even if we have V2 serverinfo but the context
+         * looks like an old style <= TLSv1.2 extension.
+         */
+        if (version == SSL_SERVERINFOV1 || context == SYNTHV1CONTEXT) {
+            if (!SSL_CTX_add_server_custom_ext(ctx, ext_type,
+                                               serverinfo_srv_add_cb,
+                                               NULL, NULL,
+                                               serverinfo_srv_parse_cb,
+                                               NULL))
+                return 0;
+        } else {
+            if (!SSL_CTX_add_custom_ext(ctx, ext_type, context,
+                                        serverinfoex_srv_add_cb,
+                                        NULL, NULL,
+                                        serverinfoex_srv_parse_cb,
+                                        NULL))
+                return 0;
+        }
+    }
+
+    return 1;
+}
+
+int SSL_CTX_use_serverinfo_ex(SSL_CTX *ctx, unsigned int version,
+                              const unsigned char *serverinfo,
+                              size_t serverinfo_length)
+{
+    unsigned char *new_serverinfo;
+
+    if (ctx == NULL || serverinfo == NULL || serverinfo_length == 0) {
+        SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_EX, ERR_R_PASSED_NULL_PARAMETER);
+        return 0;
+    }
+    if (!serverinfo_process_buffer(version, serverinfo, serverinfo_length,
+                                   NULL)) {
+        SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_EX, SSL_R_INVALID_SERVERINFO_DATA);
+        return 0;
+    }
+    if (ctx->cert->key == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_EX, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    new_serverinfo = OPENSSL_realloc(ctx->cert->key->serverinfo,
+                                     serverinfo_length);
+    if (new_serverinfo == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_EX, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    ctx->cert->key->serverinfo = new_serverinfo;
+    memcpy(ctx->cert->key->serverinfo, serverinfo, serverinfo_length);
+    ctx->cert->key->serverinfo_length = serverinfo_length;
+
+    /*
+     * Now that the serverinfo is validated and stored, go ahead and
+     * register callbacks.
+     */
+    if (!serverinfo_process_buffer(version, serverinfo, serverinfo_length,
+                                   ctx)) {
+        SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_EX, SSL_R_INVALID_SERVERINFO_DATA);
+        return 0;
+    }
+    return 1;
+}
+
+int SSL_CTX_use_serverinfo(SSL_CTX *ctx, const unsigned char *serverinfo,
+                           size_t serverinfo_length)
+{
+    return SSL_CTX_use_serverinfo_ex(ctx, SSL_SERVERINFOV1, serverinfo,
+                                     serverinfo_length);
+}
+
+int SSL_CTX_use_serverinfo_file(SSL_CTX *ctx, const char *file)
+{
+    unsigned char *serverinfo = NULL;
+    unsigned char *tmp;
+    size_t serverinfo_length = 0;
+    unsigned char *extension = 0;
+    long extension_length = 0;
+    char *name = NULL;
+    char *header = NULL;
+    char namePrefix1[] = "SERVERINFO FOR ";
+    char namePrefix2[] = "SERVERINFOV2 FOR ";
+    int ret = 0;
+    BIO *bin = NULL;
+    size_t num_extensions = 0, contextoff = 0;
+
+    if (ctx == NULL || file == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_FILE, ERR_R_PASSED_NULL_PARAMETER);
+        goto end;
+    }
+
+    bin = BIO_new(BIO_s_file());
+    if (bin == NULL) {
+        SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_FILE, ERR_R_BUF_LIB);
+        goto end;
+    }
+    if (BIO_read_filename(bin, file) <= 0) {
+        SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_FILE, ERR_R_SYS_LIB);
+        goto end;
+    }
+
+    for (num_extensions = 0;; num_extensions++) {
+        unsigned int version;
+
+        if (PEM_read_bio(bin, &name, &header, &extension, &extension_length)
+            == 0) {
+            /*
+             * There must be at least one extension in this file
+             */
+            if (num_extensions == 0) {
+                SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_FILE,
+                       SSL_R_NO_PEM_EXTENSIONS);
+                goto end;
+            } else              /* End of file, we're done */
+                break;
+        }
+        /* Check that PEM name starts with "BEGIN SERVERINFO FOR " */
+        if (strlen(name) < strlen(namePrefix1)) {
+            SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_FILE, SSL_R_PEM_NAME_TOO_SHORT);
+            goto end;
+        }
+        if (strncmp(name, namePrefix1, strlen(namePrefix1)) == 0) {
+            version = SSL_SERVERINFOV1;
+        } else {
+            if (strlen(name) < strlen(namePrefix2)) {
+                SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_FILE,
+                       SSL_R_PEM_NAME_TOO_SHORT);
+                goto end;
+            }
+            if (strncmp(name, namePrefix2, strlen(namePrefix2)) != 0) {
+                SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_FILE,
+                       SSL_R_PEM_NAME_BAD_PREFIX);
+                goto end;
+            }
+            version = SSL_SERVERINFOV2;
+        }
+        /*
+         * Check that the decoded PEM data is plausible (valid length field)
+         */
+        if (version == SSL_SERVERINFOV1) {
+            /* 4 byte header: 2 bytes type, 2 bytes len */
+            if (extension_length < 4
+                    || (extension[2] << 8) + extension[3]
+                       != extension_length - 4) {
+                SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_FILE, SSL_R_BAD_DATA);
+                goto end;
+            }
+            /*
+             * File does not have a context value so we must take account of
+             * this later.
+             */
+            contextoff = 4;
+        } else {
+            /* 8 byte header: 4 bytes context, 2 bytes type, 2 bytes len */
+            if (extension_length < 8
+                    || (extension[6] << 8) + extension[7]
+                       != extension_length - 8) {
+                SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_FILE, SSL_R_BAD_DATA);
+                goto end;
+            }
+        }
+        /* Append the decoded extension to the serverinfo buffer */
+        tmp = OPENSSL_realloc(serverinfo, serverinfo_length + extension_length
+                                          + contextoff);
+        if (tmp == NULL) {
+            SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_FILE, ERR_R_MALLOC_FAILURE);
+            goto end;
+        }
+        serverinfo = tmp;
+        if (contextoff > 0) {
+            unsigned char *sinfo = serverinfo + serverinfo_length;
+
+            /* We know this only uses the last 2 bytes */
+            sinfo[0] = 0;
+            sinfo[1] = 0;
+            sinfo[2] = (SYNTHV1CONTEXT >> 8) & 0xff;
+            sinfo[3] = SYNTHV1CONTEXT & 0xff;
+        }
+        memcpy(serverinfo + serverinfo_length + contextoff,
+               extension, extension_length);
+        serverinfo_length += extension_length + contextoff;
+
+        OPENSSL_free(name);
+        name = NULL;
+        OPENSSL_free(header);
+        header = NULL;
+        OPENSSL_free(extension);
+        extension = NULL;
+    }
+
+    ret = SSL_CTX_use_serverinfo_ex(ctx, SSL_SERVERINFOV2, serverinfo,
+                                    serverinfo_length);
+ end:
+    /* SSL_CTX_use_serverinfo makes a local copy of the serverinfo. */
+    OPENSSL_free(name);
+    OPENSSL_free(header);
+    OPENSSL_free(extension);
+    OPENSSL_free(serverinfo);
+    BIO_free(bin);
+    return ret;
+}
+
+static int ssl_set_cert_and_key(SSL *ssl, SSL_CTX *ctx, X509 *x509, EVP_PKEY *privatekey,
+                                STACK_OF(X509) *chain, int override)
+{
+    int ret = 0;
+    size_t i;
+    int j;
+    int rv;
+    CERT *c = ssl != NULL ? ssl->cert : ctx->cert;
+    STACK_OF(X509) *dup_chain = NULL;
+    EVP_PKEY *pubkey = NULL;
+
+    /* Do all security checks before anything else */
+    rv = ssl_security_cert(ssl, ctx, x509, 0, 1);
+    if (rv != 1) {
+        SSLerr(SSL_F_SSL_SET_CERT_AND_KEY, rv);
+        goto out;
+    }
+    for (j = 0; j < sk_X509_num(chain); j++) {
+        rv = ssl_security_cert(ssl, ctx, sk_X509_value(chain, j), 0, 0);
+        if (rv != 1) {
+            SSLerr(SSL_F_SSL_SET_CERT_AND_KEY, rv);
+            goto out;
+        }
+    }
+
+    pubkey = X509_get_pubkey(x509); /* bumps reference */
+    if (pubkey == NULL)
+        goto out;
+    if (privatekey == NULL) {
+        privatekey = pubkey;
+    } else {
+        /* For RSA, which has no parameters, missing returns 0 */
+        if (EVP_PKEY_missing_parameters(privatekey)) {
+            if (EVP_PKEY_missing_parameters(pubkey)) {
+                /* nobody has parameters? - error */
+                SSLerr(SSL_F_SSL_SET_CERT_AND_KEY, SSL_R_MISSING_PARAMETERS);
+                goto out;
+            } else {
+                /* copy to privatekey from pubkey */
+                EVP_PKEY_copy_parameters(privatekey, pubkey);
+            }
+        } else if (EVP_PKEY_missing_parameters(pubkey)) {
+            /* copy to pubkey from privatekey */
+            EVP_PKEY_copy_parameters(pubkey, privatekey);
+        } /* else both have parameters */
+
+        /* Copied from ssl_set_cert/pkey */
+#ifndef OPENSSL_NO_RSA
+        if ((EVP_PKEY_id(privatekey) == EVP_PKEY_RSA) &&
+            ((RSA_flags(EVP_PKEY_get0_RSA(privatekey)) & RSA_METHOD_FLAG_NO_CHECK)))
+            /* no-op */ ;
+        else
+#endif
+        /* check that key <-> cert match */
+        if (EVP_PKEY_cmp(pubkey, privatekey) != 1) {
+            SSLerr(SSL_F_SSL_SET_CERT_AND_KEY, SSL_R_PRIVATE_KEY_MISMATCH);
+            goto out;
+        }
+    }
+    if (ssl_cert_lookup_by_pkey(pubkey, &i) == NULL) {
+        SSLerr(SSL_F_SSL_SET_CERT_AND_KEY, SSL_R_UNKNOWN_CERTIFICATE_TYPE);
+        goto out;
+    }
+
+    if (!override && (c->pkeys[i].x509 != NULL
+                      || c->pkeys[i].privatekey != NULL
+                      || c->pkeys[i].chain != NULL)) {
+        /* No override, and something already there */
+        SSLerr(SSL_F_SSL_SET_CERT_AND_KEY, SSL_R_NOT_REPLACING_CERTIFICATE);
+        goto out;
+    }
+
+    if (chain != NULL) {
+        dup_chain = X509_chain_up_ref(chain);
+        if  (dup_chain == NULL) {
+            SSLerr(SSL_F_SSL_SET_CERT_AND_KEY, ERR_R_MALLOC_FAILURE);
+            goto out;
+        }
+    }
+
+    sk_X509_pop_free(c->pkeys[i].chain, X509_free);
+    c->pkeys[i].chain = dup_chain;
+
+    X509_free(c->pkeys[i].x509);
+    X509_up_ref(x509);
+    c->pkeys[i].x509 = x509;
+
+    EVP_PKEY_free(c->pkeys[i].privatekey);
+    EVP_PKEY_up_ref(privatekey);
+    c->pkeys[i].privatekey = privatekey;
+
+    c->key = &(c->pkeys[i]);
+
+    ret = 1;
+ out:
+    EVP_PKEY_free(pubkey);
+    return ret;
+}
+
+int SSL_use_cert_and_key(SSL *ssl, X509 *x509, EVP_PKEY *privatekey,
+                         STACK_OF(X509) *chain, int override)
+{
+    return ssl_set_cert_and_key(ssl, NULL, x509, privatekey, chain, override);
+}
+
+int SSL_CTX_use_cert_and_key(SSL_CTX *ctx, X509 *x509, EVP_PKEY *privatekey,
+                             STACK_OF(X509) *chain, int override)
+{
+    return ssl_set_cert_and_key(NULL, ctx, x509, privatekey, chain, override);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_sess.c b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_sess.c
new file mode 100644
index 000000000..5ad2792a1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_sess.c
@@ -0,0 +1,1317 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2005 Nokia. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <openssl/rand.h>
+#include <openssl/engine.h>
+#include "internal/refcount.h"
+#include "internal/cryptlib.h"
+#include "ssl_locl.h"
+#include "statem/statem_locl.h"
+
+static void SSL_SESSION_list_remove(SSL_CTX *ctx, SSL_SESSION *s);
+static void SSL_SESSION_list_add(SSL_CTX *ctx, SSL_SESSION *s);
+static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck);
+
+/*
+ * SSL_get_session() and SSL_get1_session() are problematic in TLS1.3 because,
+ * unlike in earlier protocol versions, the session ticket may not have been
+ * sent yet even though a handshake has finished. The session ticket data could
+ * come in sometime later...or even change if multiple session ticket messages
+ * are sent from the server. The preferred way for applications to obtain
+ * a resumable session is to use SSL_CTX_sess_set_new_cb().
+ */
+
+SSL_SESSION *SSL_get_session(const SSL *ssl)
+/* aka SSL_get0_session; gets 0 objects, just returns a copy of the pointer */
+{
+    return ssl->session;
+}
+
+SSL_SESSION *SSL_get1_session(SSL *ssl)
+/* variant of SSL_get_session: caller really gets something */
+{
+    SSL_SESSION *sess;
+    /*
+     * Need to lock this all up rather than just use CRYPTO_add so that
+     * somebody doesn't free ssl->session between when we check it's non-null
+     * and when we up the reference count.
+     */
+    CRYPTO_THREAD_read_lock(ssl->lock);
+    sess = ssl->session;
+    if (sess)
+        SSL_SESSION_up_ref(sess);
+    CRYPTO_THREAD_unlock(ssl->lock);
+    return sess;
+}
+
+int SSL_SESSION_set_ex_data(SSL_SESSION *s, int idx, void *arg)
+{
+    return CRYPTO_set_ex_data(&s->ex_data, idx, arg);
+}
+
+void *SSL_SESSION_get_ex_data(const SSL_SESSION *s, int idx)
+{
+    return CRYPTO_get_ex_data(&s->ex_data, idx);
+}
+
+SSL_SESSION *SSL_SESSION_new(void)
+{
+    SSL_SESSION *ss;
+
+    if (!OPENSSL_init_ssl(OPENSSL_INIT_LOAD_SSL_STRINGS, NULL))
+        return NULL;
+
+    ss = OPENSSL_zalloc(sizeof(*ss));
+    if (ss == NULL) {
+        SSLerr(SSL_F_SSL_SESSION_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    ss->verify_result = 1;      /* avoid 0 (= X509_V_OK) just in case */
+    ss->references = 1;
+    ss->timeout = 60 * 5 + 4;   /* 5 minute timeout by default */
+    ss->time = (unsigned long)time(NULL);
+    ss->lock = CRYPTO_THREAD_lock_new();
+    if (ss->lock == NULL) {
+        SSLerr(SSL_F_SSL_SESSION_NEW, ERR_R_MALLOC_FAILURE);
+        OPENSSL_free(ss);
+        return NULL;
+    }
+
+    if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_SSL_SESSION, ss, &ss->ex_data)) {
+        CRYPTO_THREAD_lock_free(ss->lock);
+        OPENSSL_free(ss);
+        return NULL;
+    }
+    return ss;
+}
+
+SSL_SESSION *SSL_SESSION_dup(SSL_SESSION *src)
+{
+    return ssl_session_dup(src, 1);
+}
+
+/*
+ * Create a new SSL_SESSION and duplicate the contents of |src| into it. If
+ * ticket == 0 then no ticket information is duplicated, otherwise it is.
+ */
+SSL_SESSION *ssl_session_dup(SSL_SESSION *src, int ticket)
+{
+    SSL_SESSION *dest;
+
+    dest = OPENSSL_malloc(sizeof(*src));
+    if (dest == NULL) {
+        goto err;
+    }
+    memcpy(dest, src, sizeof(*dest));
+
+    /*
+     * Set the various pointers to NULL so that we can call SSL_SESSION_free in
+     * the case of an error whilst halfway through constructing dest
+     */
+#ifndef OPENSSL_NO_PSK
+    dest->psk_identity_hint = NULL;
+    dest->psk_identity = NULL;
+#endif
+    dest->ciphers = NULL;
+    dest->ext.hostname = NULL;
+#ifndef OPENSSL_NO_EC
+    dest->ext.ecpointformats = NULL;
+    dest->ext.supportedgroups = NULL;
+#endif
+    dest->ext.tick = NULL;
+    dest->ext.alpn_selected = NULL;
+#ifndef OPENSSL_NO_SRP
+    dest->srp_username = NULL;
+#endif
+    dest->peer_chain = NULL;
+    dest->peer = NULL;
+    dest->ticket_appdata = NULL;
+    memset(&dest->ex_data, 0, sizeof(dest->ex_data));
+
+    /* We deliberately don't copy the prev and next pointers */
+    dest->prev = NULL;
+    dest->next = NULL;
+
+    dest->references = 1;
+
+    dest->lock = CRYPTO_THREAD_lock_new();
+    if (dest->lock == NULL)
+        goto err;
+
+    if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_SSL_SESSION, dest, &dest->ex_data))
+        goto err;
+
+    if (src->peer != NULL) {
+        if (!X509_up_ref(src->peer))
+            goto err;
+        dest->peer = src->peer;
+    }
+
+    if (src->peer_chain != NULL) {
+        dest->peer_chain = X509_chain_up_ref(src->peer_chain);
+        if (dest->peer_chain == NULL)
+            goto err;
+    }
+#ifndef OPENSSL_NO_PSK
+    if (src->psk_identity_hint) {
+        dest->psk_identity_hint = OPENSSL_strdup(src->psk_identity_hint);
+        if (dest->psk_identity_hint == NULL) {
+            goto err;
+        }
+    }
+    if (src->psk_identity) {
+        dest->psk_identity = OPENSSL_strdup(src->psk_identity);
+        if (dest->psk_identity == NULL) {
+            goto err;
+        }
+    }
+#endif
+
+    if (src->ciphers != NULL) {
+        dest->ciphers = sk_SSL_CIPHER_dup(src->ciphers);
+        if (dest->ciphers == NULL)
+            goto err;
+    }
+
+    if (!CRYPTO_dup_ex_data(CRYPTO_EX_INDEX_SSL_SESSION,
+                            &dest->ex_data, &src->ex_data)) {
+        goto err;
+    }
+
+    if (src->ext.hostname) {
+        dest->ext.hostname = OPENSSL_strdup(src->ext.hostname);
+        if (dest->ext.hostname == NULL) {
+            goto err;
+        }
+    }
+#ifndef OPENSSL_NO_EC
+    if (src->ext.ecpointformats) {
+        dest->ext.ecpointformats =
+            OPENSSL_memdup(src->ext.ecpointformats,
+                           src->ext.ecpointformats_len);
+        if (dest->ext.ecpointformats == NULL)
+            goto err;
+    }
+    if (src->ext.supportedgroups) {
+        dest->ext.supportedgroups =
+            OPENSSL_memdup(src->ext.supportedgroups,
+                           src->ext.supportedgroups_len
+                                * sizeof(*src->ext.supportedgroups));
+        if (dest->ext.supportedgroups == NULL)
+            goto err;
+    }
+#endif
+
+    if (ticket != 0 && src->ext.tick != NULL) {
+        dest->ext.tick =
+            OPENSSL_memdup(src->ext.tick, src->ext.ticklen);
+        if (dest->ext.tick == NULL)
+            goto err;
+    } else {
+        dest->ext.tick_lifetime_hint = 0;
+        dest->ext.ticklen = 0;
+    }
+
+    if (src->ext.alpn_selected != NULL) {
+        dest->ext.alpn_selected = OPENSSL_memdup(src->ext.alpn_selected,
+                                                 src->ext.alpn_selected_len);
+        if (dest->ext.alpn_selected == NULL)
+            goto err;
+    }
+
+#ifndef OPENSSL_NO_SRP
+    if (src->srp_username) {
+        dest->srp_username = OPENSSL_strdup(src->srp_username);
+        if (dest->srp_username == NULL) {
+            goto err;
+        }
+    }
+#endif
+
+    if (src->ticket_appdata != NULL) {
+        dest->ticket_appdata =
+            OPENSSL_memdup(src->ticket_appdata, src->ticket_appdata_len);
+        if (dest->ticket_appdata == NULL)
+            goto err;
+    }
+
+    return dest;
+ err:
+    SSLerr(SSL_F_SSL_SESSION_DUP, ERR_R_MALLOC_FAILURE);
+    SSL_SESSION_free(dest);
+    return NULL;
+}
+
+const unsigned char *SSL_SESSION_get_id(const SSL_SESSION *s, unsigned int *len)
+{
+    if (len)
+        *len = (unsigned int)s->session_id_length;
+    return s->session_id;
+}
+const unsigned char *SSL_SESSION_get0_id_context(const SSL_SESSION *s,
+                                                unsigned int *len)
+{
+    if (len != NULL)
+        *len = (unsigned int)s->sid_ctx_length;
+    return s->sid_ctx;
+}
+
+unsigned int SSL_SESSION_get_compress_id(const SSL_SESSION *s)
+{
+    return s->compress_meth;
+}
+
+/*
+ * SSLv3/TLSv1 has 32 bytes (256 bits) of session ID space. As such, filling
+ * the ID with random junk repeatedly until we have no conflict is going to
+ * complete in one iteration pretty much "most" of the time (btw:
+ * understatement). So, if it takes us 10 iterations and we still can't avoid
+ * a conflict - well that's a reasonable point to call it quits. Either the
+ * RAND code is broken or someone is trying to open roughly very close to
+ * 2^256 SSL sessions to our server. How you might store that many sessions
+ * is perhaps a more interesting question ...
+ */
+
+#define MAX_SESS_ID_ATTEMPTS 10
+static int def_generate_session_id(SSL *ssl, unsigned char *id,
+                                   unsigned int *id_len)
+{
+    unsigned int retry = 0;
+    do
+        if (RAND_bytes(id, *id_len) <= 0)
+            return 0;
+    while (SSL_has_matching_session_id(ssl, id, *id_len) &&
+           (++retry < MAX_SESS_ID_ATTEMPTS)) ;
+    if (retry < MAX_SESS_ID_ATTEMPTS)
+        return 1;
+    /* else - woops a session_id match */
+    /*
+     * XXX We should also check the external cache -- but the probability of
+     * a collision is negligible, and we could not prevent the concurrent
+     * creation of sessions with identical IDs since we currently don't have
+     * means to atomically check whether a session ID already exists and make
+     * a reservation for it if it does not (this problem applies to the
+     * internal cache as well).
+     */
+    return 0;
+}
+
+int ssl_generate_session_id(SSL *s, SSL_SESSION *ss)
+{
+    unsigned int tmp;
+    GEN_SESSION_CB cb = def_generate_session_id;
+
+    switch (s->version) {
+    case SSL3_VERSION:
+    case TLS1_VERSION:
+    case TLS1_1_VERSION:
+    case TLS1_2_VERSION:
+    case TLS1_3_VERSION:
+    case DTLS1_BAD_VER:
+    case DTLS1_VERSION:
+    case DTLS1_2_VERSION:
+        ss->session_id_length = SSL3_SSL_SESSION_ID_LENGTH;
+        break;
+    default:
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GENERATE_SESSION_ID,
+                 SSL_R_UNSUPPORTED_SSL_VERSION);
+        return 0;
+    }
+
+    /*-
+     * If RFC5077 ticket, use empty session ID (as server).
+     * Note that:
+     * (a) ssl_get_prev_session() does lookahead into the
+     *     ClientHello extensions to find the session ticket.
+     *     When ssl_get_prev_session() fails, statem_srvr.c calls
+     *     ssl_get_new_session() in tls_process_client_hello().
+     *     At that point, it has not yet parsed the extensions,
+     *     however, because of the lookahead, it already knows
+     *     whether a ticket is expected or not.
+     *
+     * (b) statem_clnt.c calls ssl_get_new_session() before parsing
+     *     ServerHello extensions, and before recording the session
+     *     ID received from the server, so this block is a noop.
+     */
+    if (s->ext.ticket_expected) {
+        ss->session_id_length = 0;
+        return 1;
+    }
+
+    /* Choose which callback will set the session ID */
+    CRYPTO_THREAD_read_lock(s->lock);
+    CRYPTO_THREAD_read_lock(s->session_ctx->lock);
+    if (s->generate_session_id)
+        cb = s->generate_session_id;
+    else if (s->session_ctx->generate_session_id)
+        cb = s->session_ctx->generate_session_id;
+    CRYPTO_THREAD_unlock(s->session_ctx->lock);
+    CRYPTO_THREAD_unlock(s->lock);
+    /* Choose a session ID */
+    memset(ss->session_id, 0, ss->session_id_length);
+    tmp = (int)ss->session_id_length;
+    if (!cb(s, ss->session_id, &tmp)) {
+        /* The callback failed */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GENERATE_SESSION_ID,
+                 SSL_R_SSL_SESSION_ID_CALLBACK_FAILED);
+        return 0;
+    }
+    /*
+     * Don't allow the callback to set the session length to zero. nor
+     * set it higher than it was.
+     */
+    if (tmp == 0 || tmp > ss->session_id_length) {
+        /* The callback set an illegal length */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GENERATE_SESSION_ID,
+                 SSL_R_SSL_SESSION_ID_HAS_BAD_LENGTH);
+        return 0;
+    }
+    ss->session_id_length = tmp;
+    /* Finally, check for a conflict */
+    if (SSL_has_matching_session_id(s, ss->session_id,
+                                    (unsigned int)ss->session_id_length)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GENERATE_SESSION_ID,
+                 SSL_R_SSL_SESSION_ID_CONFLICT);
+        return 0;
+    }
+
+    return 1;
+}
+
+int ssl_get_new_session(SSL *s, int session)
+{
+    /* This gets used by clients and servers. */
+
+    SSL_SESSION *ss = NULL;
+
+    if ((ss = SSL_SESSION_new()) == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GET_NEW_SESSION,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    /* If the context has a default timeout, use it */
+    if (s->session_ctx->session_timeout == 0)
+        ss->timeout = SSL_get_default_timeout(s);
+    else
+        ss->timeout = s->session_ctx->session_timeout;
+
+    SSL_SESSION_free(s->session);
+    s->session = NULL;
+
+    if (session) {
+        if (SSL_IS_TLS13(s)) {
+            /*
+             * We generate the session id while constructing the
+             * NewSessionTicket in TLSv1.3.
+             */
+            ss->session_id_length = 0;
+        } else if (!ssl_generate_session_id(s, ss)) {
+            /* SSLfatal() already called */
+            SSL_SESSION_free(ss);
+            return 0;
+        }
+
+    } else {
+        ss->session_id_length = 0;
+    }
+
+    if (s->sid_ctx_length > sizeof(ss->sid_ctx)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GET_NEW_SESSION,
+                 ERR_R_INTERNAL_ERROR);
+        SSL_SESSION_free(ss);
+        return 0;
+    }
+    memcpy(ss->sid_ctx, s->sid_ctx, s->sid_ctx_length);
+    ss->sid_ctx_length = s->sid_ctx_length;
+    s->session = ss;
+    ss->ssl_version = s->version;
+    ss->verify_result = X509_V_OK;
+
+    /* If client supports extended master secret set it in session */
+    if (s->s3->flags & TLS1_FLAGS_RECEIVED_EXTMS)
+        ss->flags |= SSL_SESS_FLAG_EXTMS;
+
+    return 1;
+}
+
+SSL_SESSION *lookup_sess_in_cache(SSL *s, const unsigned char *sess_id,
+                                  size_t sess_id_len)
+{
+    SSL_SESSION *ret = NULL;
+
+    if ((s->session_ctx->session_cache_mode
+         & SSL_SESS_CACHE_NO_INTERNAL_LOOKUP) == 0) {
+        SSL_SESSION data;
+
+        data.ssl_version = s->version;
+        if (!ossl_assert(sess_id_len <= SSL_MAX_SSL_SESSION_ID_LENGTH))
+            return NULL;
+
+        memcpy(data.session_id, sess_id, sess_id_len);
+        data.session_id_length = sess_id_len;
+
+        CRYPTO_THREAD_read_lock(s->session_ctx->lock);
+        ret = lh_SSL_SESSION_retrieve(s->session_ctx->sessions, &data);
+        if (ret != NULL) {
+            /* don't allow other threads to steal it: */
+            SSL_SESSION_up_ref(ret);
+        }
+        CRYPTO_THREAD_unlock(s->session_ctx->lock);
+        if (ret == NULL)
+            tsan_counter(&s->session_ctx->stats.sess_miss);
+    }
+
+    if (ret == NULL && s->session_ctx->get_session_cb != NULL) {
+        int copy = 1;
+
+        ret = s->session_ctx->get_session_cb(s, sess_id, sess_id_len, &copy);
+
+        if (ret != NULL) {
+            tsan_counter(&s->session_ctx->stats.sess_cb_hit);
+
+            /*
+             * Increment reference count now if the session callback asks us
+             * to do so (note that if the session structures returned by the
+             * callback are shared between threads, it must handle the
+             * reference count itself [i.e. copy == 0], or things won't be
+             * thread-safe).
+             */
+            if (copy)
+                SSL_SESSION_up_ref(ret);
+
+            /*
+             * Add the externally cached session to the internal cache as
+             * well if and only if we are supposed to.
+             */
+            if ((s->session_ctx->session_cache_mode &
+                 SSL_SESS_CACHE_NO_INTERNAL_STORE) == 0) {
+                /*
+                 * Either return value of SSL_CTX_add_session should not
+                 * interrupt the session resumption process. The return
+                 * value is intentionally ignored.
+                 */
+                (void)SSL_CTX_add_session(s->session_ctx, ret);
+            }
+        }
+    }
+
+    return ret;
+}
+
+/*-
+ * ssl_get_prev attempts to find an SSL_SESSION to be used to resume this
+ * connection. It is only called by servers.
+ *
+ *   hello: The parsed ClientHello data
+ *
+ * Returns:
+ *   -1: fatal error
+ *    0: no session found
+ *    1: a session may have been found.
+ *
+ * Side effects:
+ *   - If a session is found then s->session is pointed at it (after freeing an
+ *     existing session if need be) and s->verify_result is set from the session.
+ *   - Both for new and resumed sessions, s->ext.ticket_expected is set to 1
+ *     if the server should issue a new session ticket (to 0 otherwise).
+ */
+int ssl_get_prev_session(SSL *s, CLIENTHELLO_MSG *hello)
+{
+    /* This is used only by servers. */
+
+    SSL_SESSION *ret = NULL;
+    int fatal = 0;
+    int try_session_cache = 0;
+    SSL_TICKET_STATUS r;
+
+    if (SSL_IS_TLS13(s)) {
+        /*
+         * By default we will send a new ticket. This can be overridden in the
+         * ticket processing.
+         */
+        s->ext.ticket_expected = 1;
+        if (!tls_parse_extension(s, TLSEXT_IDX_psk_kex_modes,
+                                 SSL_EXT_CLIENT_HELLO, hello->pre_proc_exts,
+                                 NULL, 0)
+                || !tls_parse_extension(s, TLSEXT_IDX_psk, SSL_EXT_CLIENT_HELLO,
+                                        hello->pre_proc_exts, NULL, 0))
+            return -1;
+
+        ret = s->session;
+    } else {
+        /* sets s->ext.ticket_expected */
+        r = tls_get_ticket_from_client(s, hello, &ret);
+        switch (r) {
+        case SSL_TICKET_FATAL_ERR_MALLOC:
+        case SSL_TICKET_FATAL_ERR_OTHER:
+            fatal = 1;
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GET_PREV_SESSION,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        case SSL_TICKET_NONE:
+        case SSL_TICKET_EMPTY:
+            if (hello->session_id_len > 0) {
+                try_session_cache = 1;
+                ret = lookup_sess_in_cache(s, hello->session_id,
+                                           hello->session_id_len);
+            }
+            break;
+        case SSL_TICKET_NO_DECRYPT:
+        case SSL_TICKET_SUCCESS:
+        case SSL_TICKET_SUCCESS_RENEW:
+            break;
+        }
+    }
+
+    if (ret == NULL)
+        goto err;
+
+    /* Now ret is non-NULL and we own one of its reference counts. */
+
+    /* Check TLS version consistency */
+    if (ret->ssl_version != s->version)
+        goto err;
+
+    if (ret->sid_ctx_length != s->sid_ctx_length
+        || memcmp(ret->sid_ctx, s->sid_ctx, ret->sid_ctx_length)) {
+        /*
+         * We have the session requested by the client, but we don't want to
+         * use it in this context.
+         */
+        goto err;               /* treat like cache miss */
+    }
+
+    if ((s->verify_mode & SSL_VERIFY_PEER) && s->sid_ctx_length == 0) {
+        /*
+         * We can't be sure if this session is being used out of context,
+         * which is especially important for SSL_VERIFY_PEER. The application
+         * should have used SSL[_CTX]_set_session_id_context. For this error
+         * case, we generate an error instead of treating the event like a
+         * cache miss (otherwise it would be easy for applications to
+         * effectively disable the session cache by accident without anyone
+         * noticing).
+         */
+
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_GET_PREV_SESSION,
+                 SSL_R_SESSION_ID_CONTEXT_UNINITIALIZED);
+        fatal = 1;
+        goto err;
+    }
+
+    if (ret->timeout < (long)(time(NULL) - ret->time)) { /* timeout */
+        tsan_counter(&s->session_ctx->stats.sess_timeout);
+        if (try_session_cache) {
+            /* session was from the cache, so remove it */
+            SSL_CTX_remove_session(s->session_ctx, ret);
+        }
+        goto err;
+    }
+
+    /* Check extended master secret extension consistency */
+    if (ret->flags & SSL_SESS_FLAG_EXTMS) {
+        /* If old session includes extms, but new does not: abort handshake */
+        if (!(s->s3->flags & TLS1_FLAGS_RECEIVED_EXTMS)) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_SSL_GET_PREV_SESSION,
+                     SSL_R_INCONSISTENT_EXTMS);
+            fatal = 1;
+            goto err;
+        }
+    } else if (s->s3->flags & TLS1_FLAGS_RECEIVED_EXTMS) {
+        /* If new session includes extms, but old does not: do not resume */
+        goto err;
+    }
+
+    if (!SSL_IS_TLS13(s)) {
+        /* We already did this for TLS1.3 */
+        SSL_SESSION_free(s->session);
+        s->session = ret;
+    }
+
+    tsan_counter(&s->session_ctx->stats.sess_hit);
+    s->verify_result = s->session->verify_result;
+    return 1;
+
+ err:
+    if (ret != NULL) {
+        SSL_SESSION_free(ret);
+        /* In TLSv1.3 s->session was already set to ret, so we NULL it out */
+        if (SSL_IS_TLS13(s))
+            s->session = NULL;
+
+        if (!try_session_cache) {
+            /*
+             * The session was from a ticket, so we should issue a ticket for
+             * the new session
+             */
+            s->ext.ticket_expected = 1;
+        }
+    }
+    if (fatal)
+        return -1;
+
+    return 0;
+}
+
+int SSL_CTX_add_session(SSL_CTX *ctx, SSL_SESSION *c)
+{
+    int ret = 0;
+    SSL_SESSION *s;
+
+    /*
+     * add just 1 reference count for the SSL_CTX's session cache even though
+     * it has two ways of access: each session is in a doubly linked list and
+     * an lhash
+     */
+    SSL_SESSION_up_ref(c);
+    /*
+     * if session c is in already in cache, we take back the increment later
+     */
+
+    CRYPTO_THREAD_write_lock(ctx->lock);
+    s = lh_SSL_SESSION_insert(ctx->sessions, c);
+
+    /*
+     * s != NULL iff we already had a session with the given PID. In this
+     * case, s == c should hold (then we did not really modify
+     * ctx->sessions), or we're in trouble.
+     */
+    if (s != NULL && s != c) {
+        /* We *are* in trouble ... */
+        SSL_SESSION_list_remove(ctx, s);
+        SSL_SESSION_free(s);
+        /*
+         * ... so pretend the other session did not exist in cache (we cannot
+         * handle two SSL_SESSION structures with identical session ID in the
+         * same cache, which could happen e.g. when two threads concurrently
+         * obtain the same session from an external cache)
+         */
+        s = NULL;
+    } else if (s == NULL &&
+               lh_SSL_SESSION_retrieve(ctx->sessions, c) == NULL) {
+        /* s == NULL can also mean OOM error in lh_SSL_SESSION_insert ... */
+
+        /*
+         * ... so take back the extra reference and also don't add
+         * the session to the SSL_SESSION_list at this time
+         */
+        s = c;
+    }
+
+    /* Put at the head of the queue unless it is already in the cache */
+    if (s == NULL)
+        SSL_SESSION_list_add(ctx, c);
+
+    if (s != NULL) {
+        /*
+         * existing cache entry -- decrement previously incremented reference
+         * count because it already takes into account the cache
+         */
+
+        SSL_SESSION_free(s);    /* s == c */
+        ret = 0;
+    } else {
+        /*
+         * new cache entry -- remove old ones if cache has become too large
+         */
+
+        ret = 1;
+
+        if (SSL_CTX_sess_get_cache_size(ctx) > 0) {
+            while (SSL_CTX_sess_number(ctx) > SSL_CTX_sess_get_cache_size(ctx)) {
+                if (!remove_session_lock(ctx, ctx->session_cache_tail, 0))
+                    break;
+                else
+                    tsan_counter(&ctx->stats.sess_cache_full);
+            }
+        }
+    }
+    CRYPTO_THREAD_unlock(ctx->lock);
+    return ret;
+}
+
+int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
+{
+    return remove_session_lock(ctx, c, 1);
+}
+
+static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
+{
+    SSL_SESSION *r;
+    int ret = 0;
+
+    if ((c != NULL) && (c->session_id_length != 0)) {
+        if (lck)
+            CRYPTO_THREAD_write_lock(ctx->lock);
+        if ((r = lh_SSL_SESSION_retrieve(ctx->sessions, c)) != NULL) {
+            ret = 1;
+            r = lh_SSL_SESSION_delete(ctx->sessions, r);
+            SSL_SESSION_list_remove(ctx, r);
+        }
+        c->not_resumable = 1;
+
+        if (lck)
+            CRYPTO_THREAD_unlock(ctx->lock);
+
+        if (ctx->remove_session_cb != NULL)
+            ctx->remove_session_cb(ctx, c);
+
+        if (ret)
+            SSL_SESSION_free(r);
+    } else
+        ret = 0;
+    return ret;
+}
+
+void SSL_SESSION_free(SSL_SESSION *ss)
+{
+    int i;
+
+    if (ss == NULL)
+        return;
+    CRYPTO_DOWN_REF(&ss->references, &i, ss->lock);
+    REF_PRINT_COUNT("SSL_SESSION", ss);
+    if (i > 0)
+        return;
+    REF_ASSERT_ISNT(i < 0);
+
+    CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_SESSION, ss, &ss->ex_data);
+
+    OPENSSL_cleanse(ss->master_key, sizeof(ss->master_key));
+    OPENSSL_cleanse(ss->session_id, sizeof(ss->session_id));
+    X509_free(ss->peer);
+    sk_X509_pop_free(ss->peer_chain, X509_free);
+    sk_SSL_CIPHER_free(ss->ciphers);
+    OPENSSL_free(ss->ext.hostname);
+    OPENSSL_free(ss->ext.tick);
+#ifndef OPENSSL_NO_EC
+    OPENSSL_free(ss->ext.ecpointformats);
+    ss->ext.ecpointformats = NULL;
+    ss->ext.ecpointformats_len = 0;
+    OPENSSL_free(ss->ext.supportedgroups);
+    ss->ext.supportedgroups = NULL;
+    ss->ext.supportedgroups_len = 0;
+#endif                          /* OPENSSL_NO_EC */
+#ifndef OPENSSL_NO_PSK
+    OPENSSL_free(ss->psk_identity_hint);
+    OPENSSL_free(ss->psk_identity);
+#endif
+#ifndef OPENSSL_NO_SRP
+    OPENSSL_free(ss->srp_username);
+#endif
+    OPENSSL_free(ss->ext.alpn_selected);
+    OPENSSL_free(ss->ticket_appdata);
+    CRYPTO_THREAD_lock_free(ss->lock);
+    OPENSSL_clear_free(ss, sizeof(*ss));
+}
+
+int SSL_SESSION_up_ref(SSL_SESSION *ss)
+{
+    int i;
+
+    if (CRYPTO_UP_REF(&ss->references, &i, ss->lock) <= 0)
+        return 0;
+
+    REF_PRINT_COUNT("SSL_SESSION", ss);
+    REF_ASSERT_ISNT(i < 2);
+    return ((i > 1) ? 1 : 0);
+}
+
+int SSL_set_session(SSL *s, SSL_SESSION *session)
+{
+    ssl_clear_bad_session(s);
+    if (s->ctx->method != s->method) {
+        if (!SSL_set_ssl_method(s, s->ctx->method))
+            return 0;
+    }
+
+    if (session != NULL) {
+        SSL_SESSION_up_ref(session);
+        s->verify_result = session->verify_result;
+    }
+    SSL_SESSION_free(s->session);
+    s->session = session;
+
+    return 1;
+}
+
+int SSL_SESSION_set1_id(SSL_SESSION *s, const unsigned char *sid,
+                        unsigned int sid_len)
+{
+    if (sid_len > SSL_MAX_SSL_SESSION_ID_LENGTH) {
+      SSLerr(SSL_F_SSL_SESSION_SET1_ID,
+             SSL_R_SSL_SESSION_ID_TOO_LONG);
+      return 0;
+    }
+    s->session_id_length = sid_len;
+    if (sid != s->session_id)
+        memcpy(s->session_id, sid, sid_len);
+    return 1;
+}
+
+long SSL_SESSION_set_timeout(SSL_SESSION *s, long t)
+{
+    if (s == NULL)
+        return 0;
+    s->timeout = t;
+    return 1;
+}
+
+long SSL_SESSION_get_timeout(const SSL_SESSION *s)
+{
+    if (s == NULL)
+        return 0;
+    return s->timeout;
+}
+
+long SSL_SESSION_get_time(const SSL_SESSION *s)
+{
+    if (s == NULL)
+        return 0;
+    return s->time;
+}
+
+long SSL_SESSION_set_time(SSL_SESSION *s, long t)
+{
+    if (s == NULL)
+        return 0;
+    s->time = t;
+    return t;
+}
+
+int SSL_SESSION_get_protocol_version(const SSL_SESSION *s)
+{
+    return s->ssl_version;
+}
+
+int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version)
+{
+    s->ssl_version = version;
+    return 1;
+}
+
+const SSL_CIPHER *SSL_SESSION_get0_cipher(const SSL_SESSION *s)
+{
+    return s->cipher;
+}
+
+int SSL_SESSION_set_cipher(SSL_SESSION *s, const SSL_CIPHER *cipher)
+{
+    s->cipher = cipher;
+    return 1;
+}
+
+const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s)
+{
+    return s->ext.hostname;
+}
+
+int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname)
+{
+    OPENSSL_free(s->ext.hostname);
+    if (hostname == NULL) {
+        s->ext.hostname = NULL;
+        return 1;
+    }
+    s->ext.hostname = OPENSSL_strdup(hostname);
+
+    return s->ext.hostname != NULL;
+}
+
+int SSL_SESSION_has_ticket(const SSL_SESSION *s)
+{
+    return (s->ext.ticklen > 0) ? 1 : 0;
+}
+
+unsigned long SSL_SESSION_get_ticket_lifetime_hint(const SSL_SESSION *s)
+{
+    return s->ext.tick_lifetime_hint;
+}
+
+void SSL_SESSION_get0_ticket(const SSL_SESSION *s, const unsigned char **tick,
+                             size_t *len)
+{
+    *len = s->ext.ticklen;
+    if (tick != NULL)
+        *tick = s->ext.tick;
+}
+
+uint32_t SSL_SESSION_get_max_early_data(const SSL_SESSION *s)
+{
+    return s->ext.max_early_data;
+}
+
+int SSL_SESSION_set_max_early_data(SSL_SESSION *s, uint32_t max_early_data)
+{
+    s->ext.max_early_data = max_early_data;
+
+    return 1;
+}
+
+void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
+                                    const unsigned char **alpn,
+                                    size_t *len)
+{
+    *alpn = s->ext.alpn_selected;
+    *len = s->ext.alpn_selected_len;
+}
+
+int SSL_SESSION_set1_alpn_selected(SSL_SESSION *s, const unsigned char *alpn,
+                                   size_t len)
+{
+    OPENSSL_free(s->ext.alpn_selected);
+    if (alpn == NULL || len == 0) {
+        s->ext.alpn_selected = NULL;
+        s->ext.alpn_selected_len = 0;
+        return 1;
+    }
+    s->ext.alpn_selected = OPENSSL_memdup(alpn, len);
+    if (s->ext.alpn_selected == NULL) {
+        s->ext.alpn_selected_len = 0;
+        return 0;
+    }
+    s->ext.alpn_selected_len = len;
+
+    return 1;
+}
+
+X509 *SSL_SESSION_get0_peer(SSL_SESSION *s)
+{
+    return s->peer;
+}
+
+int SSL_SESSION_set1_id_context(SSL_SESSION *s, const unsigned char *sid_ctx,
+                                unsigned int sid_ctx_len)
+{
+    if (sid_ctx_len > SSL_MAX_SID_CTX_LENGTH) {
+        SSLerr(SSL_F_SSL_SESSION_SET1_ID_CONTEXT,
+               SSL_R_SSL_SESSION_ID_CONTEXT_TOO_LONG);
+        return 0;
+    }
+    s->sid_ctx_length = sid_ctx_len;
+    if (sid_ctx != s->sid_ctx)
+        memcpy(s->sid_ctx, sid_ctx, sid_ctx_len);
+
+    return 1;
+}
+
+int SSL_SESSION_is_resumable(const SSL_SESSION *s)
+{
+    /*
+     * In the case of EAP-FAST, we can have a pre-shared "ticket" without a
+     * session ID.
+     */
+    return !s->not_resumable
+           && (s->session_id_length > 0 || s->ext.ticklen > 0);
+}
+
+long SSL_CTX_set_timeout(SSL_CTX *s, long t)
+{
+    long l;
+    if (s == NULL)
+        return 0;
+    l = s->session_timeout;
+    s->session_timeout = t;
+    return l;
+}
+
+long SSL_CTX_get_timeout(const SSL_CTX *s)
+{
+    if (s == NULL)
+        return 0;
+    return s->session_timeout;
+}
+
+int SSL_set_session_secret_cb(SSL *s,
+                              tls_session_secret_cb_fn tls_session_secret_cb,
+                              void *arg)
+{
+    if (s == NULL)
+        return 0;
+    s->ext.session_secret_cb = tls_session_secret_cb;
+    s->ext.session_secret_cb_arg = arg;
+    return 1;
+}
+
+int SSL_set_session_ticket_ext_cb(SSL *s, tls_session_ticket_ext_cb_fn cb,
+                                  void *arg)
+{
+    if (s == NULL)
+        return 0;
+    s->ext.session_ticket_cb = cb;
+    s->ext.session_ticket_cb_arg = arg;
+    return 1;
+}
+
+int SSL_set_session_ticket_ext(SSL *s, void *ext_data, int ext_len)
+{
+    if (s->version >= TLS1_VERSION) {
+        OPENSSL_free(s->ext.session_ticket);
+        s->ext.session_ticket = NULL;
+        s->ext.session_ticket =
+            OPENSSL_malloc(sizeof(TLS_SESSION_TICKET_EXT) + ext_len);
+        if (s->ext.session_ticket == NULL) {
+            SSLerr(SSL_F_SSL_SET_SESSION_TICKET_EXT, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+
+        if (ext_data != NULL) {
+            s->ext.session_ticket->length = ext_len;
+            s->ext.session_ticket->data = s->ext.session_ticket + 1;
+            memcpy(s->ext.session_ticket->data, ext_data, ext_len);
+        } else {
+            s->ext.session_ticket->length = 0;
+            s->ext.session_ticket->data = NULL;
+        }
+
+        return 1;
+    }
+
+    return 0;
+}
+
+typedef struct timeout_param_st {
+    SSL_CTX *ctx;
+    long time;
+    LHASH_OF(SSL_SESSION) *cache;
+} TIMEOUT_PARAM;
+
+static void timeout_cb(SSL_SESSION *s, TIMEOUT_PARAM *p)
+{
+    if ((p->time == 0) || (p->time > (s->time + s->timeout))) { /* timeout */
+        /*
+         * The reason we don't call SSL_CTX_remove_session() is to save on
+         * locking overhead
+         */
+        (void)lh_SSL_SESSION_delete(p->cache, s);
+        SSL_SESSION_list_remove(p->ctx, s);
+        s->not_resumable = 1;
+        if (p->ctx->remove_session_cb != NULL)
+            p->ctx->remove_session_cb(p->ctx, s);
+        SSL_SESSION_free(s);
+    }
+}
+
+IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
+
+void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
+{
+    unsigned long i;
+    TIMEOUT_PARAM tp;
+
+    tp.ctx = s;
+    tp.cache = s->sessions;
+    if (tp.cache == NULL)
+        return;
+    tp.time = t;
+    CRYPTO_THREAD_write_lock(s->lock);
+    i = lh_SSL_SESSION_get_down_load(s->sessions);
+    lh_SSL_SESSION_set_down_load(s->sessions, 0);
+    lh_SSL_SESSION_doall_TIMEOUT_PARAM(tp.cache, timeout_cb, &tp);
+    lh_SSL_SESSION_set_down_load(s->sessions, i);
+    CRYPTO_THREAD_unlock(s->lock);
+}
+
+int ssl_clear_bad_session(SSL *s)
+{
+    if ((s->session != NULL) &&
+        !(s->shutdown & SSL_SENT_SHUTDOWN) &&
+        !(SSL_in_init(s) || SSL_in_before(s))) {
+        SSL_CTX_remove_session(s->session_ctx, s->session);
+        return 1;
+    } else
+        return 0;
+}
+
+/* locked by SSL_CTX in the calling function */
+static void SSL_SESSION_list_remove(SSL_CTX *ctx, SSL_SESSION *s)
+{
+    if ((s->next == NULL) || (s->prev == NULL))
+        return;
+
+    if (s->next == (SSL_SESSION *)&(ctx->session_cache_tail)) {
+        /* last element in list */
+        if (s->prev == (SSL_SESSION *)&(ctx->session_cache_head)) {
+            /* only one element in list */
+            ctx->session_cache_head = NULL;
+            ctx->session_cache_tail = NULL;
+        } else {
+            ctx->session_cache_tail = s->prev;
+            s->prev->next = (SSL_SESSION *)&(ctx->session_cache_tail);
+        }
+    } else {
+        if (s->prev == (SSL_SESSION *)&(ctx->session_cache_head)) {
+            /* first element in list */
+            ctx->session_cache_head = s->next;
+            s->next->prev = (SSL_SESSION *)&(ctx->session_cache_head);
+        } else {
+            /* middle of list */
+            s->next->prev = s->prev;
+            s->prev->next = s->next;
+        }
+    }
+    s->prev = s->next = NULL;
+}
+
+static void SSL_SESSION_list_add(SSL_CTX *ctx, SSL_SESSION *s)
+{
+    if ((s->next != NULL) && (s->prev != NULL))
+        SSL_SESSION_list_remove(ctx, s);
+
+    if (ctx->session_cache_head == NULL) {
+        ctx->session_cache_head = s;
+        ctx->session_cache_tail = s;
+        s->prev = (SSL_SESSION *)&(ctx->session_cache_head);
+        s->next = (SSL_SESSION *)&(ctx->session_cache_tail);
+    } else {
+        s->next = ctx->session_cache_head;
+        s->next->prev = s;
+        s->prev = (SSL_SESSION *)&(ctx->session_cache_head);
+        ctx->session_cache_head = s;
+    }
+}
+
+void SSL_CTX_sess_set_new_cb(SSL_CTX *ctx,
+                             int (*cb) (struct ssl_st *ssl, SSL_SESSION *sess))
+{
+    ctx->new_session_cb = cb;
+}
+
+int (*SSL_CTX_sess_get_new_cb(SSL_CTX *ctx)) (SSL *ssl, SSL_SESSION *sess) {
+    return ctx->new_session_cb;
+}
+
+void SSL_CTX_sess_set_remove_cb(SSL_CTX *ctx,
+                                void (*cb) (SSL_CTX *ctx, SSL_SESSION *sess))
+{
+    ctx->remove_session_cb = cb;
+}
+
+void (*SSL_CTX_sess_get_remove_cb(SSL_CTX *ctx)) (SSL_CTX *ctx,
+                                                  SSL_SESSION *sess) {
+    return ctx->remove_session_cb;
+}
+
+void SSL_CTX_sess_set_get_cb(SSL_CTX *ctx,
+                             SSL_SESSION *(*cb) (struct ssl_st *ssl,
+                                                 const unsigned char *data,
+                                                 int len, int *copy))
+{
+    ctx->get_session_cb = cb;
+}
+
+SSL_SESSION *(*SSL_CTX_sess_get_get_cb(SSL_CTX *ctx)) (SSL *ssl,
+                                                       const unsigned char
+                                                       *data, int len,
+                                                       int *copy) {
+    return ctx->get_session_cb;
+}
+
+void SSL_CTX_set_info_callback(SSL_CTX *ctx,
+                               void (*cb) (const SSL *ssl, int type, int val))
+{
+    ctx->info_callback = cb;
+}
+
+void (*SSL_CTX_get_info_callback(SSL_CTX *ctx)) (const SSL *ssl, int type,
+                                                 int val) {
+    return ctx->info_callback;
+}
+
+void SSL_CTX_set_client_cert_cb(SSL_CTX *ctx,
+                                int (*cb) (SSL *ssl, X509 **x509,
+                                           EVP_PKEY **pkey))
+{
+    ctx->client_cert_cb = cb;
+}
+
+int (*SSL_CTX_get_client_cert_cb(SSL_CTX *ctx)) (SSL *ssl, X509 **x509,
+                                                 EVP_PKEY **pkey) {
+    return ctx->client_cert_cb;
+}
+
+#ifndef OPENSSL_NO_ENGINE
+int SSL_CTX_set_client_cert_engine(SSL_CTX *ctx, ENGINE *e)
+{
+    if (!ENGINE_init(e)) {
+        SSLerr(SSL_F_SSL_CTX_SET_CLIENT_CERT_ENGINE, ERR_R_ENGINE_LIB);
+        return 0;
+    }
+    if (!ENGINE_get_ssl_client_cert_function(e)) {
+        SSLerr(SSL_F_SSL_CTX_SET_CLIENT_CERT_ENGINE,
+               SSL_R_NO_CLIENT_CERT_METHOD);
+        ENGINE_finish(e);
+        return 0;
+    }
+    ctx->client_cert_engine = e;
+    return 1;
+}
+#endif
+
+void SSL_CTX_set_cookie_generate_cb(SSL_CTX *ctx,
+                                    int (*cb) (SSL *ssl,
+                                               unsigned char *cookie,
+                                               unsigned int *cookie_len))
+{
+    ctx->app_gen_cookie_cb = cb;
+}
+
+void SSL_CTX_set_cookie_verify_cb(SSL_CTX *ctx,
+                                  int (*cb) (SSL *ssl,
+                                             const unsigned char *cookie,
+                                             unsigned int cookie_len))
+{
+    ctx->app_verify_cookie_cb = cb;
+}
+
+int SSL_SESSION_set1_ticket_appdata(SSL_SESSION *ss, const void *data, size_t len)
+{
+    OPENSSL_free(ss->ticket_appdata);
+    ss->ticket_appdata_len = 0;
+    if (data == NULL || len == 0) {
+        ss->ticket_appdata = NULL;
+        return 1;
+    }
+    ss->ticket_appdata = OPENSSL_memdup(data, len);
+    if (ss->ticket_appdata != NULL) {
+        ss->ticket_appdata_len = len;
+        return 1;
+    }
+    return 0;
+}
+
+int SSL_SESSION_get0_ticket_appdata(SSL_SESSION *ss, void **data, size_t *len)
+{
+    *data = ss->ticket_appdata;
+    *len = ss->ticket_appdata_len;
+    return 1;
+}
+
+void SSL_CTX_set_stateless_cookie_generate_cb(
+    SSL_CTX *ctx,
+    int (*cb) (SSL *ssl,
+               unsigned char *cookie,
+               size_t *cookie_len))
+{
+    ctx->gen_stateless_cookie_cb = cb;
+}
+
+void SSL_CTX_set_stateless_cookie_verify_cb(
+    SSL_CTX *ctx,
+    int (*cb) (SSL *ssl,
+               const unsigned char *cookie,
+               size_t cookie_len))
+{
+    ctx->verify_stateless_cookie_cb = cb;
+}
+
+IMPLEMENT_PEM_rw(SSL_SESSION, SSL_SESSION, PEM_STRING_SSL_SESSION, SSL_SESSION)
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_stat.c b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_stat.c
new file mode 100644
index 000000000..179513b1a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_stat.c
@@ -0,0 +1,388 @@
+/*
+ * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2005 Nokia. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "ssl_locl.h"
+
+const char *SSL_state_string_long(const SSL *s)
+{
+    if (ossl_statem_in_error(s))
+        return "error";
+
+    switch (SSL_get_state(s)) {
+    case TLS_ST_CR_CERT_STATUS:
+        return "SSLv3/TLS read certificate status";
+    case TLS_ST_CW_NEXT_PROTO:
+        return "SSLv3/TLS write next proto";
+    case TLS_ST_SR_NEXT_PROTO:
+        return "SSLv3/TLS read next proto";
+    case TLS_ST_SW_CERT_STATUS:
+        return "SSLv3/TLS write certificate status";
+    case TLS_ST_BEFORE:
+        return "before SSL initialization";
+    case TLS_ST_OK:
+        return "SSL negotiation finished successfully";
+    case TLS_ST_CW_CLNT_HELLO:
+        return "SSLv3/TLS write client hello";
+    case TLS_ST_CR_SRVR_HELLO:
+        return "SSLv3/TLS read server hello";
+    case TLS_ST_CR_CERT:
+        return "SSLv3/TLS read server certificate";
+    case TLS_ST_CR_KEY_EXCH:
+        return "SSLv3/TLS read server key exchange";
+    case TLS_ST_CR_CERT_REQ:
+        return "SSLv3/TLS read server certificate request";
+    case TLS_ST_CR_SESSION_TICKET:
+        return "SSLv3/TLS read server session ticket";
+    case TLS_ST_CR_SRVR_DONE:
+        return "SSLv3/TLS read server done";
+    case TLS_ST_CW_CERT:
+        return "SSLv3/TLS write client certificate";
+    case TLS_ST_CW_KEY_EXCH:
+        return "SSLv3/TLS write client key exchange";
+    case TLS_ST_CW_CERT_VRFY:
+        return "SSLv3/TLS write certificate verify";
+    case TLS_ST_CW_CHANGE:
+    case TLS_ST_SW_CHANGE:
+        return "SSLv3/TLS write change cipher spec";
+    case TLS_ST_CW_FINISHED:
+    case TLS_ST_SW_FINISHED:
+        return "SSLv3/TLS write finished";
+    case TLS_ST_CR_CHANGE:
+    case TLS_ST_SR_CHANGE:
+        return "SSLv3/TLS read change cipher spec";
+    case TLS_ST_CR_FINISHED:
+    case TLS_ST_SR_FINISHED:
+        return "SSLv3/TLS read finished";
+    case TLS_ST_SR_CLNT_HELLO:
+        return "SSLv3/TLS read client hello";
+    case TLS_ST_SW_HELLO_REQ:
+        return "SSLv3/TLS write hello request";
+    case TLS_ST_SW_SRVR_HELLO:
+        return "SSLv3/TLS write server hello";
+    case TLS_ST_SW_CERT:
+        return "SSLv3/TLS write certificate";
+    case TLS_ST_SW_KEY_EXCH:
+        return "SSLv3/TLS write key exchange";
+    case TLS_ST_SW_CERT_REQ:
+        return "SSLv3/TLS write certificate request";
+    case TLS_ST_SW_SESSION_TICKET:
+        return "SSLv3/TLS write session ticket";
+    case TLS_ST_SW_SRVR_DONE:
+        return "SSLv3/TLS write server done";
+    case TLS_ST_SR_CERT:
+        return "SSLv3/TLS read client certificate";
+    case TLS_ST_SR_KEY_EXCH:
+        return "SSLv3/TLS read client key exchange";
+    case TLS_ST_SR_CERT_VRFY:
+        return "SSLv3/TLS read certificate verify";
+    case DTLS_ST_CR_HELLO_VERIFY_REQUEST:
+        return "DTLS1 read hello verify request";
+    case DTLS_ST_SW_HELLO_VERIFY_REQUEST:
+        return "DTLS1 write hello verify request";
+    case TLS_ST_SW_ENCRYPTED_EXTENSIONS:
+        return "TLSv1.3 write encrypted extensions";
+    case TLS_ST_CR_ENCRYPTED_EXTENSIONS:
+        return "TLSv1.3 read encrypted extensions";
+    case TLS_ST_CR_CERT_VRFY:
+        return "TLSv1.3 read server certificate verify";
+    case TLS_ST_SW_CERT_VRFY:
+        return "TLSv1.3 write server certificate verify";
+    case TLS_ST_CR_HELLO_REQ:
+        return "SSLv3/TLS read hello request";
+    case TLS_ST_SW_KEY_UPDATE:
+        return "TLSv1.3 write server key update";
+    case TLS_ST_CW_KEY_UPDATE:
+        return "TLSv1.3 write client key update";
+    case TLS_ST_SR_KEY_UPDATE:
+        return "TLSv1.3 read client key update";
+    case TLS_ST_CR_KEY_UPDATE:
+        return "TLSv1.3 read server key update";
+    case TLS_ST_EARLY_DATA:
+        return "TLSv1.3 early data";
+    case TLS_ST_PENDING_EARLY_DATA_END:
+        return "TLSv1.3 pending early data end";
+    case TLS_ST_CW_END_OF_EARLY_DATA:
+        return "TLSv1.3 write end of early data";
+    case TLS_ST_SR_END_OF_EARLY_DATA:
+        return "TLSv1.3 read end of early data";
+    default:
+        return "unknown state";
+    }
+}
+
+const char *SSL_state_string(const SSL *s)
+{
+    if (ossl_statem_in_error(s))
+        return "SSLERR";
+
+    switch (SSL_get_state(s)) {
+    case TLS_ST_SR_NEXT_PROTO:
+        return "TRNP";
+    case TLS_ST_SW_SESSION_TICKET:
+        return "TWST";
+    case TLS_ST_SW_CERT_STATUS:
+        return "TWCS";
+    case TLS_ST_CR_CERT_STATUS:
+        return "TRCS";
+    case TLS_ST_CR_SESSION_TICKET:
+        return "TRST";
+    case TLS_ST_CW_NEXT_PROTO:
+        return "TWNP";
+    case TLS_ST_BEFORE:
+        return "PINIT ";
+    case TLS_ST_OK:
+        return "SSLOK ";
+    case TLS_ST_CW_CLNT_HELLO:
+        return "TWCH";
+    case TLS_ST_CR_SRVR_HELLO:
+        return "TRSH";
+    case TLS_ST_CR_CERT:
+        return "TRSC";
+    case TLS_ST_CR_KEY_EXCH:
+        return "TRSKE";
+    case TLS_ST_CR_CERT_REQ:
+        return "TRCR";
+    case TLS_ST_CR_SRVR_DONE:
+        return "TRSD";
+    case TLS_ST_CW_CERT:
+        return "TWCC";
+    case TLS_ST_CW_KEY_EXCH:
+        return "TWCKE";
+    case TLS_ST_CW_CERT_VRFY:
+        return "TWCV";
+    case TLS_ST_SW_CHANGE:
+    case TLS_ST_CW_CHANGE:
+        return "TWCCS";
+    case TLS_ST_SW_FINISHED:
+    case TLS_ST_CW_FINISHED:
+        return "TWFIN";
+    case TLS_ST_SR_CHANGE:
+    case TLS_ST_CR_CHANGE:
+        return "TRCCS";
+    case TLS_ST_SR_FINISHED:
+    case TLS_ST_CR_FINISHED:
+        return "TRFIN";
+    case TLS_ST_SW_HELLO_REQ:
+        return "TWHR";
+    case TLS_ST_SR_CLNT_HELLO:
+        return "TRCH";
+    case TLS_ST_SW_SRVR_HELLO:
+        return "TWSH";
+    case TLS_ST_SW_CERT:
+        return "TWSC";
+    case TLS_ST_SW_KEY_EXCH:
+        return "TWSKE";
+    case TLS_ST_SW_CERT_REQ:
+        return "TWCR";
+    case TLS_ST_SW_SRVR_DONE:
+        return "TWSD";
+    case TLS_ST_SR_CERT:
+        return "TRCC";
+    case TLS_ST_SR_KEY_EXCH:
+        return "TRCKE";
+    case TLS_ST_SR_CERT_VRFY:
+        return "TRCV";
+    case DTLS_ST_CR_HELLO_VERIFY_REQUEST:
+        return "DRCHV";
+    case DTLS_ST_SW_HELLO_VERIFY_REQUEST:
+        return "DWCHV";
+    case TLS_ST_SW_ENCRYPTED_EXTENSIONS:
+        return "TWEE";
+    case TLS_ST_CR_ENCRYPTED_EXTENSIONS:
+        return "TREE";
+    case TLS_ST_CR_CERT_VRFY:
+        return "TRSCV";
+    case TLS_ST_SW_CERT_VRFY:
+        return "TRSCV";
+    case TLS_ST_CR_HELLO_REQ:
+        return "TRHR";
+    case TLS_ST_SW_KEY_UPDATE:
+        return "TWSKU";
+    case TLS_ST_CW_KEY_UPDATE:
+        return "TWCKU";
+    case TLS_ST_SR_KEY_UPDATE:
+        return "TRCKU";
+    case TLS_ST_CR_KEY_UPDATE:
+        return "TRSKU";
+    case TLS_ST_EARLY_DATA:
+        return "TED";
+    case TLS_ST_PENDING_EARLY_DATA_END:
+        return "TPEDE";
+    case TLS_ST_CW_END_OF_EARLY_DATA:
+        return "TWEOED";
+    case TLS_ST_SR_END_OF_EARLY_DATA:
+        return "TWEOED";
+    default:
+        return "UNKWN ";
+    }
+}
+
+const char *SSL_alert_type_string_long(int value)
+{
+    switch (value >> 8) {
+    case SSL3_AL_WARNING:
+        return "warning";
+    case SSL3_AL_FATAL:
+        return "fatal";
+    default:
+        return "unknown";
+    }
+}
+
+const char *SSL_alert_type_string(int value)
+{
+    switch (value >> 8) {
+    case SSL3_AL_WARNING:
+        return "W";
+    case SSL3_AL_FATAL:
+        return "F";
+    default:
+        return "U";
+    }
+}
+
+const char *SSL_alert_desc_string(int value)
+{
+    switch (value & 0xff) {
+    case SSL3_AD_CLOSE_NOTIFY:
+        return "CN";
+    case SSL3_AD_UNEXPECTED_MESSAGE:
+        return "UM";
+    case SSL3_AD_BAD_RECORD_MAC:
+        return "BM";
+    case SSL3_AD_DECOMPRESSION_FAILURE:
+        return "DF";
+    case SSL3_AD_HANDSHAKE_FAILURE:
+        return "HF";
+    case SSL3_AD_NO_CERTIFICATE:
+        return "NC";
+    case SSL3_AD_BAD_CERTIFICATE:
+        return "BC";
+    case SSL3_AD_UNSUPPORTED_CERTIFICATE:
+        return "UC";
+    case SSL3_AD_CERTIFICATE_REVOKED:
+        return "CR";
+    case SSL3_AD_CERTIFICATE_EXPIRED:
+        return "CE";
+    case SSL3_AD_CERTIFICATE_UNKNOWN:
+        return "CU";
+    case SSL3_AD_ILLEGAL_PARAMETER:
+        return "IP";
+    case TLS1_AD_DECRYPTION_FAILED:
+        return "DC";
+    case TLS1_AD_RECORD_OVERFLOW:
+        return "RO";
+    case TLS1_AD_UNKNOWN_CA:
+        return "CA";
+    case TLS1_AD_ACCESS_DENIED:
+        return "AD";
+    case TLS1_AD_DECODE_ERROR:
+        return "DE";
+    case TLS1_AD_DECRYPT_ERROR:
+        return "CY";
+    case TLS1_AD_EXPORT_RESTRICTION:
+        return "ER";
+    case TLS1_AD_PROTOCOL_VERSION:
+        return "PV";
+    case TLS1_AD_INSUFFICIENT_SECURITY:
+        return "IS";
+    case TLS1_AD_INTERNAL_ERROR:
+        return "IE";
+    case TLS1_AD_USER_CANCELLED:
+        return "US";
+    case TLS1_AD_NO_RENEGOTIATION:
+        return "NR";
+    case TLS1_AD_UNSUPPORTED_EXTENSION:
+        return "UE";
+    case TLS1_AD_CERTIFICATE_UNOBTAINABLE:
+        return "CO";
+    case TLS1_AD_UNRECOGNIZED_NAME:
+        return "UN";
+    case TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE:
+        return "BR";
+    case TLS1_AD_BAD_CERTIFICATE_HASH_VALUE:
+        return "BH";
+    case TLS1_AD_UNKNOWN_PSK_IDENTITY:
+        return "UP";
+    default:
+        return "UK";
+    }
+}
+
+const char *SSL_alert_desc_string_long(int value)
+{
+    switch (value & 0xff) {
+    case SSL3_AD_CLOSE_NOTIFY:
+        return "close notify";
+    case SSL3_AD_UNEXPECTED_MESSAGE:
+        return "unexpected_message";
+    case SSL3_AD_BAD_RECORD_MAC:
+        return "bad record mac";
+    case SSL3_AD_DECOMPRESSION_FAILURE:
+        return "decompression failure";
+    case SSL3_AD_HANDSHAKE_FAILURE:
+        return "handshake failure";
+    case SSL3_AD_NO_CERTIFICATE:
+        return "no certificate";
+    case SSL3_AD_BAD_CERTIFICATE:
+        return "bad certificate";
+    case SSL3_AD_UNSUPPORTED_CERTIFICATE:
+        return "unsupported certificate";
+    case SSL3_AD_CERTIFICATE_REVOKED:
+        return "certificate revoked";
+    case SSL3_AD_CERTIFICATE_EXPIRED:
+        return "certificate expired";
+    case SSL3_AD_CERTIFICATE_UNKNOWN:
+        return "certificate unknown";
+    case SSL3_AD_ILLEGAL_PARAMETER:
+        return "illegal parameter";
+    case TLS1_AD_DECRYPTION_FAILED:
+        return "decryption failed";
+    case TLS1_AD_RECORD_OVERFLOW:
+        return "record overflow";
+    case TLS1_AD_UNKNOWN_CA:
+        return "unknown CA";
+    case TLS1_AD_ACCESS_DENIED:
+        return "access denied";
+    case TLS1_AD_DECODE_ERROR:
+        return "decode error";
+    case TLS1_AD_DECRYPT_ERROR:
+        return "decrypt error";
+    case TLS1_AD_EXPORT_RESTRICTION:
+        return "export restriction";
+    case TLS1_AD_PROTOCOL_VERSION:
+        return "protocol version";
+    case TLS1_AD_INSUFFICIENT_SECURITY:
+        return "insufficient security";
+    case TLS1_AD_INTERNAL_ERROR:
+        return "internal error";
+    case TLS1_AD_USER_CANCELLED:
+        return "user canceled";
+    case TLS1_AD_NO_RENEGOTIATION:
+        return "no renegotiation";
+    case TLS1_AD_UNSUPPORTED_EXTENSION:
+        return "unsupported extension";
+    case TLS1_AD_CERTIFICATE_UNOBTAINABLE:
+        return "certificate unobtainable";
+    case TLS1_AD_UNRECOGNIZED_NAME:
+        return "unrecognized name";
+    case TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE:
+        return "bad certificate status response";
+    case TLS1_AD_BAD_CERTIFICATE_HASH_VALUE:
+        return "bad certificate hash value";
+    case TLS1_AD_UNKNOWN_PSK_IDENTITY:
+        return "unknown PSK identity";
+    case TLS1_AD_NO_APPLICATION_PROTOCOL:
+        return "no application protocol";
+    default:
+        return "unknown";
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_txt.c b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_txt.c
new file mode 100644
index 000000000..cf6e4c3c0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_txt.c
@@ -0,0 +1,203 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2005 Nokia. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <openssl/buffer.h>
+#include "ssl_locl.h"
+
+#ifndef OPENSSL_NO_STDIO
+int SSL_SESSION_print_fp(FILE *fp, const SSL_SESSION *x)
+{
+    BIO *b;
+    int ret;
+
+    if ((b = BIO_new(BIO_s_file())) == NULL) {
+        SSLerr(SSL_F_SSL_SESSION_PRINT_FP, ERR_R_BUF_LIB);
+        return 0;
+    }
+    BIO_set_fp(b, fp, BIO_NOCLOSE);
+    ret = SSL_SESSION_print(b, x);
+    BIO_free(b);
+    return ret;
+}
+#endif
+
+int SSL_SESSION_print(BIO *bp, const SSL_SESSION *x)
+{
+    size_t i;
+    const char *s;
+    int istls13;
+
+    if (x == NULL)
+        goto err;
+    istls13 = (x->ssl_version == TLS1_3_VERSION);
+    if (BIO_puts(bp, "SSL-Session:\n") <= 0)
+        goto err;
+    s = ssl_protocol_to_string(x->ssl_version);
+    if (BIO_printf(bp, "    Protocol  : %s\n", s) <= 0)
+        goto err;
+
+    if (x->cipher == NULL) {
+        if (((x->cipher_id) & 0xff000000) == 0x02000000) {
+            if (BIO_printf(bp, "    Cipher    : %06lX\n",
+                           x->cipher_id & 0xffffff) <= 0)
+                goto err;
+        } else {
+            if (BIO_printf(bp, "    Cipher    : %04lX\n",
+                           x->cipher_id & 0xffff) <= 0)
+                goto err;
+        }
+    } else {
+        if (BIO_printf(bp, "    Cipher    : %s\n",
+                       ((x->cipher->name == NULL) ? "unknown"
+                                                  : x->cipher->name)) <= 0)
+            goto err;
+    }
+    if (BIO_puts(bp, "    Session-ID: ") <= 0)
+        goto err;
+    for (i = 0; i < x->session_id_length; i++) {
+        if (BIO_printf(bp, "%02X", x->session_id[i]) <= 0)
+            goto err;
+    }
+    if (BIO_puts(bp, "\n    Session-ID-ctx: ") <= 0)
+        goto err;
+    for (i = 0; i < x->sid_ctx_length; i++) {
+        if (BIO_printf(bp, "%02X", x->sid_ctx[i]) <= 0)
+            goto err;
+    }
+    if (istls13) {
+        if (BIO_puts(bp, "\n    Resumption PSK: ") <= 0)
+            goto err;
+    } else if (BIO_puts(bp, "\n    Master-Key: ") <= 0)
+        goto err;
+    for (i = 0; i < x->master_key_length; i++) {
+        if (BIO_printf(bp, "%02X", x->master_key[i]) <= 0)
+            goto err;
+    }
+#ifndef OPENSSL_NO_PSK
+    if (BIO_puts(bp, "\n    PSK identity: ") <= 0)
+        goto err;
+    if (BIO_printf(bp, "%s", x->psk_identity ? x->psk_identity : "None") <= 0)
+        goto err;
+    if (BIO_puts(bp, "\n    PSK identity hint: ") <= 0)
+        goto err;
+    if (BIO_printf
+        (bp, "%s", x->psk_identity_hint ? x->psk_identity_hint : "None") <= 0)
+        goto err;
+#endif
+#ifndef OPENSSL_NO_SRP
+    if (BIO_puts(bp, "\n    SRP username: ") <= 0)
+        goto err;
+    if (BIO_printf(bp, "%s", x->srp_username ? x->srp_username : "None") <= 0)
+        goto err;
+#endif
+    if (x->ext.tick_lifetime_hint) {
+        if (BIO_printf(bp,
+                       "\n    TLS session ticket lifetime hint: %ld (seconds)",
+                       x->ext.tick_lifetime_hint) <= 0)
+            goto err;
+    }
+    if (x->ext.tick) {
+        if (BIO_puts(bp, "\n    TLS session ticket:\n") <= 0)
+            goto err;
+        /* TODO(size_t): Convert this call */
+        if (BIO_dump_indent
+            (bp, (const char *)x->ext.tick, (int)x->ext.ticklen, 4)
+            <= 0)
+            goto err;
+    }
+#ifndef OPENSSL_NO_COMP
+    if (x->compress_meth != 0) {
+        SSL_COMP *comp = NULL;
+
+        if (!ssl_cipher_get_evp(x, NULL, NULL, NULL, NULL, &comp, 0))
+            goto err;
+        if (comp == NULL) {
+            if (BIO_printf(bp, "\n    Compression: %d", x->compress_meth) <= 0)
+                goto err;
+        } else {
+            if (BIO_printf(bp, "\n    Compression: %d (%s)", comp->id,
+                           comp->name) <= 0)
+                goto err;
+        }
+    }
+#endif
+    if (x->time != 0L) {
+        if (BIO_printf(bp, "\n    Start Time: %ld", x->time) <= 0)
+            goto err;
+    }
+    if (x->timeout != 0L) {
+        if (BIO_printf(bp, "\n    Timeout   : %ld (sec)", x->timeout) <= 0)
+            goto err;
+    }
+    if (BIO_puts(bp, "\n") <= 0)
+        goto err;
+
+    if (BIO_puts(bp, "    Verify return code: ") <= 0)
+        goto err;
+    if (BIO_printf(bp, "%ld (%s)\n", x->verify_result,
+                   X509_verify_cert_error_string(x->verify_result)) <= 0)
+        goto err;
+
+    if (BIO_printf(bp, "    Extended master secret: %s\n",
+                   x->flags & SSL_SESS_FLAG_EXTMS ? "yes" : "no") <= 0)
+        goto err;
+
+    if (istls13) {
+        if (BIO_printf(bp, "    Max Early Data: %u\n",
+                       x->ext.max_early_data) <= 0)
+            goto err;
+    }
+
+    return 1;
+ err:
+    return 0;
+}
+
+/*
+ * print session id and master key in NSS keylog format (RSA
+ * Session-ID:<session id> Master-Key:<master key>)
+ */
+int SSL_SESSION_print_keylog(BIO *bp, const SSL_SESSION *x)
+{
+    size_t i;
+
+    if (x == NULL)
+        goto err;
+    if (x->session_id_length == 0 || x->master_key_length == 0)
+        goto err;
+
+    /*
+     * the RSA prefix is required by the format's definition although there's
+     * nothing RSA-specific in the output, therefore, we don't have to check if
+     * the cipher suite is based on RSA
+     */
+    if (BIO_puts(bp, "RSA ") <= 0)
+        goto err;
+
+    if (BIO_puts(bp, "Session-ID:") <= 0)
+        goto err;
+    for (i = 0; i < x->session_id_length; i++) {
+        if (BIO_printf(bp, "%02X", x->session_id[i]) <= 0)
+            goto err;
+    }
+    if (BIO_puts(bp, " Master-Key:") <= 0)
+        goto err;
+    for (i = 0; i < x->master_key_length; i++) {
+        if (BIO_printf(bp, "%02X", x->master_key[i]) <= 0)
+            goto err;
+    }
+    if (BIO_puts(bp, "\n") <= 0)
+        goto err;
+
+    return 1;
+ err:
+    return 0;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_utst.c b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_utst.c
new file mode 100644
index 000000000..cea1bc270
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/ssl_utst.c
@@ -0,0 +1,24 @@
+/*
+ * Copyright 2014-2016 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "ssl_locl.h"
+
+#ifndef OPENSSL_NO_UNIT_TEST
+
+static const struct openssl_ssl_test_functions ssl_test_functions = {
+    ssl_init_wbio_buffer,
+    ssl3_setup_buffers,
+};
+
+const struct openssl_ssl_test_functions *SSL_test_functions(void)
+{
+    return &ssl_test_functions;
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/statem/README b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/README
new file mode 100644
index 000000000..145c69db8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/README
@@ -0,0 +1,63 @@
+State Machine Design
+====================
+
+This file provides some guidance on the thinking behind the design of the
+state machine code to aid future maintenance.
+
+The state machine code replaces an older state machine present in OpenSSL
+versions 1.0.2 and below. The new state machine has the following objectives:
+    - Remove duplication of state code between client and server
+    - Remove duplication of state code between TLS and DTLS
+    - Simplify transitions and bring the logic together in a single location
+      so that it is easier to validate
+    - Remove duplication of code between each of the message handling functions
+    - Receive a message first and then work out whether that is a valid
+      transition - not the other way around (the other way causes lots of issues
+      where we are expecting one type of message next but actually get something
+      else)
+    - Separate message flow state from handshake state (in order to better
+      understand each)
+      - message flow state = when to flush buffers; handling restarts in the
+        event of NBIO events; handling the common flow of steps for reading a
+        message and the common flow of steps for writing a message etc
+      - handshake state = what handshake message are we working on now
+    - Control complexity: only the state machine can change state: keep all
+      the state changes local to the state machine component
+
+The message flow state machine is divided into a reading sub-state machine and a
+writing sub-state machine. See the source comments in statem.c for a more
+detailed description of the various states and transitions possible.
+
+Conceptually the state machine component is designed as follows:
+
+                        libssl
+                           |
+---------------------------|-----statem.h--------------------------------------
+                           |
+                    _______V____________________
+                   |                            |
+                   |    statem.c                |
+                   |                            |
+                   |    Core state machine code |
+                   |____________________________|
+        statem_locl.h     ^          ^
+                 _________|          |_______
+                |                            |
+   _____________|____________   _____________|____________
+  |                          | |                          |
+  | statem_clnt.c            | | statem_srvr.c            |
+  |                          | |                          |
+  | TLS/DTLS client specific | | TLS/DTLS server specific |
+  | state machine code       | | state machine code       |
+  |__________________________| |__________________________|
+               |        |_______________|__       |
+               |        ________________|  |      |
+               |       |                   |      |
+   ____________V_______V________   ________V______V_______________
+  |                             | |                               |
+  | statem_both.c               | | statem_dtls.c                 |
+  |                             | |                               |
+  | Non core functions common   | | Non core functions common to  |
+  | to both servers and clients | | both DTLS servers and clients |
+  |_____________________________| |_______________________________|
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/statem/extensions.c b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/extensions.c
new file mode 100644
index 000000000..c3d3441a1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/extensions.c
@@ -0,0 +1,1700 @@
+/*
+ * Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <string.h>
+#include "internal/nelem.h"
+#include "internal/cryptlib.h"
+#include "../ssl_locl.h"
+#include "statem_locl.h"
+#include "internal/cryptlib.h"
+
+static int final_renegotiate(SSL *s, unsigned int context, int sent);
+static int init_server_name(SSL *s, unsigned int context);
+static int final_server_name(SSL *s, unsigned int context, int sent);
+#ifndef OPENSSL_NO_EC
+static int final_ec_pt_formats(SSL *s, unsigned int context, int sent);
+#endif
+static int init_session_ticket(SSL *s, unsigned int context);
+#ifndef OPENSSL_NO_OCSP
+static int init_status_request(SSL *s, unsigned int context);
+#endif
+#ifndef OPENSSL_NO_NEXTPROTONEG
+static int init_npn(SSL *s, unsigned int context);
+#endif
+static int init_alpn(SSL *s, unsigned int context);
+static int final_alpn(SSL *s, unsigned int context, int sent);
+static int init_sig_algs_cert(SSL *s, unsigned int context);
+static int init_sig_algs(SSL *s, unsigned int context);
+static int init_certificate_authorities(SSL *s, unsigned int context);
+static EXT_RETURN tls_construct_certificate_authorities(SSL *s, WPACKET *pkt,
+                                                        unsigned int context,
+                                                        X509 *x,
+                                                        size_t chainidx);
+static int tls_parse_certificate_authorities(SSL *s, PACKET *pkt,
+                                             unsigned int context, X509 *x,
+                                             size_t chainidx);
+#ifndef OPENSSL_NO_SRP
+static int init_srp(SSL *s, unsigned int context);
+#endif
+static int init_etm(SSL *s, unsigned int context);
+static int init_ems(SSL *s, unsigned int context);
+static int final_ems(SSL *s, unsigned int context, int sent);
+static int init_psk_kex_modes(SSL *s, unsigned int context);
+#ifndef OPENSSL_NO_EC
+static int final_key_share(SSL *s, unsigned int context, int sent);
+#endif
+#ifndef OPENSSL_NO_SRTP
+static int init_srtp(SSL *s, unsigned int context);
+#endif
+static int final_sig_algs(SSL *s, unsigned int context, int sent);
+static int final_early_data(SSL *s, unsigned int context, int sent);
+static int final_maxfragmentlen(SSL *s, unsigned int context, int sent);
+static int init_post_handshake_auth(SSL *s, unsigned int context);
+
+/* Structure to define a built-in extension */
+typedef struct extensions_definition_st {
+    /* The defined type for the extension */
+    unsigned int type;
+    /*
+     * The context that this extension applies to, e.g. what messages and
+     * protocol versions
+     */
+    unsigned int context;
+    /*
+     * Initialise extension before parsing. Always called for relevant contexts
+     * even if extension not present
+     */
+    int (*init)(SSL *s, unsigned int context);
+    /* Parse extension sent from client to server */
+    int (*parse_ctos)(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                      size_t chainidx);
+    /* Parse extension send from server to client */
+    int (*parse_stoc)(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                      size_t chainidx);
+    /* Construct extension sent from server to client */
+    EXT_RETURN (*construct_stoc)(SSL *s, WPACKET *pkt, unsigned int context,
+                                 X509 *x, size_t chainidx);
+    /* Construct extension sent from client to server */
+    EXT_RETURN (*construct_ctos)(SSL *s, WPACKET *pkt, unsigned int context,
+                                 X509 *x, size_t chainidx);
+    /*
+     * Finalise extension after parsing. Always called where an extensions was
+     * initialised even if the extension was not present. |sent| is set to 1 if
+     * the extension was seen, or 0 otherwise.
+     */
+    int (*final)(SSL *s, unsigned int context, int sent);
+} EXTENSION_DEFINITION;
+
+/*
+ * Definitions of all built-in extensions. NOTE: Changes in the number or order
+ * of these extensions should be mirrored with equivalent changes to the
+ * indexes ( TLSEXT_IDX_* ) defined in ssl_locl.h.
+ * Each extension has an initialiser, a client and
+ * server side parser and a finaliser. The initialiser is called (if the
+ * extension is relevant to the given context) even if we did not see the
+ * extension in the message that we received. The parser functions are only
+ * called if we see the extension in the message. The finalisers are always
+ * called if the initialiser was called.
+ * There are also server and client side constructor functions which are always
+ * called during message construction if the extension is relevant for the
+ * given context.
+ * The initialisation, parsing, finalisation and construction functions are
+ * always called in the order defined in this list. Some extensions may depend
+ * on others having been processed first, so the order of this list is
+ * significant.
+ * The extension context is defined by a series of flags which specify which
+ * messages the extension is relevant to. These flags also specify whether the
+ * extension is relevant to a particular protocol or protocol version.
+ *
+ * TODO(TLS1.3): Make sure we have a test to check the consistency of these
+ *
+ * NOTE: WebSphere Application Server 7+ cannot handle empty extensions at
+ * the end, keep these extensions before signature_algorithm.
+ */
+#define INVALID_EXTENSION { 0x10000, 0, NULL, NULL, NULL, NULL, NULL, NULL }
+static const EXTENSION_DEFINITION ext_defs[] = {
+    {
+        TLSEXT_TYPE_renegotiate,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_SERVER_HELLO
+        | SSL_EXT_SSL3_ALLOWED | SSL_EXT_TLS1_2_AND_BELOW_ONLY,
+        NULL, tls_parse_ctos_renegotiate, tls_parse_stoc_renegotiate,
+        tls_construct_stoc_renegotiate, tls_construct_ctos_renegotiate,
+        final_renegotiate
+    },
+    {
+        TLSEXT_TYPE_server_name,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_SERVER_HELLO
+        | SSL_EXT_TLS1_3_ENCRYPTED_EXTENSIONS,
+        init_server_name,
+        tls_parse_ctos_server_name, tls_parse_stoc_server_name,
+        tls_construct_stoc_server_name, tls_construct_ctos_server_name,
+        final_server_name
+    },
+    {
+        TLSEXT_TYPE_max_fragment_length,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_SERVER_HELLO
+        | SSL_EXT_TLS1_3_ENCRYPTED_EXTENSIONS,
+        NULL, tls_parse_ctos_maxfragmentlen, tls_parse_stoc_maxfragmentlen,
+        tls_construct_stoc_maxfragmentlen, tls_construct_ctos_maxfragmentlen,
+        final_maxfragmentlen
+    },
+#ifndef OPENSSL_NO_SRP
+    {
+        TLSEXT_TYPE_srp,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_AND_BELOW_ONLY,
+        init_srp, tls_parse_ctos_srp, NULL, NULL, tls_construct_ctos_srp, NULL
+    },
+#else
+    INVALID_EXTENSION,
+#endif
+#ifndef OPENSSL_NO_EC
+    {
+        TLSEXT_TYPE_ec_point_formats,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_SERVER_HELLO
+        | SSL_EXT_TLS1_2_AND_BELOW_ONLY,
+        NULL, tls_parse_ctos_ec_pt_formats, tls_parse_stoc_ec_pt_formats,
+        tls_construct_stoc_ec_pt_formats, tls_construct_ctos_ec_pt_formats,
+        final_ec_pt_formats
+    },
+    {
+        /*
+         * "supported_groups" is spread across several specifications.
+         * It was originally specified as "elliptic_curves" in RFC 4492,
+         * and broadened to include named FFDH groups by RFC 7919.
+         * Both RFCs 4492 and 7919 do not include a provision for the server
+         * to indicate to the client the complete list of groups supported
+         * by the server, with the server instead just indicating the
+         * selected group for this connection in the ServerKeyExchange
+         * message.  TLS 1.3 adds a scheme for the server to indicate
+         * to the client its list of supported groups in the
+         * EncryptedExtensions message, but none of the relevant
+         * specifications permit sending supported_groups in the ServerHello.
+         * Nonetheless (possibly due to the close proximity to the
+         * "ec_point_formats" extension, which is allowed in the ServerHello),
+         * there are several servers that send this extension in the
+         * ServerHello anyway.  Up to and including the 1.1.0 release,
+         * we did not check for the presence of nonpermitted extensions,
+         * so to avoid a regression, we must permit this extension in the
+         * TLS 1.2 ServerHello as well.
+         *
+         * Note that there is no tls_parse_stoc_supported_groups function,
+         * so we do not perform any additional parsing, validation, or
+         * processing on the server's group list -- this is just a minimal
+         * change to preserve compatibility with these misbehaving servers.
+         */
+        TLSEXT_TYPE_supported_groups,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_3_ENCRYPTED_EXTENSIONS
+        | SSL_EXT_TLS1_2_SERVER_HELLO,
+        NULL, tls_parse_ctos_supported_groups, NULL,
+        tls_construct_stoc_supported_groups,
+        tls_construct_ctos_supported_groups, NULL
+    },
+#else
+    INVALID_EXTENSION,
+    INVALID_EXTENSION,
+#endif
+    {
+        TLSEXT_TYPE_session_ticket,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_SERVER_HELLO
+        | SSL_EXT_TLS1_2_AND_BELOW_ONLY,
+        init_session_ticket, tls_parse_ctos_session_ticket,
+        tls_parse_stoc_session_ticket, tls_construct_stoc_session_ticket,
+        tls_construct_ctos_session_ticket, NULL
+    },
+#ifndef OPENSSL_NO_OCSP
+    {
+        TLSEXT_TYPE_status_request,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_SERVER_HELLO
+        | SSL_EXT_TLS1_3_CERTIFICATE | SSL_EXT_TLS1_3_CERTIFICATE_REQUEST,
+        init_status_request, tls_parse_ctos_status_request,
+        tls_parse_stoc_status_request, tls_construct_stoc_status_request,
+        tls_construct_ctos_status_request, NULL
+    },
+#else
+    INVALID_EXTENSION,
+#endif
+#ifndef OPENSSL_NO_NEXTPROTONEG
+    {
+        TLSEXT_TYPE_next_proto_neg,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_SERVER_HELLO
+        | SSL_EXT_TLS1_2_AND_BELOW_ONLY,
+        init_npn, tls_parse_ctos_npn, tls_parse_stoc_npn,
+        tls_construct_stoc_next_proto_neg, tls_construct_ctos_npn, NULL
+    },
+#else
+    INVALID_EXTENSION,
+#endif
+    {
+        /*
+         * Must appear in this list after server_name so that finalisation
+         * happens after server_name callbacks
+         */
+        TLSEXT_TYPE_application_layer_protocol_negotiation,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_SERVER_HELLO
+        | SSL_EXT_TLS1_3_ENCRYPTED_EXTENSIONS,
+        init_alpn, tls_parse_ctos_alpn, tls_parse_stoc_alpn,
+        tls_construct_stoc_alpn, tls_construct_ctos_alpn, final_alpn
+    },
+#ifndef OPENSSL_NO_SRTP
+    {
+        TLSEXT_TYPE_use_srtp,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_SERVER_HELLO
+        | SSL_EXT_TLS1_3_ENCRYPTED_EXTENSIONS | SSL_EXT_DTLS_ONLY,
+        init_srtp, tls_parse_ctos_use_srtp, tls_parse_stoc_use_srtp,
+        tls_construct_stoc_use_srtp, tls_construct_ctos_use_srtp, NULL
+    },
+#else
+    INVALID_EXTENSION,
+#endif
+    {
+        TLSEXT_TYPE_encrypt_then_mac,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_SERVER_HELLO
+        | SSL_EXT_TLS1_2_AND_BELOW_ONLY,
+        init_etm, tls_parse_ctos_etm, tls_parse_stoc_etm,
+        tls_construct_stoc_etm, tls_construct_ctos_etm, NULL
+    },
+#ifndef OPENSSL_NO_CT
+    {
+        TLSEXT_TYPE_signed_certificate_timestamp,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_SERVER_HELLO
+        | SSL_EXT_TLS1_3_CERTIFICATE | SSL_EXT_TLS1_3_CERTIFICATE_REQUEST,
+        NULL,
+        /*
+         * No server side support for this, but can be provided by a custom
+         * extension. This is an exception to the rule that custom extensions
+         * cannot override built in ones.
+         */
+        NULL, tls_parse_stoc_sct, NULL, tls_construct_ctos_sct,  NULL
+    },
+#else
+    INVALID_EXTENSION,
+#endif
+    {
+        TLSEXT_TYPE_extended_master_secret,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_SERVER_HELLO
+        | SSL_EXT_TLS1_2_AND_BELOW_ONLY,
+        init_ems, tls_parse_ctos_ems, tls_parse_stoc_ems,
+        tls_construct_stoc_ems, tls_construct_ctos_ems, final_ems
+    },
+    {
+        TLSEXT_TYPE_signature_algorithms_cert,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_3_CERTIFICATE_REQUEST,
+        init_sig_algs_cert, tls_parse_ctos_sig_algs_cert,
+        tls_parse_ctos_sig_algs_cert,
+        /* We do not generate signature_algorithms_cert at present. */
+        NULL, NULL, NULL
+    },
+    {
+        TLSEXT_TYPE_post_handshake_auth,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_3_ONLY,
+        init_post_handshake_auth,
+        tls_parse_ctos_post_handshake_auth, NULL,
+        NULL, tls_construct_ctos_post_handshake_auth,
+        NULL,
+    },
+    {
+        TLSEXT_TYPE_signature_algorithms,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_3_CERTIFICATE_REQUEST,
+        init_sig_algs, tls_parse_ctos_sig_algs,
+        tls_parse_ctos_sig_algs, tls_construct_ctos_sig_algs,
+        tls_construct_ctos_sig_algs, final_sig_algs
+    },
+    {
+        TLSEXT_TYPE_supported_versions,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_3_SERVER_HELLO
+        | SSL_EXT_TLS1_3_HELLO_RETRY_REQUEST | SSL_EXT_TLS_IMPLEMENTATION_ONLY,
+        NULL,
+        /* Processed inline as part of version selection */
+        NULL, tls_parse_stoc_supported_versions,
+        tls_construct_stoc_supported_versions,
+        tls_construct_ctos_supported_versions, NULL
+    },
+    {
+        TLSEXT_TYPE_psk_kex_modes,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS_IMPLEMENTATION_ONLY
+        | SSL_EXT_TLS1_3_ONLY,
+        init_psk_kex_modes, tls_parse_ctos_psk_kex_modes, NULL, NULL,
+        tls_construct_ctos_psk_kex_modes, NULL
+    },
+#ifndef OPENSSL_NO_EC
+    {
+        /*
+         * Must be in this list after supported_groups. We need that to have
+         * been parsed before we do this one.
+         */
+        TLSEXT_TYPE_key_share,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_3_SERVER_HELLO
+        | SSL_EXT_TLS1_3_HELLO_RETRY_REQUEST | SSL_EXT_TLS_IMPLEMENTATION_ONLY
+        | SSL_EXT_TLS1_3_ONLY,
+        NULL, tls_parse_ctos_key_share, tls_parse_stoc_key_share,
+        tls_construct_stoc_key_share, tls_construct_ctos_key_share,
+        final_key_share
+    },
+#endif
+    {
+        /* Must be after key_share */
+        TLSEXT_TYPE_cookie,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_3_HELLO_RETRY_REQUEST
+        | SSL_EXT_TLS_IMPLEMENTATION_ONLY | SSL_EXT_TLS1_3_ONLY,
+        NULL, tls_parse_ctos_cookie, tls_parse_stoc_cookie,
+        tls_construct_stoc_cookie, tls_construct_ctos_cookie, NULL
+    },
+    {
+        /*
+         * Special unsolicited ServerHello extension only used when
+         * SSL_OP_CRYPTOPRO_TLSEXT_BUG is set. We allow it in a ClientHello but
+         * ignore it.
+         */
+        TLSEXT_TYPE_cryptopro_bug,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_SERVER_HELLO
+        | SSL_EXT_TLS1_2_AND_BELOW_ONLY,
+        NULL, NULL, NULL, tls_construct_stoc_cryptopro_bug, NULL, NULL
+    },
+    {
+        TLSEXT_TYPE_early_data,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_3_ENCRYPTED_EXTENSIONS
+        | SSL_EXT_TLS1_3_NEW_SESSION_TICKET | SSL_EXT_TLS1_3_ONLY,
+        NULL, tls_parse_ctos_early_data, tls_parse_stoc_early_data,
+        tls_construct_stoc_early_data, tls_construct_ctos_early_data,
+        final_early_data
+    },
+    {
+        TLSEXT_TYPE_certificate_authorities,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_3_CERTIFICATE_REQUEST
+        | SSL_EXT_TLS1_3_ONLY,
+        init_certificate_authorities,
+        tls_parse_certificate_authorities, tls_parse_certificate_authorities,
+        tls_construct_certificate_authorities,
+        tls_construct_certificate_authorities, NULL,
+    },
+    {
+        /* Must be immediately before pre_shared_key */
+        TLSEXT_TYPE_padding,
+        SSL_EXT_CLIENT_HELLO,
+        NULL,
+        /* We send this, but don't read it */
+        NULL, NULL, NULL, tls_construct_ctos_padding, NULL
+    },
+    {
+        /* Required by the TLSv1.3 spec to always be the last extension */
+        TLSEXT_TYPE_psk,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_3_SERVER_HELLO
+        | SSL_EXT_TLS_IMPLEMENTATION_ONLY | SSL_EXT_TLS1_3_ONLY,
+        NULL, tls_parse_ctos_psk, tls_parse_stoc_psk, tls_construct_stoc_psk,
+        tls_construct_ctos_psk, NULL
+    }
+};
+
+/* Check whether an extension's context matches the current context */
+static int validate_context(SSL *s, unsigned int extctx, unsigned int thisctx)
+{
+    /* Check we're allowed to use this extension in this context */
+    if ((thisctx & extctx) == 0)
+        return 0;
+
+    if (SSL_IS_DTLS(s)) {
+        if ((extctx & SSL_EXT_TLS_ONLY) != 0)
+            return 0;
+    } else if ((extctx & SSL_EXT_DTLS_ONLY) != 0) {
+        return 0;
+    }
+
+    return 1;
+}
+
+int tls_validate_all_contexts(SSL *s, unsigned int thisctx, RAW_EXTENSION *exts)
+{
+    size_t i, num_exts, builtin_num = OSSL_NELEM(ext_defs), offset;
+    RAW_EXTENSION *thisext;
+    unsigned int context;
+    ENDPOINT role = ENDPOINT_BOTH;
+
+    if ((thisctx & SSL_EXT_CLIENT_HELLO) != 0)
+        role = ENDPOINT_SERVER;
+    else if ((thisctx & SSL_EXT_TLS1_2_SERVER_HELLO) != 0)
+        role = ENDPOINT_CLIENT;
+
+    /* Calculate the number of extensions in the extensions list */
+    num_exts = builtin_num + s->cert->custext.meths_count;
+
+    for (thisext = exts, i = 0; i < num_exts; i++, thisext++) {
+        if (!thisext->present)
+            continue;
+
+        if (i < builtin_num) {
+            context = ext_defs[i].context;
+        } else {
+            custom_ext_method *meth = NULL;
+
+            meth = custom_ext_find(&s->cert->custext, role, thisext->type,
+                                   &offset);
+            if (!ossl_assert(meth != NULL))
+                return 0;
+            context = meth->context;
+        }
+
+        if (!validate_context(s, context, thisctx))
+            return 0;
+    }
+
+    return 1;
+}
+
+/*
+ * Verify whether we are allowed to use the extension |type| in the current
+ * |context|. Returns 1 to indicate the extension is allowed or unknown or 0 to
+ * indicate the extension is not allowed. If returning 1 then |*found| is set to
+ * the definition for the extension we found.
+ */
+static int verify_extension(SSL *s, unsigned int context, unsigned int type,
+                            custom_ext_methods *meths, RAW_EXTENSION *rawexlist,
+                            RAW_EXTENSION **found)
+{
+    size_t i;
+    size_t builtin_num = OSSL_NELEM(ext_defs);
+    const EXTENSION_DEFINITION *thisext;
+
+    for (i = 0, thisext = ext_defs; i < builtin_num; i++, thisext++) {
+        if (type == thisext->type) {
+            if (!validate_context(s, thisext->context, context))
+                return 0;
+
+            *found = &rawexlist[i];
+            return 1;
+        }
+    }
+
+    /* Check the custom extensions */
+    if (meths != NULL) {
+        size_t offset = 0;
+        ENDPOINT role = ENDPOINT_BOTH;
+        custom_ext_method *meth = NULL;
+
+        if ((context & SSL_EXT_CLIENT_HELLO) != 0)
+            role = ENDPOINT_SERVER;
+        else if ((context & SSL_EXT_TLS1_2_SERVER_HELLO) != 0)
+            role = ENDPOINT_CLIENT;
+
+        meth = custom_ext_find(meths, role, type, &offset);
+        if (meth != NULL) {
+            if (!validate_context(s, meth->context, context))
+                return 0;
+            *found = &rawexlist[offset + builtin_num];
+            return 1;
+        }
+    }
+
+    /* Unknown extension. We allow it */
+    *found = NULL;
+    return 1;
+}
+
+/*
+ * Check whether the context defined for an extension |extctx| means whether
+ * the extension is relevant for the current context |thisctx| or not. Returns
+ * 1 if the extension is relevant for this context, and 0 otherwise
+ */
+int extension_is_relevant(SSL *s, unsigned int extctx, unsigned int thisctx)
+{
+    int is_tls13;
+
+    /*
+     * For HRR we haven't selected the version yet but we know it will be
+     * TLSv1.3
+     */
+    if ((thisctx & SSL_EXT_TLS1_3_HELLO_RETRY_REQUEST) != 0)
+        is_tls13 = 1;
+    else
+        is_tls13 = SSL_IS_TLS13(s);
+
+    if ((SSL_IS_DTLS(s)
+                && (extctx & SSL_EXT_TLS_IMPLEMENTATION_ONLY) != 0)
+            || (s->version == SSL3_VERSION
+                    && (extctx & SSL_EXT_SSL3_ALLOWED) == 0)
+            /*
+             * Note that SSL_IS_TLS13() means "TLS 1.3 has been negotiated",
+             * which is never true when generating the ClientHello.
+             * However, version negotiation *has* occurred by the time the
+             * ClientHello extensions are being parsed.
+             * Be careful to allow TLS 1.3-only extensions when generating
+             * the ClientHello.
+             */
+            || (is_tls13 && (extctx & SSL_EXT_TLS1_2_AND_BELOW_ONLY) != 0)
+            || (!is_tls13 && (extctx & SSL_EXT_TLS1_3_ONLY) != 0
+                && (thisctx & SSL_EXT_CLIENT_HELLO) == 0)
+            || (s->server && !is_tls13 && (extctx & SSL_EXT_TLS1_3_ONLY) != 0)
+            || (s->hit && (extctx & SSL_EXT_IGNORE_ON_RESUMPTION) != 0))
+        return 0;
+    return 1;
+}
+
+/*
+ * Gather a list of all the extensions from the data in |packet]. |context|
+ * tells us which message this extension is for. The raw extension data is
+ * stored in |*res| on success. We don't actually process the content of the
+ * extensions yet, except to check their types. This function also runs the
+ * initialiser functions for all known extensions if |init| is nonzero (whether
+ * we have collected them or not). If successful the caller is responsible for
+ * freeing the contents of |*res|.
+ *
+ * Per http://tools.ietf.org/html/rfc5246#section-7.4.1.4, there may not be
+ * more than one extension of the same type in a ClientHello or ServerHello.
+ * This function returns 1 if all extensions are unique and we have parsed their
+ * types, and 0 if the extensions contain duplicates, could not be successfully
+ * found, or an internal error occurred. We only check duplicates for
+ * extensions that we know about. We ignore others.
+ */
+int tls_collect_extensions(SSL *s, PACKET *packet, unsigned int context,
+                           RAW_EXTENSION **res, size_t *len, int init)
+{
+    PACKET extensions = *packet;
+    size_t i = 0;
+    size_t num_exts;
+    custom_ext_methods *exts = &s->cert->custext;
+    RAW_EXTENSION *raw_extensions = NULL;
+    const EXTENSION_DEFINITION *thisexd;
+
+    *res = NULL;
+
+    /*
+     * Initialise server side custom extensions. Client side is done during
+     * construction of extensions for the ClientHello.
+     */
+    if ((context & SSL_EXT_CLIENT_HELLO) != 0)
+        custom_ext_init(&s->cert->custext);
+
+    num_exts = OSSL_NELEM(ext_defs) + (exts != NULL ? exts->meths_count : 0);
+    raw_extensions = OPENSSL_zalloc(num_exts * sizeof(*raw_extensions));
+    if (raw_extensions == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_COLLECT_EXTENSIONS,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    i = 0;
+    while (PACKET_remaining(&extensions) > 0) {
+        unsigned int type, idx;
+        PACKET extension;
+        RAW_EXTENSION *thisex;
+
+        if (!PACKET_get_net_2(&extensions, &type) ||
+            !PACKET_get_length_prefixed_2(&extensions, &extension)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_COLLECT_EXTENSIONS,
+                     SSL_R_BAD_EXTENSION);
+            goto err;
+        }
+        /*
+         * Verify this extension is allowed. We only check duplicates for
+         * extensions that we recognise. We also have a special case for the
+         * PSK extension, which must be the last one in the ClientHello.
+         */
+        if (!verify_extension(s, context, type, exts, raw_extensions, &thisex)
+                || (thisex != NULL && thisex->present == 1)
+                || (type == TLSEXT_TYPE_psk
+                    && (context & SSL_EXT_CLIENT_HELLO) != 0
+                    && PACKET_remaining(&extensions) != 0)) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_COLLECT_EXTENSIONS,
+                     SSL_R_BAD_EXTENSION);
+            goto err;
+        }
+        idx = thisex - raw_extensions;
+        /*-
+         * Check that we requested this extension (if appropriate). Requests can
+         * be sent in the ClientHello and CertificateRequest. Unsolicited
+         * extensions can be sent in the NewSessionTicket. We only do this for
+         * the built-in extensions. Custom extensions have a different but
+         * similar check elsewhere.
+         * Special cases:
+         * - The HRR cookie extension is unsolicited
+         * - The renegotiate extension is unsolicited (the client signals
+         *   support via an SCSV)
+         * - The signed_certificate_timestamp extension can be provided by a
+         * custom extension or by the built-in version. We let the extension
+         * itself handle unsolicited response checks.
+         */
+        if (idx < OSSL_NELEM(ext_defs)
+                && (context & (SSL_EXT_CLIENT_HELLO
+                               | SSL_EXT_TLS1_3_CERTIFICATE_REQUEST
+                               | SSL_EXT_TLS1_3_NEW_SESSION_TICKET)) == 0
+                && type != TLSEXT_TYPE_cookie
+                && type != TLSEXT_TYPE_renegotiate
+                && type != TLSEXT_TYPE_signed_certificate_timestamp
+                && (s->ext.extflags[idx] & SSL_EXT_FLAG_SENT) == 0
+#ifndef OPENSSL_NO_GOST
+                && !((context & SSL_EXT_TLS1_2_SERVER_HELLO) != 0
+                     && type == TLSEXT_TYPE_cryptopro_bug)
+#endif
+								) {
+            SSLfatal(s, SSL_AD_UNSUPPORTED_EXTENSION,
+                     SSL_F_TLS_COLLECT_EXTENSIONS, SSL_R_UNSOLICITED_EXTENSION);
+            goto err;
+        }
+        if (thisex != NULL) {
+            thisex->data = extension;
+            thisex->present = 1;
+            thisex->type = type;
+            thisex->received_order = i++;
+            if (s->ext.debug_cb)
+                s->ext.debug_cb(s, !s->server, thisex->type,
+                                PACKET_data(&thisex->data),
+                                PACKET_remaining(&thisex->data),
+                                s->ext.debug_arg);
+        }
+    }
+
+    if (init) {
+        /*
+         * Initialise all known extensions relevant to this context,
+         * whether we have found them or not
+         */
+        for (thisexd = ext_defs, i = 0; i < OSSL_NELEM(ext_defs);
+             i++, thisexd++) {
+            if (thisexd->init != NULL && (thisexd->context & context) != 0
+                && extension_is_relevant(s, thisexd->context, context)
+                && !thisexd->init(s, context)) {
+                /* SSLfatal() already called */
+                goto err;
+            }
+        }
+    }
+
+    *res = raw_extensions;
+    if (len != NULL)
+        *len = num_exts;
+    return 1;
+
+ err:
+    OPENSSL_free(raw_extensions);
+    return 0;
+}
+
+/*
+ * Runs the parser for a given extension with index |idx|. |exts| contains the
+ * list of all parsed extensions previously collected by
+ * tls_collect_extensions(). The parser is only run if it is applicable for the
+ * given |context| and the parser has not already been run. If this is for a
+ * Certificate message, then we also provide the parser with the relevant
+ * Certificate |x| and its position in the |chainidx| with 0 being the first
+ * Certificate. Returns 1 on success or 0 on failure. If an extension is not
+ * present this counted as success.
+ */
+int tls_parse_extension(SSL *s, TLSEXT_INDEX idx, int context,
+                        RAW_EXTENSION *exts, X509 *x, size_t chainidx)
+{
+    RAW_EXTENSION *currext = &exts[idx];
+    int (*parser)(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                  size_t chainidx) = NULL;
+
+    /* Skip if the extension is not present */
+    if (!currext->present)
+        return 1;
+
+    /* Skip if we've already parsed this extension */
+    if (currext->parsed)
+        return 1;
+
+    currext->parsed = 1;
+
+    if (idx < OSSL_NELEM(ext_defs)) {
+        /* We are handling a built-in extension */
+        const EXTENSION_DEFINITION *extdef = &ext_defs[idx];
+
+        /* Check if extension is defined for our protocol. If not, skip */
+        if (!extension_is_relevant(s, extdef->context, context))
+            return 1;
+
+        parser = s->server ? extdef->parse_ctos : extdef->parse_stoc;
+
+        if (parser != NULL)
+            return parser(s, &currext->data, context, x, chainidx);
+
+        /*
+         * If the parser is NULL we fall through to the custom extension
+         * processing
+         */
+    }
+
+    /* Parse custom extensions */
+    return custom_ext_parse(s, context, currext->type,
+                            PACKET_data(&currext->data),
+                            PACKET_remaining(&currext->data),
+                            x, chainidx);
+}
+
+/*
+ * Parse all remaining extensions that have not yet been parsed. Also calls the
+ * finalisation for all extensions at the end if |fin| is nonzero, whether we
+ * collected them or not. Returns 1 for success or 0 for failure. If we are
+ * working on a Certificate message then we also pass the Certificate |x| and
+ * its position in the |chainidx|, with 0 being the first certificate.
+ */
+int tls_parse_all_extensions(SSL *s, int context, RAW_EXTENSION *exts, X509 *x,
+                             size_t chainidx, int fin)
+{
+    size_t i, numexts = OSSL_NELEM(ext_defs);
+    const EXTENSION_DEFINITION *thisexd;
+
+    /* Calculate the number of extensions in the extensions list */
+    numexts += s->cert->custext.meths_count;
+
+    /* Parse each extension in turn */
+    for (i = 0; i < numexts; i++) {
+        if (!tls_parse_extension(s, i, context, exts, x, chainidx)) {
+            /* SSLfatal() already called */
+            return 0;
+        }
+    }
+
+    if (fin) {
+        /*
+         * Finalise all known extensions relevant to this context,
+         * whether we have found them or not
+         */
+        for (i = 0, thisexd = ext_defs; i < OSSL_NELEM(ext_defs);
+             i++, thisexd++) {
+            if (thisexd->final != NULL && (thisexd->context & context) != 0
+                && !thisexd->final(s, context, exts[i].present)) {
+                /* SSLfatal() already called */
+                return 0;
+            }
+        }
+    }
+
+    return 1;
+}
+
+int should_add_extension(SSL *s, unsigned int extctx, unsigned int thisctx,
+                         int max_version)
+{
+    /* Skip if not relevant for our context */
+    if ((extctx & thisctx) == 0)
+        return 0;
+
+    /* Check if this extension is defined for our protocol. If not, skip */
+    if (!extension_is_relevant(s, extctx, thisctx)
+            || ((extctx & SSL_EXT_TLS1_3_ONLY) != 0
+                && (thisctx & SSL_EXT_CLIENT_HELLO) != 0
+                && (SSL_IS_DTLS(s) || max_version < TLS1_3_VERSION)))
+        return 0;
+
+    return 1;
+}
+
+/*
+ * Construct all the extensions relevant to the current |context| and write
+ * them to |pkt|. If this is an extension for a Certificate in a Certificate
+ * message, then |x| will be set to the Certificate we are handling, and
+ * |chainidx| will indicate the position in the chainidx we are processing (with
+ * 0 being the first in the chain). Returns 1 on success or 0 on failure. On a
+ * failure construction stops at the first extension to fail to construct.
+ */
+int tls_construct_extensions(SSL *s, WPACKET *pkt, unsigned int context,
+                             X509 *x, size_t chainidx)
+{
+    size_t i;
+    int min_version, max_version = 0, reason;
+    const EXTENSION_DEFINITION *thisexd;
+
+    if (!WPACKET_start_sub_packet_u16(pkt)
+               /*
+                * If extensions are of zero length then we don't even add the
+                * extensions length bytes to a ClientHello/ServerHello
+                * (for non-TLSv1.3).
+                */
+            || ((context &
+                 (SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_SERVER_HELLO)) != 0
+                && !WPACKET_set_flags(pkt,
+                                     WPACKET_FLAGS_ABANDON_ON_ZERO_LENGTH))) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_EXTENSIONS,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if ((context & SSL_EXT_CLIENT_HELLO) != 0) {
+        reason = ssl_get_min_max_version(s, &min_version, &max_version, NULL);
+        if (reason != 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_EXTENSIONS,
+                     reason);
+            return 0;
+        }
+    }
+
+    /* Add custom extensions first */
+    if ((context & SSL_EXT_CLIENT_HELLO) != 0) {
+        /* On the server side with initialise during ClientHello parsing */
+        custom_ext_init(&s->cert->custext);
+    }
+    if (!custom_ext_add(s, context, pkt, x, chainidx, max_version)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    for (i = 0, thisexd = ext_defs; i < OSSL_NELEM(ext_defs); i++, thisexd++) {
+        EXT_RETURN (*construct)(SSL *s, WPACKET *pkt, unsigned int context,
+                                X509 *x, size_t chainidx);
+        EXT_RETURN ret;
+
+        /* Skip if not relevant for our context */
+        if (!should_add_extension(s, thisexd->context, context, max_version))
+            continue;
+
+        construct = s->server ? thisexd->construct_stoc
+                              : thisexd->construct_ctos;
+
+        if (construct == NULL)
+            continue;
+
+        ret = construct(s, pkt, context, x, chainidx);
+        if (ret == EXT_RETURN_FAIL) {
+            /* SSLfatal() already called */
+            return 0;
+        }
+        if (ret == EXT_RETURN_SENT
+                && (context & (SSL_EXT_CLIENT_HELLO
+                               | SSL_EXT_TLS1_3_CERTIFICATE_REQUEST
+                               | SSL_EXT_TLS1_3_NEW_SESSION_TICKET)) != 0)
+            s->ext.extflags[i] |= SSL_EXT_FLAG_SENT;
+    }
+
+    if (!WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_EXTENSIONS,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    return 1;
+}
+
+/*
+ * Built in extension finalisation and initialisation functions. All initialise
+ * or finalise the associated extension type for the given |context|. For
+ * finalisers |sent| is set to 1 if we saw the extension during parsing, and 0
+ * otherwise. These functions return 1 on success or 0 on failure.
+ */
+
+static int final_renegotiate(SSL *s, unsigned int context, int sent)
+{
+    if (!s->server) {
+        /*
+         * Check if we can connect to a server that doesn't support safe
+         * renegotiation
+         */
+        if (!(s->options & SSL_OP_LEGACY_SERVER_CONNECT)
+                && !(s->options & SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION)
+                && !sent) {
+            SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_FINAL_RENEGOTIATE,
+                     SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED);
+            return 0;
+        }
+
+        return 1;
+    }
+
+    /* Need RI if renegotiating */
+    if (s->renegotiate
+            && !(s->options & SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION)
+            && !sent) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_FINAL_RENEGOTIATE,
+                 SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED);
+        return 0;
+    }
+
+
+    return 1;
+}
+
+static int init_server_name(SSL *s, unsigned int context)
+{
+    if (s->server) {
+        s->servername_done = 0;
+
+        OPENSSL_free(s->ext.hostname);
+        s->ext.hostname = NULL;
+    }
+
+    return 1;
+}
+
+static int final_server_name(SSL *s, unsigned int context, int sent)
+{
+    int ret = SSL_TLSEXT_ERR_NOACK;
+    int altmp = SSL_AD_UNRECOGNIZED_NAME;
+    int was_ticket = (SSL_get_options(s) & SSL_OP_NO_TICKET) == 0;
+
+    if (!ossl_assert(s->ctx != NULL) || !ossl_assert(s->session_ctx != NULL)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_FINAL_SERVER_NAME,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (s->ctx->ext.servername_cb != NULL)
+        ret = s->ctx->ext.servername_cb(s, &altmp,
+                                        s->ctx->ext.servername_arg);
+    else if (s->session_ctx->ext.servername_cb != NULL)
+        ret = s->session_ctx->ext.servername_cb(s, &altmp,
+                                       s->session_ctx->ext.servername_arg);
+
+    /*
+     * For servers, propagate the SNI hostname from the temporary
+     * storage in the SSL to the persistent SSL_SESSION, now that we
+     * know we accepted it.
+     * Clients make this copy when parsing the server's response to
+     * the extension, which is when they find out that the negotiation
+     * was successful.
+     */
+    if (s->server) {
+        /* TODO(OpenSSL1.2) revisit !sent case */
+        if (sent && ret == SSL_TLSEXT_ERR_OK && (!s->hit || SSL_IS_TLS13(s))) {
+            /* Only store the hostname in the session if we accepted it. */
+            OPENSSL_free(s->session->ext.hostname);
+            s->session->ext.hostname = OPENSSL_strdup(s->ext.hostname);
+            if (s->session->ext.hostname == NULL && s->ext.hostname != NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_FINAL_SERVER_NAME,
+                         ERR_R_INTERNAL_ERROR);
+            }
+        }
+    }
+
+    /*
+     * If we switched contexts (whether here or in the client_hello callback),
+     * move the sess_accept increment from the session_ctx to the new
+     * context, to avoid the confusing situation of having sess_accept_good
+     * exceed sess_accept (zero) for the new context.
+     */
+    if (SSL_IS_FIRST_HANDSHAKE(s) && s->ctx != s->session_ctx) {
+        tsan_counter(&s->ctx->stats.sess_accept);
+        tsan_decr(&s->session_ctx->stats.sess_accept);
+    }
+
+    /*
+     * If we're expecting to send a ticket, and tickets were previously enabled,
+     * and now tickets are disabled, then turn off expected ticket.
+     * Also, if this is not a resumption, create a new session ID
+     */
+    if (ret == SSL_TLSEXT_ERR_OK && s->ext.ticket_expected
+            && was_ticket && (SSL_get_options(s) & SSL_OP_NO_TICKET) != 0) {
+        s->ext.ticket_expected = 0;
+        if (!s->hit) {
+            SSL_SESSION* ss = SSL_get_session(s);
+
+            if (ss != NULL) {
+                OPENSSL_free(ss->ext.tick);
+                ss->ext.tick = NULL;
+                ss->ext.ticklen = 0;
+                ss->ext.tick_lifetime_hint = 0;
+                ss->ext.tick_age_add = 0;
+                ss->ext.tick_identity = 0;
+                if (!ssl_generate_session_id(s, ss)) {
+                    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_FINAL_SERVER_NAME,
+                             ERR_R_INTERNAL_ERROR);
+                    return 0;
+                }
+            } else {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_FINAL_SERVER_NAME,
+                         ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+        }
+    }
+
+    switch (ret) {
+    case SSL_TLSEXT_ERR_ALERT_FATAL:
+        SSLfatal(s, altmp, SSL_F_FINAL_SERVER_NAME, SSL_R_CALLBACK_FAILED);
+        return 0;
+
+    case SSL_TLSEXT_ERR_ALERT_WARNING:
+        /* TLSv1.3 doesn't have warning alerts so we suppress this */
+        if (!SSL_IS_TLS13(s))
+            ssl3_send_alert(s, SSL3_AL_WARNING, altmp);
+        return 1;
+
+    case SSL_TLSEXT_ERR_NOACK:
+        s->servername_done = 0;
+        return 1;
+
+    default:
+        return 1;
+    }
+}
+
+#ifndef OPENSSL_NO_EC
+static int final_ec_pt_formats(SSL *s, unsigned int context, int sent)
+{
+    unsigned long alg_k, alg_a;
+
+    if (s->server)
+        return 1;
+
+    alg_k = s->s3->tmp.new_cipher->algorithm_mkey;
+    alg_a = s->s3->tmp.new_cipher->algorithm_auth;
+
+    /*
+     * If we are client and using an elliptic curve cryptography cipher
+     * suite, then if server returns an EC point formats lists extension it
+     * must contain uncompressed.
+     */
+    if (s->ext.ecpointformats != NULL
+            && s->ext.ecpointformats_len > 0
+            && s->session->ext.ecpointformats != NULL
+            && s->session->ext.ecpointformats_len > 0
+            && ((alg_k & SSL_kECDHE) || (alg_a & SSL_aECDSA))) {
+        /* we are using an ECC cipher */
+        size_t i;
+        unsigned char *list = s->session->ext.ecpointformats;
+
+        for (i = 0; i < s->session->ext.ecpointformats_len; i++) {
+            if (*list++ == TLSEXT_ECPOINTFORMAT_uncompressed)
+                break;
+        }
+        if (i == s->session->ext.ecpointformats_len) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_FINAL_EC_PT_FORMATS,
+                     SSL_R_TLS_INVALID_ECPOINTFORMAT_LIST);
+            return 0;
+        }
+    }
+
+    return 1;
+}
+#endif
+
+static int init_session_ticket(SSL *s, unsigned int context)
+{
+    if (!s->server)
+        s->ext.ticket_expected = 0;
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_OCSP
+static int init_status_request(SSL *s, unsigned int context)
+{
+    if (s->server) {
+        s->ext.status_type = TLSEXT_STATUSTYPE_nothing;
+    } else {
+        /*
+         * Ensure we get sensible values passed to tlsext_status_cb in the event
+         * that we don't receive a status message
+         */
+        OPENSSL_free(s->ext.ocsp.resp);
+        s->ext.ocsp.resp = NULL;
+        s->ext.ocsp.resp_len = 0;
+    }
+
+    return 1;
+}
+#endif
+
+#ifndef OPENSSL_NO_NEXTPROTONEG
+static int init_npn(SSL *s, unsigned int context)
+{
+    s->s3->npn_seen = 0;
+
+    return 1;
+}
+#endif
+
+static int init_alpn(SSL *s, unsigned int context)
+{
+    OPENSSL_free(s->s3->alpn_selected);
+    s->s3->alpn_selected = NULL;
+    s->s3->alpn_selected_len = 0;
+    if (s->server) {
+        OPENSSL_free(s->s3->alpn_proposed);
+        s->s3->alpn_proposed = NULL;
+        s->s3->alpn_proposed_len = 0;
+    }
+    return 1;
+}
+
+static int final_alpn(SSL *s, unsigned int context, int sent)
+{
+    if (!s->server && !sent && s->session->ext.alpn_selected != NULL)
+            s->ext.early_data_ok = 0;
+
+    if (!s->server || !SSL_IS_TLS13(s))
+        return 1;
+
+    /*
+     * Call alpn_select callback if needed.  Has to be done after SNI and
+     * cipher negotiation (HTTP/2 restricts permitted ciphers). In TLSv1.3
+     * we also have to do this before we decide whether to accept early_data.
+     * In TLSv1.3 we've already negotiated our cipher so we do this call now.
+     * For < TLSv1.3 we defer it until after cipher negotiation.
+     *
+     * On failure SSLfatal() already called.
+     */
+    return tls_handle_alpn(s);
+}
+
+static int init_sig_algs(SSL *s, unsigned int context)
+{
+    /* Clear any signature algorithms extension received */
+    OPENSSL_free(s->s3->tmp.peer_sigalgs);
+    s->s3->tmp.peer_sigalgs = NULL;
+
+    return 1;
+}
+
+static int init_sig_algs_cert(SSL *s, unsigned int context)
+{
+    /* Clear any signature algorithms extension received */
+    OPENSSL_free(s->s3->tmp.peer_cert_sigalgs);
+    s->s3->tmp.peer_cert_sigalgs = NULL;
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_SRP
+static int init_srp(SSL *s, unsigned int context)
+{
+    OPENSSL_free(s->srp_ctx.login);
+    s->srp_ctx.login = NULL;
+
+    return 1;
+}
+#endif
+
+static int init_etm(SSL *s, unsigned int context)
+{
+    s->ext.use_etm = 0;
+
+    return 1;
+}
+
+static int init_ems(SSL *s, unsigned int context)
+{
+    if (!s->server)
+        s->s3->flags &= ~TLS1_FLAGS_RECEIVED_EXTMS;
+
+    return 1;
+}
+
+static int final_ems(SSL *s, unsigned int context, int sent)
+{
+    if (!s->server && s->hit) {
+        /*
+         * Check extended master secret extension is consistent with
+         * original session.
+         */
+        if (!(s->s3->flags & TLS1_FLAGS_RECEIVED_EXTMS) !=
+            !(s->session->flags & SSL_SESS_FLAG_EXTMS)) {
+            SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_FINAL_EMS,
+                     SSL_R_INCONSISTENT_EXTMS);
+            return 0;
+        }
+    }
+
+    return 1;
+}
+
+static int init_certificate_authorities(SSL *s, unsigned int context)
+{
+    sk_X509_NAME_pop_free(s->s3->tmp.peer_ca_names, X509_NAME_free);
+    s->s3->tmp.peer_ca_names = NULL;
+    return 1;
+}
+
+static EXT_RETURN tls_construct_certificate_authorities(SSL *s, WPACKET *pkt,
+                                                        unsigned int context,
+                                                        X509 *x,
+                                                        size_t chainidx)
+{
+    const STACK_OF(X509_NAME) *ca_sk = get_ca_names(s);
+
+    if (ca_sk == NULL || sk_X509_NAME_num(ca_sk) == 0)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_certificate_authorities)
+        || !WPACKET_start_sub_packet_u16(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CERTIFICATE_AUTHORITIES,
+               ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    if (!construct_ca_names(s, ca_sk, pkt)) {
+        /* SSLfatal() already called */
+        return EXT_RETURN_FAIL;
+    }
+
+    if (!WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CERTIFICATE_AUTHORITIES,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+static int tls_parse_certificate_authorities(SSL *s, PACKET *pkt,
+                                             unsigned int context, X509 *x,
+                                             size_t chainidx)
+{
+    if (!parse_ca_names(s, pkt))
+        return 0;
+    if (PACKET_remaining(pkt) != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PARSE_CERTIFICATE_AUTHORITIES, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+    return 1;
+}
+
+#ifndef OPENSSL_NO_SRTP
+static int init_srtp(SSL *s, unsigned int context)
+{
+    if (s->server)
+        s->srtp_profile = NULL;
+
+    return 1;
+}
+#endif
+
+static int final_sig_algs(SSL *s, unsigned int context, int sent)
+{
+    if (!sent && SSL_IS_TLS13(s) && !s->hit) {
+        SSLfatal(s, TLS13_AD_MISSING_EXTENSION, SSL_F_FINAL_SIG_ALGS,
+                 SSL_R_MISSING_SIGALGS_EXTENSION);
+        return 0;
+    }
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_EC
+static int final_key_share(SSL *s, unsigned int context, int sent)
+{
+    if (!SSL_IS_TLS13(s))
+        return 1;
+
+    /* Nothing to do for key_share in an HRR */
+    if ((context & SSL_EXT_TLS1_3_HELLO_RETRY_REQUEST) != 0)
+        return 1;
+
+    /*
+     * If
+     *     we are a client
+     *     AND
+     *     we have no key_share
+     *     AND
+     *     (we are not resuming
+     *      OR the kex_mode doesn't allow non key_share resumes)
+     * THEN
+     *     fail;
+     */
+    if (!s->server
+            && !sent
+            && (!s->hit
+                || (s->ext.psk_kex_mode & TLSEXT_KEX_MODE_FLAG_KE) == 0)) {
+        /* Nothing left we can do - just fail */
+        SSLfatal(s, SSL_AD_MISSING_EXTENSION, SSL_F_FINAL_KEY_SHARE,
+                 SSL_R_NO_SUITABLE_KEY_SHARE);
+        return 0;
+    }
+    /*
+     * IF
+     *     we are a server
+     * THEN
+     *     IF
+     *         we have a suitable key_share
+     *     THEN
+     *         IF
+     *             we are stateless AND we have no cookie
+     *         THEN
+     *             send a HelloRetryRequest
+     *     ELSE
+     *         IF
+     *             we didn't already send a HelloRetryRequest
+     *             AND
+     *             the client sent a key_share extension
+     *             AND
+     *             (we are not resuming
+     *              OR the kex_mode allows key_share resumes)
+     *             AND
+     *             a shared group exists
+     *         THEN
+     *             send a HelloRetryRequest
+     *         ELSE IF
+     *             we are not resuming
+     *             OR
+     *             the kex_mode doesn't allow non key_share resumes
+     *         THEN
+     *             fail
+     *         ELSE IF
+     *             we are stateless AND we have no cookie
+     *         THEN
+     *             send a HelloRetryRequest
+     */
+    if (s->server) {
+        if (s->s3->peer_tmp != NULL) {
+            /* We have a suitable key_share */
+            if ((s->s3->flags & TLS1_FLAGS_STATELESS) != 0
+                    && !s->ext.cookieok) {
+                if (!ossl_assert(s->hello_retry_request == SSL_HRR_NONE)) {
+                    /*
+                     * If we are stateless then we wouldn't know about any
+                     * previously sent HRR - so how can this be anything other
+                     * than 0?
+                     */
+                    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_FINAL_KEY_SHARE,
+                             ERR_R_INTERNAL_ERROR);
+                    return 0;
+                }
+                s->hello_retry_request = SSL_HRR_PENDING;
+                return 1;
+            }
+        } else {
+            /* No suitable key_share */
+            if (s->hello_retry_request == SSL_HRR_NONE && sent
+                    && (!s->hit
+                        || (s->ext.psk_kex_mode & TLSEXT_KEX_MODE_FLAG_KE_DHE)
+                           != 0)) {
+                const uint16_t *pgroups, *clntgroups;
+                size_t num_groups, clnt_num_groups, i;
+                unsigned int group_id = 0;
+
+                /* Check if a shared group exists */
+
+                /* Get the clients list of supported groups. */
+                tls1_get_peer_groups(s, &clntgroups, &clnt_num_groups);
+                tls1_get_supported_groups(s, &pgroups, &num_groups);
+
+                /*
+                 * Find the first group we allow that is also in client's list
+                 */
+                for (i = 0; i < num_groups; i++) {
+                    group_id = pgroups[i];
+
+                    if (check_in_list(s, group_id, clntgroups, clnt_num_groups,
+                                      1))
+                        break;
+                }
+
+                if (i < num_groups) {
+                    /* A shared group exists so send a HelloRetryRequest */
+                    s->s3->group_id = group_id;
+                    s->hello_retry_request = SSL_HRR_PENDING;
+                    return 1;
+                }
+            }
+            if (!s->hit
+                    || (s->ext.psk_kex_mode & TLSEXT_KEX_MODE_FLAG_KE) == 0) {
+                /* Nothing left we can do - just fail */
+                SSLfatal(s, sent ? SSL_AD_HANDSHAKE_FAILURE
+                                 : SSL_AD_MISSING_EXTENSION,
+                         SSL_F_FINAL_KEY_SHARE, SSL_R_NO_SUITABLE_KEY_SHARE);
+                return 0;
+            }
+
+            if ((s->s3->flags & TLS1_FLAGS_STATELESS) != 0
+                    && !s->ext.cookieok) {
+                if (!ossl_assert(s->hello_retry_request == SSL_HRR_NONE)) {
+                    /*
+                     * If we are stateless then we wouldn't know about any
+                     * previously sent HRR - so how can this be anything other
+                     * than 0?
+                     */
+                    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_FINAL_KEY_SHARE,
+                             ERR_R_INTERNAL_ERROR);
+                    return 0;
+                }
+                s->hello_retry_request = SSL_HRR_PENDING;
+                return 1;
+            }
+        }
+
+        /*
+         * We have a key_share so don't send any more HelloRetryRequest
+         * messages
+         */
+        if (s->hello_retry_request == SSL_HRR_PENDING)
+            s->hello_retry_request = SSL_HRR_COMPLETE;
+    } else {
+        /*
+         * For a client side resumption with no key_share we need to generate
+         * the handshake secret (otherwise this is done during key_share
+         * processing).
+         */
+        if (!sent && !tls13_generate_handshake_secret(s, NULL, 0)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_FINAL_KEY_SHARE,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+    }
+
+    return 1;
+}
+#endif
+
+static int init_psk_kex_modes(SSL *s, unsigned int context)
+{
+    s->ext.psk_kex_mode = TLSEXT_KEX_MODE_FLAG_NONE;
+    return 1;
+}
+
+int tls_psk_do_binder(SSL *s, const EVP_MD *md, const unsigned char *msgstart,
+                      size_t binderoffset, const unsigned char *binderin,
+                      unsigned char *binderout, SSL_SESSION *sess, int sign,
+                      int external)
+{
+    EVP_PKEY *mackey = NULL;
+    EVP_MD_CTX *mctx = NULL;
+    unsigned char hash[EVP_MAX_MD_SIZE], binderkey[EVP_MAX_MD_SIZE];
+    unsigned char finishedkey[EVP_MAX_MD_SIZE], tmpbinder[EVP_MAX_MD_SIZE];
+    unsigned char *early_secret;
+    static const unsigned char resumption_label[] = "res binder";
+    static const unsigned char external_label[] = "ext binder";
+    const unsigned char *label;
+    size_t bindersize, labelsize, hashsize;
+    int hashsizei = EVP_MD_size(md);
+    int ret = -1;
+    int usepskfored = 0;
+
+    /* Ensure cast to size_t is safe */
+    if (!ossl_assert(hashsizei >= 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PSK_DO_BINDER,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    hashsize = (size_t)hashsizei;
+
+    if (external
+            && s->early_data_state == SSL_EARLY_DATA_CONNECTING
+            && s->session->ext.max_early_data == 0
+            && sess->ext.max_early_data > 0)
+        usepskfored = 1;
+
+    if (external) {
+        label = external_label;
+        labelsize = sizeof(external_label) - 1;
+    } else {
+        label = resumption_label;
+        labelsize = sizeof(resumption_label) - 1;
+    }
+
+    /*
+     * Generate the early_secret. On the server side we've selected a PSK to
+     * resume with (internal or external) so we always do this. On the client
+     * side we do this for a non-external (i.e. resumption) PSK or external PSK
+     * that will be used for early_data so that it is in place for sending early
+     * data. For client side external PSK not being used for early_data we
+     * generate it but store it away for later use.
+     */
+    if (s->server || !external || usepskfored)
+        early_secret = (unsigned char *)s->early_secret;
+    else
+        early_secret = (unsigned char *)sess->early_secret;
+
+    if (!tls13_generate_secret(s, md, NULL, sess->master_key,
+                               sess->master_key_length, early_secret)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    /*
+     * Create the handshake hash for the binder key...the messages so far are
+     * empty!
+     */
+    mctx = EVP_MD_CTX_new();
+    if (mctx == NULL
+            || EVP_DigestInit_ex(mctx, md, NULL) <= 0
+            || EVP_DigestFinal_ex(mctx, hash, NULL) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PSK_DO_BINDER,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    /* Generate the binder key */
+    if (!tls13_hkdf_expand(s, md, early_secret, label, labelsize, hash,
+                           hashsize, binderkey, hashsize, 1)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    /* Generate the finished key */
+    if (!tls13_derive_finishedkey(s, md, binderkey, finishedkey, hashsize)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    if (EVP_DigestInit_ex(mctx, md, NULL) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PSK_DO_BINDER,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    /*
+     * Get a hash of the ClientHello up to the start of the binders. If we are
+     * following a HelloRetryRequest then this includes the hash of the first
+     * ClientHello and the HelloRetryRequest itself.
+     */
+    if (s->hello_retry_request == SSL_HRR_PENDING) {
+        size_t hdatalen;
+        long hdatalen_l;
+        void *hdata;
+
+        hdatalen = hdatalen_l =
+            BIO_get_mem_data(s->s3->handshake_buffer, &hdata);
+        if (hdatalen_l <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PSK_DO_BINDER,
+                     SSL_R_BAD_HANDSHAKE_LENGTH);
+            goto err;
+        }
+
+        /*
+         * For servers the handshake buffer data will include the second
+         * ClientHello - which we don't want - so we need to take that bit off.
+         */
+        if (s->server) {
+            PACKET hashprefix, msg;
+
+            /* Find how many bytes are left after the first two messages */
+            if (!PACKET_buf_init(&hashprefix, hdata, hdatalen)
+                    || !PACKET_forward(&hashprefix, 1)
+                    || !PACKET_get_length_prefixed_3(&hashprefix, &msg)
+                    || !PACKET_forward(&hashprefix, 1)
+                    || !PACKET_get_length_prefixed_3(&hashprefix, &msg)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PSK_DO_BINDER,
+                         ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+            hdatalen -= PACKET_remaining(&hashprefix);
+        }
+
+        if (EVP_DigestUpdate(mctx, hdata, hdatalen) <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PSK_DO_BINDER,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+    }
+
+    if (EVP_DigestUpdate(mctx, msgstart, binderoffset) <= 0
+            || EVP_DigestFinal_ex(mctx, hash, NULL) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PSK_DO_BINDER,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    mackey = EVP_PKEY_new_raw_private_key(EVP_PKEY_HMAC, NULL, finishedkey,
+                                          hashsize);
+    if (mackey == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PSK_DO_BINDER,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    if (!sign)
+        binderout = tmpbinder;
+
+    bindersize = hashsize;
+    if (EVP_DigestSignInit(mctx, NULL, md, NULL, mackey) <= 0
+            || EVP_DigestSignUpdate(mctx, hash, hashsize) <= 0
+            || EVP_DigestSignFinal(mctx, binderout, &bindersize) <= 0
+            || bindersize != hashsize) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PSK_DO_BINDER,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    if (sign) {
+        ret = 1;
+    } else {
+        /* HMAC keys can't do EVP_DigestVerify* - use CRYPTO_memcmp instead */
+        ret = (CRYPTO_memcmp(binderin, binderout, hashsize) == 0);
+        if (!ret)
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PSK_DO_BINDER,
+                     SSL_R_BINDER_DOES_NOT_VERIFY);
+    }
+
+ err:
+    OPENSSL_cleanse(binderkey, sizeof(binderkey));
+    OPENSSL_cleanse(finishedkey, sizeof(finishedkey));
+    EVP_PKEY_free(mackey);
+    EVP_MD_CTX_free(mctx);
+
+    return ret;
+}
+
+static int final_early_data(SSL *s, unsigned int context, int sent)
+{
+    if (!sent)
+        return 1;
+
+    if (!s->server) {
+        if (context == SSL_EXT_TLS1_3_ENCRYPTED_EXTENSIONS
+                && sent
+                && !s->ext.early_data_ok) {
+            /*
+             * If we get here then the server accepted our early_data but we
+             * later realised that it shouldn't have done (e.g. inconsistent
+             * ALPN)
+             */
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_FINAL_EARLY_DATA,
+                     SSL_R_BAD_EARLY_DATA);
+            return 0;
+        }
+
+        return 1;
+    }
+
+    if (s->max_early_data == 0
+            || !s->hit
+            || s->session->ext.tick_identity != 0
+            || s->early_data_state != SSL_EARLY_DATA_ACCEPTING
+            || !s->ext.early_data_ok
+            || s->hello_retry_request != SSL_HRR_NONE
+            || (s->ctx->allow_early_data_cb != NULL
+                && !s->ctx->allow_early_data_cb(s,
+                                         s->ctx->allow_early_data_cb_data))) {
+        s->ext.early_data = SSL_EARLY_DATA_REJECTED;
+    } else {
+        s->ext.early_data = SSL_EARLY_DATA_ACCEPTED;
+
+        if (!tls13_change_cipher_state(s,
+                    SSL3_CC_EARLY | SSL3_CHANGE_CIPHER_SERVER_READ)) {
+            /* SSLfatal() already called */
+            return 0;
+        }
+    }
+
+    return 1;
+}
+
+static int final_maxfragmentlen(SSL *s, unsigned int context, int sent)
+{
+    /*
+     * Session resumption on server-side with MFL extension active
+     *  BUT MFL extension packet was not resent (i.e. sent == 0)
+     */
+    if (s->server && s->hit && USE_MAX_FRAGMENT_LENGTH_EXT(s->session)
+            && !sent ) {
+        SSLfatal(s, SSL_AD_MISSING_EXTENSION, SSL_F_FINAL_MAXFRAGMENTLEN,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    /* Current SSL buffer is lower than requested MFL */
+    if (s->session && USE_MAX_FRAGMENT_LENGTH_EXT(s->session)
+            && s->max_send_fragment < GET_MAX_FRAGMENT_LENGTH(s->session))
+        /* trigger a larger buffer reallocation */
+        if (!ssl3_setup_buffers(s)) {
+            /* SSLfatal() already called */
+            return 0;
+        }
+
+    return 1;
+}
+
+static int init_post_handshake_auth(SSL *s, unsigned int context)
+{
+    s->post_handshake_auth = SSL_PHA_NONE;
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/statem/extensions_clnt.c b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/extensions_clnt.c
new file mode 100644
index 000000000..ab4dbf671
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/extensions_clnt.c
@@ -0,0 +1,1991 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/ocsp.h>
+#include "../ssl_locl.h"
+#include "internal/cryptlib.h"
+#include "statem_locl.h"
+
+EXT_RETURN tls_construct_ctos_renegotiate(SSL *s, WPACKET *pkt,
+                                          unsigned int context, X509 *x,
+                                          size_t chainidx)
+{
+    /* Add RI if renegotiating */
+    if (!s->renegotiate)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_renegotiate)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_sub_memcpy_u8(pkt, s->s3->previous_client_finished,
+                               s->s3->previous_client_finished_len)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_RENEGOTIATE,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+EXT_RETURN tls_construct_ctos_server_name(SSL *s, WPACKET *pkt,
+                                          unsigned int context, X509 *x,
+                                          size_t chainidx)
+{
+    if (s->ext.hostname == NULL)
+        return EXT_RETURN_NOT_SENT;
+
+    /* Add TLS extension servername to the Client Hello message */
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_server_name)
+               /* Sub-packet for server_name extension */
+            || !WPACKET_start_sub_packet_u16(pkt)
+               /* Sub-packet for servername list (always 1 hostname)*/
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_put_bytes_u8(pkt, TLSEXT_NAMETYPE_host_name)
+            || !WPACKET_sub_memcpy_u16(pkt, s->ext.hostname,
+                                       strlen(s->ext.hostname))
+            || !WPACKET_close(pkt)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_SERVER_NAME,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+/* Push a Max Fragment Len extension into ClientHello */
+EXT_RETURN tls_construct_ctos_maxfragmentlen(SSL *s, WPACKET *pkt,
+                                             unsigned int context, X509 *x,
+                                             size_t chainidx)
+{
+    if (s->ext.max_fragment_len_mode == TLSEXT_max_fragment_length_DISABLED)
+        return EXT_RETURN_NOT_SENT;
+
+    /* Add Max Fragment Length extension if client enabled it. */
+    /*-
+     * 4 bytes for this extension type and extension length
+     * 1 byte for the Max Fragment Length code value.
+     */
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_max_fragment_length)
+            /* Sub-packet for Max Fragment Length extension (1 byte) */
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_put_bytes_u8(pkt, s->ext.max_fragment_len_mode)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CTOS_MAXFRAGMENTLEN, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+#ifndef OPENSSL_NO_SRP
+EXT_RETURN tls_construct_ctos_srp(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx)
+{
+    /* Add SRP username if there is one */
+    if (s->srp_ctx.login == NULL)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_srp)
+               /* Sub-packet for SRP extension */
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_start_sub_packet_u8(pkt)
+               /* login must not be zero...internal error if so */
+            || !WPACKET_set_flags(pkt, WPACKET_FLAGS_NON_ZERO_LENGTH)
+            || !WPACKET_memcpy(pkt, s->srp_ctx.login,
+                               strlen(s->srp_ctx.login))
+            || !WPACKET_close(pkt)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_SRP,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+#endif
+
+#ifndef OPENSSL_NO_EC
+static int use_ecc(SSL *s)
+{
+    int i, end, ret = 0;
+    unsigned long alg_k, alg_a;
+    STACK_OF(SSL_CIPHER) *cipher_stack = NULL;
+
+    /* See if we support any ECC ciphersuites */
+    if (s->version == SSL3_VERSION)
+        return 0;
+
+    cipher_stack = SSL_get1_supported_ciphers(s);
+    end = sk_SSL_CIPHER_num(cipher_stack);
+    for (i = 0; i < end; i++) {
+        const SSL_CIPHER *c = sk_SSL_CIPHER_value(cipher_stack, i);
+
+        alg_k = c->algorithm_mkey;
+        alg_a = c->algorithm_auth;
+        if ((alg_k & (SSL_kECDHE | SSL_kECDHEPSK))
+                || (alg_a & SSL_aECDSA)
+                || c->min_tls >= TLS1_3_VERSION) {
+            ret = 1;
+            break;
+        }
+    }
+
+    sk_SSL_CIPHER_free(cipher_stack);
+    return ret;
+}
+
+EXT_RETURN tls_construct_ctos_ec_pt_formats(SSL *s, WPACKET *pkt,
+                                            unsigned int context, X509 *x,
+                                            size_t chainidx)
+{
+    const unsigned char *pformats;
+    size_t num_formats;
+
+    if (!use_ecc(s))
+        return EXT_RETURN_NOT_SENT;
+
+    /* Add TLS extension ECPointFormats to the ClientHello message */
+    tls1_get_formatlist(s, &pformats, &num_formats);
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_ec_point_formats)
+               /* Sub-packet for formats extension */
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_sub_memcpy_u8(pkt, pformats, num_formats)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CTOS_EC_PT_FORMATS, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+EXT_RETURN tls_construct_ctos_supported_groups(SSL *s, WPACKET *pkt,
+                                               unsigned int context, X509 *x,
+                                               size_t chainidx)
+{
+    const uint16_t *pgroups = NULL;
+    size_t num_groups = 0, i;
+
+    if (!use_ecc(s))
+        return EXT_RETURN_NOT_SENT;
+
+    /*
+     * Add TLS extension supported_groups to the ClientHello message
+     */
+    /* TODO(TLS1.3): Add support for DHE groups */
+    tls1_get_supported_groups(s, &pgroups, &num_groups);
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_supported_groups)
+               /* Sub-packet for supported_groups extension */
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_start_sub_packet_u16(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CTOS_SUPPORTED_GROUPS,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+    /* Copy curve ID if supported */
+    for (i = 0; i < num_groups; i++) {
+        uint16_t ctmp = pgroups[i];
+
+        if (tls_curve_allowed(s, ctmp, SSL_SECOP_CURVE_SUPPORTED)) {
+            if (!WPACKET_put_bytes_u16(pkt, ctmp)) {
+                    SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                             SSL_F_TLS_CONSTRUCT_CTOS_SUPPORTED_GROUPS,
+                             ERR_R_INTERNAL_ERROR);
+                    return EXT_RETURN_FAIL;
+                }
+        }
+    }
+    if (!WPACKET_close(pkt) || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CTOS_SUPPORTED_GROUPS,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+#endif
+
+EXT_RETURN tls_construct_ctos_session_ticket(SSL *s, WPACKET *pkt,
+                                             unsigned int context, X509 *x,
+                                             size_t chainidx)
+{
+    size_t ticklen;
+
+    if (!tls_use_ticket(s))
+        return EXT_RETURN_NOT_SENT;
+
+    if (!s->new_session && s->session != NULL
+            && s->session->ext.tick != NULL
+            && s->session->ssl_version != TLS1_3_VERSION) {
+        ticklen = s->session->ext.ticklen;
+    } else if (s->session && s->ext.session_ticket != NULL
+               && s->ext.session_ticket->data != NULL) {
+        ticklen = s->ext.session_ticket->length;
+        s->session->ext.tick = OPENSSL_malloc(ticklen);
+        if (s->session->ext.tick == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_CTOS_SESSION_TICKET,
+                     ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+        }
+        memcpy(s->session->ext.tick,
+               s->ext.session_ticket->data, ticklen);
+        s->session->ext.ticklen = ticklen;
+    } else {
+        ticklen = 0;
+    }
+
+    if (ticklen == 0 && s->ext.session_ticket != NULL &&
+            s->ext.session_ticket->data == NULL)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_session_ticket)
+            || !WPACKET_sub_memcpy_u16(pkt, s->session->ext.tick, ticklen)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CTOS_SESSION_TICKET, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+EXT_RETURN tls_construct_ctos_sig_algs(SSL *s, WPACKET *pkt,
+                                       unsigned int context, X509 *x,
+                                       size_t chainidx)
+{
+    size_t salglen;
+    const uint16_t *salg;
+
+    if (!SSL_CLIENT_USE_SIGALGS(s))
+        return EXT_RETURN_NOT_SENT;
+
+    salglen = tls12_get_psigalgs(s, 1, &salg);
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_signature_algorithms)
+               /* Sub-packet for sig-algs extension */
+            || !WPACKET_start_sub_packet_u16(pkt)
+               /* Sub-packet for the actual list */
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !tls12_copy_sigalgs(s, pkt, salg, salglen)
+            || !WPACKET_close(pkt)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_SIG_ALGS,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+#ifndef OPENSSL_NO_OCSP
+EXT_RETURN tls_construct_ctos_status_request(SSL *s, WPACKET *pkt,
+                                             unsigned int context, X509 *x,
+                                             size_t chainidx)
+{
+    int i;
+
+    /* This extension isn't defined for client Certificates */
+    if (x != NULL)
+        return EXT_RETURN_NOT_SENT;
+
+    if (s->ext.status_type != TLSEXT_STATUSTYPE_ocsp)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_status_request)
+               /* Sub-packet for status request extension */
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_put_bytes_u8(pkt, TLSEXT_STATUSTYPE_ocsp)
+               /* Sub-packet for the ids */
+            || !WPACKET_start_sub_packet_u16(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CTOS_STATUS_REQUEST, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+    for (i = 0; i < sk_OCSP_RESPID_num(s->ext.ocsp.ids); i++) {
+        unsigned char *idbytes;
+        OCSP_RESPID *id = sk_OCSP_RESPID_value(s->ext.ocsp.ids, i);
+        int idlen = i2d_OCSP_RESPID(id, NULL);
+
+        if (idlen <= 0
+                   /* Sub-packet for an individual id */
+                || !WPACKET_sub_allocate_bytes_u16(pkt, idlen, &idbytes)
+                || i2d_OCSP_RESPID(id, &idbytes) != idlen) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_CTOS_STATUS_REQUEST,
+                     ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+        }
+    }
+    if (!WPACKET_close(pkt)
+            || !WPACKET_start_sub_packet_u16(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CTOS_STATUS_REQUEST, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+    if (s->ext.ocsp.exts) {
+        unsigned char *extbytes;
+        int extlen = i2d_X509_EXTENSIONS(s->ext.ocsp.exts, NULL);
+
+        if (extlen < 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_CTOS_STATUS_REQUEST,
+                     ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+        }
+        if (!WPACKET_allocate_bytes(pkt, extlen, &extbytes)
+                || i2d_X509_EXTENSIONS(s->ext.ocsp.exts, &extbytes)
+                   != extlen) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_CTOS_STATUS_REQUEST,
+                     ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+       }
+    }
+    if (!WPACKET_close(pkt) || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CTOS_STATUS_REQUEST, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+#endif
+
+#ifndef OPENSSL_NO_NEXTPROTONEG
+EXT_RETURN tls_construct_ctos_npn(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx)
+{
+    if (s->ctx->ext.npn_select_cb == NULL || !SSL_IS_FIRST_HANDSHAKE(s))
+        return EXT_RETURN_NOT_SENT;
+
+    /*
+     * The client advertises an empty extension to indicate its support
+     * for Next Protocol Negotiation
+     */
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_next_proto_neg)
+            || !WPACKET_put_bytes_u16(pkt, 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_NPN,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+#endif
+
+EXT_RETURN tls_construct_ctos_alpn(SSL *s, WPACKET *pkt, unsigned int context,
+                                   X509 *x, size_t chainidx)
+{
+    s->s3->alpn_sent = 0;
+
+    if (s->ext.alpn == NULL || !SSL_IS_FIRST_HANDSHAKE(s))
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt,
+                TLSEXT_TYPE_application_layer_protocol_negotiation)
+               /* Sub-packet ALPN extension */
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_sub_memcpy_u16(pkt, s->ext.alpn, s->ext.alpn_len)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_ALPN,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+    s->s3->alpn_sent = 1;
+
+    return EXT_RETURN_SENT;
+}
+
+
+#ifndef OPENSSL_NO_SRTP
+EXT_RETURN tls_construct_ctos_use_srtp(SSL *s, WPACKET *pkt,
+                                       unsigned int context, X509 *x,
+                                       size_t chainidx)
+{
+    STACK_OF(SRTP_PROTECTION_PROFILE) *clnt = SSL_get_srtp_profiles(s);
+    int i, end;
+
+    if (clnt == NULL)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_use_srtp)
+               /* Sub-packet for SRTP extension */
+            || !WPACKET_start_sub_packet_u16(pkt)
+               /* Sub-packet for the protection profile list */
+            || !WPACKET_start_sub_packet_u16(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_USE_SRTP,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    end = sk_SRTP_PROTECTION_PROFILE_num(clnt);
+    for (i = 0; i < end; i++) {
+        const SRTP_PROTECTION_PROFILE *prof =
+            sk_SRTP_PROTECTION_PROFILE_value(clnt, i);
+
+        if (prof == NULL || !WPACKET_put_bytes_u16(pkt, prof->id)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_CTOS_USE_SRTP, ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+        }
+    }
+    if (!WPACKET_close(pkt)
+               /* Add an empty use_mki value */
+            || !WPACKET_put_bytes_u8(pkt, 0)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_USE_SRTP,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+#endif
+
+EXT_RETURN tls_construct_ctos_etm(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx)
+{
+    if (s->options & SSL_OP_NO_ENCRYPT_THEN_MAC)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_encrypt_then_mac)
+            || !WPACKET_put_bytes_u16(pkt, 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_ETM,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+#ifndef OPENSSL_NO_CT
+EXT_RETURN tls_construct_ctos_sct(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx)
+{
+    if (s->ct_validation_callback == NULL)
+        return EXT_RETURN_NOT_SENT;
+
+    /* Not defined for client Certificates */
+    if (x != NULL)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_signed_certificate_timestamp)
+            || !WPACKET_put_bytes_u16(pkt, 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_SCT,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+#endif
+
+EXT_RETURN tls_construct_ctos_ems(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx)
+{
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_extended_master_secret)
+            || !WPACKET_put_bytes_u16(pkt, 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_EMS,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+EXT_RETURN tls_construct_ctos_supported_versions(SSL *s, WPACKET *pkt,
+                                                 unsigned int context, X509 *x,
+                                                 size_t chainidx)
+{
+    int currv, min_version, max_version, reason;
+
+    reason = ssl_get_min_max_version(s, &min_version, &max_version, NULL);
+    if (reason != 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CTOS_SUPPORTED_VERSIONS, reason);
+        return EXT_RETURN_FAIL;
+    }
+
+    /*
+     * Don't include this if we can't negotiate TLSv1.3. We can do a straight
+     * comparison here because we will never be called in DTLS.
+     */
+    if (max_version < TLS1_3_VERSION)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_supported_versions)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_start_sub_packet_u8(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CTOS_SUPPORTED_VERSIONS,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    for (currv = max_version; currv >= min_version; currv--) {
+        if (!WPACKET_put_bytes_u16(pkt, currv)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_CTOS_SUPPORTED_VERSIONS,
+                     ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+        }
+    }
+    if (!WPACKET_close(pkt) || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CTOS_SUPPORTED_VERSIONS,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+/*
+ * Construct a psk_kex_modes extension.
+ */
+EXT_RETURN tls_construct_ctos_psk_kex_modes(SSL *s, WPACKET *pkt,
+                                            unsigned int context, X509 *x,
+                                            size_t chainidx)
+{
+#ifndef OPENSSL_NO_TLS1_3
+    int nodhe = s->options & SSL_OP_ALLOW_NO_DHE_KEX;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_psk_kex_modes)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_start_sub_packet_u8(pkt)
+            || !WPACKET_put_bytes_u8(pkt, TLSEXT_KEX_MODE_KE_DHE)
+            || (nodhe && !WPACKET_put_bytes_u8(pkt, TLSEXT_KEX_MODE_KE))
+            || !WPACKET_close(pkt)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CTOS_PSK_KEX_MODES, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    s->ext.psk_kex_mode = TLSEXT_KEX_MODE_FLAG_KE_DHE;
+    if (nodhe)
+        s->ext.psk_kex_mode |= TLSEXT_KEX_MODE_FLAG_KE;
+#endif
+
+    return EXT_RETURN_SENT;
+}
+
+#ifndef OPENSSL_NO_TLS1_3
+static int add_key_share(SSL *s, WPACKET *pkt, unsigned int curve_id)
+{
+    unsigned char *encoded_point = NULL;
+    EVP_PKEY *key_share_key = NULL;
+    size_t encodedlen;
+
+    if (s->s3->tmp.pkey != NULL) {
+        if (!ossl_assert(s->hello_retry_request == SSL_HRR_PENDING)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_ADD_KEY_SHARE,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+        /*
+         * Could happen if we got an HRR that wasn't requesting a new key_share
+         */
+        key_share_key = s->s3->tmp.pkey;
+    } else {
+        key_share_key = ssl_generate_pkey_group(s, curve_id);
+        if (key_share_key == NULL) {
+            /* SSLfatal() already called */
+            return 0;
+        }
+    }
+
+    /* Encode the public key. */
+    encodedlen = EVP_PKEY_get1_tls_encodedpoint(key_share_key,
+                                                &encoded_point);
+    if (encodedlen == 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_ADD_KEY_SHARE, ERR_R_EC_LIB);
+        goto err;
+    }
+
+    /* Create KeyShareEntry */
+    if (!WPACKET_put_bytes_u16(pkt, curve_id)
+            || !WPACKET_sub_memcpy_u16(pkt, encoded_point, encodedlen)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_ADD_KEY_SHARE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    /*
+     * TODO(TLS1.3): When changing to send more than one key_share we're
+     * going to need to be able to save more than one EVP_PKEY. For now
+     * we reuse the existing tmp.pkey
+     */
+    s->s3->tmp.pkey = key_share_key;
+    s->s3->group_id = curve_id;
+    OPENSSL_free(encoded_point);
+
+    return 1;
+ err:
+    if (s->s3->tmp.pkey == NULL)
+        EVP_PKEY_free(key_share_key);
+    OPENSSL_free(encoded_point);
+    return 0;
+}
+#endif
+
+EXT_RETURN tls_construct_ctos_key_share(SSL *s, WPACKET *pkt,
+                                        unsigned int context, X509 *x,
+                                        size_t chainidx)
+{
+#ifndef OPENSSL_NO_TLS1_3
+    size_t i, num_groups = 0;
+    const uint16_t *pgroups = NULL;
+    uint16_t curve_id = 0;
+
+    /* key_share extension */
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_key_share)
+               /* Extension data sub-packet */
+            || !WPACKET_start_sub_packet_u16(pkt)
+               /* KeyShare list sub-packet */
+            || !WPACKET_start_sub_packet_u16(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_KEY_SHARE,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    tls1_get_supported_groups(s, &pgroups, &num_groups);
+
+    /*
+     * TODO(TLS1.3): Make the number of key_shares sent configurable. For
+     * now, just send one
+     */
+    if (s->s3->group_id != 0) {
+        curve_id = s->s3->group_id;
+    } else {
+        for (i = 0; i < num_groups; i++) {
+
+            if (!tls_curve_allowed(s, pgroups[i], SSL_SECOP_CURVE_SUPPORTED))
+                continue;
+
+            curve_id = pgroups[i];
+            break;
+        }
+    }
+
+    if (curve_id == 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_KEY_SHARE,
+                 SSL_R_NO_SUITABLE_KEY_SHARE);
+        return EXT_RETURN_FAIL;
+    }
+
+    if (!add_key_share(s, pkt, curve_id)) {
+        /* SSLfatal() already called */
+        return EXT_RETURN_FAIL;
+    }
+
+    if (!WPACKET_close(pkt) || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_KEY_SHARE,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+    return EXT_RETURN_SENT;
+#else
+    return EXT_RETURN_NOT_SENT;
+#endif
+}
+
+EXT_RETURN tls_construct_ctos_cookie(SSL *s, WPACKET *pkt, unsigned int context,
+                                     X509 *x, size_t chainidx)
+{
+    EXT_RETURN ret = EXT_RETURN_FAIL;
+
+    /* Should only be set if we've had an HRR */
+    if (s->ext.tls13_cookie_len == 0)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_cookie)
+               /* Extension data sub-packet */
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_sub_memcpy_u16(pkt, s->ext.tls13_cookie,
+                                       s->ext.tls13_cookie_len)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_COOKIE,
+                 ERR_R_INTERNAL_ERROR);
+        goto end;
+    }
+
+    ret = EXT_RETURN_SENT;
+ end:
+    OPENSSL_free(s->ext.tls13_cookie);
+    s->ext.tls13_cookie = NULL;
+    s->ext.tls13_cookie_len = 0;
+
+    return ret;
+}
+
+EXT_RETURN tls_construct_ctos_early_data(SSL *s, WPACKET *pkt,
+                                         unsigned int context, X509 *x,
+                                         size_t chainidx)
+{
+#ifndef OPENSSL_NO_PSK
+    char identity[PSK_MAX_IDENTITY_LEN + 1];
+#endif  /* OPENSSL_NO_PSK */
+    const unsigned char *id = NULL;
+    size_t idlen = 0;
+    SSL_SESSION *psksess = NULL;
+    SSL_SESSION *edsess = NULL;
+    const EVP_MD *handmd = NULL;
+
+    if (s->hello_retry_request == SSL_HRR_PENDING)
+        handmd = ssl_handshake_md(s);
+
+    if (s->psk_use_session_cb != NULL
+            && (!s->psk_use_session_cb(s, handmd, &id, &idlen, &psksess)
+                || (psksess != NULL
+                    && psksess->ssl_version != TLS1_3_VERSION))) {
+        SSL_SESSION_free(psksess);
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_EARLY_DATA,
+                 SSL_R_BAD_PSK);
+        return EXT_RETURN_FAIL;
+    }
+
+#ifndef OPENSSL_NO_PSK
+    if (psksess == NULL && s->psk_client_callback != NULL) {
+        unsigned char psk[PSK_MAX_PSK_LEN];
+        size_t psklen = 0;
+
+        memset(identity, 0, sizeof(identity));
+        psklen = s->psk_client_callback(s, NULL, identity, sizeof(identity) - 1,
+                                        psk, sizeof(psk));
+
+        if (psklen > PSK_MAX_PSK_LEN) {
+            SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                     SSL_F_TLS_CONSTRUCT_CTOS_EARLY_DATA, ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+        } else if (psklen > 0) {
+            const unsigned char tls13_aes128gcmsha256_id[] = { 0x13, 0x01 };
+            const SSL_CIPHER *cipher;
+
+            idlen = strlen(identity);
+            if (idlen > PSK_MAX_IDENTITY_LEN) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_CONSTRUCT_CTOS_EARLY_DATA,
+                         ERR_R_INTERNAL_ERROR);
+                return EXT_RETURN_FAIL;
+            }
+            id = (unsigned char *)identity;
+
+            /*
+             * We found a PSK using an old style callback. We don't know
+             * the digest so we default to SHA256 as per the TLSv1.3 spec
+             */
+            cipher = SSL_CIPHER_find(s, tls13_aes128gcmsha256_id);
+            if (cipher == NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_CONSTRUCT_CTOS_EARLY_DATA,
+                         ERR_R_INTERNAL_ERROR);
+                return EXT_RETURN_FAIL;
+            }
+
+            psksess = SSL_SESSION_new();
+            if (psksess == NULL
+                    || !SSL_SESSION_set1_master_key(psksess, psk, psklen)
+                    || !SSL_SESSION_set_cipher(psksess, cipher)
+                    || !SSL_SESSION_set_protocol_version(psksess, TLS1_3_VERSION)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_CONSTRUCT_CTOS_EARLY_DATA,
+                         ERR_R_INTERNAL_ERROR);
+                OPENSSL_cleanse(psk, psklen);
+                return EXT_RETURN_FAIL;
+            }
+            OPENSSL_cleanse(psk, psklen);
+        }
+    }
+#endif  /* OPENSSL_NO_PSK */
+
+    SSL_SESSION_free(s->psksession);
+    s->psksession = psksess;
+    if (psksess != NULL) {
+        OPENSSL_free(s->psksession_id);
+        s->psksession_id = OPENSSL_memdup(id, idlen);
+        if (s->psksession_id == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_CTOS_EARLY_DATA, ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+        }
+        s->psksession_id_len = idlen;
+    }
+
+    if (s->early_data_state != SSL_EARLY_DATA_CONNECTING
+            || (s->session->ext.max_early_data == 0
+                && (psksess == NULL || psksess->ext.max_early_data == 0))) {
+        s->max_early_data = 0;
+        return EXT_RETURN_NOT_SENT;
+    }
+    edsess = s->session->ext.max_early_data != 0 ? s->session : psksess;
+    s->max_early_data = edsess->ext.max_early_data;
+
+    if (edsess->ext.hostname != NULL) {
+        if (s->ext.hostname == NULL
+                || (s->ext.hostname != NULL
+                    && strcmp(s->ext.hostname, edsess->ext.hostname) != 0)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_CTOS_EARLY_DATA,
+                     SSL_R_INCONSISTENT_EARLY_DATA_SNI);
+            return EXT_RETURN_FAIL;
+        }
+    }
+
+    if ((s->ext.alpn == NULL && edsess->ext.alpn_selected != NULL)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_EARLY_DATA,
+                 SSL_R_INCONSISTENT_EARLY_DATA_ALPN);
+        return EXT_RETURN_FAIL;
+    }
+
+    /*
+     * Verify that we are offering an ALPN protocol consistent with the early
+     * data.
+     */
+    if (edsess->ext.alpn_selected != NULL) {
+        PACKET prots, alpnpkt;
+        int found = 0;
+
+        if (!PACKET_buf_init(&prots, s->ext.alpn, s->ext.alpn_len)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_CTOS_EARLY_DATA, ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+        }
+        while (PACKET_get_length_prefixed_1(&prots, &alpnpkt)) {
+            if (PACKET_equal(&alpnpkt, edsess->ext.alpn_selected,
+                             edsess->ext.alpn_selected_len)) {
+                found = 1;
+                break;
+            }
+        }
+        if (!found) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_CTOS_EARLY_DATA,
+                     SSL_R_INCONSISTENT_EARLY_DATA_ALPN);
+            return EXT_RETURN_FAIL;
+        }
+    }
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_early_data)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_EARLY_DATA,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    /*
+     * We set this to rejected here. Later, if the server acknowledges the
+     * extension, we set it to accepted.
+     */
+    s->ext.early_data = SSL_EARLY_DATA_REJECTED;
+    s->ext.early_data_ok = 1;
+
+    return EXT_RETURN_SENT;
+}
+
+#define F5_WORKAROUND_MIN_MSG_LEN   0xff
+#define F5_WORKAROUND_MAX_MSG_LEN   0x200
+
+/*
+ * PSK pre binder overhead =
+ *  2 bytes for TLSEXT_TYPE_psk
+ *  2 bytes for extension length
+ *  2 bytes for identities list length
+ *  2 bytes for identity length
+ *  4 bytes for obfuscated_ticket_age
+ *  2 bytes for binder list length
+ *  1 byte for binder length
+ * The above excludes the number of bytes for the identity itself and the
+ * subsequent binder bytes
+ */
+#define PSK_PRE_BINDER_OVERHEAD (2 + 2 + 2 + 2 + 4 + 2 + 1)
+
+EXT_RETURN tls_construct_ctos_padding(SSL *s, WPACKET *pkt,
+                                      unsigned int context, X509 *x,
+                                      size_t chainidx)
+{
+    unsigned char *padbytes;
+    size_t hlen;
+
+    if ((s->options & SSL_OP_TLSEXT_PADDING) == 0)
+        return EXT_RETURN_NOT_SENT;
+
+    /*
+     * Add padding to workaround bugs in F5 terminators. See RFC7685.
+     * This code calculates the length of all extensions added so far but
+     * excludes the PSK extension (because that MUST be written last). Therefore
+     * this extension MUST always appear second to last.
+     */
+    if (!WPACKET_get_total_written(pkt, &hlen)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_PADDING,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    /*
+     * If we're going to send a PSK then that will be written out after this
+     * extension, so we need to calculate how long it is going to be.
+     */
+    if (s->session->ssl_version == TLS1_3_VERSION
+            && s->session->ext.ticklen != 0
+            && s->session->cipher != NULL) {
+        const EVP_MD *md = ssl_md(s->session->cipher->algorithm2);
+
+        if (md != NULL) {
+            /*
+             * Add the fixed PSK overhead, the identity length and the binder
+             * length.
+             */
+            hlen +=  PSK_PRE_BINDER_OVERHEAD + s->session->ext.ticklen
+                     + EVP_MD_size(md);
+        }
+    }
+
+    if (hlen > F5_WORKAROUND_MIN_MSG_LEN && hlen < F5_WORKAROUND_MAX_MSG_LEN) {
+        /* Calculate the amount of padding we need to add */
+        hlen = F5_WORKAROUND_MAX_MSG_LEN - hlen;
+
+        /*
+         * Take off the size of extension header itself (2 bytes for type and
+         * 2 bytes for length bytes), but ensure that the extension is at least
+         * 1 byte long so as not to have an empty extension last (WebSphere 7.x,
+         * 8.x are intolerant of that condition)
+         */
+        if (hlen > 4)
+            hlen -= 4;
+        else
+            hlen = 1;
+
+        if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_padding)
+                || !WPACKET_sub_allocate_bytes_u16(pkt, hlen, &padbytes)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_PADDING,
+                     ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+        }
+        memset(padbytes, 0, hlen);
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+/*
+ * Construct the pre_shared_key extension
+ */
+EXT_RETURN tls_construct_ctos_psk(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx)
+{
+#ifndef OPENSSL_NO_TLS1_3
+    uint32_t now, agesec, agems = 0;
+    size_t reshashsize = 0, pskhashsize = 0, binderoffset, msglen;
+    unsigned char *resbinder = NULL, *pskbinder = NULL, *msgstart = NULL;
+    const EVP_MD *handmd = NULL, *mdres = NULL, *mdpsk = NULL;
+    int dores = 0;
+
+    s->session->ext.tick_identity = TLSEXT_PSK_BAD_IDENTITY;
+
+    /*
+     * Note: At this stage of the code we only support adding a single
+     * resumption PSK. If we add support for multiple PSKs then the length
+     * calculations in the padding extension will need to be adjusted.
+     */
+
+    /*
+     * If this is an incompatible or new session then we have nothing to resume
+     * so don't add this extension.
+     */
+    if (s->session->ssl_version != TLS1_3_VERSION
+            || (s->session->ext.ticklen == 0 && s->psksession == NULL))
+        return EXT_RETURN_NOT_SENT;
+
+    if (s->hello_retry_request == SSL_HRR_PENDING)
+        handmd = ssl_handshake_md(s);
+
+    if (s->session->ext.ticklen != 0) {
+        /* Get the digest associated with the ciphersuite in the session */
+        if (s->session->cipher == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_PSK,
+                     ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+        }
+        mdres = ssl_md(s->session->cipher->algorithm2);
+        if (mdres == NULL) {
+            /*
+             * Don't recognize this cipher so we can't use the session.
+             * Ignore it
+             */
+            goto dopsksess;
+        }
+
+        if (s->hello_retry_request == SSL_HRR_PENDING && mdres != handmd) {
+            /*
+             * Selected ciphersuite hash does not match the hash for the session
+             * so we can't use it.
+             */
+            goto dopsksess;
+        }
+
+        /*
+         * Technically the C standard just says time() returns a time_t and says
+         * nothing about the encoding of that type. In practice most
+         * implementations follow POSIX which holds it as an integral type in
+         * seconds since epoch. We've already made the assumption that we can do
+         * this in multiple places in the code, so portability shouldn't be an
+         * issue.
+         */
+        now = (uint32_t)time(NULL);
+        agesec = now - (uint32_t)s->session->time;
+        /*
+         * We calculate the age in seconds but the server may work in ms. Due to
+         * rounding errors we could overestimate the age by up to 1s. It is
+         * better to underestimate it. Otherwise, if the RTT is very short, when
+         * the server calculates the age reported by the client it could be
+         * bigger than the age calculated on the server - which should never
+         * happen.
+         */
+        if (agesec > 0)
+            agesec--;
+
+        if (s->session->ext.tick_lifetime_hint < agesec) {
+            /* Ticket is too old. Ignore it. */
+            goto dopsksess;
+        }
+
+        /*
+         * Calculate age in ms. We're just doing it to nearest second. Should be
+         * good enough.
+         */
+        agems = agesec * (uint32_t)1000;
+
+        if (agesec != 0 && agems / (uint32_t)1000 != agesec) {
+            /*
+             * Overflow. Shouldn't happen unless this is a *really* old session.
+             * If so we just ignore it.
+             */
+            goto dopsksess;
+        }
+
+        /*
+         * Obfuscate the age. Overflow here is fine, this addition is supposed
+         * to be mod 2^32.
+         */
+        agems += s->session->ext.tick_age_add;
+
+        reshashsize = EVP_MD_size(mdres);
+        dores = 1;
+    }
+
+ dopsksess:
+    if (!dores && s->psksession == NULL)
+        return EXT_RETURN_NOT_SENT;
+
+    if (s->psksession != NULL) {
+        mdpsk = ssl_md(s->psksession->cipher->algorithm2);
+        if (mdpsk == NULL) {
+            /*
+             * Don't recognize this cipher so we can't use the session.
+             * If this happens it's an application bug.
+             */
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_PSK,
+                     SSL_R_BAD_PSK);
+            return EXT_RETURN_FAIL;
+        }
+
+        if (s->hello_retry_request == SSL_HRR_PENDING && mdpsk != handmd) {
+            /*
+             * Selected ciphersuite hash does not match the hash for the PSK
+             * session. This is an application bug.
+             */
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_PSK,
+                     SSL_R_BAD_PSK);
+            return EXT_RETURN_FAIL;
+        }
+
+        pskhashsize = EVP_MD_size(mdpsk);
+    }
+
+    /* Create the extension, but skip over the binder for now */
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_psk)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_start_sub_packet_u16(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_PSK,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    if (dores) {
+        if (!WPACKET_sub_memcpy_u16(pkt, s->session->ext.tick,
+                                           s->session->ext.ticklen)
+                || !WPACKET_put_bytes_u32(pkt, agems)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_PSK,
+                     ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+        }
+    }
+
+    if (s->psksession != NULL) {
+        if (!WPACKET_sub_memcpy_u16(pkt, s->psksession_id,
+                                    s->psksession_id_len)
+                || !WPACKET_put_bytes_u32(pkt, 0)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_PSK,
+                     ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+        }
+    }
+
+    if (!WPACKET_close(pkt)
+            || !WPACKET_get_total_written(pkt, &binderoffset)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || (dores
+                && !WPACKET_sub_allocate_bytes_u8(pkt, reshashsize, &resbinder))
+            || (s->psksession != NULL
+                && !WPACKET_sub_allocate_bytes_u8(pkt, pskhashsize, &pskbinder))
+            || !WPACKET_close(pkt)
+            || !WPACKET_close(pkt)
+            || !WPACKET_get_total_written(pkt, &msglen)
+               /*
+                * We need to fill in all the sub-packet lengths now so we can
+                * calculate the HMAC of the message up to the binders
+                */
+            || !WPACKET_fill_lengths(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CTOS_PSK,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    msgstart = WPACKET_get_curr(pkt) - msglen;
+
+    if (dores
+            && tls_psk_do_binder(s, mdres, msgstart, binderoffset, NULL,
+                                 resbinder, s->session, 1, 0) != 1) {
+        /* SSLfatal() already called */
+        return EXT_RETURN_FAIL;
+    }
+
+    if (s->psksession != NULL
+            && tls_psk_do_binder(s, mdpsk, msgstart, binderoffset, NULL,
+                                 pskbinder, s->psksession, 1, 1) != 1) {
+        /* SSLfatal() already called */
+        return EXT_RETURN_FAIL;
+    }
+
+    if (dores)
+        s->session->ext.tick_identity = 0;
+    if (s->psksession != NULL)
+        s->psksession->ext.tick_identity = (dores ? 1 : 0);
+
+    return EXT_RETURN_SENT;
+#else
+    return EXT_RETURN_NOT_SENT;
+#endif
+}
+
+EXT_RETURN tls_construct_ctos_post_handshake_auth(SSL *s, WPACKET *pkt,
+                                                  unsigned int context,
+                                                  X509 *x, size_t chainidx)
+{
+#ifndef OPENSSL_NO_TLS1_3
+    if (!s->pha_enabled)
+        return EXT_RETURN_NOT_SENT;
+
+    /* construct extension - 0 length, no contents */
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_post_handshake_auth)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CTOS_POST_HANDSHAKE_AUTH,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    s->post_handshake_auth = SSL_PHA_EXT_SENT;
+
+    return EXT_RETURN_SENT;
+#else
+    return EXT_RETURN_NOT_SENT;
+#endif
+}
+
+
+/*
+ * Parse the server's renegotiation binding and abort if it's not right
+ */
+int tls_parse_stoc_renegotiate(SSL *s, PACKET *pkt, unsigned int context,
+                               X509 *x, size_t chainidx)
+{
+    size_t expected_len = s->s3->previous_client_finished_len
+        + s->s3->previous_server_finished_len;
+    size_t ilen;
+    const unsigned char *data;
+
+    /* Check for logic errors */
+    if (!ossl_assert(expected_len == 0
+                     || s->s3->previous_client_finished_len != 0)
+        || !ossl_assert(expected_len == 0
+                        || s->s3->previous_server_finished_len != 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_STOC_RENEGOTIATE,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    /* Parse the length byte */
+    if (!PACKET_get_1_len(pkt, &ilen)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_RENEGOTIATE,
+                 SSL_R_RENEGOTIATION_ENCODING_ERR);
+        return 0;
+    }
+
+    /* Consistency check */
+    if (PACKET_remaining(pkt) != ilen) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_RENEGOTIATE,
+                 SSL_R_RENEGOTIATION_ENCODING_ERR);
+        return 0;
+    }
+
+    /* Check that the extension matches */
+    if (ilen != expected_len) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PARSE_STOC_RENEGOTIATE,
+                 SSL_R_RENEGOTIATION_MISMATCH);
+        return 0;
+    }
+
+    if (!PACKET_get_bytes(pkt, &data, s->s3->previous_client_finished_len)
+        || memcmp(data, s->s3->previous_client_finished,
+                  s->s3->previous_client_finished_len) != 0) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PARSE_STOC_RENEGOTIATE,
+                 SSL_R_RENEGOTIATION_MISMATCH);
+        return 0;
+    }
+
+    if (!PACKET_get_bytes(pkt, &data, s->s3->previous_server_finished_len)
+        || memcmp(data, s->s3->previous_server_finished,
+                  s->s3->previous_server_finished_len) != 0) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PARSE_STOC_RENEGOTIATE,
+                 SSL_R_RENEGOTIATION_MISMATCH);
+        return 0;
+    }
+    s->s3->send_connection_binding = 1;
+
+    return 1;
+}
+
+/* Parse the server's max fragment len extension packet */
+int tls_parse_stoc_maxfragmentlen(SSL *s, PACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx)
+{
+    unsigned int value;
+
+    if (PACKET_remaining(pkt) != 1 || !PACKET_get_1(pkt, &value)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_MAXFRAGMENTLEN,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    /* |value| should contains a valid max-fragment-length code. */
+    if (!IS_MAX_FRAGMENT_LENGTH_EXT_VALID(value)) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                 SSL_F_TLS_PARSE_STOC_MAXFRAGMENTLEN,
+                 SSL_R_SSL3_EXT_INVALID_MAX_FRAGMENT_LENGTH);
+        return 0;
+    }
+
+    /* Must be the same value as client-configured one who was sent to server */
+    /*-
+     * RFC 6066: if a client receives a maximum fragment length negotiation
+     * response that differs from the length it requested, ...
+     * It must abort with SSL_AD_ILLEGAL_PARAMETER alert
+     */
+    if (value != s->ext.max_fragment_len_mode) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                 SSL_F_TLS_PARSE_STOC_MAXFRAGMENTLEN,
+                 SSL_R_SSL3_EXT_INVALID_MAX_FRAGMENT_LENGTH);
+        return 0;
+    }
+
+    /*
+     * Maximum Fragment Length Negotiation succeeded.
+     * The negotiated Maximum Fragment Length is binding now.
+     */
+    s->session->ext.max_fragment_len_mode = value;
+
+    return 1;
+}
+
+int tls_parse_stoc_server_name(SSL *s, PACKET *pkt, unsigned int context,
+                               X509 *x, size_t chainidx)
+{
+    if (s->ext.hostname == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_STOC_SERVER_NAME,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (PACKET_remaining(pkt) > 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_SERVER_NAME,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    if (!s->hit) {
+        if (s->session->ext.hostname != NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_STOC_SERVER_NAME,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+        s->session->ext.hostname = OPENSSL_strdup(s->ext.hostname);
+        if (s->session->ext.hostname == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_STOC_SERVER_NAME,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+    }
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_EC
+int tls_parse_stoc_ec_pt_formats(SSL *s, PACKET *pkt, unsigned int context,
+                                 X509 *x, size_t chainidx)
+{
+    size_t ecpointformats_len;
+    PACKET ecptformatlist;
+
+    if (!PACKET_as_length_prefixed_1(pkt, &ecptformatlist)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_EC_PT_FORMATS,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+    if (!s->hit) {
+        ecpointformats_len = PACKET_remaining(&ecptformatlist);
+        if (ecpointformats_len == 0) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PARSE_STOC_EC_PT_FORMATS, SSL_R_BAD_LENGTH);
+            return 0;
+        }
+
+        s->session->ext.ecpointformats_len = 0;
+        OPENSSL_free(s->session->ext.ecpointformats);
+        s->session->ext.ecpointformats = OPENSSL_malloc(ecpointformats_len);
+        if (s->session->ext.ecpointformats == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_PARSE_STOC_EC_PT_FORMATS, ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+
+        s->session->ext.ecpointformats_len = ecpointformats_len;
+
+        if (!PACKET_copy_bytes(&ecptformatlist,
+                               s->session->ext.ecpointformats,
+                               ecpointformats_len)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_PARSE_STOC_EC_PT_FORMATS, ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+    }
+
+    return 1;
+}
+#endif
+
+int tls_parse_stoc_session_ticket(SSL *s, PACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx)
+{
+    if (s->ext.session_ticket_cb != NULL &&
+        !s->ext.session_ticket_cb(s, PACKET_data(pkt),
+                              PACKET_remaining(pkt),
+                              s->ext.session_ticket_cb_arg)) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                 SSL_F_TLS_PARSE_STOC_SESSION_TICKET, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    if (!tls_use_ticket(s)) {
+        SSLfatal(s, SSL_AD_UNSUPPORTED_EXTENSION,
+                 SSL_F_TLS_PARSE_STOC_SESSION_TICKET, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+    if (PACKET_remaining(pkt) > 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PARSE_STOC_SESSION_TICKET, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    s->ext.ticket_expected = 1;
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_OCSP
+int tls_parse_stoc_status_request(SSL *s, PACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx)
+{
+    if (context == SSL_EXT_TLS1_3_CERTIFICATE_REQUEST) {
+        /* We ignore this if the server sends a CertificateRequest */
+        /* TODO(TLS1.3): Add support for this */
+        return 1;
+    }
+
+    /*
+     * MUST only be sent if we've requested a status
+     * request message. In TLS <= 1.2 it must also be empty.
+     */
+    if (s->ext.status_type != TLSEXT_STATUSTYPE_ocsp) {
+        SSLfatal(s, SSL_AD_UNSUPPORTED_EXTENSION,
+                 SSL_F_TLS_PARSE_STOC_STATUS_REQUEST, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+    if (!SSL_IS_TLS13(s) && PACKET_remaining(pkt) > 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PARSE_STOC_STATUS_REQUEST, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    if (SSL_IS_TLS13(s)) {
+        /* We only know how to handle this if it's for the first Certificate in
+         * the chain. We ignore any other responses.
+         */
+        if (chainidx != 0)
+            return 1;
+
+        /* SSLfatal() already called */
+        return tls_process_cert_status_body(s, pkt);
+    }
+
+    /* Set flag to expect CertificateStatus message */
+    s->ext.status_expected = 1;
+
+    return 1;
+}
+#endif
+
+
+#ifndef OPENSSL_NO_CT
+int tls_parse_stoc_sct(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx)
+{
+    if (context == SSL_EXT_TLS1_3_CERTIFICATE_REQUEST) {
+        /* We ignore this if the server sends it in a CertificateRequest */
+        /* TODO(TLS1.3): Add support for this */
+        return 1;
+    }
+
+    /*
+     * Only take it if we asked for it - i.e if there is no CT validation
+     * callback set, then a custom extension MAY be processing it, so we
+     * need to let control continue to flow to that.
+     */
+    if (s->ct_validation_callback != NULL) {
+        size_t size = PACKET_remaining(pkt);
+
+        /* Simply copy it off for later processing */
+        OPENSSL_free(s->ext.scts);
+        s->ext.scts = NULL;
+
+        s->ext.scts_len = (uint16_t)size;
+        if (size > 0) {
+            s->ext.scts = OPENSSL_malloc(size);
+            if (s->ext.scts == NULL
+                    || !PACKET_copy_bytes(pkt, s->ext.scts, size)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_STOC_SCT,
+                         ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+        }
+    } else {
+        ENDPOINT role = (context & SSL_EXT_TLS1_2_SERVER_HELLO) != 0
+                        ? ENDPOINT_CLIENT : ENDPOINT_BOTH;
+
+        /*
+         * If we didn't ask for it then there must be a custom extension,
+         * otherwise this is unsolicited.
+         */
+        if (custom_ext_find(&s->cert->custext, role,
+                            TLSEXT_TYPE_signed_certificate_timestamp,
+                            NULL) == NULL) {
+            SSLfatal(s, TLS1_AD_UNSUPPORTED_EXTENSION, SSL_F_TLS_PARSE_STOC_SCT,
+                     SSL_R_BAD_EXTENSION);
+            return 0;
+        }
+
+        if (!custom_ext_parse(s, context,
+                             TLSEXT_TYPE_signed_certificate_timestamp,
+                             PACKET_data(pkt), PACKET_remaining(pkt),
+                             x, chainidx)) {
+            /* SSLfatal already called */
+            return 0;
+        }
+    }
+
+    return 1;
+}
+#endif
+
+
+#ifndef OPENSSL_NO_NEXTPROTONEG
+/*
+ * ssl_next_proto_validate validates a Next Protocol Negotiation block. No
+ * elements of zero length are allowed and the set of elements must exactly
+ * fill the length of the block. Returns 1 on success or 0 on failure.
+ */
+static int ssl_next_proto_validate(SSL *s, PACKET *pkt)
+{
+    PACKET tmp_protocol;
+
+    while (PACKET_remaining(pkt)) {
+        if (!PACKET_get_length_prefixed_1(pkt, &tmp_protocol)
+            || PACKET_remaining(&tmp_protocol) == 0) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_SSL_NEXT_PROTO_VALIDATE,
+                     SSL_R_BAD_EXTENSION);
+            return 0;
+        }
+    }
+
+    return 1;
+}
+
+int tls_parse_stoc_npn(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx)
+{
+    unsigned char *selected;
+    unsigned char selected_len;
+    PACKET tmppkt;
+
+    /* Check if we are in a renegotiation. If so ignore this extension */
+    if (!SSL_IS_FIRST_HANDSHAKE(s))
+        return 1;
+
+    /* We must have requested it. */
+    if (s->ctx->ext.npn_select_cb == NULL) {
+        SSLfatal(s, SSL_AD_UNSUPPORTED_EXTENSION, SSL_F_TLS_PARSE_STOC_NPN,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    /* The data must be valid */
+    tmppkt = *pkt;
+    if (!ssl_next_proto_validate(s, &tmppkt)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+    if (s->ctx->ext.npn_select_cb(s, &selected, &selected_len,
+                                  PACKET_data(pkt),
+                                  PACKET_remaining(pkt),
+                                  s->ctx->ext.npn_select_cb_arg) !=
+             SSL_TLSEXT_ERR_OK) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_TLS_PARSE_STOC_NPN,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    /*
+     * Could be non-NULL if server has sent multiple NPN extensions in
+     * a single Serverhello
+     */
+    OPENSSL_free(s->ext.npn);
+    s->ext.npn = OPENSSL_malloc(selected_len);
+    if (s->ext.npn == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_STOC_NPN,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    memcpy(s->ext.npn, selected, selected_len);
+    s->ext.npn_len = selected_len;
+    s->s3->npn_seen = 1;
+
+    return 1;
+}
+#endif
+
+int tls_parse_stoc_alpn(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                        size_t chainidx)
+{
+    size_t len;
+
+    /* We must have requested it. */
+    if (!s->s3->alpn_sent) {
+        SSLfatal(s, SSL_AD_UNSUPPORTED_EXTENSION, SSL_F_TLS_PARSE_STOC_ALPN,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+    /*-
+     * The extension data consists of:
+     *   uint16 list_length
+     *   uint8 proto_length;
+     *   uint8 proto[proto_length];
+     */
+    if (!PACKET_get_net_2_len(pkt, &len)
+        || PACKET_remaining(pkt) != len || !PACKET_get_1_len(pkt, &len)
+        || PACKET_remaining(pkt) != len) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_ALPN,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+    OPENSSL_free(s->s3->alpn_selected);
+    s->s3->alpn_selected = OPENSSL_malloc(len);
+    if (s->s3->alpn_selected == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_STOC_ALPN,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    if (!PACKET_copy_bytes(pkt, s->s3->alpn_selected, len)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_ALPN,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+    s->s3->alpn_selected_len = len;
+
+    if (s->session->ext.alpn_selected == NULL
+            || s->session->ext.alpn_selected_len != len
+            || memcmp(s->session->ext.alpn_selected, s->s3->alpn_selected, len)
+               != 0) {
+        /* ALPN not consistent with the old session so cannot use early_data */
+        s->ext.early_data_ok = 0;
+    }
+    if (!s->hit) {
+        /*
+         * This is a new session and so alpn_selected should have been
+         * initialised to NULL. We should update it with the selected ALPN.
+         */
+        if (!ossl_assert(s->session->ext.alpn_selected == NULL)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_STOC_ALPN,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+        s->session->ext.alpn_selected =
+            OPENSSL_memdup(s->s3->alpn_selected, s->s3->alpn_selected_len);
+        if (s->session->ext.alpn_selected == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_STOC_ALPN,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+        s->session->ext.alpn_selected_len = s->s3->alpn_selected_len;
+    }
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_SRTP
+int tls_parse_stoc_use_srtp(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                            size_t chainidx)
+{
+    unsigned int id, ct, mki;
+    int i;
+    STACK_OF(SRTP_PROTECTION_PROFILE) *clnt;
+    SRTP_PROTECTION_PROFILE *prof;
+
+    if (!PACKET_get_net_2(pkt, &ct) || ct != 2
+            || !PACKET_get_net_2(pkt, &id)
+            || !PACKET_get_1(pkt, &mki)
+            || PACKET_remaining(pkt) != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_USE_SRTP,
+                 SSL_R_BAD_SRTP_PROTECTION_PROFILE_LIST);
+        return 0;
+    }
+
+    if (mki != 0) {
+        /* Must be no MKI, since we never offer one */
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PARSE_STOC_USE_SRTP,
+                 SSL_R_BAD_SRTP_MKI_VALUE);
+        return 0;
+    }
+
+    /* Throw an error if the server gave us an unsolicited extension */
+    clnt = SSL_get_srtp_profiles(s);
+    if (clnt == NULL) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_USE_SRTP,
+                 SSL_R_NO_SRTP_PROFILES);
+        return 0;
+    }
+
+    /*
+     * Check to see if the server gave us something we support (and
+     * presumably offered)
+     */
+    for (i = 0; i < sk_SRTP_PROTECTION_PROFILE_num(clnt); i++) {
+        prof = sk_SRTP_PROTECTION_PROFILE_value(clnt, i);
+
+        if (prof->id == id) {
+            s->srtp_profile = prof;
+            return 1;
+        }
+    }
+
+    SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_USE_SRTP,
+             SSL_R_BAD_SRTP_PROTECTION_PROFILE_LIST);
+    return 0;
+}
+#endif
+
+int tls_parse_stoc_etm(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx)
+{
+    /* Ignore if inappropriate ciphersuite */
+    if (!(s->options & SSL_OP_NO_ENCRYPT_THEN_MAC)
+            && s->s3->tmp.new_cipher->algorithm_mac != SSL_AEAD
+            && s->s3->tmp.new_cipher->algorithm_enc != SSL_RC4)
+        s->ext.use_etm = 1;
+
+    return 1;
+}
+
+int tls_parse_stoc_ems(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx)
+{
+    s->s3->flags |= TLS1_FLAGS_RECEIVED_EXTMS;
+    if (!s->hit)
+        s->session->flags |= SSL_SESS_FLAG_EXTMS;
+
+    return 1;
+}
+
+int tls_parse_stoc_supported_versions(SSL *s, PACKET *pkt, unsigned int context,
+                                      X509 *x, size_t chainidx)
+{
+    unsigned int version;
+
+    if (!PACKET_get_net_2(pkt, &version)
+            || PACKET_remaining(pkt) != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PARSE_STOC_SUPPORTED_VERSIONS,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+
+    /*
+     * The only protocol version we support which is valid in this extension in
+     * a ServerHello is TLSv1.3 therefore we shouldn't be getting anything else.
+     */
+    if (version != TLS1_3_VERSION) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                 SSL_F_TLS_PARSE_STOC_SUPPORTED_VERSIONS,
+                 SSL_R_BAD_PROTOCOL_VERSION_NUMBER);
+        return 0;
+    }
+
+    /* We ignore this extension for HRRs except to sanity check it */
+    if (context == SSL_EXT_TLS1_3_HELLO_RETRY_REQUEST)
+        return 1;
+
+    /* We just set it here. We validate it in ssl_choose_client_version */
+    s->version = version;
+
+    return 1;
+}
+
+int tls_parse_stoc_key_share(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                             size_t chainidx)
+{
+#ifndef OPENSSL_NO_TLS1_3
+    unsigned int group_id;
+    PACKET encoded_pt;
+    EVP_PKEY *ckey = s->s3->tmp.pkey, *skey = NULL;
+
+    /* Sanity check */
+    if (ckey == NULL || s->s3->peer_tmp != NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_STOC_KEY_SHARE,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (!PACKET_get_net_2(pkt, &group_id)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_KEY_SHARE,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+
+    if ((context & SSL_EXT_TLS1_3_HELLO_RETRY_REQUEST) != 0) {
+        const uint16_t *pgroups = NULL;
+        size_t i, num_groups;
+
+        if (PACKET_remaining(pkt) != 0) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_KEY_SHARE,
+                     SSL_R_LENGTH_MISMATCH);
+            return 0;
+        }
+
+        /*
+         * It is an error if the HelloRetryRequest wants a key_share that we
+         * already sent in the first ClientHello
+         */
+        if (group_id == s->s3->group_id) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_TLS_PARSE_STOC_KEY_SHARE, SSL_R_BAD_KEY_SHARE);
+            return 0;
+        }
+
+        /* Validate the selected group is one we support */
+        tls1_get_supported_groups(s, &pgroups, &num_groups);
+        for (i = 0; i < num_groups; i++) {
+            if (group_id == pgroups[i])
+                break;
+        }
+        if (i >= num_groups
+                || !tls_curve_allowed(s, group_id, SSL_SECOP_CURVE_SUPPORTED)) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_TLS_PARSE_STOC_KEY_SHARE, SSL_R_BAD_KEY_SHARE);
+            return 0;
+        }
+
+        s->s3->group_id = group_id;
+        EVP_PKEY_free(s->s3->tmp.pkey);
+        s->s3->tmp.pkey = NULL;
+        return 1;
+    }
+
+    if (group_id != s->s3->group_id) {
+        /*
+         * This isn't for the group that we sent in the original
+         * key_share!
+         */
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PARSE_STOC_KEY_SHARE,
+                 SSL_R_BAD_KEY_SHARE);
+        return 0;
+    }
+
+    if (!PACKET_as_length_prefixed_2(pkt, &encoded_pt)
+            || PACKET_remaining(&encoded_pt) == 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_KEY_SHARE,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+
+    skey = ssl_generate_pkey(ckey);
+    if (skey == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_STOC_KEY_SHARE,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    if (!EVP_PKEY_set1_tls_encodedpoint(skey, PACKET_data(&encoded_pt),
+                                        PACKET_remaining(&encoded_pt))) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PARSE_STOC_KEY_SHARE,
+                 SSL_R_BAD_ECPOINT);
+        EVP_PKEY_free(skey);
+        return 0;
+    }
+
+    if (ssl_derive(s, ckey, skey, 1) == 0) {
+        /* SSLfatal() already called */
+        EVP_PKEY_free(skey);
+        return 0;
+    }
+    s->s3->peer_tmp = skey;
+#endif
+
+    return 1;
+}
+
+int tls_parse_stoc_cookie(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx)
+{
+    PACKET cookie;
+
+    if (!PACKET_as_length_prefixed_2(pkt, &cookie)
+            || !PACKET_memdup(&cookie, &s->ext.tls13_cookie,
+                              &s->ext.tls13_cookie_len)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_COOKIE,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+
+    return 1;
+}
+
+int tls_parse_stoc_early_data(SSL *s, PACKET *pkt, unsigned int context,
+                              X509 *x, size_t chainidx)
+{
+    if (context == SSL_EXT_TLS1_3_NEW_SESSION_TICKET) {
+        unsigned long max_early_data;
+
+        if (!PACKET_get_net_4(pkt, &max_early_data)
+                || PACKET_remaining(pkt) != 0) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_EARLY_DATA,
+                     SSL_R_INVALID_MAX_EARLY_DATA);
+            return 0;
+        }
+
+        s->session->ext.max_early_data = max_early_data;
+
+        return 1;
+    }
+
+    if (PACKET_remaining(pkt) != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_EARLY_DATA,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    if (!s->ext.early_data_ok
+            || !s->hit
+            || s->session->ext.tick_identity != 0) {
+        /*
+         * If we get here then we didn't send early data, or we didn't resume
+         * using the first identity, or the SNI/ALPN is not consistent so the
+         * server should not be accepting it.
+         */
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PARSE_STOC_EARLY_DATA,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    s->ext.early_data = SSL_EARLY_DATA_ACCEPTED;
+
+    return 1;
+}
+
+int tls_parse_stoc_psk(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx)
+{
+#ifndef OPENSSL_NO_TLS1_3
+    unsigned int identity;
+
+    if (!PACKET_get_net_2(pkt, &identity) || PACKET_remaining(pkt) != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_STOC_PSK,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+
+    if (s->session->ext.tick_identity == (int)identity) {
+        s->hit = 1;
+        SSL_SESSION_free(s->psksession);
+        s->psksession = NULL;
+        return 1;
+    }
+
+    if (s->psksession == NULL
+            || s->psksession->ext.tick_identity != (int)identity) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PARSE_STOC_PSK,
+                 SSL_R_BAD_PSK_IDENTITY);
+        return 0;
+    }
+
+    /*
+     * If we used the external PSK for sending early_data then s->early_secret
+     * is already set up, so don't overwrite it. Otherwise we copy the
+     * early_secret across that we generated earlier.
+     */
+    if ((s->early_data_state != SSL_EARLY_DATA_WRITE_RETRY
+                && s->early_data_state != SSL_EARLY_DATA_FINISHED_WRITING)
+            || s->session->ext.max_early_data > 0
+            || s->psksession->ext.max_early_data == 0)
+        memcpy(s->early_secret, s->psksession->early_secret, EVP_MAX_MD_SIZE);
+
+    SSL_SESSION_free(s->session);
+    s->session = s->psksession;
+    s->psksession = NULL;
+    s->hit = 1;
+#endif
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/statem/extensions_cust.c b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/extensions_cust.c
new file mode 100644
index 000000000..a4cdc81d6
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/extensions_cust.c
@@ -0,0 +1,533 @@
+/*
+ * Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/* Custom extension utility functions */
+
+#include <openssl/ct.h>
+#include "../ssl_locl.h"
+#include "internal/cryptlib.h"
+#include "statem_locl.h"
+
+typedef struct {
+    void *add_arg;
+    custom_ext_add_cb add_cb;
+    custom_ext_free_cb free_cb;
+} custom_ext_add_cb_wrap;
+
+typedef struct {
+    void *parse_arg;
+    custom_ext_parse_cb parse_cb;
+} custom_ext_parse_cb_wrap;
+
+/*
+ * Provide thin wrapper callbacks which convert new style arguments to old style
+ */
+static int custom_ext_add_old_cb_wrap(SSL *s, unsigned int ext_type,
+                                      unsigned int context,
+                                      const unsigned char **out,
+                                      size_t *outlen, X509 *x, size_t chainidx,
+                                      int *al, void *add_arg)
+{
+    custom_ext_add_cb_wrap *add_cb_wrap = (custom_ext_add_cb_wrap *)add_arg;
+
+    if (add_cb_wrap->add_cb == NULL)
+        return 1;
+
+    return add_cb_wrap->add_cb(s, ext_type, out, outlen, al,
+                               add_cb_wrap->add_arg);
+}
+
+static void custom_ext_free_old_cb_wrap(SSL *s, unsigned int ext_type,
+                                        unsigned int context,
+                                        const unsigned char *out, void *add_arg)
+{
+    custom_ext_add_cb_wrap *add_cb_wrap = (custom_ext_add_cb_wrap *)add_arg;
+
+    if (add_cb_wrap->free_cb == NULL)
+        return;
+
+    add_cb_wrap->free_cb(s, ext_type, out, add_cb_wrap->add_arg);
+}
+
+static int custom_ext_parse_old_cb_wrap(SSL *s, unsigned int ext_type,
+                                        unsigned int context,
+                                        const unsigned char *in,
+                                        size_t inlen, X509 *x, size_t chainidx,
+                                        int *al, void *parse_arg)
+{
+    custom_ext_parse_cb_wrap *parse_cb_wrap =
+        (custom_ext_parse_cb_wrap *)parse_arg;
+
+    if (parse_cb_wrap->parse_cb == NULL)
+        return 1;
+
+    return parse_cb_wrap->parse_cb(s, ext_type, in, inlen, al,
+                                   parse_cb_wrap->parse_arg);
+}
+
+/*
+ * Find a custom extension from the list. The |role| param is there to
+ * support the legacy API where custom extensions for client and server could
+ * be set independently on the same SSL_CTX. It is set to ENDPOINT_SERVER if we
+ * are trying to find a method relevant to the server, ENDPOINT_CLIENT for the
+ * client, or ENDPOINT_BOTH for either
+ */
+custom_ext_method *custom_ext_find(const custom_ext_methods *exts,
+                                   ENDPOINT role, unsigned int ext_type,
+                                   size_t *idx)
+{
+    size_t i;
+    custom_ext_method *meth = exts->meths;
+
+    for (i = 0; i < exts->meths_count; i++, meth++) {
+        if (ext_type == meth->ext_type
+                && (role == ENDPOINT_BOTH || role == meth->role
+                    || meth->role == ENDPOINT_BOTH)) {
+            if (idx != NULL)
+                *idx = i;
+            return meth;
+        }
+    }
+    return NULL;
+}
+
+/*
+ * Initialise custom extensions flags to indicate neither sent nor received.
+ */
+void custom_ext_init(custom_ext_methods *exts)
+{
+    size_t i;
+    custom_ext_method *meth = exts->meths;
+
+    for (i = 0; i < exts->meths_count; i++, meth++)
+        meth->ext_flags = 0;
+}
+
+/* Pass received custom extension data to the application for parsing. */
+int custom_ext_parse(SSL *s, unsigned int context, unsigned int ext_type,
+                     const unsigned char *ext_data, size_t ext_size, X509 *x,
+                     size_t chainidx)
+{
+    int al;
+    custom_ext_methods *exts = &s->cert->custext;
+    custom_ext_method *meth;
+    ENDPOINT role = ENDPOINT_BOTH;
+
+    if ((context & (SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_SERVER_HELLO)) != 0)
+        role = s->server ? ENDPOINT_SERVER : ENDPOINT_CLIENT;
+
+    meth = custom_ext_find(exts, role, ext_type, NULL);
+    /* If not found return success */
+    if (!meth)
+        return 1;
+
+    /* Check if extension is defined for our protocol. If not, skip */
+    if (!extension_is_relevant(s, meth->context, context))
+        return 1;
+
+    if ((context & (SSL_EXT_TLS1_2_SERVER_HELLO
+                    | SSL_EXT_TLS1_3_SERVER_HELLO
+                    | SSL_EXT_TLS1_3_ENCRYPTED_EXTENSIONS)) != 0) {
+        /*
+         * If it's ServerHello or EncryptedExtensions we can't have any
+         * extensions not sent in ClientHello.
+         */
+        if ((meth->ext_flags & SSL_EXT_FLAG_SENT) == 0) {
+            SSLfatal(s, TLS1_AD_UNSUPPORTED_EXTENSION, SSL_F_CUSTOM_EXT_PARSE,
+                     SSL_R_BAD_EXTENSION);
+            return 0;
+        }
+    }
+
+    /*
+     * Extensions received in the ClientHello are marked with the
+     * SSL_EXT_FLAG_RECEIVED. This is so we know to add the equivalent
+     * extensions in the ServerHello/EncryptedExtensions message
+     */
+    if ((context & SSL_EXT_CLIENT_HELLO) != 0)
+        meth->ext_flags |= SSL_EXT_FLAG_RECEIVED;
+
+    /* If no parse function set return success */
+    if (!meth->parse_cb)
+        return 1;
+
+    if (meth->parse_cb(s, ext_type, context, ext_data, ext_size, x, chainidx,
+                       &al, meth->parse_arg) <= 0) {
+        SSLfatal(s, al, SSL_F_CUSTOM_EXT_PARSE, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    return 1;
+}
+
+/*
+ * Request custom extension data from the application and add to the return
+ * buffer.
+ */
+int custom_ext_add(SSL *s, int context, WPACKET *pkt, X509 *x, size_t chainidx,
+                   int maxversion)
+{
+    custom_ext_methods *exts = &s->cert->custext;
+    custom_ext_method *meth;
+    size_t i;
+    int al;
+
+    for (i = 0; i < exts->meths_count; i++) {
+        const unsigned char *out = NULL;
+        size_t outlen = 0;
+
+        meth = exts->meths + i;
+
+        if (!should_add_extension(s, meth->context, context, maxversion))
+            continue;
+
+        if ((context & (SSL_EXT_TLS1_2_SERVER_HELLO
+                        | SSL_EXT_TLS1_3_SERVER_HELLO
+                        | SSL_EXT_TLS1_3_ENCRYPTED_EXTENSIONS
+                        | SSL_EXT_TLS1_3_CERTIFICATE
+                        | SSL_EXT_TLS1_3_HELLO_RETRY_REQUEST)) != 0) {
+            /* Only send extensions present in ClientHello. */
+            if (!(meth->ext_flags & SSL_EXT_FLAG_RECEIVED))
+                continue;
+        }
+        /*
+         * We skip it if the callback is absent - except for a ClientHello where
+         * we add an empty extension.
+         */
+        if ((context & SSL_EXT_CLIENT_HELLO) == 0 && meth->add_cb == NULL)
+            continue;
+
+        if (meth->add_cb != NULL) {
+            int cb_retval = meth->add_cb(s, meth->ext_type, context, &out,
+                                         &outlen, x, chainidx, &al,
+                                         meth->add_arg);
+
+            if (cb_retval < 0) {
+                SSLfatal(s, al, SSL_F_CUSTOM_EXT_ADD, SSL_R_CALLBACK_FAILED);
+                return 0;       /* error */
+            }
+            if (cb_retval == 0)
+                continue;       /* skip this extension */
+        }
+
+        if (!WPACKET_put_bytes_u16(pkt, meth->ext_type)
+                || !WPACKET_start_sub_packet_u16(pkt)
+                || (outlen > 0 && !WPACKET_memcpy(pkt, out, outlen))
+                || !WPACKET_close(pkt)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CUSTOM_EXT_ADD,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+        if ((context & SSL_EXT_CLIENT_HELLO) != 0) {
+            /*
+             * We can't send duplicates: code logic should prevent this.
+             */
+            if (!ossl_assert((meth->ext_flags & SSL_EXT_FLAG_SENT) == 0)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CUSTOM_EXT_ADD,
+                         ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+            /*
+             * Indicate extension has been sent: this is both a sanity check to
+             * ensure we don't send duplicate extensions and indicates that it
+             * is not an error if the extension is present in ServerHello.
+             */
+            meth->ext_flags |= SSL_EXT_FLAG_SENT;
+        }
+        if (meth->free_cb != NULL)
+            meth->free_cb(s, meth->ext_type, context, out, meth->add_arg);
+    }
+    return 1;
+}
+
+/* Copy the flags from src to dst for any extensions that exist in both */
+int custom_exts_copy_flags(custom_ext_methods *dst,
+                           const custom_ext_methods *src)
+{
+    size_t i;
+    custom_ext_method *methsrc = src->meths;
+
+    for (i = 0; i < src->meths_count; i++, methsrc++) {
+        custom_ext_method *methdst = custom_ext_find(dst, methsrc->role,
+                                                     methsrc->ext_type, NULL);
+
+        if (methdst == NULL)
+            continue;
+
+        methdst->ext_flags = methsrc->ext_flags;
+    }
+
+    return 1;
+}
+
+/* Copy table of custom extensions */
+int custom_exts_copy(custom_ext_methods *dst, const custom_ext_methods *src)
+{
+    size_t i;
+    int err = 0;
+
+    if (src->meths_count > 0) {
+        dst->meths =
+            OPENSSL_memdup(src->meths,
+                           sizeof(*src->meths) * src->meths_count);
+        if (dst->meths == NULL)
+            return 0;
+        dst->meths_count = src->meths_count;
+
+        for (i = 0; i < src->meths_count; i++) {
+            custom_ext_method *methsrc = src->meths + i;
+            custom_ext_method *methdst = dst->meths + i;
+
+            if (methsrc->add_cb != custom_ext_add_old_cb_wrap)
+                continue;
+
+            /*
+             * We have found an old style API wrapper. We need to copy the
+             * arguments too.
+             */
+
+            if (err) {
+                methdst->add_arg = NULL;
+                methdst->parse_arg = NULL;
+                continue;
+            }
+
+            methdst->add_arg = OPENSSL_memdup(methsrc->add_arg,
+                                              sizeof(custom_ext_add_cb_wrap));
+            methdst->parse_arg = OPENSSL_memdup(methsrc->parse_arg,
+                                            sizeof(custom_ext_parse_cb_wrap));
+
+            if (methdst->add_arg == NULL || methdst->parse_arg == NULL)
+                err = 1;
+        }
+    }
+
+    if (err) {
+        custom_exts_free(dst);
+        return 0;
+    }
+
+    return 1;
+}
+
+void custom_exts_free(custom_ext_methods *exts)
+{
+    size_t i;
+    custom_ext_method *meth;
+
+    for (i = 0, meth = exts->meths; i < exts->meths_count; i++, meth++) {
+        if (meth->add_cb != custom_ext_add_old_cb_wrap)
+            continue;
+
+        /* Old style API wrapper. Need to free the arguments too */
+        OPENSSL_free(meth->add_arg);
+        OPENSSL_free(meth->parse_arg);
+    }
+    OPENSSL_free(exts->meths);
+}
+
+/* Return true if a client custom extension exists, false otherwise */
+int SSL_CTX_has_client_custom_ext(const SSL_CTX *ctx, unsigned int ext_type)
+{
+    return custom_ext_find(&ctx->cert->custext, ENDPOINT_CLIENT, ext_type,
+                           NULL) != NULL;
+}
+
+static int add_custom_ext_intern(SSL_CTX *ctx, ENDPOINT role,
+                                 unsigned int ext_type,
+                                 unsigned int context,
+                                 SSL_custom_ext_add_cb_ex add_cb,
+                                 SSL_custom_ext_free_cb_ex free_cb,
+                                 void *add_arg,
+                                 SSL_custom_ext_parse_cb_ex parse_cb,
+                                 void *parse_arg)
+{
+    custom_ext_methods *exts = &ctx->cert->custext;
+    custom_ext_method *meth, *tmp;
+
+    /*
+     * Check application error: if add_cb is not set free_cb will never be
+     * called.
+     */
+    if (add_cb == NULL && free_cb != NULL)
+        return 0;
+
+#ifndef OPENSSL_NO_CT
+    /*
+     * We don't want applications registering callbacks for SCT extensions
+     * whilst simultaneously using the built-in SCT validation features, as
+     * these two things may not play well together.
+     */
+    if (ext_type == TLSEXT_TYPE_signed_certificate_timestamp
+            && (context & SSL_EXT_CLIENT_HELLO) != 0
+            && SSL_CTX_ct_is_enabled(ctx))
+        return 0;
+#endif
+
+    /*
+     * Don't add if extension supported internally, but make exception
+     * for extension types that previously were not supported, but now are.
+     */
+    if (SSL_extension_supported(ext_type)
+            && ext_type != TLSEXT_TYPE_signed_certificate_timestamp)
+        return 0;
+
+    /* Extension type must fit in 16 bits */
+    if (ext_type > 0xffff)
+        return 0;
+    /* Search for duplicate */
+    if (custom_ext_find(exts, role, ext_type, NULL))
+        return 0;
+    tmp = OPENSSL_realloc(exts->meths,
+                          (exts->meths_count + 1) * sizeof(custom_ext_method));
+    if (tmp == NULL)
+        return 0;
+
+    exts->meths = tmp;
+    meth = exts->meths + exts->meths_count;
+    memset(meth, 0, sizeof(*meth));
+    meth->role = role;
+    meth->context = context;
+    meth->parse_cb = parse_cb;
+    meth->add_cb = add_cb;
+    meth->free_cb = free_cb;
+    meth->ext_type = ext_type;
+    meth->add_arg = add_arg;
+    meth->parse_arg = parse_arg;
+    exts->meths_count++;
+    return 1;
+}
+
+static int add_old_custom_ext(SSL_CTX *ctx, ENDPOINT role,
+                              unsigned int ext_type,
+                              unsigned int context,
+                              custom_ext_add_cb add_cb,
+                              custom_ext_free_cb free_cb,
+                              void *add_arg,
+                              custom_ext_parse_cb parse_cb, void *parse_arg)
+{
+    custom_ext_add_cb_wrap *add_cb_wrap
+        = OPENSSL_malloc(sizeof(*add_cb_wrap));
+    custom_ext_parse_cb_wrap *parse_cb_wrap
+        = OPENSSL_malloc(sizeof(*parse_cb_wrap));
+    int ret;
+
+    if (add_cb_wrap == NULL || parse_cb_wrap == NULL) {
+        OPENSSL_free(add_cb_wrap);
+        OPENSSL_free(parse_cb_wrap);
+        return 0;
+    }
+
+    add_cb_wrap->add_arg = add_arg;
+    add_cb_wrap->add_cb = add_cb;
+    add_cb_wrap->free_cb = free_cb;
+    parse_cb_wrap->parse_arg = parse_arg;
+    parse_cb_wrap->parse_cb = parse_cb;
+
+    ret = add_custom_ext_intern(ctx, role, ext_type,
+                                context,
+                                custom_ext_add_old_cb_wrap,
+                                custom_ext_free_old_cb_wrap,
+                                add_cb_wrap,
+                                custom_ext_parse_old_cb_wrap,
+                                parse_cb_wrap);
+
+    if (!ret) {
+        OPENSSL_free(add_cb_wrap);
+        OPENSSL_free(parse_cb_wrap);
+    }
+
+    return ret;
+}
+
+/* Application level functions to add the old custom extension callbacks */
+int SSL_CTX_add_client_custom_ext(SSL_CTX *ctx, unsigned int ext_type,
+                                  custom_ext_add_cb add_cb,
+                                  custom_ext_free_cb free_cb,
+                                  void *add_arg,
+                                  custom_ext_parse_cb parse_cb, void *parse_arg)
+{
+    return add_old_custom_ext(ctx, ENDPOINT_CLIENT, ext_type,
+                              SSL_EXT_TLS1_2_AND_BELOW_ONLY
+                              | SSL_EXT_CLIENT_HELLO
+                              | SSL_EXT_TLS1_2_SERVER_HELLO
+                              | SSL_EXT_IGNORE_ON_RESUMPTION,
+                              add_cb, free_cb, add_arg, parse_cb, parse_arg);
+}
+
+int SSL_CTX_add_server_custom_ext(SSL_CTX *ctx, unsigned int ext_type,
+                                  custom_ext_add_cb add_cb,
+                                  custom_ext_free_cb free_cb,
+                                  void *add_arg,
+                                  custom_ext_parse_cb parse_cb, void *parse_arg)
+{
+    return add_old_custom_ext(ctx, ENDPOINT_SERVER, ext_type,
+                              SSL_EXT_TLS1_2_AND_BELOW_ONLY
+                              | SSL_EXT_CLIENT_HELLO
+                              | SSL_EXT_TLS1_2_SERVER_HELLO
+                              | SSL_EXT_IGNORE_ON_RESUMPTION,
+                              add_cb, free_cb, add_arg, parse_cb, parse_arg);
+}
+
+int SSL_CTX_add_custom_ext(SSL_CTX *ctx, unsigned int ext_type,
+                           unsigned int context,
+                           SSL_custom_ext_add_cb_ex add_cb,
+                           SSL_custom_ext_free_cb_ex free_cb,
+                           void *add_arg,
+                           SSL_custom_ext_parse_cb_ex parse_cb, void *parse_arg)
+{
+    return add_custom_ext_intern(ctx, ENDPOINT_BOTH, ext_type, context, add_cb,
+                                 free_cb, add_arg, parse_cb, parse_arg);
+}
+
+int SSL_extension_supported(unsigned int ext_type)
+{
+    switch (ext_type) {
+        /* Internally supported extensions. */
+    case TLSEXT_TYPE_application_layer_protocol_negotiation:
+#ifndef OPENSSL_NO_EC
+    case TLSEXT_TYPE_ec_point_formats:
+    case TLSEXT_TYPE_supported_groups:
+    case TLSEXT_TYPE_key_share:
+#endif
+#ifndef OPENSSL_NO_NEXTPROTONEG
+    case TLSEXT_TYPE_next_proto_neg:
+#endif
+    case TLSEXT_TYPE_padding:
+    case TLSEXT_TYPE_renegotiate:
+    case TLSEXT_TYPE_max_fragment_length:
+    case TLSEXT_TYPE_server_name:
+    case TLSEXT_TYPE_session_ticket:
+    case TLSEXT_TYPE_signature_algorithms:
+#ifndef OPENSSL_NO_SRP
+    case TLSEXT_TYPE_srp:
+#endif
+#ifndef OPENSSL_NO_OCSP
+    case TLSEXT_TYPE_status_request:
+#endif
+#ifndef OPENSSL_NO_CT
+    case TLSEXT_TYPE_signed_certificate_timestamp:
+#endif
+#ifndef OPENSSL_NO_SRTP
+    case TLSEXT_TYPE_use_srtp:
+#endif
+    case TLSEXT_TYPE_encrypt_then_mac:
+    case TLSEXT_TYPE_supported_versions:
+    case TLSEXT_TYPE_extended_master_secret:
+    case TLSEXT_TYPE_psk_kex_modes:
+    case TLSEXT_TYPE_cookie:
+    case TLSEXT_TYPE_early_data:
+    case TLSEXT_TYPE_certificate_authorities:
+    case TLSEXT_TYPE_psk:
+    case TLSEXT_TYPE_post_handshake_auth:
+        return 1;
+    default:
+        return 0;
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/statem/extensions_srvr.c b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/extensions_srvr.c
new file mode 100644
index 000000000..0f2b22392
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/extensions_srvr.c
@@ -0,0 +1,1959 @@
+/*
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/ocsp.h>
+#include "../ssl_locl.h"
+#include "statem_locl.h"
+#include "internal/cryptlib.h"
+
+#define COOKIE_STATE_FORMAT_VERSION     0
+
+/*
+ * 2 bytes for packet length, 2 bytes for format version, 2 bytes for
+ * protocol version, 2 bytes for group id, 2 bytes for cipher id, 1 byte for
+ * key_share present flag, 4 bytes for timestamp, 2 bytes for the hashlen,
+ * EVP_MAX_MD_SIZE for transcript hash, 1 byte for app cookie length, app cookie
+ * length bytes, SHA256_DIGEST_LENGTH bytes for the HMAC of the whole thing.
+ */
+#define MAX_COOKIE_SIZE (2 + 2 + 2 + 2 + 2 + 1 + 4 + 2 + EVP_MAX_MD_SIZE + 1 \
+                         + SSL_COOKIE_LENGTH + SHA256_DIGEST_LENGTH)
+
+/*
+ * Message header + 2 bytes for protocol version + number of random bytes +
+ * + 1 byte for legacy session id length + number of bytes in legacy session id
+ * + 2 bytes for ciphersuite + 1 byte for legacy compression
+ * + 2 bytes for extension block length + 6 bytes for key_share extension
+ * + 4 bytes for cookie extension header + the number of bytes in the cookie
+ */
+#define MAX_HRR_SIZE    (SSL3_HM_HEADER_LENGTH + 2 + SSL3_RANDOM_SIZE + 1 \
+                         + SSL_MAX_SSL_SESSION_ID_LENGTH + 2 + 1 + 2 + 6 + 4 \
+                         + MAX_COOKIE_SIZE)
+
+/*
+ * Parse the client's renegotiation binding and abort if it's not right
+ */
+int tls_parse_ctos_renegotiate(SSL *s, PACKET *pkt, unsigned int context,
+                               X509 *x, size_t chainidx)
+{
+    unsigned int ilen;
+    const unsigned char *data;
+
+    /* Parse the length byte */
+    if (!PACKET_get_1(pkt, &ilen)
+        || !PACKET_get_bytes(pkt, &data, ilen)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_RENEGOTIATE,
+                 SSL_R_RENEGOTIATION_ENCODING_ERR);
+        return 0;
+    }
+
+    /* Check that the extension matches */
+    if (ilen != s->s3->previous_client_finished_len) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_TLS_PARSE_CTOS_RENEGOTIATE,
+                 SSL_R_RENEGOTIATION_MISMATCH);
+        return 0;
+    }
+
+    if (memcmp(data, s->s3->previous_client_finished,
+               s->s3->previous_client_finished_len)) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_TLS_PARSE_CTOS_RENEGOTIATE,
+                 SSL_R_RENEGOTIATION_MISMATCH);
+        return 0;
+    }
+
+    s->s3->send_connection_binding = 1;
+
+    return 1;
+}
+
+/*-
+ * The servername extension is treated as follows:
+ *
+ * - Only the hostname type is supported with a maximum length of 255.
+ * - The servername is rejected if too long or if it contains zeros,
+ *   in which case an fatal alert is generated.
+ * - The servername field is maintained together with the session cache.
+ * - When a session is resumed, the servername call back invoked in order
+ *   to allow the application to position itself to the right context.
+ * - The servername is acknowledged if it is new for a session or when
+ *   it is identical to a previously used for the same session.
+ *   Applications can control the behaviour.  They can at any time
+ *   set a 'desirable' servername for a new SSL object. This can be the
+ *   case for example with HTTPS when a Host: header field is received and
+ *   a renegotiation is requested. In this case, a possible servername
+ *   presented in the new client hello is only acknowledged if it matches
+ *   the value of the Host: field.
+ * - Applications must  use SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION
+ *   if they provide for changing an explicit servername context for the
+ *   session, i.e. when the session has been established with a servername
+ *   extension.
+ * - On session reconnect, the servername extension may be absent.
+ */
+int tls_parse_ctos_server_name(SSL *s, PACKET *pkt, unsigned int context,
+                               X509 *x, size_t chainidx)
+{
+    unsigned int servname_type;
+    PACKET sni, hostname;
+
+    if (!PACKET_as_length_prefixed_2(pkt, &sni)
+        /* ServerNameList must be at least 1 byte long. */
+        || PACKET_remaining(&sni) == 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_SERVER_NAME,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    /*
+     * Although the intent was for server_name to be extensible, RFC 4366
+     * was not clear about it; and so OpenSSL among other implementations,
+     * always and only allows a 'host_name' name types.
+     * RFC 6066 corrected the mistake but adding new name types
+     * is nevertheless no longer feasible, so act as if no other
+     * SNI types can exist, to simplify parsing.
+     *
+     * Also note that the RFC permits only one SNI value per type,
+     * i.e., we can only have a single hostname.
+     */
+    if (!PACKET_get_1(&sni, &servname_type)
+        || servname_type != TLSEXT_NAMETYPE_host_name
+        || !PACKET_as_length_prefixed_2(&sni, &hostname)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_SERVER_NAME,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    if (!s->hit || SSL_IS_TLS13(s)) {
+        if (PACKET_remaining(&hostname) > TLSEXT_MAXLEN_host_name) {
+            SSLfatal(s, SSL_AD_UNRECOGNIZED_NAME,
+                     SSL_F_TLS_PARSE_CTOS_SERVER_NAME,
+                     SSL_R_BAD_EXTENSION);
+            return 0;
+        }
+
+        if (PACKET_contains_zero_byte(&hostname)) {
+            SSLfatal(s, SSL_AD_UNRECOGNIZED_NAME,
+                     SSL_F_TLS_PARSE_CTOS_SERVER_NAME,
+                     SSL_R_BAD_EXTENSION);
+            return 0;
+        }
+
+        /*
+         * Store the requested SNI in the SSL as temporary storage.
+         * If we accept it, it will get stored in the SSL_SESSION as well.
+         */
+        OPENSSL_free(s->ext.hostname);
+        s->ext.hostname = NULL;
+        if (!PACKET_strndup(&hostname, &s->ext.hostname)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_CTOS_SERVER_NAME,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+
+        s->servername_done = 1;
+    }
+    if (s->hit) {
+        /*
+         * TODO(openssl-team): if the SNI doesn't match, we MUST
+         * fall back to a full handshake.
+         */
+        s->servername_done = (s->session->ext.hostname != NULL)
+            && PACKET_equal(&hostname, s->session->ext.hostname,
+                            strlen(s->session->ext.hostname));
+
+        if (!s->servername_done && s->session->ext.hostname != NULL)
+            s->ext.early_data_ok = 0;
+    }
+
+    return 1;
+}
+
+int tls_parse_ctos_maxfragmentlen(SSL *s, PACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx)
+{
+    unsigned int value;
+
+    if (PACKET_remaining(pkt) != 1 || !PACKET_get_1(pkt, &value)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_MAXFRAGMENTLEN,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    /* Received |value| should be a valid max-fragment-length code. */
+    if (!IS_MAX_FRAGMENT_LENGTH_EXT_VALID(value)) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                 SSL_F_TLS_PARSE_CTOS_MAXFRAGMENTLEN,
+                 SSL_R_SSL3_EXT_INVALID_MAX_FRAGMENT_LENGTH);
+        return 0;
+    }
+
+    /*
+     * RFC 6066:  The negotiated length applies for the duration of the session
+     * including session resumptions.
+     * We should receive the same code as in resumed session !
+     */
+    if (s->hit && s->session->ext.max_fragment_len_mode != value) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                 SSL_F_TLS_PARSE_CTOS_MAXFRAGMENTLEN,
+                 SSL_R_SSL3_EXT_INVALID_MAX_FRAGMENT_LENGTH);
+        return 0;
+    }
+
+    /*
+     * Store it in session, so it'll become binding for us
+     * and we'll include it in a next Server Hello.
+     */
+    s->session->ext.max_fragment_len_mode = value;
+    return 1;
+}
+
+#ifndef OPENSSL_NO_SRP
+int tls_parse_ctos_srp(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx)
+{
+    PACKET srp_I;
+
+    if (!PACKET_as_length_prefixed_1(pkt, &srp_I)
+            || PACKET_contains_zero_byte(&srp_I)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PARSE_CTOS_SRP,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    /*
+     * TODO(openssl-team): currently, we re-authenticate the user
+     * upon resumption. Instead, we MUST ignore the login.
+     */
+    if (!PACKET_strndup(&srp_I, &s->srp_ctx.login)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_CTOS_SRP,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    return 1;
+}
+#endif
+
+#ifndef OPENSSL_NO_EC
+int tls_parse_ctos_ec_pt_formats(SSL *s, PACKET *pkt, unsigned int context,
+                                 X509 *x, size_t chainidx)
+{
+    PACKET ec_point_format_list;
+
+    if (!PACKET_as_length_prefixed_1(pkt, &ec_point_format_list)
+        || PACKET_remaining(&ec_point_format_list) == 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_EC_PT_FORMATS,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    if (!s->hit) {
+        if (!PACKET_memdup(&ec_point_format_list,
+                           &s->session->ext.ecpointformats,
+                           &s->session->ext.ecpointformats_len)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_PARSE_CTOS_EC_PT_FORMATS, ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+    }
+
+    return 1;
+}
+#endif                          /* OPENSSL_NO_EC */
+
+int tls_parse_ctos_session_ticket(SSL *s, PACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx)
+{
+    if (s->ext.session_ticket_cb &&
+            !s->ext.session_ticket_cb(s, PACKET_data(pkt),
+                                  PACKET_remaining(pkt),
+                                  s->ext.session_ticket_cb_arg)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_PARSE_CTOS_SESSION_TICKET, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    return 1;
+}
+
+int tls_parse_ctos_sig_algs_cert(SSL *s, PACKET *pkt, unsigned int context,
+                                 X509 *x, size_t chainidx)
+{
+    PACKET supported_sig_algs;
+
+    if (!PACKET_as_length_prefixed_2(pkt, &supported_sig_algs)
+            || PACKET_remaining(&supported_sig_algs) == 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PARSE_CTOS_SIG_ALGS_CERT, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    if (!s->hit && !tls1_save_sigalgs(s, &supported_sig_algs, 1)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PARSE_CTOS_SIG_ALGS_CERT, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    return 1;
+}
+
+int tls_parse_ctos_sig_algs(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                            size_t chainidx)
+{
+    PACKET supported_sig_algs;
+
+    if (!PACKET_as_length_prefixed_2(pkt, &supported_sig_algs)
+            || PACKET_remaining(&supported_sig_algs) == 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PARSE_CTOS_SIG_ALGS, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    if (!s->hit && !tls1_save_sigalgs(s, &supported_sig_algs, 0)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PARSE_CTOS_SIG_ALGS, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_OCSP
+int tls_parse_ctos_status_request(SSL *s, PACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx)
+{
+    PACKET responder_id_list, exts;
+
+    /* We ignore this in a resumption handshake */
+    if (s->hit)
+        return 1;
+
+    /* Not defined if we get one of these in a client Certificate */
+    if (x != NULL)
+        return 1;
+
+    if (!PACKET_get_1(pkt, (unsigned int *)&s->ext.status_type)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PARSE_CTOS_STATUS_REQUEST, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    if (s->ext.status_type != TLSEXT_STATUSTYPE_ocsp) {
+        /*
+         * We don't know what to do with any other type so ignore it.
+         */
+        s->ext.status_type = TLSEXT_STATUSTYPE_nothing;
+        return 1;
+    }
+
+    if (!PACKET_get_length_prefixed_2 (pkt, &responder_id_list)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PARSE_CTOS_STATUS_REQUEST, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    /*
+     * We remove any OCSP_RESPIDs from a previous handshake
+     * to prevent unbounded memory growth - CVE-2016-6304
+     */
+    sk_OCSP_RESPID_pop_free(s->ext.ocsp.ids, OCSP_RESPID_free);
+    if (PACKET_remaining(&responder_id_list) > 0) {
+        s->ext.ocsp.ids = sk_OCSP_RESPID_new_null();
+        if (s->ext.ocsp.ids == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_PARSE_CTOS_STATUS_REQUEST, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+    } else {
+        s->ext.ocsp.ids = NULL;
+    }
+
+    while (PACKET_remaining(&responder_id_list) > 0) {
+        OCSP_RESPID *id;
+        PACKET responder_id;
+        const unsigned char *id_data;
+
+        if (!PACKET_get_length_prefixed_2(&responder_id_list, &responder_id)
+                || PACKET_remaining(&responder_id) == 0) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PARSE_CTOS_STATUS_REQUEST, SSL_R_BAD_EXTENSION);
+            return 0;
+        }
+
+        id_data = PACKET_data(&responder_id);
+        /* TODO(size_t): Convert d2i_* to size_t */
+        id = d2i_OCSP_RESPID(NULL, &id_data,
+                             (int)PACKET_remaining(&responder_id));
+        if (id == NULL) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PARSE_CTOS_STATUS_REQUEST, SSL_R_BAD_EXTENSION);
+            return 0;
+        }
+
+        if (id_data != PACKET_end(&responder_id)) {
+            OCSP_RESPID_free(id);
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PARSE_CTOS_STATUS_REQUEST, SSL_R_BAD_EXTENSION);
+
+            return 0;
+        }
+
+        if (!sk_OCSP_RESPID_push(s->ext.ocsp.ids, id)) {
+            OCSP_RESPID_free(id);
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_PARSE_CTOS_STATUS_REQUEST, ERR_R_INTERNAL_ERROR);
+
+            return 0;
+        }
+    }
+
+    /* Read in request_extensions */
+    if (!PACKET_as_length_prefixed_2(pkt, &exts)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PARSE_CTOS_STATUS_REQUEST, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    if (PACKET_remaining(&exts) > 0) {
+        const unsigned char *ext_data = PACKET_data(&exts);
+
+        sk_X509_EXTENSION_pop_free(s->ext.ocsp.exts,
+                                   X509_EXTENSION_free);
+        s->ext.ocsp.exts =
+            d2i_X509_EXTENSIONS(NULL, &ext_data, (int)PACKET_remaining(&exts));
+        if (s->ext.ocsp.exts == NULL || ext_data != PACKET_end(&exts)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PARSE_CTOS_STATUS_REQUEST, SSL_R_BAD_EXTENSION);
+            return 0;
+        }
+    }
+
+    return 1;
+}
+#endif
+
+#ifndef OPENSSL_NO_NEXTPROTONEG
+int tls_parse_ctos_npn(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx)
+{
+    /*
+     * We shouldn't accept this extension on a
+     * renegotiation.
+     */
+    if (SSL_IS_FIRST_HANDSHAKE(s))
+        s->s3->npn_seen = 1;
+
+    return 1;
+}
+#endif
+
+/*
+ * Save the ALPN extension in a ClientHello.|pkt| holds the contents of the ALPN
+ * extension, not including type and length. Returns: 1 on success, 0 on error.
+ */
+int tls_parse_ctos_alpn(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                        size_t chainidx)
+{
+    PACKET protocol_list, save_protocol_list, protocol;
+
+    if (!SSL_IS_FIRST_HANDSHAKE(s))
+        return 1;
+
+    if (!PACKET_as_length_prefixed_2(pkt, &protocol_list)
+        || PACKET_remaining(&protocol_list) < 2) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_ALPN,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    save_protocol_list = protocol_list;
+    do {
+        /* Protocol names can't be empty. */
+        if (!PACKET_get_length_prefixed_1(&protocol_list, &protocol)
+                || PACKET_remaining(&protocol) == 0) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_ALPN,
+                     SSL_R_BAD_EXTENSION);
+            return 0;
+        }
+    } while (PACKET_remaining(&protocol_list) != 0);
+
+    OPENSSL_free(s->s3->alpn_proposed);
+    s->s3->alpn_proposed = NULL;
+    s->s3->alpn_proposed_len = 0;
+    if (!PACKET_memdup(&save_protocol_list,
+                       &s->s3->alpn_proposed, &s->s3->alpn_proposed_len)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_CTOS_ALPN,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_SRTP
+int tls_parse_ctos_use_srtp(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                            size_t chainidx)
+{
+    STACK_OF(SRTP_PROTECTION_PROFILE) *srvr;
+    unsigned int ct, mki_len, id;
+    int i, srtp_pref;
+    PACKET subpkt;
+
+    /* Ignore this if we have no SRTP profiles */
+    if (SSL_get_srtp_profiles(s) == NULL)
+        return 1;
+
+    /* Pull off the length of the cipher suite list  and check it is even */
+    if (!PACKET_get_net_2(pkt, &ct) || (ct & 1) != 0
+            || !PACKET_get_sub_packet(pkt, &subpkt, ct)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_USE_SRTP,
+               SSL_R_BAD_SRTP_PROTECTION_PROFILE_LIST);
+        return 0;
+    }
+
+    srvr = SSL_get_srtp_profiles(s);
+    s->srtp_profile = NULL;
+    /* Search all profiles for a match initially */
+    srtp_pref = sk_SRTP_PROTECTION_PROFILE_num(srvr);
+
+    while (PACKET_remaining(&subpkt)) {
+        if (!PACKET_get_net_2(&subpkt, &id)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_USE_SRTP,
+                     SSL_R_BAD_SRTP_PROTECTION_PROFILE_LIST);
+            return 0;
+        }
+
+        /*
+         * Only look for match in profiles of higher preference than
+         * current match.
+         * If no profiles have been have been configured then this
+         * does nothing.
+         */
+        for (i = 0; i < srtp_pref; i++) {
+            SRTP_PROTECTION_PROFILE *sprof =
+                sk_SRTP_PROTECTION_PROFILE_value(srvr, i);
+
+            if (sprof->id == id) {
+                s->srtp_profile = sprof;
+                srtp_pref = i;
+                break;
+            }
+        }
+    }
+
+    /* Now extract the MKI value as a sanity check, but discard it for now */
+    if (!PACKET_get_1(pkt, &mki_len)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_USE_SRTP,
+                 SSL_R_BAD_SRTP_PROTECTION_PROFILE_LIST);
+        return 0;
+    }
+
+    if (!PACKET_forward(pkt, mki_len)
+        || PACKET_remaining(pkt)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_USE_SRTP,
+                 SSL_R_BAD_SRTP_MKI_VALUE);
+        return 0;
+    }
+
+    return 1;
+}
+#endif
+
+int tls_parse_ctos_etm(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx)
+{
+    if (!(s->options & SSL_OP_NO_ENCRYPT_THEN_MAC))
+        s->ext.use_etm = 1;
+
+    return 1;
+}
+
+/*
+ * Process a psk_kex_modes extension received in the ClientHello. |pkt| contains
+ * the raw PACKET data for the extension. Returns 1 on success or 0 on failure.
+ */
+int tls_parse_ctos_psk_kex_modes(SSL *s, PACKET *pkt, unsigned int context,
+                                 X509 *x, size_t chainidx)
+{
+#ifndef OPENSSL_NO_TLS1_3
+    PACKET psk_kex_modes;
+    unsigned int mode;
+
+    if (!PACKET_as_length_prefixed_1(pkt, &psk_kex_modes)
+            || PACKET_remaining(&psk_kex_modes) == 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_PSK_KEX_MODES,
+                 SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    while (PACKET_get_1(&psk_kex_modes, &mode)) {
+        if (mode == TLSEXT_KEX_MODE_KE_DHE)
+            s->ext.psk_kex_mode |= TLSEXT_KEX_MODE_FLAG_KE_DHE;
+        else if (mode == TLSEXT_KEX_MODE_KE
+                && (s->options & SSL_OP_ALLOW_NO_DHE_KEX) != 0)
+            s->ext.psk_kex_mode |= TLSEXT_KEX_MODE_FLAG_KE;
+    }
+#endif
+
+    return 1;
+}
+
+/*
+ * Process a key_share extension received in the ClientHello. |pkt| contains
+ * the raw PACKET data for the extension. Returns 1 on success or 0 on failure.
+ */
+int tls_parse_ctos_key_share(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                             size_t chainidx)
+{
+#ifndef OPENSSL_NO_TLS1_3
+    unsigned int group_id;
+    PACKET key_share_list, encoded_pt;
+    const uint16_t *clntgroups, *srvrgroups;
+    size_t clnt_num_groups, srvr_num_groups;
+    int found = 0;
+
+    if (s->hit && (s->ext.psk_kex_mode & TLSEXT_KEX_MODE_FLAG_KE_DHE) == 0)
+        return 1;
+
+    /* Sanity check */
+    if (s->s3->peer_tmp != NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_CTOS_KEY_SHARE,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (!PACKET_as_length_prefixed_2(pkt, &key_share_list)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_KEY_SHARE,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+
+    /* Get our list of supported groups */
+    tls1_get_supported_groups(s, &srvrgroups, &srvr_num_groups);
+    /* Get the clients list of supported groups. */
+    tls1_get_peer_groups(s, &clntgroups, &clnt_num_groups);
+    if (clnt_num_groups == 0) {
+        /*
+         * This can only happen if the supported_groups extension was not sent,
+         * because we verify that the length is non-zero when we process that
+         * extension.
+         */
+        SSLfatal(s, SSL_AD_MISSING_EXTENSION, SSL_F_TLS_PARSE_CTOS_KEY_SHARE,
+                 SSL_R_MISSING_SUPPORTED_GROUPS_EXTENSION);
+        return 0;
+    }
+
+    if (s->s3->group_id != 0 && PACKET_remaining(&key_share_list) == 0) {
+        /*
+         * If we set a group_id already, then we must have sent an HRR
+         * requesting a new key_share. If we haven't got one then that is an
+         * error
+         */
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PARSE_CTOS_KEY_SHARE,
+                 SSL_R_BAD_KEY_SHARE);
+        return 0;
+    }
+
+    while (PACKET_remaining(&key_share_list) > 0) {
+        if (!PACKET_get_net_2(&key_share_list, &group_id)
+                || !PACKET_get_length_prefixed_2(&key_share_list, &encoded_pt)
+                || PACKET_remaining(&encoded_pt) == 0) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_KEY_SHARE,
+                     SSL_R_LENGTH_MISMATCH);
+            return 0;
+        }
+
+        /*
+         * If we already found a suitable key_share we loop through the
+         * rest to verify the structure, but don't process them.
+         */
+        if (found)
+            continue;
+
+        /*
+         * If we sent an HRR then the key_share sent back MUST be for the group
+         * we requested, and must be the only key_share sent.
+         */
+        if (s->s3->group_id != 0
+                && (group_id != s->s3->group_id
+                    || PACKET_remaining(&key_share_list) != 0)) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_TLS_PARSE_CTOS_KEY_SHARE, SSL_R_BAD_KEY_SHARE);
+            return 0;
+        }
+
+        /* Check if this share is in supported_groups sent from client */
+        if (!check_in_list(s, group_id, clntgroups, clnt_num_groups, 0)) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_TLS_PARSE_CTOS_KEY_SHARE, SSL_R_BAD_KEY_SHARE);
+            return 0;
+        }
+
+        /* Check if this share is for a group we can use */
+        if (!check_in_list(s, group_id, srvrgroups, srvr_num_groups, 1)) {
+            /* Share not suitable */
+            continue;
+        }
+
+        if ((s->s3->peer_tmp = ssl_generate_param_group(group_id)) == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_CTOS_KEY_SHARE,
+                   SSL_R_UNABLE_TO_FIND_ECDH_PARAMETERS);
+            return 0;
+        }
+
+        s->s3->group_id = group_id;
+
+        if (!EVP_PKEY_set1_tls_encodedpoint(s->s3->peer_tmp,
+                PACKET_data(&encoded_pt),
+                PACKET_remaining(&encoded_pt))) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_TLS_PARSE_CTOS_KEY_SHARE, SSL_R_BAD_ECPOINT);
+            return 0;
+        }
+
+        found = 1;
+    }
+#endif
+
+    return 1;
+}
+
+int tls_parse_ctos_cookie(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                          size_t chainidx)
+{
+#ifndef OPENSSL_NO_TLS1_3
+    unsigned int format, version, key_share, group_id;
+    EVP_MD_CTX *hctx;
+    EVP_PKEY *pkey;
+    PACKET cookie, raw, chhash, appcookie;
+    WPACKET hrrpkt;
+    const unsigned char *data, *mdin, *ciphdata;
+    unsigned char hmac[SHA256_DIGEST_LENGTH];
+    unsigned char hrr[MAX_HRR_SIZE];
+    size_t rawlen, hmaclen, hrrlen, ciphlen;
+    unsigned long tm, now;
+
+    /* Ignore any cookie if we're not set up to verify it */
+    if (s->ctx->verify_stateless_cookie_cb == NULL
+            || (s->s3->flags & TLS1_FLAGS_STATELESS) == 0)
+        return 1;
+
+    if (!PACKET_as_length_prefixed_2(pkt, &cookie)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+
+    raw = cookie;
+    data = PACKET_data(&raw);
+    rawlen = PACKET_remaining(&raw);
+    if (rawlen < SHA256_DIGEST_LENGTH
+            || !PACKET_forward(&raw, rawlen - SHA256_DIGEST_LENGTH)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+    mdin = PACKET_data(&raw);
+
+    /* Verify the HMAC of the cookie */
+    hctx = EVP_MD_CTX_create();
+    pkey = EVP_PKEY_new_raw_private_key(EVP_PKEY_HMAC, NULL,
+                                        s->session_ctx->ext.cookie_hmac_key,
+                                        sizeof(s->session_ctx->ext
+                                               .cookie_hmac_key));
+    if (hctx == NULL || pkey == NULL) {
+        EVP_MD_CTX_free(hctx);
+        EVP_PKEY_free(pkey);
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    hmaclen = SHA256_DIGEST_LENGTH;
+    if (EVP_DigestSignInit(hctx, NULL, EVP_sha256(), NULL, pkey) <= 0
+            || EVP_DigestSign(hctx, hmac, &hmaclen, data,
+                              rawlen - SHA256_DIGEST_LENGTH) <= 0
+            || hmaclen != SHA256_DIGEST_LENGTH) {
+        EVP_MD_CTX_free(hctx);
+        EVP_PKEY_free(pkey);
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    EVP_MD_CTX_free(hctx);
+    EVP_PKEY_free(pkey);
+
+    if (CRYPTO_memcmp(hmac, mdin, SHA256_DIGEST_LENGTH) != 0) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 SSL_R_COOKIE_MISMATCH);
+        return 0;
+    }
+
+    if (!PACKET_get_net_2(&cookie, &format)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+    /* Check the cookie format is something we recognise. Ignore it if not */
+    if (format != COOKIE_STATE_FORMAT_VERSION)
+        return 1;
+
+    /*
+     * The rest of these checks really shouldn't fail since we have verified the
+     * HMAC above.
+     */
+
+    /* Check the version number is sane */
+    if (!PACKET_get_net_2(&cookie, &version)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+    if (version != TLS1_3_VERSION) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 SSL_R_BAD_PROTOCOL_VERSION_NUMBER);
+        return 0;
+    }
+
+    if (!PACKET_get_net_2(&cookie, &group_id)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+
+    ciphdata = PACKET_data(&cookie);
+    if (!PACKET_forward(&cookie, 2)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+    if (group_id != s->s3->group_id
+            || s->s3->tmp.new_cipher
+               != ssl_get_cipher_by_char(s, ciphdata, 0)) {
+        /*
+         * We chose a different cipher or group id this time around to what is
+         * in the cookie. Something must have changed.
+         */
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 SSL_R_BAD_CIPHER);
+        return 0;
+    }
+
+    if (!PACKET_get_1(&cookie, &key_share)
+            || !PACKET_get_net_4(&cookie, &tm)
+            || !PACKET_get_length_prefixed_2(&cookie, &chhash)
+            || !PACKET_get_length_prefixed_1(&cookie, &appcookie)
+            || PACKET_remaining(&cookie) != SHA256_DIGEST_LENGTH) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+
+    /* We tolerate a cookie age of up to 10 minutes (= 60 * 10 seconds) */
+    now = (unsigned long)time(NULL);
+    if (tm > now || (now - tm) > 600) {
+        /* Cookie is stale. Ignore it */
+        return 1;
+    }
+
+    /* Verify the app cookie */
+    if (s->ctx->verify_stateless_cookie_cb(s, PACKET_data(&appcookie),
+                                     PACKET_remaining(&appcookie)) == 0) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 SSL_R_COOKIE_MISMATCH);
+        return 0;
+    }
+
+    /*
+     * Reconstruct the HRR that we would have sent in response to the original
+     * ClientHello so we can add it to the transcript hash.
+     * Note: This won't work with custom HRR extensions
+     */
+    if (!WPACKET_init_static_len(&hrrpkt, hrr, sizeof(hrr), 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    if (!WPACKET_put_bytes_u8(&hrrpkt, SSL3_MT_SERVER_HELLO)
+            || !WPACKET_start_sub_packet_u24(&hrrpkt)
+            || !WPACKET_put_bytes_u16(&hrrpkt, TLS1_2_VERSION)
+            || !WPACKET_memcpy(&hrrpkt, hrrrandom, SSL3_RANDOM_SIZE)
+            || !WPACKET_sub_memcpy_u8(&hrrpkt, s->tmp_session_id,
+                                      s->tmp_session_id_len)
+            || !s->method->put_cipher_by_char(s->s3->tmp.new_cipher, &hrrpkt,
+                                              &ciphlen)
+            || !WPACKET_put_bytes_u8(&hrrpkt, 0)
+            || !WPACKET_start_sub_packet_u16(&hrrpkt)) {
+        WPACKET_cleanup(&hrrpkt);
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    if (!WPACKET_put_bytes_u16(&hrrpkt, TLSEXT_TYPE_supported_versions)
+            || !WPACKET_start_sub_packet_u16(&hrrpkt)
+            || !WPACKET_put_bytes_u16(&hrrpkt, s->version)
+            || !WPACKET_close(&hrrpkt)) {
+        WPACKET_cleanup(&hrrpkt);
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    if (key_share) {
+        if (!WPACKET_put_bytes_u16(&hrrpkt, TLSEXT_TYPE_key_share)
+                || !WPACKET_start_sub_packet_u16(&hrrpkt)
+                || !WPACKET_put_bytes_u16(&hrrpkt, s->s3->group_id)
+                || !WPACKET_close(&hrrpkt)) {
+            WPACKET_cleanup(&hrrpkt);
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+    }
+    if (!WPACKET_put_bytes_u16(&hrrpkt, TLSEXT_TYPE_cookie)
+            || !WPACKET_start_sub_packet_u16(&hrrpkt)
+            || !WPACKET_sub_memcpy_u16(&hrrpkt, data, rawlen)
+            || !WPACKET_close(&hrrpkt) /* cookie extension */
+            || !WPACKET_close(&hrrpkt) /* extension block */
+            || !WPACKET_close(&hrrpkt) /* message */
+            || !WPACKET_get_total_written(&hrrpkt, &hrrlen)
+            || !WPACKET_finish(&hrrpkt)) {
+        WPACKET_cleanup(&hrrpkt);
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_CTOS_COOKIE,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    /* Reconstruct the transcript hash */
+    if (!create_synthetic_message_hash(s, PACKET_data(&chhash),
+                                       PACKET_remaining(&chhash), hrr,
+                                       hrrlen)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    /* Act as if this ClientHello came after a HelloRetryRequest */
+    s->hello_retry_request = 1;
+
+    s->ext.cookieok = 1;
+#endif
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_EC
+int tls_parse_ctos_supported_groups(SSL *s, PACKET *pkt, unsigned int context,
+                                    X509 *x, size_t chainidx)
+{
+    PACKET supported_groups_list;
+
+    /* Each group is 2 bytes and we must have at least 1. */
+    if (!PACKET_as_length_prefixed_2(pkt, &supported_groups_list)
+            || PACKET_remaining(&supported_groups_list) == 0
+            || (PACKET_remaining(&supported_groups_list) % 2) != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PARSE_CTOS_SUPPORTED_GROUPS, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    if (!s->hit || SSL_IS_TLS13(s)) {
+        OPENSSL_free(s->session->ext.supportedgroups);
+        s->session->ext.supportedgroups = NULL;
+        s->session->ext.supportedgroups_len = 0;
+        if (!tls1_save_u16(&supported_groups_list,
+                           &s->session->ext.supportedgroups,
+                           &s->session->ext.supportedgroups_len)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_PARSE_CTOS_SUPPORTED_GROUPS,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+    }
+
+    return 1;
+}
+#endif
+
+int tls_parse_ctos_ems(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx)
+{
+    /* The extension must always be empty */
+    if (PACKET_remaining(pkt) != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PARSE_CTOS_EMS, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    s->s3->flags |= TLS1_FLAGS_RECEIVED_EXTMS;
+
+    return 1;
+}
+
+
+int tls_parse_ctos_early_data(SSL *s, PACKET *pkt, unsigned int context,
+                              X509 *x, size_t chainidx)
+{
+    if (PACKET_remaining(pkt) != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PARSE_CTOS_EARLY_DATA, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    if (s->hello_retry_request != SSL_HRR_NONE) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                 SSL_F_TLS_PARSE_CTOS_EARLY_DATA, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    return 1;
+}
+
+static SSL_TICKET_STATUS tls_get_stateful_ticket(SSL *s, PACKET *tick,
+                                                 SSL_SESSION **sess)
+{
+    SSL_SESSION *tmpsess = NULL;
+
+    s->ext.ticket_expected = 1;
+
+    switch (PACKET_remaining(tick)) {
+        case 0:
+            return SSL_TICKET_EMPTY;
+
+        case SSL_MAX_SSL_SESSION_ID_LENGTH:
+            break;
+
+        default:
+            return SSL_TICKET_NO_DECRYPT;
+    }
+
+    tmpsess = lookup_sess_in_cache(s, PACKET_data(tick),
+                                   SSL_MAX_SSL_SESSION_ID_LENGTH);
+
+    if (tmpsess == NULL)
+        return SSL_TICKET_NO_DECRYPT;
+
+    *sess = tmpsess;
+    return SSL_TICKET_SUCCESS;
+}
+
+int tls_parse_ctos_psk(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx)
+{
+    PACKET identities, binders, binder;
+    size_t binderoffset, hashsize;
+    SSL_SESSION *sess = NULL;
+    unsigned int id, i, ext = 0;
+    const EVP_MD *md = NULL;
+
+    /*
+     * If we have no PSK kex mode that we recognise then we can't resume so
+     * ignore this extension
+     */
+    if ((s->ext.psk_kex_mode
+            & (TLSEXT_KEX_MODE_FLAG_KE | TLSEXT_KEX_MODE_FLAG_KE_DHE)) == 0)
+        return 1;
+
+    if (!PACKET_get_length_prefixed_2(pkt, &identities)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PARSE_CTOS_PSK, SSL_R_BAD_EXTENSION);
+        return 0;
+    }
+
+    s->ext.ticket_expected = 0;
+    for (id = 0; PACKET_remaining(&identities) != 0; id++) {
+        PACKET identity;
+        unsigned long ticket_agel;
+        size_t idlen;
+
+        if (!PACKET_get_length_prefixed_2(&identities, &identity)
+                || !PACKET_get_net_4(&identities, &ticket_agel)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PARSE_CTOS_PSK, SSL_R_BAD_EXTENSION);
+            return 0;
+        }
+
+        idlen = PACKET_remaining(&identity);
+        if (s->psk_find_session_cb != NULL
+                && !s->psk_find_session_cb(s, PACKET_data(&identity), idlen,
+                                           &sess)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_PARSE_CTOS_PSK, SSL_R_BAD_EXTENSION);
+            return 0;
+        }
+
+#ifndef OPENSSL_NO_PSK
+        if(sess == NULL
+                && s->psk_server_callback != NULL
+                && idlen <= PSK_MAX_IDENTITY_LEN) {
+            char *pskid = NULL;
+            unsigned char pskdata[PSK_MAX_PSK_LEN];
+            unsigned int pskdatalen;
+
+            if (!PACKET_strndup(&identity, &pskid)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_CTOS_PSK,
+                         ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+            pskdatalen = s->psk_server_callback(s, pskid, pskdata,
+                                                sizeof(pskdata));
+            OPENSSL_free(pskid);
+            if (pskdatalen > PSK_MAX_PSK_LEN) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_CTOS_PSK,
+                         ERR_R_INTERNAL_ERROR);
+                return 0;
+            } else if (pskdatalen > 0) {
+                const SSL_CIPHER *cipher;
+                const unsigned char tls13_aes128gcmsha256_id[] = { 0x13, 0x01 };
+
+                /*
+                 * We found a PSK using an old style callback. We don't know
+                 * the digest so we default to SHA256 as per the TLSv1.3 spec
+                 */
+                cipher = SSL_CIPHER_find(s, tls13_aes128gcmsha256_id);
+                if (cipher == NULL) {
+                    OPENSSL_cleanse(pskdata, pskdatalen);
+                    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_CTOS_PSK,
+                             ERR_R_INTERNAL_ERROR);
+                    return 0;
+                }
+
+                sess = SSL_SESSION_new();
+                if (sess == NULL
+                        || !SSL_SESSION_set1_master_key(sess, pskdata,
+                                                        pskdatalen)
+                        || !SSL_SESSION_set_cipher(sess, cipher)
+                        || !SSL_SESSION_set_protocol_version(sess,
+                                                             TLS1_3_VERSION)) {
+                    OPENSSL_cleanse(pskdata, pskdatalen);
+                    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PARSE_CTOS_PSK,
+                             ERR_R_INTERNAL_ERROR);
+                    goto err;
+                }
+                OPENSSL_cleanse(pskdata, pskdatalen);
+            }
+        }
+#endif /* OPENSSL_NO_PSK */
+
+        if (sess != NULL) {
+            /* We found a PSK */
+            SSL_SESSION *sesstmp = ssl_session_dup(sess, 0);
+
+            if (sesstmp == NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_PARSE_CTOS_PSK, ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+            SSL_SESSION_free(sess);
+            sess = sesstmp;
+
+            /*
+             * We've just been told to use this session for this context so
+             * make sure the sid_ctx matches up.
+             */
+            memcpy(sess->sid_ctx, s->sid_ctx, s->sid_ctx_length);
+            sess->sid_ctx_length = s->sid_ctx_length;
+            ext = 1;
+            if (id == 0)
+                s->ext.early_data_ok = 1;
+            s->ext.ticket_expected = 1;
+        } else {
+            uint32_t ticket_age = 0, now, agesec, agems;
+            int ret;
+
+            /*
+             * If we are using anti-replay protection then we behave as if
+             * SSL_OP_NO_TICKET is set - we are caching tickets anyway so there
+             * is no point in using full stateless tickets.
+             */
+            if ((s->options & SSL_OP_NO_TICKET) != 0
+                    || (s->max_early_data > 0
+                        && (s->options & SSL_OP_NO_ANTI_REPLAY) == 0))
+                ret = tls_get_stateful_ticket(s, &identity, &sess);
+            else
+                ret = tls_decrypt_ticket(s, PACKET_data(&identity),
+                                         PACKET_remaining(&identity), NULL, 0,
+                                         &sess);
+
+            if (ret == SSL_TICKET_EMPTY) {
+                SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_PSK,
+                         SSL_R_BAD_EXTENSION);
+                return 0;
+            }
+
+            if (ret == SSL_TICKET_FATAL_ERR_MALLOC
+                    || ret == SSL_TICKET_FATAL_ERR_OTHER) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_PARSE_CTOS_PSK, ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+            if (ret == SSL_TICKET_NONE || ret == SSL_TICKET_NO_DECRYPT)
+                continue;
+
+            /* Check for replay */
+            if (s->max_early_data > 0
+                    && (s->options & SSL_OP_NO_ANTI_REPLAY) == 0
+                    && !SSL_CTX_remove_session(s->session_ctx, sess)) {
+                SSL_SESSION_free(sess);
+                sess = NULL;
+                continue;
+            }
+
+            ticket_age = (uint32_t)ticket_agel;
+            now = (uint32_t)time(NULL);
+            agesec = now - (uint32_t)sess->time;
+            agems = agesec * (uint32_t)1000;
+            ticket_age -= sess->ext.tick_age_add;
+
+            /*
+             * For simplicity we do our age calculations in seconds. If the
+             * client does it in ms then it could appear that their ticket age
+             * is longer than ours (our ticket age calculation should always be
+             * slightly longer than the client's due to the network latency).
+             * Therefore we add 1000ms to our age calculation to adjust for
+             * rounding errors.
+             */
+            if (id == 0
+                    && sess->timeout >= (long)agesec
+                    && agems / (uint32_t)1000 == agesec
+                    && ticket_age <= agems + 1000
+                    && ticket_age + TICKET_AGE_ALLOWANCE >= agems + 1000) {
+                /*
+                 * Ticket age is within tolerance and not expired. We allow it
+                 * for early data
+                 */
+                s->ext.early_data_ok = 1;
+            }
+        }
+
+        md = ssl_md(sess->cipher->algorithm2);
+        if (md != ssl_md(s->s3->tmp.new_cipher->algorithm2)) {
+            /* The ciphersuite is not compatible with this session. */
+            SSL_SESSION_free(sess);
+            sess = NULL;
+            s->ext.early_data_ok = 0;
+            s->ext.ticket_expected = 0;
+            continue;
+        }
+        break;
+    }
+
+    if (sess == NULL)
+        return 1;
+
+    binderoffset = PACKET_data(pkt) - (const unsigned char *)s->init_buf->data;
+    hashsize = EVP_MD_size(md);
+
+    if (!PACKET_get_length_prefixed_2(pkt, &binders)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_PSK,
+                 SSL_R_BAD_EXTENSION);
+        goto err;
+    }
+
+    for (i = 0; i <= id; i++) {
+        if (!PACKET_get_length_prefixed_1(&binders, &binder)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_PSK,
+                     SSL_R_BAD_EXTENSION);
+            goto err;
+        }
+    }
+
+    if (PACKET_remaining(&binder) != hashsize) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_PSK,
+                 SSL_R_BAD_EXTENSION);
+        goto err;
+    }
+    if (tls_psk_do_binder(s, md, (const unsigned char *)s->init_buf->data,
+                          binderoffset, PACKET_data(&binder), NULL, sess, 0,
+                          ext) != 1) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    sess->ext.tick_identity = id;
+
+    SSL_SESSION_free(s->session);
+    s->session = sess;
+    return 1;
+err:
+    SSL_SESSION_free(sess);
+    return 0;
+}
+
+int tls_parse_ctos_post_handshake_auth(SSL *s, PACKET *pkt, unsigned int context,
+                                       X509 *x, size_t chainidx)
+{
+    if (PACKET_remaining(pkt) != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_POST_HANDSHAKE_AUTH,
+                 SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR);
+        return 0;
+    }
+
+    s->post_handshake_auth = SSL_PHA_EXT_RECEIVED;
+
+    return 1;
+}
+
+/*
+ * Add the server's renegotiation binding
+ */
+EXT_RETURN tls_construct_stoc_renegotiate(SSL *s, WPACKET *pkt,
+                                          unsigned int context, X509 *x,
+                                          size_t chainidx)
+{
+    if (!s->s3->send_connection_binding)
+        return EXT_RETURN_NOT_SENT;
+
+    /* Still add this even if SSL_OP_NO_RENEGOTIATION is set */
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_renegotiate)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_start_sub_packet_u8(pkt)
+            || !WPACKET_memcpy(pkt, s->s3->previous_client_finished,
+                               s->s3->previous_client_finished_len)
+            || !WPACKET_memcpy(pkt, s->s3->previous_server_finished,
+                               s->s3->previous_server_finished_len)
+            || !WPACKET_close(pkt)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_RENEGOTIATE,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+EXT_RETURN tls_construct_stoc_server_name(SSL *s, WPACKET *pkt,
+                                          unsigned int context, X509 *x,
+                                          size_t chainidx)
+{
+    if (s->hit || s->servername_done != 1
+            || s->ext.hostname == NULL)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_server_name)
+            || !WPACKET_put_bytes_u16(pkt, 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_SERVER_NAME,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+/* Add/include the server's max fragment len extension into ServerHello */
+EXT_RETURN tls_construct_stoc_maxfragmentlen(SSL *s, WPACKET *pkt,
+                                             unsigned int context, X509 *x,
+                                             size_t chainidx)
+{
+    if (!USE_MAX_FRAGMENT_LENGTH_EXT(s->session))
+        return EXT_RETURN_NOT_SENT;
+
+    /*-
+     * 4 bytes for this extension type and extension length
+     * 1 byte for the Max Fragment Length code value.
+     */
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_max_fragment_length)
+        || !WPACKET_start_sub_packet_u16(pkt)
+        || !WPACKET_put_bytes_u8(pkt, s->session->ext.max_fragment_len_mode)
+        || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_STOC_MAXFRAGMENTLEN, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+#ifndef OPENSSL_NO_EC
+EXT_RETURN tls_construct_stoc_ec_pt_formats(SSL *s, WPACKET *pkt,
+                                            unsigned int context, X509 *x,
+                                            size_t chainidx)
+{
+    unsigned long alg_k = s->s3->tmp.new_cipher->algorithm_mkey;
+    unsigned long alg_a = s->s3->tmp.new_cipher->algorithm_auth;
+    int using_ecc = ((alg_k & SSL_kECDHE) || (alg_a & SSL_aECDSA))
+                    && (s->session->ext.ecpointformats != NULL);
+    const unsigned char *plist;
+    size_t plistlen;
+
+    if (!using_ecc)
+        return EXT_RETURN_NOT_SENT;
+
+    tls1_get_formatlist(s, &plist, &plistlen);
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_ec_point_formats)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_sub_memcpy_u8(pkt, plist, plistlen)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_STOC_EC_PT_FORMATS, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+#endif
+
+#ifndef OPENSSL_NO_EC
+EXT_RETURN tls_construct_stoc_supported_groups(SSL *s, WPACKET *pkt,
+                                               unsigned int context, X509 *x,
+                                               size_t chainidx)
+{
+    const uint16_t *groups;
+    size_t numgroups, i, first = 1;
+
+    /* s->s3->group_id is non zero if we accepted a key_share */
+    if (s->s3->group_id == 0)
+        return EXT_RETURN_NOT_SENT;
+
+    /* Get our list of supported groups */
+    tls1_get_supported_groups(s, &groups, &numgroups);
+    if (numgroups == 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_STOC_SUPPORTED_GROUPS, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    /* Copy group ID if supported */
+    for (i = 0; i < numgroups; i++) {
+        uint16_t group = groups[i];
+
+        if (tls_curve_allowed(s, group, SSL_SECOP_CURVE_SUPPORTED)) {
+            if (first) {
+                /*
+                 * Check if the client is already using our preferred group. If
+                 * so we don't need to add this extension
+                 */
+                if (s->s3->group_id == group)
+                    return EXT_RETURN_NOT_SENT;
+
+                /* Add extension header */
+                if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_supported_groups)
+                           /* Sub-packet for supported_groups extension */
+                        || !WPACKET_start_sub_packet_u16(pkt)
+                        || !WPACKET_start_sub_packet_u16(pkt)) {
+                    SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                             SSL_F_TLS_CONSTRUCT_STOC_SUPPORTED_GROUPS,
+                             ERR_R_INTERNAL_ERROR);
+                    return EXT_RETURN_FAIL;
+                }
+
+                first = 0;
+            }
+            if (!WPACKET_put_bytes_u16(pkt, group)) {
+                    SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                             SSL_F_TLS_CONSTRUCT_STOC_SUPPORTED_GROUPS,
+                             ERR_R_INTERNAL_ERROR);
+                    return EXT_RETURN_FAIL;
+                }
+        }
+    }
+
+    if (!WPACKET_close(pkt) || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_STOC_SUPPORTED_GROUPS,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+#endif
+
+EXT_RETURN tls_construct_stoc_session_ticket(SSL *s, WPACKET *pkt,
+                                             unsigned int context, X509 *x,
+                                             size_t chainidx)
+{
+    if (!s->ext.ticket_expected || !tls_use_ticket(s)) {
+        s->ext.ticket_expected = 0;
+        return EXT_RETURN_NOT_SENT;
+    }
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_session_ticket)
+            || !WPACKET_put_bytes_u16(pkt, 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_STOC_SESSION_TICKET, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+#ifndef OPENSSL_NO_OCSP
+EXT_RETURN tls_construct_stoc_status_request(SSL *s, WPACKET *pkt,
+                                             unsigned int context, X509 *x,
+                                             size_t chainidx)
+{
+    if (!s->ext.status_expected)
+        return EXT_RETURN_NOT_SENT;
+
+    if (SSL_IS_TLS13(s) && chainidx != 0)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_status_request)
+            || !WPACKET_start_sub_packet_u16(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_STOC_STATUS_REQUEST, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    /*
+     * In TLSv1.3 we include the certificate status itself. In <= TLSv1.2 we
+     * send back an empty extension, with the certificate status appearing as a
+     * separate message
+     */
+    if (SSL_IS_TLS13(s) && !tls_construct_cert_status_body(s, pkt)) {
+       /* SSLfatal() already called */
+       return EXT_RETURN_FAIL;
+    }
+    if (!WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_STOC_STATUS_REQUEST, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+#endif
+
+#ifndef OPENSSL_NO_NEXTPROTONEG
+EXT_RETURN tls_construct_stoc_next_proto_neg(SSL *s, WPACKET *pkt,
+                                             unsigned int context, X509 *x,
+                                             size_t chainidx)
+{
+    const unsigned char *npa;
+    unsigned int npalen;
+    int ret;
+    int npn_seen = s->s3->npn_seen;
+
+    s->s3->npn_seen = 0;
+    if (!npn_seen || s->ctx->ext.npn_advertised_cb == NULL)
+        return EXT_RETURN_NOT_SENT;
+
+    ret = s->ctx->ext.npn_advertised_cb(s, &npa, &npalen,
+                                        s->ctx->ext.npn_advertised_cb_arg);
+    if (ret == SSL_TLSEXT_ERR_OK) {
+        if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_next_proto_neg)
+                || !WPACKET_sub_memcpy_u16(pkt, npa, npalen)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_STOC_NEXT_PROTO_NEG,
+                     ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+        }
+        s->s3->npn_seen = 1;
+    }
+
+    return EXT_RETURN_SENT;
+}
+#endif
+
+EXT_RETURN tls_construct_stoc_alpn(SSL *s, WPACKET *pkt, unsigned int context,
+                                   X509 *x, size_t chainidx)
+{
+    if (s->s3->alpn_selected == NULL)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt,
+                TLSEXT_TYPE_application_layer_protocol_negotiation)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_sub_memcpy_u8(pkt, s->s3->alpn_selected,
+                                      s->s3->alpn_selected_len)
+            || !WPACKET_close(pkt)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_STOC_ALPN, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+#ifndef OPENSSL_NO_SRTP
+EXT_RETURN tls_construct_stoc_use_srtp(SSL *s, WPACKET *pkt,
+                                       unsigned int context, X509 *x,
+                                       size_t chainidx)
+{
+    if (s->srtp_profile == NULL)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_use_srtp)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_put_bytes_u16(pkt, 2)
+            || !WPACKET_put_bytes_u16(pkt, s->srtp_profile->id)
+            || !WPACKET_put_bytes_u8(pkt, 0)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_USE_SRTP,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+#endif
+
+EXT_RETURN tls_construct_stoc_etm(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx)
+{
+    if (!s->ext.use_etm)
+        return EXT_RETURN_NOT_SENT;
+
+    /*
+     * Don't use encrypt_then_mac if AEAD or RC4 might want to disable
+     * for other cases too.
+     */
+    if (s->s3->tmp.new_cipher->algorithm_mac == SSL_AEAD
+        || s->s3->tmp.new_cipher->algorithm_enc == SSL_RC4
+        || s->s3->tmp.new_cipher->algorithm_enc == SSL_eGOST2814789CNT
+        || s->s3->tmp.new_cipher->algorithm_enc == SSL_eGOST2814789CNT12) {
+        s->ext.use_etm = 0;
+        return EXT_RETURN_NOT_SENT;
+    }
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_encrypt_then_mac)
+            || !WPACKET_put_bytes_u16(pkt, 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_ETM,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+EXT_RETURN tls_construct_stoc_ems(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx)
+{
+    if ((s->s3->flags & TLS1_FLAGS_RECEIVED_EXTMS) == 0)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_extended_master_secret)
+            || !WPACKET_put_bytes_u16(pkt, 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_EMS,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+EXT_RETURN tls_construct_stoc_supported_versions(SSL *s, WPACKET *pkt,
+                                                 unsigned int context, X509 *x,
+                                                 size_t chainidx)
+{
+    if (!ossl_assert(SSL_IS_TLS13(s))) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_STOC_SUPPORTED_VERSIONS,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_supported_versions)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_put_bytes_u16(pkt, s->version)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_STOC_SUPPORTED_VERSIONS,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+EXT_RETURN tls_construct_stoc_key_share(SSL *s, WPACKET *pkt,
+                                        unsigned int context, X509 *x,
+                                        size_t chainidx)
+{
+#ifndef OPENSSL_NO_TLS1_3
+    unsigned char *encodedPoint;
+    size_t encoded_pt_len = 0;
+    EVP_PKEY *ckey = s->s3->peer_tmp, *skey = NULL;
+
+    if (s->hello_retry_request == SSL_HRR_PENDING) {
+        if (ckey != NULL) {
+            /* Original key_share was acceptable so don't ask for another one */
+            return EXT_RETURN_NOT_SENT;
+        }
+        if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_key_share)
+                || !WPACKET_start_sub_packet_u16(pkt)
+                || !WPACKET_put_bytes_u16(pkt, s->s3->group_id)
+                || !WPACKET_close(pkt)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_STOC_KEY_SHARE,
+                     ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+        }
+
+        return EXT_RETURN_SENT;
+    }
+
+    if (ckey == NULL) {
+        /* No key_share received from client - must be resuming */
+        if (!s->hit || !tls13_generate_handshake_secret(s, NULL, 0)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_STOC_KEY_SHARE, ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+        }
+        return EXT_RETURN_NOT_SENT;
+    }
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_key_share)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_put_bytes_u16(pkt, s->s3->group_id)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_STOC_KEY_SHARE, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    skey = ssl_generate_pkey(ckey);
+    if (skey == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_KEY_SHARE,
+                 ERR_R_MALLOC_FAILURE);
+        return EXT_RETURN_FAIL;
+    }
+
+    /* Generate encoding of server key */
+    encoded_pt_len = EVP_PKEY_get1_tls_encodedpoint(skey, &encodedPoint);
+    if (encoded_pt_len == 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_KEY_SHARE,
+                 ERR_R_EC_LIB);
+        EVP_PKEY_free(skey);
+        return EXT_RETURN_FAIL;
+    }
+
+    if (!WPACKET_sub_memcpy_u16(pkt, encodedPoint, encoded_pt_len)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_KEY_SHARE,
+                 ERR_R_INTERNAL_ERROR);
+        EVP_PKEY_free(skey);
+        OPENSSL_free(encodedPoint);
+        return EXT_RETURN_FAIL;
+    }
+    OPENSSL_free(encodedPoint);
+
+    /* This causes the crypto state to be updated based on the derived keys */
+    s->s3->tmp.pkey = skey;
+    if (ssl_derive(s, skey, ckey, 1) == 0) {
+        /* SSLfatal() already called */
+        return EXT_RETURN_FAIL;
+    }
+    return EXT_RETURN_SENT;
+#else
+    return EXT_RETURN_FAIL;
+#endif
+}
+
+EXT_RETURN tls_construct_stoc_cookie(SSL *s, WPACKET *pkt, unsigned int context,
+                                     X509 *x, size_t chainidx)
+{
+#ifndef OPENSSL_NO_TLS1_3
+    unsigned char *hashval1, *hashval2, *appcookie1, *appcookie2, *cookie;
+    unsigned char *hmac, *hmac2;
+    size_t startlen, ciphlen, totcookielen, hashlen, hmaclen, appcookielen;
+    EVP_MD_CTX *hctx;
+    EVP_PKEY *pkey;
+    int ret = EXT_RETURN_FAIL;
+
+    if ((s->s3->flags & TLS1_FLAGS_STATELESS) == 0)
+        return EXT_RETURN_NOT_SENT;
+
+    if (s->ctx->gen_stateless_cookie_cb == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_COOKIE,
+                 SSL_R_NO_COOKIE_CALLBACK_SET);
+        return EXT_RETURN_FAIL;
+    }
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_cookie)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_get_total_written(pkt, &startlen)
+            || !WPACKET_reserve_bytes(pkt, MAX_COOKIE_SIZE, &cookie)
+            || !WPACKET_put_bytes_u16(pkt, COOKIE_STATE_FORMAT_VERSION)
+            || !WPACKET_put_bytes_u16(pkt, TLS1_3_VERSION)
+            || !WPACKET_put_bytes_u16(pkt, s->s3->group_id)
+            || !s->method->put_cipher_by_char(s->s3->tmp.new_cipher, pkt,
+                                              &ciphlen)
+               /* Is there a key_share extension present in this HRR? */
+            || !WPACKET_put_bytes_u8(pkt, s->s3->peer_tmp == NULL)
+            || !WPACKET_put_bytes_u32(pkt, (unsigned int)time(NULL))
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_reserve_bytes(pkt, EVP_MAX_MD_SIZE, &hashval1)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_COOKIE,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    /*
+     * Get the hash of the initial ClientHello. ssl_handshake_hash() operates
+     * on raw buffers, so we first reserve sufficient bytes (above) and then
+     * subsequently allocate them (below)
+     */
+    if (!ssl3_digest_cached_records(s, 0)
+            || !ssl_handshake_hash(s, hashval1, EVP_MAX_MD_SIZE, &hashlen)) {
+        /* SSLfatal() already called */
+        return EXT_RETURN_FAIL;
+    }
+
+    if (!WPACKET_allocate_bytes(pkt, hashlen, &hashval2)
+            || !ossl_assert(hashval1 == hashval2)
+            || !WPACKET_close(pkt)
+            || !WPACKET_start_sub_packet_u8(pkt)
+            || !WPACKET_reserve_bytes(pkt, SSL_COOKIE_LENGTH, &appcookie1)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_COOKIE,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    /* Generate the application cookie */
+    if (s->ctx->gen_stateless_cookie_cb(s, appcookie1, &appcookielen) == 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_COOKIE,
+                 SSL_R_COOKIE_GEN_CALLBACK_FAILURE);
+        return EXT_RETURN_FAIL;
+    }
+
+    if (!WPACKET_allocate_bytes(pkt, appcookielen, &appcookie2)
+            || !ossl_assert(appcookie1 == appcookie2)
+            || !WPACKET_close(pkt)
+            || !WPACKET_get_total_written(pkt, &totcookielen)
+            || !WPACKET_reserve_bytes(pkt, SHA256_DIGEST_LENGTH, &hmac)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_COOKIE,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+    hmaclen = SHA256_DIGEST_LENGTH;
+
+    totcookielen -= startlen;
+    if (!ossl_assert(totcookielen <= MAX_COOKIE_SIZE - SHA256_DIGEST_LENGTH)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_COOKIE,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    /* HMAC the cookie */
+    hctx = EVP_MD_CTX_create();
+    pkey = EVP_PKEY_new_raw_private_key(EVP_PKEY_HMAC, NULL,
+                                        s->session_ctx->ext.cookie_hmac_key,
+                                        sizeof(s->session_ctx->ext
+                                               .cookie_hmac_key));
+    if (hctx == NULL || pkey == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_COOKIE,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (EVP_DigestSignInit(hctx, NULL, EVP_sha256(), NULL, pkey) <= 0
+            || EVP_DigestSign(hctx, hmac, &hmaclen, cookie,
+                              totcookielen) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_COOKIE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    if (!ossl_assert(totcookielen + hmaclen <= MAX_COOKIE_SIZE)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_COOKIE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    if (!WPACKET_allocate_bytes(pkt, hmaclen, &hmac2)
+            || !ossl_assert(hmac == hmac2)
+            || !ossl_assert(cookie == hmac - totcookielen)
+            || !WPACKET_close(pkt)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_COOKIE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    ret = EXT_RETURN_SENT;
+
+ err:
+    EVP_MD_CTX_free(hctx);
+    EVP_PKEY_free(pkey);
+    return ret;
+#else
+    return EXT_RETURN_FAIL;
+#endif
+}
+
+EXT_RETURN tls_construct_stoc_cryptopro_bug(SSL *s, WPACKET *pkt,
+                                            unsigned int context, X509 *x,
+                                            size_t chainidx)
+{
+    const unsigned char cryptopro_ext[36] = {
+        0xfd, 0xe8,         /* 65000 */
+        0x00, 0x20,         /* 32 bytes length */
+        0x30, 0x1e, 0x30, 0x08, 0x06, 0x06, 0x2a, 0x85,
+        0x03, 0x02, 0x02, 0x09, 0x30, 0x08, 0x06, 0x06,
+        0x2a, 0x85, 0x03, 0x02, 0x02, 0x16, 0x30, 0x08,
+        0x06, 0x06, 0x2a, 0x85, 0x03, 0x02, 0x02, 0x17
+    };
+
+    if (((s->s3->tmp.new_cipher->id & 0xFFFF) != 0x80
+         && (s->s3->tmp.new_cipher->id & 0xFFFF) != 0x81)
+            || (SSL_get_options(s) & SSL_OP_CRYPTOPRO_TLSEXT_BUG) == 0)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_memcpy(pkt, cryptopro_ext, sizeof(cryptopro_ext))) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_STOC_CRYPTOPRO_BUG, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+EXT_RETURN tls_construct_stoc_early_data(SSL *s, WPACKET *pkt,
+                                         unsigned int context, X509 *x,
+                                         size_t chainidx)
+{
+    if (context == SSL_EXT_TLS1_3_NEW_SESSION_TICKET) {
+        if (s->max_early_data == 0)
+            return EXT_RETURN_NOT_SENT;
+
+        if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_early_data)
+                || !WPACKET_start_sub_packet_u16(pkt)
+                || !WPACKET_put_bytes_u32(pkt, s->max_early_data)
+                || !WPACKET_close(pkt)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_STOC_EARLY_DATA, ERR_R_INTERNAL_ERROR);
+            return EXT_RETURN_FAIL;
+        }
+
+        return EXT_RETURN_SENT;
+    }
+
+    if (s->ext.early_data != SSL_EARLY_DATA_ACCEPTED)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_early_data)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_STOC_EARLY_DATA,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
+
+EXT_RETURN tls_construct_stoc_psk(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx)
+{
+    if (!s->hit)
+        return EXT_RETURN_NOT_SENT;
+
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_psk)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_put_bytes_u16(pkt, s->session->ext.tick_identity)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_STOC_PSK, ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    return EXT_RETURN_SENT;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem.c b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem.c
new file mode 100644
index 000000000..e3c5ec003
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem.c
@@ -0,0 +1,972 @@
+/*
+ * Copyright 2015-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "internal/cryptlib.h"
+#include <openssl/rand.h>
+#include "../ssl_locl.h"
+#include "statem_locl.h"
+#include <assert.h>
+
+/*
+ * This file implements the SSL/TLS/DTLS state machines.
+ *
+ * There are two primary state machines:
+ *
+ * 1) Message flow state machine
+ * 2) Handshake state machine
+ *
+ * The Message flow state machine controls the reading and sending of messages
+ * including handling of non-blocking IO events, flushing of the underlying
+ * write BIO, handling unexpected messages, etc. It is itself broken into two
+ * separate sub-state machines which control reading and writing respectively.
+ *
+ * The Handshake state machine keeps track of the current SSL/TLS handshake
+ * state. Transitions of the handshake state are the result of events that
+ * occur within the Message flow state machine.
+ *
+ * Overall it looks like this:
+ *
+ * ---------------------------------------------            -------------------
+ * |                                           |            |                 |
+ * | Message flow state machine                |            |                 |
+ * |                                           |            |                 |
+ * | -------------------- -------------------- | Transition | Handshake state |
+ * | | MSG_FLOW_READING | | MSG_FLOW_WRITING | | Event      | machine         |
+ * | | sub-state        | | sub-state        | |----------->|                 |
+ * | | machine for      | | machine for      | |            |                 |
+ * | | reading messages | | writing messages | |            |                 |
+ * | -------------------- -------------------- |            |                 |
+ * |                                           |            |                 |
+ * ---------------------------------------------            -------------------
+ *
+ */
+
+/* Sub state machine return values */
+typedef enum {
+    /* Something bad happened or NBIO */
+    SUB_STATE_ERROR,
+    /* Sub state finished go to the next sub state */
+    SUB_STATE_FINISHED,
+    /* Sub state finished and handshake was completed */
+    SUB_STATE_END_HANDSHAKE
+} SUB_STATE_RETURN;
+
+static int state_machine(SSL *s, int server);
+static void init_read_state_machine(SSL *s);
+static SUB_STATE_RETURN read_state_machine(SSL *s);
+static void init_write_state_machine(SSL *s);
+static SUB_STATE_RETURN write_state_machine(SSL *s);
+
+OSSL_HANDSHAKE_STATE SSL_get_state(const SSL *ssl)
+{
+    return ssl->statem.hand_state;
+}
+
+int SSL_in_init(const SSL *s)
+{
+    return s->statem.in_init;
+}
+
+int SSL_is_init_finished(const SSL *s)
+{
+    return !(s->statem.in_init) && (s->statem.hand_state == TLS_ST_OK);
+}
+
+int SSL_in_before(const SSL *s)
+{
+    /*
+     * Historically being "in before" meant before anything had happened. In the
+     * current code though we remain in the "before" state for a while after we
+     * have started the handshake process (e.g. as a server waiting for the
+     * first message to arrive). There "in before" is taken to mean "in before"
+     * and not started any handshake process yet.
+     */
+    return (s->statem.hand_state == TLS_ST_BEFORE)
+        && (s->statem.state == MSG_FLOW_UNINITED);
+}
+
+/*
+ * Clear the state machine state and reset back to MSG_FLOW_UNINITED
+ */
+void ossl_statem_clear(SSL *s)
+{
+    s->statem.state = MSG_FLOW_UNINITED;
+    s->statem.hand_state = TLS_ST_BEFORE;
+    s->statem.in_init = 1;
+    s->statem.no_cert_verify = 0;
+}
+
+/*
+ * Set the state machine up ready for a renegotiation handshake
+ */
+void ossl_statem_set_renegotiate(SSL *s)
+{
+    s->statem.in_init = 1;
+    s->statem.request_state = TLS_ST_SW_HELLO_REQ;
+}
+
+/*
+ * Put the state machine into an error state and send an alert if appropriate.
+ * This is a permanent error for the current connection.
+ */
+void ossl_statem_fatal(SSL *s, int al, int func, int reason, const char *file,
+                       int line)
+{
+    ERR_put_error(ERR_LIB_SSL, func, reason, file, line);
+    /* We shouldn't call SSLfatal() twice. Once is enough */
+    if (s->statem.in_init && s->statem.state == MSG_FLOW_ERROR)
+      return;
+    s->statem.in_init = 1;
+    s->statem.state = MSG_FLOW_ERROR;
+    if (al != SSL_AD_NO_ALERT
+            && s->statem.enc_write_state != ENC_WRITE_STATE_INVALID)
+        ssl3_send_alert(s, SSL3_AL_FATAL, al);
+}
+
+/*
+ * This macro should only be called if we are already expecting to be in
+ * a fatal error state. We verify that we are, and set it if not (this would
+ * indicate a bug).
+ */
+#define check_fatal(s, f) \
+    do { \
+        if (!ossl_assert((s)->statem.in_init \
+                         && (s)->statem.state == MSG_FLOW_ERROR)) \
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, (f), \
+                     SSL_R_MISSING_FATAL); \
+    } while (0)
+
+/*
+ * Discover whether the current connection is in the error state.
+ *
+ * Valid return values are:
+ *   1: Yes
+ *   0: No
+ */
+int ossl_statem_in_error(const SSL *s)
+{
+    if (s->statem.state == MSG_FLOW_ERROR)
+        return 1;
+
+    return 0;
+}
+
+void ossl_statem_set_in_init(SSL *s, int init)
+{
+    s->statem.in_init = init;
+}
+
+int ossl_statem_get_in_handshake(SSL *s)
+{
+    return s->statem.in_handshake;
+}
+
+void ossl_statem_set_in_handshake(SSL *s, int inhand)
+{
+    if (inhand)
+        s->statem.in_handshake++;
+    else
+        s->statem.in_handshake--;
+}
+
+/* Are we in a sensible state to skip over unreadable early data? */
+int ossl_statem_skip_early_data(SSL *s)
+{
+    if (s->ext.early_data != SSL_EARLY_DATA_REJECTED)
+        return 0;
+
+    if (!s->server
+            || s->statem.hand_state != TLS_ST_EARLY_DATA
+            || s->hello_retry_request == SSL_HRR_COMPLETE)
+        return 0;
+
+    return 1;
+}
+
+/*
+ * Called when we are in SSL_read*(), SSL_write*(), or SSL_accept()
+ * /SSL_connect()/SSL_do_handshake(). Used to test whether we are in an early
+ * data state and whether we should attempt to move the handshake on if so.
+ * |sending| is 1 if we are attempting to send data (SSL_write*()), 0 if we are
+ * attempting to read data (SSL_read*()), or -1 if we are in SSL_do_handshake()
+ * or similar.
+ */
+void ossl_statem_check_finish_init(SSL *s, int sending)
+{
+    if (sending == -1) {
+        if (s->statem.hand_state == TLS_ST_PENDING_EARLY_DATA_END
+                || s->statem.hand_state == TLS_ST_EARLY_DATA) {
+            ossl_statem_set_in_init(s, 1);
+            if (s->early_data_state == SSL_EARLY_DATA_WRITE_RETRY) {
+                /*
+                 * SSL_connect() or SSL_do_handshake() has been called directly.
+                 * We don't allow any more writing of early data.
+                 */
+                s->early_data_state = SSL_EARLY_DATA_FINISHED_WRITING;
+            }
+        }
+    } else if (!s->server) {
+        if ((sending && (s->statem.hand_state == TLS_ST_PENDING_EARLY_DATA_END
+                      || s->statem.hand_state == TLS_ST_EARLY_DATA)
+                  && s->early_data_state != SSL_EARLY_DATA_WRITING)
+                || (!sending && s->statem.hand_state == TLS_ST_EARLY_DATA)) {
+            ossl_statem_set_in_init(s, 1);
+            /*
+             * SSL_write() has been called directly. We don't allow any more
+             * writing of early data.
+             */
+            if (sending && s->early_data_state == SSL_EARLY_DATA_WRITE_RETRY)
+                s->early_data_state = SSL_EARLY_DATA_FINISHED_WRITING;
+        }
+    } else {
+        if (s->early_data_state == SSL_EARLY_DATA_FINISHED_READING
+                && s->statem.hand_state == TLS_ST_EARLY_DATA)
+            ossl_statem_set_in_init(s, 1);
+    }
+}
+
+void ossl_statem_set_hello_verify_done(SSL *s)
+{
+    s->statem.state = MSG_FLOW_UNINITED;
+    s->statem.in_init = 1;
+    /*
+     * This will get reset (briefly) back to TLS_ST_BEFORE when we enter
+     * state_machine() because |state| is MSG_FLOW_UNINITED, but until then any
+     * calls to SSL_in_before() will return false. Also calls to
+     * SSL_state_string() and SSL_state_string_long() will return something
+     * sensible.
+     */
+    s->statem.hand_state = TLS_ST_SR_CLNT_HELLO;
+}
+
+int ossl_statem_connect(SSL *s)
+{
+    return state_machine(s, 0);
+}
+
+int ossl_statem_accept(SSL *s)
+{
+    return state_machine(s, 1);
+}
+
+typedef void (*info_cb) (const SSL *, int, int);
+
+static info_cb get_callback(SSL *s)
+{
+    if (s->info_callback != NULL)
+        return s->info_callback;
+    else if (s->ctx->info_callback != NULL)
+        return s->ctx->info_callback;
+
+    return NULL;
+}
+
+/*
+ * The main message flow state machine. We start in the MSG_FLOW_UNINITED or
+ * MSG_FLOW_FINISHED state and finish in MSG_FLOW_FINISHED. Valid states and
+ * transitions are as follows:
+ *
+ * MSG_FLOW_UNINITED     MSG_FLOW_FINISHED
+ *        |                       |
+ *        +-----------------------+
+ *        v
+ * MSG_FLOW_WRITING <---> MSG_FLOW_READING
+ *        |
+ *        V
+ * MSG_FLOW_FINISHED
+ *        |
+ *        V
+ *    [SUCCESS]
+ *
+ * We may exit at any point due to an error or NBIO event. If an NBIO event
+ * occurs then we restart at the point we left off when we are recalled.
+ * MSG_FLOW_WRITING and MSG_FLOW_READING have sub-state machines associated with them.
+ *
+ * In addition to the above there is also the MSG_FLOW_ERROR state. We can move
+ * into that state at any point in the event that an irrecoverable error occurs.
+ *
+ * Valid return values are:
+ *   1: Success
+ * <=0: NBIO or error
+ */
+static int state_machine(SSL *s, int server)
+{
+    BUF_MEM *buf = NULL;
+    void (*cb) (const SSL *ssl, int type, int val) = NULL;
+    OSSL_STATEM *st = &s->statem;
+    int ret = -1;
+    int ssret;
+
+    if (st->state == MSG_FLOW_ERROR) {
+        /* Shouldn't have been called if we're already in the error state */
+        return -1;
+    }
+
+    ERR_clear_error();
+    clear_sys_error();
+
+    cb = get_callback(s);
+
+    st->in_handshake++;
+    if (!SSL_in_init(s) || SSL_in_before(s)) {
+        /*
+         * If we are stateless then we already called SSL_clear() - don't do
+         * it again and clear the STATELESS flag itself.
+         */
+        if ((s->s3->flags & TLS1_FLAGS_STATELESS) == 0 && !SSL_clear(s))
+            return -1;
+    }
+#ifndef OPENSSL_NO_SCTP
+    if (SSL_IS_DTLS(s) && BIO_dgram_is_sctp(SSL_get_wbio(s))) {
+        /*
+         * Notify SCTP BIO socket to enter handshake mode and prevent stream
+         * identifier other than 0.
+         */
+        BIO_ctrl(SSL_get_wbio(s), BIO_CTRL_DGRAM_SCTP_SET_IN_HANDSHAKE,
+                 st->in_handshake, NULL);
+    }
+#endif
+
+    /* Initialise state machine */
+    if (st->state == MSG_FLOW_UNINITED
+            || st->state == MSG_FLOW_FINISHED) {
+        if (st->state == MSG_FLOW_UNINITED) {
+            st->hand_state = TLS_ST_BEFORE;
+            st->request_state = TLS_ST_BEFORE;
+        }
+
+        s->server = server;
+        if (cb != NULL) {
+            if (SSL_IS_FIRST_HANDSHAKE(s) || !SSL_IS_TLS13(s))
+                cb(s, SSL_CB_HANDSHAKE_START, 1);
+        }
+
+        /*
+         * Fatal errors in this block don't send an alert because we have
+         * failed to even initialise properly. Sending an alert is probably
+         * doomed to failure.
+         */
+
+        if (SSL_IS_DTLS(s)) {
+            if ((s->version & 0xff00) != (DTLS1_VERSION & 0xff00) &&
+                (server || (s->version & 0xff00) != (DTLS1_BAD_VER & 0xff00))) {
+                SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_STATE_MACHINE,
+                         ERR_R_INTERNAL_ERROR);
+                goto end;
+            }
+        } else {
+            if ((s->version >> 8) != SSL3_VERSION_MAJOR) {
+                SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_STATE_MACHINE,
+                         ERR_R_INTERNAL_ERROR);
+                goto end;
+            }
+        }
+
+        if (!ssl_security(s, SSL_SECOP_VERSION, 0, s->version, NULL)) {
+            SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_STATE_MACHINE,
+                     ERR_R_INTERNAL_ERROR);
+            goto end;
+        }
+
+        if (s->init_buf == NULL) {
+            if ((buf = BUF_MEM_new()) == NULL) {
+                SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_STATE_MACHINE,
+                         ERR_R_INTERNAL_ERROR);
+                goto end;
+            }
+            if (!BUF_MEM_grow(buf, SSL3_RT_MAX_PLAIN_LENGTH)) {
+                SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_STATE_MACHINE,
+                         ERR_R_INTERNAL_ERROR);
+                goto end;
+            }
+            s->init_buf = buf;
+            buf = NULL;
+        }
+
+        if (!ssl3_setup_buffers(s)) {
+            SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_STATE_MACHINE,
+                     ERR_R_INTERNAL_ERROR);
+            goto end;
+        }
+        s->init_num = 0;
+
+        /*
+         * Should have been reset by tls_process_finished, too.
+         */
+        s->s3->change_cipher_spec = 0;
+
+        /*
+         * Ok, we now need to push on a buffering BIO ...but not with
+         * SCTP
+         */
+#ifndef OPENSSL_NO_SCTP
+        if (!SSL_IS_DTLS(s) || !BIO_dgram_is_sctp(SSL_get_wbio(s)))
+#endif
+            if (!ssl_init_wbio_buffer(s)) {
+                SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_STATE_MACHINE,
+                         ERR_R_INTERNAL_ERROR);
+                goto end;
+            }
+
+        if ((SSL_in_before(s))
+                || s->renegotiate) {
+            if (!tls_setup_handshake(s)) {
+                /* SSLfatal() already called */
+                goto end;
+            }
+
+            if (SSL_IS_FIRST_HANDSHAKE(s))
+                st->read_state_first_init = 1;
+        }
+
+        st->state = MSG_FLOW_WRITING;
+        init_write_state_machine(s);
+    }
+
+    while (st->state != MSG_FLOW_FINISHED) {
+        if (st->state == MSG_FLOW_READING) {
+            ssret = read_state_machine(s);
+            if (ssret == SUB_STATE_FINISHED) {
+                st->state = MSG_FLOW_WRITING;
+                init_write_state_machine(s);
+            } else {
+                /* NBIO or error */
+                goto end;
+            }
+        } else if (st->state == MSG_FLOW_WRITING) {
+            ssret = write_state_machine(s);
+            if (ssret == SUB_STATE_FINISHED) {
+                st->state = MSG_FLOW_READING;
+                init_read_state_machine(s);
+            } else if (ssret == SUB_STATE_END_HANDSHAKE) {
+                st->state = MSG_FLOW_FINISHED;
+            } else {
+                /* NBIO or error */
+                goto end;
+            }
+        } else {
+            /* Error */
+            check_fatal(s, SSL_F_STATE_MACHINE);
+            SSLerr(SSL_F_STATE_MACHINE, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+            goto end;
+        }
+    }
+
+    ret = 1;
+
+ end:
+    st->in_handshake--;
+
+#ifndef OPENSSL_NO_SCTP
+    if (SSL_IS_DTLS(s) && BIO_dgram_is_sctp(SSL_get_wbio(s))) {
+        /*
+         * Notify SCTP BIO socket to leave handshake mode and allow stream
+         * identifier other than 0.
+         */
+        BIO_ctrl(SSL_get_wbio(s), BIO_CTRL_DGRAM_SCTP_SET_IN_HANDSHAKE,
+                 st->in_handshake, NULL);
+    }
+#endif
+
+    BUF_MEM_free(buf);
+    if (cb != NULL) {
+        if (server)
+            cb(s, SSL_CB_ACCEPT_EXIT, ret);
+        else
+            cb(s, SSL_CB_CONNECT_EXIT, ret);
+    }
+    return ret;
+}
+
+/*
+ * Initialise the MSG_FLOW_READING sub-state machine
+ */
+static void init_read_state_machine(SSL *s)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    st->read_state = READ_STATE_HEADER;
+}
+
+static int grow_init_buf(SSL *s, size_t size) {
+
+    size_t msg_offset = (char *)s->init_msg - s->init_buf->data;
+
+    if (!BUF_MEM_grow_clean(s->init_buf, (int)size))
+        return 0;
+
+    if (size < msg_offset)
+        return 0;
+
+    s->init_msg = s->init_buf->data + msg_offset;
+
+    return 1;
+}
+
+/*
+ * This function implements the sub-state machine when the message flow is in
+ * MSG_FLOW_READING. The valid sub-states and transitions are:
+ *
+ * READ_STATE_HEADER <--+<-------------+
+ *        |             |              |
+ *        v             |              |
+ * READ_STATE_BODY -----+-->READ_STATE_POST_PROCESS
+ *        |                            |
+ *        +----------------------------+
+ *        v
+ * [SUB_STATE_FINISHED]
+ *
+ * READ_STATE_HEADER has the responsibility for reading in the message header
+ * and transitioning the state of the handshake state machine.
+ *
+ * READ_STATE_BODY reads in the rest of the message and then subsequently
+ * processes it.
+ *
+ * READ_STATE_POST_PROCESS is an optional step that may occur if some post
+ * processing activity performed on the message may block.
+ *
+ * Any of the above states could result in an NBIO event occurring in which case
+ * control returns to the calling application. When this function is recalled we
+ * will resume in the same state where we left off.
+ */
+static SUB_STATE_RETURN read_state_machine(SSL *s)
+{
+    OSSL_STATEM *st = &s->statem;
+    int ret, mt;
+    size_t len = 0;
+    int (*transition) (SSL *s, int mt);
+    PACKET pkt;
+    MSG_PROCESS_RETURN(*process_message) (SSL *s, PACKET *pkt);
+    WORK_STATE(*post_process_message) (SSL *s, WORK_STATE wst);
+    size_t (*max_message_size) (SSL *s);
+    void (*cb) (const SSL *ssl, int type, int val) = NULL;
+
+    cb = get_callback(s);
+
+    if (s->server) {
+        transition = ossl_statem_server_read_transition;
+        process_message = ossl_statem_server_process_message;
+        max_message_size = ossl_statem_server_max_message_size;
+        post_process_message = ossl_statem_server_post_process_message;
+    } else {
+        transition = ossl_statem_client_read_transition;
+        process_message = ossl_statem_client_process_message;
+        max_message_size = ossl_statem_client_max_message_size;
+        post_process_message = ossl_statem_client_post_process_message;
+    }
+
+    if (st->read_state_first_init) {
+        s->first_packet = 1;
+        st->read_state_first_init = 0;
+    }
+
+    while (1) {
+        switch (st->read_state) {
+        case READ_STATE_HEADER:
+            /* Get the state the peer wants to move to */
+            if (SSL_IS_DTLS(s)) {
+                /*
+                 * In DTLS we get the whole message in one go - header and body
+                 */
+                ret = dtls_get_message(s, &mt, &len);
+            } else {
+                ret = tls_get_message_header(s, &mt);
+            }
+
+            if (ret == 0) {
+                /* Could be non-blocking IO */
+                return SUB_STATE_ERROR;
+            }
+
+            if (cb != NULL) {
+                /* Notify callback of an impending state change */
+                if (s->server)
+                    cb(s, SSL_CB_ACCEPT_LOOP, 1);
+                else
+                    cb(s, SSL_CB_CONNECT_LOOP, 1);
+            }
+            /*
+             * Validate that we are allowed to move to the new state and move
+             * to that state if so
+             */
+            if (!transition(s, mt))
+                return SUB_STATE_ERROR;
+
+            if (s->s3->tmp.message_size > max_message_size(s)) {
+                SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_READ_STATE_MACHINE,
+                         SSL_R_EXCESSIVE_MESSAGE_SIZE);
+                return SUB_STATE_ERROR;
+            }
+
+            /* dtls_get_message already did this */
+            if (!SSL_IS_DTLS(s)
+                    && s->s3->tmp.message_size > 0
+                    && !grow_init_buf(s, s->s3->tmp.message_size
+                                         + SSL3_HM_HEADER_LENGTH)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_READ_STATE_MACHINE,
+                         ERR_R_BUF_LIB);
+                return SUB_STATE_ERROR;
+            }
+
+            st->read_state = READ_STATE_BODY;
+            /* Fall through */
+
+        case READ_STATE_BODY:
+            if (!SSL_IS_DTLS(s)) {
+                /* We already got this above for DTLS */
+                ret = tls_get_message_body(s, &len);
+                if (ret == 0) {
+                    /* Could be non-blocking IO */
+                    return SUB_STATE_ERROR;
+                }
+            }
+
+            s->first_packet = 0;
+            if (!PACKET_buf_init(&pkt, s->init_msg, len)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_READ_STATE_MACHINE,
+                         ERR_R_INTERNAL_ERROR);
+                return SUB_STATE_ERROR;
+            }
+            ret = process_message(s, &pkt);
+
+            /* Discard the packet data */
+            s->init_num = 0;
+
+            switch (ret) {
+            case MSG_PROCESS_ERROR:
+                check_fatal(s, SSL_F_READ_STATE_MACHINE);
+                return SUB_STATE_ERROR;
+
+            case MSG_PROCESS_FINISHED_READING:
+                if (SSL_IS_DTLS(s)) {
+                    dtls1_stop_timer(s);
+                }
+                return SUB_STATE_FINISHED;
+
+            case MSG_PROCESS_CONTINUE_PROCESSING:
+                st->read_state = READ_STATE_POST_PROCESS;
+                st->read_state_work = WORK_MORE_A;
+                break;
+
+            default:
+                st->read_state = READ_STATE_HEADER;
+                break;
+            }
+            break;
+
+        case READ_STATE_POST_PROCESS:
+            st->read_state_work = post_process_message(s, st->read_state_work);
+            switch (st->read_state_work) {
+            case WORK_ERROR:
+                check_fatal(s, SSL_F_READ_STATE_MACHINE);
+                /* Fall through */
+            case WORK_MORE_A:
+            case WORK_MORE_B:
+            case WORK_MORE_C:
+                return SUB_STATE_ERROR;
+
+            case WORK_FINISHED_CONTINUE:
+                st->read_state = READ_STATE_HEADER;
+                break;
+
+            case WORK_FINISHED_STOP:
+                if (SSL_IS_DTLS(s)) {
+                    dtls1_stop_timer(s);
+                }
+                return SUB_STATE_FINISHED;
+            }
+            break;
+
+        default:
+            /* Shouldn't happen */
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_READ_STATE_MACHINE,
+                     ERR_R_INTERNAL_ERROR);
+            return SUB_STATE_ERROR;
+        }
+    }
+}
+
+/*
+ * Send a previously constructed message to the peer.
+ */
+static int statem_do_write(SSL *s)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    if (st->hand_state == TLS_ST_CW_CHANGE
+        || st->hand_state == TLS_ST_SW_CHANGE) {
+        if (SSL_IS_DTLS(s))
+            return dtls1_do_write(s, SSL3_RT_CHANGE_CIPHER_SPEC);
+        else
+            return ssl3_do_write(s, SSL3_RT_CHANGE_CIPHER_SPEC);
+    } else {
+        return ssl_do_write(s);
+    }
+}
+
+/*
+ * Initialise the MSG_FLOW_WRITING sub-state machine
+ */
+static void init_write_state_machine(SSL *s)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    st->write_state = WRITE_STATE_TRANSITION;
+}
+
+/*
+ * This function implements the sub-state machine when the message flow is in
+ * MSG_FLOW_WRITING. The valid sub-states and transitions are:
+ *
+ * +-> WRITE_STATE_TRANSITION ------> [SUB_STATE_FINISHED]
+ * |             |
+ * |             v
+ * |      WRITE_STATE_PRE_WORK -----> [SUB_STATE_END_HANDSHAKE]
+ * |             |
+ * |             v
+ * |       WRITE_STATE_SEND
+ * |             |
+ * |             v
+ * |     WRITE_STATE_POST_WORK
+ * |             |
+ * +-------------+
+ *
+ * WRITE_STATE_TRANSITION transitions the state of the handshake state machine
+
+ * WRITE_STATE_PRE_WORK performs any work necessary to prepare the later
+ * sending of the message. This could result in an NBIO event occurring in
+ * which case control returns to the calling application. When this function
+ * is recalled we will resume in the same state where we left off.
+ *
+ * WRITE_STATE_SEND sends the message and performs any work to be done after
+ * sending.
+ *
+ * WRITE_STATE_POST_WORK performs any work necessary after the sending of the
+ * message has been completed. As for WRITE_STATE_PRE_WORK this could also
+ * result in an NBIO event.
+ */
+static SUB_STATE_RETURN write_state_machine(SSL *s)
+{
+    OSSL_STATEM *st = &s->statem;
+    int ret;
+    WRITE_TRAN(*transition) (SSL *s);
+    WORK_STATE(*pre_work) (SSL *s, WORK_STATE wst);
+    WORK_STATE(*post_work) (SSL *s, WORK_STATE wst);
+    int (*get_construct_message_f) (SSL *s, WPACKET *pkt,
+                                    int (**confunc) (SSL *s, WPACKET *pkt),
+                                    int *mt);
+    void (*cb) (const SSL *ssl, int type, int val) = NULL;
+    int (*confunc) (SSL *s, WPACKET *pkt);
+    int mt;
+    WPACKET pkt;
+
+    cb = get_callback(s);
+
+    if (s->server) {
+        transition = ossl_statem_server_write_transition;
+        pre_work = ossl_statem_server_pre_work;
+        post_work = ossl_statem_server_post_work;
+        get_construct_message_f = ossl_statem_server_construct_message;
+    } else {
+        transition = ossl_statem_client_write_transition;
+        pre_work = ossl_statem_client_pre_work;
+        post_work = ossl_statem_client_post_work;
+        get_construct_message_f = ossl_statem_client_construct_message;
+    }
+
+    while (1) {
+        switch (st->write_state) {
+        case WRITE_STATE_TRANSITION:
+            if (cb != NULL) {
+                /* Notify callback of an impending state change */
+                if (s->server)
+                    cb(s, SSL_CB_ACCEPT_LOOP, 1);
+                else
+                    cb(s, SSL_CB_CONNECT_LOOP, 1);
+            }
+            switch (transition(s)) {
+            case WRITE_TRAN_CONTINUE:
+                st->write_state = WRITE_STATE_PRE_WORK;
+                st->write_state_work = WORK_MORE_A;
+                break;
+
+            case WRITE_TRAN_FINISHED:
+                return SUB_STATE_FINISHED;
+                break;
+
+            case WRITE_TRAN_ERROR:
+                check_fatal(s, SSL_F_WRITE_STATE_MACHINE);
+                return SUB_STATE_ERROR;
+            }
+            break;
+
+        case WRITE_STATE_PRE_WORK:
+            switch (st->write_state_work = pre_work(s, st->write_state_work)) {
+            case WORK_ERROR:
+                check_fatal(s, SSL_F_WRITE_STATE_MACHINE);
+                /* Fall through */
+            case WORK_MORE_A:
+            case WORK_MORE_B:
+            case WORK_MORE_C:
+                return SUB_STATE_ERROR;
+
+            case WORK_FINISHED_CONTINUE:
+                st->write_state = WRITE_STATE_SEND;
+                break;
+
+            case WORK_FINISHED_STOP:
+                return SUB_STATE_END_HANDSHAKE;
+            }
+            if (!get_construct_message_f(s, &pkt, &confunc, &mt)) {
+                /* SSLfatal() already called */
+                return SUB_STATE_ERROR;
+            }
+            if (mt == SSL3_MT_DUMMY) {
+                /* Skip construction and sending. This isn't a "real" state */
+                st->write_state = WRITE_STATE_POST_WORK;
+                st->write_state_work = WORK_MORE_A;
+                break;
+            }
+            if (!WPACKET_init(&pkt, s->init_buf)
+                    || !ssl_set_handshake_header(s, &pkt, mt)) {
+                WPACKET_cleanup(&pkt);
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_WRITE_STATE_MACHINE,
+                         ERR_R_INTERNAL_ERROR);
+                return SUB_STATE_ERROR;
+            }
+            if (confunc != NULL && !confunc(s, &pkt)) {
+                WPACKET_cleanup(&pkt);
+                check_fatal(s, SSL_F_WRITE_STATE_MACHINE);
+                return SUB_STATE_ERROR;
+            }
+            if (!ssl_close_construct_packet(s, &pkt, mt)
+                    || !WPACKET_finish(&pkt)) {
+                WPACKET_cleanup(&pkt);
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_WRITE_STATE_MACHINE,
+                         ERR_R_INTERNAL_ERROR);
+                return SUB_STATE_ERROR;
+            }
+
+            /* Fall through */
+
+        case WRITE_STATE_SEND:
+            if (SSL_IS_DTLS(s) && st->use_timer) {
+                dtls1_start_timer(s);
+            }
+            ret = statem_do_write(s);
+            if (ret <= 0) {
+                return SUB_STATE_ERROR;
+            }
+            st->write_state = WRITE_STATE_POST_WORK;
+            st->write_state_work = WORK_MORE_A;
+            /* Fall through */
+
+        case WRITE_STATE_POST_WORK:
+            switch (st->write_state_work = post_work(s, st->write_state_work)) {
+            case WORK_ERROR:
+                check_fatal(s, SSL_F_WRITE_STATE_MACHINE);
+                /* Fall through */
+            case WORK_MORE_A:
+            case WORK_MORE_B:
+            case WORK_MORE_C:
+                return SUB_STATE_ERROR;
+
+            case WORK_FINISHED_CONTINUE:
+                st->write_state = WRITE_STATE_TRANSITION;
+                break;
+
+            case WORK_FINISHED_STOP:
+                return SUB_STATE_END_HANDSHAKE;
+            }
+            break;
+
+        default:
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_WRITE_STATE_MACHINE,
+                     ERR_R_INTERNAL_ERROR);
+            return SUB_STATE_ERROR;
+        }
+    }
+}
+
+/*
+ * Flush the write BIO
+ */
+int statem_flush(SSL *s)
+{
+    s->rwstate = SSL_WRITING;
+    if (BIO_flush(s->wbio) <= 0) {
+        return 0;
+    }
+    s->rwstate = SSL_NOTHING;
+
+    return 1;
+}
+
+/*
+ * Called by the record layer to determine whether application data is
+ * allowed to be received in the current handshake state or not.
+ *
+ * Return values are:
+ *   1: Yes (application data allowed)
+ *   0: No (application data not allowed)
+ */
+int ossl_statem_app_data_allowed(SSL *s)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    if (st->state == MSG_FLOW_UNINITED)
+        return 0;
+
+    if (!s->s3->in_read_app_data || (s->s3->total_renegotiations == 0))
+        return 0;
+
+    if (s->server) {
+        /*
+         * If we're a server and we haven't got as far as writing our
+         * ServerHello yet then we allow app data
+         */
+        if (st->hand_state == TLS_ST_BEFORE
+            || st->hand_state == TLS_ST_SR_CLNT_HELLO)
+            return 1;
+    } else {
+        /*
+         * If we're a client and we haven't read the ServerHello yet then we
+         * allow app data
+         */
+        if (st->hand_state == TLS_ST_CW_CLNT_HELLO)
+            return 1;
+    }
+
+    return 0;
+}
+
+/*
+ * This function returns 1 if TLS exporter is ready to export keying
+ * material, or 0 if otherwise.
+ */
+int ossl_statem_export_allowed(SSL *s)
+{
+    return s->s3->previous_server_finished_len != 0
+           && s->statem.hand_state != TLS_ST_SW_FINISHED;
+}
+
+/*
+ * Return 1 if early TLS exporter is ready to export keying material,
+ * or 0 if otherwise.
+ */
+int ossl_statem_export_early_allowed(SSL *s)
+{
+    /*
+     * The early exporter secret is only present on the server if we
+     * have accepted early_data. It is present on the client as long
+     * as we have sent early_data.
+     */
+    return s->ext.early_data == SSL_EARLY_DATA_ACCEPTED
+           || (!s->server && s->ext.early_data != SSL_EARLY_DATA_NOT_SENT);
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem.h b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem.h
new file mode 100644
index 000000000..144d930fc
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem.h
@@ -0,0 +1,157 @@
+/*
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*****************************************************************************
+ *                                                                           *
+ * These enums should be considered PRIVATE to the state machine. No         *
+ * non-state machine code should need to use these                           *
+ *                                                                           *
+ *****************************************************************************/
+/*
+ * Valid return codes used for functions performing work prior to or after
+ * sending or receiving a message
+ */
+typedef enum {
+    /* Something went wrong */
+    WORK_ERROR,
+    /* We're done working and there shouldn't be anything else to do after */
+    WORK_FINISHED_STOP,
+    /* We're done working move onto the next thing */
+    WORK_FINISHED_CONTINUE,
+    /* We're working on phase A */
+    WORK_MORE_A,
+    /* We're working on phase B */
+    WORK_MORE_B,
+    /* We're working on phase C */
+    WORK_MORE_C
+} WORK_STATE;
+
+/* Write transition return codes */
+typedef enum {
+    /* Something went wrong */
+    WRITE_TRAN_ERROR,
+    /* A transition was successfully completed and we should continue */
+    WRITE_TRAN_CONTINUE,
+    /* There is no more write work to be done */
+    WRITE_TRAN_FINISHED
+} WRITE_TRAN;
+
+/* Message flow states */
+typedef enum {
+    /* No handshake in progress */
+    MSG_FLOW_UNINITED,
+    /* A permanent error with this connection */
+    MSG_FLOW_ERROR,
+    /* We are reading messages */
+    MSG_FLOW_READING,
+    /* We are writing messages */
+    MSG_FLOW_WRITING,
+    /* Handshake has finished */
+    MSG_FLOW_FINISHED
+} MSG_FLOW_STATE;
+
+/* Read states */
+typedef enum {
+    READ_STATE_HEADER,
+    READ_STATE_BODY,
+    READ_STATE_POST_PROCESS
+} READ_STATE;
+
+/* Write states */
+typedef enum {
+    WRITE_STATE_TRANSITION,
+    WRITE_STATE_PRE_WORK,
+    WRITE_STATE_SEND,
+    WRITE_STATE_POST_WORK
+} WRITE_STATE;
+
+typedef enum {
+    /* The enc_write_ctx can be used normally */
+    ENC_WRITE_STATE_VALID,
+    /* The enc_write_ctx cannot be used */
+    ENC_WRITE_STATE_INVALID,
+    /* Write alerts in plaintext, but otherwise use the enc_write_ctx */
+    ENC_WRITE_STATE_WRITE_PLAIN_ALERTS
+} ENC_WRITE_STATES;
+
+typedef enum {
+    /* The enc_read_ctx can be used normally */
+    ENC_READ_STATE_VALID,
+    /* We may receive encrypted or plaintext alerts */
+    ENC_READ_STATE_ALLOW_PLAIN_ALERTS
+} ENC_READ_STATES;
+
+/*****************************************************************************
+ *                                                                           *
+ * This structure should be considered "opaque" to anything outside of the   *
+ * state machine. No non-state machine code should be accessing the members  *
+ * of this structure.                                                        *
+ *                                                                           *
+ *****************************************************************************/
+
+struct ossl_statem_st {
+    MSG_FLOW_STATE state;
+    WRITE_STATE write_state;
+    WORK_STATE write_state_work;
+    READ_STATE read_state;
+    WORK_STATE read_state_work;
+    OSSL_HANDSHAKE_STATE hand_state;
+    /* The handshake state requested by an API call (e.g. HelloRequest) */
+    OSSL_HANDSHAKE_STATE request_state;
+    int in_init;
+    int read_state_first_init;
+    /* true when we are actually in SSL_accept() or SSL_connect() */
+    int in_handshake;
+    /*
+     * True when are processing a "real" handshake that needs cleaning up (not
+     * just a HelloRequest or similar).
+     */
+    int cleanuphand;
+    /* Should we skip the CertificateVerify message? */
+    unsigned int no_cert_verify;
+    int use_timer;
+    ENC_WRITE_STATES enc_write_state;
+    ENC_READ_STATES enc_read_state;
+};
+typedef struct ossl_statem_st OSSL_STATEM;
+
+/*****************************************************************************
+ *                                                                           *
+ * The following macros/functions represent the libssl internal API to the   *
+ * state machine. Any libssl code may call these functions/macros            *
+ *                                                                           *
+ *****************************************************************************/
+
+__owur int ossl_statem_accept(SSL *s);
+__owur int ossl_statem_connect(SSL *s);
+void ossl_statem_clear(SSL *s);
+void ossl_statem_set_renegotiate(SSL *s);
+void ossl_statem_fatal(SSL *s, int al, int func, int reason, const char *file,
+                       int line);
+# define SSL_AD_NO_ALERT    -1
+# ifndef OPENSSL_NO_ERR
+#  define SSLfatal(s, al, f, r)  ossl_statem_fatal((s), (al), (f), (r), \
+                                                   OPENSSL_FILE, OPENSSL_LINE)
+# else
+#  define SSLfatal(s, al, f, r)  ossl_statem_fatal((s), (al), (f), (r), NULL, 0)
+# endif
+
+int ossl_statem_in_error(const SSL *s);
+void ossl_statem_set_in_init(SSL *s, int init);
+int ossl_statem_get_in_handshake(SSL *s);
+void ossl_statem_set_in_handshake(SSL *s, int inhand);
+__owur int ossl_statem_skip_early_data(SSL *s);
+void ossl_statem_check_finish_init(SSL *s, int send);
+void ossl_statem_set_hello_verify_done(SSL *s);
+__owur int ossl_statem_app_data_allowed(SSL *s);
+__owur int ossl_statem_export_allowed(SSL *s);
+__owur int ossl_statem_export_early_allowed(SSL *s);
+
+/* Flush the write BIO */
+int statem_flush(SSL *s);
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_clnt.c b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_clnt.c
new file mode 100644
index 000000000..e56d24dff
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_clnt.c
@@ -0,0 +1,3851 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ * Copyright 2005 Nokia. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <time.h>
+#include <assert.h>
+#include "../ssl_locl.h"
+#include "statem_locl.h"
+#include <openssl/buffer.h>
+#include <openssl/rand.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/md5.h>
+#include <openssl/dh.h>
+#include <openssl/bn.h>
+#include <openssl/engine.h>
+#include <internal/cryptlib.h>
+
+static MSG_PROCESS_RETURN tls_process_as_hello_retry_request(SSL *s, PACKET *pkt);
+static MSG_PROCESS_RETURN tls_process_encrypted_extensions(SSL *s, PACKET *pkt);
+
+static ossl_inline int cert_req_allowed(SSL *s);
+static int key_exchange_expected(SSL *s);
+static int ssl_cipher_list_to_bytes(SSL *s, STACK_OF(SSL_CIPHER) *sk,
+                                    WPACKET *pkt);
+
+/*
+ * Is a CertificateRequest message allowed at the moment or not?
+ *
+ *  Return values are:
+ *  1: Yes
+ *  0: No
+ */
+static ossl_inline int cert_req_allowed(SSL *s)
+{
+    /* TLS does not like anon-DH with client cert */
+    if ((s->version > SSL3_VERSION
+         && (s->s3->tmp.new_cipher->algorithm_auth & SSL_aNULL))
+        || (s->s3->tmp.new_cipher->algorithm_auth & (SSL_aSRP | SSL_aPSK)))
+        return 0;
+
+    return 1;
+}
+
+/*
+ * Should we expect the ServerKeyExchange message or not?
+ *
+ *  Return values are:
+ *  1: Yes
+ *  0: No
+ */
+static int key_exchange_expected(SSL *s)
+{
+    long alg_k = s->s3->tmp.new_cipher->algorithm_mkey;
+
+    /*
+     * Can't skip server key exchange if this is an ephemeral
+     * ciphersuite or for SRP
+     */
+    if (alg_k & (SSL_kDHE | SSL_kECDHE | SSL_kDHEPSK | SSL_kECDHEPSK
+                 | SSL_kSRP)) {
+        return 1;
+    }
+
+    return 0;
+}
+
+/*
+ * ossl_statem_client_read_transition() encapsulates the logic for the allowed
+ * handshake state transitions when a TLS1.3 client is reading messages from the
+ * server. The message type that the server has sent is provided in |mt|. The
+ * current state is in |s->statem.hand_state|.
+ *
+ * Return values are 1 for success (transition allowed) and  0 on error
+ * (transition not allowed)
+ */
+static int ossl_statem_client13_read_transition(SSL *s, int mt)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    /*
+     * Note: There is no case for TLS_ST_CW_CLNT_HELLO, because we haven't
+     * yet negotiated TLSv1.3 at that point so that is handled by
+     * ossl_statem_client_read_transition()
+     */
+
+    switch (st->hand_state) {
+    default:
+        break;
+
+    case TLS_ST_CW_CLNT_HELLO:
+        /*
+         * This must a ClientHello following a HelloRetryRequest, so the only
+         * thing we can get now is a ServerHello.
+         */
+        if (mt == SSL3_MT_SERVER_HELLO) {
+            st->hand_state = TLS_ST_CR_SRVR_HELLO;
+            return 1;
+        }
+        break;
+
+    case TLS_ST_CR_SRVR_HELLO:
+        if (mt == SSL3_MT_ENCRYPTED_EXTENSIONS) {
+            st->hand_state = TLS_ST_CR_ENCRYPTED_EXTENSIONS;
+            return 1;
+        }
+        break;
+
+    case TLS_ST_CR_ENCRYPTED_EXTENSIONS:
+        if (s->hit) {
+            if (mt == SSL3_MT_FINISHED) {
+                st->hand_state = TLS_ST_CR_FINISHED;
+                return 1;
+            }
+        } else {
+            if (mt == SSL3_MT_CERTIFICATE_REQUEST) {
+                st->hand_state = TLS_ST_CR_CERT_REQ;
+                return 1;
+            }
+            if (mt == SSL3_MT_CERTIFICATE) {
+                st->hand_state = TLS_ST_CR_CERT;
+                return 1;
+            }
+        }
+        break;
+
+    case TLS_ST_CR_CERT_REQ:
+        if (mt == SSL3_MT_CERTIFICATE) {
+            st->hand_state = TLS_ST_CR_CERT;
+            return 1;
+        }
+        break;
+
+    case TLS_ST_CR_CERT:
+        if (mt == SSL3_MT_CERTIFICATE_VERIFY) {
+            st->hand_state = TLS_ST_CR_CERT_VRFY;
+            return 1;
+        }
+        break;
+
+    case TLS_ST_CR_CERT_VRFY:
+        if (mt == SSL3_MT_FINISHED) {
+            st->hand_state = TLS_ST_CR_FINISHED;
+            return 1;
+        }
+        break;
+
+    case TLS_ST_OK:
+        if (mt == SSL3_MT_NEWSESSION_TICKET) {
+            st->hand_state = TLS_ST_CR_SESSION_TICKET;
+            return 1;
+        }
+        if (mt == SSL3_MT_KEY_UPDATE) {
+            st->hand_state = TLS_ST_CR_KEY_UPDATE;
+            return 1;
+        }
+        if (mt == SSL3_MT_CERTIFICATE_REQUEST) {
+#if DTLS_MAX_VERSION != DTLS1_2_VERSION
+# error TODO(DTLS1.3): Restore digest for PHA before adding message.
+#endif
+            if (!SSL_IS_DTLS(s) && s->post_handshake_auth == SSL_PHA_EXT_SENT) {
+                s->post_handshake_auth = SSL_PHA_REQUESTED;
+                /*
+                 * In TLS, this is called before the message is added to the
+                 * digest. In DTLS, this is expected to be called after adding
+                 * to the digest. Either move the digest restore, or add the
+                 * message here after the swap, or do it after the clientFinished?
+                 */
+                if (!tls13_restore_handshake_digest_for_pha(s)) {
+                    /* SSLfatal() already called */
+                    return 0;
+                }
+                st->hand_state = TLS_ST_CR_CERT_REQ;
+                return 1;
+            }
+        }
+        break;
+    }
+
+    /* No valid transition found */
+    return 0;
+}
+
+/*
+ * ossl_statem_client_read_transition() encapsulates the logic for the allowed
+ * handshake state transitions when the client is reading messages from the
+ * server. The message type that the server has sent is provided in |mt|. The
+ * current state is in |s->statem.hand_state|.
+ *
+ * Return values are 1 for success (transition allowed) and  0 on error
+ * (transition not allowed)
+ */
+int ossl_statem_client_read_transition(SSL *s, int mt)
+{
+    OSSL_STATEM *st = &s->statem;
+    int ske_expected;
+
+    /*
+     * Note that after writing the first ClientHello we don't know what version
+     * we are going to negotiate yet, so we don't take this branch until later.
+     */
+    if (SSL_IS_TLS13(s)) {
+        if (!ossl_statem_client13_read_transition(s, mt))
+            goto err;
+        return 1;
+    }
+
+    switch (st->hand_state) {
+    default:
+        break;
+
+    case TLS_ST_CW_CLNT_HELLO:
+        if (mt == SSL3_MT_SERVER_HELLO) {
+            st->hand_state = TLS_ST_CR_SRVR_HELLO;
+            return 1;
+        }
+
+        if (SSL_IS_DTLS(s)) {
+            if (mt == DTLS1_MT_HELLO_VERIFY_REQUEST) {
+                st->hand_state = DTLS_ST_CR_HELLO_VERIFY_REQUEST;
+                return 1;
+            }
+        }
+        break;
+
+    case TLS_ST_EARLY_DATA:
+        /*
+         * We've not actually selected TLSv1.3 yet, but we have sent early
+         * data. The only thing allowed now is a ServerHello or a
+         * HelloRetryRequest.
+         */
+        if (mt == SSL3_MT_SERVER_HELLO) {
+            st->hand_state = TLS_ST_CR_SRVR_HELLO;
+            return 1;
+        }
+        break;
+
+    case TLS_ST_CR_SRVR_HELLO:
+        if (s->hit) {
+            if (s->ext.ticket_expected) {
+                if (mt == SSL3_MT_NEWSESSION_TICKET) {
+                    st->hand_state = TLS_ST_CR_SESSION_TICKET;
+                    return 1;
+                }
+            } else if (mt == SSL3_MT_CHANGE_CIPHER_SPEC) {
+                st->hand_state = TLS_ST_CR_CHANGE;
+                return 1;
+            }
+        } else {
+            if (SSL_IS_DTLS(s) && mt == DTLS1_MT_HELLO_VERIFY_REQUEST) {
+                st->hand_state = DTLS_ST_CR_HELLO_VERIFY_REQUEST;
+                return 1;
+            } else if (s->version >= TLS1_VERSION
+                       && s->ext.session_secret_cb != NULL
+                       && s->session->ext.tick != NULL
+                       && mt == SSL3_MT_CHANGE_CIPHER_SPEC) {
+                /*
+                 * Normally, we can tell if the server is resuming the session
+                 * from the session ID. EAP-FAST (RFC 4851), however, relies on
+                 * the next server message after the ServerHello to determine if
+                 * the server is resuming.
+                 */
+                s->hit = 1;
+                st->hand_state = TLS_ST_CR_CHANGE;
+                return 1;
+            } else if (!(s->s3->tmp.new_cipher->algorithm_auth
+                         & (SSL_aNULL | SSL_aSRP | SSL_aPSK))) {
+                if (mt == SSL3_MT_CERTIFICATE) {
+                    st->hand_state = TLS_ST_CR_CERT;
+                    return 1;
+                }
+            } else {
+                ske_expected = key_exchange_expected(s);
+                /* SKE is optional for some PSK ciphersuites */
+                if (ske_expected
+                    || ((s->s3->tmp.new_cipher->algorithm_mkey & SSL_PSK)
+                        && mt == SSL3_MT_SERVER_KEY_EXCHANGE)) {
+                    if (mt == SSL3_MT_SERVER_KEY_EXCHANGE) {
+                        st->hand_state = TLS_ST_CR_KEY_EXCH;
+                        return 1;
+                    }
+                } else if (mt == SSL3_MT_CERTIFICATE_REQUEST
+                           && cert_req_allowed(s)) {
+                    st->hand_state = TLS_ST_CR_CERT_REQ;
+                    return 1;
+                } else if (mt == SSL3_MT_SERVER_DONE) {
+                    st->hand_state = TLS_ST_CR_SRVR_DONE;
+                    return 1;
+                }
+            }
+        }
+        break;
+
+    case TLS_ST_CR_CERT:
+        /*
+         * The CertificateStatus message is optional even if
+         * |ext.status_expected| is set
+         */
+        if (s->ext.status_expected && mt == SSL3_MT_CERTIFICATE_STATUS) {
+            st->hand_state = TLS_ST_CR_CERT_STATUS;
+            return 1;
+        }
+        /* Fall through */
+
+    case TLS_ST_CR_CERT_STATUS:
+        ske_expected = key_exchange_expected(s);
+        /* SKE is optional for some PSK ciphersuites */
+        if (ske_expected || ((s->s3->tmp.new_cipher->algorithm_mkey & SSL_PSK)
+                             && mt == SSL3_MT_SERVER_KEY_EXCHANGE)) {
+            if (mt == SSL3_MT_SERVER_KEY_EXCHANGE) {
+                st->hand_state = TLS_ST_CR_KEY_EXCH;
+                return 1;
+            }
+            goto err;
+        }
+        /* Fall through */
+
+    case TLS_ST_CR_KEY_EXCH:
+        if (mt == SSL3_MT_CERTIFICATE_REQUEST) {
+            if (cert_req_allowed(s)) {
+                st->hand_state = TLS_ST_CR_CERT_REQ;
+                return 1;
+            }
+            goto err;
+        }
+        /* Fall through */
+
+    case TLS_ST_CR_CERT_REQ:
+        if (mt == SSL3_MT_SERVER_DONE) {
+            st->hand_state = TLS_ST_CR_SRVR_DONE;
+            return 1;
+        }
+        break;
+
+    case TLS_ST_CW_FINISHED:
+        if (s->ext.ticket_expected) {
+            if (mt == SSL3_MT_NEWSESSION_TICKET) {
+                st->hand_state = TLS_ST_CR_SESSION_TICKET;
+                return 1;
+            }
+        } else if (mt == SSL3_MT_CHANGE_CIPHER_SPEC) {
+            st->hand_state = TLS_ST_CR_CHANGE;
+            return 1;
+        }
+        break;
+
+    case TLS_ST_CR_SESSION_TICKET:
+        if (mt == SSL3_MT_CHANGE_CIPHER_SPEC) {
+            st->hand_state = TLS_ST_CR_CHANGE;
+            return 1;
+        }
+        break;
+
+    case TLS_ST_CR_CHANGE:
+        if (mt == SSL3_MT_FINISHED) {
+            st->hand_state = TLS_ST_CR_FINISHED;
+            return 1;
+        }
+        break;
+
+    case TLS_ST_OK:
+        if (mt == SSL3_MT_HELLO_REQUEST) {
+            st->hand_state = TLS_ST_CR_HELLO_REQ;
+            return 1;
+        }
+        break;
+    }
+
+ err:
+    /* No valid transition found */
+    if (SSL_IS_DTLS(s) && mt == SSL3_MT_CHANGE_CIPHER_SPEC) {
+        BIO *rbio;
+
+        /*
+         * CCS messages don't have a message sequence number so this is probably
+         * because of an out-of-order CCS. We'll just drop it.
+         */
+        s->init_num = 0;
+        s->rwstate = SSL_READING;
+        rbio = SSL_get_rbio(s);
+        BIO_clear_retry_flags(rbio);
+        BIO_set_retry_read(rbio);
+        return 0;
+    }
+    SSLfatal(s, SSL3_AD_UNEXPECTED_MESSAGE,
+             SSL_F_OSSL_STATEM_CLIENT_READ_TRANSITION,
+             SSL_R_UNEXPECTED_MESSAGE);
+    return 0;
+}
+
+/*
+ * ossl_statem_client13_write_transition() works out what handshake state to
+ * move to next when the TLSv1.3 client is writing messages to be sent to the
+ * server.
+ */
+static WRITE_TRAN ossl_statem_client13_write_transition(SSL *s)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    /*
+     * Note: There are no cases for TLS_ST_BEFORE because we haven't negotiated
+     * TLSv1.3 yet at that point. They are handled by
+     * ossl_statem_client_write_transition().
+     */
+    switch (st->hand_state) {
+    default:
+        /* Shouldn't happen */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_OSSL_STATEM_CLIENT13_WRITE_TRANSITION,
+                 ERR_R_INTERNAL_ERROR);
+        return WRITE_TRAN_ERROR;
+
+    case TLS_ST_CR_CERT_REQ:
+        if (s->post_handshake_auth == SSL_PHA_REQUESTED) {
+            st->hand_state = TLS_ST_CW_CERT;
+            return WRITE_TRAN_CONTINUE;
+        }
+        /*
+         * We should only get here if we received a CertificateRequest after
+         * we already sent close_notify
+         */
+        if (!ossl_assert((s->shutdown & SSL_SENT_SHUTDOWN) != 0)) {
+            /* Shouldn't happen - same as default case */
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_OSSL_STATEM_CLIENT13_WRITE_TRANSITION,
+                     ERR_R_INTERNAL_ERROR);
+            return WRITE_TRAN_ERROR;
+        }
+        st->hand_state = TLS_ST_OK;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_CR_FINISHED:
+        if (s->early_data_state == SSL_EARLY_DATA_WRITE_RETRY
+                || s->early_data_state == SSL_EARLY_DATA_FINISHED_WRITING)
+            st->hand_state = TLS_ST_PENDING_EARLY_DATA_END;
+        else if ((s->options & SSL_OP_ENABLE_MIDDLEBOX_COMPAT) != 0
+                 && s->hello_retry_request == SSL_HRR_NONE)
+            st->hand_state = TLS_ST_CW_CHANGE;
+        else
+            st->hand_state = (s->s3->tmp.cert_req != 0) ? TLS_ST_CW_CERT
+                                                        : TLS_ST_CW_FINISHED;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_PENDING_EARLY_DATA_END:
+        if (s->ext.early_data == SSL_EARLY_DATA_ACCEPTED) {
+            st->hand_state = TLS_ST_CW_END_OF_EARLY_DATA;
+            return WRITE_TRAN_CONTINUE;
+        }
+        /* Fall through */
+
+    case TLS_ST_CW_END_OF_EARLY_DATA:
+    case TLS_ST_CW_CHANGE:
+        st->hand_state = (s->s3->tmp.cert_req != 0) ? TLS_ST_CW_CERT
+                                                    : TLS_ST_CW_FINISHED;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_CW_CERT:
+        /* If a non-empty Certificate we also send CertificateVerify */
+        st->hand_state = (s->s3->tmp.cert_req == 1) ? TLS_ST_CW_CERT_VRFY
+                                                    : TLS_ST_CW_FINISHED;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_CW_CERT_VRFY:
+        st->hand_state = TLS_ST_CW_FINISHED;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_CR_KEY_UPDATE:
+        if (s->key_update != SSL_KEY_UPDATE_NONE) {
+            st->hand_state = TLS_ST_CW_KEY_UPDATE;
+            return WRITE_TRAN_CONTINUE;
+        }
+        /* Fall through */
+
+    case TLS_ST_CW_KEY_UPDATE:
+    case TLS_ST_CR_SESSION_TICKET:
+    case TLS_ST_CW_FINISHED:
+        st->hand_state = TLS_ST_OK;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_OK:
+        if (s->key_update != SSL_KEY_UPDATE_NONE) {
+            st->hand_state = TLS_ST_CW_KEY_UPDATE;
+            return WRITE_TRAN_CONTINUE;
+        }
+
+        /* Try to read from the server instead */
+        return WRITE_TRAN_FINISHED;
+    }
+}
+
+/*
+ * ossl_statem_client_write_transition() works out what handshake state to
+ * move to next when the client is writing messages to be sent to the server.
+ */
+WRITE_TRAN ossl_statem_client_write_transition(SSL *s)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    /*
+     * Note that immediately before/after a ClientHello we don't know what
+     * version we are going to negotiate yet, so we don't take this branch until
+     * later
+     */
+    if (SSL_IS_TLS13(s))
+        return ossl_statem_client13_write_transition(s);
+
+    switch (st->hand_state) {
+    default:
+        /* Shouldn't happen */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_OSSL_STATEM_CLIENT_WRITE_TRANSITION,
+                 ERR_R_INTERNAL_ERROR);
+        return WRITE_TRAN_ERROR;
+
+    case TLS_ST_OK:
+        if (!s->renegotiate) {
+            /*
+             * We haven't requested a renegotiation ourselves so we must have
+             * received a message from the server. Better read it.
+             */
+            return WRITE_TRAN_FINISHED;
+        }
+        /* Renegotiation */
+        /* fall thru */
+    case TLS_ST_BEFORE:
+        st->hand_state = TLS_ST_CW_CLNT_HELLO;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_CW_CLNT_HELLO:
+        if (s->early_data_state == SSL_EARLY_DATA_CONNECTING) {
+            /*
+             * We are assuming this is a TLSv1.3 connection, although we haven't
+             * actually selected a version yet.
+             */
+            if ((s->options & SSL_OP_ENABLE_MIDDLEBOX_COMPAT) != 0)
+                st->hand_state = TLS_ST_CW_CHANGE;
+            else
+                st->hand_state = TLS_ST_EARLY_DATA;
+            return WRITE_TRAN_CONTINUE;
+        }
+        /*
+         * No transition at the end of writing because we don't know what
+         * we will be sent
+         */
+        return WRITE_TRAN_FINISHED;
+
+    case TLS_ST_CR_SRVR_HELLO:
+        /*
+         * We only get here in TLSv1.3. We just received an HRR, so issue a
+         * CCS unless middlebox compat mode is off, or we already issued one
+         * because we did early data.
+         */
+        if ((s->options & SSL_OP_ENABLE_MIDDLEBOX_COMPAT) != 0
+                && s->early_data_state != SSL_EARLY_DATA_FINISHED_WRITING)
+            st->hand_state = TLS_ST_CW_CHANGE;
+        else
+            st->hand_state = TLS_ST_CW_CLNT_HELLO;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_EARLY_DATA:
+        return WRITE_TRAN_FINISHED;
+
+    case DTLS_ST_CR_HELLO_VERIFY_REQUEST:
+        st->hand_state = TLS_ST_CW_CLNT_HELLO;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_CR_SRVR_DONE:
+        if (s->s3->tmp.cert_req)
+            st->hand_state = TLS_ST_CW_CERT;
+        else
+            st->hand_state = TLS_ST_CW_KEY_EXCH;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_CW_CERT:
+        st->hand_state = TLS_ST_CW_KEY_EXCH;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_CW_KEY_EXCH:
+        /*
+         * For TLS, cert_req is set to 2, so a cert chain of nothing is
+         * sent, but no verify packet is sent
+         */
+        /*
+         * XXX: For now, we do not support client authentication in ECDH
+         * cipher suites with ECDH (rather than ECDSA) certificates. We
+         * need to skip the certificate verify message when client's
+         * ECDH public key is sent inside the client certificate.
+         */
+        if (s->s3->tmp.cert_req == 1) {
+            st->hand_state = TLS_ST_CW_CERT_VRFY;
+        } else {
+            st->hand_state = TLS_ST_CW_CHANGE;
+        }
+        if (s->s3->flags & TLS1_FLAGS_SKIP_CERT_VERIFY) {
+            st->hand_state = TLS_ST_CW_CHANGE;
+        }
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_CW_CERT_VRFY:
+        st->hand_state = TLS_ST_CW_CHANGE;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_CW_CHANGE:
+        if (s->hello_retry_request == SSL_HRR_PENDING) {
+            st->hand_state = TLS_ST_CW_CLNT_HELLO;
+        } else if (s->early_data_state == SSL_EARLY_DATA_CONNECTING) {
+            st->hand_state = TLS_ST_EARLY_DATA;
+        } else {
+#if defined(OPENSSL_NO_NEXTPROTONEG)
+            st->hand_state = TLS_ST_CW_FINISHED;
+#else
+            if (!SSL_IS_DTLS(s) && s->s3->npn_seen)
+                st->hand_state = TLS_ST_CW_NEXT_PROTO;
+            else
+                st->hand_state = TLS_ST_CW_FINISHED;
+#endif
+        }
+        return WRITE_TRAN_CONTINUE;
+
+#if !defined(OPENSSL_NO_NEXTPROTONEG)
+    case TLS_ST_CW_NEXT_PROTO:
+        st->hand_state = TLS_ST_CW_FINISHED;
+        return WRITE_TRAN_CONTINUE;
+#endif
+
+    case TLS_ST_CW_FINISHED:
+        if (s->hit) {
+            st->hand_state = TLS_ST_OK;
+            return WRITE_TRAN_CONTINUE;
+        } else {
+            return WRITE_TRAN_FINISHED;
+        }
+
+    case TLS_ST_CR_FINISHED:
+        if (s->hit) {
+            st->hand_state = TLS_ST_CW_CHANGE;
+            return WRITE_TRAN_CONTINUE;
+        } else {
+            st->hand_state = TLS_ST_OK;
+            return WRITE_TRAN_CONTINUE;
+        }
+
+    case TLS_ST_CR_HELLO_REQ:
+        /*
+         * If we can renegotiate now then do so, otherwise wait for a more
+         * convenient time.
+         */
+        if (ssl3_renegotiate_check(s, 1)) {
+            if (!tls_setup_handshake(s)) {
+                /* SSLfatal() already called */
+                return WRITE_TRAN_ERROR;
+            }
+            st->hand_state = TLS_ST_CW_CLNT_HELLO;
+            return WRITE_TRAN_CONTINUE;
+        }
+        st->hand_state = TLS_ST_OK;
+        return WRITE_TRAN_CONTINUE;
+    }
+}
+
+/*
+ * Perform any pre work that needs to be done prior to sending a message from
+ * the client to the server.
+ */
+WORK_STATE ossl_statem_client_pre_work(SSL *s, WORK_STATE wst)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    switch (st->hand_state) {
+    default:
+        /* No pre work to be done */
+        break;
+
+    case TLS_ST_CW_CLNT_HELLO:
+        s->shutdown = 0;
+        if (SSL_IS_DTLS(s)) {
+            /* every DTLS ClientHello resets Finished MAC */
+            if (!ssl3_init_finished_mac(s)) {
+                /* SSLfatal() already called */
+                return WORK_ERROR;
+            }
+        }
+        break;
+
+    case TLS_ST_CW_CHANGE:
+        if (SSL_IS_DTLS(s)) {
+            if (s->hit) {
+                /*
+                 * We're into the last flight so we don't retransmit these
+                 * messages unless we need to.
+                 */
+                st->use_timer = 0;
+            }
+#ifndef OPENSSL_NO_SCTP
+            if (BIO_dgram_is_sctp(SSL_get_wbio(s))) {
+                /* Calls SSLfatal() as required */
+                return dtls_wait_for_dry(s);
+            }
+#endif
+        }
+        break;
+
+    case TLS_ST_PENDING_EARLY_DATA_END:
+        /*
+         * If we've been called by SSL_do_handshake()/SSL_write(), or we did not
+         * attempt to write early data before calling SSL_read() then we press
+         * on with the handshake. Otherwise we pause here.
+         */
+        if (s->early_data_state == SSL_EARLY_DATA_FINISHED_WRITING
+                || s->early_data_state == SSL_EARLY_DATA_NONE)
+            return WORK_FINISHED_CONTINUE;
+        /* Fall through */
+
+    case TLS_ST_EARLY_DATA:
+        return tls_finish_handshake(s, wst, 0, 1);
+
+    case TLS_ST_OK:
+        /* Calls SSLfatal() as required */
+        return tls_finish_handshake(s, wst, 1, 1);
+    }
+
+    return WORK_FINISHED_CONTINUE;
+}
+
+/*
+ * Perform any work that needs to be done after sending a message from the
+ * client to the server.
+ */
+WORK_STATE ossl_statem_client_post_work(SSL *s, WORK_STATE wst)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    s->init_num = 0;
+
+    switch (st->hand_state) {
+    default:
+        /* No post work to be done */
+        break;
+
+    case TLS_ST_CW_CLNT_HELLO:
+        if (s->early_data_state == SSL_EARLY_DATA_CONNECTING
+                && s->max_early_data > 0) {
+            /*
+             * We haven't selected TLSv1.3 yet so we don't call the change
+             * cipher state function associated with the SSL_METHOD. Instead
+             * we call tls13_change_cipher_state() directly.
+             */
+            if ((s->options & SSL_OP_ENABLE_MIDDLEBOX_COMPAT) == 0) {
+                if (!tls13_change_cipher_state(s,
+                            SSL3_CC_EARLY | SSL3_CHANGE_CIPHER_CLIENT_WRITE)) {
+                    /* SSLfatal() already called */
+                    return WORK_ERROR;
+                }
+            }
+            /* else we're in compat mode so we delay flushing until after CCS */
+        } else if (!statem_flush(s)) {
+            return WORK_MORE_A;
+        }
+
+        if (SSL_IS_DTLS(s)) {
+            /* Treat the next message as the first packet */
+            s->first_packet = 1;
+        }
+        break;
+
+    case TLS_ST_CW_END_OF_EARLY_DATA:
+        /*
+         * We set the enc_write_ctx back to NULL because we may end up writing
+         * in cleartext again if we get a HelloRetryRequest from the server.
+         */
+        EVP_CIPHER_CTX_free(s->enc_write_ctx);
+        s->enc_write_ctx = NULL;
+        break;
+
+    case TLS_ST_CW_KEY_EXCH:
+        if (tls_client_key_exchange_post_work(s) == 0) {
+            /* SSLfatal() already called */
+            return WORK_ERROR;
+        }
+        break;
+
+    case TLS_ST_CW_CHANGE:
+        if (SSL_IS_TLS13(s) || s->hello_retry_request == SSL_HRR_PENDING)
+            break;
+        if (s->early_data_state == SSL_EARLY_DATA_CONNECTING
+                    && s->max_early_data > 0) {
+            /*
+             * We haven't selected TLSv1.3 yet so we don't call the change
+             * cipher state function associated with the SSL_METHOD. Instead
+             * we call tls13_change_cipher_state() directly.
+             */
+            if (!tls13_change_cipher_state(s,
+                        SSL3_CC_EARLY | SSL3_CHANGE_CIPHER_CLIENT_WRITE))
+                return WORK_ERROR;
+            break;
+        }
+        s->session->cipher = s->s3->tmp.new_cipher;
+#ifdef OPENSSL_NO_COMP
+        s->session->compress_meth = 0;
+#else
+        if (s->s3->tmp.new_compression == NULL)
+            s->session->compress_meth = 0;
+        else
+            s->session->compress_meth = s->s3->tmp.new_compression->id;
+#endif
+        if (!s->method->ssl3_enc->setup_key_block(s)) {
+            /* SSLfatal() already called */
+            return WORK_ERROR;
+        }
+
+        if (!s->method->ssl3_enc->change_cipher_state(s,
+                                          SSL3_CHANGE_CIPHER_CLIENT_WRITE)) {
+            /* SSLfatal() already called */
+            return WORK_ERROR;
+        }
+
+        if (SSL_IS_DTLS(s)) {
+#ifndef OPENSSL_NO_SCTP
+            if (s->hit) {
+                /*
+                 * Change to new shared key of SCTP-Auth, will be ignored if
+                 * no SCTP used.
+                 */
+                BIO_ctrl(SSL_get_wbio(s), BIO_CTRL_DGRAM_SCTP_NEXT_AUTH_KEY,
+                         0, NULL);
+            }
+#endif
+
+            dtls1_reset_seq_numbers(s, SSL3_CC_WRITE);
+        }
+        break;
+
+    case TLS_ST_CW_FINISHED:
+#ifndef OPENSSL_NO_SCTP
+        if (wst == WORK_MORE_A && SSL_IS_DTLS(s) && s->hit == 0) {
+            /*
+             * Change to new shared key of SCTP-Auth, will be ignored if
+             * no SCTP used.
+             */
+            BIO_ctrl(SSL_get_wbio(s), BIO_CTRL_DGRAM_SCTP_NEXT_AUTH_KEY,
+                     0, NULL);
+        }
+#endif
+        if (statem_flush(s) != 1)
+            return WORK_MORE_B;
+
+        if (SSL_IS_TLS13(s)) {
+            if (!tls13_save_handshake_digest_for_pha(s)) {
+                /* SSLfatal() already called */
+                return WORK_ERROR;
+            }
+            if (s->post_handshake_auth != SSL_PHA_REQUESTED) {
+                if (!s->method->ssl3_enc->change_cipher_state(s,
+                        SSL3_CC_APPLICATION | SSL3_CHANGE_CIPHER_CLIENT_WRITE)) {
+                    /* SSLfatal() already called */
+                    return WORK_ERROR;
+                }
+            }
+        }
+        break;
+
+    case TLS_ST_CW_KEY_UPDATE:
+        if (statem_flush(s) != 1)
+            return WORK_MORE_A;
+        if (!tls13_update_key(s, 1)) {
+            /* SSLfatal() already called */
+            return WORK_ERROR;
+        }
+        break;
+    }
+
+    return WORK_FINISHED_CONTINUE;
+}
+
+/*
+ * Get the message construction function and message type for sending from the
+ * client
+ *
+ * Valid return values are:
+ *   1: Success
+ *   0: Error
+ */
+int ossl_statem_client_construct_message(SSL *s, WPACKET *pkt,
+                                         confunc_f *confunc, int *mt)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    switch (st->hand_state) {
+    default:
+        /* Shouldn't happen */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_OSSL_STATEM_CLIENT_CONSTRUCT_MESSAGE,
+                 SSL_R_BAD_HANDSHAKE_STATE);
+        return 0;
+
+    case TLS_ST_CW_CHANGE:
+        if (SSL_IS_DTLS(s))
+            *confunc = dtls_construct_change_cipher_spec;
+        else
+            *confunc = tls_construct_change_cipher_spec;
+        *mt = SSL3_MT_CHANGE_CIPHER_SPEC;
+        break;
+
+    case TLS_ST_CW_CLNT_HELLO:
+        *confunc = tls_construct_client_hello;
+        *mt = SSL3_MT_CLIENT_HELLO;
+        break;
+
+    case TLS_ST_CW_END_OF_EARLY_DATA:
+        *confunc = tls_construct_end_of_early_data;
+        *mt = SSL3_MT_END_OF_EARLY_DATA;
+        break;
+
+    case TLS_ST_PENDING_EARLY_DATA_END:
+        *confunc = NULL;
+        *mt = SSL3_MT_DUMMY;
+        break;
+
+    case TLS_ST_CW_CERT:
+        *confunc = tls_construct_client_certificate;
+        *mt = SSL3_MT_CERTIFICATE;
+        break;
+
+    case TLS_ST_CW_KEY_EXCH:
+        *confunc = tls_construct_client_key_exchange;
+        *mt = SSL3_MT_CLIENT_KEY_EXCHANGE;
+        break;
+
+    case TLS_ST_CW_CERT_VRFY:
+        *confunc = tls_construct_cert_verify;
+        *mt = SSL3_MT_CERTIFICATE_VERIFY;
+        break;
+
+#if !defined(OPENSSL_NO_NEXTPROTONEG)
+    case TLS_ST_CW_NEXT_PROTO:
+        *confunc = tls_construct_next_proto;
+        *mt = SSL3_MT_NEXT_PROTO;
+        break;
+#endif
+    case TLS_ST_CW_FINISHED:
+        *confunc = tls_construct_finished;
+        *mt = SSL3_MT_FINISHED;
+        break;
+
+    case TLS_ST_CW_KEY_UPDATE:
+        *confunc = tls_construct_key_update;
+        *mt = SSL3_MT_KEY_UPDATE;
+        break;
+    }
+
+    return 1;
+}
+
+/*
+ * Returns the maximum allowed length for the current message that we are
+ * reading. Excludes the message header.
+ */
+size_t ossl_statem_client_max_message_size(SSL *s)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    switch (st->hand_state) {
+    default:
+        /* Shouldn't happen */
+        return 0;
+
+    case TLS_ST_CR_SRVR_HELLO:
+        return SERVER_HELLO_MAX_LENGTH;
+
+    case DTLS_ST_CR_HELLO_VERIFY_REQUEST:
+        return HELLO_VERIFY_REQUEST_MAX_LENGTH;
+
+    case TLS_ST_CR_CERT:
+        return s->max_cert_list;
+
+    case TLS_ST_CR_CERT_VRFY:
+        return SSL3_RT_MAX_PLAIN_LENGTH;
+
+    case TLS_ST_CR_CERT_STATUS:
+        return SSL3_RT_MAX_PLAIN_LENGTH;
+
+    case TLS_ST_CR_KEY_EXCH:
+        return SERVER_KEY_EXCH_MAX_LENGTH;
+
+    case TLS_ST_CR_CERT_REQ:
+        /*
+         * Set to s->max_cert_list for compatibility with previous releases. In
+         * practice these messages can get quite long if servers are configured
+         * to provide a long list of acceptable CAs
+         */
+        return s->max_cert_list;
+
+    case TLS_ST_CR_SRVR_DONE:
+        return SERVER_HELLO_DONE_MAX_LENGTH;
+
+    case TLS_ST_CR_CHANGE:
+        if (s->version == DTLS1_BAD_VER)
+            return 3;
+        return CCS_MAX_LENGTH;
+
+    case TLS_ST_CR_SESSION_TICKET:
+        return SSL3_RT_MAX_PLAIN_LENGTH;
+
+    case TLS_ST_CR_FINISHED:
+        return FINISHED_MAX_LENGTH;
+
+    case TLS_ST_CR_ENCRYPTED_EXTENSIONS:
+        return ENCRYPTED_EXTENSIONS_MAX_LENGTH;
+
+    case TLS_ST_CR_KEY_UPDATE:
+        return KEY_UPDATE_MAX_LENGTH;
+    }
+}
+
+/*
+ * Process a message that the client has been received from the server.
+ */
+MSG_PROCESS_RETURN ossl_statem_client_process_message(SSL *s, PACKET *pkt)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    switch (st->hand_state) {
+    default:
+        /* Shouldn't happen */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_OSSL_STATEM_CLIENT_PROCESS_MESSAGE,
+                 ERR_R_INTERNAL_ERROR);
+        return MSG_PROCESS_ERROR;
+
+    case TLS_ST_CR_SRVR_HELLO:
+        return tls_process_server_hello(s, pkt);
+
+    case DTLS_ST_CR_HELLO_VERIFY_REQUEST:
+        return dtls_process_hello_verify(s, pkt);
+
+    case TLS_ST_CR_CERT:
+        return tls_process_server_certificate(s, pkt);
+
+    case TLS_ST_CR_CERT_VRFY:
+        return tls_process_cert_verify(s, pkt);
+
+    case TLS_ST_CR_CERT_STATUS:
+        return tls_process_cert_status(s, pkt);
+
+    case TLS_ST_CR_KEY_EXCH:
+        return tls_process_key_exchange(s, pkt);
+
+    case TLS_ST_CR_CERT_REQ:
+        return tls_process_certificate_request(s, pkt);
+
+    case TLS_ST_CR_SRVR_DONE:
+        return tls_process_server_done(s, pkt);
+
+    case TLS_ST_CR_CHANGE:
+        return tls_process_change_cipher_spec(s, pkt);
+
+    case TLS_ST_CR_SESSION_TICKET:
+        return tls_process_new_session_ticket(s, pkt);
+
+    case TLS_ST_CR_FINISHED:
+        return tls_process_finished(s, pkt);
+
+    case TLS_ST_CR_HELLO_REQ:
+        return tls_process_hello_req(s, pkt);
+
+    case TLS_ST_CR_ENCRYPTED_EXTENSIONS:
+        return tls_process_encrypted_extensions(s, pkt);
+
+    case TLS_ST_CR_KEY_UPDATE:
+        return tls_process_key_update(s, pkt);
+    }
+}
+
+/*
+ * Perform any further processing required following the receipt of a message
+ * from the server
+ */
+WORK_STATE ossl_statem_client_post_process_message(SSL *s, WORK_STATE wst)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    switch (st->hand_state) {
+    default:
+        /* Shouldn't happen */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_OSSL_STATEM_CLIENT_POST_PROCESS_MESSAGE,
+                 ERR_R_INTERNAL_ERROR);
+        return WORK_ERROR;
+
+    case TLS_ST_CR_CERT_VRFY:
+    case TLS_ST_CR_CERT_REQ:
+        return tls_prepare_client_certificate(s, wst);
+    }
+}
+
+int tls_construct_client_hello(SSL *s, WPACKET *pkt)
+{
+    unsigned char *p;
+    size_t sess_id_len;
+    int i, protverr;
+#ifndef OPENSSL_NO_COMP
+    SSL_COMP *comp;
+#endif
+    SSL_SESSION *sess = s->session;
+    unsigned char *session_id;
+
+    /* Work out what SSL/TLS/DTLS version to use */
+    protverr = ssl_set_client_hello_version(s);
+    if (protverr != 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CLIENT_HELLO,
+                 protverr);
+        return 0;
+    }
+
+    if (sess == NULL
+            || !ssl_version_supported(s, sess->ssl_version, NULL)
+            || !SSL_SESSION_is_resumable(sess)) {
+        if (s->hello_retry_request == SSL_HRR_NONE
+                && !ssl_get_new_session(s, 0)) {
+            /* SSLfatal() already called */
+            return 0;
+        }
+    }
+    /* else use the pre-loaded session */
+
+    p = s->s3->client_random;
+
+    /*
+     * for DTLS if client_random is initialized, reuse it, we are
+     * required to use same upon reply to HelloVerify
+     */
+    if (SSL_IS_DTLS(s)) {
+        size_t idx;
+        i = 1;
+        for (idx = 0; idx < sizeof(s->s3->client_random); idx++) {
+            if (p[idx]) {
+                i = 0;
+                break;
+            }
+        }
+    } else {
+        i = (s->hello_retry_request == SSL_HRR_NONE);
+    }
+
+    if (i && ssl_fill_hello_random(s, 0, p, sizeof(s->s3->client_random),
+                                   DOWNGRADE_NONE) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CLIENT_HELLO,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    /*-
+     * version indicates the negotiated version: for example from
+     * an SSLv2/v3 compatible client hello). The client_version
+     * field is the maximum version we permit and it is also
+     * used in RSA encrypted premaster secrets. Some servers can
+     * choke if we initially report a higher version then
+     * renegotiate to a lower one in the premaster secret. This
+     * didn't happen with TLS 1.0 as most servers supported it
+     * but it can with TLS 1.1 or later if the server only supports
+     * 1.0.
+     *
+     * Possible scenario with previous logic:
+     *      1. Client hello indicates TLS 1.2
+     *      2. Server hello says TLS 1.0
+     *      3. RSA encrypted premaster secret uses 1.2.
+     *      4. Handshake proceeds using TLS 1.0.
+     *      5. Server sends hello request to renegotiate.
+     *      6. Client hello indicates TLS v1.0 as we now
+     *         know that is maximum server supports.
+     *      7. Server chokes on RSA encrypted premaster secret
+     *         containing version 1.0.
+     *
+     * For interoperability it should be OK to always use the
+     * maximum version we support in client hello and then rely
+     * on the checking of version to ensure the servers isn't
+     * being inconsistent: for example initially negotiating with
+     * TLS 1.0 and renegotiating with TLS 1.2. We do this by using
+     * client_version in client hello and not resetting it to
+     * the negotiated version.
+     *
+     * For TLS 1.3 we always set the ClientHello version to 1.2 and rely on the
+     * supported_versions extension for the real supported versions.
+     */
+    if (!WPACKET_put_bytes_u16(pkt, s->client_version)
+            || !WPACKET_memcpy(pkt, s->s3->client_random, SSL3_RANDOM_SIZE)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CLIENT_HELLO,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    /* Session ID */
+    session_id = s->session->session_id;
+    if (s->new_session || s->session->ssl_version == TLS1_3_VERSION) {
+        if (s->version == TLS1_3_VERSION
+                && (s->options & SSL_OP_ENABLE_MIDDLEBOX_COMPAT) != 0) {
+            sess_id_len = sizeof(s->tmp_session_id);
+            s->tmp_session_id_len = sess_id_len;
+            session_id = s->tmp_session_id;
+            if (s->hello_retry_request == SSL_HRR_NONE
+                    && RAND_bytes(s->tmp_session_id, sess_id_len) <= 0) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_CONSTRUCT_CLIENT_HELLO,
+                         ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+        } else {
+            sess_id_len = 0;
+        }
+    } else {
+        assert(s->session->session_id_length <= sizeof(s->session->session_id));
+        sess_id_len = s->session->session_id_length;
+        if (s->version == TLS1_3_VERSION) {
+            s->tmp_session_id_len = sess_id_len;
+            memcpy(s->tmp_session_id, s->session->session_id, sess_id_len);
+        }
+    }
+    if (!WPACKET_start_sub_packet_u8(pkt)
+            || (sess_id_len != 0 && !WPACKET_memcpy(pkt, session_id,
+                                                    sess_id_len))
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CLIENT_HELLO,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    /* cookie stuff for DTLS */
+    if (SSL_IS_DTLS(s)) {
+        if (s->d1->cookie_len > sizeof(s->d1->cookie)
+                || !WPACKET_sub_memcpy_u8(pkt, s->d1->cookie,
+                                          s->d1->cookie_len)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CLIENT_HELLO,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+    }
+
+    /* Ciphers supported */
+    if (!WPACKET_start_sub_packet_u16(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CLIENT_HELLO,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (!ssl_cipher_list_to_bytes(s, SSL_get_ciphers(s), pkt)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+    if (!WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CLIENT_HELLO,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    /* COMPRESSION */
+    if (!WPACKET_start_sub_packet_u8(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CLIENT_HELLO,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+#ifndef OPENSSL_NO_COMP
+    if (ssl_allow_compression(s)
+            && s->ctx->comp_methods
+            && (SSL_IS_DTLS(s) || s->s3->tmp.max_ver < TLS1_3_VERSION)) {
+        int compnum = sk_SSL_COMP_num(s->ctx->comp_methods);
+        for (i = 0; i < compnum; i++) {
+            comp = sk_SSL_COMP_value(s->ctx->comp_methods, i);
+            if (!WPACKET_put_bytes_u8(pkt, comp->id)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_CONSTRUCT_CLIENT_HELLO,
+                         ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+        }
+    }
+#endif
+    /* Add the NULL method */
+    if (!WPACKET_put_bytes_u8(pkt, 0) || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CLIENT_HELLO,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    /* TLS extensions */
+    if (!tls_construct_extensions(s, pkt, SSL_EXT_CLIENT_HELLO, NULL, 0)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    return 1;
+}
+
+MSG_PROCESS_RETURN dtls_process_hello_verify(SSL *s, PACKET *pkt)
+{
+    size_t cookie_len;
+    PACKET cookiepkt;
+
+    if (!PACKET_forward(pkt, 2)
+        || !PACKET_get_length_prefixed_1(pkt, &cookiepkt)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_DTLS_PROCESS_HELLO_VERIFY,
+                 SSL_R_LENGTH_MISMATCH);
+        return MSG_PROCESS_ERROR;
+    }
+
+    cookie_len = PACKET_remaining(&cookiepkt);
+    if (cookie_len > sizeof(s->d1->cookie)) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_DTLS_PROCESS_HELLO_VERIFY,
+                 SSL_R_LENGTH_TOO_LONG);
+        return MSG_PROCESS_ERROR;
+    }
+
+    if (!PACKET_copy_bytes(&cookiepkt, s->d1->cookie, cookie_len)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_DTLS_PROCESS_HELLO_VERIFY,
+                 SSL_R_LENGTH_MISMATCH);
+        return MSG_PROCESS_ERROR;
+    }
+    s->d1->cookie_len = cookie_len;
+
+    return MSG_PROCESS_FINISHED_READING;
+}
+
+static int set_client_ciphersuite(SSL *s, const unsigned char *cipherchars)
+{
+    STACK_OF(SSL_CIPHER) *sk;
+    const SSL_CIPHER *c;
+    int i;
+
+    c = ssl_get_cipher_by_char(s, cipherchars, 0);
+    if (c == NULL) {
+        /* unknown cipher */
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_SET_CLIENT_CIPHERSUITE,
+                 SSL_R_UNKNOWN_CIPHER_RETURNED);
+        return 0;
+    }
+    /*
+     * If it is a disabled cipher we either didn't send it in client hello,
+     * or it's not allowed for the selected protocol. So we return an error.
+     */
+    if (ssl_cipher_disabled(s, c, SSL_SECOP_CIPHER_CHECK, 1)) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_SET_CLIENT_CIPHERSUITE,
+                 SSL_R_WRONG_CIPHER_RETURNED);
+        return 0;
+    }
+
+    sk = ssl_get_ciphers_by_id(s);
+    i = sk_SSL_CIPHER_find(sk, c);
+    if (i < 0) {
+        /* we did not say we would use this cipher */
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_SET_CLIENT_CIPHERSUITE,
+                 SSL_R_WRONG_CIPHER_RETURNED);
+        return 0;
+    }
+
+    if (SSL_IS_TLS13(s) && s->s3->tmp.new_cipher != NULL
+            && s->s3->tmp.new_cipher->id != c->id) {
+        /* ServerHello selected a different ciphersuite to that in the HRR */
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_SET_CLIENT_CIPHERSUITE,
+                 SSL_R_WRONG_CIPHER_RETURNED);
+        return 0;
+    }
+
+    /*
+     * Depending on the session caching (internal/external), the cipher
+     * and/or cipher_id values may not be set. Make sure that cipher_id is
+     * set and use it for comparison.
+     */
+    if (s->session->cipher != NULL)
+        s->session->cipher_id = s->session->cipher->id;
+    if (s->hit && (s->session->cipher_id != c->id)) {
+        if (SSL_IS_TLS13(s)) {
+            /*
+             * In TLSv1.3 it is valid for the server to select a different
+             * ciphersuite as long as the hash is the same.
+             */
+            if (ssl_md(c->algorithm2)
+                    != ssl_md(s->session->cipher->algorithm2)) {
+                SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                         SSL_F_SET_CLIENT_CIPHERSUITE,
+                         SSL_R_CIPHERSUITE_DIGEST_HAS_CHANGED);
+                return 0;
+            }
+        } else {
+            /*
+             * Prior to TLSv1.3 resuming a session always meant using the same
+             * ciphersuite.
+             */
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_SET_CLIENT_CIPHERSUITE,
+                     SSL_R_OLD_SESSION_CIPHER_NOT_RETURNED);
+            return 0;
+        }
+    }
+    s->s3->tmp.new_cipher = c;
+
+    return 1;
+}
+
+MSG_PROCESS_RETURN tls_process_server_hello(SSL *s, PACKET *pkt)
+{
+    PACKET session_id, extpkt;
+    size_t session_id_len;
+    const unsigned char *cipherchars;
+    int hrr = 0;
+    unsigned int compression;
+    unsigned int sversion;
+    unsigned int context;
+    RAW_EXTENSION *extensions = NULL;
+#ifndef OPENSSL_NO_COMP
+    SSL_COMP *comp;
+#endif
+
+    if (!PACKET_get_net_2(pkt, &sversion)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_SERVER_HELLO,
+                 SSL_R_LENGTH_MISMATCH);
+        goto err;
+    }
+
+    /* load the server random */
+    if (s->version == TLS1_3_VERSION
+            && sversion == TLS1_2_VERSION
+            && PACKET_remaining(pkt) >= SSL3_RANDOM_SIZE
+            && memcmp(hrrrandom, PACKET_data(pkt), SSL3_RANDOM_SIZE) == 0) {
+        s->hello_retry_request = SSL_HRR_PENDING;
+        hrr = 1;
+        if (!PACKET_forward(pkt, SSL3_RANDOM_SIZE)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_SERVER_HELLO,
+                     SSL_R_LENGTH_MISMATCH);
+            goto err;
+        }
+    } else {
+        if (!PACKET_copy_bytes(pkt, s->s3->server_random, SSL3_RANDOM_SIZE)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_SERVER_HELLO,
+                     SSL_R_LENGTH_MISMATCH);
+            goto err;
+        }
+    }
+
+    /* Get the session-id. */
+    if (!PACKET_get_length_prefixed_1(pkt, &session_id)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_SERVER_HELLO,
+                 SSL_R_LENGTH_MISMATCH);
+        goto err;
+    }
+    session_id_len = PACKET_remaining(&session_id);
+    if (session_id_len > sizeof(s->session->session_id)
+        || session_id_len > SSL3_SESSION_ID_SIZE) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PROCESS_SERVER_HELLO,
+                 SSL_R_SSL3_SESSION_ID_TOO_LONG);
+        goto err;
+    }
+
+    if (!PACKET_get_bytes(pkt, &cipherchars, TLS_CIPHER_LEN)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_SERVER_HELLO,
+                 SSL_R_LENGTH_MISMATCH);
+        goto err;
+    }
+
+    if (!PACKET_get_1(pkt, &compression)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_SERVER_HELLO,
+                 SSL_R_LENGTH_MISMATCH);
+        goto err;
+    }
+
+    /* TLS extensions */
+    if (PACKET_remaining(pkt) == 0 && !hrr) {
+        PACKET_null_init(&extpkt);
+    } else if (!PACKET_as_length_prefixed_2(pkt, &extpkt)
+               || PACKET_remaining(pkt) != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_SERVER_HELLO,
+                 SSL_R_BAD_LENGTH);
+        goto err;
+    }
+
+    if (!hrr) {
+        if (!tls_collect_extensions(s, &extpkt,
+                                    SSL_EXT_TLS1_2_SERVER_HELLO
+                                    | SSL_EXT_TLS1_3_SERVER_HELLO,
+                                    &extensions, NULL, 1)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+
+        if (!ssl_choose_client_version(s, sversion, extensions)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    }
+
+    if (SSL_IS_TLS13(s) || hrr) {
+        if (compression != 0) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_TLS_PROCESS_SERVER_HELLO,
+                     SSL_R_INVALID_COMPRESSION_ALGORITHM);
+            goto err;
+        }
+
+        if (session_id_len != s->tmp_session_id_len
+                || memcmp(PACKET_data(&session_id), s->tmp_session_id,
+                          session_id_len) != 0) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_TLS_PROCESS_SERVER_HELLO, SSL_R_INVALID_SESSION_ID);
+            goto err;
+        }
+    }
+
+    if (hrr) {
+        if (!set_client_ciphersuite(s, cipherchars)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+
+        return tls_process_as_hello_retry_request(s, &extpkt);
+    }
+
+    /*
+     * Now we have chosen the version we need to check again that the extensions
+     * are appropriate for this version.
+     */
+    context = SSL_IS_TLS13(s) ? SSL_EXT_TLS1_3_SERVER_HELLO
+                              : SSL_EXT_TLS1_2_SERVER_HELLO;
+    if (!tls_validate_all_contexts(s, context, extensions)) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PROCESS_SERVER_HELLO,
+                 SSL_R_BAD_EXTENSION);
+        goto err;
+    }
+
+    s->hit = 0;
+
+    if (SSL_IS_TLS13(s)) {
+        /*
+         * In TLSv1.3 a ServerHello message signals a key change so the end of
+         * the message must be on a record boundary.
+         */
+        if (RECORD_LAYER_processed_read_pending(&s->rlayer)) {
+            SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE,
+                     SSL_F_TLS_PROCESS_SERVER_HELLO,
+                     SSL_R_NOT_ON_RECORD_BOUNDARY);
+            goto err;
+        }
+
+        /* This will set s->hit if we are resuming */
+        if (!tls_parse_extension(s, TLSEXT_IDX_psk,
+                                 SSL_EXT_TLS1_3_SERVER_HELLO,
+                                 extensions, NULL, 0)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    } else {
+        /*
+         * Check if we can resume the session based on external pre-shared
+         * secret. EAP-FAST (RFC 4851) supports two types of session resumption.
+         * Resumption based on server-side state works with session IDs.
+         * Resumption based on pre-shared Protected Access Credentials (PACs)
+         * works by overriding the SessionTicket extension at the application
+         * layer, and does not send a session ID. (We do not know whether
+         * EAP-FAST servers would honour the session ID.) Therefore, the session
+         * ID alone is not a reliable indicator of session resumption, so we
+         * first check if we can resume, and later peek at the next handshake
+         * message to see if the server wants to resume.
+         */
+        if (s->version >= TLS1_VERSION
+                && s->ext.session_secret_cb != NULL && s->session->ext.tick) {
+            const SSL_CIPHER *pref_cipher = NULL;
+            /*
+             * s->session->master_key_length is a size_t, but this is an int for
+             * backwards compat reasons
+             */
+            int master_key_length;
+            master_key_length = sizeof(s->session->master_key);
+            if (s->ext.session_secret_cb(s, s->session->master_key,
+                                         &master_key_length,
+                                         NULL, &pref_cipher,
+                                         s->ext.session_secret_cb_arg)
+                     && master_key_length > 0) {
+                s->session->master_key_length = master_key_length;
+                s->session->cipher = pref_cipher ?
+                    pref_cipher : ssl_get_cipher_by_char(s, cipherchars, 0);
+            } else {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_PROCESS_SERVER_HELLO, ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+        }
+
+        if (session_id_len != 0
+                && session_id_len == s->session->session_id_length
+                && memcmp(PACKET_data(&session_id), s->session->session_id,
+                          session_id_len) == 0)
+            s->hit = 1;
+    }
+
+    if (s->hit) {
+        if (s->sid_ctx_length != s->session->sid_ctx_length
+                || memcmp(s->session->sid_ctx, s->sid_ctx, s->sid_ctx_length)) {
+            /* actually a client application bug */
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_TLS_PROCESS_SERVER_HELLO,
+                     SSL_R_ATTEMPT_TO_REUSE_SESSION_IN_DIFFERENT_CONTEXT);
+            goto err;
+        }
+    } else {
+        /*
+         * If we were trying for session-id reuse but the server
+         * didn't resume, make a new SSL_SESSION.
+         * In the case of EAP-FAST and PAC, we do not send a session ID,
+         * so the PAC-based session secret is always preserved. It'll be
+         * overwritten if the server refuses resumption.
+         */
+        if (s->session->session_id_length > 0
+                || (SSL_IS_TLS13(s)
+                    && s->session->ext.tick_identity
+                       != TLSEXT_PSK_BAD_IDENTITY)) {
+            tsan_counter(&s->session_ctx->stats.sess_miss);
+            if (!ssl_get_new_session(s, 0)) {
+                /* SSLfatal() already called */
+                goto err;
+            }
+        }
+
+        s->session->ssl_version = s->version;
+        /*
+         * In TLSv1.2 and below we save the session id we were sent so we can
+         * resume it later. In TLSv1.3 the session id we were sent is just an
+         * echo of what we originally sent in the ClientHello and should not be
+         * used for resumption.
+         */
+        if (!SSL_IS_TLS13(s)) {
+            s->session->session_id_length = session_id_len;
+            /* session_id_len could be 0 */
+            if (session_id_len > 0)
+                memcpy(s->session->session_id, PACKET_data(&session_id),
+                       session_id_len);
+        }
+    }
+
+    /* Session version and negotiated protocol version should match */
+    if (s->version != s->session->ssl_version) {
+        SSLfatal(s, SSL_AD_PROTOCOL_VERSION, SSL_F_TLS_PROCESS_SERVER_HELLO,
+                 SSL_R_SSL_SESSION_VERSION_MISMATCH);
+        goto err;
+    }
+    /*
+     * Now that we know the version, update the check to see if it's an allowed
+     * version.
+     */
+    s->s3->tmp.min_ver = s->version;
+    s->s3->tmp.max_ver = s->version;
+
+    if (!set_client_ciphersuite(s, cipherchars)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+#ifdef OPENSSL_NO_COMP
+    if (compression != 0) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PROCESS_SERVER_HELLO,
+                 SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM);
+        goto err;
+    }
+    /*
+     * If compression is disabled we'd better not try to resume a session
+     * using compression.
+     */
+    if (s->session->compress_meth != 0) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_TLS_PROCESS_SERVER_HELLO,
+                 SSL_R_INCONSISTENT_COMPRESSION);
+        goto err;
+    }
+#else
+    if (s->hit && compression != s->session->compress_meth) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PROCESS_SERVER_HELLO,
+                 SSL_R_OLD_SESSION_COMPRESSION_ALGORITHM_NOT_RETURNED);
+        goto err;
+    }
+    if (compression == 0)
+        comp = NULL;
+    else if (!ssl_allow_compression(s)) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PROCESS_SERVER_HELLO,
+                 SSL_R_COMPRESSION_DISABLED);
+        goto err;
+    } else {
+        comp = ssl3_comp_find(s->ctx->comp_methods, compression);
+    }
+
+    if (compression != 0 && comp == NULL) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PROCESS_SERVER_HELLO,
+                 SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM);
+        goto err;
+    } else {
+        s->s3->tmp.new_compression = comp;
+    }
+#endif
+
+    if (!tls_parse_all_extensions(s, context, extensions, NULL, 0, 1)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+#ifndef OPENSSL_NO_SCTP
+    if (SSL_IS_DTLS(s) && s->hit) {
+        unsigned char sctpauthkey[64];
+        char labelbuffer[sizeof(DTLS1_SCTP_AUTH_LABEL)];
+        size_t labellen;
+
+        /*
+         * Add new shared key for SCTP-Auth, will be ignored if
+         * no SCTP used.
+         */
+        memcpy(labelbuffer, DTLS1_SCTP_AUTH_LABEL,
+               sizeof(DTLS1_SCTP_AUTH_LABEL));
+
+        /* Don't include the terminating zero. */
+        labellen = sizeof(labelbuffer) - 1;
+        if (s->mode & SSL_MODE_DTLS_SCTP_LABEL_LENGTH_BUG)
+            labellen += 1;
+
+        if (SSL_export_keying_material(s, sctpauthkey,
+                                       sizeof(sctpauthkey),
+                                       labelbuffer,
+                                       labellen, NULL, 0, 0) <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_SERVER_HELLO,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        BIO_ctrl(SSL_get_wbio(s),
+                 BIO_CTRL_DGRAM_SCTP_ADD_AUTH_KEY,
+                 sizeof(sctpauthkey), sctpauthkey);
+    }
+#endif
+
+    /*
+     * In TLSv1.3 we have some post-processing to change cipher state, otherwise
+     * we're done with this message
+     */
+    if (SSL_IS_TLS13(s)
+            && (!s->method->ssl3_enc->setup_key_block(s)
+                || !s->method->ssl3_enc->change_cipher_state(s,
+                    SSL3_CC_HANDSHAKE | SSL3_CHANGE_CIPHER_CLIENT_READ))) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    OPENSSL_free(extensions);
+    return MSG_PROCESS_CONTINUE_READING;
+ err:
+    OPENSSL_free(extensions);
+    return MSG_PROCESS_ERROR;
+}
+
+static MSG_PROCESS_RETURN tls_process_as_hello_retry_request(SSL *s,
+                                                             PACKET *extpkt)
+{
+    RAW_EXTENSION *extensions = NULL;
+
+    /*
+     * If we were sending early_data then the enc_write_ctx is now invalid and
+     * should not be used.
+     */
+    EVP_CIPHER_CTX_free(s->enc_write_ctx);
+    s->enc_write_ctx = NULL;
+
+    if (!tls_collect_extensions(s, extpkt, SSL_EXT_TLS1_3_HELLO_RETRY_REQUEST,
+                                &extensions, NULL, 1)
+            || !tls_parse_all_extensions(s, SSL_EXT_TLS1_3_HELLO_RETRY_REQUEST,
+                                         extensions, NULL, 0, 1)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    OPENSSL_free(extensions);
+    extensions = NULL;
+
+    if (s->ext.tls13_cookie_len == 0
+#if !defined(OPENSSL_NO_EC) || !defined(OPENSSL_NO_DH)
+        && s->s3->tmp.pkey != NULL
+#endif
+        ) {
+        /*
+         * We didn't receive a cookie or a new key_share so the next
+         * ClientHello will not change
+         */
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                 SSL_F_TLS_PROCESS_AS_HELLO_RETRY_REQUEST,
+                 SSL_R_NO_CHANGE_FOLLOWING_HRR);
+        goto err;
+    }
+
+    /*
+     * Re-initialise the Transcript Hash. We're going to prepopulate it with
+     * a synthetic message_hash in place of ClientHello1.
+     */
+    if (!create_synthetic_message_hash(s, NULL, 0, NULL, 0)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    /*
+     * Add this message to the Transcript Hash. Normally this is done
+     * automatically prior to the message processing stage. However due to the
+     * need to create the synthetic message hash, we defer that step until now
+     * for HRR messages.
+     */
+    if (!ssl3_finish_mac(s, (unsigned char *)s->init_buf->data,
+                                s->init_num + SSL3_HM_HEADER_LENGTH)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    return MSG_PROCESS_FINISHED_READING;
+ err:
+    OPENSSL_free(extensions);
+    return MSG_PROCESS_ERROR;
+}
+
+MSG_PROCESS_RETURN tls_process_server_certificate(SSL *s, PACKET *pkt)
+{
+    int i;
+    MSG_PROCESS_RETURN ret = MSG_PROCESS_ERROR;
+    unsigned long cert_list_len, cert_len;
+    X509 *x = NULL;
+    const unsigned char *certstart, *certbytes;
+    STACK_OF(X509) *sk = NULL;
+    EVP_PKEY *pkey = NULL;
+    size_t chainidx, certidx;
+    unsigned int context = 0;
+    const SSL_CERT_LOOKUP *clu;
+
+    if ((sk = sk_X509_new_null()) == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_SERVER_CERTIFICATE,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if ((SSL_IS_TLS13(s) && !PACKET_get_1(pkt, &context))
+            || context != 0
+            || !PACKET_get_net_3(pkt, &cert_list_len)
+            || PACKET_remaining(pkt) != cert_list_len
+            || PACKET_remaining(pkt) == 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_SERVER_CERTIFICATE,
+                 SSL_R_LENGTH_MISMATCH);
+        goto err;
+    }
+    for (chainidx = 0; PACKET_remaining(pkt); chainidx++) {
+        if (!PACKET_get_net_3(pkt, &cert_len)
+            || !PACKET_get_bytes(pkt, &certbytes, cert_len)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PROCESS_SERVER_CERTIFICATE,
+                     SSL_R_CERT_LENGTH_MISMATCH);
+            goto err;
+        }
+
+        certstart = certbytes;
+        x = d2i_X509(NULL, (const unsigned char **)&certbytes, cert_len);
+        if (x == NULL) {
+            SSLfatal(s, SSL_AD_BAD_CERTIFICATE,
+                     SSL_F_TLS_PROCESS_SERVER_CERTIFICATE, ERR_R_ASN1_LIB);
+            goto err;
+        }
+        if (certbytes != (certstart + cert_len)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PROCESS_SERVER_CERTIFICATE,
+                     SSL_R_CERT_LENGTH_MISMATCH);
+            goto err;
+        }
+
+        if (SSL_IS_TLS13(s)) {
+            RAW_EXTENSION *rawexts = NULL;
+            PACKET extensions;
+
+            if (!PACKET_get_length_prefixed_2(pkt, &extensions)) {
+                SSLfatal(s, SSL_AD_DECODE_ERROR,
+                         SSL_F_TLS_PROCESS_SERVER_CERTIFICATE,
+                         SSL_R_BAD_LENGTH);
+                goto err;
+            }
+            if (!tls_collect_extensions(s, &extensions,
+                                        SSL_EXT_TLS1_3_CERTIFICATE, &rawexts,
+                                        NULL, chainidx == 0)
+                || !tls_parse_all_extensions(s, SSL_EXT_TLS1_3_CERTIFICATE,
+                                             rawexts, x, chainidx,
+                                             PACKET_remaining(pkt) == 0)) {
+                OPENSSL_free(rawexts);
+                /* SSLfatal already called */
+                goto err;
+            }
+            OPENSSL_free(rawexts);
+        }
+
+        if (!sk_X509_push(sk, x)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_PROCESS_SERVER_CERTIFICATE,
+                     ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        x = NULL;
+    }
+
+    i = ssl_verify_cert_chain(s, sk);
+    /*
+     * The documented interface is that SSL_VERIFY_PEER should be set in order
+     * for client side verification of the server certificate to take place.
+     * However, historically the code has only checked that *any* flag is set
+     * to cause server verification to take place. Use of the other flags makes
+     * no sense in client mode. An attempt to clean up the semantics was
+     * reverted because at least one application *only* set
+     * SSL_VERIFY_FAIL_IF_NO_PEER_CERT. Prior to the clean up this still caused
+     * server verification to take place, after the clean up it silently did
+     * nothing. SSL_CTX_set_verify()/SSL_set_verify() cannot validate the flags
+     * sent to them because they are void functions. Therefore, we now use the
+     * (less clean) historic behaviour of performing validation if any flag is
+     * set. The *documented* interface remains the same.
+     */
+    if (s->verify_mode != SSL_VERIFY_NONE && i <= 0) {
+        SSLfatal(s, ssl_x509err2alert(s->verify_result),
+                 SSL_F_TLS_PROCESS_SERVER_CERTIFICATE,
+                 SSL_R_CERTIFICATE_VERIFY_FAILED);
+        goto err;
+    }
+    ERR_clear_error();          /* but we keep s->verify_result */
+    if (i > 1) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                 SSL_F_TLS_PROCESS_SERVER_CERTIFICATE, i);
+        goto err;
+    }
+
+    s->session->peer_chain = sk;
+    /*
+     * Inconsistency alert: cert_chain does include the peer's certificate,
+     * which we don't include in statem_srvr.c
+     */
+    x = sk_X509_value(sk, 0);
+    sk = NULL;
+
+    pkey = X509_get0_pubkey(x);
+
+    if (pkey == NULL || EVP_PKEY_missing_parameters(pkey)) {
+        x = NULL;
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_SERVER_CERTIFICATE,
+                 SSL_R_UNABLE_TO_FIND_PUBLIC_KEY_PARAMETERS);
+        goto err;
+    }
+
+    if ((clu = ssl_cert_lookup_by_pkey(pkey, &certidx)) == NULL) {
+        x = NULL;
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                 SSL_F_TLS_PROCESS_SERVER_CERTIFICATE,
+                 SSL_R_UNKNOWN_CERTIFICATE_TYPE);
+        goto err;
+    }
+    /*
+     * Check certificate type is consistent with ciphersuite. For TLS 1.3
+     * skip check since TLS 1.3 ciphersuites can be used with any certificate
+     * type.
+     */
+    if (!SSL_IS_TLS13(s)) {
+        if ((clu->amask & s->s3->tmp.new_cipher->algorithm_auth) == 0) {
+            x = NULL;
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_TLS_PROCESS_SERVER_CERTIFICATE,
+                     SSL_R_WRONG_CERTIFICATE_TYPE);
+            goto err;
+        }
+    }
+    s->session->peer_type = certidx;
+
+    X509_free(s->session->peer);
+    X509_up_ref(x);
+    s->session->peer = x;
+    s->session->verify_result = s->verify_result;
+    x = NULL;
+
+    /* Save the current hash state for when we receive the CertificateVerify */
+    if (SSL_IS_TLS13(s)
+            && !ssl_handshake_hash(s, s->cert_verify_hash,
+                                   sizeof(s->cert_verify_hash),
+                                   &s->cert_verify_hash_len)) {
+        /* SSLfatal() already called */;
+        goto err;
+    }
+
+    ret = MSG_PROCESS_CONTINUE_READING;
+
+ err:
+    X509_free(x);
+    sk_X509_pop_free(sk, X509_free);
+    return ret;
+}
+
+static int tls_process_ske_psk_preamble(SSL *s, PACKET *pkt)
+{
+#ifndef OPENSSL_NO_PSK
+    PACKET psk_identity_hint;
+
+    /* PSK ciphersuites are preceded by an identity hint */
+
+    if (!PACKET_get_length_prefixed_2(pkt, &psk_identity_hint)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_SKE_PSK_PREAMBLE,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+
+    /*
+     * Store PSK identity hint for later use, hint is used in
+     * tls_construct_client_key_exchange.  Assume that the maximum length of
+     * a PSK identity hint can be as long as the maximum length of a PSK
+     * identity.
+     */
+    if (PACKET_remaining(&psk_identity_hint) > PSK_MAX_IDENTITY_LEN) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                 SSL_F_TLS_PROCESS_SKE_PSK_PREAMBLE,
+                 SSL_R_DATA_LENGTH_TOO_LONG);
+        return 0;
+    }
+
+    if (PACKET_remaining(&psk_identity_hint) == 0) {
+        OPENSSL_free(s->session->psk_identity_hint);
+        s->session->psk_identity_hint = NULL;
+    } else if (!PACKET_strndup(&psk_identity_hint,
+                               &s->session->psk_identity_hint)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_SKE_PSK_PREAMBLE,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    return 1;
+#else
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_SKE_PSK_PREAMBLE,
+             ERR_R_INTERNAL_ERROR);
+    return 0;
+#endif
+}
+
+static int tls_process_ske_srp(SSL *s, PACKET *pkt, EVP_PKEY **pkey)
+{
+#ifndef OPENSSL_NO_SRP
+    PACKET prime, generator, salt, server_pub;
+
+    if (!PACKET_get_length_prefixed_2(pkt, &prime)
+        || !PACKET_get_length_prefixed_2(pkt, &generator)
+        || !PACKET_get_length_prefixed_1(pkt, &salt)
+        || !PACKET_get_length_prefixed_2(pkt, &server_pub)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_SKE_SRP,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+
+    /* TODO(size_t): Convert BN_bin2bn() calls */
+    if ((s->srp_ctx.N =
+         BN_bin2bn(PACKET_data(&prime),
+                   (int)PACKET_remaining(&prime), NULL)) == NULL
+        || (s->srp_ctx.g =
+            BN_bin2bn(PACKET_data(&generator),
+                      (int)PACKET_remaining(&generator), NULL)) == NULL
+        || (s->srp_ctx.s =
+            BN_bin2bn(PACKET_data(&salt),
+                      (int)PACKET_remaining(&salt), NULL)) == NULL
+        || (s->srp_ctx.B =
+            BN_bin2bn(PACKET_data(&server_pub),
+                      (int)PACKET_remaining(&server_pub), NULL)) == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_SKE_SRP,
+                 ERR_R_BN_LIB);
+        return 0;
+    }
+
+    if (!srp_verify_server_param(s)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    /* We must check if there is a certificate */
+    if (s->s3->tmp.new_cipher->algorithm_auth & (SSL_aRSA | SSL_aDSS))
+        *pkey = X509_get0_pubkey(s->session->peer);
+
+    return 1;
+#else
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_SKE_SRP,
+             ERR_R_INTERNAL_ERROR);
+    return 0;
+#endif
+}
+
+static int tls_process_ske_dhe(SSL *s, PACKET *pkt, EVP_PKEY **pkey)
+{
+#ifndef OPENSSL_NO_DH
+    PACKET prime, generator, pub_key;
+    EVP_PKEY *peer_tmp = NULL;
+
+    DH *dh = NULL;
+    BIGNUM *p = NULL, *g = NULL, *bnpub_key = NULL;
+
+    int check_bits = 0;
+
+    if (!PACKET_get_length_prefixed_2(pkt, &prime)
+        || !PACKET_get_length_prefixed_2(pkt, &generator)
+        || !PACKET_get_length_prefixed_2(pkt, &pub_key)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_SKE_DHE,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+
+    peer_tmp = EVP_PKEY_new();
+    dh = DH_new();
+
+    if (peer_tmp == NULL || dh == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_SKE_DHE,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    /* TODO(size_t): Convert these calls */
+    p = BN_bin2bn(PACKET_data(&prime), (int)PACKET_remaining(&prime), NULL);
+    g = BN_bin2bn(PACKET_data(&generator), (int)PACKET_remaining(&generator),
+                  NULL);
+    bnpub_key = BN_bin2bn(PACKET_data(&pub_key),
+                          (int)PACKET_remaining(&pub_key), NULL);
+    if (p == NULL || g == NULL || bnpub_key == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_SKE_DHE,
+                 ERR_R_BN_LIB);
+        goto err;
+    }
+
+    /* test non-zero pubkey */
+    if (BN_is_zero(bnpub_key)) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PROCESS_SKE_DHE,
+                 SSL_R_BAD_DH_VALUE);
+        goto err;
+    }
+
+    if (!DH_set0_pqg(dh, p, NULL, g)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_SKE_DHE,
+                 ERR_R_BN_LIB);
+        goto err;
+    }
+    p = g = NULL;
+
+    if (DH_check_params(dh, &check_bits) == 0 || check_bits != 0) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PROCESS_SKE_DHE,
+                 SSL_R_BAD_DH_VALUE);
+        goto err;
+    }
+
+    if (!DH_set0_key(dh, bnpub_key, NULL)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_SKE_DHE,
+                 ERR_R_BN_LIB);
+        goto err;
+    }
+    bnpub_key = NULL;
+
+    if (!ssl_security(s, SSL_SECOP_TMP_DH, DH_security_bits(dh), 0, dh)) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_TLS_PROCESS_SKE_DHE,
+                 SSL_R_DH_KEY_TOO_SMALL);
+        goto err;
+    }
+
+    if (EVP_PKEY_assign_DH(peer_tmp, dh) == 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_SKE_DHE,
+                 ERR_R_EVP_LIB);
+        goto err;
+    }
+
+    s->s3->peer_tmp = peer_tmp;
+
+    /*
+     * FIXME: This makes assumptions about which ciphersuites come with
+     * public keys. We should have a less ad-hoc way of doing this
+     */
+    if (s->s3->tmp.new_cipher->algorithm_auth & (SSL_aRSA | SSL_aDSS))
+        *pkey = X509_get0_pubkey(s->session->peer);
+    /* else anonymous DH, so no certificate or pkey. */
+
+    return 1;
+
+ err:
+    BN_free(p);
+    BN_free(g);
+    BN_free(bnpub_key);
+    DH_free(dh);
+    EVP_PKEY_free(peer_tmp);
+
+    return 0;
+#else
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_SKE_DHE,
+             ERR_R_INTERNAL_ERROR);
+    return 0;
+#endif
+}
+
+static int tls_process_ske_ecdhe(SSL *s, PACKET *pkt, EVP_PKEY **pkey)
+{
+#ifndef OPENSSL_NO_EC
+    PACKET encoded_pt;
+    unsigned int curve_type, curve_id;
+
+    /*
+     * Extract elliptic curve parameters and the server's ephemeral ECDH
+     * public key. We only support named (not generic) curves and
+     * ECParameters in this case is just three bytes.
+     */
+    if (!PACKET_get_1(pkt, &curve_type) || !PACKET_get_net_2(pkt, &curve_id)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_SKE_ECDHE,
+                 SSL_R_LENGTH_TOO_SHORT);
+        return 0;
+    }
+    /*
+     * Check curve is named curve type and one of our preferences, if not
+     * server has sent an invalid curve.
+     */
+    if (curve_type != NAMED_CURVE_TYPE
+            || !tls1_check_group_id(s, curve_id, 1)) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PROCESS_SKE_ECDHE,
+                 SSL_R_WRONG_CURVE);
+        return 0;
+    }
+
+    if ((s->s3->peer_tmp = ssl_generate_param_group(curve_id)) == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_SKE_ECDHE,
+                 SSL_R_UNABLE_TO_FIND_ECDH_PARAMETERS);
+        return 0;
+    }
+
+    if (!PACKET_get_length_prefixed_1(pkt, &encoded_pt)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_SKE_ECDHE,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+
+    if (!EVP_PKEY_set1_tls_encodedpoint(s->s3->peer_tmp,
+                                        PACKET_data(&encoded_pt),
+                                        PACKET_remaining(&encoded_pt))) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PROCESS_SKE_ECDHE,
+                 SSL_R_BAD_ECPOINT);
+        return 0;
+    }
+
+    /*
+     * The ECC/TLS specification does not mention the use of DSA to sign
+     * ECParameters in the server key exchange message. We do support RSA
+     * and ECDSA.
+     */
+    if (s->s3->tmp.new_cipher->algorithm_auth & SSL_aECDSA)
+        *pkey = X509_get0_pubkey(s->session->peer);
+    else if (s->s3->tmp.new_cipher->algorithm_auth & SSL_aRSA)
+        *pkey = X509_get0_pubkey(s->session->peer);
+    /* else anonymous ECDH, so no certificate or pkey. */
+
+    return 1;
+#else
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_SKE_ECDHE,
+             ERR_R_INTERNAL_ERROR);
+    return 0;
+#endif
+}
+
+MSG_PROCESS_RETURN tls_process_key_exchange(SSL *s, PACKET *pkt)
+{
+    long alg_k;
+    EVP_PKEY *pkey = NULL;
+    EVP_MD_CTX *md_ctx = NULL;
+    EVP_PKEY_CTX *pctx = NULL;
+    PACKET save_param_start, signature;
+
+    alg_k = s->s3->tmp.new_cipher->algorithm_mkey;
+
+    save_param_start = *pkt;
+
+#if !defined(OPENSSL_NO_EC) || !defined(OPENSSL_NO_DH)
+    EVP_PKEY_free(s->s3->peer_tmp);
+    s->s3->peer_tmp = NULL;
+#endif
+
+    if (alg_k & SSL_PSK) {
+        if (!tls_process_ske_psk_preamble(s, pkt)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    }
+
+    /* Nothing else to do for plain PSK or RSAPSK */
+    if (alg_k & (SSL_kPSK | SSL_kRSAPSK)) {
+    } else if (alg_k & SSL_kSRP) {
+        if (!tls_process_ske_srp(s, pkt, &pkey)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    } else if (alg_k & (SSL_kDHE | SSL_kDHEPSK)) {
+        if (!tls_process_ske_dhe(s, pkt, &pkey)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    } else if (alg_k & (SSL_kECDHE | SSL_kECDHEPSK)) {
+        if (!tls_process_ske_ecdhe(s, pkt, &pkey)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    } else if (alg_k) {
+        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_TLS_PROCESS_KEY_EXCHANGE,
+                 SSL_R_UNEXPECTED_MESSAGE);
+        goto err;
+    }
+
+    /* if it was signed, check the signature */
+    if (pkey != NULL) {
+        PACKET params;
+        int maxsig;
+        const EVP_MD *md = NULL;
+        unsigned char *tbs;
+        size_t tbslen;
+        int rv;
+
+        /*
+         * |pkt| now points to the beginning of the signature, so the difference
+         * equals the length of the parameters.
+         */
+        if (!PACKET_get_sub_packet(&save_param_start, &params,
+                                   PACKET_remaining(&save_param_start) -
+                                   PACKET_remaining(pkt))) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        if (SSL_USE_SIGALGS(s)) {
+            unsigned int sigalg;
+
+            if (!PACKET_get_net_2(pkt, &sigalg)) {
+                SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_KEY_EXCHANGE,
+                         SSL_R_LENGTH_TOO_SHORT);
+                goto err;
+            }
+            if (tls12_check_peer_sigalg(s, sigalg, pkey) <=0) {
+                /* SSLfatal() already called */
+                goto err;
+            }
+        } else if (!tls1_set_peer_legacy_sigalg(s, pkey)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        if (!tls1_lookup_md(s->s3->tmp.peer_sigalg, &md)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+#ifdef SSL_DEBUG
+        if (SSL_USE_SIGALGS(s))
+            fprintf(stderr, "USING TLSv1.2 HASH %s\n",
+                    md == NULL ? "n/a" : EVP_MD_name(md));
+#endif
+
+        if (!PACKET_get_length_prefixed_2(pkt, &signature)
+            || PACKET_remaining(pkt) != 0) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_KEY_EXCHANGE,
+                     SSL_R_LENGTH_MISMATCH);
+            goto err;
+        }
+        maxsig = EVP_PKEY_size(pkey);
+        if (maxsig < 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        /*
+         * Check signature length
+         */
+        if (PACKET_remaining(&signature) > (size_t)maxsig) {
+            /* wrong packet length */
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_KEY_EXCHANGE,
+                   SSL_R_WRONG_SIGNATURE_LENGTH);
+            goto err;
+        }
+
+        md_ctx = EVP_MD_CTX_new();
+        if (md_ctx == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_KEY_EXCHANGE,
+                     ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+
+        if (EVP_DigestVerifyInit(md_ctx, &pctx, md, NULL, pkey) <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_KEY_EXCHANGE,
+                     ERR_R_EVP_LIB);
+            goto err;
+        }
+        if (SSL_USE_PSS(s)) {
+            if (EVP_PKEY_CTX_set_rsa_padding(pctx, RSA_PKCS1_PSS_PADDING) <= 0
+                || EVP_PKEY_CTX_set_rsa_pss_saltlen(pctx,
+                                                RSA_PSS_SALTLEN_DIGEST) <= 0) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_PROCESS_KEY_EXCHANGE, ERR_R_EVP_LIB);
+                goto err;
+            }
+        }
+        tbslen = construct_key_exchange_tbs(s, &tbs, PACKET_data(&params),
+                                            PACKET_remaining(&params));
+        if (tbslen == 0) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+
+        rv = EVP_DigestVerify(md_ctx, PACKET_data(&signature),
+                              PACKET_remaining(&signature), tbs, tbslen);
+        OPENSSL_free(tbs);
+        if (rv <= 0) {
+            SSLfatal(s, SSL_AD_DECRYPT_ERROR, SSL_F_TLS_PROCESS_KEY_EXCHANGE,
+                     SSL_R_BAD_SIGNATURE);
+            goto err;
+        }
+        EVP_MD_CTX_free(md_ctx);
+        md_ctx = NULL;
+    } else {
+        /* aNULL, aSRP or PSK do not need public keys */
+        if (!(s->s3->tmp.new_cipher->algorithm_auth & (SSL_aNULL | SSL_aSRP))
+            && !(alg_k & SSL_PSK)) {
+            /* Might be wrong key type, check it */
+            if (ssl3_check_cert_and_algorithm(s)) {
+                SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_KEY_EXCHANGE,
+                         SSL_R_BAD_DATA);
+            }
+            /* else this shouldn't happen, SSLfatal() already called */
+            goto err;
+        }
+        /* still data left over */
+        if (PACKET_remaining(pkt) != 0) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_KEY_EXCHANGE,
+                     SSL_R_EXTRA_DATA_IN_MESSAGE);
+            goto err;
+        }
+    }
+
+    return MSG_PROCESS_CONTINUE_READING;
+ err:
+    EVP_MD_CTX_free(md_ctx);
+    return MSG_PROCESS_ERROR;
+}
+
+MSG_PROCESS_RETURN tls_process_certificate_request(SSL *s, PACKET *pkt)
+{
+    size_t i;
+
+    /* Clear certificate validity flags */
+    for (i = 0; i < SSL_PKEY_NUM; i++)
+        s->s3->tmp.valid_flags[i] = 0;
+
+    if (SSL_IS_TLS13(s)) {
+        PACKET reqctx, extensions;
+        RAW_EXTENSION *rawexts = NULL;
+
+        if ((s->shutdown & SSL_SENT_SHUTDOWN) != 0) {
+            /*
+             * We already sent close_notify. This can only happen in TLSv1.3
+             * post-handshake messages. We can't reasonably respond to this, so
+             * we just ignore it
+             */
+            return MSG_PROCESS_FINISHED_READING;
+        }
+
+        /* Free and zero certificate types: it is not present in TLS 1.3 */
+        OPENSSL_free(s->s3->tmp.ctype);
+        s->s3->tmp.ctype = NULL;
+        s->s3->tmp.ctype_len = 0;
+        OPENSSL_free(s->pha_context);
+        s->pha_context = NULL;
+
+        if (!PACKET_get_length_prefixed_1(pkt, &reqctx) ||
+            !PACKET_memdup(&reqctx, &s->pha_context, &s->pha_context_len)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PROCESS_CERTIFICATE_REQUEST,
+                     SSL_R_LENGTH_MISMATCH);
+            return MSG_PROCESS_ERROR;
+        }
+
+        if (!PACKET_get_length_prefixed_2(pkt, &extensions)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PROCESS_CERTIFICATE_REQUEST,
+                     SSL_R_BAD_LENGTH);
+            return MSG_PROCESS_ERROR;
+        }
+        if (!tls_collect_extensions(s, &extensions,
+                                    SSL_EXT_TLS1_3_CERTIFICATE_REQUEST,
+                                    &rawexts, NULL, 1)
+            || !tls_parse_all_extensions(s, SSL_EXT_TLS1_3_CERTIFICATE_REQUEST,
+                                         rawexts, NULL, 0, 1)) {
+            /* SSLfatal() already called */
+            OPENSSL_free(rawexts);
+            return MSG_PROCESS_ERROR;
+        }
+        OPENSSL_free(rawexts);
+        if (!tls1_process_sigalgs(s)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_PROCESS_CERTIFICATE_REQUEST,
+                     SSL_R_BAD_LENGTH);
+            return MSG_PROCESS_ERROR;
+        }
+    } else {
+        PACKET ctypes;
+
+        /* get the certificate types */
+        if (!PACKET_get_length_prefixed_1(pkt, &ctypes)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PROCESS_CERTIFICATE_REQUEST,
+                     SSL_R_LENGTH_MISMATCH);
+            return MSG_PROCESS_ERROR;
+        }
+
+        if (!PACKET_memdup(&ctypes, &s->s3->tmp.ctype, &s->s3->tmp.ctype_len)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_PROCESS_CERTIFICATE_REQUEST,
+                     ERR_R_INTERNAL_ERROR);
+            return MSG_PROCESS_ERROR;
+        }
+
+        if (SSL_USE_SIGALGS(s)) {
+            PACKET sigalgs;
+
+            if (!PACKET_get_length_prefixed_2(pkt, &sigalgs)) {
+                SSLfatal(s, SSL_AD_DECODE_ERROR,
+                         SSL_F_TLS_PROCESS_CERTIFICATE_REQUEST,
+                         SSL_R_LENGTH_MISMATCH);
+                return MSG_PROCESS_ERROR;
+            }
+
+            /*
+             * Despite this being for certificates, preserve compatibility
+             * with pre-TLS 1.3 and use the regular sigalgs field.
+             */
+            if (!tls1_save_sigalgs(s, &sigalgs, 0)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_PROCESS_CERTIFICATE_REQUEST,
+                         SSL_R_SIGNATURE_ALGORITHMS_ERROR);
+                return MSG_PROCESS_ERROR;
+            }
+            if (!tls1_process_sigalgs(s)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_PROCESS_CERTIFICATE_REQUEST,
+                         ERR_R_MALLOC_FAILURE);
+                return MSG_PROCESS_ERROR;
+            }
+        }
+
+        /* get the CA RDNs */
+        if (!parse_ca_names(s, pkt)) {
+            /* SSLfatal() already called */
+            return MSG_PROCESS_ERROR;
+        }
+    }
+
+    if (PACKET_remaining(pkt) != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_PROCESS_CERTIFICATE_REQUEST,
+                 SSL_R_LENGTH_MISMATCH);
+        return MSG_PROCESS_ERROR;
+    }
+
+    /* we should setup a certificate to return.... */
+    s->s3->tmp.cert_req = 1;
+
+    /*
+     * In TLSv1.3 we don't prepare the client certificate yet. We wait until
+     * after the CertificateVerify message has been received. This is because
+     * in TLSv1.3 the CertificateRequest arrives before the Certificate message
+     * but in TLSv1.2 it is the other way around. We want to make sure that
+     * SSL_get_peer_certificate() returns something sensible in
+     * client_cert_cb.
+     */
+    if (SSL_IS_TLS13(s) && s->post_handshake_auth != SSL_PHA_REQUESTED)
+        return MSG_PROCESS_CONTINUE_READING;
+
+    return MSG_PROCESS_CONTINUE_PROCESSING;
+}
+
+MSG_PROCESS_RETURN tls_process_new_session_ticket(SSL *s, PACKET *pkt)
+{
+    unsigned int ticklen;
+    unsigned long ticket_lifetime_hint, age_add = 0;
+    unsigned int sess_len;
+    RAW_EXTENSION *exts = NULL;
+    PACKET nonce;
+
+    PACKET_null_init(&nonce);
+
+    if (!PACKET_get_net_4(pkt, &ticket_lifetime_hint)
+        || (SSL_IS_TLS13(s)
+            && (!PACKET_get_net_4(pkt, &age_add)
+                || !PACKET_get_length_prefixed_1(pkt, &nonce)))
+        || !PACKET_get_net_2(pkt, &ticklen)
+        || (SSL_IS_TLS13(s) ? (ticklen == 0 || PACKET_remaining(pkt) < ticklen)
+                            : PACKET_remaining(pkt) != ticklen)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_NEW_SESSION_TICKET,
+                 SSL_R_LENGTH_MISMATCH);
+        goto err;
+    }
+
+    /*
+     * Server is allowed to change its mind (in <=TLSv1.2) and send an empty
+     * ticket. We already checked this TLSv1.3 case above, so it should never
+     * be 0 here in that instance
+     */
+    if (ticklen == 0)
+        return MSG_PROCESS_CONTINUE_READING;
+
+    /*
+     * Sessions must be immutable once they go into the session cache. Otherwise
+     * we can get multi-thread problems. Therefore we don't "update" sessions,
+     * we replace them with a duplicate. In TLSv1.3 we need to do this every
+     * time a NewSessionTicket arrives because those messages arrive
+     * post-handshake and the session may have already gone into the session
+     * cache.
+     */
+    if (SSL_IS_TLS13(s) || s->session->session_id_length > 0) {
+        SSL_SESSION *new_sess;
+
+        /*
+         * We reused an existing session, so we need to replace it with a new
+         * one
+         */
+        if ((new_sess = ssl_session_dup(s->session, 0)) == 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_PROCESS_NEW_SESSION_TICKET,
+                     ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+
+        if ((s->session_ctx->session_cache_mode & SSL_SESS_CACHE_CLIENT) != 0
+                && !SSL_IS_TLS13(s)) {
+            /*
+             * In TLSv1.2 and below the arrival of a new tickets signals that
+             * any old ticket we were using is now out of date, so we remove the
+             * old session from the cache. We carry on if this fails
+             */
+            SSL_CTX_remove_session(s->session_ctx, s->session);
+        }
+
+        SSL_SESSION_free(s->session);
+        s->session = new_sess;
+    }
+
+    /*
+     * Technically the cast to long here is not guaranteed by the C standard -
+     * but we use it elsewhere, so this should be ok.
+     */
+    s->session->time = (long)time(NULL);
+
+    OPENSSL_free(s->session->ext.tick);
+    s->session->ext.tick = NULL;
+    s->session->ext.ticklen = 0;
+
+    s->session->ext.tick = OPENSSL_malloc(ticklen);
+    if (s->session->ext.tick == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_NEW_SESSION_TICKET,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if (!PACKET_copy_bytes(pkt, s->session->ext.tick, ticklen)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_NEW_SESSION_TICKET,
+                 SSL_R_LENGTH_MISMATCH);
+        goto err;
+    }
+
+    s->session->ext.tick_lifetime_hint = ticket_lifetime_hint;
+    s->session->ext.tick_age_add = age_add;
+    s->session->ext.ticklen = ticklen;
+
+    if (SSL_IS_TLS13(s)) {
+        PACKET extpkt;
+
+        if (!PACKET_as_length_prefixed_2(pkt, &extpkt)
+                || PACKET_remaining(pkt) != 0) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PROCESS_NEW_SESSION_TICKET,
+                     SSL_R_LENGTH_MISMATCH);
+            goto err;
+        }
+
+        if (!tls_collect_extensions(s, &extpkt,
+                                    SSL_EXT_TLS1_3_NEW_SESSION_TICKET, &exts,
+                                    NULL, 1)
+                || !tls_parse_all_extensions(s,
+                                             SSL_EXT_TLS1_3_NEW_SESSION_TICKET,
+                                             exts, NULL, 0, 1)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    }
+
+    /*
+     * There are two ways to detect a resumed ticket session. One is to set
+     * an appropriate session ID and then the server must return a match in
+     * ServerHello. This allows the normal client session ID matching to work
+     * and we know much earlier that the ticket has been accepted. The
+     * other way is to set zero length session ID when the ticket is
+     * presented and rely on the handshake to determine session resumption.
+     * We choose the former approach because this fits in with assumptions
+     * elsewhere in OpenSSL. The session ID is set to the SHA256 (or SHA1 is
+     * SHA256 is disabled) hash of the ticket.
+     */
+    /*
+     * TODO(size_t): we use sess_len here because EVP_Digest expects an int
+     * but s->session->session_id_length is a size_t
+     */
+    if (!EVP_Digest(s->session->ext.tick, ticklen,
+                    s->session->session_id, &sess_len,
+                    EVP_sha256(), NULL)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_NEW_SESSION_TICKET,
+                 ERR_R_EVP_LIB);
+        goto err;
+    }
+    s->session->session_id_length = sess_len;
+    s->session->not_resumable = 0;
+
+    /* This is a standalone message in TLSv1.3, so there is no more to read */
+    if (SSL_IS_TLS13(s)) {
+        const EVP_MD *md = ssl_handshake_md(s);
+        int hashleni = EVP_MD_size(md);
+        size_t hashlen;
+        static const unsigned char nonce_label[] = "resumption";
+
+        /* Ensure cast to size_t is safe */
+        if (!ossl_assert(hashleni >= 0)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_PROCESS_NEW_SESSION_TICKET,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        hashlen = (size_t)hashleni;
+
+        if (!tls13_hkdf_expand(s, md, s->resumption_master_secret,
+                               nonce_label,
+                               sizeof(nonce_label) - 1,
+                               PACKET_data(&nonce),
+                               PACKET_remaining(&nonce),
+                               s->session->master_key,
+                               hashlen, 1)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+        s->session->master_key_length = hashlen;
+
+        OPENSSL_free(exts);
+        ssl_update_cache(s, SSL_SESS_CACHE_CLIENT);
+        return MSG_PROCESS_FINISHED_READING;
+    }
+
+    return MSG_PROCESS_CONTINUE_READING;
+ err:
+    OPENSSL_free(exts);
+    return MSG_PROCESS_ERROR;
+}
+
+/*
+ * In TLSv1.3 this is called from the extensions code, otherwise it is used to
+ * parse a separate message. Returns 1 on success or 0 on failure
+ */
+int tls_process_cert_status_body(SSL *s, PACKET *pkt)
+{
+    size_t resplen;
+    unsigned int type;
+
+    if (!PACKET_get_1(pkt, &type)
+        || type != TLSEXT_STATUSTYPE_ocsp) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CERT_STATUS_BODY,
+                 SSL_R_UNSUPPORTED_STATUS_TYPE);
+        return 0;
+    }
+    if (!PACKET_get_net_3_len(pkt, &resplen)
+        || PACKET_remaining(pkt) != resplen) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CERT_STATUS_BODY,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+    s->ext.ocsp.resp = OPENSSL_malloc(resplen);
+    if (s->ext.ocsp.resp == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CERT_STATUS_BODY,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    if (!PACKET_copy_bytes(pkt, s->ext.ocsp.resp, resplen)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CERT_STATUS_BODY,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+    s->ext.ocsp.resp_len = resplen;
+
+    return 1;
+}
+
+
+MSG_PROCESS_RETURN tls_process_cert_status(SSL *s, PACKET *pkt)
+{
+    if (!tls_process_cert_status_body(s, pkt)) {
+        /* SSLfatal() already called */
+        return MSG_PROCESS_ERROR;
+    }
+
+    return MSG_PROCESS_CONTINUE_READING;
+}
+
+/*
+ * Perform miscellaneous checks and processing after we have received the
+ * server's initial flight. In TLS1.3 this is after the Server Finished message.
+ * In <=TLS1.2 this is after the ServerDone message. Returns 1 on success or 0
+ * on failure.
+ */
+int tls_process_initial_server_flight(SSL *s)
+{
+    /*
+     * at this point we check that we have the required stuff from
+     * the server
+     */
+    if (!ssl3_check_cert_and_algorithm(s)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    /*
+     * Call the ocsp status callback if needed. The |ext.ocsp.resp| and
+     * |ext.ocsp.resp_len| values will be set if we actually received a status
+     * message, or NULL and -1 otherwise
+     */
+    if (s->ext.status_type != TLSEXT_STATUSTYPE_nothing
+            && s->ctx->ext.status_cb != NULL) {
+        int ret = s->ctx->ext.status_cb(s, s->ctx->ext.status_arg);
+
+        if (ret == 0) {
+            SSLfatal(s, SSL_AD_BAD_CERTIFICATE_STATUS_RESPONSE,
+                     SSL_F_TLS_PROCESS_INITIAL_SERVER_FLIGHT,
+                     SSL_R_INVALID_STATUS_RESPONSE);
+            return 0;
+        }
+        if (ret < 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_PROCESS_INITIAL_SERVER_FLIGHT,
+                     ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+    }
+#ifndef OPENSSL_NO_CT
+    if (s->ct_validation_callback != NULL) {
+        /* Note we validate the SCTs whether or not we abort on error */
+        if (!ssl_validate_ct(s) && (s->verify_mode & SSL_VERIFY_PEER)) {
+            /* SSLfatal() already called */
+            return 0;
+        }
+    }
+#endif
+
+    return 1;
+}
+
+MSG_PROCESS_RETURN tls_process_server_done(SSL *s, PACKET *pkt)
+{
+    if (PACKET_remaining(pkt) > 0) {
+        /* should contain no data */
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_SERVER_DONE,
+                 SSL_R_LENGTH_MISMATCH);
+        return MSG_PROCESS_ERROR;
+    }
+#ifndef OPENSSL_NO_SRP
+    if (s->s3->tmp.new_cipher->algorithm_mkey & SSL_kSRP) {
+        if (SRP_Calc_A_param(s) <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_SERVER_DONE,
+                     SSL_R_SRP_A_CALC);
+            return MSG_PROCESS_ERROR;
+        }
+    }
+#endif
+
+    if (!tls_process_initial_server_flight(s)) {
+        /* SSLfatal() already called */
+        return MSG_PROCESS_ERROR;
+    }
+
+    return MSG_PROCESS_FINISHED_READING;
+}
+
+static int tls_construct_cke_psk_preamble(SSL *s, WPACKET *pkt)
+{
+#ifndef OPENSSL_NO_PSK
+    int ret = 0;
+    /*
+     * The callback needs PSK_MAX_IDENTITY_LEN + 1 bytes to return a
+     * \0-terminated identity. The last byte is for us for simulating
+     * strnlen.
+     */
+    char identity[PSK_MAX_IDENTITY_LEN + 1];
+    size_t identitylen = 0;
+    unsigned char psk[PSK_MAX_PSK_LEN];
+    unsigned char *tmppsk = NULL;
+    char *tmpidentity = NULL;
+    size_t psklen = 0;
+
+    if (s->psk_client_callback == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_PSK_PREAMBLE,
+                 SSL_R_PSK_NO_CLIENT_CB);
+        goto err;
+    }
+
+    memset(identity, 0, sizeof(identity));
+
+    psklen = s->psk_client_callback(s, s->session->psk_identity_hint,
+                                    identity, sizeof(identity) - 1,
+                                    psk, sizeof(psk));
+
+    if (psklen > PSK_MAX_PSK_LEN) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                 SSL_F_TLS_CONSTRUCT_CKE_PSK_PREAMBLE, ERR_R_INTERNAL_ERROR);
+        goto err;
+    } else if (psklen == 0) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                 SSL_F_TLS_CONSTRUCT_CKE_PSK_PREAMBLE,
+                 SSL_R_PSK_IDENTITY_NOT_FOUND);
+        goto err;
+    }
+
+    identitylen = strlen(identity);
+    if (identitylen > PSK_MAX_IDENTITY_LEN) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_PSK_PREAMBLE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    tmppsk = OPENSSL_memdup(psk, psklen);
+    tmpidentity = OPENSSL_strdup(identity);
+    if (tmppsk == NULL || tmpidentity == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_PSK_PREAMBLE,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    OPENSSL_free(s->s3->tmp.psk);
+    s->s3->tmp.psk = tmppsk;
+    s->s3->tmp.psklen = psklen;
+    tmppsk = NULL;
+    OPENSSL_free(s->session->psk_identity);
+    s->session->psk_identity = tmpidentity;
+    tmpidentity = NULL;
+
+    if (!WPACKET_sub_memcpy_u16(pkt, identity, identitylen))  {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_PSK_PREAMBLE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    ret = 1;
+
+ err:
+    OPENSSL_cleanse(psk, psklen);
+    OPENSSL_cleanse(identity, sizeof(identity));
+    OPENSSL_clear_free(tmppsk, psklen);
+    OPENSSL_clear_free(tmpidentity, identitylen);
+
+    return ret;
+#else
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_PSK_PREAMBLE,
+             ERR_R_INTERNAL_ERROR);
+    return 0;
+#endif
+}
+
+static int tls_construct_cke_rsa(SSL *s, WPACKET *pkt)
+{
+#ifndef OPENSSL_NO_RSA
+    unsigned char *encdata = NULL;
+    EVP_PKEY *pkey = NULL;
+    EVP_PKEY_CTX *pctx = NULL;
+    size_t enclen;
+    unsigned char *pms = NULL;
+    size_t pmslen = 0;
+
+    if (s->session->peer == NULL) {
+        /*
+         * We should always have a server certificate with SSL_kRSA.
+         */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_RSA,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    pkey = X509_get0_pubkey(s->session->peer);
+    if (EVP_PKEY_get0_RSA(pkey) == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_RSA,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    pmslen = SSL_MAX_MASTER_KEY_LENGTH;
+    pms = OPENSSL_malloc(pmslen);
+    if (pms == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_RSA,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    pms[0] = s->client_version >> 8;
+    pms[1] = s->client_version & 0xff;
+    /* TODO(size_t): Convert this function */
+    if (RAND_bytes(pms + 2, (int)(pmslen - 2)) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_RSA,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    /* Fix buf for TLS and beyond */
+    if (s->version > SSL3_VERSION && !WPACKET_start_sub_packet_u16(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_RSA,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    pctx = EVP_PKEY_CTX_new(pkey, NULL);
+    if (pctx == NULL || EVP_PKEY_encrypt_init(pctx) <= 0
+        || EVP_PKEY_encrypt(pctx, NULL, &enclen, pms, pmslen) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_RSA,
+                 ERR_R_EVP_LIB);
+        goto err;
+    }
+    if (!WPACKET_allocate_bytes(pkt, enclen, &encdata)
+            || EVP_PKEY_encrypt(pctx, encdata, &enclen, pms, pmslen) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_RSA,
+                 SSL_R_BAD_RSA_ENCRYPT);
+        goto err;
+    }
+    EVP_PKEY_CTX_free(pctx);
+    pctx = NULL;
+
+    /* Fix buf for TLS and beyond */
+    if (s->version > SSL3_VERSION && !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_RSA,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    /* Log the premaster secret, if logging is enabled. */
+    if (!ssl_log_rsa_client_key_exchange(s, encdata, enclen, pms, pmslen)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    s->s3->tmp.pms = pms;
+    s->s3->tmp.pmslen = pmslen;
+
+    return 1;
+ err:
+    OPENSSL_clear_free(pms, pmslen);
+    EVP_PKEY_CTX_free(pctx);
+
+    return 0;
+#else
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_RSA,
+             ERR_R_INTERNAL_ERROR);
+    return 0;
+#endif
+}
+
+static int tls_construct_cke_dhe(SSL *s, WPACKET *pkt)
+{
+#ifndef OPENSSL_NO_DH
+    DH *dh_clnt = NULL;
+    const BIGNUM *pub_key;
+    EVP_PKEY *ckey = NULL, *skey = NULL;
+    unsigned char *keybytes = NULL;
+
+    skey = s->s3->peer_tmp;
+    if (skey == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_DHE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    ckey = ssl_generate_pkey(skey);
+    if (ckey == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_DHE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    dh_clnt = EVP_PKEY_get0_DH(ckey);
+
+    if (dh_clnt == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_DHE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    if (ssl_derive(s, ckey, skey, 0) == 0) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    /* send off the data */
+    DH_get0_key(dh_clnt, &pub_key, NULL);
+    if (!WPACKET_sub_allocate_bytes_u16(pkt, BN_num_bytes(pub_key),
+                                        &keybytes)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_DHE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    BN_bn2bin(pub_key, keybytes);
+    EVP_PKEY_free(ckey);
+
+    return 1;
+ err:
+    EVP_PKEY_free(ckey);
+    return 0;
+#else
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_DHE,
+             ERR_R_INTERNAL_ERROR);
+    return 0;
+#endif
+}
+
+static int tls_construct_cke_ecdhe(SSL *s, WPACKET *pkt)
+{
+#ifndef OPENSSL_NO_EC
+    unsigned char *encodedPoint = NULL;
+    size_t encoded_pt_len = 0;
+    EVP_PKEY *ckey = NULL, *skey = NULL;
+    int ret = 0;
+
+    skey = s->s3->peer_tmp;
+    if (skey == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_ECDHE,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    ckey = ssl_generate_pkey(skey);
+    if (ckey == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_ECDHE,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (ssl_derive(s, ckey, skey, 0) == 0) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    /* Generate encoding of client key */
+    encoded_pt_len = EVP_PKEY_get1_tls_encodedpoint(ckey, &encodedPoint);
+
+    if (encoded_pt_len == 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_ECDHE,
+                 ERR_R_EC_LIB);
+        goto err;
+    }
+
+    if (!WPACKET_sub_memcpy_u8(pkt, encodedPoint, encoded_pt_len)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_ECDHE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    ret = 1;
+ err:
+    OPENSSL_free(encodedPoint);
+    EVP_PKEY_free(ckey);
+    return ret;
+#else
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_ECDHE,
+             ERR_R_INTERNAL_ERROR);
+    return 0;
+#endif
+}
+
+static int tls_construct_cke_gost(SSL *s, WPACKET *pkt)
+{
+#ifndef OPENSSL_NO_GOST
+    /* GOST key exchange message creation */
+    EVP_PKEY_CTX *pkey_ctx = NULL;
+    X509 *peer_cert;
+    size_t msglen;
+    unsigned int md_len;
+    unsigned char shared_ukm[32], tmp[256];
+    EVP_MD_CTX *ukm_hash = NULL;
+    int dgst_nid = NID_id_GostR3411_94;
+    unsigned char *pms = NULL;
+    size_t pmslen = 0;
+
+    if ((s->s3->tmp.new_cipher->algorithm_auth & SSL_aGOST12) != 0)
+        dgst_nid = NID_id_GostR3411_2012_256;
+
+    /*
+     * Get server certificate PKEY and create ctx from it
+     */
+    peer_cert = s->session->peer;
+    if (!peer_cert) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_TLS_CONSTRUCT_CKE_GOST,
+               SSL_R_NO_GOST_CERTIFICATE_SENT_BY_PEER);
+        return 0;
+    }
+
+    pkey_ctx = EVP_PKEY_CTX_new(X509_get0_pubkey(peer_cert), NULL);
+    if (pkey_ctx == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_GOST,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    /*
+     * If we have send a certificate, and certificate key
+     * parameters match those of server certificate, use
+     * certificate key for key exchange
+     */
+
+    /* Otherwise, generate ephemeral key pair */
+    pmslen = 32;
+    pms = OPENSSL_malloc(pmslen);
+    if (pms == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_GOST,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (EVP_PKEY_encrypt_init(pkey_ctx) <= 0
+        /* Generate session key
+         * TODO(size_t): Convert this function
+         */
+        || RAND_bytes(pms, (int)pmslen) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_GOST,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    };
+    /*
+     * Compute shared IV and store it in algorithm-specific context
+     * data
+     */
+    ukm_hash = EVP_MD_CTX_new();
+    if (ukm_hash == NULL
+        || EVP_DigestInit(ukm_hash, EVP_get_digestbynid(dgst_nid)) <= 0
+        || EVP_DigestUpdate(ukm_hash, s->s3->client_random,
+                            SSL3_RANDOM_SIZE) <= 0
+        || EVP_DigestUpdate(ukm_hash, s->s3->server_random,
+                            SSL3_RANDOM_SIZE) <= 0
+        || EVP_DigestFinal_ex(ukm_hash, shared_ukm, &md_len) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_GOST,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    EVP_MD_CTX_free(ukm_hash);
+    ukm_hash = NULL;
+    if (EVP_PKEY_CTX_ctrl(pkey_ctx, -1, EVP_PKEY_OP_ENCRYPT,
+                          EVP_PKEY_CTRL_SET_IV, 8, shared_ukm) < 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_GOST,
+                 SSL_R_LIBRARY_BUG);
+        goto err;
+    }
+    /* Make GOST keytransport blob message */
+    /*
+     * Encapsulate it into sequence
+     */
+    msglen = 255;
+    if (EVP_PKEY_encrypt(pkey_ctx, tmp, &msglen, pms, pmslen) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_GOST,
+                 SSL_R_LIBRARY_BUG);
+        goto err;
+    }
+
+    if (!WPACKET_put_bytes_u8(pkt, V_ASN1_SEQUENCE | V_ASN1_CONSTRUCTED)
+            || (msglen >= 0x80 && !WPACKET_put_bytes_u8(pkt, 0x81))
+            || !WPACKET_sub_memcpy_u8(pkt, tmp, msglen)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_GOST,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    EVP_PKEY_CTX_free(pkey_ctx);
+    s->s3->tmp.pms = pms;
+    s->s3->tmp.pmslen = pmslen;
+
+    return 1;
+ err:
+    EVP_PKEY_CTX_free(pkey_ctx);
+    OPENSSL_clear_free(pms, pmslen);
+    EVP_MD_CTX_free(ukm_hash);
+    return 0;
+#else
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_GOST,
+             ERR_R_INTERNAL_ERROR);
+    return 0;
+#endif
+}
+
+static int tls_construct_cke_srp(SSL *s, WPACKET *pkt)
+{
+#ifndef OPENSSL_NO_SRP
+    unsigned char *abytes = NULL;
+
+    if (s->srp_ctx.A == NULL
+            || !WPACKET_sub_allocate_bytes_u16(pkt, BN_num_bytes(s->srp_ctx.A),
+                                               &abytes)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_SRP,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    BN_bn2bin(s->srp_ctx.A, abytes);
+
+    OPENSSL_free(s->session->srp_username);
+    s->session->srp_username = OPENSSL_strdup(s->srp_ctx.login);
+    if (s->session->srp_username == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_SRP,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    return 1;
+#else
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CKE_SRP,
+             ERR_R_INTERNAL_ERROR);
+    return 0;
+#endif
+}
+
+int tls_construct_client_key_exchange(SSL *s, WPACKET *pkt)
+{
+    unsigned long alg_k;
+
+    alg_k = s->s3->tmp.new_cipher->algorithm_mkey;
+
+    /*
+     * All of the construct functions below call SSLfatal() if necessary so
+     * no need to do so here.
+     */
+    if ((alg_k & SSL_PSK)
+        && !tls_construct_cke_psk_preamble(s, pkt))
+        goto err;
+
+    if (alg_k & (SSL_kRSA | SSL_kRSAPSK)) {
+        if (!tls_construct_cke_rsa(s, pkt))
+            goto err;
+    } else if (alg_k & (SSL_kDHE | SSL_kDHEPSK)) {
+        if (!tls_construct_cke_dhe(s, pkt))
+            goto err;
+    } else if (alg_k & (SSL_kECDHE | SSL_kECDHEPSK)) {
+        if (!tls_construct_cke_ecdhe(s, pkt))
+            goto err;
+    } else if (alg_k & SSL_kGOST) {
+        if (!tls_construct_cke_gost(s, pkt))
+            goto err;
+    } else if (alg_k & SSL_kSRP) {
+        if (!tls_construct_cke_srp(s, pkt))
+            goto err;
+    } else if (!(alg_k & SSL_kPSK)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CLIENT_KEY_EXCHANGE, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    return 1;
+ err:
+    OPENSSL_clear_free(s->s3->tmp.pms, s->s3->tmp.pmslen);
+    s->s3->tmp.pms = NULL;
+#ifndef OPENSSL_NO_PSK
+    OPENSSL_clear_free(s->s3->tmp.psk, s->s3->tmp.psklen);
+    s->s3->tmp.psk = NULL;
+#endif
+    return 0;
+}
+
+int tls_client_key_exchange_post_work(SSL *s)
+{
+    unsigned char *pms = NULL;
+    size_t pmslen = 0;
+
+    pms = s->s3->tmp.pms;
+    pmslen = s->s3->tmp.pmslen;
+
+#ifndef OPENSSL_NO_SRP
+    /* Check for SRP */
+    if (s->s3->tmp.new_cipher->algorithm_mkey & SSL_kSRP) {
+        if (!srp_generate_client_master_secret(s)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+        return 1;
+    }
+#endif
+
+    if (pms == NULL && !(s->s3->tmp.new_cipher->algorithm_mkey & SSL_kPSK)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CLIENT_KEY_EXCHANGE_POST_WORK, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    if (!ssl_generate_master_secret(s, pms, pmslen, 1)) {
+        /* SSLfatal() already called */
+        /* ssl_generate_master_secret frees the pms even on error */
+        pms = NULL;
+        pmslen = 0;
+        goto err;
+    }
+    pms = NULL;
+    pmslen = 0;
+
+#ifndef OPENSSL_NO_SCTP
+    if (SSL_IS_DTLS(s)) {
+        unsigned char sctpauthkey[64];
+        char labelbuffer[sizeof(DTLS1_SCTP_AUTH_LABEL)];
+        size_t labellen;
+
+        /*
+         * Add new shared key for SCTP-Auth, will be ignored if no SCTP
+         * used.
+         */
+        memcpy(labelbuffer, DTLS1_SCTP_AUTH_LABEL,
+               sizeof(DTLS1_SCTP_AUTH_LABEL));
+
+        /* Don't include the terminating zero. */
+        labellen = sizeof(labelbuffer) - 1;
+        if (s->mode & SSL_MODE_DTLS_SCTP_LABEL_LENGTH_BUG)
+            labellen += 1;
+
+        if (SSL_export_keying_material(s, sctpauthkey,
+                                       sizeof(sctpauthkey), labelbuffer,
+                                       labellen, NULL, 0, 0) <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CLIENT_KEY_EXCHANGE_POST_WORK,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        BIO_ctrl(SSL_get_wbio(s), BIO_CTRL_DGRAM_SCTP_ADD_AUTH_KEY,
+                 sizeof(sctpauthkey), sctpauthkey);
+    }
+#endif
+
+    return 1;
+ err:
+    OPENSSL_clear_free(pms, pmslen);
+    s->s3->tmp.pms = NULL;
+    return 0;
+}
+
+/*
+ * Check a certificate can be used for client authentication. Currently check
+ * cert exists, if we have a suitable digest for TLS 1.2 if static DH client
+ * certificates can be used and optionally checks suitability for Suite B.
+ */
+static int ssl3_check_client_certificate(SSL *s)
+{
+    /* If no suitable signature algorithm can't use certificate */
+    if (!tls_choose_sigalg(s, 0) || s->s3->tmp.sigalg == NULL)
+        return 0;
+    /*
+     * If strict mode check suitability of chain before using it. This also
+     * adjusts suite B digest if necessary.
+     */
+    if (s->cert->cert_flags & SSL_CERT_FLAGS_CHECK_TLS_STRICT &&
+        !tls1_check_chain(s, NULL, NULL, NULL, -2))
+        return 0;
+    return 1;
+}
+
+WORK_STATE tls_prepare_client_certificate(SSL *s, WORK_STATE wst)
+{
+    X509 *x509 = NULL;
+    EVP_PKEY *pkey = NULL;
+    int i;
+
+    if (wst == WORK_MORE_A) {
+        /* Let cert callback update client certificates if required */
+        if (s->cert->cert_cb) {
+            i = s->cert->cert_cb(s, s->cert->cert_cb_arg);
+            if (i < 0) {
+                s->rwstate = SSL_X509_LOOKUP;
+                return WORK_MORE_A;
+            }
+            if (i == 0) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_PREPARE_CLIENT_CERTIFICATE,
+                         SSL_R_CALLBACK_FAILED);
+                return WORK_ERROR;
+            }
+            s->rwstate = SSL_NOTHING;
+        }
+        if (ssl3_check_client_certificate(s)) {
+            if (s->post_handshake_auth == SSL_PHA_REQUESTED) {
+                return WORK_FINISHED_STOP;
+            }
+            return WORK_FINISHED_CONTINUE;
+        }
+
+        /* Fall through to WORK_MORE_B */
+        wst = WORK_MORE_B;
+    }
+
+    /* We need to get a client cert */
+    if (wst == WORK_MORE_B) {
+        /*
+         * If we get an error, we need to ssl->rwstate=SSL_X509_LOOKUP;
+         * return(-1); We then get retied later
+         */
+        i = ssl_do_client_cert_cb(s, &x509, &pkey);
+        if (i < 0) {
+            s->rwstate = SSL_X509_LOOKUP;
+            return WORK_MORE_B;
+        }
+        s->rwstate = SSL_NOTHING;
+        if ((i == 1) && (pkey != NULL) && (x509 != NULL)) {
+            if (!SSL_use_certificate(s, x509) || !SSL_use_PrivateKey(s, pkey))
+                i = 0;
+        } else if (i == 1) {
+            i = 0;
+            SSLerr(SSL_F_TLS_PREPARE_CLIENT_CERTIFICATE,
+                   SSL_R_BAD_DATA_RETURNED_BY_CALLBACK);
+        }
+
+        X509_free(x509);
+        EVP_PKEY_free(pkey);
+        if (i && !ssl3_check_client_certificate(s))
+            i = 0;
+        if (i == 0) {
+            if (s->version == SSL3_VERSION) {
+                s->s3->tmp.cert_req = 0;
+                ssl3_send_alert(s, SSL3_AL_WARNING, SSL_AD_NO_CERTIFICATE);
+                return WORK_FINISHED_CONTINUE;
+            } else {
+                s->s3->tmp.cert_req = 2;
+                if (!ssl3_digest_cached_records(s, 0)) {
+                    /* SSLfatal() already called */
+                    return WORK_ERROR;
+                }
+            }
+        }
+
+        if (s->post_handshake_auth == SSL_PHA_REQUESTED)
+            return WORK_FINISHED_STOP;
+        return WORK_FINISHED_CONTINUE;
+    }
+
+    /* Shouldn't ever get here */
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PREPARE_CLIENT_CERTIFICATE,
+             ERR_R_INTERNAL_ERROR);
+    return WORK_ERROR;
+}
+
+int tls_construct_client_certificate(SSL *s, WPACKET *pkt)
+{
+    if (SSL_IS_TLS13(s)) {
+        if (s->pha_context == NULL) {
+            /* no context available, add 0-length context */
+            if (!WPACKET_put_bytes_u8(pkt, 0)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_CONSTRUCT_CLIENT_CERTIFICATE, ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+        } else if (!WPACKET_sub_memcpy_u8(pkt, s->pha_context, s->pha_context_len)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_CLIENT_CERTIFICATE, ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+    }
+    if (!ssl3_output_cert_chain(s, pkt,
+                                (s->s3->tmp.cert_req == 2) ? NULL
+                                                           : s->cert->key)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    if (SSL_IS_TLS13(s)
+            && SSL_IS_FIRST_HANDSHAKE(s)
+            && (!s->method->ssl3_enc->change_cipher_state(s,
+                    SSL3_CC_HANDSHAKE | SSL3_CHANGE_CIPHER_CLIENT_WRITE))) {
+        /*
+         * This is a fatal error, which leaves enc_write_ctx in an inconsistent
+         * state and thus ssl3_send_alert may crash.
+         */
+        SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_TLS_CONSTRUCT_CLIENT_CERTIFICATE,
+                 SSL_R_CANNOT_CHANGE_CIPHER);
+        return 0;
+    }
+
+    return 1;
+}
+
+int ssl3_check_cert_and_algorithm(SSL *s)
+{
+    const SSL_CERT_LOOKUP *clu;
+    size_t idx;
+    long alg_k, alg_a;
+
+    alg_k = s->s3->tmp.new_cipher->algorithm_mkey;
+    alg_a = s->s3->tmp.new_cipher->algorithm_auth;
+
+    /* we don't have a certificate */
+    if (!(alg_a & SSL_aCERT))
+        return 1;
+
+    /* This is the passed certificate */
+    clu = ssl_cert_lookup_by_pkey(X509_get0_pubkey(s->session->peer), &idx);
+
+    /* Check certificate is recognised and suitable for cipher */
+    if (clu == NULL || (alg_a & clu->amask) == 0) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                 SSL_F_SSL3_CHECK_CERT_AND_ALGORITHM,
+                 SSL_R_MISSING_SIGNING_CERT);
+        return 0;
+    }
+
+#ifndef OPENSSL_NO_EC
+    if (clu->amask & SSL_aECDSA) {
+        if (ssl_check_srvr_ecc_cert_and_alg(s->session->peer, s))
+            return 1;
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                 SSL_F_SSL3_CHECK_CERT_AND_ALGORITHM, SSL_R_BAD_ECC_CERT);
+        return 0;
+    }
+#endif
+#ifndef OPENSSL_NO_RSA
+    if (alg_k & (SSL_kRSA | SSL_kRSAPSK) && idx != SSL_PKEY_RSA) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                 SSL_F_SSL3_CHECK_CERT_AND_ALGORITHM,
+                 SSL_R_MISSING_RSA_ENCRYPTING_CERT);
+        return 0;
+    }
+#endif
+#ifndef OPENSSL_NO_DH
+    if ((alg_k & SSL_kDHE) && (s->s3->peer_tmp == NULL)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_CHECK_CERT_AND_ALGORITHM,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+#endif
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_NEXTPROTONEG
+int tls_construct_next_proto(SSL *s, WPACKET *pkt)
+{
+    size_t len, padding_len;
+    unsigned char *padding = NULL;
+
+    len = s->ext.npn_len;
+    padding_len = 32 - ((len + 2) % 32);
+
+    if (!WPACKET_sub_memcpy_u8(pkt, s->ext.npn, len)
+            || !WPACKET_sub_allocate_bytes_u8(pkt, padding_len, &padding)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_NEXT_PROTO,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    memset(padding, 0, padding_len);
+
+    return 1;
+}
+#endif
+
+MSG_PROCESS_RETURN tls_process_hello_req(SSL *s, PACKET *pkt)
+{
+    if (PACKET_remaining(pkt) > 0) {
+        /* should contain no data */
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_HELLO_REQ,
+                 SSL_R_LENGTH_MISMATCH);
+        return MSG_PROCESS_ERROR;
+    }
+
+    if ((s->options & SSL_OP_NO_RENEGOTIATION)) {
+        ssl3_send_alert(s, SSL3_AL_WARNING, SSL_AD_NO_RENEGOTIATION);
+        return MSG_PROCESS_FINISHED_READING;
+    }
+
+    /*
+     * This is a historical discrepancy (not in the RFC) maintained for
+     * compatibility reasons. If a TLS client receives a HelloRequest it will
+     * attempt an abbreviated handshake. However if a DTLS client receives a
+     * HelloRequest it will do a full handshake. Either behaviour is reasonable
+     * but doing one for TLS and another for DTLS is odd.
+     */
+    if (SSL_IS_DTLS(s))
+        SSL_renegotiate(s);
+    else
+        SSL_renegotiate_abbreviated(s);
+
+    return MSG_PROCESS_FINISHED_READING;
+}
+
+static MSG_PROCESS_RETURN tls_process_encrypted_extensions(SSL *s, PACKET *pkt)
+{
+    PACKET extensions;
+    RAW_EXTENSION *rawexts = NULL;
+
+    if (!PACKET_as_length_prefixed_2(pkt, &extensions)
+            || PACKET_remaining(pkt) != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_ENCRYPTED_EXTENSIONS,
+                 SSL_R_LENGTH_MISMATCH);
+        goto err;
+    }
+
+    if (!tls_collect_extensions(s, &extensions,
+                                SSL_EXT_TLS1_3_ENCRYPTED_EXTENSIONS, &rawexts,
+                                NULL, 1)
+            || !tls_parse_all_extensions(s, SSL_EXT_TLS1_3_ENCRYPTED_EXTENSIONS,
+                                         rawexts, NULL, 0, 1)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    OPENSSL_free(rawexts);
+    return MSG_PROCESS_CONTINUE_READING;
+
+ err:
+    OPENSSL_free(rawexts);
+    return MSG_PROCESS_ERROR;
+}
+
+int ssl_do_client_cert_cb(SSL *s, X509 **px509, EVP_PKEY **ppkey)
+{
+    int i = 0;
+#ifndef OPENSSL_NO_ENGINE
+    if (s->ctx->client_cert_engine) {
+        i = ENGINE_load_ssl_client_cert(s->ctx->client_cert_engine, s,
+                                        SSL_get_client_CA_list(s),
+                                        px509, ppkey, NULL, NULL, NULL);
+        if (i != 0)
+            return i;
+    }
+#endif
+    if (s->ctx->client_cert_cb)
+        i = s->ctx->client_cert_cb(s, px509, ppkey);
+    return i;
+}
+
+int ssl_cipher_list_to_bytes(SSL *s, STACK_OF(SSL_CIPHER) *sk, WPACKET *pkt)
+{
+    int i;
+    size_t totlen = 0, len, maxlen, maxverok = 0;
+    int empty_reneg_info_scsv = !s->renegotiate;
+
+    /* Set disabled masks for this session */
+    if (!ssl_set_client_disabled(s)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_CIPHER_LIST_TO_BYTES,
+                 SSL_R_NO_PROTOCOLS_AVAILABLE);
+        return 0;
+    }
+
+    if (sk == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_CIPHER_LIST_TO_BYTES,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+#ifdef OPENSSL_MAX_TLS1_2_CIPHER_LENGTH
+# if OPENSSL_MAX_TLS1_2_CIPHER_LENGTH < 6
+#  error Max cipher length too short
+# endif
+    /*
+     * Some servers hang if client hello > 256 bytes as hack workaround
+     * chop number of supported ciphers to keep it well below this if we
+     * use TLS v1.2
+     */
+    if (TLS1_get_version(s) >= TLS1_2_VERSION)
+        maxlen = OPENSSL_MAX_TLS1_2_CIPHER_LENGTH & ~1;
+    else
+#endif
+        /* Maximum length that can be stored in 2 bytes. Length must be even */
+        maxlen = 0xfffe;
+
+    if (empty_reneg_info_scsv)
+        maxlen -= 2;
+    if (s->mode & SSL_MODE_SEND_FALLBACK_SCSV)
+        maxlen -= 2;
+
+    for (i = 0; i < sk_SSL_CIPHER_num(sk) && totlen < maxlen; i++) {
+        const SSL_CIPHER *c;
+
+        c = sk_SSL_CIPHER_value(sk, i);
+        /* Skip disabled ciphers */
+        if (ssl_cipher_disabled(s, c, SSL_SECOP_CIPHER_SUPPORTED, 0))
+            continue;
+
+        if (!s->method->put_cipher_by_char(c, pkt, &len)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_CIPHER_LIST_TO_BYTES,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+
+        /* Sanity check that the maximum version we offer has ciphers enabled */
+        if (!maxverok) {
+            if (SSL_IS_DTLS(s)) {
+                if (DTLS_VERSION_GE(c->max_dtls, s->s3->tmp.max_ver)
+                        && DTLS_VERSION_LE(c->min_dtls, s->s3->tmp.max_ver))
+                    maxverok = 1;
+            } else {
+                if (c->max_tls >= s->s3->tmp.max_ver
+                        && c->min_tls <= s->s3->tmp.max_ver)
+                    maxverok = 1;
+            }
+        }
+
+        totlen += len;
+    }
+
+    if (totlen == 0 || !maxverok) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_CIPHER_LIST_TO_BYTES,
+                 SSL_R_NO_CIPHERS_AVAILABLE);
+
+        if (!maxverok)
+            ERR_add_error_data(1, "No ciphers enabled for max supported "
+                                  "SSL/TLS version");
+
+        return 0;
+    }
+
+    if (totlen != 0) {
+        if (empty_reneg_info_scsv) {
+            static SSL_CIPHER scsv = {
+                0, NULL, NULL, SSL3_CK_SCSV, 0, 0, 0, 0, 0, 0, 0, 0, 0
+            };
+            if (!s->method->put_cipher_by_char(&scsv, pkt, &len)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_SSL_CIPHER_LIST_TO_BYTES, ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+        }
+        if (s->mode & SSL_MODE_SEND_FALLBACK_SCSV) {
+            static SSL_CIPHER scsv = {
+                0, NULL, NULL, SSL3_CK_FALLBACK_SCSV, 0, 0, 0, 0, 0, 0, 0, 0, 0
+            };
+            if (!s->method->put_cipher_by_char(&scsv, pkt, &len)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_SSL_CIPHER_LIST_TO_BYTES, ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+        }
+    }
+
+    return 1;
+}
+
+int tls_construct_end_of_early_data(SSL *s, WPACKET *pkt)
+{
+    if (s->early_data_state != SSL_EARLY_DATA_WRITE_RETRY
+            && s->early_data_state != SSL_EARLY_DATA_FINISHED_WRITING) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_END_OF_EARLY_DATA,
+                 ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
+
+    s->early_data_state = SSL_EARLY_DATA_FINISHED_WRITING;
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_dtls.c b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_dtls.c
new file mode 100644
index 000000000..b016fa7cf
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_dtls.c
@@ -0,0 +1,1281 @@
+/*
+ * Copyright 2005-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <limits.h>
+#include <string.h>
+#include <stdio.h>
+#include "../ssl_locl.h"
+#include "statem_locl.h"
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+
+#define RSMBLY_BITMASK_SIZE(msg_len) (((msg_len) + 7) / 8)
+
+#define RSMBLY_BITMASK_MARK(bitmask, start, end) { \
+                        if ((end) - (start) <= 8) { \
+                                long ii; \
+                                for (ii = (start); ii < (end); ii++) bitmask[((ii) >> 3)] |= (1 << ((ii) & 7)); \
+                        } else { \
+                                long ii; \
+                                bitmask[((start) >> 3)] |= bitmask_start_values[((start) & 7)]; \
+                                for (ii = (((start) >> 3) + 1); ii < ((((end) - 1)) >> 3); ii++) bitmask[ii] = 0xff; \
+                                bitmask[(((end) - 1) >> 3)] |= bitmask_end_values[((end) & 7)]; \
+                        } }
+
+#define RSMBLY_BITMASK_IS_COMPLETE(bitmask, msg_len, is_complete) { \
+                        long ii; \
+                        is_complete = 1; \
+                        if (bitmask[(((msg_len) - 1) >> 3)] != bitmask_end_values[((msg_len) & 7)]) is_complete = 0; \
+                        if (is_complete) for (ii = (((msg_len) - 1) >> 3) - 1; ii >= 0 ; ii--) \
+                                if (bitmask[ii] != 0xff) { is_complete = 0; break; } }
+
+static unsigned char bitmask_start_values[] =
+    { 0xff, 0xfe, 0xfc, 0xf8, 0xf0, 0xe0, 0xc0, 0x80 };
+static unsigned char bitmask_end_values[] =
+    { 0xff, 0x01, 0x03, 0x07, 0x0f, 0x1f, 0x3f, 0x7f };
+
+static void dtls1_fix_message_header(SSL *s, size_t frag_off,
+                                     size_t frag_len);
+static unsigned char *dtls1_write_message_header(SSL *s, unsigned char *p);
+static void dtls1_set_message_header_int(SSL *s, unsigned char mt,
+                                         size_t len,
+                                         unsigned short seq_num,
+                                         size_t frag_off,
+                                         size_t frag_len);
+static int dtls_get_reassembled_message(SSL *s, int *errtype, size_t *len);
+
+static hm_fragment *dtls1_hm_fragment_new(size_t frag_len, int reassembly)
+{
+    hm_fragment *frag = NULL;
+    unsigned char *buf = NULL;
+    unsigned char *bitmask = NULL;
+
+    if ((frag = OPENSSL_malloc(sizeof(*frag))) == NULL) {
+        SSLerr(SSL_F_DTLS1_HM_FRAGMENT_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if (frag_len) {
+        if ((buf = OPENSSL_malloc(frag_len)) == NULL) {
+            SSLerr(SSL_F_DTLS1_HM_FRAGMENT_NEW, ERR_R_MALLOC_FAILURE);
+            OPENSSL_free(frag);
+            return NULL;
+        }
+    }
+
+    /* zero length fragment gets zero frag->fragment */
+    frag->fragment = buf;
+
+    /* Initialize reassembly bitmask if necessary */
+    if (reassembly) {
+        bitmask = OPENSSL_zalloc(RSMBLY_BITMASK_SIZE(frag_len));
+        if (bitmask == NULL) {
+            SSLerr(SSL_F_DTLS1_HM_FRAGMENT_NEW, ERR_R_MALLOC_FAILURE);
+            OPENSSL_free(buf);
+            OPENSSL_free(frag);
+            return NULL;
+        }
+    }
+
+    frag->reassembly = bitmask;
+
+    return frag;
+}
+
+void dtls1_hm_fragment_free(hm_fragment *frag)
+{
+    if (!frag)
+        return;
+    if (frag->msg_header.is_ccs) {
+        EVP_CIPHER_CTX_free(frag->msg_header.
+                            saved_retransmit_state.enc_write_ctx);
+        EVP_MD_CTX_free(frag->msg_header.saved_retransmit_state.write_hash);
+    }
+    OPENSSL_free(frag->fragment);
+    OPENSSL_free(frag->reassembly);
+    OPENSSL_free(frag);
+}
+
+/*
+ * send s->init_buf in records of type 'type' (SSL3_RT_HANDSHAKE or
+ * SSL3_RT_CHANGE_CIPHER_SPEC)
+ */
+int dtls1_do_write(SSL *s, int type)
+{
+    int ret;
+    size_t written;
+    size_t curr_mtu;
+    int retry = 1;
+    size_t len, frag_off, mac_size, blocksize, used_len;
+
+    if (!dtls1_query_mtu(s))
+        return -1;
+
+    if (s->d1->mtu < dtls1_min_mtu(s))
+        /* should have something reasonable now */
+        return -1;
+
+    if (s->init_off == 0 && type == SSL3_RT_HANDSHAKE) {
+        if (!ossl_assert(s->init_num ==
+                         s->d1->w_msg_hdr.msg_len + DTLS1_HM_HEADER_LENGTH))
+            return -1;
+    }
+
+    if (s->write_hash) {
+        if (s->enc_write_ctx
+            && (EVP_CIPHER_flags(EVP_CIPHER_CTX_cipher(s->enc_write_ctx)) &
+                EVP_CIPH_FLAG_AEAD_CIPHER) != 0)
+            mac_size = 0;
+        else
+            mac_size = EVP_MD_CTX_size(s->write_hash);
+    } else
+        mac_size = 0;
+
+    if (s->enc_write_ctx &&
+        (EVP_CIPHER_CTX_mode(s->enc_write_ctx) == EVP_CIPH_CBC_MODE))
+        blocksize = 2 * EVP_CIPHER_CTX_block_size(s->enc_write_ctx);
+    else
+        blocksize = 0;
+
+    frag_off = 0;
+    s->rwstate = SSL_NOTHING;
+
+    /* s->init_num shouldn't ever be < 0...but just in case */
+    while (s->init_num > 0) {
+        if (type == SSL3_RT_HANDSHAKE && s->init_off != 0) {
+            /* We must be writing a fragment other than the first one */
+
+            if (frag_off > 0) {
+                /* This is the first attempt at writing out this fragment */
+
+                if (s->init_off <= DTLS1_HM_HEADER_LENGTH) {
+                    /*
+                     * Each fragment that was already sent must at least have
+                     * contained the message header plus one other byte.
+                     * Therefore |init_off| must have progressed by at least
+                     * |DTLS1_HM_HEADER_LENGTH + 1| bytes. If not something went
+                     * wrong.
+                     */
+                    return -1;
+                }
+
+                /*
+                 * Adjust |init_off| and |init_num| to allow room for a new
+                 * message header for this fragment.
+                 */
+                s->init_off -= DTLS1_HM_HEADER_LENGTH;
+                s->init_num += DTLS1_HM_HEADER_LENGTH;
+            } else {
+                /*
+                 * We must have been called again after a retry so use the
+                 * fragment offset from our last attempt. We do not need
+                 * to adjust |init_off| and |init_num| as above, because
+                 * that should already have been done before the retry.
+                 */
+                frag_off = s->d1->w_msg_hdr.frag_off;
+            }
+        }
+
+        used_len = BIO_wpending(s->wbio) + DTLS1_RT_HEADER_LENGTH
+            + mac_size + blocksize;
+        if (s->d1->mtu > used_len)
+            curr_mtu = s->d1->mtu - used_len;
+        else
+            curr_mtu = 0;
+
+        if (curr_mtu <= DTLS1_HM_HEADER_LENGTH) {
+            /*
+             * grr.. we could get an error if MTU picked was wrong
+             */
+            ret = BIO_flush(s->wbio);
+            if (ret <= 0) {
+                s->rwstate = SSL_WRITING;
+                return ret;
+            }
+            used_len = DTLS1_RT_HEADER_LENGTH + mac_size + blocksize;
+            if (s->d1->mtu > used_len + DTLS1_HM_HEADER_LENGTH) {
+                curr_mtu = s->d1->mtu - used_len;
+            } else {
+                /* Shouldn't happen */
+                return -1;
+            }
+        }
+
+        /*
+         * We just checked that s->init_num > 0 so this cast should be safe
+         */
+        if (((unsigned int)s->init_num) > curr_mtu)
+            len = curr_mtu;
+        else
+            len = s->init_num;
+
+        if (len > s->max_send_fragment)
+            len = s->max_send_fragment;
+
+        /*
+         * XDTLS: this function is too long.  split out the CCS part
+         */
+        if (type == SSL3_RT_HANDSHAKE) {
+            if (len < DTLS1_HM_HEADER_LENGTH) {
+                /*
+                 * len is so small that we really can't do anything sensible
+                 * so fail
+                 */
+                return -1;
+            }
+            dtls1_fix_message_header(s, frag_off, len - DTLS1_HM_HEADER_LENGTH);
+
+            dtls1_write_message_header(s,
+                                       (unsigned char *)&s->init_buf->
+                                       data[s->init_off]);
+        }
+
+        ret = dtls1_write_bytes(s, type, &s->init_buf->data[s->init_off], len,
+                                &written);
+        if (ret < 0) {
+            /*
+             * might need to update MTU here, but we don't know which
+             * previous packet caused the failure -- so can't really
+             * retransmit anything.  continue as if everything is fine and
+             * wait for an alert to handle the retransmit
+             */
+            if (retry && BIO_ctrl(SSL_get_wbio(s),
+                                  BIO_CTRL_DGRAM_MTU_EXCEEDED, 0, NULL) > 0) {
+                if (!(SSL_get_options(s) & SSL_OP_NO_QUERY_MTU)) {
+                    if (!dtls1_query_mtu(s))
+                        return -1;
+                    /* Have one more go */
+                    retry = 0;
+                } else
+                    return -1;
+            } else {
+                return -1;
+            }
+        } else {
+
+            /*
+             * bad if this assert fails, only part of the handshake message
+             * got sent.  but why would this happen?
+             */
+            if (!ossl_assert(len == written))
+                return -1;
+
+            if (type == SSL3_RT_HANDSHAKE && !s->d1->retransmitting) {
+                /*
+                 * should not be done for 'Hello Request's, but in that case
+                 * we'll ignore the result anyway
+                 */
+                unsigned char *p =
+                    (unsigned char *)&s->init_buf->data[s->init_off];
+                const struct hm_header_st *msg_hdr = &s->d1->w_msg_hdr;
+                size_t xlen;
+
+                if (frag_off == 0 && s->version != DTLS1_BAD_VER) {
+                    /*
+                     * reconstruct message header is if it is being sent in
+                     * single fragment
+                     */
+                    *p++ = msg_hdr->type;
+                    l2n3(msg_hdr->msg_len, p);
+                    s2n(msg_hdr->seq, p);
+                    l2n3(0, p);
+                    l2n3(msg_hdr->msg_len, p);
+                    p -= DTLS1_HM_HEADER_LENGTH;
+                    xlen = written;
+                } else {
+                    p += DTLS1_HM_HEADER_LENGTH;
+                    xlen = written - DTLS1_HM_HEADER_LENGTH;
+                }
+
+                if (!ssl3_finish_mac(s, p, xlen))
+                    return -1;
+            }
+
+            if (written == s->init_num) {
+                if (s->msg_callback)
+                    s->msg_callback(1, s->version, type, s->init_buf->data,
+                                    (size_t)(s->init_off + s->init_num), s,
+                                    s->msg_callback_arg);
+
+                s->init_off = 0; /* done writing this message */
+                s->init_num = 0;
+
+                return 1;
+            }
+            s->init_off += written;
+            s->init_num -= written;
+            written -= DTLS1_HM_HEADER_LENGTH;
+            frag_off += written;
+
+            /*
+             * We save the fragment offset for the next fragment so we have it
+             * available in case of an IO retry. We don't know the length of the
+             * next fragment yet so just set that to 0 for now. It will be
+             * updated again later.
+             */
+            dtls1_fix_message_header(s, frag_off, 0);
+        }
+    }
+    return 0;
+}
+
+int dtls_get_message(SSL *s, int *mt, size_t *len)
+{
+    struct hm_header_st *msg_hdr;
+    unsigned char *p;
+    size_t msg_len;
+    size_t tmplen;
+    int errtype;
+
+    msg_hdr = &s->d1->r_msg_hdr;
+    memset(msg_hdr, 0, sizeof(*msg_hdr));
+
+ again:
+    if (!dtls_get_reassembled_message(s, &errtype, &tmplen)) {
+        if (errtype == DTLS1_HM_BAD_FRAGMENT
+                || errtype == DTLS1_HM_FRAGMENT_RETRY) {
+            /* bad fragment received */
+            goto again;
+        }
+        return 0;
+    }
+
+    *mt = s->s3->tmp.message_type;
+
+    p = (unsigned char *)s->init_buf->data;
+    *len = s->init_num;
+
+    if (*mt == SSL3_MT_CHANGE_CIPHER_SPEC) {
+        if (s->msg_callback) {
+            s->msg_callback(0, s->version, SSL3_RT_CHANGE_CIPHER_SPEC,
+                            p, 1, s, s->msg_callback_arg);
+        }
+        /*
+         * This isn't a real handshake message so skip the processing below.
+         */
+        return 1;
+    }
+
+    msg_len = msg_hdr->msg_len;
+
+    /* reconstruct message header */
+    *(p++) = msg_hdr->type;
+    l2n3(msg_len, p);
+    s2n(msg_hdr->seq, p);
+    l2n3(0, p);
+    l2n3(msg_len, p);
+    if (s->version != DTLS1_BAD_VER) {
+        p -= DTLS1_HM_HEADER_LENGTH;
+        msg_len += DTLS1_HM_HEADER_LENGTH;
+    }
+
+    /*
+     * If receiving Finished, record MAC of prior handshake messages for
+     * Finished verification.
+     */
+    if (*mt == SSL3_MT_FINISHED && !ssl3_take_mac(s)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    if (!ssl3_finish_mac(s, p, msg_len))
+        return 0;
+    if (s->msg_callback)
+        s->msg_callback(0, s->version, SSL3_RT_HANDSHAKE,
+                        p, msg_len, s, s->msg_callback_arg);
+
+    memset(msg_hdr, 0, sizeof(*msg_hdr));
+
+    s->d1->handshake_read_seq++;
+
+    s->init_msg = s->init_buf->data + DTLS1_HM_HEADER_LENGTH;
+
+    return 1;
+}
+
+/*
+ * dtls1_max_handshake_message_len returns the maximum number of bytes
+ * permitted in a DTLS handshake message for |s|. The minimum is 16KB, but
+ * may be greater if the maximum certificate list size requires it.
+ */
+static size_t dtls1_max_handshake_message_len(const SSL *s)
+{
+    size_t max_len = DTLS1_HM_HEADER_LENGTH + SSL3_RT_MAX_ENCRYPTED_LENGTH;
+    if (max_len < s->max_cert_list)
+        return s->max_cert_list;
+    return max_len;
+}
+
+static int dtls1_preprocess_fragment(SSL *s, struct hm_header_st *msg_hdr)
+{
+    size_t frag_off, frag_len, msg_len;
+
+    msg_len = msg_hdr->msg_len;
+    frag_off = msg_hdr->frag_off;
+    frag_len = msg_hdr->frag_len;
+
+    /* sanity checking */
+    if ((frag_off + frag_len) > msg_len
+            || msg_len > dtls1_max_handshake_message_len(s)) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_DTLS1_PREPROCESS_FRAGMENT,
+                 SSL_R_EXCESSIVE_MESSAGE_SIZE);
+        return 0;
+    }
+
+    if (s->d1->r_msg_hdr.frag_off == 0) { /* first fragment */
+        /*
+         * msg_len is limited to 2^24, but is effectively checked against
+         * dtls_max_handshake_message_len(s) above
+         */
+        if (!BUF_MEM_grow_clean(s->init_buf, msg_len + DTLS1_HM_HEADER_LENGTH)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DTLS1_PREPROCESS_FRAGMENT,
+                     ERR_R_BUF_LIB);
+            return 0;
+        }
+
+        s->s3->tmp.message_size = msg_len;
+        s->d1->r_msg_hdr.msg_len = msg_len;
+        s->s3->tmp.message_type = msg_hdr->type;
+        s->d1->r_msg_hdr.type = msg_hdr->type;
+        s->d1->r_msg_hdr.seq = msg_hdr->seq;
+    } else if (msg_len != s->d1->r_msg_hdr.msg_len) {
+        /*
+         * They must be playing with us! BTW, failure to enforce upper limit
+         * would open possibility for buffer overrun.
+         */
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_DTLS1_PREPROCESS_FRAGMENT,
+                 SSL_R_EXCESSIVE_MESSAGE_SIZE);
+        return 0;
+    }
+
+    return 1;
+}
+
+/*
+ * Returns 1 if there is a buffered fragment available, 0 if not, or -1 on a
+ * fatal error.
+ */
+static int dtls1_retrieve_buffered_fragment(SSL *s, size_t *len)
+{
+    /*-
+     * (0) check whether the desired fragment is available
+     * if so:
+     * (1) copy over the fragment to s->init_buf->data[]
+     * (2) update s->init_num
+     */
+    pitem *item;
+    hm_fragment *frag;
+    int ret;
+
+    do {
+        item = pqueue_peek(s->d1->buffered_messages);
+        if (item == NULL)
+            return 0;
+
+        frag = (hm_fragment *)item->data;
+
+        if (frag->msg_header.seq < s->d1->handshake_read_seq) {
+            /* This is a stale message that has been buffered so clear it */
+            pqueue_pop(s->d1->buffered_messages);
+            dtls1_hm_fragment_free(frag);
+            pitem_free(item);
+            item = NULL;
+            frag = NULL;
+        }
+    } while (item == NULL);
+
+    /* Don't return if reassembly still in progress */
+    if (frag->reassembly != NULL)
+        return 0;
+
+    if (s->d1->handshake_read_seq == frag->msg_header.seq) {
+        size_t frag_len = frag->msg_header.frag_len;
+        pqueue_pop(s->d1->buffered_messages);
+
+        /* Calls SSLfatal() as required */
+        ret = dtls1_preprocess_fragment(s, &frag->msg_header);
+
+        if (ret && frag->msg_header.frag_len > 0) {
+            unsigned char *p =
+                (unsigned char *)s->init_buf->data + DTLS1_HM_HEADER_LENGTH;
+            memcpy(&p[frag->msg_header.frag_off], frag->fragment,
+                   frag->msg_header.frag_len);
+        }
+
+        dtls1_hm_fragment_free(frag);
+        pitem_free(item);
+
+        if (ret) {
+            *len = frag_len;
+            return 1;
+        }
+
+        /* Fatal error */
+        s->init_num = 0;
+        return -1;
+    } else {
+        return 0;
+    }
+}
+
+static int
+dtls1_reassemble_fragment(SSL *s, const struct hm_header_st *msg_hdr)
+{
+    hm_fragment *frag = NULL;
+    pitem *item = NULL;
+    int i = -1, is_complete;
+    unsigned char seq64be[8];
+    size_t frag_len = msg_hdr->frag_len;
+    size_t readbytes;
+
+    if ((msg_hdr->frag_off + frag_len) > msg_hdr->msg_len ||
+        msg_hdr->msg_len > dtls1_max_handshake_message_len(s))
+        goto err;
+
+    if (frag_len == 0) {
+        return DTLS1_HM_FRAGMENT_RETRY;
+    }
+
+    /* Try to find item in queue */
+    memset(seq64be, 0, sizeof(seq64be));
+    seq64be[6] = (unsigned char)(msg_hdr->seq >> 8);
+    seq64be[7] = (unsigned char)msg_hdr->seq;
+    item = pqueue_find(s->d1->buffered_messages, seq64be);
+
+    if (item == NULL) {
+        frag = dtls1_hm_fragment_new(msg_hdr->msg_len, 1);
+        if (frag == NULL)
+            goto err;
+        memcpy(&(frag->msg_header), msg_hdr, sizeof(*msg_hdr));
+        frag->msg_header.frag_len = frag->msg_header.msg_len;
+        frag->msg_header.frag_off = 0;
+    } else {
+        frag = (hm_fragment *)item->data;
+        if (frag->msg_header.msg_len != msg_hdr->msg_len) {
+            item = NULL;
+            frag = NULL;
+            goto err;
+        }
+    }
+
+    /*
+     * If message is already reassembled, this must be a retransmit and can
+     * be dropped. In this case item != NULL and so frag does not need to be
+     * freed.
+     */
+    if (frag->reassembly == NULL) {
+        unsigned char devnull[256];
+
+        while (frag_len) {
+            i = s->method->ssl_read_bytes(s, SSL3_RT_HANDSHAKE, NULL,
+                                          devnull,
+                                          frag_len >
+                                          sizeof(devnull) ? sizeof(devnull) :
+                                          frag_len, 0, &readbytes);
+            if (i <= 0)
+                goto err;
+            frag_len -= readbytes;
+        }
+        return DTLS1_HM_FRAGMENT_RETRY;
+    }
+
+    /* read the body of the fragment (header has already been read */
+    i = s->method->ssl_read_bytes(s, SSL3_RT_HANDSHAKE, NULL,
+                                  frag->fragment + msg_hdr->frag_off,
+                                  frag_len, 0, &readbytes);
+    if (i <= 0 || readbytes != frag_len)
+        i = -1;
+    if (i <= 0)
+        goto err;
+
+    RSMBLY_BITMASK_MARK(frag->reassembly, (long)msg_hdr->frag_off,
+                        (long)(msg_hdr->frag_off + frag_len));
+
+    if (!ossl_assert(msg_hdr->msg_len > 0))
+        goto err;
+    RSMBLY_BITMASK_IS_COMPLETE(frag->reassembly, (long)msg_hdr->msg_len,
+                               is_complete);
+
+    if (is_complete) {
+        OPENSSL_free(frag->reassembly);
+        frag->reassembly = NULL;
+    }
+
+    if (item == NULL) {
+        item = pitem_new(seq64be, frag);
+        if (item == NULL) {
+            i = -1;
+            goto err;
+        }
+
+        item = pqueue_insert(s->d1->buffered_messages, item);
+        /*
+         * pqueue_insert fails iff a duplicate item is inserted. However,
+         * |item| cannot be a duplicate. If it were, |pqueue_find|, above,
+         * would have returned it and control would never have reached this
+         * branch.
+         */
+        if (!ossl_assert(item != NULL))
+            goto err;
+    }
+
+    return DTLS1_HM_FRAGMENT_RETRY;
+
+ err:
+    if (item == NULL)
+        dtls1_hm_fragment_free(frag);
+    return -1;
+}
+
+static int
+dtls1_process_out_of_seq_message(SSL *s, const struct hm_header_st *msg_hdr)
+{
+    int i = -1;
+    hm_fragment *frag = NULL;
+    pitem *item = NULL;
+    unsigned char seq64be[8];
+    size_t frag_len = msg_hdr->frag_len;
+    size_t readbytes;
+
+    if ((msg_hdr->frag_off + frag_len) > msg_hdr->msg_len)
+        goto err;
+
+    /* Try to find item in queue, to prevent duplicate entries */
+    memset(seq64be, 0, sizeof(seq64be));
+    seq64be[6] = (unsigned char)(msg_hdr->seq >> 8);
+    seq64be[7] = (unsigned char)msg_hdr->seq;
+    item = pqueue_find(s->d1->buffered_messages, seq64be);
+
+    /*
+     * If we already have an entry and this one is a fragment, don't discard
+     * it and rather try to reassemble it.
+     */
+    if (item != NULL && frag_len != msg_hdr->msg_len)
+        item = NULL;
+
+    /*
+     * Discard the message if sequence number was already there, is too far
+     * in the future, already in the queue or if we received a FINISHED
+     * before the SERVER_HELLO, which then must be a stale retransmit.
+     */
+    if (msg_hdr->seq <= s->d1->handshake_read_seq ||
+        msg_hdr->seq > s->d1->handshake_read_seq + 10 || item != NULL ||
+        (s->d1->handshake_read_seq == 0 && msg_hdr->type == SSL3_MT_FINISHED)) {
+        unsigned char devnull[256];
+
+        while (frag_len) {
+            i = s->method->ssl_read_bytes(s, SSL3_RT_HANDSHAKE, NULL,
+                                          devnull,
+                                          frag_len >
+                                          sizeof(devnull) ? sizeof(devnull) :
+                                          frag_len, 0, &readbytes);
+            if (i <= 0)
+                goto err;
+            frag_len -= readbytes;
+        }
+    } else {
+        if (frag_len != msg_hdr->msg_len) {
+            return dtls1_reassemble_fragment(s, msg_hdr);
+        }
+
+        if (frag_len > dtls1_max_handshake_message_len(s))
+            goto err;
+
+        frag = dtls1_hm_fragment_new(frag_len, 0);
+        if (frag == NULL)
+            goto err;
+
+        memcpy(&(frag->msg_header), msg_hdr, sizeof(*msg_hdr));
+
+        if (frag_len) {
+            /*
+             * read the body of the fragment (header has already been read
+             */
+            i = s->method->ssl_read_bytes(s, SSL3_RT_HANDSHAKE, NULL,
+                                          frag->fragment, frag_len, 0,
+                                          &readbytes);
+            if (i<=0 || readbytes != frag_len)
+                i = -1;
+            if (i <= 0)
+                goto err;
+        }
+
+        item = pitem_new(seq64be, frag);
+        if (item == NULL)
+            goto err;
+
+        item = pqueue_insert(s->d1->buffered_messages, item);
+        /*
+         * pqueue_insert fails iff a duplicate item is inserted. However,
+         * |item| cannot be a duplicate. If it were, |pqueue_find|, above,
+         * would have returned it. Then, either |frag_len| !=
+         * |msg_hdr->msg_len| in which case |item| is set to NULL and it will
+         * have been processed with |dtls1_reassemble_fragment|, above, or
+         * the record will have been discarded.
+         */
+        if (!ossl_assert(item != NULL))
+            goto err;
+    }
+
+    return DTLS1_HM_FRAGMENT_RETRY;
+
+ err:
+    if (item == NULL)
+        dtls1_hm_fragment_free(frag);
+    return 0;
+}
+
+static int dtls_get_reassembled_message(SSL *s, int *errtype, size_t *len)
+{
+    unsigned char wire[DTLS1_HM_HEADER_LENGTH];
+    size_t mlen, frag_off, frag_len;
+    int i, ret, recvd_type;
+    struct hm_header_st msg_hdr;
+    size_t readbytes;
+
+    *errtype = 0;
+
+ redo:
+    /* see if we have the required fragment already */
+    ret = dtls1_retrieve_buffered_fragment(s, &frag_len);
+    if (ret < 0) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+    if (ret > 0) {
+        s->init_num = frag_len;
+        *len = frag_len;
+        return 1;
+    }
+
+    /* read handshake message header */
+    i = s->method->ssl_read_bytes(s, SSL3_RT_HANDSHAKE, &recvd_type, wire,
+                                  DTLS1_HM_HEADER_LENGTH, 0, &readbytes);
+    if (i <= 0) {               /* nbio, or an error */
+        s->rwstate = SSL_READING;
+        *len = 0;
+        return 0;
+    }
+    if (recvd_type == SSL3_RT_CHANGE_CIPHER_SPEC) {
+        if (wire[0] != SSL3_MT_CCS) {
+            SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE,
+                     SSL_F_DTLS_GET_REASSEMBLED_MESSAGE,
+                     SSL_R_BAD_CHANGE_CIPHER_SPEC);
+            goto f_err;
+        }
+
+        memcpy(s->init_buf->data, wire, readbytes);
+        s->init_num = readbytes - 1;
+        s->init_msg = s->init_buf->data + 1;
+        s->s3->tmp.message_type = SSL3_MT_CHANGE_CIPHER_SPEC;
+        s->s3->tmp.message_size = readbytes - 1;
+        *len = readbytes - 1;
+        return 1;
+    }
+
+    /* Handshake fails if message header is incomplete */
+    if (readbytes != DTLS1_HM_HEADER_LENGTH) {
+        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE,
+                 SSL_F_DTLS_GET_REASSEMBLED_MESSAGE, SSL_R_UNEXPECTED_MESSAGE);
+        goto f_err;
+    }
+
+    /* parse the message fragment header */
+    dtls1_get_message_header(wire, &msg_hdr);
+
+    mlen = msg_hdr.msg_len;
+    frag_off = msg_hdr.frag_off;
+    frag_len = msg_hdr.frag_len;
+
+    /*
+     * We must have at least frag_len bytes left in the record to be read.
+     * Fragments must not span records.
+     */
+    if (frag_len > RECORD_LAYER_get_rrec_length(&s->rlayer)) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                 SSL_F_DTLS_GET_REASSEMBLED_MESSAGE, SSL_R_BAD_LENGTH);
+        goto f_err;
+    }
+
+    /*
+     * if this is a future (or stale) message it gets buffered
+     * (or dropped)--no further processing at this time
+     * While listening, we accept seq 1 (ClientHello with cookie)
+     * although we're still expecting seq 0 (ClientHello)
+     */
+    if (msg_hdr.seq != s->d1->handshake_read_seq) {
+        *errtype = dtls1_process_out_of_seq_message(s, &msg_hdr);
+        return 0;
+    }
+
+    if (frag_len && frag_len < mlen) {
+        *errtype = dtls1_reassemble_fragment(s, &msg_hdr);
+        return 0;
+    }
+
+    if (!s->server
+            && s->d1->r_msg_hdr.frag_off == 0
+            && s->statem.hand_state != TLS_ST_OK
+            && wire[0] == SSL3_MT_HELLO_REQUEST) {
+        /*
+         * The server may always send 'Hello Request' messages -- we are
+         * doing a handshake anyway now, so ignore them if their format is
+         * correct. Does not count for 'Finished' MAC.
+         */
+        if (wire[1] == 0 && wire[2] == 0 && wire[3] == 0) {
+            if (s->msg_callback)
+                s->msg_callback(0, s->version, SSL3_RT_HANDSHAKE,
+                                wire, DTLS1_HM_HEADER_LENGTH, s,
+                                s->msg_callback_arg);
+
+            s->init_num = 0;
+            goto redo;
+        } else {                /* Incorrectly formatted Hello request */
+
+            SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE,
+                     SSL_F_DTLS_GET_REASSEMBLED_MESSAGE,
+                     SSL_R_UNEXPECTED_MESSAGE);
+            goto f_err;
+        }
+    }
+
+    if (!dtls1_preprocess_fragment(s, &msg_hdr)) {
+        /* SSLfatal() already called */
+        goto f_err;
+    }
+
+    if (frag_len > 0) {
+        unsigned char *p =
+            (unsigned char *)s->init_buf->data + DTLS1_HM_HEADER_LENGTH;
+
+        i = s->method->ssl_read_bytes(s, SSL3_RT_HANDSHAKE, NULL,
+                                      &p[frag_off], frag_len, 0, &readbytes);
+
+        /*
+         * This shouldn't ever fail due to NBIO because we already checked
+         * that we have enough data in the record
+         */
+        if (i <= 0) {
+            s->rwstate = SSL_READING;
+            *len = 0;
+            return 0;
+        }
+    } else {
+        readbytes = 0;
+    }
+
+    /*
+     * XDTLS: an incorrectly formatted fragment should cause the handshake
+     * to fail
+     */
+    if (readbytes != frag_len) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                 SSL_F_DTLS_GET_REASSEMBLED_MESSAGE, SSL_R_BAD_LENGTH);
+        goto f_err;
+    }
+
+    /*
+     * Note that s->init_num is *not* used as current offset in
+     * s->init_buf->data, but as a counter summing up fragments' lengths: as
+     * soon as they sum up to handshake packet length, we assume we have got
+     * all the fragments.
+     */
+    *len = s->init_num = frag_len;
+    return 1;
+
+ f_err:
+    s->init_num = 0;
+    *len = 0;
+    return 0;
+}
+
+/*-
+ * for these 2 messages, we need to
+ * ssl->enc_read_ctx                    re-init
+ * ssl->rlayer.read_sequence            zero
+ * ssl->s3->read_mac_secret             re-init
+ * ssl->session->read_sym_enc           assign
+ * ssl->session->read_compression       assign
+ * ssl->session->read_hash              assign
+ */
+int dtls_construct_change_cipher_spec(SSL *s, WPACKET *pkt)
+{
+    if (s->version == DTLS1_BAD_VER) {
+        s->d1->next_handshake_write_seq++;
+
+        if (!WPACKET_put_bytes_u16(pkt, s->d1->handshake_write_seq)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_DTLS_CONSTRUCT_CHANGE_CIPHER_SPEC,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+    }
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_SCTP
+/*
+ * Wait for a dry event. Should only be called at a point in the handshake
+ * where we are not expecting any data from the peer except an alert.
+ */
+WORK_STATE dtls_wait_for_dry(SSL *s)
+{
+    int ret, errtype;
+    size_t len;
+
+    /* read app data until dry event */
+    ret = BIO_dgram_sctp_wait_for_dry(SSL_get_wbio(s));
+    if (ret < 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DTLS_WAIT_FOR_DRY,
+                 ERR_R_INTERNAL_ERROR);
+        return WORK_ERROR;
+    }
+
+    if (ret == 0) {
+        /*
+         * We're not expecting any more messages from the peer at this point -
+         * but we could get an alert. If an alert is waiting then we will never
+         * return successfully. Therefore we attempt to read a message. This
+         * should never succeed but will process any waiting alerts.
+         */
+        if (dtls_get_reassembled_message(s, &errtype, &len)) {
+            /* The call succeeded! This should never happen */
+            SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_DTLS_WAIT_FOR_DRY,
+                     SSL_R_UNEXPECTED_MESSAGE);
+            return WORK_ERROR;
+        }
+
+        s->s3->in_read_app_data = 2;
+        s->rwstate = SSL_READING;
+        BIO_clear_retry_flags(SSL_get_rbio(s));
+        BIO_set_retry_read(SSL_get_rbio(s));
+        return WORK_MORE_A;
+    }
+    return WORK_FINISHED_CONTINUE;
+}
+#endif
+
+int dtls1_read_failed(SSL *s, int code)
+{
+    if (code > 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_DTLS1_READ_FAILED, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (!dtls1_is_timer_expired(s) || ossl_statem_in_error(s)) {
+        /*
+         * not a timeout, none of our business, let higher layers handle
+         * this.  in fact it's probably an error
+         */
+        return code;
+    }
+    /* done, no need to send a retransmit */
+    if (!SSL_in_init(s))
+    {
+        BIO_set_flags(SSL_get_rbio(s), BIO_FLAGS_READ);
+        return code;
+    }
+
+    return dtls1_handle_timeout(s);
+}
+
+int dtls1_get_queue_priority(unsigned short seq, int is_ccs)
+{
+    /*
+     * The index of the retransmission queue actually is the message sequence
+     * number, since the queue only contains messages of a single handshake.
+     * However, the ChangeCipherSpec has no message sequence number and so
+     * using only the sequence will result in the CCS and Finished having the
+     * same index. To prevent this, the sequence number is multiplied by 2.
+     * In case of a CCS 1 is subtracted. This does not only differ CSS and
+     * Finished, it also maintains the order of the index (important for
+     * priority queues) and fits in the unsigned short variable.
+     */
+    return seq * 2 - is_ccs;
+}
+
+int dtls1_retransmit_buffered_messages(SSL *s)
+{
+    pqueue *sent = s->d1->sent_messages;
+    piterator iter;
+    pitem *item;
+    hm_fragment *frag;
+    int found = 0;
+
+    iter = pqueue_iterator(sent);
+
+    for (item = pqueue_next(&iter); item != NULL; item = pqueue_next(&iter)) {
+        frag = (hm_fragment *)item->data;
+        if (dtls1_retransmit_message(s, (unsigned short)
+                                     dtls1_get_queue_priority
+                                     (frag->msg_header.seq,
+                                      frag->msg_header.is_ccs), &found) <= 0)
+            return -1;
+    }
+
+    return 1;
+}
+
+int dtls1_buffer_message(SSL *s, int is_ccs)
+{
+    pitem *item;
+    hm_fragment *frag;
+    unsigned char seq64be[8];
+
+    /*
+     * this function is called immediately after a message has been
+     * serialized
+     */
+    if (!ossl_assert(s->init_off == 0))
+        return 0;
+
+    frag = dtls1_hm_fragment_new(s->init_num, 0);
+    if (frag == NULL)
+        return 0;
+
+    memcpy(frag->fragment, s->init_buf->data, s->init_num);
+
+    if (is_ccs) {
+        /* For DTLS1_BAD_VER the header length is non-standard */
+        if (!ossl_assert(s->d1->w_msg_hdr.msg_len +
+                         ((s->version ==
+                           DTLS1_BAD_VER) ? 3 : DTLS1_CCS_HEADER_LENGTH)
+                         == (unsigned int)s->init_num))
+            return 0;
+    } else {
+        if (!ossl_assert(s->d1->w_msg_hdr.msg_len +
+                         DTLS1_HM_HEADER_LENGTH == (unsigned int)s->init_num))
+            return 0;
+    }
+
+    frag->msg_header.msg_len = s->d1->w_msg_hdr.msg_len;
+    frag->msg_header.seq = s->d1->w_msg_hdr.seq;
+    frag->msg_header.type = s->d1->w_msg_hdr.type;
+    frag->msg_header.frag_off = 0;
+    frag->msg_header.frag_len = s->d1->w_msg_hdr.msg_len;
+    frag->msg_header.is_ccs = is_ccs;
+
+    /* save current state */
+    frag->msg_header.saved_retransmit_state.enc_write_ctx = s->enc_write_ctx;
+    frag->msg_header.saved_retransmit_state.write_hash = s->write_hash;
+    frag->msg_header.saved_retransmit_state.compress = s->compress;
+    frag->msg_header.saved_retransmit_state.session = s->session;
+    frag->msg_header.saved_retransmit_state.epoch =
+        DTLS_RECORD_LAYER_get_w_epoch(&s->rlayer);
+
+    memset(seq64be, 0, sizeof(seq64be));
+    seq64be[6] =
+        (unsigned
+         char)(dtls1_get_queue_priority(frag->msg_header.seq,
+                                        frag->msg_header.is_ccs) >> 8);
+    seq64be[7] =
+        (unsigned
+         char)(dtls1_get_queue_priority(frag->msg_header.seq,
+                                        frag->msg_header.is_ccs));
+
+    item = pitem_new(seq64be, frag);
+    if (item == NULL) {
+        dtls1_hm_fragment_free(frag);
+        return 0;
+    }
+
+    pqueue_insert(s->d1->sent_messages, item);
+    return 1;
+}
+
+int dtls1_retransmit_message(SSL *s, unsigned short seq, int *found)
+{
+    int ret;
+    /* XDTLS: for now assuming that read/writes are blocking */
+    pitem *item;
+    hm_fragment *frag;
+    unsigned long header_length;
+    unsigned char seq64be[8];
+    struct dtls1_retransmit_state saved_state;
+
+    /* XDTLS:  the requested message ought to be found, otherwise error */
+    memset(seq64be, 0, sizeof(seq64be));
+    seq64be[6] = (unsigned char)(seq >> 8);
+    seq64be[7] = (unsigned char)seq;
+
+    item = pqueue_find(s->d1->sent_messages, seq64be);
+    if (item == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DTLS1_RETRANSMIT_MESSAGE,
+                 ERR_R_INTERNAL_ERROR);
+        *found = 0;
+        return 0;
+    }
+
+    *found = 1;
+    frag = (hm_fragment *)item->data;
+
+    if (frag->msg_header.is_ccs)
+        header_length = DTLS1_CCS_HEADER_LENGTH;
+    else
+        header_length = DTLS1_HM_HEADER_LENGTH;
+
+    memcpy(s->init_buf->data, frag->fragment,
+           frag->msg_header.msg_len + header_length);
+    s->init_num = frag->msg_header.msg_len + header_length;
+
+    dtls1_set_message_header_int(s, frag->msg_header.type,
+                                 frag->msg_header.msg_len,
+                                 frag->msg_header.seq, 0,
+                                 frag->msg_header.frag_len);
+
+    /* save current state */
+    saved_state.enc_write_ctx = s->enc_write_ctx;
+    saved_state.write_hash = s->write_hash;
+    saved_state.compress = s->compress;
+    saved_state.session = s->session;
+    saved_state.epoch = DTLS_RECORD_LAYER_get_w_epoch(&s->rlayer);
+
+    s->d1->retransmitting = 1;
+
+    /* restore state in which the message was originally sent */
+    s->enc_write_ctx = frag->msg_header.saved_retransmit_state.enc_write_ctx;
+    s->write_hash = frag->msg_header.saved_retransmit_state.write_hash;
+    s->compress = frag->msg_header.saved_retransmit_state.compress;
+    s->session = frag->msg_header.saved_retransmit_state.session;
+    DTLS_RECORD_LAYER_set_saved_w_epoch(&s->rlayer,
+                                        frag->msg_header.
+                                        saved_retransmit_state.epoch);
+
+    ret = dtls1_do_write(s, frag->msg_header.is_ccs ?
+                         SSL3_RT_CHANGE_CIPHER_SPEC : SSL3_RT_HANDSHAKE);
+
+    /* restore current state */
+    s->enc_write_ctx = saved_state.enc_write_ctx;
+    s->write_hash = saved_state.write_hash;
+    s->compress = saved_state.compress;
+    s->session = saved_state.session;
+    DTLS_RECORD_LAYER_set_saved_w_epoch(&s->rlayer, saved_state.epoch);
+
+    s->d1->retransmitting = 0;
+
+    (void)BIO_flush(s->wbio);
+    return ret;
+}
+
+void dtls1_set_message_header(SSL *s,
+                              unsigned char mt, size_t len,
+                              size_t frag_off, size_t frag_len)
+{
+    if (frag_off == 0) {
+        s->d1->handshake_write_seq = s->d1->next_handshake_write_seq;
+        s->d1->next_handshake_write_seq++;
+    }
+
+    dtls1_set_message_header_int(s, mt, len, s->d1->handshake_write_seq,
+                                 frag_off, frag_len);
+}
+
+/* don't actually do the writing, wait till the MTU has been retrieved */
+static void
+dtls1_set_message_header_int(SSL *s, unsigned char mt,
+                             size_t len, unsigned short seq_num,
+                             size_t frag_off, size_t frag_len)
+{
+    struct hm_header_st *msg_hdr = &s->d1->w_msg_hdr;
+
+    msg_hdr->type = mt;
+    msg_hdr->msg_len = len;
+    msg_hdr->seq = seq_num;
+    msg_hdr->frag_off = frag_off;
+    msg_hdr->frag_len = frag_len;
+}
+
+static void
+dtls1_fix_message_header(SSL *s, size_t frag_off, size_t frag_len)
+{
+    struct hm_header_st *msg_hdr = &s->d1->w_msg_hdr;
+
+    msg_hdr->frag_off = frag_off;
+    msg_hdr->frag_len = frag_len;
+}
+
+static unsigned char *dtls1_write_message_header(SSL *s, unsigned char *p)
+{
+    struct hm_header_st *msg_hdr = &s->d1->w_msg_hdr;
+
+    *p++ = msg_hdr->type;
+    l2n3(msg_hdr->msg_len, p);
+
+    s2n(msg_hdr->seq, p);
+    l2n3(msg_hdr->frag_off, p);
+    l2n3(msg_hdr->frag_len, p);
+
+    return p;
+}
+
+void dtls1_get_message_header(unsigned char *data, struct hm_header_st *msg_hdr)
+{
+    memset(msg_hdr, 0, sizeof(*msg_hdr));
+    msg_hdr->type = *(data++);
+    n2l3(data, msg_hdr->msg_len);
+
+    n2s(data, msg_hdr->seq);
+    n2l3(data, msg_hdr->frag_off);
+    n2l3(data, msg_hdr->frag_len);
+}
+
+int dtls1_set_handshake_header(SSL *s, WPACKET *pkt, int htype)
+{
+    unsigned char *header;
+
+    if (htype == SSL3_MT_CHANGE_CIPHER_SPEC) {
+        s->d1->handshake_write_seq = s->d1->next_handshake_write_seq;
+        dtls1_set_message_header_int(s, SSL3_MT_CCS, 0,
+                                     s->d1->handshake_write_seq, 0, 0);
+        if (!WPACKET_put_bytes_u8(pkt, SSL3_MT_CCS))
+            return 0;
+    } else {
+        dtls1_set_message_header(s, htype, 0, 0, 0);
+        /*
+         * We allocate space at the start for the message header. This gets
+         * filled in later
+         */
+        if (!WPACKET_allocate_bytes(pkt, DTLS1_HM_HEADER_LENGTH, &header)
+                || !WPACKET_start_sub_packet(pkt))
+            return 0;
+    }
+
+    return 1;
+}
+
+int dtls1_close_construct_packet(SSL *s, WPACKET *pkt, int htype)
+{
+    size_t msglen;
+
+    if ((htype != SSL3_MT_CHANGE_CIPHER_SPEC && !WPACKET_close(pkt))
+            || !WPACKET_get_length(pkt, &msglen)
+            || msglen > INT_MAX)
+        return 0;
+
+    if (htype != SSL3_MT_CHANGE_CIPHER_SPEC) {
+        s->d1->w_msg_hdr.msg_len = msglen - DTLS1_HM_HEADER_LENGTH;
+        s->d1->w_msg_hdr.frag_len = msglen - DTLS1_HM_HEADER_LENGTH;
+    }
+    s->init_num = (int)msglen;
+    s->init_off = 0;
+
+    if (htype != DTLS1_MT_HELLO_VERIFY_REQUEST) {
+        /* Buffer the message to handle re-xmits */
+        if (!dtls1_buffer_message(s, htype == SSL3_MT_CHANGE_CIPHER_SPEC
+                                     ? 1 : 0))
+            return 0;
+    }
+
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_lib.c b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_lib.c
new file mode 100644
index 000000000..c0482b0a9
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_lib.c
@@ -0,0 +1,2403 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <limits.h>
+#include <string.h>
+#include <stdio.h>
+#include "../ssl_locl.h"
+#include "statem_locl.h"
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/x509.h>
+
+/*
+ * Map error codes to TLS/SSL alart types.
+ */
+typedef struct x509err2alert_st {
+    int x509err;
+    int alert;
+} X509ERR2ALERT;
+
+/* Fixed value used in the ServerHello random field to identify an HRR */
+const unsigned char hrrrandom[] = {
+    0xcf, 0x21, 0xad, 0x74, 0xe5, 0x9a, 0x61, 0x11, 0xbe, 0x1d, 0x8c, 0x02,
+    0x1e, 0x65, 0xb8, 0x91, 0xc2, 0xa2, 0x11, 0x16, 0x7a, 0xbb, 0x8c, 0x5e,
+    0x07, 0x9e, 0x09, 0xe2, 0xc8, 0xa8, 0x33, 0x9c
+};
+
+/*
+ * send s->init_buf in records of type 'type' (SSL3_RT_HANDSHAKE or
+ * SSL3_RT_CHANGE_CIPHER_SPEC)
+ */
+int ssl3_do_write(SSL *s, int type)
+{
+    int ret;
+    size_t written = 0;
+
+    ret = ssl3_write_bytes(s, type, &s->init_buf->data[s->init_off],
+                           s->init_num, &written);
+    if (ret < 0)
+        return -1;
+    if (type == SSL3_RT_HANDSHAKE)
+        /*
+         * should not be done for 'Hello Request's, but in that case we'll
+         * ignore the result anyway
+         * TLS1.3 KeyUpdate and NewSessionTicket do not need to be added
+         */
+        if (!SSL_IS_TLS13(s) || (s->statem.hand_state != TLS_ST_SW_SESSION_TICKET
+                                 && s->statem.hand_state != TLS_ST_CW_KEY_UPDATE
+                                 && s->statem.hand_state != TLS_ST_SW_KEY_UPDATE))
+            if (!ssl3_finish_mac(s,
+                                 (unsigned char *)&s->init_buf->data[s->init_off],
+                                 written))
+                return -1;
+    if (written == s->init_num) {
+        if (s->msg_callback)
+            s->msg_callback(1, s->version, type, s->init_buf->data,
+                            (size_t)(s->init_off + s->init_num), s,
+                            s->msg_callback_arg);
+        return 1;
+    }
+    s->init_off += written;
+    s->init_num -= written;
+    return 0;
+}
+
+int tls_close_construct_packet(SSL *s, WPACKET *pkt, int htype)
+{
+    size_t msglen;
+
+    if ((htype != SSL3_MT_CHANGE_CIPHER_SPEC && !WPACKET_close(pkt))
+            || !WPACKET_get_length(pkt, &msglen)
+            || msglen > INT_MAX)
+        return 0;
+    s->init_num = (int)msglen;
+    s->init_off = 0;
+
+    return 1;
+}
+
+int tls_setup_handshake(SSL *s)
+{
+    if (!ssl3_init_finished_mac(s)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    /* Reset any extension flags */
+    memset(s->ext.extflags, 0, sizeof(s->ext.extflags));
+
+    if (s->server) {
+        STACK_OF(SSL_CIPHER) *ciphers = SSL_get_ciphers(s);
+        int i, ver_min, ver_max, ok = 0;
+
+        /*
+         * Sanity check that the maximum version we accept has ciphers
+         * enabled. For clients we do this check during construction of the
+         * ClientHello.
+         */
+        if (ssl_get_min_max_version(s, &ver_min, &ver_max, NULL) != 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_SETUP_HANDSHAKE,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+        for (i = 0; i < sk_SSL_CIPHER_num(ciphers); i++) {
+            const SSL_CIPHER *c = sk_SSL_CIPHER_value(ciphers, i);
+
+            if (SSL_IS_DTLS(s)) {
+                if (DTLS_VERSION_GE(ver_max, c->min_dtls) &&
+                        DTLS_VERSION_LE(ver_max, c->max_dtls))
+                    ok = 1;
+            } else if (ver_max >= c->min_tls && ver_max <= c->max_tls) {
+                ok = 1;
+            }
+            if (ok)
+                break;
+        }
+        if (!ok) {
+            SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_TLS_SETUP_HANDSHAKE,
+                     SSL_R_NO_CIPHERS_AVAILABLE);
+            ERR_add_error_data(1, "No ciphers enabled for max supported "
+                                  "SSL/TLS version");
+            return 0;
+        }
+        if (SSL_IS_FIRST_HANDSHAKE(s)) {
+            /* N.B. s->session_ctx == s->ctx here */
+            tsan_counter(&s->session_ctx->stats.sess_accept);
+        } else {
+            /* N.B. s->ctx may not equal s->session_ctx */
+            tsan_counter(&s->ctx->stats.sess_accept_renegotiate);
+
+            s->s3->tmp.cert_request = 0;
+        }
+    } else {
+        if (SSL_IS_FIRST_HANDSHAKE(s))
+            tsan_counter(&s->session_ctx->stats.sess_connect);
+        else
+            tsan_counter(&s->session_ctx->stats.sess_connect_renegotiate);
+
+        /* mark client_random uninitialized */
+        memset(s->s3->client_random, 0, sizeof(s->s3->client_random));
+        s->hit = 0;
+
+        s->s3->tmp.cert_req = 0;
+
+        if (SSL_IS_DTLS(s))
+            s->statem.use_timer = 1;
+    }
+
+    return 1;
+}
+
+/*
+ * Size of the to-be-signed TLS13 data, without the hash size itself:
+ * 64 bytes of value 32, 33 context bytes, 1 byte separator
+ */
+#define TLS13_TBS_START_SIZE            64
+#define TLS13_TBS_PREAMBLE_SIZE         (TLS13_TBS_START_SIZE + 33 + 1)
+
+static int get_cert_verify_tbs_data(SSL *s, unsigned char *tls13tbs,
+                                    void **hdata, size_t *hdatalen)
+{
+    static const char *servercontext = "TLS 1.3, server CertificateVerify";
+    static const char *clientcontext = "TLS 1.3, client CertificateVerify";
+
+    if (SSL_IS_TLS13(s)) {
+        size_t hashlen;
+
+        /* Set the first 64 bytes of to-be-signed data to octet 32 */
+        memset(tls13tbs, 32, TLS13_TBS_START_SIZE);
+        /* This copies the 33 bytes of context plus the 0 separator byte */
+        if (s->statem.hand_state == TLS_ST_CR_CERT_VRFY
+                 || s->statem.hand_state == TLS_ST_SW_CERT_VRFY)
+            strcpy((char *)tls13tbs + TLS13_TBS_START_SIZE, servercontext);
+        else
+            strcpy((char *)tls13tbs + TLS13_TBS_START_SIZE, clientcontext);
+
+        /*
+         * If we're currently reading then we need to use the saved handshake
+         * hash value. We can't use the current handshake hash state because
+         * that includes the CertVerify itself.
+         */
+        if (s->statem.hand_state == TLS_ST_CR_CERT_VRFY
+                || s->statem.hand_state == TLS_ST_SR_CERT_VRFY) {
+            memcpy(tls13tbs + TLS13_TBS_PREAMBLE_SIZE, s->cert_verify_hash,
+                   s->cert_verify_hash_len);
+            hashlen = s->cert_verify_hash_len;
+        } else if (!ssl_handshake_hash(s, tls13tbs + TLS13_TBS_PREAMBLE_SIZE,
+                                       EVP_MAX_MD_SIZE, &hashlen)) {
+            /* SSLfatal() already called */
+            return 0;
+        }
+
+        *hdata = tls13tbs;
+        *hdatalen = TLS13_TBS_PREAMBLE_SIZE + hashlen;
+    } else {
+        size_t retlen;
+        long retlen_l;
+
+        retlen = retlen_l = BIO_get_mem_data(s->s3->handshake_buffer, hdata);
+        if (retlen_l <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_GET_CERT_VERIFY_TBS_DATA,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+        *hdatalen = retlen;
+    }
+
+    return 1;
+}
+
+int tls_construct_cert_verify(SSL *s, WPACKET *pkt)
+{
+    EVP_PKEY *pkey = NULL;
+    const EVP_MD *md = NULL;
+    EVP_MD_CTX *mctx = NULL;
+    EVP_PKEY_CTX *pctx = NULL;
+    size_t hdatalen = 0, siglen = 0;
+    void *hdata;
+    unsigned char *sig = NULL;
+    unsigned char tls13tbs[TLS13_TBS_PREAMBLE_SIZE + EVP_MAX_MD_SIZE];
+    const SIGALG_LOOKUP *lu = s->s3->tmp.sigalg;
+
+    if (lu == NULL || s->s3->tmp.cert == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CERT_VERIFY,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    pkey = s->s3->tmp.cert->privatekey;
+
+    if (pkey == NULL || !tls1_lookup_md(lu, &md)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CERT_VERIFY,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    mctx = EVP_MD_CTX_new();
+    if (mctx == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CERT_VERIFY,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    /* Get the data to be signed */
+    if (!get_cert_verify_tbs_data(s, tls13tbs, &hdata, &hdatalen)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    if (SSL_USE_SIGALGS(s) && !WPACKET_put_bytes_u16(pkt, lu->sigalg)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CERT_VERIFY,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    siglen = EVP_PKEY_size(pkey);
+    sig = OPENSSL_malloc(siglen);
+    if (sig == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CERT_VERIFY,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (EVP_DigestSignInit(mctx, &pctx, md, NULL, pkey) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CERT_VERIFY,
+                 ERR_R_EVP_LIB);
+        goto err;
+    }
+
+    if (lu->sig == EVP_PKEY_RSA_PSS) {
+        if (EVP_PKEY_CTX_set_rsa_padding(pctx, RSA_PKCS1_PSS_PADDING) <= 0
+            || EVP_PKEY_CTX_set_rsa_pss_saltlen(pctx,
+                                                RSA_PSS_SALTLEN_DIGEST) <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CERT_VERIFY,
+                     ERR_R_EVP_LIB);
+            goto err;
+        }
+    }
+    if (s->version == SSL3_VERSION) {
+        if (EVP_DigestSignUpdate(mctx, hdata, hdatalen) <= 0
+            || !EVP_MD_CTX_ctrl(mctx, EVP_CTRL_SSL3_MASTER_SECRET,
+                                (int)s->session->master_key_length,
+                                s->session->master_key)
+            || EVP_DigestSignFinal(mctx, sig, &siglen) <= 0) {
+
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CERT_VERIFY,
+                     ERR_R_EVP_LIB);
+            goto err;
+        }
+    } else if (EVP_DigestSign(mctx, sig, &siglen, hdata, hdatalen) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CERT_VERIFY,
+                 ERR_R_EVP_LIB);
+        goto err;
+    }
+
+#ifndef OPENSSL_NO_GOST
+    {
+        int pktype = lu->sig;
+
+        if (pktype == NID_id_GostR3410_2001
+            || pktype == NID_id_GostR3410_2012_256
+            || pktype == NID_id_GostR3410_2012_512)
+            BUF_reverse(sig, NULL, siglen);
+    }
+#endif
+
+    if (!WPACKET_sub_memcpy_u16(pkt, sig, siglen)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CERT_VERIFY,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    /* Digest cached records and discard handshake buffer */
+    if (!ssl3_digest_cached_records(s, 0)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    OPENSSL_free(sig);
+    EVP_MD_CTX_free(mctx);
+    return 1;
+ err:
+    OPENSSL_free(sig);
+    EVP_MD_CTX_free(mctx);
+    return 0;
+}
+
+MSG_PROCESS_RETURN tls_process_cert_verify(SSL *s, PACKET *pkt)
+{
+    EVP_PKEY *pkey = NULL;
+    const unsigned char *data;
+#ifndef OPENSSL_NO_GOST
+    unsigned char *gost_data = NULL;
+#endif
+    MSG_PROCESS_RETURN ret = MSG_PROCESS_ERROR;
+    int j;
+    unsigned int len;
+    X509 *peer;
+    const EVP_MD *md = NULL;
+    size_t hdatalen = 0;
+    void *hdata;
+    unsigned char tls13tbs[TLS13_TBS_PREAMBLE_SIZE + EVP_MAX_MD_SIZE];
+    EVP_MD_CTX *mctx = EVP_MD_CTX_new();
+    EVP_PKEY_CTX *pctx = NULL;
+
+    if (mctx == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CERT_VERIFY,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    peer = s->session->peer;
+    pkey = X509_get0_pubkey(peer);
+    if (pkey == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CERT_VERIFY,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    if (ssl_cert_lookup_by_pkey(pkey, NULL) == NULL) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PROCESS_CERT_VERIFY,
+                 SSL_R_SIGNATURE_FOR_NON_SIGNING_CERTIFICATE);
+        goto err;
+    }
+
+    if (SSL_USE_SIGALGS(s)) {
+        unsigned int sigalg;
+
+        if (!PACKET_get_net_2(pkt, &sigalg)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CERT_VERIFY,
+                     SSL_R_BAD_PACKET);
+            goto err;
+        }
+        if (tls12_check_peer_sigalg(s, sigalg, pkey) <= 0) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    } else if (!tls1_set_peer_legacy_sigalg(s, pkey)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CERT_VERIFY,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+    }
+
+    if (!tls1_lookup_md(s->s3->tmp.peer_sigalg, &md)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CERT_VERIFY,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+#ifdef SSL_DEBUG
+    if (SSL_USE_SIGALGS(s))
+        fprintf(stderr, "USING TLSv1.2 HASH %s\n",
+                md == NULL ? "n/a" : EVP_MD_name(md));
+#endif
+
+    /* Check for broken implementations of GOST ciphersuites */
+    /*
+     * If key is GOST and len is exactly 64 or 128, it is signature without
+     * length field (CryptoPro implementations at least till TLS 1.2)
+     */
+#ifndef OPENSSL_NO_GOST
+    if (!SSL_USE_SIGALGS(s)
+        && ((PACKET_remaining(pkt) == 64
+             && (EVP_PKEY_id(pkey) == NID_id_GostR3410_2001
+                 || EVP_PKEY_id(pkey) == NID_id_GostR3410_2012_256))
+            || (PACKET_remaining(pkt) == 128
+                && EVP_PKEY_id(pkey) == NID_id_GostR3410_2012_512))) {
+        len = PACKET_remaining(pkt);
+    } else
+#endif
+    if (!PACKET_get_net_2(pkt, &len)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CERT_VERIFY,
+                 SSL_R_LENGTH_MISMATCH);
+        goto err;
+    }
+
+    j = EVP_PKEY_size(pkey);
+    if (((int)len > j) || ((int)PACKET_remaining(pkt) > j)
+        || (PACKET_remaining(pkt) == 0)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CERT_VERIFY,
+                 SSL_R_WRONG_SIGNATURE_SIZE);
+        goto err;
+    }
+    if (!PACKET_get_bytes(pkt, &data, len)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CERT_VERIFY,
+                 SSL_R_LENGTH_MISMATCH);
+        goto err;
+    }
+
+    if (!get_cert_verify_tbs_data(s, tls13tbs, &hdata, &hdatalen)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+#ifdef SSL_DEBUG
+    fprintf(stderr, "Using client verify alg %s\n",
+            md == NULL ? "n/a" : EVP_MD_name(md));
+#endif
+    if (EVP_DigestVerifyInit(mctx, &pctx, md, NULL, pkey) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CERT_VERIFY,
+                 ERR_R_EVP_LIB);
+        goto err;
+    }
+#ifndef OPENSSL_NO_GOST
+    {
+        int pktype = EVP_PKEY_id(pkey);
+        if (pktype == NID_id_GostR3410_2001
+            || pktype == NID_id_GostR3410_2012_256
+            || pktype == NID_id_GostR3410_2012_512) {
+            if ((gost_data = OPENSSL_malloc(len)) == NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_PROCESS_CERT_VERIFY, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            BUF_reverse(gost_data, data, len);
+            data = gost_data;
+        }
+    }
+#endif
+
+    if (SSL_USE_PSS(s)) {
+        if (EVP_PKEY_CTX_set_rsa_padding(pctx, RSA_PKCS1_PSS_PADDING) <= 0
+            || EVP_PKEY_CTX_set_rsa_pss_saltlen(pctx,
+                                                RSA_PSS_SALTLEN_DIGEST) <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CERT_VERIFY,
+                     ERR_R_EVP_LIB);
+            goto err;
+        }
+    }
+    if (s->version == SSL3_VERSION) {
+        if (EVP_DigestVerifyUpdate(mctx, hdata, hdatalen) <= 0
+                || !EVP_MD_CTX_ctrl(mctx, EVP_CTRL_SSL3_MASTER_SECRET,
+                                    (int)s->session->master_key_length,
+                                    s->session->master_key)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CERT_VERIFY,
+                     ERR_R_EVP_LIB);
+            goto err;
+        }
+        if (EVP_DigestVerifyFinal(mctx, data, len) <= 0) {
+            SSLfatal(s, SSL_AD_DECRYPT_ERROR, SSL_F_TLS_PROCESS_CERT_VERIFY,
+                     SSL_R_BAD_SIGNATURE);
+            goto err;
+        }
+    } else {
+        j = EVP_DigestVerify(mctx, data, len, hdata, hdatalen);
+        if (j <= 0) {
+            SSLfatal(s, SSL_AD_DECRYPT_ERROR, SSL_F_TLS_PROCESS_CERT_VERIFY,
+                     SSL_R_BAD_SIGNATURE);
+            goto err;
+        }
+    }
+
+    /*
+     * In TLSv1.3 on the client side we make sure we prepare the client
+     * certificate after the CertVerify instead of when we get the
+     * CertificateRequest. This is because in TLSv1.3 the CertificateRequest
+     * comes *before* the Certificate message. In TLSv1.2 it comes after. We
+     * want to make sure that SSL_get_peer_certificate() will return the actual
+     * server certificate from the client_cert_cb callback.
+     */
+    if (!s->server && SSL_IS_TLS13(s) && s->s3->tmp.cert_req == 1)
+        ret = MSG_PROCESS_CONTINUE_PROCESSING;
+    else
+        ret = MSG_PROCESS_CONTINUE_READING;
+ err:
+    BIO_free(s->s3->handshake_buffer);
+    s->s3->handshake_buffer = NULL;
+    EVP_MD_CTX_free(mctx);
+#ifndef OPENSSL_NO_GOST
+    OPENSSL_free(gost_data);
+#endif
+    return ret;
+}
+
+int tls_construct_finished(SSL *s, WPACKET *pkt)
+{
+    size_t finish_md_len;
+    const char *sender;
+    size_t slen;
+
+    /* This is a real handshake so make sure we clean it up at the end */
+    if (!s->server && s->post_handshake_auth != SSL_PHA_REQUESTED)
+        s->statem.cleanuphand = 1;
+
+    /*
+     * We only change the keys if we didn't already do this when we sent the
+     * client certificate
+     */
+    if (SSL_IS_TLS13(s)
+            && !s->server
+            && s->s3->tmp.cert_req == 0
+            && (!s->method->ssl3_enc->change_cipher_state(s,
+                    SSL3_CC_HANDSHAKE | SSL3_CHANGE_CIPHER_CLIENT_WRITE))) {;
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    if (s->server) {
+        sender = s->method->ssl3_enc->server_finished_label;
+        slen = s->method->ssl3_enc->server_finished_label_len;
+    } else {
+        sender = s->method->ssl3_enc->client_finished_label;
+        slen = s->method->ssl3_enc->client_finished_label_len;
+    }
+
+    finish_md_len = s->method->ssl3_enc->final_finish_mac(s,
+                                                          sender, slen,
+                                                          s->s3->tmp.finish_md);
+    if (finish_md_len == 0) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    s->s3->tmp.finish_md_len = finish_md_len;
+
+    if (!WPACKET_memcpy(pkt, s->s3->tmp.finish_md, finish_md_len)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_FINISHED,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    /*
+     * Log the master secret, if logging is enabled. We don't log it for
+     * TLSv1.3: there's a different key schedule for that.
+     */
+    if (!SSL_IS_TLS13(s) && !ssl_log_secret(s, MASTER_SECRET_LABEL,
+                                            s->session->master_key,
+                                            s->session->master_key_length)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    /*
+     * Copy the finished so we can use it for renegotiation checks
+     */
+    if (!ossl_assert(finish_md_len <= EVP_MAX_MD_SIZE)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_FINISHED,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    if (!s->server) {
+        memcpy(s->s3->previous_client_finished, s->s3->tmp.finish_md,
+               finish_md_len);
+        s->s3->previous_client_finished_len = finish_md_len;
+    } else {
+        memcpy(s->s3->previous_server_finished, s->s3->tmp.finish_md,
+               finish_md_len);
+        s->s3->previous_server_finished_len = finish_md_len;
+    }
+
+    return 1;
+}
+
+int tls_construct_key_update(SSL *s, WPACKET *pkt)
+{
+    if (!WPACKET_put_bytes_u8(pkt, s->key_update)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_KEY_UPDATE,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    s->key_update = SSL_KEY_UPDATE_NONE;
+    return 1;
+}
+
+MSG_PROCESS_RETURN tls_process_key_update(SSL *s, PACKET *pkt)
+{
+    unsigned int updatetype;
+
+    /*
+     * A KeyUpdate message signals a key change so the end of the message must
+     * be on a record boundary.
+     */
+    if (RECORD_LAYER_processed_read_pending(&s->rlayer)) {
+        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_TLS_PROCESS_KEY_UPDATE,
+                 SSL_R_NOT_ON_RECORD_BOUNDARY);
+        return MSG_PROCESS_ERROR;
+    }
+
+    if (!PACKET_get_1(pkt, &updatetype)
+            || PACKET_remaining(pkt) != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_KEY_UPDATE,
+                 SSL_R_BAD_KEY_UPDATE);
+        return MSG_PROCESS_ERROR;
+    }
+
+    /*
+     * There are only two defined key update types. Fail if we get a value we
+     * didn't recognise.
+     */
+    if (updatetype != SSL_KEY_UPDATE_NOT_REQUESTED
+            && updatetype != SSL_KEY_UPDATE_REQUESTED) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PROCESS_KEY_UPDATE,
+                 SSL_R_BAD_KEY_UPDATE);
+        return MSG_PROCESS_ERROR;
+    }
+
+    /*
+     * If we get a request for us to update our sending keys too then, we need
+     * to additionally send a KeyUpdate message. However that message should
+     * not also request an update (otherwise we get into an infinite loop). We
+     * ignore a request for us to update our sending keys too if we already
+     * sent close_notify.
+     */
+    if (updatetype == SSL_KEY_UPDATE_REQUESTED
+            && (s->shutdown & SSL_SENT_SHUTDOWN) == 0)
+        s->key_update = SSL_KEY_UPDATE_NOT_REQUESTED;
+
+    if (!tls13_update_key(s, 0)) {
+        /* SSLfatal() already called */
+        return MSG_PROCESS_ERROR;
+    }
+
+    return MSG_PROCESS_FINISHED_READING;
+}
+
+/*
+ * ssl3_take_mac calculates the Finished MAC for the handshakes messages seen
+ * to far.
+ */
+int ssl3_take_mac(SSL *s)
+{
+    const char *sender;
+    size_t slen;
+
+    if (!s->server) {
+        sender = s->method->ssl3_enc->server_finished_label;
+        slen = s->method->ssl3_enc->server_finished_label_len;
+    } else {
+        sender = s->method->ssl3_enc->client_finished_label;
+        slen = s->method->ssl3_enc->client_finished_label_len;
+    }
+
+    s->s3->tmp.peer_finish_md_len =
+        s->method->ssl3_enc->final_finish_mac(s, sender, slen,
+                                              s->s3->tmp.peer_finish_md);
+
+    if (s->s3->tmp.peer_finish_md_len == 0) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    return 1;
+}
+
+MSG_PROCESS_RETURN tls_process_change_cipher_spec(SSL *s, PACKET *pkt)
+{
+    size_t remain;
+
+    remain = PACKET_remaining(pkt);
+    /*
+     * 'Change Cipher Spec' is just a single byte, which should already have
+     * been consumed by ssl_get_message() so there should be no bytes left,
+     * unless we're using DTLS1_BAD_VER, which has an extra 2 bytes
+     */
+    if (SSL_IS_DTLS(s)) {
+        if ((s->version == DTLS1_BAD_VER
+             && remain != DTLS1_CCS_HEADER_LENGTH + 1)
+            || (s->version != DTLS1_BAD_VER
+                && remain != DTLS1_CCS_HEADER_LENGTH - 1)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PROCESS_CHANGE_CIPHER_SPEC,
+                    SSL_R_BAD_CHANGE_CIPHER_SPEC);
+            return MSG_PROCESS_ERROR;
+        }
+    } else {
+        if (remain != 0) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PROCESS_CHANGE_CIPHER_SPEC,
+                     SSL_R_BAD_CHANGE_CIPHER_SPEC);
+            return MSG_PROCESS_ERROR;
+        }
+    }
+
+    /* Check we have a cipher to change to */
+    if (s->s3->tmp.new_cipher == NULL) {
+        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE,
+                 SSL_F_TLS_PROCESS_CHANGE_CIPHER_SPEC, SSL_R_CCS_RECEIVED_EARLY);
+        return MSG_PROCESS_ERROR;
+    }
+
+    s->s3->change_cipher_spec = 1;
+    if (!ssl3_do_change_cipher_spec(s)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CHANGE_CIPHER_SPEC,
+                 ERR_R_INTERNAL_ERROR);
+        return MSG_PROCESS_ERROR;
+    }
+
+    if (SSL_IS_DTLS(s)) {
+        dtls1_reset_seq_numbers(s, SSL3_CC_READ);
+
+        if (s->version == DTLS1_BAD_VER)
+            s->d1->handshake_read_seq++;
+
+#ifndef OPENSSL_NO_SCTP
+        /*
+         * Remember that a CCS has been received, so that an old key of
+         * SCTP-Auth can be deleted when a CCS is sent. Will be ignored if no
+         * SCTP is used
+         */
+        BIO_ctrl(SSL_get_wbio(s), BIO_CTRL_DGRAM_SCTP_AUTH_CCS_RCVD, 1, NULL);
+#endif
+    }
+
+    return MSG_PROCESS_CONTINUE_READING;
+}
+
+MSG_PROCESS_RETURN tls_process_finished(SSL *s, PACKET *pkt)
+{
+    size_t md_len;
+
+
+    /* This is a real handshake so make sure we clean it up at the end */
+    if (s->server) {
+        /*
+        * To get this far we must have read encrypted data from the client. We
+        * no longer tolerate unencrypted alerts. This value is ignored if less
+        * than TLSv1.3
+        */
+        s->statem.enc_read_state = ENC_READ_STATE_VALID;
+        if (s->post_handshake_auth != SSL_PHA_REQUESTED)
+            s->statem.cleanuphand = 1;
+        if (SSL_IS_TLS13(s) && !tls13_save_handshake_digest_for_pha(s)) {
+                /* SSLfatal() already called */
+                return MSG_PROCESS_ERROR;
+        }
+    }
+
+    /*
+     * In TLSv1.3 a Finished message signals a key change so the end of the
+     * message must be on a record boundary.
+     */
+    if (SSL_IS_TLS13(s) && RECORD_LAYER_processed_read_pending(&s->rlayer)) {
+        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_TLS_PROCESS_FINISHED,
+                 SSL_R_NOT_ON_RECORD_BOUNDARY);
+        return MSG_PROCESS_ERROR;
+    }
+
+    /* If this occurs, we have missed a message */
+    if (!SSL_IS_TLS13(s) && !s->s3->change_cipher_spec) {
+        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE, SSL_F_TLS_PROCESS_FINISHED,
+                 SSL_R_GOT_A_FIN_BEFORE_A_CCS);
+        return MSG_PROCESS_ERROR;
+    }
+    s->s3->change_cipher_spec = 0;
+
+    md_len = s->s3->tmp.peer_finish_md_len;
+
+    if (md_len != PACKET_remaining(pkt)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_FINISHED,
+                 SSL_R_BAD_DIGEST_LENGTH);
+        return MSG_PROCESS_ERROR;
+    }
+
+    if (CRYPTO_memcmp(PACKET_data(pkt), s->s3->tmp.peer_finish_md,
+                      md_len) != 0) {
+        SSLfatal(s, SSL_AD_DECRYPT_ERROR, SSL_F_TLS_PROCESS_FINISHED,
+                 SSL_R_DIGEST_CHECK_FAILED);
+        return MSG_PROCESS_ERROR;
+    }
+
+    /*
+     * Copy the finished so we can use it for renegotiation checks
+     */
+    if (!ossl_assert(md_len <= EVP_MAX_MD_SIZE)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_FINISHED,
+                 ERR_R_INTERNAL_ERROR);
+        return MSG_PROCESS_ERROR;
+    }
+    if (s->server) {
+        memcpy(s->s3->previous_client_finished, s->s3->tmp.peer_finish_md,
+               md_len);
+        s->s3->previous_client_finished_len = md_len;
+    } else {
+        memcpy(s->s3->previous_server_finished, s->s3->tmp.peer_finish_md,
+               md_len);
+        s->s3->previous_server_finished_len = md_len;
+    }
+
+    /*
+     * In TLS1.3 we also have to change cipher state and do any final processing
+     * of the initial server flight (if we are a client)
+     */
+    if (SSL_IS_TLS13(s)) {
+        if (s->server) {
+            if (s->post_handshake_auth != SSL_PHA_REQUESTED &&
+                    !s->method->ssl3_enc->change_cipher_state(s,
+                    SSL3_CC_APPLICATION | SSL3_CHANGE_CIPHER_SERVER_READ)) {
+                /* SSLfatal() already called */
+                return MSG_PROCESS_ERROR;
+            }
+        } else {
+            if (!s->method->ssl3_enc->generate_master_secret(s,
+                    s->master_secret, s->handshake_secret, 0,
+                    &s->session->master_key_length)) {
+                /* SSLfatal() already called */
+                return MSG_PROCESS_ERROR;
+            }
+            if (!s->method->ssl3_enc->change_cipher_state(s,
+                    SSL3_CC_APPLICATION | SSL3_CHANGE_CIPHER_CLIENT_READ)) {
+                /* SSLfatal() already called */
+                return MSG_PROCESS_ERROR;
+            }
+            if (!tls_process_initial_server_flight(s)) {
+                /* SSLfatal() already called */
+                return MSG_PROCESS_ERROR;
+            }
+        }
+    }
+
+    return MSG_PROCESS_FINISHED_READING;
+}
+
+int tls_construct_change_cipher_spec(SSL *s, WPACKET *pkt)
+{
+    if (!WPACKET_put_bytes_u8(pkt, SSL3_MT_CCS)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CHANGE_CIPHER_SPEC, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    return 1;
+}
+
+/* Add a certificate to the WPACKET */
+static int ssl_add_cert_to_wpacket(SSL *s, WPACKET *pkt, X509 *x, int chain)
+{
+    int len;
+    unsigned char *outbytes;
+
+    len = i2d_X509(x, NULL);
+    if (len < 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_ADD_CERT_TO_WPACKET,
+                 ERR_R_BUF_LIB);
+        return 0;
+    }
+    if (!WPACKET_sub_allocate_bytes_u24(pkt, len, &outbytes)
+            || i2d_X509(x, &outbytes) != len) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_ADD_CERT_TO_WPACKET,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (SSL_IS_TLS13(s)
+            && !tls_construct_extensions(s, pkt, SSL_EXT_TLS1_3_CERTIFICATE, x,
+                                         chain)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    return 1;
+}
+
+/* Add certificate chain to provided WPACKET */
+static int ssl_add_cert_chain(SSL *s, WPACKET *pkt, CERT_PKEY *cpk)
+{
+    int i, chain_count;
+    X509 *x;
+    STACK_OF(X509) *extra_certs;
+    STACK_OF(X509) *chain = NULL;
+    X509_STORE *chain_store;
+
+    if (cpk == NULL || cpk->x509 == NULL)
+        return 1;
+
+    x = cpk->x509;
+
+    /*
+     * If we have a certificate specific chain use it, else use parent ctx.
+     */
+    if (cpk->chain != NULL)
+        extra_certs = cpk->chain;
+    else
+        extra_certs = s->ctx->extra_certs;
+
+    if ((s->mode & SSL_MODE_NO_AUTO_CHAIN) || extra_certs)
+        chain_store = NULL;
+    else if (s->cert->chain_store)
+        chain_store = s->cert->chain_store;
+    else
+        chain_store = s->ctx->cert_store;
+
+    if (chain_store != NULL) {
+        X509_STORE_CTX *xs_ctx = X509_STORE_CTX_new();
+
+        if (xs_ctx == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_ADD_CERT_CHAIN,
+                     ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        if (!X509_STORE_CTX_init(xs_ctx, chain_store, x, NULL)) {
+            X509_STORE_CTX_free(xs_ctx);
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_ADD_CERT_CHAIN,
+                     ERR_R_X509_LIB);
+            return 0;
+        }
+        /*
+         * It is valid for the chain not to be complete (because normally we
+         * don't include the root cert in the chain). Therefore we deliberately
+         * ignore the error return from this call. We're not actually verifying
+         * the cert - we're just building as much of the chain as we can
+         */
+        (void)X509_verify_cert(xs_ctx);
+        /* Don't leave errors in the queue */
+        ERR_clear_error();
+        chain = X509_STORE_CTX_get0_chain(xs_ctx);
+        i = ssl_security_cert_chain(s, chain, NULL, 0);
+        if (i != 1) {
+#if 0
+            /* Dummy error calls so mkerr generates them */
+            SSLerr(SSL_F_SSL_ADD_CERT_CHAIN, SSL_R_EE_KEY_TOO_SMALL);
+            SSLerr(SSL_F_SSL_ADD_CERT_CHAIN, SSL_R_CA_KEY_TOO_SMALL);
+            SSLerr(SSL_F_SSL_ADD_CERT_CHAIN, SSL_R_CA_MD_TOO_WEAK);
+#endif
+            X509_STORE_CTX_free(xs_ctx);
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_ADD_CERT_CHAIN, i);
+            return 0;
+        }
+        chain_count = sk_X509_num(chain);
+        for (i = 0; i < chain_count; i++) {
+            x = sk_X509_value(chain, i);
+
+            if (!ssl_add_cert_to_wpacket(s, pkt, x, i)) {
+                /* SSLfatal() already called */
+                X509_STORE_CTX_free(xs_ctx);
+                return 0;
+            }
+        }
+        X509_STORE_CTX_free(xs_ctx);
+    } else {
+        i = ssl_security_cert_chain(s, extra_certs, x, 0);
+        if (i != 1) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_ADD_CERT_CHAIN, i);
+            return 0;
+        }
+        if (!ssl_add_cert_to_wpacket(s, pkt, x, 0)) {
+            /* SSLfatal() already called */
+            return 0;
+        }
+        for (i = 0; i < sk_X509_num(extra_certs); i++) {
+            x = sk_X509_value(extra_certs, i);
+            if (!ssl_add_cert_to_wpacket(s, pkt, x, i + 1)) {
+                /* SSLfatal() already called */
+                return 0;
+            }
+        }
+    }
+    return 1;
+}
+
+unsigned long ssl3_output_cert_chain(SSL *s, WPACKET *pkt, CERT_PKEY *cpk)
+{
+    if (!WPACKET_start_sub_packet_u24(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_OUTPUT_CERT_CHAIN,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (!ssl_add_cert_chain(s, pkt, cpk))
+        return 0;
+
+    if (!WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_OUTPUT_CERT_CHAIN,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    return 1;
+}
+
+/*
+ * Tidy up after the end of a handshake. In the case of SCTP this may result
+ * in NBIO events. If |clearbufs| is set then init_buf and the wbio buffer is
+ * freed up as well.
+ */
+WORK_STATE tls_finish_handshake(SSL *s, WORK_STATE wst, int clearbufs, int stop)
+{
+    void (*cb) (const SSL *ssl, int type, int val) = NULL;
+    int cleanuphand = s->statem.cleanuphand;
+
+    if (clearbufs) {
+        if (!SSL_IS_DTLS(s)) {
+            /*
+             * We don't do this in DTLS because we may still need the init_buf
+             * in case there are any unexpected retransmits
+             */
+            BUF_MEM_free(s->init_buf);
+            s->init_buf = NULL;
+        }
+        if (!ssl_free_wbio_buffer(s)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_FINISH_HANDSHAKE,
+                     ERR_R_INTERNAL_ERROR);
+            return WORK_ERROR;
+        }
+        s->init_num = 0;
+    }
+
+    if (SSL_IS_TLS13(s) && !s->server
+            && s->post_handshake_auth == SSL_PHA_REQUESTED)
+        s->post_handshake_auth = SSL_PHA_EXT_SENT;
+
+    /*
+     * Only set if there was a Finished message and this isn't after a TLSv1.3
+     * post handshake exchange
+     */
+    if (cleanuphand) {
+        /* skipped if we just sent a HelloRequest */
+        s->renegotiate = 0;
+        s->new_session = 0;
+        s->statem.cleanuphand = 0;
+        s->ext.ticket_expected = 0;
+
+        ssl3_cleanup_key_block(s);
+
+        if (s->server) {
+            /*
+             * In TLSv1.3 we update the cache as part of constructing the
+             * NewSessionTicket
+             */
+            if (!SSL_IS_TLS13(s))
+                ssl_update_cache(s, SSL_SESS_CACHE_SERVER);
+
+            /* N.B. s->ctx may not equal s->session_ctx */
+            tsan_counter(&s->ctx->stats.sess_accept_good);
+            s->handshake_func = ossl_statem_accept;
+        } else {
+            if (SSL_IS_TLS13(s)) {
+                /*
+                 * We encourage applications to only use TLSv1.3 tickets once,
+                 * so we remove this one from the cache.
+                 */
+                if ((s->session_ctx->session_cache_mode
+                     & SSL_SESS_CACHE_CLIENT) != 0)
+                    SSL_CTX_remove_session(s->session_ctx, s->session);
+            } else {
+                /*
+                 * In TLSv1.3 we update the cache as part of processing the
+                 * NewSessionTicket
+                 */
+                ssl_update_cache(s, SSL_SESS_CACHE_CLIENT);
+            }
+            if (s->hit)
+                tsan_counter(&s->session_ctx->stats.sess_hit);
+
+            s->handshake_func = ossl_statem_connect;
+            tsan_counter(&s->session_ctx->stats.sess_connect_good);
+        }
+
+        if (SSL_IS_DTLS(s)) {
+            /* done with handshaking */
+            s->d1->handshake_read_seq = 0;
+            s->d1->handshake_write_seq = 0;
+            s->d1->next_handshake_write_seq = 0;
+            dtls1_clear_received_buffer(s);
+        }
+    }
+
+    if (s->info_callback != NULL)
+        cb = s->info_callback;
+    else if (s->ctx->info_callback != NULL)
+        cb = s->ctx->info_callback;
+
+    /* The callback may expect us to not be in init at handshake done */
+    ossl_statem_set_in_init(s, 0);
+
+    if (cb != NULL) {
+        if (cleanuphand
+                || !SSL_IS_TLS13(s)
+                || SSL_IS_FIRST_HANDSHAKE(s))
+            cb(s, SSL_CB_HANDSHAKE_DONE, 1);
+    }
+
+    if (!stop) {
+        /* If we've got more work to do we go back into init */
+        ossl_statem_set_in_init(s, 1);
+        return WORK_FINISHED_CONTINUE;
+    }
+
+    return WORK_FINISHED_STOP;
+}
+
+int tls_get_message_header(SSL *s, int *mt)
+{
+    /* s->init_num < SSL3_HM_HEADER_LENGTH */
+    int skip_message, i, recvd_type;
+    unsigned char *p;
+    size_t l, readbytes;
+
+    p = (unsigned char *)s->init_buf->data;
+
+    do {
+        while (s->init_num < SSL3_HM_HEADER_LENGTH) {
+            i = s->method->ssl_read_bytes(s, SSL3_RT_HANDSHAKE, &recvd_type,
+                                          &p[s->init_num],
+                                          SSL3_HM_HEADER_LENGTH - s->init_num,
+                                          0, &readbytes);
+            if (i <= 0) {
+                s->rwstate = SSL_READING;
+                return 0;
+            }
+            if (recvd_type == SSL3_RT_CHANGE_CIPHER_SPEC) {
+                /*
+                 * A ChangeCipherSpec must be a single byte and may not occur
+                 * in the middle of a handshake message.
+                 */
+                if (s->init_num != 0 || readbytes != 1 || p[0] != SSL3_MT_CCS) {
+                    SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE,
+                             SSL_F_TLS_GET_MESSAGE_HEADER,
+                             SSL_R_BAD_CHANGE_CIPHER_SPEC);
+                    return 0;
+                }
+                if (s->statem.hand_state == TLS_ST_BEFORE
+                        && (s->s3->flags & TLS1_FLAGS_STATELESS) != 0) {
+                    /*
+                     * We are stateless and we received a CCS. Probably this is
+                     * from a client between the first and second ClientHellos.
+                     * We should ignore this, but return an error because we do
+                     * not return success until we see the second ClientHello
+                     * with a valid cookie.
+                     */
+                    return 0;
+                }
+                s->s3->tmp.message_type = *mt = SSL3_MT_CHANGE_CIPHER_SPEC;
+                s->init_num = readbytes - 1;
+                s->init_msg = s->init_buf->data;
+                s->s3->tmp.message_size = readbytes;
+                return 1;
+            } else if (recvd_type != SSL3_RT_HANDSHAKE) {
+                SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE,
+                         SSL_F_TLS_GET_MESSAGE_HEADER,
+                         SSL_R_CCS_RECEIVED_EARLY);
+                return 0;
+            }
+            s->init_num += readbytes;
+        }
+
+        skip_message = 0;
+        if (!s->server)
+            if (s->statem.hand_state != TLS_ST_OK
+                    && p[0] == SSL3_MT_HELLO_REQUEST)
+                /*
+                 * The server may always send 'Hello Request' messages --
+                 * we are doing a handshake anyway now, so ignore them if
+                 * their format is correct. Does not count for 'Finished'
+                 * MAC.
+                 */
+                if (p[1] == 0 && p[2] == 0 && p[3] == 0) {
+                    s->init_num = 0;
+                    skip_message = 1;
+
+                    if (s->msg_callback)
+                        s->msg_callback(0, s->version, SSL3_RT_HANDSHAKE,
+                                        p, SSL3_HM_HEADER_LENGTH, s,
+                                        s->msg_callback_arg);
+                }
+    } while (skip_message);
+    /* s->init_num == SSL3_HM_HEADER_LENGTH */
+
+    *mt = *p;
+    s->s3->tmp.message_type = *(p++);
+
+    if (RECORD_LAYER_is_sslv2_record(&s->rlayer)) {
+        /*
+         * Only happens with SSLv3+ in an SSLv2 backward compatible
+         * ClientHello
+         *
+         * Total message size is the remaining record bytes to read
+         * plus the SSL3_HM_HEADER_LENGTH bytes that we already read
+         */
+        l = RECORD_LAYER_get_rrec_length(&s->rlayer)
+            + SSL3_HM_HEADER_LENGTH;
+        s->s3->tmp.message_size = l;
+
+        s->init_msg = s->init_buf->data;
+        s->init_num = SSL3_HM_HEADER_LENGTH;
+    } else {
+        n2l3(p, l);
+        /* BUF_MEM_grow takes an 'int' parameter */
+        if (l > (INT_MAX - SSL3_HM_HEADER_LENGTH)) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_GET_MESSAGE_HEADER,
+                     SSL_R_EXCESSIVE_MESSAGE_SIZE);
+            return 0;
+        }
+        s->s3->tmp.message_size = l;
+
+        s->init_msg = s->init_buf->data + SSL3_HM_HEADER_LENGTH;
+        s->init_num = 0;
+    }
+
+    return 1;
+}
+
+int tls_get_message_body(SSL *s, size_t *len)
+{
+    size_t n, readbytes;
+    unsigned char *p;
+    int i;
+
+    if (s->s3->tmp.message_type == SSL3_MT_CHANGE_CIPHER_SPEC) {
+        /* We've already read everything in */
+        *len = (unsigned long)s->init_num;
+        return 1;
+    }
+
+    p = s->init_msg;
+    n = s->s3->tmp.message_size - s->init_num;
+    while (n > 0) {
+        i = s->method->ssl_read_bytes(s, SSL3_RT_HANDSHAKE, NULL,
+                                      &p[s->init_num], n, 0, &readbytes);
+        if (i <= 0) {
+            s->rwstate = SSL_READING;
+            *len = 0;
+            return 0;
+        }
+        s->init_num += readbytes;
+        n -= readbytes;
+    }
+
+    /*
+     * If receiving Finished, record MAC of prior handshake messages for
+     * Finished verification.
+     */
+    if (*(s->init_buf->data) == SSL3_MT_FINISHED && !ssl3_take_mac(s)) {
+        /* SSLfatal() already called */
+        *len = 0;
+        return 0;
+    }
+
+    /* Feed this message into MAC computation. */
+    if (RECORD_LAYER_is_sslv2_record(&s->rlayer)) {
+        if (!ssl3_finish_mac(s, (unsigned char *)s->init_buf->data,
+                             s->init_num)) {
+            /* SSLfatal() already called */
+            *len = 0;
+            return 0;
+        }
+        if (s->msg_callback)
+            s->msg_callback(0, SSL2_VERSION, 0, s->init_buf->data,
+                            (size_t)s->init_num, s, s->msg_callback_arg);
+    } else {
+        /*
+         * We defer feeding in the HRR until later. We'll do it as part of
+         * processing the message
+         * The TLsv1.3 handshake transcript stops at the ClientFinished
+         * message.
+         */
+#define SERVER_HELLO_RANDOM_OFFSET  (SSL3_HM_HEADER_LENGTH + 2)
+        /* KeyUpdate and NewSessionTicket do not need to be added */
+        if (!SSL_IS_TLS13(s) || (s->s3->tmp.message_type != SSL3_MT_NEWSESSION_TICKET
+                                 && s->s3->tmp.message_type != SSL3_MT_KEY_UPDATE)) {
+            if (s->s3->tmp.message_type != SSL3_MT_SERVER_HELLO
+                    || s->init_num < SERVER_HELLO_RANDOM_OFFSET + SSL3_RANDOM_SIZE
+                    || memcmp(hrrrandom,
+                              s->init_buf->data + SERVER_HELLO_RANDOM_OFFSET,
+                              SSL3_RANDOM_SIZE) != 0) {
+                if (!ssl3_finish_mac(s, (unsigned char *)s->init_buf->data,
+                                     s->init_num + SSL3_HM_HEADER_LENGTH)) {
+                    /* SSLfatal() already called */
+                    *len = 0;
+                    return 0;
+                }
+            }
+        }
+        if (s->msg_callback)
+            s->msg_callback(0, s->version, SSL3_RT_HANDSHAKE, s->init_buf->data,
+                            (size_t)s->init_num + SSL3_HM_HEADER_LENGTH, s,
+                            s->msg_callback_arg);
+    }
+
+    *len = s->init_num;
+    return 1;
+}
+
+static const X509ERR2ALERT x509table[] = {
+    {X509_V_ERR_APPLICATION_VERIFICATION, SSL_AD_HANDSHAKE_FAILURE},
+    {X509_V_ERR_CA_KEY_TOO_SMALL, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_CA_MD_TOO_WEAK, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_CERT_CHAIN_TOO_LONG, SSL_AD_UNKNOWN_CA},
+    {X509_V_ERR_CERT_HAS_EXPIRED, SSL_AD_CERTIFICATE_EXPIRED},
+    {X509_V_ERR_CERT_NOT_YET_VALID, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_CERT_REJECTED, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_CERT_REVOKED, SSL_AD_CERTIFICATE_REVOKED},
+    {X509_V_ERR_CERT_SIGNATURE_FAILURE, SSL_AD_DECRYPT_ERROR},
+    {X509_V_ERR_CERT_UNTRUSTED, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_CRL_HAS_EXPIRED, SSL_AD_CERTIFICATE_EXPIRED},
+    {X509_V_ERR_CRL_NOT_YET_VALID, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_CRL_SIGNATURE_FAILURE, SSL_AD_DECRYPT_ERROR},
+    {X509_V_ERR_DANE_NO_MATCH, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT, SSL_AD_UNKNOWN_CA},
+    {X509_V_ERR_EE_KEY_TOO_SMALL, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_EMAIL_MISMATCH, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_ERROR_IN_CRL_LAST_UPDATE_FIELD, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_ERROR_IN_CRL_NEXT_UPDATE_FIELD, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_HOSTNAME_MISMATCH, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_INVALID_CA, SSL_AD_UNKNOWN_CA},
+    {X509_V_ERR_INVALID_CALL, SSL_AD_INTERNAL_ERROR},
+    {X509_V_ERR_INVALID_PURPOSE, SSL_AD_UNSUPPORTED_CERTIFICATE},
+    {X509_V_ERR_IP_ADDRESS_MISMATCH, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_OUT_OF_MEM, SSL_AD_INTERNAL_ERROR},
+    {X509_V_ERR_PATH_LENGTH_EXCEEDED, SSL_AD_UNKNOWN_CA},
+    {X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN, SSL_AD_UNKNOWN_CA},
+    {X509_V_ERR_STORE_LOOKUP, SSL_AD_INTERNAL_ERROR},
+    {X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE, SSL_AD_BAD_CERTIFICATE},
+    {X509_V_ERR_UNABLE_TO_GET_CRL, SSL_AD_UNKNOWN_CA},
+    {X509_V_ERR_UNABLE_TO_GET_CRL_ISSUER, SSL_AD_UNKNOWN_CA},
+    {X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT, SSL_AD_UNKNOWN_CA},
+    {X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY, SSL_AD_UNKNOWN_CA},
+    {X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE, SSL_AD_UNKNOWN_CA},
+    {X509_V_ERR_UNSPECIFIED, SSL_AD_INTERNAL_ERROR},
+
+    /* Last entry; return this if we don't find the value above. */
+    {X509_V_OK, SSL_AD_CERTIFICATE_UNKNOWN}
+};
+
+int ssl_x509err2alert(int x509err)
+{
+    const X509ERR2ALERT *tp;
+
+    for (tp = x509table; tp->x509err != X509_V_OK; ++tp)
+        if (tp->x509err == x509err)
+            break;
+    return tp->alert;
+}
+
+int ssl_allow_compression(SSL *s)
+{
+    if (s->options & SSL_OP_NO_COMPRESSION)
+        return 0;
+    return ssl_security(s, SSL_SECOP_COMPRESSION, 0, 0, NULL);
+}
+
+static int version_cmp(const SSL *s, int a, int b)
+{
+    int dtls = SSL_IS_DTLS(s);
+
+    if (a == b)
+        return 0;
+    if (!dtls)
+        return a < b ? -1 : 1;
+    return DTLS_VERSION_LT(a, b) ? -1 : 1;
+}
+
+typedef struct {
+    int version;
+    const SSL_METHOD *(*cmeth) (void);
+    const SSL_METHOD *(*smeth) (void);
+} version_info;
+
+#if TLS_MAX_VERSION != TLS1_3_VERSION
+# error Code needs update for TLS_method() support beyond TLS1_3_VERSION.
+#endif
+
+/* Must be in order high to low */
+static const version_info tls_version_table[] = {
+#ifndef OPENSSL_NO_TLS1_3
+    {TLS1_3_VERSION, tlsv1_3_client_method, tlsv1_3_server_method},
+#else
+    {TLS1_3_VERSION, NULL, NULL},
+#endif
+#ifndef OPENSSL_NO_TLS1_2
+    {TLS1_2_VERSION, tlsv1_2_client_method, tlsv1_2_server_method},
+#else
+    {TLS1_2_VERSION, NULL, NULL},
+#endif
+#ifndef OPENSSL_NO_TLS1_1
+    {TLS1_1_VERSION, tlsv1_1_client_method, tlsv1_1_server_method},
+#else
+    {TLS1_1_VERSION, NULL, NULL},
+#endif
+#ifndef OPENSSL_NO_TLS1
+    {TLS1_VERSION, tlsv1_client_method, tlsv1_server_method},
+#else
+    {TLS1_VERSION, NULL, NULL},
+#endif
+#ifndef OPENSSL_NO_SSL3
+    {SSL3_VERSION, sslv3_client_method, sslv3_server_method},
+#else
+    {SSL3_VERSION, NULL, NULL},
+#endif
+    {0, NULL, NULL},
+};
+
+#if DTLS_MAX_VERSION != DTLS1_2_VERSION
+# error Code needs update for DTLS_method() support beyond DTLS1_2_VERSION.
+#endif
+
+/* Must be in order high to low */
+static const version_info dtls_version_table[] = {
+#ifndef OPENSSL_NO_DTLS1_2
+    {DTLS1_2_VERSION, dtlsv1_2_client_method, dtlsv1_2_server_method},
+#else
+    {DTLS1_2_VERSION, NULL, NULL},
+#endif
+#ifndef OPENSSL_NO_DTLS1
+    {DTLS1_VERSION, dtlsv1_client_method, dtlsv1_server_method},
+    {DTLS1_BAD_VER, dtls_bad_ver_client_method, NULL},
+#else
+    {DTLS1_VERSION, NULL, NULL},
+    {DTLS1_BAD_VER, NULL, NULL},
+#endif
+    {0, NULL, NULL},
+};
+
+/*
+ * ssl_method_error - Check whether an SSL_METHOD is enabled.
+ *
+ * @s: The SSL handle for the candidate method
+ * @method: the intended method.
+ *
+ * Returns 0 on success, or an SSL error reason on failure.
+ */
+static int ssl_method_error(const SSL *s, const SSL_METHOD *method)
+{
+    int version = method->version;
+
+    if ((s->min_proto_version != 0 &&
+         version_cmp(s, version, s->min_proto_version) < 0) ||
+        ssl_security(s, SSL_SECOP_VERSION, 0, version, NULL) == 0)
+        return SSL_R_VERSION_TOO_LOW;
+
+    if (s->max_proto_version != 0 &&
+        version_cmp(s, version, s->max_proto_version) > 0)
+        return SSL_R_VERSION_TOO_HIGH;
+
+    if ((s->options & method->mask) != 0)
+        return SSL_R_UNSUPPORTED_PROTOCOL;
+    if ((method->flags & SSL_METHOD_NO_SUITEB) != 0 && tls1_suiteb(s))
+        return SSL_R_AT_LEAST_TLS_1_2_NEEDED_IN_SUITEB_MODE;
+
+    return 0;
+}
+
+/*
+ * Only called by servers. Returns 1 if the server has a TLSv1.3 capable
+ * certificate type, or has PSK or a certificate callback configured. Otherwise
+ * returns 0.
+ */
+static int is_tls13_capable(const SSL *s)
+{
+    int i;
+#ifndef OPENSSL_NO_EC
+    int curve;
+    EC_KEY *eckey;
+#endif
+
+#ifndef OPENSSL_NO_PSK
+    if (s->psk_server_callback != NULL)
+        return 1;
+#endif
+
+    if (s->psk_find_session_cb != NULL || s->cert->cert_cb != NULL)
+        return 1;
+
+    for (i = 0; i < SSL_PKEY_NUM; i++) {
+        /* Skip over certs disallowed for TLSv1.3 */
+        switch (i) {
+        case SSL_PKEY_DSA_SIGN:
+        case SSL_PKEY_GOST01:
+        case SSL_PKEY_GOST12_256:
+        case SSL_PKEY_GOST12_512:
+            continue;
+        default:
+            break;
+        }
+        if (!ssl_has_cert(s, i))
+            continue;
+#ifndef OPENSSL_NO_EC
+        if (i != SSL_PKEY_ECC)
+            return 1;
+        /*
+         * Prior to TLSv1.3 sig algs allowed any curve to be used. TLSv1.3 is
+         * more restrictive so check that our sig algs are consistent with this
+         * EC cert. See section 4.2.3 of RFC8446.
+         */
+        eckey = EVP_PKEY_get0_EC_KEY(s->cert->pkeys[SSL_PKEY_ECC].privatekey);
+        if (eckey == NULL)
+            continue;
+        curve = EC_GROUP_get_curve_name(EC_KEY_get0_group(eckey));
+        if (tls_check_sigalg_curve(s, curve))
+            return 1;
+#else
+        return 1;
+#endif
+    }
+
+    return 0;
+}
+
+/*
+ * ssl_version_supported - Check that the specified `version` is supported by
+ * `SSL *` instance
+ *
+ * @s: The SSL handle for the candidate method
+ * @version: Protocol version to test against
+ *
+ * Returns 1 when supported, otherwise 0
+ */
+int ssl_version_supported(const SSL *s, int version, const SSL_METHOD **meth)
+{
+    const version_info *vent;
+    const version_info *table;
+
+    switch (s->method->version) {
+    default:
+        /* Version should match method version for non-ANY method */
+        return version_cmp(s, version, s->version) == 0;
+    case TLS_ANY_VERSION:
+        table = tls_version_table;
+        break;
+    case DTLS_ANY_VERSION:
+        table = dtls_version_table;
+        break;
+    }
+
+    for (vent = table;
+         vent->version != 0 && version_cmp(s, version, vent->version) <= 0;
+         ++vent) {
+        if (vent->cmeth != NULL
+                && version_cmp(s, version, vent->version) == 0
+                && ssl_method_error(s, vent->cmeth()) == 0
+                && (!s->server
+                    || version != TLS1_3_VERSION
+                    || is_tls13_capable(s))) {
+            if (meth != NULL)
+                *meth = vent->cmeth();
+            return 1;
+        }
+    }
+    return 0;
+}
+
+/*
+ * ssl_check_version_downgrade - In response to RFC7507 SCSV version
+ * fallback indication from a client check whether we're using the highest
+ * supported protocol version.
+ *
+ * @s server SSL handle.
+ *
+ * Returns 1 when using the highest enabled version, 0 otherwise.
+ */
+int ssl_check_version_downgrade(SSL *s)
+{
+    const version_info *vent;
+    const version_info *table;
+
+    /*
+     * Check that the current protocol is the highest enabled version
+     * (according to s->ctx->method, as version negotiation may have changed
+     * s->method).
+     */
+    if (s->version == s->ctx->method->version)
+        return 1;
+
+    /*
+     * Apparently we're using a version-flexible SSL_METHOD (not at its
+     * highest protocol version).
+     */
+    if (s->ctx->method->version == TLS_method()->version)
+        table = tls_version_table;
+    else if (s->ctx->method->version == DTLS_method()->version)
+        table = dtls_version_table;
+    else {
+        /* Unexpected state; fail closed. */
+        return 0;
+    }
+
+    for (vent = table; vent->version != 0; ++vent) {
+        if (vent->smeth != NULL && ssl_method_error(s, vent->smeth()) == 0)
+            return s->version == vent->version;
+    }
+    return 0;
+}
+
+/*
+ * ssl_set_version_bound - set an upper or lower bound on the supported (D)TLS
+ * protocols, provided the initial (D)TLS method is version-flexible.  This
+ * function sanity-checks the proposed value and makes sure the method is
+ * version-flexible, then sets the limit if all is well.
+ *
+ * @method_version: The version of the current SSL_METHOD.
+ * @version: the intended limit.
+ * @bound: pointer to limit to be updated.
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+int ssl_set_version_bound(int method_version, int version, int *bound)
+{
+    if (version == 0) {
+        *bound = version;
+        return 1;
+    }
+
+    /*-
+     * Restrict TLS methods to TLS protocol versions.
+     * Restrict DTLS methods to DTLS protocol versions.
+     * Note, DTLS version numbers are decreasing, use comparison macros.
+     *
+     * Note that for both lower-bounds we use explicit versions, not
+     * (D)TLS_MIN_VERSION.  This is because we don't want to break user
+     * configurations.  If the MIN (supported) version ever rises, the user's
+     * "floor" remains valid even if no longer available.  We don't expect the
+     * MAX ceiling to ever get lower, so making that variable makes sense.
+     */
+    switch (method_version) {
+    default:
+        /*
+         * XXX For fixed version methods, should we always fail and not set any
+         * bounds, always succeed and not set any bounds, or set the bounds and
+         * arrange to fail later if they are not met?  At present fixed-version
+         * methods are not subject to controls that disable individual protocol
+         * versions.
+         */
+        return 0;
+
+    case TLS_ANY_VERSION:
+        if (version < SSL3_VERSION || version > TLS_MAX_VERSION)
+            return 0;
+        break;
+
+    case DTLS_ANY_VERSION:
+        if (DTLS_VERSION_GT(version, DTLS_MAX_VERSION) ||
+            DTLS_VERSION_LT(version, DTLS1_BAD_VER))
+            return 0;
+        break;
+    }
+
+    *bound = version;
+    return 1;
+}
+
+static void check_for_downgrade(SSL *s, int vers, DOWNGRADE *dgrd)
+{
+    if (vers == TLS1_2_VERSION
+            && ssl_version_supported(s, TLS1_3_VERSION, NULL)) {
+        *dgrd = DOWNGRADE_TO_1_2;
+    } else if (!SSL_IS_DTLS(s)
+            && vers < TLS1_2_VERSION
+               /*
+                * We need to ensure that a server that disables TLSv1.2
+                * (creating a hole between TLSv1.3 and TLSv1.1) can still
+                * complete handshakes with clients that support TLSv1.2 and
+                * below. Therefore we do not enable the sentinel if TLSv1.3 is
+                * enabled and TLSv1.2 is not.
+                */
+            && ssl_version_supported(s, TLS1_2_VERSION, NULL)) {
+        *dgrd = DOWNGRADE_TO_1_1;
+    } else {
+        *dgrd = DOWNGRADE_NONE;
+    }
+}
+
+/*
+ * ssl_choose_server_version - Choose server (D)TLS version.  Called when the
+ * client HELLO is received to select the final server protocol version and
+ * the version specific method.
+ *
+ * @s: server SSL handle.
+ *
+ * Returns 0 on success or an SSL error reason number on failure.
+ */
+int ssl_choose_server_version(SSL *s, CLIENTHELLO_MSG *hello, DOWNGRADE *dgrd)
+{
+    /*-
+     * With version-flexible methods we have an initial state with:
+     *
+     *   s->method->version == (D)TLS_ANY_VERSION,
+     *   s->version == (D)TLS_MAX_VERSION.
+     *
+     * So we detect version-flexible methods via the method version, not the
+     * handle version.
+     */
+    int server_version = s->method->version;
+    int client_version = hello->legacy_version;
+    const version_info *vent;
+    const version_info *table;
+    int disabled = 0;
+    RAW_EXTENSION *suppversions;
+
+    s->client_version = client_version;
+
+    switch (server_version) {
+    default:
+        if (!SSL_IS_TLS13(s)) {
+            if (version_cmp(s, client_version, s->version) < 0)
+                return SSL_R_WRONG_SSL_VERSION;
+            *dgrd = DOWNGRADE_NONE;
+            /*
+             * If this SSL handle is not from a version flexible method we don't
+             * (and never did) check min/max FIPS or Suite B constraints.  Hope
+             * that's OK.  It is up to the caller to not choose fixed protocol
+             * versions they don't want.  If not, then easy to fix, just return
+             * ssl_method_error(s, s->method)
+             */
+            return 0;
+        }
+        /*
+         * Fall through if we are TLSv1.3 already (this means we must be after
+         * a HelloRetryRequest
+         */
+        /* fall thru */
+    case TLS_ANY_VERSION:
+        table = tls_version_table;
+        break;
+    case DTLS_ANY_VERSION:
+        table = dtls_version_table;
+        break;
+    }
+
+    suppversions = &hello->pre_proc_exts[TLSEXT_IDX_supported_versions];
+
+    /* If we did an HRR then supported versions is mandatory */
+    if (!suppversions->present && s->hello_retry_request != SSL_HRR_NONE)
+        return SSL_R_UNSUPPORTED_PROTOCOL;
+
+    if (suppversions->present && !SSL_IS_DTLS(s)) {
+        unsigned int candidate_vers = 0;
+        unsigned int best_vers = 0;
+        const SSL_METHOD *best_method = NULL;
+        PACKET versionslist;
+
+        suppversions->parsed = 1;
+
+        if (!PACKET_as_length_prefixed_1(&suppversions->data, &versionslist)) {
+            /* Trailing or invalid data? */
+            return SSL_R_LENGTH_MISMATCH;
+        }
+
+        /*
+         * The TLSv1.3 spec says the client MUST set this to TLS1_2_VERSION.
+         * The spec only requires servers to check that it isn't SSLv3:
+         * "Any endpoint receiving a Hello message with
+         * ClientHello.legacy_version or ServerHello.legacy_version set to
+         * 0x0300 MUST abort the handshake with a "protocol_version" alert."
+         * We are slightly stricter and require that it isn't SSLv3 or lower.
+         * We tolerate TLSv1 and TLSv1.1.
+         */
+        if (client_version <= SSL3_VERSION)
+            return SSL_R_BAD_LEGACY_VERSION;
+
+        while (PACKET_get_net_2(&versionslist, &candidate_vers)) {
+            if (version_cmp(s, candidate_vers, best_vers) <= 0)
+                continue;
+            if (ssl_version_supported(s, candidate_vers, &best_method))
+                best_vers = candidate_vers;
+        }
+        if (PACKET_remaining(&versionslist) != 0) {
+            /* Trailing data? */
+            return SSL_R_LENGTH_MISMATCH;
+        }
+
+        if (best_vers > 0) {
+            if (s->hello_retry_request != SSL_HRR_NONE) {
+                /*
+                 * This is after a HelloRetryRequest so we better check that we
+                 * negotiated TLSv1.3
+                 */
+                if (best_vers != TLS1_3_VERSION)
+                    return SSL_R_UNSUPPORTED_PROTOCOL;
+                return 0;
+            }
+            check_for_downgrade(s, best_vers, dgrd);
+            s->version = best_vers;
+            s->method = best_method;
+            return 0;
+        }
+        return SSL_R_UNSUPPORTED_PROTOCOL;
+    }
+
+    /*
+     * If the supported versions extension isn't present, then the highest
+     * version we can negotiate is TLSv1.2
+     */
+    if (version_cmp(s, client_version, TLS1_3_VERSION) >= 0)
+        client_version = TLS1_2_VERSION;
+
+    /*
+     * No supported versions extension, so we just use the version supplied in
+     * the ClientHello.
+     */
+    for (vent = table; vent->version != 0; ++vent) {
+        const SSL_METHOD *method;
+
+        if (vent->smeth == NULL ||
+            version_cmp(s, client_version, vent->version) < 0)
+            continue;
+        method = vent->smeth();
+        if (ssl_method_error(s, method) == 0) {
+            check_for_downgrade(s, vent->version, dgrd);
+            s->version = vent->version;
+            s->method = method;
+            return 0;
+        }
+        disabled = 1;
+    }
+    return disabled ? SSL_R_UNSUPPORTED_PROTOCOL : SSL_R_VERSION_TOO_LOW;
+}
+
+/*
+ * ssl_choose_client_version - Choose client (D)TLS version.  Called when the
+ * server HELLO is received to select the final client protocol version and
+ * the version specific method.
+ *
+ * @s: client SSL handle.
+ * @version: The proposed version from the server's HELLO.
+ * @extensions: The extensions received
+ *
+ * Returns 1 on success or 0 on error.
+ */
+int ssl_choose_client_version(SSL *s, int version, RAW_EXTENSION *extensions)
+{
+    const version_info *vent;
+    const version_info *table;
+    int ret, ver_min, ver_max, real_max, origv;
+
+    origv = s->version;
+    s->version = version;
+
+    /* This will overwrite s->version if the extension is present */
+    if (!tls_parse_extension(s, TLSEXT_IDX_supported_versions,
+                             SSL_EXT_TLS1_2_SERVER_HELLO
+                             | SSL_EXT_TLS1_3_SERVER_HELLO, extensions,
+                             NULL, 0)) {
+        s->version = origv;
+        return 0;
+    }
+
+    if (s->hello_retry_request != SSL_HRR_NONE
+            && s->version != TLS1_3_VERSION) {
+        s->version = origv;
+        SSLfatal(s, SSL_AD_PROTOCOL_VERSION, SSL_F_SSL_CHOOSE_CLIENT_VERSION,
+                 SSL_R_WRONG_SSL_VERSION);
+        return 0;
+    }
+
+    switch (s->method->version) {
+    default:
+        if (s->version != s->method->version) {
+            s->version = origv;
+            SSLfatal(s, SSL_AD_PROTOCOL_VERSION,
+                     SSL_F_SSL_CHOOSE_CLIENT_VERSION,
+                     SSL_R_WRONG_SSL_VERSION);
+            return 0;
+        }
+        /*
+         * If this SSL handle is not from a version flexible method we don't
+         * (and never did) check min/max, FIPS or Suite B constraints.  Hope
+         * that's OK.  It is up to the caller to not choose fixed protocol
+         * versions they don't want.  If not, then easy to fix, just return
+         * ssl_method_error(s, s->method)
+         */
+        return 1;
+    case TLS_ANY_VERSION:
+        table = tls_version_table;
+        break;
+    case DTLS_ANY_VERSION:
+        table = dtls_version_table;
+        break;
+    }
+
+    ret = ssl_get_min_max_version(s, &ver_min, &ver_max, &real_max);
+    if (ret != 0) {
+        s->version = origv;
+        SSLfatal(s, SSL_AD_PROTOCOL_VERSION,
+                 SSL_F_SSL_CHOOSE_CLIENT_VERSION, ret);
+        return 0;
+    }
+    if (SSL_IS_DTLS(s) ? DTLS_VERSION_LT(s->version, ver_min)
+                       : s->version < ver_min) {
+        s->version = origv;
+        SSLfatal(s, SSL_AD_PROTOCOL_VERSION,
+                 SSL_F_SSL_CHOOSE_CLIENT_VERSION, SSL_R_UNSUPPORTED_PROTOCOL);
+        return 0;
+    } else if (SSL_IS_DTLS(s) ? DTLS_VERSION_GT(s->version, ver_max)
+                              : s->version > ver_max) {
+        s->version = origv;
+        SSLfatal(s, SSL_AD_PROTOCOL_VERSION,
+                 SSL_F_SSL_CHOOSE_CLIENT_VERSION, SSL_R_UNSUPPORTED_PROTOCOL);
+        return 0;
+    }
+
+    if ((s->mode & SSL_MODE_SEND_FALLBACK_SCSV) == 0)
+        real_max = ver_max;
+
+    /* Check for downgrades */
+    if (s->version == TLS1_2_VERSION && real_max > s->version) {
+        if (memcmp(tls12downgrade,
+                   s->s3->server_random + SSL3_RANDOM_SIZE
+                                        - sizeof(tls12downgrade),
+                   sizeof(tls12downgrade)) == 0) {
+            s->version = origv;
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_SSL_CHOOSE_CLIENT_VERSION,
+                     SSL_R_INAPPROPRIATE_FALLBACK);
+            return 0;
+        }
+    } else if (!SSL_IS_DTLS(s)
+               && s->version < TLS1_2_VERSION
+               && real_max > s->version) {
+        if (memcmp(tls11downgrade,
+                   s->s3->server_random + SSL3_RANDOM_SIZE
+                                        - sizeof(tls11downgrade),
+                   sizeof(tls11downgrade)) == 0) {
+            s->version = origv;
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_SSL_CHOOSE_CLIENT_VERSION,
+                     SSL_R_INAPPROPRIATE_FALLBACK);
+            return 0;
+        }
+    }
+
+    for (vent = table; vent->version != 0; ++vent) {
+        if (vent->cmeth == NULL || s->version != vent->version)
+            continue;
+
+        s->method = vent->cmeth();
+        return 1;
+    }
+
+    s->version = origv;
+    SSLfatal(s, SSL_AD_PROTOCOL_VERSION, SSL_F_SSL_CHOOSE_CLIENT_VERSION,
+             SSL_R_UNSUPPORTED_PROTOCOL);
+    return 0;
+}
+
+/*
+ * ssl_get_min_max_version - get minimum and maximum protocol version
+ * @s: The SSL connection
+ * @min_version: The minimum supported version
+ * @max_version: The maximum supported version
+ * @real_max:    The highest version below the lowest compile time version hole
+ *               where that hole lies above at least one run-time enabled
+ *               protocol.
+ *
+ * Work out what version we should be using for the initial ClientHello if the
+ * version is initially (D)TLS_ANY_VERSION.  We apply any explicit SSL_OP_NO_xxx
+ * options, the MinProtocol and MaxProtocol configuration commands, any Suite B
+ * constraints and any floor imposed by the security level here,
+ * so we don't advertise the wrong protocol version to only reject the outcome later.
+ *
+ * Computing the right floor matters.  If, e.g., TLS 1.0 and 1.2 are enabled,
+ * TLS 1.1 is disabled, but the security level, Suite-B  and/or MinProtocol
+ * only allow TLS 1.2, we want to advertise TLS1.2, *not* TLS1.
+ *
+ * Returns 0 on success or an SSL error reason number on failure.  On failure
+ * min_version and max_version will also be set to 0.
+ */
+int ssl_get_min_max_version(const SSL *s, int *min_version, int *max_version,
+                            int *real_max)
+{
+    int version, tmp_real_max;
+    int hole;
+    const SSL_METHOD *single = NULL;
+    const SSL_METHOD *method;
+    const version_info *table;
+    const version_info *vent;
+
+    switch (s->method->version) {
+    default:
+        /*
+         * If this SSL handle is not from a version flexible method we don't
+         * (and never did) check min/max FIPS or Suite B constraints.  Hope
+         * that's OK.  It is up to the caller to not choose fixed protocol
+         * versions they don't want.  If not, then easy to fix, just return
+         * ssl_method_error(s, s->method)
+         */
+        *min_version = *max_version = s->version;
+        /*
+         * Providing a real_max only makes sense where we're using a version
+         * flexible method.
+         */
+        if (!ossl_assert(real_max == NULL))
+            return ERR_R_INTERNAL_ERROR;
+        return 0;
+    case TLS_ANY_VERSION:
+        table = tls_version_table;
+        break;
+    case DTLS_ANY_VERSION:
+        table = dtls_version_table;
+        break;
+    }
+
+    /*
+     * SSL_OP_NO_X disables all protocols above X *if* there are some protocols
+     * below X enabled. This is required in order to maintain the "version
+     * capability" vector contiguous. Any versions with a NULL client method
+     * (protocol version client is disabled at compile-time) is also a "hole".
+     *
+     * Our initial state is hole == 1, version == 0.  That is, versions above
+     * the first version in the method table are disabled (a "hole" above
+     * the valid protocol entries) and we don't have a selected version yet.
+     *
+     * Whenever "hole == 1", and we hit an enabled method, its version becomes
+     * the selected version, and the method becomes a candidate "single"
+     * method.  We're no longer in a hole, so "hole" becomes 0.
+     *
+     * If "hole == 0" and we hit an enabled method, then "single" is cleared,
+     * as we support a contiguous range of at least two methods.  If we hit
+     * a disabled method, then hole becomes true again, but nothing else
+     * changes yet, because all the remaining methods may be disabled too.
+     * If we again hit an enabled method after the new hole, it becomes
+     * selected, as we start from scratch.
+     */
+    *min_version = version = 0;
+    hole = 1;
+    if (real_max != NULL)
+        *real_max = 0;
+    tmp_real_max = 0;
+    for (vent = table; vent->version != 0; ++vent) {
+        /*
+         * A table entry with a NULL client method is still a hole in the
+         * "version capability" vector.
+         */
+        if (vent->cmeth == NULL) {
+            hole = 1;
+            tmp_real_max = 0;
+            continue;
+        }
+        method = vent->cmeth();
+
+        if (hole == 1 && tmp_real_max == 0)
+            tmp_real_max = vent->version;
+
+        if (ssl_method_error(s, method) != 0) {
+            hole = 1;
+        } else if (!hole) {
+            single = NULL;
+            *min_version = method->version;
+        } else {
+            if (real_max != NULL && tmp_real_max != 0)
+                *real_max = tmp_real_max;
+            version = (single = method)->version;
+            *min_version = version;
+            hole = 0;
+        }
+    }
+
+    *max_version = version;
+
+    /* Fail if everything is disabled */
+    if (version == 0)
+        return SSL_R_NO_PROTOCOLS_AVAILABLE;
+
+    return 0;
+}
+
+/*
+ * ssl_set_client_hello_version - Work out what version we should be using for
+ * the initial ClientHello.legacy_version field.
+ *
+ * @s: client SSL handle.
+ *
+ * Returns 0 on success or an SSL error reason number on failure.
+ */
+int ssl_set_client_hello_version(SSL *s)
+{
+    int ver_min, ver_max, ret;
+
+    /*
+     * In a renegotiation we always send the same client_version that we sent
+     * last time, regardless of which version we eventually negotiated.
+     */
+    if (!SSL_IS_FIRST_HANDSHAKE(s))
+        return 0;
+
+    ret = ssl_get_min_max_version(s, &ver_min, &ver_max, NULL);
+
+    if (ret != 0)
+        return ret;
+
+    s->version = ver_max;
+
+    /* TLS1.3 always uses TLS1.2 in the legacy_version field */
+    if (!SSL_IS_DTLS(s) && ver_max > TLS1_2_VERSION)
+        ver_max = TLS1_2_VERSION;
+
+    s->client_version = ver_max;
+    return 0;
+}
+
+/*
+ * Checks a list of |groups| to determine if the |group_id| is in it. If it is
+ * and |checkallow| is 1 then additionally check if the group is allowed to be
+ * used. Returns 1 if the group is in the list (and allowed if |checkallow| is
+ * 1) or 0 otherwise.
+ */
+#ifndef OPENSSL_NO_EC
+int check_in_list(SSL *s, uint16_t group_id, const uint16_t *groups,
+                  size_t num_groups, int checkallow)
+{
+    size_t i;
+
+    if (groups == NULL || num_groups == 0)
+        return 0;
+
+    for (i = 0; i < num_groups; i++) {
+        uint16_t group = groups[i];
+
+        if (group_id == group
+                && (!checkallow
+                    || tls_curve_allowed(s, group, SSL_SECOP_CURVE_CHECK))) {
+            return 1;
+        }
+    }
+
+    return 0;
+}
+#endif
+
+/* Replace ClientHello1 in the transcript hash with a synthetic message */
+int create_synthetic_message_hash(SSL *s, const unsigned char *hashval,
+                                  size_t hashlen, const unsigned char *hrr,
+                                  size_t hrrlen)
+{
+    unsigned char hashvaltmp[EVP_MAX_MD_SIZE];
+    unsigned char msghdr[SSL3_HM_HEADER_LENGTH];
+
+    memset(msghdr, 0, sizeof(msghdr));
+
+    if (hashval == NULL) {
+        hashval = hashvaltmp;
+        hashlen = 0;
+        /* Get the hash of the initial ClientHello */
+        if (!ssl3_digest_cached_records(s, 0)
+                || !ssl_handshake_hash(s, hashvaltmp, sizeof(hashvaltmp),
+                                       &hashlen)) {
+            /* SSLfatal() already called */
+            return 0;
+        }
+    }
+
+    /* Reinitialise the transcript hash */
+    if (!ssl3_init_finished_mac(s)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    /* Inject the synthetic message_hash message */
+    msghdr[0] = SSL3_MT_MESSAGE_HASH;
+    msghdr[SSL3_HM_HEADER_LENGTH - 1] = (unsigned char)hashlen;
+    if (!ssl3_finish_mac(s, msghdr, SSL3_HM_HEADER_LENGTH)
+            || !ssl3_finish_mac(s, hashval, hashlen)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    /*
+     * Now re-inject the HRR and current message if appropriate (we just deleted
+     * it when we reinitialised the transcript hash above). Only necessary after
+     * receiving a ClientHello2 with a cookie.
+     */
+    if (hrr != NULL
+            && (!ssl3_finish_mac(s, hrr, hrrlen)
+                || !ssl3_finish_mac(s, (unsigned char *)s->init_buf->data,
+                                    s->s3->tmp.message_size
+                                    + SSL3_HM_HEADER_LENGTH))) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    return 1;
+}
+
+static int ca_dn_cmp(const X509_NAME *const *a, const X509_NAME *const *b)
+{
+    return X509_NAME_cmp(*a, *b);
+}
+
+int parse_ca_names(SSL *s, PACKET *pkt)
+{
+    STACK_OF(X509_NAME) *ca_sk = sk_X509_NAME_new(ca_dn_cmp);
+    X509_NAME *xn = NULL;
+    PACKET cadns;
+
+    if (ca_sk == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_PARSE_CA_NAMES,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    /* get the CA RDNs */
+    if (!PACKET_get_length_prefixed_2(pkt, &cadns)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,SSL_F_PARSE_CA_NAMES,
+                 SSL_R_LENGTH_MISMATCH);
+        goto err;
+    }
+
+    while (PACKET_remaining(&cadns)) {
+        const unsigned char *namestart, *namebytes;
+        unsigned int name_len;
+
+        if (!PACKET_get_net_2(&cadns, &name_len)
+            || !PACKET_get_bytes(&cadns, &namebytes, name_len)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_PARSE_CA_NAMES,
+                     SSL_R_LENGTH_MISMATCH);
+            goto err;
+        }
+
+        namestart = namebytes;
+        if ((xn = d2i_X509_NAME(NULL, &namebytes, name_len)) == NULL) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_PARSE_CA_NAMES,
+                     ERR_R_ASN1_LIB);
+            goto err;
+        }
+        if (namebytes != (namestart + name_len)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_PARSE_CA_NAMES,
+                     SSL_R_CA_DN_LENGTH_MISMATCH);
+            goto err;
+        }
+
+        if (!sk_X509_NAME_push(ca_sk, xn)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_PARSE_CA_NAMES,
+                     ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        xn = NULL;
+    }
+
+    sk_X509_NAME_pop_free(s->s3->tmp.peer_ca_names, X509_NAME_free);
+    s->s3->tmp.peer_ca_names = ca_sk;
+
+    return 1;
+
+ err:
+    sk_X509_NAME_pop_free(ca_sk, X509_NAME_free);
+    X509_NAME_free(xn);
+    return 0;
+}
+
+const STACK_OF(X509_NAME) *get_ca_names(SSL *s)
+{
+    const STACK_OF(X509_NAME) *ca_sk = NULL;;
+
+    if (s->server) {
+        ca_sk = SSL_get_client_CA_list(s);
+        if (ca_sk != NULL && sk_X509_NAME_num(ca_sk) == 0)
+            ca_sk = NULL;
+    }
+
+    if (ca_sk == NULL)
+        ca_sk = SSL_get0_CA_list(s);
+
+    return ca_sk;
+}
+
+int construct_ca_names(SSL *s, const STACK_OF(X509_NAME) *ca_sk, WPACKET *pkt)
+{
+    /* Start sub-packet for client CA list */
+    if (!WPACKET_start_sub_packet_u16(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CONSTRUCT_CA_NAMES,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (ca_sk != NULL) {
+        int i;
+
+        for (i = 0; i < sk_X509_NAME_num(ca_sk); i++) {
+            unsigned char *namebytes;
+            X509_NAME *name = sk_X509_NAME_value(ca_sk, i);
+            int namelen;
+
+            if (name == NULL
+                    || (namelen = i2d_X509_NAME(name, NULL)) < 0
+                    || !WPACKET_sub_allocate_bytes_u16(pkt, namelen,
+                                                       &namebytes)
+                    || i2d_X509_NAME(name, &namebytes) != namelen) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CONSTRUCT_CA_NAMES,
+                         ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+        }
+    }
+
+    if (!WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CONSTRUCT_CA_NAMES,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    return 1;
+}
+
+/* Create a buffer containing data to be signed for server key exchange */
+size_t construct_key_exchange_tbs(SSL *s, unsigned char **ptbs,
+                                  const void *param, size_t paramlen)
+{
+    size_t tbslen = 2 * SSL3_RANDOM_SIZE + paramlen;
+    unsigned char *tbs = OPENSSL_malloc(tbslen);
+
+    if (tbs == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CONSTRUCT_KEY_EXCHANGE_TBS,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    memcpy(tbs, s->s3->client_random, SSL3_RANDOM_SIZE);
+    memcpy(tbs + SSL3_RANDOM_SIZE, s->s3->server_random, SSL3_RANDOM_SIZE);
+
+    memcpy(tbs + SSL3_RANDOM_SIZE * 2, param, paramlen);
+
+    *ptbs = tbs;
+    return tbslen;
+}
+
+/*
+ * Saves the current handshake digest for Post-Handshake Auth,
+ * Done after ClientFinished is processed, done exactly once
+ */
+int tls13_save_handshake_digest_for_pha(SSL *s)
+{
+    if (s->pha_dgst == NULL) {
+        if (!ssl3_digest_cached_records(s, 1))
+            /* SSLfatal() already called */
+            return 0;
+
+        s->pha_dgst = EVP_MD_CTX_new();
+        if (s->pha_dgst == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS13_SAVE_HANDSHAKE_DIGEST_FOR_PHA,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+        if (!EVP_MD_CTX_copy_ex(s->pha_dgst,
+                                s->s3->handshake_dgst)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS13_SAVE_HANDSHAKE_DIGEST_FOR_PHA,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+    }
+    return 1;
+}
+
+/*
+ * Restores the Post-Handshake Auth handshake digest
+ * Done just before sending/processing the Cert Request
+ */
+int tls13_restore_handshake_digest_for_pha(SSL *s)
+{
+    if (s->pha_dgst == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS13_RESTORE_HANDSHAKE_DIGEST_FOR_PHA,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    if (!EVP_MD_CTX_copy_ex(s->s3->handshake_dgst,
+                            s->pha_dgst)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS13_RESTORE_HANDSHAKE_DIGEST_FOR_PHA,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    return 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_locl.h b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_locl.h
new file mode 100644
index 000000000..e27c0c13a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_locl.h
@@ -0,0 +1,420 @@
+/*
+ * Copyright 2015-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+/*****************************************************************************
+ *                                                                           *
+ * The following definitions are PRIVATE to the state machine. They should   *
+ * NOT be used outside of the state machine.                                 *
+ *                                                                           *
+ *****************************************************************************/
+
+/* Max message length definitions */
+
+/* The spec allows for a longer length than this, but we limit it */
+#define HELLO_VERIFY_REQUEST_MAX_LENGTH 258
+#define END_OF_EARLY_DATA_MAX_LENGTH    0
+#define SERVER_HELLO_MAX_LENGTH         20000
+#define HELLO_RETRY_REQUEST_MAX_LENGTH  20000
+#define ENCRYPTED_EXTENSIONS_MAX_LENGTH 20000
+#define SERVER_KEY_EXCH_MAX_LENGTH      102400
+#define SERVER_HELLO_DONE_MAX_LENGTH    0
+#define KEY_UPDATE_MAX_LENGTH           1
+#define CCS_MAX_LENGTH                  1
+/* Max should actually be 36 but we are generous */
+#define FINISHED_MAX_LENGTH             64
+
+/* Dummy message type */
+#define SSL3_MT_DUMMY   -1
+
+extern const unsigned char hrrrandom[];
+
+/* Message processing return codes */
+typedef enum {
+    /* Something bad happened */
+    MSG_PROCESS_ERROR,
+    /* We've finished reading - swap to writing */
+    MSG_PROCESS_FINISHED_READING,
+    /*
+     * We've completed the main processing of this message but there is some
+     * post processing to be done.
+     */
+    MSG_PROCESS_CONTINUE_PROCESSING,
+    /* We've finished this message - read the next message */
+    MSG_PROCESS_CONTINUE_READING
+} MSG_PROCESS_RETURN;
+
+typedef int (*confunc_f) (SSL *s, WPACKET *pkt);
+
+int ssl3_take_mac(SSL *s);
+int check_in_list(SSL *s, uint16_t group_id, const uint16_t *groups,
+                  size_t num_groups, int checkallow);
+int create_synthetic_message_hash(SSL *s, const unsigned char *hashval,
+                                  size_t hashlen, const unsigned char *hrr,
+                                  size_t hrrlen);
+int parse_ca_names(SSL *s, PACKET *pkt);
+const STACK_OF(X509_NAME) *get_ca_names(SSL *s);
+int construct_ca_names(SSL *s, const STACK_OF(X509_NAME) *ca_sk, WPACKET *pkt);
+size_t construct_key_exchange_tbs(SSL *s, unsigned char **ptbs,
+                                  const void *param, size_t paramlen);
+
+/*
+ * TLS/DTLS client state machine functions
+ */
+int ossl_statem_client_read_transition(SSL *s, int mt);
+WRITE_TRAN ossl_statem_client_write_transition(SSL *s);
+WORK_STATE ossl_statem_client_pre_work(SSL *s, WORK_STATE wst);
+WORK_STATE ossl_statem_client_post_work(SSL *s, WORK_STATE wst);
+int ossl_statem_client_construct_message(SSL *s, WPACKET *pkt,
+                                         confunc_f *confunc, int *mt);
+size_t ossl_statem_client_max_message_size(SSL *s);
+MSG_PROCESS_RETURN ossl_statem_client_process_message(SSL *s, PACKET *pkt);
+WORK_STATE ossl_statem_client_post_process_message(SSL *s, WORK_STATE wst);
+
+/*
+ * TLS/DTLS server state machine functions
+ */
+int ossl_statem_server_read_transition(SSL *s, int mt);
+WRITE_TRAN ossl_statem_server_write_transition(SSL *s);
+WORK_STATE ossl_statem_server_pre_work(SSL *s, WORK_STATE wst);
+WORK_STATE ossl_statem_server_post_work(SSL *s, WORK_STATE wst);
+int ossl_statem_server_construct_message(SSL *s, WPACKET *pkt,
+                                         confunc_f *confunc,int *mt);
+size_t ossl_statem_server_max_message_size(SSL *s);
+MSG_PROCESS_RETURN ossl_statem_server_process_message(SSL *s, PACKET *pkt);
+WORK_STATE ossl_statem_server_post_process_message(SSL *s, WORK_STATE wst);
+
+/* Functions for getting new message data */
+__owur int tls_get_message_header(SSL *s, int *mt);
+__owur int tls_get_message_body(SSL *s, size_t *len);
+__owur int dtls_get_message(SSL *s, int *mt, size_t *len);
+
+/* Message construction and processing functions */
+__owur int tls_process_initial_server_flight(SSL *s);
+__owur MSG_PROCESS_RETURN tls_process_change_cipher_spec(SSL *s, PACKET *pkt);
+__owur MSG_PROCESS_RETURN tls_process_finished(SSL *s, PACKET *pkt);
+__owur int tls_construct_change_cipher_spec(SSL *s, WPACKET *pkt);
+__owur int dtls_construct_change_cipher_spec(SSL *s, WPACKET *pkt);
+
+__owur int tls_construct_finished(SSL *s, WPACKET *pkt);
+__owur int tls_construct_key_update(SSL *s, WPACKET *pkt);
+__owur MSG_PROCESS_RETURN tls_process_key_update(SSL *s, PACKET *pkt);
+__owur WORK_STATE tls_finish_handshake(SSL *s, WORK_STATE wst, int clearbufs,
+                                       int stop);
+__owur WORK_STATE dtls_wait_for_dry(SSL *s);
+
+/* some client-only functions */
+__owur int tls_construct_client_hello(SSL *s, WPACKET *pkt);
+__owur MSG_PROCESS_RETURN tls_process_server_hello(SSL *s, PACKET *pkt);
+__owur MSG_PROCESS_RETURN tls_process_certificate_request(SSL *s, PACKET *pkt);
+__owur MSG_PROCESS_RETURN tls_process_new_session_ticket(SSL *s, PACKET *pkt);
+__owur int tls_process_cert_status_body(SSL *s, PACKET *pkt);
+__owur MSG_PROCESS_RETURN tls_process_cert_status(SSL *s, PACKET *pkt);
+__owur MSG_PROCESS_RETURN tls_process_server_done(SSL *s, PACKET *pkt);
+__owur int tls_construct_cert_verify(SSL *s, WPACKET *pkt);
+__owur WORK_STATE tls_prepare_client_certificate(SSL *s, WORK_STATE wst);
+__owur int tls_construct_client_certificate(SSL *s, WPACKET *pkt);
+__owur int ssl_do_client_cert_cb(SSL *s, X509 **px509, EVP_PKEY **ppkey);
+__owur int tls_construct_client_key_exchange(SSL *s, WPACKET *pkt);
+__owur int tls_client_key_exchange_post_work(SSL *s);
+__owur int tls_construct_cert_status_body(SSL *s, WPACKET *pkt);
+__owur int tls_construct_cert_status(SSL *s, WPACKET *pkt);
+__owur MSG_PROCESS_RETURN tls_process_key_exchange(SSL *s, PACKET *pkt);
+__owur MSG_PROCESS_RETURN tls_process_server_certificate(SSL *s, PACKET *pkt);
+__owur int ssl3_check_cert_and_algorithm(SSL *s);
+#ifndef OPENSSL_NO_NEXTPROTONEG
+__owur int tls_construct_next_proto(SSL *s, WPACKET *pkt);
+#endif
+__owur MSG_PROCESS_RETURN tls_process_hello_req(SSL *s, PACKET *pkt);
+__owur MSG_PROCESS_RETURN dtls_process_hello_verify(SSL *s, PACKET *pkt);
+__owur int tls_construct_end_of_early_data(SSL *s, WPACKET *pkt);
+
+/* some server-only functions */
+__owur MSG_PROCESS_RETURN tls_process_client_hello(SSL *s, PACKET *pkt);
+__owur WORK_STATE tls_post_process_client_hello(SSL *s, WORK_STATE wst);
+__owur int tls_construct_server_hello(SSL *s, WPACKET *pkt);
+__owur int dtls_construct_hello_verify_request(SSL *s, WPACKET *pkt);
+__owur int tls_construct_server_certificate(SSL *s, WPACKET *pkt);
+__owur int tls_construct_server_key_exchange(SSL *s, WPACKET *pkt);
+__owur int tls_construct_certificate_request(SSL *s, WPACKET *pkt);
+__owur int tls_construct_server_done(SSL *s, WPACKET *pkt);
+__owur MSG_PROCESS_RETURN tls_process_client_certificate(SSL *s, PACKET *pkt);
+__owur MSG_PROCESS_RETURN tls_process_client_key_exchange(SSL *s, PACKET *pkt);
+__owur WORK_STATE tls_post_process_client_key_exchange(SSL *s, WORK_STATE wst);
+__owur MSG_PROCESS_RETURN tls_process_cert_verify(SSL *s, PACKET *pkt);
+#ifndef OPENSSL_NO_NEXTPROTONEG
+__owur MSG_PROCESS_RETURN tls_process_next_proto(SSL *s, PACKET *pkt);
+#endif
+__owur int tls_construct_new_session_ticket(SSL *s, WPACKET *pkt);
+MSG_PROCESS_RETURN tls_process_end_of_early_data(SSL *s, PACKET *pkt);
+
+
+/* Extension processing */
+
+typedef enum ext_return_en {
+    EXT_RETURN_FAIL,
+    EXT_RETURN_SENT,
+    EXT_RETURN_NOT_SENT
+} EXT_RETURN;
+
+__owur int tls_validate_all_contexts(SSL *s, unsigned int thisctx,
+                                     RAW_EXTENSION *exts);
+__owur int extension_is_relevant(SSL *s, unsigned int extctx,
+                                 unsigned int thisctx);
+__owur int tls_collect_extensions(SSL *s, PACKET *packet, unsigned int context,
+                                  RAW_EXTENSION **res, size_t *len, int init);
+__owur int tls_parse_extension(SSL *s, TLSEXT_INDEX idx, int context,
+                               RAW_EXTENSION *exts,  X509 *x, size_t chainidx);
+__owur int tls_parse_all_extensions(SSL *s, int context, RAW_EXTENSION *exts,
+                                    X509 *x, size_t chainidx, int fin);
+__owur int should_add_extension(SSL *s, unsigned int extctx,
+                                unsigned int thisctx, int max_version);
+__owur int tls_construct_extensions(SSL *s, WPACKET *pkt, unsigned int context,
+                                    X509 *x, size_t chainidx);
+
+__owur int tls_psk_do_binder(SSL *s, const EVP_MD *md,
+                             const unsigned char *msgstart,
+                             size_t binderoffset, const unsigned char *binderin,
+                             unsigned char *binderout,
+                             SSL_SESSION *sess, int sign, int external);
+
+/* Server Extension processing */
+int tls_parse_ctos_renegotiate(SSL *s, PACKET *pkt, unsigned int context,
+                               X509 *x, size_t chainidx);
+int tls_parse_ctos_server_name(SSL *s, PACKET *pkt, unsigned int context,
+                               X509 *x, size_t chainidx);
+int tls_parse_ctos_maxfragmentlen(SSL *s, PACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx);
+#ifndef OPENSSL_NO_SRP
+int tls_parse_ctos_srp(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx);
+#endif
+int tls_parse_ctos_early_data(SSL *s, PACKET *pkt, unsigned int context,
+                              X509 *x, size_t chainidx);
+#ifndef OPENSSL_NO_EC
+int tls_parse_ctos_ec_pt_formats(SSL *s, PACKET *pkt, unsigned int context,
+                                 X509 *x, size_t chainidx);
+int tls_parse_ctos_supported_groups(SSL *s, PACKET *pkt, unsigned int context,
+                                    X509 *x, size_t chainidxl);
+#endif
+int tls_parse_ctos_session_ticket(SSL *s, PACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx);
+int tls_parse_ctos_sig_algs_cert(SSL *s, PACKET *pkt, unsigned int context,
+                                 X509 *x, size_t chainidx);
+int tls_parse_ctos_sig_algs(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                            size_t chainidx);
+#ifndef OPENSSL_NO_OCSP
+int tls_parse_ctos_status_request(SSL *s, PACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx);
+#endif
+#ifndef OPENSSL_NO_NEXTPROTONEG
+int tls_parse_ctos_npn(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx);
+#endif
+int tls_parse_ctos_alpn(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                        size_t chainidx);
+#ifndef OPENSSL_NO_SRTP
+int tls_parse_ctos_use_srtp(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                            size_t chainidx);
+#endif
+int tls_parse_ctos_etm(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx);
+int tls_parse_ctos_key_share(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                             size_t chainidx);
+int tls_parse_ctos_cookie(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                          size_t chainidx);
+int tls_parse_ctos_ems(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx);
+int tls_parse_ctos_psk_kex_modes(SSL *s, PACKET *pkt, unsigned int context,
+                                 X509 *x, size_t chainidx);
+int tls_parse_ctos_psk(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx);
+int tls_parse_ctos_post_handshake_auth(SSL *, PACKET *pkt, unsigned int context,
+                                       X509 *x, size_t chainidx);
+
+EXT_RETURN tls_construct_stoc_renegotiate(SSL *s, WPACKET *pkt,
+                                          unsigned int context, X509 *x,
+                                          size_t chainidx);
+EXT_RETURN tls_construct_stoc_server_name(SSL *s, WPACKET *pkt,
+                                          unsigned int context, X509 *x,
+                                          size_t chainidx);
+EXT_RETURN tls_construct_stoc_early_data(SSL *s, WPACKET *pkt,
+                                         unsigned int context, X509 *x,
+                                         size_t chainidx);
+EXT_RETURN tls_construct_stoc_maxfragmentlen(SSL *s, WPACKET *pkt,
+                                             unsigned int context, X509 *x,
+                                             size_t chainidx);
+#ifndef OPENSSL_NO_EC
+EXT_RETURN tls_construct_stoc_ec_pt_formats(SSL *s, WPACKET *pkt,
+                                            unsigned int context, X509 *x,
+                                            size_t chainidx);
+#endif
+EXT_RETURN tls_construct_stoc_supported_groups(SSL *s, WPACKET *pkt,
+                                               unsigned int context, X509 *x,
+                                               size_t chainidx);
+EXT_RETURN tls_construct_stoc_session_ticket(SSL *s, WPACKET *pkt,
+                                             unsigned int context, X509 *x,
+                                             size_t chainidx);
+#ifndef OPENSSL_NO_OCSP
+EXT_RETURN tls_construct_stoc_status_request(SSL *s, WPACKET *pkt,
+                                             unsigned int context, X509 *x,
+                                             size_t chainidx);
+#endif
+#ifndef OPENSSL_NO_NEXTPROTONEG
+EXT_RETURN tls_construct_stoc_next_proto_neg(SSL *s, WPACKET *pkt,
+                                             unsigned int context, X509 *x,
+                                             size_t chainidx);
+#endif
+EXT_RETURN tls_construct_stoc_alpn(SSL *s, WPACKET *pkt, unsigned int context,
+                                   X509 *x, size_t chainidx);
+#ifndef OPENSSL_NO_SRTP
+EXT_RETURN tls_construct_stoc_use_srtp(SSL *s, WPACKET *pkt, unsigned int context,
+                                X509 *x, size_t chainidx);
+#endif
+EXT_RETURN tls_construct_stoc_etm(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx);
+EXT_RETURN tls_construct_stoc_ems(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx);
+EXT_RETURN tls_construct_stoc_supported_versions(SSL *s, WPACKET *pkt,
+                                                 unsigned int context, X509 *x,
+                                                 size_t chainidx);
+EXT_RETURN tls_construct_stoc_key_share(SSL *s, WPACKET *pkt,
+                                        unsigned int context, X509 *x,
+                                        size_t chainidx);
+EXT_RETURN tls_construct_stoc_cookie(SSL *s, WPACKET *pkt, unsigned int context,
+                                     X509 *x, size_t chainidx);
+/*
+ * Not in public headers as this is not an official extension. Only used when
+ * SSL_OP_CRYPTOPRO_TLSEXT_BUG is set.
+ */
+#define TLSEXT_TYPE_cryptopro_bug      0xfde8
+EXT_RETURN tls_construct_stoc_cryptopro_bug(SSL *s, WPACKET *pkt,
+                                            unsigned int context, X509 *x,
+                                            size_t chainidx);
+EXT_RETURN tls_construct_stoc_psk(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx);
+
+/* Client Extension processing */
+EXT_RETURN tls_construct_ctos_renegotiate(SSL *s, WPACKET *pkt, unsigned int context,
+                                   X509 *x, size_t chainidx);
+EXT_RETURN tls_construct_ctos_server_name(SSL *s, WPACKET *pkt, unsigned int context,
+                                   X509 *x, size_t chainidx);
+EXT_RETURN tls_construct_ctos_maxfragmentlen(SSL *s, WPACKET *pkt, unsigned int context,
+                                             X509 *x, size_t chainidx);
+#ifndef OPENSSL_NO_SRP
+EXT_RETURN tls_construct_ctos_srp(SSL *s, WPACKET *pkt, unsigned int context, X509 *x,
+                           size_t chainidx);
+#endif
+#ifndef OPENSSL_NO_EC
+EXT_RETURN tls_construct_ctos_ec_pt_formats(SSL *s, WPACKET *pkt,
+                                            unsigned int context, X509 *x,
+                                            size_t chainidx);
+EXT_RETURN tls_construct_ctos_supported_groups(SSL *s, WPACKET *pkt,
+                                               unsigned int context, X509 *x,
+                                               size_t chainidx);
+#endif
+EXT_RETURN tls_construct_ctos_early_data(SSL *s, WPACKET *pkt,
+                                         unsigned int context, X509 *x,
+                                         size_t chainidx);
+EXT_RETURN tls_construct_ctos_session_ticket(SSL *s, WPACKET *pkt,
+                                             unsigned int context, X509 *x,
+                                             size_t chainidx);
+EXT_RETURN tls_construct_ctos_sig_algs(SSL *s, WPACKET *pkt,
+                                       unsigned int context, X509 *x,
+                                       size_t chainidx);
+#ifndef OPENSSL_NO_OCSP
+EXT_RETURN tls_construct_ctos_status_request(SSL *s, WPACKET *pkt,
+                                             unsigned int context, X509 *x,
+                                             size_t chainidx);
+#endif
+#ifndef OPENSSL_NO_NEXTPROTONEG
+EXT_RETURN tls_construct_ctos_npn(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx);
+#endif
+EXT_RETURN tls_construct_ctos_alpn(SSL *s, WPACKET *pkt, unsigned int context,
+                                   X509 *x, size_t chainidx);
+#ifndef OPENSSL_NO_SRTP
+EXT_RETURN tls_construct_ctos_use_srtp(SSL *s, WPACKET *pkt, unsigned int context,
+                                       X509 *x, size_t chainidx);
+#endif
+EXT_RETURN tls_construct_ctos_etm(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx);
+#ifndef OPENSSL_NO_CT
+EXT_RETURN tls_construct_ctos_sct(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx);
+#endif
+EXT_RETURN tls_construct_ctos_ems(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx);
+EXT_RETURN tls_construct_ctos_supported_versions(SSL *s, WPACKET *pkt,
+                                                 unsigned int context, X509 *x,
+                                                 size_t chainidx);
+EXT_RETURN tls_construct_ctos_key_share(SSL *s, WPACKET *pkt,
+                                        unsigned int context, X509 *x,
+                                        size_t chainidx);
+EXT_RETURN tls_construct_ctos_psk_kex_modes(SSL *s, WPACKET *pkt,
+                                            unsigned int context, X509 *x,
+                                            size_t chainidx);
+EXT_RETURN tls_construct_ctos_cookie(SSL *s, WPACKET *pkt, unsigned int context,
+                                     X509 *x, size_t chainidx);
+EXT_RETURN tls_construct_ctos_padding(SSL *s, WPACKET *pkt,
+                                      unsigned int context, X509 *x,
+                                      size_t chainidx);
+EXT_RETURN tls_construct_ctos_psk(SSL *s, WPACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx);
+EXT_RETURN tls_construct_ctos_post_handshake_auth(SSL *s, WPACKET *pkt, unsigned int context,
+                                                  X509 *x, size_t chainidx);
+
+int tls_parse_stoc_renegotiate(SSL *s, PACKET *pkt, unsigned int context,
+                               X509 *x, size_t chainidx);
+int tls_parse_stoc_server_name(SSL *s, PACKET *pkt, unsigned int context,
+                               X509 *x, size_t chainidx);
+int tls_parse_stoc_early_data(SSL *s, PACKET *pkt, unsigned int context,
+                              X509 *x, size_t chainidx);
+int tls_parse_stoc_maxfragmentlen(SSL *s, PACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx);
+#ifndef OPENSSL_NO_EC
+int tls_parse_stoc_ec_pt_formats(SSL *s, PACKET *pkt, unsigned int context,
+                                 X509 *x, size_t chainidx);
+#endif
+int tls_parse_stoc_session_ticket(SSL *s, PACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx);
+#ifndef OPENSSL_NO_OCSP
+int tls_parse_stoc_status_request(SSL *s, PACKET *pkt, unsigned int context,
+                                  X509 *x, size_t chainidx);
+#endif
+#ifndef OPENSSL_NO_CT
+int tls_parse_stoc_sct(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx);
+#endif
+#ifndef OPENSSL_NO_NEXTPROTONEG
+int tls_parse_stoc_npn(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx);
+#endif
+int tls_parse_stoc_alpn(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                        size_t chainidx);
+#ifndef OPENSSL_NO_SRTP
+int tls_parse_stoc_use_srtp(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                            size_t chainidx);
+#endif
+int tls_parse_stoc_etm(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx);
+int tls_parse_stoc_ems(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx);
+int tls_parse_stoc_supported_versions(SSL *s, PACKET *pkt, unsigned int context,
+                                      X509 *x, size_t chainidx);
+int tls_parse_stoc_key_share(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                             size_t chainidx);
+int tls_parse_stoc_cookie(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx);
+int tls_parse_stoc_psk(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
+                       size_t chainidx);
+
+int tls_handle_alpn(SSL *s);
+
+int tls13_save_handshake_digest_for_pha(SSL *s);
+int tls13_restore_handshake_digest_for_pha(SSL *s);
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_srvr.c b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_srvr.c
new file mode 100644
index 000000000..6b8aae62c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/statem/statem_srvr.c
@@ -0,0 +1,4272 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
+ * Copyright 2005 Nokia. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "../ssl_locl.h"
+#include "statem_locl.h"
+#include "internal/constant_time_locl.h"
+#include "internal/cryptlib.h"
+#include <openssl/buffer.h>
+#include <openssl/rand.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/hmac.h>
+#include <openssl/x509.h>
+#include <openssl/dh.h>
+#include <openssl/bn.h>
+#include <openssl/md5.h>
+
+#define TICKET_NONCE_SIZE       8
+
+static int tls_construct_encrypted_extensions(SSL *s, WPACKET *pkt);
+
+/*
+ * ossl_statem_server13_read_transition() encapsulates the logic for the allowed
+ * handshake state transitions when a TLSv1.3 server is reading messages from
+ * the client. The message type that the client has sent is provided in |mt|.
+ * The current state is in |s->statem.hand_state|.
+ *
+ * Return values are 1 for success (transition allowed) and  0 on error
+ * (transition not allowed)
+ */
+static int ossl_statem_server13_read_transition(SSL *s, int mt)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    /*
+     * Note: There is no case for TLS_ST_BEFORE because at that stage we have
+     * not negotiated TLSv1.3 yet, so that case is handled by
+     * ossl_statem_server_read_transition()
+     */
+    switch (st->hand_state) {
+    default:
+        break;
+
+    case TLS_ST_EARLY_DATA:
+        if (s->hello_retry_request == SSL_HRR_PENDING) {
+            if (mt == SSL3_MT_CLIENT_HELLO) {
+                st->hand_state = TLS_ST_SR_CLNT_HELLO;
+                return 1;
+            }
+            break;
+        } else if (s->ext.early_data == SSL_EARLY_DATA_ACCEPTED) {
+            if (mt == SSL3_MT_END_OF_EARLY_DATA) {
+                st->hand_state = TLS_ST_SR_END_OF_EARLY_DATA;
+                return 1;
+            }
+            break;
+        }
+        /* Fall through */
+
+    case TLS_ST_SR_END_OF_EARLY_DATA:
+    case TLS_ST_SW_FINISHED:
+        if (s->s3->tmp.cert_request) {
+            if (mt == SSL3_MT_CERTIFICATE) {
+                st->hand_state = TLS_ST_SR_CERT;
+                return 1;
+            }
+        } else {
+            if (mt == SSL3_MT_FINISHED) {
+                st->hand_state = TLS_ST_SR_FINISHED;
+                return 1;
+            }
+        }
+        break;
+
+    case TLS_ST_SR_CERT:
+        if (s->session->peer == NULL) {
+            if (mt == SSL3_MT_FINISHED) {
+                st->hand_state = TLS_ST_SR_FINISHED;
+                return 1;
+            }
+        } else {
+            if (mt == SSL3_MT_CERTIFICATE_VERIFY) {
+                st->hand_state = TLS_ST_SR_CERT_VRFY;
+                return 1;
+            }
+        }
+        break;
+
+    case TLS_ST_SR_CERT_VRFY:
+        if (mt == SSL3_MT_FINISHED) {
+            st->hand_state = TLS_ST_SR_FINISHED;
+            return 1;
+        }
+        break;
+
+    case TLS_ST_OK:
+        /*
+         * Its never ok to start processing handshake messages in the middle of
+         * early data (i.e. before we've received the end of early data alert)
+         */
+        if (s->early_data_state == SSL_EARLY_DATA_READING)
+            break;
+
+        if (mt == SSL3_MT_CERTIFICATE
+                && s->post_handshake_auth == SSL_PHA_REQUESTED) {
+            st->hand_state = TLS_ST_SR_CERT;
+            return 1;
+        }
+
+        if (mt == SSL3_MT_KEY_UPDATE) {
+            st->hand_state = TLS_ST_SR_KEY_UPDATE;
+            return 1;
+        }
+        break;
+    }
+
+    /* No valid transition found */
+    return 0;
+}
+
+/*
+ * ossl_statem_server_read_transition() encapsulates the logic for the allowed
+ * handshake state transitions when the server is reading messages from the
+ * client. The message type that the client has sent is provided in |mt|. The
+ * current state is in |s->statem.hand_state|.
+ *
+ * Return values are 1 for success (transition allowed) and  0 on error
+ * (transition not allowed)
+ */
+int ossl_statem_server_read_transition(SSL *s, int mt)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    if (SSL_IS_TLS13(s)) {
+        if (!ossl_statem_server13_read_transition(s, mt))
+            goto err;
+        return 1;
+    }
+
+    switch (st->hand_state) {
+    default:
+        break;
+
+    case TLS_ST_BEFORE:
+    case TLS_ST_OK:
+    case DTLS_ST_SW_HELLO_VERIFY_REQUEST:
+        if (mt == SSL3_MT_CLIENT_HELLO) {
+            st->hand_state = TLS_ST_SR_CLNT_HELLO;
+            return 1;
+        }
+        break;
+
+    case TLS_ST_SW_SRVR_DONE:
+        /*
+         * If we get a CKE message after a ServerDone then either
+         * 1) We didn't request a Certificate
+         * OR
+         * 2) If we did request one then
+         *      a) We allow no Certificate to be returned
+         *      AND
+         *      b) We are running SSL3 (in TLS1.0+ the client must return a 0
+         *         list if we requested a certificate)
+         */
+        if (mt == SSL3_MT_CLIENT_KEY_EXCHANGE) {
+            if (s->s3->tmp.cert_request) {
+                if (s->version == SSL3_VERSION) {
+                    if ((s->verify_mode & SSL_VERIFY_PEER)
+                        && (s->verify_mode & SSL_VERIFY_FAIL_IF_NO_PEER_CERT)) {
+                        /*
+                         * This isn't an unexpected message as such - we're just
+                         * not going to accept it because we require a client
+                         * cert.
+                         */
+                        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                                 SSL_F_OSSL_STATEM_SERVER_READ_TRANSITION,
+                                 SSL_R_PEER_DID_NOT_RETURN_A_CERTIFICATE);
+                        return 0;
+                    }
+                    st->hand_state = TLS_ST_SR_KEY_EXCH;
+                    return 1;
+                }
+            } else {
+                st->hand_state = TLS_ST_SR_KEY_EXCH;
+                return 1;
+            }
+        } else if (s->s3->tmp.cert_request) {
+            if (mt == SSL3_MT_CERTIFICATE) {
+                st->hand_state = TLS_ST_SR_CERT;
+                return 1;
+            }
+        }
+        break;
+
+    case TLS_ST_SR_CERT:
+        if (mt == SSL3_MT_CLIENT_KEY_EXCHANGE) {
+            st->hand_state = TLS_ST_SR_KEY_EXCH;
+            return 1;
+        }
+        break;
+
+    case TLS_ST_SR_KEY_EXCH:
+        /*
+         * We should only process a CertificateVerify message if we have
+         * received a Certificate from the client. If so then |s->session->peer|
+         * will be non NULL. In some instances a CertificateVerify message is
+         * not required even if the peer has sent a Certificate (e.g. such as in
+         * the case of static DH). In that case |st->no_cert_verify| should be
+         * set.
+         */
+        if (s->session->peer == NULL || st->no_cert_verify) {
+            if (mt == SSL3_MT_CHANGE_CIPHER_SPEC) {
+                /*
+                 * For the ECDH ciphersuites when the client sends its ECDH
+                 * pub key in a certificate, the CertificateVerify message is
+                 * not sent. Also for GOST ciphersuites when the client uses
+                 * its key from the certificate for key exchange.
+                 */
+                st->hand_state = TLS_ST_SR_CHANGE;
+                return 1;
+            }
+        } else {
+            if (mt == SSL3_MT_CERTIFICATE_VERIFY) {
+                st->hand_state = TLS_ST_SR_CERT_VRFY;
+                return 1;
+            }
+        }
+        break;
+
+    case TLS_ST_SR_CERT_VRFY:
+        if (mt == SSL3_MT_CHANGE_CIPHER_SPEC) {
+            st->hand_state = TLS_ST_SR_CHANGE;
+            return 1;
+        }
+        break;
+
+    case TLS_ST_SR_CHANGE:
+#ifndef OPENSSL_NO_NEXTPROTONEG
+        if (s->s3->npn_seen) {
+            if (mt == SSL3_MT_NEXT_PROTO) {
+                st->hand_state = TLS_ST_SR_NEXT_PROTO;
+                return 1;
+            }
+        } else {
+#endif
+            if (mt == SSL3_MT_FINISHED) {
+                st->hand_state = TLS_ST_SR_FINISHED;
+                return 1;
+            }
+#ifndef OPENSSL_NO_NEXTPROTONEG
+        }
+#endif
+        break;
+
+#ifndef OPENSSL_NO_NEXTPROTONEG
+    case TLS_ST_SR_NEXT_PROTO:
+        if (mt == SSL3_MT_FINISHED) {
+            st->hand_state = TLS_ST_SR_FINISHED;
+            return 1;
+        }
+        break;
+#endif
+
+    case TLS_ST_SW_FINISHED:
+        if (mt == SSL3_MT_CHANGE_CIPHER_SPEC) {
+            st->hand_state = TLS_ST_SR_CHANGE;
+            return 1;
+        }
+        break;
+    }
+
+ err:
+    /* No valid transition found */
+    if (SSL_IS_DTLS(s) && mt == SSL3_MT_CHANGE_CIPHER_SPEC) {
+        BIO *rbio;
+
+        /*
+         * CCS messages don't have a message sequence number so this is probably
+         * because of an out-of-order CCS. We'll just drop it.
+         */
+        s->init_num = 0;
+        s->rwstate = SSL_READING;
+        rbio = SSL_get_rbio(s);
+        BIO_clear_retry_flags(rbio);
+        BIO_set_retry_read(rbio);
+        return 0;
+    }
+    SSLfatal(s, SSL3_AD_UNEXPECTED_MESSAGE,
+             SSL_F_OSSL_STATEM_SERVER_READ_TRANSITION,
+             SSL_R_UNEXPECTED_MESSAGE);
+    return 0;
+}
+
+/*
+ * Should we send a ServerKeyExchange message?
+ *
+ * Valid return values are:
+ *   1: Yes
+ *   0: No
+ */
+static int send_server_key_exchange(SSL *s)
+{
+    unsigned long alg_k = s->s3->tmp.new_cipher->algorithm_mkey;
+
+    /*
+     * only send a ServerKeyExchange if DH or fortezza but we have a
+     * sign only certificate PSK: may send PSK identity hints For
+     * ECC ciphersuites, we send a serverKeyExchange message only if
+     * the cipher suite is either ECDH-anon or ECDHE. In other cases,
+     * the server certificate contains the server's public key for
+     * key exchange.
+     */
+    if (alg_k & (SSL_kDHE | SSL_kECDHE)
+        /*
+         * PSK: send ServerKeyExchange if PSK identity hint if
+         * provided
+         */
+#ifndef OPENSSL_NO_PSK
+        /* Only send SKE if we have identity hint for plain PSK */
+        || ((alg_k & (SSL_kPSK | SSL_kRSAPSK))
+            && s->cert->psk_identity_hint)
+        /* For other PSK always send SKE */
+        || (alg_k & (SSL_PSK & (SSL_kDHEPSK | SSL_kECDHEPSK)))
+#endif
+#ifndef OPENSSL_NO_SRP
+        /* SRP: send ServerKeyExchange */
+        || (alg_k & SSL_kSRP)
+#endif
+        ) {
+        return 1;
+    }
+
+    return 0;
+}
+
+/*
+ * Should we send a CertificateRequest message?
+ *
+ * Valid return values are:
+ *   1: Yes
+ *   0: No
+ */
+int send_certificate_request(SSL *s)
+{
+    if (
+           /* don't request cert unless asked for it: */
+           s->verify_mode & SSL_VERIFY_PEER
+           /*
+            * don't request if post-handshake-only unless doing
+            * post-handshake in TLSv1.3:
+            */
+           && (!SSL_IS_TLS13(s) || !(s->verify_mode & SSL_VERIFY_POST_HANDSHAKE)
+               || s->post_handshake_auth == SSL_PHA_REQUEST_PENDING)
+           /*
+            * if SSL_VERIFY_CLIENT_ONCE is set, don't request cert
+            * a second time:
+            */
+           && (s->certreqs_sent < 1 ||
+               !(s->verify_mode & SSL_VERIFY_CLIENT_ONCE))
+           /*
+            * never request cert in anonymous ciphersuites (see
+            * section "Certificate request" in SSL 3 drafts and in
+            * RFC 2246):
+            */
+           && (!(s->s3->tmp.new_cipher->algorithm_auth & SSL_aNULL)
+               /*
+                * ... except when the application insists on
+                * verification (against the specs, but statem_clnt.c accepts
+                * this for SSL 3)
+                */
+               || (s->verify_mode & SSL_VERIFY_FAIL_IF_NO_PEER_CERT))
+           /* don't request certificate for SRP auth */
+           && !(s->s3->tmp.new_cipher->algorithm_auth & SSL_aSRP)
+           /*
+            * With normal PSK Certificates and Certificate Requests
+            * are omitted
+            */
+           && !(s->s3->tmp.new_cipher->algorithm_auth & SSL_aPSK)) {
+        return 1;
+    }
+
+    return 0;
+}
+
+/*
+ * ossl_statem_server13_write_transition() works out what handshake state to
+ * move to next when a TLSv1.3 server is writing messages to be sent to the
+ * client.
+ */
+static WRITE_TRAN ossl_statem_server13_write_transition(SSL *s)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    /*
+     * No case for TLS_ST_BEFORE, because at that stage we have not negotiated
+     * TLSv1.3 yet, so that is handled by ossl_statem_server_write_transition()
+     */
+
+    switch (st->hand_state) {
+    default:
+        /* Shouldn't happen */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_OSSL_STATEM_SERVER13_WRITE_TRANSITION,
+                 ERR_R_INTERNAL_ERROR);
+        return WRITE_TRAN_ERROR;
+
+    case TLS_ST_OK:
+        if (s->key_update != SSL_KEY_UPDATE_NONE) {
+            st->hand_state = TLS_ST_SW_KEY_UPDATE;
+            return WRITE_TRAN_CONTINUE;
+        }
+        if (s->post_handshake_auth == SSL_PHA_REQUEST_PENDING) {
+            st->hand_state = TLS_ST_SW_CERT_REQ;
+            return WRITE_TRAN_CONTINUE;
+        }
+        /* Try to read from the client instead */
+        return WRITE_TRAN_FINISHED;
+
+    case TLS_ST_SR_CLNT_HELLO:
+        st->hand_state = TLS_ST_SW_SRVR_HELLO;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_SW_SRVR_HELLO:
+        if ((s->options & SSL_OP_ENABLE_MIDDLEBOX_COMPAT) != 0
+                && s->hello_retry_request != SSL_HRR_COMPLETE)
+            st->hand_state = TLS_ST_SW_CHANGE;
+        else if (s->hello_retry_request == SSL_HRR_PENDING)
+            st->hand_state = TLS_ST_EARLY_DATA;
+        else
+            st->hand_state = TLS_ST_SW_ENCRYPTED_EXTENSIONS;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_SW_CHANGE:
+        if (s->hello_retry_request == SSL_HRR_PENDING)
+            st->hand_state = TLS_ST_EARLY_DATA;
+        else
+            st->hand_state = TLS_ST_SW_ENCRYPTED_EXTENSIONS;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_SW_ENCRYPTED_EXTENSIONS:
+        if (s->hit)
+            st->hand_state = TLS_ST_SW_FINISHED;
+        else if (send_certificate_request(s))
+            st->hand_state = TLS_ST_SW_CERT_REQ;
+        else
+            st->hand_state = TLS_ST_SW_CERT;
+
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_SW_CERT_REQ:
+        if (s->post_handshake_auth == SSL_PHA_REQUEST_PENDING) {
+            s->post_handshake_auth = SSL_PHA_REQUESTED;
+            st->hand_state = TLS_ST_OK;
+        } else {
+            st->hand_state = TLS_ST_SW_CERT;
+        }
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_SW_CERT:
+        st->hand_state = TLS_ST_SW_CERT_VRFY;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_SW_CERT_VRFY:
+        st->hand_state = TLS_ST_SW_FINISHED;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_SW_FINISHED:
+        st->hand_state = TLS_ST_EARLY_DATA;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_EARLY_DATA:
+        return WRITE_TRAN_FINISHED;
+
+    case TLS_ST_SR_FINISHED:
+        /*
+         * Technically we have finished the handshake at this point, but we're
+         * going to remain "in_init" for now and write out any session tickets
+         * immediately.
+         */
+        if (s->post_handshake_auth == SSL_PHA_REQUESTED) {
+            s->post_handshake_auth = SSL_PHA_EXT_RECEIVED;
+        } else if (!s->ext.ticket_expected) {
+            /*
+             * If we're not going to renew the ticket then we just finish the
+             * handshake at this point.
+             */
+            st->hand_state = TLS_ST_OK;
+            return WRITE_TRAN_CONTINUE;
+        }
+        if (s->num_tickets > s->sent_tickets)
+            st->hand_state = TLS_ST_SW_SESSION_TICKET;
+        else
+            st->hand_state = TLS_ST_OK;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_SR_KEY_UPDATE:
+        if (s->key_update != SSL_KEY_UPDATE_NONE) {
+            st->hand_state = TLS_ST_SW_KEY_UPDATE;
+            return WRITE_TRAN_CONTINUE;
+        }
+        /* Fall through */
+
+    case TLS_ST_SW_KEY_UPDATE:
+        st->hand_state = TLS_ST_OK;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_SW_SESSION_TICKET:
+        /* In a resumption we only ever send a maximum of one new ticket.
+         * Following an initial handshake we send the number of tickets we have
+         * been configured for.
+         */
+        if (s->hit || s->num_tickets <= s->sent_tickets) {
+            /* We've written enough tickets out. */
+            st->hand_state = TLS_ST_OK;
+        }
+        return WRITE_TRAN_CONTINUE;
+    }
+}
+
+/*
+ * ossl_statem_server_write_transition() works out what handshake state to move
+ * to next when the server is writing messages to be sent to the client.
+ */
+WRITE_TRAN ossl_statem_server_write_transition(SSL *s)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    /*
+     * Note that before the ClientHello we don't know what version we are going
+     * to negotiate yet, so we don't take this branch until later
+     */
+
+    if (SSL_IS_TLS13(s))
+        return ossl_statem_server13_write_transition(s);
+
+    switch (st->hand_state) {
+    default:
+        /* Shouldn't happen */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_OSSL_STATEM_SERVER_WRITE_TRANSITION,
+                 ERR_R_INTERNAL_ERROR);
+        return WRITE_TRAN_ERROR;
+
+    case TLS_ST_OK:
+        if (st->request_state == TLS_ST_SW_HELLO_REQ) {
+            /* We must be trying to renegotiate */
+            st->hand_state = TLS_ST_SW_HELLO_REQ;
+            st->request_state = TLS_ST_BEFORE;
+            return WRITE_TRAN_CONTINUE;
+        }
+        /* Must be an incoming ClientHello */
+        if (!tls_setup_handshake(s)) {
+            /* SSLfatal() already called */
+            return WRITE_TRAN_ERROR;
+        }
+        /* Fall through */
+
+    case TLS_ST_BEFORE:
+        /* Just go straight to trying to read from the client */
+        return WRITE_TRAN_FINISHED;
+
+    case TLS_ST_SW_HELLO_REQ:
+        st->hand_state = TLS_ST_OK;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_SR_CLNT_HELLO:
+        if (SSL_IS_DTLS(s) && !s->d1->cookie_verified
+            && (SSL_get_options(s) & SSL_OP_COOKIE_EXCHANGE)) {
+            st->hand_state = DTLS_ST_SW_HELLO_VERIFY_REQUEST;
+        } else if (s->renegotiate == 0 && !SSL_IS_FIRST_HANDSHAKE(s)) {
+            /* We must have rejected the renegotiation */
+            st->hand_state = TLS_ST_OK;
+            return WRITE_TRAN_CONTINUE;
+        } else {
+            st->hand_state = TLS_ST_SW_SRVR_HELLO;
+        }
+        return WRITE_TRAN_CONTINUE;
+
+    case DTLS_ST_SW_HELLO_VERIFY_REQUEST:
+        return WRITE_TRAN_FINISHED;
+
+    case TLS_ST_SW_SRVR_HELLO:
+        if (s->hit) {
+            if (s->ext.ticket_expected)
+                st->hand_state = TLS_ST_SW_SESSION_TICKET;
+            else
+                st->hand_state = TLS_ST_SW_CHANGE;
+        } else {
+            /* Check if it is anon DH or anon ECDH, */
+            /* normal PSK or SRP */
+            if (!(s->s3->tmp.new_cipher->algorithm_auth &
+                  (SSL_aNULL | SSL_aSRP | SSL_aPSK))) {
+                st->hand_state = TLS_ST_SW_CERT;
+            } else if (send_server_key_exchange(s)) {
+                st->hand_state = TLS_ST_SW_KEY_EXCH;
+            } else if (send_certificate_request(s)) {
+                st->hand_state = TLS_ST_SW_CERT_REQ;
+            } else {
+                st->hand_state = TLS_ST_SW_SRVR_DONE;
+            }
+        }
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_SW_CERT:
+        if (s->ext.status_expected) {
+            st->hand_state = TLS_ST_SW_CERT_STATUS;
+            return WRITE_TRAN_CONTINUE;
+        }
+        /* Fall through */
+
+    case TLS_ST_SW_CERT_STATUS:
+        if (send_server_key_exchange(s)) {
+            st->hand_state = TLS_ST_SW_KEY_EXCH;
+            return WRITE_TRAN_CONTINUE;
+        }
+        /* Fall through */
+
+    case TLS_ST_SW_KEY_EXCH:
+        if (send_certificate_request(s)) {
+            st->hand_state = TLS_ST_SW_CERT_REQ;
+            return WRITE_TRAN_CONTINUE;
+        }
+        /* Fall through */
+
+    case TLS_ST_SW_CERT_REQ:
+        st->hand_state = TLS_ST_SW_SRVR_DONE;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_SW_SRVR_DONE:
+        return WRITE_TRAN_FINISHED;
+
+    case TLS_ST_SR_FINISHED:
+        if (s->hit) {
+            st->hand_state = TLS_ST_OK;
+            return WRITE_TRAN_CONTINUE;
+        } else if (s->ext.ticket_expected) {
+            st->hand_state = TLS_ST_SW_SESSION_TICKET;
+        } else {
+            st->hand_state = TLS_ST_SW_CHANGE;
+        }
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_SW_SESSION_TICKET:
+        st->hand_state = TLS_ST_SW_CHANGE;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_SW_CHANGE:
+        st->hand_state = TLS_ST_SW_FINISHED;
+        return WRITE_TRAN_CONTINUE;
+
+    case TLS_ST_SW_FINISHED:
+        if (s->hit) {
+            return WRITE_TRAN_FINISHED;
+        }
+        st->hand_state = TLS_ST_OK;
+        return WRITE_TRAN_CONTINUE;
+    }
+}
+
+/*
+ * Perform any pre work that needs to be done prior to sending a message from
+ * the server to the client.
+ */
+WORK_STATE ossl_statem_server_pre_work(SSL *s, WORK_STATE wst)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    switch (st->hand_state) {
+    default:
+        /* No pre work to be done */
+        break;
+
+    case TLS_ST_SW_HELLO_REQ:
+        s->shutdown = 0;
+        if (SSL_IS_DTLS(s))
+            dtls1_clear_sent_buffer(s);
+        break;
+
+    case DTLS_ST_SW_HELLO_VERIFY_REQUEST:
+        s->shutdown = 0;
+        if (SSL_IS_DTLS(s)) {
+            dtls1_clear_sent_buffer(s);
+            /* We don't buffer this message so don't use the timer */
+            st->use_timer = 0;
+        }
+        break;
+
+    case TLS_ST_SW_SRVR_HELLO:
+        if (SSL_IS_DTLS(s)) {
+            /*
+             * Messages we write from now on should be buffered and
+             * retransmitted if necessary, so we need to use the timer now
+             */
+            st->use_timer = 1;
+        }
+        break;
+
+    case TLS_ST_SW_SRVR_DONE:
+#ifndef OPENSSL_NO_SCTP
+        if (SSL_IS_DTLS(s) && BIO_dgram_is_sctp(SSL_get_wbio(s))) {
+            /* Calls SSLfatal() as required */
+            return dtls_wait_for_dry(s);
+        }
+#endif
+        return WORK_FINISHED_CONTINUE;
+
+    case TLS_ST_SW_SESSION_TICKET:
+        if (SSL_IS_TLS13(s) && s->sent_tickets == 0) {
+            /*
+             * Actually this is the end of the handshake, but we're going
+             * straight into writing the session ticket out. So we finish off
+             * the handshake, but keep the various buffers active.
+             *
+             * Calls SSLfatal as required.
+             */
+            return tls_finish_handshake(s, wst, 0, 0);
+        } if (SSL_IS_DTLS(s)) {
+            /*
+             * We're into the last flight. We don't retransmit the last flight
+             * unless we need to, so we don't use the timer
+             */
+            st->use_timer = 0;
+        }
+        break;
+
+    case TLS_ST_SW_CHANGE:
+        if (SSL_IS_TLS13(s))
+            break;
+        s->session->cipher = s->s3->tmp.new_cipher;
+        if (!s->method->ssl3_enc->setup_key_block(s)) {
+            /* SSLfatal() already called */
+            return WORK_ERROR;
+        }
+        if (SSL_IS_DTLS(s)) {
+            /*
+             * We're into the last flight. We don't retransmit the last flight
+             * unless we need to, so we don't use the timer. This might have
+             * already been set to 0 if we sent a NewSessionTicket message,
+             * but we'll set it again here in case we didn't.
+             */
+            st->use_timer = 0;
+        }
+        return WORK_FINISHED_CONTINUE;
+
+    case TLS_ST_EARLY_DATA:
+        if (s->early_data_state != SSL_EARLY_DATA_ACCEPTING
+                && (s->s3->flags & TLS1_FLAGS_STATELESS) == 0)
+            return WORK_FINISHED_CONTINUE;
+        /* Fall through */
+
+    case TLS_ST_OK:
+        /* Calls SSLfatal() as required */
+        return tls_finish_handshake(s, wst, 1, 1);
+    }
+
+    return WORK_FINISHED_CONTINUE;
+}
+
+static ossl_inline int conn_is_closed(void)
+{
+    switch (get_last_sys_error()) {
+#if defined(EPIPE)
+    case EPIPE:
+        return 1;
+#endif
+#if defined(ECONNRESET)
+    case ECONNRESET:
+        return 1;
+#endif
+    default:
+        return 0;
+    }
+}
+
+/*
+ * Perform any work that needs to be done after sending a message from the
+ * server to the client.
+ */
+WORK_STATE ossl_statem_server_post_work(SSL *s, WORK_STATE wst)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    s->init_num = 0;
+
+    switch (st->hand_state) {
+    default:
+        /* No post work to be done */
+        break;
+
+    case TLS_ST_SW_HELLO_REQ:
+        if (statem_flush(s) != 1)
+            return WORK_MORE_A;
+        if (!ssl3_init_finished_mac(s)) {
+            /* SSLfatal() already called */
+            return WORK_ERROR;
+        }
+        break;
+
+    case DTLS_ST_SW_HELLO_VERIFY_REQUEST:
+        if (statem_flush(s) != 1)
+            return WORK_MORE_A;
+        /* HelloVerifyRequest resets Finished MAC */
+        if (s->version != DTLS1_BAD_VER && !ssl3_init_finished_mac(s)) {
+            /* SSLfatal() already called */
+            return WORK_ERROR;
+        }
+        /*
+         * The next message should be another ClientHello which we need to
+         * treat like it was the first packet
+         */
+        s->first_packet = 1;
+        break;
+
+    case TLS_ST_SW_SRVR_HELLO:
+        if (SSL_IS_TLS13(s) && s->hello_retry_request == SSL_HRR_PENDING) {
+            if ((s->options & SSL_OP_ENABLE_MIDDLEBOX_COMPAT) == 0
+                    && statem_flush(s) != 1)
+                return WORK_MORE_A;
+            break;
+        }
+#ifndef OPENSSL_NO_SCTP
+        if (SSL_IS_DTLS(s) && s->hit) {
+            unsigned char sctpauthkey[64];
+            char labelbuffer[sizeof(DTLS1_SCTP_AUTH_LABEL)];
+            size_t labellen;
+
+            /*
+             * Add new shared key for SCTP-Auth, will be ignored if no
+             * SCTP used.
+             */
+            memcpy(labelbuffer, DTLS1_SCTP_AUTH_LABEL,
+                   sizeof(DTLS1_SCTP_AUTH_LABEL));
+
+            /* Don't include the terminating zero. */
+            labellen = sizeof(labelbuffer) - 1;
+            if (s->mode & SSL_MODE_DTLS_SCTP_LABEL_LENGTH_BUG)
+                labellen += 1;
+
+            if (SSL_export_keying_material(s, sctpauthkey,
+                                           sizeof(sctpauthkey), labelbuffer,
+                                           labellen, NULL, 0,
+                                           0) <= 0) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_OSSL_STATEM_SERVER_POST_WORK,
+                         ERR_R_INTERNAL_ERROR);
+                return WORK_ERROR;
+            }
+
+            BIO_ctrl(SSL_get_wbio(s), BIO_CTRL_DGRAM_SCTP_ADD_AUTH_KEY,
+                     sizeof(sctpauthkey), sctpauthkey);
+        }
+#endif
+        if (!SSL_IS_TLS13(s)
+                || ((s->options & SSL_OP_ENABLE_MIDDLEBOX_COMPAT) != 0
+                    && s->hello_retry_request != SSL_HRR_COMPLETE))
+            break;
+        /* Fall through */
+
+    case TLS_ST_SW_CHANGE:
+        if (s->hello_retry_request == SSL_HRR_PENDING) {
+            if (!statem_flush(s))
+                return WORK_MORE_A;
+            break;
+        }
+
+        if (SSL_IS_TLS13(s)) {
+            if (!s->method->ssl3_enc->setup_key_block(s)
+                || !s->method->ssl3_enc->change_cipher_state(s,
+                        SSL3_CC_HANDSHAKE | SSL3_CHANGE_CIPHER_SERVER_WRITE)) {
+                /* SSLfatal() already called */
+                return WORK_ERROR;
+            }
+
+            if (s->ext.early_data != SSL_EARLY_DATA_ACCEPTED
+                && !s->method->ssl3_enc->change_cipher_state(s,
+                        SSL3_CC_HANDSHAKE |SSL3_CHANGE_CIPHER_SERVER_READ)) {
+                /* SSLfatal() already called */
+                return WORK_ERROR;
+            }
+            /*
+             * We don't yet know whether the next record we are going to receive
+             * is an unencrypted alert, an encrypted alert, or an encrypted
+             * handshake message. We temporarily tolerate unencrypted alerts.
+             */
+            s->statem.enc_read_state = ENC_READ_STATE_ALLOW_PLAIN_ALERTS;
+            break;
+        }
+
+#ifndef OPENSSL_NO_SCTP
+        if (SSL_IS_DTLS(s) && !s->hit) {
+            /*
+             * Change to new shared key of SCTP-Auth, will be ignored if
+             * no SCTP used.
+             */
+            BIO_ctrl(SSL_get_wbio(s), BIO_CTRL_DGRAM_SCTP_NEXT_AUTH_KEY,
+                     0, NULL);
+        }
+#endif
+        if (!s->method->ssl3_enc->change_cipher_state(s,
+                                                      SSL3_CHANGE_CIPHER_SERVER_WRITE))
+        {
+            /* SSLfatal() already called */
+            return WORK_ERROR;
+        }
+
+        if (SSL_IS_DTLS(s))
+            dtls1_reset_seq_numbers(s, SSL3_CC_WRITE);
+        break;
+
+    case TLS_ST_SW_SRVR_DONE:
+        if (statem_flush(s) != 1)
+            return WORK_MORE_A;
+        break;
+
+    case TLS_ST_SW_FINISHED:
+        if (statem_flush(s) != 1)
+            return WORK_MORE_A;
+#ifndef OPENSSL_NO_SCTP
+        if (SSL_IS_DTLS(s) && s->hit) {
+            /*
+             * Change to new shared key of SCTP-Auth, will be ignored if
+             * no SCTP used.
+             */
+            BIO_ctrl(SSL_get_wbio(s), BIO_CTRL_DGRAM_SCTP_NEXT_AUTH_KEY,
+                     0, NULL);
+        }
+#endif
+        if (SSL_IS_TLS13(s)) {
+            if (!s->method->ssl3_enc->generate_master_secret(s,
+                        s->master_secret, s->handshake_secret, 0,
+                        &s->session->master_key_length)
+                || !s->method->ssl3_enc->change_cipher_state(s,
+                        SSL3_CC_APPLICATION | SSL3_CHANGE_CIPHER_SERVER_WRITE))
+            /* SSLfatal() already called */
+            return WORK_ERROR;
+        }
+        break;
+
+    case TLS_ST_SW_CERT_REQ:
+        if (s->post_handshake_auth == SSL_PHA_REQUEST_PENDING) {
+            if (statem_flush(s) != 1)
+                return WORK_MORE_A;
+        }
+        break;
+
+    case TLS_ST_SW_KEY_UPDATE:
+        if (statem_flush(s) != 1)
+            return WORK_MORE_A;
+        if (!tls13_update_key(s, 1)) {
+            /* SSLfatal() already called */
+            return WORK_ERROR;
+        }
+        break;
+
+    case TLS_ST_SW_SESSION_TICKET:
+        clear_sys_error();
+        if (SSL_IS_TLS13(s) && statem_flush(s) != 1) {
+            if (SSL_get_error(s, 0) == SSL_ERROR_SYSCALL
+                    && conn_is_closed()) {
+                /*
+                 * We ignore connection closed errors in TLSv1.3 when sending a
+                 * NewSessionTicket and behave as if we were successful. This is
+                 * so that we are still able to read data sent to us by a client
+                 * that closes soon after the end of the handshake without
+                 * waiting to read our post-handshake NewSessionTickets.
+                 */
+                s->rwstate = SSL_NOTHING;
+                break;
+            }
+
+            return WORK_MORE_A;
+        }
+        break;
+    }
+
+    return WORK_FINISHED_CONTINUE;
+}
+
+/*
+ * Get the message construction function and message type for sending from the
+ * server
+ *
+ * Valid return values are:
+ *   1: Success
+ *   0: Error
+ */
+int ossl_statem_server_construct_message(SSL *s, WPACKET *pkt,
+                                         confunc_f *confunc, int *mt)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    switch (st->hand_state) {
+    default:
+        /* Shouldn't happen */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_OSSL_STATEM_SERVER_CONSTRUCT_MESSAGE,
+                 SSL_R_BAD_HANDSHAKE_STATE);
+        return 0;
+
+    case TLS_ST_SW_CHANGE:
+        if (SSL_IS_DTLS(s))
+            *confunc = dtls_construct_change_cipher_spec;
+        else
+            *confunc = tls_construct_change_cipher_spec;
+        *mt = SSL3_MT_CHANGE_CIPHER_SPEC;
+        break;
+
+    case DTLS_ST_SW_HELLO_VERIFY_REQUEST:
+        *confunc = dtls_construct_hello_verify_request;
+        *mt = DTLS1_MT_HELLO_VERIFY_REQUEST;
+        break;
+
+    case TLS_ST_SW_HELLO_REQ:
+        /* No construction function needed */
+        *confunc = NULL;
+        *mt = SSL3_MT_HELLO_REQUEST;
+        break;
+
+    case TLS_ST_SW_SRVR_HELLO:
+        *confunc = tls_construct_server_hello;
+        *mt = SSL3_MT_SERVER_HELLO;
+        break;
+
+    case TLS_ST_SW_CERT:
+        *confunc = tls_construct_server_certificate;
+        *mt = SSL3_MT_CERTIFICATE;
+        break;
+
+    case TLS_ST_SW_CERT_VRFY:
+        *confunc = tls_construct_cert_verify;
+        *mt = SSL3_MT_CERTIFICATE_VERIFY;
+        break;
+
+
+    case TLS_ST_SW_KEY_EXCH:
+        *confunc = tls_construct_server_key_exchange;
+        *mt = SSL3_MT_SERVER_KEY_EXCHANGE;
+        break;
+
+    case TLS_ST_SW_CERT_REQ:
+        *confunc = tls_construct_certificate_request;
+        *mt = SSL3_MT_CERTIFICATE_REQUEST;
+        break;
+
+    case TLS_ST_SW_SRVR_DONE:
+        *confunc = tls_construct_server_done;
+        *mt = SSL3_MT_SERVER_DONE;
+        break;
+
+    case TLS_ST_SW_SESSION_TICKET:
+        *confunc = tls_construct_new_session_ticket;
+        *mt = SSL3_MT_NEWSESSION_TICKET;
+        break;
+
+    case TLS_ST_SW_CERT_STATUS:
+        *confunc = tls_construct_cert_status;
+        *mt = SSL3_MT_CERTIFICATE_STATUS;
+        break;
+
+    case TLS_ST_SW_FINISHED:
+        *confunc = tls_construct_finished;
+        *mt = SSL3_MT_FINISHED;
+        break;
+
+    case TLS_ST_EARLY_DATA:
+        *confunc = NULL;
+        *mt = SSL3_MT_DUMMY;
+        break;
+
+    case TLS_ST_SW_ENCRYPTED_EXTENSIONS:
+        *confunc = tls_construct_encrypted_extensions;
+        *mt = SSL3_MT_ENCRYPTED_EXTENSIONS;
+        break;
+
+    case TLS_ST_SW_KEY_UPDATE:
+        *confunc = tls_construct_key_update;
+        *mt = SSL3_MT_KEY_UPDATE;
+        break;
+    }
+
+    return 1;
+}
+
+/*
+ * Maximum size (excluding the Handshake header) of a ClientHello message,
+ * calculated as follows:
+ *
+ *  2 + # client_version
+ *  32 + # only valid length for random
+ *  1 + # length of session_id
+ *  32 + # maximum size for session_id
+ *  2 + # length of cipher suites
+ *  2^16-2 + # maximum length of cipher suites array
+ *  1 + # length of compression_methods
+ *  2^8-1 + # maximum length of compression methods
+ *  2 + # length of extensions
+ *  2^16-1 # maximum length of extensions
+ */
+#define CLIENT_HELLO_MAX_LENGTH         131396
+
+#define CLIENT_KEY_EXCH_MAX_LENGTH      2048
+#define NEXT_PROTO_MAX_LENGTH           514
+
+/*
+ * Returns the maximum allowed length for the current message that we are
+ * reading. Excludes the message header.
+ */
+size_t ossl_statem_server_max_message_size(SSL *s)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    switch (st->hand_state) {
+    default:
+        /* Shouldn't happen */
+        return 0;
+
+    case TLS_ST_SR_CLNT_HELLO:
+        return CLIENT_HELLO_MAX_LENGTH;
+
+    case TLS_ST_SR_END_OF_EARLY_DATA:
+        return END_OF_EARLY_DATA_MAX_LENGTH;
+
+    case TLS_ST_SR_CERT:
+        return s->max_cert_list;
+
+    case TLS_ST_SR_KEY_EXCH:
+        return CLIENT_KEY_EXCH_MAX_LENGTH;
+
+    case TLS_ST_SR_CERT_VRFY:
+        return SSL3_RT_MAX_PLAIN_LENGTH;
+
+#ifndef OPENSSL_NO_NEXTPROTONEG
+    case TLS_ST_SR_NEXT_PROTO:
+        return NEXT_PROTO_MAX_LENGTH;
+#endif
+
+    case TLS_ST_SR_CHANGE:
+        return CCS_MAX_LENGTH;
+
+    case TLS_ST_SR_FINISHED:
+        return FINISHED_MAX_LENGTH;
+
+    case TLS_ST_SR_KEY_UPDATE:
+        return KEY_UPDATE_MAX_LENGTH;
+    }
+}
+
+/*
+ * Process a message that the server has received from the client.
+ */
+MSG_PROCESS_RETURN ossl_statem_server_process_message(SSL *s, PACKET *pkt)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    switch (st->hand_state) {
+    default:
+        /* Shouldn't happen */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_OSSL_STATEM_SERVER_PROCESS_MESSAGE,
+                 ERR_R_INTERNAL_ERROR);
+        return MSG_PROCESS_ERROR;
+
+    case TLS_ST_SR_CLNT_HELLO:
+        return tls_process_client_hello(s, pkt);
+
+    case TLS_ST_SR_END_OF_EARLY_DATA:
+        return tls_process_end_of_early_data(s, pkt);
+
+    case TLS_ST_SR_CERT:
+        return tls_process_client_certificate(s, pkt);
+
+    case TLS_ST_SR_KEY_EXCH:
+        return tls_process_client_key_exchange(s, pkt);
+
+    case TLS_ST_SR_CERT_VRFY:
+        return tls_process_cert_verify(s, pkt);
+
+#ifndef OPENSSL_NO_NEXTPROTONEG
+    case TLS_ST_SR_NEXT_PROTO:
+        return tls_process_next_proto(s, pkt);
+#endif
+
+    case TLS_ST_SR_CHANGE:
+        return tls_process_change_cipher_spec(s, pkt);
+
+    case TLS_ST_SR_FINISHED:
+        return tls_process_finished(s, pkt);
+
+    case TLS_ST_SR_KEY_UPDATE:
+        return tls_process_key_update(s, pkt);
+
+    }
+}
+
+/*
+ * Perform any further processing required following the receipt of a message
+ * from the client
+ */
+WORK_STATE ossl_statem_server_post_process_message(SSL *s, WORK_STATE wst)
+{
+    OSSL_STATEM *st = &s->statem;
+
+    switch (st->hand_state) {
+    default:
+        /* Shouldn't happen */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_OSSL_STATEM_SERVER_POST_PROCESS_MESSAGE,
+                 ERR_R_INTERNAL_ERROR);
+        return WORK_ERROR;
+
+    case TLS_ST_SR_CLNT_HELLO:
+        return tls_post_process_client_hello(s, wst);
+
+    case TLS_ST_SR_KEY_EXCH:
+        return tls_post_process_client_key_exchange(s, wst);
+    }
+}
+
+#ifndef OPENSSL_NO_SRP
+/* Returns 1 on success, 0 for retryable error, -1 for fatal error */
+static int ssl_check_srp_ext_ClientHello(SSL *s)
+{
+    int ret;
+    int al = SSL_AD_UNRECOGNIZED_NAME;
+
+    if ((s->s3->tmp.new_cipher->algorithm_mkey & SSL_kSRP) &&
+        (s->srp_ctx.TLS_ext_srp_username_callback != NULL)) {
+        if (s->srp_ctx.login == NULL) {
+            /*
+             * RFC 5054 says SHOULD reject, we do so if There is no srp
+             * login name
+             */
+            SSLfatal(s, SSL_AD_UNKNOWN_PSK_IDENTITY,
+                     SSL_F_SSL_CHECK_SRP_EXT_CLIENTHELLO,
+                     SSL_R_PSK_IDENTITY_NOT_FOUND);
+            return -1;
+        } else {
+            ret = SSL_srp_server_param_with_username(s, &al);
+            if (ret < 0)
+                return 0;
+            if (ret == SSL3_AL_FATAL) {
+                SSLfatal(s, al, SSL_F_SSL_CHECK_SRP_EXT_CLIENTHELLO,
+                         al == SSL_AD_UNKNOWN_PSK_IDENTITY
+                         ? SSL_R_PSK_IDENTITY_NOT_FOUND
+                         : SSL_R_CLIENTHELLO_TLSEXT);
+                return -1;
+            }
+        }
+    }
+    return 1;
+}
+#endif
+
+int dtls_raw_hello_verify_request(WPACKET *pkt, unsigned char *cookie,
+                                  size_t cookie_len)
+{
+    /* Always use DTLS 1.0 version: see RFC 6347 */
+    if (!WPACKET_put_bytes_u16(pkt, DTLS1_VERSION)
+            || !WPACKET_sub_memcpy_u8(pkt, cookie, cookie_len))
+        return 0;
+
+    return 1;
+}
+
+int dtls_construct_hello_verify_request(SSL *s, WPACKET *pkt)
+{
+    unsigned int cookie_leni;
+    if (s->ctx->app_gen_cookie_cb == NULL ||
+        s->ctx->app_gen_cookie_cb(s, s->d1->cookie,
+                                  &cookie_leni) == 0 ||
+        cookie_leni > 255) {
+        SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_DTLS_CONSTRUCT_HELLO_VERIFY_REQUEST,
+                 SSL_R_COOKIE_GEN_CALLBACK_FAILURE);
+        return 0;
+    }
+    s->d1->cookie_len = cookie_leni;
+
+    if (!dtls_raw_hello_verify_request(pkt, s->d1->cookie,
+                                              s->d1->cookie_len)) {
+        SSLfatal(s, SSL_AD_NO_ALERT, SSL_F_DTLS_CONSTRUCT_HELLO_VERIFY_REQUEST,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_EC
+/*-
+ * ssl_check_for_safari attempts to fingerprint Safari using OS X
+ * SecureTransport using the TLS extension block in |hello|.
+ * Safari, since 10.6, sends exactly these extensions, in this order:
+ *   SNI,
+ *   elliptic_curves
+ *   ec_point_formats
+ *   signature_algorithms (for TLSv1.2 only)
+ *
+ * We wish to fingerprint Safari because they broke ECDHE-ECDSA support in 10.8,
+ * but they advertise support. So enabling ECDHE-ECDSA ciphers breaks them.
+ * Sadly we cannot differentiate 10.6, 10.7 and 10.8.4 (which work), from
+ * 10.8..10.8.3 (which don't work).
+ */
+static void ssl_check_for_safari(SSL *s, const CLIENTHELLO_MSG *hello)
+{
+    static const unsigned char kSafariExtensionsBlock[] = {
+        0x00, 0x0a,             /* elliptic_curves extension */
+        0x00, 0x08,             /* 8 bytes */
+        0x00, 0x06,             /* 6 bytes of curve ids */
+        0x00, 0x17,             /* P-256 */
+        0x00, 0x18,             /* P-384 */
+        0x00, 0x19,             /* P-521 */
+
+        0x00, 0x0b,             /* ec_point_formats */
+        0x00, 0x02,             /* 2 bytes */
+        0x01,                   /* 1 point format */
+        0x00,                   /* uncompressed */
+        /* The following is only present in TLS 1.2 */
+        0x00, 0x0d,             /* signature_algorithms */
+        0x00, 0x0c,             /* 12 bytes */
+        0x00, 0x0a,             /* 10 bytes */
+        0x05, 0x01,             /* SHA-384/RSA */
+        0x04, 0x01,             /* SHA-256/RSA */
+        0x02, 0x01,             /* SHA-1/RSA */
+        0x04, 0x03,             /* SHA-256/ECDSA */
+        0x02, 0x03,             /* SHA-1/ECDSA */
+    };
+    /* Length of the common prefix (first two extensions). */
+    static const size_t kSafariCommonExtensionsLength = 18;
+    unsigned int type;
+    PACKET sni, tmppkt;
+    size_t ext_len;
+
+    tmppkt = hello->extensions;
+
+    if (!PACKET_forward(&tmppkt, 2)
+        || !PACKET_get_net_2(&tmppkt, &type)
+        || !PACKET_get_length_prefixed_2(&tmppkt, &sni)) {
+        return;
+    }
+
+    if (type != TLSEXT_TYPE_server_name)
+        return;
+
+    ext_len = TLS1_get_client_version(s) >= TLS1_2_VERSION ?
+        sizeof(kSafariExtensionsBlock) : kSafariCommonExtensionsLength;
+
+    s->s3->is_probably_safari = PACKET_equal(&tmppkt, kSafariExtensionsBlock,
+                                             ext_len);
+}
+#endif                          /* !OPENSSL_NO_EC */
+
+MSG_PROCESS_RETURN tls_process_client_hello(SSL *s, PACKET *pkt)
+{
+    /* |cookie| will only be initialized for DTLS. */
+    PACKET session_id, compression, extensions, cookie;
+    static const unsigned char null_compression = 0;
+    CLIENTHELLO_MSG *clienthello = NULL;
+
+    /* Check if this is actually an unexpected renegotiation ClientHello */
+    if (s->renegotiate == 0 && !SSL_IS_FIRST_HANDSHAKE(s)) {
+        if (!ossl_assert(!SSL_IS_TLS13(s))) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CLIENT_HELLO,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        if ((s->options & SSL_OP_NO_RENEGOTIATION) != 0
+                || (!s->s3->send_connection_binding
+                    && (s->options
+                        & SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION) == 0)) {
+            ssl3_send_alert(s, SSL3_AL_WARNING, SSL_AD_NO_RENEGOTIATION);
+            return MSG_PROCESS_FINISHED_READING;
+        }
+        s->renegotiate = 1;
+        s->new_session = 1;
+    }
+
+    clienthello = OPENSSL_zalloc(sizeof(*clienthello));
+    if (clienthello == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CLIENT_HELLO,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    /*
+     * First, parse the raw ClientHello data into the CLIENTHELLO_MSG structure.
+     */
+    clienthello->isv2 = RECORD_LAYER_is_sslv2_record(&s->rlayer);
+    PACKET_null_init(&cookie);
+
+    if (clienthello->isv2) {
+        unsigned int mt;
+
+        if (!SSL_IS_FIRST_HANDSHAKE(s)
+                || s->hello_retry_request != SSL_HRR_NONE) {
+            SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE,
+                     SSL_F_TLS_PROCESS_CLIENT_HELLO, SSL_R_UNEXPECTED_MESSAGE);
+            goto err;
+        }
+
+        /*-
+         * An SSLv3/TLSv1 backwards-compatible CLIENT-HELLO in an SSLv2
+         * header is sent directly on the wire, not wrapped as a TLS
+         * record. Our record layer just processes the message length and passes
+         * the rest right through. Its format is:
+         * Byte  Content
+         * 0-1   msg_length - decoded by the record layer
+         * 2     msg_type - s->init_msg points here
+         * 3-4   version
+         * 5-6   cipher_spec_length
+         * 7-8   session_id_length
+         * 9-10  challenge_length
+         * ...   ...
+         */
+
+        if (!PACKET_get_1(pkt, &mt)
+            || mt != SSL2_MT_CLIENT_HELLO) {
+            /*
+             * Should never happen. We should have tested this in the record
+             * layer in order to have determined that this is a SSLv2 record
+             * in the first place
+             */
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CLIENT_HELLO,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+    }
+
+    if (!PACKET_get_net_2(pkt, &clienthello->legacy_version)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CLIENT_HELLO,
+                 SSL_R_LENGTH_TOO_SHORT);
+        goto err;
+    }
+
+    /* Parse the message and load client random. */
+    if (clienthello->isv2) {
+        /*
+         * Handle an SSLv2 backwards compatible ClientHello
+         * Note, this is only for SSLv3+ using the backward compatible format.
+         * Real SSLv2 is not supported, and is rejected below.
+         */
+        unsigned int ciphersuite_len, session_id_len, challenge_len;
+        PACKET challenge;
+
+        if (!PACKET_get_net_2(pkt, &ciphersuite_len)
+            || !PACKET_get_net_2(pkt, &session_id_len)
+            || !PACKET_get_net_2(pkt, &challenge_len)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CLIENT_HELLO,
+                     SSL_R_RECORD_LENGTH_MISMATCH);
+            goto err;
+        }
+
+        if (session_id_len > SSL_MAX_SSL_SESSION_ID_LENGTH) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_TLS_PROCESS_CLIENT_HELLO, SSL_R_LENGTH_MISMATCH);
+            goto err;
+        }
+
+        if (!PACKET_get_sub_packet(pkt, &clienthello->ciphersuites,
+                                   ciphersuite_len)
+            || !PACKET_copy_bytes(pkt, clienthello->session_id, session_id_len)
+            || !PACKET_get_sub_packet(pkt, &challenge, challenge_len)
+            /* No extensions. */
+            || PACKET_remaining(pkt) != 0) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CLIENT_HELLO,
+                     SSL_R_RECORD_LENGTH_MISMATCH);
+            goto err;
+        }
+        clienthello->session_id_len = session_id_len;
+
+        /* Load the client random and compression list. We use SSL3_RANDOM_SIZE
+         * here rather than sizeof(clienthello->random) because that is the limit
+         * for SSLv3 and it is fixed. It won't change even if
+         * sizeof(clienthello->random) does.
+         */
+        challenge_len = challenge_len > SSL3_RANDOM_SIZE
+                        ? SSL3_RANDOM_SIZE : challenge_len;
+        memset(clienthello->random, 0, SSL3_RANDOM_SIZE);
+        if (!PACKET_copy_bytes(&challenge,
+                               clienthello->random + SSL3_RANDOM_SIZE -
+                               challenge_len, challenge_len)
+            /* Advertise only null compression. */
+            || !PACKET_buf_init(&compression, &null_compression, 1)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CLIENT_HELLO,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        PACKET_null_init(&clienthello->extensions);
+    } else {
+        /* Regular ClientHello. */
+        if (!PACKET_copy_bytes(pkt, clienthello->random, SSL3_RANDOM_SIZE)
+            || !PACKET_get_length_prefixed_1(pkt, &session_id)
+            || !PACKET_copy_all(&session_id, clienthello->session_id,
+                    SSL_MAX_SSL_SESSION_ID_LENGTH,
+                    &clienthello->session_id_len)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CLIENT_HELLO,
+                     SSL_R_LENGTH_MISMATCH);
+            goto err;
+        }
+
+        if (SSL_IS_DTLS(s)) {
+            if (!PACKET_get_length_prefixed_1(pkt, &cookie)) {
+                SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CLIENT_HELLO,
+                         SSL_R_LENGTH_MISMATCH);
+                goto err;
+            }
+            if (!PACKET_copy_all(&cookie, clienthello->dtls_cookie,
+                                 DTLS1_COOKIE_LENGTH,
+                                 &clienthello->dtls_cookie_len)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_PROCESS_CLIENT_HELLO, ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+            /*
+             * If we require cookies and this ClientHello doesn't contain one,
+             * just return since we do not want to allocate any memory yet.
+             * So check cookie length...
+             */
+            if (SSL_get_options(s) & SSL_OP_COOKIE_EXCHANGE) {
+                if (clienthello->dtls_cookie_len == 0) {
+                    OPENSSL_free(clienthello);
+                    return MSG_PROCESS_FINISHED_READING;
+                }
+            }
+        }
+
+        if (!PACKET_get_length_prefixed_2(pkt, &clienthello->ciphersuites)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CLIENT_HELLO,
+                     SSL_R_LENGTH_MISMATCH);
+            goto err;
+        }
+
+        if (!PACKET_get_length_prefixed_1(pkt, &compression)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CLIENT_HELLO,
+                     SSL_R_LENGTH_MISMATCH);
+            goto err;
+        }
+
+        /* Could be empty. */
+        if (PACKET_remaining(pkt) == 0) {
+            PACKET_null_init(&clienthello->extensions);
+        } else {
+            if (!PACKET_get_length_prefixed_2(pkt, &clienthello->extensions)
+                    || PACKET_remaining(pkt) != 0) {
+                SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CLIENT_HELLO,
+                         SSL_R_LENGTH_MISMATCH);
+                goto err;
+            }
+        }
+    }
+
+    if (!PACKET_copy_all(&compression, clienthello->compressions,
+                         MAX_COMPRESSIONS_SIZE,
+                         &clienthello->compressions_len)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CLIENT_HELLO,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    /* Preserve the raw extensions PACKET for later use */
+    extensions = clienthello->extensions;
+    if (!tls_collect_extensions(s, &extensions, SSL_EXT_CLIENT_HELLO,
+                                &clienthello->pre_proc_exts,
+                                &clienthello->pre_proc_exts_len, 1)) {
+        /* SSLfatal already been called */
+        goto err;
+    }
+    s->clienthello = clienthello;
+
+    return MSG_PROCESS_CONTINUE_PROCESSING;
+
+ err:
+    if (clienthello != NULL)
+        OPENSSL_free(clienthello->pre_proc_exts);
+    OPENSSL_free(clienthello);
+
+    return MSG_PROCESS_ERROR;
+}
+
+static int tls_early_post_process_client_hello(SSL *s)
+{
+    unsigned int j;
+    int i, al = SSL_AD_INTERNAL_ERROR;
+    int protverr;
+    size_t loop;
+    unsigned long id;
+#ifndef OPENSSL_NO_COMP
+    SSL_COMP *comp = NULL;
+#endif
+    const SSL_CIPHER *c;
+    STACK_OF(SSL_CIPHER) *ciphers = NULL;
+    STACK_OF(SSL_CIPHER) *scsvs = NULL;
+    CLIENTHELLO_MSG *clienthello = s->clienthello;
+    DOWNGRADE dgrd = DOWNGRADE_NONE;
+
+    /* Finished parsing the ClientHello, now we can start processing it */
+    /* Give the ClientHello callback a crack at things */
+    if (s->ctx->client_hello_cb != NULL) {
+        /* A failure in the ClientHello callback terminates the connection. */
+        switch (s->ctx->client_hello_cb(s, &al, s->ctx->client_hello_cb_arg)) {
+        case SSL_CLIENT_HELLO_SUCCESS:
+            break;
+        case SSL_CLIENT_HELLO_RETRY:
+            s->rwstate = SSL_CLIENT_HELLO_CB;
+            return -1;
+        case SSL_CLIENT_HELLO_ERROR:
+        default:
+            SSLfatal(s, al,
+                     SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                     SSL_R_CALLBACK_FAILED);
+            goto err;
+        }
+    }
+
+    /* Set up the client_random */
+    memcpy(s->s3->client_random, clienthello->random, SSL3_RANDOM_SIZE);
+
+    /* Choose the version */
+
+    if (clienthello->isv2) {
+        if (clienthello->legacy_version == SSL2_VERSION
+                || (clienthello->legacy_version & 0xff00)
+                   != (SSL3_VERSION_MAJOR << 8)) {
+            /*
+             * This is real SSLv2 or something completely unknown. We don't
+             * support it.
+             */
+            SSLfatal(s, SSL_AD_PROTOCOL_VERSION,
+                     SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                     SSL_R_UNKNOWN_PROTOCOL);
+            goto err;
+        }
+        /* SSLv3/TLS */
+        s->client_version = clienthello->legacy_version;
+    }
+    /*
+     * Do SSL/TLS version negotiation if applicable. For DTLS we just check
+     * versions are potentially compatible. Version negotiation comes later.
+     */
+    if (!SSL_IS_DTLS(s)) {
+        protverr = ssl_choose_server_version(s, clienthello, &dgrd);
+    } else if (s->method->version != DTLS_ANY_VERSION &&
+               DTLS_VERSION_LT((int)clienthello->legacy_version, s->version)) {
+        protverr = SSL_R_VERSION_TOO_LOW;
+    } else {
+        protverr = 0;
+    }
+
+    if (protverr) {
+        if (SSL_IS_FIRST_HANDSHAKE(s)) {
+            /* like ssl3_get_record, send alert using remote version number */
+            s->version = s->client_version = clienthello->legacy_version;
+        }
+        SSLfatal(s, SSL_AD_PROTOCOL_VERSION,
+                 SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO, protverr);
+        goto err;
+    }
+
+    /* TLSv1.3 specifies that a ClientHello must end on a record boundary */
+    if (SSL_IS_TLS13(s) && RECORD_LAYER_processed_read_pending(&s->rlayer)) {
+        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE,
+                 SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                 SSL_R_NOT_ON_RECORD_BOUNDARY);
+        goto err;
+    }
+
+    if (SSL_IS_DTLS(s)) {
+        /* Empty cookie was already handled above by returning early. */
+        if (SSL_get_options(s) & SSL_OP_COOKIE_EXCHANGE) {
+            if (s->ctx->app_verify_cookie_cb != NULL) {
+                if (s->ctx->app_verify_cookie_cb(s, clienthello->dtls_cookie,
+                        clienthello->dtls_cookie_len) == 0) {
+                    SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                             SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                             SSL_R_COOKIE_MISMATCH);
+                    goto err;
+                    /* else cookie verification succeeded */
+                }
+                /* default verification */
+            } else if (s->d1->cookie_len != clienthello->dtls_cookie_len
+                    || memcmp(clienthello->dtls_cookie, s->d1->cookie,
+                              s->d1->cookie_len) != 0) {
+                SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                         SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                         SSL_R_COOKIE_MISMATCH);
+                goto err;
+            }
+            s->d1->cookie_verified = 1;
+        }
+        if (s->method->version == DTLS_ANY_VERSION) {
+            protverr = ssl_choose_server_version(s, clienthello, &dgrd);
+            if (protverr != 0) {
+                s->version = s->client_version;
+                SSLfatal(s, SSL_AD_PROTOCOL_VERSION,
+                         SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO, protverr);
+                goto err;
+            }
+        }
+    }
+
+    s->hit = 0;
+
+    if (!ssl_cache_cipherlist(s, &clienthello->ciphersuites,
+                              clienthello->isv2) ||
+        !bytes_to_cipher_list(s, &clienthello->ciphersuites, &ciphers, &scsvs,
+                              clienthello->isv2, 1)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    s->s3->send_connection_binding = 0;
+    /* Check what signalling cipher-suite values were received. */
+    if (scsvs != NULL) {
+        for(i = 0; i < sk_SSL_CIPHER_num(scsvs); i++) {
+            c = sk_SSL_CIPHER_value(scsvs, i);
+            if (SSL_CIPHER_get_id(c) == SSL3_CK_SCSV) {
+                if (s->renegotiate) {
+                    /* SCSV is fatal if renegotiating */
+                    SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                             SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                             SSL_R_SCSV_RECEIVED_WHEN_RENEGOTIATING);
+                    goto err;
+                }
+                s->s3->send_connection_binding = 1;
+            } else if (SSL_CIPHER_get_id(c) == SSL3_CK_FALLBACK_SCSV &&
+                       !ssl_check_version_downgrade(s)) {
+                /*
+                 * This SCSV indicates that the client previously tried
+                 * a higher version.  We should fail if the current version
+                 * is an unexpected downgrade, as that indicates that the first
+                 * connection may have been tampered with in order to trigger
+                 * an insecure downgrade.
+                 */
+                SSLfatal(s, SSL_AD_INAPPROPRIATE_FALLBACK,
+                         SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                         SSL_R_INAPPROPRIATE_FALLBACK);
+                goto err;
+            }
+        }
+    }
+
+    /* For TLSv1.3 we must select the ciphersuite *before* session resumption */
+    if (SSL_IS_TLS13(s)) {
+        const SSL_CIPHER *cipher =
+            ssl3_choose_cipher(s, ciphers, SSL_get_ciphers(s));
+
+        if (cipher == NULL) {
+            SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                     SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                     SSL_R_NO_SHARED_CIPHER);
+            goto err;
+        }
+        if (s->hello_retry_request == SSL_HRR_PENDING
+                && (s->s3->tmp.new_cipher == NULL
+                    || s->s3->tmp.new_cipher->id != cipher->id)) {
+            /*
+             * A previous HRR picked a different ciphersuite to the one we
+             * just selected. Something must have changed.
+             */
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                     SSL_R_BAD_CIPHER);
+            goto err;
+        }
+        s->s3->tmp.new_cipher = cipher;
+    }
+
+    /* We need to do this before getting the session */
+    if (!tls_parse_extension(s, TLSEXT_IDX_extended_master_secret,
+                             SSL_EXT_CLIENT_HELLO,
+                             clienthello->pre_proc_exts, NULL, 0)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    /*
+     * We don't allow resumption in a backwards compatible ClientHello.
+     * TODO(openssl-team): in TLS1.1+, session_id MUST be empty.
+     *
+     * Versions before 0.9.7 always allow clients to resume sessions in
+     * renegotiation. 0.9.7 and later allow this by default, but optionally
+     * ignore resumption requests with flag
+     * SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION (it's a new flag rather
+     * than a change to default behavior so that applications relying on
+     * this for security won't even compile against older library versions).
+     * 1.0.1 and later also have a function SSL_renegotiate_abbreviated() to
+     * request renegotiation but not a new session (s->new_session remains
+     * unset): for servers, this essentially just means that the
+     * SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION setting will be
+     * ignored.
+     */
+    if (clienthello->isv2 ||
+        (s->new_session &&
+         (s->options & SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION))) {
+        if (!ssl_get_new_session(s, 1)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    } else {
+        i = ssl_get_prev_session(s, clienthello);
+        if (i == 1) {
+            /* previous session */
+            s->hit = 1;
+        } else if (i == -1) {
+            /* SSLfatal() already called */
+            goto err;
+        } else {
+            /* i == 0 */
+            if (!ssl_get_new_session(s, 1)) {
+                /* SSLfatal() already called */
+                goto err;
+            }
+        }
+    }
+
+    if (SSL_IS_TLS13(s)) {
+        memcpy(s->tmp_session_id, s->clienthello->session_id,
+               s->clienthello->session_id_len);
+        s->tmp_session_id_len = s->clienthello->session_id_len;
+    }
+
+    /*
+     * If it is a hit, check that the cipher is in the list. In TLSv1.3 we check
+     * ciphersuite compatibility with the session as part of resumption.
+     */
+    if (!SSL_IS_TLS13(s) && s->hit) {
+        j = 0;
+        id = s->session->cipher->id;
+
+#ifdef CIPHER_DEBUG
+        fprintf(stderr, "client sent %d ciphers\n", sk_SSL_CIPHER_num(ciphers));
+#endif
+        for (i = 0; i < sk_SSL_CIPHER_num(ciphers); i++) {
+            c = sk_SSL_CIPHER_value(ciphers, i);
+#ifdef CIPHER_DEBUG
+            fprintf(stderr, "client [%2d of %2d]:%s\n",
+                    i, sk_SSL_CIPHER_num(ciphers), SSL_CIPHER_get_name(c));
+#endif
+            if (c->id == id) {
+                j = 1;
+                break;
+            }
+        }
+        if (j == 0) {
+            /*
+             * we need to have the cipher in the cipher list if we are asked
+             * to reuse it
+             */
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                     SSL_R_REQUIRED_CIPHER_MISSING);
+            goto err;
+        }
+    }
+
+    for (loop = 0; loop < clienthello->compressions_len; loop++) {
+        if (clienthello->compressions[loop] == 0)
+            break;
+    }
+
+    if (loop >= clienthello->compressions_len) {
+        /* no compress */
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                 SSL_R_NO_COMPRESSION_SPECIFIED);
+        goto err;
+    }
+
+#ifndef OPENSSL_NO_EC
+    if (s->options & SSL_OP_SAFARI_ECDHE_ECDSA_BUG)
+        ssl_check_for_safari(s, clienthello);
+#endif                          /* !OPENSSL_NO_EC */
+
+    /* TLS extensions */
+    if (!tls_parse_all_extensions(s, SSL_EXT_CLIENT_HELLO,
+                                  clienthello->pre_proc_exts, NULL, 0, 1)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    /*
+     * Check if we want to use external pre-shared secret for this handshake
+     * for not reused session only. We need to generate server_random before
+     * calling tls_session_secret_cb in order to allow SessionTicket
+     * processing to use it in key derivation.
+     */
+    {
+        unsigned char *pos;
+        pos = s->s3->server_random;
+        if (ssl_fill_hello_random(s, 1, pos, SSL3_RANDOM_SIZE, dgrd) <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+    }
+
+    if (!s->hit
+            && s->version >= TLS1_VERSION
+            && !SSL_IS_TLS13(s)
+            && !SSL_IS_DTLS(s)
+            && s->ext.session_secret_cb) {
+        const SSL_CIPHER *pref_cipher = NULL;
+        /*
+         * s->session->master_key_length is a size_t, but this is an int for
+         * backwards compat reasons
+         */
+        int master_key_length;
+
+        master_key_length = sizeof(s->session->master_key);
+        if (s->ext.session_secret_cb(s, s->session->master_key,
+                                     &master_key_length, ciphers,
+                                     &pref_cipher,
+                                     s->ext.session_secret_cb_arg)
+                && master_key_length > 0) {
+            s->session->master_key_length = master_key_length;
+            s->hit = 1;
+            s->session->ciphers = ciphers;
+            s->session->verify_result = X509_V_OK;
+
+            ciphers = NULL;
+
+            /* check if some cipher was preferred by call back */
+            if (pref_cipher == NULL)
+                pref_cipher = ssl3_choose_cipher(s, s->session->ciphers,
+                                                 SSL_get_ciphers(s));
+            if (pref_cipher == NULL) {
+                SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                         SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                         SSL_R_NO_SHARED_CIPHER);
+                goto err;
+            }
+
+            s->session->cipher = pref_cipher;
+            sk_SSL_CIPHER_free(s->cipher_list);
+            s->cipher_list = sk_SSL_CIPHER_dup(s->session->ciphers);
+            sk_SSL_CIPHER_free(s->cipher_list_by_id);
+            s->cipher_list_by_id = sk_SSL_CIPHER_dup(s->session->ciphers);
+        }
+    }
+
+    /*
+     * Worst case, we will use the NULL compression, but if we have other
+     * options, we will now look for them.  We have complen-1 compression
+     * algorithms from the client, starting at q.
+     */
+    s->s3->tmp.new_compression = NULL;
+    if (SSL_IS_TLS13(s)) {
+        /*
+         * We already checked above that the NULL compression method appears in
+         * the list. Now we check there aren't any others (which is illegal in
+         * a TLSv1.3 ClientHello.
+         */
+        if (clienthello->compressions_len != 1) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                     SSL_R_INVALID_COMPRESSION_ALGORITHM);
+            goto err;
+        }
+    }
+#ifndef OPENSSL_NO_COMP
+    /* This only happens if we have a cache hit */
+    else if (s->session->compress_meth != 0) {
+        int m, comp_id = s->session->compress_meth;
+        unsigned int k;
+        /* Perform sanity checks on resumed compression algorithm */
+        /* Can't disable compression */
+        if (!ssl_allow_compression(s)) {
+            SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                     SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                     SSL_R_INCONSISTENT_COMPRESSION);
+            goto err;
+        }
+        /* Look for resumed compression method */
+        for (m = 0; m < sk_SSL_COMP_num(s->ctx->comp_methods); m++) {
+            comp = sk_SSL_COMP_value(s->ctx->comp_methods, m);
+            if (comp_id == comp->id) {
+                s->s3->tmp.new_compression = comp;
+                break;
+            }
+        }
+        if (s->s3->tmp.new_compression == NULL) {
+            SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                     SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                     SSL_R_INVALID_COMPRESSION_ALGORITHM);
+            goto err;
+        }
+        /* Look for resumed method in compression list */
+        for (k = 0; k < clienthello->compressions_len; k++) {
+            if (clienthello->compressions[k] == comp_id)
+                break;
+        }
+        if (k >= clienthello->compressions_len) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                     SSL_R_REQUIRED_COMPRESSION_ALGORITHM_MISSING);
+            goto err;
+        }
+    } else if (s->hit) {
+        comp = NULL;
+    } else if (ssl_allow_compression(s) && s->ctx->comp_methods) {
+        /* See if we have a match */
+        int m, nn, v, done = 0;
+        unsigned int o;
+
+        nn = sk_SSL_COMP_num(s->ctx->comp_methods);
+        for (m = 0; m < nn; m++) {
+            comp = sk_SSL_COMP_value(s->ctx->comp_methods, m);
+            v = comp->id;
+            for (o = 0; o < clienthello->compressions_len; o++) {
+                if (v == clienthello->compressions[o]) {
+                    done = 1;
+                    break;
+                }
+            }
+            if (done)
+                break;
+        }
+        if (done)
+            s->s3->tmp.new_compression = comp;
+        else
+            comp = NULL;
+    }
+#else
+    /*
+     * If compression is disabled we'd better not try to resume a session
+     * using compression.
+     */
+    if (s->session->compress_meth != 0) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                 SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                 SSL_R_INCONSISTENT_COMPRESSION);
+        goto err;
+    }
+#endif
+
+    /*
+     * Given s->session->ciphers and SSL_get_ciphers, we must pick a cipher
+     */
+
+    if (!s->hit || SSL_IS_TLS13(s)) {
+        sk_SSL_CIPHER_free(s->session->ciphers);
+        s->session->ciphers = ciphers;
+        if (ciphers == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        ciphers = NULL;
+    }
+
+    if (!s->hit) {
+#ifdef OPENSSL_NO_COMP
+        s->session->compress_meth = 0;
+#else
+        s->session->compress_meth = (comp == NULL) ? 0 : comp->id;
+#endif
+    }
+
+    sk_SSL_CIPHER_free(ciphers);
+    sk_SSL_CIPHER_free(scsvs);
+    OPENSSL_free(clienthello->pre_proc_exts);
+    OPENSSL_free(s->clienthello);
+    s->clienthello = NULL;
+    return 1;
+ err:
+    sk_SSL_CIPHER_free(ciphers);
+    sk_SSL_CIPHER_free(scsvs);
+    OPENSSL_free(clienthello->pre_proc_exts);
+    OPENSSL_free(s->clienthello);
+    s->clienthello = NULL;
+
+    return 0;
+}
+
+/*
+ * Call the status request callback if needed. Upon success, returns 1.
+ * Upon failure, returns 0.
+ */
+static int tls_handle_status_request(SSL *s)
+{
+    s->ext.status_expected = 0;
+
+    /*
+     * If status request then ask callback what to do. Note: this must be
+     * called after servername callbacks in case the certificate has changed,
+     * and must be called after the cipher has been chosen because this may
+     * influence which certificate is sent
+     */
+    if (s->ext.status_type != TLSEXT_STATUSTYPE_nothing && s->ctx != NULL
+            && s->ctx->ext.status_cb != NULL) {
+        int ret;
+
+        /* If no certificate can't return certificate status */
+        if (s->s3->tmp.cert != NULL) {
+            /*
+             * Set current certificate to one we will use so SSL_get_certificate
+             * et al can pick it up.
+             */
+            s->cert->key = s->s3->tmp.cert;
+            ret = s->ctx->ext.status_cb(s, s->ctx->ext.status_arg);
+            switch (ret) {
+                /* We don't want to send a status request response */
+            case SSL_TLSEXT_ERR_NOACK:
+                s->ext.status_expected = 0;
+                break;
+                /* status request response should be sent */
+            case SSL_TLSEXT_ERR_OK:
+                if (s->ext.ocsp.resp)
+                    s->ext.status_expected = 1;
+                break;
+                /* something bad happened */
+            case SSL_TLSEXT_ERR_ALERT_FATAL:
+            default:
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_HANDLE_STATUS_REQUEST,
+                         SSL_R_CLIENTHELLO_TLSEXT);
+                return 0;
+            }
+        }
+    }
+
+    return 1;
+}
+
+/*
+ * Call the alpn_select callback if needed. Upon success, returns 1.
+ * Upon failure, returns 0.
+ */
+int tls_handle_alpn(SSL *s)
+{
+    const unsigned char *selected = NULL;
+    unsigned char selected_len = 0;
+
+    if (s->ctx->ext.alpn_select_cb != NULL && s->s3->alpn_proposed != NULL) {
+        int r = s->ctx->ext.alpn_select_cb(s, &selected, &selected_len,
+                                           s->s3->alpn_proposed,
+                                           (unsigned int)s->s3->alpn_proposed_len,
+                                           s->ctx->ext.alpn_select_cb_arg);
+
+        if (r == SSL_TLSEXT_ERR_OK) {
+            OPENSSL_free(s->s3->alpn_selected);
+            s->s3->alpn_selected = OPENSSL_memdup(selected, selected_len);
+            if (s->s3->alpn_selected == NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_HANDLE_ALPN,
+                         ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+            s->s3->alpn_selected_len = selected_len;
+#ifndef OPENSSL_NO_NEXTPROTONEG
+            /* ALPN takes precedence over NPN. */
+            s->s3->npn_seen = 0;
+#endif
+
+            /* Check ALPN is consistent with session */
+            if (s->session->ext.alpn_selected == NULL
+                        || selected_len != s->session->ext.alpn_selected_len
+                        || memcmp(selected, s->session->ext.alpn_selected,
+                                  selected_len) != 0) {
+                /* Not consistent so can't be used for early_data */
+                s->ext.early_data_ok = 0;
+
+                if (!s->hit) {
+                    /*
+                     * This is a new session and so alpn_selected should have
+                     * been initialised to NULL. We should update it with the
+                     * selected ALPN.
+                     */
+                    if (!ossl_assert(s->session->ext.alpn_selected == NULL)) {
+                        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                                 SSL_F_TLS_HANDLE_ALPN,
+                                 ERR_R_INTERNAL_ERROR);
+                        return 0;
+                    }
+                    s->session->ext.alpn_selected = OPENSSL_memdup(selected,
+                                                                   selected_len);
+                    if (s->session->ext.alpn_selected == NULL) {
+                        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                                 SSL_F_TLS_HANDLE_ALPN,
+                                 ERR_R_INTERNAL_ERROR);
+                        return 0;
+                    }
+                    s->session->ext.alpn_selected_len = selected_len;
+                }
+            }
+
+            return 1;
+        } else if (r != SSL_TLSEXT_ERR_NOACK) {
+            SSLfatal(s, SSL_AD_NO_APPLICATION_PROTOCOL, SSL_F_TLS_HANDLE_ALPN,
+                     SSL_R_NO_APPLICATION_PROTOCOL);
+            return 0;
+        }
+        /*
+         * If r == SSL_TLSEXT_ERR_NOACK then behave as if no callback was
+         * present.
+         */
+    }
+
+    /* Check ALPN is consistent with session */
+    if (s->session->ext.alpn_selected != NULL) {
+        /* Not consistent so can't be used for early_data */
+        s->ext.early_data_ok = 0;
+    }
+
+    return 1;
+}
+
+WORK_STATE tls_post_process_client_hello(SSL *s, WORK_STATE wst)
+{
+    const SSL_CIPHER *cipher;
+
+    if (wst == WORK_MORE_A) {
+        int rv = tls_early_post_process_client_hello(s);
+        if (rv == 0) {
+            /* SSLfatal() was already called */
+            goto err;
+        }
+        if (rv < 0)
+            return WORK_MORE_A;
+        wst = WORK_MORE_B;
+    }
+    if (wst == WORK_MORE_B) {
+        if (!s->hit || SSL_IS_TLS13(s)) {
+            /* Let cert callback update server certificates if required */
+            if (!s->hit) {
+                if (s->cert->cert_cb != NULL) {
+                    int rv = s->cert->cert_cb(s, s->cert->cert_cb_arg);
+                    if (rv == 0) {
+                        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                                 SSL_F_TLS_POST_PROCESS_CLIENT_HELLO,
+                                 SSL_R_CERT_CB_ERROR);
+                        goto err;
+                    }
+                    if (rv < 0) {
+                        s->rwstate = SSL_X509_LOOKUP;
+                        return WORK_MORE_B;
+                    }
+                    s->rwstate = SSL_NOTHING;
+                }
+                if (!tls1_set_server_sigalgs(s)) {
+                    /* SSLfatal already called */
+                    goto err;
+                }
+            }
+
+            /* In TLSv1.3 we selected the ciphersuite before resumption */
+            if (!SSL_IS_TLS13(s)) {
+                cipher =
+                    ssl3_choose_cipher(s, s->session->ciphers, SSL_get_ciphers(s));
+
+                if (cipher == NULL) {
+                    SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                             SSL_F_TLS_POST_PROCESS_CLIENT_HELLO,
+                             SSL_R_NO_SHARED_CIPHER);
+                    goto err;
+                }
+                s->s3->tmp.new_cipher = cipher;
+            }
+            if (!s->hit) {
+                if (!tls_choose_sigalg(s, 1)) {
+                    /* SSLfatal already called */
+                    goto err;
+                }
+                /* check whether we should disable session resumption */
+                if (s->not_resumable_session_cb != NULL)
+                    s->session->not_resumable =
+                        s->not_resumable_session_cb(s,
+                            ((s->s3->tmp.new_cipher->algorithm_mkey
+                              & (SSL_kDHE | SSL_kECDHE)) != 0));
+                if (s->session->not_resumable)
+                    /* do not send a session ticket */
+                    s->ext.ticket_expected = 0;
+            }
+        } else {
+            /* Session-id reuse */
+            s->s3->tmp.new_cipher = s->session->cipher;
+        }
+
+        /*-
+         * we now have the following setup.
+         * client_random
+         * cipher_list          - our preferred list of ciphers
+         * ciphers              - the clients preferred list of ciphers
+         * compression          - basically ignored right now
+         * ssl version is set   - sslv3
+         * s->session           - The ssl session has been setup.
+         * s->hit               - session reuse flag
+         * s->s3->tmp.new_cipher- the new cipher to use.
+         */
+
+        /*
+         * Call status_request callback if needed. Has to be done after the
+         * certificate callbacks etc above.
+         */
+        if (!tls_handle_status_request(s)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+        /*
+         * Call alpn_select callback if needed.  Has to be done after SNI and
+         * cipher negotiation (HTTP/2 restricts permitted ciphers). In TLSv1.3
+         * we already did this because cipher negotiation happens earlier, and
+         * we must handle ALPN before we decide whether to accept early_data.
+         */
+        if (!SSL_IS_TLS13(s) && !tls_handle_alpn(s)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+
+        wst = WORK_MORE_C;
+    }
+#ifndef OPENSSL_NO_SRP
+    if (wst == WORK_MORE_C) {
+        int ret;
+        if ((ret = ssl_check_srp_ext_ClientHello(s)) == 0) {
+            /*
+             * callback indicates further work to be done
+             */
+            s->rwstate = SSL_X509_LOOKUP;
+            return WORK_MORE_C;
+        }
+        if (ret < 0) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    }
+#endif
+
+    return WORK_FINISHED_STOP;
+ err:
+    return WORK_ERROR;
+}
+
+int tls_construct_server_hello(SSL *s, WPACKET *pkt)
+{
+    int compm;
+    size_t sl, len;
+    int version;
+    unsigned char *session_id;
+    int usetls13 = SSL_IS_TLS13(s) || s->hello_retry_request == SSL_HRR_PENDING;
+
+    version = usetls13 ? TLS1_2_VERSION : s->version;
+    if (!WPACKET_put_bytes_u16(pkt, version)
+               /*
+                * Random stuff. Filling of the server_random takes place in
+                * tls_process_client_hello()
+                */
+            || !WPACKET_memcpy(pkt,
+                               s->hello_retry_request == SSL_HRR_PENDING
+                                   ? hrrrandom : s->s3->server_random,
+                               SSL3_RANDOM_SIZE)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_SERVER_HELLO,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    /*-
+     * There are several cases for the session ID to send
+     * back in the server hello:
+     * - For session reuse from the session cache,
+     *   we send back the old session ID.
+     * - If stateless session reuse (using a session ticket)
+     *   is successful, we send back the client's "session ID"
+     *   (which doesn't actually identify the session).
+     * - If it is a new session, we send back the new
+     *   session ID.
+     * - However, if we want the new session to be single-use,
+     *   we send back a 0-length session ID.
+     * - In TLSv1.3 we echo back the session id sent to us by the client
+     *   regardless
+     * s->hit is non-zero in either case of session reuse,
+     * so the following won't overwrite an ID that we're supposed
+     * to send back.
+     */
+    if (s->session->not_resumable ||
+        (!(s->ctx->session_cache_mode & SSL_SESS_CACHE_SERVER)
+         && !s->hit))
+        s->session->session_id_length = 0;
+
+    if (usetls13) {
+        sl = s->tmp_session_id_len;
+        session_id = s->tmp_session_id;
+    } else {
+        sl = s->session->session_id_length;
+        session_id = s->session->session_id;
+    }
+
+    if (sl > sizeof(s->session->session_id)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_SERVER_HELLO,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    /* set up the compression method */
+#ifdef OPENSSL_NO_COMP
+    compm = 0;
+#else
+    if (usetls13 || s->s3->tmp.new_compression == NULL)
+        compm = 0;
+    else
+        compm = s->s3->tmp.new_compression->id;
+#endif
+
+    if (!WPACKET_sub_memcpy_u8(pkt, session_id, sl)
+            || !s->method->put_cipher_by_char(s->s3->tmp.new_cipher, pkt, &len)
+            || !WPACKET_put_bytes_u8(pkt, compm)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_SERVER_HELLO,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (!tls_construct_extensions(s, pkt,
+                                  s->hello_retry_request == SSL_HRR_PENDING
+                                      ? SSL_EXT_TLS1_3_HELLO_RETRY_REQUEST
+                                      : (SSL_IS_TLS13(s)
+                                          ? SSL_EXT_TLS1_3_SERVER_HELLO
+                                          : SSL_EXT_TLS1_2_SERVER_HELLO),
+                                  NULL, 0)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    if (s->hello_retry_request == SSL_HRR_PENDING) {
+        /* Ditch the session. We'll create a new one next time around */
+        SSL_SESSION_free(s->session);
+        s->session = NULL;
+        s->hit = 0;
+
+        /*
+         * Re-initialise the Transcript Hash. We're going to prepopulate it with
+         * a synthetic message_hash in place of ClientHello1.
+         */
+        if (!create_synthetic_message_hash(s, NULL, 0, NULL, 0)) {
+            /* SSLfatal() already called */
+            return 0;
+        }
+    } else if (!(s->verify_mode & SSL_VERIFY_PEER)
+                && !ssl3_digest_cached_records(s, 0)) {
+        /* SSLfatal() already called */;
+        return 0;
+    }
+
+    return 1;
+}
+
+int tls_construct_server_done(SSL *s, WPACKET *pkt)
+{
+    if (!s->s3->tmp.cert_request) {
+        if (!ssl3_digest_cached_records(s, 0)) {
+            /* SSLfatal() already called */
+            return 0;
+        }
+    }
+    return 1;
+}
+
+int tls_construct_server_key_exchange(SSL *s, WPACKET *pkt)
+{
+#ifndef OPENSSL_NO_DH
+    EVP_PKEY *pkdh = NULL;
+#endif
+#ifndef OPENSSL_NO_EC
+    unsigned char *encodedPoint = NULL;
+    size_t encodedlen = 0;
+    int curve_id = 0;
+#endif
+    const SIGALG_LOOKUP *lu = s->s3->tmp.sigalg;
+    int i;
+    unsigned long type;
+    const BIGNUM *r[4];
+    EVP_MD_CTX *md_ctx = EVP_MD_CTX_new();
+    EVP_PKEY_CTX *pctx = NULL;
+    size_t paramlen, paramoffset;
+
+    if (!WPACKET_get_total_written(pkt, &paramoffset)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    if (md_ctx == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    type = s->s3->tmp.new_cipher->algorithm_mkey;
+
+    r[0] = r[1] = r[2] = r[3] = NULL;
+#ifndef OPENSSL_NO_PSK
+    /* Plain PSK or RSAPSK nothing to do */
+    if (type & (SSL_kPSK | SSL_kRSAPSK)) {
+    } else
+#endif                          /* !OPENSSL_NO_PSK */
+#ifndef OPENSSL_NO_DH
+    if (type & (SSL_kDHE | SSL_kDHEPSK)) {
+        CERT *cert = s->cert;
+
+        EVP_PKEY *pkdhp = NULL;
+        DH *dh;
+
+        if (s->cert->dh_tmp_auto) {
+            DH *dhp = ssl_get_auto_dh(s);
+            pkdh = EVP_PKEY_new();
+            if (pkdh == NULL || dhp == NULL) {
+                DH_free(dhp);
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                         ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+            EVP_PKEY_assign_DH(pkdh, dhp);
+            pkdhp = pkdh;
+        } else {
+            pkdhp = cert->dh_tmp;
+        }
+        if ((pkdhp == NULL) && (s->cert->dh_tmp_cb != NULL)) {
+            DH *dhp = s->cert->dh_tmp_cb(s, 0, 1024);
+            pkdh = ssl_dh_to_pkey(dhp);
+            if (pkdh == NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                         ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+            pkdhp = pkdh;
+        }
+        if (pkdhp == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                     SSL_R_MISSING_TMP_DH_KEY);
+            goto err;
+        }
+        if (!ssl_security(s, SSL_SECOP_TMP_DH,
+                          EVP_PKEY_security_bits(pkdhp), 0, pkdhp)) {
+            SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                     SSL_R_DH_KEY_TOO_SMALL);
+            goto err;
+        }
+        if (s->s3->tmp.pkey != NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        s->s3->tmp.pkey = ssl_generate_pkey(pkdhp);
+        if (s->s3->tmp.pkey == NULL) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+
+        dh = EVP_PKEY_get0_DH(s->s3->tmp.pkey);
+        if (dh == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        EVP_PKEY_free(pkdh);
+        pkdh = NULL;
+
+        DH_get0_pqg(dh, &r[0], NULL, &r[1]);
+        DH_get0_key(dh, &r[2], NULL);
+    } else
+#endif
+#ifndef OPENSSL_NO_EC
+    if (type & (SSL_kECDHE | SSL_kECDHEPSK)) {
+
+        if (s->s3->tmp.pkey != NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        /* Get NID of appropriate shared curve */
+        curve_id = tls1_shared_group(s, -2);
+        if (curve_id == 0) {
+            SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                     SSL_R_UNSUPPORTED_ELLIPTIC_CURVE);
+            goto err;
+        }
+        s->s3->tmp.pkey = ssl_generate_pkey_group(s, curve_id);
+        /* Generate a new key for this curve */
+        if (s->s3->tmp.pkey == NULL) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+
+        /* Encode the public key. */
+        encodedlen = EVP_PKEY_get1_tls_encodedpoint(s->s3->tmp.pkey,
+                                                    &encodedPoint);
+        if (encodedlen == 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE, ERR_R_EC_LIB);
+            goto err;
+        }
+
+        /*
+         * We'll generate the serverKeyExchange message explicitly so we
+         * can set these to NULLs
+         */
+        r[0] = NULL;
+        r[1] = NULL;
+        r[2] = NULL;
+        r[3] = NULL;
+    } else
+#endif                          /* !OPENSSL_NO_EC */
+#ifndef OPENSSL_NO_SRP
+    if (type & SSL_kSRP) {
+        if ((s->srp_ctx.N == NULL) ||
+            (s->srp_ctx.g == NULL) ||
+            (s->srp_ctx.s == NULL) || (s->srp_ctx.B == NULL)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                     SSL_R_MISSING_SRP_PARAM);
+            goto err;
+        }
+        r[0] = s->srp_ctx.N;
+        r[1] = s->srp_ctx.g;
+        r[2] = s->srp_ctx.s;
+        r[3] = s->srp_ctx.B;
+    } else
+#endif
+    {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                 SSL_R_UNKNOWN_KEY_EXCHANGE_TYPE);
+        goto err;
+    }
+
+    if (((s->s3->tmp.new_cipher->algorithm_auth & (SSL_aNULL | SSL_aSRP)) != 0)
+        || ((s->s3->tmp.new_cipher->algorithm_mkey & SSL_PSK)) != 0) {
+        lu = NULL;
+    } else if (lu == NULL) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
+                 SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+#ifndef OPENSSL_NO_PSK
+    if (type & SSL_PSK) {
+        size_t len = (s->cert->psk_identity_hint == NULL)
+                        ? 0 : strlen(s->cert->psk_identity_hint);
+
+        /*
+         * It should not happen that len > PSK_MAX_IDENTITY_LEN - we already
+         * checked this when we set the identity hint - but just in case
+         */
+        if (len > PSK_MAX_IDENTITY_LEN
+                || !WPACKET_sub_memcpy_u16(pkt, s->cert->psk_identity_hint,
+                                           len)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+    }
+#endif
+
+    for (i = 0; i < 4 && r[i] != NULL; i++) {
+        unsigned char *binval;
+        int res;
+
+#ifndef OPENSSL_NO_SRP
+        if ((i == 2) && (type & SSL_kSRP)) {
+            res = WPACKET_start_sub_packet_u8(pkt);
+        } else
+#endif
+            res = WPACKET_start_sub_packet_u16(pkt);
+
+        if (!res) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+#ifndef OPENSSL_NO_DH
+        /*-
+         * for interoperability with some versions of the Microsoft TLS
+         * stack, we need to zero pad the DHE pub key to the same length
+         * as the prime
+         */
+        if ((i == 2) && (type & (SSL_kDHE | SSL_kDHEPSK))) {
+            size_t len = BN_num_bytes(r[0]) - BN_num_bytes(r[2]);
+
+            if (len > 0) {
+                if (!WPACKET_allocate_bytes(pkt, len, &binval)) {
+                    SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                             SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                             ERR_R_INTERNAL_ERROR);
+                    goto err;
+                }
+                memset(binval, 0, len);
+            }
+        }
+#endif
+        if (!WPACKET_allocate_bytes(pkt, BN_num_bytes(r[i]), &binval)
+                || !WPACKET_close(pkt)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+
+        BN_bn2bin(r[i], binval);
+    }
+
+#ifndef OPENSSL_NO_EC
+    if (type & (SSL_kECDHE | SSL_kECDHEPSK)) {
+        /*
+         * We only support named (not generic) curves. In this situation, the
+         * ServerKeyExchange message has: [1 byte CurveType], [2 byte CurveName]
+         * [1 byte length of encoded point], followed by the actual encoded
+         * point itself
+         */
+        if (!WPACKET_put_bytes_u8(pkt, NAMED_CURVE_TYPE)
+                || !WPACKET_put_bytes_u8(pkt, 0)
+                || !WPACKET_put_bytes_u8(pkt, curve_id)
+                || !WPACKET_sub_memcpy_u8(pkt, encodedPoint, encodedlen)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        OPENSSL_free(encodedPoint);
+        encodedPoint = NULL;
+    }
+#endif
+
+    /* not anonymous */
+    if (lu != NULL) {
+        EVP_PKEY *pkey = s->s3->tmp.cert->privatekey;
+        const EVP_MD *md;
+        unsigned char *sigbytes1, *sigbytes2, *tbs;
+        size_t siglen, tbslen;
+        int rv;
+
+        if (pkey == NULL || !tls1_lookup_md(lu, &md)) {
+            /* Should never happen */
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        /* Get length of the parameters we have written above */
+        if (!WPACKET_get_length(pkt, &paramlen)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        /* send signature algorithm */
+        if (SSL_USE_SIGALGS(s) && !WPACKET_put_bytes_u16(pkt, lu->sigalg)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        /*
+         * Create the signature. We don't know the actual length of the sig
+         * until after we've created it, so we reserve enough bytes for it
+         * up front, and then properly allocate them in the WPACKET
+         * afterwards.
+         */
+        siglen = EVP_PKEY_size(pkey);
+        if (!WPACKET_sub_reserve_bytes_u16(pkt, siglen, &sigbytes1)
+            || EVP_DigestSignInit(md_ctx, &pctx, md, NULL, pkey) <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        if (lu->sig == EVP_PKEY_RSA_PSS) {
+            if (EVP_PKEY_CTX_set_rsa_padding(pctx, RSA_PKCS1_PSS_PADDING) <= 0
+                || EVP_PKEY_CTX_set_rsa_pss_saltlen(pctx, RSA_PSS_SALTLEN_DIGEST) <= 0) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                        ERR_R_EVP_LIB);
+                goto err;
+            }
+        }
+        tbslen = construct_key_exchange_tbs(s, &tbs,
+                                            s->init_buf->data + paramoffset,
+                                            paramlen);
+        if (tbslen == 0) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+        rv = EVP_DigestSign(md_ctx, sigbytes1, &siglen, tbs, tbslen);
+        OPENSSL_free(tbs);
+        if (rv <= 0 || !WPACKET_sub_allocate_bytes_u16(pkt, siglen, &sigbytes2)
+            || sigbytes1 != sigbytes2) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_SERVER_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+    }
+
+    EVP_MD_CTX_free(md_ctx);
+    return 1;
+ err:
+#ifndef OPENSSL_NO_DH
+    EVP_PKEY_free(pkdh);
+#endif
+#ifndef OPENSSL_NO_EC
+    OPENSSL_free(encodedPoint);
+#endif
+    EVP_MD_CTX_free(md_ctx);
+    return 0;
+}
+
+int tls_construct_certificate_request(SSL *s, WPACKET *pkt)
+{
+    if (SSL_IS_TLS13(s)) {
+        /* Send random context when doing post-handshake auth */
+        if (s->post_handshake_auth == SSL_PHA_REQUEST_PENDING) {
+            OPENSSL_free(s->pha_context);
+            s->pha_context_len = 32;
+            if ((s->pha_context = OPENSSL_malloc(s->pha_context_len)) == NULL
+                    || RAND_bytes(s->pha_context, s->pha_context_len) <= 0
+                    || !WPACKET_sub_memcpy_u8(pkt, s->pha_context, s->pha_context_len)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_CONSTRUCT_CERTIFICATE_REQUEST,
+                         ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+            /* reset the handshake hash back to just after the ClientFinished */
+            if (!tls13_restore_handshake_digest_for_pha(s)) {
+                /* SSLfatal() already called */
+                return 0;
+            }
+        } else {
+            if (!WPACKET_put_bytes_u8(pkt, 0)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_CONSTRUCT_CERTIFICATE_REQUEST,
+                         ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+        }
+
+        if (!tls_construct_extensions(s, pkt,
+                                      SSL_EXT_TLS1_3_CERTIFICATE_REQUEST, NULL,
+                                      0)) {
+            /* SSLfatal() already called */
+            return 0;
+        }
+        goto done;
+    }
+
+    /* get the list of acceptable cert types */
+    if (!WPACKET_start_sub_packet_u8(pkt)
+        || !ssl3_get_req_cert_type(s, pkt) || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CERTIFICATE_REQUEST, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (SSL_USE_SIGALGS(s)) {
+        const uint16_t *psigs;
+        size_t nl = tls12_get_psigalgs(s, 1, &psigs);
+
+        if (!WPACKET_start_sub_packet_u16(pkt)
+                || !WPACKET_set_flags(pkt, WPACKET_FLAGS_NON_ZERO_LENGTH)
+                || !tls12_copy_sigalgs(s, pkt, psigs, nl)
+                || !WPACKET_close(pkt)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_CERTIFICATE_REQUEST,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+    }
+
+    if (!construct_ca_names(s, get_ca_names(s), pkt)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+ done:
+    s->certreqs_sent++;
+    s->s3->tmp.cert_request = 1;
+    return 1;
+}
+
+static int tls_process_cke_psk_preamble(SSL *s, PACKET *pkt)
+{
+#ifndef OPENSSL_NO_PSK
+    unsigned char psk[PSK_MAX_PSK_LEN];
+    size_t psklen;
+    PACKET psk_identity;
+
+    if (!PACKET_get_length_prefixed_2(pkt, &psk_identity)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CKE_PSK_PREAMBLE,
+                 SSL_R_LENGTH_MISMATCH);
+        return 0;
+    }
+    if (PACKET_remaining(&psk_identity) > PSK_MAX_IDENTITY_LEN) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CKE_PSK_PREAMBLE,
+                 SSL_R_DATA_LENGTH_TOO_LONG);
+        return 0;
+    }
+    if (s->psk_server_callback == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_PSK_PREAMBLE,
+                 SSL_R_PSK_NO_SERVER_CB);
+        return 0;
+    }
+
+    if (!PACKET_strndup(&psk_identity, &s->session->psk_identity)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_PSK_PREAMBLE,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    psklen = s->psk_server_callback(s, s->session->psk_identity,
+                                    psk, sizeof(psk));
+
+    if (psklen > PSK_MAX_PSK_LEN) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_PSK_PREAMBLE,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    } else if (psklen == 0) {
+        /*
+         * PSK related to the given identity not found
+         */
+        SSLfatal(s, SSL_AD_UNKNOWN_PSK_IDENTITY,
+                 SSL_F_TLS_PROCESS_CKE_PSK_PREAMBLE,
+                 SSL_R_PSK_IDENTITY_NOT_FOUND);
+        return 0;
+    }
+
+    OPENSSL_free(s->s3->tmp.psk);
+    s->s3->tmp.psk = OPENSSL_memdup(psk, psklen);
+    OPENSSL_cleanse(psk, psklen);
+
+    if (s->s3->tmp.psk == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_PROCESS_CKE_PSK_PREAMBLE, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    s->s3->tmp.psklen = psklen;
+
+    return 1;
+#else
+    /* Should never happen */
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_PSK_PREAMBLE,
+             ERR_R_INTERNAL_ERROR);
+    return 0;
+#endif
+}
+
+static int tls_process_cke_rsa(SSL *s, PACKET *pkt)
+{
+#ifndef OPENSSL_NO_RSA
+    unsigned char rand_premaster_secret[SSL_MAX_MASTER_KEY_LENGTH];
+    int decrypt_len;
+    unsigned char decrypt_good, version_good;
+    size_t j, padding_len;
+    PACKET enc_premaster;
+    RSA *rsa = NULL;
+    unsigned char *rsa_decrypt = NULL;
+    int ret = 0;
+
+    rsa = EVP_PKEY_get0_RSA(s->cert->pkeys[SSL_PKEY_RSA].privatekey);
+    if (rsa == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_RSA,
+                 SSL_R_MISSING_RSA_CERTIFICATE);
+        return 0;
+    }
+
+    /* SSLv3 and pre-standard DTLS omit the length bytes. */
+    if (s->version == SSL3_VERSION || s->version == DTLS1_BAD_VER) {
+        enc_premaster = *pkt;
+    } else {
+        if (!PACKET_get_length_prefixed_2(pkt, &enc_premaster)
+            || PACKET_remaining(pkt) != 0) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CKE_RSA,
+                     SSL_R_LENGTH_MISMATCH);
+            return 0;
+        }
+    }
+
+    /*
+     * We want to be sure that the plaintext buffer size makes it safe to
+     * iterate over the entire size of a premaster secret
+     * (SSL_MAX_MASTER_KEY_LENGTH). Reject overly short RSA keys because
+     * their ciphertext cannot accommodate a premaster secret anyway.
+     */
+    if (RSA_size(rsa) < SSL_MAX_MASTER_KEY_LENGTH) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_RSA,
+                 RSA_R_KEY_SIZE_TOO_SMALL);
+        return 0;
+    }
+
+    rsa_decrypt = OPENSSL_malloc(RSA_size(rsa));
+    if (rsa_decrypt == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_RSA,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    /*
+     * We must not leak whether a decryption failure occurs because of
+     * Bleichenbacher's attack on PKCS #1 v1.5 RSA padding (see RFC 2246,
+     * section 7.4.7.1). The code follows that advice of the TLS RFC and
+     * generates a random premaster secret for the case that the decrypt
+     * fails. See https://tools.ietf.org/html/rfc5246#section-7.4.7.1
+     */
+
+    if (RAND_priv_bytes(rand_premaster_secret,
+                      sizeof(rand_premaster_secret)) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_RSA,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    /*
+     * Decrypt with no padding. PKCS#1 padding will be removed as part of
+     * the timing-sensitive code below.
+     */
+     /* TODO(size_t): Convert this function */
+    decrypt_len = (int)RSA_private_decrypt((int)PACKET_remaining(&enc_premaster),
+                                           PACKET_data(&enc_premaster),
+                                           rsa_decrypt, rsa, RSA_NO_PADDING);
+    if (decrypt_len < 0) {
+        SSLfatal(s, SSL_AD_DECRYPT_ERROR, SSL_F_TLS_PROCESS_CKE_RSA,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    /* Check the padding. See RFC 3447, section 7.2.2. */
+
+    /*
+     * The smallest padded premaster is 11 bytes of overhead. Small keys
+     * are publicly invalid, so this may return immediately. This ensures
+     * PS is at least 8 bytes.
+     */
+    if (decrypt_len < 11 + SSL_MAX_MASTER_KEY_LENGTH) {
+        SSLfatal(s, SSL_AD_DECRYPT_ERROR, SSL_F_TLS_PROCESS_CKE_RSA,
+                 SSL_R_DECRYPTION_FAILED);
+        goto err;
+    }
+
+    padding_len = decrypt_len - SSL_MAX_MASTER_KEY_LENGTH;
+    decrypt_good = constant_time_eq_int_8(rsa_decrypt[0], 0) &
+        constant_time_eq_int_8(rsa_decrypt[1], 2);
+    for (j = 2; j < padding_len - 1; j++) {
+        decrypt_good &= ~constant_time_is_zero_8(rsa_decrypt[j]);
+    }
+    decrypt_good &= constant_time_is_zero_8(rsa_decrypt[padding_len - 1]);
+
+    /*
+     * If the version in the decrypted pre-master secret is correct then
+     * version_good will be 0xff, otherwise it'll be zero. The
+     * Klima-Pokorny-Rosa extension of Bleichenbacher's attack
+     * (http://eprint.iacr.org/2003/052/) exploits the version number
+     * check as a "bad version oracle". Thus version checks are done in
+     * constant time and are treated like any other decryption error.
+     */
+    version_good =
+        constant_time_eq_8(rsa_decrypt[padding_len],
+                           (unsigned)(s->client_version >> 8));
+    version_good &=
+        constant_time_eq_8(rsa_decrypt[padding_len + 1],
+                           (unsigned)(s->client_version & 0xff));
+
+    /*
+     * The premaster secret must contain the same version number as the
+     * ClientHello to detect version rollback attacks (strangely, the
+     * protocol does not offer such protection for DH ciphersuites).
+     * However, buggy clients exist that send the negotiated protocol
+     * version instead if the server does not support the requested
+     * protocol version. If SSL_OP_TLS_ROLLBACK_BUG is set, tolerate such
+     * clients.
+     */
+    if (s->options & SSL_OP_TLS_ROLLBACK_BUG) {
+        unsigned char workaround_good;
+        workaround_good = constant_time_eq_8(rsa_decrypt[padding_len],
+                                             (unsigned)(s->version >> 8));
+        workaround_good &=
+            constant_time_eq_8(rsa_decrypt[padding_len + 1],
+                               (unsigned)(s->version & 0xff));
+        version_good |= workaround_good;
+    }
+
+    /*
+     * Both decryption and version must be good for decrypt_good to
+     * remain non-zero (0xff).
+     */
+    decrypt_good &= version_good;
+
+    /*
+     * Now copy rand_premaster_secret over from p using
+     * decrypt_good_mask. If decryption failed, then p does not
+     * contain valid plaintext, however, a check above guarantees
+     * it is still sufficiently large to read from.
+     */
+    for (j = 0; j < sizeof(rand_premaster_secret); j++) {
+        rsa_decrypt[padding_len + j] =
+            constant_time_select_8(decrypt_good,
+                                   rsa_decrypt[padding_len + j],
+                                   rand_premaster_secret[j]);
+    }
+
+    if (!ssl_generate_master_secret(s, rsa_decrypt + padding_len,
+                                    sizeof(rand_premaster_secret), 0)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    ret = 1;
+ err:
+    OPENSSL_free(rsa_decrypt);
+    return ret;
+#else
+    /* Should never happen */
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_RSA,
+             ERR_R_INTERNAL_ERROR);
+    return 0;
+#endif
+}
+
+static int tls_process_cke_dhe(SSL *s, PACKET *pkt)
+{
+#ifndef OPENSSL_NO_DH
+    EVP_PKEY *skey = NULL;
+    DH *cdh;
+    unsigned int i;
+    BIGNUM *pub_key;
+    const unsigned char *data;
+    EVP_PKEY *ckey = NULL;
+    int ret = 0;
+
+    if (!PACKET_get_net_2(pkt, &i) || PACKET_remaining(pkt) != i) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CKE_DHE,
+               SSL_R_DH_PUBLIC_VALUE_LENGTH_IS_WRONG);
+        goto err;
+    }
+    skey = s->s3->tmp.pkey;
+    if (skey == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_DHE,
+                 SSL_R_MISSING_TMP_DH_KEY);
+        goto err;
+    }
+
+    if (PACKET_remaining(pkt) == 0L) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CKE_DHE,
+                 SSL_R_MISSING_TMP_DH_KEY);
+        goto err;
+    }
+    if (!PACKET_get_bytes(pkt, &data, i)) {
+        /* We already checked we have enough data */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_DHE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    ckey = EVP_PKEY_new();
+    if (ckey == NULL || EVP_PKEY_copy_parameters(ckey, skey) == 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_DHE,
+                 SSL_R_BN_LIB);
+        goto err;
+    }
+
+    cdh = EVP_PKEY_get0_DH(ckey);
+    pub_key = BN_bin2bn(data, i, NULL);
+    if (pub_key == NULL || cdh == NULL || !DH_set0_key(cdh, pub_key, NULL)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_DHE,
+                 ERR_R_INTERNAL_ERROR);
+        BN_free(pub_key);
+        goto err;
+    }
+
+    if (ssl_derive(s, skey, ckey, 1) == 0) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    ret = 1;
+    EVP_PKEY_free(s->s3->tmp.pkey);
+    s->s3->tmp.pkey = NULL;
+ err:
+    EVP_PKEY_free(ckey);
+    return ret;
+#else
+    /* Should never happen */
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_DHE,
+             ERR_R_INTERNAL_ERROR);
+    return 0;
+#endif
+}
+
+static int tls_process_cke_ecdhe(SSL *s, PACKET *pkt)
+{
+#ifndef OPENSSL_NO_EC
+    EVP_PKEY *skey = s->s3->tmp.pkey;
+    EVP_PKEY *ckey = NULL;
+    int ret = 0;
+
+    if (PACKET_remaining(pkt) == 0L) {
+        /* We don't support ECDH client auth */
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_TLS_PROCESS_CKE_ECDHE,
+                 SSL_R_MISSING_TMP_ECDH_KEY);
+        goto err;
+    } else {
+        unsigned int i;
+        const unsigned char *data;
+
+        /*
+         * Get client's public key from encoded point in the
+         * ClientKeyExchange message.
+         */
+
+        /* Get encoded point length */
+        if (!PACKET_get_1(pkt, &i) || !PACKET_get_bytes(pkt, &data, i)
+            || PACKET_remaining(pkt) != 0) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CKE_ECDHE,
+                     SSL_R_LENGTH_MISMATCH);
+            goto err;
+        }
+        if (skey == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_ECDHE,
+                     SSL_R_MISSING_TMP_ECDH_KEY);
+            goto err;
+        }
+
+        ckey = EVP_PKEY_new();
+        if (ckey == NULL || EVP_PKEY_copy_parameters(ckey, skey) <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_ECDHE,
+                     ERR_R_EVP_LIB);
+            goto err;
+        }
+        if (EVP_PKEY_set1_tls_encodedpoint(ckey, data, i) == 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_ECDHE,
+                     ERR_R_EC_LIB);
+            goto err;
+        }
+    }
+
+    if (ssl_derive(s, skey, ckey, 1) == 0) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    ret = 1;
+    EVP_PKEY_free(s->s3->tmp.pkey);
+    s->s3->tmp.pkey = NULL;
+ err:
+    EVP_PKEY_free(ckey);
+
+    return ret;
+#else
+    /* Should never happen */
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_ECDHE,
+             ERR_R_INTERNAL_ERROR);
+    return 0;
+#endif
+}
+
+static int tls_process_cke_srp(SSL *s, PACKET *pkt)
+{
+#ifndef OPENSSL_NO_SRP
+    unsigned int i;
+    const unsigned char *data;
+
+    if (!PACKET_get_net_2(pkt, &i)
+        || !PACKET_get_bytes(pkt, &data, i)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CKE_SRP,
+                 SSL_R_BAD_SRP_A_LENGTH);
+        return 0;
+    }
+    if ((s->srp_ctx.A = BN_bin2bn(data, i, NULL)) == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_SRP,
+                 ERR_R_BN_LIB);
+        return 0;
+    }
+    if (BN_ucmp(s->srp_ctx.A, s->srp_ctx.N) >= 0 || BN_is_zero(s->srp_ctx.A)) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS_PROCESS_CKE_SRP,
+                 SSL_R_BAD_SRP_PARAMETERS);
+        return 0;
+    }
+    OPENSSL_free(s->session->srp_username);
+    s->session->srp_username = OPENSSL_strdup(s->srp_ctx.login);
+    if (s->session->srp_username == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_SRP,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+
+    if (!srp_generate_server_master_secret(s)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    return 1;
+#else
+    /* Should never happen */
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_SRP,
+             ERR_R_INTERNAL_ERROR);
+    return 0;
+#endif
+}
+
+static int tls_process_cke_gost(SSL *s, PACKET *pkt)
+{
+#ifndef OPENSSL_NO_GOST
+    EVP_PKEY_CTX *pkey_ctx;
+    EVP_PKEY *client_pub_pkey = NULL, *pk = NULL;
+    unsigned char premaster_secret[32];
+    const unsigned char *start;
+    size_t outlen = 32, inlen;
+    unsigned long alg_a;
+    unsigned int asn1id, asn1len;
+    int ret = 0;
+    PACKET encdata;
+
+    /* Get our certificate private key */
+    alg_a = s->s3->tmp.new_cipher->algorithm_auth;
+    if (alg_a & SSL_aGOST12) {
+        /*
+         * New GOST ciphersuites have SSL_aGOST01 bit too
+         */
+        pk = s->cert->pkeys[SSL_PKEY_GOST12_512].privatekey;
+        if (pk == NULL) {
+            pk = s->cert->pkeys[SSL_PKEY_GOST12_256].privatekey;
+        }
+        if (pk == NULL) {
+            pk = s->cert->pkeys[SSL_PKEY_GOST01].privatekey;
+        }
+    } else if (alg_a & SSL_aGOST01) {
+        pk = s->cert->pkeys[SSL_PKEY_GOST01].privatekey;
+    }
+
+    pkey_ctx = EVP_PKEY_CTX_new(pk, NULL);
+    if (pkey_ctx == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_GOST,
+                 ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    if (EVP_PKEY_decrypt_init(pkey_ctx) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_GOST,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    /*
+     * If client certificate is present and is of the same type, maybe
+     * use it for key exchange.  Don't mind errors from
+     * EVP_PKEY_derive_set_peer, because it is completely valid to use a
+     * client certificate for authorization only.
+     */
+    client_pub_pkey = X509_get0_pubkey(s->session->peer);
+    if (client_pub_pkey) {
+        if (EVP_PKEY_derive_set_peer(pkey_ctx, client_pub_pkey) <= 0)
+            ERR_clear_error();
+    }
+    /* Decrypt session key */
+    if (!PACKET_get_1(pkt, &asn1id)
+            || asn1id != (V_ASN1_SEQUENCE | V_ASN1_CONSTRUCTED)
+            || !PACKET_peek_1(pkt, &asn1len)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CKE_GOST,
+                 SSL_R_DECRYPTION_FAILED);
+        goto err;
+    }
+    if (asn1len == 0x81) {
+        /*
+         * Long form length. Should only be one byte of length. Anything else
+         * isn't supported.
+         * We did a successful peek before so this shouldn't fail
+         */
+        if (!PACKET_forward(pkt, 1)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_GOST,
+                     SSL_R_DECRYPTION_FAILED);
+            goto err;
+        }
+    } else  if (asn1len >= 0x80) {
+        /*
+         * Indefinite length, or more than one long form length bytes. We don't
+         * support it
+         */
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CKE_GOST,
+                 SSL_R_DECRYPTION_FAILED);
+        goto err;
+    } /* else short form length */
+
+    if (!PACKET_as_length_prefixed_1(pkt, &encdata)) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CKE_GOST,
+                 SSL_R_DECRYPTION_FAILED);
+        goto err;
+    }
+    inlen = PACKET_remaining(&encdata);
+    start = PACKET_data(&encdata);
+
+    if (EVP_PKEY_decrypt(pkey_ctx, premaster_secret, &outlen, start,
+                         inlen) <= 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CKE_GOST,
+                 SSL_R_DECRYPTION_FAILED);
+        goto err;
+    }
+    /* Generate master secret */
+    if (!ssl_generate_master_secret(s, premaster_secret,
+                                    sizeof(premaster_secret), 0)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+    /* Check if pubkey from client certificate was used */
+    if (EVP_PKEY_CTX_ctrl(pkey_ctx, -1, -1, EVP_PKEY_CTRL_PEER_KEY, 2,
+                          NULL) > 0)
+        s->statem.no_cert_verify = 1;
+
+    ret = 1;
+ err:
+    EVP_PKEY_CTX_free(pkey_ctx);
+    return ret;
+#else
+    /* Should never happen */
+    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CKE_GOST,
+             ERR_R_INTERNAL_ERROR);
+    return 0;
+#endif
+}
+
+MSG_PROCESS_RETURN tls_process_client_key_exchange(SSL *s, PACKET *pkt)
+{
+    unsigned long alg_k;
+
+    alg_k = s->s3->tmp.new_cipher->algorithm_mkey;
+
+    /* For PSK parse and retrieve identity, obtain PSK key */
+    if ((alg_k & SSL_PSK) && !tls_process_cke_psk_preamble(s, pkt)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    if (alg_k & SSL_kPSK) {
+        /* Identity extracted earlier: should be nothing left */
+        if (PACKET_remaining(pkt) != 0) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PROCESS_CLIENT_KEY_EXCHANGE,
+                     SSL_R_LENGTH_MISMATCH);
+            goto err;
+        }
+        /* PSK handled by ssl_generate_master_secret */
+        if (!ssl_generate_master_secret(s, NULL, 0, 0)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    } else if (alg_k & (SSL_kRSA | SSL_kRSAPSK)) {
+        if (!tls_process_cke_rsa(s, pkt)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    } else if (alg_k & (SSL_kDHE | SSL_kDHEPSK)) {
+        if (!tls_process_cke_dhe(s, pkt)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    } else if (alg_k & (SSL_kECDHE | SSL_kECDHEPSK)) {
+        if (!tls_process_cke_ecdhe(s, pkt)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    } else if (alg_k & SSL_kSRP) {
+        if (!tls_process_cke_srp(s, pkt)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    } else if (alg_k & SSL_kGOST) {
+        if (!tls_process_cke_gost(s, pkt)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    } else {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_PROCESS_CLIENT_KEY_EXCHANGE,
+                 SSL_R_UNKNOWN_CIPHER_TYPE);
+        goto err;
+    }
+
+    return MSG_PROCESS_CONTINUE_PROCESSING;
+ err:
+#ifndef OPENSSL_NO_PSK
+    OPENSSL_clear_free(s->s3->tmp.psk, s->s3->tmp.psklen);
+    s->s3->tmp.psk = NULL;
+#endif
+    return MSG_PROCESS_ERROR;
+}
+
+WORK_STATE tls_post_process_client_key_exchange(SSL *s, WORK_STATE wst)
+{
+#ifndef OPENSSL_NO_SCTP
+    if (wst == WORK_MORE_A) {
+        if (SSL_IS_DTLS(s)) {
+            unsigned char sctpauthkey[64];
+            char labelbuffer[sizeof(DTLS1_SCTP_AUTH_LABEL)];
+            size_t labellen;
+            /*
+             * Add new shared key for SCTP-Auth, will be ignored if no SCTP
+             * used.
+             */
+            memcpy(labelbuffer, DTLS1_SCTP_AUTH_LABEL,
+                   sizeof(DTLS1_SCTP_AUTH_LABEL));
+
+            /* Don't include the terminating zero. */
+            labellen = sizeof(labelbuffer) - 1;
+            if (s->mode & SSL_MODE_DTLS_SCTP_LABEL_LENGTH_BUG)
+                labellen += 1;
+
+            if (SSL_export_keying_material(s, sctpauthkey,
+                                           sizeof(sctpauthkey), labelbuffer,
+                                           labellen, NULL, 0,
+                                           0) <= 0) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_POST_PROCESS_CLIENT_KEY_EXCHANGE,
+                         ERR_R_INTERNAL_ERROR);
+                return WORK_ERROR;
+            }
+
+            BIO_ctrl(SSL_get_wbio(s), BIO_CTRL_DGRAM_SCTP_ADD_AUTH_KEY,
+                     sizeof(sctpauthkey), sctpauthkey);
+        }
+    }
+#endif
+
+    if (s->statem.no_cert_verify || !s->session->peer) {
+        /*
+         * No certificate verify or no peer certificate so we no longer need
+         * the handshake_buffer
+         */
+        if (!ssl3_digest_cached_records(s, 0)) {
+            /* SSLfatal() already called */
+            return WORK_ERROR;
+        }
+        return WORK_FINISHED_CONTINUE;
+    } else {
+        if (!s->s3->handshake_buffer) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_POST_PROCESS_CLIENT_KEY_EXCHANGE,
+                     ERR_R_INTERNAL_ERROR);
+            return WORK_ERROR;
+        }
+        /*
+         * For sigalgs freeze the handshake buffer. If we support
+         * extms we've done this already so this is a no-op
+         */
+        if (!ssl3_digest_cached_records(s, 1)) {
+            /* SSLfatal() already called */
+            return WORK_ERROR;
+        }
+    }
+
+    return WORK_FINISHED_CONTINUE;
+}
+
+MSG_PROCESS_RETURN tls_process_client_certificate(SSL *s, PACKET *pkt)
+{
+    int i;
+    MSG_PROCESS_RETURN ret = MSG_PROCESS_ERROR;
+    X509 *x = NULL;
+    unsigned long l;
+    const unsigned char *certstart, *certbytes;
+    STACK_OF(X509) *sk = NULL;
+    PACKET spkt, context;
+    size_t chainidx;
+    SSL_SESSION *new_sess = NULL;
+
+    /*
+     * To get this far we must have read encrypted data from the client. We no
+     * longer tolerate unencrypted alerts. This value is ignored if less than
+     * TLSv1.3
+     */
+    s->statem.enc_read_state = ENC_READ_STATE_VALID;
+
+    if ((sk = sk_X509_new_null()) == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    if (SSL_IS_TLS13(s) && (!PACKET_get_length_prefixed_1(pkt, &context)
+                            || (s->pha_context == NULL && PACKET_remaining(&context) != 0)
+                            || (s->pha_context != NULL &&
+                                !PACKET_equal(&context, s->pha_context, s->pha_context_len)))) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE,
+                 SSL_R_INVALID_CONTEXT);
+        goto err;
+    }
+
+    if (!PACKET_get_length_prefixed_3(pkt, &spkt)
+            || PACKET_remaining(pkt) != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE,
+                 SSL_R_LENGTH_MISMATCH);
+        goto err;
+    }
+
+    for (chainidx = 0; PACKET_remaining(&spkt) > 0; chainidx++) {
+        if (!PACKET_get_net_3(&spkt, &l)
+            || !PACKET_get_bytes(&spkt, &certbytes, l)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE,
+                     SSL_R_CERT_LENGTH_MISMATCH);
+            goto err;
+        }
+
+        certstart = certbytes;
+        x = d2i_X509(NULL, (const unsigned char **)&certbytes, l);
+        if (x == NULL) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE, ERR_R_ASN1_LIB);
+            goto err;
+        }
+        if (certbytes != (certstart + l)) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE,
+                     SSL_R_CERT_LENGTH_MISMATCH);
+            goto err;
+        }
+
+        if (SSL_IS_TLS13(s)) {
+            RAW_EXTENSION *rawexts = NULL;
+            PACKET extensions;
+
+            if (!PACKET_get_length_prefixed_2(&spkt, &extensions)) {
+                SSLfatal(s, SSL_AD_DECODE_ERROR,
+                         SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE,
+                         SSL_R_BAD_LENGTH);
+                goto err;
+            }
+            if (!tls_collect_extensions(s, &extensions,
+                                        SSL_EXT_TLS1_3_CERTIFICATE, &rawexts,
+                                        NULL, chainidx == 0)
+                || !tls_parse_all_extensions(s, SSL_EXT_TLS1_3_CERTIFICATE,
+                                             rawexts, x, chainidx,
+                                             PACKET_remaining(&spkt) == 0)) {
+                OPENSSL_free(rawexts);
+                goto err;
+            }
+            OPENSSL_free(rawexts);
+        }
+
+        if (!sk_X509_push(sk, x)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE,
+                     ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        x = NULL;
+    }
+
+    if (sk_X509_num(sk) <= 0) {
+        /* TLS does not mind 0 certs returned */
+        if (s->version == SSL3_VERSION) {
+            SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                     SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE,
+                     SSL_R_NO_CERTIFICATES_RETURNED);
+            goto err;
+        }
+        /* Fail for TLS only if we required a certificate */
+        else if ((s->verify_mode & SSL_VERIFY_PEER) &&
+                 (s->verify_mode & SSL_VERIFY_FAIL_IF_NO_PEER_CERT)) {
+            SSLfatal(s, SSL_AD_CERTIFICATE_REQUIRED,
+                     SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE,
+                     SSL_R_PEER_DID_NOT_RETURN_A_CERTIFICATE);
+            goto err;
+        }
+        /* No client certificate so digest cached records */
+        if (s->s3->handshake_buffer && !ssl3_digest_cached_records(s, 0)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    } else {
+        EVP_PKEY *pkey;
+        i = ssl_verify_cert_chain(s, sk);
+        if (i <= 0) {
+            SSLfatal(s, ssl_x509err2alert(s->verify_result),
+                     SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE,
+                     SSL_R_CERTIFICATE_VERIFY_FAILED);
+            goto err;
+        }
+        if (i > 1) {
+            SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                     SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE, i);
+            goto err;
+        }
+        pkey = X509_get0_pubkey(sk_X509_value(sk, 0));
+        if (pkey == NULL) {
+            SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                     SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE,
+                     SSL_R_UNKNOWN_CERTIFICATE_TYPE);
+            goto err;
+        }
+    }
+
+    /*
+     * Sessions must be immutable once they go into the session cache. Otherwise
+     * we can get multi-thread problems. Therefore we don't "update" sessions,
+     * we replace them with a duplicate. Here, we need to do this every time
+     * a new certificate is received via post-handshake authentication, as the
+     * session may have already gone into the session cache.
+     */
+
+    if (s->post_handshake_auth == SSL_PHA_REQUESTED) {
+        if ((new_sess = ssl_session_dup(s->session, 0)) == 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE,
+                     ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+
+        SSL_SESSION_free(s->session);
+        s->session = new_sess;
+    }
+
+    X509_free(s->session->peer);
+    s->session->peer = sk_X509_shift(sk);
+    s->session->verify_result = s->verify_result;
+
+    sk_X509_pop_free(s->session->peer_chain, X509_free);
+    s->session->peer_chain = sk;
+
+    /*
+     * Freeze the handshake buffer. For <TLS1.3 we do this after the CKE
+     * message
+     */
+    if (SSL_IS_TLS13(s) && !ssl3_digest_cached_records(s, 1)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    /*
+     * Inconsistency alert: cert_chain does *not* include the peer's own
+     * certificate, while we do include it in statem_clnt.c
+     */
+    sk = NULL;
+
+    /* Save the current hash state for when we receive the CertificateVerify */
+    if (SSL_IS_TLS13(s)) {
+        if (!ssl_handshake_hash(s, s->cert_verify_hash,
+                                sizeof(s->cert_verify_hash),
+                                &s->cert_verify_hash_len)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+
+        /* Resend session tickets */
+        s->sent_tickets = 0;
+    }
+
+    ret = MSG_PROCESS_CONTINUE_READING;
+
+ err:
+    X509_free(x);
+    sk_X509_pop_free(sk, X509_free);
+    return ret;
+}
+
+int tls_construct_server_certificate(SSL *s, WPACKET *pkt)
+{
+    CERT_PKEY *cpk = s->s3->tmp.cert;
+
+    if (cpk == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_SERVER_CERTIFICATE, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    /*
+     * In TLSv1.3 the certificate chain is always preceded by a 0 length context
+     * for the server Certificate message
+     */
+    if (SSL_IS_TLS13(s) && !WPACKET_put_bytes_u8(pkt, 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_SERVER_CERTIFICATE, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    if (!ssl3_output_cert_chain(s, pkt, cpk)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    return 1;
+}
+
+static int create_ticket_prequel(SSL *s, WPACKET *pkt, uint32_t age_add,
+                                 unsigned char *tick_nonce)
+{
+    /*
+     * Ticket lifetime hint: For TLSv1.2 this is advisory only and we leave this
+     * unspecified for resumed session (for simplicity).
+     * In TLSv1.3 we reset the "time" field above, and always specify the
+     * timeout.
+     */
+    if (!WPACKET_put_bytes_u32(pkt,
+                               (s->hit && !SSL_IS_TLS13(s))
+                               ? 0 : s->session->timeout)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CREATE_TICKET_PREQUEL,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (SSL_IS_TLS13(s)) {
+        if (!WPACKET_put_bytes_u32(pkt, age_add)
+                || !WPACKET_sub_memcpy_u8(pkt, tick_nonce, TICKET_NONCE_SIZE)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CREATE_TICKET_PREQUEL,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+    }
+
+    /* Start the sub-packet for the actual ticket data */
+    if (!WPACKET_start_sub_packet_u16(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CREATE_TICKET_PREQUEL,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    return 1;
+}
+
+static int construct_stateless_ticket(SSL *s, WPACKET *pkt, uint32_t age_add,
+                                      unsigned char *tick_nonce)
+{
+    unsigned char *senc = NULL;
+    EVP_CIPHER_CTX *ctx = NULL;
+    HMAC_CTX *hctx = NULL;
+    unsigned char *p, *encdata1, *encdata2, *macdata1, *macdata2;
+    const unsigned char *const_p;
+    int len, slen_full, slen, lenfinal;
+    SSL_SESSION *sess;
+    unsigned int hlen;
+    SSL_CTX *tctx = s->session_ctx;
+    unsigned char iv[EVP_MAX_IV_LENGTH];
+    unsigned char key_name[TLSEXT_KEYNAME_LENGTH];
+    int iv_len, ok = 0;
+    size_t macoffset, macendoffset;
+
+    /* get session encoding length */
+    slen_full = i2d_SSL_SESSION(s->session, NULL);
+    /*
+     * Some length values are 16 bits, so forget it if session is too
+     * long
+     */
+    if (slen_full == 0 || slen_full > 0xFF00) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CONSTRUCT_STATELESS_TICKET,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    senc = OPENSSL_malloc(slen_full);
+    if (senc == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_CONSTRUCT_STATELESS_TICKET, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    ctx = EVP_CIPHER_CTX_new();
+    hctx = HMAC_CTX_new();
+    if (ctx == NULL || hctx == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CONSTRUCT_STATELESS_TICKET,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    p = senc;
+    if (!i2d_SSL_SESSION(s->session, &p)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CONSTRUCT_STATELESS_TICKET,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    /*
+     * create a fresh copy (not shared with other threads) to clean up
+     */
+    const_p = senc;
+    sess = d2i_SSL_SESSION(NULL, &const_p, slen_full);
+    if (sess == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CONSTRUCT_STATELESS_TICKET,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    slen = i2d_SSL_SESSION(sess, NULL);
+    if (slen == 0 || slen > slen_full) {
+        /* shouldn't ever happen */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CONSTRUCT_STATELESS_TICKET,
+                 ERR_R_INTERNAL_ERROR);
+        SSL_SESSION_free(sess);
+        goto err;
+    }
+    p = senc;
+    if (!i2d_SSL_SESSION(sess, &p)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CONSTRUCT_STATELESS_TICKET,
+                 ERR_R_INTERNAL_ERROR);
+        SSL_SESSION_free(sess);
+        goto err;
+    }
+    SSL_SESSION_free(sess);
+
+    /*
+     * Initialize HMAC and cipher contexts. If callback present it does
+     * all the work otherwise use generated values from parent ctx.
+     */
+    if (tctx->ext.ticket_key_cb) {
+        /* if 0 is returned, write an empty ticket */
+        int ret = tctx->ext.ticket_key_cb(s, key_name, iv, ctx,
+                                             hctx, 1);
+
+        if (ret == 0) {
+
+            /* Put timeout and length */
+            if (!WPACKET_put_bytes_u32(pkt, 0)
+                    || !WPACKET_put_bytes_u16(pkt, 0)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_CONSTRUCT_STATELESS_TICKET,
+                         ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+            OPENSSL_free(senc);
+            EVP_CIPHER_CTX_free(ctx);
+            HMAC_CTX_free(hctx);
+            return 1;
+        }
+        if (ret < 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CONSTRUCT_STATELESS_TICKET,
+                     SSL_R_CALLBACK_FAILED);
+            goto err;
+        }
+        iv_len = EVP_CIPHER_CTX_iv_length(ctx);
+    } else {
+        const EVP_CIPHER *cipher = EVP_aes_256_cbc();
+
+        iv_len = EVP_CIPHER_iv_length(cipher);
+        if (RAND_bytes(iv, iv_len) <= 0
+                || !EVP_EncryptInit_ex(ctx, cipher, NULL,
+                                       tctx->ext.secure->tick_aes_key, iv)
+                || !HMAC_Init_ex(hctx, tctx->ext.secure->tick_hmac_key,
+                                 sizeof(tctx->ext.secure->tick_hmac_key),
+                                 EVP_sha256(), NULL)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CONSTRUCT_STATELESS_TICKET,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        memcpy(key_name, tctx->ext.tick_key_name,
+               sizeof(tctx->ext.tick_key_name));
+    }
+
+    if (!create_ticket_prequel(s, pkt, age_add, tick_nonce)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    if (!WPACKET_get_total_written(pkt, &macoffset)
+               /* Output key name */
+            || !WPACKET_memcpy(pkt, key_name, sizeof(key_name))
+               /* output IV */
+            || !WPACKET_memcpy(pkt, iv, iv_len)
+            || !WPACKET_reserve_bytes(pkt, slen + EVP_MAX_BLOCK_LENGTH,
+                                      &encdata1)
+               /* Encrypt session data */
+            || !EVP_EncryptUpdate(ctx, encdata1, &len, senc, slen)
+            || !WPACKET_allocate_bytes(pkt, len, &encdata2)
+            || encdata1 != encdata2
+            || !EVP_EncryptFinal(ctx, encdata1 + len, &lenfinal)
+            || !WPACKET_allocate_bytes(pkt, lenfinal, &encdata2)
+            || encdata1 + len != encdata2
+            || len + lenfinal > slen + EVP_MAX_BLOCK_LENGTH
+            || !WPACKET_get_total_written(pkt, &macendoffset)
+            || !HMAC_Update(hctx,
+                            (unsigned char *)s->init_buf->data + macoffset,
+                            macendoffset - macoffset)
+            || !WPACKET_reserve_bytes(pkt, EVP_MAX_MD_SIZE, &macdata1)
+            || !HMAC_Final(hctx, macdata1, &hlen)
+            || hlen > EVP_MAX_MD_SIZE
+            || !WPACKET_allocate_bytes(pkt, hlen, &macdata2)
+            || macdata1 != macdata2) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_CONSTRUCT_STATELESS_TICKET, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    /* Close the sub-packet created by create_ticket_prequel() */
+    if (!WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CONSTRUCT_STATELESS_TICKET,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    ok = 1;
+ err:
+    OPENSSL_free(senc);
+    EVP_CIPHER_CTX_free(ctx);
+    HMAC_CTX_free(hctx);
+    return ok;
+}
+
+static int construct_stateful_ticket(SSL *s, WPACKET *pkt, uint32_t age_add,
+                                     unsigned char *tick_nonce)
+{
+    if (!create_ticket_prequel(s, pkt, age_add, tick_nonce)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    if (!WPACKET_memcpy(pkt, s->session->session_id,
+                        s->session->session_id_length)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_CONSTRUCT_STATEFUL_TICKET,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    return 1;
+}
+
+int tls_construct_new_session_ticket(SSL *s, WPACKET *pkt)
+{
+    SSL_CTX *tctx = s->session_ctx;
+    unsigned char tick_nonce[TICKET_NONCE_SIZE];
+    union {
+        unsigned char age_add_c[sizeof(uint32_t)];
+        uint32_t age_add;
+    } age_add_u;
+
+    age_add_u.age_add = 0;
+
+    if (SSL_IS_TLS13(s)) {
+        size_t i, hashlen;
+        uint64_t nonce;
+        static const unsigned char nonce_label[] = "resumption";
+        const EVP_MD *md = ssl_handshake_md(s);
+        int hashleni = EVP_MD_size(md);
+
+        /* Ensure cast to size_t is safe */
+        if (!ossl_assert(hashleni >= 0)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_NEW_SESSION_TICKET,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        hashlen = (size_t)hashleni;
+
+        /*
+         * If we already sent one NewSessionTicket, or we resumed then
+         * s->session may already be in a cache and so we must not modify it.
+         * Instead we need to take a copy of it and modify that.
+         */
+        if (s->sent_tickets != 0 || s->hit) {
+            SSL_SESSION *new_sess = ssl_session_dup(s->session, 0);
+
+            if (new_sess == NULL) {
+                /* SSLfatal already called */
+                goto err;
+            }
+
+            SSL_SESSION_free(s->session);
+            s->session = new_sess;
+        }
+
+        if (!ssl_generate_session_id(s, s->session)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+        if (RAND_bytes(age_add_u.age_add_c, sizeof(age_add_u)) <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_NEW_SESSION_TICKET,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        s->session->ext.tick_age_add = age_add_u.age_add;
+
+        nonce = s->next_ticket_nonce;
+        for (i = TICKET_NONCE_SIZE; i > 0; i--) {
+            tick_nonce[i - 1] = (unsigned char)(nonce & 0xff);
+            nonce >>= 8;
+        }
+
+        if (!tls13_hkdf_expand(s, md, s->resumption_master_secret,
+                               nonce_label,
+                               sizeof(nonce_label) - 1,
+                               tick_nonce,
+                               TICKET_NONCE_SIZE,
+                               s->session->master_key,
+                               hashlen, 1)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+        s->session->master_key_length = hashlen;
+
+        s->session->time = (long)time(NULL);
+        if (s->s3->alpn_selected != NULL) {
+            OPENSSL_free(s->session->ext.alpn_selected);
+            s->session->ext.alpn_selected =
+                OPENSSL_memdup(s->s3->alpn_selected, s->s3->alpn_selected_len);
+            if (s->session->ext.alpn_selected == NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_CONSTRUCT_NEW_SESSION_TICKET,
+                         ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            s->session->ext.alpn_selected_len = s->s3->alpn_selected_len;
+        }
+        s->session->ext.max_early_data = s->max_early_data;
+    }
+
+    if (tctx->generate_ticket_cb != NULL &&
+        tctx->generate_ticket_cb(s, tctx->ticket_cb_data) == 0)
+        goto err;
+
+    /*
+     * If we are using anti-replay protection then we behave as if
+     * SSL_OP_NO_TICKET is set - we are caching tickets anyway so there
+     * is no point in using full stateless tickets.
+     */
+    if (SSL_IS_TLS13(s)
+            && ((s->options & SSL_OP_NO_TICKET) != 0
+                || (s->max_early_data > 0
+                    && (s->options & SSL_OP_NO_ANTI_REPLAY) == 0))) {
+        if (!construct_stateful_ticket(s, pkt, age_add_u.age_add, tick_nonce)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    } else if (!construct_stateless_ticket(s, pkt, age_add_u.age_add,
+                                           tick_nonce)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    if (SSL_IS_TLS13(s)) {
+        if (!tls_construct_extensions(s, pkt,
+                                      SSL_EXT_TLS1_3_NEW_SESSION_TICKET,
+                                      NULL, 0)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+        /*
+         * Increment both |sent_tickets| and |next_ticket_nonce|. |sent_tickets|
+         * gets reset to 0 if we send more tickets following a post-handshake
+         * auth, but |next_ticket_nonce| does not.
+         */
+        s->sent_tickets++;
+        s->next_ticket_nonce++;
+        ssl_update_cache(s, SSL_SESS_CACHE_SERVER);
+    }
+
+    return 1;
+ err:
+    return 0;
+}
+
+/*
+ * In TLSv1.3 this is called from the extensions code, otherwise it is used to
+ * create a separate message. Returns 1 on success or 0 on failure.
+ */
+int tls_construct_cert_status_body(SSL *s, WPACKET *pkt)
+{
+    if (!WPACKET_put_bytes_u8(pkt, s->ext.status_type)
+            || !WPACKET_sub_memcpy_u24(pkt, s->ext.ocsp.resp,
+                                       s->ext.ocsp.resp_len)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CONSTRUCT_CERT_STATUS_BODY,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    return 1;
+}
+
+int tls_construct_cert_status(SSL *s, WPACKET *pkt)
+{
+    if (!tls_construct_cert_status_body(s, pkt)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_NEXTPROTONEG
+/*
+ * tls_process_next_proto reads a Next Protocol Negotiation handshake message.
+ * It sets the next_proto member in s if found
+ */
+MSG_PROCESS_RETURN tls_process_next_proto(SSL *s, PACKET *pkt)
+{
+    PACKET next_proto, padding;
+    size_t next_proto_len;
+
+    /*-
+     * The payload looks like:
+     *   uint8 proto_len;
+     *   uint8 proto[proto_len];
+     *   uint8 padding_len;
+     *   uint8 padding[padding_len];
+     */
+    if (!PACKET_get_length_prefixed_1(pkt, &next_proto)
+        || !PACKET_get_length_prefixed_1(pkt, &padding)
+        || PACKET_remaining(pkt) > 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_NEXT_PROTO,
+                 SSL_R_LENGTH_MISMATCH);
+        return MSG_PROCESS_ERROR;
+    }
+
+    if (!PACKET_memdup(&next_proto, &s->ext.npn, &next_proto_len)) {
+        s->ext.npn_len = 0;
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_NEXT_PROTO,
+                 ERR_R_INTERNAL_ERROR);
+        return MSG_PROCESS_ERROR;
+    }
+
+    s->ext.npn_len = (unsigned char)next_proto_len;
+
+    return MSG_PROCESS_CONTINUE_READING;
+}
+#endif
+
+static int tls_construct_encrypted_extensions(SSL *s, WPACKET *pkt)
+{
+    if (!tls_construct_extensions(s, pkt, SSL_EXT_TLS1_3_ENCRYPTED_EXTENSIONS,
+                                  NULL, 0)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    return 1;
+}
+
+MSG_PROCESS_RETURN tls_process_end_of_early_data(SSL *s, PACKET *pkt)
+{
+    if (PACKET_remaining(pkt) != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_END_OF_EARLY_DATA,
+                 SSL_R_LENGTH_MISMATCH);
+        return MSG_PROCESS_ERROR;
+    }
+
+    if (s->early_data_state != SSL_EARLY_DATA_READING
+            && s->early_data_state != SSL_EARLY_DATA_READ_RETRY) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_END_OF_EARLY_DATA,
+                 ERR_R_INTERNAL_ERROR);
+        return MSG_PROCESS_ERROR;
+    }
+
+    /*
+     * EndOfEarlyData signals a key change so the end of the message must be on
+     * a record boundary.
+     */
+    if (RECORD_LAYER_processed_read_pending(&s->rlayer)) {
+        SSLfatal(s, SSL_AD_UNEXPECTED_MESSAGE,
+                 SSL_F_TLS_PROCESS_END_OF_EARLY_DATA,
+                 SSL_R_NOT_ON_RECORD_BOUNDARY);
+        return MSG_PROCESS_ERROR;
+    }
+
+    s->early_data_state = SSL_EARLY_DATA_FINISHED_READING;
+    if (!s->method->ssl3_enc->change_cipher_state(s,
+                SSL3_CC_HANDSHAKE | SSL3_CHANGE_CIPHER_SERVER_READ)) {
+        /* SSLfatal() already called */
+        return MSG_PROCESS_ERROR;
+    }
+
+    return MSG_PROCESS_CONTINUE_READING;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/t1_enc.c b/trunk/3rdparty/openssl-1.1-fit/ssl/t1_enc.c
new file mode 100644
index 000000000..57fb17a66
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/t1_enc.c
@@ -0,0 +1,678 @@
+/*
+ * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2005 Nokia. All rights reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include "ssl_locl.h"
+#include <openssl/comp.h>
+#include <openssl/evp.h>
+#include <openssl/kdf.h>
+#include <openssl/rand.h>
+
+/* seed1 through seed5 are concatenated */
+static int tls1_PRF(SSL *s,
+                    const void *seed1, size_t seed1_len,
+                    const void *seed2, size_t seed2_len,
+                    const void *seed3, size_t seed3_len,
+                    const void *seed4, size_t seed4_len,
+                    const void *seed5, size_t seed5_len,
+                    const unsigned char *sec, size_t slen,
+                    unsigned char *out, size_t olen, int fatal)
+{
+    const EVP_MD *md = ssl_prf_md(s);
+    EVP_PKEY_CTX *pctx = NULL;
+    int ret = 0;
+
+    if (md == NULL) {
+        /* Should never happen */
+        if (fatal)
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_PRF,
+                     ERR_R_INTERNAL_ERROR);
+        else
+            SSLerr(SSL_F_TLS1_PRF, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    pctx = EVP_PKEY_CTX_new_id(EVP_PKEY_TLS1_PRF, NULL);
+    if (pctx == NULL || EVP_PKEY_derive_init(pctx) <= 0
+        || EVP_PKEY_CTX_set_tls1_prf_md(pctx, md) <= 0
+        || EVP_PKEY_CTX_set1_tls1_prf_secret(pctx, sec, (int)slen) <= 0
+        || EVP_PKEY_CTX_add1_tls1_prf_seed(pctx, seed1, (int)seed1_len) <= 0
+        || EVP_PKEY_CTX_add1_tls1_prf_seed(pctx, seed2, (int)seed2_len) <= 0
+        || EVP_PKEY_CTX_add1_tls1_prf_seed(pctx, seed3, (int)seed3_len) <= 0
+        || EVP_PKEY_CTX_add1_tls1_prf_seed(pctx, seed4, (int)seed4_len) <= 0
+        || EVP_PKEY_CTX_add1_tls1_prf_seed(pctx, seed5, (int)seed5_len) <= 0
+        || EVP_PKEY_derive(pctx, out, &olen) <= 0) {
+        if (fatal)
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_PRF,
+                     ERR_R_INTERNAL_ERROR);
+        else
+            SSLerr(SSL_F_TLS1_PRF, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    ret = 1;
+
+ err:
+    EVP_PKEY_CTX_free(pctx);
+    return ret;
+}
+
+static int tls1_generate_key_block(SSL *s, unsigned char *km, size_t num)
+{
+    int ret;
+
+    /* Calls SSLfatal() as required */
+    ret = tls1_PRF(s,
+                   TLS_MD_KEY_EXPANSION_CONST,
+                   TLS_MD_KEY_EXPANSION_CONST_SIZE, s->s3->server_random,
+                   SSL3_RANDOM_SIZE, s->s3->client_random, SSL3_RANDOM_SIZE,
+                   NULL, 0, NULL, 0, s->session->master_key,
+                   s->session->master_key_length, km, num, 1);
+
+    return ret;
+}
+
+int tls1_change_cipher_state(SSL *s, int which)
+{
+    unsigned char *p, *mac_secret;
+    unsigned char *ms, *key, *iv;
+    EVP_CIPHER_CTX *dd;
+    const EVP_CIPHER *c;
+#ifndef OPENSSL_NO_COMP
+    const SSL_COMP *comp;
+#endif
+    const EVP_MD *m;
+    int mac_type;
+    size_t *mac_secret_size;
+    EVP_MD_CTX *mac_ctx;
+    EVP_PKEY *mac_key;
+    size_t n, i, j, k, cl;
+    int reuse_dd = 0;
+
+    c = s->s3->tmp.new_sym_enc;
+    m = s->s3->tmp.new_hash;
+    mac_type = s->s3->tmp.new_mac_pkey_type;
+#ifndef OPENSSL_NO_COMP
+    comp = s->s3->tmp.new_compression;
+#endif
+
+    if (which & SSL3_CC_READ) {
+        if (s->ext.use_etm)
+            s->s3->flags |= TLS1_FLAGS_ENCRYPT_THEN_MAC_READ;
+        else
+            s->s3->flags &= ~TLS1_FLAGS_ENCRYPT_THEN_MAC_READ;
+
+        if (s->s3->tmp.new_cipher->algorithm2 & TLS1_STREAM_MAC)
+            s->mac_flags |= SSL_MAC_FLAG_READ_MAC_STREAM;
+        else
+            s->mac_flags &= ~SSL_MAC_FLAG_READ_MAC_STREAM;
+
+        if (s->enc_read_ctx != NULL) {
+            reuse_dd = 1;
+        } else if ((s->enc_read_ctx = EVP_CIPHER_CTX_new()) == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_CHANGE_CIPHER_STATE,
+                     ERR_R_MALLOC_FAILURE);
+            goto err;
+        } else {
+            /*
+             * make sure it's initialised in case we exit later with an error
+             */
+            EVP_CIPHER_CTX_reset(s->enc_read_ctx);
+        }
+        dd = s->enc_read_ctx;
+        mac_ctx = ssl_replace_hash(&s->read_hash, NULL);
+        if (mac_ctx == NULL)
+            goto err;
+#ifndef OPENSSL_NO_COMP
+        COMP_CTX_free(s->expand);
+        s->expand = NULL;
+        if (comp != NULL) {
+            s->expand = COMP_CTX_new(comp->method);
+            if (s->expand == NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS1_CHANGE_CIPHER_STATE,
+                         SSL_R_COMPRESSION_LIBRARY_ERROR);
+                goto err;
+            }
+        }
+#endif
+        /*
+         * this is done by dtls1_reset_seq_numbers for DTLS
+         */
+        if (!SSL_IS_DTLS(s))
+            RECORD_LAYER_reset_read_sequence(&s->rlayer);
+        mac_secret = &(s->s3->read_mac_secret[0]);
+        mac_secret_size = &(s->s3->read_mac_secret_size);
+    } else {
+        s->statem.enc_write_state = ENC_WRITE_STATE_INVALID;
+        if (s->ext.use_etm)
+            s->s3->flags |= TLS1_FLAGS_ENCRYPT_THEN_MAC_WRITE;
+        else
+            s->s3->flags &= ~TLS1_FLAGS_ENCRYPT_THEN_MAC_WRITE;
+
+        if (s->s3->tmp.new_cipher->algorithm2 & TLS1_STREAM_MAC)
+            s->mac_flags |= SSL_MAC_FLAG_WRITE_MAC_STREAM;
+        else
+            s->mac_flags &= ~SSL_MAC_FLAG_WRITE_MAC_STREAM;
+        if (s->enc_write_ctx != NULL && !SSL_IS_DTLS(s)) {
+            reuse_dd = 1;
+        } else if ((s->enc_write_ctx = EVP_CIPHER_CTX_new()) == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_CHANGE_CIPHER_STATE,
+                     ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+        dd = s->enc_write_ctx;
+        if (SSL_IS_DTLS(s)) {
+            mac_ctx = EVP_MD_CTX_new();
+            if (mac_ctx == NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS1_CHANGE_CIPHER_STATE,
+                         ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            s->write_hash = mac_ctx;
+        } else {
+            mac_ctx = ssl_replace_hash(&s->write_hash, NULL);
+            if (mac_ctx == NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS1_CHANGE_CIPHER_STATE,
+                         ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+        }
+#ifndef OPENSSL_NO_COMP
+        COMP_CTX_free(s->compress);
+        s->compress = NULL;
+        if (comp != NULL) {
+            s->compress = COMP_CTX_new(comp->method);
+            if (s->compress == NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS1_CHANGE_CIPHER_STATE,
+                        SSL_R_COMPRESSION_LIBRARY_ERROR);
+                goto err;
+            }
+        }
+#endif
+        /*
+         * this is done by dtls1_reset_seq_numbers for DTLS
+         */
+        if (!SSL_IS_DTLS(s))
+            RECORD_LAYER_reset_write_sequence(&s->rlayer);
+        mac_secret = &(s->s3->write_mac_secret[0]);
+        mac_secret_size = &(s->s3->write_mac_secret_size);
+    }
+
+    if (reuse_dd)
+        EVP_CIPHER_CTX_reset(dd);
+
+    p = s->s3->tmp.key_block;
+    i = *mac_secret_size = s->s3->tmp.new_mac_secret_size;
+
+    /* TODO(size_t): convert me */
+    cl = EVP_CIPHER_key_length(c);
+    j = cl;
+    /* Was j=(exp)?5:EVP_CIPHER_key_length(c); */
+    /* If GCM/CCM mode only part of IV comes from PRF */
+    if (EVP_CIPHER_mode(c) == EVP_CIPH_GCM_MODE)
+        k = EVP_GCM_TLS_FIXED_IV_LEN;
+    else if (EVP_CIPHER_mode(c) == EVP_CIPH_CCM_MODE)
+        k = EVP_CCM_TLS_FIXED_IV_LEN;
+    else
+        k = EVP_CIPHER_iv_length(c);
+    if ((which == SSL3_CHANGE_CIPHER_CLIENT_WRITE) ||
+        (which == SSL3_CHANGE_CIPHER_SERVER_READ)) {
+        ms = &(p[0]);
+        n = i + i;
+        key = &(p[n]);
+        n += j + j;
+        iv = &(p[n]);
+        n += k + k;
+    } else {
+        n = i;
+        ms = &(p[n]);
+        n += i + j;
+        key = &(p[n]);
+        n += j + k;
+        iv = &(p[n]);
+        n += k;
+    }
+
+    if (n > s->s3->tmp.key_block_length) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_CHANGE_CIPHER_STATE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    memcpy(mac_secret, ms, i);
+
+    if (!(EVP_CIPHER_flags(c) & EVP_CIPH_FLAG_AEAD_CIPHER)) {
+        /* TODO(size_t): Convert this function */
+        mac_key = EVP_PKEY_new_mac_key(mac_type, NULL, mac_secret,
+                                               (int)*mac_secret_size);
+        if (mac_key == NULL
+            || EVP_DigestSignInit(mac_ctx, NULL, m, NULL, mac_key) <= 0) {
+            EVP_PKEY_free(mac_key);
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_CHANGE_CIPHER_STATE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+        EVP_PKEY_free(mac_key);
+    }
+#ifdef SSL_DEBUG
+    printf("which = %04X\nmac key=", which);
+    {
+        size_t z;
+        for (z = 0; z < i; z++)
+            printf("%02X%c", ms[z], ((z + 1) % 16) ? ' ' : '\n');
+    }
+#endif
+
+    if (EVP_CIPHER_mode(c) == EVP_CIPH_GCM_MODE) {
+        if (!EVP_CipherInit_ex(dd, c, NULL, key, NULL, (which & SSL3_CC_WRITE))
+            || !EVP_CIPHER_CTX_ctrl(dd, EVP_CTRL_GCM_SET_IV_FIXED, (int)k,
+                                    iv)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_CHANGE_CIPHER_STATE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+    } else if (EVP_CIPHER_mode(c) == EVP_CIPH_CCM_MODE) {
+        int taglen;
+        if (s->s3->tmp.
+            new_cipher->algorithm_enc & (SSL_AES128CCM8 | SSL_AES256CCM8))
+            taglen = EVP_CCM8_TLS_TAG_LEN;
+        else
+            taglen = EVP_CCM_TLS_TAG_LEN;
+        if (!EVP_CipherInit_ex(dd, c, NULL, NULL, NULL, (which & SSL3_CC_WRITE))
+            || !EVP_CIPHER_CTX_ctrl(dd, EVP_CTRL_AEAD_SET_IVLEN, 12, NULL)
+            || !EVP_CIPHER_CTX_ctrl(dd, EVP_CTRL_AEAD_SET_TAG, taglen, NULL)
+            || !EVP_CIPHER_CTX_ctrl(dd, EVP_CTRL_CCM_SET_IV_FIXED, (int)k, iv)
+            || !EVP_CipherInit_ex(dd, NULL, NULL, key, NULL, -1)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_CHANGE_CIPHER_STATE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+    } else {
+        if (!EVP_CipherInit_ex(dd, c, NULL, key, iv, (which & SSL3_CC_WRITE))) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_CHANGE_CIPHER_STATE,
+                     ERR_R_INTERNAL_ERROR);
+            goto err;
+        }
+    }
+    /* Needed for "composite" AEADs, such as RC4-HMAC-MD5 */
+    if ((EVP_CIPHER_flags(c) & EVP_CIPH_FLAG_AEAD_CIPHER) && *mac_secret_size
+        && !EVP_CIPHER_CTX_ctrl(dd, EVP_CTRL_AEAD_SET_MAC_KEY,
+                                (int)*mac_secret_size, mac_secret)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_CHANGE_CIPHER_STATE,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    s->statem.enc_write_state = ENC_WRITE_STATE_VALID;
+
+#ifdef SSL_DEBUG
+    printf("which = %04X\nkey=", which);
+    {
+        int z;
+        for (z = 0; z < EVP_CIPHER_key_length(c); z++)
+            printf("%02X%c", key[z], ((z + 1) % 16) ? ' ' : '\n');
+    }
+    printf("\niv=");
+    {
+        size_t z;
+        for (z = 0; z < k; z++)
+            printf("%02X%c", iv[z], ((z + 1) % 16) ? ' ' : '\n');
+    }
+    printf("\n");
+#endif
+
+    return 1;
+ err:
+    return 0;
+}
+
+int tls1_setup_key_block(SSL *s)
+{
+    unsigned char *p;
+    const EVP_CIPHER *c;
+    const EVP_MD *hash;
+    SSL_COMP *comp;
+    int mac_type = NID_undef;
+    size_t num, mac_secret_size = 0;
+    int ret = 0;
+
+    if (s->s3->tmp.key_block_length != 0)
+        return 1;
+
+    if (!ssl_cipher_get_evp(s->session, &c, &hash, &mac_type, &mac_secret_size,
+                            &comp, s->ext.use_etm)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_SETUP_KEY_BLOCK,
+                 SSL_R_CIPHER_OR_HASH_UNAVAILABLE);
+        return 0;
+    }
+
+    s->s3->tmp.new_sym_enc = c;
+    s->s3->tmp.new_hash = hash;
+    s->s3->tmp.new_mac_pkey_type = mac_type;
+    s->s3->tmp.new_mac_secret_size = mac_secret_size;
+    num = EVP_CIPHER_key_length(c) + mac_secret_size + EVP_CIPHER_iv_length(c);
+    num *= 2;
+
+    ssl3_cleanup_key_block(s);
+
+    if ((p = OPENSSL_malloc(num)) == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS1_SETUP_KEY_BLOCK,
+                 ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+
+    s->s3->tmp.key_block_length = num;
+    s->s3->tmp.key_block = p;
+
+#ifdef SSL_DEBUG
+    printf("client random\n");
+    {
+        int z;
+        for (z = 0; z < SSL3_RANDOM_SIZE; z++)
+            printf("%02X%c", s->s3->client_random[z],
+                   ((z + 1) % 16) ? ' ' : '\n');
+    }
+    printf("server random\n");
+    {
+        int z;
+        for (z = 0; z < SSL3_RANDOM_SIZE; z++)
+            printf("%02X%c", s->s3->server_random[z],
+                   ((z + 1) % 16) ? ' ' : '\n');
+    }
+    printf("master key\n");
+    {
+        size_t z;
+        for (z = 0; z < s->session->master_key_length; z++)
+            printf("%02X%c", s->session->master_key[z],
+                   ((z + 1) % 16) ? ' ' : '\n');
+    }
+#endif
+    if (!tls1_generate_key_block(s, p, num)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+#ifdef SSL_DEBUG
+    printf("\nkey block\n");
+    {
+        size_t z;
+        for (z = 0; z < num; z++)
+            printf("%02X%c", p[z], ((z + 1) % 16) ? ' ' : '\n');
+    }
+#endif
+
+    if (!(s->options & SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS)
+        && s->method->version <= TLS1_VERSION) {
+        /*
+         * enable vulnerability countermeasure for CBC ciphers with known-IV
+         * problem (http://www.openssl.org/~bodo/tls-cbc.txt)
+         */
+        s->s3->need_empty_fragments = 1;
+
+        if (s->session->cipher != NULL) {
+            if (s->session->cipher->algorithm_enc == SSL_eNULL)
+                s->s3->need_empty_fragments = 0;
+
+#ifndef OPENSSL_NO_RC4
+            if (s->session->cipher->algorithm_enc == SSL_RC4)
+                s->s3->need_empty_fragments = 0;
+#endif
+        }
+    }
+
+    ret = 1;
+ err:
+    return ret;
+}
+
+size_t tls1_final_finish_mac(SSL *s, const char *str, size_t slen,
+                             unsigned char *out)
+{
+    size_t hashlen;
+    unsigned char hash[EVP_MAX_MD_SIZE];
+
+    if (!ssl3_digest_cached_records(s, 0)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    if (!ssl_handshake_hash(s, hash, sizeof(hash), &hashlen)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    if (!tls1_PRF(s, str, slen, hash, hashlen, NULL, 0, NULL, 0, NULL, 0,
+                  s->session->master_key, s->session->master_key_length,
+                  out, TLS1_FINISH_MAC_LENGTH, 1)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+    OPENSSL_cleanse(hash, hashlen);
+    return TLS1_FINISH_MAC_LENGTH;
+}
+
+int tls1_generate_master_secret(SSL *s, unsigned char *out, unsigned char *p,
+                                size_t len, size_t *secret_size)
+{
+    if (s->session->flags & SSL_SESS_FLAG_EXTMS) {
+        unsigned char hash[EVP_MAX_MD_SIZE * 2];
+        size_t hashlen;
+        /*
+         * Digest cached records keeping record buffer (if present): this wont
+         * affect client auth because we're freezing the buffer at the same
+         * point (after client key exchange and before certificate verify)
+         */
+        if (!ssl3_digest_cached_records(s, 1)
+                || !ssl_handshake_hash(s, hash, sizeof(hash), &hashlen)) {
+            /* SSLfatal() already called */
+            return 0;
+        }
+#ifdef SSL_DEBUG
+        fprintf(stderr, "Handshake hashes:\n");
+        BIO_dump_fp(stderr, (char *)hash, hashlen);
+#endif
+        if (!tls1_PRF(s,
+                      TLS_MD_EXTENDED_MASTER_SECRET_CONST,
+                      TLS_MD_EXTENDED_MASTER_SECRET_CONST_SIZE,
+                      hash, hashlen,
+                      NULL, 0,
+                      NULL, 0,
+                      NULL, 0, p, len, out,
+                      SSL3_MASTER_SECRET_SIZE, 1)) {
+            /* SSLfatal() already called */
+            return 0;
+        }
+        OPENSSL_cleanse(hash, hashlen);
+    } else {
+        if (!tls1_PRF(s,
+                      TLS_MD_MASTER_SECRET_CONST,
+                      TLS_MD_MASTER_SECRET_CONST_SIZE,
+                      s->s3->client_random, SSL3_RANDOM_SIZE,
+                      NULL, 0,
+                      s->s3->server_random, SSL3_RANDOM_SIZE,
+                      NULL, 0, p, len, out,
+                      SSL3_MASTER_SECRET_SIZE, 1)) {
+           /* SSLfatal() already called */
+            return 0;
+        }
+    }
+#ifdef SSL_DEBUG
+    fprintf(stderr, "Premaster Secret:\n");
+    BIO_dump_fp(stderr, (char *)p, len);
+    fprintf(stderr, "Client Random:\n");
+    BIO_dump_fp(stderr, (char *)s->s3->client_random, SSL3_RANDOM_SIZE);
+    fprintf(stderr, "Server Random:\n");
+    BIO_dump_fp(stderr, (char *)s->s3->server_random, SSL3_RANDOM_SIZE);
+    fprintf(stderr, "Master Secret:\n");
+    BIO_dump_fp(stderr, (char *)s->session->master_key,
+                SSL3_MASTER_SECRET_SIZE);
+#endif
+
+    *secret_size = SSL3_MASTER_SECRET_SIZE;
+    return 1;
+}
+
+int tls1_export_keying_material(SSL *s, unsigned char *out, size_t olen,
+                                const char *label, size_t llen,
+                                const unsigned char *context,
+                                size_t contextlen, int use_context)
+{
+    unsigned char *val = NULL;
+    size_t vallen = 0, currentvalpos;
+    int rv;
+
+    /*
+     * construct PRF arguments we construct the PRF argument ourself rather
+     * than passing separate values into the TLS PRF to ensure that the
+     * concatenation of values does not create a prohibited label.
+     */
+    vallen = llen + SSL3_RANDOM_SIZE * 2;
+    if (use_context) {
+        vallen += 2 + contextlen;
+    }
+
+    val = OPENSSL_malloc(vallen);
+    if (val == NULL)
+        goto err2;
+    currentvalpos = 0;
+    memcpy(val + currentvalpos, (unsigned char *)label, llen);
+    currentvalpos += llen;
+    memcpy(val + currentvalpos, s->s3->client_random, SSL3_RANDOM_SIZE);
+    currentvalpos += SSL3_RANDOM_SIZE;
+    memcpy(val + currentvalpos, s->s3->server_random, SSL3_RANDOM_SIZE);
+    currentvalpos += SSL3_RANDOM_SIZE;
+
+    if (use_context) {
+        val[currentvalpos] = (contextlen >> 8) & 0xff;
+        currentvalpos++;
+        val[currentvalpos] = contextlen & 0xff;
+        currentvalpos++;
+        if ((contextlen > 0) || (context != NULL)) {
+            memcpy(val + currentvalpos, context, contextlen);
+        }
+    }
+
+    /*
+     * disallow prohibited labels note that SSL3_RANDOM_SIZE > max(prohibited
+     * label len) = 15, so size of val > max(prohibited label len) = 15 and
+     * the comparisons won't have buffer overflow
+     */
+    if (memcmp(val, TLS_MD_CLIENT_FINISH_CONST,
+               TLS_MD_CLIENT_FINISH_CONST_SIZE) == 0)
+        goto err1;
+    if (memcmp(val, TLS_MD_SERVER_FINISH_CONST,
+               TLS_MD_SERVER_FINISH_CONST_SIZE) == 0)
+        goto err1;
+    if (memcmp(val, TLS_MD_MASTER_SECRET_CONST,
+               TLS_MD_MASTER_SECRET_CONST_SIZE) == 0)
+        goto err1;
+    if (memcmp(val, TLS_MD_EXTENDED_MASTER_SECRET_CONST,
+               TLS_MD_EXTENDED_MASTER_SECRET_CONST_SIZE) == 0)
+        goto err1;
+    if (memcmp(val, TLS_MD_KEY_EXPANSION_CONST,
+               TLS_MD_KEY_EXPANSION_CONST_SIZE) == 0)
+        goto err1;
+
+    rv = tls1_PRF(s,
+                  val, vallen,
+                  NULL, 0,
+                  NULL, 0,
+                  NULL, 0,
+                  NULL, 0,
+                  s->session->master_key, s->session->master_key_length,
+                  out, olen, 0);
+
+    goto ret;
+ err1:
+    SSLerr(SSL_F_TLS1_EXPORT_KEYING_MATERIAL, SSL_R_TLS_ILLEGAL_EXPORTER_LABEL);
+    rv = 0;
+    goto ret;
+ err2:
+    SSLerr(SSL_F_TLS1_EXPORT_KEYING_MATERIAL, ERR_R_MALLOC_FAILURE);
+    rv = 0;
+ ret:
+    OPENSSL_clear_free(val, vallen);
+    return rv;
+}
+
+int tls1_alert_code(int code)
+{
+    switch (code) {
+    case SSL_AD_CLOSE_NOTIFY:
+        return SSL3_AD_CLOSE_NOTIFY;
+    case SSL_AD_UNEXPECTED_MESSAGE:
+        return SSL3_AD_UNEXPECTED_MESSAGE;
+    case SSL_AD_BAD_RECORD_MAC:
+        return SSL3_AD_BAD_RECORD_MAC;
+    case SSL_AD_DECRYPTION_FAILED:
+        return TLS1_AD_DECRYPTION_FAILED;
+    case SSL_AD_RECORD_OVERFLOW:
+        return TLS1_AD_RECORD_OVERFLOW;
+    case SSL_AD_DECOMPRESSION_FAILURE:
+        return SSL3_AD_DECOMPRESSION_FAILURE;
+    case SSL_AD_HANDSHAKE_FAILURE:
+        return SSL3_AD_HANDSHAKE_FAILURE;
+    case SSL_AD_NO_CERTIFICATE:
+        return -1;
+    case SSL_AD_BAD_CERTIFICATE:
+        return SSL3_AD_BAD_CERTIFICATE;
+    case SSL_AD_UNSUPPORTED_CERTIFICATE:
+        return SSL3_AD_UNSUPPORTED_CERTIFICATE;
+    case SSL_AD_CERTIFICATE_REVOKED:
+        return SSL3_AD_CERTIFICATE_REVOKED;
+    case SSL_AD_CERTIFICATE_EXPIRED:
+        return SSL3_AD_CERTIFICATE_EXPIRED;
+    case SSL_AD_CERTIFICATE_UNKNOWN:
+        return SSL3_AD_CERTIFICATE_UNKNOWN;
+    case SSL_AD_ILLEGAL_PARAMETER:
+        return SSL3_AD_ILLEGAL_PARAMETER;
+    case SSL_AD_UNKNOWN_CA:
+        return TLS1_AD_UNKNOWN_CA;
+    case SSL_AD_ACCESS_DENIED:
+        return TLS1_AD_ACCESS_DENIED;
+    case SSL_AD_DECODE_ERROR:
+        return TLS1_AD_DECODE_ERROR;
+    case SSL_AD_DECRYPT_ERROR:
+        return TLS1_AD_DECRYPT_ERROR;
+    case SSL_AD_EXPORT_RESTRICTION:
+        return TLS1_AD_EXPORT_RESTRICTION;
+    case SSL_AD_PROTOCOL_VERSION:
+        return TLS1_AD_PROTOCOL_VERSION;
+    case SSL_AD_INSUFFICIENT_SECURITY:
+        return TLS1_AD_INSUFFICIENT_SECURITY;
+    case SSL_AD_INTERNAL_ERROR:
+        return TLS1_AD_INTERNAL_ERROR;
+    case SSL_AD_USER_CANCELLED:
+        return TLS1_AD_USER_CANCELLED;
+    case SSL_AD_NO_RENEGOTIATION:
+        return TLS1_AD_NO_RENEGOTIATION;
+    case SSL_AD_UNSUPPORTED_EXTENSION:
+        return TLS1_AD_UNSUPPORTED_EXTENSION;
+    case SSL_AD_CERTIFICATE_UNOBTAINABLE:
+        return TLS1_AD_CERTIFICATE_UNOBTAINABLE;
+    case SSL_AD_UNRECOGNIZED_NAME:
+        return TLS1_AD_UNRECOGNIZED_NAME;
+    case SSL_AD_BAD_CERTIFICATE_STATUS_RESPONSE:
+        return TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE;
+    case SSL_AD_BAD_CERTIFICATE_HASH_VALUE:
+        return TLS1_AD_BAD_CERTIFICATE_HASH_VALUE;
+    case SSL_AD_UNKNOWN_PSK_IDENTITY:
+        return TLS1_AD_UNKNOWN_PSK_IDENTITY;
+    case SSL_AD_INAPPROPRIATE_FALLBACK:
+        return TLS1_AD_INAPPROPRIATE_FALLBACK;
+    case SSL_AD_NO_APPLICATION_PROTOCOL:
+        return TLS1_AD_NO_APPLICATION_PROTOCOL;
+    case SSL_AD_CERTIFICATE_REQUIRED:
+        return SSL_AD_HANDSHAKE_FAILURE;
+    default:
+        return -1;
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/t1_lib.c b/trunk/3rdparty/openssl-1.1-fit/ssl/t1_lib.c
new file mode 100644
index 000000000..68cb237ea
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/t1_lib.c
@@ -0,0 +1,2792 @@
+/*
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <openssl/objects.h>
+#include <openssl/evp.h>
+#include <openssl/hmac.h>
+#include <openssl/ocsp.h>
+#include <openssl/conf.h>
+#include <openssl/x509v3.h>
+#include <openssl/dh.h>
+#include <openssl/bn.h>
+#include "internal/nelem.h"
+#include "ssl_locl.h"
+#include <openssl/ct.h>
+
+SSL3_ENC_METHOD const TLSv1_enc_data = {
+    tls1_enc,
+    tls1_mac,
+    tls1_setup_key_block,
+    tls1_generate_master_secret,
+    tls1_change_cipher_state,
+    tls1_final_finish_mac,
+    TLS_MD_CLIENT_FINISH_CONST, TLS_MD_CLIENT_FINISH_CONST_SIZE,
+    TLS_MD_SERVER_FINISH_CONST, TLS_MD_SERVER_FINISH_CONST_SIZE,
+    tls1_alert_code,
+    tls1_export_keying_material,
+    0,
+    ssl3_set_handshake_header,
+    tls_close_construct_packet,
+    ssl3_handshake_write
+};
+
+SSL3_ENC_METHOD const TLSv1_1_enc_data = {
+    tls1_enc,
+    tls1_mac,
+    tls1_setup_key_block,
+    tls1_generate_master_secret,
+    tls1_change_cipher_state,
+    tls1_final_finish_mac,
+    TLS_MD_CLIENT_FINISH_CONST, TLS_MD_CLIENT_FINISH_CONST_SIZE,
+    TLS_MD_SERVER_FINISH_CONST, TLS_MD_SERVER_FINISH_CONST_SIZE,
+    tls1_alert_code,
+    tls1_export_keying_material,
+    SSL_ENC_FLAG_EXPLICIT_IV,
+    ssl3_set_handshake_header,
+    tls_close_construct_packet,
+    ssl3_handshake_write
+};
+
+SSL3_ENC_METHOD const TLSv1_2_enc_data = {
+    tls1_enc,
+    tls1_mac,
+    tls1_setup_key_block,
+    tls1_generate_master_secret,
+    tls1_change_cipher_state,
+    tls1_final_finish_mac,
+    TLS_MD_CLIENT_FINISH_CONST, TLS_MD_CLIENT_FINISH_CONST_SIZE,
+    TLS_MD_SERVER_FINISH_CONST, TLS_MD_SERVER_FINISH_CONST_SIZE,
+    tls1_alert_code,
+    tls1_export_keying_material,
+    SSL_ENC_FLAG_EXPLICIT_IV | SSL_ENC_FLAG_SIGALGS | SSL_ENC_FLAG_SHA256_PRF
+        | SSL_ENC_FLAG_TLS1_2_CIPHERS,
+    ssl3_set_handshake_header,
+    tls_close_construct_packet,
+    ssl3_handshake_write
+};
+
+SSL3_ENC_METHOD const TLSv1_3_enc_data = {
+    tls13_enc,
+    tls1_mac,
+    tls13_setup_key_block,
+    tls13_generate_master_secret,
+    tls13_change_cipher_state,
+    tls13_final_finish_mac,
+    TLS_MD_CLIENT_FINISH_CONST, TLS_MD_CLIENT_FINISH_CONST_SIZE,
+    TLS_MD_SERVER_FINISH_CONST, TLS_MD_SERVER_FINISH_CONST_SIZE,
+    tls13_alert_code,
+    tls13_export_keying_material,
+    SSL_ENC_FLAG_SIGALGS | SSL_ENC_FLAG_SHA256_PRF,
+    ssl3_set_handshake_header,
+    tls_close_construct_packet,
+    ssl3_handshake_write
+};
+
+long tls1_default_timeout(void)
+{
+    /*
+     * 2 hours, the 24 hours mentioned in the TLSv1 spec is way too long for
+     * http, the cache would over fill
+     */
+    return (60 * 60 * 2);
+}
+
+int tls1_new(SSL *s)
+{
+    if (!ssl3_new(s))
+        return 0;
+    if (!s->method->ssl_clear(s))
+        return 0;
+
+    return 1;
+}
+
+void tls1_free(SSL *s)
+{
+    OPENSSL_free(s->ext.session_ticket);
+    ssl3_free(s);
+}
+
+int tls1_clear(SSL *s)
+{
+    if (!ssl3_clear(s))
+        return 0;
+
+    if (s->method->version == TLS_ANY_VERSION)
+        s->version = TLS_MAX_VERSION;
+    else
+        s->version = s->method->version;
+
+    return 1;
+}
+
+#ifndef OPENSSL_NO_EC
+
+/*
+ * Table of curve information.
+ * Do not delete entries or reorder this array! It is used as a lookup
+ * table: the index of each entry is one less than the TLS curve id.
+ */
+static const TLS_GROUP_INFO nid_list[] = {
+    {NID_sect163k1, 80, TLS_CURVE_CHAR2}, /* sect163k1 (1) */
+    {NID_sect163r1, 80, TLS_CURVE_CHAR2}, /* sect163r1 (2) */
+    {NID_sect163r2, 80, TLS_CURVE_CHAR2}, /* sect163r2 (3) */
+    {NID_sect193r1, 80, TLS_CURVE_CHAR2}, /* sect193r1 (4) */
+    {NID_sect193r2, 80, TLS_CURVE_CHAR2}, /* sect193r2 (5) */
+    {NID_sect233k1, 112, TLS_CURVE_CHAR2}, /* sect233k1 (6) */
+    {NID_sect233r1, 112, TLS_CURVE_CHAR2}, /* sect233r1 (7) */
+    {NID_sect239k1, 112, TLS_CURVE_CHAR2}, /* sect239k1 (8) */
+    {NID_sect283k1, 128, TLS_CURVE_CHAR2}, /* sect283k1 (9) */
+    {NID_sect283r1, 128, TLS_CURVE_CHAR2}, /* sect283r1 (10) */
+    {NID_sect409k1, 192, TLS_CURVE_CHAR2}, /* sect409k1 (11) */
+    {NID_sect409r1, 192, TLS_CURVE_CHAR2}, /* sect409r1 (12) */
+    {NID_sect571k1, 256, TLS_CURVE_CHAR2}, /* sect571k1 (13) */
+    {NID_sect571r1, 256, TLS_CURVE_CHAR2}, /* sect571r1 (14) */
+    {NID_secp160k1, 80, TLS_CURVE_PRIME}, /* secp160k1 (15) */
+    {NID_secp160r1, 80, TLS_CURVE_PRIME}, /* secp160r1 (16) */
+    {NID_secp160r2, 80, TLS_CURVE_PRIME}, /* secp160r2 (17) */
+    {NID_secp192k1, 80, TLS_CURVE_PRIME}, /* secp192k1 (18) */
+    {NID_X9_62_prime192v1, 80, TLS_CURVE_PRIME}, /* secp192r1 (19) */
+    {NID_secp224k1, 112, TLS_CURVE_PRIME}, /* secp224k1 (20) */
+    {NID_secp224r1, 112, TLS_CURVE_PRIME}, /* secp224r1 (21) */
+    {NID_secp256k1, 128, TLS_CURVE_PRIME}, /* secp256k1 (22) */
+    {NID_X9_62_prime256v1, 128, TLS_CURVE_PRIME}, /* secp256r1 (23) */
+    {NID_secp384r1, 192, TLS_CURVE_PRIME}, /* secp384r1 (24) */
+    {NID_secp521r1, 256, TLS_CURVE_PRIME}, /* secp521r1 (25) */
+    {NID_brainpoolP256r1, 128, TLS_CURVE_PRIME}, /* brainpoolP256r1 (26) */
+    {NID_brainpoolP384r1, 192, TLS_CURVE_PRIME}, /* brainpoolP384r1 (27) */
+    {NID_brainpoolP512r1, 256, TLS_CURVE_PRIME}, /* brainpool512r1 (28) */
+    {EVP_PKEY_X25519, 128, TLS_CURVE_CUSTOM}, /* X25519 (29) */
+    {EVP_PKEY_X448, 224, TLS_CURVE_CUSTOM}, /* X448 (30) */
+};
+
+static const unsigned char ecformats_default[] = {
+    TLSEXT_ECPOINTFORMAT_uncompressed,
+    TLSEXT_ECPOINTFORMAT_ansiX962_compressed_prime,
+    TLSEXT_ECPOINTFORMAT_ansiX962_compressed_char2
+};
+
+/* The default curves */
+static const uint16_t eccurves_default[] = {
+    29,                      /* X25519 (29) */
+    23,                      /* secp256r1 (23) */
+    30,                      /* X448 (30) */
+    25,                      /* secp521r1 (25) */
+    24,                      /* secp384r1 (24) */
+};
+
+static const uint16_t suiteb_curves[] = {
+    TLSEXT_curve_P_256,
+    TLSEXT_curve_P_384
+};
+
+const TLS_GROUP_INFO *tls1_group_id_lookup(uint16_t group_id)
+{
+    /* ECC curves from RFC 4492 and RFC 7027 */
+    if (group_id < 1 || group_id > OSSL_NELEM(nid_list))
+        return NULL;
+    return &nid_list[group_id - 1];
+}
+
+static uint16_t tls1_nid2group_id(int nid)
+{
+    size_t i;
+    for (i = 0; i < OSSL_NELEM(nid_list); i++) {
+        if (nid_list[i].nid == nid)
+            return (uint16_t)(i + 1);
+    }
+    return 0;
+}
+
+/*
+ * Set *pgroups to the supported groups list and *pgroupslen to
+ * the number of groups supported.
+ */
+void tls1_get_supported_groups(SSL *s, const uint16_t **pgroups,
+                               size_t *pgroupslen)
+{
+
+    /* For Suite B mode only include P-256, P-384 */
+    switch (tls1_suiteb(s)) {
+    case SSL_CERT_FLAG_SUITEB_128_LOS:
+        *pgroups = suiteb_curves;
+        *pgroupslen = OSSL_NELEM(suiteb_curves);
+        break;
+
+    case SSL_CERT_FLAG_SUITEB_128_LOS_ONLY:
+        *pgroups = suiteb_curves;
+        *pgroupslen = 1;
+        break;
+
+    case SSL_CERT_FLAG_SUITEB_192_LOS:
+        *pgroups = suiteb_curves + 1;
+        *pgroupslen = 1;
+        break;
+
+    default:
+        if (s->ext.supportedgroups == NULL) {
+            *pgroups = eccurves_default;
+            *pgroupslen = OSSL_NELEM(eccurves_default);
+        } else {
+            *pgroups = s->ext.supportedgroups;
+            *pgroupslen = s->ext.supportedgroups_len;
+        }
+        break;
+    }
+}
+
+/* See if curve is allowed by security callback */
+int tls_curve_allowed(SSL *s, uint16_t curve, int op)
+{
+    const TLS_GROUP_INFO *cinfo = tls1_group_id_lookup(curve);
+    unsigned char ctmp[2];
+
+    if (cinfo == NULL)
+        return 0;
+# ifdef OPENSSL_NO_EC2M
+    if (cinfo->flags & TLS_CURVE_CHAR2)
+        return 0;
+# endif
+    ctmp[0] = curve >> 8;
+    ctmp[1] = curve & 0xff;
+    return ssl_security(s, op, cinfo->secbits, cinfo->nid, (void *)ctmp);
+}
+
+/* Return 1 if "id" is in "list" */
+static int tls1_in_list(uint16_t id, const uint16_t *list, size_t listlen)
+{
+    size_t i;
+    for (i = 0; i < listlen; i++)
+        if (list[i] == id)
+            return 1;
+    return 0;
+}
+
+/*-
+ * For nmatch >= 0, return the id of the |nmatch|th shared group or 0
+ * if there is no match.
+ * For nmatch == -1, return number of matches
+ * For nmatch == -2, return the id of the group to use for
+ * a tmp key, or 0 if there is no match.
+ */
+uint16_t tls1_shared_group(SSL *s, int nmatch)
+{
+    const uint16_t *pref, *supp;
+    size_t num_pref, num_supp, i;
+    int k;
+
+    /* Can't do anything on client side */
+    if (s->server == 0)
+        return 0;
+    if (nmatch == -2) {
+        if (tls1_suiteb(s)) {
+            /*
+             * For Suite B ciphersuite determines curve: we already know
+             * these are acceptable due to previous checks.
+             */
+            unsigned long cid = s->s3->tmp.new_cipher->id;
+
+            if (cid == TLS1_CK_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256)
+                return TLSEXT_curve_P_256;
+            if (cid == TLS1_CK_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384)
+                return TLSEXT_curve_P_384;
+            /* Should never happen */
+            return 0;
+        }
+        /* If not Suite B just return first preference shared curve */
+        nmatch = 0;
+    }
+    /*
+     * If server preference set, our groups are the preference order
+     * otherwise peer decides.
+     */
+    if (s->options & SSL_OP_CIPHER_SERVER_PREFERENCE) {
+        tls1_get_supported_groups(s, &pref, &num_pref);
+        tls1_get_peer_groups(s, &supp, &num_supp);
+    } else {
+        tls1_get_peer_groups(s, &pref, &num_pref);
+        tls1_get_supported_groups(s, &supp, &num_supp);
+    }
+
+    for (k = 0, i = 0; i < num_pref; i++) {
+        uint16_t id = pref[i];
+
+        if (!tls1_in_list(id, supp, num_supp)
+            || !tls_curve_allowed(s, id, SSL_SECOP_CURVE_SHARED))
+                    continue;
+        if (nmatch == k)
+            return id;
+         k++;
+    }
+    if (nmatch == -1)
+        return k;
+    /* Out of range (nmatch > k). */
+    return 0;
+}
+
+int tls1_set_groups(uint16_t **pext, size_t *pextlen,
+                    int *groups, size_t ngroups)
+{
+    uint16_t *glist;
+    size_t i;
+    /*
+     * Bitmap of groups included to detect duplicates: only works while group
+     * ids < 32
+     */
+    unsigned long dup_list = 0;
+
+    if (ngroups == 0) {
+        SSLerr(SSL_F_TLS1_SET_GROUPS, SSL_R_BAD_LENGTH);
+        return 0;
+    }
+    if ((glist = OPENSSL_malloc(ngroups * sizeof(*glist))) == NULL) {
+        SSLerr(SSL_F_TLS1_SET_GROUPS, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    for (i = 0; i < ngroups; i++) {
+        unsigned long idmask;
+        uint16_t id;
+        /* TODO(TLS1.3): Convert for DH groups */
+        id = tls1_nid2group_id(groups[i]);
+        idmask = 1L << id;
+        if (!id || (dup_list & idmask)) {
+            OPENSSL_free(glist);
+            return 0;
+        }
+        dup_list |= idmask;
+        glist[i] = id;
+    }
+    OPENSSL_free(*pext);
+    *pext = glist;
+    *pextlen = ngroups;
+    return 1;
+}
+
+# define MAX_CURVELIST   OSSL_NELEM(nid_list)
+
+typedef struct {
+    size_t nidcnt;
+    int nid_arr[MAX_CURVELIST];
+} nid_cb_st;
+
+static int nid_cb(const char *elem, int len, void *arg)
+{
+    nid_cb_st *narg = arg;
+    size_t i;
+    int nid;
+    char etmp[20];
+    if (elem == NULL)
+        return 0;
+    if (narg->nidcnt == MAX_CURVELIST)
+        return 0;
+    if (len > (int)(sizeof(etmp) - 1))
+        return 0;
+    memcpy(etmp, elem, len);
+    etmp[len] = 0;
+    nid = EC_curve_nist2nid(etmp);
+    if (nid == NID_undef)
+        nid = OBJ_sn2nid(etmp);
+    if (nid == NID_undef)
+        nid = OBJ_ln2nid(etmp);
+    if (nid == NID_undef)
+        return 0;
+    for (i = 0; i < narg->nidcnt; i++)
+        if (narg->nid_arr[i] == nid)
+            return 0;
+    narg->nid_arr[narg->nidcnt++] = nid;
+    return 1;
+}
+
+/* Set groups based on a colon separate list */
+int tls1_set_groups_list(uint16_t **pext, size_t *pextlen, const char *str)
+{
+    nid_cb_st ncb;
+    ncb.nidcnt = 0;
+    if (!CONF_parse_list(str, ':', 1, nid_cb, &ncb))
+        return 0;
+    if (pext == NULL)
+        return 1;
+    return tls1_set_groups(pext, pextlen, ncb.nid_arr, ncb.nidcnt);
+}
+/* Return group id of a key */
+static uint16_t tls1_get_group_id(EVP_PKEY *pkey)
+{
+    EC_KEY *ec = EVP_PKEY_get0_EC_KEY(pkey);
+    const EC_GROUP *grp;
+
+    if (ec == NULL)
+        return 0;
+    grp = EC_KEY_get0_group(ec);
+    return tls1_nid2group_id(EC_GROUP_get_curve_name(grp));
+}
+
+/* Check a key is compatible with compression extension */
+static int tls1_check_pkey_comp(SSL *s, EVP_PKEY *pkey)
+{
+    const EC_KEY *ec;
+    const EC_GROUP *grp;
+    unsigned char comp_id;
+    size_t i;
+
+    /* If not an EC key nothing to check */
+    if (EVP_PKEY_id(pkey) != EVP_PKEY_EC)
+        return 1;
+    ec = EVP_PKEY_get0_EC_KEY(pkey);
+    grp = EC_KEY_get0_group(ec);
+
+    /* Get required compression id */
+    if (EC_KEY_get_conv_form(ec) == POINT_CONVERSION_UNCOMPRESSED) {
+            comp_id = TLSEXT_ECPOINTFORMAT_uncompressed;
+    } else if (SSL_IS_TLS13(s)) {
+            /*
+             * ec_point_formats extension is not used in TLSv1.3 so we ignore
+             * this check.
+             */
+            return 1;
+    } else {
+        int field_type = EC_METHOD_get_field_type(EC_GROUP_method_of(grp));
+
+        if (field_type == NID_X9_62_prime_field)
+            comp_id = TLSEXT_ECPOINTFORMAT_ansiX962_compressed_prime;
+        else if (field_type == NID_X9_62_characteristic_two_field)
+            comp_id = TLSEXT_ECPOINTFORMAT_ansiX962_compressed_char2;
+        else
+            return 0;
+    }
+    /*
+     * If point formats extension present check it, otherwise everything is
+     * supported (see RFC4492).
+     */
+    if (s->session->ext.ecpointformats == NULL)
+        return 1;
+
+    for (i = 0; i < s->session->ext.ecpointformats_len; i++) {
+        if (s->session->ext.ecpointformats[i] == comp_id)
+            return 1;
+    }
+    return 0;
+}
+
+/* Check a group id matches preferences */
+int tls1_check_group_id(SSL *s, uint16_t group_id, int check_own_groups)
+    {
+    const uint16_t *groups;
+    size_t groups_len;
+
+    if (group_id == 0)
+        return 0;
+
+    /* Check for Suite B compliance */
+    if (tls1_suiteb(s) && s->s3->tmp.new_cipher != NULL) {
+        unsigned long cid = s->s3->tmp.new_cipher->id;
+
+        if (cid == TLS1_CK_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256) {
+            if (group_id != TLSEXT_curve_P_256)
+                return 0;
+        } else if (cid == TLS1_CK_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384) {
+            if (group_id != TLSEXT_curve_P_384)
+                return 0;
+        } else {
+            /* Should never happen */
+            return 0;
+        }
+    }
+
+    if (check_own_groups) {
+        /* Check group is one of our preferences */
+        tls1_get_supported_groups(s, &groups, &groups_len);
+        if (!tls1_in_list(group_id, groups, groups_len))
+            return 0;
+    }
+
+    if (!tls_curve_allowed(s, group_id, SSL_SECOP_CURVE_CHECK))
+        return 0;
+
+    /* For clients, nothing more to check */
+    if (!s->server)
+        return 1;
+
+    /* Check group is one of peers preferences */
+    tls1_get_peer_groups(s, &groups, &groups_len);
+
+    /*
+     * RFC 4492 does not require the supported elliptic curves extension
+     * so if it is not sent we can just choose any curve.
+     * It is invalid to send an empty list in the supported groups
+     * extension, so groups_len == 0 always means no extension.
+     */
+    if (groups_len == 0)
+            return 1;
+    return tls1_in_list(group_id, groups, groups_len);
+}
+
+void tls1_get_formatlist(SSL *s, const unsigned char **pformats,
+                         size_t *num_formats)
+{
+    /*
+     * If we have a custom point format list use it otherwise use default
+     */
+    if (s->ext.ecpointformats) {
+        *pformats = s->ext.ecpointformats;
+        *num_formats = s->ext.ecpointformats_len;
+    } else {
+        *pformats = ecformats_default;
+        /* For Suite B we don't support char2 fields */
+        if (tls1_suiteb(s))
+            *num_formats = sizeof(ecformats_default) - 1;
+        else
+            *num_formats = sizeof(ecformats_default);
+    }
+}
+
+/*
+ * Check cert parameters compatible with extensions: currently just checks EC
+ * certificates have compatible curves and compression.
+ */
+static int tls1_check_cert_param(SSL *s, X509 *x, int check_ee_md)
+{
+    uint16_t group_id;
+    EVP_PKEY *pkey;
+    pkey = X509_get0_pubkey(x);
+    if (pkey == NULL)
+        return 0;
+    /* If not EC nothing to do */
+    if (EVP_PKEY_id(pkey) != EVP_PKEY_EC)
+        return 1;
+    /* Check compression */
+    if (!tls1_check_pkey_comp(s, pkey))
+        return 0;
+    group_id = tls1_get_group_id(pkey);
+    /*
+     * For a server we allow the certificate to not be in our list of supported
+     * groups.
+     */
+    if (!tls1_check_group_id(s, group_id, !s->server))
+        return 0;
+    /*
+     * Special case for suite B. We *MUST* sign using SHA256+P-256 or
+     * SHA384+P-384.
+     */
+    if (check_ee_md && tls1_suiteb(s)) {
+        int check_md;
+        size_t i;
+        CERT *c = s->cert;
+
+        /* Check to see we have necessary signing algorithm */
+        if (group_id == TLSEXT_curve_P_256)
+            check_md = NID_ecdsa_with_SHA256;
+        else if (group_id == TLSEXT_curve_P_384)
+            check_md = NID_ecdsa_with_SHA384;
+        else
+            return 0;           /* Should never happen */
+        for (i = 0; i < c->shared_sigalgslen; i++) {
+            if (check_md == c->shared_sigalgs[i]->sigandhash)
+                return 1;;
+        }
+        return 0;
+    }
+    return 1;
+}
+
+/*
+ * tls1_check_ec_tmp_key - Check EC temporary key compatibility
+ * @s: SSL connection
+ * @cid: Cipher ID we're considering using
+ *
+ * Checks that the kECDHE cipher suite we're considering using
+ * is compatible with the client extensions.
+ *
+ * Returns 0 when the cipher can't be used or 1 when it can.
+ */
+int tls1_check_ec_tmp_key(SSL *s, unsigned long cid)
+{
+    /* If not Suite B just need a shared group */
+    if (!tls1_suiteb(s))
+        return tls1_shared_group(s, 0) != 0;
+    /*
+     * If Suite B, AES128 MUST use P-256 and AES256 MUST use P-384, no other
+     * curves permitted.
+     */
+    if (cid == TLS1_CK_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256)
+        return tls1_check_group_id(s, TLSEXT_curve_P_256, 1);
+    if (cid == TLS1_CK_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384)
+        return tls1_check_group_id(s, TLSEXT_curve_P_384, 1);
+
+    return 0;
+}
+
+#else
+
+static int tls1_check_cert_param(SSL *s, X509 *x, int set_ee_md)
+{
+    return 1;
+}
+
+#endif                          /* OPENSSL_NO_EC */
+
+/* Default sigalg schemes */
+static const uint16_t tls12_sigalgs[] = {
+#ifndef OPENSSL_NO_EC
+    TLSEXT_SIGALG_ecdsa_secp256r1_sha256,
+    TLSEXT_SIGALG_ecdsa_secp384r1_sha384,
+    TLSEXT_SIGALG_ecdsa_secp521r1_sha512,
+    TLSEXT_SIGALG_ed25519,
+    TLSEXT_SIGALG_ed448,
+#endif
+
+    TLSEXT_SIGALG_rsa_pss_pss_sha256,
+    TLSEXT_SIGALG_rsa_pss_pss_sha384,
+    TLSEXT_SIGALG_rsa_pss_pss_sha512,
+    TLSEXT_SIGALG_rsa_pss_rsae_sha256,
+    TLSEXT_SIGALG_rsa_pss_rsae_sha384,
+    TLSEXT_SIGALG_rsa_pss_rsae_sha512,
+
+    TLSEXT_SIGALG_rsa_pkcs1_sha256,
+    TLSEXT_SIGALG_rsa_pkcs1_sha384,
+    TLSEXT_SIGALG_rsa_pkcs1_sha512,
+
+#ifndef OPENSSL_NO_EC
+    TLSEXT_SIGALG_ecdsa_sha224,
+    TLSEXT_SIGALG_ecdsa_sha1,
+#endif
+    TLSEXT_SIGALG_rsa_pkcs1_sha224,
+    TLSEXT_SIGALG_rsa_pkcs1_sha1,
+#ifndef OPENSSL_NO_DSA
+    TLSEXT_SIGALG_dsa_sha224,
+    TLSEXT_SIGALG_dsa_sha1,
+
+    TLSEXT_SIGALG_dsa_sha256,
+    TLSEXT_SIGALG_dsa_sha384,
+    TLSEXT_SIGALG_dsa_sha512,
+#endif
+#ifndef OPENSSL_NO_GOST
+    TLSEXT_SIGALG_gostr34102012_256_gostr34112012_256,
+    TLSEXT_SIGALG_gostr34102012_512_gostr34112012_512,
+    TLSEXT_SIGALG_gostr34102001_gostr3411,
+#endif
+};
+
+#ifndef OPENSSL_NO_EC
+static const uint16_t suiteb_sigalgs[] = {
+    TLSEXT_SIGALG_ecdsa_secp256r1_sha256,
+    TLSEXT_SIGALG_ecdsa_secp384r1_sha384
+};
+#endif
+
+static const SIGALG_LOOKUP sigalg_lookup_tbl[] = {
+#ifndef OPENSSL_NO_EC
+    {"ecdsa_secp256r1_sha256", TLSEXT_SIGALG_ecdsa_secp256r1_sha256,
+     NID_sha256, SSL_MD_SHA256_IDX, EVP_PKEY_EC, SSL_PKEY_ECC,
+     NID_ecdsa_with_SHA256, NID_X9_62_prime256v1},
+    {"ecdsa_secp384r1_sha384", TLSEXT_SIGALG_ecdsa_secp384r1_sha384,
+     NID_sha384, SSL_MD_SHA384_IDX, EVP_PKEY_EC, SSL_PKEY_ECC,
+     NID_ecdsa_with_SHA384, NID_secp384r1},
+    {"ecdsa_secp521r1_sha512", TLSEXT_SIGALG_ecdsa_secp521r1_sha512,
+     NID_sha512, SSL_MD_SHA512_IDX, EVP_PKEY_EC, SSL_PKEY_ECC,
+     NID_ecdsa_with_SHA512, NID_secp521r1},
+    {"ed25519", TLSEXT_SIGALG_ed25519,
+     NID_undef, -1, EVP_PKEY_ED25519, SSL_PKEY_ED25519,
+     NID_undef, NID_undef},
+    {"ed448", TLSEXT_SIGALG_ed448,
+     NID_undef, -1, EVP_PKEY_ED448, SSL_PKEY_ED448,
+     NID_undef, NID_undef},
+    {NULL, TLSEXT_SIGALG_ecdsa_sha224,
+     NID_sha224, SSL_MD_SHA224_IDX, EVP_PKEY_EC, SSL_PKEY_ECC,
+     NID_ecdsa_with_SHA224, NID_undef},
+    {NULL, TLSEXT_SIGALG_ecdsa_sha1,
+     NID_sha1, SSL_MD_SHA1_IDX, EVP_PKEY_EC, SSL_PKEY_ECC,
+     NID_ecdsa_with_SHA1, NID_undef},
+#endif
+    {"rsa_pss_rsae_sha256", TLSEXT_SIGALG_rsa_pss_rsae_sha256,
+     NID_sha256, SSL_MD_SHA256_IDX, EVP_PKEY_RSA_PSS, SSL_PKEY_RSA,
+     NID_undef, NID_undef},
+    {"rsa_pss_rsae_sha384", TLSEXT_SIGALG_rsa_pss_rsae_sha384,
+     NID_sha384, SSL_MD_SHA384_IDX, EVP_PKEY_RSA_PSS, SSL_PKEY_RSA,
+     NID_undef, NID_undef},
+    {"rsa_pss_rsae_sha512", TLSEXT_SIGALG_rsa_pss_rsae_sha512,
+     NID_sha512, SSL_MD_SHA512_IDX, EVP_PKEY_RSA_PSS, SSL_PKEY_RSA,
+     NID_undef, NID_undef},
+    {"rsa_pss_pss_sha256", TLSEXT_SIGALG_rsa_pss_pss_sha256,
+     NID_sha256, SSL_MD_SHA256_IDX, EVP_PKEY_RSA_PSS, SSL_PKEY_RSA_PSS_SIGN,
+     NID_undef, NID_undef},
+    {"rsa_pss_pss_sha384", TLSEXT_SIGALG_rsa_pss_pss_sha384,
+     NID_sha384, SSL_MD_SHA384_IDX, EVP_PKEY_RSA_PSS, SSL_PKEY_RSA_PSS_SIGN,
+     NID_undef, NID_undef},
+    {"rsa_pss_pss_sha512", TLSEXT_SIGALG_rsa_pss_pss_sha512,
+     NID_sha512, SSL_MD_SHA512_IDX, EVP_PKEY_RSA_PSS, SSL_PKEY_RSA_PSS_SIGN,
+     NID_undef, NID_undef},
+    {"rsa_pkcs1_sha256", TLSEXT_SIGALG_rsa_pkcs1_sha256,
+     NID_sha256, SSL_MD_SHA256_IDX, EVP_PKEY_RSA, SSL_PKEY_RSA,
+     NID_sha256WithRSAEncryption, NID_undef},
+    {"rsa_pkcs1_sha384", TLSEXT_SIGALG_rsa_pkcs1_sha384,
+     NID_sha384, SSL_MD_SHA384_IDX, EVP_PKEY_RSA, SSL_PKEY_RSA,
+     NID_sha384WithRSAEncryption, NID_undef},
+    {"rsa_pkcs1_sha512", TLSEXT_SIGALG_rsa_pkcs1_sha512,
+     NID_sha512, SSL_MD_SHA512_IDX, EVP_PKEY_RSA, SSL_PKEY_RSA,
+     NID_sha512WithRSAEncryption, NID_undef},
+    {"rsa_pkcs1_sha224", TLSEXT_SIGALG_rsa_pkcs1_sha224,
+     NID_sha224, SSL_MD_SHA224_IDX, EVP_PKEY_RSA, SSL_PKEY_RSA,
+     NID_sha224WithRSAEncryption, NID_undef},
+    {"rsa_pkcs1_sha1", TLSEXT_SIGALG_rsa_pkcs1_sha1,
+     NID_sha1, SSL_MD_SHA1_IDX, EVP_PKEY_RSA, SSL_PKEY_RSA,
+     NID_sha1WithRSAEncryption, NID_undef},
+#ifndef OPENSSL_NO_DSA
+    {NULL, TLSEXT_SIGALG_dsa_sha256,
+     NID_sha256, SSL_MD_SHA256_IDX, EVP_PKEY_DSA, SSL_PKEY_DSA_SIGN,
+     NID_dsa_with_SHA256, NID_undef},
+    {NULL, TLSEXT_SIGALG_dsa_sha384,
+     NID_sha384, SSL_MD_SHA384_IDX, EVP_PKEY_DSA, SSL_PKEY_DSA_SIGN,
+     NID_undef, NID_undef},
+    {NULL, TLSEXT_SIGALG_dsa_sha512,
+     NID_sha512, SSL_MD_SHA512_IDX, EVP_PKEY_DSA, SSL_PKEY_DSA_SIGN,
+     NID_undef, NID_undef},
+    {NULL, TLSEXT_SIGALG_dsa_sha224,
+     NID_sha224, SSL_MD_SHA224_IDX, EVP_PKEY_DSA, SSL_PKEY_DSA_SIGN,
+     NID_undef, NID_undef},
+    {NULL, TLSEXT_SIGALG_dsa_sha1,
+     NID_sha1, SSL_MD_SHA1_IDX, EVP_PKEY_DSA, SSL_PKEY_DSA_SIGN,
+     NID_dsaWithSHA1, NID_undef},
+#endif
+#ifndef OPENSSL_NO_GOST
+    {NULL, TLSEXT_SIGALG_gostr34102012_256_gostr34112012_256,
+     NID_id_GostR3411_2012_256, SSL_MD_GOST12_256_IDX,
+     NID_id_GostR3410_2012_256, SSL_PKEY_GOST12_256,
+     NID_undef, NID_undef},
+    {NULL, TLSEXT_SIGALG_gostr34102012_512_gostr34112012_512,
+     NID_id_GostR3411_2012_512, SSL_MD_GOST12_512_IDX,
+     NID_id_GostR3410_2012_512, SSL_PKEY_GOST12_512,
+     NID_undef, NID_undef},
+    {NULL, TLSEXT_SIGALG_gostr34102001_gostr3411,
+     NID_id_GostR3411_94, SSL_MD_GOST94_IDX,
+     NID_id_GostR3410_2001, SSL_PKEY_GOST01,
+     NID_undef, NID_undef}
+#endif
+};
+/* Legacy sigalgs for TLS < 1.2 RSA TLS signatures */
+static const SIGALG_LOOKUP legacy_rsa_sigalg = {
+    "rsa_pkcs1_md5_sha1", 0,
+     NID_md5_sha1, SSL_MD_MD5_SHA1_IDX,
+     EVP_PKEY_RSA, SSL_PKEY_RSA,
+     NID_undef, NID_undef
+};
+
+/*
+ * Default signature algorithm values used if signature algorithms not present.
+ * From RFC5246. Note: order must match certificate index order.
+ */
+static const uint16_t tls_default_sigalg[] = {
+    TLSEXT_SIGALG_rsa_pkcs1_sha1, /* SSL_PKEY_RSA */
+    0, /* SSL_PKEY_RSA_PSS_SIGN */
+    TLSEXT_SIGALG_dsa_sha1, /* SSL_PKEY_DSA_SIGN */
+    TLSEXT_SIGALG_ecdsa_sha1, /* SSL_PKEY_ECC */
+    TLSEXT_SIGALG_gostr34102001_gostr3411, /* SSL_PKEY_GOST01 */
+    TLSEXT_SIGALG_gostr34102012_256_gostr34112012_256, /* SSL_PKEY_GOST12_256 */
+    TLSEXT_SIGALG_gostr34102012_512_gostr34112012_512, /* SSL_PKEY_GOST12_512 */
+    0, /* SSL_PKEY_ED25519 */
+    0, /* SSL_PKEY_ED448 */
+};
+
+/* Lookup TLS signature algorithm */
+static const SIGALG_LOOKUP *tls1_lookup_sigalg(uint16_t sigalg)
+{
+    size_t i;
+    const SIGALG_LOOKUP *s;
+
+    for (i = 0, s = sigalg_lookup_tbl; i < OSSL_NELEM(sigalg_lookup_tbl);
+         i++, s++) {
+        if (s->sigalg == sigalg)
+            return s;
+    }
+    return NULL;
+}
+/* Lookup hash: return 0 if invalid or not enabled */
+int tls1_lookup_md(const SIGALG_LOOKUP *lu, const EVP_MD **pmd)
+{
+    const EVP_MD *md;
+    if (lu == NULL)
+        return 0;
+    /* lu->hash == NID_undef means no associated digest */
+    if (lu->hash == NID_undef) {
+        md = NULL;
+    } else {
+        md = ssl_md(lu->hash_idx);
+        if (md == NULL)
+            return 0;
+    }
+    if (pmd)
+        *pmd = md;
+    return 1;
+}
+
+/*
+ * Check if key is large enough to generate RSA-PSS signature.
+ *
+ * The key must greater than or equal to 2 * hash length + 2.
+ * SHA512 has a hash length of 64 bytes, which is incompatible
+ * with a 128 byte (1024 bit) key.
+ */
+#define RSA_PSS_MINIMUM_KEY_SIZE(md) (2 * EVP_MD_size(md) + 2)
+static int rsa_pss_check_min_key_size(const RSA *rsa, const SIGALG_LOOKUP *lu)
+{
+    const EVP_MD *md;
+
+    if (rsa == NULL)
+        return 0;
+    if (!tls1_lookup_md(lu, &md) || md == NULL)
+        return 0;
+    if (RSA_size(rsa) < RSA_PSS_MINIMUM_KEY_SIZE(md))
+        return 0;
+    return 1;
+}
+
+/*
+ * Return a signature algorithm for TLS < 1.2 where the signature type
+ * is fixed by the certificate type.
+ */
+static const SIGALG_LOOKUP *tls1_get_legacy_sigalg(const SSL *s, int idx)
+{
+    if (idx == -1) {
+        if (s->server) {
+            size_t i;
+
+            /* Work out index corresponding to ciphersuite */
+            for (i = 0; i < SSL_PKEY_NUM; i++) {
+                const SSL_CERT_LOOKUP *clu = ssl_cert_lookup_by_idx(i);
+
+                if (clu->amask & s->s3->tmp.new_cipher->algorithm_auth) {
+                    idx = i;
+                    break;
+                }
+            }
+
+            /*
+             * Some GOST ciphersuites allow more than one signature algorithms
+             * */
+            if (idx == SSL_PKEY_GOST01 && s->s3->tmp.new_cipher->algorithm_auth != SSL_aGOST01) {
+                int real_idx;
+
+                for (real_idx = SSL_PKEY_GOST12_512; real_idx >= SSL_PKEY_GOST01;
+                     real_idx--) {
+                    if (s->cert->pkeys[real_idx].privatekey != NULL) {
+                        idx = real_idx;
+                        break;
+                    }
+                }
+            }
+        } else {
+            idx = s->cert->key - s->cert->pkeys;
+        }
+    }
+    if (idx < 0 || idx >= (int)OSSL_NELEM(tls_default_sigalg))
+        return NULL;
+    if (SSL_USE_SIGALGS(s) || idx != SSL_PKEY_RSA) {
+        const SIGALG_LOOKUP *lu = tls1_lookup_sigalg(tls_default_sigalg[idx]);
+
+        if (!tls1_lookup_md(lu, NULL))
+            return NULL;
+        return lu;
+    }
+    return &legacy_rsa_sigalg;
+}
+/* Set peer sigalg based key type */
+int tls1_set_peer_legacy_sigalg(SSL *s, const EVP_PKEY *pkey)
+{
+    size_t idx;
+    const SIGALG_LOOKUP *lu;
+
+    if (ssl_cert_lookup_by_pkey(pkey, &idx) == NULL)
+        return 0;
+    lu = tls1_get_legacy_sigalg(s, idx);
+    if (lu == NULL)
+        return 0;
+    s->s3->tmp.peer_sigalg = lu;
+    return 1;
+}
+
+size_t tls12_get_psigalgs(SSL *s, int sent, const uint16_t **psigs)
+{
+    /*
+     * If Suite B mode use Suite B sigalgs only, ignore any other
+     * preferences.
+     */
+#ifndef OPENSSL_NO_EC
+    switch (tls1_suiteb(s)) {
+    case SSL_CERT_FLAG_SUITEB_128_LOS:
+        *psigs = suiteb_sigalgs;
+        return OSSL_NELEM(suiteb_sigalgs);
+
+    case SSL_CERT_FLAG_SUITEB_128_LOS_ONLY:
+        *psigs = suiteb_sigalgs;
+        return 1;
+
+    case SSL_CERT_FLAG_SUITEB_192_LOS:
+        *psigs = suiteb_sigalgs + 1;
+        return 1;
+    }
+#endif
+    /*
+     *  We use client_sigalgs (if not NULL) if we're a server
+     *  and sending a certificate request or if we're a client and
+     *  determining which shared algorithm to use.
+     */
+    if ((s->server == sent) && s->cert->client_sigalgs != NULL) {
+        *psigs = s->cert->client_sigalgs;
+        return s->cert->client_sigalgslen;
+    } else if (s->cert->conf_sigalgs) {
+        *psigs = s->cert->conf_sigalgs;
+        return s->cert->conf_sigalgslen;
+    } else {
+        *psigs = tls12_sigalgs;
+        return OSSL_NELEM(tls12_sigalgs);
+    }
+}
+
+#ifndef OPENSSL_NO_EC
+/*
+ * Called by servers only. Checks that we have a sig alg that supports the
+ * specified EC curve.
+ */
+int tls_check_sigalg_curve(const SSL *s, int curve)
+{
+   const uint16_t *sigs;
+   size_t siglen, i;
+
+    if (s->cert->conf_sigalgs) {
+        sigs = s->cert->conf_sigalgs;
+        siglen = s->cert->conf_sigalgslen;
+    } else {
+        sigs = tls12_sigalgs;
+        siglen = OSSL_NELEM(tls12_sigalgs);
+    }
+
+    for (i = 0; i < siglen; i++) {
+        const SIGALG_LOOKUP *lu = tls1_lookup_sigalg(sigs[i]);
+
+        if (lu == NULL)
+            continue;
+        if (lu->sig == EVP_PKEY_EC
+                && lu->curve != NID_undef
+                && curve == lu->curve)
+            return 1;
+    }
+
+    return 0;
+}
+#endif
+
+/*
+ * Check signature algorithm is consistent with sent supported signature
+ * algorithms and if so set relevant digest and signature scheme in
+ * s.
+ */
+int tls12_check_peer_sigalg(SSL *s, uint16_t sig, EVP_PKEY *pkey)
+{
+    const uint16_t *sent_sigs;
+    const EVP_MD *md = NULL;
+    char sigalgstr[2];
+    size_t sent_sigslen, i, cidx;
+    int pkeyid = EVP_PKEY_id(pkey);
+    const SIGALG_LOOKUP *lu;
+
+    /* Should never happen */
+    if (pkeyid == -1)
+        return -1;
+    if (SSL_IS_TLS13(s)) {
+        /* Disallow DSA for TLS 1.3 */
+        if (pkeyid == EVP_PKEY_DSA) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS12_CHECK_PEER_SIGALG,
+                     SSL_R_WRONG_SIGNATURE_TYPE);
+            return 0;
+        }
+        /* Only allow PSS for TLS 1.3 */
+        if (pkeyid == EVP_PKEY_RSA)
+            pkeyid = EVP_PKEY_RSA_PSS;
+    }
+    lu = tls1_lookup_sigalg(sig);
+    /*
+     * Check sigalgs is known. Disallow SHA1/SHA224 with TLS 1.3. Check key type
+     * is consistent with signature: RSA keys can be used for RSA-PSS
+     */
+    if (lu == NULL
+        || (SSL_IS_TLS13(s) && (lu->hash == NID_sha1 || lu->hash == NID_sha224))
+        || (pkeyid != lu->sig
+        && (lu->sig != EVP_PKEY_RSA_PSS || pkeyid != EVP_PKEY_RSA))) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS12_CHECK_PEER_SIGALG,
+                 SSL_R_WRONG_SIGNATURE_TYPE);
+        return 0;
+    }
+    /* Check the sigalg is consistent with the key OID */
+    if (!ssl_cert_lookup_by_nid(EVP_PKEY_id(pkey), &cidx)
+            || lu->sig_idx != (int)cidx) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_TLS12_CHECK_PEER_SIGALG,
+                 SSL_R_WRONG_SIGNATURE_TYPE);
+        return 0;
+    }
+
+#ifndef OPENSSL_NO_EC
+    if (pkeyid == EVP_PKEY_EC) {
+
+        /* Check point compression is permitted */
+        if (!tls1_check_pkey_comp(s, pkey)) {
+            SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                     SSL_F_TLS12_CHECK_PEER_SIGALG,
+                     SSL_R_ILLEGAL_POINT_COMPRESSION);
+            return 0;
+        }
+
+        /* For TLS 1.3 or Suite B check curve matches signature algorithm */
+        if (SSL_IS_TLS13(s) || tls1_suiteb(s)) {
+            EC_KEY *ec = EVP_PKEY_get0_EC_KEY(pkey);
+            int curve = EC_GROUP_get_curve_name(EC_KEY_get0_group(ec));
+
+            if (lu->curve != NID_undef && curve != lu->curve) {
+                SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                         SSL_F_TLS12_CHECK_PEER_SIGALG, SSL_R_WRONG_CURVE);
+                return 0;
+            }
+        }
+        if (!SSL_IS_TLS13(s)) {
+            /* Check curve matches extensions */
+            if (!tls1_check_group_id(s, tls1_get_group_id(pkey), 1)) {
+                SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                         SSL_F_TLS12_CHECK_PEER_SIGALG, SSL_R_WRONG_CURVE);
+                return 0;
+            }
+            if (tls1_suiteb(s)) {
+                /* Check sigalg matches a permissible Suite B value */
+                if (sig != TLSEXT_SIGALG_ecdsa_secp256r1_sha256
+                    && sig != TLSEXT_SIGALG_ecdsa_secp384r1_sha384) {
+                    SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                             SSL_F_TLS12_CHECK_PEER_SIGALG,
+                             SSL_R_WRONG_SIGNATURE_TYPE);
+                    return 0;
+                }
+            }
+        }
+    } else if (tls1_suiteb(s)) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_TLS12_CHECK_PEER_SIGALG,
+                 SSL_R_WRONG_SIGNATURE_TYPE);
+        return 0;
+    }
+#endif
+
+    /* Check signature matches a type we sent */
+    sent_sigslen = tls12_get_psigalgs(s, 1, &sent_sigs);
+    for (i = 0; i < sent_sigslen; i++, sent_sigs++) {
+        if (sig == *sent_sigs)
+            break;
+    }
+    /* Allow fallback to SHA1 if not strict mode */
+    if (i == sent_sigslen && (lu->hash != NID_sha1
+        || s->cert->cert_flags & SSL_CERT_FLAGS_CHECK_TLS_STRICT)) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_TLS12_CHECK_PEER_SIGALG,
+                 SSL_R_WRONG_SIGNATURE_TYPE);
+        return 0;
+    }
+    if (!tls1_lookup_md(lu, &md)) {
+        SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_TLS12_CHECK_PEER_SIGALG,
+                 SSL_R_UNKNOWN_DIGEST);
+        return 0;
+    }
+    if (md != NULL) {
+        /*
+         * Make sure security callback allows algorithm. For historical
+         * reasons we have to pass the sigalg as a two byte char array.
+         */
+        sigalgstr[0] = (sig >> 8) & 0xff;
+        sigalgstr[1] = sig & 0xff;
+        if (!ssl_security(s, SSL_SECOP_SIGALG_CHECK,
+                    EVP_MD_size(md) * 4, EVP_MD_type(md),
+                    (void *)sigalgstr)) {
+            SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_TLS12_CHECK_PEER_SIGALG,
+                     SSL_R_WRONG_SIGNATURE_TYPE);
+            return 0;
+        }
+    }
+    /* Store the sigalg the peer uses */
+    s->s3->tmp.peer_sigalg = lu;
+    return 1;
+}
+
+int SSL_get_peer_signature_type_nid(const SSL *s, int *pnid)
+{
+    if (s->s3->tmp.peer_sigalg == NULL)
+        return 0;
+    *pnid = s->s3->tmp.peer_sigalg->sig;
+    return 1;
+}
+
+int SSL_get_signature_type_nid(const SSL *s, int *pnid)
+{
+    if (s->s3->tmp.sigalg == NULL)
+        return 0;
+    *pnid = s->s3->tmp.sigalg->sig;
+    return 1;
+}
+
+/*
+ * Set a mask of disabled algorithms: an algorithm is disabled if it isn't
+ * supported, doesn't appear in supported signature algorithms, isn't supported
+ * by the enabled protocol versions or by the security level.
+ *
+ * This function should only be used for checking which ciphers are supported
+ * by the client.
+ *
+ * Call ssl_cipher_disabled() to check that it's enabled or not.
+ */
+int ssl_set_client_disabled(SSL *s)
+{
+    s->s3->tmp.mask_a = 0;
+    s->s3->tmp.mask_k = 0;
+    ssl_set_sig_mask(&s->s3->tmp.mask_a, s, SSL_SECOP_SIGALG_MASK);
+    if (ssl_get_min_max_version(s, &s->s3->tmp.min_ver,
+                                &s->s3->tmp.max_ver, NULL) != 0)
+        return 0;
+#ifndef OPENSSL_NO_PSK
+    /* with PSK there must be client callback set */
+    if (!s->psk_client_callback) {
+        s->s3->tmp.mask_a |= SSL_aPSK;
+        s->s3->tmp.mask_k |= SSL_PSK;
+    }
+#endif                          /* OPENSSL_NO_PSK */
+#ifndef OPENSSL_NO_SRP
+    if (!(s->srp_ctx.srp_Mask & SSL_kSRP)) {
+        s->s3->tmp.mask_a |= SSL_aSRP;
+        s->s3->tmp.mask_k |= SSL_kSRP;
+    }
+#endif
+    return 1;
+}
+
+/*
+ * ssl_cipher_disabled - check that a cipher is disabled or not
+ * @s: SSL connection that you want to use the cipher on
+ * @c: cipher to check
+ * @op: Security check that you want to do
+ * @ecdhe: If set to 1 then TLSv1 ECDHE ciphers are also allowed in SSLv3
+ *
+ * Returns 1 when it's disabled, 0 when enabled.
+ */
+int ssl_cipher_disabled(SSL *s, const SSL_CIPHER *c, int op, int ecdhe)
+{
+    if (c->algorithm_mkey & s->s3->tmp.mask_k
+        || c->algorithm_auth & s->s3->tmp.mask_a)
+        return 1;
+    if (s->s3->tmp.max_ver == 0)
+        return 1;
+    if (!SSL_IS_DTLS(s)) {
+        int min_tls = c->min_tls;
+
+        /*
+         * For historical reasons we will allow ECHDE to be selected by a server
+         * in SSLv3 if we are a client
+         */
+        if (min_tls == TLS1_VERSION && ecdhe
+                && (c->algorithm_mkey & (SSL_kECDHE | SSL_kECDHEPSK)) != 0)
+            min_tls = SSL3_VERSION;
+
+        if ((min_tls > s->s3->tmp.max_ver) || (c->max_tls < s->s3->tmp.min_ver))
+            return 1;
+    }
+    if (SSL_IS_DTLS(s) && (DTLS_VERSION_GT(c->min_dtls, s->s3->tmp.max_ver)
+                           || DTLS_VERSION_LT(c->max_dtls, s->s3->tmp.min_ver)))
+        return 1;
+
+    return !ssl_security(s, op, c->strength_bits, 0, (void *)c);
+}
+
+int tls_use_ticket(SSL *s)
+{
+    if ((s->options & SSL_OP_NO_TICKET))
+        return 0;
+    return ssl_security(s, SSL_SECOP_TICKET, 0, 0, NULL);
+}
+
+int tls1_set_server_sigalgs(SSL *s)
+{
+    size_t i;
+
+    /* Clear any shared signature algorithms */
+    OPENSSL_free(s->cert->shared_sigalgs);
+    s->cert->shared_sigalgs = NULL;
+    s->cert->shared_sigalgslen = 0;
+    /* Clear certificate validity flags */
+    for (i = 0; i < SSL_PKEY_NUM; i++)
+        s->s3->tmp.valid_flags[i] = 0;
+    /*
+     * If peer sent no signature algorithms check to see if we support
+     * the default algorithm for each certificate type
+     */
+    if (s->s3->tmp.peer_cert_sigalgs == NULL
+            && s->s3->tmp.peer_sigalgs == NULL) {
+        const uint16_t *sent_sigs;
+        size_t sent_sigslen = tls12_get_psigalgs(s, 1, &sent_sigs);
+
+        for (i = 0; i < SSL_PKEY_NUM; i++) {
+            const SIGALG_LOOKUP *lu = tls1_get_legacy_sigalg(s, i);
+            size_t j;
+
+            if (lu == NULL)
+                continue;
+            /* Check default matches a type we sent */
+            for (j = 0; j < sent_sigslen; j++) {
+                if (lu->sigalg == sent_sigs[j]) {
+                        s->s3->tmp.valid_flags[i] = CERT_PKEY_SIGN;
+                        break;
+                }
+            }
+        }
+        return 1;
+    }
+
+    if (!tls1_process_sigalgs(s)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS1_SET_SERVER_SIGALGS, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    if (s->cert->shared_sigalgs != NULL)
+        return 1;
+
+    /* Fatal error if no shared signature algorithms */
+    SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_TLS1_SET_SERVER_SIGALGS,
+             SSL_R_NO_SHARED_SIGNATURE_ALGORITHMS);
+    return 0;
+}
+
+/*-
+ * Gets the ticket information supplied by the client if any.
+ *
+ *   hello: The parsed ClientHello data
+ *   ret: (output) on return, if a ticket was decrypted, then this is set to
+ *       point to the resulting session.
+ */
+SSL_TICKET_STATUS tls_get_ticket_from_client(SSL *s, CLIENTHELLO_MSG *hello,
+                                             SSL_SESSION **ret)
+{
+    size_t size;
+    RAW_EXTENSION *ticketext;
+
+    *ret = NULL;
+    s->ext.ticket_expected = 0;
+
+    /*
+     * If tickets disabled or not supported by the protocol version
+     * (e.g. TLSv1.3) behave as if no ticket present to permit stateful
+     * resumption.
+     */
+    if (s->version <= SSL3_VERSION || !tls_use_ticket(s))
+        return SSL_TICKET_NONE;
+
+    ticketext = &hello->pre_proc_exts[TLSEXT_IDX_session_ticket];
+    if (!ticketext->present)
+        return SSL_TICKET_NONE;
+
+    size = PACKET_remaining(&ticketext->data);
+
+    return tls_decrypt_ticket(s, PACKET_data(&ticketext->data), size,
+                              hello->session_id, hello->session_id_len, ret);
+}
+
+/*-
+ * tls_decrypt_ticket attempts to decrypt a session ticket.
+ *
+ * If s->tls_session_secret_cb is set and we're not doing TLSv1.3 then we are
+ * expecting a pre-shared key ciphersuite, in which case we have no use for
+ * session tickets and one will never be decrypted, nor will
+ * s->ext.ticket_expected be set to 1.
+ *
+ * Side effects:
+ *   Sets s->ext.ticket_expected to 1 if the server will have to issue
+ *   a new session ticket to the client because the client indicated support
+ *   (and s->tls_session_secret_cb is NULL) but the client either doesn't have
+ *   a session ticket or we couldn't use the one it gave us, or if
+ *   s->ctx->ext.ticket_key_cb asked to renew the client's ticket.
+ *   Otherwise, s->ext.ticket_expected is set to 0.
+ *
+ *   etick: points to the body of the session ticket extension.
+ *   eticklen: the length of the session tickets extension.
+ *   sess_id: points at the session ID.
+ *   sesslen: the length of the session ID.
+ *   psess: (output) on return, if a ticket was decrypted, then this is set to
+ *       point to the resulting session.
+ */
+SSL_TICKET_STATUS tls_decrypt_ticket(SSL *s, const unsigned char *etick,
+                                     size_t eticklen, const unsigned char *sess_id,
+                                     size_t sesslen, SSL_SESSION **psess)
+{
+    SSL_SESSION *sess = NULL;
+    unsigned char *sdec;
+    const unsigned char *p;
+    int slen, renew_ticket = 0, declen;
+    SSL_TICKET_STATUS ret = SSL_TICKET_FATAL_ERR_OTHER;
+    size_t mlen;
+    unsigned char tick_hmac[EVP_MAX_MD_SIZE];
+    HMAC_CTX *hctx = NULL;
+    EVP_CIPHER_CTX *ctx = NULL;
+    SSL_CTX *tctx = s->session_ctx;
+
+    if (eticklen == 0) {
+        /*
+         * The client will accept a ticket but doesn't currently have
+         * one (TLSv1.2 and below), or treated as a fatal error in TLSv1.3
+         */
+        ret = SSL_TICKET_EMPTY;
+        goto end;
+    }
+    if (!SSL_IS_TLS13(s) && s->ext.session_secret_cb) {
+        /*
+         * Indicate that the ticket couldn't be decrypted rather than
+         * generating the session from ticket now, trigger
+         * abbreviated handshake based on external mechanism to
+         * calculate the master secret later.
+         */
+        ret = SSL_TICKET_NO_DECRYPT;
+        goto end;
+    }
+
+    /* Need at least keyname + iv */
+    if (eticklen < TLSEXT_KEYNAME_LENGTH + EVP_MAX_IV_LENGTH) {
+        ret = SSL_TICKET_NO_DECRYPT;
+        goto end;
+    }
+
+    /* Initialize session ticket encryption and HMAC contexts */
+    hctx = HMAC_CTX_new();
+    if (hctx == NULL) {
+        ret = SSL_TICKET_FATAL_ERR_MALLOC;
+        goto end;
+    }
+    ctx = EVP_CIPHER_CTX_new();
+    if (ctx == NULL) {
+        ret = SSL_TICKET_FATAL_ERR_MALLOC;
+        goto end;
+    }
+    if (tctx->ext.ticket_key_cb) {
+        unsigned char *nctick = (unsigned char *)etick;
+        int rv = tctx->ext.ticket_key_cb(s, nctick,
+                                         nctick + TLSEXT_KEYNAME_LENGTH,
+                                         ctx, hctx, 0);
+        if (rv < 0) {
+            ret = SSL_TICKET_FATAL_ERR_OTHER;
+            goto end;
+        }
+        if (rv == 0) {
+            ret = SSL_TICKET_NO_DECRYPT;
+            goto end;
+        }
+        if (rv == 2)
+            renew_ticket = 1;
+    } else {
+        /* Check key name matches */
+        if (memcmp(etick, tctx->ext.tick_key_name,
+                   TLSEXT_KEYNAME_LENGTH) != 0) {
+            ret = SSL_TICKET_NO_DECRYPT;
+            goto end;
+        }
+        if (HMAC_Init_ex(hctx, tctx->ext.secure->tick_hmac_key,
+                         sizeof(tctx->ext.secure->tick_hmac_key),
+                         EVP_sha256(), NULL) <= 0
+            || EVP_DecryptInit_ex(ctx, EVP_aes_256_cbc(), NULL,
+                                  tctx->ext.secure->tick_aes_key,
+                                  etick + TLSEXT_KEYNAME_LENGTH) <= 0) {
+            ret = SSL_TICKET_FATAL_ERR_OTHER;
+            goto end;
+        }
+        if (SSL_IS_TLS13(s))
+            renew_ticket = 1;
+    }
+    /*
+     * Attempt to process session ticket, first conduct sanity and integrity
+     * checks on ticket.
+     */
+    mlen = HMAC_size(hctx);
+    if (mlen == 0) {
+        ret = SSL_TICKET_FATAL_ERR_OTHER;
+        goto end;
+    }
+
+    /* Sanity check ticket length: must exceed keyname + IV + HMAC */
+    if (eticklen <=
+        TLSEXT_KEYNAME_LENGTH + EVP_CIPHER_CTX_iv_length(ctx) + mlen) {
+        ret = SSL_TICKET_NO_DECRYPT;
+        goto end;
+    }
+    eticklen -= mlen;
+    /* Check HMAC of encrypted ticket */
+    if (HMAC_Update(hctx, etick, eticklen) <= 0
+        || HMAC_Final(hctx, tick_hmac, NULL) <= 0) {
+        ret = SSL_TICKET_FATAL_ERR_OTHER;
+        goto end;
+    }
+
+    if (CRYPTO_memcmp(tick_hmac, etick + eticklen, mlen)) {
+        ret = SSL_TICKET_NO_DECRYPT;
+        goto end;
+    }
+    /* Attempt to decrypt session data */
+    /* Move p after IV to start of encrypted ticket, update length */
+    p = etick + TLSEXT_KEYNAME_LENGTH + EVP_CIPHER_CTX_iv_length(ctx);
+    eticklen -= TLSEXT_KEYNAME_LENGTH + EVP_CIPHER_CTX_iv_length(ctx);
+    sdec = OPENSSL_malloc(eticklen);
+    if (sdec == NULL || EVP_DecryptUpdate(ctx, sdec, &slen, p,
+                                          (int)eticklen) <= 0) {
+        OPENSSL_free(sdec);
+        ret = SSL_TICKET_FATAL_ERR_OTHER;
+        goto end;
+    }
+    if (EVP_DecryptFinal(ctx, sdec + slen, &declen) <= 0) {
+        OPENSSL_free(sdec);
+        ret = SSL_TICKET_NO_DECRYPT;
+        goto end;
+    }
+    slen += declen;
+    p = sdec;
+
+    sess = d2i_SSL_SESSION(NULL, &p, slen);
+    slen -= p - sdec;
+    OPENSSL_free(sdec);
+    if (sess) {
+        /* Some additional consistency checks */
+        if (slen != 0) {
+            SSL_SESSION_free(sess);
+            sess = NULL;
+            ret = SSL_TICKET_NO_DECRYPT;
+            goto end;
+        }
+        /*
+         * The session ID, if non-empty, is used by some clients to detect
+         * that the ticket has been accepted. So we copy it to the session
+         * structure. If it is empty set length to zero as required by
+         * standard.
+         */
+        if (sesslen) {
+            memcpy(sess->session_id, sess_id, sesslen);
+            sess->session_id_length = sesslen;
+        }
+        if (renew_ticket)
+            ret = SSL_TICKET_SUCCESS_RENEW;
+        else
+            ret = SSL_TICKET_SUCCESS;
+        goto end;
+    }
+    ERR_clear_error();
+    /*
+     * For session parse failure, indicate that we need to send a new ticket.
+     */
+    ret = SSL_TICKET_NO_DECRYPT;
+
+ end:
+    EVP_CIPHER_CTX_free(ctx);
+    HMAC_CTX_free(hctx);
+
+    /*
+     * If set, the decrypt_ticket_cb() is called unless a fatal error was
+     * detected above. The callback is responsible for checking |ret| before it
+     * performs any action
+     */
+    if (s->session_ctx->decrypt_ticket_cb != NULL
+            && (ret == SSL_TICKET_EMPTY
+                || ret == SSL_TICKET_NO_DECRYPT
+                || ret == SSL_TICKET_SUCCESS
+                || ret == SSL_TICKET_SUCCESS_RENEW)) {
+        size_t keyname_len = eticklen;
+        int retcb;
+
+        if (keyname_len > TLSEXT_KEYNAME_LENGTH)
+            keyname_len = TLSEXT_KEYNAME_LENGTH;
+        retcb = s->session_ctx->decrypt_ticket_cb(s, sess, etick, keyname_len,
+                                                  ret,
+                                                  s->session_ctx->ticket_cb_data);
+        switch (retcb) {
+        case SSL_TICKET_RETURN_ABORT:
+            ret = SSL_TICKET_FATAL_ERR_OTHER;
+            break;
+
+        case SSL_TICKET_RETURN_IGNORE:
+            ret = SSL_TICKET_NONE;
+            SSL_SESSION_free(sess);
+            sess = NULL;
+            break;
+
+        case SSL_TICKET_RETURN_IGNORE_RENEW:
+            if (ret != SSL_TICKET_EMPTY && ret != SSL_TICKET_NO_DECRYPT)
+                ret = SSL_TICKET_NO_DECRYPT;
+            /* else the value of |ret| will already do the right thing */
+            SSL_SESSION_free(sess);
+            sess = NULL;
+            break;
+
+        case SSL_TICKET_RETURN_USE:
+        case SSL_TICKET_RETURN_USE_RENEW:
+            if (ret != SSL_TICKET_SUCCESS
+                    && ret != SSL_TICKET_SUCCESS_RENEW)
+                ret = SSL_TICKET_FATAL_ERR_OTHER;
+            else if (retcb == SSL_TICKET_RETURN_USE)
+                ret = SSL_TICKET_SUCCESS;
+            else
+                ret = SSL_TICKET_SUCCESS_RENEW;
+            break;
+
+        default:
+            ret = SSL_TICKET_FATAL_ERR_OTHER;
+        }
+    }
+
+    if (s->ext.session_secret_cb == NULL || SSL_IS_TLS13(s)) {
+        switch (ret) {
+        case SSL_TICKET_NO_DECRYPT:
+        case SSL_TICKET_SUCCESS_RENEW:
+        case SSL_TICKET_EMPTY:
+            s->ext.ticket_expected = 1;
+        }
+    }
+
+    *psess = sess;
+
+    return ret;
+}
+
+/* Check to see if a signature algorithm is allowed */
+static int tls12_sigalg_allowed(SSL *s, int op, const SIGALG_LOOKUP *lu)
+{
+    unsigned char sigalgstr[2];
+    int secbits;
+
+    /* See if sigalgs is recognised and if hash is enabled */
+    if (!tls1_lookup_md(lu, NULL))
+        return 0;
+    /* DSA is not allowed in TLS 1.3 */
+    if (SSL_IS_TLS13(s) && lu->sig == EVP_PKEY_DSA)
+        return 0;
+    /* TODO(OpenSSL1.2) fully axe DSA/etc. in ClientHello per TLS 1.3 spec */
+    if (!s->server && !SSL_IS_DTLS(s) && s->s3->tmp.min_ver >= TLS1_3_VERSION
+        && (lu->sig == EVP_PKEY_DSA || lu->hash_idx == SSL_MD_SHA1_IDX
+            || lu->hash_idx == SSL_MD_MD5_IDX
+            || lu->hash_idx == SSL_MD_SHA224_IDX))
+        return 0;
+
+    /* See if public key algorithm allowed */
+    if (ssl_cert_is_disabled(lu->sig_idx))
+        return 0;
+
+    if (lu->sig == NID_id_GostR3410_2012_256
+            || lu->sig == NID_id_GostR3410_2012_512
+            || lu->sig == NID_id_GostR3410_2001) {
+        /* We never allow GOST sig algs on the server with TLSv1.3 */
+        if (s->server && SSL_IS_TLS13(s))
+            return 0;
+        if (!s->server
+                && s->method->version == TLS_ANY_VERSION
+                && s->s3->tmp.max_ver >= TLS1_3_VERSION) {
+            int i, num;
+            STACK_OF(SSL_CIPHER) *sk;
+
+            /*
+             * We're a client that could negotiate TLSv1.3. We only allow GOST
+             * sig algs if we could negotiate TLSv1.2 or below and we have GOST
+             * ciphersuites enabled.
+             */
+
+            if (s->s3->tmp.min_ver >= TLS1_3_VERSION)
+                return 0;
+
+            sk = SSL_get_ciphers(s);
+            num = sk != NULL ? sk_SSL_CIPHER_num(sk) : 0;
+            for (i = 0; i < num; i++) {
+                const SSL_CIPHER *c;
+
+                c = sk_SSL_CIPHER_value(sk, i);
+                /* Skip disabled ciphers */
+                if (ssl_cipher_disabled(s, c, SSL_SECOP_CIPHER_SUPPORTED, 0))
+                    continue;
+
+                if ((c->algorithm_mkey & SSL_kGOST) != 0)
+                    break;
+            }
+            if (i == num)
+                return 0;
+        }
+    }
+
+    if (lu->hash == NID_undef)
+        return 1;
+    /* Security bits: half digest bits */
+    secbits = EVP_MD_size(ssl_md(lu->hash_idx)) * 4;
+    /* Finally see if security callback allows it */
+    sigalgstr[0] = (lu->sigalg >> 8) & 0xff;
+    sigalgstr[1] = lu->sigalg & 0xff;
+    return ssl_security(s, op, secbits, lu->hash, (void *)sigalgstr);
+}
+
+/*
+ * Get a mask of disabled public key algorithms based on supported signature
+ * algorithms. For example if no signature algorithm supports RSA then RSA is
+ * disabled.
+ */
+
+void ssl_set_sig_mask(uint32_t *pmask_a, SSL *s, int op)
+{
+    const uint16_t *sigalgs;
+    size_t i, sigalgslen;
+    uint32_t disabled_mask = SSL_aRSA | SSL_aDSS | SSL_aECDSA;
+    /*
+     * Go through all signature algorithms seeing if we support any
+     * in disabled_mask.
+     */
+    sigalgslen = tls12_get_psigalgs(s, 1, &sigalgs);
+    for (i = 0; i < sigalgslen; i++, sigalgs++) {
+        const SIGALG_LOOKUP *lu = tls1_lookup_sigalg(*sigalgs);
+        const SSL_CERT_LOOKUP *clu;
+
+        if (lu == NULL)
+            continue;
+
+        clu = ssl_cert_lookup_by_idx(lu->sig_idx);
+	if (clu == NULL)
+		continue;
+
+        /* If algorithm is disabled see if we can enable it */
+        if ((clu->amask & disabled_mask) != 0
+                && tls12_sigalg_allowed(s, op, lu))
+            disabled_mask &= ~clu->amask;
+    }
+    *pmask_a |= disabled_mask;
+}
+
+int tls12_copy_sigalgs(SSL *s, WPACKET *pkt,
+                       const uint16_t *psig, size_t psiglen)
+{
+    size_t i;
+    int rv = 0;
+
+    for (i = 0; i < psiglen; i++, psig++) {
+        const SIGALG_LOOKUP *lu = tls1_lookup_sigalg(*psig);
+
+        if (!tls12_sigalg_allowed(s, SSL_SECOP_SIGALG_SUPPORTED, lu))
+            continue;
+        if (!WPACKET_put_bytes_u16(pkt, *psig))
+            return 0;
+        /*
+         * If TLS 1.3 must have at least one valid TLS 1.3 message
+         * signing algorithm: i.e. neither RSA nor SHA1/SHA224
+         */
+        if (rv == 0 && (!SSL_IS_TLS13(s)
+            || (lu->sig != EVP_PKEY_RSA
+                && lu->hash != NID_sha1
+                && lu->hash != NID_sha224)))
+            rv = 1;
+    }
+    if (rv == 0)
+        SSLerr(SSL_F_TLS12_COPY_SIGALGS, SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM);
+    return rv;
+}
+
+/* Given preference and allowed sigalgs set shared sigalgs */
+static size_t tls12_shared_sigalgs(SSL *s, const SIGALG_LOOKUP **shsig,
+                                   const uint16_t *pref, size_t preflen,
+                                   const uint16_t *allow, size_t allowlen)
+{
+    const uint16_t *ptmp, *atmp;
+    size_t i, j, nmatch = 0;
+    for (i = 0, ptmp = pref; i < preflen; i++, ptmp++) {
+        const SIGALG_LOOKUP *lu = tls1_lookup_sigalg(*ptmp);
+
+        /* Skip disabled hashes or signature algorithms */
+        if (!tls12_sigalg_allowed(s, SSL_SECOP_SIGALG_SHARED, lu))
+            continue;
+        for (j = 0, atmp = allow; j < allowlen; j++, atmp++) {
+            if (*ptmp == *atmp) {
+                nmatch++;
+                if (shsig)
+                    *shsig++ = lu;
+                break;
+            }
+        }
+    }
+    return nmatch;
+}
+
+/* Set shared signature algorithms for SSL structures */
+static int tls1_set_shared_sigalgs(SSL *s)
+{
+    const uint16_t *pref, *allow, *conf;
+    size_t preflen, allowlen, conflen;
+    size_t nmatch;
+    const SIGALG_LOOKUP **salgs = NULL;
+    CERT *c = s->cert;
+    unsigned int is_suiteb = tls1_suiteb(s);
+
+    OPENSSL_free(c->shared_sigalgs);
+    c->shared_sigalgs = NULL;
+    c->shared_sigalgslen = 0;
+    /* If client use client signature algorithms if not NULL */
+    if (!s->server && c->client_sigalgs && !is_suiteb) {
+        conf = c->client_sigalgs;
+        conflen = c->client_sigalgslen;
+    } else if (c->conf_sigalgs && !is_suiteb) {
+        conf = c->conf_sigalgs;
+        conflen = c->conf_sigalgslen;
+    } else
+        conflen = tls12_get_psigalgs(s, 0, &conf);
+    if (s->options & SSL_OP_CIPHER_SERVER_PREFERENCE || is_suiteb) {
+        pref = conf;
+        preflen = conflen;
+        allow = s->s3->tmp.peer_sigalgs;
+        allowlen = s->s3->tmp.peer_sigalgslen;
+    } else {
+        allow = conf;
+        allowlen = conflen;
+        pref = s->s3->tmp.peer_sigalgs;
+        preflen = s->s3->tmp.peer_sigalgslen;
+    }
+    nmatch = tls12_shared_sigalgs(s, NULL, pref, preflen, allow, allowlen);
+    if (nmatch) {
+        if ((salgs = OPENSSL_malloc(nmatch * sizeof(*salgs))) == NULL) {
+            SSLerr(SSL_F_TLS1_SET_SHARED_SIGALGS, ERR_R_MALLOC_FAILURE);
+            return 0;
+        }
+        nmatch = tls12_shared_sigalgs(s, salgs, pref, preflen, allow, allowlen);
+    } else {
+        salgs = NULL;
+    }
+    c->shared_sigalgs = salgs;
+    c->shared_sigalgslen = nmatch;
+    return 1;
+}
+
+int tls1_save_u16(PACKET *pkt, uint16_t **pdest, size_t *pdestlen)
+{
+    unsigned int stmp;
+    size_t size, i;
+    uint16_t *buf;
+
+    size = PACKET_remaining(pkt);
+
+    /* Invalid data length */
+    if (size == 0 || (size & 1) != 0)
+        return 0;
+
+    size >>= 1;
+
+    if ((buf = OPENSSL_malloc(size * sizeof(*buf))) == NULL)  {
+        SSLerr(SSL_F_TLS1_SAVE_U16, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    for (i = 0; i < size && PACKET_get_net_2(pkt, &stmp); i++)
+        buf[i] = stmp;
+
+    if (i != size) {
+        OPENSSL_free(buf);
+        return 0;
+    }
+
+    OPENSSL_free(*pdest);
+    *pdest = buf;
+    *pdestlen = size;
+
+    return 1;
+}
+
+int tls1_save_sigalgs(SSL *s, PACKET *pkt, int cert)
+{
+    /* Extension ignored for inappropriate versions */
+    if (!SSL_USE_SIGALGS(s))
+        return 1;
+    /* Should never happen */
+    if (s->cert == NULL)
+        return 0;
+
+    if (cert)
+        return tls1_save_u16(pkt, &s->s3->tmp.peer_cert_sigalgs,
+                             &s->s3->tmp.peer_cert_sigalgslen);
+    else
+        return tls1_save_u16(pkt, &s->s3->tmp.peer_sigalgs,
+                             &s->s3->tmp.peer_sigalgslen);
+
+}
+
+/* Set preferred digest for each key type */
+
+int tls1_process_sigalgs(SSL *s)
+{
+    size_t i;
+    uint32_t *pvalid = s->s3->tmp.valid_flags;
+    CERT *c = s->cert;
+
+    if (!tls1_set_shared_sigalgs(s))
+        return 0;
+
+    for (i = 0; i < SSL_PKEY_NUM; i++)
+        pvalid[i] = 0;
+
+    for (i = 0; i < c->shared_sigalgslen; i++) {
+        const SIGALG_LOOKUP *sigptr = c->shared_sigalgs[i];
+        int idx = sigptr->sig_idx;
+
+        /* Ignore PKCS1 based sig algs in TLSv1.3 */
+        if (SSL_IS_TLS13(s) && sigptr->sig == EVP_PKEY_RSA)
+            continue;
+        /* If not disabled indicate we can explicitly sign */
+        if (pvalid[idx] == 0 && !ssl_cert_is_disabled(idx))
+            pvalid[idx] = CERT_PKEY_EXPLICIT_SIGN | CERT_PKEY_SIGN;
+    }
+    return 1;
+}
+
+int SSL_get_sigalgs(SSL *s, int idx,
+                    int *psign, int *phash, int *psignhash,
+                    unsigned char *rsig, unsigned char *rhash)
+{
+    uint16_t *psig = s->s3->tmp.peer_sigalgs;
+    size_t numsigalgs = s->s3->tmp.peer_sigalgslen;
+    if (psig == NULL || numsigalgs > INT_MAX)
+        return 0;
+    if (idx >= 0) {
+        const SIGALG_LOOKUP *lu;
+
+        if (idx >= (int)numsigalgs)
+            return 0;
+        psig += idx;
+        if (rhash != NULL)
+            *rhash = (unsigned char)((*psig >> 8) & 0xff);
+        if (rsig != NULL)
+            *rsig = (unsigned char)(*psig & 0xff);
+        lu = tls1_lookup_sigalg(*psig);
+        if (psign != NULL)
+            *psign = lu != NULL ? lu->sig : NID_undef;
+        if (phash != NULL)
+            *phash = lu != NULL ? lu->hash : NID_undef;
+        if (psignhash != NULL)
+            *psignhash = lu != NULL ? lu->sigandhash : NID_undef;
+    }
+    return (int)numsigalgs;
+}
+
+int SSL_get_shared_sigalgs(SSL *s, int idx,
+                           int *psign, int *phash, int *psignhash,
+                           unsigned char *rsig, unsigned char *rhash)
+{
+    const SIGALG_LOOKUP *shsigalgs;
+    if (s->cert->shared_sigalgs == NULL
+        || idx < 0
+        || idx >= (int)s->cert->shared_sigalgslen
+        || s->cert->shared_sigalgslen > INT_MAX)
+        return 0;
+    shsigalgs = s->cert->shared_sigalgs[idx];
+    if (phash != NULL)
+        *phash = shsigalgs->hash;
+    if (psign != NULL)
+        *psign = shsigalgs->sig;
+    if (psignhash != NULL)
+        *psignhash = shsigalgs->sigandhash;
+    if (rsig != NULL)
+        *rsig = (unsigned char)(shsigalgs->sigalg & 0xff);
+    if (rhash != NULL)
+        *rhash = (unsigned char)((shsigalgs->sigalg >> 8) & 0xff);
+    return (int)s->cert->shared_sigalgslen;
+}
+
+/* Maximum possible number of unique entries in sigalgs array */
+#define TLS_MAX_SIGALGCNT (OSSL_NELEM(sigalg_lookup_tbl) * 2)
+
+typedef struct {
+    size_t sigalgcnt;
+    /* TLSEXT_SIGALG_XXX values */
+    uint16_t sigalgs[TLS_MAX_SIGALGCNT];
+} sig_cb_st;
+
+static void get_sigorhash(int *psig, int *phash, const char *str)
+{
+    if (strcmp(str, "RSA") == 0) {
+        *psig = EVP_PKEY_RSA;
+    } else if (strcmp(str, "RSA-PSS") == 0 || strcmp(str, "PSS") == 0) {
+        *psig = EVP_PKEY_RSA_PSS;
+    } else if (strcmp(str, "DSA") == 0) {
+        *psig = EVP_PKEY_DSA;
+    } else if (strcmp(str, "ECDSA") == 0) {
+        *psig = EVP_PKEY_EC;
+    } else {
+        *phash = OBJ_sn2nid(str);
+        if (*phash == NID_undef)
+            *phash = OBJ_ln2nid(str);
+    }
+}
+/* Maximum length of a signature algorithm string component */
+#define TLS_MAX_SIGSTRING_LEN   40
+
+static int sig_cb(const char *elem, int len, void *arg)
+{
+    sig_cb_st *sarg = arg;
+    size_t i;
+    const SIGALG_LOOKUP *s;
+    char etmp[TLS_MAX_SIGSTRING_LEN], *p;
+    int sig_alg = NID_undef, hash_alg = NID_undef;
+    if (elem == NULL)
+        return 0;
+    if (sarg->sigalgcnt == TLS_MAX_SIGALGCNT)
+        return 0;
+    if (len > (int)(sizeof(etmp) - 1))
+        return 0;
+    memcpy(etmp, elem, len);
+    etmp[len] = 0;
+    p = strchr(etmp, '+');
+    /*
+     * We only allow SignatureSchemes listed in the sigalg_lookup_tbl;
+     * if there's no '+' in the provided name, look for the new-style combined
+     * name.  If not, match both sig+hash to find the needed SIGALG_LOOKUP.
+     * Just sig+hash is not unique since TLS 1.3 adds rsa_pss_pss_* and
+     * rsa_pss_rsae_* that differ only by public key OID; in such cases
+     * we will pick the _rsae_ variant, by virtue of them appearing earlier
+     * in the table.
+     */
+    if (p == NULL) {
+        for (i = 0, s = sigalg_lookup_tbl; i < OSSL_NELEM(sigalg_lookup_tbl);
+             i++, s++) {
+            if (s->name != NULL && strcmp(etmp, s->name) == 0) {
+                sarg->sigalgs[sarg->sigalgcnt++] = s->sigalg;
+                break;
+            }
+        }
+        if (i == OSSL_NELEM(sigalg_lookup_tbl))
+            return 0;
+    } else {
+        *p = 0;
+        p++;
+        if (*p == 0)
+            return 0;
+        get_sigorhash(&sig_alg, &hash_alg, etmp);
+        get_sigorhash(&sig_alg, &hash_alg, p);
+        if (sig_alg == NID_undef || hash_alg == NID_undef)
+            return 0;
+        for (i = 0, s = sigalg_lookup_tbl; i < OSSL_NELEM(sigalg_lookup_tbl);
+             i++, s++) {
+            if (s->hash == hash_alg && s->sig == sig_alg) {
+                sarg->sigalgs[sarg->sigalgcnt++] = s->sigalg;
+                break;
+            }
+        }
+        if (i == OSSL_NELEM(sigalg_lookup_tbl))
+            return 0;
+    }
+
+    /* Reject duplicates */
+    for (i = 0; i < sarg->sigalgcnt - 1; i++) {
+        if (sarg->sigalgs[i] == sarg->sigalgs[sarg->sigalgcnt - 1]) {
+            sarg->sigalgcnt--;
+            return 0;
+        }
+    }
+    return 1;
+}
+
+/*
+ * Set supported signature algorithms based on a colon separated list of the
+ * form sig+hash e.g. RSA+SHA512:DSA+SHA512
+ */
+int tls1_set_sigalgs_list(CERT *c, const char *str, int client)
+{
+    sig_cb_st sig;
+    sig.sigalgcnt = 0;
+    if (!CONF_parse_list(str, ':', 1, sig_cb, &sig))
+        return 0;
+    if (c == NULL)
+        return 1;
+    return tls1_set_raw_sigalgs(c, sig.sigalgs, sig.sigalgcnt, client);
+}
+
+int tls1_set_raw_sigalgs(CERT *c, const uint16_t *psigs, size_t salglen,
+                     int client)
+{
+    uint16_t *sigalgs;
+
+    if ((sigalgs = OPENSSL_malloc(salglen * sizeof(*sigalgs))) == NULL) {
+        SSLerr(SSL_F_TLS1_SET_RAW_SIGALGS, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    memcpy(sigalgs, psigs, salglen * sizeof(*sigalgs));
+
+    if (client) {
+        OPENSSL_free(c->client_sigalgs);
+        c->client_sigalgs = sigalgs;
+        c->client_sigalgslen = salglen;
+    } else {
+        OPENSSL_free(c->conf_sigalgs);
+        c->conf_sigalgs = sigalgs;
+        c->conf_sigalgslen = salglen;
+    }
+
+    return 1;
+}
+
+int tls1_set_sigalgs(CERT *c, const int *psig_nids, size_t salglen, int client)
+{
+    uint16_t *sigalgs, *sptr;
+    size_t i;
+
+    if (salglen & 1)
+        return 0;
+    if ((sigalgs = OPENSSL_malloc((salglen / 2) * sizeof(*sigalgs))) == NULL) {
+        SSLerr(SSL_F_TLS1_SET_SIGALGS, ERR_R_MALLOC_FAILURE);
+        return 0;
+    }
+    for (i = 0, sptr = sigalgs; i < salglen; i += 2) {
+        size_t j;
+        const SIGALG_LOOKUP *curr;
+        int md_id = *psig_nids++;
+        int sig_id = *psig_nids++;
+
+        for (j = 0, curr = sigalg_lookup_tbl; j < OSSL_NELEM(sigalg_lookup_tbl);
+             j++, curr++) {
+            if (curr->hash == md_id && curr->sig == sig_id) {
+                *sptr++ = curr->sigalg;
+                break;
+            }
+        }
+
+        if (j == OSSL_NELEM(sigalg_lookup_tbl))
+            goto err;
+    }
+
+    if (client) {
+        OPENSSL_free(c->client_sigalgs);
+        c->client_sigalgs = sigalgs;
+        c->client_sigalgslen = salglen / 2;
+    } else {
+        OPENSSL_free(c->conf_sigalgs);
+        c->conf_sigalgs = sigalgs;
+        c->conf_sigalgslen = salglen / 2;
+    }
+
+    return 1;
+
+ err:
+    OPENSSL_free(sigalgs);
+    return 0;
+}
+
+static int tls1_check_sig_alg(CERT *c, X509 *x, int default_nid)
+{
+    int sig_nid;
+    size_t i;
+    if (default_nid == -1)
+        return 1;
+    sig_nid = X509_get_signature_nid(x);
+    if (default_nid)
+        return sig_nid == default_nid ? 1 : 0;
+    for (i = 0; i < c->shared_sigalgslen; i++)
+        if (sig_nid == c->shared_sigalgs[i]->sigandhash)
+            return 1;
+    return 0;
+}
+
+/* Check to see if a certificate issuer name matches list of CA names */
+static int ssl_check_ca_name(STACK_OF(X509_NAME) *names, X509 *x)
+{
+    X509_NAME *nm;
+    int i;
+    nm = X509_get_issuer_name(x);
+    for (i = 0; i < sk_X509_NAME_num(names); i++) {
+        if (!X509_NAME_cmp(nm, sk_X509_NAME_value(names, i)))
+            return 1;
+    }
+    return 0;
+}
+
+/*
+ * Check certificate chain is consistent with TLS extensions and is usable by
+ * server. This servers two purposes: it allows users to check chains before
+ * passing them to the server and it allows the server to check chains before
+ * attempting to use them.
+ */
+
+/* Flags which need to be set for a certificate when strict mode not set */
+
+#define CERT_PKEY_VALID_FLAGS \
+        (CERT_PKEY_EE_SIGNATURE|CERT_PKEY_EE_PARAM)
+/* Strict mode flags */
+#define CERT_PKEY_STRICT_FLAGS \
+         (CERT_PKEY_VALID_FLAGS|CERT_PKEY_CA_SIGNATURE|CERT_PKEY_CA_PARAM \
+         | CERT_PKEY_ISSUER_NAME|CERT_PKEY_CERT_TYPE)
+
+int tls1_check_chain(SSL *s, X509 *x, EVP_PKEY *pk, STACK_OF(X509) *chain,
+                     int idx)
+{
+    int i;
+    int rv = 0;
+    int check_flags = 0, strict_mode;
+    CERT_PKEY *cpk = NULL;
+    CERT *c = s->cert;
+    uint32_t *pvalid;
+    unsigned int suiteb_flags = tls1_suiteb(s);
+    /* idx == -1 means checking server chains */
+    if (idx != -1) {
+        /* idx == -2 means checking client certificate chains */
+        if (idx == -2) {
+            cpk = c->key;
+            idx = (int)(cpk - c->pkeys);
+        } else
+            cpk = c->pkeys + idx;
+        pvalid = s->s3->tmp.valid_flags + idx;
+        x = cpk->x509;
+        pk = cpk->privatekey;
+        chain = cpk->chain;
+        strict_mode = c->cert_flags & SSL_CERT_FLAGS_CHECK_TLS_STRICT;
+        /* If no cert or key, forget it */
+        if (!x || !pk)
+            goto end;
+    } else {
+        size_t certidx;
+
+        if (!x || !pk)
+            return 0;
+
+        if (ssl_cert_lookup_by_pkey(pk, &certidx) == NULL)
+            return 0;
+        idx = certidx;
+        pvalid = s->s3->tmp.valid_flags + idx;
+
+        if (c->cert_flags & SSL_CERT_FLAGS_CHECK_TLS_STRICT)
+            check_flags = CERT_PKEY_STRICT_FLAGS;
+        else
+            check_flags = CERT_PKEY_VALID_FLAGS;
+        strict_mode = 1;
+    }
+
+    if (suiteb_flags) {
+        int ok;
+        if (check_flags)
+            check_flags |= CERT_PKEY_SUITEB;
+        ok = X509_chain_check_suiteb(NULL, x, chain, suiteb_flags);
+        if (ok == X509_V_OK)
+            rv |= CERT_PKEY_SUITEB;
+        else if (!check_flags)
+            goto end;
+    }
+
+    /*
+     * Check all signature algorithms are consistent with signature
+     * algorithms extension if TLS 1.2 or later and strict mode.
+     */
+    if (TLS1_get_version(s) >= TLS1_2_VERSION && strict_mode) {
+        int default_nid;
+        int rsign = 0;
+        if (s->s3->tmp.peer_cert_sigalgs != NULL
+                || s->s3->tmp.peer_sigalgs != NULL) {
+            default_nid = 0;
+        /* If no sigalgs extension use defaults from RFC5246 */
+        } else {
+            switch (idx) {
+            case SSL_PKEY_RSA:
+                rsign = EVP_PKEY_RSA;
+                default_nid = NID_sha1WithRSAEncryption;
+                break;
+
+            case SSL_PKEY_DSA_SIGN:
+                rsign = EVP_PKEY_DSA;
+                default_nid = NID_dsaWithSHA1;
+                break;
+
+            case SSL_PKEY_ECC:
+                rsign = EVP_PKEY_EC;
+                default_nid = NID_ecdsa_with_SHA1;
+                break;
+
+            case SSL_PKEY_GOST01:
+                rsign = NID_id_GostR3410_2001;
+                default_nid = NID_id_GostR3411_94_with_GostR3410_2001;
+                break;
+
+            case SSL_PKEY_GOST12_256:
+                rsign = NID_id_GostR3410_2012_256;
+                default_nid = NID_id_tc26_signwithdigest_gost3410_2012_256;
+                break;
+
+            case SSL_PKEY_GOST12_512:
+                rsign = NID_id_GostR3410_2012_512;
+                default_nid = NID_id_tc26_signwithdigest_gost3410_2012_512;
+                break;
+
+            default:
+                default_nid = -1;
+                break;
+            }
+        }
+        /*
+         * If peer sent no signature algorithms extension and we have set
+         * preferred signature algorithms check we support sha1.
+         */
+        if (default_nid > 0 && c->conf_sigalgs) {
+            size_t j;
+            const uint16_t *p = c->conf_sigalgs;
+            for (j = 0; j < c->conf_sigalgslen; j++, p++) {
+                const SIGALG_LOOKUP *lu = tls1_lookup_sigalg(*p);
+
+                if (lu != NULL && lu->hash == NID_sha1 && lu->sig == rsign)
+                    break;
+            }
+            if (j == c->conf_sigalgslen) {
+                if (check_flags)
+                    goto skip_sigs;
+                else
+                    goto end;
+            }
+        }
+        /* Check signature algorithm of each cert in chain */
+        if (!tls1_check_sig_alg(c, x, default_nid)) {
+            if (!check_flags)
+                goto end;
+        } else
+            rv |= CERT_PKEY_EE_SIGNATURE;
+        rv |= CERT_PKEY_CA_SIGNATURE;
+        for (i = 0; i < sk_X509_num(chain); i++) {
+            if (!tls1_check_sig_alg(c, sk_X509_value(chain, i), default_nid)) {
+                if (check_flags) {
+                    rv &= ~CERT_PKEY_CA_SIGNATURE;
+                    break;
+                } else
+                    goto end;
+            }
+        }
+    }
+    /* Else not TLS 1.2, so mark EE and CA signing algorithms OK */
+    else if (check_flags)
+        rv |= CERT_PKEY_EE_SIGNATURE | CERT_PKEY_CA_SIGNATURE;
+ skip_sigs:
+    /* Check cert parameters are consistent */
+    if (tls1_check_cert_param(s, x, 1))
+        rv |= CERT_PKEY_EE_PARAM;
+    else if (!check_flags)
+        goto end;
+    if (!s->server)
+        rv |= CERT_PKEY_CA_PARAM;
+    /* In strict mode check rest of chain too */
+    else if (strict_mode) {
+        rv |= CERT_PKEY_CA_PARAM;
+        for (i = 0; i < sk_X509_num(chain); i++) {
+            X509 *ca = sk_X509_value(chain, i);
+            if (!tls1_check_cert_param(s, ca, 0)) {
+                if (check_flags) {
+                    rv &= ~CERT_PKEY_CA_PARAM;
+                    break;
+                } else
+                    goto end;
+            }
+        }
+    }
+    if (!s->server && strict_mode) {
+        STACK_OF(X509_NAME) *ca_dn;
+        int check_type = 0;
+        switch (EVP_PKEY_id(pk)) {
+        case EVP_PKEY_RSA:
+            check_type = TLS_CT_RSA_SIGN;
+            break;
+        case EVP_PKEY_DSA:
+            check_type = TLS_CT_DSS_SIGN;
+            break;
+        case EVP_PKEY_EC:
+            check_type = TLS_CT_ECDSA_SIGN;
+            break;
+        }
+        if (check_type) {
+            const uint8_t *ctypes = s->s3->tmp.ctype;
+            size_t j;
+
+            for (j = 0; j < s->s3->tmp.ctype_len; j++, ctypes++) {
+                if (*ctypes == check_type) {
+                    rv |= CERT_PKEY_CERT_TYPE;
+                    break;
+                }
+            }
+            if (!(rv & CERT_PKEY_CERT_TYPE) && !check_flags)
+                goto end;
+        } else {
+            rv |= CERT_PKEY_CERT_TYPE;
+        }
+
+        ca_dn = s->s3->tmp.peer_ca_names;
+
+        if (!sk_X509_NAME_num(ca_dn))
+            rv |= CERT_PKEY_ISSUER_NAME;
+
+        if (!(rv & CERT_PKEY_ISSUER_NAME)) {
+            if (ssl_check_ca_name(ca_dn, x))
+                rv |= CERT_PKEY_ISSUER_NAME;
+        }
+        if (!(rv & CERT_PKEY_ISSUER_NAME)) {
+            for (i = 0; i < sk_X509_num(chain); i++) {
+                X509 *xtmp = sk_X509_value(chain, i);
+                if (ssl_check_ca_name(ca_dn, xtmp)) {
+                    rv |= CERT_PKEY_ISSUER_NAME;
+                    break;
+                }
+            }
+        }
+        if (!check_flags && !(rv & CERT_PKEY_ISSUER_NAME))
+            goto end;
+    } else
+        rv |= CERT_PKEY_ISSUER_NAME | CERT_PKEY_CERT_TYPE;
+
+    if (!check_flags || (rv & check_flags) == check_flags)
+        rv |= CERT_PKEY_VALID;
+
+ end:
+
+    if (TLS1_get_version(s) >= TLS1_2_VERSION)
+        rv |= *pvalid & (CERT_PKEY_EXPLICIT_SIGN | CERT_PKEY_SIGN);
+    else
+        rv |= CERT_PKEY_SIGN | CERT_PKEY_EXPLICIT_SIGN;
+
+    /*
+     * When checking a CERT_PKEY structure all flags are irrelevant if the
+     * chain is invalid.
+     */
+    if (!check_flags) {
+        if (rv & CERT_PKEY_VALID) {
+            *pvalid = rv;
+        } else {
+            /* Preserve sign and explicit sign flag, clear rest */
+            *pvalid &= CERT_PKEY_EXPLICIT_SIGN | CERT_PKEY_SIGN;
+            return 0;
+        }
+    }
+    return rv;
+}
+
+/* Set validity of certificates in an SSL structure */
+void tls1_set_cert_validity(SSL *s)
+{
+    tls1_check_chain(s, NULL, NULL, NULL, SSL_PKEY_RSA);
+    tls1_check_chain(s, NULL, NULL, NULL, SSL_PKEY_RSA_PSS_SIGN);
+    tls1_check_chain(s, NULL, NULL, NULL, SSL_PKEY_DSA_SIGN);
+    tls1_check_chain(s, NULL, NULL, NULL, SSL_PKEY_ECC);
+    tls1_check_chain(s, NULL, NULL, NULL, SSL_PKEY_GOST01);
+    tls1_check_chain(s, NULL, NULL, NULL, SSL_PKEY_GOST12_256);
+    tls1_check_chain(s, NULL, NULL, NULL, SSL_PKEY_GOST12_512);
+    tls1_check_chain(s, NULL, NULL, NULL, SSL_PKEY_ED25519);
+    tls1_check_chain(s, NULL, NULL, NULL, SSL_PKEY_ED448);
+}
+
+/* User level utility function to check a chain is suitable */
+int SSL_check_chain(SSL *s, X509 *x, EVP_PKEY *pk, STACK_OF(X509) *chain)
+{
+    return tls1_check_chain(s, x, pk, chain, -1);
+}
+
+#ifndef OPENSSL_NO_DH
+DH *ssl_get_auto_dh(SSL *s)
+{
+    int dh_secbits = 80;
+    if (s->cert->dh_tmp_auto == 2)
+        return DH_get_1024_160();
+    if (s->s3->tmp.new_cipher->algorithm_auth & (SSL_aNULL | SSL_aPSK)) {
+        if (s->s3->tmp.new_cipher->strength_bits == 256)
+            dh_secbits = 128;
+        else
+            dh_secbits = 80;
+    } else {
+        if (s->s3->tmp.cert == NULL)
+            return NULL;
+        dh_secbits = EVP_PKEY_security_bits(s->s3->tmp.cert->privatekey);
+    }
+
+    if (dh_secbits >= 128) {
+        DH *dhp = DH_new();
+        BIGNUM *p, *g;
+        if (dhp == NULL)
+            return NULL;
+        g = BN_new();
+        if (g == NULL || !BN_set_word(g, 2)) {
+            DH_free(dhp);
+            BN_free(g);
+            return NULL;
+        }
+        if (dh_secbits >= 192)
+            p = BN_get_rfc3526_prime_8192(NULL);
+        else
+            p = BN_get_rfc3526_prime_3072(NULL);
+        if (p == NULL || !DH_set0_pqg(dhp, p, NULL, g)) {
+            DH_free(dhp);
+            BN_free(p);
+            BN_free(g);
+            return NULL;
+        }
+        return dhp;
+    }
+    if (dh_secbits >= 112)
+        return DH_get_2048_224();
+    return DH_get_1024_160();
+}
+#endif
+
+static int ssl_security_cert_key(SSL *s, SSL_CTX *ctx, X509 *x, int op)
+{
+    int secbits = -1;
+    EVP_PKEY *pkey = X509_get0_pubkey(x);
+    if (pkey) {
+        /*
+         * If no parameters this will return -1 and fail using the default
+         * security callback for any non-zero security level. This will
+         * reject keys which omit parameters but this only affects DSA and
+         * omission of parameters is never (?) done in practice.
+         */
+        secbits = EVP_PKEY_security_bits(pkey);
+    }
+    if (s)
+        return ssl_security(s, op, secbits, 0, x);
+    else
+        return ssl_ctx_security(ctx, op, secbits, 0, x);
+}
+
+static int ssl_security_cert_sig(SSL *s, SSL_CTX *ctx, X509 *x, int op)
+{
+    /* Lookup signature algorithm digest */
+    int secbits, nid, pknid;
+    /* Don't check signature if self signed */
+    if ((X509_get_extension_flags(x) & EXFLAG_SS) != 0)
+        return 1;
+    if (!X509_get_signature_info(x, &nid, &pknid, &secbits, NULL))
+        secbits = -1;
+    /* If digest NID not defined use signature NID */
+    if (nid == NID_undef)
+        nid = pknid;
+    if (s)
+        return ssl_security(s, op, secbits, nid, x);
+    else
+        return ssl_ctx_security(ctx, op, secbits, nid, x);
+}
+
+int ssl_security_cert(SSL *s, SSL_CTX *ctx, X509 *x, int vfy, int is_ee)
+{
+    if (vfy)
+        vfy = SSL_SECOP_PEER;
+    if (is_ee) {
+        if (!ssl_security_cert_key(s, ctx, x, SSL_SECOP_EE_KEY | vfy))
+            return SSL_R_EE_KEY_TOO_SMALL;
+    } else {
+        if (!ssl_security_cert_key(s, ctx, x, SSL_SECOP_CA_KEY | vfy))
+            return SSL_R_CA_KEY_TOO_SMALL;
+    }
+    if (!ssl_security_cert_sig(s, ctx, x, SSL_SECOP_CA_MD | vfy))
+        return SSL_R_CA_MD_TOO_WEAK;
+    return 1;
+}
+
+/*
+ * Check security of a chain, if |sk| includes the end entity certificate then
+ * |x| is NULL. If |vfy| is 1 then we are verifying a peer chain and not sending
+ * one to the peer. Return values: 1 if ok otherwise error code to use
+ */
+
+int ssl_security_cert_chain(SSL *s, STACK_OF(X509) *sk, X509 *x, int vfy)
+{
+    int rv, start_idx, i;
+    if (x == NULL) {
+        x = sk_X509_value(sk, 0);
+        start_idx = 1;
+    } else
+        start_idx = 0;
+
+    rv = ssl_security_cert(s, NULL, x, vfy, 1);
+    if (rv != 1)
+        return rv;
+
+    for (i = start_idx; i < sk_X509_num(sk); i++) {
+        x = sk_X509_value(sk, i);
+        rv = ssl_security_cert(s, NULL, x, vfy, 0);
+        if (rv != 1)
+            return rv;
+    }
+    return 1;
+}
+
+/*
+ * For TLS 1.2 servers check if we have a certificate which can be used
+ * with the signature algorithm "lu" and return index of certificate.
+ */
+
+static int tls12_get_cert_sigalg_idx(const SSL *s, const SIGALG_LOOKUP *lu)
+{
+    int sig_idx = lu->sig_idx;
+    const SSL_CERT_LOOKUP *clu = ssl_cert_lookup_by_idx(sig_idx);
+
+    /* If not recognised or not supported by cipher mask it is not suitable */
+    if (clu == NULL
+            || (clu->amask & s->s3->tmp.new_cipher->algorithm_auth) == 0
+            || (clu->nid == EVP_PKEY_RSA_PSS
+                && (s->s3->tmp.new_cipher->algorithm_mkey & SSL_kRSA) != 0))
+        return -1;
+
+    return s->s3->tmp.valid_flags[sig_idx] & CERT_PKEY_VALID ? sig_idx : -1;
+}
+
+/*
+ * Returns true if |s| has a usable certificate configured for use
+ * with signature scheme |sig|.
+ * "Usable" includes a check for presence as well as applying
+ * the signature_algorithm_cert restrictions sent by the peer (if any).
+ * Returns false if no usable certificate is found.
+ */
+static int has_usable_cert(SSL *s, const SIGALG_LOOKUP *sig, int idx)
+{
+    const SIGALG_LOOKUP *lu;
+    int mdnid, pknid, default_mdnid;
+    int mandatory_md = 0;
+    size_t i;
+
+    /* TLS 1.2 callers can override lu->sig_idx, but not TLS 1.3 callers. */
+    if (idx == -1)
+        idx = sig->sig_idx;
+    if (!ssl_has_cert(s, idx))
+        return 0;
+    /* If the EVP_PKEY reports a mandatory digest, allow nothing else. */
+    ERR_set_mark();
+    switch (EVP_PKEY_get_default_digest_nid(s->cert->pkeys[idx].privatekey,
+                                            &default_mdnid)) {
+    case 2:
+        mandatory_md = 1;
+        break;
+    case 1:
+        break;
+    default: /* If it didn't report a mandatory NID, for whatever reasons,
+              * just clear the error and allow all hashes to be used. */
+        ERR_pop_to_mark();
+    }
+    if (s->s3->tmp.peer_cert_sigalgs != NULL) {
+        for (i = 0; i < s->s3->tmp.peer_cert_sigalgslen; i++) {
+            lu = tls1_lookup_sigalg(s->s3->tmp.peer_cert_sigalgs[i]);
+            if (lu == NULL
+                || !X509_get_signature_info(s->cert->pkeys[idx].x509, &mdnid,
+                                            &pknid, NULL, NULL)
+                || (mandatory_md && mdnid != default_mdnid))
+                continue;
+            /*
+             * TODO this does not differentiate between the
+             * rsa_pss_pss_* and rsa_pss_rsae_* schemes since we do not
+             * have a chain here that lets us look at the key OID in the
+             * signing certificate.
+             */
+            if (mdnid == lu->hash && pknid == lu->sig)
+                return 1;
+        }
+        return 0;
+    }
+    return !mandatory_md || sig->hash == default_mdnid;
+}
+
+/*
+ * Choose an appropriate signature algorithm based on available certificates
+ * Sets chosen certificate and signature algorithm.
+ *
+ * For servers if we fail to find a required certificate it is a fatal error,
+ * an appropriate error code is set and a TLS alert is sent.
+ *
+ * For clients fatalerrs is set to 0. If a certificate is not suitable it is not
+ * a fatal error: we will either try another certificate or not present one
+ * to the server. In this case no error is set.
+ */
+int tls_choose_sigalg(SSL *s, int fatalerrs)
+{
+    const SIGALG_LOOKUP *lu = NULL;
+    int sig_idx = -1;
+
+    s->s3->tmp.cert = NULL;
+    s->s3->tmp.sigalg = NULL;
+
+    if (SSL_IS_TLS13(s)) {
+        size_t i;
+#ifndef OPENSSL_NO_EC
+        int curve = -1;
+#endif
+
+        /* Look for a certificate matching shared sigalgs */
+        for (i = 0; i < s->cert->shared_sigalgslen; i++) {
+            lu = s->cert->shared_sigalgs[i];
+            sig_idx = -1;
+
+            /* Skip SHA1, SHA224, DSA and RSA if not PSS */
+            if (lu->hash == NID_sha1
+                || lu->hash == NID_sha224
+                || lu->sig == EVP_PKEY_DSA
+                || lu->sig == EVP_PKEY_RSA)
+                continue;
+            /* Check that we have a cert, and signature_algorithms_cert */
+            if (!tls1_lookup_md(lu, NULL) || !has_usable_cert(s, lu, -1))
+                continue;
+            if (lu->sig == EVP_PKEY_EC) {
+#ifndef OPENSSL_NO_EC
+                if (curve == -1) {
+                    EC_KEY *ec = EVP_PKEY_get0_EC_KEY(s->cert->pkeys[SSL_PKEY_ECC].privatekey);
+
+                    curve = EC_GROUP_get_curve_name(EC_KEY_get0_group(ec));
+                }
+                if (lu->curve != NID_undef && curve != lu->curve)
+                    continue;
+#else
+                continue;
+#endif
+            } else if (lu->sig == EVP_PKEY_RSA_PSS) {
+                /* validate that key is large enough for the signature algorithm */
+                EVP_PKEY *pkey;
+
+                pkey = s->cert->pkeys[lu->sig_idx].privatekey;
+                if (!rsa_pss_check_min_key_size(EVP_PKEY_get0(pkey), lu))
+                    continue;
+            }
+            break;
+        }
+        if (i == s->cert->shared_sigalgslen) {
+            if (!fatalerrs)
+                return 1;
+            SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_TLS_CHOOSE_SIGALG,
+                     SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM);
+            return 0;
+        }
+    } else {
+        /* If ciphersuite doesn't require a cert nothing to do */
+        if (!(s->s3->tmp.new_cipher->algorithm_auth & SSL_aCERT))
+            return 1;
+        if (!s->server && !ssl_has_cert(s, s->cert->key - s->cert->pkeys))
+                return 1;
+
+        if (SSL_USE_SIGALGS(s)) {
+            size_t i;
+            if (s->s3->tmp.peer_sigalgs != NULL) {
+#ifndef OPENSSL_NO_EC
+                int curve;
+
+                /* For Suite B need to match signature algorithm to curve */
+                if (tls1_suiteb(s)) {
+                    EC_KEY *ec = EVP_PKEY_get0_EC_KEY(s->cert->pkeys[SSL_PKEY_ECC].privatekey);
+                    curve = EC_GROUP_get_curve_name(EC_KEY_get0_group(ec));
+                } else {
+                    curve = -1;
+                }
+#endif
+
+                /*
+                 * Find highest preference signature algorithm matching
+                 * cert type
+                 */
+                for (i = 0; i < s->cert->shared_sigalgslen; i++) {
+                    lu = s->cert->shared_sigalgs[i];
+
+                    if (s->server) {
+                        if ((sig_idx = tls12_get_cert_sigalg_idx(s, lu)) == -1)
+                            continue;
+                    } else {
+                        int cc_idx = s->cert->key - s->cert->pkeys;
+
+                        sig_idx = lu->sig_idx;
+                        if (cc_idx != sig_idx)
+                            continue;
+                    }
+                    /* Check that we have a cert, and sig_algs_cert */
+                    if (!has_usable_cert(s, lu, sig_idx))
+                        continue;
+                    if (lu->sig == EVP_PKEY_RSA_PSS) {
+                        /* validate that key is large enough for the signature algorithm */
+                        EVP_PKEY *pkey = s->cert->pkeys[sig_idx].privatekey;
+
+                        if (!rsa_pss_check_min_key_size(EVP_PKEY_get0(pkey), lu))
+                            continue;
+                    }
+#ifndef OPENSSL_NO_EC
+                    if (curve == -1 || lu->curve == curve)
+#endif
+                        break;
+                }
+                if (i == s->cert->shared_sigalgslen) {
+                    if (!fatalerrs)
+                        return 1;
+                    SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
+                             SSL_F_TLS_CHOOSE_SIGALG,
+                             SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM);
+                    return 0;
+                }
+            } else {
+                /*
+                 * If we have no sigalg use defaults
+                 */
+                const uint16_t *sent_sigs;
+                size_t sent_sigslen;
+
+                if ((lu = tls1_get_legacy_sigalg(s, -1)) == NULL) {
+                    if (!fatalerrs)
+                        return 1;
+                    SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CHOOSE_SIGALG,
+                             ERR_R_INTERNAL_ERROR);
+                    return 0;
+                }
+
+                /* Check signature matches a type we sent */
+                sent_sigslen = tls12_get_psigalgs(s, 1, &sent_sigs);
+                for (i = 0; i < sent_sigslen; i++, sent_sigs++) {
+                    if (lu->sigalg == *sent_sigs
+                            && has_usable_cert(s, lu, lu->sig_idx))
+                        break;
+                }
+                if (i == sent_sigslen) {
+                    if (!fatalerrs)
+                        return 1;
+                    SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
+                             SSL_F_TLS_CHOOSE_SIGALG,
+                             SSL_R_WRONG_SIGNATURE_TYPE);
+                    return 0;
+                }
+            }
+        } else {
+            if ((lu = tls1_get_legacy_sigalg(s, -1)) == NULL) {
+                if (!fatalerrs)
+                    return 1;
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_CHOOSE_SIGALG,
+                         ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+        }
+    }
+    if (sig_idx == -1)
+        sig_idx = lu->sig_idx;
+    s->s3->tmp.cert = &s->cert->pkeys[sig_idx];
+    s->cert->key = s->s3->tmp.cert;
+    s->s3->tmp.sigalg = lu;
+    return 1;
+}
+
+int SSL_CTX_set_tlsext_max_fragment_length(SSL_CTX *ctx, uint8_t mode)
+{
+    if (mode != TLSEXT_max_fragment_length_DISABLED
+            && !IS_MAX_FRAGMENT_LENGTH_EXT_VALID(mode)) {
+        SSLerr(SSL_F_SSL_CTX_SET_TLSEXT_MAX_FRAGMENT_LENGTH,
+               SSL_R_SSL3_EXT_INVALID_MAX_FRAGMENT_LENGTH);
+        return 0;
+    }
+
+    ctx->ext.max_fragment_len_mode = mode;
+    return 1;
+}
+
+int SSL_set_tlsext_max_fragment_length(SSL *ssl, uint8_t mode)
+{
+    if (mode != TLSEXT_max_fragment_length_DISABLED
+            && !IS_MAX_FRAGMENT_LENGTH_EXT_VALID(mode)) {
+        SSLerr(SSL_F_SSL_SET_TLSEXT_MAX_FRAGMENT_LENGTH,
+               SSL_R_SSL3_EXT_INVALID_MAX_FRAGMENT_LENGTH);
+        return 0;
+    }
+
+    ssl->ext.max_fragment_len_mode = mode;
+    return 1;
+}
+
+uint8_t SSL_SESSION_get_max_fragment_length(const SSL_SESSION *session)
+{
+    return session->ext.max_fragment_len_mode;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/t1_trce.c b/trunk/3rdparty/openssl-1.1-fit/ssl/t1_trce.c
new file mode 100644
index 000000000..be3039af3
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/t1_trce.c
@@ -0,0 +1,1566 @@
+/*
+ * Copyright 2012-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include "ssl_locl.h"
+
+#ifndef OPENSSL_NO_SSL_TRACE
+
+/* Packet trace support for OpenSSL */
+
+typedef struct {
+    int num;
+    const char *name;
+} ssl_trace_tbl;
+
+# define ssl_trace_str(val, tbl) \
+    do_ssl_trace_str(val, tbl, OSSL_NELEM(tbl))
+
+# define ssl_trace_list(bio, indent, msg, msglen, value, table) \
+    do_ssl_trace_list(bio, indent, msg, msglen, value, \
+                      table, OSSL_NELEM(table))
+
+static const char *do_ssl_trace_str(int val, const ssl_trace_tbl *tbl,
+                                    size_t ntbl)
+{
+    size_t i;
+
+    for (i = 0; i < ntbl; i++, tbl++) {
+        if (tbl->num == val)
+            return tbl->name;
+    }
+    return "UNKNOWN";
+}
+
+static int do_ssl_trace_list(BIO *bio, int indent,
+                             const unsigned char *msg, size_t msglen,
+                             size_t vlen, const ssl_trace_tbl *tbl, size_t ntbl)
+{
+    int val;
+
+    if (msglen % vlen)
+        return 0;
+    while (msglen) {
+        val = msg[0];
+        if (vlen == 2)
+            val = (val << 8) | msg[1];
+        BIO_indent(bio, indent, 80);
+        BIO_printf(bio, "%s (%d)\n", do_ssl_trace_str(val, tbl, ntbl), val);
+        msg += vlen;
+        msglen -= vlen;
+    }
+    return 1;
+}
+
+/* Version number */
+
+static const ssl_trace_tbl ssl_version_tbl[] = {
+    {SSL3_VERSION, "SSL 3.0"},
+    {TLS1_VERSION, "TLS 1.0"},
+    {TLS1_1_VERSION, "TLS 1.1"},
+    {TLS1_2_VERSION, "TLS 1.2"},
+    {TLS1_3_VERSION, "TLS 1.3"},
+    {DTLS1_VERSION, "DTLS 1.0"},
+    {DTLS1_2_VERSION, "DTLS 1.2"},
+    {DTLS1_BAD_VER, "DTLS 1.0 (bad)"}
+};
+
+static const ssl_trace_tbl ssl_content_tbl[] = {
+    {SSL3_RT_CHANGE_CIPHER_SPEC, "ChangeCipherSpec"},
+    {SSL3_RT_ALERT, "Alert"},
+    {SSL3_RT_HANDSHAKE, "Handshake"},
+    {SSL3_RT_APPLICATION_DATA, "ApplicationData"},
+};
+
+/* Handshake types, sorted by ascending id  */
+static const ssl_trace_tbl ssl_handshake_tbl[] = {
+    {SSL3_MT_HELLO_REQUEST, "HelloRequest"},
+    {SSL3_MT_CLIENT_HELLO, "ClientHello"},
+    {SSL3_MT_SERVER_HELLO, "ServerHello"},
+    {DTLS1_MT_HELLO_VERIFY_REQUEST, "HelloVerifyRequest"},
+    {SSL3_MT_NEWSESSION_TICKET, "NewSessionTicket"},
+    {SSL3_MT_END_OF_EARLY_DATA, "EndOfEarlyData"},
+    {SSL3_MT_ENCRYPTED_EXTENSIONS, "EncryptedExtensions"},
+    {SSL3_MT_CERTIFICATE, "Certificate"},
+    {SSL3_MT_SERVER_KEY_EXCHANGE, "ServerKeyExchange"},
+    {SSL3_MT_CERTIFICATE_REQUEST, "CertificateRequest"},
+    {SSL3_MT_SERVER_DONE, "ServerHelloDone"},
+    {SSL3_MT_CERTIFICATE_VERIFY, "CertificateVerify"},
+    {SSL3_MT_CLIENT_KEY_EXCHANGE, "ClientKeyExchange"},
+    {SSL3_MT_FINISHED, "Finished"},
+    {SSL3_MT_CERTIFICATE_URL, "CertificateUrl"},
+    {SSL3_MT_CERTIFICATE_STATUS, "CertificateStatus"},
+    {SSL3_MT_SUPPLEMENTAL_DATA, "SupplementalData"},
+    {SSL3_MT_KEY_UPDATE, "KeyUpdate"},
+# ifndef OPENSSL_NO_NEXTPROTONEG
+    {SSL3_MT_NEXT_PROTO, "NextProto"},
+# endif
+    {SSL3_MT_MESSAGE_HASH, "MessageHash"}
+};
+
+/* Cipher suites */
+static const ssl_trace_tbl ssl_ciphers_tbl[] = {
+    {0x0000, "TLS_NULL_WITH_NULL_NULL"},
+    {0x0001, "TLS_RSA_WITH_NULL_MD5"},
+    {0x0002, "TLS_RSA_WITH_NULL_SHA"},
+    {0x0003, "TLS_RSA_EXPORT_WITH_RC4_40_MD5"},
+    {0x0004, "TLS_RSA_WITH_RC4_128_MD5"},
+    {0x0005, "TLS_RSA_WITH_RC4_128_SHA"},
+    {0x0006, "TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5"},
+    {0x0007, "TLS_RSA_WITH_IDEA_CBC_SHA"},
+    {0x0008, "TLS_RSA_EXPORT_WITH_DES40_CBC_SHA"},
+    {0x0009, "TLS_RSA_WITH_DES_CBC_SHA"},
+    {0x000A, "TLS_RSA_WITH_3DES_EDE_CBC_SHA"},
+    {0x000B, "TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA"},
+    {0x000C, "TLS_DH_DSS_WITH_DES_CBC_SHA"},
+    {0x000D, "TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA"},
+    {0x000E, "TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA"},
+    {0x000F, "TLS_DH_RSA_WITH_DES_CBC_SHA"},
+    {0x0010, "TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA"},
+    {0x0011, "TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA"},
+    {0x0012, "TLS_DHE_DSS_WITH_DES_CBC_SHA"},
+    {0x0013, "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"},
+    {0x0014, "TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA"},
+    {0x0015, "TLS_DHE_RSA_WITH_DES_CBC_SHA"},
+    {0x0016, "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"},
+    {0x0017, "TLS_DH_anon_EXPORT_WITH_RC4_40_MD5"},
+    {0x0018, "TLS_DH_anon_WITH_RC4_128_MD5"},
+    {0x0019, "TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA"},
+    {0x001A, "TLS_DH_anon_WITH_DES_CBC_SHA"},
+    {0x001B, "TLS_DH_anon_WITH_3DES_EDE_CBC_SHA"},
+    {0x001D, "SSL_FORTEZZA_KEA_WITH_FORTEZZA_CBC_SHA"},
+    {0x001E, "SSL_FORTEZZA_KEA_WITH_RC4_128_SHA"},
+    {0x001F, "TLS_KRB5_WITH_3DES_EDE_CBC_SHA"},
+    {0x0020, "TLS_KRB5_WITH_RC4_128_SHA"},
+    {0x0021, "TLS_KRB5_WITH_IDEA_CBC_SHA"},
+    {0x0022, "TLS_KRB5_WITH_DES_CBC_MD5"},
+    {0x0023, "TLS_KRB5_WITH_3DES_EDE_CBC_MD5"},
+    {0x0024, "TLS_KRB5_WITH_RC4_128_MD5"},
+    {0x0025, "TLS_KRB5_WITH_IDEA_CBC_MD5"},
+    {0x0026, "TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA"},
+    {0x0027, "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA"},
+    {0x0028, "TLS_KRB5_EXPORT_WITH_RC4_40_SHA"},
+    {0x0029, "TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5"},
+    {0x002A, "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5"},
+    {0x002B, "TLS_KRB5_EXPORT_WITH_RC4_40_MD5"},
+    {0x002C, "TLS_PSK_WITH_NULL_SHA"},
+    {0x002D, "TLS_DHE_PSK_WITH_NULL_SHA"},
+    {0x002E, "TLS_RSA_PSK_WITH_NULL_SHA"},
+    {0x002F, "TLS_RSA_WITH_AES_128_CBC_SHA"},
+    {0x0030, "TLS_DH_DSS_WITH_AES_128_CBC_SHA"},
+    {0x0031, "TLS_DH_RSA_WITH_AES_128_CBC_SHA"},
+    {0x0032, "TLS_DHE_DSS_WITH_AES_128_CBC_SHA"},
+    {0x0033, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA"},
+    {0x0034, "TLS_DH_anon_WITH_AES_128_CBC_SHA"},
+    {0x0035, "TLS_RSA_WITH_AES_256_CBC_SHA"},
+    {0x0036, "TLS_DH_DSS_WITH_AES_256_CBC_SHA"},
+    {0x0037, "TLS_DH_RSA_WITH_AES_256_CBC_SHA"},
+    {0x0038, "TLS_DHE_DSS_WITH_AES_256_CBC_SHA"},
+    {0x0039, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA"},
+    {0x003A, "TLS_DH_anon_WITH_AES_256_CBC_SHA"},
+    {0x003B, "TLS_RSA_WITH_NULL_SHA256"},
+    {0x003C, "TLS_RSA_WITH_AES_128_CBC_SHA256"},
+    {0x003D, "TLS_RSA_WITH_AES_256_CBC_SHA256"},
+    {0x003E, "TLS_DH_DSS_WITH_AES_128_CBC_SHA256"},
+    {0x003F, "TLS_DH_RSA_WITH_AES_128_CBC_SHA256"},
+    {0x0040, "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256"},
+    {0x0041, "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA"},
+    {0x0042, "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA"},
+    {0x0043, "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA"},
+    {0x0044, "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA"},
+    {0x0045, "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA"},
+    {0x0046, "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA"},
+    {0x0067, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256"},
+    {0x0068, "TLS_DH_DSS_WITH_AES_256_CBC_SHA256"},
+    {0x0069, "TLS_DH_RSA_WITH_AES_256_CBC_SHA256"},
+    {0x006A, "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256"},
+    {0x006B, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256"},
+    {0x006C, "TLS_DH_anon_WITH_AES_128_CBC_SHA256"},
+    {0x006D, "TLS_DH_anon_WITH_AES_256_CBC_SHA256"},
+    {0x0081, "TLS_GOSTR341001_WITH_28147_CNT_IMIT"},
+    {0x0083, "TLS_GOSTR341001_WITH_NULL_GOSTR3411"},
+    {0x0084, "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA"},
+    {0x0085, "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA"},
+    {0x0086, "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA"},
+    {0x0087, "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA"},
+    {0x0088, "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA"},
+    {0x0089, "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA"},
+    {0x008A, "TLS_PSK_WITH_RC4_128_SHA"},
+    {0x008B, "TLS_PSK_WITH_3DES_EDE_CBC_SHA"},
+    {0x008C, "TLS_PSK_WITH_AES_128_CBC_SHA"},
+    {0x008D, "TLS_PSK_WITH_AES_256_CBC_SHA"},
+    {0x008E, "TLS_DHE_PSK_WITH_RC4_128_SHA"},
+    {0x008F, "TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA"},
+    {0x0090, "TLS_DHE_PSK_WITH_AES_128_CBC_SHA"},
+    {0x0091, "TLS_DHE_PSK_WITH_AES_256_CBC_SHA"},
+    {0x0092, "TLS_RSA_PSK_WITH_RC4_128_SHA"},
+    {0x0093, "TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA"},
+    {0x0094, "TLS_RSA_PSK_WITH_AES_128_CBC_SHA"},
+    {0x0095, "TLS_RSA_PSK_WITH_AES_256_CBC_SHA"},
+    {0x0096, "TLS_RSA_WITH_SEED_CBC_SHA"},
+    {0x0097, "TLS_DH_DSS_WITH_SEED_CBC_SHA"},
+    {0x0098, "TLS_DH_RSA_WITH_SEED_CBC_SHA"},
+    {0x0099, "TLS_DHE_DSS_WITH_SEED_CBC_SHA"},
+    {0x009A, "TLS_DHE_RSA_WITH_SEED_CBC_SHA"},
+    {0x009B, "TLS_DH_anon_WITH_SEED_CBC_SHA"},
+    {0x009C, "TLS_RSA_WITH_AES_128_GCM_SHA256"},
+    {0x009D, "TLS_RSA_WITH_AES_256_GCM_SHA384"},
+    {0x009E, "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256"},
+    {0x009F, "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384"},
+    {0x00A0, "TLS_DH_RSA_WITH_AES_128_GCM_SHA256"},
+    {0x00A1, "TLS_DH_RSA_WITH_AES_256_GCM_SHA384"},
+    {0x00A2, "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256"},
+    {0x00A3, "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384"},
+    {0x00A4, "TLS_DH_DSS_WITH_AES_128_GCM_SHA256"},
+    {0x00A5, "TLS_DH_DSS_WITH_AES_256_GCM_SHA384"},
+    {0x00A6, "TLS_DH_anon_WITH_AES_128_GCM_SHA256"},
+    {0x00A7, "TLS_DH_anon_WITH_AES_256_GCM_SHA384"},
+    {0x00A8, "TLS_PSK_WITH_AES_128_GCM_SHA256"},
+    {0x00A9, "TLS_PSK_WITH_AES_256_GCM_SHA384"},
+    {0x00AA, "TLS_DHE_PSK_WITH_AES_128_GCM_SHA256"},
+    {0x00AB, "TLS_DHE_PSK_WITH_AES_256_GCM_SHA384"},
+    {0x00AC, "TLS_RSA_PSK_WITH_AES_128_GCM_SHA256"},
+    {0x00AD, "TLS_RSA_PSK_WITH_AES_256_GCM_SHA384"},
+    {0x00AE, "TLS_PSK_WITH_AES_128_CBC_SHA256"},
+    {0x00AF, "TLS_PSK_WITH_AES_256_CBC_SHA384"},
+    {0x00B0, "TLS_PSK_WITH_NULL_SHA256"},
+    {0x00B1, "TLS_PSK_WITH_NULL_SHA384"},
+    {0x00B2, "TLS_DHE_PSK_WITH_AES_128_CBC_SHA256"},
+    {0x00B3, "TLS_DHE_PSK_WITH_AES_256_CBC_SHA384"},
+    {0x00B4, "TLS_DHE_PSK_WITH_NULL_SHA256"},
+    {0x00B5, "TLS_DHE_PSK_WITH_NULL_SHA384"},
+    {0x00B6, "TLS_RSA_PSK_WITH_AES_128_CBC_SHA256"},
+    {0x00B7, "TLS_RSA_PSK_WITH_AES_256_CBC_SHA384"},
+    {0x00B8, "TLS_RSA_PSK_WITH_NULL_SHA256"},
+    {0x00B9, "TLS_RSA_PSK_WITH_NULL_SHA384"},
+    {0x00BA, "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256"},
+    {0x00BB, "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256"},
+    {0x00BC, "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256"},
+    {0x00BD, "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256"},
+    {0x00BE, "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256"},
+    {0x00BF, "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256"},
+    {0x00C0, "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256"},
+    {0x00C1, "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256"},
+    {0x00C2, "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256"},
+    {0x00C3, "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256"},
+    {0x00C4, "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256"},
+    {0x00C5, "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256"},
+    {0x00FF, "TLS_EMPTY_RENEGOTIATION_INFO_SCSV"},
+    {0x5600, "TLS_FALLBACK_SCSV"},
+    {0xC001, "TLS_ECDH_ECDSA_WITH_NULL_SHA"},
+    {0xC002, "TLS_ECDH_ECDSA_WITH_RC4_128_SHA"},
+    {0xC003, "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"},
+    {0xC004, "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA"},
+    {0xC005, "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA"},
+    {0xC006, "TLS_ECDHE_ECDSA_WITH_NULL_SHA"},
+    {0xC007, "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA"},
+    {0xC008, "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"},
+    {0xC009, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"},
+    {0xC00A, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"},
+    {0xC00B, "TLS_ECDH_RSA_WITH_NULL_SHA"},
+    {0xC00C, "TLS_ECDH_RSA_WITH_RC4_128_SHA"},
+    {0xC00D, "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"},
+    {0xC00E, "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA"},
+    {0xC00F, "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA"},
+    {0xC010, "TLS_ECDHE_RSA_WITH_NULL_SHA"},
+    {0xC011, "TLS_ECDHE_RSA_WITH_RC4_128_SHA"},
+    {0xC012, "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"},
+    {0xC013, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"},
+    {0xC014, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"},
+    {0xC015, "TLS_ECDH_anon_WITH_NULL_SHA"},
+    {0xC016, "TLS_ECDH_anon_WITH_RC4_128_SHA"},
+    {0xC017, "TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA"},
+    {0xC018, "TLS_ECDH_anon_WITH_AES_128_CBC_SHA"},
+    {0xC019, "TLS_ECDH_anon_WITH_AES_256_CBC_SHA"},
+    {0xC01A, "TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA"},
+    {0xC01B, "TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA"},
+    {0xC01C, "TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA"},
+    {0xC01D, "TLS_SRP_SHA_WITH_AES_128_CBC_SHA"},
+    {0xC01E, "TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA"},
+    {0xC01F, "TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA"},
+    {0xC020, "TLS_SRP_SHA_WITH_AES_256_CBC_SHA"},
+    {0xC021, "TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA"},
+    {0xC022, "TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA"},
+    {0xC023, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"},
+    {0xC024, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384"},
+    {0xC025, "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256"},
+    {0xC026, "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384"},
+    {0xC027, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"},
+    {0xC028, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"},
+    {0xC029, "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256"},
+    {0xC02A, "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384"},
+    {0xC02B, "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"},
+    {0xC02C, "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"},
+    {0xC02D, "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256"},
+    {0xC02E, "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384"},
+    {0xC02F, "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"},
+    {0xC030, "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"},
+    {0xC031, "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256"},
+    {0xC032, "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384"},
+    {0xC033, "TLS_ECDHE_PSK_WITH_RC4_128_SHA"},
+    {0xC034, "TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA"},
+    {0xC035, "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA"},
+    {0xC036, "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA"},
+    {0xC037, "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256"},
+    {0xC038, "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384"},
+    {0xC039, "TLS_ECDHE_PSK_WITH_NULL_SHA"},
+    {0xC03A, "TLS_ECDHE_PSK_WITH_NULL_SHA256"},
+    {0xC03B, "TLS_ECDHE_PSK_WITH_NULL_SHA384"},
+    {0xC03C, "TLS_RSA_WITH_ARIA_128_CBC_SHA256"},
+    {0xC03D, "TLS_RSA_WITH_ARIA_256_CBC_SHA384"},
+    {0xC03E, "TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256"},
+    {0xC03F, "TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384"},
+    {0xC040, "TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256"},
+    {0xC041, "TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384"},
+    {0xC042, "TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256"},
+    {0xC043, "TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384"},
+    {0xC044, "TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256"},
+    {0xC045, "TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384"},
+    {0xC046, "TLS_DH_anon_WITH_ARIA_128_CBC_SHA256"},
+    {0xC047, "TLS_DH_anon_WITH_ARIA_256_CBC_SHA384"},
+    {0xC048, "TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256"},
+    {0xC049, "TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384"},
+    {0xC04A, "TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256"},
+    {0xC04B, "TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384"},
+    {0xC04C, "TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256"},
+    {0xC04D, "TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384"},
+    {0xC04E, "TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256"},
+    {0xC04F, "TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384"},
+    {0xC050, "TLS_RSA_WITH_ARIA_128_GCM_SHA256"},
+    {0xC051, "TLS_RSA_WITH_ARIA_256_GCM_SHA384"},
+    {0xC052, "TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256"},
+    {0xC053, "TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384"},
+    {0xC054, "TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256"},
+    {0xC055, "TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384"},
+    {0xC056, "TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256"},
+    {0xC057, "TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384"},
+    {0xC058, "TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256"},
+    {0xC059, "TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384"},
+    {0xC05A, "TLS_DH_anon_WITH_ARIA_128_GCM_SHA256"},
+    {0xC05B, "TLS_DH_anon_WITH_ARIA_256_GCM_SHA384"},
+    {0xC05C, "TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256"},
+    {0xC05D, "TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384"},
+    {0xC05E, "TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256"},
+    {0xC05F, "TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384"},
+    {0xC060, "TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256"},
+    {0xC061, "TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384"},
+    {0xC062, "TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256"},
+    {0xC063, "TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384"},
+    {0xC064, "TLS_PSK_WITH_ARIA_128_CBC_SHA256"},
+    {0xC065, "TLS_PSK_WITH_ARIA_256_CBC_SHA384"},
+    {0xC066, "TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256"},
+    {0xC067, "TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384"},
+    {0xC068, "TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256"},
+    {0xC069, "TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384"},
+    {0xC06A, "TLS_PSK_WITH_ARIA_128_GCM_SHA256"},
+    {0xC06B, "TLS_PSK_WITH_ARIA_256_GCM_SHA384"},
+    {0xC06C, "TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256"},
+    {0xC06D, "TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384"},
+    {0xC06E, "TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256"},
+    {0xC06F, "TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384"},
+    {0xC070, "TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256"},
+    {0xC071, "TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384"},
+    {0xC072, "TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256"},
+    {0xC073, "TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384"},
+    {0xC074, "TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256"},
+    {0xC075, "TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384"},
+    {0xC076, "TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256"},
+    {0xC077, "TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384"},
+    {0xC078, "TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256"},
+    {0xC079, "TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384"},
+    {0xC07A, "TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256"},
+    {0xC07B, "TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384"},
+    {0xC07C, "TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256"},
+    {0xC07D, "TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384"},
+    {0xC07E, "TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256"},
+    {0xC07F, "TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384"},
+    {0xC080, "TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256"},
+    {0xC081, "TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384"},
+    {0xC082, "TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256"},
+    {0xC083, "TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384"},
+    {0xC084, "TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256"},
+    {0xC085, "TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384"},
+    {0xC086, "TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256"},
+    {0xC087, "TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384"},
+    {0xC088, "TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256"},
+    {0xC089, "TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384"},
+    {0xC08A, "TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256"},
+    {0xC08B, "TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384"},
+    {0xC08C, "TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256"},
+    {0xC08D, "TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384"},
+    {0xC08E, "TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256"},
+    {0xC08F, "TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384"},
+    {0xC090, "TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256"},
+    {0xC091, "TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384"},
+    {0xC092, "TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256"},
+    {0xC093, "TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384"},
+    {0xC094, "TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256"},
+    {0xC095, "TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384"},
+    {0xC096, "TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256"},
+    {0xC097, "TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384"},
+    {0xC098, "TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256"},
+    {0xC099, "TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384"},
+    {0xC09A, "TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256"},
+    {0xC09B, "TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384"},
+    {0xC09C, "TLS_RSA_WITH_AES_128_CCM"},
+    {0xC09D, "TLS_RSA_WITH_AES_256_CCM"},
+    {0xC09E, "TLS_DHE_RSA_WITH_AES_128_CCM"},
+    {0xC09F, "TLS_DHE_RSA_WITH_AES_256_CCM"},
+    {0xC0A0, "TLS_RSA_WITH_AES_128_CCM_8"},
+    {0xC0A1, "TLS_RSA_WITH_AES_256_CCM_8"},
+    {0xC0A2, "TLS_DHE_RSA_WITH_AES_128_CCM_8"},
+    {0xC0A3, "TLS_DHE_RSA_WITH_AES_256_CCM_8"},
+    {0xC0A4, "TLS_PSK_WITH_AES_128_CCM"},
+    {0xC0A5, "TLS_PSK_WITH_AES_256_CCM"},
+    {0xC0A6, "TLS_DHE_PSK_WITH_AES_128_CCM"},
+    {0xC0A7, "TLS_DHE_PSK_WITH_AES_256_CCM"},
+    {0xC0A8, "TLS_PSK_WITH_AES_128_CCM_8"},
+    {0xC0A9, "TLS_PSK_WITH_AES_256_CCM_8"},
+    {0xC0AA, "TLS_PSK_DHE_WITH_AES_128_CCM_8"},
+    {0xC0AB, "TLS_PSK_DHE_WITH_AES_256_CCM_8"},
+    {0xC0AC, "TLS_ECDHE_ECDSA_WITH_AES_128_CCM"},
+    {0xC0AD, "TLS_ECDHE_ECDSA_WITH_AES_256_CCM"},
+    {0xC0AE, "TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8"},
+    {0xC0AF, "TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8"},
+    {0xCCA8, "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256"},
+    {0xCCA9, "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256"},
+    {0xCCAA, "TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256"},
+    {0xCCAB, "TLS_PSK_WITH_CHACHA20_POLY1305_SHA256"},
+    {0xCCAC, "TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256"},
+    {0xCCAD, "TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256"},
+    {0xCCAE, "TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256"},
+    {0x1301, "TLS_AES_128_GCM_SHA256"},
+    {0x1302, "TLS_AES_256_GCM_SHA384"},
+    {0x1303, "TLS_CHACHA20_POLY1305_SHA256"},
+    {0x1304, "TLS_AES_128_CCM_SHA256"},
+    {0x1305, "TLS_AES_128_CCM_8_SHA256"},
+    {0xFEFE, "SSL_RSA_FIPS_WITH_DES_CBC_SHA"},
+    {0xFEFF, "SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA"},
+    {0xFF85, "GOST2012-GOST8912-GOST8912"},
+    {0xFF87, "GOST2012-NULL-GOST12"},
+};
+
+/* Compression methods */
+static const ssl_trace_tbl ssl_comp_tbl[] = {
+    {0x0000, "No Compression"},
+    {0x0001, "Zlib Compression"}
+};
+
+/* Extensions sorted by ascending id */
+static const ssl_trace_tbl ssl_exts_tbl[] = {
+    {TLSEXT_TYPE_server_name, "server_name"},
+    {TLSEXT_TYPE_max_fragment_length, "max_fragment_length"},
+    {TLSEXT_TYPE_client_certificate_url, "client_certificate_url"},
+    {TLSEXT_TYPE_trusted_ca_keys, "trusted_ca_keys"},
+    {TLSEXT_TYPE_truncated_hmac, "truncated_hmac"},
+    {TLSEXT_TYPE_status_request, "status_request"},
+    {TLSEXT_TYPE_user_mapping, "user_mapping"},
+    {TLSEXT_TYPE_client_authz, "client_authz"},
+    {TLSEXT_TYPE_server_authz, "server_authz"},
+    {TLSEXT_TYPE_cert_type, "cert_type"},
+    {TLSEXT_TYPE_supported_groups, "supported_groups"},
+    {TLSEXT_TYPE_ec_point_formats, "ec_point_formats"},
+    {TLSEXT_TYPE_srp, "srp"},
+    {TLSEXT_TYPE_signature_algorithms, "signature_algorithms"},
+    {TLSEXT_TYPE_use_srtp, "use_srtp"},
+    {TLSEXT_TYPE_heartbeat, "tls_heartbeat"},
+    {TLSEXT_TYPE_application_layer_protocol_negotiation,
+     "application_layer_protocol_negotiation"},
+    {TLSEXT_TYPE_signed_certificate_timestamp, "signed_certificate_timestamps"},
+    {TLSEXT_TYPE_padding, "padding"},
+    {TLSEXT_TYPE_encrypt_then_mac, "encrypt_then_mac"},
+    {TLSEXT_TYPE_extended_master_secret, "extended_master_secret"},
+    {TLSEXT_TYPE_session_ticket, "session_ticket"},
+    {TLSEXT_TYPE_psk, "psk"},
+    {TLSEXT_TYPE_early_data, "early_data"},
+    {TLSEXT_TYPE_supported_versions, "supported_versions"},
+    {TLSEXT_TYPE_cookie, "cookie_ext"},
+    {TLSEXT_TYPE_psk_kex_modes, "psk_key_exchange_modes"},
+    {TLSEXT_TYPE_certificate_authorities, "certificate_authorities"},
+    {TLSEXT_TYPE_post_handshake_auth, "post_handshake_auth"},
+    {TLSEXT_TYPE_signature_algorithms_cert, "signature_algorithms_cert"},
+    {TLSEXT_TYPE_key_share, "key_share"},
+    {TLSEXT_TYPE_renegotiate, "renegotiate"},
+# ifndef OPENSSL_NO_NEXTPROTONEG
+    {TLSEXT_TYPE_next_proto_neg, "next_proto_neg"},
+# endif
+};
+
+static const ssl_trace_tbl ssl_groups_tbl[] = {
+    {1, "sect163k1 (K-163)"},
+    {2, "sect163r1"},
+    {3, "sect163r2 (B-163)"},
+    {4, "sect193r1"},
+    {5, "sect193r2"},
+    {6, "sect233k1 (K-233)"},
+    {7, "sect233r1 (B-233)"},
+    {8, "sect239k1"},
+    {9, "sect283k1 (K-283)"},
+    {10, "sect283r1 (B-283)"},
+    {11, "sect409k1 (K-409)"},
+    {12, "sect409r1 (B-409)"},
+    {13, "sect571k1 (K-571)"},
+    {14, "sect571r1 (B-571)"},
+    {15, "secp160k1"},
+    {16, "secp160r1"},
+    {17, "secp160r2"},
+    {18, "secp192k1"},
+    {19, "secp192r1 (P-192)"},
+    {20, "secp224k1"},
+    {21, "secp224r1 (P-224)"},
+    {22, "secp256k1"},
+    {23, "secp256r1 (P-256)"},
+    {24, "secp384r1 (P-384)"},
+    {25, "secp521r1 (P-521)"},
+    {26, "brainpoolP256r1"},
+    {27, "brainpoolP384r1"},
+    {28, "brainpoolP512r1"},
+    {29, "ecdh_x25519"},
+    {30, "ecdh_x448"},
+    {256, "ffdhe2048"},
+    {257, "ffdhe3072"},
+    {258, "ffdhe4096"},
+    {259, "ffdhe6144"},
+    {260, "ffdhe8192"},
+    {0xFF01, "arbitrary_explicit_prime_curves"},
+    {0xFF02, "arbitrary_explicit_char2_curves"}
+};
+
+static const ssl_trace_tbl ssl_point_tbl[] = {
+    {0, "uncompressed"},
+    {1, "ansiX962_compressed_prime"},
+    {2, "ansiX962_compressed_char2"}
+};
+
+static const ssl_trace_tbl ssl_mfl_tbl[] = {
+    {0, "disabled"},
+    {1, "max_fragment_length := 2^9 (512 bytes)"},
+    {2, "max_fragment_length := 2^10 (1024 bytes)"},
+    {3, "max_fragment_length := 2^11 (2048 bytes)"},
+    {4, "max_fragment_length := 2^12 (4096 bytes)"}
+};
+
+static const ssl_trace_tbl ssl_sigalg_tbl[] = {
+    {TLSEXT_SIGALG_ecdsa_secp256r1_sha256, "ecdsa_secp256r1_sha256"},
+    {TLSEXT_SIGALG_ecdsa_secp384r1_sha384, "ecdsa_secp384r1_sha384"},
+    {TLSEXT_SIGALG_ecdsa_secp521r1_sha512, "ecdsa_secp521r1_sha512"},
+    {TLSEXT_SIGALG_ecdsa_sha224, "ecdsa_sha224"},
+    {TLSEXT_SIGALG_ed25519, "ed25519"},
+    {TLSEXT_SIGALG_ed448, "ed448"},
+    {TLSEXT_SIGALG_ecdsa_sha1, "ecdsa_sha1"},
+    {TLSEXT_SIGALG_rsa_pss_rsae_sha256, "rsa_pss_rsae_sha256"},
+    {TLSEXT_SIGALG_rsa_pss_rsae_sha384, "rsa_pss_rsae_sha384"},
+    {TLSEXT_SIGALG_rsa_pss_rsae_sha512, "rsa_pss_rsae_sha512"},
+    {TLSEXT_SIGALG_rsa_pss_pss_sha256, "rsa_pss_pss_sha256"},
+    {TLSEXT_SIGALG_rsa_pss_pss_sha384, "rsa_pss_pss_sha384"},
+    {TLSEXT_SIGALG_rsa_pss_pss_sha512, "rsa_pss_pss_sha512"},
+    {TLSEXT_SIGALG_rsa_pkcs1_sha256, "rsa_pkcs1_sha256"},
+    {TLSEXT_SIGALG_rsa_pkcs1_sha384, "rsa_pkcs1_sha384"},
+    {TLSEXT_SIGALG_rsa_pkcs1_sha512, "rsa_pkcs1_sha512"},
+    {TLSEXT_SIGALG_rsa_pkcs1_sha224, "rsa_pkcs1_sha224"},
+    {TLSEXT_SIGALG_rsa_pkcs1_sha1, "rsa_pkcs1_sha1"},
+    {TLSEXT_SIGALG_dsa_sha256, "dsa_sha256"},
+    {TLSEXT_SIGALG_dsa_sha384, "dsa_sha384"},
+    {TLSEXT_SIGALG_dsa_sha512, "dsa_sha512"},
+    {TLSEXT_SIGALG_dsa_sha224, "dsa_sha224"},
+    {TLSEXT_SIGALG_dsa_sha1, "dsa_sha1"},
+    {TLSEXT_SIGALG_gostr34102012_256_gostr34112012_256, "gost2012_256"},
+    {TLSEXT_SIGALG_gostr34102012_512_gostr34112012_512, "gost2012_512"},
+    {TLSEXT_SIGALG_gostr34102001_gostr3411, "gost2001_gost94"},
+};
+
+static const ssl_trace_tbl ssl_ctype_tbl[] = {
+    {1, "rsa_sign"},
+    {2, "dss_sign"},
+    {3, "rsa_fixed_dh"},
+    {4, "dss_fixed_dh"},
+    {5, "rsa_ephemeral_dh"},
+    {6, "dss_ephemeral_dh"},
+    {20, "fortezza_dms"},
+    {64, "ecdsa_sign"},
+    {65, "rsa_fixed_ecdh"},
+    {66, "ecdsa_fixed_ecdh"}
+};
+
+static const ssl_trace_tbl ssl_psk_kex_modes_tbl[] = {
+    {TLSEXT_KEX_MODE_KE, "psk_ke"},
+    {TLSEXT_KEX_MODE_KE_DHE, "psk_dhe_ke"}
+};
+
+static const ssl_trace_tbl ssl_key_update_tbl[] = {
+    {SSL_KEY_UPDATE_NOT_REQUESTED, "update_not_requested"},
+    {SSL_KEY_UPDATE_REQUESTED, "update_requested"}
+};
+
+static void ssl_print_hex(BIO *bio, int indent, const char *name,
+                          const unsigned char *msg, size_t msglen)
+{
+    size_t i;
+
+    BIO_indent(bio, indent, 80);
+    BIO_printf(bio, "%s (len=%d): ", name, (int)msglen);
+    for (i = 0; i < msglen; i++)
+        BIO_printf(bio, "%02X", msg[i]);
+    BIO_puts(bio, "\n");
+}
+
+static int ssl_print_hexbuf(BIO *bio, int indent, const char *name, size_t nlen,
+                            const unsigned char **pmsg, size_t *pmsglen)
+{
+    size_t blen;
+    const unsigned char *p = *pmsg;
+
+    if (*pmsglen < nlen)
+        return 0;
+    blen = p[0];
+    if (nlen > 1)
+        blen = (blen << 8) | p[1];
+    if (*pmsglen < nlen + blen)
+        return 0;
+    p += nlen;
+    ssl_print_hex(bio, indent, name, p, blen);
+    *pmsg += blen + nlen;
+    *pmsglen -= blen + nlen;
+    return 1;
+}
+
+static int ssl_print_version(BIO *bio, int indent, const char *name,
+                             const unsigned char **pmsg, size_t *pmsglen,
+                             unsigned int *version)
+{
+    int vers;
+
+    if (*pmsglen < 2)
+        return 0;
+    vers = ((*pmsg)[0] << 8) | (*pmsg)[1];
+    if (version != NULL)
+        *version = vers;
+    BIO_indent(bio, indent, 80);
+    BIO_printf(bio, "%s=0x%x (%s)\n",
+               name, vers, ssl_trace_str(vers, ssl_version_tbl));
+    *pmsg += 2;
+    *pmsglen -= 2;
+    return 1;
+}
+
+static int ssl_print_random(BIO *bio, int indent,
+                            const unsigned char **pmsg, size_t *pmsglen)
+{
+    unsigned int tm;
+    const unsigned char *p = *pmsg;
+
+    if (*pmsglen < 32)
+        return 0;
+    tm = (p[0] << 24) | (p[1] << 16) | (p[2] << 8) | p[3];
+    p += 4;
+    BIO_indent(bio, indent, 80);
+    BIO_puts(bio, "Random:\n");
+    BIO_indent(bio, indent + 2, 80);
+    BIO_printf(bio, "gmt_unix_time=0x%08X\n", tm);
+    ssl_print_hex(bio, indent + 2, "random_bytes", p, 28);
+    *pmsg += 32;
+    *pmsglen -= 32;
+    return 1;
+}
+
+static int ssl_print_signature(BIO *bio, int indent, const SSL *ssl,
+                               const unsigned char **pmsg, size_t *pmsglen)
+{
+    if (*pmsglen < 2)
+        return 0;
+    if (SSL_USE_SIGALGS(ssl)) {
+        const unsigned char *p = *pmsg;
+        unsigned int sigalg = (p[0] << 8) | p[1];
+
+        BIO_indent(bio, indent, 80);
+        BIO_printf(bio, "Signature Algorithm: %s (0x%04x)\n",
+                   ssl_trace_str(sigalg, ssl_sigalg_tbl), sigalg);
+        *pmsg += 2;
+        *pmsglen -= 2;
+    }
+    return ssl_print_hexbuf(bio, indent, "Signature", 2, pmsg, pmsglen);
+}
+
+static int ssl_print_extension(BIO *bio, int indent, int server,
+                               unsigned char mt, int extype,
+                               const unsigned char *ext, size_t extlen)
+{
+    size_t xlen, share_len;
+    unsigned int sigalg;
+    uint32_t max_early_data;
+
+    BIO_indent(bio, indent, 80);
+    BIO_printf(bio, "extension_type=%s(%d), length=%d\n",
+               ssl_trace_str(extype, ssl_exts_tbl), extype, (int)extlen);
+    switch (extype) {
+    case TLSEXT_TYPE_max_fragment_length:
+        if (extlen < 1)
+            return 0;
+        xlen = extlen;
+        return ssl_trace_list(bio, indent + 2, ext, xlen, 1, ssl_mfl_tbl);
+
+    case TLSEXT_TYPE_ec_point_formats:
+        if (extlen < 1)
+            return 0;
+        xlen = ext[0];
+        if (extlen != xlen + 1)
+            return 0;
+        return ssl_trace_list(bio, indent + 2, ext + 1, xlen, 1, ssl_point_tbl);
+
+    case TLSEXT_TYPE_supported_groups:
+        if (extlen < 2)
+            return 0;
+        xlen = (ext[0] << 8) | ext[1];
+        if (extlen != xlen + 2)
+            return 0;
+        return ssl_trace_list(bio, indent + 2, ext + 2, xlen, 2, ssl_groups_tbl);
+    case TLSEXT_TYPE_application_layer_protocol_negotiation:
+        if (extlen < 2)
+            return 0;
+        xlen = (ext[0] << 8) | ext[1];
+        if (extlen != xlen + 2)
+            return 0;
+        ext += 2;
+        while (xlen > 0) {
+            size_t plen = *ext++;
+
+            if (plen + 1 > xlen)
+                return 0;
+            BIO_indent(bio, indent + 2, 80);
+            BIO_write(bio, ext, plen);
+            BIO_puts(bio, "\n");
+            ext += plen;
+            xlen -= plen + 1;
+        }
+        return 1;
+
+    case TLSEXT_TYPE_signature_algorithms:
+
+        if (extlen < 2)
+            return 0;
+        xlen = (ext[0] << 8) | ext[1];
+        if (extlen != xlen + 2)
+            return 0;
+        if (xlen & 1)
+            return 0;
+        ext += 2;
+        while (xlen > 0) {
+            BIO_indent(bio, indent + 2, 80);
+            sigalg = (ext[0] << 8) | ext[1];
+            BIO_printf(bio, "%s (0x%04x)\n",
+                       ssl_trace_str(sigalg, ssl_sigalg_tbl), sigalg);
+            xlen -= 2;
+            ext += 2;
+        }
+        break;
+
+    case TLSEXT_TYPE_renegotiate:
+        if (extlen < 1)
+            return 0;
+        xlen = ext[0];
+        if (xlen + 1 != extlen)
+            return 0;
+        ext++;
+        if (xlen) {
+            if (server) {
+                if (xlen & 1)
+                    return 0;
+                xlen >>= 1;
+            }
+            ssl_print_hex(bio, indent + 4, "client_verify_data", ext, xlen);
+            if (server) {
+                ext += xlen;
+                ssl_print_hex(bio, indent + 4, "server_verify_data", ext, xlen);
+            }
+        } else {
+            BIO_indent(bio, indent + 4, 80);
+            BIO_puts(bio, "<EMPTY>\n");
+        }
+        break;
+
+    case TLSEXT_TYPE_heartbeat:
+        return 0;
+
+    case TLSEXT_TYPE_session_ticket:
+        if (extlen != 0)
+            ssl_print_hex(bio, indent + 4, "ticket", ext, extlen);
+        break;
+
+    case TLSEXT_TYPE_key_share:
+        if (server && extlen == 2) {
+            int group_id;
+
+            /* We assume this is an HRR, otherwise this is an invalid key_share */
+            group_id = (ext[0] << 8) | ext[1];
+            BIO_indent(bio, indent + 4, 80);
+            BIO_printf(bio, "NamedGroup: %s (%d)\n",
+                       ssl_trace_str(group_id, ssl_groups_tbl), group_id);
+            break;
+        }
+        if (extlen < 2)
+            return 0;
+        if (server) {
+            xlen = extlen;
+        } else {
+            xlen = (ext[0] << 8) | ext[1];
+            if (extlen != xlen + 2)
+                return 0;
+            ext += 2;
+        }
+        for (; xlen > 0; ext += share_len, xlen -= share_len) {
+            int group_id;
+
+            if (xlen < 4)
+                return 0;
+            group_id = (ext[0] << 8) | ext[1];
+            share_len = (ext[2] << 8) | ext[3];
+            ext += 4;
+            xlen -= 4;
+            if (xlen < share_len)
+                return 0;
+            BIO_indent(bio, indent + 4, 80);
+            BIO_printf(bio, "NamedGroup: %s (%d)\n",
+                       ssl_trace_str(group_id, ssl_groups_tbl), group_id);
+            ssl_print_hex(bio, indent + 4, "key_exchange: ", ext, share_len);
+        }
+        break;
+
+    case TLSEXT_TYPE_supported_versions:
+        if (server) {
+            int version;
+
+            if (extlen != 2)
+                return 0;
+            version = (ext[0] << 8) | ext[1];
+            BIO_indent(bio, indent + 4, 80);
+            BIO_printf(bio, "%s (%d)\n",
+                       ssl_trace_str(version, ssl_version_tbl), version);
+            break;
+        }
+        if (extlen < 1)
+            return 0;
+        xlen = ext[0];
+        if (extlen != xlen + 1)
+            return 0;
+        return ssl_trace_list(bio, indent + 2, ext + 1, xlen, 2,
+                              ssl_version_tbl);
+
+    case TLSEXT_TYPE_psk_kex_modes:
+        if (extlen < 1)
+            return 0;
+        xlen = ext[0];
+        if (extlen != xlen + 1)
+            return 0;
+        return ssl_trace_list(bio, indent + 2, ext + 1, xlen, 1,
+                              ssl_psk_kex_modes_tbl);
+
+    case TLSEXT_TYPE_early_data:
+        if (mt != SSL3_MT_NEWSESSION_TICKET)
+            break;
+        if (extlen != 4)
+            return 0;
+        max_early_data = (ext[0] << 24) | (ext[1] << 16) | (ext[2] << 8)
+                         | ext[3];
+        BIO_indent(bio, indent + 2, 80);
+        BIO_printf(bio, "max_early_data=%u\n", max_early_data);
+        break;
+
+    default:
+        BIO_dump_indent(bio, (const char *)ext, extlen, indent + 2);
+    }
+    return 1;
+}
+
+static int ssl_print_extensions(BIO *bio, int indent, int server,
+                                unsigned char mt, const unsigned char **msgin,
+                                size_t *msginlen)
+{
+    size_t extslen, msglen = *msginlen;
+    const unsigned char *msg = *msgin;
+
+    BIO_indent(bio, indent, 80);
+    if (msglen == 0) {
+        BIO_puts(bio, "No extensions\n");
+        return 1;
+    }
+    if (msglen < 2)
+        return 0;
+    extslen = (msg[0] << 8) | msg[1];
+    msglen -= 2;
+    msg += 2;
+    if (extslen == 0) {
+        BIO_puts(bio, "No extensions\n");
+        *msgin = msg;
+        *msginlen = msglen;
+        return 1;
+    }
+    if (extslen > msglen)
+        return 0;
+    BIO_printf(bio, "extensions, length = %d\n", (int)extslen);
+    msglen -= extslen;
+    while (extslen > 0) {
+        int extype;
+        size_t extlen;
+        if (extslen < 4)
+            return 0;
+        extype = (msg[0] << 8) | msg[1];
+        extlen = (msg[2] << 8) | msg[3];
+        if (extslen < extlen + 4) {
+            BIO_printf(bio, "extensions, extype = %d, extlen = %d\n", extype,
+                       (int)extlen);
+            BIO_dump_indent(bio, (const char *)msg, extslen, indent + 2);
+            return 0;
+        }
+        msg += 4;
+        if (!ssl_print_extension(bio, indent + 2, server, mt, extype, msg,
+                                 extlen))
+            return 0;
+        msg += extlen;
+        extslen -= extlen + 4;
+    }
+
+    *msgin = msg;
+    *msginlen = msglen;
+    return 1;
+}
+
+static int ssl_print_client_hello(BIO *bio, const SSL *ssl, int indent,
+                                  const unsigned char *msg, size_t msglen)
+{
+    size_t len;
+    unsigned int cs;
+
+    if (!ssl_print_version(bio, indent, "client_version", &msg, &msglen, NULL))
+        return 0;
+    if (!ssl_print_random(bio, indent, &msg, &msglen))
+        return 0;
+    if (!ssl_print_hexbuf(bio, indent, "session_id", 1, &msg, &msglen))
+        return 0;
+    if (SSL_IS_DTLS(ssl)) {
+        if (!ssl_print_hexbuf(bio, indent, "cookie", 1, &msg, &msglen))
+            return 0;
+    }
+    if (msglen < 2)
+        return 0;
+    len = (msg[0] << 8) | msg[1];
+    msg += 2;
+    msglen -= 2;
+    BIO_indent(bio, indent, 80);
+    BIO_printf(bio, "cipher_suites (len=%d)\n", (int)len);
+    if (msglen < len || len & 1)
+        return 0;
+    while (len > 0) {
+        cs = (msg[0] << 8) | msg[1];
+        BIO_indent(bio, indent + 2, 80);
+        BIO_printf(bio, "{0x%02X, 0x%02X} %s\n",
+                   msg[0], msg[1], ssl_trace_str(cs, ssl_ciphers_tbl));
+        msg += 2;
+        msglen -= 2;
+        len -= 2;
+    }
+    if (msglen < 1)
+        return 0;
+    len = msg[0];
+    msg++;
+    msglen--;
+    if (msglen < len)
+        return 0;
+    BIO_indent(bio, indent, 80);
+    BIO_printf(bio, "compression_methods (len=%d)\n", (int)len);
+    while (len > 0) {
+        BIO_indent(bio, indent + 2, 80);
+        BIO_printf(bio, "%s (0x%02X)\n",
+                   ssl_trace_str(msg[0], ssl_comp_tbl), msg[0]);
+        msg++;
+        msglen--;
+        len--;
+    }
+    if (!ssl_print_extensions(bio, indent, 0, SSL3_MT_CLIENT_HELLO, &msg,
+                              &msglen))
+        return 0;
+    return 1;
+}
+
+static int dtls_print_hello_vfyrequest(BIO *bio, int indent,
+                                       const unsigned char *msg, size_t msglen)
+{
+    if (!ssl_print_version(bio, indent, "server_version", &msg, &msglen, NULL))
+        return 0;
+    if (!ssl_print_hexbuf(bio, indent, "cookie", 1, &msg, &msglen))
+        return 0;
+    return 1;
+}
+
+static int ssl_print_server_hello(BIO *bio, int indent,
+                                  const unsigned char *msg, size_t msglen)
+{
+    unsigned int cs;
+    unsigned int vers;
+
+    if (!ssl_print_version(bio, indent, "server_version", &msg, &msglen, &vers))
+        return 0;
+    if (!ssl_print_random(bio, indent, &msg, &msglen))
+        return 0;
+    if (vers != TLS1_3_VERSION
+            && !ssl_print_hexbuf(bio, indent, "session_id", 1, &msg, &msglen))
+        return 0;
+    if (msglen < 2)
+        return 0;
+    cs = (msg[0] << 8) | msg[1];
+    BIO_indent(bio, indent, 80);
+    BIO_printf(bio, "cipher_suite {0x%02X, 0x%02X} %s\n",
+               msg[0], msg[1], ssl_trace_str(cs, ssl_ciphers_tbl));
+    msg += 2;
+    msglen -= 2;
+    if (vers != TLS1_3_VERSION) {
+        if (msglen < 1)
+            return 0;
+        BIO_indent(bio, indent, 80);
+        BIO_printf(bio, "compression_method: %s (0x%02X)\n",
+                   ssl_trace_str(msg[0], ssl_comp_tbl), msg[0]);
+        msg++;
+        msglen--;
+    }
+    if (!ssl_print_extensions(bio, indent, 1, SSL3_MT_SERVER_HELLO, &msg,
+                              &msglen))
+        return 0;
+    return 1;
+}
+
+static int ssl_get_keyex(const char **pname, const SSL *ssl)
+{
+    unsigned long alg_k = ssl->s3->tmp.new_cipher->algorithm_mkey;
+
+    if (alg_k & SSL_kRSA) {
+        *pname = "rsa";
+        return SSL_kRSA;
+    }
+    if (alg_k & SSL_kDHE) {
+        *pname = "DHE";
+        return SSL_kDHE;
+    }
+    if (alg_k & SSL_kECDHE) {
+        *pname = "ECDHE";
+        return SSL_kECDHE;
+    }
+    if (alg_k & SSL_kPSK) {
+        *pname = "PSK";
+        return SSL_kPSK;
+    }
+    if (alg_k & SSL_kRSAPSK) {
+        *pname = "RSAPSK";
+        return SSL_kRSAPSK;
+    }
+    if (alg_k & SSL_kDHEPSK) {
+        *pname = "DHEPSK";
+        return SSL_kDHEPSK;
+    }
+    if (alg_k & SSL_kECDHEPSK) {
+        *pname = "ECDHEPSK";
+        return SSL_kECDHEPSK;
+    }
+    if (alg_k & SSL_kSRP) {
+        *pname = "SRP";
+        return SSL_kSRP;
+    }
+    if (alg_k & SSL_kGOST) {
+        *pname = "GOST";
+        return SSL_kGOST;
+    }
+    *pname = "UNKNOWN";
+    return 0;
+}
+
+static int ssl_print_client_keyex(BIO *bio, int indent, const SSL *ssl,
+                                  const unsigned char *msg, size_t msglen)
+{
+    const char *algname;
+    int id = ssl_get_keyex(&algname, ssl);
+
+    BIO_indent(bio, indent, 80);
+    BIO_printf(bio, "KeyExchangeAlgorithm=%s\n", algname);
+    if (id & SSL_PSK) {
+        if (!ssl_print_hexbuf(bio, indent + 2,
+                              "psk_identity", 2, &msg, &msglen))
+            return 0;
+    }
+    switch (id) {
+
+    case SSL_kRSA:
+    case SSL_kRSAPSK:
+        if (TLS1_get_version(ssl) == SSL3_VERSION) {
+            ssl_print_hex(bio, indent + 2,
+                          "EncryptedPreMasterSecret", msg, msglen);
+        } else {
+            if (!ssl_print_hexbuf(bio, indent + 2,
+                                  "EncryptedPreMasterSecret", 2, &msg, &msglen))
+                return 0;
+        }
+        break;
+
+    case SSL_kDHE:
+    case SSL_kDHEPSK:
+        if (!ssl_print_hexbuf(bio, indent + 2, "dh_Yc", 2, &msg, &msglen))
+            return 0;
+        break;
+
+    case SSL_kECDHE:
+    case SSL_kECDHEPSK:
+        if (!ssl_print_hexbuf(bio, indent + 2, "ecdh_Yc", 1, &msg, &msglen))
+            return 0;
+        break;
+
+    }
+
+    return !msglen;
+}
+
+static int ssl_print_server_keyex(BIO *bio, int indent, const SSL *ssl,
+                                  const unsigned char *msg, size_t msglen)
+{
+    const char *algname;
+    int id = ssl_get_keyex(&algname, ssl);
+
+    BIO_indent(bio, indent, 80);
+    BIO_printf(bio, "KeyExchangeAlgorithm=%s\n", algname);
+    if (id & SSL_PSK) {
+        if (!ssl_print_hexbuf(bio, indent + 2,
+                              "psk_identity_hint", 2, &msg, &msglen))
+            return 0;
+    }
+    switch (id) {
+    case SSL_kRSA:
+
+        if (!ssl_print_hexbuf(bio, indent + 2, "rsa_modulus", 2, &msg, &msglen))
+            return 0;
+        if (!ssl_print_hexbuf(bio, indent + 2, "rsa_exponent", 2,
+                              &msg, &msglen))
+            return 0;
+        break;
+
+    case SSL_kDHE:
+    case SSL_kDHEPSK:
+        if (!ssl_print_hexbuf(bio, indent + 2, "dh_p", 2, &msg, &msglen))
+            return 0;
+        if (!ssl_print_hexbuf(bio, indent + 2, "dh_g", 2, &msg, &msglen))
+            return 0;
+        if (!ssl_print_hexbuf(bio, indent + 2, "dh_Ys", 2, &msg, &msglen))
+            return 0;
+        break;
+
+# ifndef OPENSSL_NO_EC
+    case SSL_kECDHE:
+    case SSL_kECDHEPSK:
+        if (msglen < 1)
+            return 0;
+        BIO_indent(bio, indent + 2, 80);
+        if (msg[0] == EXPLICIT_PRIME_CURVE_TYPE)
+            BIO_puts(bio, "explicit_prime\n");
+        else if (msg[0] == EXPLICIT_CHAR2_CURVE_TYPE)
+            BIO_puts(bio, "explicit_char2\n");
+        else if (msg[0] == NAMED_CURVE_TYPE) {
+            int curve;
+            if (msglen < 3)
+                return 0;
+            curve = (msg[1] << 8) | msg[2];
+            BIO_printf(bio, "named_curve: %s (%d)\n",
+                       ssl_trace_str(curve, ssl_groups_tbl), curve);
+            msg += 3;
+            msglen -= 3;
+            if (!ssl_print_hexbuf(bio, indent + 2, "point", 1, &msg, &msglen))
+                return 0;
+        } else {
+            BIO_printf(bio, "UNKNOWN CURVE PARAMETER TYPE %d\n", msg[0]);
+            return 0;
+        }
+        break;
+# endif
+
+    case SSL_kPSK:
+    case SSL_kRSAPSK:
+        break;
+    }
+    if (!(id & SSL_PSK))
+        ssl_print_signature(bio, indent, ssl, &msg, &msglen);
+    return !msglen;
+}
+
+static int ssl_print_certificate(BIO *bio, int indent,
+                                 const unsigned char **pmsg, size_t *pmsglen)
+{
+    size_t msglen = *pmsglen;
+    size_t clen;
+    X509 *x;
+    const unsigned char *p = *pmsg, *q;
+
+    if (msglen < 3)
+        return 0;
+    clen = (p[0] << 16) | (p[1] << 8) | p[2];
+    if (msglen < clen + 3)
+        return 0;
+    q = p + 3;
+    BIO_indent(bio, indent, 80);
+    BIO_printf(bio, "ASN.1Cert, length=%d", (int)clen);
+    x = d2i_X509(NULL, &q, clen);
+    if (!x)
+        BIO_puts(bio, "<UNPARSEABLE CERTIFICATE>\n");
+    else {
+        BIO_puts(bio, "\n------details-----\n");
+        X509_print_ex(bio, x, XN_FLAG_ONELINE, 0);
+        PEM_write_bio_X509(bio, x);
+        /* Print certificate stuff */
+        BIO_puts(bio, "------------------\n");
+        X509_free(x);
+    }
+    if (q != p + 3 + clen) {
+        BIO_puts(bio, "<TRAILING GARBAGE AFTER CERTIFICATE>\n");
+    }
+    *pmsg += clen + 3;
+    *pmsglen -= clen + 3;
+    return 1;
+}
+
+static int ssl_print_certificates(BIO *bio, const SSL *ssl, int server,
+                                  int indent, const unsigned char *msg,
+                                  size_t msglen)
+{
+    size_t clen;
+
+    if (SSL_IS_TLS13(ssl)
+            && !ssl_print_hexbuf(bio, indent, "context", 1, &msg, &msglen))
+        return 0;
+
+    if (msglen < 3)
+        return 0;
+    clen = (msg[0] << 16) | (msg[1] << 8) | msg[2];
+    if (msglen != clen + 3)
+        return 0;
+    msg += 3;
+    BIO_indent(bio, indent, 80);
+    BIO_printf(bio, "certificate_list, length=%d\n", (int)clen);
+    while (clen > 0) {
+        if (!ssl_print_certificate(bio, indent + 2, &msg, &clen))
+            return 0;
+        if (!ssl_print_extensions(bio, indent + 2, server, SSL3_MT_CERTIFICATE,
+                                  &msg, &clen))
+            return 0;
+
+    }
+    return 1;
+}
+
+static int ssl_print_cert_request(BIO *bio, int indent, const SSL *ssl,
+                                  const unsigned char *msg, size_t msglen)
+{
+    size_t xlen;
+    unsigned int sigalg;
+
+    if (SSL_IS_TLS13(ssl)) {
+        if (!ssl_print_hexbuf(bio, indent, "request_context", 1, &msg, &msglen))
+            return 0;
+        if (!ssl_print_extensions(bio, indent, 1,
+                                  SSL3_MT_CERTIFICATE_REQUEST, &msg, &msglen))
+            return 0;
+        return 1;
+    } else {
+        if (msglen < 1)
+            return 0;
+        xlen = msg[0];
+        if (msglen < xlen + 1)
+            return 0;
+        msg++;
+        BIO_indent(bio, indent, 80);
+        BIO_printf(bio, "certificate_types (len=%d)\n", (int)xlen);
+        if (!ssl_trace_list(bio, indent + 2, msg, xlen, 1, ssl_ctype_tbl))
+            return 0;
+        msg += xlen;
+        msglen -= xlen + 1;
+    }
+    if (SSL_USE_SIGALGS(ssl)) {
+        if (msglen < 2)
+            return 0;
+        xlen = (msg[0] << 8) | msg[1];
+        if (msglen < xlen + 2 || (xlen & 1))
+            return 0;
+        msg += 2;
+        msglen -= xlen + 2;
+        BIO_indent(bio, indent, 80);
+        BIO_printf(bio, "signature_algorithms (len=%d)\n", (int)xlen);
+        while (xlen > 0) {
+            BIO_indent(bio, indent + 2, 80);
+            sigalg = (msg[0] << 8) | msg[1];
+            BIO_printf(bio, "%s (0x%04x)\n",
+                       ssl_trace_str(sigalg, ssl_sigalg_tbl), sigalg);
+            xlen -= 2;
+            msg += 2;
+        }
+        msg += xlen;
+    }
+
+    if (msglen < 2)
+        return 0;
+    xlen = (msg[0] << 8) | msg[1];
+    BIO_indent(bio, indent, 80);
+    if (msglen < xlen + 2)
+        return 0;
+    msg += 2;
+    msglen -= 2 + xlen;
+    BIO_printf(bio, "certificate_authorities (len=%d)\n", (int)xlen);
+    while (xlen > 0) {
+        size_t dlen;
+        X509_NAME *nm;
+        const unsigned char *p;
+        if (xlen < 2)
+            return 0;
+        dlen = (msg[0] << 8) | msg[1];
+        if (xlen < dlen + 2)
+            return 0;
+        msg += 2;
+        BIO_indent(bio, indent + 2, 80);
+        BIO_printf(bio, "DistinguishedName (len=%d): ", (int)dlen);
+        p = msg;
+        nm = d2i_X509_NAME(NULL, &p, dlen);
+        if (!nm) {
+            BIO_puts(bio, "<UNPARSEABLE DN>\n");
+        } else {
+            X509_NAME_print_ex(bio, nm, 0, XN_FLAG_ONELINE);
+            BIO_puts(bio, "\n");
+            X509_NAME_free(nm);
+        }
+        xlen -= dlen + 2;
+        msg += dlen;
+    }
+    if (SSL_IS_TLS13(ssl)) {
+        if (!ssl_print_hexbuf(bio, indent, "request_extensions", 2,
+                              &msg, &msglen))
+            return 0;
+    }
+    return msglen == 0;
+}
+
+static int ssl_print_ticket(BIO *bio, int indent, const SSL *ssl,
+                            const unsigned char *msg, size_t msglen)
+{
+    unsigned int tick_life;
+
+    if (msglen == 0) {
+        BIO_indent(bio, indent + 2, 80);
+        BIO_puts(bio, "No Ticket\n");
+        return 1;
+    }
+    if (msglen < 4)
+        return 0;
+    tick_life = (msg[0] << 24) | (msg[1] << 16) | (msg[2] << 8) | msg[3];
+    msglen -= 4;
+    msg += 4;
+    BIO_indent(bio, indent + 2, 80);
+    BIO_printf(bio, "ticket_lifetime_hint=%u\n", tick_life);
+    if (SSL_IS_TLS13(ssl)) {
+        unsigned int ticket_age_add;
+
+        if (msglen < 4)
+            return 0;
+        ticket_age_add =
+            (msg[0] << 24) | (msg[1] << 16) | (msg[2] << 8) | msg[3];
+        msglen -= 4;
+        msg += 4;
+        BIO_indent(bio, indent + 2, 80);
+        BIO_printf(bio, "ticket_age_add=%u\n", ticket_age_add);
+        if (!ssl_print_hexbuf(bio, indent + 2, "ticket_nonce", 1, &msg,
+                              &msglen))
+            return 0;
+    }
+    if (!ssl_print_hexbuf(bio, indent + 2, "ticket", 2, &msg, &msglen))
+        return 0;
+    if (SSL_IS_TLS13(ssl)
+            && !ssl_print_extensions(bio, indent + 2, 0,
+                                     SSL3_MT_NEWSESSION_TICKET, &msg, &msglen))
+        return 0;
+    if (msglen)
+        return 0;
+    return 1;
+}
+
+static int ssl_print_handshake(BIO *bio, const SSL *ssl, int server,
+                               const unsigned char *msg, size_t msglen,
+                               int indent)
+{
+    size_t hlen;
+    unsigned char htype;
+
+    if (msglen < 4)
+        return 0;
+    htype = msg[0];
+    hlen = (msg[1] << 16) | (msg[2] << 8) | msg[3];
+    BIO_indent(bio, indent, 80);
+    BIO_printf(bio, "%s, Length=%d\n",
+               ssl_trace_str(htype, ssl_handshake_tbl), (int)hlen);
+    msg += 4;
+    msglen -= 4;
+    if (SSL_IS_DTLS(ssl)) {
+        if (msglen < 8)
+            return 0;
+        BIO_indent(bio, indent, 80);
+        BIO_printf(bio, "message_seq=%d, fragment_offset=%d, "
+                   "fragment_length=%d\n",
+                   (msg[0] << 8) | msg[1],
+                   (msg[2] << 16) | (msg[3] << 8) | msg[4],
+                   (msg[5] << 16) | (msg[6] << 8) | msg[7]);
+        msg += 8;
+        msglen -= 8;
+    }
+    if (msglen < hlen)
+        return 0;
+    switch (htype) {
+    case SSL3_MT_CLIENT_HELLO:
+        if (!ssl_print_client_hello(bio, ssl, indent + 2, msg, msglen))
+            return 0;
+        break;
+
+    case DTLS1_MT_HELLO_VERIFY_REQUEST:
+        if (!dtls_print_hello_vfyrequest(bio, indent + 2, msg, msglen))
+            return 0;
+        break;
+
+    case SSL3_MT_SERVER_HELLO:
+        if (!ssl_print_server_hello(bio, indent + 2, msg, msglen))
+            return 0;
+        break;
+
+    case SSL3_MT_SERVER_KEY_EXCHANGE:
+        if (!ssl_print_server_keyex(bio, indent + 2, ssl, msg, msglen))
+            return 0;
+        break;
+
+    case SSL3_MT_CLIENT_KEY_EXCHANGE:
+        if (!ssl_print_client_keyex(bio, indent + 2, ssl, msg, msglen))
+            return 0;
+        break;
+
+    case SSL3_MT_CERTIFICATE:
+        if (!ssl_print_certificates(bio, ssl, server, indent + 2, msg, msglen))
+            return 0;
+        break;
+
+    case SSL3_MT_CERTIFICATE_VERIFY:
+        if (!ssl_print_signature(bio, indent + 2, ssl, &msg, &msglen))
+            return 0;
+        break;
+
+    case SSL3_MT_CERTIFICATE_REQUEST:
+        if (!ssl_print_cert_request(bio, indent + 2, ssl, msg, msglen))
+            return 0;
+        break;
+
+    case SSL3_MT_FINISHED:
+        ssl_print_hex(bio, indent + 2, "verify_data", msg, msglen);
+        break;
+
+    case SSL3_MT_SERVER_DONE:
+        if (msglen != 0)
+            ssl_print_hex(bio, indent + 2, "unexpected value", msg, msglen);
+        break;
+
+    case SSL3_MT_NEWSESSION_TICKET:
+        if (!ssl_print_ticket(bio, indent + 2, ssl, msg, msglen))
+            return 0;
+        break;
+
+    case SSL3_MT_ENCRYPTED_EXTENSIONS:
+        if (!ssl_print_extensions(bio, indent + 2, 1,
+                                  SSL3_MT_ENCRYPTED_EXTENSIONS, &msg, &msglen))
+            return 0;
+        break;
+
+    case SSL3_MT_KEY_UPDATE:
+        if (msglen != 1) {
+            ssl_print_hex(bio, indent + 2, "unexpected value", msg, msglen);
+            return 0;
+        }
+        if (!ssl_trace_list(bio, indent + 2, msg, msglen, 1,
+                            ssl_key_update_tbl))
+            return 0;
+        break;
+
+    default:
+        BIO_indent(bio, indent + 2, 80);
+        BIO_puts(bio, "Unsupported, hex dump follows:\n");
+        BIO_dump_indent(bio, (const char *)msg, msglen, indent + 4);
+    }
+    return 1;
+}
+
+void SSL_trace(int write_p, int version, int content_type,
+               const void *buf, size_t msglen, SSL *ssl, void *arg)
+{
+    const unsigned char *msg = buf;
+    BIO *bio = arg;
+
+    switch (content_type) {
+    case SSL3_RT_HEADER:
+        {
+            int hvers;
+
+            /* avoid overlapping with length at the end of buffer */
+            if (msglen < (size_t)(SSL_IS_DTLS(ssl) ?
+                     DTLS1_RT_HEADER_LENGTH : SSL3_RT_HEADER_LENGTH)) {
+                BIO_puts(bio, write_p ? "Sent" : "Received");
+                ssl_print_hex(bio, 0, " too short message", msg, msglen);
+                break;
+            }
+            hvers = msg[1] << 8 | msg[2];
+            BIO_puts(bio, write_p ? "Sent" : "Received");
+            BIO_printf(bio, " Record\nHeader:\n  Version = %s (0x%x)\n",
+                       ssl_trace_str(hvers, ssl_version_tbl), hvers);
+            if (SSL_IS_DTLS(ssl)) {
+                BIO_printf(bio,
+                           "  epoch=%d, sequence_number=%04x%04x%04x\n",
+                           (msg[3] << 8 | msg[4]),
+                           (msg[5] << 8 | msg[6]),
+                           (msg[7] << 8 | msg[8]), (msg[9] << 8 | msg[10]));
+            }
+
+            BIO_printf(bio, "  Content Type = %s (%d)\n  Length = %d",
+                       ssl_trace_str(msg[0], ssl_content_tbl), msg[0],
+                       msg[msglen - 2] << 8 | msg[msglen - 1]);
+        }
+        break;
+
+    case SSL3_RT_INNER_CONTENT_TYPE:
+        BIO_printf(bio, "  Inner Content Type = %s (%d)",
+                   ssl_trace_str(msg[0], ssl_content_tbl), msg[0]);
+        break;
+
+    case SSL3_RT_HANDSHAKE:
+        if (!ssl_print_handshake(bio, ssl, ssl->server ? write_p : !write_p,
+                                 msg, msglen, 4))
+            BIO_printf(bio, "Message length parse error!\n");
+        break;
+
+    case SSL3_RT_CHANGE_CIPHER_SPEC:
+        if (msglen == 1 && msg[0] == 1)
+            BIO_puts(bio, "    change_cipher_spec (1)\n");
+        else
+            ssl_print_hex(bio, 4, "unknown value", msg, msglen);
+        break;
+
+    case SSL3_RT_ALERT:
+        if (msglen != 2)
+            BIO_puts(bio, "    Illegal Alert Length\n");
+        else {
+            BIO_printf(bio, "    Level=%s(%d), description=%s(%d)\n",
+                       SSL_alert_type_string_long(msg[0] << 8),
+                       msg[0], SSL_alert_desc_string_long(msg[1]), msg[1]);
+        }
+
+    }
+
+    BIO_puts(bio, "\n");
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/tls13_enc.c b/trunk/3rdparty/openssl-1.1-fit/ssl/tls13_enc.c
new file mode 100644
index 000000000..1f956e61e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/tls13_enc.c
@@ -0,0 +1,833 @@
+/*
+ * Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdlib.h>
+#include "ssl_locl.h"
+#include "internal/cryptlib.h"
+#include <openssl/evp.h>
+#include <openssl/kdf.h>
+
+#define TLS13_MAX_LABEL_LEN     249
+
+/* Always filled with zeros */
+static const unsigned char default_zeros[EVP_MAX_MD_SIZE];
+
+/*
+ * Given a |secret|; a |label| of length |labellen|; and |data| of length
+ * |datalen| (e.g. typically a hash of the handshake messages), derive a new
+ * secret |outlen| bytes long and store it in the location pointed to be |out|.
+ * The |data| value may be zero length. Any errors will be treated as fatal if
+ * |fatal| is set. Returns 1 on success  0 on failure.
+ */
+int tls13_hkdf_expand(SSL *s, const EVP_MD *md, const unsigned char *secret,
+                             const unsigned char *label, size_t labellen,
+                             const unsigned char *data, size_t datalen,
+                             unsigned char *out, size_t outlen, int fatal)
+{
+    static const unsigned char label_prefix[] = "tls13 ";
+    EVP_PKEY_CTX *pctx = EVP_PKEY_CTX_new_id(EVP_PKEY_HKDF, NULL);
+    int ret;
+    size_t hkdflabellen;
+    size_t hashlen;
+    /*
+     * 2 bytes for length of derived secret + 1 byte for length of combined
+     * prefix and label + bytes for the label itself + 1 byte length of hash
+     * + bytes for the hash itself
+     */
+    unsigned char hkdflabel[sizeof(uint16_t) + sizeof(uint8_t) +
+                            + (sizeof(label_prefix) - 1) + TLS13_MAX_LABEL_LEN
+                            + 1 + EVP_MAX_MD_SIZE];
+    WPACKET pkt;
+
+    if (pctx == NULL)
+        return 0;
+
+    if (labellen > TLS13_MAX_LABEL_LEN) {
+        if (fatal) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS13_HKDF_EXPAND,
+                     ERR_R_INTERNAL_ERROR);
+        } else {
+            /*
+             * Probably we have been called from SSL_export_keying_material(),
+             * or SSL_export_keying_material_early().
+             */
+            SSLerr(SSL_F_TLS13_HKDF_EXPAND, SSL_R_TLS_ILLEGAL_EXPORTER_LABEL);
+        }
+        EVP_PKEY_CTX_free(pctx);
+        return 0;
+    }
+
+    hashlen = EVP_MD_size(md);
+
+    if (!WPACKET_init_static_len(&pkt, hkdflabel, sizeof(hkdflabel), 0)
+            || !WPACKET_put_bytes_u16(&pkt, outlen)
+            || !WPACKET_start_sub_packet_u8(&pkt)
+            || !WPACKET_memcpy(&pkt, label_prefix, sizeof(label_prefix) - 1)
+            || !WPACKET_memcpy(&pkt, label, labellen)
+            || !WPACKET_close(&pkt)
+            || !WPACKET_sub_memcpy_u8(&pkt, data, (data == NULL) ? 0 : datalen)
+            || !WPACKET_get_total_written(&pkt, &hkdflabellen)
+            || !WPACKET_finish(&pkt)) {
+        EVP_PKEY_CTX_free(pctx);
+        WPACKET_cleanup(&pkt);
+        if (fatal)
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS13_HKDF_EXPAND,
+                     ERR_R_INTERNAL_ERROR);
+        else
+            SSLerr(SSL_F_TLS13_HKDF_EXPAND, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    ret = EVP_PKEY_derive_init(pctx) <= 0
+            || EVP_PKEY_CTX_hkdf_mode(pctx, EVP_PKEY_HKDEF_MODE_EXPAND_ONLY)
+               <= 0
+            || EVP_PKEY_CTX_set_hkdf_md(pctx, md) <= 0
+            || EVP_PKEY_CTX_set1_hkdf_key(pctx, secret, hashlen) <= 0
+            || EVP_PKEY_CTX_add1_hkdf_info(pctx, hkdflabel, hkdflabellen) <= 0
+            || EVP_PKEY_derive(pctx, out, &outlen) <= 0;
+
+    EVP_PKEY_CTX_free(pctx);
+
+    if (ret != 0) {
+        if (fatal)
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS13_HKDF_EXPAND,
+                     ERR_R_INTERNAL_ERROR);
+        else
+            SSLerr(SSL_F_TLS13_HKDF_EXPAND, ERR_R_INTERNAL_ERROR);
+    }
+
+    return ret == 0;
+}
+
+/*
+ * Given a |secret| generate a |key| of length |keylen| bytes. Returns 1 on
+ * success  0 on failure.
+ */
+int tls13_derive_key(SSL *s, const EVP_MD *md, const unsigned char *secret,
+                     unsigned char *key, size_t keylen)
+{
+    static const unsigned char keylabel[] = "key";
+
+    return tls13_hkdf_expand(s, md, secret, keylabel, sizeof(keylabel) - 1,
+                             NULL, 0, key, keylen, 1);
+}
+
+/*
+ * Given a |secret| generate an |iv| of length |ivlen| bytes. Returns 1 on
+ * success  0 on failure.
+ */
+int tls13_derive_iv(SSL *s, const EVP_MD *md, const unsigned char *secret,
+                    unsigned char *iv, size_t ivlen)
+{
+    static const unsigned char ivlabel[] = "iv";
+
+    return tls13_hkdf_expand(s, md, secret, ivlabel, sizeof(ivlabel) - 1,
+                             NULL, 0, iv, ivlen, 1);
+}
+
+int tls13_derive_finishedkey(SSL *s, const EVP_MD *md,
+                             const unsigned char *secret,
+                             unsigned char *fin, size_t finlen)
+{
+    static const unsigned char finishedlabel[] = "finished";
+
+    return tls13_hkdf_expand(s, md, secret, finishedlabel,
+                             sizeof(finishedlabel) - 1, NULL, 0, fin, finlen, 1);
+}
+
+/*
+ * Given the previous secret |prevsecret| and a new input secret |insecret| of
+ * length |insecretlen|, generate a new secret and store it in the location
+ * pointed to by |outsecret|. Returns 1 on success  0 on failure.
+ */
+int tls13_generate_secret(SSL *s, const EVP_MD *md,
+                          const unsigned char *prevsecret,
+                          const unsigned char *insecret,
+                          size_t insecretlen,
+                          unsigned char *outsecret)
+{
+    size_t mdlen, prevsecretlen;
+    int mdleni;
+    int ret;
+    EVP_PKEY_CTX *pctx = EVP_PKEY_CTX_new_id(EVP_PKEY_HKDF, NULL);
+    static const char derived_secret_label[] = "derived";
+    unsigned char preextractsec[EVP_MAX_MD_SIZE];
+
+    if (pctx == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS13_GENERATE_SECRET,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    mdleni = EVP_MD_size(md);
+    /* Ensure cast to size_t is safe */
+    if (!ossl_assert(mdleni >= 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS13_GENERATE_SECRET,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    mdlen = (size_t)mdleni;
+
+    if (insecret == NULL) {
+        insecret = default_zeros;
+        insecretlen = mdlen;
+    }
+    if (prevsecret == NULL) {
+        prevsecret = default_zeros;
+        prevsecretlen = 0;
+    } else {
+        EVP_MD_CTX *mctx = EVP_MD_CTX_new();
+        unsigned char hash[EVP_MAX_MD_SIZE];
+
+        /* The pre-extract derive step uses a hash of no messages */
+        if (mctx == NULL
+                || EVP_DigestInit_ex(mctx, md, NULL) <= 0
+                || EVP_DigestFinal_ex(mctx, hash, NULL) <= 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS13_GENERATE_SECRET,
+                     ERR_R_INTERNAL_ERROR);
+            EVP_MD_CTX_free(mctx);
+            EVP_PKEY_CTX_free(pctx);
+            return 0;
+        }
+        EVP_MD_CTX_free(mctx);
+
+        /* Generate the pre-extract secret */
+        if (!tls13_hkdf_expand(s, md, prevsecret,
+                               (unsigned char *)derived_secret_label,
+                               sizeof(derived_secret_label) - 1, hash, mdlen,
+                               preextractsec, mdlen, 1)) {
+            /* SSLfatal() already called */
+            EVP_PKEY_CTX_free(pctx);
+            return 0;
+        }
+
+        prevsecret = preextractsec;
+        prevsecretlen = mdlen;
+    }
+
+    ret = EVP_PKEY_derive_init(pctx) <= 0
+            || EVP_PKEY_CTX_hkdf_mode(pctx, EVP_PKEY_HKDEF_MODE_EXTRACT_ONLY)
+               <= 0
+            || EVP_PKEY_CTX_set_hkdf_md(pctx, md) <= 0
+            || EVP_PKEY_CTX_set1_hkdf_key(pctx, insecret, insecretlen) <= 0
+            || EVP_PKEY_CTX_set1_hkdf_salt(pctx, prevsecret, prevsecretlen)
+               <= 0
+            || EVP_PKEY_derive(pctx, outsecret, &mdlen)
+               <= 0;
+
+    if (ret != 0)
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS13_GENERATE_SECRET,
+                 ERR_R_INTERNAL_ERROR);
+
+    EVP_PKEY_CTX_free(pctx);
+    if (prevsecret == preextractsec)
+        OPENSSL_cleanse(preextractsec, mdlen);
+    return ret == 0;
+}
+
+/*
+ * Given an input secret |insecret| of length |insecretlen| generate the
+ * handshake secret. This requires the early secret to already have been
+ * generated. Returns 1 on success  0 on failure.
+ */
+int tls13_generate_handshake_secret(SSL *s, const unsigned char *insecret,
+                                size_t insecretlen)
+{
+    /* Calls SSLfatal() if required */
+    return tls13_generate_secret(s, ssl_handshake_md(s), s->early_secret,
+                                 insecret, insecretlen,
+                                 (unsigned char *)&s->handshake_secret);
+}
+
+/*
+ * Given the handshake secret |prev| of length |prevlen| generate the master
+ * secret and store its length in |*secret_size|. Returns 1 on success  0 on
+ * failure.
+ */
+int tls13_generate_master_secret(SSL *s, unsigned char *out,
+                                 unsigned char *prev, size_t prevlen,
+                                 size_t *secret_size)
+{
+    const EVP_MD *md = ssl_handshake_md(s);
+
+    *secret_size = EVP_MD_size(md);
+    /* Calls SSLfatal() if required */
+    return tls13_generate_secret(s, md, prev, NULL, 0, out);
+}
+
+/*
+ * Generates the mac for the Finished message. Returns the length of the MAC or
+ * 0 on error.
+ */
+size_t tls13_final_finish_mac(SSL *s, const char *str, size_t slen,
+                             unsigned char *out)
+{
+    const EVP_MD *md = ssl_handshake_md(s);
+    unsigned char hash[EVP_MAX_MD_SIZE];
+    size_t hashlen, ret = 0;
+    EVP_PKEY *key = NULL;
+    EVP_MD_CTX *ctx = EVP_MD_CTX_new();
+
+    if (!ssl_handshake_hash(s, hash, sizeof(hash), &hashlen)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    if (str == s->method->ssl3_enc->server_finished_label) {
+        key = EVP_PKEY_new_raw_private_key(EVP_PKEY_HMAC, NULL,
+                                           s->server_finished_secret, hashlen);
+    } else if (SSL_IS_FIRST_HANDSHAKE(s)) {
+        key = EVP_PKEY_new_raw_private_key(EVP_PKEY_HMAC, NULL,
+                                           s->client_finished_secret, hashlen);
+    } else {
+        unsigned char finsecret[EVP_MAX_MD_SIZE];
+
+        if (!tls13_derive_finishedkey(s, ssl_handshake_md(s),
+                                      s->client_app_traffic_secret,
+                                      finsecret, hashlen))
+            goto err;
+
+        key = EVP_PKEY_new_raw_private_key(EVP_PKEY_HMAC, NULL, finsecret,
+                                           hashlen);
+        OPENSSL_cleanse(finsecret, sizeof(finsecret));
+    }
+
+    if (key == NULL
+            || ctx == NULL
+            || EVP_DigestSignInit(ctx, NULL, md, NULL, key) <= 0
+            || EVP_DigestSignUpdate(ctx, hash, hashlen) <= 0
+            || EVP_DigestSignFinal(ctx, out, &hashlen) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS13_FINAL_FINISH_MAC,
+                 ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    ret = hashlen;
+ err:
+    EVP_PKEY_free(key);
+    EVP_MD_CTX_free(ctx);
+    return ret;
+}
+
+/*
+ * There isn't really a key block in TLSv1.3, but we still need this function
+ * for initialising the cipher and hash. Returns 1 on success or 0 on failure.
+ */
+int tls13_setup_key_block(SSL *s)
+{
+    const EVP_CIPHER *c;
+    const EVP_MD *hash;
+
+    s->session->cipher = s->s3->tmp.new_cipher;
+    if (!ssl_cipher_get_evp(s->session, &c, &hash, NULL, NULL, NULL, 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS13_SETUP_KEY_BLOCK,
+                 SSL_R_CIPHER_OR_HASH_UNAVAILABLE);
+        return 0;
+    }
+
+    s->s3->tmp.new_sym_enc = c;
+    s->s3->tmp.new_hash = hash;
+
+    return 1;
+}
+
+static int derive_secret_key_and_iv(SSL *s, int sending, const EVP_MD *md,
+                                    const EVP_CIPHER *ciph,
+                                    const unsigned char *insecret,
+                                    const unsigned char *hash,
+                                    const unsigned char *label,
+                                    size_t labellen, unsigned char *secret,
+                                    unsigned char *iv, EVP_CIPHER_CTX *ciph_ctx)
+{
+    unsigned char key[EVP_MAX_KEY_LENGTH];
+    size_t ivlen, keylen, taglen;
+    int hashleni = EVP_MD_size(md);
+    size_t hashlen;
+
+    /* Ensure cast to size_t is safe */
+    if (!ossl_assert(hashleni >= 0)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DERIVE_SECRET_KEY_AND_IV,
+                 ERR_R_EVP_LIB);
+        goto err;
+    }
+    hashlen = (size_t)hashleni;
+
+    if (!tls13_hkdf_expand(s, md, insecret, label, labellen, hash, hashlen,
+                           secret, hashlen, 1)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    /* TODO(size_t): convert me */
+    keylen = EVP_CIPHER_key_length(ciph);
+    if (EVP_CIPHER_mode(ciph) == EVP_CIPH_CCM_MODE) {
+        uint32_t algenc;
+
+        ivlen = EVP_CCM_TLS_IV_LEN;
+        if (s->s3->tmp.new_cipher == NULL) {
+            /* We've not selected a cipher yet - we must be doing early data */
+            algenc = s->session->cipher->algorithm_enc;
+        } else {
+            algenc = s->s3->tmp.new_cipher->algorithm_enc;
+        }
+        if (algenc & (SSL_AES128CCM8 | SSL_AES256CCM8))
+            taglen = EVP_CCM8_TLS_TAG_LEN;
+         else
+            taglen = EVP_CCM_TLS_TAG_LEN;
+    } else {
+        ivlen = EVP_CIPHER_iv_length(ciph);
+        taglen = 0;
+    }
+
+    if (!tls13_derive_key(s, md, secret, key, keylen)
+            || !tls13_derive_iv(s, md, secret, iv, ivlen)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    if (EVP_CipherInit_ex(ciph_ctx, ciph, NULL, NULL, NULL, sending) <= 0
+        || !EVP_CIPHER_CTX_ctrl(ciph_ctx, EVP_CTRL_AEAD_SET_IVLEN, ivlen, NULL)
+        || (taglen != 0 && !EVP_CIPHER_CTX_ctrl(ciph_ctx, EVP_CTRL_AEAD_SET_TAG,
+                                                taglen, NULL))
+        || EVP_CipherInit_ex(ciph_ctx, NULL, NULL, key, NULL, -1) <= 0) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DERIVE_SECRET_KEY_AND_IV,
+                 ERR_R_EVP_LIB);
+        goto err;
+    }
+
+    return 1;
+ err:
+    OPENSSL_cleanse(key, sizeof(key));
+    return 0;
+}
+
+int tls13_change_cipher_state(SSL *s, int which)
+{
+    static const unsigned char client_early_traffic[] = "c e traffic";
+    static const unsigned char client_handshake_traffic[] = "c hs traffic";
+    static const unsigned char client_application_traffic[] = "c ap traffic";
+    static const unsigned char server_handshake_traffic[] = "s hs traffic";
+    static const unsigned char server_application_traffic[] = "s ap traffic";
+    static const unsigned char exporter_master_secret[] = "exp master";
+    static const unsigned char resumption_master_secret[] = "res master";
+    static const unsigned char early_exporter_master_secret[] = "e exp master";
+    unsigned char *iv;
+    unsigned char secret[EVP_MAX_MD_SIZE];
+    unsigned char hashval[EVP_MAX_MD_SIZE];
+    unsigned char *hash = hashval;
+    unsigned char *insecret;
+    unsigned char *finsecret = NULL;
+    const char *log_label = NULL;
+    EVP_CIPHER_CTX *ciph_ctx;
+    size_t finsecretlen = 0;
+    const unsigned char *label;
+    size_t labellen, hashlen = 0;
+    int ret = 0;
+    const EVP_MD *md = NULL;
+    const EVP_CIPHER *cipher = NULL;
+
+    if (which & SSL3_CC_READ) {
+        if (s->enc_read_ctx != NULL) {
+            EVP_CIPHER_CTX_reset(s->enc_read_ctx);
+        } else {
+            s->enc_read_ctx = EVP_CIPHER_CTX_new();
+            if (s->enc_read_ctx == NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS13_CHANGE_CIPHER_STATE, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+        }
+        ciph_ctx = s->enc_read_ctx;
+        iv = s->read_iv;
+
+        RECORD_LAYER_reset_read_sequence(&s->rlayer);
+    } else {
+        s->statem.enc_write_state = ENC_WRITE_STATE_INVALID;
+        if (s->enc_write_ctx != NULL) {
+            EVP_CIPHER_CTX_reset(s->enc_write_ctx);
+        } else {
+            s->enc_write_ctx = EVP_CIPHER_CTX_new();
+            if (s->enc_write_ctx == NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS13_CHANGE_CIPHER_STATE, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+        }
+        ciph_ctx = s->enc_write_ctx;
+        iv = s->write_iv;
+
+        RECORD_LAYER_reset_write_sequence(&s->rlayer);
+    }
+
+    if (((which & SSL3_CC_CLIENT) && (which & SSL3_CC_WRITE))
+            || ((which & SSL3_CC_SERVER) && (which & SSL3_CC_READ))) {
+        if (which & SSL3_CC_EARLY) {
+            EVP_MD_CTX *mdctx = NULL;
+            long handlen;
+            void *hdata;
+            unsigned int hashlenui;
+            const SSL_CIPHER *sslcipher = SSL_SESSION_get0_cipher(s->session);
+
+            insecret = s->early_secret;
+            label = client_early_traffic;
+            labellen = sizeof(client_early_traffic) - 1;
+            log_label = CLIENT_EARLY_LABEL;
+
+            handlen = BIO_get_mem_data(s->s3->handshake_buffer, &hdata);
+            if (handlen <= 0) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS13_CHANGE_CIPHER_STATE,
+                         SSL_R_BAD_HANDSHAKE_LENGTH);
+                goto err;
+            }
+
+            if (s->early_data_state == SSL_EARLY_DATA_CONNECTING
+                    && s->max_early_data > 0
+                    && s->session->ext.max_early_data == 0) {
+                /*
+                 * If we are attempting to send early data, and we've decided to
+                 * actually do it but max_early_data in s->session is 0 then we
+                 * must be using an external PSK.
+                 */
+                if (!ossl_assert(s->psksession != NULL
+                        && s->max_early_data ==
+                           s->psksession->ext.max_early_data)) {
+                    SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                             SSL_F_TLS13_CHANGE_CIPHER_STATE,
+                             ERR_R_INTERNAL_ERROR);
+                    goto err;
+                }
+                sslcipher = SSL_SESSION_get0_cipher(s->psksession);
+            }
+            if (sslcipher == NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS13_CHANGE_CIPHER_STATE, SSL_R_BAD_PSK);
+                goto err;
+            }
+
+            /*
+             * We need to calculate the handshake digest using the digest from
+             * the session. We haven't yet selected our ciphersuite so we can't
+             * use ssl_handshake_md().
+             */
+            mdctx = EVP_MD_CTX_new();
+            if (mdctx == NULL) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS13_CHANGE_CIPHER_STATE, ERR_R_MALLOC_FAILURE);
+                goto err;
+            }
+            cipher = EVP_get_cipherbynid(SSL_CIPHER_get_cipher_nid(sslcipher));
+            md = ssl_md(sslcipher->algorithm2);
+            if (md == NULL || !EVP_DigestInit_ex(mdctx, md, NULL)
+                    || !EVP_DigestUpdate(mdctx, hdata, handlen)
+                    || !EVP_DigestFinal_ex(mdctx, hashval, &hashlenui)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS13_CHANGE_CIPHER_STATE, ERR_R_INTERNAL_ERROR);
+                EVP_MD_CTX_free(mdctx);
+                goto err;
+            }
+            hashlen = hashlenui;
+            EVP_MD_CTX_free(mdctx);
+
+            if (!tls13_hkdf_expand(s, md, insecret,
+                                   early_exporter_master_secret,
+                                   sizeof(early_exporter_master_secret) - 1,
+                                   hashval, hashlen,
+                                   s->early_exporter_master_secret, hashlen,
+                                   1)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS13_CHANGE_CIPHER_STATE, ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
+
+            if (!ssl_log_secret(s, EARLY_EXPORTER_SECRET_LABEL,
+                                s->early_exporter_master_secret, hashlen)) {
+                /* SSLfatal() already called */
+                goto err;
+            }
+        } else if (which & SSL3_CC_HANDSHAKE) {
+            insecret = s->handshake_secret;
+            finsecret = s->client_finished_secret;
+            finsecretlen = EVP_MD_size(ssl_handshake_md(s));
+            label = client_handshake_traffic;
+            labellen = sizeof(client_handshake_traffic) - 1;
+            log_label = CLIENT_HANDSHAKE_LABEL;
+            /*
+             * The handshake hash used for the server read/client write handshake
+             * traffic secret is the same as the hash for the server
+             * write/client read handshake traffic secret. However, if we
+             * processed early data then we delay changing the server
+             * read/client write cipher state until later, and the handshake
+             * hashes have moved on. Therefore we use the value saved earlier
+             * when we did the server write/client read change cipher state.
+             */
+            hash = s->handshake_traffic_hash;
+        } else {
+            insecret = s->master_secret;
+            label = client_application_traffic;
+            labellen = sizeof(client_application_traffic) - 1;
+            log_label = CLIENT_APPLICATION_LABEL;
+            /*
+             * For this we only use the handshake hashes up until the server
+             * Finished hash. We do not include the client's Finished, which is
+             * what ssl_handshake_hash() would give us. Instead we use the
+             * previously saved value.
+             */
+            hash = s->server_finished_hash;
+        }
+    } else {
+        /* Early data never applies to client-read/server-write */
+        if (which & SSL3_CC_HANDSHAKE) {
+            insecret = s->handshake_secret;
+            finsecret = s->server_finished_secret;
+            finsecretlen = EVP_MD_size(ssl_handshake_md(s));
+            label = server_handshake_traffic;
+            labellen = sizeof(server_handshake_traffic) - 1;
+            log_label = SERVER_HANDSHAKE_LABEL;
+        } else {
+            insecret = s->master_secret;
+            label = server_application_traffic;
+            labellen = sizeof(server_application_traffic) - 1;
+            log_label = SERVER_APPLICATION_LABEL;
+        }
+    }
+
+    if (!(which & SSL3_CC_EARLY)) {
+        md = ssl_handshake_md(s);
+        cipher = s->s3->tmp.new_sym_enc;
+        if (!ssl3_digest_cached_records(s, 1)
+                || !ssl_handshake_hash(s, hashval, sizeof(hashval), &hashlen)) {
+            /* SSLfatal() already called */;
+            goto err;
+        }
+    }
+
+    /*
+     * Save the hash of handshakes up to now for use when we calculate the
+     * client application traffic secret
+     */
+    if (label == server_application_traffic)
+        memcpy(s->server_finished_hash, hashval, hashlen);
+
+    if (label == server_handshake_traffic)
+        memcpy(s->handshake_traffic_hash, hashval, hashlen);
+
+    if (label == client_application_traffic) {
+        /*
+         * We also create the resumption master secret, but this time use the
+         * hash for the whole handshake including the Client Finished
+         */
+        if (!tls13_hkdf_expand(s, ssl_handshake_md(s), insecret,
+                               resumption_master_secret,
+                               sizeof(resumption_master_secret) - 1,
+                               hashval, hashlen, s->resumption_master_secret,
+                               hashlen, 1)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    }
+
+    if (!derive_secret_key_and_iv(s, which & SSL3_CC_WRITE, md, cipher,
+                                  insecret, hash, label, labellen, secret, iv,
+                                  ciph_ctx)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    if (label == server_application_traffic) {
+        memcpy(s->server_app_traffic_secret, secret, hashlen);
+        /* Now we create the exporter master secret */
+        if (!tls13_hkdf_expand(s, ssl_handshake_md(s), insecret,
+                               exporter_master_secret,
+                               sizeof(exporter_master_secret) - 1,
+                               hash, hashlen, s->exporter_master_secret,
+                               hashlen, 1)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+
+        if (!ssl_log_secret(s, EXPORTER_SECRET_LABEL, s->exporter_master_secret,
+                            hashlen)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    } else if (label == client_application_traffic)
+        memcpy(s->client_app_traffic_secret, secret, hashlen);
+
+    if (!ssl_log_secret(s, log_label, secret, hashlen)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    if (finsecret != NULL
+            && !tls13_derive_finishedkey(s, ssl_handshake_md(s), secret,
+                                         finsecret, finsecretlen)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    if (!s->server && label == client_early_traffic)
+        s->statem.enc_write_state = ENC_WRITE_STATE_WRITE_PLAIN_ALERTS;
+    else
+        s->statem.enc_write_state = ENC_WRITE_STATE_VALID;
+    ret = 1;
+ err:
+    OPENSSL_cleanse(secret, sizeof(secret));
+    return ret;
+}
+
+int tls13_update_key(SSL *s, int sending)
+{
+    static const unsigned char application_traffic[] = "traffic upd";
+    const EVP_MD *md = ssl_handshake_md(s);
+    size_t hashlen = EVP_MD_size(md);
+    unsigned char *insecret, *iv;
+    unsigned char secret[EVP_MAX_MD_SIZE];
+    EVP_CIPHER_CTX *ciph_ctx;
+    int ret = 0;
+
+    if (s->server == sending)
+        insecret = s->server_app_traffic_secret;
+    else
+        insecret = s->client_app_traffic_secret;
+
+    if (sending) {
+        s->statem.enc_write_state = ENC_WRITE_STATE_INVALID;
+        iv = s->write_iv;
+        ciph_ctx = s->enc_write_ctx;
+        RECORD_LAYER_reset_write_sequence(&s->rlayer);
+    } else {
+        iv = s->read_iv;
+        ciph_ctx = s->enc_read_ctx;
+        RECORD_LAYER_reset_read_sequence(&s->rlayer);
+    }
+
+    if (!derive_secret_key_and_iv(s, sending, ssl_handshake_md(s),
+                                  s->s3->tmp.new_sym_enc, insecret, NULL,
+                                  application_traffic,
+                                  sizeof(application_traffic) - 1, secret, iv,
+                                  ciph_ctx)) {
+        /* SSLfatal() already called */
+        goto err;
+    }
+
+    memcpy(insecret, secret, hashlen);
+
+    s->statem.enc_write_state = ENC_WRITE_STATE_VALID;
+    ret = 1;
+ err:
+    OPENSSL_cleanse(secret, sizeof(secret));
+    return ret;
+}
+
+int tls13_alert_code(int code)
+{
+    /* There are 2 additional alerts in TLSv1.3 compared to TLSv1.2 */
+    if (code == SSL_AD_MISSING_EXTENSION || code == SSL_AD_CERTIFICATE_REQUIRED)
+        return code;
+
+    return tls1_alert_code(code);
+}
+
+int tls13_export_keying_material(SSL *s, unsigned char *out, size_t olen,
+                                 const char *label, size_t llen,
+                                 const unsigned char *context,
+                                 size_t contextlen, int use_context)
+{
+    unsigned char exportsecret[EVP_MAX_MD_SIZE];
+    static const unsigned char exporterlabel[] = "exporter";
+    unsigned char hash[EVP_MAX_MD_SIZE], data[EVP_MAX_MD_SIZE];
+    const EVP_MD *md = ssl_handshake_md(s);
+    EVP_MD_CTX *ctx = EVP_MD_CTX_new();
+    unsigned int hashsize, datalen;
+    int ret = 0;
+
+    if (ctx == NULL || !ossl_statem_export_allowed(s))
+        goto err;
+
+    if (!use_context)
+        contextlen = 0;
+
+    if (EVP_DigestInit_ex(ctx, md, NULL) <= 0
+            || EVP_DigestUpdate(ctx, context, contextlen) <= 0
+            || EVP_DigestFinal_ex(ctx, hash, &hashsize) <= 0
+            || EVP_DigestInit_ex(ctx, md, NULL) <= 0
+            || EVP_DigestFinal_ex(ctx, data, &datalen) <= 0
+            || !tls13_hkdf_expand(s, md, s->exporter_master_secret,
+                                  (const unsigned char *)label, llen,
+                                  data, datalen, exportsecret, hashsize, 0)
+            || !tls13_hkdf_expand(s, md, exportsecret, exporterlabel,
+                                  sizeof(exporterlabel) - 1, hash, hashsize,
+                                  out, olen, 0))
+        goto err;
+
+    ret = 1;
+ err:
+    EVP_MD_CTX_free(ctx);
+    return ret;
+}
+
+int tls13_export_keying_material_early(SSL *s, unsigned char *out, size_t olen,
+                                       const char *label, size_t llen,
+                                       const unsigned char *context,
+                                       size_t contextlen)
+{
+    static const unsigned char exporterlabel[] = "exporter";
+    unsigned char exportsecret[EVP_MAX_MD_SIZE];
+    unsigned char hash[EVP_MAX_MD_SIZE], data[EVP_MAX_MD_SIZE];
+    const EVP_MD *md;
+    EVP_MD_CTX *ctx = EVP_MD_CTX_new();
+    unsigned int hashsize, datalen;
+    int ret = 0;
+    const SSL_CIPHER *sslcipher;
+
+    if (ctx == NULL || !ossl_statem_export_early_allowed(s))
+        goto err;
+
+    if (!s->server && s->max_early_data > 0
+            && s->session->ext.max_early_data == 0)
+        sslcipher = SSL_SESSION_get0_cipher(s->psksession);
+    else
+        sslcipher = SSL_SESSION_get0_cipher(s->session);
+
+    md = ssl_md(sslcipher->algorithm2);
+
+    /*
+     * Calculate the hash value and store it in |data|. The reason why
+     * the empty string is used is that the definition of TLS-Exporter
+     * is like so:
+     *
+     * TLS-Exporter(label, context_value, key_length) =
+     *     HKDF-Expand-Label(Derive-Secret(Secret, label, ""),
+     *                       "exporter", Hash(context_value), key_length)
+     *
+     * Derive-Secret(Secret, Label, Messages) =
+     *       HKDF-Expand-Label(Secret, Label,
+     *                         Transcript-Hash(Messages), Hash.length)
+     *
+     * Here Transcript-Hash is the cipher suite hash algorithm.
+     */
+    if (EVP_DigestInit_ex(ctx, md, NULL) <= 0
+            || EVP_DigestUpdate(ctx, context, contextlen) <= 0
+            || EVP_DigestFinal_ex(ctx, hash, &hashsize) <= 0
+            || EVP_DigestInit_ex(ctx, md, NULL) <= 0
+            || EVP_DigestFinal_ex(ctx, data, &datalen) <= 0
+            || !tls13_hkdf_expand(s, md, s->early_exporter_master_secret,
+                                  (const unsigned char *)label, llen,
+                                  data, datalen, exportsecret, hashsize, 0)
+            || !tls13_hkdf_expand(s, md, exportsecret, exporterlabel,
+                                  sizeof(exporterlabel) - 1, hash, hashsize,
+                                  out, olen, 0))
+        goto err;
+
+    ret = 1;
+ err:
+    EVP_MD_CTX_free(ctx);
+    return ret;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/ssl/tls_srp.c b/trunk/3rdparty/openssl-1.1-fit/ssl/tls_srp.c
new file mode 100644
index 000000000..f94e46b4e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/ssl/tls_srp.c
@@ -0,0 +1,456 @@
+/*
+ * Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright (c) 2004, EdelKey Project. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Christophe Renou and Peter Sylvester,
+ * for the EdelKey project.
+ */
+
+#include <openssl/crypto.h>
+#include <openssl/rand.h>
+#include <openssl/err.h>
+#include "ssl_locl.h"
+
+#ifndef OPENSSL_NO_SRP
+# include <openssl/srp.h>
+
+int SSL_CTX_SRP_CTX_free(struct ssl_ctx_st *ctx)
+{
+    if (ctx == NULL)
+        return 0;
+    OPENSSL_free(ctx->srp_ctx.login);
+    OPENSSL_free(ctx->srp_ctx.info);
+    BN_free(ctx->srp_ctx.N);
+    BN_free(ctx->srp_ctx.g);
+    BN_free(ctx->srp_ctx.s);
+    BN_free(ctx->srp_ctx.B);
+    BN_free(ctx->srp_ctx.A);
+    BN_free(ctx->srp_ctx.a);
+    BN_free(ctx->srp_ctx.b);
+    BN_free(ctx->srp_ctx.v);
+    memset(&ctx->srp_ctx, 0, sizeof(ctx->srp_ctx));
+    ctx->srp_ctx.strength = SRP_MINIMAL_N;
+    return 1;
+}
+
+int SSL_SRP_CTX_free(struct ssl_st *s)
+{
+    if (s == NULL)
+        return 0;
+    OPENSSL_free(s->srp_ctx.login);
+    OPENSSL_free(s->srp_ctx.info);
+    BN_free(s->srp_ctx.N);
+    BN_free(s->srp_ctx.g);
+    BN_free(s->srp_ctx.s);
+    BN_free(s->srp_ctx.B);
+    BN_free(s->srp_ctx.A);
+    BN_free(s->srp_ctx.a);
+    BN_free(s->srp_ctx.b);
+    BN_free(s->srp_ctx.v);
+    memset(&s->srp_ctx, 0, sizeof(s->srp_ctx));
+    s->srp_ctx.strength = SRP_MINIMAL_N;
+    return 1;
+}
+
+int SSL_SRP_CTX_init(struct ssl_st *s)
+{
+    SSL_CTX *ctx;
+
+    if ((s == NULL) || ((ctx = s->ctx) == NULL))
+        return 0;
+
+    memset(&s->srp_ctx, 0, sizeof(s->srp_ctx));
+
+    s->srp_ctx.SRP_cb_arg = ctx->srp_ctx.SRP_cb_arg;
+    /* set client Hello login callback */
+    s->srp_ctx.TLS_ext_srp_username_callback =
+        ctx->srp_ctx.TLS_ext_srp_username_callback;
+    /* set SRP N/g param callback for verification */
+    s->srp_ctx.SRP_verify_param_callback =
+        ctx->srp_ctx.SRP_verify_param_callback;
+    /* set SRP client passwd callback */
+    s->srp_ctx.SRP_give_srp_client_pwd_callback =
+        ctx->srp_ctx.SRP_give_srp_client_pwd_callback;
+
+    s->srp_ctx.strength = ctx->srp_ctx.strength;
+
+    if (((ctx->srp_ctx.N != NULL) &&
+         ((s->srp_ctx.N = BN_dup(ctx->srp_ctx.N)) == NULL)) ||
+        ((ctx->srp_ctx.g != NULL) &&
+         ((s->srp_ctx.g = BN_dup(ctx->srp_ctx.g)) == NULL)) ||
+        ((ctx->srp_ctx.s != NULL) &&
+         ((s->srp_ctx.s = BN_dup(ctx->srp_ctx.s)) == NULL)) ||
+        ((ctx->srp_ctx.B != NULL) &&
+         ((s->srp_ctx.B = BN_dup(ctx->srp_ctx.B)) == NULL)) ||
+        ((ctx->srp_ctx.A != NULL) &&
+         ((s->srp_ctx.A = BN_dup(ctx->srp_ctx.A)) == NULL)) ||
+        ((ctx->srp_ctx.a != NULL) &&
+         ((s->srp_ctx.a = BN_dup(ctx->srp_ctx.a)) == NULL)) ||
+        ((ctx->srp_ctx.v != NULL) &&
+         ((s->srp_ctx.v = BN_dup(ctx->srp_ctx.v)) == NULL)) ||
+        ((ctx->srp_ctx.b != NULL) &&
+         ((s->srp_ctx.b = BN_dup(ctx->srp_ctx.b)) == NULL))) {
+        SSLerr(SSL_F_SSL_SRP_CTX_INIT, ERR_R_BN_LIB);
+        goto err;
+    }
+    if ((ctx->srp_ctx.login != NULL) &&
+        ((s->srp_ctx.login = OPENSSL_strdup(ctx->srp_ctx.login)) == NULL)) {
+        SSLerr(SSL_F_SSL_SRP_CTX_INIT, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    if ((ctx->srp_ctx.info != NULL) &&
+        ((s->srp_ctx.info = BUF_strdup(ctx->srp_ctx.info)) == NULL)) {
+        SSLerr(SSL_F_SSL_SRP_CTX_INIT, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    s->srp_ctx.srp_Mask = ctx->srp_ctx.srp_Mask;
+
+    return 1;
+ err:
+    OPENSSL_free(s->srp_ctx.login);
+    OPENSSL_free(s->srp_ctx.info);
+    BN_free(s->srp_ctx.N);
+    BN_free(s->srp_ctx.g);
+    BN_free(s->srp_ctx.s);
+    BN_free(s->srp_ctx.B);
+    BN_free(s->srp_ctx.A);
+    BN_free(s->srp_ctx.a);
+    BN_free(s->srp_ctx.b);
+    BN_free(s->srp_ctx.v);
+    memset(&s->srp_ctx, 0, sizeof(s->srp_ctx));
+    return 0;
+}
+
+int SSL_CTX_SRP_CTX_init(struct ssl_ctx_st *ctx)
+{
+    if (ctx == NULL)
+        return 0;
+
+    memset(&ctx->srp_ctx, 0, sizeof(ctx->srp_ctx));
+    ctx->srp_ctx.strength = SRP_MINIMAL_N;
+
+    return 1;
+}
+
+/* server side */
+int SSL_srp_server_param_with_username(SSL *s, int *ad)
+{
+    unsigned char b[SSL_MAX_MASTER_KEY_LENGTH];
+    int al;
+
+    *ad = SSL_AD_UNKNOWN_PSK_IDENTITY;
+    if ((s->srp_ctx.TLS_ext_srp_username_callback != NULL) &&
+        ((al =
+          s->srp_ctx.TLS_ext_srp_username_callback(s, ad,
+                                                   s->srp_ctx.SRP_cb_arg)) !=
+         SSL_ERROR_NONE))
+        return al;
+
+    *ad = SSL_AD_INTERNAL_ERROR;
+    if ((s->srp_ctx.N == NULL) ||
+        (s->srp_ctx.g == NULL) ||
+        (s->srp_ctx.s == NULL) || (s->srp_ctx.v == NULL))
+        return SSL3_AL_FATAL;
+
+    if (RAND_priv_bytes(b, sizeof(b)) <= 0)
+        return SSL3_AL_FATAL;
+    s->srp_ctx.b = BN_bin2bn(b, sizeof(b), NULL);
+    OPENSSL_cleanse(b, sizeof(b));
+
+    /* Calculate:  B = (kv + g^b) % N  */
+
+    return ((s->srp_ctx.B =
+             SRP_Calc_B(s->srp_ctx.b, s->srp_ctx.N, s->srp_ctx.g,
+                        s->srp_ctx.v)) !=
+            NULL) ? SSL_ERROR_NONE : SSL3_AL_FATAL;
+}
+
+/*
+ * If the server just has the raw password, make up a verifier entry on the
+ * fly
+ */
+int SSL_set_srp_server_param_pw(SSL *s, const char *user, const char *pass,
+                                const char *grp)
+{
+    SRP_gN *GN = SRP_get_default_gN(grp);
+    if (GN == NULL)
+        return -1;
+    s->srp_ctx.N = BN_dup(GN->N);
+    s->srp_ctx.g = BN_dup(GN->g);
+    BN_clear_free(s->srp_ctx.v);
+    s->srp_ctx.v = NULL;
+    BN_clear_free(s->srp_ctx.s);
+    s->srp_ctx.s = NULL;
+    if (!SRP_create_verifier_BN
+        (user, pass, &s->srp_ctx.s, &s->srp_ctx.v, GN->N, GN->g))
+        return -1;
+
+    return 1;
+}
+
+int SSL_set_srp_server_param(SSL *s, const BIGNUM *N, const BIGNUM *g,
+                             BIGNUM *sa, BIGNUM *v, char *info)
+{
+    if (N != NULL) {
+        if (s->srp_ctx.N != NULL) {
+            if (!BN_copy(s->srp_ctx.N, N)) {
+                BN_free(s->srp_ctx.N);
+                s->srp_ctx.N = NULL;
+            }
+        } else
+            s->srp_ctx.N = BN_dup(N);
+    }
+    if (g != NULL) {
+        if (s->srp_ctx.g != NULL) {
+            if (!BN_copy(s->srp_ctx.g, g)) {
+                BN_free(s->srp_ctx.g);
+                s->srp_ctx.g = NULL;
+            }
+        } else
+            s->srp_ctx.g = BN_dup(g);
+    }
+    if (sa != NULL) {
+        if (s->srp_ctx.s != NULL) {
+            if (!BN_copy(s->srp_ctx.s, sa)) {
+                BN_free(s->srp_ctx.s);
+                s->srp_ctx.s = NULL;
+            }
+        } else
+            s->srp_ctx.s = BN_dup(sa);
+    }
+    if (v != NULL) {
+        if (s->srp_ctx.v != NULL) {
+            if (!BN_copy(s->srp_ctx.v, v)) {
+                BN_free(s->srp_ctx.v);
+                s->srp_ctx.v = NULL;
+            }
+        } else
+            s->srp_ctx.v = BN_dup(v);
+    }
+    if (info != NULL) {
+        if (s->srp_ctx.info)
+            OPENSSL_free(s->srp_ctx.info);
+        if ((s->srp_ctx.info = BUF_strdup(info)) == NULL)
+            return -1;
+    }
+
+    if (!(s->srp_ctx.N) ||
+        !(s->srp_ctx.g) || !(s->srp_ctx.s) || !(s->srp_ctx.v))
+        return -1;
+
+    return 1;
+}
+
+int srp_generate_server_master_secret(SSL *s)
+{
+    BIGNUM *K = NULL, *u = NULL;
+    int ret = -1, tmp_len = 0;
+    unsigned char *tmp = NULL;
+
+    if (!SRP_Verify_A_mod_N(s->srp_ctx.A, s->srp_ctx.N))
+        goto err;
+    if ((u = SRP_Calc_u(s->srp_ctx.A, s->srp_ctx.B, s->srp_ctx.N)) == NULL)
+        goto err;
+    if ((K = SRP_Calc_server_key(s->srp_ctx.A, s->srp_ctx.v, u, s->srp_ctx.b,
+                                 s->srp_ctx.N)) == NULL)
+        goto err;
+
+    tmp_len = BN_num_bytes(K);
+    if ((tmp = OPENSSL_malloc(tmp_len)) == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_SRP_GENERATE_SERVER_MASTER_SECRET, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    BN_bn2bin(K, tmp);
+    /* Calls SSLfatal() as required */
+    ret = ssl_generate_master_secret(s, tmp, tmp_len, 1);
+ err:
+    BN_clear_free(K);
+    BN_clear_free(u);
+    return ret;
+}
+
+/* client side */
+int srp_generate_client_master_secret(SSL *s)
+{
+    BIGNUM *x = NULL, *u = NULL, *K = NULL;
+    int ret = -1, tmp_len = 0;
+    char *passwd = NULL;
+    unsigned char *tmp = NULL;
+
+    /*
+     * Checks if b % n == 0
+     */
+    if (SRP_Verify_B_mod_N(s->srp_ctx.B, s->srp_ctx.N) == 0
+            || (u = SRP_Calc_u(s->srp_ctx.A, s->srp_ctx.B, s->srp_ctx.N))
+               == NULL
+            || s->srp_ctx.SRP_give_srp_client_pwd_callback == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_SRP_GENERATE_CLIENT_MASTER_SECRET, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+    if ((passwd = s->srp_ctx.SRP_give_srp_client_pwd_callback(s,
+                                                      s->srp_ctx.SRP_cb_arg))
+            == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_SRP_GENERATE_CLIENT_MASTER_SECRET,
+                 SSL_R_CALLBACK_FAILED);
+        goto err;
+    }
+    if ((x = SRP_Calc_x(s->srp_ctx.s, s->srp_ctx.login, passwd)) == NULL
+            || (K = SRP_Calc_client_key(s->srp_ctx.N, s->srp_ctx.B,
+                                        s->srp_ctx.g, x,
+                                        s->srp_ctx.a, u)) == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_SRP_GENERATE_CLIENT_MASTER_SECRET, ERR_R_INTERNAL_ERROR);
+        goto err;
+    }
+
+    tmp_len = BN_num_bytes(K);
+    if ((tmp = OPENSSL_malloc(tmp_len)) == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_SRP_GENERATE_CLIENT_MASTER_SECRET, ERR_R_MALLOC_FAILURE);
+        goto err;
+    }
+    BN_bn2bin(K, tmp);
+    /* Calls SSLfatal() as required */
+    ret = ssl_generate_master_secret(s, tmp, tmp_len, 1);
+ err:
+    BN_clear_free(K);
+    BN_clear_free(x);
+    if (passwd != NULL)
+        OPENSSL_clear_free(passwd, strlen(passwd));
+    BN_clear_free(u);
+    return ret;
+}
+
+int srp_verify_server_param(SSL *s)
+{
+    SRP_CTX *srp = &s->srp_ctx;
+    /*
+     * Sanity check parameters: we can quickly check B % N == 0 by checking B
+     * != 0 since B < N
+     */
+    if (BN_ucmp(srp->g, srp->N) >= 0 || BN_ucmp(srp->B, srp->N) >= 0
+        || BN_is_zero(srp->B)) {
+        SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER, SSL_F_SRP_VERIFY_SERVER_PARAM,
+                 SSL_R_BAD_DATA);
+        return 0;
+    }
+
+    if (BN_num_bits(srp->N) < srp->strength) {
+        SSLfatal(s, SSL_AD_INSUFFICIENT_SECURITY, SSL_F_SRP_VERIFY_SERVER_PARAM,
+                 SSL_R_INSUFFICIENT_SECURITY);
+        return 0;
+    }
+
+    if (srp->SRP_verify_param_callback) {
+        if (srp->SRP_verify_param_callback(s, srp->SRP_cb_arg) <= 0) {
+            SSLfatal(s, SSL_AD_INSUFFICIENT_SECURITY,
+                     SSL_F_SRP_VERIFY_SERVER_PARAM,
+                     SSL_R_CALLBACK_FAILED);
+            return 0;
+        }
+    } else if (!SRP_check_known_gN_param(srp->g, srp->N)) {
+        SSLfatal(s, SSL_AD_INSUFFICIENT_SECURITY, SSL_F_SRP_VERIFY_SERVER_PARAM,
+                 SSL_R_INSUFFICIENT_SECURITY);
+        return 0;
+    }
+
+    return 1;
+}
+
+int SRP_Calc_A_param(SSL *s)
+{
+    unsigned char rnd[SSL_MAX_MASTER_KEY_LENGTH];
+
+    if (RAND_priv_bytes(rnd, sizeof(rnd)) <= 0)
+        return 0;
+    s->srp_ctx.a = BN_bin2bn(rnd, sizeof(rnd), s->srp_ctx.a);
+    OPENSSL_cleanse(rnd, sizeof(rnd));
+
+    if (!(s->srp_ctx.A = SRP_Calc_A(s->srp_ctx.a, s->srp_ctx.N, s->srp_ctx.g)))
+        return 0;
+
+    return 1;
+}
+
+BIGNUM *SSL_get_srp_g(SSL *s)
+{
+    if (s->srp_ctx.g != NULL)
+        return s->srp_ctx.g;
+    return s->ctx->srp_ctx.g;
+}
+
+BIGNUM *SSL_get_srp_N(SSL *s)
+{
+    if (s->srp_ctx.N != NULL)
+        return s->srp_ctx.N;
+    return s->ctx->srp_ctx.N;
+}
+
+char *SSL_get_srp_username(SSL *s)
+{
+    if (s->srp_ctx.login != NULL)
+        return s->srp_ctx.login;
+    return s->ctx->srp_ctx.login;
+}
+
+char *SSL_get_srp_userinfo(SSL *s)
+{
+    if (s->srp_ctx.info != NULL)
+        return s->srp_ctx.info;
+    return s->ctx->srp_ctx.info;
+}
+
+# define tls1_ctx_ctrl ssl3_ctx_ctrl
+# define tls1_ctx_callback_ctrl ssl3_ctx_callback_ctrl
+
+int SSL_CTX_set_srp_username(SSL_CTX *ctx, char *name)
+{
+    return tls1_ctx_ctrl(ctx, SSL_CTRL_SET_TLS_EXT_SRP_USERNAME, 0, name);
+}
+
+int SSL_CTX_set_srp_password(SSL_CTX *ctx, char *password)
+{
+    return tls1_ctx_ctrl(ctx, SSL_CTRL_SET_TLS_EXT_SRP_PASSWORD, 0, password);
+}
+
+int SSL_CTX_set_srp_strength(SSL_CTX *ctx, int strength)
+{
+    return tls1_ctx_ctrl(ctx, SSL_CTRL_SET_TLS_EXT_SRP_STRENGTH, strength,
+                         NULL);
+}
+
+int SSL_CTX_set_srp_verify_param_callback(SSL_CTX *ctx,
+                                          int (*cb) (SSL *, void *))
+{
+    return tls1_ctx_callback_ctrl(ctx, SSL_CTRL_SET_SRP_VERIFY_PARAM_CB,
+                                  (void (*)(void))cb);
+}
+
+int SSL_CTX_set_srp_cb_arg(SSL_CTX *ctx, void *arg)
+{
+    return tls1_ctx_ctrl(ctx, SSL_CTRL_SET_SRP_ARG, 0, arg);
+}
+
+int SSL_CTX_set_srp_username_callback(SSL_CTX *ctx,
+                                      int (*cb) (SSL *, int *, void *))
+{
+    return tls1_ctx_callback_ctrl(ctx, SSL_CTRL_SET_TLS_EXT_SRP_USERNAME_CB,
+                                  (void (*)(void))cb);
+}
+
+int SSL_CTX_set_srp_client_pwd_callback(SSL_CTX *ctx,
+                                        char *(*cb) (SSL *, void *))
+{
+    return tls1_ctx_callback_ctrl(ctx, SSL_CTRL_SET_SRP_GIVE_CLIENT_PWD_CB,
+                                  (void (*)(void))cb);
+}
+
+#endif
diff --git a/trunk/3rdparty/openssl-1.1-fit/tools/build.info b/trunk/3rdparty/openssl-1.1-fit/tools/build.info
new file mode 100644
index 000000000..059e58234
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/tools/build.info
@@ -0,0 +1,7 @@
+{- our $c_rehash_name =
+       $config{target} =~ /^(VC|vms)-/ ? "c_rehash.pl" : "c_rehash";
+   "" -}
+IF[{- !$disabled{apps} -}]
+  SCRIPTS={- $c_rehash_name -}
+  SOURCE[{- $c_rehash_name -}]=c_rehash.in
+ENDIF
diff --git a/trunk/3rdparty/openssl-1.1-fit/tools/c_rehash.in b/trunk/3rdparty/openssl-1.1-fit/tools/c_rehash.in
new file mode 100644
index 000000000..421fd8920
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/tools/c_rehash.in
@@ -0,0 +1,231 @@
+#!{- $config{HASHBANGPERL} -}
+
+# {- join("\n# ", @autowarntext) -}
+# Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# Perl c_rehash script, scan all files in a directory
+# and add symbolic links to their hash values.
+
+my $dir = {- quotify1($config{openssldir}) -};
+my $prefix = {- quotify1($config{prefix}) -};
+
+my $errorcount = 0;
+my $openssl = $ENV{OPENSSL} || "openssl";
+my $pwd;
+my $x509hash = "-subject_hash";
+my $crlhash = "-hash";
+my $verbose = 0;
+my $symlink_exists=eval {symlink("",""); 1};
+my $removelinks = 1;
+
+##  Parse flags.
+while ( $ARGV[0] =~ /^-/ ) {
+    my $flag = shift @ARGV;
+    last if ( $flag eq '--');
+    if ( $flag eq '-old') {
+	    $x509hash = "-subject_hash_old";
+	    $crlhash = "-hash_old";
+    } elsif ( $flag eq '-h' || $flag eq '-help' ) {
+	    help();
+    } elsif ( $flag eq '-n' ) {
+	    $removelinks = 0;
+    } elsif ( $flag eq '-v' ) {
+	    $verbose++;
+    }
+    else {
+	    print STDERR "Usage error; try -h.\n";
+	    exit 1;
+    }
+}
+
+sub help {
+	print "Usage: c_rehash [-old] [-h] [-help] [-v] [dirs...]\n";
+	print "   -old use old-style digest\n";
+	print "   -h or -help print this help text\n";
+	print "   -v print files removed and linked\n";
+	exit 0;
+}
+
+eval "require Cwd";
+if (defined(&Cwd::getcwd)) {
+	$pwd=Cwd::getcwd();
+} else {
+	$pwd=`pwd`;
+	chomp($pwd);
+}
+
+# DOS/Win32 or Unix delimiter?  Prefix our installdir, then search.
+my $path_delim = ($pwd =~ /^[a-z]\:/i) ? ';' : ':';
+$ENV{PATH} = "$prefix/bin" . ($ENV{PATH} ? $path_delim . $ENV{PATH} : "");
+
+if (! -x $openssl) {
+	my $found = 0;
+	foreach (split /$path_delim/, $ENV{PATH}) {
+		if (-x "$_/$openssl") {
+			$found = 1;
+			$openssl = "$_/$openssl";
+			last;
+		}	
+	}
+	if ($found == 0) {
+		print STDERR "c_rehash: rehashing skipped ('openssl' program not available)\n";
+		exit 0;
+	}
+}
+
+if (@ARGV) {
+	@dirlist = @ARGV;
+} elsif ($ENV{SSL_CERT_DIR}) {
+	@dirlist = split /$path_delim/, $ENV{SSL_CERT_DIR};
+} else {
+	$dirlist[0] = "$dir/certs";
+}
+
+if (-d $dirlist[0]) {
+	chdir $dirlist[0];
+	$openssl="$pwd/$openssl" if (!-x $openssl);
+	chdir $pwd;
+}
+
+foreach (@dirlist) {
+	if (-d $_ ) {
+            if ( -w $_) {
+		hash_dir($_);
+            } else {
+                print "Skipping $_, can't write\n";
+                $errorcount++;
+            }
+	}
+}
+exit($errorcount);
+
+sub hash_dir {
+	my %hashlist;
+	print "Doing $_[0]\n";
+	chdir $_[0];
+	opendir(DIR, ".");
+	my @flist = sort readdir(DIR);
+	closedir DIR;
+	if ( $removelinks ) {
+		# Delete any existing symbolic links
+		foreach (grep {/^[\da-f]+\.r{0,1}\d+$/} @flist) {
+			if (-l $_) {
+				print "unlink $_" if $verbose;
+				unlink $_ || warn "Can't unlink $_, $!\n";
+			}
+		}
+	}
+	FILE: foreach $fname (grep {/\.(pem)|(crt)|(cer)|(crl)$/} @flist) {
+		# Check to see if certificates and/or CRLs present.
+		my ($cert, $crl) = check_file($fname);
+		if (!$cert && !$crl) {
+			print STDERR "WARNING: $fname does not contain a certificate or CRL: skipping\n";
+			next;
+		}
+		link_hash_cert($fname) if ($cert);
+		link_hash_crl($fname) if ($crl);
+	}
+}
+
+sub check_file {
+	my ($is_cert, $is_crl) = (0,0);
+	my $fname = $_[0];
+	open IN, $fname;
+	while(<IN>) {
+		if (/^-----BEGIN (.*)-----/) {
+			my $hdr = $1;
+			if ($hdr =~ /^(X509 |TRUSTED |)CERTIFICATE$/) {
+				$is_cert = 1;
+				last if ($is_crl);
+			} elsif ($hdr eq "X509 CRL") {
+				$is_crl = 1;
+				last if ($is_cert);
+			}
+		}
+	}
+	close IN;
+	return ($is_cert, $is_crl);
+}
+
+
+# Link a certificate to its subject name hash value, each hash is of
+# the form <hash>.<n> where n is an integer. If the hash value already exists
+# then we need to up the value of n, unless its a duplicate in which
+# case we skip the link. We check for duplicates by comparing the
+# certificate fingerprints
+
+sub link_hash_cert {
+		my $fname = $_[0];
+		$fname =~ s/'/'\\''/g;
+		my ($hash, $fprint) = `"$openssl" x509 $x509hash -fingerprint -noout -in "$fname"`;
+		chomp $hash;
+		chomp $fprint;
+		$fprint =~ s/^.*=//;
+		$fprint =~ tr/://d;
+		my $suffix = 0;
+		# Search for an unused hash filename
+		while(exists $hashlist{"$hash.$suffix"}) {
+			# Hash matches: if fingerprint matches its a duplicate cert
+			if ($hashlist{"$hash.$suffix"} eq $fprint) {
+				print STDERR "WARNING: Skipping duplicate certificate $fname\n";
+				return;
+			}
+			$suffix++;
+		}
+		$hash .= ".$suffix";
+		if ($symlink_exists) {
+			print "link $fname -> $hash\n" if $verbose;
+			symlink $fname, $hash || warn "Can't symlink, $!";
+		} else {
+			print "copy $fname -> $hash\n" if $verbose;
+                        if (open($in, "<", $fname)) {
+                            if (open($out,">", $hash)) {
+                                print $out $_ while (<$in>);
+                                close $out;
+                            } else {
+                                warn "can't open $hash for write, $!";
+                            }
+                            close $in;
+                        } else {
+                            warn "can't open $fname for read, $!";
+                        }
+		}
+		$hashlist{$hash} = $fprint;
+}
+
+# Same as above except for a CRL. CRL links are of the form <hash>.r<n>
+
+sub link_hash_crl {
+		my $fname = $_[0];
+		$fname =~ s/'/'\\''/g;
+		my ($hash, $fprint) = `"$openssl" crl $crlhash -fingerprint -noout -in '$fname'`;
+		chomp $hash;
+		chomp $fprint;
+		$fprint =~ s/^.*=//;
+		$fprint =~ tr/://d;
+		my $suffix = 0;
+		# Search for an unused hash filename
+		while(exists $hashlist{"$hash.r$suffix"}) {
+			# Hash matches: if fingerprint matches its a duplicate cert
+			if ($hashlist{"$hash.r$suffix"} eq $fprint) {
+				print STDERR "WARNING: Skipping duplicate CRL $fname\n";
+				return;
+			}
+			$suffix++;
+		}
+		$hash .= ".r$suffix";
+		if ($symlink_exists) {
+			print "link $fname -> $hash\n" if $verbose;
+			symlink $fname, $hash || warn "Can't symlink, $!";
+		} else {
+			print "cp $fname -> $hash\n" if $verbose;
+			system ("cp", $fname, $hash);
+                        warn "Can't copy, $!" if ($? >> 8) != 0;
+		}
+		$hashlist{$hash} = $fprint;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/add-depends.pl b/trunk/3rdparty/openssl-1.1-fit/util/add-depends.pl
new file mode 100644
index 000000000..55d56b761
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/add-depends.pl
@@ -0,0 +1,288 @@
+#! /usr/bin/env perl
+# Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+use warnings;
+
+use lib '.';
+use configdata;
+
+use File::Spec::Functions qw(:DEFAULT rel2abs);
+use File::Compare qw(compare_text);
+use feature 'state';
+
+# When using stat() on Windows, we can get it to perform better by avoid some
+# data.  This doesn't affect the mtime field, so we're not losing anything...
+${^WIN32_SLOPPY_STAT} = 1;
+
+my $debug = $ENV{ADD_DEPENDS_DEBUG};
+my $buildfile = $config{build_file};
+my $build_mtime = (stat($buildfile))[9];
+my $rebuild = 0;
+my $depext = $target{dep_extension} || ".d";
+my @depfiles =
+    sort
+    grep {
+        # This grep has side effects.  Not only does if check the existence
+        # of the dependency file given in $_, but it also checks if it's
+        # newer than the build file, and if it is, sets $rebuild.
+        my @st = stat($_);
+        $rebuild = 1 if @st && $st[9] > $build_mtime;
+        scalar @st > 0;         # Determines the grep result
+    }
+    map { (my $x = $_) =~ s|\.o$|$depext|; $x; }
+    ( ( grep { $unified_info{sources}->{$_}->[0] =~ /\.cc?$/ }
+            keys %{$unified_info{sources}} ),
+      ( grep { $unified_info{shared_sources}->{$_}->[0] =~ /\.cc?$/ }
+            keys %{$unified_info{shared_sources}} ) );
+
+exit 0 unless $rebuild;
+
+# Ok, primary checks are done, time to do some real work
+
+my $producer = shift @ARGV;
+die "Producer not given\n" unless $producer;
+
+my $srcdir = $config{sourcedir};
+my $blddir = $config{builddir};
+my $abs_srcdir = rel2abs($srcdir);
+my $abs_blddir = rel2abs($blddir);
+
+# Convenient cache of absolute to relative map.  We start with filling it
+# with mappings for the known generated header files.  They are relative to
+# the current working directory, so that's an easy task.
+# NOTE: there's more than C header files that are generated.  They will also
+# generate entries in this map.  We could of course deal with C header files
+# only, but in case we decide to handle more than just C files in the future,
+# we already have the mechanism in place here.
+# NOTE2: we lower case the index to make it searchable without regard for
+# character case.  That could seem dangerous, but as long as we don't have
+# files we depend on in the same directory that only differ by character case,
+# we're fine.
+my %depconv_cache =
+    map { catfile($abs_blddir, $_) => $_ }
+    keys %{$unified_info{generate}};
+
+my %procedures = (
+    'gcc' => undef,             # gcc style dependency files needs no mods
+    'makedepend' =>
+        sub {
+            # makedepend, in its infinite wisdom, wants to have the object file
+            # in the same directory as the source file.  This doesn't work too
+            # well with out-of-source-tree builds, so we must resort to tricks
+            # to get things right.  Fortunately, the .d files are always placed
+            # parallel with the object files, so all we need to do is construct
+            # the object file name from the dep file name.
+            (my $objfile = shift) =~ s|\.d$|.o|i;
+            my $line = shift;
+
+            # Discard comments
+            return undef if $line =~ /^(#.*|\s*)$/;
+
+            # Remove the original object file
+            $line =~ s|^.*\.o: | |;
+            # Also, remove any dependency that starts with a /, because those
+            # are typically system headers
+            $line =~ s/\s+\/(\\.|\S)*//g;
+            # Finally, discard all empty lines
+            return undef if $line =~ /^\s*$/;
+
+            # All we got now is a dependency, just shave off surrounding spaces
+            $line =~ s/^\s+//;
+            $line =~ s/\s+$//;
+            return ($objfile, $line);
+        },
+    'VMS C' =>
+        sub {
+            state $abs_srcdir_shaved = undef;
+            state $srcdir_shaved = undef;
+
+            unless (defined $abs_srcdir_shaved) {
+                ($abs_srcdir_shaved = $abs_srcdir) =~ s|[>\]]$||;
+                ($srcdir_shaved = $srcdir) =~ s|[>\]]$||;
+            }
+
+            # current versions of DEC / Compaq / HP / VSI C strips away all
+            # directory information from the object file, so we must insert it
+            # back.  To make life simpler, we simply replace it with the
+            # corresponding .D file that's had its extension changed.  Since
+            # .D files are always written parallel to the object files, we
+            # thereby get the directory information for free.
+            (my $objfile = shift) =~ s|\.D$|.OBJ|i;
+            my $line = shift;
+
+            # Shave off the target.
+            #
+            # The pattern for target and dependencies will always take this
+            # form:
+            #
+            #   target SPACE : SPACE deps
+            #
+            # This is so a volume delimiter (a : without any spaces around it)
+            # won't get mixed up with the target / deps delimiter.  We use this
+            # to easily identify what needs to be removed.
+            m|\s:\s|; $line = $';
+
+            # We know that VMS has system header files in text libraries,
+            # extension .TLB.  We also know that our header files aren't stored
+            # in text libraries.  Finally, we know that VMS C produces exactly
+            # one dependency per line, so we simply discard any line ending with
+            # .TLB.
+            return undef if /\.TLB\s*$/;
+
+            # All we got now is a dependency, just shave off surrounding spaces
+            $line =~ s/^\s+//;
+            $line =~ s/\s+$//;
+
+            # VMS C gives us absolute paths, always.  Let's see if we can
+            # make them relative instead.
+            $line = canonpath($line);
+
+            unless (defined $depconv_cache{$line}) {
+                my $dep = $line;
+                # Since we have already pre-populated the cache with
+                # mappings for generated headers, we only need to deal
+                # with the source tree.
+                if ($dep =~ s|^\Q$abs_srcdir_shaved\E([\.>\]])?|$srcdir_shaved$1|i) {
+                    $depconv_cache{$line} = $dep;
+                }
+            }
+            return ($objfile, $depconv_cache{$line})
+                if defined $depconv_cache{$line};
+            print STDERR "DEBUG[VMS C]: ignoring $objfile <- $line\n"
+                if $debug;
+
+            return undef;
+        },
+    'VC' =>
+        sub {
+            # For the moment, we only support Visual C on native Windows, or
+            # compatible compilers.  With those, the flags /Zs /showIncludes
+            # give us the necessary output to be able to create dependencies
+            # that nmake (or any 'make' implementation) should be able to read,
+            # with a bit of help.  The output we're interested in looks like
+            # this (it always starts the same)
+            #
+            #   Note: including file: {whatever header file}
+            #
+            # Since there's no object file name at all in that information,
+            # we must construct it ourselves.
+
+            (my $objfile = shift) =~ s|\.d$|.obj|i;
+            my $line = shift;
+
+            # There are also other lines mixed in, for example compiler
+            # warnings, so we simply discard anything that doesn't start with
+            # the Note:
+
+            if (/^Note: including file: */) {
+                (my $tail = $') =~ s/\s*\R$//;
+
+                # VC gives us absolute paths for all include files, so to
+                # remove system header dependencies, we need to check that
+                # they don't match $abs_srcdir or $abs_blddir.
+                $tail = canonpath($tail);
+
+                unless (defined $depconv_cache{$tail}) {
+                    my $dep = $tail;
+                    # Since we have already pre-populated the cache with
+                    # mappings for generated headers, we only need to deal
+                    # with the source tree.
+                    if ($dep =~ s|^\Q$abs_srcdir\E\\|\$(SRCDIR)\\|i) {
+                        $depconv_cache{$tail} = $dep;
+                    }
+                }
+                return ($objfile, '"'.$depconv_cache{$tail}.'"')
+                    if defined $depconv_cache{$tail};
+                print STDERR "DEBUG[VC]: ignoring $objfile <- $tail\n"
+                    if $debug;
+            }
+
+            return undef;
+        },
+);
+my %continuations = (
+    'gcc' => undef,
+    'makedepend' => "\\",
+    'VMS C' => "-",
+    'VC' => "\\",
+);
+
+die "Producer unrecognised: $producer\n"
+    unless exists $procedures{$producer} && exists $continuations{$producer};
+
+my $procedure = $procedures{$producer};
+my $continuation = $continuations{$producer};
+
+my $buildfile_new = "$buildfile-$$";
+
+my %collect = ();
+if (defined $procedure) {
+    foreach my $depfile (@depfiles) {
+        open IDEP,$depfile or die "Trying to read $depfile: $!\n";
+        while (<IDEP>) {
+            s|\R$||;                # The better chomp
+            my ($target, $deps) = $procedure->($depfile, $_);
+            $collect{$target}->{$deps} = 1 if defined $target;
+        }
+        close IDEP;
+    }
+}
+
+open IBF, $buildfile or die "Trying to read $buildfile: $!\n";
+open OBF, '>', $buildfile_new or die "Trying to write $buildfile_new: $!\n";
+while (<IBF>) {
+    last if /^# DO NOT DELETE THIS LINE/;
+    print OBF or die "$!\n";
+}
+close IBF;
+
+print OBF "# DO NOT DELETE THIS LINE -- make depend depends on it.\n";
+
+if (defined $procedure) {
+    foreach my $target (sort keys %collect) {
+        my $prefix = $target . ' :';
+        my @deps = sort keys %{$collect{$target}};
+
+        while (@deps) {
+            my $buf = $prefix;
+            $prefix = '';
+
+            while (@deps && ($buf eq ''
+                                 || length($buf) + length($deps[0]) <= 77)) {
+                $buf .= ' ' . shift @deps;
+            }
+            $buf .= ' '.$continuation if @deps;
+
+            print OBF $buf,"\n" or die "Trying to print: $!\n"
+        }
+    }
+} else {
+    foreach my $depfile (@depfiles) {
+        open IDEP,$depfile or die "Trying to read $depfile: $!\n";
+        while (<IDEP>) {
+            print OBF or die "Trying to print: $!\n";
+        }
+        close IDEP;
+    }
+}
+
+close OBF;
+
+if (compare_text($buildfile_new, $buildfile) != 0) {
+    rename $buildfile_new, $buildfile
+        or die "Trying to rename $buildfile_new -> $buildfile: $!\n";
+}
+
+END {
+    # On VMS, we want to remove all generations of this file, in case there
+    # are more than one, so we loop.
+    if (defined $buildfile_new) {
+        while (unlink $buildfile_new) {}
+    }
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/build.info b/trunk/3rdparty/openssl-1.1-fit/util/build.info
new file mode 100644
index 000000000..609be5166
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/build.info
@@ -0,0 +1,8 @@
+IF[{- $target{build_scheme}->[1] eq "VMS" -}]
+ SCRIPTS_NO_INST=local_shlib.com unlocal_shlib.com
+ SOURCE[local_shlib.com]=local_shlib.com.in
+ SOURCE[unlocal_shlib.com]=unlocal_shlib.com.in
+ELSIF[{- $target{build_scheme}->[1] eq "unix" -}]
+ SCRIPTS_NO_INST=shlib_wrap.sh
+ SOURCE[shlib_wrap.sh]=shlib_wrap.sh.in
+ENDIF
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/check-malloc-errs b/trunk/3rdparty/openssl-1.1-fit/util/check-malloc-errs
new file mode 100755
index 000000000..1e632407c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/check-malloc-errs
@@ -0,0 +1,16 @@
+#! /bin/sh
+# Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+(
+    pcregrep -rnM 'OPENSSL_.?alloc.*\n.*if.*NULL.*\n.*return'  crypto ssl
+    pcregrep -rnM 'if.*OPENSSL_.?alloc.*NULL.*\n.*.*return' crypto ssl
+) | tee /tmp/out$$
+X=0
+test -s /tmp/out$$ && X=1
+rm /tmp/out$$
+exit $X
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/ck_errf.pl b/trunk/3rdparty/openssl-1.1-fit/util/ck_errf.pl
new file mode 100755
index 000000000..539736db0
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/ck_errf.pl
@@ -0,0 +1,152 @@
+#! /usr/bin/env perl
+# Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# This is just a quick script to scan for cases where the 'error'
+# function name in a XXXerr() macro is wrong.
+#
+# Run in the top level by going
+# perl util/ck_errf.pl */*.c */*/*.c
+#
+
+use strict;
+use warnings;
+
+my $config;
+my $err_strict = 0;
+my $debug      = 0;
+my $internal   = 0;
+
+sub help
+{
+    print STDERR <<"EOF";
+mkerr.pl [options] [files...]
+
+Options:
+
+    -conf FILE  Use the named config file FILE instead of the default.
+
+    -debug      Verbose output debugging on stderr.
+
+    -internal   Generate code that is to be built as part of OpenSSL itself.
+                Also scans internal list of files.
+
+    -strict     If any error was found, fail with exit code 1, otherwise 0.
+
+    -help       Show this help text.
+
+    ...         Additional arguments are added to the file list to scan,
+                if '-internal' was NOT specified on the command line.
+
+EOF
+}
+
+while ( @ARGV ) {
+    my $arg = $ARGV[0];
+    last unless $arg =~ /-.*/;
+    $arg = $1 if $arg =~ /-(-.*)/;
+    if ( $arg eq "-conf" ) {
+        $config = $ARGV[1];
+        shift @ARGV;
+    } elsif ( $arg eq "-debug" ) {
+        $debug = 1;
+    } elsif ( $arg eq "-internal" ) {
+        $internal = 1;
+    } elsif ( $arg eq "-strict" ) {
+        $err_strict = 1;
+    } elsif ( $arg =~ /-*h(elp)?/ ) {
+        &help();
+        exit;
+    } elsif ( $arg =~ /-.*/ ) {
+        die "Unknown option $arg; use -h for help.\n";
+    }
+    shift @ARGV;
+}
+
+my @source;
+if ( $internal ) {
+    die "Extra parameters given.\n" if @ARGV;
+    $config = "crypto/err/openssl.ec" unless defined $config;
+    @source = ( glob('crypto/*.c'), glob('crypto/*/*.c'),
+                glob('ssl/*.c'), glob('ssl/*/*.c') );
+} else {
+    die "Configuration file not given.\nSee '$0 -help' for information\n"
+        unless defined $config;
+    @source = @ARGV;
+}
+
+# To detect if there is any error generation for a libcrypto/libssl libs
+# we don't know, we need to find out what libs we do know.  That list is
+# readily available in crypto/err/openssl.ec, in form of lines starting
+# with "L ".  Note that we always rely on the modules SYS and ERR to be
+# generally available.
+my %libs       = ( SYS => 1, ERR => 1 );
+open my $cfh, $config or die "Trying to read $config: $!\n";
+while (<$cfh>) {
+    s|\R$||;                    # Better chomp
+    next unless m|^L ([0-9A-Z_]+)\s|;
+    next if $1 eq "NONE";
+    $libs{$1} = 1;
+}
+
+my $bad = 0;
+foreach my $file (@source) {
+    open( IN, "<$file" ) || die "Can't open $file, $!";
+    my $func = "";
+    while (<IN>) {
+        if ( !/;$/ && /^\**([a-zA-Z_].*[\s*])?([A-Za-z_0-9]+)\(.*([),]|$)/ ) {
+            /^([^()]*(\([^()]*\)[^()]*)*)\(/;
+            $1 =~ /([A-Za-z_0-9]*)$/;
+            $func = $1;
+            $func =~ tr/A-Z/a-z/;
+        }
+        if ( /([A-Z0-9_]+[A-Z0-9])err\(([^,]+)/ && !/ckerr_ignore/ ) {
+            my $errlib = $1;
+            my $n      = $2;
+
+            unless ( $libs{$errlib} ) {
+                print "$file:$.:$errlib not listed in $config\n";
+                $libs{$errlib} = 1; # To not display it again
+                $bad = 1;
+            }
+
+            if ( $func eq "" ) {
+                print "$file:$.:???:$n\n";
+                $bad = 1;
+                next;
+            }
+
+            if ( $n !~ /^(.+)_F_(.+)$/ ) {
+                #print "check -$file:$.:$func:$n\n";
+                next;
+            }
+            my $lib = $1;
+            $n   = $2;
+
+            if ( $lib ne $errlib ) {
+                print "$file:$.:$func:$n [${errlib}err]\n";
+                $bad = 1;
+                next;
+            }
+
+            $n =~ tr/A-Z/a-z/;
+            if ( $n ne $func && $errlib ne "SYS" ) {
+                print "$file:$.:$func:$n\n";
+                $bad = 1;
+                next;
+            }
+
+            #		print "$func:$1\n";
+        }
+    }
+    close(IN);
+}
+
+if ( $bad && $err_strict ) {
+    print STDERR "FATAL: error discrepancy\n";
+    exit 1;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/copy.pl b/trunk/3rdparty/openssl-1.1-fit/util/copy.pl
new file mode 100644
index 000000000..58ecc82c4
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/copy.pl
@@ -0,0 +1,84 @@
+#! /usr/bin/env perl
+# Copyright 2005-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+use Fcntl;
+
+
+# copy.pl
+
+# Perl script 'copy' comment. On Windows the built in "copy" command also
+# copies timestamps: this messes up Makefile dependencies.
+
+my $stripcr = 0;
+
+my $arg;
+my @excludes = ();
+
+foreach $arg (@ARGV) {
+	if ($arg eq "-stripcr")
+		{
+		$stripcr = 1;
+		next;
+		}
+	if ($arg =~ /^-exclude_re=(.*)$/)
+		{
+		push @excludes, $1;
+		next;
+		}
+	$arg =~ s|\\|/|g;	# compensate for bug/feature in cygwin glob...
+	$arg = qq("$arg") if ($arg =~ /\s/);	# compensate for bug in 5.10...
+	foreach my $f (glob $arg)
+		{
+		push @filelist, $f unless grep { $f =~ /$_/ } @excludes;
+		}
+}
+
+$fnum = @filelist;
+
+if ($fnum <= 1)
+	{
+	die "Need at least two filenames";
+	}
+
+$dest = pop @filelist;
+
+if ($fnum > 2 && ! -d $dest)
+	{
+	die "Destination must be a directory";
+	}
+
+foreach (@filelist)
+	{
+	if (-d $dest)
+		{
+		$dfile = $_;
+		$dfile =~ s|^.*[/\\]([^/\\]*)$|$1|;
+		$dfile = "$dest/$dfile";
+		}
+	else
+		{
+		$dfile = $dest;
+		}
+	sysopen(IN, $_, O_RDONLY|O_BINARY) || die "Can't Open $_";
+	sysopen(OUT, $dfile, O_WRONLY|O_CREAT|O_TRUNC|O_BINARY)
+					|| die "Can't Open $dfile";
+	while (sysread IN, $buf, 10240)
+		{
+		if ($stripcr)
+			{
+			$buf =~ tr/\015//d;
+			}
+		syswrite(OUT, $buf, length($buf));
+		}
+	close(IN);
+	close(OUT);
+	print "Copying: $_ to $dfile\n";
+	}
+
+
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/dofile.pl b/trunk/3rdparty/openssl-1.1-fit/util/dofile.pl
new file mode 100644
index 000000000..c3bc9ba9d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/dofile.pl
@@ -0,0 +1,210 @@
+#! /usr/bin/env perl
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# Reads one or more template files and runs it through Text::Template
+#
+# It is assumed that this scripts is called with -Mconfigdata, a module
+# that holds configuration data in %config
+
+use strict;
+use warnings;
+
+use FindBin;
+use Getopt::Std;
+
+# We actually expect to get the following hash tables from configdata:
+#
+#    %config
+#    %target
+#    %withargs
+#    %unified_info
+#
+# We just do a minimal test to see that we got what we expected.
+# $config{target} must exist as an absolute minimum.
+die "You must run this script with -Mconfigdata\n" if !exists($config{target});
+
+# Make a subclass of Text::Template to override append_text_to_result,
+# as recommended here:
+#
+# http://search.cpan.org/~mjd/Text-Template-1.46/lib/Text/Template.pm#Automatic_postprocessing_of_template_hunks
+
+package OpenSSL::Template;
+
+# Because we know that Text::Template isn't a core Perl module, we use
+# a fallback in case it's not installed on the system
+use File::Basename;
+use File::Spec::Functions;
+use lib "$FindBin::Bin/perl";
+use with_fallback "Text::Template 1.46";
+
+#use parent qw/Text::Template/;
+use vars qw/@ISA/;
+push @ISA, qw/Text::Template/;
+
+# Override constructor
+sub new {
+    my ($class) = shift;
+
+    # Call the constructor of the parent class, Person.
+    my $self = $class->SUPER::new( @_ );
+    # Add few more attributes
+    $self->{_output_off}   = 0;	# Default to output hunks
+    bless $self, $class;
+    return $self;
+}
+
+sub append_text_to_output {
+    my $self = shift;
+
+    if ($self->{_output_off} == 0) {
+	$self->SUPER::append_text_to_output(@_);
+    }
+
+    return;
+}
+
+sub output_reset_on {
+    my $self = shift;
+    $self->{_output_off} = 0;
+}
+
+sub output_on {
+    my $self = shift;
+    if (--$self->{_output_off} < 0) {
+	$self->{_output_off} = 0;
+    }
+}
+
+sub output_off {
+    my $self = shift;
+    $self->{_output_off}++;
+}
+
+# Come back to main
+
+package main;
+
+# Helper functions for the templates #################################
+
+# It might be practical to quotify some strings and have them protected
+# from possible harm.  These functions primarily quote things that might
+# be interpreted wrongly by a perl eval.
+
+# quotify1 STRING
+# This adds quotes (") around the given string, and escapes any $, @, \,
+# " and ' by prepending a \ to them.
+sub quotify1 {
+    my $s = shift @_;
+    $s =~ s/([\$\@\\"'])/\\$1/g;
+    '"'.$s.'"';
+}
+
+# quotify_l LIST
+# For each defined element in LIST (i.e. elements that aren't undef), have
+# it quotified with 'quotify1'
+sub quotify_l {
+    map {
+        if (!defined($_)) {
+            ();
+        } else {
+            quotify1($_);
+        }
+    } @_;
+}
+
+# Error reporter #####################################################
+
+# The error reporter uses %lines to figure out exactly which file the
+# error happened and at what line.  Not that the line number may be
+# the start of a perl snippet rather than the exact line where it
+# happened.  Nothing we can do about that here.
+
+my %lines = ();
+sub broken {
+    my %args = @_;
+    my $filename = "<STDIN>";
+    my $deducelines = 0;
+    foreach (sort keys %lines) {
+        $filename = $lines{$_};
+        last if ($_ > $args{lineno});
+        $deducelines += $_;
+    }
+    print STDERR $args{error}," in $filename, fragment starting at line ",$args{lineno}-$deducelines;
+    undef;
+}
+
+# Check options ######################################################
+
+my %opts = ();
+
+# -o ORIGINATOR
+#		declares ORIGINATOR as the originating script.
+getopt('o', \%opts);
+
+my @autowarntext = ("WARNING: do not edit!",
+		    "Generated"
+		    . (defined($opts{o}) ? " by ".$opts{o} : "")
+		    . (scalar(@ARGV) > 0 ? " from ".join(", ",@ARGV) : ""));
+
+# Template reading ###################################################
+
+# Read in all the templates into $text, while keeping track of each
+# file and its size in lines, to try to help report errors with the
+# correct file name and line number.
+
+my $prev_linecount = 0;
+my $text =
+    @ARGV
+    ? join("", map { my $x = Text::Template::_load_text($_);
+                     if (!defined($x)) {
+                         die $Text::Template::ERROR, "\n";
+                     }
+                     $x = "{- output_reset_on() -}" . $x;
+                     my $linecount = $x =~ tr/\n//;
+                     $prev_linecount = ($linecount += $prev_linecount);
+                     $lines{$linecount} = $_;
+                     $x } @ARGV)
+    : join("", <STDIN>);
+
+# Engage! ############################################################
+
+# Load the full template (combination of files) into Text::Template
+# and fill it up with our data.  Output goes directly to STDOUT
+
+my $template =
+    OpenSSL::Template->new(TYPE => 'STRING',
+                           SOURCE => $text,
+                           PREPEND => qq{use lib "$FindBin::Bin/perl";});
+
+sub output_reset_on {
+    $template->output_reset_on();
+    "";
+}
+sub output_on {
+    $template->output_on();
+    "";
+}
+sub output_off {
+    $template->output_off();
+    "";
+}
+
+$template->fill_in(OUTPUT => \*STDOUT,
+                   HASH => { config => \%config,
+                             target => \%target,
+                             disabled => \%disabled,
+                             withargs => \%withargs,
+                             unified_info => \%unified_info,
+                             autowarntext => \@autowarntext,
+                             quotify1 => \&quotify1,
+                             quotify_l => \&quotify_l,
+                             output_reset_on => \&output_reset_on,
+                             output_on => \&output_on,
+                             output_off => \&output_off },
+                   DELIMITERS => [ "{-", "-}" ],
+                   BROKEN => \&broken);
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/echo.pl b/trunk/3rdparty/openssl-1.1-fit/util/echo.pl
new file mode 100644
index 000000000..d90e52129
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/echo.pl
@@ -0,0 +1,12 @@
+#! /usr/bin/perl
+
+use strict;
+use warnings;
+use Getopt::Std;
+
+our $opt_n = 0;
+
+getopts('n') or die "Invalid option: $!\n";
+
+print join(' ', @ARGV);
+print "\n" unless $opt_n;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/find-doc-nits b/trunk/3rdparty/openssl-1.1-fit/util/find-doc-nits
new file mode 100755
index 000000000..860bb9958
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/find-doc-nits
@@ -0,0 +1,545 @@
+#! /usr/bin/env perl
+# Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+require 5.10.0;
+use warnings;
+use strict;
+use Pod::Checker;
+use File::Find;
+use File::Basename;
+use File::Spec::Functions;
+use Getopt::Std;
+use lib catdir(dirname($0), "perl");
+use OpenSSL::Util::Pod;
+
+# Options.
+our($opt_d);
+our($opt_h);
+our($opt_l);
+our($opt_n);
+our($opt_p);
+our($opt_u);
+our($opt_c);
+
+sub help()
+{
+    print <<EOF;
+Find small errors (nits) in documentation.  Options:
+    -d Detailed list of undocumented (implies -u)
+    -l Print bogus links
+    -n Print nits in POD pages
+    -p Warn if non-public name documented (implies -n)
+    -u List undocumented functions
+    -h Print this help message
+    -c List undocumented commands and options
+EOF
+    exit;
+}
+
+my $temp = '/tmp/docnits.txt';
+my $OUT;
+my %public;
+
+my %mandatory_sections =
+    ( '*'    => [ 'NAME', 'DESCRIPTION', 'COPYRIGHT' ],
+      1      => [ 'SYNOPSIS', 'OPTIONS' ],
+      3      => [ 'SYNOPSIS', 'RETURN VALUES' ],
+      5      => [ ],
+      7      => [ ] );
+
+# Cross-check functions in the NAME and SYNOPSIS section.
+sub name_synopsis()
+{
+    my $id = shift;
+    my $filename = shift;
+    my $contents = shift;
+
+    # Get NAME section and all words in it.
+    return unless $contents =~ /=head1 NAME(.*)=head1 SYNOPSIS/ms;
+    my $tmp = $1;
+    $tmp =~ tr/\n/ /;
+    print "$id trailing comma before - in NAME\n" if $tmp =~ /, *-/;
+    $tmp =~ s/ -.*//g;
+    $tmp =~ s/  */ /g;
+    print "$id missing comma in NAME\n" if $tmp =~ /[^,] /;
+    $tmp =~ s/,//g;
+
+    my $dirname = dirname($filename);
+    my $simplename = basename($filename);
+    $simplename =~ s/.pod$//;
+    my $foundfilename = 0;
+    my %foundfilenames = ();
+    my %names;
+    foreach my $n ( split ' ', $tmp ) {
+        $names{$n} = 1;
+        $foundfilename++ if $n eq $simplename;
+        $foundfilenames{$n} = 1
+            if -f "$dirname/$n.pod" && $n ne $simplename;
+    }
+    print "$id the following exist as other .pod files:\n",
+        join(" ", sort keys %foundfilenames), "\n"
+        if %foundfilenames;
+    print "$id $simplename (filename) missing from NAME section\n"
+        unless $foundfilename;
+    foreach my $n ( keys %names ) {
+        print "$id $n is not public\n"
+            if $opt_p and !defined $public{$n};
+    }
+
+    # Find all functions in SYNOPSIS
+    return unless $contents =~ /=head1 SYNOPSIS(.*)=head1 DESCRIPTION/ms;
+    my $syn = $1;
+    foreach my $line ( split /\n+/, $syn ) {
+        my $sym;
+        $line =~ s/STACK_OF\([^)]+\)/int/g;
+        $line =~ s/__declspec\([^)]+\)//;
+        if ( $line =~ /env (\S*)=/ ) {
+            # environment variable env NAME=...
+            $sym = $1;
+        } elsif ( $line =~ /typedef.*\(\*(\S+)\)\(.*/ ) {
+            # a callback function pointer: typedef ... (*NAME)(...
+            $sym = $1;
+        } elsif ( $line =~ /typedef.* (\S+)\(.*/ ) {
+            # a callback function signature: typedef ... NAME(...
+            $sym = $1;
+        } elsif ( $line =~ /typedef.* (\S+);/ ) {
+            # a simple typedef: typedef ... NAME;
+            $sym = $1;
+        } elsif ( $line =~ /enum (\S*) \{/ ) {
+            # an enumeration: enum ... {
+            $sym = $1;
+        } elsif ( $line =~ /#define ([A-Za-z0-9_]+)/ ) {
+            $sym = $1;
+        } elsif ( $line =~ /([A-Za-z0-9_]+)\(/ ) {
+            $sym = $1;
+        }
+        else {
+            next;
+        }
+        print "$id $sym missing from NAME section\n"
+            unless defined $names{$sym};
+        $names{$sym} = 2;
+
+        # Do some sanity checks on the prototype.
+        print "$id prototype missing spaces around commas: $line\n"
+            if ( $line =~ /[a-z0-9],[^ ]/ );
+    }
+
+    foreach my $n ( keys %names ) {
+        next if $names{$n} == 2;
+        print "$id $n missing from SYNOPSIS\n";
+    }
+}
+
+sub check()
+{
+    my $filename = shift;
+    my $dirname = basename(dirname($filename));
+
+    my $contents = '';
+    {
+        local $/ = undef;
+        open POD, $filename or die "Couldn't open $filename, $!";
+        $contents = <POD>;
+        close POD;
+    }
+
+    my $id = "${filename}:1:";
+
+    &name_synopsis($id, $filename, $contents)
+        unless $contents =~ /=for comment generic/
+            or $filename =~ m@man[157]/@;
+
+    print "$id doesn't start with =pod\n"
+        if $contents !~ /^=pod/;
+    print "$id doesn't end with =cut\n"
+        if $contents !~ /=cut\n$/;
+    print "$id more than one cut line.\n"
+        if $contents =~ /=cut.*=cut/ms;
+    print "$id missing copyright\n"
+        if $contents !~ /Copyright .* The OpenSSL Project Authors/;
+    print "$id copyright not last\n"
+        if $contents =~ /head1 COPYRIGHT.*=head/ms;
+    print "$id head2 in All uppercase\n"
+        if $contents =~ /head2\s+[A-Z ]+\n/;
+    print "$id extra space after head\n"
+        if $contents =~ /=head\d\s\s+/;
+    print "$id period in NAME section\n"
+        if $contents =~ /=head1 NAME.*\.\n.*=head1 SYNOPSIS/ms;
+    print "$id POD markup in NAME section\n"
+        if $contents =~ /=head1 NAME.*[<>].*=head1 SYNOPSIS/ms;
+    print "$id Duplicate $1 in L<>\n"
+        if $contents =~ /L<([^>]*)\|([^>]*)>/ && $1 eq $2;
+    print "$id Bad =over $1\n"
+        if $contents =~ /=over([^ ][^24])/;
+    print "$id Possible version style issue\n"
+        if $contents =~ /OpenSSL version [019]/;
+
+    if ( $contents !~ /=for comment multiple includes/ ) {
+        # Look for multiple consecutive openssl #include lines
+        # (non-consecutive lines are okay; see man3/MD5.pod).
+        if ( $contents =~ /=head1 SYNOPSIS(.*)=head1 DESCRIPTION/ms ) {
+            my $count = 0;
+            foreach my $line ( split /\n+/, $1 ) {
+                if ( $line =~ m@include <openssl/@ ) {
+                    print "$id has multiple includes\n" if ++$count == 2;
+                } else {
+                    $count = 0;
+                }
+            }
+        }
+    }
+
+    open my $OUT, '>', $temp
+        or die "Can't open $temp, $!";
+    podchecker($filename, $OUT);
+    close $OUT;
+    open $OUT, '<', $temp
+        or die "Can't read $temp, $!";
+    while ( <$OUT> ) {
+        next if /\(section\) in.*deprecated/;
+        print;
+    }
+    close $OUT;
+    unlink $temp || warn "Can't remove $temp, $!";
+
+    # Find what section this page is in; assume 3.
+    my $section = 3;
+    $section = $1 if $dirname =~ /man([1-9])/;
+
+    foreach ((@{$mandatory_sections{'*'}}, @{$mandatory_sections{$section}})) {
+        # Skip "return values" if not -s
+        print "$id: missing $_ head1 section\n"
+            if $contents !~ /^=head1\s+${_}\s*$/m;
+    }
+}
+
+my %dups;
+
+sub parsenum()
+{
+    my $file = shift;
+    my @apis;
+
+    open my $IN, '<', $file
+        or die "Can't open $file, $!, stopped";
+
+    while ( <$IN> ) {
+        next if /^#/;
+        next if /\bNOEXIST\b/;
+        next if /\bEXPORT_VAR_AS_FUNC\b/;
+        my @fields = split();
+        die "Malformed line $_"
+            if scalar @fields != 2 && scalar @fields != 4;
+        push @apis, $fields[0];
+    }
+
+    close $IN;
+
+    print "# Found ", scalar(@apis), " in $file\n" unless $opt_p;
+    return sort @apis;
+}
+
+sub getdocced()
+{
+    my $dir = shift;
+    my %return;
+
+    foreach my $pod ( glob("$dir/*.pod") ) {
+        my %podinfo = extract_pod_info($pod);
+        foreach my $n ( @{$podinfo{names}} ) {
+            $return{$n} = $pod;
+            print "# Duplicate $n in $pod and $dups{$n}\n"
+                if defined $dups{$n} && $dups{$n} ne $pod;
+            $dups{$n} = $pod;
+        }
+    }
+
+    return %return;
+}
+
+my %docced;
+
+sub checkmacros()
+{
+    my $count = 0;
+
+    print "# Checking macros (approximate)\n";
+    foreach my $f ( glob('include/openssl/*.h') ) {
+        # Skip some internals we don't want to document yet.
+        next if $f eq 'include/openssl/asn1.h';
+        next if $f eq 'include/openssl/asn1t.h';
+        next if $f eq 'include/openssl/err.h';
+        open(IN, $f) || die "Can't open $f, $!";
+        while ( <IN> ) {
+            next unless /^#\s*define\s*(\S+)\(/;
+            my $macro = $1;
+            next if $docced{$macro};
+            next if $macro =~ /i2d_/
+                || $macro =~ /d2i_/
+                || $macro =~ /DEPRECATEDIN/
+                || $macro =~ /IMPLEMENT_/
+                || $macro =~ /DECLARE_/;
+            print "$f:$macro\n" if $opt_d;
+            $count++;
+        }
+        close(IN);
+    }
+    print "# Found $count macros missing (not all should be documented)\n"
+}
+
+sub printem()
+{
+    my $libname = shift;
+    my $numfile = shift;
+    my $count = 0;
+
+    foreach my $func ( &parsenum($numfile) ) {
+        next if $docced{$func};
+
+        # Skip ASN1 utilities
+        next if $func =~ /^ASN1_/;
+
+        print "$libname:$func\n" if $opt_d;
+        $count++;
+    }
+    print "# Found $count missing from $numfile\n\n";
+}
+
+
+# Collection of links in each POD file.
+# filename => [ "foo(1)", "bar(3)", ... ]
+my %link_collection = ();
+# Collection of names in each POD file.
+# "name(s)" => filename
+my %name_collection = ();
+
+sub collectnames {
+    my $filename = shift;
+    $filename =~ m|man(\d)/|;
+    my $section = $1;
+    my $simplename = basename($filename, ".pod");
+    my $id = "${filename}:1:";
+
+    my $contents = '';
+    {
+        local $/ = undef;
+        open POD, $filename or die "Couldn't open $filename, $!";
+        $contents = <POD>;
+        close POD;
+    }
+
+    $contents =~ /=head1 NAME([^=]*)=head1 /ms;
+    my $tmp = $1;
+    unless (defined $tmp) {
+        print "$id weird name section\n";
+        return;
+    }
+    $tmp =~ tr/\n/ /;
+    $tmp =~ s/-.*//g;
+
+    my @names = map { s/\s+//g; $_ } split(/,/, $tmp);
+    unless (grep { $simplename eq $_ } @names) {
+        print "$id missing $simplename\n";
+        push @names, $simplename;
+    }
+    foreach my $name (@names) {
+        next if $name eq "";
+        my $name_sec = "$name($section)";
+        if (! exists $name_collection{$name_sec}) {
+            $name_collection{$name_sec} = $filename;
+        } else { #elsif ($filename ne $name_collection{$name_sec}) {
+            print "$id $name_sec also in $name_collection{$name_sec}\n";
+        }
+    }
+
+    my @foreign_names =
+        map { map { s/\s+//g; $_ } split(/,/, $_) }
+        $contents =~ /=for\s+comment\s+foreign\s+manuals:\s*(.*)\n\n/;
+    foreach (@foreign_names) {
+        $name_collection{$_} = undef; # It still exists!
+    }
+
+    my @links = $contents =~ /L<
+                              # if the link is of the form L<something|name(s)>,
+                              # then remove 'something'.  Note that 'something'
+                              # may contain POD codes as well...
+                              (?:(?:[^\|]|<[^>]*>)*\|)?
+                              # we're only interested in references that have
+                              # a one digit section number
+                              ([^\/>\(]+\(\d\))
+                             /gx;
+    $link_collection{$filename} = [ @links ];
+}
+
+sub checklinks {
+    foreach my $filename (sort keys %link_collection) {
+        foreach my $link (@{$link_collection{$filename}}) {
+            print "${filename}:1: reference to non-existing $link\n"
+                unless exists $name_collection{$link};
+        }
+    }
+}
+
+sub publicize() {
+    foreach my $name ( &parsenum('util/libcrypto.num') ) {
+        $public{$name} = 1;
+    }
+    foreach my $name ( &parsenum('util/libssl.num') ) {
+        $public{$name} = 1;
+    }
+    foreach my $name ( &parsenum('util/private.num') ) {
+        $public{$name} = 1;
+    }
+}
+
+my %skips = (
+    'aes128' => 1,
+    'aes192' => 1,
+    'aes256' => 1,
+    'aria128' => 1,
+    'aria192' => 1,
+    'aria256' => 1,
+    'camellia128' => 1,
+    'camellia192' => 1,
+    'camellia256' => 1,
+    'des' => 1,
+    'des3' => 1,
+    'idea' => 1,
+    '[cipher]' => 1,
+    '[digest]' => 1,
+);
+
+sub checkflags() {
+    my $cmd = shift;
+    my %cmdopts;
+    my %docopts;
+    my $ok = 1;
+
+    # Get the list of options in the command.
+    open CFH, "./apps/openssl list --options $cmd|"
+        || die "Can list options for $cmd, $!";
+    while ( <CFH> ) {
+        chop;
+        s/ .$//;
+        $cmdopts{$_} = 1;
+    }
+    close CFH;
+
+    # Get the list of flags from the synopsis
+    open CFH, "<doc/man1/$cmd.pod"
+        || die "Can't open $cmd.pod, $!";
+    while ( <CFH> ) {
+        chop;
+        last if /DESCRIPTION/;
+        next unless /\[B<-([^ >]+)/;
+        $docopts{$1} = 1;
+    }
+    close CFH;
+
+    # See what's in the command not the manpage.
+    my @undocced = ();
+    foreach my $k ( keys %cmdopts ) {
+        push @undocced, $k unless $docopts{$k};
+    }
+    if ( scalar @undocced > 0 ) {
+        $ok = 0;
+        foreach ( @undocced ) {
+            print "doc/man1/$cmd.pod: Missing -$_\n";
+        }
+    }
+
+    # See what's in the command not the manpage.
+    my @unimpl = ();
+    foreach my $k ( keys %docopts ) {
+        push @unimpl, $k unless $cmdopts{$k};
+    }
+    if ( scalar @unimpl > 0 ) {
+        $ok = 0;
+        foreach ( @unimpl ) {
+            next if defined $skips{$_};
+            print "doc/man1/$cmd.pod: Not implemented -$_\n";
+        }
+    }
+
+    return $ok;
+}
+
+getopts('cdlnphu');
+
+&help() if $opt_h;
+$opt_n = 1 if $opt_p;
+$opt_u = 1 if $opt_d;
+
+die "Need one of -[cdlnpu] flags.\n"
+    unless $opt_c or $opt_l or $opt_n or $opt_u;
+
+if ( $opt_c ) {
+    my $ok = 1;
+    my @commands = ();
+
+    # Get list of commands.
+    open FH, "./apps/openssl list -1 -commands|"
+        || die "Can't list commands, $!";
+    while ( <FH> ) {
+        chop;
+        push @commands, $_;
+    }
+    close FH;
+
+    # See if each has a manpage.
+    foreach ( @commands ) {
+        next if $_ eq 'help' || $_ eq 'exit';
+        if ( ! -f "doc/man1/$_.pod" ) {
+            print "doc/man1/$_.pod does not exist\n";
+            $ok = 0;
+        } else {
+            $ok = 0 if not &checkflags($_);
+        }
+    }
+
+    # See what help is missing.
+    open FH, "./apps/openssl list --missing-help |"
+        || die "Can't list missing help, $!";
+    while ( <FH> ) {
+        chop;
+        my ($cmd, $flag) = split;
+        print "$cmd has no help for -$flag\n";
+        $ok = 0;
+    }
+    close FH;
+
+    exit 1 if not $ok;
+}
+
+if ( $opt_l ) {
+    foreach (@ARGV ? @ARGV : glob('doc/*/*.pod')) {
+        collectnames($_);
+    }
+    checklinks();
+}
+
+if ( $opt_n ) {
+    &publicize() if $opt_p;
+    foreach (@ARGV ? @ARGV : glob('doc/*/*.pod')) {
+        &check($_);
+    }
+}
+
+if ( $opt_u ) {
+    my %temp = &getdocced('doc/man3');
+    foreach ( keys %temp ) {
+        $docced{$_} = $temp{$_};
+    }
+    &printem('crypto', 'util/libcrypto.num');
+    &printem('ssl', 'util/libssl.num');
+    &checkmacros();
+}
+
+exit;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/find-unused-errs b/trunk/3rdparty/openssl-1.1-fit/util/find-unused-errs
new file mode 100755
index 000000000..cd1026d59
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/find-unused-errs
@@ -0,0 +1,54 @@
+#! /bin/bash
+# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# Find unused error function-names and reason-codes, and edit them
+# out of the source.  Doesn't handle line-wrapping, might have to do
+# some manual cleanups to fix compile errors.
+
+export X1=/tmp/f.1.$$
+export X2=/tmp/f.2.$$
+
+case "$1" in
+    -f)
+        PAT='_F_'
+        echo Functions only
+        ;;
+    -[er])
+        PAT='_R_'
+        echo Reason codes only
+        ;;
+    "")
+        PAT='_[FR]_'
+        echo Function and reasons
+        ;;
+    *)
+        echo "Usage error; one of -[efr] required."
+        exit 1;
+        ;;
+esac
+
+cd include/openssl || exit 1
+grep "$PAT" *  | grep -v ERR_FATAL_ERROR | awk '{print $3;}' | sort -u >$X1
+cd ../..
+
+for F in `cat $X1` ; do
+    git grep -l --full-name -F $F >$X2
+    NUM=`wc -l <$X2`
+    test $NUM -gt 2 && continue
+    if grep -q $F crypto/err/openssl.ec ; then
+        echo Possibly unused $F found in openssl.ec
+        continue
+    fi
+    echo $F
+    for FILE in `cat $X2` ; do
+        grep -v -w $F <$FILE >$FILE.new
+        mv $FILE.new $FILE
+    done
+done
+
+rm $X1 $X2
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/indent.pro b/trunk/3rdparty/openssl-1.1-fit/util/indent.pro
new file mode 100644
index 000000000..3d3f747bf
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/indent.pro
@@ -0,0 +1,643 @@
+-bap
+-bbo
+-br
+-brs
+-c33
+-cd33
+-ce
+-ci4
+-cli0
+-cp33
+-d0
+-di1
+-hnl
+-i4
+-il1
+-ip0
+-l80
+-lp
+-nbad
+-nbc
+-ncdb
+-ncs
+-nfc1
+-nfca
+-npcs
+-nprs
+-npsl
+-nsc
+-ppi1
+-saf
+-sai
+-saw
+-sob
+-ss
+-ts0
+-T ACCESS_DESCRIPTION
+-T ADDED_OBJ
+-T AES_KEY
+-T APP_INFO
+-T ARGS
+-T ASIdOrRange
+-T ASIdOrRanges
+-T ASIdentifierChoice
+-T ASIdentifiers
+-T ASN1_ADB
+-T ASN1_ADB_TABLE
+-T ASN1_AUX
+-T ASN1_BIT_STRING
+-T ASN1_BMPSTRING
+-T ASN1_BOOLEAN
+-T ASN1_ENCODING
+-T ASN1_ENUMERATED
+-T ASN1_EXTERN_FUNCS
+-T ASN1_GENERALIZEDTIME
+-T ASN1_GENERALSTRING
+-T ASN1_IA5STRING
+-T ASN1_INTEGER
+-T ASN1_ITEM
+-T ASN1_ITEM_EXP
+-T ASN1_NULL
+-T ASN1_OBJECT
+-T ASN1_OCTET_STRING
+-T ASN1_PCTX
+-T ASN1_PRIMITIVE_FUNCS
+-T ASN1_PRINTABLESTRING
+-T ASN1_PRINT_ARG
+-T ASN1_SCTX
+-T ASN1_STREAM_ARG
+-T ASN1_STRING
+-T ASN1_STRING_TABLE
+-T ASN1_T61STRING
+-T ASN1_TEMPLATE
+-T ASN1_TIME
+-T ASN1_TLC
+-T ASN1_TYPE
+-T ASN1_UNIVERSALSTRING
+-T ASN1_UTCTIME
+-T ASN1_UTF8STRING
+-T ASN1_VALUE
+-T ASN1_VISIBLESTRING
+-T AUTHORITY_INFO_ACCESS
+-T AUTHORITY_KEYID
+-T BASIC_CONSTRAINTS
+-T BF_KEY
+-T BF_LONG
+-T BIGNUM
+-T BIO
+-T BIO_ACCEPT
+-T BIO_ADDR
+-T BIO_ASN1_BUF_CTX
+-T BIO_ASN1_EX_FUNCS
+-T BIO_B64_CTX
+-T BIO_CONNECT
+-T BIO_ENC_CTX
+-T BIO_F_BUFFER_CTX
+-T BIO_LINEBUFFER_CTX
+-T BIO_METHOD
+-T BIO_OK_CTX
+-T BIO_SSL
+-T BIT_STRING_BITNAME
+-T BN_BLINDING
+-T BN_CTX
+-T BN_GENCB
+-T BN_MONT_CTX
+-T BN_POOL
+-T BN_POOL_ITEM
+-T BN_RECP_CTX
+-T BN_STACK
+-T BN_ULONG
+-T BUF_MEM
+-T BY_DIR
+-T BY_DIR_ENTRY
+-T BY_DIR_HASH
+-T Bytef
+-T CAMELLIA_KEY
+-T CAST_KEY
+-T CAST_LONG
+-T CA_DB
+-T CCM128_CONTEXT
+-T CERT
+-T CERTIFICATEPOLICIES
+-T CERT_PKEY
+-T CIPHER_ORDER
+-T CMAC_CTX
+-T CMS_AuthenticatedData
+-T CMS_CertificateChoices
+-T CMS_CompressedData
+-T CMS_ContentInfo
+-T CMS_DigestedData
+-T CMS_EncapsulatedContentInfo
+-T CMS_EncryptedContentInfo
+-T CMS_EncryptedData
+-T CMS_EnvelopedData
+-T CMS_IssuerAndSerialNumber
+-T CMS_KEKIdentifier
+-T CMS_KEKRecipientInfo
+-T CMS_KeyAgreeRecipientIdentifier
+-T CMS_KeyAgreeRecipientInfo
+-T CMS_KeyTransRecipientInfo
+-T CMS_OriginatorIdentifierOrKey
+-T CMS_OriginatorInfo
+-T CMS_OriginatorPublicKey
+-T CMS_OtherCertificateFormat
+-T CMS_OtherKeyAttribute
+-T CMS_OtherRecipientInfo
+-T CMS_OtherRevocationInfoFormat
+-T CMS_PasswordRecipientInfo
+-T CMS_Receipt
+-T CMS_ReceiptRequest
+-T CMS_ReceiptsFrom
+-T CMS_RecipientEncryptedKey
+-T CMS_RecipientIdentifier
+-T CMS_RecipientInfo
+-T CMS_RecipientKeyIdentifier
+-T CMS_RevocationInfoChoice
+-T CMS_SignedData
+-T CMS_SignerIdentifier
+-T CMS_SignerInfo
+-T COMP_CTX
+-T COMP_METHOD
+-T CONF
+-T CONF_IMODULE
+-T CONF_METHOD
+-T CONF_MODULE
+-T CONF_VALUE
+-T CRYPTO_EX_DATA
+-T CRYPTO_EX_dup
+-T CRYPTO_EX_free
+-T CRYPTO_EX_new
+-T CRYPTO_THREADID
+-T DB_ATTR
+-T DES_LONG
+-T DES_cblock
+-T DES_key_schedule
+-T DH
+-T DH_METHOD
+-T DH_PKEY_CTX
+-T DIST_POINT
+-T DIST_POINT_NAME
+-T DSA
+-T DSA_METHOD
+-T DSA_SIG
+-T DSO
+-T DSO_FUNC_TYPE
+-T DSO_MERGER_FUNC
+-T DSO_METHOD
+-T DSO_NAME_CONVERTER_FUNC
+-T DSO_VMS_INTERNAL
+-T DTLS1_BITMAP
+-T DTLS1_RECORD_DATA
+-T DTLS1_STATE
+-T Dl_info
+-T ECDH_METHOD
+-T ECDSA_METHOD
+-T ECDSA_SIG
+-T ECPARAMETERS
+-T ECPKPARAMETERS
+-T EC_GROUP
+-T EC_KEY
+-T EC_METHOD
+-T EC_POINT
+-T EC_PRE_COMP
+-T EC_PRIVATEKEY
+-T EC_builtin_curve
+-T EDIPARTYNAME
+-T ENGINE
+-T ENGINE_CIPHERS_PTR
+-T ENGINE_CLEANUP_CB
+-T ENGINE_CLEANUP_ITEM
+-T ENGINE_CMD_DEFN
+-T ENGINE_CTRL_FUNC_PTR
+-T ENGINE_DIGESTS_PTR
+-T ENGINE_GEN_FUNC_PTR
+-T ENGINE_GEN_INT_FUNC_PTR
+-T ENGINE_LOAD_KEY_PTR
+-T ENGINE_PILE
+-T ENGINE_PILE_DOALL
+-T ENGINE_PKEY_ASN1_METHS_PTR
+-T ENGINE_PKEY_METHS_PTR
+-T ENGINE_SSL_CLIENT_CERT_PTR
+-T ENGINE_TABLE
+-T ENUMERATED_NAMES
+-T ERR_STATE
+-T ERR_STRING_DATA
+-T ESS_CERT_ID
+-T ESS_CERT_ID_V2
+-T ESS_ISSUER_SERIAL
+-T ESS_SIGNING_CERT
+-T ESS_SIGNING_CERT_V2
+-T EVP_AES_HMAC_SHA1
+-T EVP_AES_HMAC_SHA256
+-T EVP_CIPHER
+-T EVP_CIPHER_CTX
+-T EVP_CIPHER_INFO
+-T EVP_ENCODE_CTX
+-T EVP_MD
+-T EVP_MD_CTX
+-T EVP_PBE_CTL
+-T EVP_PBE_KEYGEN
+-T EVP_PKEY
+-T EVP_PKEY_ASN1_METHOD
+-T EVP_PKEY_CTX
+-T EVP_PKEY_METHOD
+-T EVP_PKEY_gen_cb
+-T FILE
+-T GCM128_CONTEXT
+-T GENERAL_NAME
+-T GENERAL_NAMES
+-T GENERAL_SUBTREE
+-T GEN_SESSION_CB
+-T HASH_CTX
+-T HEAPENTRY32
+-T HEAPLIST32
+-T HMAC_CTX
+-T IDEA_KEY_SCHEDULE
+-T IPAddrBlocks
+-T IPAddressFamily
+-T IPAddressOrRange
+-T IPAddressOrRanges
+-T ISSUING_DIST_POINT
+-T KEY_TABLE_TYPE
+-T LHASH
+-T LHASH_DOALL_ARG_FN_TYPE
+-T LHASH_NODE
+-T LPHEAPENTRY32
+-T LPHEAPLIST32
+-T LPMODULEENTRY32
+-T LPMODULEENTRY32W
+-T LPPROCESSENTRY32
+-T LPPROCESSENTRY32W
+-T LPTHREADENTRY32
+-T LP_DIR_CTX
+-T MD2_CTX
+-T MD4_CTX
+-T MD5_CTX
+-T MDC2_CTX
+-T MEM
+-T MEM_LEAK
+-T MIME_HEADER
+-T MIME_PARAM
+-T MODULEENTRY32
+-T MODULEENTRY32W
+-T NAME_CONSTRAINTS
+-T NAME_FUNCS
+-T NBIO_TEST
+-T NDEF_SUPPORT
+-T NETSCAPE_CERT_SEQUENCE
+-T NETSCAPE_ENCRYPTED_PKEY
+-T NETSCAPE_PKEY
+-T NETSCAPE_SPKAC
+-T NETSCAPE_SPKI
+-T NOTICEREF
+-T OBJ_NAME
+-T OCB128_CONTEXT
+-T OCB_BLOCK
+-T OCSP_BASICRESP
+-T OCSP_CERTID
+-T OCSP_CERTSTATUS
+-T OCSP_CRLID
+-T OCSP_ONEREQ
+-T OCSP_REQINFO
+-T OCSP_REQUEST
+-T OCSP_REQ_CTX
+-T OCSP_RESPBYTES
+-T OCSP_RESPDATA
+-T OCSP_RESPID
+-T OCSP_RESPONSE
+-T OCSP_REVOKEDINFO
+-T OCSP_SERVICELOC
+-T OCSP_SIGNATURE
+-T OCSP_SINGLERESP
+-T OCSP_TBLSTR
+-T OPENSSL_BLOCK
+-T OPENSSL_CSTRING
+-T OPENSSL_DIR_CTX
+-T OPENSSL_PSTRING
+-T OPENSSL_STRING
+-T OSSL_ASYNC_FD
+-T OTHERNAME
+-T P256_POINT
+-T P256_POINT_AFFINE
+-T PBE2PARAM
+-T PBEPARAM
+-T PBKDF2PARAM
+-T PHEAPENTRY32
+-T PHEAPLIST32
+-T PKCS12
+-T PKCS12_BAGS
+-T PKCS12_SAFEBAG
+-T PKCS7
+-T PKCS7_DIGEST
+-T PKCS7_ENCRYPT
+-T PKCS7_ENC_CONTENT
+-T PKCS7_ENVELOPE
+-T PKCS7_ISSUER_AND_SERIAL
+-T PKCS7_RECIP_INFO
+-T PKCS7_SIGNED
+-T PKCS7_SIGNER_INFO
+-T PKCS7_SIGN_ENVELOPE
+-T PKCS8_PRIV_KEY_INFO
+-T PKEY_USAGE_PERIOD
+-T PMODULEENTRY32
+-T PMODULEENTRY32W
+-T POLICYINFO
+-T POLICYQUALINFO
+-T POLICY_CONSTRAINTS
+-T POLICY_MAPPING
+-T POLICY_MAPPINGS
+-T PPROCESSENTRY32
+-T PPROCESSENTRY32W
+-T PRECOMP256_ROW
+-T PROCESSENTRY32
+-T PROCESSENTRY32W
+-T PROXY_CERT_INFO_EXTENSION
+-T PROXY_POLICY
+-T PTHREADENTRY32
+-T PW_CB_DATA
+-T RAND_METHOD
+-T RC2_KEY
+-T RC4_KEY
+-T RC5_32_KEY
+-T RIPEMD160_CTX
+-T RSA
+-T RSA_METHOD
+-T RSA_OAEP_PARAMS
+-T RSA_PKEY_CTX
+-T RSA_PSS_PARAMS
+-T SCT
+-T SEED_KEY_SCHEDULE
+-T SHA256_CTX
+-T SHA512_CTX
+-T SHA_CTX
+-T SRP_ARG
+-T SRP_CLIENT_ARG
+-T SRP_CTX
+-T SRP_SERVER_ARG
+-T SRP_VBASE
+-T SRP_gN_cache
+-T SRP_user_pwd
+-T SRTP_PROTECTION_PROFILE
+-T SSL
+-T SSL3_BUFFER
+-T SSL3_COMP
+-T SSL3_ENC_METHOD
+-T SSL3_RECORD
+-T SSL3_STATE
+-T SSL_CIPHER
+-T SSL_COMP
+-T SSL_CONF_CTX
+-T SSL_CTX
+-T SSL_DANE
+-T SSL_EXCERT
+-T SSL_METHOD
+-T SSL_SESSION
+-T SSL_SESSION_ASN1
+-T STACK_OF
+-T SXNET
+-T SXNETID
+-T TCHAR
+-T TEST_INFO
+-T THREADENTRY32
+-T TIMEOUT_PARAM
+-T TLS_SESSION_TICKET_EXT
+-T TLS_SIGALGS
+-T TS_ACCURACY
+-T TS_MSG_IMPRINT
+-T TS_REQ
+-T TS_RESP
+-T TS_RESP_CTX
+-T TS_STATUS_INFO
+-T TS_TST_INFO
+-T TS_VERIFY_CTX
+-T TXT_DB
+-T UI
+-T UINT64
+-T UI_METHOD
+-T UI_STRING
+-T USERNOTICE
+-T WCHAR
+-T WHIRLPOOL_CTX
+-T WINAPI
+-T X509
+-T X509V3_CONF_METHOD
+-T X509V3_CTX
+-T X509V3_EXT_D2I
+-T X509V3_EXT_FREE
+-T X509V3_EXT_I2D
+-T X509V3_EXT_I2R
+-T X509V3_EXT_I2S
+-T X509V3_EXT_METHOD
+-T X509V3_EXT_NEW
+-T X509V3_EXT_R2I
+-T X509V3_EXT_S2I
+-T X509V3_EXT_V2I
+-T X509_ALGOR
+-T X509_ATTRIBUTE
+-T X509_CERT_AUX
+-T X509_CINF
+-T X509_CRL
+-T X509_CRL_INFO
+-T X509_CRL_METHOD
+-T X509_EXTENSION
+-T X509_INFO
+-T X509_LOOKUP
+-T X509_LOOKUP_METHOD
+-T X509_NAME
+-T X509_NAME_ENTRY
+-T X509_OBJECT
+-T X509_PKEY
+-T X509_POLICY_CACHE
+-T X509_POLICY_DATA
+-T X509_POLICY_LEVEL
+-T X509_POLICY_NODE
+-T X509_POLICY_TREE
+-T X509_PUBKEY
+-T X509_PURPOSE
+-T X509_REQ
+-T X509_REQ_INFO
+-T X509_REVOKED
+-T X509_SIG
+-T X509_STORE
+-T X509_STORE_CTX
+-T X509_TRUST
+-T X509_VAL
+-T X509_VERIFY_PARAM
+-T X9_62_CHARACTERISTIC_TWO
+-T X9_62_CURVE
+-T X9_62_FIELDID
+-T X9_62_PENTANOMIAL
+-T XTS128_CONTEXT
+-T _LHASH
+-T _STACK
+-T __int64
+-T asn1_ps_func
+-T bio_dgram_data
+-T bio_info_cb
+-T BIO_info_cb
+-T BIO_callback_fn
+-T char_io
+-T conf_finish_func
+-T conf_init_func
+-T const_DES_cblock
+-T d2i_of_void
+-T des_cblock
+-T dynamic_data_ctx
+-T dynamic_fns
+-T engine_table_doall_cb
+-T i2d_of_void
+-T int_dhx942_dh
+-T nid_triple
+-T pem_password_cb
+-T pitem
+-T piterator
+-T pqueue_s
+-T session_op
+-T size_t
+-T tag_exp_arg
+-T testdata
+-T time_t
+-T time_t
+-T u32
+-T u64
+-T u8
+-T v3_ext_ctx
+-T v3_ext_method
+-T STACK_OF_ACCESS_DESCRIPTION_
+-T STACK_OF_ASIdOrRange_
+-T STACK_OF_ASN1_ADB_TABLE_
+-T STACK_OF_ASN1_INTEGER_
+-T STACK_OF_ASN1_OBJECT_
+-T STACK_OF_ASN1_STRING_TABLE_
+-T STACK_OF_ASN1_TYPE_
+-T STACK_OF_ASN1_UTF8STRING_
+-T STACK_OF_ASN1_VALUE_
+-T STACK_OF_BIO_
+-T STACK_OF_BY_DIR_ENTRY_
+-T STACK_OF_BY_DIR_HASH_
+-T STACK_OF_CMS_CertificateChoices_
+-T STACK_OF_CMS_RecipientEncryptedKey_
+-T STACK_OF_CMS_RecipientInfo_
+-T STACK_OF_CMS_RevocationInfoChoice_
+-T STACK_OF_CMS_SignerInfo_
+-T STACK_OF_CONF_IMODULE_
+-T STACK_OF_CONF_MODULE_
+-T STACK_OF_CONF_VALUE_
+-T STACK_OF_CRYPTO_dynlock_
+-T STACK_OF_DIST_POINT_
+-T STACK_OF_ENGINE_
+-T STACK_OF_ENGINE_CLEANUP_ITEM_
+-T STACK_OF_ESS_CERT_ID_
+-T STACK_OF_ESS_CERT_ID_V2_
+-T STACK_OF_EVP_PBE_CTL_
+-T STACK_OF_EVP_PKEY_ASN1_METHOD_
+-T STACK_OF_EVP_PKEY_METHOD_
+-T STACK_OF_GENERAL_NAMES_
+-T STACK_OF_GENERAL_NAME_
+-T STACK_OF_GENERAL_SUBTREE_
+-T STACK_OF_IPAddressFamily_
+-T STACK_OF_IPAddressOrRange_
+-T STACK_OF_MIME_HEADER_
+-T STACK_OF_MIME_PARAM_
+-T STACK_OF_NAME_FUNCS_
+-T STACK_OF_OCSP_CERTID_
+-T STACK_OF_OCSP_ONEREQ_
+-T STACK_OF_OCSP_RESPID_
+-T STACK_OF_OCSP_SINGLERESP_
+-T STACK_OF_OPENSSL_BLOCK_
+-T STACK_OF_OPENSSL_PSTRING_
+-T STACK_OF_OPENSSL_STRING_
+-T STACK_OF_PKCS12_SAFEBAG_
+-T STACK_OF_PKCS7_
+-T STACK_OF_PKCS7_RECIP_INFO_
+-T STACK_OF_PKCS7_SIGNER_INFO_
+-T STACK_OF_POLICYINFO_
+-T STACK_OF_POLICYQUALINFO_
+-T STACK_OF_POLICY_MAPPING_
+-T STACK_OF_Request_
+-T STACK_OF_SCT_
+-T STACK_OF_SRP_gN_
+-T STACK_OF_SRP_gN_cache_
+-T STACK_OF_SRP_user_pwd_
+-T STACK_OF_SRTP_PROTECTION_PROFILE_
+-T STACK_OF_SSL_CIPHER_
+-T STACK_OF_SSL_COMP_
+-T STACK_OF_STRING_
+-T STACK_OF_SXNETID_
+-T STACK_OF_SingleResponse_
+-T STACK_OF_UI_STRING_
+-T STACK_OF_X509V3_EXT_METHOD_
+-T STACK_OF_X509_
+-T STACK_OF_X509_ALGOR_
+-T STACK_OF_X509_ATTRIBUTE_
+-T STACK_OF_X509_CRL_
+-T STACK_OF_X509_EXTENSION_
+-T STACK_OF_X509_INFO_
+-T STACK_OF_X509_LOOKUP_
+-T STACK_OF_X509_NAME_
+-T STACK_OF_X509_NAME_ENTRY_
+-T STACK_OF_X509_OBJECT_
+-T STACK_OF_X509_POLICY_DATA_
+-T STACK_OF_X509_POLICY_NODE_
+-T STACK_OF_X509_PURPOSE_
+-T STACK_OF_X509_REVOKED_
+-T STACK_OF_X509_TRUST_
+-T STACK_OF_X509_VERIFY_PARAM_
+-T STACK_OF_nid_triple_
+-T STACK_OF_void_
+-T LHASH_OF_ADDED_OBJ_
+-T LHASH_OF_APP_INFO_
+-T LHASH_OF_CONF_VALUE_
+-T LHASH_OF_ENGINE_PILE_
+-T LHASH_OF_ERR_STATE_
+-T LHASH_OF_ERR_STRING_DATA_
+-T LHASH_OF_FUNCTION_
+-T LHASH_OF_MEM_
+-T LHASH_OF_OBJ_NAME_
+-T LHASH_OF_OPENSSL_STRING_
+-T LHASH_OF_SSL_SESSION_
+-T LHASH_OF_STRING_
+-T clock_t
+-T custom_ext_methods
+-T hm_fragment
+-T record_pqueue
+-T ssl_ctx_st
+-T ssl_flag_tbl
+-T ssl_st
+-T ssl_trace_tbl
+-T _stdcall
+-T OPTIONS
+-T OPT_PAIR
+-T uint64_t
+-T int64_t
+-T uint32_t
+-T int32_t
+-T uint16_t
+-T int16_t
+-T uint8_t
+-T int8_t
+-T STRINT_PAIR
+-T felem
+-T felem_bytearray
+-T SH_LIST
+-T PACKET
+-T RECORD_LAYER
+-T ASYNC_CTX
+-T ASYNC_JOB
+-T intmax_t
+-T uintmax_t
+-T pqueue
+-T danetls_record
+-T CTLOG_STORE
+-T OPENSSL_INIT_SETTINGS
+-T OSSL_HANDSHAKE_STATE
+-T OSSL_STATEM
+-T ossl_intmax_t
+-T ossl_intmax_t
+-T ossl_uintmax_t
+-T ossl_uintmax_t
+-T CT_POLICY_EVAL_CTX
+-T RAND_DRBG
+-T RAND_DRBG_CTR
+-T RAND_POOL
+-T RAND_METHOD
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/libcrypto.num b/trunk/3rdparty/openssl-1.1-fit/util/libcrypto.num
new file mode 100644
index 000000000..32c64cb2c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/libcrypto.num
@@ -0,0 +1,4581 @@
+d2i_EC_PUBKEY                           1	1_1_0	EXIST::FUNCTION:EC
+b2i_PVK_bio                             2	1_1_0	EXIST::FUNCTION:DSA,RC4
+PEM_read_bio_NETSCAPE_CERT_SEQUENCE     3	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get0_chain               4	1_1_0	EXIST::FUNCTION:
+COMP_expand_block                       5	1_1_0	EXIST::FUNCTION:COMP
+X509V3_get_string                       6	1_1_0	EXIST::FUNCTION:
+TS_MSG_IMPRINT_free                     7	1_1_0	EXIST::FUNCTION:TS
+DES_xcbc_encrypt                        8	1_1_0	EXIST::FUNCTION:DES
+TS_RESP_CTX_new                         9	1_1_0	EXIST::FUNCTION:TS
+PKCS5_PBE_add                           10	1_1_0	EXIST::FUNCTION:
+i2d_DSAparams                           11	1_1_0	EXIST::FUNCTION:DSA
+X509_NAME_get0_der                      12	1_1_0	EXIST::FUNCTION:
+i2d_ESS_ISSUER_SERIAL                   13	1_1_0	EXIST::FUNCTION:TS
+X509at_get_attr_by_NID                  14	1_1_0	EXIST::FUNCTION:
+X509_PUBKEY_set0_param                  15	1_1_0	EXIST::FUNCTION:
+PKCS12_it                               16	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS12_it                               16	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+i2d_ASN1_OCTET_STRING                   17	1_1_0	EXIST::FUNCTION:
+EC_KEY_set_private_key                  18	1_1_0	EXIST::FUNCTION:EC
+SRP_VBASE_get_by_user                   19	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,SRP
+Camellia_cfb128_encrypt                 21	1_1_0	EXIST::FUNCTION:CAMELLIA
+DES_ncbc_encrypt                        22	1_1_0	EXIST::FUNCTION:DES
+TS_REQ_get_ext_count                    23	1_1_0	EXIST::FUNCTION:TS
+EVP_aes_128_ocb                         24	1_1_0	EXIST::FUNCTION:OCB
+ASN1_item_d2i_fp                        25	1_1_0	EXIST::FUNCTION:STDIO
+BN_lshift                               26	1_1_0	EXIST::FUNCTION:
+X509_NAME_add_entry_by_NID              27	1_1_0	EXIST::FUNCTION:
+X509V3_add_value_bool                   28	1_1_0	EXIST::FUNCTION:
+GENERAL_NAME_get0_otherName             29	1_1_0	EXIST::FUNCTION:
+ASN1_INTEGER_get_uint64                 30	1_1_0	EXIST::FUNCTION:
+EVP_DigestInit_ex                       31	1_1_0	EXIST::FUNCTION:
+CTLOG_new                               32	1_1_0	EXIST::FUNCTION:CT
+UI_get_result_minsize                   33	1_1_0	EXIST::FUNCTION:
+EVP_PBE_alg_add_type                    34	1_1_0	EXIST::FUNCTION:
+EVP_cast5_ofb                           35	1_1_0	EXIST::FUNCTION:CAST
+d2i_PUBKEY_fp                           36	1_1_0	EXIST::FUNCTION:STDIO
+PKCS7_set_cipher                        37	1_1_0	EXIST::FUNCTION:
+BF_decrypt                              38	1_1_0	EXIST::FUNCTION:BF
+PEM_read_bio_PUBKEY                     39	1_1_0	EXIST::FUNCTION:
+X509_NAME_delete_entry                  40	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_set_verify_recover        41	1_1_0	EXIST::FUNCTION:
+UI_set_method                           42	1_1_0	EXIST::FUNCTION:
+PKCS7_ISSUER_AND_SERIAL_it              43	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS7_ISSUER_AND_SERIAL_it              43	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+EC_GROUP_method_of                      44	1_1_0	EXIST::FUNCTION:EC
+RSA_blinding_on                         45	1_1_0	EXIST::FUNCTION:RSA
+X509_get0_signature                     47	1_1_0	EXIST::FUNCTION:
+X509_REVOKED_get0_extensions            48	1_1_0	EXIST::FUNCTION:
+NETSCAPE_SPKI_verify                    49	1_1_0	EXIST::FUNCTION:
+i2d_OCSP_RESPONSE                       50	1_1_0	EXIST::FUNCTION:OCSP
+ERR_peek_error                          51	1_1_0	EXIST::FUNCTION:
+X509v3_asid_validate_resource_set       52	1_1_0	EXIST::FUNCTION:RFC3779
+PEM_write_bio_Parameters                53	1_1_0	EXIST::FUNCTION:
+CMS_SignerInfo_verify                   54	1_1_0	EXIST::FUNCTION:CMS
+X509v3_asid_is_canonical                55	1_1_0	EXIST::FUNCTION:RFC3779
+ASN1_ENUMERATED_get                     56	1_1_0	EXIST::FUNCTION:
+EVP_MD_do_all_sorted                    57	1_1_0	EXIST::FUNCTION:
+OCSP_crl_reason_str                     58	1_1_0	EXIST::FUNCTION:OCSP
+ENGINE_ctrl_cmd_string                  59	1_1_0	EXIST::FUNCTION:ENGINE
+ENGINE_finish                           60	1_1_0	EXIST::FUNCTION:ENGINE
+SRP_Calc_client_key                     61	1_1_0	EXIST::FUNCTION:SRP
+X509_PUBKEY_free                        62	1_1_0	EXIST::FUNCTION:
+BIO_free_all                            63	1_1_0	EXIST::FUNCTION:
+EVP_idea_ofb                            64	1_1_0	EXIST::FUNCTION:IDEA
+DSO_bind_func                           65	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_get_copy                  66	1_1_0	EXIST::FUNCTION:
+RSA_up_ref                              67	1_1_0	EXIST::FUNCTION:RSA
+EVP_PKEY_meth_set_ctrl                  68	1_1_0	EXIST::FUNCTION:
+OCSP_basic_sign                         69	1_1_0	EXIST::FUNCTION:OCSP
+BN_GENCB_set                            70	1_1_0	EXIST::FUNCTION:
+BN_generate_prime                       71	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_0_9_8
+d2i_DSAPrivateKey_fp                    72	1_1_0	EXIST::FUNCTION:DSA,STDIO
+BIO_nread0                              73	1_1_0	EXIST::FUNCTION:
+NETSCAPE_SPKI_print                     74	1_1_0	EXIST::FUNCTION:
+X509_set_pubkey                         75	1_1_0	EXIST::FUNCTION:
+ASN1_item_print                         76	1_1_0	EXIST::FUNCTION:
+CONF_set_nconf                          77	1_1_0	EXIST::FUNCTION:
+RAND_set_rand_method                    78	1_1_0	EXIST::FUNCTION:
+BN_GF2m_mod_mul                         79	1_1_0	EXIST::FUNCTION:EC2M
+UI_add_input_boolean                    80	1_1_0	EXIST::FUNCTION:
+ASN1_TIME_adj                           81	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_asn1_get0_info                 82	1_1_0	EXIST::FUNCTION:
+BN_add_word                             83	1_1_0	EXIST::FUNCTION:
+EVP_des_ede                             84	1_1_0	EXIST::FUNCTION:DES
+EVP_PKEY_add1_attr_by_OBJ               85	1_1_0	EXIST::FUNCTION:
+ASYNC_WAIT_CTX_get_all_fds              86	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_meth_set_do_cipher           87	1_1_0	EXIST::FUNCTION:
+EVP_set_pw_prompt                       88	1_1_0	EXIST::FUNCTION:
+d2i_OCSP_RESPBYTES                      89	1_1_0	EXIST::FUNCTION:OCSP
+TS_REQ_get_ext_by_NID                   90	1_1_0	EXIST::FUNCTION:TS
+ASN1_item_ndef_i2d                      91	1_1_0	EXIST::FUNCTION:
+OCSP_archive_cutoff_new                 92	1_1_0	EXIST::FUNCTION:OCSP
+DSA_size                                93	1_1_0	EXIST::FUNCTION:DSA
+IPAddressRange_free                     94	1_1_0	EXIST::FUNCTION:RFC3779
+CMS_ContentInfo_free                    95	1_1_0	EXIST::FUNCTION:CMS
+BIO_accept                              96	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,SOCK
+X509_VERIFY_PARAM_set1_policies         97	1_1_0	EXIST::FUNCTION:
+SCT_set0_extensions                     98	1_1_0	EXIST::FUNCTION:CT
+PKCS5_pbe2_set_scrypt                   99	1_1_0	EXIST::FUNCTION:SCRYPT
+X509_find_by_subject                    100	1_1_0	EXIST::FUNCTION:
+DSAparams_print                         101	1_1_0	EXIST::FUNCTION:DSA
+BF_set_key                              102	1_1_0	EXIST::FUNCTION:BF
+d2i_DHparams                            103	1_1_0	EXIST::FUNCTION:DH
+i2d_PKCS7_ENC_CONTENT                   104	1_1_0	EXIST::FUNCTION:
+DH_generate_key                         105	1_1_0	EXIST::FUNCTION:DH
+ENGINE_add_conf_module                  106	1_1_0	EXIST::FUNCTION:ENGINE
+BIO_new_socket                          107	1_1_0	EXIST::FUNCTION:SOCK
+ASN1_OBJECT_free                        108	1_1_0	EXIST::FUNCTION:
+X509_REQ_get_extensions                 109	1_1_0	EXIST::FUNCTION:
+X509_get_version                        110	1_1_0	EXIST::FUNCTION:
+OCSP_CERTID_dup                         111	1_1_0	EXIST::FUNCTION:OCSP
+RSA_PSS_PARAMS_free                     112	1_1_0	EXIST::FUNCTION:RSA
+i2d_TS_MSG_IMPRINT                      113	1_1_0	EXIST::FUNCTION:TS
+EC_POINT_mul                            114	1_1_0	EXIST::FUNCTION:EC
+WHIRLPOOL_Final                         115	1_1_0	EXIST::FUNCTION:WHIRLPOOL
+CMS_get1_ReceiptRequest                 116	1_1_0	EXIST::FUNCTION:CMS
+BIO_sock_non_fatal_error                117	1_1_0	EXIST::FUNCTION:SOCK
+HMAC_Update                             118	1_1_0	EXIST::FUNCTION:
+i2d_PKCS12                              119	1_1_0	EXIST::FUNCTION:
+EVP_BytesToKey                          120	1_1_0	EXIST::FUNCTION:
+ENGINE_set_default_pkey_asn1_meths      121	1_1_0	EXIST::FUNCTION:ENGINE
+OCSP_BASICRESP_add1_ext_i2d             122	1_1_0	EXIST::FUNCTION:OCSP
+EVP_camellia_128_ctr                    123	1_1_0	EXIST::FUNCTION:CAMELLIA
+EVP_CIPHER_impl_ctx_size                124	1_1_0	EXIST::FUNCTION:
+X509_CRL_get_nextUpdate                 125	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0
+PKCS12_free                             126	1_1_0	EXIST::FUNCTION:
+CMS_signed_get_attr                     127	1_1_0	EXIST::FUNCTION:CMS
+ENGINE_set_destroy_function             128	1_1_0	EXIST::FUNCTION:ENGINE
+ASN1_STRING_TABLE_add                   129	1_1_0	EXIST::FUNCTION:
+d2i_ASIdentifiers                       130	1_1_0	EXIST::FUNCTION:RFC3779
+i2d_PKCS12_bio                          131	1_1_0	EXIST::FUNCTION:
+X509_to_X509_REQ                        132	1_1_0	EXIST::FUNCTION:
+OCSP_basic_add1_nonce                   133	1_1_0	EXIST::FUNCTION:OCSP
+d2i_OCSP_BASICRESP                      134	1_1_0	EXIST::FUNCTION:OCSP
+X509v3_add_ext                          135	1_1_0	EXIST::FUNCTION:
+X509v3_addr_subset                      136	1_1_0	EXIST::FUNCTION:RFC3779
+CRYPTO_strndup                          137	1_1_0	EXIST::FUNCTION:
+OCSP_REQ_CTX_free                       138	1_1_0	EXIST::FUNCTION:OCSP
+X509_STORE_new                          140	1_1_0	EXIST::FUNCTION:
+ASN1_TYPE_free                          141	1_1_0	EXIST::FUNCTION:
+PKCS12_BAGS_new                         142	1_1_0	EXIST::FUNCTION:
+CMAC_CTX_new                            143	1_1_0	EXIST::FUNCTION:CMAC
+ASIdentifierChoice_new                  144	1_1_0	EXIST::FUNCTION:RFC3779
+EVP_PKEY_asn1_set_public                145	1_1_0	EXIST::FUNCTION:
+IDEA_set_decrypt_key                    146	1_1_0	EXIST::FUNCTION:IDEA
+X509_STORE_CTX_set_flags                147	1_1_0	EXIST::FUNCTION:
+BIO_ADDR_rawmake                        148	1_1_0	EXIST::FUNCTION:SOCK
+EVP_PKEY_asn1_set_ctrl                  149	1_1_0	EXIST::FUNCTION:
+EC_POINTs_mul                           150	1_1_0	EXIST::FUNCTION:EC
+ASN1_get_object                         151	1_1_0	EXIST::FUNCTION:
+i2d_IPAddressFamily                     152	1_1_0	EXIST::FUNCTION:RFC3779
+ENGINE_get_ctrl_function                153	1_1_0	EXIST::FUNCTION:ENGINE
+X509_REVOKED_get_ext_count              154	1_1_0	EXIST::FUNCTION:
+BN_is_prime_fasttest_ex                 155	1_1_0	EXIST::FUNCTION:
+ERR_load_PKCS12_strings                 156	1_1_0	EXIST::FUNCTION:
+EVP_sha384                              157	1_1_0	EXIST::FUNCTION:
+i2d_DHparams                            158	1_1_0	EXIST::FUNCTION:DH
+TS_VERIFY_CTX_set_store                 159	1_1_0	EXIST::FUNCTION:TS
+PKCS12_verify_mac                       160	1_1_0	EXIST::FUNCTION:
+X509v3_addr_canonize                    161	1_1_0	EXIST::FUNCTION:RFC3779
+ASN1_item_ex_i2d                        162	1_1_0	EXIST::FUNCTION:
+ENGINE_set_digests                      163	1_1_0	EXIST::FUNCTION:ENGINE
+PEM_ASN1_read_bio                       164	1_1_0	EXIST::FUNCTION:
+CT_POLICY_EVAL_CTX_free                 165	1_1_0	EXIST::FUNCTION:CT
+CMS_RecipientInfo_kari_get0_ctx         166	1_1_0	EXIST::FUNCTION:CMS
+PKCS7_set_attributes                    167	1_1_0	EXIST::FUNCTION:
+d2i_POLICYQUALINFO                      168	1_1_0	EXIST::FUNCTION:
+EVP_MD_type                             170	1_1_0	EXIST::FUNCTION:
+EVP_PKCS82PKEY                          171	1_1_0	EXIST::FUNCTION:
+BN_generate_prime_ex                    172	1_1_0	EXIST::FUNCTION:
+EVP_EncryptInit                         173	1_1_0	EXIST::FUNCTION:
+RAND_OpenSSL                            174	1_1_0	EXIST::FUNCTION:
+BN_uadd                                 175	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_derive_init                    176	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_ASN1_stream               177	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_delete_attr                    178	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_CTX_key_length               179	1_1_0	EXIST::FUNCTION:
+BIO_clear_flags                         180	1_1_0	EXIST::FUNCTION:
+i2d_DISPLAYTEXT                         181	1_1_0	EXIST::FUNCTION:
+OCSP_response_status                    182	1_1_0	EXIST::FUNCTION:OCSP
+i2d_ASN1_PRINTABLESTRING                183	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_set_hostflags         184	1_1_0	EXIST::FUNCTION:
+SCT_get0_log_id                         185	1_1_0	EXIST::FUNCTION:CT
+ASN1_IA5STRING_it                       186	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_IA5STRING_it                       186	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+PEM_write_bio_ECPrivateKey              187	1_1_0	EXIST::FUNCTION:EC
+BN_consttime_swap                       188	1_1_0	EXIST::FUNCTION:
+BIO_f_buffer                            189	1_1_0	EXIST::FUNCTION:
+CMS_SignerInfo_get0_signer_id           190	1_1_0	EXIST::FUNCTION:CMS
+TS_TST_INFO_new                         191	1_1_0	EXIST::FUNCTION:TS
+X509_REQ_check_private_key              192	1_1_0	EXIST::FUNCTION:
+EVP_DigestInit                          193	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_find                      194	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_get_count             195	1_1_0	EXIST::FUNCTION:
+ASN1_BIT_STRING_get_bit                 196	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_cmp                            197	1_1_0	EXIST::FUNCTION:
+d2i_X509_ALGORS                         198	1_1_0	EXIST::FUNCTION:
+EVP_PKEY2PKCS8                          199	1_1_0	EXIST::FUNCTION:
+BN_nist_mod_256                         200	1_1_0	EXIST::FUNCTION:
+OCSP_request_add0_id                    201	1_1_0	EXIST::FUNCTION:OCSP
+EVP_seed_cfb128                         202	1_1_0	EXIST::FUNCTION:SEED
+BASIC_CONSTRAINTS_free                  203	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_flags                        204	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_ECPKParameters            205	1_1_0	EXIST::FUNCTION:EC
+SCT_set_version                         206	1_1_0	EXIST::FUNCTION:CT
+CMS_add1_ReceiptRequest                 207	1_1_0	EXIST::FUNCTION:CMS
+d2i_CRL_DIST_POINTS                     208	1_1_0	EXIST::FUNCTION:
+X509_CRL_INFO_free                      209	1_1_0	EXIST::FUNCTION:
+ERR_load_UI_strings                     210	1_1_0	EXIST::FUNCTION:
+ERR_load_strings                        211	1_1_0	EXIST::FUNCTION:
+RSA_X931_hash_id                        212	1_1_0	EXIST::FUNCTION:RSA
+EC_KEY_set_method                       213	1_1_0	EXIST::FUNCTION:EC
+PEM_write_PKCS8_PRIV_KEY_INFO           214	1_1_0	EXIST::FUNCTION:STDIO
+X509at_get0_data_by_OBJ                 215	1_1_0	EXIST::FUNCTION:
+b2i_PublicKey_bio                       216	1_1_0	EXIST::FUNCTION:DSA
+s2i_ASN1_OCTET_STRING                   217	1_1_0	EXIST::FUNCTION:
+POLICYINFO_it                           218	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+POLICYINFO_it                           218	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+OBJ_create                              219	1_1_0	EXIST::FUNCTION:
+d2i_NOTICEREF                           220	1_1_0	EXIST::FUNCTION:
+BN_get_rfc2409_prime_768                221	1_1_0	EXIST::FUNCTION:
+PEM_read_bio_PKCS8                      222	1_1_0	EXIST::FUNCTION:
+X509_ATTRIBUTE_new                      223	1_1_0	EXIST::FUNCTION:
+ASN1_STRING_TABLE_cleanup               224	1_1_0	EXIST::FUNCTION:
+ASN1_put_eoc                            225	1_1_0	EXIST::FUNCTION:
+EVP_MD_meth_set_input_blocksize         226	1_1_0	EXIST::FUNCTION:
+PKCS12_SAFEBAG_get0_attrs               227	1_1_0	EXIST::FUNCTION:
+PKCS8_get_attr                          228	1_1_0	EXIST::FUNCTION:
+DSAparams_print_fp                      229	1_1_0	EXIST::FUNCTION:DSA,STDIO
+EC_POINT_set_Jprojective_coordinates_GFp 230	1_1_0	EXIST::FUNCTION:EC
+DIST_POINT_NAME_new                     231	1_1_0	EXIST::FUNCTION:
+X509_LOOKUP_file                        232	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_set_decrypt               233	1_1_0	EXIST::FUNCTION:
+EVP_rc2_ecb                             234	1_1_0	EXIST::FUNCTION:RC2
+i2b_PublicKey_bio                       235	1_1_0	EXIST::FUNCTION:DSA
+d2i_ASN1_SET_ANY                        236	1_1_0	EXIST::FUNCTION:
+ASN1_item_i2d                           238	1_1_0	EXIST::FUNCTION:
+OCSP_copy_nonce                         239	1_1_0	EXIST::FUNCTION:OCSP
+OBJ_txt2nid                             240	1_1_0	EXIST::FUNCTION:
+SEED_set_key                            241	1_1_0	EXIST::FUNCTION:SEED
+EC_KEY_clear_flags                      242	1_1_0	EXIST::FUNCTION:EC
+CMS_RecipientInfo_ktri_get0_algs        243	1_1_0	EXIST::FUNCTION:CMS
+i2d_EC_PUBKEY                           244	1_1_0	EXIST::FUNCTION:EC
+MDC2                                    245	1_1_0	EXIST::FUNCTION:MDC2
+BN_clear_free                           246	1_1_0	EXIST::FUNCTION:
+ENGINE_get_pkey_asn1_meths              247	1_1_0	EXIST::FUNCTION:ENGINE
+DSO_merge                               248	1_1_0	EXIST::FUNCTION:
+RSA_get_ex_data                         249	1_1_0	EXIST::FUNCTION:RSA
+EVP_PKEY_meth_get_decrypt               250	1_1_0	EXIST::FUNCTION:
+DES_cfb_encrypt                         251	1_1_0	EXIST::FUNCTION:DES
+CMS_SignerInfo_set1_signer_cert         252	1_1_0	EXIST::FUNCTION:CMS
+X509_CRL_http_nbio                      253	1_1_0	EXIST::FUNCTION:OCSP
+ENGINE_register_all_ciphers             254	1_1_0	EXIST::FUNCTION:ENGINE
+SXNET_new                               255	1_1_0	EXIST::FUNCTION:
+EVP_camellia_256_ctr                    256	1_1_0	EXIST::FUNCTION:CAMELLIA
+d2i_PKCS8_PRIV_KEY_INFO                 257	1_1_0	EXIST::FUNCTION:
+EVP_md2                                 259	1_1_0	EXIST::FUNCTION:MD2
+RC2_ecb_encrypt                         260	1_1_0	EXIST::FUNCTION:RC2
+ENGINE_register_DH                      261	1_1_0	EXIST::FUNCTION:ENGINE
+ASN1_NULL_free                          262	1_1_0	EXIST::FUNCTION:
+EC_KEY_copy                             263	1_1_0	EXIST::FUNCTION:EC
+EVP_des_ede3                            264	1_1_0	EXIST::FUNCTION:DES
+PKCS7_add1_attrib_digest                265	1_1_0	EXIST::FUNCTION:
+EC_POINT_get_affine_coordinates_GFp     266	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_2_0,EC
+EVP_seed_ecb                            267	1_1_0	EXIST::FUNCTION:SEED
+BIO_dgram_sctp_wait_for_dry             268	1_1_0	EXIST::FUNCTION:DGRAM,SCTP
+ASN1_OCTET_STRING_NDEF_it               269	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_OCTET_STRING_NDEF_it               269	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+EVP_PKEY_asn1_get_count                 270	1_1_0	EXIST::FUNCTION:
+WHIRLPOOL_Init                          271	1_1_0	EXIST::FUNCTION:WHIRLPOOL
+EVP_OpenInit                            272	1_1_0	EXIST::FUNCTION:RSA
+OCSP_response_get1_basic                273	1_1_0	EXIST::FUNCTION:OCSP
+CRYPTO_gcm128_tag                       274	1_1_0	EXIST::FUNCTION:
+OCSP_parse_url                          275	1_1_0	EXIST::FUNCTION:OCSP
+UI_get0_test_string                     276	1_1_0	EXIST::FUNCTION:
+CRYPTO_secure_free                      277	1_1_0	EXIST::FUNCTION:
+DSA_print_fp                            278	1_1_0	EXIST::FUNCTION:DSA,STDIO
+X509_get_ext_d2i                        279	1_1_0	EXIST::FUNCTION:
+d2i_PKCS7_ENC_CONTENT                   280	1_1_0	EXIST::FUNCTION:
+BUF_MEM_grow                            281	1_1_0	EXIST::FUNCTION:
+TS_REQ_free                             282	1_1_0	EXIST::FUNCTION:TS
+PEM_read_DHparams                       283	1_1_0	EXIST::FUNCTION:DH,STDIO
+RSA_private_decrypt                     284	1_1_0	EXIST::FUNCTION:RSA
+X509V3_EXT_get_nid                      285	1_1_0	EXIST::FUNCTION:
+BIO_s_log                               286	1_1_0	EXIST::FUNCTION:
+EC_POINT_set_to_infinity                287	1_1_0	EXIST::FUNCTION:EC
+EVP_des_ede_ofb                         288	1_1_0	EXIST::FUNCTION:DES
+ECDH_KDF_X9_62                          289	1_1_0	EXIST::FUNCTION:EC
+ASN1_UNIVERSALSTRING_to_string          290	1_1_0	EXIST::FUNCTION:
+CRYPTO_gcm128_setiv                     291	1_1_0	EXIST::FUNCTION:
+ASN1_PCTX_set_oid_flags                 292	1_1_0	EXIST::FUNCTION:
+d2i_ASN1_INTEGER                        293	1_1_0	EXIST::FUNCTION:
+i2d_PKCS7_ENCRYPT                       294	1_1_0	EXIST::FUNCTION:
+CT_POLICY_EVAL_CTX_set1_issuer          295	1_1_0	EXIST::FUNCTION:CT
+X509_NAME_ENTRY_set                     296	1_1_0	EXIST::FUNCTION:
+PKCS8_set0_pbe                          297	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_DSA_PUBKEY                298	1_1_0	EXIST::FUNCTION:DSA
+PEM_X509_INFO_read_bio                  299	1_1_0	EXIST::FUNCTION:
+EC_GROUP_get0_order                     300	1_1_0	EXIST::FUNCTION:EC
+OCSP_BASICRESP_delete_ext               301	1_1_0	EXIST::FUNCTION:OCSP
+PKCS12_get_attr_gen                     302	1_1_0	EXIST::FUNCTION:
+PKCS12_SAFEBAG_get0_safes               303	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_derive                         304	1_1_0	EXIST::FUNCTION:
+OCSP_BASICRESP_get_ext_by_NID           305	1_1_0	EXIST::FUNCTION:OCSP
+OBJ_dup                                 306	1_1_0	EXIST::FUNCTION:
+CMS_signed_get_attr_count               307	1_1_0	EXIST::FUNCTION:CMS
+EC_get_builtin_curves                   308	1_1_0	EXIST::FUNCTION:EC
+i2d_ASN1_IA5STRING                      309	1_1_0	EXIST::FUNCTION:
+OCSP_check_nonce                        310	1_1_0	EXIST::FUNCTION:OCSP
+X509_STORE_CTX_init                     311	1_1_0	EXIST::FUNCTION:
+OCSP_RESPONSE_free                      312	1_1_0	EXIST::FUNCTION:OCSP
+ENGINE_set_DH                           313	1_1_0	EXIST::FUNCTION:ENGINE
+EVP_CIPHER_CTX_set_flags                314	1_1_0	EXIST::FUNCTION:
+err_free_strings_int                    315	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_PKCS7_stream              316	1_1_0	EXIST::FUNCTION:
+d2i_X509_CERT_AUX                       317	1_1_0	EXIST::FUNCTION:
+UI_process                              318	1_1_0	EXIST::FUNCTION:
+X509_get_subject_name                   319	1_1_0	EXIST::FUNCTION:
+DH_get_1024_160                         320	1_1_0	EXIST::FUNCTION:DH
+i2d_ASN1_UNIVERSALSTRING                321	1_1_0	EXIST::FUNCTION:
+d2i_OCSP_RESPID                         322	1_1_0	EXIST::FUNCTION:OCSP
+BIO_s_accept                            323	1_1_0	EXIST::FUNCTION:SOCK
+EVP_whirlpool                           324	1_1_0	EXIST::FUNCTION:WHIRLPOOL
+OCSP_ONEREQ_get1_ext_d2i                325	1_1_0	EXIST::FUNCTION:OCSP
+d2i_ESS_SIGNING_CERT                    326	1_1_0	EXIST::FUNCTION:TS
+EC_KEY_set_default_method               327	1_1_0	EXIST::FUNCTION:EC
+X509_OBJECT_up_ref_count                328	1_1_0	EXIST::FUNCTION:
+RAND_load_file                          329	1_1_0	EXIST::FUNCTION:
+BIO_ctrl_reset_read_request             330	1_1_0	EXIST::FUNCTION:
+CRYPTO_ccm128_tag                       331	1_1_0	EXIST::FUNCTION:
+BIO_new_dgram_sctp                      332	1_1_0	EXIST::FUNCTION:DGRAM,SCTP
+d2i_RSAPrivateKey_fp                    333	1_1_0	EXIST::FUNCTION:RSA,STDIO
+s2i_ASN1_IA5STRING                      334	1_1_0	EXIST::FUNCTION:
+UI_get_ex_data                          335	1_1_0	EXIST::FUNCTION:
+EVP_EncryptUpdate                       336	1_1_0	EXIST::FUNCTION:
+SRP_create_verifier                     337	1_1_0	EXIST::FUNCTION:SRP
+TS_TST_INFO_print_bio                   338	1_1_0	EXIST::FUNCTION:TS
+X509_NAME_get_index_by_OBJ              339	1_1_0	EXIST::FUNCTION:
+BIO_get_host_ip                         340	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,SOCK
+PKCS7_add_certificate                   341	1_1_0	EXIST::FUNCTION:
+TS_REQ_get_ext                          342	1_1_0	EXIST::FUNCTION:TS
+X509_NAME_cmp                           343	1_1_0	EXIST::FUNCTION:
+DIST_POINT_it                           344	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+DIST_POINT_it                           344	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+PEM_read_X509_CRL                       345	1_1_0	EXIST::FUNCTION:STDIO
+OPENSSL_sk_sort                         346	1_1_0	EXIST::FUNCTION:
+CTLOG_STORE_load_file                   347	1_1_0	EXIST::FUNCTION:CT
+ASN1_SEQUENCE_it                        348	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_SEQUENCE_it                        348	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+TS_RESP_CTX_get_tst_info                349	1_1_0	EXIST::FUNCTION:TS
+RC4                                     350	1_1_0	EXIST::FUNCTION:RC4
+PKCS7_stream                            352	1_1_0	EXIST::FUNCTION:
+i2t_ASN1_OBJECT                         353	1_1_0	EXIST::FUNCTION:
+EC_GROUP_get0_generator                 354	1_1_0	EXIST::FUNCTION:EC
+RSA_padding_add_PKCS1_PSS_mgf1          355	1_1_0	EXIST::FUNCTION:RSA
+EVP_MD_meth_set_init                    356	1_1_0	EXIST::FUNCTION:
+X509_get_issuer_name                    357	1_1_0	EXIST::FUNCTION:
+EVP_SignFinal                           358	1_1_0	EXIST::FUNCTION:
+PKCS12_mac_present                      359	1_1_0	EXIST::FUNCTION:
+d2i_PUBKEY_bio                          360	1_1_0	EXIST::FUNCTION:
+BN_asc2bn                               361	1_1_0	EXIST::FUNCTION:
+EVP_desx_cbc                            362	1_1_0	EXIST::FUNCTION:DES
+SXNETID_it                              363	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+SXNETID_it                              363	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+CRYPTO_gcm128_encrypt                   364	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_CTX_ctrl_str                   365	1_1_0	EXIST::FUNCTION:
+CMS_signed_add1_attr_by_txt             366	1_1_0	EXIST::FUNCTION:CMS
+i2d_NETSCAPE_SPKAC                      367	1_1_0	EXIST::FUNCTION:
+X509V3_add_value_bool_nf                368	1_1_0	EXIST::FUNCTION:
+ASN1_item_verify                        369	1_1_0	EXIST::FUNCTION:
+SEED_ecb_encrypt                        370	1_1_0	EXIST::FUNCTION:SEED
+X509_PUBKEY_get0_param                  371	1_1_0	EXIST::FUNCTION:
+ASN1_i2d_fp                             372	1_1_0	EXIST::FUNCTION:STDIO
+BIO_new_mem_buf                         373	1_1_0	EXIST::FUNCTION:
+UI_get_input_flags                      374	1_1_0	EXIST::FUNCTION:
+X509V3_EXT_REQ_add_nconf                375	1_1_0	EXIST::FUNCTION:
+X509v3_asid_subset                      376	1_1_0	EXIST::FUNCTION:RFC3779
+RSA_check_key_ex                        377	1_1_0	EXIST::FUNCTION:RSA
+d2i_TS_MSG_IMPRINT_bio                  378	1_1_0	EXIST::FUNCTION:TS
+i2d_ASN1_TYPE                           379	1_1_0	EXIST::FUNCTION:
+EVP_aes_256_wrap_pad                    380	1_1_0	EXIST::FUNCTION:
+CMS_RecipientInfo_kekri_id_cmp          381	1_1_0	EXIST::FUNCTION:CMS
+X509_VERIFY_PARAM_get0_peername         382	1_1_0	EXIST::FUNCTION:
+ASN1_PCTX_get_oid_flags                 383	1_1_0	EXIST::FUNCTION:
+CONF_free                               384	1_1_0	EXIST::FUNCTION:
+DSO_get_filename                        385	1_1_0	EXIST::FUNCTION:
+i2d_ASN1_SEQUENCE_ANY                   387	1_1_0	EXIST::FUNCTION:
+OPENSSL_strlcpy                         388	1_1_0	EXIST::FUNCTION:
+BIO_get_port                            389	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,SOCK
+DISPLAYTEXT_free                        390	1_1_0	EXIST::FUNCTION:
+BN_div                                  391	1_1_0	EXIST::FUNCTION:
+RIPEMD160_Update                        392	1_1_0	EXIST::FUNCTION:RMD160
+PEM_write_bio_CMS                       393	1_1_0	EXIST::FUNCTION:CMS
+ASN1_OBJECT_new                         394	1_1_0	EXIST::FUNCTION:
+EVP_des_ede3_cfb8                       395	1_1_0	EXIST::FUNCTION:DES
+BIO_dump_indent_fp                      396	1_1_0	EXIST::FUNCTION:STDIO
+X509_NAME_ENTRY_get_data                397	1_1_0	EXIST::FUNCTION:
+BIO_socket                              398	1_1_0	EXIST::FUNCTION:SOCK
+EVP_PKEY_meth_get_derive                399	1_1_0	EXIST::FUNCTION:
+ASN1_STRING_clear_free                  400	1_1_0	EXIST::FUNCTION:
+d2i_OCSP_REVOKEDINFO                    401	1_1_0	EXIST::FUNCTION:OCSP
+ASN1_STRING_print_ex_fp                 402	1_1_0	EXIST::FUNCTION:STDIO
+PKCS7_SIGNED_new                        403	1_1_0	EXIST::FUNCTION:
+CMS_get0_eContentType                   404	1_1_0	EXIST::FUNCTION:CMS
+HMAC_Final                              405	1_1_0	EXIST::FUNCTION:
+X509_CRL_delete_ext                     406	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_get_ordering                407	1_1_0	EXIST::FUNCTION:TS
+X509_get_extended_key_usage             408	1_1_0	EXIST::FUNCTION:
+ERR_print_errors                        409	1_1_0	EXIST::FUNCTION:
+X509_REVOKED_set_revocationDate         410	1_1_0	EXIST::FUNCTION:
+EVP_CipherFinal_ex                      411	1_1_0	EXIST::FUNCTION:
+d2i_DSA_PUBKEY                          412	1_1_0	EXIST::FUNCTION:DSA
+BN_CTX_get                              413	1_1_0	EXIST::FUNCTION:
+BN_to_montgomery                        414	1_1_0	EXIST::FUNCTION:
+X509_OBJECT_get0_X509_CRL               415	1_1_0	EXIST::FUNCTION:
+EVP_camellia_128_cfb8                   416	1_1_0	EXIST::FUNCTION:CAMELLIA
+EC_KEY_METHOD_free                      417	1_1_0	EXIST::FUNCTION:EC
+TS_TST_INFO_set_policy_id               418	1_1_0	EXIST::FUNCTION:TS
+d2i_EXTENDED_KEY_USAGE                  419	1_1_0	EXIST::FUNCTION:
+ASYNC_unblock_pause                     420	1_1_0	EXIST::FUNCTION:
+i2d_X509_VAL                            421	1_1_0	EXIST::FUNCTION:
+ASN1_SCTX_get_flags                     422	1_1_0	EXIST::FUNCTION:
+RIPEMD160                               423	1_1_0	EXIST::FUNCTION:RMD160
+CRYPTO_ocb128_setiv                     424	1_1_0	EXIST::FUNCTION:OCB
+X509_CRL_digest                         425	1_1_0	EXIST::FUNCTION:
+EVP_aes_128_cbc_hmac_sha1               426	1_1_0	EXIST::FUNCTION:
+ERR_load_CMS_strings                    427	1_1_0	EXIST::FUNCTION:CMS
+EVP_MD_CTX_md                           428	1_1_0	EXIST::FUNCTION:
+X509_REVOKED_get_ext                    429	1_1_0	EXIST::FUNCTION:
+d2i_RSA_PSS_PARAMS                      430	1_1_0	EXIST::FUNCTION:RSA
+USERNOTICE_free                         431	1_1_0	EXIST::FUNCTION:
+MD4_Transform                           432	1_1_0	EXIST::FUNCTION:MD4
+EVP_CIPHER_block_size                   433	1_1_0	EXIST::FUNCTION:
+CERTIFICATEPOLICIES_new                 434	1_1_0	EXIST::FUNCTION:
+BIO_dump_fp                             435	1_1_0	EXIST::FUNCTION:STDIO
+BIO_set_flags                           436	1_1_0	EXIST::FUNCTION:
+BN_is_one                               437	1_1_0	EXIST::FUNCTION:
+TS_CONF_set_def_policy                  438	1_1_0	EXIST::FUNCTION:TS
+DSA_free                                439	1_1_0	EXIST::FUNCTION:DSA
+BN_GENCB_new                            440	1_1_0	EXIST::FUNCTION:
+X509_VAL_new                            441	1_1_0	EXIST::FUNCTION:
+NCONF_load                              442	1_1_0	EXIST::FUNCTION:
+ASN1_put_object                         443	1_1_0	EXIST::FUNCTION:
+d2i_OCSP_RESPONSE                       444	1_1_0	EXIST::FUNCTION:OCSP
+d2i_PublicKey                           445	1_1_0	EXIST::FUNCTION:
+ENGINE_set_ex_data                      446	1_1_0	EXIST::FUNCTION:ENGINE
+X509_get_default_private_dir            447	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_set0_dane                448	1_1_0	EXIST::FUNCTION:
+EVP_des_ecb                             449	1_1_0	EXIST::FUNCTION:DES
+OCSP_resp_get0                          450	1_1_0	EXIST::FUNCTION:OCSP
+RSA_X931_generate_key_ex                452	1_1_0	EXIST::FUNCTION:RSA
+X509_get_serialNumber                   453	1_1_0	EXIST::FUNCTION:
+BIO_sock_should_retry                   454	1_1_0	EXIST::FUNCTION:SOCK
+ENGINE_get_digests                      455	1_1_0	EXIST::FUNCTION:ENGINE
+TS_MSG_IMPRINT_get_algo                 456	1_1_0	EXIST::FUNCTION:TS
+DH_new_method                           457	1_1_0	EXIST::FUNCTION:DH
+BF_ecb_encrypt                          458	1_1_0	EXIST::FUNCTION:BF
+PEM_write_bio_DHparams                  459	1_1_0	EXIST::FUNCTION:DH
+EVP_DigestFinal                         460	1_1_0	EXIST::FUNCTION:
+CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE 461	1_1_0	EXIST::FUNCTION:CT
+X509v3_asid_add_id_or_range             462	1_1_0	EXIST::FUNCTION:RFC3779
+X509_NAME_ENTRY_create_by_NID           463	1_1_0	EXIST::FUNCTION:
+EC_KEY_METHOD_get_init                  464	1_1_0	EXIST::FUNCTION:EC
+ASN1_INTEGER_to_BN                      465	1_1_0	EXIST::FUNCTION:
+OPENSSL_memcmp                          466	1_1_0	EXIST::FUNCTION:
+BUF_MEM_new                             467	1_1_0	EXIST::FUNCTION:
+DSO_set_filename                        468	1_1_0	EXIST::FUNCTION:
+DH_new                                  469	1_1_0	EXIST::FUNCTION:DH
+OCSP_RESPID_free                        470	1_1_0	EXIST::FUNCTION:OCSP
+PKCS5_pbe2_set                          471	1_1_0	EXIST::FUNCTION:
+SCT_set_signature_nid                   473	1_1_0	EXIST::FUNCTION:CT
+i2d_RSA_PUBKEY_fp                       474	1_1_0	EXIST::FUNCTION:RSA,STDIO
+PKCS12_BAGS_it                          475	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS12_BAGS_it                          475	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+X509_pubkey_digest                      476	1_1_0	EXIST::FUNCTION:
+ENGINE_register_all_RSA                 477	1_1_0	EXIST::FUNCTION:ENGINE
+CRYPTO_THREAD_set_local                 478	1_1_0	EXIST::FUNCTION:
+X509_get_default_cert_dir_env           479	1_1_0	EXIST::FUNCTION:
+X509_CRL_sort                           480	1_1_0	EXIST::FUNCTION:
+i2d_RSA_PUBKEY_bio                      481	1_1_0	EXIST::FUNCTION:RSA
+ASN1_T61STRING_free                     482	1_1_0	EXIST::FUNCTION:
+PEM_write_CMS                           483	1_1_0	EXIST::FUNCTION:CMS,STDIO
+OPENSSL_sk_find                         484	1_1_0	EXIST::FUNCTION:
+ENGINE_get_ciphers                      485	1_1_0	EXIST::FUNCTION:ENGINE
+EVP_rc2_ofb                             486	1_1_0	EXIST::FUNCTION:RC2
+EVP_PKEY_set1_RSA                       487	1_1_0	EXIST::FUNCTION:RSA
+CMS_SignerInfo_get0_md_ctx              488	1_1_0	EXIST::FUNCTION:CMS
+X509_STORE_set_trust                    489	1_1_0	EXIST::FUNCTION:
+d2i_POLICYINFO                          490	1_1_0	EXIST::FUNCTION:
+DES_cbc_encrypt                         491	1_1_0	EXIST::FUNCTION:DES
+BN_GF2m_mod_sqr_arr                     492	1_1_0	EXIST::FUNCTION:EC2M
+ASN1_PRINTABLESTRING_it                 493	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_PRINTABLESTRING_it                 493	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+BIO_f_cipher                            494	1_1_0	EXIST::FUNCTION:
+UI_destroy_method                       495	1_1_0	EXIST::FUNCTION:
+BN_get_rfc3526_prime_3072               496	1_1_0	EXIST::FUNCTION:
+X509_INFO_new                           497	1_1_0	EXIST::FUNCTION:
+OCSP_RESPDATA_it                        498	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:OCSP
+OCSP_RESPDATA_it                        498	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:OCSP
+X509_CRL_print                          499	1_1_0	EXIST::FUNCTION:
+WHIRLPOOL_Update                        500	1_1_0	EXIST::FUNCTION:WHIRLPOOL
+DSA_get_ex_data                         501	1_1_0	EXIST::FUNCTION:DSA
+BN_copy                                 502	1_1_0	EXIST::FUNCTION:
+FIPS_mode_set                           503	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_add0_policy           504	1_1_0	EXIST::FUNCTION:
+PKCS7_cert_from_signer_info             505	1_1_0	EXIST::FUNCTION:
+X509_TRUST_get_trust                    506	1_1_0	EXIST::FUNCTION:
+DES_string_to_key                       507	1_1_0	EXIST::FUNCTION:DES
+ERR_error_string                        508	1_1_0	EXIST::FUNCTION:
+BIO_new_connect                         509	1_1_0	EXIST::FUNCTION:SOCK
+DSA_new_method                          511	1_1_0	EXIST::FUNCTION:DSA
+OCSP_CERTID_new                         512	1_1_0	EXIST::FUNCTION:OCSP
+X509_CRL_get_signature_nid              513	1_1_0	EXIST::FUNCTION:
+X509_policy_level_node_count            514	1_1_0	EXIST::FUNCTION:
+d2i_OCSP_CERTSTATUS                     515	1_1_0	EXIST::FUNCTION:OCSP
+X509V3_add1_i2d                         516	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_set_serial                  517	1_1_0	EXIST::FUNCTION:TS
+OCSP_RESPBYTES_new                      518	1_1_0	EXIST::FUNCTION:OCSP
+OCSP_SINGLERESP_delete_ext              519	1_1_0	EXIST::FUNCTION:OCSP
+EVP_MD_CTX_test_flags                   521	1_1_0	EXIST::FUNCTION:
+X509v3_addr_validate_path               522	1_1_0	EXIST::FUNCTION:RFC3779
+BIO_new_fp                              523	1_1_0	EXIST::FUNCTION:STDIO
+EC_GROUP_set_generator                  524	1_1_0	EXIST::FUNCTION:EC
+CRYPTO_memdup                           525	1_1_0	EXIST::FUNCTION:
+DH_generate_parameters                  526	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_0_9_8,DH
+BN_set_negative                         527	1_1_0	EXIST::FUNCTION:
+i2d_TS_RESP_bio                         528	1_1_0	EXIST::FUNCTION:TS
+ASYNC_WAIT_CTX_set_wait_fd              529	1_1_0	EXIST::FUNCTION:
+ERR_func_error_string                   530	1_1_0	EXIST::FUNCTION:
+ASN1_STRING_data                        531	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0
+X509_CRL_add1_ext_i2d                   532	1_1_0	EXIST::FUNCTION:
+i2d_TS_TST_INFO                         533	1_1_0	EXIST::FUNCTION:TS
+OBJ_sigid_free                          534	1_1_0	EXIST::FUNCTION:
+TS_STATUS_INFO_get0_status              535	1_1_0	EXIST::FUNCTION:TS
+EC_KEY_get_flags                        536	1_1_0	EXIST::FUNCTION:EC
+ASN1_TYPE_cmp                           537	1_1_0	EXIST::FUNCTION:
+i2d_RSAPublicKey                        538	1_1_0	EXIST::FUNCTION:RSA
+EC_GROUP_get_trinomial_basis            539	1_1_0	EXIST::FUNCTION:EC,EC2M
+BIO_ADDRINFO_protocol                   540	1_1_0	EXIST::FUNCTION:SOCK
+i2d_PBKDF2PARAM                         541	1_1_0	EXIST::FUNCTION:
+ENGINE_unregister_RAND                  542	1_1_0	EXIST::FUNCTION:ENGINE
+PEM_write_bio_RSAPrivateKey             543	1_1_0	EXIST::FUNCTION:RSA
+CONF_get_number                         544	1_1_0	EXIST::FUNCTION:
+X509_EXTENSION_get_object               545	1_1_0	EXIST::FUNCTION:
+X509_EXTENSIONS_it                      546	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_EXTENSIONS_it                      546	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+EC_POINT_set_compressed_coordinates_GF2m 547	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_2_0,EC,EC2M
+RSA_sign_ASN1_OCTET_STRING              548	1_1_0	EXIST::FUNCTION:RSA
+d2i_X509_CRL_fp                         549	1_1_0	EXIST::FUNCTION:STDIO
+i2d_RSA_PUBKEY                          550	1_1_0	EXIST::FUNCTION:RSA
+EVP_aes_128_ccm                         551	1_1_0	EXIST::FUNCTION:
+ECParameters_print                      552	1_1_0	EXIST::FUNCTION:EC
+OCSP_SINGLERESP_get1_ext_d2i            553	1_1_0	EXIST::FUNCTION:OCSP
+RAND_status                             554	1_1_0	EXIST::FUNCTION:
+EVP_ripemd160                           555	1_1_0	EXIST::FUNCTION:RMD160
+EVP_MD_meth_set_final                   556	1_1_0	EXIST::FUNCTION:
+ENGINE_get_cmd_defns                    557	1_1_0	EXIST::FUNCTION:ENGINE
+d2i_PKEY_USAGE_PERIOD                   558	1_1_0	EXIST::FUNCTION:
+RSAPublicKey_dup                        559	1_1_0	EXIST::FUNCTION:RSA
+RAND_write_file                         560	1_1_0	EXIST::FUNCTION:
+BN_GF2m_mod                             561	1_1_0	EXIST::FUNCTION:EC2M
+EC_GROUP_get_pentanomial_basis          562	1_1_0	EXIST::FUNCTION:EC,EC2M
+X509_CINF_free                          563	1_1_0	EXIST::FUNCTION:
+X509_EXTENSION_free                     564	1_1_0	EXIST::FUNCTION:
+EVP_DigestSignInit                      565	1_1_0	EXIST::FUNCTION:
+CT_POLICY_EVAL_CTX_get0_issuer          566	1_1_0	EXIST::FUNCTION:CT
+TLS_FEATURE_new                         567	1_1_0	EXIST::FUNCTION:
+RSA_get_default_method                  568	1_1_0	EXIST::FUNCTION:RSA
+CRYPTO_cts128_encrypt_block             569	1_1_0	EXIST::FUNCTION:
+ASN1_digest                             570	1_1_0	EXIST::FUNCTION:
+ERR_load_X509V3_strings                 571	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_get_cleanup               572	1_1_0	EXIST::FUNCTION:
+d2i_X509                                574	1_1_0	EXIST::FUNCTION:
+a2i_ASN1_STRING                         575	1_1_0	EXIST::FUNCTION:
+EC_GROUP_get_mont_data                  576	1_1_0	EXIST::FUNCTION:EC
+CMAC_CTX_copy                           577	1_1_0	EXIST::FUNCTION:CMAC
+EVP_camellia_128_cfb128                 579	1_1_0	EXIST::FUNCTION:CAMELLIA
+DH_compute_key_padded                   580	1_1_0	EXIST::FUNCTION:DH
+ERR_load_CONF_strings                   581	1_1_0	EXIST::FUNCTION:
+ESS_ISSUER_SERIAL_dup                   582	1_1_0	EXIST::FUNCTION:TS
+BN_GF2m_mod_exp_arr                     583	1_1_0	EXIST::FUNCTION:EC2M
+ASN1_UTF8STRING_free                    584	1_1_0	EXIST::FUNCTION:
+BN_X931_generate_prime_ex               585	1_1_0	EXIST::FUNCTION:
+ENGINE_get_RAND                         586	1_1_0	EXIST::FUNCTION:ENGINE
+EVP_DecryptInit                         587	1_1_0	EXIST::FUNCTION:
+BN_bin2bn                               588	1_1_0	EXIST::FUNCTION:
+X509_subject_name_hash                  589	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_meth_set_flags               590	1_1_0	EXIST::FUNCTION:
+TS_CONF_set_clock_precision_digits      591	1_1_0	EXIST::FUNCTION:TS
+ASN1_TYPE_set                           592	1_1_0	EXIST::FUNCTION:
+i2d_PKCS8_PRIV_KEY_INFO                 593	1_1_0	EXIST::FUNCTION:
+i2d_PKCS7_bio                           594	1_1_0	EXIST::FUNCTION:
+EVP_MD_meth_get_copy                    595	1_1_0	EXIST::FUNCTION:
+RAND_query_egd_bytes                    596	1_1_0	EXIST::FUNCTION:EGD
+i2d_ASN1_PRINTABLE                      597	1_1_0	EXIST::FUNCTION:
+ENGINE_cmd_is_executable                598	1_1_0	EXIST::FUNCTION:ENGINE
+BIO_puts                                599	1_1_0	EXIST::FUNCTION:
+RSAPublicKey_it                         601	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:RSA
+RSAPublicKey_it                         601	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:RSA
+ISSUING_DIST_POINT_new                  602	1_1_0	EXIST::FUNCTION:
+X509_VAL_it                             603	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_VAL_it                             603	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+EVP_DigestVerifyInit                    604	1_1_0	EXIST::FUNCTION:
+i2d_IPAddressChoice                     605	1_1_0	EXIST::FUNCTION:RFC3779
+EVP_md5                                 606	1_1_0	EXIST::FUNCTION:MD5
+ASRange_new                             607	1_1_0	EXIST::FUNCTION:RFC3779
+BN_GF2m_mod_mul_arr                     608	1_1_0	EXIST::FUNCTION:EC2M
+d2i_RSA_OAEP_PARAMS                     609	1_1_0	EXIST::FUNCTION:RSA
+BIO_s_bio                               610	1_1_0	EXIST::FUNCTION:
+OBJ_NAME_add                            611	1_1_0	EXIST::FUNCTION:
+BIO_fd_non_fatal_error                  612	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_set_type                       613	1_1_0	EXIST::FUNCTION:
+ENGINE_get_next                         614	1_1_0	EXIST::FUNCTION:ENGINE
+BN_is_negative                          615	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_get_attr_count                 616	1_1_0	EXIST::FUNCTION:
+X509_REVOKED_get_ext_by_critical        617	1_1_0	EXIST::FUNCTION:
+X509at_get_attr                         618	1_1_0	EXIST::FUNCTION:
+X509_PUBKEY_it                          619	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_PUBKEY_it                          619	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+DES_ede3_ofb64_encrypt                  620	1_1_0	EXIST::FUNCTION:DES
+EC_KEY_METHOD_get_compute_key           621	1_1_0	EXIST::FUNCTION:EC
+RC2_cfb64_encrypt                       622	1_1_0	EXIST::FUNCTION:RC2
+EVP_EncryptFinal_ex                     623	1_1_0	EXIST::FUNCTION:
+ERR_load_RSA_strings                    624	1_1_0	EXIST::FUNCTION:
+CRYPTO_secure_malloc_done               625	1_1_0	EXIST::FUNCTION:
+RSA_OAEP_PARAMS_new                     626	1_1_0	EXIST::FUNCTION:RSA
+X509_NAME_free                          627	1_1_0	EXIST::FUNCTION:
+PKCS12_set_mac                          628	1_1_0	EXIST::FUNCTION:
+UI_get0_result_string                   629	1_1_0	EXIST::FUNCTION:
+TS_RESP_CTX_add_policy                  630	1_1_0	EXIST::FUNCTION:TS
+X509_REQ_dup                            631	1_1_0	EXIST::FUNCTION:
+d2i_DSA_PUBKEY_fp                       633	1_1_0	EXIST::FUNCTION:DSA,STDIO
+OCSP_REQ_CTX_nbio_d2i                   634	1_1_0	EXIST::FUNCTION:OCSP
+d2i_X509_REQ_fp                         635	1_1_0	EXIST::FUNCTION:STDIO
+DH_OpenSSL                              636	1_1_0	EXIST::FUNCTION:DH
+BN_get_rfc3526_prime_8192               637	1_1_0	EXIST::FUNCTION:
+X509_REVOKED_it                         638	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_REVOKED_it                         638	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+CRYPTO_THREAD_write_lock                639	1_1_0	EXIST::FUNCTION:
+X509V3_NAME_from_section                640	1_1_0	EXIST::FUNCTION:
+EC_POINT_set_compressed_coordinates_GFp 641	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_2_0,EC
+OCSP_SINGLERESP_get0_id                 642	1_1_0	EXIST::FUNCTION:OCSP
+UI_add_info_string                      643	1_1_0	EXIST::FUNCTION:
+OBJ_NAME_remove                         644	1_1_0	EXIST::FUNCTION:
+UI_get_method                           645	1_1_0	EXIST::FUNCTION:
+CONF_modules_unload                     646	1_1_0	EXIST::FUNCTION:
+CRYPTO_ccm128_encrypt_ccm64             647	1_1_0	EXIST::FUNCTION:
+CRYPTO_secure_malloc_init               648	1_1_0	EXIST::FUNCTION:
+DSAparams_dup                           649	1_1_0	EXIST::FUNCTION:DSA
+PKCS8_PRIV_KEY_INFO_new                 650	1_1_0	EXIST::FUNCTION:
+TS_RESP_verify_token                    652	1_1_0	EXIST::FUNCTION:TS
+PEM_read_bio_CMS                        653	1_1_0	EXIST::FUNCTION:CMS
+PEM_get_EVP_CIPHER_INFO                 654	1_1_0	EXIST::FUNCTION:
+X509V3_EXT_print                        655	1_1_0	EXIST::FUNCTION:
+i2d_OCSP_SINGLERESP                     656	1_1_0	EXIST::FUNCTION:OCSP
+ESS_CERT_ID_free                        657	1_1_0	EXIST::FUNCTION:TS
+PEM_SignInit                            658	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_CTX_set_key_length           659	1_1_0	EXIST::FUNCTION:
+X509_delete_ext                         660	1_1_0	EXIST::FUNCTION:
+OCSP_resp_get0_produced_at              661	1_1_0	EXIST::FUNCTION:OCSP
+IDEA_encrypt                            662	1_1_0	EXIST::FUNCTION:IDEA
+CRYPTO_nistcts128_encrypt_block         663	1_1_0	EXIST::FUNCTION:
+EVP_MD_do_all                           664	1_1_0	EXIST::FUNCTION:
+EC_KEY_oct2priv                         665	1_1_0	EXIST::FUNCTION:EC
+CONF_parse_list                         666	1_1_0	EXIST::FUNCTION:
+ENGINE_set_table_flags                  667	1_1_0	EXIST::FUNCTION:ENGINE
+EVP_MD_meth_get_ctrl                    668	1_1_0	EXIST::FUNCTION:
+ASN1_TYPE_get_int_octetstring           669	1_1_0	EXIST::FUNCTION:
+PKCS5_pbe_set0_algor                    670	1_1_0	EXIST::FUNCTION:
+ENGINE_get_table_flags                  671	1_1_0	EXIST::FUNCTION:ENGINE
+PKCS12_MAC_DATA_new                     672	1_1_0	EXIST::FUNCTION:
+X509_chain_up_ref                       673	1_1_0	EXIST::FUNCTION:
+OCSP_REQINFO_it                         674	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:OCSP
+OCSP_REQINFO_it                         674	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:OCSP
+PKCS12_add_localkeyid                   675	1_1_0	EXIST::FUNCTION:
+PKCS12_SAFEBAG_get0_type                676	1_1_0	EXIST::FUNCTION:
+X509_TRUST_set_default                  677	1_1_0	EXIST::FUNCTION:
+TXT_DB_read                             678	1_1_0	EXIST::FUNCTION:
+BN_sub                                  679	1_1_0	EXIST::FUNCTION:
+ASRange_free                            680	1_1_0	EXIST::FUNCTION:RFC3779
+EVP_aes_192_cfb8                        681	1_1_0	EXIST::FUNCTION:
+DSO_global_lookup                       682	1_1_0	EXIST::FUNCTION:
+PKCS7_SIGNER_INFO_it                    683	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS7_SIGNER_INFO_it                    683	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+CRYPTO_ocb128_copy_ctx                  684	1_1_0	EXIST::FUNCTION:OCB
+TS_REQ_get_ext_d2i                      685	1_1_0	EXIST::FUNCTION:TS
+AES_ige_encrypt                         686	1_1_0	EXIST::FUNCTION:
+d2i_SXNET                               687	1_1_0	EXIST::FUNCTION:
+CTLOG_get0_log_id                       688	1_1_0	EXIST::FUNCTION:CT
+CMS_RecipientInfo_ktri_get0_signer_id   689	1_1_0	EXIST::FUNCTION:CMS
+OCSP_REQUEST_add1_ext_i2d               690	1_1_0	EXIST::FUNCTION:OCSP
+EVP_PBE_CipherInit                      691	1_1_0	EXIST::FUNCTION:
+DSA_dup_DH                              692	1_1_0	EXIST::FUNCTION:DH,DSA
+CONF_imodule_get_value                  693	1_1_0	EXIST::FUNCTION:
+OCSP_id_issuer_cmp                      694	1_1_0	EXIST::FUNCTION:OCSP
+ASN1_INTEGER_free                       695	1_1_0	EXIST::FUNCTION:
+BN_get0_nist_prime_224                  696	1_1_0	EXIST::FUNCTION:
+OPENSSL_isservice                       697	1_1_0	EXIST::FUNCTION:
+DH_compute_key                          698	1_1_0	EXIST::FUNCTION:DH
+TS_RESP_CTX_set_signer_key              699	1_1_0	EXIST::FUNCTION:TS
+i2d_DSAPrivateKey_bio                   700	1_1_0	EXIST::FUNCTION:DSA
+ASN1_item_d2i                           702	1_1_0	EXIST::FUNCTION:
+BIO_int_ctrl                            703	1_1_0	EXIST::FUNCTION:
+CMS_ReceiptRequest_it                   704	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:CMS
+CMS_ReceiptRequest_it                   704	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:CMS
+X509_ATTRIBUTE_get0_type                705	1_1_0	EXIST::FUNCTION:
+EVP_MD_meth_set_copy                    706	1_1_0	EXIST::FUNCTION:
+d2i_ASN1_ENUMERATED                     707	1_1_0	EXIST::FUNCTION:
+d2i_ASIdOrRange                         708	1_1_0	EXIST::FUNCTION:RFC3779
+i2s_ASN1_OCTET_STRING                   709	1_1_0	EXIST::FUNCTION:
+X509_add1_reject_object                 710	1_1_0	EXIST::FUNCTION:
+ERR_set_mark                            711	1_1_0	EXIST::FUNCTION:
+d2i_ASN1_VISIBLESTRING                  712	1_1_0	EXIST::FUNCTION:
+X509_NAME_ENTRY_dup                     714	1_1_0	EXIST::FUNCTION:
+X509_certificate_type                   715	1_1_0	EXIST::FUNCTION:
+PKCS7_add_signature                     716	1_1_0	EXIST::FUNCTION:
+OBJ_ln2nid                              717	1_1_0	EXIST::FUNCTION:
+CRYPTO_128_unwrap                       718	1_1_0	EXIST::FUNCTION:
+BIO_new_PKCS7                           719	1_1_0	EXIST::FUNCTION:
+UI_get0_user_data                       720	1_1_0	EXIST::FUNCTION:
+TS_RESP_get_token                       721	1_1_0	EXIST::FUNCTION:TS
+OCSP_RESPID_new                         722	1_1_0	EXIST::FUNCTION:OCSP
+ASN1_SET_ANY_it                         723	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_SET_ANY_it                         723	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+d2i_TS_RESP_bio                         724	1_1_0	EXIST::FUNCTION:TS
+PEM_write_X509_REQ                      725	1_1_0	EXIST::FUNCTION:STDIO
+BIO_snprintf                            726	1_1_0	EXIST::FUNCTION:
+EC_POINT_hex2point                      727	1_1_0	EXIST::FUNCTION:EC
+X509v3_get_ext_by_critical              728	1_1_0	EXIST::FUNCTION:
+ENGINE_get_default_RSA                  729	1_1_0	EXIST::FUNCTION:ENGINE
+DSA_sign_setup                          730	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_2_0,DSA
+OPENSSL_sk_new_null                     731	1_1_0	EXIST::FUNCTION:
+PEM_read_PKCS8                          732	1_1_0	EXIST::FUNCTION:STDIO
+BN_mod_sqr                              733	1_1_0	EXIST::FUNCTION:
+CAST_ofb64_encrypt                      734	1_1_0	EXIST::FUNCTION:CAST
+TXT_DB_write                            735	1_1_0	EXIST::FUNCTION:
+OCSP_REQUEST_get1_ext_d2i               736	1_1_0	EXIST::FUNCTION:OCSP
+CMS_unsigned_add1_attr_by_NID           737	1_1_0	EXIST::FUNCTION:CMS
+BN_mod_exp_mont                         738	1_1_0	EXIST::FUNCTION:
+d2i_DHxparams                           739	1_1_0	EXIST::FUNCTION:DH
+DH_size                                 740	1_1_0	EXIST::FUNCTION:DH
+CONF_imodule_get_name                   741	1_1_0	EXIST::FUNCTION:
+ENGINE_get_pkey_meth_engine             742	1_1_0	EXIST::FUNCTION:ENGINE
+OCSP_BASICRESP_free                     743	1_1_0	EXIST::FUNCTION:OCSP
+BN_set_params                           744	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_0_9_8
+BN_add                                  745	1_1_0	EXIST::FUNCTION:
+OPENSSL_sk_free                         746	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_get_ext_d2i                 747	1_1_0	EXIST::FUNCTION:TS
+RSA_check_key                           748	1_1_0	EXIST::FUNCTION:RSA
+TS_MSG_IMPRINT_set_algo                 749	1_1_0	EXIST::FUNCTION:TS
+BN_nist_mod_521                         750	1_1_0	EXIST::FUNCTION:
+CRYPTO_THREAD_get_local                 751	1_1_0	EXIST::FUNCTION:
+PKCS7_to_TS_TST_INFO                    752	1_1_0	EXIST::FUNCTION:TS
+X509_STORE_CTX_new                      753	1_1_0	EXIST::FUNCTION:
+CTLOG_STORE_new                         754	1_1_0	EXIST::FUNCTION:CT
+EVP_CIPHER_meth_set_cleanup             755	1_1_0	EXIST::FUNCTION:
+d2i_PKCS12_SAFEBAG                      756	1_1_0	EXIST::FUNCTION:
+EVP_MD_pkey_type                        757	1_1_0	EXIST::FUNCTION:
+X509_policy_node_get0_qualifiers        758	1_1_0	EXIST::FUNCTION:
+OCSP_cert_status_str                    759	1_1_0	EXIST::FUNCTION:OCSP
+EVP_MD_meth_get_flags                   760	1_1_0	EXIST::FUNCTION:
+ASN1_ENUMERATED_set                     761	1_1_0	EXIST::FUNCTION:
+UI_UTIL_read_pw                         762	1_1_0	EXIST::FUNCTION:
+PKCS7_ENC_CONTENT_free                  763	1_1_0	EXIST::FUNCTION:
+CMS_RecipientInfo_type                  764	1_1_0	EXIST::FUNCTION:CMS
+OCSP_BASICRESP_get_ext                  765	1_1_0	EXIST::FUNCTION:OCSP
+BN_lebin2bn                             766	1_1_0	EXIST::FUNCTION:
+AES_decrypt                             767	1_1_0	EXIST::FUNCTION:
+BIO_fd_should_retry                     768	1_1_0	EXIST::FUNCTION:
+ASN1_STRING_new                         769	1_1_0	EXIST::FUNCTION:
+ENGINE_init                             770	1_1_0	EXIST::FUNCTION:ENGINE
+TS_RESP_CTX_add_flags                   771	1_1_0	EXIST::FUNCTION:TS
+BIO_gethostbyname                       772	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,SOCK
+X509V3_EXT_add                          773	1_1_0	EXIST::FUNCTION:
+UI_add_verify_string                    774	1_1_0	EXIST::FUNCTION:
+EVP_rc5_32_12_16_cfb64                  775	1_1_0	EXIST::FUNCTION:RC5
+PKCS7_dataVerify                        776	1_1_0	EXIST::FUNCTION:
+PKCS7_SIGNER_INFO_free                  777	1_1_0	EXIST::FUNCTION:
+PKCS7_add_attrib_smimecap               778	1_1_0	EXIST::FUNCTION:
+ERR_peek_last_error_line_data           779	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_set_sign                  780	1_1_0	EXIST::FUNCTION:
+ASN1_i2d_bio                            781	1_1_0	EXIST::FUNCTION:
+DSA_verify                              782	1_1_0	EXIST::FUNCTION:DSA
+i2a_ASN1_OBJECT                         783	1_1_0	EXIST::FUNCTION:
+i2d_PKEY_USAGE_PERIOD                   784	1_1_0	EXIST::FUNCTION:
+DSA_new                                 785	1_1_0	EXIST::FUNCTION:DSA
+PEM_read_bio_X509_CRL                   786	1_1_0	EXIST::FUNCTION:
+PKCS7_dataDecode                        787	1_1_0	EXIST::FUNCTION:
+DSA_up_ref                              788	1_1_0	EXIST::FUNCTION:DSA
+EVP_DecryptInit_ex                      789	1_1_0	EXIST::FUNCTION:
+CONF_get1_default_config_file           790	1_1_0	EXIST::FUNCTION:
+CRYPTO_ocb128_encrypt                   791	1_1_0	EXIST::FUNCTION:OCB
+EXTENDED_KEY_USAGE_new                  792	1_1_0	EXIST::FUNCTION:
+EVP_EncryptFinal                        793	1_1_0	EXIST::FUNCTION:
+PEM_write_ECPrivateKey                  794	1_1_0	EXIST::FUNCTION:EC,STDIO
+EVP_CIPHER_meth_set_get_asn1_params     796	1_1_0	EXIST::FUNCTION:
+PKCS7_dataInit                          797	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_CTX_set_app_data               798	1_1_0	EXIST::FUNCTION:
+a2i_GENERAL_NAME                        799	1_1_0	EXIST::FUNCTION:
+SXNETID_new                             800	1_1_0	EXIST::FUNCTION:
+RC4_options                             801	1_1_0	EXIST::FUNCTION:RC4
+BIO_f_null                              802	1_1_0	EXIST::FUNCTION:
+EC_GROUP_set_curve_name                 803	1_1_0	EXIST::FUNCTION:EC
+d2i_PBE2PARAM                           804	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_security_bits                  805	1_1_0	EXIST::FUNCTION:
+PKCS12_unpack_p7encdata                 806	1_1_0	EXIST::FUNCTION:
+X509V3_EXT_i2d                          807	1_1_0	EXIST::FUNCTION:
+X509V3_get_value_bool                   808	1_1_0	EXIST::FUNCTION:
+X509_verify_cert_error_string           809	1_1_0	EXIST::FUNCTION:
+d2i_X509_PUBKEY                         810	1_1_0	EXIST::FUNCTION:
+i2a_ASN1_ENUMERATED                     811	1_1_0	EXIST::FUNCTION:
+PKCS7_ISSUER_AND_SERIAL_new             812	1_1_0	EXIST::FUNCTION:
+d2i_USERNOTICE                          813	1_1_0	EXIST::FUNCTION:
+X509_cmp                                814	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_set1_EC_KEY                    815	1_1_0	EXIST::FUNCTION:EC
+ECPKParameters_print_fp                 816	1_1_0	EXIST::FUNCTION:EC,STDIO
+GENERAL_SUBTREE_free                    817	1_1_0	EXIST::FUNCTION:
+RSA_blinding_off                        818	1_1_0	EXIST::FUNCTION:RSA
+i2d_OCSP_REVOKEDINFO                    819	1_1_0	EXIST::FUNCTION:OCSP
+X509V3_add_standard_extensions          820	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_RSA_PUBKEY                821	1_1_0	EXIST::FUNCTION:RSA
+i2d_ASN1_UTF8STRING                     822	1_1_0	EXIST::FUNCTION:
+TS_REQ_delete_ext                       823	1_1_0	EXIST::FUNCTION:TS
+PKCS7_DIGEST_free                       824	1_1_0	EXIST::FUNCTION:
+OBJ_nid2ln                              825	1_1_0	EXIST::FUNCTION:
+COMP_CTX_new                            826	1_1_0	EXIST::FUNCTION:COMP
+BIO_ADDR_family                         827	1_1_0	EXIST::FUNCTION:SOCK
+OCSP_RESPONSE_it                        828	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:OCSP
+OCSP_RESPONSE_it                        828	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:OCSP
+BIO_ADDRINFO_socktype                   829	1_1_0	EXIST::FUNCTION:SOCK
+d2i_X509_REQ_bio                        830	1_1_0	EXIST::FUNCTION:
+EVP_PBE_cleanup                         831	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get0_current_crl         832	1_1_0	EXIST::FUNCTION:
+CMS_get0_SignerInfos                    833	1_1_0	EXIST::FUNCTION:CMS
+EVP_PKEY_paramgen                       834	1_1_0	EXIST::FUNCTION:
+PEM_write_PKCS8PrivateKey_nid           835	1_1_0	EXIST::FUNCTION:STDIO
+PKCS7_ATTR_VERIFY_it                    836	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS7_ATTR_VERIFY_it                    836	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+OCSP_response_status_str                837	1_1_0	EXIST::FUNCTION:OCSP
+CRYPTO_gcm128_new                       838	1_1_0	EXIST::FUNCTION:
+SMIME_read_PKCS7                        839	1_1_0	EXIST::FUNCTION:
+EC_GROUP_copy                           840	1_1_0	EXIST::FUNCTION:EC
+ENGINE_set_ciphers                      841	1_1_0	EXIST::FUNCTION:ENGINE
+OPENSSL_LH_doall_arg                    842	1_1_0	EXIST::FUNCTION:
+OCSP_REQUEST_get_ext_by_NID             843	1_1_0	EXIST::FUNCTION:OCSP
+X509_REQ_get_attr_by_NID                844	1_1_0	EXIST::FUNCTION:
+PBE2PARAM_new                           845	1_1_0	EXIST::FUNCTION:
+DES_ecb_encrypt                         846	1_1_0	EXIST::FUNCTION:DES
+EVP_camellia_256_ecb                    847	1_1_0	EXIST::FUNCTION:CAMELLIA
+PEM_read_RSA_PUBKEY                     848	1_1_0	EXIST::FUNCTION:RSA,STDIO
+d2i_NETSCAPE_SPKAC                      849	1_1_0	EXIST::FUNCTION:
+ASN1_TIME_check                         851	1_1_0	EXIST::FUNCTION:
+PKCS7_DIGEST_new                        852	1_1_0	EXIST::FUNCTION:
+i2d_TS_TST_INFO_fp                      853	1_1_0	EXIST::FUNCTION:STDIO,TS
+d2i_PKCS8_fp                            854	1_1_0	EXIST::FUNCTION:STDIO
+EVP_PKEY_keygen                         855	1_1_0	EXIST::FUNCTION:
+X509_CRL_dup                            856	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_CTX_get_cb                     857	1_1_0	EXIST::FUNCTION:
+X509_STORE_free                         858	1_1_0	EXIST::FUNCTION:
+ECDSA_sign_ex                           859	1_1_0	EXIST::FUNCTION:EC
+TXT_DB_insert                           860	1_1_0	EXIST::FUNCTION:
+EC_POINTs_make_affine                   861	1_1_0	EXIST::FUNCTION:EC
+RSA_padding_add_PKCS1_PSS               862	1_1_0	EXIST::FUNCTION:RSA
+BF_options                              863	1_1_0	EXIST::FUNCTION:BF
+OCSP_BASICRESP_it                       864	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:OCSP
+OCSP_BASICRESP_it                       864	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:OCSP
+X509_VERIFY_PARAM_get0_name             865	1_1_0	EXIST::FUNCTION:
+TS_RESP_CTX_set_signer_digest           866	1_1_0	EXIST::FUNCTION:TS
+X509_VERIFY_PARAM_set1_email            867	1_1_0	EXIST::FUNCTION:
+BIO_sock_error                          868	1_1_0	EXIST::FUNCTION:SOCK
+RSA_set_default_method                  869	1_1_0	EXIST::FUNCTION:RSA
+BN_GF2m_mod_sqrt_arr                    870	1_1_0	EXIST::FUNCTION:EC2M
+X509_get0_extensions                    871	1_1_0	EXIST::FUNCTION:
+TS_STATUS_INFO_set_status               872	1_1_0	EXIST::FUNCTION:TS
+RSA_verify                              873	1_1_0	EXIST::FUNCTION:RSA
+ASN1_FBOOLEAN_it                        874	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_FBOOLEAN_it                        874	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+d2i_ASN1_TIME                           875	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_get_signctx               876	1_1_0	EXIST::FUNCTION:
+EC_KEY_METHOD_set_compute_key           877	1_1_0	EXIST::FUNCTION:EC
+X509_REQ_INFO_free                      878	1_1_0	EXIST::FUNCTION:
+CMS_ReceiptRequest_create0              879	1_1_0	EXIST::FUNCTION:CMS
+EVP_MD_meth_set_cleanup                 880	1_1_0	EXIST::FUNCTION:
+EVP_aes_128_xts                         881	1_1_0	EXIST::FUNCTION:
+TS_RESP_verify_signature                883	1_1_0	EXIST::FUNCTION:TS
+ENGINE_set_pkey_meths                   884	1_1_0	EXIST::FUNCTION:ENGINE
+CMS_EncryptedData_decrypt               885	1_1_0	EXIST::FUNCTION:CMS
+CONF_module_add                         886	1_1_0	EXIST::FUNCTION:
+ASN1_UTCTIME_print                      887	1_1_0	EXIST::FUNCTION:
+X509_REQ_verify                         888	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_set_purpose           889	1_1_0	EXIST::FUNCTION:
+i2d_TS_MSG_IMPRINT_bio                  890	1_1_0	EXIST::FUNCTION:TS
+X509_EXTENSION_set_object               891	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_CTX_get_app_data             892	1_1_0	EXIST::FUNCTION:
+CRL_DIST_POINTS_it                      893	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+CRL_DIST_POINTS_it                      893	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+DIRECTORYSTRING_new                     894	1_1_0	EXIST::FUNCTION:
+ERR_load_ASYNC_strings                  895	1_1_0	EXIST::FUNCTION:
+EVP_bf_cfb64                            896	1_1_0	EXIST::FUNCTION:BF
+PKCS7_sign_add_signer                   897	1_1_0	EXIST::FUNCTION:
+X509_print_ex                           898	1_1_0	EXIST::FUNCTION:
+PKCS7_add_recipient                     899	1_1_0	EXIST::FUNCTION:
+OCSP_SINGLERESP_add_ext                 900	1_1_0	EXIST::FUNCTION:OCSP
+d2i_X509_SIG                            901	1_1_0	EXIST::FUNCTION:
+X509_NAME_set                           902	1_1_0	EXIST::FUNCTION:
+OPENSSL_sk_pop                          903	1_1_0	EXIST::FUNCTION:
+ENGINE_register_ciphers                 904	1_1_0	EXIST::FUNCTION:ENGINE
+PKCS5_pbe2_set_iv                       905	1_1_0	EXIST::FUNCTION:
+ASN1_add_stable_module                  906	1_1_0	EXIST::FUNCTION:
+EVP_camellia_128_cbc                    907	1_1_0	EXIST::FUNCTION:CAMELLIA
+COMP_zlib                               908	1_1_0	EXIST::FUNCTION:COMP
+EVP_read_pw_string                      909	1_1_0	EXIST::FUNCTION:
+i2d_ASN1_NULL                           910	1_1_0	EXIST::FUNCTION:
+DES_encrypt1                            911	1_1_0	EXIST::FUNCTION:DES
+BN_mod_lshift1_quick                    912	1_1_0	EXIST::FUNCTION:
+BN_get_rfc3526_prime_6144               913	1_1_0	EXIST::FUNCTION:
+OBJ_obj2txt                             914	1_1_0	EXIST::FUNCTION:
+UI_set_result                           915	1_1_0	EXIST::FUNCTION:
+EVP_EncodeUpdate                        916	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_X509_CRL                  917	1_1_0	EXIST::FUNCTION:
+BN_cmp                                  918	1_1_0	EXIST::FUNCTION:
+CT_POLICY_EVAL_CTX_get0_log_store       919	1_1_0	EXIST::FUNCTION:CT
+CONF_set_default_method                 920	1_1_0	EXIST::FUNCTION:
+ASN1_PCTX_get_nm_flags                  921	1_1_0	EXIST::FUNCTION:
+X509_add1_ext_i2d                       922	1_1_0	EXIST::FUNCTION:
+i2d_PKCS7_RECIP_INFO                    924	1_1_0	EXIST::FUNCTION:
+PKCS1_MGF1                              925	1_1_0	EXIST::FUNCTION:RSA
+BIO_vsnprintf                           926	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get0_current_issuer      927	1_1_0	EXIST::FUNCTION:
+CRYPTO_secure_malloc_initialized        928	1_1_0	EXIST::FUNCTION:
+o2i_SCT_LIST                            929	1_1_0	EXIST::FUNCTION:CT
+ASN1_PCTX_get_cert_flags                930	1_1_0	EXIST::FUNCTION:
+X509at_add1_attr_by_NID                 931	1_1_0	EXIST::FUNCTION:
+DHparams_dup                            932	1_1_0	EXIST::FUNCTION:DH
+X509_get_ext                            933	1_1_0	EXIST::FUNCTION:
+X509_issuer_and_serial_hash             934	1_1_0	EXIST::FUNCTION:
+ASN1_BMPSTRING_it                       935	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_BMPSTRING_it                       935	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+PEM_read_EC_PUBKEY                      936	1_1_0	EXIST::FUNCTION:EC,STDIO
+d2i_ASN1_IA5STRING                      937	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_ext_free                    938	1_1_0	EXIST::FUNCTION:TS
+i2d_X509_CRL_fp                         939	1_1_0	EXIST::FUNCTION:STDIO
+PKCS7_get0_signers                      940	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_set_ex_data              941	1_1_0	EXIST::FUNCTION:
+TS_VERIFY_CTS_set_certs                 942	1_1_0	EXIST::FUNCTION:TS
+BN_MONT_CTX_copy                        943	1_1_0	EXIST::FUNCTION:
+OPENSSL_INIT_new                        945	1_1_0	EXIST::FUNCTION:
+TS_ACCURACY_dup                         946	1_1_0	EXIST::FUNCTION:TS
+i2d_ECPrivateKey                        947	1_1_0	EXIST::FUNCTION:EC
+X509_NAME_ENTRY_create_by_OBJ           948	1_1_0	EXIST::FUNCTION:
+TS_VERIFY_CTX_cleanup                   949	1_1_0	EXIST::FUNCTION:TS
+ASN1_INTEGER_get                        950	1_1_0	EXIST::FUNCTION:
+ASN1_PRINTABLE_it                       951	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_PRINTABLE_it                       951	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+EVP_VerifyFinal                         952	1_1_0	EXIST::FUNCTION:
+TS_ASN1_INTEGER_print_bio               953	1_1_0	EXIST::FUNCTION:TS
+X509_NAME_ENTRY_set_object              954	1_1_0	EXIST::FUNCTION:
+BIO_s_socket                            955	1_1_0	EXIST::FUNCTION:SOCK
+EVP_rc5_32_12_16_ecb                    956	1_1_0	EXIST::FUNCTION:RC5
+i2d_PKCS8_bio                           957	1_1_0	EXIST::FUNCTION:
+v2i_ASN1_BIT_STRING                     958	1_1_0	EXIST::FUNCTION:
+PKEY_USAGE_PERIOD_new                   959	1_1_0	EXIST::FUNCTION:
+OBJ_NAME_init                           960	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_set_keygen                961	1_1_0	EXIST::FUNCTION:
+RSA_PSS_PARAMS_new                      962	1_1_0	EXIST::FUNCTION:RSA
+RSA_sign                                963	1_1_0	EXIST::FUNCTION:RSA
+EVP_DigestVerifyFinal                   964	1_1_0	EXIST::FUNCTION:
+d2i_RSA_PUBKEY_bio                      965	1_1_0	EXIST::FUNCTION:RSA
+TS_RESP_dup                             966	1_1_0	EXIST::FUNCTION:TS
+ERR_set_error_data                      967	1_1_0	EXIST::FUNCTION:
+BN_RECP_CTX_new                         968	1_1_0	EXIST::FUNCTION:
+DES_options                             969	1_1_0	EXIST::FUNCTION:DES
+IPAddressChoice_it                      970	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:RFC3779
+IPAddressChoice_it                      970	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:RFC3779
+ASN1_UNIVERSALSTRING_it                 971	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_UNIVERSALSTRING_it                 971	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+d2i_DSAPublicKey                        972	1_1_0	EXIST::FUNCTION:DSA
+ENGINE_get_name                         973	1_1_0	EXIST::FUNCTION:ENGINE
+CRYPTO_THREAD_read_lock                 974	1_1_0	EXIST::FUNCTION:
+ASIdentifierChoice_free                 975	1_1_0	EXIST::FUNCTION:RFC3779
+BIO_dgram_sctp_msg_waiting              976	1_1_0	EXIST::FUNCTION:DGRAM,SCTP
+BN_is_bit_set                           978	1_1_0	EXIST::FUNCTION:
+AES_ofb128_encrypt                      979	1_1_0	EXIST::FUNCTION:
+X509_STORE_add_lookup                   980	1_1_0	EXIST::FUNCTION:
+ASN1_GENERALSTRING_new                  981	1_1_0	EXIST::FUNCTION:
+IDEA_options                            982	1_1_0	EXIST::FUNCTION:IDEA
+d2i_X509_REQ                            983	1_1_0	EXIST::FUNCTION:
+i2d_TS_STATUS_INFO                      984	1_1_0	EXIST::FUNCTION:TS
+X509_PURPOSE_get_by_id                  985	1_1_0	EXIST::FUNCTION:
+X509_get1_ocsp                          986	1_1_0	EXIST::FUNCTION:
+ISSUING_DIST_POINT_free                 987	1_1_0	EXIST::FUNCTION:
+ASN1_UTCTIME_free                       988	1_1_0	EXIST::FUNCTION:
+ERR_load_TS_strings                     989	1_1_0	EXIST::FUNCTION:TS
+BN_nist_mod_func                        990	1_1_0	EXIST::FUNCTION:
+OCSP_ONEREQ_new                         991	1_1_0	EXIST::FUNCTION:OCSP
+DSA_SIG_new                             992	1_1_0	EXIST::FUNCTION:DSA
+DH_get_default_method                   993	1_1_0	EXIST::FUNCTION:DH
+PEM_proc_type                           994	1_1_0	EXIST::FUNCTION:
+BIO_printf                              995	1_1_0	EXIST::FUNCTION:
+a2i_IPADDRESS                           996	1_1_0	EXIST::FUNCTION:
+ERR_peek_error_line_data                997	1_1_0	EXIST::FUNCTION:
+ERR_unload_strings                      998	1_1_0	EXIST::FUNCTION:
+SEED_cfb128_encrypt                     999	1_1_0	EXIST::FUNCTION:SEED
+ASN1_BIT_STRING_it                      1000	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_BIT_STRING_it                      1000	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+PKCS12_decrypt_skey                     1001	1_1_0	EXIST::FUNCTION:
+ENGINE_register_EC                      1002	1_1_0	EXIST::FUNCTION:ENGINE
+OCSP_RESPONSE_new                       1003	1_1_0	EXIST::FUNCTION:OCSP
+CRYPTO_cbc128_encrypt                   1004	1_1_0	EXIST::FUNCTION:
+i2d_RSAPublicKey_bio                    1005	1_1_0	EXIST::FUNCTION:RSA
+X509_chain_check_suiteb                 1006	1_1_0	EXIST::FUNCTION:
+i2d_OCSP_REQUEST                        1007	1_1_0	EXIST::FUNCTION:OCSP
+BN_X931_generate_Xpq                    1008	1_1_0	EXIST::FUNCTION:
+ASN1_item_digest                        1009	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_set_trust             1010	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_error                1011	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_set_encrypt               1012	1_1_0	EXIST::FUNCTION:
+ASN1_UTCTIME_it                         1013	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_UTCTIME_it                         1013	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+i2d_DSA_PUBKEY_fp                       1014	1_1_0	EXIST::FUNCTION:DSA,STDIO
+X509at_get_attr_by_OBJ                  1015	1_1_0	EXIST::FUNCTION:
+EVP_MD_CTX_copy_ex                      1016	1_1_0	EXIST::FUNCTION:
+UI_dup_error_string                     1017	1_1_0	EXIST::FUNCTION:
+OPENSSL_LH_num_items                    1018	1_1_0	EXIST::FUNCTION:
+ASN1_INTEGER_cmp                        1020	1_1_0	EXIST::FUNCTION:
+X509_NAME_entry_count                   1021	1_1_0	EXIST::FUNCTION:
+UI_method_set_closer                    1022	1_1_0	EXIST::FUNCTION:
+OPENSSL_LH_get_down_load                1023	1_1_0	EXIST::FUNCTION:
+EVP_md4                                 1024	1_1_0	EXIST::FUNCTION:MD4
+X509_set_subject_name                   1025	1_1_0	EXIST::FUNCTION:
+i2d_PKCS8PrivateKey_nid_bio             1026	1_1_0	EXIST::FUNCTION:
+ERR_put_error                           1027	1_1_0	EXIST::FUNCTION:
+ERR_add_error_data                      1028	1_1_0	EXIST::FUNCTION:
+X509_ALGORS_it                          1029	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_ALGORS_it                          1029	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+MD5_Update                              1030	1_1_0	EXIST::FUNCTION:MD5
+X509_policy_check                       1031	1_1_0	EXIST::FUNCTION:
+X509_CRL_METHOD_new                     1032	1_1_0	EXIST::FUNCTION:
+ASN1_ANY_it                             1033	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_ANY_it                             1033	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+d2i_DSA_SIG                             1034	1_1_0	EXIST::FUNCTION:DSA
+DH_free                                 1035	1_1_0	EXIST::FUNCTION:DH
+ENGINE_register_all_DSA                 1036	1_1_0	EXIST::FUNCTION:ENGINE
+TS_REQ_set_msg_imprint                  1037	1_1_0	EXIST::FUNCTION:TS
+BN_mod_sub_quick                        1038	1_1_0	EXIST::FUNCTION:
+SMIME_write_CMS                         1039	1_1_0	EXIST::FUNCTION:CMS
+i2d_DSAPublicKey                        1040	1_1_0	EXIST::FUNCTION:DSA
+SMIME_text                              1042	1_1_0	EXIST::FUNCTION:
+PKCS7_add_recipient_info                1043	1_1_0	EXIST::FUNCTION:
+BN_get_word                             1044	1_1_0	EXIST::FUNCTION:
+EVP_CipherFinal                         1045	1_1_0	EXIST::FUNCTION:
+i2d_X509_bio                            1046	1_1_0	EXIST::FUNCTION:
+X509_EXTENSION_new                      1047	1_1_0	EXIST::FUNCTION:
+X509_getm_notAfter                      1048	1_1_0	EXIST::FUNCTION:
+X509_ALGOR_dup                          1049	1_1_0	EXIST::FUNCTION:
+d2i_X509_REQ_INFO                       1050	1_1_0	EXIST::FUNCTION:
+d2i_EC_PUBKEY_bio                       1051	1_1_0	EXIST::FUNCTION:EC
+X509_STORE_CTX_set_error                1052	1_1_0	EXIST::FUNCTION:
+EC_KEY_METHOD_set_keygen                1053	1_1_0	EXIST::FUNCTION:EC
+CRYPTO_free                             1054	1_1_0	EXIST::FUNCTION:
+BN_GF2m_mod_exp                         1055	1_1_0	EXIST::FUNCTION:EC2M
+OPENSSL_buf2hexstr                      1056	1_1_0	EXIST::FUNCTION:
+DES_encrypt2                            1057	1_1_0	EXIST::FUNCTION:DES
+DH_up_ref                               1058	1_1_0	EXIST::FUNCTION:DH
+RC2_ofb64_encrypt                       1059	1_1_0	EXIST::FUNCTION:RC2
+PKCS12_pbe_crypt                        1060	1_1_0	EXIST::FUNCTION:
+ASIdentifiers_free                      1061	1_1_0	EXIST::FUNCTION:RFC3779
+X509_VERIFY_PARAM_get0                  1062	1_1_0	EXIST::FUNCTION:
+EVP_MD_meth_get_input_blocksize         1063	1_1_0	EXIST::FUNCTION:
+TS_ACCURACY_get_micros                  1064	1_1_0	EXIST::FUNCTION:TS
+PKCS12_SAFEBAG_create_cert              1065	1_1_0	EXIST::FUNCTION:
+CRYPTO_mem_debug_malloc                 1066	1_1_0	EXIST::FUNCTION:CRYPTO_MDEBUG
+RAND_seed                               1067	1_1_0	EXIST::FUNCTION:
+NETSCAPE_SPKAC_free                     1068	1_1_0	EXIST::FUNCTION:
+X509_CRL_diff                           1069	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_set_flags             1070	1_1_0	EXIST::FUNCTION:
+X509_EXTENSION_set_data                 1071	1_1_0	EXIST::FUNCTION:
+ENGINE_get_EC                           1072	1_1_0	EXIST::FUNCTION:ENGINE
+ASN1_STRING_copy                        1073	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_encrypt_old                    1074	1_1_0	EXIST::FUNCTION:
+OPENSSL_LH_free                         1075	1_1_0	EXIST::FUNCTION:
+DES_is_weak_key                         1076	1_1_0	EXIST::FUNCTION:DES
+EVP_PKEY_verify                         1077	1_1_0	EXIST::FUNCTION:
+ERR_load_BIO_strings                    1078	1_1_0	EXIST::FUNCTION:
+BIO_nread                               1079	1_1_0	EXIST::FUNCTION:
+PEM_read_bio_RSAPrivateKey              1080	1_1_0	EXIST::FUNCTION:RSA
+OBJ_nid2obj                             1081	1_1_0	EXIST::FUNCTION:
+CRYPTO_ofb128_encrypt                   1082	1_1_0	EXIST::FUNCTION:
+ENGINE_set_init_function                1083	1_1_0	EXIST::FUNCTION:ENGINE
+NCONF_default                           1084	1_1_0	EXIST::FUNCTION:
+ENGINE_remove                           1085	1_1_0	EXIST::FUNCTION:ENGINE
+ASYNC_get_current_job                   1086	1_1_0	EXIST::FUNCTION:
+OBJ_nid2sn                              1087	1_1_0	EXIST::FUNCTION:
+X509_gmtime_adj                         1088	1_1_0	EXIST::FUNCTION:
+X509_add_ext                            1089	1_1_0	EXIST::FUNCTION:
+ENGINE_set_DSA                          1090	1_1_0	EXIST::FUNCTION:ENGINE
+EC_KEY_METHOD_set_sign                  1091	1_1_0	EXIST::FUNCTION:EC
+d2i_TS_MSG_IMPRINT                      1092	1_1_0	EXIST::FUNCTION:TS
+X509_print_ex_fp                        1093	1_1_0	EXIST::FUNCTION:STDIO
+ERR_load_PEM_strings                    1094	1_1_0	EXIST::FUNCTION:
+ENGINE_unregister_pkey_asn1_meths       1095	1_1_0	EXIST::FUNCTION:ENGINE
+IPAddressFamily_free                    1096	1_1_0	EXIST::FUNCTION:RFC3779
+UI_method_get_prompt_constructor        1097	1_1_0	EXIST::FUNCTION:
+ASN1_NULL_it                            1098	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_NULL_it                            1098	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+X509_REQ_get_pubkey                     1099	1_1_0	EXIST::FUNCTION:
+X509_CRL_set1_nextUpdate                1100	1_1_0	EXIST::FUNCTION:
+EVP_des_ede3_cfb64                      1101	1_1_0	EXIST::FUNCTION:DES
+BN_to_ASN1_INTEGER                      1102	1_1_0	EXIST::FUNCTION:
+EXTENDED_KEY_USAGE_free                 1103	1_1_0	EXIST::FUNCTION:
+PEM_read_bio_EC_PUBKEY                  1104	1_1_0	EXIST::FUNCTION:EC
+BN_MONT_CTX_set                         1105	1_1_0	EXIST::FUNCTION:
+TS_CONF_set_serial                      1106	1_1_0	EXIST::FUNCTION:TS
+X509_NAME_ENTRY_new                     1107	1_1_0	EXIST::FUNCTION:
+RSA_security_bits                       1108	1_1_0	EXIST::FUNCTION:RSA
+X509v3_addr_add_prefix                  1109	1_1_0	EXIST::FUNCTION:RFC3779
+X509_REQ_print_fp                       1110	1_1_0	EXIST::FUNCTION:STDIO
+ASN1_item_ex_new                        1111	1_1_0	EXIST::FUNCTION:
+BIO_s_datagram                          1112	1_1_0	EXIST::FUNCTION:DGRAM
+PEM_write_bio_PKCS8                     1113	1_1_0	EXIST::FUNCTION:
+ASN1_str2mask                           1114	1_1_0	EXIST::FUNCTION:
+ASN1_TYPE_get                           1115	1_1_0	EXIST::FUNCTION:
+i2d_X509_EXTENSIONS                     1116	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get0_store               1117	1_1_0	EXIST::FUNCTION:
+PKCS12_pack_p7data                      1118	1_1_0	EXIST::FUNCTION:
+RSA_print_fp                            1119	1_1_0	EXIST::FUNCTION:RSA,STDIO
+OPENSSL_INIT_set_config_appname         1120	1_1_0	EXIST::FUNCTION:STDIO
+EC_KEY_print_fp                         1121	1_1_0	EXIST::FUNCTION:EC,STDIO
+BIO_dup_chain                           1122	1_1_0	EXIST::FUNCTION:
+PKCS8_PRIV_KEY_INFO_it                  1123	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS8_PRIV_KEY_INFO_it                  1123	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+RSA_OAEP_PARAMS_free                    1124	1_1_0	EXIST::FUNCTION:RSA
+ASN1_item_new                           1125	1_1_0	EXIST::FUNCTION:
+CRYPTO_cts128_encrypt                   1126	1_1_0	EXIST::FUNCTION:
+RC2_encrypt                             1127	1_1_0	EXIST::FUNCTION:RC2
+PEM_write                               1128	1_1_0	EXIST::FUNCTION:STDIO
+EVP_CIPHER_meth_get_get_asn1_params     1129	1_1_0	EXIST::FUNCTION:
+i2d_OCSP_RESPBYTES                      1130	1_1_0	EXIST::FUNCTION:OCSP
+d2i_ASN1_UTF8STRING                     1131	1_1_0	EXIST::FUNCTION:
+EXTENDED_KEY_USAGE_it                   1132	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+EXTENDED_KEY_USAGE_it                   1132	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+EVP_CipherInit                          1133	1_1_0	EXIST::FUNCTION:
+PKCS12_add_safe                         1134	1_1_0	EXIST::FUNCTION:
+ENGINE_get_digest                       1135	1_1_0	EXIST::FUNCTION:ENGINE
+EC_GROUP_have_precompute_mult           1136	1_1_0	EXIST::FUNCTION:EC
+OPENSSL_gmtime                          1137	1_1_0	EXIST::FUNCTION:
+X509_set_issuer_name                    1138	1_1_0	EXIST::FUNCTION:
+RSA_new                                 1139	1_1_0	EXIST::FUNCTION:RSA
+ASN1_STRING_set_by_NID                  1140	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_PKCS7                     1141	1_1_0	EXIST::FUNCTION:
+MDC2_Final                              1142	1_1_0	EXIST::FUNCTION:MDC2
+SMIME_crlf_copy                         1143	1_1_0	EXIST::FUNCTION:
+OCSP_REQUEST_get_ext_count              1144	1_1_0	EXIST::FUNCTION:OCSP
+OCSP_REQ_CTX_new                        1145	1_1_0	EXIST::FUNCTION:OCSP
+X509_load_cert_crl_file                 1146	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_new_mac_key                    1147	1_1_0	EXIST::FUNCTION:
+DIST_POINT_new                          1148	1_1_0	EXIST::FUNCTION:
+BN_is_prime_fasttest                    1149	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_0_9_8
+EC_POINT_dup                            1150	1_1_0	EXIST::FUNCTION:EC
+PKCS5_v2_scrypt_keyivgen                1151	1_1_0	EXIST::FUNCTION:SCRYPT
+X509_STORE_CTX_set0_param               1152	1_1_0	EXIST::FUNCTION:
+DES_check_key_parity                    1153	1_1_0	EXIST::FUNCTION:DES
+EVP_aes_256_ocb                         1154	1_1_0	EXIST::FUNCTION:OCB
+X509_VAL_free                           1155	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get1_certs               1156	1_1_0	EXIST::FUNCTION:
+PEM_write_RSA_PUBKEY                    1157	1_1_0	EXIST::FUNCTION:RSA,STDIO
+PKCS12_SAFEBAG_get0_p8inf               1158	1_1_0	EXIST::FUNCTION:
+X509_CRL_set_issuer_name                1159	1_1_0	EXIST::FUNCTION:
+CMS_EncryptedData_encrypt               1160	1_1_0	EXIST::FUNCTION:CMS
+ASN1_tag2str                            1161	1_1_0	EXIST::FUNCTION:
+BN_zero_ex                              1162	1_1_0	EXIST::FUNCTION:
+X509_NAME_dup                           1163	1_1_0	EXIST::FUNCTION:
+SCT_LIST_print                          1164	1_1_0	EXIST::FUNCTION:CT
+NOTICEREF_it                            1165	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+NOTICEREF_it                            1165	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+CMS_add0_crl                            1166	1_1_0	EXIST::FUNCTION:CMS
+d2i_DSAparams                           1167	1_1_0	EXIST::FUNCTION:DSA
+EVP_CIPHER_CTX_set_app_data             1168	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_param_to_asn1                1169	1_1_0	EXIST::FUNCTION:
+TS_CONF_set_certs                       1170	1_1_0	EXIST::FUNCTION:TS
+BN_security_bits                        1171	1_1_0	EXIST::FUNCTION:
+X509_PURPOSE_get0_name                  1172	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_get_serial                  1173	1_1_0	EXIST::FUNCTION:TS
+ASN1_PCTX_get_str_flags                 1174	1_1_0	EXIST::FUNCTION:
+SHA256                                  1175	1_1_0	EXIST::FUNCTION:
+X509_LOOKUP_hash_dir                    1176	1_1_0	EXIST::FUNCTION:
+ASN1_BIT_STRING_check                   1177	1_1_0	EXIST::FUNCTION:
+ENGINE_set_default_RAND                 1178	1_1_0	EXIST::FUNCTION:ENGINE
+BIO_connect                             1179	1_1_0	EXIST::FUNCTION:SOCK
+TS_TST_INFO_add_ext                     1180	1_1_0	EXIST::FUNCTION:TS
+EVP_aes_192_ccm                         1181	1_1_0	EXIST::FUNCTION:
+X509V3_add_value                        1182	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_CTX_set0_keygen_info           1183	1_1_0	EXIST::FUNCTION:
+ENGINE_unregister_digests               1184	1_1_0	EXIST::FUNCTION:ENGINE
+IPAddressOrRange_new                    1185	1_1_0	EXIST::FUNCTION:RFC3779
+EVP_aes_256_ofb                         1186	1_1_0	EXIST::FUNCTION:
+CRYPTO_mem_debug_push                   1187	1_1_0	EXIST::FUNCTION:CRYPTO_MDEBUG
+X509_PKEY_new                           1188	1_1_0	EXIST::FUNCTION:
+X509_get_key_usage                      1189	1_1_0	EXIST::FUNCTION:
+X509_ATTRIBUTE_create_by_txt            1190	1_1_0	EXIST::FUNCTION:
+PEM_SignFinal                           1191	1_1_0	EXIST::FUNCTION:
+PEM_bytes_read_bio                      1192	1_1_0	EXIST::FUNCTION:
+X509_signature_dump                     1193	1_1_0	EXIST::FUNCTION:
+TS_RESP_CTX_set_def_policy              1194	1_1_0	EXIST::FUNCTION:TS
+RAND_pseudo_bytes                       1195	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0
+DES_ofb_encrypt                         1196	1_1_0	EXIST::FUNCTION:DES
+EVP_add_digest                          1197	1_1_0	EXIST::FUNCTION:
+ASN1_item_sign_ctx                      1198	1_1_0	EXIST::FUNCTION:
+BIO_dump_indent_cb                      1199	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_set_depth             1200	1_1_0	EXIST::FUNCTION:
+DES_ecb3_encrypt                        1201	1_1_0	EXIST::FUNCTION:DES
+OBJ_obj2nid                             1202	1_1_0	EXIST::FUNCTION:
+PKCS12_SAFEBAG_free                     1203	1_1_0	EXIST::FUNCTION:
+EVP_cast5_cfb64                         1204	1_1_0	EXIST::FUNCTION:CAST
+OPENSSL_uni2asc                         1205	1_1_0	EXIST::FUNCTION:
+SCT_validation_status_string            1206	1_1_0	EXIST::FUNCTION:CT
+PKCS7_add_attribute                     1207	1_1_0	EXIST::FUNCTION:
+ENGINE_register_DSA                     1208	1_1_0	EXIST::FUNCTION:ENGINE
+OPENSSL_LH_node_stats                   1209	1_1_0	EXIST::FUNCTION:STDIO
+X509_policy_tree_free                   1210	1_1_0	EXIST::FUNCTION:
+EC_GFp_simple_method                    1211	1_1_0	EXIST::FUNCTION:EC
+X509_it                                 1212	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_it                                 1212	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+d2i_PROXY_POLICY                        1213	1_1_0	EXIST::FUNCTION:
+MDC2_Update                             1214	1_1_0	EXIST::FUNCTION:MDC2
+EC_KEY_new_by_curve_name                1215	1_1_0	EXIST::FUNCTION:EC
+X509_CRL_free                           1216	1_1_0	EXIST::FUNCTION:
+i2d_PKCS7_SIGN_ENVELOPE                 1217	1_1_0	EXIST::FUNCTION:
+OCSP_CERTSTATUS_it                      1218	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:OCSP
+OCSP_CERTSTATUS_it                      1218	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:OCSP
+BIO_f_reliable                          1219	1_1_0	EXIST::FUNCTION:
+OCSP_resp_count                         1220	1_1_0	EXIST::FUNCTION:OCSP
+i2d_X509_AUX                            1221	1_1_0	EXIST::FUNCTION:
+RSA_verify_PKCS1_PSS_mgf1               1222	1_1_0	EXIST::FUNCTION:RSA
+X509_time_adj                           1223	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_asn1_find_str                  1224	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_get_flags             1225	1_1_0	EXIST::FUNCTION:
+OPENSSL_DIR_end                         1226	1_1_0	EXIST::FUNCTION:
+EC_GROUP_new                            1227	1_1_0	EXIST::FUNCTION:EC
+CMS_SignerInfo_get0_pkey_ctx            1228	1_1_0	EXIST::FUNCTION:CMS
+d2i_ASN1_PRINTABLESTRING                1229	1_1_0	EXIST::FUNCTION:
+CMS_RecipientInfo_ktri_cert_cmp         1230	1_1_0	EXIST::FUNCTION:CMS
+CMS_decrypt_set1_pkey                   1231	1_1_0	EXIST::FUNCTION:CMS
+PKCS7_RECIP_INFO_set                    1232	1_1_0	EXIST::FUNCTION:
+EC_POINT_is_on_curve                    1233	1_1_0	EXIST::FUNCTION:EC
+PKCS12_add_cert                         1234	1_1_0	EXIST::FUNCTION:
+X509_NAME_hash_old                      1235	1_1_0	EXIST::FUNCTION:
+PBKDF2PARAM_free                        1236	1_1_0	EXIST::FUNCTION:
+i2d_CMS_ContentInfo                     1237	1_1_0	EXIST::FUNCTION:CMS
+EVP_CIPHER_meth_set_ctrl                1238	1_1_0	EXIST::FUNCTION:
+RSA_public_decrypt                      1239	1_1_0	EXIST::FUNCTION:RSA
+ENGINE_get_id                           1240	1_1_0	EXIST::FUNCTION:ENGINE
+PKCS12_item_decrypt_d2i                 1241	1_1_0	EXIST::FUNCTION:
+PEM_read_bio_DSAparams                  1242	1_1_0	EXIST::FUNCTION:DSA
+X509_CRL_cmp                            1243	1_1_0	EXIST::FUNCTION:
+DSO_METHOD_openssl                      1244	1_1_0	EXIST::FUNCTION:
+d2i_PrivateKey_fp                       1245	1_1_0	EXIST::FUNCTION:STDIO
+i2d_NETSCAPE_CERT_SEQUENCE              1246	1_1_0	EXIST::FUNCTION:
+EC_POINT_oct2point                      1248	1_1_0	EXIST::FUNCTION:EC
+EVP_CIPHER_CTX_buf_noconst              1249	1_1_0	EXIST::FUNCTION:
+OPENSSL_DIR_read                        1250	1_1_0	EXIST::FUNCTION:
+CMS_add_smimecap                        1251	1_1_0	EXIST::FUNCTION:CMS
+X509_check_email                        1252	1_1_0	EXIST::FUNCTION:
+CRYPTO_cts128_decrypt_block             1253	1_1_0	EXIST::FUNCTION:
+UI_method_get_opener                    1254	1_1_0	EXIST::FUNCTION:
+EVP_aes_192_gcm                         1255	1_1_0	EXIST::FUNCTION:
+TS_CONF_set_tsa_name                    1256	1_1_0	EXIST::FUNCTION:TS
+X509_email_free                         1257	1_1_0	EXIST::FUNCTION:
+BIO_get_callback                        1258	1_1_0	EXIST::FUNCTION:
+OPENSSL_sk_shift                        1259	1_1_0	EXIST::FUNCTION:
+i2d_X509_REVOKED                        1260	1_1_0	EXIST::FUNCTION:
+CMS_sign                                1261	1_1_0	EXIST::FUNCTION:CMS
+X509_STORE_add_cert                     1262	1_1_0	EXIST::FUNCTION:
+EC_GROUP_precompute_mult                1263	1_1_0	EXIST::FUNCTION:EC
+d2i_DISPLAYTEXT                         1265	1_1_0	EXIST::FUNCTION:
+HMAC_CTX_copy                           1266	1_1_0	EXIST::FUNCTION:
+CRYPTO_gcm128_init                      1267	1_1_0	EXIST::FUNCTION:
+i2d_X509_CINF                           1268	1_1_0	EXIST::FUNCTION:
+X509_REVOKED_delete_ext                 1269	1_1_0	EXIST::FUNCTION:
+RC5_32_cfb64_encrypt                    1270	1_1_0	EXIST::FUNCTION:RC5
+TS_REQ_set_cert_req                     1271	1_1_0	EXIST::FUNCTION:TS
+TXT_DB_get_by_index                     1272	1_1_0	EXIST::FUNCTION:
+X509_check_ca                           1273	1_1_0	EXIST::FUNCTION:
+DH_get_2048_224                         1274	1_1_0	EXIST::FUNCTION:DH
+X509_http_nbio                          1275	1_1_0	EXIST::FUNCTION:OCSP
+i2d_AUTHORITY_INFO_ACCESS               1276	1_1_0	EXIST::FUNCTION:
+EVP_get_cipherbyname                    1277	1_1_0	EXIST::FUNCTION:
+CONF_dump_fp                            1278	1_1_0	EXIST::FUNCTION:STDIO
+d2i_DIST_POINT_NAME                     1279	1_1_0	EXIST::FUNCTION:
+ASN1_INTEGER_set_int64                  1280	1_1_0	EXIST::FUNCTION:
+ASN1_TIME_free                          1281	1_1_0	EXIST::FUNCTION:
+i2o_SCT_LIST                            1282	1_1_0	EXIST::FUNCTION:CT
+AES_encrypt                             1283	1_1_0	EXIST::FUNCTION:
+MD5_Init                                1284	1_1_0	EXIST::FUNCTION:MD5
+UI_add_error_string                     1285	1_1_0	EXIST::FUNCTION:
+X509_TRUST_cleanup                      1286	1_1_0	EXIST::FUNCTION:
+PEM_read_X509                           1287	1_1_0	EXIST::FUNCTION:STDIO
+EC_KEY_new_method                       1288	1_1_0	EXIST::FUNCTION:EC
+i2d_RSAPublicKey_fp                     1289	1_1_0	EXIST::FUNCTION:RSA,STDIO
+CRYPTO_ctr128_encrypt_ctr32             1290	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_move_peername         1291	1_1_0	EXIST::FUNCTION:
+OCSP_SINGLERESP_it                      1292	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:OCSP
+OCSP_SINGLERESP_it                      1292	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:OCSP
+BN_num_bits                             1293	1_1_0	EXIST::FUNCTION:
+X509_CRL_METHOD_free                    1294	1_1_0	EXIST::FUNCTION:
+PEM_read_NETSCAPE_CERT_SEQUENCE         1295	1_1_0	EXIST::FUNCTION:STDIO
+OPENSSL_load_builtin_modules            1296	1_1_0	EXIST::FUNCTION:
+X509_set_version                        1297	1_1_0	EXIST::FUNCTION:
+i2d_EC_PUBKEY_bio                       1298	1_1_0	EXIST::FUNCTION:EC
+X509_REQ_get_attr_count                 1299	1_1_0	EXIST::FUNCTION:
+CMS_set1_signers_certs                  1300	1_1_0	EXIST::FUNCTION:CMS
+TS_ACCURACY_free                        1301	1_1_0	EXIST::FUNCTION:TS
+PEM_write_DSA_PUBKEY                    1302	1_1_0	EXIST::FUNCTION:DSA,STDIO
+BN_rshift1                              1303	1_1_0	EXIST::FUNCTION:
+i2d_PKCS7_ENVELOPE                      1304	1_1_0	EXIST::FUNCTION:
+PBKDF2PARAM_it                          1305	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PBKDF2PARAM_it                          1305	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+UI_get_result_maxsize                   1306	1_1_0	EXIST::FUNCTION:
+PBEPARAM_it                             1307	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PBEPARAM_it                             1307	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+TS_ACCURACY_set_seconds                 1308	1_1_0	EXIST::FUNCTION:TS
+UI_get0_action_string                   1309	1_1_0	EXIST::FUNCTION:
+RC2_decrypt                             1310	1_1_0	EXIST::FUNCTION:RC2
+OPENSSL_atexit                          1311	1_1_0	EXIST::FUNCTION:
+CMS_add_standard_smimecap               1312	1_1_0	EXIST::FUNCTION:CMS
+PKCS7_add_attrib_content_type           1313	1_1_0	EXIST::FUNCTION:
+BN_BLINDING_set_flags                   1314	1_1_0	EXIST::FUNCTION:
+ERR_peek_last_error                     1315	1_1_0	EXIST::FUNCTION:
+ENGINE_set_cmd_defns                    1316	1_1_0	EXIST::FUNCTION:ENGINE
+d2i_ASN1_NULL                           1317	1_1_0	EXIST::FUNCTION:
+RAND_event                              1318	1_1_0	EXIST:_WIN32:FUNCTION:DEPRECATEDIN_1_1_0
+i2d_PKCS12_fp                           1319	1_1_0	EXIST::FUNCTION:STDIO
+EVP_PKEY_meth_get_init                  1320	1_1_0	EXIST::FUNCTION:
+X509_check_trust                        1321	1_1_0	EXIST::FUNCTION:
+b2i_PrivateKey                          1322	1_1_0	EXIST::FUNCTION:DSA
+HMAC_Init_ex                            1323	1_1_0	EXIST::FUNCTION:
+SMIME_read_CMS                          1324	1_1_0	EXIST::FUNCTION:CMS
+X509_subject_name_cmp                   1325	1_1_0	EXIST::FUNCTION:
+CRYPTO_ocb128_finish                    1326	1_1_0	EXIST::FUNCTION:OCB
+EVP_CIPHER_do_all                       1327	1_1_0	EXIST::FUNCTION:
+POLICY_MAPPINGS_it                      1328	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+POLICY_MAPPINGS_it                      1328	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+SCT_set0_log_id                         1329	1_1_0	EXIST::FUNCTION:CT
+CRYPTO_cfb128_encrypt                   1330	1_1_0	EXIST::FUNCTION:
+RSA_padding_add_PKCS1_type_2            1331	1_1_0	EXIST::FUNCTION:RSA
+TS_CONF_set_signer_cert                 1332	1_1_0	EXIST::FUNCTION:TS
+i2d_ASN1_OBJECT                         1333	1_1_0	EXIST::FUNCTION:
+d2i_PKCS8_PRIV_KEY_INFO_bio             1334	1_1_0	EXIST::FUNCTION:
+X509V3_add_value_int                    1335	1_1_0	EXIST::FUNCTION:
+TS_REQ_set_nonce                        1336	1_1_0	EXIST::FUNCTION:TS
+Camellia_ctr128_encrypt                 1337	1_1_0	EXIST::FUNCTION:CAMELLIA
+X509_LOOKUP_new                         1338	1_1_0	EXIST::FUNCTION:
+AUTHORITY_INFO_ACCESS_new               1339	1_1_0	EXIST::FUNCTION:
+CRYPTO_mem_leaks_fp                     1340	1_1_0	EXIST::FUNCTION:CRYPTO_MDEBUG,STDIO
+DES_set_key_unchecked                   1341	1_1_0	EXIST::FUNCTION:DES
+BN_free                                 1342	1_1_0	EXIST::FUNCTION:
+EVP_aes_128_cfb1                        1343	1_1_0	EXIST::FUNCTION:
+EC_KEY_get0_group                       1344	1_1_0	EXIST::FUNCTION:EC
+PEM_write_bio_CMS_stream                1345	1_1_0	EXIST::FUNCTION:CMS
+BIO_f_linebuffer                        1346	1_1_0	EXIST::FUNCTION:
+ASN1_item_d2i_bio                       1347	1_1_0	EXIST::FUNCTION:
+ENGINE_get_flags                        1348	1_1_0	EXIST::FUNCTION:ENGINE
+OCSP_resp_find                          1349	1_1_0	EXIST::FUNCTION:OCSP
+OPENSSL_LH_node_usage_stats_bio         1350	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_encrypt                        1351	1_1_0	EXIST::FUNCTION:
+CRYPTO_cfb128_8_encrypt                 1352	1_1_0	EXIST::FUNCTION:
+SXNET_get_id_INTEGER                    1353	1_1_0	EXIST::FUNCTION:
+CRYPTO_clear_free                       1354	1_1_0	EXIST::FUNCTION:
+i2v_GENERAL_NAME                        1355	1_1_0	EXIST::FUNCTION:
+PKCS7_ENC_CONTENT_new                   1356	1_1_0	EXIST::FUNCTION:
+CRYPTO_realloc                          1357	1_1_0	EXIST::FUNCTION:
+BIO_ctrl_pending                        1358	1_1_0	EXIST::FUNCTION:
+EVP_MD_meth_new                         1360	1_1_0	EXIST::FUNCTION:
+X509_sign_ctx                           1361	1_1_0	EXIST::FUNCTION:
+BN_is_odd                               1362	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_current_cert         1363	1_1_0	EXIST::FUNCTION:
+ASN1_ENUMERATED_get_int64               1364	1_1_0	EXIST::FUNCTION:
+ASN1_SCTX_get_app_data                  1365	1_1_0	EXIST::FUNCTION:
+X509_get_default_cert_file_env          1366	1_1_0	EXIST::FUNCTION:
+X509v3_addr_validate_resource_set       1367	1_1_0	EXIST::FUNCTION:RFC3779
+d2i_X509_VAL                            1368	1_1_0	EXIST::FUNCTION:
+CRYPTO_gcm128_decrypt_ctr32             1370	1_1_0	EXIST::FUNCTION:
+DHparams_print                          1371	1_1_0	EXIST::FUNCTION:DH
+OPENSSL_sk_unshift                      1372	1_1_0	EXIST::FUNCTION:
+BN_GENCB_set_old                        1373	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_X509                      1374	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_asn1_free                      1375	1_1_0	EXIST::FUNCTION:
+ENGINE_unregister_DH                    1376	1_1_0	EXIST::FUNCTION:ENGINE
+PROXY_CERT_INFO_EXTENSION_it            1377	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PROXY_CERT_INFO_EXTENSION_it            1377	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+CT_POLICY_EVAL_CTX_set1_cert            1378	1_1_0	EXIST::FUNCTION:CT
+X509_NAME_hash                          1379	1_1_0	EXIST::FUNCTION:
+SCT_set_timestamp                       1380	1_1_0	EXIST::FUNCTION:CT
+UI_new                                  1381	1_1_0	EXIST::FUNCTION:
+TS_REQ_get_msg_imprint                  1382	1_1_0	EXIST::FUNCTION:TS
+i2d_PKCS12_BAGS                         1383	1_1_0	EXIST::FUNCTION:
+CERTIFICATEPOLICIES_free                1385	1_1_0	EXIST::FUNCTION:
+X509V3_get_section                      1386	1_1_0	EXIST::FUNCTION:
+BIO_parse_hostserv                      1387	1_1_0	EXIST::FUNCTION:SOCK
+EVP_PKEY_meth_set_cleanup               1388	1_1_0	EXIST::FUNCTION:
+PROXY_CERT_INFO_EXTENSION_free          1389	1_1_0	EXIST::FUNCTION:
+X509_dup                                1390	1_1_0	EXIST::FUNCTION:
+EDIPARTYNAME_free                       1391	1_1_0	EXIST::FUNCTION:
+X509_CRL_add0_revoked                   1393	1_1_0	EXIST::FUNCTION:
+GENERAL_NAME_set0_value                 1394	1_1_0	EXIST::FUNCTION:
+X509_ATTRIBUTE_dup                      1395	1_1_0	EXIST::FUNCTION:
+EC_GROUP_check_discriminant             1396	1_1_0	EXIST::FUNCTION:EC
+PKCS12_MAC_DATA_free                    1397	1_1_0	EXIST::FUNCTION:
+PEM_read_bio_PrivateKey                 1398	1_1_0	EXIST::FUNCTION:
+d2i_PKCS7_ENCRYPT                       1399	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_CTX_ctrl                       1400	1_1_0	EXIST::FUNCTION:
+X509_REQ_set_pubkey                     1401	1_1_0	EXIST::FUNCTION:
+UI_create_method                        1402	1_1_0	EXIST::FUNCTION:
+X509_REQ_add_extensions_nid             1403	1_1_0	EXIST::FUNCTION:
+PEM_X509_INFO_write_bio                 1404	1_1_0	EXIST::FUNCTION:
+BIO_dump_cb                             1405	1_1_0	EXIST::FUNCTION:
+v2i_GENERAL_NAMES                       1406	1_1_0	EXIST::FUNCTION:
+EVP_des_ede3_ofb                        1407	1_1_0	EXIST::FUNCTION:DES
+EVP_MD_meth_get_cleanup                 1408	1_1_0	EXIST::FUNCTION:
+SRP_Calc_server_key                     1409	1_1_0	EXIST::FUNCTION:SRP
+BN_mod_exp_simple                       1410	1_1_0	EXIST::FUNCTION:
+BIO_set_ex_data                         1411	1_1_0	EXIST::FUNCTION:
+SHA512                                  1412	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_explicit_policy      1413	1_1_0	EXIST::FUNCTION:
+EVP_DecodeBlock                         1414	1_1_0	EXIST::FUNCTION:
+OCSP_REQ_CTX_http                       1415	1_1_0	EXIST::FUNCTION:OCSP
+EVP_MD_CTX_reset                        1416	1_1_0	EXIST::FUNCTION:
+X509_NAME_new                           1417	1_1_0	EXIST::FUNCTION:
+ASN1_item_pack                          1418	1_1_0	EXIST::FUNCTION:
+ASN1_BIT_STRING_set_asc                 1419	1_1_0	EXIST::FUNCTION:
+d2i_GENERAL_NAME                        1420	1_1_0	EXIST::FUNCTION:
+i2d_ESS_CERT_ID                         1421	1_1_0	EXIST::FUNCTION:TS
+X509_TRUST_get_by_id                    1422	1_1_0	EXIST::FUNCTION:
+d2i_RSA_PUBKEY_fp                       1423	1_1_0	EXIST::FUNCTION:RSA,STDIO
+EVP_PBE_get                             1424	1_1_0	EXIST::FUNCTION:
+CRYPTO_nistcts128_encrypt               1425	1_1_0	EXIST::FUNCTION:
+CONF_modules_finish                     1426	1_1_0	EXIST::FUNCTION:
+BN_value_one                            1427	1_1_0	EXIST::FUNCTION:
+RSA_padding_add_SSLv23                  1428	1_1_0	EXIST::FUNCTION:RSA
+OCSP_RESPBYTES_it                       1429	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:OCSP
+OCSP_RESPBYTES_it                       1429	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:OCSP
+EVP_aes_192_wrap                        1430	1_1_0	EXIST::FUNCTION:
+OCSP_CERTID_it                          1431	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:OCSP
+OCSP_CERTID_it                          1431	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:OCSP
+ENGINE_get_RSA                          1432	1_1_0	EXIST::FUNCTION:ENGINE
+RAND_get_rand_method                    1433	1_1_0	EXIST::FUNCTION:
+ERR_load_DSA_strings                    1434	1_1_0	EXIST::FUNCTION:DSA
+ASN1_check_infinite_end                 1435	1_1_0	EXIST::FUNCTION:
+i2d_PKCS7_DIGEST                        1436	1_1_0	EXIST::FUNCTION:
+ERR_lib_error_string                    1437	1_1_0	EXIST::FUNCTION:
+X509_ATTRIBUTE_set1_object              1438	1_1_0	EXIST::FUNCTION:
+i2d_ECPrivateKey_bio                    1439	1_1_0	EXIST::FUNCTION:EC
+BN_GENCB_free                           1440	1_1_0	EXIST::FUNCTION:
+HMAC_size                               1441	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_get0_DH                        1442	1_1_0	EXIST::FUNCTION:DH
+d2i_OCSP_CRLID                          1443	1_1_0	EXIST::FUNCTION:OCSP
+EVP_CIPHER_CTX_set_padding              1444	1_1_0	EXIST::FUNCTION:
+CTLOG_new_from_base64                   1445	1_1_0	EXIST::FUNCTION:CT
+AES_bi_ige_encrypt                      1446	1_1_0	EXIST::FUNCTION:
+ERR_pop_to_mark                         1447	1_1_0	EXIST::FUNCTION:
+CRL_DIST_POINTS_new                     1449	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_get0_asn1                      1450	1_1_0	EXIST::FUNCTION:
+EVP_camellia_192_ctr                    1451	1_1_0	EXIST::FUNCTION:CAMELLIA
+EVP_PKEY_free                           1452	1_1_0	EXIST::FUNCTION:
+X509_ATTRIBUTE_count                    1453	1_1_0	EXIST::FUNCTION:
+BIO_new_dgram                           1454	1_1_0	EXIST::FUNCTION:DGRAM
+CMS_RecipientInfo_kari_get0_reks        1455	1_1_0	EXIST::FUNCTION:CMS
+BASIC_CONSTRAINTS_new                   1456	1_1_0	EXIST::FUNCTION:
+PEM_read_bio_X509_REQ                   1457	1_1_0	EXIST::FUNCTION:
+BIO_sock_init                           1458	1_1_0	EXIST::FUNCTION:SOCK
+BN_nist_mod_192                         1459	1_1_0	EXIST::FUNCTION:
+i2d_PKCS7_ISSUER_AND_SERIAL             1460	1_1_0	EXIST::FUNCTION:
+X509V3_EXT_nconf                        1461	1_1_0	EXIST::FUNCTION:
+X509v3_addr_inherits                    1462	1_1_0	EXIST::FUNCTION:RFC3779
+NETSCAPE_SPKI_sign                      1463	1_1_0	EXIST::FUNCTION:
+BN_BLINDING_update                      1464	1_1_0	EXIST::FUNCTION:
+BN_gcd                                  1465	1_1_0	EXIST::FUNCTION:
+CMS_dataInit                            1466	1_1_0	EXIST::FUNCTION:CMS
+TS_CONF_get_tsa_section                 1467	1_1_0	EXIST::FUNCTION:TS
+i2d_PKCS7_SIGNER_INFO                   1468	1_1_0	EXIST::FUNCTION:
+EVP_get_pw_prompt                       1469	1_1_0	EXIST::FUNCTION:
+BN_bn2bin                               1470	1_1_0	EXIST::FUNCTION:
+d2i_ASN1_BIT_STRING                     1471	1_1_0	EXIST::FUNCTION:
+OCSP_CERTSTATUS_new                     1472	1_1_0	EXIST::FUNCTION:OCSP
+ENGINE_register_RAND                    1473	1_1_0	EXIST::FUNCTION:ENGINE
+X509V3_section_free                     1474	1_1_0	EXIST::FUNCTION:
+CRYPTO_mem_debug_free                   1475	1_1_0	EXIST::FUNCTION:CRYPTO_MDEBUG
+d2i_OCSP_REQUEST                        1476	1_1_0	EXIST::FUNCTION:OCSP
+ENGINE_get_cipher_engine                1477	1_1_0	EXIST::FUNCTION:ENGINE
+SHA384_Final                            1478	1_1_0	EXIST::FUNCTION:
+TS_RESP_CTX_set_certs                   1479	1_1_0	EXIST::FUNCTION:TS
+BN_MONT_CTX_free                        1480	1_1_0	EXIST::FUNCTION:
+BN_GF2m_mod_solve_quad_arr              1481	1_1_0	EXIST::FUNCTION:EC2M
+UI_add_input_string                     1482	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_get_version                 1483	1_1_0	EXIST::FUNCTION:TS
+BIO_accept_ex                           1484	1_1_0	EXIST::FUNCTION:SOCK
+CRYPTO_get_mem_functions                1485	1_1_0	EXIST::FUNCTION:
+PEM_read_bio                            1486	1_1_0	EXIST::FUNCTION:
+OCSP_BASICRESP_get_ext_by_critical      1487	1_1_0	EXIST::FUNCTION:OCSP
+SXNET_it                                1488	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+SXNET_it                                1488	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+BIO_indent                              1489	1_1_0	EXIST::FUNCTION:
+i2d_X509_fp                             1490	1_1_0	EXIST::FUNCTION:STDIO
+d2i_ASN1_TYPE                           1491	1_1_0	EXIST::FUNCTION:
+CTLOG_STORE_free                        1492	1_1_0	EXIST::FUNCTION:CT
+ENGINE_get_pkey_meths                   1493	1_1_0	EXIST::FUNCTION:ENGINE
+i2d_TS_REQ_bio                          1494	1_1_0	EXIST::FUNCTION:TS
+EVP_PKEY_CTX_get_operation              1495	1_1_0	EXIST::FUNCTION:
+EVP_MD_meth_set_ctrl                    1496	1_1_0	EXIST::FUNCTION:
+X509_EXTENSION_set_critical             1497	1_1_0	EXIST::FUNCTION:
+BIO_ADDR_clear                          1498	1_1_0	EXIST::FUNCTION:SOCK
+ENGINE_get_DSA                          1499	1_1_0	EXIST::FUNCTION:ENGINE
+ASYNC_get_wait_ctx                      1500	1_1_0	EXIST::FUNCTION:
+ENGINE_set_load_privkey_function        1501	1_1_0	EXIST::FUNCTION:ENGINE
+CRYPTO_ccm128_setiv                     1502	1_1_0	EXIST::FUNCTION:
+PKCS7_dataFinal                         1503	1_1_0	EXIST::FUNCTION:
+SHA1_Final                              1504	1_1_0	EXIST::FUNCTION:
+i2a_ASN1_STRING                         1505	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_CTX_rand_key                 1506	1_1_0	EXIST::FUNCTION:
+AES_set_encrypt_key                     1507	1_1_0	EXIST::FUNCTION:
+ASN1_UTCTIME_new                        1508	1_1_0	EXIST::FUNCTION:
+AES_cbc_encrypt                         1509	1_1_0	EXIST::FUNCTION:
+OCSP_RESPDATA_free                      1510	1_1_0	EXIST::FUNCTION:OCSP
+EVP_PKEY_asn1_find                      1511	1_1_0	EXIST::FUNCTION:
+d2i_ASN1_GENERALIZEDTIME                1512	1_1_0	EXIST::FUNCTION:
+OPENSSL_cleanup                         1513	1_1_0	EXIST::FUNCTION:
+X509_ATTRIBUTE_create                   1514	1_1_0	EXIST::FUNCTION:
+SCT_get_source                          1515	1_1_0	EXIST::FUNCTION:CT
+EVP_PKEY_verify_init                    1516	1_1_0	EXIST::FUNCTION:
+ASN1_TIME_set_string                    1517	1_1_0	EXIST::FUNCTION:
+BIO_free                                1518	1_1_0	EXIST::FUNCTION:
+i2d_X509_ALGOR                          1519	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_set0_crls                1520	1_1_0	EXIST::FUNCTION:
+ASYNC_pause_job                         1521	1_1_0	EXIST::FUNCTION:
+OCSP_BASICRESP_new                      1522	1_1_0	EXIST::FUNCTION:OCSP
+EVP_camellia_256_ofb                    1523	1_1_0	EXIST::FUNCTION:CAMELLIA
+PKCS12_item_i2d_encrypt                 1524	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_set_copy                  1525	1_1_0	EXIST::FUNCTION:
+EC_POINT_clear_free                     1526	1_1_0	EXIST::FUNCTION:EC
+i2s_ASN1_ENUMERATED_TABLE               1527	1_1_0	EXIST::FUNCTION:
+PKCS7_verify                            1528	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_add0_table            1529	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_set_cert                 1530	1_1_0	EXIST::FUNCTION:
+ASN1_GENERALSTRING_free                 1531	1_1_0	EXIST::FUNCTION:
+BN_MONT_CTX_set_locked                  1532	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_CTX_set_num                  1533	1_1_0	EXIST::FUNCTION:
+CONF_load                               1534	1_1_0	EXIST::FUNCTION:
+EC_KEY_METHOD_get_keygen                1535	1_1_0	EXIST::FUNCTION:EC
+EVP_PKEY_add1_attr_by_txt               1536	1_1_0	EXIST::FUNCTION:
+ASN1_INTEGER_set_uint64                 1537	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_get_attr_by_OBJ                1538	1_1_0	EXIST::FUNCTION:
+ASN1_add_oid_module                     1539	1_1_0	EXIST::FUNCTION:
+BN_div_recp                             1540	1_1_0	EXIST::FUNCTION:
+SRP_Verify_B_mod_N                      1541	1_1_0	EXIST::FUNCTION:SRP
+SXNET_free                              1542	1_1_0	EXIST::FUNCTION:
+CMS_get0_content                        1543	1_1_0	EXIST::FUNCTION:CMS
+BN_is_word                              1544	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_key_length                   1545	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_asn1_to_param                1546	1_1_0	EXIST::FUNCTION:
+OCSP_request_onereq_get0                1547	1_1_0	EXIST::FUNCTION:OCSP
+ERR_load_PKCS7_strings                  1548	1_1_0	EXIST::FUNCTION:
+X509_PUBKEY_get                         1549	1_1_0	EXIST::FUNCTION:
+EC_KEY_free                             1550	1_1_0	EXIST::FUNCTION:EC
+BIO_read                                1551	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_get_attr_by_NID                1552	1_1_0	EXIST::FUNCTION:
+BIO_get_accept_socket                   1553	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,SOCK
+CMS_SignerInfo_sign                     1554	1_1_0	EXIST::FUNCTION:CMS
+ASN1_item_i2d_bio                       1555	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_CTX_block_size               1556	1_1_0	EXIST::FUNCTION:
+DIRECTORYSTRING_free                    1557	1_1_0	EXIST::FUNCTION:
+TS_CONF_set_default_engine              1558	1_1_0	EXIST::FUNCTION:ENGINE,TS
+BN_set_bit                              1559	1_1_0	EXIST::FUNCTION:
+EVP_MD_meth_set_app_datasize            1560	1_1_0	EXIST::FUNCTION:
+DSO_free                                1561	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_get_tsa                     1562	1_1_0	EXIST::FUNCTION:TS
+EC_GROUP_check                          1563	1_1_0	EXIST::FUNCTION:EC
+OPENSSL_sk_delete                       1564	1_1_0	EXIST::FUNCTION:
+TS_RESP_CTX_set_extension_cb            1565	1_1_0	EXIST::FUNCTION:TS
+EVP_CIPHER_CTX_nid                      1566	1_1_0	EXIST::FUNCTION:
+TS_RESP_CTX_add_md                      1567	1_1_0	EXIST::FUNCTION:TS
+DES_set_key                             1568	1_1_0	EXIST::FUNCTION:DES
+X509V3_extensions_print                 1569	1_1_0	EXIST::FUNCTION:
+PEM_do_header                           1570	1_1_0	EXIST::FUNCTION:
+i2d_re_X509_CRL_tbs                     1571	1_1_0	EXIST::FUNCTION:
+BIO_method_name                         1572	1_1_0	EXIST::FUNCTION:
+i2d_OCSP_CRLID                          1573	1_1_0	EXIST::FUNCTION:OCSP
+OCSP_request_set1_name                  1574	1_1_0	EXIST::FUNCTION:OCSP
+d2i_X509_NAME_ENTRY                     1575	1_1_0	EXIST::FUNCTION:
+X509_trusted                            1576	1_1_0	EXIST::FUNCTION:
+X509_TRUST_get_flags                    1577	1_1_0	EXIST::FUNCTION:
+PKCS7_set_content                       1578	1_1_0	EXIST::FUNCTION:
+PEM_write_X509_REQ_NEW                  1579	1_1_0	EXIST::FUNCTION:STDIO
+CONF_imodule_set_usr_data               1580	1_1_0	EXIST::FUNCTION:
+d2i_TS_RESP_fp                          1581	1_1_0	EXIST::FUNCTION:STDIO,TS
+X509_policy_tree_get0_user_policies     1582	1_1_0	EXIST::FUNCTION:
+DSA_do_sign                             1584	1_1_0	EXIST::FUNCTION:DSA
+EVP_CIPHER_CTX_reset                    1585	1_1_0	EXIST::FUNCTION:
+OCSP_REVOKEDINFO_new                    1586	1_1_0	EXIST::FUNCTION:OCSP
+SRP_Verify_A_mod_N                      1587	1_1_0	EXIST::FUNCTION:SRP
+SRP_VBASE_free                          1588	1_1_0	EXIST::FUNCTION:SRP
+PKCS7_add0_attrib_signing_time          1589	1_1_0	EXIST::FUNCTION:
+X509_STORE_set_flags                    1590	1_1_0	EXIST::FUNCTION:
+UI_get0_output_string                   1591	1_1_0	EXIST::FUNCTION:
+ERR_get_error_line_data                 1592	1_1_0	EXIST::FUNCTION:
+CTLOG_get0_name                         1593	1_1_0	EXIST::FUNCTION:CT
+ASN1_TBOOLEAN_it                        1594	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_TBOOLEAN_it                        1594	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+RC2_set_key                             1595	1_1_0	EXIST::FUNCTION:RC2
+X509_REVOKED_get_ext_by_NID             1596	1_1_0	EXIST::FUNCTION:
+RSA_padding_add_none                    1597	1_1_0	EXIST::FUNCTION:RSA
+EVP_rc5_32_12_16_cbc                    1599	1_1_0	EXIST::FUNCTION:RC5
+PEM_dek_info                            1600	1_1_0	EXIST::FUNCTION:
+ASN1_SCTX_get_template                  1601	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_asn1_get0                      1602	1_1_0	EXIST::FUNCTION:
+X509_verify                             1603	1_1_0	EXIST::FUNCTION:
+TS_RESP_CTX_get_request                 1604	1_1_0	EXIST::FUNCTION:TS
+EVP_cast5_cbc                           1605	1_1_0	EXIST::FUNCTION:CAST
+PEM_read_bio_X509_AUX                   1606	1_1_0	EXIST::FUNCTION:
+TS_ext_print_bio                        1607	1_1_0	EXIST::FUNCTION:TS
+SCT_set1_log_id                         1608	1_1_0	EXIST::FUNCTION:CT
+X509_get0_pubkey_bitstr                 1609	1_1_0	EXIST::FUNCTION:
+ENGINE_register_all_RAND                1610	1_1_0	EXIST::FUNCTION:ENGINE
+EVP_MD_meth_get_result_size             1612	1_1_0	EXIST::FUNCTION:
+BIO_ADDRINFO_address                    1613	1_1_0	EXIST::FUNCTION:SOCK
+ASN1_STRING_print_ex                    1614	1_1_0	EXIST::FUNCTION:
+i2d_CMS_ReceiptRequest                  1615	1_1_0	EXIST::FUNCTION:CMS
+d2i_TS_REQ_fp                           1616	1_1_0	EXIST::FUNCTION:STDIO,TS
+OCSP_REQ_CTX_i2d                        1617	1_1_0	EXIST::FUNCTION:OCSP
+EVP_PKEY_get_default_digest_nid         1618	1_1_0	EXIST::FUNCTION:
+ASIdOrRange_new                         1619	1_1_0	EXIST::FUNCTION:RFC3779
+ASN1_SCTX_new                           1620	1_1_0	EXIST::FUNCTION:
+X509V3_EXT_get                          1621	1_1_0	EXIST::FUNCTION:
+OCSP_id_cmp                             1622	1_1_0	EXIST::FUNCTION:OCSP
+NCONF_dump_bio                          1623	1_1_0	EXIST::FUNCTION:
+X509_NAME_get_entry                     1624	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_get1_DH                        1625	1_1_0	EXIST::FUNCTION:DH
+CRYPTO_gcm128_aad                       1626	1_1_0	EXIST::FUNCTION:
+EVP_des_cfb8                            1627	1_1_0	EXIST::FUNCTION:DES
+BN_BLINDING_convert                     1628	1_1_0	EXIST::FUNCTION:
+CRYPTO_ocb128_cleanup                   1629	1_1_0	EXIST::FUNCTION:OCB
+EVP_des_ede_cbc                         1630	1_1_0	EXIST::FUNCTION:DES
+i2d_ASN1_TIME                           1631	1_1_0	EXIST::FUNCTION:
+ENGINE_register_all_pkey_asn1_meths     1632	1_1_0	EXIST::FUNCTION:ENGINE
+OCSP_set_max_response_length            1633	1_1_0	EXIST::FUNCTION:OCSP
+d2i_ISSUING_DIST_POINT                  1634	1_1_0	EXIST::FUNCTION:
+CMS_RecipientInfo_set0_key              1635	1_1_0	EXIST::FUNCTION:CMS
+NCONF_new                               1636	1_1_0	EXIST::FUNCTION:
+OCSP_SINGLERESP_free                    1637	1_1_0	EXIST::FUNCTION:OCSP
+PKCS7_ENCRYPT_free                      1638	1_1_0	EXIST::FUNCTION:
+i2d_DIST_POINT                          1639	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_paramgen_init                  1640	1_1_0	EXIST::FUNCTION:
+TS_MSG_IMPRINT_dup                      1641	1_1_0	EXIST::FUNCTION:TS
+CMS_ContentInfo_it                      1642	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:CMS
+CMS_ContentInfo_it                      1642	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:CMS
+OCSP_resp_get0_signature                1643	1_1_0	EXIST::FUNCTION:OCSP
+X509_STORE_CTX_get1_issuer              1644	1_1_0	EXIST::FUNCTION:
+EVP_Digest                              1645	1_1_0	EXIST::FUNCTION:
+CRYPTO_set_ex_data                      1646	1_1_0	EXIST::FUNCTION:
+BN_bn2hex                               1647	1_1_0	EXIST::FUNCTION:
+BN_lshift1                              1648	1_1_0	EXIST::FUNCTION:
+i2d_EDIPARTYNAME                        1649	1_1_0	EXIST::FUNCTION:
+X509_policy_tree_get0_policies          1650	1_1_0	EXIST::FUNCTION:
+X509at_add1_attr                        1651	1_1_0	EXIST::FUNCTION:
+X509_get_ex_data                        1653	1_1_0	EXIST::FUNCTION:
+RSA_set_method                          1654	1_1_0	EXIST::FUNCTION:RSA
+X509_REVOKED_dup                        1655	1_1_0	EXIST::FUNCTION:
+ASN1_TIME_new                           1656	1_1_0	EXIST::FUNCTION:
+PEM_write_NETSCAPE_CERT_SEQUENCE        1657	1_1_0	EXIST::FUNCTION:STDIO
+PEM_read_X509_REQ                       1658	1_1_0	EXIST::FUNCTION:STDIO
+EC_GROUP_free                           1659	1_1_0	EXIST::FUNCTION:EC
+X509_CRL_get_meth_data                  1660	1_1_0	EXIST::FUNCTION:
+X509V3_add_value_uchar                  1661	1_1_0	EXIST::FUNCTION:
+BIO_asn1_get_suffix                     1662	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_clear_flags           1663	1_1_0	EXIST::FUNCTION:
+X509_NAME_add_entry_by_txt              1664	1_1_0	EXIST::FUNCTION:
+DES_ede3_cfb_encrypt                    1665	1_1_0	EXIST::FUNCTION:DES
+i2d_CMS_bio_stream                      1667	1_1_0	EXIST::FUNCTION:CMS
+DES_quad_cksum                          1668	1_1_0	EXIST::FUNCTION:DES
+X509_ATTRIBUTE_create_by_NID            1669	1_1_0	EXIST::FUNCTION:
+TS_VERIFY_CTX_free                      1670	1_1_0	EXIST::FUNCTION:TS
+EC_KEY_up_ref                           1671	1_1_0	EXIST::FUNCTION:EC
+EC_GROUP_get_basis_type                 1672	1_1_0	EXIST::FUNCTION:EC
+OCSP_crlID_new                          1673	1_1_0	EXIST:!VMS:FUNCTION:OCSP
+OCSP_crlID2_new                         1673	1_1_0	EXIST:VMS:FUNCTION:OCSP
+PEM_write_PKCS7                         1674	1_1_0	EXIST::FUNCTION:STDIO
+PKCS7_add_signer                        1675	1_1_0	EXIST::FUNCTION:
+X509_SIG_it                             1676	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_SIG_it                             1676	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ASYNC_start_job                         1677	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_dup                         1678	1_1_0	EXIST::FUNCTION:TS
+EVP_aes_192_ctr                         1679	1_1_0	EXIST::FUNCTION:
+PKCS12_pack_authsafes                   1680	1_1_0	EXIST::FUNCTION:
+PKCS7_get_attribute                     1681	1_1_0	EXIST::FUNCTION:
+OPENSSL_config                          1682	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0
+s2i_ASN1_INTEGER                        1683	1_1_0	EXIST::FUNCTION:
+CMS_signed_add1_attr_by_OBJ             1684	1_1_0	EXIST::FUNCTION:CMS
+CRYPTO_128_wrap_pad                     1685	1_1_0	EXIST::FUNCTION:
+CMS_EncryptedData_set1_key              1686	1_1_0	EXIST::FUNCTION:CMS
+OBJ_find_sigid_by_algs                  1687	1_1_0	EXIST::FUNCTION:
+ASN1_generate_nconf                     1688	1_1_0	EXIST::FUNCTION:
+CMS_add0_recipient_password             1689	1_1_0	EXIST::FUNCTION:CMS
+UI_get_string_type                      1690	1_1_0	EXIST::FUNCTION:
+PEM_read_bio_ECPrivateKey               1691	1_1_0	EXIST::FUNCTION:EC
+EVP_PKEY_get_attr                       1692	1_1_0	EXIST::FUNCTION:
+PEM_read_bio_ECPKParameters             1693	1_1_0	EXIST::FUNCTION:EC
+d2i_PKCS12_MAC_DATA                     1694	1_1_0	EXIST::FUNCTION:
+ENGINE_ctrl_cmd                         1695	1_1_0	EXIST::FUNCTION:ENGINE
+PKCS12_SAFEBAG_get_bag_nid              1696	1_1_0	EXIST::FUNCTION:
+TS_CONF_set_digests                     1697	1_1_0	EXIST::FUNCTION:TS
+PKCS7_SIGNED_it                         1698	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS7_SIGNED_it                         1698	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+b2i_PublicKey                           1699	1_1_0	EXIST::FUNCTION:DSA
+X509_PURPOSE_cleanup                    1700	1_1_0	EXIST::FUNCTION:
+ESS_SIGNING_CERT_dup                    1701	1_1_0	EXIST::FUNCTION:TS
+ENGINE_set_default_DSA                  1702	1_1_0	EXIST::FUNCTION:ENGINE
+X509_REVOKED_new                        1703	1_1_0	EXIST::FUNCTION:
+NCONF_WIN32                             1704	1_1_0	EXIST::FUNCTION:
+RSA_padding_check_PKCS1_OAEP_mgf1       1705	1_1_0	EXIST::FUNCTION:RSA
+X509_policy_tree_get0_level             1706	1_1_0	EXIST::FUNCTION:
+ASN1_parse_dump                         1708	1_1_0	EXIST::FUNCTION:
+BIO_vfree                               1709	1_1_0	EXIST::FUNCTION:
+CRYPTO_cbc128_decrypt                   1710	1_1_0	EXIST::FUNCTION:
+UI_dup_verify_string                    1711	1_1_0	EXIST::FUNCTION:
+d2i_PKCS7_bio                           1712	1_1_0	EXIST::FUNCTION:
+ENGINE_set_default_digests              1713	1_1_0	EXIST::FUNCTION:ENGINE
+i2d_PublicKey                           1714	1_1_0	EXIST::FUNCTION:
+RC5_32_set_key                          1715	1_1_0	EXIST::FUNCTION:RC5
+AES_unwrap_key                          1716	1_1_0	EXIST::FUNCTION:
+EVP_Cipher                              1717	1_1_0	EXIST::FUNCTION:
+AES_set_decrypt_key                     1718	1_1_0	EXIST::FUNCTION:
+BF_ofb64_encrypt                        1719	1_1_0	EXIST::FUNCTION:BF
+d2i_TS_TST_INFO_fp                      1720	1_1_0	EXIST::FUNCTION:STDIO,TS
+X509_find_by_issuer_and_serial          1721	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_type                           1722	1_1_0	EXIST::FUNCTION:
+ENGINE_ctrl                             1723	1_1_0	EXIST::FUNCTION:ENGINE
+EVP_cast5_ecb                           1724	1_1_0	EXIST::FUNCTION:CAST
+BIO_nwrite0                             1725	1_1_0	EXIST::FUNCTION:
+CAST_encrypt                            1726	1_1_0	EXIST::FUNCTION:CAST
+a2d_ASN1_OBJECT                         1727	1_1_0	EXIST::FUNCTION:
+OCSP_ONEREQ_delete_ext                  1728	1_1_0	EXIST::FUNCTION:OCSP
+UI_method_get_reader                    1729	1_1_0	EXIST::FUNCTION:
+CMS_unsigned_get_attr                   1730	1_1_0	EXIST::FUNCTION:CMS
+EVP_aes_256_cbc                         1731	1_1_0	EXIST::FUNCTION:
+X509_check_ip_asc                       1732	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_X509_AUX                  1733	1_1_0	EXIST::FUNCTION:
+RC2_cbc_encrypt                         1734	1_1_0	EXIST::FUNCTION:RC2
+TS_MSG_IMPRINT_new                      1735	1_1_0	EXIST::FUNCTION:TS
+EVP_ENCODE_CTX_new                      1736	1_1_0	EXIST::FUNCTION:
+BIO_f_base64                            1737	1_1_0	EXIST::FUNCTION:
+CMS_verify                              1738	1_1_0	EXIST::FUNCTION:CMS
+i2d_PrivateKey                          1739	1_1_0	EXIST::FUNCTION:
+i2d_OCSP_ONEREQ                         1740	1_1_0	EXIST::FUNCTION:OCSP
+OPENSSL_issetugid                       1741	1_1_0	EXIST::FUNCTION:
+d2i_ASN1_OBJECT                         1742	1_1_0	EXIST::FUNCTION:
+EVP_MD_meth_set_flags                   1743	1_1_0	EXIST::FUNCTION:
+EVP_idea_cbc                            1744	1_1_0	EXIST::FUNCTION:IDEA
+EC_POINT_cmp                            1745	1_1_0	EXIST::FUNCTION:EC
+ASN1_buf_print                          1746	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_CTX_hex2ctrl                   1747	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_PKCS8PrivateKey           1748	1_1_0	EXIST::FUNCTION:
+CMAC_Update                             1749	1_1_0	EXIST::FUNCTION:CMAC
+d2i_ASN1_UTCTIME                        1750	1_1_0	EXIST::FUNCTION:
+OPENSSL_sk_insert                       1751	1_1_0	EXIST::FUNCTION:
+DSO_up_ref                              1752	1_1_0	EXIST::FUNCTION:
+EVP_rc2_cbc                             1753	1_1_0	EXIST::FUNCTION:RC2
+i2d_NETSCAPE_SPKI                       1754	1_1_0	EXIST::FUNCTION:
+ASYNC_init_thread                       1755	1_1_0	EXIST::FUNCTION:
+OCSP_BASICRESP_get_ext_by_OBJ           1756	1_1_0	EXIST::FUNCTION:OCSP
+X509_reject_clear                       1757	1_1_0	EXIST::FUNCTION:
+DH_security_bits                        1758	1_1_0	EXIST::FUNCTION:DH
+LONG_it                                 1759	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:DEPRECATEDIN_1_2_0
+LONG_it                                 1759	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:DEPRECATEDIN_1_2_0
+ASN1_dup                                1760	1_1_0	EXIST::FUNCTION:
+TS_RESP_new                             1761	1_1_0	EXIST::FUNCTION:TS
+i2d_PKCS8PrivateKeyInfo_fp              1762	1_1_0	EXIST::FUNCTION:STDIO
+X509_alias_get0                         1763	1_1_0	EXIST::FUNCTION:
+X509_ATTRIBUTE_free                     1764	1_1_0	EXIST::FUNCTION:
+d2i_X509_bio                            1765	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_get_exts                    1766	1_1_0	EXIST::FUNCTION:TS
+EVP_aes_256_ecb                         1767	1_1_0	EXIST::FUNCTION:
+ASN1_BIT_STRING_name_print              1768	1_1_0	EXIST::FUNCTION:
+d2i_X509_EXTENSIONS                     1769	1_1_0	EXIST::FUNCTION:
+ASN1_OCTET_STRING_free                  1770	1_1_0	EXIST::FUNCTION:
+PKCS7_RECIP_INFO_free                   1771	1_1_0	EXIST::FUNCTION:
+ASN1_tag2bit                            1772	1_1_0	EXIST::FUNCTION:
+TS_REQ_add_ext                          1773	1_1_0	EXIST::FUNCTION:TS
+X509_digest                             1776	1_1_0	EXIST::FUNCTION:
+CRYPTO_THREAD_cleanup_local             1777	1_1_0	EXIST::FUNCTION:
+NETSCAPE_CERT_SEQUENCE_it               1778	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+NETSCAPE_CERT_SEQUENCE_it               1778	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+EVP_aes_128_wrap                        1779	1_1_0	EXIST::FUNCTION:
+X509V3_conf_free                        1780	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_get_ext_by_NID              1781	1_1_0	EXIST::FUNCTION:TS
+EVP_aes_256_cfb1                        1782	1_1_0	EXIST::FUNCTION:
+X509_issuer_name_cmp                    1783	1_1_0	EXIST::FUNCTION:
+CMS_RecipientEncryptedKey_get0_id       1784	1_1_0	EXIST::FUNCTION:CMS
+EVP_PKEY_meth_get_verify_recover        1785	1_1_0	EXIST::FUNCTION:
+NAME_CONSTRAINTS_check                  1786	1_1_0	EXIST::FUNCTION:
+X509_CERT_AUX_it                        1787	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_CERT_AUX_it                        1787	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+X509_get_X509_PUBKEY                    1789	1_1_0	EXIST::FUNCTION:
+TXT_DB_create_index                     1790	1_1_0	EXIST::FUNCTION:
+RAND_set_rand_engine                    1791	1_1_0	EXIST::FUNCTION:ENGINE
+X509_set_serialNumber                   1792	1_1_0	EXIST::FUNCTION:
+BN_mod_exp_mont_consttime               1793	1_1_0	EXIST::FUNCTION:
+X509V3_parse_list                       1794	1_1_0	EXIST::FUNCTION:
+ACCESS_DESCRIPTION_new                  1795	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_CTX_clear_flags              1796	1_1_0	EXIST::FUNCTION:
+ECDSA_size                              1797	1_1_0	EXIST::FUNCTION:EC
+X509_ALGOR_get0                         1798	1_1_0	EXIST::FUNCTION:
+d2i_ACCESS_DESCRIPTION                  1799	1_1_0	EXIST::FUNCTION:
+OCSP_SINGLERESP_get_ext_by_NID          1800	1_1_0	EXIST::FUNCTION:OCSP
+a2i_IPADDRESS_NC                        1801	1_1_0	EXIST::FUNCTION:
+CTLOG_STORE_load_default_file           1802	1_1_0	EXIST::FUNCTION:CT
+PKCS12_SAFEBAG_create_pkcs8_encrypt     1803	1_1_0	EXIST::FUNCTION:
+RAND_screen                             1804	1_1_0	EXIST:_WIN32:FUNCTION:DEPRECATEDIN_1_1_0
+CONF_get_string                         1805	1_1_0	EXIST::FUNCTION:
+X509_cmp_current_time                   1806	1_1_0	EXIST::FUNCTION:
+i2d_DSAPrivateKey                       1807	1_1_0	EXIST::FUNCTION:DSA
+ASN1_BIT_STRING_new                     1808	1_1_0	EXIST::FUNCTION:
+BIO_new_file                            1809	1_1_0	EXIST::FUNCTION:
+PKCS7_SIGNER_INFO_get0_algs             1810	1_1_0	EXIST::FUNCTION:
+TS_RESP_set_status_info                 1811	1_1_0	EXIST::FUNCTION:TS
+OPENSSL_LH_delete                       1812	1_1_0	EXIST::FUNCTION:
+TS_STATUS_INFO_dup                      1813	1_1_0	EXIST::FUNCTION:TS
+X509v3_addr_get_range                   1814	1_1_0	EXIST::FUNCTION:RFC3779
+X509_EXTENSION_get_data                 1815	1_1_0	EXIST::FUNCTION:
+RC5_32_encrypt                          1816	1_1_0	EXIST::FUNCTION:RC5
+DIST_POINT_set_dpname                   1817	1_1_0	EXIST::FUNCTION:
+BIO_sock_info                           1818	1_1_0	EXIST::FUNCTION:SOCK
+OPENSSL_hexstr2buf                      1819	1_1_0	EXIST::FUNCTION:
+EVP_add_cipher                          1820	1_1_0	EXIST::FUNCTION:
+X509V3_EXT_add_list                     1821	1_1_0	EXIST::FUNCTION:
+CMS_compress                            1822	1_1_0	EXIST::FUNCTION:CMS
+X509_get_ext_by_critical                1823	1_1_0	EXIST::FUNCTION:
+ASYNC_WAIT_CTX_clear_fd                 1824	1_1_0	EXIST::FUNCTION:
+ZLONG_it                                1825	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:DEPRECATEDIN_1_2_0
+ZLONG_it                                1825	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:DEPRECATEDIN_1_2_0
+OPENSSL_sk_find_ex                      1826	1_1_0	EXIST::FUNCTION:
+ASN1_ENUMERATED_to_BN                   1827	1_1_0	EXIST::FUNCTION:
+X509_CRL_get_ext_d2i                    1828	1_1_0	EXIST::FUNCTION:
+i2d_AUTHORITY_KEYID                     1829	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_get_time                    1830	1_1_0	EXIST::FUNCTION:TS
+ASN1_VISIBLESTRING_it                   1831	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_VISIBLESTRING_it                   1831	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+X509V3_EXT_REQ_add_conf                 1832	1_1_0	EXIST::FUNCTION:
+ASN1_STRING_to_UTF8                     1833	1_1_0	EXIST::FUNCTION:
+EVP_MD_meth_set_update                  1835	1_1_0	EXIST::FUNCTION:
+EVP_camellia_192_cbc                    1836	1_1_0	EXIST::FUNCTION:CAMELLIA
+OPENSSL_LH_stats_bio                    1837	1_1_0	EXIST::FUNCTION:
+PKCS7_set_signed_attributes             1838	1_1_0	EXIST::FUNCTION:
+EC_KEY_priv2buf                         1839	1_1_0	EXIST::FUNCTION:EC
+BN_BLINDING_free                        1840	1_1_0	EXIST::FUNCTION:
+IPAddressChoice_new                     1841	1_1_0	EXIST::FUNCTION:RFC3779
+X509_CRL_get_ext_count                  1842	1_1_0	EXIST::FUNCTION:
+PKCS12_add_key                          1843	1_1_0	EXIST::FUNCTION:
+EVP_camellia_128_cfb1                   1844	1_1_0	EXIST::FUNCTION:CAMELLIA
+BIO_find_type                           1845	1_1_0	EXIST::FUNCTION:
+ISSUING_DIST_POINT_it                   1846	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ISSUING_DIST_POINT_it                   1846	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+BIO_ctrl_wpending                       1847	1_1_0	EXIST::FUNCTION:
+X509_ALGOR_cmp                          1848	1_1_0	EXIST::FUNCTION:
+i2d_ASN1_bio_stream                     1849	1_1_0	EXIST::FUNCTION:
+CRYPTO_THREAD_init_local                1850	1_1_0	EXIST::FUNCTION:
+TS_RESP_CTX_set_serial_cb               1851	1_1_0	EXIST::FUNCTION:TS
+POLICY_MAPPING_it                       1852	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+POLICY_MAPPING_it                       1852	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ERR_load_KDF_strings                    1853	1_1_0	EXIST::FUNCTION:
+UI_method_set_reader                    1854	1_1_0	EXIST::FUNCTION:
+BIO_next                                1855	1_1_0	EXIST::FUNCTION:
+ASN1_STRING_set_default_mask_asc        1856	1_1_0	EXIST::FUNCTION:
+X509_CRL_new                            1857	1_1_0	EXIST::FUNCTION:
+i2b_PrivateKey_bio                      1858	1_1_0	EXIST::FUNCTION:DSA
+ASN1_STRING_length_set                  1859	1_1_0	EXIST::FUNCTION:
+PEM_write_PKCS8                         1860	1_1_0	EXIST::FUNCTION:STDIO
+PKCS7_digest_from_attributes            1861	1_1_0	EXIST::FUNCTION:
+EC_GROUP_set_curve_GFp                  1862	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_2_0,EC
+X509_PURPOSE_get0                       1863	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_set1_DSA                       1864	1_1_0	EXIST::FUNCTION:DSA
+X509_NAME_it                            1865	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_NAME_it                            1865	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+OBJ_add_object                          1866	1_1_0	EXIST::FUNCTION:
+DSA_generate_key                        1867	1_1_0	EXIST::FUNCTION:DSA
+EVP_DigestUpdate                        1868	1_1_0	EXIST::FUNCTION:
+X509_get_ext_by_OBJ                     1869	1_1_0	EXIST::FUNCTION:
+PBEPARAM_new                            1870	1_1_0	EXIST::FUNCTION:
+EVP_aes_128_cbc                         1871	1_1_0	EXIST::FUNCTION:
+CRYPTO_dup_ex_data                      1872	1_1_0	EXIST::FUNCTION:
+OCSP_single_get0_status                 1873	1_1_0	EXIST::FUNCTION:OCSP
+d2i_AUTHORITY_INFO_ACCESS               1874	1_1_0	EXIST::FUNCTION:
+PEM_read_RSAPrivateKey                  1875	1_1_0	EXIST::FUNCTION:RSA,STDIO
+BIO_closesocket                         1876	1_1_0	EXIST::FUNCTION:SOCK
+RSA_verify_ASN1_OCTET_STRING            1877	1_1_0	EXIST::FUNCTION:RSA
+SCT_set_log_entry_type                  1878	1_1_0	EXIST::FUNCTION:CT
+BN_new                                  1879	1_1_0	EXIST::FUNCTION:
+X509_OBJECT_retrieve_by_subject         1880	1_1_0	EXIST::FUNCTION:
+MD5_Final                               1881	1_1_0	EXIST::FUNCTION:MD5
+X509_STORE_set_verify_cb                1882	1_1_0	EXIST::FUNCTION:
+OCSP_REQUEST_print                      1883	1_1_0	EXIST::FUNCTION:OCSP
+CMS_add1_crl                            1884	1_1_0	EXIST::FUNCTION:CMS
+d2i_EDIPARTYNAME                        1885	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_set0_trusted_stack       1886	1_1_0	EXIST::FUNCTION:
+BIO_ADDR_service_string                 1887	1_1_0	EXIST::FUNCTION:SOCK
+ASN1_BOOLEAN_it                         1888	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_BOOLEAN_it                         1888	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+TS_RESP_CTX_set_time_cb                 1889	1_1_0	EXIST::FUNCTION:TS
+IDEA_cbc_encrypt                        1890	1_1_0	EXIST::FUNCTION:IDEA
+BN_CTX_secure_new                       1891	1_1_0	EXIST::FUNCTION:
+OCSP_ONEREQ_add_ext                     1892	1_1_0	EXIST::FUNCTION:OCSP
+CMS_uncompress                          1893	1_1_0	EXIST::FUNCTION:CMS
+CRYPTO_mem_debug_pop                    1895	1_1_0	EXIST::FUNCTION:CRYPTO_MDEBUG
+EVP_aes_192_cfb128                      1896	1_1_0	EXIST::FUNCTION:
+OCSP_REQ_CTX_nbio                       1897	1_1_0	EXIST::FUNCTION:OCSP
+EVP_CIPHER_CTX_copy                     1898	1_1_0	EXIST::FUNCTION:
+CRYPTO_secure_allocated                 1899	1_1_0	EXIST::FUNCTION:
+UI_UTIL_read_pw_string                  1900	1_1_0	EXIST::FUNCTION:
+NOTICEREF_free                          1901	1_1_0	EXIST::FUNCTION:
+AES_cfb1_encrypt                        1902	1_1_0	EXIST::FUNCTION:
+X509v3_get_ext                          1903	1_1_0	EXIST::FUNCTION:
+CRYPTO_gcm128_encrypt_ctr32             1905	1_1_0	EXIST::FUNCTION:
+SCT_set1_signature                      1906	1_1_0	EXIST::FUNCTION:CT
+CONF_imodule_get_module                 1907	1_1_0	EXIST::FUNCTION:
+NAME_CONSTRAINTS_new                    1908	1_1_0	EXIST::FUNCTION:
+BN_usub                                 1909	1_1_0	EXIST::FUNCTION:
+SRP_Calc_B                              1910	1_1_0	EXIST::FUNCTION:SRP
+CMS_decrypt_set1_key                    1911	1_1_0	EXIST::FUNCTION:CMS
+EC_GROUP_get_degree                     1912	1_1_0	EXIST::FUNCTION:EC
+X509_ALGOR_set0                         1913	1_1_0	EXIST::FUNCTION:
+OPENSSL_LH_set_down_load                1914	1_1_0	EXIST::FUNCTION:
+X509v3_asid_inherits                    1915	1_1_0	EXIST::FUNCTION:RFC3779
+EVP_MD_meth_get_app_datasize            1916	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_num_untrusted        1917	1_1_0	EXIST::FUNCTION:
+RAND_poll                               1918	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_print_public                   1919	1_1_0	EXIST::FUNCTION:
+CMS_SignedData_init                     1920	1_1_0	EXIST::FUNCTION:CMS
+X509_REQ_free                           1921	1_1_0	EXIST::FUNCTION:
+ASN1_INTEGER_set                        1922	1_1_0	EXIST::FUNCTION:
+EVP_DecodeFinal                         1923	1_1_0	EXIST::FUNCTION:
+MD5_Transform                           1925	1_1_0	EXIST::FUNCTION:MD5
+SRP_create_verifier_BN                  1926	1_1_0	EXIST::FUNCTION:SRP
+ENGINE_register_all_EC                  1927	1_1_0	EXIST::FUNCTION:ENGINE
+EVP_camellia_128_ofb                    1928	1_1_0	EXIST::FUNCTION:CAMELLIA
+PEM_write_X509_AUX                      1929	1_1_0	EXIST::FUNCTION:STDIO
+X509_LOOKUP_by_subject                  1930	1_1_0	EXIST::FUNCTION:
+X509_REQ_add_extensions                 1931	1_1_0	EXIST::FUNCTION:
+Camellia_cbc_encrypt                    1932	1_1_0	EXIST::FUNCTION:CAMELLIA
+EC_KEY_METHOD_new                       1933	1_1_0	EXIST::FUNCTION:EC
+RSA_flags                               1934	1_1_0	EXIST::FUNCTION:RSA
+X509_NAME_add_entry                     1935	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_get_asn1_iv                  1936	1_1_0	EXIST::FUNCTION:
+i2d_RSAPrivateKey_bio                   1937	1_1_0	EXIST::FUNCTION:RSA
+PKCS5_PBE_keyivgen                      1938	1_1_0	EXIST::FUNCTION:
+i2d_OCSP_SERVICELOC                     1939	1_1_0	EXIST::FUNCTION:OCSP
+EC_POINT_copy                           1940	1_1_0	EXIST::FUNCTION:EC
+X509V3_EXT_CRL_add_nconf                1941	1_1_0	EXIST::FUNCTION:
+SHA256_Init                             1942	1_1_0	EXIST::FUNCTION:
+X509_NAME_ENTRY_get_object              1943	1_1_0	EXIST::FUNCTION:
+ASN1_ENUMERATED_free                    1944	1_1_0	EXIST::FUNCTION:
+X509_CRL_set_meth_data                  1945	1_1_0	EXIST::FUNCTION:
+EVP_aes_192_cfb1                        1946	1_1_0	EXIST::FUNCTION:
+EVP_MD_CTX_set_flags                    1947	1_1_0	EXIST::FUNCTION:
+EVP_seed_cbc                            1948	1_1_0	EXIST::FUNCTION:SEED
+d2i_PKCS12                              1949	1_1_0	EXIST::FUNCTION:
+X509_policy_node_get0_policy            1950	1_1_0	EXIST::FUNCTION:
+PKCS12_unpack_p7data                    1951	1_1_0	EXIST::FUNCTION:
+ECDSA_sign                              1952	1_1_0	EXIST::FUNCTION:EC
+d2i_PKCS12_fp                           1953	1_1_0	EXIST::FUNCTION:STDIO
+CMS_unsigned_get_attr_by_NID            1954	1_1_0	EXIST::FUNCTION:CMS
+UI_add_user_data                        1955	1_1_0	EXIST::FUNCTION:
+BN_bntest_rand                          1956	1_1_0	EXIST::FUNCTION:
+X509_get_pubkey                         1957	1_1_0	EXIST::FUNCTION:
+i2d_X509_NAME                           1958	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_add1_attr                      1959	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_purpose_inherit          1960	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_get_keygen                1961	1_1_0	EXIST::FUNCTION:
+ENGINE_get_pkey_asn1_meth               1962	1_1_0	EXIST::FUNCTION:ENGINE
+SHA256_Update                           1963	1_1_0	EXIST::FUNCTION:
+d2i_PKCS7_ISSUER_AND_SERIAL             1964	1_1_0	EXIST::FUNCTION:
+PKCS12_unpack_authsafes                 1965	1_1_0	EXIST::FUNCTION:
+X509_CRL_it                             1966	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_CRL_it                             1966	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+d2i_X509_ALGOR                          1967	1_1_0	EXIST::FUNCTION:
+PKCS12_PBE_keyivgen                     1968	1_1_0	EXIST::FUNCTION:
+BIO_test_flags                          1969	1_1_0	EXIST::FUNCTION:
+EC_POINT_get_affine_coordinates_GF2m    1970	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_2_0,EC,EC2M
+EVP_ENCODE_CTX_num                      1971	1_1_0	EXIST::FUNCTION:
+Camellia_cfb1_encrypt                   1972	1_1_0	EXIST::FUNCTION:CAMELLIA
+NCONF_load_fp                           1973	1_1_0	EXIST::FUNCTION:STDIO
+i2d_OCSP_REQINFO                        1974	1_1_0	EXIST::FUNCTION:OCSP
+EVP_PKEY_sign                           1975	1_1_0	EXIST::FUNCTION:
+TS_REQ_get_ext_by_critical              1976	1_1_0	EXIST::FUNCTION:TS
+EC_KEY_key2buf                          1977	1_1_0	EXIST::FUNCTION:EC
+X509_EXTENSION_it                       1978	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_EXTENSION_it                       1978	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+i2d_PKCS8_fp                            1979	1_1_0	EXIST::FUNCTION:STDIO
+UTF8_getc                               1980	1_1_0	EXIST::FUNCTION:
+ASN1_IA5STRING_free                     1981	1_1_0	EXIST::FUNCTION:
+EC_KEY_METHOD_get_verify                1982	1_1_0	EXIST::FUNCTION:EC
+OBJ_NAME_do_all                         1983	1_1_0	EXIST::FUNCTION:
+d2i_TS_MSG_IMPRINT_fp                   1984	1_1_0	EXIST::FUNCTION:STDIO,TS
+X509_CRL_verify                         1985	1_1_0	EXIST::FUNCTION:
+X509_get0_uids                          1986	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_get0_DSA                       1987	1_1_0	EXIST::FUNCTION:DSA
+d2i_CMS_ContentInfo                     1988	1_1_0	EXIST::FUNCTION:CMS
+EVP_CIPHER_meth_get_do_cipher           1989	1_1_0	EXIST::FUNCTION:
+i2d_DSA_PUBKEY                          1990	1_1_0	EXIST::FUNCTION:DSA
+GENERAL_NAME_it                         1991	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+GENERAL_NAME_it                         1991	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+EVP_des_ede_ecb                         1992	1_1_0	EXIST::FUNCTION:DES
+i2d_CRL_DIST_POINTS                     1993	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_X509_REQ_NEW              1994	1_1_0	EXIST::FUNCTION:
+RC5_32_ofb64_encrypt                    1995	1_1_0	EXIST::FUNCTION:RC5
+i2d_PKCS7                               1996	1_1_0	EXIST::FUNCTION:
+BN_mod_lshift_quick                     1997	1_1_0	EXIST::FUNCTION:
+DIST_POINT_NAME_it                      1998	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+DIST_POINT_NAME_it                      1998	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+PEM_read_PrivateKey                     1999	1_1_0	EXIST::FUNCTION:STDIO
+X509V3_get_d2i                          2000	1_1_0	EXIST::FUNCTION:
+PKCS7_SIGNER_INFO_sign                  2001	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_free                        2002	1_1_0	EXIST::FUNCTION:TS
+DSA_security_bits                       2003	1_1_0	EXIST::FUNCTION:DSA
+X509v3_addr_is_canonical                2004	1_1_0	EXIST::FUNCTION:RFC3779
+BN_mod_mul_reciprocal                   2005	1_1_0	EXIST::FUNCTION:
+TS_REQ_get_version                      2006	1_1_0	EXIST::FUNCTION:TS
+BN_exp                                  2007	1_1_0	EXIST::FUNCTION:
+i2d_SXNET                               2008	1_1_0	EXIST::FUNCTION:
+OBJ_bsearch_                            2009	1_1_0	EXIST::FUNCTION:
+OPENSSL_LH_new                          2010	1_1_0	EXIST::FUNCTION:
+ENGINE_register_all_pkey_meths          2011	1_1_0	EXIST::FUNCTION:ENGINE
+ENGINE_get_init_function                2012	1_1_0	EXIST::FUNCTION:ENGINE
+EC_POINT_point2hex                      2013	1_1_0	EXIST::FUNCTION:EC
+ENGINE_get_default_DSA                  2014	1_1_0	EXIST::FUNCTION:ENGINE
+ENGINE_register_all_complete            2015	1_1_0	EXIST::FUNCTION:ENGINE
+SRP_get_default_gN                      2016	1_1_0	EXIST::FUNCTION:SRP
+UI_dup_input_boolean                    2017	1_1_0	EXIST::FUNCTION:
+PKCS7_dup                               2018	1_1_0	EXIST::FUNCTION:
+i2d_TS_REQ_fp                           2019	1_1_0	EXIST::FUNCTION:STDIO,TS
+i2d_OTHERNAME                           2020	1_1_0	EXIST::FUNCTION:
+EC_KEY_get0_private_key                 2021	1_1_0	EXIST::FUNCTION:EC
+SCT_get0_extensions                     2022	1_1_0	EXIST::FUNCTION:CT
+OPENSSL_LH_node_stats_bio               2023	1_1_0	EXIST::FUNCTION:
+i2d_DIRECTORYSTRING                     2024	1_1_0	EXIST::FUNCTION:
+BN_X931_derive_prime_ex                 2025	1_1_0	EXIST::FUNCTION:
+ENGINE_get_pkey_asn1_meth_str           2026	1_1_0	EXIST::FUNCTION:ENGINE
+PKCS7_signatureVerify                   2027	1_1_0	EXIST::FUNCTION:
+CRYPTO_ocb128_new                       2028	1_1_0	EXIST::FUNCTION:OCB
+EC_curve_nist2nid                       2029	1_1_0	EXIST::FUNCTION:EC
+UI_get0_result                          2030	1_1_0	EXIST::FUNCTION:
+OCSP_request_add1_nonce                 2031	1_1_0	EXIST::FUNCTION:OCSP
+UI_construct_prompt                     2032	1_1_0	EXIST::FUNCTION:
+ENGINE_unregister_RSA                   2033	1_1_0	EXIST::FUNCTION:ENGINE
+EC_GROUP_order_bits                     2034	1_1_0	EXIST::FUNCTION:EC
+d2i_CMS_bio                             2035	1_1_0	EXIST::FUNCTION:CMS
+OPENSSL_sk_num                          2036	1_1_0	EXIST::FUNCTION:
+_shadow_DES_check_key                   2037	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:DES
+_shadow_DES_check_key                   2037	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:DES
+CMS_RecipientInfo_set0_pkey             2038	1_1_0	EXIST::FUNCTION:CMS
+X509_STORE_CTX_set_default              2039	1_1_0	EXIST::FUNCTION:
+AES_wrap_key                            2040	1_1_0	EXIST::FUNCTION:
+EVP_md_null                             2041	1_1_0	EXIST::FUNCTION:
+i2d_SCT_LIST                            2042	1_1_0	EXIST::FUNCTION:CT
+PKCS7_get_issuer_and_serial             2043	1_1_0	EXIST::FUNCTION:
+PKCS7_SIGN_ENVELOPE_it                  2044	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS7_SIGN_ENVELOPE_it                  2044	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ASN1_d2i_fp                             2045	1_1_0	EXIST::FUNCTION:STDIO
+EVP_DecryptFinal                        2046	1_1_0	EXIST::FUNCTION:
+ASN1_ENUMERATED_it                      2047	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_ENUMERATED_it                      2047	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+o2i_ECPublicKey                         2048	1_1_0	EXIST::FUNCTION:EC
+ERR_load_BUF_strings                    2049	1_1_0	EXIST::FUNCTION:
+PEM_read_bio_RSA_PUBKEY                 2050	1_1_0	EXIST::FUNCTION:RSA
+OCSP_SINGLERESP_new                     2051	1_1_0	EXIST::FUNCTION:OCSP
+ASN1_SCTX_free                          2052	1_1_0	EXIST::FUNCTION:
+i2d_ECPrivateKey_fp                     2053	1_1_0	EXIST::FUNCTION:EC,STDIO
+EVP_CIPHER_CTX_original_iv              2054	1_1_0	EXIST::FUNCTION:
+PKCS7_SIGNED_free                       2055	1_1_0	EXIST::FUNCTION:
+X509_TRUST_get0_name                    2056	1_1_0	EXIST::FUNCTION:
+ENGINE_get_load_pubkey_function         2057	1_1_0	EXIST::FUNCTION:ENGINE
+UI_get_default_method                   2058	1_1_0	EXIST::FUNCTION:
+PKCS12_add_CSPName_asc                  2059	1_1_0	EXIST::FUNCTION:
+PEM_write_PUBKEY                        2060	1_1_0	EXIST::FUNCTION:STDIO
+UI_method_set_prompt_constructor        2061	1_1_0	EXIST::FUNCTION:
+OBJ_length                              2062	1_1_0	EXIST::FUNCTION:
+BN_GENCB_get_arg                        2063	1_1_0	EXIST::FUNCTION:
+EVP_MD_CTX_clear_flags                  2064	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_get_verifyctx             2065	1_1_0	EXIST::FUNCTION:
+CT_POLICY_EVAL_CTX_get0_cert            2066	1_1_0	EXIST::FUNCTION:CT
+PEM_write_DHparams                      2067	1_1_0	EXIST::FUNCTION:DH,STDIO
+DH_set_ex_data                          2068	1_1_0	EXIST::FUNCTION:DH
+OCSP_SIGNATURE_free                     2069	1_1_0	EXIST::FUNCTION:OCSP
+CRYPTO_128_unwrap_pad                   2070	1_1_0	EXIST::FUNCTION:
+BIO_new_CMS                             2071	1_1_0	EXIST::FUNCTION:CMS
+i2d_ASN1_ENUMERATED                     2072	1_1_0	EXIST::FUNCTION:
+PEM_read_DSAparams                      2073	1_1_0	EXIST::FUNCTION:DSA,STDIO
+TS_TST_INFO_set_ordering                2074	1_1_0	EXIST::FUNCTION:TS
+MDC2_Init                               2075	1_1_0	EXIST::FUNCTION:MDC2
+i2o_SCT                                 2076	1_1_0	EXIST::FUNCTION:CT
+d2i_TS_STATUS_INFO                      2077	1_1_0	EXIST::FUNCTION:TS
+ERR_error_string_n                      2078	1_1_0	EXIST::FUNCTION:
+HMAC                                    2079	1_1_0	EXIST::FUNCTION:
+BN_mul                                  2080	1_1_0	EXIST::FUNCTION:
+BN_get0_nist_prime_384                  2081	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_set1_ip_asc           2082	1_1_0	EXIST::FUNCTION:
+CONF_modules_load                       2083	1_1_0	EXIST::FUNCTION:
+d2i_RSAPublicKey                        2084	1_1_0	EXIST::FUNCTION:RSA
+i2d_ASN1_GENERALSTRING                  2085	1_1_0	EXIST::FUNCTION:
+POLICYQUALINFO_new                      2086	1_1_0	EXIST::FUNCTION:
+PKCS7_RECIP_INFO_get0_alg               2087	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_base_id                        2088	1_1_0	EXIST::FUNCTION:
+UI_method_set_opener                    2089	1_1_0	EXIST::FUNCTION:
+X509v3_get_ext_by_NID                   2090	1_1_0	EXIST::FUNCTION:
+TS_CONF_set_policies                    2091	1_1_0	EXIST::FUNCTION:TS
+CMS_SignerInfo_cert_cmp                 2092	1_1_0	EXIST::FUNCTION:CMS
+PEM_read                                2093	1_1_0	EXIST::FUNCTION:STDIO
+X509_STORE_set_depth                    2094	1_1_0	EXIST::FUNCTION:
+EC_KEY_METHOD_get_sign                  2095	1_1_0	EXIST::FUNCTION:EC
+EVP_CIPHER_CTX_iv                       2096	1_1_0	EXIST::FUNCTION:
+i2d_ESS_SIGNING_CERT                    2097	1_1_0	EXIST::FUNCTION:TS
+TS_RESP_set_tst_info                    2098	1_1_0	EXIST::FUNCTION:TS
+EVP_PKEY_CTX_set_data                   2099	1_1_0	EXIST::FUNCTION:
+CMS_EnvelopedData_create                2100	1_1_0	EXIST::FUNCTION:CMS
+SCT_new                                 2101	1_1_0	EXIST::FUNCTION:CT
+X509_REQ_add1_attr                      2102	1_1_0	EXIST::FUNCTION:
+X509_get_ext_count                      2103	1_1_0	EXIST::FUNCTION:
+CRYPTO_cts128_decrypt                   2104	1_1_0	EXIST::FUNCTION:
+ASYNC_WAIT_CTX_get_fd                   2105	1_1_0	EXIST::FUNCTION:
+i2d_TS_REQ                              2106	1_1_0	EXIST::FUNCTION:TS
+OCSP_ONEREQ_add1_ext_i2d                2107	1_1_0	EXIST::FUNCTION:OCSP
+ENGINE_register_pkey_meths              2108	1_1_0	EXIST::FUNCTION:ENGINE
+ENGINE_load_public_key                  2109	1_1_0	EXIST::FUNCTION:ENGINE
+ASIdOrRange_it                          2110	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:RFC3779
+ASIdOrRange_it                          2110	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:RFC3779
+DHparams_print_fp                       2111	1_1_0	EXIST::FUNCTION:DH,STDIO
+ERR_load_CRYPTO_strings                 2112	1_1_0	EXIST:!VMS:FUNCTION:
+ERR_load_CRYPTOlib_strings              2112	1_1_0	EXIST:VMS:FUNCTION:
+X509_REQ_set_version                    2113	1_1_0	EXIST::FUNCTION:
+d2i_ASN1_GENERALSTRING                  2114	1_1_0	EXIST::FUNCTION:
+i2d_ASIdentifiers                       2115	1_1_0	EXIST::FUNCTION:RFC3779
+X509V3_EXT_cleanup                      2116	1_1_0	EXIST::FUNCTION:
+CAST_ecb_encrypt                        2117	1_1_0	EXIST::FUNCTION:CAST
+BIO_s_file                              2118	1_1_0	EXIST::FUNCTION:
+RSA_X931_derive_ex                      2119	1_1_0	EXIST::FUNCTION:RSA
+EVP_PKEY_decrypt_init                   2120	1_1_0	EXIST::FUNCTION:
+ENGINE_get_destroy_function             2121	1_1_0	EXIST::FUNCTION:ENGINE
+SHA224_Init                             2122	1_1_0	EXIST::FUNCTION:
+X509V3_EXT_add_conf                     2123	1_1_0	EXIST::FUNCTION:
+ASN1_object_size                        2124	1_1_0	EXIST::FUNCTION:
+X509_REVOKED_free                       2125	1_1_0	EXIST::FUNCTION:
+BN_mod_exp_recp                         2126	1_1_0	EXIST::FUNCTION:
+EVP_mdc2                                2127	1_1_0	EXIST::FUNCTION:MDC2
+EVP_des_cfb64                           2128	1_1_0	EXIST::FUNCTION:DES
+PKCS7_sign                              2129	1_1_0	EXIST::FUNCTION:
+OCSP_SINGLERESP_get_ext_by_critical     2130	1_1_0	EXIST::FUNCTION:OCSP
+EDIPARTYNAME_it                         2131	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+EDIPARTYNAME_it                         2131	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ERR_print_errors_fp                     2132	1_1_0	EXIST::FUNCTION:STDIO
+BN_GF2m_mod_div_arr                     2133	1_1_0	EXIST::FUNCTION:EC2M
+PKCS12_SAFEBAG_get0_attr                2134	1_1_0	EXIST::FUNCTION:
+BIO_s_mem                               2135	1_1_0	EXIST::FUNCTION:
+OCSP_RESPDATA_new                       2136	1_1_0	EXIST::FUNCTION:OCSP
+ASN1_item_i2d_fp                        2137	1_1_0	EXIST::FUNCTION:STDIO
+BN_GF2m_mod_sqr                         2138	1_1_0	EXIST::FUNCTION:EC2M
+ASN1_PRINTABLE_new                      2139	1_1_0	EXIST::FUNCTION:
+OBJ_NAME_new_index                      2140	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_asn1_add_alias                 2141	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_get1_DSA                       2142	1_1_0	EXIST::FUNCTION:DSA
+SEED_cbc_encrypt                        2143	1_1_0	EXIST::FUNCTION:SEED
+EVP_rc2_40_cbc                          2144	1_1_0	EXIST::FUNCTION:RC2
+ECDSA_SIG_new                           2145	1_1_0	EXIST::FUNCTION:EC
+i2d_PKCS8PrivateKey_nid_fp              2146	1_1_0	EXIST::FUNCTION:STDIO
+X509_NAME_ENTRY_it                      2147	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_NAME_ENTRY_it                      2147	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+CRYPTO_THREAD_compare_id                2148	1_1_0	EXIST::FUNCTION:
+d2i_IPAddressChoice                     2149	1_1_0	EXIST::FUNCTION:RFC3779
+IPAddressFamily_it                      2150	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:RFC3779
+IPAddressFamily_it                      2150	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:RFC3779
+ERR_load_OCSP_strings                   2151	1_1_0	EXIST::FUNCTION:OCSP
+BIO_push                                2152	1_1_0	EXIST::FUNCTION:
+ASN1_BMPSTRING_new                      2153	1_1_0	EXIST::FUNCTION:
+COMP_get_type                           2154	1_1_0	EXIST::FUNCTION:COMP
+d2i_ASIdentifierChoice                  2155	1_1_0	EXIST::FUNCTION:RFC3779
+i2d_ASN1_T61STRING                      2156	1_1_0	EXIST::FUNCTION:
+X509_add1_trust_object                  2157	1_1_0	EXIST::FUNCTION:
+PEM_write_X509                          2158	1_1_0	EXIST::FUNCTION:STDIO
+BN_CTX_free                             2159	1_1_0	EXIST::FUNCTION:
+EC_GROUP_get_curve_GF2m                 2160	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_2_0,EC,EC2M
+EVP_MD_flags                            2161	1_1_0	EXIST::FUNCTION:
+OPENSSL_sk_set                          2162	1_1_0	EXIST::FUNCTION:
+OCSP_request_sign                       2163	1_1_0	EXIST::FUNCTION:OCSP
+BN_GF2m_mod_solve_quad                  2164	1_1_0	EXIST::FUNCTION:EC2M
+EC_POINT_method_of                      2165	1_1_0	EXIST::FUNCTION:EC
+PKCS7_ENCRYPT_it                        2166	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS7_ENCRYPT_it                        2166	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+AUTHORITY_INFO_ACCESS_it                2167	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+AUTHORITY_INFO_ACCESS_it                2167	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+X509_EXTENSION_create_by_NID            2168	1_1_0	EXIST::FUNCTION:
+i2d_RSAPrivateKey                       2169	1_1_0	EXIST::FUNCTION:RSA
+d2i_CERTIFICATEPOLICIES                 2170	1_1_0	EXIST::FUNCTION:
+CMAC_CTX_get0_cipher_ctx                2171	1_1_0	EXIST::FUNCTION:CMAC
+X509_STORE_load_locations               2172	1_1_0	EXIST::FUNCTION:
+OBJ_find_sigid_algs                     2173	1_1_0	EXIST::FUNCTION:
+TS_RESP_CTX_set_accuracy                2174	1_1_0	EXIST::FUNCTION:TS
+NETSCAPE_SPKI_get_pubkey                2175	1_1_0	EXIST::FUNCTION:
+ECDSA_do_sign_ex                        2176	1_1_0	EXIST::FUNCTION:EC
+OCSP_ONEREQ_get_ext                     2177	1_1_0	EXIST::FUNCTION:OCSP
+BN_get_rfc3526_prime_4096               2179	1_1_0	EXIST::FUNCTION:
+d2i_PKCS7_fp                            2180	1_1_0	EXIST::FUNCTION:STDIO
+PEM_write_bio_NETSCAPE_CERT_SEQUENCE    2181	1_1_0	EXIST::FUNCTION:
+PKCS12_AUTHSAFES_it                     2182	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS12_AUTHSAFES_it                     2182	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+EVP_MD_CTX_free                         2183	1_1_0	EXIST::FUNCTION:
+CMS_RecipientInfo_kari_orig_id_cmp      2184	1_1_0	EXIST::FUNCTION:CMS
+NETSCAPE_SPKI_b64_encode                2185	1_1_0	EXIST::FUNCTION:
+d2i_PrivateKey                          2186	1_1_0	EXIST::FUNCTION:
+EVP_MD_CTX_new                          2187	1_1_0	EXIST::FUNCTION:
+X509_get0_tbs_sigalg                    2189	1_1_0	EXIST::FUNCTION:
+ASN1_GENERALIZEDTIME_new                2190	1_1_0	EXIST::FUNCTION:
+d2i_ECDSA_SIG                           2191	1_1_0	EXIST::FUNCTION:EC
+d2i_OTHERNAME                           2192	1_1_0	EXIST::FUNCTION:
+i2d_TS_RESP_fp                          2193	1_1_0	EXIST::FUNCTION:STDIO,TS
+OCSP_BASICRESP_get_ext_count            2194	1_1_0	EXIST::FUNCTION:OCSP
+ASN1_T61STRING_new                      2195	1_1_0	EXIST::FUNCTION:
+BN_kronecker                            2196	1_1_0	EXIST::FUNCTION:
+i2d_ACCESS_DESCRIPTION                  2197	1_1_0	EXIST::FUNCTION:
+EVP_camellia_192_cfb8                   2198	1_1_0	EXIST::FUNCTION:CAMELLIA
+X509_STORE_CTX_set_depth                2199	1_1_0	EXIST::FUNCTION:
+X509v3_delete_ext                       2200	1_1_0	EXIST::FUNCTION:
+ASN1_STRING_set0                        2201	1_1_0	EXIST::FUNCTION:
+BN_GF2m_add                             2202	1_1_0	EXIST::FUNCTION:EC2M
+CMAC_resume                             2203	1_1_0	EXIST::FUNCTION:CMAC
+TS_ACCURACY_set_millis                  2204	1_1_0	EXIST::FUNCTION:TS
+X509V3_EXT_conf                         2205	1_1_0	EXIST::FUNCTION:
+i2d_DHxparams                           2206	1_1_0	EXIST::FUNCTION:DH
+EVP_CIPHER_CTX_free                     2207	1_1_0	EXIST::FUNCTION:
+WHIRLPOOL_BitUpdate                     2208	1_1_0	EXIST::FUNCTION:WHIRLPOOL
+EVP_idea_ecb                            2209	1_1_0	EXIST::FUNCTION:IDEA
+i2d_TS_ACCURACY                         2210	1_1_0	EXIST::FUNCTION:TS
+ASN1_VISIBLESTRING_free                 2211	1_1_0	EXIST::FUNCTION:
+NCONF_load_bio                          2212	1_1_0	EXIST::FUNCTION:
+DSA_get_default_method                  2213	1_1_0	EXIST::FUNCTION:DSA
+OPENSSL_LH_retrieve                     2214	1_1_0	EXIST::FUNCTION:
+CRYPTO_ccm128_decrypt_ccm64             2215	1_1_0	EXIST::FUNCTION:
+TS_RESP_CTX_set_clock_precision_digits  2216	1_1_0	EXIST::FUNCTION:TS
+SCT_LIST_validate                       2217	1_1_0	EXIST::FUNCTION:CT
+X509_PURPOSE_get_id                     2218	1_1_0	EXIST::FUNCTION:
+EC_KEY_get_ex_data                      2219	1_1_0	EXIST::FUNCTION:EC
+EVP_MD_size                             2220	1_1_0	EXIST::FUNCTION:
+CRYPTO_malloc                           2221	1_1_0	EXIST::FUNCTION:
+ERR_load_ASN1_strings                   2222	1_1_0	EXIST::FUNCTION:
+X509_REQ_get_extension_nids             2223	1_1_0	EXIST::FUNCTION:
+TS_REQ_get_ext_by_OBJ                   2224	1_1_0	EXIST::FUNCTION:TS
+i2d_X509                                2225	1_1_0	EXIST::FUNCTION:
+PEM_read_X509_AUX                       2226	1_1_0	EXIST::FUNCTION:STDIO
+TS_VERIFY_CTX_set_flags                 2227	1_1_0	EXIST::FUNCTION:TS
+IPAddressRange_new                      2228	1_1_0	EXIST::FUNCTION:RFC3779
+TS_REQ_get_exts                         2229	1_1_0	EXIST::FUNCTION:TS
+POLICY_CONSTRAINTS_new                  2230	1_1_0	EXIST::FUNCTION:
+OTHERNAME_new                           2231	1_1_0	EXIST::FUNCTION:
+BN_rshift                               2232	1_1_0	EXIST::FUNCTION:
+i2d_GENERAL_NAMES                       2233	1_1_0	EXIST::FUNCTION:
+EC_METHOD_get_field_type                2234	1_1_0	EXIST::FUNCTION:EC
+ENGINE_set_name                         2235	1_1_0	EXIST::FUNCTION:ENGINE
+TS_TST_INFO_get_policy_id               2236	1_1_0	EXIST::FUNCTION:TS
+PKCS7_SIGNER_INFO_set                   2237	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_PKCS8_PRIV_KEY_INFO       2238	1_1_0	EXIST::FUNCTION:
+EC_GROUP_set_curve_GF2m                 2239	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_2_0,EC,EC2M
+ENGINE_load_builtin_engines             2240	1_1_0	EXIST::FUNCTION:ENGINE
+SRP_VBASE_init                          2241	1_1_0	EXIST::FUNCTION:SRP
+SHA224_Final                            2242	1_1_0	EXIST::FUNCTION:
+OCSP_CERTSTATUS_free                    2243	1_1_0	EXIST::FUNCTION:OCSP
+d2i_TS_TST_INFO                         2244	1_1_0	EXIST::FUNCTION:TS
+IPAddressOrRange_it                     2245	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:RFC3779
+IPAddressOrRange_it                     2245	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:RFC3779
+ENGINE_get_cipher                       2246	1_1_0	EXIST::FUNCTION:ENGINE
+TS_TST_INFO_delete_ext                  2247	1_1_0	EXIST::FUNCTION:TS
+TS_OBJ_print_bio                        2248	1_1_0	EXIST::FUNCTION:TS
+X509_time_adj_ex                        2249	1_1_0	EXIST::FUNCTION:
+OCSP_request_add1_cert                  2250	1_1_0	EXIST::FUNCTION:OCSP
+ERR_load_X509_strings                   2251	1_1_0	EXIST::FUNCTION:
+SHA1_Transform                          2252	1_1_0	EXIST::FUNCTION:
+CMS_signed_get_attr_by_NID              2253	1_1_0	EXIST::FUNCTION:CMS
+X509_STORE_CTX_get_by_subject           2254	1_1_0	EXIST::FUNCTION:
+ASN1_OCTET_STRING_it                    2255	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_OCTET_STRING_it                    2255	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+OPENSSL_sk_set_cmp_func                 2256	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_table_cleanup         2257	1_1_0	EXIST::FUNCTION:
+i2d_re_X509_REQ_tbs                     2258	1_1_0	EXIST::FUNCTION:
+CONF_load_bio                           2259	1_1_0	EXIST::FUNCTION:
+X509_ATTRIBUTE_get0_object              2260	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_missing_parameters             2261	1_1_0	EXIST::FUNCTION:
+X509_REQ_INFO_new                       2262	1_1_0	EXIST::FUNCTION:
+EVP_rc2_cfb64                           2263	1_1_0	EXIST::FUNCTION:RC2
+PKCS7_get_smimecap                      2264	1_1_0	EXIST::FUNCTION:
+ERR_get_state                           2265	1_1_0	EXIST::FUNCTION:
+d2i_DSAPrivateKey_bio                   2266	1_1_0	EXIST::FUNCTION:DSA
+X509_PURPOSE_get_trust                  2267	1_1_0	EXIST::FUNCTION:
+EC_GROUP_get_point_conversion_form      2268	1_1_0	EXIST::FUNCTION:EC
+ASN1_OBJECT_it                          2269	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_OBJECT_it                          2269	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+BN_mod_add_quick                        2270	1_1_0	EXIST::FUNCTION:
+NCONF_free                              2271	1_1_0	EXIST::FUNCTION:
+NETSCAPE_SPKI_b64_decode                2272	1_1_0	EXIST::FUNCTION:
+BIO_f_md                                2273	1_1_0	EXIST::FUNCTION:
+EVP_MD_CTX_pkey_ctx                     2274	1_1_0	EXIST::FUNCTION:
+ENGINE_set_default_EC                   2275	1_1_0	EXIST::FUNCTION:ENGINE
+CMS_ReceiptRequest_free                 2276	1_1_0	EXIST::FUNCTION:CMS
+TS_STATUS_INFO_get0_text                2277	1_1_0	EXIST::FUNCTION:TS
+CRYPTO_get_ex_new_index                 2278	1_1_0	EXIST::FUNCTION:
+ASN1_PCTX_set_flags                     2279	1_1_0	EXIST::FUNCTION:
+PEM_write_X509_CRL                      2280	1_1_0	EXIST::FUNCTION:STDIO
+BF_cbc_encrypt                          2281	1_1_0	EXIST::FUNCTION:BF
+BN_num_bits_word                        2282	1_1_0	EXIST::FUNCTION:
+EVP_DecodeInit                          2283	1_1_0	EXIST::FUNCTION:
+BN_ucmp                                 2284	1_1_0	EXIST::FUNCTION:
+SXNET_get_id_asc                        2285	1_1_0	EXIST::FUNCTION:
+SCT_set1_extensions                     2286	1_1_0	EXIST::FUNCTION:CT
+PKCS12_SAFEBAG_new                      2287	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_set_nonce                   2288	1_1_0	EXIST::FUNCTION:TS
+PEM_read_ECPrivateKey                   2289	1_1_0	EXIST::FUNCTION:EC,STDIO
+RSA_free                                2290	1_1_0	EXIST::FUNCTION:RSA
+X509_CRL_INFO_new                       2291	1_1_0	EXIST::FUNCTION:
+AES_cfb8_encrypt                        2292	1_1_0	EXIST::FUNCTION:
+d2i_ASN1_SEQUENCE_ANY                   2293	1_1_0	EXIST::FUNCTION:
+PKCS12_create                           2294	1_1_0	EXIST::FUNCTION:
+X509at_get_attr_count                   2295	1_1_0	EXIST::FUNCTION:
+PKCS12_init                             2296	1_1_0	EXIST::FUNCTION:
+CRYPTO_free_ex_data                     2297	1_1_0	EXIST::FUNCTION:
+EVP_aes_128_cfb8                        2298	1_1_0	EXIST::FUNCTION:
+ESS_ISSUER_SERIAL_free                  2299	1_1_0	EXIST::FUNCTION:TS
+BN_mod_exp_mont_word                    2300	1_1_0	EXIST::FUNCTION:
+X509V3_EXT_nconf_nid                    2301	1_1_0	EXIST::FUNCTION:
+UTF8_putc                               2302	1_1_0	EXIST::FUNCTION:
+RSA_private_encrypt                     2303	1_1_0	EXIST::FUNCTION:RSA
+X509_LOOKUP_shutdown                    2304	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_set_accuracy                2305	1_1_0	EXIST::FUNCTION:TS
+OCSP_basic_verify                       2306	1_1_0	EXIST::FUNCTION:OCSP
+X509at_add1_attr_by_OBJ                 2307	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_asn1_add0                      2308	1_1_0	EXIST::FUNCTION:
+PKCS12_SAFEBAG_get1_crl                 2309	1_1_0	EXIST::FUNCTION:
+ASN1_STRING_get_default_mask            2310	1_1_0	EXIST::FUNCTION:
+X509_alias_set1                         2311	1_1_0	EXIST::FUNCTION:
+ASN1_item_unpack                        2312	1_1_0	EXIST::FUNCTION:
+HMAC_CTX_free                           2313	1_1_0	EXIST::FUNCTION:
+EC_POINT_new                            2314	1_1_0	EXIST::FUNCTION:EC
+PKCS7_ISSUER_AND_SERIAL_digest          2315	1_1_0	EXIST::FUNCTION:
+EVP_des_ofb                             2316	1_1_0	EXIST::FUNCTION:DES
+DSA_set_method                          2317	1_1_0	EXIST::FUNCTION:DSA
+EVP_PKEY_get1_RSA                       2318	1_1_0	EXIST::FUNCTION:RSA
+EC_KEY_OpenSSL                          2319	1_1_0	EXIST::FUNCTION:EC
+EVP_camellia_192_ofb                    2320	1_1_0	EXIST::FUNCTION:CAMELLIA
+ASN1_STRING_length                      2321	1_1_0	EXIST::FUNCTION:
+PKCS7_set_digest                        2322	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_PUBKEY                    2323	1_1_0	EXIST::FUNCTION:
+PEM_read_PKCS7                          2324	1_1_0	EXIST::FUNCTION:STDIO
+DH_get_2048_256                         2325	1_1_0	EXIST::FUNCTION:DH
+X509at_delete_attr                      2326	1_1_0	EXIST::FUNCTION:
+PEM_write_bio                           2327	1_1_0	EXIST::FUNCTION:
+CMS_signed_get_attr_by_OBJ              2329	1_1_0	EXIST::FUNCTION:CMS
+X509_REVOKED_add_ext                    2330	1_1_0	EXIST::FUNCTION:
+EVP_CipherUpdate                        2331	1_1_0	EXIST::FUNCTION:
+Camellia_cfb8_encrypt                   2332	1_1_0	EXIST::FUNCTION:CAMELLIA
+EVP_aes_256_xts                         2333	1_1_0	EXIST::FUNCTION:
+EVP_DigestSignFinal                     2334	1_1_0	EXIST::FUNCTION:
+ASN1_STRING_cmp                         2335	1_1_0	EXIST::FUNCTION:
+EVP_chacha20_poly1305                   2336	1_1_0	EXIST::FUNCTION:CHACHA,POLY1305
+OPENSSL_sk_zero                         2337	1_1_0	EXIST::FUNCTION:
+ASN1_PRINTABLE_type                     2338	1_1_0	EXIST::FUNCTION:
+TS_CONF_set_ess_cert_id_chain           2339	1_1_0	EXIST::FUNCTION:TS
+PEM_read_DSAPrivateKey                  2340	1_1_0	EXIST::FUNCTION:DSA,STDIO
+DH_generate_parameters_ex               2341	1_1_0	EXIST::FUNCTION:DH
+UI_dup_input_string                     2342	1_1_0	EXIST::FUNCTION:
+X509_keyid_set1                         2343	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_set1                  2344	1_1_0	EXIST::FUNCTION:
+EC_GROUP_get_asn1_flag                  2345	1_1_0	EXIST::FUNCTION:EC
+CMS_decrypt_set1_password               2346	1_1_0	EXIST::FUNCTION:CMS
+BIO_copy_next_retry                     2347	1_1_0	EXIST::FUNCTION:
+X509_POLICY_NODE_print                  2348	1_1_0	EXIST::FUNCTION:
+ASN1_TIME_diff                          2349	1_1_0	EXIST::FUNCTION:
+BIO_s_fd                                2350	1_1_0	EXIST::FUNCTION:
+i2d_CMS_bio                             2351	1_1_0	EXIST::FUNCTION:CMS
+CRYPTO_gcm128_decrypt                   2352	1_1_0	EXIST::FUNCTION:
+EVP_aes_256_ctr                         2353	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_bits                           2354	1_1_0	EXIST::FUNCTION:
+BN_BLINDING_new                         2355	1_1_0	EXIST::FUNCTION:
+ASN1_GENERALIZEDTIME_check              2356	1_1_0	EXIST::FUNCTION:
+BN_clear_bit                            2357	1_1_0	EXIST::FUNCTION:
+BN_bn2lebinpad                          2358	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_up_ref                         2359	1_1_0	EXIST::FUNCTION:
+X509_getm_notBefore                     2360	1_1_0	EXIST::FUNCTION:
+BN_nist_mod_224                         2361	1_1_0	EXIST::FUNCTION:
+DES_decrypt3                            2362	1_1_0	EXIST::FUNCTION:DES
+OTHERNAME_it                            2363	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+OTHERNAME_it                            2363	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+X509at_add1_attr_by_txt                 2364	1_1_0	EXIST::FUNCTION:
+PKCS7_SIGN_ENVELOPE_free                2365	1_1_0	EXIST::FUNCTION:
+BIO_dgram_is_sctp                       2366	1_1_0	EXIST::FUNCTION:DGRAM,SCTP
+DH_check                                2367	1_1_0	EXIST::FUNCTION:DH
+Camellia_set_key                        2368	1_1_0	EXIST::FUNCTION:CAMELLIA
+X509_LOOKUP_by_issuer_serial            2369	1_1_0	EXIST::FUNCTION:
+ASN1_BMPSTRING_free                     2370	1_1_0	EXIST::FUNCTION:
+BIO_new_accept                          2371	1_1_0	EXIST::FUNCTION:SOCK
+GENERAL_NAME_new                        2372	1_1_0	EXIST::FUNCTION:
+DES_encrypt3                            2373	1_1_0	EXIST::FUNCTION:DES
+PKCS7_get_signer_info                   2374	1_1_0	EXIST::FUNCTION:
+ASN1_OCTET_STRING_set                   2375	1_1_0	EXIST::FUNCTION:
+BN_mask_bits                            2376	1_1_0	EXIST::FUNCTION:
+ASN1_UTF8STRING_it                      2377	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_UTF8STRING_it                      2377	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ASN1_SCTX_set_app_data                  2378	1_1_0	EXIST::FUNCTION:
+CMS_add0_cert                           2379	1_1_0	EXIST::FUNCTION:CMS
+i2d_GENERAL_NAME                        2380	1_1_0	EXIST::FUNCTION:
+BIO_ADDR_new                            2381	1_1_0	EXIST::FUNCTION:SOCK
+ENGINE_get_pkey_asn1_meth_engine        2382	1_1_0	EXIST::FUNCTION:ENGINE
+d2i_ASN1_BMPSTRING                      2383	1_1_0	EXIST::FUNCTION:
+PKCS12_SAFEBAG_create0_p8inf            2384	1_1_0	EXIST::FUNCTION:
+OBJ_cmp                                 2385	1_1_0	EXIST::FUNCTION:
+MD2                                     2386	1_1_0	EXIST::FUNCTION:MD2
+X509_PUBKEY_new                         2387	1_1_0	EXIST::FUNCTION:
+BN_CTX_end                              2388	1_1_0	EXIST::FUNCTION:
+BIO_get_retry_BIO                       2389	1_1_0	EXIST::FUNCTION:
+X509_REQ_add1_attr_by_OBJ               2390	1_1_0	EXIST::FUNCTION:
+ASN1_item_ex_free                       2391	1_1_0	EXIST::FUNCTION:
+X509_SIG_new                            2392	1_1_0	EXIST::FUNCTION:
+BN_sqr                                  2393	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_set_time                    2394	1_1_0	EXIST::FUNCTION:TS
+OPENSSL_die                             2395	1_1_0	EXIST::FUNCTION:
+X509_LOOKUP_by_alias                    2396	1_1_0	EXIST::FUNCTION:
+EC_KEY_set_conv_form                    2397	1_1_0	EXIST::FUNCTION:EC
+X509_TRUST_get_count                    2399	1_1_0	EXIST::FUNCTION:
+IPAddressOrRange_free                   2400	1_1_0	EXIST::FUNCTION:RFC3779
+RSA_padding_add_PKCS1_OAEP              2401	1_1_0	EXIST::FUNCTION:RSA
+EC_KEY_set_ex_data                      2402	1_1_0	EXIST::FUNCTION:EC
+SRP_VBASE_new                           2403	1_1_0	EXIST::FUNCTION:SRP
+i2d_ECDSA_SIG                           2404	1_1_0	EXIST::FUNCTION:EC
+BIO_dump_indent                         2405	1_1_0	EXIST::FUNCTION:
+ENGINE_set_pkey_asn1_meths              2406	1_1_0	EXIST::FUNCTION:ENGINE
+OPENSSL_gmtime_diff                     2407	1_1_0	EXIST::FUNCTION:
+TS_CONF_set_crypto_device               2408	1_1_0	EXIST::FUNCTION:ENGINE,TS
+COMP_CTX_get_method                     2409	1_1_0	EXIST::FUNCTION:COMP
+EC_GROUP_get_cofactor                   2410	1_1_0	EXIST::FUNCTION:EC
+EVP_rc5_32_12_16_ofb                    2411	1_1_0	EXIST::FUNCTION:RC5
+EVP_MD_CTX_md_data                      2412	1_1_0	EXIST::FUNCTION:
+ASN1_PCTX_set_nm_flags                  2413	1_1_0	EXIST::FUNCTION:
+BIO_ctrl                                2414	1_1_0	EXIST::FUNCTION:
+X509_CRL_set_default_method             2415	1_1_0	EXIST::FUNCTION:
+d2i_RSAPublicKey_fp                     2417	1_1_0	EXIST::FUNCTION:RSA,STDIO
+UI_method_get_flusher                   2418	1_1_0	EXIST::FUNCTION:
+EC_POINT_dbl                            2419	1_1_0	EXIST::FUNCTION:EC
+i2d_X509_CRL_INFO                       2420	1_1_0	EXIST::FUNCTION:
+i2d_OCSP_CERTSTATUS                     2421	1_1_0	EXIST::FUNCTION:OCSP
+X509_REVOKED_get0_revocationDate        2422	1_1_0	EXIST::FUNCTION:
+PKCS7_add_crl                           2423	1_1_0	EXIST::FUNCTION:
+ECDSA_do_sign                           2424	1_1_0	EXIST::FUNCTION:EC
+ASN1_GENERALIZEDTIME_it                 2425	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_GENERALIZEDTIME_it                 2425	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+PKCS8_pkey_get0                         2426	1_1_0	EXIST::FUNCTION:
+OCSP_sendreq_new                        2427	1_1_0	EXIST::FUNCTION:OCSP
+EVP_aes_256_cfb128                      2428	1_1_0	EXIST::FUNCTION:
+RSA_set_ex_data                         2429	1_1_0	EXIST::FUNCTION:RSA
+BN_GENCB_call                           2430	1_1_0	EXIST::FUNCTION:
+X509V3_EXT_add_nconf_sk                 2431	1_1_0	EXIST::FUNCTION:
+i2d_TS_MSG_IMPRINT_fp                   2432	1_1_0	EXIST::FUNCTION:STDIO,TS
+PKCS12_new                              2433	1_1_0	EXIST::FUNCTION:
+X509_REVOKED_set_serialNumber           2434	1_1_0	EXIST::FUNCTION:
+EVP_get_digestbyname                    2435	1_1_0	EXIST::FUNCTION:
+X509_CRL_get_lastUpdate                 2436	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0
+OBJ_create_objects                      2437	1_1_0	EXIST::FUNCTION:
+EVP_enc_null                            2438	1_1_0	EXIST::FUNCTION:
+OCSP_ONEREQ_get_ext_by_critical         2439	1_1_0	EXIST::FUNCTION:OCSP
+OCSP_request_onereq_count               2440	1_1_0	EXIST::FUNCTION:OCSP
+BN_hex2bn                               2441	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_meth_set_impl_ctx_size       2442	1_1_0	EXIST::FUNCTION:
+ASIdentifiers_new                       2443	1_1_0	EXIST::FUNCTION:RFC3779
+CONF_imodule_get_flags                  2444	1_1_0	EXIST::FUNCTION:
+PKCS12_SAFEBAG_it                       2445	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS12_SAFEBAG_it                       2445	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+EVP_CIPHER_meth_set_set_asn1_params     2446	1_1_0	EXIST::FUNCTION:
+EC_KEY_get_enc_flags                    2447	1_1_0	EXIST::FUNCTION:EC
+X509_OBJECT_idx_by_subject              2448	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_copy                      2449	1_1_0	EXIST::FUNCTION:
+NETSCAPE_CERT_SEQUENCE_new              2450	1_1_0	EXIST::FUNCTION:
+CRYPTO_ocb128_decrypt                   2451	1_1_0	EXIST::FUNCTION:OCB
+ASYNC_WAIT_CTX_free                     2452	1_1_0	EXIST::FUNCTION:
+d2i_PKCS7_DIGEST                        2453	1_1_0	EXIST::FUNCTION:
+d2i_TS_TST_INFO_bio                     2454	1_1_0	EXIST::FUNCTION:TS
+BIGNUM_it                               2455	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+BIGNUM_it                               2455	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+BN_BLINDING_get_flags                   2456	1_1_0	EXIST::FUNCTION:
+X509_EXTENSION_get_critical             2457	1_1_0	EXIST::FUNCTION:
+DSA_set_default_method                  2458	1_1_0	EXIST::FUNCTION:DSA
+PEM_write_bio_DHxparams                 2459	1_1_0	EXIST::FUNCTION:DH
+DSA_set_ex_data                         2460	1_1_0	EXIST::FUNCTION:DSA
+BIO_s_datagram_sctp                     2461	1_1_0	EXIST::FUNCTION:DGRAM,SCTP
+SXNET_add_id_asc                        2462	1_1_0	EXIST::FUNCTION:
+X509_print_fp                           2463	1_1_0	EXIST::FUNCTION:STDIO
+TS_REQ_set_version                      2464	1_1_0	EXIST::FUNCTION:TS
+OCSP_REQINFO_new                        2465	1_1_0	EXIST::FUNCTION:OCSP
+Camellia_decrypt                        2466	1_1_0	EXIST::FUNCTION:CAMELLIA
+X509_signature_print                    2467	1_1_0	EXIST::FUNCTION:
+EVP_camellia_128_ecb                    2468	1_1_0	EXIST::FUNCTION:CAMELLIA
+MD2_Final                               2469	1_1_0	EXIST::FUNCTION:MD2
+OCSP_REQ_CTX_add1_header                2470	1_1_0	EXIST::FUNCTION:OCSP
+NETSCAPE_SPKAC_it                       2471	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+NETSCAPE_SPKAC_it                       2471	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ASIdOrRange_free                        2472	1_1_0	EXIST::FUNCTION:RFC3779
+EC_POINT_get_Jprojective_coordinates_GFp 2473	1_1_0	EXIST::FUNCTION:EC
+EVP_aes_128_cbc_hmac_sha256             2474	1_1_0	EXIST::FUNCTION:
+i2d_PKCS7_SIGNED                        2475	1_1_0	EXIST::FUNCTION:
+TS_VERIFY_CTX_set_data                  2476	1_1_0	EXIST::FUNCTION:TS
+BN_pseudo_rand_range                    2477	1_1_0	EXIST::FUNCTION:
+X509V3_EXT_add_nconf                    2478	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_CTX_ctrl                     2479	1_1_0	EXIST::FUNCTION:
+ASN1_T61STRING_it                       2480	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_T61STRING_it                       2480	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ENGINE_get_prev                         2481	1_1_0	EXIST::FUNCTION:ENGINE
+OCSP_accept_responses_new               2482	1_1_0	EXIST::FUNCTION:OCSP
+ERR_load_EC_strings                     2483	1_1_0	EXIST::FUNCTION:EC
+X509V3_string_free                      2484	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_set_paramgen              2485	1_1_0	EXIST::FUNCTION:
+ENGINE_set_load_ssl_client_cert_function 2486	1_1_0	EXIST::FUNCTION:ENGINE
+EVP_ENCODE_CTX_free                     2487	1_1_0	EXIST::FUNCTION:
+i2d_ASN1_BIT_STRING                     2488	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_set_verifyctx             2489	1_1_0	EXIST::FUNCTION:
+X509_TRUST_add                          2490	1_1_0	EXIST::FUNCTION:
+BUF_MEM_free                            2491	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_get_accuracy                2492	1_1_0	EXIST::FUNCTION:TS
+TS_REQ_dup                              2493	1_1_0	EXIST::FUNCTION:TS
+ASN1_STRING_type_new                    2494	1_1_0	EXIST::FUNCTION:
+TS_STATUS_INFO_free                     2495	1_1_0	EXIST::FUNCTION:TS
+BN_mod_mul                              2496	1_1_0	EXIST::FUNCTION:
+CMS_add0_recipient_key                  2497	1_1_0	EXIST::FUNCTION:CMS
+BIO_f_zlib                              2498	1_1_0	EXIST:ZLIB:FUNCTION:COMP
+AES_cfb128_encrypt                      2499	1_1_0	EXIST::FUNCTION:
+ENGINE_set_EC                           2500	1_1_0	EXIST::FUNCTION:ENGINE
+d2i_ECPKParameters                      2501	1_1_0	EXIST::FUNCTION:EC
+IDEA_ofb64_encrypt                      2502	1_1_0	EXIST::FUNCTION:IDEA
+CAST_decrypt                            2503	1_1_0	EXIST::FUNCTION:CAST
+TS_STATUS_INFO_get0_failure_info        2504	1_1_0	EXIST::FUNCTION:TS
+ENGINE_unregister_pkey_meths            2506	1_1_0	EXIST::FUNCTION:ENGINE
+DISPLAYTEXT_new                         2507	1_1_0	EXIST::FUNCTION:
+CMS_final                               2508	1_1_0	EXIST::FUNCTION:CMS
+BIO_nwrite                              2509	1_1_0	EXIST::FUNCTION:
+GENERAL_NAME_free                       2510	1_1_0	EXIST::FUNCTION:
+PKCS12_pack_p7encdata                   2511	1_1_0	EXIST::FUNCTION:
+BN_generate_dsa_nonce                   2512	1_1_0	EXIST::FUNCTION:
+X509_verify_cert                        2513	1_1_0	EXIST::FUNCTION:
+X509_policy_level_get0_node             2514	1_1_0	EXIST::FUNCTION:
+X509_REQ_get_attr                       2515	1_1_0	EXIST::FUNCTION:
+SHA1                                    2516	1_1_0	EXIST::FUNCTION:
+X509_print                              2517	1_1_0	EXIST::FUNCTION:
+d2i_AutoPrivateKey                      2518	1_1_0	EXIST::FUNCTION:
+X509_REQ_new                            2519	1_1_0	EXIST::FUNCTION:
+PKCS12_add_safes                        2520	1_1_0	EXIST::FUNCTION:
+PKCS12_parse                            2521	1_1_0	EXIST::FUNCTION:
+BN_GF2m_mod_div                         2522	1_1_0	EXIST::FUNCTION:EC2M
+i2d_USERNOTICE                          2523	1_1_0	EXIST::FUNCTION:
+d2i_NETSCAPE_SPKI                       2524	1_1_0	EXIST::FUNCTION:
+CRYPTO_mem_leaks                        2525	1_1_0	EXIST::FUNCTION:CRYPTO_MDEBUG
+BN_get_rfc3526_prime_1536               2526	1_1_0	EXIST::FUNCTION:
+DSA_sign                                2527	1_1_0	EXIST::FUNCTION:DSA
+RAND_egd                                2528	1_1_0	EXIST::FUNCTION:EGD
+ASN1_d2i_bio                            2529	1_1_0	EXIST::FUNCTION:
+X509_REQ_digest                         2531	1_1_0	EXIST::FUNCTION:
+X509_set1_notAfter                      2532	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_type                         2533	1_1_0	EXIST::FUNCTION:
+ASN1_TYPE_set_octetstring               2534	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_asn1_set_free                  2535	1_1_0	EXIST::FUNCTION:
+CMS_signed_get0_data_by_OBJ             2536	1_1_0	EXIST::FUNCTION:CMS
+X509_PURPOSE_add                        2537	1_1_0	EXIST::FUNCTION:
+PKCS7_ENVELOPE_free                     2538	1_1_0	EXIST::FUNCTION:
+PKCS12_key_gen_uni                      2539	1_1_0	EXIST::FUNCTION:
+WHIRLPOOL                               2540	1_1_0	EXIST::FUNCTION:WHIRLPOOL
+UI_set_default_method                   2542	1_1_0	EXIST::FUNCTION:
+EC_POINT_is_at_infinity                 2543	1_1_0	EXIST::FUNCTION:EC
+i2d_NOTICEREF                           2544	1_1_0	EXIST::FUNCTION:
+EC_KEY_new                              2545	1_1_0	EXIST::FUNCTION:EC
+EVP_chacha20                            2546	1_1_0	EXIST::FUNCTION:CHACHA
+BN_bn2dec                               2547	1_1_0	EXIST::FUNCTION:
+X509_REQ_print_ex                       2548	1_1_0	EXIST::FUNCTION:
+PEM_read_CMS                            2549	1_1_0	EXIST::FUNCTION:CMS,STDIO
+d2i_NETSCAPE_CERT_SEQUENCE              2550	1_1_0	EXIST::FUNCTION:
+X509_CRL_set_version                    2551	1_1_0	EXIST::FUNCTION:
+ASN1_PCTX_set_cert_flags                2552	1_1_0	EXIST::FUNCTION:
+PKCS8_PRIV_KEY_INFO_free                2553	1_1_0	EXIST::FUNCTION:
+SHA224_Update                           2554	1_1_0	EXIST::FUNCTION:
+EC_GROUP_new_by_curve_name              2555	1_1_0	EXIST::FUNCTION:EC
+X509_STORE_set_purpose                  2556	1_1_0	EXIST::FUNCTION:
+X509_CRL_get0_signature                 2557	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_CTX_get_keygen_info            2558	1_1_0	EXIST::FUNCTION:
+d2i_ASN1_UINTEGER                       2559	1_1_0	EXIST::FUNCTION:
+i2s_ASN1_INTEGER                        2560	1_1_0	EXIST::FUNCTION:
+d2i_EC_PUBKEY_fp                        2561	1_1_0	EXIST::FUNCTION:EC,STDIO
+i2d_OCSP_SIGNATURE                      2562	1_1_0	EXIST::FUNCTION:OCSP
+i2d_X509_EXTENSION                      2563	1_1_0	EXIST::FUNCTION:
+PEM_read_bio_X509                       2564	1_1_0	EXIST::FUNCTION:
+DES_key_sched                           2565	1_1_0	EXIST::FUNCTION:DES
+GENERAL_NAME_dup                        2566	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get1_crls                2567	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_set_verify                2568	1_1_0	EXIST::FUNCTION:
+EVP_sha256                              2569	1_1_0	EXIST::FUNCTION:
+CMS_unsigned_delete_attr                2570	1_1_0	EXIST::FUNCTION:CMS
+EVP_md5_sha1                            2571	1_1_0	EXIST::FUNCTION:MD5
+EVP_PKEY_sign_init                      2572	1_1_0	EXIST::FUNCTION:
+OPENSSL_LH_insert                       2573	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_meth_get_cleanup             2574	1_1_0	EXIST::FUNCTION:
+ASN1_item_ex_d2i                        2575	1_1_0	EXIST::FUNCTION:
+EVP_MD_meth_free                        2576	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_new                       2577	1_1_0	EXIST::FUNCTION:
+RSA_padding_check_PKCS1_OAEP            2578	1_1_0	EXIST::FUNCTION:RSA
+OCSP_SERVICELOC_it                      2579	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:OCSP
+OCSP_SERVICELOC_it                      2579	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:OCSP
+PKCS12_SAFEBAG_get_nid                  2580	1_1_0	EXIST::FUNCTION:
+EVP_MD_CTX_set_update_fn                2581	1_1_0	EXIST::FUNCTION:
+BIO_f_asn1                              2582	1_1_0	EXIST::FUNCTION:
+BIO_dump                                2583	1_1_0	EXIST::FUNCTION:
+ENGINE_load_ssl_client_cert             2584	1_1_0	EXIST::FUNCTION:ENGINE
+X509_STORE_CTX_set_verify_cb            2585	1_1_0	EXIST::FUNCTION:
+CRYPTO_clear_realloc                    2586	1_1_0	EXIST::FUNCTION:
+OPENSSL_strnlen                         2587	1_1_0	EXIST::FUNCTION:
+IDEA_ecb_encrypt                        2588	1_1_0	EXIST::FUNCTION:IDEA
+ASN1_STRING_set_default_mask            2589	1_1_0	EXIST::FUNCTION:
+TS_VERIFY_CTX_add_flags                 2590	1_1_0	EXIST::FUNCTION:TS
+FIPS_mode                               2591	1_1_0	EXIST::FUNCTION:
+d2i_ASN1_UNIVERSALSTRING                2592	1_1_0	EXIST::FUNCTION:
+NAME_CONSTRAINTS_free                   2593	1_1_0	EXIST::FUNCTION:
+EC_GROUP_get_order                      2594	1_1_0	EXIST::FUNCTION:EC
+X509_REVOKED_add1_ext_i2d               2595	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_add1_host             2596	1_1_0	EXIST::FUNCTION:
+i2d_PUBKEY_bio                          2597	1_1_0	EXIST::FUNCTION:
+MD4_Update                              2598	1_1_0	EXIST::FUNCTION:MD4
+X509_STORE_CTX_set_time                 2599	1_1_0	EXIST::FUNCTION:
+ENGINE_set_default_DH                   2600	1_1_0	EXIST::FUNCTION:ENGINE
+X509_ocspid_print                       2601	1_1_0	EXIST::FUNCTION:
+DH_set_method                           2602	1_1_0	EXIST::FUNCTION:DH
+EVP_rc2_64_cbc                          2603	1_1_0	EXIST::FUNCTION:RC2
+CRYPTO_THREAD_get_current_id            2604	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_CTX_set_cb                     2605	1_1_0	EXIST::FUNCTION:
+PROXY_POLICY_it                         2606	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PROXY_POLICY_it                         2606	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ENGINE_register_complete                2607	1_1_0	EXIST::FUNCTION:ENGINE
+EVP_DecodeUpdate                        2609	1_1_0	EXIST::FUNCTION:
+ENGINE_get_default_RAND                 2610	1_1_0	EXIST::FUNCTION:ENGINE
+ERR_peek_last_error_line                2611	1_1_0	EXIST::FUNCTION:
+ENGINE_get_ssl_client_cert_function     2612	1_1_0	EXIST::FUNCTION:ENGINE
+OPENSSL_LH_node_usage_stats             2613	1_1_0	EXIST::FUNCTION:STDIO
+DIRECTORYSTRING_it                      2614	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+DIRECTORYSTRING_it                      2614	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+BIO_write                               2615	1_1_0	EXIST::FUNCTION:
+OCSP_ONEREQ_get_ext_by_OBJ              2616	1_1_0	EXIST::FUNCTION:OCSP
+SEED_encrypt                            2617	1_1_0	EXIST::FUNCTION:SEED
+IPAddressRange_it                       2618	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:RFC3779
+IPAddressRange_it                       2618	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:RFC3779
+PEM_read_bio_DSAPrivateKey              2619	1_1_0	EXIST::FUNCTION:DSA
+CMS_get0_type                           2620	1_1_0	EXIST::FUNCTION:CMS
+ASN1_PCTX_free                          2621	1_1_0	EXIST::FUNCTION:
+ESS_SIGNING_CERT_new                    2622	1_1_0	EXIST::FUNCTION:TS
+X509V3_EXT_conf_nid                     2623	1_1_0	EXIST::FUNCTION:
+EC_KEY_check_key                        2624	1_1_0	EXIST::FUNCTION:EC
+PKCS5_PBKDF2_HMAC                       2625	1_1_0	EXIST::FUNCTION:
+CONF_get_section                        2626	1_1_0	EXIST::FUNCTION:
+CMS_RecipientInfo_kari_decrypt          2627	1_1_0	EXIST::FUNCTION:CMS
+OBJ_add_sigid                           2628	1_1_0	EXIST::FUNCTION:
+d2i_SXNETID                             2629	1_1_0	EXIST::FUNCTION:
+CMS_get1_certs                          2630	1_1_0	EXIST::FUNCTION:CMS
+X509_CRL_check_suiteb                   2631	1_1_0	EXIST::FUNCTION:
+PKCS7_ENVELOPE_it                       2632	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS7_ENVELOPE_it                       2632	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ASIdentifierChoice_it                   2633	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:RFC3779
+ASIdentifierChoice_it                   2633	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:RFC3779
+CMS_RecipientEncryptedKey_cert_cmp      2634	1_1_0	EXIST::FUNCTION:CMS
+EVP_PKEY_CTX_get_app_data               2635	1_1_0	EXIST::FUNCTION:
+EC_GROUP_clear_free                     2636	1_1_0	EXIST::FUNCTION:EC
+BN_get_rfc2409_prime_1024               2637	1_1_0	EXIST::FUNCTION:
+CRYPTO_set_mem_functions                2638	1_1_0	EXIST::FUNCTION:
+i2d_ASN1_VISIBLESTRING                  2639	1_1_0	EXIST::FUNCTION:
+d2i_PBKDF2PARAM                         2640	1_1_0	EXIST::FUNCTION:
+ERR_load_COMP_strings                   2641	1_1_0	EXIST::FUNCTION:COMP
+EVP_PKEY_meth_add0                      2642	1_1_0	EXIST::FUNCTION:
+EVP_rc4_40                              2643	1_1_0	EXIST::FUNCTION:RC4
+RSA_bits                                2645	1_1_0	EXIST::FUNCTION:RSA
+ASN1_item_dup                           2646	1_1_0	EXIST::FUNCTION:
+GENERAL_NAMES_it                        2647	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+GENERAL_NAMES_it                        2647	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+X509_issuer_name_hash                   2648	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_get_nonce                   2649	1_1_0	EXIST::FUNCTION:TS
+MD4_Init                                2650	1_1_0	EXIST::FUNCTION:MD4
+X509_EXTENSION_create_by_OBJ            2651	1_1_0	EXIST::FUNCTION:
+EVP_aes_256_cbc_hmac_sha1               2652	1_1_0	EXIST::FUNCTION:
+SCT_validate                            2653	1_1_0	EXIST::FUNCTION:CT
+EC_GROUP_dup                            2654	1_1_0	EXIST::FUNCTION:EC
+EVP_sha1                                2655	1_1_0	EXIST::FUNCTION:
+OPENSSL_sk_new                          2656	1_1_0	EXIST::FUNCTION:
+BN_dup                                  2657	1_1_0	EXIST::FUNCTION:
+TS_MSG_IMPRINT_print_bio                2658	1_1_0	EXIST::FUNCTION:TS
+CONF_module_set_usr_data                2659	1_1_0	EXIST::FUNCTION:
+EC_KEY_generate_key                     2660	1_1_0	EXIST::FUNCTION:EC
+BIO_ctrl_get_write_guarantee            2661	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_assign                         2662	1_1_0	EXIST::FUNCTION:
+EVP_aes_128_ofb                         2663	1_1_0	EXIST::FUNCTION:
+CMS_data                                2664	1_1_0	EXIST::FUNCTION:CMS
+X509_load_cert_file                     2665	1_1_0	EXIST::FUNCTION:
+EC_GFp_nistp521_method                  2667	1_1_0	EXIST::FUNCTION:EC,EC_NISTP_64_GCC_128
+ECDSA_SIG_free                          2668	1_1_0	EXIST::FUNCTION:EC
+d2i_PKCS12_BAGS                         2669	1_1_0	EXIST::FUNCTION:
+RSA_public_encrypt                      2670	1_1_0	EXIST::FUNCTION:RSA
+X509_CRL_get0_extensions                2671	1_1_0	EXIST::FUNCTION:
+CMS_digest_verify                       2672	1_1_0	EXIST::FUNCTION:CMS
+ASN1_GENERALIZEDTIME_set                2673	1_1_0	EXIST::FUNCTION:
+TS_VERIFY_CTX_set_imprint               2674	1_1_0	EXIST::FUNCTION:TS
+BN_RECP_CTX_set                         2675	1_1_0	EXIST::FUNCTION:
+CRYPTO_secure_zalloc                    2676	1_1_0	EXIST::FUNCTION:
+i2d_EXTENDED_KEY_USAGE                  2677	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_DSAparams                 2678	1_1_0	EXIST::FUNCTION:DSA
+X509_cmp_time                           2679	1_1_0	EXIST::FUNCTION:
+d2i_CMS_ReceiptRequest                  2680	1_1_0	EXIST::FUNCTION:CMS
+X509_CRL_INFO_it                        2681	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_CRL_INFO_it                        2681	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+BUF_reverse                             2682	1_1_0	EXIST::FUNCTION:
+d2i_OCSP_SIGNATURE                      2683	1_1_0	EXIST::FUNCTION:OCSP
+X509_REQ_delete_attr                    2684	1_1_0	EXIST::FUNCTION:
+TS_RESP_CTX_set_signer_cert             2685	1_1_0	EXIST::FUNCTION:TS
+X509V3_EXT_d2i                          2686	1_1_0	EXIST::FUNCTION:
+ASN1_GENERALSTRING_it                   2687	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_GENERALSTRING_it                   2687	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+POLICYQUALINFO_free                     2688	1_1_0	EXIST::FUNCTION:
+EC_KEY_set_group                        2689	1_1_0	EXIST::FUNCTION:EC
+OCSP_check_validity                     2690	1_1_0	EXIST::FUNCTION:OCSP
+PEM_write_ECPKParameters                2691	1_1_0	EXIST::FUNCTION:EC,STDIO
+X509_VERIFY_PARAM_lookup                2692	1_1_0	EXIST::FUNCTION:
+X509_LOOKUP_by_fingerprint              2693	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_meth_free                    2694	1_1_0	EXIST::FUNCTION:
+PKCS7_RECIP_INFO_new                    2695	1_1_0	EXIST::FUNCTION:
+d2i_ECPrivateKey_fp                     2696	1_1_0	EXIST::FUNCTION:EC,STDIO
+TS_CONF_set_ordering                    2697	1_1_0	EXIST::FUNCTION:TS
+X509_CRL_get_ext                        2698	1_1_0	EXIST::FUNCTION:
+X509_CRL_get_ext_by_OBJ                 2699	1_1_0	EXIST::FUNCTION:
+OCSP_basic_add1_cert                    2700	1_1_0	EXIST::FUNCTION:OCSP
+ASN1_PRINTABLESTRING_new                2701	1_1_0	EXIST::FUNCTION:
+i2d_PBEPARAM                            2702	1_1_0	EXIST::FUNCTION:
+NETSCAPE_SPKI_new                       2703	1_1_0	EXIST::FUNCTION:
+AES_options                             2704	1_1_0	EXIST::FUNCTION:
+POLICYINFO_free                         2705	1_1_0	EXIST::FUNCTION:
+PEM_read_bio_Parameters                 2706	1_1_0	EXIST::FUNCTION:
+BN_abs_is_word                          2707	1_1_0	EXIST::FUNCTION:
+BIO_set_callback_arg                    2708	1_1_0	EXIST::FUNCTION:
+CONF_modules_load_file                  2709	1_1_0	EXIST::FUNCTION:
+X509_trust_clear                        2710	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_CTX_test_flags               2711	1_1_0	EXIST::FUNCTION:
+PKCS12_BAGS_free                        2712	1_1_0	EXIST::FUNCTION:
+PEM_X509_INFO_read                      2713	1_1_0	EXIST::FUNCTION:STDIO
+d2i_DSAPrivateKey                       2714	1_1_0	EXIST::FUNCTION:DSA
+i2d_PKCS8_PRIV_KEY_INFO_fp              2715	1_1_0	EXIST::FUNCTION:STDIO
+TS_RESP_print_bio                       2716	1_1_0	EXIST::FUNCTION:TS
+X509_STORE_set_default_paths            2717	1_1_0	EXIST::FUNCTION:
+d2i_TS_REQ                              2718	1_1_0	EXIST::FUNCTION:TS
+i2d_TS_TST_INFO_bio                     2719	1_1_0	EXIST::FUNCTION:TS
+CMS_sign_receipt                        2720	1_1_0	EXIST::FUNCTION:CMS
+ENGINE_set_RAND                         2721	1_1_0	EXIST::FUNCTION:ENGINE
+X509_REVOKED_get_ext_by_OBJ             2722	1_1_0	EXIST::FUNCTION:
+SEED_decrypt                            2723	1_1_0	EXIST::FUNCTION:SEED
+PEM_write_PKCS8PrivateKey               2724	1_1_0	EXIST::FUNCTION:STDIO
+ENGINE_new                              2725	1_1_0	EXIST::FUNCTION:ENGINE
+X509_check_issued                       2726	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_CTX_iv_length                2727	1_1_0	EXIST::FUNCTION:
+DES_string_to_2keys                     2728	1_1_0	EXIST::FUNCTION:DES
+EVP_PKEY_copy_parameters                2729	1_1_0	EXIST::FUNCTION:
+CMS_ContentInfo_print_ctx               2730	1_1_0	EXIST::FUNCTION:CMS
+d2i_PKCS7_SIGNED                        2731	1_1_0	EXIST::FUNCTION:
+GENERAL_NAMES_free                      2732	1_1_0	EXIST::FUNCTION:
+SCT_get_timestamp                       2733	1_1_0	EXIST::FUNCTION:CT
+OCSP_SIGNATURE_it                       2734	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:OCSP
+OCSP_SIGNATURE_it                       2734	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:OCSP
+CMS_verify_receipt                      2735	1_1_0	EXIST::FUNCTION:CMS
+CRYPTO_THREAD_lock_new                  2736	1_1_0	EXIST::FUNCTION:
+BIO_get_ex_data                         2737	1_1_0	EXIST::FUNCTION:
+CMS_digest_create                       2738	1_1_0	EXIST::FUNCTION:CMS
+EC_KEY_METHOD_set_verify                2739	1_1_0	EXIST::FUNCTION:EC
+PEM_read_RSAPublicKey                   2740	1_1_0	EXIST::FUNCTION:RSA,STDIO
+ENGINE_pkey_asn1_find_str               2741	1_1_0	EXIST::FUNCTION:ENGINE
+ENGINE_get_load_privkey_function        2742	1_1_0	EXIST::FUNCTION:ENGINE
+d2i_IPAddressRange                      2743	1_1_0	EXIST::FUNCTION:RFC3779
+ERR_remove_state                        2744	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_0_0
+X509_CRL_print_fp                       2745	1_1_0	EXIST::FUNCTION:STDIO
+TS_CONF_load_key                        2746	1_1_0	EXIST::FUNCTION:TS
+d2i_OCSP_REQINFO                        2747	1_1_0	EXIST::FUNCTION:OCSP
+d2i_X509_CINF                           2748	1_1_0	EXIST::FUNCTION:
+OCSP_REQUEST_get_ext_by_critical        2749	1_1_0	EXIST::FUNCTION:OCSP
+X509_REQ_to_X509                        2750	1_1_0	EXIST::FUNCTION:
+EVP_aes_192_wrap_pad                    2751	1_1_0	EXIST::FUNCTION:
+PKCS7_SIGN_ENVELOPE_new                 2752	1_1_0	EXIST::FUNCTION:
+TS_REQ_get_policy_id                    2753	1_1_0	EXIST::FUNCTION:TS
+RC5_32_cbc_encrypt                      2754	1_1_0	EXIST::FUNCTION:RC5
+BN_is_zero                              2755	1_1_0	EXIST::FUNCTION:
+CT_POLICY_EVAL_CTX_new                  2756	1_1_0	EXIST::FUNCTION:CT
+NETSCAPE_SPKI_it                        2757	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+NETSCAPE_SPKI_it                        2757	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+CRYPTO_THREAD_unlock                    2758	1_1_0	EXIST::FUNCTION:
+UI_method_set_writer                    2759	1_1_0	EXIST::FUNCTION:
+UI_dup_info_string                      2760	1_1_0	EXIST::FUNCTION:
+OPENSSL_init                            2761	1_1_0	EXIST::FUNCTION:
+TS_RESP_get_tst_info                    2762	1_1_0	EXIST::FUNCTION:TS
+X509_VERIFY_PARAM_get_depth             2763	1_1_0	EXIST::FUNCTION:
+EVP_SealFinal                           2764	1_1_0	EXIST::FUNCTION:RSA
+BIO_set                                 2765	1_1_0	NOEXIST::FUNCTION:
+CONF_imodule_set_flags                  2766	1_1_0	EXIST::FUNCTION:
+i2d_ASN1_SET_ANY                        2767	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_decrypt                        2768	1_1_0	EXIST::FUNCTION:
+OCSP_RESPID_it                          2769	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:OCSP
+OCSP_RESPID_it                          2769	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:OCSP
+EVP_des_ede3_cbc                        2770	1_1_0	EXIST::FUNCTION:DES
+X509_up_ref                             2771	1_1_0	EXIST::FUNCTION:
+OBJ_NAME_do_all_sorted                  2772	1_1_0	EXIST::FUNCTION:
+ENGINE_unregister_DSA                   2773	1_1_0	EXIST::FUNCTION:ENGINE
+ASN1_bn_print                           2774	1_1_0	EXIST::FUNCTION:
+CMS_is_detached                         2775	1_1_0	EXIST::FUNCTION:CMS
+X509_REQ_INFO_it                        2776	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_REQ_INFO_it                        2776	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+RSAPrivateKey_it                        2777	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:RSA
+RSAPrivateKey_it                        2777	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:RSA
+X509_NAME_ENTRY_free                    2778	1_1_0	EXIST::FUNCTION:
+BIO_new_fd                              2779	1_1_0	EXIST::FUNCTION:
+OPENSSL_sk_value                        2781	1_1_0	EXIST::FUNCTION:
+NCONF_get_section                       2782	1_1_0	EXIST::FUNCTION:
+PKCS12_MAC_DATA_it                      2783	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS12_MAC_DATA_it                      2783	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+X509_REQ_add1_attr_by_NID               2784	1_1_0	EXIST::FUNCTION:
+ASN1_sign                               2785	1_1_0	EXIST::FUNCTION:
+CMS_RecipientInfo_encrypt               2786	1_1_0	EXIST::FUNCTION:CMS
+X509_get_pubkey_parameters              2787	1_1_0	EXIST::FUNCTION:
+PKCS12_setup_mac                        2788	1_1_0	EXIST::FUNCTION:
+PEM_read_bio_PKCS7                      2789	1_1_0	EXIST::FUNCTION:
+SHA512_Final                            2790	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_set1_host             2791	1_1_0	EXIST::FUNCTION:
+OCSP_resp_find_status                   2792	1_1_0	EXIST::FUNCTION:OCSP
+d2i_ASN1_T61STRING                      2793	1_1_0	EXIST::FUNCTION:
+DES_pcbc_encrypt                        2794	1_1_0	EXIST::FUNCTION:DES
+EVP_PKEY_print_params                   2795	1_1_0	EXIST::FUNCTION:
+BN_get0_nist_prime_192                  2796	1_1_0	EXIST::FUNCTION:
+EVP_SealInit                            2798	1_1_0	EXIST::FUNCTION:RSA
+X509_REQ_get0_signature                 2799	1_1_0	EXIST::FUNCTION:
+PKEY_USAGE_PERIOD_free                  2800	1_1_0	EXIST::FUNCTION:
+EC_GROUP_set_point_conversion_form      2801	1_1_0	EXIST::FUNCTION:EC
+CMS_dataFinal                           2802	1_1_0	EXIST::FUNCTION:CMS
+ASN1_TIME_it                            2803	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_TIME_it                            2803	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ENGINE_get_static_state                 2804	1_1_0	EXIST::FUNCTION:ENGINE
+EC_KEY_set_asn1_flag                    2805	1_1_0	EXIST::FUNCTION:EC
+EC_GFp_mont_method                      2806	1_1_0	EXIST::FUNCTION:EC
+OPENSSL_asc2uni                         2807	1_1_0	EXIST::FUNCTION:
+TS_REQ_new                              2808	1_1_0	EXIST::FUNCTION:TS
+ENGINE_register_all_DH                  2809	1_1_0	EXIST::FUNCTION:ENGINE
+ERR_clear_error                         2810	1_1_0	EXIST::FUNCTION:
+EC_KEY_dup                              2811	1_1_0	EXIST::FUNCTION:EC
+X509_LOOKUP_init                        2812	1_1_0	EXIST::FUNCTION:
+i2b_PVK_bio                             2813	1_1_0	EXIST::FUNCTION:DSA,RC4
+OCSP_ONEREQ_free                        2814	1_1_0	EXIST::FUNCTION:OCSP
+X509V3_EXT_print_fp                     2815	1_1_0	EXIST::FUNCTION:STDIO
+OBJ_bsearch_ex_                         2816	1_1_0	EXIST::FUNCTION:
+DES_ofb64_encrypt                       2817	1_1_0	EXIST::FUNCTION:DES
+i2d_IPAddressOrRange                    2818	1_1_0	EXIST::FUNCTION:RFC3779
+CRYPTO_secure_used                      2819	1_1_0	EXIST::FUNCTION:
+d2i_X509_CRL_INFO                       2820	1_1_0	EXIST::FUNCTION:
+X509_CRL_get_issuer                     2821	1_1_0	EXIST::FUNCTION:
+d2i_SCT_LIST                            2822	1_1_0	EXIST::FUNCTION:CT
+EC_GFp_nist_method                      2823	1_1_0	EXIST::FUNCTION:EC
+SCT_free                                2824	1_1_0	EXIST::FUNCTION:CT
+TS_TST_INFO_get_msg_imprint             2825	1_1_0	EXIST::FUNCTION:TS
+X509v3_addr_add_range                   2826	1_1_0	EXIST::FUNCTION:RFC3779
+PKCS12_get_friendlyname                 2827	1_1_0	EXIST::FUNCTION:
+X509_CRL_add_ext                        2829	1_1_0	EXIST::FUNCTION:
+X509_REQ_get_signature_nid              2830	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_get_ext                     2831	1_1_0	EXIST::FUNCTION:TS
+i2d_OCSP_RESPID                         2832	1_1_0	EXIST::FUNCTION:OCSP
+EVP_camellia_256_cfb8                   2833	1_1_0	EXIST::FUNCTION:CAMELLIA
+EC_KEY_get0_public_key                  2834	1_1_0	EXIST::FUNCTION:EC
+SRP_Calc_x                              2835	1_1_0	EXIST::FUNCTION:SRP
+a2i_ASN1_ENUMERATED                     2836	1_1_0	EXIST::FUNCTION:
+CONF_module_get_usr_data                2837	1_1_0	EXIST::FUNCTION:
+i2d_X509_NAME_ENTRY                     2838	1_1_0	EXIST::FUNCTION:
+SCT_LIST_free                           2839	1_1_0	EXIST::FUNCTION:CT
+PROXY_POLICY_new                        2840	1_1_0	EXIST::FUNCTION:
+X509_ALGOR_set_md                       2841	1_1_0	EXIST::FUNCTION:
+PKCS7_print_ctx                         2842	1_1_0	EXIST::FUNCTION:
+ASN1_UTF8STRING_new                     2843	1_1_0	EXIST::FUNCTION:
+EVP_des_cbc                             2844	1_1_0	EXIST::FUNCTION:DES
+i2v_ASN1_BIT_STRING                     2845	1_1_0	EXIST::FUNCTION:
+ASN1_TYPE_set1                          2846	1_1_0	EXIST::FUNCTION:
+d2i_X509_CRL_bio                        2847	1_1_0	EXIST::FUNCTION:
+PKCS12_SAFEBAG_get1_cert                2848	1_1_0	EXIST::FUNCTION:
+ASN1_UNIVERSALSTRING_free               2849	1_1_0	EXIST::FUNCTION:
+EC_KEY_precompute_mult                  2850	1_1_0	EXIST::FUNCTION:EC
+CRYPTO_mem_debug_realloc                2851	1_1_0	EXIST::FUNCTION:CRYPTO_MDEBUG
+PKCS7_new                               2852	1_1_0	EXIST::FUNCTION:
+BASIC_CONSTRAINTS_it                    2853	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+BASIC_CONSTRAINTS_it                    2853	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ASN1_generate_v3                        2854	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_PrivateKey                2855	1_1_0	EXIST::FUNCTION:
+ASN1_UTCTIME_check                      2856	1_1_0	EXIST::FUNCTION:
+ACCESS_DESCRIPTION_it                   2857	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ACCESS_DESCRIPTION_it                   2857	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+TS_MSG_IMPRINT_get_msg                  2859	1_1_0	EXIST::FUNCTION:TS
+PKCS8_add_keyusage                      2860	1_1_0	EXIST::FUNCTION:
+X509_EXTENSION_dup                      2861	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_asn1_new                       2862	1_1_0	EXIST::FUNCTION:
+BIO_socket_nbio                         2863	1_1_0	EXIST::FUNCTION:SOCK
+EVP_CIPHER_set_asn1_iv                  2864	1_1_0	EXIST::FUNCTION:
+EC_GFp_nistp224_method                  2865	1_1_0	EXIST::FUNCTION:EC,EC_NISTP_64_GCC_128
+BN_swap                                 2866	1_1_0	EXIST::FUNCTION:
+d2i_ECParameters                        2867	1_1_0	EXIST::FUNCTION:EC
+X509_NAME_add_entry_by_OBJ              2868	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_get_ext_count               2869	1_1_0	EXIST::FUNCTION:TS
+i2d_OCSP_CERTID                         2870	1_1_0	EXIST::FUNCTION:OCSP
+BN_CTX_start                            2871	1_1_0	EXIST::FUNCTION:
+BN_print                                2872	1_1_0	EXIST::FUNCTION:
+EC_KEY_set_flags                        2873	1_1_0	EXIST::FUNCTION:EC
+EVP_PKEY_get0                           2874	1_1_0	EXIST::FUNCTION:
+ENGINE_set_default                      2875	1_1_0	EXIST::FUNCTION:ENGINE
+NCONF_get_number_e                      2876	1_1_0	EXIST::FUNCTION:
+OPENSSL_cleanse                         2877	1_1_0	EXIST::FUNCTION:
+SCT_set0_signature                      2878	1_1_0	EXIST::FUNCTION:CT
+X509_CRL_sign                           2879	1_1_0	EXIST::FUNCTION:
+X509_CINF_it                            2880	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_CINF_it                            2880	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+TS_CONF_set_accuracy                    2881	1_1_0	EXIST::FUNCTION:TS
+DES_crypt                               2882	1_1_0	EXIST::FUNCTION:DES
+BN_BLINDING_create_param                2883	1_1_0	EXIST::FUNCTION:
+OCSP_SERVICELOC_free                    2884	1_1_0	EXIST::FUNCTION:OCSP
+DIST_POINT_NAME_free                    2885	1_1_0	EXIST::FUNCTION:
+BIO_listen                              2886	1_1_0	EXIST::FUNCTION:SOCK
+BIO_ADDR_path_string                    2887	1_1_0	EXIST::FUNCTION:SOCK
+POLICY_CONSTRAINTS_it                   2888	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+POLICY_CONSTRAINTS_it                   2888	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+NCONF_free_data                         2889	1_1_0	EXIST::FUNCTION:
+BIO_asn1_set_prefix                     2890	1_1_0	EXIST::FUNCTION:
+PEM_SignUpdate                          2891	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_EC_PUBKEY                 2892	1_1_0	EXIST::FUNCTION:EC
+CMS_add_simple_smimecap                 2893	1_1_0	EXIST::FUNCTION:CMS
+IPAddressChoice_free                    2894	1_1_0	EXIST::FUNCTION:RFC3779
+d2i_X509_AUX                            2895	1_1_0	EXIST::FUNCTION:
+X509_get_default_cert_area              2896	1_1_0	EXIST::FUNCTION:
+ERR_load_DSO_strings                    2897	1_1_0	EXIST::FUNCTION:
+ASIdentifiers_it                        2898	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:RFC3779
+ASIdentifiers_it                        2898	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:RFC3779
+BN_mod_lshift                           2899	1_1_0	EXIST::FUNCTION:
+ENGINE_get_last                         2900	1_1_0	EXIST::FUNCTION:ENGINE
+EVP_PKEY_encrypt_init                   2901	1_1_0	EXIST::FUNCTION:
+i2d_RSAPrivateKey_fp                    2902	1_1_0	EXIST::FUNCTION:RSA,STDIO
+X509_REQ_print                          2903	1_1_0	EXIST::FUNCTION:
+RSA_size                                2904	1_1_0	EXIST::FUNCTION:RSA
+EVP_CIPHER_CTX_iv_noconst               2905	1_1_0	EXIST::FUNCTION:
+DH_set_default_method                   2906	1_1_0	EXIST::FUNCTION:DH
+X509_ALGOR_new                          2907	1_1_0	EXIST::FUNCTION:
+EVP_aes_192_ofb                         2908	1_1_0	EXIST::FUNCTION:
+EVP_des_ede3_cfb1                       2909	1_1_0	EXIST::FUNCTION:DES
+TS_REQ_to_TS_VERIFY_CTX                 2910	1_1_0	EXIST::FUNCTION:TS
+d2i_PBEPARAM                            2911	1_1_0	EXIST::FUNCTION:
+BN_get0_nist_prime_521                  2912	1_1_0	EXIST::FUNCTION:
+OCSP_ONEREQ_get_ext_by_NID              2913	1_1_0	EXIST::FUNCTION:OCSP
+X509_PUBKEY_get0                        2914	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get0_parent_ctx          2915	1_1_0	EXIST::FUNCTION:
+EC_GROUP_set_seed                       2916	1_1_0	EXIST::FUNCTION:EC
+X509_STORE_CTX_free                     2917	1_1_0	EXIST::FUNCTION:
+AUTHORITY_KEYID_it                      2918	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+AUTHORITY_KEYID_it                      2918	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+X509V3_get_value_int                    2919	1_1_0	EXIST::FUNCTION:
+ASN1_UTCTIME_set_string                 2920	1_1_0	EXIST::FUNCTION:
+RC5_32_decrypt                          2921	1_1_0	EXIST::FUNCTION:RC5
+i2d_X509_REQ_INFO                       2922	1_1_0	EXIST::FUNCTION:
+EVP_des_cfb1                            2923	1_1_0	EXIST::FUNCTION:DES
+OBJ_NAME_cleanup                        2924	1_1_0	EXIST::FUNCTION:
+OCSP_BASICRESP_get1_ext_d2i             2925	1_1_0	EXIST::FUNCTION:OCSP
+DES_cfb64_encrypt                       2926	1_1_0	EXIST::FUNCTION:DES
+CAST_cfb64_encrypt                      2927	1_1_0	EXIST::FUNCTION:CAST
+EVP_PKEY_asn1_set_param                 2928	1_1_0	EXIST::FUNCTION:
+BN_RECP_CTX_free                        2929	1_1_0	EXIST::FUNCTION:
+BN_with_flags                           2930	1_1_0	EXIST::FUNCTION:
+DSO_ctrl                                2931	1_1_0	EXIST::FUNCTION:
+EVP_MD_meth_get_final                   2932	1_1_0	EXIST::FUNCTION:
+ASN1_TYPE_get_octetstring               2933	1_1_0	EXIST::FUNCTION:
+ENGINE_by_id                            2934	1_1_0	EXIST::FUNCTION:ENGINE
+d2i_PKCS7_SIGNER_INFO                   2935	1_1_0	EXIST::FUNCTION:
+EVP_aes_192_cbc                         2936	1_1_0	EXIST::FUNCTION:
+PKCS8_pkey_set0                         2937	1_1_0	EXIST::FUNCTION:
+X509_get1_email                         2938	1_1_0	EXIST::FUNCTION:
+EC_POINT_point2oct                      2939	1_1_0	EXIST::FUNCTION:EC
+EC_GROUP_get_curve_GFp                  2940	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_2_0,EC
+ASYNC_block_pause                       2941	1_1_0	EXIST::FUNCTION:
+OCSP_SINGLERESP_get_ext                 2942	1_1_0	EXIST::FUNCTION:OCSP
+CRYPTO_strdup                           2943	1_1_0	EXIST::FUNCTION:
+i2d_X509_CRL_bio                        2945	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_asn1_set_item                  2946	1_1_0	EXIST::FUNCTION:
+CRYPTO_ccm128_encrypt                   2947	1_1_0	EXIST::FUNCTION:
+X509v3_addr_get_afi                     2948	1_1_0	EXIST::FUNCTION:RFC3779
+X509_STORE_CTX_get0_param               2949	1_1_0	EXIST::FUNCTION:
+EVP_add_alg_module                      2950	1_1_0	EXIST::FUNCTION:
+X509_check_purpose                      2951	1_1_0	EXIST::FUNCTION:
+OCSP_REQUEST_delete_ext                 2952	1_1_0	EXIST::FUNCTION:OCSP
+X509_PURPOSE_get_count                  2953	1_1_0	EXIST::FUNCTION:
+d2i_PKCS12_bio                          2954	1_1_0	EXIST::FUNCTION:
+ASN1_item_free                          2955	1_1_0	EXIST::FUNCTION:
+PKCS7_content_new                       2956	1_1_0	EXIST::FUNCTION:
+X509_keyid_get0                         2957	1_1_0	EXIST::FUNCTION:
+COMP_get_name                           2958	1_1_0	EXIST::FUNCTION:COMP
+EC_GROUP_new_curve_GF2m                 2959	1_1_0	EXIST::FUNCTION:EC,EC2M
+X509_SIG_free                           2960	1_1_0	EXIST::FUNCTION:
+PEM_ASN1_write                          2961	1_1_0	EXIST::FUNCTION:STDIO
+ENGINE_get_digest_engine                2962	1_1_0	EXIST::FUNCTION:ENGINE
+BN_CTX_new                              2963	1_1_0	EXIST::FUNCTION:
+EC_curve_nid2nist                       2964	1_1_0	EXIST::FUNCTION:EC
+ENGINE_get_finish_function              2965	1_1_0	EXIST::FUNCTION:ENGINE
+EC_POINT_add                            2966	1_1_0	EXIST::FUNCTION:EC
+EC_KEY_oct2key                          2967	1_1_0	EXIST::FUNCTION:EC
+SHA384_Init                             2968	1_1_0	EXIST::FUNCTION:
+ASN1_UNIVERSALSTRING_new                2969	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_print_private                  2970	1_1_0	EXIST::FUNCTION:
+ASN1_INTEGER_new                        2971	1_1_0	EXIST::FUNCTION:
+NAME_CONSTRAINTS_it                     2972	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+NAME_CONSTRAINTS_it                     2972	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+TS_REQ_get_cert_req                     2973	1_1_0	EXIST::FUNCTION:TS
+BIO_pop                                 2974	1_1_0	EXIST::FUNCTION:
+SHA256_Final                            2975	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_set1_DH                        2976	1_1_0	EXIST::FUNCTION:DH
+DH_get_ex_data                          2977	1_1_0	EXIST::FUNCTION:DH
+CRYPTO_secure_malloc                    2978	1_1_0	EXIST::FUNCTION:
+TS_RESP_get_status_info                 2979	1_1_0	EXIST::FUNCTION:TS
+HMAC_CTX_new                            2980	1_1_0	EXIST::FUNCTION:
+ENGINE_get_default_DH                   2981	1_1_0	EXIST::FUNCTION:ENGINE
+ECDSA_do_verify                         2982	1_1_0	EXIST::FUNCTION:EC
+DSO_flags                               2983	1_1_0	EXIST::FUNCTION:
+RAND_add                                2984	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_do_all_sorted                2985	1_1_0	EXIST::FUNCTION:
+PKCS7_encrypt                           2986	1_1_0	EXIST::FUNCTION:
+i2d_DSA_SIG                             2987	1_1_0	EXIST::FUNCTION:DSA
+CMS_set_detached                        2988	1_1_0	EXIST::FUNCTION:CMS
+X509_REQ_get_attr_by_OBJ                2989	1_1_0	EXIST::FUNCTION:
+i2d_ASRange                             2990	1_1_0	EXIST::FUNCTION:RFC3779
+EC_GROUP_set_asn1_flag                  2991	1_1_0	EXIST::FUNCTION:EC
+EVP_PKEY_new                            2992	1_1_0	EXIST::FUNCTION:
+i2d_POLICYINFO                          2993	1_1_0	EXIST::FUNCTION:
+BN_get_flags                            2994	1_1_0	EXIST::FUNCTION:
+SHA384                                  2995	1_1_0	EXIST::FUNCTION:
+NCONF_get_string                        2996	1_1_0	EXIST::FUNCTION:
+d2i_PROXY_CERT_INFO_EXTENSION           2997	1_1_0	EXIST::FUNCTION:
+EC_POINT_point2buf                      2998	1_1_0	EXIST::FUNCTION:EC
+RSA_padding_add_PKCS1_OAEP_mgf1         2999	1_1_0	EXIST::FUNCTION:RSA
+COMP_CTX_get_type                       3000	1_1_0	EXIST::FUNCTION:COMP
+TS_RESP_CTX_set_status_info             3001	1_1_0	EXIST::FUNCTION:TS
+BIO_f_nbio_test                         3002	1_1_0	EXIST::FUNCTION:
+SEED_ofb128_encrypt                     3003	1_1_0	EXIST::FUNCTION:SEED
+d2i_RSAPrivateKey_bio                   3004	1_1_0	EXIST::FUNCTION:RSA
+DH_KDF_X9_42                            3005	1_1_0	EXIST::FUNCTION:CMS,DH
+EVP_PKEY_meth_set_signctx               3006	1_1_0	EXIST::FUNCTION:
+X509_CRL_get_version                    3007	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_get0_info                 3008	1_1_0	EXIST::FUNCTION:
+PEM_read_bio_RSAPublicKey               3009	1_1_0	EXIST::FUNCTION:RSA
+EVP_PKEY_asn1_set_private               3010	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_get0_RSA                       3011	1_1_0	EXIST::FUNCTION:RSA
+DES_ede3_cfb64_encrypt                  3012	1_1_0	EXIST::FUNCTION:DES
+POLICY_MAPPING_free                     3014	1_1_0	EXIST::FUNCTION:
+EVP_aes_128_gcm                         3015	1_1_0	EXIST::FUNCTION:
+BIO_dgram_non_fatal_error               3016	1_1_0	EXIST::FUNCTION:DGRAM
+OCSP_request_is_signed                  3017	1_1_0	EXIST::FUNCTION:OCSP
+i2d_BASIC_CONSTRAINTS                   3018	1_1_0	EXIST::FUNCTION:
+EC_KEY_get_method                       3019	1_1_0	EXIST::FUNCTION:EC
+EC_POINT_bn2point                       3021	1_1_0	EXIST::FUNCTION:EC
+PBE2PARAM_it                            3022	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PBE2PARAM_it                            3022	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+BN_rand                                 3023	1_1_0	EXIST::FUNCTION:
+ASN1_TYPE_unpack_sequence               3024	1_1_0	EXIST::FUNCTION:
+X509_CRL_sign_ctx                       3025	1_1_0	EXIST::FUNCTION:
+X509_STORE_add_crl                      3026	1_1_0	EXIST::FUNCTION:
+PEM_write_RSAPrivateKey                 3027	1_1_0	EXIST::FUNCTION:RSA,STDIO
+RC4_set_key                             3028	1_1_0	EXIST::FUNCTION:RC4
+EVP_CIPHER_CTX_cipher                   3029	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_PKCS8PrivateKey_nid       3030	1_1_0	EXIST::FUNCTION:
+BN_MONT_CTX_new                         3031	1_1_0	EXIST::FUNCTION:
+CRYPTO_free_ex_index                    3032	1_1_0	EXIST::FUNCTION:
+ASYNC_WAIT_CTX_new                      3033	1_1_0	EXIST::FUNCTION:
+PKCS7_it                                3034	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS7_it                                3034	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+CMS_unsigned_get_attr_by_OBJ            3035	1_1_0	EXIST::FUNCTION:CMS
+BN_clear                                3036	1_1_0	EXIST::FUNCTION:
+BIO_socket_ioctl                        3037	1_1_0	EXIST::FUNCTION:SOCK
+GENERAL_NAME_cmp                        3038	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_set_purpose              3039	1_1_0	EXIST::FUNCTION:
+X509_REVOKED_get_ext_d2i                3040	1_1_0	EXIST::FUNCTION:
+X509V3_set_conf_lhash                   3041	1_1_0	EXIST::FUNCTION:
+PKCS7_ENC_CONTENT_it                    3042	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS7_ENC_CONTENT_it                    3042	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+PKCS12_item_pack_safebag                3043	1_1_0	EXIST::FUNCTION:
+i2d_OCSP_RESPDATA                       3044	1_1_0	EXIST::FUNCTION:OCSP
+i2d_X509_PUBKEY                         3045	1_1_0	EXIST::FUNCTION:
+EVP_DecryptUpdate                       3046	1_1_0	EXIST::FUNCTION:
+CAST_cbc_encrypt                        3047	1_1_0	EXIST::FUNCTION:CAST
+BN_BLINDING_invert                      3048	1_1_0	EXIST::FUNCTION:
+SHA512_Update                           3049	1_1_0	EXIST::FUNCTION:
+ESS_ISSUER_SERIAL_new                   3050	1_1_0	EXIST::FUNCTION:TS
+PKCS12_SAFEBAG_get0_pkcs8               3051	1_1_0	EXIST::FUNCTION:
+X509_get_ext_by_NID                     3052	1_1_0	EXIST::FUNCTION:
+d2i_IPAddressFamily                     3053	1_1_0	EXIST::FUNCTION:RFC3779
+X509_check_private_key                  3054	1_1_0	EXIST::FUNCTION:
+GENERAL_NAME_get0_value                 3055	1_1_0	EXIST::FUNCTION:
+X509_check_akid                         3056	1_1_0	EXIST::FUNCTION:
+PKCS12_key_gen_asc                      3057	1_1_0	EXIST::FUNCTION:
+EVP_bf_ofb                              3058	1_1_0	EXIST::FUNCTION:BF
+AUTHORITY_KEYID_free                    3059	1_1_0	EXIST::FUNCTION:
+EVP_seed_ofb                            3060	1_1_0	EXIST::FUNCTION:SEED
+OBJ_NAME_get                            3061	1_1_0	EXIST::FUNCTION:
+ASN1_UTCTIME_set                        3062	1_1_0	EXIST::FUNCTION:
+X509_NAME_ENTRY_set_data                3063	1_1_0	EXIST::FUNCTION:
+ASN1_PCTX_set_str_flags                 3064	1_1_0	EXIST::FUNCTION:
+i2a_ASN1_INTEGER                        3065	1_1_0	EXIST::FUNCTION:
+d2i_TS_RESP                             3066	1_1_0	EXIST::FUNCTION:TS
+EVP_des_ede_cfb64                       3067	1_1_0	EXIST::FUNCTION:DES
+d2i_RSAPrivateKey                       3068	1_1_0	EXIST::FUNCTION:RSA
+ERR_load_BN_strings                     3069	1_1_0	EXIST::FUNCTION:
+BF_encrypt                              3070	1_1_0	EXIST::FUNCTION:BF
+MD5                                     3071	1_1_0	EXIST::FUNCTION:MD5
+BN_GF2m_arr2poly                        3072	1_1_0	EXIST::FUNCTION:EC2M
+EVP_PKEY_meth_get_ctrl                  3073	1_1_0	EXIST::FUNCTION:
+i2d_X509_REQ_bio                        3074	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_set1_name             3075	1_1_0	EXIST::FUNCTION:
+d2i_RSAPublicKey_bio                    3076	1_1_0	EXIST::FUNCTION:RSA
+X509_REQ_get_X509_PUBKEY                3077	1_1_0	EXIST::FUNCTION:
+ENGINE_load_private_key                 3078	1_1_0	EXIST::FUNCTION:ENGINE
+GENERAL_NAMES_new                       3079	1_1_0	EXIST::FUNCTION:
+i2d_POLICYQUALINFO                      3080	1_1_0	EXIST::FUNCTION:
+EC_GF2m_simple_method                   3081	1_1_0	EXIST::FUNCTION:EC,EC2M
+RSA_get_method                          3082	1_1_0	EXIST::FUNCTION:RSA
+d2i_ASRange                             3083	1_1_0	EXIST::FUNCTION:RFC3779
+CMS_ContentInfo_new                     3084	1_1_0	EXIST::FUNCTION:CMS
+OPENSSL_init_crypto                     3085	1_1_0	EXIST::FUNCTION:
+X509_TRUST_set                          3086	1_1_0	EXIST::FUNCTION:
+EVP_camellia_192_ecb                    3087	1_1_0	EXIST::FUNCTION:CAMELLIA
+d2i_X509_REVOKED                        3088	1_1_0	EXIST::FUNCTION:
+d2i_IPAddressOrRange                    3089	1_1_0	EXIST::FUNCTION:RFC3779
+TS_TST_INFO_set_version                 3090	1_1_0	EXIST::FUNCTION:TS
+PKCS12_get0_mac                         3091	1_1_0	EXIST::FUNCTION:
+EVP_EncodeInit                          3092	1_1_0	EXIST::FUNCTION:
+X509_get0_trust_objects                 3093	1_1_0	EXIST::FUNCTION:
+d2i_ECPrivateKey_bio                    3094	1_1_0	EXIST::FUNCTION:EC
+BIO_s_secmem                            3095	1_1_0	EXIST::FUNCTION:
+ENGINE_get_default_EC                   3096	1_1_0	EXIST::FUNCTION:ENGINE
+TS_RESP_create_response                 3097	1_1_0	EXIST::FUNCTION:TS
+BIO_ADDR_rawaddress                     3098	1_1_0	EXIST::FUNCTION:SOCK
+PKCS7_ENCRYPT_new                       3099	1_1_0	EXIST::FUNCTION:
+i2d_PKCS8PrivateKey_fp                  3100	1_1_0	EXIST::FUNCTION:STDIO
+SRP_user_pwd_free                       3101	1_1_0	EXIST::FUNCTION:SRP
+Camellia_encrypt                        3102	1_1_0	EXIST::FUNCTION:CAMELLIA
+BIO_ADDR_hostname_string                3103	1_1_0	EXIST::FUNCTION:SOCK
+USERNOTICE_new                          3104	1_1_0	EXIST::FUNCTION:
+POLICY_MAPPING_new                      3105	1_1_0	EXIST::FUNCTION:
+CRYPTO_gcm128_release                   3106	1_1_0	EXIST::FUNCTION:
+BIO_new                                 3107	1_1_0	EXIST::FUNCTION:
+d2i_GENERAL_NAMES                       3108	1_1_0	EXIST::FUNCTION:
+PKCS7_SIGNER_INFO_new                   3109	1_1_0	EXIST::FUNCTION:
+PEM_read_DSA_PUBKEY                     3110	1_1_0	EXIST::FUNCTION:DSA,STDIO
+X509_get0_subject_key_id                3111	1_1_0	EXIST::FUNCTION:
+i2s_ASN1_ENUMERATED                     3112	1_1_0	EXIST::FUNCTION:
+X509v3_get_ext_by_OBJ                   3113	1_1_0	EXIST::FUNCTION:
+OCSP_REQUEST_free                       3114	1_1_0	EXIST::FUNCTION:OCSP
+CRYPTO_ocb128_aad                       3115	1_1_0	EXIST::FUNCTION:OCB
+OPENSSL_sk_deep_copy                    3116	1_1_0	EXIST::FUNCTION:
+i2d_RSA_PSS_PARAMS                      3117	1_1_0	EXIST::FUNCTION:RSA
+EVP_aes_128_wrap_pad                    3118	1_1_0	EXIST::FUNCTION:
+ASN1_BIT_STRING_set                     3119	1_1_0	EXIST::FUNCTION:
+PKCS5_PBKDF2_HMAC_SHA1                  3120	1_1_0	EXIST::FUNCTION:
+RSA_padding_check_PKCS1_type_2          3121	1_1_0	EXIST::FUNCTION:RSA
+EVP_des_ede3_ecb                        3122	1_1_0	EXIST::FUNCTION:DES
+CBIGNUM_it                              3123	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+CBIGNUM_it                              3123	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+BIO_new_NDEF                            3124	1_1_0	EXIST::FUNCTION:
+EVP_aes_256_wrap                        3125	1_1_0	EXIST::FUNCTION:
+ASN1_STRING_print                       3126	1_1_0	EXIST::FUNCTION:
+CRYPTO_THREAD_lock_free                 3127	1_1_0	EXIST::FUNCTION:
+TS_ACCURACY_get_seconds                 3128	1_1_0	EXIST::FUNCTION:TS
+BN_options                              3129	1_1_0	EXIST::FUNCTION:
+BIO_debug_callback                      3130	1_1_0	EXIST::FUNCTION:
+EVP_MD_meth_get_update                  3131	1_1_0	EXIST::FUNCTION:
+GENERAL_NAME_set0_othername             3132	1_1_0	EXIST::FUNCTION:
+ASN1_BIT_STRING_set_bit                 3133	1_1_0	EXIST::FUNCTION:
+EVP_aes_256_ccm                         3134	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_CTX_get0_pkey                  3135	1_1_0	EXIST::FUNCTION:
+CONF_load_fp                            3136	1_1_0	EXIST::FUNCTION:STDIO
+BN_to_ASN1_ENUMERATED                   3137	1_1_0	EXIST::FUNCTION:
+i2d_ISSUING_DIST_POINT                  3138	1_1_0	EXIST::FUNCTION:
+TXT_DB_free                             3139	1_1_0	EXIST::FUNCTION:
+ASN1_STRING_set                         3140	1_1_0	EXIST::FUNCTION:
+d2i_ESS_CERT_ID                         3141	1_1_0	EXIST::FUNCTION:TS
+EVP_PKEY_meth_set_derive                3142	1_1_0	EXIST::FUNCTION:
+OPENSSL_LH_stats                        3143	1_1_0	EXIST::FUNCTION:STDIO
+NCONF_dump_fp                           3144	1_1_0	EXIST::FUNCTION:STDIO
+TS_STATUS_INFO_print_bio                3145	1_1_0	EXIST::FUNCTION:TS
+OPENSSL_sk_dup                          3146	1_1_0	EXIST::FUNCTION:
+BF_cfb64_encrypt                        3147	1_1_0	EXIST::FUNCTION:BF
+ASN1_GENERALIZEDTIME_adj                3148	1_1_0	EXIST::FUNCTION:
+ECDSA_verify                            3149	1_1_0	EXIST::FUNCTION:EC
+EVP_camellia_256_cfb128                 3150	1_1_0	EXIST::FUNCTION:CAMELLIA
+CMAC_Init                               3151	1_1_0	EXIST::FUNCTION:CMAC
+OCSP_basic_add1_status                  3152	1_1_0	EXIST::FUNCTION:OCSP
+X509_CRL_get0_by_cert                   3153	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_set_tsa                     3154	1_1_0	EXIST::FUNCTION:TS
+i2d_ASN1_GENERALIZEDTIME                3155	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_derive_set_peer                3156	1_1_0	EXIST::FUNCTION:
+X509V3_EXT_CRL_add_conf                 3157	1_1_0	EXIST::FUNCTION:
+CRYPTO_ccm128_init                      3158	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_set_time              3159	1_1_0	EXIST::FUNCTION:
+BN_reciprocal                           3160	1_1_0	EXIST::FUNCTION:
+d2i_PKCS7_SIGN_ENVELOPE                 3161	1_1_0	EXIST::FUNCTION:
+X509_NAME_digest                        3162	1_1_0	EXIST::FUNCTION:
+d2i_OCSP_SERVICELOC                     3163	1_1_0	EXIST::FUNCTION:OCSP
+GENERAL_NAME_print                      3164	1_1_0	EXIST::FUNCTION:
+CMS_ReceiptRequest_get0_values          3165	1_1_0	EXIST::FUNCTION:CMS
+a2i_ASN1_INTEGER                        3166	1_1_0	EXIST::FUNCTION:
+OCSP_sendreq_bio                        3167	1_1_0	EXIST::FUNCTION:OCSP
+PKCS12_SAFEBAG_create_crl               3168	1_1_0	EXIST::FUNCTION:
+d2i_X509_NAME                           3169	1_1_0	EXIST::FUNCTION:
+IDEA_cfb64_encrypt                      3170	1_1_0	EXIST::FUNCTION:IDEA
+BN_mod_sub                              3171	1_1_0	EXIST::FUNCTION:
+ASN1_NULL_new                           3172	1_1_0	EXIST::FUNCTION:
+HMAC_Init                               3173	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0
+EVP_MD_CTX_update_fn                    3174	1_1_0	EXIST::FUNCTION:
+EVP_aes_128_ecb                         3175	1_1_0	EXIST::FUNCTION:
+i2d_PKCS7_bio_stream                    3176	1_1_0	EXIST::FUNCTION:
+i2a_ACCESS_DESCRIPTION                  3178	1_1_0	EXIST::FUNCTION:
+EC_KEY_set_enc_flags                    3179	1_1_0	EXIST::FUNCTION:EC
+i2d_PUBKEY_fp                           3180	1_1_0	EXIST::FUNCTION:STDIO
+b2i_PrivateKey_bio                      3181	1_1_0	EXIST::FUNCTION:DSA
+OCSP_REQUEST_add_ext                    3182	1_1_0	EXIST::FUNCTION:OCSP
+SXNET_add_id_INTEGER                    3183	1_1_0	EXIST::FUNCTION:
+CTLOG_get0_public_key                   3184	1_1_0	EXIST::FUNCTION:CT
+OCSP_REQUEST_get_ext_by_OBJ             3185	1_1_0	EXIST::FUNCTION:OCSP
+X509_NAME_oneline                       3186	1_1_0	EXIST::FUNCTION:
+X509V3_set_nconf                        3187	1_1_0	EXIST::FUNCTION:
+RSAPrivateKey_dup                       3188	1_1_0	EXIST::FUNCTION:RSA
+BN_mod_add                              3189	1_1_0	EXIST::FUNCTION:
+EC_POINT_set_affine_coordinates_GFp     3190	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_2_0,EC
+X509_get_default_cert_file              3191	1_1_0	EXIST::FUNCTION:
+UI_method_set_flusher                   3192	1_1_0	EXIST::FUNCTION:
+RSA_new_method                          3193	1_1_0	EXIST::FUNCTION:RSA
+OCSP_request_verify                     3194	1_1_0	EXIST::FUNCTION:OCSP
+CRYPTO_THREAD_run_once                  3195	1_1_0	EXIST::FUNCTION:
+TS_REQ_print_bio                        3196	1_1_0	EXIST::FUNCTION:TS
+SCT_get_version                         3197	1_1_0	EXIST::FUNCTION:CT
+IDEA_set_encrypt_key                    3198	1_1_0	EXIST::FUNCTION:IDEA
+ENGINE_get_DH                           3199	1_1_0	EXIST::FUNCTION:ENGINE
+i2d_ASIdentifierChoice                  3200	1_1_0	EXIST::FUNCTION:RFC3779
+SRP_Calc_A                              3201	1_1_0	EXIST::FUNCTION:SRP
+OCSP_BASICRESP_add_ext                  3202	1_1_0	EXIST::FUNCTION:OCSP
+EVP_idea_cfb64                          3203	1_1_0	EXIST::FUNCTION:IDEA
+PKCS12_newpass                          3204	1_1_0	EXIST::FUNCTION:
+EVP_aes_256_cbc_hmac_sha256             3205	1_1_0	EXIST::FUNCTION:
+TS_ACCURACY_get_millis                  3206	1_1_0	EXIST::FUNCTION:TS
+X509_CRL_get_REVOKED                    3207	1_1_0	EXIST::FUNCTION:
+X509_issuer_name_hash_old               3208	1_1_0	EXIST::FUNCTION:MD5
+i2d_PKCS12_SAFEBAG                      3209	1_1_0	EXIST::FUNCTION:
+BN_rand_range                           3210	1_1_0	EXIST::FUNCTION:
+SMIME_write_ASN1                        3211	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_CTX_new                      3212	1_1_0	EXIST::FUNCTION:
+MD4_Final                               3213	1_1_0	EXIST::FUNCTION:MD4
+EVP_PKEY_id                             3214	1_1_0	EXIST::FUNCTION:
+CMS_RecipientInfo_get0_pkey_ctx         3215	1_1_0	EXIST::FUNCTION:CMS
+OCSP_REQINFO_free                       3216	1_1_0	EXIST::FUNCTION:OCSP
+AUTHORITY_KEYID_new                     3217	1_1_0	EXIST::FUNCTION:
+i2d_DIST_POINT_NAME                     3218	1_1_0	EXIST::FUNCTION:
+OpenSSL_version_num                     3219	1_1_0	EXIST::FUNCTION:
+OCSP_CERTID_free                        3220	1_1_0	EXIST::FUNCTION:OCSP
+BIO_hex_string                          3221	1_1_0	EXIST::FUNCTION:
+X509_REQ_sign_ctx                       3222	1_1_0	EXIST::FUNCTION:
+CRYPTO_ocb128_init                      3223	1_1_0	EXIST::FUNCTION:OCB
+EVP_PKEY_get1_EC_KEY                    3224	1_1_0	EXIST::FUNCTION:EC
+ASN1_PRINTABLESTRING_free               3225	1_1_0	EXIST::FUNCTION:
+BIO_get_retry_reason                    3226	1_1_0	EXIST::FUNCTION:
+X509_NAME_print                         3227	1_1_0	EXIST::FUNCTION:
+ACCESS_DESCRIPTION_free                 3228	1_1_0	EXIST::FUNCTION:
+BN_nist_mod_384                         3229	1_1_0	EXIST::FUNCTION:
+i2d_EC_PUBKEY_fp                        3230	1_1_0	EXIST::FUNCTION:EC,STDIO
+ENGINE_set_default_pkey_meths           3231	1_1_0	EXIST::FUNCTION:ENGINE
+DH_bits                                 3232	1_1_0	EXIST::FUNCTION:DH
+i2d_X509_ALGORS                         3233	1_1_0	EXIST::FUNCTION:
+EVP_camellia_192_cfb1                   3234	1_1_0	EXIST::FUNCTION:CAMELLIA
+TS_RESP_CTX_add_failure_info            3235	1_1_0	EXIST::FUNCTION:TS
+EVP_PBE_alg_add                         3236	1_1_0	EXIST::FUNCTION:
+ESS_CERT_ID_dup                         3237	1_1_0	EXIST::FUNCTION:TS
+CMS_SignerInfo_get0_signature           3238	1_1_0	EXIST::FUNCTION:CMS
+EVP_PKEY_verify_recover                 3239	1_1_0	EXIST::FUNCTION:
+i2d_PUBKEY                              3240	1_1_0	EXIST::FUNCTION:
+ERR_load_EVP_strings                    3241	1_1_0	EXIST::FUNCTION:
+X509_ATTRIBUTE_set1_data                3242	1_1_0	EXIST::FUNCTION:
+d2i_X509_fp                             3243	1_1_0	EXIST::FUNCTION:STDIO
+MD2_Init                                3244	1_1_0	EXIST::FUNCTION:MD2
+ERR_get_error_line                      3245	1_1_0	EXIST::FUNCTION:
+X509_CRL_get_ext_by_NID                 3246	1_1_0	EXIST::FUNCTION:
+OPENSSL_INIT_free                       3247	1_1_0	EXIST::FUNCTION:
+PBE2PARAM_free                          3248	1_1_0	EXIST::FUNCTION:
+EVP_aes_192_ecb                         3249	1_1_0	EXIST::FUNCTION:
+ASN1_OCTET_STRING_new                   3250	1_1_0	EXIST::FUNCTION:
+CMS_set1_eContentType                   3251	1_1_0	EXIST::FUNCTION:CMS
+EVP_des_ede3_wrap                       3252	1_1_0	EXIST::FUNCTION:DES
+GENERAL_SUBTREE_it                      3253	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+GENERAL_SUBTREE_it                      3253	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+EVP_read_pw_string_min                  3254	1_1_0	EXIST::FUNCTION:
+X509_set1_notBefore                     3255	1_1_0	EXIST::FUNCTION:
+MD4                                     3256	1_1_0	EXIST::FUNCTION:MD4
+EVP_PKEY_CTX_dup                        3257	1_1_0	EXIST::FUNCTION:
+ENGINE_setup_bsd_cryptodev              3258	1_1_0	EXIST:__FreeBSD__:FUNCTION:DEPRECATEDIN_1_1_0,ENGINE
+PEM_read_bio_DHparams                   3259	1_1_0	EXIST::FUNCTION:DH
+CMS_SharedInfo_encode                   3260	1_1_0	EXIST::FUNCTION:CMS
+ASN1_OBJECT_create                      3261	1_1_0	EXIST::FUNCTION:
+i2d_ECParameters                        3262	1_1_0	EXIST::FUNCTION:EC
+BN_GF2m_mod_arr                         3263	1_1_0	EXIST::FUNCTION:EC2M
+ENGINE_set_finish_function              3264	1_1_0	EXIST::FUNCTION:ENGINE
+d2i_ASN1_OCTET_STRING                   3265	1_1_0	EXIST::FUNCTION:
+ENGINE_set_load_pubkey_function         3266	1_1_0	EXIST::FUNCTION:ENGINE
+BIO_vprintf                             3267	1_1_0	EXIST::FUNCTION:
+CMS_RecipientInfo_decrypt               3268	1_1_0	EXIST::FUNCTION:CMS
+RSA_generate_key                        3269	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_0_9_8,RSA
+PKCS7_set0_type_other                   3270	1_1_0	EXIST::FUNCTION:
+OCSP_REQUEST_new                        3271	1_1_0	EXIST::FUNCTION:OCSP
+BIO_lookup                              3272	1_1_0	EXIST::FUNCTION:SOCK
+EC_GROUP_get0_cofactor                  3273	1_1_0	EXIST::FUNCTION:EC
+SCT_print                               3275	1_1_0	EXIST::FUNCTION:CT
+X509_PUBKEY_set                         3276	1_1_0	EXIST::FUNCTION:
+POLICY_CONSTRAINTS_free                 3277	1_1_0	EXIST::FUNCTION:
+EVP_aes_256_cfb8                        3278	1_1_0	EXIST::FUNCTION:
+d2i_DSA_PUBKEY_bio                      3279	1_1_0	EXIST::FUNCTION:DSA
+X509_NAME_get_text_by_OBJ               3280	1_1_0	EXIST::FUNCTION:
+RSA_padding_check_none                  3281	1_1_0	EXIST::FUNCTION:RSA
+CRYPTO_set_mem_debug                    3282	1_1_0	EXIST::FUNCTION:
+TS_VERIFY_CTX_init                      3283	1_1_0	EXIST::FUNCTION:TS
+OCSP_cert_id_new                        3284	1_1_0	EXIST::FUNCTION:OCSP
+GENERAL_SUBTREE_new                     3285	1_1_0	EXIST::FUNCTION:
+OPENSSL_sk_push                         3286	1_1_0	EXIST::FUNCTION:
+X509_LOOKUP_ctrl                        3287	1_1_0	EXIST::FUNCTION:
+SRP_check_known_gN_param                3288	1_1_0	EXIST::FUNCTION:SRP
+d2i_DIST_POINT                          3289	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_CTX_free                       3290	1_1_0	EXIST::FUNCTION:
+PBEPARAM_free                           3291	1_1_0	EXIST::FUNCTION:
+NETSCAPE_SPKI_set_pubkey                3292	1_1_0	EXIST::FUNCTION:
+EVP_sha512                              3293	1_1_0	EXIST::FUNCTION:
+X509_CRL_match                          3294	1_1_0	EXIST::FUNCTION:
+i2s_ASN1_IA5STRING                      3295	1_1_0	EXIST::FUNCTION:
+EC_KEY_get_default_method               3296	1_1_0	EXIST::FUNCTION:EC
+PKCS8_decrypt                           3297	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_CTX_get_data                   3298	1_1_0	EXIST::FUNCTION:
+POLICYQUALINFO_it                       3299	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+POLICYQUALINFO_it                       3299	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+PKCS7_ISSUER_AND_SERIAL_free            3300	1_1_0	EXIST::FUNCTION:
+DSA_SIG_free                            3301	1_1_0	EXIST::FUNCTION:DSA
+BIO_asn1_set_suffix                     3302	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_set_type_str                   3303	1_1_0	EXIST::FUNCTION:
+i2d_X509_SIG                            3304	1_1_0	EXIST::FUNCTION:
+OPENSSL_LH_strhash                      3305	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_set_trust                3306	1_1_0	EXIST::FUNCTION:
+TS_ACCURACY_set_micros                  3307	1_1_0	EXIST::FUNCTION:TS
+EVP_DigestFinal_ex                      3308	1_1_0	EXIST::FUNCTION:
+X509_get0_pubkey                        3309	1_1_0	EXIST::FUNCTION:
+X509_check_ip                           3310	1_1_0	EXIST::FUNCTION:
+PKCS7_get_signed_attribute              3311	1_1_0	EXIST::FUNCTION:
+ASN1_GENERALIZEDTIME_free               3312	1_1_0	EXIST::FUNCTION:
+COMP_compress_block                     3313	1_1_0	EXIST::FUNCTION:COMP
+ASN1_STRING_dup                         3314	1_1_0	EXIST::FUNCTION:
+X509_LOOKUP_free                        3315	1_1_0	EXIST::FUNCTION:
+EC_GROUP_cmp                            3316	1_1_0	EXIST::FUNCTION:EC
+TS_TST_INFO_get_ext_by_critical         3317	1_1_0	EXIST::FUNCTION:TS
+ECParameters_print_fp                   3318	1_1_0	EXIST::FUNCTION:EC,STDIO
+X509_REQ_sign                           3319	1_1_0	EXIST::FUNCTION:
+CRYPTO_xts128_encrypt                   3320	1_1_0	EXIST::FUNCTION:
+PEM_def_callback                        3321	1_1_0	EXIST::FUNCTION:
+PKCS12_add_friendlyname_uni             3322	1_1_0	EXIST::FUNCTION:
+X509_policy_tree_level_count            3323	1_1_0	EXIST::FUNCTION:
+OBJ_sn2nid                              3324	1_1_0	EXIST::FUNCTION:
+CTLOG_free                              3325	1_1_0	EXIST::FUNCTION:CT
+EVP_CIPHER_meth_dup                     3326	1_1_0	EXIST::FUNCTION:
+CMS_get1_crls                           3327	1_1_0	EXIST::FUNCTION:CMS
+X509_aux_print                          3328	1_1_0	EXIST::FUNCTION:
+OPENSSL_thread_stop                     3330	1_1_0	EXIST::FUNCTION:
+X509_policy_node_get0_parent            3331	1_1_0	EXIST::FUNCTION:
+X509_PKEY_free                          3332	1_1_0	EXIST::FUNCTION:
+OCSP_CRLID_new                          3333	1_1_0	EXIST::FUNCTION:OCSP
+CONF_dump_bio                           3334	1_1_0	EXIST::FUNCTION:
+d2i_PKCS8PrivateKey_fp                  3335	1_1_0	EXIST::FUNCTION:STDIO
+RSA_setup_blinding                      3336	1_1_0	EXIST::FUNCTION:RSA
+ERR_peek_error_line                     3337	1_1_0	EXIST::FUNCTION:
+d2i_PKCS7                               3338	1_1_0	EXIST::FUNCTION:
+ERR_reason_error_string                 3339	1_1_0	EXIST::FUNCTION:
+ERR_remove_thread_state                 3340	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0
+PEM_write_PrivateKey                    3341	1_1_0	EXIST::FUNCTION:STDIO
+EVP_PKEY_CTX_str2ctrl                   3342	1_1_0	EXIST::FUNCTION:
+CMS_SignerInfo_verify_content           3343	1_1_0	EXIST::FUNCTION:CMS
+ASN1_INTEGER_get_int64                  3344	1_1_0	EXIST::FUNCTION:
+ASN1_item_sign                          3345	1_1_0	EXIST::FUNCTION:
+OCSP_SERVICELOC_new                     3346	1_1_0	EXIST::FUNCTION:OCSP
+ASN1_VISIBLESTRING_new                  3347	1_1_0	EXIST::FUNCTION:
+BN_set_flags                            3348	1_1_0	EXIST::FUNCTION:
+d2i_PrivateKey_bio                      3349	1_1_0	EXIST::FUNCTION:
+ASN1_SEQUENCE_ANY_it                    3350	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_SEQUENCE_ANY_it                    3350	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ASN1_UTCTIME_adj                        3351	1_1_0	EXIST::FUNCTION:
+BN_mod_sqrt                             3352	1_1_0	EXIST::FUNCTION:
+OPENSSL_sk_is_sorted                    3353	1_1_0	EXIST::FUNCTION:
+OCSP_SIGNATURE_new                      3354	1_1_0	EXIST::FUNCTION:OCSP
+EVP_PKEY_meth_get_paramgen              3355	1_1_0	EXIST::FUNCTION:
+X509_ATTRIBUTE_create_by_OBJ            3356	1_1_0	EXIST::FUNCTION:
+RSA_generate_key_ex                     3357	1_1_0	EXIST::FUNCTION:RSA
+CMS_SignerInfo_get0_algs                3358	1_1_0	EXIST::FUNCTION:CMS
+DIST_POINT_free                         3359	1_1_0	EXIST::FUNCTION:
+ESS_SIGNING_CERT_free                   3360	1_1_0	EXIST::FUNCTION:TS
+SCT_new_from_base64                     3361	1_1_0	EXIST::FUNCTION:CT
+OpenSSL_version                         3362	1_1_0	EXIST::FUNCTION:
+OCSP_SINGLERESP_get_ext_by_OBJ          3363	1_1_0	EXIST::FUNCTION:OCSP
+ECDSA_SIG_get0                          3364	1_1_0	EXIST::FUNCTION:EC
+BN_set_word                             3365	1_1_0	EXIST::FUNCTION:
+ENGINE_set_flags                        3366	1_1_0	EXIST::FUNCTION:ENGINE
+DSA_OpenSSL                             3367	1_1_0	EXIST::FUNCTION:DSA
+CMS_RecipientInfo_kari_get0_alg         3368	1_1_0	EXIST::FUNCTION:CMS
+PKCS7_ENVELOPE_new                      3369	1_1_0	EXIST::FUNCTION:
+EDIPARTYNAME_new                        3370	1_1_0	EXIST::FUNCTION:
+CMS_add1_cert                           3371	1_1_0	EXIST::FUNCTION:CMS
+DSO_convert_filename                    3372	1_1_0	EXIST::FUNCTION:
+RSA_padding_check_SSLv23                3373	1_1_0	EXIST::FUNCTION:RSA
+CRYPTO_gcm128_finish                    3374	1_1_0	EXIST::FUNCTION:
+PKCS12_SAFEBAGS_it                      3375	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS12_SAFEBAGS_it                      3375	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+PKCS12_PBE_add                          3376	1_1_0	EXIST::FUNCTION:
+EC_KEY_set_public_key_affine_coordinates 3377	1_1_0	EXIST::FUNCTION:EC
+EVP_EncryptInit_ex                      3378	1_1_0	EXIST::FUNCTION:
+ENGINE_add                              3379	1_1_0	EXIST::FUNCTION:ENGINE
+OPENSSL_LH_error                        3380	1_1_0	EXIST::FUNCTION:
+PKCS7_DIGEST_it                         3381	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS7_DIGEST_it                         3381	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+X509_CINF_new                           3382	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_keygen_init                    3383	1_1_0	EXIST::FUNCTION:
+EVP_aes_192_ocb                         3384	1_1_0	EXIST::FUNCTION:OCB
+EVP_camellia_256_cfb1                   3385	1_1_0	EXIST::FUNCTION:CAMELLIA
+CRYPTO_secure_actual_size               3387	1_1_0	EXIST::FUNCTION:
+COMP_CTX_free                           3388	1_1_0	EXIST::FUNCTION:COMP
+i2d_PBE2PARAM                           3389	1_1_0	EXIST::FUNCTION:
+EC_POINT_make_affine                    3390	1_1_0	EXIST::FUNCTION:EC
+DSA_generate_parameters                 3391	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_0_9_8,DSA
+ASN1_BIT_STRING_num_asc                 3392	1_1_0	EXIST::FUNCTION:
+X509_INFO_free                          3394	1_1_0	EXIST::FUNCTION:
+d2i_PKCS8_PRIV_KEY_INFO_fp              3395	1_1_0	EXIST::FUNCTION:STDIO
+X509_OBJECT_retrieve_match              3396	1_1_0	EXIST::FUNCTION:
+EVP_aes_128_ctr                         3397	1_1_0	EXIST::FUNCTION:
+EVP_PBE_find                            3398	1_1_0	EXIST::FUNCTION:
+SHA512_Transform                        3399	1_1_0	EXIST::FUNCTION:
+ERR_add_error_vdata                     3400	1_1_0	EXIST::FUNCTION:
+OCSP_REQUEST_get_ext                    3401	1_1_0	EXIST::FUNCTION:OCSP
+NETSCAPE_SPKAC_new                      3402	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_get_verify                3403	1_1_0	EXIST::FUNCTION:
+CRYPTO_128_wrap                         3404	1_1_0	EXIST::FUNCTION:
+X509_STORE_set_lookup_crls              3405	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_meth_get_ctrl                3406	1_1_0	EXIST::FUNCTION:
+OCSP_REQ_CTX_set1_req                   3407	1_1_0	EXIST::FUNCTION:OCSP
+CONF_imodule_get_usr_data               3408	1_1_0	EXIST::FUNCTION:
+CRYPTO_new_ex_data                      3409	1_1_0	EXIST::FUNCTION:
+PEM_read_PKCS8_PRIV_KEY_INFO            3410	1_1_0	EXIST::FUNCTION:STDIO
+TS_VERIFY_CTX_new                       3411	1_1_0	EXIST::FUNCTION:TS
+BUF_MEM_new_ex                          3412	1_1_0	EXIST::FUNCTION:
+RSA_padding_add_X931                    3413	1_1_0	EXIST::FUNCTION:RSA
+BN_get0_nist_prime_256                  3414	1_1_0	EXIST::FUNCTION:
+CRYPTO_memcmp                           3415	1_1_0	EXIST::FUNCTION:
+DH_check_pub_key                        3416	1_1_0	EXIST::FUNCTION:DH
+ASN1_mbstring_copy                      3417	1_1_0	EXIST::FUNCTION:
+PKCS7_set_type                          3418	1_1_0	EXIST::FUNCTION:
+BIO_gets                                3419	1_1_0	EXIST::FUNCTION:
+RSA_padding_check_PKCS1_type_1          3420	1_1_0	EXIST::FUNCTION:RSA
+UI_ctrl                                 3421	1_1_0	EXIST::FUNCTION:
+i2d_X509_REQ_fp                         3422	1_1_0	EXIST::FUNCTION:STDIO
+BN_BLINDING_convert_ex                  3423	1_1_0	EXIST::FUNCTION:
+ASN1_GENERALIZEDTIME_print              3424	1_1_0	EXIST::FUNCTION:
+BIO_s_null                              3425	1_1_0	EXIST::FUNCTION:
+PEM_ASN1_read                           3426	1_1_0	EXIST::FUNCTION:STDIO
+SCT_get_log_entry_type                  3427	1_1_0	EXIST::FUNCTION:CT
+EVP_CIPHER_meth_get_init                3428	1_1_0	EXIST::FUNCTION:
+X509_ALGOR_free                         3429	1_1_0	EXIST::FUNCTION:
+OCSP_SINGLERESP_get_ext_count           3430	1_1_0	EXIST::FUNCTION:OCSP
+EC_POINT_free                           3431	1_1_0	EXIST::FUNCTION:EC
+EVP_OpenFinal                           3432	1_1_0	EXIST::FUNCTION:RSA
+RAND_egd_bytes                          3433	1_1_0	EXIST::FUNCTION:EGD
+UI_method_get_writer                    3434	1_1_0	EXIST::FUNCTION:
+BN_secure_new                           3435	1_1_0	EXIST::FUNCTION:
+SHA1_Update                             3437	1_1_0	EXIST::FUNCTION:
+BIO_s_connect                           3438	1_1_0	EXIST::FUNCTION:SOCK
+EVP_MD_meth_get_init                    3439	1_1_0	EXIST::FUNCTION:
+ASN1_BIT_STRING_free                    3440	1_1_0	EXIST::FUNCTION:
+i2d_PROXY_CERT_INFO_EXTENSION           3441	1_1_0	EXIST::FUNCTION:
+ASN1_IA5STRING_new                      3442	1_1_0	EXIST::FUNCTION:
+X509_CRL_up_ref                         3443	1_1_0	EXIST::FUNCTION:
+EVP_EncodeFinal                         3444	1_1_0	EXIST::FUNCTION:
+X509_set_ex_data                        3445	1_1_0	EXIST::FUNCTION:
+ERR_get_next_error_library              3446	1_1_0	EXIST::FUNCTION:
+OCSP_RESPONSE_print                     3447	1_1_0	EXIST::FUNCTION:OCSP
+BN_get_rfc3526_prime_2048               3448	1_1_0	EXIST::FUNCTION:
+BIO_new_bio_pair                        3449	1_1_0	EXIST::FUNCTION:
+EC_GFp_nistp256_method                  3450	1_1_0	EXIST::FUNCTION:EC,EC_NISTP_64_GCC_128
+BIO_method_type                         3451	1_1_0	EXIST::FUNCTION:
+ECPKParameters_print                    3452	1_1_0	EXIST::FUNCTION:EC
+EVP_rc4                                 3453	1_1_0	EXIST::FUNCTION:RC4
+CMS_data_create                         3454	1_1_0	EXIST::FUNCTION:CMS
+EC_POINT_point2bn                       3455	1_1_0	EXIST::FUNCTION:EC
+CMS_unsigned_get0_data_by_OBJ           3456	1_1_0	EXIST::FUNCTION:CMS
+ASN1_OCTET_STRING_cmp                   3457	1_1_0	EXIST::FUNCTION:
+X509_NAME_print_ex                      3458	1_1_0	EXIST::FUNCTION:
+ASN1_parse                              3459	1_1_0	EXIST::FUNCTION:
+EC_KEY_priv2oct                         3460	1_1_0	EXIST::FUNCTION:EC
+PKCS7_simple_smimecap                   3461	1_1_0	EXIST::FUNCTION:
+ASN1_TYPE_set_int_octetstring           3462	1_1_0	EXIST::FUNCTION:
+BIO_number_written                      3463	1_1_0	EXIST::FUNCTION:
+TS_TST_INFO_set_msg_imprint             3464	1_1_0	EXIST::FUNCTION:TS
+CRYPTO_get_ex_data                      3465	1_1_0	EXIST::FUNCTION:
+X509_PURPOSE_get0_sname                 3466	1_1_0	EXIST::FUNCTION:
+RSA_verify_PKCS1_PSS                    3467	1_1_0	EXIST::FUNCTION:RSA
+HMAC_CTX_reset                          3468	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_set_init                  3469	1_1_0	EXIST::FUNCTION:
+X509_REQ_extension_nid                  3470	1_1_0	EXIST::FUNCTION:
+ENGINE_up_ref                           3471	1_1_0	EXIST::FUNCTION:ENGINE
+BN_BLINDING_invert_ex                   3472	1_1_0	EXIST::FUNCTION:
+RIPEMD160_Init                          3473	1_1_0	EXIST::FUNCTION:RMD160
+ASYNC_WAIT_CTX_get_changed_fds          3474	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_save_parameters                3475	1_1_0	EXIST::FUNCTION:
+SCT_set_source                          3476	1_1_0	EXIST::FUNCTION:CT
+DES_set_odd_parity                      3477	1_1_0	EXIST::FUNCTION:DES
+CMAC_CTX_free                           3478	1_1_0	EXIST::FUNCTION:CMAC
+d2i_ESS_ISSUER_SERIAL                   3479	1_1_0	EXIST::FUNCTION:TS
+HMAC_CTX_set_flags                      3480	1_1_0	EXIST::FUNCTION:
+d2i_PKCS8_bio                           3481	1_1_0	EXIST::FUNCTION:
+OCSP_ONEREQ_get_ext_count               3482	1_1_0	EXIST::FUNCTION:OCSP
+PEM_read_bio_PKCS8_PRIV_KEY_INFO        3483	1_1_0	EXIST::FUNCTION:
+i2d_OCSP_BASICRESP                      3484	1_1_0	EXIST::FUNCTION:OCSP
+CMAC_Final                              3485	1_1_0	EXIST::FUNCTION:CMAC
+X509V3_EXT_add_alias                    3486	1_1_0	EXIST::FUNCTION:
+BN_get_params                           3487	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_0_9_8
+PKCS5_pbkdf2_set                        3488	1_1_0	EXIST::FUNCTION:
+d2i_PKCS8PrivateKey_bio                 3489	1_1_0	EXIST::FUNCTION:
+ASN1_ENUMERATED_new                     3490	1_1_0	EXIST::FUNCTION:
+ENGINE_register_digests                 3491	1_1_0	EXIST::FUNCTION:ENGINE
+X509_NAME_get_text_by_NID               3492	1_1_0	EXIST::FUNCTION:
+SMIME_read_ASN1                         3493	1_1_0	EXIST::FUNCTION:
+X509_REQ_set_subject_name               3494	1_1_0	EXIST::FUNCTION:
+BN_sub_word                             3495	1_1_0	EXIST::FUNCTION:
+DSO_load                                3496	1_1_0	EXIST::FUNCTION:
+BN_mod_exp                              3497	1_1_0	EXIST::FUNCTION:
+X509_get_signature_type                 3498	1_1_0	EXIST::FUNCTION:
+BIO_ptr_ctrl                            3499	1_1_0	EXIST::FUNCTION:
+EVP_rc4_hmac_md5                        3500	1_1_0	EXIST::FUNCTION:MD5,RC4
+OPENSSL_strlcat                         3501	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_new                   3502	1_1_0	EXIST::FUNCTION:
+BIO_ADDR_rawport                        3503	1_1_0	EXIST::FUNCTION:SOCK
+BUF_MEM_grow_clean                      3504	1_1_0	EXIST::FUNCTION:
+X509_NAME_print_ex_fp                   3505	1_1_0	EXIST::FUNCTION:STDIO
+X509_check_host                         3506	1_1_0	EXIST::FUNCTION:
+PEM_read_ECPKParameters                 3507	1_1_0	EXIST::FUNCTION:EC,STDIO
+X509_ATTRIBUTE_get0_data                3508	1_1_0	EXIST::FUNCTION:
+CMS_add1_signer                         3509	1_1_0	EXIST::FUNCTION:CMS
+BN_pseudo_rand                          3510	1_1_0	EXIST::FUNCTION:
+d2i_DIRECTORYSTRING                     3511	1_1_0	EXIST::FUNCTION:
+d2i_ASN1_PRINTABLE                      3512	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_add1_attr_by_NID               3513	1_1_0	EXIST::FUNCTION:
+i2d_PKCS8_PRIV_KEY_INFO_bio             3514	1_1_0	EXIST::FUNCTION:
+X509_NAME_get_index_by_NID              3515	1_1_0	EXIST::FUNCTION:
+ENGINE_get_first                        3516	1_1_0	EXIST::FUNCTION:ENGINE
+CERTIFICATEPOLICIES_it                  3517	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+CERTIFICATEPOLICIES_it                  3517	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+EVP_MD_CTX_ctrl                         3518	1_1_0	EXIST::FUNCTION:
+PKCS7_final                             3519	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_size                           3520	1_1_0	EXIST::FUNCTION:
+EVP_DecryptFinal_ex                     3521	1_1_0	EXIST::FUNCTION:
+SCT_get_signature_nid                   3522	1_1_0	EXIST::FUNCTION:CT
+PROXY_CERT_INFO_EXTENSION_new           3523	1_1_0	EXIST::FUNCTION:
+EVP_bf_cbc                              3524	1_1_0	EXIST::FUNCTION:BF
+DSA_do_verify                           3525	1_1_0	EXIST::FUNCTION:DSA
+EC_GROUP_get_seed_len                   3526	1_1_0	EXIST::FUNCTION:EC
+EC_POINT_set_affine_coordinates_GF2m    3527	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_2_0,EC,EC2M
+TS_REQ_set_policy_id                    3528	1_1_0	EXIST::FUNCTION:TS
+BIO_callback_ctrl                       3529	1_1_0	EXIST::FUNCTION:
+v2i_GENERAL_NAME                        3530	1_1_0	EXIST::FUNCTION:
+ERR_print_errors_cb                     3531	1_1_0	EXIST::FUNCTION:
+ENGINE_set_default_string               3532	1_1_0	EXIST::FUNCTION:ENGINE
+BIO_number_read                         3533	1_1_0	EXIST::FUNCTION:
+CRYPTO_zalloc                           3534	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_cmp_parameters                 3535	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_CTX_new_id                     3537	1_1_0	EXIST::FUNCTION:
+TLS_FEATURE_free                        3538	1_1_0	EXIST::FUNCTION:
+d2i_BASIC_CONSTRAINTS                   3539	1_1_0	EXIST::FUNCTION:
+X509_CERT_AUX_new                       3540	1_1_0	EXIST::FUNCTION:
+ENGINE_register_pkey_asn1_meths         3541	1_1_0	EXIST::FUNCTION:ENGINE
+CRYPTO_ocb128_tag                       3542	1_1_0	EXIST::FUNCTION:OCB
+ERR_load_OBJ_strings                    3544	1_1_0	EXIST::FUNCTION:
+BIO_ctrl_get_read_request               3545	1_1_0	EXIST::FUNCTION:
+BN_from_montgomery                      3546	1_1_0	EXIST::FUNCTION:
+DSO_new                                 3547	1_1_0	EXIST::FUNCTION:
+AES_ecb_encrypt                         3548	1_1_0	EXIST::FUNCTION:
+BN_dec2bn                               3549	1_1_0	EXIST::FUNCTION:
+CMS_decrypt                             3550	1_1_0	EXIST::FUNCTION:CMS
+BN_mpi2bn                               3551	1_1_0	EXIST::FUNCTION:
+EVP_aes_128_cfb128                      3552	1_1_0	EXIST::FUNCTION:
+RC5_32_ecb_encrypt                      3554	1_1_0	EXIST::FUNCTION:RC5
+EVP_CIPHER_meth_new                     3555	1_1_0	EXIST::FUNCTION:
+i2d_RSA_OAEP_PARAMS                     3556	1_1_0	EXIST::FUNCTION:RSA
+SXNET_get_id_ulong                      3557	1_1_0	EXIST::FUNCTION:
+BIO_get_callback_arg                    3558	1_1_0	EXIST::FUNCTION:
+ENGINE_register_RSA                     3559	1_1_0	EXIST::FUNCTION:ENGINE
+i2v_GENERAL_NAMES                       3560	1_1_0	EXIST::FUNCTION:
+PKCS7_decrypt                           3562	1_1_0	EXIST::FUNCTION:
+X509_STORE_set1_param                   3563	1_1_0	EXIST::FUNCTION:
+RAND_file_name                          3564	1_1_0	EXIST::FUNCTION:
+EVP_CipherInit_ex                       3566	1_1_0	EXIST::FUNCTION:
+BIO_dgram_sctp_notification_cb          3567	1_1_0	EXIST::FUNCTION:DGRAM,SCTP
+ERR_load_RAND_strings                   3568	1_1_0	EXIST::FUNCTION:
+X509_ATTRIBUTE_it                       3569	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_ATTRIBUTE_it                       3569	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+X509_ALGOR_it                           3570	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_ALGOR_it                           3570	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+OCSP_CRLID_free                         3571	1_1_0	EXIST::FUNCTION:OCSP
+CRYPTO_ccm128_aad                       3572	1_1_0	EXIST::FUNCTION:
+IPAddressFamily_new                     3573	1_1_0	EXIST::FUNCTION:RFC3779
+d2i_TS_ACCURACY                         3574	1_1_0	EXIST::FUNCTION:TS
+X509_load_crl_file                      3575	1_1_0	EXIST::FUNCTION:
+SXNET_add_id_ulong                      3576	1_1_0	EXIST::FUNCTION:
+EVP_camellia_256_cbc                    3577	1_1_0	EXIST::FUNCTION:CAMELLIA
+i2d_PROXY_POLICY                        3578	1_1_0	EXIST::FUNCTION:
+X509_subject_name_hash_old              3579	1_1_0	EXIST::FUNCTION:MD5
+PEM_read_bio_DSA_PUBKEY                 3580	1_1_0	EXIST::FUNCTION:DSA
+OCSP_cert_to_id                         3581	1_1_0	EXIST::FUNCTION:OCSP
+PEM_write_DSAparams                     3582	1_1_0	EXIST::FUNCTION:DSA,STDIO
+ASN1_TIME_to_generalizedtime            3583	1_1_0	EXIST::FUNCTION:
+X509_CRL_get_ext_by_critical            3584	1_1_0	EXIST::FUNCTION:
+ASN1_STRING_type                        3585	1_1_0	EXIST::FUNCTION:
+X509_REQ_add1_attr_by_txt               3586	1_1_0	EXIST::FUNCTION:
+PEM_write_RSAPublicKey                  3587	1_1_0	EXIST::FUNCTION:RSA,STDIO
+EVP_MD_meth_dup                         3588	1_1_0	EXIST::FUNCTION:
+ENGINE_unregister_ciphers               3589	1_1_0	EXIST::FUNCTION:ENGINE
+X509_issuer_and_serial_cmp              3590	1_1_0	EXIST::FUNCTION:
+OCSP_response_create                    3591	1_1_0	EXIST::FUNCTION:OCSP
+SHA224                                  3592	1_1_0	EXIST::FUNCTION:
+MD2_options                             3593	1_1_0	EXIST::FUNCTION:MD2
+X509_REQ_it                             3595	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+X509_REQ_it                             3595	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+RAND_bytes                              3596	1_1_0	EXIST::FUNCTION:
+PKCS7_free                              3597	1_1_0	EXIST::FUNCTION:
+X509_NAME_ENTRY_create_by_txt           3598	1_1_0	EXIST::FUNCTION:
+DES_cbc_cksum                           3599	1_1_0	EXIST::FUNCTION:DES
+UI_free                                 3600	1_1_0	EXIST::FUNCTION:
+BN_is_prime                             3601	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_0_9_8
+CMS_get0_signers                        3602	1_1_0	EXIST::FUNCTION:CMS
+i2d_PrivateKey_fp                       3603	1_1_0	EXIST::FUNCTION:STDIO
+OTHERNAME_cmp                           3604	1_1_0	EXIST::FUNCTION:
+SMIME_write_PKCS7                       3605	1_1_0	EXIST::FUNCTION:
+EC_KEY_set_public_key                   3606	1_1_0	EXIST::FUNCTION:EC
+d2i_X509_EXTENSION                      3607	1_1_0	EXIST::FUNCTION:
+CMS_add1_recipient_cert                 3608	1_1_0	EXIST::FUNCTION:CMS
+CMS_RecipientInfo_kekri_get0_id         3609	1_1_0	EXIST::FUNCTION:CMS
+BN_mod_word                             3610	1_1_0	EXIST::FUNCTION:
+ASN1_PCTX_new                           3611	1_1_0	EXIST::FUNCTION:
+BN_is_prime_ex                          3612	1_1_0	EXIST::FUNCTION:
+PKCS5_v2_PBE_keyivgen                   3613	1_1_0	EXIST::FUNCTION:
+CRYPTO_ctr128_encrypt                   3614	1_1_0	EXIST::FUNCTION:
+CMS_unsigned_add1_attr_by_OBJ           3615	1_1_0	EXIST::FUNCTION:CMS
+PEM_write_EC_PUBKEY                     3616	1_1_0	EXIST::FUNCTION:EC,STDIO
+X509v3_asid_add_inherit                 3617	1_1_0	EXIST::FUNCTION:RFC3779
+ERR_get_error                           3618	1_1_0	EXIST::FUNCTION:
+TS_CONF_set_signer_digest               3619	1_1_0	EXIST::FUNCTION:TS
+OBJ_new_nid                             3620	1_1_0	EXIST::FUNCTION:
+CMS_ReceiptRequest_new                  3621	1_1_0	EXIST::FUNCTION:CMS
+SRP_VBASE_get1_by_user                  3622	1_1_0	EXIST::FUNCTION:SRP
+UI_method_get_closer                    3623	1_1_0	EXIST::FUNCTION:
+ENGINE_get_ex_data                      3624	1_1_0	EXIST::FUNCTION:ENGINE
+BN_print_fp                             3625	1_1_0	EXIST::FUNCTION:STDIO
+MD2_Update                              3626	1_1_0	EXIST::FUNCTION:MD2
+ENGINE_free                             3628	1_1_0	EXIST::FUNCTION:ENGINE
+d2i_X509_ATTRIBUTE                      3629	1_1_0	EXIST::FUNCTION:
+TS_RESP_free                            3630	1_1_0	EXIST::FUNCTION:TS
+PKCS5_pbe_set                           3631	1_1_0	EXIST::FUNCTION:
+TS_RESP_CTX_free                        3632	1_1_0	EXIST::FUNCTION:TS
+d2i_PUBKEY                              3633	1_1_0	EXIST::FUNCTION:
+ASYNC_cleanup_thread                    3634	1_1_0	EXIST::FUNCTION:
+SHA384_Update                           3635	1_1_0	EXIST::FUNCTION:
+CRYPTO_cfb128_1_encrypt                 3636	1_1_0	EXIST::FUNCTION:
+BIO_set_cipher                          3637	1_1_0	EXIST::FUNCTION:
+PEM_read_PUBKEY                         3638	1_1_0	EXIST::FUNCTION:STDIO
+RSA_PKCS1_OpenSSL                       3639	1_1_0	EXIST::FUNCTION:RSA
+AUTHORITY_INFO_ACCESS_free              3640	1_1_0	EXIST::FUNCTION:
+SCT_get0_signature                      3641	1_1_0	EXIST::FUNCTION:CT
+DISPLAYTEXT_it                          3643	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+DISPLAYTEXT_it                          3643	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+OPENSSL_gmtime_adj                      3644	1_1_0	EXIST::FUNCTION:
+ASN1_INTEGER_dup                        3645	1_1_0	EXIST::FUNCTION:
+DSA_print                               3646	1_1_0	EXIST::FUNCTION:DSA
+X509_REQ_set_extension_nids             3647	1_1_0	EXIST::FUNCTION:
+X509_free                               3648	1_1_0	EXIST::FUNCTION:
+ERR_load_ERR_strings                    3649	1_1_0	EXIST::FUNCTION:
+ASN1_const_check_infinite_end           3650	1_1_0	EXIST::FUNCTION:
+RSA_null_method                         3651	1_1_0	EXIST::FUNCTION:RSA
+TS_REQ_ext_free                         3652	1_1_0	EXIST::FUNCTION:TS
+EVP_PKEY_meth_get_encrypt               3653	1_1_0	EXIST::FUNCTION:
+Camellia_ecb_encrypt                    3654	1_1_0	EXIST::FUNCTION:CAMELLIA
+ENGINE_set_default_RSA                  3655	1_1_0	EXIST::FUNCTION:ENGINE
+EVP_EncodeBlock                         3656	1_1_0	EXIST::FUNCTION:
+SXNETID_free                            3657	1_1_0	EXIST::FUNCTION:
+SHA1_Init                               3658	1_1_0	EXIST::FUNCTION:
+CRYPTO_atomic_add                       3659	1_1_0	EXIST::FUNCTION:
+TS_CONF_load_certs                      3660	1_1_0	EXIST::FUNCTION:TS
+PEM_write_bio_DSAPrivateKey             3661	1_1_0	EXIST::FUNCTION:DSA
+CMS_encrypt                             3662	1_1_0	EXIST::FUNCTION:CMS
+CRYPTO_nistcts128_decrypt               3663	1_1_0	EXIST::FUNCTION:
+ERR_load_DH_strings                     3664	1_1_0	EXIST::FUNCTION:DH
+EVP_MD_block_size                       3665	1_1_0	EXIST::FUNCTION:
+TS_X509_ALGOR_print_bio                 3666	1_1_0	EXIST::FUNCTION:TS
+d2i_PKCS7_ENVELOPE                      3667	1_1_0	EXIST::FUNCTION:
+ESS_CERT_ID_new                         3669	1_1_0	EXIST::FUNCTION:TS
+EC_POINT_invert                         3670	1_1_0	EXIST::FUNCTION:EC
+CAST_set_key                            3671	1_1_0	EXIST::FUNCTION:CAST
+ENGINE_get_pkey_meth                    3672	1_1_0	EXIST::FUNCTION:ENGINE
+BIO_ADDRINFO_free                       3673	1_1_0	EXIST::FUNCTION:SOCK
+DES_ede3_cbc_encrypt                    3674	1_1_0	EXIST::FUNCTION:DES
+X509v3_asid_canonize                    3675	1_1_0	EXIST::FUNCTION:RFC3779
+i2d_ASIdOrRange                         3676	1_1_0	EXIST::FUNCTION:RFC3779
+OCSP_url_svcloc_new                     3677	1_1_0	EXIST::FUNCTION:OCSP
+CRYPTO_mem_ctrl                         3678	1_1_0	EXIST::FUNCTION:
+ASN1_verify                             3679	1_1_0	EXIST::FUNCTION:
+DSA_generate_parameters_ex              3680	1_1_0	EXIST::FUNCTION:DSA
+X509_sign                               3681	1_1_0	EXIST::FUNCTION:
+SHA256_Transform                        3682	1_1_0	EXIST::FUNCTION:
+BIO_ADDR_free                           3683	1_1_0	EXIST::FUNCTION:SOCK
+ASN1_STRING_free                        3684	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_inherit               3685	1_1_0	EXIST::FUNCTION:
+EC_GROUP_get_curve_name                 3686	1_1_0	EXIST::FUNCTION:EC
+RSA_print                               3687	1_1_0	EXIST::FUNCTION:RSA
+i2d_ASN1_BMPSTRING                      3688	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_decrypt_old                    3689	1_1_0	EXIST::FUNCTION:
+ASN1_UTCTIME_cmp_time_t                 3690	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_set1_ip               3691	1_1_0	EXIST::FUNCTION:
+OTHERNAME_free                          3692	1_1_0	EXIST::FUNCTION:
+OCSP_REVOKEDINFO_free                   3693	1_1_0	EXIST::FUNCTION:OCSP
+EVP_CIPHER_CTX_encrypting               3694	1_1_0	EXIST::FUNCTION:
+EC_KEY_can_sign                         3695	1_1_0	EXIST::FUNCTION:EC
+PEM_write_bio_RSAPublicKey              3696	1_1_0	EXIST::FUNCTION:RSA
+X509_CRL_set1_lastUpdate                3697	1_1_0	EXIST::FUNCTION:
+OCSP_sendreq_nbio                       3698	1_1_0	EXIST::FUNCTION:OCSP
+PKCS8_encrypt                           3699	1_1_0	EXIST::FUNCTION:
+i2d_PKCS7_fp                            3700	1_1_0	EXIST::FUNCTION:STDIO
+i2d_X509_REQ                            3701	1_1_0	EXIST::FUNCTION:
+OCSP_CRLID_it                           3702	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:OCSP
+OCSP_CRLID_it                           3702	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:OCSP
+PEM_ASN1_write_bio                      3703	1_1_0	EXIST::FUNCTION:
+X509_get0_reject_objects                3704	1_1_0	EXIST::FUNCTION:
+BIO_set_tcp_ndelay                      3705	1_1_0	EXIST::FUNCTION:SOCK
+CMS_add0_CertificateChoices             3706	1_1_0	EXIST::FUNCTION:CMS
+POLICYINFO_new                          3707	1_1_0	EXIST::FUNCTION:
+X509_CRL_get0_by_serial                 3708	1_1_0	EXIST::FUNCTION:
+PKCS12_add_friendlyname_asc             3709	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get1_chain               3710	1_1_0	EXIST::FUNCTION:
+ASN1_mbstring_ncopy                     3711	1_1_0	EXIST::FUNCTION:
+PKCS7_RECIP_INFO_it                     3712	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS7_RECIP_INFO_it                     3712	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ENGINE_register_all_digests             3713	1_1_0	EXIST::FUNCTION:ENGINE
+X509_REQ_get_version                    3714	1_1_0	EXIST::FUNCTION:
+i2d_ASN1_UTCTIME                        3715	1_1_0	EXIST::FUNCTION:
+TS_STATUS_INFO_new                      3716	1_1_0	EXIST::FUNCTION:TS
+UI_set_ex_data                          3717	1_1_0	EXIST::FUNCTION:
+ASN1_TIME_set                           3718	1_1_0	EXIST::FUNCTION:
+TS_RESP_verify_response                 3719	1_1_0	EXIST::FUNCTION:TS
+X509_REVOKED_get0_serialNumber          3720	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_free                  3721	1_1_0	EXIST::FUNCTION:
+ASN1_TYPE_new                           3722	1_1_0	EXIST::FUNCTION:
+CMAC_CTX_cleanup                        3723	1_1_0	EXIST::FUNCTION:CMAC
+i2d_PKCS7_NDEF                          3724	1_1_0	EXIST::FUNCTION:
+OPENSSL_sk_pop_free                     3725	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get0_policy_tree         3726	1_1_0	EXIST::FUNCTION:
+DES_set_key_checked                     3727	1_1_0	EXIST::FUNCTION:DES
+EVP_PKEY_meth_free                      3728	1_1_0	EXIST::FUNCTION:
+EVP_sha224                              3729	1_1_0	EXIST::FUNCTION:
+ENGINE_set_id                           3730	1_1_0	EXIST::FUNCTION:ENGINE
+d2i_ECPrivateKey                        3731	1_1_0	EXIST::FUNCTION:EC
+CMS_signed_add1_attr_by_NID             3732	1_1_0	EXIST::FUNCTION:CMS
+i2d_DSAPrivateKey_fp                    3733	1_1_0	EXIST::FUNCTION:DSA,STDIO
+EVP_CIPHER_meth_get_set_asn1_params     3734	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_ex_data              3735	1_1_0	EXIST::FUNCTION:
+CMS_RecipientInfo_kari_set0_pkey        3736	1_1_0	EXIST::FUNCTION:CMS
+X509v3_addr_add_inherit                 3737	1_1_0	EXIST::FUNCTION:RFC3779
+SRP_Calc_u                              3738	1_1_0	EXIST::FUNCTION:SRP
+i2d_PKCS8PrivateKey_bio                 3739	1_1_0	EXIST::FUNCTION:
+X509_get_extension_flags                3740	1_1_0	EXIST::FUNCTION:
+X509V3_EXT_val_prn                      3741	1_1_0	EXIST::FUNCTION:
+SCT_get_validation_status               3742	1_1_0	EXIST::FUNCTION:CT
+NETSCAPE_CERT_SEQUENCE_free             3743	1_1_0	EXIST::FUNCTION:
+EVP_PBE_scrypt                          3744	1_1_0	EXIST::FUNCTION:SCRYPT
+d2i_TS_REQ_bio                          3745	1_1_0	EXIST::FUNCTION:TS
+ENGINE_set_default_ciphers              3746	1_1_0	EXIST::FUNCTION:ENGINE
+X509_get_signature_nid                  3747	1_1_0	EXIST::FUNCTION:
+DES_fcrypt                              3748	1_1_0	EXIST::FUNCTION:DES
+PEM_write_bio_X509_REQ                  3749	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_meth_get_sign                  3750	1_1_0	EXIST::FUNCTION:
+TS_REQ_get_nonce                        3751	1_1_0	EXIST::FUNCTION:TS
+ENGINE_unregister_EC                    3752	1_1_0	EXIST::FUNCTION:ENGINE
+X509v3_get_ext_count                    3753	1_1_0	EXIST::FUNCTION:
+UI_OpenSSL                              3754	1_1_0	EXIST::FUNCTION:UI_CONSOLE
+CRYPTO_ccm128_decrypt                   3755	1_1_0	EXIST::FUNCTION:
+d2i_OCSP_RESPDATA                       3756	1_1_0	EXIST::FUNCTION:OCSP
+BIO_set_callback                        3757	1_1_0	EXIST::FUNCTION:
+BN_GF2m_poly2arr                        3758	1_1_0	EXIST::FUNCTION:EC2M
+CMS_unsigned_get_attr_count             3759	1_1_0	EXIST::FUNCTION:CMS
+EVP_aes_256_gcm                         3760	1_1_0	EXIST::FUNCTION:
+RSA_padding_check_X931                  3761	1_1_0	EXIST::FUNCTION:RSA
+ECDH_compute_key                        3762	1_1_0	EXIST::FUNCTION:EC
+ASN1_TIME_print                         3763	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_CTX_get0_peerkey               3764	1_1_0	EXIST::FUNCTION:
+BN_mod_lshift1                          3765	1_1_0	EXIST::FUNCTION:
+BIO_ADDRINFO_family                     3766	1_1_0	EXIST::FUNCTION:SOCK
+PEM_write_DHxparams                     3767	1_1_0	EXIST::FUNCTION:DH,STDIO
+BN_mod_exp2_mont                        3768	1_1_0	EXIST::FUNCTION:
+ASN1_PRINTABLE_free                     3769	1_1_0	EXIST::FUNCTION:
+PKCS7_ATTR_SIGN_it                      3771	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKCS7_ATTR_SIGN_it                      3771	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+EVP_MD_CTX_copy                         3772	1_1_0	EXIST::FUNCTION:
+ENGINE_set_ctrl_function                3773	1_1_0	EXIST::FUNCTION:ENGINE
+OCSP_id_get0_info                       3774	1_1_0	EXIST::FUNCTION:OCSP
+BIO_ADDRINFO_next                       3775	1_1_0	EXIST::FUNCTION:SOCK
+OCSP_RESPBYTES_free                     3776	1_1_0	EXIST::FUNCTION:OCSP
+EC_KEY_METHOD_set_init                  3777	1_1_0	EXIST::FUNCTION:EC
+EVP_PKEY_asn1_copy                      3778	1_1_0	EXIST::FUNCTION:
+RSA_PSS_PARAMS_it                       3779	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:RSA
+RSA_PSS_PARAMS_it                       3779	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:RSA
+X509_STORE_CTX_get_error_depth          3780	1_1_0	EXIST::FUNCTION:
+ASN1_GENERALIZEDTIME_set_string         3781	1_1_0	EXIST::FUNCTION:
+EC_GROUP_new_curve_GFp                  3782	1_1_0	EXIST::FUNCTION:EC
+UI_new_method                           3783	1_1_0	EXIST::FUNCTION:
+Camellia_ofb128_encrypt                 3784	1_1_0	EXIST::FUNCTION:CAMELLIA
+X509_new                                3785	1_1_0	EXIST::FUNCTION:
+EC_KEY_get_conv_form                    3786	1_1_0	EXIST::FUNCTION:EC
+CTLOG_STORE_get0_log_by_id              3787	1_1_0	EXIST::FUNCTION:CT
+CMS_signed_add1_attr                    3788	1_1_0	EXIST::FUNCTION:CMS
+EVP_CIPHER_meth_set_iv_length           3789	1_1_0	EXIST::FUNCTION:
+X509v3_asid_validate_path               3790	1_1_0	EXIST::FUNCTION:RFC3779
+CMS_RecipientInfo_set0_password         3791	1_1_0	EXIST::FUNCTION:CMS
+TS_CONF_load_cert                       3792	1_1_0	EXIST::FUNCTION:TS
+i2d_ECPKParameters                      3793	1_1_0	EXIST::FUNCTION:EC
+X509_TRUST_get0                         3794	1_1_0	EXIST::FUNCTION:
+CMS_get0_RecipientInfos                 3795	1_1_0	EXIST::FUNCTION:CMS
+EVP_PKEY_CTX_new                        3796	1_1_0	EXIST::FUNCTION:
+i2d_DSA_PUBKEY_bio                      3797	1_1_0	EXIST::FUNCTION:DSA
+X509_REQ_get_subject_name               3798	1_1_0	EXIST::FUNCTION:
+BN_div_word                             3799	1_1_0	EXIST::FUNCTION:
+TS_CONF_set_signer_key                  3800	1_1_0	EXIST::FUNCTION:TS
+BN_GF2m_mod_sqrt                        3801	1_1_0	EXIST::FUNCTION:EC2M
+EVP_CIPHER_nid                          3802	1_1_0	EXIST::FUNCTION:
+OBJ_txt2obj                             3803	1_1_0	EXIST::FUNCTION:
+CMS_RecipientInfo_kari_get0_orig_id     3804	1_1_0	EXIST::FUNCTION:CMS
+EVP_bf_ecb                              3805	1_1_0	EXIST::FUNCTION:BF
+v2i_GENERAL_NAME_ex                     3806	1_1_0	EXIST::FUNCTION:
+CMS_signed_delete_attr                  3807	1_1_0	EXIST::FUNCTION:CMS
+ASN1_TYPE_pack_sequence                 3808	1_1_0	EXIST::FUNCTION:
+USERNOTICE_it                           3809	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+USERNOTICE_it                           3809	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+PKEY_USAGE_PERIOD_it                    3810	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PKEY_USAGE_PERIOD_it                    3810	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+BN_mul_word                             3811	1_1_0	EXIST::FUNCTION:
+i2d_IPAddressRange                      3813	1_1_0	EXIST::FUNCTION:RFC3779
+CMS_unsigned_add1_attr_by_txt           3814	1_1_0	EXIST::FUNCTION:CMS
+d2i_RSA_PUBKEY                          3815	1_1_0	EXIST::FUNCTION:RSA
+PKCS12_gen_mac                          3816	1_1_0	EXIST::FUNCTION:
+ERR_load_ENGINE_strings                 3817	1_1_0	EXIST::FUNCTION:ENGINE
+ERR_load_CT_strings                     3818	1_1_0	EXIST::FUNCTION:CT
+OCSP_ONEREQ_it                          3819	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:OCSP
+OCSP_ONEREQ_it                          3819	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:OCSP
+X509_PURPOSE_get_by_sname               3820	1_1_0	EXIST::FUNCTION:
+X509_PURPOSE_set                        3821	1_1_0	EXIST::FUNCTION:
+BN_mod_inverse                          3822	1_1_0	EXIST::FUNCTION:
+ASN1_STRING_TABLE_get                   3823	1_1_0	EXIST::FUNCTION:
+BN_bn2binpad                            3824	1_1_0	EXIST::FUNCTION:
+X509_supported_extension                3825	1_1_0	EXIST::FUNCTION:
+ECDSA_sign_setup                        3826	1_1_0	EXIST::FUNCTION:EC
+EVP_camellia_192_cfb128                 3827	1_1_0	EXIST::FUNCTION:CAMELLIA
+d2i_AUTHORITY_KEYID                     3828	1_1_0	EXIST::FUNCTION:
+RIPEMD160_Transform                     3829	1_1_0	EXIST::FUNCTION:RMD160
+DES_random_key                          3830	1_1_0	EXIST::FUNCTION:DES
+i2d_PKCS12_MAC_DATA                     3831	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_get0_EC_KEY                    3832	1_1_0	EXIST::FUNCTION:EC
+ASN1_SCTX_get_item                      3833	1_1_0	EXIST::FUNCTION:
+NOTICEREF_new                           3834	1_1_0	EXIST::FUNCTION:
+BN_GF2m_mod_inv                         3835	1_1_0	EXIST::FUNCTION:EC2M
+X509_CERT_AUX_free                      3836	1_1_0	EXIST::FUNCTION:
+BN_GF2m_mod_inv_arr                     3837	1_1_0	EXIST::FUNCTION:EC2M
+X509_REQ_get1_email                     3838	1_1_0	EXIST::FUNCTION:
+EC_KEY_print                            3839	1_1_0	EXIST::FUNCTION:EC
+i2d_ASN1_INTEGER                        3840	1_1_0	EXIST::FUNCTION:
+OCSP_SINGLERESP_add1_ext_i2d            3841	1_1_0	EXIST::FUNCTION:OCSP
+PKCS7_add_signed_attribute              3842	1_1_0	EXIST::FUNCTION:
+i2d_PrivateKey_bio                      3843	1_1_0	EXIST::FUNCTION:
+RSA_padding_add_PKCS1_type_1            3844	1_1_0	EXIST::FUNCTION:RSA
+i2d_re_X509_tbs                         3845	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_iv_length                    3846	1_1_0	EXIST::FUNCTION:
+OCSP_REQ_CTX_get0_mem_bio               3847	1_1_0	EXIST::FUNCTION:OCSP
+i2d_PKCS8PrivateKeyInfo_bio             3848	1_1_0	EXIST::FUNCTION:
+d2i_OCSP_CERTID                         3849	1_1_0	EXIST::FUNCTION:OCSP
+EVP_CIPHER_meth_set_init                3850	1_1_0	EXIST::FUNCTION:
+RIPEMD160_Final                         3851	1_1_0	EXIST::FUNCTION:RMD160
+NETSCAPE_SPKI_free                      3852	1_1_0	EXIST::FUNCTION:
+BIO_asn1_get_prefix                     3853	1_1_0	EXIST::FUNCTION:
+d2i_OCSP_ONEREQ                         3854	1_1_0	EXIST::FUNCTION:OCSP
+EVP_PKEY_asn1_set_security_bits         3855	1_1_0	EXIST::FUNCTION:
+i2d_CERTIFICATEPOLICIES                 3856	1_1_0	EXIST::FUNCTION:
+i2d_X509_CERT_AUX                       3857	1_1_0	EXIST::FUNCTION:
+i2o_ECPublicKey                         3858	1_1_0	EXIST::FUNCTION:EC
+PKCS12_SAFEBAG_create0_pkcs8            3859	1_1_0	EXIST::FUNCTION:
+OBJ_get0_data                           3860	1_1_0	EXIST::FUNCTION:
+EC_GROUP_get0_seed                      3861	1_1_0	EXIST::FUNCTION:EC
+OCSP_REQUEST_it                         3862	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:OCSP
+OCSP_REQUEST_it                         3862	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:OCSP
+ASRange_it                              3863	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:RFC3779
+ASRange_it                              3863	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:RFC3779
+i2d_TS_RESP                             3864	1_1_0	EXIST::FUNCTION:TS
+TS_TST_INFO_get_ext_by_OBJ              3865	1_1_0	EXIST::FUNCTION:TS
+d2i_PKCS7_RECIP_INFO                    3866	1_1_0	EXIST::FUNCTION:
+d2i_X509_CRL                            3867	1_1_0	EXIST::FUNCTION:
+ASN1_OCTET_STRING_dup                   3868	1_1_0	EXIST::FUNCTION:
+CRYPTO_nistcts128_decrypt_block         3869	1_1_0	EXIST::FUNCTION:
+CMS_stream                              3870	1_1_0	EXIST::FUNCTION:CMS
+RSA_OAEP_PARAMS_it                      3871	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:RSA
+RSA_OAEP_PARAMS_it                      3871	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:RSA
+BN_bn2mpi                               3872	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_cleanup                  3873	1_1_0	EXIST::FUNCTION:
+OCSP_onereq_get0_id                     3874	1_1_0	EXIST::FUNCTION:OCSP
+X509_get_default_cert_dir               3875	1_1_0	EXIST::FUNCTION:
+PROXY_POLICY_free                       3877	1_1_0	EXIST::FUNCTION:
+PEM_write_DSAPrivateKey                 3878	1_1_0	EXIST::FUNCTION:DSA,STDIO
+OPENSSL_sk_delete_ptr                   3879	1_1_0	EXIST::FUNCTION:
+CMS_add0_RevocationInfoChoice           3880	1_1_0	EXIST::FUNCTION:CMS
+ASN1_PCTX_get_flags                     3881	1_1_0	EXIST::FUNCTION:
+EVP_MD_meth_set_result_size             3882	1_1_0	EXIST::FUNCTION:
+i2d_X509_CRL                            3883	1_1_0	EXIST::FUNCTION:
+ASN1_INTEGER_it                         3885	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ASN1_INTEGER_it                         3885	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+TS_ACCURACY_new                         3886	1_1_0	EXIST::FUNCTION:TS
+i2d_SXNETID                             3887	1_1_0	EXIST::FUNCTION:
+BN_mod_mul_montgomery                   3888	1_1_0	EXIST::FUNCTION:
+BN_nnmod                                3889	1_1_0	EXIST::FUNCTION:
+TS_RESP_CTX_set_status_info_cond        3890	1_1_0	EXIST::FUNCTION:TS
+PBKDF2PARAM_new                         3891	1_1_0	EXIST::FUNCTION:
+ENGINE_set_RSA                          3892	1_1_0	EXIST::FUNCTION:ENGINE
+i2d_X509_ATTRIBUTE                      3893	1_1_0	EXIST::FUNCTION:
+PKCS7_ctrl                              3894	1_1_0	EXIST::FUNCTION:
+OCSP_REVOKEDINFO_it                     3895	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:OCSP
+OCSP_REVOKEDINFO_it                     3895	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:OCSP
+X509V3_set_ctx                          3896	1_1_0	EXIST::FUNCTION:
+ASN1_ENUMERATED_set_int64               3897	1_1_0	EXIST::FUNCTION:
+o2i_SCT                                 3898	1_1_0	EXIST::FUNCTION:CT
+CRL_DIST_POINTS_free                    3899	1_1_0	EXIST::FUNCTION:
+d2i_OCSP_SINGLERESP                     3900	1_1_0	EXIST::FUNCTION:OCSP
+EVP_CIPHER_CTX_num                      3901	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_verify_recover_init            3902	1_1_0	EXIST::FUNCTION:
+SHA512_Init                             3903	1_1_0	EXIST::FUNCTION:
+TS_MSG_IMPRINT_set_msg                  3904	1_1_0	EXIST::FUNCTION:TS
+CMS_unsigned_add1_attr                  3905	1_1_0	EXIST::FUNCTION:CMS
+OPENSSL_LH_doall                        3906	1_1_0	EXIST::FUNCTION:
+PKCS8_pkey_get0_attrs                   3907	1_1_0	EXIST::FUNCTION:
+PKCS8_pkey_add1_attr_by_NID             3908	1_1_0	EXIST::FUNCTION:
+ASYNC_is_capable                        3909	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_CTX_set_cipher_data          3910	1_1_0	EXIST::FUNCTION:
+EVP_CIPHER_CTX_get_cipher_data          3911	1_1_0	EXIST::FUNCTION:
+BIO_up_ref                              3912	1_1_0	EXIST::FUNCTION:
+X509_STORE_up_ref                       3913	1_1_0	EXIST::FUNCTION:
+DSA_SIG_get0                            3914	1_1_0	EXIST::FUNCTION:DSA
+BN_BLINDING_is_current_thread           3915	1_1_0	EXIST::FUNCTION:
+BN_BLINDING_set_current_thread          3916	1_1_0	EXIST::FUNCTION:
+BN_BLINDING_lock                        3917	1_1_0	EXIST::FUNCTION:
+BN_BLINDING_unlock                      3918	1_1_0	EXIST::FUNCTION:
+EC_GROUP_new_from_ecpkparameters        3919	1_1_0	EXIST::FUNCTION:EC
+EC_GROUP_get_ecpkparameters             3920	1_1_0	EXIST::FUNCTION:EC
+EC_GROUP_new_from_ecparameters          3921	1_1_0	EXIST::FUNCTION:EC
+ECPARAMETERS_it                         3922	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:EC
+ECPARAMETERS_it                         3922	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:EC
+ECPKPARAMETERS_it                       3923	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:EC
+ECPKPARAMETERS_it                       3923	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:EC
+EC_GROUP_get_ecparameters               3924	1_1_0	EXIST::FUNCTION:EC
+DHparams_it                             3925	1_1_0	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:DH
+DHparams_it                             3925	1_1_0	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:DH
+EVP_blake2s256                          3926	1_1_0	EXIST::FUNCTION:BLAKE2
+EVP_blake2b512                          3927	1_1_0	EXIST::FUNCTION:BLAKE2
+X509_SIG_get0                           3928	1_1_0	EXIST::FUNCTION:
+BIO_meth_new                            3929	1_1_0	EXIST::FUNCTION:
+BIO_meth_get_puts                       3930	1_1_0	EXIST::FUNCTION:
+BIO_meth_get_ctrl                       3931	1_1_0	EXIST::FUNCTION:
+BIO_meth_get_gets                       3932	1_1_0	EXIST::FUNCTION:
+BIO_get_data                            3933	1_1_0	EXIST::FUNCTION:
+BIO_set_init                            3934	1_1_0	EXIST::FUNCTION:
+BIO_meth_set_puts                       3935	1_1_0	EXIST::FUNCTION:
+BIO_get_shutdown                        3936	1_1_0	EXIST::FUNCTION:
+BIO_get_init                            3937	1_1_0	EXIST::FUNCTION:
+BIO_meth_set_ctrl                       3938	1_1_0	EXIST::FUNCTION:
+BIO_meth_set_read                       3939	1_1_0	EXIST::FUNCTION:
+BIO_set_shutdown                        3940	1_1_0	EXIST::FUNCTION:
+BIO_meth_set_create                     3941	1_1_0	EXIST::FUNCTION:
+BIO_meth_get_write                      3942	1_1_0	EXIST::FUNCTION:
+BIO_meth_set_callback_ctrl              3943	1_1_0	EXIST::FUNCTION:
+BIO_meth_get_create                     3944	1_1_0	EXIST::FUNCTION:
+BIO_set_next                            3945	1_1_0	EXIST::FUNCTION:
+BIO_set_data                            3946	1_1_0	EXIST::FUNCTION:
+BIO_meth_set_write                      3947	1_1_0	EXIST::FUNCTION:
+BIO_meth_set_destroy                    3948	1_1_0	EXIST::FUNCTION:
+BIO_meth_set_gets                       3949	1_1_0	EXIST::FUNCTION:
+BIO_meth_get_callback_ctrl              3950	1_1_0	EXIST::FUNCTION:
+BIO_meth_get_destroy                    3951	1_1_0	EXIST::FUNCTION:
+BIO_meth_get_read                       3952	1_1_0	EXIST::FUNCTION:
+BIO_set_retry_reason                    3953	1_1_0	EXIST::FUNCTION:
+BIO_meth_free                           3954	1_1_0	EXIST::FUNCTION:
+DSA_meth_set_bn_mod_exp                 3955	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_set_init                       3956	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_free                           3957	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_set_mod_exp                    3958	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_set_sign                       3959	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_get_finish                     3960	1_1_0	EXIST::FUNCTION:DSA
+DSA_set_flags                           3961	1_1_0	EXIST::FUNCTION:DSA
+DSA_get0_pqg                            3962	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_get0_app_data                  3963	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_get_keygen                     3964	1_1_0	EXIST::FUNCTION:DSA
+DSA_clear_flags                         3965	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_get0_name                      3966	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_get_paramgen                   3967	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_get_sign                       3968	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_set_paramgen                   3969	1_1_0	EXIST::FUNCTION:DSA
+DSA_test_flags                          3970	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_set0_app_data                  3971	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_set1_name                      3972	1_1_0	EXIST::FUNCTION:DSA
+DSA_get0_key                            3973	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_get_mod_exp                    3974	1_1_0	EXIST::FUNCTION:DSA
+DSA_set0_pqg                            3975	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_get_flags                      3976	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_get_verify                     3977	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_set_verify                     3978	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_set_finish                     3979	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_set_keygen                     3980	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_dup                            3981	1_1_0	EXIST::FUNCTION:DSA
+DSA_set0_key                            3982	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_get_init                       3983	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_set_sign_setup                 3984	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_get_bn_mod_exp                 3985	1_1_0	EXIST::FUNCTION:DSA
+DSA_get_method                          3986	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_new                            3987	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_set_flags                      3988	1_1_0	EXIST::FUNCTION:DSA
+DSA_meth_get_sign_setup                 3989	1_1_0	EXIST::FUNCTION:DSA
+DSA_get0_engine                         3990	1_1_0	EXIST::FUNCTION:DSA
+X509_VERIFY_PARAM_set_auth_level        3991	1_1_0	EXIST::FUNCTION:
+X509_VERIFY_PARAM_get_auth_level        3992	1_1_0	EXIST::FUNCTION:
+X509_REQ_get0_pubkey                    3993	1_1_0	EXIST::FUNCTION:
+RSA_set0_key                            3994	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_get_flags                      3995	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_set_finish                     3996	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_get_priv_dec                   3997	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_get_sign                       3998	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_get_bn_mod_exp                 3999	1_1_0	EXIST::FUNCTION:RSA
+RSA_test_flags                          4000	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_new                            4001	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_get0_app_data                  4002	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_dup                            4003	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_set1_name                      4004	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_set0_app_data                  4005	1_1_0	EXIST::FUNCTION:RSA
+RSA_set_flags                           4006	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_set_sign                       4007	1_1_0	EXIST::FUNCTION:RSA
+RSA_clear_flags                         4008	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_get_keygen                     4009	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_set_keygen                     4010	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_set_pub_dec                    4011	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_get_finish                     4012	1_1_0	EXIST::FUNCTION:RSA
+RSA_get0_key                            4013	1_1_0	EXIST::FUNCTION:RSA
+RSA_get0_engine                         4014	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_set_priv_enc                   4015	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_set_verify                     4016	1_1_0	EXIST::FUNCTION:RSA
+RSA_get0_factors                        4017	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_get0_name                      4018	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_get_mod_exp                    4019	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_set_flags                      4020	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_get_pub_dec                    4021	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_set_bn_mod_exp                 4022	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_get_init                       4023	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_free                           4024	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_get_pub_enc                    4025	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_set_mod_exp                    4026	1_1_0	EXIST::FUNCTION:RSA
+RSA_set0_factors                        4027	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_set_pub_enc                    4028	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_set_priv_dec                   4029	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_get_verify                     4030	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_set_init                       4031	1_1_0	EXIST::FUNCTION:RSA
+RSA_meth_get_priv_enc                   4032	1_1_0	EXIST::FUNCTION:RSA
+RSA_set0_crt_params                     4037	1_1_0	EXIST::FUNCTION:RSA
+RSA_get0_crt_params                     4038	1_1_0	EXIST::FUNCTION:RSA
+DH_set0_pqg                             4039	1_1_0	EXIST::FUNCTION:DH
+DH_clear_flags                          4041	1_1_0	EXIST::FUNCTION:DH
+DH_get0_key                             4042	1_1_0	EXIST::FUNCTION:DH
+DH_get0_engine                          4043	1_1_0	EXIST::FUNCTION:DH
+DH_set0_key                             4044	1_1_0	EXIST::FUNCTION:DH
+DH_set_length                           4045	1_1_0	EXIST::FUNCTION:DH
+DH_test_flags                           4046	1_1_0	EXIST::FUNCTION:DH
+DH_get_length                           4047	1_1_0	EXIST::FUNCTION:DH
+DH_get0_pqg                             4048	1_1_0	EXIST::FUNCTION:DH
+DH_meth_get_compute_key                 4049	1_1_0	EXIST::FUNCTION:DH
+DH_meth_set1_name                       4050	1_1_0	EXIST::FUNCTION:DH
+DH_meth_set_init                        4051	1_1_0	EXIST::FUNCTION:DH
+DH_meth_get_finish                      4052	1_1_0	EXIST::FUNCTION:DH
+DH_meth_get0_name                       4053	1_1_0	EXIST::FUNCTION:DH
+DH_meth_set_generate_params             4054	1_1_0	EXIST::FUNCTION:DH
+DH_meth_set_compute_key                 4055	1_1_0	EXIST::FUNCTION:DH
+DH_meth_set_flags                       4056	1_1_0	EXIST::FUNCTION:DH
+DH_meth_get_generate_params             4057	1_1_0	EXIST::FUNCTION:DH
+DH_meth_get_flags                       4058	1_1_0	EXIST::FUNCTION:DH
+DH_meth_set_finish                      4059	1_1_0	EXIST::FUNCTION:DH
+DH_meth_get0_app_data                   4060	1_1_0	EXIST::FUNCTION:DH
+DH_meth_set0_app_data                   4061	1_1_0	EXIST::FUNCTION:DH
+DH_meth_get_init                        4062	1_1_0	EXIST::FUNCTION:DH
+DH_meth_get_bn_mod_exp                  4063	1_1_0	EXIST::FUNCTION:DH
+DH_meth_new                             4064	1_1_0	EXIST::FUNCTION:DH
+DH_meth_dup                             4065	1_1_0	EXIST::FUNCTION:DH
+DH_meth_set_bn_mod_exp                  4066	1_1_0	EXIST::FUNCTION:DH
+DH_meth_set_generate_key                4067	1_1_0	EXIST::FUNCTION:DH
+DH_meth_free                            4068	1_1_0	EXIST::FUNCTION:DH
+DH_meth_get_generate_key                4069	1_1_0	EXIST::FUNCTION:DH
+DH_set_flags                            4070	1_1_0	EXIST::FUNCTION:DH
+X509_STORE_CTX_get_obj_by_subject       4071	1_1_0	EXIST::FUNCTION:
+X509_OBJECT_free                        4072	1_1_0	EXIST::FUNCTION:
+X509_OBJECT_get0_X509                   4073	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get0_untrusted           4074	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_set_error_depth          4075	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get0_cert                4076	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_set_verify               4077	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_set_current_cert         4078	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_verify               4079	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_verify_cb            4080	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_set0_verified_chain      4081	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_set0_untrusted           4082	1_1_0	EXIST::FUNCTION:
+OPENSSL_hexchar2int                     4083	1_1_0	EXIST::FUNCTION:
+X509_STORE_set_ex_data                  4084	1_1_0	EXIST::FUNCTION:
+X509_STORE_get_ex_data                  4085	1_1_0	EXIST::FUNCTION:
+X509_STORE_get0_objects                 4086	1_1_0	EXIST::FUNCTION:
+X509_OBJECT_get_type                    4087	1_1_0	EXIST::FUNCTION:
+X509_STORE_set_verify                   4088	1_1_0	EXIST::FUNCTION:
+X509_OBJECT_new                         4089	1_1_0	EXIST::FUNCTION:
+X509_STORE_get0_param                   4090	1_1_0	EXIST::FUNCTION:
+PEM_write_bio_PrivateKey_traditional    4091	1_1_0	EXIST::FUNCTION:
+X509_get_pathlen                        4092	1_1_0	EXIST::FUNCTION:
+ECDSA_SIG_set0                          4093	1_1_0	EXIST::FUNCTION:EC
+DSA_SIG_set0                            4094	1_1_0	EXIST::FUNCTION:DSA
+EVP_PKEY_get0_hmac                      4095	1_1_0	EXIST::FUNCTION:
+HMAC_CTX_get_md                         4096	1_1_0	EXIST::FUNCTION:
+NAME_CONSTRAINTS_check_CN               4097	1_1_0	EXIST::FUNCTION:
+OCSP_resp_get0_id                       4098	1_1_0	EXIST::FUNCTION:OCSP
+OCSP_resp_get0_certs                    4099	1_1_0	EXIST::FUNCTION:OCSP
+X509_set_proxy_flag                     4100	1_1_0	EXIST::FUNCTION:
+EVP_ENCODE_CTX_copy                     4101	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_check_issued         4102	1_1_0	EXIST::FUNCTION:
+X509_STORE_set_lookup_certs             4103	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_check_crl            4104	1_1_0	EXIST::FUNCTION:
+X509_STORE_get_cleanup                  4105	1_1_0	EXIST::FUNCTION:
+X509_STORE_get_lookup_crls              4106	1_1_0	EXIST::FUNCTION:
+X509_STORE_get_cert_crl                 4107	1_1_0	EXIST::FUNCTION:
+X509_STORE_get_lookup_certs             4108	1_1_0	EXIST::FUNCTION:
+X509_STORE_get_check_revocation         4109	1_1_0	EXIST::FUNCTION:
+X509_STORE_set_get_crl                  4110	1_1_0	EXIST::FUNCTION:
+X509_STORE_set_check_issued             4111	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_check_policy         4112	1_1_0	EXIST::FUNCTION:
+X509_STORE_get_check_crl                4113	1_1_0	EXIST::FUNCTION:
+X509_STORE_set_check_crl                4114	1_1_0	EXIST::FUNCTION:
+X509_STORE_get_check_issued             4115	1_1_0	EXIST::FUNCTION:
+X509_STORE_get_get_issuer               4116	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_get_crl              4117	1_1_0	EXIST::FUNCTION:
+X509_STORE_set_get_issuer               4118	1_1_0	EXIST::FUNCTION:
+X509_STORE_set_cleanup                  4119	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_cleanup              4120	1_1_0	EXIST::FUNCTION:
+X509_STORE_get_get_crl                  4121	1_1_0	EXIST::FUNCTION:
+X509_STORE_set_check_revocation         4122	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_cert_crl             4123	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_lookup_certs         4124	1_1_0	EXIST::FUNCTION:
+X509_STORE_set_check_policy             4125	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_get_issuer           4126	1_1_0	EXIST::FUNCTION:
+X509_STORE_get_check_policy             4127	1_1_0	EXIST::FUNCTION:
+X509_STORE_set_cert_crl                 4128	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_check_revocation     4129	1_1_0	EXIST::FUNCTION:
+X509_STORE_get_verify_cb                4130	1_1_0	EXIST::FUNCTION:
+X509_STORE_CTX_get_lookup_crls          4131	1_1_0	EXIST::FUNCTION:
+X509_STORE_get_verify                   4132	1_1_0	EXIST::FUNCTION:
+X509_STORE_unlock                       4133	1_1_0	EXIST::FUNCTION:
+X509_STORE_lock                         4134	1_1_0	EXIST::FUNCTION:
+X509_set_proxy_pathlen                  4135	1_1_0	EXIST::FUNCTION:
+X509_get_proxy_pathlen                  4136	1_1_0	EXIST::FUNCTION:
+DSA_bits                                4137	1_1_0	EXIST::FUNCTION:DSA
+EVP_PKEY_set1_tls_encodedpoint          4138	1_1_0	EXIST::FUNCTION:
+EVP_PKEY_get1_tls_encodedpoint          4139	1_1_0	EXIST::FUNCTION:
+ASN1_STRING_get0_data                   4140	1_1_0	EXIST::FUNCTION:
+X509_SIG_getm                           4141	1_1_0	EXIST::FUNCTION:
+X509_get0_serialNumber                  4142	1_1_0	EXIST::FUNCTION:
+PKCS12_get_attr                         4143	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0
+X509_CRL_get0_lastUpdate                4144	1_1_0	EXIST::FUNCTION:
+X509_get0_notBefore                     4145	1_1_0	EXIST::FUNCTION:
+X509_get0_notAfter                      4146	1_1_0	EXIST::FUNCTION:
+X509_CRL_get0_nextUpdate                4147	1_1_0	EXIST::FUNCTION:
+BIO_get_new_index                       4148	1_1_0	EXIST::FUNCTION:
+OPENSSL_utf82uni                        4149	1_1_0	EXIST::FUNCTION:
+PKCS12_add_friendlyname_utf8            4150	1_1_0	EXIST::FUNCTION:
+OPENSSL_uni2utf8                        4151	1_1_0	EXIST::FUNCTION:
+PKCS12_key_gen_utf8                     4152	1_1_0	EXIST::FUNCTION:
+ECPKPARAMETERS_free                     4153	1_1_0	EXIST::FUNCTION:EC
+ECPARAMETERS_free                       4154	1_1_0	EXIST::FUNCTION:EC
+ECPKPARAMETERS_new                      4155	1_1_0	EXIST::FUNCTION:EC
+ECPARAMETERS_new                        4156	1_1_0	EXIST::FUNCTION:EC
+OCSP_RESPID_set_by_name                 4157	1_1_0a	EXIST::FUNCTION:OCSP
+OCSP_RESPID_set_by_key                  4158	1_1_0a	EXIST::FUNCTION:OCSP
+OCSP_RESPID_match                       4159	1_1_0a	EXIST::FUNCTION:OCSP
+ASN1_ITEM_lookup                        4160	1_1_1	EXIST::FUNCTION:
+ASN1_ITEM_get                           4161	1_1_1	EXIST::FUNCTION:
+BIO_read_ex                             4162	1_1_1	EXIST::FUNCTION:
+BIO_set_callback_ex                     4163	1_1_1	EXIST::FUNCTION:
+BIO_get_callback_ex                     4164	1_1_1	EXIST::FUNCTION:
+BIO_meth_set_read_ex                    4165	1_1_1	EXIST::FUNCTION:
+BIO_meth_get_read_ex                    4166	1_1_1	EXIST::FUNCTION:
+BIO_write_ex                            4167	1_1_1	EXIST::FUNCTION:
+BIO_meth_get_write_ex                   4168	1_1_1	EXIST::FUNCTION:
+BIO_meth_set_write_ex                   4169	1_1_1	EXIST::FUNCTION:
+DSO_pathbyaddr                          4170	1_1_0c	EXIST::FUNCTION:
+DSO_dsobyaddr                           4171	1_1_0c	EXIST::FUNCTION:
+CT_POLICY_EVAL_CTX_get_time             4172	1_1_0d	EXIST::FUNCTION:CT
+CT_POLICY_EVAL_CTX_set_time             4173	1_1_0d	EXIST::FUNCTION:CT
+X509_VERIFY_PARAM_set_inh_flags         4174	1_1_0d	EXIST::FUNCTION:
+X509_VERIFY_PARAM_get_inh_flags         4175	1_1_0d	EXIST::FUNCTION:
+EVP_PKEY_CTX_md                         4176	1_1_1	EXIST::FUNCTION:
+RSA_pkey_ctx_ctrl                       4177	1_1_1	EXIST::FUNCTION:RSA
+UI_method_set_ex_data                   4178	1_1_1	EXIST::FUNCTION:
+UI_method_get_ex_data                   4179	1_1_1	EXIST::FUNCTION:
+UI_UTIL_wrap_read_pem_callback          4180	1_1_1	EXIST::FUNCTION:
+X509_VERIFY_PARAM_get_time              4181	1_1_0d	EXIST::FUNCTION:
+EVP_PKEY_get0_poly1305                  4182	1_1_1	EXIST::FUNCTION:POLY1305
+DH_check_params                         4183	1_1_0d	EXIST::FUNCTION:DH
+EVP_PKEY_get0_siphash                   4184	1_1_1	EXIST::FUNCTION:SIPHASH
+EVP_aria_256_ofb                        4185	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_256_cfb128                     4186	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_128_cfb1                       4187	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_128_ecb                        4188	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_128_cfb128                     4189	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_192_ecb                        4190	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_128_cbc                        4191	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_192_ofb                        4192	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_192_cbc                        4193	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_192_cfb1                       4194	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_128_cfb8                       4195	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_256_cfb1                       4196	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_192_cfb8                       4197	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_256_cfb8                       4198	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_256_cbc                        4199	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_128_ofb                        4200	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_192_cfb128                     4201	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_256_ecb                        4202	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_256_ctr                        4203	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_128_ctr                        4204	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_192_ctr                        4205	1_1_1	EXIST::FUNCTION:ARIA
+UI_null                                 4206	1_1_1	EXIST::FUNCTION:
+EC_KEY_get0_engine                      4207	1_1_1	EXIST::FUNCTION:EC
+INT32_it                                4208	1_1_0f	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+INT32_it                                4208	1_1_0f	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+UINT64_it                               4209	1_1_0f	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+UINT64_it                               4209	1_1_0f	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ZINT32_it                               4210	1_1_0f	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ZINT32_it                               4210	1_1_0f	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ZUINT64_it                              4211	1_1_0f	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ZUINT64_it                              4211	1_1_0f	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+INT64_it                                4212	1_1_0f	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+INT64_it                                4212	1_1_0f	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ZUINT32_it                              4213	1_1_0f	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ZUINT32_it                              4213	1_1_0f	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+UINT32_it                               4214	1_1_0f	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+UINT32_it                               4214	1_1_0f	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ZINT64_it                               4215	1_1_0f	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ZINT64_it                               4215	1_1_0f	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+CRYPTO_mem_leaks_cb                     4216	1_1_1	EXIST::FUNCTION:CRYPTO_MDEBUG
+BIO_lookup_ex                           4217	1_1_1	EXIST::FUNCTION:SOCK
+X509_CRL_print_ex                       4218	1_1_1	EXIST::FUNCTION:
+X509_SIG_INFO_get                       4219	1_1_1	EXIST::FUNCTION:
+X509_get_signature_info                 4220	1_1_1	EXIST::FUNCTION:
+X509_SIG_INFO_set                       4221	1_1_1	EXIST::FUNCTION:
+ESS_CERT_ID_V2_free                     4222	1_1_1	EXIST::FUNCTION:TS
+ESS_SIGNING_CERT_V2_new                 4223	1_1_1	EXIST::FUNCTION:TS
+d2i_ESS_SIGNING_CERT_V2                 4224	1_1_1	EXIST::FUNCTION:TS
+i2d_ESS_CERT_ID_V2                      4225	1_1_1	EXIST::FUNCTION:TS
+ESS_CERT_ID_V2_dup                      4226	1_1_1	EXIST::FUNCTION:TS
+TS_RESP_CTX_set_ess_cert_id_digest      4227	1_1_1	EXIST::FUNCTION:TS
+d2i_ESS_CERT_ID_V2                      4228	1_1_1	EXIST::FUNCTION:TS
+i2d_ESS_SIGNING_CERT_V2                 4229	1_1_1	EXIST::FUNCTION:TS
+TS_CONF_set_ess_cert_id_digest          4230	1_1_1	EXIST::FUNCTION:TS
+ESS_SIGNING_CERT_V2_free                4231	1_1_1	EXIST::FUNCTION:TS
+ESS_SIGNING_CERT_V2_dup                 4232	1_1_1	EXIST::FUNCTION:TS
+ESS_CERT_ID_V2_new                      4233	1_1_1	EXIST::FUNCTION:TS
+PEM_read_bio_ex                         4234	1_1_1	EXIST::FUNCTION:
+PEM_bytes_read_bio_secmem               4235	1_1_1	EXIST::FUNCTION:
+EVP_DigestSign                          4236	1_1_1	EXIST::FUNCTION:
+EVP_DigestVerify                        4237	1_1_1	EXIST::FUNCTION:
+UI_method_get_data_duplicator           4238	1_1_1	EXIST::FUNCTION:
+UI_method_set_data_duplicator           4239	1_1_1	EXIST::FUNCTION:
+UI_dup_user_data                        4240	1_1_1	EXIST::FUNCTION:
+UI_method_get_data_destructor           4241	1_1_1	EXIST::FUNCTION:
+ERR_load_strings_const                  4242	1_1_1	EXIST::FUNCTION:
+ASN1_TIME_to_tm                         4243	1_1_1	EXIST::FUNCTION:
+ASN1_TIME_set_string_X509               4244	1_1_1	EXIST::FUNCTION:
+OCSP_resp_get1_id                       4245	1_1_1	EXIST::FUNCTION:OCSP
+OSSL_STORE_register_loader              4246	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_LOADER_set_error             4247	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_get0_PKEY               4248	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_get_type                4249	1_1_1	EXIST::FUNCTION:
+ERR_load_OSSL_STORE_strings             4250	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_LOADER_free                  4251	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_get1_PKEY               4252	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_free                    4253	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_open_file                    4254	1_1_1	NOEXIST::FUNCTION:
+OSSL_STORE_LOADER_set_eof               4255	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_LOADER_new                   4256	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_get0_CERT               4257	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_LOADER_set_close             4258	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_new_PARAMS              4259	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_new_PKEY                4260	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_get1_PARAMS             4261	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_get1_CRL                4262	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_error                        4263	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_get1_CERT               4264	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_get0_PARAMS             4265	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_type_string             4266	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_get1_NAME               4267	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_LOADER_set_load              4268	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_LOADER_get0_scheme           4269	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_open                         4270	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_close                        4271	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_new_CERT                4272	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_get0_CRL                4273	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_load                         4274	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_get0_NAME               4275	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_unregister_loader            4276	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_new_CRL                 4277	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_new_NAME                4278	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_eof                          4279	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_LOADER_set_open              4280	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_LOADER_set_ctrl              4281	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_ctrl                         4282	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_get0_NAME_description   4283	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_set0_NAME_description   4284	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_INFO_get1_NAME_description   4285	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_do_all_loaders               4286	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_LOADER_get0_engine           4287	1_1_1	EXIST::FUNCTION:
+OPENSSL_fork_prepare                    4288	1_1_1	EXIST:UNIX:FUNCTION:
+OPENSSL_fork_parent                     4289	1_1_1	EXIST:UNIX:FUNCTION:
+OPENSSL_fork_child                      4290	1_1_1	EXIST:UNIX:FUNCTION:
+RAND_DRBG_instantiate                   4292	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_uninstantiate                 4293	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_set                           4295	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_set_callbacks                 4296	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_new                           4297	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_set_reseed_interval           4298	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_free                          4299	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_generate                      4300	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_reseed                        4301	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_set_ex_data                   4302	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_get_ex_data                   4303	1_1_1	EXIST::FUNCTION:
+EVP_sha3_224                            4304	1_1_1	EXIST::FUNCTION:
+EVP_sha3_256                            4305	1_1_1	EXIST::FUNCTION:
+EVP_sha3_384                            4306	1_1_1	EXIST::FUNCTION:
+EVP_sha3_512                            4307	1_1_1	EXIST::FUNCTION:
+EVP_shake128                            4308	1_1_1	EXIST::FUNCTION:
+EVP_shake256                            4309	1_1_1	EXIST::FUNCTION:
+SCRYPT_PARAMS_new                       4310	1_1_1	EXIST::FUNCTION:SCRYPT
+SCRYPT_PARAMS_free                      4311	1_1_1	EXIST::FUNCTION:SCRYPT
+i2d_SCRYPT_PARAMS                       4312	1_1_1	EXIST::FUNCTION:SCRYPT
+d2i_SCRYPT_PARAMS                       4313	1_1_1	EXIST::FUNCTION:SCRYPT
+SCRYPT_PARAMS_it                        4314	1_1_1	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:SCRYPT
+SCRYPT_PARAMS_it                        4314	1_1_1	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:SCRYPT
+CRYPTO_secure_clear_free                4315	1_1_0g	EXIST::FUNCTION:
+EVP_PKEY_meth_get0                      4316	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_meth_get_count                 4317	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_get0_public                   4319	1_1_1	EXIST::FUNCTION:
+RAND_priv_bytes                         4320	1_1_1	EXIST::FUNCTION:
+BN_priv_rand                            4321	1_1_1	EXIST::FUNCTION:
+BN_priv_rand_range                      4322	1_1_1	EXIST::FUNCTION:
+ASN1_TIME_normalize                     4323	1_1_1	EXIST::FUNCTION:
+ASN1_TIME_cmp_time_t                    4324	1_1_1	EXIST::FUNCTION:
+ASN1_TIME_compare                       4325	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_CTX_ctrl_uint64                4326	1_1_1	EXIST::FUNCTION:
+EVP_DigestFinalXOF                      4327	1_1_1	EXIST::FUNCTION:
+ERR_clear_last_mark                     4328	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_get0_private                  4329	1_1_1	EXIST::FUNCTION:
+EVP_aria_192_ccm                        4330	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_256_gcm                        4331	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_256_ccm                        4332	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_128_gcm                        4333	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_128_ccm                        4334	1_1_1	EXIST::FUNCTION:ARIA
+EVP_aria_192_gcm                        4335	1_1_1	EXIST::FUNCTION:ARIA
+UI_get_result_length                    4337	1_1_1	EXIST::FUNCTION:
+UI_set_result_ex                        4338	1_1_1	EXIST::FUNCTION:
+UI_get_result_string_length             4339	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_check                          4340	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_meth_set_check                 4341	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_meth_get_check                 4342	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_meth_remove                    4343	1_1_1	EXIST::FUNCTION:
+OPENSSL_sk_reserve                      4344	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_set1_engine                    4347	1_1_0g	EXIST::FUNCTION:ENGINE
+DH_new_by_nid                           4348	1_1_1	EXIST::FUNCTION:DH
+DH_get_nid                              4349	1_1_1	EXIST::FUNCTION:DH
+CRYPTO_get_alloc_counts                 4350	1_1_1	EXIST::FUNCTION:CRYPTO_MDEBUG
+OPENSSL_sk_new_reserve                  4351	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_asn1_set_check                 4352	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_asn1_set_siginf                4353	1_1_1	EXIST::FUNCTION:
+EVP_sm4_ctr                             4354	1_1_1	EXIST::FUNCTION:SM4
+EVP_sm4_cbc                             4355	1_1_1	EXIST::FUNCTION:SM4
+EVP_sm4_ofb                             4356	1_1_1	EXIST::FUNCTION:SM4
+EVP_sm4_ecb                             4357	1_1_1	EXIST::FUNCTION:SM4
+EVP_sm4_cfb128                          4358	1_1_1	EXIST::FUNCTION:SM4
+EVP_sm3                                 4359	1_1_1	EXIST::FUNCTION:SM3
+RSA_get0_multi_prime_factors            4360	1_1_1	EXIST::FUNCTION:RSA
+EVP_PKEY_public_check                   4361	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_param_check                    4362	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_meth_set_public_check          4363	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_meth_set_param_check           4364	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_meth_get_public_check          4365	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_meth_get_param_check           4366	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_asn1_set_public_check          4367	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_asn1_set_param_check           4368	1_1_1	EXIST::FUNCTION:
+DH_check_ex                             4369	1_1_1	EXIST::FUNCTION:DH
+DH_check_pub_key_ex                     4370	1_1_1	EXIST::FUNCTION:DH
+DH_check_params_ex                      4371	1_1_1	EXIST::FUNCTION:DH
+RSA_generate_multi_prime_key            4372	1_1_1	EXIST::FUNCTION:RSA
+RSA_get_multi_prime_extra_count         4373	1_1_1	EXIST::FUNCTION:RSA
+OCSP_resp_get0_signer                   4374	1_1_0h	EXIST::FUNCTION:OCSP
+RSA_get0_multi_prime_crt_params         4375	1_1_1	EXIST::FUNCTION:RSA
+RSA_set0_multi_prime_params             4376	1_1_1	EXIST::FUNCTION:RSA
+RSA_get_version                         4377	1_1_1	EXIST::FUNCTION:RSA
+RSA_meth_get_multi_prime_keygen         4378	1_1_1	EXIST::FUNCTION:RSA
+RSA_meth_set_multi_prime_keygen         4379	1_1_1	EXIST::FUNCTION:RSA
+RAND_DRBG_get0_master                   4380	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_set_reseed_time_interval      4381	1_1_1	EXIST::FUNCTION:
+PROFESSION_INFO_get0_addProfessionInfo  4382	1_1_1	EXIST::FUNCTION:
+ADMISSION_SYNTAX_free                   4383	1_1_1	EXIST::FUNCTION:
+d2i_ADMISSION_SYNTAX                    4384	1_1_1	EXIST::FUNCTION:
+NAMING_AUTHORITY_set0_authorityId       4385	1_1_1	EXIST::FUNCTION:
+NAMING_AUTHORITY_set0_authorityURL      4386	1_1_1	EXIST::FUNCTION:
+d2i_PROFESSION_INFO                     4387	1_1_1	EXIST::FUNCTION:
+NAMING_AUTHORITY_it                     4388	1_1_1	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+NAMING_AUTHORITY_it                     4388	1_1_1	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ADMISSION_SYNTAX_get0_contentsOfAdmissions 4389	1_1_1	EXIST::FUNCTION:
+PROFESSION_INFO_set0_professionItems    4390	1_1_1	EXIST::FUNCTION:
+NAMING_AUTHORITY_new                    4391	1_1_1	EXIST::FUNCTION:
+NAMING_AUTHORITY_get0_authorityURL      4392	1_1_1	EXIST::FUNCTION:
+ADMISSION_SYNTAX_get0_admissionAuthority 4393	1_1_1	EXIST::FUNCTION:
+PROFESSION_INFO_new                     4394	1_1_1	EXIST::FUNCTION:
+ADMISSIONS_new                          4395	1_1_1	EXIST::FUNCTION:
+ADMISSION_SYNTAX_set0_admissionAuthority 4396	1_1_1	EXIST::FUNCTION:
+PROFESSION_INFO_get0_professionOIDs     4397	1_1_1	EXIST::FUNCTION:
+PROFESSION_INFO_it                      4398	1_1_1	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+PROFESSION_INFO_it                      4398	1_1_1	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+i2d_PROFESSION_INFO                     4399	1_1_1	EXIST::FUNCTION:
+ADMISSIONS_set0_professionInfos         4400	1_1_1	EXIST::FUNCTION:
+PROFESSION_INFO_get0_namingAuthority    4401	1_1_1	EXIST::FUNCTION:
+PROFESSION_INFO_free                    4402	1_1_1	EXIST::FUNCTION:
+PROFESSION_INFO_set0_addProfessionInfo  4403	1_1_1	EXIST::FUNCTION:
+PROFESSION_INFO_set0_registrationNumber 4404	1_1_1	EXIST::FUNCTION:
+ADMISSION_SYNTAX_set0_contentsOfAdmissions 4405	1_1_1	EXIST::FUNCTION:
+NAMING_AUTHORITY_get0_authorityId       4406	1_1_1	EXIST::FUNCTION:
+ADMISSION_SYNTAX_it                     4407	1_1_1	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ADMISSION_SYNTAX_it                     4407	1_1_1	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+i2d_ADMISSION_SYNTAX                    4408	1_1_1	EXIST::FUNCTION:
+NAMING_AUTHORITY_get0_authorityText     4409	1_1_1	EXIST::FUNCTION:
+PROFESSION_INFO_set0_namingAuthority    4410	1_1_1	EXIST::FUNCTION:
+i2d_NAMING_AUTHORITY                    4411	1_1_1	EXIST::FUNCTION:
+NAMING_AUTHORITY_free                   4412	1_1_1	EXIST::FUNCTION:
+ADMISSIONS_set0_admissionAuthority      4413	1_1_1	EXIST::FUNCTION:
+ADMISSIONS_free                         4414	1_1_1	EXIST::FUNCTION:
+PROFESSION_INFO_get0_registrationNumber 4415	1_1_1	EXIST::FUNCTION:
+d2i_ADMISSIONS                          4416	1_1_1	EXIST::FUNCTION:
+i2d_ADMISSIONS                          4417	1_1_1	EXIST::FUNCTION:
+PROFESSION_INFO_get0_professionItems    4418	1_1_1	EXIST::FUNCTION:
+ADMISSIONS_get0_admissionAuthority      4419	1_1_1	EXIST::FUNCTION:
+PROFESSION_INFO_set0_professionOIDs     4420	1_1_1	EXIST::FUNCTION:
+d2i_NAMING_AUTHORITY                    4421	1_1_1	EXIST::FUNCTION:
+ADMISSIONS_it                           4422	1_1_1	EXIST:!EXPORT_VAR_AS_FUNCTION:VARIABLE:
+ADMISSIONS_it                           4422	1_1_1	EXIST:EXPORT_VAR_AS_FUNCTION:FUNCTION:
+ADMISSIONS_get0_namingAuthority         4423	1_1_1	EXIST::FUNCTION:
+NAMING_AUTHORITY_set0_authorityText     4424	1_1_1	EXIST::FUNCTION:
+ADMISSIONS_set0_namingAuthority         4425	1_1_1	EXIST::FUNCTION:
+ADMISSIONS_get0_professionInfos         4426	1_1_1	EXIST::FUNCTION:
+ADMISSION_SYNTAX_new                    4427	1_1_1	EXIST::FUNCTION:
+EVP_sha512_256                          4428	1_1_1	EXIST::FUNCTION:
+EVP_sha512_224                          4429	1_1_1	EXIST::FUNCTION:
+OCSP_basic_sign_ctx                     4430	1_1_1	EXIST::FUNCTION:OCSP
+RAND_DRBG_bytes                         4431	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_secure_new                    4432	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_vctrl                        4433	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_by_alias              4434	1_1_1	EXIST::FUNCTION:
+BIO_bind                                4435	1_1_1	EXIST::FUNCTION:SOCK
+OSSL_STORE_LOADER_set_expect            4436	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_expect                       4437	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_by_key_fingerprint    4438	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_get0_serial           4439	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_by_name               4440	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_supports_search              4441	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_find                         4442	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_get_type              4443	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_get0_bytes            4444	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_get0_string           4445	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_by_issuer_serial      4446	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_get0_name             4447	1_1_1	EXIST::FUNCTION:
+X509_get0_authority_key_id              4448	1_1_0h	EXIST::FUNCTION:
+OSSL_STORE_LOADER_set_find              4449	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_free                  4450	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_get0_digest           4451	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_set_reseed_defaults           4452	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_new_raw_private_key            4453	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_new_raw_public_key             4454	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_new_CMAC_key                   4455	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_asn1_set_set_priv_key          4456	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_asn1_set_set_pub_key           4457	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_set_defaults                  4458	1_1_1	EXIST::FUNCTION:
+conf_ssl_name_find                      4469	1_1_0i	EXIST::FUNCTION:
+conf_ssl_get_cmd                        4470	1_1_0i	EXIST::FUNCTION:
+conf_ssl_get                            4471	1_1_0i	EXIST::FUNCTION:
+X509_VERIFY_PARAM_get_hostflags         4472	1_1_0i	EXIST::FUNCTION:
+DH_get0_p                               4473	1_1_1	EXIST::FUNCTION:DH
+DH_get0_q                               4474	1_1_1	EXIST::FUNCTION:DH
+DH_get0_g                               4475	1_1_1	EXIST::FUNCTION:DH
+DH_get0_priv_key                        4476	1_1_1	EXIST::FUNCTION:DH
+DH_get0_pub_key                         4477	1_1_1	EXIST::FUNCTION:DH
+DSA_get0_priv_key                       4478	1_1_1	EXIST::FUNCTION:DSA
+DSA_get0_pub_key                        4479	1_1_1	EXIST::FUNCTION:DSA
+DSA_get0_q                              4480	1_1_1	EXIST::FUNCTION:DSA
+DSA_get0_p                              4481	1_1_1	EXIST::FUNCTION:DSA
+DSA_get0_g                              4482	1_1_1	EXIST::FUNCTION:DSA
+RSA_get0_dmp1                           4483	1_1_1	EXIST::FUNCTION:RSA
+RSA_get0_d                              4484	1_1_1	EXIST::FUNCTION:RSA
+RSA_get0_n                              4485	1_1_1	EXIST::FUNCTION:RSA
+RSA_get0_dmq1                           4486	1_1_1	EXIST::FUNCTION:RSA
+RSA_get0_e                              4487	1_1_1	EXIST::FUNCTION:RSA
+RSA_get0_q                              4488	1_1_1	EXIST::FUNCTION:RSA
+RSA_get0_p                              4489	1_1_1	EXIST::FUNCTION:RSA
+RSA_get0_iqmp                           4490	1_1_1	EXIST::FUNCTION:RSA
+ECDSA_SIG_get0_r                        4491	1_1_1	EXIST::FUNCTION:EC
+ECDSA_SIG_get0_s                        4492	1_1_1	EXIST::FUNCTION:EC
+X509_LOOKUP_meth_get_get_by_fingerprint 4493	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_new                    4494	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_get_init               4495	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_get_get_by_alias       4496	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_set_new_item           4497	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_set_shutdown           4498	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_get_new_item           4499	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_set_ctrl               4500	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_set_get_by_issuer_serial 4501	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_get_store                   4502	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_get_ctrl               4503	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_set_get_by_alias       4504	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_get_get_by_subject     4505	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_get_free               4506	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_set_get_by_subject     4507	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_set_free               4508	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_get_shutdown           4509	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_set_method_data             4510	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_get_method_data             4511	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_set_get_by_fingerprint 4512	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_free                   4513	1_1_0i	EXIST::FUNCTION:
+X509_OBJECT_set1_X509                   4514	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_get_get_by_issuer_serial 4515	1_1_0i	EXIST::FUNCTION:
+X509_LOOKUP_meth_set_init               4516	1_1_0i	EXIST::FUNCTION:
+X509_OBJECT_set1_X509_CRL               4517	1_1_0i	EXIST::FUNCTION:
+EVP_PKEY_get_raw_public_key             4518	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_get_raw_private_key            4519	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_asn1_set_get_priv_key          4520	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_asn1_set_get_pub_key           4521	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_set_alias_type                 4522	1_1_1	EXIST::FUNCTION:
+RAND_keep_random_devices_open           4523	1_1_1	EXIST::FUNCTION:
+EC_POINT_set_compressed_coordinates     4524	1_1_1	EXIST::FUNCTION:EC
+EC_POINT_set_affine_coordinates         4525	1_1_1	EXIST::FUNCTION:EC
+EC_POINT_get_affine_coordinates         4526	1_1_1	EXIST::FUNCTION:EC
+EC_GROUP_set_curve                      4527	1_1_1	EXIST::FUNCTION:EC
+EC_GROUP_get_curve                      4528	1_1_1	EXIST::FUNCTION:EC
+OCSP_resp_get0_tbs_sigalg               4529	1_1_0j	EXIST::FUNCTION:OCSP
+OCSP_resp_get0_respdata                 4530	1_1_0j	EXIST::FUNCTION:OCSP
+EVP_MD_CTX_set_pkey_ctx                 4531	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_meth_set_digest_custom         4532	1_1_1	EXIST::FUNCTION:
+EVP_PKEY_meth_get_digest_custom         4533	1_1_1	EXIST::FUNCTION:
+OPENSSL_INIT_set_config_filename        4534	1_1_1b	EXIST::FUNCTION:STDIO
+OPENSSL_INIT_set_config_file_flags      4535	1_1_1b	EXIST::FUNCTION:STDIO
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/libssl.num b/trunk/3rdparty/openssl-1.1-fit/util/libssl.num
new file mode 100644
index 000000000..297522c36
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/libssl.num
@@ -0,0 +1,500 @@
+SSL_get_selected_srtp_profile           1	1_1_0	EXIST::FUNCTION:SRTP
+SSL_set_read_ahead                      2	1_1_0	EXIST::FUNCTION:
+SSL_set_accept_state                    3	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_cipher_list                 4	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_srp_client_pwd_callback     5	1_1_0	EXIST::FUNCTION:SRP
+SSL_copy_session_id                     6	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_srp_password                7	1_1_0	EXIST::FUNCTION:SRP
+SSL_shutdown                            8	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_msg_callback                9	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_get0_ticket                 11	1_1_0	EXIST::FUNCTION:
+SSL_get1_supported_ciphers              12	1_1_0	EXIST::FUNCTION:
+SSL_state_string_long                   13	1_1_0	EXIST::FUNCTION:
+SSL_CTX_get0_certificate                14	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_set_ex_data                 15	1_1_0	EXIST::FUNCTION:
+SSL_get_verify_depth                    16	1_1_0	EXIST::FUNCTION:
+SSL_get0_dane                           17	1_1_0	EXIST::FUNCTION:
+SSL_CTX_sess_get_get_cb                 18	1_1_0	EXIST::FUNCTION:
+SSL_CTX_get_default_passwd_cb_userdata  19	1_1_0	EXIST::FUNCTION:
+SSL_set_tmp_dh_callback                 20	1_1_0	EXIST::FUNCTION:DH
+SSL_CTX_get_verify_depth                21	1_1_0	EXIST::FUNCTION:
+SSL_CTX_use_RSAPrivateKey_file          22	1_1_0	EXIST::FUNCTION:RSA
+SSL_use_PrivateKey_file                 23	1_1_0	EXIST::FUNCTION:
+SSL_set_generate_session_id             24	1_1_0	EXIST::FUNCTION:
+SSL_get_ex_data_X509_STORE_CTX_idx      25	1_1_0	EXIST::FUNCTION:
+SSL_get_quiet_shutdown                  26	1_1_0	EXIST::FUNCTION:
+SSL_dane_enable                         27	1_1_0	EXIST::FUNCTION:
+SSL_COMP_add_compression_method         28	1_1_0	EXIST::FUNCTION:
+SSL_CTX_use_RSAPrivateKey               29	1_1_0	EXIST::FUNCTION:RSA
+SSL_CTX_sess_get_new_cb                 30	1_1_0	EXIST::FUNCTION:
+d2i_SSL_SESSION                         31	1_1_0	EXIST::FUNCTION:
+SSL_use_PrivateKey_ASN1                 32	1_1_0	EXIST::FUNCTION:
+PEM_write_SSL_SESSION                   33	1_1_0	EXIST::FUNCTION:STDIO
+SSL_CTX_set_session_id_context          34	1_1_0	EXIST::FUNCTION:
+SSL_CIPHER_get_cipher_nid               35	1_1_0	EXIST::FUNCTION:
+SSL_get_srp_g                           36	1_1_0	EXIST::FUNCTION:SRP
+SSL_want                                37	1_1_0	EXIST::FUNCTION:
+SSL_get_cipher_list                     38	1_1_0	EXIST::FUNCTION:
+SSL_get_verify_result                   39	1_1_0	EXIST::FUNCTION:
+SSL_renegotiate                         40	1_1_0	EXIST::FUNCTION:
+SSL_get_privatekey                      41	1_1_0	EXIST::FUNCTION:
+SSL_peek                                42	1_1_0	EXIST::FUNCTION:
+SRP_Calc_A_param                        43	1_1_0	EXIST::FUNCTION:SRP
+SSL_SESSION_get_ticket_lifetime_hint    44	1_1_0	EXIST::FUNCTION:
+SSL_SRP_CTX_free                        45	1_1_0	EXIST::FUNCTION:SRP
+SSL_CTX_set_client_CA_list              46	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_next_proto_select_cb        47	1_1_0	EXIST::FUNCTION:NEXTPROTONEG
+BIO_ssl_copy_session_id                 48	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_security_callback           49	1_1_0	EXIST::FUNCTION:
+SSL_CONF_cmd_value_type                 50	1_1_0	EXIST::FUNCTION:
+SSL_CTX_remove_session                  51	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_new                         52	1_1_0	EXIST::FUNCTION:
+TLSv1_2_server_method                   53	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_2_METHOD
+BIO_new_buffer_ssl_connect              54	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set0_security_ex_data           55	1_1_0	EXIST::FUNCTION:
+SSL_alert_desc_string                   56	1_1_0	EXIST::FUNCTION:
+SSL_get0_dane_authority                 57	1_1_0	EXIST::FUNCTION:
+SSL_set_purpose                         58	1_1_0	EXIST::FUNCTION:
+SSL_CTX_use_PrivateKey_file             59	1_1_0	EXIST::FUNCTION:
+SSL_get_rfd                             60	1_1_0	EXIST::FUNCTION:
+DTLSv1_listen                           61	1_1_0	EXIST::FUNCTION:SOCK
+SSL_set_ssl_method                      62	1_1_0	EXIST::FUNCTION:
+SSL_get0_security_ex_data               63	1_1_0	EXIST::FUNCTION:
+SSLv3_client_method                     64	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,SSL3_METHOD
+SSL_set_security_level                  65	1_1_0	EXIST::FUNCTION:
+DTLSv1_2_method                         66	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_2_METHOD
+SSL_get_fd                              67	1_1_0	EXIST::FUNCTION:
+SSL_get1_session                        68	1_1_0	EXIST::FUNCTION:
+SSL_use_RSAPrivateKey                   69	1_1_0	EXIST::FUNCTION:RSA
+SSL_CTX_set_srp_cb_arg                  70	1_1_0	EXIST::FUNCTION:SRP
+SSL_CTX_add_session                     71	1_1_0	EXIST::FUNCTION:
+SSL_get_srp_N                           72	1_1_0	EXIST::FUNCTION:SRP
+SSL_has_matching_session_id             73	1_1_0	EXIST::FUNCTION:
+PEM_read_SSL_SESSION                    74	1_1_0	EXIST::FUNCTION:STDIO
+SSL_get_shared_ciphers                  75	1_1_0	EXIST::FUNCTION:
+SSL_add1_host                           76	1_1_0	EXIST::FUNCTION:
+SSL_CONF_cmd_argv                       77	1_1_0	EXIST::FUNCTION:
+SSL_version                             78	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_print                       79	1_1_0	EXIST::FUNCTION:
+SSL_get_client_ciphers                  80	1_1_0	EXIST::FUNCTION:
+SSL_get_srtp_profiles                   81	1_1_0	EXIST::FUNCTION:SRTP
+SSL_use_certificate_ASN1                82	1_1_0	EXIST::FUNCTION:
+SSL_get_peer_certificate                83	1_1_0	EXIST::FUNCTION:
+DTLSv1_2_server_method                  84	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_2_METHOD
+SSL_set_cert_cb                         85	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_cookie_verify_cb            86	1_1_0	EXIST::FUNCTION:
+SSL_get_shared_sigalgs                  87	1_1_0	EXIST::FUNCTION:
+SSL_config                              88	1_1_0	EXIST::FUNCTION:
+TLSv1_1_client_method                   89	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_1_METHOD
+SSL_CIPHER_standard_name                90	1_1_0	EXIST::FUNCTION:
+SSL_CTX_get_verify_mode                 91	1_1_0	EXIST::FUNCTION:
+SSL_get_all_async_fds                   92	1_1_0	EXIST::FUNCTION:
+SSL_CTX_check_private_key               93	1_1_0	EXIST::FUNCTION:
+SSL_set_wfd                             94	1_1_0	EXIST::FUNCTION:SOCK
+SSL_get_client_CA_list                  95	1_1_0	EXIST::FUNCTION:
+SSL_CONF_CTX_set_flags                  96	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_srp_username_callback       97	1_1_0	EXIST::FUNCTION:SRP
+SSL_connect                             98	1_1_0	EXIST::FUNCTION:
+SSL_get_psk_identity                    99	1_1_0	EXIST::FUNCTION:PSK
+SSL_CTX_use_certificate_file            100	1_1_0	EXIST::FUNCTION:
+SSL_set_session_ticket_ext              101	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_psk_server_callback         102	1_1_0	EXIST::FUNCTION:PSK
+SSL_get_sigalgs                         103	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_next_protos_advertised_cb   104	1_1_0	EXIST::FUNCTION:NEXTPROTONEG
+SSL_CTX_set_trust                       105	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_verify                      106	1_1_0	EXIST::FUNCTION:
+SSL_set_rfd                             107	1_1_0	EXIST::FUNCTION:SOCK
+SSL_SESSION_set_timeout                 108	1_1_0	EXIST::FUNCTION:
+SSL_set_psk_client_callback             109	1_1_0	EXIST::FUNCTION:PSK
+SSL_get_client_random                   110	1_1_0	EXIST::FUNCTION:
+TLS_method                              111	1_1_0	EXIST::FUNCTION:
+SSL_CONF_CTX_clear_flags                112	1_1_0	EXIST::FUNCTION:
+TLSv1_client_method                     113	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_METHOD
+SSL_CIPHER_get_bits                     114	1_1_0	EXIST::FUNCTION:
+SSL_test_functions                      115	1_1_0	EXIST::FUNCTION:UNIT_TEST
+SSL_get_SSL_CTX                         116	1_1_0	EXIST::FUNCTION:
+SSL_get_session                         117	1_1_0	EXIST::FUNCTION:
+SSL_CTX_callback_ctrl                   118	1_1_0	EXIST::FUNCTION:
+SSL_get_finished                        119	1_1_0	EXIST::FUNCTION:
+SSL_add_dir_cert_subjects_to_stack      120	1_1_0	EXIST::FUNCTION:
+SSL_get_state                           121	1_1_0	EXIST::FUNCTION:
+SSL_CONF_CTX_finish                     122	1_1_0	EXIST::FUNCTION:
+SSL_CTX_add_server_custom_ext           123	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_get_ex_data                 124	1_1_0	EXIST::FUNCTION:
+SSL_get_srp_username                    125	1_1_0	EXIST::FUNCTION:SRP
+SSL_CTX_set_purpose                     126	1_1_0	EXIST::FUNCTION:
+SSL_clear                               127	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_cert_store                  128	1_1_0	EXIST::FUNCTION:
+TLSv1_2_method                          129	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_2_METHOD
+SSL_session_reused                      130	1_1_0	EXIST::FUNCTION:
+SSL_free                                131	1_1_0	EXIST::FUNCTION:
+BIO_ssl_shutdown                        132	1_1_0	EXIST::FUNCTION:
+SSL_CTX_get_client_CA_list              133	1_1_0	EXIST::FUNCTION:
+SSL_CTX_sessions                        134	1_1_0	EXIST::FUNCTION:
+SSL_get_options                         135	1_1_0	EXIST::FUNCTION:
+SSL_set_verify_depth                    136	1_1_0	EXIST::FUNCTION:
+SSL_get_error                           137	1_1_0	EXIST::FUNCTION:
+SSL_get_servername                      138	1_1_0	EXIST::FUNCTION:
+SSL_get_version                         139	1_1_0	EXIST::FUNCTION:
+SSL_state_string                        140	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_get_timeout                 141	1_1_0	EXIST::FUNCTION:
+SSL_CTX_sess_get_remove_cb              142	1_1_0	EXIST::FUNCTION:
+SSL_get_current_cipher                  143	1_1_0	EXIST::FUNCTION:
+SSL_up_ref                              144	1_1_0	EXIST::FUNCTION:
+SSL_export_keying_material              145	1_1_0	EXIST::FUNCTION:
+SSL_callback_ctrl                       146	1_1_0	EXIST::FUNCTION:
+SSL_set_security_callback               147	1_1_0	EXIST::FUNCTION:
+SSL_SRP_CTX_init                        148	1_1_0	EXIST::FUNCTION:SRP
+ERR_load_SSL_strings                    149	1_1_0	EXIST::FUNCTION:
+SSL_CTX_SRP_CTX_init                    150	1_1_0	EXIST::FUNCTION:SRP
+SSL_SESSION_set_time                    151	1_1_0	EXIST::FUNCTION:
+i2d_SSL_SESSION                         152	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_get_master_key              153	1_1_0	EXIST::FUNCTION:
+SSL_COMP_get_compression_methods        154	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_alpn_select_cb              155	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_tmp_dh_callback             156	1_1_0	EXIST::FUNCTION:DH
+SSL_CTX_get_default_passwd_cb           157	1_1_0	EXIST::FUNCTION:
+TLSv1_server_method                     158	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_METHOD
+DTLS_server_method                      159	1_1_0	EXIST::FUNCTION:
+SSL_set0_rbio                           160	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_options                     161	1_1_0	EXIST::FUNCTION:
+SSL_set_msg_callback                    162	1_1_0	EXIST::FUNCTION:
+SSL_CONF_CTX_free                       163	1_1_0	EXIST::FUNCTION:
+SSL_CTX_get_ssl_method                  164	1_1_0	EXIST::FUNCTION:
+SSL_get_server_random                   165	1_1_0	EXIST::FUNCTION:
+SSL_set_shutdown                        166	1_1_0	EXIST::FUNCTION:
+SSL_CTX_add_client_CA                   167	1_1_0	EXIST::FUNCTION:
+TLSv1_1_server_method                   168	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_1_METHOD
+PEM_write_bio_SSL_SESSION               169	1_1_0	EXIST::FUNCTION:
+SSL_write                               170	1_1_0	EXIST::FUNCTION:
+SSL_set1_host                           171	1_1_0	EXIST::FUNCTION:
+SSL_use_RSAPrivateKey_file              172	1_1_0	EXIST::FUNCTION:RSA
+SSL_CTX_get_info_callback               173	1_1_0	EXIST::FUNCTION:
+SSL_get0_peername                       174	1_1_0	EXIST::FUNCTION:
+SSL_set_srp_server_param                175	1_1_0	EXIST::FUNCTION:SRP
+TLS_server_method                       176	1_1_0	EXIST::FUNCTION:
+SSL_get_psk_identity_hint               177	1_1_0	EXIST::FUNCTION:PSK
+SSL_set_session                         178	1_1_0	EXIST::FUNCTION:
+SSL_get0_param                          179	1_1_0	EXIST::FUNCTION:
+SSL_set_default_passwd_cb               180	1_1_0	EXIST::FUNCTION:
+SSL_get_read_ahead                      181	1_1_0	EXIST::FUNCTION:
+SSL_dup_CA_list                         182	1_1_0	EXIST::FUNCTION:
+SSL_get_verify_callback                 183	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_default_passwd_cb           184	1_1_0	EXIST::FUNCTION:
+SSL_get_servername_type                 185	1_1_0	EXIST::FUNCTION:
+TLSv1_2_client_method                   186	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_2_METHOD
+SSL_add_client_CA                       187	1_1_0	EXIST::FUNCTION:
+SSL_CTX_get0_security_ex_data           188	1_1_0	EXIST::FUNCTION:
+SSL_get_ex_data                         189	1_1_0	EXIST::FUNCTION:
+SSL_CTX_flush_sessions                  190	1_1_0	EXIST::FUNCTION:
+SSL_use_PrivateKey                      191	1_1_0	EXIST::FUNCTION:
+DTLSv1_client_method                    192	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_METHOD
+SSL_CTX_dane_mtype_set                  193	1_1_0	EXIST::FUNCTION:
+SSL_get_wfd                             194	1_1_0	EXIST::FUNCTION:
+SSL_get_ssl_method                      195	1_1_0	EXIST::FUNCTION:
+SSL_set_verify_result                   196	1_1_0	EXIST::FUNCTION:
+SSL_use_RSAPrivateKey_ASN1              197	1_1_0	EXIST::FUNCTION:RSA
+SSL_CIPHER_get_name                     198	1_1_0	EXIST::FUNCTION:
+OPENSSL_init_ssl                        199	1_1_0	EXIST::FUNCTION:
+SSL_dup                                 200	1_1_0	EXIST::FUNCTION:
+SSL_CTX_use_serverinfo                  201	1_1_0	EXIST::FUNCTION:
+SSL_CTX_use_serverinfo_file             202	1_1_0	EXIST::FUNCTION:
+SSL_set_options                         203	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_default_verify_dir          204	1_1_0	EXIST::FUNCTION:
+SSL_do_handshake                        205	1_1_0	EXIST::FUNCTION:
+SSL_CTX_get_ex_data                     206	1_1_0	EXIST::FUNCTION:
+SSL_is_init_finished                    207	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_default_verify_file         208	1_1_0	EXIST::FUNCTION:
+SSLv3_method                            209	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,SSL3_METHOD
+SSL_CTX_set_cookie_generate_cb          210	1_1_0	EXIST::FUNCTION:
+SSL_certs_clear                         211	1_1_0	EXIST::FUNCTION:
+SSL_set_connect_state                   212	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_ex_data                     213	1_1_0	EXIST::FUNCTION:
+SSL_rstate_string                       214	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_get0_peer                   215	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_get_compress_id             216	1_1_0	EXIST::FUNCTION:
+SSL_get_peer_cert_chain                 217	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_cert_cb                     218	1_1_0	EXIST::FUNCTION:
+PEM_read_bio_SSL_SESSION                219	1_1_0	EXIST::FUNCTION:
+SSL_set_info_callback                   220	1_1_0	EXIST::FUNCTION:
+SSL_CTX_sess_set_new_cb                 221	1_1_0	EXIST::FUNCTION:
+SSL_CTX_get_security_level              222	1_1_0	EXIST::FUNCTION:
+SSL_CTX_ctrl                            223	1_1_0	EXIST::FUNCTION:
+SSL_set_alpn_protos                     224	1_1_0	EXIST::FUNCTION:
+SSL_set_ex_data                         225	1_1_0	EXIST::FUNCTION:
+SSL_rstate_string_long                  226	1_1_0	EXIST::FUNCTION:
+SSL_ctrl                                227	1_1_0	EXIST::FUNCTION:
+SSL_get_current_compression             228	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_has_ticket                  229	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_cert_verify_callback        230	1_1_0	EXIST::FUNCTION:
+SSL_set_session_secret_cb               231	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_client_cert_engine          232	1_1_0	EXIST::FUNCTION:ENGINE
+SSL_CTX_get0_param                      233	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set1_param                      234	1_1_0	EXIST::FUNCTION:
+SSL_get_certificate                     235	1_1_0	EXIST::FUNCTION:
+DTLSv1_server_method                    236	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_METHOD
+SSL_set_fd                              237	1_1_0	EXIST::FUNCTION:SOCK
+SSL_use_certificate                     238	1_1_0	EXIST::FUNCTION:
+DTLSv1_method                           239	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_METHOD
+SSL_set0_wbio                           240	1_1_0	EXIST::FUNCTION:
+SSL_read                                241	1_1_0	EXIST::FUNCTION:
+SSL_CTX_get_options                     242	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_ssl_version                 243	1_1_0	EXIST::FUNCTION:
+SSL_set_SSL_CTX                         244	1_1_0	EXIST::FUNCTION:
+SSL_renegotiate_abbreviated             245	1_1_0	EXIST::FUNCTION:
+SSL_get_verify_mode                     246	1_1_0	EXIST::FUNCTION:
+SSL_CIPHER_get_id                       247	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_print_keylog                248	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_psk_client_callback         249	1_1_0	EXIST::FUNCTION:PSK
+SSL_SESSION_get_time                    250	1_1_0	EXIST::FUNCTION:
+SSL_set_debug                           251	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0
+SSL_get_security_level                  252	1_1_0	EXIST::FUNCTION:
+SSL_CIPHER_description                  253	1_1_0	EXIST::FUNCTION:
+SSL_set_default_passwd_cb_userdata      254	1_1_0	EXIST::FUNCTION:
+SSL_get_srp_userinfo                    255	1_1_0	EXIST::FUNCTION:SRP
+SSL_extension_supported                 256	1_1_0	EXIST::FUNCTION:
+SSL_dane_tlsa_add                       257	1_1_0	EXIST::FUNCTION:
+SSL_srp_server_param_with_username      258	1_1_0	EXIST::FUNCTION:SRP
+SSL_CIPHER_get_version                  259	1_1_0	EXIST::FUNCTION:
+SSL_get0_verified_chain                 260	1_1_0	EXIST::FUNCTION:
+SSL_CIPHER_find                         261	1_1_0	EXIST::FUNCTION:
+SSL_get_rbio                            262	1_1_0	EXIST::FUNCTION:
+SSL_CONF_CTX_set_ssl                    263	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_verify_depth                264	1_1_0	EXIST::FUNCTION:
+SSL_get_ciphers                         265	1_1_0	EXIST::FUNCTION:
+SSL_CTX_config                          266	1_1_0	EXIST::FUNCTION:
+SSL_CONF_CTX_set_ssl_ctx                267	1_1_0	EXIST::FUNCTION:
+SSL_CONF_cmd                            268	1_1_0	EXIST::FUNCTION:
+SSL_add_ssl_module                      269	1_1_0	EXIST::FUNCTION:
+SSL_CTX_get_verify_callback             270	1_1_0	EXIST::FUNCTION:
+SSL_set1_param                          271	1_1_0	EXIST::FUNCTION:
+SSL_use_certificate_file                272	1_1_0	EXIST::FUNCTION:
+SSL_get_changed_async_fds               273	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_client_cert_cb              274	1_1_0	EXIST::FUNCTION:
+DTLS_client_method                      275	1_1_0	EXIST::FUNCTION:
+SSL_set_trust                           276	1_1_0	EXIST::FUNCTION:
+SSL_CTX_get_security_callback           277	1_1_0	EXIST::FUNCTION:
+SSL_CTX_clear_options                   278	1_1_0	EXIST::FUNCTION:
+SSL_check_chain                         279	1_1_0	EXIST::FUNCTION:
+SSL_CTX_sess_set_remove_cb              280	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_info_callback               281	1_1_0	EXIST::FUNCTION:
+SSL_pending                             282	1_1_0	EXIST::FUNCTION:
+SSL_set_bio                             283	1_1_0	EXIST::FUNCTION:
+BIO_new_ssl_connect                     284	1_1_0	EXIST::FUNCTION:
+SSL_waiting_for_async                   285	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_srp_strength                286	1_1_0	EXIST::FUNCTION:SRP
+SSL_CTX_get_quiet_shutdown              287	1_1_0	EXIST::FUNCTION:
+SSL_CTX_use_certificate_chain_file      288	1_1_0	EXIST::FUNCTION:
+SSL_CTX_dane_enable                     289	1_1_0	EXIST::FUNCTION:
+SSL_CONF_CTX_new                        290	1_1_0	EXIST::FUNCTION:
+SSL_get0_alpn_selected                  291	1_1_0	EXIST::FUNCTION:
+SSL_get0_next_proto_negotiated          292	1_1_0	EXIST::FUNCTION:NEXTPROTONEG
+SSL_set0_security_ex_data               293	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_tlsext_use_srtp             294	1_1_0	EXIST::FUNCTION:SRTP
+SSL_COMP_set0_compression_methods       295	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_not_resumable_session_callback 296	1_1_0	EXIST::FUNCTION:
+SSL_accept                              297	1_1_0	EXIST::FUNCTION:
+SSL_use_psk_identity_hint               298	1_1_0	EXIST::FUNCTION:PSK
+SSL_trace                               299	1_1_0	EXIST::FUNCTION:SSL_TRACE
+DTLS_method                             300	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_srp_verify_param_callback   301	1_1_0	EXIST::FUNCTION:SRP
+SSL_CTX_set_timeout                     302	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_security_level              303	1_1_0	EXIST::FUNCTION:
+TLS_client_method                       304	1_1_0	EXIST::FUNCTION:
+SSL_set_quiet_shutdown                  305	1_1_0	EXIST::FUNCTION:
+SSL_CTX_up_ref                          306	1_1_0	EXIST::FUNCTION:
+SSL_check_private_key                   307	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_quiet_shutdown              308	1_1_0	EXIST::FUNCTION:
+SSL_select_next_proto                   309	1_1_0	EXIST::FUNCTION:
+SSL_load_client_CA_file                 310	1_1_0	EXIST::FUNCTION:
+SSL_set_srp_server_param_pw             311	1_1_0	EXIST::FUNCTION:SRP
+SSL_renegotiate_pending                 312	1_1_0	EXIST::FUNCTION:
+SSL_CTX_new                             313	1_1_0	EXIST::FUNCTION:
+SSL_set_session_ticket_ext_cb           314	1_1_0	EXIST::FUNCTION:
+SSL_CTX_get_timeout                     315	1_1_0	EXIST::FUNCTION:
+SSL_use_certificate_chain_file          316	1_1_0	EXIST::FUNCTION:
+SSL_set_not_resumable_session_callback  317	1_1_0	EXIST::FUNCTION:
+SSL_CTX_SRP_CTX_free                    318	1_1_0	EXIST::FUNCTION:SRP
+SSL_get_current_expansion               319	1_1_0	EXIST::FUNCTION:
+SSL_clear_options                       320	1_1_0	EXIST::FUNCTION:
+SSL_CTX_use_PrivateKey                  321	1_1_0	EXIST::FUNCTION:
+SSL_get_info_callback                   322	1_1_0	EXIST::FUNCTION:
+SSL_CTX_use_psk_identity_hint           323	1_1_0	EXIST::FUNCTION:PSK
+SSL_CTX_use_RSAPrivateKey_ASN1          324	1_1_0	EXIST::FUNCTION:RSA
+SSL_CTX_use_PrivateKey_ASN1             325	1_1_0	EXIST::FUNCTION:
+SSL_CTX_get0_privatekey                 326	1_1_0	EXIST::FUNCTION:
+BIO_f_ssl                               327	1_1_0	EXIST::FUNCTION:
+SSLv3_server_method                     328	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,SSL3_METHOD
+SSL_SESSION_free                        329	1_1_0	EXIST::FUNCTION:
+SSL_get_shutdown                        330	1_1_0	EXIST::FUNCTION:
+SSL_get_peer_finished                   331	1_1_0	EXIST::FUNCTION:
+SSL_set_tlsext_use_srtp                 332	1_1_0	EXIST::FUNCTION:SRTP
+TLSv1_method                            333	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_METHOD
+SSL_set_psk_server_callback             334	1_1_0	EXIST::FUNCTION:PSK
+SSL_CTX_set_alpn_protos                 335	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_default_verify_paths        336	1_1_0	EXIST::FUNCTION:
+SSL_CTX_sess_set_get_cb                 337	1_1_0	EXIST::FUNCTION:
+SSL_add_file_cert_subjects_to_stack     338	1_1_0	EXIST::FUNCTION:
+SSL_get_default_passwd_cb_userdata      339	1_1_0	EXIST::FUNCTION:
+SSL_get_security_callback               340	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_srp_username                341	1_1_0	EXIST::FUNCTION:SRP
+SSL_COMP_get_name                       342	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_default_passwd_cb_userdata  343	1_1_0	EXIST::FUNCTION:
+SSL_set_verify                          344	1_1_0	EXIST::FUNCTION:
+SSL_in_before                           345	1_1_0	EXIST::FUNCTION:
+SSL_CIPHER_get_digest_nid               346	1_1_0	EXIST::FUNCTION:
+SSL_CTX_add_client_custom_ext           347	1_1_0	EXIST::FUNCTION:
+SSL_CTX_use_certificate                 348	1_1_0	EXIST::FUNCTION:
+SSL_set_cipher_list                     349	1_1_0	EXIST::FUNCTION:
+SSL_get_wbio                            350	1_1_0	EXIST::FUNCTION:
+SSL_set_hostflags                       351	1_1_0	EXIST::FUNCTION:
+SSL_alert_desc_string_long              352	1_1_0	EXIST::FUNCTION:
+SSL_get_default_timeout                 353	1_1_0	EXIST::FUNCTION:
+SSL_set_session_id_context              354	1_1_0	EXIST::FUNCTION:
+SSL_new                                 355	1_1_0	EXIST::FUNCTION:
+TLSv1_1_method                          356	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_1_METHOD
+SSL_CTX_get_cert_store                  357	1_1_0	EXIST::FUNCTION:
+SSL_CTX_load_verify_locations           358	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_print_fp                    359	1_1_0	EXIST::FUNCTION:STDIO
+SSL_get0_dane_tlsa                      360	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_generate_session_id         361	1_1_0	EXIST::FUNCTION:
+SSL_alert_type_string_long              362	1_1_0	EXIST::FUNCTION:
+SSL_CONF_CTX_set1_prefix                363	1_1_0	EXIST::FUNCTION:
+SSL_in_init                             364	1_1_0	EXIST::FUNCTION:
+BIO_new_ssl                             365	1_1_0	EXIST::FUNCTION:
+SSL_CTX_get_client_cert_cb              366	1_1_0	EXIST::FUNCTION:
+SSL_CTX_use_certificate_ASN1            367	1_1_0	EXIST::FUNCTION:
+SSL_set_client_CA_list                  368	1_1_0	EXIST::FUNCTION:
+SSL_CTX_free                            369	1_1_0	EXIST::FUNCTION:
+SSL_get_default_passwd_cb               370	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_get_id                      371	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_set1_id_context             372	1_1_0	EXIST::FUNCTION:
+SSL_is_server                           373	1_1_0	EXIST::FUNCTION:
+SSL_alert_type_string                   374	1_1_0	EXIST::FUNCTION:
+DTLSv1_2_client_method                  375	1_1_0	EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_2_METHOD
+SSL_CTX_set_ctlog_list_file             376	1_1_0	EXIST::FUNCTION:CT
+SSL_set_ct_validation_callback          377	1_1_0	EXIST::FUNCTION:CT
+SSL_CTX_set_default_ctlog_list_file     378	1_1_0	EXIST::FUNCTION:CT
+SSL_CTX_has_client_custom_ext           379	1_1_0	EXIST::FUNCTION:
+SSL_ct_is_enabled                       380	1_1_0	EXIST::FUNCTION:CT
+SSL_get0_peer_scts                      381	1_1_0	EXIST::FUNCTION:CT
+SSL_CTX_set_ct_validation_callback      382	1_1_0	EXIST::FUNCTION:CT
+SSL_CTX_ct_is_enabled                   383	1_1_0	EXIST::FUNCTION:CT
+SSL_set_default_read_buffer_len         384	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set_default_read_buffer_len     385	1_1_0	EXIST::FUNCTION:
+SSL_has_pending                         386	1_1_0	EXIST::FUNCTION:
+SSL_CIPHER_get_auth_nid                 387	1_1_0	EXIST::FUNCTION:
+SSL_CIPHER_get_kx_nid                   388	1_1_0	EXIST::FUNCTION:
+SSL_CIPHER_is_aead                      389	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_up_ref                      390	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set0_ctlog_store                391	1_1_0	EXIST::FUNCTION:CT
+SSL_CTX_get0_ctlog_store                392	1_1_0	EXIST::FUNCTION:CT
+SSL_enable_ct                           393	1_1_0	EXIST::FUNCTION:CT
+SSL_CTX_enable_ct                       394	1_1_0	EXIST::FUNCTION:CT
+SSL_CTX_get_ciphers                     395	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_get0_hostname               396	1_1_0	EXIST::FUNCTION:
+SSL_client_version                      397	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_get_protocol_version        398	1_1_0	EXIST::FUNCTION:
+SSL_is_dtls                             399	1_1_0	EXIST::FUNCTION:
+SSL_CTX_dane_set_flags                  400	1_1_0	EXIST::FUNCTION:
+SSL_dane_set_flags                      401	1_1_0	EXIST::FUNCTION:
+SSL_CTX_dane_clear_flags                402	1_1_0	EXIST::FUNCTION:
+SSL_dane_clear_flags                    403	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_get0_cipher                 404	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_get0_id_context             405	1_1_0	EXIST::FUNCTION:
+SSL_SESSION_set1_id                     406	1_1_0	EXIST::FUNCTION:
+SSL_CTX_set1_cert_store                 407	1_1_1	EXIST::FUNCTION:
+DTLS_get_data_mtu                       408	1_1_1	EXIST::FUNCTION:
+SSL_read_ex                             409	1_1_1	EXIST::FUNCTION:
+SSL_peek_ex                             410	1_1_1	EXIST::FUNCTION:
+SSL_write_ex                            411	1_1_1	EXIST::FUNCTION:
+SSL_COMP_get_id                         412	1_1_0d	EXIST::FUNCTION:
+SSL_COMP_get0_name                      413	1_1_0d	EXIST::FUNCTION:
+SSL_CTX_set_keylog_callback             414	1_1_1	EXIST::FUNCTION:
+SSL_CTX_get_keylog_callback             415	1_1_1	EXIST::FUNCTION:
+SSL_get_peer_signature_type_nid         416	1_1_1	EXIST::FUNCTION:
+SSL_key_update                          417	1_1_1	EXIST::FUNCTION:
+SSL_get_key_update_type                 418	1_1_1	EXIST::FUNCTION:
+SSL_bytes_to_cipher_list                419	1_1_1	EXIST::FUNCTION:
+SSL_client_hello_get0_compression_methods 420	1_1_1	EXIST::FUNCTION:
+SSL_client_hello_get0_ciphers           421	1_1_1	EXIST::FUNCTION:
+SSL_client_hello_get0_ext               422	1_1_1	EXIST::FUNCTION:
+SSL_client_hello_get0_session_id        423	1_1_1	EXIST::FUNCTION:
+SSL_client_hello_get0_random            424	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set_client_hello_cb             425	1_1_1	EXIST::FUNCTION:
+SSL_client_hello_get0_legacy_version    426	1_1_1	EXIST::FUNCTION:
+SSL_client_hello_isv2                   427	1_1_1	EXIST::FUNCTION:
+SSL_set_max_early_data                  428	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set_max_early_data              429	1_1_1	EXIST::FUNCTION:
+SSL_get_max_early_data                  430	1_1_1	EXIST::FUNCTION:
+SSL_CTX_get_max_early_data              431	1_1_1	EXIST::FUNCTION:
+SSL_write_early_data                    432	1_1_1	EXIST::FUNCTION:
+SSL_read_early_data                     433	1_1_1	EXIST::FUNCTION:
+SSL_get_early_data_status               434	1_1_1	EXIST::FUNCTION:
+SSL_SESSION_get_max_early_data          435	1_1_1	EXIST::FUNCTION:
+SSL_add1_to_CA_list                     436	1_1_1	EXIST::FUNCTION:
+SSL_set0_CA_list                        437	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set0_CA_list                    438	1_1_1	EXIST::FUNCTION:
+SSL_get0_CA_list                        439	1_1_1	EXIST::FUNCTION:
+SSL_get0_peer_CA_list                   440	1_1_1	EXIST::FUNCTION:
+SSL_CTX_add1_to_CA_list                 441	1_1_1	EXIST::FUNCTION:
+SSL_CTX_get0_CA_list                    442	1_1_1	EXIST::FUNCTION:
+SSL_CTX_add_custom_ext                  443	1_1_1	EXIST::FUNCTION:
+SSL_SESSION_is_resumable                444	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set_record_padding_callback     445	1_1_1	EXIST::FUNCTION:
+SSL_set_record_padding_callback         446	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set_block_padding               447	1_1_1	EXIST::FUNCTION:
+SSL_CTX_get_record_padding_callback_arg 448	1_1_1	EXIST::FUNCTION:
+SSL_get_record_padding_callback_arg     449	1_1_1	EXIST::FUNCTION:
+SSL_set_block_padding                   450	1_1_1	EXIST::FUNCTION:
+SSL_set_record_padding_callback_arg     451	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set_record_padding_callback_arg 452	1_1_1	EXIST::FUNCTION:
+SSL_CTX_use_serverinfo_ex               453	1_1_1	EXIST::FUNCTION:
+SSL_client_hello_get1_extensions_present 454	1_1_1	EXIST::FUNCTION:
+SSL_set_psk_find_session_callback       455	1_1_1	EXIST::FUNCTION:
+SSL_set_psk_use_session_callback        456	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set_psk_use_session_callback    457	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set_psk_find_session_callback   458	1_1_1	EXIST::FUNCTION:
+SSL_CIPHER_get_handshake_digest         459	1_1_1	EXIST::FUNCTION:
+SSL_SESSION_set1_master_key             460	1_1_1	EXIST::FUNCTION:
+SSL_SESSION_set_cipher                  461	1_1_1	EXIST::FUNCTION:
+SSL_SESSION_set_protocol_version        462	1_1_1	EXIST::FUNCTION:
+OPENSSL_cipher_name                     463	1_1_1	EXIST::FUNCTION:
+SSL_alloc_buffers                       464	1_1_1	EXIST::FUNCTION:
+SSL_free_buffers                        465	1_1_1	EXIST::FUNCTION:
+SSL_SESSION_dup                         466	1_1_1	EXIST::FUNCTION:
+SSL_get_pending_cipher                  467	1_1_1	EXIST::FUNCTION:
+SSL_CIPHER_get_protocol_id              468	1_1_1	EXIST::FUNCTION:
+SSL_SESSION_set_max_early_data          469	1_1_1	EXIST::FUNCTION:
+SSL_SESSION_set1_alpn_selected          470	1_1_1	EXIST::FUNCTION:
+SSL_SESSION_set1_hostname               471	1_1_1	EXIST::FUNCTION:
+SSL_SESSION_get0_alpn_selected          472	1_1_1	EXIST::FUNCTION:
+DTLS_set_timer_cb                       473	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set_tlsext_max_fragment_length  474	1_1_1	EXIST::FUNCTION:
+SSL_set_tlsext_max_fragment_length      475	1_1_1	EXIST::FUNCTION:
+SSL_SESSION_get_max_fragment_length     476	1_1_1	EXIST::FUNCTION:
+SSL_stateless                           477	1_1_1	EXIST::FUNCTION:
+SSL_verify_client_post_handshake        478	1_1_1	EXIST::FUNCTION:
+SSL_set_post_handshake_auth             479	1_1_1	EXIST::FUNCTION:
+SSL_export_keying_material_early        480	1_1_1	EXIST::FUNCTION:
+SSL_CTX_use_cert_and_key                481	1_1_1	EXIST::FUNCTION:
+SSL_use_cert_and_key                    482	1_1_1	EXIST::FUNCTION:
+SSL_SESSION_get0_ticket_appdata         483	1_1_1	EXIST::FUNCTION:
+SSL_SESSION_set1_ticket_appdata         484	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set_session_ticket_cb           485	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set_stateless_cookie_generate_cb 486	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set_stateless_cookie_verify_cb  487	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set_ciphersuites                488	1_1_1	EXIST::FUNCTION:
+SSL_set_ciphersuites                    489	1_1_1	EXIST::FUNCTION:
+SSL_set_num_tickets                     490	1_1_1	EXIST::FUNCTION:
+SSL_CTX_get_num_tickets                 491	1_1_1	EXIST::FUNCTION:
+SSL_get_num_tickets                     492	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set_num_tickets                 493	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set_allow_early_data_cb         494	1_1_1	EXIST::FUNCTION:
+SSL_set_allow_early_data_cb             495	1_1_1	EXIST::FUNCTION:
+SSL_set_recv_max_early_data             496	1_1_1	EXIST::FUNCTION:
+SSL_get_recv_max_early_data             497	1_1_1	EXIST::FUNCTION:
+SSL_CTX_get_recv_max_early_data         498	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set_recv_max_early_data         499	1_1_1	EXIST::FUNCTION:
+SSL_CTX_set_post_handshake_auth         500	1_1_1	EXIST::FUNCTION:
+SSL_get_signature_type_nid              501	1_1_1a	EXIST::FUNCTION:
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/local_shlib.com.in b/trunk/3rdparty/openssl-1.1-fit/util/local_shlib.com.in
new file mode 100644
index 000000000..a38187253
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/local_shlib.com.in
@@ -0,0 +1,30 @@
+${-
+  use File::Spec::Functions qw(rel2abs);
+
+  my $bldtop = rel2abs($config{builddir});
+  our %names = ( map { $_ => $bldtop.$_.".EXE" }
+                 map { $unified_info{sharednames}->{$_} || () }
+                 @{$unified_info{libraries}} );
+  "" -}
+$       ! Create a local environment with the shared library logical names
+$       ! properly set.  Undo this with unlocal_shlib.com
+$
+$       OPENSSL_NAMES := OPENSSL_NAMES_'F$GETJPI("","PID")'
+$       CREATE/NAME_TABLE/PARENT_TABLE=LNM$PROCESS_DIRECTORY 'OPENSSL_NAMES'
+$       DEFINE/TABLE='OPENSSL_NAMES' OSSL_FLAG YES
+$
+$       NAMES := {- join(",", keys %names); -}
+{-
+  join("\n", map { "\$       __$_ = \"".$names{$_}."\"" } keys %names);
+-}
+$       I = 0
+$       LOOP:
+$           E = F$ELEMENT(I,",",NAMES)
+$           I = I + 1
+$           IF E .EQS. "," THEN GOTO ENDLOOP
+$           EV = __'E'
+$           OLDV = F$TRNLNM(E,"LNM$PROCESS")
+$           IF OLDV .NES. "" THEN DEFINE/TABLE='OPENSSL_NAMES' 'E' 'OLDV'
+$           DEFINE 'E' 'EV'
+$           GOTO LOOP
+$       ENDLOOP:
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/mkbuildinf.pl b/trunk/3rdparty/openssl-1.1-fit/util/mkbuildinf.pl
new file mode 100755
index 000000000..c9324a9de
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/mkbuildinf.pl
@@ -0,0 +1,56 @@
+#! /usr/bin/env perl
+# Copyright 2014-2017 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+use warnings;
+
+my ($cflags, $platform) = @ARGV;
+$cflags = "compiler: $cflags";
+
+my $date = gmtime($ENV{'SOURCE_DATE_EPOCH'} || time()) . " UTC";
+
+print <<"END_OUTPUT";
+/*
+ * WARNING: do not edit!
+ * Generated by util/mkbuildinf.pl
+ *
+ * Copyright 2014-2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#define PLATFORM "platform: $platform"
+#define DATE "built on: $date"
+
+/*
+ * Generate compiler_flags as an array of individual characters. This is a
+ * workaround for the situation where CFLAGS gets too long for a C90 string
+ * literal
+ */
+static const char compiler_flags[] = {
+END_OUTPUT
+
+my $ctr = 0;
+foreach my $c (split //, $cflags) {
+    $c =~ s|([\\'])|\\$1|;
+    # Max 16 characters per line
+    if  (($ctr++ % 16) == 0) {
+        if ($ctr != 1) {
+            print "\n";
+        }
+        print "    ";
+    }
+    print "'$c',";
+}
+print <<"END_OUTPUT";
+'\\0'
+};
+END_OUTPUT
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/mkdef.pl b/trunk/3rdparty/openssl-1.1-fit/util/mkdef.pl
new file mode 100755
index 000000000..bcbb47583
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/mkdef.pl
@@ -0,0 +1,1633 @@
+#! /usr/bin/env perl
+# Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# generate a .def file
+#
+# It does this by parsing the header files and looking for the
+# prototyped functions: it then prunes the output.
+#
+# Intermediary files are created, call libcrypto.num and libssl.num,
+# The format of these files is:
+#
+#	routine-name	nnnn	vers	info
+#
+# The "nnnn" and "vers" fields are the numeric id and version for the symbol
+# respectively. The "info" part is actually a colon-separated string of fields
+# with the following meaning:
+#
+#	existence:platform:kind:algorithms
+#
+# - "existence" can be "EXIST" or "NOEXIST" depending on if the symbol is
+#   found somewhere in the source,
+# - "platforms" is empty if it exists on all platforms, otherwise it contains
+#   comma-separated list of the platform, just as they are if the symbol exists
+#   for those platforms, or prepended with a "!" if not.  This helps resolve
+#   symbol name variants for platforms where the names are too long for the
+#   compiler or linker, or if the systems is case insensitive and there is a
+#   clash, or the symbol is implemented differently (see
+#   EXPORT_VAR_AS_FUNCTION).  This script assumes renaming of symbols is found
+#   in the file crypto/symhacks.h.
+#   The semantics for the platforms is that every item is checked against the
+#   environment.  For the negative items ("!FOO"), if any of them is false
+#   (i.e. "FOO" is true) in the environment, the corresponding symbol can't be
+#   used.  For the positive items, if all of them are false in the environment,
+#   the corresponding symbol can't be used.  Any combination of positive and
+#   negative items are possible, and of course leave room for some redundancy.
+# - "kind" is "FUNCTION" or "VARIABLE".  The meaning of that is obvious.
+# - "algorithms" is a comma-separated list of algorithm names.  This helps
+#   exclude symbols that are part of an algorithm that some user wants to
+#   exclude.
+#
+
+use lib ".";
+use configdata;
+use File::Spec::Functions;
+use File::Basename;
+use FindBin;
+use lib "$FindBin::Bin/perl";
+use OpenSSL::Glob;
+
+# When building a "variant" shared library, with a custom SONAME, also customize
+# all the symbol versions.  This produces a shared object that can coexist
+# without conflict in the same address space as a default build, or an object
+# with a different variant tag.
+#
+# For example, with a target definition that includes:
+#
+#         shlib_variant => "-opt",
+#
+# we build the following objects:
+#
+# $ perl -le '
+#     for (@ARGV) {
+#         if ($l = readlink) {
+#             printf "%s -> %s\n", $_, $l
+#         } else {
+#             print
+#         }
+#     }' *.so*
+# libcrypto-opt.so.1.1
+# libcrypto.so -> libcrypto-opt.so.1.1
+# libssl-opt.so.1.1
+# libssl.so -> libssl-opt.so.1.1
+#
+# whose SONAMEs and dependencies are:
+#
+# $ for l in *.so; do
+#     echo $l
+#     readelf -d $l | egrep 'SONAME|NEEDED.*(ssl|crypto)'
+#   done
+# libcrypto.so
+#  0x000000000000000e (SONAME)             Library soname: [libcrypto-opt.so.1.1]
+# libssl.so
+#  0x0000000000000001 (NEEDED)             Shared library: [libcrypto-opt.so.1.1]
+#  0x000000000000000e (SONAME)             Library soname: [libssl-opt.so.1.1]
+#
+# We case-fold the variant tag to upper case and replace all non-alnum
+# characters with "_".  This yields the following symbol versions:
+#
+# $ nm libcrypto.so | grep -w A
+# 0000000000000000 A OPENSSL_OPT_1_1_0
+# 0000000000000000 A OPENSSL_OPT_1_1_0a
+# 0000000000000000 A OPENSSL_OPT_1_1_0c
+# 0000000000000000 A OPENSSL_OPT_1_1_0d
+# 0000000000000000 A OPENSSL_OPT_1_1_0f
+# 0000000000000000 A OPENSSL_OPT_1_1_0g
+# $ nm libssl.so | grep -w A
+# 0000000000000000 A OPENSSL_OPT_1_1_0
+# 0000000000000000 A OPENSSL_OPT_1_1_0d
+#
+(my $SO_VARIANT = qq{\U$target{"shlib_variant"}}) =~ s/\W/_/g;
+
+my $debug=0;
+my $trace=0;
+my $verbose=0;
+
+my $crypto_num= catfile($config{sourcedir},"util","libcrypto.num");
+my $ssl_num=    catfile($config{sourcedir},"util","libssl.num");
+my $libname;
+
+my $do_update = 0;
+my $do_rewrite = 1;
+my $do_crypto = 0;
+my $do_ssl = 0;
+my $do_ctest = 0;
+my $do_ctestall = 0;
+my $do_checkexist = 0;
+
+my $VMS=0;
+my $W32=0;
+my $NT=0;
+my $UNIX=0;
+my $linux=0;
+my $aix=0;
+# Set this to make typesafe STACK definitions appear in DEF
+my $safe_stack_def = 0;
+
+my @known_platforms = ( "__FreeBSD__", "PERL5",
+			"EXPORT_VAR_AS_FUNCTION", "ZLIB", "_WIN32"
+			);
+my @known_ossl_platforms = ( "UNIX", "VMS", "WIN32", "WINNT", "OS2" );
+my @known_algorithms = ( # These are algorithms we know are guarded in relevant
+			 # header files, but aren't actually disablable.
+			 # Without these, this script will warn a lot.
+			 "RSA", "MD5",
+			 # @disablables comes from configdata.pm
+			 map { (my $x = uc $_) =~ s|-|_|g; $x; } @disablables,
+			 # Deprecated functions.  Not really algorithmss, but
+			 # treated as such here for the sake of simplicity
+			 "DEPRECATEDIN_0_9_8",
+			 "DEPRECATEDIN_1_0_0",
+			 "DEPRECATEDIN_1_1_0",
+			 "DEPRECATEDIN_1_2_0",
+                     );
+
+# %disabled comes from configdata.pm
+my %disabled_algorithms =
+    map { (my $x = uc $_) =~ s|-|_|g; $x => 1; } keys %disabled;
+
+my $apiv = sprintf "%x%02x%02x", split(/\./, $config{api});
+foreach (@known_algorithms) {
+	if (/^DEPRECATEDIN_(\d+)_(\d+)_(\d+)$/) {
+		my $depv = sprintf "%x%02x%02x", $1, $2, $3;
+		$disabled_algorithms{$_} = 1 if $apiv ge $depv;
+	}
+}
+
+my $zlib;
+
+foreach (@ARGV, split(/ /, $config{options}))
+	{
+	$debug=1 if $_ eq "debug";
+	$trace=1 if $_ eq "trace";
+	$verbose=1 if $_ eq "verbose";
+	$W32=1 if $_ eq "32";
+	die "win16 not supported" if $_ eq "16";
+	if($_ eq "NT") {
+		$W32 = 1;
+		$NT = 1;
+	} elsif ($_ eq "linux") {
+		$linux=1;
+		$UNIX=1;
+	} elsif ($_ eq "aix") {
+		$aix=1;
+		$UNIX=1;
+	} elsif ($_ eq "VMS") {
+		$VMS=1;
+	}
+	if ($_ eq "zlib" || $_ eq "enable-zlib" || $_ eq "zlib-dynamic"
+			 || $_ eq "enable-zlib-dynamic") {
+		$zlib = 1;
+	}
+
+	$do_crypto=1 if $_ eq "libcrypto" || $_ eq "crypto";
+	$do_ssl=1 if $_ eq "libssl" || $_ eq "ssl";
+
+	$do_update=1 if $_ eq "update";
+	$do_rewrite=1 if $_ eq "rewrite";
+	$do_ctest=1 if $_ eq "ctest";
+	$do_ctestall=1 if $_ eq "ctestall";
+	$do_checkexist=1 if $_ eq "exist";
+	}
+$libname = $unified_info{sharednames}->{libcrypto} if $do_crypto;
+$libname = $unified_info{sharednames}->{libssl} if $do_ssl;
+
+if (!$libname) {
+	if ($do_ssl) {
+		$libname="LIBSSL";
+	}
+	if ($do_crypto) {
+		$libname="LIBCRYPTO";
+	}
+}
+
+# If no platform is given, assume WIN32
+if ($W32 + $VMS + $linux + $aix == 0) {
+	$W32 = 1;
+}
+die "Please, only one platform at a time"
+    if ($W32 + $VMS + $linux + $aix > 1);
+
+if (!$do_ssl && !$do_crypto)
+	{
+	print STDERR "usage: $0 ( ssl | crypto ) [ 16 | 32 | NT | OS2 | linux | VMS ]\n";
+	exit(1);
+	}
+
+%ssl_list=&load_numbers($ssl_num);
+$max_ssl = $max_num;
+%crypto_list=&load_numbers($crypto_num);
+$max_crypto = $max_num;
+
+my $ssl="include/openssl/ssl.h";
+$ssl.=" include/openssl/sslerr.h";
+$ssl.=" include/openssl/tls1.h";
+$ssl.=" include/openssl/srtp.h";
+
+# When scanning include/openssl, skip all SSL files and some internal ones.
+my %skipthese;
+foreach my $f ( split(/\s+/, $ssl) ) {
+    $skipthese{$f} = 1;
+}
+$skipthese{'include/openssl/conf_api.h'} = 1;
+$skipthese{'include/openssl/ebcdic.h'} = 1;
+$skipthese{'include/openssl/opensslconf.h'} = 1;
+
+# We use headers found in include/openssl and include/internal only.
+# The latter is needed so libssl.so/.dll/.exe can link properly.
+my $crypto ="include/internal/dso.h";
+$crypto.=" include/internal/o_dir.h";
+$crypto.=" include/internal/o_str.h";
+$crypto.=" include/internal/err.h";
+$crypto.=" include/internal/sslconf.h";
+foreach my $f ( glob(catfile($config{sourcedir},'include/openssl/*.h')) ) {
+    my $fn = "include/openssl/" . basename($f);
+    $crypto .= " $fn" if !defined $skipthese{$fn};
+}
+
+my $symhacks="include/openssl/symhacks.h";
+
+my @ssl_symbols = &do_defs("LIBSSL", $ssl, $symhacks);
+my @crypto_symbols = &do_defs("LIBCRYPTO", $crypto, $symhacks);
+
+if ($do_update) {
+
+if ($do_ssl == 1) {
+
+	&maybe_add_info("LIBSSL",*ssl_list,@ssl_symbols);
+	if ($do_rewrite == 1) {
+		open(OUT, ">$ssl_num");
+		&rewrite_numbers(*OUT,"LIBSSL",*ssl_list,@ssl_symbols);
+	} else {
+		open(OUT, ">>$ssl_num");
+	}
+	&update_numbers(*OUT,"LIBSSL",*ssl_list,$max_ssl,@ssl_symbols);
+	close OUT;
+}
+
+if($do_crypto == 1) {
+
+	&maybe_add_info("LIBCRYPTO",*crypto_list,@crypto_symbols);
+	if ($do_rewrite == 1) {
+		open(OUT, ">$crypto_num");
+		&rewrite_numbers(*OUT,"LIBCRYPTO",*crypto_list,@crypto_symbols);
+	} else {
+		open(OUT, ">>$crypto_num");
+	}
+	&update_numbers(*OUT,"LIBCRYPTO",*crypto_list,$max_crypto,@crypto_symbols);
+	close OUT;
+}
+
+} elsif ($do_checkexist) {
+	&check_existing(*ssl_list, @ssl_symbols)
+		if $do_ssl == 1;
+	&check_existing(*crypto_list, @crypto_symbols)
+		if $do_crypto == 1;
+} elsif ($do_ctest || $do_ctestall) {
+
+	print <<"EOF";
+
+/* Test file to check all DEF file symbols are present by trying
+ * to link to all of them. This is *not* intended to be run!
+ */
+
+int main()
+{
+EOF
+	&print_test_file(*STDOUT,"LIBSSL",*ssl_list,$do_ctestall,@ssl_symbols)
+		if $do_ssl == 1;
+
+	&print_test_file(*STDOUT,"LIBCRYPTO",*crypto_list,$do_ctestall,@crypto_symbols)
+		if $do_crypto == 1;
+
+	print "}\n";
+
+} else {
+
+	&print_def_file(*STDOUT,$libname,*ssl_list,@ssl_symbols)
+		if $do_ssl == 1;
+
+	&print_def_file(*STDOUT,$libname,*crypto_list,@crypto_symbols)
+		if $do_crypto == 1;
+
+}
+
+
+sub do_defs
+{
+	my($name,$files,$symhacksfile)=@_;
+	my $file;
+	my @ret;
+	my %syms;
+	my %platform;		# For anything undefined, we assume ""
+	my %kind;		# For anything undefined, we assume "FUNCTION"
+	my %algorithm;		# For anything undefined, we assume ""
+	my %variant;
+	my %variant_cnt;	# To be able to allocate "name{n}" if "name"
+				# is the same name as the original.
+	my $cpp;
+	my %unknown_algorithms = ();
+	my $parens = 0;
+
+	foreach $file (split(/\s+/,$symhacksfile." ".$files))
+		{
+		my $fn = catfile($config{sourcedir},$file);
+		print STDERR "DEBUG: starting on $fn:\n" if $debug;
+		print STDERR "TRACE: start reading $fn\n" if $trace;
+		open(IN,"<$fn") || die "Can't open $fn, $!,";
+		my $line = "", my $def= "";
+		my %tag = (
+			(map { $_ => 0 } @known_platforms),
+			(map { "OPENSSL_SYS_".$_ => 0 } @known_ossl_platforms),
+			(map { "OPENSSL_NO_".$_ => 0 } @known_algorithms),
+			(map { "OPENSSL_USE_".$_ => 0 } @known_algorithms),
+			(grep /^DEPRECATED_/, @known_algorithms),
+			NOPROTO		=> 0,
+			PERL5		=> 0,
+			_WINDLL		=> 0,
+			CONST_STRICT	=> 0,
+			TRUE		=> 1,
+		);
+		my $symhacking = $file eq $symhacksfile;
+		my @current_platforms = ();
+		my @current_algorithms = ();
+
+		# params: symbol, alias, platforms, kind
+		# The reason to put this subroutine in a variable is that
+		# it will otherwise create it's own, unshared, version of
+		# %tag and %variant...
+		my $make_variant = sub
+		{
+			my ($s, $a, $p, $k) = @_;
+			my ($a1, $a2);
+
+			print STDERR "DEBUG: make_variant: Entered with ",$s,", ",$a,", ",(defined($p)?$p:""),", ",(defined($k)?$k:""),"\n" if $debug;
+			if (defined($p))
+			{
+				$a1 = join(",",$p,
+					   grep(!/^$/,
+						map { $tag{$_} == 1 ? $_ : "" }
+						@known_platforms));
+			}
+			else
+			{
+				$a1 = join(",",
+					   grep(!/^$/,
+						map { $tag{$_} == 1 ? $_ : "" }
+						@known_platforms));
+			}
+			$a2 = join(",",
+				   grep(!/^$/,
+					map { $tag{"OPENSSL_SYS_".$_} == 1 ? $_ : "" }
+					@known_ossl_platforms));
+			print STDERR "DEBUG: make_variant: a1 = $a1; a2 = $a2\n" if $debug;
+			if ($a1 eq "") { $a1 = $a2; }
+			elsif ($a1 ne "" && $a2 ne "") { $a1 .= ",".$a2; }
+			if ($a eq $s)
+			{
+				if (!defined($variant_cnt{$s}))
+				{
+					$variant_cnt{$s} = 0;
+				}
+				$variant_cnt{$s}++;
+				$a .= "{$variant_cnt{$s}}";
+			}
+			my $toadd = $a.":".$a1.(defined($k)?":".$k:"");
+			my $togrep = $s.'(\{[0-9]+\})?:'.$a1.(defined($k)?":".$k:"");
+			if (!grep(/^$togrep$/,
+				  split(/;/, defined($variant{$s})?$variant{$s}:""))) {
+				if (defined($variant{$s})) { $variant{$s} .= ";"; }
+				$variant{$s} .= $toadd;
+			}
+			print STDERR "DEBUG: make_variant: Exit with variant of ",$s," = ",$variant{$s},"\n" if $debug;
+		};
+
+		print STDERR "DEBUG: parsing ----------\n" if $debug;
+		while(<IN>) {
+			s|\R$||; # Better chomp
+			if($parens > 0) {
+				#Inside a DEPRECATEDIN
+				$stored_multiline .= $_;
+				print STDERR "DEBUG: Continuing multiline DEPRECATEDIN: $stored_multiline\n" if $debug;
+				$parens = count_parens($stored_multiline);
+				if ($parens == 0) {
+					$def .= do_deprecated($stored_multiline,
+							\@current_platforms,
+							\@current_algorithms);
+				}
+				next;
+			}
+			if (/\/\* Error codes for the \w+ functions\. \*\//)
+				{
+				undef @tag;
+				last;
+				}
+			if ($line ne '') {
+				$_ = $line . $_;
+				$line = '';
+			}
+
+			if (/\\$/) {
+				$line = $`; # keep what was before the backslash
+				next;
+			}
+
+			if(/\/\*/) {
+				if (not /\*\//) {	# multi-line comment...
+					$line = $_;	# ... just accumulate
+					next;
+				} else {
+					s/\/\*.*?\*\///gs;# wipe it
+				}
+			}
+
+			if ($cpp) {
+				$cpp++ if /^#\s*if/;
+				$cpp-- if /^#\s*endif/;
+				next;
+			}
+			if (/^#.*ifdef.*cplusplus/) {
+				$cpp = 1;
+				next;
+			}
+
+			s/{[^{}]*}//gs;                      # ignore {} blocks
+			print STDERR "DEBUG: \$def=\"$def\"\n" if $debug && $def ne "";
+			print STDERR "DEBUG: \$_=\"$_\"\n" if $debug;
+			if (/^\#\s*if\s+OPENSSL_API_COMPAT\s*(\S)\s*(0x[0-9a-fA-F]{8})L\s*$/) {
+				my $op = $1;
+				my $v = hex($2);
+				if ($op ne '<' && $op ne '>=') {
+				    die "$file unacceptable operator $op: $_\n";
+				}
+				my ($one, $major, $minor) =
+				    ( ($v >> 28) & 0xf,
+				      ($v >> 20) & 0xff,
+				      ($v >> 12) & 0xff );
+				my $t = "DEPRECATEDIN_${one}_${major}_${minor}";
+				push(@tag,"-");
+				push(@tag,$t);
+				$tag{$t}=($op eq '<' ? 1 : -1);
+				print STDERR "DEBUG: $file: found tag $t = $tag{$t}\n" if $debug;
+			} elsif (/^\#\s*ifndef\s+(.*)/) {
+				push(@tag,"-");
+				push(@tag,$1);
+				$tag{$1}=-1;
+				print STDERR "DEBUG: $file: found tag $1 = -1\n" if $debug;
+			} elsif (/^\#\s*if\s+!defined\s*\(([^\)]+)\)/) {
+				push(@tag,"-");
+				if (/^\#\s*if\s+(!defined\s*\(([^\)]+)\)(\s+\&\&\s+!defined\s*\(([^\)]+)\))*)$/) {
+					my $tmp_1 = $1;
+					my $tmp_;
+					foreach $tmp_ (split '\&\&',$tmp_1) {
+						$tmp_ =~ /!defined\s*\(([^\)]+)\)/;
+						print STDERR "DEBUG: $file: found tag $1 = -1\n" if $debug;
+						push(@tag,$1);
+						$tag{$1}=-1;
+					}
+				} else {
+					print STDERR "Warning: $file: taking only '!defined($1)' of complicated expression: $_" if $verbose; # because it is O...
+					print STDERR "DEBUG: $file: found tag $1 = -1\n" if $debug;
+					push(@tag,$1);
+					$tag{$1}=-1;
+				}
+			} elsif (/^\#\s*ifdef\s+(\S*)/) {
+				push(@tag,"-");
+				push(@tag,$1);
+				$tag{$1}=1;
+				print STDERR "DEBUG: $file: found tag $1 = 1\n" if $debug;
+			} elsif (/^\#\s*if\s+defined\s*\(([^\)]+)\)/) {
+				push(@tag,"-");
+				if (/^\#\s*if\s+(defined\s*\(([^\)]+)\)(\s+\|\|\s+defined\s*\(([^\)]+)\))*)$/) {
+					my $tmp_1 = $1;
+					my $tmp_;
+					foreach $tmp_ (split '\|\|',$tmp_1) {
+						$tmp_ =~ /defined\s*\(([^\)]+)\)/;
+						print STDERR "DEBUG: $file: found tag $1 = 1\n" if $debug;
+						push(@tag,$1);
+						$tag{$1}=1;
+					}
+				} else {
+					print STDERR "Warning: $file: taking only 'defined($1)' of complicated expression: $_\n" if $verbose; # because it is O...
+					print STDERR "DEBUG: $file: found tag $1 = 1\n" if $debug;
+					push(@tag,$1);
+					$tag{$1}=1;
+				}
+			} elsif (/^\#\s*error\s+(\w+) is disabled\./) {
+				my $tag_i = $#tag;
+				while($tag[$tag_i] ne "-") {
+					if ($tag[$tag_i] eq "OPENSSL_NO_".$1) {
+						$tag{$tag[$tag_i]}=2;
+						print STDERR "DEBUG: $file: changed tag $1 = 2\n" if $debug;
+					}
+					$tag_i--;
+				}
+			} elsif (/^\#\s*endif/) {
+				my $tag_i = $#tag;
+				while($tag_i > 0 && $tag[$tag_i] ne "-") {
+					my $t=$tag[$tag_i];
+					print STDERR "DEBUG: \$t=\"$t\"\n" if $debug;
+					if ($tag{$t}==2) {
+						$tag{$t}=-1;
+					} else {
+						$tag{$t}=0;
+					}
+					print STDERR "DEBUG: $file: changed tag ",$t," = ",$tag{$t},"\n" if $debug;
+					pop(@tag);
+					if ($t =~ /^OPENSSL_NO_([A-Z0-9_]+)$/) {
+						$t=$1;
+					} elsif($t =~ /^OPENSSL_USE_([A-Z0-9_]+)$/) {
+						$t=$1;
+					} else {
+						$t="";
+					}
+					if ($t ne ""
+					    && !grep(/^$t$/, @known_algorithms)) {
+						$unknown_algorithms{$t} = 1;
+						#print STDERR "DEBUG: Added as unknown algorithm: $t\n" if $debug;
+					}
+					$tag_i--;
+				}
+				pop(@tag);
+			} elsif (/^\#\s*else/) {
+				my $tag_i = $#tag;
+				die "$file unmatched else\n" if $tag_i < 0;
+				while($tag[$tag_i] ne "-") {
+					my $t=$tag[$tag_i];
+					$tag{$t}= -$tag{$t};
+					print STDERR "DEBUG: $file: changed tag ",$t," = ",$tag{$t},"\n" if $debug;
+					$tag_i--;
+				}
+			} elsif (/^\#\s*if\s+1/) {
+				push(@tag,"-");
+				# Dummy tag
+				push(@tag,"TRUE");
+				$tag{"TRUE"}=1;
+				print STDERR "DEBUG: $file: found 1\n" if $debug;
+			} elsif (/^\#\s*if\s+0/) {
+				push(@tag,"-");
+				# Dummy tag
+				push(@tag,"TRUE");
+				$tag{"TRUE"}=-1;
+				print STDERR "DEBUG: $file: found 0\n" if $debug;
+			} elsif (/^\#\s*if\s+/) {
+				#Some other unrecognized "if" style
+				push(@tag,"-");
+				print STDERR "Warning: $file: ignoring unrecognized expression: $_\n" if $verbose; # because it is O...
+			} elsif (/^\#\s*define\s+(\w+)\s+(\w+)/
+				 && $symhacking && $tag{'TRUE'} != -1) {
+				# This is for aliasing.  When we find an alias,
+				# we have to invert
+				&$make_variant($1,$2);
+				print STDERR "DEBUG: $file: defined $1 = $2\n" if $debug;
+			}
+			if (/^\#/) {
+				@current_platforms =
+				    grep(!/^$/,
+					 map { $tag{$_} == 1 ? $_ :
+						   $tag{$_} == -1 ? "!".$_  : "" }
+					 @known_platforms);
+				push @current_platforms
+				    , grep(!/^$/,
+					   map { $tag{"OPENSSL_SYS_".$_} == 1 ? $_ :
+						     $tag{"OPENSSL_SYS_".$_} == -1 ? "!".$_  : "" }
+					   @known_ossl_platforms);
+				@current_algorithms = ();
+				@current_algorithms =
+				    grep(!/^$/,
+					 map { $tag{"OPENSSL_NO_".$_} == -1 ? $_ : "" }
+					 @known_algorithms);
+				push @current_algorithms
+				    , grep(!/^$/,
+					 map { $tag{"OPENSSL_USE_".$_} == 1 ? $_ : "" }
+					 @known_algorithms);
+				push @current_algorithms,
+				    grep { /^DEPRECATEDIN_/ && $tag{$_} == 1 }
+				    @known_algorithms;
+				$def .=
+				    "#INFO:"
+					.join(',',@current_platforms).":"
+					    .join(',',@current_algorithms).";";
+				next;
+			}
+			if ($tag{'TRUE'} != -1) {
+				if (/^\s*DEFINE_STACK_OF\s*\(\s*(\w*)\s*\)/
+						|| /^\s*DEFINE_STACK_OF_CONST\s*\(\s*(\w*)\s*\)/) {
+					next;
+				} elsif (/^\s*DECLARE_ASN1_ENCODE_FUNCTIONS\s*\(\s*(\w*)\s*,\s*(\w*)\s*,\s*(\w*)\s*\)/) {
+					$def .= "int d2i_$3(void);";
+					$def .= "int i2d_$3(void);";
+					# Variant for platforms that do not
+					# have to access global variables
+					# in shared libraries through functions
+					$def .=
+					    "#INFO:"
+						.join(',',"!EXPORT_VAR_AS_FUNCTION",@current_platforms).":"
+						    .join(',',@current_algorithms).";";
+					$def .= "OPENSSL_EXTERN int $2_it;";
+					$def .=
+					    "#INFO:"
+						.join(',',@current_platforms).":"
+						    .join(',',@current_algorithms).";";
+					# Variant for platforms that have to
+					# access global variables in shared
+					# libraries through functions
+					&$make_variant("$2_it","$2_it",
+						      "EXPORT_VAR_AS_FUNCTION",
+						      "FUNCTION");
+					next;
+				} elsif (/^\s*DECLARE_ASN1_FUNCTIONS_fname\s*\(\s*(\w*)\s*,\s*(\w*)\s*,\s*(\w*)\s*\)/) {
+					$def .= "int d2i_$3(void);";
+					$def .= "int i2d_$3(void);";
+					$def .= "int $3_free(void);";
+					$def .= "int $3_new(void);";
+					# Variant for platforms that do not
+					# have to access global variables
+					# in shared libraries through functions
+					$def .=
+					    "#INFO:"
+						.join(',',"!EXPORT_VAR_AS_FUNCTION",@current_platforms).":"
+						    .join(',',@current_algorithms).";";
+					$def .= "OPENSSL_EXTERN int $2_it;";
+					$def .=
+					    "#INFO:"
+						.join(',',@current_platforms).":"
+						    .join(',',@current_algorithms).";";
+					# Variant for platforms that have to
+					# access global variables in shared
+					# libraries through functions
+					&$make_variant("$2_it","$2_it",
+						      "EXPORT_VAR_AS_FUNCTION",
+						      "FUNCTION");
+					next;
+				} elsif (/^\s*DECLARE_ASN1_FUNCTIONS\s*\(\s*(\w*)\s*\)/ ||
+					 /^\s*DECLARE_ASN1_FUNCTIONS_const\s*\(\s*(\w*)\s*\)/) {
+					$def .= "int d2i_$1(void);";
+					$def .= "int i2d_$1(void);";
+					$def .= "int $1_free(void);";
+					$def .= "int $1_new(void);";
+					# Variant for platforms that do not
+					# have to access global variables
+					# in shared libraries through functions
+					$def .=
+					    "#INFO:"
+						.join(',',"!EXPORT_VAR_AS_FUNCTION",@current_platforms).":"
+						    .join(',',@current_algorithms).";";
+					$def .= "OPENSSL_EXTERN int $1_it;";
+					$def .=
+					    "#INFO:"
+						.join(',',@current_platforms).":"
+						    .join(',',@current_algorithms).";";
+					# Variant for platforms that have to
+					# access global variables in shared
+					# libraries through functions
+					&$make_variant("$1_it","$1_it",
+						      "EXPORT_VAR_AS_FUNCTION",
+						      "FUNCTION");
+					next;
+				} elsif (/^\s*DECLARE_ASN1_ENCODE_FUNCTIONS_const\s*\(\s*(\w*)\s*,\s*(\w*)\s*\)/) {
+					$def .= "int d2i_$2(void);";
+					$def .= "int i2d_$2(void);";
+					# Variant for platforms that do not
+					# have to access global variables
+					# in shared libraries through functions
+					$def .=
+					    "#INFO:"
+						.join(',',"!EXPORT_VAR_AS_FUNCTION",@current_platforms).":"
+						    .join(',',@current_algorithms).";";
+					$def .= "OPENSSL_EXTERN int $2_it;";
+					$def .=
+					    "#INFO:"
+						.join(',',@current_platforms).":"
+						    .join(',',@current_algorithms).";";
+					# Variant for platforms that have to
+					# access global variables in shared
+					# libraries through functions
+					&$make_variant("$2_it","$2_it",
+						      "EXPORT_VAR_AS_FUNCTION",
+						      "FUNCTION");
+					next;
+				} elsif (/^\s*DECLARE_ASN1_ALLOC_FUNCTIONS\s*\(\s*(\w*)\s*\)/) {
+					$def .= "int $1_free(void);";
+					$def .= "int $1_new(void);";
+					next;
+				} elsif (/^\s*DECLARE_ASN1_FUNCTIONS_name\s*\(\s*(\w*)\s*,\s*(\w*)\s*\)/) {
+					$def .= "int d2i_$2(void);";
+					$def .= "int i2d_$2(void);";
+					$def .= "int $2_free(void);";
+					$def .= "int $2_new(void);";
+					# Variant for platforms that do not
+					# have to access global variables
+					# in shared libraries through functions
+					$def .=
+					    "#INFO:"
+						.join(',',"!EXPORT_VAR_AS_FUNCTION",@current_platforms).":"
+						    .join(',',@current_algorithms).";";
+					$def .= "OPENSSL_EXTERN int $2_it;";
+					$def .=
+					    "#INFO:"
+						.join(',',@current_platforms).":"
+						    .join(',',@current_algorithms).";";
+					# Variant for platforms that have to
+					# access global variables in shared
+					# libraries through functions
+					&$make_variant("$2_it","$2_it",
+						      "EXPORT_VAR_AS_FUNCTION",
+						      "FUNCTION");
+					next;
+				} elsif (/^\s*DECLARE_ASN1_ITEM\s*\(\s*(\w*)\s*\)/) {
+					# Variant for platforms that do not
+					# have to access global variables
+					# in shared libraries through functions
+					$def .=
+					    "#INFO:"
+						.join(',',"!EXPORT_VAR_AS_FUNCTION",@current_platforms).":"
+						    .join(',',@current_algorithms).";";
+					$def .= "OPENSSL_EXTERN int $1_it;";
+					$def .=
+					    "#INFO:"
+						.join(',',@current_platforms).":"
+						    .join(',',@current_algorithms).";";
+					# Variant for platforms that have to
+					# access global variables in shared
+					# libraries through functions
+					&$make_variant("$1_it","$1_it",
+						      "EXPORT_VAR_AS_FUNCTION",
+						      "FUNCTION");
+					next;
+				} elsif (/^\s*DECLARE_ASN1_NDEF_FUNCTION\s*\(\s*(\w*)\s*\)/) {
+					$def .= "int i2d_$1_NDEF(void);";
+				} elsif (/^\s*DECLARE_ASN1_SET_OF\s*\(\s*(\w*)\s*\)/) {
+					next;
+				} elsif (/^\s*DECLARE_ASN1_PRINT_FUNCTION\s*\(\s*(\w*)\s*\)/) {
+					$def .= "int $1_print_ctx(void);";
+					next;
+				} elsif (/^\s*DECLARE_ASN1_PRINT_FUNCTION_name\s*\(\s*(\w*)\s*,\s*(\w*)\s*\)/) {
+					$def .= "int $2_print_ctx(void);";
+					next;
+				} elsif (/^\s*DECLARE_PKCS12_STACK_OF\s*\(\s*(\w*)\s*\)/) {
+					next;
+				} elsif (/^DECLARE_PEM_rw\s*\(\s*(\w*)\s*,/ ||
+					 /^DECLARE_PEM_rw_cb\s*\(\s*(\w*)\s*,/ ||
+					 /^DECLARE_PEM_rw_const\s*\(\s*(\w*)\s*,/ ) {
+					$def .=
+					    "#INFO:"
+						.join(',',@current_platforms).":"
+						    .join(',',"STDIO",@current_algorithms).";";
+					$def .= "int PEM_read_$1(void);";
+					$def .= "int PEM_write_$1(void);";
+					$def .=
+					    "#INFO:"
+						.join(',',@current_platforms).":"
+						    .join(',',@current_algorithms).";";
+					# Things that are everywhere
+					$def .= "int PEM_read_bio_$1(void);";
+					$def .= "int PEM_write_bio_$1(void);";
+					next;
+				} elsif (/^DECLARE_PEM_write\s*\(\s*(\w*)\s*,/ ||
+					/^DECLARE_PEM_write_const\s*\(\s*(\w*)\s*,/ ||
+					 /^DECLARE_PEM_write_cb\s*\(\s*(\w*)\s*,/ ) {
+					$def .=
+					    "#INFO:"
+						.join(',',@current_platforms).":"
+						    .join(',',"STDIO",@current_algorithms).";";
+					$def .= "int PEM_write_$1(void);";
+					$def .=
+					    "#INFO:"
+						.join(',',@current_platforms).":"
+						    .join(',',@current_algorithms).";";
+					# Things that are everywhere
+					$def .= "int PEM_write_bio_$1(void);";
+					next;
+				} elsif (/^DECLARE_PEM_read\s*\(\s*(\w*)\s*,/ ||
+					 /^DECLARE_PEM_read_cb\s*\(\s*(\w*)\s*,/ ) {
+					$def .=
+					    "#INFO:"
+						.join(',',@current_platforms).":"
+						    .join(',',"STDIO",@current_algorithms).";";
+					$def .= "int PEM_read_$1(void);";
+					$def .=
+					    "#INFO:"
+						.join(',',@current_platforms).":"
+						    .join(',',"STDIO",@current_algorithms).";";
+					# Things that are everywhere
+					$def .= "int PEM_read_bio_$1(void);";
+					next;
+				} elsif (/^OPENSSL_DECLARE_GLOBAL\s*\(\s*(\w*)\s*,\s*(\w*)\s*\)/) {
+					# Variant for platforms that do not
+					# have to access global variables
+					# in shared libraries through functions
+					$def .=
+					    "#INFO:"
+						.join(',',"!EXPORT_VAR_AS_FUNCTION",@current_platforms).":"
+						    .join(',',@current_algorithms).";";
+					$def .= "OPENSSL_EXTERN int _shadow_$2;";
+					$def .=
+					    "#INFO:"
+						.join(',',@current_platforms).":"
+						    .join(',',@current_algorithms).";";
+					# Variant for platforms that have to
+					# access global variables in shared
+					# libraries through functions
+					&$make_variant("_shadow_$2","_shadow_$2",
+						      "EXPORT_VAR_AS_FUNCTION",
+						      "FUNCTION");
+				} elsif (/^\s*DEPRECATEDIN/) {
+					$parens = count_parens($_);
+					if ($parens == 0) {
+						$def .= do_deprecated($_,
+							\@current_platforms,
+							\@current_algorithms);
+					} else {
+						$stored_multiline = $_;
+						print STDERR "DEBUG: Found multiline DEPRECATEDIN starting with: $stored_multiline\n" if $debug;
+						next;
+					}
+				} elsif ($tag{'CONST_STRICT'} != 1) {
+					if (/\{|\/\*|\([^\)]*$/) {
+						$line = $_;
+					} else {
+						$def .= $_;
+					}
+				}
+			}
+		}
+		close(IN);
+		die "$file: Unmatched tags\n" if $#tag >= 0;
+
+		my $algs;
+		my $plays;
+
+		print STDERR "DEBUG: postprocessing ----------\n" if $debug;
+		foreach (split /;/, $def) {
+			my $s; my $k = "FUNCTION"; my $p; my $a;
+			s/^[\n\s]*//g;
+			s/[\n\s]*$//g;
+			next if(/\#undef/);
+			next if(/typedef\W/);
+			next if(/\#define/);
+
+			print STDERR "TRACE: processing $_\n" if $trace && !/^\#INFO:/;
+			# Reduce argument lists to empty ()
+			# fold round brackets recursively: (t(*v)(t),t) -> (t{}{},t) -> {}
+			my $nsubst = 1; # prevent infinite loop, e.g., on  int fn()
+			while($nsubst && /\(.*\)/s) {
+				$nsubst = s/\([^\(\)]+\)/\{\}/gs;
+				$nsubst+= s/\(\s*\*\s*(\w+)\s*\{\}\s*\)/$1/gs;	#(*f{}) -> f
+			}
+			# pretend as we didn't use curly braces: {} -> ()
+			s/\{\}/\(\)/gs;
+
+			s/STACK_OF\(\)/void/gs;
+			s/LHASH_OF\(\)/void/gs;
+
+			print STDERR "DEBUG: \$_ = \"$_\"\n" if $debug;
+			if (/^\#INFO:([^:]*):(.*)$/) {
+				$plats = $1;
+				$algs = $2;
+				print STDERR "DEBUG: found info on platforms ($plats) and algorithms ($algs)\n" if $debug;
+				next;
+			} elsif (/^\s*OPENSSL_EXTERN\s.*?(\w+(\{[0-9]+\})?)(\[[0-9]*\])*\s*$/) {
+				$s = $1;
+				$k = "VARIABLE";
+				print STDERR "DEBUG: found external variable $s\n" if $debug;
+			} elsif (/TYPEDEF_\w+_OF/s) {
+				next;
+			} elsif (/(\w+)\s*\(\).*/s) {	# first token prior [first] () is
+				$s = $1;		# a function name!
+				print STDERR "DEBUG: found function $s\n" if $debug;
+			} elsif (/\(/ and not (/=/)) {
+				print STDERR "File $file: cannot parse: $_;\n";
+				next;
+			} else {
+				next;
+			}
+
+			$syms{$s} = 1;
+			$kind{$s} = $k;
+
+			$p = $plats;
+			$a = $algs;
+
+			$platform{$s} =
+			    &reduce_platforms((defined($platform{$s})?$platform{$s}.',':"").$p);
+			$algorithm{$s} .= ','.$a;
+
+			if (defined($variant{$s})) {
+				foreach $v (split /;/,$variant{$s}) {
+					(my $r, my $p, my $k) = split(/:/,$v);
+					my $ip = join ',',map({ /^!(.*)$/ ? $1 : "!".$_ } split /,/, $p);
+					$syms{$r} = 1;
+					if (!defined($k)) { $k = $kind{$s}; }
+					$kind{$r} = $k."(".$s.")";
+					$algorithm{$r} = $algorithm{$s};
+					$platform{$r} = &reduce_platforms($platform{$s}.",".$p.",".$p);
+					$platform{$s} = &reduce_platforms($platform{$s}.','.$ip.','.$ip);
+					print STDERR "DEBUG: \$variant{\"$s\"} = ",$v,"; \$r = $r; \$p = ",$platform{$r},"; \$a = ",$algorithm{$r},"; \$kind = ",$kind{$r},"\n" if $debug;
+				}
+			}
+			print STDERR "DEBUG: \$s = $s; \$p = ",$platform{$s},"; \$a = ",$algorithm{$s},"; \$kind = ",$kind{$s},"\n" if $debug;
+		}
+	}
+
+	# Info we know about
+
+	push @ret, map { $_."\\".&info_string($_,"EXIST",
+					      $platform{$_},
+					      $kind{$_},
+					      $algorithm{$_}) } keys %syms;
+
+	if (keys %unknown_algorithms) {
+		print STDERR "WARNING: mkdef.pl doesn't know the following algorithms:\n";
+		print STDERR "\t",join("\n\t",keys %unknown_algorithms),"\n";
+	}
+	return(@ret);
+}
+
+# Param: string of comma-separated platform-specs.
+sub reduce_platforms
+{
+	my ($platforms) = @_;
+	my $pl = defined($platforms) ? $platforms : "";
+	my %p = map { $_ => 0 } split /,/, $pl;
+	my $ret;
+
+	print STDERR "DEBUG: Entered reduce_platforms with \"$platforms\"\n"
+	    if $debug;
+	# We do this, because if there's code like the following, it really
+	# means the function exists in all cases and should therefore be
+	# everywhere.  By increasing and decreasing, we may attain 0:
+	#
+	# ifndef WIN16
+	#    int foo();
+	# else
+	#    int _fat foo();
+	# endif
+	foreach $platform (split /,/, $pl) {
+		if ($platform =~ /^!(.*)$/) {
+			$p{$1}--;
+		} else {
+			$p{$platform}++;
+		}
+	}
+	foreach $platform (keys %p) {
+		if ($p{$platform} == 0) { delete $p{$platform}; }
+	}
+
+	delete $p{""};
+
+	$ret = join(',',sort(map { $p{$_} < 0 ? "!".$_ : $_ } keys %p));
+	print STDERR "DEBUG: Exiting reduce_platforms with \"$ret\"\n"
+	    if $debug;
+	return $ret;
+}
+
+sub info_string
+{
+	(my $symbol, my $exist, my $platforms, my $kind, my $algorithms) = @_;
+
+	my %a = defined($algorithms) ?
+	    map { $_ => 1 } split /,/, $algorithms : ();
+	my $k = defined($kind) ? $kind : "FUNCTION";
+	my $ret;
+	my $p = &reduce_platforms($platforms);
+
+	delete $a{""};
+
+	$ret = $exist;
+	$ret .= ":".$p;
+	$ret .= ":".$k;
+	$ret .= ":".join(',',sort keys %a);
+	return $ret;
+}
+
+sub maybe_add_info
+{
+	(my $name, *nums, my @symbols) = @_;
+	my $sym;
+	my $new_info = 0;
+	my %syms=();
+
+	foreach $sym (@symbols) {
+		(my $s, my $i) = split /\\/, $sym;
+		if (defined($nums{$s})) {
+			$i =~ s/^(.*?:.*?:\w+)(\(\w+\))?/$1/;
+			(my $n, my $vers, my $dummy) = split /\\/, $nums{$s};
+			if (!defined($dummy) || $i ne $dummy) {
+				$nums{$s} = $n."\\".$vers."\\".$i;
+				$new_info++;
+				print STDERR "DEBUG: maybe_add_info for $s: \"$dummy\" => \"$i\"\n" if $debug;
+			}
+		}
+		$syms{$s} = 1;
+	}
+
+	my @s=sort { &parse_number($nums{$a},"n") <=> &parse_number($nums{$b},"n") } keys %nums;
+	foreach $sym (@s) {
+		(my $n, my $vers, my $i) = split /\\/, $nums{$sym};
+		if (!defined($syms{$sym}) && $i !~ /^NOEXIST:/) {
+			$new_info++;
+			print STDERR "DEBUG: maybe_add_info for $sym: -> undefined\n" if $debug;
+		}
+	}
+	if ($new_info) {
+		print STDERR "$name: $new_info old symbols have updated info\n";
+		if (!$do_rewrite) {
+			print STDERR "You should do a rewrite to fix this.\n";
+		}
+	} else {
+	}
+}
+
+# Param: string of comma-separated keywords, each possibly prefixed with a "!"
+sub is_valid
+{
+	my ($keywords_txt,$platforms) = @_;
+	my (@keywords) = split /,/,$keywords_txt;
+	my ($falsesum, $truesum) = (0, 1);
+
+	# Param: one keyword
+	sub recognise
+	{
+		my ($keyword,$platforms) = @_;
+
+		if ($platforms) {
+			# platforms
+			if ($keyword eq "UNIX" && $UNIX) { return 1; }
+			if ($keyword eq "VMS" && $VMS) { return 1; }
+			if ($keyword eq "WIN32" && $W32) { return 1; }
+			if ($keyword eq "_WIN32" && $W32) { return 1; }
+			if ($keyword eq "WINNT" && $NT) { return 1; }
+			# Special platforms:
+			# EXPORT_VAR_AS_FUNCTION means that global variables
+			# will be represented as functions.
+			if ($keyword eq "EXPORT_VAR_AS_FUNCTION" && $W32) {
+				return 1;
+			}
+			if ($keyword eq "ZLIB" && $zlib) { return 1; }
+			return 0;
+		} else {
+			# algorithms
+			if ($disabled_algorithms{$keyword}) { return 0;}
+
+			# Nothing recognise as true
+			return 1;
+		}
+	}
+
+	foreach $k (@keywords) {
+		if ($k =~ /^!(.*)$/) {
+			$falsesum += &recognise($1,$platforms);
+		} else {
+			$truesum *= &recognise($k,$platforms);
+		}
+	}
+	print STDERR "DEBUG: [",$#keywords,",",$#keywords < 0,"] is_valid($keywords_txt) => (\!$falsesum) && $truesum = ",(!$falsesum) && $truesum,"\n" if $debug;
+	return (!$falsesum) && $truesum;
+}
+
+sub print_test_file
+{
+	(*OUT,my $name,*nums,my $testall,my @symbols)=@_;
+	my $n = 1; my @e; my @r;
+	my $sym; my $prev = ""; my $prefSSLeay;
+
+	(@e)=grep(/^SSLeay(\{[0-9]+\})?\\.*?:.*?:.*/,@symbols);
+	(@r)=grep(/^\w+(\{[0-9]+\})?\\.*?:.*?:.*/ && !/^SSLeay(\{[0-9]+\})?\\.*?:.*?:.*/,@symbols);
+	@symbols=((sort @e),(sort @r));
+
+	foreach $sym (@symbols) {
+		(my $s, my $i) = $sym =~ /^(.*?)\\(.*)$/;
+		my $v = 0;
+		$v = 1 if $i=~ /^.*?:.*?:VARIABLE/;
+		my $p = ($i =~ /^[^:]*:([^:]*):/,$1);
+		my $a = ($i =~ /^[^:]*:[^:]*:[^:]*:([^:]*)/,$1);
+		if (!defined($nums{$s})) {
+			print STDERR "Warning: $s does not have a number assigned\n"
+			    if(!$do_update);
+		} elsif (is_valid($p,1) && is_valid($a,0)) {
+			my $s2 = ($s =~ /^(.*?)(\{[0-9]+\})?$/, $1);
+			if ($prev eq $s2) {
+				print OUT "\t/* The following has already appeared previously */\n";
+				print STDERR "Warning: Symbol '",$s2,"' redefined. old=",($nums{$prev} =~ /^(.*?)\\/,$1),", new=",($nums{$s2} =~ /^(.*?)\\/,$1),"\n";
+			}
+			$prev = $s2;	# To warn about duplicates...
+
+			(my $nn, my $vers, my $ni) = split /\\/, $nums{$s2};
+			if ($v) {
+				print OUT "\textern int $s2; /* type unknown */ /* $nn $ni */\n";
+			} else {
+				print OUT "\textern int $s2(); /* type unknown */ /* $nn $ni */\n";
+			}
+		}
+	}
+}
+
+sub get_version
+{
+   return $config{version};
+}
+
+sub print_def_file
+{
+	(*OUT,my $name,*nums,my @symbols)=@_;
+	my $n = 1; my @e; my @r; my @v; my $prev="";
+	my $liboptions="";
+	my $libname = $name;
+	my $http_vendor = 'www.openssl.org/';
+	my $version = get_version();
+	my $what = "OpenSSL: implementation of Secure Socket Layer";
+	my $description = "$what $version, $name - http://$http_vendor";
+	my $prevsymversion = "", $prevprevsymversion = "";
+        # For VMS
+        my $prevnum = 0;
+        my $symvtextcount = 0;
+
+        if ($W32)
+                {
+                print OUT <<"EOF";
+;
+; Definition file for the DLL version of the $name library from OpenSSL
+;
+
+LIBRARY         $libname	$liboptions
+
+EOF
+
+		print "EXPORTS\n";
+                }
+        elsif ($VMS)
+                {
+                print OUT <<"EOF";
+IDENTIFICATION=$version
+CASE_SENSITIVE=YES
+SYMBOL_VECTOR=(-
+EOF
+                $symvtextcount = 16; # length of "SYMBOL_VECTOR=(-"
+                }
+
+	(@r)=grep(/^\w+(\{[0-9]+\})?\\.*?:.*?:FUNCTION/,@symbols);
+	(@v)=grep(/^\w+(\{[0-9]+\})?\\.*?:.*?:VARIABLE/,@symbols);
+        if ($VMS) {
+            # VMS needs to have the symbols on slot number order
+            @symbols=(map { $_->[1] }
+                      sort { $a->[0] <=> $b->[0] }
+                      map { (my $s, my $i) = $_ =~ /^(.*?)\\(.*)$/;
+                            die "Error: $s doesn't have a number assigned\n"
+                                if !defined($nums{$s});
+                            (my $n, my @rest) = split /\\/, $nums{$s};
+                            [ $n, $_ ] } (@e, @r, @v));
+        } else {
+            @symbols=((sort @e),(sort @r), (sort @v));
+        }
+
+	my ($baseversion, $currversion) = get_openssl_version();
+	my $thisversion;
+	do {
+		if (!defined($thisversion)) {
+			$thisversion = $baseversion;
+		} else {
+			$thisversion = get_next_version($thisversion);
+		}
+		foreach $sym (@symbols) {
+			(my $s, my $i) = $sym =~ /^(.*?)\\(.*)$/;
+			my $v = 0;
+			$v = 1 if $i =~ /^.*?:.*?:VARIABLE/;
+			if (!defined($nums{$s})) {
+				die "Error: $s does not have a number assigned\n"
+					if(!$do_update);
+			} else {
+				(my $n, my $symversion, my $dummy) = split /\\/, $nums{$s};
+				my %pf = ();
+				my $p = ($i =~ /^[^:]*:([^:]*):/,$1);
+				my $a = ($i =~ /^[^:]*:[^:]*:[^:]*:([^:]*)/,$1);
+				if (is_valid($p,1) && is_valid($a,0)) {
+					my $s2 = ($s =~ /^(.*?)(\{[0-9]+\})?$/, $1);
+					if ($prev eq $s2) {
+						print STDERR "Warning: Symbol '",$s2,
+							"' redefined. old=",($nums{$prev} =~ /^(.*?)\\/,$1),
+							", new=",($nums{$s2} =~ /^(.*?)\\/,$1),"\n";
+					}
+					$prev = $s2;	# To warn about duplicates...
+					if($linux) {
+						next if $symversion ne $thisversion;
+						if ($symversion ne $prevsymversion) {
+							if ($prevsymversion ne "") {
+								if ($prevprevsymversion ne "") {
+									print OUT "} OPENSSL${SO_VARIANT}_"
+												."$prevprevsymversion;\n\n";
+								} else {
+									print OUT "};\n\n";
+								}
+							}
+							print OUT "OPENSSL${SO_VARIANT}_$symversion {\n    global:\n";
+							$prevprevsymversion = $prevsymversion;
+							$prevsymversion = $symversion;
+						}
+						print OUT "        $s2;\n";
+					} elsif ($aix) {
+						print OUT "$s2\n";
+                                        } elsif ($VMS) {
+                                            while(++$prevnum < $n) {
+                                                my $symline=" ,SPARE -\n  ,SPARE -\n";
+                                                if ($symvtextcount + length($symline) - 2 > 1024) {
+                                                    print OUT ")\nSYMBOL_VECTOR=(-\n";
+                                                    $symvtextcount = 16; # length of "SYMBOL_VECTOR=(-"
+                                                }
+                                                if ($symvtextcount == 16) {
+                                                    # Take away first comma
+                                                    $symline =~ s/,//;
+                                                }
+                                                print OUT $symline;
+                                                $symvtextcount += length($symline) - 2;
+                                            }
+                                            (my $s_uc = $s) =~ tr/a-z/A-Z/;
+                                            my $symtype=
+                                                $v ? "DATA" : "PROCEDURE";
+                                            my $symline=
+                                                ($s_uc ne $s
+                                                 ? " ,$s_uc/$s=$symtype -\n  ,$s=$symtype -\n"
+                                                 : " ,$s=$symtype -\n  ,SPARE -\n");
+                                            if ($symvtextcount + length($symline) - 2 > 1024) {
+                                                print OUT ")\nSYMBOL_VECTOR=(-\n";
+                                                $symvtextcount = 16; # length of "SYMBOL_VECTOR=(-"
+                                            }
+                                            if ($symvtextcount == 16) {
+                                                # Take away first comma
+                                                $symline =~ s/,//;
+                                            }
+                                            print OUT $symline;
+                                            $symvtextcount += length($symline) - 2;
+					} elsif($v) {
+						printf OUT "    %s%-39s DATA\n",
+								($W32)?"":"_",$s2;
+					} else {
+						printf OUT "    %s%s\n",
+								($W32)?"":"_",$s2;
+					}
+				}
+			}
+		}
+	} while ($linux && $thisversion ne $currversion);
+	if ($linux) {
+		if ($prevprevsymversion ne "") {
+			print OUT "    local: *;\n} OPENSSL${SO_VARIANT}_$prevprevsymversion;\n\n";
+		} else {
+			print OUT "    local: *;\n};\n\n";
+		}
+	} elsif ($VMS) {
+            print OUT ")\n";
+            (my $libvmaj, my $libvmin, my $libvedit) =
+                $currversion =~ /^(\d+)_(\d+)_(\d+)[a-z]{0,2}$/;
+            # The reason to multiply the edit number with 100 is to make space
+            # for the possibility that we want to encode the patch letters
+            print OUT "GSMATCH=LEQUAL,",($libvmaj * 100 + $libvmin),",",($libvedit * 100),"\n";
+        }
+	printf OUT "\n";
+}
+
+sub load_numbers
+{
+	my($name)=@_;
+	my(@a,%ret);
+	my $prevversion;
+
+	$max_num = 0;
+	$num_noinfo = 0;
+	$prev = "";
+	$prev_cnt = 0;
+
+	my ($baseversion, $currversion) = get_openssl_version();
+
+	open(IN,"<$name") || die "unable to open $name:$!\n";
+	while (<IN>) {
+		s|\R$||;        # Better chomp
+		s/#.*$//;
+		next if /^\s*$/;
+		@a=split;
+		if (defined $ret{$a[0]}) {
+			# This is actually perfectly OK
+			#print STDERR "Warning: Symbol '",$a[0],"' redefined. old=",$ret{$a[0]},", new=",$a[1],"\n";
+		}
+		if ($max_num > $a[1]) {
+			print STDERR "Warning: Number decreased from ",$max_num," to ",$a[1],"\n";
+		}
+		elsif ($max_num == $a[1]) {
+			# This is actually perfectly OK
+			#print STDERR "Warning: Symbol ",$a[0]," has same number as previous ",$prev,": ",$a[1],"\n";
+			if ($a[0] eq $prev) {
+				$prev_cnt++;
+				$a[0] .= "{$prev_cnt}";
+			}
+		}
+		else {
+			$prev_cnt = 0;
+		}
+		if ($#a < 2) {
+			# Existence will be proven later, in do_defs
+			$ret{$a[0]}=$a[1];
+			$num_noinfo++;
+		} else {
+			#Sanity check the version number
+			if (defined $prevversion) {
+				check_version_lte($prevversion, $a[2]);
+			}
+			check_version_lte($a[2], $currversion);
+			$prevversion = $a[2];
+			$ret{$a[0]}=$a[1]."\\".$a[2]."\\".$a[3]; # \\ is a special marker
+		}
+		$max_num = $a[1] if $a[1] > $max_num;
+		$prev=$a[0];
+	}
+	if ($num_noinfo) {
+		print STDERR "Warning: $num_noinfo symbols were without info." if $verbose || !$do_rewrite;
+		if ($do_rewrite) {
+			printf STDERR "  The rewrite will fix this.\n" if $verbose;
+		} else {
+			printf STDERR "  You should do a rewrite to fix this.\n";
+		}
+	}
+	close(IN);
+	return(%ret);
+}
+
+sub parse_number
+{
+	(my $str, my $what) = @_;
+	(my $n, my $v, my $i) = split(/\\/,$str);
+	if ($what eq "n") {
+		return $n;
+	} else {
+		return $i;
+	}
+}
+
+sub rewrite_numbers
+{
+	(*OUT,$name,*nums,@symbols)=@_;
+	my $thing;
+
+	my @r = grep(/^\w+(\{[0-9]+\})?\\.*?:.*?:\w+\(\w+\)/,@symbols);
+	my $r; my %r; my %rsyms;
+	foreach $r (@r) {
+		(my $s, my $i) = split /\\/, $r;
+		my $a = $1 if $i =~ /^.*?:.*?:\w+\((\w+)\)/;
+		$i =~ s/^(.*?:.*?:\w+)\(\w+\)/$1/;
+		$r{$a} = $s."\\".$i;
+		$rsyms{$s} = 1;
+	}
+
+	my %syms = ();
+	foreach $_ (@symbols) {
+		(my $n, my $i) = split /\\/;
+		$syms{$n} = 1;
+	}
+
+	my @s=sort {
+	    &parse_number($nums{$a},"n") <=> &parse_number($nums{$b},"n")
+	    || $a cmp $b
+	} keys %nums;
+	foreach $sym (@s) {
+		(my $n, my $vers, my $i) = split /\\/, $nums{$sym};
+		next if defined($i) && $i =~ /^.*?:.*?:\w+\(\w+\)/;
+		next if defined($rsyms{$sym});
+		print STDERR "DEBUG: rewrite_numbers for sym = ",$sym,": i = ",$i,", n = ",$n,", rsym{sym} = ",$rsyms{$sym},"syms{sym} = ",$syms{$sym},"\n" if $debug;
+		$i="NOEXIST::FUNCTION:"
+			if !defined($i) || $i eq "" || !defined($syms{$sym});
+		my $s2 = $sym;
+		$s2 =~ s/\{[0-9]+\}$//;
+		printf OUT "%s%-39s %d\t%s\t%s\n","",$s2,$n,$vers,$i;
+		if (exists $r{$sym}) {
+			(my $s, $i) = split /\\/,$r{$sym};
+			my $s2 = $s;
+			$s2 =~ s/\{[0-9]+\}$//;
+			printf OUT "%s%-39s %d\t%s\t%s\n","",$s2,$n,$vers,$i;
+		}
+	}
+}
+
+sub update_numbers
+{
+	(*OUT,$name,*nums,my $start_num, my @symbols)=@_;
+	my $new_syms = 0;
+	my $basevers;
+	my $vers;
+
+	($basevers, $vers) = get_openssl_version();
+
+	my @r = grep(/^\w+(\{[0-9]+\})?\\.*?:.*?:\w+\(\w+\)/,@symbols);
+	my $r; my %r; my %rsyms;
+	foreach $r (@r) {
+		(my $s, my $i) = split /\\/, $r;
+		my $a = $1 if $i =~ /^.*?:.*?:\w+\((\w+)\)/;
+		$i =~ s/^(.*?:.*?:\w+)\(\w+\)/$1/;
+		$r{$a} = $s."\\".$i;
+		$rsyms{$s} = 1;
+	}
+
+	foreach $sym (@symbols) {
+		(my $s, my $i) = $sym =~ /^(.*?)\\(.*)$/;
+		next if $i =~ /^.*?:.*?:\w+\(\w+\)/;
+		next if defined($rsyms{$sym});
+		die "ERROR: Symbol $sym had no info attached to it."
+		    if $i eq "";
+		if (!exists $nums{$s}) {
+			$new_syms++;
+			my $s2 = $s;
+			$s2 =~ s/\{[0-9]+\}$//;
+			printf OUT "%s%-39s %d\t%s\t%s\n","",$s2, ++$start_num,$vers,$i;
+			if (exists $r{$s}) {
+				($s, $i) = split /\\/,$r{$s};
+				$s =~ s/\{[0-9]+\}$//;
+				printf OUT "%s%-39s %d\t%s\t%s\n","",$s, $start_num,$vers,$i;
+			}
+		}
+	}
+	if($new_syms) {
+		print STDERR "$name: Added $new_syms new symbols\n";
+	} else {
+		print STDERR "$name: No new symbols added\n";
+	}
+}
+
+sub check_existing
+{
+	(*nums, my @symbols)=@_;
+	my %existing; my @remaining;
+	@remaining=();
+	foreach $sym (@symbols) {
+		(my $s, my $i) = $sym =~ /^(.*?)\\(.*)$/;
+		$existing{$s}=1;
+	}
+	foreach $sym (keys %nums) {
+		if (!exists $existing{$sym}) {
+			push @remaining, $sym;
+		}
+	}
+	if(@remaining) {
+		print STDERR "The following symbols do not seem to exist:\n";
+		foreach $sym (@remaining) {
+			print STDERR "\t",$sym,"\n";
+		}
+	}
+}
+
+sub count_parens
+{
+	my $line = shift(@_);
+
+	my $open = $line =~ tr/\(//;
+	my $close = $line =~ tr/\)//;
+
+	return $open - $close;
+}
+
+#Parse opensslv.h to get the current version number. Also work out the base
+#version, i.e. the lowest version number that is binary compatible with this
+#version
+sub get_openssl_version()
+{
+	my $fn = catfile($config{sourcedir},"include","openssl","opensslv.h");
+	open (IN, "$fn") || die "Can't open opensslv.h";
+
+	while(<IN>) {
+		if (/OPENSSL_VERSION_TEXT\s+"OpenSSL (\d\.\d\.)(\d[a-z]*)(-| )/) {
+			my $suffix = $2;
+			(my $baseversion = $1) =~ s/\./_/g;
+			close IN;
+			return ($baseversion."0", $baseversion.$suffix);
+		}
+	}
+	die "Can't find OpenSSL version number\n";
+}
+
+#Given an OpenSSL version number, calculate the next version number. If the
+#version number gets to a.b.czz then we go to a.b.(c+1)
+sub get_next_version()
+{
+	my $thisversion = shift;
+
+	my ($base, $letter) = $thisversion =~ /^(\d_\d_\d)([a-z]{0,2})$/;
+
+	if ($letter eq "zz") {
+		my $lastnum = substr($base, -1);
+		return substr($base, 0, length($base)-1).(++$lastnum);
+	}
+	return $base.get_next_letter($letter);
+}
+
+#Given the letters off the end of an OpenSSL version string, calculate what
+#the letters for the next release would be.
+sub get_next_letter()
+{
+	my $thisletter = shift;
+	my $baseletter = "";
+	my $endletter;
+
+	if ($thisletter eq "") {
+		return "a";
+	}
+	if ((length $thisletter) > 1) {
+		($baseletter, $endletter) = $thisletter =~ /([a-z]+)([a-z])/;
+	} else {
+		$endletter = $thisletter;
+	}
+
+	if ($endletter eq "z") {
+		return $thisletter."a";
+	} else {
+		return $baseletter.(++$endletter);
+	}
+}
+
+#Check if a version is less than or equal to the current version. Its a fatal
+#error if not. They must also only differ in letters, or the last number (i.e.
+#the first two numbers must be the same)
+sub check_version_lte()
+{
+	my ($testversion, $currversion) = @_;
+	my $lentv;
+	my $lencv;
+	my $cvbase;
+
+	my ($cvnums) = $currversion =~ /^(\d_\d_\d)[a-z]*$/;
+	my ($tvnums) = $testversion =~ /^(\d_\d_\d)[a-z]*$/;
+
+	#Die if we can't parse the version numbers or they don't look sane
+	die "Invalid version number: $testversion and $currversion\n"
+		if (!defined($cvnums) || !defined($tvnums)
+			|| length($cvnums) != 5
+			|| length($tvnums) != 5);
+
+	#If the base versions (without letters) don't match check they only differ
+	#in the last number
+	if ($cvnums ne $tvnums) {
+		die "Invalid version number: $testversion "
+			."for current version $currversion\n"
+			if (substr($cvnums, 0, 4) ne substr($tvnums, 0, 4));
+		return;
+	}
+	#If we get here then the base version (i.e. the numbers) are the same - they
+	#only differ in the letters
+
+	$lentv = length $testversion;
+	$lencv = length $currversion;
+
+	#If the testversion has more letters than the current version then it must
+	#be later (or malformed)
+	if ($lentv > $lencv) {
+		die "Invalid version number: $testversion "
+			."is greater than $currversion\n";
+	}
+
+	#Get the last letter from the current version
+	my ($cvletter) = $currversion =~ /([a-z])$/;
+	if (defined $cvletter) {
+		($cvbase) = $currversion =~ /(\d_\d_\d[a-z]*)$cvletter$/;
+	} else {
+		$cvbase = $currversion;
+	}
+	die "Unable to parse version number $currversion" if (!defined $cvbase);
+	my $tvbase;
+	my ($tvletter) = $testversion =~ /([a-z])$/;
+	if (defined $tvletter) {
+		($tvbase) = $testversion =~ /(\d_\d_\d[a-z]*)$tvletter$/;
+	} else {
+		$tvbase = $testversion;
+	}
+	die "Unable to parse version number $testversion" if (!defined $tvbase);
+
+	if ($lencv > $lentv) {
+		#If current version has more letters than testversion then testversion
+		#minus the final letter must be a substring of the current version
+		die "Invalid version number $testversion "
+			."is greater than $currversion or is invalid\n"
+			if (index($cvbase, $tvbase) != 0);
+	} else {
+		#If both versions have the same number of letters then they must be
+		#equal up to the last letter, and the last letter in testversion must
+		#be less than or equal to the last letter in current version.
+		die "Invalid version number $testversion "
+			."is greater than $currversion\n"
+			if (($cvbase ne $tvbase) && ($tvletter gt $cvletter));
+	}
+}
+
+sub do_deprecated()
+{
+	my ($decl, $plats, $algs) = @_;
+	$decl =~ /^\s*(DEPRECATEDIN_\d+_\d+_\d+)\s*\((.*)\)\s*$/
+            or die "Bad DEPRECATEDIN: $decl\n";
+	my $info1 .= "#INFO:";
+	$info1 .= join(',', @{$plats}) . ":";
+	my $info2 = $info1;
+	$info1 .= join(',',@{$algs}, $1) . ";";
+	$info2 .= join(',',@{$algs}) . ";";
+	return $info1 . $2 . ";" . $info2;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/mkdir-p.pl b/trunk/3rdparty/openssl-1.1-fit/util/mkdir-p.pl
new file mode 100755
index 000000000..328060243
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/mkdir-p.pl
@@ -0,0 +1,44 @@
+#! /usr/bin/env perl
+# Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# On some systems, the -p option to mkdir (= also create any missing parent
+# directories) is not available.
+
+my $arg;
+
+foreach $arg (@ARGV) {
+  $arg =~ tr|\\|/|;
+  &do_mkdir_p($arg);
+}
+
+
+sub do_mkdir_p {
+  local($dir) = @_;
+
+  $dir =~ s|/*\Z(?!\n)||s;
+
+  if (-d $dir) {
+    return;
+  }
+
+  if ($dir =~ m|[^/]/|s) {
+    local($parent) = $dir;
+    $parent =~ s|[^/]*\Z(?!\n)||s;
+
+    do_mkdir_p($parent);
+  }
+
+  unless (mkdir($dir, 0777)) {
+    if (-d $dir) {
+      # We raced against another instance doing the same thing.
+      return;
+    }
+    die "Cannot create directory $dir: $!\n";
+  }
+  print "created directory `$dir'\n";
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/mkerr.pl b/trunk/3rdparty/openssl-1.1-fit/util/mkerr.pl
new file mode 100755
index 000000000..0ea02961a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/mkerr.pl
@@ -0,0 +1,753 @@
+#! /usr/bin/env perl
+# Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+use warnings;
+
+use lib ".";
+use configdata;
+
+my $config       = "crypto/err/openssl.ec";
+my $debug        = 0;
+my $internal     = 0;
+my $nowrite      = 0;
+my $rebuild      = 0;
+my $reindex      = 0;
+my $static       = 0;
+my $unref        = 0;
+my %modules         = ();
+
+my $errors       = 0;
+my @t            = localtime();
+my $YEAR         = $t[5] + 1900;
+
+sub phase
+{
+    my $text = uc(shift);
+    print STDERR "\n---\n$text\n" if $debug;
+}
+
+sub help
+{
+    print STDERR <<"EOF";
+mkerr.pl [options] [files...]
+
+Options:
+
+    -conf FILE  Use the named config file FILE instead of the default.
+
+    -debug      Verbose output debugging on stderr.
+
+    -internal   Generate code that is to be built as part of OpenSSL itself.
+                Also scans internal list of files.
+
+    -module M   Only useful with -internal!
+                Only write files for library module M.  Whether files are
+                actually written or not depends on other options, such as
+                -rebuild.
+                Note: this option is cumulative.  If not given at all, all
+                internal modules will be considered.
+
+    -nowrite    Do not write the header/source files, even if changed.
+
+    -rebuild    Rebuild all header and C source files, even if there
+                were no changes.
+
+    -reindex    Ignore previously assigned values (except for R records in
+                the config file) and renumber everything starting at 100.
+
+    -static     Make the load/unload functions static.
+
+    -unref      List all unreferenced function and reason codes on stderr;
+                implies -nowrite.
+
+    -help       Show this help text.
+
+    ...         Additional arguments are added to the file list to scan,
+                if '-internal' was NOT specified on the command line.
+
+EOF
+}
+
+while ( @ARGV ) {
+    my $arg = $ARGV[0];
+    last unless $arg =~ /-.*/;
+    $arg = $1 if $arg =~ /-(-.*)/;
+    if ( $arg eq "-conf" ) {
+        $config = $ARGV[1];
+        shift @ARGV;
+    } elsif ( $arg eq "-debug" ) {
+        $debug = 1;
+        $unref = 1;
+    } elsif ( $arg eq "-internal" ) {
+        $internal = 1;
+    } elsif ( $arg eq "-nowrite" ) {
+        $nowrite = 1;
+    } elsif ( $arg eq "-rebuild" ) {
+        $rebuild = 1;
+    } elsif ( $arg eq "-reindex" ) {
+        $reindex = 1;
+    } elsif ( $arg eq "-static" ) {
+        $static = 1;
+    } elsif ( $arg eq "-unref" ) {
+        $unref = 1;
+        $nowrite = 1;
+    } elsif ( $arg eq "-module" ) {
+        shift @ARGV;
+        $modules{uc $ARGV[0]} = 1;
+    } elsif ( $arg =~ /-*h(elp)?/ ) {
+        &help();
+        exit;
+    } elsif ( $arg =~ /-.*/ ) {
+        die "Unknown option $arg; use -h for help.\n";
+    }
+    shift @ARGV;
+}
+
+my @source;
+if ( $internal ) {
+    die "Cannot mix -internal and -static\n" if $static;
+    die "Extra parameters given.\n" if @ARGV;
+    @source = ( glob('crypto/*.c'), glob('crypto/*/*.c'),
+                glob('ssl/*.c'), glob('ssl/*/*.c') );
+} else {
+    die "-module isn't useful without -internal\n" if scalar keys %modules > 0;
+    @source = @ARGV;
+}
+
+# Data parsed out of the config and state files.
+my %hinc;       # lib -> header
+my %libinc;     # header -> lib
+my %cskip;      # error_file -> lib
+my %errorfile;  # lib -> error file name
+my %fmax;       # lib -> max assigned function code
+my %rmax;       # lib -> max assigned reason code
+my %fassigned;  # lib -> colon-separated list of assigned function codes
+my %rassigned;  # lib -> colon-separated list of assigned reason codes
+my %fnew;       # lib -> count of new function codes
+my %rnew;       # lib -> count of new reason codes
+my %rextra;     # "extra" reason code -> lib
+my %rcodes;     # reason-name -> value
+my %ftrans;     # old name -> #define-friendly name (all caps)
+my %fcodes;     # function-name -> value
+my $statefile;  # state file with assigned reason and function codes
+my %strings;    # define -> text
+
+# Read and parse the config file
+open(IN, "$config") || die "Can't open config file $config, $!,";
+while ( <IN> ) {
+    next if /^#/ || /^$/;
+    if ( /^L\s+(\S+)\s+(\S+)\s+(\S+)/ ) {
+        my $lib = $1;
+        my $hdr = $2;
+        my $err = $3;
+        $hinc{$lib}   = $hdr;
+        $libinc{$hdr} = $lib;
+        $cskip{$err}  = $lib;
+        next if $err eq 'NONE';
+        $errorfile{$lib} = $err;
+        $fmax{$lib}      = 100;
+        $rmax{$lib}      = 100;
+        $fassigned{$lib} = ":";
+        $rassigned{$lib} = ":";
+        $fnew{$lib}      = 0;
+        $rnew{$lib}      = 0;
+    } elsif ( /^R\s+(\S+)\s+(\S+)/ ) {
+        $rextra{$1} = $2;
+        $rcodes{$1} = $2;
+    } elsif ( /^S\s+(\S+)/ ) {
+        $statefile = $1;
+    } else {
+        die "Illegal config line $_\n";
+    }
+}
+close IN;
+
+if ( ! $statefile ) {
+    $statefile = $config;
+    $statefile =~ s/.ec/.txt/;
+}
+
+# The statefile has all the previous assignments.
+&phase("Reading state");
+my $skippedstate = 0;
+if ( ! $reindex && $statefile ) {
+    open(STATE, "<$statefile") || die "Can't open $statefile, $!";
+
+    # Scan function and reason codes and store them: keep a note of the
+    # maximum code used.
+    while ( <STATE> ) {
+        next if /^#/ || /^$/;
+        my $name;
+        my $code;
+        if ( /^(.+):(\d+):\\$/ ) {
+            $name = $1;
+            $code = $2;
+            my $next = <STATE>;
+            $next =~ s/^\s*(.*)\s*$/$1/;
+            die "Duplicate define $name" if exists $strings{$name};
+            $strings{$name} = $next;
+        } elsif ( /^(\S+):(\d+):(.*)$/ ) {
+            $name = $1;
+            $code = $2;
+            die "Duplicate define $name" if exists $strings{$name};
+            $strings{$name} = $3;
+        } else {
+            die "Bad line in $statefile:\n$_\n";
+        }
+        my $lib = $name;
+        $lib =~ s/^((?:OSSL_|OPENSSL_)?[^_]{2,}).*$/$1/;
+        $lib = "SSL" if $lib =~ /TLS/;
+        if ( !defined $errorfile{$lib} ) {
+            print "Skipping $_";
+            $skippedstate++;
+            next;
+        }
+        if ( $name =~ /^(?:OSSL_|OPENSSL_)?[A-Z0-9]{2,}_R_/ ) {
+            die "$lib reason code $code collision at $name\n"
+                if $rassigned{$lib} =~ /:$code:/;
+            $rassigned{$lib} .= "$code:";
+            if ( !exists $rextra{$name} ) {
+                $rmax{$lib} = $code if $code > $rmax{$lib};
+            }
+            $rcodes{$name} = $code;
+        } elsif ( $name =~ /^(?:OSSL_|OPENSSL_)?[A-Z0-9]{2,}_F_/ ) {
+            die "$lib function code $code collision at $name\n"
+                if $fassigned{$lib} =~ /:$code:/;
+            $fassigned{$lib} .= "$code:";
+            $fmax{$lib} = $code if $code > $fmax{$lib};
+            $fcodes{$name} = $code;
+        } else {
+            die "Bad line in $statefile:\n$_\n";
+        }
+    }
+    close(STATE);
+
+    if ( $debug ) {
+        foreach my $lib ( sort keys %rmax ) {
+            print STDERR "Reason codes for ${lib}:\n";
+            if ( $rassigned{$lib} =~ m/^:(.*):$/ ) {
+                my @rassigned = sort { $a <=> $b } split( ":", $1 );
+                print STDERR "  ", join(' ', @rassigned), "\n";
+            } else {
+                print STDERR "  --none--\n";
+            }
+        }
+        print STDERR "\n";
+        foreach my $lib ( sort keys %fmax ) {
+            print STDERR "Function codes for ${lib}:\n";
+            if ( $fassigned{$lib} =~ m/^:(.*):$/ ) {
+                my @fassigned = sort { $a <=> $b } split( ":", $1 );
+                print STDERR "  ", join(' ', @fassigned), "\n";
+            } else {
+                print STDERR "  --none--\n";
+            }
+        }
+    }
+}
+
+# Scan each header file and make a list of error codes
+# and function names
+&phase("Scanning headers");
+while ( ( my $hdr, my $lib ) = each %libinc ) {
+    next if $hdr eq "NONE";
+    print STDERR " ." if $debug;
+    my $line = "";
+    my $def = "";
+    my $linenr = 0;
+    my $cpp = 0;
+
+    open(IN, "<$hdr") || die "Can't open $hdr, $!,";
+    while ( <IN> ) {
+        $linenr++;
+
+        if ( $line ne '' ) {
+            $_    = $line . $_;
+            $line = '';
+        }
+
+        if ( /\\$/ ) {
+            $line = $_;
+            next;
+        }
+
+        if ( /\/\*/ ) {
+            if ( not /\*\// ) {    # multiline comment...
+                $line = $_;        # ... just accumulate
+                next;
+            } else {
+                s/\/\*.*?\*\///gs;    # wipe it
+            }
+        }
+
+        if ( $cpp ) {
+            $cpp++ if /^#\s*if/;
+            $cpp-- if /^#\s*endif/;
+            next;
+        }
+        $cpp = 1 if /^#.*ifdef.*cplusplus/;    # skip "C" declaration
+
+        next if /^\#/;    # skip preprocessor directives
+
+        s/{[^{}]*}//gs;     # ignore {} blocks
+
+        if ( /\{|\/\*/ ) {    # Add a so editor works...
+            $line = $_;
+        } else {
+            $def .= $_;
+        }
+    }
+
+    # Delete any DECLARE_ macros
+    my $defnr = 0;
+    $def =~ s/DECLARE_\w+\([\w,\s]+\)//gs;
+    foreach ( split /;/, $def ) {
+        $defnr++;
+        # The goal is to collect function names from function declarations.
+
+        s/^[\n\s]*//g;
+        s/[\n\s]*$//g;
+
+        # Skip over recognized non-function declarations
+        next if /typedef\W/ or /DECLARE_STACK_OF/ or /TYPEDEF_.*_OF/;
+
+        # Remove STACK_OF(foo)
+        s/STACK_OF\(\w+\)/void/;
+
+        # Reduce argument lists to empty ()
+        # fold round brackets recursively: (t(*v)(t),t) -> (t{}{},t) -> {}
+        while ( /\(.*\)/s ) {
+            s/\([^\(\)]+\)/\{\}/gs;
+            s/\(\s*\*\s*(\w+)\s*\{\}\s*\)/$1/gs;    #(*f{}) -> f
+        }
+
+        # pretend as we didn't use curly braces: {} -> ()
+        s/\{\}/\(\)/gs;
+
+        # Last token just before the first () is a function name.
+        if ( /(\w+)\s*\(\).*/s ) {
+            my $name = $1;
+            $name =~ tr/[a-z]/[A-Z]/;
+            $ftrans{$name} = $1;
+        } elsif ( /[\(\)]/ and not(/=/) ) {
+            print STDERR "Header $hdr: cannot parse: $_;\n";
+        }
+    }
+
+    next if $reindex;
+
+    if ( $lib eq "SSL" && $rmax{$lib} >= 1000 ) {
+        print STDERR "SSL error codes 1000+ are reserved for alerts.\n";
+        print STDERR "Any new alerts must be added to $config.\n";
+        $errors++;
+    }
+    close IN;
+}
+print STDERR "\n" if $debug;
+
+# Scan each C source file and look for function and reason codes
+# This is done by looking for strings that "look like" function or
+# reason codes: basically anything consisting of all upper case and
+# numerics which has _F_ or _R_ in it and which has the name of an
+# error library at the start.  This seems to work fine except for the
+# oddly named structure BIO_F_CTX which needs to be ignored.
+# If a code doesn't exist in list compiled from headers then mark it
+# with the value "X" as a place holder to give it a value later.
+# Store all function and reason codes found in %usedfuncs and %usedreasons
+# so all those unreferenced can be printed out.
+&phase("Scanning source");
+my %usedfuncs;
+my %usedreasons;
+foreach my $file ( @source ) {
+    # Don't parse the error source file.
+    next if exists $cskip{$file};
+    open( IN, "<$file" ) || die "Can't open $file, $!,";
+    my $func;
+    my $linenr = 0;
+    print STDERR "$file:\n" if $debug;
+    while ( <IN> ) {
+
+        # skip obsoleted source files entirely!
+        last if /^#error\s+obsolete/;
+        $linenr++;
+        if ( !/;$/ && /^\**([a-zA-Z_].*[\s*])?([A-Za-z_0-9]+)\(.*([),]|$)/ ) {
+            /^([^()]*(\([^()]*\)[^()]*)*)\(/;
+            $1 =~ /([A-Za-z_0-9]*)$/;
+            $func = $1;
+        }
+
+        if ( /(((?:OSSL_|OPENSSL_)?[A-Z0-9]{2,})_F_([A-Z0-9_]+))/ ) {
+            next unless exists $errorfile{$2};
+            next if $1 eq "BIO_F_BUFFER_CTX";
+            $usedfuncs{$1} = 1;
+            if ( !exists $fcodes{$1} ) {
+                print STDERR "  New function $1\n" if $debug;
+                $fcodes{$1} = "X";
+                $fnew{$2}++;
+            }
+            $ftrans{$3} = $func unless exists $ftrans{$3};
+            if ( uc($func) ne $3 ) {
+                print STDERR "ERROR: mismatch $file:$linenr $func:$3\n";
+                $errors++;
+            }
+            print STDERR "  Function $1 = $fcodes{$1}\n"
+              if $debug;
+        }
+        if ( /(((?:OSSL_|OPENSSL_)?[A-Z0-9]{2,})_R_[A-Z0-9_]+)/ ) {
+            next unless exists $errorfile{$2};
+            $usedreasons{$1} = 1;
+            if ( !exists $rcodes{$1} ) {
+                print STDERR "  New reason $1\n" if $debug;
+                $rcodes{$1} = "X";
+                $rnew{$2}++;
+            }
+            print STDERR "  Reason $1 = $rcodes{$1}\n" if $debug;
+        }
+    }
+    close IN;
+}
+print STDERR "\n" if $debug;
+
+# Now process each library in turn.
+&phase("Writing files");
+my $newstate = 0;
+foreach my $lib ( keys %errorfile ) {
+    if ( ! $fnew{$lib} && ! $rnew{$lib} ) {
+        next unless $rebuild;
+    }
+    next if scalar keys %modules > 0 && !$modules{$lib};
+    next if $nowrite;
+    print STDERR "$lib: $fnew{$lib} new functions\n" if $fnew{$lib};
+    print STDERR "$lib: $rnew{$lib} new reasons\n" if $rnew{$lib};
+    $newstate = 1;
+
+    # If we get here then we have some new error codes so we
+    # need to rebuild the header file and C file.
+
+    # Make a sorted list of error and reason codes for later use.
+    my @function = sort grep( /^${lib}_/, keys %fcodes );
+    my @reasons  = sort grep( /^${lib}_/, keys %rcodes );
+
+    # indent level for innermost preprocessor lines
+    my $indent = " ";
+
+    # Rewrite the header file
+
+    my $hfile = $hinc{$lib};
+    $hfile =~ s/.h$/err.h/ if $internal;
+    open( OUT, ">$hfile" ) || die "Can't write to $hfile, $!,";
+    print OUT <<"EOF";
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-$YEAR The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the \"License\").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#ifndef HEADER_${lib}ERR_H
+# define HEADER_${lib}ERR_H
+
+EOF
+    if ( $internal ) {
+        # Declare the load function because the generate C file
+        # includes "fooerr.h" not "foo.h"
+        if ($lib ne "SSL" && $lib ne "ASYNC"
+                && grep { $lib eq uc $_ } @disablables) {
+            print OUT <<"EOF";
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_${lib}
+
+EOF
+            $indent = "  ";
+        }
+        print OUT <<"EOF";
+#${indent}ifdef  __cplusplus
+extern \"C\"
+#${indent}endif
+int ERR_load_${lib}_strings(void);
+EOF
+    } else {
+        print OUT <<"EOF";
+# define ${lib}err(f, r) ERR_${lib}_error((f), (r), OPENSSL_FILE, OPENSSL_LINE)
+
+EOF
+        if ( ! $static ) {
+            print OUT <<"EOF";
+
+# ifdef  __cplusplus
+extern \"C\" {
+# endif
+int ERR_load_${lib}_strings(void);
+void ERR_unload_${lib}_strings(void);
+void ERR_${lib}_error(int function, int reason, char *file, int line);
+# ifdef  __cplusplus
+}
+# endif
+EOF
+        }
+    }
+
+    print OUT "\n/*\n * $lib function codes.\n */\n";
+    foreach my $i ( @function ) {
+        my $z = 48 - length($i);
+        $z = 0 if $z < 0;
+        if ( $fcodes{$i} eq "X" ) {
+            $fassigned{$lib} =~ m/^:([^:]*):/;
+            my $findcode = $1;
+            $findcode = $fmax{$lib} if !defined $findcode;
+            while ( $fassigned{$lib} =~ m/:$findcode:/ ) {
+                $findcode++;
+            }
+            $fcodes{$i} = $findcode;
+            $fassigned{$lib} .= "$findcode:";
+            print STDERR "New Function code $i\n" if $debug;
+        }
+        printf OUT "#${indent}define $i%s $fcodes{$i}\n", " " x $z;
+    }
+
+    print OUT "\n/*\n * $lib reason codes.\n */\n";
+    foreach my $i ( @reasons ) {
+        my $z = 48 - length($i);
+        $z = 0 if $z < 0;
+        if ( $rcodes{$i} eq "X" ) {
+            $rassigned{$lib} =~ m/^:([^:]*):/;
+            my $findcode = $1;
+            $findcode = $rmax{$lib} if !defined $findcode;
+            while ( $rassigned{$lib} =~ m/:$findcode:/ ) {
+                $findcode++;
+            }
+            $rcodes{$i} = $findcode;
+            $rassigned{$lib} .= "$findcode:";
+            print STDERR "New Reason code $i\n" if $debug;
+        }
+        printf OUT "#${indent}define $i%s $rcodes{$i}\n", " " x $z;
+    }
+    print OUT "\n";
+
+    while (length($indent) > 0) {
+        $indent = substr $indent, 0, -1;
+        print OUT "#${indent}endif\n";
+    }
+
+    # Rewrite the C source file containing the error details.
+
+    # First, read any existing reason string definitions:
+    my $cfile = $errorfile{$lib};
+    my $pack_lib = $internal ? "ERR_LIB_${lib}" : "0";
+    my $hincf = $hfile;
+    $hincf =~ s|.*include/||;
+    if ( $hincf =~ m|^openssl/| ) {
+        $hincf = "<${hincf}>";
+    } else {
+        $hincf = "\"${hincf}\"";
+    }
+
+    open( OUT, ">$cfile" )
+        || die "Can't open $cfile for writing, $!, stopped";
+
+    my $const = $internal ? 'const ' : '';
+
+    print OUT <<"EOF";
+/*
+ * Generated by util/mkerr.pl DO NOT EDIT
+ * Copyright 1995-$YEAR The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <openssl/err.h>
+#include $hincf
+
+#ifndef OPENSSL_NO_ERR
+
+static ${const}ERR_STRING_DATA ${lib}_str_functs[] = {
+EOF
+
+    # Add each function code: if a function name is found then use it.
+    foreach my $i ( @function ) {
+        my $fn;
+        if ( exists $strings{$i} and $strings{$i} ne '' ) {
+            $fn = $strings{$i};
+            $fn = "" if $fn eq '*';
+        } else {
+            $i =~ /^${lib}_F_(\S+)$/;
+            $fn = $1;
+            $fn = $ftrans{$fn} if exists $ftrans{$fn};
+            $strings{$i} = $fn;
+        }
+        my $short = "    {ERR_PACK($pack_lib, $i, 0), \"$fn\"},";
+        if ( length($short) <= 80 ) {
+            print OUT "$short\n";
+        } else {
+            print OUT "    {ERR_PACK($pack_lib, $i, 0),\n     \"$fn\"},\n";
+        }
+    }
+    print OUT <<"EOF";
+    {0, NULL}
+};
+
+static ${const}ERR_STRING_DATA ${lib}_str_reasons[] = {
+EOF
+
+    # Add each reason code.
+    foreach my $i ( @reasons ) {
+        my $rn;
+        if ( exists $strings{$i} ) {
+            $rn = $strings{$i};
+            $rn = "" if $rn eq '*';
+        } else {
+            $i =~ /^${lib}_R_(\S+)$/;
+            $rn = $1;
+            $rn =~ tr/_[A-Z]/ [a-z]/;
+            $strings{$i} = $rn;
+        }
+        my $short = "    {ERR_PACK($pack_lib, 0, $i), \"$rn\"},";
+        if ( length($short) <= 80 ) {
+            print OUT "$short\n";
+        } else {
+            print OUT "    {ERR_PACK($pack_lib, 0, $i),\n    \"$rn\"},\n";
+        }
+    }
+    print OUT <<"EOF";
+    {0, NULL}
+};
+
+#endif
+EOF
+    if ( $internal ) {
+        print OUT <<"EOF";
+
+int ERR_load_${lib}_strings(void)
+{
+#ifndef OPENSSL_NO_ERR
+    if (ERR_func_error_string(${lib}_str_functs[0].error) == NULL) {
+        ERR_load_strings_const(${lib}_str_functs);
+        ERR_load_strings_const(${lib}_str_reasons);
+    }
+#endif
+    return 1;
+}
+EOF
+    } else {
+        my $st = $static ? "static " : "";
+        print OUT <<"EOF";
+
+static int lib_code = 0;
+static int error_loaded = 0;
+
+${st}int ERR_load_${lib}_strings(void)
+{
+    if (lib_code == 0)
+        lib_code = ERR_get_next_error_library();
+
+    if (!error_loaded) {
+#ifndef OPENSSL_NO_ERR
+        ERR_load_strings(lib_code, ${lib}_str_functs);
+        ERR_load_strings(lib_code, ${lib}_str_reasons);
+#endif
+        error_loaded = 1;
+    }
+    return 1;
+}
+
+${st}void ERR_unload_${lib}_strings(void)
+{
+    if (error_loaded) {
+#ifndef OPENSSL_NO_ERR
+        ERR_unload_strings(lib_code, ${lib}_str_functs);
+        ERR_unload_strings(lib_code, ${lib}_str_reasons);
+#endif
+        error_loaded = 0;
+    }
+}
+
+${st}void ERR_${lib}_error(int function, int reason, char *file, int line)
+{
+    if (lib_code == 0)
+        lib_code = ERR_get_next_error_library();
+    ERR_PUT_error(lib_code, function, reason, file, line);
+}
+EOF
+
+    }
+
+    close OUT;
+}
+
+&phase("Ending");
+# Make a list of unreferenced function and reason codes
+if ( $unref ) {
+    my @funref;
+    foreach ( keys %fcodes ) {
+        push( @funref, $_ ) unless exists $usedfuncs{$_};
+    }
+    my @runref;
+    foreach ( keys %rcodes ) {
+        push( @runref, $_ ) unless exists $usedreasons{$_};
+    }
+    if ( @funref ) {
+        print STDERR "The following function codes were not referenced:\n";
+        foreach ( sort @funref ) {
+            print STDERR "  $_\n";
+        }
+    }
+    if ( @runref ) {
+        print STDERR "The following reason codes were not referenced:\n";
+        foreach ( sort @runref ) {
+            print STDERR "  $_\n";
+        }
+    }
+}
+
+die "Found $errors errors, quitting" if $errors;
+
+# Update the state file
+if ( $newstate )  {
+    open(OUT, ">$statefile.new")
+        || die "Can't write $statefile.new, $!";
+    print OUT <<"EOF";
+# Copyright 1999-$YEAR The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+EOF
+    print OUT "\n# Function codes\n";
+    foreach my $i ( sort keys %fcodes ) {
+        my $short = "$i:$fcodes{$i}:";
+        my $t = exists $strings{$i} ? $strings{$i} : "";
+        $t = "\\\n\t" . $t if length($short) + length($t) > 80;
+        print OUT "$short$t\n";
+    }
+    print OUT "\n#Reason codes\n";
+    foreach my $i ( sort keys %rcodes ) {
+        my $short = "$i:$rcodes{$i}:";
+        my $t = exists $strings{$i} ? "$strings{$i}" : "";
+        $t = "\\\n\t" . $t if length($short) + length($t) > 80;
+        print OUT "$short$t\n" if !exists $rextra{$i};
+    }
+    close(OUT);
+    if ( $skippedstate ) {
+        print "Skipped state, leaving update in $statefile.new";
+    } else {
+        rename "$statefile", "$statefile.old"
+            || die "Can't backup $statefile to $statefile.old, $!";
+        rename "$statefile.new", "$statefile"
+            || die "Can't rename $statefile to $statefile.new, $!";
+    }
+}
+
+exit;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/mkrc.pl b/trunk/3rdparty/openssl-1.1-fit/util/mkrc.pl
new file mode 100755
index 000000000..6762bc4a5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/mkrc.pl
@@ -0,0 +1,93 @@
+#! /usr/bin/env perl
+# Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+use warnings;
+use lib ".";
+use configdata;
+use File::Spec::Functions;
+
+my $versionfile = catfile( $config{sourcedir}, "include/openssl/opensslv.h" );
+
+my ( $ver, $v1, $v2, $v3, $v4, $beta, $version );
+
+open FD, $versionfile or die "Couldn't open include/openssl/opensslv.h: $!\n";
+while (<FD>) {
+    if (/OPENSSL_VERSION_NUMBER\s+(0x[0-9a-f]+)/i) {
+        $ver     = hex($1);
+        $v1      = ( $ver >> 28 );
+        $v2      = ( $ver >> 20 ) & 0xff;
+        $v3      = ( $ver >> 12 ) & 0xff;
+        $v4      = ( $ver >>  4 ) & 0xff;
+        $beta    = $ver & 0xf;
+        $version = "$v1.$v2.$v3";
+        if ( $beta == 0xf ) {
+            $version .= chr( ord('a') + $v4 - 1 ) if ($v4);
+        } elsif ( $beta == 0 ) {
+            $version .= "-dev";
+        } else {
+            $version .= "-beta$beta";
+        }
+        last;
+    }
+}
+close(FD);
+
+my $filename = $ARGV[0];
+my $description = "OpenSSL library";
+my $vft = "VFT_DLL";
+if ( $filename =~ /openssl/i ) {
+    $description = "OpenSSL application";
+    $vft = "VFT_APP";
+}
+
+my $YEAR = [localtime()]->[5] + 1900;
+print <<___;
+#include <winver.h>
+
+LANGUAGE 0x09,0x01
+
+1 VERSIONINFO
+  FILEVERSION $v1,$v2,$v3,$v4
+  PRODUCTVERSION $v1,$v2,$v3,$v4
+  FILEFLAGSMASK 0x3fL
+#ifdef _DEBUG
+  FILEFLAGS 0x01L
+#else
+  FILEFLAGS 0x00L
+#endif
+  FILEOS VOS__WINDOWS32
+  FILETYPE $vft
+  FILESUBTYPE 0x0L
+BEGIN
+    BLOCK "StringFileInfo"
+    BEGIN
+        BLOCK "040904b0"
+        BEGIN
+            // Required:
+            VALUE "CompanyName", "The OpenSSL Project, https://www.openssl.org/\\0"
+            VALUE "FileDescription", "$description\\0"
+            VALUE "FileVersion", "$version\\0"
+            VALUE "InternalName", "$filename\\0"
+            VALUE "OriginalFilename", "$filename\\0"
+            VALUE "ProductName", "The OpenSSL Toolkit\\0"
+            VALUE "ProductVersion", "$version\\0"
+            // Optional:
+            //VALUE "Comments", "\\0"
+            VALUE "LegalCopyright", "Copyright 1998-$YEAR The OpenSSL Authors. All rights reserved.\\0"
+            //VALUE "LegalTrademarks", "\\0"
+            //VALUE "PrivateBuild", "\\0"
+            //VALUE "SpecialBuild", "\\0"
+        END
+    END
+    BLOCK "VarFileInfo"
+    BEGIN
+        VALUE "Translation", 0x409, 0x4b0
+    END
+END
+___
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/openssl-format-source b/trunk/3rdparty/openssl-1.1-fit/util/openssl-format-source
new file mode 100755
index 000000000..e39964420
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/openssl-format-source
@@ -0,0 +1,175 @@
+#!/bin/sh
+#
+# Copyright 2015-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+#
+# openssl-format-source
+# - format source tree according to OpenSSL coding style using indent
+#
+# usage:
+#   openssl-format-source [-v] [-n] [file|directory] ...
+#
+# note: the indent options assume GNU indent v2.2.10 which was released
+#       Feb-2009 so if you have an older indent the options may not
+#	match what is expected
+#
+# any marked block comment blocks have to be moved to align manually after
+# the reformatting has been completed as marking a block causes indent to
+# not move it at all ...
+#
+
+PATH=/usr/local/bin:/bin:/usr/bin:$PATH
+export PATH
+HERE="`dirname $0`"
+
+set -e
+
+INDENT=indent
+uname -s | grep BSD > /dev/null && type gindent > /dev/null 2>&1 && INDENT=gindent
+
+if [ $# -eq 0 ]; then
+  echo "usage: $0 [-v] [-n] [-c] [sourcefile|sourcedir] ..." >&2
+  exit 1
+fi
+
+VERBOSE=false
+DONT=false
+STOPARGS=false
+COMMENTS=false
+CHANGED=false
+DEBUG=""
+
+# for this exercise, we want to force the openssl style, so we roll
+# our own indent profile, which is at a well known location
+INDENT_PROFILE="$HERE/indent.pro"
+export INDENT_PROFILE
+if [ ! -f "$INDENT_PROFILE" ]; then
+  echo "$0: unable to locate the openssl indent.pro file" >&2
+  exit 1
+fi
+
+# Extra arguments; for adding the comment-formatting
+INDENT_ARGS=""
+for i
+do
+  if [ "$STOPARGS" != "true" ]; then
+    case $i in
+      --) STOPARGS="true"; continue;;
+      -n) DONT="true"; continue;;
+      -v) VERBOSE="true";
+	  echo "INDENT_PROFILE=$INDENT_PROFILE";
+	  continue;;
+      -c) COMMENTS="true";
+      	  INDENT_ARGS="-fc1 -fca -cdb -sc";
+	  continue;;
+      -nc) COMMENTS="true";
+	  continue;;
+      -d) DEBUG='eval tee "$j.pre" |'
+	  continue;;
+    esac
+  fi
+
+  if [ -d "$i" ]; then
+    LIST=`find "$i" -name '*.[ch]' -print`
+  else
+    if [ ! -f "$i" ]; then
+      echo "$0: source file not found: $i" >&2
+      exit 1
+    fi
+    LIST="$i"
+  fi
+
+  for j in $LIST
+  do
+    # ignore symlinks - we only ever process the base file - so if we
+    # expand a directory tree we need to ignore any located symlinks
+    if [ -d "$i" ]; then
+      if [ -h "$j" ]; then
+	continue;
+      fi
+    fi
+
+    if [ "$DONT" = "false" ]; then
+      tmp=$(mktemp /tmp/indent.XXXXXX)
+      trap 'rm -f "$tmp"' HUP INT TERM EXIT
+
+      case `basename $j` in
+	# the list of files that indent is unable to handle correctly
+	# that we simply leave alone for manual formatting now
+	obj_dat.h|aes_core.c|aes_x86core.c|ecp_nistz256.c)
+	  echo "skipping $j"
+	  ;;
+	*)
+	  if [ "$COMMENTS" = "true" ]; then
+	    # we have to mark single line comments as /*- ...*/ to stop indent
+	    # messing with them, run expand then indent as usual but with the
+	    # the process-comments options and then undo that marking, and then
+	    # finally re-run indent without process-comments so the marked-to-
+	    # be-ignored comments we did automatically end up getting moved
+	    # into the right position within the code as indent leaves marked
+	    # comments entirely untouched - we appear to have no way to avoid
+	    # the double processing and get the desired output
+	    cat "$j" | \
+	    expand | \
+	    perl -0 -np \
+	      -e 's/(\n#[ \t]*ifdef[ \t]+__cplusplus\n[^\n]*\n#[ \t]*endif\n)/\n\/**INDENT-OFF**\/$1\/**INDENT-ON**\/\n/g;' \
+	      -e 's/(\n\/\*\!)/\n\/**/g;' \
+	      -e 's/(STACK_OF|LHASH_OF)\(([^ \t,\)]+)\)( |\n)/$1_$2_$3/g;' \
+	      | \
+	    perl -np \
+	      -e 's/^([ \t]*)\/\*([ \t]+.*)\*\/[ \t]*$/my ($x1,$x2) = ($1, $2); if (length("$x1$x2")<75 && $x2 !~ m#^\s*\*INDENT-(ON|OFF)\*\s*$#) {$c="-"}else{$c=""}; "$x1\/*$c$x2*\/"/e;' \
+	      -e 's/^\/\* ((Copyright|=|----).*)$/\/*-$1/;' \
+	      -e 's/^((DECLARE|IMPLEMENT)_.*)$/\/**INDENT-OFF**\/\n$1\n\/**INDENT-ON**\//;' \
+	      -e 's/^([ \t]*(make_dh|make_dh_bn|make_rfc5114_td)\(.*\)[ \t,]*)$/\/**INDENT-OFF**\/\n$1\n\/**INDENT-ON**\//;' \
+	      -e 's/^(ASN1_ADB_TEMPLATE\(.*)$/\/**INDENT-OFF**\/\n$1\n\/**INDENT-ON**\//;' \
+	      -e 's/^((ASN1|ADB)_.*_(end|END)\(.*[\){=,;]+[ \t]*)$/$1\n\/**INDENT-ON**\//;' \
+	      -e '/ASN1_(ITEM_ref|ITEM_ptr|ITEM_rptr|PCTX)/ || s/^((ASN1|ADB)_[^\*]*[){=,]+[ \t]*)$/\/**INDENT-OFF**\/\n$1/;' \
+	      -e 's/^(} (ASN1|ADB)_[^\*]*[\){=,;]+)$/$1\n\/**INDENT-ON**\//;' \
+	      | \
+	      $DEBUG $INDENT $INDENT_ARGS | \
+	      perl -np \
+		-e 's/^([ \t]*)\/\*-(.*)\*\/[ \t]*$/$1\/*$2*\//;' \
+		-e 's/^\/\*-((Copyright|=|----).*)$/\/* $1/;' \
+	      | $INDENT | \
+	      perl -0 -np \
+		-e 's/\/\*\*INDENT-(ON|OFF)\*\*\/\n//g;' \
+	      | perl -np \
+	        -e 's/(STACK_OF|LHASH_OF)_([^ \t,]+)_( |\/)/$1($2)$3/g;' \
+	        -e 's/(STACK_OF|LHASH_OF)_([^ \t,]+)_$/$1($2)/g;' \
+	      | perl "$HERE"/su-filter.pl \
+	      > "$tmp"
+	  else
+	    expand "$j" | $INDENT $INDENT_ARGS > "$tmp"
+	  fi;
+	  if cmp -s "$tmp" "$j"; then
+	    if [ "$VERBOSE" = "true" ]; then
+	      echo "$j unchanged"
+	    fi
+	    rm "$tmp"
+	  else
+	    if [ "$VERBOSE" = "true" ]; then
+	      echo "$j changed"
+	    fi
+	    CHANGED=true
+	    mv "$tmp" "$j"
+	  fi
+	  ;;
+      esac
+    fi
+  done
+done
+
+
+if [ "$VERBOSE" = "true" ]; then
+  echo
+  if [ "$CHANGED" = "true" ]; then
+    echo "SOURCE WAS MODIFIED"
+  else
+    echo "SOURCE WAS NOT MODIFIED"
+  fi
+fi
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/openssl-update-copyright b/trunk/3rdparty/openssl-1.1-fit/util/openssl-update-copyright
new file mode 100755
index 000000000..c432f8462
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/openssl-update-copyright
@@ -0,0 +1,63 @@
+#!/usr/bin/env bash
+#
+# Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+myname="$(basename $0)"
+
+this_year="$(date '+%Y')"
+some_year="[12][0-9][0-9][0-9]"
+year_range="(${some_year})(-${some_year})?"
+
+copyright_owner="The OpenSSL Project"
+copyright="Copyright .*${year_range} .*${copyright_owner}"
+
+# sed_script:
+#   for all lines that contain ${copyright} : {
+#     replace years yyyy-zzzz (or year yyyy) by yyyy-${this_year}
+#     replace repeated years yyyy-yyyy by yyyy
+#   }
+sed_script="/${copyright}/{ s/${year_range}/\1-${this_year}/ ; s/(${some_year})-\1/\1/ }"
+
+function usage() {
+	cat >&2 <<EOF
+usage: $myname [-h|--help] [file|directory] ...
+
+Updates the year ranges of all OpenSSL copyright statements in the given
+files or directories. (Directories are traversed recursively.)
+EOF
+}
+
+if [ $# -eq 0 ]; then
+	usage
+	exit 0
+fi
+
+
+for arg in "$@"; do
+	case $arg in
+		-h|--help)
+			usage
+			exit 0
+			;;
+		-*)
+			echo -e "illegal option: $arg\n" >& 2
+			usage
+			exit 1
+			;;
+		*)
+			if [ -f "$arg" ]; then
+				sed -E -i "${sed_script}" "$arg"
+			elif [ -d "$arg" ]; then
+				find "$arg" -name '.[a-z]*' -prune -o -type f -exec sed -E -i "${sed_script}" {} +
+			else
+				echo "$arg: no such file or directory" >&2
+			fi
+			;;
+	esac
+done
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/opensslwrap.sh b/trunk/3rdparty/openssl-1.1-fit/util/opensslwrap.sh
new file mode 100755
index 000000000..b27cbb897
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/opensslwrap.sh
@@ -0,0 +1,26 @@
+#!/bin/sh
+
+HERE="`echo $0 | sed -e 's|[^/]*$||'`"
+OPENSSL="${HERE}../apps/openssl"
+
+if [ -d "${HERE}../engines" -a "x$OPENSSL_ENGINES" = "x" ]; then
+	OPENSSL_ENGINES="${HERE}../engines"; export OPENSSL_ENGINES
+fi
+
+if [ -x "${OPENSSL}.exe" ]; then
+	# The original reason for this script existence is to work around
+	# certain caveats in run-time linker behaviour. On Windows platforms
+	# adjusting $PATH used to be sufficient, but with introduction of
+	# SafeDllSearchMode in XP/2003 the only way to get it right in
+	# *all* possible situations is to copy newly built .DLLs to apps/
+	# and test/, which is now done elsewhere... The $PATH is adjusted
+	# for backward compatibility (and nostagical reasons:-).
+	if [ "$OSTYPE" != msdosdjgpp ]; then
+		PATH="${HERE}..:$PATH"; export PATH
+	fi
+	exec "${OPENSSL}.exe" "$@"
+elif [ -x "${OPENSSL}" -a -x "${HERE}shlib_wrap.sh" ]; then
+	exec "${HERE}shlib_wrap.sh" "${OPENSSL}" "$@"
+else
+	exec "${OPENSSL}" "$@"	# hope for the best...
+fi
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Glob.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Glob.pm
new file mode 100644
index 000000000..ec87da4ae
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Glob.pm
@@ -0,0 +1,21 @@
+package OpenSSL::Glob;
+
+use strict;
+use warnings;
+
+use File::Glob;
+
+use Exporter;
+use vars qw($VERSION @ISA @EXPORT);
+
+$VERSION = '0.1';
+@ISA = qw(Exporter);
+@EXPORT = qw(glob);
+
+sub glob {
+    goto &File::Glob::bsd_glob if $^O ne "VMS";
+    goto &CORE::glob;
+}
+
+1;
+__END__
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Test.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Test.pm
new file mode 100644
index 000000000..9564b2604
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Test.pm
@@ -0,0 +1,1216 @@
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+package OpenSSL::Test;
+
+use strict;
+use warnings;
+
+use Test::More 0.96;
+
+use Exporter;
+use vars qw($VERSION @ISA @EXPORT @EXPORT_OK %EXPORT_TAGS);
+$VERSION = "0.8";
+@ISA = qw(Exporter);
+@EXPORT = (@Test::More::EXPORT, qw(setup run indir cmd app fuzz test
+                                   perlapp perltest subtest));
+@EXPORT_OK = (@Test::More::EXPORT_OK, qw(bldtop_dir bldtop_file
+                                         srctop_dir srctop_file
+                                         data_file data_dir
+                                         pipe with cmdstr quotify
+                                         openssl_versions));
+
+=head1 NAME
+
+OpenSSL::Test - a private extension of Test::More
+
+=head1 SYNOPSIS
+
+  use OpenSSL::Test;
+
+  setup("my_test_name");
+
+  ok(run(app(["openssl", "version"])), "check for openssl presence");
+
+  indir "subdir" => sub {
+    ok(run(test(["sometest", "arg1"], stdout => "foo.txt")),
+       "run sometest with output to foo.txt");
+  };
+
+=head1 DESCRIPTION
+
+This module is a private extension of L<Test::More> for testing OpenSSL.
+In addition to the Test::More functions, it also provides functions that
+easily find the diverse programs within a OpenSSL build tree, as well as
+some other useful functions.
+
+This module I<depends> on the environment variables C<$TOP> or C<$SRCTOP>
+and C<$BLDTOP>.  Without one of the combinations it refuses to work.
+See L</ENVIRONMENT> below.
+
+With each test recipe, a parallel data directory with (almost) the same name
+as the recipe is possible in the source directory tree.  For example, for a
+recipe C<$SRCTOP/test/recipes/99-foo.t>, there could be a directory
+C<$SRCTOP/test/recipes/99-foo_data/>.
+
+=cut
+
+use File::Copy;
+use File::Spec::Functions qw/file_name_is_absolute curdir canonpath splitdir
+                             catdir catfile splitpath catpath devnull abs2rel
+                             rel2abs/;
+use File::Path 2.00 qw/rmtree mkpath/;
+use File::Basename;
+
+my $level = 0;
+
+# The name of the test.  This is set by setup() and is used in the other
+# functions to verify that setup() has been used.
+my $test_name = undef;
+
+# Directories we want to keep track of TOP, APPS, TEST and RESULTS are the
+# ones we're interested in, corresponding to the environment variables TOP
+# (mandatory), BIN_D, TEST_D, UTIL_D and RESULT_D.
+my %directories = ();
+
+# The environment variables that gave us the contents in %directories.  These
+# get modified whenever we change directories, so that subprocesses can use
+# the values of those environment variables as well
+my @direnv = ();
+
+# A bool saying if we shall stop all testing if the current recipe has failing
+# tests or not.  This is set by setup() if the environment variable STOPTEST
+# is defined with a non-empty value.
+my $end_with_bailout = 0;
+
+# A set of hooks that is affected by with() and may be used in diverse places.
+# All hooks are expected to be CODE references.
+my %hooks = (
+
+    # exit_checker is used by run() directly after completion of a command.
+    # it receives the exit code from that command and is expected to return
+    # 1 (for success) or 0 (for failure).  This is the status value that run()
+    # will give back (through the |statusvar| reference and as returned value
+    # when capture => 1 doesn't apply).
+    exit_checker => sub { return shift == 0 ? 1 : 0 },
+
+    );
+
+# Debug flag, to be set manually when needed
+my $debug = 0;
+
+=head2 Main functions
+
+The following functions are exported by default when using C<OpenSSL::Test>.
+
+=cut
+
+=over 4
+
+=item B<setup "NAME">
+
+C<setup> is used for initial setup, and it is mandatory that it's used.
+If it's not used in a OpenSSL test recipe, the rest of the recipe will
+most likely refuse to run.
+
+C<setup> checks for environment variables (see L</ENVIRONMENT> below),
+checks that C<$TOP/Configure> or C<$SRCTOP/Configure> exists, C<chdir>
+into the results directory (defined by the C<$RESULT_D> environment
+variable if defined, otherwise C<$BLDTOP/test> or C<$TOP/test>, whichever
+is defined).
+
+=back
+
+=cut
+
+sub setup {
+    my $old_test_name = $test_name;
+    $test_name = shift;
+
+    BAIL_OUT("setup() must receive a name") unless $test_name;
+    warn "setup() detected test name change.  Innocuous, so we continue...\n"
+        if $old_test_name && $old_test_name ne $test_name;
+
+    return if $old_test_name;
+
+    BAIL_OUT("setup() needs \$TOP or \$SRCTOP and \$BLDTOP to be defined")
+        unless $ENV{TOP} || ($ENV{SRCTOP} && $ENV{BLDTOP});
+    BAIL_OUT("setup() found both \$TOP and \$SRCTOP or \$BLDTOP...")
+        if $ENV{TOP} && ($ENV{SRCTOP} || $ENV{BLDTOP});
+
+    __env();
+
+    BAIL_OUT("setup() expects the file Configure in the source top directory")
+        unless -f srctop_file("Configure");
+
+    __cwd($directories{RESULTS});
+}
+
+=over 4
+
+=item B<indir "SUBDIR" =E<gt> sub BLOCK, OPTS>
+
+C<indir> is used to run a part of the recipe in a different directory than
+the one C<setup> moved into, usually a subdirectory, given by SUBDIR.
+The part of the recipe that's run there is given by the codeblock BLOCK.
+
+C<indir> takes some additional options OPTS that affect the subdirectory:
+
+=over 4
+
+=item B<create =E<gt> 0|1>
+
+When set to 1 (or any value that perl preceives as true), the subdirectory
+will be created if it doesn't already exist.  This happens before BLOCK
+is executed.
+
+=item B<cleanup =E<gt> 0|1>
+
+When set to 1 (or any value that perl preceives as true), the subdirectory
+will be cleaned out and removed.  This happens both before and after BLOCK
+is executed.
+
+=back
+
+An example:
+
+  indir "foo" => sub {
+      ok(run(app(["openssl", "version"]), stdout => "foo.txt"));
+      if (ok(open(RESULT, "foo.txt"), "reading foo.txt")) {
+          my $line = <RESULT>;
+          close RESULT;
+          is($line, qr/^OpenSSL 1\./,
+             "check that we're using OpenSSL 1.x.x");
+      }
+  }, create => 1, cleanup => 1;
+
+=back
+
+=cut
+
+sub indir {
+    my $subdir = shift;
+    my $codeblock = shift;
+    my %opts = @_;
+
+    my $reverse = __cwd($subdir,%opts);
+    BAIL_OUT("FAILURE: indir, \"$subdir\" wasn't possible to move into")
+	unless $reverse;
+
+    $codeblock->();
+
+    __cwd($reverse);
+
+    if ($opts{cleanup}) {
+	rmtree($subdir, { safe => 0 });
+    }
+}
+
+=over 4
+
+=item B<cmd ARRAYREF, OPTS>
+
+This functions build up a platform dependent command based on the
+input.  It takes a reference to a list that is the executable or
+script and its arguments, and some additional options (described
+further on).  Where necessary, the command will be wrapped in a
+suitable environment to make sure the correct shared libraries are
+used (currently only on Unix).
+
+It returns a CODEREF to be used by C<run>, C<pipe> or C<cmdstr>.
+
+The options that C<cmd> can take are in the form of hash values:
+
+=over 4
+
+=item B<stdin =E<gt> PATH>
+
+=item B<stdout =E<gt> PATH>
+
+=item B<stderr =E<gt> PATH>
+
+In all three cases, the corresponding standard input, output or error is
+redirected from (for stdin) or to (for the others) a file given by the
+string PATH, I<or>, if the value is C<undef>, C</dev/null> or similar.
+
+=back
+
+=item B<app ARRAYREF, OPTS>
+
+=item B<test ARRAYREF, OPTS>
+
+Both of these are specific applications of C<cmd>, with just a couple
+of small difference:
+
+C<app> expects to find the given command (the first item in the given list
+reference) as an executable in C<$BIN_D> (if defined, otherwise C<$TOP/apps>
+or C<$BLDTOP/apps>).
+
+C<test> expects to find the given command (the first item in the given list
+reference) as an executable in C<$TEST_D> (if defined, otherwise C<$TOP/test>
+or C<$BLDTOP/test>).
+
+Also, for both C<app> and C<test>, the command may be prefixed with
+the content of the environment variable C<$EXE_SHELL>, which is useful
+in case OpenSSL has been cross compiled.
+
+=item B<perlapp ARRAYREF, OPTS>
+
+=item B<perltest ARRAYREF, OPTS>
+
+These are also specific applications of C<cmd>, where the interpreter
+is predefined to be C<perl>, and they expect the script to be
+interpreted to reside in the same location as C<app> and C<test>.
+
+C<perlapp> and C<perltest> will also take the following option:
+
+=over 4
+
+=item B<interpreter_args =E<gt> ARRAYref>
+
+The array reference is a set of arguments for the interpreter rather
+than the script.  Take care so that none of them can be seen as a
+script!  Flags and their eventual arguments only!
+
+=back
+
+An example:
+
+  ok(run(perlapp(["foo.pl", "arg1"],
+                 interpreter_args => [ "-I", srctop_dir("test") ])));
+
+=back
+
+=begin comment
+
+One might wonder over the complexity of C<apps>, C<fuzz>, C<test>, ...
+with all the lazy evaluations and all that.  The reason for this is that
+we want to make sure the directory in which those programs are found are
+correct at the time these commands are used.  Consider the following code
+snippet:
+
+  my $cmd = app(["openssl", ...]);
+
+  indir "foo", sub {
+      ok(run($cmd), "Testing foo")
+  };
+
+If there wasn't this lazy evaluation, the directory where C<openssl> is
+found would be incorrect at the time C<run> is called, because it was
+calculated before we moved into the directory "foo".
+
+=end comment
+
+=cut
+
+sub cmd {
+    my $cmd = shift;
+    my %opts = @_;
+    return sub {
+        my $num = shift;
+        # Make a copy to not destroy the caller's array
+        my @cmdargs = ( @$cmd );
+        my @prog = __wrap_cmd(shift @cmdargs, $opts{exe_shell} // ());
+
+        return __decorate_cmd($num, [ @prog, quotify(@cmdargs) ],
+                              %opts);
+    }
+}
+
+sub app {
+    my $cmd = shift;
+    my %opts = @_;
+    return sub {
+        my @cmdargs = ( @{$cmd} );
+        my @prog = __fixup_prg(__apps_file(shift @cmdargs, __exeext()));
+        return cmd([ @prog, @cmdargs ],
+                   exe_shell => $ENV{EXE_SHELL}, %opts) -> (shift);
+    }
+}
+
+sub fuzz {
+    my $cmd = shift;
+    my %opts = @_;
+    return sub {
+        my @cmdargs = ( @{$cmd} );
+        my @prog = __fixup_prg(__fuzz_file(shift @cmdargs, __exeext()));
+        return cmd([ @prog, @cmdargs ],
+                   exe_shell => $ENV{EXE_SHELL}, %opts) -> (shift);
+    }
+}
+
+sub test {
+    my $cmd = shift;
+    my %opts = @_;
+    return sub {
+        my @cmdargs = ( @{$cmd} );
+        my @prog = __fixup_prg(__test_file(shift @cmdargs, __exeext()));
+        return cmd([ @prog, @cmdargs ],
+                   exe_shell => $ENV{EXE_SHELL}, %opts) -> (shift);
+    }
+}
+
+sub perlapp {
+    my $cmd = shift;
+    my %opts = @_;
+    return sub {
+        my @interpreter_args = defined $opts{interpreter_args} ?
+            @{$opts{interpreter_args}} : ();
+        my @interpreter = __fixup_prg($^X);
+        my @cmdargs = ( @{$cmd} );
+        my @prog = __apps_file(shift @cmdargs, undef);
+        return cmd([ @interpreter, @interpreter_args,
+                     @prog, @cmdargs ], %opts) -> (shift);
+    }
+}
+
+sub perltest {
+    my $cmd = shift;
+    my %opts = @_;
+    return sub {
+        my @interpreter_args = defined $opts{interpreter_args} ?
+            @{$opts{interpreter_args}} : ();
+        my @interpreter = __fixup_prg($^X);
+        my @cmdargs = ( @{$cmd} );
+        my @prog = __test_file(shift @cmdargs, undef);
+        return cmd([ @interpreter, @interpreter_args,
+                     @prog, @cmdargs ], %opts) -> (shift);
+    }
+}
+
+=over 4
+
+=item B<run CODEREF, OPTS>
+
+CODEREF is expected to be the value return by C<cmd> or any of its
+derivatives, anything else will most likely cause an error unless you
+know what you're doing.
+
+C<run> executes the command returned by CODEREF and return either the
+resulting output (if the option C<capture> is set true) or a boolean
+indicating if the command succeeded or not.
+
+The options that C<run> can take are in the form of hash values:
+
+=over 4
+
+=item B<capture =E<gt> 0|1>
+
+If true, the command will be executed with a perl backtick, and C<run> will
+return the resulting output as an array of lines.  If false or not given,
+the command will be executed with C<system()>, and C<run> will return 1 if
+the command was successful or 0 if it wasn't.
+
+=item B<prefix =E<gt> EXPR>
+
+If specified, EXPR will be used as a string to prefix the output from the
+command.  This is useful if the output contains lines starting with C<ok >
+or C<not ok > that can disturb Test::Harness.
+
+=item B<statusvar =E<gt> VARREF>
+
+If used, B<VARREF> must be a reference to a scalar variable.  It will be
+assigned a boolean indicating if the command succeeded or not.  This is
+particularly useful together with B<capture>.
+
+=back
+
+For further discussion on what is considered a successful command or not, see
+the function C<with> further down.
+
+=back
+
+=cut
+
+sub run {
+    my ($cmd, $display_cmd) = shift->(0);
+    my %opts = @_;
+
+    return () if !$cmd;
+
+    my $prefix = "";
+    if ( $^O eq "VMS" ) {	# VMS
+	$prefix = "pipe ";
+    }
+
+    my @r = ();
+    my $r = 0;
+    my $e = 0;
+
+    die "OpenSSL::Test::run(): statusvar value not a scalar reference"
+        if $opts{statusvar} && ref($opts{statusvar}) ne "SCALAR";
+
+    # In non-verbose, we want to shut up the command interpreter, in case
+    # it has something to complain about.  On VMS, it might complain both
+    # on stdout and stderr
+    my $save_STDOUT;
+    my $save_STDERR;
+    if ($ENV{HARNESS_ACTIVE} && !$ENV{HARNESS_VERBOSE}) {
+        open $save_STDOUT, '>&', \*STDOUT or die "Can't dup STDOUT: $!";
+        open $save_STDERR, '>&', \*STDERR or die "Can't dup STDERR: $!";
+        open STDOUT, ">", devnull();
+        open STDERR, ">", devnull();
+    }
+
+    $ENV{HARNESS_OSSL_LEVEL} = $level + 1;
+
+    # The dance we do with $? is the same dance the Unix shells appear to
+    # do.  For example, a program that gets aborted (and therefore signals
+    # SIGABRT = 6) will appear to exit with the code 134.  We mimic this
+    # to make it easier to compare with a manual run of the command.
+    if ($opts{capture} || defined($opts{prefix})) {
+	my $pipe;
+	local $_;
+
+	open($pipe, '-|', "$prefix$cmd") or die "Can't start command: $!";
+	while(<$pipe>) {
+	    my $l = ($opts{prefix} // "") . $_;
+	    if ($opts{capture}) {
+		push @r, $l;
+	    } else {
+		print STDOUT $l;
+	    }
+	}
+	close $pipe;
+    } else {
+	$ENV{HARNESS_OSSL_PREFIX} = "# ";
+	system("$prefix$cmd");
+	delete $ENV{HARNESS_OSSL_PREFIX};
+    }
+    $e = ($? & 0x7f) ? ($? & 0x7f)|0x80 : ($? >> 8);
+    $r = $hooks{exit_checker}->($e);
+    if ($opts{statusvar}) {
+        ${$opts{statusvar}} = $r;
+    }
+
+    if ($ENV{HARNESS_ACTIVE} && !$ENV{HARNESS_VERBOSE}) {
+        close STDOUT;
+        close STDERR;
+        open STDOUT, '>&', $save_STDOUT or die "Can't restore STDOUT: $!";
+        open STDERR, '>&', $save_STDERR or die "Can't restore STDERR: $!";
+    }
+
+    print STDERR "$prefix$display_cmd => $e\n"
+        if !$ENV{HARNESS_ACTIVE} || $ENV{HARNESS_VERBOSE};
+
+    # At this point, $? stops being interesting, and unfortunately,
+    # there are Test::More versions that get picky if we leave it
+    # non-zero.
+    $? = 0;
+
+    if ($opts{capture}) {
+	return @r;
+    } else {
+	return $r;
+    }
+}
+
+END {
+    my $tb = Test::More->builder;
+    my $failure = scalar(grep { $_ == 0; } $tb->summary);
+    if ($failure && $end_with_bailout) {
+	BAIL_OUT("Stoptest!");
+    }
+}
+
+=head2 Utility functions
+
+The following functions are exported on request when using C<OpenSSL::Test>.
+
+  # To only get the bldtop_file and srctop_file functions.
+  use OpenSSL::Test qw/bldtop_file srctop_file/;
+
+  # To only get the bldtop_file function in addition to the default ones.
+  use OpenSSL::Test qw/:DEFAULT bldtop_file/;
+
+=cut
+
+# Utility functions, exported on request
+
+=over 4
+
+=item B<bldtop_dir LIST>
+
+LIST is a list of directories that make up a path from the top of the OpenSSL
+build directory (as indicated by the environment variable C<$TOP> or
+C<$BLDTOP>).
+C<bldtop_dir> returns the resulting directory as a string, adapted to the local
+operating system.
+
+=back
+
+=cut
+
+sub bldtop_dir {
+    return __bldtop_dir(@_);	# This caters for operating systems that have
+				# a very distinct syntax for directories.
+}
+
+=over 4
+
+=item B<bldtop_file LIST, FILENAME>
+
+LIST is a list of directories that make up a path from the top of the OpenSSL
+build directory (as indicated by the environment variable C<$TOP> or
+C<$BLDTOP>) and FILENAME is the name of a file located in that directory path.
+C<bldtop_file> returns the resulting file path as a string, adapted to the local
+operating system.
+
+=back
+
+=cut
+
+sub bldtop_file {
+    return __bldtop_file(@_);
+}
+
+=over 4
+
+=item B<srctop_dir LIST>
+
+LIST is a list of directories that make up a path from the top of the OpenSSL
+source directory (as indicated by the environment variable C<$TOP> or
+C<$SRCTOP>).
+C<srctop_dir> returns the resulting directory as a string, adapted to the local
+operating system.
+
+=back
+
+=cut
+
+sub srctop_dir {
+    return __srctop_dir(@_);	# This caters for operating systems that have
+				# a very distinct syntax for directories.
+}
+
+=over 4
+
+=item B<srctop_file LIST, FILENAME>
+
+LIST is a list of directories that make up a path from the top of the OpenSSL
+source directory (as indicated by the environment variable C<$TOP> or
+C<$SRCTOP>) and FILENAME is the name of a file located in that directory path.
+C<srctop_file> returns the resulting file path as a string, adapted to the local
+operating system.
+
+=back
+
+=cut
+
+sub srctop_file {
+    return __srctop_file(@_);
+}
+
+=over 4
+
+=item B<data_dir LIST>
+
+LIST is a list of directories that make up a path from the data directory
+associated with the test (see L</DESCRIPTION> above).
+C<data_dir> returns the resulting directory as a string, adapted to the local
+operating system.
+
+=back
+
+=cut
+
+sub data_dir {
+    return __data_dir(@_);
+}
+
+=over 4
+
+=item B<data_file LIST, FILENAME>
+
+LIST is a list of directories that make up a path from the data directory
+associated with the test (see L</DESCRIPTION> above) and FILENAME is the name
+of a file located in that directory path.  C<data_file> returns the resulting
+file path as a string, adapted to the local operating system.
+
+=back
+
+=cut
+
+sub data_file {
+    return __data_file(@_);
+}
+
+=over 4
+
+=item B<pipe LIST>
+
+LIST is a list of CODEREFs returned by C<app> or C<test>, from which C<pipe>
+creates a new command composed of all the given commands put together in a
+pipe.  C<pipe> returns a new CODEREF in the same manner as C<app> or C<test>,
+to be passed to C<run> for execution.
+
+=back
+
+=cut
+
+sub pipe {
+    my @cmds = @_;
+    return
+	sub {
+	    my @cs  = ();
+	    my @dcs = ();
+	    my @els = ();
+	    my $counter = 0;
+	    foreach (@cmds) {
+		my ($c, $dc, @el) = $_->(++$counter);
+
+		return () if !$c;
+
+		push @cs, $c;
+		push @dcs, $dc;
+		push @els, @el;
+	    }
+	    return (
+		join(" | ", @cs),
+		join(" | ", @dcs),
+		@els
+		);
+    };
+}
+
+=over 4
+
+=item B<with HASHREF, CODEREF>
+
+C<with> will temporarily install hooks given by the HASHREF and then execute
+the given CODEREF.  Hooks are usually expected to have a coderef as value.
+
+The currently available hoosk are:
+
+=over 4
+
+=item B<exit_checker =E<gt> CODEREF>
+
+This hook is executed after C<run> has performed its given command.  The
+CODEREF receives the exit code as only argument and is expected to return
+1 (if the exit code indicated success) or 0 (if the exit code indicated
+failure).
+
+=back
+
+=back
+
+=cut
+
+sub with {
+    my $opts = shift;
+    my %opts = %{$opts};
+    my $codeblock = shift;
+
+    my %saved_hooks = ();
+
+    foreach (keys %opts) {
+	$saved_hooks{$_} = $hooks{$_}	if exists($hooks{$_});
+	$hooks{$_} = $opts{$_};
+    }
+
+    $codeblock->();
+
+    foreach (keys %saved_hooks) {
+	$hooks{$_} = $saved_hooks{$_};
+    }
+}
+
+=over 4
+
+=item B<cmdstr CODEREF, OPTS>
+
+C<cmdstr> takes a CODEREF from C<app> or C<test> and simply returns the
+command as a string.
+
+C<cmdstr> takes some additional options OPTS that affect the string returned:
+
+=over 4
+
+=item B<display =E<gt> 0|1>
+
+When set to 0, the returned string will be with all decorations, such as a
+possible redirect of stderr to the null device.  This is suitable if the
+string is to be used directly in a recipe.
+
+When set to 1, the returned string will be without extra decorations.  This
+is suitable for display if that is desired (doesn't confuse people with all
+internal stuff), or if it's used to pass a command down to a subprocess.
+
+Default: 0
+
+=back
+
+=back
+
+=cut
+
+sub cmdstr {
+    my ($cmd, $display_cmd) = shift->(0);
+    my %opts = @_;
+
+    if ($opts{display}) {
+        return $display_cmd;
+    } else {
+        return $cmd;
+    }
+}
+
+=over 4
+
+=item B<quotify LIST>
+
+LIST is a list of strings that are going to be used as arguments for a
+command, and makes sure to inject quotes and escapes as necessary depending
+on the content of each string.
+
+This can also be used to put quotes around the executable of a command.
+I<This must never ever be done on VMS.>
+
+=back
+
+=cut
+
+sub quotify {
+    # Unix setup (default if nothing else is mentioned)
+    my $arg_formatter =
+	sub { $_ = shift;
+	      ($_ eq '' || /\s|[\{\}\\\$\[\]\*\?\|\&:;<>]/) ? "'$_'" : $_ };
+
+    if ( $^O eq "VMS") {	# VMS setup
+	$arg_formatter = sub {
+	    $_ = shift;
+	    if ($_ eq '' || /\s|["[:upper:]]/) {
+		s/"/""/g;
+		'"'.$_.'"';
+	    } else {
+		$_;
+	    }
+	};
+    } elsif ( $^O eq "MSWin32") { # MSWin setup
+	$arg_formatter = sub {
+	    $_ = shift;
+	    if ($_ eq '' || /\s|["\|\&\*\;<>]/) {
+		s/(["\\])/\\$1/g;
+		'"'.$_.'"';
+	    } else {
+		$_;
+	    }
+	};
+    }
+
+    return map { $arg_formatter->($_) } @_;
+}
+
+=over 4
+
+=item B<openssl_versions>
+
+Returns a list of two numbers, the first representing the build version,
+the second representing the library version.  See opensslv.h for more
+information on those numbers.
+
+=back
+
+=cut
+
+my @versions = ();
+sub openssl_versions {
+    unless (@versions) {
+        my %lines =
+            map { s/\R$//;
+                  /^(.*): (0x[[:xdigit:]]{8})$/;
+                  die "Weird line: $_" unless defined $1;
+                  $1 => hex($2) }
+            run(test(['versions']), capture => 1);
+        @versions = ( $lines{'Build version'}, $lines{'Library version'} );
+    }
+    return @versions;
+}
+
+######################################################################
+# private functions.  These are never exported.
+
+=head1 ENVIRONMENT
+
+OpenSSL::Test depends on some environment variables.
+
+=over 4
+
+=item B<TOP>
+
+This environment variable is mandatory.  C<setup> will check that it's
+defined and that it's a directory that contains the file C<Configure>.
+If this isn't so, C<setup> will C<BAIL_OUT>.
+
+=item B<BIN_D>
+
+If defined, its value should be the directory where the openssl application
+is located.  Defaults to C<$TOP/apps> (adapted to the operating system).
+
+=item B<TEST_D>
+
+If defined, its value should be the directory where the test applications
+are located.  Defaults to C<$TOP/test> (adapted to the operating system).
+
+=item B<STOPTEST>
+
+If defined, it puts testing in a different mode, where a recipe with
+failures will result in a C<BAIL_OUT> at the end of its run.
+
+=back
+
+=cut
+
+sub __env {
+    (my $recipe_datadir = basename($0)) =~ s/\.t$/_data/i;
+
+    $directories{SRCTOP}  = $ENV{SRCTOP} || $ENV{TOP};
+    $directories{BLDTOP}  = $ENV{BLDTOP} || $ENV{TOP};
+    $directories{BLDAPPS} = $ENV{BIN_D}  || __bldtop_dir("apps");
+    $directories{SRCAPPS} =                 __srctop_dir("apps");
+    $directories{BLDFUZZ} =                 __bldtop_dir("fuzz");
+    $directories{SRCFUZZ} =                 __srctop_dir("fuzz");
+    $directories{BLDTEST} = $ENV{TEST_D} || __bldtop_dir("test");
+    $directories{SRCTEST} =                 __srctop_dir("test");
+    $directories{SRCDATA} =                 __srctop_dir("test", "recipes",
+                                                         $recipe_datadir);
+    $directories{RESULTS} = $ENV{RESULT_D} || $directories{BLDTEST};
+
+    push @direnv, "TOP"       if $ENV{TOP};
+    push @direnv, "SRCTOP"    if $ENV{SRCTOP};
+    push @direnv, "BLDTOP"    if $ENV{BLDTOP};
+    push @direnv, "BIN_D"     if $ENV{BIN_D};
+    push @direnv, "TEST_D"    if $ENV{TEST_D};
+    push @direnv, "RESULT_D"  if $ENV{RESULT_D};
+
+    $end_with_bailout	  = $ENV{STOPTEST} ? 1 : 0;
+};
+
+# __srctop_file and __srctop_dir are helpers to build file and directory
+# names on top of the source directory.  They depend on $SRCTOP, and
+# therefore on the proper use of setup() and when needed, indir().
+# __bldtop_file and __bldtop_dir do the same thing but relative to $BLDTOP.
+# __srctop_file and __bldtop_file take the same kind of argument as
+# File::Spec::Functions::catfile.
+# Similarly, __srctop_dir and __bldtop_dir take the same kind of argument
+# as File::Spec::Functions::catdir
+sub __srctop_file {
+    BAIL_OUT("Must run setup() first") if (! $test_name);
+
+    my $f = pop;
+    return catfile($directories{SRCTOP},@_,$f);
+}
+
+sub __srctop_dir {
+    BAIL_OUT("Must run setup() first") if (! $test_name);
+
+    return catdir($directories{SRCTOP},@_);
+}
+
+sub __bldtop_file {
+    BAIL_OUT("Must run setup() first") if (! $test_name);
+
+    my $f = pop;
+    return catfile($directories{BLDTOP},@_,$f);
+}
+
+sub __bldtop_dir {
+    BAIL_OUT("Must run setup() first") if (! $test_name);
+
+    return catdir($directories{BLDTOP},@_);
+}
+
+# __exeext is a function that returns the platform dependent file extension
+# for executable binaries, or the value of the environment variable $EXE_EXT
+# if that one is defined.
+sub __exeext {
+    my $ext = "";
+    if ($^O eq "VMS" ) {	# VMS
+	$ext = ".exe";
+    } elsif ($^O eq "MSWin32") { # Windows
+	$ext = ".exe";
+    }
+    return $ENV{"EXE_EXT"} || $ext;
+}
+
+# __test_file, __apps_file and __fuzz_file return the full path to a file
+# relative to the test/, apps/ or fuzz/ directory in the build tree or the
+# source tree, depending on where the file is found.  Note that when looking
+# in the build tree, the file name with an added extension is looked for, if
+# an extension is given.  The intent is to look for executable binaries (in
+# the build tree) or possibly scripts (in the source tree).
+# These functions all take the same arguments as File::Spec::Functions::catfile,
+# *plus* a mandatory extension argument.  This extension argument can be undef,
+# and is ignored in such a case.
+sub __test_file {
+    BAIL_OUT("Must run setup() first") if (! $test_name);
+
+    my $e = pop || "";
+    my $f = pop;
+    my $out = catfile($directories{BLDTEST},@_,$f . $e);
+    $out = catfile($directories{SRCTEST},@_,$f) unless -f $out;
+    return $out;
+}
+
+sub __apps_file {
+    BAIL_OUT("Must run setup() first") if (! $test_name);
+
+    my $e = pop || "";
+    my $f = pop;
+    my $out = catfile($directories{BLDAPPS},@_,$f . $e);
+    $out = catfile($directories{SRCAPPS},@_,$f) unless -f $out;
+    return $out;
+}
+
+sub __fuzz_file {
+    BAIL_OUT("Must run setup() first") if (! $test_name);
+
+    my $e = pop || "";
+    my $f = pop;
+    my $out = catfile($directories{BLDFUZZ},@_,$f . $e);
+    $out = catfile($directories{SRCFUZZ},@_,$f) unless -f $out;
+    return $out;
+}
+
+sub __data_file {
+    BAIL_OUT("Must run setup() first") if (! $test_name);
+
+    my $f = pop;
+    return catfile($directories{SRCDATA},@_,$f);
+}
+
+sub __data_dir {
+    BAIL_OUT("Must run setup() first") if (! $test_name);
+
+    return catdir($directories{SRCDATA},@_);
+}
+
+sub __results_file {
+    BAIL_OUT("Must run setup() first") if (! $test_name);
+
+    my $f = pop;
+    return catfile($directories{RESULTS},@_,$f);
+}
+
+# __cwd DIR
+# __cwd DIR, OPTS
+#
+# __cwd changes directory to DIR (string) and changes all the relative
+# entries in %directories accordingly.  OPTS is an optional series of
+# hash style arguments to alter __cwd's behavior:
+#
+#    create = 0|1       The directory we move to is created if 1, not if 0.
+#    cleanup = 0|1      The directory we move from is removed if 1, not if 0.
+
+sub __cwd {
+    my $dir = catdir(shift);
+    my %opts = @_;
+    my $abscurdir = rel2abs(curdir());
+    my $absdir = rel2abs($dir);
+    my $reverse = abs2rel($abscurdir, $absdir);
+
+    # PARANOIA: if we're not moving anywhere, we do nothing more
+    if ($abscurdir eq $absdir) {
+	return $reverse;
+    }
+
+    # Do not support a move to a different volume for now.  Maybe later.
+    BAIL_OUT("FAILURE: \"$dir\" moves to a different volume, not supported")
+	if $reverse eq $abscurdir;
+
+    # If someone happened to give a directory that leads back to the current,
+    # it's extremely silly to do anything more, so just simulate that we did
+    # move.
+    # In this case, we won't even clean it out, for safety's sake.
+    return "." if $reverse eq "";
+
+    $dir = canonpath($dir);
+    if ($opts{create}) {
+	mkpath($dir);
+    }
+
+    # We are recalculating the directories we keep track of, but need to save
+    # away the result for after having moved into the new directory.
+    my %tmp_directories = ();
+    my %tmp_ENV = ();
+
+    # For each of these directory variables, figure out where they are relative
+    # to the directory we want to move to if they aren't absolute (if they are,
+    # they don't change!)
+    my @dirtags = sort keys %directories;
+    foreach (@dirtags) {
+	if (!file_name_is_absolute($directories{$_})) {
+	    my $newpath = abs2rel(rel2abs($directories{$_}), rel2abs($dir));
+	    $tmp_directories{$_} = $newpath;
+	}
+    }
+
+    # Treat each environment variable that was used to get us the values in
+    # %directories the same was as the paths in %directories, so any sub
+    # process can use their values properly as well
+    foreach (@direnv) {
+	if (!file_name_is_absolute($ENV{$_})) {
+	    my $newpath = abs2rel(rel2abs($ENV{$_}), rel2abs($dir));
+	    $tmp_ENV{$_} = $newpath;
+	}
+    }
+
+    # Should we just bail out here as well?  I'm unsure.
+    return undef unless chdir($dir);
+
+    if ($opts{cleanup}) {
+	rmtree(".", { safe => 0, keep_root => 1 });
+    }
+
+    # We put back new values carefully.  Doing the obvious
+    # %directories = ( %tmp_directories )
+    # will clear out any value that happens to be an absolute path
+    foreach (keys %tmp_directories) {
+        $directories{$_} = $tmp_directories{$_};
+    }
+    foreach (keys %tmp_ENV) {
+        $ENV{$_} = $tmp_ENV{$_};
+    }
+
+    if ($debug) {
+	print STDERR "DEBUG: __cwd(), directories and files:\n";
+	print STDERR "  \$directories{BLDTEST} = \"$directories{BLDTEST}\"\n";
+	print STDERR "  \$directories{SRCTEST} = \"$directories{SRCTEST}\"\n";
+	print STDERR "  \$directories{SRCDATA} = \"$directories{SRCDATA}\"\n";
+	print STDERR "  \$directories{RESULTS} = \"$directories{RESULTS}\"\n";
+	print STDERR "  \$directories{BLDAPPS} = \"$directories{BLDAPPS}\"\n";
+	print STDERR "  \$directories{SRCAPPS} = \"$directories{SRCAPPS}\"\n";
+	print STDERR "  \$directories{SRCTOP}  = \"$directories{SRCTOP}\"\n";
+	print STDERR "  \$directories{BLDTOP}  = \"$directories{BLDTOP}\"\n";
+	print STDERR "\n";
+	print STDERR "  current directory is \"",curdir(),"\"\n";
+	print STDERR "  the way back is \"$reverse\"\n";
+    }
+
+    return $reverse;
+}
+
+# __wrap_cmd CMD
+# __wrap_cmd CMD, EXE_SHELL
+#
+# __wrap_cmd "wraps" CMD (string) with a beginning command that makes sure
+# the command gets executed with an appropriate environment.  If EXE_SHELL
+# is given, it is used as the beginning command.
+#
+# __wrap_cmd returns a list that should be used to build up a larger list
+# of command tokens, or be joined together like this:
+#
+#    join(" ", __wrap_cmd($cmd))
+sub __wrap_cmd {
+    my $cmd = shift;
+    my $exe_shell = shift;
+
+    my @prefix = ( __bldtop_file("util", "shlib_wrap.sh") );
+
+    if(defined($exe_shell)) {
+	@prefix = ( $exe_shell );
+    } elsif ($^O eq "VMS" || $^O eq "MSWin32") {
+	# VMS and Windows don't use any wrapper script for the moment
+	@prefix = ();
+    }
+
+    return (@prefix, $cmd);
+}
+
+# __fixup_prg PROG
+#
+# __fixup_prg does whatever fixup is needed to execute an executable binary
+# given by PROG (string).
+#
+# __fixup_prg returns a string with the possibly prefixed program path spec.
+sub __fixup_prg {
+    my $prog = shift;
+
+    my $prefix = "";
+
+    if ($^O eq "VMS" ) {
+	$prefix = ($prog =~ /^(?:[\$a-z0-9_]+:)?[<\[]/i ? "mcr " : "mcr []");
+    }
+
+    if (defined($prog)) {
+	# Make sure to quotify the program file on platforms that may
+	# have spaces or similar in their path name.
+	# To our knowledge, VMS is the exception where quotifying should
+	# never happen.
+	($prog) = quotify($prog) unless $^O eq "VMS";
+	return $prefix.$prog;
+    }
+
+    print STDERR "$prog not found\n";
+    return undef;
+}
+
+# __decorate_cmd NUM, CMDARRAYREF
+#
+# __decorate_cmd takes a command number NUM and a command token array
+# CMDARRAYREF, builds up a command string from them and decorates it
+# with necessary redirections.
+# __decorate_cmd returns a list of two strings, one with the command
+# string to actually be used, the other to be displayed for the user.
+# The reason these strings might differ is that we redirect stderr to
+# the null device unless we're verbose and unless the user has
+# explicitly specified a stderr redirection.
+sub __decorate_cmd {
+    BAIL_OUT("Must run setup() first") if (! $test_name);
+
+    my $num = shift;
+    my $cmd = shift;
+    my %opts = @_;
+
+    my $cmdstr = join(" ", @$cmd);
+    my $null = devnull();
+    my $fileornull = sub { $_[0] ? $_[0] : $null; };
+    my $stdin = "";
+    my $stdout = "";
+    my $stderr = "";
+    my $saved_stderr = undef;
+    $stdin = " < ".$fileornull->($opts{stdin})  if exists($opts{stdin});
+    $stdout= " > ".$fileornull->($opts{stdout}) if exists($opts{stdout});
+    $stderr=" 2> ".$fileornull->($opts{stderr}) if exists($opts{stderr});
+
+    my $display_cmd = "$cmdstr$stdin$stdout$stderr";
+
+    $stderr=" 2> ".$null
+        unless $stderr || !$ENV{HARNESS_ACTIVE} || $ENV{HARNESS_VERBOSE};
+
+    $cmdstr .= "$stdin$stdout$stderr";
+
+    if ($debug) {
+	print STDERR "DEBUG[__decorate_cmd]: \$cmdstr = \"$cmdstr\"\n";
+	print STDERR "DEBUG[__decorate_cmd]: \$display_cmd = \"$display_cmd\"\n";
+    }
+
+    return ($cmdstr, $display_cmd);
+}
+
+=head1 SEE ALSO
+
+L<Test::More>, L<Test::Harness>
+
+=head1 AUTHORS
+
+Richard Levitte E<lt>levitte@openssl.orgE<gt> with assistance and
+inspiration from Andy Polyakov E<lt>appro@openssl.org<gt>.
+
+=cut
+
+no warnings 'redefine';
+sub subtest {
+    $level++;
+
+    Test::More::subtest @_;
+
+    $level--;
+};
+
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Test/Simple.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Test/Simple.pm
new file mode 100644
index 000000000..c5a84d5ca
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Test/Simple.pm
@@ -0,0 +1,91 @@
+# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+package OpenSSL::Test::Simple;
+
+use strict;
+use warnings;
+
+use Exporter;
+use vars qw($VERSION @ISA @EXPORT @EXPORT_OK %EXPORT_TAGS);
+$VERSION = "0.2";
+@ISA = qw(Exporter);
+@EXPORT = qw(simple_test);
+
+=head1 NAME
+
+OpenSSL::Test::Simple - a few very simple test functions
+
+=head1 SYNOPSIS
+
+  use OpenSSL::Test::Simple;
+
+  simple_test("my_test_name", "destest", "des");
+
+=head1 DESCRIPTION
+
+Sometimes, the functions in L<OpenSSL::Test> are quite tedious for some
+repetitive tasks.  This module provides functions to make life easier.
+You could call them hacks if you wish.
+
+=cut
+
+use OpenSSL::Test;
+use OpenSSL::Test::Utils;
+
+=over 4
+
+=item B<simple_test NAME, PROGRAM, ALGORITHM>
+
+Runs a test named NAME, running the program PROGRAM with no arguments,
+to test the algorithm ALGORITHM.
+
+A complete recipe looks like this:
+
+  use OpenSSL::Test::Simple;
+
+  simple_test("test_bf", "bftest", "bf");
+
+=back
+
+=cut
+
+# args:
+#  name			(used with setup())
+#  algorithm		(used to check if it's at all supported)
+#  name of binary	(the program that does the actual test)
+sub simple_test {
+    my ($name, $prgr, @algos) = @_;
+
+    setup($name);
+
+    if (scalar(disabled(@algos))) {
+	if (scalar(@algos) == 1) {
+	    plan skip_all => $algos[0]." is not supported by this OpenSSL build";
+	} else {
+	    my $last = pop @algos;
+	    plan skip_all => join(", ", @algos)." and $last are not supported by this OpenSSL build";
+	}
+    }
+
+    plan tests => 1;
+
+    ok(run(test([$prgr])), "running $prgr");
+}
+
+=head1 SEE ALSO
+
+L<OpenSSL::Test>
+
+=head1 AUTHORS
+
+Richard Levitte E<lt>levitte@openssl.orgE<gt> with inspiration
+from Rich Salz E<lt>rsalz@openssl.orgE<gt>.
+
+=cut
+
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Test/Utils.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Test/Utils.pm
new file mode 100644
index 000000000..7b0a70563
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Test/Utils.pm
@@ -0,0 +1,240 @@
+# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+package OpenSSL::Test::Utils;
+
+use strict;
+use warnings;
+
+use Exporter;
+use vars qw($VERSION @ISA @EXPORT @EXPORT_OK %EXPORT_TAGS);
+$VERSION = "0.1";
+@ISA = qw(Exporter);
+@EXPORT = qw(alldisabled anydisabled disabled config available_protocols
+             have_IPv4 have_IPv6);
+
+=head1 NAME
+
+OpenSSL::Test::Utils - test utility functions
+
+=head1 SYNOPSIS
+
+  use OpenSSL::Test::Utils;
+
+  my @tls = available_protocols("tls");
+  my @dtls = available_protocols("dtls");
+  alldisabled("dh", "dsa");
+  anydisabled("dh", "dsa");
+
+  config("fips");
+
+  have_IPv4();
+  have_IPv6();
+
+=head1 DESCRIPTION
+
+This module provides utility functions for the testing framework.
+
+=cut
+
+use OpenSSL::Test qw/:DEFAULT bldtop_file/;
+
+=over 4
+
+=item B<available_protocols STRING>
+
+Returns a list of strings for all the available SSL/TLS versions if
+STRING is "tls", or for all the available DTLS versions if STRING is
+"dtls".  Otherwise, it returns the empty list.  The strings in the
+returned list can be used with B<alldisabled> and B<anydisabled>.
+
+=item B<alldisabled ARRAY>
+=item B<anydisabled ARRAY>
+
+In an array context returns an array with each element set to 1 if the
+corresponding feature is disabled and 0 otherwise.
+
+In a scalar context, alldisabled returns 1 if all of the features in
+ARRAY are disabled, while anydisabled returns 1 if any of them are
+disabled.
+
+=item B<config STRING>
+
+Returns an item from the %config hash in \$TOP/configdata.pm.
+
+=item B<have_IPv4>
+=item B<have_IPv6>
+
+Return true if IPv4 / IPv6 is possible to use on the current system.
+
+=back
+
+=cut
+
+our %available_protocols;
+our %disabled;
+our %config;
+my $configdata_loaded = 0;
+
+sub load_configdata {
+    # We eval it so it doesn't run at compile time of this file.
+    # The latter would have bldtop_file() complain that setup() hasn't
+    # been run yet.
+    my $configdata = bldtop_file("configdata.pm");
+    eval { require $configdata;
+	   %available_protocols = %configdata::available_protocols;
+	   %disabled = %configdata::disabled;
+	   %config = %configdata::config;
+    };
+    $configdata_loaded = 1;
+}
+
+# args
+#  list of 1s and 0s, coming from check_disabled()
+sub anyof {
+    my $x = 0;
+    foreach (@_) { $x += $_ }
+    return $x > 0;
+}
+
+# args
+#  list of 1s and 0s, coming from check_disabled()
+sub allof {
+    my $x = 1;
+    foreach (@_) { $x *= $_ }
+    return $x > 0;
+}
+
+# args
+#  list of strings, all of them should be names of features
+#  that can be disabled.
+# returns a list of 1s (if the corresponding feature is disabled)
+#  and 0s (if it isn't)
+sub check_disabled {
+    return map { exists $disabled{lc $_} ? 1 : 0 } @_;
+}
+
+# Exported functions #################################################
+
+# args:
+#  list of features to check
+sub anydisabled {
+    load_configdata() unless $configdata_loaded;
+    my @ret = check_disabled(@_);
+    return @ret if wantarray;
+    return anyof(@ret);
+}
+
+# args:
+#  list of features to check
+sub alldisabled {
+    load_configdata() unless $configdata_loaded;
+    my @ret = check_disabled(@_);
+    return @ret if wantarray;
+    return allof(@ret);
+}
+
+# !!! Kept for backward compatibility
+# args:
+#  single string
+sub disabled {
+    anydisabled(@_);
+}
+
+sub available_protocols {
+    load_configdata() unless $configdata_loaded;
+    my $protocol_class = shift;
+    if (exists $available_protocols{lc $protocol_class}) {
+	return @{$available_protocols{lc $protocol_class}}
+    }
+    return ();
+}
+
+sub config {
+    load_configdata() unless $configdata_loaded;
+    return $config{$_[0]};
+}
+
+# IPv4 / IPv6 checker
+my $have_IPv4 = -1;
+my $have_IPv6 = -1;
+my $IP_factory;
+sub check_IP {
+    my $listenaddress = shift;
+
+    eval {
+        require IO::Socket::IP;
+        my $s = IO::Socket::IP->new(
+            LocalAddr => $listenaddress,
+            LocalPort => 0,
+            Listen=>1,
+            );
+        $s or die "\n";
+        $s->close();
+    };
+    if ($@ eq "") {
+        return 1;
+    }
+
+    eval {
+        require IO::Socket::INET6;
+        my $s = IO::Socket::INET6->new(
+            LocalAddr => $listenaddress,
+            LocalPort => 0,
+            Listen=>1,
+            );
+        $s or die "\n";
+        $s->close();
+    };
+    if ($@ eq "") {
+        return 1;
+    }
+
+    eval {
+        require IO::Socket::INET;
+        my $s = IO::Socket::INET->new(
+            LocalAddr => $listenaddress,
+            LocalPort => 0,
+            Listen=>1,
+            );
+        $s or die "\n";
+        $s->close();
+    };
+    if ($@ eq "") {
+        return 1;
+    }
+
+    return 0;
+}
+
+sub have_IPv4 {
+    if ($have_IPv4 < 0) {
+        $have_IPv4 = check_IP("127.0.0.1");
+    }
+    return $have_IPv4;
+}
+
+sub have_IPv6 {
+    if ($have_IPv6 < 0) {
+        $have_IPv6 = check_IP("::1");
+    }
+    return $have_IPv6;
+}
+
+
+=head1 SEE ALSO
+
+L<OpenSSL::Test>
+
+=head1 AUTHORS
+
+Stephen Henson E<lt>steve@openssl.orgE<gt> and
+Richard Levitte E<lt>levitte@openssl.orgE<gt>
+
+=cut
+
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Util/Pod.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Util/Pod.pm
new file mode 100644
index 000000000..9f76fbf1a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/OpenSSL/Util/Pod.pm
@@ -0,0 +1,149 @@
+# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+package OpenSSL::Util::Pod;
+
+use strict;
+use warnings;
+
+use Exporter;
+use vars qw($VERSION @ISA @EXPORT @EXPORT_OK %EXPORT_TAGS);
+$VERSION = "0.1";
+@ISA = qw(Exporter);
+@EXPORT = qw(extract_pod_info);
+@EXPORT_OK = qw();
+
+=head1 NAME
+
+OpenSSL::Util::Pod - utilities to manipulate .pod files
+
+=head1 SYNOPSIS
+
+  use OpenSSL::Util::Pod;
+
+  my %podinfo = extract_pod_info("foo.pod");
+
+  # or if the file is already opened...  Note that this consumes the
+  # remainder of the file.
+
+  my %podinfo = extract_pod_info(\*STDIN);
+
+=head1 DESCRIPTION
+
+=over
+
+=item B<extract_pod_info "FILENAME", HASHREF>
+
+=item B<extract_pod_info "FILENAME">
+
+=item B<extract_pod_info GLOB, HASHREF>
+
+=item B<extract_pod_info GLOB>
+
+Extracts information from a .pod file, given a STRING (file name) or a
+GLOB (a file handle).  The result is given back as a hash table.
+
+The additional hash is for extra parameters:
+
+=over
+
+=item B<section =E<gt> N>
+
+The value MUST be a number, and will be the man section number
+to be used with the given .pod file.
+
+=item B<debug =E<gt> 0|1>
+
+If set to 1, extra debug text will be printed on STDERR
+
+=back
+
+=back
+
+=head1 RETURN VALUES
+
+=over
+
+=item B<extract_pod_info> returns a hash table with the following
+items:
+
+=over
+
+=item B<section =E<gt> N>
+
+The man section number this .pod file belongs to.  Often the same as
+was given as input.
+
+=item B<names =E<gt> [ "name", ... ]>
+
+All the names extracted from the NAME section.
+
+=back
+
+=back
+
+=cut
+
+sub extract_pod_info {
+    my $input = shift;
+    my $defaults_ref = shift || {};
+    my %defaults = ( debug => 0, section => 0, %$defaults_ref );
+    my $fh = undef;
+    my $filename = undef;
+
+    # If not a file handle, then it's assume to be a file path (a string)
+    unless (ref $input eq "GLOB") {
+        $filename = $input;
+        open $fh, $input or die "Trying to read $filename: $!\n";
+        print STDERR "DEBUG: Reading $input\n" if $defaults{debug};
+        $input = $fh;
+    }
+
+    my %podinfo = ( section => $defaults{section});
+    while(<$input>) {
+        s|\R$||;
+        # Stop reading when we have reached past the NAME section.
+        last if (m|^=head1|
+                 && defined $podinfo{lastsect}
+                 && $podinfo{lastsect} eq "NAME");
+
+        # Collect the section name
+        if (m|^=head1\s*(.*)|) {
+            $podinfo{lastsect} = $1;
+            $podinfo{lastsect} =~ s/\s+$//;
+            print STDERR "DEBUG: Found new pod section $1\n"
+                if $defaults{debug};
+            print STDERR "DEBUG: Clearing pod section text\n"
+                if $defaults{debug};
+            $podinfo{lastsecttext} = "";
+        }
+
+        next if (m|^=| || m|^\s*$|);
+
+        # Collect the section text
+        print STDERR "DEBUG: accumulating pod section text \"$_\"\n"
+            if $defaults{debug};
+        $podinfo{lastsecttext} .= " " if $podinfo{lastsecttext};
+        $podinfo{lastsecttext} .= $_;
+    }
+
+
+    if (defined $fh) {
+        close $fh;
+        print STDERR "DEBUG: Done reading $filename\n" if $defaults{debug};
+    }
+
+    $podinfo{lastsecttext} =~ s| - .*$||;
+
+    my @names =
+        map { s|\s+||g; $_ }
+        split(m|,|, $podinfo{lastsecttext});
+
+    return ( section => $podinfo{section}, names => [ @names ] );
+}
+
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Alert.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Alert.pm
new file mode 100644
index 000000000..e27497dbd
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Alert.pm
@@ -0,0 +1,51 @@
+# Copyright 2018-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+
+package TLSProxy::Alert;
+
+sub new
+{
+    my $class = shift;
+    my ($server,
+        $encrypted,
+        $level,
+        $description) = @_;
+
+    my $self = {
+        server => $server,
+        encrypted => $encrypted,
+        level => $level,
+        description => $description
+    };
+
+    return bless $self, $class;
+}
+
+#Read only accessors
+sub server
+{
+    my $self = shift;
+    return $self->{server};
+}
+sub encrypted
+{
+    my $self = shift;
+    return $self->{encrypted};
+}
+sub level
+{
+    my $self = shift;
+    return $self->{level};
+}
+sub description
+{
+    my $self = shift;
+    return $self->{description};
+}
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Certificate.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Certificate.pm
new file mode 100644
index 000000000..73737137b
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Certificate.pm
@@ -0,0 +1,214 @@
+# Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+
+package TLSProxy::Certificate;
+
+use vars '@ISA';
+push @ISA, 'TLSProxy::Message';
+
+sub new
+{
+    my $class = shift;
+    my ($server,
+        $data,
+        $records,
+        $startoffset,
+        $message_frag_lens) = @_;
+
+    my $self = $class->SUPER::new(
+        $server,
+        TLSProxy::Message::MT_CERTIFICATE,
+        $data,
+        $records,
+        $startoffset,
+        $message_frag_lens);
+
+    $self->{first_certificate} = "";
+    $self->{extension_data} = "";
+    $self->{remaining_certdata} = "";
+
+    return $self;
+}
+
+sub parse
+{
+    my $self = shift;
+
+    if (TLSProxy::Proxy->is_tls13()) {
+        my $context_len = unpack('C', $self->data);
+        my $context = substr($self->data, 1, $context_len);
+
+        my $remdata = substr($self->data, 1 + $context_len);
+
+        my ($hicertlistlen, $certlistlen) = unpack('Cn', $remdata);
+        $certlistlen += ($hicertlistlen << 16);
+
+        $remdata = substr($remdata, 3);
+
+        die "Invalid Certificate List length"
+            if length($remdata) != $certlistlen;
+
+        my ($hicertlen, $certlen) = unpack('Cn', $remdata);
+        $certlen += ($hicertlen << 16);
+
+        die "Certificate too long" if ($certlen + 3) > $certlistlen;
+
+        $remdata = substr($remdata, 3);
+
+        my $certdata = substr($remdata, 0, $certlen);
+
+        $remdata = substr($remdata, $certlen);
+
+        my $extensions_len = unpack('n', $remdata);
+        $remdata = substr($remdata, 2);
+
+        die "Extensions too long"
+            if ($certlen + 3 + $extensions_len + 2) > $certlistlen;
+
+        my $extension_data = "";
+        if ($extensions_len != 0) {
+            $extension_data = substr($remdata, 0, $extensions_len);
+
+            if (length($extension_data) != $extensions_len) {
+                die "Invalid extension length\n";
+            }
+        }
+        my %extensions = ();
+        while (length($extension_data) >= 4) {
+            my ($type, $size) = unpack("nn", $extension_data);
+            my $extdata = substr($extension_data, 4, $size);
+            $extension_data = substr($extension_data, 4 + $size);
+            $extensions{$type} = $extdata;
+        }
+        $remdata = substr($remdata, $extensions_len);
+
+        $self->context($context);
+        $self->first_certificate($certdata);
+        $self->extension_data(\%extensions);
+        $self->remaining_certdata($remdata);
+
+        print "    Context:".$context."\n";
+        print "    Certificate List Len:".$certlistlen."\n";
+        print "    Certificate Len:".$certlen."\n";
+        print "    Extensions Len:".$extensions_len."\n";
+    } else {
+        my ($hicertlistlen, $certlistlen) = unpack('Cn', $self->data);
+        $certlistlen += ($hicertlistlen << 16);
+
+        my $remdata = substr($self->data, 3);
+
+        die "Invalid Certificate List length"
+            if length($remdata) != $certlistlen;
+
+        my ($hicertlen, $certlen) = unpack('Cn', $remdata);
+        $certlen += ($hicertlen << 16);
+
+        die "Certificate too long" if ($certlen + 3) > $certlistlen;
+
+        $remdata = substr($remdata, 3);
+
+        my $certdata = substr($remdata, 0, $certlen);
+
+        $remdata = substr($remdata, $certlen);
+
+        $self->first_certificate($certdata);
+        $self->remaining_certdata($remdata);
+
+        print "    Certificate List Len:".$certlistlen."\n";
+        print "    Certificate Len:".$certlen."\n";
+    }
+}
+
+#Reconstruct the on-the-wire message data following changes
+sub set_message_contents
+{
+    my $self = shift;
+    my $data;
+    my $extensions = "";
+
+    if (TLSProxy::Proxy->is_tls13()) {
+        foreach my $key (keys %{$self->extension_data}) {
+            my $extdata = ${$self->extension_data}{$key};
+            $extensions .= pack("n", $key);
+            $extensions .= pack("n", length($extdata));
+            $extensions .= $extdata;
+        }
+        $data = pack('C', length($self->context()));
+        $data .= $self->context;
+        my $certlen = length($self->first_certificate);
+        my $certlistlen = $certlen + length($extensions)
+                          + length($self->remaining_certdata);
+        my $hi = $certlistlen >> 16;
+        $certlistlen = $certlistlen & 0xffff;
+        $data .= pack('Cn', $hi, $certlistlen);
+        $hi = $certlen >> 16;
+        $certlen = $certlen & 0xffff;
+        $data .= pack('Cn', $hi, $certlen);
+        $data .= pack('n', length($extensions));
+        $data .= $extensions;
+        $data .= $self->remaining_certdata();
+        $self->data($data);
+    } else {
+        my $certlen = length($self->first_certificate);
+        my $certlistlen = $certlen + length($self->remaining_certdata);
+        my $hi = $certlistlen >> 16;
+        $certlistlen = $certlistlen & 0xffff;
+        $data .= pack('Cn', $hi, $certlistlen);
+        $hi = $certlen >> 16;
+        $certlen = $certlen & 0xffff;
+        $data .= pack('Cn', $hi, $certlen);
+        $data .= $self->remaining_certdata();
+        $self->data($data);
+    }
+}
+
+#Read/write accessors
+sub context
+{
+    my $self = shift;
+    if (@_) {
+      $self->{context} = shift;
+    }
+    return $self->{context};
+}
+sub first_certificate
+{
+    my $self = shift;
+    if (@_) {
+      $self->{first_certificate} = shift;
+    }
+    return $self->{first_certificate};
+}
+sub remaining_certdata
+{
+    my $self = shift;
+    if (@_) {
+      $self->{remaining_certdata} = shift;
+    }
+    return $self->{remaining_certdata};
+}
+sub extension_data
+{
+    my $self = shift;
+    if (@_) {
+      $self->{extension_data} = shift;
+    }
+    return $self->{extension_data};
+}
+sub set_extension
+{
+    my ($self, $ext_type, $ext_data) = @_;
+    $self->{extension_data}{$ext_type} = $ext_data;
+}
+sub delete_extension
+{
+    my ($self, $ext_type) = @_;
+    delete $self->{extension_data}{$ext_type};
+}
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/CertificateVerify.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/CertificateVerify.pm
new file mode 100644
index 000000000..8bf969fba
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/CertificateVerify.pm
@@ -0,0 +1,96 @@
+# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+
+package TLSProxy::CertificateVerify;
+
+use vars '@ISA';
+push @ISA, 'TLSProxy::Message';
+
+sub new
+{
+    my $class = shift;
+    my ($server,
+        $data,
+        $records,
+        $startoffset,
+        $message_frag_lens) = @_;
+
+    my $self = $class->SUPER::new(
+        $server,
+        TLSProxy::Message::MT_CERTIFICATE_VERIFY,
+        $data,
+        $records,
+        $startoffset,
+        $message_frag_lens);
+
+    $self->{sigalg} = -1;
+    $self->{signature} = "";
+
+    return $self;
+}
+
+sub parse
+{
+    my $self = shift;
+
+    my $sigalg = -1;
+    my $remdata = $self->data;
+    my $record = ${$self->records}[0];
+
+    if (TLSProxy::Proxy->is_tls13()
+            || $record->version() == TLSProxy::Record::VERS_TLS_1_2) {
+        $sigalg = unpack('n', $remdata);
+        $remdata = substr($remdata, 2);
+    }
+
+    my $siglen = unpack('n', substr($remdata, 0, 2));
+    my $sig = substr($remdata, 2);
+
+    die "Invalid CertificateVerify signature length" if length($sig) != $siglen;
+
+    print "    SigAlg:".$sigalg."\n";
+    print "    Signature Len:".$siglen."\n";
+
+    $self->sigalg($sigalg);
+    $self->signature($sig);
+}
+
+#Reconstruct the on-the-wire message data following changes
+sub set_message_contents
+{
+    my $self = shift;
+    my $data = "";
+    my $sig = $self->signature();
+    my $olddata = $self->data();
+
+    $data .= pack("n", $self->sigalg()) if ($self->sigalg() != -1);
+    $data .= pack("n", length($sig));
+    $data .= $sig;
+
+    $self->data($data);
+}
+
+#Read/write accessors
+sub sigalg
+{
+    my $self = shift;
+    if (@_) {
+      $self->{sigalg} = shift;
+    }
+    return $self->{sigalg};
+}
+sub signature
+{
+    my $self = shift;
+    if (@_) {
+      $self->{signature} = shift;
+    }
+    return $self->{signature};
+}
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/ClientHello.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/ClientHello.pm
new file mode 100644
index 000000000..76dce740a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/ClientHello.pm
@@ -0,0 +1,258 @@
+# Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+
+package TLSProxy::ClientHello;
+
+use vars '@ISA';
+push @ISA, 'TLSProxy::Message';
+
+sub new
+{
+    my $class = shift;
+    my ($server,
+        $data,
+        $records,
+        $startoffset,
+        $message_frag_lens) = @_;
+
+    my $self = $class->SUPER::new(
+        $server,
+        1,
+        $data,
+        $records,
+        $startoffset,
+        $message_frag_lens);
+
+    $self->{client_version} = 0;
+    $self->{random} = [];
+    $self->{session_id_len} = 0;
+    $self->{session} = "";
+    $self->{ciphersuite_len} = 0;
+    $self->{ciphersuites} = [];
+    $self->{comp_meth_len} = 0;
+    $self->{comp_meths} = [];
+    $self->{extensions_len} = 0;
+    $self->{extension_data} = "";
+
+    return $self;
+}
+
+sub parse
+{
+    my $self = shift;
+    my $ptr = 2;
+    my ($client_version) = unpack('n', $self->data);
+    my $random = substr($self->data, $ptr, 32);
+    $ptr += 32;
+    my $session_id_len = unpack('C', substr($self->data, $ptr));
+    $ptr++;
+    my $session = substr($self->data, $ptr, $session_id_len);
+    $ptr += $session_id_len;
+    my $ciphersuite_len = unpack('n', substr($self->data, $ptr));
+    $ptr += 2;
+    my @ciphersuites = unpack('n*', substr($self->data, $ptr,
+                                           $ciphersuite_len));
+    $ptr += $ciphersuite_len;
+    my $comp_meth_len = unpack('C', substr($self->data, $ptr));
+    $ptr++;
+    my @comp_meths = unpack('C*', substr($self->data, $ptr, $comp_meth_len));
+    $ptr += $comp_meth_len;
+    my $extensions_len = unpack('n', substr($self->data, $ptr));
+    $ptr += 2;
+    #For now we just deal with this as a block of data. In the future we will
+    #want to parse this
+    my $extension_data = substr($self->data, $ptr);
+
+    if (length($extension_data) != $extensions_len) {
+        die "Invalid extension length\n";
+    }
+    my %extensions = ();
+    while (length($extension_data) >= 4) {
+        my ($type, $size) = unpack("nn", $extension_data);
+        my $extdata = substr($extension_data, 4, $size);
+        $extension_data = substr($extension_data, 4 + $size);
+        $extensions{$type} = $extdata;
+    }
+
+    $self->client_version($client_version);
+    $self->random($random);
+    $self->session_id_len($session_id_len);
+    $self->session($session);
+    $self->ciphersuite_len($ciphersuite_len);
+    $self->ciphersuites(\@ciphersuites);
+    $self->comp_meth_len($comp_meth_len);
+    $self->comp_meths(\@comp_meths);
+    $self->extensions_len($extensions_len);
+    $self->extension_data(\%extensions);
+
+    $self->process_extensions();
+
+    print "    Client Version:".$client_version."\n";
+    print "    Session ID Len:".$session_id_len."\n";
+    print "    Ciphersuite len:".$ciphersuite_len."\n";
+    print "    Compression Method Len:".$comp_meth_len."\n";
+    print "    Extensions Len:".$extensions_len."\n";
+}
+
+#Perform any actions necessary based on the extensions we've seen
+sub process_extensions
+{
+    my $self = shift;
+    my %extensions = %{$self->extension_data};
+
+    #Clear any state from a previous run
+    TLSProxy::Record->etm(0);
+
+    if (exists $extensions{TLSProxy::Message::EXT_ENCRYPT_THEN_MAC}) {
+        TLSProxy::Record->etm(1);
+    }
+}
+
+sub extension_contents
+{
+    my $self = shift;
+    my $key = shift;
+    my $extension = "";
+
+    my $extdata = ${$self->extension_data}{$key};
+    $extension .= pack("n", $key);
+    $extension .= pack("n", length($extdata));
+    $extension .= $extdata;
+    return $extension;
+}
+
+#Reconstruct the on-the-wire message data following changes
+sub set_message_contents
+{
+    my $self = shift;
+    my $data;
+    my $extensions = "";
+
+    $data = pack('n', $self->client_version);
+    $data .= $self->random;
+    $data .= pack('C', $self->session_id_len);
+    $data .= $self->session;
+    $data .= pack('n', $self->ciphersuite_len);
+    $data .= pack("n*", @{$self->ciphersuites});
+    $data .= pack('C', $self->comp_meth_len);
+    $data .= pack("C*", @{$self->comp_meths});
+
+    foreach my $key (keys %{$self->extension_data}) {
+        next if ($key == TLSProxy::Message::EXT_PSK);
+        $extensions .= $self->extension_contents($key);
+        #Add extension twice if we are duplicating that extension
+        $extensions .= $self->extension_contents($key) if ($key == $self->dupext);
+    }
+    #PSK extension always goes last...
+    if (defined ${$self->extension_data}{TLSProxy::Message::EXT_PSK}) {
+        $extensions .= $self->extension_contents(TLSProxy::Message::EXT_PSK);
+    }
+    #unless we have EXT_FORCE_LAST
+    if (defined ${$self->extension_data}{TLSProxy::Message::EXT_FORCE_LAST}) {
+        $extensions .= $self->extension_contents(TLSProxy::Message::EXT_FORCE_LAST);
+    }
+
+    $data .= pack('n', length($extensions));
+    $data .= $extensions;
+
+    $self->data($data);
+}
+
+#Read/write accessors
+sub client_version
+{
+    my $self = shift;
+    if (@_) {
+      $self->{client_version} = shift;
+    }
+    return $self->{client_version};
+}
+sub random
+{
+    my $self = shift;
+    if (@_) {
+      $self->{random} = shift;
+    }
+    return $self->{random};
+}
+sub session_id_len
+{
+    my $self = shift;
+    if (@_) {
+      $self->{session_id_len} = shift;
+    }
+    return $self->{session_id_len};
+}
+sub session
+{
+    my $self = shift;
+    if (@_) {
+      $self->{session} = shift;
+    }
+    return $self->{session};
+}
+sub ciphersuite_len
+{
+    my $self = shift;
+    if (@_) {
+      $self->{ciphersuite_len} = shift;
+    }
+    return $self->{ciphersuite_len};
+}
+sub ciphersuites
+{
+    my $self = shift;
+    if (@_) {
+      $self->{ciphersuites} = shift;
+    }
+    return $self->{ciphersuites};
+}
+sub comp_meth_len
+{
+    my $self = shift;
+    if (@_) {
+      $self->{comp_meth_len} = shift;
+    }
+    return $self->{comp_meth_len};
+}
+sub comp_meths
+{
+    my $self = shift;
+    if (@_) {
+      $self->{comp_meths} = shift;
+    }
+    return $self->{comp_meths};
+}
+sub extensions_len
+{
+    my $self = shift;
+    if (@_) {
+      $self->{extensions_len} = shift;
+    }
+    return $self->{extensions_len};
+}
+sub extension_data
+{
+    my $self = shift;
+    if (@_) {
+      $self->{extension_data} = shift;
+    }
+    return $self->{extension_data};
+}
+sub set_extension
+{
+    my ($self, $ext_type, $ext_data) = @_;
+    $self->{extension_data}{$ext_type} = $ext_data;
+}
+sub delete_extension
+{
+    my ($self, $ext_type) = @_;
+    delete $self->{extension_data}{$ext_type};
+}
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/EncryptedExtensions.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/EncryptedExtensions.pm
new file mode 100644
index 000000000..262b720cf
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/EncryptedExtensions.pm
@@ -0,0 +1,110 @@
+# Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+
+package TLSProxy::EncryptedExtensions;
+
+use vars '@ISA';
+push @ISA, 'TLSProxy::Message';
+
+sub new
+{
+    my $class = shift;
+    my ($server,
+        $data,
+        $records,
+        $startoffset,
+        $message_frag_lens) = @_;
+
+    my $self = $class->SUPER::new(
+        $server,
+        TLSProxy::Message::MT_ENCRYPTED_EXTENSIONS,
+        $data,
+        $records,
+        $startoffset,
+        $message_frag_lens);
+
+    $self->{extension_data} = "";
+
+    return $self;
+}
+
+sub parse
+{
+    my $self = shift;
+
+    my $extensions_len = unpack('n', $self->data);
+    if (!defined $extensions_len) {
+        $extensions_len = 0;
+    }
+
+    my $extension_data;
+    if ($extensions_len != 0) {
+        $extension_data = substr($self->data, 2);
+
+        if (length($extension_data) != $extensions_len) {
+            die "Invalid extension length\n";
+        }
+    } else {
+        if (length($self->data) != 2) {
+            die "Invalid extension length\n";
+        }
+        $extension_data = "";
+    }
+    my %extensions = ();
+    while (length($extension_data) >= 4) {
+        my ($type, $size) = unpack("nn", $extension_data);
+        my $extdata = substr($extension_data, 4, $size);
+        $extension_data = substr($extension_data, 4 + $size);
+        $extensions{$type} = $extdata;
+    }
+
+    $self->extension_data(\%extensions);
+
+    print "    Extensions Len:".$extensions_len."\n";
+}
+
+#Reconstruct the on-the-wire message data following changes
+sub set_message_contents
+{
+    my $self = shift;
+    my $data;
+    my $extensions = "";
+
+    foreach my $key (keys %{$self->extension_data}) {
+        my $extdata = ${$self->extension_data}{$key};
+        $extensions .= pack("n", $key);
+        $extensions .= pack("n", length($extdata));
+        $extensions .= $extdata;
+    }
+
+    $data = pack('n', length($extensions));
+    $data .= $extensions;
+    $self->data($data);
+}
+
+#Read/write accessors
+sub extension_data
+{
+    my $self = shift;
+    if (@_) {
+        $self->{extension_data} = shift;
+    }
+    return $self->{extension_data};
+}
+sub set_extension
+{
+    my ($self, $ext_type, $ext_data) = @_;
+    $self->{extension_data}{$ext_type} = $ext_data;
+}
+sub delete_extension
+{
+    my ($self, $ext_type) = @_;
+    delete $self->{extension_data}{$ext_type};
+}
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Message.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Message.pm
new file mode 100644
index 000000000..5682ae3e1
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Message.pm
@@ -0,0 +1,592 @@
+# Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+
+package TLSProxy::Message;
+
+use TLSProxy::Alert;
+
+use constant TLS_MESSAGE_HEADER_LENGTH => 4;
+
+#Message types
+use constant {
+    MT_HELLO_REQUEST => 0,
+    MT_CLIENT_HELLO => 1,
+    MT_SERVER_HELLO => 2,
+    MT_NEW_SESSION_TICKET => 4,
+    MT_ENCRYPTED_EXTENSIONS => 8,
+    MT_CERTIFICATE => 11,
+    MT_SERVER_KEY_EXCHANGE => 12,
+    MT_CERTIFICATE_REQUEST => 13,
+    MT_SERVER_HELLO_DONE => 14,
+    MT_CERTIFICATE_VERIFY => 15,
+    MT_CLIENT_KEY_EXCHANGE => 16,
+    MT_FINISHED => 20,
+    MT_CERTIFICATE_STATUS => 22,
+    MT_NEXT_PROTO => 67
+};
+
+#Alert levels
+use constant {
+    AL_LEVEL_WARN => 1,
+    AL_LEVEL_FATAL => 2
+};
+
+#Alert descriptions
+use constant {
+    AL_DESC_CLOSE_NOTIFY => 0,
+    AL_DESC_UNEXPECTED_MESSAGE => 10,
+    AL_DESC_ILLEGAL_PARAMETER => 47,
+    AL_DESC_NO_RENEGOTIATION => 100
+};
+
+my %message_type = (
+    MT_HELLO_REQUEST, "HelloRequest",
+    MT_CLIENT_HELLO, "ClientHello",
+    MT_SERVER_HELLO, "ServerHello",
+    MT_NEW_SESSION_TICKET, "NewSessionTicket",
+    MT_ENCRYPTED_EXTENSIONS, "EncryptedExtensions",
+    MT_CERTIFICATE, "Certificate",
+    MT_SERVER_KEY_EXCHANGE, "ServerKeyExchange",
+    MT_CERTIFICATE_REQUEST, "CertificateRequest",
+    MT_SERVER_HELLO_DONE, "ServerHelloDone",
+    MT_CERTIFICATE_VERIFY, "CertificateVerify",
+    MT_CLIENT_KEY_EXCHANGE, "ClientKeyExchange",
+    MT_FINISHED, "Finished",
+    MT_CERTIFICATE_STATUS, "CertificateStatus",
+    MT_NEXT_PROTO, "NextProto"
+);
+
+use constant {
+    EXT_SERVER_NAME => 0,
+    EXT_MAX_FRAGMENT_LENGTH => 1,
+    EXT_STATUS_REQUEST => 5,
+    EXT_SUPPORTED_GROUPS => 10,
+    EXT_EC_POINT_FORMATS => 11,
+    EXT_SRP => 12,
+    EXT_SIG_ALGS => 13,
+    EXT_USE_SRTP => 14,
+    EXT_ALPN => 16,
+    EXT_SCT => 18,
+    EXT_PADDING => 21,
+    EXT_ENCRYPT_THEN_MAC => 22,
+    EXT_EXTENDED_MASTER_SECRET => 23,
+    EXT_SESSION_TICKET => 35,
+    EXT_KEY_SHARE => 51,
+    EXT_PSK => 41,
+    EXT_SUPPORTED_VERSIONS => 43,
+    EXT_COOKIE => 44,
+    EXT_PSK_KEX_MODES => 45,
+    EXT_POST_HANDSHAKE_AUTH => 49,
+    EXT_SIG_ALGS_CERT => 50,
+    EXT_RENEGOTIATE => 65281,
+    EXT_NPN => 13172,
+    EXT_CRYPTOPRO_BUG_EXTENSION => 0xfde8,
+    EXT_UNKNOWN => 0xfffe,
+    #Unknown extension that should appear last
+    EXT_FORCE_LAST => 0xffff
+};
+
+# SignatureScheme of TLS 1.3 from:
+# https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-signaturescheme
+# We have to manually grab the SHA224 equivalents from the old registry
+use constant {
+    SIG_ALG_RSA_PKCS1_SHA256 => 0x0401,
+    SIG_ALG_RSA_PKCS1_SHA384 => 0x0501,
+    SIG_ALG_RSA_PKCS1_SHA512 => 0x0601,
+    SIG_ALG_ECDSA_SECP256R1_SHA256 => 0x0403,
+    SIG_ALG_ECDSA_SECP384R1_SHA384 => 0x0503,
+    SIG_ALG_ECDSA_SECP521R1_SHA512 => 0x0603,
+    SIG_ALG_RSA_PSS_RSAE_SHA256 => 0x0804,
+    SIG_ALG_RSA_PSS_RSAE_SHA384 => 0x0805,
+    SIG_ALG_RSA_PSS_RSAE_SHA512 => 0x0806,
+    SIG_ALG_ED25519 => 0x0807,
+    SIG_ALG_ED448 => 0x0808,
+    SIG_ALG_RSA_PSS_PSS_SHA256 => 0x0809,
+    SIG_ALG_RSA_PSS_PSS_SHA384 => 0x080a,
+    SIG_ALG_RSA_PSS_PSS_SHA512 => 0x080b,
+    SIG_ALG_RSA_PKCS1_SHA1 => 0x0201,
+    SIG_ALG_ECDSA_SHA1 => 0x0203,
+    SIG_ALG_DSA_SHA1 => 0x0202,
+    SIG_ALG_DSA_SHA256 => 0x0402,
+    SIG_ALG_DSA_SHA384 => 0x0502,
+    SIG_ALG_DSA_SHA512 => 0x0602,
+    OSSL_SIG_ALG_RSA_PKCS1_SHA224 => 0x0301,
+    OSSL_SIG_ALG_DSA_SHA224 => 0x0302,
+    OSSL_SIG_ALG_ECDSA_SHA224 => 0x0303
+};
+
+use constant {
+    CIPHER_RSA_WITH_AES_128_CBC_SHA => 0x002f,
+    CIPHER_DHE_RSA_AES_128_SHA => 0x0033,
+    CIPHER_ADH_AES_128_SHA => 0x0034,
+    CIPHER_TLS13_AES_128_GCM_SHA256 => 0x1301,
+    CIPHER_TLS13_AES_256_GCM_SHA384 => 0x1302
+};
+
+my $payload = "";
+my $messlen = -1;
+my $mt;
+my $startoffset = -1;
+my $server = 0;
+my $success = 0;
+my $end = 0;
+my @message_rec_list = ();
+my @message_frag_lens = ();
+my $ciphersuite = 0;
+my $successondata = 0;
+my $alert;
+
+sub clear
+{
+    $payload = "";
+    $messlen = -1;
+    $startoffset = -1;
+    $server = 0;
+    $success = 0;
+    $end = 0;
+    $successondata = 0;
+    @message_rec_list = ();
+    @message_frag_lens = ();
+    $alert = undef;
+}
+
+#Class method to extract messages from a record
+sub get_messages
+{
+    my $class = shift;
+    my $serverin = shift;
+    my $record = shift;
+    my @messages = ();
+    my $message;
+
+    @message_frag_lens = ();
+
+    if ($serverin != $server && length($payload) != 0) {
+        die "Changed peer, but we still have fragment data\n";
+    }
+    $server = $serverin;
+
+    if ($record->content_type == TLSProxy::Record::RT_CCS) {
+        if ($payload ne "") {
+            #We can't handle this yet
+            die "CCS received before message data complete\n";
+        }
+        if (!TLSProxy::Proxy->is_tls13()) {
+            if ($server) {
+                TLSProxy::Record->server_encrypting(1);
+            } else {
+                TLSProxy::Record->client_encrypting(1);
+            }
+        }
+    } elsif ($record->content_type == TLSProxy::Record::RT_HANDSHAKE) {
+        if ($record->len == 0 || $record->len_real == 0) {
+            print "  Message truncated\n";
+        } else {
+            my $recoffset = 0;
+
+            if (length $payload > 0) {
+                #We are continuing processing a message started in a previous
+                #record. Add this record to the list associated with this
+                #message
+                push @message_rec_list, $record;
+
+                if ($messlen <= length($payload)) {
+                    #Shouldn't happen
+                    die "Internal error: invalid messlen: ".$messlen
+                        ." payload length:".length($payload)."\n";
+                }
+                if (length($payload) + $record->decrypt_len >= $messlen) {
+                    #We can complete the message with this record
+                    $recoffset = $messlen - length($payload);
+                    $payload .= substr($record->decrypt_data, 0, $recoffset);
+                    push @message_frag_lens, $recoffset;
+                    $message = create_message($server, $mt, $payload,
+                                              $startoffset);
+                    push @messages, $message;
+
+                    $payload = "";
+                } else {
+                    #This is just part of the total message
+                    $payload .= $record->decrypt_data;
+                    $recoffset = $record->decrypt_len;
+                    push @message_frag_lens, $record->decrypt_len;
+                }
+                print "  Partial message data read: ".$recoffset." bytes\n";
+            }
+
+            while ($record->decrypt_len > $recoffset) {
+                #We are at the start of a new message
+                if ($record->decrypt_len - $recoffset < 4) {
+                    #Whilst technically probably valid we can't cope with this
+                    die "End of record in the middle of a message header\n";
+                }
+                @message_rec_list = ($record);
+                my $lenhi;
+                my $lenlo;
+                ($mt, $lenhi, $lenlo) = unpack('CnC',
+                                               substr($record->decrypt_data,
+                                                      $recoffset));
+                $messlen = ($lenhi << 8) | $lenlo;
+                print "  Message type: $message_type{$mt}\n";
+                print "  Message Length: $messlen\n";
+                $startoffset = $recoffset;
+                $recoffset += 4;
+                $payload = "";
+
+                if ($recoffset <= $record->decrypt_len) {
+                    #Some payload data is present in this record
+                    if ($record->decrypt_len - $recoffset >= $messlen) {
+                        #We can complete the message with this record
+                        $payload .= substr($record->decrypt_data, $recoffset,
+                                           $messlen);
+                        $recoffset += $messlen;
+                        push @message_frag_lens, $messlen;
+                        $message = create_message($server, $mt, $payload,
+                                                  $startoffset);
+                        push @messages, $message;
+
+                        $payload = "";
+                    } else {
+                        #This is just part of the total message
+                        $payload .= substr($record->decrypt_data, $recoffset,
+                                           $record->decrypt_len - $recoffset);
+                        $recoffset = $record->decrypt_len;
+                        push @message_frag_lens, $recoffset;
+                    }
+                }
+            }
+        }
+    } elsif ($record->content_type == TLSProxy::Record::RT_APPLICATION_DATA) {
+        print "  [ENCRYPTED APPLICATION DATA]\n";
+        print "  [".$record->decrypt_data."]\n";
+
+        if ($successondata) {
+            $success = 1;
+            $end = 1;
+        }
+    } elsif ($record->content_type == TLSProxy::Record::RT_ALERT) {
+        my ($alertlev, $alertdesc) = unpack('CC', $record->decrypt_data);
+        print "  [$alertlev, $alertdesc]\n";
+        #A CloseNotify from the client indicates we have finished successfully
+        #(we assume)
+        if (!$end && !$server && $alertlev == AL_LEVEL_WARN
+            && $alertdesc == AL_DESC_CLOSE_NOTIFY) {
+            $success = 1;
+        }
+        #Fatal or close notify alerts end the test
+        if ($alertlev == AL_LEVEL_FATAL || $alertdesc == AL_DESC_CLOSE_NOTIFY) {
+            $end = 1;
+        }
+        $alert = TLSProxy::Alert->new(
+            $server,
+            $record->encrypted,
+            $alertlev,
+            $alertdesc);
+    }
+
+    return @messages;
+}
+
+#Function to work out which sub-class we need to create and then
+#construct it
+sub create_message
+{
+    my ($server, $mt, $data, $startoffset) = @_;
+    my $message;
+
+    #We only support ClientHello in this version...needs to be extended for
+    #others
+    if ($mt == MT_CLIENT_HELLO) {
+        $message = TLSProxy::ClientHello->new(
+            $server,
+            $data,
+            [@message_rec_list],
+            $startoffset,
+            [@message_frag_lens]
+        );
+        $message->parse();
+    } elsif ($mt == MT_SERVER_HELLO) {
+        $message = TLSProxy::ServerHello->new(
+            $server,
+            $data,
+            [@message_rec_list],
+            $startoffset,
+            [@message_frag_lens]
+        );
+        $message->parse();
+    } elsif ($mt == MT_ENCRYPTED_EXTENSIONS) {
+        $message = TLSProxy::EncryptedExtensions->new(
+            $server,
+            $data,
+            [@message_rec_list],
+            $startoffset,
+            [@message_frag_lens]
+        );
+        $message->parse();
+    } elsif ($mt == MT_CERTIFICATE) {
+        $message = TLSProxy::Certificate->new(
+            $server,
+            $data,
+            [@message_rec_list],
+            $startoffset,
+            [@message_frag_lens]
+        );
+        $message->parse();
+    } elsif ($mt == MT_CERTIFICATE_VERIFY) {
+        $message = TLSProxy::CertificateVerify->new(
+            $server,
+            $data,
+            [@message_rec_list],
+            $startoffset,
+            [@message_frag_lens]
+        );
+        $message->parse();
+    } elsif ($mt == MT_SERVER_KEY_EXCHANGE) {
+        $message = TLSProxy::ServerKeyExchange->new(
+            $server,
+            $data,
+            [@message_rec_list],
+            $startoffset,
+            [@message_frag_lens]
+        );
+        $message->parse();
+    } elsif ($mt == MT_NEW_SESSION_TICKET) {
+        $message = TLSProxy::NewSessionTicket->new(
+            $server,
+            $data,
+            [@message_rec_list],
+            $startoffset,
+            [@message_frag_lens]
+        );
+        $message->parse();
+    } else {
+        #Unknown message type
+        $message = TLSProxy::Message->new(
+            $server,
+            $mt,
+            $data,
+            [@message_rec_list],
+            $startoffset,
+            [@message_frag_lens]
+        );
+    }
+
+    return $message;
+}
+
+sub end
+{
+    my $class = shift;
+    return $end;
+}
+sub success
+{
+    my $class = shift;
+    return $success;
+}
+sub fail
+{
+    my $class = shift;
+    return !$success && $end;
+}
+
+sub alert
+{
+    return $alert;
+}
+
+sub new
+{
+    my $class = shift;
+    my ($server,
+        $mt,
+        $data,
+        $records,
+        $startoffset,
+        $message_frag_lens) = @_;
+
+    my $self = {
+        server => $server,
+        data => $data,
+        records => $records,
+        mt => $mt,
+        startoffset => $startoffset,
+        message_frag_lens => $message_frag_lens,
+        dupext => -1
+    };
+
+    return bless $self, $class;
+}
+
+sub ciphersuite
+{
+    my $class = shift;
+    if (@_) {
+      $ciphersuite = shift;
+    }
+    return $ciphersuite;
+}
+
+#Update all the underlying records with the modified data from this message
+#Note: Only supports re-encrypting for TLSv1.3
+sub repack
+{
+    my $self = shift;
+    my $msgdata;
+
+    my $numrecs = $#{$self->records};
+
+    $self->set_message_contents();
+
+    my $lenhi;
+    my $lenlo;
+
+    $lenlo = length($self->data) & 0xff;
+    $lenhi = length($self->data) >> 8;
+    $msgdata = pack('CnC', $self->mt, $lenhi, $lenlo).$self->data;
+
+    if ($numrecs == 0) {
+        #The message is fully contained within one record
+        my ($rec) = @{$self->records};
+        my $recdata = $rec->decrypt_data;
+
+        my $old_length;
+
+        # We use empty message_frag_lens to indicates that pre-repacking,
+        # the message wasn't present. The first fragment length doesn't include
+        # the TLS header, so we need to check and compute the right length.
+        if (@{$self->message_frag_lens}) {
+            $old_length = ${$self->message_frag_lens}[0] +
+              TLS_MESSAGE_HEADER_LENGTH;
+        } else {
+            $old_length = 0;
+        }
+
+        my $prefix = substr($recdata, 0, $self->startoffset);
+        my $suffix = substr($recdata, $self->startoffset + $old_length);
+
+        $rec->decrypt_data($prefix.($msgdata).($suffix));
+        # TODO(openssl-team): don't keep explicit lengths.
+        # (If a length override is ever needed to construct invalid packets,
+        #  use an explicit override field instead.)
+        $rec->decrypt_len(length($rec->decrypt_data));
+        $rec->len($rec->len + length($msgdata) - $old_length);
+        # Only support re-encryption for TLSv1.3.
+        if (TLSProxy::Proxy->is_tls13() && $rec->encrypted()) {
+            #Add content type (1 byte) and 16 tag bytes
+            $rec->data($rec->decrypt_data
+                .pack("C", TLSProxy::Record::RT_HANDSHAKE).("\0"x16));
+        } else {
+            $rec->data($rec->decrypt_data);
+        }
+
+        #Update the fragment len in case we changed it above
+        ${$self->message_frag_lens}[0] = length($msgdata)
+                                         - TLS_MESSAGE_HEADER_LENGTH;
+        return;
+    }
+
+    #Note we don't currently support changing a fragmented message length
+    my $recctr = 0;
+    my $datadone = 0;
+    foreach my $rec (@{$self->records}) {
+        my $recdata = $rec->decrypt_data;
+        if ($recctr == 0) {
+            #This is the first record
+            my $remainlen = length($recdata) - $self->startoffset;
+            $rec->data(substr($recdata, 0, $self->startoffset)
+                       .substr(($msgdata), 0, $remainlen));
+            $datadone += $remainlen;
+        } elsif ($recctr + 1 == $numrecs) {
+            #This is the last record
+            $rec->data(substr($msgdata, $datadone));
+        } else {
+            #This is a middle record
+            $rec->data(substr($msgdata, $datadone, length($rec->data)));
+            $datadone += length($rec->data);
+        }
+        $recctr++;
+    }
+}
+
+#To be overridden by sub-classes
+sub set_message_contents
+{
+}
+
+#Read only accessors
+sub server
+{
+    my $self = shift;
+    return $self->{server};
+}
+
+#Read/write accessors
+sub mt
+{
+    my $self = shift;
+    if (@_) {
+      $self->{mt} = shift;
+    }
+    return $self->{mt};
+}
+sub data
+{
+    my $self = shift;
+    if (@_) {
+      $self->{data} = shift;
+    }
+    return $self->{data};
+}
+sub records
+{
+    my $self = shift;
+    if (@_) {
+      $self->{records} = shift;
+    }
+    return $self->{records};
+}
+sub startoffset
+{
+    my $self = shift;
+    if (@_) {
+      $self->{startoffset} = shift;
+    }
+    return $self->{startoffset};
+}
+sub message_frag_lens
+{
+    my $self = shift;
+    if (@_) {
+      $self->{message_frag_lens} = shift;
+    }
+    return $self->{message_frag_lens};
+}
+sub encoded_length
+{
+    my $self = shift;
+    return TLS_MESSAGE_HEADER_LENGTH + length($self->data);
+}
+sub dupext
+{
+    my $self = shift;
+    if (@_) {
+        $self->{dupext} = shift;
+    }
+    return $self->{dupext};
+}
+sub successondata
+{
+    my $class = shift;
+    if (@_) {
+        $successondata = shift;
+    }
+    return $successondata;
+}
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/NewSessionTicket.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/NewSessionTicket.pm
new file mode 100644
index 000000000..e5099851d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/NewSessionTicket.pm
@@ -0,0 +1,81 @@
+# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+
+package TLSProxy::NewSessionTicket;
+
+use vars '@ISA';
+push @ISA, 'TLSProxy::Message';
+
+sub new
+{
+    my $class = shift;
+    my ($server,
+        $data,
+        $records,
+        $startoffset,
+        $message_frag_lens) = @_;
+
+    my $self = $class->SUPER::new(
+        $server,
+        TLSProxy::Message::MT_NEW_SESSION_TICKET,
+        $data,
+        $records,
+        $startoffset,
+        $message_frag_lens);
+
+    $self->{ticket_lifetime_hint} = 0;
+    $self->{ticket} = "";
+
+    return $self;
+}
+
+sub parse
+{
+    my $self = shift;
+
+    my $ticket_lifetime_hint = unpack('N', $self->data);
+    my $ticket_len = unpack('n', $self->data);
+    my $ticket = substr($self->data, 6, $ticket_len);
+
+    $self->ticket_lifetime_hint($ticket_lifetime_hint);
+    $self->ticket($ticket);
+}
+
+
+#Reconstruct the on-the-wire message data following changes
+sub set_message_contents
+{
+    my $self = shift;
+    my $data;
+
+    $data = pack('N', $self->ticket_lifetime_hint);
+    $data .= pack('n', length($self->ticket));
+    $data .= $self->ticket;
+
+    $self->data($data);
+}
+
+#Read/write accessors
+sub ticket_lifetime_hint
+{
+    my $self = shift;
+    if (@_) {
+      $self->{ticket_lifetime_hint} = shift;
+    }
+    return $self->{ticket_lifetime_hint};
+}
+sub ticket
+{
+    my $self = shift;
+    if (@_) {
+      $self->{ticket} = shift;
+    }
+    return $self->{ticket};
+}
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Proxy.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Proxy.pm
new file mode 100644
index 000000000..f7bca02e5
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Proxy.pm
@@ -0,0 +1,728 @@
+# Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+use POSIX ":sys_wait_h";
+
+package TLSProxy::Proxy;
+
+use File::Spec;
+use IO::Socket;
+use IO::Select;
+use TLSProxy::Record;
+use TLSProxy::Message;
+use TLSProxy::ClientHello;
+use TLSProxy::ServerHello;
+use TLSProxy::EncryptedExtensions;
+use TLSProxy::Certificate;
+use TLSProxy::CertificateVerify;
+use TLSProxy::ServerKeyExchange;
+use TLSProxy::NewSessionTicket;
+
+my $have_IPv6;
+my $IP_factory;
+
+BEGIN
+{
+    # IO::Socket::IP is on the core module list, IO::Socket::INET6 isn't.
+    # However, IO::Socket::INET6 is older and is said to be more widely
+    # deployed for the moment, and may have less bugs, so we try the latter
+    # first, then fall back on the core modules.  Worst case scenario, we
+    # fall back to IO::Socket::INET, only supports IPv4.
+    eval {
+        require IO::Socket::INET6;
+        my $s = IO::Socket::INET6->new(
+            LocalAddr => "::1",
+            LocalPort => 0,
+            Listen=>1,
+            );
+        $s or die "\n";
+        $s->close();
+    };
+    if ($@ eq "") {
+        $IP_factory = sub { IO::Socket::INET6->new(Domain => AF_INET6, @_); };
+        $have_IPv6 = 1;
+    } else {
+        eval {
+            require IO::Socket::IP;
+            my $s = IO::Socket::IP->new(
+                LocalAddr => "::1",
+                LocalPort => 0,
+                Listen=>1,
+                );
+            $s or die "\n";
+            $s->close();
+        };
+        if ($@ eq "") {
+            $IP_factory = sub { IO::Socket::IP->new(@_); };
+            $have_IPv6 = 1;
+        } else {
+            $IP_factory = sub { IO::Socket::INET->new(@_); };
+            $have_IPv6 = 0;
+        }
+    }
+}
+
+my $is_tls13 = 0;
+my $ciphersuite = undef;
+
+sub new
+{
+    my $class = shift;
+    my ($filter,
+        $execute,
+        $cert,
+        $debug) = @_;
+
+    my $self = {
+        #Public read/write
+        proxy_addr => $have_IPv6 ? "[::1]" : "127.0.0.1",
+        filter => $filter,
+        serverflags => "",
+        clientflags => "",
+        serverconnects => 1,
+        reneg => 0,
+        sessionfile => undef,
+
+        #Public read
+        proxy_port => 0,
+        server_port => 0,
+        serverpid => 0,
+        clientpid => 0,
+        execute => $execute,
+        cert => $cert,
+        debug => $debug,
+        cipherc => "",
+        ciphersuitesc => "",
+        ciphers => "AES128-SHA",
+        ciphersuitess => "TLS_AES_128_GCM_SHA256",
+        flight => -1,
+        direction => -1,
+        partial => ["", ""],
+        record_list => [],
+        message_list => [],
+    };
+
+    # Create the Proxy socket
+    my $proxaddr = $self->{proxy_addr};
+    $proxaddr =~ s/[\[\]]//g; # Remove [ and ]
+    my @proxyargs = (
+        LocalHost   => $proxaddr,
+        LocalPort   => 0,
+        Proto       => "tcp",
+        Listen      => SOMAXCONN,
+       );
+
+    if (my $sock = $IP_factory->(@proxyargs)) {
+        $self->{proxy_sock} = $sock;
+        $self->{proxy_port} = $sock->sockport();
+        $self->{proxy_addr} = $sock->sockhost();
+        $self->{proxy_addr} =~ s/(.*:.*)/[$1]/;
+        print "Proxy started on port ",
+              "$self->{proxy_addr}:$self->{proxy_port}\n";
+        # use same address for s_server
+        $self->{server_addr} = $self->{proxy_addr};
+    } else {
+        warn "Failed creating proxy socket (".$proxaddr.",0): $!\n";
+    }
+
+    return bless $self, $class;
+}
+
+sub DESTROY
+{
+    my $self = shift;
+
+    $self->{proxy_sock}->close() if $self->{proxy_sock};
+}
+
+sub clearClient
+{
+    my $self = shift;
+
+    $self->{cipherc} = "";
+    $self->{ciphersuitec} = "";
+    $self->{flight} = -1;
+    $self->{direction} = -1;
+    $self->{partial} = ["", ""];
+    $self->{record_list} = [];
+    $self->{message_list} = [];
+    $self->{clientflags} = "";
+    $self->{sessionfile} = undef;
+    $self->{clientpid} = 0;
+    $is_tls13 = 0;
+    $ciphersuite = undef;
+
+    TLSProxy::Message->clear();
+    TLSProxy::Record->clear();
+}
+
+sub clear
+{
+    my $self = shift;
+
+    $self->clearClient;
+    $self->{ciphers} = "AES128-SHA";
+    $self->{ciphersuitess} = "TLS_AES_128_GCM_SHA256";
+    $self->{serverflags} = "";
+    $self->{serverconnects} = 1;
+    $self->{serverpid} = 0;
+    $self->{reneg} = 0;
+}
+
+sub restart
+{
+    my $self = shift;
+
+    $self->clear;
+    $self->start;
+}
+
+sub clientrestart
+{
+    my $self = shift;
+
+    $self->clear;
+    $self->clientstart;
+}
+
+sub connect_to_server
+{
+    my $self = shift;
+    my $servaddr = $self->{server_addr};
+
+    $servaddr =~ s/[\[\]]//g; # Remove [ and ]
+
+    my $sock = $IP_factory->(PeerAddr => $servaddr,
+                             PeerPort => $self->{server_port},
+                             Proto => 'tcp');
+    if (!defined($sock)) {
+        my $err = $!;
+        kill(3, $self->{real_serverpid});
+        die "unable to connect: $err\n";
+    }
+
+    $self->{server_sock} = $sock;
+}
+
+sub start
+{
+    my ($self) = shift;
+    my $pid;
+
+    if ($self->{proxy_sock} == 0) {
+        return 0;
+    }
+
+    my $execcmd = $self->execute
+        ." s_server -max_protocol TLSv1.3 -no_comp -rev -engine ossltest"
+        #In TLSv1.3 we issue two session tickets. The default session id
+        #callback gets confused because the ossltest engine causes the same
+        #session id to be created twice due to the changed random number
+        #generation. Using "-ext_cache" replaces the default callback with a
+        #different one that doesn't get confused.
+        ." -ext_cache"
+        ." -accept $self->{server_addr}:0"
+        ." -cert ".$self->cert." -cert2 ".$self->cert
+        ." -naccept ".$self->serverconnects;
+    if ($self->ciphers ne "") {
+        $execcmd .= " -cipher ".$self->ciphers;
+    }
+    if ($self->ciphersuitess ne "") {
+        $execcmd .= " -ciphersuites ".$self->ciphersuitess;
+    }
+    if ($self->serverflags ne "") {
+        $execcmd .= " ".$self->serverflags;
+    }
+    if ($self->debug) {
+        print STDERR "Server command: $execcmd\n";
+    }
+
+    open(my $savedin, "<&STDIN");
+
+    # Temporarily replace STDIN so that sink process can inherit it...
+    $pid = open(STDIN, "$execcmd 2>&1 |") or die "Failed to $execcmd: $!\n";
+    $self->{real_serverpid} = $pid;
+
+    # Process the output from s_server until we find the ACCEPT line, which
+    # tells us what the accepting address and port are.
+    while (<>) {
+        print;
+        s/\R$//;                # Better chomp
+        next unless (/^ACCEPT\s.*:(\d+)$/);
+        $self->{server_port} = $1;
+        last;
+    }
+
+    if ($self->{server_port} == 0) {
+        # This actually means that s_server exited, because otherwise
+        # we would still searching for ACCEPT...
+        waitpid($pid, 0);
+        die "no ACCEPT detected in '$execcmd' output: $?\n";
+    }
+
+    # Just make sure everything else is simply printed [as separate lines].
+    # The sub process simply inherits our STD* and will keep consuming
+    # server's output and printing it as long as there is anything there,
+    # out of our way.
+    my $error;
+    $pid = undef;
+    if (eval { require Win32::Process; 1; }) {
+        if (Win32::Process::Create(my $h, $^X, "perl -ne print", 0, 0, ".")) {
+            $pid = $h->GetProcessID();
+            $self->{proc_handle} = $h;  # hold handle till next round [or exit]
+        } else {
+            $error = Win32::FormatMessage(Win32::GetLastError());
+        }
+    } else {
+        if (defined($pid = fork)) {
+            $pid or exec("$^X -ne print") or exit($!);
+        } else {
+            $error = $!;
+        }
+    }
+
+    # Change back to original stdin
+    open(STDIN, "<&", $savedin);
+    close($savedin);
+
+    if (!defined($pid)) {
+        kill(3, $self->{real_serverpid});
+        die "Failed to capture s_server's output: $error\n";
+    }
+
+    $self->{serverpid} = $pid;
+
+    print STDERR "Server responds on ",
+                 "$self->{server_addr}:$self->{server_port}\n";
+
+    # Connect right away...
+    $self->connect_to_server();
+
+    return $self->clientstart;
+}
+
+sub clientstart
+{
+    my ($self) = shift;
+
+    if ($self->execute) {
+        my $pid;
+        my $execcmd = $self->execute
+             ." s_client -max_protocol TLSv1.3 -engine ossltest"
+             ." -connect $self->{proxy_addr}:$self->{proxy_port}";
+        if ($self->cipherc ne "") {
+            $execcmd .= " -cipher ".$self->cipherc;
+        }
+        if ($self->ciphersuitesc ne "") {
+            $execcmd .= " -ciphersuites ".$self->ciphersuitesc;
+        }
+        if ($self->clientflags ne "") {
+            $execcmd .= " ".$self->clientflags;
+        }
+        if ($self->clientflags !~ m/-(no)?servername/) {
+            $execcmd .= " -servername localhost";
+        }
+        if (defined $self->sessionfile) {
+            $execcmd .= " -ign_eof";
+        }
+        if ($self->debug) {
+            print STDERR "Client command: $execcmd\n";
+        }
+
+        open(my $savedout, ">&STDOUT");
+        # If we open pipe with new descriptor, attempt to close it,
+        # explicitly or implicitly, would incur waitpid and effectively
+        # dead-lock...
+        if (!($pid = open(STDOUT, "| $execcmd"))) {
+            my $err = $!;
+            kill(3, $self->{real_serverpid});
+            die "Failed to $execcmd: $err\n";
+        }
+        $self->{clientpid} = $pid;
+
+        # queue [magic] input
+        print $self->reneg ? "R" : "test";
+
+        # this closes client's stdin without waiting for its pid
+        open(STDOUT, ">&", $savedout);
+        close($savedout);
+    }
+
+    # Wait for incoming connection from client
+    my $fdset = IO::Select->new($self->{proxy_sock});
+    if (!$fdset->can_read(60)) {
+        kill(3, $self->{real_serverpid});
+        die "s_client didn't try to connect\n";
+    }
+
+    my $client_sock;
+    if(!($client_sock = $self->{proxy_sock}->accept())) {
+        warn "Failed accepting incoming connection: $!\n";
+        return 0;
+    }
+
+    print "Connection opened\n";
+
+    my $server_sock = $self->{server_sock};
+    my $indata;
+
+    #Wait for either the server socket or the client socket to become readable
+    $fdset = IO::Select->new($server_sock, $client_sock);
+    my @ready;
+    my $ctr = 0;
+    local $SIG{PIPE} = "IGNORE";
+    $self->{saw_session_ticket} = undef;
+    while($fdset->count && $ctr < 10) {
+        if (defined($self->{sessionfile})) {
+            # s_client got -ign_eof and won't be exiting voluntarily, so we
+            # look for data *and* session ticket...
+            last if TLSProxy::Message->success()
+                    && $self->{saw_session_ticket};
+        }
+        if (!(@ready = $fdset->can_read(1))) {
+            $ctr++;
+            next;
+        }
+        foreach my $hand (@ready) {
+            if ($hand == $server_sock) {
+                if ($server_sock->sysread($indata, 16384)) {
+                    if ($indata = $self->process_packet(1, $indata)) {
+                        $client_sock->syswrite($indata) or goto END;
+                    }
+                    $ctr = 0;
+                } else {
+                    $fdset->remove($server_sock);
+                    $client_sock->shutdown(SHUT_WR);
+                }
+            } elsif ($hand == $client_sock) {
+                if ($client_sock->sysread($indata, 16384)) {
+                    if ($indata = $self->process_packet(0, $indata)) {
+                        $server_sock->syswrite($indata) or goto END;
+                    }
+                    $ctr = 0;
+                } else {
+                    $fdset->remove($client_sock);
+                    $server_sock->shutdown(SHUT_WR);
+                }
+            } else {
+                kill(3, $self->{real_serverpid});
+                die "Unexpected handle";
+            }
+        }
+    }
+
+    if ($ctr >= 10) {
+        kill(3, $self->{real_serverpid});
+        die "No progress made";
+    }
+
+    END:
+    print "Connection closed\n";
+    if($server_sock) {
+        $server_sock->close();
+        $self->{server_sock} = undef;
+    }
+    if($client_sock) {
+        #Closing this also kills the child process
+        $client_sock->close();
+    }
+
+    my $pid;
+    if (--$self->{serverconnects} == 0) {
+        $pid = $self->{serverpid};
+        print "Waiting for 'perl -ne print' process to close: $pid...\n";
+        $pid = waitpid($pid, 0);
+        if ($pid > 0) {
+            die "exit code $? from 'perl -ne print' process\n" if $? != 0;
+        } elsif ($pid == 0) {
+            kill(3, $self->{real_serverpid});
+            die "lost control over $self->{serverpid}?";
+        }
+        $pid = $self->{real_serverpid};
+        print "Waiting for s_server process to close: $pid...\n";
+        # it's done already, just collect the exit code [and reap]...
+        waitpid($pid, 0);
+        die "exit code $? from s_server process\n" if $? != 0;
+    } else {
+        # It's a bit counter-intuitive spot to make next connection to
+        # the s_server. Rationale is that established connection works
+        # as syncronization point, in sense that this way we know that
+        # s_server is actually done with current session...
+        $self->connect_to_server();
+    }
+    $pid = $self->{clientpid};
+    print "Waiting for s_client process to close: $pid...\n";
+    waitpid($pid, 0);
+
+    return 1;
+}
+
+sub process_packet
+{
+    my ($self, $server, $packet) = @_;
+    my $len_real;
+    my $decrypt_len;
+    my $data;
+    my $recnum;
+
+    if ($server) {
+        print "Received server packet\n";
+    } else {
+        print "Received client packet\n";
+    }
+
+    if ($self->{direction} != $server) {
+        $self->{flight} = $self->{flight} + 1;
+        $self->{direction} = $server;
+    }
+
+    print "Packet length = ".length($packet)."\n";
+    print "Processing flight ".$self->flight."\n";
+
+    #Return contains the list of record found in the packet followed by the
+    #list of messages in those records and any partial message
+    my @ret = TLSProxy::Record->get_records($server, $self->flight,
+                                            $self->{partial}[$server].$packet);
+    $self->{partial}[$server] = $ret[2];
+    push @{$self->{record_list}}, @{$ret[0]};
+    push @{$self->{message_list}}, @{$ret[1]};
+
+    print "\n";
+
+    if (scalar(@{$ret[0]}) == 0 or length($ret[2]) != 0) {
+        return "";
+    }
+
+    #Finished parsing. Call user provided filter here
+    if (defined $self->filter) {
+        $self->filter->($self);
+    }
+
+    #Take a note on NewSessionTicket
+    foreach my $message (reverse @{$self->{message_list}}) {
+        if ($message->{mt} == TLSProxy::Message::MT_NEW_SESSION_TICKET) {
+            $self->{saw_session_ticket} = 1;
+            last;
+        }
+    }
+
+    #Reconstruct the packet
+    $packet = "";
+    foreach my $record (@{$self->record_list}) {
+        $packet .= $record->reconstruct_record($server);
+    }
+
+    print "Forwarded packet length = ".length($packet)."\n\n";
+
+    return $packet;
+}
+
+#Read accessors
+sub execute
+{
+    my $self = shift;
+    return $self->{execute};
+}
+sub cert
+{
+    my $self = shift;
+    return $self->{cert};
+}
+sub debug
+{
+    my $self = shift;
+    return $self->{debug};
+}
+sub flight
+{
+    my $self = shift;
+    return $self->{flight};
+}
+sub record_list
+{
+    my $self = shift;
+    return $self->{record_list};
+}
+sub success
+{
+    my $self = shift;
+    return $self->{success};
+}
+sub end
+{
+    my $self = shift;
+    return $self->{end};
+}
+sub supports_IPv6
+{
+    my $self = shift;
+    return $have_IPv6;
+}
+sub proxy_addr
+{
+    my $self = shift;
+    return $self->{proxy_addr};
+}
+sub proxy_port
+{
+    my $self = shift;
+    return $self->{proxy_port};
+}
+sub server_addr
+{
+    my $self = shift;
+    return $self->{server_addr};
+}
+sub server_port
+{
+    my $self = shift;
+    return $self->{server_port};
+}
+sub serverpid
+{
+    my $self = shift;
+    return $self->{serverpid};
+}
+sub clientpid
+{
+    my $self = shift;
+    return $self->{clientpid};
+}
+
+#Read/write accessors
+sub filter
+{
+    my $self = shift;
+    if (@_) {
+        $self->{filter} = shift;
+    }
+    return $self->{filter};
+}
+sub cipherc
+{
+    my $self = shift;
+    if (@_) {
+        $self->{cipherc} = shift;
+    }
+    return $self->{cipherc};
+}
+sub ciphersuitesc
+{
+    my $self = shift;
+    if (@_) {
+        $self->{ciphersuitesc} = shift;
+    }
+    return $self->{ciphersuitesc};
+}
+sub ciphers
+{
+    my $self = shift;
+    if (@_) {
+        $self->{ciphers} = shift;
+    }
+    return $self->{ciphers};
+}
+sub ciphersuitess
+{
+    my $self = shift;
+    if (@_) {
+        $self->{ciphersuitess} = shift;
+    }
+    return $self->{ciphersuitess};
+}
+sub serverflags
+{
+    my $self = shift;
+    if (@_) {
+        $self->{serverflags} = shift;
+    }
+    return $self->{serverflags};
+}
+sub clientflags
+{
+    my $self = shift;
+    if (@_) {
+        $self->{clientflags} = shift;
+    }
+    return $self->{clientflags};
+}
+sub serverconnects
+{
+    my $self = shift;
+    if (@_) {
+        $self->{serverconnects} = shift;
+    }
+    return $self->{serverconnects};
+}
+# This is a bit ugly because the caller is responsible for keeping the records
+# in sync with the updated message list; simply updating the message list isn't
+# sufficient to get the proxy to forward the new message.
+# But it does the trick for the one test (test_sslsessiontick) that needs it.
+sub message_list
+{
+    my $self = shift;
+    if (@_) {
+        $self->{message_list} = shift;
+    }
+    return $self->{message_list};
+}
+
+sub fill_known_data
+{
+    my $length = shift;
+    my $ret = "";
+    for (my $i = 0; $i < $length; $i++) {
+        $ret .= chr($i);
+    }
+    return $ret;
+}
+
+sub is_tls13
+{
+    my $class = shift;
+    if (@_) {
+        $is_tls13 = shift;
+    }
+    return $is_tls13;
+}
+
+sub reneg
+{
+    my $self = shift;
+    if (@_) {
+        $self->{reneg} = shift;
+    }
+    return $self->{reneg};
+}
+
+#Setting a sessionfile means that the client will not close until the given
+#file exists. This is useful in TLSv1.3 where otherwise s_client will close
+#immediately at the end of the handshake, but before the session has been
+#received from the server. A side effect of this is that s_client never sends
+#a close_notify, so instead we consider success to be when it sends application
+#data over the connection.
+sub sessionfile
+{
+    my $self = shift;
+    if (@_) {
+        $self->{sessionfile} = shift;
+        TLSProxy::Message->successondata(1);
+    }
+    return $self->{sessionfile};
+}
+
+sub ciphersuite
+{
+    my $class = shift;
+    if (@_) {
+        $ciphersuite = shift;
+    }
+    return $ciphersuite;
+}
+
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Record.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Record.pm
new file mode 100644
index 000000000..841467b8e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/Record.pm
@@ -0,0 +1,401 @@
+# Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+
+use TLSProxy::Proxy;
+
+package TLSProxy::Record;
+
+my $server_encrypting = 0;
+my $client_encrypting = 0;
+my $etm = 0;
+
+use constant TLS_RECORD_HEADER_LENGTH => 5;
+
+#Record types
+use constant {
+    RT_APPLICATION_DATA => 23,
+    RT_HANDSHAKE => 22,
+    RT_ALERT => 21,
+    RT_CCS => 20,
+    RT_UNKNOWN => 100
+};
+
+my %record_type = (
+    RT_APPLICATION_DATA, "APPLICATION DATA",
+    RT_HANDSHAKE, "HANDSHAKE",
+    RT_ALERT, "ALERT",
+    RT_CCS, "CCS",
+    RT_UNKNOWN, "UNKNOWN"
+);
+
+use constant {
+    VERS_TLS_1_4 => 0x0305,
+    VERS_TLS_1_3 => 0x0304,
+    VERS_TLS_1_2 => 0x0303,
+    VERS_TLS_1_1 => 0x0302,
+    VERS_TLS_1_0 => 0x0301,
+    VERS_SSL_3_0 => 0x0300,
+    VERS_SSL_LT_3_0 => 0x02ff
+};
+
+my %tls_version = (
+    VERS_TLS_1_3, "TLS1.3",
+    VERS_TLS_1_2, "TLS1.2",
+    VERS_TLS_1_1, "TLS1.1",
+    VERS_TLS_1_0, "TLS1.0",
+    VERS_SSL_3_0, "SSL3",
+    VERS_SSL_LT_3_0, "SSL<3"
+);
+
+#Class method to extract records from a packet of data
+sub get_records
+{
+    my $class = shift;
+    my $server = shift;
+    my $flight = shift;
+    my $packet = shift;
+    my $partial = "";
+    my @record_list = ();
+    my @message_list = ();
+
+    my $recnum = 1;
+    while (length ($packet) > 0) {
+        print " Record $recnum ", $server ? "(server -> client)\n"
+                                          : "(client -> server)\n";
+
+        #Get the record header (unpack can't fail if $packet is too short)
+        my ($content_type, $version, $len) = unpack('Cnn', $packet);
+
+        if (length($packet) < TLS_RECORD_HEADER_LENGTH + ($len // 0)) {
+            print "Partial data : ".length($packet)." bytes\n";
+            $partial = $packet;
+            last;
+        }
+
+        my $data = substr($packet, TLS_RECORD_HEADER_LENGTH, $len);
+
+        print "  Content type: ".$record_type{$content_type}."\n";
+        print "  Version: $tls_version{$version}\n";
+        print "  Length: $len\n";
+
+        my $record = TLSProxy::Record->new(
+            $flight,
+            $content_type,
+            $version,
+            $len,
+            0,
+            $len,       # len_real
+            $len,       # decrypt_len
+            $data,      # data
+            $data       # decrypt_data
+        );
+
+        if ($content_type != RT_CCS
+                && (!TLSProxy::Proxy->is_tls13()
+                    || $content_type != RT_ALERT)) {
+            if (($server && $server_encrypting)
+                     || (!$server && $client_encrypting)) {
+                if (!TLSProxy::Proxy->is_tls13() && $etm) {
+                    $record->decryptETM();
+                } else {
+                    $record->decrypt();
+                }
+                $record->encrypted(1);
+
+                if (TLSProxy::Proxy->is_tls13()) {
+                    print "  Inner content type: "
+                          .$record_type{$record->content_type()}."\n";
+                }
+            }
+        }
+
+        push @record_list, $record;
+
+        #Now figure out what messages are contained within this record
+        my @messages = TLSProxy::Message->get_messages($server, $record);
+        push @message_list, @messages;
+
+        $packet = substr($packet, TLS_RECORD_HEADER_LENGTH + $len);
+        $recnum++;
+    }
+
+    return (\@record_list, \@message_list, $partial);
+}
+
+sub clear
+{
+    $server_encrypting = 0;
+    $client_encrypting = 0;
+}
+
+#Class level accessors
+sub server_encrypting
+{
+    my $class = shift;
+    if (@_) {
+      $server_encrypting = shift;
+    }
+    return $server_encrypting;
+}
+sub client_encrypting
+{
+    my $class = shift;
+    if (@_) {
+      $client_encrypting= shift;
+    }
+    return $client_encrypting;
+}
+#Enable/Disable Encrypt-then-MAC
+sub etm
+{
+    my $class = shift;
+    if (@_) {
+      $etm = shift;
+    }
+    return $etm;
+}
+
+sub new
+{
+    my $class = shift;
+    my ($flight,
+        $content_type,
+        $version,
+        $len,
+        $sslv2,
+        $len_real,
+        $decrypt_len,
+        $data,
+        $decrypt_data) = @_;
+
+    my $self = {
+        flight => $flight,
+        content_type => $content_type,
+        version => $version,
+        len => $len,
+        sslv2 => $sslv2,
+        len_real => $len_real,
+        decrypt_len => $decrypt_len,
+        data => $data,
+        decrypt_data => $decrypt_data,
+        orig_decrypt_data => $decrypt_data,
+        sent => 0,
+        encrypted => 0,
+        outer_content_type => RT_APPLICATION_DATA
+    };
+
+    return bless $self, $class;
+}
+
+#Decrypt using encrypt-then-MAC
+sub decryptETM
+{
+    my ($self) = shift;
+
+    my $data = $self->data;
+
+    if($self->version >= VERS_TLS_1_1()) {
+        #TLS1.1+ has an explicit IV. Throw it away
+        $data = substr($data, 16);
+    }
+
+    #Throw away the MAC (assumes MAC is 20 bytes for now. FIXME)
+    $data = substr($data, 0, length($data) - 20);
+
+    #Find out what the padding byte is
+    my $padval = unpack("C", substr($data, length($data) - 1));
+
+    #Throw away the padding
+    $data = substr($data, 0, length($data) - ($padval + 1));
+
+    $self->decrypt_data($data);
+    $self->decrypt_len(length($data));
+
+    return $data;
+}
+
+#Standard decrypt
+sub decrypt()
+{
+    my ($self) = shift;
+    my $mactaglen = 20;
+    my $data = $self->data;
+
+    #Throw away any IVs
+    if (TLSProxy::Proxy->is_tls13()) {
+        #A TLS1.3 client, when processing the server's initial flight, could
+        #respond with either an encrypted or an unencrypted alert.
+        if ($self->content_type() == RT_ALERT) {
+            #TODO(TLS1.3): Eventually it is sufficient just to check the record
+            #content type. If an alert is encrypted it will have a record
+            #content type of application data. However we haven't done the
+            #record layer changes yet, so it's a bit more complicated. For now
+            #we will additionally check if the data length is 2 (1 byte for
+            #alert level, 1 byte for alert description). If it is, then this is
+            #an unencrypted alert, so don't try to decrypt
+            return $data if (length($data) == 2);
+        }
+        $mactaglen = 16;
+    } elsif ($self->version >= VERS_TLS_1_1()) {
+        #16 bytes for a standard IV
+        $data = substr($data, 16);
+
+        #Find out what the padding byte is
+        my $padval = unpack("C", substr($data, length($data) - 1));
+
+        #Throw away the padding
+        $data = substr($data, 0, length($data) - ($padval + 1));
+    }
+
+    #Throw away the MAC or TAG
+    $data = substr($data, 0, length($data) - $mactaglen);
+
+    if (TLSProxy::Proxy->is_tls13()) {
+        #Get the content type
+        my $content_type = unpack("C", substr($data, length($data) - 1));
+        $self->content_type($content_type);
+        $data = substr($data, 0, length($data) - 1);
+    }
+
+    $self->decrypt_data($data);
+    $self->decrypt_len(length($data));
+
+    return $data;
+}
+
+#Reconstruct the on-the-wire record representation
+sub reconstruct_record
+{
+    my $self = shift;
+    my $server = shift;
+    my $data;
+
+    #We only replay the records in the same direction
+    if ($self->{sent} || ($self->flight & 1) != $server) {
+        return "";
+    }
+    $self->{sent} = 1;
+
+    if ($self->sslv2) {
+        $data = pack('n', $self->len | 0x8000);
+    } else {
+        if (TLSProxy::Proxy->is_tls13() && $self->encrypted) {
+            $data = pack('Cnn', $self->outer_content_type, $self->version,
+                         $self->len);
+        } else {
+            $data = pack('Cnn', $self->content_type, $self->version,
+                         $self->len);
+        }
+
+    }
+    $data .= $self->data;
+
+    return $data;
+}
+
+#Read only accessors
+sub flight
+{
+    my $self = shift;
+    return $self->{flight};
+}
+sub sslv2
+{
+    my $self = shift;
+    return $self->{sslv2};
+}
+sub len_real
+{
+    my $self = shift;
+    return $self->{len_real};
+}
+sub orig_decrypt_data
+{
+    my $self = shift;
+    return $self->{orig_decrypt_data};
+}
+
+#Read/write accessors
+sub decrypt_len
+{
+    my $self = shift;
+    if (@_) {
+      $self->{decrypt_len} = shift;
+    }
+    return $self->{decrypt_len};
+}
+sub data
+{
+    my $self = shift;
+    if (@_) {
+      $self->{data} = shift;
+    }
+    return $self->{data};
+}
+sub decrypt_data
+{
+    my $self = shift;
+    if (@_) {
+      $self->{decrypt_data} = shift;
+    }
+    return $self->{decrypt_data};
+}
+sub len
+{
+    my $self = shift;
+    if (@_) {
+      $self->{len} = shift;
+    }
+    return $self->{len};
+}
+sub version
+{
+    my $self = shift;
+    if (@_) {
+      $self->{version} = shift;
+    }
+    return $self->{version};
+}
+sub content_type
+{
+    my $self = shift;
+    if (@_) {
+      $self->{content_type} = shift;
+    }
+    return $self->{content_type};
+}
+sub encrypted
+{
+    my $self = shift;
+    if (@_) {
+      $self->{encrypted} = shift;
+    }
+    return $self->{encrypted};
+}
+sub outer_content_type
+{
+    my $self = shift;
+    if (@_) {
+      $self->{outer_content_type} = shift;
+    }
+    return $self->{outer_content_type};
+}
+sub is_fatal_alert
+{
+    my $self = shift;
+    my $server = shift;
+
+    if (($self->{flight} & 1) == $server
+        && $self->{content_type} == TLSProxy::Record::RT_ALERT) {
+        my ($level, $alert) = unpack('CC', $self->decrypt_data);
+        return $alert if ($level == 2);
+    }
+    return 0;
+}
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/ServerHello.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/ServerHello.pm
new file mode 100644
index 000000000..e9f1eca19
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/ServerHello.pm
@@ -0,0 +1,236 @@
+# Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+
+package TLSProxy::ServerHello;
+
+use vars '@ISA';
+push @ISA, 'TLSProxy::Message';
+
+my $hrrrandom = pack("C*", 0xCF, 0x21, 0xAD, 0x74, 0xE5, 0x9A, 0x61, 0x11, 0xBE,
+                           0x1D, 0x8C, 0x02, 0x1E, 0x65, 0xB8, 0x91, 0xC2, 0xA2,
+                           0x11, 0x16, 0x7A, 0xBB, 0x8C, 0x5E, 0x07, 0x9E, 0x09,
+                           0xE2, 0xC8, 0xA8, 0x33, 0x9C);
+
+sub new
+{
+    my $class = shift;
+    my ($server,
+        $data,
+        $records,
+        $startoffset,
+        $message_frag_lens) = @_;
+
+    my $self = $class->SUPER::new(
+        $server,
+        TLSProxy::Message::MT_SERVER_HELLO,
+        $data,
+        $records,
+        $startoffset,
+        $message_frag_lens);
+
+    $self->{server_version} = 0;
+    $self->{random} = [];
+    $self->{session_id_len} = 0;
+    $self->{session} = "";
+    $self->{ciphersuite} = 0;
+    $self->{comp_meth} = 0;
+    $self->{extension_data} = "";
+
+    return $self;
+}
+
+sub parse
+{
+    my $self = shift;
+    my $ptr = 2;
+    my ($server_version) = unpack('n', $self->data);
+    my $neg_version = $server_version;
+
+    my $random = substr($self->data, $ptr, 32);
+    $ptr += 32;
+    my $session_id_len = 0;
+    my $session = "";
+    $session_id_len = unpack('C', substr($self->data, $ptr));
+    $ptr++;
+    $session = substr($self->data, $ptr, $session_id_len);
+    $ptr += $session_id_len;
+
+    my $ciphersuite = unpack('n', substr($self->data, $ptr));
+    $ptr += 2;
+    my $comp_meth = 0;
+    $comp_meth = unpack('C', substr($self->data, $ptr));
+    $ptr++;
+
+    my $extensions_len = unpack('n', substr($self->data, $ptr));
+    if (!defined $extensions_len) {
+        $extensions_len = 0;
+    } else {
+        $ptr += 2;
+    }
+    #For now we just deal with this as a block of data. In the future we will
+    #want to parse this
+    my $extension_data;
+    if ($extensions_len != 0) {
+        $extension_data = substr($self->data, $ptr);
+
+        if (length($extension_data) != $extensions_len) {
+            die "Invalid extension length\n";
+        }
+    } else {
+        if (length($self->data) != $ptr) {
+            die "Invalid extension length\n";
+        }
+        $extension_data = "";
+    }
+    my %extensions = ();
+    while (length($extension_data) >= 4) {
+        my ($type, $size) = unpack("nn", $extension_data);
+        my $extdata = substr($extension_data, 4, $size);
+        $extension_data = substr($extension_data, 4 + $size);
+        $extensions{$type} = $extdata;
+        if ($type == TLSProxy::Message::EXT_SUPPORTED_VERSIONS) {
+            $neg_version = unpack('n', $extdata);
+        }
+    }
+
+    if ($random eq $hrrrandom) {
+        TLSProxy::Proxy->is_tls13(1);
+    } elsif ($neg_version == TLSProxy::Record::VERS_TLS_1_3) {
+        TLSProxy::Proxy->is_tls13(1);
+
+        TLSProxy::Record->server_encrypting(1);
+        TLSProxy::Record->client_encrypting(1);
+    }
+
+    $self->server_version($server_version);
+    $self->random($random);
+    $self->session_id_len($session_id_len);
+    $self->session($session);
+    $self->ciphersuite($ciphersuite);
+    TLSProxy::Proxy->ciphersuite($ciphersuite);
+    $self->comp_meth($comp_meth);
+    $self->extension_data(\%extensions);
+
+    $self->process_data();
+
+
+    print "    Server Version:".$server_version."\n";
+    print "    Session ID Len:".$session_id_len."\n";
+    print "    Ciphersuite:".$ciphersuite."\n";
+    print "    Compression Method:".$comp_meth."\n";
+    print "    Extensions Len:".$extensions_len."\n";
+}
+
+#Perform any actions necessary based on the data we've seen
+sub process_data
+{
+    my $self = shift;
+
+    TLSProxy::Message->ciphersuite($self->ciphersuite);
+}
+
+#Reconstruct the on-the-wire message data following changes
+sub set_message_contents
+{
+    my $self = shift;
+    my $data;
+    my $extensions = "";
+
+    $data = pack('n', $self->server_version);
+    $data .= $self->random;
+    $data .= pack('C', $self->session_id_len);
+    $data .= $self->session;
+    $data .= pack('n', $self->ciphersuite);
+    $data .= pack('C', $self->comp_meth);
+
+    foreach my $key (keys %{$self->extension_data}) {
+        my $extdata = ${$self->extension_data}{$key};
+        $extensions .= pack("n", $key);
+        $extensions .= pack("n", length($extdata));
+        $extensions .= $extdata;
+        if ($key == $self->dupext) {
+          $extensions .= pack("n", $key);
+          $extensions .= pack("n", length($extdata));
+          $extensions .= $extdata;
+        }
+    }
+
+    $data .= pack('n', length($extensions));
+    $data .= $extensions;
+    $self->data($data);
+}
+
+#Read/write accessors
+sub server_version
+{
+    my $self = shift;
+    if (@_) {
+      $self->{server_version} = shift;
+    }
+    return $self->{server_version};
+}
+sub random
+{
+    my $self = shift;
+    if (@_) {
+      $self->{random} = shift;
+    }
+    return $self->{random};
+}
+sub session_id_len
+{
+    my $self = shift;
+    if (@_) {
+      $self->{session_id_len} = shift;
+    }
+    return $self->{session_id_len};
+}
+sub session
+{
+    my $self = shift;
+    if (@_) {
+      $self->{session} = shift;
+    }
+    return $self->{session};
+}
+sub ciphersuite
+{
+    my $self = shift;
+    if (@_) {
+      $self->{ciphersuite} = shift;
+    }
+    return $self->{ciphersuite};
+}
+sub comp_meth
+{
+    my $self = shift;
+    if (@_) {
+      $self->{comp_meth} = shift;
+    }
+    return $self->{comp_meth};
+}
+sub extension_data
+{
+    my $self = shift;
+    if (@_) {
+      $self->{extension_data} = shift;
+    }
+    return $self->{extension_data};
+}
+sub set_extension
+{
+    my ($self, $ext_type, $ext_data) = @_;
+    $self->{extension_data}{$ext_type} = $ext_data;
+}
+sub delete_extension
+{
+    my ($self, $ext_type) = @_;
+    delete $self->{extension_data}{$ext_type};
+}
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/ServerKeyExchange.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/ServerKeyExchange.pm
new file mode 100644
index 000000000..e0086e2be
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/TLSProxy/ServerKeyExchange.pm
@@ -0,0 +1,157 @@
+# Copyright 2016-2019 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+
+package TLSProxy::ServerKeyExchange;
+
+use vars '@ISA';
+push @ISA, 'TLSProxy::Message';
+
+sub new
+{
+    my $class = shift;
+    my ($server,
+        $data,
+        $records,
+        $startoffset,
+        $message_frag_lens) = @_;
+
+    my $self = $class->SUPER::new(
+        $server,
+        TLSProxy::Message::MT_SERVER_KEY_EXCHANGE,
+        $data,
+        $records,
+        $startoffset,
+        $message_frag_lens);
+
+    #DHE
+    $self->{p} = "";
+    $self->{g} = "";
+    $self->{pub_key} = "";
+    $self->{sigalg} = -1;
+    $self->{sig} = "";
+
+    return $self;
+}
+
+sub parse
+{
+    my $self = shift;
+    my $sigalg = -1;
+
+    #Minimal SKE parsing. Only supports one known DHE ciphersuite at the moment
+    return if TLSProxy::Proxy->ciphersuite()
+                 != TLSProxy::Message::CIPHER_ADH_AES_128_SHA
+              && TLSProxy::Proxy->ciphersuite()
+                 != TLSProxy::Message::CIPHER_DHE_RSA_AES_128_SHA;
+
+    my $p_len = unpack('n', $self->data);
+    my $ptr = 2;
+    my $p = substr($self->data, $ptr, $p_len);
+    $ptr += $p_len;
+
+    my $g_len = unpack('n', substr($self->data, $ptr));
+    $ptr += 2;
+    my $g = substr($self->data, $ptr, $g_len);
+    $ptr += $g_len;
+
+    my $pub_key_len = unpack('n', substr($self->data, $ptr));
+    $ptr += 2;
+    my $pub_key = substr($self->data, $ptr, $pub_key_len);
+    $ptr += $pub_key_len;
+
+    #We assume its signed
+    my $record = ${$self->records}[0];
+
+    if (TLSProxy::Proxy->is_tls13()
+            || $record->version() == TLSProxy::Record::VERS_TLS_1_2) {
+        $sigalg = unpack('n', substr($self->data, $ptr));
+        $ptr += 2;
+    }
+    my $sig = "";
+    if (defined $sigalg) {
+        my $sig_len = unpack('n', substr($self->data, $ptr));
+        if (defined $sig_len) {
+            $ptr += 2;
+            $sig = substr($self->data, $ptr, $sig_len);
+            $ptr += $sig_len;
+        }
+    }
+
+    $self->p($p);
+    $self->g($g);
+    $self->pub_key($pub_key);
+    $self->sigalg($sigalg) if defined $sigalg;
+    $self->signature($sig);
+}
+
+
+#Reconstruct the on-the-wire message data following changes
+sub set_message_contents
+{
+    my $self = shift;
+    my $data;
+
+    $data = pack('n', length($self->p));
+    $data .= $self->p;
+    $data .= pack('n', length($self->g));
+    $data .= $self->g;
+    $data .= pack('n', length($self->pub_key));
+    $data .= $self->pub_key;
+    $data .= pack('n', $self->sigalg) if ($self->sigalg != -1);
+    if (length($self->signature) > 0) {
+        $data .= pack('n', length($self->signature));
+        $data .= $self->signature;
+    }
+
+    $self->data($data);
+}
+
+#Read/write accessors
+#DHE
+sub p
+{
+    my $self = shift;
+    if (@_) {
+      $self->{p} = shift;
+    }
+    return $self->{p};
+}
+sub g
+{
+    my $self = shift;
+    if (@_) {
+      $self->{g} = shift;
+    }
+    return $self->{g};
+}
+sub pub_key
+{
+    my $self = shift;
+    if (@_) {
+      $self->{pub_key} = shift;
+    }
+    return $self->{pub_key};
+}
+sub sigalg
+{
+    my $self = shift;
+    if (@_) {
+      $self->{sigalg} = shift;
+    }
+    return $self->{sigalg};
+}
+sub signature
+{
+    my $self = shift;
+    if (@_) {
+      $self->{sig} = shift;
+    }
+    return $self->{sig};
+}
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/checkhandshake.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/checkhandshake.pm
new file mode 100644
index 000000000..c53b96d5e
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/checkhandshake.pm
@@ -0,0 +1,228 @@
+#! /usr/bin/env perl
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+package checkhandshake;
+
+use OpenSSL::Test qw/:DEFAULT cmdstr srctop_file srctop_dir bldtop_dir/;
+use OpenSSL::Test::Utils;
+use TLSProxy::Proxy;
+
+use Exporter;
+our @ISA = 'Exporter';
+our @EXPORT = qw(@handmessages @extensions checkhandshake);
+
+use constant {
+    DEFAULT_HANDSHAKE => 1,
+    OCSP_HANDSHAKE => 2,
+    RESUME_HANDSHAKE => 4,
+    CLIENT_AUTH_HANDSHAKE => 8,
+    RENEG_HANDSHAKE => 16,
+    NPN_HANDSHAKE => 32,
+    EC_HANDSHAKE => 64,
+    HRR_HANDSHAKE => 128,
+    HRR_RESUME_HANDSHAKE => 256,
+
+    ALL_HANDSHAKES => 511
+};
+
+use constant {
+    #DEFAULT also includes SESSION_TICKET_SRV_EXTENSION and SERVER_NAME_CLI
+    DEFAULT_EXTENSIONS => 0x00000007,
+    SESSION_TICKET_SRV_EXTENSION => 0x00000002,
+    SERVER_NAME_CLI_EXTENSION => 0x00000004,
+    SERVER_NAME_SRV_EXTENSION => 0x00000008,
+    STATUS_REQUEST_CLI_EXTENSION => 0x00000010,
+    STATUS_REQUEST_SRV_EXTENSION => 0x00000020,
+    ALPN_CLI_EXTENSION => 0x00000040,
+    ALPN_SRV_EXTENSION => 0x00000080,
+    SCT_CLI_EXTENSION => 0x00000100,
+    SCT_SRV_EXTENSION => 0x00000200,
+    RENEGOTIATE_CLI_EXTENSION => 0x00000400,
+    NPN_CLI_EXTENSION => 0x00000800,
+    NPN_SRV_EXTENSION => 0x00001000,
+    SRP_CLI_EXTENSION => 0x00002000,
+    #Client side for ec point formats is a default extension
+    EC_POINT_FORMAT_SRV_EXTENSION => 0x00004000,
+    PSK_CLI_EXTENSION => 0x00008000,
+    PSK_SRV_EXTENSION => 0x00010000,
+    KEY_SHARE_SRV_EXTENSION => 0x00020000,
+    PSK_KEX_MODES_EXTENSION => 0x00040000,
+    KEY_SHARE_HRR_EXTENSION => 0x00080000,
+    SUPPORTED_GROUPS_SRV_EXTENSION => 0x00100000,
+    POST_HANDSHAKE_AUTH_CLI_EXTENSION => 0x00200000
+};
+
+our @handmessages = ();
+our @extensions = ();
+
+sub checkhandshake($$$$)
+{
+    my ($proxy, $handtype, $exttype, $testname) = @_;
+
+    subtest $testname => sub {
+        my $loop = 0;
+        my $numtests;
+        my $extcount;
+        my $clienthelloseen = 0;
+
+        my $lastmt = 0;
+        my $numsh = 0;
+        if (TLSProxy::Proxy::is_tls13()) {
+            #How many ServerHellos are we expecting?
+            for ($numtests = 0; $handmessages[$loop][1] != 0; $loop++) {
+                next if (($handmessages[$loop][1] & $handtype) == 0);
+                $numsh++ if ($lastmt != TLSProxy::Message::MT_SERVER_HELLO
+                             && $handmessages[$loop][0] == TLSProxy::Message::MT_SERVER_HELLO);
+                $lastmt = $handmessages[$loop][0];
+            }
+        }
+
+        #First count the number of tests
+        my $nextmess = 0;
+        my $message = undef;
+        my $chnum = 0;
+        my $shnum = 0;
+        if (!TLSProxy::Proxy::is_tls13()) {
+            # In non-TLSv1.3 we always treat reneg CH and SH like the first CH
+            # and SH
+            $chnum = 1;
+            $shnum = 1;
+        }
+        #If we're only expecting one ServerHello out of two then we skip the
+        #first ServerHello in the list completely
+        $shnum++ if ($numsh == 1 && TLSProxy::Proxy::is_tls13());
+        $loop = 0;
+        for ($numtests = 0; $handmessages[$loop][1] != 0; $loop++) {
+            next if (($handmessages[$loop][1] & $handtype) == 0);
+            if (scalar @{$proxy->message_list} > $nextmess) {
+                $message = ${$proxy->message_list}[$nextmess];
+                $nextmess++;
+            } else {
+                $message = undef;
+            }
+            $numtests++;
+
+            next if (!defined $message);
+            if (TLSProxy::Proxy::is_tls13()) {
+                $chnum++ if $message->mt() == TLSProxy::Message::MT_CLIENT_HELLO;
+                $shnum++ if $message->mt() == TLSProxy::Message::MT_SERVER_HELLO;
+            }
+            next if ($message->mt() != TLSProxy::Message::MT_CLIENT_HELLO
+                    && $message->mt() != TLSProxy::Message::MT_SERVER_HELLO
+                    && $message->mt() !=
+                       TLSProxy::Message::MT_ENCRYPTED_EXTENSIONS
+                    && $message->mt() != TLSProxy::Message::MT_CERTIFICATE);
+
+            next if $message->mt() == TLSProxy::Message::MT_CERTIFICATE
+                    && !TLSProxy::Proxy::is_tls13();
+
+            my $extchnum = 1;
+            my $extshnum = 1;
+            for (my $extloop = 0;
+                    $extensions[$extloop][2] != 0;
+                    $extloop++) {
+                $extchnum = 2 if $extensions[$extloop][0] != TLSProxy::Message::MT_CLIENT_HELLO
+                                 && TLSProxy::Proxy::is_tls13();
+                $extshnum = 2 if $extensions[$extloop][0] != TLSProxy::Message::MT_SERVER_HELLO
+                                 && $extchnum == 2;
+                next if $extensions[$extloop][0] == TLSProxy::Message::MT_CLIENT_HELLO
+                                 && $extchnum != $chnum;
+                next if $extensions[$extloop][0] == TLSProxy::Message::MT_SERVER_HELLO
+                                 && $extshnum != $shnum;
+                next if ($message->mt() != $extensions[$extloop][0]);
+                $numtests++;
+            }
+            $numtests++;
+        }
+
+        plan tests => $numtests;
+
+        $nextmess = 0;
+        $message = undef;
+        if (TLSProxy::Proxy::is_tls13()) {
+            $chnum = 0;
+            $shnum = 0;
+        } else {
+            # In non-TLSv1.3 we always treat reneg CH and SH like the first CH
+            # and SH
+            $chnum = 1;
+            $shnum = 1;
+        }
+        #If we're only expecting one ServerHello out of two then we skip the
+        #first ServerHello in the list completely
+        $shnum++ if ($numsh == 1 && TLSProxy::Proxy::is_tls13());
+        for ($loop = 0; $handmessages[$loop][1] != 0; $loop++) {
+            next if (($handmessages[$loop][1] & $handtype) == 0);
+            if (scalar @{$proxy->message_list} > $nextmess) {
+                $message = ${$proxy->message_list}[$nextmess];
+                $nextmess++;
+            } else {
+                $message = undef;
+            }
+            if (!defined $message) {
+                fail("Message type check. Got nothing, expected "
+                     .$handmessages[$loop][0]);
+                next;
+            } else {
+                ok($message->mt == $handmessages[$loop][0],
+                   "Message type check. Got ".$message->mt
+                   .", expected ".$handmessages[$loop][0]);
+            }
+            if (TLSProxy::Proxy::is_tls13()) {
+                $chnum++ if $message->mt() == TLSProxy::Message::MT_CLIENT_HELLO;
+                $shnum++ if $message->mt() == TLSProxy::Message::MT_SERVER_HELLO;
+            }
+
+            next if ($message->mt() != TLSProxy::Message::MT_CLIENT_HELLO
+                    && $message->mt() != TLSProxy::Message::MT_SERVER_HELLO
+                    && $message->mt() !=
+                       TLSProxy::Message::MT_ENCRYPTED_EXTENSIONS
+                    && $message->mt() != TLSProxy::Message::MT_CERTIFICATE);
+
+            next if $message->mt() == TLSProxy::Message::MT_CERTIFICATE
+                    && !TLSProxy::Proxy::is_tls13();
+
+            if ($message->mt() == TLSProxy::Message::MT_CLIENT_HELLO) {
+                #Add renegotiate extension we will expect if renegotiating
+                $exttype |= RENEGOTIATE_CLI_EXTENSION
+                    if ($clienthelloseen && !TLSProxy::Proxy::is_tls13());
+                $clienthelloseen = 1;
+            }
+            #Now check that we saw the extensions we expected
+            my $msgexts = $message->extension_data();
+            my $extchnum = 1;
+            my $extshnum = 1;
+            for (my $extloop = 0, $extcount = 0; $extensions[$extloop][2] != 0;
+                                $extloop++) {
+                #In TLSv1.3 we can have two ClientHellos if there has been a
+                #HelloRetryRequest, and they may have different extensions. Skip
+                #if these are extensions for a different ClientHello
+                $extchnum = 2 if $extensions[$extloop][0] != TLSProxy::Message::MT_CLIENT_HELLO
+                                 && TLSProxy::Proxy::is_tls13();
+                $extshnum = 2 if $extensions[$extloop][0] != TLSProxy::Message::MT_SERVER_HELLO
+                                 && $extchnum == 2;
+                next if $extensions[$extloop][0] == TLSProxy::Message::MT_CLIENT_HELLO
+                                 && $extchnum != $chnum;
+                next if $extensions[$extloop][0] == TLSProxy::Message::MT_SERVER_HELLO
+                                 && $extshnum != $shnum;
+                next if ($message->mt() != $extensions[$extloop][0]);
+                ok (($extensions[$extloop][2] & $exttype) == 0
+                      || defined ($msgexts->{$extensions[$extloop][1]}),
+                    "Extension presence check (Message: ".$message->mt()
+                    ." Extension: ".($extensions[$extloop][2] & $exttype).", "
+                    .$extloop.")");
+                $extcount++ if (($extensions[$extloop][2] & $exttype) != 0);
+            }
+            ok($extcount == keys %$msgexts, "Extensions count mismatch ("
+                                            .$extcount.", ".(keys %$msgexts)
+                                            .")");
+        }
+    }
+}
+
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/perl/with_fallback.pm b/trunk/3rdparty/openssl-1.1-fit/util/perl/with_fallback.pm
new file mode 100644
index 000000000..242365033
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/perl/with_fallback.pm
@@ -0,0 +1,27 @@
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+package with_fallback;
+
+sub import {
+    shift;
+
+    use File::Basename;
+    use File::Spec::Functions;
+    foreach (@_) {
+	eval "use $_";
+	if ($@) {
+	    unshift @INC, catdir(dirname(__FILE__),
+                                 "..", "..", "external", "perl");
+	    my $transfer = "transfer::$_";
+	    eval "use $transfer";
+	    shift @INC;
+	    warn $@ if $@;
+	}
+    }
+}
+1;
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/private.num b/trunk/3rdparty/openssl-1.1-fit/util/private.num
new file mode 100644
index 000000000..a6ef44e4a
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/private.num
@@ -0,0 +1,457 @@
+# This isn't a library ".num" file but is a list of documented items
+# that don't appear in lib*.num -- because they are define's, in
+# assembly language, etc.
+#
+OPENSSL_ia32cap                         environment
+OPENSSL_MALLOC_FD                       environment
+OPENSSL_MALLOC_FAILURES                 environment
+OPENSSL_instrument_bus                  assembler
+OPENSSL_instrument_bus2                 assembler
+#
+ADMISSION_SYNTAX                        datatype
+ADMISSIONS                              datatype
+ASN1_STRING_TABLE                       datatype
+BIO_ADDR                                datatype
+BIO_ADDRINFO                            datatype
+BIO_callback_fn                         datatype
+BIO_callback_fn_ex                      datatype
+BIO_hostserv_priorities                 datatype
+BIO_lookup_type                         datatype
+CRYPTO_EX_dup                           datatype
+CRYPTO_EX_free                          datatype
+CRYPTO_EX_new                           datatype
+DTLS_timer_cb                           datatype
+EVP_PKEY_gen_cb                         datatype
+EVP_PKEY_METHOD                         datatype
+EVP_PKEY_ASN1_METHOD                    datatype
+GEN_SESSION_CB                          datatype
+OPENSSL_Applink                         external
+NAMING_AUTHORITY                        datatype
+OSSL_STORE_CTX                          datatype
+OSSL_STORE_INFO                         datatype
+OSSL_STORE_LOADER                       datatype
+OSSL_STORE_LOADER_CTX                   datatype
+OSSL_STORE_SEARCH                       datatype
+OSSL_STORE_close_fn                     datatype
+OSSL_STORE_ctrl_fn                      datatype
+OSSL_STORE_expect_fn                    datatype
+OSSL_STORE_find_fn                      datatype
+OSSL_STORE_eof_fn                       datatype
+OSSL_STORE_error_fn                     datatype
+OSSL_STORE_load_fn                      datatype
+OSSL_STORE_open_fn                      datatype
+OSSL_STORE_post_process_info_fn         datatype
+PROFESSION_INFO                         datatype
+PROFESSION_INFOS                        datatype
+RAND_DRBG_cleanup_entropy_fn            datatype
+RAND_DRBG_cleanup_nonce_fn              datatype
+RAND_DRBG_get_entropy_fn                datatype
+RAND_DRBG_get_nonce_fn                  datatype
+RAND_poll_cb                            datatype
+SSL_CTX_allow_early_data_cb_fn          datatype
+SSL_CTX_keylog_cb_func                  datatype
+SSL_allow_early_data_cb_fn              datatype
+SSL_client_hello_cb_fn                  datatype
+SSL_psk_client_cb_func                  datatype
+SSL_psk_find_session_cb_func            datatype
+SSL_psk_server_cb_func                  datatype
+SSL_psk_use_session_cb_func             datatype
+SSL_verify_cb                           datatype
+UI                                      datatype
+UI_METHOD                               datatype
+UI_STRING                               datatype
+UI_string_types                         datatype
+UI_string_types                         datatype
+X509_STORE_CTX_cert_crl_fn              datatype
+X509_STORE_CTX_check_crl_fn             datatype
+X509_STORE_CTX_check_issued_fn          datatype
+X509_STORE_CTX_check_policy_fn          datatype
+X509_STORE_CTX_check_revocation_fn      datatype
+X509_STORE_CTX_cleanup_fn               datatype
+X509_STORE_CTX_get_crl_fn               datatype
+X509_STORE_CTX_get_issuer_fn            datatype
+X509_STORE_CTX_lookup_certs_fn          datatype
+X509_STORE_CTX_lookup_crls_fn           datatype
+X509_STORE_CTX_verify_cb                datatype
+X509_STORE_CTX_verify_fn                datatype
+X509_STORE_set_verify_cb_func           datatype
+X509_LOOKUP_get_by_alias_fn             datatype
+X509_LOOKUP_get_by_subject_fn           datatype
+X509_LOOKUP_get_by_fingerprint_fn       datatype
+X509_LOOKUP_ctrl_fn                     datatype
+X509_LOOKUP_get_by_issuer_serial_fn     datatype
+bio_info_cb                             datatype
+BIO_info_cb                             datatype
+custom_ext_add_cb                       datatype
+custom_ext_free_cb                      datatype
+custom_ext_parse_cb                     datatype
+pem_password_cb                         datatype
+ssl_ct_validation_cb                    datatype
+#
+BIO_append_filename                     define
+BIO_destroy_bio_pair                    define
+BIO_do_accept                           define
+BIO_do_connect                          define
+BIO_do_handshake                        define
+BIO_eof                                 define
+BIO_flush                               define
+BIO_get_accept_name                     define
+BIO_get_accept_port                     define
+BIO_get_accept_ip_family                define
+BIO_get_peer_name                       define
+BIO_get_peer_port                       define
+BIO_get_bind_mode                       define
+BIO_get_buffer_num_lines                define
+BIO_get_cipher_ctx                      define
+BIO_get_cipher_status                   define
+BIO_get_close                           define
+BIO_get_conn_address                    define
+BIO_get_conn_hostname                   define
+BIO_get_conn_port                       define
+BIO_get_conn_ip_family                  define
+BIO_get_fd                              define
+BIO_get_fp                              define
+BIO_get_info_callback                   define
+BIO_get_md                              define
+BIO_get_md_ctx                          define
+BIO_get_mem_data                        define
+BIO_get_mem_ptr                         define
+BIO_get_num_renegotiates                define
+BIO_get_read_request                    define
+BIO_get_ssl                             define
+BIO_get_write_buf_size                  define
+BIO_get_write_guarantee                 define
+BIO_make_bio_pair                       define
+BIO_pending                             define
+BIO_read_filename                       define
+BIO_reset                               define
+BIO_retry_type                          define
+BIO_rw_filename                         define
+BIO_seek                                define
+BIO_set_accept_bios                     define
+BIO_set_accept_name                     define
+BIO_set_accept_port                     define
+BIO_set_accept_ip_family                define
+BIO_set_bind_mode                       define
+BIO_set_buffer_read_data                define
+BIO_set_buffer_size                     define
+BIO_set_close                           define
+BIO_set_conn_address                    define
+BIO_set_conn_hostname                   define
+BIO_set_conn_port                       define
+BIO_set_conn_ip_family                  define
+BIO_set_fd                              define
+BIO_set_fp                              define
+BIO_set_info_callback                   define
+BIO_set_md                              define
+BIO_set_mem_buf                         define
+BIO_set_mem_eof_return                  define
+BIO_set_nbio                            define
+BIO_set_nbio_accept                     define
+BIO_set_read_buffer_size                define
+BIO_set_ssl                             define
+BIO_set_ssl_mode                        define
+BIO_set_ssl_renegotiate_bytes           define
+BIO_set_ssl_renegotiate_timeout         define
+BIO_set_write_buf_size                  define
+BIO_set_write_buffer_size               define
+BIO_should_io_special                   define
+BIO_should_read                         define
+BIO_should_retry                        define
+BIO_should_write                        define
+BIO_shutdown_wr                         define
+BIO_tell                                define
+BIO_wpending                            define
+BIO_write_filename                      define
+BN_mod                                  define
+BN_num_bytes                            define
+BN_one                                  define
+BN_zero                                 define deprecated 0.9.8
+CONF_modules_free                       define deprecated 1.1.0
+DES_ecb2_encrypt                        define
+DES_ede2_cbc_encrypt                    define
+DES_ede2_cfb64_encrypt                  define
+DES_ede2_ofb64_encrypt                  define
+DTLS_get_link_min_mtu                   define
+DTLS_set_link_mtu                       define
+ENGINE_cleanup                          define deprecated 1.1.0
+ERR_FATAL_ERROR                         define
+ERR_GET_FUNC                            define
+ERR_GET_LIB                             define
+ERR_GET_REASON                          define
+ERR_PACK                                define
+ERR_free_strings                        define deprecated 1.1.0
+ERR_load_crypto_strings                 define deprecated 1.1.0
+EVP_DigestSignUpdate                    define
+EVP_DigestVerifyUpdate                  define
+EVP_MD_CTX_block_size                   define
+EVP_MD_CTX_size                         define
+EVP_MD_CTX_type                         define
+EVP_OpenUpdate                          define
+EVP_PKEY_CTX_add1_hkdf_info             define
+EVP_PKEY_CTX_add1_tls1_prf_seed         define
+EVP_PKEY_CTX_get0_dh_kdf_oid            define
+EVP_PKEY_CTX_get0_dh_kdf_ukm            define
+EVP_PKEY_CTX_get0_ecdh_kdf_ukm          define
+EVP_PKEY_CTX_get0_rsa_oaep_label        define
+EVP_PKEY_CTX_get_dh_kdf_md              define
+EVP_PKEY_CTX_get_dh_kdf_outlen          define
+EVP_PKEY_CTX_get_dh_kdf_type            define
+EVP_PKEY_CTX_get_ecdh_cofactor_mode     define
+EVP_PKEY_CTX_get_ecdh_kdf_md            define
+EVP_PKEY_CTX_get_ecdh_kdf_outlen        define
+EVP_PKEY_CTX_get_ecdh_kdf_type          define
+EVP_PKEY_CTX_get_rsa_mgf1_md            define
+EVP_PKEY_CTX_get_rsa_oaep_md            define
+EVP_PKEY_CTX_get_rsa_padding            define
+EVP_PKEY_CTX_get_rsa_pss_saltlen        define
+EVP_PKEY_CTX_get_signature_md           define
+EVP_PKEY_CTX_hkdf_mode                  define
+EVP_PKEY_CTX_set0_dh_kdf_oid            define
+EVP_PKEY_CTX_set0_dh_kdf_ukm            define
+EVP_PKEY_CTX_set0_ecdh_kdf_ukm          define
+EVP_PKEY_CTX_set0_rsa_oaep_label        define
+EVP_PKEY_CTX_set1_hkdf_key              define
+EVP_PKEY_CTX_set1_hkdf_salt             define
+EVP_PKEY_CTX_set1_pbe_pass              define
+EVP_PKEY_CTX_set1_scrypt_salt           define
+EVP_PKEY_CTX_set1_tls1_prf_secret       define
+EVP_PKEY_CTX_set_dh_paramgen_generator  define
+EVP_PKEY_CTX_set_dh_paramgen_prime_len  define
+EVP_PKEY_CTX_set_dh_paramgen_subprime_len     define
+EVP_PKEY_CTX_set_dh_paramgen_type       define
+EVP_PKEY_CTX_set_dh_kdf_md              define
+EVP_PKEY_CTX_set_dh_kdf_outlen          define
+EVP_PKEY_CTX_set_dh_kdf_type            define
+EVP_PKEY_CTX_set_dh_nid                 define
+EVP_PKEY_CTX_set_dh_pad                 define
+EVP_PKEY_CTX_set_dh_rfc5114             define
+EVP_PKEY_CTX_set_dhx_rfc5114            define
+EVP_PKEY_CTX_set_dsa_paramgen_bits      define
+EVP_PKEY_CTX_set_ec_param_enc           define
+EVP_PKEY_CTX_set_ec_paramgen_curve_nid  define
+EVP_PKEY_CTX_set_ecdh_cofactor_mode     define
+EVP_PKEY_CTX_set_ecdh_kdf_md            define
+EVP_PKEY_CTX_set_ecdh_kdf_outlen        define
+EVP_PKEY_CTX_set_ecdh_kdf_type          define
+EVP_PKEY_CTX_set_hkdf_md                define
+EVP_PKEY_CTX_set_mac_key                define
+EVP_PKEY_CTX_set_rsa_keygen_bits        define
+EVP_PKEY_CTX_set_rsa_keygen_pubexp      define
+EVP_PKEY_CTX_set_rsa_keygen_primes      define
+EVP_PKEY_CTX_set_rsa_mgf1_md            define
+EVP_PKEY_CTX_set_rsa_oaep_md            define
+EVP_PKEY_CTX_set_rsa_padding            define
+EVP_PKEY_CTX_set_rsa_pss_keygen_mgf1_md define
+EVP_PKEY_CTX_set_rsa_pss_keygen_saltlen define
+EVP_PKEY_CTX_set_rsa_pss_keygen_md      define
+EVP_PKEY_CTX_set_rsa_pss_saltlen        define
+EVP_PKEY_CTX_set_scrypt_N               define
+EVP_PKEY_CTX_set_scrypt_r               define
+EVP_PKEY_CTX_set_scrypt_maxmem_bytes    define
+EVP_PKEY_CTX_set_scrypt_p               define
+EVP_PKEY_CTX_set_signature_md           define
+EVP_PKEY_CTX_set_tls1_prf_md            define
+EVP_PKEY_assign_DH                      define
+EVP_PKEY_assign_DSA                     define
+EVP_PKEY_assign_EC_KEY                  define
+EVP_PKEY_assign_POLY1305                define
+EVP_PKEY_assign_RSA                     define
+EVP_PKEY_assign_SIPHASH                 define
+EVP_SealUpdate                          define
+EVP_SignInit                            define
+EVP_SignInit_ex                         define
+EVP_SignUpdate                          define
+EVP_VerifyInit                          define
+EVP_VerifyInit_ex                       define
+EVP_VerifyUpdate                        define
+EVP_bf_cfb                              define
+EVP_cast5_cfb                           define
+EVP_cleanup                             define deprecated 1.1.0
+EVP_get_digestbynid                     define
+EVP_get_digestbyobj                     define
+EVP_idea_cfb                            define
+EVP_rc2_cfb                             define
+EVP_rc5_32_12_16_cfb                    define
+EVP_seed_cfb                            define
+EVP_sm4_cfb                             define
+OBJ_cleanup                             define deprecated 1.1.0
+OPENSSL_VERSION_NUMBER                  define
+OPENSSL_VERSION_TEXT                    define
+OPENSSL_clear_free                      define
+OPENSSL_clear_realloc                   define
+OPENSSL_free                            define
+OPENSSL_malloc                          define
+OPENSSL_malloc_init                     define
+OPENSSL_mem_debug_pop                   define
+OPENSSL_mem_debug_push                  define
+OPENSSL_memdup                          define
+OPENSSL_no_config                       define deprecated 1.1.0
+OPENSSL_realloc                         define
+OPENSSL_secure_actual_size              define
+OPENSSL_secure_clear_free               define
+OPENSSL_secure_free                     define
+OPENSSL_secure_malloc                   define
+OPENSSL_secure_zalloc                   define
+OPENSSL_strdup                          define
+OPENSSL_strndup                         define
+OPENSSL_zalloc                          define
+OpenSSL_add_all_algorithms              define deprecated 1.1.0
+OpenSSL_add_all_ciphers                 define deprecated 1.1.0
+OpenSSL_add_all_digests                 define deprecated 1.1.0
+OpenSSL_add_ssl_algorithms              define
+PEM_FLAG_EAY_COMPATIBLE                 define
+PEM_FLAG_ONLY_B64                       define
+PEM_FLAG_SECURE                         define
+RAND_cleanup                            define deprecated 1.1.0
+RAND_DRBG_get_ex_new_index              define
+SSL_COMP_free_compression_methods       define deprecated 1.1.0
+SSL_CTX_add0_chain_cert                 define
+SSL_CTX_add1_chain_cert                 define
+SSL_CTX_add_extra_chain_cert            define
+SSL_CTX_build_cert_chain                define
+SSL_CTX_clear_chain_certs               define
+SSL_CTX_clear_extra_chain_certs         define
+SSL_CTX_clear_mode                      define
+SSL_CTX_decrypt_session_ticket_fn       define
+SSL_CTX_disable_ct                      define
+SSL_CTX_generate_session_ticket_fn      define
+SSL_CTX_get0_chain_certs                define
+SSL_CTX_get_default_read_ahead          define
+SSL_CTX_get_max_cert_list               define
+SSL_CTX_get_max_proto_version           define
+SSL_CTX_get_min_proto_version           define
+SSL_CTX_get_mode                        define
+SSL_CTX_get_read_ahead                  define
+SSL_CTX_get_session_cache_mode          define
+SSL_CTX_get_tlsext_status_arg           define
+SSL_CTX_get_tlsext_status_cb            define
+SSL_CTX_get_tlsext_status_type          define
+SSL_CTX_select_current_cert             define
+SSL_CTX_sess_accept                     define
+SSL_CTX_sess_accept_good                define
+SSL_CTX_sess_accept_renegotiate         define
+SSL_CTX_sess_cache_full                 define
+SSL_CTX_sess_cb_hits                    define
+SSL_CTX_sess_connect                    define
+SSL_CTX_sess_connect_good               define
+SSL_CTX_sess_connect_renegotiate        define
+SSL_CTX_sess_get_cache_size             define
+SSL_CTX_sess_hits                       define
+SSL_CTX_sess_misses                     define
+SSL_CTX_sess_number                     define
+SSL_CTX_sess_set_cache_size             define
+SSL_CTX_sess_timeouts                   define
+SSL_CTX_set0_chain                      define
+SSL_CTX_set0_chain_cert_store           define
+SSL_CTX_set0_verify_cert_store          define
+SSL_CTX_set1_chain                      define
+SSL_CTX_set1_chain_cert_store           define
+SSL_CTX_set1_client_sigalgs             define
+SSL_CTX_set1_client_sigalgs_list        define
+SSL_CTX_set1_curves                     define
+SSL_CTX_set1_curves_list                define
+SSL_CTX_set1_groups                     define
+SSL_CTX_set1_groups_list                define
+SSL_CTX_set1_sigalgs                    define
+SSL_CTX_set1_sigalgs_list               define
+SSL_CTX_set1_verify_cert_store          define
+SSL_CTX_set_current_cert                define
+SSL_CTX_set_max_cert_list               define
+SSL_CTX_set_max_pipelines               define
+SSL_CTX_set_max_proto_version           define
+SSL_CTX_set_max_send_fragment           define
+SSL_CTX_set_min_proto_version           define
+SSL_CTX_set_mode                        define
+SSL_CTX_set_msg_callback_arg            define
+SSL_CTX_set_read_ahead                  define
+SSL_CTX_set_session_cache_mode          define
+SSL_CTX_set_split_send_fragment         define
+SSL_CTX_set_tlsext_servername_arg       define
+SSL_CTX_set_tlsext_servername_callback  define
+SSL_CTX_set_tlsext_status_arg           define
+SSL_CTX_set_tlsext_status_cb            define
+SSL_CTX_set_tlsext_status_type          define
+SSL_CTX_set_tlsext_ticket_key_cb        define
+SSL_CTX_set_tmp_dh                      define
+SSL_add0_chain_cert                     define
+SSL_add1_chain_cert                     define
+SSL_build_cert_chain                    define
+SSL_clear_chain_certs                   define
+SSL_clear_mode                          define
+SSL_disable_ct                          define
+SSL_get0_chain_certs                    define
+SSL_get0_session                        define
+SSL_get1_curves                         define
+SSL_get1_groups                         define
+SSL_get_cipher                          define
+SSL_get_cipher_bits                     define
+SSL_get_cipher_name                     define
+SSL_get_cipher_version                  define
+SSL_get_extms_support                   define
+SSL_get_max_cert_list                   define
+SSL_get_max_proto_version               define
+SSL_get_min_proto_version               define
+SSL_get_mode                            define
+SSL_get_peer_signature_nid              define
+SSL_get_peer_tmp_key                    define
+SSL_get_secure_renegotiation_support    define
+SSL_get_server_tmp_key                  define
+SSL_get_shared_curve                    define
+SSL_get_shared_group                    define
+SSL_get_signature_nid                   define
+SSL_get_time                            define
+SSL_get_timeout                         define
+SSL_get_tlsext_status_ocsp_resp         define
+SSL_get_tlsext_status_type              define
+SSL_get_tmp_key                         define
+SSL_in_accept_init                      define
+SSL_in_connect_init                     define
+SSL_library_init                        define
+SSL_load_error_strings                  define deprecated 1.1.0
+SSL_select_current_cert                 define
+SSL_set0_chain                          define
+SSL_set0_chain_cert_store               define
+SSL_set0_verify_cert_store              define
+SSL_set1_chain                          define
+SSL_set1_chain_cert_store               define
+SSL_set1_client_sigalgs                 define
+SSL_set1_client_sigalgs_list            define
+SSL_set1_curves                         define
+SSL_set1_curves_list                    define
+SSL_set1_groups                         define
+SSL_set1_groups_list                    define
+SSL_set1_sigalgs                        define
+SSL_set1_sigalgs_list                   define
+SSL_set1_verify_cert_store              define
+SSL_set_current_cert                    define
+SSL_set_max_cert_list                   define
+SSL_set_max_pipelines                   define
+SSL_set_max_proto_version               define
+SSL_set_max_send_fragment               define
+SSL_set_min_proto_version               define
+SSL_set_mode                            define
+SSL_set_msg_callback_arg                define
+SSL_set_mtu                             define
+SSL_set_split_send_fragment             define
+SSL_set_time                            define
+SSL_set_timeout                         define
+SSL_set_tlsext_host_name                define
+SSL_set_tlsext_status_ocsp_resp         define
+SSL_set_tlsext_status_type              define
+SSL_set_tmp_dh                          define
+SSL_want_async                          define
+SSL_want_async_job                      define
+SSL_want_client_hello_cb                define
+SSL_want_nothing                        define
+SSL_want_read                           define
+SSL_want_write                          define
+SSL_want_x509_lookup                    define
+SSLv23_client_method                    define
+SSLv23_method                           define
+SSLv23_server_method                    define
+X509_STORE_set_lookup_crls_cb           define
+X509_STORE_set_verify_func              define
+EVP_PKEY_CTX_set1_id                    define
+EVP_PKEY_CTX_get1_id                    define
+EVP_PKEY_CTX_get1_id_len                define
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/process_docs.pl b/trunk/3rdparty/openssl-1.1-fit/util/process_docs.pl
new file mode 100755
index 000000000..30b149eb8
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/process_docs.pl
@@ -0,0 +1,271 @@
+#! /usr/bin/env perl
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+use warnings;
+
+use File::Spec::Functions;
+use File::Basename;
+use File::Copy;
+use File::Path;
+use FindBin;
+use lib "$FindBin::Bin/perl";
+use OpenSSL::Glob;
+use Getopt::Long;
+use Pod::Usage;
+
+use lib '.';
+use configdata;
+
+# We know we are in the 'util' directory and that our perl modules are
+# in util/perl
+use lib catdir(dirname($0), "perl");
+use OpenSSL::Util::Pod;
+
+my %options = ();
+GetOptions(\%options,
+           'sourcedir=s',       # Source directory
+           'section=i@',        # Subdirectories to look through,
+                                # with associated section numbers
+           'destdir=s',         # Destination directory
+           #'in=s@',             # Explicit files to process (ignores sourcedir)
+           'type=s',            # The result type, 'man' or 'html'
+           'suffix:s',          # Suffix to add to the extension.
+                                # Only used with type=man
+           'remove',            # To remove files rather than writing them
+           'dry-run|n',         # Only output file names on STDOUT
+           'debug|D+',
+          );
+
+unless ($options{section}) {
+    $options{section} = [ 1, 3, 5, 7 ];
+}
+unless ($options{sourcedir}) {
+    $options{sourcedir} = catdir($config{sourcedir}, "doc");
+}
+pod2usage(1) unless ( defined $options{section}
+                      && defined $options{sourcedir}
+                      && defined $options{destdir}
+                      && defined $options{type}
+                      && ($options{type} eq 'man'
+                          || $options{type} eq 'html') );
+pod2usage(1) if ( $options{type} eq 'html'
+                  && defined $options{suffix} );
+
+if ($options{debug}) {
+    print STDERR "DEBUG: options:\n";
+    print STDERR "DEBUG:   --sourcedir = $options{sourcedir}\n"
+        if defined $options{sourcedir};
+    print STDERR "DEBUG:   --destdir   = $options{destdir}\n"
+        if defined $options{destdir};
+    print STDERR "DEBUG:   --type      = $options{type}\n"
+        if defined $options{type};
+    print STDERR "DEBUG:   --suffix    = $options{suffix}\n"
+        if defined $options{suffix};
+    foreach (sort @{$options{section}}) {
+        print STDERR "DEBUG:   --section   = $_\n";
+    }
+    print STDERR "DEBUG:   --remove    = $options{remove}\n"
+        if defined $options{remove};
+    print STDERR "DEBUG:   --debug     = $options{debug}\n"
+        if defined $options{debug};
+    print STDERR "DEBUG:   --dry-run   = $options{\"dry-run\"}\n"
+        if defined $options{"dry-run"};
+}
+
+my $symlink_exists = eval { symlink("",""); 1 };
+
+foreach my $section (sort @{$options{section}}) {
+    my $subdir = "man$section";
+    my $podsourcedir = catfile($options{sourcedir}, $subdir);
+    my $podglob = catfile($podsourcedir, "*.pod");
+
+    foreach my $podfile (glob $podglob) {
+        my $podname = basename($podfile, ".pod");
+        my $podpath = catfile($podfile);
+        my %podinfo = extract_pod_info($podpath,
+                                       { debug => $options{debug},
+                                         section => $section });
+        my @podfiles = grep { $_ ne $podname } @{$podinfo{names}};
+
+        my $updir = updir();
+        my $name = uc $podname;
+        my $suffix = { man  => ".$podinfo{section}".($options{suffix} // ""),
+                       html => ".html" } -> {$options{type}};
+        my $generate = { man  => "pod2man --name=$name --section=$podinfo{section} --center=OpenSSL --release=$config{version} \"$podpath\"",
+                         html => "pod2html \"--podroot=$options{sourcedir}\" --htmldir=$updir --podpath=man1:man3:man5:man7 \"--infile=$podpath\" \"--title=$podname\" --quiet"
+                         } -> {$options{type}};
+        my $output_dir = catdir($options{destdir}, "man$podinfo{section}");
+        my $output_file = $podname . $suffix;
+        my $output_path = catfile($output_dir, $output_file);
+
+        if (! $options{remove}) {
+            my @output;
+            print STDERR "DEBUG: Processing, using \"$generate\"\n"
+                if $options{debug};
+            unless ($options{"dry-run"}) {
+                @output = `$generate`;
+                map { s|href="http://man\.he\.net/(man\d/[^"]+)(?:\.html)?"|href="../$1.html"|g; } @output
+                    if $options{type} eq "html";
+                if ($options{type} eq "man") {
+                    # Because some *roff parsers are more strict than others,
+                    # multiple lines in the NAME section must be merged into
+                    # one.
+                    my $in_name = 0;
+                    my $name_line = "";
+                    my @newoutput = ();
+                    foreach (@output) {
+                        if ($in_name) {
+                            if (/^\.SH "/) {
+                                $in_name = 0;
+                                push @newoutput, $name_line."\n";
+                            } else {
+                                chomp (my $x = $_);
+                                $name_line .= " " if $name_line;
+                                $name_line .= $x;
+                                next;
+                            }
+                        }
+                        if (/^\.SH +"NAME" *$/) {
+                            $in_name = 1;
+                        }
+                        push @newoutput, $_;
+                    }
+                    @output = @newoutput;
+                }
+            }
+            print STDERR "DEBUG: Done processing\n" if $options{debug};
+
+            if (! -d $output_dir) {
+                print STDERR "DEBUG: Creating directory $output_dir\n" if $options{debug};
+                unless ($options{"dry-run"}) {
+                    mkpath $output_dir
+                        or die "Trying to create directory $output_dir: $!\n";
+                }
+            }
+            print STDERR "DEBUG: Writing $output_path\n" if $options{debug};
+            unless ($options{"dry-run"}) {
+                open my $output_fh, '>', $output_path
+                    or die "Trying to write to $output_path: $!\n";
+                foreach (@output) {
+                    print $output_fh $_;
+                }
+                close $output_fh;
+            }
+            print STDERR "DEBUG: Done writing $output_path\n" if $options{debug};
+        } else {
+            print STDERR "DEBUG: Removing $output_path\n" if $options{debug};
+            unless ($options{"dry-run"}) {
+                while (unlink $output_path) {}
+            }
+        }
+        print "$output_path\n";
+
+        foreach (@podfiles) {
+            my $link_file = $_ . $suffix;
+            my $link_path = catfile($output_dir, $link_file);
+            if (! $options{remove}) {
+                if ($symlink_exists) {
+                    print STDERR "DEBUG: Linking $link_path -> $output_file\n"
+                        if $options{debug};
+                    unless ($options{"dry-run"}) {
+                        symlink $output_file, $link_path;
+                    }
+                } else {
+                    print STDERR "DEBUG: Copying $output_path to link_path\n"
+                        if $options{debug};
+                    unless ($options{"dry-run"}) {
+                        copy $output_path, $link_path;
+                    }
+                }
+            } else {
+                print STDERR "DEBUG: Removing $link_path\n" if $options{debug};
+                unless ($options{"dry-run"}) {
+                    while (unlink $link_path) {}
+                }
+            }
+            print "$link_path -> $output_path\n";
+        }
+    }
+}
+
+__END__
+
+=pod
+
+=head1 NAME
+
+process_docs.pl - A script to process OpenSSL docs
+
+=head1 SYNOPSIS
+
+B<process_docs.pl>
+[B<--sourcedir>=I<dir>]
+B<--destdir>=I<dir>
+B<--type>=B<man>|B<html>
+[B<--suffix>=I<suffix>]
+[B<--remove>]
+[B<--dry-run>|B<-n>]
+[B<--debug>|B<-D>]
+
+=head1 DESCRIPTION
+
+This script looks for .pod files in the subdirectories 'apps', 'crypto'
+and 'ssl' under the given source directory.
+
+The OpenSSL configuration data file F<configdata.pm> I<must> reside in
+the current directory, I<or> perl must have the directory it resides in
+in its inclusion array.  For the latter variant, a call like this would
+work:
+
+ perl -I../foo util/process_docs.pl {options ...}
+
+=head1 OPTIONS
+
+=over 4
+
+=item B<--sourcedir>=I<dir>
+
+Top directory where the source files are found.
+
+=item B<--destdir>=I<dir>
+
+Top directory where the resulting files should end up
+
+=item B<--type>=B<man>|B<html>
+
+Type of output to produce.  Currently supported are man pages and HTML files.
+
+=item B<--suffix>=I<suffix>
+
+A suffix added to the extension.  Only valid with B<--type>=B<man>
+
+=item B<--remove>
+
+Instead of writing the files, remove them.
+
+=item B<--dry-run>|B<-n>
+
+Do not perform any file writing, directory creation or file removal.
+
+=item B<--debug>|B<-D>
+
+Print extra debugging output.
+
+=back
+
+=head1 COPYRIGHT
+
+Copyright 2013-2018 The OpenSSL Project Authors. All Rights Reserved.
+
+Licensed under the OpenSSL license (the "License").  You may not use
+this file except in compliance with the License.  You can obtain a copy
+in the file LICENSE in the source distribution or at
+https://www.openssl.org/source/license.html
+
+=cut
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/shlib_wrap.sh.in b/trunk/3rdparty/openssl-1.1-fit/util/shlib_wrap.sh.in
new file mode 100755
index 000000000..eac70ed97
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/shlib_wrap.sh.in
@@ -0,0 +1,138 @@
+#!/bin/sh
+{-
+    use lib '.';
+    use configdata;
+
+    sub shlib {
+        my $lib = shift;
+        return "" if $disabled{shared};
+        $lib = $unified_info{rename}->{$lib}
+            if defined $unified_info{rename}->{$lib};
+        $lib = $unified_info{sharednames}->{$lib}
+            . ($target{shlib_variant} || "")
+            . ($target{shared_extension} || ".so");
+        $lib =~ s|\.\$\(SHLIB_VERSION_NUMBER\)
+                 |.$config{shlib_version_number}|x;
+        return $lib;
+    }
+    "";     # Make sure no left over string sneaks its way into the script
+-}
+# To test this OpenSSL version's applications against another version's
+# shared libraries, simply set
+#
+#     OPENSSL_REGRESSION=/path/to/other/OpenSSL/build/tree
+if [ -n "$OPENSSL_REGRESSION" ]; then
+    shlibwrap="$OPENSSL_REGRESSION/util/shlib_wrap.sh"
+    if [ -x "$shlibwrap" ]; then
+        # We clear OPENSSL_REGRESSION to avoid a loop, should the shlib_wrap.sh
+        # we exec also support that mechanism...
+        OPENSSL_REGRESSION= exec "$shlibwrap" "$@"
+    else
+        if [ -f "$shlibwrap" ]; then
+            echo "Not permitted to run $shlibwrap" >&2
+        else
+            echo "No $shlibwrap, perhaps OPENSSL_REGRESSION isn't properly set?" >&2
+        fi
+        exit 1
+    fi
+fi
+
+[ $# -ne 0 ] || set -x		# debug mode without arguments:-)
+
+THERE="`echo $0 | sed -e 's|[^/]*$||' 2>/dev/null`.."
+[ -d "${THERE}" ] || exec "$@"	# should never happen...
+
+LIBCRYPTOSO="${THERE}/{- shlib('libcrypto') -}"
+LIBSSLSO="${THERE}/{- shlib('libssl') -}"
+
+SYSNAME=`(uname -s) 2>/dev/null`;
+case "$SYSNAME" in
+SunOS|IRIX*)
+	# SunOS and IRIX run-time linkers evaluate alternative
+	# variables depending on target ABI...
+	rld_var=LD_LIBRARY_PATH
+	case "`(/usr/bin/file "$LIBCRYPTOSO") 2>/dev/null`" in
+	*ELF\ 64*SPARC*|*ELF\ 64*AMD64*)
+		[ -n "$LD_LIBRARY_PATH_64" ] && rld_var=LD_LIBRARY_PATH_64
+		LD_PRELOAD_64="$LIBCRYPTOSO $LIBSSLSO"; export LD_PRELOAD_64
+		preload_var=LD_PRELOAD_64
+		;;
+	*ELF\ 32*SPARC*|*ELF\ 32*80386*)
+		# We only need to change LD_PRELOAD_32 and LD_LIBRARY_PATH_32
+		# on a multi-arch system.  Otherwise, trust the fallbacks.
+		if [ -f /lib/64/ld.so.1 ]; then
+		    [ -n "$LD_LIBRARY_PATH_32" ] && rld_var=LD_LIBRARY_PATH_32
+		    LD_PRELOAD_32="$LIBCRYPTOSO $LIBSSLSO"; export LD_PRELOAD_32
+		    preload_var=LD_PRELOAD_32
+		fi
+		;;
+	# Why are newly built .so's preloaded anyway? Because run-time
+	# .so lookup path embedded into application takes precedence
+	# over LD_LIBRARY_PATH and as result application ends up linking
+	# to previously installed .so's. On IRIX instead of preloading
+	# newly built .so's we trick run-time linker to fail to find
+	# the installed .so by setting _RLD_ROOT variable.
+	*ELF\ 32*MIPS*)
+		#_RLD_LIST="$LIBCRYPTOSO:$LIBSSLSO:DEFAULT"; export _RLD_LIST
+		_RLD_ROOT=/no/such/dir; export _RLD_ROOT
+		eval $rld_var=\"/usr/lib'${'$rld_var':+:$'$rld_var'}'\"
+		preload_var=_RLD_LIST
+		;;
+	*ELF\ N32*MIPS*)
+		[ -n "$LD_LIBRARYN32_PATH" ] && rld_var=LD_LIBRARYN32_PATH
+		#_RLDN32_LIST="$LIBCRYPTOSO:$LIBSSLSO:DEFAULT"; export _RLDN32_LIST
+		_RLDN32_ROOT=/no/such/dir; export _RLDN32_ROOT
+		eval $rld_var=\"/usr/lib32'${'$rld_var':+:$'$rld_var'}'\"
+		preload_var=_RLDN32_LIST
+		;;
+	*ELF\ 64*MIPS*)
+		[ -n "$LD_LIBRARY64_PATH"  ] && rld_var=LD_LIBRARY64_PATH
+		#_RLD64_LIST="$LIBCRYPTOSO:$LIBSSLSO:DEFAULT"; export _RLD64_LIST
+		_RLD64_ROOT=/no/such/dir; export _RLD64_ROOT
+		eval $rld_var=\"/usr/lib64'${'$rld_var':+:$'$rld_var'}'\"
+		preload_var=_RLD64_LIST
+		;;
+	esac
+	eval $rld_var=\"${THERE}'${'$rld_var':+:$'$rld_var'}'\"; export $rld_var
+	unset rld_var
+	;;
+*)	LD_LIBRARY_PATH="${THERE}:$LD_LIBRARY_PATH"	# Linux, ELF HP-UX
+	DYLD_LIBRARY_PATH="${THERE}:$DYLD_LIBRARY_PATH"	# MacOS X
+	SHLIB_PATH="${THERE}:$SHLIB_PATH"		# legacy HP-UX
+	LIBPATH="${THERE}:$LIBPATH"			# AIX, OS/2
+	export LD_LIBRARY_PATH DYLD_LIBRARY_PATH SHLIB_PATH LIBPATH
+	# Even though $PATH is adjusted [for Windows sake], it doesn't
+	# necessarily does the trick. Trouble is that with introduction
+	# of SafeDllSearchMode in XP/2003 it's more appropriate to copy
+	# .DLLs in vicinity of executable, which is done elsewhere...
+	if [ "$OSTYPE" != msdosdjgpp ]; then
+		PATH="${THERE}:$PATH"; export PATH
+	fi
+	;;
+esac
+
+{- output_off() unless grep (/-rpath\b/, @{$config{LDFLAGS}}); ""; -}
+if [ -f "$LIBCRYPTOSO" -a -z "$preload_var" ]; then
+	# Following three lines are major excuse for isolating them into
+	# this wrapper script. Original reason for setting LD_PRELOAD
+	# was to make it possible to pass 'make test' when user linked
+	# with -rpath pointing to previous version installation. Wrapping
+	# it into a script makes it possible to do so on multi-ABI
+	# platforms.
+	case "$SYSNAME" in
+	*BSD)	LD_PRELOAD="$LIBCRYPTOSO:$LIBSSLSO" ;;	# *BSD
+	*)	LD_PRELOAD="$LIBCRYPTOSO $LIBSSLSO" ;;	# SunOS, Linux, ELF HP-UX
+	esac
+	_RLD_LIST="$LIBCRYPTOSO:$LIBSSLSO:DEFAULT"	# Tru64, o32 IRIX
+	DYLD_INSERT_LIBRARIES="$LIBCRYPTOSO:$LIBSSLSO"	# MacOS X
+	export LD_PRELOAD _RLD_LIST DYLD_INSERT_LIBRARIES
+fi
+{- output_on() unless grep (/-rpath\b/, @{$config{LDFLAGS}}); ""; -}
+
+cmd="$1"; [ -x "$cmd" ] || cmd="$cmd${EXE_EXT}"
+shift
+if [ $# -eq 0 ]; then
+	exec "$cmd"	# old sh, such as Tru64 4.x, fails to expand empty "$@"
+else
+	exec "$cmd" "$@"
+fi
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/su-filter.pl b/trunk/3rdparty/openssl-1.1-fit/util/su-filter.pl
new file mode 100644
index 000000000..389c7c35c
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/su-filter.pl
@@ -0,0 +1,264 @@
+#! /usr/bin/env perl
+# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+
+my $in_su = 0;
+my $indent = 0;
+my $out;
+my $braces = 0;
+my $arrcnt;
+my $data;
+my $tststr;
+my $incomm = 0;
+
+while(<>) {
+    $tststr = $_;
+    $incomm++ while $tststr =~ /\/\*/g;
+    $incomm-- while $tststr =~ /\*\//g;
+
+    if($in_su == 1) {
+        if(/}(.*);/) {
+            $out .= $_;
+            do_output($out);
+            $in_su = 0;
+        } elsif(/^ *\} [^\s]+(\[\d*\])* = \{/) {
+           $tststr = $1;
+           $arrcnt = 0;
+           $arrcnt++ while $tststr =~ /\[/g;
+           $in_su++;
+           $braces = 1;
+           /^(.* = \{)(.*)$/;
+           $data = $2;
+           $out .= $1."\n";
+        } else {
+            $out .= $_;
+        }
+    } elsif($in_su == 2) {
+        $data .= $_;
+        if(/};$/) {
+            #$data = "\n$data";
+            $data =~ s/\n */\n/g;
+            $data =~ s/};\n?//s;
+            my @strucdata = structureData($data);
+            $out .= displayData($indent, 0, \@strucdata);
+            $out .= "\n$indent};\n";
+            do_output($out);
+            $in_su = 0;
+        }
+    } elsif($incomm <= 0 && /( *)(static )?(const )?(union|struct) ([a-zA-Z_\$][\$0-9a-zA-Z_]+ )?\{/) {
+        $in_su = 1;
+        $indent = $1;
+        $out = $_;
+        next;
+    } else {
+        do_output($_);
+    }
+}
+
+
+sub structureData {
+    my $data = $_[0];
+    my @datalist = split(/(\{|\}|,|"|#|\n|\/\*|\*\/|\(|\))/, $data);
+    my $item;
+    my $dataitem = "";
+    my @struclist = ();
+    my $substruc;
+    my $inquote = 0;
+    my $inbrace = 0;
+    my $preproc = 0;
+    my $comment = 0;
+    my $inparen = 0;
+
+
+    foreach $item (@datalist) {
+        if($comment) {
+            if($item eq "*/") {
+                $comment = 0;
+                $dataitem .= "*/";
+                push @struclist, $dataitem;
+                $dataitem = "";
+                next;
+            }
+            $dataitem .= $item;
+            next;
+        }
+        if($inquote) {
+            $dataitem .= $item;
+            if($item eq "\"") {
+                $inquote--;
+            }
+            next;
+        }
+        if($preproc) {
+            if($item eq "\n") {
+                $preproc = 0;
+                push @struclist, $dataitem;
+                $dataitem = "";
+                next;
+            }
+            $dataitem .= $item;
+            next;
+        }
+        if($inbrace) {
+            if($item eq "}") {
+                $inbrace --;
+
+                if(!$inbrace) {
+                    $substruc = structureData($dataitem);
+                    $dataitem = $substruc;
+                    next;
+                }
+            } elsif($item eq "{") {
+                $inbrace++;
+            } elsif ($item eq "\"") {
+                $inquote++;
+            }
+            $dataitem .= $item;
+            next;
+        }
+        if($inparen) {
+            if($item eq ")") {
+                $inparen--;
+            }
+            $dataitem .= $item;
+            next;
+        }
+        if($item eq "\n") {
+            next;
+        }
+        if($item eq "#") {
+            $preproc = 1;
+            push @struclist, $dataitem;
+            $dataitem = "#";
+            next;
+        }
+        if($item eq "/*") {
+            $comment = 1;
+            push @struclist, $dataitem;
+            $dataitem= "/*";
+            next;
+        }
+        if($item eq "\"") {
+            $dataitem .= $item;
+            $inquote++;
+            next;
+        }
+        if($item eq "{") {
+            $inbrace++;
+            next;
+        }
+        if($item eq ",") {
+            push @struclist, $dataitem;
+            $dataitem = "";
+            next;
+        }
+        if($item eq "(") {
+            $dataitem .= $item;
+            $inparen++;
+            next;
+        }
+        if($item =~ /^\s*$/) {
+            next;
+        }
+        if(ref $dataitem eq 'ARRAY') {
+            push @struclist, $dataitem;
+            $dataitem = "";
+        }
+        $dataitem .= $item;
+    }
+    push @struclist, $dataitem;
+    return \@struclist;
+}
+
+sub displayData {
+    my $indent = shift;
+    my $depth = shift;
+    my $data = shift;
+    my $item;
+    my $out = "";
+    my $currline = "";
+    my $first = 1;
+    my $prevpreproc = 0;
+    my $prevcomment = 0;
+
+    foreach $item (@{$data}) {
+        if($item =~ /^\/\*/) {
+            #Comment
+            $item =~ s/\n/\n$indent/g;
+            if($out =~ /\n\s*$/s) {
+                $out .= $item."\n".$indent;
+            } else {
+                $out .= "\n".$indent.$item."\n".$indent;
+            }
+            $currline = $indent;
+            $prevcomment = 1;
+            next;
+        }
+        $item =~ s/^\s+//;
+        if($item =~ /^#/) {
+            #Pre-processor directive
+            if($out =~ /\n\s*$/s) {
+                $out =~ s/\n\s*$/\n/;
+                $out .= $item."\n".$indent;
+            } else {
+                $out .= "\n".$item."\n".$indent;
+            }
+            $currline = $indent;
+            $prevpreproc = 1;
+            next;
+        }
+        if($first) {
+            $first = 0;
+            if($depth != 0) {
+                $out .= $indent;
+                $currline = $indent;
+            }
+        } else {
+            if(!$prevpreproc && !$prevcomment) {
+                $out .= ", ";
+                $currline .= ", ";
+                if($depth == 1) {
+                    $out .= "\n";
+                    $currline = "";
+                }
+                if($depth == 1) {
+                    $out .= $indent;
+                    $currline .= $indent;
+                }
+            }
+
+        }
+        $prevpreproc = 0;
+        $prevcomment = 0;
+
+        if (ref $item eq 'ARRAY') {
+            if($depth == 0) {
+                $out .= displayData("$indent    ", $depth+1, $item);
+            } else {
+                $out .= "{\n".displayData("$indent    ", $depth+1, $item)."\n".$indent."}";
+                $currline = $indent."}";
+            }
+        } else {
+            if(length $currline.$item > 79) {
+                $currline = $indent;
+                $out .= "\n$indent";
+            }
+            $out .= $item;
+            $currline .= $item;
+        }
+    }
+    return $out;
+}
+
+sub do_output {
+    my $out = shift;
+    # Strip any trailing whitespace
+    $out =~ s/\s+\n/\n/g;
+    print $out;
+}
diff --git a/trunk/3rdparty/openssl-1.1-fit/util/unlocal_shlib.com.in b/trunk/3rdparty/openssl-1.1-fit/util/unlocal_shlib.com.in
new file mode 100644
index 000000000..dd4fd2a9d
--- /dev/null
+++ b/trunk/3rdparty/openssl-1.1-fit/util/unlocal_shlib.com.in
@@ -0,0 +1,26 @@
+${-
+  use File::Spec::Functions qw(rel2abs);
+
+  my $bldtop = rel2abs($config{builddir});
+  our %names = ( map { $_ => $bldtop.$_.".EXE" }
+                 map { $unified_info{sharednames}->{$_} || () }
+                 @{$unified_info{libraries}} );
+  "" -}
+$       ! Remove the local environment created by local_shlib.com
+$
+$       OPENSSL_NAMES := OPENSSL_NAMES_'F$GETJPI("","PID")'
+$       IF F$TRNLNM("OSSL_FLAG",OPENSSL_NAMES) .EQS. "" THEN EXIT 0
+$
+$       NAMES := {- join(",", keys %names); -}
+$       I = 0
+$       LOOP:
+$           E = F$ELEMENT(I,",",NAMES)
+$           I = I + 1
+$           IF E .EQS. "," THEN GOTO ENDLOOP
+$           OLDV = F$TRNLNM(E,OPENSSL_NAMES)
+$           DEASSIGN 'E'
+$           IF OLDV .NES. "" THEN DEFINE 'E' 'OLDV'
+$           GOTO LOOP
+$       ENDLOOP:
+$
+$       DEASSIGN 'OPENSSL_NAMES' /TABLE=LNM$PROCESS_DIRECTORY
diff --git a/trunk/3rdparty/openssl-1.1.0e.zip b/trunk/3rdparty/openssl-1.1.0e.zip
deleted file mode 100644
index 1361d91cc7f4514558433a39155a5e97ae48644a..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 6623784
zcmagEQ>-w+wyn8r+qP}nwr$(~mu=g&ZQHhOuipEl)BSLBy6fRfB{MZ@yp36vsUQsu
z0tN8jC6lKh^*@{c8}I-)0QL^1cFxW=w2X9&bPT5Ssw$8G!23xh8aC498m=DD0DvIp
zzyJXM1BL%p2<872axryw`Ttcz`HvBZ|FLzJpz>e?1^{4)4gf&>zo<D|*jO6b*c+Ps
zSDViG|FNq3e_EZ<uyx+#K=_@lQ#h9aQ-+fCa>kE+HCqg6-c}d~=+L`0<%y*gz$JEW
z#hGmWxND=HXf??qvs}t}La%=5<<qiszi7cOmYpq}p);FGAs`nY<4^jCOq>XP+^`X$
zJ31$R0p*k(p^8kR<AfDv65S1vu@pMe#&Qt^uf$}`dkg_1IRT7`U|0^hM7AVssKCsU
zON+mvAhos^_aKqTR9GffqalPwQxf9;a3O{`8jf4diuc?uGnpEeqFS?RM%p_f=|se1
z@b2&3D4^0HC{tm>%7q<m5)_jzWC61Ulopw`QyL(OkBcBzup=EN`zTr4vTNIcFp@~D
z#~zu=MY_Cj=%j9d3+!35;4$8YUkXT6kATov*8Q<cFd9uW)k0{*&MKvSdA_6dvwhxl
z5(be42oDkA*+%4#F`fkNW(@dOdw^@8AMkb76yeR+$$^a=2k!J@$l>Q1#K&h0jWiE>
z#A0z`1NZSbQYhsH4x}Uk)OD6S^XD)Y3}2i<%dx{ojf1{4kZ+(loQ%fvv@q?<pWc_1
zokZ4KM_H^qPcscus{D3ia65QsB9+;$qja#y5ql^!bByGM0Q1e4J{y|Uz}@S0r>7G$
zC!tK9=`DQ(;<k8lfz=$f6B<Mj2rEGt0jRu&o~I+A)U{D(tT=0`GkFuV5ZC?!+E}te
zXXNy6sWV1n9|dVM)r18>WVVuN*=W3wN*G2_v_prq{<ND?ejVvGAp}uBC?3=(M&I-o
z3kJ4AjEHBz$0*c_=5xcHTF6=TKw&^*YEWjv(>tfC(zPRYbBwsNzx-(#9BLv?4}s2y
zZZ7MePuBEqOsM^5i;BD3PcOVwqcef!(1U~AsCtni9^_HH8a2nY9foJ%u9N@CNO8;?
z(%WitQHUgVd-muVSRnY`gf&u#2X-^m?1hiZZ7;6uZg%WAdJ9(0uV)N*h>^p%w$yWr
z%TR)fj}g^kdJ^$WdD_^|sBTQvgx!u3-$13XOxZ!w0do+6Wyjt<-H#Zmk_I$KtKo!u
zes=ZS0DMshnw|+5!ythQenPZVEFRh^Ggd0yz;`FLlHrsGf-N#N<}U15)5pcT&Asi1
z!?VZ)15gHHS45A8duAEP{-^)uyV~!Hr!?p@{I4a#FpH$029r+zNP(gv<ijT-<N$E1
z1xl71TTgGc{C3oV3!6K6nsc&6@BPt^n8<C=NQ4CzH;jAq2xUe?NHV8?7Z6zu_mOSy
zdpg;mYG;9lVtc7chC5>iQkqkt5sUAogp{2IE$mGUHw3bxwlMMXAUeI?CvH!$t;V+5
zJSEM5c8a!WCs5mSh0NVqtLa6cR3!!F*zSchTzjo%RPq<x#H9FZ!#M7`lV~q7k<4Rd
zm$v((Pz>uZ(Rd;ur2=^LX8=isbeo)-;5h6GL3Z6UAy9w1V-k@^dKy2cm=E^(>2Tpn
z_u=yrSf+7#e*Qa{)~-dML)m&9ssB?cqFaJ1)8Qb{Gw!cfaH!oM*Ke7!q(IJ0=*PC{
zI!+Qda8l^J#acz{VoPOPHMe=6x+7)Row_ZA#^e=4Yz00o=THaH&@14)5&gE2!DYET
zhNr09{@I7~5;+VAXTU!kyg?JCck?4FQA3`24s9keg;-@YAT!fzj2KNP&RIE3CYOi)
zax|oSWPoo5{(MwSY@RzXFnmNrlrd}NiH-M_qjX;Pm`iQQPTmC-7#~nz<h!tedn7}J
zv^8QzfPy=~evU3t2=Ld}w8iUuikiuzSVjavjMta76xJ57ZY<VOm(qQPx*2=L5aH|s
z$}anoN~URV0x-?)E&D=-ibI_djiU&8Mp*-V!x<IQ@cLE^))EXR6JVnm4O4|nQAP!2
zHFzyloMaa|xV>lD3Ro<?HXLF%8Q_WPtS0Y*XXDEVpLRctcvry!)iNd5XqfT3#8}=C
zVKfyh8`h$08zz?<>=o{>T4fKoH<df7*P96*(_X$0tEv!ImBZIG@lz@w(a&X>jPgRi
z$X)b|1o?LQ)Spy5+umI-iapFV`oB_^68LLgD;-rfYqq-?1FtyZ0;_?DRkF4aF#bZd
zJ9^x>3QqXSE~{$~m7D}3c?AnAAo~^YdlKA9<z(}JtHxPLIQ4gTaxP+~Y-SaAL&usH
zG-d<b-^>IBBh@5lD7;vvkIvsqsDBx3e`Yc5pJ86eUO-CjJ@Q@IG=ISVjm7^r$b2WD
z7!@i20B8+>0SNw=ATxDy_-}+c)46!K{C}m`wU(y6j<}caSzUX)o{a&;N-x5=@J?kX
z=13M1=Me`4!ZOt>%!t{#>;%-~k#l6>NU0<n>4qGPiHWq8>)OxjNwyI`p9jy!%SPAJ
zO4ZTLFhoIEv;wQI|90u!?B>N(n!fzp+?v0wDR)QI&BLe9lZg{K`BKzFznRwp+s(IZ
zl{_4t@Zwt4q8xjT9C}$xj{FubA^9DDW-o?4Unkf5`4sum^U<e~SI(|%+0~6pgC#-}
zubypbFPEkAS4DHvO*2={<mb!A1XWHdTaT`79KET&WJjXn;zjf9R>%<K*xarll3rYJ
zT4S%@=}{Z~(cGQwD*73MntImF2bI2!x;2j<UkNQ9_paR>o49;lukY9E1QwhP8@c@I
zSzT_g|LH{vy?kt2oje>IUfRlrBRBu2wzqq;m$Qo-5OnKJ+0DY&8@+yF*>lw9<VRQ2
z&61nf$6FeBoN^`p1C1Q6?NXJu$?{57>joY!ZjIa=U90$26zy-2;?j4^7geKWlsvn?
zkb!zxU8$_sPU%!|7Nu>eebBIA@n^RzWS{)nQs<khW=Yb{SQ+~`9}<6$ZJMB1B3Zcb
zJ;Io~vJh)@+ad@(!ClyqDrau|fRm%&u3Q`WodR4|R8te{cZIUwo3ku|{T@7^eb}%1
zO><6}<9<&C0<7j)&CyVS)xYPqHH0*=();tM5o=S<W&72ocK~~PI_9c!qeyxAGI7c@
z@ue&mrv)~7xIxq6QvY@*+o57E4>qH~Hn`rdXly;osdBk&3+o6%H5Mt#q7;bH5{b@v
zI#ad5`b3Mw=7njJik?L^N$VZF>y@JO7P171l4-0N(1VbxL8+Dvq;WDG%pKIDZu63k
z1|`<Pe>18MVqVnUnve0Nh#}UtiRnaHl-UE|3mQd|P1)@hw9pe=YeJdR;kK#|!`0=h
zn>3M%QqtDzz?+qcnbvSMT9RVP3U1wl-iMo^xfGI`))`XlY*&*}l9iaFRV<a%@0r$e
zqRFG-w=qzha3zB#71POa4;YyxK{J#6K_CgBt*k4o3o1>9aj9CCH8HJRx?8E%?4_og
zF;d0La+!!E<i-Xptl@a-t!`E-3pl6*OsXZ;TgXcek$edFf}qGc5QP7bv@i@sk-}@s
z3nS<viW4PK(vy({lf<+#_{Q*;5l<+v>DrH>AQ`vyzBHOqwp&G9i%^*o<C9TlO=-Iy
zW5e!CZBY)^GTFh{E6{R?STdBd-o8AvpLAEh_j=lt!&qA~Gf2+`GPtzjF-Ygtsu88@
zL24RW)|E)*yAfnS%(4XiGA9bDTlnEXq)~)85JiwgpD~Ds6EZxIBuJo1(}@2m3zDj;
zC=1iNx|HUEVO<PDJTs1F7$j1bW*DY&vN6vAMcH&LagUkbdhRFC2W>0b%1sYO5fp0N
zR<n_tUzo-#(nW47ddkgAR^=CJ-B$CIncuk1E7GqymPRpag_W};u_;)ixKBGWdc!BA
z@lA}(MLjz|d$5T#?PJy^Gs<oCjd|K<!!mMj4PzgkVw`DGUIoE;P@-e@L?Be)CJ@qa
zIbikN4>w?760vF@={`$EZ8gjy3E#Z>EgSPS)`A)oHiw|Y6zjp_q*N1yr#8lF#EX?6
zYAGf~TWM728aqQ-Q76R^HCD8Rh7$~rQiaSLA)6A_|9L2hnNfvIXiZX$Rb!9Y+Eq9I
zxZU2Wo7AR7|A;NEZ=qzw*HEZxQKeoQF<qB3xtoA#hfXX*opxEYFfFwATVP<RmTI<+
zdQ-_Z>{ha|w%H+oq(;+hEJnhRFOed*I?3&;PJF+%e*P<Ae`8jIl}t3oP_zM6LPd*O
z(cFj)s5BE5Y;mJPz@{0mZV1qrh48&y7fiXda!J^341u-Q9GNvyT_qzqE76dYJs~4q
z->vvpx4{%Uy-dY$d;bY&&2QEBG>D*U=u-O61?U@yVu4WzkPwT_J53jW=tK*`xP&+|
zl`WQzmSN3-X4{IRtj8fyMu^>b#4SO3<S#m@FkaFm{&^GGs8+j$%GwASJS3jYS7w+W
z9UsM13zX<UR$--amS_M21I8bFvRUdHLdCL##Mn@&+8(EQoq&e8K|ymKR#sh5Q<(uP
z_H7rVNR#|~43J$>nh7#MC{Z@_3({2*u@tJfey@!mtQWutgo&(LQbm8MzZpha4M@vG
zI6UB9C$X`VBx;nZ6L7)kW-%8cGL1E#PEPZNlbKc;yk4$Za)1lU(?_SEdy9zX^pnFL
zijs|ac!LGy%T~mPSj?Y<rV&4n09|)pEkKsbYY(8-wGj1`yi=Q^SjP2PNsO0DE#6kx
z8HtSWVFh9ucFXh>#GhhEv0cbIlXGs>$f`=pgfcsEwgG;ud1-?P6~njK3O3spduliQ
z=<lt^JBK_JLaa9CMMxYiJ4u>Fggz2zjzK&pQHMVE{@<qQ0Sy)|@x7da(Q1Oo(N7~l
z0yn(9`7rVsf*7JuzDK$kS$5f!sSM!=R^fiIcsA}B<i{J2FApCSv?Ch=d|vdv94A0*
zcmcG(&_0Pm&-8enDqD2=OfshiE{q&hMD?dA6&?Dy4#c}t^R7{x6=rseGfd)WhSChL
zEA%&0CZOv?hRB>b`UcHd%JdX}7yWtKU7blO{pZK$OEah3QJ(x{+FHjjqZhrL1V&>w
zAw?#Iuqx0$a7AH~e#Nm*Q0oDu#uo#MZ?bXhO+9r_>8*B<P9?V*Q0>Z0rJ9Qn6EP9t
z8$hyju)|ourl>);+&;iQ2}+eIn?Mi?wFw8U_K|IMHDV49&%E%gUoDje5W=GXfI@Qs
z;wle(<4RbCiCg3+M|7lq`1-O-py^>)w{{sAXU3A)*m9G)n7kMg0BPzv0pL{DeEOJw
z<keIfF&NK0dqvN24Tpd%p!G$7%WJ6CVB=u-F{oSMt!+PeM}HFDZhyD9<&9Cp8g@AK
zo&mPn$iV*y1&+p#OtmAbT01YP9(t?Xe9`fJ{GTnr374Q`px47^ZBv229*AsLVo;3c
zsoo?c;@s#fGfno<o7vzPD%0a*U>M@7E&+t!BF0U{C4jn!RElOXdr0hi6cPhikRsy^
zy|!tOUAJr&s~j!)_;wQ1X>rqYs8q^sW)zGS3Po781a?Jw_sTavtBzLm|J)uwU3_2j
z&a!SsvfB82zUp*0ymTZ3)k;X7Jn~7I=_nJ(0!B>k5^l`!4<F<F{a)queSc=!_IUr!
z(CPdB()zyd>-c}SezYJ>btL}9^cLko?8dO<dt*dqNOO4*aH&3)a$CNEeg{)LZgp=q
zKt#+H#$r?1#S29BVRNJ*^`Hb*;<0`nZalrq=0{$uU4C4BPD%YZ+|GKnnCkeEX__?k
z7(5zy7b>*a!TO-X<S;@SNxn^P)#w2|np0QFR8DIPTazl-<}k*J(1r&80W`g~>hH&B
zvB6?bx;)1Z4=zra5rIg7@CchCM9G;Fb=<vu>`tbldat&|QucdUDK*&uv?ZX&{|WX`
zg4v2s<1@S;aNS`At0)^qHCE3@LlA1v8iyHeQ4)9wa3~yrv%;DR?<sIL!;J{PDe%)^
zh{14&QVwMr&d1^=lcFH5dkhLtfq|qE1VFW}1Thq6q6m*a>2dot-A)w;!c{rS0vrmj
zw>Jr#y8@kJ@|R3RyY16<t!3^tpxdq@S?d64sw8l}5`Zy|g;G*tr*;imr+DM>e!P0P
z`Z=}g<z2rXZ#DhBo67rfxSPudNe5tq(2^R%sm#wB5oqSSp*742B60v)iMs>=U^1@K
zG9ocJTfYDWOcxzEgTUrxFiL0t7|9$bIM4&wm&Dp_kBeHGj|Ah2vMa+?5~V9s&HB{k
zboJO}yUQTnE3(mHrVUuK<fk9IWCSjtBc+OJF;aww2nx&z0o{TI)#iW#k7WF;QzUn_
z(?oI)a8N+`K_h^6H%22O6%#E7G2UwefMPd*5ZKA>_zBxjBLG&CMkCiNVX)4jun1F~
zvYG@5&k%3}WrGa_ODZy766FAr2CXQ99)NpBI>Hf<LlD#>VxXa;u}b~R3w{((i)tH~
zG%&kP4CsJl166{jLP76XTlO|bE-z!xS4pOvm#-^SF$g;X_tddI>plQ$Ai*JtrAhRT
z=c<5w-)o#Ey2n(=Ep$j}W)Sp}TBb3Z$WD{vIAaJk3P=!%o$C1K3<_2?h|?|>fq;h(
zbw9*xkLenXg-7A4S!lXj&oOsIP6vmumeC(`$kG|GoFxi1U{qY6EukR6Rm6rK$`rpG
z+(cQgeS{NTeD9AYM>|Oag&Nnmgi#;}2AvB1%EKL~l>6p&pEXmz&w0+r=+}Vg%2$Mp
zCWN5PUL?q%AvB+hY4IdNd6%NSUq%oGIOWEIgghq5O1EaqV1dVPj99=+!+ew~sC2_S
z?>*n73L`Q=-62snAWHdqp-1mOwh=x&`Y&^1hFKyTLS_~X(iKX_ECEj!j;eO!`UfT!
z6Q#Zg-Oka1czvcC!U>LyU}(~KR8pouAS4$vy)J2aK$d9UV>I7rp=6qwJ)O&a74b>H
z4SzG4+b@3*W|RoYh|+?+lcM||2hzYW2w13KF=M<&xCH$u*aDtE9h&osR2@yJ<b7!L
z2BA3&oQb5x$PH2iNs~(I7Uqu_&S`<GVnMJY81aa)!V~HB+tE;+IJlp$qgMyf_<Kum
zXE$hEs9iEFSp|ulw+cZz5hUPlw6<0ch)gfzRZtN5Zo)q=__`gUi^Bx|s6<%3{7Q~2
zbG9Ot4h%H#U=f5PAc^Bb*3pC!2D5Z2BBNbIu2lVS`Z5fnyl*Du@2-@i7Z(pM-cM(4
zPEC3K>N)w#qKm$ViR9T?Hu<_<cjlHQCfwClP8$NAuo82wpDzv;T)&qIb)BVy%bA+6
z-K+15GA`U)+tQ(^U||1`ldOgIhm(W)kNd^by3MY+b~SE~*EH^2E|1?Qbzd<!cVUN;
zpG)Ff#*76_s!c}hkm79Vr#|CDck?4`&LeL{;TZpiqo+InnvFQ}FeZSA^uj!Q9a-AB
z+&-RSwY~Szg}hRDeV5Kx3?w+h0|X?##XaoYVS9V;pfk!;67+sYC{df}7C7apuYg>=
z)T~)bnF@({TDiFZP>++LYS`!5LFo&=cFT=A*QG{zhbJ{Hf9*D52Q}|%Q&OM)bEO4Z
zFB!q|wdKX&ydSW(uM|Jw!MgjeH1v%=M;sX!7;Fsab0-CQh+yzmG9xs#KpgyQ>L>fW
zp6}mX44z%e8{)_Qx}q?710L^ywkdp!^!$bb%Ju*qh*c<H0^Y(ri_4WYc>Wy~LJ-wi
z;6->GC?BZnXkDxo9NTPSPYsZbHC24W%P%=Eg*n{PU>rq_h)fYvT7jEsC#X(SbSgk%
z{(<K%tRusvy3B(l*}fa7gfxCfsPgNKtOS@A2~t=I$W@>4yhKox=)52EWwzW;2;RQW
z07nrzy`Xogd`n;_aRD+6zbZlZA-S8Pe7+%6l;yGZNAC90GlLYUMEHHtGt3X;fY^Or
ztm%|+>ou_f-%jhIeZH}ly@3@{Bdz;C!@EnbEveY+F8_afk4WZUO_iSw{DA<P(?rlV
zk5ZD${Q*ZCEw~0~g1=w6g*H*$M6RNbi;0cI9;3{M;_9kv6<jNAU73Y<b_A<pSS=9&
z=jxJ7p&Ky<@(Ql<AljpZ;<cJpJSL<OxxT`7#j}16vYrsQfi*QF1u<akeL8=->>PbR
zbAJfNy9EJ**kQM-fA@yS^1ZWrXKht+?0YOBwVmjnQ)Me-b8US-pIe`&H)k(@-#>Qr
zFK4iUYQQ=@e~+HXx-Q_KzdvX15WUEG{ad>S%=H`ipF81MfNg#|x1)a1RfMi?vP*JK
zVOvUc!L}&H&s>A|uH=l$f&Oo|%@}gTfwG^WaoVpC1J{osE~ldc0sy!Rydh-LLYTou
zrpjSte#ydkr0TbDgv?A*&Ux0A<AyT#0RbAsyqmfm3I-pc6j9At6eX*!DNu%#h(eCD
z#+)5I*>kG`8)KWnE#ois`Hh6ZkInMoGWYosG2$|d*6w=4XvUp)usYC+PMjTJB?tYr
zSb9<;PIk2*Qzh1r6RX#gplZ5?g}3cRrO(1H$Uy^JKwaxv9!)1v6E`oS-(G$6w+L2%
zd{LO&0!E5O92j#JwpHJW%4=A7CUqU>I;1Mc=I>^f`DsIJ$-|EA90oLLIk5Ky3C1;X
zNPkVoJhSS^;Om+|tiVgu`91*zcyNoZC67){cxPR{4tO)1Y&)(3J*pwQ*ZJyeJH<c$
zElf$WcdsXIMAZUuqg)h23yrE%?>y7$i*4?lO?_VV^mc2L9AImUzqU1)g&G6pbz0ex
zFp()%<KjhPQOKdmgy+<TWM0cQ7Q`UV-rpQ}+qX6s@_<BQLXnz*O)RojGsY03Cx3D1
z$4#t87GUe(F-B{F=AFg&yg*pn_+@X8efSYdSW8Q>CUFs7BJ6btK&ZISwBnP$Icf;}
ziy^}7z@%g4S;uxvA_HzgHIg}D*KQW8*zRZ+i^y5b<o{jk+gZxkn~BHqvB00$_<Rve
z41VKb<-FB(@UFLU<s!)l;?oIG-%#oIN9aj7W)!U@&+@n=DwE*n9>(lv5o#$$g5}P-
z??Fr${>-L94*sDh__;<X8$zDHh=Gcnw!*}Tswt6kaQY^JXbrhJ3+2Eq?k}m~)D}9P
zMJ;y+BiY1`71}w4mFNpJ6zXmD^Nsh}vG#I7>SZw-WSC`ZZ=_G**|kK31EphR8aMYB
z2t%JYa~oe`R1uQyF#R5?F~0N;2^l;-fct#^2HKp4^W-YcXRSVt1`RyihK;L^o2Hty
zX&25by(DeUz<qRy#-z-z$re%YD!5z>yXF*ZMTGS1ur;)if@=HE)hN5xer}C@ET>{9
zym4p>=pzLzm`{Q6>W2p3U9!d}q|I5V2hm2Au~=S2x3IIJKmkhzW(GMiRq&1X|5J03
z2^tMtP@Jp)#6UHz4pUEBD|%!*2fK^1W~Uy!z@V)~NA9ZPOUV_p&8QUZj+eriK^r;O
zU$wXQ`*`o7x9@XfpBLZytM5zmrxNl1d0FHCF7p5O)&6^eE7LwkQ_W9$`naJWzu%f!
zM~>_YONb_?f99bTo8}GXcB-g*4=jg#?nr&<59RBY4#@YAz{4|XLuSduHIgejG7?>}
zWn5sk3H`o1a3FBUz*y0}QJe(Ant@|1TX1|BKosYOc+sOB0aLC%N28$59s&qQpSN%e
z=ZuMsf*eN*hvajLnNeHfCTl_}$i(H**}LxA9a%fjdPscVY|}h)J+jUdtHaj+V)5E}
z-z-}YeQ?$HyEXhfIv&|Q8#h;d182j69r?Gc<5NyYCL<=L>0N(aWk0*@;5Kghgzb0}
zZHdAP$eA^M$%bXT!KPtm&+Anh+9XVueaA)hYNH)h5sso=lC%K2Q7cw)0faRR*WvOT
z)o)bE839imY<foLWuq3L9q>%Z2VV#LBjJ;q2d~e?H#ZkYkDCX5JcS-RNBVfi_`a>B
zwW(YYH-d-3E6!(|!kvsq>)e=S2i+oxAcgcIGSMsUEp5$1J=plMV(fRIF@WCY$Z}Wx
z(pe6p0y3oR=M5QSE~>${cga=#Lbo1XM?Ya&#jV~L&^+j39C;Qs{g4eYb*dk`A>41^
zEZG8ogA56FryV`=+W$(}3txxGPu@E>H&zF`cXoER7JB#e^kO~q_VMvW`TpA)`n|;A
zzjw9@^r*YH-!Wng!`0>Vz0|io`OttRs=(u*jo@mP9}Y5`&hwTmh1Wxu`*AQ!IT%Ju
zN<H*G0|`x`UX<JG><AcxB?YHJjV(D#2&0eyM4W`-lb&0z=795v3~pR_Qz3?76W`i{
z3A4`0)Wf??;~6BDA!-wOXvhHUlve>G?=`Q>zyCd$fxW9s$%TocJQ9L<Vj;UE{FUsz
zZ3Dawv^HRR6cu!(nHob6Rr|DbD-FE%Vfj)Lc=g@v3Db_J&HQ_z?>F<V1IwJD(%pRE
z+LUdN;l;6v{7WVpRFXDhQ>4ZqYniS`pIarVTg_HqzuG^(gbOBZQSQOm3dnA<eNN_x
zL(@UE6t@4=@x{Ra)t~1yw^IJJ7=CYH1p!W6iZd3R6ANvjft4?WNjB5b-xCR#A<99`
z=oQdGoBdIKup{Q_KI4IF2p-&_kk1j+K85Unr^E0Io81@q#O}a{&w;N?`+M=XWA(6z
zH3S?w$7RbWX+`_MKuqo-uu@bfea8k>lve8d2dm*V01k3Z89aZ=09E`Ah~*BwD7HJi
zYXc@a>>m|@1JVCVPzW8IVM`Y%*jRBSFP<zjv#Jrv)&gO+M_5wA3YY2wf}~3$_*kAA
zt_2PE&@mu-_T`GxF}2QhBe)kHHs(!Y1zbZ@V!Y}d&j9!~P;zJv`qo5)%1_-sSEs3u
z{U2KX4?WKYep)j6OG(prN7{T7wo2Rj^Tc0BT<kMfKA%dr`+grUsw|zzBM7KgHH)I?
z0uaq@F)%QXN`G<Z-yg!Tu-7-*(Rc?$hE>>WI&pvTj$1G>Szm{{Dyc7xp}nYrqt1@8
zG<7+{1iM>Iy&LhZhIc^Afl9fY*kgk2i+vG$qVNs|{FlP53e+ki2GY{C;0S^t6y;Ye
z=tgH+X*PL(jAX~vwhpA#-j0gR)x6VonT*n(3$bCr_JQoCRmE=l^{^cjUd}M16b7@R
z<9LM*VYp%{>eJmqR&6%l{td&Wv~!r{c!AJP2_0QH`_zi|?uao^Hre0?WC3six1`nz
zC9s{{6<uJFgki|Q)i%S)BgxBVc;8^Yzpjc*b7e>Gcrddfwtx3T&;&lBV;`1VipZh<
zvL)X2666wXLwtb6RdAJyV7D0}GEjNz+wOyP-dru^oO5W{Sb+#$i|0h35EeK;G6JW!
zJU`Dvy0IK%SpzcJJk(S+S6sD(qyx*q7F-)v^rBwG6Bz6DTBes{By-O8TRK(Mrdr5&
zlcj@9o8K2%;a+#UM~lQi2`Id^7A__PEKU*7AEOC?UAA{=8-pAh$P{}n3yl(nmBF4{
zH87@xBq9U^Ko%aUguYI(V&+@m>3iX0bu=#&vIVlnirU}JGpEc!XNeSkB@r{|Z*%}A
zqu9+{;u_`@v5+fWuI;8Mf~1o2o=cZ&<)AKPjly(WLt)ESYs-zOd}6@GTTqyYmv1Ih
z=A(q_!+SWRWr53R9f%cp;&mEPS0Ee2#J9l`Gu4O~sUx4!3?-Lk-E&}E2#%N$+#~R&
z%qBz+b_IDG>Rl~My0PLd$G=EcdF(u@DqI*BQ&7B*Aq<S~gDjkC1QZSfrn52zUOKG4
zQtz>bZmFSH#vpywGZITfj+qCo%o{7<B?u<I`qvQ}KE_ZQ0U^oDiT>xuj!0Obi-H&i
z^8u}a4n)S@ciV^nB_040dP2$zV{<@DvLVh$+nqB>`5eoq3OIK~cb}L?D&)S`w<*0Q
z-@CfBB}O)s3~ldin&D~_ZZo23CK>2bC9nnss6$6^gqfr2fGtEIZpk7vVG;pP3MC$?
z$71x=ii@&nVaj+F-)?VbFVS24WY_QG<R(r2&i@zlv`5$Xy&C=5@AJ9OzTkZ2D{rrc
zf45uT*XL^wUrpbIzW<Cgec={9ZYK}_I%}f^Ac@Hx3ePe(ShU7m`Z@X#d?TNTlF&u{
zg&f{KM$uT?wuFVYw3od!$K|AJ!2f8@O@C6hXyqn1nVVl3*Ij>GSFJij=*j?bge&i3
zAH&#cE62(3^UzN47|{>MOqTn8H4N6cFOJdlhTC|ZGGR}a2+;)qG)|8$A}AjRXGqS^
zZ7jXF9ostyaA*#crFiZ9=iuXgH{i3@`VG-ogDjCP9s*fsr)BBcgP{L5`z-ySd)!?#
z)H-YoBfYlprW7&-yt0;f^nAuT*pmc)6<h62O2Fq!e^2)7(D&`umhiXJmFvwfzf10{
z&CS;CyQM3#Dqg_RZjF6Sy^5BSz2RWM-W|%TSPS3x-isXwLSY`e`<X3ZcypUNA1NlQ
z4;iWa)N=4@7I#oV;CD5;0KTzFnsHw{)B@hN5$n4MsLwGH0Mo;dtgeRu5zuD#cb83{
zTZw;!Prr+%4-flef%macuUY#=2{f#HvOX9T9hL!}TtR)+PPPXQWx4fI^+@8r=pyi;
zy<s8GdYy5m?23UAcGt0=Xz7oCe@b6J`#Pk{$gnuHnQe{H_6?B3wOibn3B1R^wTAcf
zc{07(zdIw3c(hA1ShUPQeb>4Bp{nP|cj<h7FD}+yVO*Ef;-5&@;Y&;3tCO?0t1w%w
zz;n*-woA*S7kSt9aUAjuKcw!Gg4_KcIefK+sggunW9JEWGSq9T{YY0;iif}LbPGva
zuh!5_aGxIcLJi$&ZJj;6@t&u4??ym*?QiSv{lSk_S5sMSZvlgDX_EQO-|pXY8UHEq
zrl()q*xQ_(SEc;WmT{o<>r7IS7zE3zG)x3b^MzCuAUIs3o^H*MTVfx&T^sV}w8v8D
zt~rD^DiRc?aoso8!=u`u7jE5}b?<?T>7wc;`E{}HN5Y`h+r!G`<>lw+saZ^09-)tx
zu0Ho1yM&y}kju^VXKG!NtaYCdujg8&&KHayvhUsOt}x!Can~*L8e%+31hbTLPw0?%
z2>|5fu)q<d-c$F_Q<U?Nx_l=?g*!rF^y+WvKIMc0sb>&*Pqo;)R$LLE$izw^JrUCN
zeDAa)ib`!K|6#qm@0~-(&t|ZAJUGu?5N`-zVS)QKn-8ak$-$*4RuiQ|N2jnzD#C3$
zxOb@mk}X3(b307T^XxMgqhR?)6g4!o`!+Mj_oCHpYoZU`XTJTj21P4kSiJtG(-<$^
zmDdIpQ~;W*BnK)AJjJNdLnx%#EWEC(yz#-!8lL0InH8hXgD|U$$tqHzg)NF!ycrf%
z<Z^Djn!iDwVNXw8Vig<8TGc{{us%hc7;%upDKxaV$<Rvvk0Er1o{<HarN2$G%qkp+
zsQj1i*9I4yaPOj$h^M*2C};(QE*}%gc`K*a{^i#v+<*G@^%Z>?@WVxMXSCJ^I}?+M
zkVyhU6w43otMw~c`cha&+13x5q0`)$<Kuq_ch7FL#*{DkwBHGe`g3IsEj3o!PdG1J
zku+Z9Me^I*$PzQmY$T^51S*y&R;qPbM~Vqe22Q#(R4ThP%LyKBJlq|$4}@5(zBi6o
zFF~Cs+CI3UQUw91X@)XWJ?Tg>b%%mvaEhVEs_D3AF85~aI=I6Kgf9a~Fz*=K^4QSe
zh<Z~0HXP-`>M=W;NbGLQl8H#o9u+aOge5nOHKai0F>P81$Ho$voOlus7%)#<i_pkL
zKNAGtQi6zmYk^@yZ&&XDM^^5mxumDF*p(q}EOozKyxxMcFs@oEc1>iAVE2#Uh>J1U
zHyBqF;1c_tRWotlU@F&*(4<N>6b@oz2jfBLtzoAZ+B_&z%*J?&T&dXcl|>73T$GWh
z&TbQyw6O0F5MJr1XbTpv+s|wyL<~V6jikm&Nul{k6YYYLAq<WILEc>1{J3s>M0sPm
z&vCYmRE{EF2*bb}p&HI~eC@$Mb{45-CmqF{p(;V`?@L5`z!dEVoBv^hxT3KpeJK97
zHu{g50LsM3CBG%Y>J=}~eh7`)YiW76-zz~gJL$*;LfrHwIJ2faBYTXZHONdwy9kE-
zXy%AFuCKzkVRQ@`%UA5}sEppd@1Ad*4W?8;&1DacM~8yw6^yDd%kcVF#3@Lt>4?Ug
zhf+Ll6S1V&Iv7y)$U79AI}3QcmQx1<$6LYIF8kk?mWnyCc@QbC!Rn_#4Q4i`to=X!
z?slK*{~q2>rQ$HTF3{%Yy+oo5x1v+2_w^9}_)NBhe>A&XPTRRW6eYU*ZW5+P@`PsT
z@rW4L&Np199N$_4GH#pnFcrT6MM@bq3MaG-l`au75Uy#R>3D;#;N-q-<W!V^XXppy
zycl&Ia4ABAT^0nqk?>a6N>gxl+ctG3DX|a~@Rlh6GAvCEVGwixIJ;iAq^>W|Y&xRL
zV%A>folNwl>lvXKg-1VNl_fCw@ba^VcQQvS)zefzSqs>Ha=xq*xc%UKRV8@)&i00K
zdSjbg*Cq4V!DYD&V1Sua^bSp*?`3({xYmJL`I(wcQ}9-c{paiy1fQJ0RTLsLx0;G$
zbrGN&;rkbwEnUt_J=Vy{HOf(m&zHQa6IJkw@4dE)y%tlv_e6~~ZcRoOC5qNzf7Xd@
zV8-mwJqNA#pLhIJ{qex*-krE+BW;IkT8Z5lc_g809<=6*>WVs#NkiSjWtCyfLsD*Q
zFXJcLPH!tNJa&_9eW^W53|X|_CG`FpTwVR^2-_8xj@idrw8@>jXG~A?H+cBPm&M0h
z+=I8}fB3=P_zhk@?c*2n_12Ya-up5C8jEh#dj+r+t8N|28h>HEF~p*wQ@D|Igdl?U
z*wp9JIue^^lPi+V%maXqayl`P$r@vr16KF!BpKWE<(hSnn2q?Z(V}rOK{tElIq%Q_
z81y_P&u`1vRW;V)-W~EJm$~zE^zuJ^_z!`P*W1{-tifB}YW%Ko!$x1L!>jeleE6x2
zQOohtQ#@E~G)6sP2hyd<g>E!SHS1LnmK&&5DCg`NOXat9Xy014uU0=8y*1>}YEfcc
z6?wG;sz<jX$hDd^<*4Wu)S7y{M7|VfUN6L&@mFl{3BGo~n|l0RcA)>m=AM=fJ^t*T
zGth!NuJV>M)dE&P%JwdO8HnxxB5F~KI}VHZrzv%cJ5NgshmDnlCW5~DfdMS;!w-Y`
zdYm9b9<?_7F23h};Ohu<C*b!Vfkkzw%MoDbB`K?_4Sn9!p0kp|x5eu_{F(m{f8Y0o
zFY^ajCAK$WBd<#1Np-^l+RJGpqyv4<y~E8#znfPPfPU@T1w+C!L2{etQZ>fR8!^Fo
zXLAZ@(Rt05p0BDKl3Y7|90Ul;H2R2zDL8)cb3lghAEpLa33vb+@WG*>&jrIGy3xiN
z)nXA`lU|u8)(BnE+w$2=|H>l_RX35E48a|7j2l${a;0a<#;m|1Qa3zuB5jqI?3T27
zyARTmo=PGaF<^qhLvR>*fg-n{7QlD3Atd|dsk@?_)~PA0uQg9p)Q8ElTe53TD4!jz
zTQ2IOb-p|4(%X`<?*un&K_3c^ht}!U$g}QBGT4?vREyoh_7rASFNzB7j?Um<lm`L=
z@fFX2{JH7LZHSo*&OmLNu&OUz3QW;Xr_tvz>Z7^Kjj`^9p0EvU5;<D4uU0;HJnaHZ
z5Lc|%)ph&R&M#e*G_eO3Xcu8U&jS?Qn9MyVi-$<%KSa4_mSD7lJyb_@7!Dca88eI?
z!y3AiQvL87?^=c(eYS*)FJ2h8e@21ucxWOz0!{&<)9ot;9xmZba)VTEKrj#0s{Nn1
z%kZ6CZ?uMfyWfF+_GjKQbUvxh{CAO3<LGhL7gsHkyPoV#(K*@_7~eppFqE(g8!Q8&
zjajGk<hwpQ^IxP%Yp>5fOpu@QAUzkqJP06S0BsUY>)~2+s+`^P3TP(*)p}d27rkxJ
z8f5Q+ds=I5a;~<*J(ymMIzh??J+X%SCHCHo3!Cmj@gIZtdq$qCV5O`y9*;61)tDS0
zUK%rJY&Sjg3XcZuX4xFo)IQ@pHNmPqQ1FfDSoZN91hSg@Q;=LQ`#}uymn7k~=cpQ`
z&~zvd4d$ag!|7mOkl|BBfdcy&YS2gRN-ykV=epHzk_=vw!tU@zTUeb*7(1);VWa08
zy)sMupT!}vTpYXKRlgq{KY6bb<My+Op(<31(z+Vrc{VXpS=GTYsGJ%^H%S!%(N`-u
zH3T(PvgSDn0`>BNmls`0$JB3!3o|AARZ6nxwpzwNOAON-gw_#1j5<k6lPtnGl}PFw
z-V3DQ6_LoE;D<`I&i&?_?CJtHj<KH?qCOj-wGKH8?<^+};U<R?I?k>WrcyURVN#+L
zU;w--MUY&QvgL>9#ECL)EtyhM)enUK5SZ4;V0Y+}yCcy<@NK6!(}p`JYlQ|-iZj{F
z9W5fq!VH8|fWn5!BpoRcLk=)dw9lu8Pr28Gc1&q)qOj(!7Q)uZ>8{%Rf7c$r{eL;(
z=~Mr7bNT;%J~Bjq$Z0OEKOZmO-*^0Zyi?<L&-C~3aB%-VAMf|(^m_Tf?{CjH@ac1L
z@$q_p*9IP%96!gJoYMKbE9~Rqa(le}-*4~BQ`y5x@OZs5_MZR#+@5Ps_4iWT@JM}e
zj!(#wb*}u|ZVMkSwvb`6E9XC@5KL?pD=$v$asX)5h)gC|N9k2P<bbtXzdp%eqbF2T
z2a~N=0~DIbxB@BTQ&c8bUe@|LpFRYoNN7lbYN$HGp8?GF0k;Ua6ssC-#hd1IZF*>&
zAa=y6F>-Vr7ux!3(=tcr#^_Ghts)^0XIhFiq(;bhznpcCjhIDwbe$Y=a8Jx^uIuA!
zM_hW}bs&4H={2`OE2LT$UUBo9Vrn!Q&d+s|F{%aC24tm*Cow1F9~La||GBVfo){ns
zBEBZXuwWoW#|yhmB+71%Kv9mBONp+{g8^T`aE+>sZ$1&3Jc_N!6pMy9rY)}tlRoIE
z9K=^eAXZu>qXH^TYP9D{g$hk84!sAm!pa+C)`BS|1JNTt++SnT)^mv#-MgTp@<AIx
z0c?r4j<8^N|C~|{$`Zu<s>YDMNNu41#{MK~oKNQ}!EGyrM!GbU9>i&M{fSW(6Hm#V
zJF&aG!@9V$=LB*o7EnP*OA;mrX_r<myyA4(%W#)B>7{KGye6o}bBbHQ&8^WQsgRrt
zLPQi=*man!@w@|VZUzxBNW-_6>X)mW%tLe*EthpL1a-mF0fGQBuB*Xbn5`t6Fu|HU
z6Y3mRd{1To(2vvSPR`{`%I8hS$(@|ZpOnd;pv#?zmpvXKe~?1dPtg-4`X=jlVzXt#
zVa5!3)>JMNaeG*Skq3uFbt+t2vezFl(?RBQ<)?0vmC2}#x@fb~e)Ly>)lhEQ7_8=)
zi3yd-%;p1x_@jv635TFZom(gvXkzLhWG|ZorbiOfqd@_lEfvCi_BX7C-H+^{vOUAw
z_>7Lip1*!>`NRA38*iNzpq!%}KjN7%qZ`lXq=SA7afo`17iL|UB(1MwHyw;wF#z)R
zdVrFGC5Cs`4TNc*1JvrbxWKzb4<q`fR)ertR=bjsr^K8UXKr;ST+Gb;9KN*~OtnKj
z(0RKoVx(y;ZW6=OLVDtg_e|MrfE<q_>QDfy=OXH&Lim}*b*C4n6~n8ZLGi0=L*o5{
z<Pl6C5$PV-6a%D*R#ay&=i)KzC@l0M(+-<2^s>*qU4vr!2D%HyiBM}8SJc0Yt8duy
zQfbD7?5NjaQS{o!ld_~n3ftYy&*jYD*quKkx_FM2TR;~U3Z%y(h-wgm3Vj=>3TVnc
zahD6{%M#|mG&K3ycAz;J9a-&FG;pWd<T!^~6(u8K9l{3Nl&5Y`DV|$XW(ZkAL>FeQ
z!!$4%5&cGqo+$)JaETQ2^1V#61}Sk{J;J)Q>%&wYgDtd*0WORPwd2j%ZlD}fFQn85
zYXp*4?sCIt-C_rx=_P1!L$BmB7qIGDg?GM3vP71!rT36P_Fhe>hM2{OC|~gH4wWP;
zR8SJ5U7&$dO{j#$TO&-`$e&g&$AesGeFmmfH8e)~olMj_(YNmGNo?nI?*>n66@BJL
zQA+PY@%_WV0Ww|6VE#N=lHGVqa?Pjk@a`wy2Vhn`wt?c)G!bV6#l0OE9Uuq+RG^dV
zIIcvh-9SqUh>=6DMH#T&8R8vnL>}~wu+S8UzP4{_j8#L7s2nHSv14ezx!y)fsm_9G
z&p|2Xr6I^)P<Wmu8EJ^<J?pC3{MBd}5SRK9Yu!)fBR`=I-mL)2R4ClPD@Mf<-^H#E
zKXq{hyN2IUVm!gg1jYvmUPg1ds!;XNj-#nHRd-g6sX_zacvdiyl~So*>Ef{aRN?Xi
z+Szra>9$9U&Yw{bCqU2%A%xp(mO_Ou!Ckfl1I!O%Kpc?{q@tGgS6ydWqz#E(cOicj
zEdeME=+(BmF|l4j5eD?KZp@8j^d-m%gq`vgRvymX77y$uE_N1E9rHa}M+nHkNwka0
zU-~h!NZ|AWauyuCN&r7gng`!RvkqW7gfjxysV1ngZdYz8eL1cnFlC3+<bHHlwJsD{
zJ_3D?<D-aDn4MuY6!8#)D{qtxGC_zllP1lCIwl10nv6$ocqN3ORLv5{=Ljmzz+dkm
zb#r4%<w13`o4WPi?dF?)cmV_Y+d9}P(r3Hd#qW-|gV+1(;N<etKgtSjqi3hrA1PAD
ze}fwX^#zW3CjZ?O5lOV?Svs2V+)rZeTly{wJO)RuXh#c4SXVo%nw((QaL=cH%*$i<
zDXo`Z*}}67lA{n64cSLVq)4X|uuUjwQz%+Wuupm3erw+W$s+?y50C|uV?zk?rRH-n
z{7QCJ^^LH~qn}fik++s0d~st$2c<2k?A-40qUs24+k$8Y2&dWRPBwsg2b})I8W>Cd
z@{Jo?(dPS50N(*$11>j6%yep-j3#G)Y*3+$udQ3rC_89iWgIUQ#gq0uolL`fY(UKu
z6hBaiSGd}Ylw@m^+#yt~{m;;N9m-!#+z*gi{e<%ZW&3rI6#=?RrDBER44(>5k2<Kk
zYElzag;WG(`E+>jWc+9a7$i0iBk?wYWJS9y((ylu=N`Z#4nVv7sQw>Q=li>vfd#TY
zE}lwzcJZ*RBlQOl=lj?FcYtm}e7}CnJ9hs+<7@MZKkc<I;hr44IKZHq8V>fybDgIa
z&U*6)NFP`q)M{ds1}-XEei^H<SZJDUQsd!cjL&z@;8adK)we)bNjYYX5;cf;MVmY(
zy_O1CwS*C8kUP6-&9cR_I+h8dNpB1pLA?}bk;Eh8b7UW<1e=6z6dml5ECR^p<w3;|
zpw`Q;Zv=A8+F&Eah<Q9T6Hzj9TH1!$?9VR#tOS7mn&%n^VDmx%>X!^@wS;-TVy;OQ
zXf+6S;m*Fz`3@3$9P=uHG6_=?z-*?WtMI9P?ffJ_M}UI9)_ET|s=#o>%}Xc-7&d6V
z8mL=a<zQ}y2p%P950vqVEE!P9C`&+dmN2v-(vDIixqEyV_qB8-eSZXOZlEgE?Y@h2
z8&<iFTcz+mB0+!8w8hBDLV})E@_7ouprMLp5mDCo)~z1scgO3uhauCO#HmLiPNBh;
z!&l!6<weBosi1sJTa2GsPD#KLC90Fjkk}wRk~1m0b2JPrVI8g)%T=iZc4cSV>`Xvp
zX?)$nKPuk$sV<Q`fjTX4eou7(AW=9r1sU+Zwl?j_r=xdA9oKJ%4u8_LDl6KJdM2_F
zm<xnreI_q7Dpf>_ad9@nHy0jiauuZr9fv0oq<Ffl<&%P#)|Lnl3l1ndDqdh0HhcVw
zFH`4d!X8czzFJUyTfd>Oy1K`WTv&lcn*tC55ErOjdCPABqUwvHIXVj?78Paai8mF!
z#t4Ah3xf~W{ynWD;K5Z*bX`|&?}aQJgMYu~*}G@31+<;VQXS8h-zT4wAc~|Zs){Z0
zdEK8G=B}a;p<=Nh^H3nf#oOq5ip-UL01TrJbzrON<QWF}>PuzrD|}9Xz$9!xtdQJj
zukq@~Ap0n_+q2kR#Ai*`45;wL)b;Rg`}=_aIuV+T1_@Lpe3WT2jsmEOzVOA==j7`^
z=gU%LXqOOd3#N5c0XfeT0By7@^*2k0@*&{LhRVqt77-DJ7uK!VCYHr>S!spZRvCew
z7j?~zpy{7VhkIp?Plr(@!}`Q$3}soVHtmgxCmj^k!O@0H$W6I3$1_aT#4%Hs(U`%n
z>OH3Kqp;tXS50VLo=EKVS(<1)FiosNm1%I$cDJl3bwQW^L}6KgfH%tpJ)Ye>8u>us
z4Y%~FJe8n~+9Ev#o3@!2JLCPhXtP-ro}HA!WWoTQ*6d#V9+<oquG(py^dNt#va;n2
zkl0^NNSJ|wFrT>^NLxcgCurPsM!i+c|1*p!q%$ygM5IM*av{k)*B-F_!Nep_6Z}yu
zvfB(ZYyCR=lJY{ufh&evI>F0{(2_yM4;7{E3+uY)VZ#C)*Mz;%Y4}r{;=)*;8>3z)
zyr0xF(M_Js`lfH*Guy4vb$+2II$%d$<f>I>nh*%a|1`a&25}cU-Om|sKN}2)jaya^
zr}b8`(bNK%RxJ<j(pKH9)u^|sH{lN#R1YrS_08{X-e|IxfU}@~0N<<`n~*WZo|3_~
z*^IV%S{@@Zv95Fe<oYcb1Op<%CJ|r|p(=(nGFZbsynm2OZx6!q{cH3xQ^CJ>f0qMW
zCukdX_vX>#tPw=M9kny{Viledzir=mFvpJhO_~){pJv_F>Elm1qOXFejGRKrsM)Qn
z9}`nx0QUi;+r5pSLGBorsr~xqCLK7`=Sfro-S*mlF!30p<5kfn;y8D!c1wTryRi7B
zjqn|bmheY>vfKBvW*1(u|MT<E-p;M_if7m06<x4fp<g0<^5y+r$X8#9XkOwZ(xdUM
zq943=kmTg4Gc~d~qW$l*1IsQ=q4su{u0i0T*R${uy)BZ>Uo!3LByy?t0gWY;jHi3<
zZBNX&*LA*o?fvilZqNU%4gc${>aU*f8uvBr?$^}6t|!~O=Zg4si0>=Ry-DluhX2>K
zN`BqB=*&7sfZwLn#b~o34)Khm1$7JmrtCd3*7Z`YK}fr+q*cqlNBZ%fiZVoPO0QCl
zW4^;tE2hulW9h@ut(Cpn^z46ncXr+D4*yE)g|x?!uA<&X@z2J69qZY=<I{7~+QX)t
zRIh{my#;2^u%(ru&+G;<8!P;rGtKPlY0dB4OWvH<{qOAE7E~#>4-?y(N~`8XBy|0k
z=j89*I<&HZ?)SyZ8^p>`kDUdl-_t>H?2q2_mOSbDGzZu=2l%-ALelj-vsu!fZQ(Bd
zaU3hLE*-w{>?z$0XVp`lYq8VrZVKmIXGwaKS=M(Wc6_~nr7v7`-KiU=h&!&LQEk|R
zUq$gq^`j=J>%A%76z$$MG<=^hk1n6x#D%o`4e_bd_&txPxA$;*Ew(>jUn_L<L(#*A
z7B62Oq_}_(mAsIuIeJlYpBBEk5E?Y<+mqkKrfLi=S@f@=kME*5DY}bHJBSZ)uZi2T
zq>NrynRuZBy?NNwY~3b%b+{V(Hfs4=GNt8!ud0}gOKC`T>IwbYwdZzSh|I4eEIr-n
z<9K5^PIC*p)ZM;gYq0M};=c4Ibu{H!{$(~^eW_Efi{Bv6X*?_OT{}?vZk=BMeC6-S
z^r$!-y4k&)m9L^hmM-hVnKjd$J)%<@jb@X}S!Ee#O**%hteqP}`jM1BbH)q%H5K7b
zwY!zkUJ&=L-S3+NpBbJ0_pP<5vfsFLU*DD&S~GrbGyXqcHQJi*C;p!o<ec@tg9i_v
zw>A7V_xHXZ&=PIF+3>&b2m3y0`}8+)-wEFs{tt_tG|%drhU(aQbL^Yz)uYv^mDNEV
z%324AA+@*44!QpeI6%k07iO>=&NwZEPif}=wT}OVukZ_B@2nHwfBhZSNx$*yC!HaZ
z_U7en-CK*c$!6^lt9|ZMV^#0SYUdmh+4VJ3K*?3CxNOCi&PP4=KCq6uzMgd^mh9S5
zcgnGok2daw<B$8pTc@9z)j>12($Dn0IY$VM;0dGDmRd}mG+ip2pZgpG#_AmGdkCf1
z_OsT}T=-D+Z_3T39G+tyLoI?T!1syKjYy2Sw$gwNwMMiQ!Q4<<{&ku4hu)<2$?DMa
z$TP3J^+x9>szcW(4O_PDs5+ETA|?cEi*_mExiX4+NbYi~d)gaAlIK=St+mx&N1b)m
zT~Bk(x6p`eO#sB`wYAnkjM-M(?R3|1ZI3<m{Ok^)U9G(jbr0>kpW%idVZ@O}9yZFT
zqm4esm}8AS)Xl)pFyl-!Pn%`d*=E<<k8{mEkGf;6u++mUlVN4m)mC3)&9&BEXS?lp
z*m0*#%I>o3ZoBWX)igqH<l#b63qzA;n1ht#rnR?@G~CZU?r;A86Z`)|bOWL=R8v1B
zzf!SO8y>7vO+~ux(3|Zv#*V?&bMSaAYehl=C+ynhEZXaRaEv^fsTc9N)Xb0Ui9H&g
zd3s(N)06s2ZkK3ljkNHvCyc7IcvirIIr2o^Z`Zkp7_xKxo?a?evx%N3b$VtWX03+Z
zb~QJ5<9ClY>mfBC26V3#^U3-S{4HQPMp@MRu7!Imy>9}TNH^b?8qaY-032TsdLFdS
zVOsVpMqkp{nZS2b`?kH?wyMt+ez0rsE_RHuYA@OCN)WDRfAhsnfai|ujMfgkBTzrW
zFqf8gt#ihqE*Ri^w}Z(%54zLr98d#UKy10FmW4chJ%l`WJ&GGVqq=4!JRRE1$Ez=l
zi-gcTq366{k&6(iwi1Es{oJGMsh6TLi$6W)q5f2jDz1<{i;RwLw>0$LHaEW<wau59
zXV+9ly{$cbD;OpZ_05jtg5IdE!47dfFvFgD+nfBaAjJ+-+qC03+JIj0&at(h!;+v1
zEltQR2j+b;KH`ZB$rMS*Q@Fw1TB%&xb#fH`JM$n+NNMeepDh=Df09Fi{3ZN}6g!KE
z8?Kx{*~M8y{bDOlugz~tB+h7AubMX~-fWl*+R?P>y>lrXv*Cj!EiN`=tCg(uadUN^
z8;B(AcL)85p;k)Y-2EvX9YCPgsXJXI<6T^3`p^!eWg~KJH}%vyYvmqsA>JQb8~byP
z7>H14o7^mI0>XP}v-Al&*EsdMgU=&%(2mG--qcv7g;JJ!R}?}QjI!xGKTxMfPt<X^
zdanRkae}T#kQ{R<t;6Y#UJ$4dl%}zAg$Ej&Xx=+VuipFisVz%ioSpd3U?*>Q^oB=o
zc=RX6qYv4Mk(RUL&frm+#E;T#Ldl>w<T1)}nX8Ko3PnL(VVbAo*=3ots$&SGjU=BM
zEUkozP_sJJhN+RQ83lUUjOwH%qE_niSkY_NU&9vocSY<0q(GSAx#TIQ=v-S_iIUyX
z_cB}O#sV=`pG^~k+Me*ZrN&JbZ>(Jcfy0-Q^f(i<T|!WG)*1)qnMdysSnz3SY9Y7b
z{Ioi=UfF{CWe^Px9K$L;<XJ%#_#VNudXLZ11%LrG7ONi9J94ur$YHba&<RHJ2n}e{
z|3!eO1+8xEh<e@1MUlyo@ru{LxS&3|I4wJk5CbaC0>qY{4e4LHI6W-AwB<pFQ1zNv
zBdumptCrIM?!74k!}nR#(hHo0w)eUs_mPpx8XQs+mQh171c}9I1MsQn2>3T>d4>il
z+VWH3;}+5YTdbXkmepMu{Nl6-X^+5OZYeFWN3YZMC@<<gzPRQn-W}NZ83VZ<Mhmh4
zA-TO~xin2hMAeT$?sOFoDTZB!#}+$O(s*=m3A9t&8v~~@G@WbJMYfL`s7KDI8<Yc-
zL_@d?QipV2rOXizsKM`W=Wuz)f4F>dHd8CE$5bjF1S1*`kMhvld`K<o$RKmFx~6rl
z#-yZ|F4bids^7v^2f*zj581G0(tHG$Nbq809!aPXGr-YF-8GceP*45Xz>hSZ<=fN=
z4lh;LH^M?1rRycmU4R8(jFQXA54Ct^V5Xqm0GgEvIt|Dohw2JoT>)ZT$5^E`HS*DN
z&j{QLr=LU&c@e=ns$-#?VAWM%6#6z3dc>KE_DFdnODQ!xA;(mKDD~s_U?<^o*vT6n
zz2VUt9{qXo=mU0ws?gLgt8Ns;MQH&tuHMKA|0VQBgm*d&8sKEx8@zL9Y6|j!nC2(7
zkHzVuLdLrSJ@ODTsA^peR*79_d8V_MS}}ErU)D?59197BXc_#|+_O=v=ekcN03vco
zA`jG-)<O0)9>I`DTCtmv5I*twPH!TEeaFiSZn>t+YFtV^Rr?WsYECewsmP?_toe?_
za&xJlE=;*4xTOndl68)jv#={sA3!==+0EXd^cmSkqD_Ppu?Vk?bxm;f0DE>2Jr!y{
zcka^>oMBHG_{x~nITT;sQ1l8+_%%6iMF7S{R3HzwKA?%-azo?H28xwVCgh5(dj(di
zH*MlXh=d`GB7%y>&IK`lQc811aUMK6X4DaK2QZ6CQ<oPHjFK2;NIo!c=vePhCW+BD
zd+AZ1EdUD26S585B33rxi=1f75*EhtM^%ZGZW>oq5P>lOgqj&g0Z7jtxJ8X@wOHrc
zN*ja0)`1ORPNGk5W+R{RVOBEpXvMHn0@-*BL<ryd3VubcQAX=SORfsVmetW9X;`TZ
z2`UXJbsKTxY^WoG%iMa-%DOp_!vU$C9KO?#ORc9OM>e`A5<Gf55TV9WiB{wQ#>mYA
z0%ml52-3;>(Xq-v^0YDt8)Cbn0#UmtieAw|l&ppz*NfvlC&`wi?hNa2UmHzxWE2gQ
z(<dmv*Jz!>paC98IxN-^t!6nmP_u2SD?ZZlGX*B`8{6g9yW-Tg+Y$ZAv+LUEOX{8)
z)0#f`J5BjU@?c&|6D`)Ml`chcfGkEYa&Ge9r!lFj)hl8puPJ>YYDK&UwIle{E`l%3
zPEf&rKRc-;J?H_xxsm%(TfPeN`}9uR8qr#Us+6KJBv+Gq!h1qadxMeo9a#+cn8x`<
zD2<BcN@!D%WF!#8g1Ta)5jl~XO-!Ew=n<(R;8cg2OseYQk^mnX6~#*pAIeH6H`YQu
zqt0mQUenvvkpe#kVsQbaEj}APYsOclY(*6bQwtEliZG>&_2ASAW2klTQXfgpXD2&~
zon%v=+HMU;p*p0=Ll7rEG%IBNfhm!<5Cm;l56|_I-tjASw@C#Dqhe4Q@%GWj7TH##
zMtV)O;?{sJig^HMT1*;Uwe|6dQQV_Rjvt9%G%i$)ipc%$1jF;))WWB16h0M;!hQk}
z$pMA17v^XvCimfTMX7tx3s8UJCRq^7AMWso96p%|P=udWQ9F=n>JI|SWDTHoiW^FM
zB4D7L8(0=IgIH8R4u4eYe@xQi)o%)$D4RZhrRE=sM}(pwz=JrXD{#S7NiXUHCk)F-
zATTZiH%sxAfsnDpaUmW8LTDoi8$k=WEtQW7gIOJ*fXl)8kthREf#cPMb9DS<*k<>`
zb4M^y?MZ-_K;{Dkb!xY|s2w;rym{gokHJbcZXiucg;u5j4T>b}l~~Xm={*ey0cPLP
zIzWh2BljWVJLd=tK^<X>LDT@!qR!$T01!{BF2f8RNl!?^tw9QXc(ZYi#-0&90Vqs!
z6OE)5X4FvU7GWydL7@KHJRX5TNzR2b56S6vs0dz-aQsxaa=;Mk)ZKGXDAWhkH^O&N
z$Qwi)<3nE*u9~e0Dgv6gq~kH-mjH4ogADZz2{s3J5Qm^hwDcTL^5Ik^4z$W&_=6>>
z)RfHjY>R_KdEQA`Rh8!k_}vZ$d5p*-?m+Ry9iFVvywjqg7L-vClBn(k0fmj?1XUkf
zz31zk2#u*76A;C&4*@r1z7cu+Y~(pKU;@{061cSA9(F*eM#8^f&WyZ(RJgzedWZxD
zWCF}Tsvi?BG{BkD&@XWIjrT2tl|d3nULB;38%?dk!ytw!I^31?hM(#!7`v^R5D1At
z<NCm&+a%Z^xIHvl9cb~j278y#N0|BWTOf}qFBDQ0UIfFc*q{5RLTr#S5c%*#P(mM9
zV$^6G(X_<>9I%n7r>G#*$e@lPg4T2YgUDQ;f!xqUTqzc<eJwCllQl3G`JWP{uZFm_
zM7$Il1xQ81b@&<1J{0ulyE;6zR&J#_pd8#eY+dwO6Ru3l&JahycBL|?X&I^lPe4Tw
zs5VeCXfRL|skMi;ICy=h1w*e1Q_vGlxaAhL3JfCy$vG)jfDs&xH7^62+=iwTU`BEZ
z_=5UF(W~}CAZ8J)#PWdx^3Cc4f(8fSj6eZT-3r8yP=^$O_O+@BFL2$Cw8|ulfmx*=
zLL&}GZPUlUj*Qc)euE|k+ztD3J_w1YKy*%w$k8f(77(Nq4%f(5Bp+Ey_1CL0npJCt
z`c>zr%+pkDcR^8SeSi#kuF5>B&$I&T<c#E5FbXW!1@`<n>IPK#(}dzGXqi+4Tk!UQ
zu;GUoTz3_7Yblg}z)(2HvqycEQqf=)NQs{l-IgFF0-jbOWZ=e7U8^v9)ZbIMY2T6$
zYD7iZMG$+>pN`5dc!Qb(z0lnVhQ|Q@#*d~ZehqfAKZBjT;n5o&z2VWH7>_<+Cp^@d
zI9lBWH<Y;KZhH_?lKX3EKM~{?(v)%N05E#nnV?*L6%kN8gM}TmE*Qbhoy0>95eMCS
zNH$p+$yUwSD@V74c%3{bd|jM<&*3x=WdkEM!>=+H@N?@0$=o#39iidGI|J+x^OWcG
ztgbM8z9ZY=l0h4Ois&82<TMGhw!L7xQLDU9fYOMqjEF?5v`oGrZZWOaz=-<pyjI9+
z<;>|Ir(wvXrWWVSEw7n2*i^#{kj`L^sQsSEWWvl=g>fFF-UOX|K|w?5%>$J#7A=EK
zw+OA-0d8%+gy(A_C=uTfHfeA%Y|DYb@&@RSTKF}zFOn;W_ac^7_DBmDy>y4zFzNy(
zu9dFJsS6+l8O88NI~~d1DDVUjA?NCXh!g^`60yZO!S?}*09X1f)T0P8KXmb=MP#}4
zZ2A}ed)F2kY7Kw_Ii^*IA_Y`?UCC2AmM48S&P7j={T;=~#UtFi5A~2HOo$#UT5im}
zM2IpV)x1U$YYH`Ti2P_qn5bYVFAYVkfjZdrG@|jp*gMk{yN)CZ|L;|32{{ix-?)z)
z-G)XDmNC8j{?0AawhLLZ8zD4Y5JIJT?+!7ZlNk|7=pYaEpoJ>*$(;<$MtOoTJW&yR
zYAnsM3<0TO;;m^#Yv_=dPLw6C=}1n9%j(<>E*ny@5D3Rh_y&)Hn=PGppc#$$dOOD9
z>B=)YzFQ##K_9a%xFyo$+)DCBennQXN=T42#TFB5gxYwuEyLTJNmh|XCA>}RovjA1
zs)3k~^^1%rOz%|0-Ut-|D&srEjv%$*9b;q9b!ez1@qMhlwVyt<(1llFV?3Qnit?>P
zrzW8g+aw9{lDH*IEh@M)1(Id03F0vWsl`CZ*cgFnp97tIWSs9G(8(E(&UkdjqwhE#
z{Q;dE@>@m6(r+y>BG$GwoWrbMK~~sn!g2H9#}z@}Q>%2++gK*5n8iaQ!0oXUOjMIZ
zoG>`MDFt&HSuGK*sYn+|@dqA(zTpo-mbq>1a{4$C9RKE;9bngG;zN^@xwHYOb|lzw
z2}o1damPEU9IhtqMgVks^FTsvZY<Fq&|FCPXTx)L)rB<ewP}d+)YxLbx~2m|&!Vth
z&<@%J-r==ytl)N>1*snEY-oB%RZBHE)#wl#05Vi-5ExtpRdx-B?K(6_&~$?1Q47?H
zJEkhwiq87#Zd+Nn)gGuP@~H}1F5=(;Fp{CD6mr<XWLT9$n9v*86(J8Vo~bn4rBt(m
z$^y5hIrnT-KZY+?qX>yta$ii;Plo}3(20scTfM{#JWsXdysu3$WEE2fj4>&y6F724
zr$J@yarZ*h%hAbb%!KQyu1jl@y_-$IGsPfRKS)@F=B1m6bZ)|Z-c36#irG=?t~}hV
zPE032nbcbn#ElmrWf)ta4v^!16r>Xc4Za?;D|}+^u5DYyMBLBvHyCI}fFV28Kvsh3
z(5M|}F;;I4UYHVW$%)9dWVjVp#_QssM{OcrJH(Vh@R&w|6GL%|!w1Pb+IQEy=RV-x
zBWdKPhF%krlg2-DCFmZWrJ^w+r9taCtI&+NlQqed7if(XNlqFK>mvUU9f+PiVOSo1
zv!Hw#rWfMe`lI~|^$K~yK}gE^TK)G(FDkQHdEkOvsR>|O9*HQRQz837seugGJDD)_
zFk`ahWe7J}8IEMDQ<0zU*Y+sd*VRUE3ED=)rB#zb$~7Ut{r~ZvgGc{5Jki2@MgZgv
zqcX*+BNsC!nlvcK<&VJ^E>!~AR_PDBCHO-m)y5bqPgmXl0dLIN^zmIceVqFLzV-h{
zcmvS@LShg*!xajtvv`nPT|R@0DyWHE3=od|g5Z{UYv2i37c8^@8*zG`CMV^e00<_>
zc$>HOm34j|z|!b2+TmlHTLmY;AXoyz0ZkSi2%)MVRU82$Yh0Z~vM1@PbWkiAueGGG
z*|LMxfQl!2BS+5wJcLmoLkVi{jgWwbM}{YxkrRwcuRz>>Rigd|aPFi1!09ZCQnmUu
zq{xMJAm$A=)}ERUFF<AO*sPtasDKKJVT?-gr&WpmQI~+SJsBzHf((OX#O+A8BUeDd
zvQvjZz%Nu+l~mdTjY~t7C**$}`!L{I8&)$6rtOy2+13UpTPYuzaGNS>G84GHc7!pa
zAsYl(11xZW&(??#$eL86Bnm`QF{Cg6C+3EjaS0%HBGs8Ti{!4uJG4^_GvIIKM;;Ta
zKMH~f20A7}1uaek|0Bq30Kr3)8*Ti~*a%2;DmFi=!vWXm49x+P!C=rKcuW?O9k?~R
z0uK=imIjZ(C!&RjiaSl!x-3M<U3e0}5$22EESyZo5Q7NGi`9v)fclMY<=_EY(}a(Q
zAkmqj>NtSDe5Gg+m0*Ndm8|pVm#gICx{qqaF&!RS<=JrqZFMko*c&TdJYGlgJ;0t!
z0O&T=r-LKWIq+`6_h5}&4Woo&W}tX5c5BA~+$+(8BUD&F(H>F58^pG?WiC2B9GVZ>
zoLFj+&<b@5!K%~%u7yAvKxx|qinFRYOBEuA#^V+&7IU+s6C029>s3LJ4dw?WtO_8F
z>v)2L7kq^=>%<1t8;+y$Pn|C#Y@eWot!}_()^-FzlJ~U%Y8qb;=le3z&4=;LiEhs9
zcA}e8|L;LJ878R3l%(1io%35Ax7R|N&i*E%@~6#6V1u!f(`;_ZnxxXrEsjYRH_k-@
z^-_w1|EJj<nFCy4z#yZ+K)1r~z*0JKu*6s)uPXe`Ls=H8+X6wk1~n@VRl4_KoR$T8
zRtatgj+E`xTs3w~2)`Di1-g|GQ_>MbTE;1=k&8Ophzuc;s@R{*2-vlTrN!f{CO;6T
z+puy2v$uY0Ip$b=DWH`yT`+@(2EdJ4v<sL?%uw<&l~tWgOyyR?Ew$R!GHon_3^?W{
zrBt((S87Kd;IuxbdJDXEk5$MT075z!3QUr+hNWOQK)dO{ZCddbWFkqB@xTB;50&$g
zSTin?wMLZG^%dagAQ?Va2FO5%4}k-0$@XQj(%6O&u&H7MBXyv=oq7v3nUy(*s%-Iq
zsk%|}(ojxBxxwP1!Y7T};M`cJj^<KFVo44I_D;Q$7DQ%yQmI-gt&_(CxV7woPl0q}
z=3$CpU{@!F5g7JE%b5T|bv<Cj5g%}2@NHuYhDkym&1gxN>~A;VjptVt;3oOEfSoiI
zprQ2`OV>$CTIj;2bL?Oho?(LyhISn=L%`7hU7M*j<=u%U2nvq^DG9E76-%g<F65EC
zs=+eg)vNfOcfx18PYM=wsgy9|4#1eA6)hWi;F1zRv8i%8ji|~rgKw(s7UKp}SFjj>
zm8WQc1A<w^D#q3{U}QgeZZlT`0O_5HT}$Pls*$W(pe6)>;&qx~x4Y=DG^65mpLIkO
zj}en8Yw-mj0Fk5$Np&6^Cu;oR%{H(fNVF@l%_*?%iUIYYR#w3M=r~6mOHCdTNdA?e
zn-Afe6WyHI?L;@H{@;UcmM>Xtdxh*)d;?@~y?*qB7jLsV!9WyQM<Jq}MrPcOL|!eb
zBCwNzd(ei7TiOpQ#(^}{^FjOr<X}45>#Zambt|c1OI7g+g1?d2k(SjGHniPlMoFIU
zMU@u8S5-JZlXL56j;}hTG8`DkE+B&8U$LP+p%#_nYn}iZ50#iWD^@s?N~=K^<f5qg
z0SdL~Tuo)G0V4(oq-yj*2^trmJxQ<zKtTsYjtUGRFc)>wG!miH;iO9^aB5H1tL5MH
z9kD3_y@q!+W%j(M+8L(Ewzdsbvp?0^GgXSt6&%SNxClP9yVXU4NNTObZJJu%up+fB
zXe2v6($$@aY@H#Q^9s5O|Jy4Wnf%+;i)B>S1_bhMs@W4jG{IkF4iX4xWERJ_K_S{7
z1#FF-CNQn+G}N`!QY7m~zNsDNt_>&f+MFP^B#;S=!24`b{d+Z5O*RqxsCuh~E!KQY
zUr<ZWR#yZl$vKiPK>)pIY?)PmsZYZ@+kqM&pfLdszJfDS(B7rNCIA^x{WK2rqkc!b
zcyWDyX$D4+>1kH|R&9We?!-`!mOT7WJ)oL!QFL6Vnof22djOYVdm-?YSVY$v+rrEO
z=(xoIW>_A;-8TQ4xwnGaN!ttIuBAr1l)HKg3<6d+s>W+n>+{@4yi*rIE5w0-$p?#N
zPa#b02oKxQCkC)Vwpvk95eK9|J!PxQ!<<=F6%jzNrOpctep8QXf>5N5iP&Ri$Q%eF
z^<!trfYl<>CZb{UQB(skbW~*$hexS=VA^A2un%AZc#}_eEEst-gt()d>bodIT~kr3
zmAtQe-E{QjqMJX*Hz&F|v)hSoPW`_J-H@L>cWV=>yhw!V;#W7d3ZGMgTX%D0<!s0s
z=t>8O@8L<BMl1F(QzPyRscoY~bn3!xSQaYcW(cUOlUo(fL~N+_^s0^qdUREIOiSYE
zggaHKH>=X<s3HtP_ZsT!&Z@RX#@UmAgP#!asj}_4)WXI+q4nh5-85yYb3=d==qon_
zKw5ArttcQdo%@Z+W9Mq#gR=Ls?dYT#ORQftIGmyd4KeDQw-mms*z4%2MRnt&-c63n
zB{rP|4xG`6<fI(veH3fgro&35V}TJAk{3ylM5T1i`#Fn^sj|N#xj{An+|^)t-iiTt
zmHUt$(zeqho^7;)2fT6~9OR6uR7UdMxq+I<kk)EWL|juHf2$$W#slL=sssT@Snj@E
zjT=m}m#XHl6st106*AWVGGf{wzhO-%WIX_;Mm3R2F%uny)VjbzuEz0r+3*QNhL$NS
z^^j(d8ZgqV1J7A*nG0XCUDfoUsE*>S3Oid@9|xi+q}sMJ(ZQgmUbXXsJH}~=M7tKA
zLirbjs^)2RCbXg{4*{Sd^U#q^_$MF<>^hPq;Ule`Jt2sX=Rk}ArXD3i8az;wuWAK2
z*7lAX!KmeuQ9{Trtpdov6-~}6)-lJ$q9y`J2FY6tJ*if78n1FJz`_Kh)a{T=p9X|9
z%nmBj1gM)pP-~z{{-;JQO9C`7ie^D3CN^RlQK*p3n?hg#0Rw9>Hv$|kPmFZLxf;C|
z*8uRK7Q#XXl7Y!4F|G;X)umYvcxG3}!tMyDfK?Twy$l%5ZQ)_iA2b155we09;0m5+
z=tNa~rh2u^imo)_-meJV{29JE(ao9NPIPnX|2^o2j9c@H$|Osn&kdv1`xP~D9p+CM
zuj)MO#cFsAnILo!k%71tcq7?;wWFENXsdz<-&INgdnW~`0e+w>qXJ_e`vwFI%^U$c
z0AK_$v=_tGQ3>EEWFm0U0L7ph<=)W*ta}h238&a;0T95)k7l_JC`%@grnE_Bfm#^#
z*iB&)V@Sp2?)>&ymAs@cHRY@B8HswbLrEIaGkIm@G|S7*qsj$)?zv#k8l>fqG4Vr_
zi#E_Ihk%U_M-tI4k)nB5MfK27O#FwZtYmaVwuR^F#%DkWn-sHTzg)WU8k$taPb+91
zXi}G5RBcL6Myn{AYJ~NVX!ShUB$C$<0zef8t9kg^d$Q}8el$zg5)8O#lF`Vsk=*5E
zVMQ~$Wa8CLU9%*Em67_q&0sQN9RWE(fgLrK3JbDTqct2K2Z05!RncygN~Zw_wawl6
zZLc6u?u~*-&m9X>$%@)PL5b68b<Ph`Tg?S|^Myeuu@UuH4Y#P(EtSC%5F(OHC2GPI
zaHMM}B#BVyuM`XNQ8IR0^TxEMH&B4#X04(O^yC))-x>kpm?lY*#G_RVJ~ZS}BNvAH
zSW=$apYm#f)XYl_`vILwb%GsZ**cL|ngi8hvMOc5RNFB((#@^4C#wM;=ncpN8q>@h
z4fNuBp$K4W#6wQl<OIjNZ2-0?UFFQc>yD^-IV}@TEne|1c}`UbS!bg99cIRb2v?SO
z)RIfZ5`gG!If>q7+??AKX9rxu5MjYqJrEVa<dYXtL4RDPAM<oT;!_<v1MOG<P@gZS
zFZwpIP%Huc5AFUXo;>DWUzZjCy^|8UD&{AV4X8zw0|yiFB9RXyj*I?!%0|^N(Im_K
zB=F=_08@mClaP{08;YCYM8c5;t!uk;eRyKu7x{+v)mbtaeibt!jV&`^l2x^7A>(dX
zsXaDlzs9$;?$t&@#Nj+PjAv-huZG}xLY8RF4(bKzyMC4W6rg%_{>#BUtk<}%Mxf6m
z#GQn<hFYfF%e%Jm!MFVw7Wf#}czIiAgHN$!og;G6hZ8=Y^x@S1U!)Jd2#Q!oc-Gj8
zKC6J6)<W`9vt!jzJ>cOsrJ&h1LG(+TnJCP4tp=)`$ErkoXgw=#6<e>G!Dz|Zt;N-t
z35;ITF(Do$M<j(5(e=?Imb<#=ngML<JSYw2i(vPpPS+(6xQfwOdfp%dg}|+K!6vqf
zm16)SFW{jXeP>p)bya6yoI1j~#4!MnEfw`02kj~Px)rw#FKIApwJO)DvGiKlu_O{9
zLl0R1>1inxd$MYqbZW($6D|Twb?QIxqt~@w$O@DJbX|dv#}roFr&nV&ePrr1fUZqe
ztO(MgcC)qe#JQTfAA?%Q0t(G!HgJDH$f{!xdx|u0DKNISB&U{alLpmmX|>s!G$duO
zV2>HHLE}HPWvE^8L~>kVstJ`W3=rkjs`khI(&NFVkcL*7F*7JblBM~q24LZAoj(vu
zfjDe6?P~PBR)`zyC+4zYGl7fvfg{Znn$wURwG%hLwUUb8^TcF*&HN4O!Au=Qyhi7J
zH7K}iv9y=tgBe|xwot3q$Fx$`oNYDl4z)t69;&LQP^;->R)gY^c*%xX1Rl02=qzYl
z#{`wf1NWOs@WCC~sX7t%!j-(b1i|+>@2IHUcXc3F#Q*?!)C@gtYnIxIt%kFju9~pD
zn@0Cy-bOP`HP;9Hj|^6sTT_n{RMv49wQNAVTMN8W6U9;=I!tM3?5s-VgZA33x)HJM
zxy#VPs)J>zF@5p|(_4kriBlnk<giK=sr6-$KzJ#Z)4F3(!J)Uk1)QV!4nlH6Lk6NH
zJ_4jMFPpN?QnP3cmRE?3>dSyFCj+b3&a+mo3HM9gwmQ=9@t^h6`0?F(Gk*kp{j}cx
z{N`Wl?GHcy^WB^A?_btWKfe9p&H81%eKUTG9PfT!?O*!EXz$j$^Ek3kn&Q5#<CM<B
z>OMUHdTk*WS;+PAyx9ATg*>s4+dbT#m-KL#njYbLeaJ$d&%;9Q_g^jKQR?lM%k7z;
z@$q6IPg%&lJTLs$Zx-^r#Cy5MN4VUBd0-*;`!(EuXCcqKyIii(KjPzJALha{92Rnk
zSCi{4d6OR(z!k5>Pj~mcCY1Rsm&^TG!)Ya-7bbsOG3H}OB%Rjv`AOK<6{8e`xTVRL
zc&qMq!@_Q|uv>m$VYkOKJT<#0CH_^Tzua%-`Ebv8z1ineTiaaww6ZUY>VID`?qkQm
zo!0qfS*I4FzO5Lk82H3OFNcL*|7W3>hvT;;@T0#a)vG=3ccN!{UhCD=lmLW<%ctx0
zbBq{1t@INvm!2{9?;N#xTKCsw-P#QJzGAdu@cmY=ml`fe>~eWL`GvVBd%4TPZ{dFD
zO;Y3n=;M-2eOe7_@lRWy&%y)M)5^a-EC0}z*BRqK<#EcVcYIskp$*|PNBllVC<nOv
zE!@H**o!>mhKJk_54k=f(zFrLaI2KUJzPz`qneBH;d1p?A1~J2PA~cPyyQb=6K9V3
zlsTs5XqLv%%%y_5$wS~ThWqqdcRhK?cjjFxN;-4Y-^o$RK`$QmNcY3T9{0!LVHbpP
zFMRxVy}9tLKIZG)KCh+lF5$|vx<^J3@pb3f>1E%6mwl-8@4xI_S##UCntj)=Q1z>-
z$HYotYPzPdTD!Gbw)8SZNu(rep*Bjke*JuKrxPcgr0;Z6J$>(u^TLP}0es8(&H*Xl
zM~(X{Yg`=G^1>4yQD|f$;Ev#ju$dV6E(4SO$j%?x`RR+fKWgOntdXGxx{#sPdGDQl
zm!Z&(meNZEkuG&aEaKEbWEg_5jJ%~TA`%8DVyt|4K~cGW`Ep2h<x_e*9n0Av-;{ga
zghi4+<nVI#Go*3I;&AD^H2!Q(sYr)WMlSN7Bp?cVECp9V07HC2fPv+;G1fX5!6yrz
zLkI{Rsjz3SrZfiQ5vswxnyFYr?pXp}z$8W%8}Hseetp+fiT^KM{WSf*q3beSp)pgA
z8wF_KCDu&K*g(t5SxmW5S|}7NE2v}kcU=#^q5p=izap1H8X07fL*L>Bh#X;vmj;?)
zS^@kx3D6=V24JEfLx~BEx!6KRDi{C1dg0TXe>@a`XGkrmAr7(E1K}}s2E&DvIBOgN
z${B|{#o#(gxQ5t+#AYU}L}2mX%1d7#suEsm1C0Qn2u-}_j(h3>NdW<o1E`foXb~xb
zjRxES$YmCR4<Tr&Rp@U$)Zbyu$2CP5>7mpbssRc;1rcF1VFvU=>;=THXR(0VVnyUE
z1Oc3neXxoG$fQJjErrlh$11|sVifSPpKQ`{axCu->3NwK$8!3dY<BCkJSk4)%ks1+
zFSqApy_}Vc?JJJ1(wF}%9~XJCo|PwQ`H()P(^EQwTZOB0_|_pk6^Ctj!8_T$ly|?G
z<BN8`+ogx(w9L0~$~w~<bq3$X7r*03e`{a#(qpj>cQ&<7)%ET>Rt?<$xL)tB_mw)v
zIF(<5rJr}n?42Q*pwTP~8wgAyptdNPP)R0XK|o;PY1oYp_=U)T?Y{m-UwmY^DFLFD
z^6-NU0c0eaq%#!O1pM_k`C(H4E;68mpVT-aCSjRGIeFC;Q;sq~SBk^(I#i@7OH!cw
zff>(GIAj^488Ayw9h6LX@<p`$Uc;h1>}3m`M?jq9$DL2YFGZs)if38a+X|YFqAdL6
zh((hLrdjYvwWZ7_-T?YSOX1^RUeA`)dY&I3D>m>!%d+31dh+#urP_8^gkJnqU6u#X
zsr0APU2*#LGhneaY+p#i)=`1K1Njzd78n%J(C`D<KWzV}dYZv4-?wsEB&YH$FTW(^
zOR_zcv;0ur=BEW@@PEH)IS$Jm2$F_P1i=mjd@FcLP>_3*;Ql{uS^dG^`##yf;P1o8
z7zd>cIt{cCrJz%1VY9QCkPI~9gk=14-fq|WgV+C;XUQq~;@JCDs5tK}-TxI@H|g=1
z%+psx1DvkY?JtvcK3&1VPv5BueOAyZtg(S=@38-@pi@K>Lx6h{|He4pf@A{XAS`G%
zphVsW#%(d@)?3I70tX7qZ?wRF{aFiq=qWV-tv)guX@WG+AP;bbtX7@^0q_Qd5my5E
z#J`xYJ}bTz)li#24^jVF@vWF<hFQ>;{x|Xc!IIcAq_K~K2BTrsDZonXi16sO6Hx6a
zNG+_sVo3n`e@0t=uz`u83yvrU!v~#U33NheuylmOBm;5~Q&9B@P;MA2RDa|==mq`F
zHu=+;@TpBcjKvWUW>N`YCp>mu0P8?pI;kSX!Wy|$VdIQe9R4R2_}*#IqT2oI`S<(h
zibMv!5J|_B7mS4MsX!ZJ5=By48EG)L2(u$vas<tTFwrJL)PBvjjQ=y*_Jd7?)=~lT
zhGi|`w${ghC0an+!o(5<IHpil93mF%9ziS`P~EWxcyY*b{LQxcZaMT`)x95^0_G0{
z9)a9+TyiA=6{#XIkA-Gj8*j9=5Dmt2$gJ2q<HI6X!2LDYK}P?2e*gYCr7eglZh&Q2
zr>qVWmM-Rk2#`?_LWUy4iPZqez)B#@Ost4d;1nH)?cctZTSWX@<JLzL?23btxeXI2
zpPgV=v5rk_V;8@Pe@@_*N-@V75;QhS$k<3Ih*W6-MbcSk;Y*k~K|oeZB$=^c$tv(s
z>?sA!7(@N^0GBK>1_N7*No1|Zk_UDC&A$8Yx&KGLdt)1?;UW!@$pkhE#ZXASqQDA}
zgYP2*uCrLjUKku{Agdsw5qMk6;21E7f|_ighBzs#rp!tMfe-RDX3jbLHSG8i*MBOm
zKl|WF2`!AUK>Pe>9~>zOkORftNe>JPDXfU1iYcyQC6ojqtCdk!IpuW(@r^anR5Q&r
z6hSSu(pp262*F_@gA6vrP{YC$?Hk>tIj59>$l?;*0fdV&gb7l_M~YacsfX@Ja0xM9
z393Pt*(jFSc`v!aallZm!30usFct;!8acr@HO@2n#d!*dC1~eIEPV?`dIRu>X~dZ@
z3eXPtwm?V;OMDF70Ym_oVGyGV#IyF;SmXuaI%2>cKwp4(<-jFFY$D)8#wm&c6tuFj
zv<d}|AsKuKA*+Roj00s0;i(w&z@g~Z6z)If+rJz`|8Z^!!jl>#w1w7nq`){3)mX##
z!H{4u&l!>0GVV+i0g*rvm>FBBF&b`6t;67d%i)>`4DVwE1K<(^*-%JG?xC*;Qc_Ed
zEtDf}2&7a5{&h-vC~ZIT=HCZ{tt1XQfvrQzVkISuA@hLd0Obclsw~&c0f})~Fo0f#
z0CkB*VKx9#UV$gLr3%~#n9FH+a~W$R9gGozkysg1BDAB>SsWRwz@X~&VLOc7;n=^f
zuwy=%c=WYSzr4w3#X9|M*3o<#i^}z1-$^mryo<3I3?6$0Bnt-X6^RVc>F|JGt8hlY
zk6Q>tI0I1?LEL-5D#L(R3msMf!XVkCVGO9Zp&EuSrGRl+CLEZ<8tmRq$9e4mq97|_
zn2`Yzk352V7>tb5P>a6adx_unUPJs!L^${rx+G)9AV-*X5W?Uf4wMVzBh)qI2oC!3
z-Duv-fKc!yg`6Ue$JPOeKqQ4Z8w>dWT=uJ-2~Vm%bOxdcV`YRV)B$e0NI>jy%q)V`
z;0SUE@mLu+PzWFjl&^uHj39I^i>d!G#YiP6M&d1uAO>L39#UV1vTYsYX9Oi3@E*(-
z=2{#P!a|GEI6x@|NEEWg3k9tLt&S`}ms2s(fqY{W-ZXlPnH(F+36?tScF3T!97qN5
zO$7RibM?j1TNphMdh%xYLTY0r!wS+<X#$kpQ=v?Fl>}}LfZ!qFv4hlyvSu)OKU}Xk
zL^;yh$(W$m*(c*88um>>K86f%pyxvVMiPu+LGvk3AhNuaE@srdnO^V|a!tpUt3ZoH
zNRv)6SudvnV#~?<0lcQo>)FHdoSf2d`dBWG>FgDcI}JA~=f6FDJpM<xve#E-98po8
zEKlKb`0(AAe;q!Y|2dp5m3|I?+TGUL<xa0QR0CIr`@MczYSn7)tZLvu)z<UXez98K
z%1fkG*LkJ-MmI*6`MkeWbEi}e*L7`M)vEjS<*?xM$*{B~&sUsPSbx4=JQ~*Ai4ne@
zO*=xZ%H?@6tWVVN8E@ETn>|d|XLdoY{RXpayv&9bdjC+;_-R0rZ8Jja=)O07BsRKi
z`!_Bty4kwY+GA3g;oJV=xjN?KP28SNF3F+uxV?Xr%{#yDl=$xGnL!EOt@^5_2F$k}
zcI{34bTYR^Ey`!3;&@=SQ*Xb>PqoMX-E_nGg&xL!wRN5Dq15d0`L5YlO?5u*uZ_-f
zv%Ki*c{04cDfS~XYq(9Xab30ipdqs5wmKeF^ej89CfDw@d9#R1FNe-buQqJ)nBHy^
zyPuBQ15vGQhqcAd;eK`0cFXf-R#?%uq;GF7&*x;lZ;i*t&Az#PIF*!SRXXi;)V!sY
za%K+J9+@?NW~+(c=C|ljuRb)NnsmOb6qDvSu21QCWSLn~h-&g!x-M6z?Q+AH{ygyK
z_*u+XgR?r+?ZdHVnsq%G)w(@b9gSA`^*XOzUplGU)sE!hEDXZaeyNu4F7?`A(qX)E
zZB^oUF|A{MYvu~yZ+Fc2!rTb-V3(bxT(xs@x4>p*V_T8Yef=hSD9zVEBA)!t6^q?H
zzVBs?ChbjE^{&5ZJP#}NN8x8RyExVhMqkoRch+qrp6-s-)%9|j+q|@&R$j7QG@Q`M
z=CUWI@w|8W6is)NIy2SB$F<68{p<bHdRpkKy*WL^+MafCYSnb!8v-0W-tpFB)Ya4G
zsBhx_oh7~aI+Fcb&v=_@`)r=FXf*Y$ZbQ$z7FQl_qpW$ckAuUBi!3cIy8B^*ACH(_
zfs=G^JI@dMzP}d_?e)veW{mU$MI<9Oy}4uJJX*%f>7e~G%=^<#MJ#6L67OWT(kyz#
z)2xjK#krHd=t2LSUb>fz)SlYW!vc%VF(tfnS?hI$M9ADcS6<f7&KC8jMrkpAHq(4s
zOY-jiq)nVm#i^ah1HHU<`99m$8`({_+i%t{mvz0-?cP?Gq&3{cQ`wnZMy2$nb~i#t
z)b6Z{y3I#}afgnY$xVSz&zBS@)rItnQOk6!O4s|Oe@RU9UfScfvFbXYCZ%4F#@RHP
z-}2{1d{=2pwseW8p}h7I=SSJnxo%y0wJ{%#YR}JuCvo3u_j{F7!CU(wx}BE>Y!*G(
zL46mjY^pE4e!+?%kt&D7n{+IuJHqR5Z8sABbmuB=m@Q>`-X1zxE+2X&JnEj}mv%OL
zGC8YVYEL)gRdb;p*S?*st~6caN)91cZ8V#Sb$MdinGj^p4~v_t(uYQ=I=zjL9?x!K
zNcg(EIi~S-{*;ZmxK?Y2)pcPfGxmJjbK6a;o}1}yPLACdy-@kBs*?L|X}@V2+-8lA
zZ{>AbjjHozmp8lSuwB^Zsz2=m7aJw+UfrmZ8qFI|)0e?~*nC{S+^(j*-Mo|@d)4Zp
z^3Vr%|4`}iUOIA{w2=+!v+IkUUAs=s$4|4DCm>w+lcT-7Olk$W+t$*I51rkYYLAUL
zzaM8;Yp2KdmTm?%_eq{*Y`WX~Y;NZ*N`@;lAL(}Wg3zQgtElcK8TVy(UpvL6#1ntM
zm{D~YJ<ZNhYf@=U(PTuYQIEC!?s^zphMU=4dUz@dg(`AViK>^JZ1uQB(?l1g{#~+B
zcv0ZH`h!`^y~vtoz-43qV4voT#o4FvlqdE2Z85zhirimG+MIUw;Ev?bTDGgDthE}<
z;@f00%!|XmHlEGT1?v9t%dgeQwe9a~QQ(mI;gBA8`F0lG%Gtdyl~CJWk3TMLKX>kR
zvt~Z7aIYVIRN!>&>2t;H&Zw?X;k=nQ;Ml2a*J!>y?r92;JC<T9w>PEYKCh34m!i+J
z+x9WOKyD8@$JS`rf4KPRY*&nT1a0e+%CtRb>`uia9&J%pct4-zk;J>wi)@c)-aUGG
zk*#`key+x=D$AZ4r_;@LwpiuU9!@vo;`(?iZueJ^PX4BUU5p2n{Y0nTQ|aNfAG^6x
zuF@O${a{?sxVtzk+YP7*heoB}yif9^+4s@Ywq6v+y9Vx!|ChZhYfki7vhVzgj+jTr
zq1u;;m<I$}Kxjb-N$9Osgci_(gy7fDNx9o@Uw6Cvx;q>baj_jTLf=xAdGh4RZ>j9P
zb=bj*mHEMtH74z4-yS@#Zq&p4xs@QhPG9ZgeQP$n?%fWbb!U6DdfitKZ{p%)a(QX=
zo@0lrEmhp(TDPuxjhFGcynYZ9Gu!KowzgM2KJ13mquXoIIqg2_S)6R`Ogx)xxx*+P
z!p+`A>^)93e;S;W)8_t8<80aOv<9v1&%FOHexfBh+aFFy!hUr4Z(`<u-@pBqj@jEM
zjdHksxVOD}+#4Q3c};fq+U<{@mpl90du$n&q+te=={&tIrqi>xqy4S7I9oQFr+K{n
z(Cmy}+9&hfhhFpOWf=SCtLxRp^=a#<-D(Y<cL%;bJ5DFvi{)Ma<Z?28R&}h`=j`Hg
zztQXsZnsy<+1@2r&+C_A=i%~baewx3d$eAzoAaZ)<Ab?=Z0640WH;WA-nM(aIBUk<
zUk3zi@_Q7#YrzobujR9N_|-b!6$-nz%bn$T|6qRAUEeT3e%$@|8O}+a!KAg*-yWR|
z9@ewYYWKM}TywS8Ki(I|iRazB#@p6()N7^Z-rJoo{X=^@G3V=eb!)CV$sKMzcCOB*
zkH_J4Hqhhk3w?Ju7!EJ=*8S>_asOw}w{o76vJH1M;ZHN&X?OPj1cP5rN_qOJP}mxs
zu3z|B=V&?Fy||LoM(%fqt*eKfF?+2&@zCG4wRt(aS>1`_Pf(a_zg%7qC*|N_-Bb_L
z%e(RLy#KmlM`z9DLF47>V$_xW$I+;L&g^p1Jni=n$8L3W;BRjp)8wl2yp^__u`G<5
z4S<QG+3VurZSSw3@F#!644<6-gFf%J;+-1J_ot6(>*Zj4r!RKyhSn_*>d%e#)BX8f
z`)FnEc3XG(*mX~ChpYA8$>GiL^{Q)T-MxW5k*#_!pUO**9lXxYt}KMh>Es(e@1TC6
zK>y6a`05wVg!*R5vOOf<p#W_Sm!Eu$B6J6(%1%Wd-)<eV;qvt1wp9)Ve;gj_bgkO`
zo&AU1Th-wHRKFHJ8a*k&S8{)6G&+5LI)8W@AH1&KTsYnyw6~x&yiVh{qa(TEy;-k!
z_;zx8cb$7ry++--=!{R^ZVqqV_Ty3SzFaN(FYWXG!QOH(zkiwAtJ^)V^~LF`zdzo|
z1M||h2V!t`a`13L)k<T$8#?2g*3EF|;8q;&zO}ALt<`Pk_Mm^2uTL)4%R{&I2#F#2
z`TfP3A<yr$9*)j;-F){z@v?3V($rtZ;Z<*cb+X-*H-~*b9^CG~O{d*i=&sG)&hFx7
z6uYCHacgV-I&PYs_EDFIZf74^xxL?5&WG&&LCX06BqnDIRNQ8?jElqjxNaX0{OjJ{
z^5Xn@-s~;*SF4kYr_M|N{`R%Mm=8|E+js%3dmiLumY&3`oZY1Jm;L6>z;s@APrY2<
zKJV;Kx}&&yH4l&b&C%fHsXWbkvn~5Px)&ocWq+vye#iPJM0{_iU#$NgCI}LZAHf7c
zqVXe`AV@TR1QP^_#*bivAkp{{Ob{d*e}Re4WISk*%09o`UH0_y>}8id4NU8zo=q3`
za%(**rx%T3IoO>yPbX~eX}jCJn258R=6Gh#-Q{!ha&<Gk=ga3TPR!Q!U2omqc~Z0e
zn-kwl+uio#p?vK&{JI^^wqD22{f^x_vroIewYzn5-t5nA_j>JhKX%5uOm%Os7yYCC
z<H0;ON6DRBY+F~hct5GeaNS#q`F@&qj~C6+=&xyvF2j7hdNZ6(W}jbpX)m7c@Oz$4
z@b~}u<3oFl3#l}%V&2+rcXoE^*UuhdP0VL{eoM#{tDtq}O$tTu>b26!#-wB|j@68c
z)Ud#$G>N)VdRmM<Q_t*bY8EAwVp2AYIUlr8PGsen4?@yQ6<V-dWz4xKTIXL#Y9?<Z
z(}@LBrLas3DRdCjRZFDgbu<QF#bPluRFm52L@gX5*SW^Rm7zxICFR60_#!bzjcG`1
zT)auxxMXVa8K^&dVpV6SLJ&$OdV;xd=ji1~M{OK1a;{zQUQrJ=@96Pe>MiSdG}I%$
z8iAA1!`!hLPH&I!tf{BHwt@P8VcfiChco1AUG$hQz2uk+y*ufpWID&FU=xYodBz-h
z@R1cow=7)sp4yeVY(<R5S!$(fc$Q3ISV~h%0A-bu)YhO%pKWwZ<ER3*jF^cRu^L!H
zQWpppYRSn<>vd6@b1Q90yx0(;$<)N0*150L%RKSKZB#DgM&rCZP3vj{rwyEbBAiak
zd#{7<MAZg0|KX_ljX%D^FGzp=65cP>tjp8<!*upxaa}$<BM*iJB;U^^F~&B4{0|4@
zZ?B%6@0@mb$Ddw0`#a>eLDL3JpU?z7e|+-$8;qTIxO`a5=O6Cov&j$Zdi@6y`<~N2
zU(cTw|I~R8r_c9ck*-Vrc<3LeZMo5&n=tzZY5#h&=jCAm-2Ftwuz}tNdLN-zz7D;I
z@D%RL0%~FUOs^1sI2!f)-vr<Db@+a{Doc_z316ZqT!@%4RB3q1%-2GzG!=RY3;r;{
zM(XzHeJbz$3^h-Mg-DGLi`5ZciqckN;dY-4OOCPXL-dN%YChUh`%K4DfL|1Y1vsDz
z*m_Cbxmi{*Y0iKyE3&~!1CQ?=zJYHo3e%M*qiU!*6zv1`VvHpVuA+5HWyYm49EUc-
zX+j6!3{Z-qsb@IMT_yY)9oKMFMJQAR3m3^F>=+JaQ}!{rh#(A>Ybhm$Dy+#eYhP0g
z5`aSx1|GN<B?-9EBzlG%_DvXOkO~I#ENBHlYF&fG&&X89cDZsO(^gh&%t{5%3QSSB
zH4F#J)VEO~*n~lpM9kAUjak87K)-N?mqMFm_z80{z;?70L5w<@2W`E>=xAXvZxI7L
z3l?pz@KdtDp>l9rfM=rv=BNiJ#z&3k11%-?b?}vY7&!lyZhsdVKNWw7m*fM>Fgd8r
zRhZ9FqeZ|3u%driO>nLt)>8?gStC3|?VY`493V6WR^T!zm*6#{O2E_@SkF4kn5y`)
zWC=c{_LB@gN}P66B1v#iOcvh74klWLGtd%ih)U2H@C7U7WD&0tUat|%>=ZA?P}fdy
z99IdX5x{4`Dve_RfUZQXRn<N*?tnS1MYI|;WPmsqtB38CF3kEAFw+dbNG(-xrgCc6
zT}?Lpy~C;kDgYoJOy)`e=^8_^^dZX-QqCIxuUtgL3m8aAYA)-8QH-+;S}EB9+2Awg
za7x;a+GMf_tRk;eE2NKw2~kzBAq!<9D6=}NaW;=60otSP*`Q@xik8VB6jk<Bx&$V)
zn0|$6oJ^8cqPYrBIZ4JZNDmGU$T@-rx%Uo?jGb!2Nu8?{UtHP5jsMYN=?_@jU}=M;
zFV+rUqOxC$mkpO~@VDWz4VL~NW9eVGY%e@TdI2g_stbO-8q=NC`Ol>?>Zh(8q_`56
zhj-<U(uM^ET^(R@7~cekq9`+#14=!v0MJB6g_M@Qs;uY@sib(IhV!;U&(k7H@HQ&i
zQsIs4vxFKoBE$&!s#8JXYCP%?*gs<jl(8s7QZU?R)UpIzT0+)ETEDhLL5dw(If`0f
zK9LI`Ws|3hA-JefCDZDk4A9gFCaEGuT^vROu%lW_s8p$Wc*W=luB--wa*ugTN1~|n
zE)^{-N{W;sY6>H{t%`gYZ9zdxUGAl!!HLXZ$snocyVT5U6KPtBN@ZFHN$2dSJVLdC
zxq9myDs^E+4JcYrko%}P%*um`s3xJ>5m@+EV=gGpQly~us-ys@Yo@G?6=h8@s9~tb
zxHRM-j_?G=U<qF=qTU096*a#r3?;V+CDRIHsO20ABNZqkq8OK6U{B$hwJKJrQxcf7
z`k7R=!O{jxU!<~6D<Lkz<o!v?-!6Cje4Rs-D8aI>+qP}nwr$(Cx!bmF+qP}Hd$(=t
z?Q`Df4(=UPu2nV3ipW}-QJL|7p+i>`rJtF)sYYN|6U7EoF~bce&Jk0=jEczw-=pa7
zIh-GVEkZCo3Q;TOI@69Ajp$bMM2VV^gyI5A3yDK*UXbxZNMyZF(Y-iTQo9_D-waeo
z4T)AfJrixbt4YV>luLvn4S-Q04h(TuhdMf7n=Lm`3`;2@pr))DH+|V7_Q25ZJ&Cv}
z(2yQLbhK)KM60X^b<Ao~p@d8;JY2oh3Z%`+q<;<-dnEdgQ53>AE(fA(Vg|RtCMBX0
z@S8AIbn0(H1IaCHN@Bte{7Q_YVuq0m@PvFPy<;p?8byX-%A(pGroE548qpja@=7Q=
z45Us9<SA&Sn2?1$K*}gje*p#lDZHM1hFFW~z2w~`wE*3i%Mp}%4GU!88V}Ay1%Y{(
zBX!qM<m{-y@ur0-7rfs<WEFZ2R5op_Ch^UmG{vT|X>dN(R>tLJ-M;q`;wSO=$&u63
z2lOtBH>B71_1qIk|NZk$l(+zBr)i2vu$-WnU#ol|HZn{E0Q?On@-Xgl?|>XiP@}MU
z5Y-<!iRhd%PPW4MQC%o-GtsTY4lH38CsUq4bw}ugS)otE(#+%!4dN_j*2wjcZ#_5x
z(wK=Lseahe982fs>@Nnz0s4+GAC_r0Zso!qfQ2stS2LAD9)L@X5M)J86@qI4>0wD&
z+@chz<PC!fj2=PkD7=jg@0U+!B-tJa8&lp7et~-CLBbQ^*lvL7gx5$hSpece$j>w$
zgO%tXWmt&9ARt+AT$G680f!g3x72tIq?iyS&$)8J5+W$lidI3CsVtCwPg8{^7Llk}
z394vu;8zdK?2iZnYy@yNC6u2lL?VfyZTh9^trkBKQ??DOb_d|Z$Vh%M3~-2o1yM>|
zDJS3{G6M9Sc#j{A8y{6tCI^TBhgbXiBVPIw+zjjVGnDZ7JXYE}&8bh^@%!VVdi`^V
z`_VV#wRb-k`pmZe9lTSw+x!6~lqUbUarFB6nup-6Zk9B%H+b2XRw7#{t<h}YUb6s5
z=28F&S|FA}ri^OBp@Em5Q~{!rM53y}5U_eHrhBZkSd74GDKVz$q@pg_xg;wO?vWuA
z99xC>+(fqucGb^8+`V?e3MG@$1dEXpi;x4Op`>6n@5zZSAZ#@Bw%arImjfw8ud(uM
zGNU|nHkpxCM2Ip(+d6|qAqdmdG^820Ho5M0?T}zxq=BM|unA|>&e9de?!45i!6l&@
zWlkrs3c0yS7}pxH{==7hs#=9jIp&&>*-{0?9#jd5kN^P|BVsJT*44#P&e=xb+XcbV
z1sGG*Z3ZbkavckxjMNFErF&u3Aur!WHFBk2Vb!cgC$O3pC#12Gjz|v`eX_7MW<_wC
zt6s=#LtU;W5r$v}_FR6hV>tMrUItxFG&uSwKf;Pi*G8gIES6RgPXH^3HGLoszbEs7
z{LA*Pd0^>PoiOjr{v$Tm&;Nrh!z-!6k4E_yYK39y*JgIN_zHI953%X*nt9vy?p7I3
zG7L?dAL8%mVZpkd4{mxMe-5}31p_xT0Xb%i8yE~QT;%l1G{OZ<@7^21E#YhtQviAF
zo%@qP`B6F{PT~Nf0naSYAs5+t_CRV#?q^VrtIN|}A<``68zzjb2^5T3g;NWr#RDn|
zcwj1!*|UsOu3-M63V|}Go|P(4^-%E2;`uOyAVw|)6;{E36e;)2S;R60i$_)az5|io
z0by?c@*O!k<ZQ$SNxcKq0A-1A{hjN5Dmgs#Fcm5QxVZE50(xP-kOycRV}14rJ`ekZ
z)^yB!b~9Bh-OwfmPJl>S<hVi#G=q8pc0GV*gr+)Kyo!g)ssT!WG2r_u2J{ZdpdwWJ
z(y~Rlp&`(N69fl~92iqS<xgCXwRPfOvDJV3AAD~E^kdka`ZxnY#g%^%S{bb&xMw3`
z2vj=ztIbPKUEl-0Z(pZw@XY)>0GMfBIvoYlx~hs*PSPf2Qj#|qR82Hc0&8DXHbS&z
zy60ErmfR3A0O&D0!Bm%bxKgv2M>Ix#nnKwy22nK1TbDOoyku(`#C{Oz{(_2JD?Xx&
z&#XvucP%;4JH7kf8+)<wY4iBLEESFY)4idX_1jkRZw=sZYPXX&0x_kV7`mRE97s+#
zr<FM0LaWod!z3%)O^RvL6kqL9dT^z8PK+$Bx~{J;5)9FyfY4-DyvYlS!3nK)1M+x=
zjs?MMFMzFdgK}l3$PVOD`O~6e(Z*|9D*yrW|C5+cX6!PduUin#Gp>QUS*8l8C(H~P
zQ^Ubwfp@l_IsEWcQ}(D*PQTGSxc%0Y$R0hN2pw#C2BG;HGY4^^_ycZp#sqv|nnCkr
zme<?<<J@Iq+9<dcPCN8qsD2>%C|{zMqTvpVqO}JxWXHRogI!SOhu--Bj#}~hAkBnO
zE4Xp=I3Vz5b8n6dSs2g98Clon(oi;U8M@4ya&RKql;%99lWDjcwC5f`EOLS%fqtRw
zS3^=ALWd;^R)N?7rzE;-*l?VzUeG`n3z35mgaA#XT=}p^>e=~iqO^+7=;N@q<qh(g
z>VDL4USB+)@^bzDJ?m!Tcq7o+HRC+Ns_Fti!^?MvoR`=4dKXxW@5mhBJ2s)7Y3#7v
zvecCsx@R?@4(g-UymbyWj|tCxIpfq)4V-4?+-)99eU|cIXyFJZ$3l#v!BGO8O%Cgu
zPJV7`>bFnIHCH6Cm-arT0$*gxWP%{7RI5z2s=j0X$Tb(}Tax2}z#R;Dy*{ruov~%x
z@t2vkWo=T^{0}d6+BAT{>Lx}qW`0sFib33CBKo8qkjhZRy%`-`csDz%8o~w(h(?nt
z3l(e_!NXKeF*!d4Mv~NsR3%W33oROzP}>-)UF-}*DIXZ_J~=cuf(v_9whby8P&~>-
z3L_XPhgw8QZ{ATXGKpgeNXi_#E`_BDWmqj*F5fc<0{n3M3r;N1P7A9+LHK3?!e!1y
zYnQ~#D(h3nlHOx%C)e{h#f>LOSVnc2QY`Si8G4ChnodQ16?yxV(|i$AM%MqjMn6iY
ze*;h2n@0CT>ZpkJ;aV++f12-hp;P?w_{B4<Uj5RYS-KCrr^zJgGuZlb8aOZ8!8QvM
zsrUNgHEGHFHS~I91o8$(`c7r2*cBnSVnHmPsu(RPt1t(ME=WGX5>qJBD8ExX_QHvh
z_Wt*f0#;nYAkma(SQ3VcRBJSO@&RDwA^P9|fdOBX%9Vp5X78DSG_4y}2o#(A_|RZK
z*PC7mqn~OU)dxXw%VLE@raxVrj6{{Bk&IGyq^z7Koh3+CSw?Mazo(2zbP|@4F)p1L
zWd3-YghSN>8VxJTgBXVEY~aCiUnm-kH;hEwHrdrCy`11W*`u&hQV)D+{&d&~CpkL(
zBv4u9RJ=lxYCvSrLd**`#3Ed~$X`YJwmoz~=It;D&3K-T5nY^<EFb}E9)D+i1cWcl
zq+(PdF)%JV<S6Gco3yM966tPH@f(wBo0Wo1mJomhfd1w_NJ&p_5=O5qxRjxRj4I0*
z78?u=k%mDwLOh8zzF;7}Wrb2=6nrKldmSSj0lrp8BjG*I&7)oCt5FAc_0!&5f)bpZ
ze(R$7+pRNf5l>28U_u|Xq)Mk9f9TD`5eOPO%LB944b7otcFx_MmtSl3<(jE2=`jg=
zQ}ZO0QmMd|u3NSUbRGwAVgms;YTHV*t}8fhmR!LWSxm45c&8L1iy1k+4vZ(M{e?@4
zKy45_VZi3%P*4omo$)TYUo56$(}B%0sTn&YVi0H+E)l0YNswIrb`ww+S{LJRA2g51
zrw=0tC(IzDkj+-bDcJc$jJACAF}@q%WZw(~oU;RBWI>^TQ8peH^^x@tP7(f-zg!T=
zzhY+f#uiRk=OB{FL&Yo*E(7vRn$b=U3sIC@)c#PVx`{y$ZpB=-Djhb14#5Wgf5(^i
z!3)TM<ALfhHV9mwn6M~-$K&^*>&eIwiJZmA;;Fwd3NDKTf>xb!Y#frFh=H+4dXEve
zqZYy=$~Z>KBbF2$0815G#L2<)$Fb2l@d-%6Wu&+@sd`3(5*#xv{D4EDcfkZvVa1Kf
z$wmFAIa5}kmslUyM18(r3w`!&TE%zpT-gige6Lhq&+ZWJFAhfkrN|?<*j~WRYZeC3
zZHa>PE{zwB#pPaWW$NLgdqMQY@bi1hg>2;7XIjm{$HL3qo9Nm9@l~#|P13XazBn@J
z;Mz%X=JxfhCnJ*c<F~}#bQ@!Z_V-g=<zEafLeJsnuiOf9wzt@xkI(&n;ywG~^!c@D
zmpFp#^pu;k+x#QEvjM1R<>;v5o+9SvIlTuWveil51`)LHU`+;M?h+Y?zR4iLUAoVr
z%oZS1x6OHtLp6d%jMz-YsLc}K;JS)3oh}6)#7TrpC2)-(`j?ZDT8|0K3<5ek6A=PU
z3WR`z^DvWeSd4_&Jc>d@I16!?Y9q3XrtOe+tn#-#sK+pC#k4|;F9O_85AG^?KlSjJ
zS!my8u){=s(l2#(tIG4vtuyY|L#{mv(_rsd6vyvF21lUHj{r_*Ca7)92b|j9kLDl`
zRcBM{jXlU$+2LFb7&QelwwE_lz}|+{I(cV^Jz!kT+0JYir~9<@9R|Gfz)tjZ<UFSi
zb>)$+xNT?rU(UO0=qP22@zTnM_bswF`QUpui(ku|p(gytz;T7`FAeZJ3I5;IpwCyx
zbK%jK)+i6{j&uJ0eY@s=O7sW#01@w;doP#VtCPnwj9;e0&OwU3^DDuV_s5AVt_nq*
zpQH1orj>#k(@hk%Uw$gm#@R6Q+fa1z_qA3%nl=@6DPxyl4R2pBg<9y;JuNOS&APo0
z+nzsiy!k=)8=sn%<ChzEcLOozS+ni$0<cAiiK{^<GIVyuAt<aMV%C?rnBvxpS{i0x
z+;@twnK8=E9t7`#)Z84HG<=}}aOfcRg$_weR?E@UHHKF?5{mB&*b~i6f#S4DhLWD_
z3|Z}%zDW7hob*d1I|9(!xebQRJaEl}DBy;$`0e#R$!BX+V?gi`BM1kMFhe9ghD0zt
zg`Bw01}Q9x&d9d)a$O5C?U6i`1EY+Ag_5v=8xaMbh#jZ^F=>IIC(Glc|8x}*VX}z&
zaihZ%9HD+-oB>hFiTRpvMTUf<@x{2FOvXT}gY8FP{Dv-K=_dX(_QL%h0$Tacb!X2Q
zI|v8Lo+mK9Cb4dv?-SC;MUh@W)QnWeA<~n9L|?GENPv|bP!7OXz_L7CxT1k9UmOz5
z2>h<i7$axx>TgnTR4|jB!_9GqE_YLRQ47RTvEs%gYjipuBi&b9L^W%+AAaKAul_s0
zFVFxlR_r&@hc56-yfSSJ-yZzm(#Gya-cL6R-oRdd8#f^Q?#^|)K<|wGsNSaraa(h7
zTljc#U!zur?hFTd&kxRVr@XnhU~`w(FG({GLxpvz;!&NG-%nY7bZa$rYg32zt?oXL
z*4KLsp0|=X3zIKh-trG#-(DS+&8tqoyGz~Yfa-Dg12eo_MgzAwHb39B36UDwmdY9N
zaQICI$qYp%qUW|u%DZlMW}xwG6V;P5D|+5@jcuDCq_;OEOlCf|DW1ojNrNU;re-}H
zyB#CQjSYNJV%|L=)VddB8VR*d;Msd!nLkN8&+i;~r!MW-&^^TY3+>ky({>y^vz~U{
zZ&WF$(M%heW*z1!_b1*>BS%(KI@$TM=hd3jv?7IOmZa=L&D*3^dMt#E#Y?|AFP9qn
zyf?KS8iHMeJ(F^+W|c|FsO>K_XUUmHYp|#F$FAHqW#ZTSZ$2{eY0vvBie8@WI=IVj
zWRz!vBL_K<QIMQ#OjFxcDF{&qXDuoYol<KjdQF$iB~bar5H1fkt5R-7DYY5yTmS?i
zYnu*|m|k6oE|dP21tKpUpJo=0HE3WmccmI5ywPk3OJMwMzHxUPf4X+)gaCA_H-G!M
zG+LhjT69>w@!`|I4M{-5iNorD!<l<Dc)50K(4&KwMXiB{g+-;cbNFt|CiHea-tC_m
zc#{~f$m!R_I(Ar8tvEfmjWpR3pYHVXark!lxORTy()MuCO%)Zn`A9`MWhM5##y!|u
zyzyo7+GVNjbs1L$yxw!{II{-^H3YEf5^)V+(l_PFmdYS>3_#5|7p0l1Fc03VH9M*b
zkBQu>s^)97g<?jUN|74sE|sdUt#nV=!Q&RIObeJPR#y=L>Pz{{L@;-w`O-P7cc$mo
z%tV^I-d52Hvx)S+JM%&F%JP5TCYhf$%_rS1F4eVjYy~u#&Q8>s&W!W~bz-g$SZ>Xd
z^TR9y)I91LV7tg0nPJ?yKcYD-?Zmp%^k>V6Sx&bp3|o#7qYGig+_7b%WH3numlHQB
z7||IJ7LJS!|64R8DaWVAk=*4|pLeGWu?V*W#jNQr)$F>ygXKtRIIAN9W8fl;!8Y!V
z?!d%$WywPJ!KVy;3||biah7}-oEn)VT>NS*%JZry{x;J)h%b1nI0C;0$VRjhY%-qX
zs!mQA`k(d-E-*l0cogZt-0?)GAEA_SkRT#&h)*-Sb?OPZ%jV#tyi+GIR=6%+VF~V(
zx*Hbnn@LH^AVA1>?LMcY*z%YRiGcoeOD#gnc9r<%U*~O-fft#uZKC#JlQ}Mo=AE6I
zx;jziF1h<rn<vjPJp2W#lEAzCb~os|muz!suniHTvJzB<^h`5B3!dER=Qb6ax1`IO
zGxUw(n-Jc8iA?>pkqQHKY(f#8FbkP)FX(4eWFr!`?B%&K3pl*Q$Z>b9pLP*}BRi!l
zAE<ULl^r$8rOi3rOb1Y13`DtYn$}tc(vwi_2R_7I>o~9EBq-jO;NY4dg$gQZrhyhe
zCd15g9w}ycJvlE=xO|h7kV?1Tp0-}?#N4RKhMn4cS>*F&`OE96wEE}mtwrH^`bMgv
zdjR2R(L)u%(Y1w>Vo&$UlWuNXr9>%LV5WNd#K1R{{EQMkt0HAU+XzWcJWbRBj(&kf
zaey{XLsam?U2vv@hfzhpePV+Hj-8i!$2EX5SiVv^E5;J$pWyk>xIR*a8v4d2$oUM$
z)Gc^{m2_?pGp!`gx9kwRCbiV-l8c*BSrRycEC6!YDCR*DvPw0qhgNq-C^ypcF;`+G
z`h65wEj4*?=*67F459K|?JklN0*@2SM|>w&y5$UPt<Wlb0TrAd@S^`h##KCus+K5I
z$Ri!oCk@QjA3wlhQ8R-XMYPgK93%(2)ydwRPg>L504D)BOelhmx=u$^-W(p=H1)3a
z3}|e^ZP+86mgX3zxoMR7Zm(jsQixjhQi)Lfmdz5@ypjjRb1^`O_8!H={@?=&l64dZ
z;P(v}?1_ZO_hTxKA2tpC&hqVN!!>UWSWt~>6cB}KnkRD6N(dr0ks57sGh?TlQ_TX!
ztYj8ps*_&ijx!h`6y=nf^ef&dv^@VsXC~Hp31@-RSqgW<OeDEK;jp*_Ld;B^5M;Vu
zY|#nSbdI8Z#;*WSw;nY)CssK(rj&OiDul?beHZ4Qx+HZ3MLdc|Z%zQt424JF{fdFO
z3hZ-|^IARMATs45fVmPr8e!dvik}oyi(+$P8ducLh|C;6Au~iY74=$o24D&%=Q)_#
zl6D40EC+UbkrP2AP)!$_J{SQrsdVL^8a)h8l523L7^#zx>=#Bi4|s&|?H)BdZ~<vo
zQA<UJez1Qaka@qhK|OE#y+eU9gDsA-1`6&tGfP2rPR>T^(<8oqV>gguuDmJSTtuQ{
z13XZZ37<X=UW$)rZ_LSX4yx9^{rz~P%h}^@AAgLUUszmX*X!nB?()6hbKe}j?)+`S
zPj_)Rit6k3aj37ayMvOdWeB8bUdebjxWbgLDFamvlR#GP-t!S+SIOi1m9m#2PD!p#
zpC3<;pm<B^YvpfP(DO_2=Z(u=NbKB8PoMb3)|0O1R&AL1lrY!dMGDyU(yGH3FXT;q
z3*)W98Jk@e4w|^W(pS$evn~6ws_y>1AYrSkOK^RCv7H&)KJp=I@R$7o%-3DQl9Q$G
zEhcwRO#7DSeH<=*T0HxXM!h3dZJcfny;`kr3AFFSx1xFvMqSkD_R>vfp$)$V_nID8
z9Pt-!KhOZ5ak_e_&aMwd+kSkro9Sv$?o{<fG6{nIGxKU#QA`q4?q9yL8`5VqQO(qn
z>P`dYqwS18Dmj&0E6nbh>HS3dZ@mlf=QOC(7hju{J)02z9zoQ_aDKgq*g6G!&rpBD
z_%^MR9ecQLzt-h$cRo)Z@E3lWySB^TN%DNWe}Az2J}&cizJFEueZL$3?Q&jsvAH`m
zHIbKz3Y6O~>>90MU%JBf!2Z<fJ<O_id!zIF!n%Jxr0KaUdv@La9{crvJzV^@<?;4B
z2V*ziuWI&@S@ygXW9L3kTHZ!XftU431;NYd2Y%ehUp6Ri?kJIEUY3Pi{?KQ2k+=P7
z=Ux50(1o{S%IP7){P{!f`DgOF3jd1!=a*H(Lvjn>+5ldTf1|)qhy5<*wPi}V^KOis
z93B3(jgKx*skhVk0qf;?cl<+uYv}i1C%g|Q@84iapLfVU10%aE3*P}gtBZSph2J~X
z;_%kImY?Llam<zJJ`e5t!tvconcaW))gL3^E91e-*2c2;aQ%qoy?GAne)X2Tw~lf(
zKkouNdm8kQKK$P55szT~yC1sY*IoxO83Nf~VxV@mZr8ZC?)|=gR&ReF-|kwV5f&a#
z^-f=#xu$-*+Z`hwZ(I)5CQE)QQBEpHc79|@kUIWIyv^zCAaqakMyyRNT=Vbbrxe}F
zEe<Jr!cW%CAAe4k(9ww_`<#%u52>!H6wyek<YhV!^G&@BwP4{glaI8h<{%~6_n^!Y
zmQ!6usZ9muF41Y6U<EeFCeVm9%A)u*CU+c?%t&4;N&G|4F-}QG<9@=MVSU@%V_jBX
zOqQ&>&XIYYp>?K>MYJnM^qOvEnKj~hvFmNvnRa<ERgx;#%ywiHH`+rU*VmDCRBBs@
zsah+sk0`<}nDqEb8XDndUd56^SI&N%ofCV<`~=G?YtwLsY*&1&cUlMd(&ie)p9Vr`
zwKWtBO0vG<v25r$mFv36Ch?9RdlGaUQhGN`FgwnI6xqT*WZupvP06v*+?O85CzD#O
za<wZE=XgyD-U$7SmM+leJfCNlx?VUHHG9z7>(1>=3^{fv)dWivqr}(nY6iEEb)Al1
zN~_jpwsWdZSi~HH{s<PZijz84?qby)pR=Tz_gW>SjSmjv?P~bWHV$!a&$tXX`P5kI
zX}+k=)qGlo^qRJLL8j_~d-f_$N$W=0G#7nh_nd^N@l!6ryk8%Sx}Ome-7+~zxX9)X
z3w$~D6s0R-Qf^N`dm76+K$?0*EJrR@aO@!#K%sWv_V^{)`af#evpSebHKT>calMtB
z1XZ6HNn=5l1VICI&Q8!d+EmMd#2w-!-FL)CK^To{RS8qvQNx528&zC2VIT??8Ar2t
zudI6!f5I-OGr+YAEMzXkm8BY&lF+-c=Ey2DhM)myn=pliQ!b#TIj5Z3y9{hQRYTN}
zlEfm$hBU12qhwrF1jTR!t#2kb#T<p;-r0bsc;Ey^!kDRN%3xx$n0^%riItZ(dg~?a
z)4z78MB`C5C2QCSbzbj_rW5cqf`#zc+zza%B;c7m(vZuyAq@=l*kF$?2o>Z@Wd_;!
zsX8_u?Ak~tmPoS!9!g1SXi2ELPLqF<d?sq5a*mtjq>GTYQjzFyK?n--;bI<~Im3&C
zOim7JcMKzDhQeSzNRCU$60`D3%c4zyYR#6PLgI2-WSQJ?3H+kE{(<3rDb^;mXroXy
zs_CgRp>0eLfpm44NKJm-gBpi?6vOUt(=-Tg1y*FdlvC68+=TOs56f*NPW?8`R@`x#
zE>Nu%d#O8L8AZziG^-Ag%5Gh;hFL*>Pt~$h;i2Bp!aG@N84uK_DQT+QB|(*JWp6^X
zWk1^tQF91Xf8d=}Ypxo_px!zPCfef!xjE9brz;&(kX>v9>|{ngwBfX@(W+VH!W}w*
zhKnE~C77!xT4=Z~wjLj$CW0XnVJc~pYGjXTY&F7?Vt^0APAx;_z5{J`!%%3ws7M#2
zXD}QRB|BO_mTp~nLg^9cA@)<Qz|xANG{Sjc@f;;(og@Psoe=I`_0o(NhOY(PGP&(Z
zUm$fUJSc8l!UN9yWF?qIOKtE^q7PWkClmgUCn3l4&4Myvt=P&p0y05amQ^ZLmCpc@
zw$bL$#GPaPjoedT>oO>gaLMc&0olBW@73QYO=fohOBh)GyyaG*9diTExPk*Gka{YE
zGhEuH(uW#`lk_Q@a(HcW$c+kR*{w7}rfxO2=0=Ci*-TZMGN<o|Rq1;+StH~PL0IUX
z*s2;fgmYINdyXcj?VGjOrLO6kXqm4o_P)|+&!x9_TIOPo4K-f7C9&(#JFVoG{^y+w
z!B}yY9TbKHVfj(5ILbHT3IFqS*+pSVP!^o^TcrGaOs{1-BuD!jgdLK{UagM0Yr>EM
zYR6VNJ1qtFb{pksy6Ra@Pf^Nk6D{AbAV)cK94nGrkOQWk4g*q_!Bc19*eET>F^c&S
zhU7EEteHeO2knWmCMXjglgVT}K8~)41*2qu0#?kDK`KbTfW-kizjMivG#6+dd5vK}
z3wm%F%RPRgq0ufW$DL+F^Hzhl9yEJ`s!xdp2nueBra_Ibxj0RdnW1W8#=8IQbcbaM
zj-Pp3vQDpvCVi&Wa`;Cv6Xw4?&FP6*vPcyvV#O?4B#RZXL~`sMqQo_I>%n4|xX%Mt
zU<zUYT4}#@wbShmthq06vLSQzdm8S#G0b*X?nr?-dTO~_IJ-h|?L)XPSsfs>N!Aq3
z#O$<QWve-Fvo+0N57l;gCY$}odH?JZPgTT<U35qeEn>kbIiP^$|6@s!Wgj*&MHW}p
zh&}73?O+Dgtl;m;un}>Zqe-R)AlN^b;}jlZCeA|Z74R3RyPqSMg`oMvR%@Qs$FePS
zCewD{K$Y{Ftr)&9bEf)?-EMxrI!!SX?!TrH=5<6bdL)k)vEY^5Q^bf{@<<(eW|ZM_
za%<+}9QegZvv9+Bs|lp&GMMxM?xHyh6lc+BX?(*?*lN22;$e{g!*XDsx<ciWcWlyD
zo!ScCg|%W9m=i-1Ao_2Z!CekQ)Y;{zI25tq|7XPheIGt5n9{(;mIgGi(Io*5EDWh&
zql^7xdRQ9QS36KJw?OtVQ=$Wq43Hkg?Oek35CpVz2WF@9&$D5Y%b02`1v@CH^fF0$
z^C3GPu6D2>{g|LK>z+{@c0`%!J1n$!X^_aS&<|fmW7hHi-<k1*d2P`p2@NbvsbZsx
z;~H3)(!|D=N6z|K_YM#}gJ^29?I`)^_163w8SFrAL(w`0Pe_ADITX(K*q@%Pc3DN*
z2K|_C!hb?KmQmdFYW#OwN9t+P`%NI|>e_NxXT>cD?F7&VYn>58oy5iaxO<^VI3w%m
z7Pmj{?<e>Z>UNH;V5vh7Ff*bJrS_5P4~H|L)$O*6gy6yCOh|7F>5E-NW}-b}DA4QF
ztOo-iG)eKG%Y=NuT_MHi;rQGFQHRqDBk97uK{Xo))bMuX{f5T4SZkQlrPL*q@UDoc
zf^d`(%TdkV2DRd7^}H_=et-$RE%xF8Q($*JL9F!e>{IscHDB@MOnC!Ie~5fafv@W}
z{fvN+;FaKOV;|VxqO(_k6C0Z;%>{KBEJ!EszZ*gW#-{eRdwl_e1~Yv9PE`HyWZ;{@
zF*h>;4^d2lL0tC74TA}J*0MJAQG-~oMfo%($!kG;ogOPs;y2221+C)qv=|M{T2#wq
zpJW3@NGKS)f@`%NOT8*P0u+e|i2;d}hz$Qa!9!ueK4`B(a^kCiOG1AQLi9aN5N@;t
z+Q{%_YB|I1sKoOD5KHCSjjM+<aB&y#-W7+sgowaX6aAwg6Hz`8#wp*nw$`?9;2@2Y
zx9g4AY@~%&nAf%V%{cv?l2|c-P$OMy1QtD7hO~^wjA;A3;vxX}Lj)s|0Rx6(OgoW6
zQz@=MaZ%zrlD0}gpYYMVa5~H;aOc0gsuUw+UI-+~G_DxxkHO%`VM6`~vBEJ<LJ%Mx
zs4MV!-(5jr-zaX!q5gfT=z-gTRH6c$XUcQ@kpNAg+c%Vnei{;ojv-c^^Othhu)hCO
z{<GKb&#wH-+Awu9V9sJus^VW|Mby~C^fwG$+^(wzZw{D0Xc<#K%*{@B!N4c4<~?R#
zi$8`SPOWcIK316?+doO|{Lq_&8AdcgXvgL}(KddvdvR(QNu2?D=L|_fuagpAKa<~A
z@akd<=PTQA*WL@;s(x4Wt{*mbpL<VyjaS|bJrU5!J?KH*xF-g5<^Z)6oyi_cbaU18
zA1!T?1%l}NkXlk`2%>jy0GU^`$53&qwJsife-f9IIC#rd0_mf%Koby(QAuIG29WY2
z&Nhf5sle7=Fn#!>5jFeQnf7ZHk|-w&ka194A@gIM;8L^&?qUj>!_)KD$%b`RFku$c
zsV-(htr`naYB2Dr;8E~$6r_kYKve7|+hX0cU$KM}k|Xzp9jJhqLxdE%3G>n4NNR7G
zw38`89|afy3WRB%!_EI4ZKfkLYt+)Wgn*O*Z>WQYAf&SfM6;YBjEJb6H4#Ker<{%x
zF)#*D691aLSpmcaED?W_s2YY>_eTM$m5ZA%ll9jlI3T+SvDy_wh{NV6s1eU`f}jse
zt1L?x)--1$uJT-rpCpEwlj6friO$FR_bDm^La<&)=}{M4=5k-aJIJLbViZ6Ju#+!Y
z4T5k>2*W9PqUP76rz<ED2|#|&N@30X@)sK5C_0D?AcBgce3dBP&Bk5R=<@jZKzYzy
z-rVT-cKNxq<?wSNc3;`~y{>q<cYR+!&AeXjbh+P1bvXZKd4Ifhb#2{?a`$ok)*b$N
zd0V(|YrEaq!{_)Br$&#Pn~jU@)oZ0c-qz-LwQzTIdk7OpwdJeS|8jI}yYXc`A6oFP
z$!0yj4tsfg|9Pcn;&3|)FTs+c5>T=WrIJckK_+$3#qL^|aTQY`EI2H8)1gEm@(&>D
zLM32nY}s(pWmK<sOrN#H2(99B@kw;z7VJB%S)s=(d4whj8UldJOG^s7e){{_<f6qm
zG<AQVl3q%Z&XQ`S!&q8)U1&wJk_4LDJ?a>8uihF$VF6wj9$|V9{#Gn}d3t??e|@#G
z$~bIR<y^2PM|nV`zcIXTz}e4D=(2$nVY6H3%Z3uE==w&-NynO1#4S(v$A{>H1$SXU
zMTLG~6G+wKZ?-SlTdETUw6@^Q1=vb?Xk%g7nTak7GTAbh5vo({)DB=f4&o0nk=TOl
zkRnFIdymZ50QhTV#BXfz?w=pVoLu0WHEck=Fpq;AD<wP4D%a$YHIdvX9>E34f_U@V
z5S<Iy0PtfX!psAM`VL+A{0okdYUn{?99GO=X>{wf%@)g(SSx-olyI)GZN+dVQ+pB)
zO;kzu-|1ltuqMZZj*xk2;C9z!CiH6-5sTs7&<=uZ&Um!pIt*sivhqnSVKK)&L_}+{
zkPF3>^{Bu3jk4u51&+ast1b_n=EdKE8iCPgf}&28a%ngr*#^a(l_td)v7}rCcu7$b
zR<-WU{y1T0@Vow<y(>V{FO!u;3T~N>nhOd<M4nbUbwMcmCfR<(`CQ^g{$#D2jWUXa
zWF7)y>;}-aR@jMTi5beM3y4GaIS1x%J6SqN$^Cpoi@MWBlEg1U=JS>dfDFEU>4Fv`
z!<8;VSl|YvsDv6ND*4#^S^K*<ftL~zv;!%^6Wdip!DtkvI`HZW#o@)V`I^?S%P#P!
z%>@#%jhhW@6H1JjHlQ9!-n6MoHyf0aq9wfO%*m9~q7|{t)xZ)BM-c?lH-a}K7RBb5
z*+uJtBv}9;Vt1M*=&=eli?E(DHw*bup^_O#$D`S73~Z-Acwj&K!rpb^3I51no`)*5
z`?%{wg3G(G(sKTk8T*`Ek}S+R<pE%X0j|Rwkyr0tZyvx|M7Qq1bOC38Pywlo_WflL
zs3Zzl@ebNWB8dP>C&y%R<ErKi<K|#uNdHK~+qJL39+HqxBVDm?@rhNHSoPqsa@U-|
z>uz9x!w#(dOSqOLzD#hlA^p&@h19TCxC1_&K%b($q+tA&;QUa*6zT(}RhAW^$UiH!
zEjBF)zzaQngQq4Fgl8*t*-0UvA-r<+p25L397@uGxd>P5VDRrB9V@W|{z-%gOj-S-
zajlgqovN;NByobi)2LcpZ>kbuHWXTtI2O>U|9(R5sqPuCRXvB1FM(E(#0<hL&f<x5
zk|x7p&y<ibX8ZjGeiE4D4FqLGtATV~Rc!#SsaVwRrHVYXLY#uek%K(7<;(uDa<*2<
z4QS}s1e{>M)?MkH-Aql_rG`u&Lb(j554+bdanabPEiK&{|8jNhS?9&EZH$Dqg>UL*
z1bmUdc3^?!hxO$p_WW#xAdg3?PxE~JYX3cJG8MSLSn=iU?(S&!=;nJZ8aaHrK-Hk@
zza>rg1AqZE<kPeankSP8_rIW=FI}J_W$7&ZpyWZY1?5740Nxia>j6|0ilWn8xM{yv
zVnlEckL}O*bKcB>$3spg-yIbRIW)jDzyYF3e2EeTI)$Z5CzS*boFhHzQ(?;Qv4zML
zv5JU=TRlR^;wA^8Qi~9J2kdKXHt%*L6k431ASkd}rjA5uR0;!ow-;VJGlGL9%KCQY
z0*{pp7F1VBh{4HO;Ja23W}ayw(26Swa9C=Pn=gdnU{i^Iu|5F!chs<AuAnW5rT8U~
z(#%*I2;w@r$NS~)C98lgpiQOCNugsVxL6}n17{Q7in%o$2&ADxZ2^Ca5nk-DSYX9r
z;fK!cfNP#VU+p|w7es9P<PCFu{|w6lD;^^&fMU$GRP>1uj=5qBqDiVjHODc*8h}bP
zk`IV0L@M75zBc9zL&`{aOKc%gE^)@LSKxerJ$7an1+ZsajfCd~CzBj&h&U)EUG4~{
z7_5aGWHXN%p6*sfP@YeECI_4tyv6a6^S)<rvzo~U?S)*wE))?2X^EgvF9iP%5)E0;
zf}l>@5iwxp0}ucZyEP4EAWoiw`T%GRRX96;P>we52p+7D`s)z*HL&FUBQ!b>F`!&d
z#sL2phBjC)ObC<_#=#*5RGAEI5FE@Cl(DKnXu-l0!NVWIYMGKy0ER{drCNaF`|Id8
zxq;vGN)FR_G|?>*C0rL`6}(~`)QdKm-F6)FR@hdu!rzh<$iw0W9Mok490?w3!#d&w
zn!h>ZCLx!Np%_pl|BG0L0glkSa8j~U>}0-O6;%+z+nnQ=tGp<=AOz$Dk0U;sQ*po#
z+JXrgqI2>os_{!5g%QlECV*2$ev_iO8v-bREx!OTL4|A~7KF+6!Rn~JNLCuzIG`F`
zVM&e{vZOh-z?}lRb_!o{xH9bbcl${sB_G6}krJCS88e(ZYI%u3n-D8=bkgV#RcIjq
zTL?>k1$qLrSQuUobp8BzTWC#}ggV}(pPyHsB~$cwxX`crv|m~ddFbJ<&crF`1+)B#
zXxI3|jgUx-R!7!y+Rd{=lE=b)hvc3v?XK-&*UUlJlPtaUb>2lp6Ex;~XT0WUVYkd<
zclaP2IpD0P9Q#CIqcRz1T%;0Ngc2!zA;qcbdH@z=u+$XA@wshPOiov6-pEDN3pk<x
z>mE|n8WWR{v0WIwr!~ah({uuRPE)5-)=ZpM)>9hVR!`0gg2XKj%Jm<|WuHy2tcvQU
zt&FlRaZi05y<*L}GuNux4P3vS8+@{%<>Hl%mz6Pj{4c@Q1=zzYV?U+In7f>w^*ldK
z7`>~b*DyRi3=YS!3{!tKUn@RMS4)>`xzozC?3>fatFtAa=~oR}Q`RZs_a6}(Sh@96
zK`ukXcK)BwDRk#M&nK^u9PXmpVKUr|F|ksVq-yNt&!T(m)5#hwSg!Yxu_-~7=wGgy
zk=5O=#@+|*XM#K)3Z}JM9wIs?9L!(C)ajXl0q=#G!U4Ly_s)dd(Xvt7t(=Ho^P=tD
zvuDk(pmrL>9;kHE;#*I5=+#Q(BT2ks+!WM6yY<NSc*~0XIv};kd;>*7k5mc*F3RHQ
z!9>!EX^(*{;{)p@_R9vAZZL+v^`|Je+pFoEv!<73KF+<)VDg_zUai~#*{w$}x6Wy<
z<WV(i{JEXTMOk>tSg@hPUAfzRZFoxh*(!T-&yj;Wk8tqViD^e)y}3JXUfbTT)>S_I
zna!oBdk>Zj&aIasNpCkT`H7n=t1GRVq0t_44gKlchL>MZ1!-Uq6aWAK2mqNp1*w8J
zZ}Z%Lcdh>}A^;o!dk0fHXJ;E)Mmk1122*+$Q)id|Hcrll4z5OY4yLxMDv$uc`$;7l
zy3*wut{%_;fFNhU0094OOlNuFg#~c@?{~`Tqg0$MjTyh<if}IG3$-mn%B4`#9?w4;
zUoi8|%PR929Jdu>W7pkfGZO!Ps!-N*wrLzJ99*$UqXH3QFxMl&@c_aD<4$cgWgW`#
zt2*Xwe4|kQEP`QBc3F2xX@=7LsknS5e1Tj4I<wt&S$L@M$@m+)PEfuS4URyeN7M-$
zzdP$$nb8jkzzlPKN>K1D?hX7uEysDEf~JB50H9|B03iEcEH`nnadu<0v2=DZwfm1N
z=#2j_>#wzKmA532es1&`p<OAnFydhdN#t%OF_P*p4JOGdq_1r&Oe{_22<Og<5$Usz
z`}AL@B~ooMVI)<B(EJcAI?MJxGg2A0uu&TYH;Fo9H!Nr*hZ<kUH_{XJMBWYNNy{4E
z=$}a}OPpx_nnX1Z#y=&n6Z&S(|0|H9O#nRNk|FLX<eTV}H!6ZQ9Godq+1_r3v1X+m
z?1M&`(Y_W8Ex8z6h{I_H38^6g+4EpQ0(m%$oJ3(l_e#-W;#3`s%_tUr>O>T}2x^AD
zUSy2|%06BZ>>9U~^Dp~NTUrDwh$WAd$!ti43GmbSuhcesDwC9+y}iDko*m>Jq2wSf
zVqEKUsqNwHs)n49!CtM(D(36pa@i4V<Y7_GJwLRy*f3ipB`Hh>1^GM&9l1v!cqWoS
zGw>oe=qZ@)Y4NFx+%9gO3stcQ7Cxig3frVFn#^&nqBx26VT)8ozhK?Bc1dH8;2&9J
z$OYT5Xs7qw&;o@GgbEc#^wVe~7Nm2jlK~*`mt=CA;R34e25e+`TiipnFzBA+SN?JB
zhZ3QEW8DpJSD?(@u5J0zn~uaXO7R>ny*QNbyK3(C`nGDyjmC=;s3SR&ZbwYp4b+#X
z3UZ@7lBa(aX}J#1O(0Bp$W6*rP5w=?riuwQ<s$$oSPN$qz3?oO+lZtG-RXt8n96qR
zN^Sn{6mH_k^RglcBr3a=yr((p_C&rK(JsbPc5U%Cw};RFRCD?_2Q5pZmr-dRw$z9@
z=pMZ51J;)Uj=f4<)tw0|Tq-Or&hpos%_%6PzT($y%RlN;wKXgolQG|+f48Sha4UJ~
z^-N5GK2oZEP3^78opH-M$3GNIjF_;AHSh%b5n<Eg5;O_gTyyB-_dBaFHCRd=6PYBF
zm|Dg1*R^s2cGmZBy6tC}K{5-NBaT=jD9eZeY6Rj1z3(g=Rsk@Ljqihnm_JCR0&Yn_
zk6xgrp-T!}^d$YE2u_9UGAp0sH2x8CWu`8-4*i1`@zF6f_yIAl_yPuk`VA1F)ofE3
zgS>(<#i0a|FshD(GevEERCX3QJ|H_yPb;)1yGpt>Wu##UPPh9?$kpuq!CvwAI2(S0
z)czderR??AJOn&In&HX(ahffJU}}S$?C|n{HUqrBorjeVI%*VbY++ynLWvH(yXEKL
z8yp+knQapY+!=l40d~ihH{S>D+}-V|y1a%-VlF}ir;+v!NY$Q%l*Y8GP|%p<kOm#I
zGOyL3qDf_1<;v`|p@wZ;G`K~XdDjM1a6<wt^)aUL@`<bO>WagUpZ0hLk%+^IH@k<}
zay{>7aKWE1sz0|h@xa3T6ARbUCmzNZ14Bw2^Z{+GwjrG0v=>u15zOlo>EUzx;^vOW
zFLB-N15`1_D@Fr{Q11XxBvgIr<b14t<24kw7~b|u_~98vjm}~=@ciojm(P!~9aok`
z^<bR*SO<TERC;ss&pWT+h#ss;D(Dxu6&)`iO=~)3kH}~Rxokwr$^qD+tmt%Fh8Hi4
z9P13X$#alRynD|sq336+2$5l;u7ZVl#%Q)qyJ4g`ZGIA53UVXJ>=oBRV7Q7{1<9I<
znGv7s$C!AYVmvExfu0)oTO-$&$NFtfs_j$@hFA_1l&DN^{)}r;V=c)xK~s0EMU#`T
z0ZwAVWsY*j*N@d^)JLU|+Jktnmz?Z+o(jkcQ|V^1w6%I0`!niM)fy@_rDC>zktE@{
zRV9kGAo}Qoo$Sf2P+KJf&ueOr5F46Pz;k`&QP-nFZpezuQCv@()p!S9{Ber2&n*o4
z+yUr>s8Iz=i2UVn8Q@`Zvv<#4EVo>nvyjBlWB|0{_&RH0Hy4J>gjizmv*#NVV|ECA
z(*;2I3YEUpJ}gZCh`@01Wd3yxnc<P_09w1>Pq!V7$4|GK!!AUaZnY&26-|*G0V;{5
zDp;e9Kn@fBGlzmh6H3)7wAlgk;c=v(0bm81&2Nc?Pffg&Y2Pzzg0QUSlK^bh3<uLn
zeo!X@+vD{(6c)cDW}P0yNs;wbFHQu|U9azpeRxhckh46WTh~l<z7TJdhr>28wgVqb
zhK7!Lx5<VjF5b(8n24dCR~9`-ww{`GrexWydr8%;@PIgo{Ub3NE|B;oi6k$)87}H7
zrF|;Jb%3LUW&h!-qW)_P?svX!4Q35hRlDGp^v_3>1@`kd%M&pnXn~_mvdLdV7pKy1
zabtC*G3>%|uL64O8PhBm!8!YdD%K+Cu+;QGlfO<W@c*)DtVjP2j=7%!!o7yD19Rz@
z!|i}ifZC&8!`(hC8x<;m{KycvC1v!R+Dw(0>IIFZIzvvYuC#a=pX{;ZxHUCfSElc2
z$*<UyZM`edP7|{}TxpUCJ}=9V-(#}R1DdCUtyI#rYB|;#`q?o4fi_E@8%$-8w?{)O
zS`jHRn5}M7a}H&|X8GDa>Z<_Pkdy=2!wDVaHdnZrw-V-ZqfeK36i4_fR}l;-sB@U*
zz`|-)bZxXWSIm=?%`OwWNA(nVwWLX&(Xfg3HVXW3MTpE4L~dtg-m=PAS9E3++GQX9
zs60FB!%Aj|z{5OsTuHXb;Th^G)V3Jbp_}QC%2;X|>UPaI;Lw>{V)8PB2593vlVzr_
zq4CeATECPfYU!}c^}KZcw5C|BOgSHsM*-#mTWMkT!FdxuOX@c@#9CUTGIosiZ+P3k
z!|w&7tYeiHrIQVX;x8~1QfD0v*Q&fRGc&EQp-oHngmhMcdVR~om`72uF6MhqyU@AV
zUB)n$V5~Fk5ckr<2p6A%h92vBQ0ix5V7l5e-QU;I0)K`2#1*8Ax;KqJwYjf&zy@(&
z^*^5Eck)6NL><xy?O>Q|ECEZV%A;BZMidg20sO9fw@f~DHVhny^FkD|6j~g2K&h_-
zkwpEFFJl3yTYH~)k79Jxg39@`r#Q>qPw{scve1gix4puY9z%j!1_Y7`d-~iuS^zjc
zxbt)rwuJ{5Xx_0US&)~`jJbdaqg#(W3fQ>o_x-8*)Q95=$H%A4EfZB_JHGR@DYOom
zH=3xZB8!IeH&D$phWv*sRj?%eYlFBrbdPPcS8kCaFpQMK|DffEzshh@=vkNdYZVVi
zN&$8>?>yON^dM{U7w~^ZVr^8qch2Ad0N>~U0J#54B<8`&z-j2}@qY(kI~un3TO3F~
zIKPn*QD&5D4M_&C{?eN`jTLR!)!5*z(8cT85RoDqo8yH9N|H@$U$0q&lo5?NrQSWC
z_2eK8B5<eA8H8a&df;9TbPr)fnlz|5xHvzsC(>|9+2&0f7`0IM-0-N`DOQwFoc>KL
zA(RVJ=}r?-+<36@;0>7MgmWZu`O`#t{!Z(~W>PN!3l3|EZav6aZv;{rpz!gKpe0A`
zObH0&l;A&<M;(DAK?>CmERc=yL%xNnnO(<14+llZgmx<aM}TzW_tb8XgbE^^DpYA>
zLkHjA-var8N~OSxG@(k#qT^v|YXeF(N<`?O6Xa}KCHEumXHIODqtis;NEMMsr798Q
z5_yJYk3<uL&Cwj)sZ>(K2A-Q(REahVc!#11mQ3c;7wlh8Lj!wT%PTUo>RaSO2_swP
z3JTgX?hF`C`r`wQTjvs}<s>4%rb>eCFi>a5AsQwFk$KBa?nDs+jul@@V9>K?TbEx|
zz;DBxo25pfW<|w(F02!b-N^_KLJ8=<8LpoSj-m)Wt(ewed~{;tEgESVGH94WG^iUu
z@%tk1*0lDM948}nVc_C>zh+^$$PyPP7AWQY(S-scmZMp99I$9ew57M7q#?PC$q@Di
zEIA+0cBoI5De}?lc#!8qcrp9%F$Zxcho1GHU~oJPZu7!AFyO#o{KlKQqp^JBNAPq;
zW_-N2#d_(({VdAsOEM>G&VFopdOE$2R+%-97zr$qLyX^|Z~9{eNEXfPlSwzR61o4X
z7kKawtT+0&0Lj&^3J}>yyc~{z1f{40mTf2`XE*`v5YHQ6z->2>!k3>d7qKd33a}^r
zqp-|Pr+JNg4jZ?R;soJcii$_b-}XMFV_rVfTCKMK<!E@=^pP-Mm5wcBrTdOK)(c__
zss@f~!-#@ga$}deG*3HwdD*vm+NGa2`6WZ7nME`^Liu9+V=*75R+x<I@hsKk3|P*q
zpR80MWDg*SQR`&3j^GVUX*}ffVaSHx^Sm!BoinQZ6e&aH_G?i(%cnEs_<f$={sQ0A
zy1J@tX8XKR&H6*qzu!3pf5@oS&MLq;%g)&giVm@mIkH6J$!rM)zbY#vZyx64xMsC0
zg%G`v#$z=JIC|`<<j3@9OC>I+W<%ZVOF8zFg({}X5xH14t5NZ^fVQ#L3(PKzJakWp
z0&rZ2RV3~?%avIyJ|Pc58G;?SN==f<Wi;dNow@!WkpY+R*m5B0;*tr%Q$eCSD1540
zMZc(vyL~12!*xA~a}{G)1A(+z9Gnv8`ZORJMH&&aVVn?V5oHSE2i;KMhJ`hn?MbT}
zj?c=!eOc_aWx^UXQ)1pm_zQGOlIz->M|;2G#1v~G1Jqqg$NFo2I-XyPt&Nqbw^Haa
zk8`@kKVzHV?Qrf0N}ji=p>MI4@R6r3vQ=B<Y{HdCb8X(OPcw@aZ;!a;r%p!?d*Ue-
zNQV1Q-dCSlS&0u_MRulvU^aBc0K8!JU6WX^WJ`_PALWk@sk*mFDjX{#IP_7=x#Siq
z6^$*_v7O0bN+g{NJww!T2TP-uKGu97KOKkJO+ZKX_!uYW_L|}130XuGc)!-sD_fw0
zI@q^98Y(Tc^&Y<-5F#KkE!nr8Vqb7>(H?#<&0_71{CZ!TL_?{+b}Gihf`GjG{&>9F
z2j-}6Y!Fs?JkUdvu&EEtRFao)zg`Nte|X8TQS(MiN;lB7yjp|Pa>rmF*&MY<cf8bJ
zs|T>aP+jr>uKiZPK(1!%!#b9OqA&n8b|NK22*feWOfz3DLjye>=%u1Znc5E#z}GuP
zfwgSn1p{NXPaT3}8YdULpsn1sjM)IUf=b;tFx<QpvwTpHE`0W4PJUcm*s^pk=CU8P
z`C*H%r!zPU;!Tx*odV4-n$EZJ^>t#m{S6CcJQ3&^S$LKRijkXpFB}^M@g4pFZ8|aS
z6JsnOBBkuOQ9#vA6FM5aU19`5&494A0vIWq9U_6#nHy9KTnUXfv|GVHUV^<kRO3ye
z^#Y9$Uu<6kZ{7QT)LNE0yGBzN>}%z=t#eCpMNh!&)Vez=1_)<v`}OMM)g>^xLy6ZY
zXGh`>qZXb=vI!5}XlmHTu~HtH|J;sw=CHE3aB||yn-RZN_x(S{-XU6)sLR$owr$;G
z+qP}nwr$(CZQHhOTle7Ie67l?`bSnHq7j{F#2Rbwn0w7{`gT5^6<v9(c+W354=|+N
zs<#2nY%Rp$?|$5g-H|QDsZb`Aa*$Nr%4WtwYh~2-2QS6gIQcm8e!H{ey(d!PEA7R-
z%XH|6rKaT+N64d6H0_bk^Zj}_|3vY1R4@NIyS~d)zH_V7ZJ|qUev(~SsC}D84ZlJt
zHsMSxw>eM+he~PJu^K)sn?1p1xhUZV^Kk%nW)a^Cs+A?a!|3&*=;QiX+^826!LPPG
zS4sl-Bwf;y3TnA$^UxoN2D@W)kYWRzago1vB=kFvM5ueq?K*TVf@Ekdj7iQ*s<<U>
z`Dfqk(9p1>2e)gZxUA3lT0GQ9Y8PnR<Gc@5I1@oKbCyvaK&4U&A&A+=s)L)YZ{L<Q
zRT>Feqp4p7>+T0i9absaI<#8Dc#ws`<N5{r?<=_hy9eqZAppSL6u`fA{Qp}`GW>rk
zDSQ8PB;EhFj&#jq<F>_GxA&I{<IZ|bHb*#hFRNv)!MNk9LuN6_cy7aX>0=xTx2lCi
zE%B+5=Jy+@m{<wPgsWo7l*=V^8A$*EgdYKb;!^(&bAzOlt?wmgN<!Rn$JR+s#gfL6
zx8T@VcBiSS?KtPor&v|oGs^z(V}SQUrtBDn3gkE$Y`L%Sm6t$J+YUFX6R>4su%$vy
z5O5|LJ%MqTTExF(l9#a03!0J1F5)W07*T#0SvK20I){Sfd9?5;o}IR#d&B!Oy;fwR
z1z8s35ke+-m{I32MiALw1|V;bh_anuJoNe>NSK|M>Ch{n?H(}e2BhFF8m-_+z$Y)A
za5XFVfZN@{-rmQj=S~1WP`~r;BMrQJQD8aeTY^0c=zXBc47}_31dZ1sp**rMu_;6<
z7H8@$aEqY0DPMB89c}#JM$7T@^o8!s?0A`-N%q(3*@&b2$@^M{znkHz0yDIf1+W8T
zm%W?S2SG^UZM%4@1Zp6QwWm<&yjn&y+RdyFFR6&_^I~G-&g^V-0h8Ig`c5t4ViRUJ
zQh`5aUMj+CwuO`w0#(vF-ru{dp>Z1Bx1N57e$?PSHU!9p4$_e~5xFoT1)^S$gH@SD
zY!?+38<V5<VlT0St;eM&!$>wjem)fw7SL?b%X|kI4EWmFQ>qq_DA=`7R_;7d7S~)m
zFa7=v<|ovzk@u}<<YXCUTti%Jc3Jq=)I?|(NTL@L$P-IAIKc61zkSu&K<Uv5VKcUk
z&m*Om#YJ?(i#Oi?EtO5m`5g3bQerr*;!KbNnuX&2<lWzSLXQa<rHe_a@;jzTIE=16
zfU)g^<;+{T%J-PvX+X1%!0nccbq57rK$sB%=7hg^`52tE^=P3-gDvv#uN~X@VA%Ka
zKt@ZDz?`^h2YwhA`qt$2z6@sV+V#}X%NY=6(cqO1U4Wy2(aI35{uv>9-B$A!c?XXd
z>7V7i1Bsd~+7*dc5k@lc0LUm)9gISyRzQ~XT?r?9vjThyu=%L{Cjodg+E0@pG8h34
z5Aq6T`YP>2{736_!@;97Wdnwj*XfY!+j9E20a^MsqRWg0V&ziM==t3jsIGUetdFGv
zg&XttDQD}`^gsj5hV%qY=uI0m9Y8c=h#>02y@<uhaclEJ!Z=en!UqI1Xy#8K?*lNF
zixR5<_LIT80DGfw^vzJEm}9|^J%BcQW|rSV!Xu3mva|LcM;WiDFAsHM#%csq9iWDQ
znF9K*@*LY3iC>_@A<%myV|~3oUgEdIgpGZE{ak>Neh5`$(dpuP{f3}~LnpMRP#zMN
zk&fc2`1FVJ^gtK+C&hr%4)byvCs@k1rI&^#ORc!dSoK`ptmTkuQR+ERh?U{=A#$Ry
zLu@a#OYgaaa3B~!fc-7V`WravncHw^e>QF`=p9B4YTC(ZE0Av7%kzFkU2E>aXo)(~
zg&HFDqG#wvNdq@#S4ioFltDC@)K8VHdeJ7V8B!WAn)-SvrH!xwHnRG|ovVX`02?T9
z{@9NzQ#qUdL#Ah16|fN=J66v|q9mk1ZYQMJ45xs&BWIBG$9CxsAnnUEGXU<UGa$}f
zxtK%7I1S!E4QkgZ<$2HPKsPH~4ZwI85l)9;m(P!@*jSnfN5YNHm!z3wJMQZmKdB>T
z!2r{{PZ}6zqTB9k7tZPb3!9e?y8i|T+NJlFL}&B7IxJ=I-}@YiS!{1t@Iq$;`?|c}
zVx;|t#f!?~>~}_auNA=5zS>dL?x}jPoZ-z6=XZHIGzC~=`Pv0#mgkk149n;UR5%h+
z1CqQUk=W)FigPjbEu4Pnhx2M$H`G&1W8_0PvwlOCEk?fACx7qX-+`W~$Mg^l>hF$b
zzoF6ZG`YE*rJVaQgpCzIvSp_Ys)O(qN=c4?I3C*{q*0lGS&!nE_hQ!z7RWFlZ=gI5
z3`#Ag2W6q7-Ht-a4_)Nq?U*L0q&z}j>T5Q<-2c1s7oH&^(2-bN!|WZk4k(Qp#cP7>
z&a7IT@B4e_1JWL&8ZigfhEr2J)e6x<fe=l-fR9FOO>A^Q{&!^l*UjBgJL10h1?n#Q
zHTJKx<B58(3KF}YV!GTBc8XB8nSd<6A2IXfOD>14(f!>zO4ND%lb2W6!&}wa+=tse
zL4lkJHECUc1pxku26qIP5s>0j%|`b$2H5pZ6huh<70JA&g#J=aIW8%vGZbwh4DvnG
zC{Z(JTUXnd_$Ma0WXgfrvC`9$!R4zWd)LX?Ttmbp(mw46sUzW31lKJ2JYfGI3s7{w
z3x{B^a04UlFNw;io!xB4c%DeGzKgtMb<{7oP;s?3;yr!7AU6=ooe~IzeZ&E14)$Ef
z=Fqy~@6q=W^7qX|hQN=hT9Dh2(^1<K#0@UGnC37SL|6i`Npj)Sbb}~}a^qtL(=T6X
zU1F+mCAQS<UO*WaSXowfH&ZO(G@hV7@7LV|CY7{H^mS+x2S^AeYit;XZw#6dL<o{;
zDF?3}ND^b+ba))s_ceI<Q1(Mpa1&QTsj4CjYIQhUAi*`sy4spVZ;Bz}7+PFVV5$F*
zJkoJ%QhSs5P-Bb~yftlotkB~`$cuHPvy<lutUr9V9RTi;4GV(D(ub%an^zZX!sB`e
z;9r$xys)#M&j<VC_RDb^IfmpTG=x62al8tZkMVUP3+(vetZl(4U&OU<8mAq)^US>4
zO;_iaCc1@{xgS?8Kt8TLD9*htLrnMi53u=~T}!sZaQRJ?IMlXvLNxu!EW?5`SCV51
z&ya(qRxOJ85ORzyN2^+6l!kiGtDeAe>0K(AHN2u0>1UmFcUDO~sVE#Fr>>m%Myspp
zL4p*`yz=4UhIf}M#{qveOWC#x2Qv(MWIT3Z2M{fd2^K1lRjnI}xWOk_(S;9SX#)1F
z+H)JcJQ!FVo<z1^&;BM}51>Tv`POQBD@jYNr02!fti-J`<x$J3LFvsDPoRq9wWH>%
z_QVRV6fv)C*AiMGN|HDB8%Y^G%C0x_$CUL_=hFKGP1(iBs!hF9JbZBx6jmbsWO$6f
z$*CSt2|FWD?o#=i>^!)Q&nxjF6M&=V+%GEnX@}MFd-J|NInJWvxH1(V62d~hvL?ET
z{#pcSJ4*4A<@ZDdD&h84)cG;;IM<Kb`t|o7g7>&DWyJN~W_XDVTFPX9s4N=po1(Y~
zaiYMyj{+~G(c8n(<+04PHZ0FPnIU}aL5K|k4fr6`@v7A2wUXr{i`+n`lpHqcb)_mB
zU3zt>7DdVrg>5pp(}<4~L_4@tFJ-qg5~hThwbMhvGFe(AQQpy223MLJhaN+Q3Hh2t
z1m0i2JSb(7MS+=FGod_Wvr#BT&vvQObb&gF-)K-`RZ$<m#5O9C@*Rm$^3mc>jmh$Q
zBBhd;rAw&=r;L?Hk9#sE7)BCJKBECh&Xpy=hz&7o#v0Rx9Md`_51JVBEws^V!!K#)
zE^vQj22XPoN{uIssCHtM12PPL;F389?&U7MOsLX^r%Fz|T4$JZVzeypin;vr%x^R&
z&R&T$*TtFAfD?7%7}prKh^#vTNNL}BKlzhj|ICwUlg!1C9$SDYO*uM!`=b&#1fj!?
zR%;porwbJ5Q{*5dus1SyjdMe~%0uLG^w)qFLYX@CA$2YYl1~fv%lG?AcGWMc)34S6
zwIjEnhkVz_i22T+)pNrxHB7<?M}Ijo*|%bZ^jd_-4Wgmc8lhu?y|)~s*$(mV<8rx$
zNt#*B$+)C4c%h_;9bs`9IUxqT6NM=wh{>Y(oJ~U7<D<9hg(H43O%*QBLK4$Nca5>y
z=o8&qZ6<zkuCgtKQc%iWr&2U&SyiJsSzYdPq#8}BY}Cg6LEdd+R0r4F)8D|xs200<
ziu)z_6GMRt;bk3BC`^hIY2Fzy9=uh(Nr`M*$9530^PWk{-P_8v_V8&xIvk}X?oLm7
z8*McDv(`p7RyW~deU-rw28cxisH>*m>_*fz!)hLFX3)q1d{^3b5^XDlby0p3Q5tvM
z6aBCcegGiDq0*(;OIoK}GL1AD(vq$-W=3RCOt1V)Sc30Im4FUp@IJA@tXuM2RQRKc
zG^)5g9b1iAnxOqY&g5U!DEf!-?r;ZJmYb7s-j8XNrxE!nvhx?&arMa7><x|WuXf;V
zh_U1h0cD^Ca*HilY#+2&4q-_#1eg7B7QTs+dm*RxYyR}l^iT}lTizV>S^xHNnqpYF
zPX<$;T9T|sMh3*Kx!vp>@qGk)@B(*bcqnq)Y`?H^pBis5b&$2H$ml(sQ6rV>J1}A(
zI$3mFq*CQby}#{;Rm>zJKq{i#383kTgiLZ^hd{ml)RL$xmM4+Y$*Wh+z`5Q09XAoL
zj^qm)^3>-AQ8ta(;<y7D&p&!M4Sw~`RNocp464Iy<j!6eD3|=v^8DU|WjM7R(*rFV
z6hpB&A3lTNCtj2_6PiRY`h0yfV+vR1znKgN=&*0RPHs@IFCJ$?BqMK08naukR1T6?
zQw3?bkPk*^q$bmj`J^;0xS0^HO$Y^5XC&c0)_WvaFe-kkdQ)B`e8x_-N*YW1j;!1{
zEWOsUPYW4oI=1W#%Mm6e)4_NFTjnJc(~CZHPk{rz2=298zHxie4*@K>7LKhB=7g#*
zm3zM5pR91V$E~}k0!;et3_0AWn=Ma84SbnSO1<`HwP*h9VX%p7cu)3%dl;Er`|UmH
zVMRtGst};YVQ8)Hc;4ECUF$|7zCK&fJdSQ_4_ox=(eKcn(O1(nlgp3e(3c?9o8E_d
z-J1_?ef2ya-TesosxT+bmel7x639L!Psl-JZVGO4;zh7S9R<H=c#}A^w7(9C@ROv^
zV0j(y6V;~2@|WZna;KfDld2fSe4?ejikg{F8NO&&r<6U~6*5*Y54<f)p6QBs9Y3fS
zx`zG^KP{N(j?w+)uB>8s8&zp=Pn}OhXdHMI{aOP<;@2S}5~`*IEL)gOOk{~-x=fv9
zEEaKfHkdV3%dOd|K5MOhNv#KZyemgZrBghypu1B%YvucW((KCa_Jf)G<=}mr22jH(
zBT`~yV`n%NtSu+?WocbSC%5e%^AHpVZbp}lw1{Ejqqb7uOt-jM_uI{eB<u`fA>oz7
zJNi<>rKgT!AWY2GNy9MB)}7;)@y=1fqik9Y()i7~Rz9Fu7pN|G5=WW+jz0Vp4lFC)
z?$Coc9M=ywjg{owejnM(`Ay*6qNbQ(1E;QK2NRmHUHKGr62<W9;VPH`hfaf3n6%9?
zmY0V?NZZC8NM+G!aq0k6A_$(=(t4gumwTyRFo<?^VN|e{4B15G5ZF9&gsK2i0Ou`&
z&qjM$Cgu&t{c^Jsdjzk$1TP=RuP%2h52-vqyFpC(3rq~I*?<WY>x)-+CdAHj-e(F#
z9*kSED1DQNP15*SKxfc$Pl2ztSZva7s$GU9u4hxelE0qHQc^ficEtB`7p#A6RMa>-
z7j3M1M9YfUVnlnY+A?Q!YpSq%0#+-7q_%3`xH>m2Su|^67w)WJOG=utVFMJ4Rv9yI
z0#@liHQUUVlXDBPfqUwza&*hKFq%1cbY*Uqw|06<2lGVB%CIUIEu8<>$Tn%A%e%C=
zid9&B<}WP5+RQI!y?pX3eSUi?0smt8{}pXoP>uQQHy5;;$y{9k3#wh6Z<+l^H(Yed
z?^|Pzj@`X$OY!Vl#m$fU$5z=9sH(*j?c<OSm@VbRDBtN^P|D;%rMHa9U9FIKKZE+Z
zYUAQL*BCNi`^+o^J^~90U9f~<J~wGvsa;Xgxw@1QS?ij&bkjG-RasbG<-fuHt|e8}
zT<X+Zl5dgiF(c<GG60}TDb-x_vS}%SWiHyfw9L89-?If`+k)LWceQGX)dkmP>7mHK
zbh8ZV-CfP{=U>r`+*D*~QMh8e>Rgo1&s;EfT}~}{yS&jAGhnoFK`mOvK4<A6lT=v|
zu$=KNTd;G^iV5AsA=m6$0SKkg?Ax*f))lf@;q+;N*IC}QY}>P8Zr1H9ga7>A<=@|{
zq+qr=U~Edx$l8b;_;`#rp6ym!u1~n}N{B;4YDIK%3w}B<U)$cBPLgaN+V(BxMTYdY
z*lkMdSY=#mK-X@+S9Jc|RNA`Fev<g-vdfe6<o9&CsSGvai&2U3TXei<{H8e4I)+%-
zj<jDz+%$#-{zG&pQKM6hQ8aS)wPTd6Ix%MVU=5@TMIDg~EwORe9wyachxRJ^@?KDF
zNdMzchR*A_^?+zChWn#s!A>0kD2Y(RB#7kQKD}s*hD{`a+N@)#c*2mI6?xLsRN#Lo
z*O=gO*^y?Pxp5tsXRc-G0Y!5()R4yP$=phvTTSfiI2dM0Rz_DS^o;;s#dmB5n_Biz
zAmP!J%0&yq=hh*Mo^=*XLnY1ZyP9bM)+~XLJw(d1hGgwHlsA;hvT8^+l>qgPSRonm
z^}Lj6Lh=w)ribpcK6}sTu8c~sJjhf6$k%S9X1+Bb0Nll0=q^cbo)}a%6LhR*0NwL0
z?B$KN{qmK;;qnta$vc9K`4Iojh(T#erFsw%XQKAn_4kG{<L~q2Lw}*R0$(_Mq+V>e
zN;<V2L(37ctob5OA{Pv;-dldXb<tQn^1jTmcUuJQMBcyb7nzoHo=UnnHolY7?nq@@
z;v0BjgsEfk)`9V&eV3bI%LyCp2Q=L;6b=LhVu!BLr2e^0CxBtO-4}7EGc69Hkgzx2
z7XJeST?p4XUw?F<m)>RQiN6>wB(j=K$V@~@=NsG&ebI47UjJO$Ja?Yu4iL-J9*7=g
zLNd5#@lXBG9^_9|QyeIIbd;Y*Rwr2|rf&^x=w}P&*TapEqyZ^8wCY&$lnnXs?mvW#
z+5B+P5^T<RT;JSpJslnsS`ms117>|rOwScP`*$_*B}Ebv7PNlFm}&qDB%rDBlGe+{
ze3n|ie7{PXVU|yME#;A~yyC1Z)CxA*XL$jV(y-_ojU@a?h^RIu`n(gRPhrMagPlH5
zBFGbK&fu(`QG<P>T;s2-MK})o9U0?H<HUHu#&?p3%G*vu0V#X-_bZ>owu0+|c|R<^
zi=o+RTylFoWp}$v=$>+jDRCS+_iXt&e*&cEWZ1TiLIW~@m*!kUHlU|#Z)0%0kB}wF
zd>_)sbah;pEMT=@2lc>Ap`40OHj<<DL4eH93t%B;<d#qD_7i2bK<yq9rd0tNxTbgj
zx(;|dJ#J^O1?E6e>=KeRMl<3|cGp>f=6?@BP^3ieW7cQ}Mv%|6(~Va*Irp!mZLbzJ
zsbEmEtJi2>Bwec9(~Zrr5>TbVq2KBC2Ed;ZJ_t6Rp46lFN4kXHW*oxr(2lt~a^2}c
zLR?((W(`sUT&LexQd%e-UN3x8K#=F)k5FiP{pOD|HrJ`rRg#$Lyt+sf!%x0;1g8xF
zY`t490*&GrKvOY+499x7{mJbHdvC--BBmLCa*fvpsjmj_%s+M<nVX;ua*`uOWbf!6
zF*Nq4Pn9Bt<b@j>JyBxQ+4&0M^1V|QnD*^pYaZ7=Kb{i}Ow4P`Q5)5cC&N%vV5;u8
zedc2mJx)De>n*r5c<-_ROp!^y1ncn8j%^qjfF8d}op>(~+7!R;Z`Pjw{-I-RNl)O=
z(lGww+wJ+~jOCbA*M2h)<R!Lf`=obW{J^tWj*v`ECC?Iy%Ili)dWT<kH}v+I^BEax
z{HnHW)1OE0Ss`Hfhp1MwwfDdM3^T>|POP=2FN<9cw0h0$dP;H|N-{F?5aQzC<Kw`3
zjrEg@;^AEa?bXd#0yViLy`_3D<S~4RA|Mu9#1m#fewVmE+l*2j#6$$-lBIc!^~TrZ
z;2U#u+q;dT8ngc9eM~QaOsd(TtE-uYc>jA>5|rbASG>P=`FbUw@ol6kv3oPsg6**L
z*FzC9tlF8AV1y8QnwBym(P)4tu88J*@ElO5{msZo1kr85$gqQLcv5uF>qY3nm)?MS
zwCxP4w=?NW#InXSrMaqDg~Wxm;AUk!2S6?Api^Gk3W`8v=(Fchz_BT{@8iCkb`5<`
z?V;uMgd;w<hV~<qqD}=9@U4a7is%3&t-eBf#)cAE0?9S1_xGK!NdJ(1e^<yhsKo#D
zcdKi0uhoY9rw&4AaXr>)U8Bodhp$?Q-uj$XAGaRf3RgZXZX^Ll^0tBH_wPHNL_``f
zrK=`cdHhh~1exyLnAjukU{0)zs1e2>MyZ(o3u^V}7e1C6Zq_8(jS|jkYiwMt&olKw
zV+RCn+n^A7?qa7NH&#X*E6cid+}QO%=C#|Tui3TR5B~;ASmcYbDNn{7yVI5#0`J73
zjX;RwBZh-&ok9$yfl*`x4dE8SMCk5vRPi)@nx#sviM~lLOPN036Y2J4!caS(e}Who
z{l!?&zxpfXjW_Y3qr;tCN9s*Fz|npK+C2VVZqLJfbJ8QfKGYTq83YIP=>pf-5h#6B
zTj<|u=a0P60Y#>0-$wdN2s(y>T;u#<0<a@SdZc>WR%6(}fdz^-dcyIZ-rxW7mei;9
zfef_db1*kIkXI|uv$KKxS(n0t%e_vob;V?3=PdXM-0E(2)Dkgu{nXy5Xd^v(*}rm$
zPo3rxNq(e`zzty=L}mjWkaHxiHM$442Zb%hx1odh`VC_90Y-aIw%aW$OGK*rCKnFh
z<^{RT+UDiC9%4n7(IaDQ3mPPAW~SG_zZ($Hv%3dptUPI!3ju&x+Kbc{$N)*(kIfja
z(kaC0*4LYn*}y_?6G+Z@A!2>;n=M@km@%B^xv(d309P9pp^stw0UZqbhA?=$&tHgx
z*zm>)!itJ?7XtvtQmRoF3jJUVgAJHZlsON=1r;UyxfKwenG-;qud#~Oj8qFA39M58
zv{e`o0kRJf54&+Vpg+hX0`QO0;b6V8GP4ESuNx9o^f)AxMJFw9uDfe4qtYd0KA!^h
zm(@Sx*m?%fqeB~`{C-H&ECxw{6*fPHJQOoJF#CJ1EQ%Pua6+A&EZzv5W@~xxZWxtT
z&jO4Vdo*7!g|STtQ`?q3NGhUp)b2&@i*8xQ{h@j-wOO3+)1U+96<uA}xqn_2y%u_m
zN30lA(B%ilJ4C%WAV(R^f=Yrx?>K+$3vD@P?ZVL^g_<w_VmH#15OQONDCWRA+=WL1
znE8dRJH+N(=bbjLxldC4po~$IRR5A%LL*C?EKOluC>r<h2<73YENai!dtg6jmiW-<
zS_<PDJP4Qs=V9`GJCY(6KKBArR5VbCX<%KPo*p?H6H>Q~Xv9)S*k3PmDCEMqWA>~Q
z8EgUXkI!LOp~fcn(!^-EvAl#3XsiTMkYL7BW!zM7i-R;Kz<^fbIc330+K$Uf`Aczq
zt~wy8;7e#F8(iGf%KJ)X?BsLYA5{&LX$YQcMm%ydMu;Dz+b)gM##J5>y4SoG`a`${
z^^!N}h(>$FWBl47>j~kmJgINL<MHrg$YIPL$tE|PbPZG?eP!x#gyfUO%`_TE3F^s3
zOr4+|=&D1!jITB5IMMH<hnZdZ%Es#uFM+#~^QKDvI>uLDiBjiJLHQTDuG0~H5};y$
zKVZ*#ymIOlA(HrR+H?El(&Rzx5)#H_;2#bM&p*SN0X!&4d~4hOhbpbpyNU2(bx@Lz
z*(*r8BB@b=@5B_0C5}s=J*PKCtg?^1lB$M+M#)Dof-Sv&x>4gHkZT8;i6BU5GB_aC
zR@yB8{yQ%9Ou>&*7%J^>+#lE`#Xe7rOFHHOYeZ&*j>h;%iz(~1IzCvhQ>qg-1>aSB
z-_c7?G^tK0cOH@O5_P@|PTgx<kwWx-<39I+;X7P6{LVBLDRhR$e(*`d`-9giIK8t<
zgwhBRd0AhaSSMtQsO_(#j!lvgWe72ZXiTZe)WE4&{wD*aTnnwT1u~^kqb>mq6GJ?{
z@Jm&B;Yv$aOA&9Q@=ZE(P*SOD5y^i9gqk)yti)JUA$s+Uo5k@GDXUr+^L#-8#x2MA
zR!RQH3}sc{InZIh8?6pZ9yAg#1>x1U&6>s1ub4TT2tw8Tz8lW_B|+8XJ$K<5!xW}g
zT)BE+mRvlExK($kefp4OAU_UYs?BuMYgrJVLa9--u$t>Cg;A!;wSj4kDSNdIN!UL8
zu^%@C(fNWS4WHu}4<7>wEzwn6gQyI;{HoD9UtA{U?;yorONRkXSB|V=9(q(&V)k1%
zrQMbZr`C#knmLWdtx1X=8zFrrvgw7T&G(M8({nmp0iuhqJEvYYrqP}(vi3OOSSqo4
z72v!+nl}sOMRp?ze6*?p;#T*gkX$wyeeFb(9#_`e;89IiC{sOY;==_htaA2=^+JTI
zllKWF6jp-pS_%-BwA$E`dKOAo8x)1<7$RHpvvn#)H!-kn?X=n=B6b4seE=KUVTX9F
z4R`dcGQm_Zp+*+<k1S*NBI=DpT;-L45G6(1?m!6GxdlIDY~93EfuWwaDkzs`%d@80
zo;f35`RlwCDQ*ig!nR&kB10@HTXjOBngzCsc~jw4DFJ_1GI>}tt~8?GNu<^GESrP%
z$MqoFqK0lSKkOdU1$PBa2Bob?4PBR8-+aVL0Bu@AFj{<p(T_wzS)X2F9a&~vVl`ax
zT5oYz<UCyYo8*jp6*$82{6&yg+Xm<#*Z5-TD~C-|4jm?m>^b8YpyYM^<5}Efarr+d
z%VJz$i9o41L$(#;Jb8*FK*^nL`tA_(f2HZcvp#7Fo#L9ny_ey1`=vADAefbV-TNeo
z*4=mG2y3?W4T?{YdxwI2s~Y5K0T%bR>Yb|H%69V>7zvl_)&`w%$Pz3>%U=+0ui)GV
zrMAP)#B59!@Ny`-uHr;5XA)f5IC)n3mhZ%ln(FenzfZrml-9_2%G?%DleN4`&<nCM
z5p(H&WN51hd<?t85GdfmDE+3p0$v0@mMKbqV^=rP>F9iKDs)!scCP;A4Jb*4r<S@l
zl9+LwBI)8Ji`e6YR4^JJz^3=#boR5f*fSa$LN+q5&&6>JVUS$a^Ns|S1r{oe5;sb4
zob`qd&h!I$;kz12M1IjmLJa3Hj)0k@oxXkHkSWCQtt8|hR}u^ezBf8qmaiHNBfb4*
z=kr#l_NB$-;<X&Xe|dA|#nQEJg_YN3(+^acROMTYlgL?B|6ZfE5tws)v%kcFI~^Gh
zb|!f)Bytxb>M>iAIAnF*X|wm*be%G}6@UFXuPB9uEqD?vV&Mv%^~#Wr0_dteDc_!y
z$h9+Zx^uzuM0{M|jOvES;JGG1@j_%orQ!}g?|RWtKif8^faBn7XWE#KlHj^u4wPkU
z$0XeK7Ujm|0z7fr7df#HS(hh-BgM)ObPj~NmtNT!i_@g!epc!p+KvUj6y>hTTXh??
zXey6mJ@Eq?EqK$<<?RrAYDU|>kuAIALu=~T)9%4W+&u@*c0H$+<|5-_zUe=2{q|PT
z6P_93rNnhipr>oWBvSr!J_z5I6`y>#yWy=I+uXK6#L8MQ*(AKoqs*d(q9P(rB!@X-
zju!~Lsqj(2ZIE0yM$IFNFnZ@}{{t5F#P{FlLiAcFbPIt104%`(0Pz09T!@W{v-$t-
zu}M+6liQ+4_|EM+T=tQuLRyj}5Ev^~WUNujFXtnkXBM%r#IlRU-GD2}eC@lVrHPLm
zB*0JH{^&V#GvhL#f!Cy;AK45yIn8%+babBQxyBh{KBA{=&y*%=XZ=K%!+n-YvoHca
zmx44RQpa$bn&Hs{As5z65btR81}xFE2d*Xk!zQ$^)Yt&ZnhDrnLrW;Pn%^9>=(y;R
zQEyL14E_`UI2a%wf7u;Rq(BjtVy{8co3asE90A1R1{sJPjBb@U=pUb=&WsbRmUPcx
z=3*glLs-pZsLNT9U`OCEJe5s#O<`2ELOHJ<)WSG#I>AcZN<%iTO^Z0oeU~I(L5+^X
ztJQ|UIo^9+TAY4&+FCiiZv5Lnv~VynEB@z<7P@g1kD4tsKUW?uiy}EM-DDH2dylP(
zc!Y;;1__vE^5=cy>BrrF&4m4%wKE)i3EP}Qr}-flJ!ht9>xmNP^q^XBG_uay5lyPb
zFD+!x`qjThf5IUaitK|YZQbwWJ*a3k-oJe)g)D)oJyS%XNpi7eSr)j{FB_uFmtn~p
zcj<FM`3}{KntD|8TZTu4y{8B6sBVbdTIi3Ac*~NxFUamr0D8&HSEYrDyO1sT_xl%X
z?(}S5Sdc|mW%-A;j+>qfv_WoU)z<l{jW*2Kd7ugBSu~jy8q6mJ+wASrzv0NZKRmp`
zv^55bWf8{BTe^ySYvHskfh}<7-`67O!7U_g%h5cgn_a1wKI3b4?;fo|x}ixE)HrPl
zwXH;TSQOFY$W6Xm(k&dX?FL$|^7mgwv*%8a!RV6ggKI43_LwwRTrTvTnXzID-V9yc
zw!pr2&KJ4`&cAYycA-kY@j%=%Wm(Ja(zpt=qbNTRhh2kWa9}R7X4n|Fl12H8?^oad
z!)4|NB4HE-2mtW#@528NmH%H=|Ic6dznSZ761b8I`7r>Td_z7`Ng@luu)T+jO!YOu
z(E|Pm9lJpMp&U9|+w*vE*_2Rwar{6x*8l9e_thWZ#`3qLwmw?Zq9zGb9QG#yfDZU>
zH`dwldLb0=A!W`&|ND-V5|j-8qB&zwelC=F=EQ{vb86qJs{9y&(?cs~(@8;_XRXaE
zOHYxj|2nGxr-J{{2o?mmuZciq!9_;wsG5dIwk!Lzn)^JzmJ>lR-eILm=6Ic<!VVdh
z+a>y9Oe}7+BP(afg%Q&EXaUVESfhYiC+qISC$U{ZQr{eY=2RvPcouI@3wI_pJQ}+V
zR%>|dT(drYq<v-ylL9E$DncWpy~pt-9wUB7jHi9IsSR1t04rxwcV<*_J5j=GwY<`Z
zu}6uN5z(!e<)#tSbbo5Ye^!G(w>TttvNC7f&}FsJ6*}sna{yFip0(I3ceP>OD(L`|
z^K_R`W9;3OQk1Wx5_^YLk&#)=%%kTjjD9OxZ?N4|=!+|^4=<2m+Y4rmEVOELru4}+
z`@Z_i_YD6(y4xA_HU$I#04K?R?r!Eb21fsTce~NFaXJ)5`kAdukKe>`*O>nsHK8;4
zkhre)db@hqvl%6%P?Uivttw6_QGFx%(N|_h%<td7POetbc@J2m;5N6!vorTBew)KQ
z56KyK7#1v7im9lx=3PWl8Dd)s(-Wt`j-y)uFY%212a_|)Y>8Z=>zo>5UaTO#Fpk<}
zLQS+wUwpmuFgS#w$Q(~GHNV=Jblk2W6~h`WaK;tA;8)a%c?h07nvq#9qdrN-Bhnj>
ze)twLifLF#xKIPf9tSD()}1wF6q+dnF;ED_0~5>u=I|ki9u!?r5v!|{8^0SH4$a7d
zS*{=J#3I$+F82ZA89A7#fNiFco#*D|_V%_D@jbp&fK8J0-<geC`%;c+6Tq-n%xD`o
z@jy1?vrnc1o=e%UCbpzI`vy)C;M?%JW&Os@>pHt+*Ai)TVTpA>K3k3fQH}MUWLbOr
zk<h)*^AGSlXE#=#7hkWh)!=*UWOQZ+6g0)#NpP<`PapeVcAV{KaK7BW9_~726TE_K
zYYVlRY*Y3l5CMqOcu`ELCWp*|J!}ZxC;F2l1f)=Dhrr(YFs&7=mlGO1Q$u~6`g%P=
zDTh!ynj&IqQCEpPdES7CzcFHv`>U7*erO1fb`KV;T;dn`r!L9#2wigng>~`Y@$ckO
z{b3z<MIO<Q<NTY66!036vU|+}8_b+iMm4YiH>6G~J0+A&7)sPZA8-#cEB6sH5k*X6
zmZy_(Ik4(gdWS{ZRJv#BcSAKaB=}t7Ed=!F+Vnz${VHa8WwobRt)@mhi@0-25tV;K
zf#Ir3k3NP=y0~qAvOWge0iAYa7^p3R@#s5;>N|OrN$Ej?y&i$X&AkBEO9ibVDnoci
zm{4;JuGOX0P^}f`R&#`eVjTYOyKF)|ks(TQjCy}tTaUVM+>kB(xKgC2j5-Z0DOF&D
z*x_Ed!`3@*siq&C{mfQqCyoit5C>%Gi!J{?uKoir&_8G|&1;`x*9y>}il$q3)(Y02
zQN@~m6l)x1XPRQ?US^_@>cc5H3pIETF|j~nvnpASjm8GiEY<6%xp|{z;f-<{MAog>
z+GusvmtzIP4hB`95k1zMT}EE$6NsR0^<Gx48)2y^4-xm1Wx_2PO0{W^I`5UVN~IfQ
zrkXGbsZi`hiO)ZS5d@RXGeM|(Nq`3RS|N&3tkfHQf;A9ugioSGlk6ejr%IZQJjaav
zSlUs)_HQd^+hFAhaMFei>w;~mckP*n=P~uKBJtTX66Od3`ug?YwqW<&ZM%Si6^uOH
z)TeuZS~%p9Kw5`L(z-bKxbpJ$eMHNOyTT9M@#^Tf9EYfCtJu`;ZujASoejNzUNcGa
z;OYJ_V%UtM^1i6?h=Oiocot9Fv78JR>$&4Fc}DKnnlIF&(|=m6TT7t>og<s*DX!E(
zXnFV*9wgiECTjIEUPg}G=I^K-abK@|US^7(tmyjKEQh$3%9pphOLj2poTwDQ3s5-9
zsv~uoMooc=;`qeDygz-qbSa}UYzGIUQ2q1tL+}_>^~e@Q#bw8&B|MQleq)g|dxx|t
z9jCqTGLTUJyx*M61s%-1Ti)NEWkD;TMrCb_(VSCGP}`31?}+5knkC@sVfz5jwz07;
zi<H79f&dBI^Pd8un6oFK`tRf1M+#yz9UtKLK^g9k3|e2x?T<fFhFr@sg;GR%w<kh5
zOl;wdbpn=muGOgt#d(OT$q+^X&I{|U#&gp`bx>M9E^%#?Gk8b_C>SgtpbJvgJ&EkZ
z3AwIOnj$QuxIGQ(O=SRO!K}i73kb)@dC<!Zf5-x`ZhBPQ-lHF)LB2!lp*_(!NUMWo
zke{YOw?p@{NGWk6im@Xac?6;qGTxB14=q3lG$GBIj5jfKq3fezR#lhSqBb5dXM!t>
zis0a|ukW+(+XJMwA48_j99{z|;vB?B7Rl0>^Nq;sQiD?|&8t)K6$zus9nfw}0Y*6^
zFvx0<!U_24+Jhnvc&LJsR{k0O)oai(g8M@TS5J5%TLKc_AJcA8NFl4naCt_fKq{+C
z5pU4HTdd?C9N`X@M3jw=F7Ar{+|c2bj4o4q{6lY(<m(~EKNQtO^QuQZ4tL1riu}t^
z>_>lqjT)?{*)le&na3iFQQcPD@#9&!A{TfX&|%D@QwA-k7USPw31Vq7%9;N=SM@p<
z`HbBnYI=O2hB5huYyT~NyvNNZ0rz-BW)A=dk4n1?^fo>`?qN(DO)ViDs+vn-CGd_6
z?+_0hETjtV(}o{KH{6kbTf~4eOlzitD}70-i(v+tM+3<|)&<u_d+B3)VZ-_-(*jq~
z`LG-c_92HID-8L7cs^Y`${dc1A`q-=Id)ms&a`89`o`01GD2m9r1~^-tEDC-K}Fyb
zrSWfi0*wC5s#|9#YdfyBer-d52M+czUh6MbvpjIR*;CL5lJC5rCY@ONnEh~VVbi3D
z8SXCR4Hat!XA9zps;!n)hYfDp7HHYGNMaWp^W3cM)y1_bR~)XGN%PBafDo@nrGJuK
zCpYeC?-YObEnguDe9#*=<D%~C^tk5+Q<08}MOxKjZPyDo)U_(drqzl0+Pphnh#Ym*
z`!8fiI&Q<E+^{%Aoi5(8zrF;}CPU60Gy!+l<Bbs>`!Ttm`o}9nik*!zZ?Hkp?RW45
z$_i9Q4fe?U{?myJ^l8Y{7}+o6u?Af~7RPJL!=a1nMz;I+F?o^i3pV`2szmRT`Y0g{
z&_j;;iB_y^JSz~Td9Px#7sOrk?xVti)?lLt5)mQ!j#fAK-~X}6gb+;#!Gr+-FyjBu
z209Bflm8$44{VEn2D(=-U(mIv>CFgit;9JQErJ>MNc}}%8HRORER1B~kxceP!Ufqz
zk>9_GcM3!#Q({@IOBP4)(K0<*cf~oYyKozS#vZO|A?e7n*Kb_!5_VcWk8gq#)R@q6
za&i*aB)-U=*f}zvB(jUakIgwr?1%*=ck7c$pil831QS;+&Kt;0cr(O!r6AbGr5_M0
zre-pMs#)M5JkaMRSbF{_Oiyr|B*NtdQ$P+<{JCB=Vv-#UcYk=X##$UVIwn0vCa4`J
zC&G&nzjmbbuK>u~kx)Dg3I;JOBO5D9Gb^&Di#dzPKMkXh6Lgy$Qr{;Fc8p*<@J{{d
zTIuZQ;0O<av*6?jPntp_YDwk<NA~4G-LJ{X@eBROIr$sSt-4P`*OB$`uK(D4h-qT+
z5)>@z`yes-O;2k_V&JT?T~xsit-D^;;6S~;9Bj`EJs6(QR@BsX)Rgoa3(-sM70>78
z`siJqr)AT%w7Vg}aZ(_L=5U?_+4XX^*7RvdR`#b6ojD|?C>hyK5V>(oh}UFem0NOX
zO8gy=S1N1pI9nQ<3*VJk?Sqg=PW-PuI4?L;0UZ2gps@{G4GScK70#iM1M!Ox;BUG#
z{KSv%GJ!ZKIcTwN+&FE6C+wrJy!CP1WbmF?*UfAV0UpJm2|(jk>&eqIcc(l7e%i1X
z{>pGu+-4zN><`nAk@MH<3U;$r-Jh7$X_4XJH0$XMdhkgtlT0dCH`^ClI5nW)D5o*q
zH*QWkiFz>h+^3d#i+4UkhK$DZM7e43$9{E?AL?Yj>7Byr@<3JmG3W#~;Ys#B1hW{{
z_xl2$EnBt-bsBXWbzF6>dRK#+fla&0B&0j=dZyr%!OOwRfy<#ueOO*r2`jlxRWQ<h
zKjc=dDIi_6`$qpX&~EB|6F@p>cMY)ry7m9J=M<<zA|at$HJU?rC{h*}8CZoXU^+Hr
zP^#C1viQ{__G7EsnEapN(63kQo@KyXfZ5VzRSh_DcWwct(04q;flXNbUYF+8fby@O
zj<`S}g#4ZLdjme|Jm@Sa0vT235PBR~IWb~%aeLif->Lw|bbyeAp$sCM@=lHM|2_oI
z{xY!5-~KsUwd>=?*M2^)YM2dRxvL|%^Z6^)P!yoo&P-{1(1z$Y@kNMOpdo<O+}#V9
zmV)Uc`TO30m4)q<CEX0QJyvq?P|eV39q_fv_)GuKRziodrT6lJ9ko-MDbD%EOl?$L
ztsCX761#oZ)YwL)(-2Qetv438kSK{b)sSU-^KtNb;QliIqYutvY9XPurLqBlHPCc`
z<8us)DmfOkoAdbxdTRf!umM14occf`^YG94061R!U3l1P0P3r1$O=8NEWyb{cJ=N2
z%8mo~E-2d?x&@%YUHM`3vz}Qt+DAdkk6Wo^za{x_{p+t68Gn^>g1vIaDWPA7t~kff
z0T3gj#u3h-2ykRwxe|#O&~EE}6JR=Q_l<O0pFbB^-8j++{ZoLtu|<g?+6<robYuG`
z0CeE)94Jd5)%{ZsF~v_!t}3`W{}^ua_28h`Zv&3$>mvBY-=GBG`gW(5U9SU$fZQXC
zmtI)VT{P4glTnCZTj1*k8DW=50B51!D4saEU-N5sz|S&X9U$U*dJ7sVE-D(4mvGVb
zLM#I)>%A=oH-oZk^7iA-7$5q~Q1P`@G10TOs-o5y4YdaQM7Y<iovE((y&DYr@vzE3
z<3VwTz~FKeogRIhxS#wU0E!BKy6b-nV^hbf|K)9Ctdg6}u{%fVMAaCNH+0szQZAe5
zW2#<W*rQw&D}Oh%j3E!m0xYS}FL$e#alRC~if_EMs5DdwOuF|vn~PtWbNDoKcapz~
ztRJ+lRQ{Ez|A@bgS1JR>(Ye+-@EOC94>iZ^e~HP(qS?E<nm@;kfW__IThhg9ZfVAQ
z9dzdmEn|4r8tS5NR^Z~6X|Cj;)K5?_0`tTgj{u(UUqcBFaj7?gkE}o!%PV+AmIhiM
zS(v=#s%KW?=DYrtcS3(Q=AU9zlFt8z1n<c&o5MD_d`;<T)}gn3C=LJu)^1LN<?_|)
zS(898YN<NR;Fp-0%RTHkjJ0x}GxwqXPFLC|uHPCB7olStQ@<W}@E57O0oJ=7S?~%?
zFP+K7eu6u{Es|5hy*Z~kKPiQE$QR9I?=0j_@1wV+V5PBDkr=oDL*@|m*XZWalG4Za
z05wBn0c4!P&Vrn78LB3~*tQTq%1DSo2jm|R>6MC!nlyG_Jg+eysC`{6Z~$9(tT>%e
zYMuQa0?y!>RuP3WYK_#na5^XH&%rE<{jnKkvkdM8@v-5V?xIC=*0ZRTi?zu5oBL{N
z&C^rcsxnrUn`*4Gp-ov3oj&A`gOuo@Z2o!mxXa%4GBbwK{=+kE7pRd~d}>nPeK)dY
z(EjY>;_Axj%fX4;Q=VoPIlAamk7X>mmgv>qgCOjukttOO?So6b^5gR?n~Kn*fm65b
zQE%9-8H(zZQ~ZAYyz+48&ebh;jFTR8l;h*`a83cIbNrC>7~(htkk+;Xq#9%R*t^AE
zb~w}K9nZ+CT5nX4AdKplX-qI2-=vEZZ+-PIjehOWnzApfg5a!aj?itUwr4|!N1K@>
z_^W7tNTkTz+k;cmSb{G)b8+846iskbrqG;Xy)l7!=qjU_AiGPt(10`AyW;A5bK*&1
zV8qP_Y2JSF>rLUp3ixBP7gnMJUfNQyR+EWMV1Ot~en_Oo8tc6okxtP)p<)k=*p&<U
zlL24Bz|LxWDt#^W+5$tb_w~(0*h&!p#VA84k?ZS676s;@-}G@~Qwc?xbd>UD3J&ys
zFMun-a{(X*{I@gD4^y|b)Kgho(uSPibR<<nsIs<AH5swWaqXx1^3ml|WWq*G4F=kY
z+c*9;NWmxt&WQ!EE7RWw;T?j-EJS=t<qTOwle9iYoGYYADXdq-r4glu`WT8RMOTmW
zf*bmq9+4Jv6fr09uNt%A3C9>ENls$})xr(V4sF2}yabg~L-2zK5@IldS0hz#sey8u
zow*~$ru!G+NbY;R`eoUHhT=QLz$23upZ29=8j}*DA1mshz3bE*bRS~H@kvNi#JGYM
zkX*W33yHM~(@sUO^hMyuk;}d1b$>+>e}B5nV~^EjNPY#ULP}6nU#iEa@NY9I*C(48
zogZ$O8_~~YghnH>PCab=_9%yTZxf963PwdKxe}fi7HG1KX<-EKbsKv}K?FPnQEaIj
zI5_x++T`H_rX2YfxwJ`Hs$_vilWNL!(j$9(a#(<)m??S9cWH%;MXQ<Vg`%Z$$=i$|
z22Uxg>PDuCgv^6uoz9<%&rXJ<W$|;c)`H$wJf<cy4WD4eYqPNZG3uC~kp-p)G6|}t
zrK@NO8_*$^_OXoW7Rwq~ZE^cBQ&nW$XU1NE?&%m~|4;=Coy08m4#~SSnLL;HEbZ9l
za2p&`lN;L3Lrq%aKH<*9{8VE|U+m{Ff&>9aY8|O!t5-JI)S_{<fkcU1@F}76FKL6u
z8XK4Q>a)fY2PO&Djn^dNzgPh`6?1-V0DYxu(Zx@}2~wHu_eZX?M0_b}XpQJn1&Dur
z1ADf^d^NkxG`$=Wr$;Dc&Y9Z_+=As2-F-PGmbdrVNWn%H?03)_Vk%DRVCSVdd!8l|
z@<kze+>`IBCb{neEA1Kb!%EKucQ4K_s5{AhA?y3}aC8XZQb6R=)Frf{*6Y?=H*YH2
zy%C|+PLZ(^YFoOpu0(-nk(?bAx*{LianMVpr!J*3D%JVuz~ZHPsKWF8tPRO<9yQ*}
zy~PT_@r6@zsK9sFI}C^h#-AAxe}vqrOI_%6%YSV-K7?R?ri-4EFD!8<t&1UA7;Br@
zWrQf0w!b?I^r^ThRh2>DetxH>%d$T_QK(=OTn!?dW9a{S0&AhB_5_=v)6G-bPPgK|
zF7Iq)Mm5o?_Np29#CmSA_H9+X(eu^Tq}x&liYq61$;Q7q-sKes?ox^3RbH~5ICXe-
zhFE>sSY5axDxsskkVRsB?Wrn^o0OoIt}|NWAzl$$`$pF%;QfXOj(vCtk)1Ffqzo+i
zLL}pp$Y;j{5cRQc`89q?^-ZgOc1eGzoc>Q>hbJou)deU3z$iQb0NH;KwOvgdElfT1
zOx&Fv4fOu^KaU)>f9MWYgn#Tb2blmtMjS4SHCUNUz}howfgSenoazx(h-TppOXCHC
ziuKXf-(If7#EZ1zp=ZK`+mjA-yt~;PQ{c>b<fxYEQYP3sIoUnDqda^A?jw5bdqZZd
z{uq=!_v!+z%Z&I+*d6XLEk$|zDb%z$Zi_z%2C$9k=#gadXpm|7Jn7qw1O$f($lOp{
z0D8iZPOYJW=H#ekI6PA*#Tv5#b%wq3@u&z<A4GHNh)(LJo~He{(ZCTJfQE&bP)sO#
z)sRqp;*0*UwVvNs3VnqX3X;N7j3p+l6fUIldO%CXY)hU6vz$36jvHtgL5dz);}&C-
zF52uj8M$ZVyB5s4rXtyCkYR6<WEtjjzOUkN1;|q`f_wv6+$GJPUXQo*W&>wonA(zt
z%*m#lQ3lMnue_o|Q~OMUA@kFqQibVKHHFHN9>N=th6?1c5783lNCo;%c&tB`0K8oQ
zqHo*vyxOn@5xrY<heA#+yYzbEq0oupP`%Bnl*ec|6GihACKMo|uRyhTU_l7gDxSn^
zCDbq*n(t$k81M+%Ji^9H803@O@PkiSixbyDiDDJU+0mRIXVx!vc7H}(n9Uvw2IYdo
z+62XHKl6wt80x|;w2AIh0j&lid>*V5{HWXwe1g>K_C-)93YD3zJfT$!?pS$RlGWD{
zvWp3k2AUqE%fW|O2!ZDwGBw}eieqzSovx7WrtWai6s6aR^@iGzro<O@s9C~MvV$b~
zS!sfg`y*NO0}PoqLNXo$rAj>-ht92imK@~YHLY{PdFZi+97W%JlJ+a-T^kqf7xyKx
z;<}AIH`0wTC|-kheSX)QN0;(;djj&atZ1Q~kvy5KS)e@2(@Qj@i>0g)wQGge;A24a
z>5SHA|52MuIGv~|f^S_2<+<hJP)$S0ibH<BY_`xeFI;#cDam5hRR%-tAwXa8gOZ$5
z2OoBiG&1XrrzTWSWTu)nHe2fi_1V!)uMwXXdocEPU#yI(#UYwZbzQ-WdYkqG;@4?Q
z6&QN3w7?u@$P0fAhVkDuIr24Ou{$tHR^RRksD~(>h4`hY)w0zkjVzGl`6DZ1YFM@-
z``?_4bkR`xV~s!pKfA#4#~Xme*<UG52Ad3_;<SkXTYyojl*O-dr9z&>2aGb7a?<rV
ztQwS}reKtE8>z`u2U$);=h9nc=h7Kj&XIN*6);erMIM#Y$qflfE)RNGdaK#W_9{xj
zLt(M(goYh)M@r9U?!y(eZnTnyjOiq`Vt`-V?jKUFuD|sFoOvay3PgO5PDXdV9d(f#
zYdApBb^mVRI%YM!lvH}Oi7@ZDG2`vN7VW+>F{@Oo$w3e#N!sLbVZib2?#$bx!JibK
zVh2c$Gz9_A<+;cXwsdiNC<T-R%&Z<Puj3&|C5|uBh)=nV!QIR=DGPAhOh|&!d1Ev=
zU{F`>1y;&ew@g(D_<fy};vZnZ<~i^2B?NIrtMUKXBI2kEOINJZ5P#Y3(r54U!GGKh
zbv&-uX7(Vn2=2MSXcw}v{~yM_u}RcsTe5B2w%xtkwr$(Cx!b+lwr$(HZQHgveQ!)m
z%sFx2GxMSTKs`^bRh5}5Q{#_C!6uMf?u)9~(GOmfB-M<ZdVqz)mxS5oEC@Xwvq(uN
zZd$H|io}fc{4@MpasGa_bC&X(^UgHwWGA&qW&2U=uS%Mg`d(-(ER@?fs4JOuf|)A@
zeQN$T+7_F>-Lpkgr2>r^_*DV!D_wlL&2QAh-t@*6i$%(f?PhMTCA7m$E-6P8wLkMR
zSCdG@b;PTM28i>I19~!ZWo=C$-)Tj`p368|cKr0xvir$a9x@;9m72QOPvevB<|!(?
zu}Hj>C4FT=&eDd1nnwZeU%{-K?^SYD*K2$hOoFoCJ2~o>-m+O0?mm)3#UB%}vA=5?
zjS*p?OGhZICxz{UuBP|Q{qC#f9F^9m;qah7W9MsV8R%;&QrPtd%zW4ugH!bxC$+)C
zERHDUy7#xnX@>M#DPinxzz@w4bl?l9GI}2PHa<1quMcs;?t=U#Zt#9?jJ?BBx+EHw
zPCMFs?WZxK*g2UOkSfDH|4N;)k+Sk{{&W&x;(w+`4V*k||8MT>zdR%U2k+4z?(F|`
z5dR5R9WK{eK$|7N>Ws=&MXpjMXHc;J>LAu8k_2U~x*6Zy#E+I*ikUQwYx-}w>Ib)N
z&&aWoB^p6wFdzDqE6&BaZY!U!m|MO9<Cq}|{IBlbaOnNt!Zx6v@{`_#>od>X?j`8r
z?qZ~<Y6}*`al@QuY=`lj2##S;^1m?X(*xV_HX<RPv26TfeIcCcL9VDFNEbOQhe=u|
z3ix|gSmb*-R=&7zFm~BOK$Vz*@dgG7*mig1Py`GE5Bd~^c7uvp^pDMg5_VrmFcW+!
z5GD;2A=w~N?;W}T@*mpM6a&0xPifF1n`1e}Pn&!gFNGsH>o_md(!IpD$`+r}&gIc7
z;mrmLbZzj{R&-C~UtIcH_vwwjp0sRo9K+hu+0qin47$_CU?GP~DvattaEVej=(6jF
znB=YGFI~ex0$A92loBE+Obe``tVwrBaq!5EK5s{Md*6&6pwe9_2Fd*b=LepTk4LD-
zy{~Ai{BsM=)Oek8B?gt*EcLAX)q)L7X+cWa?W^$6l|urBo?BhJfJAXd6rp<nAd9@-
z9$H~o#Quz2SM5tViqKZU9+v->C^s84l2j4QI&Mr-eLwLYrtG}@_GPQ(eVC@JnqL-I
zu8C#%sDjvkaM^#o7uD?tH5hY|l(E<d;Jy#Uxad37n^}moc_dBW5JWr@+>8^6u}SUA
zBnv~-fawS<9-+ZmICnCqwD^^edB(Dv2pRt4Eb0?b23K9s6<Y+vEIZQ{t0G*Ykko}}
zEd5iH7$ahjWDWM3G)u`VT<eXA_^>$9T0u`^QNx;|ux7gyOmm=K>CArAXNZ*v6kF+z
zB0y_+r1|3Q9lz~m6`4zh3C)?=a+JalMY;~zm^NExzdE*(l8pCWpN`M!jm7uoRI*oB
z?MGX*6ev^j6^H&#b7(3}f{@B~ag2934B4cWY>mw;Xhuh~BCf%<MO$}N9jMWNx+rVV
z*SBYLkTpLh$Os_bGdP8Icl(SNePTgJ&Wm)-ijVcZwg1MbBF?XO&UKj*SrjN%d`g$d
zw~~P&w(I}S|MvB+hi%aXY}pEO;G)`bb=I;S_!AR*J7w+R$;OS{vzq4F;j$T%L~WYl
zE;{cbMdqcFAZA(*s5kGy-pf<qc;1>-DA=f9Q+eetWlw(bG5Nd~SX|RY;tE<M5n(5P
znm#!|0Lo2Qy6|?|t|}iGkz1kPQd*w29ARatvDzsTBJDP&wJ?4qv^*YIYfbuoau-)A
z%U-3g(8>ewy%+Tx^dxDpBW;~+!wK;AB+$o5?^~a+XA2Ok^qS%B9(OBCk3GCuJjBnH
zOzLobSC!P4m<~_ppkzi<<)X6IDh?j$E8VonXjx}r-26o4+l6xjD9m$63Guh_x4aY}
z{4s^4)Hf^iK}-Uqv=YbOPWqQtFb>)Sxxl0Y_9v3O79;NvoP&iRR#TFMmU{}$?<wZ1
z%<ywu!>x777KnF(`isz{e1pkjdu(Sf(U(L{RGhsLSQ*<^IK|j)(Lv|gBN~$I#92b|
zqp^wTH*pfnSDoX!RtF=kdepZ7v>q6o=%8NeFbwR!s>x4bu$Q6TiPmERuLPgJRG4kN
z&m=VUAFk=o*l08nU0M_f?C#%FzR5}i;_=6D`bAC=k3%J328+%ViiY9!cALj8ZBRHE
zQlHBNA3STKS}8WT<Ga-Yl)Kd3kX?p4#=Zxt>jyVo=Cd;6__|@A$5x+(n$ot7#L|2u
zT9^07y>?vuKKCM={B~v*71+t6mM2Gy8Jo2HO~m+>{Jz>G``MmP!zISa0Mp!+!z9b<
z*t}~~KClN!jI)8I)2Zwj2*HBQ2>2QZ7)12^irH65m>YD(um__~cQ!{N$N#*}v6VQD
z=Ox%{ULQ@MBcDiULDt~$_3(ID!ER;3d^L&=9K0*#n;|h5ZD%d9&M$Txa6E#|O%9Y|
zqa{Avuvcn^FLq9=77${#RhvAolzE|l-g4Xvp(QRi`Td(=U=ckUE8&lnOb_{=`3@lg
z=O0Opk*(=}J2wAQ&-mZ34(l%{Ai7!*`^6QD_9=b__m~FH$qgde7N7xw86+ErKjP7a
z@#a0gZX`vck~4-vY?ZxtL%V;TeV;eNVgAPHn)J^I|E*e4c&TCHF3Lz>i<+lauy1ev
zL9Z(7)8_j7LD`ptjm1X~tzBHZJJn&pN?1G*Ez*$UT3Q>@XWh0xYg6@R4_6Icnz;4o
z=*r@>SV<)d>vqFYC5bW)S{Q$9q}9$F7O~XhEM+q7ZT6Mp56`S`9sCCw340o^Pisog
zy2eC^+^0_-E9+*l&{AHC@stn{Wb*e<OjxdF$Z_8!9?G4ZI^FJBOTE5G{C0%<dp{EG
zG?Lai40hJN(ZcTa{V{i0aBgiN(A)jK;eg|yE`@UL1Sicvj7;P1U~F}R=i|OI9VT_m
zgBejl#x~`_2CZ~8<C(_UCVo7lMiaM1o~D58oWyYd*osUM2TJ^CGaCu)0qYi5R@9GZ
zcAYC&jwUOje={pti}YJpFd2wPN$Sq*e0z&>UH{(ItnGZ9#J51MESyW1k^<IH9SXHl
zv~&ROyk)Jy?&b&b;TLwv=8Gf5dGt|uRwtS?hI&hHaaR_ZIRp|~%Pg*B>-GCMGxjGl
zJxe~4yed`cE5iz!<NdjQSTnKx@;KbuHYNIN{%6mt^a6r=cV`VYREp~PApJf*c|w0P
zr>b<0vX#y)_+@X1|Mhz>aFt}h^j8>*I=+S<=;MM9Flth%q^3@ddY?jI*%%W#H|cQT
z$n}F)m2I$e>yO@(y30uMqpwzy&t>EeUUB6{Few{EGLq=V1=FKXm{&^4esj_J{R<LX
z;eMMds}-@^i%g7O&&_E+fjQKb8O=}|GU1jbc`Mp1a#3#H0$4YATzI)Cnso<aDQg_#
zKn}I2D99d1(X<LJ14<uCLSNKdj?j%<Y<uuy%F&|Nh^8>ZC>T<&;u&2XkH$qM(1VqG
zTann6$(bXd(LjdZb&^$NXb6k~g7|k0%uG{`qx|F1K*4Hg#&vmOl79t>8sxYEQX}`}
zWRRf$`1RtX6Ga<zhNxFrXhm=|wiWjpUmj2F+Ffz{v;#M{DGWi+bWsM!7TpodeFNC5
zHnJtU4o;Gy#u!#%1jJ6E_)#22s-K{y6K9Uhv>Ez&h|x3x#J%>Wpd^BMZo?{^`LA^k
zn&ixqI8Nd5>}r5O|E%8UzB&WWLsI$*We#{T7E~?+jqXq&{pPvMRzbjUyK4_5j2!|h
zd<~2X+iI=}e}OmGSHv*{As}wq{5;Hg5x7mUA+#O7ztk*p;$wH6X31r2J$-RNGUF)r
z7<8??lc|3ptd>GQxo(6CiP>Ww5)WJaQ*7I*F`x5e#wGX`P;%Mj85G5_6zFmxS$Iy`
ze?Emj5eM$qG80Ro*Dx46B4ASUq+rmvh8Y6fDSE0}FFkydFOT<cy~+xV+uHu&tCGmQ
zd=#W7wY>{kd#&Yez*GrQ8y&+Nezw;PJa9Fy7(PSa42qk9vk13MaXR{$1H|Mlocw^W
z5**hVbz2LVAlTRvy#0+UzR*`guE>&_8`t{_Zfj0tSEOaM&qJ+yrkc|jscIe3(s&Qt
zruFi5y$vqVML1>oeCJKQTX};Y0rlSkaL|E%Fu<@uSiZ}d0&39d{VUs3?Vy$w=gloF
zm`oe+$#RF4^-=-#et87$bhk6szXUz%!+9CCY1#;Qe=w{sE((`wp!Nw`8EYF7c>Cd5
z;cx{l8rbKqw&SXU+;%lqh)?@ERArUG4D=q75W16QjGrx3h=qe~K{W83W&R>>=!f_W
z@`Mmv9QL}cX0QA$b>aYHOD4H_?PL2@0xP7J*s{qH`vJxVHPybozf8Y*{ntGZZ~7_(
z)!$}CG1}iY+<!`v`IrHvB`t75@Sx2;ETMpyn@sbyqo5$$$zXgqu(Yp(P$%8>ad;S!
zDGGehAc(`do3slfIvp-UkOh7dyaeVvJmu9W1QS}tU(I>o*&gd!+rvkeZLrTy^=9(Y
z@*yu~$P;%djU~}RZ1woyy05>Gxt6C0>Jq-l%oF0e$6j$L`eUr0zkT;%cO#~oBQcE|
zbnGSeb&C9!4}dM<yYEO3AcODU`i>5Do~s!M0KhWTKMVbw%nca--*8uz>id5`RyO^H
zR0Poe-dg{)W8d^&xJ?JJ)m*un>4S!eD5PnwFAR6aqxk5#E)ApQnnKe@h6v)`@_F8I
zE5u%eQZ~RCk_%UVgUam7y?2^-ZD+Xu<sIR{krlJ+gygfY+;^z?sz7vZj|svs3x-6d
zeRq)EzzJkgS(nS5nAyi^%nhg#2w6|d&@?lO3R?kpBi0y->JiAGSevZ9PoXD%BitLn
zr-(<5KsaNL3LY4oI1nW73za=^K#&-W&=!%)B=GnmA+#%KRjj|Cv3ugmNoCBWN&b5{
zSUKE&SyI?M2S8zMN{uSn4m&z5EX*_bmpJA^f${2S6qX04i(VCwvYj#&IZ<I>x`R78
zDzd`nw~JijZ+j04qX7FRYjT#eM=(9%`YUYG$qm1t?U8qcq0k43n0>~pzMD5kCfrH1
zg6DyX41+_EY~r>=$n?P5ILI2sKM@oH0dFAF(Ne5E8PAtoFQC5406qBn2q{>#Wl6~}
z;3IiibPg{ZaTt5pG1nYGIMg_VF%V)=`}BjQ)^ty}s>m^LEmJT|7%-Zhi#E>}w%eyj
zDUI$8^G=?hF)|rCoVgRGpMcEu=25<0Gj_MG>v^;(tQ{Mq!7Y#uodP2kaPDDlYn$1Z
zze>L+ny8acaDA|8Suh_o6PqkD5a*uS;f`(RP3R0Jb;nO#HEk~7ra6LtC$+&9sfUh!
zNY@)KiHHP4h0_Wu$%)q&HhH5TKi_jz#G7=mE?VvpC7n{rAw`W%futF@#8)|9zsqhm
zvAbEXcT;N(veMX+VSIjh+}>I;X8MFsb*;E%QPr$?d-}Asw!bo@PoeG4UWTo*2AY^-
zjKS$6-ht1LF_5(efli>|J;hSa)e7`-y#!bFwBkmK;mgQSK^Gk#qv0|C3{0vJelz*9
zg%=7ICObK(1zm!yQ|=hl85od|$KAF9AmF9iIrpj=hHD;46|+vXgSF@l?`x*xyT%)7
zHqpj>Jye?<ZqRgNU~765E8H2J5=X}K2@%szvSpC`;@d{2B}TP)m2F?0GOWZ`q&k%U
zg%6WeZHOGZFaft*E=%JcG~`R!%7WL44%`kG$GD4h<B!|xb#<YfZIHX3jwh@Qpr2|_
z^(RKrp`YN+J}KQoSLW;2B<u~p-m#c|lM;tW=QU-jzmvVBegcqb!XLXKwRmb|NZlZ2
zM^#`MC!Z5~NAp;|GMzW2l_Kqcly1>S0LAU=A;Ls)7i6fWomjHXf+?qV?h;7@k3>dr
zlMS=6BlC>Y&gLqWVrj}XdPd@ibA7j>7dORY)o<`7_7TgM3<!xh^tzKlwcw=m&#=;Z
z^|9z=sE3e@E^zd9eK(yHZo6hR7OY<be#q@>?*`q)1M&Nn9Oji>#g-;KMX<AbmwiJ$
zH%KukqXuGncBW*Ohf))sS;6{eaI2j^;-T%DxdxTy*=dDsx~*8DVO}qDrZ?M!cn?*+
z)2l3K8UrQ0rQxzoZx$96S2tBecB<k(-?0A*wkR^41C{>xY>!a<^R?O0i1pv9*Z*M8
zd8zqsw<eD8mDOVyTT0uA^8#6XnU#n@rII35K~iFsBsv=Fasz5T#U`PU^!;gSChZFA
zfq+z`eNEJu`q=rDv1<1rer^)dW!z=VBvmkPF!f-&{Ixpsz{Z8;_+-$(KQO@a#3=K%
z=R4J0^2#95K(>w-y%Hclx&k=u?l~1ihJn=lM3ggv3BSSu=RW2*H1S)uE<LppEpX8@
zp>FzbV)Q0vWJ0D4Gu_3(0ELkO%U+b<<12}o!o-I$H>QZ~g_A4dp%9C1DrMA*?F16N
zo4^X_?O*BCKzu=@=*zC_$7lHW`!<@iVtv}*_1w{&7I>t&IZW*6o&(%D#x+`1k&%(6
zKvtvm3d|C6T7?T#$@4fz`-s0=sFKi#>`935+cEDs&<#F#qCXmDVTwPPdk;lW?Aebs
zwjT8O7yRG^PI#Px{KF;GnP21xnw3{LPgbonLAb4Y)y6cC3|Dxi0YTzGV}WP<$5Tgs
zkpk|mL>T(9fc|OGz!R2mda<&gir$+aYSTyYFqD;5&6q^PC(&?HM{O|Z6?)nw_IGP#
zU-@S6AEi>r6k5w~C4<{|Sg>R8J1M>(#mT|XS)ksgg83rbVSu+<`~+D}kReYXnd}){
ze8c9>x${mRt}O1m9v?%)7XY=ctJr}$(JHeu3f8zf`U5{cl|PRGAd;g05;YxjnPAlA
z)9-6=@S5?YGLL0_h?t~`K5|>n=(e~x6onfxYZ<9<9WlGl5oE>#Z1O;@W`j&_&DhRi
zNl{whfe!m(o?9WMhATFaT57e+c%6%j9?R1h6o9dtQ~@Bu&9YrQDnA1`136g`HUFm?
z2tO;=+y9QU{gQ%k9V3ubr-_y&h@3}?%7X(rpBgy2Ezj8mn~5c!aw8rzUQFBheJm+}
zyra<@hgMsToCX9`{$K`7Eyd2ZI`=O`gvLT#gDd3UA&e6z?9c0~-*ww5h#DOGodclP
zl2vZ4f!Sn)>sPyD@>>M7AVX{@dgdd7FRt=d;FspbAP=}}r&O9YQH5a+iUOCppx}s`
zi=@?ETezdIvmh8&nC<v*!GaaBjOrBgEe8><EhcR)v*`w?Gd7I+GZaTa)dF@UKi_8G
z&D6O%45ig}$LlM%S4BZXxHX8YJIHImDd}$H@obQkqrfSIubtieSBquU6}5M1a?qVl
z<}n9S7ZSQF1F??qmJKzle@1p`S>(uIB%P*xT%t}sz1g2V?GPWD2fTbASRPB^sMtc(
zIgJIP<U&-3dI_4c+}WYgva;ap#FDGs9m$TuikE!T{k*6=32vT7BR3N|Z7BnTsGK#7
zKcyBF3VG-WZ?S=$Mx#v#M+@@5Z+RBZ5SYfUh^-cQ*BYT3k>{pdNF<Aq^5n9rh#la{
zvRyElHEvL8Wut*+bFUPIPb6^G%qMSASxP^5OJ`+EHWXkE5G&T$le{sNr#bc*T`V#z
zV?Fak9H_bz;f@O?*)Fl@mPI@qfI(p`9f~WVa0_5r+Ik?0nvwGIjC0mFRn!z{m0N<t
z=N5pXs0bv=fAXXnmvO?m)z0Ex6091p56tJd*BB!=Xm$5zbc-PdnuVwPSm#_q+fyv)
zQ_)O7#1<SW_AzKLi>s?%?he<=*no!MR8myz3-Uvl0_Yk{Qyoj>brAVZvevOqGB1Zv
zt;5eAWBMNxM=OlEUrMz9_G_#awP<f}53*vGNCbzjHJI{b`#U87#5hMsqvoR0+|w&B
ztUoVyw(A#jL7#z>#h}GBi+13;p~S>IZQGk|U)c-{T@|9XSG65tId)-Z#=Tug7A$B^
zFY`2_`0AFRWfSyY7dGKx$(1$fir9279TE4uYRaY6>~$Lz-S&0F<H-;<p-<nRd_jlz
z$f$KL96T_sMut^8MaU&s;24v}^boo4D!%&j33=b(&;ar7!HG0#AIhfyE$5iTSoUe;
z!HOKmZU<%8XH=eAMMri-i|p@ep6A^rYG%al#zuS`S@9TjFL}My71zA;d?HBq>{akN
zuvyl&_PM76ZCX7H%RK<jV|*-qPfWc;9gWEhWQ5KTVC}8<2AymK+1=0>4{^<DMm?!d
zY%yVX>vol+ZwlYW-D-2Il<|ZGXfEGt-j*}){#uef%THN^u86>U?gEVcbY}Z&RVwf-
z?}YmsiY8AcZ)W=%*Za#|xpQjJC9IO|$jFbI@Nw^#uf%p)LykVE<-(rbS2K!W?{X0U
zPGvI$S%jR%rH1@Bk{Y1OQ^aY6lFB>F-`nT&vp@hrbVO%F{^MSBezkZ7Sf2SPxylGa
zd@*u%_k?T56xCao{?APCSTr%ni6Z~fF&LX9270?m&SG)pob;2;FP(7Ra^(H&aJZLe
zxyCxmv~IzByjyw5RLkr`in$OVBK#x~qkCx*Gvg=CYK3Zp6m_vm$K7~tUP^RmB6;1;
zoWZzjO1<JdCZDp{@Vb7G3|i^4{0pL_Sz#AhQ`Q|h6&$+ZW05lo05so_;KH6er$VMM
z*5tX;4~3QK5W6|bgu}-S^WDW`9}47!uab#Fj%38H0QSlEyCWehDMF1B2cNbLfj0J~
zqs>mO>f~<^w>s_YRPW<cia&PW^Y6rY4L3Q4EWjbHL;D0!)ZYOA+WxcoaDj4uUN4b9
zp=bXTv*BoC{BQ05e_&dwRM#DUxO$&uHS0tNq1AGbt-oZKQAQQvT0^d+<TB-+EUgNH
zf`4crR~?wYp6SFDlC#{&;D?ZFxsUbT>eTI9w*!1Q#v(HmX_K)oIG+5Rf8+KJDfVj+
zHk>-c9GiS8IKqZmbxn+00)$yWAq$o26H#mEN-**h7O<*nn<k;uP6g8lT#pt`lGjGn
zbpX100sF(hVyQlW)oTy5$BT;5tAK_}l8#PmqhTq7aqFR$<zuGUS3T6DZI4<Db4(JL
zr4ywRb+$4pwla)rT6;UPaAw75Y9-Z3DI=H96&YGpIUc0&H|^3k(Us?f4xFE#3&b!g
zt8k8v57iRFvhTtqdnOTiubgtLV9G5E_D4!WC&4H8Y%nKLX>m7(D>E8(FuQ^W<z*f(
z>aVgc36FwIP0gO3y8C*v<#hgP2A)$$8;&ZQU_#cUbH{&)Pp*x<uUIvyxi13dfZ9+Z
zSAAv)Q$%$n&DBH~(LL*Fu)X$xr7Y4-!BhuXZpkWP8v5W1sfx_#4TJ4+{XUPqD>o1H
zAKorl4of&aG3531aQ1c#KC+X?K#ySeWJ0Dob*7SO+LOW2RP}WI)d1NRoRbH61nt~m
zzixN@uoZZ_c_^uhs*@U|lRE=U;MuBP9-A|#l8pYH_#>#&@#}tlCL9BRUFwA$h=ZAy
zhh2xjfF(9cj9RH4CIsVqdt5wE*!IQm`NhNaZN${&{(d$6jQ{1i0dB}ueGG1Za!q9u
zeej)@=X(6~`Wbv}ggbHNxEbAMBgXsKM!z5YuB*?57{14l$Rz1aZy2*L_QUx`r|9&9
z#D);#@ab14*5xX<>y8@7xd)0>%XJY*BdzWc|HVNf%_HglT@W`M<&GC^jC1S%heFyq
z2Pydm?HU?MxK5gTgCuVb9v4l7Z6MeDfE?1rn(qmj-TYR<+=;wVVj^f|mrbZ;M(D41
zD3HPqGdl@lwnJnKuB7*JG&h!0e}T9s2rh)Yko`s?6c)z`lhtjMcvvledowNwo`3}9
zOj6ui-eo+4X-w7&TlPK}e#4Ag;qiMOHTThQDk_=wvcoTvKLhaq$AD5%Uut4X=2lrM
zmVXSiY-p$hS{}K)dXp{n%iA7Ism76FGgv}HTYt=2P^Yi&t<EJU$jFZi+My?7<#eNq
z(eH0h9u|krrJUDy$V(%J7UGaEij&Kq0YT|^Ds7DlZcn03s@>tMz`=QF+Ql@%twrbQ
za5No?ERUpho(#D9j?%{}KW7FG8g+_L<ssGOM6aigM_i<8@d}<8`*}0Fabw^0cVxB)
z^s99JsGsaH+-q9eI4{k;=*#&V$|O8=;jTRGxJ0kz=xDq~+&i*RQ@Oam-+JAQ1X^Cp
zYa@8oCoLYI$a&lY!+j@WJ)OJ>mAYl?TI)fr;gN1uy_(f{gr=J%e0B^g>U+sOYx;r8
z8w-K%K-5@ac?96E670u=g0f0;eRaA?t=K|%7T%R3DLMQ%y`?qN$QWI^<vV@ryZ5WD
zZTqJ{R}O1km?Fisy5Xsx{#e>Uxt;4bK^}mQmr{Os*-O*9JpaCLv$8y+E4U1b?43-|
zLO=8S*Qz%rdC+nFGkU)CgV_-LgI3AO#K^|P=HCk6|M2c<QdO{9V?gkou4(O;3M2qr
zBDASYDldmmLa36YZjw_Fj~P}n1YgHAviW|WlE{@0SPDr7KX~Ew`?~6g#H}$AfSwX*
zPP|}Tnz?@Jc0I8JXkqME3H4^e>}x{dV_dLLK35k%?AM6zjn>HB0Ye?r!)OyWZWW~w
zu4V|#6r&KZn;|iQux4H@^@kk+bw~JB*oV|Q6GzR$&1ni{N+Zy_O=yaR5hh=#(GP@2
zM3Wi=eHT$o1PKghSPl#X4l<n_8i5B>Pk^nHtrta(Uh#|6QNkKgNweOfIxY7R3CLz?
zNYm`B<Cqo=T1_5KlC(N5R<~`mV$Q)RiwxwMrsA)A>H%VZEYwwqW17Y8a0yD3{V<1M
zs3O!UIZHEc?)I?o^wa0;;Y<H>md;Cd7KhdgugnF|6T82w5t{rFB1^7>d8C7kF0*Zh
z00I60Td)H`-eP{3Ud*Gg#YFBw)J26=y%p0PIXrT~#no28@p0B{$L(R4QChHMJB+Np
zH#=5S9;+Yj*m7QZs8EHv2@y4KhymTKTo4Ij-sUyu0MK3&6bgE$5>csM^evfax(!rv
zA{;krg55<Eb+#ebLfgR%wVCb`j@U6f{Bn!hI+FKrT61j2Hki%JoEu#3wkiE6u#D_j
zd!Yu;`r1%`79HN@eCpz&IFNayWy2Ju#!4C;tDt0au?N&5+QZf1!F_SE4W%=S@WT{N
zRw~g#0@HSFMX20mpuQdOm6NUR@~=n2#m&5S9r<s)&qcz=Fm@gW4zPJ(sHKnVviF_V
z;$U{NDH5W`dwV&rr9Y}2q-t|eGWTjSRA?SZsBVT1w|T>CAeN*oL&~G1Gqhza1@AAo
zh7|)eNTLfRnSW@+SMc{o!ILFy)a#Sp)^b6m5v8S|8QQ9VsF$~tx~{_39cssOOzYKr
zbkbsrn#6E(6WjzYP2OaPE}OMibyiy{*y5Wl4Gno$CHEvOx?T_LzgK^QZ<os)AZBP_
z=UvTs)_no}>p{{e1LQ&eIY_xb>pxAh8~=Yyvd6c?7w`iJJ9Qg6SwinB*!Ss&Aesa0
zGR5)t|LzMH@cz8i_0Dpgt2y`a`xah;ng3J-zHzyoga}?ssVeFjVs~JZ@dzn~@u%g>
z^=w2exWqp)Nzol7w6f(@RGt#6g&H!+dWn@kH(<f29h~G1QsQ^EhGhFlQ@ylbFT_6J
zZlWXZi9IJ`W-Vl{_Df=1R{)A<$UmgHa6zPB-H`?Aq>S^g?x*@S0f%c!Rx>!vW-64{
zIrpr*DcO_5{0l=rx`>Ue>Lw4RyGfW}(c&X$FCLO{eSvdJdZkPd4cC230Fk{q42(bs
z3~t)GvLDuCNf(q8+Unk+i9VeBfak!mE+>Oa0etf71YKCx3bX5xEy%Sx;+9D&fH_xm
z3f;jM9{JbV1A<skEIYlx;wEz1fo;zVd*4<Z2iK>%f<s~F(}8%`JKTh55mqDp3o*i}
z6FjZ&0VsHoPa`H<MO291sk=LoD#1fyy(hWRmkh5Tle3|sPGK!MRY)FGhyvY(_>~sd
zPkI!$Yv_bjDC?bRYlGd?T6q8ZaPi?1<k7Bk_ls}l;8O7oqwADM%YHM8hqe?vF^c$Q
z`{}4e`_7?Iink*wBve1wX>IlX{+R9jwU7&zUSk$jHsz6ui1D)2Vs`u`s)N{8HL%lu
zc@yU>le=!;Sa!8A`I3aQnu~6;izrz^M{w-H>W9$By|mNf_xm&Yzy51bubjptKaL4b
zKkJ{0_J5UYM-vC8|CeooOWe3)AOnWzGk1vBNSQyU$?On5l3{Ilv_Aw_5t3~LyRiG)
z+|@hnbjvR%vIK+Q@?@fHt1lA<Y%j)*giHk4-(IpTQ^{UarN9vYVXM$a>V%}t5Uuc`
z<{+YwVU$f>)Q>BDgYg7$fV~fJnG{+HbIH$6tDq=i!^7MnkFz}+IBrG#!>meO5D^iq
zyWShc2n%9g499;j(m3iI3{M10L-Bnm3uneN>YB^16BfmeDbAVXaRB8-pyI?A*$W{8
zey0VUrb{gWfdwdgEY>rXsB+;p76JnUb6`C4s%kwc9yv8p6if$t{`SzBC+BkO%brwg
z-Py06b}2j4R$^LzmfG%8Z~vacV>|^;8P?Ut9P#L`n6kjizty_Q`y?d>`p&rr|JU7T
zi}@1&^%Lpb`r~QvPszyU2DZjOREL#`p1Fy&y@?~8`F~1Au1cD;-DgAazxIp}aCC^$
z@yHN@fBZp_!4wxp=?u|r<UnMiiP(@R;|e$gXWg#l6H!(r*r2Ul{;*`ea`@rU9YId)
zjxANqKZEuimgM+`>IB>ri8gH7?o>4R6%eVjDyttWsV9+cfa<`zoy_tWCNmN1vuWnt
zrV1D_IrAe+W2We%1)Fv4t%^Y1q}b%f(_%=?xWnL3HHK-YK)e*zlFfi6R-GwI6(GQ+
zN5E|vdH#+EyT~S?mQt-*_utFOUF~D*(XFy;ITtvx*-uTjkdwW}o=d*O6^C*KRk-xi
zpn(e$vit>hJ-*QXF2bVuuv-YKLRvu|f1rJg;|#}szWDeiyHROd)52b{y|icA^@;`Z
z_ZPiY(Dsb}Zv~SChfsGuffES|PszvzlDy{OUNbXnIx#|-Bj{KE{yaO$KtH4%GnPn2
z0R+C}%`-zh$#Io9QqJleXAYA6yZvs`sRWlK7|{iefsl=s&2qLjRLSH+-SRM&!S#Jp
zY|Q44-@-TM=Cuk%M?Iw8Kv_->1;geQ8jO~|Z3RH)XUErz*PMV?aU3P;VN4W?9w}NS
zoVVb<z%!PA7ncc}VXS^(`0h0bg}mMVTB<JEbbIGX?Fq>#KJal~c;Qo;L-wN}y-v9s
zy+)^O8}f3EZyC*XO|GmrfzpF{5v6?i5?TrFm_u)-WG==xKKCGtqtabB=BJT^cI@nZ
zx8(xP1|7bEfIjXh2{A&l5LKlBbACy~@WPiCuK+iOjbC^%;x8e{7X(j(5}m=H8wp2)
zLn!He+6P~)q2UmF5zdJP<{>g;LuupkLoA0n)#qjLvI)jS=2pRw{4VZa8NDXdUBnO?
zIJQ`b&VXu|uE|XCweZlKCicKkP+we<SndaQ{J!1D=r1h?9T$nCPw?CIh}x=Z>9KPi
zC;5fi_o3WhhhrM6YKA^e(y1#ie1%{}FW`_~uhJi*doPh1JcW<L+cEWLl?rZ>K}HDq
zZ<kG}lnRNn&nMD!5}pThH`~zS)pQ+%H?p@s@~#Q_W&C}#8Os^9gLK3zdV)@O#&U*i
z?RA=Chu0ZE$D=Dc<p2-*oM#N#J|Xhk&ZHO9!4==X9!w7ELIcpBLrH=8&tdI9;qCt|
zx7RarcK^?Za!6gzDMK8|@44h;jl1%4PI6UwlULZSMZ_5AoQN1b&iYO`TA#!LEYuKe
zd~MSA`8*pC1VUqK{*Vw&+D-2JT93J{+utfR+*@xjqbktN&hHcUgEq`$ig{YASBUUy
zTnJRPtT{i<s5Tx%J3ndXCnu8}FIoXCTx0P6<YZcgOH3eY&yD9$_2*O%18fUJQmzY;
zp(Ms9;50>(R_+G_`@wls6HF1HSY!{<K>xZhY+CH6W=x8UGa*ooAY>G}^OnoM37}}I
z9r8Bi%GT*g$fuFlM3GV%tWX>RdWF`HcxjeAy!$k+U%wm%vWa8Dj5K6sluj7Syj3lN
zjF+RM+ZwcD@q~42b}{MzT*G;3J_cw0wz7A-1&iH_%Ha?>qLCi^J-}DdL6$eVw13$H
zE-Q}A-75c{IUmAJt@LsZbfZVS^v<2JnhpLP*h1|8mv!TYl^R(j-4)X28T!o0Y7)KR
z>L+=q1=sJy`0AzkTs^Yab+gC{jyzGw1j&StT3(xqqLpSo)0>mheVAQvC@OoaAaY+O
zvks)0Ch{Pe$IuxglpG7+!i~%A_M2<G?e?ltu32@syX^&g1{_cad4@F{YT?1eFE{#r
z-7cWP*?K<#U0ZQh^P~@)uNKYczQSqwE0$;eIEh!T^Y`*Qfw4rr;qJahR@6D}`Ic{%
zF0JSN{qihkpj!##(G<EBV~tK(MeC^gn4j?ZYFP4K&4TyWtVX-5J>T;ct)Hu#X5UyB
z>uy~>-;UXI27Oj<&NT0;Z&4q0=jQI4sh3#0D@5ku_%Z&*A^Cb9c2{N?V{s21a%Xe1
zv?NU||IjWmU(U>PvtLUm<VT3xQhdY%n8kWhg5$;U>}n+3(DCFoKH4#^o4&ox^?er)
zr_aR-enngkAyZfBT(<?b09F1yWTZr)(&il{R!w;$-FVQYA)4nsy^m76arX6;SyN0N
zRJJ;jSo>j?+N>+1p7;3oMVDe9+Q0}Y7`o19?cnUva;?a7A7|X6=A9s@BBP4roI}1@
zYl)OK5*gz(ig@*p+Xo4pbg{ny^#~aKI5&Do|F534a|uac-)3i9hq0QUA!0ES@#I~!
z)ZljcLv{GEHAD_)sbEyU#eJjjd4);`$ATbL2)r9NU3+FWVhE`+;k9^`cjMZ7!RyHf
zmz2~ipaoqLfj?`VW9U`b>#)dh@RK~c`-I1RfYR!<XfMR{!AN=H5F&`V607v_$CdiR
zX#{W<6HqOc{^vB)fuUw=oce!n|MG7M9JkHdq8)4Ljxr640!Yfo2_TrCNuO0yy-`5G
z9-|<a!lO`pRdHX3Ejt~_JnYQ1UZ7)&eOP+;*HziWb$<4=W7T{bMSdnQR6F1YsSx6M
zfT`ev&yQdyWUL!XlL)O@y@CfdgB0qA0VEZ$!kDTTXICrs4klU;_}O(-Dh<teo(Y!$
zdD4qmP~@vz$$={rkTKN#lDerbi2hu3t74`s_}0gNP5rIHLkEdEl2QL-Mih!204ePS
z97?sW-{sh}j}dGtEI&P~NG9e`0Gd00h7b|N(p|Dv;vsPk@O5fzZss2N%9x0%sb^}>
z5UWXmabGiAL)^x<lKXDBc0ZoAB2eyS9TTZwZiz;nHGA30j+vq@x(L%3eYVNxJMi<)
z)mgL+fCo}5%QTYNR}G2Gl5M-DU?h+Ti26R*hJ`nwqeq&W=w7~~Dsm1ha2Vn7ic!jR
z(>!a}&rqI5Avs+T8p{rPYebr9SoBo|Js+w_fL1?(Uy+B4xg7aqqbtO+|KOL*zrSf7
zhFBK9N$Moq5+Kbt3zhrTmxBmUu4$#+#JEZk?3KmZxTu*8UqV~PA8@s?nC+IC`>3nD
zIb3iiW0aJnU(ox$E!a7XWNF1}t8?T4=eZlqS~WZv9247WjclQTV!W7<itH>lx?cjU
z$Ut}@+%r4F0QwexYO%VQ$eV2Q5@v#3oNaw9|HmbW{D7bd-glJI$MsjGh|Chb$=jA9
za+(BX?MgOk2!@w}Qk9?mysGB@JU~OT-T|HJF502;>cVK1F<U>kFN7LT>Nt)U1W*gY
z@dQL60lqVYt27c&p&1HggeFFFC`yWFyO>{=L7GIef)s1|cJX*2jLJfAG!uFAo~V`>
z#aH*&kJCK`zGpJ_Ed+;#_;!>#i)Bgv=|vMua;}ZaS6nss<f5(@9?u{%PhV44h2kv9
zmf>=N@k(7+UzA};X=}1+HN&oZL|XTfXX-MP;W24b6uwDKZtRRPy$O7+qq$V@R%Cjc
z#I39;A%D7aFXEv%bF!y@>1;uCRIv~UZm=^ql#4&Zt0rz@r~)g-BRac!ip0Cu%%LPi
zCd;ZyNfca8V$5Zu6*g+9;tU*6EKUM;-jCUAISYIo0YM;L`eTpbx~NN0`NhSva>VGN
zLjfyab+K4yI~+_(cH#pEzbe-azeW!x!Id3%w5*w09-u+hgVg~H4F|mwUIi1xq0Cj!
z(Kf()E?CxwosO?E1-Z5Pew(ei7lECBOV|q56ETUHAJ|LBx#qyu_MWW6JP3R1cdw@<
zCjXaZpB@C-X*tVpEG|W6+a=Jem2F6MAN&kEz);J*wWY}}o?+}0hfGn=GZF1Njz5iD
zXGfvlM?ze9hLP;=z8&>D?f1J}G#pP^QbsAFa?2z}AU0Ai6tw|y^rOGg4@|t>UP%li
z7C=8Qm05|Tr|3I2@;u4b*dgQ`W)$!-KX~O#KmN_hY}2#93-{-Ov4sQxK>QD2nLVqX
zk)ypc)Bn#<pSqP2_6X8vwH~7yoh@W#Zzuk+L{hYbASSTM&7{l_<>CeR%&=k6nhvH?
z%=i1{?9~|{P)Rj!?xOVb>3oS7-guub{AFIj=|%NK%?N9LYAyawtgza?|CCu?YbUn|
z`r$*(Pi(TKZfuE3Q>?BG*@=&1>CC%)$eq*8J3wNstP^?!l{*W)H-$nM7_&w33<2zu
z*1*>luV9bd@yYO3o}p%e2P%>*&lEMvy#)VmBy<DTA*kbg#wtlm2=obC%?R`jS}~|Y
zGyi;Lv%Ynow`)r7j#$06e^xdQZjKI~o6(}PE>QY(Mf*g9N0wY)k8rcB?|yr>3OyX0
zt)1O-Nt}?1%u~tXqrkrNOmPEWwH=wh@60*RI5d0OyT7h#({#!EehypcSZAxOQAOX^
z*Ovf>OvR^z-)0A_>x^%Q1tNPLXV8tu)2Oh9ZO%!p=i?^L3j*Ryx{yWB6N0yXbNL_a
zb)?HlYZY8N(ffSS(`6ErF!%{7t}->#)8#oD*aH^|c&}}FTz(|2^#R?Qa+|D<!_hs1
z18dZBzAs_EX6f!HrNMQJ(|4i5u+p5k-9PY%uWTRLke}U<Bci;u?d~ofuj{Yx>{hyo
z?4r@vhZXY`CEa}ie`$B{9iYw7NO<=`%2pb=-|ao2rngnGY#?}=jg><!dCQhV&Wy<G
z<~gt=h~OfGO=ZX^S`-Wg>k1k5iz_eK72f(J!yun!73d3GrxJExo9Gax0sF1+8xhMJ
zjxmSF^y4WhTiMv4mz;p{n5ZPVllvVlaZWGNN(eddfXQW@5-jwOSrg(paX4By3qsY2
z+ag&EL(;CeL!wkQD?kSOhTV@-@2Cui%OF<jzLeJF30um5p$4VfF?1F%3t}2_DNyxc
zQCLs%l~kwX!Dkh<qeEuLOrXpHN-OtGfuC0}0n1IbJw<t%c}0a>2Ist_X$NS|5Yh?)
zUrtPNb)l_5)Nt}$Ib=bq8_{=41@H{3^jFLjopw1OOh^_(HKM|yxe*N8{zy}sR?P-G
zbSPtrTkSKa0H#EV5)?vCvk)?!kl2W#>{A)Xm;=lY-tyCir#<P`@@E<g#`(^#LCSL-
zRsqA$hs=;A3>yjLN|get$^vmw74_z(tI8z{A+%TFXqK1OMh?FDQznK`mWD7U2f%F!
z%rjl(YLFUJTO;Tq>_7@~!2W_XCp>G@EQqEBO{(+%YTUv|7}Do(!WbiBFzKhJcM<JG
zB@#zN9VclP6hTiu4{$%xJ>e<~?_YC73{jGxBhnr%guxi&4+_U{s)UFXUPtgLE&`#{
zQJ!11jz$7?pkYo6mvqA6Mqvu2s4Uiqi(uprgQ;5pbP_B@;#NG=K9G{k#z^`T#hBA4
zX~GYn=#S;K2dPFTek=qwK0rZ^6Qe0&!2qj1I~p<u@**6%Od%mn3eHa-eBay4e{Ujf
zn$8R=ZEqj<!&O=hl@-CT1Z&FECr|F=B8nf#f&m&7g@6(D2Te%N0Z>C>;YajFkM`m=
z0)pSj*G}I6bRZEDA)7`k2D8-OgYAiq6O5GR?l3aI=*ya$hKF(suuONsE>Wz^rGlTt
zAYBOb_2%Cu_L?Suj&+T)9M16f^QYK89Uog<&2o6(-e;`t94E{hHKK=M>-<DvJG%(o
z=a1Duw+=Vr@@Qw8CTwmkFU~GyIy!(Id*XuoFKw6UtLg1rG$+`nVI0hSzaSi*kf!%8
z-ye5eI=b(~oT3AievN)xfA;V|+}528Y_v>v`rjYRF9ms3`l#?F%bl)83D(h;yf^NO
z%MFG>5X_^$6ddyrwP*ij5(cuY0XS7sv8Rp<5<vEFLu~J97=73tx*DUK4T;N;xIjA>
zY$SW>2Iv~XH6#;lxJZa~t`#>~DT~t^ur{#EZ5@{y(e+%b<YN&d7h(4P$cdcoV8`Vj
z*w2oce|@^WF#$tA+EGK#liP(;#vy8jr5(nS7bg>GgL^E+9KAxC?Tc`tmdBgTb$UfC
z%II$<3q0640>7JzlpA_zKFPmOo?#Pu0ATfr`Sx;TMHu(h5(TbB!hnybF(*%Y)64xx
zP$==O8&p-8mGz}(aNgXno8J~CpE2S20L+h;DWRUo(d!lYx^s3mB2Os8ZuFf-wAjsM
z`R=v+a|+dz@O0fXs}DE>$DQUH*%g@|q6V{FIYX{^p=yQh`Ws9O{gm#2*BW%yX1zE#
zlWq%7Ct`N!yv5G9xIk~aixaER^lP`odDdF9(?j;N`QY~EUVLVlPsfz2@=5U<Mb#*k
z?p>!YY&-@Wm+ML5k}3Sn8J|bmzQl4NE5!h@!ln{DD%+Z+Ss`TbkZgm415Pyrpjv9E
zXZyM*X?_ojbvbh=yDjVGTd0+*EV+&|h904^1a;TMjr(k6#tTsCbMoV=Oo)BqbV-Ir
zNd0VH(|Uq+F~o=1#*zJIuWQBI#^bX6(+%F&d&_au`f6xqxdOefStn-e+t<N`w_M*X
zSTcHNj=2ZVnYtxQ8X2xRLg4*<^R{Dlwq``kPVCrBXWb?Eo+u39aI-QSuDvdyA)#XS
zc9ovoY@|S~q@-XOUskq8b}DqT-41ZA-_By9xE=M(?$?bPHDi-vzZLu}OPvRFtDkRC
zi?I9lIeWAHR&~z@tsQu*SO5ED`}N!SEZ<G&_<Q^Fn~v{5M}kRD&n(v_!`(a)ONYU=
z243XDb*Su9!@Yu9E&E6f-$%W6yp>57$a@*qP<4vi?06$V%IvuO^f=I;fh}efsGO0l
zwUfPwn}35gCOT@{r+zR;`2QfSwlV%e^L|iYI-~!DH6E(i$nA?Fd}Zq~f}pOp#c>=}
zA+%C)9MLJ#5yV%NQq)Ivg+E)?R6VBqdwx7mRl-6NmQ^eADVOtAE-~M8GjqLP*mfuc
zfpJ(ok-X9<&ivx#U1_SCB9tZqOTk3mzeT7vev1Z$@(hVkOl!$SAF-G5$EntsIsk^&
z5*OAM!ejW;fB=Qa1Zf#gMyI16SEmcQG>O)0X8{=g4ML<Me-P!aJm{2qmkQ_wqh9O}
z4KYU&*+vfp=2T52qdTii5<pMTrN#^Pj*-oSi25a8NQMoE<Hq8uXYHXWZVc^FP0~Y;
zB8N!drxqNUIChud>cyMWqNpvDJyNASwMJU1LtBDcMlyWkTGc!$f`CpKG_M`PZ6kue
zoo?vcW0{~mG1|<qq*cXsKi7%6_?I&z?kB50&%q-kDK>2DWbVAf2-($D-zxfAYP)W7
z%@s5VRn8_OJWh_4S+vv1DbJp~mBD;(Tw^Af;Et5V{>$FWZ0V~K&=+&5s#w$~5vY%V
zzMdxO%uRv4gOi_0MI10R<a;`mWmso3bU8%r(z+o`+U=l=91^(08YVG`GskP$$ZfCf
zSk`YR*8_Il2jMQ4q%t{;TJIKMDD@tbtz29BC@gDzY8N+Cpbh8TVcT}^1aHRt7t2%A
z&{oN9r&z(h>OGW`b7{e}i?g0sic@r5Ow*wm7FXArlbaLclO$uaY-7!7EX!mYU1dqa
zL(|YKDK2g&N<#_p8|UVqCmr+TY&r`&xd!t{t8+tN`;xzr8R3gAV_800K1f^f0G(eu
z30&FkLT(Qhcdym&P=|*LpN~+FhrbfA%|VLFEJIBdE)+Hu!R6(hdV}Q5lx{)bX|qH-
zZO%5MB?;;sk8SwiIoN+!K_31lr!f`GkWSpIpo2is?-w!1)^{pUq|fFA?lNO|<HWIq
z_Sx<kKpT2~jXJa>XuVr02=E~$K3!zUz%sD)_ns8gV-&=&>sVn}R_+Km2!!UVM!LpW
z@jJgFy#!*CQh|~lv%PfTfs_g)5#m=m?}5C2o(!&HuAPt!dr)|Xjq#~(@7;BV1-r!O
zr9q<CgX7b9lIfB_+I3SgO4+n;hh`>A9n21n%-G+Stbl(V9u%M=<+ZSzr)wAWo91s>
zQe@V>8HDMG`>NyTqksDdLegkadsw#Z9ojjH^b&+8<T0cQwIBrYO!v)G3k`%3audcU
zcarFrILYhxCT5u2j8!i#$z}?*Y3w*3dx!r!`^7gp`vva!!F9Vzy;o4vnO_xxRkuz~
ztyaUH1k=(X*v1|d9#DH0u(Z6V_pbox%6vuc0RRAi><=&WPd@UFjBE`5Rwe!iDqm(=
zKnj=<0d&X9Z>WHrHdS39uPbRTsJ7I(%U#-Sge+c0kjY`w&u*@I$H8>#UH`x`0QHGi
zdNz~QsB4vbi)W)I=cXF6CO~_g%{}rfl5?1@;fWFQqH?GX4Jjs(!dHnNO1Wy-`2gv0
zw7LZ1Yh>jdlHH{(GiY23(EBAyK*m1%53)*Flf(;4GCv<KXsE-<2STMnHE~qvBWO+<
z=4oOOUmcZ!%AP^FGN$ESAnWw|fRxwEI%$s4tY-p8x{~R>6rZ5OrNvQPvtrCXh4(8V
zDYZBExRu1zHN<2PtwWpo$G`En=yZ_cTtE9Z^Rxbmzcnzlb9DZ{Ht!$CCS_t3qy`ue
zMz-%MW8UhMW@Yic?TMlo4dk2aB6gJi&N+n}OGwaFh<sd;H3WLJcYJ*DU5#Z5z)`Qm
z%4U)DZGJrA>5}wU3n?w5USxgp3)I4pRNaHpG=&No^5D!Abm(gdi_IxZ=H9LdGSG77
z`eA*(gC?*{h%#iL0obwirorpe2;8J{lO%<?6(Qaz>5JvUKzLm>?uimSL>#E_T8f76
zfL;7?5B3=BAS^RX7_F#Wt6W<5{A9mpYc;n@A}@&vNR0LX&s3B}a{0=mdGDsT?(Fl@
zQFo*A6FPL4B|NPp)@5=nh?>b0amTq;Y|SIq8YLf2%yTbbN>H|ULt;jV=Ni3V(JsD-
z6!7lw(XOdZSKTG?YU0G$vjy;NjH$<DnY=I7WS1!~pJY>=A7VX@3uI={tF?RjH{;Hc
z7be;LpRRZEqssp$p3~9A_P?LnPIUIx|EcdqEBpP|NYN+P8;aTx|3QE991J!CHeR~1
zEf#?c6xR*ILbSkN^hjEnauSni@r~&%V$$!@Ff>+U0q$-uw`=#2ee}3QQF6)@$T3iq
zQW1NYlyY?o-f`N@tnRlinHs(wUa?kcdAKn48{G=IR1FS#o9f2!U2O;q4sc*#mQr+%
z=pZA*_FYWLASH@J6xJ0UBn2CRgD3-7m<-0=p7P*dS^>&vl0m{oPPRLLpg}(92l|0h
z;>tV-ITA4Y<JUKwmT6eUhDk~nn1GlA(Wwpd?Z6+j*_Ts3*A4uPn9CQ0*$#&-vy+pl
z9hZA)+76e{iW5l251CX+dNB~Gf7IYPg-b}su5^L^j$k8yR;#~tnP}TG(`@;rfhQKE
z9hqX^f+D$~rVmg=YbQLCf&Y@|IH9NEjY$eApso-0iF}{Ep=AT*>J|8Ld3t*BwqC-A
zC8S%x@<6DW3+}|C>UZ3JXk#yJ>g$-igi6kw!az@OX0aDdWa<LzB})unBwCecKdOvL
zUMAD9nqh&?d`ERBT;cr%Wu{ogq0WH*vImcsb$PJGXx=Fl)PYRO=D(&#Hxk`u9pb@S
zKkY2S%DcUFp`=}fVS&N5PA-5(n^0?9N>c$Xd(aFG8h`J2=CZM!eQZ^h{$G@RV|1l$
zwr!kL?4)AbwvCEy+qPY?ZC7mDwr$(G`TCsO<93hJ-RJHx_B-BR``4c9nQK04&h=!A
z#_ID0P)xrEia}Zho_JmYJL^A9%)b)COkt_~Ym&<Kl`$Hl_9jOek@wnG16Cx`&Z-A*
z66S%Rj`O0D*w~bs8J@XJSj)7YNw)Jy#<r(F>`XrYP)vcqq@U>7<erLpOC!rB%n@(j
z7)4cN?dKfCDS~{G7mNQ-H1QWeErbT!CIA>9N=QS;M*%rURzk_f@BpnJo&Ih((I>e}
zmJZj?puH}AKF#kJROeuv4_yF7C0k9v%wPU8Gtb*lMeLHL#4ZE)?2Mf`Sq_4&HqtX%
z*osA1#20be_+omcxjet(Y6j+(>yznV*OoBN_NvtvN22?x&3l%VOdj$4W6(b+Ksfl~
zkUDs9H6zm=e63?QPm3lS{By>P7*rGrU<BFeu_u^NW4M|#MP|!B(ysHsi&3m#LRoII
zu<Ki*xkHb!v;6bxamGsM&04=ljc|Xh`FP(~J%)tXz26+L73FMtz*v*yyPxKFte6JT
z8ep=B?_<bL_bcysGHVi>_Eq2}iioJF){mW*kV*e4S!5vwe?O>?@=jA|qc5GiJ;6oZ
zc=eb}v{AYHLNT8tBR7>gcHk|oWR+|4PF9OMKj-Nx2=}}u9Bz%0y+BJFMCBo;$+xBI
zyC|KxpS#T|0WV!hrXgNf)ohn@!WEU4??fB%u(6&TCbMF-)5P!mn;Y?)AAf(OvSlUy
z_VV8kjDI2485r3+I?(>TY*<Q`s5-eq0RVy=e^;HqJ^t~4{Z5h~!TZi*DfxESlmFY_
z)Ymhlwl!d(wlH%0`vk^c$Ho6})*2-?A(k5>2YO`nayx`%K%()ogZqhL^Y2sn`4%^w
zFKT41?51;b*7<zC_e+Kwe;x4D!-LG~1Sh<EyaTJHkzi*H0wXMYZd6HcQLLjK_>qnP
zJOkMvZ?!&h%1Q!^^JbGq$@3{!x<^n$vYDDq!7b{2=yJp}TAEa4#OImr`B|wW%^xBd
zDZW2WBHY<WZta<tP`&8W>jemQQNfld4Z21!q67`N2(vP}hxE;n7pht?SZ{2T<kgJ{
z#Y|$mVmw{0C$WxGBTLCl^BBvDk!K(|p)jWNz7V+t3bjuk50@w9xgb$bR}|@IW0zgP
z2QmSv%_`mrhCZ9e=*RT|mCR_E#E1Be#P|wrl$p~$o86#K(ZI~YUc4vfdnk^lS-?<;
z`4M)UoIl=iv=*}{S&E_VWL%sAJ1aCm6{)&2)^x&rnuwju9EA=(@xFXAy@^LGw|^UZ
z&__8h_J-WHSH}V`#h&P{sQp)W0b>GRlbwgvZGIN}v)oy&P!nPt<zeAv%fSXg+X0*N
z>E6#I7eM|RzH#rz8dFF5Wd-|8W+}#Cf=X@df<yZ{{}|-rt~}u1M(~r9ch376GrqUb
z{h<M#--57{G0bS9@O6+JLtlV9Dmi^c^XP%ed?v{dEND08DqJ7fTcOnUSn(G-L4l{l
zCZH14L8lc<eIA4KFGwzSV-^_?u`|(3W9UvV93`O)YD*au#QmjH`Uu#0`4i_NA37jI
z?B6xrZ<w(*tcx-Y>qEf@UNKcjpKq=TytIkz@W%SaTbi!$DN&;KU>Na}L@WIeJredV
z>y1(_gKl^vJa<xJG_MHpOmo>&^$&};gcdFrKRqwP>T_S(n;49rWGzhsaAlnVGvq?3
zg|X-1Xo`8UcMKC76gwvGV?zq0NTz99D@6rTz!4$rXlt9SI!V;vHvtfP6RnA>WLJGh
z=Om|6b}b|%*j=bpC0A=8m`a>1kK{L^A3xpmJ?C7d>hAW`Xb1tdI*MEqTv_JILmwDg
zg4@=MKN-Eh1UDfw%PNH))03BkU8mQ2`p_Z>QWB>Zh;jpCpkt#CwbQG9dQ~GTC37E9
z`2%hZkO(N(p{r2$H)vl<6DdE_5rP$CrX>PZ7txn~mi<Yyrd;_LFLn^s$&^tdJns8_
zf-$gXq;prz`XS+-0~uYFJ?5&i0>(07NzC2(0W^@QIHNLu`Bg;KmN+y(*co%S?F7}1
zPP%K+c>c1Yd2Y?vLF+oflX%f%0Ut?V;w0Mzrq)t=kQS4Sxj&xN^cheaV@MAjW_eSi
z;3cz+AmQ$n{46Q0W#UY{wd`;=qU!G}!o`bWS$$^YMS+CB9Mt3dMs!D0MGlEL-mK{{
zESV~^z+upSLB28IS`J*-3yjT@bKyR6mNiokVNjEdyT;jO!X=bfl93=agi=#e&Y%)`
zl8;NxswWt1qN2{c_4AKLjexomk7*-J)hq=66){uG3;s{oHqC~CG}s%OoOLe)*oE7z
z2)S(Ml_dTYO}a<BI_!YFU))z{Eu)UP^pmX3aFW~ERVNtPjoPtS=r|5*c9XaavPi&y
zEuUdV`C`AEuVkV4M&?E3(9n~jz_S`13SwSRSa`)EDj!{R+7>>K351$mR|qeI1B~o-
z!9Zm?!9{F5Ve!$Ygyt=_pduFH=Ty3**F#fTewbBs%>WL)??|ekz4vArR)i^?E|Lm2
z;X4G?$@8r~csWz^A&-+#QSA05;z9&`V7}V85NW)Bq5kv6pvFfDZk+!v!T)Od>c7gm
zo~0wh|GNGjBL+HT={uYzT<65#(zdhygrMYtc)M3QvTjEDC4DXJvNWE}+Xdubfc~W#
zg;<?+9Zk{ilkS73B^THs4=`2-R<hb+jd|jR=i2}pYorBRvLL5qJ*Esa7S+X`el)@y
zG2VfNY1<q_8(}mILfZbE66%n&Q@|gvrGo9<Rv{H7Oxh-NgoNHj)8*mlG3G}^42GNJ
z1x_s&s$Woifuf+xXuNi#gNaaibcXSiZ=*zrDx=3ApFo&@!!&d(^y=ALqL+@ozA(s<
ziSPeK*6L6X7K1sKG#>6G6IIt!E*D?g+h*xy{4t?M8B;zmq8_;vO8*)&>Cw3LJB_aa
z^Up2=xEm=9C=3_+eiHD|Hx};2)jyHSx8EsWy_tLUyAHv7;}DCy3OeM+^6l|wQqXb_
zH_LKMiuScpgqb7BjW3Bd&~d<8i7EA0+!j5F@75Hw-wmsI!ZelRGathR8g5P(3p!UM
zz^N#07i2E%=b8$2nK#c~LXOlXNcr?+v@#?;yq|GvLohJT*uw)UW8CU-^~lxhxvx_o
zzW38Ri?JD@KRsN(Yl1FcYzD%^Ah=Jx7Y)R=BCC>c1}VBz<?<V6bI-%B-Ag=y(`1mx
zY<;>mZPdF*<!e6UK@XZ#;h@Xi53{R8Amk~yEoY;dtT=<jhAkG`cHQE_0pg=hU*VUS
zg&Q5h;j+D*DHEGe`wNxm4cb60D=8{jOsl<&h@5zV<ZcpGL_hl%GMSsPf82M)KmuKH
zw7hAW*exG53Ux5YC--M9yklC=sH`lZNRz$_Y{eAD(z_Ezw-NP`xxxbC_}Hrpb!G9l
z^kd8om??|U-#0>1q<=LEn6wQ|VQB8&wrAk!75L1kAOJV6E<WZhx^EK+XX2>LjFZ2V
zU=f`3c+OI(ZipXNM~d2CkE&yu@r5JE>f(g#zoEq+14$f*vf6t_U&J2K<-6e#!EJKv
zU^Qk+_N2mvygljw`=A|2URT8z;A^t{;9TEML+|E_%~<NCSF;kjrL85cSWt00a;^zE
z5r&TC=($*n)<JWAS_hCCMo2zeby(7}ttyBR5Nkh#!JyL<bCZdGH^y<ofh`^G&Yon)
zb;2U#P)bLqJ)g0WgfP7D#F6(sGDiH-)2Iz?V)uBM(1^e&XO%C*(A?jyiOtOKkXX#F
zXim!!O@W$!k0O6Zr}Y@=gX0t1awtbgyv)-lv@!a=aW>=q_Hj8tvf~~wGWl`%lHJX7
zH%2pcpOw>ZqGmiC5|;;dMAYT`Q}gOR5}wW|o5!+g6`ViNh)4bvP)*GDKr*k0%49=`
zHVt5Qk4wS6EmC$!>6)l%2b}#=@d4Vn_tcWk1SenLVm^TpJ5!B;(HxN-cjPO4{EZvL
zp>}e(rQb#UOqxB@a$>gg(fN-4?n1@|vp889WNW`~cBF=adrRHgqcxPve#<^RC$<Zx
ztiOlFqcqww^|(dQ&>N|yAD?3jzE6?xFe`pli6}k*fZsgtL}deE$2NLsDoBGnX^~+3
zPyP25c0Uj6qq>W6ailf?qu`q1{OQN~iX6}%)W`&a7LEh2gBew@9aB83cHw4-l7eW)
zdK+H=pu62?SimkxX&6@nPdWFYK%V(c{d2@HfVy3U=M_)ucUW-Q-Li4>a;xzE#0`ri
z2LBQ*q?7A+^mp5#=o0Im4hV=d7&TiPOt)cmc}<GOs0?ZW3$%DW+4KT-{Tfn04z8=j
z>#pgquPEK?uMgp`f9lAmr|5JTzbD)$zQ1JumH->*{Z)IZSy|Zr&VRT61^<m}Y0Q&F
z{vLPFb6C>&%@7FQJS@yl!)TZz1q6$i=jrvvaREuWtkm=Q@**P4dH!z4jm7W#c`o;=
z@hQtPc$%b(;%GbH>cOPdrhqB}>JJT|6A<4%-{9tp0SFC|ReN~{Yp2j%yE{YN(4=xx
zx5-spK5l@vTaoM6s5v;&U_eu5j*>DY%pM<Kj!A0vHVj)rk#T=o{K>ItnK|3XI#r#W
zKzt6oL&2JQd!8KhDJI#5DiE4-&Jwi?3gYg{9t+w~0fa|QoCZ2KuFx+p5kj{rbjfee
z6W*e=IH%0WNgYe|c)e+F&=q^QO&k*#ND`670}d*YzSFK@)t6hVjcxH*C`13z!jKVP
zQN`y8?)ao087u^~HcAoit>|WVhpA(?vUZU}VbeuxnRk?c?(}Oly}{!=;0UqS4x=&O
zPW|d4Q_4Z~sX0#3n^8pDbQ9pmQeJ<SlFJ)a(=?iZ7kQ1XOmQ?JIf*;^Q~r#~TxfgH
z7sN!5q;ug54aFFnAo+{lfhHS!AC^5#|FLqstoE`Q%XRpK6-}gcH20yd!NM(I>J3R|
zyd`99`{XKimzGrrE{;m$yS4Sn4s~ryjGTTkFns%V=kTscwMj(aPtr)68QTwt`%^Tw
z0RQAwqSVaz2^~GL;6a9ilBAFA&RqQ+;t8?(ZGT-eC8L=<BhtVLiz|419tT0AhPU5r
z!E`tve;6M~F8gT^3gej^q>bd`v!CwrG_8U%OML7JM89;FyZ*5&%h4XB5dLo1eto+)
z|5e`de^CMhJxV=mH(^PozyBxyMNj6WC^?lU0l#raX>3D+N6=fFZk?kft1Zwbh!g3X
z<Ii$?He_?DwLVc%5GPS~x?k|?;QjLhCX{;j6Y_%$g8tP=mzRiyo-foVtqU{+-XH)P
zcpnfrgRi?&4H&KVP>xwe@(2-RQx^yXXb2pOKKxf!$h6B2!C4$%H54{55m|q2!1aDG
zpIxsAM}~X2F#|jP!Q>WBI&5xJRM&PCt8L#KxEP;qMEms^9v+sPW82wOfx8LKHC-SM
z-|rp5XT9Tx!KPr{^g|aSKi#xZGuI=5ig>f*6*Ffb3!BNMgwE<t%2P3&=TVWTs)O`o
z_-1e=oORc>c_g{{3Ma+8=S5Apx@qe4hCmDsJ_zNe3r{OW?P&eRMRl=N0LJc18)UPE
zlA8rG$+i5>oM;ea+DAGIdQ|lfGxxpgUwhqO*BtB(PfqL|)hhMY$%Y#3<-uCVyJo&K
zEzS4g&04+BoAo!)_xbaXOxj3KkpSDNE$4@*$%smJyb_eV&A22!a3zYu%nR&{{^w<C
z^^8?ARF6)#uIv0H85QPt33sC7lL+d0=5{|0Tt0pus#6Mh7#%RG-CJ>wzRJfn5lP@a
zoHD-Ei&IXlr?={!Yq^9n0NX<Iow~y+H-8Yu(qiKkEU$ZX60U~LS}V_}>lOG9g%{>k
zGz0-NO9G6Mk*?>%O8JSij9HbTu)YLEkASZSvz%Yw=9gP<16Y5I>tCkA+TxKlbk#zA
z&3JuPUBc&F{^>%5+HZG^TzD$rF~c|U_>$$@(pNJZa<dQKMP~)FyZ4@D`sH#{EZMeq
zkV=usq%zQP<+7J22}QByp%Z})w}9U+QE%z+q3k1)6LwqziRbYfBv(FhlP0#nPnwyN
z_w_cx+qV;{EEVer12vT){-Ar&@e=sSU~H9~J_KQ_%HKF+FkObbZPYM0^iuVYEZABx
z7qPKI^~)q9mXnJUv`mn<_Zqp0pnkYaABEL`Tu`z{%(Q^Z?E!H#E2Z=&*5LE3XJzuv
zn}yboQiK(AP>T5^$4(u2_GYaDlkC#LyP6s=J*zGH!c$<KY!22;u!_t(cwVioTOEha
zUp8s&S_P%t5s<9#)p&O@&hUUcRhYVHA6*LX|CA1;$nKU%^iACVd}}BFp18Z%+gO|Y
zzrxACIye%WV9yQ_13h?xJa&EcQK8Uy9VT1yQ|g4|rDSYYn%XsJPy>2Gu>WH2dZ6O;
zU$t7qAf4CABt%~{UwpxN5O2BFzThMpPuWE_#D}ic-3USeTu}?J`IQ}j^FRQ1SCc#W
zsm)$AK|3SW5}{a&cih{8fs0bAqS9XCxk;^-d5Tjsn^r3<jND4|*{8B2iX2#y$W>Q)
zZZ=FM0w9PKf?~m~0mSNQnQT5*^&TC`0~73OcAK`GEi)WCdzRwh6q0pWj3?;_)Dw{B
zOfH<J36dCJ-W1OZB-=THCohk5{SldeJlex;LrIEd;cpVbnrN3Hi9vs_rnb8@;1AJz
z!0N4j4mz#i>9;v0$VCE<+)889&$?dya1Xt4Ngc5qc346=rTX3b#);qLOcWhamrYwT
zj#K?JmlN=?+ZH7)e1>Q4tp{$=n@^iPJ2V$OCU}`J?7VJ*1NeSsp453rqHuxae%!Cx
zx!{L+04U$~sk*M;C~U1USu}*5;DFC$X)c>|L?GSJ)3RNsQV*6C3nmhMNTux7#cEu#
zk&kaVuPig8@csC6VYqrNF;UstV)Y2CU?@{rYg8Uq7Zi^8t~mTM5g(h;EOzdID9bGj
z!HBwr<L<CJ+yK{gLZMZ3CIu!o3Do|CW$p;9{Kv53Tqq_>jMg!yWJHuSCy6|ePM+u;
zGgMiH)S8bm{rfrf8~qe9C~YrKvP=lWjyL1|dq_y@@kt%OH*e1R#{miK%sgSP;}SL*
z<8mYL#7S|S7jNN-_rrcVXc|JB*1W~173n=iK(AXOTKy*0!Q>E!0=0;=<72a;9m9R`
zNO2>i^26K=316}~fwwObAQv+tHLu=?ZFKgMrhn_5Q?Z%W+V?iL%mUm^>AMvxc}Lm@
zcL7AI9`$1h-Kl!_rE-4-5SN8}o+D4S0MGyyFhA*LVT#zvR7r*Ax<BLV0$BCLX)lj!
zGqFL(6F2H!6_{;8z~d7(E-!dd^eFPc6Z%T0P4;ZhV)Oy3Z|8O|G(%Mvd%R->wos6t
ziM^vmwuhdw5F5H3+O^_z=MrE!q<RRL+yP!nnyFeJ9mLcV1BgjA<5^2Xy-2fCWoFbR
zHt8lND0MG#wWYsI2|?U$;1#THA|TJVDKV4pjH>sP2~X=%v|oko?&dh7mramZej<)+
zf!Z9;AELapf5Jkxq6?G|Pa@qHzs`RaLc8`ZzqCouE$;Sl!>6q6P)@t88?mBi1QUi?
zbfkHVrTc#{aVe4QEM%pOtF<3;svQQ)KElPD6BfFs2Yms^uob61gH1NYx`y}7>~>3@
zt{d#w7EPi0pVYWHd0XTsc`VJjTSWu+!#1=|(q6K4$*mv>CI}y(2D-GULuJZ&?3iAd
zT3*-^73^ye&>D8<s&h*&o$ell(~%?fXD%Cho%O}{>mi>wW_9T7rqEs<HXGxIgoaZ*
z!Nzupa@&xUYl|>prBZt`)bH<wzx)<ZiG|VF{wU_96d2k(jA}IqYfq#7jOqeeu~Y>e
zQ8&|+<d+_w$M(E~TpP9o{tawv@KQQOocY1LsuTBV!j8Xq0ZHAu2+26aNfM%t=@>s#
zb1vEi+Hf73*RNVL4ZUlr-y5!dXx<}l4UL;8`VmP1T`~MnlfG|Cy*PylDI`w!JApRl
zw#XeyY&5}eLx47aEmId~Rxp1Et05!9W}?+2cJdW|cn!}pmjo@&e-VHtx*XE*Q~+vA
zCH>b=$Xv+Ay{oR=uU1jIm#?dQpMT1@P%9(0kNIXw)!$6%-_v(%0|Pw<>c3di->K5S
zs=|sRmE~g48+Rxj(OD@p>(#CiX?Vh95DGx&cv5}<sg&0bnQ!W++V#X9c9t*8x7TM&
zqIfkWZ)gPkLek-ULf+jvK>5fa==jsQV78F_cQdff)hAU}KDE#^{M%d7zWl>L-FET2
z9ajd>qt&v|;yL|6(0(AILVC}`9id`0)|-~Rg|4|asD<lV5GJv-ZYk|>*kY>i4!vLE
zM7q~eb^VECGuJW<;p8?L_WFFavaSsR>Ltsh*%bN!on-x3@6S!TuZpMn4ZfHQe+~=W
z&K<#K*MCflbSk=<H^%SFRkX)#JJ#KBF-0nB?QO2^H1LG0`A+<9P$40M4SlpW?N4tZ
z>vw{!<8lPAZ;JY?YxuU$=*@Fyoh~(NcdCSmJ7!XdGG-x{Mvom+xhg@oUJ160CQ8EM
zv;~-x3+5rULg&$xVJ?Q(X-a&A>P~0g)`g5dq6*QTrNEK5+v}MmpBZx3f-9hqJJgig
zJ-bT=mslyZIIP<Hz3G>tI+!E=aITF<w?pMpu~8vs#lr!;mnu)Ty6fbzDia}Cc_Y#8
z<a@M|b3CT~D1$)NSyZ`KB#q8@F5J^v?Sfqs)!O0}T!HFKJ#nK}skg{*w(y%}GtSY2
z2Pn6&?@d3Cuz8;v1{w*VBQ9dxk&CDDz$992o&zOJJ6Ez}PQEB%Y;N?$N=|qq4`8P|
zX|g;zGndUWOdi*5&d!e=uFGx12mb1Z3`8Qc-!k0pQ?GIx{;F1rd0y{I^92OOZ%`al
z<17UKQY(2J?)J^mZ~8gQkt<6SrLbENu=2Kud+mf3g;i*H7r-9yMnO<*<yHrZi|{hE
z{iUq+?6Tw+;w#hr;%+6gbab`?2iv@UsHTB4_Xl;cZ(gtiEfthOcFf?VGvQ)TIxv~n
zac9C2xs{M6+PY0X!tn7AbN%S4kYk7X6I^`hBPeR*gR=Jm(b9}WMY@Mq)JHL%sElwP
zoC^QeTh_t4#mOE_{4#nbVPxiV7G){)^y!DWkv|J5c%#lL)nbxjLaGxv=*$FXeVjBb
zb=iF@19Hg2Vr#Rj#tOK1|ALCE$&(Ga(nSkjW}^eQR)cg0)o=DXDJ9vmx1wKGD-VRa
zQau|QI7jXccYu#uyT$^I5E`7G?xNpv&fdxQ)RlMlfO=oW1G|mVaL3y7$<=eWqE;;t
z7#l~T?bl=dguVJ72VH5S<F8NZ_ZQy&fv+!dpMPrD7hPCayuJ~i@r`)Of7`Gd8BseJ
z*?;e);dgR0{ZF8GN)V4O7lRMHdJlIIrFO=|-OLTApxXvQ<Mir-GQxy5uIYJywR>6@
zNlUoBFHFD}ChP3v0j@Ff@X5o2CH(z~&K7Dp$HEurvyCQdiMcXN2hheqw*p^1wdo74
zwxCs3-jFH;as1sMaS4Qs<giPS2}7`jiul?c5>0Nxj1z^E;_6KZI_Uv^NE1*Y1^T2&
z<VoDeJJ%9qAfRjTh0~{ye36mbTsq2Zwt3_omNH@gan*;``2kN&c>ZUahb(kA+8-TY
zA=ng%cOCRXl$cqazrulLYOa_87I>8iYN|~Fd}x6jw4)y7AzxnXqdD9;Tw5t=*YYX%
z45`IZBZj0;Vf`Wtp%`>XJ_R`f^7Q;djnbx0w9R|<d}J$1hICX-U&MrNiEE1)5K;jz
zdq>cV_o(NWdFkPFZOayzhV_ne%D4pL?r8}~9e<HcgNb6p%OCbaBgHoPnSq@1iE!&<
zpf0VEOmP~!n^l>JMV^!w%4W2xvX(nL*4EObgtK%5<)t;n)IR)rSW3bW!^|hsb)Ef#
zk1`LV8m7zlX=guAtMxrOi0sD&HPNckRg*Iq&yZN>W4Hx=hQXx+Z%*-_KeAn~$k4CW
zChG{CESt-vpWI5#aMqibd{qDl;Q`K+MQo*Wo()!h(5DHYd-bnqW%GjhpdUPEyviD=
zR31(gcK9JO(5?i7Xh0M|2NOg+*7b89Meb)?^%cdYX;i7%)?(Uv+W`CX`T=A4?LS2b
zlH=zzKpRx^bf(+B!mEBTNSTS{=;aKSM^CtTwVOYzFbw50FRl9s8c2NwgULdOGF{!d
zs#t_L>0?;nqjD!5R}GiWAJo|B3zUq?DS(kP^t8;bWv<c2UCL)dK<G@5m*sJrq@3rW
zIO=D(zRdN%pc0lJTh!o_4Lh%&Gx{Fc%jL<tt_N$`k=GM!RCY8Ww3hZPxf#7hZQ}&C
zRp$ZQuUd8o!_s_oo@b2p4vgv6*J+`VU4)yJ-{yL=Wir}%!q_u#d`H_%I+JKEqLqiQ
znEzOQTNq3H=;&ZkbaN0*D&0jw5BE;Nam`nnTx|~|uBbu&eHLvH{Y+x*=!ggm$9y~I
z^)~aH6Z5L^puqq4T_QA9{$}n|;R2>7;vuD$lV#2XCFQduI$Jyiqc9uIi0nj<RCoGM
zs-_L{keERYSgB{)r#0$j!LKdOf6lGqRbh}N`$o9NH^Qm^EyC?>Y#jf8Fs>+FRVD$y
zen)w^xgP3Sm!StH)QN>IyA0TicM1p!`u?!w5ZB~Nd*wVUPO4P;>w9<O+fy-KqvaPG
z%wDMe{a81CgY+5zvQI!4`&1)LBnBAU26~Dm#BwqDHGbQA`q;`WDGm@r3V`1*R8OF4
zIHCYNP;m*oV^&=a95*l)!hnCs^|=C`+kG#%cyeA7w+B;ZJMQlZK;qlnk0$u1=-KEP
zE5WvpD`!g}cywRWZA{jbyHxs^GUQ{TrDoV-dExqpM<^53Z5TT@)Z#TskLDaX88=g1
zjSIL<5oQ<Rqw|cH1b<41s1W6ty28lj*4wmv!J!td_s0Ak6@i&g$AdN=BnCUmDQTHs
zr`lCOEiwMxoT46k&dwnpV*RwrZ|jD?f51u(3^}JFY1e2nrKzb-(B_)g*C!ao>42&B
z&3eWw{T6bDN)83{uV{WyGs-|~(sQ`H5>Ft9L<d<_soS5<w9R}oh4j@sEJ;_1xHHAy
zC_jXcxB>aore4xh37@T*6#+EQA|qPkJi>E=oO&^TJ6fyfTAU0EqwK-=RFh>IH(wQ5
z$b$nnGcmOxL1$4@*>cl8DU@KtN$5J!FX9WZY}GBKVe3CG(<szSLTL9EUKOoIZXb5s
zV6`uam~ej_uGv&md~tunw66iNV(7eGwQoZM#H$I}a}@VO(E8&uyXx%*JAfG4r7j0&
zHpk%2VDZXgJ5rtZ@WbH4@Uq9g3Q46sllT<1=?YOV^L1O;57g<?ax>BG!*VTz&}xxw
z*W-rR+(MrB=vRztYK{Fyp*4Z+4YwvYwSjWIHUzA-dXz1|P6`gt_~XPP)je10m@k`T
zBlZ-n<38yUM`h=wS`+uF^XP_zH`yzE@TLbWcs}{2n7869ar_5(TRk5?XM;3m4@b0L
zv7<9pUVP^%t-juN#7{;V&HJ{l&OhDq8%>z<sI{0?T<&eZ)a^7jS!sQLaw=Iu7hFsy
zOn-02wI?9M$-}sm>qcoFd0w*e%0!M;H<8w`v}xD2Hlm{AaeNJ5Zq+B>C+uP?TDE|2
z#XhF$L#N`?j}M3kZ^<_8=6Ut7{AZa1bOUb#_rLEa|GgObUljX)qjM;+P8C4HpS_?g
z<s-49sKhv^&H`bxhXfISzCLX<*hp9ys_oUhzdcRa=KWFc!cu`z(|Iq9xY4<0)h#P?
zZC8v!QH>~nlbLH`aOlN)LnKamaQ!tk)%wWMh^prNx#DqCFKZz0Ci<|1FYOzt(071h
zNFLO(XtJyvwoBN0QTF3Wb;<VShx-bGsl7j<N(^G%OG-)4YwiKPpS=km*bI4cK^F6E
zZbsLmND>js&HH7W!LtxAGP*c{c$p~;C?n(({|=n<&uZ)knr>t*--Hhi8!3^YP~-)Z
zKrsk~aj@1{pi9y$hc*^$%T80}CEk55Y=cV&4t0LfdqZz&XwdC`M55jOC@5n*f#}#t
z)9?_ex?<0QmMGmy!QY`j5M97&p{S8rQl7bK;G{X<%9MO-g9rB2b3sjzB$QuVy6$xk
zd1wPc78=7l*>B{EVPK=1J}b(k;j3)1q!=n<<S)#DO&wFIQ@Hdj;tkYdt9&Xi2z6rM
zP0i`><~-E(kDWIkQ?O-5qKg>Ain!&S;I)dofo!`DR9Bph)FwJqII1mUJ(hKEiTAL{
z`1e?2gK0!0C!iyg1{hGKn3}j8$1{cX0{QW#xpyW<s8ue&D_lf)#3)(p3~x<?Ad`;M
ze6W(9Twe95Gk<F?*Q83MsIwJyBeUD<-q$G;i#X2TEmuU!ZRZUot66w7=OsCjG$RAg
z(^LoC6bwsO4KfU)A|y*IAKsWE^1ZN>I?z*v6P#*Se+L_pD?GffBcSZ9@}R#BiK#Dj
zCMt9DwMPG5GbLx-F6i)b1doZ3YuhKOtYu>Y5{PEWFVA7W*mL^TrII!=7f3nB(B)X^
z{bP9!-4y@QWiMlifRd9>cOve0Qu0sihG(`Y&zq-~A_p;#rc8WjyJQ66(%fh<?N97I
z)DLYrxx~;B>%uG*fD74~&q+)>b(1{!(upag^?v6*WEMI5*QW~}Rp?uD>9Wk1?$yB!
z7xW^>ptFsUVSv7Uqg~{ju$UUBK__s0h9NQ*m(Td|whE4R+%$)xl=k4Ou^ZQn$TEp;
zL4CLLpS}zj9pZG<FMI4r?9n(R6EzeLZ;Ojiq(O|fzeUMz&@iJE<C$NLJX%n5rF96%
z6u_se!{pWAdiF6Zf=peO^g?ULr4_jx)f3CqcEa|INKYcu>lOHkad>9@@DHN6Ote9<
zJPt!z)vJBt+~%I!6B|h;dx_9Zm3~zU3c8jxm~xN8s-$oLbtRt8o!^@&KK=l(z~}<y
z2FW@Z;ZHgSeitwiK$uZNNFjzFOLR<1Y&#p1lX2oxfqNInZ;fR+I;ndEoP0bC^KhKP
z7e_if9ZFz_D^a6H2x-CANFQIC4&d&;jN|u|$~p{LNi;vb(iv`tjrsY$Y5ggO^hZOg
z8L1|(WTqUM(;xcxh{AP#`S@bi^(F9`fp`2$thE(ciXegS3g))vVbTwW+yGKk!<VcW
z{Ony+MCWFQRSb3t?Oy6q$ngyB;|NJFYg&i$;`RG*$rhl)t8LAMiu#sLci53@3_V@9
zwjbDg!?ZkmQeZ6G(PNVg>7qSU$P{FQSWhjAoE%YrV$M^Y)TDBg>+Jksxh^&<nESUR
z$AnM?s?eB6WoV>N!*^akloyuw2pXbPZu9S%Z~)47Bh`(colPcW`sM@zOlHb8Y!^%j
zgPOW#5(it8t{Z#w{BA0qOh%l-Q|QE0EU<FWw>45JhnoDsv479hV{Y->@OF1?B2e#q
zY2D-g<7JT5Gqx4#Hyz^mj}ph<=+IvZ$3JEy{SOm*PKqN@<r05M95&IFKp@A4c4#z^
zX#{$Zpnm5my)iL>h>*{(OB=Hq?IX3sV@JoXc2r-l4=7?^M3cB_-Z}kv7_uK8&k=P$
zW>^&Ga*io<LHHk(kg*iCvK|Uw))@f(c+q|FtKqtB6Ss$-=z|G{3o5!1HuxLC=!;qn
z4ZQ5hhFLlwtQ}>p1xV6K#y@+?MhZLaEx%~`KML;&g&+tnc$?0^e9Qg1{A@JKopm~3
z8Rem%s(WjwTwhF9=0Q6;QE9Q}f9+STVstI=uNGSLka4xNg?rMt-GxN-<-pX}hARlI
zs{&_nLP&;pt7ngza8>kaZ@Einq=if=ct2^^tY0+tGh4_@jYBCg(*iHGj<lp+!{M_&
z!dVv@HpyP$GPoIg(APn^t!G4zApUxulQ_HUbbD$d%9yh_H9d@~azXSF8xuUx3VB`+
zTsJp#+Q4v<V^uhGN~grVp4}hkCsGHH#Es&h$%voMxxqg0o7Xzi6+KI~r=ZlHR=nJc
zBbpl7G@lVSaI2RHh;jTw9obV;vD4c6vo7n<#_2a&uFVkl9V(<zLWZ#srB`jNB(3Pv
z!Zv}|cgA(L?ls_sux@=2kkT*1*IH{uZ`ZoSNt=evz_N&?M{-J*O+h6@nm<OywX`yD
z0uizUzd7G&U(zFXLL?Cap;Mxo7jAJ?p7z>cpY_W;aR=j~QOxt#jN>}`8uLHt7F1g;
zo#k2VCkZj5YOW;;!5>e-xWyLdvYe%q6xVn(Q#xcI`f-O#jutnRD{Uio9mv1{2l{M}
zT8=y#kaXnH|Gavcy);QDG9{E=pAU{W+6?e;zj(=K9q?!d?<XxzG8{bdF`b*XY6MSg
zxZSv-#rRdi|AwRzFvwUFfIeb|BZ(8%#<&~6AKIS%(<V`w{DkMmj|XfiF2Bgt^j*Sh
zBX&^}2fUA<X(5mLMA*CdJYcfS7miE43fIkMw#AAq9wwdAU@EzBk%;aXn<f+^h|q;t
z*b%~0`wUjH^mrSz#_T!H7eqBT@-?d+&(OKOVn047K0JXodcHnkeg4Tm@rX2Hs`8CH
zm;Z>nZ=u1+)z-}3$nZa@3`Pl(e{~>1NAKaBq@4cYz1z^Oxo#2`gtVzQwQl5)!+knF
z>u)4au+GGZii;SE#AlLTUS5y{6Ww3K!*(zWF@6!91GIxI(85)QKc`dtM|^#~TY=DL
zU)AOdNu;qr3RL`ns-<7WNzevJh2(ro;nDVgbJ#Ifc3ZY>Ix5EaCX#&W5Pq4l{4sfe
z@f53p^RuFKSuc1h(VLYwwU@@0x3cD0;@ewtE&#Gk07U3%qE$F!B)sOTG0rign1gxS
z2T=BI#Te5QjeoyXkhCv|k6IFJpE?u%j`74oJ(@^V3cBKiDv`EF-#5~!(;hyiM3{OA
zYtVAB*zw;Q81gd18gzCb>uAX3*bH8saq{G0>t#mXGRs)g${sdP5Ejy;mupMDL1Lps
z5P2R==Qxy?Us1QVnvvsS?j7uM=yik0f|+)42>g}B4SKY*-iGlQZBx|3ZDa)ttLb<K
zqJWNB&dEy4YuFTl^s~aWS7<LBQ_`lJyRyRU%DPVbJWv(!NacAvl`**?`k*qqxsqu#
zV-2c$cLhcKEDgrlf<Im?*)rcb{>5e<Wi)O=c10~wp)SN!gFr;>%<?kstfiu=&yei9
z2eED@_X#-XWXQCPl?Wq+Ffij@QqFS>`7@Iqeu%bbN1ftmBK3Oj*SA9faZ=FOjfv+T
zvC;rNG~SV%BNV!zORA0L^F}KMdnBMMh1;xoXfn1Uh+9u3W(H0!k1x)P8tTmjj;{zP
zP<kCD;D8-8NC_E1@Iw!`1%R<D=ED!n&vkOOAtY{3+hT}vM;IHa#<p0@Az6;9@#*-W
zu)dR_t<O3iXVo+83>hw=>Np?H2F!iLAZKSXVjL09BOe;*=CvLFbnOEaPWsSk-yAt>
z939bz#K4;B{c`qjWc)V!_*WWzLrSu>3@OAxh1k{UWCyXpGsg>GbF$H)OT@_^?$5z-
zGxh-qLjxxvYM9j!Y!$hq=DxC$Jjs+&+GCePGjo}BN-b_$QSvX@X|)yE9GDoqInEbM
zlJ?Vm&#iJV{s+aZUJ($#x&Cl>XqHO$PH7IX^gIF96KY~B3vz*A9c>(tl-N>gjQgHB
z37$Y|w5mLTtWnUKx8y}!^TJsTYAbmw$mb8x_m{r+c7(vht*Qgse>^Y`DX^+I{~Ne8
z|5iUR`0K=^{QnRM71t`u)S<nOC?DI@5L!<6+U-zmdyxlN`S|#R00BQ<_te?n^s?hO
z3dG~1qKYoWx;lBl!mL}nQo7*Kd%ECnQcF`I=x#ILcd_RBs|6qoB>+i~{CD@Do2yH3
zlUwImk>CI?n0@)TpT9kWfr1kBU`KceEL<jtXdDn&^o0HaBVz`>E_S1BODw%M4$i7f
z?Bl6eQf^PuL4psY2v6xJA;V0$Y9CFUGXU4{ITqKMqCp>FKVoVjEKS=F)e*&iYSBhw
zvLpD3?w+M)q}y#+^$2qh@emZb^RiJY)x|A-&j@4rQC>%dNW{ogQEcCiw_sVZj4zB;
zs2^?#1iKtjZf(l+iZkuM*cY2PHH~nw$8t@P2Vk3zT6JNTxKi3Dr%%Hp@+xWS7ttS}
zctwC;?3>(?874a=j50)?;T+N}Y&zBq>CZe@`MUX+THeW1vzh3;B;S5Q1jOh0YU@5(
zCRrN)SbD*c!r@c@z2<gP+Xh*iS@z&z#|!w8OHyV+yc-{3Am@9wFsJNDxgJzOfR>b|
z9igz*mESthp^bfQFieUX{L(zTP<hsGrP&C@KQ_R16f7twFK11)AIZo}p99d?>m9zi
z4GqQ0R3cRGe_3wlb74#zM%+3gjoc+bYcy0b+(7BTP&6g&)#+cIQjhwM@*X*`4L*kV
zEX9B@Ougm%;RyM-Pe_Z2Dhv*l$DgKu%`1KXW&Z6#T6vD>{@qfbV-$4x2I$J06{qEr
z)rs*C(~9CV9=UcJ<LAJLAlq`V>rTAU;jE3&C8AV|d>2=gp>GKfpLi5Qn{Q0*HXngp
z8aq8obLOUwwC85+a*2*bHa(2JU_V2NT{~Q{I{o;%;zyRU7gm`Tl;xbLZK-IKTtwtN
z&!-rerWC;e`Y{i3Hfv5-9cU=030>rb0Yii>Md5Nk3obpn*4_g1YDGM%XJgfo&uu&-
z2K?tSIC3)Xt5g>-6?Ouk3Df948V2eh%r6S_vcYOC{@hyDY&|aG4YIA9w&@sK-#MBr
zD%VMTK7R@GK;O*uilip7BKBrY&uNX?{MYJ>MKs(#@UF`et1Z^_DZ~Rujt9&y*nRI!
zFuR*Aol)L@gs1{GGC0_`rV#x-IzjYrA^I0W1^H>dMTNhcTK)$<YxV6o$yWsc`LBRk
z{0s;d*Y3W6KyV{hS}urA?}<Xz6C%dU`>AZ7UVd?UpJmwRn_3jy=Iao!{H_6+epzHT
zpdetrJwMQ%8^ojEf6y5FQjl36odG-sg^M*@lL%_Y9CR%ORw+C5KwxvwXL&VID(%O%
z{9|en?>5F!UKEY}7x4+NF2}f;p^L2p8oj!`Ab>KQI~fx9XV`XM$?<lCZZ3vSn3zCC
z-^Fi)99sf9RO7UT{myyPlNH9ybZn-`a+PqFsoTkhMRa1qcPH_{H*6a!5z(E9Q<wxW
zTZIyF!>wC|f2Pl?#kk4*^c&jW>6fK7gS4oR6#CAPx3Y&ZtQ#?pp<&zk(EGt1Ao37y
zRMO&aMXTPTxGqU=-Kl<4GG+yRmiK(tlkuYlS8F+lC(fucMTd~CqWPI(l3EVNptIK1
zcr)WnDDqG8yFD3DH2`=pZ?zkiaR_9D_*Iq>T&$VX>a}1B)npblHr0S)j+^jLxF)>(
z<{fNNc2<{t#ZW&b*{}w4;MhN@;UZ&-tWH7{=jp!6^?JveFC7Y&7oDuVqDYOtBE2If
zoP|Hjx^XxGn6t{#2YC7g$R2FVgvkhry_zjuRrihIh%h(j^`F{UZHhE-qvdYGWiMUT
zHf)W#lTIy8D#)!ZaA@ftGQ*63Zw#tLC#c*hhk7)|V4y*j>8nt|+PF4OsXj%{=TF6N
zlaSW2=nF5N!f>mT_qIienIMYDlL{a+>VxnP^G`5Q@{-_s0@2<%szs2drmr};bM{kf
zgGnR@KU6z^@k)a78ZpEnlMg1v&=Nu%#|NABTXE`;e#9qS%J|Y2#Vce|)Utg(>`$CQ
zY<jP%T}B8@+@gdZuY%6N^R#`ZFCUWu%vCaP2@<Tmc^&;WXzOU_Q)QR-+Vg6T6JehY
z#E+g4RjAw+$de9*v09IhD$$a=s83$%Y{ed6!I!Q}M-ldrO!~nJ-btL0D3d{7E;HCQ
z(8Q2~;GO@A6TP;5w|wp4TBXKSLO`QKuYC?{q3cOuTceDRmba;GKq)$OKk1ecJu93e
zGH8BLFDNht<SsUA=ByN;KFq8|do&Qc2B@Ml;=xmy<P9PD(K;o39j8vO_?n(&JY{!y
z5N3wSc!%(0`<6{zi62P?pH9>b_kNQ|@I)%?6L+6t{g1hByaU9<npn;g^;oQE6ivpf
z1WogZs?~a=viOyTHOrOB4iE06`kc3{sY{hMPv*iOaRqrR5k~LE>|?eLc&9#qu5@pS
zmJS9kPcG^<p4$l3qeV2D>(VzYfE8G_x1*)LTP~w$m5g&1$9WFnO8B$K27N@Ehf%3V
z*Ops`YZ<Q>))x({*%Ko0!x~S0NTtF(cDk)8+v{<<YK6$}D{z<4KT>e3?RUto(}?a@
zP_#w0cMvi>WLt?|mvKsRBd=ijOE<eXrB?|gc?X96iw!aUS!-Fxi>qaCD|Kftg0~Yp
zygir{A!!VP)~rI}oF~GACoP6>R*jTNsz(9EWL}A}JTT_!ACf;Ek!&vLpU>^+R#`a>
z-NzXR$z5Ly84l|V85b-OS0d~8_z0%3Ma@=)JG+_KuS0`uh;j6Q>pe-&Nc#_OcDhL*
zDf1-jKO>?n7kMm?jl$VrJke^;5-I^T2y#$_{2i@3fW?#Xs?1yRM~l%Zn2SP;SIiZh
zr~*9fw)BhOz9#dvbyd5(@xSVUq<6lY?lAwc#x4d?cmJ<_CG`I*Ux`xFY`!`2nOpcp
zDmLB904nZJU=jmc(Mk5Z`=>3dD{?1AQznd)r>krOP;s{}2CD(^%4<oK-mYyMF%@Jz
za7ZZEYvTxGigXEg95N^>evs}RRc5a6-cmk%0J`^Us>|st9)ffAa_=9=y~@9XN0{4r
zmVpPOxaq|NyHl%~-=XlA6zm-Kk^T0hXPYhW%&g)&`}*|4_mO=*AbJDI2QnBSZe&u>
zBuUvjB>FPY5>C)_V26BmcqmbRmdviKhhdps5B58qQ=FC4G9i|MMK!m5$p5)*e57Bp
zK9jJw+!`JbN#d}hb**=fb3n07FSraM{Yj-9>+#3J>443*h)6lpT-i-Zewg(dfp)Oc
zeF^#p{i>gy7{~8Bj$7zU0{iTp8ZozGIW-J|;#qwffsg{unF*G6(&5K#r+KKnSQm?l
z*AwUT)j_y+-Qr?-Z{DQPTunNKooW3Gw>ov$MF@&iGI$r?009#~_~zZA3y4BHp42}b
z8Md2pu)D|bDO0?LJ|Ioc)v6Q#EbinWVM{T!i2^>PajB*0gU&iP`@DV4tBCQ@>nfU|
zgO2ODoWiB8b@|xj0qtq)AZ3v+P2Qohv33hX^V3+rc&Wd1t0Iqsbpc^%Wy^zIF#$Zb
zdg~)c+C<o2;v^C+i2FevKUOiY)h~_x9>x<gS&o_HO%>E97xdSsu6O!#_1sJi!McGu
zP=8(``AA)>dpd=ku1sO#upZ;>2^;{3)NlaAg3Al<1RbX?xiEq?Oxx4YCss|XRD7C!
zXCx2_X(dh$Gk+itO@R=Md<v%Fe!R6dr!aE;u=8ZK2FCSvF>1we*cqsu1r0B(4H_V&
z7q}wik|As8kl`Z1lWp6&KYUkROw}*g3z-+=I=vt91W)ivoBX&uNdU;g$V2{#i*N^0
zZGp=hYYV2XpL6@?YF<z%kurryu+D6IQKq7K8G4Gxm`9;z+$#Bx!d}c#xk3GSto3yz
z%HzdcUaVlAKI>w@gWJ6QIEz0$B-@<5?D36E?Iskfih4E>mE|H(MSLCx`}2LDhu>(1
zGa$7i1$RcgE1P-%FSe|MHhRj^02zZuMb*N4=L<rgN;)6MU^xz9L`%tZ6Kk90)4MPp
z)9$W{P3~`W2&n_n2Th`%HwW^`E9p|kAYB>HH-+^%So2WH`GDj7zWC|fV((-=xsd(s
zhmay4OGb7$VNBDb#)w<Gi<t}>N>z(Y!hcdTcx*nMalvR6viQ|<{WBYX@gx60vkU*d
zQ-L|SIjxTF9nlSGs?kc~8CoPX@KU6U{y@FDX?~P8dZLGTIW@hNViz2zSF^q_ua>k&
z9fVie2Bg@(6MXX;TS9C{ihm(WCz#fYcyv~yX^jQv4;BC-Kj?=aLvomgqs0(1m2EO=
zqZZf>)`RK38c`dUt?Z*SlOBfIDyK{!By-wQX;nnej5NZi$VF>airTqOjA<|s`i`G$
zAKgW#$d@eQ7NGn!tV9xUCY-is!L8HAj6u^>@nR4LPG&TP7fVSlxOHQZ)H-=u7ITW2
z%4{e|Ho5*2<lVZN0OSYP`snZM%w*_*WI*@yLF8Fy@ifDxghS?QVc`@Q;xO~epJM`#
z+z{S;V9E2xQ&Q1`Xo6l<Yv&)$iwVlT(+^%Hz8(kigkD-fp>0Nb^s<w;`{zt)Dt{2}
zQnu|2;|k@?rPy>a82XiaGIwO)91hsFrxDw`@fxY$CjG)i<!CV;`(E$BUz<34)4#r5
zegBlHjz#wyhwHluwfK+f(ce^CYa43=z5k>hIen`~{$lV!Pw(L?>6o!iW0yre-<zS3
zopWaW$wD;&eLh@m7)H1lG8Jb_9qi5JbWYFC?(kT`p1^zcq@exze*2{9WJrcuw<7>8
zg!_f@b@QMA!_}Vc*;h<l^b7K3gH7}A2kXwN6%{9(a<B;(Rv)nYa~~7fP8(1)b7Xa(
zi&=XfeAJKKv!-sarLXHmPIyZlc->9mT~-xr;R)cGeR5-C0z5;=!n_}cu6z$z%(4S(
zsGDkrFrG*?JX}UOP+f~@c8<+m6vDtZmlP8SrIdVZZj=NoIX4<j6+_o|^PXe!PbQP>
zmeqN%FW<1SMl3nnxyl%Dvo&}w9SP7}?!U~=#ba1bb!tj<UM<S`S~uK5i%@K;9oQjZ
zC}82Bz{MNzyA3$r&kXn7y(3PdQFD$mP*=*R_T=9bl?$P*P;2HbqlNA&HjJ{dn)OO<
z@XnH{AYUWzesW1VTmHCM7mbIDkvraKS3l47v&+Gl5|Sd(<(Zd%sE~g@3>QGoX?$r!
znUe^pS1>d#9ZEWwI^t||ex0*?d^Pw}#3o(7G^iM&2cMaDsq8NorZf=gp{yX+sW$90
zk#Ot_v>dkL`1%K&fp$ag2j*{*2}-jNHFBshYfArc;)m#)9)uQa!J>`(6|-Sh_}Y=<
z?yoeT_Rvpv1Bl^!KgvVzVxb?OIYxqmV8hjbCpUzC$0|_tA~w48kF44NHhIT-A_d6o
znfjqcAOI%;bizprq*D<J1&-F28|UIQVV=8XRYq$ukUM!;XkTxO1tGgH_Bf9rzyV#H
zTB?<a7@5!a)(uwJYfDBO7Q%WG<@IN#@KXvpzen3}h#dBQ6n`WnTK{=6bJ}5&OLf+^
zZTm@^Amr?Qj^%4(jRC7&YjkZJi9Ax$>dPwI#CtVbf!4qj&zQfTTb0XP?Az`n&1CKD
z?t6jKcV<YDRG#Lv+YvpgG<m783EX-4!czTQ5EtDdwS*7-ym892lyR|avuyGntQy{`
z+y`?K<!`<q4mXi5y#*6r-yN-qOPFt=^KM2O-YJjuXP54m##_%uy)YKg>$U%#(HBi$
z2t_obI&VbKAvo>NL5J5vZyE5%`>(9{e_rgYjOM!$^o`Dv|A@}N?z9>Imt&*<*I{$H
zDaB_hhgx@BlpX>!%aw@j&qOOM1o-l>WE0ocoGM{1=X7cp$5E=&)fpUW&GA*z4<$9B
zsK@6W*TuHRM6acYqHF_3ip2l;fWZ;U?6soU%J2hXmOlVJ%aS%@*l`e{5WSCG>Q_{E
zs$qciE*?_6jmP0~kDEPea}6*B7JceoT#K``adB`QcK1pT^0HsjYDsDXs0fz+ufQCu
zy+sSgu-cp&H4@>4scBkH!_R?WQ+OODF_&xbBSq(DFpy3o=K?y1%8LDxWYr0695&#2
zk0_6meN_gW)uVPq(COm^YL~d!P{}(ou*qvfG^<>Ms1Hcr#J%ea_o=%#lI_G|R40y3
zO;^cP-{~XD`s5^xmyZW`jJDn`7=xaXay4U#_6}3jACJ8gs*w$n0|KL7wjj!lA2hhD
z>wA0EEwJ|l74>=|(ej5by6^QYOD_T02koY&u4_Cxloe_Q9X6H@)a~jk7pT$QD_e{@
zb-hapj!Wr|oL&^RYpTOwlo6b`=cK%yXBPz>&<L@m$dp&LXvKG2OCb>7v4JBOhx0{7
z_sH2jdw9i_yBERW8rVOt>}?Yx1j7oIXmK$Y<7BG1xVcemv~M#=kOU#+!0(4yoVG;#
zVVCrxenuid7QwGW{|cWR3A|)gh!9E47NG806oiS$zQgF0c7!$vE+Hq{GrkK?JNG?u
zysTOq{y*%!V|yU#maQFEY}>YN+qP}nNd*<#w(V3@v01Tg`(*X*?zh*v-o5wg>wG;w
zV$SCobB;M~$s)phY@OWKlH~>jYF7|Yy$OY&mg|ct)*zpdASF}ktKntpeZ>b^VH4^3
z2`-MA@BL<T?cx1?BQJyzBpSKDQWdj|UOxCprBkyX!)O`C7@WFa>ez(|OryL9&9m=*
zQLqWT_eQSXc{TLYl?DRaEa*6_t{ZjZSJIao^*I~KXK-TSX$}X#?N_Lk+}VIQZn@Qo
zRB*0pKep&c9UCx53@F&_`-Yc!9#Ax&S73#2I~;0=uBRfReV?Yv{$0u*e4*a$1NF>)
zw2*2ljIK5Jjmtp1;3&HUtM`X!+jahFdJhi?;)7eepQG+{*XRzaad{o8KVCjO1z~^0
zsN{%8RQ43y_cq@sMct4b3mKLoyyRB%#UGJ#T>9D`@kGun<gH^DBz2>2h{Z@6J^6Bn
z*2k`;s2@%a&;*tHIt{B2RJ-Pr5rTRu93xI@P6ig=_n}%_<euYlJxPkg1B0K8XP(j1
zdfNE>!q}fK_3r*M34Vi(Bv1Y-^FQ3-l>c(f^p$S%AJ_GN@`wMEQ#z9`e|W(^mZx}4
z__49I)TM^tN~r`~p}`n}K*(436X&Wm*(7$AMtCc{4>fun*W!v%pCHB^5vAb0B78sf
zf~(1=%Rm5?En#c>g1jFg(Y<xyM06yvi{15oL;wUzS8+wz1G`NGz)>#|Fp=|enUrIH
zQpvB(DG9j|SzB*acA%OFHiC%wE>Sh2qv$)MQG+$gwo?tY>(fYrItEU`<b3O*^=R24
zxGHYC@uR#H$!KiYjA<^*pSJY{zrjx8%q9MbK`bWmWrWBENdDF<vHivN13<a+f=aH<
zZU`G+xWgJdgwz`az}2y)>|b64vy+5h)GnHQUqkFhYf7<Q9G`NGSk3E9#q|`so_N1=
zJ3OK>^b<yl*9?>N@Qv=^gVPe*wV@nK`1JYt13k)!iTE-zvmGvL&O_9}tX5QQvu_T5
zP#Q5k`7E_Q&h9*}J+$UAQCjF$_|%|kpO84-8|%$SA7NMJYP@rqON~oc&4o0PT&t*F
z8<rZq^ynm6mBI$%9ww*~_VCqxnOGX>+jidtlHo?my?d)<$<!-JmlS7r2IFdW{Gq=8
zi-y;#u<5n(@C-%r887h+TKkX+&v#*FNyW9-qEh6{NTp&ZQ{ylR6wd3H%+k|SdxWUj
z;}!l*{_0x*ag`5#_83|9W<v2NR+Ag=;DHWAuh!z><Q*ELWOPaMl?`-i1qhc9%7B6t
ziscArUa<Vd{tIadwguSlPHtu#Ej>8#0&DX>76jhEMb(lV0q9$qtw>noKD=V0@E9?Q
zS~YOwRZ$q&;=~;q#W~+2HyKtn4P^=syHBsZ@q4FCui@@4{(?AGu;<m9-5dx%81f4w
z{GgER^#cW^?xs{)aHGW?XCdIoE@@QLTmO|}y6~ziDCYBh50MX!LW1sR7W-KkGqDMh
zyy~_bzNU)ms850v$w4)0ptPqRrnNGiwK~+;K(f-&a*dozhlA2ekK&FCM>j`pz|11n
zH?}A>_H-v5M2&`oYUaN9f|@X+vPVnDd&8IQv5aAFiIlb(YQZKMe#{>~?bYdqZPq%3
zBwgl=e>xb1(bV4Fd_}@s!5%Zn&aIN8UJH>X1w#IU1$E&{$Bf&y%aqYpB>8>hBl3X}
zD`9!tU!XQT7SA3TW5S1Q@gA_xiBu9`oXs|{l1JCIMCFBVo0pdF3#kV4q%s&Hm<zg8
zf4$BrNNw4r;WD6PjX99>83g_GnREA-;YV<&WHHTG<<tJ#2mb4<`)@CA1?H?I;X@yN
z2iN`XQ4kT6`=LdlLm>>%KnMuq!Ea9Gy1h;_8(MW1GFm#yH_J;pdV2Ws2#`8HkI40x
zdpY%w#NH0ThhB<jT;$Iv=?!3%bFBR<RL<pF%#^Y~V5Y+W@xdhkNYzQ`^N|JRgI6R`
z*rT+g&1V4_8wuejXn_$8s<uSl^<X|`ienDor_=e@i0EZF#Xy-=P&kqBQ$5*J2__d~
z^QY!{01y|qKzvWQru{M%c)D@RAg77=$kQ5RpJIttV6mRD77jU5+9%82uYO1Ru4Hrj
z=4iJ>uqX@<9pZ={=0~|_!wrE`4V{N(gjE)2ssXGx0~A$zPZni7_O3dfC$Yku`$Pk7
zm?RwSRuW${yPrhSb*!7zU%Xe#x?ii}ws~9{PoB&+KLbY^dUE@8E)2KVDQlkwY?yhz
z!is|t-cH+a`%#!P7rNf1dKdq$V{jxGFNT1ZqEZxrrCzu@$x>>C3ih~UHGjCun@Vs2
z`c36)k;OySe`Z(PiUDSsCNP!7dUEf6JON&+OvxqCC506y-nlS&;yr=pSDRpSO$qsk
zjd?I#F)9>p(?Hi`Pka14Q8!-8FTxBkZVJZ|W8Mds52VVx*eK6Go-;`IS{Shbahl3V
z!Jx-vhleR|nS|w_Djo|Vply*?5_&z>&U49voHW|K>gC~jyHvKq=Ksd51t@^|T8Z5B
zw7J~2xpsfdci|tXPMnYjVxr5E(Za$T_W0TcQ%ag4J^qw(-d*u-Sg&8w>@lIS(b$E=
z(w)?uiZnkzY5beqhK3IbU;d(u8Iv6SwNVG;yI)-$()cKcbBfjQkK81VwUtO8l^D^h
z`{AunS`#eSMwJwKMgIl23>4acc3~u#oc`aQ248Rjgi+Py1dJC)_AH!4LPlCeO%mdW
zw1m`4wAp*KIMouXTt!mq7P=;t2<4ErXWJSJzK2?P79SQ!#{mYco=Gk?693JDu*1=L
z1l4=V?nsF(UD*YRlnpcl(}!*ORT6GIr}#b^04z4rL1&9L8(_KNzNe991U@KR@3vr}
zqgM*ws4;fg&{d8y71_0(r5Np}&zLKyKhGiqPTp~F{+5UIAIsRk;~`CALuxRE5BBm6
z@tR=UQw|)K*qe{Lix-9s)U#Wm_1T|9nOZyB_;|j>(oIx3rCU`Inne4Y9o)mahBN*$
zkpd(gf=uoRur28jHIVf={UCS9eB5)f2ikJMhUc(-JLeEY7ki89-%P(q$FTH}a4EH4
z^{mP)(bOVZX>bhj04zZ>P7Jo->n!h<4+b8;i*z@0O*&-n9b@F`t_J!Zpej?aO&kKU
zTTPO%MRZN(llPETlw3}?;iRzt#rRo!yXnG9CaW>tkU?VF2~mY$!6#3>sn!8bo(>Bg
zGtjs@44pNiL58h7ERL#tcOs8-j%FX?(TA8T^zZ}a#1$R{K_J0PXGBU!XQZ>E&(3m*
z!n5;?RiE`?Uf56@BV+F3KyO_xGaoB`k;aM`Vkn8SN00FAO5aZPvXdJ$c*OHH=y^{M
zlo~AI6Zp<8%7_J(d4Za<HJufmbK17G`R4B7BQ679Amx+OO%0pM{p-8jRY$Y_6V?O|
zJ2i-UhR=q$hn-3WK1u+GLWeD7a)Ya;{2f;|fxQo&!t5Y;7tcc}ki<M2BlmAisE1Ys
zG6YgJnQJlN5}x{3an^^mY65EJ9cVE@_*?=3u!k88hIn9?M_hIBthpmpkL;GZ5zWzj
z`t=UN%?vq^4D!3shzU{YvJm-Mq&lIRLX~K<bH;kIS28J`lMoTAC@?0g3^Eb(0=d=@
zS<c&Olx7O?>Ojw=Yerl*Ya>uV7{e*u8Ys1To`oJWxDGVz)1wF|6E0awH2t$~9!py`
zEIzT)3)!%DquNFG`<GN(KxSJq=)Rq@r4OM@T%-m16Mb=U>U6?>0;erPAtV(JduLpB
zps(!V6nzg;nXG+VIiQGplyjBl+GC*Q3EcZYLrojT3-`nxMh^z68g@rqmeKV6)Uy2(
zJ3mHk)V|H6R4CZr$#PHE%5=>A75s8?7ftMzwFIp`UtB#x-$wKUosGqLJ5umj8cri>
zG9*E*`1By5qwS@7ZYtWqm{1e<CKGGT02JpNJjV!ForK6GMVW=i;LZM(EaY;_m+|as
z%>qW_4#UL-kHKuf6=iX@GdtIji|EP8RSVhUIkrtX<{DC*@Qk`&i~1`fPRWtFOV4$Q
z(*(UzDHZvIzkO;J73r*Nyn3xtV&1r31{ArXxuP(_cDy{6D}&R6kMFO^Dko;<)d@Jq
z{qTfuQ$Ay%EORCNs~>riRL-BS0(Svd`c73WythE3OftA$54IQNRi__#_cV5}ytGSq
zuL<8YOE2b9BR!`zJfPVTdHRyGpcKEqE$DIzS|IoAizC{3QJ+?<5$5TVMLB2vmT`$7
zyS=uj|7~I&$xkJNE<EQ!r@kZK_j<q2f@gIcKv;QdHsu$Nf*I<o5r2A!hLT8gU_+2(
z>Hj<wWa_CPHiYa<oeFQ6Q(NM=1hOr`bT24ca2shh9XA6ZQ?Q9~BI3>5-Lr{bQ4-dD
zqJB+CPIs^F-${K;JMP|p&6zGNeNop6E9)ic4dMC%q6yL?<1%YB9!hgLtyQIKWv-QR
zB0A52<^!#`lMOl*%{Zko^F^0mk!5(qG*zeTMRWAxwtz*Op|TWUD{GN3y*@@q^ZUTq
z9XlTBmoFl71Je>|yD_{o_t>6PVFI7h%?7m4J28hiE1UbqPX43ljYs-~;NhD>(d_OX
zHg#e{!d6CyEr(G^$1Kt|LT%ck_O(-p^I^KIY<nDyT6bC!Ap0Xb)J(3Qmsn%)r`yct
zpS!O?<3XhVSK@5vSC-_zIhnIDG%+?dF;)^%c4GQ><46<Lk@^aD#6Rw2-IUR<hVxMo
z!)JgZXKIaVLw>sViS{nBJyboGmuG+j5s;9{WlI-5?ZzAjiZh*knc43DFtf$*CivMe
z)8E-9nmn;9_CkY~ZUe1G+Hfz~H%J{*WYJ)k=+bEx$1XS8ephg9g8~070E8}vRFER3
zFK8JCKfqfGh0#GXCtevGj9$ui-w81$2=xsZ!enu|Wl#Th<mXWw5cb7k|5{j}j;ZGC
zKFo0w<N)6-8y@Jx1|0DooIC;UfCcdySuN&k;tI2B>qulEn8dY*!DT)T3@t0Od~0UZ
z#)z?b=?I8-*=~^6)Bp+0KrJQg!Jz!Pl&=h}wr_T<kG(R+<|;2{Z6La8uXFz$(;>Nj
zuL}JZgZjz`NfvXEyD&&l5m+#Q!}K60?lHR$J16ALHE}a{BPKq`EafIp1gSU^v}mG!
z>gQ$pIDu+D@yVE=a@c?vXy`eb#<2tZ(LtBFGVk>kuU&*h@7PO?yf4(0Pf|}XFR4_q
zf6Wc8Az*{pw4AaV`n(=LhT%$$o!-75)YK|XiYUaVfG`R^A5;@vSaU4yTIBTtFb+Mm
zFTeJg{wBON+^7dp(syW|>e!UejAq)%LQbr$L_djP6LV7-Un4ft6S#gH!@kQ(2V3+x
z{#piCJLy-G>53kh?o;nPX^Y!;zuGh)=LnIyE!PRUm<mcH4^awEqh71}$7yaNEpiY6
zejtEkFlF?oO06x{B<?u1>?6uGfr=YN>&vuWKDRvRWL}=WHos=K7hb#=R8}#fWL(wU
zI3?UMUM>+a1PC5(-b1qu4tvqqk_HZMTIWqfye6Nq!=)C@jDsC@2rPV!EdQPQCNshX
zyR?u{jYuD-X-t+*iPh5#sG?$y0&u&nw3wx9<oYx0up$yzz*}lSE@m`$xAD~3#fGkB
z=a1#{DXsXZ!CCdnLv25Wg?e4_JQS(1_j8NU0!}@?$&#UNOqG~Zvt5m1lQ?D%JFfJm
z{ar;GQ(vD%JyDg`HPhX_kyV#kP3@|OZWfxW*!t^fa+VHq8TtqPLI>dXuyJuSF}mB8
ztBva@%Z@G$s-)Ao9S=jRUn~3?T$wif3?Td!<V|>ULkjVbnY=9dUg#E(;pD_rbs1Wy
zca>qX-m)7yR{IY3rb{kyFS$>c2_%XX5ZWdzh9&D3r@Qx(2geK&*5|J6dOQP(WoW^)
zJ%<1@hf0bl{6rCeugDSs=z&h6#?Sx_KbNk6OtLkoS&Oj*5s&<3I#g|&An@f0`WXvb
z$i6tU%j(0<Ct!DiW9fbMR3_l?PJY~qrPeDO->}42ma>7<W`GT)OT#sYT7@L}peTvk
zpx0W(T~el8IyYcuQ-zyj*?w}N7O9c8ua`u$jVC1X4^qEf+XtGDdE;H!mgZeBD)a!1
zR;_-2h#kpsL~9pLC|`a}_WgyRTko^6?&q23MgB~zxgfD8>M*~FB(py!?)iBVH0MN~
zZjaCH`3tIHFtpg|Gnd=q*tS-;!T*g06)gEcltk}n3rRFdZ{!l*5TUDWYV5~ng$q=%
zTwo8E<8rADX4_nv{c(My&v&%#*kHbO_8J>@3wrwypcB7Zef%H0J-gZ5w7ostzC-G;
zzOypJasBqONvHFep?W|zJ)(&lpZ6aYhh&Iao74WdI3+?*@^T0K14NPwT;Y!L@a_p0
z3yNqwZ56ogx0QCD^tQM1H1P|(_BO^Orv|&Xw=!_WR_TZBdp5E{An5b-g!Or|DR0^|
z5^tT^b7Kq~r<R(e6@y2mhfBWmaGGjQqo%@CD47I%)uIiBwKMCX`;$D&E?H=3A$A@k
z5{z9kE^DBK$pX7b<UlO2Tkneyt2$#-a3*N(z%6!ARqm{-Ln=-O<AI_)!iRzsq^k7b
zB4yV{%$X06qiIsmo>Apq)rl6|Zt1KeI2U({^J_leYi%Y{OMVrVL_MxNZ0nWSho5z_
zu2(>ds35KF;^O_bIo@+*U|C#~hW(;2X_li%Jr<r?=bL*_am0DZ6bZChylbuMIoYrN
zh7e(D;p)QiVu+8<Lymeg9A=?<po>72G8SpS%PJXtoKu0>?Q-K0HAxzreLqPptiMUO
zW;=!xie60|h2$6!MS&Zcr1P#hSx&gH+J&cMJ;k^j9V<cpp?MCBHT$BlXeML$ru<L^
z>CdzPD8LVwFmgLqd$Un^>bZX!N|13Xk^+6a(I_I2;|}1Zi<^W$wKL;!=Haq9F<Y<c
z5ai=3Rl_;;%IhXuL46al&^$c?(_?I)1|Cw^+Nn!$gq(wmZ9kRnZFL*wwNUh!NSm!a
zgyqn9GkzQGryWvTB38q5{nPmZHmaosExl;SDepx3?qP@Ns`+(mt)jXK(ZL&MI!g;{
zqE+K6xAlq^rv0@TW1Slk#mYms#p@BFI>Vrgr%?#f=>{1Obr~U&ZB--a;LUZ=X-sB|
z2XR~8M8HSeHq%E>d;a_cr!%T|4%coyruzMs!FnEN1Itcg(+2Lh%}fXyUv|3X5X!0j
zh3GF|^pbM5Vx5ys06ZwG-jBD0*N;d-t>@3rxzE4Y)sb67ssBhL`XkBtU#AiMvC{aH
z-Q%C-V0@(!Ra*WLBf7J91P=D}4cylM5!zNC9~kVi%j1Qs1It#dO0`18vaI{%^---7
zpW*;-Ou>5y>BC&`DQ8=6SRUD+1tobKBY`Hp%$o8$uY7VHXq<uekA>L+^0jmdkWdU?
zFIKc5aRNQuVK>3@+=c!VN*22_5)c0@Y9~Qc74URYa7P2XlfV|oWTjcSn$$X?$6sF5
z8y)QVXT+RE^88t<!<AIf)s9r>77D8$Z{nIGD&CBGWhbgjjc#7Wu+)dfsHO`?Y&3P2
zwb?t4d&4jx3+nh-YtA`ZK{5h1&lotr!RXzu%aYHwA#Ccb9U2h_e?>wdD?Q38))RBp
zam!!A&yvu^23?IsJ4wyVTZh1f2#D3)tpF=W)HrDcykIdca7k?OL=0JLa4BuXp*pxS
z0{L(Q@rF!cg0%#5k)B9^KSMj@+>mI+N{wok<&wRIgNoOKigzCvST!}{I-NhB3PTs_
zi7Huu^&x|e(F3Wyb!Ukojadz?(KGe*(2!^y5you9boI9+n-ivU>dKLU!M&Ucv|Ogu
zAYBM-rRbev_Y9D_JW>Xrt3mNI-oMF4ks+9mQ#N{RxWmK%M`7sF84WNog;olY{a&5t
zLlr5|KJPN03D3789erM6Wo7f4a4S94^>`7!PZnE!iExrQVG9B9znqRI%K^a2ZfbZS
zRiUfuj%~;3<FQ;#>puTgDOrBowC*jnxcPo%3rZY5U#+Q9(8mkUc^^~*nCwdoY+I~%
zt*zR!d|grie5t(?Qhy^yAKBs}D`K;7?#?Z1getJJ-5_c>tzSn^X!l-NO7RlE4|+<O
zsn~$trB185-%*o_pfo<exZHPe{~M^f<Q(g)J&w7aXm1-wn`f*L3-<;`v{GxPNmB<=
zN&+CMH&dK4ozPn0P$rGbq$IGGNP3e_wj&jWBS>@xh|}TvlrchV2V@m>R0!X8mn-ds
z+zwUO^ryv`VZLVm(C?ZY_#kmJT~AG2yl(t)f2Rf*2@x^t8kMOQ>{0R&joD9Pr^hB$
zvI;HgSr<v;<X=S!yGcc>PW!=eRrnq8v4qk0l^^I~$|kxfE8yzv5V&VsoC8yd>QV+o
zpmV;-;9Z3HpoNE3V^WsM-CB8DfMg|K%QxA%UsGy`&-V8<p{6+IY1?BSQ-m@loHLo2
z{b(hZ&da@pXW!7|X%7Yk=;}K9EENWJ$ut%xLM3tDyA&R5?2%;?kx#uea}n(=v2YAa
zsU<l?0*CaF$n^F$_{~yMQ@@#NlJwRyEXA-=wy7Y&OI<@5rc)M6i7zJ7Ea8N7oDNI9
zh^NQRy*YCQqEfzUOiUmrdoFCs)a@Mpd^L@5-cy-vpHy7x7WG^o>d$ZIiS<<ZNmf9V
zgh4!%1P8_VGr3|oePRlu>i)31l{Eza^jdMnDZ}1&IrX7d2zGHGE$Cd<3v>9sUa7l*
z^}8SQv?B8i?xc-ltNoiu=H2M3OK}mNG-r=DsE(XEAEwp?k66PJOP}khz9%t(8utN6
zKY{ntU9)|YLeOTpdsxVOW7pmnpAccHsU~cWh+be6C9gLVmTOQs5w8mB$*eD3Bu0pP
z3Wse`_&^NE?oA#R6SSBk#tzmW;8%(A*wG^od)!rfiyO~&;18ENh6=l`_mf#r6#K;s
zDdi30bhnlIQ1#zrCHAtv&L%u#ndSw@)TC7Je(z0Y1>n=kPz+`icu6<V32dPj7|O&>
z&b_WbB*nf?PYAvNzq7f4Bz%5Szo7kDXtAhF3K0CQG1q^XKE9@0|MpVvD@z}?;si0o
zD|_e89EyHskOG{KBNdyompFmx;J9YW_A;>m<2XY@O7kmCKLR-3@Z;7o(f_`e4>SDJ
z>LUPJ1Td`1zOpx6dtuULReTC*UmYu)`t&9<IY(vRcNwzw>?xxGR3v*k*#~B=*Z@0N
zxy`IY@rqvtMn3>Rt2h6UD?51>R=!Z8AiUE^SPx=uMp~q(^%0zsQ4K`#VH|<~?CPSl
zEOGPVB(L@bcN71(8zm}9rZX2s!5=earKCX`tqk5rBj*y1g}tN)PQ0bZW_UfUJZ+Ik
zovu@WmJ}#x4%2}xa=cpMwc}x)16_eckG$5nkUb6&Dr^Z$l?Q#B1cFiUn&5Z`(rhz)
z{up|z9P^omN<Cw2nKS~Xn((Kw{jmjR#Hg`^`;r2X&FR?1`~*+{mP(N7Vf7J5nQOu|
zDMI$qiXRbs46@nF>}`X0TgM<awIL=p#(WU(mctOA8CfxItfAp;?I4a82KE?G_lu8K
z)n0L|6B;T6_po2PNlt7>s>64p#_1fSN1oXHOv8;?^x;eIsjBuoH_sd-=&tMYAqrEF
z@4_Rx2{>azefGPlB=^&4F0qo5M+qBG^b$seYEYVj?@|&!<VI@GT@5xWHB^N|!1$1A
z>d0kZ6DyOoExj7c<`6+TA0HwctLjy+r^#5sc~+U4N3&OG<PpZ%uFGTa)|w1C7`YOD
zP!k!moJ4wP#z?2ptfbqyeJ9pZ*;WvD5r1#?_<&KLexA)xR&qNT!IFW<BvW@Rws20z
zyr9xK2{>*g)aNT{R%Z+;s>`Coh$K)jKykV_(Wh3o*L*AFo1-G2(XCIRoS*QYmb#}x
zD6VoyqVYD7c#^ee#3*;V&ZrfL!m-uric$4=h})-E&zA(Ets4g_)b6uQgE#mgZVov!
z3B58W?HfV2>9Ea;R_wx-OXj5wUEqm=5_!+M!kY8wB3)vZ^obg?Be5|d1Cgw73xs6G
zzV8Q}-p|Y6{jD9*ZhEO2Nvh%JJL2Ju2{jx1BJ-{O@mu8CJ%cPEPUxn?ZEtn<k^#1l
z<s+F?FPoqYg5yu2ck)XnIJgNGT|+cn=dh{@MT4U7QLgnM=|l7UE1yPcaKHt<L2$y(
zGCqfE0_kD?UM((j_R43_{&oUxp(+2leE5|QZzwrMPrPrMUO~a)w+rf64~bS~ti~>M
z>N3*=HB%X8?}jlw!``nW&?gFk#)Qbb%d&#gKL}9|zFE}(e@1C~R5@hCt#hNe8iaF_
z?+}YrZvM_)l(G(j@}*dr*5v(gKm{qb<*(Zo0hJiu3Qn0sZP5;hv}H_=^Oct8Nj&6m
zSV7etj3;)w`XI*?<gOQs^QS&;9Q6phw5r5#(CL}GtfWlV`F+fG!)FM8IsI}DL!ERd
zM(z<r`4L5)9+O^5zb$(O6pg#ds6Zr&EN&*T!XqRDs;{X)$Lwv)A}dg}G98z0yv=Al
z(+m}lEnCv@-~o2gxq0*5XQ{w>+$hsVW*Pt9mn=VeS?N1aKC~8iEArVQ0)}Ir82FE8
zciW9wwO|`S$+8rehq?8Mt{@x|)sEh-_L~YxPsg}QM)!Tl#K@3}h`03a(OjR|4JMY1
zol=;f8Wvi8Sh&ZqY7rc&F|}Q4(NV@1NBe4#>I%kIjM5|0^%GnC6#h$WQLq<>YZ3H~
z*9u0Dha@TXCBMu(Gs>Hj*XBkyu~W^}u_9?)Hc-x_ly7E^At^bL2a&oLTO<@ietA7@
zz|z~F4M%=|?!d)u*bfz7d%yL+x$$TIv$f}+Z2WDMB@*hz;k$0B4rHCf^YOzj<wa1`
zhYjn(?GuVt1eD3|mSWZ!!oH`Dgm>;eFcRq<EPX}7Eq;GbiO|V07Y611VDNQ7B{({%
zpftY+q6ZSVp21wMH6N-ka}I%kpAG|qZ&kPLrH`CWQw;7!96;0B0^cAAv=N8@C@g8-
z7aR8t%Gy`@Dc}w<wqv~DUT1}`$*XQH+>%_QLnDo<7!(*3;uET0d)G^Dgu;0T>PO`l
z(QI+Ku~S`D5V?vdoB|BA<mXnbi0w!|U(D_ARGea?d46I{RGZ(M1PY>aFS<_jJ)Ha_
z3IU*&1fJn)moIReiBg2|F<+wbsT5esvJ-CCC4ZL*Tu7N}_Q?A2R1v)vqx6(Xw!J~{
z^3-ED^QMq@?vhH+odQjypj>><w)ITo>QY5)lXGKwV0_XoiAAnqELc0U-p(&Fvyj6w
zl-T!$uQCIyIA$zz46m8b^(VIbtaIH?Dd>wxX1gjZrz?XybvK+{bgD0Ii8F>(gO-qz
z95;>cYksC2#p4O?bt2F)DpMDu`GIO%*jsaZDU7O7fpgDu3D}`>&KvJ{*qDO7hg{GH
z&fgi?9(ZkHHqu>yiT;~i?%C~cJ6$tb3(mWXNfFq`@MoA7aeE@<4^x#CUGEhS&#3W(
zX+R@~;iVO;E2zMOnY&&`OIQ#AeSrW+E(l1f!d|YqcsH$qzy`rA@t$d_6((_Muo1S{
z1jVJaTHA{-S)h-c>fbO7nCrJt%yV5kR5q)GQeeo=t2g(|t~$*|F$kfUd+M-Fm74(c
z8=piR2t4V@2vtc<cg%pD>hqKcF?|%MO=j7YIu#Do-?zuW^64|$jCTY5qMUy3!yoqy
zoFqigrhaWgKR(w$?Unf%N*ht87ToCr7Mtr4R!7S)b;<JL8Gb0=XO0S$=)~}FK=FU?
znWF09>3ymtyh{a58Q`)|tae!S=U}#&mHA1yrusm%b!qMP(rf5Ssqzl~{dZ_lMgkj7
z!TVOn*i2irq33Ynje|^Ug1MOORi!5l7Iqg5Y+|tyRX0(n>fqkE{{7-3oLkEjlgL=`
z4h3gd7++__noTt^s2Z`+w#Z-;K6&)3O;GfecdjQ*i#``O$u?njfoQrAT=g0)cEUv-
z-Q~~j?z^jU#<u<Wvi7V7Q4f{XH5V|*Wcv^6<B2h41(r75986=8*pkY2`d6)<rXQev
z8YdR|SS7!HjEVP*-ri8oUGbh&oWp)yg1+-oSr>fr*7p1*qBm3>6oK=r9sF^_{jX0!
zo&MLSpi(vY+J9t8ncCUz5#)~D0s+F=Z~6DZ?&XE&=Lf#MTyN}Yc_*aFavm2_sT?~O
zedWc0ex2X+xWk8JZs~=CtT9r9us`eiLd@6GTf+ktsRsQF%>7{gMq4S@(tm7T4Tb=;
zhy@T73#Q-e5@<9;4<?d2Mx{_24n+aPHU3?i!NUtXoOUD9c9q1vUUW1ez>!maT-eR<
zrumsK?h0=XF3v=t;#nyR9l#yDmgH%p;P>-52=ypPrFt_mXFRoJb7l=4F-d)R;v*B?
zWX--0Fsx@BXt?@|ixkOv?d@b;R-HIMROfng+``>@u%OCp|KxT|okxevuOO-MI=x0i
zH<^89jf&mvQOI?@r0jG$?igGlysVgv4L|yQMYU@BTrugut^-7?90mm@wkLx^0gmpy
zn_B6I^3i%FII31QQr5^?#hf6wVV;#))&+$cP)wGe+wNV12IUsHDbG#VXs|8&uAQMl
z-(usoZ8N*Fynx$kuzU)If$8l$tG!&SxkIRxj9U}4f0+KR!*fg5Tz%=Tn(NMqR|@lL
zSlL-Ez;wq}qZ^sOeC((n`LQm|N?BAM{HvLlQG{o8*eiOx&mVAkWF}TR*S`s?W+f1v
zB{E%YenX6A3e{RggWT)aM)oCZ#I(d>EiNw~%m7%QCq3tt+!Y&Y5FT~dmeUA-E`1Kb
zrvfC=O<fA`=?kotA%F8PKbO52GH`YsLRb66fN4$0JMWJHCh3MwigINrrv*W^vDF^L
z-Pz*0<?M|geK{NST%k6|GFH{o$*x_@!)f-iZ`y%s{!b{9bar@!zKbEp=SM4UW?w1|
zt*99H$dYTKwL!cvxk-!el1{-&*u5RfYfx>H11RH_@@mXc)GmZLzO9@s+9cekIya-+
z+(nX<TkWjM34J6eXXa-ngGZ8_R^ADtcVxpX-9`y$mc!^#9g|(h-a{tc4TR3D+p1Kv
zr82NE+-74@8)H<)HuG)6k`oI!_xOoTj4B~hkTFgC8HVI!RZ|n;^i#*Iv`ZJS(WizF
zEn3H+=wMsu`~q#^s#zXrF+VaK*Tv+mchNCJF0wPJU>AhCac_X&HW_Pp<R=crUn}$+
z@+l1BOEN`%jjag&okj1z&p`j#JFU`!S}}|`{v46vbRi(f4vMuk0sa$OHg>z~O7QAl
zuH*W&F|fLPZsGp%(hfvpA;&Ma|FbUc;<ozj+wgWzuip5)iwC(&z+u3!P}=7D@e1tS
zx5Zf0E%}up8;;C22MnUAbkNGvg@{(SQ1NR_I^AfC{Ua^xMCM#6>~E_VWA27ohyI)Q
zS35aM_U&TGtzN8c8$SCx8go(63ra<&K_PzngBK6nkWs$S4!tNRSiUt|TJz&rnA-9(
z%JDY|0+uyOCKmz?Yy1<snRjWuTsIFX0bLLzev@PBfFDA@@!TP05bmiVrX${}@Yi%-
zD=|~E%EgCGUBTWd25`r9kW<j5U`V4!u~T=v27+b6efGBw-+799xTHon$<e^A_DUlS
zF}5Wf%C`N|`}UcbRS+W(FFn)RAkpFtJl|mz4+=%I(E&?hilhECa5^p1%(;nGm+xVn
zy>NUD`wxYE=4`g}*45N~<mrtw)JP6Ux+YI3H`?co<_B9*Yh%f&oPN^^)6$i%<h&}j
zzYbMM6Ms`Hy}PGYgltpt04t>D8xs|lWk_E_<pb<^%*2Y?GoKNu0QyChhj%WKB6)r&
z3r3F4JwCVR(gjT5G!@D;>%7u;ta=8b4XC0=kI8O(Hok9=pfSb4#PedR6<VH0&Bff%
zkDjrt5~ZxwiJyA|VrzND9Ec-w5EgGitEys2n59!wrW&>|*HC5)lB{{>*{M?oB;}>?
z3{*J`nP2?|#kV@JY@AbRdOs2ceT<xn!<bA1`{a3<z<t5#;&+?ifBxu%dy9t~si*>_
zP^nEJ5AULlG$Fs$mPBSe9ax$oN<V!!JV3he<!Mi6qh!W7ZE2WP{F?E{-CgMT0~-zX
zX^7bt7W$A>@L0NYq%+xLB*s>mE7Kt8wh#X1D>(lN8VY{#Bp`XigJj=1WgA3i$l7Y0
zI44v)k2mIWiwW;rTG~&vuR1vv{?rwB^_wy+yrE3Al}Xbvhw;<M8*}zYn(exdxhHH#
z+93;V%l?EX?EBaA8XWsXxTt^2N0xm`=2!6g3~q~>fAk|edmStce7E7+EmoUqfTr!V
zK@e6fmU1cNR*q~N#vv6z#5LDdS?^|(X^yx@+Cz(|IS=ias}J8JAaBdVz5~69(4Dv~
zU(xS~yVnd^jZL+g!uZpw{;E@jzXLU%^Fl4S|0kbyRqqgeFd6ennJVS4VIe8xQ*}J-
zqO^p{>8m;mX(k2&@g-e27s%WrCAPYP`H%A?KI=*p7ch`30@OV$kLZg5cgm}e0$KKI
zwyEdnN}&o5Z*Am-^k*6p;%^(Am#?7NkygLyprT~En8A%ze-ESamK_QT;3o<?qfdeP
z1W6j02}>b~;M;hlrT|Mf)4<BUl3d#i0To=6yJAGle9M-;FG17Ns_D*g;cRMgn@Q%9
zv4AUfDL|+n+6%bn<y{EV-zk}tVR^7U<L;6tJ^A)vJ!%D>{Z0(CB6V)tqc*a0C;fEP
zNUL0z!kIF6k`-xHG20^MTaMW`EhF-ld-JAnPK7S~g9h6LHwIi6BL=SJ*h3pKC+w6u
zskHI<P;`IHJ4`REG>}vTy(N}a>;fu(^azIu=hi`%azjP0$Qq^d-E`ua<pq|HBk-Zg
zYyRM__r%DQ#Fa@9OK6A*5^1*@(G^irMRP1@^+`;JQB@3zyoatLL7m$6NRJ~^V-w@q
zulAEt#8>jO$MWMZw@Bja2kbUqzaYPVYli%X`|3|7=zq2x_~MC_i~oZsV(Si08L8ns
z2g6L~L0O9=&yNd9PV@Bv>TpwKN>WxVE1%~mQ~KlD0jy3mvj_PsOqc``{95h?%?K$l
zN?w7VBGDfae6(gW0C>!_G+i@+;#&Y)89+eq1E7dW;1@{*o;*-GmLpXE+i%Elg>X=;
z?U<lp!%eJ73p@zTkzcS#mSL$am&P2S+4kK*^AAqto_=5q;Nn)8Sb~@dZkTE+sQnc0
z2FUOcodfiE6lDi%fViR4z@^l6P}40JJc)MD7+aYU!dP~d#XZ1IwGPU8hZ^wts_2|+
zKJkfHbI}*Mh$|Xv4RmCzu4L(WY@_VwRB0Z=vsT^tfrsBz2iq>2I;y>Yek}n4+A5Xe
z#l;#>>aJGo_pb;KlywWEemqAsB{&&21E9%`Wu4Bj5$e+C_4qc6p-hFbqrP(UTuW72
z@47{2!EthvrGrWtqiTIh!TK;Ka|}p0;R=snLGkIlL?{uZ``F4j;pk%RSG)HW%TD-i
zmbk<+@0*HwJW|DuRNvJ5>AIU@J1=YOdP@=HtnW$PtwlS+vSCxi;)`+?)_c#3rBSW9
zo!IrScj1)ZKfvnRexLNp9+^-{vpadkPb+ahI^Ol>Wg#p9hyZM5udk9*{)`(x`~gp@
z-lU+Xakh)?oudEKAHsvB*4(xD<!JdT7m$|{{2mcY*S}n75!3Z3-xWgn%%Dpa>%Nyo
zOOC~Q`t8Dm{vH|2`})W(5fw->iIIR*rn_D2MNZ_kzc(yaUV4}TO;&0q3$=plyR_qh
zMX|^y59aA+K>&Y_P&iIEE!+oth?j54!aH?xI+D|3Il>U0(ueO_OP2Hb2HKKDREcOC
zXY%Y0!EJxblnmXmZbVA}F;5r#UX6j5GXr;X)s;48vF^nwsZV`F;^y1Dr9p9akt3?N
zM(3giW5mn@>K)-8Dx2M4%w%(AH)c|3F+dhv&<M8dKx&7FqlKA6Xw^8@LW;4=ZmEPO
zdpJwd(@XrG)19(OzH|AFKl{ecV0fKWMWv~s0p;4laN=v&Tvao#HU|%5*3#Gw?<k0n
zp4XWrqWWS{!H?EUX6LvLOd#Q=T-}fWiRz^mm%U&X?<1AV^YQWMn1XMiYdaa;+!6Z+
zlRqw_!Dnj~GxBF%9$47?n0huLT&F+v#{UwYQ4D1VKK2Fm_WD9r{cAhVe@vPGsOG;z
zt+I)ih}ofs54n6sak3-8hX}@gksp$!Z^XeiBUn>UuY^x#CVjpaBAUoED=t)&kju%w
zQ?6O^f+eKg?<pRDD-|k%kF~2SVUV0@%islN0~J9ioPzN$XzVmLx%h4A&%cJ<i=PGu
zSpxARxEKAwv0@cC8u7<6vMM`1XMd#$y0hw;CT}Iu+RQg7#KCSlS<MXvB3fTe3%^WV
zQKq6=@q<WDnTFRNLHOVhy;z`@z_-x6vJ)c7o`_kD-DUW60!!(1$LnU>gz>j0iqt=J
zP-u^}C^Jz9V~SC{?mdc;D#}QSaSzC{4mQZx&Yvc%2x|n}hHy{fA7@}yWNOz(t@d-Q
z+OAA@hfj`9d|P!OQ8w*u)n~2<z5>olaRVVCmkScbeoLngNQj`*Y3RpP*>biS`sytm
zAm+rwNeLpAr+FUSe*+aPbF_T=Y3bLGu50g)?@dZpy7_)c)XQXVZ_ZIwP&bj<3JfQa
zKzdRfHfsw_sVpK^qFGvSj@5aF#ovGGdo26AYg1Inwq4KnAZKdHI(L28)ufWALr#=*
zgEk=uJ1M2#bA4W8c(vu}DYX)DHNj13X#0MY_&zHM8w+}4vq>!p{MYB=DchfCVocJu
ztm<Fw|KFdY{;?ST3r^~vwEr)hRL$2!><cH=-PN|8M^4>wEQ)z9s*7eH=Fi>bUmE?@
z{wK#R<IBEqQnLHXMUxU=Ic7jRJO+M1ba%jCap}uY;S$jBTY6Vgxxx7G=wRfwBwHYX
zHwiHMwbsANs~$O1@a@Tv@VAuU?3GE6R$UN)+WZupCGb-PEd9|z)$_o6vH--PO%P9C
zKxmAM1^O)bIYg=lP}RQk?#*YlZhr_7<LeVWx&i0d?~y*_@g<xjF>D!v>-di%<^a5G
z+1hzqf}b(t#e%$fbWhGvp<!l?E9v>t&2QpO6v-x#Ey9T)oqQ#r&vm`L?5KgKHmH!I
zuGHg3=69?0hl;f{yP|H3*{VP^jeroSZ=My|wsd-gr<J?JI`h&BaCFL-s=!6p;6)hc
z+^H}Q<+>*qtc1r+AG^)@NY^mmbg|j(T-wUl+#+>|{PNuy9}2VN1c9DHf}R>I+6-@o
zF33C22R$MyLy8wCIScusNl|=K<8(`opgzJ`$dG%bK*C%VQ<k@lNcB%y+T^^Y-s432
zAjRwgFm89&xVn+x72IGGVyIL|<#wifwK8iWsGs_D$Es|yz=@=g43ZjfvYtNfkl1Ki
z9L&sv?hY>_n}Thj`zN|M%eCE8#gTEqlP+_&<Dyi#&z&#kwNprd%BiG9Brl>MTY3Qw
z8_2e1$fp7&oEdX1L}c6ylsv)MDxtmUKUdkM$pLPDJ{Vr4Bg=zVWB%e6=rdFN26!l%
z77HxL`#Ws$SKR0Qz_p$nKR`=MdwWSgY<J9hIuw~gL`htCrYq|KFC-+PNvfWyANcO+
zVc=*nS+!2go(;!p-Bs7D->s^!06EY3Z~)NA<?5So^PBS{+r$`lLp>YK3I|IsYp5(s
zc4#zBRq$y+*T_nf21iF3WML~lm7K3b9=58QmX}S2`|YASRo_|Hs(BlM)?tL`;+bxH
z(RH?__gD)~`SJV%f~s||)Maf)Wmzm%KNCGQrgR$v40b4;n^JvnmNKHJJIOIPFTL|=
z)c1O`uC9iDw-H~(DcS5Ywi<YBlo~>)F((@-TDTm^#fp=Wvuv9zvFlDQLy5KrYLk|Q
zEW1qlR=PR&j-+$^7$R{xLC)}Oyp%O|e;(>CyD_+ctH+97==V>o=fBwIf6P8`w|;f`
z#INf8*L3c$2*SVH=S`HvVhSYTyKku;Y@?--tPhp}f73G;OW=Alt@tA?&-K>mU3Rao
zDke#m=R)Rm$HcVYC;Z-^vj&T^SwR;)$k_@Tu*OOOF>>!^L1qoSU)4Oy`$842r};u+
z2=Hpg^2b~&=x4_VI|=3rxr11ZAl~dX*&EOx>snP*(#RrXGDS*<AUr(C8`$uAZIPNA
z`!XRbfg2)0)=ecDCr3yzcBBYP!SNe2qoO>2I?n}8W8n+1xqCcr=ll%2b<wm*I9%5x
zrs2beJ9&9gCGBpsJb@*M@1XvU<tsTwCJSd8!hDEJ{j$XebD67`s3cf$9@1p+5g+B;
zEL$!U!A02yRV~`Ln`PPNq<)J7rm;k0sLRfjdFvnP3u6_EUuc7pM<c|TwDE{sc<?Q_
z4<KuZ>uQPN=RSKPpIKg;AwxDQVXa_O%9)_4A`l!4qzTgvS*@ewG18e7)++a`;tNw%
z)+H*ZUnH<;_l!Su9iJQ(_9R9STg0_EK@1J?2FCn*OTdW7F#OQo$^G;F@}XH5UD^Hk
z@jMf`5;m{7xf$g)X&+&zyqC~K9Phme0ZNNar>0Ky#L^(a-HVR-<{2+Qwuma?MT-hj
z_M?UbT@Ds~;_2{4-@*RFF2g+=qj*MvGu)_Lqfhq4(v9L&s`)xv{9)M-2X@UHC~uPv
z`Ugpq60_l-ki$u{Jggb&OQsm+YHH<Gv1elD^tq$@O{Z8mp;YJCppN$ONn6h2%4(b2
z{0LK%9wyP8!Bq<RB&*7Eqc*{NYoocUP2Fiu5lzq}`A~#J9X2X<=q<h9eL!s&eYK)o
zO(^=A3=YP8(PJHSmX~%V6=@&#%%%0$zHnyq#`OZt$SC2nGmpj05kgy+OeAGpS|a;U
z5w5zKLtY}h8jc^##CW%1@2Q3zl@;<;&c}4Wq+{O3IyV3Os7(^cq?3M?h3c24`PZfK
zAA{Y${i^+^sQCjB(5W$=pJ5B{u`-=oySozc5)cUV@pAnduQ6_H`xVdWC@Wj!NO|~p
zDJNjP@<E3=gfMuN5+G!m(F{ob0p{nFZG(l$0xkbP2?25`4MlR?Ajb57Kyhe+5Ov5T
z!T2EM|M!G|lm8+F$ovmNz`}VEkG8#H1vhhT)x$Ttg7l7jC)Y{sqAke4-8_^%YYU?4
zvaY$Ayxlcg-_@BbsyuT&o#*PQVCl8d+cL7G_N7yP+Cu!R$(fDTtaSrE#Op{FUN#J)
zz<$N+I-P@HHEOhIQ`E&<sZu#j%~8e?I$&#ki|!FhQNoT8DPiEBs%r<8jFXY8SI+-U
z2w3{RCIqCJ$20#=LI75sMeF|$AwXW>fJ}?fAR(^RXK?9PC32ha-4N>y352Alvq<&o
z@|^37JLU~dur(vsmDmj%S^yqx$k$9an4rb?b86}R>BmpR&<+iGIE(4JcZSnPm@CmL
zyxWgDU&crMwx#b>8<U7Gk*jXsYh`_|@_Pe0{a7zYJAIqa`{P)xu&=wG5Sv&mvYp7p
zE63H_E)>}iTAy&Mvy&O9H0eOTvC)XJ``b&y0h+$f{XIg!u5xGGTj{+N=_{P8ML?jd
zWkxp0DK}X5>`GlYrO$%iKwmE!lc{#=k(-~7MnF-w9a|x_F`KT(ooiO(PIIT-7l~JO
z;SWN9J!Kx+RsEi@Jhw2+T7f^+6~(Sz%e{-Duw@pDO<mWuXIoNT@6+_LmEmbbQEbfH
zPO4!IfxZ`hQ!a)Y7tqI!uOi^<(bV_rzx*x%?EpWLz6x>R-wqf4@EtPzdEfd^ewQZ7
zQgh{_uvxcMlWV^Rwe-=CifuqaKtRn1A#W4`ZT6P%dh9l5c*;igNy;jfO%`5m53xu|
z=U;#I83@~03IzK___3!bI)_t3St<e)kRoqZ_A*7jXe_cB(*F$BuLb-$2@{Y<DDsNW
z4}POViUA~6XV#8NOx_nCIcbe$@Kb1T@8Xgo{diB5;?{J0jU2uiTrLa}ku3_t)DO)8
zy!a{A9cYm9MMD(9R3yNT7JT40&&Ur`M#!tj2z35DQp2mc&E9t}3x8_bGHjP<3oiKA
z-1>TnN~#FjsT1&5>zPYL@|b`^)9$$LF#@Z1AI}*Bipi+6A<+|?>ZZ{Zrl%0#h+ej$
zY1KvDl;0JP@JM8LQr6JC63Yt|ivurL&o|dw_i!F7Ha=H+K|f9Q=dG<^;FV|{$(LR;
zUBHrB9HqS4b0c01e*IcA1HMFfeW32A82N!<&8wWZp`5z*;a+t)cgyIEf=K1z;bSS+
z$p<rLxGAX#DcT%6_`2Y#eZF;^e+05@py1oO0>nqsLX(oIP7S8B?)71O{?>o!=$JI4
z6jFc()+^MbR?0e_;m9<<EuE^fS8}{jlI5!_E^@b5ow9bliHij1`x&6-HI{>bTn)ir
zPFPUMer%26t%nM!H78vMqq2OXLxn5o`gopA1ZNZV>kA!C>L`=tkA9d4T4t5qTb$m?
zdz_-`X~6f)&&8||HW*WP=SusQwNKwqIt8>ELU*cS2Ju#}Bh6)cJqxX)u4$e$_AGYZ
zJz9~q_=Ih?j4bjT$x(8@p#kEH5Z)8wzjrAOshie$q3xc&_-Rjxv5QtynFI?!^+D!K
zZ`QVm18~g^{N#79aaQxv9RY>6y^c=ii2Jr}Icu9dx!V!f^v!K{x~-)kYc9&aJY?v!
zFS+O-wPlWmwRs8cNAX)3sfJFXj8!}?j5Tq^jknnPg-T=Q{K#rctZk5r=9y^xPM(ac
ziHmYnA;rBRF3eQtq}6ZQh9U3D%l3TS5GU5d`~<DRVW&gQ6s}p0%lMswwG|&?o2W;E
z*xmM)bt`hT#p~;xB4OQ9hdPF%pn*uIm`P$@zMI$aq7oOM_|!!;Y4c5i{F+}~7(YgZ
z`{3gT;uPhH>k6Fmqp{2uP>zk-*bY)q^}m<i{(z!`j#vL-Z~l#qqya5^rnz#~tY5N<
zRJ&{}C2Jkx`DNx}0XnTp6Ou6`EZGd^@l@gq(sN(t_m|CT>?E(F!B^QkeU&}+zuen=
zRsH`eV)wu1iWeK+e+bKquQ#}G2FydJ7YB%yj*ov{)c5^q;y<NjxnsGa%Zay-5A+U?
zgKvm0axnTkV=W$H0y_Qx-w0g*Vj#acdTu8}F9gWhE{r|C)qhIMD^etUczHbg0mZvt
zx9~tB_J2sr<$!qr2*^4?1m6yVSnNb8*`*S50wx$GS)oyi8)CET#3x|cuJ2eIeEdK_
ztT(=-;NW7qmUu5rWx8#^+|YU7;EkR@rpYevhsZ*ECnEsAwCdq0cNb*d%n0}W*_2?=
z`;7JpwU6PuJZoI{4I9^bO%0uINUuZ7=-xncC0Tyy<wEK9byd~6$WyYGil7ar0Qe%C
zSJ^6!9j;-uB@VHUKZbrkl!)g2^wUe8_=ALAkrB`+8P<eoRETU(#)grniNjWpN5b1N
z*gYp-oto>UTm0&iyiC~i&s&fJCy!&ce42iD^A2~w7m1T#X4UVvf&f=*i9IQ>dPUBW
zuVIa(^Bzngq3%ja3v0;Z;5VA9C7Y%`zYI5tciH{5*)J>Bbtr~XvxtZbEL|Xy)SP0H
zMX7|Wy68~rPdX0rj_M1SiARS_-*w*_CnzVl)7$m2am*qd{~#3~IRBw7oe1?D38d>h
z?z|~AM~YXgh+O)`LFG`!gr!a;A)C4Y_Db>Bq$tMyC0y&XEcRtQc9d?wTFRh$>fRPx
zWck0e<@^_^_&>F!NMDK4m$n3x8VM-LSruChi~HRF(w4IS(3WQZtt};s<GR=W(3Y@L
zg!`#_2m0ahr)EK4+A{kOZP~V32knj8=|PoGAD``dCK!PHXyZVr<=g%(<G|zx$El2z
zs~k*ibe>XliGh)nk-bkNTZog5>V<8&AO*$9Xo{Y;e*cN3RgF!8^+x(!1ijxStER#5
zVq1P4i&u)R#al`8T7=D)xNq`_Lcy{>z;jJuL4h=K4-FORFQYFG=s()GNloA+OA_YQ
zmEa77gYM#V6JBZA_*mKRaONvBYZ+e1(1WawP^$~sZ)+xr5tAdiRJk{Hooc4tG2Xzb
zE7bNPbF!`A+H6&D*DJnuHTpwa4$}&<hWp0Se|TI08=t{qu;!%@ZM}cd^k^`a1wQG>
z{#wR6*x|bWi>z!KBWnv2Tj#$8)cb!~+5ayq`~PKS|C_9A&Hpbed*`2IWtZv$!2Fk~
z{9h~Ge}ot@|LL~ppExDHY~_d*nusD!-8%>KG~2-ty8dX{L1EDFxWt{WFC}RZCH>W~
zs%}f=?~j)?><X&me9Z+Qm1G|?15bPtJ+XP@JFv)K5UzxZ_Oc7iG!FP5p!oy!v{M$(
z3M#f^s)S>{eop+kw6TLFWYA}671QtOvoO*Xc%g!0u?Zs6=F#3F>xVP^<Dve5|A)PI
z?9N2p(uHHE^2Aofwr!^>wr$%^s$$!=Z95g)wyl%Z7~|dhoZh{9jQ3;zh<V?0USw)D
zNYpa40vbiBT;q-;%Op%tbBaVQ-Fjv4)j(s2KEBjFh_ap!VUyolZM%c&8Re9bmv{@g
z7i^0hOFE)Nn@xl8dDOBG_)Zk&p&WT-bwuIA{v8$V`qfG5*9EG?x5<)u$oSd)@r2mb
zz7qYhDm{tDbdsUH=p0dSn<5I$p3}6@OJQC)i=sf4uvG`QTVAy{b>^ApY95PRhKjZq
zZkmc#FU7>`?L+V$dfTnpj-Y2#;DdU2I@P@~ALl&@c{2Iw)3!3L7jvHG!}!@1&lv^V
z6f$SzM@+AfSdKgOaFnIdEmh^cvdxB;BGTgxsr_0NvaU%CuT1=DeuEwDxh8QU{s+pk
z{-&?QPE)|0KZ#yV8blOlMswHPS!Z{I+b$8elZ_*}(~>9=AMIu*r?*1}cuQC5RjbkI
zbtB<aL;PmbyG?2od3v{EEZ>0A715uQ!0z%z-iQyWw1WILu~DgtQ0lI0HN?y{n~~=r
z96jQq%!UhLt0hnINAudDj`G?`&Cqtw#qkEYSb*LFcfl~!_yAfjA}nngvT&Onf#f4|
zKc~R$%%*1Hr4{myFyRO5ag9>NGhEL6TFMwT9&A##hGFB4)K3AV7z?&cto{-)REQx*
zORPn*q%*yV5T^<KT4_h4{p!vvX*|(qaOO%75V%w8O;|1^^{_)zR0Py&LKEDo3FrA2
zCWBHX-T<ubb&A;V&?w>Es&k@;ZzMxk$CgcC)^wOW)DqWDWSxW+`?cptO{F+Dl$r(A
zKfAPk<c$74{ki4QzuZ<?bNDP6wIOf&#s!sdacC$j9du?3xVU;K|0dK)N2%ncuR#eZ
zBc^ibGkga>x)CX}UTL^0{VZ)xOT0hvw6RG~=*|}C@jDUz7rGZIcYk=SXu4;|tjJ0G
zEI~ctz$iKLc!D^+eUB_k9BWN(XG!Czdao8-ym#=gB`9yv*T`*6mlJ^;8sutG!=G0#
zJA(Emt~r%Y<HO8RD5V8lv556_>$GM%0breq3<iSpyCKw8=sb|^C5to%k@AKN(_eNU
z3*F{iXEN|fC86P)3thoJg=jAuRMSt-ZI?%O907iGnwWl4bflINwpnJ{LTvFLf~E0`
zz2A5ySatPMJm-V1b%pX7MwEg;T6Y>Uk9VZv3s`}nmn=W6V=vQ+cRn!7t<igPS#T8m
zAHsEii|wuP@hw%2*J2L}hAR;aL``r=12NS}{Uqtb4i6=lO|`d<40a4Gw2g1*Z#nrj
zSLpR;Zv~{7!$Wu+Y&vELV$K!AKMu!gdMSQhm-YwYrmu5}wgHG7-4NNg%wWO<PBK$j
z6Bbi0Pm7&2Nmxb0I~vCT_JIRN!%Sf({!N_>v7A`d-l7LdIUQp3&R-&E#*AWI=O+r_
z)SNZ<46qP$jfqzer!6YTggKp-)!a`zCS)zma)JZ14GpkpK781^@?FzT4>8-AqM|z}
zyjZ)5IhRGeCV-Lm+8<ar+-y(zbk=)siPOyi&fl%Q78{rNu*E2VBr{THyQP=z7L@UA
zWP&!{mrP@1b{y#tPwUndK6;NX`TqDgh%pC!PUZgdn#56KG1&EW?Yw_oJAWrgj{P5D
zj{oWrj+dD#Wk>P-k33g|m;q`Snyf~7FcfDHbzWh9ZT`3WT^6Rg78%)@bZ#>b_sn#i
zE?z02LYa@582qK+iU6Q@*^ixSD<S1$PE&UXV-3(VWK;sIve#T%8K(mlen?RMXkETE
zc&xrqc_=>|Qj=Z>*4P}Y7#U6TXb4|SrqA!F0ETiMFnMUm!2z%~a7giPdJnx&SCC~`
zv2z?jMSE39(xpIg69+-;ybnCnr$_1haG2@Xw8sPc?;_U0XFzg+EN}Zg+`F3NBG#LG
z3Y32s(B|;Zb}`>S`zK|BqNfj7NCZDV;!Br(;)CJ7`38JD`t}Clc;Nj2<!GNRZN;~`
zZ`8hr?#Qi4f{*TvQp%@H#x?TZp@u^e7O@_DizCLf$*WVwRi7ae@nq)6lQ)o<3cYK|
ze4shG=B>u`L))5shmHB%J-aRFyp+3y{XQ7no!p>)6=OnpbE8qd81eJU^i=$QNd^_c
zC5%6lL?<i9EkQ+O^g%mAI?6wbG-TESoPaX^UEuq=5>^FTr|_+`dXGd?s+4sZBp!~<
zCZ!O5B=pu|1Taz5Q=A9YtJNs3Jkj{9>$*pb$-H@fM(lOAwvV|SYY+*${5*|JR&_a#
z+@H>#+DDx?e@7~TW2P9~Ne0nNPgTBz?U^_R`G>aZ+vh+&=doqnc)hhWb#%UOr^~^<
zAQcJYD67WdEFUgh4&NBvXPCRZjnlwzFFqtuSMSl>ei&=k6#M3YutmfSbLtxk+Ul#*
zhsYa*$)%64<ZW9LrQY4+U_CdybWfr`FuWYW(PMQs5u6Z(YvOwMkD$A?Qr{4v&be<!
zhe;W{TFm(f7RdB7wLXK)y|IyTB8cjUyfg<0|11(tDpLed!=Iju5i<*6aapG=4aCPp
ziF-tV3}ejr))_A_FcW$EP~3f3xBr%><XMKkSlrWwd-pq7ldEpBCKi|0QL_nCjdP^k
zk+6CprXjOGvtCsKRG=75;w@K{RCS*j;AG@w;kI*0F4*TgW*DMW`M;a~@**l)rG6M&
zqv8%s;JwgxmUG%SVxriV^^BfnCgL)6+}JTAJK2pGD}pcW)+YtMach|g4!ZQP=txj@
zn?EeQat<rY8#~s7bn$W!Eo(^1RZN&{V=qX$>Zv%ird-V&oiZz!_h*9hhtlimLU=wd
zDXL5=S+Qb2Zt_Cf{HE(RT+omrUMco0YdpTaGcZ%U7eDBJW<ez<d17h$Y-@SQ;V*F5
z5X$#U#+otCpA@R!nCyMRD+KfV)fDg}!aoucMwoOCGG9-`UxdWJR%LvV?EjO>q5s4~
zzI5jN!hr)?UplM$6>>UYm*G4_fa0IO;E?r{0n5TzNy?JaxH!&)+tWohg2vEWm8~Fe
z-)S9)2M~QEP_U<>=P#-q1KSXT;1P2R4CG+~i#?hps<cJ@FRC5#->LR~Bu9I#z)o0n
zwIncqTyc0n9?%%d_6W4EV1OuR`U}{EVXi>$aTZ?MH@~*X&aFAzFQy%on4nt3`pRev
zIdaXg?Q|;N-Q=4sLm(}G_%_j#-qFKgQ?PE@feSIPPwJ?d>!DypoY~Q`Sz%`b+o45j
zdvzz($xj{EQPIcB{j?+iJERg`x@p^-f!th$lj`l!f+j-UADXm=z*IwDK)Lnm^Gb0$
z-hgFALv%f_vG4jO`CO^oZkb$SqnK9=xBk!erM~h3ant*v<H$a)2+zyD)2F$O#r?Zp
z>uFA{bgS!1EN8!fBH-Y|of)bfXXreSSy84xQSwy8)2Zw>U_evjMr=*Z@kpqTdG+7t
zp6Q=G_zNgYOD0pcO;jc%Id5P3^>v1#hHwpgmrGfHaQFzH;pCE(q9yTrFHYH3HhiyE
zQRa;k*<8pgrz3Hb>b;Yz;;l<!HY-T+P(Tmw*oD(G2Kp+O#7)u<TIEA>n*r_xOY>OF
z%f+QSH%6^Q6{U17SEXE0*Z5hi2BI3wv287=2P0jpX01@sJVNIg&bP%{FA$Q1ujS+k
z(|phLyTwADpOCzPuNL-m+Uv9G0+4-C-lY$_*X|fT|Co<wMrh)3`ICQ2U(HO+%`<oh
zg9RkVozD#Ghx2riRNL-;3S|bf%0S1Z%WkgJZ{fzrOf*KkVj<gv*xHGEjdx5x(%d{s
z-!lfJKuINcF5y@R*7>uyqcMdS;FrlNWBYUqRl`x~L{JSfhf6MejRn~nj_@aMROVgg
zjrRVAGHK(`qdEN`#wG1u1$|cVv`g+jJr|XsEybh5rVM-5{=z5b@)_k~%J%etKs3&Y
zq$KW@a^`0Tj6A8^7VY56Dkl=@@IT5_KXV$T4_-+U-d9E3A5zS@@v&Et7anlQ!d|);
zztoy5*(^K=)3evqmn?^;cZDOXBB?8N#kTdJT*FJqjFy6ILf!B08c(}0U)aYbh7agJ
zPV8-+Ij8R5f-oJvM)rS#d`L`{iNm$uQf=_K>q8UUx`tS{`WZ_tf$Sv$OdF$v0!iOq
zM%b8&Vg_T4q#8#_S`@o{d_eW%p1OAE!}P<wkJ-b+1RMdoS=%;~L|}fZivn&1zKBpq
zY#LiaD?BHa3@oJlfN%(Yf*ZkZz{E5m6aXaYh}sN9tQvs_*N}WLHss0#9kfR*XzQ^F
zhsN+>C*7@Ph#Lj!14;ZCeGOK$5b_hq4r+<~Ne_S+?7!x0EhhgX2mu664+v1;itxt;
zZ|%+o!OyF8Ee0spt@6OG)wV+P;93;nH+o8C4Rg_31WS=6vK8v6290HDm=fTrErR)_
zgvK0m%Azo~p1Q+%!g?E`MgeSYpD0k*t0AdywfbQI{nv`nj94;=d)Cj~1-gU^omkz=
z2BnW-{^vr3ynThr#Z1vFtRe-hAp8a6kdI2mTWm<9O9VANgCe|)rJ-A>I0LuNk#?Hi
zyN&x}kot~44sN9YA3>n%UO-5}P(rlL)j3Id*r8AH-hgW5n7cKdV$?5DmfIfF%;c_y
z<y|{Sa2Mv&bA?uJd3WjP(35$N#KMOZ>I(J2g_U+{L#NZ#r2H^{!??XW)5R>3@iv7D
ztjZj_*3(x5`6FLFAX)Fr6udfbZ4?+TC<n`Cfun0>(#KV&+~N2+Tb)^Cn-Z^Mf%!e(
zWKAeodxT71fyP`f`LVLQ!Phg;N&|cZ)i+aYz8fGWA7=(wI0RRKB4r=7*xI8!0<Zz+
zL|EU=<t6gz*g;pS?dLog*w4yWJ-1s(rRoHwVIBh`3!{juO7XOo8d|#K1#rH$(*Q<}
zU8&Y=ud}7JBR%T}vpM`?_N9jwnl{^YHLAE%h}}xYsO+}zs3Q{DusL<QH#-AQFYMR!
z$JC#t5RVBXR$Z4Uo<2SaUAU|(N$l##7t22WZadRC{?ltl&erT=Jcak^8oS=ud=<x%
zdt%iaO1-pHG<sN#74BX@PQmQb{+V1So3VH{3nFS~()}02%vWGdk6WJ6Wh{0UaAhd4
zH%csr7dS8IYr|!teun0GkgN8Hjt?vJ!;0F+2?p`Eh1KH<^M1F#1m6?$H!4Og*L{8+
zRsjE=s97Edy`xqp6N;dtIZWjYPwtKe#SuS7mbdKA=J);hvUpixE{T2G{9g#>yqfAJ
z!GCz}{|-FD{<q-~aljWmqVI5mD%-3Z01N>g!S9+RA?|v)eX7!S?Ce?=pior$`d7Xr
zv^L8w-Ry$rR&N&|`~&_|x3#cmeug+3NNBW_u<BP?a|}{-HjFQk6!~)PIE4TN@R7Gi
z;@ZN2KROZl1?Z}QqKO4{R-cfPR}yKLl@ePHrun(1$@Vd{l9U&i#(aZ1Z33A5$yr@k
zS;BzS(!(y2K9Yh>-%~g6^aePWqnDW(XEr=NHs)_uitTV<m#MW`Snb?g<NyxPE?w#-
z3)m0~+wuDGj)<fE?WHihTbd$T-QIJE&kY>S;%F{l4Y!=gsiRan+RgEH5<9^pxen**
zJg9J~$O@!Hdk*)I3KaAx?mpz=vOl|~XJpPdR_3(VvUh=1Qf}sJny$a{*6ZE7E(f)G
zh6R2T(%`zm?a8auKRY|HNWCgPFg7VEful2QUpp;_L>l**t!KO#H?f*uj@Z%;fv4qK
zXc2P*GireVjV@2IS`LvzOs!+!8C4Sy6v(Y$Bnf;fS5z58?UTDBS)vJL3^6J?kRc3P
z>0F%W&d|v*tC)=JhJ`Baax1C`ksY^s9eW@d9nhGWy6D8nvd9421TGDtnNzzl%C9|o
zYK}}Or)@DVe4Kw%34LhLtWpkfIcR+Okb=k8q_-nvftF5+=1-%KV)#R?n!Z%i;eFfs
zyB#LVvg4=AOC0NKG)%lX@3=aBCcEJe9oO$kAl1pankdpegXVblLRSp$O2eB%Opn{L
zQKKhbtrtf9h4Jb8uQKf|w@haV6JVP`t0br`E4b1&yma(ZL?{MLT5}7dQNj_h!D1Sy
z{>#(lY<!6f?{`^?%yrT6YQI=&o&;%1I=-SRZ32Dg6Le^io^|awje|6-!ef2EVy%8}
zTAw@oiZX>Dr(168g>#40Pe=I^`9dk7W?AL%i(@%^`f|AzD={V4?~e~RIjRC<S6pad
zsOQs=oX*U_3FoF4_cgSr@$4+O-eD=ICG|iOvE7I|k>@BnoFWGlK`{5?IiF$Po|5p^
zpMx%xOabL@0P55tH)-h)M2d>Rqcx~Z6Rot{IzuBnS6mfIs0eavac-<~j$imKQ!76=
ziQE|vc;_G8iY0BrSNB<Ph*=L?j8gm!x!#(%GSxgwdeqZrm;ChR2Ue@;xaW$rZ}6$)
zTX$1;qJFbf`1J$hg@HQz6);{9x4c`ZZ8((rXtg*T|KZ0zmH_i7(n(yrp3IE$En)@C
zN$Z%|vz!Rp+mQz%vf01|SSiK!CTYI6RJwe#={;H+)cCZ@!@cUxRO>2zNg$6wH^(-}
zxVckj`EYQ#NG6OGNcF)KR8%)YkC^g4NF!<qG$0PeCv7L07hapyxIZB2wWJi?STm9q
zZ~-rtb(2Pz*wZUx<x(pAe3$qETam!^13osAsqntUNMv=@wZsq?c(aaUzT*f9z_Dl*
zZIAdngWe_F%$xiz+hLLnJym>}Z$H{2=ab7_NOdSEqsN{l#Jka$<yw&6u{mcu)f)zz
z6d&?qVGR3&zN6>C!y1D?2q{W5t2Gm;OoP#>?EV!Q5o~upwOBW94`xIRdSio0u_pL(
z-4eqK3JPa9PZ&8#ot4q7ZZVQ{gL#%rr`W5ESz_vCLl#o)YWzLJ;YSt^<!E>1y|2&U
zK2$!QT{d!8#HSb7%sQRA*bXR9q0p@GpSEXZR1OG^li!NcS0Xp}WdszV%dZ+6T28#&
z9X9?7%eDGUn=hM7J{_R&`(F*^|8)Aqs7|c>ZGkb>-<D$i-vVQ+=tb}~LfzXNkX+WA
z(;+UVGKs&=9*zWsFTCmg{vJB?vHuzQMGl~UH`MJdF0Jni`1IESAp!IIL(lJK;EN2k
zM25Y^zYwXUap^=Wuq8vvPms;K6<Tn#`afWSh5nrd7XCLDnC<_`0z*E!?<xrCnhf|7
z1IBNiGPQ&L92sW1KXm-j^<hrpl*&@&i<il-dYh1aJU#ubLuk8J!N^fVa~ei|;=y9>
z>S<x&g6O@cobWSE7T|wBp?%^!mKKs+rVc5At_!hrB^aa3!`$gj9_uxua-8gYGa_1t
zXpl2|S@@W&t%mbtvq8MMo~?aI_Aom6EMbq0UwRDSbj{Rtq@{ZotvA9zutKNf=aa~Y
z9;CF>h62h=yP2BVE{nIe`;1-)<g_XL1F$KrO-=L16wtPKy&EdOR6R>G#DR>4J@jg5
zqZ+`da|kq4tf0-gF~69eF*P!+cpMN^_FCjd(Mm)~6JA~_-~64`s8*07_I35-?Mlm8
ze_cJp>5&%{P2MCoB<Q^;X<}1Fxe1o7>zwjz;fhy^HPZF<mH9tcVfiCrdOPBK;gSu>
zR#TKW;>mbPY;4n7uOP>4yiUPTuHJ3v4l*TxgSJZT#ubP?Nu2<;*46Pit}oNPwY-sU
zRb-K$?jRt|9rN=%*v?m8XA7F_Ve*U-cl(WX43BoINEAbFjF3X{ntbSrtUT9e?!-1@
z>ybuVbz2h}h(R%T^#<r)vSFLw$jdjgJWI@U4&!Pz>a`x`zE*G<=G^eu8dw2e0%MAF
zi#mH31yo513FXeW9T4n)7Z@AfE~G05K6^Ax!w5A_qDE9Kw>e7f@-^%!TXHGRmYf@u
zFZnWk{v|N}iP6WzOpPTQ^d&GBrL*Zv|MEu>-&{-1AbRQ^&9@MZcHTcs(QX#JO7OIa
zRBpV<+bXsHqM@E@pmF1Nr*x|-C9CsjbV4M%y$B`QU*Sq|&{%&SjOcx3jA+8PfONwV
za7L^ZxC;oh1NGxE{AfZI=6`xs(uMqg2#oRXK^Xq(IREdh0beK3-=5sD$$zs3pnQHQ
zIKKa74S>Khi%;|AqFX~0ju*}Jels>^8Ts;sNtW855Ifm>dv^lYNUZVY;DZy2`Z%72
z^b>GGU0+^><b62<PB@1zz;(g=chXpF^`_yB6jHE|39dvz|B`ReE9M^^xk349*v2sX
z5iJENLVn3Ngb_c^gb13CD4VUaa)ZX1r7__t@`jPu2I6+;*zZLPJ^t<X8Gbba0D{}+
zHtxyfWmV8!F$58^bGspZI~}SPyLiAJo*(!@pbj{)hK>j4u~LRQ*=d>SaSci)kFhP<
z$|LI&=xkWJM#&O|wl3Iajs_cxNw}+0Bo*tPHWXijPWwd>f5t_A4eq*jsd3*4x{uNv
zS}bcfI5{5jueqCo+IuOavw%j)5HQ0_eR^}=1NCz=*D5>CA-_*OCwohLN#3rSqz3CG
zO{;dQA+4hwx4>zNwmU|f-}K(hR_#FN1ofI&RQ(wMpfmH(^_d+_akge3XbZvhAB59@
zF(c*4`-(pS76qwhCW=4CADtNC5N!8lja$4Vn+R!T5s~CtS_5Yk`SJ>s>;9;xH3gNw
zG<r*<l8dv3O$v2<P<yYWOU>KDMa<$Z;^vio!+_X2Yn;m;fANZ;JNuGvY`gOAR|s1-
zor=f6%J&MXrMpR4F~KOsf$BRFjZ0B*g9ccNyp|ig97iCGK&}n3o>f0hvs&{5Gx@kM
z+`_?-gSCv(OCdgX%n5cUYv&sd&0Jm*{rm0n@z?D`yK3!rEB1B!Buw!L8Cj4dTun-3
zu;<XyHIrApos~z8)?@3;z~lC2bU;HmID`f~sD@@(>70~bFGe&lwiGhqQRad17<vlQ
z+5O62ao>(Y-g#YR&*!f2q_|91`M!9bBX_m?uJqBkYO1qiD${K8dVLTkHiQG=5VurP
z!*#4DH(A1h*SI~KdLfM0e$R{kAYlxx&{Q%13N(kQ&v&DKk?$krc~X&9yA&3hAyK@A
zX^p?JPkv~z6OVDgfVS6WJ~=VqV$&R}k^nNI2no7s54?t3Ul|AMR&dBgl*Xnq#(fCi
zTn<zGC@1~OUE}mfq1_14ZY?`+d_mBlis?ksIiGHDLaz%li%74xjbA|kvbL%0r*-$q
zdh<_7V~IE=Eja&i^^p8a`IW7~KX!ZmSCY#Fwr{6UaKauL`X1Xt90{Y!lgdZs=?-_t
zi$1GH5`e8M_|WIuLzQ%Lssp~pvUW9{H!<Yht_eQhFD_V(0*9)aRK-bZorTe%2j?^t
zY0RCwNJ&M>4Ob(Kn(O@lr!zW~GtWPI&KVWtC!;oUS2Xl%cK-ZiN_2J~c<W(jQ4>tY
z;(?Nkke37_`Nf+3>L2;hZ&aGxY<#;wAjdq)Y1j<x?D(FkQy`a}hzHW+_FA{-0?TIf
zI28&v<z9h#Zz%Ejg&wnXS_O&B??440y$r2z_Uu_a#wIdp?FzSOd_>>PaK+L?Ly>g5
zVS({>4W5g|+vxD5TFs}|JPANB!dPBR6rI*8DX=&QIEqm_Rn_fh>|d$A?Jk=5dlspA
zJp5@<TxlJreals|P0U4t(AKz4xV0QjGkmtjVA=~1GYOdf0xW0J_3wFQcg?{Ia14?(
zDeQ~!)Kp)Cw5Lvjzg>ANMFpyp{uMFy%Tp-~r|e>X5Au99@->Sm@Dw84;ZW%Cez1H<
ztT6)JNkPw)jey>mb24j-D|I~i!d)4fTDsR;*a*8$D6N&}<*F>ofl8tYKwUiY)M{z2
zt}-=i$%PPF`1y>d4=Px;;agk$$bKS&m3J?;C+xN8-41yFeg!?rO=6LIev2Oeu$iwv
zCA)~Ub(}7Vf?pBHIXlp^V?9T5h}D|99WK;;wX;KF?X2)R=QLs|pLVRbJ~ISJ13XFE
z`IhStRA6N-0*xix+WUQfT}NcU3<PbNjHT$Ynml22D?vz%6VX*oI6daEpPk9QH35V1
zyK!ky6r`jt6j$F4VuO2z%dJsXxC@Lq&cyB7bG(LRM^j_p_}SC}x`1ikYNVU(v}sz&
zuamKa$kZw|g-_x1$HY;Dhk^Q%wDk#I<~2m|*fgkwxiF}gK%fo>rxXKGce2Vu9d)sk
zNJW5%QO>?#j_wh}V@@aI(WRuF;ist^T=fZIF|geoi-VA8=MQrcb$(Ni#U&}M0ylFQ
zdqBlD%de5m#4Wy&q{Hm$0^afO>AV7rDMr<TPNbC!5VpC8K$NZQINqG_#ASzftpu44
zKZwXtIwHch)XV@3J9uHJ@<eNxsPM>pauX2E1ZHkN!n!44s*z}2_*11J-A@NA<~&Zp
zwSrcBMM#qBZZWp*OdOs%5p<w4)dJFMjq(y)%inx$hY6nHnQqp9FtRnc@2_qAx`ghE
z4yF>OV<7NJ<Sy@^@Q{-7%hJ$MPdH++hQI=se($k@UMT}u@aibNuFLasCo`uuveQh>
zXM0QVmXs>ygfE~N(0N4=jcRku!33y+-91uWMLNnWil9Dxqayt992WnnNQGU(q&0?f
zY2QLb4|fjWHGS9YKYCPgVXm})!n;y%Y2D<ohuzHyUAPDuav}E~elEQ@ICK*iXILBa
znOXF+L3;PLk~PrB12zKgia_!;`tF}i8K0LPPw$=iEZ-V6Vx*=RHf15I-AABm7grwB
zgQg7n;5^zTiLN+m=f2CqPbAt3HW`OuVJv4CMw0-<GL?j5%!gfu@cTlFgeU1<rFKq{
z!kVzH(G2Rjb#wy*NZyeh>NccZxp4%=XK!Skb7Sdxd=td5xTH%lZ=G_W*~AEQES5kp
z13S<;IlMoO+t)G*y$epgSj$_#>x`RuQ@}{|=Jnn~tJ8kP0DAW-+2aO-u#=pqjV_+h
zuabolW(P!4QI{n)6G5vaVTekkKx-GP$?wztFEZF<y6Ycd<7h;><C?FX>Hdr8`PV_a
zwg!y<$OHcuZ?DyyM%5P&40+|kJJ6nnjEcCw&0Sxwxu<RoVxw74&_qL^#P{Cp!Wfr6
z&U`HNS!PxntFu_8lLcN=y6Q8s1nVf0B;ecCr;}drRc~R4>BtK%9pdZ#0KXK?`dC_`
z6lO(05C;OlpsCV@k@zVLC8+x;yNf(kQ1c<aTRLjMUI0vr22iYqXV8_Vs-Lx=#xe)@
zrL?@QxAAQPd2#f&H6S8U=(!$H13sXM_Y`bz0<Epd^=ko+q`~;OjaImtE<4LjS{4zs
z->B7u&%ywPl;_$ZsHScXsPa@fcMANZc}qDBm)F$L%^UsDy1(}ff%>RN1NjEUDGcYS
zL*IRMoJH``(2lMrgmZJJz0-lUG}iipcN*n~KX~evC>T~{V*$@2`g_cOUe0_%9tX#*
zxYhNjnBFEza{Wwu+k!qll@HzmApFX#M%hPrS@sieLxAt>jpB-s&B}tJE-zE0Kv=$7
zwy}bB7XbM}4*d=eso!ZB6IgF|kqbArgTd!eciKPGKY**UMtNZaS}d}tS=F0x7$@7#
zOv+pLOKa^Xo?C5kpXV#g=FyyjOlFpWBeKG7=vv~S4(QOBNs7$?q($AqvTA+|^z=S@
zU3iIyT8xMCO*uTB4MGE?k5{a=TPns5Ya4zWBI#vj+CJPlGwWt}CGfE|D~zMl>CI#=
z2iQH(I~&TTLk+~7KTt7SDrtBj+H9wQ8+J$lea|l`mr4VLwMVo3Gh>^4!9*xj#k|qp
zr&Xa6rtj*-5WmjnTB1v^0jO@?Pdhii4ud!a+h%XsT|M(U1zvm%KLKfPwtVmWGu*H~
z-@0SNzDn6%dUE)Karx_60tx#zKX)O~aR~=th(*AFVkC;0gkzCS;7YV<g5aT834xD5
zVf<%jTAC(AT%csVj5O_GyB_x!59F}Q_?zIC<Q^%-@-BJVTTOJCV>>)mHg=o)pXE3#
z5Uy-V41U#lG-F+;(YsgtDx8@6b<m<#dqG1%I*Od7laQ`hth~H)@#gqLu{KS=i|<Zx
z__4Q+PTMje`rf&Ptp{!wbd^l73`{mL(<SP)lC{Zsm}a$mS;wd?<t4VZPjkWQgXQ{9
z`w}=W?$4JSge8~tv7Sf-u^+6YhA&M4)ceX7)OtNK)L`WN3An;)9=L8%(&Yn{yqA|b
zF55|FBQW+$mavOPJtvYQRu)wT3MtuGjvc%9gDM36wdy>nyG(!3@PZvti4e$TS&|nF
zH15xTT4)I5jM!Y5gz90xyHvl!|Ko!Yn~)fO^ySk0_Vpkz{>xp==>Jo%!JuR2;NWCr
z|KGK2I4O+O=CK3XZ&AH2U9YcR&V=xZiEEa6p#oK{AuOHSb+NA&5gPM;Fy)1|8Y&ii
zr>g7h9E7YXP3uCjbjUb@*?I!^mQY+o#iW2CKS6Qi1UpuRN~WiwQ%fm3l@0c70V5zM
zx8Mo_7pE`Wnf#;bClyB73PVb(%!pM}f`Qaf`k0wQQkn)cF`PSi2C`Y4yP|ot6c|6j
z1-3!Vc@anluB|ihW1Kv>D@^wX%PN~Or$lKn5ai4V4^4Oc_cb}NLH}1o><|4JooJ*c
zmCSD65()w+c5>t(&hpvWM;q+5&7ViuHyf~1J@LaipzF<~E)<zP)RhA~$q5v3c2O|=
ze8dzX-$%YHahJez-Vx5&CPg=gDKMbAl$MEwfv72^|2{dIhGTeB$H16R2BM%h!A@o*
zzTw;zDBP>jx-I4)SeM<Efp+x?;FHf0S(L|Vv0QI#gKptl4dDS(XmeSpZD>dBw2c_-
zAA1eBK&S12ki)Jl*q}5i+ib4Rho3phZ7Gs<qMWg9Xhk1dp~t=pW!=VQ8F9h8vtOlU
zD*H66;$5!nB>dD4Fuid+Z(Wu=-!+{$n4bDrS)!Rm)CI~sI5C)8lqc^>m-so#4RvmS
zoPUt5)<FM^Ln5+1!vM+VDeT{OZ()}zWGBzh@t$?ya+w)ug5=`AO9Ng&+0ijotUu;%
zLlEtQ!)~X<TGm`MrKg4JXQRT2sj^FxStA+zM*{^C^84VmwPVgJF{1qU!hCqI6$3D5
z{M=+AH|ay5_dgnxdF?-7tWt!woU{9WzIcC#UFh7x6~mmf#SB4ajITqn3*C@c9ogAU
zjW{jwv~rYh%d7;2W_&B^weL}rrgB<bcCuxsWqAc4i7nIJK9i<IQ`FrX*JAxJPcSVe
z1=bn*k+>S*m~N`wa^4_Sn|cK$lN3Pq7GSRGO6piZ^8=yGu#j+b&5d}<zjayB4Ugn;
zyH~Y^D6#&O_JZ~OR?J<8jdi+<?gRfHXR3Hz{OoVrOa4dP?0?EB{?}gezxI;<wU_+=
zU@z(R{zUsoggeXrOp5CQ`o}Sb4LVBuPnhEGkh2_rlbrol9ttAl(W&p@C?ZS3aVQNr
z9=#j={Nm!WdN^ZmM=bS_#pg2+R%`yg>uTN)vBTGz{9*9{EUkn(rM|D~*U;Rmlh&D#
z0(+pU60f>&$kEYxvU0hsZn*qxGl?1<`NyrVbsn0*VoM4k8s9Thz8+>D^)-Pz(sNEC
z*ekZ!44La3OThZPZc$jOs6j3T1XI?0zMW6x$rA|MY?wX~g9jPpNedaCxhgRJaWH(n
z3v-~w0dvq>8ot9%8WUS`GzkEfz4vhHUIV+u-QFz*5OG8CZoSA+fJ&uYpL&r9@^b!W
zeahVo&F(ZhRLsfju7mvsYu|p|pQ5cokU#Yi&t1z5KtxbTwmPYyI2(#d`(sy8x=g4t
zKr%4iM`JHl9@%Q4u%uaQ?HAvJZA#^`giHNQAT>Y1c=6g6NAiquqGGC)DACKL(Q4lV
zc8-j%kQ`6x>N5<kB^5-e0;Y=FiySPVXAx(h7E@&rW6;3t^E#7xarMzX8ikN^pU3db
zIR;?<p5nNOG@XyqLQQ9Dw1Q%{3wV7~qRYZ`Ml*GHtHfLXos@|j7h3z{baVIaT4lr^
z|DrU{s`>0`{p^_%=tz>eEE|t>PH1qD>l+Vi&9Mn1Y<RZ;8~p}`LSzGf1rdE5^mL!p
zNVV1*uBqr6InZcw6qS|h$WxgdkN&TFk=hqpcTJI_^yT$DQ<_L%{V$XR+Y(GECY36{
zQrpc91`&|=XztaWcf5$`CA#Cwt<m(1bwQm&hqqtu@41hF%pnSq@jVw^;C#1!c|=k=
z)*7`Nnjx!5O&S&M{+Z_0ACq;8&cmd}LcTXrut~wOQiSc^GvgQa+%Yj52`O)T03s(>
zcgH4@=E42-2+<i17PN)`BTnw89}LkWEV`~$aWKk3021b$Ve7caDc4gAweS=n>>p#c
zwlf`^!2zC?a|HcfM<*gaw$#kn2Tp<d$+`2e1C3=C(l_RK>-9x{N!xsv0!pB^T{H-1
zVu6RIBkpxs?8*$HgKvSKLdLqT$kV}bNij#U>UZS4Q)%+a@j+_uexSh<GC}<8<RD>y
z{QFFLn8k4A&6-985U#kLt)vrMD^&r95{gbJwQHZWp3dMr3OmsF8()d-Mbn<$8|=D!
z{l;^d&7jh&%=42pgluq8C#s@lyq}P*gu9G07|hzq5c6(8SCzl$sU;|ypV3pKin+#I
zUoHp1c2Z><64`#ZiMw`6q$2BD(20uH)dqf)_9&;WLD8@BKrkYVaSQR_xfKmJ9FaIw
zwm-mXo1wVvJe)`Fk3q^_adblZ%%e6H^<N531%qGpeu3OvD_vpL<N>Pu%Tuc?W4UaO
z%aLvw+7?6`)?~Py0=Qk>@(eEch;~ku&d=Zkc_%EjZkG)olDvJO_CG}=8X`5H6y@|>
zAp=dkjotuT&4A^q7*;lJl<TG10MJQJfCY*%<3>efbw=nw6AL?rzPV>#V2od*ncYa)
zF2bYx!ZR0ybka(cOnR01yheH&UG^nepO~Mj8ri61{f{hJR!lMBm2s{hT-ezL>b&)j
zx8LIp8j~W`ejPpZ)Y0BeXjgHRXWi5JG^v#AD`blgKW)o8_{x$6OC<V>2n;k&LSu!7
zE~l1QQDNC$jnO0p%}9J*^FPh+WFP^h#2RH7Vl`;xs4C9xMUS?TN}>X5VZ-o6l}{o1
z$2dq?=zUxV{ul6D4BX`G&KMM;QL1BdAkmA)2*4k&xYI}<pTGY(_>b}-Sq$XsDzW%N
zivNymo$VjtivLQst|&2E%K2CJ)5b<?!S|<;S|&g)T(E#2Za^;iBw%lm@BO4>UPg&B
zVe)u3V^ZSt`4%&j@!}((1m8Z+0P1-0Nz9I&Ou?UldjnNGGW%s5OH(o9B4joO)83z-
zTZRC@<xN~7JuC_(m>o5<ltG?;5~zS~C&+gZbQ&1u2>B=Dr!=?V>v@hk7t8rNma!~U
zhg9G}pz(q20{gZCW#*HSrWy;RTn;EbFite&+;b&jH55!3sV{J#ut_z0ysvdP(lA&l
zs_vZyyASXM|I{~U3~3^m4rL$>&#B5TV$}L>m|>EWPJy$NI`83l$LxZD%ug;6{wke6
zblYTkhe^Z<M<9u_w}6LYdp4+a+yI+KEOM@Ebcc7R(Y_ygptND)iDed}2wL0z*-+2~
zN+OF_H0{m$`*i|a5OjANyxyc0Fsa*aL|kTML$c*!H0JYT;gj!FG7ovDR@~~Tbvx9L
zk=<wBaFil<8#6VsB4tWaGl`uM0Z-NybRT<L33;MN@}Wisi?H-?8z{mZt*v~kN19^+
z4(+Tc!Ivi!#ORn!^{SJS3GIc-J7z4V8*XQLwg)#JL;=4sb|zJso%A<0Zl@aD601r1
z$QAT$UQL=0N;TS+y;Hzo*S(<hvwByxG&F6AuIwGXr)G2Bmm9~3)M83D`F!NnTIgPj
z^Fz{D;av*ncRlfw%QB|Tqon4pjOWKn>6Op7mf5f&^bOY^8jTlD1G5^RxknkaNIgg>
zUD#>8wF7E+`j59V246eQQKL@#dI%`^4|0Na9lzzg@#c^)n=5~h9huD<d{vbD?F9TW
zCC7)g$jzmb2%fZ{a`}-jS{!?T`u(idvwn=NB&clQAw_G&EW6Vff1h2xX9peU`xX+^
zPM4ggqzKe*>50jHxv9eZk$ky}NL^oG$~o;Hx)$^Fv%&Lt?wkuc-`vmeL9Y4YI7=t3
z>e?}-Y0}bb&SAg>(6AqLUrz=&cUDYPH3~Hm(D`i;c=PV88z1|F+{CZ6PD&agNiUkg
zBDI+BRZi->$GI_{!UkB%BX4?m{G^ho`9Ewn2I3A_j2&toQ-$#}8dFn_>=tVJde(`}
ztAvs(IsN$bJ+Dj*-HJB@8(5|w3JQ`k5&6bX+1YadAwBbLNm4F{EQ)wczpXcR&*oXD
zl|@d>E7G|7M;mdl)pMW?&L}kM(|<;$aPScmx*6UsW1f7#doOAImT}&3WN6pfW*#Ow
zKbN^9RqI-3yokEKu5U|GY{6a7KZS6vnr7KqgzPhZ-z}Fg(6`{uWhq&vhg~af<Exup
zbL$LF$f;nB%5!zFXgEc+K3#P-VvS?hEu+^4>s!^k+pb>UT{^c^dbY}#Bk^gP{bzH`
z6oEux(H9_k{q@q2{Y(7g-<rq%R=Q}sR8$!|Am}e=OrEkUgz9*&E*vR8{dR{G!8R(0
zADFoJdw$!cu_H}_Vb+V|=<mFjmlqr*w(8fY!dGBXRZzbV8gIF8gI74FSV!SV)T-e7
zMOa&<MjllwD?iah!3_n0`~!9az!NFLq5J?SA;?AaC<|Ki)BGTy84kLg?0%h`Hnr@F
zyg@eYoC2-QHdil4Ht7B;YrezR86sp|q9|ZO$t1J^PKY1LdgVJ^-q}Pz4_E|@PZt*Z
z7Y>U8kKqV&AL}z=!e#FmlpVGKEi;NVGLaLn>^3^QSk#Uk6^)_bR|n|wX{K&H&G#ah
z=kkVCb2UIil+s?7^Bt{$^RiVLNePhH9{E)k>v5fXjW;r|ugAQ<h;;CQ&EiDOzy_pk
zrxjepRmg_chH*NJGMNz;l)NV*s*DWF&dM!+XaYm$JwvHbHJn#+WiaSB7o9GU)s)JV
z?iTF~E^ri8&}h_TNL+|r?`S#OO!5G^92OytJeoy(8(V5SQoL{vE7X#+i(r&VA#y^_
zvRN4^g&+H~u}4H9I{TvQFQ{XZdZGE?|E8=I1RGClnk^EUPM7YO;YP7t&JRZsK@~y_
zZIC+>5p+7JK@SF2+@Tx%jnzxc2(CLAoLZv1)SDzjWp!J5f=%oPhbCmH&g{vHd6Wwj
zt@*L&LC-Wi)Q&vQS%MIETAx8V0aen1Y0%Ee!EFmP_SSnfz6Xq^p%y$Z2hqVGLr|8P
z@$qdWX3{I$Qquk?y649@yU`@G-DI2RG??YG7DE>MO}@OW8@sQv-W$!+)@Qag;x78z
z!OIUyy<g`$24*hG_Y-n_x>48oIUIK5kTd7?LNpBCIXa?4J{w(d5*1omdZnojkH}IQ
zBtVG;l_0nc!7X~NlG|KjznKyZUr$<*_jX;!JdDkl?Idr>5#u5jFV%hpWQ3h0EvF34
z&ZEFQV}>ArTe|(>P44W^q<Mlnuz6*LbHl9O=fKQ@gw@t#PKj;KN$0;I;%nA0z@>RK
zOw$&avt<FD!pU3Nrz+Fp<$bw3R~Ah*WD$|vTzZ|uI+2PRdJ%<(4Trf4o$n5CS*VCF
z*`0R7q<b}rbvCr74PP9t4G~ibQ7gjnjM<+o%qN;kk+CSuKSa4{*Si(mGa>Mj21UFl
z;gShRNmmO@%pE<G)0e7XoV);{>*MhcEJt;Gm2*crp;>jjDJN!Dfv0TnbFv;_wO{5s
zq(QJ_+zYSb2zrxxr>0*I@}X<^{HJ5DklEtnKi`4>ju>J2$4%qEB1YoJD!;JL;79I(
zvnX{<p;!?*OZr6&5MYoq5HL_^07#Et(PesKVZlOpf%=>diIkC#&->Fg2jIByHp>64
zdrlf0>`3FSM|W1Ssx;SEnb0>C5dDL>+i#Cmu}OVX;Twp}oG(n~(p1R-iTR#eDGaLx
zmIg@N-~m-c8RhToWQgHD{uyBW@BAe(*bAO4)?kpnrtuzJ@Bmx>4QqhCEI`Y#S_1=z
z0Jv;KOc<N&%9ZTon1P=mc)JU|r3FAEf=v^`8XL>>gNetJ2(>wy9T60G@MoYDsWP^L
zh!2d<DIp2iJceznJ=R@ZN?2(KZ(fiua4fVEOeePGAD@HAcr_kp&y*j|q0Tz!d3(Yw
zEY_r0Q@AQzD_Ygdz|F3v5H5Hr9=8phR6f}e)mhKGOmQ=Y)^9~5N7`~$_swn+&vJ!d
zA!Mzu?&?ahRc;(Ve=g{N*f3SciT@r@pP4>3qOAS+H3f>Ak5>d;&KBGp3E&HA{E9S0
z4eQrqlPO6vm7L1u6*ehs?6I(qFOO)foqbgvi}-k%J3_jR>ST#`-bA0fX`W0;It|o$
zG~^q2b(yhicP2kgsF4+1qP4#1%s^Y^iKwtHiJ53Tmi=&agM~(SV>neR_SC~<O}?!1
z-ub?mGutV%L=`96kpf>;SIw0>H8%QSSVs>1+o37WS?~<iTYKsJ_#0F(&=I_ZjASe>
zOQ+urN0J}C02U=rD~|EAWvO*b6gS%X=A~wx%{2tk-Gq>y{EtC%c;=xBrsG@(g3&t5
zSKV4kKt89u$Z5x^*LGnQ!8@Pf=XciUh_-ud;=ZAyIG}PMEjiJ5&=3d;dq0zE!1q$`
zS0Qj#;yq~Snd~I7thXqYWIkiyN)T?a3y<p_d<RNpdRYI9Tj(UOi{M+t4MF$nmAHX4
zm+7naMZI+l9f;k9R97BtT8)(xns3E^u_GB1k}hm5?F)~?Rc&F&+awRCEE6HQau!6y
zavyuoLs&K#GNn`#^ADc1WmZdk?}v^S!|%~GU|ZjX*I0CqPnCBEIpfm3TR?toxZeWx
zN8yZ4N;eYQP_Q>TEY2H}+tqf7rCQP8EH^VHWJr^bX{n_D<fNor8we5#L~qiHL)X!D
zUch)U743dFuM3aT|D=CfWS>~Fc)W7ekcISdVq{`~+x#W6tL&shu4ea|Ik2_`NaajP
zp`B2s8yaFIM~J!+j<l>@&6%#`w#9?BLMr5+YtQ0K*@T7TIPpnZq5DV7XXXXPhvPqN
zHUIkP`1j70zpDowt1MLqq~D^NSUZ39tpsqX(gC7}{J~+EHhz&)QbtvEU1Y5F@Ng8x
zeKoE~DsgI+R8{>D$i<$dI|u<LdP4us%ft){EZUi*lWv89!3yOkU(%z?|I;TG7;@q8
z_1bfW4HN<RoW)l__w}oAC7ei-0YW4?3_Fu46x0grTQcJGprJkH7H;~j?CO9kt7zIl
zz{FY4V7!Yl<we>jvfU@cI{*`cIdyYB48r#}kXFDYPie)Jba!cZPjI0{CDC<h{^|aM
zB+~aA@l<U!JGUx)E?dRlb7K8JZ9Fu7vM`-e&tm<?sPE=E!<LgRB;6{V;l-nVz)2f1
z<2=wI3hv0=Z`1frI-`si#im}oQRujDx!?LgarI}v{<MQEq0(vJ7Svs|e+o4O!%fmn
zWOKVH@oE1FZETlw(kP|y5KozY(YO_=Mp5UDLbuYCyzL}^Asv_X<Jz%JOdyv$8-2L~
zM+J>(z_}ef05&>t$68Z*A<u7Ip@BEP7x>79ML~-xPFpio^1CK1oz(Qi@NZ6$N*NZL
z)BMZBr?qWun}?^5atJh$d5u5wL%W3MGYU<B2FX&&i<YV%im`O0_M1d3^w~hp`t1Eo
z<htj=8m-^eW%>?q8>8e#W>D7^AtZ~2Czkcd>@sxWR<~~zvTO*-AuB+Az<mrDo_ZLe
zc$473?8h*x@e2ru@jcY4EAgvIvGO@S@`!x61-hTHX7U>DTNa|TPixS%b-5-|b0y;m
z;@};b*4}U}7Fold9=O$zJX-p8Q0n#AZBh)IoEKpOlI@e0#=u-bL)WvfoE`YCXK2MQ
z$QC_S9hT`@>8F)+5?0-M%9W_=>(|@VeBd=``fmfqNPe^$LY?7ZZ&Hl~dC`GoQX4gx
z!9`p$L9fp%m8}>KN{y^(48?FSgX7+Vqp~fxAC}S%Jd)FN=yO(`f!CFIo!q?=c6KF}
zS&A+intSxbH<<e#9Um7~#|PW7rK4-Vcw0e4f}3?*P6rpY;@h~zc7pV@HWkW0!K6`&
zBsHzVK4{M$+IM=K8>Ul;Z{UD<d{Uz59ER@ck8w0tlCkhW1jFm&n(OJwUm-jqWA^v>
zM8*B{u1-Y8hLHI+oZbKJuC8b4_)qGE{|XL>AF2GZyM2AqBA0n(^pJ^4iUPi%ImvoM
z(e$LzfZnUS42PukL~6AKljkJvx93}yP?q%%v7XARvQ`k!x3o7Qwbsa9WjTH-W!-7Q
z;?9jPLG60o1(uAqDb#R22$=pDJX$+3IWZVvHH4YvY<whmz5(`$_-7(|<38E%4$z((
zXfFZRh?CJ8_4XB-Eo%I7*6;26Whn(<Wt{=3{t38(^s4GA-u8)#-X=;pXcq+_a#+}o
zXaxqnrH&_l=VfRopK@Zr{z^c!Fa$_X;PInxgBa8yng$Q(WG6~~9?gT}Vl>u21}n!3
z)&q)vY{W7L(os&}Tk2gTG2Z}tct|POtOaTUDWOb2?9Rc_8a%)FWdS)%(cAtpjaJYV
zI^9K`!XL>NEr`(FPPIo-av)d#P)Ly6jY+t5b>FaTMZ7=a0QDAXrU%$PCkCGbT?v<d
zbCnQUuj@z4jYEc>oyqhaOLHV9A9JQx`T+DByEw;tAl-3{_w&lG$D}1~sSfaZwSAsx
z3Tx$;O|kE9aoe*gI?a~MF1A$n40y4<z3e1}<nOLbWtPd}NuE+zt;_To;RQEF9u-N+
z+@u|Q)mzh}`D>+LEQ8v>AbRC$OP1|l%3m3fbtWCC%TsfLfOY#V!bmO3!_HuVCua+z
zh7sI7??uWU8A_}A4_f~a%lR|(mQm>hYu&ZW>w&fa2&Fs<<7bbrzUHLl&VSuT4jnzG
zT^L}+Q`db9(t`D2LsE5}_D<8?DMjlff6}zyC!KrFD`Kk1Dse>S9e6Lz7SE{4yrO7m
zrNhdZP(#ZV{}9|3WzLgL=)&pm(gb=;H+rGtl7H?<MppLL@LfQ;EOB$6B=paz1p~U;
zY$KrOlA8KuB1(t1RNeFCCDgDDA*&746W*VmH!>uB2y<|-44?C;zEoLyRJNs2`e-MV
zeM_J7#);%BP#D~ciQRQ#s`K_KJ3Nt{P#Hpt)^hKCiLNs-SSh7<M&}T8$`~JuvVg9)
zvucc5u6Y>J-UluL<}lO$9r64WTcY9?jYBeQI%O!ihhfiQUbPAqTM)-Ng&sL*CA45c
zURc;Mz7~?g^7-Bfr8Ud1+5f9IhB;H#=&J-|VHeFH+Ac5ibO?5-eH`^Sx(YqKxdT02
zRdB|@5}aDUQY_5@(HMlyC~{%~9;(?^qIj~HiQtxBK+_tgD5^7F#YSgb*;L6~w3W8L
zsJOLFqBPC@BmS3E;ZyAWp8};n#Ul*Zzs8^OYyAK9ivHzzwYIU=H~8=5313m2|Jeib
z<EsaR{CC??AvRe4KE>9zJ$TArGs9K*U0ii3(qDnOvPzU>9At-!RW<^a$$ND0uQ?@Y
zSWwppPrvP?6%>?ZKnK1QFoD@0&X7>$uVS-J!IExJ?GlhsV37#qr3#KW+=2Xvd%2@b
zq@;hQ`TYf{IfvD7!HNT_`2#(EDLdHp#(PiiBjAaqJ-x17la{)Da_a-CqtU%F!AM24
z&6gkRmdDXS{>th5sbzqkeYw$Qv55&nMJ3uFpsQADlnPs@Fk#fXSTqkE9?;pS_A*$i
z<s38mGNXLIYF>y6wpSdA97ZD`!!FCRSDbg<U=u~<fb5<k=JgfR$Esps<q_meck%ra
z!t@((r2x+)`3g%F?s~iMhP@K27jd@dB0|TmzVXkj*2mNX>Thod=drW&qw_a|+8ogu
z_BGY(($3;nj6Fx12QFcCU>H&FfGU2cXFmypWnv}}Uv0<j#&69#3gDYMZ-b7*MQ9lS
zDVb$zEjf#xf_2Pe8Jn!+HkXlI27g!w*3@$aYCJoy$Y@_IR)m2T4^fLIs=oI@a^<)V
zgmo!JaP9hWau3I}sgokFg|oYWO2!qxXo^--Uwt6P9nR#USNt%~4=BA~_W_4oYrHYR
z=cKU(E0)=-bC^w=@CBeQ5TJp@^d(80^q{RRsO6R_+5>FPaR|+_Lau$iVoKs$z9Ua9
zB6EFw!2zGC5zkSp-PdJo5Eou)tBu~nX3c7i;6_mw%L1_P7`;nluvCzytCO*wJe9yi
z2quW$wY!<;)>^8VlG?Er#ryL@*L1I9>_q#~`TO6iN_pxJ1m?w7hTk5nviHo1df~ox
zY2VgMtSnuXP{r|v;NT6l!@Eo17*>9Y-~S)>-mx(dH_h^nZQC{~wrxA9*tVTiSg~!}
zwvCEy+sUT?GqcZjKRew$@ApGoH_kcN`KhcqrmlLbKpQUQ9FPSr$R(sEih<!B>mtk-
z6H}J-fRApW?`A1w>%@{O){WLV<~|;k?sm}-i`aAu$I^qSNZD@Dm6|fMwmaow*zMcp
z&d;=$yUy$~@n&yJaH3j;wO_&nCG&P2D7M7+N}3Y;IvsL(@D0B)F`F=F=23m)s~g)D
zzG}QLd{(0id_W$GnWIFiXx1vXJ-dCGeUSi=@4u9vvH$+fjNZ26{6F9n{?Ga&s{bFS
z@c(fN{~xFDpKuCskEMe=kZVT#fP?$wtPs$@xD<W<p)BH;jVvS7w~ZF_%_*e#ry{qb
z^G|adCu0X8f&Yyw{O{zg#OAtubpYY-EprD8C<FpwhTcKXE9MSxLjIKMt>*d@m(|hI
zd4aFb59APZ<Gtj)0KFt)@SZ*2Qm=R08|*pbRNplwV81b-bnp>t*DbO;O7eYG@`JY?
z)3_Od3Q|Hd`@<798{KGujyKrxTIxW&9>`br+L5@bLKspw>K6PO1ifp+AFqI$0&xda
z?y)LnySYSn$Pz51xlcRM$>6L4k|#bll-`TU9Q87kyy3hsOxIy7uZ)}tJniSwEocXk
zYSrG+mnX36tqXJUTq?;z>c=`YNHLC7Edp=m_KYLu3(7qn!*er<AWTL6Rz=CjDS%fy
zrjmy%hZOx%Ca3o1_t2b8>1Jsd;Ye3n*Ykm*N*5xEigJ`2+Q1eI3uuLO50~U02|z8r
zREW-0?@bS_23$ZSsiG-iDPobbk@ne#m`1-+dP~ekgbd6c=a#&kM{sHYfe-OlSk(-J
z@P2X8AUr4v%@Z0HHO>}nMJaeF+4y7aS!HCEIW_vv=;6?diRKrXT8$LPNC!fB)(?d-
zw`u4Y3x@xw=IJ3JvDWHTJR<f54<a@8x%Iv~#yJ}i+cdD?#^tVMhrh7tI2+Q8=k1`X
zQ2=aBY{o4r2XTEzg>Kq*v%1Y+nsu~)rnoUzVOZTOFHt0l^7&a<U4B}Gzg#t;6<$GN
z^n1SSCv3ECW?IPmN2Og4jQI^-l`ex_ZL)@#^a>~oClj33Z%rc2yk*AEhWaotBovy)
z4A2;rG*LcT#d&Ovg;Y2?C*&i6tRfU6&rErI`!b09l!wrWiLA&Lg0WVX10u8SP1@-z
zz7P>G^)T}Gt2js2Z#r)eFX{8hecvR&e4&^~6&_1Br915M2eJ}Z1sH6Dsmv)_q0nHe
zE9hsOe+Gu-YJ7Y=bv6SL-+J<r39Go?@I9##xMd~W3euo5-x?hG4Bd-bfg{|z$9U#N
z9$3dyANB^EhlS(#bu)NX2fFM`x9v8R-4%SiQONciKBJD%eyC*xxa{gY2$m4yTl{dG
zkO{4;4=-ToeIK>v10=}FX--FB4J#PAp%AVm37wpK&^kFK0&!a<_-x{O{BBKZhYQ0)
zSkXbShB%>%d}YJ9OvR-^u*$f_SVW$Vvd+4g7=IM^?fC?<Sr<&2TJplEwkaiLDAmjv
z)<Gx<L!CpW?{DKdTKa5KDd8xwEy|P_=nZLND?R)Y9IRX7a!*htHT-eu6;56BGwl0@
znXX%%pN&gKv=j8QE_MyBm4@cY4;%^YGPTqVB%!!U1gELq)QKABXn~_=s0XwPYNjRi
zKk%_R@E0B2)nzp?ms}C`3P==VKX*Tzv?ncbM1Hil=C>OUQf~5%^xPlmW7Bt7AtAyB
zW@OwIeyl{7{<4EwH4v16(IkE~viG+W-Nh0S0p4#|RCmF6ozT@{M1Q-t68}T8%U!nL
z*npZlN%7EtP$Zbl9i(_?QjF}YTVV6Xxvh&7*~)t%letmRa6^TeE#~1lj2Tljp3Di;
z*mt{hj$IdAQH@H}C{yw+XENa}tmaNYZ88jlFN$^#zBMDDYXI5uCw7<7?wD4{J@TfE
zvkL#R%UyvZZH0+$ti<)DRDaApN56)@C9Ks#fU#|7Rt-pf=TbS+U|vDwyMDyvDY1`p
zyZ6uIW2U2d9mTx=VIz#k%2;glEm?F)W+8sAVuQZC5{jhh&Ctq}woL5Iz@~ore{MqA
z+I{)5{iBia0(;Vm|8Fk0G5uX)?7ul^|7tr`2m0%vJzX4x7Mu`qBj!(mu?<Ft=<?Z;
zZo_qPwmT*HIGWyqxGvTFVyAzYe7nZS9r{Z0MNm@NQ78wZze$pRlA3RpyBq-73}%}4
z%*$Ce)$!!f6Uxf|ywonuih0XnSa$KPhBint;iRv>)jb+{)kX04J_3q1<H`}=T9o!q
zH~`DnC)3JEll$RqVKJ=HdNE4fLWWzbC72Fy)qO(3i?!i$^@|FxnNPN$`6a7nhc;RB
z>c$H_BmJ6S2;4Xn@P08de+Y?)Hy-ySJwCztt3!!`$?|?Yaypa}CWXF6Aip;KImsTz
z5A1l{kxzOBn}IvM-U-NF1mej}){_mqxge^M=(77^gE4$ca!Ow8PB<)A9A@GPXYO-3
z-G;ucib}V*)HZwEi%Xos^aLT{NeT-OZ>EJ>>St!}eDFtwpjS+Lie!PqW#;F}OVIj*
zc3DP~`qUHN^#uvRCN0BL7H}6UXjbS?9U=eaNg<dcx)V0oW`EA;1~-j$0pCJ%(NQ|B
zB*ZUj03}Cwj`1T8HjrnBZQ)|k%*{!;!LSm^ea{Pq2ep78)~VX#M^j%*KKCQDykX;B
znsUF-sj!Z~X#PT}^lyAyLbH=fQTEoel0V#xGu{j_2GpsvI9y$Q24_zzbnWG@Y-H(_
zG9ni@bz?_NDa&>(Ok2a_;oEw&{jelewEgftw5^5Px1-KHzdDHzV#9^)VZ0rV&T*pi
zhDnow!VHnzMwHP=Jh(Eno~&PEI{*P+$5mLHDbdCjpB`x0nsg__<vVD4FQjLF1D$iR
zfkbn^g>841FUg(@OJ%8Ht_QEE76sVaf7`gc>Gd-1&nhZgz9Zmx=Zr=fA=U!!oq75^
z(zlxl*)W>ZT#GOS1m$l;R6WG_v+Nkonl)6*2}$W2v>eN+1pS0*?-RhYy_jW2Tc-oi
z>8mr``P5ls)U6%PX2df|Xy#&7bCC)`9KvF5)K@74?&avVYdH>k>b#_^uE7^I3Y<iv
zD=nNxEP0*z3YBhVS-fb)TZgmn&~|~JSLTY$7E-<raSky%{<SrvnIh#7WV&n=oYq=h
z%hBG7v-$e&IaYaL=cZ~;QQv^r9@~{!wNK|A9$wQmLaGJ+E;C*&Nvf<uWlr=k#aDc|
z%0x&N=Sg`nPf!sW*UkoO-!br`^bwbMwLc4j#)xvSM{&%o_pW>7T`Wd0^b{lfoQxr9
zY8&V&(_Rjft$w_uHGav|!nTyUF08+d1j&Fzb$hHjnrR2CJUP2V+c_isPHSdK?^wGf
z;RkeY{<NBthmk(RwEi@oBDq{2-Y!y~mIw~ysw9^jj)-fzM4b%!f-uBEx^Y9VW7D`t
zc<ZRXzp-a2a+2Yr#6wIubR%`$2#~9^c7flP&#k$OwPoPrO$ZWw>w=qw&f>P`7|*7p
z?))O&S)U33LcJ0Tz$=dcqJNx~`m+m5GY`57dT_>c@)#u@8N||5I)ibt9iLuV2<R^)
zk9b98F^%GSvtz0sU;~#Idg%`G;Xu<l_LU<`wk_DTyS|z_tE8J`l5j55pL#}vA&`%Q
zc&Tn16w)YLld-hxH+~G4I>4<58d4uql;cmsDD!KT5g>ePD$V<9i9}hFMvy143Osv9
z3ik9(9w}i3rNDrADbKg%=J8PQOmoMN6M+a=QDv$_7`<<t4x9M5fdv6A-ZqNTSU-b7
zeP&Td96cHD9Fyf8{LfY$997>7_DG4oKHwS(zP|Fl{(<c9TQ3Pn_4}3k3i+?%9L_dQ
z4$h8F#zy~2Bx+n3oyr$S0@&t~V{}z!(r2(c7OJBMgDF_Cp#ht)0CoYA+xjfG{IOAX
znI(b+M~OnHh>6+zbg_1XXr$8oML34HfT{x`{|V*OPotA;A%P;$tpacYRN@4Tagpw@
z&}#Em4ho@ipIugMDmI!3im2mXxL@7^EL3t1fXojgP!5u0O1KhL*yHSs$)hj&dxN7U
zoc)$_Jo$G>*O9b)Wt7!*TZd_zAPNx;Y$st<hmIP^?jf{lZd*AG;E|;(pt^icn_4bd
zx|A1dspDFJn$eYheNH21T$kaFn%$QngH_OigDJ_U3z3Rw2m(K*X0|23z6u)Xc!%P9
z+%w4llnNmd#d1>5M^Z)QA9zfn@JKbJRuz6{Ye8q>E=Zf)M%0ClN7n<%KgFA!5K+TV
zZJJuo+GROxJ!oZ*8qKbWVnG1f8h|~B{^S1D9qOssu9!G3&Apq>F2<emX`RY8f#tD5
zn>)ACX1ch>pY~3y(?$3ff`|J_3O&%P?5zxJU2{wUqRINh6x!iz8K)Ob{dxqW4)Frg
zn4H5iGY9?#XV}(_J7;b}`}*tePxj)i7LKB|U8Ur0u(brh%3g=1n}!>+=whqgHM-r6
zN02P!e<aT8=Va$BUgre7Q1Zy|Ns-UDc{gG#V(&l>G4wYLD=lsAbLD_HB-j=mfiUrw
z6GrO?nK@<A%RV)<ur*!Us`i8udRz(NQRE6tBMsFnjiXE|0M@c6xq595H{q7bK;1l<
zh+J6qjm;g`9#AH0`-MpfH#`|BWgaL;V5BGQ1REc!YNjvmbQ?+MNVkCuNB{$1Yr4QB
z?`Smqwvm_NlK8zE+heKNP(Yr0;)r+9lG0?AtaaogEU_S>@sj&+6SnvsX*Cl0)gf&n
z>Fw`+y%616eKPGDrYA$99T9MTEj+!5Z5hjhF0W9&l+JLf2|8`+urL17V5=Ob@I=QM
ziemR6<hUz>w<*ZH)~E<`lF93I@j!-c;VlqzccD99ohvOJ9?1c0g`yuxI(+qN{X@*$
zRFoLJ@)%G*Lhp0{Ac&}u<;9#zOg5>SG%-GO7L^VWy&IxmIUjG9m2K9B(h~VVL{0lN
zC3ioTyGaq)_u@qFIRI~@fD;rA9bt0(=Z~9UCrJiR@%un?$60)KlRsRxIyZ~%@X9f7
z8KyfO_6k9)eR0UC*FyQi;fX0dEXfWAvzqH&xiGpzPcS!6lB3xD1ZsIz(yxfwG)iHu
zFq6J!8&S;=>F&(OhUD~|Hlf+}{xTNm_^1dUb$o?~ar!^5Ge%mkn60*7U_Es&Knx$~
zenqC!ajA#P#UDoi(O<RzuG=5T{Ps1YEnk)(jNok(au7a)SUa!T1YzEk&wPZ(NaF7a
z!QPY<#I~}6g<rPUp2(LYp}T;{(mhB=gDg-eB|i5V&%2E{j?LZFToZ6USS})a{0@&+
z5*i<!exi;%cCB=yqg=t9Asr766iGciY#g#|Z%!gyz72X3>yr*{iPfmySs@N&=b418
zm4)Q_a7#6#>>ob-S$?2T@=E&;eZL@@W^oTQ#Z7jRyZV|m689AQk*3CXtr_1M)-sv!
z9wn9O!#(HscB2`W0KmN94Cg$YMBy}tqcuRyIv-9x=%mW5ExAo`e>()8Ly0+I;Kv-6
zrteBVlvajAyQt<6W{(?&^Qvb>x#vqMbs~f+y@@+a`Pyll%>h*w&<8IAE1rw#Ym3}k
zd-?20&dXH5pcS@;Fc<3%O?>#{3lMw_m-y^}V*z|ZWT#tl3~=ztGj5z&@rKYxWVdB@
zk{!rh_YQ9nm>c?nX0P7+l-oUF`XYm0Wx#j2q7$!d-b{AQ!;657m)fC)WiA}tNRN`5
z+y`F;4ClizpBhPP8K1N><4XFch$pKg?O$s|C&%M~ig+rMhT549$1{{&_f(ediB0WW
zF<VgczaJ+alJFV7>w+g!PmF8(LYl93>N&sJb#8XlkfdQ!{=p4ueb7e*(Y~i-Zd`CV
zS<3R{Gm&&XkG)P+Xb-ARbv7y-iLY_Vqg?Q0u6sEQp)*0$@2ti%Z;#9X%*dj)cck8J
z*sGx}8qUkaViGTHmcy%K){Q@1<<42^%uOS^Nps2HB(UNd@tpXfbr8jm(Xl6UEFl_+
z95lh~yY)a`iks<icJM|x^@Z1^_Yc=rzpCxpe_;~-bqbOB-}*MFu)$S8Ax&@$j?W@*
zg7Wpe^)ka?ZhA8JoP3?zwBR;rsw{3OE^c*q?+R;pf7I%*7<u2s(D{7MzeA^#QDsGs
z)dIckmf4iHi<)#X40C=X67Z%^R+`H?k}8FhGJPE3<Y;Mn9rS`Cnbd(FV_b+OH&kzF
z`X*+l%vGI!FDaI8v4`XJkMO^h9z1NbsgY@}{8<N9E3>x80M6G3A@H!XhS=zHeQ>`Z
z_f9grz{;VDE;N>Wl|}$nXZCPlo{^-C@GE#jv#R3o$c_V%0YmsnAr|?o?9ue=_ZDFu
zL+w!<x@*$&8{&b0MsBhH{dU!ZR6E0QJm}*MFT?u<xCs!=RC5&fkF=ggQqF(^xD2dw
zJP)6o5<NKqwzP(|f#Sg@i#9m~l8bon{sXalchXrBeQc#F6(h&!RXIX=sRi^MqRwff
z<~HXn0^!yxfgTC}B2XYHn_0S1XCfZn>j%^g5dz(Kbu3x`O6h20k*-&rwG=|bw0RuC
za@fRZQ`O=Jw*W88BJC&cKN2GOQxFc4*nr!Uw646$jcDja^t6+5WB&en@ckm1)lE2L
zZ)_D9i#wk#37SFPLUl&q`+Kg=hl8B4h^sIU`CV7L_K{Ul5jh6tprAsyi&b62ruDZi
zmP3SqyQ^$m;imTo*kbCosPO_|X2J9hV8we+lrH>sQjGTzvIsP#*gvQb_iL8M13SRz
z5;Ga;ETz|(7B-uO7W#GiY4s(U-zFkD%8fSYYku~=I{L*FJVsg@m%G<jW+peDD#F80
zjk#z!G_=-Z_x!42Cxyq!<TRRKGpWK3_8@=nYOK9zBB7IUfHW3tY}0^kl67{fatQLS
zXqU~ht4h{5KI9|t3*kx~MkBw}?6%u6-0lT)46>#nvgw(SobZ`fa%7yJv_S&zjT)Jk
z{xQUEhYX<xCM|@?x(W|V)qt|8MjU<rvmlcIn(K1^dZuT3#s-*p{^iBGyUtwnNdmb+
zI}HBH39uKE*EBi5WW~`d*!!6Q*@(-c=}Te>Hc^P}>TH??voV9mhC8VW!U29$8Ii6X
zK<-D3_G1NT-<z_{54EzDg44p>$BW>HglNEi)e5vqegsImtQnGyOiD7>HT;FTctE_~
zYHRK*p-;Qdb_@rqZda$MIc8Zj_Ff=il`7o1%r0XLg9r61I%iN-P8@VYnkT=jCHb9z
zv$ZGkRGm_7*PtT8n6i@0E1z4ngTaKyd{I%_z^bsCrDi#YCgurIlnY4xfSn3P%2KFE
zGKq)qP-YK)!xFQ|PXj{yF{dvJN)HIvowUlF4bAW@*E}P(`e#L=n(rRy^Rl|U(v)i?
z2dfD9s|l7Yl49XBdJN`a&o(NmYeFkf4C|>Nw&g)tChVp~fM*xTSvnXhkLIG8_p(7H
z7$Pw_5{r(@XtXP~;+ewtIE}SA5VfJ~tI9F3G<|Y13nm1g^Fqix2CRk!#Gw|71f}=Z
zR4g9NU}oz;c5-bC%2~TrvjF3;#B!m6o4Z0<9Wq${y<CM9`7q=7UtJv1yMd1fP;zb^
z815I;vE05}f1Xc?>%L>*u_Htuh10(pX5D3;dg|m}`v>94H3B&1M@xgVxAT80{eff0
z7xu6?+$?v%Dy7}>5GcET5m&2pNGb^kIs~FmfShcKt)e;w@xsJ&Fn@6~eiX1w174G<
z^de5_*#_J>g*A{kpI=*^!US#6*>3@;9yy;8?~G;i4IJh&djdeqJjdVeZYAyt`oBOD
z?upFNjla!h*Kc$ApD+9U7p>UZh~-~>9scGo*GVF;f1@C?I)0arIfRU}Zv*tJtV069
zyCNdoFXL|=t$BZkzQ}blok&$m`Fy)Tor5lXl{cVk{8bQ+eUp7L0%}88R6vbY0#JqI
zecHiTY0__sOJnOC5acZYVE+WkmP;bj<|)tnmCgbrMAkZ_>jc7=_F62flRSKc^xVh*
z=@4MO$P&bIdak|K<nebSU=a0$a;mG5Bj>R>UgbTtMih`7E~5lnYMi11;wXL~zObXR
zl=)%?0f=K*P(Md#=|9&MoYusz21&%ZAs(5}B^>wHC9(Ip`^NOf^Vttecic?7<7W&S
z&J)aXw{{&M<YIs!h|Tw9PD}NS=&GKpBF<(utk`fs6ptIS)3j*+;nbQSpd=<9>0PQj
z|Kpj44@?*ef6{4%9Ie@9+z>Ojh>Qm2wpuCLf7M5Z+$lqPrs9#L+;?8sJuEV#`ECs(
zaPtGJYzDqVv!n5MkZE5a@)lSI*68?|O?A=LAG?f7_2^$h)>tws)lrOvypm5AK%<22
z7WHq$UYpgAls>T&`|vO4kSeyuD^q%Q#&`j0f$QS}{<eIv^QNl>9h}`hZLd>$Vco}7
zl&5W6k*rV!t)^7c8wIh(*i@<qwL}z<AOMRZ0Pr9VzNGDzq)~)0UHjM1(s=RAlY%M3
za0%nT%r*9y7jpaxaWlR0h+zjv?>Ttv*s@q0gIygeeqxD3dRTMaDFWX;EfK#i+xZd3
zzWXpzl7hg9tB~I>Zup&{`%lsrDV-vhlxf;FYxr8%OWHUZO<=BS9)8IH_kKwOQ{bpH
z_q;BK_gSFaR^CP$L}V<tY~dqo*i4r9NwVaRyRcGi@aQxE_obg`UF+bW9>7i_g!iEq
zZ>+u*1F>Gtn6x{}_zGGxo8q4iC))#0AZouH?He^eKiZWNB|_4@!Mt{G<9BejT+@=H
zLYlT4{utDeS393`=AVL3)Vx~zm?+5)^%1|++r!>6u2`d+zI4R+>1`z_HT7$I#o~js
zxG6BE&DpBHvt@eCzT=77^$aK6UCYF?-OakW-%IX_@E{fjo6zl?0!!MN74(J4J8G#M
znQiZ0V2!mUn>@y4ib<x&_<Y%0rV`UHmlpDm>{$MRM3d_^!M<2{{Da%>8Ty<=spB62
z$UE$Bef@(?^Aq&%&FG}3gCnAUQ+{Rnx86~IgH8QG`w#gQZIdEpdwT~01ZamT17Q>5
z>p||0ECbHfxyD6J?ID|w53;UI%XdX?13c>;Jt5yW`dfirKA4;ZB><G7NI#iZKD8bO
z-5!AgsG{hxqL*q0D}?E}zT?;>Tj9BxLVJ#LN0De?lda8MI=*E)z8O>0MEZ&BmZHSN
z(`2iazkK5^>nXFz+Lxuo8Qt{Cfn9LAk1s3I=TXR<zJUwD@=!Z9L_St^&U3M?lS={^
zoJGeKUuLG_qNZcC$O2Q8Spd!)9rSA!;q(>iP})W4lruyw5p8I}RwX%^J!fGQo(f`V
z5NUquNZry63-{Aox4tf$kP$AEjA+Ap#I?WI(~>J<P<!pTDX5wF)LyW)yL{YkRLzw)
zFW+A7*{(a&LY#M?EydKA>_~WQc{Izz`FA$CyKJNc%pkMJ2)w19jZP41E#L7;1K4+Q
zWgKz6oqq~W=WWiBc@_*ViLVLA`8rxc5r7{}QXvfh`>2k3OovRH`ow!zD~S(!OPCp)
zT)oy4w5%_4hWNE~0WhBAwzjVub$u3dF~~F(Hyr#=@|&S`b>l=P%9xngF4Ok$IW|-=
zuENdnJsT@{c#&vEVyK4Lm%1%&3b%c+mE%<jlf?!+6<Vc`nZ%6BQgbwk#U!5B5e2VR
z!&xt?YiI)G)J^INYp|@EwMP8bpZQcsZjH`Hv$6NyyWz-Hl%ekUcn2^cZ${G4TWm@t
zVr;vDL(>8{Acd2w8Z6l=NCgS{9qSnCKC+En2_dRV!Zu4lNdnD?^qfMP4y}kDM|7mp
zek97;&!8^CZgD9t=@%Gi(A+=tkUZ}k?JE~*vP@-MzaZJ;09#M-v+nN^d6efY8G^J8
zlSlCLD8^-orIjFEqs~Y47I|b?Jk3Z#&%)6fjJ>&$Yz>SZ3r=0i@pO3Cq@p9~lij3Y
zTQ=s#_Y4K5UR)&<a;Y?>doI>I_3fguU%lC82*(*=u;PW%Dl}kkN0f2<hP=omTA|dX
zim`xID3#ai&rX8Bi1eOtUnjYaxW~hA>4rRS`SIU}S^4YeNJ6B4=^jT=Qvg#<Ph~cH
z^mnC)&Vbl<pD}wV>5CSLY3OxCn1oPNr?T<+jpwQu)?Wvw0GltKfF9?L|9U7uOQ2FF
zjxkER4CXq_uZ2fb?d1tgkDmuQ%h-r=UYd{$$9ee>A)E1u7q9Spd?gID*$ar?iZ?pC
zW%GL3*yrgwAG)N{u<2J$o-~W;^7XYN$#IcOjeXPFsXDUYD9E!i=JZ=uT@PH1;5`Tf
zzn?kMtGH)ylxJ_a;Faj#x6H2XfxoLj3W0zuxhND+y$<v{Dcfv_4{Z23`cq%qy{c)D
z!=Fb4^#IPtUdi+&A!6|QCdws8-l8;wgz-^f%%450E?pX`L7blDSerr}QS<`3e%fN6
zyQQ&82YUyxoF3OZT2|AsoU$(Q*Mz?<D!6JFFV{BI>=k>H!`>|I0=!W}<*>j&3!lRc
zEBz-ayv{FF?>&M1KGZWa?w}bWocv+ZT-AgcTeFWwmTpL21%E4xVP%i-_N@#U3}yX<
zH|faGQ65s$V|T}j7&u6tz@Hyz#&?j0vRWhCE1dV0`hD)SIu5DcMD~WymG2K#ed&W*
zNai;&`<$DGDQKWfwUpHXln``nf1sh%w*A!hGVQkX_71GQEQNG%pL;EiFWy#JX*#i2
z+3U?D4!x)^A$q7?x~n+6R17>H6+&N$-o3s=KfAf=NIzWve`~ur2;><5<$wM2htz)%
z|Ng$<@xP1dCN|IIn|)W>XZ<Z~a1{W_TX8M>2L|#=ppW<CvmV<<thvp`u8fPl+xH8G
zp0ey={AK}xyHKw!;a%r5L|P@$CFhnO1WoU6C67?9Iox)nm;id)5Bnul-GGT8J@@mD
zpe`ikLEPsR1Rqdo)q}E9w<-#0DTGTt#e|BpvMxq}=N43EQb_Hu2}r9QJNoavkm(t5
zptCR;0(`7Ued(`vG?6>+Wh<70@b{$I(_xZ218HTqbqQ3yZ&EdFArsM`L_0}Cb@<dB
zs`Jh;^?{LHdXMr|hT-_#4ymuTRh!S?Ga;G~BgwEGyLg>Q$4rZs$XiW6D==M{l-VSz
zj_UZqm}^M38-)iLrouYeEEVi2FMyPiek4_Obbij@n)i)q8b#paBZB<dqjkaQKG&>|
zrP4Nz+D0XiTjlO@!b@8TKLT$h94z*b(K-8hUpp>|ee$Gw*cFdB9bLNY@dOf3N!SEB
z?&YH-pUMpoC;y?X71>gEskqW(fTBfLJ-}!3V{9}{=XsM;O2ahp>MZrf4>?Sev%_kR
z9ZMg~HhYZ0LvLdG8q{w9Ix_=77&@8rx57HyCNKh;Y#U>ikpoViEhQkR)P0b%Ayoxb
zcQAt1-63y2X~U(QSb{Cea3oftm;6q7mjX+VQbPI_T2Z=Lo))qHj0T=ZUr7aPYs$=^
zV3OgVkMv;Y6sOJ&Kl0RM)p{QZ?I9Z7QYJYDi}oigEvXFbK$zSI&yS=VavcIA>x*J+
zYQ6Wl8iyT+#sdrPDU?rV4rfP3m74S<{y8wY`OFQDP{7}o6Mvv$%TQPF9ox8~5P*bC
zZ~gm~lKiW8$wA89S~&Gucj4a+tH+eyQJyluVz4xg%{_SJqN6UV34Rebzo^?pK*2|(
z9<4k*XpXsthYP!i#K+iNRb-w|!x2|I=kCM%Ns`r1B!5ZMs_1CGSrkF6LzL34z3W2C
z`D|&F^a#PMO&Rv)*`wzv3e!m$%X|eGV|y@)+Az!57_^M?R9MR-_KG%UzQJqQ6E{%s
zv5JJFA)z&-V-M~&@8B&5mRxBA&(ixC+Ac>4mn9{epn9Sak23VWAG8_=fwmh*{$e~0
za6IV~+_8E$l-Ohy_fEJ0hDpt@6boB@s4Zj8_Au+-o>G+)-eT-KgvG+;YAYxdU;})+
z2uVBOJcA;6eRG3#L~M}9L}M*On7*d3L-4=MLGr@z6b{}y-y?i78NK87I9_FKakS;>
zmWG9Ui(=M3aweYvpZXchnjg2;mzrgbXoBW0a^Mh`+;JVsoa&@tbSe|4m5nBRu=wWc
zS5W+eYv@drAkqxZ7>#xJk3eH1V{TVGN{{7k4U!C4^Dqv!$x)e7cCKH3Rr5K1g_pg)
zq93s`dI2l1#HJ3`R@FqIsvkq9XD6U&5n$R|oMTgY)9)z@Q>SaP$q=UY;P!2?MD&rM
zLZW>x{DXaZ1tC@SO2^;qQMxtw!)?LUxwi3gp+G*-&R+~Q(N}YLhx9+seSLzkdc~g*
z`o{4H14Puuymw(1gFf1ml0;;fWY!X#eei8h&x5FT*cJxMMkm8_`GKU-mFa64%!H&K
z{jFD`x5g%FG0x71+-CKd4Iw)x!1jIWn)6mW?mH=ftZ_MzhA#s^fno0BFc4~Bj%Fd|
zEcyq+6o4Y8=2xY=xWT~o$RHZs5AG1wTuB>#X@y7myFdK4SmPX7G(d_S=4v{gYoFt}
zQ>kx61^*53`R@Pu5N#Cx<vPpv_fKFE{FFSU@2_mk_g9wgpQgQR9Bgf!{wI9%1c~bZ
z+-z=+$r8kf|6XY{3`>O#0da{10cYY5!4~rIKGH2MyiC%SAWgi-&D2~_`1t&w48ukG
z{3(&dWc4A)ZZJRw!SD|2D+NfH^dSoIgBcFQ-_JMAAK`ZX!p$NxF_tg~9$TFN7KwmH
zSDm9U3G~stvcf2Q8vzW$iZ&#%r_XT253MF1=fK;ba}=XS5QHx>1~LD&=&kzqeaw6e
zB4Mo4*H*MO01?PBl9%H^=X9jM3q{W_RjJb9V3(Znm)BoX6(i!AU8f%hjU8{>W|!q4
z20!7_^$k{SHax4?E}`wfW?kkfJvf|87jOdhmJFwB)BCDSM_Ei&JNU*w<f#hVmWKEE
zpG-P9g*_@o6lRJT+ZsNJeH0(Y(&dqkQ}>KagHq0^sIa4Lc`leZBIyt8w9&Y9iWg4+
zv0Li5oRT!Cx=EDAh=MVE=F_yH>gYI{`f25)`T^jBVM7(}Qpz)i2~iRGU5p?0tZpxH
zjcU#Lm{^c|T2mV_TN__VRT9g34tB?xaoA$+HfLHbFQ+=ZxHkt&oAG3uYi*`QYq)K7
zp@%!RuFCWpKcs818_f%jLYkEq>FIvy5|g6k06ba{K4#zX;~iR-8Klowcp4wQnJpxW
zs=*2@CWvu0J*brGA=IK}r;|B=6QaAoe^Pud5xwSrH;&&xqR0C*6<~e}j|XOK5e~B!
zw8I0Pz)LZR+HO01R(Alb2%JnxNK{Iq4I+fY09+s&{L=28#1rctJNcvY#<&0!CrZMg
zH(y2!+o$r8kykC1Y+F7&-tC@^^XGQ)D&E7U!HoV$?a9j~)iv#~zpf0&I_ZfgYK0=?
z)VyP@{g6h`xEoOfm%(x*J-<O2wia%0e9$MC=3z|d3fK$sb|24#8m_r`VdlIj#u)n{
zy}wO2_#_q0!(f>yGRce%Glv@-&Vz1AHL??P_)c1Rew4=JfwSPDVqZ-Gj^76S1*hF%
z>9}37_zq;~*24u?YxJ&@4F}3yK)XL9eKg>nYtU)U%5Q2g|0>#YoLw>yg1DWpd;ddI
zg*bn;ZSj#(byKE|hWr6<UJC<1I^8vMUHXF~?<GIYtQEHY?Jl+(m;huK^hOwvaB_)%
zySpIUH9+WWy86)e??*Q?oBSQ)dvrPf<%ZMWCimZ3Lv~jF-aV8=$h<>!wUHIxgqg}o
z2NTw1{XsDSkn4U71`7KAdbT-=yRP=V<X}-*A!)2~x?C;CztPaa_k)KZ$-vz2cxzHG
z(o!Q$@CU564ax)>$bCGBTdd1do29g~31Lq@AOge&z(g1s#SjLe9i*eIF{ad0PPsob
z5$6$+_YDMs_FS#cI{C3REuDnP6L@}vT#cK>7u~>n;XSdD#*D=mhYlOSHH#nWb(H18
z=K?3f7)S}bQi`rz5EAv;M{?FFPWjClbN9OLSU+H+*C>!o^Zw5MrO{sO(_^nL9b^m8
zmzM<xqt04vsbn+nnvv$}qNOL2*B}Tky;>8#BHh8$t|I(15&q&Fx?}It1{t?S^AKhX
z@?p2x0b@PupohG8mJKSV3F*8*{BN*>+ubou2`GgD4Yocgv>|L;qJep>nvj7bn$c3M
zR3@7RFlXlVJ%&UQ1_vVw^j<RX%Ql#ubKuDl`ED!Kw^>1lgeb<{e9RPAj^q!aDZW&i
zJ&uy|tR^G8UBh)LBA$`K#G<`t**3f=6HmdX(liMiwdzbtK0Nr%(KMfaOjJFU38y^R
z!@)IyJ3Z(ogdTuLE{1qCZGwkg9yF)G-4bt+<zb?ORKLZsxjL3dXa^U!qAiU(pHDZe
z8rmQyR*&oMeOo#pK5d|0(|C>0iN_CowWqyyxFrI1nhY<=_pEON$F9PUi?TlfHs&Ip
zlYG8)O8T>DxkfKDH>TBk*B>2_OnGIfMQZ$Ur3qf^kM%<=?lXF|mHmUZhis0BWQ27#
zJL9nMlm6Y0MiE7@DLxJf#$H4aC5KyQkBTSJDw7+<=Rdmh9}68bshPNU9WQOgAD<PP
zkdD-U81aEHTCPYj8aaK5ZxqUOs660T8~FvnTV*V!tjM+!J*anQMK)k?vn@SLg%coE
zA1<xiVb#aqd_p6%o${ijY?d`fZO`5gUl|IM<7B&P@XvtSc&VXWAYPQzdx>vTwX2mL
zo!4|t!^utZDasFImoHU?ag2dIDQXKPi-P!W%dM{ifqcG9e0cpYbA5e7`ToIxlkx=Q
zkp%<*5dN-0{pSG8zpFu|b2M~PQHBHn{_nDTzqxF&84-fs-l3B0cl@dk3_0=eCHxBF
ze(Tnlzd>b!oSZ)&nYsf801R97==gBeb5GDq`69LIEx)+?a98PYPZaxT#S}yHLh^RM
zKCot^t0G)UdL`lC+EBl<cZXexSOw4JFgb~+%7aiM(u((c6hIVj14V+NCcupOj(*|e
z3m~%OxEqE3L{L8x_*s_0fSLkktH7PHvH8V31~zv<1p;|MNSpAM#{)^5h^XhwYc=^`
zcrgy)5U4&SwM7S?@!8U)!-f31_kA^gdFtw2!EeQpHQ$+$(3sB8&;U6F-Vp>Z=tCF_
zIuJnbF{qR@!E4}Xh3-EFloFDugO(3h5fPsH9}#jA{2-|ZR~B4k=s;+GkvHU9%tJHc
zz)1;`zQ&5j%H-nDuig96TX;hnNf?N+jX4v7T~ud-8iiZJ!#^jE11*T7#1RbR`wxu`
zjQu%(B)-o|xqrD1_7?%s*um*v%k>h|fub;-chnv+ytN=m?Dq`)FbqM22GFrueO*B`
zBrrS6Y<g=-mZNpXTGMj3@xDG?V1I*u{1^7a_U1pa9~4!n-`J1SGg>=?#s6d;ZbyAH
z4|90+OC)D!zj;0G{}=2B1@ii5(!YWI*pMyAV)_s4M_J!D_QU(C$k!3#+|ftu8~f3k
zF-&=+88xw2$@v%d!~8GoM_$x_U_U6yRR#YJ`>{~>yvp(xj6EQWD4+Z{?8l;Rnoa*I
zdN!p6yafI>l=2g#h{cEE$}1`4qkvXn3<%2AsX>F+#KY?RweFr%H1Jpd>i(atL<b+k
z>f;T<QLB#f|HOWjwyYa%q8WHyy}ALe3LLloPz~cE1W-2#>z~_G6lZ&WL|O`J%a+U|
zOghWUTI-k#tWcPAVn`!Dw6(r<TNfD0obY%{xE0gRBqGW4aE2@_^%j*XN6T$wy$i0e
z@qUZ@p%80@l!<@wTK{bBTBXv@_(RrJ+clC2mjR|{<)Ty~^}&-!?~hQ*&;A>)F|F`*
z+vVRxY6T&oZJc*WtLP|YWZ(l7<o_S`15NEO?1%O+FV6qQewh9T_M`AG?8nA}&^Pv@
z@Nd|Ui~ke*@fY&&|G<7kUDHXV|AqZ1WA<@b5;I<nqNf!54lLLPgtl@F2>4bE^fu93
z&%T^ZX{KtkVYntL1Y9!l<|ea?C|Y)24@2HOSmP*Wv34oLO;P_|`<$VC{`{o!<+5s^
zw{IX@um5tp8^||=3~ZG;U-*-GUsHCpfCayHZ7!om#MklAh4Lt206AY{y?6#(!aU%!
z|FACc74qy<?_gYujK~!~)5E;J**UI2w>(hFNMlGdqPCdP9&vTp@>?wmXmkM#zUcs{
zh0Cm;K<!qN-c^**mT8<j8Mmc^s$?rKWpiv`X`|R}1&d)VBW;qK-=dZi%Oa!sFYHHO
z_WITpVEgeG{oX%xDij@*EBSv9YR31V{)@BK_<z!d``xcnCyo+)#4R#CiqFq)JQGL-
zCD|hg4TWI(D?odnXk@V1cKSqvyfdEX)um3YPIW1pZ_6L7X}voI{dt1l_atPPW_}Kk
z*=HL+S{<z}wknWjy2nT$*1H*iZer|G;ZQwY7{bgJ2t-@(O`@0)ic$pPPZ(3I{UOPe
z4WLP1z=<EsqVaV=uM6RXI-=1#LvW2EkqNVbNd^QALo5)m^gN+PFtn>@$oMBFl|6}!
z8jiGv$v#M!`V-f=mKx?a`Ii8Izm_1a2i}$cPDSEDRK6@FV(*w1-aDq@y8kYEz1P4y
zqDN{qd`-AZyxL&$@wSPk*6J#{%aNeG!JHrE(boQZCr|bvPC3O$8r0Y&Mx%Z;bJgUo
zsg6yL#5R3U!>o=gg*xlX0{#V2eZ!!f=Bl;1PqK{tel|<Qwi2ranXEn`C`a1Jc4^c}
zRToo*=2LkqFF_^R=>#aYYa-6#9(X!>e}W{bMc*-uF3Oo@Z`M<HsLtnBfQ|h(R#AE%
z>v%_sWPSJRbK8=kIO`2G?C|huedMClr+#94^XaD6L1R2gz*m!lXa5iqz8p3z9j{V#
zwWWLFy@3~ZM7k5v=NkKJodHhz)Sxt`1zqzoqpZqea9X@)2MiMsV2{Yyb_oB?a2@uT
z83^IqulhE%^~X>jb<n3{fJK@ks?GNwpyCFHAzaxQ82%K2U1l|VG&her@o=tE&EL&%
z+*1MGRDK_xXNY^)>^+F$KHYy3kbtl%&UijwZTiBGL6W*Bau&$tmlZBlCA_QRv@0+F
z;2?3Ut@{e)%YB7_$&XA^yHgIWF9m51SUS_4=5n0AHSxh`I`8GrqW-Aj+nM5`&k32G
zwaQm3b1q)<;%v5BW!G(!ZbW<p<dH0o&nHjoR069|?kmV2r(13VUcP+ue>8TWLS>Ag
z>s7V+MdZE?X4E%+UOH7_YrLgZ&0;&3_2A(h#oPBf&#8&Q7IWPTs1n<0(=tDvi8axY
zWxMF?y@ir9V&5(*7kd?C_5~$|WGi)3pNN6<l2gMah1@tfzu(u(6OLM45!|c9y9bm&
zdTA26WgFgh6XBFLOldaD9cpm#P^x{2ceRE~;^mho$M&FIiN~hcA9$}hls#PaBy-j=
zAP^<C30Ap6_J=^UYpvShd8Ttsx+m^L!-_)*h7i_ey;=D4(5HRSZuaYG>K{}G$4@Ix
zuJ0-Tn}Pn%RR_brREPfwl6dXAJq5=5i2AWz1F`jVufrbIt`B99jh~-i7!dH|bx)Jy
z%^*8|qd+1)I=bjWyt|7REZnB8JEa>QqqiI3Cbcvbg5fsveHUkbphghFND`0?Ibe4W
zrlqC?Ke=sz4f#L1Q?{S=`$U3-zPnS72oPDhO_9(!A#fOp0|H0K4gFm0$J&=!`)nOu
z)PHbHq~b`sKgk3OJ&+?lrJsb3{K(b#Xy%#)xJJmayv`I0{s@PRt%I;K>p0XzlEBoV
zkHY3a^cUMbOU+2P->~i#;Th&7D)QiCr&g(tTWUIg!SVmboP<io%2iWs-%hmRShG$n
zj#p|PZV86C9#L;?%JoV7*ne>-Hg#?u<>vU!Jxv*iYcXcsja}kK?U0;4gMh@RqW!ao
z@c`930{mj%^p3(P**Rg1De4UGkYRDtsdo71>~poBdqAnxogyu}soqQS?I%QFe4d}K
z{*zUbl?mkX3!XF{zh>l``%PUtR9$A-gQq<o;72Z5nJMXRe1xHb-`V24suT5ka3v9X
zQkrgr(pGnV+hC_I?zQ0vIa<g|%iLns*?_fn6STniAoo#-kb<Iu4b6TOGYex5KvSR3
zugz^3Xtp0E!VLkJ<@UZ8CZyq{ZKE<M-GcPS!<8eA)Q(I=(=y&&0W~QNXz!@+QG?sy
z;{?yrOo$`2TYeu-P>=h>^w?-3;Lv#jX+N*|WbVH#0{k3So+El9TMP7zgD>9z-T1QN
zbX>E#upVODP<<z&)=p#n9hnj3TMu?UNH;oNbP>BnRq9ag;)*hUS|K1L9>vn<o6x#1
zM4*)Zo*AP%bJs-PbGLE5#K57L8Npq2n5D+88>w8Kd3;^*r%2fguSyHfa!J&+QZ`O5
zB5_&ZR}M;3iQokNSO7VjvtXzRGE&fnDRRbwCBc=Za=o7eml<2@XoY>XCLJ@dweHO4
zF_{$yu6PWInu_}>)dx(4n*?aaHolL6g+2)PkH)@iv|fupw~;qrkBfMNYVV<MKF0m&
z5<?N4>nyR5zl?qG)7<TftTwUo_syDt^BS#%?COhU4E#RuuIn<J9nQ=t!~<uJC#)>o
zuFocz{mqu%*guSD6F<sYz`uDBQ~wX<GePEWw9CKx4&&MU{KkHwZTx8Pi(>sjaESu?
z5(_VY{qeBZS)Xo1Rl2Aoky#*{`M018?fJ8BEdf+&@F!EHA4iiRkjY06ACNuHKEXVQ
zhz7tVzr0sF5HHQ?j%xCsZ6*+>20$R*Tw*r!Uq2-gf#~vJPy!|oR;qiX)dyTh=Dfk=
zFe<i!G@t`2@QV;tsRu6EO_uz7Ab?5h0FK(N5W9oNd3<cIYLm#I`1ZokgH@0S44HB4
zjx$t*E2{$_04Dvz0`V{XFU#Z7G7DHrV~a+WGKUZ`Z^Te|oc-o+<NQMFelMqbDB{h>
zSuZ;47%py{3)zaHxi9;Z;AP*sycq@H8MO|mNRwJWK8ZB{!FjcLaQaoOZY-BvC}LGl
zor0}^vkDLlsjh8M-I;xNJP<VpacsC=KC9tmM{M7&T2L~zpw9})XAu)%5$$G1FENEB
z#{r8tg6|>&`|2+ycViMqCD^b^T0F(Ec0%2ft?TTGo^NoA#51LqXt``WXz9rv`rPqD
zNnG^=SmteQ_s)j}{vptLXZ37NU!h4iNn&T7as$<K(al#K^BR}w<DGrkbTC7=+0$78
zj>JpTQ?0SWo9#KpT!}gXZlk!h>TTwFj9*zmfB>Ln3{xAC;w$4k04j}tq-!^0=lA2D
zO$OR5%ZflJMX+cCpAM*l`tuDL37RMYr9Oq06(4n;CriS{A|vit14_5aD35Z_M<#68
z0}BoU1WC7+wj?AVF6$(s@0E>^tTfP>o{0h$l37~GLwW@dt41lCnw1=87WPhe5#vjD
z5g^L1J3()?>N%DI)gdYGs@2l9^fe!D*+56c_+)y_KDQnrJFh@AGS7B7yjDgWy1Sh}
z%w4wu?~_{8c*JdLXyDTmFs}JB>XsxndGkd-LNaG;hr^?tT}oJ5#bswTFUqLeb;ykR
z=W&iVt*RCo)aj!9u%BF7xykX(Uru<4W!ts9kp1XNdl__2P9$kfvSX4DJ36YU<P%%;
z^0+A26zjYP=;Nv^U+Psc;s#3`z=va_7B|p#NBKsgN@xoyXLzgGW;Rb4Ja=7W?p4$e
zynJp-#O`p0tr-q2I$L?@)ndaDC3%7IgH^Yx6J$YNT4ni~Coxv1ZZbt_eZuLEFL?XW
zYR4vB6#CLJwM}k64C}>lV~P>x%!s{&_HB3Av}o`@d@tYsVcVN6DohjiKO->zjswg3
zcQKg%-hr*EP)GSI26HdGN4US;>B?rAlY6u2^Re!JqO4w~zqpiiI-RWtsGwTuiz64+
z!v8LYKL0hr7h77kt5E8P%nq%5@osII%A@D!C=$Nsg?GHDq2e>HLNpxJ&7n4fFDe)!
z=&L*I!@qr*PGHqU`nch&{^aqn&1mA*SWYX?{KV~BVT`@?2g;WL^V-Q7GIOfzktRm?
z&jrF-K>?5aW+$DZl{BYRdBbsyyU5O!tUs+B()9Zcp1nfTJyCc&m<%r-2flYeB?eTO
zC=QW+SDBZRjnV+hJkOCnA(dxt32Mwk!6~@u_~;!|?DGZt&9u}~0o=sT00LGxp#=}0
zcLu`Kz`d0VELSfM&}j3<hy=d#rWUImcBVOLFsZ~6{jiFF7i;CD5*rZNYyla!CG$W<
zv*yzw(q@fWuG(d*<9!4M%#bY)oY{L+dI5o7Ly$8ucvd$SuA7<|kLmvMfv2gtk}YE(
zIOMk~q(HLu(juk+uH3yi>{FT!x3WgP3Oc&EUrFAzaRZBYsFLg`kC$U#VaCpz%-y_k
zO0W3YJ=GgGk4sa+V>uIH$Eu>ddoL+70`%@(^GG-b*xw%mh&7O8{!%tv(;BA)mG@PU
z+B`8K`n#3(*4f00k6($>Xs10FcolAVl-Aj{PXL6{s1T_xE;h6hbV^E`Y6xf(KNw>;
za7e;$Iy5`E017}qHqWJJpxi8{wE7UbUS?mNZOF~SrE_NN?%EUxhgj0Jy?CB}fnQSB
z>U-|HEIv5`h|O2Wymw$${^*&yDK#p|k9uWDV5GjiugdrGncBWpizkwHlC#V^ZhUiI
z*fVsxS*0O*_1sq8M|g=dE&w*O?HQXtl27NhpEd~G(dG;HO6`$FHPYwo>k8JbW}I<l
z+jy;BqEIaRmgWbLt`0&S6YWYaXq*sLtDvppg~Rn`54-f(pYv9aZ<^p33I~f@5qL=`
zj{s9&oY&9_;%}Ey4*K7pIiV<He7u5w+9p3u7jn*_RGJypi94tI{?2BDX^2JMvo~S9
zjq>m?%@RS%ZvyR_!x1!Qf}_w-b**Y}E(79-7x~q26$)4^&Vq*C^I7VOmaP=k-#AJb
zqVyTYa&oXY7{+nmI0Qn$(SmZ*o`{Hc0$Ey@HqaUIi6NPN&!%b4y@yzv&~}LzEY*qA
zGR0Oz)Ncs$>gEVyq3vN%-93^Jy&i#0QJmb9vkfV|w>W&nuDob;N<47C>H%UydJTf+
z1`8t2zM=1(^g}6<P=hVRAggQbiMAGVR#e~#=|;;wJVk!^GCdpL5Zb!k7xt}(k#aW-
zp*JN>1&!U{cmIo^+AGl{j?_k9m&Zrg(&s39QoRN}#a#B-@8aW#3>+(nvsWpYuGpYn
zrdx9zslKfvH7d|&1Xj9Lw|p&6Voo0>+F&(Z>c&`&6Fl~m-zh#3BS5=eJCVU;kH2}g
z_@G77nN+B%<*33YvGH~#@u%G&9|C#-pH;mhg|((=4psm+LiZvVYx^d0JXq_p*Y-FQ
zpPo#wVmw1J1<&2*_{)l<%CF_~Hc*w-z!URkm_K!#63;i#um8}?2o7A-NW($D^_P^d
zIhVbc;dNDAC`SdrZDsrU5)++u?}&zInIG`w#`=0@F?kfm#^N7~QHt=o0t0Q|8>b!3
zW~fR>pb%|r29tBk7$^$hZ3HIk$J|@#jcv(gk5M*bGVzLz2=zNGK2n*?Pd810Vgp+Y
zwFADkbLEk~`$qg@1n~i6E%m=loPVx&{BIM7_TLB-e;YZ`-&J)Rcc}HYjeXd4EfE1g
ziU^yafG!|{fRNR(AS26iu2S_at|l}ZP3QTB8pF3oN6D0F{u$lMv_0ZtR6VP%H}Q3d
zipCXXIp+}Su|OlqhT9bToQumtf9M;4y!5~kf?NR5#1%2#c!P3arq8pAVh<^rppe2?
zmO>s)gnCx3YdI!j``9$CGw2>&gH8@R5M3>N$@4x9UI_)o1unAZS#SZ=K)YbN-l%H3
z9AK}LQO-ZKi@<0P=({?&?lp^Q8^)}s9alQ{-w+oRQ^CtZ3T}*;<7~3P#~YTIK-sp*
zijz?5Dq%}ce=dgy<6E|KT=)g@4$V;8-ZPk34dDhg;(aLIKBB9!-&I+%<rce4+CSp)
zF2|4MqCFs53J`K)Q8{FzMG<=)YuIV%ofjs}3nIL~b5bWN9@~Bq2jH9p&<@Z=3>Yqo
z2i4`XmZaPN>X%08o!GspyG3JNS>p_efL7)S?SHM+cv9`nDwsw@r|n58sNYXBy_7iM
z7^Y&nYY^^_>~uo_{V6#ZWpwv0TMe8M^$1cd*0{}Hr5j1OapiiM!qyL7uBNS`5QA*)
zC3`Hr=v~Ph&;vf!;|JQDqa22e@1;8*j^9{)?4md5IQ8}hRr-R~4k{as!@^+3L8F%j
z=2T8$Gz)&+y=_Ya!lz#0S1p4klk0Nz)zXH)!BP{%j{P{tj$b@<G9snon%eWdTKvB#
zdj~E-fGle;?MfS!wry3~wr$(CU1{64ZQHi(FMD@(cDv7+p5FfuFXG017rf`m%b2J-
zsEN#rcc$t0YQbJc8y()#31%X2+POQJ;KE>}o}>0{=|=kjH^L(fEAxdK&*76J72Amj
z*ptk0wq+ydosd$(z7oQb(u^Hvo4-u;3%y(0xnTJO3?5Z!m=X*n7;9@2pPS*zI`d~A
zb{K~@awI$bE+zQ{u4JgB4QV%wNNdR_NKWGOxvyYnl~oBNkJ{Y)@!&6l!#7+A^84o`
z^q0bINMe`gyNslRno!)`-Sjx&vT{|Q&7{-lz}JCa<1~>tcY4jptj1>NQ*KtaN9Qln
zr$S-Ym1WZ&vhr(}J^wx>U?x13GH|gAJvbqL>U5W6%jB@%Y;W)W%La8J47Zu&2mDn0
zn1KI%fa`zB&*=U`^z$PEMilx-*v(loe3mXy1zR7)HAC#p)eeFVuRE(3j+2v9jl0U_
zme1FRcr0$u$FMzLkH;Nv8uqu%3phPM>@zS#$3Xg@RcR#+-WFgaR}E#?Efmm7?y<Sc
z7x|;t+h!AqqoLg;GGaUmY6Q73f1@k|pT7jyN8%N4l7{GtVj1tf#dFv^`%zwHme&Xo
z0u<qALK@>2at(59K2)H8oD;YT0wE%B8ZTSI1wRIpRzY6x85ItB`qTX|WqY3SD|wxC
z@(-k{F=kjqfGhQdxyntVwMCfksc}+=6n?$Fq2Fgd0rQGfqTzczu^l6AXj{qXp$@Vw
z690NNB3v#@>K=(GrniXa*`lI|L0X?*5`}E~JB_-Ww-s<#?3Ocmk=Z9F^<?SlJQ}}s
z8wks>7cq?=8-hoPQo_IENpI{~u~2V7VcjNfBkqD5afu>+fP6ZMR|bheT`DblxcNzz
zku1+pr@bMf3F%M!%kS8zmdeP_M>{Slmq5GL;sE;<GptcS>TKkC3C7Fbsi-JNa|fwD
z!j}-l{;zA4yefLH8kYG1G$jgCt~QwQs+pEg#0=HFjEN#GXw<}9M}2OYVm;<iL2yH=
zD9`+J()>WW8yDZz#X1VKtmakCi4I)ja<(fmtBMv78`o;%qL7HS@+gdzfg`Rc-|2E}
z66EogZRP8gwkQhdW&)fBF-UV=g>sy)>e|*4PWC|iU<IWaX^=F+)r|!bp>%6u>8bhC
zjr_43KgxImjL&R|yvzf<r!SQ|Gfuf#@)l_IT$QFm!{SgIysVpZa;QL4iY589wlX7<
zb8&T>l_ZHSBy-g;n~Sb3-7~)=8n2&0>ajf{_su=(`ME51ZAb-wKohJH+ZJE7>8t(U
zxU1xw+U7CG7Um{T=!B$`sF^!@Z}u)+#vYU;6Ue#v@KOLd{PW#`h>T2^mMBkN=i=AR
z{k52s9R)}EA<}T;miLKk!3B0{zsqU1w<nOTI!v9+5iiW^lx6xXOw8uOO`9rzFfi2+
zv?sJz?e8n&N6W^o)jRR?PYn8NGP0|WqY52$ehzAVs~a+Uh~o5$hA`x0m^Z`#d>=W%
zB9M3{GXtyGxq)1A8HqzN)F=kji;H6YE`qa4?Sm$_Yy0mWg(K_NW^YLkGl_zzPmcZJ
z>yh(yNeiPC8_%3$8(RtA=_}(oR``ifO+Z>h8!u&apE!(d)0_bX93jw5!_@Kis^4&?
z&MdSUc5q8GPSDEMi2Ly9ypQlE2$YvtM}Q%npA@jwn{H?>wkGZOH8Wh^@7-XN3cV}i
z81`34T`TNz{aP8kD-h5i{!_8@>pip7c30$-f)B%_zohzlJkIAxZg5rb0`l&!<VtNG
zMVBQdR$oKkdG)jS0M4)EiU3pF+`MFffd^BaM!`lVk$wltt!@uOA#z0bMa=5`wdn&e
z#qnM^lp+oE^$qmu@_nWE9a4hrQVti`-Nj}#2kYqx7Q{lknV89-zS)1a)>@clpVNHx
zw`4A~L0F?avS4;@N{{BB7N&3@_vr3&Tjaei@feLMI|(>pvXUaRnq58zbBeN+8_+Q0
zUW7sz*zMS#8?EFG89m@(EpL6yV`I{c`W3xsl}#m?t5C8{Fx*$=-=7oxGOn<NL;s81
z9%8e{oSP>22yxSUk19-eGI6Nb3O^U8e7RLvc4f@-u${)lfQqD2Hyp0RQ+Vf`dPG!A
z!ZO;#5qLLnJe5y|1>YO(?d4hLz~*VB=;7P#0r#J^EXlMnf2e-gCXN4f?el-ZAZr^3
zBYWrnpi=ZlgZ7i99d!H=&dEyZm`Asf-f31Kr#n9)336H}2lD#3>=4iD%KEG<FGg%(
zw765gu)JK1r|k5OX6F^7`yeqyGmD}H2I3Q;lUR6OCu)dMU<GT8<Nq-avO-rKl1HOt
zW{hY18;Y-|UXw2WBNAwsAEH3JPYkBe085?W2QFs>-RKj3S}8qRf^T9}zUjx^TOv%T
zCw=iC_5?3}2b6rrd;2@$oGoUr*8=s(fki`fIkB_yFoMzMLa%_^D9jsNpE`G4uZaPS
zC+=><K3U;scy^8Kcad`+`gblJfGJE$a|)m3fp;PiB7^QayT2up<5Je^UVRFOZh4ND
z(}dfjU$cW7VdKIEFv6g%u<_5-?dDn2RK7>Tu}N}&%2C{iEn?9Jwah}%ILi7(@8*=I
zIbdXd*s3d%T~asKbdccJ_agQJ?ABt4=W+-7w|cDR3tW!6=1wn5t~0V`x8h6<m-t2y
z+dW0D5JAd|ac82~pwH8nsFJ%maq_rR*>M;}?3fZBF75IKs=e?n(6FV1*gl+WI>&}m
zzPkR-RZX$WxNj6pxik)9e3C-^X;*bdt$Gg^7ez|FR2V?TPF54?0jx3Tm86L6+kj;<
ziAdVGtxjW$%G?aHi++4Iy<W0va3?DC)tO%V&^u#534E<^+{r$&p#|dA2J+(#zz_)6
z{<e4G-Jt&~?y!@#=gwuif06z7INp@`+5LJ*nYh@<wAx-|v@3t0gTBjicr8-qxj$<4
zZ+Ukncb+4=CUJkgb>L4*cXIY?;8r>|yLQEr%0^NFxl@ufi(Xm+`c3C$q{Q?|l3cV$
zn3Fm4{)Z7|VzOO+XUViEM2B~~v2vJm0|xoIJ3X0eJvTq@<BZU%#W>5@q2CfYGf10t
zK*Zx8kwYA)3OTID*o!8==10Gg-;Nz)lNOsdiZl1j(0Qe3EVG#%;d*;l*7Rwgy(q@F
z=<J`5U04+PkX6``S&-cm%khQdf);zMw8INt(}o#dG|)P(*-__<lhWxLMn`^kf5XAu
zXC!ykNjSyARwZ0`*$H)>aukeSbAg6c$k;Su-`sw!2!DHHb^nXT1$6SU@*f+T|0qBA
zA4N9||EpjkQQ{xWZ}2~wZW53H{eUBEW@n<9{ult;+mYHU9OUI_dVji3P3Xs$7Q~Bd
zZIvB}ot>W>V6N%ir9^iCV5x!wzKMC$!w$W%E;z-$6926M8;jWnm>qkQTU^fMu*1v=
z0K~h&fs?F})D<NU%=S~1Wd|e7W9JCf^92FVO9kO`^iOl>r}3lA%EU{}*j8t62TaO~
zX%Pq!EB=O{hgXdS%ZB#k;!jh3zX~jW4gv^giULwiJ^}EiDaiZ^W8Q&XlWhL22n^9M
z9>;F1HqBGWe{u=EvO_4Bv4jk(wKZX+hx077P(z63{>OkTxjdWp7w#SZuXUBit}4$y
z<ox$G#4iNc4ZLYwvFOJ|mj;p-;#XnW_CgXr0efr5cG2C2%qZWkPX74lpkW%VUXXOZ
zkrJ<woU>sO3#&V#NTr85V78$6hU;NPs_il%@Yl&(6T_<Hw(ZU5zP4*G6egJXZWDQ#
z5U#8_6yul{Pbib83tpM#SuWHoc=1CshNKq&#447wW5v`J%y=a05CtPgNsmsOg{|4d
zIi_eJ23!qJX>dE23+;w}&~?krq6sOS`h6E@DD~e;vo%ZL?};AtY2@|8+bPx+PIUMH
zQ-K_!856jIzmLt;{b6(+ts3IEvKGXsMg0F5Q#vH?RK;XBa)R9q!^kk%H89fMu-arM
zbs%V;z|-bnT=7S|2qlGG`<gw^N06Aa_000+e(0Ng^>2Qqw1ZJ~G;9xQ<$3WQZ-MhU
z?W1_=iP4KU<#$h8e=1AaV^}4VyQV>Fvm48hGQS&^?jM}$+rf#<R#{>-w`)j_#dbcA
zo#?P?QI8<?emYVb5>vxc%?l57Ks}A*b|~b3;RnW8($VIZ1=>(+Yd<j*@CQ}Ud97{9
zb~Tz#&7`5mFH5T>icOIFI?|5=cau+_W`d4mVOmW&aB0J@Xe&jVq9}>(Cn!IZ<GCJ9
zKOE@fn<F@cFGaH-$l1Zfp+SuW2k1u*OX+n)R@U!!ASb<t&~4`CgF|6im6fz+1Y2SZ
zuIf~^A1aqZI!wotXlxvJ+PdtjXCGYB*!s~>@<2YWP&A`8lg}7ccAmoBzXQVieSbsw
z{0n7EbsRcd_ai+U|M|82d&=PdD?elW-{fbFimlej{Kylp;gI-rXYVBy)qq5ymT?+S
zx-2)CZfG~h3N|nhOqA@kBKfmr9`8<_99yqf#@(7SR;|2OT^Cg}G2@Q4?OL$I<LfrA
z%(t%{8@SFc9$$SA0y5Q$0q*tIo*nI}JP&4@5ReXhN38tQ5U`^;uq*xxbYSMeyUHOJ
zf7cBTeX>h-U!4O(EoX5u1eRrml*I)qZR<N6gdEOayZIn<XjSG5NUijkBYn~XvLffa
z-JehOKkr@HXgtgge9e5Cb(RJloPFFryt`}q?47(?xZYbiy}3DkbRyxfB9$S@jC7Gb
z{ZIX)rG`L?<Di5E$H*|e@dB+9g!A13fpFj%-(W1_I<PNM>ruQ#1yd2YUDu0zAGUVD
zGQOh%(2hx(mjVlN807<@A%4AqOfC@Ko1(1LBlWr>jaq}!5Q<D>Ui8AiP<mNGDFQ+J
zN4cZ}EbC<Q#sql!lC(0(`K8VhruCXq(*G97ch>91T=7F~9$9gO*{ffRWn|i1m_Z(j
z>~KC?HG?l}`*SVBG2(tt0Q;7Y{i|moGO|QBELvEHTXrQ7m3)B>Ap!ryj9^Vr#q4in
zBUI91gF#=g?ckmKDTst&KeC;yry~PWQS9GoGDs|~i<4#AagSzdK8tk{h>}T5zP1xy
z?eD)zg+eUTAT#|^e>aeGgrMKg{S`#w<fo^N^7aM*1QSro0;J;=)+j1B5iIBt@uZRC
zrCT)oLRTZy68kfPfP)if<C)+s(Bv>(I5~ievVIGQb(Vxlq5!i24~`hxfg1dgYnAVC
z<jZYBwBNHGNK*o#H7|%BQ*@!%X^2Natr0GmBqcg9Y8u0SpBCgl>QJV%iNv8)LSW0_
z<15L?V(FW25DK4!GU8K%A$>Hpyqc@X2zm^JW`|_UU*R?h7|1XX_y+oC2w4T59cTXY
zV!i%ANTPr1WcUY!{K>4fHM075a?GGasrs^iR5Ja%R|>^^JjiJEqM|*%{Cy#KoO~cC
z$OwS1kNd5R%#2PZW!B1CHZJlqkL#z^)zf|}L{l~#PeA(cI3O<?AA4l@CrsxYrs0T@
zApY^HzKSDL;9l%P<e+(_?{M>^sgdZxZ|Feg*d$(Hs8pHU;Jx?&Dh4v#9Qw|D9zzg7
zR<U9c?(HrE0vC%5!~4b`arFol6&FW~Zuv_hI76D4Zp}<j#`=7<H~8FXmVX#+yL3W)
z<z4H8C7<A-`Sc?94nX*dLM0uCpfS<OpAn9;2Ym>?!eif2_NpOTec*Yc9!5h~dh4zs
zOM^E6vy1q_WYzT1a%8eLA7wsTLy8n>L__wFhR3CAl&or!)C8;VfX;14W(-Jw7fauw
zcw?t>mH>NuXvlze%H8L(i-Z))=hSx|O>Z=$EALU6AM0shTXkB99P2H3*?GBp60thF
zKQ!9cde$x>YWTDOnm5%UN$vh^Z<W1hnKI}|syLgZ%wN`ABLt$)y;_@bosJ?~=cC<k
z-1Oqg*cS1dCf0LzUFo+V_C9;Vwy)FI4*wXkSyRzn;B3|IdeL=X7@J9}(Vdd=(LBCv
z#3T2VcFyLam(}?r(3arYW@tI?R0oBEV_|cE{^j>;ncf33cLuyq+G2@va;^Mb2s=dK
zLz4kHjdgOk^A$F>a&$Hzg$*_QSLznjNeQel4Br`DcoKqNOl1~2AAB?}4iqDsw??xb
z6pJ{j^8124)cXM7ijtC8^OrsK?h(5Q>Fspt%>Z=Zq3K5N_Tab5_~*g<6YVxW-@xxJ
z7mZW*6f+5eMHiHOppK)Cm}$hg&w|cNs5lEpue$JpaDrJKwdzUPYzoaGFh@Hsm9Dzl
zCcVtS=@YLe*VU;ofo&sq7Uc$_!8-94Q|oM|ORvIFY~bbArlOBr4-ettyGJ_&9vTIu
z@kxb36npzKs47NldA*Lf_x&}FK#zx$tIEW|zog|CE7bd+w~Rp49TOOiTGPB@V?-t~
zjw?N6a5Sym)1|RHt`xtq7Qa1780!mzr8YYwljzzWm}8_va*rY;BJKl_)?4t+P=nLE
zm{G)(5<d=~M%}iA&6l9fdemYw)mhC#=F@_iXNql)(c7sxNz!neyNFROUa=*T6HDax
z>$h8RBVagBy2mf!{&|kuwKZn5f9AO1XO91UbAzn`{eR?YFiLE#`*9)#|HBZvOkE!k
zfF=5;!kAeXk8y>HWreB<l<U)0nr^hD4EVF~%zE+L>HD=FCzQGW6?_+uNfFo&{yWr%
zY@IGqmLFn61_cicWD(V6r{|1*Ax4-J9uvq%-Vca@lPvVCSp4EW94L@kLNa*_aX*3B
zDU;N8?2l||U{)rl?qyBdCSBeobGs>@_62->Q@k}MYQ~IC=95qb3Tfgm!e4X<V1X^5
zShUMD+R<7Q#U{ZA>P!ZpEj9M~5SCc>wxg};bjXrrP^>ID%utzNmxc!!d;67(5CB`g
zP=LH}R5xo~`}ye<3qi=4Lg!XjYV<huH${+JBJv{F;y6?Op1+?Qwwvx0Yd=>`7R$@S
z$}VrPVC$Q4#V5g`_-k~sHfgf67m<m;y_bDty)Vf@LFpY{jHTJ5RkUI|xXyT7x&?dQ
zGqTt06Z#y!tk-tsQVXeQ3v2TgoKG4YzOC4+bJ9FekEbGOWrQ1l%f2xDMR7)uC*V2E
zKGbJ;ezpbD*WF6P5c-SMdgSVsCbCsdocb#3L0$IC5$kGiyv?2RD$Bw(w8{p<^)u{J
zVqZH2bT<sfxic-XfoD_sQoW-}ilqX{C8y28B|c)xTXfEHY{qsyHpQ)e?f7OVsb(OS
zn}o(i=lP8R%!GHTT*ycZT#*HYuU$dujX+5q{u4ab*BM{3_N+x}N{0z^KqyP%C$NBO
zdjQI0s;=^5&6_#&yLJ|cY_apuld&T`Iutqu^v~EiP8}kTUAjsRcOnW~6EDI8u3yn!
zad$%+ucxfL?*1i^<$(o+)Y_0g6r{6X^)-GZ#8)rphhHh?Pg?T{8vV-74Pk&~s^plv
zk?<!q_Rc=x#>W<bKc9eht7_Ol$U&;;{2^e4o=HJpZ22^V=NnkgDKneID8U%=vmwwM
z1zoyINQo_{4@VxWW;bE~%HwXO`JM?t|FE^Vj3DE%_(ws0*(B)SGVec|n)VcI>RL1c
ziIpdor@f!`+Iq;3mtjtO%JB!Uq4)Rp96auy%Fppz+k>#dAx|e%frv2|EJ>gj#*Y4b
zSNf?BDb?%@!Bd1X7DF0v3B0P#j}6W$L=)1-+0*C5-av5RTEFEzf@gt~sF|qRlsDY=
z4H%mGuA+EmYdGr==&fnyF=)Hp{#LH%of5pgiPd3m&utk<&aQf+&^#6n2Q&~~GQ?|f
z8XZ~(Cbz|Z2&oV0E8Kgqzxb4H;{@UyetVqi{PXzpV|t3t{ER>74=?}k(d~b8^8fgL
z{`YJCKS>f4f4ZAgVK(kjI%BecK>ny^`H}neX8^PVKr$No1ABTMZ(T{1Q>)cg$g3rn
ze;iM<=Hy`<&=$D*<zhmBjLF=?8DM}_0R{3^qxfRNBX3s#`U%}rrHdz!L;Jle1A>Je
z8Ywy%csgrE`k|8`=wS#T)aD}5RN*-T%a$Z&iv4m%wKn$G>V=9{`Gt*2DeDStQXhnp
zyrbW==9g6~&xk6|)Dr|nak6;1aFinZxMq2bO5>w#UwK)DCV!-^stWj*8HT0?&jf-B
z`uYwhfp*VPYk=qQaOh$r5lmdS*GCkvkhD8NLx8<Yf#<sZvAxVj_F`ywJ{J8j5do|P
zDv+i}D3=Z3rv=)#>(K>(_Hs{(KkW_-c8Ghs>bgoC(BsTH-+nH>nO&-{)#w4Dr}t~X
ziuh*<PBdk;6hSvJYK0qV@15|5p6{li1;*=RRP0=jf?u&P5lQ?zdOEn5g4fBE@hL<}
z74x%gG+X4$k-6}VF70~EC3bTpJ*H8N6j`RPM-IFTe1kn`ght^(x1*jE5}cf{Llde-
z1|Gc9v|zVv<47bDwRDe}l@8>?o)viaq8Xv6jh1)w)hU}bVF=`QKY1l;SmSi-i!D65
z0o;8WWVg|gZ~5%~jRV{>Ak7{m<!Cjr4I^^UY1whM<eqjY_-UUUTs!P#sPy-$sfqAb
zO0(Nv2CVED%K;wksBQ<gr-pVD2w70y@?Y<mz1E=Y_YMl1D9DYr{nF4{)rw_Jh{FMG
zqi~HnFGr2$5wT|v<$N)f_*5kvzBf5*!}3Qok;#676+7&O^ZY?_Orl^ySF~)tJvjgZ
z?=GRmWLr>+d9mGhqeF>4F_5$}lKul6hi-wd2CtRhlx3>;yg7n?-%kg`2*{LOp?T$p
z3S;erNcVTe1%R$V0MtF^BR=L`aaT7gx}m`U5IPR6bO;?etX$+|B)g9X8*1(a_tG}x
zNY`*A5<Kex&PoYL?=?E4UXjo4e}kHQq<Ga*oivckH5q0U@Uj{tj&TUC>QLXLz?Op$
z-rOhObT_WYBeAx`s_rYttk!~kqpYPV@iDMhLwQslj;_}a@gpsG&qmF{LF^DDjZp(?
zkcpSLLcDlkuDMQ@C?xL4@-4fSr8u@AWIt8%(xy!2&(`6NMPHW*AG<)DHR(NKt)j&*
zfl0+Ln2D>~Tb|>Hj1=Zes#i#y6g#3_?nE7-<I?J#PwUNpnvpVu?wb-L6<`qVlBXxt
zMWq7D64iL^vi?|e+)uUH&<gH18yPZ%0w-W{|6Y%)6kd~uT$#95P=NUQ&VT=xRvGa`
zFHYm1OC#V1Gf@3o>~C$L_y5Pk{NH{^lOI1MNMJ99<NPlch&3*j9T)_+F@XiJuCKP|
z*8KDhaf(tyr7~r1pYJb-0Wdr7SL>Zu^v}7PbEHhup5g5sn<)|ye4Y6o>IpzX_ygQZ
zU*LOpva>l^3^+g>CtqKacHdksVVy(*kg6>qS+{6i@HNcP*cec(-O*b=(|2Z{k2C#-
z*wH5g<8R$p$A?m6Z~t{iL(EUCP=Ox7hjc#?^t@U#ClmP&1#npyd{DCKTgV(ZY0gUn
z0bP>i-?u&KMe9sm)tZIzW*2wWgHJ!jPl;k5ePu~Xer@)HnP<t(tnK_e*hYGee;o3K
z&l}A}`3L(vw0@&iZ7v|joVf<VTV5Z@FENy7oh!;?iekbY<6Uo)$%YsAHOcs~%A8UB
zCW!64<F8)AUoL^m<QaBBbibM?J1IXcTz}|evdCZ&m$F33Kjd`9)U%zU$!uX^rMoyM
z(e!oS!=iyD-s?aBpju?ToZG>|9dGft)6nO1pz*{cLsg?!TGqUulc(QPrp0yLRGOuG
zz&o50uJwRe#-Er5T+7jSx(#x9gh&=2{rFsJq4|j}T2zo_?a+<K!zjD#XtB#g4)>l>
zlICQaLNCD7MfV*@wG_~MzeZ^NK<Gn12R~ao_ab6xx55i!C*LU@NqE#YW5A*S183<?
zqQhLL1LRn>nh+el>VwYC!`K)evbi-@HX5$yxAJ_~7iNA}pflzb!-NGIYTzP4jo@{F
zd)kJ78}A9iGmeFix_jy7w106C!2^dq2bs=OfX;=NE!MmbGRHl$hnEUlP?{+;rag*L
zpwkAPcOMPU9d=tu`^}}2tQD!*pyY-a2)C@*kZHnWvahNM1vq}}eB8}gx4ue^)Zk!)
zd~Z%s-@AMbiJzOA-JLw}+-jwVW+iw<O}i{^oNO#czM=ugTo+q-B^K6+@l+iiD9`VF
zA;;=8PHI3%s4Q&O!*&x6cI*uOe)Svi)>FDZUyZk*ym<Z0yGleoyt;5NWJQE=EuDd@
zBa*EH1SfH@tI;vqj5<3j`dOlQ#J*poU!MgjO2)>SN@0eVu<(wuI%Zhx4mPIlSukR<
z`BZ-bv6b8<J7VCr)jztVLOtnHCp7KMI*{-ky94z81JI#DAdP_U`(xKz8^U?!yF2Ay
zt$H2KtG{diBLMLK_Rml|IQ%yN_#fPrR*DkyKi~PydrD)Q&G;08h;~stu3tZyh|YMP
zIb2G}yURMCSCW$p6NX6{^Xy4i^QXAHThIiXj$g9yk5ZG0zA-#IaA4_0>eS&tYf6wm
zrhvHy-$S(5rxo+#VN76Um5%bO)YKeAkR);d)pMOOASzW3d|>{I0Ci~kK_r4&Oho-M
z-5bU%i>KWFA(1s*IH{qB$yJJqii-Tn(oLpTpcqNaSsL!S!38`GSNLNNw_MPf7!DA0
z%FO;jtNW2hTapWn5)SqiI1&>;#;4nf4mkY>z?AM@n+qTX$*Y9BcO{NAD)hIJ;cIyS
z8a}AM7rrSXB)4q5%gijdazVRStZLG=XjUr+rrhy_<N{r#NL_j|j6|(+DP8>M-SWm;
zXJ?$p#4#1SoXu-~*L{EPfv{DVmdkj~?*{(x#e(^k1JnWIYLj0+{{}Sfj2*8Z0}2y9
z%PcB^1^z4O=+#1!SMe<R8^on3nr(s5W$!2woT*~}poaWlZbUUM6?V6;y1`ZZwo-w$
z99*<6p)-|5Cyr7uIjk*85rv>CKSWki(*$Kp;bcyWy}eT&g`*zj{Ks;Rdu`NJh<M6f
zh}Ib(xZb+8T{OOAv#{LA)O0rfw9v?K5bg)E2nNlzJ>@?YNSf+IZL6c7--^7~CM7U0
zWs=#3e;1_E#%@H|n3f4S{-nO^hKW{Nw)aSXo6UaaDr`LeX-$aHXsGpuD0;cYQ$J@(
z>lC6R+)~!OB<HSXihZ6SP-5I7op_Q#+r)IVpfPCKKQUL2QqF0d!0BPno$|Q+U@Z)!
zJMA~x4e((`5ugv^bu$#j9DFf+rAaL|z;^-{))S9?etN0A+pky+0~`pnS@;Fi)kW)p
zeo7HK_8n&Qh44YUeeLrW?c3zxlS6-?SO`hLVYfKOYA>r5?tM(p;21)UQC1s<OWLXv
zb>O_!P=1m&$*-Rd9~HAy+8{|lq7s_aj$%^P#CSawAmLc&8r;!Skxh?U6b#p;9nvK~
zJXfl&ye!@q<)`DSMYND(V{~jT-kW9v+uwy~!%F=W;m0sPVV=7K^Pq<<3|+gs%zRaJ
zaxt%2TM)+Cby>67!w7pGZd{MTf`kzWkFd(P$+p5U7M>%^Dq;WhL0uGecaa%DmKc*5
z&HCXRmW27#QS}sJk~zO?`oOP;B;|!3?<jMH=@23Vh!MTnf4uW6Yw<9w{+D!cqOAj|
z{Vl3v)eF4QmwnOBpWuKF`>rM0Dl(rh!>$la`-N}Vwtx8+NaPt#{6C?`|A|idpX2)e
zr%yrBFl@alOwd1C*Jo*I4*#eE;Xg=2)Z_=Dy8n{lO-(&?HCvsVEjGyJ_3<8zh}Zuz
zY8UT$-P1`!|D68_Ko2LlD(rJ`nK~GEE?ZOAhwE{Oe%WD@*=f8Zlc+uvkJ}I4&LGr0
zbZeg-oj<h06p2nbh+g1QxY1TnKhzt(KP9fahN&@0=NwDKo!a|kcgjOfqOsgeey<z#
zuoPRml7(*tHZAG>Ql}Zp359b>aD1#J$A?CoXIX=fj7rT?jCWytF1ipEpKGf6ZE02h
z*JueF(JFxHCC8G=PCewF(pt4GsL<@?^(|~xfV5X)9^acW5Oz7y$UX9>j#Z9}KMvpl
z=`@)~uc^qFvO2a8!OPESxNql#`?g_B<(#f%T<WKF(vTvOl2>_feBP!?azG$N4@#fJ
z5wcb7bFS-#IH?ecpBURBZUl4NFsAr(3CBu)U!8onQ!$-{S6_Z#d#D&gv~(1KR`mXF
zm1Gr@Ycx{Ood_qRj+~d_{u|pU3p1<Usg+lTFiUba8D>PBz~wBp?ZCz}0)V?X_N)_*
z4ye%BF+!<wyE%E}mMszHn#9VcG$*zr>0ektobhvUzB@gm&|i6CcqdNM;5bNF6Qebp
zNpG#9ug4PEX1jN{6*8{9;K0$4?u1z|lDc?%@ZIwJf)NZ9&<Dt$J)6m6vXaN9QB1BJ
zgjOf`<~{m|mm0zu+vBhUkDAkV`CTR-;@9i>Es^-ucb)uiQ~=S_*V&mN`eE{a5SEv;
zt(!0B(`B5(3N~XwE|cqG1S*Ar(fk`Z0e}Oy7WthB9NAP3`DcKiFQ!!5byQjsherqD
z7SVs5Bp-NA9DTa8W9o1`ZyDi=3&|E1&Jw3<kjfjl=Wy$D_0Y3JeAXOcY4C(kSiZ_G
z^A?KEUe6~ubZFdO<2`T3WmM3icqgA}?9_%nF-zVU5kRgq5N5w_s4PlqN@Rd^u$|})
zKTmw+1NFA*oAXPx6XR4~PRs1QYM;X~V2ImQF=JC%Hm((VeA3hc)41Y%izg>H-Wfkd
z=n#^Yd=5>u&i+>5%J{4_0r~Nf21?J<+8_tVEuYo7Uvs}-R<Hm>W}6^bL;#}}$`W8@
z<1Moj5K$HnjyxmoY<4}Pyi#S)bn7eaF)dU^v33}K$#!4?<POW^&YYa65X055{S>aG
zGH&+?%RRnizOkupAogN~urhrleUqw9rqKNeGJ0$JpZc=i`m}jm>&OBFC(yWKOxl@3
z3Bc76rtYf<D`LiB$k|e|)oa&6yHOTcTc^;(!Pt7X$kr>ml0NX(T@E#+6=G14Hu-^&
zgygqT^oL#;hA(JRNWCM?uRli=;zJ!G4xCY4MUn*>@DozubbQu^Ngt24`gn1kV`vXH
zgw&mAbwlZg+l$(AE{KOkoeB?wSw}uDaKwVx_+B~P6rSbG59=;QqIlE+{S3U^*M&S+
zRPRFaGZO<zH&|NPh&)0|r%c~xgr476c4bz!lx*&vi41L}8r7&Jv2;R$tt3NTrc1^$
zsv@V8>5lo&LV{Q#Xno#00SZ?tu=~KJv^MZ=Gw5M-5W63r(G3F?8i<SuN=$wh*D6}Z
z2P8_Weo(JuqSLa<Pl)H8=et>+6!5qCs!IOs&-rw=C`dfi3Hxt6_)WbX^*Iv^Oyh?0
zx(%^<>b|8X0$w}mtxOdf$${T1&{`5Iubaen(tFf2lyZk|vVw>`!-EOoB9n5{w_Xu*
zbd44S!e5g(vmM{O5no{cOwC{_xyPma7c=`G$tC}po&BFK;Y9Z8@*hW-gZJRUQi7Tl
z1c~Vh*qX6jJ;q2RJ?Gy+<J)T7?eq>^@v?%4#W?ZflCO`~<VYsV&wRY$ehOvZ5bt0g
zG9-f&ej&i5^Z?Ltyl-bvD)xVfbC}I?jrd4V_~6r`yK{*B0rBDe7h?n>is%sWgp(uj
z->SB$=Oa+hfkEa88-C5YQ{P3X<t~;1n7HdU;_XVwbf!Y7*@4=NPgU}P$tc{*2vv-*
ztRCnbR+~CpXYg33Q~c1d0uG}NifKRf%q}yU8Md)_sXznZzQYWfJ#e;Q)7OxK<RJ&T
zg64|!*W<w8*V9;-lJTH>)>cDC9N4$gYe1@J3k!neY}T(6jBbv?m#b1ROPPL~MoO@9
z1RQe4$P^~<KCrCoc~Na;`=<zCWqRBeqNBU>P`}ZF6_+pOwUj%jnJv1@MA9FeMoRrU
z$k}c#yI>9t;TM)4Si*NJvrm6XA|xmjpAaA_JtGwg^l?3z)Yh78Mb2trZVGU<9be&H
zl2pwrhatxtsP*-<!)i4DnX6Ut3um?AOo$zlc9~j@vE%5;@Y)bsrwz3J^89E>?=jof
zuyi~glHa))XM8+!b_~ZFR^=jg-(l-y!}om1IXZ4}2-)wna?Y!fCV08HL~m=G%HjKq
zHzI`rP&u|=O-Qfmh{#W2YpRh<Sg`i@9;lOMX0VG!Q=`UTAsmP<M8RS#4-B1m5IRiq
z73@dAaoJ^&T3#<Z9l>G#d3)GBqzGkb>i>o&3@s-KfO?m}72@2*L;Hl3PM%^foIV99
zu?6XJR>GwdQBb~3PdQmjpa?lWR+Ds+j%q3R4t?}f&DWz7t&JBZz3_^$uivHNizh$=
z;N4FIT&bf0k+7T8Z?_+K#Z})4F7-(v)K4`>Z`KT~kZ|`@SMvIxHgD)6v3@RH`$r3x
z<i>WWztYgA;A-W7DXsCzTY5<q+<D5ukbS9RW|vXtwbiG1uH8E$z?(E#;ZS%tVe;n9
z8j46=Um4jLU_>?6s&sx{36XIHrd=4<)AwQCu1Q<!&+QPCkcgcMjO0^U9%6S-^2XrT
zt^;w!hw-r+GY*!vE1!Jm$zm7~xm%>}eGQyeBw6Km&N304-G1RC_WJ69)W<;g+nV=K
zVC$(?>4Ltn^E<3VI3@n47moJ37@K|m9urrgiP6gIW!>r}U^Z_ZJ@M<>h(>S>hAl?<
zCYo?u_Z><3ccHfreBI9X_ngl^kG|OS<weEM=->VjEdT51Q`;J_{70i7l=u^Q&H+FC
z>=|CqD$}B>m`p9pN3ME6!f6eMmq#{oIgiUV+U|~K5^o$oT9BFgU44IFk15aG|0bf0
zv)mI5qxFdOp%<!0_9~UE=RmPzil<s}3`VWEP+eEWWOe{wfD;VmiA0J+-$}t!7!EW@
z3>5=}6f{H%HO>Gjht^6#3~w6ytjHGaUWOZ@Sq;6{2NbhmxS7LeZCi)J7N3q}aYM&A
zpahzydAtam*R$F;J*&MCi+4RO<V^A6u=G;D`m%$0W02>TkjsaKl01zk3bB^QzM7nu
zTaqvTK~9e~FAVf*<h4i_d#j>B5j>NOAqsbsj)z9-_UlirBI_Fij_^#sgXd-Z1%=S?
z_#BOuXXp}3aUDljp(_g)-t}wn>x)N{U}y0pUF*G7OO9jBNkped%nXQ;$M)?X^2~_N
zF1I1nT|yl<HdhvZeD7MB?|vq&!8%<8v#n)8)eKep=8|rZB?KFy2iZ2sREk|Ausz2l
z5{vcy<{HrK4=u4aCm@!6hkp8v%i+9R=t}y&Oz~?WG7eXVDK6XAEo}wl!@eFXDx-GL
zO<SE}0Uw!Vof&N%5c;1pjl!l=9z!Zy$aGn>kLk;az%(_PYuS(4V`$?K%odj|nVxMh
z>mkCwwIl%6k>&>e-cI$~gv(T8u1=9=TRpIqDUPC(<0i?(?Fi~G5V@dC4(Py)rhiNI
zK&t$VFMnvXAFKxLFX-FXviu78=t_(XZ_ep%{D(#LZurG6ep$R_FBYuI3w&5+y?SWA
zp$FW3=|c8T?ozdgHaUlHxIEpYb@W5pIoRVWJdFJ@x2W*FC@2)dG=f4|1Wx&EygHJ8
zTFoJ|j;cX-jw0D0=48kNrq{c<zY%ekC}jk04|pKwB6(yc>v>ee6lJVf%{HDaE|Y<E
z+_l9XeF|}jyGMS0u~>OI^lvLD>oBK-RBS1IN-o{dw{HR*<(FE(F)14y?<$0X>Se5O
zOR|?<JVH`Cu-VVYfbJ8aoC**vCN#-KZV!b31C7^bob^rw>w1U&1+OjVA%(AeB?Tr|
zibgLCix?i8&ChoXj7IC-g3(9ybkpZMo+?El?lwAL3N6!Pur`Y=<2I9F{kYuK5uSns
zqFMxmOm**U;uu#qzs2+8|2P+sR@}(c{zhy@RC5+P40Ax-6M>c9UQu8%vAB3%u)Ixo
z-08>JGx>#{OoJx9j?MOkKKOC>FtV?gNqzanNebNXalr0sPmws`11;H@*qyT0{m=Ko
zT=Vu3<IjEY=jT57_a(vqw_aDz%IH542qu*Mmo*%V6&@tc2n7_>6omk876%U%h}uTt
z^|9H*csT)~b<_bB<2IAc=gSk0saD{denR0yH5%~G{qc(kUbI2QpMC&PV_#1An(JSH
zK^0fyZ+=c)!9BRtzCEcKp4N5H;a<4-bfBpf)u6)#QeO`kr2zFWZ&H*uBzgnfhGodi
z<Y4V^kW#65_aX|Ss@0t>hss96ARMXy@`gZDaI-02Z5Z%cNG_LnA&ka65UK`*Cw4oA
zSO@9b*@6IMu!7hhCmu5#vH(03O2I^Io-3skN(~p`ABrKVJ}uXaV$y@tY?x0(PDT4F
z4i0MZ^ybD(O9906gowWG5;1D`8wx5aJjz>cSe}lC)der8NO|L8H>O$3Cf+{!8$FX`
z;^9jjfAc&wO`2suO^zrbQ9w7WdbGo(m*%QI?>2L5IwQ9@tf_uQELVQgq?iD|`)Y7T
zkRq3U)zVcpQML%SD_%BmOzhyuMn3CkUGRh~sa9#{uT~IFGxbgalJ$gXRM#;VXNL(5
z+<w5?;KTEANLI_4X$P(SdXDJKNXqSGiu0}troGAFF?o4ZJ0aBlEps|}PK+?erX427
zGJQ{pR^+W?mZI8mN=eSF>G<8YFs0l8KnM?@DFopTQgzE(iKYLA(bqE{a6f)klq)zV
zt$Vd2e3pJxofl4F8xlF>%qRJQgZ(uAF)rcV;qOI20@Lkqw7zF^1@;}odBd+yxqjKt
zH_N4;YOF;heSn#rOLgHop^!x^^U6m%bm<8)Q7==Td4$3YTKFQa>yh!;I-f7C77<la
zVd!PHAea4=SxEe6=i<YEq$w8{)^&o)yv-_a;kEA3<@i}v+8D53O}srspYQNww@rTE
z*am}Z({OPXwGPm(U!XJ4V(1EryRv;azxgSy6|UI7A*i;su{o)+$6h1HZorLe&INLL
zDPRF=sBdVD*j>K)qUJ6o%0}z@&hcCn7HNK@@K~;W-rM44XTTwNMKRRN2ZN=8Mz<Xw
zs|6y>Lfn1c!pX@e@YDG<l529l%T12kp*MYLRW+;e?eM{q*aDZCKBNl0xYY|h;l_sW
zFY;$M@z=j7pcY4Rh{S(}@_!FGGceHm=Lh<KAWe;a_8<PDKcp#2Ju530a?l`E+o>?-
zrLZ=dZHO;dr*BD==clWQF|)!?fNPn!QsLC->)RXpfJfgKT@4z10y<t#_b9C&qCcN5
zdQMA{FA~I946AQ%9Zq@E*14vCPo|`=uMBsOTxyQZvJk|<m(VP+pDtJ_pgyv05W$Bt
z5FUM^Sj9O~Lu@J-WHI0&ax0>SCh;3g@zubu=WKo;AQpQc+8am_Ykk}|#!_tzV4C0=
z&=RVj)rZXHWt0qzU*-{Tyf5$cvYY$ipZo;3v+?VoxA*+k1+%+>w_MXdUWZoBZ7MoC
zA5ee}O=AND8cPOp3(w{&Hz!L=Qv@F)l@z%wsXxy_dgsDrGAkUtLL+Sa)G#qw2pUx5
zS?=wlK-@(_m-rAm^0Yk@7Cj=zr*&J*X_9c)^O4lY=C3m+Z~f+z6`73H7g?zg-(5HV
z-PV=|tl4BerUtDBfKMW)KZvD)o$vr$jEC8U{VL?EdtdmKkVe<?xqw@WLd>jgW-n@$
zmkGG_T?Vx_dv@4-BpJ_(S5*fFidh0g`Q}cLi7F0oDZ-RM7M;^*b!Y8IxhHi6D@2mR
z#-G|91yYogTxo5(*cj=369Cx2v31c`<jvmrcSPWQAn78@`FSWdZJQj5ti+`|r4$OY
zb8Y^AtY`t)Cm>yrpcHiDGcAkN?G&<Jkh^=W&irwyx*w_U$#>qjwI{R^fS`Jn_WzQK
zzF3~&?QD=C+3$>kzt6nU-F0WMeT_px>^v!}JUg!RKG$kE>=KFJGR>vTPYrE|@beeI
z+>c+t>3M#7%C0^PG@i$GP@8a~cB#DCY=x6S6c*#K%i_IyrDu;MXJ364xuqH?KNS&k
z7K5z}&6Ez!*VGm!*?KjwvbVEPny@PQA)^@{j?&U3_Me$sR9hk0Y++gm{q1zYqGmNb
z*PI<m+mvW#+ER$Hd2JG4&RpZ^3;*SMisPKZjAC!#3KlFBK+am^*MD<pEuLJHApQrg
znh2*CJlHyuUhb))*~R&VW>w~Fb(Hb(2*p2tPsvcvt;%Zja93f}U5Pt&v%d14EXzfN
zihMb%@S>^hJ_-r!*$C67xen*R4&+ow6nyr6|4wGt#;phDQ-|SSC-s5;>lyq<;1Ka6
z;U)gJ`${uwM<e?mv7&{M+rJYlS|v5t<*WZAabfRh0eLG38}^T?pRGU4ZYOwHwT}yl
zH|Hfz#o1Za*ZuLcZ$-({^gN2sMKNY*)<^#Mtj;c+epwk;76rVJ79x(?2KzaWeFYq8
z^q!FA%HbY_`sNOzw2k`K(n5*X+5Xj#9ps-SejdDxrauOsD<dLozQXyf6o<-=6_LtV
z!A=tc1(Z^o3O2u(w3A*t#f`Fjm36l-PGaR?Ww7S=QDhH<uodYch|;g|5Q0X~uIEz`
zB`3kd-V&{bYnO{dhY^LtP|akX8res78{@XmbgrpU^^9(}zwQgdTT&?$%|1YpZ4qzW
z?trT;7sJ+cV&pADVBq<PCkZWMvo3Mrx~zc04#Es&o~N*A``d6doZv4cH}x3{Yhp#0
zro>hh#L?yXpucj?Cy9hd`MD|xP83D<g^#LS3a5_Cp`%dNhj)08pj1S{0I*TQqag-v
zmn~y&nrZ3*a!AruiHI({*R$gAlOp1i&+m<v`fAa|)ZMniA6<=oiTkTr(D*j)!_`5`
zM`M3)<iU-1O(VtmE>$YFNIdK0GC_0lB_)ao1$7^Y-A+WDWBTodkfFDqo}5)n&OGB(
zBgucXz~JJs3|MJ-%f7!qH^PI#WYKG}+`Q|f{z;py<hYckHhrfq9_uvPI5Bu6Qp{p&
zfJrupLnEc0&Ya`>^MtS#qwOnoG>2VW0^9knc1r4MYm_QvpNWQ^>3`yps&)wve&rK=
z;a7v52`JT0j-1-?#ISOoWXmJ9Fbr{7l}N(f(N84JfU-PvJ2rAUFo_}a@}QBzHWN#i
z%dk5yZbTH}FT(s0h3~RJk8}?e%Gcz1i*4sprT(?Q4=wBx+4)=keua4|e4Rzm(4^)!
zMYwht_2CW%-2^lmMryN#c?zSKfyaYph+;c3`%huXCpp8$HJcMwQ|dY>aPQ9M`P67G
z>l#Z%=CCswp9K79W5kFpj!tEhahw**<zBqRg7w6^cm0dc0O?qEsDpkAsUMF{)yT|7
zV{0IBkl~@#&4K8*Fja`=Tyzv9c$Gd}Hls6_hF#}!qatNIEusJ;`0wtZ3cL0u_Vz`h
z&eJlDNHqkbI+3`{q}eH5Ydz+v>gDmW#!zycFx~vEMfZcz-aBN98mga+MO76g(!gye
zk~T!BsdcymqQ#;|G&Sr5oO{L0)zbYdm_NMZit>1<E<PRA$@>_?9ye*VYq)ckGaj^_
zu2>+TBDJNK+WJqJ4~`Se%C+3aM~WqABy#(#1)tg+&k!Z{_SEwl9KoZ%0(=%TdBNl6
z8V*IFJf5(03C>!VR}&i-X@ehd($L3Iz4*hILb6GBRimOMjuFXCn9+)1#lgel7-R=a
z=KCGWkLWZShD_TiS$fpWwVtxdjiusB6dFI|-)(PhlOq#Lf9nMcXk<sx<dBTIN@>hc
zR$DWal8~#=oGlG&#JNFs3gcZtblButB~o5AHBhTn?&Vvbt2Z;*>ygAP=f~R^0x3gm
zQ?ZkMvUzTBJ=jwfvG&yP$eVJyeF$~^8sk)+=j`qyMaw|xVyWWUSbJ$^`ORI;m%T&m
zSx5-GAm7<}p^PioFEA6r#lB??f@(aJog?w;cJQe&Yc>z0lG&5Rt+YNG=3LxSVUlW;
zT&*#ryCU^0c8HD9;jS8C!@tZFQ-<IF(%eG|;r((Il+;h9CX(%>Wjj1U)ok3R-U0H;
zN?r&0?PLD+FGdL`a;>16A3XH<ACeYK|BQ+L2fos3VKlm&4H;~QTW0osP6<LFcu;Fa
z7Xn^j0)|sqV1!S!C${)nQEYQgshODeW4+GtVETBudfHc%^`aa3;4RpgtVd*fmlhT)
zSiL+PsOmT9gs-pn5yncab4-!NBlkW&p3JWj-5%>+ruY(k{4%Hm7tC~^l%b)&LsALD
zH>q!-x_GC$ICwoPxom$GoKDD|02k4D*G=$rv!|kQZ<^p3aV}6{-$i@O?;ztW-wmT0
zIXPd+hUi|735wzS3Oj<wZ!yKi8jM?iPl$rT7C4Xa`_d!t#z#b1mYi%y@jCR82~mS}
zRJp=!GTO@#pD3sUu;F3I8tuIMf?j36g%M2L3(XA5ZPY%~jT;D7vLqc^nIDMwCnnZW
zPCdG?uf%8`7Eu)NP;eSJb9U)05xH^=Ro%9C&b#!+HfYbd0JsFTv{Y-Kf>Krrd+gT~
z0xf5%IVjtf%rNcJZc490ZPW+16;&j9n4H3p{~ZVlu}MCwWl%L|x~VY%-83{D^hsJP
zKVWzCTN3yicr>HIdfFgG?{it45b~FNTiP$pa&1=X($+Nn{I59wTV2*Q_1s;Hx8ddO
zWas(%{dgP8oSHM$EV|7yHSw_bTDt%jZ@s*$b?IY~HDjLhy&#m9ml)izz7+g~-ocQj
z1<9A?l5!{dYZXs77(<R})BU4Wqwwk%YLs+y(;&Jm4B*T(lN7oXJ*Q`Yy<12C9sio#
z{Ti948%><^HA~qsu%}kiVpyhn<V<tOoUUQOBC2WA{E>XoJs#Da=emO%A%r|uSswfK
zRn^R?P3#x$D(?UZ@5UsqC^%aFG>~r4N%-9YFB{WHEbxdPs9w*^^Y=}+-7KJd0l$3U
zPCyU{n1YzT{Sr5GT4@a+zlf;s8z3lPp3bMUO9EwgyX9h(Lm8CN+SYIN?n|q?@Q<t0
z>A!u;8hg=7XLqdV)$I)+o-BcfOQ4JU7h{roZE-0<E2jJARaeDha5*fMP1Q>=S>a&S
zkDK*uKANja3=6{e@%9GHvt35LmNrhm3QCv$?qNTru4Q;sXq$G!$@8aOR8#C$PLKZ{
z8DMTxqncG1@=QJ1-Sf!8j!rriN>SasrqWr%-97|5vn(6g>`_0$8Q47&r^^EJ6pjpt
z7$T{hdmX<?3s-YYKh=*f$P7Rd#_F!YfluvWeib>dkQr08I2*j3ipli$o^;o?J;FfC
z(@s&-(CZjKV<RYjlgC{hn^^82t$k}sXV8|ey-j~N(;rd(USIjw9R^L^6&&6V^7=>Q
z!+)|zX84a1AC#J>3QPgc-NG+t!!yFEbzdMD4`6VB1*YtFPOrN=?=;n$4Aqi9-k;$>
z@XCj1$K`;xfV;KvzEVDZot8mGE1<Z>u?E&<mNzB0BB8iqiE>@@1gdx>7p~tD@4ViM
znDEk2$RJk@7Axdpo*16V4s^^b9#`7@>P-}?Jxp7s|LwIi%*}|M*6KOhkZm#a(2HCw
zV}n7BcHcc03K+^iV`058ZLZo&zYXlY<)M|(s~*~Ksk`}+C2oj|+A%PWeMt5dzS_g{
z%q|_~Vz?H&mliI!#T{HHM}K+kb;YyeU#(o4=i)Z)XOd69%Ss@G+%VW!#mf{xK2~!7
z=UyHXUjs(R_tCsP`I@y&SZ_->q_MZzbMGb~ms5#|<fu<qnIxq&wir`}S|Qit?lbjQ
zR}fF7&$VdQRT5%C=|v<0kn$|!3L5!fI#scOtc3ZXn~5;YE?~yVrl7UEmvbVu?hznH
zBj;SM_kAJF4VP;ouays3+-%S<2RTp&6&Pui0j9#%bLrL4#yUHSd44heRlC%Hg^tu2
z>iX<xJp0lw&^EK~hNifNN#nT}@;Y$Z)7@TbDc<frCTn($B>SNOwBV6?40A3U0nRE*
z#Hi{AEK?Gx`jTjL_B@{gpl4thKp1LTjtuB=#Ygb#kSN6>8*W8G@F3VynLqJMhY|}f
zT~!-w;Z2N}`!@V<;vYK~Hlf{-IOjW6677SjHgKC4AN>gU8>cXeM1K@nT9dUMtflN8
z$IRM6h2Uuqm##)lFm!7b%KN4Q8UJFT(+2bzriw%Lq(j-F+q2x|bSDJAb64OR0Mqpo
zkr6Zq^3NI6<30|dFul;P(dIS`o><R51@wq9q?wnXusbSDjFB&&bXw@p`xYs~<-0v0
zK|D<1noc`8JL{<+8aBQjRRvp?c=D5)k1uci;l+G#CrNQZ$5Azj7QG(!9;eFc!IoOM
zkJSC-Fr19*1aCZFQRXQQ(p8CK{XguzV|!-nx~>~1m861-jf!o%V%x6Rwq3DpS8Ut1
zZQIU%YwUTfJx4#*8ojSC`_udn?QTzN_j6w772P~c2a7>pJh!o}y_x3Wx<F&ek*gWv
zT?g#?5pjkEd)my`@tD-4<*t7ewQZB-I=732czpbIADJg|A~73I7C~#FAbO?x@|H71
zC@G;AhrJt6=^J--he(i5Yav}nJb8xWqksyICGf)?6$IEdZsOO^N<YdwzRld;x02F~
zeL&G+pSbzY+Nl5mb#!G>CTPAXe}u{01mC;7jRX(>+D>ZT!Wp5*9gn2zIS0;-RR)c^
z(LIxmLtFjovPQU&+$|V=JE60qZGmrzZ;}Bu<~)x)zsER3qEW<Jw2%hoHhQzxTj2O>
z#U!jxV+sAeq@!lnIlLP5Bhj*R8h8$*fqu_#Fx#kb__&vHc1&XUn|7w*^oI2B0d>jA
zmfTGqz%Z1k20wT9eK*)$elsw<N75{5^7xhyjU66~$THfw*rNNr!n}d2J)L!BRY!U{
zG?1&;?K<q0gi1KL;z6zCBPGdoh`J$<JHnkZ6a3yL4u83Hc4wD~uSi(snt&=refRsl
z+_qW?!!MS$4p~QD_#Q4Q>(P_pNlJ1G@(hREY&OxXD%Rm&yu6W6@75!^<9Bv=4XvQP
zr`Hh%Aw`Oppp21Q$rf0Oh|xb^%NN`wP&qOMw`~YtenTS05KHH5=c3$6iwmhW+Z8&k
z5GqF8VB4m4H75B;*$|EmFe=F>N>2{)S2Hk`Mf2|!vBt0<MOP~GVBX_E<oMBT<a=kQ
zN3NDWS{Di!uk$&Wse)5b3>UuLLcY9mcOiU!ihTaX#qU!pVbBivEc+AGBm9p)zZQmi
zMt{fk{aH}~!aV@6zc#AEr>(XL1`8G)q)#`K69f_}iqEGnpfW4nUIa6u5KXyMoW{|)
z{^d_)NxuFm?H6`rN>vbKPybFfq@V1SL|^K}fYF1pyEy2u&Eq48?r{^pfGOGGm4sDd
zrQnm%!zYWgO2AC%={;kEA%fTMq(u%R{4&Tw2v?P<G_PiVO+*Nk{@D^@dKSz$rFpX0
zI-7r9F-(MRC$_Z~H>Fku5=e`dnj&sg2Xv@`0}?0hED^qPkn;N@4GJ%Zp<eQY-W=FE
zE|t+(p$4X-dtc`YvNYQ`Hb%_5L>_TAM+T9ZHxDQ`n8*Zk<Auq#nsP=`DIhs_CSZ`)
zz*N|(3Ta2ydw_ua%~4_SR9JK~+CW`PcKo*#A>HvT>Z4o|qWu7y?8+n`L4^-^*o)i(
z>wO;>6qGzr6)|7rR$3DDZrt~)Z=%l7M4A2&Y*2^4jxcVOSUq5i&e$#GXEx#kwOv`i
zq?XnEX5&aK8@q^=YrlE=8ES~!`7M<FU<{2X&BLx@X1+lkB8s{w;yygjNYFR9P2U~&
z;+af!RNBS--f2q08?NLOant31Z=w@C)$d@GU%w8{n#q#rnu7a?vA9%iS(14Cm`!Se
zlY^_wP3^Ru8Kz%>r=wwAuqC9l3(g~yzJZO4F>PF{HjRK;$Hk@n#zSjypMra7CiO`r
z$|?NvrNd44N9v-bzUfR~21-eueaG<f-jT7Vhqe8WcBr?Gi`~1Uhryq^7Td~VnIm6b
zbLX7+9*M3CCJp6HmbUD?<tb><qfQE1zfpmL=#oN>y&Eer4+>_3bOrP@_NQn@0|~^M
zk!#^->Fig{suqRti~~9?AZaJiqCY(xr1D4b$?(s2Bls8;q=IsoXv?%sF|SxB=yPDI
znm*llK6cqb%;sC_?b;$rle#z$?=Co4$psf`+%y_3D@Aozj2{G>+d1x|1k-bIGNmIn
zA6;#<F7LOsl3l7Hd4hZJWBnQW-wu~GAK30{-SS2n_=HzunjH^(Does&9FlNLq|<;o
z9i^>ck9?IIXF6S&#ueTI#Aezu4cC#1m}wwmA~=_IECyn3tc*Z1u56g=`UqE7Ff~|L
z_Vdlr-_D8?W)EGeVqyzyWmmQlwicku74G|Kgb(b?ORXA|aaWwHyvKUb$OGPMavfRj
z;u<OidDS{KV>&Zc3W_I`Wa<xu=7}N?@{eu$n^>a~O;p-pia@U}EIM>4FY?KZ#@Mo~
zV7x+B252^^Tdw8Q-#*6Qu^9}8KY6YG8f-5L_(ItUcrpCBWG4NOF9tme2gZN&vt}4S
zT9GFT8}x_p%TxYl<ts#6QcQ6Xy<@Wp4gv<XCyak}H_rZDinfqQf_SuMe>3a-bnyis
zfH}kickhsP0DpQ~eGaR3#6c02<113sogpYzHunK7eXun(SITrkm_h@F%5O-L2_PZM
zM<&1rGd(*)$AJ-DO!t)kA?PU^WBO=|*|l8!&K7dhAR|o?ZL~UA7I705aW%m|KL}^7
z5MtB21g+f7(<RQF!KI9=0N&yd#JlWxrg^*3TC`p-rhi%T{WXsep?l;DL6v1+2KxaQ
z%&sZwOL&4tsr|s%V8_=_Dd@uCx0Ain$Ox5z%vTRJjrSQ+L8RWcf)~Rv9Ed+@fZ~!X
zL=SU*>yek>E`r>>Nsopk;W%2n?cS<;3$uod`8X-CzSAd7I-?Z-wXcQqVG$6iYz)Xh
zpjjLT?2Ie9lCigOg{8kd_8fC>_fVW>XQ1kfJo>PX?)TM8&RHUGa@2yohbgvgtjRs-
zh{pE&zd=cpw<dsDTZt_O$J(>JC>ct!O1}hwk87~7)4QsZ+V7GX2E0}-E;Z+xjM|~o
z!o;pVMEXBzSD6_lz-%lIj`MpVDiN!L3`|_o81>-Sh~Lp6@sGWLX%F-L!uuTsfg=A7
zTM&buc7^H=3D+N0UTwLrn|`1t&^uZMb2(2}(FA{iA-Em1@K`5{LLUWb{fs?*T3ZI&
zUl($8&-XNGItCvLLIT@092imA)dFmM;9iKiPygGbiV=SBP=TgRJ-Phc1b6sa`$YEI
z&vd3RfzNu8PgQCU0_0cIfY63Wc&fi*v0k!No}e!FCfrN@RF*Cth^IPYqIakZdS$>x
ziMaOl@FvEqTM?y;WC@hiKn;S>A^lJ8=#MF~a90(+{8(qiuFhy;_RKM8pwG(+x=(5t
z8<h|`vIzEJd}@^Ol*mA}%SNkM5dP}50-TeTIKNS+ELqAprwGP9ZiO3(6EojOw%d%r
z%);4Oe;l5QabdZpwBADviD;vjsus_bXCqD19sCwErRtV`Uwz#jve`8=XSarTrq)xo
zG!ly>Djb^M;W9d$CptL4p{S_$Uc@dd3~7$QP<nHtMDnx@g!M=FaGC@Z$fEJEkOusm
zIJgGQD0$pTdCo+-ELjHP_FD5qtOk}8<O)83I_1Z*ehoiWkT9vP8GePP(l)CobD5$d
zbU9b@RHzhhZkhufcF6{wbvAg4Nwl9p)KQyf))X@!qxfll!0II{T#40nsiE4GM@n^H
zHKutt#3{`y1L&#Xg#;vnKSlnU4F2yapZ|R6{3qq3XXPp+q4am35C31|+5aSb{wLw{
zKM9}zKN3C_x0B2qfOFpdZ}+nQYX6}Ar;|Kfv7-vRen@E+l?jERCl|(Ph}$$wjNp_a
zCICgm2comtR&*icTuP-@v$y+mndfG4aS(r6>JkmciQxMa8X+(vGZL_HN1RT&c`7;!
zl&`?=E&~Bs&vamT<@58og%_h8g6up9IzWG+WK*cEAo&13yn<e@J;`-;SQjuOVN-IO
z2ZRf}ahvnS&o>t1r2e?kwc-Bw#|_0L)=!e1Ki*pgDHE2@b7>|Z53nOlk3%^_Z+(z_
zLI|wXvgXV_dHzL-U4cl!t(YgbeAh=!csRD-uHW$WOBUN(<(VnZEk`qN(bIjsmstHg
zJeUboP%n;kYhTye+6s-kiS=F5vYtQOkRx*mCW|P?=g$kT_7!hD8{ry@OEYZUi*^bq
zxUB>pL%>pY5E&)NDv#hg%m=fRvjl9_2UDnK^KtaPFrG`HaZ)L3T|uYNCWk64nDsZe
zlCaG$Y9QmHfQN&$qShKPO0Z2X+S~xod|R6gOX6mVwp6lQ`_=m8h?QB%lM)3_Gd2W7
zvl6!<S7Vyx1f{uV?o1PB@EWI)8~5HQ%KFhxUrv!nrG*35|A@%36QNF?O5&oU(u`sx
zBk=7|QVN#Lr@bm|hjmDAUkD;0M0r~4b}b`VO$_Oml{gY{<<R6(H)6Awq4dCAvuPJA
zf^yt~Kd)bBHTs(_23VFD2}tukR#letcBIFiVQ&eht`L(bBkV`fuWM^51X<cvUBuKc
zNs*<wGyeEsm#aT&R=XEfWVmy+d-23~YgW+kFG)Z!E49-n4VoG*C=V8k#gg>ZX2TW2
zzk=l6G$oBTX-M$g{}ehQs;fD5%3SDk*?V7b4|0cQvJ)!Tj2Q8uvNL6=<MnpJhd#I!
zRaqC93=*znDXAG}h;1?>qYxNP6-x89J?U|@bVOGbXepM4n1zT4iiIOd;Cxz+D7-h^
z(7bptBp#VIVgKm%LcNX)QpNd-wJ(45TbCf^VI7A9Yaauf19cb)6x6x1p}|t7rjfti
zR!nAt60;}UX^OMw3{xSU?=-#y(wpg|f97ga%ZxHo?rOr*ahXP4dIiEf3x1z_r}2=L
z&K==Yc6A>Wyt6qgiJ$B3(D?@K-_fqXND`9)z;wa^wxs|0ZrVoA!NkJQ>hF$NLq)OK
z5{^H~yN%43Q2wdOek}w28GN!^xQMaP5a^pzycd?rlR}EHSx-BTg!GH7ELZ;Av<Kdh
zGj0V&#H%6Fr(U_)zJy?erXY57Nhmv{6Qn9VZD%2^lT-eHu5)Ie9N~2@KC5uh#ra`f
z@DD+TNC7#>SQ%OVUOsq|Abe>;3CZ3))X~&rL8c-U^xq;N(8o!f-!ah>9n_oH4};7S
zPEJ_^#RIq*WVx*2$s9mH=U3Q;jV+`<!@g<@H6YLF(8Hl3g9GD4e4$HT1qLfGVtzfy
zyBO(CJ02(gdhR#g$XLxD7BgMkb<9h1&qnQMUz06XypvZZJysRUq$t!Hu=L(G-i=*_
zrIE%$AGSCQLE}3G&NlfAluiKKMuW*;t*q(PY}w*G!b0l@{nq`AM%g}uW%11oWf4g0
zb!Hfvkr5U~@;B|xo2ABPfpS9XcFvi~bL#oB3v-gCNPD)}T6;nTa*}yCr^UHNxHnL;
znv+Dm_3EH6INmC-zH#5Ah7wKGbKO6<o|c@r$WdgHlI~QijohUsV=vjw^I*3YgtZfK
z^-h+}@0q8;-67pC>}GaXc4u>mTmu?y?<{&t7)#vbcQ;uzu3#n;#y>neu`Q+>WDD2?
zg61;UNi3r@hD_;0-Re+o$*x{iShT<wB&IG0;^?WILobWUd{8>cGsl~eY9DZ~OXqFp
zpg&XR+)C~CBT2=sTWIlMQpzQ@veT&CiWi?nN**H!=@5YAHL`=)(0k8%+Ew|J;niV0
z=A#*;VK?|=4!I?hxHw71E!V50qab_VW1SHO1Xr&*g<5vn$4iQ16_jRbj(=2nE|ezc
z@jbJJZu|1-*$fxq>4N7*$%O+tb^UR`{Ud2ad4bBG_sH=<hdaUBmLY@aoTq?pqq-ii
zHY32COjr=IQClhnp(hR7y<#KDQrdQwv^T!gXEbCqyGsJdJZ$@#J5O)U)7O$>tiY=u
zsR`0n>6`S><3^-shPho~<U|h`_IY99c^Hy#EEACSf!FdHs{${g0lWIGRq<P?&z;Q!
zXVRE%?W6hnOwzPYtHK(SXpM-ZDsOqRC8{R&y9INzJGw5Vhe{=Qc^adyJ7nA_hd@ym
zHS~++d8#Ujq4VF%qvU5$sJ6W<a~ichh1ZN(AKGQtpUjAB!hU1*AZjchNtDw>o@t5a
zeRozGyvWgmM*GHe$rUDEfm5zCIy&?Vo&VBMtxd;xsWbGU^>`}LQ9U&HybuNpcX;11
z*wU>w%X2ZE9%@AI3p?1y+jhrn#M0B{ugAaC^dW^i2K+g~|GvP>{tp29e^U^oC{dZK
z3E1ZWa=KP~1lgmvAi(f8TRuH-dpRMwxqfdi*Bg5p9&sts9LM>TO2-Zb9UVO2zf7Au
zT@V7(w{$|l))=V3*q*h$zRcCoSs;KEDEoK&Wq&Y1(v-<G_8yy5Kp=uFU;+6@L+Exn
z`u!ZBgAhs{rIf1*fguOs9Q!3n@9K^nLbDNOwMy(#BRmr4YsVowCg`kx)9}n2bA>kx
zA7jX0`mB(F4&(w=Mf|jpxAHs&Ml}LfrrLna5lbcBkX}hkL|hXR|Hw!?QMvC43g;FB
z9-{i<C_%hlbvsd=Q7y^`)3)9aGk>=pAfPnUJFy*A?b<3e=r1u=ty8D(EVZwwR=T@A
z0==%2keN!$6@~i)FC!{#!<%kjUZsLATSU^Y{otE<7QGxJ>yutSKYPdCO%)(CFjAuc
zPuavu!V*>`pXKj7#JxPjGA~yNj>+7;?b6<_S7Mr-^jwdP2G_Xn)E49q86C52mENA=
z4%%Fa<(V%CN@wj>;qFwy6-cFE&=j8;X|z&}=bWm(`qEK8+mRKk5bR#NytA5z>4L37
zJ3M#!*jh6jxh}~<QBV>v*ucXe#JxJ?9x>MA1H3dm9W9ydQ;$`-?1#=AmZ~zhAwoTg
zYN4b?=03QQdC3wwCALt7%ftJ%52DA7j^j$^iWSu#k1BY}ewZ(tE(_>W4*L5|brR_5
z3!J$=U&Elc<6aag6q^>Ilg)zflsfdC$44KdWNjOHi6V^synxE+YUj7znZoL&%#FyN
ztPMKOAWLK^^NOiNr*@{H6dUO`O+OW%Clqm7YrK4~g}~$Uqh)7fidQwXf<oLQGtTj*
zTG9N(dJWo3S~+t;mlhcJew7J!khE8dt5G{)>p-H|<`UKj!w}Dk?6eLOM{yD^m9uht
z^kM(3>F#uT*8~}joD&9*u-X~gjUw<2+mWMcM(ftShjiMTFIqFss}c=nilBn<n{@@v
z4B=_pOt-a*_RLURV<(nT%7l#m2Gp@<7=VybeLdmSQ|pYRV>{2!Pc=^(wAMr6{^p>$
zd7AuH;~elpK4f^#i-}v0f@At@WCs#~_AjaiUA~0dq%0v}pE%@y6}YM>C8YeB(0?Rw
z{WGI~&u0TB6CiN?SAyOO2sp665fIeE0=K$Fun7*)1%)PLxjG$mH%5(<1hj*n*xHpy
z%j@Xi&Bg?-cf#%kFZDq{P0QSb+0(H!Own}_lL7Z~knu|UmL@ss%(F`T^n)AH1%Uz?
zgoI5b=lTY+ZM@aC00#G6#Thob3!xk*goG8W25G_1*(2YkI}WLE?72K44(%K9hYzQL
zF2plrh<{fQ(Hk8Uoj+0iV-!-wMl%f5j3bDyTCVj~Z!}l9Oc^L=tAi|1H<MP;w&!+n
zP|>y=E*fbS+=1Qb45I0)pYX~^Qe&!jYsaz@WJRMIyp=_mde3cYfna>UrROc`1<gVz
z(5b_eBYypZT`6mL$CIWU77i;g1^;rpUcNGIf>>p}uD5w<oeUp+V!POLvUy#Rn07B`
z7^t@q6FW<WU52n==s-JZbHu|uAiTr$)y;uo0zRcti2LG%MBC?qnn@Fra>?@tkg8Sa
zV*$Sk!Fu+fM0C~e#QuvtUo%C?FKzMfL)Ik;8{?};*YK%#o{)AI21=`kFEfMt<bH%@
z%7-@Zg_9;ZW{4L=r!`yic{!E!B+%wqB5E=PuGh01rHZ$@X6d#z>jWcTyAXg<B(RBU
z*P{eGwvOFG$3U-fypo2-l|zx6`w~915->Uy(t4(q!a(&My2JA$Gl6Hd+Y}<yc<C)z
zSM>X5P^?1fS!}m~jNb1Eg(V@`IGRd2YwSO#->)h!IQTpr53E-y>gt1{Xo8hn6U!xM
z7P!MQktT)nM`{J=E)}fSB7_<^$I`(2Tj|_s)hY4pXCllTtw?6ohlR0u>zQ--M|$)+
z$TjLWR`LYa_dN-r4>zN>swhIKxQyN!#uFQ4(5zJ^L<h8fAWdJ>fcR<&dYU`HM?JO3
zgzk0VV5xbDPo^MI9#yd<`SFRT_b==iDNq8hyC2%0@0k(w)s^tPDv&Vaj>U6o$t*Y`
z-8OmMh%MQ!zl+Z1Xib{}y68I`M_7jY#F3Z#nL6@>6(jXGM?2oeKn<_w9acmZhP^{N
zC`=6z?Ij!Lp6efj%UY9JZS(51?Lr5fHXIw=;tGJ;XGt0d#k#zkHsO6VpFS(ESpWS4
zTMJt4TnaFm%7EYB|7^JWLup%>8d^E<J35&B-DkF=qQoR1KJovKC!b(IzZSq%Q@27!
z3+z0Uhlrp!CG7S7w4Ty$Q5Xx5)s)1=aU|THF0$e`gxsoZ1$y~R>p%dUmES<Yo{F9&
zvIEeu4AAi(F}A=!9>y`*qM4&gn$<ay@NFQG@V6A;ZTh}B*l7iHz@Vumf%)NxenrRw
z8b#h7{^BFxFU*k+kfR#p^7kBP;ikd)wnlbr&EYg{e}EF<R|#2N8Ezp(t{JqRPUgEA
z!`aXW(C~$Ce}B?DdKhR7(oH*XCIa?O9Wiw|6ey1~Jz6#`?5JlwG*4}->YzN4)o~dS
zeyrF}OG03SRKiU+X`KTg+vSd`w?_+_@U>IaY4riA20jR7R;$k|#cjC#7UlKPbv#Bs
z>zibAC4d%Pxx@w$&loO!*|w$LvVKvM`=aB>Ud{-Q%ihzcxsApByB@1)4y|;{>k3RK
zU;iTDpu?RR${nXKdG52qj8jqaltk01Y}Q~vlVgUgjZN|2P#*K@2<M*Zp56HhC`x`$
zq--0jjEi&JzVzwq3`Py&81yWcu*k4`3!Y);5|^MR@p&yy+EmmNR;eiS#0hOK<dxA9
zyGr!j$yM^yCNY^7q_``fg}3j*>KOq=0*m4#=?AXzesi4x1~A+10A?G9^4tie0!5g@
zrA(D#MO{O-SPeuqh<)2iKo457M$Jm0ylI%$Bb;}OrH(&12~W$>1G?#+F|65Ko{xa6
zp0@_(bK3K>@&Y0IqO4ONX0Od5eEu;X*Ob86{Zf{1QeVwf#ML8c2b~!t$Bow%Q^sk!
zNTPLjKZPQLNu|I2(s?&mB22L1F%y*mxA=!mLTt_Wy~aC+FG+45h0huNw*YY^H%`G=
z2$uP?x1&*o7vPtPN+Y{;b5(;8$wW{MQu|9zJdFkEYWDCaFBGO-rj53~`cg@wkfS;M
zK!zpl9tC|C@U%;=UOi`(!7at3!^R9dmcGI#rm`93Vv4qO{{U2u@uVcKl`^Jhd-Obs
z+h*;c%SuOL$?z#<O4*zS$%9wog!fe;w}%unE<CJNq=g3@(qAuKi$xPsE7{E4@YA!`
zRF}+$r+0<Jt3s(OwZ%4dpqxWXNDLMNtUr9-Kd9eq!OyZkox}fnmIk;q(f?_W@B7<{
z{qM$Q`oEjlj5&#@77lcXEAFhFvthx#oueCSYS}urwQd|V@aB-bJaFFk=@iKcUiM+N
zbdq(hup-k<otK9P&5-1|X9-emzON-e__Vjvy2$!%vrlcbRJzFhLJ9AHAeGLI*Kx;D
zk`S75fYF7<+U?e*Z1-A7wj1_Y@==ndrILdME7dMWrWI4Qviha9QuR>OoHDYoGfAA1
z9wUW+`6rj!!EO@AUy&isxSWMT+F}%M3Yi!rCM`iTkI-1_THBZ!d>w*CnxNxi9m!n2
zOZ(DEz<5;5+a;WUL?8-kB9ZYNpz-!v$Bbd#CSgGy=6tBglAjUPlgnx)kdxhVl&4Wr
z_ub0p9a#}LbcBO75AxP$_oTItu#G8HK~Bid;pZF|U9=?sBd=7}0kqTbY4w&X5@c0m
z<OQZu1x<(f_^-!$JJXXN7)uz!Gjm}hOH?#7nxjS_HK?KL#nZ^^k%VoH*G3&JDLX4!
zJuTx8&*?wc(%E?qwCSA-!xgjQl%!(!w`MVSl<_5LcIH)%U-#pUM*}?ai@oA^rnDGK
z+1K;O5mShx{0Lv!45a)QM~{{~?iBLz-Y5?IfQ!`R7j}{)=$m{X5^^nX9T4-^+{V}9
z8lVdLru4$648`$NhK<^WL-N3H11Z@a+xw`FnR{aGWQ-Ewg9s8uWK9SzdY(o0hgQSw
zH<Q{5kiN=o3P*X%e(^4O;Vll}ReC2a*&fFJWUJ;9&IWdgw4=^8YswBqAalk9)Z|i0
zKcL8Wi}PbVN4OI>1X+3x40Lf6h?ZG3KCvaou2Au-u=a4PirFuN1J%S9_2%pYL7}_A
z8+0K~M`*ewiNt1cs&p*Yx<HQ3YjJ*mJQK0RveT357hY9BRH_TIyz0+5)t6kzbCU^@
zdFINtO2Z9B@rxszK<$Hau6fU-J(k#p$+;>;cqbF&g9IpGUy(1~JxP>%v%iv#mxu`1
z-;eUZH{Ra2m7nB$&=zqJ^=z4rx*byn1K$eG>{MA7_NH1zbPy)dwA40<=yRET7<#9G
zo1y9Wx@-iiI)Sg6UJFf8p)ZH(O>5KieKe$F4D?bNx2oDZERqH*`myT}B&Z$gm5o@~
z_ubtM%`Ie5Y`@A7!hJmQ-v9M{JvbzY0r=5n02BM45x@URK~b}^u>G%D{XbB@h6++q
zCF00{-_ngtNn}TC)wTX(`0N;AEZJ_HouNf2Gyn3pm&3J24^nn^u>yHVc`;9qHb}W(
z@K0ULfiWX={TCQ7lXQCQZ{Y-PDB0+KJMGM1#U@sU3hargga|VbAc*k%F@(gN1W>*T
z4(VzN5z|1nuwQ;1ha-LLfEl$-==e?-7#PUl7KMIl$9DL|j6Yi2(&YE-@DfD$hzN#D
z!YM$Cu#)NzvLoJ|w}2;$ZAtqo_#RSR*@KpWoJ`x43$a>Ve6-{<QZwBelARchb`75L
zr%dkZ6@d~@TmD2BP4Qsmp;;6TN@OaDQ+YYfk>v_mw@-Jum;U}L9k1*R$NTkCp`vns
zM@ZZ^_DcS16c%ZHX39WAcQzRxDwH(Z$h#+RdIh5RZ==eKU1#QN6>Vp&j@+7?pi^;{
z*JJ)Y>=ZckRU`$%eKOEAPYi7%FC8P$bt2lPp)6JN-`6#X{C)iI#0ta~aM<0;ih}tY
zC7e|^F_8GhQDD)zE{8ui(G1&9-?!<^`e%)K%6^EymW`*`r)f1lGCTwqQc~%`?M7Jt
z&itm%@@y2-Q!!DyJ2M{pO7BflGe4m0eKa8)*=KhEsKd27<(GrLC}u^HSg2tJXETc(
z%Bth?%uMBh`Qb6T1MoV&h?`9+t@=~Nwk<)Pz1Wl(g-;uN_Fpisro;_hnc>N978EY8
zuJ$o4?0b6ESz;WZIy%P;xEB?itmQb~`8PVEUdnB?By5j(8HyRBf?wxTgZ2hCr5K=8
z2sX9IL?-P&Hgz*PEhHvYaTxLwgD7~1M|ChK9W4ZJq$(R}dF#h>C!G~eD1H(^7Vgk4
z_Mqa9-L*9JdA!WUWB!;~X%)ZWUD<S-@_FlI_^bSUU?xP)3-G+B|NRMN_<!R+1ax+k
zi2tiUhmn-C4F%G8N{SU~N%zO?3ZsV)v>zAp-lEQ9M=ijAXm+P0PpMW4sO(Tc&}euJ
z2A3P6d-=KLvs`Ei6y&{yCSrlLJVeLmO5JVnL)PmBf=g9-y`V)sO)S6%j)br4yF)T;
zYEH6zfR8^JD6z5h&e=Mkt(oZ=${e@E9_Glpr%DpxLytl);b`#OfIj^jx*A_7T{6ih
z*`W1>L)2!gdzsNMCY&-83JDKlzPj+LT7lPW{7_zKLLfz~+%Io7XmxlAb0*;R6HQbS
znImklCP=hgmlQbIDn(#-Gs<&O;xzZWq36i$B~<;(7e5wB?WP;>e+3sct#V@&fe#8K
zBZonsoSly<Zxlv3z1NMBdUNvNBqmf3Pv};-c9?@8lkoBM2ETYs_~R_fkLMWLcYbYH
z>nW#8NgxuOm-}MmFS%)^BR_vIdk~LY=2XxY#y6dYvOWdw)f&qgC%KbbpS4%+Nmr|4
zGpVCwf0$?GfJ9BRz&cn~(fFGo_=gFOvM|Ij$LVxa=g{b@(&LD}>DqJ7Imq)$(_kI~
z&v|LBQRT==(dk!@U`fuq;1fXZ{nV~ABR@Vsrp*~S{L%7IO%ey|!fe)4*(4Q`^@4c|
zMfMw%k0T|zCKB0)s*?b*6utqTt<$1$R5zY5I|nJx+z6%0?ZM0jAFu@NMi7_=6cI73
z(AYz5ALn7jUY2EVq2zekA{E>5SGLYt;O?w0;7Gok*8ZG$gemnPdR4qlDK<~2GB1om
zCZZ`iSwQ>fK`W1T{fkA)?sTg8MQ09uq4y6^vViZYk7{+L^}QS{5%mbav@uR;4-`*s
zmRJ!96!(kC{lQYUG>^|G&e6o2e@lY}(3;Scws99FpDjUiAV#*IneJGG#Uwn|FCif3
zb6Pz}_#EoXsS<Em_0n|isb^X&ZmdGB_ide))p&~7!1rjWP6M-Ba_IhmO!Crkm@wSV
zHKbcvuCR}Hc&<}=mgP;K_|4V<!H%0DF6v>-8Ao$|tE9AI20Zdunnd~P?haVUA4D3K
zgv#iWz391ZMJThI-+n`_8<3}~;Em+YO>3H-7K7!Q8<KfEuf=d?*{}=~11CSEBv%z~
z|8Xf%%KAh!rqXgU;>%LWbV#eWC0U|L(PR57*bL6-ruk>yn1%BQe*SbKDALF1`v>Y-
z&gUoRU$IH8wd~Cbz=*H^?X4+5j0{k4{6j!$PHYme)B)P!?9{(Fh$zbqzMT3xZk9Jr
zu?AGVjLd3sy%^OojBQjHC(SVrNcp;zczN+a63#w+%tYg@1eN<Dc>42VH&}98Gk?9K
z0UrzU@v?&95^dF3XFdqJMu-jucCZ=r8itKMp(kj8i+6Ui5v1W<`sq}Bx&wr#76JuP
z^CbWZc%W>?u5jdp3=WtX{qsg0e<!-bNw3e{Eip}(+n!C3aA8&kfm~bEr4ldsRTvUB
z&->fCIDKZ+q02_*Pj)FV<>YCYV_nGKX!Z!Yu*7U=^5sh$M)A22pc`|3X&6g^`AB!<
z1R#73ITKxvo8Y}glDSze?>PsVMjebOXLz;^9FPzCXpMfzbzs{W6oBg448}4VqyxH3
zV%lKVG!&9~A@-bYs*MtqBoiyu&Pp4(DAF_@S?^6NmEX)Xly`0!SJX!XM>9qC^-c|s
z2M@A)!pdRC&Fxet`|&vJ9<ED|x+%%V3bQiRzs2&%=4KeVlCEu+%}&WNOM7GBgv-|V
zN(RTT!=K+Os4{VF-eMV9)np^`mivTCn2j<EVH`Kd?KxoN;>I2^FWQeq^Hoxu8QV!(
zfA9rFoEL02fVmjju{GfzRlx4gF1TV^&s3;hhvkg=GXeJs%s&&ib?(L`-d)<uW7HzO
z&U_GPHB=fWEW%sq-IY`vV6|tz5~5J^(Svnam?ko$>KS=%KfS^AAY&v};qL7)pegH!
z31qr?^~O-qWsINrAig}jn=sb&xPii2FCyDn-Qd%N3ACfulZ{A~Nlch?Kj|BH@INFB
zzb74Z8WeVxWzeFJ4j$b?sD3Xj<Q|Lq3d&Ho3sjwmAPnnyxTS*D{v#AtbOaqJH)hC)
zLk!1x=**3Rn{NvBTedeJzitc1VvqxFM5ZfGJ7eaEQ_v*1xOnQ2v)(u3v&k)4<DXnf
zryXH6Ip6l6N7p0R#d&zKF4SFNkhR~fz(JZvn89e#o_{5FbIcho;uRVp$TCoF&s|JI
zTd%y^&?CR@HP2ytnr<ncTvwcGZWc+cQoz|gT;CJ}C0R;8p&LY%jLZ{iuwS>>*Bexe
z)d69l9hAPV^L!DVFwA6xakn;nh+}pZQ6Zs%DOec!5;?nXVh+N!#(kV4*4|=DtFe!v
zd=Y#f@2laSiei<c$t{7>a{r3@x|7ChdNU<?I^}+Z7IQ-}TNj(Y>2R(Z)o!P?U@wT$
z-MRit!Jm-VR>@&u@f~*i8ju!1U&nq6e$`SQn*HqT`fHZuL1_Ax1@K1rM=M^df282}
zv*H#1bNSNI&JHXnm&gbk#Se+D4c*#nj<8?u_wjPd{zzkW<2aL6A?-}8^t-ZBhJU>4
z0Z-``r0gdO*vjNp*mv~ORz4+uFMZtsgen<;rRR)8aWO1s3<S(!1{j3rx+`2YoKPGQ
zq&ces#kV*0>o4dDvZ)0y(=Z&LuU{(skR0jVb_2n#CA|Q|FYtP%*%kuF<cW7M8<>S4
zC>LX)78C;PJRU4w(YM@{Lwl$$h#yS;cyB;0@SG)?E7m1ImLn6dcSB<ImvMJK_h;ow
zNyMv6<JETW4M^)Z>TDk9jjiqM3dmd+-$Q9!F|N5Txe41AUvU@L>Xg2bLTc<nk<~XQ
zS<G@GZ6w4hsLwU_K!bXS8c+9|ik)eBsepD^z%?#oxBfu6O<zjdlyH%ZI$ga_l~P5H
zyWHt5pBdv36%@Olqfx4~j>^Ypn20!Qs!SLDp)WLh1_5oHaTgpl;|kFi;99fkR;bT5
zznu&aYt>9t)c1EE(u5VDYihg&MAY~7?u@9$2m9I;ZaW5+)onITg!l-s8h$6+6-FHn
zVyz6Tsaqb!DRW8Uy<O{gYN2-+@%kp6IGr%1(-f<{!C#W*g9zm#7YxM#1`UDGi%sw5
zH-%Q$rPY_9M3$?di!!T=gf$u1IKfQDK6Ey8_X|*9s6XY5{CUUp`l?D`J6Sdj-58d^
z9mY`x{Jef20^uK3UOfCcH1V$E?D(Pb7`0$27-0&im^sE6J9NqkP#<-k9wr*wCaRLe
zbZnqOmY(IzCpYilsEpM|bH5j2;kvWpioZ>w=B!cfh-*z~(_)Q%ZRE)jG|65{TR6(M
zVYadSHlMkH<raiheKhHKCKV?h_K{N-(|8N*%>l=8gLTBdB|9+Ls<_`!$9_KOWnM?#
z*g-R{th2x1BI5E*QM=>{M_Vs$XrvqaZMLeNnQjB8uZ%aqZkmLnw$6ZA;vGmcq}fdp
zZCnHXxk=AG#|;u%qo1Z@dwy_4xVaqb{z3QM;QZxPZB%B*cBEdV=f)A4q|)eM0QNEM
zHLvlEl(S@qXL#pKXg{^-mx6M^^lBqPj1%)lKl}wNFca2$2J~OgX;z1%E-pa2>^Bq;
z5cPkgm<<j8YrRYT(?rkoZ#jy<d9l+{X;g@<_N?4TJ6o2PBcX)aUnCQ$8Me4P2vXwj
zcNv@Q@4>j)8f4KN;J7E;Tpus@o`4#IhfSjX`>*rSK9z44A3apP(O=bK`Q{aYFc1_s
z=RvTP*EO9ZNC>}y7|Z#>T8yei?-AJ@vDLszE?@Hp{tj6?L$yf6%PuXmX@FPw3e~z#
zSw~FC%e-*IIU+BT|156N%?GNO4HQs;fpeky0sA=0Xb=}708h=QRKSFa&pe#QJn2GL
zljp$+1*H3x?E94humAOG!S@KTRZ`VhL2Dx|R5e(5Y+go2&1WtUT5;0AaIxQuBd=(}
zM;sCK_i4@@>JIFY_|QqLuFY+p;r6w$eBlQOXGWVPF$=q<T<sAj5sk~McX1So?;sZ3
zk(2(E?ugkiY}K#s8sSw%ZjwBG#;xdgP>vwKafHCM2Aa|gayVa0uot>^38KV1c@>Va
zeQpYzB9E}Iyb34M5@c0vT7-{HxaRhDd1hr;xvq7!0oC4#MGK0pg+duETwLef5?|`1
zhb6SFnLW?4KKijSgHe#2ZI6xEj4`&`BL=vhv!q-5Nf9qHC%LtwF8IYxi@X}xQ8YF*
znp47a*9MjsJe+W<25hXvhHY7pCnLfbvup5y)HPnN4ES$IYcwm;p#(lx)9E{7O`B;b
zage7`?3DcPo7}>w$@C0^Ta3w5VRNC~@^>~_pjlyJT2O-w*m%-RvLfhqQIk6-TM}<@
z*nHHcUfxk=ZK+_wQ;DcoSe;P_C2DjZTMOADjrql5AzLSd+_RW9bxclDO*Nw452r+r
zCZ~WPcd*9K&Wq@U^zoT9S6B3KtY-|>FHSA?T<)sBAZqAaI$d(2>pB2@f=Z$G>DJet
zH`B*wiJX}6Heb@Qga(btk)$%Tm>Wo=iHh95PpDY5P?gp?sI65SpcMFag<Gc0KU0*_
zt!rMiiGl1kbJ4bldcbjghQRsp7S^JZ{KQ#6-+~&*SnLsl5xJfp<i5o7ur=df1^lM*
z^5-E<@1uB?2_6mo$o5F-^Iu5+8iOn&g94+%N#dTq|7+ebY7%aVJEf7)3z6z#uby~?
zhb(!|5~jCXOT2LQ)LGjH7Jlz2dD`#m+PPo^8yTLK-Q3I0?*UI4KmOM(lH@t^S!4;*
zI~YJL)$aD|>v)L%=%>_Z<>z>$!;2p2;|CsR<~|6Kig$IKJG?p({g3J#VqevdFpN)D
z#yw_iq-VMgY~mw${&}Z+92&FFb=os{-Ay<y&|zu)%)wSUZw4$6Qb-QI4+eWsUL20R
zJI~-Q$y+fJ-$u**1`oS3ln6_V(yJ=2^ITl1)HalB%{t$Z)-y4Ov>ShMs543#S|<Z}
zeMyAe0dVTjOf7rvD&G?}`HNU^fiAA`yknQS3c-Od+)QpVzxkLw_xOrcfaxivQdtpY
z4$zS=&6G6=d)%%II8JZGzE7^pVFkbUC9G=LhHl{Qj44js+dWtsYUtX~;(nJ%Mh-8m
zh=Rl47{ZkxoT%bu03uWPy?vArE9qjWDK=1b)}GsmHnbqrUhhims`lMvIGcqw5Pj7p
zlQde-xtyo{$Ro1E9bdsNg4g3^w!<$E1zN|r?v3uM+FC_DUv!1Z&%r9?-6oEv9Q-~v
zG})p0oOp=H2N_6ywHg`qm>02m52Z&?jyBR9(QWL3lw@mZq<Fi$LS6vvrN_@N=)G7M
zpR`&RT5(q}<+m)?F|GAAT&Bb&Jam0n+qoLhJ0ci+33x|CLeJ$=wfFG*&Ey(Eba3la
zBy)7$Ok(n7LW?lGoTF_exI;Y!<vm%{WwdG@93z$O8W=F~p$Xp1_Jd2o86U1AeZ;P7
ze{h|s$@>m8f1rogH5LQ;>)UJRk_tY;O~fD{OJxvM64!I}*I3Px^74yY)u3azzFHN$
zfpZhRnCf7DYLq1GJmX6a>VWE&vXMDmKjaD-R@*y{Jj!JR>T-%DA!np`Ofwb5!2kwg
zbP})oUV%36J7gt^vTw9vl#UBK)s3FShMIMDCov+V!r70fnA|Pxu2h?9SmMc|z7vbt
ziLVUog(BkalaSAtjM{GFr0e}`p7OB)SqTTkg!3l`6D_pUqfX3^o_m@v$R<cK3h($!
zouBaZAAc!#W#}lsWCwgW{yl*EFM8)61Gu9VfU@QETNGm}CjhzQ&#6j_5IyJz4$TO#
z`%q9sRd!xvtaWp<7XkhykHwWZwEp$^n2R+*dk_r#hrs1wWC8^cxJf$cmgs*7T>0PK
zx_q+Uslbp6hp*QjGpwNSzyRKlU-uP&?u36Ar-u-V{)Lsv7y@bu2A7ODJz!vmv4xX<
zE4|w9!Xlj3?>~OlJrM6~L~)V!iDdgp|BiqG!IZi={|mw=3`ooWlDnjQQnITgygR7S
zyyE+HN&e~ngZMYX8_`s4HCxw8JWd<MusM-FS!;I<S!Tvls#(l1^tvwYGb}mjLXxeL
z86I4!2kf+AQ;q|j??LUk`>h&;Bs0pmQLO648-))07W*v^<X2Psb*Js52^Eg}HlS|8
zeUm7`=&s_fLYvz~iBJ1asH3|a6NV{;hq%ggi$*O_)rvZA<hm6mWUVLp3+Xs4AJ-18
zBK)~z*=Wn<*ea-u{Z4J*{xH#rJ64*2RlV<+LOoA>5AcyQvw{|5oVI4FIH4vCt;F>B
zP#A|$g%q>(Y5wKm)7rMS^~2Lg83d}(yvEf0;4Z=Wj6x$qy?6=5MRTQ$Vk|9*-R5^@
zx@;gPeYQSEGTn1QjTS<6son#ehA6q=8I*NJ2=St!@nt<y+YDXURX`<jmNkAEWI3oe
zxc5)`r)~x)o+MZ>yHSiPyaIe8Ja@IK3cM;3%zXBbyzkyz{9VtOGkNv*%?r`lr`2fM
zx}4*wx#IEoabF!6*WPf<7g>HiJ#eXgb8qh5L9WwdvraK+bXtV*Pqs^18U=F!4O!2=
za<b>Wo}m%FAYJrOwO^)fp_^9HNmzC5E>ohat6OhX^Zu$q-FNFhN-Wc20Ck3owMjV|
z=t&EfNo81X3LA0B_+@=wsdU9)Kw@}JV=#tm864*x9EEkc?XZNV|B;NkU7w@!47~QY
z=gHkGK}Tm|sfF;Ofth=Ee7%{^(eZI%ReX>wYdV_ti<c!tB)Dn&<#bR{3!b%WYzIhp
zOJkw@6LcDdP*US6%!Bs)p<Rdjxj{O)=ms{3`zHmm&SA)&{wRA>1t~K(gfOH&j+vgG
z{1yBo5=LLQcT}ABUxrfyJJ#xtp`iGm7zzM;9;Sb0C>Z=!x&-$pC0k?_BdLx{N8&F=
zat1|m2&?nyu}LK&ksv;Qk~ru6@#cplxcqczIf}Oh{aGyV#QF?5W2m+SlL9KEYa_&%
zAVpjQIRY%<0=#vVu8u9V&6JG*gzn{t8kJ=n7S<<BH^}{iwD~zuU5H3b#4cA21P?`|
zh;%1od?23d@v_J!uq;NVm46VXw#{@Ub;eTF-lB~?fMO5}E1Q+vcKLKDstMDR)t@2i
z6ox~1SV`su`n94r7ZC>veW#`hC3aHv)@(1h@kd{v-6P^JVBS(0Z{g-^Q5cE_1mp>A
z^B`#IBI&2dq?zJ}C{~<f6V?lB5jNx+Z+988{F3p=@JY>tbyV&)6Q!gyRBf?n8QX$&
z=MCDbm4v8NCMAK5mq;2a%QZE3xC!D3e2*NMdzv#lBnmUcClFt}xZk)1hZ%UAa1_K2
zlbb}(#H5nim9@+;AErdAQMv+S57C_|UyTre$sFK(bo}vFl^GEG4(AbK1%u%Sdh4F0
zaGBL{1@Mke!DBmi!<?)QQ-do6xUdzAm5@8akz)!e$D^o2oW~_ww|$8PR^iS9S3^I;
zNqRX@k*w>q+pj@`i241I;c1hN4tti^SD82_7-^Y|ehsP_59W-Uf2`I}RR%_`0Ug>8
zlZ4gPJXuitT4l<E*xDp>UsBgEloHnI4$rI^CjxuZ$YJd&k9{M<@I9hVuG~_hZ8hVi
z<Bc1}SdBD<<2J#&Q`E;I{5UWY-o8Rp2p%JXU*OJ|;=U40>#qUq!%(d>;$ax`nV)tY
zw$C5vs(uvX_=$N^`LsWzbZnDFcL23c>CT?FA|8{Ies_?xMOCFxQJp-aS59rqeNbA{
zc(|etxog^;VzB51k~7972l7J0BV43NFl^_pi<eiy))u?OMDv(V?5&5YR%sA?xs2PE
z8R~NbZ<KE_=VvWOBA|)V$0)Y+?7WVvM<a^aj0iFz9->IxeTj)hU}!z?T*p9Sq#o)%
z(1l%ZfiY*vW*_X`7@aMp`P3Pj=;fZ+5>JS>?x)ULvSMMOJ8FLax^uGhg)Ap(ZDJf(
zg1N4&ULACQnQ_y_ACW^IXF$wfO#R|nxN<8a>*9oR$ey;5;96={g<<G|2$ZFJ*xVhH
zyZR<KmNU7>62`_GqM_&|Mr+E+rr}_k_4hb_9lP`U3=E16g9vanF=6QP&&;UK=;y85
ztuZeeu!D+j=E{?~lsR%#9kp<6N6S91ql&qNI6Oatd~tGu0X7pupjg$mK0_JOq&W<>
zWhkA)#RA)cY{ZQ&&#TgquXNR(g%LxGHmHk}*Zks-0cQ`pMZ3<AYHj(^hg0E}bd?QH
z3$-$g+ruVNi3_*u+m12=XCBmNzjW)Jo@j@;va?euV+!9HHs$zRv1!kK;^}1Q0y=(k
zE9;LkuP)fxP>B!^p+CZx<I~ZlhzJ%uf@#0ij8}PC5mDPyzZN=DhbE|qkr9)|5H#8;
z?xKpHzy*oTSD3}*;f~=Wc$(_Hthxn}&kfp6)$e1qlEzTKZ|AYBb;y}P2q)u6JwD>k
zd>Lk^3&EbsuNE#}{NRL%!>S)q^*qYtZjoNy?C|NMwxuXX>M2Il^hNn)!dY%6lVqkc
zzq+_p;M~<e?cyohKqF0HKg)uwXH>0hZ&4m8YOf>G$P6C!oP|76b&;dJdaZm-rVfeN
zX)#)$o56zOMQLecvVsS!ZyzV%a5q!;I?cQnfwuf+<OuY>=?u2}tV8>P_wR%jtZ?@>
z>whiQ{&NK4AA2<acWf5)h=j?%vspxcM4D~|cGCNAFZawL)H@%By1Yar^n4-Sv7KPS
z2tWN{LHB?`)A_nOv_a8o4&<0sBo4oUZRmo40mw;g`cUc2;3?-V!qZs3Di|D4BC@_3
z|Es+qKHDAul;sv`#K2ClKaqu*2A9(q**S`1y%qF0NeJvqebaLZ4!k{-x2ok$GS6x6
z8%%Hqqz{YNJsGHN?eP<;!PHCS8&u)%^dM)NIgXT|%nT#as)qv)sbiSa*4)Uuz)A~;
zPxTJhFTU=w``r<Z65NPF>*^xRQP$)4bTI2RY7)gcpaHs$s}qaD`}br<=H-F;U+F;4
zK7?bGBQSL$YU;R8U|vM|uJz$-QGe#lXBD!-T{6MF!B@s9xa%a%!ng~aI*B#(x0)>l
z(quxQXM{;qhO82YUrJ$3^6`q7^X)R*ZbAWNri@xy*^<ls3(AUo)w@CaFDMJqKxI5P
z!_`y2x-xEX7mi`uLMg2%ombx}a_XB>m;_npsWH={I^qf?W!7-6^{L!KQfwQs+)J@a
z)^d@Qy6M5j9Qe=6mLKsLK0krv7wxNh&hbJ$j)4gJ4>oRbrlsSZYC{*GzoT#|Q=wRv
zQ)B;uvV_^UaUFI48<Zu<1Awyh{sm=$LfV`bq1jJ5_<-{Ne$UZ*g1>zAb`1t{G=5J|
z#Xl@CFYAbY$q!6FfBymO8D?03b2y9<`g0AcZ~9eimTkR1i{?Bs$+*N}Mib?+V>2R*
zhPv3|(vw=BOELJ0V)}mrWwrhrltokg-=M77X85%zYV)E#Y+;X1=u}%wYo7ZviZ~3y
zmY>xE7#3MK@ySx%2b_~ObL;c;TqrNkmPP4bf06TiEv-WlLD9b87l2tG20&RG|AMl1
z{}+^%FKkeXQY@=6^Xw(IzvUE@=~;+5IXLhTSnoL)Ujpypd9vn!S?4tI<ITZy)O-Ay
zquunzDW>p&ilQ@+7urYb&Rgl}FC~AuaCsMvfT?`{Cl_D<Lje0fG6Yxx9P|Ke@?SOI
zaY%@=dbX(R4)*nO(P33c{1@3|Q#YrBlaeHH>BsqT();Bl6>|#rr;CStWf%`S&`#Vx
zn31=(@pfs0&>=>+g@7&7{Fi<3Ki8m_=qmAqw9IbC__w%}eE1~SPRlqDp|K$es;+ly
z$LS$9@P9Ne%6*C1_0`N^H&fxmFD_)U6WmEb`zmU^qnDXYNepGrGD2?pvMkbM5CXzf
z^-vu<Sv^~F&zgP0qS8H#!{bt<KC3OzD$2~u>%xW~?QyT0DMpbGQfoa+zMVn8vyWyw
z9RB&fvo7w!>#WYv@6qBR9yowkpqBu=l?@~U!V5y&$YTw=7s9>2Z^xZdV|*0nx@)$*
z!jCNfD|LYl_PiaNG??j>Oh2`NSuhv?Ez4;-q{cTb+1wR`LK7a^NO4@E7)GeCNtgEy
z8?3fjqsT4mhj7(@h@v~k^z0Z~t4z!796fC;|GWmnZlv&-b>s5g7jxxdWlh{?aGKoq
zWFIkw=|8v2*=7hC>&a!vg6P6^a%f62G32duU)_0{zS251;ZEK4sx9(bAg^(kWyV5}
zSq>hp&GqzQ>r3z78z6@~qEW9^@mxop7hUO9qiiefMV)0lVPm}BtB=;6*g=hK!sX)G
zx{SC{oOab~>m3E*2s$4@%Nn=QDfP4S$gCB4Il`w@t(540nILg81_g%f(w?K~o0<T#
z<2{$ei032-C>k}XFo%x&1y{t{T@eD)(6yeU<GKZ5&p9OnW)2m=erKd(;Ybj&gW*K|
zv$#9I%t%M7_CyW%meT3V#}+KqMW<TTZf;bo-yJ;1rBu?DUAy%;`LA%$I4CQ;tO)vp
zeR5?MrJmcYpwF&-KW~fK`f>c3Ir`ge@AOKS2D>hxOK*rn7&M5Lt<({l+-a|3sm!NK
z7*i>0GAl#FF}rl(i%bToasvVlD?H(<7|Fp<#>Foni(Joa(eUa^mMS}m1GbpK&a+KK
z*k1Py8wf?g<|_%5MiE3T-gq;BxPnrqM2{i9fklwylIxohCr(|GC%W?>r(OI9I)zcj
zkOL8IH#4L}jmnrrME0H(!4rP#in#=}yX7cFYfs^1wB6UV@jBQ17l+P^BM)5bnI^_e
z4C4i83Sv(EMC$yEPdF*DDVK^?a~!BiBX9QABTU;Dt2i?)@&J{`Bi~WZ<7@nxk%Y-8
zJLK4cUnx|gQ7dg(ac!9;84<{k>oD!xcg6?L+Lh)92#WHlP5MY>&25w2mz!hGDSBA%
z&0BxH2^$hA+9CkF8YBR(hW~61akjIzGXA&1;QxdA+EQ^eGEWqt?H0w|x*m4v$u{{1
ziW1*44IMma|M<W`1n^IVu0<J{sJj1$vUmKhyi2#gW7|f>ww+Y0if!ArZ95g)HY>L6
zq~fGvKl{FWJZJp6$2i@6UhMy1Uu&)JyypDO`Dr;RkI~5=ltmK5Cnst`Rj7A_=sW~-
z;V``KRxeaPgcn0fD|QKr0QBqm+DCurg@%c7?HvbXkj@n#kZA5`D}Umh7Gw}btd-7I
zB-z>Sah?QyR7LdQ(LrWWcUI&Ka|OpU4!9}fB7%d(K@_@CV-J0}$erMUyy!1tQn18*
zc{X*>KE;4;@ZPJyOoAQ=xT5KTZ?#E3bLI~4bxz4Ts6L}|yi3@kO;fb;E(O^zzOPRn
z@Itm<R7@kmzS+N*6+RQGWQmN@ukdgb8MB&}U1Mt)U)K+=EADI#w{=zxBN?OelgiS(
z&VbtRBtv(fMgvrEaLkR|y8>ay@Qg&dole;&^~Fk@AJUGYgD-61DP<fyKBwZoG&oll
zaK?Es`{Cp?m2&i1HuZMYJoq)zEPge13!GZ(UDQiHS56ZxYBIRlEjy#8a38X*ErIN;
zb@r~|x-TkS7ML65E3%mwus#~Sav@(GzWza>byhygof0!C9~#_OPZ3>U%=a^=7A^u(
z!jG}{r7Lg8F^rz)#bfC>$yh)HV_{~fVAepm(Dt=J9O;=o2DNpm>t^-xTbQ`a#8|l|
zw7T@oWmxJ4tn-StHw;$z_5O@UnxLQHU+^?UH}H={oKAgA+LL}S19m%1H>yz0>-vJs
zW{~2VcuxnK@$>w~)aJ#99%>a&-P*|=C%j`M5-ZD0>w+1CdY;+oD)ZcD_N<FC4cV-|
z8JNEeB17ip0W_{!94T(eh-xf%gGg?Q>6X@mx*r1~-9Dk=D=!`V6l%U=ne!=A)EcIA
za1ccLzc03~Shcg6#-2Xr;UB_0rz9tDX!(KUJB{^htm(XoG?upuN=8`nf`&^bzk5>z
z+!TD=lY+YNzq0AGn8}|w&<mU6gs}A7NpdYN?9Pc*qMP}gB}^tZQpIR`IF&59w!v%+
zndMjC)iHs>DD6x|MRlddYK<9IQbj(a5VRoX3rvXJp4YXJN4Gg-El^Vr78<|+f8B~a
z$3j>ae2omt|MQa>L_Y0<4lsdgfC>EfY>t0q`v02|{F}|8j+AqU&c{LVM-0NPPLCIS
zvrg0j0tzaevMgWEkB?$2=qjtGC{b!@y;8AR4d6aAicfF(!u&?u2#@=ZFu&Qx-(mjh
zK7j8G5auWRJIr6ge~UCb2ZZ%q7m8e)jI#vI$Ud4`;e;#ec~(R}4jY+IMi&^gE6!<K
z;0fAyqj4m0%xL@2VEoOF`YO{8ASE(>Ag!@CWqr9)KmY-QID_|`mpKYB0XrrD<&@CW
zP(*0YF3oqugCcv7b`z}Cd)0)paaxS9eji${;gO$(qd3<Y$%%vJ4ASql`hIj{`K^Yw
zYhl~usomp6c4k0&^5)q6`0ZSXS0a@;ujanY=Kk9cW-h2M?)Cf{-MB2C6nd3YC)AD+
z(n*!PRe+Ybq<zro02TE@g;A=KNCP9gft<?7vF%(xthf|X8xCGjT{EFs$!WI{T>9!6
zRTxwes9?Nen5uIee)57N3oIxW`Q~x!7zWW0V;Zex!2^6(VxqZgJRc;jBpFPzw^vbu
zYPYYeLM=Wqvt)p`Be`)fXYKmz%0PiJa-_uAY=BkdqWJ_nM_Jr(c-2`^k~q&r={~*q
z%O7MlYJ<unh@|R$wSbw4y2B=S<BqXXgIcM(N#QjzDEo2+Wd-)pST;`p{sm&dlG*d7
zch`;<LO>m&-z+gg(Dnu5qExAgjL@UKt^z_G8FU^mNPv~;vl<%Y%mkDE8_!XL0wpyI
z9LY@&pK&Wbh?09I(*v%ro+hS&n!gbT^6c}&zBl<`^MfvQudr-O@_6QPw&f|5#Myx^
zeUdF1B&&pSds4#g@+EI|_ygx7?icnYCF3Z1vlLqesN-nyoQ2=#g&@l1NdU~&z+~93
zDrecPLoP`^x<uuAlc|EKeomLU3RiA8JSHt=iYV+LA(Az)q+gdo?_!Ow%;#yH9>}C*
z1UW8sZh4}AijbGZCPc-#-n;aXGhDauYg`_%uXr$M{t@P{IhTv9EnM#~ruaffR8X&-
z<N0-w`6FBSB-!FkzX=fLhuPLSuCS`yU2)rM&}ho;f>r}2q~aN}n_j5Z+nmWD;{UvJ
ze*c%MwuyYaB0a!3{-yB$`$B9dz$dJeiKDBD<NqyWbhW*CgM^0RHYdw5D_GbCwn_Cz
z%sZbI@LIMrRsAahSW!e>DyK+s@^oz{XpM5MhBjmnJjZ|!iOdv^@a>)DeM&(XDcl(!
zZ3TuAMCf4(!@cf|z-1*J2bJhX9Fz!Y9*9xd<oE6yRDiU5Dr*4AYLGG{Rb<_F<j;$5
zMDCQBU7x8xLnc|rv0^9-M=`sG(-IjtAH+-EzJMH{R!6@KkWfP3CtYpD73JF@z2SZ$
z{!rQD6WnR{Tj=Ejdpva%2Z1_i&mK7)XvWDH(Q;8YH}Cj0pWVQ*oLvyptU_ehoKHoe
zD!hBiKL4AnrL35@HbZK&;c%U;GX!@?4*5q~3{v33l5VE$;5ud=jU}Qa;XaJ=6ZEj<
zhvM2R8T6yBmPs5M+Vz=1llQ>G`ofLgfwR=W?%?|U>`scKuTk&sZsIAMi^W1z4|f6s
zZ`x@NKoT&0vy)%LzXj8iUK(v*778d8cfanw4Xpvbr#qPK=XPnLdGJw3*~z2gslj%c
zDLd8_>Rl_l5APMxNvvtNk5rntBEAu6fu~DsQMu1A=}L@*W_AWxjjh*5GK&JDHBx@Q
z^#?QPhAZXDP%HE7E6;7L6K;Jh|D+YAB<AxI(SW)j#=+2Y$mCYV_MI9d(HaT(Cl{A}
zx@HDSWm$yq+Ym;9!W%HS2K37$P3>Zi?NUN}{5SKyeen%<V(`iLwc$w)%6z0`>OoqO
z%_l`fU?a~I<S>(+oss3VDL=No&q`>heC?;fKgWm_`ZSgPUSi|RQn-6MiR>;UI=c2M
zC+`<Eh~tOR45xvQ2}X7UVeM-a27YBj{Vg*#bKvLGni<+0SZ*l_fmh7@1!<haidNk>
zBQZA*HWw_p>;cLMS2QUbzB^RUpP$rzJl0JN4o&2njbG1qLxm#HgYD9nllHNm%1chB
zF>f~aO(ir5grA;jFr7_x!4|76XAi)O*!x6}URPy)(vDpkm?rf~$el^EeW;t;A9q6Z
zD?`;xw5YVBYD?LjPP;nxB(*r;iRJKw))OJKYgU6qYJa2{@C(y9+D&rD5wg|L7wsH`
z?My7sx0QJ9;M475r%VZmn$__U*?O9?t<D&YK|~Pj^;P%`Lg0U&Kt20?+WToiJkEY?
zjQvaJEmHsUUKwDB|0~Dme~rYmQ66jfJ12<VO`%)1E2_~Y3LhQ<*XnP$4o%4nGfJwr
z(}UanJNznoR5q4^ME<x|k1!xoYO*)pu=DUcl6{K6FTHFbsGbg}0I8`y8KO~sO(0ZL
zlP5|imE2aO*%fGgBrNu<6s{qHVyvJL(SY`&@IN6DhQfg<@}7n`wwzfs>ToOSQ-M{V
zBya36CQPtIIO(*%ETO~<bm2p2i-52pSr&qJEy`rPzC&r=!~0SDMXE{~wJPYK8|bTn
zEgVJnKkSSmsdyv2mEQi^O|FQe9_x)%U!B${IfPiP7(G=E8~Ro<ZUzU@mn+B{B=8CA
z?kiUO+}CY^M^9hVpJ;yG-Wl73n|^&DoXTzGx5?KcFKT9fLgjEd*0duV_}~)-8@FBS
zeN3v2<tmXXQM+~*e|uh1Qdt4Tx~x<y?!@)mrK3B-$kXj<HF9D?GHD3$^R9;0;1A69
z=A}u8&J_8vgpvMt1Mo#byz{fZGp<>8QSF)Yh~HOqQorZXJ-dTCaCl11U4{p3WZK+5
zB7cEN*sxZ%iz)H+a;;YX0ZM_1Yzp%^2}8|BadFP#<n5(T-13J>@4PAF@!WB!6~@Jd
zAC3O<yyI<t8P;$Rz*Me_!ZVQOZmd<*EE;T>iWSl1&pzn1e}PFH#>qHz{H{Fb%PdNM
zuC(}OODut93;`xc*APCb;hsHnFGApDC4@yyk;r*kE*M9<M2FXcN8Ayf`q5II*9;s-
zy;`3<$;!Hmo-Jswl2x+(^7#JF|6u8bwK`kc09g+_o~JICLB$M|Zt=J<9Qw?rMa-ng
zgf4)aZWs_-U&f}<!n<FBM<SH_?LLeFWXPA>p<X}8FIq`)he*{gd}%09`>dI3`08sD
zybdWJCLHg5Kk#giD#x<1)_y?(MgteTWR)qq_&13p<MrFNo>xUEz1>8aepBx_t_8yO
zuyVVCu>%WY@9<L#a>?EF<y<S#X29yj*2`~!X0KK^Lx;7^?8$0%s6Xc1^7GDwEY9vx
zijL|8+35ur`y^f3LRxDKg>X>t4Lr<R3hQEBCRiMevYNFTnW~G|zrdRrE*d9(%O4|{
z!>FC`Aig*kfki0gh&v=(4@_971xDv!E;^rlCrmF3438Q0%JMmbJW4>bs)z7i%+y}7
zvp)8i%MDJi*It_G0V-L}I`rJdf40<vg1pAt?4`Akv?CKZv@KhaA;?fc%p7Gqy_X0(
z&NzEy?aTVrumhm-m=&i#_aa`{{qy^J12!3r9B>wB0WNg<f9opyJInun$#^IOl1-X_
zc|NalWx&3RrTK6Y<%i9H2J-NueMbgA0_y#omidEmeY`E_HZQ4Cfw@#37gsC1zTD)e
zAOKeu>Q|mAFT152V7apkDK4X=qofj2KoyVyHD3Euzwpm%RZZGuC^S@;E+icAZNMIL
zf5M3YoM^lxZU74#E;72I3|oZ0O%v5<ur4@-B`R+g$xmn!0d+3!MJ@cZFIa~!st>3P
za^`b^S}Sh<!ob#0J8e2Qy-o;JMHtwdNF$A#Khq6Ap*3A-bUDi|Mzt0Ja({P|bXuTp
zo1+uzi?(B_JY<*<epxBAT*B!P^-VUzBo&C22QS}&1Gek>ukNApJ-axM^B%+YH5-|c
zvPnZ@+jQy|D*LL=Y+UFsBuAgGU5v^L0?REC_PjOSNeN=a^G1Hn0c5-CChlv7>#N*g
zB~NLarPbRdx&4p(!?dgFxS6zgEx4)*%Wmq5iS+iV*I$rbtm{fh5g2`&Awi+AZ<N}z
zH?e;NEp1im3YV;0cvHIasW(s9By&mD%H|YIJenkeX06qI=Do7iKWrRUDCnkk#*t=(
z)eyaor_tmT9J5t%EhZr7y9u&az%fq`?({v#ArODifE2Q!l{JwJCb4zj5AbNP=~lZ!
zB+GV@j#R04BATSw8<4RC`FNbcvI&zdXgyQBWJT?TNh1ftrH8f+zo*r{-RgjPv!V6C
z8jTIoNX`22jo0*Al&!>}r`DY3B*SNajJ}G{b}60)Y@G!Xm@d!7vdd^t1wX5aJw`y^
zQp{JDyRsLPY!*J_MG6Tz?6mSec{8}~OTz?-whCx$`{<Bkj-$D=51Mm68Rijm({tq<
z(PzIM=BhsO9@`L|k>Y4cQ)o{_g{ca1cL*_7>0{8pw$l&UYyQzE(l{(8&a=5g(q@<_
zNv?d^lD0(}1;S<FQsLzYgB|=P>JTS4>}&SK0AuFY&D|^L^H5``^1Ix(d9zHxPI^S^
zWtuJX0U-kcI`Ji9!#L7}9P2y#I&x&jlu?FE9pQP2Dc9xGI0^j*B_{0@_jh^u>;NS5
z){1qzepnX-rogs5^I7Zn>(yuYf1XAnmwE_Jz%>5ly#DVZhBn4*{}VC%Ulb>kWXbDF
zPPo2n@5uH-iWYi%_po3v9CLG}RAIX&Yj|hi^#<?P)2}H!F&ybsx{0j&Bmk>cji@E!
zDJ=pKxIP>j<Q?^$?1%6q8?$Wu3mFy^*pV97jlM>!icfQlP^drPrrlit#rlzvAI=oq
z18%ky4<5)TAqz<ESE9{De9Kq#&EP#s$j^vom4J9PQegIAnTy>yPJRd)11!0Tc8M^&
zIc~=M)%V-tP|Nu-5gFl#K>=lJ1n<_P1jj33eUgn7i2(w!!>fMG0l3B&geI&?JKLIf
zY_i*{_D%#i`v&#w2rK(6Xh`mzDeGS1;!K8;%oir3VF%ScSEhS4i_+Ljl8D5!w$t9#
zYM_3SX~o-u^UrNyM|VNO-JYjGkBTN{cHxq^LGL;(7-_M>M$Q;s4|(^$2}=S-6z;S!
z4saX0Zm({K`)!vx1HwiKLQCJ@)g@v<;$}Lyru$YWV&d`AhTe#PLZgZ|ParTI8wTRi
zs*ulQi={xj%Klg$YFNCcRoYUxov$05_8+wP1V-66RJxR!Ue@!5NC>64BP=3b4`iHs
z)XiO3lkXSqF)aNsULrPFceKewl+01>Xl{n<-}KZa)Rke>2U3hv=)z(b2uJvXFaV~d
z<(fZFuFGmgr%f-V*zcoKGB0N52;-s!B$b{JK!#S*_swcp^5MOt=axUWui7q<N0r>@
z=mib#QJ$V4T@*MZfA&is^K%gYYXTpHrOn2zp|jFx;=o&FIBt#g;)RENdUBvM<vyp^
z(r2<D3#qA@ta->)1(x7CRG7WNSZ3|CYl-dR51-x3?6gCaxH!VKAyf5%lkgU1E56E@
zv^Z7_Ti%wpCO-`?UVIZJo&%spjbtS8dWtbod`0}Sz+`O1jdeq_eMclRQ;xqdgNwod
z24!lzdxW&Z$}_cds<O57Ns689yx2JAwugKF@YlU%>>KR<m<DSqhd!ft`N4iZParCK
zyOzO4Wc2qLjrnCNts8~RnaB3}*DLsznu?N*x5kS|`>WUBQ*pldA4R4K^Th+0>$LT1
zL6|GKn{MTmku&nVGOp_pk&9M_tiPT+?BuNeXg%Kn*M)t4q5rECT)+PqiU$}?Zop`g
z|Hq5+zmlPn$7(A7W=M-(7m}33_wCbHlzl@AWkeHM4G~Nqj7Nf!-{BHJ8}8n+8A~+z
zdhLFu_4Dxo*$*=PATvrck0b{T?9I|kF1KiqFvc#jK`@06d`|*XXZ)+99C3b9aF-X&
z-`}i5U+e`NJT?ePqB}SVOKK2<)dYz+kPCHhSa^M->TC_BgGIA>nDk_gG#x;L^!erw
zU%3-g=9ldo%?fY1l($h2(kBTK3)OStSmS32rz?zEhxnI3xV=#2z0;folu9+&PJg)}
zT<6m>deB3~cNEyYybEy<zs4hWRsh+JN`eNy=j!>IOq@qusDJe#7QXF0MyQQ;#JKH*
zFwV)32VsUqU*`~*Z!&mP*WPr+!oSb>&?H{oN1<Xjgtjk6*ETBz&K(lu`6FlI_o28K
zm!O4RN60A~bcRbR6gQOo)DM_TCba0S2^@S&`CqU;J*H>5?Jtv;?);+Q+A<N1rbFbC
z@lud)Rqli7u|mUAW0f1Xb4C#hR9ax-_*AV3kl!W;APYSE+j)Zv#jjg}zH5(-+(8X@
zL?2|=l66>f&}7%!#k(7d)w4KksVNI*j+*CvW8bTr!~sF@$A>jl3_v?p&F9vtI*j#G
z8Me5nqK|f}>K3<ZwJlsCp#p#RR6RjdN-HOtG%E)EqWN6@c2h`(^vsgZRP_5npyn!!
z2SUjLPFqP^Ufd<yC(DCALer`C$<`WiNH_G6+AaBlM{4r?V8U&3>e*RfGd-sMbz_Z0
zDs50@p6^Z!i@&w;eUjpSdw2BIu%&0ehE%q^(pW3l!kTH<YXUnhcaFLn?+N96F)aEn
zt@=miYs_N-KMC>8>t$vJ+4`JVQPsI<>F(4YFq=hTOp{u=4azh~%~EB|-yQJu$FMoc
zZj^PN)hhs^CB*hJ<TtOy8)}YPmq8_=nHAdb65ZABZhxplBRV^W&F{t4(ub7}?^oVz
z%kIhB92q^y-<kEKQ|VEgBX+v*l%DvK9G2T@z4v^UYt=X!Ia<d@L64Zw5%2Re2H4<T
z6HyA&u6!LKdVLiH@_@8{@9gaT%Ollo^m&2@Fnj-*3il5Y`2V6iZ2-KbfY=z#W2Xjk
z``JO41G@bH+AxQppx}34;E&e>O|CbCyriun$)woWl1qu+9)5@j+m7D!UPP?^UZmTM
z@(d`(KRNIFcnd>y!cfLiz~rcb`v-7sb!CKU9g7^O|8SP>KI;#N28#fkr6)wl?7U_u
znA}i!OeBFpV-rUHZVuy}E9?VyPOj>#T$34iG9FK|AtDbH$WK|PVWX@+H9lH-=74UH
z@~v)i#6vzJpyL~$tj)WQHBlt7br@oBxsU_I_s=u3vmCZ;`bGIh_`j8S3UJb>G$t;$
zT)f}~(A>m^NyW?8Qt$qmY{#=<pIn-#);!)34s|=B+1ZvKkYqi4aV#}+X&vL`O5mNL
z3c|M>x9P<#bEk1k%bG<(5m3=KEMYoA_lbhMJT$wbG){9#9%qg@CpczY0?5H5hI7xg
z{vLtl)_00@oMw72X@5SUf|3gSb@iXDQ>{&*S6&EY2n02wH#}||I$;`eDjvKX1b{z&
zl2@3K?I%SUDfpi+EvP!vY=%^S!%WT8jZ)g_E$kTX*2TXu8l}JpeQBFtsyQFB(Qbhi
znivM~Dnt|%6>Mn_V_4Xj@_||gd?UAa;b1vf%f2@SUR65yU7C_bkadj7qV)<hn2c19
zHq$sUm(0le^aR$WH(|V^zsC&kLQW7p%P=F4((U+vIKw<1k}%+6h(f{^2xS`H2*}=l
zSqAz$u02QfMYk8}nS@-u0lN$2ChEB5_TW6kccA-C#%!F$2RN}H|7btj_axiucGX4h
z6;o+IyGty|Hnc`UN;!#VC^V(>Sd2m|PnaF2Klji?J@Bw~yTZbwoE^nqa-5^VZy2p!
zpM88?3!qFth^Wa7$#qT9wN^GsD<O4V6jTn*REgpS|5yY&pSNVJ3pQ5JhAVNwfhWb6
zp?15Uhm;-P=xT?5wILffu(Rnd<TIU<0IhlqjhRmTD%S_jK$rq*#WlH)gNHqe2#CeK
zYPQ)(y0HCWv6&e42GiNc(E1zS&^3-S_NR;FV&Mwzk)ehAHF<qXb;9k2fy)M+rQG_9
zRUG0W=)T(uhrQ<P8Po%Jz8Ab4!lCargv0HQ-nhU&zg+iSc>CD^aEvLykNQ7ekAGQ9
z|A~(Azdc<O+fxe!0djMXq0=_6D9(_6kgY|2yU-D1(i;+Z$W?#s&YCPBOGjN%TT6(v
z9Pu`RC<!+6oEEas3n0Ql389ceRm_UI2(bB760TzO16d*E#xg=y)xg6pV+{Zg7H`HZ
zzpM|DVU$eF?SnkDB!yR@^<yOv=Vnvg6$qXhgP|6fbeMlb9`kw9aD|3#T&<W-l@PoL
zh8rCaJ*MY=!5SG;Wi1&A<e6DUITaDf&BsAKV?7GcqafT$H&b&;G_P|-3Vu$<2|NZ>
zcES~EnW#^t5-^j>vAr%wvZ@JwpsW%mhe+Fanca!Hi0HgRro6Z}MSfgJBSk%^fP*;c
zM)P7X#6+pQT9QL?>GtqL+<8H{lq8ti#u<(p;*oc{IrOP3{F$+O+wKqi5_-k!SeMg9
z>p|_zcc(tZhX<>*tCot(hWmr<T-u~=r|RUrvowE{aKhtKdZW~bIpCdQK&Z8_KSp3x
z`nalqh8B8k|9Q)B5k$ES<EuNmupKw8tGBry{36>@AGZ~>B}le&yxmK1m1(NHO*{E)
zb~ZA+;ypOW*~dq{8}mt4n9#D3_lkG{pM?G~%0*zxK^NZ9Mdm6S-wt=x;F+@8Mnl{k
zO>*?DQs=P69w@C+HBV;Zl0B{|grn5`QAZbAzL=%oSfPbDJ7`Q|We|$zx!ocZo&I5N
z3udmSEQxi=Cgkg$Ye8tOEP|Ny8NTcf%E6jokDY<au|AhFBcshaWpBHmlcCy&-|D~o
zF+rqEeu)C^4mrTP?ccBP0Sk+NA%g!e%$C21Xa!RLAfk~IeH&=Vvdv!-^MGy>A&BwM
z4`lyqS8=7YIaLkVA6A?l76Dv$pC9l5*WEiz*DNCAtBF1X5x{%r@0ZyNE)`xc6bkH^
z2P{XVzf%<es&QAASy}7^4dTWK2(>-{iPH*Etcd>Zv`=u6Bw7tv1Y&}zlR?hS2BKs&
zFB&YDpOqoUA<h20tUpC+JO2$Uw-tbUB_Id_qIC$N2f@ELD%;ZeDO2Hg41_828)OKJ
zKaeog*3R4NAJ)5@(*M_bcc$g#)KfC{m-P<eA*9sW`TB3`ofE)%7ttckhXJtOg|Wri
z{*U!e5(29KtR<&5X8c@Xa#<5r^4thw^&>{O8i%b1$Hc;G5p#?LVmOL#QZqVO)i3jk
zvuk1WiN7mW{?bQBj^P5MdSQ4C<GR8ClhYkX-<_Vm`<rbVV+V%~E9eJhvoK0^#GM$>
z&7`)gQ<OB7f`fn*jc^WPQZJ-(MM36SHny+pQdJR4tvv0c%e(ug5P5dB<z4cf_|P=5
zW`U&x^r71a+=(U)h?mI`i^jbT-}tLyVk@Z(;lmk=mt>M^W;=&V|0>Tkk}1S4mj9vy
zm1^4uNdg5vkxX5?8z1$0{k*N}o~A)j;7DX~L3J~DNG6%TNjmBkIpC{`H0y|cDKhJQ
zVB{IpRs`4C{bf#Nq|{$apfSCZ92_lB@r|bQhH&fY>kI+-Z2Fa^MQ~brMBPXJECIu@
z<p}}&o;EebHF?C0GFE{Esp2WA<klF|r=y8SH@AFV(n)3W&6k6|qe;Tp>)L|&Ab=Z8
zjf!eRyLTxM+58)K1;{7?iBOqxajOWag}&0%bX*T_F=77oyCwNZd#Gs1q%l{W3-eRY
zUA@UATGn9rwVDu%+`*KzcIUWpXt*4mDrL|m884ZsQr*im3!bZ+3!GetukQwxnTU0y
z{2;YWNX5VemxTGx1#geB!YQdFfiR{H*1U6*=TA+wfgvcHW)O7C3F96;#kF3YBD1{m
zUw8HOd<Hf<4vA%dd+&<iH5cxX`0!``=sNYt*=2U=6qWNu!Em_t1y1s;`9cNv+WO<)
zf63iK{`2*5F7ur9e~=;nZ=1!qiodzP|E~-ghKICyn;7;D<_y^PBPRm@{^fXb?MRZV
zQ0y*~^YQjZpKmGoh#~;VvwTjgz%MJ$qW*D-`@S1)QDIe45#LG%XpVVdL$g-aC0Hun
zwoUi%!*%Z4O#)@q{>6FE8%_MAWI<wIVoFjV99&M0TouC(o-rG>8>|y;=0wVBdI(7)
z9_CqTbmvEWB~VOAyzt%h?!-kF(q8#y`6j0F=*ntEUs%c(Sl5B}A#YoQomHr^<^}aF
z1>ZBOWPrgW-gQiI)=AB__FJCh)&1#ipPhFzWg%FGToK3&elVAiKArq92~L_&t<5I4
zRP^9uvda}q;>Ol5=jicC@neXHMD!k`t;5Oim(KXpH=b7Y;#R@)>xLJJCqpU6mu~*^
zLbB|eWvPn09^Z#n0RGF$u<}=Itt*P3M5M^6ZrE>a$j$w!ii)|)u8NUGn-#U~lj6DD
z_a99_$NcVAoUQW0G269_cg2sIFFcxjYNZ8-;3|9k3=Z#DV`A{~)Dr`u`;ev+nZktD
zhVU!HvUyFUUR2lS7_Z0OW>+#lp$-<B)+Mwaj}s^6JeE1-ukyqvSeV@XxskDKh{TKW
zadN9pi!nDxD;{u~Ir6Ow$+(JN*1Ksc(_yJIurDSSf@X=7nY)7kuI6?u-!?R%K7WgF
zEr8jkgK&qf4^w3CjVO_~s{m|kx$uI3o$evDeqi3DJ87Q7Y-eE)3wq{zhf!<A+?I^j
z`a&udO-TG;NP>^G@O{L+rDeA4DO4*XH)O%J5-%J+AcGr~^PCLgH+Ky?(OEswRw5H1
z{zd?Ql6sw#v@$ZRaTVkdZYOCnW3>EIAU9Co=se)k<$eKHR7mrDjXo({otFi8&XFNP
zB#P>Knl;)Gd`Nd&OSfn01s%Tjz|}Dw6zsQisbgV`-D#;GzUA=oQe`8aFTFsYIoYFE
z3L`#L9;w1ZYH{mKsFln)+mAX&Crrw3lB>|N{32?YLr@s9CYUe|{8(**pZHy;cBQZu
zlA&+0%;fF94_6dqTUjxP(It3-L=yfM0WtOKD>i25pQq8?Yle>&aA*E!)6G9}eE*f&
z0qE1K_=o9+g5nR-Y(M@5Ce*0WAVdiEs0gy?ckq|j$Lu1=Cs#KB<+nn0S*lnS;JQJL
z$0~XIt3t!&uL_MUy=<euD>M|V`^|-a_$2~kE}wk5^JAYY`1>Pp_YpaRFz$2rGXWNa
z-zJNj`!a??5J0>p!w>cUJYpefdn0YONZ(k?AxMjbaTNxY?@lYPv-SSNb(2BPnkBFl
zf#4qoq!Vz>RdFdV+t(n|muX5<Lo(J-R5^SsrT7h6!dKvK|BvQY>uwpkhJSeZmTPR;
zsp|GxDjzzuc|hw9TVi5QR(z$@Nn7ihk>$4SLj5id%LQij?3N-`3dgu}*PQU(N^$9-
z^o*0-&p7(h%Uyvo?`oPf+&L2Rej%3#kI}Mx9If}+h5T$?MGtK<NYS5b9{%XOzgdn*
zXjjs9@tNhBmuy_-EvF+gcilT49MUVOu}EEMN{gpx%X4h^eghYowPiiG`q&ZOvH64_
znuCee9%Y&x{Yjc&)(E7zwWth5e{(3MZZ5`O=f)4^;&O9m%*4MUTpHbP^Na{}?cF)D
zaXoXFtUavQC+K|rZgONue9fkS3JRl7A!@`N1hQ<~^;5cFh1F75!7Fc(S8LwIq~HSI
z3$kTrT$>{E!1R5S6$uCGT;aO!>whXVWW_+*hv8P^6tNQGx~<h$+|*I==RrT^#XsEx
z{qNWc#Jy1MtEoh0%;YDHC?>KBq?Q=fWSm*L2WjSNZE#>OUu-5WPGjDwtP9Pz8P_aw
zY>~vN4(KEDqHZ9NI)!eJ@B<fTIv6kIb6r|b9Cte@*_s5E)-%i=nUS^Due!Y3#HtDQ
zUZ(Ml^?DAWtgp}e7^JsPVHJpAMXhj@FhjM)x?8N-!Y18`wRqk*6CgYD3;UHUa%OmH
z&X_kxG)^(E@8<V1L~@kO?%#_1=u=;!Yfd}yze~?mA{T_&sqYIDlwP_Ye_T9h$Kk;?
zdUE793&s$wL6Lfe7HqYqYJyRFsa5>6X2-k`sGK<#e%hqwR7+^s4x7HxC=2LEUK?!b
zeB#x!g}6D#e7YkC5Vt?L|5bVHFlxpk1_by1suuqDsgb`{bbv3b|F{rHX+>#V1qt%X
zHT0T^9ZNTi5@F<`5OE79Khe+i{p!3_DOb3)Q2u@0`xTB#HvB%}nu7Gaua}ASHS><k
zgeJ->7Xk{x*j|y-YeQF0F%B&54Z3@qy_~CZ<dTm9jP-Sh_qpaLFqgA;-%W)c2<ru(
zp&Cy)4+>i^(r)r0y#LCtm}2kT{Oo^_89y^T(mVX2T{Ag3*i^z~reba+Zd{9%Ub6_x
zC;hz<=z34Wf2@cro5D9&jOuWJ5?+a^`1t$4`m!uz@h4S4@Y`faWH=_8V<M0=D<!9?
z!}Js`;(968#E_@tesM?^eCn*NIDJW>#`OWcP25X}-GHeLY?L=c1F!b7o1Ts+dI9bB
zcNrj_&6apUqZXKEkHOZ_PyM$-jX(RoZk)rT_>}BpAxSZC!id15;)v#`oA)P*4Cz!x
zu`{)QW|TU0DZTf97Dp3<uB=Vw-p1;=c<S2Os-|B;k;<JUV_+*oK>ClWrHlgSXcyGD
zm-F;aBxXo)u&Z0k8EOqDi)150`;*%&iM4mdH+f~>Mg<cSTT~qFjsN(iTJjEs0uM5t
z5I2#Tcj?h#@Vpt2(v^zc^+sxX_Y0@zC4g3v1r;+MvQu$xCc%2L)a4czwEu+@t8=J8
zUGrd4Iu~~W2S>adocnkedW*|J{v&M2B&`PYM=OomsbjUswo;@2&%qVX6gIsl3O?Bm
zV!5Fy4)MJouK^f)We2U;m^<QO63uSYpKx2^MHn_Ti-a6z&FcND-c;C?59r`;Eb4Nl
zOFw<W-}-nO=~Dxh$5O}qV`!0e9Iq|!Ouemn{2~Ld4#p=(fK%$A#nb%$$OXYmpU~+I
ze{;8JX;tcN^pu4cNd3nAJL@cMPri@FwNj?rz$wJs&8{rTe?Zg9s+>$x4*x+{iO!^T
zx_|+zArR##&zucB_|-MfV+CZ#ik=7K`q2N_h)1eLPzXaH#0-e7Y2`vprgu_dE@_03
zQPNg>@z%3Wl{D<5GPv91whFf?O{N@~G%y~n=iF~pU|C##W30tgAei0ZT?4gQMfbHh
z(&6oZ#P${iOwz-rmRwG6YY@=Er?gnguri?pb??)Wop1nRc1PfHwb>uLzfp}Fl+4!P
z;fw6&hX?K9vUk%yF6DqLWF=i%4lM8S%9n{ziBKC!+eNV)^>}ig|0%Aqa}W>JYvG9y
zZY9G>-Xv}d<`*AesBCtiD2>Chk1=^R>yR_^0P-3O=1@apR#CG#RZwwz3%rXTi9|Ft
zaK}r~6o83ty4shuaz<$ry_+-CZvfqlC6biD{xPiS?3MQ#hP-j;Rv@?Dfuus*p%rON
zw|pSM^D3#GPR9lRyr!D#fKA@uAm|rE1S~_a>k&d1{~N>3g|)^J%)hFo0Ya-c2cvb$
zZ8suMlsX5Sm%9zBz&KPG%BmV}=B<jL?pbu(C_^XC5jS(uK~lIWyi5TP9q~>>P6veI
zF?>yqDTC<e?%snif9EwqkZg{LfQ;*20bTi*t9ZLy$`m6qGygvGyV7Hn$QqUXLE5}(
zKB2SFba{1KZysafkMobOc#rg%Hcjext$Gc}plScQAxcJQY?Is9SyjFkf*GCeZ${X&
zW-fK+<aE02wr8~Je|D#hi@-IC>-Qan5*9b0G{BoqdTNB+f3dY$?rS1?VsCXl+s14X
zw6?G$FB_lxVjP)QJ->#M*7B(1?S_dyV<xISv6>U)j?ZMio}RS+-ejIZU4J<tJnX$j
zmfidM`u(qVDWP7`|2jDRw_WQ0J%j%j4Z#F(23Klge0S>EKU$>g^4|q_zYeBAz48}S
zH|X_sHXAs#S5sT5*cSSFxkF{3%KV6XTl_{J|H)Kze|?K+Y?0aIg)<Y8Jr!hY+o5WJ
zn0&%3dCaM|8?z78=jSB2-*$U)7wkGsXi8mbXYE8I5!K>_Doa~S0>S@wq)ylb(Wpk+
za<*PdCa$MX!4!`(KXT)Q`s6l^ea3-Qob6G<X3WlP;JKHp9UGIm)j6?D9bvpcz>^>^
z##5m^={54e*H+36JS--c;o4O$4aK$3uqTeht(0~1A~Uw*!jk2o1b@H3j0Wm?#++Lf
z+RiAk*dqh6z{6u<qS#OWNuuR#<St0tg%af0psRFbL?b4|t2apH2}+=}hOQl&mcQ=A
z2;`gfDgx%N!YH@;W6*cUfU63rlq4yp6uiC(ZLiG;+d1!OtqW?BJj1_mg+YjHX~^X;
z7yeTQGmpTu%*mt;*MWI1Oc_1tn<YAz{w*E_^zMpl8GLcf#&~!lUyqxm;5W%gVngk9
zti&Yveh9*)+vd$s0i>+$F5y#A+b-Go$@w8-0AFY`O2>_Tf~<bQKRN3y#8*Fat8Ndo
zo{%U!5FL@l#Q)b>$8*fc-6_-9b4c<=HHKbm@_lyzqN)5FdbC?x%wV&%xNSrF4B{${
z!2#-#N@Y;0S#f2S2SOysfJCprqjeWrP#*iI3H!nWUDM@nYYXJ1x}I7k+LD;L%>=QX
zfl6J{vePtg6LC|HNaEB8(!r@wI!x^5F6wf(5xUvyHAgv#NP?&Um&s*wSr=kS$!mW}
zLeK8fM!KVs-H4r&G;!U2IG#Wk*aYT4@ga5pSjX5kiJ9F13eO&DDc;pB&%^jIKe<`g
z31s|y<lj`L(NI#EI_+k4fruX@@vlj1)M*!RXeNY*Sw-D2_2qp|S2`hSjcUAQ&qv!Z
z$SmLcEAljb(oPDW_-xj4nF<IR8_)Dw0aYsPayvhv+cM%Z%~dIUr&%qg<BKu$<5;S?
zkq~qQ5?c2v%_H&e1dLOr4Y)Yofx|VR8ncpda(H|)A#zekL3}|Bn111&mSdCo^63_k
zWM|MrbQs<(qov5*^ndeWa=@oI&XmC8^QCHHdVX0W*|EKq47WkRN9c7wv?k<IEw<0y
z-D8~*VF+OeTamz7ZM@2~6ShFl37dhYZwxui1qJCuGZZNhq(aPFtv+CAs8eR@dl%bh
zQ`H5n7Im*u;y`$>I|k2X8x~;%Z)H{QMYw0>XL2S5AG@$J@qRQ>wv9LKMDlxSa*rZ=
z`^^afTuD!}GaQLJ0gN45^7D?_?e&k+76^{=XhhbZ7_!Jg8`~XumXmzzBeEkcVR+pk
zq{2w5fbAku0@JfW-)6Xc3g8c|hCjRcE+p2)?jz3hVi+eY$rVNRhIq^()k+F5k<Ej(
zQaXF<_0;Za4fq~GJrmLPw3e6&Kcypcu~F4(_~LakA8yde{@8Nz(UsJ#bFcDy&Adck
z(IUJ`HGrima&H^|W=Jr-N(*>Sw~nF?FcEX0W4bdDYSL7td$`ze4VdqYEw>IhcPt!m
zxTaJ-+sq9c+wc>}tKkfI?;PTYg}2rHjZ;;AniNb%syo{QgBJgNY0CD|s=SoAA^<0x
z=b{MW0)7H6Eb)vE$%~&WK3x%m!gf2PHg-geJBn(PI}Z`KlV#R7h&JYmT8OMN5*7<~
z=en?<JBE=^9`}s&axN*utl`Bqaw@w_o$_R)ch=8MykYojr{G`NXO|4``lEmkQXIfD
z_}_0A0E|+=5zPMIMKqNs8Y(!^{>p*0+TQ*Ugm8<G_eUO(MsgtE1x^S9LAg2KaO&*r
zsO(f~rg%$fZd6;2Bg_M>mjvJy@q&klxS?)a?;ypYg<Oiy^HpH_pumPlsCWDJKWVQy
zl#D>YKJ|gX<XFS8Org17`GxgkrzymDp;D3i5lEr@##zEbp`Eq`OMWu6LCrX5xHk<n
zDh05?_g@hCiHIBsPrb=d|FEyKk417`jD9@Q2&?Js)5{T%J+Fc%I4P+~RQiFMJoyV3
z?`yOajV;rjDGt_*<0V<@lSb!S3+G4ZM=ue7m2xCZZ$@cja_<*-ugu2VIjse%+wu{0
z3YaR|vsi%sSy-tD(J9W$Gm95kU#Q?vpW7zL)`^d|ad#`k&hfHVx-KeYS_w>{<;6je
zK-1tkJ6I+C_E}L6*G-E~?o8!E+?FVgs@hm^hvsBi3+q1rlr8EKgIp!bnoWv6wkJso
zVQL8qx|gOZ<+*gX7FR%k#v{UZ+fK|Ftz9Z^RfFyL{Q(=^9s7y$_D1kVVtUlRnn#uO
zIfoT~u6ZLRw}YD(k`+jehbJsMp&l;-KkV^#*&b@1`?gLkr-}ZGi1Yd;dA`-bX7@6m
zh`!g(OoPYLuk97b8J3qb1FP}0aO<keqQQ^n2Qp39-)vNBq8F*k1>cr~OlFSxrf?Y$
zDiplkvr_OxkE+jyzK6dtrqxg7yEhLo5o~f}Ic{`YbIqw{+Gu493K0XDs$|2eW|OqM
z>6#I>A(5~84{63{izSFew?96y?F?Fci?Qc+LbH`665}%P72X5K%7?+}u^Hmj&oR3{
z7Qrv9pJ^ufj<)G{WO#gz2IL9^z0cnYhGcYX12whs@|rh99oY+g2dPIIzJKiw^m#9<
zy{t{l9J9g}XhUt`*6C2fI>y)t12pjUqTII>5Z5nSk%m`>Nlz8X+@6>gHlm;6E7pxV
zQC_0)Eno__g&K}GA_hyt@C(b_Fl$=$@<5yxb4IqTOUYI~eY&y&iSf1`h5GV!tt4Ao
zX5?t!*mc_@t4dj84YnyeNvCP2$7f-}M^?0c&0th=aH-}s@sUDkHTZr|uA_o*Dc-h~
ze|q-pYM)vB=Mof<nDpLb0lIeTl%~zEGB850Ta@DbhWQ3{@(`?m#zqV>Y?oK+F0Hki
zE^TKNvLt^3JRKzbXB7ebG|Nyz*~p{k>F)mD@my35rdt$3I~kIcLXGQ*GMBlzxL)np
zX@i%ZC=E;BayEjf%P}SnZ;ic&akM#|T2tR4cpNFz%)U<KuhQlXAV1VTeE&sC_Lu~9
z`vEvB^!}q!2e9z5wF6W-|Htp;zv!j^e*?~Uu;5|Zj#G$E<R)<XT?Awg7)ndfUf-^#
ztfjyEsg%!Ls2?64kpG4(>=w$)7y=P~asCBa2=*QXT499D7L5060->Kg_fkkpofZX9
z&q2U=PoOx*jqazggm?FI$aK)4Tz?w*L%pawA`$2ij>hUmy<O9bv0&p198WW(#(CvY
z?NPK3LfF;`M1X-&8VcaM2a{kZb@C+a=XCfRKw%4d#3BOu*e_!f;(}yqdy<0K;ng18
z^gyM^{rWl4Yc|s8daO-;3w!RW3jVrJX?Jhr;d4g=cBPvF!BIrRr%CT34NXn3edZ_t
zds(6SU3mn+Snw%y(x~k6q*oHPBC_Dk4(jqN6r{<;(Gws`Ah;LxjuU(wzcy`#3lZ~6
zzu@Xhn&pw}itNeKZI5M`Z1`nUm~7aIWxX?e02HL;dUZ&q(_dGcWe@QxWF5?@9R3E_
z^DJsNI|bDmR_$L=)kGY~wcl&xYa0)%>o^WdOHV~=HG1!wsEIy#Au8?}qi2OVw}-t@
z3DPLjPWRl`5cF$XWc2E2rDf1|lz2+LN+nZ5CwevK9vf*>gqU8*=rFq0@PL&Ab3za~
zh>y%aKZX?)wuLeNI*!H9Ibu)Dn&SR(n2mPx<8aKek}U(2O&X|jSC}&jKOHE^T9tLK
zA?to1%p9ck=dD&(rt{JR-VZH-`gE4T7r5vby96<Re<zZ-h^Yg_>;6YbVLxt8VI(Js
z@c!@bJGg5fUL-$&I!yv8)~bttz@%%@4-31wx_G3O3!hQ{R$QNWIY5F-^IvCBX`JLl
z)H>@|GT|8}`fjB|D)h{$IJN42&!zFUuPvd@*Npp>lQ8wmqTM*#voamSC}Yd#E)@x7
z{{5bhqKBahw$z-&(Mq&=nOSo_k*Thk(9@ViYbO!K3-v+|9Xch@`nk~dOjRaSOtdR{
z-XC@seQWES?V?jl;&6d#>aod}5_87+{!$sSDp}8oY}<%X)?8Yp%}c|<9f7-S+{Y>l
zghP{w@51gxPH9Oj`ijLy41;jnTdySFPfYVjO_va{aQ~9P<a&%fujXJa6U}kSwg+i!
z&<R*aL#v5<rw6I<)zp7*XW+WCkN))w_T^vZ6~#~Nz#K5If0=v!{et#?xTgPkU?pe%
z|5A-jAZE%5TO7?ku`Gp6Xc*>EBFe$qUf-RKZnwlnE|szJBI<{e8Mpjc*%LxpH=hMY
zw%v1q5dk<RS>tcApdJZ9W5GmUw$OO#Y9EEvb=-h>XFm`WXD~vNm=T&{BvKvHgU~b<
zssImJdIX`2c+o^GVlCDM#{M~O;60(tH(xTO!koI=JZLyZBoKU=1*WZFSSPR0i9Kv7
z2T~bmgc9BrSP=Ir55C9A@86ZbsG)%3Wx~mCf;RF$DvC5GBwZ$l9PTkj3<NFP8mj0X
z?Uikj-J!jF(<0UO*r-2+HdW9usz1gW<BXG<>B0y0rU()2@)EXK56F>~<T7)Vwrw9z
zYPNc&-ltMeH~t*(vcB`ATcuv&VtOF2ZW>U~U3)MNYL;O)Rm?ata?ou$B`H8_|0pit
zu`=$EsLhrl_p-HBI9_S7zXXl%j*hHw4#Cu_Ged!uspAt{S(b@@KH#s-tMF(L5?D{b
zGu@bHt|-W+Hj?1YrqqNRWB2`ed%s#WQR*8(lbYd0LAWV9w`wu&Vb@sK@>x1idZ!u^
zbuuwVQ;s5pD-dVqfjT|pbxt9@_@K1GvzqoRluE`kl10Nc-x8CaCNNtN$Ufu6UYh93
zXbt{|HE{MTlI2Zp6Mn>C6YS|X)KQnd<+Az)iZP?xK)1Mav|zGG+{(uSZQZgCdaRog
zOF6^vGmF!5JJ>SA3fU`%y+3jMyKg-u8CaA00>t~nmOttopjLn>M=?%NRwPELbgEbm
zw!O#5Naj|X<qJNB{R0<AkeJ7AsQ4W%b)1b?^|0Og*JBZW#~$<JaZC(9LMihg_S2OK
zFnqL}7-lzfv%t>rUGZIM^`+^=;_p4A*`zwI4b2KoFN-0?DOsG3E7)cM<}CxP(;vkr
zQu}wmaV~~hXctCozC(0P*I3W2%iU{>Dr`ymutz3-rzx$<sSb5`gCc~B=bF15;pyHk
zzrr0mQl%L8(F$zn%L&ZQUv-+>L-&>Fs(f~#cn&uUnm?0GQEQbCf)+oST&XIuFQlo?
z1DBBAoMHD`MfNyPS!4Ap$rri93ytA1Hf;9mvU7`X0FGSt#Yq?Aw+TrF*H9cjHxh6U
z_0ZVQ?<ZUa$(buwr|_&7u!eb_-Q1XbUk<;@|5BUy7o7x{yC@SD@Ia3P=+xi-tp&*1
z#K4puAd;vkLj!^SFV-KMl=g;738e2nJ^L?_m={pdO!=o`w1(oexj?{%$V9F^zE|2_
z<FbWvCdQ(lA8#xu%F1_f=MjF^YChro?}dZU0(%UuYAT%J6{L~eNcfaB!3(g&ePlXa
zD8DYuUmkySnZLulFfU{*bkCiZwmrdZbhUV+WN9mjb-Eq*s6uk)l{3pMm)6=|*&e*S
z+edSEGCsV(w<zULkwt7khXTV%{d)F|geI9xB8$};^lm<@4|5r>wDWc<9^vUCZrf0+
zdy&0=Y{ZDC!ulYyKEt1LI>P*9ouPLfTA8z!lfs?Mp~TG4%kXu5ZNt#G4HGq699^xl
zxz=(`dw;9&U1_E)D=DX6TLM8l=AG}m=I9~}^;CALQ`%bS3IG^iAYuaPTh^A~Y`D{f
z)vQ5IGKt6B?RH;&n2|yl%z#6m1%c@>SOOEN+0^D9$u32WM4u65yANL}iKmE)Cl7s&
zSVz$Id0FCNw-~+L)*rEjWTfa~rrI=H*!IRLw?$GZBsWgXR8qc?0KdADAm4S#&7IUE
z&fL%Mw;$&~g&;pR4O5aty@WO{5HK3K*(hzVwSP>!_0c_*Z;hMsLBt4nCE=P&i6wrS
zv|q_x9~zm}#S$9@R9uuIxkG&I!S-V<PE+VCBX>y+ZvowB`DCN-(iRKl7SXAlIfXly
zp`K8@>XV#jC0!q98qgg*ELp8<YPdSg=B1tTh6h&Uz&4L@hp!+$nOXvSh+%_zU-la5
z_2FqHIB#gZj>jLOJ2)mw=W`oFj9zfVSAWmO-t?pNe*BaAD^Q1-py=17OFDe3=S<*m
zQA<w<DwqkJXn-q!H9uc$71*?UR(V30<p9EpsiNVNg2WB2-ktIBV2|g<3MU+-Aq34C
zOgCKK<{9kGJpZqKq6Q3gh$Vf)1K4Z)#h7GCb3eOWR>tc@;fsZJAI}(_^OIoMZDMlh
zX;mAw4)&uY6|aMKw*gJjPiw6H3%t)iiiftF>z3sA3^8eI47a&=c*j4SFIgN*V}!h@
zBG@Ncs2TLw6zs}oDWPrK1{=<+39JInhr?a6!8C+Yz`EE@+M=6(t;zisfm>dHbx<?Z
zRMmUQt0EoL4M&v2&Nwfnn?|4>pSISpL-KOcigZ&(S$I~i(+_o%7hkgFkwkxVxw&$F
zN2v@)?daJOl|$}mW&8McmjlyfwA~tMBJOU|<K%2uR7Mt3V}h*!)%ae8$DK%?t{A9`
zjJ|DZS0=~9>@7KpystY$MRt=#d=mt^@qt0ND#@&C9?`*3GIh7E>B<ggBHTi|l(o&H
z$9`P&Ea!Zo{Q9C*>=E}^2qf=W9oWXPjQs`%onD|T#Of}wo`49$O_K5~nro&>Q=7cC
z^THW$Ek~vuT8MPl*dB5V*WSL&Xs?0Z1;x2+dVl$+rZ=+@h6{7>_r9D)avE*Ma_Dly
za!2^~CSqS5%9yLgb5D^^B;$&;a0&1Jp{YA|Y0Ox<=SN+-!(AZx;)+rI9L_v=l&hBX
z6S)tpP%cn+iax1oTS&Rv(c3G0DA@C2XD)nc)}Q{kMUWc=2Cl*GYmspp89pDDLIDh$
z0(ma0qIC_psea{i0+U#@Ok<aX2eqIwwZ~#u*+qmlW|2PsjMx1L!a}c_m$39@+_@N4
z{I*H6@oJc?Tl6B9z2JMg$d8MJAVi$vm!&hpl%jhAq-JyIAB)MsRz$Y8FljtT0$=*Q
z%^<QbU+2gFa?G;d90HQj|KNE3`}dNqk&yw@KT$mYm$TL+r5WWS9O1i@-|%sbmMIK7
z<6!#Q^dxTy_QFbUdlr8PHF!m#?L(eG@BViUwy$~}He;XLytMRpn@?ak6?8=LBlQ5b
zc2o6@pGg_0$LiwA>dOc1Y7Xo%D~&Ou4R?0a$j@yn(6Y*<I;r3MIX9S&t@>-1`Ar7#
zHoMYolpx6*vm|3(XDE1Ns58kDPLjK4!foe=TH^qv&C~mgKrwW@58e`mN;dQoRh_Oh
z%$;;2X4M>-lRG~o>0!U`{87sc9sRtL+14#&`%z`TkM7^Tij;birN9K6wI~a&lHE4r
z?9l>fFw!_%UhdxKefa;_d&e%p)-78%Y}>YNXV`XzZQIOHhHcv!wr$(C9eE>b*J<tU
zb!xBL_3eD9|1igV2YP?{%2MTSnLDd?%3_~a<-+GBD8LD0oldC=Ons(RFJvK7(ug2T
zs-*;b$#4Opu&eOL{a8u7-f=iL_2eXg{brxZDtfo4i<4Tazppfqto4#Up$oKq;%c_q
z+bZ}|tXwH&z2#;c`*%OHy=rHb(?|U*aU<LA37_IBZSO`#jwIBVL$Nk_rA~}Yl0Yix
zPhpfaI;ob6ylvr=kGw1P5K@TCVvAQBKzEa}LvB<$_)@dGu$<exiK*7>I0gL91oPfD
zyirJRPNl3Kw-K*L!2L9@hETC?Lj;KP%ZbtwR9Vcl02OU+N?-*;CGHW^<~PBYx>O$(
z5GAc8to9OF>k#XaZYhc%?-<(K-Bcx7EJo}1?1{#*+q3hfa7=TT!Zpp3N6Ei7jPzal
zf2pb7*xXzQGT)VUUc%5a3hd0uLR~1WY$l+{2KW)baonPG_@C8oUH-h6MnkCNnZ9X`
zUP@BFn7#GNc^2GX1k*z?I^xy6P%XeKWgc6TXdiVDn#~UumX8id%`efib=J||gP8w*
zZ?-(ySQhuj5C}XCinq?k*l-J>vfRvFc}v}Owi>CIxedXPrE0^CSn=)wZmiEj%g6?U
zmQB5s9>U@Tu%Y*cCB3E0TbbTXJSrEMSoY1Z$g~NDy?$=VgHUu%bak$+L}wMqp3&A=
zit7~n+OJflK#J~T=&%Ez3%28>w~SPF{$*=))|1XHlb!ou{1*yeO#Ka-sU%b^OT`ip
zkzbSMIbP<am=%mzny+FnmiwnPL$bJ?w?~WMP#j7nnnhVBx*{iR3o!NgfIWr6MT!7q
zSf`6&=1&mw`W}eYY|Ox*E!CktuLkKDQ>ALo;%n;$A2fDxcJCvZ71=MJ*u@QC7-D9l
zR`HYW==(2nJk5TrM<{l0sY#!c?X`i#dkf=V1adz~RfB=kA94D5&dh_reBy?-SCek0
zkUiPyPvQz9z6n@d&5gtha=pMZp_}x%l;p}t08tBO-Fdo=Lw}PO2E<vyb+PN+VN<=X
zC2!_!i!IJC*e@VIF8cjCeZF4gY4Zv-F-g{agNw|^JysETgeB1J=-HAa3A^&P%K_Vu
zgAf`3n#9)zx&<{WL?5LYh04UzWe~Rh?49qCt9C2|k8lX+JIVCKgc72$Q@HU|46E+s
zK@i^RSzGJ~lBHOqR3y$MAg2xs?9&rL_K4TI9keMdAZs|fmfA2oJHhqVL%F+F=2&%l
z+Li&0#NEMy4c;jsjAkv3m+*7SQQ$;)lh-_lcRLBt0?j>i;XLBXr<m$-If6?)cfKHy
zZS`%JB`}_m^vxr_EY6=gKZ85<DGZYMnQ{9y+L>H~;3*nNp<3;!qpKdzC%>d`h!JG3
zin9BdoSi5nNbl4z33DuiI42*0%h(T)JUEFl|0fE)!(5W&ub2e?!QY^tW4JRYpZpP@
zf0<Z2c5*k=z9v@7uZi{VnM8jeD1Xru|BGMn7n5l6KXyzgzc;;hh#+X%PQb9t6Vm;-
z>DLjJ6GXFo-c3wcN0b#yCCeO6Nt_*gd^!PZMcVll5JC|}ePM8f`$@olTwh&><_8gc
z;mC(=N%cSiZqs3}^;Y=G8XKL+1h%8e1PBTM^-9L4d!7)1mab_|fW&IRO92&8^uvhW
zS40G^r$w$?3BN(7nkO(~DTv0>yG78G>e`(~k6-@=+(od9`8`HJ0`rnukNdMAjSlac
zF^EsVIP3|)`{+~8%M&7F?%^j0!lWZ(^jxB)6I1jz_b>cO%b{ZS7yhKl9r>(WK=mPq
zj!aeHANZ4>CB;0|T9WHE`-_Wh!Dj=ii1O)w@Fx=*r!IYI=)MZS;Ns}|Nhz+7!y8Tu
zYagVLGCDd(@hFG44*IN~gU;@YPr3$A5`ua{Sx<7?s0ZE$eKy^_J?yU=v6^B-j}Qlk
z-g$=GiF@}qT}FWJJErY5@(^r=0BRyAAEiQ}3D>rFNGl*8_zH!IY1G_V*_UP^=o?Io
zJHFz``B_f(?7`75%~Vd6TKVE`F^CaW${k5$CYW`wXrs>?oWBoS9H%80L<H=|Jl~rw
zW|I!DDix+yl{$u;xf^;h0`vi7wExshSm~mN3c?M-Wc$va)1En++4>W;g#>k7?I5hF
zfv#A-o`Yaet@k~$7nvc9ii@1KOTxBY?ki*2MIm}1y7NW|D&?UqBGvX!#xhHYMo9Bj
zAso<PBonb#lD9AZnl9V#g`l@;G6Fw`g@>_pezSo53ZP3&%CgMG-Zlc6Q_+z2?Yh?M
z`Zhj_ITtSpwO`SVlVo1%>E1{#p^E3YN9+66H8vNC0}UPSOBkfbbbG`eVM;WtkI=sB
z5L=sve0%1&;v!d_iY+IPl>t{*)wc^i`MzQKtUFm7L)qkbxKJ3A)~7~?k7mNgtfr66
zYWc;y8$aH!m)eAu3tMQVJ66q_z^6@q1TJ4S=iktd*w<8#?iLWakmrVwm;49*WU;@J
zfd+|Yn0+E`?F)ZmPg`yAg+GDBmp%|`-Z=B7Pre<cXf)xorE7Gi(zMe_oW|G<f)hE#
z_`;u*leJs@d@#8rY|ub`LhWSBu*CerpD;Ie2N>Jc^kIB~PeA{GPlo@}I$dGI>`Q+Y
z?!S|ePW@jbr2mUs{{Ji?T}*bev`n|F6RcJwqYH@s9ys!osRkV(9)qBpe?%9Ew11hP
z51?fVfE=Nwda2vL!d-b{VYUUtpF0HrFx$hAI4LLojOgCFdAOAX;atGN4+B)a2trO4
z00oO>c4wa4j0_nTN%r^tvJ=F*^F8iA3;}^4AdSPYoe*BVvFTQ>AF0Y$<A8J_)1W^X
zy+HUOHa4FJ5v=Ckf0As=DRIJHX_q)N!SZrX%s2gE@y4Ssx{BbQLd&fjZ#H<{Apsrb
zj0PfGCwtI@w>H38;%%gz>7%t8*C)xx!yp7KSaa)QCobiuR5qZ+Ee^rdykQ4xvRZht
zj?O-o(8r0vgrj?=G+;nhezI)XyA{V?dAs3eufDZr=q%G}7Dv?6ZmRUr*<G`AUu$c7
zh^*7;JK3(9fxRkN1e0hYA4LIdr?#9Qq9rTl?fN9B265q&`9l7`YY1rgKZXF}|H=?R
z`5+F>x#k%P<bgIO$vwKqj51V$2(j?R;&rQw;QPLcOFyN2QqV$m>D`5m{#}!#uH)%f
z%#8qUKzTxfb=B7C6a)(*t_q-0bS!~#+3Xr&97|29$&r|D)-3$As}F1Zo^~IRl1UxT
zGFPhS*2{9;*PT_r|EW9&v-swawCcMt(>LK_H0p$&N2DyIddg+5BTTrqHZHJYA^xt5
zgnB}@fnxo{Mj@4*100fH)8?J+`!gnmBiVfz-_xcZn7mvosr3zl8a4f)8jP8?=u6MH
z=w|Dul=ohim$PabuQ(*;!8`e!ZDzqLPuzcG{WNv2=F}}_m)WG7ozD^p_O*2b$Mh5m
zkvTSjsM-2L^XdX}AOGeb-1=uBa#}x~5XD!){-Klnedg64>EnM@vj6hAmH87u`v*?4
zx&FheK0_Z&xDy9Mei^Wr;1m!P^!;JUF|Nst{>o)mf?TCkwwUYT?Wvfc(dsuk?A{N9
z`>}4q2AMSg6yLxu&Z$P&C@e6J4U7~kh~;9+Yr?km^s$v$ay%fW6afEW=$;_;a3moF
zpyCn)r>y!~cwS%}#DRd&>vJUn_xoOOiR8Q{UQd?HcKpZ*K+@aXk0ykt=-KEP>u+rz
zS1wjS2pE25+t}<Wcd3jqWhloaOU-b_iXy)r9-&Ruw_)ww(TdlkJezYA<lN2lv@YN`
zMOj@%j?Ob)5(20peuk>X)E7oIx8A1Ze;aD~{@$3sqb4-->2%P>hs<P8JtZS2d#Y0n
z)DjcW%`N7+=i(CjA>L1~`nGNq2?-}PFyxYotW&GalBS_PL7!{!>sNwtoGzGp->g@>
zN~Ew0bn*|dfXe0v4dV>-CVj`tD~SY3C=8HQwfg<(OuNiCGblg(!;*Bhh&waFjq*c;
zh#QcKHqDZrDuit9tO%faHaW3cml3`bl+=s)+tE6Gx8h_tSXEDfr`jyDxcTa+LOwkB
znTe?lNe0W>s+ODXN#O)rZeq8Ieo;SwW$SKXExUkmxklk$GGhC;@akv{N{6uH2J3w(
zq=ft9aP6kr;*0wmmVGUV6(g7J>U~=}AbxGAo})O(Z#EyF*<WZ9+(1$o*ZLg1*&M?+
z!^JDh?I=zD!w<s`qstzLYGk$cOwv=drYj`<%-3xZe^BR7tIb6B5399MV(UeYUC$d*
z3rj`*BiR`B)LMs)LK`Bx8(wW*T0_-eIuLL+nm_FTc2e+w#vdmZY3_Ma$NV^?8gZxS
zo%YF>xT-oYHJW%&T}C$~eJEZLLN-0&!1F0L#eI}tN#j4j+kOcMayQ6e_i#n~7dyGo
z<i&TM(i`Y+M_@A3Y2UYXbyjpMZZu&lqSawn^LVt$YT9dUveWxva;sRu6kJRvOhdbA
zI1o|b<zZbabfY$pJTF;$XQISvn#yQd*|zK07}GHDIlYE2w;E9H6L)bGEn7mk;T_ZT
zVbBN|#0SQk+VRi$dEY-RKLh`BIR?$Rh<1M&JTtyZ^6zCBe@->V4o-hOp637UwMJ>I
zD&S8oqPoh-CM?}FXY4Tk<QN_X=#@o`2_=BXy*{HqqPe;#n3GT=|1P28?M(|R6O`%e
zbk|=K?A$%Rb&xE;uvo9SB&f6RX9#gyD7D?)etN0m-{=Jkh)bgf5IXID#=-<72@8A<
zJ1Rh@?#0VV`W%B~SKJRpX^RfxW6~>~ieZ#0KxWLutvH6rJO%O!A>Ike!B6JE0No_U
zfRE>o6^ztHlzr5qflwpbx<m-CiyD{)4U7+f`YkX}cOC4aH}3R8vXYoEyf>K%F0dAs
zFVBn`7pKdX@VIc}m0W>Nk>962@K#AheC0}eiVum?QVRjB&(fQtJtZeI&T0TvSnYJb
z*`4}oa?0hd_eF{(ekn`DU9T2Jx`D!FV&qzgp!m9Uvf8{`kai*9W`%DQaEx}nvROrf
zx=S))t^gUY+*?+KCM#VlrFJ!mE)%|Pv+Ov@N6$*?QJ6^LntkYccDEe0LoRx(%>plP
zE6Sw=bfsurOGV*!6sroa)#nV6B)x=P^oh>*&~<|vzX0+?i92IIuQuN3pu?_qtHw2W
z{mum1G}?UWQ}a8ix7QZ_feaV&m2s=*0Lw<BBZAV9C<TLazVsYUb3;UYiQm_?Mn09X
znb7WodSznR9D-15c&92ltIr<8m>)J;ehfMntx`@a0OnA(=I%!r48q~`nNPwa@6^D6
zY-m|jxaHA<r={?xjs5i2MOaG2j-LR*%UfOXR|quGcl_zRHqe)V?o)VX$_I#f=Y0Fq
zg0QoK=~EO9!+;{q=W27O&J<BLfAHp>sc%7P+^mN+Dc5WbhCX0=mSr7bw(x82;Dz)F
z`XZN#<<*tVs+empy8v`YLs~^{k<pNGr7f12KVjLaOzh(aUk^`a#TRWB5<G5H^_t0K
zl3KHWkV0A2QPTMu&5rl#E=mu5LH0gD|G7q%AUr%|{@ot)zW^2dZ;$!EJ?8(!bo#$N
z=D*WpHh1|#`*s4kO#k+c?D|VE)&j8-V%*oO_GhK@_pjR5Hs}9-)&51n8h^cNUmfO`
zxX{(c#f?G>BSVmVLytI$s3td)kVsBM*nIme`jWe4q_RLUQALG1v7(~7+Eu^`@d+Oo
zAIJa+7~~n)2QmSnuNnq8;{(SINbqwKs+pm>Esu^iQwqVY0}|o-1kf&l`F_tGq61zw
zoDLGCEe4A~6i}5S4_QPYSB0y^VQgAj6pKNYAGLNQbA-twUa9&h<cU7k&o8Qd`@>(3
z<2I$kI=TQu5#0?#2tJ2r$kT7rv6^+07sSP(lNj=O&kgf!henwT^NsCyYN;*fmul!d
z_`zB=_;t5N^DOk1=^7g3@>1($V>szS9mQD+mKyK-nFBjCdy6Wmay_0<P5Y{&hVR`e
zWl`DU7j%mQ{KZ=!SCxmg(~ByuV+p+?Lhx~vyB>)+cLu-c={%I=79P2JH~X+kXAu3d
zZm?sZG^$CY3s#%wk%7mg*oAbJDe}@8c|u@IDyo|(u^AZ1ueiu79os8*ncXIPHcsAk
z6cuY*B^K4tc@mbNmNjBy{MLV<F}&>(PI1Q!^(@rkGVdLO2op6zDF<eOID?uNnoa7A
zCthStSxzLGbbw5MR%OhbuZD|~WscFg$4<KmUJ2L^Mqt+irTY1hct&tlaJc5g4V=nm
zSEXJj<dljWbRFHD$mSPWzI;6hL8xgjuc$tdbbVTFN(T#{)r*&69PVzJ0ZqaBORk?*
z_V;n#cp#`Ak+;O}&(W8YVy=gnVpLC`nbHgQb)(=$-`LWlDbJO8aHYbNvFmD=ww*3?
z-pJ81ehp~$iH+}?bU@2a+B3&lf4u7m*CKJ`u{;D{IPFTdpi*(&o+MV&2Z1bkbWR?u
zpx_m2-HEQgd6*6vL}ens5x=j3v>pFme1ZPwcgnq1qEheci~qMs&i^Cq<9|@CHttYu
z@p&0Rkks2nzVZza!-FUVTp;zyj0kcebhp+obsFZAXte5#@lSBxo~{N6*uvhZ@AC=z
zkCT6X#9#=66Mj;D9#RlO1hvB5YC&T7=V-SB($TD$E-V%ef<Ux?X>dU1!C?|9xjgWM
zwz0HHWVRt(2p0qcglH6ky50~V=te=B+KT@yLzG0njZ)l#xIPxRVaj&+pKS66er0~|
ze-J=GeABVGx+GVON`>Zu$px3!*aa4l+GsnIg7f$8<ck3aFsCZgZ+D0iE!xq+GsQ~z
z$+&cMAK37HQ+RbWxhYK-otT=y?g`u6&QNO}DQiiZ)I#0M^6X>$!Jr(XL<St9=hbA&
zxlMl}eF~)^umIW)a&+hiQG-Xh)khM@TTbPyDbTIl3kw$CA=ibm+m$}gkpFLE8HaN`
zNk;FQWLKMPBep-w5T_fK?&AdAOD5Y02A^Nwd4MknoV2m1`*9HgXqfwbF6{^lu)Tbt
zErm90DQ6JIRCHt}8s-BlR40D1pQ0aL$=rJJ2@GbATfD_pO*Qj~hzl>AB1szFg&&Ge
ze6zIHF|BKLozR*U7OazS@?kr>IxoIxQG^|u=Gd^`ARKk-W&kj4$|o~kgcs?o31t`v
z*?UQ7LTXv7A{L>O0EJg^KcsCKqx?g1o=Ie&FT95NLvpT9+bV$PBhj_PZmk*GRa<KY
z{31D@42&~>k(^P!NX{bbb)|uRj2+S=KMSFsVjFT^s>w2ZSpfkP%B!;Z-xW};j1L^E
z<ySN%XuY6jNn}gLnCZ$RvojtPFkSn!TJyd&*R%J`t>b(l;F1h%*OJL>Kb$QqrK>KY
zLPseC;W4wPwQz__Yd4?If}S54;V9)Sb*Vg#GKXbc%~0Q;X-2mmv8@4rE(Uoz>)K+u
zJJIMdG=ybhwZ-ElEhK36>0@_R+=%WMH*KQ#@{Q2ypEpH$cmg>GEJwHh<UW!5A?JEl
zHts@XV2Wbl7P1!V$~iia#(^3l5()ZJl&0i)vq4>Tpi(Ko#MTpU-2!k4r@1v&*ghMP
z87r4Q&NL+gO;?U|`b1ImL{#hiM5@yWHqKV;!Tb=TSrPsUrHehu=#0VOPYd1|X#5gD
z%9fK%xc%|c_wm706Y=>w^ZhT~=Hcg79`S!3gGv5YbMrNk{r_!A|6(s<tkMKme~fnS
z9)2-H9|x#pbrV}ZQc8>glak^7`p}_uNhxMpz?q+)%J1vb2Nh@VY0N1Jz_UXy^W!)8
zr$3AcqDxMVA2^v-!(4GC>7jsz9yAdE-H^qNf{G0+6`<cvlc^){?em~Lj!l0n4Z;)%
zJB($2f0Z&~0A~D*scgY=yJD6s&zdTc@`^)4vVU?PK(F44{P!)M*%7II0+L}-ykc_|
zU^=lq0b9w29+}Qk9c|FOC$J;*kmAjq4TNo57ccF#7K$G9w_El()`);_z|_Q{%LYHT
z4uc#W24i^+M|~*l=F#;}yjf{7z2qkiESVoC$gqksMI&GCsinb51N+@vTb*p*;2w)r
zpht2FuvM(i4$THg9Sb9O4Hk3uQgtigeRSVk$!x;Bq6;p!o#D;he>SHpmj7yMibI`&
z@od3MozO_vUvKqo{o*h7ZGcFTg7jdKDc#~(>QXnNCX+y>(&R6|N&AiJ0U|V?9yK;c
z4+C!)ZKX6u8|@9<lE%Kl0Z}1xD7;dfAfSlx&Ky1mJM`3&JkhAOMo?jRS&sPZSQI2g
zr}5jTVHo_Z>8Bm{AY(fZaC(O&8Sd`GM<cg>guKWs@VE+lDhCP1p9@He5VXlZklUqs
zDzt++IcEyI5j5_pN~LZ;h(JT|x7Yl2oW;iCpFjW0oNJl=l!BPF15Rw9=S=^!?V%?m
z4}vJN{b_qbYkzsfCd;fGC2>5@tgs9&#$uN2q}cOg7R3D5k`nZ|+MJ<SJMA0q75fgd
zPLpmdc>|hSb8(3LO4KP?1-_a)ehhPK;7M2PIwDd-l$(e|aYtL1%d|o1Ao{jf_tcd~
zaO0pVTec6?k~n~yRJwNs)Va_E19LFuVKGCzPuM)TM(~C>6iHu;nrw{3w@Hx~1_quy
z?6I$j{Sb^)HK5*P6%~EDDS)<gl$H4BFLBs2IQime#cO*G-3ry1kijgX;;zulS+z*G
z{g)ONdZ998672)*K%=ts0Mm(c&Zm#q#IaydPhG7?-4P<M+|yXo-V3Cg{gI`><a5>|
z9qXzkJF^&snp=3@&Zp2`44p(2*(n8yxgkxXH)&sB-c;jptbHA)IIA!wS#7TBX9DHm
z6Eo3z1c&62&|u6C6Z3dnsg}p;ydLE?D|q2$PhPF#R1^bBY^^=!&F`+z((U=6UTheq
zs0a(25Cfbd-tQ#!KuM9sd~<U)!h`baACAN0Q4M@UYue9G?g)j!OP2QtVmxF%NBz@P
z9dCE>GD~|LaPFER!+E`GFw>};B=mOY=$!SR8`%AM7Bhn;5VZ0d$+zOk5JYnV+92xk
zqtWfR*>?>0!&b#D9Zo94U4`Tpv({z^Q8BfGBv2mivBSA0x=+wxkk1kxLbh{dT{17z
zG9ymi@&loRdpwej7|p>)=eOqcyIH=wU~fcp=GWDO8FzWMm*3{Uzr#x0GkO?5b+*@E
z_x@T?v_;GEWUVH#oY)PS^g-3P@3VZp6`G5eD>CM>Qjuf!uHgbov)9jCUFs=U+V$sb
z6?W{7m`7FNWaIZ-k8j4q?aKI}5#nev=9Vv|ZsflZYlJ2NMl#MTdHR@iN}0_f)mXq}
z7+<@<6v;g!^VVTSw6dRT=L}$?v5F9~$`;P0X6Ulp?te?JB)jW5iuicEmb?5daXPES
z)@G}dQnv*aKuWe}TpWnG+&$m!uzBY?cUSB~-XCJ(mC{3^|5k&Zbo@%HP}@1W>vzcK
z7I(nN@1}^qMqbOMriuPBhyF3=|2?ty%bE0*s>}ROf8l>MJ0vz$6+obTnL`a6S$f;_
zfV_aCitRBsJ(sQ@-b~2Xv6F1%xylqjULPDYD5wYdlk%S{$UpPLX7F#&bEw1JbfAWy
zDtc5l6kVgnwHbz1^ZM)Prpz}~RBWbHiN<94eH-OnRMoE>3`T=40b20l1Izu2wun;J
zR`YBWIpP{`5YA9gv`>w_?9Du?(wl3zCS>igrV9yxb?#104*_cUBnwyjeZ0Fyj-3U9
zpFfgbcU^`|&-2@I7M@mVu>ILN60_bsK`f6W9lh5R7J`8U@QidQyi<qZP)chzu$lNn
zHM98m#Sjk{NM7Cp&^tEw1L4T20WZPIxl+gbZR~NFrk~CG*&UEX2#lSda5sjFAuk&a
zY4*mg&(ldazEAjLwzBn7i0*eVtCAaU;EKo+lll>4J@Z9_GAkj071P=0`(+A9`VrcA
zzsJG9nnFOGsCt9fvsrohJ`t6&%b!yEOJWF!Q&UGxqidbujD>qWd|NYqD2|7$O4saB
zxj9f(O6AnRm#o?d9aHjN2<N&|r*NkL=={!e+lIFEUA6sK&*GNWLwc+aWDQT)k)>9n
zn4K7wvVRu1gM+W4V^=V!8W?i|jiBGSRS0Nev6=*X)>gb|CN5A*YJ<&sGhCyoUMj3`
zDPGAENflxCV>kBh#bblW=n(*^OaA-d0g13)p*AU1hZ$E!mLOGA1kHQQdTrz!!<hJ?
zEi_k%n=#^$s^>6f=Tuqu_UZS7L6&)Um4k}qW=qpy_Cv1e(b)L)hH*V42Nv~nJmz>6
z0;`(vGp`lUqf|c#1e{v=O4q$;$xiJNxvYCAl~Jk6wGQ3g#$eojnrV}I)~Y&CapyOv
zpxqz1U_U(Z@V9FP6)@Jjwm)G;jOkc-dA?MkKtmnM-t)8{+&&TaXnW>(JGi87M}C69
z>pFwvi&O#+^t&F+#8NX5xuZHKZ{y5ZPP)wsI@y9UWPN4sIWB&~m>wDC;uYVJMdtWt
zOzEX^7L0UDT8N8~h!lB{P{yB(3OzoT93I@s)1P0kbavXHTX?vF&Wq2s8Ig0!h$_1&
zyxfOdDudmy2~1RiR%=p7D2oJdOX348!@0Ei+qU}p7mzC|^t5+xA@&Bj8%2lxz1j<-
zGL0;y71S^p;#n1d+XyVSz(cnJ?EOMzJzP2Q%9vQrg&sB2aqSJ|VA2Q${iUcC#8A@@
zUky`z5%qQ_n!z%|_xlg6LCDout0YICkm)HPVNEm`%J}D)%Qo5&fiP2srw%&#^f4}(
zi80l1<F)zI0uLm%KI;ybajke*h2uK;tKiGfUSgRaSc*<yVR;A)DR?MiaEJ>`wj2bk
z4KdBNmqo%0%1oHMJGi~*4jm7%cRJ3;$7Z9@!5-+15M!ogJ|Yd#T-Mf8L6)wmG6+I+
z#}nt>W^#Hl!z2h&EkJ*pTxZ2CLsO^GxtfmS^@6G^AUb-T$O^fe$3*u~Ks6PJcE&L;
z2-Hp)^tTH-q!v;X9m|due-mx09Sw<C*20G)fIhXBo;5y5Og3Q~&M=3=oW`2+g1Nxo
z?SYlho#FU^USYzp)?yo)nMStSu>@aM(F#l!)rQzYDvw8N;hZJuL1`I6e5;f6)ZU97
zo#Eg@eGUmxXm-tMWT2lcwYLX&o_wbqjyR>}zmGAc-r-1FC4t*)xWcRksh6JhFZ?*%
zNt=C2o+263$Ml+67IH1b+qUELHm+%#qBV=Kv8JR`3Tw2j>GB2sZ5?d}@p~)(ufgUe
z8{+5s|JEe?rHA|<-3b3rxbEebBqx`G<}xqcreFrl{d+eq5F0(ez`Ur>$MeLvMO^70
z(4Rw@qVuVjw>Qi#uf0#O4@wZmSI>@*^mW(o=O3Z>M+y)y!^ml8?1lt6--ERyupBC@
zeBw$bxF$m;K#<3`>sP!Vx<ddGu~TsR2j~wHs#XZmr;RWMCqYVfso0E=8CFU5+bHEN
ziRn$kGq7w&8208L(jVKc4;ci6n2rVhD|4w%3-F&&7QyftWSacyVURqedomnQf*|GS
zjHd%CcV>j=;e1Lc@MA{%l*ZfOL!K?R^Ol`^qq>^jC%D_bX>`B8v4T9W<Z7X0=ccl9
zL*zM0OGU_<OAum_-LrI!))vp8$^w_<yC0@rAGC<(!}RlOuK1&bZlNL2C^`0oXk@T#
zSNf)*hq3*3mwWvC3D^S{f32F!q-)&Tv%E~`bk7|~zN7mIdme3{n^~J1;H$)G5Q}Qq
zoe;qFdO}w+oNl30#9QbuvUzvr;1D;Z#D#T~afn;Zwc;%k?;(RNl06PTZH}w*jqj9$
zDVfA1`4-NQiE56~Nut!>EIa7Y>Q37ZbC2r^mPtkjO+Iwqe@#$L@T9fs;ozEvJN#MY
z96CA4wLCZy={gWf*Sg<(QE848tyK~`_lbkbp^gblok>D9bO7v^5Ufj4j{8Zt)Mc6<
z$hhw+-GVihLU+}^FE+^v0B-%BH@Hkik%y?l8sZV@Emi^tJOYy%@h{F^6I%?8{e94X
zqbn-_(A3o0YT5_a8NHDPO|BqW6x+G(!gk09Cq;CSqI;<KBks&JaI}a#>wEORb<0{U
zj2BwFJ9QpIT$anZkUz?kwLOuRPb+x(q47`7GZ`rtIoO)0T&1XDeM2cjJMUlY!H(9d
zmo{ZWl$0Z*$-3HleWw<d)z<M=n`v|548B)vn)<_wEqS%9p2;@m@5M>$;ntxRTn*ll
zsMvOg_%6w;s8EJ(At54tr3^*>ea8pZDe+w7iNbt35?lfBFdba3!YfUipDPD#PW+{&
zO~VW6x=>Z&YPG=!EsdnnVsfNcDi203Q;l@HMw_^`1=^nEjyC1oTg?h?x<xlGh8G0U
z#KUw#Y(IQr7(U&vfsM}LFxhgGiMxG%qkSg9oag*bj_(5a=Y>>Qni;RmR~Lnb4FEv=
zx1+4J<$nOj9L@gDKXRe&X*(y5@H^cryk}qDp*I&&t-sK8URx`-OnVz5BWRV%;X<aa
zf91h_=@)O>l@Ifo*f|em@a8vlNvo^L$vgJF6>mFyJYBn+=U$ck(ZEq)j+h<i{!n6A
z)@r!Q%tNK;!03j^Z3evPeX*V$bWEmPWxb(r5sNLkA#5frK3jqaSp+}*Tml2}+t`<=
zgr;f4t{<#-f>P7OVAU}y)lW#h;y!v=A?nXGOw4H_$e<4LM9|Hld6>7mz0d~unBN_E
znON`@FzE)~kx0Q`XQN_vh8I?tf^D^XgkSBuu~7Gy)>r&34@IHo#RvW2(P2_zZtOsS
zS#*Y_Sp4C)QO>)%%kW$_pJ+I?h!ygH+-82<?Vs3KHZg4{0-cmEiG5ct*y8q?aev8c
zFX1^ViCtUu=4$$!n7Qh5_8>n9KFL8o>tUu0u&fs~chZ?p2KsHRT;50iO^f-r(@wKe
zrN)9cbQZrCP~{PPx^r`j#7P}>Wb-s|jgP!(uMnsm>P(ZQ@OikU+2J>(JLORF;X0;D
z<-v2VWPI@{SOBpM3rF~kG4NK!6uZD&WXh#T64i)+CE1^w^lnjfnyg|*hr{s9o9Noq
z#SM3J^$Y91ygqAMMz&~^@rfW9CQm)0Vk-Q(_H&}cWK#E$A)}=$B~_6KrN{+?rsY}4
zZdC>XhCe2}5Iz*-l8IbBI5zmRHT6O%Btp_4UY|LP^5n`I%kSYIIyy8e7`>P3YEqWq
zH-<A2km(0mWSUW&s8?z-qy`J7f|k%OgI*x3^Qib29i=;vso=h0DnJUr#k>{5Vy+MK
zf;90~;Box~VTn+sTpH6IbqlSJ+cb{_`t{Q(xbBr{v9Q@VH&c<;t$3Z#@|!a_>vQ}(
zNn1C%%zH!5jG3~X7jrvu>9Z~BvAjy6boD&nTt?7Z!1sWtv?OZK)EF$*K%EtzwRnT>
z&}%8$yN=#n>X47H@<BMxHx$r}Y)B85>Q0Vgh>VHgE_r_%nmJ^c*1!jZEw3sThsYKz
z{pF~59H&^;=<NGEu2bkBPI=H(U|k{)QKT(9*bXSwVt^b?Z$jSMhS0B2a#UR}zaic2
zl>l;NdOW8$KI~?DzfMUnk1L(i2^Cr9B2SuGN0T}Eo=c#(suJNu+`1WHwKi`4K<oFK
zc~EnmnCXMY{CPll^`7T<W_yu_zWyZXp7w|W?HW;<hC-aRDF&UWmMe7>hI1_0<%im-
zphMuF6M?|QRwm(`M_2~zi^OHDOLzMe8E>k)-TkGcYjyZ5;s!ENl9$V@_V8_3<22~#
z6h?=+AU}ohah+DV!ZkEyAm6NTOt;w$J2Mg+L~1$uYcOvWw3MP_Tu0`d@P{ZpM{)1A
zDPMb)yyDvd&T=BC%kh9BJMT3lWFlqi;Fr|x;!lL=iUr#zj8?+o2ZS`2!%z6w+;F_t
zLDpQWQ4!_IStb~^Tectov)UZO-f-EpdQBEFo#D|uQ%DU;Y!Ycxk^>@7SJWQP2pmCK
z;JJznT7uJp4Jp-OC2u87EbI^)Dp5-YuA-Z-U$=U=;WuB)Q1=qu`ci>eN<&fi5#4Nc
zX8U}rs5Vg_!zaj{t8_Mf;vnw2)!F*h`7k_66qs8`X{oH6+Z2hZqdX{X0k<zPxIuo}
z%OjE1&i)!3`0mvjA&b4~7oEC--vk>U%!XmpDbAgrsL{|^+h+VY?ka5Aoe4l5HNM(D
z8n$>eN4zaLKx5I?Ln`XhXeH4z#Kmt1JYXWctfiYO&4~uA@lMj+d6QjdvX+BWR6H{8
z?*8-k)S`B#O2_#7qlvJs@ZHy}Sd0G2^NYYZ{__%MNUJodCxy}LrHja2>bMAr+y9d6
zE!F#e!l8Y(zYDRFEYESr>*4jn{%P7AEu@zNs?gvk=VBz+aX$%1GVv-3Y-$qWD}_~H
z#_tr;Bc3|9QRGEOA19KB#=FB{6+SkJ4AoKM!R>jto#Xut&PL*hX4a%)xs~nSn~m0Z
z)Vl>~mv|7ql0}O!;_eWW4xgco=_C!k#%(aet(s2TR9q>KBnzykC`yn;{iY*=tN|8l
z3!9m-^)_Rqo)EC2<|nn&^2W(6g2(G<5nolFOSVsU%GY<=&-Ih3R#;!gSM2DkMR2aB
znGE2f5Sy?|YdG3-ldATX-+xKz8G!9l#re;r>wg~w@=pW*->h9LAYjg4!p~-qr9$E|
z_Tspiq$Z)gJ}x>Qwbknm40smZKHpzJsl~%zqA#cb_aJ|p3BBvy!Rt|k+bu$kT}O^A
zZhQrjg?)Ca4<ZVOxI0#;`kuXRFgA2E%-K%vV7DLYyL4DKS=;&fmN2<;(>vZv_PLS-
zUs~_&<7R;lm`C&Z<V{>fdz`8wR&i$cM9fdVDln^HwGH5;&??uV_FG7oLcj!y<~<eT
z$1_%oN}Osq1?okfPhs`hsO0`q=IkUGPbQVhjRbq6BjB4GGp|a0DsrpW5u}epN<g?>
z;4z${yQ&rs+Zx`tAEIj!R#gd%Tr&rM2yEFbA^}`w06%S(U5{7irCh3KEQ*~!gBhgg
zF=}8cr3od(nnu&n*<qA!y*vteFb$isL>=o!HaJ6h;=^q`>yCWGt?T<p$#%8&R$^{M
z!!Vd203hV&{<$~)Bw{(j;Rl5kq$GRbZ}EdW*iX2KO+5s$xfM-a6qed|nh|DFBx?5A
zXald)f_hgiuxZh|C$A)(`2GnH4C^cchE{B>BCPlcI?~WG?&CK3qlEzlSaYgx<izU0
z!MR*lC%^z<7Gg(sa7|VV4dAiH+4V}&q-#`w4}{sahU=N4DX>bEg!{^dFOua01wYy|
zaf;w|eW|ud-eD&q7kYacM`IK#5J6X;#E0kiaTltOAbnm1t@MbySZEUbWE_j995_aF
z0P=z9as)vwtBWYWz=_eVeyhG9SJ~OOe5j46DeeRp1yY>4ANfhZ=_+P#PUTJ`Y8(wO
zk_E*UoS`fF08=u0O)oF+3g|NEh<PzK8*N7-V(jYV{S=Ndm*<58&xknCFvFANZY9#Q
zv1GvkWCC|rQTTY^s@v{GPdC)r4(z$kSas9}9ZWyZJ%ZXEHsvU8fV-mQ3|tAZja3qj
zUK0VCT9od*Y>qJOFor|EGjh;<$LX(mVjz^Uc31(TIiWY#=tOZXpH076_J3S})hs@6
z6+Ob5vYRL{5*5%=?5I6vp3Y7jeuhr9n|n+gp)BIZ>^)HnPDW-l#9x$l#FJt7OXqUl
z29?wAjOA#`uej^2l_wNZhZ)N3Pd#_gU~PN2eGoa=URe;q5qc|6MNG*u1#sOyuUt<r
zd^ycpk9grtpKB<JR`+c8R09`HTpiSAVCAoZBF$?biAYWLL1-j0PzCTx$I*u_2R-y9
z#7|^mX~G>bV4@?dqe<f`W~_?LjfP6|tsj=V&8EHO_*M`w349ASniLwB-m~jHLA1B`
z-CCq4<{8!3L(M<NXWqI-#9_m)!-nL({!HeM6Vkjip%r9yd`HjB=o#uLEMQoL{3JFT
zW`yc%6R;kn=`h~_tGK0h7jUdm@)Oto;Q8a>+qe+`U>lrNB8M!<F4a%I5?rWX-l^j4
zbc}B|_PVg-f?$?~CBvbs{n3-2E#z%mfj5K-IqkSMR;`SelikfJz~oL~P7r5SnzEnW
zd?ZC(1H7U8R&8DJbUzrY=u86BTfBu6P}H+5yu1tf;5e7Yt6mdV>w;6&3p9=WV=IR8
z?Tm^0Pt2?)LStXHWhACNaPIICkri@iSEU1RY-$)d^dib~wl$=+RInN7H(L9qJ6NRc
z)#L9d-+7USW^9o(9>oV|AUw|mYz1x7z@7GFuOQgbZyh^nEtt10?(N$Rmylp`3KqE_
zBP0WItkvllZ1F<e!(WOT0h|HDBzl~}dB}`glk2y>!&<{^S6@Mp{r07QMgQk1A;2bf
zo9k=X|L>z<{u51XWo~Ta^lwHGSLbQ}kp!FA+UyhNjNJhN!rN{8^}_Av{>aM<cz?aw
z{NjYir^<4j6i}<2I2Cqw@_~k#w{*E71ZQmP{s38Lq5<J}(eZ(tuVb)604h`s><P&E
zWC5qEkZbBYF{=VY1X{!f2#f*K>vj$>9Ap3!Ng1P7sQCd+3B)}fCe7&XiSvVQGs0$#
z)U8f*G~VBVOMYC~)!?@Ag+KNhe-1v@Sg`y>DH8+04Wfqhc{6|YWgLWN6r@7E5rr#`
zMzS%Znx2HT?nlBCGyP=sfj2OmM=a<M^;c&p(v6zC$=b|XaRKP|jmFr8`;8zWmD#?@
zo#<NkHkqM7sqtFfUk0u+2g(}ddpo008@h>EY4kkNc;E0dqtiEi84eWHsu*&_qyst*
zku0+r6`0wd^$P?!JNIvEq#w&h>y+TBo7u_OB5D+~16_xCS7zB36ske7SbKKdItKL1
z%yW`o8gS6znhsprLju8LVs~sZIx;<hTdJ|W3xt6gY(1(xU8;D3X_Snb6S97qtk&YY
zrfIIdc2>@HX2&Uode*P(uH|F7;i%D%%wIjV)s6hzkY=MQEDIWH<YN-yT^sg{8t?T3
zTppQ;k<RgJz^+~iz+jC?Q=8uuqn$#tQqiFB9NNsfVhf*^SggV0<A?1B>-AvZx|X|U
zM+?NK3Eg)5@|rSa1N>HiBEGFn20nX*vosKB9P)MEk0yusqT0FGE&5MuLfw0P_A^V@
zw^NoWLpv@Asg135A??i;)h=gk{_M@(WZ(|5Mv<|snoe@*U>Q!elYQ3?Q1g36m87@D
zFYs9mKDjtvaW$oS(?BmQ!aKI$o@lNYFGy<8qQ9b7uoQM{h4vg!o8$yaf1|n{a}c!+
zCW&h)V~;Za;a!!J-f8A6NyejgUg?N25|};HlfmeoD5sTs%H$PMKTE$^44P>_dR)tF
z+qVChL4OPReb#kNs?kCjSQvimS78fNWcm)vUHy_HD+JH@sdcm}5p$psZQMDg<YZ+-
z1JU$z+pM&62cO|@4R1R1wj<GjmXP@cx`H*+T+ku`6nO5-$vdyY6UH3eW9c9d<eFhW
zV3A%qD+Ki4+=@Pb5eXM5iG33NTiwzBfRzdN#VZc_!z=y;1cO1*$RQjkLH13I$8Us;
z|Kr1Tjr+hXT#h*E@DH&#8D-&%SUeBlHmhq(`MLB(ELK)o<)?xd*1NstUfL4ffy)5L
zmjLTVeRlN`IBo=x1c>x?z@MRX4ckDenytPF=4tzN0}`yl*qS?47Py$eyAsdNPNT6N
zB06*@51IGEl4upp+Z5*$q;sahlP<ms4YrfW!V;#Qn_DcrcF)S6#84BRm{g4GFqV1M
zU0k-5SIvIN3{XD?E5%(%?=pUS7bX@LR?<H#1DEJZ(gw?n;jNptLLG?oH0b6FmbZ8<
zQoLquc|irC{@9IlaWQ<$ta*mlBL2v-hqhJ|>3X{A4v_gdo4*z~cM$yRq_VCUpTM3e
z`zg!=58gq|G;da}=~NL@O!AT->rG|GC8vHc4wwwNeTiM^${Kca=Z3JXnk!TRwn@<B
zJ>vmxaG3Kt_D1b#L2{oa%8rm0Mj#Me0Er;MEoWrbgp9ddVs(4EB0y-EkH1KP(?@wA
zAa6CAfzB_^lWuklO`Fwms!6wZh+66L8>52qN6ehJyE!0pyP=Ct@qXf4W8LmXEWdcL
ztKO!=!RnOw+Z#y0h7KTOiTa98$M_GSd<;c1xKHUBV_Mw&9PPW(XG?V`32BWL`Eg^(
zcf3mo1T|i?^xV#>s6%TT<72G=C+fM<Q0%8+);ZI)L8Y!W@$#i9m$2FfXJ*h^wu{Ky
zXQFU8+?0(7l1>e2mVl@Nbfs^>YR_2Fh@>cGbB2-?bBk<5hLhJoTtSN?OuV}9$EiPZ
zM3@)kv_$+RsIr1~AbIJc>(>nRG_`Zesu+sr8hk!caHIg3MU=PWdg@fKg6hLz*51{B
zNX2qH4iEBHV`Z-=x8FZ)3Wvt2zpy&+#uw}0z`k4Wj{zhwraV8T?r}bent5`Nt<s#+
z;LeKaSnoMlM!YiFP1e>jB3rXvgDFwd9#Y8Tpv!V$0%6tpZ0;LB3Y}I|`fx6KL#yf=
z3i2w%+HP-@p}pZV^(dt*LM^&r!}#q7i<Yg%`Ut{;bVS7n9IK#&Mey`-k2n>T+3Tq(
zU)8o8y}13($C|_}BIRA)9g<M7{xMT}!>`<wb?P%M8_8kH0hINFcTJ2}b+w(lWdYJM
zc{;G``|rlX_ndDPV@MlBU@jF#z(6s<{K!ibJdB87uIVsyehZ&#Ojm5Hc$7vmz6L5C
zXF9~3^7V{dba@ld?^2@=fok%#qgm4Ar_mriimGn>8%PUgy{y4Sd)7?HCXT%0^Tb})
zk(FQ|(iKM-<(%4&#u~iBAL;#~jK;O#z3Yc6diAMD*o*jp-)jWcKXd9eF7;r&GRpW|
zm1Gyrt|v>#-4mPpc`01^HhH`{oclGmyy0!dks(`A)cVNb*PmY=Ol}^NF7#ADpvpug
z++Q`31Pgq+5WKybBxRRTq&!JdO_!c)R<EWWY21mj*<2TJ(DfpJ$ea#^tK(7C6?e1U
zpC7)8teOtlHOW6NQ6to1a~|*QNP9ibZmqz=98l70FsQ2QBQ*<)Rg0JMy3$)RP;G-|
z5oTDq8(>A@g9fl9gQQB_Y*<e;B-vf9O2M40p5hqO^@in|3n?0SLo8*CuB)+?p^lZZ
zFNCUl4?ru?HU$CPeqb|?Dtiku8p+tx+j=q|s07wS$DL=5Q3~!^RJQYyq!YYm&Ahxz
z)-=O=GDaaI=I4)Qj|ToC_IQ{ZlR9kj>-CNK?IXrC@cVb(@4pCIi~F-V|By0EzP71<
zFADk+wEjDypoK41F&GNSbXK+9R6AjDT!tgUbZk5V=gArETA^)=V?^fM`4=2wPgtYj
z(}9Q80QiRfyYwgIZ-An*aMOH;if&D9W}1uXk#SJR3TjE3v%8E<ZJ9lIE8@EI`!~mz
zC2~hh)%Ea{Nmu|Wf~|396{=2ywGB|dpQ2~a*^u_9xplb=FY><}T7>M*%MqN7aRm|f
zabqQ=?kXO;MHx!J*9BSCR9PZ^_n&$!Qe-t*N;|XEFRv@h(*2Qt*kG=3FbOWtdwM0M
zLEa%l0FZii4i~j9u+=ATMHNt>@o=^nK8jNSG3fc8aM!oQ?8p|k7yB!-*eRcMA@9Ng
z2y9wsb_e>!xwfb`ky6GDig>NkCSj2nV!-HO*Sh>hnMA!84*y|a^g=dijZh^>8x39F
z$hJ)UFusGF(*P5_S}aAw9*NOj9Mk6T6D7Ld3{oY_*xb33gdX{u?X^^VaoU}2j!T<u
zj1<&b%AZ^G-Q3}*dMY<%S6Bsfx?1ea527(2m{8mDX+l)TM4Ls6)uw9z1RpvCHUD)i
zo9|g$lL;1(`iFYSqfs#@KZ5O$w_4faQ*iLJ8r$_{3^K0R))ai&0EE{~jc86?Zm)-m
z*F&~-ZoL+p%dnz|$yCa!mn`>|*C<%-7d<&ofP+v~6-i0X0RSm$yWhQro}iQ*6z2Ib
zsJJ8L0JW)>E_@25&w5N}bZ>*oW-n>pBwr`ynJ}Nl!&U*E22;KxgK(GdVF@mS!%Kv#
z5l<>lS$5P1{IW&i-ClO+dVF|PW2f3u<srV}Y<TJeE;-!KK^>cZM~qAFia*vn-rzld
z9q5*phl*kj*VL`4nq;lYK@ptw-x69Z9_fA51V0b3;#V9e^JgVzmflgVB*WPtWbi#W
zvYbMYNa3ouOKPJ24$FZLfu-u)`anVCp9+#;M#_!B*1SJAkQVWvoE@c{>gOrB$*FyL
z0Wlb3fjbIA*^*5hK^N5-Rh3WK466?K-g=G=d@0P+?dA+R@%}8jn!Wj8YfM)FY1qf+
zvAP(JF!bY2(qP9$k(KX5M-~%d^Q^VAXr*liREZ5$EKfDrW;vF<ZfrXM1XJU7m^x(r
z^xRxXFZjJ2f(9|-q<0!xfFJ4;kDBFtX3(cAsTh?C&%zF$rD;8Fp61uwdIGkY4Su7L
z{=vGOKT{uD@U-)?FYJ$+<inF^xzx~ZW)N3&o4_AEaxzCnmxbkwC_AHE)$ZJzUMHS2
z$Rz7t0Sw5%zeERe+^s{3kG5fIk&vnqdB2up>y@-N@Wyx&QH#>6{>t;!tDDx!%&VEg
z%E}D^exf0XXX()}HiiM<Rhr{(@qE7|8P=J$Fh<IYOfBBIwUHVi(T;|_-#lTrd}Bl+
zfHC@ZZv%!mXP@)HVg0MOcWqvy_HG1VO%L}~kwy1~HVUsmLO+H0){UD?D`L^@pE&FU
zs*i=FaBzUFIKz=jhtZ<3>aa$#Q9+7f-#fv%boM&^i?2|S?Uin&JRM%<70W>O={CfU
z#H095eLP6T41x$@P5k4OXb?X#+qXY~>u|V7aLRShSD*I6y*pI77xPUaw?n!i3fF3i
z#8w3>*9g^#k!LF?nd?6v9k}$_Tp-CqZVte>gRDkvZf^{B=oF!aU;%m|D?*~DCp)Cd
z4)=@_uI#xc5ZrFHF%*lbyrx||UhJas<)8;?yeIkSn@W7ma^Q1-!*xT2WOi)Yr?ALO
z+SM&?z&<x{XOKR-M123!`LbIBB?NuVrUhSaRhqxOVEx1QL+j+=?C4}{^xqlezWn9Y
zdD8#Lo3n9)po-9NnuBGbcONw*&++qvqNw~cnx-x!dnGC>j+82A&X;CXSIY@hAReh5
ziwXXip$B~<R0snSdWZF4WFs7gKm}D60;TZJdEE!)sIdrbwPs0mKyZtPLV&Qsmsc)4
z-gbxZXBq}gHH2`<sq_O0R<A+y;r!8lAvMOiK`R37zM?OAfpGU2-2RkH-j5!$;v=YX
zbwvOMXg-4UZ5ZixJg#*TnZtN15=baE8S9Xi_(7YayAQzwKn2wW@O67r=4Czxa57iA
z;bz?8m6-t?Ta2}JC;-8^cY5zL(IhB)(g`?mcru>)%?`=XF=xQ1FmkRjDK(vj_Yj%N
z-A7MF`&p;yq#V4$yf-Oj%#$?AiA4($`ifQ!7T!R1L1FYnokpFT1Kb4G&b?{91=E{&
z7Zmw*%(6r6rd<l@M$-uVGn3+Me?{*o*ySngu!oyztl>9ds1DZHdEBokaE05!*{RK?
zG$rD+u1RZ8EIjIiJh$Gmk@2&~G*-b?)pFQ_jc5U~w&AObk74G$oW4!0BS)~8cN+Zs
zH<JYD=3VhH5XM=;#DfmLQSB2xW?x(zx(#{yBhza;Y7|@dA_jD0zVfL|BfPjBNn3j_
zGZ9%p6kt0iBdzR`PukR}i?6%1MZTqVZ4<{cPEP<J@~ws53{TPP@v>bpARiUvgCaJb
zf7!Q1EVkp4M@r>$eNGu_=b;8mIaaIb&wHj6k8oJNx8tcKI3USHDpE2T{#LP9_Ph_{
z?Qh}~WJbCWp{^_Vo2tGDsVs-)RU*H=vCg*U1ahVb`{A~fxqUNwX}f09&S+HA;_Vjm
z5C`#@KkK$!I-E|k#g-(Z+C*E(V(V_n?)r+SCVsA{N-p}7Y;+)?MC*6BGOoL3+W9s~
z-*wWIpHEII+CMUv2ex2IEzmsIxmnygq2xbsHiyS}wuz8;IyD+T43x04fKqJ2lGSq~
z7+xNY6m|??HZoN!>&7i4<`-$45G*Rk&3%j8JFXfPK2bRUv#%SpCGMfCybF;CDs@69
zR->brZE7`f-Mt@n!h;|4q(p}CzGyTT*V7ov;@WLonpU{PhCo;dFhK+(<IT)k%tB7O
zE?QEvH9WMb!{=o{LEF+P?@+I#JAc*=BY?JSpw+rq<vmRDf$0fSVP&f6rMia#Y2WHf
z#gFcRd-eVO@|Q|?M1^B8{?9Gc-$(NNrxEtQD{<q5k)QdJ2qI5jB3BAwE8E6ose0Xz
zvL+Ux;5D#d%$Va#P34=H&f>LU$cox0Is^Y7d+*pE>YrqL$F|KK+ctJ=+qP{x*|BY#
zJIRi1+qQl3pEGCfPxsx^-Sd3j!S$rBs$bPw-?g+<LcmJ%6dUs~%}9+K^lbV(fG{SA
zHtQ_6DM7D^keKru7(H3pwaVtu<&ZEp5D>u*64xZlguEDqP>&cZAc4We$Nox>P@mZo
zf{M1>5!uWZ$snHKz0U|qr4zlS0dqI8XBb2<sF&N5jKPQL=;!+;p8<zt(2JR<qxvp3
zU}qV47N*)yNcnep1V92!go*7?uH28(LXWW#=RqTNM)5uRT<gyIN@8cb^-SbxXf7Qt
z@wVyM3_Ch=Wn+oQO9Xa2#K>k)ac-%1AHLwI-5e;JWU0}SNKbN2`xIVH=lap`t{hUX
z@zG@nI=wRWW=k)WAN-v?CGXkEy%CmqCe!WS>)?`BJ24s265IKwKVBkb4sF}$%B<?l
z9c3bFU4l9z`Dd_EH)c_NxB?pDr1XduBySfvu~x=>_iM`CYvtKE!;#QWH(1NpysM*j
zFj9x2vjy@^c(CAA?Y+BCbu^@d+qjdu=)Q~FX*Xb`eZ}Ird|as9W`_$R$<VhlCV=;M
zb?lqEm^l4TAdSA48P^ibL7l!08jn$MeyiQtx|a$Ni9bN<6HySQ|9h;lsnRUSpKIdD
z)7Ntjw?1;wl>R^ocf-GkrCj8CCxab+ddU8TL4dJ+eMGg7##C<Tk}YQBriYe0=l5{u
zTiQ9>vfBVc1TS3%iV_fJ(%Sgru~%T3d>|^_Fp5|RrDvt~XNq^)IW`jB4AD16v@CaD
z)5mwdd4MQ?5NSfGSC>ZRqhYlVh&E{qFHl#LI(gxxg&~qKEy4%{z*?0wI$U3sr*X;=
z;dZDrMk#ISC`jMzfG;41Y*;bb*Yu4Jy(ic}UQV*rJCU}F)QW1iv!C>HzA?eFF6D2F
zz+^KkoE6klhnd7r+pJFfE*WrYOFd0|C|TaxX=b?hE_J6kB-*@JMy%5@N0OtlH3CsT
zJ9d$#Hfaha-@Fu)lC}J9KTZcmUpF_fD7(@W(?;JxoW!{%WjmEAHCd_!1T3ka3tsKd
zF*jbSLMA(}@<lT<ThM7+8?Jp+#~H;iWhHt!EpR<_HLH3}ZQ5p}RpA=li#R-Cy*!f#
z6n14Sxs@Wj>AP*e4NzN4w|}=umT7S*`fHQ?mjUWu*#7<lF7fYjoJOj5)nGP`s4QZ$
zAu#pjBe{(6T1Q9_T++k^A%5@!>27tFT#C3>P^;JP?-{P}-YzW-5zI(mp+mb65<mYH
zb;t5o)ZH)LOw0d>x)UtxF%p#X&IE*4xwx2Ld^Oo6%q;+;hu8p+YK^cLrWhoESJdxw
zB)!Rv>;YsVYEA9*0&{~m?R32~d}lRH8Td7}J~EK_w5hbr_C>n;ssBpIC~e02bs@tH
z;01Dw<#i-)>}vp2NCbwRUfGu2uOP4_xhEJSydD4SQRx1p1rNtw=8i;QP`=dFp}<0Q
zVLg_8hmq;;yUZ5g<;6m%igtOT*YLL9*;#DbOJd-bk@NEDffAEXI8{P5v2am*eV}yf
z-2&HAT9IY%S+ZM1$zvn<6b6#Ei^wENUULlh+j1y3HAm21V<?S!t`JurlIcPkor_vU
z`x+{ZE;T}N(PE&jgOq(?NfQMR6*LN{1FgY`Ns@hP$?g_#7HNGdGKGgZ&RW@eJ-h?*
zn2kl*n+g?QD<KR>s|K$*Uvq}_6t%5>{#*-p=mxii2k*fo*7nK4KwgPgwVe|t@c4&w
zH$tNVwdCdR8VkzNtl;+}DQOsTzpmPhUAAHU0}-&KFqIkYyY;M4b#dfy8wq5Rn&GMC
zUc@#ZW0}GGHuD}f1eITlfqefJbtg^=)OLVfn<KLm<F#+xSB|A8!YsxF^H~ypV=Ijy
zN7tc;m=2i|Q;|O#NC0xRCRD%HyQC`1ldsc<FR@p@icWAv3WQaolR0J7+I&fMxKt{h
zVxT@3r5FVZlz-crGS;do$@^d^a{8mO{>&wNvEOa~W6?9j6N=eEq)ID#)Q{T1oVAh9
z*M$J;@J>v1LvSiYw1&03eu6Qf)q<Q-a4cOU!{7e&kF&KihMHh|sSMa0Sae7N9BC5Q
z^GbB_gYl-;<*PBt=!_Z1XRi<1&94wOTv+S_h3hgs!nDT?Tu$r*OdL+M5oBOs*Y4(K
zYuWl1fhK!#*-a{}Ke;Z`Tz}576f^nH63fATnNJ61ueY=<sAA-=C%v6lXf<S3!7Ov&
z4|sN4j@an65zge+4$wfm+j3F_xZjUl|GqkVFGbFc{<FjW^Benrc38%L*<zJO>i+}z
zf@&+f9w%?KBF(f0Gwau?$Zv#(`EXWq)Vbk_DxWbLQ5rQG^?rAxDYx*A1Q+2!RAfTs
zpU>IBhsq#jjL-MWr|z*3l=JEUf}=j&kxyywWJGu_07I~=<*Sa!$sPVCtD)UOl9O8-
zvz7p1lkS`nDLctIF7)n1hmYzPe(C{{vh0a|lp{Yx>6ZetD)qLvQ=oU1RYq?Pu_7g;
zYTJ6Wq6KRh^c+jjAN#xS#n<>?1_3~j3R6AzT2K3`ze;o?rw2(SxE+?*3p?EBnP=c{
zH%=K`8^9jM-KsvaT#Ur?%{NVIhM+Ig9$tFG@0w+%?b(wix=CDhBrSbp)pF>}I1aw7
zNH(aCJ0(q`iARVLb1Y+}<FzA08T1@nQ*<6#GZ%zdli$a$SunTZVRa~1tZ1v1yqhat
zdm!or)1}_GjqP%oTRn0HZGX;M=sxmY8#FwIASXkSu>F2Kl$K0Z^wd7BF6z^-H)Lp+
zOe$J1ZdzP*gT7zW5hqAaKu_-ke{!dri2OPxO5z*X3#a1Zl6LL2N=_C|)_9ssfY|~>
zw5`$fHcT>iZ&V)4wx_Si9;hf^f{&32Dl3qfdrIga=ag$6L!Jl(5(2nCmB|evydzc*
zf#M5^^BPI(qjHbAWVhGH>yV?CD9>w>)%EA1&K!oQEhk1mpAJ=x)IO#sM&EGAFc&bl
zBW*?dKnGmBx`eFI?E{1odiNZ-^^Ov#p&Bjqbza(j718^MEc=bGS4v*$nBLgIY)--2
zRxMrjn`Pctx}fqa{m?S8Z-w`ACs3cwH_u(nq8HCZeI1cSmJaiNkOoCZsUi-T44YV8
zq<7*6@&)KyLlTi|I`x{6_TX7u7J?j}g~2SL;`Oe7!)T<#<6@Nx#_0sfsUbJ|(#fUD
zxX^ewfw{V+n0Pis@8;Tf7^vm%t_Y%`J#W@RHd%wKArViRhA>*C!;wY`zUKG05ic9-
zr5E9506A`+5Fqq;9wkIN=D@u|28F3$?C&g9wY_x~%aZN%+u};0-dhGG-3;~{C-t-0
zs!^4Ak_(_t7ca7l8L?n}KD=cYlsbgr6_zU0TC(Ft>iJ`z(SvkD(bW+_bD_DJ?5>+e
zjUT%Gu@ZD(Er;yoc>Y`F1=$MS4EdbLUo(GS!vgtyO#i;c_#g1r{u{N7v(i7b7!&A2
z#c2!XrV4@~MO;5jTwE$kT94F|Xg<bI*7<(vz!>~;>&_>DBaZSpVGj!va6;J0*|nV{
z0r3}G68QFvAVM7P!d??t=O}AtU?CG+g98&Fv;*penH(R#LHJv`#WVX8F9%k`ebW+0
zM4mfh{kHS8uG>9BOc>kb2iJ#<X>UPoAB&7IFJFP@K77IKA(n@~1Q3uy-p4mLWDBtz
z;h!-C@d+eu0CS5jw;o7Bdw6y6#Q=7glji7k+C+)x>`I1KV5Nsr&m13nSF6notWk$G
zX-dc9lMvkAqM6;oX)GwFEQ^uYsN0$zd=5S8ltJcA{tD)3IBMUhJ)Ag-SQVHJP6c|!
zkgrs+O{&^T(8F(3ev}fp$&)SEL9U+D3HibsbVLHvT`U~B%uAdDe-k-+Ft^#$W;rK<
zmj#ZJ9XO!9YlissbB%;)8cuM?I9#w35wOQW===ySMX<T|sil^*`l%=ZTfdF6ysS-u
zXWVjO+@rup|8ui&>Iis$eWbFP?&MYKm_n4OTqQ*eD?^o=%>q%~@{aS@Lf1DFmlP^N
zdiSnD-S>#Vaw^G!J!J4C<_Oll8aM=y-80Lwef%|#9N`hcWZCY$=b%dIviVFco}z3!
zFW+=iq2o_*`3NAxZ=^$0T5jM#E0MQKG`5pK_!IQ?5Zcqa=LJ@sV<3~ydxJx4T025=
z<-c%=#^1thL(Yle7-Q(Cx_{&`MzyOEThTD5@sgM=lqnozDpsD9oqR2g>e!*to*`Ua
z$+$MRffHZGEn8lDETUM|+t8r;W$C$>$C#2E8YO#76H_;@X8Z0;<n@LT8s&P%Pw9D-
zHTn-c#=d`fjP==@%Ca!OJ;pN@qm?_g(K?H6#J6+0SCaZUXvy@CYoc8|{+t3h{XRok
z_ar|`I-HeFxKQhupjf#3F8aE04jiO2q52qm1H2R`%DO-{QI~GZRR}OMu1A`+AY8$#
zu8b*b?j1}~=15z{9ajRzA_PD1$S%92tT#NvQ>p;(CdxLYc${cd2E2o7V2@HcVbXe%
zfwu%CbmI(wUpav8r|>VYQv7-DzpnP_{#J1TfxC6n`Q3>Dzb^{^f_Ca`U~c1N>>woY
z@ATpVF__LfR7Wx$40=|(V<FVU6)ioqh7C2CRG`idzZ%=_CCAk8Me%q{1@a^)Z*OlP
zq7A1{`FQ+vE=5qnSFmmjt8|TuGD?g?FgfIa!A3uk&43C%4MrS>Z6}u26Mywe7I=Xq
zJiyJQU+n<UtTO%laUp)^MCXPPol241Q^NOHXh2(6#G#VN-9v!+U>`eH%uOl`uihM1
zuM)wKzlJ_j$vzD(30$EFs-0{FvFy4#g#3ia?`tGtO=91e%_YG@f1Xn74H9N+O=zV)
zV{3iF58{s3J>{O}ggXh-U<8x*=db{LhAD+z6y$O@_`#=1Y}u=aX}}!t8AZ+!Y}%<C
zbk+A;66KMlO*<aIbd3^7n?3LIIj|fSxRx25y%t2WUpFY3x%BwMwl(cnQY8lV2yp>u
zp}H|XA1(}j?n6|f)fjGC+b6!Oc|LOx%^;f8b#tyW%Fob=wN-Ddxb{=I-;(g516>m*
zn1oJ<n@0s8pAc$b_-_<3QNh5Ste_7^%x+Fg<93`aGtRWeul@=Xf7i$%=hG<J?!t3y
zOWTNC&AzV^Ga#k(i@QYCzb3gtDn(~t7yG3D^^xVWR=ZTJX=v3n0@s-2QKbZ2#ez+}
z?ZsE~P^!c}*wkYv9{rmuyn--RiY>=^D_X8K`&L?=+q)t~dKsn#ZR)-)%sQhwf!a&e
z3<ZUDi|JOBG0ez01x&1Olh<+9iq5G27h;`}CCRK&-qEkbn4>G0rEsP!_<>$o_lr%N
zf<FfL0S8V)=TxRw8<VhQWo3ZyJ<#xG%Yg6Rav`yZFumYxDi{u1E~*-P0|+6iq?(R8
z!4K~~wm1Gri}d`Bj|bdZ{2z)qdWGMt_1u*DsYcHtiKOQkht^tjg+<I?$pkB32XA}2
zTZm@)dwo?&p2qjtq677O!<;fCbhc-OZmNvLy5Gn7vBwdduKwkE_@<p(3d!U}Tr1A{
z!_=CYJ{~b-M8`F$G7=!4fEu~-i<8IOR7?E{T!HJI=NTR4Y=b=@n-U4AuT7NdbZ19x
zTOGKy$=j@7pzcw{tXt)epQ2Zx5hCNc603LX;AtzZe=^Vr*KMaB_><ym%2Ce`T2BXc
zB&syc7Bf2%1>-=M`8E^ZxFc?&#jmoq#^88#?*q1$aO>GEvV!YYY9>fsQEphxh^N{X
zg>2r2DvH5<jP%oL&VEk8W)RQe)J>L;D4nw_l(`fm)NI!U_qRwkOY#V9U{~~FlNET{
zM2yX8NiP+?JVd^@n+?x=`Z)YOJjd~VA`SmPZ;k(a6ZU^^jsJQ~PimPgH2e0xW*ay#
z|6!qB-tOxd>>vfky2`_Tx__IJX+_mhwsR`1c>Q=I%OtNjq+3%K+K%jYx_LNy#`Y*L
zZ{?x{2hnp-Zkg96ZUFyIr%nX8c9WTkEx*-}3kQ(m<N2v3fR|bt2r>j{AeNBGPJ_<Q
zgdPj<NCH`un`I?QardZD9fx1%uDhjhoqgt%(Qco?x5GsMC@#yv<DDy(_u*`@WuB83
z(!^0`w7QY4k3EUKl?x}P4-`zieXGR+;zLim2UhBDqJl_i)<zQ-K-4HVkM&SB&n$UV
z@dJ!PSgSw)UX&8bc7#Zc1%ZyfGKr-i-LQJL!t|;^Te6lbPDN99P&ONAhKbP;!Tf7_
zMIXN%)OUuqc)dcYb3aq4@GVX{S`tmvnU43Dv24LX3Utw`A#MCTc+qH9p1R}w(I30j
zU5|}pCmn&qDIQq~Z{|mhxX^&|1Z_JVnG5JnlvyxPFGIxkc)!yTK!V$a*b6gl<GsOG
zUbCfw{!G7pt(c$ryH?NiF#~78FRu&T&o_O7!iROc=OF~;2MqDH6zsSjzdG$n_#{yL
z8AMfoPnRjhud<AxGOt};zwt_dyV%2)5gs~ON?2KIUbBW~r3??`lK_0o`!;42)n^>9
z5!6AeX>R+Vn0R@{RyPs;a+bB5-H@9_UAqh0nKwRKsQQ^B2#AFulc^OzS~c?veyFkb
z+rcjGYKy$<6{#%Ld;!dCQcE=*?hFBcXnF5C;f3*=`H-V2anG0%0zLOfj7WRZ8)40C
zPHCD}lZ`=ufozI)@+b}LacVjvSpe%Fi3rN<>h3ZTSX&|9k=RnjNBzq|xww<i0>>oc
z>8^*J4b%Gir0R%xcY!+wy|p>Ry0?mGbF(msio?Y9qsndwZ-Wu0vZLGxz&-fJoClf8
zUKzR;h64v%)!f`=RYtOIH(0_Y0>7KY-B!xr9sOOCcTG&43}U*eoU3V9cQjVG^Q^d+
zt{7o^nU*<0jM;2kDu|Df^pJvVW8;V^yOr?n;f_`CmFmnhLdM-5k(y>7lHh}mUAv|D
z5m^M5IoDq#kJY-y4x4ps(OBnSsadiOSJ|jL-e*SbG@sgB_(xnNx-Gg{p$_=Msfr6w
zkX$DyLsPanI1yX&RC_M45`_IuB@#WohNy>kGj;6lV!Nmu1shzY_w%19snQ5a@Li9F
z*IT-C&ynvRsTsu8wWzQeTFpcfo|vc|7UDE2dS+H~tAXk#4s0wnBk7jF3V%fVN}9_I
zl}nG@(|lomKDsJbe-?MZc*$i66$2jVrYO4+)}FRc(tpHDu6kA?0|sz}YNdT>Z+(W=
zO{dO=*92U(pf=fjfTT01NUXw(7_XXubil}Fratxzy~5Y^+f4s~%i*<h9&lsV4*jWd
zFVKB=PDZ~*0}0FpriF2eGRnP}FDO`^DX*<qZ5z7OBc3h*jh6p*D}L*Lw6`N#g6dMJ
z*ndRQM7w|;MNIi>kOqnwv}k#1mwJx)2=~3Cogbvl`=oknm2NDh`sv2Sj+Djgl0KVV
z5G8(+1f!-`t)UVq4tD!%Wm%O}n4P-NC)r&_MSzm+nf{J>mA-pJZ+S$uPb(H%T%>Iy
zn^|I8l&UQ{a>ZZQuWl|{UU}ppD;!x8R1i#kD(l8ia5(liEl;bi-B!nT>jj`(Rki#I
zQ~oaG%$!V9gnBE@lg~`-y~b3LHLYprZ+GieB$B0fM`omKP}6#z!c+X??v1~qsWtEa
zZZ@O+g9JSKJ)5C@|AGH`7Ra~Oj^W=5Mg6`+R9CPgggkMJToq7-0QeV?nTSCM`QZu~
z2&OUu?wq`3I(95n*+`P8KXi<$yi~kCoLLIwXKdn!;Rq=*AwrC_+@bHKliCOc@zcrC
zXCO?|S^9yWT<C07w{tooJj=rB#kCHZkvc{gZVh2j%O|_x7$QMt^aqlX>h2UBg`AvM
z@jD3RtQpp4T6oxD*So<kw-c&ypGVr19#qSqJA$$Rm!S*Mx4u@TL-m&IOcd4O)u0Bj
zOH$MF85>fXX`%TY@X;-+tldr+1#lXRrH@u?4MW9rBe&DGM=PT7D;-<pSZ|0x3p}@k
zIA3_f75+w;$KG?=RPtIPpf^1)N#-#!;Yq@~h798ENlXCl(QW6;t>FQIOMMoGOmt;_
zlul(@Ggx)@GDH=rr;6jevN3Q|uZ~Y-w`w728mj*hphCaD@iUwG2Ry!tjbDP(UPUxM
z1#;Bd_+okS=qc=LVVX8C=?rH!OI{a_^xWBj1Zg9PP+sV!R?@Fd&CSiRE{6?FsjLaP
zl9i)Mb>cpu43#u)D;lfcE6$O1FK%PK@tXac)GZ?igtBiIE8%38+ynx4)Xl=g4ctH1
zeBeTvt!;3m=J%AAJr5|*BD^dXn|v2)qS;>a_vS4a@$3C>-?hmMjCix_5&%fGD?=;Z
zbW}zxRti4Kr9OB?r<B)@c6qWBn5Oa9l`Wa#P<}gS51z4%Aor2bf!??Vst?{4ZX@}p
z0mNPDhay@D$$9&x?L-O}_%KuPp!~S%nIT`AHslNJGODp&!yg&P*wVvk0~6%51P+TU
zLC<hRGzH5aJxP1A<welZ<R!X{de3Pf1UZDEXYQuck0K`Yfl!n1{q+E^W_oX{=i??G
z{#1bcoFe-{pC-0`|3m!uXW%Ut>bxpX=r$aH6JSZfb~U(3-GHuM9tRNry9F!0D31$%
zB0gW#ADuZP@7qq@@eZIx63b^dFG(LM{3UKg6`bfi<T&!p4JI1;_Lupx&XaLLnCHT7
z#w#s1i%!m3I;wp}!||cDgX-9nqY`8onfqEx-`3;~5cLfr@|9oAv8oqEi}W7UfK>FY
z3D)g(jxxt}`+YwE*j&^(stS&r7o7K*mExDT9aQEv#wtDvH?eGa+%=b2XvRiO8`IhR
zle3%Iv1@V9DRJ^2S@dTQD)o@m5!sH-wEey4=YM+Cxdr7z+YQ0X{b*b!bc{pAT{|>!
z#3DMSg!@emXnK`}D>vrJ(H=m2etIZm=F7IzJ58JAp}vTYqhpKGoX{sV#5%ugl2G*9
z)TbEd=K70lE9Y;Yapi%61OGlso92JAjrm`c_Wz=^{}-kG|Dm*T{|%HjyCJ}C@ptFG
z_`W_8{!^{cH#g|N)+zrTFGy+Zub%x)&~AvWhS&#{#2%-@pvQn%0TmPTyM_w)ugP(o
z%!(Iv^-w2C(okObI9pocFU*+Kg}N;(OM}Wi#(p2rpHsRMk>~HC1Yja0mx5LUb=)|=
z$sPp=Y^nz7!b?37C4r!%22msaRSy7-CetqvCnsl)_{bpiL!MYrs-H7GLeTo>BqzrU
z3mgK|GQ6ws+=c{p_hfblr|NciN579F$4g{c?*oe;`_f3Ef}U@MkRQc-31>L6$vPAG
zTpR~<D#HMiN;rnEK90^OfTS3MJHx>fE2jZk6nXyh7!W~_nEx|I#H||~Nc!38_X@~q
zNbXg7(;lh6<Ke}qYl=)k*g!jLz$0rSZeLVcuCIn(Uy8z~U%5XMJf%Mf71ZP19F2ew
zKohwf#_R6qv=63~(s8qa9Ix?!0+qBoLAYggq_Y>7j^>qc%EK<{I*TJMMmX++qMl9?
zC$|)Usr3%cFQm+<7@Vq&X64?lds&;Iq8QT!Q}~E1p@E6{?)r0gw+(fi96FdNZYShY
zk|{}Tn^5ug{qL*#>gc88v=q8`t0S@ED(Q$VJ8n>9hf&wZ4Gn2jd9HjakF7!@>ed}{
z6O=BjdBnq}H~~t8`i1IQb%2)1>*jgcMfR}$rLR#i9~wD3XA10wN&5|;?G{ww%HB_R
z_2fWWiInQy3Fe)PKZuhQ=u^9jb?NK&_~f}`hRFEkQ%!+c#hF5!%Pa=5^AV%!Yrq{&
z$<;in?6dByn4ZCpvNoBnC@2^}xhaW)*ny{9vp5X-dH|_68{obdf~f=(7O?WHLR{X;
z#k2y+PMR{=3(CHFCw$t&(xON(bo_zTIh}n*!6Vx6Y=1U3Xm{WCqkSg6*c>jmfL|tY
z5Y%dZ7DO;G?|#&#VOH*`jjdU9Wu40ZD0c!~ORE#%jp{T)ee~X6zqD=@lo;GOznX(Y
zfkahl5J(4^)pXBn^g$gSUSmV<99<)$#Ebms$8YPvE!OU4Y`qjMvP>iCpxIqhtjY?Q
zSBVE$xKvTH*N)_7(VcI}M2n2R&-|I_`LSDa<v$=@@uHQu(U3uPRWwF5Wu!xS+S3d)
zq&?vJB6R9B-g%IGxaJt-687}?!k_HNVf@Y@_Gy6jL|Y-OMtK_Ehas@B(%#@%G5xtJ
zJY=)JFo}0h^2gQkY1<U`u4r}NiQHkcyvG!dW)d}?hu21ewrq*O-cKqUDONu9{*Mz;
zpbaL}u1_|)!~7Rt<KHh%q5!dF|B5M({Fm|roBxUYAn{u&D1j1u^d6C&fgE1~=OL$z
zqSgrwg<_Jc5J3LS4)po@n7Y2dnc+mjRkp9G?pdqyxU}>pV1@XF9+{A;zlZ(@k(gA#
zZwLRG#4QNp5SmbKf*k__<edlRIWDJqNYT3L+s5X><_~B<2Nc-LL|ima-@{8=lthkj
zE(Gsi)myud>2{AP$L)d?*f<u2j>(e@yBT`Jpr^FK{KbOwY5$6W2qb>@b+HUW!0$)f
z3;%Q7{fj{k4pVK$fWnDg5zdK2SJy6v1aV}}wT+K2g$*6&!5fiK>fUFM#%Ye0Ysh8L
z8%zViiY>bEP!Sn=p_j`B_Yosw#Fi6HTfrpgP38PmYxJOr6VJ1Ksc(T$PLc$olM`;H
z&E;w*a1>qV<&Pg8MT|>&>_~NPzDe6)-}rY@Y$Du{akHYbM&@O00N0&}X*l7XBl7@t
zT-c#X(<CUJdA{L>?i~9Pvt5dsF9vGpiUQZ;4FZ4>nkd^O>CqxT+UX%r{4YQ?)vkHq
zj>PWZ{5X<UEibNg;}ZQ<bIO(n?XkPJkEATlJsTG6z1LE(<l+TK{gak8X_v_M3~>_@
z)uij?>-5pn713VD!hQgh9+}CI4=%jn4<~6<D~ELEslu*k4RvxSWke+@^IAhqRkU_c
z%*8&gIWa4O{lFFf?g-z;FrP*kAjZzIfuN~m_TDQCj<`GQ{pBF1CsBgWS_s2?Al9R=
zQ)mPl6y2)S#CknBn3*_$+)gT~_>0Ank7G0n+zd&!*NC6Her~Uh8Z3o^t>pNM*WNa>
z*7m;bsz)2Zik+?6N|Q}k7X$YOE!Gp6bIeyMBKi~!jb~=VgL!m#s};W~7XPF?W)M>G
znB1E?qa@d}R(@Q2vF4D6XL&8P0pxTsx4(=;^j%OaqBNWe&IoTD*3zo_tj|hKj4K57
zB29q8?pK-S4H;MmEvMOY%Z3<mo~V=QzP4r_yfg0eAe`w~3291EI;T`P;q}UCP0<?C
zuvgy&c$3nGRh>BUXvEo&ow#J(PjhnJFW4Dlg4Lnx8M$02uGbiIOh;5{TjBSOwm}^o
z{MZuoc<Af1zoRUusOA-A?nXzRXz_9I#F<S2e+F<5*}7>0c>kpFl7W1T?#@Z$``Z~h
z9zT@d@4IGSzH9cMFFXIuJBW3n_^<EOw~(v%h&F6o0*KK%C@4Uh6G0VQtNH>zjh>pX
z^O*3o)a*$~kxtCCn|+0sn;X`!$H5ai(3O}xOenkQl;>W(J~>Bad4A19KP-g(5J;Jg
z3ELQ0tSlU0o0`nGkCiacB!W^obUm8PM9@@vK6e<9JYb87KGx!}pz@z#c>x{BcV~yk
zS*`T7*j}PaC0oA(p`e*A&q>V(NR{<^gumlq{kt%*_UoDYPqL*>fn;=72zxMG4yn+r
zlGq96$l0=R2=o?GuLCw~&>3v)UnmS{UchhI1ckpyjC_dlPrAdp5s6UMe33a}_A^Y|
zpG^J`rXQ8QuQ2m#0kDE8Q9R$`_grk4<y-xvt<Z5bVAwd5SWs@RQ>~Y^sTrbwOcru=
zmR~KU6KOE_N83^^6uIzN+PHWnJW#10(temvJ|bcu@kn4DI}8Zyf<MMR;vJ0rHts_U
zdq-m>v%DnbtTE`hJ|&+nJ<plWEhvXw&5Cv~oVF7XoNXgD4vlo6h7BWBZW^yX#7p}j
zR9h@+P}Liwn=+=BAdVs;B@0!al&x#f6xim^xzD?(kY&CNK2irKYLk*8$xTv}bd*Aw
za@6ngu3H`5jqnUcE=4x%tE1v^_zqlqvL1)_SCkx34(afD+F|%{IMor<Gil<r4opcu
zx6K9yz!^klEuDmq0-ESNYpEb9wytas$~IuI!|r1M)z)aCYG6$BsC7`}3-@hT>AEU?
ztpaB>5WvKPQJHIN5GhtIQ6RM{lO#R<U;_>QexPr-)(VJ+>4Px$-AR&>b3x@xW0XTZ
zc@+h7=;_3zZSjsRtpm#YkL@hQXVE=1M@5d{+8!|^v{Yl7DwAQ|IDKi+jt?%KRAbs+
z`e@yudlMFWWuAUZt9}VXo47B=T}IAsnp-TFd+`;T&mkR11i7g4&@vXF@3L_DxgXbD
zIN!6xd#U6~Q=wU!cc<5#Y=}O*mTI;{=jzbhP|3VL9HUnz!o5x!H$O2qUM;}{cPR07
zBor%N^`COl1=zho^#zpxde2`m*rI<XV`OiRJep?Vm`hGjnxt7NHi@fErkoGlh5B*N
zNy)M*Nq}_=Yg|M>X|9Fmbgk0H)6Y|&?2=D+Mlu(7UU#;`RGr@1xyfNGxRUUqkc^HT
zBqK6(f%H?HDjWeDsYN(vnk0Gmk3SI#kv)73UBLfsdCP3=`;&f`_g`sKwEuJ_|EnW2
z{*O>{(y`?l{}DHpEd?Shn&Qn)kQ+J$9KgkkB8&)n0MPw8DRql>b+{?xIxDVRj=oS9
z8(Sl|y4dI|&j(W);#-z3E4`uQZ?Uxv{!>a(TTwYUpTa*4Vzeetui*BzvO47=1QMcC
z2OI|Q#(#&gH~vT;MkG!g+n<RA8xhq&iX~jnx{+cyNC%Y60+~C5I1iGTPmP0fUK989
z3)=pR;sYX$l<|zO#*)*oAfP40R*S|}w*w4W0Sfv$!chJCcCtPXQp1@_hrRTCSaTlL
zhpMYlG9^H#)xi<@Ma!W?7Cck{x3q*&CjO+K@;Z}loC3(wottOR9@AxYu&cjp$2Qje
z?6*PNinY{G>9~QBO)BLJg<WMwCN|_3f`j+hHd@6wp2da`YtD+!xELY)Sp%=eA4J=#
zM$Rj`tIO;lMGr~qh2@(Cnca{3{glh9*r}8_O_<7Zi!RFYvDCJS*Fo@3=2b<6aI~KF
z;J^^*H*&4%>zG@93mfIyf(1)w?xfCK%Jm}_@oeIi(iwSU_eQb6X)87FS<ei$4{Q4+
zGMb64QG_W$Rd~<CNfa4*hfEc0^D!{mF1*YoQ1p|%J3V(&FnBpCpaK?@(njLGUo2hs
zf4J0HbgEpy5~VwT3{|Riz#Avo>60)8db^)Ovj~#RX+D#^WJK<SN+Jfqq=vK(yr+Bz
zPH6*sv7r2hHXP}rl9=}98LjR%FI|d7O|Cx6N`%e)7=9I^?o>GO-#87xGg+L8VU<#+
z2zpi(eGG@ZA)Bozb73taUN3mYi4fqo-)iB0@}hIum4pfuY2j1f^wuUtA4PFv?K5M4
zGRVQ}qUFdspv`>S&sKTlKC~t{{eh(^Nv1Ux8LGn1*)Bj|sfR}U+D6-Nr*W%CpuS&3
zm}7m1phY)UoLKR)A!&m!41mqVq0G$|3f)H}Vjn9r;A8qk2W9Hp#o5j8{ZMV7d|c+!
zv|cK2D><b3GRczu0G9>_neY<6W)xveiXqIpiWreLVVEXWi+@&Z!g295N=&;(j!r$n
zDJ(0S>5pL6Qod^23+)WYkng}Zle_Y~Rd<8^x7A3rW$F3vsfWI?jx_%uN$0;+5B*QD
zjxq;IMU&!x$q)Vk)^R(9A5wsT8AfgsV;cnMaRiJ#uE}s=(etl-j$e=n5T)?!1{AN~
z`5gX4t>ph1*Z6Ix$%E+LKoEl)B`G;mY>Z0_p(r6dKygoKaFci^EZOXby}~B~1jKgd
z!v+Z=rfY)#j%%!02gD1R2L6s~1Ue4%?7Ar<tZgvhM}jzf;gqcrG;?B<<#}tE*7Idf
z;grl#<4cq-ta+c1c{)3b)FrfAuVUn=qd5yFKlNm>aPzXXbVdAqppqn)A@f(*s?Mp)
zSVm}Sg$B4dx*pi_wP3so5A$yy@&xZ$)ss}e+Y!+QM8mwftKz3r9d(>%+sz-o?E+ns
zvgb)zcUk+ayh?L~PS@PM$67kC(Pm@xc&oHJem)7Dgwe{ood^KjYzJ3GeX0~2yPt$r
zkj|S@d4!uv#w={0OaYyXk0&kaTXoB9BkXVl=#y_2uBs6XCPxq>r5f6T2Mg;3MKhz*
z8ds6Qm9N$A<n7cHtl{-_>fPvk)(sL&vBk6)KZnxt*8y;V<2Z0P6m34l_9bb9C|F~&
zWksk~oI0EfZ7|BV%M8-Y%(cbyn$i7mP=h=vf-&hwWSW_(Iw@qmBsRBMop;!hw_X<^
z$+zEfbpCHbhw@%(iP*E$DZ%!-9tFqseSx=;H_nT$EY8;h2#B3$MTIBp`S#m#Rhu1B
zkrCF(n6;_l<zDR%g_sv(xDfI-AKFqYkKL6AvCZTT+_4_h-i#I^DB=_IAzBnM`z<uG
z`hybBT63Ml)P~JQqo;X*H4M%LH!Rj>X0WB7o{H>CCI^?rl!*xmm0m9cpsbbE&5x_B
zBZpNSRS<ViHU+35R#{Y7nhmZe$%DQYBUQ^TrNxSCLuz$^rl0z*>WX>vA*N<(%$ZPz
zSnN?cn;{%!jtb)Ydr5`F&pp!>jz1H<&n|Mbe@j07@^FdN>Ut^KE_XxKRLi#1ymh-*
zy46vZHF>f+Ba%7XK$IM9a%DVfZoiAh4t_GmvSnL@yJZhJCo&2=28Y}`27rsJ<1$(f
z(uwhVdTY6U8tZ|3{rdmuc#Y})$o~ar_5ALs|5C?mqi=2eF9ibD-&UDZ37C*4_lS;I
z4G_lo0d*ykB=_85fO$AZr4S;1v0p(Yd``AgO-3WPwj;^!E4sS)fx`}ezML9mapq<O
z0(=s5wYJ$qejRh>szQ;11HIm$1;x3<wp&tLBN6n-B4ZFhT{EBD8yR6>gF(P%vLhe$
zaKj|bq5Lqz#c+y2qQ<vqht^;YrAhT|9Oid0t91nESn&#knWYaTfQaHX(%M8$W@DtH
zaU8Eo^Ck_L<U=Mv_7eklgZ6RC^2ovPABu5p3p7saE7kF;9lc$sz(n<+c#HB_)mdBF
zG2yN-ZZV@;3f`;tg_d3m>DmSSrTs3it5m%=SJ1T@;@Gkm_#?ivR)^|H%o^v*8To^B
zgZ+>f)ttY4X^&RVf2OwNh!G<jed7n{&ubSEn{qtf9-pS*AC-&MxKJE6z!mpDP)@i=
zBh~4KZ`|DI^{AKxI+#=8ZZP<eBcU6PC#vB$(&2yeR|lSt(jCGwyiLY*HlBw&uC-qq
zKt3dusKyCn+bSTJx!HifR9c%}zCDv0=Cy95Y;Hmd?J*bSj@D}5QDwT~`pU7^7wzm2
z#b>A)*)q=$DvVFdb-HZb@ct|W!^F;@L)IE-sm3B30>J3WAeTD8M&YAss0)&cP*nF}
z*)-hKj_RdLozT$8W<SzdXxo)~yazO*YebkG>GXFBI_{z=KYXT4_zegv*a;eH-DEUd
zxVN<m5&$oT|0iLK);@yQ%{^`wP{Bwr(-(!`r-?_f6f{-gMLOm(1SiYZq4I1Dk(VRk
z9lp7HngGEvBFtYyA}xC~#UPn7)x7GQTxSB|<fAmnl9qkNk~55ocWr;5Xkuvl;Roxy
zV0Zb{DJ@&_FYT+S#rK$!t15EX-B*__$xjX!9upSun44^eswx}r3NP?C8}(EZz=tc8
z<z6Ppg#$YUVe5`>wwN*PRdnlOapQEU0TsJjsFssnkQURrNmQCV745C1w?}*Wn8F<W
zW^jhUM8O15rb^jei-&9MY%$vqnGXr86taz+7O&-`?DS6+=)Lps{iy|u0g8ef5~^=L
zo4BbHZ}J`|p+oBlG#R_~;ZtFKF;<M$4+*8K!KnyzB$t^Cxh^R3v*imX<r49(Ey@Jt
zi>3~p0UKk@!}}xnr#A^Xv-dZhPoTeT!+NmB1OE?p_b&nW-&ba~zaa|zcMEIf7NiCf
zgmZVOr*vO2qNE@3eLqEUF@<G_xVwyFxpdtf2PQ8sF29)qJHp}&U-h^odOSCD(otXP
z{}D3Mo%E*;$kIWXYss3J0sK!LzgJ!5n4^ZXQqo#|(s2FW6&%DTP`!;0{i}*P>%RAI
z*kaq!0ElaaqP6}^l?=NCm?;fNHkp`;G_Oc2p4ba=ES)|3pvo&K_|jh2ShUmOSJF7G
zn-B+!Dk+o~*SjF~4yOfwW0SmV$3{CE$g}`#mvZ+ET>fdg^5hqsDJrN@T&d-xKBQtK
zKwig=)y4>9gIpA?a^gXf6`d1Qx`*|7K1aJeOUliZm+&jQR>2!+b)A4(bi#xYn~I_N
zdT9=0&m4KKc4m8L<*1w@v}6jwQ{Fdr3Mu>=T&#O`g^oV9V3%nA1ySoosd#Hw^{Wsk
z_&vWq(5$Y8;?46vIc4>$WcZ_{ILf#-@|ZYLfXN%bqJ^HF;jzj#tc>lbslFvX);qum
z7n0V{-$YLeXZ)Fv!1UuT@PGxjgDg+L)O!j$jX?o@{|f*2T-zbO0xxl^RHRU$5&v2?
zWZ59e)Lou07?fM}xrYp&0@POF<dU1xefc9$??t9ou<&QvQ@ab9#6w8|a?_tQukF$O
zY-9uPO5;z_W>8^sHAHj}O&jLxFRC-%>ZM!ptdlMGbB4%+66K@xE#Z-{dhIQCEHx%|
zMDfN}?2{}s$BBkW=T3fIn^8N-_gtl}lM%{ILY6oR<#u}e*)^!*{nFih=?UO<>u}CF
zCaVC@szg-mWlym5;E+#;ToW`--cd%6$du@hSH;7WY-KnH6r3k6xz<{Z$h{TK<nf?b
zs(?F#@eC6+pP2%7@}rbO#k@!*$azhBsZ!B=dq?BM7W22+LCJX$j2hIj9J@%0@#Mtk
z3xaa_KJ&0fvq$ekexgN{Z;0Z^iX*UwoU*jKj$QXndr%f0E|o!=OqyQ5e@yC1Fa*K7
z@(Yno{&{6MgoHckz)J*KP7R_MaqZMK6Fw9asu}8zlg#zF9AjJa``tJj7IqX4k+#M9
z{S_WW9&!7ZVfYhT^ts!0zdEOyS#I>x9NJ+FvQmdcJ0JH9c~E3&vF})*YA4Y{bO-&f
z^QmE0-8VERz?I!+3o(VtzN98lj_Q*Ie?L-?XKQsm)7eBzR_$`yh&zFZ{Q)LE94&E2
z-vw-oMw<E>V#Keo^kgqcT9tn`Qe6~2BD80%`JiSniMJtYljbjCam55eVx=4QLk?9d
zFw)@bKIRXo&pSDI1nspc+f{(P$FK```A}XSDoK~ixnMrDnuEl?U!ve9NaDmcWWarL
zuU1#|2-eCn)<AY|N(RrW-WHpz;c3IQxAwvenX#&ZhvoX?i{Lnj%y?>$XN{~hUoncJ
z&AnjaP%fEgBjWZOer|4?uu$CEy(Ytpk*1j4vgL<QhNO@+276;X3ME$s#(ZBvh+_9<
z2PD3YfJaIZ`Bx!cLmb!^1zdyM*ck|~K;W!*i!wJ1@O#kW&seQH*3uSZ8xWQqjy{az
zk^OFFPZ5&71RQZkKf|BlhE+yuX+wl05yQQ993*;yulmk)VTuj$rAAkVsHj)zpgMrH
z4#K*g1~VGL_7zU0o}vi;ez7uO#RrPmHPl%rIZ%liBW8QOp{GrkuWb=jcT|`^NjmI)
ze+>8Yn$!^5r0>5mmM|&lx|<9!dUl&O>E)ew`PU-W6bjQT4C8Vh?)tAw9B*y@rSQ?d
zXZzdVFH#h|vher(B=bE#{qqFu{})bZZNx(J?N$7*o8f==3`!iDED%HRyW$>Lp9$Ls
z7_w>ag|#^+-NR-b@dMV&xW3=>b%FO>Nsv%h5IIp?xZ2Y7U;Z&kw*||MU!cqB;%$I{
z`}|DyoKX;TtXX(Qa3?{J^u3Q*?D03AQ=V9u7exdbgz@wHsZF2HC_rck;SD`mPwD`|
z6?aM?%9~7)&m_YCZ8&o&{2748D9?v^5-T!tPAwe%dx8R6H0xt7OsGe2{L5xL9<i>!
z9-mCXn-)$FLlEpcqmB4^C64F52Hro(MD_=eZF+?HvyoO+yt!NAjv$YtE%g$!yWzy-
z8UNnKf{J6!fGIVB9UQj19g*a$fxz^*vs~;<RU01KB`u33BFhK>p`6X4gEgz+2NJDi
zQ*hzKcSze2IH<*g!p{Se$VK_RU$kH^9p_ORVXZ1>u#Z^0=KF1TYD4;OTIh4w4V})H
zHv@lMSeAbWmH>j4yuYhKCW921&WS=##~6%}%%rp9gY>vD6u!;w3QDm)-yoq1X0;`j
z#j1XXv^lGsZXT4Uk8HF)s=3YEFY)vSbEPdbr!>$~$^s_H4di&gC_eQnRJ3&~j$0AF
z7gXuilZMxe1T<D8x!eCDtx__yHOu_%nn~Dttk(}v2v^|7a_NK6whQ<N1l#jaK_9(l
zwF;?Hm85LDj#5#-q?zL{0|mwK@GugTqF!8;QIUnuudQc{scqKAPh81{W_xZZ(K|Bq
z*zsIHLAg@jI>)b_n6Cpk|I4jM@EKm_x}Eul;t2f6>a;OesmzmLN2(JpUzXFvV7AFC
zETQAD?{!JkWxB9Se(uD|NvA5R)zVOV#gI)n7q_~B-BF}Fb`G*dx5ZpSQD<YT_}XG*
z*3_A4@K1Eeia)!tuT={U)NYeNLiY7M^HrS5Ufhxl(a|3~g|!z0Od6@qyC!_{QS0vG
zon1wybz5Cv4ZgO*+VnaKixyWE15++iHLp&cxttt#tFK_pCgRdst>pvi`tfV1gRE0x
z&sreH8THCMkYg*{ErZkDy_?AgPQJd$-iXv6ar7(--hjalXcFF|-gz`Yo=tAfxWgZD
ztBhao{d-o$JamwOe?k?bYK9&gNeW{8ASKz>-2t~heSp6K_FpKze+RJVN-JhK{TAZc
zLI40T{?qlLv9*D*k&&^HqL7j!ldid=qqDKYzpB?@74@kKb|mj3)p1WJP=D%cvj#eo
ztt|+IM}8pvksAEljWoQ8Mh`5=6<S=?m)6t7_p_x>0iDDL-`dWL(SUKFlrJn_eX(Sb
zY7=!oGEg-m2&k2SsVFL^r(oGddkLvi6mHA}U{30E(-kG61_T7PNC0*;gQ77@2xcO7
z4{mBiOXOQhAAT6<jjgUWuV2>o1PJ!z=r#nM#PwE+qc(HtEeP!4%Tt4>;&>EM_Cr<-
zLu3$Wd~hpBD`>sPwE7v0H9~2+p_<c3_Ig#P;4oVR7$Cz**c(nfA+Bu4ZXmj9h26#m
zYb5?UmwR3n1ml7o-SVSx;uAzkWxua9<R)w}c6)9=0&D7Ix(87gj?G#(IZD-+=f84@
z9$j(1Vu&79abV%%x(f(Yi9a*)ag(_Y*Uwvl?zr@&fZn#WHrS_Q&5uwwpYS++-#9lF
zVGmw?=Z2vHFsQ+(vAh7S^6EPf8$W5DSe|?uQAkXKG)v1f=J6Ghl;S*ya2ABcGg66c
zk$@l2t}xyx1p378tgorp5or7+hR*u9_6s>g>uz26u2g$l=qz@!_552!gMW|i7Hl1u
z5Mr~innEuPge+1DB53t1Dm<}!A&N3p5A^+rB?~@@^V^yX>}c$D+}uCXI*zU0#c~V9
z_p6$W9Gwyn;7eGd$!6_4&<V<UA>bAD@+!2AH{^6rs(T6^tP+@zsDRObuTw)Y9d6YF
zbaSzGo_KJzBa3U!bbu4J{e|jI_n5$&xG9olTrEW&A30|(Bpg|+MeEK>lR`cXU8yij
z(a3#qK3TKm*1nu5!#m+qsGx!bw-J^&B(7lurv~syhDmx!+u5U8NV4mdQOW=jDRS)p
z^qU@BPBBIQ@I>La)KYsywMRqVh{lgIa4UX{8=xmKyY?&4mladbfI3$j%qgjk_0YZR
zn$fY=;Lzv#Bc~L$O8+|=@)1#lb@S{4KL~0_a8P)JC(Y<I7-}f{&4A>vEn-wZV7h)*
zqOlmRW#sKkG4fb%(iO?q6VvF~wXoZkWsargXzs~6u`4XS;w~eaE8v-{u=`C<f>5_Q
zdOAOfvy&lz`58xHih{+HI~u+84S$_aYMc<q@B;I@ah)q5^iZgHkQ;>fKfH{#RQKV+
zM$JDOr?`AN?CpX@ZvN=?LQhLPtu|}^$RAK6Qr9Meppg~iM`fx1!3e3<7+p3O`rtT=
zZ9auK@-<$^m*}Fjo@Ij!{g@ogsgKCzrvTBf@zoXy?`N$3DPYX^0WP`X`0<99%IWai
z(O{=iO#V%c_DE?9G$a?aHGdhK*0up&wpKYmp^tq_*|nZw8#V?*Moy^B;MA^Q{~D>Z
zwPrur6JeB<caGC%yvcO`XpL!6lx3?iQ{+}m+rHegHr@NojgTqA2U8H=mVMVI-e^Ak
zO@QM;sfxE$;)9pN`WJoR46AB2g6!;JZ1p&_Ng!^K5y`u`U8xt>4ZALuYYlp9i#Z&3
zb>DT?T~{dnhHP^di3LCdw4K5``#oV29+kGf;-;!OC$BkS@y*d9vWgMZw2Ri=dg&Nv
zX^r4h{~Tbz_uEH>3*#txf@GvFVxln&uY*mR6|n}hQ?bj>m4jIiGy0A_;kweu8!1%O
z;`~FREN2YNu=wSA;X&UVHNgDf20(E^MG&(=RW^>^{kHZZMKNVKUuJNfX5YzIi*W-S
zM0iPH@mD6d;-(^gy7<vi566+3?$ANJb40#q&MCzTTObAUf>k(c+Tt5S>}J7NBK45*
zNfRqxoJJnlE&55HdbjT;3>qc-4|6P=29NMut^7<JgQ``WZV1~?s(0ZtW_Z(gCGwe`
z@yx>|Bd}dlwxNR^JV2{cy!e?|%eeT*mpbnKIUeA#UZppZEv{fdAUt<??>_>{U0Hct
zl65gi7*0}Wi{TOm5BVcUuPXxDaqx}R0YlL<7)ggUEuV)P6Z!-p7UPo6&P&aHIW5+3
zk&9aAhW*8eZhC>ujdLA_lcMOx*UhJ7;D0Lm4EUzNb&fvY3!lmUb^ts9bR16m9soPP
z2f%-hsrVL(eZRk1{w<ZawUYQ;z8FH+9o3<Y({MH3s~jk3^7)$s@PGlL00{KQ!^ILq
zOIp;h<e(>J8lBEzjqaA8*w7;%)U8mZK4{Q!$#Y~Ky-I<cJpURpKLf~q22CyD37+%P
zG5Dz9HV;c~!2B(7gjw-mc1gKj^zFO}X4DT<Vr&Cc?-SECC?*SEKcis0vr;o@i(L&G
zjSDmg6$lm02VtstD9Ia@b)Y}|215ui$#_|(TK+LlA--I`8Jm-?zT<D28AYELTx295
zENFVpByPumw4e(@aez7?eqnhMz3@E%eXgLgFLBP@DUrjWnd39UPe1L`g~hFf3*efW
zBLa3YJOZ6e;i}qK;<4@Y*pqZrZ0@IAbh1w!Iet6*bk*5R8I)M0@FAI+nnZfRUOqcK
zvDm)vL1W$1&>oGc(ylhJKOwV2-H@UituAX4+RJW^+3>T%yeBjgKg%8BuC#5m8Y3am
z?V@FJ9AleDS?;GNv9YD#G2K2A!VVmHY<MRm%uXu!bf<HX)D&mx4-jm4Qr)!1n)CEi
z86*@xx?soWo|MLcE@GUttE~7z|MVF@73$M5;6jKDDOJ*fLum`h=h?pql~u88#$U{1
z8SlyRePSEMmim#Dx%w#R*b5NuYzZ!4ODCYE<IvU&SVsWhA?Y9}jyF?~QYLlY02hQg
z8?(@smSr7m+km-(3)vRvgWlK5b%(Zo<`+qu>X8Nto$J4N)$)`r=`{*d&3dwD6LWat
z5SC}*e@TZSFIxwY3;4`AW$GP<;4EUL9Tchen4&u3DM^ue2}5Y9z1cx>1Ye^SznXBA
zm;Mgmb!~g$d`VS$x~d>@t#cbXd48dqmNk<E)bn0*<zD~*@7)z&LSJhQ!0&%^Ncy-a
zS2X&JRc&mqb-revhT+{u6UmI~P$^z=Ky8h#hQnK@di_*qz}1(w^x-jBZ|Xi`;vVCS
znCHQF1#lC5`pTMmi-~cmtvja<89_Z%nzxE=wlm6-BD-06>=6}{*TB#fwz|`x=uE;O
z{2gN+lfG*+)o4C<5_>1361XYecPBue9nnOIkn+>hG@a~x$(Wgy)Hgl%?YCFl)nH$N
zzzd<6lf97=d5D#_mzW01hBqx?M++Ny%PVY3TL95ERaUw+4_K0VQD4X?pXw_9xO{qM
zyAzm+x7=-fhgr<NX*Vg|BRh>rt1Ese7Ix%Y{DSb-@9Sj{(vPsXl%A`t@h#mTtB3Bd
zlfS!2(;DAH{dJL6`7Zu{zI^-ZBK_C1PefArUrmzVIJv2EvA=L~mz(Qho$BM?v1SPF
zE7Q5Pdn*yI{sG?-v75I9^>HH`k|ZSu8JQvn%A=<%Spln+Pdco@|HIxnMRyjic{;XJ
z72CFL+qSI=E4FPL72CFLRrrr>O-`>~Yv!Car+enUFSaiB)&Ac7y?lPiLx5C&VXMq$
zV2V!&U*{ZKY%Eqdg)NLU8>rP%%4@=oP5IP@VtF1g69!<Ac=Q11x*w!L1Yi|qNG>@I
zb%?y6ILJc*q1Wfi1RnSOkdmndExcYV*`4@NQ^2IR`5!GvPqFi{akj!8A6Kq6AV?T~
z7Q5K&X?N+2ai>23BrB~5rAo4m509|s8oTh09%xG!#k@KWN`H7*YO5Y0?F%zH3Y=Z1
zb&7Xk0`~KN9@tnCSC@A!%;oQI()n!6T~p^<=<B{z&jiVAj^CA&C%3Ph3D6Z0Tu;w!
zw`Ok{@}t~DvhuNG8V3w0-PGwG1*y}ZN1LH7-$|FrYiW%$jnRYJ7+7|XQHc?C1WSv6
z_Ni?iRWeOSZd|)uUP&fV!eD@{uQVLYW;<lRS-|)i9+hRPN8VWwZv8nzio5}<?9eLf
zt47Mz$%zD6WRn-Ka~<P5`H_CHcspKi=w6zN0I%jH@Kl#>k-$<DUCf7vI5#!3CB=YU
zXW4qwJ1vrA&rR$;H7Mo>v})TcqOBl!M6OL_m>A#cJ+v}X`J+wbewgi+6k5vDMYMWj
zb;0%39qX1h$cBmgTKtwB-5;MW_?vScMA+i<HM8>Z9Mgvq(xIt<XgOQ=!Fcure=Syp
zfA?AE!}Mg(wh~UgJ&p1!a>FgWR?hpnpf`Zam+fl2)2I1jAfC+{=cel!rHR!t$C+HB
za#Ex1Qi&b8^%<`^Cxww(iyjP;omQN~&p`$e*z9d#ndY7+eZr4Jx*2zd-sOONg{!*z
zQnQ8k)OCDI%7@|=DP-FV0dilZGyc8oL7MCh(bdvFz||@<2keXoB4>WBE{w{1Nq?}v
z7oFKmrxoDl>#gZu+-=WZL}S9P=W*|v-MH7>X|D&wthQtWS9IY(m5+X1e;}g3BLcr!
z=tq4`xv$^y@JmU=Dx1}|uIt9LExE4udG^HG=q#c*F7|yd&8UXZz>T0O4^y2R<a5tQ
z3HY0z7k=|EX_$dh`lGaOobD&|e<x1%4?}eR?@X{Md8Gc&IA-uMPw;VtvIrq#YoMJ)
z0$3PLTD%B?P(HZ4{o`X7-{TFXmkC+#slplJ$3ras255Xix-V+{zGXcb2%>j5Ka}u7
zkrImN><Vcw7Fcl!s58dE<z{}UI+mZ3$WwKz*0>Z~0MVmAp*X%HI2X;7pC7@k05xQY
zv4M%WlEFp>7#Y1O;1VZI#pM^*fT+gMjxjm3nkN^B?($WKPLMhgbT(ld*B>(B3Wxl7
z>PK-c|Cc6iun=I#kL>yw6R*5D#s@~;UaW*iMzzMSz@XK^2lctQ24AiBY~dhZE)t)n
zFupIl8#jb_uu6VhPcV~q^=hz4SwfwZvQJja-bdhF77D{_Rv(c46bo%0p0WZD`DRhL
zE9?|k@Z<BKS-hQ@7snQ!-!^~N1)n@?+<4;_B!!&j7e)-7*2(p?(v9Gzr1kWv<re{_
zPoi}yKRQE!<i#+th8qOV)<DL(L~$igC+TRif5eTHkDStW1(|er)SV1E-%3chm<Ag8
zoi*|M2Gj{P1NGU#E?CZ(K&)D<B%sm4q$syNR%Rknkc8>VmscJM**^r0la{>2#V+@@
zKTSi^%vFaP<=zOmI7>Y!qS6W(6+eY>(^Q}2F0i&<q4U*Z?F$BT2Plr7c~1vCHf#s6
zw9*4-ndi+2k6(@jSIRG9rEqngFIop5d)vF)-vysyq6yw>x$!8z44s$KcV$pwCP9D+
zSpJ6Ag6M_G`@k{OX6r54iP88t1r4nyh>C;5&Z(~Aott%u(Xd*%Zn{HmhZ#6G?cIMe
zg5QV-MkTNo)bLvI>?QbHAc0c8!d-K}W}xB!yk+=O!Cgzbt33QBLwB>dV)=0M4Xcz0
z3alv=Wj=4ZXVzU#+ZFnW-!TH9M$8CbT3QaiD~%4^OE$gzg^Y$-{x?UxvpTqIaPyew
z%2T^@&BoUzr%s@3=~FGMmubiT;{tiy>uuhT&t5`!`l@4S_FI)?E64Wg30ftS)w^^p
z+b8Jf*l~mBefU6<__PbPg3F}p%CYHBNV0OgK(PJ+?g%Cb{hNlZ@!uNhj0+&Ykg}vR
zvmIj}$VkHjtY2v=Qd`}bCr_+;ZiS{eCe58Sh}+=t7FH48CUj3%g0eSo>Mfm;1JisD
z;NIF_!0gsvT|A8-jeJ{tBaD>RZ!}ilc)Hj1mX@iUMKegXj%SGCXOf;FFqw+Kf;M8m
zfV-_eKz1(4pIvH3U##g@=x?8PvA<?^g{d7rL2^0LTo%7bBDG9Q{=Tg0^clGi3)%4N
zJd;-Q57}4wha2+OJ|n8b^mD=S9AIiwHS38H^^)fz=ZKuo>s61coadj;h>0786SHqB
z->CZ9LeqnmSR0oV)`PFNt*7LiHu?t3*mOv1Pg>)hF1XoLLAMMFRlV%FdF@mbL#3@F
z03`s|iWuPct+Z<7G~0tgIW=XvCBH(FC*jEjtoMdG0^(A=CZWf}g2J27Mh;3ICC%>>
zn0letDZ0;L^Hr21h_6XC(z9`Bxl7nL?4CdzGqNAuePL<Y7Fk)&5moyzZJ&)`We`38
zcCQg~rbMzvsOBT_tb_={qycCcx}0mp)p0nVoE%<@d1qSxcFDbNN++lCk*gC8QKG93
zN|DzFcvfo$LoxZ+yIgA!H(A5PoF@u2B#1gz0(qR1ubH1L%ykq(OnmBL!unL}sEQu2
zK5lbjVF=|V+&TIxYy@sck#gK0E6d`hEUY68i^IFp*61VR<MQU(nytrFYMEhBH;z2W
ziAXz(UJF)GpTsE1R834Zc-KrkhP0S90^?Zvb(s}zFRN4-69D{W)g?idc61V@xJd}^
zOVWzZHx&{*s-s}-+$vx|mO06`VeEDybwMdnpeA-ENk2_*>3{jYYr26Q?7RBq0MmwN
z<8!4|yXIsBR!|NXN<+<NxO-LP=-!V9IX*QWd+uEId$m8`NCpC4PN$^g5Szu&bxdzI
zg<47%y&3YLnX?Jc5jB$588kK-KQEjysZTUBROKn1EEnW=s5c2sv>6@)JXR3+##~ZQ
zbR6$!#Pt|C!SpCN4W`CC%2P{Y%6462Av)`}$3#E;PR`U~5)V60gDbOK<^mBmP_b>E
zivDQE&!Fy2i}@EMyIy#9{&m^&Vxh;;?nXK0#HPnM3-{C-J^k&`(#EX2G)FJjOw+YE
z@E4iiWDj_UMrmpRYA2Dq?KN(M?8^L<uq4&LkQfgR?P(9Jq#Sp4bwPABo&8oA{Se>x
z9UbZu_n$*gSo-NxHV`17sqf>zCck_$*uFXPwCrpg|J}}Kn$Xr<AOQ3aX>+F;Zh~<%
zSL4VjGTIKzNP_xNvW=Bk`}uNZMervT2Vb9Ve~G>${Id|=-8_CQ7~c{6@m>rkFkuG}
zvdM`{O|%FWW+WsRh~5-IqG=DGIl&m9GUT+w@|NCp8ty*qjXN=1)UQi?z>&7`a?G02
zE1Svqs&g(0Ok@}Z-}tVgtv&XNcA>?q&Xicr9#qp!eIg=h$QdWsuJU?6<lIv<0Qt#@
z<Lpm%Vq|CRgj429G)95ey_41)0XqSZ1VVVHF6KaKJDvZBvsBemJOAsOv!b_PVQP5G
zo+%Wyyw8>}0e(Z2zUw2|&W`FC8i~L>sc!C)mXcz!3p_Vx7V4qT7`|}Ja0scunqigy
zFyBI41hSNxgocGHWM^>;gk2UcDhc*Ml5#?aK?k?~PoLQZ?qxrUgzP>&B-^45ow6IL
zk!EZjY`O}*r^{da>0)(UNDXXT(giZ!lyiAD)u=8Mom!x?v7$YeA&MB5=snMiop29c
zHM<JhB4@^z#lnK*X5-+cl1RxJRHr-Cw>f<a#xYHEe~O|GV<unY7LhK7T(M{nnJ<`P
zI<_QFAWDC`jf*N2=Hpl=mbhN&gifP_Fo)~0l)?{_cyU}Mb-ND#`hi_lo!ErvaHE7=
z1+DD7F2jzIgMWog@-FmJiBq)EMgleytGWXGh2dWT*YrEnaognL6Lm!|L-Puee)w$2
zjx7$?($wGEuvABeFd^s;7Wxqyc9EYm-s4q&wdbGL<qs`y?WAu<jEoxyi0Hpev^$%+
z{BofCuZ3clG;QrSI8Z(>_4}OBEIR6Nv}3XdVL=@e3Py`%on@Z}Kp=la3=X!BC&(vd
zg0<rNG8gGlgrit;XI_+86rekqJx?;*KW_7n_GRPa)ryujh}#+Yo(#^A#1xo}`)bog
zqq+yKfYpp4l0RlM7%DsQ<!*BW7xLa_^KI}tIob}4ljt#fEb$fIAY#p|j0I@SKXhY1
zv&alOpLp&-=kDl#$kE)iG_0K9)ASUc@@dCGVmT?d>t8>;bW&G>fs!~=V`EtB;ECm*
zVNlh=!n<yufsIvDI;H%WJrSX9BqxyH?}M&;uZ>&NpChf~@SNi!{JKPXuEUu@^&6+y
z^V%dAjO=JZ##{JOP^aBm*KKFeb#<}xym1g;P@S(rPmCe?EoA{vyo%uan$CixDo6gY
z1)r@3|0afYPTOjnnOLg%8`jIl`4up!?y<^7j1+qXKL<S}JR$PC(08CBkkF$<64J(L
zr7o8z(eE=)FkaShtTd9b6XBBfh(AcKKF0F+ZtCr9V<UFQj-G##-zSZ>i&3M_a=Fm}
zJB&XAN88OOfRZ=W>)|uDVWOsm+1;FGwSOqsp>^P{Y953*%iJ&ry=gc(a*B=A<g8xN
zA|<S3e6iY6L>>AN3wd1Nw{UBl*xLH)yVdvgWqtE^@o(E<w$vRAhiW!+Y~#i1LX<_!
zli*O2`G%gT`(U$hS*rO4TgjOy344NW|NF_X`{5&X$+7Q8yKbfKl>4JwZ0NDZBKF}j
zUGd=iHHyEX(9x-jciBNGEB-Q9CQ)wLkA?-}zlWDuLSSDTZ;elzLM7#65_51Ucs=?7
zrhn%r_Db>C4YbffA)*dhg;s4CtQEAjM!moSvv&;sX1`Tcr}MKTDQsJsi){>RUnHpE
zXs|6u__}+Q<Ydqt`EE{E63&fFd{oWXR7_5*nXb*Pm_+ZE1e^o@)WwfADV+e$YSYJl
zjlIIykhQh3a9uR5K*gh-R5d7}g=J2In31fhxp125jh8FofmB@dNJNt019^&}`f-&S
zZq&dukbUjGUU(-(3Q%1;57Z4=q9IVj<C`rHAoSQCtqK$TDTqGGs28HsQmP1mlg5fA
z6rH24*uDgp(XY-pOST(cV@l2l8fzX~B+0Z(my^9cSuS{h{&gHxAzj{aw5Sz<5>s}U
z*+tURVlk@$yUz+b?HXkc5w#Lwhh+<gVQ=ATd(L3cS-u9d_Udn@KF$n(2=8c_xWh0C
zw%B&O<0k`MjJcM-MW2?#R<*Wj6fQ{CCD{Yy9)B;dcIN(*QM1KeHx`vaVf1`~+`J8j
z0xR|=J||yEo_#In0g#M2cAI4`R{6IiWwoi#6cyS?r#y-t26$QO$hJYSAV$4cu_$)&
z8NLDXd#W!Vbu*6JAT!*=rxV^85~B*%z6%ht8E-#n3Od1WhP-m`=q}7{vj~3%7=7ET
z_`0KGQY{B4H#vEXRM=6Gg7a)(JXOd_wSh=FJ_zu1iOSF5n0{@$<>xfug<oF%_5J%p
z!!?s*H&h%ykW5SI7D*H@TxeXXWbnSn<Pf1P<}%OMN7n4;KzkAQj~R8Hn_B75)cHcE
zlH|<D{+=wzCZM0(hq-pUL5S9q$IN?P%T_-Px}MYcz#gc{HNjYdR)jkvL3X@DGK2U?
z7hW{g9r3&x?p$nN{I`4rxOwwv5j41O<REb<5L?BM^2PfB@f?HE%cE!xkJ*W@s1=di
z8A6fAVvbRDo<6z*U})O4R-ig!whW_t^=Ilq#)o+0$Fl4!IIj-qOgN{C97zfs@5~Ac
z4S0$e^8P<XI+cU^+*1={HwFx{@EqQcpR@7pmB?5<I$U@n3S|aC4ckCog{Ay897dgR
zNj?$DHI#1;_g-~D(aErh>*;yZ0b>mDqYNHhaX_ur`Mw|uLMej?0)xAx(o&`cGpX5$
zcP~gN;y`G95`g`2aMDO9HGV$6$2z(D!e?MEyV!RsJ78;})EIoEZ6t<C&gZ?x&Sw_=
zsFqarHLLN_S-w-m-5n(TzRSPiTljJ@H*0+k^CvpFGwuCZL7qLjIy-Wv+MY%4bPEe-
zx6wVl`4QlovzB9>Ik&$GgC;U9?XLWJ@t%smy2iOqaMq|=FK<!vRfc}N|HK{m@WX*M
zG(!hNR+rV+HtB8%M+KWB9tfw<d?qyL>6h}w2fYM{4sSvINa_r8bI^+Oe<D>6aNfPJ
zwEVDa&IuIG-88t6w3A%fOXZo*bcqeJ_|!6>D?g#!zL^rK!#2cou!o9*%p|aZ4Z6TF
z?D+ZD3aRcv_lK7c1>f#PV%u>Yk&IAATuUtMPB5M|ausOorefUQOVnG~Ue{Tr;Uy@#
zVFgHFXITBUY{Gol^BDI%81dW_&$57sDwQQtn$ur(kD5d_SW3Um9&bq=k4)%5U;=Yy
zJl1f^EAq?QK3^@tlpEAh)O7Og2W`-wvt<w!MXD$3QS9^W)&BZ@DxVh|ug*zct}5RQ
zh*=@}fg44zY1TUe!Q2Lr9rMXphgmCN#{d%BM1J9;55FxIjec4#`UD!WMg~9h#PqD8
zc^K|DbCEGkBwii{ccy;w=Q&TG&k`(Q$~1+vKKf_>WK0rP5TKAOZsMQZ*LCo*6A=r%
zJVY<mN+=g*_VdxDP0?{T=AtE6W{9^xI1hqhxKgN|G4a7(o3Xq%fIg14dBta@XB%Me
zt=0tn^-}D9LWwB|>_b4kbkJNZ5e$yWNE}W=x-bOpixV0dD@Kd*U1Rp90>)ro$A9xW
zW1XzSq|s1xu#xG$K+(%_<BbzgR^dX$<Vfrx_5ZbBkE`2BBQTa8wUH=;(3xL2hln)L
zmBTxbi3fmNXXIg?NG|YTjn76k6HmFOSNt}BH;=fF_3#Vgf%NX)Go|-ZJdJ0AZWrcl
zLfA<{V31FSQZ6<z0=mryyZtM#gz(J1&rZ9_O2EF%T;oBJEQl$c7v+nhki<IAc1#?V
zPlZwup9P4|N_tDus@U#Qj+Y&)_BGOHd8FRxC>5XP+uHQ`aPs)bzdQWs;hVCrF?+V=
za_7Q>3tM*+_uRqlO1O$4*}?tT@-98S-vXEM7&mh^nYD>It?K3(p?J?blNHyr=c1am
zOS6}<NL}nks4vFU2x!D`VdQb&C(IFfI#E^r%d?F7)oR$f4q>Nh>Dt8$;G8hk(VIY5
z0_o*zO$ZyuEAN@*Iuf}`OGI~@3_nOqoWd!*mcq<mi9)tHW)wLXBYBdzJ78nL*n*(X
z^p(oE%S49?KZWF}@&Ei+Ju5^cy_NrWbP4tU&nU?MpiBM-UGhKZlK+h^!TaCn63Dh(
zi(bB0FPry&k(Ybu8Xs)=P6<?g7p4gQP59-?{2yiLe;(%0l`hlx<qiu33<mgq^*>Ig
ziITD3U5LT|7=TWdGHcl2yC+0Nk-(-PAExnOjzn!pb260JU16_QYY}61gyH3-++HYk
z_tl3WLhbmn7`?0WXWcDKeWv5Uux8g^=zZt~8bM-+%F5EK!fcIGjV)+T=cW@92m^L$
zb(R=mML7c|B-``S4fA$!@v{IqiP{CE`Jg&rVRh}7Z-VTIVMq6gGYKA}V6{kd_?W2;
zNdQt<0ty6#ndnxSMmK>1mf5MeirB*}DBxH9lsrR)sUVrfI{4};=H~kjTUKu3G46%T
zE{atMCz%6}ok$A^%|t{tsg#}uV%xY2$8N?B01`01*8BBeOF^|k1<ph`4eq`clyo7B
z;6(w_=S=Z#`uA}B%0n0D!$_#MTP5qBb3=-meV@r9eguz#xX;s+hhDd(cUTJ)XBG$H
z($PdIxuWYxVh3BytkHb@{*OOeyK7Vn4U%@>OB3;WiC{U2$sbJd=x)=+UwthJK!H~D
z!VDA$32f%y?^ktQcRLO3nGevtSixl}s$8LLJ02Dvl?J5F^dfK!I_&d}?7K5$*D$v4
z0~PccRKd}Kr|v%sj_l8tbPIH+>JXs(s?M*A^B^^+A|m>XC>lwDwdSo9z&9ap^uid2
z2;@}y<6s|b-QhYPQ8;N*0x6l#j!@b~&2rYHr4N3k=I)w1J)IWaSXK0iN&J`uz~*=6
zpch59;U!=nXf_^)?=7DcIc2|R&L;Q)We-7ZHpi+kB)wSikd?zW+bKG6@8XAky3lt1
z++u?kJAOY{ag!#Ld{?QAOK2hN-!OBZM=Pmkg#E>b=cEISW$E$6kZ8wjf4Q!_j>A4f
z)<L$YPz%z(=5s%CPfQi7zGSr3kP!m3EqYCv)a#&X>BXS7UdBfTTVa_F|6Sfr8SEy%
z-JrGfjk}Zo`}P#~=j#jK_g@UcE_8L00~iQs?b|5u|BXQi3pzWSI2+O#+nK4VKm&pP
zV=&_XVh>db($)hENI_SxKVjPzXG><i5C|nL2}zJzLX{#Ei<*dyB&+d?PiwB$p%=rw
zD`#yVGckF|Y(PA^#d3gp+U%^r3}wqJ0PYIQ0_9d&^Rp9z9(h$&h`$1OsgwopDe@Z;
zs94+~Y@k7O6^c=K2sqxO0D<I)PMi*oBqq56j(dUNmWJsw+=BzSG)GYvN12EFcb?$r
z)({JC<;)3nWBfFa+iZb|WXXswNoDWAriQJ<${6KC3dR;e(y|m;$3w`dI&Lf}*_Gl3
zQmAYhyYojl%)RL3xb6O#kY$WuF83rT4SYHhG#-@$;GN_2V%_ezH{-ctX}^B5pO$)6
z8OCGUc)hkkskJN$vTqjI^u~hy;*$rkurCj+!<=FMTJWT~xjL`fmj1obeVNzQS~(I^
ztZUxX1Nawd7o^Cu9umlJ0nG0N(ZBmcIT#vSo4UA|I=j#r|Hl{kN1ycn<%?`-Ys+s)
z{P3Bn;iyF+AtZ@GMOsgSY&I%h68ph=F;F2I?>HRphRba&4|9LJ<3{JYw~FUAyvjnO
zM9ssu!nwogY&Lwq4sS7_ZU1nvaR&~edzPD>@HPE+0Hm+urxST1<L2x3&gh^+(=hA|
zV!Oj3$8`=9*fk#b=vRQ5E>YMx)&`jqC`(`yw=mys8b)YO02wY195kY~u3t|lD@`=H
z125bekRqqMA*8_?0?55Z!B2<{@CEH^oDBzAFhn*zhQIk~3SpM5yIaPANZ3KYA4Ejs
zA*IHGqQBg|yqVi#hC%EvP%W9cd%L}RhMUEoy%`t|wGBF9d@dgF@bKF4ZU~{Ws*h*9
zvdYoh7j$=vg}=qNhv}QGxy~>ht2Zu?Pq)Vzz69M*-Afj9aZmy<>uu2c?D2hbV`}UL
z__?iFKx_;)NYD&>DS8(+{<Qe&`KG;ENN(0{c{pD{JZ_RIThYPcU#={d#(h;UJud^@
z4rm%YAmXvE`q>JiKF<hJ#9qsW^K9}Encz~DpsvkX37j9lJxLf$LX0m41WtsJjv-st
z@qG1No98Et&L{)^000w`>IvmdyBi^!S}!K;Rc3zBVjl=NX7aybX#)Ms9@ltnqS+?-
z`mJ}sqhsH9QSlHS#iQ~2!-(7-sf?f*z1SN?AhT4^KO$6;kZ7VosS1q1CM6jG(gp^?
zg5ax#S`Lo2#;E2T^$XW^nvXnI?N+l7#}$onQ0dUX^Mr@LS;2mlp{R^FAJZc*<%_7$
zH#*yvo#2mD%yqd}Tfu6Um};O~F2&JGP>v696`UvdzT%b8w@4EOH|1NUg{o4J`A^Fp
z24NHnIB#bJ@UD(D9)(DXYICd0pWjg>B@U7?&d6T`Q5=>bo<_Xtp*gG9=QWgBW2!!Q
zfa@xC{UXGEsSn<&`qK(|_C~o=L&<uAOAtk~mtI?j1;I!?@Unl(jgp)p;~}C0BZ$cj
zO($R0hO>P7REJSA#1~LBBn60pt^nS9k~a|n*(y1Pz;OMJ_1ZqUMr`5C<G;nNa91<s
z*Kwmu<;0%_a^Z{Gv#zVAw{z^rAZ>PqyeHsF$Fo)Vj-*><4YTgEsyo}J7tCl*e7EJO
z8NsCtj`&ogj6KW9;Sa#T?>yYq>BEd6LUi6>_Zky!Dd<j~^a?qSlyMo@aKteO-P_g`
ziu`4ALEoq|j2z;$foqwKWU7vA22<d%DYZq6(U>vOaM_#!NVPI1R1-0g(Z^<NnK2gS
zSlry5c=C>u^3lD3keDbN9;7hwF4FzsTZ1xV_Z_hiBwJN9pM(MjNTV|1!J#vfIQ{Z!
zggG3b^BrD$3pf2~(gPL@tDLMUB^s5;q>ZUqXtCw5>}u@E5^ol7k&Rv>YRQb^`V9QM
zQ`1o%f{`KK)^UY{<$SSicZ%myg|Khv2)1Yg7jO0%Vdp7s#K>!M_G;298n}sGo*P_g
zqBpkAEnCv&aTG*8hZW+7K?#Ze9w?8|{h4>jb82>{nAfst)azO@*ZjfFc6J*EPy77h
zM~aQ^`GhUgL$qW3OB1G}2Be7K@rJ@4@l(e={GPHhUJ`hzI!STLceuNGJGl-p&g6!l
z<}oF!AN0}S1j%2f#&6qEoR74o;#kuN9bvG89vDC{-^HfG=|55gaq?L&%73LGATpdI
zzS#gn{LIwyuBj#Wc6-v5{X0C53SwE8d)m%KIbK?ksYiUwBD|Em={Ib>nx~MFm^wc(
zV5f<&!IDOMVvxL2r{TvaYLSBwyPDCMsg>1uM!_Hw<AF~mi3yjY;rv0}fQNN2eAPt}
zaMu2i%OUZEj|lTCX^=_R0qn6Wxuj>-r^ntf@m+NXXkY)`jmvQX$!Q7z#;I*9Eg>kd
zL{>DmH-vpoCowcJ@fl1>F4GBRj}1V}Q4kr|)L^C3=w$C<WXCYwDQoelbEN|}x_A|r
zuuMTjE3fJ9OXtx>tVGMeebg3lgRE}SGe71Cq4cK*UXp6gc|O19MA(roE8fI_7c6(T
zOp_uLD_kT`TgE#r8=~~X3dP^b-JfRmi3E0<^{-=F@45GAfEJ&#Bo(Gg0=QPON8Sy%
zU=~CT6*NQ*Gc?3oJXo^tgE1I?DWgzq$P2$kl#!jtTHFS%xm=5r(2sLlM5p8-88wBr
zzvJ7iXl7L`rwzcG+yMQ~4`kBb&u0EL4SC<=oWKVZT!kP)t0IuuhZU&%TUrEgOx7|<
zU&i;gHRu_)jf2161B>!TY!IW;FeB`#ZA0vcv2Zb!>5{_A4r%Fd%>WCUSUYSoB97do
z&pv5JWbS+ll6_xGLQ%FP;{EJsmJ@*-m3hC_77wNScZ#k!mPcrR9NG`h{5Ymg5xSxc
zy_=)6saEv~<1hsIVlt{fA4-RF(${b>?qJ#ZM6h)<dgRTbk$gAxNN8gN8-K=3w4a(;
zuf+HH|G7LfdOC+)g9ro!#0&(4_ix-G6GJ=G|9<an!nStaV7u+`1uu}pQBr$vFL5>}
zzi5p~@H}0`+c+s+m~f;(X>>1vLXdoMjQ)DN03`rUaGJlbu(XDb-5Tn4^S6s$8Pve3
z*z1<5Ici$n+V;4?`Mk?+&60N18hzi})5uCb<!7oG>Z{NBQ@{QLQj=`jQJ8evlym|c
z)BYPe_$y0{sm6pR#e+s#QQLqi2L%ry=Dt6^hjOsSiW2Q_*QhFOO0o#Y15cGmf|=52
zhXh)agfnuvXne6Do}^>uvNK3^p9O(p8Z7G{VGW%A+dVwNK13bK-k4Z~QgU=<X0>ut
z=-Iu-iV2tIN@egjY2@Wrd%YFWrk18(US1vLyKt(>wiUNlk?gi7`!>^Oq7V};%gf!8
zcNE&gN}ZLb9IBajSK0YYQ#G4)W!>~e+)2fejn$isnkk%u4Z|#g+KL|fi?}Lga@#)!
zP~GU8zZiJ}&2d6hQwC7u$5C@61@^)@ctIibaUjV{`|b}e=Ehv0G<=eeemkU(SQ_El
zG`6*of`a2<^ico>1rxdZ0z|v7J5BY9)j2KHSrDc1hu@o;DiF?CKrD|{W%rGAl1`}*
z(Vcv4Z6h0Rqp9o%n9%B?>TBT?r&04!;%V-}g7jvDmAYV93R6t+%-%_%i8W<Klq!PL
zCXiIxjgpD1jAwt$6LWwE5Etu~xu=iGDnZL`L`xYfE>$E6ez(p$rcDq`Ev&x*1whf!
z$<LJb{XK+a%z<J_s_WUofh|K)g@QnfLu*8ZLp5{nAK3X^zp@75TZXui0z@MsOe!()
zeoXObw_rQY_Bu)QL2I<pIKLYk6YN<DAk+N0mg2fj1cA$!<EcgVV@4*{swdA;^8(=v
z+!&+*!!JOy7!8FqY5S!X{CueYVnGz;_kpJb5(5@c=rqe#ky!o?Gc$0X*gu&fNi?zJ
z+U(ZzQ5H&TD^&S0$5A=(5n_m0X8A@v*8c}aB)G@^Sfc9~SZsIa{+*{aA)^<_4IFAz
zTbu;7E{6CTa%2~=@5cM)AbIr>JQtK7DwwcV9oi{YW9&FBjOwFCC47Y6+qY*ejjW$I
z&nVkZ$EOwSft#Pp<BZ)J!jwhShJ^T?Jmf0@2TrIYCtQ4;Hi=0%^b^vc2B=by&*lDE
zEXC3Z-%n<KlXxE(64cDa!{OQ4;WdP265TlC%KG^ZH)OqOU|7uq>jN`Z9W$n14o67v
zloHYGosI@xye34okvPE=cQ&ZB@1^RfQI06umgP3)p2PuqNHixHZ5q0FPNv4=P&SRW
zSUfb>55_WCg!URsrnVE5HMIrLV(X9k-oeL>;~&iR<#<c@EOOn5*(%mr^51#k0_|i0
z#j_xtN=-sLZ9OPDOF3PTOSRBGAa|j82%{+kLK@Ji>9VDT`J?xZFcfu^lJ$F#j6{Z}
z<&$UetNXc~MkcVIsV6UUnfieZfp>v!Vb-Pl`-&MGg1~|na|KUt&ljfdTw;trgl(GR
zP}n9}#*J-AChIjZbiL?0AfAocCT(_Og%&i{Dl{JMnUFevDRdziYK9SD#B<C#y`3AW
zn**O<VpT;kVIEEN3qoksvNy6(7N08@KWqf{$Qhh)CCUWXJ#z5lWefRz3+;BcO&;{S
zGR12hHT^Un#%S;p+<3$&{drNAxbKi<Nlxi*%G3f3<i!wMBwBE{hE+%=@mPC+L(oNA
zefWWxmJ>%2!b2J;UY0grXMHn#V>fPB{K$(J7!+)56l#GXE`=K^>_@u;rbjlKs#&5N
zjk*hi_F@4nRZ<X-D|aby=$2v7iwT}JMy%HoRe%`VWzrY+@N2FXX1Qs?V9(|ip%H12
zOFB99R!3a14?jf?JHh`6jn&9F&|$R^k*Nr1oWt0`h%xBOLeV`6)^gVXr<O*C>hIl2
zqPvZ_gU9FRp400qwQCMu&!sdlf7PUDRR0^%JwFEl4g=&BzuyxJ|5J9b98_eNtpU44
z0Ouu*$np(S9>&bk&pl3Zyfo^+F?irr$x#m08AXa36Y<i(WYjbmRYgPf8JW-F8zJdI
zxl2^md^o8xdzO5NQ#FucR{@vi6K$Q;d06I4Adv;<8dJ4GBP0>?<k{H#F(3J+RBDn(
z%xL1_P<LK*7J1+DwI~S~EK8Ec<T><qOH7eNI4~gbK?0!7Kv)>sQ*O$L2@@Byhm&>1
zRT)k7<Dtvt7WwP90LG{TqBx7uq$jXZ$oC<T)lv^rgT^pjHBCTctVc1gH#zYLkjkln
zso;X*(Cr@}WHm<v5J>NQ0tyO)U*YGZQftQ8Y;5CYFlHfY5?F)4(NpE#zf1WBM5Yle
z&yz>@m#E^X7UC<*393xvA~%YWMY*^^gR(J7sOj@Nx9IqP_oVVNk+Nho2m?D8H=)Uh
zr1S5*ge||H>%TB(E^*}ApXXuNh~ze4)6jqaRmn*u?u?+5JCuHuw3C_|6X=`7A?%)<
zU^6B{n|&bd)Y@r6|4w5}8TPl*NjVW(BuzsX7*Rrr*e8lAnuF8TIok8O4n!KBk0{}_
zNyETfXX>pxp1F$!S!@58obobAPzll|;~(R;Nu{{lGt3n>tp`ihgjO|}A(^BJIJXNe
zSi~>|6*Q*1!iX?OpDF87sgC7*IQx0R6|Eo*2d?L~daN7xf>N3{>{iSE*q9=CQ`dBc
zXcx&Kq>LU&COGH|d20UDq`G{3Vv}<6UZtqo|I{WG&h!IpSQ0DC7hegIU}V|4*I{K0
z(Z(aD&c$gTtF}?@uGpsObefC17H_5**3YtG1EMvsvkZL{Cw0QImbWUliMMFTrCpwY
z#%gM-ZIoxK-M0sYdw}o<SZy8fU<-~L5Vyxxp6+~oD!qQVea9j%OZ~ix%LZj^);jM^
zpfNo%8E($<oZZweh9FDoTvHUN(x0CpKn7UUv+LiDkTkt;FSXS>QA8KATNMPcuz$>2
zEtfQ`NE<RjUkBOG<ND^ipqveYzP+stPpx^*i|+iyT`zWuwS8p?$Q|5l11&RnoZr`!
zz$5V|FMVSh<%rbljd%=yf8c;U@;ct*9sf3efRC8P*48<397kuDlc}YtUxKE?iE|sI
z9q|T{&z~Ix>#>NQX64XEjC&#ZaKc<#tb|KY5egV2sg1Jluczm>Q`s*oWZuT8_>wY8
z-T00pz<*8IqM(kuD3;YDjL%yIuWd|x2U+Z+*mO$xuD%u}0WRbqb%=6w3|>y=5Y($|
z-6y8rdQJL&b{NE(_TF?WQ9Vj@c`{nXNb$%XwS*aH*!B4v0_A`wPOi+CohUi_`D^RL
z9WJSOE(hK7mY*|_7Wh9nG!0j2nt*Zr)67JP=a0Z3XxJ_z4_=<iT=PaH*&}b=`6~@n
zg_T$HZY>L1{Gq#W9F}8`1(-+m>0{{;2>Q@|*R!xEOV&{I$BxB7QTxtCyqf+!?$ao=
zOH;CsN<$iEbW3i$ZS>4PoGP%1e9g}&#6I1U8xolQ@Ia$=CV&z~z6nR{ND!s<^3*vA
zA<vwbbN9_6sAjLN3l2Zh7g)OHMb-i{v1my?rs}#;;OfEM;7hZLi7DM)1(b-<!N0D^
zp|k5Mre~7YSl%i3ER;ai6as1kU#0P@b2n{8HD;z1-3PnKh3;LdnlCt@Fjg(;@J1s$
z+$38?$lvimifT92oS=6w6veD4dx@j@0=dQ2TtaHk<}j5wJ;dGa*(T3EC6Fcxays^@
zBscvVnRoopS!f*$kWppCiH9els;wD9Eg-u+nyIYqLfF|fe%LK*sVb(C<LO&R=M4A1
z9-qLNH_P!1eiG_?RASrpshfm-4*d4V?}bZPhK0m960kvciGV*?JC@!ow}c~v-h4l(
zPPPjQ@u1;Q#DYJ)39D|nd3~VNH9v!ZZh(l;SUj5XGGQO|yS1u`YLQy(x=NKsqe#sA
zJF<!5*XzWg;TJ+(mB|)Zbn{|RxT~_ZkDZ7cV-OwdmS071&?jh4a{5Gof-J$fRmX%|
zgD6+hm$@I<@=O%qBU9Qp*4J_JSAJn2m;QX24E#Dtdho}_vPp~vh3nWcfY;_VqoYVT
zyC@E-U}7;J;fR<AGo@()t2CQJ@6S6X7qbZMj{_ir&+$uGzIjGwcJO6hSPnI&vY3O1
z@$QB<EKGL&B~}7Ax)jd%l8p)1k<{kH>w%W9Z0g3x^$D$$W}}&+&gLAYspJTM)QZ9G
zVcwAwQ4MitDU&=O<U5ua!ap6^6PqEz7<K#6vAVUo+OmUHF5A+FPX$_N;7GwUEl}HV
zAtt)UQb4Qf{R>0tRrfzF99|nN15BlK_Z!HquheF`)we*12qKve9<}N08rp*IDQK&%
zJcvuTiV)c3hr;{cI3?{}cZ*=#lXGYpLqlACB2ZoRivrL6%qC%lywOB76?LCzdkJ<K
zK-l?ZkOIL~0V~Be>-QJ1Q&*Q$*z&8vyLND~AL?LhJ+elwO*o40e2u%gj;e4-zUS{j
zyO@eIlo`fffL2KNEGhf}mHgtbnJc)Q7EsGk^}i^folD7mg^#UI(ko~wd1VM2kIy?x
zKPQl|C7%<w4_odOAY%^^pO?3Z(~}2#>}z}>4yJ;Ljjw%-o1XFWb2+weZiGLYYs{+J
zeVRTf3}XRD17EVrYv~s7`!?riHaEGX%`1(lM@7}nyJ9$~oto=!N)1_1+=?WgkTr-9
zu-u75suL6-p*b|n-JyVn6kvFf{rvjqdV9DqmDXhSIgu6C>yM+B*plVHS{6MYeA243
zMK`YLhxftlKhgPt&S!2Sdp}z#4_=vv1iYJusRmVP;O3B<r%2JupmGpd545!zE5)Nz
zSW56?=&Gg}?-o4=%JQ!)0I!mTcw0+_A-|bFTVgXLrg$+%{;>UKkN*+f>IgWvzka?q
zqT-vYVK?tPydNk=CUlJ>&>4Rp#!i16K0ArM+JU$#xssdlWmR8tKj{Av1E_h>^#!IX
zzKyrrU>E1(`Fc3NP1@TPq7#rcpZIfR7?Lv>UPi|({{;~QT-?=n5>7~87aOeFY6zM~
zYrCG1&ttFfaw3@DJ2ITqX27U2E|JW*m3$R$F8{||e|E(J8d$DYQ(<MpSLV9Xa|%`P
zE(?K)^~3#J^AKA4{AGD=QmP}YPpMqJz4F%mQn<Yt@qSRCL`6%ySf(zpn&;HHmgzL>
zWQM>wRuG;|1#y_^<B+E8=x=1U?o4jjR`@C=fcEnzhMWHHPz*Pqlic3bJQr@Upt7dB
za0#uZm&DNwz(DM36#e0ErW;)KiU~xYF}7=@oizM(Z|5Hq5`B02>N$_h8P_45!^Wp0
zuLz`OhzrK)1A!mD)M+@sV8KPd$OrJfF|YVUib~SL**+knbg<xf^jJ{eO>PV?eE&HO
zz^#T-kM>;=k@!x;|GU9eXJ;Gzf20BQja}UT<A%=I{yz&O|0W$DtkP$<!2s8FM*RxB
zF^j=_UN4+Nx9Uemol@DW02M;S9B!t`L_#|C`jBX{)?~x^-Rhtidw`nTbOg~j2D_Sw
z%8rqL%;pkT-y7xx(ZBh-?IiS$EMs7ZB7migxs0$V93l+FyJFWEbs}Vz3>!mJMzRMV
zBOb01#5pNAc-tPI4Zw{Y%$I<oRu6>zen@Gdx00o3l=kCk5GgZl%goI}lulX{A(^(t
zum&M_Yuj54uu%+QmFHk{X=2kkN^00SLE9O@3Hc3t6{S3g)R^peFH8_q8ngXwgqh)+
zYFAOVm8E(z0^r*USX0|iSU{JEuD|2Yj=CvwKLm<&wpcJ>@cJ9Q`NH<U#LUhk?$?mc
zaEeQUpN;&Y*4nt%8%N|W2(c$g@tZSx6XBqK_uFcXGFpU7_qN~73Ciimha~)2nN}T^
zFMh8&h9bg}?y^rwZ^+^s#=RcDf_Jl6Nt5bRixK?uvr-sUn$in^PCC@bCxCrD`k}}N
zm0l2fzXTusOGu;3e%X6HUfOtwHkKoD&;Lbhr-bqs29_8vdTGA-j*y%%V)z21KOBN*
zj|mW2NwV4^oVtdwF7h2j#xi67?(<IP({FnU;trBo;u#quGQOE4ye}`O{T}&aA|4Ni
zc~dH1vzv{!CUIKn-IxpDX=*S38vsG+pFfwq4`5_9dfy;ipG$<<<R<aflc`dJ%Tf4{
z5Bz^#dEF{;i?!bnjzt0>Al!eGfO2#A&-M0S)qXBCH=H)a{=wXkVN}&lB9?B|-!o|u
z(6J%a8mmkCRWB(enn(~H1cm|BSZVXJ!@OY504jNdMX5SQKL-kfBlG0)#OV#}@@_Ji
zQ`@?}wK!z8#WcaNS(;+#dG3_maHp%Mr;}Bm`s+cO&t9|9enoW)r_Q3muqH@gK<`ji
zuV)HfTql0^m)7K6{TRB9KHY6b6E7<^j}dAeM+)``q<GYa!o`}a>%e%0=^Gik=lXY$
zXIeL=`DvGPrKOf+qi5@uX{0vo?5f*ntwgsZL3*b-R>6J|WuJ3%(Se;G@rA@KxppF%
zm7`m<rKNmfU2Ut#VyoM^)*?D|Xw7CFyxDH+HibSiva+%w{_`o{l1*H-iz{Td&gIx*
z%Z~l`+l|G&rs6dFo9J}6&AO-}Zq=8EbvfPm(pJ+@i97MKXXI_!{@JgtHPxk~W{D>k
zy`A%QsR+6?B7HQ|?zF6)gG=2kz3goLE+5C+)BD4hmy^CS3T?cdf~>Gi&8`gm`WH{N
z2J-jMi&%dAs84pIcl!}qo7BV`%^|%S*sSS{4?Fdx3;Dz6UCfJ$J6HWw8>8!;EAiYz
zY=l+7Gc<P_2S1;ru^CngCQp-QCOfUygvS8r`axBg!ou{r(X>D1OQHAL4{AGR8On@P
zDG8l)eyV|*gv8^Mp~EFh&&T)Mp_y}P2<~V%GxyONO_J&y%Ia|X>T2rh6w>N=Vfij$
zN>sTa`%pDyZJhxPov9!brFL@Kl!S1}T-#ZyF^v*ENr_ZJCe6HQ!aq#&sq@{lg^6QF
zNF66wFWFJD9iUu>Qcrjn2%~1yd2dlHa>=&$+)$1D98+X9Suz_(70ycav;<ptM1puk
zY<QNEfbuF6I4(n&o)f-d=rE?2qxdOhulvt63#9R7q$JRKwipt!el)HHa#&g|`7t#5
zvr1N3+hq9;_;$B3_QV3F2U6oA83>jW%@B758=2ABu8n*m)8C$G`<P?cyM&jNa-S;0
zlH(+e14T<1S$PXMgJ_?<Fhc^BM9XY1wqjjgS@P7?_3+$633UdDj++mS+4<CSSJVDg
zKhphjz>Bzv$0(LC4a5Q!n?v)?1=zEXz_^@|^P?_7+jFTdGoLRkYiRa>71Fsfs6!IQ
z0O^7=arR-fCL~nl2UArNC1k6zw_P|leb5ncsMKb&mwwfhw?uQx1qA~0N^tj<p}>D|
zq7hwy57TI5Tx^LdO?U~f21KOEMzsjaF`?x0q(U<A`PM=_Au^fW7{;fOl582MmnT8S
zON!4zlO;AgtPW3~3yz+5xnCfn`3QfM0}4YR!b<azh2;gd#9}t2AfAnuLgBK_2+-p(
zi{{j90uTWZ0Isln>{FUyPn!y<Q%hG6%tZzVkejgG*h?)Fw+uj3h&tVtwEfAq=%oqI
zC>WQg0Ra)(oM)I`Jc8I7Zh+JB)sXI&sqRB_{2aizLW|HDbXBG<Cxojx4CyogwHz>j
z?;iF}3L!cwD$PHo5-fZyo(s8G=HZ`TC5x*GYxmSGqYVP5lMt(jJj<PI`y9O;+#Y^v
z`uGfkV3EWuzYlm32yq2<)VFp_lp6*o9~GJuMz&f|X@I_IEDcnA49UwH%#gLL*)b%7
zMmDTxTU<g<rdfbX$r9u7<jrAj_|qM3rfhTa8b1qNm;dtfkIo~5_d~5~+?`2&uuM3K
zv0Z+YhNxO>6QHg!U>&QB6O<Xus{YKnyCBw&RFFN=C9Ew2vdrAS=9jTnZ>2?f1~6SA
zdV3jF{1Gx4`aR?fepEew8T}I(cV4I^i%`s-$s~P5B7kOeXK>lWPZQO(V0swFbP(v_
zM^=3amyogv5bshK;#$PZmLLhyly?pKPw6F06$f<PBqVuHj|)L{c2qZA*iN}dcmZgc
z<Y$m2fGckxe3^EcY}%q}RS$Ef07Ob2-VkpIk$CTXPuxTwQj)3aKxfA3xc@eKLMR|S
zXO9F)hG(i53iHCE^5*kzSxZ6Qh!$s!7FQ~xvpe9)N=tAnvP0ETtBg2(zAMt=Yz>_k
zjT!WU`SlL>Iek3Y?p5drSl@-JQ-7XsAX$SkgSDeOie17)q{!G0AqWq0Q;C$gG`0LF
z9@-}_XC7wzpx%UG{4Y`x<4n*&au&XWR*g^b)|)&z=%7(F6A|GK5lXgTJ9)m5QEu*u
z%v~I75%`wMF;fX&=Llg)8QZ9DXWclCdUJm4U|P2VtS2w{2lN$Fe8nmoqXmq#0{JYr
z&6N5zwbCb8myXycu>QS;J7A%!TqBa*t<%21Ghd5<+klX&+z@3Pv}byA*tg@E;PP39
zIO%8W688SY)mo?b2;$E(>6gAzOZ25~UXy)kxv~PChwjg?SiY8DGQ-ApZ-nduK8RE)
zHuY02cNcc`x;T$~2RQX5&%8A$s9i1&4g{Q%$Mo!PX0)-X>zAv^E37SNrMC%hBQk2V
znxiQVMv3$>_vn;2<ULa98Xhx%hQ(ZpphEF%fG+CgE7$&X2545(CAT&2q~;ka$D7&o
zRug2a^^V($Pg=+0en-btrdczJzOVWwFmNMt@2}(Tv*`gHH$Le3$lq;R=soZ4Ybi^Y
zE$x<1_BA_O@6!VW<4fWLyW5C?Z?z1qvG^etSmc(E??YoNJ6WG^=kJFtHFR`6Z!>3C
zzRy=0mLoe~kr>$6C8pff$B=}GxoIkVSbSGL&z+&cGhXl4lr`{pfr9*(Vh=Ue9438n
zNBcXmHD9&QueoH>;1^(bU@u@_VBp}e;K-tNctXv)J`4e&;Kc6d20GbEqTDZ#xw`Ea
zs#9d(_>R%$l?M7u3wiuE`*$^IKfxeRWvUK3wv3jKibC*t6Mgq%x3}|cbNhU$U$n#9
zdEaYO!bvE+#v?$d)u$C6>6f)l^pUKu<j%i$Shl2T-dkUaxq-KEJU*Ja0dc8&uZ=ak
zWtNthcV$k?K!0D+)JP-FSI~cUgE(t88Vr%X$D~AnzMUW(AbST>yKje^mXVH;j=_}v
zAAUEzk=g%Ih5I+K)(ah5=XEu-?*S>tm2{Fgu4X+T!G+5hpt-4P_LIRiOYWEvP$3Lb
zjRJ!6R@|?rt|uP!En;AZ4aw4MO<x6p_NUI=<1A-IuX`i;PNZxXPv%Ja;q+SVs#oce
zdhERq4ix)RMJFdG8lS9U{6YrQPa^EnhL`+na?~3++q6ixIi3t%(E(vei8-#A0g7~S
z;W~+sIT@3vNw8QE(XGuD*rz|CLhlK5gQj0%B$i}ocM@}B!#6rndy*stGlncvB3WS!
zU0HH_J}6>)T+_oMI*D^4{XRtVg3GCqZ%!}wV(|(3i&8|c@9n6aoX{yxM<+&P<?#C+
zY>|+WG;)WZ=>T)99gc~TJNwv}>Y5rv<??~we4H}o=;Es`MN6DG=BcP{?-uq~VKmoz
zl6;plLj(~?7(H}**9!+?+c5l+9Xzq2iu{pBYlhD{QXdN%be^=Y1NjQ<#nTDCRHm7f
zT31{#tumo=?*gC9ks@3~b;2If83LY$NRq<R9Xeu?5abe^IfIfMnxmvUQw@e$crjmk
zt*nuWk+)rcN$`GLSw_d+_ZVhG9e_BJ{FE8ui4fsIvG+|H=HcY?y?gB3LRGpjWQjm6
zHxZ2Z7#Ju7@MPo1JS}a->!@tDp_8ZI`(~*uhJKzC@gV(e<wvDIIR3NHaJqfvCG;s<
ze6Utl|3&sQVe2<zc1gpzaJ{~_Xso$na~f%Z(b!dsmwZ8ZR1vw6Xnr3_7v9iaosv2)
zxd+$R{Z2O6)l8sk>03Loea&Sg#9s!4F$p56kQ)no`<#acj-blGxtCJF(IO}JuPWx7
zF2B(??>1^I-KhQ8T(VS2u8&`AGid57x%NIA{Jjym!{tm{J@bx4J^=Z8-}9@jZlyjF
zh#PRn1VLK(iu5M0;}QFv_q=CW@_Dm}LSu|iJMU`FrdqZNuMtQgAIn9pUoFc#-Mkun
z_@V<2v-YefZ7XFfIwQ?7_Tgt#i3~a820Dj(Tul}h(L@DI6>D}obvnbOaN5nsT%exY
zjX36u7RxNDh3Mz8DB?KcOpm6Q%D>$LQO6-1Ne#t`VxAvORnvFF5g2ZcdcHV)@v}Pl
zk?m|L?}*Yz(5aqBaTPf@@E;pKExYf}8#NVr>yu16bfdMpa@rd<md>5<2Pc}BvbU<u
zQbpZxQakn4S3<=3EXx1vsIADU>jrKYdhkw$__r@ylv!`6uc)Ecl~q4vw6`PN7<KSy
zT?s=>Sf~@ju<2rpv|T1w{he=;MzfebM$^m-EX8}Q*TvfxO>qGom>|ODBC&1g>y*)2
z)EYi&iqW*>6iYxm7JY5DOx0y)D@WE}t%!b$uGfo$_u{RWjJ<aXH;d(P4Y;N2Ldi80
z2Fx>ef(*kZaO?_M|8^ks2K79(v{bhNU~=*vHPM{_dflSyS+PXgL{awSMhw^cK6!e=
zq*DRx>te8(_ot0*B{WBp=zqq3FS6Ew#nj4VpQwhW(k7ZlXRLwm5DxQHqbm;RNd!{^
z2AXY6U?TMf6IPgzS1;4JZJ&$(7h~@jBudb&Yqo9Mwr$(CZQJhM-Mekuwr$(C?e5ug
z=gf_BPsBGdzbdjaVpU~DRAywZ_k9-JZoMwAa5Y|9+W;yAfd4yn7f{E_I9yCkq~Wfi
z)5`?nvWu)5QLSMv+GG-4tIwzgFk&coL?RlE{A)0(UZ?J)o?f?B|HbkZ6iuS<7xTYW
z?0w$jEidDNA*&bt<sl_cL$Cb#4H;F#+g<O)IC=+PGX>vl5d5J)m%>Z8h(^&3P$(x~
z*%<>ziNY1ICIAYGLVdBc4v6Q|l%r~Xf-WeQPkX3UTpgZZ!gF1$5X%w}!ZAWU)nhp#
zW7uO^<GfF~$@n=XUN)6=WRi#ufFXba3e@BbKtf=e9=)5ZD*V9$^K#ihSR?IT=mBs{
zuo1SKWeZE26@xyh-)?nC8yXbtILL#uj_MGU!49#OOHr)eRT0Mld~e$0+-R9~1)vYO
z2-hM8Ec{-GGVC93bR7VD4Xs{~aq)hV5&oA54p9_Mi)2<}&7jKwAH_k0<}AQIKsN%U
zXOi_npb+j#24xPRoy5?7crt=Z;VwOu)+{DPIo1=vq1$eS-L?>2Dr%5cUT3amK+Sbh
zqhYjb%dpEOWOX005sb8Zo_SvNwHL<ji?I_=g9<;aK)=_|maYz?vsGmcYXhM{W70SU
z1PefSJWQ|gPr-CpBuE}R1NeGOO8dCcATif;$NI8SHQhn=e#+ydAongq0?WQ>!LC)>
zmz67~-I`b}+`LV}wwp{(Ubijl1d>)?Vpu#>T3Fy<m|NGi?_XHjKM;YDs+Hz%K(KR6
z?CE-C92$!*Ftq{uBo9lLnYy-{9;Lz?=YUOiZ$Q|-eja<6&>%Rr7WM$vfA##PuY#r`
z0O9Wg5TPOh$>zhRU~B`JWed?w!c^*z>Xu$6Ben}61WV_KEJV2q{F(#ar<shn@8CxC
z!?6EWhesH7GH5(0Xj;H(=`N+BVSfg3Me8la)<ohvi2S%QR-FY-T?uWAXMtA*3uP5r
zy_H$hMaSgKw@zAFXMcr$Ky$&4NaIWN^*(9BkFt^xa^alNi(~_@&&~Fga<JXS^vJSp
z<w+HkyamRWj&hM&Y@aa7Gr4H=0!BASqI(6vQDH4kE^ZOF$3wlm0v$T$uGbBo8Ha%4
zx`+ty;OI7`r*^iCAFx%h%~jbw6a!;Bp%j<)Ne)$jX9B|qQi;UK<IDk#G6RB{4t1Hg
z72;bnqYM*56+LKV6%vcm5qJ2U&=Z(LcT-<#7&zyy0N2}|&@Y*83wMx(DMkktpUnb?
zVb7tQMRfo)3ECO8fls@Y>fi=MeLz5^9j3#$#^=MZ&#7MMjnRASTweau)Hk;e!3l9S
zv|^W(*<DJ10K3A5Utq<+J>?*3QWRthH;71lf)@$mzXN{rkj{!Z9#B`@&8Z;9Mwmzp
zeTbMHHqpWCXW=!&vwrXz>E}L0v!6GAbPHxTn%|p>@N-=65-NY3FS)jb8u(x9hZTJM
z#cswMTi4KnfC#M!h(h8ZGp7ktW*U6Pn{vwwA(nHwXX9=Fp>xxI$0JCveOT?s5zGzT
z<j}itxrz8QpQorC<=ot_qn$al0*ZIdx_}2ds~;8I)CU3NAOw6<MM1iH#*2~VyGmit
zXi$EcpLV0&zHudkJsu3S=*Ui;?ng<=sJhR9w2Y|>MTOp#7x&?`dr>H4LSw~$xf1}*
zMwOoU2xvQsfvjt|N>2LtPr;7+C3OAJewDc_SK6}!!1Ox1Tq{%R1I#|+yWmAxG&(ZM
zWoi>cFj$P^2Ek!7VMQGd4}*xYKYsw^;iwTP6pXep`OcD=$y<q1I7M$T?ko2*l-;x_
zI&M~64>HXHMT@jx44SveH|BbBdcol-CVf#?67p+xSer#+j2;9u3^o_HCs-MyG;bUu
zgdL9PBC630AaaMtS6FWrBb14%@&-1H-IbSGGX4Z)nw@N6J=d}U_9w&QQWH~b6ENnk
z6VeBGlP-?`@ADMaU739X#9>Tuegv$C?1~<M!u-xYiB795uW){$I7AEdUje5A!G4W{
z19t=*jQnCV<H$*xJaGOFU<)wxCgpCi^)L)_7h@>zmOrHmDQ|b>qmW>zbr^682Eu<-
zZC57tRsmr;C}cibA@iDT`PenMBU-8^V|Vf>;TWI$DH<|xW%9B?=eT@q1iZJ|a4xHC
zgH$+HL|6uLB8X7bRHCu0KYSf5({(vogb8iyM`Gik__zrK7I#hCBlQad0{QS;X^e$6
z;2lE|717-c5E{h-26sEg3+c3gaM1D`!G-E|$JBTg*2ylO>_cJSQosK3`0(adf}vyc
z=M{ipd1H)^g$<XCaTG3yMX!R6^E*{-c$YJ2E7nwM7Cbb3hwT@wX;mU2np3IWd?>|u
zvqjU7M0Ujr3Ra?ep*yAAmvVjR?%Sutd)b6<$5GT1@>FG+-rk=-qq^knmu-@@rIXQN
zn;G~J@LB7Rsd*GR`mph=N<Bl(-!;@Q8QbEa`AqN|9FWRitsiP#m`Zw2xmD4%Ba5$A
zs1c)Yr?810F4=cgTpcIW{e~vuoJ^H}h}Dl~+i~P+Pfx#rADJY5+&=DQoR2Q~Og^t}
zfH~@R7kjYa{fgS+CGF-m3kFXVOTvmfvr4q#IISFVw+M|Td%A4LNwt$Ju1<t%UzOIV
zck~h<di{%@Q(|VxCL`rb<+F#^U!5#zdg9kx)3JGXV~C$iUmuskMFvE&hQ>j=x!Opl
zEk00<8W*odw)M2-=B=~BEY-Fo{iJ2i@;zW3qmoJonMJ?e7vG)RH3&^zbEe4@l{Dpg
zRZTC0eK2|wr*ui!B6{u4-C|lqJ@J}?70j!j4o+>Rfx5EDkIBz<&4bfw8g(f+A?*;#
z$CP4XUK1|h>&~5${#7x2k}nhJ5CwECee=5f=qb?go$gmEhz)EiB#oL!pO{tmL?@hd
zA+p}K5zCmn{zthWsuC*r;_gP50=zowE;a_0^p$jN*U>s$9&xu_7V6Tzd^$D6Idx-h
zcd9c|vJC#B)v=>9g$nhVO!Zlg-f8@4uGk9+E0#*=vy61fnEDG+d<e&>ZnA9uO}3D6
zRhYuoJ2<SH5Z^M-+Wa7+w_=kJsLpa7UEx_4to0qweD;UlpPYj;kzEf}eeD>PO`EVd
zGQq)(d7A29_4!Cu++}q=vDE$JriUt{9VjwBr8#p{+K{iUs;FMc$_Jt;UK5UTg+#fz
z-J;b$&J&q*3x9h2we=Kkz;RdrLRp7>tmXVlvSwttB@?47?4sD}c4;)8Jh4JGS-z}-
zP;I)22ojceL@zdZZ>|hM%$-MV9XX?`#JzNwe|tySJ$cxld5^RqLpNQg_qlv%j1ILN
zOcqs?u4>f{s>Vl(iR8*T{>rCtJXQ^a<(O)WUjz#9C`<;kXS?@)z4<9CJOq{q7=#C~
z1Yv0Vfbv+`!2*RF0VEEuLXYSkQ=~sl0>ZuWyqBGw+c}h$vWrf9<9wseoz|Z077+IG
zby?VGEV``=pz-zD|EugQGc41i<Uu=&*itw?5ABF4e@cIfen07f=5L3yqOTW{kD#tD
z)YWwbe{g$T#-O1Saq03>&M%D)`Q2(e`As9%Uy+cDBms-;O5oU{9C`GjR7!(Vu8(xM
zOrm+^Z(2)fS&gguk}~Z*|8~);#(QmzrR3gT6a;uEpwSQ+;~%{c-=nOnD`rMjli0d8
z;NYbkS(_64>y(e9TJbKCk4Nj<y+DW_4sJw_%A+9(^A28(l9;?_5Ia3?AXY-?J)BA%
zYX~tkgbGSR_0gI&f79_}D7o@ch4f*t3*+KRwQJX4;@k}i{Xt1j<&0{p404)ayOc8R
zj3qlxeX?PI8#8rTrOa?gcP}UGS6=C<AhKFDtvHoy%jB+<R^q7Sn0r>Opls1;Eu02^
z-)JIBU~m3T<GxaUUC^jMg5s+`tCk-w!v1QI31H1End^3zh$?xRgE`FFAumU}&P&#q
z#@|Y!*?&WAS+X;$Q?JXos20Jn>M^3~q|&E;jbgv5&@QfL@3th?>(g&ja#+u=PE-mn
zZ*mv`>nByw+3=n)?kzr05+}3vL?2&w{*C0eIHH^A0)EI(0KPbSwD%C9$+!3m56ac>
z^*^#V>Pd3yHmCpq0*e0`wf7Hot8e0B<NV)qIRC*>b<OkpFNYKN`$^d{&XSBXjAlwc
zO=@eeqAADXNRnGrbp6hR6Qv{hB@<60srk~J-X7jY-bKy{&?$YBkVNx3s@wZHv&e;p
z-Up;Xg9cE~#m8e1UWGpF9@(p5R<+ooS9hM!s5mt^eiWojHox1JS%1T&EhgzT)FIe6
z0+HFkDDUYs*iD=lXhP?c8czAT#`WYez!W1x5T*f)&zBGom+>!)gHpXd(Qa&*RPQ<w
zFW2&<%=QXA^Hx21_~)I_xlk47P43L8<-U;=G1Y_waTQXNWfBL#4S=UdSm_RsFmi1;
zZxvte<3baw8aeOe-7@8^(e*?;AeVt$xXUzU_`LG)aN5inB@o6E3rBSPK!X5R+A%g|
zoeJRYFgVzFp)Y)HR%2xG&vc;5to(LFwk$na%D3<9)Xy4zV^S&QOwyf8_W|um5k>Q;
z*^nK3*QKao1k|qwr->tyX*@QlRKKzc%-8Atl72`)vS=PrP8(ktnyC|UT;tk!3IG}v
zr@)`kT-^749!H)V4-yEOjH1yUv*vT0!ho8z7YKqlb3qnvzs=j6ZmyRG0$!*11+()`
z=@u6|flSC>&*?#$He==)!R<%RyaWV-RU$+pBIuGk2{PSL$0QS}0>dQ2Q@AQ$jJMS+
zQ3A1nITM8#%V=AJ$bviSay4_nOX%MLraB8`A_7HGZke^H;CL_bt1Wq@{_M+uJWyC8
zeyDeA9~X?!e%%?w1jbaT6fhXdJ3%Fe&$(bt0qGpE)ZKumA03FgeMrsQt=?f;1ZMtE
zs$$i362&%w%8}i8$}#`%QU8;pfP_w$0Z{q)*hGgljJlk>5m0!~gU+Em4U>8tC1yB^
znWJs^#)ybEyC%3sw1;?yJ#sjKEN--E%r&#AaXIxF*7}w|0g&T>W&hR#10!*#zg+t>
ztlU}sNVrhe#M=zuD#F-OG(j7BGf-_VH%n6TL`$3quRt}yr9I(JVb<gjH?eB~?zQcb
zAh!mu1k_4eh~|i8u*atizu8%*Z+rFl9sO7oe!-nwIykhw+;eyn)jl-8p~qRoBB%x@
z;?KZ#PUz;^BX6=g`~f?Kc*K$y;7D`I-($_}?4e#RE+NP`qp{x8%-j(=X;<-_GuITM
z;a6{e(R@HQNAO<gKW?#Q&%4(+dDv|w5KzdzdNzSgoppdpAP${%W?dp*T0v%kCL^u)
z?%VN^VtKjvbDv792r1%9**cPc)_Tt1cV%`PN}VQJZ>IxK`UNvMF*Uxpl4{`oxna@F
z3*8EqQ6(IW;yMQ#=e@m|-d2A~SD!To7TgT-zZ}j2pASobg;B6)1arYYL?&$l^MAN~
z{;WcR!v}m)-5-Ui%|N^yL7~=#LN-`#zShWbZF1;xT7qQ-6-s)zxqdidXJL!3^7URc
zkv{U@)!I2QBHdzof!E{f@{8$b)O^cubX_uRK-8Kv%lB&r6K_o1u=Y0Y<2cmT0-%{G
zMt3;rV2@}Jg9nISHDz)Jj9LT8u>x>dR{+fFqe$=kdRX@IH+nDPuN&Iwzf5>%3kSFZ
zTQ|{<p2DsT?1|d{GxUU0p5`nUD1I!0>92AbB<C{8mG+%qMLR3)W!VfevU*`uGY6so
z`aJHT4+t32?>_q@9gNtyP4=+jZ4mAT%(Fb0HyH{%p<(;AwORC#F<E4>;YDN4fkAPA
zo<WDl-Y1#vSsDZ<eu}n^fjQTKFg>H#*a9m`$b^S*WV7+XOyTnXok5)*+CyvU@E^3r
zKgb4SqFraeknhJ9d^1>gWC}kfZbJ*K>N;hss#vzL>u-b-sYfSisOKL_`Evq$Xh|zM
z`UsPt<47z^#-0jJ?5-8M&4ck?q>7<{scE4Blz7gASgFkpEn=dh4?Z`@1)2W*vFF@l
zId>}mkvML^ViLX(FIBoE(5Z&jzUa+qX`$;21pG<b`ucJ$*$LX48!U>&Z{U&m)9Z5v
z@BNJiJc5qULY&4#7Pxgo;IygK3w_k@u;IUm-|8}RePd#=e@-&=PrZ={+yf(Y@@{67
zYqdrqf2v~;=e78=lp`}5yq}47`9iLCdfYg^X@~1qs=FK*Su2G7L_Dm>nGOLsyVsY+
zaLIWtCj>XM1|+8^Cis`rytDcDwpW~I;e5QC3-vQM@>^fg+8!paY-Q13Xz3N~j=#d}
zcl3@AI-DeSb|DZW7=QlX)M{WT7$irG*a+%A8x>%4^Vla%IY@|LjwW~&>?c^gA62{c
zR+FC?hA_BhOiPP5IU9cv&n4ofpk&tknqS0iR(rUap>Dk=2?xhlQy0Wc^k5G4I1&Q8
zk1cxd@%ACt=XEr>`#=z(RYgn%KTNDhhX`1Rc5R5`bO_P|&eeQuSts%~@*0fDy(Iut
z1Q#-CcZ)l8ch3p|-peJ#3V70lV!BtlFae}04ztH&<m3&PUIs3`Lzho5rgb4MLf;qE
z9dHJ?WKUcU*05*<EBICS4uU^H8dTJNA8Ih4Q+-NA;wdymgp$oOZDu#<1h|n=P0JaQ
z2RRy`XUe#)o8=AS3uH2pu#{Vsd9|v)p5c2>i_8gX!v0sSZ~m@EpFKb8mRNqQ)}9c5
z;5R#i@=v2R`1^P>espzkpbkr_|K-B+6pUD7;FaJ^C#kmgh}_E@2`NUbVG#WC(P#N~
zC&p9wSl{sQS^ff=<T+GJeB&NGN>^4)(B2AO(4^DYbZ%2m`<P}D#i#~5WD1|H)Xfo%
z*us|4@s~UNcvGI}h@-|MU~W!+pEd~UUxXK@iU`!o7(S5WnNn4auhV8^1eH_0->y-o
zBf8uDE!#$pBBDqVpW}d9NOai9g3zH4lQ4y#QXPVOMf4Ib(w`)pGEy-<e2h+kqR(^S
zs~SJ}D)$RD8PsYc&Esun``?rDH`=u{3i99fAlO3K6^Sx{q<HN8{L)#?&Kqt?zleL6
z<t;?D`8yA^P?JGXwkG3_a(U~j??mz|Xqm5>FVHt`!QT8;iJ^ROMkz&~%1RlV&;G;L
z^f2v)DUQHKuN@B+!+gnMpqp>)HwjTLqSB#692!t0k0^>M3J7CLT^?R-)ZyegWWh*S
zx#is5$TgCAqr?ppRq=9?%9Uuen(0j+#i>4id7QY(THqEE2!Pc%Vsxd=@DhZi!|$&)
zyn1IL0Q7<F3;-jEwQ2DLr_ZI8)y?y((MUkI9FAyIu5SxIc~7_7E>0hX(Y~CC7CCJq
zN`i1b1trU!%{VuE7BBWQ<&0I&a=_o@NA6_&^Yk#gjyi6b@fJM%1dy9%*@Hnh848^h
z%VUm@K_@k%Wjg^)-qnO)Z}z;{2led$HNzJ*+=IuNmzc%)wkM!T2**n0+@3ajV5_Vz
z!%g{_5AGIyJz>wvAkhsSed~ltjHlYJ(I1hnSf?z{^qPxw0Z%R6ThY(oORo(`c62>m
zZ|Ualj*S#@0Yvw(O9BOfhB1}jia$H%n?zhKi)o#zaU`?oK`Jn^01y7-tgcYubLFC2
zh}asaT(_ohI%g9!wx~5&(%K((_UZO=%{(&RT9nDj=e%WSY9ep1A??MUFVOC?Kaj2M
zv^%~MRoZ->&yW*Z$c<9P$%vIBS~xGs`5%Yau$=oz?h5mT!#hDfv}oLUtawVlK*hHn
zZOr1yVN(+XxL-y^91q&X*`cCL*O;gv%0JF&Ho8FHq!(1WO-t6&*S=@<JIEoL7<B-h
z^)0ca)cx@m9P4k8sm%BZ0S$<v5plZ8KR$3hXq}!S%oDpSebcO`DuP;sJ`={^l~Yku
zF^O+8GywE5AkinNATM9oyNSBgPWH=O1hIH~6~c1j+)wUYv<ipI(MTgJyWEt4<Cf0a
zoFi)ZW(9*23Y6zi+Gq|K&6GQ;o$I#uWDV?XKAZT_fIj`X@EJ#6nbeoVr5%V2vl~)O
z2;MQ%bj}=#>n3-HPvoCIPlh)B{AnBLh5OiqoMn|ULTqC{Ywo*-qk!H(12d<!&Ipqr
zoaZP6as7MWo^b1ogxsa7M&x7>&jnCURzY1=LOj1BwE_qNu=5xez?VF;{hX{=X-S3T
z*Bj=+?BC-m&trA;j%tE1OCS)1lRpkj?RDw~$?=`Ah&hHQu+A2wE<|_L7L;qMT7&4!
zPUuFD|5A${c(W^Qol><123^AzrP1iCQ8MhY^PhQ)gqRhY5;F6E`BN~R_*k;jPhk1E
z>t8K|n}B7>MZ*ke!ptbLpkn4AhLWqY5>5Dkrkflz;?dn}Y#$;Xyw;m<uwFWOy2|IX
zuSn@sbZ}V1*3MH(|Nd+hGsV4k6*C%zWX#pTlz;{xevwwuop_a7b4vIVFt+}qF$21_
zL#27^f3<A1;H4&^(Zpz#JWJz~l6b#ctdfH&&@JOJWqd&Q<Z}z;oWSofKdbs+6Fnzs
z^T_;&caa+UN734CT=&Mu8C&9;9e>IAwZ1dW>SL}7KuaC0IxrU?vIi#6NK+UD!%NwQ
z>RPy+lSx}tW|47(*+Z{ULZG0U6o##q-_-N%Bl99_(2@rrU4__AAW1Bo(?Nrjr{P%)
zZ0{7+5n<5s0TyUR$w(*Z;i(5}acQpGt-6YAIh`{l$V;l1R&<qtE9?s%ibn7%;ts8B
zi-@%AwODGh>a<F6X*oU1K*tMm>DpHTMBE@~uGP&IE!f)DDrs+Pa&9z#NUt9I9RLWq
z?Q8>kNL9H~k#8lew>~HE$VF3}A4XC6j=H#^@VP!cepsqv?-Zt$xHPG#PR~adBvaLw
ziq^gnu~Ai#%SrsiVzk!;AWxOS@UwX2lX;`_tcC_ps(<2Aw+UI<p2Y^on}%EB=6S>{
zbSGxWiqXBnu6XGIVb{7CnOlFpBpYYeu`ZT&7f{-fJ;|Sv&CtxLRCDM%o$9jWWYNs5
z+!yeLRVryVmh7fARH03GqFPk2n~fwESQtWQ?XhQ{symvm+nY_%Q;>LhxsmxSly3Mb
z<Y!yz5^C#y6xgzs+@jjfYrx{co5Q~JZ2->up}PL<&Agn}Z@+=vgCc@5ARNoGT9~92
z;V;0?W!)k+Xpb9`)3XU;$_xSRxATZp!t}ecWY3inCpFvjrWxFj)NQ_!T+75Zea^V{
z<Cku>UT4-xRreQ;>{N8R-jqM$e(vm0>K9OU^DFMc0-rNcOs_LcJ6sxSg8&wRef;4X
z6~H??bkEv6WDy4AEwXV^P|H)WTyUapNc;}H4}P=;`iJ|h7Ly^#sng@T?h7EUy55K?
zW%rum?&u(OTL!pe;M#<@e4`|A@;iYo{87Pij8SCbd2+}XA~unlDJ5c(Jpt_fW+1Q{
z@M{Rmfgt8+S{|Z5Gs|$hkedha2nqRAODhP=yhIssvSY+kV>Zb?L$~?-z5wOvUO4g9
zf~zoEG#ojKG#lKQF^SZq0!5+oQbibLsOg?9K|MG-L(>!99*f=@iQ`n?5esH##w{6T
zayN@-XD2zF-xv+XR<ytX=z*I^lab_N6$9DVJTyHYSmlhC>(#_7b&cd1+OWs1R+U~W
z0x}5HO1X4Yy<A7+X3PK=?J})U7*Nx>uc=rozrWh$Wc%)zrYH-N%QRDp)OaYU>x>bp
zrw39U&^XGw6f)=vUHA5Ng#za$?2WlZ5^WuDYP<LOgi&thV+UR-EY{axm-_g#O!iw$
z{sQ~&>i8<%&x`bW2HtY(oyJW|QJMPJwLgj|9|dfT#=OUqN4_P!Q_~a`eokZC#8aAJ
z*eimizvJi#-uI`*qLq!WLEqv`ABtrJnoCn)H-{JQ3|lOi_b!w^N_%hoI#vKJ?!1*w
zo=4byDU6MnUy2H=LLCvnwP_-;9G$*?zar2*d*5EoE6mSdFnd3nTi?OAVHFwLUYC_Q
z6c%fF<l9b8GDQ55OJ*=)bTGxz+Me=}FL|gZ2gphc>3!sZHU*<9{^Zg+qXsZJR-0T_
zy>XGVOyHm}=_y$+l*mPyAu7nIp=yGJd*TsC8!^EuLLL5#jI7{b(&UL|nN^XMzMkjF
zDq|YVZJNM)=kcps+8nM?Fh%}K5E*3NYZZ#lKK}S=xfBr&@p+aWbt^S1(3OMPF-P&H
z$n2BfmhXEM&bIyAYARe$F_ICeiA&rWnda#nTE2y9dpObl4cu0Nu%27#)pDe*SQjkA
z@Kkn2;^9Ki&-DV#3207R4MAJh7Le*3@w8k6YH$zbLoLqr<eODyeBk{42QgVZLwp%_
zZ;673o9xal>WAasPLvM7bqm3rP++1USPyb0ob6p<1}%0UA(CFfl(`I!us2{}q%VQE
zO3gCE!7E$4{iXm3wriYJtv~u|3tocAiWA|CJHnRmQb0mR;!LUP2s#!#U2^^V-h-vZ
z{|v751!G~SWB3E%VN=8BTr?hXEErALb(~rc_xIojbjq`;H(q!{=%k8E4UE+bF{N;V
z%|P}OGoC|!Lbi2$<{Y|L92S(N*FtLBex`SAW14w+fjnf*`1wVrOYXX))-C9Fr<wVK
z6~D=?pgOMY?NgUqHUhjV`yGw!RmHnfE*a;?pxalO-*cWj8a2%2x?}I^^irTgfblWY
zW>xm~o;~ykN^;xh;+bsplUj)L75~ikCd@zCVIEr2JsJrC6q@)#TEfh|Y46EbfSSsc
zgYt{kN+>qN;zT)r(J<+`h-f(RTkvU{v*9cKj>F-msa6;x2=DwdBZn}JC|p<VXUl!v
zMpj==lnPBhA|Mp4h$_hH>FG^W1-OcC-koSV;VdJZQy*u~Q@WXS8kgM|8$m!I@)l7j
z3NDkAa%$DC9u7?_!k?rX!nQ6<bT^K)r?kJHenRT*GlT~oN%>9DoG8KiE$NvN9|qES
zspMstUM13UU~RGVgDR61M`0BfZMpoLJbav8=9)X==J@#E$yv4$iPK89n|8z5p+DEa
zYZqto!z?ne%&`y{|8#}w&06Bp20+u=;mdVuKdrUTIcq<SH7CRA3+rMvyZ&@YvX~Q+
z#wFA3beUIn$>0De$(ACXxD~ejJ)WInpS7`E5fIjTL8TXMIp?w<up3cN9#r|B86fJH
zB^Gmf>d5j>h|n2G>-`TfqZBlC^pQZwCp&?daNQrc_#Z1H9J0WkrxwZl`?(KXBGg!w
z1rIYx?lQ+bU!HG0OIC_i$oT8@sus3a=S@+|Q|%5;dO^Ko#b%2sMDwUA-Kc)0)7UAA
z;kJ|m<cRwc<vyvt`!%xip~xIGR^r0s*1aY<+ym{09(Nw6If&1wY<F<<??xf`y5%}>
zh9NS6Wqn4R^@;?SmEWJiOdr1L9TbOCE?WZrE9|?F;ToFN;ieyc8FP_aF~YE_EOd?E
zEk9Ayr(dxDQ-5Y>GtxTv5A@~={hwv{PR30CO@Q_vJRiquxAq$n2;VooMzLkIMN7Rx
zKuz6=NI*(1ib$mK8xg`|Rp?#ljW5?VnR!&d-sYnv0tHPvE*GhXgKK}xce;G-n_F5h
z`{<q;eDa5A7!h1LKW~NjIRY+220dqvmzODZ%C78ZU~tgL#*^Ik8D#et*eu$PGAikL
z+z`i%vY|$bPZ&{{PN1f+WVHB#I%HQW2DAo2+s2{N#G(JD2MRey8zbc#QYpcG<=k%t
z{OxP-%!!g<f^#1r0nzJMA)rb4D=QN+jF@r?4IS!lLmHT!^Yme^{%tB}9xBwNVNp0#
z#6UFY2O3}R8_C%2ckAiy?rs-mJ;&wB%=$P%R;v}8ndTXFoO9?=)Yoj9BZ5VirH%EA
z60}_cEmN<(bQ}}mY0}0<=N(+dPpaVpq=*wNdywJi7q*o&+;J7kFl$tk>7j_zKsj%g
zCImSb3Mrnin97-2!UE`d1u?z=B+X}q96crbvnD}FXddV6NJYlhDz&1sdUz<)DLHLc
z%9uOw4jSd|%EiZxPs}VX5!?c)*~%WDQBPJ!qEr|CsvlMu_P7lAb<8m*bJ^VZXQeQj
zXEy0wdIbyrto@)w0qKJ8$KS!tBZ}JqyeF};=oJMzGM_CT5hk^ISf(J41u4+}-DnL9
zHaHmZ3-0)+_NV)n-SAREb~9Dk$Kt0#vA-7k*+ms_`0oMUFxs$h6gbLer6R7B3niWs
zPr+KDhfKY^V?ZGuACJ9t&H-HGh@0Nk<)n+YD=ZjWqpr_=6~1MkNG$k(G9pj{GeJ5x
ziF0_@`QJWZAo%g9!j~uw2|c&5Njk!&@{_*~U?|>8n|9S5Ktg<E*so*Hd9s)j>S;~z
z9p9>}eET@BYTjo7CwPd1Z2L`;9o>0IhLg&}e5kU2W%s1=Df~Rs^0W^5KiLCH1=H71
zoRwr02TQucJc18xVtAb|69fbX#4YxZuQ$a=pODm?nZ?#VtYKs!9I9(Cm)nWOh5eWM
zOaof2^$7y;Tka^r#8?d=``1mTNR^|vmde|=wkO?8Li0fED?iP<Co`ijFVc!c<@5PY
zo!Mq5U#yI6p4_qSuxm`RzdtDdpa8@vRbnAkkL_U_y5jNQr0r|3|LpM75v+?)W(urx
zc?hnvS*-->z3-csAx`IG@G@U};(hUr)*|5jn)9%M_z0D4spa>=PKTe`lF47WX}iC)
z{W6>9+Wc{#Hot~$abY|8wKwmDexrX&O1Z86)DkndL{!y)&l<Imes0`EN`?B!m9Mdd
z_g&vBjrlXY^!`6)hW%g@Xz70de_0#=0FwWpO#P=+HMVzha&`Fs!Dws#hw$GRL;K0m
zXOwN$6{ZZ-wRBy!s}TuonomFgoVQy(iT%SHVmY;zff;_p_I>-Bm0r&ahP1G}<0H}M
ze8PEaKcn~<z#_>%eM8!-XZ0Xm`iY%Ri-~D2BU4K3M7UT>vrv?JX-cJ<`IHbM^H(h%
zQdwrFp$!%Tg82XuIck^$oiS0wn<0{y2#}A*B_uqCjWBm1t7^cTNJ-Xd7(txAod`OI
zVc>=+#c}{NazQoaPC?{PRl6RR1Nfmpfx=&x8esysK%P!<inpL7FdLT*{2cl4Vdmr$
zq&cISrlUulN0b|BB&)90B`)QED%6!rS8h<;B&m(^F207;*etH=Vm(p;KNp9)glLL!
zV+A+~R%NdJ$CrmW?^yUi=^%OdBskW%G201aVrpHI{bs10+*nEHnZ=R*R$w509SbA5
zo%GrhjXG}G*n8&TIKYHnZidsarEEg(@F)}7$2*gyPln>fxWmc$0J*Tnaq@>fT$!IN
zHYqt4DGdr-5QcYbh$ze7o_C1RUFmN{{%i`YVx^Pxl7vu4%Mi54lzftD7Vz_UBtDWJ
zQ<BBmMrec%<iWm;!9FYr=!5orKi1TN1}~kP=A(@Fpi&`Aaz1o5FFHRB58@O+!Tl@|
zA3-2GKKGijd&a=6k7PNsCU-}`{q4-`*xB<u_Dj}?<9}88)>6q`hSeN%K-G$b9KX_G
zOPR4~HC>P~9?(aRzMNPdC}J~)ETt0=k}{ng#)3jHi%d~6t|EnTjhNp4@B`<vZ&N?y
z8ZT7$QH5(vYQ_<KmlzyEkFB3a(2*F6vADlv*MVG&xAOjVmF@klD@;_;S>?gCO!tTt
zlNYOOGldlGv0BfvGt)xbVH2N?RduQ5b)&mu6@lcARS?AelR^UU653jbAQP1Ly>21`
zo{DbIKDCIcnvyL{x3yNws2$>2z+NtkDBzpztsq}WMAeFX_6dJ9#ky!ky?XjSfTeo>
z+b|G-;N>rrFE>1U$1~fYVzo)UlU75B5uJY?a^MH+J2ae|xG(!kiP+FZ7nIsu@v!?F
z(`|5B9i^WnOV`$-+SrMhFE5nAvL3g-9{G-R5CDxW*eH)KywRIAGh+U9<idh22LZ|D
z{(I5pWIuB)SeOI`KNHp%cL-=%g8>7>_#8samKVsZ@x-%yMf(G$Y@|p=rBjD)!540t
zy-yr;<RWOj;bhUw)c1#4n!0F~ZiOzrE2v&s;3ynC)ZT3^UzO<UmoqD-#B{xB0naNv
zcz};6GP!l+Vn48p;#k;!L#Wlavw1rcOP)Brr41e;@?|eAWFtIS#M?o}cJ2SUKL6kC
zPX~cl^E9j=Gk66U<#d_bS0Y0^_6rR<Ra>b2V6FOXu&2q8bIG{lI9e<}q-3JZL|Y5)
zLEQ9w{8Z2^R!9^PWn4$VIm-0Ir<nqsL3QSO`4V2I!MuL)_Jwn*BpycM4$crpA>4FZ
zp%&(r0a*gFs}#tr6=jUoVnd+MQAsM>XVBC#6@mfbA?Cb1$UhJ86yRuFcw}=zJUb~8
z-!dX?MgT0p2wk*73<hZ=uLgq(6aet7W@h<G%c2eJnsn7}&<OowCMn6EfA$GXRD#3z
z@)rSN4Rs4-Qy(1oC09+dPb6(NKp_un4MI?nJACU@A8mlGyrfi<7pXrH<UGZAEAkxh
zXQaQ^^%+<%Iv*;y17=DRHiW@Bv!6fw=k6s9>~i&dLI&W5*kgk$wizF*Fu}IUt;tjJ
z5ACfePz0>LrEGCPVbuY?<B@BY$>pd?fc~)^?e&EcVx)WOJkY5`Qae(n4-OFQZvram
z)XQpqH+h=s_264r!(Bb>(567XGN2%cksZm#80fm@tWi0rniWeHk|S|-#0i0v(+UAa
zO!L>BXdke`Y{7!jZOX#vB$KHe2)K+#)G!nf=_dAh46ofbaW^H4@Wh5Wx|yyN&L_4}
zw$9V@1v5UmabqpdiSE++j2b2fb5O8PhHaoKBnBu^#RR?{;eNj4a*_}w^m=RPxzmJ}
zK@T1v?k)sc4HKB*p*+x#(jmfEt`vny*0a!f+$LCL66u_DE9&%Wd=phRy8V1rNhCo3
z)GGyi6mK`?n&UI*bM`E&GA(bg%W1-1Nn*Z;25l5ikfiQPe>K&3MQDqpS4}8hlO%qj
zMeWUKnd*rF{1ya)3=8A!+N#p3CRd{|Z0QckNZywr!3{TwnV0NETqIF-1nj7*(wY22
z2*!+xr0at^=f5=vgfMaWP7hC?-q>fu(QO`KpZ~p`QOc{Di{5jn5H9Dua%a9m;}^{N
zDe8$BRLj??L<7IsPwu_!u4@c!j_oPb96PS5SSNa$yEy0d30>J>PUsQB4kFp>Ky$RS
zdXrSPaHgyaG8k<XO6C*H7ofFwsZLSEu1)3>bx3a?zm$`U&^=iros=A_F93?FubnjN
zQb#}H0(DG}unzLDqhGypy*mR^M4?IQb#wK$UPGv5O16IPyTp9x2MXDbtmPz~0e<v8
z2p6ORiN1oC6iiD}Ak<~u{gdVrYj2)kta+HRTWfRF2aZikn@J)+5>fixNF2;@;_4fo
z2+7)7hKR$^C~(d({mfTrV=8PJmNz#>_2dId9pSGe@yDUl8x?FsXr3yA&<_yNKb+~i
zD2sH8pEh&-1S;_w>3Vmx(=;<p)W`B<$<zZ{(6(?(hD9Il)PV}~NKQu0@agytGccAY
zUkE>pnG5r!<k0z%)%a?p0=yj@w;Dw7p4^4uN}f+QEj69|U-3@|fl=g-o^blC&%^P6
zoac|8H~(FuX1Rb{^1!`ou~ingt*c@>1otLoRoKdBw$5#H>YI{TBWtZtowO5-iOVt%
zO0ZmeetpkLOv|7GZQ%D3rea_O=+Q8J_xCTAJ`#{kLWJYCzXCHyLbo(8+g>rvi2;Z;
z-p@4_(RN@AasKU2N*a#3xNbLr<}dnCr-wflJh*7T;%#}2`}&OoDr5*(mzAj6|3ve%
zwZS!s)3^tL>rdOSjr*9_{x}C*&U$-KV89#LF%&Z@iw4ekme(64QI)Kn6FO=B)n$Da
zYn0yai<_>3s{Yx!j)RY>K7>Xs6qYliO$rtaKK}3dPo<@90|VHo0hIYW21==Pn=oOi
z2<twIcCTUldXMDs7jnkbGIU;x<*-qs#Bcw@!>?^H@iUJN0HC1<_#er}{~P6JY4`u-
zrM}X(cE=iT{+_8lJ092l$DOVAa!<bH(0mrrup=RPddQ%M&<YSBxJMAue7|*PPvB`8
zJ>*E-Vr`G50j|DTR4tXeZk*+_{n9-tRli)X<JU0xqwrkdHMtSYwAoEX4i0YL*uDN#
za7D+|sRL8e_&zxmJG$=YI>@t0e|mgXa@AestNuyn&3%=U=(#?blBmZyiG~lu)YF^v
zt&r{WV(@kqN8fnm(lJHHeQCp_YclB>X^0lQ&%=!$J6Y9rouVFX!!h2mI9YjL$9$f$
zZq<fiGvbGFZ1~5{JVACA4Hv`Rz^{2kf};k8-MHKKZH*@)?(}5w7$*2R>~Yw}qeTa%
zw9Plg6|K#-?w?y&-`2KTtuj@a#()q1-x~a({rYOdTXlSF;K;dCwHd>msJN2;M8!@&
zISw?Lo%Cq4mMdc(*KcW$lRkY*uV$B&eM7*FE#FyaGmqKtcX;XI_HN}o_??TtX%BxD
zedEHZ`NjEJuRViy>z^(|o;}&XP0?A%>35y{NNDEms5}#PdWqiX)PqCM$Kk)O=>ksg
z1#z}Fn+b^(K?B5#8&^tgv$6hhIDWIr!28>!J?UAhZ}jBJ3C2;vjH5@lqP|=%==oW&
zs_AlLUOwQ&m*p~Y_?*k;?9&!@;o-q|<%V|rWm+Aj6bax8zD#HLg)8@=d91=l-MOe~
z50{8ef5)buqnhWF{ciSx#c>XRcPt%(zv>}&Hy8<)6w~&5G=nq%8GE<U<t#*_*k;j;
zv>}ccQAWd&AEd11i==a^WH;k&6f(}~SCqhMEaD)@4tzr5FhQyZLm&J4nR+CnRUtXR
zxUPXf$Cit)X@D2{zDI6~KYhv&r=}8`MNvx<9aUKbM843MGRXGZ_i81JUt6Lj5KD<k
zC_+K{CtmW1PK3_*MkGRro6MC(Q9EH1Asbqb`o^JFN=P~SjI!3Vj!g1c8L8jFHY<gx
zZYbG7#p*m_wq1fxvjhR&G)Y2ogX$)hyw+J6*4i^R`2<TY^i%bK8A%XTPl!vb3zY>v
z%;MUan&;pm`(a2K#y*SKb56Bt;c$D6K(O*YX(aY|<v5}keoDgLRH8jq1xZ-72<yjV
z*4dQuB_M4S5ka`VAJ8-6^t(;<>)YFfqf43SK5;j*|8Vq^k_MRu7~!R|^Vu`WQ2)V7
z4-nqMXbF2DJy}mXgu^_L+|c;oj~1~rVo*F4#7!Mw4z+Q}9fMLB11+l|jKVVnJ2S}<
z+da=jmKN>aABY*S8Camg$AAb)G#-Q^21;fJAxB}#<tIW%ixZ<ekt3<MGux%15sIQd
z44PCf$pTTlI!zgdihxQAfGr83CPe5+CSI7Kh7gr|K8g&EmJkq|@`Pm@&V0Ocigei_
zMr6$yVF0f?FqQkf%4RBH2<mE_7s>RrA_usdMg!tkMG~TV1>_<DokT>Ax(G%DTbrhS
zj1l(OIat&$f0=afS4%LrJSoc=Rta*E5)hx%iIX*te8*OHA?Q*7U>j*T87vyvLBra=
zgmJ+2Q-kVOffES80SNK_K!A)OFA1LTwImW_z?p3s%=T=?+!GouYJjmLfU86ERu(py
zDvYh1FG-$a#EDzfAo%TK$_Pl6sbWTS4rT*QHo`mW^lP1rx%7nSUBjp^fbPcQnes?K
zfHz>^$~ZyVd`Am9OeV$?!@I|}Y0i(LJAQR<qZdQ=fCLN6gyl`h0Lpi&LIL|tPg0tA
zn8jowB7ExtEW@2iISmAqkvm7I?g<*ju}xfQI6uVl1w@33l+Fx5JcAS|K`I&!1IH^w
zC-nm`X2Ncobkt!{xu;jP=3DxQR}?x3A|+7}b+d#dg{<;n;W%IB5zUA+qts!~_>OMF
z2dYIDQu=%9jr;1Zv#}YAd%-Jt@URZxk_BaZMKLcRnju-x4gf_^PEd8lgjDE=8kE_4
z_kJkhEXL!KR$X_2-lxu0sdoenLKDt=Q%C*BVu=Pk)1Fhx0#iO?ya0vx0B~|pD?x_T
zfq!|z;gvR`-it!%7sU2?oeiLa{}S~_h~zMh7Jz*#|D72Wpizb+O&~#`U4l0X6{N$G
zf}#3*AP@;Hh=rnt=W%3kIOdux6DT?xp9nWN4iV>kTxr7)bxH_HoKOj5r|?;1phhxX
zHYf%OW~ZoFp9NqX^&Ugqn{DiGAHm-y&kXvJ+zvzu0MxR<E=7vW8MEgmSm9vTBn$^0
z)2t&x?sP|7&W6Cw0~3Ni0q_^JMscBBq#AvVC2lA{Qvh^sqJU4qoDt9pBoQS!_z15l
z6u^nJSpXA3$%;(C2cXgv$y?sUfzb;b$i1P0OBJyJ&lH366a^fN#qI17$kRXS<{}m3
zlOT4y^dRjg7m;TBZ^aK#e^2Y%N4p>N!{0-+DB64kG7x2n<G+ndfz5=RK?{Htld4t>
zP7a=MC9}SC#PLxifJ9A@D-wj&f`%C$YKV{!@*wdAVF68I$6M(dq!a*J<H$)&P;s~o
z*ONyd&r5II@t5BBQ8~py1q}*3U`Uc2TP1*!&<72%ga`z9RtUNx@=Vp#kwyDCz=<S)
z`;$~vBv4MtbL2}Dpn5`V0={6eEPasRF61HeXBPP)0-amZxC+K3v+=sOk*vd8mlAnt
z5E2t78HDh}WH1|p+!0w@e{rxtyMSxJqOnhk2pAbikY8^jQTdR~kT{aLErBWshbpQ-
zSc(}v&zu5VhK{B@k7WXWw>%>h$6S-pjQ4r&5xlr+4UmgYgd~NDo_Old95_s@6jY(C
z^B6a9zR=rUA>a(MNBt8t{Ovt@$<>5|5ow?%gA8C67Rg{tD?d^z?4Tqf0BZ!lwZ>s6
z*ri;ArIf0VXMyWsq`ESAj_5)`1Sbe*G#Mbhw3TuaE9RsUDDG8<U-G=Cq!L(BOOQ;M
z;~25PqXdVeQCQa%QFe3`kYT%&_mHdW+%qVkkD=T|W>c{bIoHyLFV2VjI5qWhk{i`I
ze(p!FKHD;TW@{$aIlLWJ&2~FA>{%Lne+&UfNPiQ*4KJS?bIJH+bG~V@bIkdtTKyXM
zr++^?uS$2EeSVHh$5&Rq9^%&ZYt0774|u#^bYJv&HGV0*f4<<Odwt^|*}c}~N)n%s
zT{w4nq&(Ru?Fmxsxeg6)HQDI6Px1Lg#)E7}&>4UFe$!|t-i`D;WvyKrQ3-xFe51+p
z)dtA&>a8vdWaE`l^q+h!UdsyB!UA3pJV*N}fa;#gt(pRKm$Ws#tLU2d#X5UyWJ{pc
zbL7pBFBROFshEWH6d$6ZFY*hfE<`(->QA9D>}lT2Y4lY5Z-UPb{W{~Zc3KWkY^p76
zW~0Trd7DF9X>}}ylW%j`+)8e-+|kD>RgFPak}XB;GOyd{HmX$-4=UO=Z&gmMUdf|h
z$)T;)M{PIVzHgolT<SYltvFV1`Ek%^sxx*r+&VVAcV0WCR%tquy00f6?_Z9tf3__*
zb~7!x?VmT_cRUs0+%JfIJLJB#m;L;_5>C+Xr+*ByQAVS0y145v3p4Dqc;mvo-I39D
zQQWj%e>(gWAPy@?<9lci^6i(*6GO48-niIWYHQ?2zei?daGvQ816Ee-PH(Q-ymegc
zu#VpiY{Tbgum|DNuRC5IwzYS-bJ8v+OR%oHZ53b5eywD`%TQOz^zAYiS6=~Rr|%~3
z)GS{RW!S`%;R=O79ZCfKXE~B+BQ!u0`i=tPf>uB&!KEur4lQQm>2Rh4#U1118Q#GR
z2lx$<Qy{?%qgsTePXu$e5)@E<A~R4F`V<qh8Usn;&jdy$LQXJH5p3|3nv@_6ErdJ)
z%lcL=mT@NFQ5v3>|BmEgOO|zDfB*qiEO>{$BgI*Oqr^Qyn(Y!y4UyXnF^!?Kn4N95
z3ADzhaDht{%r7UlfE1_ZwF9we$sn);>C(;=ItD#O)q4pQJ5!_;Rf<nqP@^6(eF$e%
zxFuL>H%EgF2!UzwK0M}oMG;pnNYHZm2czBoi;p*T1U!{Ar8nmv!=)rI@D3JOzy~<d
zD}Y~2p63%RFz(+^(c39xBros@7FgonFVWj6hV-xT642ra(d=3Cl-kSV!)pF$LD?Ce
z4+wMH>-hNQa-REdM*Q^eTzi;a#rJDH1ysp=<o~U_Cr3EMJgmJ_Z<rOB(wk<=^0x2q
zg)@R>hr=UJ@$DO5=hH)XJ2h8n0`mJ;e+0YILVgg@58myoWHR$<Te48!IzD2vW4gfC
zLtAI4^PoTj-97yBP|&}&t+B6|v@Ogzrqk?Gw$!1tm2wSu)gBKJM0C25*wITy-TZm*
zn36e~C`QfEwc{JWDd2~9FWA;qxYGWxbN)Dfy@xW>G%_0#c6GEf@!Z8*jc&T3$6NfO
zL=peb<z-*Z)cv;F=k`seDHrG5)!qxobTr-iMy4KGkMq_J7ak$lWA*b(vE~hnYW=pp
zZEM|(Z^Px5rHti{ep~`3D_u)1ly`$!rIEMyt4+_e8&v6K3f_xVjOt~R18!zZ?fd=k
zc7L1qGV{mX*ljK>U5i{4StcH;TN7h!WlHS=f^-!bCU>XSGMi*Kmurn{o35_Z_w=x@
z`7>1(+fENRCd`c7*4K7m7l-kYG7?1dce3vF=7?t@Hx&2b^NfTGy0?j&GE7aJm#mwM
zTbs35hbL=ntF@PD>1YdM-SC}Vsj4rkV9wIT;!C789eOB<I`ASFug+GF^$rW%$mWev
zlfJvYMB%@aQf3!^kf+1md0(`dBUDEHu*Z>u%KfeKy)7gCphv-ad-eQZh|`^ZOy(lQ
z%o;E?F34+%Xt%?bAR9+R^-l4{MF(&+Tl|^~z*VXUaOybzMD*s-p|XdATjlE>PK5)P
z`;jNR+OZkE!y>&)oe071Qn(uwOB-shCa%0sL%x|=8w{4(*wQPKg<#(G(^hfvP!~gc
z4qjvMKQv2A+0*j!*5uoVnUu|yFQM0}nl0N%jL+KP$5pHA);BoSqglH*_&t)7A35hW
z9_9{h8$IHOpgKCs3rlzttxGvoaJ8Sletzp~iQeQU)=kWr?(_i?os4$e-Vke|t*)<*
z0oE<MKE}b7>N?xK$J6=di%jz=Lw+#w>OXmkFK?di^R7j$7vt#`MTMdWJ@XF-2H#mL
z7u#;mx7XD&-`#`3Vf(SM(?Tzq$g947c4If&;~xW?tNKK*aSHDdy|u$6$F&hZL}a(L
zJy?miY-wKsMw`DdWQz0di}VbU)@nHZW_cTj68gf`MeeRnh8NzGA3yh9oLt;k?h0U~
zP2*FUDQ%b8L&1;Ni9d?F91V{?zhb=hZI6ES%4?J7gxkuZ^~^a}6I(S4u3b4JW+bk9
z+?$pyQ51Y7E8D<}Qe4+E*s^rt`<|H@yyvx#*CQ*$&3sJO*U=+x&l1(;b)k)?AL^J5
zyXEq9wY539&G7a&UAV5X<g1s<Qgt7i9GsZ9EEnO~+rd6AmQnGe6LzWhZFsxgo#opc
zyV<lErQD<0)$FI0F74jcGcDpDZJy|G@46oi1;t0iwD<JyH=Btm9t%kFS_hKSJeHB<
zwD(1%Kfz5P-$(63z5T!99t%YBT1S%6JeKj~v=2q1IZb2!f6)wcc~;-p-)cSn_4#jd
zHy*PjkizUfq6}qarq4~4rPLJTI?{P1HwS<S5l420*|F725U}xnkBdzP*i1fP#?fZ-
z;{d@dLocWM`z6bo28#9(86eg{Xn@c(h|&<{YJ{NoESQ+ofoK5H0Hy#)2axt5X%8XI
zfJyr#b72`k{<n^n2-2m-t|9C)TQD@h=z#w>kV&+L2>+yYS71ZVe+35mU)?PcqEpDx
z5d-QKjxhff_<w~niq;sgs~b|MoQ40Nw|!GmJ%FXj{@XhOp{?VgAzo?f9l}<jLHr+&
zwbn3c)|eRI{}~=dmqzqdRk~Mz{A1jV@)t}3xCn6JjZlJk)xJJ|S0f+j1NJ-2Pq^0~
z<vYbX*@IIJG~h@0H~)9;w|dUs1S+1=hdX_sz=2Hzq!Q?V4-13_2<^RvrXc5GqpPou
z3gExK&ldts{AKIToV|)s_`i_(yK}erqP_nYVdoelY7l1W?!ImJZQHhO+qP}nwr$(C
zZQHipy?17_$?PPvn@Z|u{W!^2m3;3x=b6?R77w{to%228eZu|dMgEA@!gKJqB}X-5
zRRdnG?f*ZL|A#VOnke?U4;u&jJwz3{f&b+Gr^=9~Da3;9ILi|za_GM!ZO>SrK1Jtk
zdsNh;^Cu|(9SQdx`ePgXLx>utwTC$YB2nK@Q1$@%U-dZRRCTu|-u`jQ;zsdEPQdxs
z54)}3xrUw44Aan*xn<HGePV7GfVSiZ66z<YL*QdN9q!<|c~`U>xq3KXm1$ybzakx>
z|L)ZMGN@WT-M)dI{tw!2&Rc2PfI31nsT=+&I-WMl<b9@oy@r>7@A!anL=hn4uhS5A
z+(@%@@$H9B>{Mllp*`o$?$yjV_+X9^@neQ5Ueo(gc(S03(@ItH+o%jhlD+&W0>y#S
zJ^5(Z5N+5VV@dR_sDXa(#&xW~DSkb*!G5}H{HS@v$>_w^k2bD&_D00E;<}|4%&+r4
zljyJPzmgLLd}@Q%P7u}|r!EsK0iqQY(MV<&UHj)Es7oa0!Ricy!*_Hf-b8;YnL(k$
z$)pK2_A{T-Ebjz!wvZ?G0g7K#QRhlrnDj`<Nn!t+wdgdAU28GdkZV_t7C7Hdd9R#~
zg$Y<`s#x0&bCd$SXdb6@=kWe;Wl0@Y`{Zju;Z`^XmqTjUeVDgnMjx$nWnwKkAL2aR
zT?Yvb->@U2{}87P&Kz-Eg?sq$O)-Vf`|KndOFBgqbxZ;WG{2ePsVe`r)GR7JGqHG{
zlyI?W1m+w#3LM5;(_(T^>=VJ+iYG34{#(bZK^x&Sq7x9t#&{1bq=z;!U(how8lTfq
z`V4cmVGgEkoYa3IEG?v+1TT>PTs<f{m%)n6gAF&9%<QSLNLi}$+REWGj%%Uf4a^s_
zm>2sE_v_a5k+&!|jz{1F{G6~TR)+xTTZjy^J)cwoLAK~YIl_Kl1o=O|8vt{!L|o|%
zQfJ&#&^K}A-%!PLIRk_WSmn?P!R226idviZl#WO$Y8g^-PD++UaTfLQ?&8onN>N{-
z`Pzq8142m~(pTH1F5O{UOXZ*A&9aAB;su0m`2SojgdX^x;a8`c6FwcWeN6|21{vDB
zF5u!hfs2D+2Gv;UZkWeo0CE6i07w9k03d!qe1Lg9^nC1Bh5*Dk02a)&{yciJM$Ig?
z3SQY57HR~L0Dt@d`vCL+=m5|Frc!~Rf2sO}<_9~WpMX37yZv<dX!B6#pw5mz7bDk-
zQr$LgPyZEd#d7<aM~en}F?`V8u1MfUKD!^y401XAu5&s3)J_wgR<<9$1iK%}QtS9u
z{hGqMkBM7GM+@2*=4OyxH_jdREId&_L+oeKJqhNk5f#gaIL50&M5irKxwwsWrD=@n
zSWzq18~cx)N?OwP!l8<?#7#Li$M;|!N0L&^o;cF5L$PPq+dADnU_GqP0{qH2j!j#@
zwhspBarCm6bI(R=8|aLdPE$Fyi<Vuy2XGK1WF+c_E_q6*O=<%fad7VzPo4qW^uXB|
z+-Qm(zY=O!8}jZ=!E})&O+b1K#s)`}V`^i%_mo0Z8s|}s<Dy4H08vc>1Azht`tkSe
z8mNR5^2%UiB7(D?2l9SffGS(b4gcHt@bltu0|gwqU0I%go{sE(RewM_W^pF+ztcD%
zYC}|iqjaiuUM^%$;@)^4PHwYZ{aFVyeOYWpN&wOWTGPqrUX2~W#;qF@i-+|Y@C3Y&
zw&&ZvCvS(vO_{DshsUj3cWGrxrcFd(Hn-JTs7Nvw(^Wm+9iIuIf0)A4Q5&N~DnmNo
z%j$|1HtnKVs7K|y^tY$PtTW74n5eHUlG&I*kpo2R6wKq9s_Cw5Um+%je^FLvZpH&u
zaDj8w9CO($ks>?DhB(iA9Hnk}JQlrGsHZfbe&!AwZycK=Ku>AgXYI=wW|`0WFDCVi
zTY4dZf)%bEWM~K_y1zRQHH2#l_-HkfJaO8k9K~x2C-gt~k=&qxg1I1>j{5JI<@H_}
z!a}Y*5T0Z$8ZUKRo7f!3yhT=*ht97rA~&WD&Udz<+gGVTwtHu4on^swRcm8GL+3x`
zpS_I{c8#Nzo=Tb{zwbsK{ED7re2E~jVr9Fr?cLqt%LXfY3^p?Ic&>@Goxk?2y9+mp
z89U8iGmu9T^UgJI6M)+gv(r%v`wZd9x(FbrG6GM)<oB8c`187V$=yOr6ARsYGjp6|
zN3WUYQBSvL%tWFb-h3)9Q5$aDo$0SXbXF$3ov^mb9&hTaOc(WYL0W?ojn|}O+>Yz)
z^*#nO6D8~>L|y2&%5Qovex4GCZPM-pk=}~1Pw)4PIcGGxR$^#9-O<i^j7FOkm@`5j
zMLBP(g8g$=V@|L7ZD>_pG%J!5xo2r4o5hj_zTMw#a?4IE<PQqn*CHi|ZIg60JCGjf
zMhlKDt==4}Za01oJR0tZc4Ip|Cqr^bJo)j<ijEf^@{n6>18htkMj8*zGNf*4Vy3Sd
zU@*E>oafrhu^!B5ktfz~nO|vKi`uJ2qu0mv+ZEpSR-PnH-lswgdpF3gu6CkATN5kA
zS<Hx33q7oLDs|Ow513m^WXD^emM45Z1)4yMkCz)bv1v88CSg;hcN%Xu0~4}uU{jM<
z`s+}pOjAv#$x?m2?|70YM|5pm<j|3)ikNq<znd9rUM^D$GL=mKH3WPyG#`vL>Aot4
zOHY0Rc{bf*eKv6Kw7OMu`}h&#{%9RUUd@w-X2-4>W@3*Px;vpNOXhetjeZZT_hlFR
z_bOb>8j4rzYPykzwyJxchT+1X6#M8e+#M_wl)4tf4^~vDyf&nz4|*)e$|kh=Eaj}a
zvr)&M60_@4O`NYgD6MMSqQjmXr*IvCh+gG*LrWgGnYh@Lq^sr7IDNmIG%fPpPX=ym
z+4_VL(=z`MP^H6ike)i5lRWa6j(0U>Lesc-FuJVpYT~?6Yi>U}6*rY)JbE`w*3Dy!
zEDKOhm|SOfAC9Nxp6REn*(-=|KX@@zD!X_DVskvbbv>w4(btY7c+p22WJuR^wyM*s
z*A_qIdg72LETh<Ru0Iwt|9DkBP~m`1b)9i=nA5A8n_I0&V1(m4nKLysjY}^aWEqD`
zGv2VI+as=;jEJpb>=P}}W!|Cif#d<n0hR$M{j1VWt_DE<r1hJ4+eujk5at4iaKbul
z5~`d}vdLhR*{~?ef~vtVUyxWxsZ6s^vtbCOD=t=+0HoiKCb1rDwqODLuMdV5NM4&R
zDA}V7OP8(Cbfzle1_!$7@O}l$JCXU5IWBwYm-nhEjH2BjSQ?NNU<rVtA9){=-UKE6
z@qe2XzL<(;CjCd-Hv#|v{{L+0`rm<lCu=*a|JSUrT1C>fkPe<FRhPcNd>KcNxMmsW
zwJY^Sr~s0<q&X!GG;v!c?6=3~?&Z&)Y2t8GuH7kCI9V-_&cE{sM5ahfV6h8V&uNKB
zJ_BNZ>HJTJC(t|nBYMl^o`>sQr|1ZZ36e*Z_W(b)1|B&Bm}dVq5RlmN&DRgH=f@#|
zKfwKPjtk^>e11PnMZNzdzC|j!wIzzp6Dl24DMF?1<S;3?l#klZU=T9rML9@z0%?<b
zXj|4YuX?KBd2qLa!n_p8%+;@HVv9rf*a)WGYm$uHG*8wZv?i^6>x9#>T!S=gq!Tm*
zt}3Zzppvoo48B9T_|Bnn&2^Fae;3%5I=Djh&a_d@L(usrB$KdisTi-7BRr`?_5_JL
z0p?;Oh5x=42|2baX_be-d+GFCW#WpPk#8hsU~=XoA%<`zkV7=2npG)%=*xcXRJyZ>
zq+lC5$FMelV8IaH6zZ%g)#pcUxziPR;bIbkbCY5qC!?$U)Z27$DEDsoZ%%fg-)w}1
zG$=cYN?RjdFD$)~vF_$5V*bHE_Lgza0+giU@qS2M$4~zXiD}tc&#%?eyfvUTS7dT4
z1);{1d=O>KdLQxItq~p|HG1_4)i&8QU$N7G%eqpq^vVUYFPE(40NwxT!Nq-q-_X{B
zEZBtr6{GZ@>W}i!28iz54LNNSngTBOsDtnz*>gc!i^AOfQOC&4{DXnLhvkaFiUEdW
z6~F>~wV=6D%%|amo4JfsmctWivnk`*jmhosvvbyxTVG>LZkGl8LTye>I4>emK%6C&
z++0+JO-94H<dE`IC)vKBS<hh7X>c^XPz~x4g54363Nfc3K(bmbW#&wZM3&rW6w*;;
zR!M0}DDOc@lYA(UxwZ21-?}x~Y@s8)!2kdXkp5?H^FQ40|KHnOt>*a;FAM+6n`@9!
zvE;91z<FDk1)Ox5UkC`8>|qgqJo+JzwYg?V=6dbgyT1NRNS>tPDrS|no}IqS<zkYx
z?*i7cPd9z@NCwW17CC%`s>oVmht9w@t>$2F4`k~85#EmVB8gMtPVe{47UI}1*T+t&
z<}=v^2>G``h9H#~<S|c*E9H-Ec=$1jS-_eySZ6n2pRPFs<tI);lAt;rerTvXpbrwG
zUaoeEeb`^SMP(FGmji~jNH?*8WHjQTW<)V;n?rrfSkqSlBp(D)@wM^${eM3@$_kLp
z(+insDco?_iDMOxX8TV9XpgukeXwC~Z*D-zH{_7+@umawjW8%2LGg8m-MrS$xnlpa
z(r|;;Lf#0U<9%6YBZ<zCP{$_d1-j@$zk82F*p7p=w&$@N-RRL7sYIA|T0cWx&rRPl
z_V^cWOkNLpx{a;}=~&ls`34cn*LlUh+j)f0^sv>Zl&)Mxe#<1;LE9vm9rVxqX@#>f
zJFSbJZN;te$oA#%^F{9n_|$Ms2Xf$-H&M@cj1_NfmHcEsG|urWIee|nKBXGra);gJ
zyNArI1J@O%0nZj|&<b5L^)4XtW>eF!jY$aw1O6lI5|Y#dVyJ_=kf53V)fSHnNMPD`
zZJFYiTS_^R!|-SoQ{I!C??C$jjkrht<>TdoFO=QQ31G+r^2E4iAOFubG-o5#ZHvBl
zl_v9RAV)#|WUL^>AAm8Y53~uU*c-qdN3+Q5naESqfxkjuxQuYAgi851Z1HzECvrLc
zZ}1GJ5bmWnv8BZVgk}|?2g@i?uu*h4!{g9J^hb7WXLhK3!Yxk||4jHeDIiO@)*OdU
z++XrEzjYT76Co~=bk;&=emiU+Mq<N~p<51QIKnfU?7Op}Fftx{38W6mB=zA#iSoyh
zGkSLE(nZFC+3*<><k(WyFlmnKzXGN!Y^tStYd+PY6L>=`<1O1FrP5?3Ed`V~=eXv@
zPoYgisb;3qVR9bFe-bJdcf#Nq1Q-aEXzVYF9QC;nhBBM+I*1%tETpnJVT?yG?#txv
zsfe6P?JLDi=rlx+L~^0iR=IMZ2^8V&v)^O^U{?Glm~uR#iy0yafe0OiN|(`=b67BN
zrN{9y2{_{C#^pqHnm;<yh-~>iND@gBQJ=V+GojXu%AA5_l>{?nH;M|2=1J@`ngvZn
zdS?{NqvJt$Z4PK@s})T*jdrpU)yd_@`>4TBgPy1^tQ<!rYV-aMkXIW{5U8s>wL^Lh
z6W*4VJ7|j$d!pUD6}jsiYjK9zWFUDpcHM8~iMhZyGUZ5_J_he_IkTpRlge^MP7pjG
zl+;+27gW{MsVSzTWW!RrDAZtOi2<e5ZJm^-Nf#Vp5WwbZ14z2XJPJro_urFS8PYb@
zUE^0AcP1ikc{OFqb5>@kFKTOvw$RQmw$vjoCjiTj*)1~cQ{6^_hGwQA%j5Ele>;P*
z7ytHWN!7Bv93Wl8;2QLuhN1<jctxobuom&c#q3h;b_ZWe;a?5DNI#-6;o$A@m^E7-
z$;7e@=^ipV<tNv1PR=r6`Npk~E<8Nl9U+C*(LP<jGG0EMeH+V$|AV1iUOgZcPE;dn
zs^d6L@G&mI=dlcjOg^e9?(X7rH^ct2aeOUuXsbBPyr$NYvo=wPf0#Y*QaxW*mB&CL
zS$xT@ea;<2XBQ*{j|k)%q^-Ai8=%z*#E>im#?Yw@YpGR{cMZtSYL(tg#~GLy+}1Lw
za+%eT+_YsWe<Z_c8Zb$lzy-u%cr>5xPolb!oI%nwVkDt_QlWj)(JLjs#riHJmi+XB
zZ&oz?`XZnlXghhta(?F1K{;mNFOD|k2_InG2msg4N!_<Mf*s~q(8WS}<Y(S){?2*N
zkyWV7E9-Li!J=K$ntV>4N%Vhwu>Hh_JM8a3!3}hy*4LHnDkaxV$j9RjZPO|0oK<5f
zYTa4EL3=+GjW6F5NKLN&35BQ`Nx#H5yMoUU$RG4l5L`>J_R)2)HtK7$F=q9b`lQY}
zY_$v9g{0s-R(Afo*iR9|siv~LLb{beEKmqo=KV<k_=c#>3^N(qIl*L9wTn=Yv$pCf
ztKsyg)kTY;uXVE%i}Do?tvQD66ZYUr6v33&pY5|YEbtZ&)(6S{4lyh+SF}royLP=>
zEJtU%oqC>~*=pKAB>#XEgN!8Es?aG>BLqA~Gez|0`wy2jihO@`iOx7gA3Q3`{r83w
z{Fa#vc6P30VsNv$j@f0m0NJbKhz81%cF36;f$O<8_qv;UZN~X!VW6w6#c_2CCgW#^
zJXoy|9ZTP3=bJ@LZHtd~z1S(o&~$!8m4~kvISg{`EARV9O$iN#hZfSO!)I~Q#@|Gp
z$#ck2zVOBtIz;`sO?6=gP}<Ba{*r9$WV+7FsOmR_&6&yQKPRjSt(pmoml}5*n`VMH
zqeAu&r8~z6rW)9)RPHDr{D?h$RYU1b7->zLOb;GNp>0$Hq3Rygrd)!&*4E522(tsm
zz4>FJG&_WJ9Z5L{r?63ZX(cPQ`5)Y(wwSeMAz#6v3un6jcV6i!f`%%X3IHH__kZro
zHa7hKKj~N8mZ=*pExV7DN*x;@iVTF~w?*u(>OMt|D@Fo(3yV8EYM@hlh$AN(B<Lli
zzuz|FENg!L?#1RZ>g0jO=9axpx(&;Tg`{WT>ho3zV5x~n@=@c85#bRuBs?D6kAph5
z(9Q>EyFYZoCtTS=_6|`~=Sa@)e!$M(L$SM`g@yn_`q?0Yyi#8X8KH!{BIXcNOr60Q
zUG?#<R!uPoAM6>0l(zl@WWtX_r*;eCae4N1&+)$8Pp0IM0!&dgCX0Pgp*$b(MTmf0
zV2OXwJ@6wy%fYg_&v-QL<m~!AA@xj4Qyh03BU*?uMggpmh|IB|Pt4)_-_YF2aaqL|
z)gP{ojs`>FMiJ)Xh!zjYdbq|xvyYCjWEU#Qop{|Jj*h^)-TY=l#K<nD1)nI;M&ujB
z6n-hp3m5Ic9oRSpw--}+wVvcw&)K(eu{+}gNh8>qAtFWs6lkTp_koWRgbtqqQ3KI1
zRFG)KZJOY1vEFaL$>BK#{`7b5Y&t$&EM4^6d~bEy={)NlI9|3zci9nrz(K*&5kylQ
z<QQux;te5JaNz^J%Rm{YPahiH1fO$2&%9`fVTt7P1AKVX1=#Q4dEBO&-jy!?<8uiz
zWd*7f@WXrD15Fp46GYVj*>(`%mc;rE&gpY#=fT;>mC&imJP+l5F5-0wtqcX;;&_#^
z2AFYX=*n~hKP&jcOL5QaIPd2%@=?Ah0Nj$YJLF;Og6-RJ;J%-I5@CbP-yh*FmzdLy
zZHy55Mr|=Z7Ql7+JTOymFn{?ZVaa01_PmtViAk`=#LB9?4#?Bh@WuGYU09jh9Y3ZR
zG^}E)A$2$YykGVhazpUJs@4T%e1)Rw!fu+e-5WRo_wN2aXkL!v%EEh@JTjTHWI+xl
zN`(guVM_IrFlo#Rudd0S+K1gelHxiZNv`?k)>b3>lGO?IvuTN5d>x;+|7mT3hU5?O
zVWA`SmMmqP;ji5d2mQU#bszlb%<C7Q-bQ=MKUu-63QYSBHfEdw23Q&>!2APKX!5H(
zd+~ebq<OY!D;Zsyt)t6C&6x!srQ3zqG%PK{kUMR_D=tSEO)&Q+IrJ-nmsGhoVv9HT
z5?9G^hDT?I;+d+dGru+^{4B+SRM>2U|20-3O5(ZQ%~uHi?eBwJaFl!R#vw~0J-2R_
z(~^^VJH@xYK;H|(Wm`DHI^Jk2GRr{M8xqZO@w&apSh{=KJHuD@?E~Vsc>Mwr#S;al
zyNEmMpto$po2|nXZuSwzBh_YXd!Pbw8@Z@jdP@5_b;bTY12TZ=+Hul8eH$0e*}bT0
zI}49|!u5=(2K8u;;dhAcF<=9+>WD7-h>ix|R~21?P?w4sI@cS-qvx8C&-#22^vEU7
z-NUsb+E0eLj9U1C<+R{b^)q>M*^2E%bc1Xencc(X`w591Tm++w)H9T4#oV7ZbGi5k
z<+Q|4o1*$X_d7S`SLN#IsMdO;zwOc4QUBQEe2>V1QL;Km-T62B;d849_#gCZ7k|7X
z$tKjPQ2gJFQA2@gj$f|n)dwpI)wn(H@UR$AV{r{Sncl)j`L5UZyfj^p!C@oV%0EuU
zvfNc5wsMe>$1euy&o0$yPA@knWe;2sB9S-kH5fjbQ5;PQUMt+T-T?I(NMipWx!o4l
zYg5`etuRf*j=yyIB6tsl?21Z}+MFJFBt85k^B*~y2P}}YPt>r1-P<0^eBPADz+zBD
zxvEhw?cai*7q9A33-2j{KElg}X&T5QJ()D5@7V^ydviXfzutQ%9^`pb7k&(X`e#|d
z>>PpVT3>9d>yW%cnUnl-d;$EK+sz>)qI3*dezUNuZ*cM#?PFXpo%_HAAnERe>p&S#
zXCSpd@@WZh`!(pM2F1~ZvS0Ecgp~Zy1DZ9958If&iX^63jIWvyN-K2`C6#RINFcrU
zCU{beOd|72+mqErBOl#(;IEE<!(}@4Z!|Q}Vc6B1i<0p5|B<qI;A%~X&9Vj8`o)U^
zhHfv!pG5Nbo!X!BkGom3KLbLmL-A65EF3Z=<6HO?GbJxHjm>{$TImB9`w&nVc#-aB
z<3K>dW&QX5rnfJXNtNRv*Jh@G<%7c0ixSe&#(|!|W@Dm-+4PHHt!e_)L|3xE#&u&4
z`N%2_vY&3mh5`~5gOmj|=4FTeY$d=IqE!)Kct8{dUJ70D=QV=)58&_b^7#ydyi-S}
zN=P~gyWHgH0XR+2hP9nlZ4N;SgNSSkl;O=;xpk(!tw`a*r098GBb&S~f7SrB>fTaL
zL5;KEbo1Hf)B@ZA&GO3O7dDVlR>7TvlFjd|13Wi1!hl!zhwk9umV@G+zvLZZR2^Lx
zSr<!{^NX@$WqV9tA!U^B=rY<iW4zDCZU)W~2vi@*ecNAsPS0qVBscf0Z)|LDY-kc|
zA7K2;C4qLV#JM*)RHQUJ-rOBX5o>~I)O`K0-IW${X&z5cA~h$R+mG<p7S;6C5W@Xn
zQqj|rc3ehh^T^x7mQvHeX!H~*)o4*rc+?{eH>fXAb|XnplqLT)ZG*EpDAOE%$H+jr
z+lBe%3`ByoGF>smA?YWMwG$?`qQm_apqokbBWk<<j9Y1$UxHILzv<MvXfCHyWt(|>
z))Lj4Wl_+vEi|s1C(xUj^Zg0zc^G=t<9s4;NPk;(f@kRk(Ps`@S&MH-=J4!#^!Em1
z_8xXlsp?fL2Fd#Cvp@5pDxdaJ>osOA0x!pN3fiAZ9Z45Q&9}gaZQKdc`i-S*auqp2
zoQp&}ukBZiNQ-Pg!Gt!{wdHj#7?ZvOv10dESUlyQ1+_LS5?5z4_!+TldQxaO3?`q3
z{1AUL;a~czpEqtNkAxR>wQ|X|nPahXeL`+vm?b?tQcCaJEDJSwrBDdXGY(-U?;a+L
z1lqh1YojKAQhp#W*;3(4v1}tDA$HTv#a%R~I{h0m14i;n2nqc`&;REb%qOd;K9y+f
zx3^vHOjmH;{hqVcW3^W@&f86N^^Tjb%pExzzQ?BO%0&f#TB2}ZcIqMmuNsSv6{nNm
z%^A-DJg^%c^cg;d#?Exu!8F^!)L9{{o{(w>^L~4~TZn<oE4*l4hSqm-VmT#0y%;nU
zzd*bTMukbL99&I896HLZFgmL@Cq)5r3E_8Vs}WpPbmBQ=QQfL(%j#vk`&=c~d3sV}
zOWJXs`X3oLnNt!?eN(>%#>-=H=eU~UqEAxRi*XpYUp6cyU@ma3)C$(GcJ(=dJTE03
zGdNwIoPW>Iy&EA_GFsWHjrw6^%j{~z$ez!tvz~e}TnL{Bf%8T_&3cC$u|d1~p88TN
zs>kNqZwuw34tLA|HBMRCH99R;^P1Ws&8!Vgz|Jq>ozL!c9dd|Mr?3Bg;E+=tIi%O~
zBk2-xN0*?>*rras`UJOrDn6A)F_WU)%eE<KPrIo=u@-rgtWwlj5xr$h;i*^WvJucW
zQ(*~E^XiYv@!DuchA;}3lk169X5fqFyfco8yKWDNyPq_7pIa{ia+E0jPF!BnLkTf_
zelpUQT)P9=jau!juTw|&;%Zz^m(TJ!M|X~)>5jRo+oWQFSr&UeRVx)8Dw@)YCbc=H
zO?_gguwQ*BZ*y@zcZ|K@x(*F1Qx`CxfKNmN7{!L!F~yt7=yD^M%*LALfPt;}QHX(~
zdFJ{g$tUPyE=ItJZosYv99~1~>2I>YC-WA5i~AcY{1zN<<Bd5@LxYw}`0XU}x)FU?
z;3)D+N$R)h&zHts&&sk3l&YsATlw<V-RhiB{cQ6*+++0SmwPv!7o2!OuC_o|-G(|0
zp88iQYZRzIY5{UWS&&hGaqi2B)v7bQCgyjS>s^7*-R}*ymm^<G+sOr+<b;HW>2j50
z?Lo)dGmn7!NzU6Ky1c!V++x7{A3EHFa#dO!8M)bdcwydvvbL)+dYi`|fw(6%o|0=I
zlwq_0Z*Ug(q3is|#T{W3XGdwNcE<LIf%5>=CXx5F#1D<^&eOtUU)Lk<phvJi0f2a9
zkMGNqs_aNenovaFHyX+;Q|ITw$Uray)9sQFGjt3`Ey?)w>U0i8<V6SP!R2u3%?5ML
zh>Et7sw?rQ8&!<W6pe|Jd<NlV=TT**@Qa3uiHdy83L9|_L(q7t6AcdTI2Ae)7z%fa
zWn^K33Y)PFF?x}~e15W&@*;Tg#jbn?9I;Qnhr9-{^x))*?IKzj9rE8^l0E*6t)Awg
z#)kDji|rE;E>GA5UpkqZSAM)h^oO#nE$tDs&pEs(V1Ep8shD*o%_mxgK+2N4DJt3x
zY143Mn|tv}67q19zNpH1=)!o=?zkI%WY{lxg^>HondpdWFmVqiQf@Gm7_l`Qq@?qe
z*3~;}$$l2%li)koYq6Mh9(uGk4Ziz}7QXJUlg~j0+o9nhZ(Y1yZ&i{sZ*LC%VbaGD
zJl1vb`ni)lZuQoq4DS#Qz5|e+b|Xb+DVV>Q@p=0^M%(F6ZDK|VLzl}_Wu;@jCf8mk
z;iOJBx+o$|wI2#7b777gCQF}&uBS!yA~|jxc1-Hg-S%(<D_ii|+JS_W`TBOZl*&K>
z+h1?FjydC{Uz-*Mvs<ANw7n%Z$Finl;x{^C6J1s?c_dA{V~(w}S|}6)kPX-(^v~Dk
z>ntr|^ckWR)CU^&Iiy;#M;pSb7y_@i6upp6rJc4}02xDwt@Kov`&1R%l86y)^sgpr
zBBfVX$}j&)xp-`8ro?l;(h%;B=P!k?(^-u!6DLa!0Ljy>mnfyeqK=#1s;D5i_LTG*
zr3NtP#i2u1sm|F+s}jrU9;{ImHW+Whmv@Aeq|X(hH^{hzzw@m=xGuGmUU<2IS<Q($
z^&Q-2{@X#h*8m?)eQnPDQt{v<Q(J-83Fdy5aN2`ju(ci=zVT4CGa^4NNDM(TI|8Vw
z7{`rj2oS>sRHBX3^-I<<{_u`TRp^tTHvs38tD%zk3gl`Jq;cAo=!0oOTVW)oSGNBp
zPVi61&s1v&qb9EqhR9a}GIF-63?iG8dTnpo<h1`f&vFX~>Fi?vg<md$HR*^X4i#&W
zhEbQN8ZIblvgQ1$y;yF~e`DzW$k<A!Hm@kUl(J{0=%;8RYt|NRwo+d}LLB6kUQtp{
zu@)u`0i49JjA^p0|G7TlRb+*e_;$15@vM5e-{R`y-I}Jn=-&EzFfc}i;?+6awa>o(
zQvCiIoVQo2(SZP#NTe(&mWZg%EHT1JD5M|PpHe}RW_H4E5K_ixQ9*B^5;lnAlALlN
zl5{9DQA7?1<E3OEi_c>ySRX2e%}<dso?ZqNU6xlGPcptzkRD7hxeVHXO(a5m@J2KM
zM-O9hip01`O}t$-hdd3n%!niWJ8g$Sxl_#pqwPX$qE;fTJqKPvrfZ?>r<wN~@Rr}i
zXM|b+bRoBjUvh#W<%%_}-%zf;#*9^<&{IOJ_8>(NVaSeRSP`YH9q`W@a8q;L()%Z3
zmN`#uNfeswEs{MJU5@Oc9}vVB^Nb$y^|F6JrLcY8I=y<8{r2DJ>6fi(#{>}&i!tBp
z&`)BEZ5-Z<O-(+Xu$`khoZra+Gv%T!M#iWCn_r+_$f)YFCLp}XlB>xduWt^&BOex^
zzPy|=<z}trh%e;o>hH**m2g@~jXFv3)I7Qhk+dsXJ<~zk-{F$#@d`n!@Ny;75|g@X
zBY_;#whSq(Dn;QCAzf7@Dea0iy=vqzQ>t+#qhUZ;Iq6}N%~s1VR7ks<(q5FJMF!vi
znxomJ7VWVNX)8vGKsqUD#`a6X5DN|XD+R&Co;iRp%_&+&fQckw1$<n)H$qOO;*<-D
zmVGo1M;Hq^OduasS7QUl%!?55qw9$R^%(ukzxaO@wWge)3>Am#)b#x=^a7zZ8I2))
zG(laYuE;vA#&`J_OfiW1CEU93$UUXs?*oYZeC^_fcK<c5#|hyO+PQJr`N}vwuNo{^
z4>0^_g%Yq&$%Ws*LtPQK7Lb7Sjw@-$*B_=Wu`pNA71HSVXDuYB%@}R_(aqRHgk&ko
zhvTC|+EY!_<INIP2vASqz3B(Fs|8vqZNSdBIBPeQ6OYpjNi!Ukwp1~INWzEsJh;sO
zk?`eJFu+Wzxj;i{!3?EHDU-{M8l?-&QCxaWO2k_T4eQwp#8qb2K>8VJHl#!Ngp<dV
z@OM>`gD&Gcwo(f)CwA17Z^l&%PALr9M4m-h3{36aGldls8_0|5w|v|M*T}Y!rnJ9|
zYM7S*vB<AFg|{y;E5(&ss;7;0RO$~ZSwVZ0TY;IPOMy+d7=_`YD{6!8cLAP<QWzdW
z!Qi#Cz9;+<6L5l<%CfM4$CrRM;6+~$QM6B&qMjz1Vu2Q8Fji+lnl4jcZm7BtV$?Q4
z92+D8lL`R2oS!e#C(~;qBMSpb$7IA)cb3Mqq=-ivuLu{dugOp<L^+0_afDV^gjpr2
zsJLqI@D<I;H9vxoJi8~Dy%NeAjpPFS*%^C`n55whb<9C}$n+4;(2OTI3#!pRBldVy
zBpJ?JT<?@a;LYRc%K9igz<W)AwVxYJ7XH$keYXW92ls7!oD0*;qF252lq4;7e(C*m
z^1an~Tu`3o^fo*EGjJ&C%~fn$AwJZin$y|JRa?N(<oR1j(-Dd=B#U?M7n5xEVaQ%{
zf~4ktn78&^Xf(-P@mjQr%_rxmqHnLxy=c>&Ze?4tnfbVQ$fDa_%P#4D_&rAbrpz^c
zgH~$dlrkXf^`);kJWhmG8YJ6lDs)`bH!Q);N6CQkn5fVW$l(vn5k7Zt2BSqYw7+R<
z5eunx#YWTy*#E+Zh0){!<UXDoW^WnF%}cKDI=F3}@UZC7o=$b>(aHFH<GXSAL7u?+
z3gA(h%4rK_m?=!&UzWP6uRz{poAUN3zjXSG>TiM~7yMZHg9otMZ59p<iQ8jf1I+ts
zcK^X&Ll@9wk?hquu%ncei~IE0q<;2epiI9({SCHM!I_i!;n&cqlZwsD`wIKe=_B{9
zy*g$asb!w6RoknXXm*pz0&B0Kkm$N5IvkBFI$dx}BCv2lx9N=ACYpORE0QbZq!Tgg
zI5E8Mq&)G6XvGqHNClT(t?g;KI=pWAT)L+m3)?-pUpTDwJG+zoGGd=~e*1&01qMi_
z-f+QlwGH4*5$=LG`9ky0Z7P&ouXhh1zODlB{pwv|8p61^=onXU6lti4<>H!stF8Ua
zbJ)|3{rz2g|LqRkoEGuS0~>lz;>nx!cg>;nDq_n)w1V1oBID;N`>$iZ<1Oe^EZ~DF
zN<P-|KUB2>A8*g4#9liv5=H-*0lig>$x=2<87l}MB>&|pV_&kfA2!p~??Y>1Z4Y+C
zITBY2`-|9H<7Y;8(C^QO@4|TNc_z^JqxHv!?G10N>`a9sa4xCdKq4eBvris{%uY&f
zfy13=PB3=ASgfxpK5@^NoOTa|wntMy7DK&?JJ7q@TlXd|*2d=Z-VSj<ylr<CU}DeL
z;kPQ(3T5YaM!&|pX<__LEb;pJ3`h_)qT3q9W!nu1*j3s4o|+vm)R$$yMd;mR6zctL
z4gRh6>6W6;?8FHudCSbwP{BTKtqZlWft4`bs$6(WmF10%Nt;h&M|){Y>!*cg?ZMph
z3^&s*#Y<*n7}VffXd%1EdSC#jhn!s~^#C?ab+3B&3#Nh~qMm~x_FcYkuac)dxU}Tv
zGCo`i>`Ewt&pm<r`0}M~0_)|Q8O1~1DstvQ%VF{G*91ORx0`kS!_<l^Y9SBSZqx}4
zE&U6Ewc2>E`Thy>NW&Tvld;}!Gi;_DJkXkGfHe5k5s0!Egohjr9Z!#*2r6)W<{iXw
z$P#84#AM1>8!@lVc&z5brp5yzHFnH2-Q8O)YW}_fbER|hhp2bw*2*AHRd%Ml=x02v
z_e)G2%+=G;#q#;^<&7XdE0#5gtzM~X)%ArJM&EwSvUct+^5Fi-OZC(kQE*CaaSG6v
z=a607a?v(r*r2H>FSk!8<T0Jrr?nqDR$?w>$C0@ze+Daj3odsa_t(ulj$SS=IM9&X
ztv7&xl(k#eYw_;3W$z-iN8iM*4L}6%6dy2&s7^v;MqsPQP569ko@|wqVb~9f^DX4+
zs2>{dA7Yl$JwM^$ZvZUIML8ZgF|1y9q8RH*HB8uJH?z&p4}f8M;{y@pFON7jAJFd?
zfUkQ?pr1B+%v<SBFyOdc2*4v%l0!H@LR>gIBkc}f|2Ndf!F<}B6p&r*P{GN=!&Vel
zXB^)S2PU(!%f;m-#v!Xolja`?muj@_dsK3FD>t%p#4fm`jy<e-c}<)|F^UPIKxA@a
zMhX+Ec_L2&LRNOkL3MGAU|5M5g{>g?>_hu%(k83`Bt&eJpo9dKfFQnt=5@C8hf?BM
z&YylNF7}Mt4PFe{w%$>QS6q_;dX7@?VJ~;Ys-u2+eX|GRS=Px7Gkh#lp_4Y9DAR<l
z!ieNS3Hghou;wHR#NcKD`)p`bF8gMkC?WAiI0~~1@OlDHl?7C&b8;AlxV-8UDI*Uw
zV=6SE%Odf-DToo_JufMAUg309*~!Y7&%Yoe?`{fkpH{FILfP6$g&FoI+3{QYkZjKB
z44LSY>T>#_S!PS1C0;2*;d+G<<eg<?m<Yila1fE?NmgJwreQHj3*^|qi!(uH-X$Z%
zw%tnbe;`lf)`^c-LZny7yAwH+qZ|Cn#c&Jc$UQF#rj#5{4RtQF0m$il8Sw{GA@DnS
z6+Ym^COUmbkjaaKWa!E5IH5Q)`KTyIRbUFY9A~%*$3uwH^5ycBOt7U}hN6wqjKFHf
z`aAX5Bt8=CSQT%Zlh}<x4(ucw@3o8*r5`dZGYXSNV$s089p>WqSO?mPBr=JjjYde}
zoW;E+*2%7&?6k})8f1W<1ESYDvSKN=>4~}2sS`}fbktQA0F#M=xsHSibS|+q_3?Oz
z`QmgPV>|k`q$O{$sO?+lpc0a%#^<*CA@reVm+Wox{v|5&pq#i$BuqyBB;!FkwWy#R
zk@~my1u+d6z#C%AOOdb=E$Shbl4vAUM+uRVr%jBX5#{yf^Go?l4&bWL*9aW|srXx9
z6B;hqtfGQty~?Z*r_7ZsVGxFaxJ^Lfn-fHkl)dMjmE6!lZR?Xbk9NoJ_!2Gb&YE6<
znAJl2<J^G;MappO<7q5$4Cr45Hgbqo2OSL!m~fi!k%*-tE7Cpa;aFo&It+!aJ4_aZ
z<1Doj$xnhLC6nX~WdTW&GlYXizQThFA%vLbnF~CT3l(w&pVDV2lEo#&5RigWiUy88
z-T{Ls=@3l?q9d&Z(3#~U6_SRKSIe^k14R$a0)!6KBWymy^7<j<OSLyk#A8vh&isWm
z76%Rtp(I&xWXKPk5&)B?JBTbbHXQao&r68ilM%Vvn<X;c6%a*`!hRDJPYi~k`=R?n
z((zoG!;MNvBCMYyPaD${^27Wq@Iq$*vPfKqx7Ub~+2!;`X7|?+TBh<;0TPH%uOCn&
z${B4-9_smQf31&=1C0mc-WK$@3I;3LV$eZc8^~0lGyxMiNScNHDNK-}AwUv%k%G9;
zYy&hjNBj>u_<&F%ygONMc5~RytR`j`Nuxi1ECIVp7IYJ^KmQpbz8eIJvd2C#berfS
zl5D8-FT@w!qW>F1{-4{}=P%lzXPz0;EwVzH09I)U5D0P5{p!WP9rIAy4^cwIeZ}b}
zIE57NTjnk(Htbb2ZCmPPn%C(jpgdiW;1yV1cBB!Xu-KK{$KXj1VWq}MBK)uDf1F2y
zsUfnE{R7FA$2Xvn)&CatH?M%G&!ci?65&WKSPU5InGKSad04<dh`-6vu)~S-=~07t
z@oP31Mir-eU@+i3>ahXi^KeGvX%>m?Ls$$ahsLp86F#{MkxtXWx)Gk4orov|xuJio
zMN)|wE%7-e=L6ydy4HzcsR(S(vu=r04`CJHhQ5&wii-4QLJkzcV&TAW$%mn55g`x=
z<R`p>_m73Z>Vp46G8O&1J#gAS7xv36tKU8Eh;Ob5)3~&j8H4)(<tv&&*75K}=vD6f
zzfaMt&?8VlX#Y+Sq^Tp2K==RB0XMnTX(4KQE&N>`10D&%mFOEMAWD1P>o?r7r>vUO
zFn;?3dLYsq){oAHS-xk~cf`?FH)6r^KoS&f$K`~wZmJeV)%Q(r4;L%yKw*$XQl!WD
zHr#(XW=F3G8|Rl`jx?WGcSp0w7Ont)jBt-vGi@jLuWgeO)HGB8J}U&;0~UEkyw8Y_
zMkoY9@C~zUZw`|G7P9nKJX)dc<}S)C#1yQOm<xyt3~X9K3h;P@Ql<a_KDvxeD>Gq_
zjHFFDpQ<UXstwku>OCSHuyaNVx<@K4?K2Vj_c9?$cg57uT{*5O@>YmZkO@qEe$JCl
znTtRxi66O_7Yq)4Y;UftYfx2QD%pN75gK!E|J8_;Iuu(B0|O;xlwA2}<`~>1(40@7
zOm|%DFTJ@<H&hHTHxbH8v3dEvShNu0F9Jq8Ur?Szjb;T<cpXZZZgYrq6Bogm==v3W
zM;|+4QC?yH7Q<;_thfWEI11S?6{K*~wEcPVOb%qEo&v%^G(`*e$6$Y$y&3YDXw%&f
z8Jf<z!L;DN1lL8@3%ZI#9XNf1j&NHkTJ&lf8zzEB<w0YC4-^Qp-Wmcs<~RcEyipc|
z0G$}_D=fv7c=WxzYC`frUBN4;kCpnIpP_|O-io4>X-UIZz^z~3HpC!kv;kJZ8#c`;
z;QSQ7PMHERzJ<C}>fI!J7hSkbzrEgYMyVVDR}^Btj}%@M6(pJzKqjOwy5Yol-|0?N
z1d7LC?Pau}BP93Hjr-WPqumWo538%J`@u<kF1zro1~1Ovb1tF<cd??!II&aw_!-Z|
z+d!fPcE5rzRKfXVC6?nKTOM6$_Dt_gXqL%qti;!^7|%!6rNv{Ht<2u+4F#Le?)Qir
zr*`bu6a5dT_IAo28}|dxXErLg@=mTwomn_zWK!>IKB|k#-L3%joX-x?*ic<n%TmEp
zFt*G|T$vDW6JheKYOFf;PSC`Z?c+$qY*x5}j|N50>hQ|L^f2lL*lnh^H7!?-e+^eV
zShFwv*t49#5IRep4cFH4E?z*#4V^xY?kpRl%=3xswWO@fyc+kCsN3oG$5n{BHcfQ|
ziI@eNCY?coPy|z<AH(z0D2@8On^qL`g}*&#U_WnHjiQNQ5U8VfDNE{cd(cNevF?b!
zY@fZe_pcom961~u9tyqLk0R{HK2ZXdp)ISedvHP|p035RS@75wK1@fwez<Rkm6x|9
zi{yfv(`|RLs&j6#F+VrI9sxM@m5u77E14kyy**x@PAlI{f6Z!m{OSN7e@isCiF!Hk
zDNl)@#`*+=XZb*P9IqNNZav33W6f%$B<>S#S?F6G$zNQrwxgkQe0vQuPsXOAVg0Ol
zcrsU)362}xg+L$gt=EB|vmKbge-~9vp^_CHTDxvm;Bap_c)sR~oZ~w>y>M{7AHORj
z^RIuY&thN7ZZa-lKHfgQM4f&^Z=UDhh1VrHId{KH-v1f5y6Go|JKdW!w4K*sMzd>n
zw6wBxb!J`k4g13CLT;+KI&m~$v`5r_{>qwgyElcFv%DVYc-M!Hx8ARIpVh{9wj8}*
zpLdQDWgpz`uew;)*CE}u6xXqlL!Ibmli5FT1tCsMkp}<7_7kYCq6+%T&{RxbJXxe2
zTp*WuX?!E1;LLbzYwJv(v9>aw+S2sHuGY%vb8jk4#v$xAadze~j=B3fft0idv1`yQ
z>B2x-i0#NR)2W!DKmVSG`TmIS2UK28vQ9q>g_=BiHU>1pryh<TqkR?@W(t<*y{X3}
z(DJGu-;RpXBG7bsaf%sWu{oxbTHcSjuCAi$a(S+3X|v>};&}bcKH}!UAhmhCOt;R~
z%+Bii{$6~jd+v0R4|aK^_*6`!-4hSlZjGygh@3n|w&*Ioy*dEzjjF0{C#u`jROass
zi`2A_V1ce_!!2qixWLp3mf_33lU6p+V}8Uv8KiR+70r=BFzTd4q0dgXo*r*<iB1`U
ze{|B?ZZ)aHXqvjYA6xjG;}XxLOMhi`PbTaG^!C87;bRXCkISK~o{EE<RJMa4f0S$u
zOQ&~>v3~9-BuOEHt){eS>y}sRtbpFC{WT?m5OTZmN(pcvNhT6-J8)j&5k16S9CD;&
zJ5)Hi8kVr8_0>>GjT$2}Nf-eLP;IbMT;(!429cD<oP|)<psO~Z$*f>JE^}*k)Z56s
z0A7_aM^}PXkVk=pmYu2U!`K+BnlBro$0aHZ@id1S6ed5GaGq85IAs<;Q&!r6%5|o}
z1g5@MVH@}ptwqtqhkl4wiZ3ruVV_?8_uyUP_6AzDx5~!5*qYS3oFenKdpwAA!jOvA
z$vDoR9Y@u|Dz*7uDu9keKPLd6Cq8Qdpc|3?tOy*Hob2*%aliRV)=Gz!M=!hZ-OYFj
zl^8QMltQ!-e}%aE*=a6FtgWZ;s_nbf<dEmehSX$86~?f!WkrN)%0G{TwstF2(Orjp
zLW|IHkvUPVc&*#EQ`bKBqV>9?f^B@fhU<`$_ol1LlJcbI2207jmYL;61WUwn7lE=Q
z=caPiK?uS|(-4{_YllWp0OmL(7{BLTW^zllr*?RUiIj7Ih6z)n(0zsQyNunqRjC>E
zygqaQ*;6l}OXO5p#zo3YRbdsm+F^G;nR4hrGJH|4espU{LrW$5$9AMeABJr-vvfa3
zZVL9it5#jiGj_F;t>vO~N2PEv=E7!-0W4iANPhc?l8f}}(lb_m`wj8+u?srJ{Q&5+
z<m+dJMI{i-4*LA#28;6GhY2hY54mLY+?h$O(cnK^bQE86K8ku{O3FOrjIu3JHIbQQ
zXG$1sky)GH((1PZ28mIHU#iqNQcdlo5<h-=0(pnD8qbcY29@tmjCK4K`h=z`YEo+q
zOG`nwaf?9{!L#4P3jaeNzSPPJ3M_D9nn%d#%5##RAgY^<b|EKJ4V9Y>Ou6P5QuQZ#
zj^-xjpe88InfWTzoi(KrHGXN3l{{>a+M@b~b9Z$Txu#2>#t=)wvobZ&t+8ymjhSY8
z&9cg}-ujG6^LcXKoDg!b)kX_ykZOeu=CYE&d4wea{&+SLGilLTQ;6Myi}bF3pS3K^
zP!<NE=6V=4Bxnd`M<7#O1~Mc|Q<I8n0OkA|24Vntd=W}BOLaw%c|NFgsizG7pEPD|
z*ShK9qE%sB1Z^e>>%0`Cqm2F_1&H8bb95p=?keG3_DfB1jmU6IwN_zqW{~8XKpGsm
zbB@iXmcu!8Mx~C9yai^~GAC~s{tK8u*pP=x;mOU8in21}Qs-6IKR;Mc3Y&5zlq;{v
z=A8k&s*fdj)5>Kq1l9R<Y{I!l(STO+j!=5l5}2C(JV<)gBT5amAeMQmmnb&;y#Ol}
zrtlidx~+eLR6>7P&B`$Gn)>)b1S;dxj)3x)Rj;uGD#`WKkxlB*`x-86046Us(bZN|
zq~CuI)T!l;E^_$C^?yD~$jKbKNm>%9{h7q*MEfHHL96w6m31xET0nHRiW;z?+v2<D
z>Y$JkM9HH_rl9me8AhV$u|xf@GY=H`llTqP2VEfRaLkB0YApK&m`#LVI`r*&^s12h
ziw02su9J(YuFHc_5>cYPb{y2P>;aO{!AkLH%CAw<57#|$Mq*9)M6Ess?{epl96pQ+
zl?=UGe6a~1BpR#qF@9y$2(ewZ1Ex;m3+8qHECAHcCmOHxr;_f^l6S3vUNH}Jej0i@
zaYZ^$-rqd)z0TJy)S>*O?sI=Ha;ctpUAs%(^miJgauI1So{uCqMpH5ZvXKQZ+L@-U
z*o(BUn?)M)_%t;b{MZf-f)(Qf7n>$a^@UUC{MwyWH<nZeGLp>X)Y`@}aY&8zU^yRO
zKH94^tt-vg*br%IcDKh{Szn(-ow{-}#0y!nY^8R-+*F<BWT3ircJ|#un%l{|vjf8R
zV`?22b1L`N?vNAk_EN{^-V!`ed;EN@c;{gHsk5Glcf%!)8kgJ{A3kot3TSTUD!>13
zcJ}Nv>Erz<!zatJI4_KS;;doZGeAysgj!_4gR}}W0S5DG<G$TIZog+W8Zv@<r#1Be
z)MKA|x$<!K;JUJe2~p)SOtaCM%}5{=^xiX(Vj2~qs8UA>H7F`_k2nY7j1MKCvqeg`
zu6%!`>fHacB!pHlIQFssno2J<MghV;or5Bn3xr=_R-=eI^CyDvB^cX7Y75EWLU>UZ
zq)}AsP*>`}6QEc*Lw?4X*3oa&SSk`HGK8)43#9;%GYiEP{LHIh%{|V~d(eagE)mdx
zj3|0h09K0@lDjiCFQljFm}m#UkbpdNVVdH)`2P$UzvIsoI5suBl{PyB0rxbhY#=M1
z6WfX6v?o{Kox$AIDZnS2NqVaH=?fIrQ>(DS>Hyv%y}I!3pC#^Sh(Vq?0~KzgHKHQ>
zwtLwqTNINV2@<EVdPH&&be9XrLi1dmK{!Ho+e*BlmeecM*h5d;O&z~$wST!vsyI0U
zCQGX}d&%2vFX==BoIlToyr<i{$#pMu(#Qal;6ULNQJWyqm_=|G9q~BH2y`7S!e!3r
z(fDf++^xZPzpk%Z#W8U=-I9@{^Wieh8gKxP(u|M>o_wNZ&3Y6Eit#{jv@`9JL)k7(
zdInyRO!hYKRGMG!*ic}P<`|3lTfy8|bT{fiefd<Ugyy6BVX9yDbZj?WOjO&l;qmHl
z#-el&)@ZM=&r#1eTOl?93=!tq-Mw{wb7H?Ym4^Pv813mX)8yKOXNLp@@0(=uf^R-s
zUSP#EgUU6tmUM%O^T`P+&os>~LGyvFNoN*3?YB5K;N>ON=L3tzYhI7Kx96pLfmgPb
zr&Ol4;QYzh81Isz1GRgm>t+In{Pui3B(-efR}Krp)wrtIBDM~h)iTcQeH{(7qMNck
z-duu&rW+x@b=vDfY=c|pNXZD*NgJYlzdkbwv((Cm{HAbg^%hg(mL^t`VqI1=sCoV~
z{t+FzN|o5<>K&XVk!H-2K!_^G0y~XrodBJPgq>(^)3wJQ5?sD`o-SoLNSdhm-6@Tp
zL-1~w=34H{o0(*&FV=i);RLAsu-zBfwh=7^;4_8wXoZfX%XDs#Qdm~)7p#}FWK>^6
zXz{=JdZ!>!!fgq&?cQzMwr$(CZQI6f+qP}nwr#s-pLx3XPMoQSim2zR$Q8Bz%r8Iv
zW{I9q_!H@b*Tj@Q5Sn(9{%;jS_9Ff<`oFl+6Xt)9E19_4{~vF&u2h-2i#s#`AjsLj
z8i)V)Hmz>+pSaS0Nb9K;JX|tJ1Kr{@$HaNsA;L%?<x3Zu8dhFGKFzBuHy!`*^0#cC
zhNG@o$mBfPeDGebr|GNN=_cG~{Q$8IUm2sRe}l&#PkVVbx6{A=JcbWYmtGwlAkVnJ
zu)z{zBQs94q4x_U^tBtp+slF;=UT7};)l3kf+s;@3ib<52(0KMHiE<wzFd#=Z~?jJ
zqQoay>8A$^%7+jYs`nAflFwE8pCB5738b7zNUQT3U`&b!X`w?S!h@yLLE4hG@${<7
zzva7H)-5I$9-a?7NFZtSBhW;L9M$WMu?zYB5vJ@BpV00?k4v3ACKtjA78k|n#l|YB
zXE8$_XYRi~)V)=h3M_)4=t5?UZd7;@OH3N_%^WduEjOn!^kc?UqC+Yy(-UigivDJ`
zZSLzh&#J5Q3URa*4s%9ef?8~~>l#da2VEQG$hx@Ic^a;@ttBJ=>)>x|A}9!t@Fy!I
zCy)8-lIZFcS!!1ugmKW_w_sybGJyIY-<+3ph{PlbDZP9te4Q+uL|7QWB*Ccd!>fBo
z{d7L703HJY68q)VKuiqA0=Ijjn;E*BF3Ic<=`2Sws2LDr6F?zZBz~SC3<_AQlqFRj
zYJ8z%S|h=8l++khIvOJ5(qB3wn4&)gEQqgw_lEhy<{sg<OVW5n$Z$gJO*ib^9x*pT
zfOs$Zn~PgA+HYdFacFyA!8a{HI5#O&7aHc>Xn#uJN30>fN8OnrN}S#ffG^?t%MNaA
zO!4W_^Wf(Hr1kN3EFmbU5)-^3yJ~~1&vd~(!<Loq9MC*iBCUhn1>9@#-(ADIxFV^q
zF(hT`#;~qmZYOaxrO;&%N^9!Cf+Y*l_lnvRW<oYfmNZYDi4WyKs-b8wyMMeqIYR__
zKWA*Lc8}=p6v=kCmNuSSCC}|J9um~ZRumV$bD@JgKt-HP8abb<uaYm%feh0(K?dHQ
zk#uKZ=6v`jyOe9SKQj(GMg7zim1oK6Ov-h<kF&i=jOV&No@%`{TRkHFD{;M}^&cr$
zL>VIxO1rxH;Z%k{1z%L#@pe6#E*Yg7*th1*?Y{q0a=UFOSkY$$#7_Af7JrB_B#B?!
z)8D46@Igh*J@$cLjb8yT+fnS51qN3U2-X#bOE@wjji-zR>;b2<5Ix>PD&*7CBZUX*
zC1=B}^JJ1$<59L$sd|}dws#`?Q4O*!sH8%;%;XQ8<%bGAQ4en92W25^-%_AfPnisD
zy#&O?87td?S}a0nggpRMU|Ng_=*2X-#zd1t|1Mqb|4h}6yN+`>J)=-JL1)t5X|-m%
z%hE}_`f=9s!t|c=^B$C`xBe|3$sp<hj-i*N;@nSRn$x-ZMp}K_^_<=DoMU8uA$_az
zkc9YF_*s3yO(DA-o0IuwLf@o>*yHzeX|#-^23utvz=XbszjEdeMTCoK{j5WepvNe!
z3yaZ|Q5t((=glC-?^mH&q9;w!ug2{Otk-N{6<qUS>FY8f;2J*u6Ji==+2Hbemsds=
zU_<ngQLx3m1bm!ei}#u_3osD<O&#D{;+`I1o;RXr;N!uTH%m-$N7@{HfG<eXS5#P8
zOJF%Vf&ds7t;_UB52yOjjm*i+&<#Vcrg^g?iVHP)kZWw@+Y0*fFt}Ir99JVtk;e+y
z`x{D@qDPi!TCVqFOI<;l(ooeh{X)(CV&|;Qw)*5uM+>KnqnvlY4Wm&q^h0gFw6Smz
zLsy{pqLy#A>;1md1G4s_8tJke*3ccYlk4L6e9_Zj(c)6?5dMO@KZvz_ITU~+8vr+`
zyQBTC%6r=eInR-};>KH!pl#dS7{y0k<m)$z@LUHaz1veoZKw(TSY1&@!0TG2X{EM$
z1-f(m^@Q9A8oS(KeWXoLRik`O&+uSLNra~*vuQK;@Idl}j2UJ6ry%kDYwLxa8w&%C
zGHO%n;=Lv(lO`oiU^&Hjq3Jh=)qL!CA=GiK`eS@>&A{MSN@_#MqR@%gIcFK<n;$FL
zkeproQPV%#pr&V+Ek1`kAa<Iv(6-ydB*S3+C`Ms(ZkUil_$Vz_o(;^L&>Y&NQiG48
z-pWXb;tjYlMoo?;{b$v`?_6ii!jA_;D>yl2N2Le@<;i6)XF*2(245`>P-lR1P^i!2
z3wlO|J^ylJCUWV~fqd}2tyqtvIWtsNvyw{XOD6osRoIWnumh4|J2uT$xakIH%}y*o
zLLSVJDBhKI3ru{}p)iC}%@(wf$qy?UZA@!mEo%p)MKy1wa`wW`WwL^5jhJ<)I>pjg
z0|85S*V*V%Yj?M;zWj0d-fwbczG8YX?f?|}9LUscbTKMQDNC!n@bT5`G5z&q`F?+M
z6{VuMg!vg!k~e+9MpGF4hG^nWSyib))ky_1^T#g!?nc<k7$**ASasW_^(mgxldani
z@P8+XRup6Pi~j}T-$eiWxHWSApXK%crTOR@+e+zB^nt7Q-@CT4z6-?D*B?KbK(D_K
z34vwBVkIa}IA%~)P4V{BPc;7hbeR>(_&YLk#OkJ2u5=y9v$(juSbKhsQQz7v(jq~Z
z#V5M+%}h`&+9(vNBw2I9j1EIP)=B;q(gAs1GR_=*ptJDo;}}!N&|bn2gL~$VW{;l%
zJzFdwJxUBa!b}(uIC82}6d8j8s9t`J_&^{%KIK6ykQUEe5>A%x$&l{OOX7UK;33%M
z-?ndk<0ZSN*l?FXAw)X|L0p3rZ=b{ta0T%8g`m)n7Hm95`@wVRs6XDqE=|<O`f@=0
zAZl?CLeEPm8+ceE!5F7^eNBTJwGDp)Kl)>fzI}Ty;AP0!xoCU>{I;{QlB&D+ah{e?
zyM5&Fhi8{uhKVfwg2sXIWk50UHYU>MFWQz-<^uWKx)TzPddng?qubQ^)K)#WId<)h
zhq;wca_|Ub_~dT3YJ4>$xtCzgPJlHy+RJhBHkPf;wM`;cQ}A#Sn6b3ZZhu6)0%!Uh
zIjMv=;YGBBU@D}NER1G=X#7#C|1>oDIqY>l3;Kp#XX}f{??40iHy(}S68nv{&2U7b
zJFP>htZ<7CCP_Wd3*keC_J5X!$Q?-4cF@g1FhS-@byjC1?`ueQ=|u=6y*3E$TlC>b
z0sbzXveMUm>GMb{aEn4@4vXXk0)mKkqVrXzIk#R6A@hgmr-6AC(p8OiWWh5+Zk9x4
z*Pt)dEA-EyLvXhN<?!wR0{&$24im<qPfXU``@_pvUi4iZEiD0V=thkU7!80jZNp(b
zc(iM8@%i{lWB|ZHq4t7c-2{?ZTY;XCP;;5?HNg4_v6TMOeOcl=<Y4P%{LQmbhe@K6
zOm`+Ur|_bEgn`bifqVGr@K5~Wdso;)u>usfX<*|W^Kh}ZF$kl5;Xy7~^gMFBgHeF|
zqI<m^`V06kH^6&hY2kQGih14w6feHTc}~rPFBW}V;DffeT%Q+RP{x+VT6pcP)4l>Q
z7Y}uyU+)AT6G^6vLSP|}!u!^0vFL_-#?#Ps!i)vf)|?11eHuVOqcV!4r}PFHQ;Wn*
zOlKk-S0_hiGYgr;Ovq!mqHbT=(YW*G#4IO^0NJ4S5mna846l<&M&J#lnX_<8P%xtD
z4e?qfhIAfB$P^Prn5)WG`ZZMjvMszO0>@o`TwU!gvJLWzXZQ><SI)Z2TmC*Pg#tF0
zZ2Ku6_6Yy-OR@lZoUMa#@L?JJD4Ax?VAacLKrOPEE~c#eMU)wqEP#|fw--ZzsT8ad
zdxl*C3!h=vs;6y>7tEM3NH>3+9K|!jYB#RcK5=@!dOf(31e4m5#DUF|@QuNp6_Twz
zkrY{C_xf8&1F0V4v~gn+t6Uhtm83~k)S(OzDibH#fkpeGS3x%=`+OncmkN$`<jarI
zZ-o4d`_o#zC*Bo3MBN$;VC@xiGt(n3G2ekeUhM9twp8yT|NMYd-o2}g+@d99OayR7
zNC;1RpCX?vNL8%Z;9WIr_5yTPNoc+?0Rbt*XI_*}Vc-hFrJ9m8jP4Vb)zIH;y|9@=
zaWD0p0aL=tj_?5*>*#Gtm#~f@Dav{=q777+OFNck`4~eroyHqj>_F8Q*9@b8BvMDE
zEWNIuQFF)>x~*7zw)Zr%gXTPDC{vOZBb(nD==b_@?X9sd;RXiyc1PHo!*Uf7*0CxF
z9AmEk-PJF8h;e|^%Ov}7N2eM8x#){LQAJr2%$uTV1k_8)Rxsq(y!m1PuR$UmVVqbX
zCsPmuy!F#hdegup?NZ;Uyi$t^IA++KswEh2X5d)g!hF-mF2oT0Ggbxt!EAJxAi%8o
zlsE^*ko!{0j<E?1h~+(eMgbg;4gpA9fqq27Ey^#Ekx(;4S#FwbP3UcUTh+=+JNGgM
zZIjiAtzu@hluPMpoQQxnSArg>Q^9FJY*f?`@?~MO#FFzICUie7lx=XD%TU|_ZUG_U
z*uWs{l6EtBl3OkccE7$%UXNMkXc5&;Ad^&!El;M%+MzAmw4Y8oOkVt%*gwzST%ai;
zm~Pfgtt>>TL1WhZtT;Ed;FRMfIn3~vQEUGT>nonD#xQH8)<TC=jgv9Ikn-P3QoO5z
zg@o0z&SX3l^)0gx<Gw3PL|a<w?F?4&uQjN#cqKV;vRVp=DnQ&#SbUkwX&uq%cU;`M
z7xN<!II606hYt8_B=iRgvE~fK5m9Sg8e)`202Ja{=?Kg^tApWKp|AykRH^_xd5*{t
zNmE6=a=R4(-?XD(6X~<V)Rkb|R=YJm_0cIVqJw-Ik1L{>*=2|+B9NLX1U-)%Ypo@{
zi((Vs@aeF4nvu~oHcMEA`h}}B=RjrWp5499+%Xr8ketY<;$FF|^rPb9;8YxngYn{S
zpNj!<$hQ^xQBTxlfX((F0`ccs+Icz9v5vAT-d{JzVOx!#SVEs&(R?Vq)o3;}dIf;l
zs>hq@VfX@m8zDX;9*!2+w9l&gqgiNDlFm)?Hsipz%3yTX$5}+vyZ5*dOtM%8t)${q
z6|J%6`Qj|OA*=m>k<Q8}-`gOY?pxip?tPl|oUoo#-VNJ^Bp|Vyt~`01DL41E?v_QR
zr*xVVYmne@N~44_<zC%Nt2vq*hjHMTu5qH2{kn&;&1!gOp~g)}m<rEmmIJ`QZ-p^i
zAm`Ed@>~R5Tse~Hu))hK_VNB;ElT5!rSj2ex(BlFUvnHoPxiz7IHeBB1Pg}9sQK!y
zzzw&#E@5@iYkB?q)Bdep3(BpHMpd&DW+3C&qlq&1uXHhMQkc3?dP#xK#PDRFuYf7F
zf~p=<A^dId=2^p?DDKTwn6M@08t{+}mfMj7&6Gw>z0CS82MXJQQ6FS<QZ<S#AE_cr
zYAr-^V8y*L9?9MVgN&yWCO|-+I<S1BYk7l-l+KcXODnOu^77)ez(z?_GEFcK#C=MZ
z6mj$vClqw3G1G=`MN$_fkR~oLuH4Vcu(8Q$N~^^VSz(omI)$`xrcFx|@Mh1x2pkjd
z8Ls+4R6}wjN`bk_jBV66gJ3LX&eIl=<^SUT%Hs&>DF6UdhYVD@Xa=e)b<KqkizQw3
z*@ELjB197~U|pG}Ya|ACoO9msABYXLg3kh(G6vfNrA@A|_rze0q`vYYWN%3HpZ8P^
zgunDqdGf_`i_G4<$JQw{vL+v9bNy;=F}2KiOlMedZU+>&QR|ZT9TjNP%8lije*}x(
zRN?!AQZJyWhYK+d0VVhSmyP`viXU*Y(W1{8(R3X2N&&5UhEJx1LUct{-XmPNXdBEc
zBr{mGM2#lcw6E5L`@f4gFy7YI3Z^!!A`u&Ec&({Yuh`)x(qAhcbWpw6Q0oGfi>WN6
zf=wMW#WnQTgx5s!FS}6kCm89*e6p`NE()GJtftFEf{@}@NlMb#^aUqbnc`kdexujT
zv-`-f#zm57+PO)5*Oi?P0#D1@KoEhEpn#UuC)jYt*pA()j2Z-AFfv9=xbV`4O~Wy)
zRJ!uzY^n~EFD)RqqtGrXl{4^Jbv}-iG+8Z45q|PHEYx76)t6-oKf<}C%73D@a(HEe
zrgFP)m2zcX{6_++@<QgUkB!y#-cajiT1<i}GcR*YPL=j2rzHs*Be?5($$1S6VPJ?2
zGpXtB0tRf?X_{3`>JE%n>b-fBHTjZ520#?49gWdA+L)W~R4REUw;JSvKk8m-!~#*I
zrbrd1CnW$YM@HQ(i3@{pS$O5D=&O4pwOQ;GmHY;=V_IwPg13YD<GKwd8%_F4J_0Mx
zhP!OBBgTzw4yQ=yq+`pmV$0Xi#P+4z`BYiQn=QsC;0FhYPgE)sqG$Efv7A~s^Qii}
zycNgV*Qm*BkB94!o-_?=O!G}ps_F<+>AekFNLF4yZ!x`?I0rv!A-iN%{SHS|sDZGk
zC$GBOo9FRcSzWzU+pEt)5snxme%sQwkNF-cfpQv*L-bQ_j8_3H$wEYF*cR>H?@TBz
z<87K%xLgH9m=yk0X6Iu$Q&vzIf>o6e(jmcB?N4)c$_tmT2zRci15`v+`ZvR*x>!Bi
zhNcXGsT)IoYF2D7Jyt5SR8I_kaYAUcM11m-M5~$@n1LR84-{tun^)UwxE<R*u#~?o
zrC$xO78L|laAEjIE+WuN73!`6Scw}q8cIvZ4pX9K`k~)J-0P+BWyhSkOOKxMPnUw`
z2So8qln`26&^x$N_<(kL9+wYMIjiLm9cf&U?QE6)vM4F7+wsXQU7JOAd~=9w`?i$5
zOT;o?_GaMlsi4wjcI0#!Z_gr@nD+Rwcy03+UC+`fayLiVh@)OfM2hFyRh3*GU;i-%
z`4o!@?b6-J7Bj}HO=ZKpgR4z#jai-iJ%#OU2Qod@xHnTk-IZG-TpfQh+5jzopOaIE
zsNJH$is?MwR{%xnrvo|2M6|Xl&eD=>lNGTu9PHCv6O|7TGv4Pp|F`4I%HE~P?Cvy~
z?9h72xO?{};@#=h!fm=q`3!TLyt&_Q0QSi)>@>mpXXDq$j^^<H4I9M-1_!VNT;qVb
zbOEUHY2_Zc<%vZdXO_K9DfKUaErJV}!sv5-p&Bl)|K)FvS<)B3jCb<dGIbJ00_&eW
z0V{`KFy=Z?hf)Nk2}GU)FoKn}xENA8=%d9#Ijvir#{T7v?lR`2g0;#UTdTwFkk-Cj
zVQ4}CrUV4p9+<`NMwRXaUgQICaNc+N^p7fnM&tz$-MsrmCf*G0VcI6-WRG*A9ac)x
zMUw~0_(om5XUOBUbx08J06mHYsDX}b%$v5fINK=ejoqsmKeYnHgr0lF%&KIKKkJ_p
z^5?K2gqr&WY>m1ppV3LxLMiyif*ZYihgZmUqWufw%Lm?YI)>7MV=sU$^!eA;Cne4J
zu#8aB5Nmj7VBDk~z24CZ(!t2%tV&uZ0rmm4@BM2k{+2*Z7#&spu4@wOF@8apc47Eg
zW|i-EwDtFEpWFMgb$iq98;|Rj)DH8r7u&__6Af<gP_*&++p0e_T;+jeY-_zizHDwH
zJAAP+37^sE6rgmwb^B6pztnA`*F2`SP|r@x>GyMG(D^nDuTyLk4*YTP_B7}fk8g*%
z=koT;F;9=CZ0={~+{bUD8<R9@vaPY}+qV7J9_y!(1y1g}5)SG0tqH5i?S*sYeLAk%
z4?8yYBN?Ui;Ig`?h|_?u!B+~6Ro5&LY#3n@mzrdqh^!>r$Cd1~+a=~%<<sXMefLrM
z8`<qh&CdGL(fzw0*VlbCs`*(PM~+~OMQPS04_AvZc9Nw0i-yp{h=7iZ`@01VDt&qW
z?MTnj3g=M`;C{~|C{s~z;E_2eWry7mw0<M^*2U}U`HjHqFIzh2*R#l=38({tM3)@)
zp~xt?wkK13NSxgm-JOh=H!z=ee0J(ISh|M*)IixGjWnIX?Yz-Cta8Y~;2_W{+;$v3
z$i&DEh9b-lrnatqetfn5vdEEZJ*;!36<x-c*D9?eoEZob1*qsQ_rs2Rk1o-NO%>@s
zHGBF}J6jC@W(im=3L2-ZDQf3mr}|!KBAX$viT!6H_-o9UmcGg&YsK;)1NhoV>yZPw
zjTKBW4G4EXL0aEWqgGv(y8M)*<i)hKGKXv$i>ACDGJCdDJ*l-d|2-(jhov|1_hawX
z+tf+j5BCWogDo&&U#OXI(${R|d>ZTXALahyBPff3YCjU806(_a%z;VmiQgDfKomU(
z)1$uA?R$UwE;8G^ezMm&X-DliqV{a)4_m}n#oM2u>z!6q-PDe%YGd>x&z0U3YSVpT
zk4KxV87b>up24R`W&E7*eXysMXZt(_c~`kv!oWjHN8Ig3CftUVBoa^ooF(mkrofs?
zAq?=d<s=t;%nKL)lI&Up-Cb`Cfu}1A&=i@2N@c+las|w~0|#xBouxOA#8jh66-Qg|
zk`E74X7-sUG49}DrrJqwnS1D5PCS)|Bdh7|rBs$BHoeK!kzQl5EO_5$K7s+lyGZy(
znJ0K6`v$gbaJKFo7IcUy@zwB;|3i@>KTuyu2Lk|*{a2fY^WQ*-<_0VbjLx)1|9=p~
zYqd+eO;-5do8G|Zp0#wVOB0?9SE2bLIQ+{<QXJMQA%2CVYS|R#2-^(U?_IGSg@Po~
z=1=~4*k|wq;hj%kw<0ufB1eAQq-B%r>XktDl;dqz>P<2;D_P$fcLz^T!JOq|su_^>
zUX;rQ+mj>ToWxVfJc3z|!OK<dbSV+ZRf!Sz`MY52sNhxMr==rzVNy${DvZ%Z4ualf
zt%m&6B684mR_$|y%PInk6sLh*dR@o_l;Gq{%31S%_V%$M%p@xoO~^t}3L^m$rsS*T
zVnq@@WHNFtkB7at^K*yJ)uc^LOQ{CYC5<i=4T@tc!H@(kXayEG)Tn=#2ZfP&hPUoY
zB`6e)Gy7xn+EIcJ1Ex<Z3iU2&)|QQMLh|D?Tu?P9m8#ln0(aE1uANe*CbJdikuBWY
z<;4fEs-7y)R4k@|$cQmiq-aT#d4mdp)xe4}n3~Gz)X(?R{de(o79Nj>v$v<KujAL#
z{Q4o^7|+9O_*m{Usf4Lxak=I;$y|#jky<tH9H5Gow3%io!}Ik%#+?U(xMMSC3Wv+J
z>WJ$S+v{>hATL~-P*O09Kh8xHBkDgK#bo>6SHou7{!Nf8v243Po^UIKa~J-oWB?N3
ziGXmhS{SRV_Y|0hPW)6MEFzQoOtP97a8+LMJhM!UJ!VaJ^3|xf-h~@#$3n(m`DM_?
z<YQvzXV?2T51d?+Sb>iS=;8Rm0E=L<_V(+p&$3j&u|<30P!>-3@K|nX`P)s20sKIF
zfAE=4GMhx)Gc4UL((}}aga3p$kKkhjPDAt=yA^95xEXc{y5j@TOukKZ*L0zqSXYtY
z58{WSC&F>p1i0(>9Sei`pJB1a06#S}HV$bUZRNQ@vJUq7rxfPS>mIwfrKEy$@=O5y
zvmTog{Om2oG1F=t8KxR;<bj}DM~8rp8i~i;&VbQ3<ohG6Mb!5m>W+GKklS$LBh(an
z$#{h5B)@R(EaO|0BCOT>6S+jIO6TXm<*i;whWH?9l|=txBH<TrKn1edF$7M9XiJ?E
zzpxN>$pQ0Nga_Td>bufkq+de6RoVdwZN&0qOHF;=8tQQ&U}5*R=O(xqpk*FnYKB3F
z2k^YYH{D-?>gY#K+jHrkV`SS-SQ8RoQ{GhR%(Ih_fm~SH%XJfC0_mAsT}hr+pAG&~
zQ-#w<6Af?6UYoY>3WyFPixbVUMs+<i)1(zokBzk^A%3V|-`^D`G_pkyZ;54>wdAZ4
zj+0{km2ZrdVfD0+K?v0er3O9f;zm|rOKr!O%|3Cs1JJ~UfxUhPSEJ6|B~V|9J>;@9
z@z!&Wg{|psCFXwVRdRKsJ4o%|R>C6*b7Eg)Kma71V+Pas=Nk3yeGT{x8E~WdIbNQt
zZllV|ml{mBX)7AQ$7^p5uzQj=#JzMsX87)<?`VHbU`jFOeT5CXGF-3A2thi(pK(XP
z6ySgdeg7KRm$Wa&jVur*S9%|DAqPdUr@Yay07A32NOkPJKj6!q2gkrM?0JoNRgXHX
zuM*ir9QXI(>Z`Qy5!|dd0r(v|`DDpfbDXS3oa{kE%XT<Ade)ujs4!K$xV2c7F~@R-
znj}$6a$KP$fjf~QX5C%Xn3k0>p_EQm)>L1pC!l!CIMQp80-|!a0-0pr#b>R2^A2`X
z8Hps0ZVSVrq1Pi__Rfhj+mb(^(xS&^Wn=L?f1Qm${F*U1bvRubq+TK&F||nfCqn#$
zF3Lf!<it=5ZD=IBHTd*`ZmJWCf$UNBsREjflyv{xl84kt#w1~BiAuuqV%EW|;TP+2
zQQOhdl1M@ZC1FX~BdCkFnz*#&C!wgsQo^#LT|hS%YP`I>n!2f4_dB<GX{K&zrZjou
zU9dRChsZ4Jyy!7dPr8IulD#)<{VmvjOMsoxgLzg8Y<Dw5ZWn9UCEi=n_#mrS;l@XP
zU-7-yGhsZuS}5Uf=TOUDDQ{1&SQh;ixX18G6lH#3;W)!`@4f7UrtnMMyUZe+3|@gn
zi_o&LQN|YOy0V~lV8)lYXXeo#03XgdChJ5iuNwo^xh|^?SKA&nIlG#ru6@CX7rOLH
zrX`#i`PW6$vd<9HGp?(m0vRUy_FV1XV#3`5yl2I~j(AQ!B!j7v57)&H&%MgLEldA-
z!1E}-x(8Y#Be?YgeA`+50(hI7zxBG6_Qlvc#rtCW^WAjfJvt>9%Eb4cJL`QNRLom^
z=vH&wMbH<fJf~f(CXw<?V>BWB;`&7Qzt1{eZSc3M|JegV;Q;^$|I55Hw6N1Nu{HXi
z2OhhL#p*i$Uw^^1ip_t9-p`GmgA4<|Ble_hr+!(Yfkg%oXmpc!2cVD|M3QrCn|Kkw
zqQf@x=QWpNlF_<FCo*sf*kV}l3C`_t`zb-8FWiScab?KCX?wu-ygS^^2}CUwvYDBZ
zd*M-T8YX*{3~e&*fPq3^`SY@UB<3=SsZgZBptMJ%pb=Q}n0$Z+q!KeJ#MMcP+ZI$9
zK<^}`WD5WR>=LF8cA^t3lP>;V7%~;GHb3QL#h!E#gp;i!+E&=TfFdbBY3N@jqE|};
zp?SE=^FSFr9Gu)NoK`Q*mB<1UZLHzM4SR`G6ndlC;}PW#4dm(5$NVDPCfZQNY_aM5
zu~w!j8I5?aC9f$F%_WS19#)Lh!LQSql!Jq=&eI@Kca3dZ@s+|Ruwh|S8Xj60f>9Cp
zml{w0-AA?B{9NfRO)OJ)Np=XCHmK=YP*~FG^gw9sF09+`FyOX81Z}sk&Kzy!+mXWU
zQmY;vGL6g;3jipy>4y78&<8-|CK*2kX-`|Oi$N(_YRQZBX!C;+ilVjma7n=tn8NwF
z;50xF30IrC1=|it8EDx0zlumFw8Jogi-U=14h{5Wz?AL)8GgbXjhFPn-@xc0Gt0hE
zGSwhg(W%AECA`>v{K<}nXY-Fl;vUI`5C0ZXEYAT@G@#|D6|D3`J?5A;0bCZkQP6o9
z6enp%mr@WMm{QdCxNE<SZ4o%Z`^M{iL{{_Wnp%whhr2sNFfQCX-xRWm%n;zN*1+uV
zE}S^>Vy!Jl9Pnz*GdA$K?6mdKkXJI!-mtFxJ+dLxjbhtlT~yUta;t%Y(HaUM67Ed$
z7nyzJ0*T_&urQe6RkEGZ1nBKR`QT%M==Kx5IRIfkYS7g!twL>@FK;TyzbM3ZL62Gl
z&3Nzf6o3vP57gafrxl4RaIGI7laXP)z4h_>E1?I3_sN4G-Wf)o`|?eO^_mucZ5Zw`
zaB=wO5NywwYJjdu73XbCOaXO_%a#CIstCFFH?e!a;=c)6I)<zAT7h<4N^`GcLiIN>
zInVlHx1l<L*Nk;Gb7Q2YIS~Cmj1}Z2D+Ic`-3L0K)E#vg6HoNc9o)J{FJ%~#l<z*K
z?`#tM!x3vH2X<;PP(!QnAN-3C>@AcTGWhp6ca_DZ$YsS0d~R}raGPXecce;q-l-Q^
z@oHO3U$5^OFQm9XexEynh<jm<{RqZy_n!$RwyvK&Kfb$l*?4{ixsFG{e>}JO%DLlL
zFK47TKVcTTJebdQUVp&;w-BHPb9(ZF0sz1w0s!Ft7a=e*aB}`1CZqo*0%}@z8{){m
zr)pUwmL`aFYw+O~8_8|#ip}H^h^m%DgvOZ+QzL6BJj?_ZKc6`qMu7qRi7IZ(Vb6p8
zxVe*Vw2v|6*r<E(oC;myZ^o2;)~uJks<4fK-xNVnX(6ktJZ;hiy=i25ENF}55|eXK
zKy3+N6x#JkBzo&@(XmCfxUcGI4GdF*3{w0@TOb!G=8pAg6sS@r{+Z@~n9KkTi1l+A
z&&8xYpm^cX>%8KIf!rZ<nWKPjf^mbmXiJW`of0|jv)~EU*vqc+JiFp+?gT6o8h1`(
zeSB@`Ru{~3@>&_>L<Y9o_YgM7_8=_SPzYuDlqucZ+>Rlf#253hNfIL&D~!*RN)1u-
zJd5So_wv!EMqzkM45tboo?4rWgToT1n;rVLpPQ)_Nj{$o=EOkDum$-7lNk1RwY3cq
zSG(umhszc_Zh%uPr@V0u*H`V4Cy$}9L@YcslPY;BZ8lKd$?IOYmyTi*rMYps$`ktt
zcKmQ)q(Vl4_E3mC_pOE>A;^t6;||FY{6dEpC@6@frxM|rfpc@Az^VIqar;y?a}uG_
z>Ho19_OIe}?Uq^*BnePr_i$rnC&(BvfE>B#v4q}0pu!yN(l{q9WhM?gl46i3rYn+~
zjVLZ*Ddebm8rN4^GU&_;ty`evO1a|i?DYu{AKu%*BObObrPj|SEpi2BDyyEZ$@Ta1
zL?Z$s0HlS&IIp6w^Jzt9FYel4tQFD@nV^L5|H;)*iA#r_TJBSEvdl*e>bX1+>9!h|
zBBt_C1*N%{iHjg74&`5o<BJ5FpaSM`vuS)StZLU1gz4cv#?VeGZb#n&*SM`*u;^A5
z^i0WJLOmTypD20k#R-gQofynTOX~V26x0M*%=DH>=?&Nf97~tR4!B8Eoeku6p}&{G
zl``Qlm=%~R)yvbOw2k%1rYx?{D5#mnG6a?t1Vq%e`jo`jgzYG$W9kCPviS1MB;!_3
zoj$;=)(nnv^MN5oH;Y{7sh4+oz*2})Gi$5@=#Jx~LV{lSDDM7o@`JgBg^H?iW`#)+
z2$&YP3TNvne&`1}6pxQp<J@jTf^-@~K#PmVyz>I-^Io4_PA*RCvu!DTA9>SjQ<=jV
ziYwetJoKR?I8}&Wfol)$57@E&{10`~NJ!%c2j{{b26IV#^zLk;j;pKK#;c47+(gyb
z1>WJ1IY$p4@>}wG6AmgIvB`~h;8d+Brsrqb3g18?lw<yIZo*pGf?DM}qi@FpBYZI6
zC?3$^8L1WbnC^03nsV7&S3avhy0^zeUDc;XFMhLnF~GCmY<=>L@{?@dBqpcg0xcDF
z=ho{*oWiXW_kTpSp4~6qRZc-r<mR8C#6?dcnM<#54NzelHMwfoWUEXox6e1shOwDw
z44#i$+w|GF-Tp~uh!a(BmKh94Zat&!JK~!!y<91#?*?JuR!7#Vdp?3-_8(82qbZRd
zQankz%8sIo6P4|*imQ_JAZeOE%2B}9^%ir>gQYIMDXXYrll%{tp@eo#E>^WYYVG7B
zI(}o?*ZMczJ5^n5moz&oaG55UGnYV}@61~&n7_o3Y`MXml7_W(?F@AexA$$Y_muO0
z#%=N3Zsp-x$z&h=6N~rlY!`iy-myQ<%zf_9Noq*_sTPtCFON;v5{a@H?pp1vZXQ%?
znjD=}Zx$@k9BxlIv=}`^k?6YZ#sU51c8vrY?>#w3(zgbKW64fr?+$@HKL@X+yT0j&
zZ+==MZed$rSOA~oK1qg8g@T`QdY#Ybe;(TD;0ms0IlJGm{<ki7t+Oa?qX7Uc+XDdL
z{})|$a<VqCxA-5*{NMa2JXTJdBQ^ifwyZbIVU8%937a!pMdvuH3Yc;@n?@8eoTsMj
z$Pyad`QkXd1#cxkw`hI5ZBn!(6ZMNvGxyTg7I^B^sC_`{SEhcifSV?x=MS7wH7B50
zxG=uPi5_D!sRoR=xeZa&-)d)QS7p>E7Ad#&h3uxOYpiCe2Dqkp1Nw0K_-Tt{aEaV7
z>ggZ`BT%r?Q<Z5!AzTIfvUYLxd<zLQT~;YYpj40W`^b;vW{u>3G~VXnQbD5-PfDXq
zustI18dQ|0Alm?l{NHp37A*D!jNmfpY7vmV`%^&vVF}!wS#if3xM`UDQH4GJiYzvS
zE1u;t)b{y47O0=dy}YVbF6%-$jXk>4P1n45l=?7acYD-_=fD31f$s`O;H3(T`3l;P
zFYkPrb<6jyq4|9?ryE3>23aI+P<>r_YBVhoxUNJl&8Cu)a>;84dmxA{cE87}#)j|*
zuTjHpGmj>Kd+ek9o&9Q0t=Hk3f_jP0?&jt3v0R~UJRAJH(^LT}!=N9G&ej9C9xc6D
zZ};-$?)hinCJu9vdpM&693jBBKs}Mt&-3d6rstZS96rb}z&mO+iS#Z6i%AIF$JQ|%
zntJYL2cw@|6KIUU6Ejdmmw96K^#}G?M^T1VzHR0ESH!zH{4<i(3z>+Y(SN0HsemYW
zPUZIG>gaKV8%IlK^zt15$n}N(VS>;hZp0SKAn1m0((Z=BnFS!8u2wic`FLv0rWZWi
z_3Q8QVd45(&IOwpqPyqm^tSDF7Xe^6csQ<QevF1UZ2duR{CxcnX=4+v-$$n@MChb4
zq;;sy&Z6GRNXu?v;xWYc<LEfE4)%tH*{8+^sYW|d95n3Hl6d{(t|jZF54tCqeTGPk
zI${7cDMrF{Lf+S95$B_L1RN?IncnDhMe<9op5+M$$@h{b(xYa-ea9DpjqO*nKxk4o
z&~+5*dwHfEt=lfFg}x|aO#<X2P<r7eC$pPvVnB`+c@T-e0pq~CtbfhqneDDLXX#Hl
z4V5Y8D4913G4kP2evkV>kFzJIu8yYOuj8q3V$W+Fn2SpgXT3KeHm2e;vZ`brxZ}C>
z-WN&duqVsTg=uF6e08gee$xPXM_koXDg~rfy#9%OL^`Rj6;-=#iAzci(T$$Ox~nP9
z@4`OEI31`>wV{>^dXnc4)rvX1pM?Gd(?sIhc_lN}#Z8Asup2Q!a%Gd>9$E(~TS%4W
zsi`|{(0G6pu&gPtiyt3<kwHeOk60%{*Y%3+4h3{+0I0_9?Fw{-Yx|6dSjGr9?4~(m
zTIY2-|BHyI@pg-N2C>#JC@sYLcJG6?flN(q0qPKqa<$vr<qODpmK-c<d_%-p=gvWu
z3KK8xL)-wq!VicjT~@!p$K%v@wq~+>ix((BFZ<~o7Fw@RPVP@2B^W!r^$EaCZx(zK
znhO8-1@|n9xCwMjof#&$N%Ef2Souc2j$Zzly}>AGgeMdEYYH3O6R#r`>2-Nt>-FI2
z>}ZMyC;OYzBf{yj-p6$fNhsf&6M;e!wLbR(n1A1G_uN{BF|w@l7_rS-b-E9pt}`6)
zJRf?#AGx~3-9eW{H2Djb`ZN?TYRbvN8m*s$BlVRg9*{n|?@l)u<&za)NPpR?Z9cet
zMVZKXut%i1Sc%!hDT4Lex2T2rt;&^KD8y}9U%Ib1W<e$qq$3dW!u*ZgxuZ}X@WNlD
zI4)LzU4hx5`J4TTu@wB%5bOe}2%g4i2}l9#AS|KQnCVnf;<7kN0`sJ4KNL5d?R<@K
z6hUy{gQ3+Fk1o(&Q}<aqLdAR3fHJU2p5Uu37z5ani7s*y#<iDP=ZxJYFW8{l|2Ygc
zhummrCYT*aMHym+vf{atQa;6<PM=S!eRi^(5ITxciuo#sw~Ya2vP9q<)#1iloXF$>
z65UFAZv0$*W43LzG+^<Pi5eNTk@Cts5%;Mhzx+1Uk7fiowtiU6<BvSs6mgkS7b4a4
zmAoTz7#=rB5@RqdSH<nW5}00hhN~iuNB#(ZAAmr8aFCWz3WiLImo3qT*d-6!!YXx>
zV~A?E$A9y7i2x0l8l(t&6V#aGy^h9r^m{&^j^}NJWY`(mt++INr{}y^IyTnNX;zOt
zJlKl^Q!k7AwtgFe8lgK~H7YrIRnpxb6VaX9NN91wm@Fei5LF|zA4*yHU;f0?SnJOe
zf^_9Q6t$>6&Kj&vkz#tMe-1FR2Z$d_NQgW90XEmmX)d+jt)>5Vk+yymt{23_WRon2
z*`9k{q`pyG;iS~-8S)g&>+t-MxNHiTAkY%O-`xSD@Sb<SOqO#J?nO7M?*44PK(54W
zdn=3P+Er)>KfVo#dEkbmbI7CrY{Lj$f(F_?A$e+S)pg=^=8SRx^CmnTQt;hOOTU=K
zS6BTHF#!Z#J3ro7Btq_Anl}de);LVo)86IfMg-jUV&e@Uj!vLW@_ie7MA{7y385i-
zgY`l&X&)@sa8G<r2csQY0WeU!@_nxj_qw$oK|Sl`inu(9@IRX1t)dB*Pq^x>d`R;L
zo*0;!BdIY{-X*?69h$<WCG6D*Av2pVdZ;#Ks#;~R9C#K5EE=(@3DK-aS))O)qLxX*
zB1gl~$W$DGT+bFa*63AH0?=AZ&<(r4Dg(9nA@>dBG*0kSbAGu@05V+3sUYUEbEhZr
z$m^u%E9igfr3R9jm0h5k6~xy2TZ!i}*L1@3u_H?+Sni2zg?S(!7(94#z8n|`lNW{`
z<-=QG7EtDAoUH|1cuE8jwg45hy0bbQJvFsJFlek03b{0bSd6S2|L73^(5CD&h4{oc
z`|4N^V>hIRz4q%Ruezkv%!N=Ic=d=bpVo7fwR^`RC@i@Z0lh~kCIL+7S0Ak7sXy+E
z)oCSArNK8P?wz#(=*#frvt#VOC4-y3-O1DdM@2q1TbM3;|C;jE1q+XgU07Qhk)c!9
zf+_8&mi9lK=>I|%x(p8(q8F$wHO<<v!_%p9hXw%cxMOjgV}~|mMphdRldiKo*3fHe
zf&LbNUQhL~_u+@@?}8_n;fqL+LASPE!>BH6#M(pBU2DJWRi26yqal*#mYPtrl3*On
zqd@W%&7TXM`sPkfND`bD--db2kO_?7{OO@l+f4sZ<)(qpNG?kPty0{_(({AOqGkCJ
zu79Ka0;fj0@Gih}5#AXCWLqPG0guR?y+34w9Dii+8-`ig4#9`{1q;NtxC=EG_l1xQ
zNY!p+J~7KSrdM`o8WrdDaO4m3{u)z&*94jhFe^x(T_D~<nk#mP6bY`&EcM4xgzJ%K
z1Z-ar1%abxjR1PzdxpTn&+<PT6V())co~P7-qWG!QWrQi2@TSWd(Nj}=yvUYX9f0+
zk!_}+ne?6kj#8)#05pKe*2G$qLs)~zP`Ac~X|;Ti7twiTAflycU<RX|3IHAqMoCXS
zYNQ`zqA#y+{)aD%a2|hni#uO%yePrx+`iq%Oj%uL(0L#oO7MhDnLrNEWMJ0K-BZfO
zrEE8cs2f3EdF1sS64bWfG9-Wl*`}%r@-5b*H!j0=)zSy@MQ4uUMRjMMSdAOC^axL>
z@S%g-9?}X{S%PP#%y|_;X_GQ_NGdzPBD{5H#?8&jZBLwcKj>li;PUX{U`)J}_fz@A
z7|}*M51Y$~TK$(U;iW)6aXddm+RvRnKkHY)k|sSP9HZ;GPUi>U!TM`#6eNG})TUYu
zQ8F9}8@V=?e;+i^07a!_y`ybP=M?0e%$`XaCERXN6&qZ5@LT4~ERSw5<0LT$^?BQ)
zh4e*AJ$y6;C|regowy<ZQ?bX+b}f+%^szC{CV1VBVEI~|?^^5!rYTkK31+ncM{^xk
z(S6+I?8u4R1`J&!1YI-;g~%6BUC&Wk6w2g_(;#C8{8D{xhuv#e_$Y7tbPD-Kl$Oyl
zkPh<_nr7JwMUk1s)t1vzT!Ed4em7P`kQb(cs&GKdw05nn&221!vJ|Yay(^a5#@$UB
zqQ1ufhE=M~*gqOw2|djM^24GMBU=s?z)eOi&TFzYj%*jB8Dpz>U_2XoR^dIusVO<U
zJTo3=h+i5P;mbjfElx*rH!Fm{&rEaTY#V!`BPCjli6PJ##T?IIIDT<+KYu^@*UQ_J
zkuy{L>aDy!hWi?R_0jU#2&c{Jl<#so07q_yv~aSKh&(4tFLo+;{(7r3;AR&#c)u62
zxtEcdZ4PFue_N~VP0LaMAsM$UMi8s*AyW9#g=3X+KyW6(f8{SOtU*7L9Z$a^ff$w4
z+LI*^%SiyqL#zUZfn-iNUBDytfUIsb?mo-M%t1p`zMQ5hv5}}hq-b;zrQm_lEe)B*
zx-h+j7?ays86Gyw;#t0u8`k(J5bP5*08<WN7p&kmsCgOmoc$++1TK&j*egD{kc@n&
z)?q`k82NRuYXHUyh^aetz&=L?${5#C^*(Bsi^O!3j2ej9^S=W%w-!`><OXqxvcM|l
zOG#{&{*V{k&2-QH*dbFmX`tjxI$(5122X17Z%4qT!p6#!FOBZ7nN^wL2GUGbQ}8X>
zWt(0_*CAbd6|n-m(Gdb6Q|be-FXX_7w1t74a8R=OQ1s5D<0k2jyHQcE^1t@GTX3N<
z*k0cgQTnJhQTW-oU@JO-%oRSRWdU1kJ+%fYvRYz^{Fr|+o#}1nnv2wf&;{ld4x!Fa
z$HtLxy9zQMq-rJ^wMqceikY4&2B_~12@cNm_ig67yU!>km?9O`jIIN1Y3qRlfHdYi
zEURB&CzyEvfjxxsaQSqdI71k&Izj+eI((grEs|(fjbeP}J!ozOI@kVQRq3p;Wwub-
zv#$&JQZd_O?)bnV*i@r(#HDpE-*{|z%ibDIpH5NbI_14*wbn)aamhTh_sT3w6I-vA
zE?9xRvi}Av!NXL><U|U$_TVe|rbiRTDK<qoPP&5G5~A8GWk8CGw{vLlD#LIO+eB=6
z%sMLC33inHBGu6-N&`Mr8h|l-<Hs(w0NSu8;*~?ZUhEQ*s46sf*U_?RJgHvb+SXn5
zGRA6Ij$xiNlGeg$5if1?*jOkl&q`Y1Rc~b2(+F~1gSxI;MSV)bm*?QNsZ9#ET-_xn
zir%eGPL&4j+;?cs<JvLw$qHf8Mz4R|Y_XQ%WafBVZ_B7hJvW`*56$5`zugZ^k51pe
zHfNJLxRgwp!hV@QdJaKwwTl^jjTwaY&04I)8C;T6HTL#=a&`XlWF&Nty++Qn<HM-e
zld_VPjq%t`T$~N*={us|^Ylad<Q_T}!mJ%7N(BPFbJ9;bfV>2d1dmxDNcuwspZEwV
zs$>C$Wa&>HlkNnOQ1kO_DQ1BWF=>&+>0Av+SM&4^3r>!uj2HH00LyKgd^8!*@{`4(
zObVyo-IXzcMA8Yd!XDV4OK}B%o13w1UK8URK5^nJq}7|>yc?5jV*VFOnk=7-S7DBu
z{gBK=u~Pp5DhFu%F!w?{E3wwY286*fMN}i1WIn8x>d?w?g|zZx5aVI3!C@@q6_Qah
zykCy$1BBh|0XW5(9kEcNRjh+@G6a`%Zl=6LczbHg=Fkvy*@mm8uB9_gJdpE^U-0g)
z&*Y!sxjU2J^bb<<)}G|NixE*2VqIk~Pl1*<NH<;^P)g-o3rfJpRAkp?sE~M7TldK>
znZjCG^Zo%sI~bJU%)?}X;WI>@ow{~KELG@E7r(T9Qyz{`n<Mm=c%!ud>_JS9P@QoD
zSXevKQF|*#^5<{z1H<X%mZh~USxO4!W*v>q8u!hNm^ZLoj{WsqXt=sj@3W>UbZdjR
z9#PsIK|mQ8;&UT>&{|yLhj&=0yS^Q&{``@`Xaz|SQZpd@{L?mO$LZir{BDDxPBB}B
z!L_4{M}u!kO4@jL7UG36ejZg#xPQhLKs$?&d?m5b$kRDUo=Ucgvux&7QF~(}i-eN}
zh>@mR7{qxE_f@5}Ad+_wfm42koSvCg;{XHp9?Eu@tktt94L^^LzB+>Up|5)m<5_;-
zjAVwZ+An%6@}xydN&n<iG*b53Fqu>QN(DWXyJTW9O&SOv{`;huvI;Yu!lITL37>2g
zfd*4zg(qoL0zYF<iCUAVW^6+DKJ%q<7L^EJ%H==lgNiH8x1^MV?1*Ui9->{Niyh}K
z*wKTA<-SpHWLV{`1<18o@wwp=`%O>o#pWTm5CynG#{jrQ2Z3>geH*ocG^={zjchVh
zvgyf?pmq;DfEeo#MvVd)V__NW<P%Ax`e&v3@&pjj9%hORxJ)~$28)c5z(McQcJ_%(
z<`OhR(uZ0lD25p%{(GPXinMEFuCB73Q}>gFje7mVdw$zeiiHQ0Sjwqv(YrH_<GP3C
zVGCV$B{&<FC@-yJc-DO#L0bX>F_fcvs>(<rR;s0PuT%UzlAfyio5&d$0VTg90nLH&
z%7p*oiCC_j>R=ggc~GG)i$2h!1<P~2c8lAdTwip|+bGp8M%JO1#pWu1cWvv=%PdoI
z<$o({u94hD+$-seJFJ5{4Zy!3ljG5)qvaTY99y>!7a#A-+Sh|3K|rB1;6vLb9e$@3
z-^4T2FSK$GYM-8vr3t5NKEJ-X^La?hC`65<yq{C}FggWn2o;?z1PUl2l=sJc;Tp|d
zWh^Ck+6S&}b6;lh5$XOMz@q&nk3%pTVyYcoVgbFYD*=28DGRn}<f+-HVH@9EQFh+_
zfo$J!)_0c~%rr|iJmj%wGNB7MXl7t&pWU%qUbqxRTG~K?5tcPKSWF8Lte*o4XQ;AP
zFba4v8%hdLe5Q|#$)^^bb@ghYDGAyHoMG<2BSowbf~l*y{%nSA61s|Oy=8MNO7Sla
zE#GpxfuBDa;c9E8fXJD>v49GV$dg#|nKgR`J$*c(JyBxP=aVprsm&TiSo5Y>5>cxI
z*P~#WiV^TUfXL)#`3N3YVMqn<0}*&ixWy7c=yo9H#367Gl#Q83C?*@g@bl`!PQ)r)
zgU6(Rw>!}X+K07zSB}Eg$YP0f5^s(IIKb;-hr$F%;$(A#UW&TF(l<o=I~)MkmX<Op
zVa$78E#Ef*$aDOC4pR#~)4dPJ_p*NW3jKP}I*)gA{C0M7p3yV-?DHwT^hJ+u$x?XO
z%nt{fr_&)CVZ-`1_ig=X+%%JNPR@_jf$LfXvSjW5<b$Kw-QCmhRV=65_ldygU2!&V
zcIsTj#fj7HSaFaug&F`Bl<8Z&I=5rh*0Y-5y_&ys$^UXd0`AiSeDrSn^#EboVFc8|
z;=#!2JJSnb)YM|fs(5(OWw=+VMjj1!#S>=36PD?T+w#o4we<MelC!Jjg*mioQK{r?
zcTIWTlYb03Dz>uA-JI<<z&BHI9j2yt5Wo_Je*IyRlHRR<HQ@p8K_U^(wsyMX7-1);
zrW-KmmWqp8^7SRHM<&DTwYSpLn?)8nwEF36&esf>_?il6hcMQ+^E-`ujtPk0#Wdw`
z|5!91&0~vow*C9>^Ks-2v=+^w``(2KInN<T#`~4dS_t2d0&JQSmo0w}T>STk5Ae;z
zYtc61W*H_ay$SH|&jyyQSs$SAMp_k#@UKlz+78LSHoA;L!Pt#A*50B*^<>n6EoW&A
z<e}W4%%U$VZ+MNImD5lCl*cta1@w#G?d$Za!w-$duJNZOYwq|bYENtb$&{V_Alm-7
z3-yBw)0-J1o0!NWXFT7{&0pgD#&@p72_{A*%T3ce7asF^Qq*9=Fz^*)IFI$@T{K=&
z@1MI_H_<!Zq8Q&87p6H@%iv)o4;p3E7R*25t4VKwnJ$yq=)}lzhVYI-Ze0~0a>Zrt
z<kO(BHJ)>3=SLy{Cfxr@I%N@zU&wsC0uUlwkt8Y(C;4bex!<}V&}c)vaWImQlGXRo
zG_JyLYej3f4pWJ|+0>2~@Ob=Yh!9`UZb18BtDD^Jt|J<rAihcY0rBLFM_Rf^cY+tZ
zOXsI*S+r^;K$~S<Wn7O>UQ`AOR$k7YlE|Joo}HV0wJvgfh^3^RjfCz!Y`AD{R*SbM
ztkrULkN+RS-Z8kAMr#+1ZQHh;tk||~+qPD0J6W-9+qP|ECArzB&OLSazTdk~SIzGE
zYtA1%y2jIEJeYl4S^wJ%;jDUpqURWPc)Xi!Euz3-d|Q0dGvXG1%7FePG4rL@EP?3G
z_kQ$LBMEFCC>VwT2cZYw(A@aaaB(hlK!f^s*jCOe6!>PriXtVd@Gh+)-ZlH>KLVWz
zmfCNOe=H-WiT-(=Yv^KOZA@ojYijquh>ZWR&P~>^vD;*W`SFa%#|2`+&A3Q70;8!4
zbFtC{QBNeYcqx8>$*$bQd|Io%l0pV~yD6+fk3u_|xF-~gip5hzBAvf~>!61ZyA1ne
zv3g}nJrknNZ1yk?i@n1$!mpv*(d&A%&(_u^J3(K`E%3{m`+H}i(Sn=RRs~C6|J-e-
zi<YAr*)0*-xF@Rl(r=k)%Ff=UPHWPARZNq-d9YeE;<G`<JJ$mZ->_|Oa^{unKCVd-
zsF`)DmrD>5T3w~_KunB7?|bHlE;eEm3v)pBRCOoFdLA%tn2cJF4r=!oQoCHjJfrhN
zW}L^wwf>sQq-5`_?63;Yl6<tIc{$CxIC|?#`}Q}YKrB}jml~hr)w<?=yH5Wlb%JGl
zc)Mln(n3P1#QO2?n_!Blk|WT^aW=(2b|%?dn;m!&Jc%M5DIU6>AgJhi#Th8uo9LE^
z*pzIJg@c+hfIKG&eorf~o9(>g%<8<TK7z4%Ix7jKmI`mMGisKdBk8{&(%!on5wCO%
z(S#t~qH=wYHn_>^EopzY_)M=EZvz^pCMsqkR_gA_lpVVz7RV+#cGRGN-bB!IiPwNL
zPe&&ezh=5ue_U}?v!G{l_5QxCoU}kN<n~NL#oH-CzPFg+&(LlEOaz-zo_v;4VnPfy
zhUW-~vFU=DnC6vK7b6hF&e7|zm%OL*8qO`O8OAqf16Yb>GdL7`Mw1j2Dq~_ym%QqT
zm-oXrfXqGBaBFLu!In|JJrjI+$M~}99au(31EKS+qaTw{z5GYwQR893`O|wX#{(r`
z9E?c@f0a>s78S3$ghmk464+K0mFbX9c^jt5K^!Mi9w*{XLJxEjq@gQKMoE|^N*#=f
zhkMB@9g0iUU4Y<<Y4UHXN+@(lMrxG4am)i5HcLjXsmxE3hpy>~R1~F`swt!r;WqR{
zs!A}+)fCW~?~6l+uTfE&s!5c<=@1F*&mzfUtICkUs$uKjoLA>`A`fp$V&*lE130OT
zJxyjan5vEgG^osbDXanqhj$6c*p2ASl}1X3Ba-f7FiJ9s;*gG2N~z>6BONzeCTuPx
zAeJd1$1jyQuE#{PB`w4;Rz*9N024NlEi0)?7vqVE3Zj9r4#hSaYZNV<&Cd)^L`ZjL
zP4`b@gABgj`X6k9{#l=ZcZ<f1W_$whbW4{B5K0zH9GaV+7w`J&<)Q|puUAN*zN8rI
zU7=S-c-8C=uv-eibOda?Xd%<Ugyi<)PCkue8|3TMqr@I)FdGXAz5LB!4BI^KB?{dN
zq%}5%>GVkQcH4|478EVriZDJXE@x}?v<}^&3F*|=o@<kN<nD)!)7FJc%8QaVX^V2p
zjKyD*=fh5QPjYnJ%7nCS?0w!Sw0>3<O%Is&B{Y*ihV=p^><_=O2iqRx&kp^9*rTIQ
z@D{o!FnW7y%S@oy$%aEIoZ1UAE6)`?>_&kgdq9Sx=?l&@DUQL3`Z^7E49LDKfe|#e
zhn#l?z`r6JN4q7K#ljdjnT=;GcDv?98O}p}Q0qisJZZqoI`KSC9a9;8;{nG1W4aMo
z4Si{Yl?19ftP%iBNDWj;UbV<|WC{4Nf;_galCbn-{{#;DeCuyzjV_$BMhxIF9Ycq_
z*NNM->$DOCz8ntpPDnmEMo}`OwU?DA*UFB(7;us1LMM4J>cP*3NWn0U7z*d^gbWR6
zCya9oOn`Dr7pN=hGX_0TT0E-^H#$4c=`TO``zGdN9-BSDrG@qoMgWy=*5|OuD@aXg
zx|X$bp>N_^ExnghXDs8<u2f5oLs#tO4B?@b5aZ*(H(&eWKoD;Yf&F<L4p$w$*!gme
z$ehQCFweIQ=!1Baf%Cmk2*(0&%3nosz%{wgJ26>ycx;@IB3e%uXq;^R9ix`Gn0rTz
zppaXRBcB)}eP$$_|M3Ez!RN1)2g~ZNX`>GKM<skT;ik@LOpEa+pm=c-c?YAjQ+99q
zQ3T#Dz1(Lo$BbMyim<?kaGonz$S1@yc!&=ccnB~w2&iaY9tXbPd+4X;#G>~HS+_5{
z6~U;~_KwpNf>-h>g<<rCk1IVIB1#)9UvAHa()SA<T!-(5XuX>Tot#_^HKnZFj!l01
z#O~A{>hf0~_FC8V`tfDx)wkCe)R?KCUu#a6{tU{kk1kzq-6{L?)yD+tD7~JGQy<&Q
z<x7Efvc2}5@-l4HDq!Ya35O(`_T)+fx);qYyHtWQRQ#y}iHgqgktOxF8o7o^39{GM
zxO-7n8{i0c7?)f6uFZ>g?amJ!eUznQKs2<+2DCTmgnm^TI~X!OIhlswp6gDm_CtGW
zPzKT@O5N@G1^nZ(*X5Ygi$RoIo&9ciN3o_aU;(}rwJ8*REA_?J#(MFo3!k^QJO$ND
z{{u2{N1YDNl(+i8FxLH#^~&eOOztX=VU6CvW&chkejNJHgiXrJT<T*IfQO%}gX_~V
zvNdI8MihtUnBa0}a>UY9MOJ!_>BzqC-7462ixESc3uGJ@1;+ZwCw~W|`zE*d<_G-0
zul#Rr>|}eO003xzdiOtS5FG#0?&*J`V`_RiZLlGI@8klFOtU%;M*zkVgg-I@$MMr4
zi#@N7O+Bs0gr-nNp+_vnCE>4Jxb=YIqmeRJ*G$Qrl#s{LBC69o-)#)h9Uh#3pK?My
zEcwLi&QJ?864LL+#%|9bJGV>LM@1n!s~&!fm!KwGSmvM~Ns*vKJKLfso$^p7?vu57
zLPpcnBsympn>dCnuc;{Jm5-RtN$1DoI%^7^+>#3J99cC+-zcQ0nd^|H$g#>vu}Gmq
zN?w<Yl?z&gmb^JOi62;J<ZU!&tW0XL(I#4C<^QdZ4B!B}U+OXeg-@wBb-gEBJb>Q%
zo&44gV5?@KfqHh-F6pGMm)BZ<ajeorrH6~Zv%TFtDG*k#-8mU`abP;<P%%B>(WDLV
zcGuU3Zo#HgS%dWGBIUc;E%#vk?D$2CFj<{|$;AtdNheEourN0ChFK{D4?S^CHAQ<S
zkfEZV$b!8F@8H18E4bjHop*BkcKm@45AVyxf2)bg@C%#s00)p>xmvBFv&?riYoO-*
zjp)y^Na&BA#xJxg0d%#c$B5igqtX)b#VnGe<9$$B5v8ft1Xb+}W$W+^mFnc}%7hIl
zd!ihbGb$A_Trakay=DY|JO3nAqqN_;sd`*N2>AWvqCB}P-F}vRbS+)sK%(l^xEYHT
zSquV$EwR>;%kx?2xw2)nJf`>AA|=m>Ge&kthHm?>4smM1waed4LwJSb!U>c(Sb6dN
zGn`~fbL*`QDvM8r$_7XbYbgnJ?MGA_(b6auKu$FW4LsbuPqp0Un4*G`D{CdY6lMKD
z^dgn6COt@_19)=sjY9UI!n@tmquo<a`$t=Q<?7`D>BUmAZMJ8O9IMBj3@tMg&ujs%
zKeWd296#P|H(qpq>j<s8+}dQ(Q9;=I7QFy%g)3UaQ;VN=hSw1&5-%7%zdT{Qmf$5=
z0qqAbL_m>=N2;3v7hCm1MN{e#FAzQ-cZW5wz5SUWf{72)FdQdQ%N;>*F5D|y<jRXE
z*a_F5C#L`Wa^uqOZGVDdO>tKxiVE52Y!%dR-0xNzh<qfcer*)rr%DH~;gSO6vgBFs
ztpzV7ek}g%;uNeIq3_0Jw_6F5Q!ZI6UM}4@LvQ@Evo5?Fo$b2eD#Gr2<?Lu3t2Y=m
z4)%BYR&S%q;JoBP#-<L71r6)1o;hx4<nX>*a$F${Q$OvCdCUwRIE>a0T6vT_)k4%D
zQ!Wvo^~=wH<743zr3*lxY$3MyP;Q4{(`F~a8?s*adhC4?&l+^sK0V3AJKMQpJ+ICe
z_F%}lKs0sZ%M#_rE>9o0qcV003!|y-n%uH}vWDy+zW6NbwrpX?nEehYq17`oNT9G5
z@<h+>^VLcH7ha<;%y5L)vYj#L1-eArxDDw%T^x64YN0#1d~+3DK%MvCd3{s+U%4u}
zTyvLXwW&5`!J&q<YIHW9m29qyZn_KANIoDi>7SjUIGx+)ksI+Sc2}Z}Q$~}cEz<iy
zMhb*_j3%)y8#v5PfSUhFjLb)ZzlT<{P~8Hui<2Rb^)?xAhesjDVJEBbo;}n#b5jRf
z#fLAbwQOpI0`*MjU=Dce&Ej#=a8*TIRRf;W+s0wH@I<5b@RD=)iR*6Tl{57)QAE^O
zrFg>JFc+{BJlEySmW}Ae$<wqG^!aDV9bEo9%H9#20jKy=T#r`pfR;|d6ICTwExBAd
zaSL>{hhqyREjQ69ftHDgj_Q{8(hE~%1Lo-j*9VI<7XD4B(Z&9L$(S}8t}0k&5gW|a
zB^-ad<mZfu(vQo$r><XP(N)b3n3UP+)HAO_OL>&-XBbVJmH;=n8Fx5PgjqJg1g!^`
zq7HJ&+7tDmHBKA(vFXk4=#w!PiF|r*@1qja9VJ`6y5FCGRBXijyg+8spdw?9f!!!m
zP#i(iGNTL+){(39tK|3xmc|`PpYK@Th!Ypzb>(kd;6&<+VJ`H}du5JEs!46y!opxQ
z1e%OvlrL@6e@+mqxLtFLmt76LAOY$QoUI^TvbPMq%C0s%eYOp~SH!Vt@f^#YjG|5f
z`*5l$-H35t``O7Jqf2#C#nLF{+Oh&198fI!z4L*I8B>TL{!$PuV(yYAMUya+<lQ<7
zNfg0Hr$w>8ib=#O85G1p3eouC*-we@VzUiWKXUc~CJsKd8Y+7Vn1}DGdx*Y~-7=_-
zyXUKlQtpEXEBprj1Lk2dwi#X<CvF5(U4|6@$okA;8W4>EDJ1(dLv+;{@|IKDfwmtE
z63`7~9AiPvkP_iV1LVF!!srteFU%Sk036|2?|1}&Rf#I>@(+uQ7$s#ghVjZe^~Z?*
zO>dsZ7(o;POxp_n1rP>#g*-sSL_q7vP#A!&a0!E|+EYyVR^y5<C*ZsS2`iFWNQCnq
zjEEIDC5S`ys~-;#0GS`UFrGY|KH^v#YbF)z_7n;|(EyvuVw3+>7X^s+nNt`fUm6mu
zkKY?i{^d79yga~wJYYXi>V<r`fT{0k&<78^A{wlBU{#(%k$Rps5(r?FJIZWaCc%7U
zgS-<e;C?ZV@v$S0|Hp3#!dVb;Ob}au-a(8G^)@<Vp=+T^2q11l5tJiE%Rk`h7Donx
zsIjf^l5GJnjaDf9(uhEW7(6kTeciQT)~5hC_|VfBN2@0J`AkGa2!PM9&kUs?6$tZg
zD1zF8UnL1|^TN@Q6j&(i3A>`Vn)quyfA&6bxjJyg-E58tihPh5uOLT(LMiAlibN*s
z&^`V6?A1^Vro62IWbp{4DP=K%F+78YAGAkP0ZDiyAuw<PgB`IzBl{`GwMQdS>Z<~A
zAT1DUZ9qubeuo830+9Ec@a+NR9R<WGO9%j(<%7{M1HC~rr3GG|iV+P~lhGXwW2Z<9
zV4bY%?_8fiAABH;EQSSbGWbXEs)(Co;5>m{j0%Ink=s1ldsCp-6Ca9R57d$B<SG#l
ztlM|jo{S&FeeuY=#Kf-1Zsl<0yY`Vtx5ix&i<3lqaNQHU)*dP{i%X$Y@((H%T&J$T
z?Uf%fKRs~2!?rvPNMMN>0H`bEI}lcRqVaGHvh3o>4~F#4yX+l4=p2E?wZa?;3l8Hr
zvw|w}M@$6Y=Y92t3N@qIQV?_~g%sO)<LMg!=yaDLlG*w@9KsW?2N?ljydfgXx7H$@
z;{lNdk`q!3%!*eQ$Y=07(f~xr`%41<3c!?|&q0VZgu$eP5~7H$4PB(+VUPB<6$Bt-
zt&Yo?m$wbcffKNiJgv>hzj#Aj!FxgZSx2=<%+6!rO8&ZKO&qYdn7h}oQ+EB!=UsR2
z*YjQNd((b;?E1$y@J`Jy54uFo_m8GuMSB}7SI9H(6gm9dJl`sIE_-PrO`8op<GIi_
z+;6#o#0BWzUn;-S8^*joTVApe_TJpgZsZ8#%Ey>A1ZTY4y7A&wZ(ZkQr7H{>EpvCy
z+!Al;xxBeKt7c;8%(ERFan;Ub_7~mo#md?y1?~n+40{}|x=V4y-#)?5FL%tYlbLQb
zzh*<%kCD|2HMWxBQrNuQmZvpzOMLn!Ji2wYmvmkhgty<l)%D(fQQfZff8qDm#6MMe
z_qe1#o}&j>)g)U+j20qkXjpE`#UDjEr(FGQ;SYl~{|PzqMJNa(2=|XYDigUNeD^&4
zLUMg28mpey2zz3yT^HF1P||B|I{Z%))G-!7P%j_=fPaY;{tFTIUo2Q_3qv~d|0d4$
zNtAI~XFv%3$wS*X+-E=`=RAya<q`^Cm_-ur3wthNyysFilESlq-P>_9;ZFDF=LFE~
z`nU{pEffF%PD}gAvlSAs_w{rIlnAITQ>am8Zf!ZHmke|e3aPUNIj9dVUg1(N5bEf&
z9)yWar;J!P0Q)^X3)I!0w1pbH?Y;;dD=P}%Ck?F94r~K~6_z6u;uu$f1ei;*3?doC
zqM}o-EEQZ;P!RHxhDW3XYbrw-rIfP59lIZ-)?B;hj5MQm*D#en%tWgcQ>n>b1oNRK
zKK6ks+|&_WaOKL)q#fjRG`bpA<`ntvC<>}VI#Ec#p~{J#Jz&Gr9g`YpCA+V}l&KrB
zv5WC4YO(1x)*?AkKZel#98ZK_^@;`}i7XyPnXjK1_egTCye5xz1%W|)y?^NH01K=J
zyH}{9IsgFY-D#WfH?*&p(e3q|W}|^daRQ|AFw-q<;mopvEw=SxK9T<Bfz9fdAe}el
zT+DADY}FJfR^AP7%}Y-PYw~zqAhiWhVo*#%k#5zJ7I8a=sv{%GP3kGmyUZ}!@`<vc
zrV~1Bz6L7<SbbXv`cL*)I3*@~i<sQM6K*;u;q*Eu{zT}?T=A?bw5{a9Y?~O#jFaEJ
zx*?;q`wf=>%Mnl&T*<NGfwObq=U#nU6zGmS+kjV=&bOFs7Hb4qK=fHxEo<m5oA8&;
zU&J{i`@TGHnB-nLd)7UQ(mgZi6Y4Yv5$Z!do%fxY$8KwsSLDRjI~6`{)t9y<NqB)T
z3hkF)i?KzS-_b0MRC*co%ir(651(ugFGg{8>AEkNOtxISnX^X>lWPTNZ2MC?khf(P
z)5ilon$28%3cvotYS4W*1c32JdRN2r&tqCgCxid5^zI+H-9uXc;&!8cR_oOzm*URH
zlXgNNscd2bfXqwdtPxXQ85bl014%`&g3c3^iD`YmY&W<GI8sI?;IJRTgbo_rY>%|b
z35eCa3|b+|nY}E%-j}1fB7oT8Ogs<0C8OM!)$?$Bk@G1p_>Fg>?G<!qs6GfG%98D)
zKp*cbPn)<9M+p&uXx<FB(VWyHMAgS7m#vISzowY)?RWdy_xMl@&MbtqPG5^~Rt*`_
z36yqY%?z3I#0zd8IjTlEP~M+CSu;(KYe#N4_!Ng*F=dG7BpY&7GJA3qj+ng=h>*K0
zB6_{}WMyTMPBpzbD<C!*^3+t^*(=1BHg+Rv{B}`u;m!PhJ3W1VezuonnmkDyuyFAh
zjEZUG2vd7{3dZ}jzQIk@eAJ1?UPLpWh@rAz#n@2F(E@+bp~?GXsePO%LO9g&(2gMo
zU-M<CT|Rt7T3tnVJ<;dv>)zDUt^DAWr1sL_86@f?r@Hivt)hyyaRVdO%|~@8-uca6
z&gI3<;qi-u7y4z`L`D=VmG<vw`NUuTLp2Rj-G!S>JztxfPcOMyGf|+$!sV|q<yk65
zy-CxB@@|TkjgfO-(hCul$P|&2+!x(3$hD7T_t66$BU%VU6KzQcvJ3pfu2y;B@Oyna
zE2~?D?Uqvxgqd#!&;#Ubn9zfH%#^Bo{>hQ=gaw5P>z+FJ!7;g;?I!j=H$?=gD2M2Z
z6e%c?s3FgHY*13X(M+Iisi%g}@MQQ6r1%Y22|N;e3km(DR|(eQ@oG={DJpAE51<~w
z;6cClJxyzzCCNiMW(sdDvinO@l`#C;b<dE=Lj}|Nn>we>UT8T~X>ZO0I<>0J=^BTy
z4eSgJio=H6nrqfKGFLQsr$KqrP^?>a^J|jJ(T}{nH54~ZbEmQ0mZ>K<j_7+LTcq+|
z=&xxm_UT~gueEc#3!^$X+FCE3PTjm6QlHPn>94tPxo|u~t6k1`o*zBhdt|8y6d||Z
z&NliLQ}J$eH$8;636TJ|oWeWhq=<<S7n*$eS0bzz8O1{yc^p~YoH+&+!ctuAr%Fg)
zOPru_=01}+Ue401W4*}K9>oPyZE`~fu6IYtm>@ZdP55k1ki^)wVhz#oHbR>PsID#(
zN%5Adf^F}zY;L@(-SvSDM~EV{DJn*2-Unr4r+pOV$&Ut_(s)yIB2GPHi=KIchSE}o
zNq!f~oFHn%rhxMLWc$7t=w^;R(l%=)8A=5yr@EdRvZp0+K(d~37?M0T0THi4k&%JA
z@vzxoVHCX!7l7-}89~PJOSL1k&Xn2f*w}iR;QP;%6gFt3H`w@x2FGDl_Fi|-^aOPK
zpOO<2vpB!CORdn{074xk5duH^yW!~O;)AZm2}7Q>fXg_uYUVrlPBDsWd}b?puak-3
z)OLsn^MxSKqWu|>jeEzcgKGef*d1n&+)?h{Fu;B{W}Y!f92iJewC20vC!`zzp3#CU
zq&~$i^6azKSMuLRDH0M?&l6Veh!I8X296;{b1<+FFS~fGOsqc>V(un!uE;cBJwS{K
zfSd(|B&Gqp=Ee$U1V(wO+^UWmtepZOfUFD>0yoWb>KHIa4fh6%&#jM8%rsKe&j9F+
z03;IUpJ*5Ef5tfI&2c=%0|yG`<H0}WpJkT04dy2JWdjvB3kOhCMBOn`4tK^qS5lXG
zDmLTHN)Q+xWU<P8;Mhw@TIYc&jbKq@&x5=FQHgy@byde#TXk@A*g58&xw#=U-xn^!
zP;m7SU2TGslSi&sFBW||>O>K~ntu|N-+#eH8AkW}6v7$I;k4GmBefM93<rw@@+Yto
zMk0j}Y{89hP_;y<El)PpVx)THR&@f(H3z0+ffqVU9p^X6=p$b6W&TkAkuVd1Z6sbt
zyO<!Du&p>rJ)RNlvBDmXKvXk*mT0NAaUsJF1!`7}78QXcvXj852XMU3(R;V69fwq}
zXzZE2psJnmJ_J>R4&P?5NuUye2JoxJ=&AruU<EN5p$9;9F!2CV<KT@Wra!@^6K09+
z;21JhRC|_oKzjGUO1twf#<oD@JpG7;lOvB86AL^*j59#W%@tAM<)A`$#tZuTSF8fT
zODBV%bxM{!@BjpyEPupvQtj_oTsW^$$?&t;1|~!#`*DF`<|wRFi6QbRUi>$Wqa$(f
zo1_7(>3qG`R&d__BN;{Y3}Je?mAmChp&h=$y*p)F+i!DKz2bX)x7WWtCwp6?8!7rK
z8Bm<GE-ri9XAM>%TvA;8@dF}82=<uZ=C9aKRZ}W#;|4r%;LXliAdx5ut{X3N!skxd
z0VI*<a817wL~CYtLB+bKuEE*%=}xM8nW*c7g`mof$xVyO&IxzhQ9RbRss?N@6&+3;
zUlPpO1z-ZOHQM2Rdsou|h##KjjGQ!o^p5+0{L0jVW)X;Kb}gOYzr3OY!=DOnJcvUQ
zRInFH0-t1UZUkmS4h$&rsvpqhYUDiONY@yJU8@Mqx#oasb`}*h?WMf`2#*DdKwq0(
zKAd_qadXi+cH|fbdWJ9t*OzwKWx!MTvxiABe1}J(BHXCr^I$IO)MF_cMU-u+nB681
zz`><CSgE4+k&IkbUV0sRW8MoiD;@_)d*gNKTb8Dr>yL23oTONVS4P6R0jEWba2+}f
zr3-WAY6urg5x++r;R<3OxsD-XZmk-Xa~*-KqYN}D&Re#VpzcP+B~c!Z?HCW$bDmxu
z27zHYjidwVKhQc>1y_163~pXT;rvp4{w4G1QHlTSkPn@^f{#F-LV!Lz+CRRWj@!HU
zNt?Nh$d$x1IDjB>zoFtO=ozLxc(<%wp&?I2Xfo96y$c+OEasRWeb-_14y+A%4B;I}
zJ?>2Y-roonN4jaGBj_*{9*QQV9N#emyh4&Fi(5Os;E&<}AOXdGK48%nKUfhzTVQEn
zZ|^BE8$W9Py;bVf;zAHm<8ioNz;|Ate*_S$%OV{=2oRHYUu+sN3K`Tj<N?MIH5k~}
za9;1ppD@XTc8aqzTSO_O)T>|!Xo3PLeowI5_k0WB>?TBi6**LU1^8bvE~ufHakvdp
z1Q)^Wr4W+{Cmz-gdfdd$!63&MhUn>KH}$>d4+X)Q@<|yfW2oyf{1b4c!Vb_~WggP~
zDyWux92C`kE%BjyquAO3$Yr>H0J52J;JD5#Cdlv(P~lGdV0fQxAaK$psJ{X+p>Z%g
zVUWQfJK<ZEAZ8iyR#d_)>R8GKy_qY^EOdJTrIS<e5~W?dqFW)01(>)GO}CfM*tbqW
zaH<Cokd?DThk53f<olE9j=^JW8RVykZ1Y4n8Ib$M#ZtE^Gyo9f<R}po{Y4(B?YqTC
zAc{0t!&riJYQ0SF{c1RJIo~|$QNDdjEXgP@BH*kyc*YO<Az;-`8x};Y9@N}n>-|ds
zgBhaAf)D2y1%O70mIlla;{c9wWS@L+EtJuZ9Q4A*Knk3Tytksg0G&)Mv;~rH&6dc$
zJfZOI3FMxX)&JnGGD~o_Z;Q=>Jz%)%S0B1)6jQA~x~xWHPM_vFY<m&m+fZH$s2;(E
zN%7f7UMX(PRrHIr?2dApD*%uc`yp3TnZ0=AMdyVWf_z2Z`sXdp1+~W1fGaST(gP4*
zW~|A)3{_uyDPaBCYnaIKpF>Y6X+I8FQXt|e7iFrb3+IH$q>LTO0hlOs5~JvKjj?T0
ziQjjMadks~k8L6Xh`L`(8p{)YdUD@fj!===AeOxgPo+XmQ{bKd<S!@3D;Hi;05Jeq
zW0-xwc{0oHmaUH|myRY#vGjlCnsiO$9^~Q2ivtVSNAo_Ify@CbFxy84#F-VD6<`Fk
zBI9Z&d52f%o{pJ%EZj(20Fhq*Ea0;&>wxzg?I=8p4?znB86)8ZmReBAD-?*sDhMlZ
zLN?>~zIH$+p*2NX0t`(djvMzl4`0&-tmm6~ob@}JCt#f~O8UF#I+mqkZsHAZz*K01
zLxeo*7}YICeC%wF<$HL04Ka=pG#))tayzuSydc8s0>Utx0qfFYmd=S9APN~UXWpx%
zY7e;OkIZhyz%NG-WWz9vL&eVCpfC)VbRj{FkSR5c5}1Gm3xY$32-Qog?InCNG@M&9
ztHxDXYCFAzsHtIJ1lF1mBG3m_vB&NlMR1gv%|HhXqRuB63O+{oQji8)crj#+p`;O=
zKUY(R0KN2Uu4200u$JOi%ECsy3o|adj8l8?nX#sBBxH|{gI7q4wq_M%6WG|<*{&jz
zYlWp|)4I)FSWCYp{Tg1ZFm$YUY8Jd~;_c<9gw;Hn-A?(hkz6=muD89z&mB21{C?l>
zkHj0WlV5(~s!?|qU#r%3J`IJ4gt;jX89INcqWZMQRfOtiYC6I_sj3@d6}u9GQk6<p
z3beK1O-SiXC@U&+_GJnj-V~y(9FnI(Xf7<dI>PpI-ZY`E6NtoVm+$WTVZW`x07pu6
z+blyqzW1H~>a}c5v0vNLd#@0QEAarl-To3*BsUxF@5{3Op7Y^1Y)TFs7EY;X$eNaZ
z6OXVW$1=G)o57#nIS7gBYwE;9acphXUYFk){M}hiM(gusbbmnbWrg(3;O;lS>?}Kw
z*v({CQD^ng+&@2iW#sUPMX&r5kOY4YTcg01Q`VBlZ!iqQPM==cQ<?XIF}J?_8%c6A
z+%7~)Z^wH9?OPWpev%BMzPQuIf-;HHcErV3q+%s^x}gnaITsegs_D-Q;UbIq+wx%D
z-DYjV+K5qN(kBMx$xu<&h<F=4;gg5mTViw#E3+01`GGfq)KjxMwB;}L0!1ahUR7|g
zvnu@Ak6R&cQ}zIZ-}u5Pmy!-(mo?OQxyMrsG=3&g*dMjTEOPEQaI<kk_^Ni1toW{4
z8=dZ)#d(ZVhnJLV6?ZbKQh}V%a&9R|GpavHUv!{r-+#rr%AI(vrj{Wnb>@w@rul^2
zrxqrHziAe!onq(E;90#In`a)0?dnRMTLN*A0M}?LGOQi`cI-ja8HCMK5_Z)M<$f6-
z_B|V&^QJpidfcw(2V^E-=!{IE3EcqIuJ5%Fx+MnDi(N02`*v6Nfb}LjE+eeWM;0in
z8oMm}GA^RJW#H2K+SWfTms#O4G(5{zzZwZ}WXyPc13UaUiF?QB)|hvqecqXqP)Brf
z<>-t-X-$h%WS9ZBP8(Ej3*^vQ-j%=~!A&PNJoJ#>d3?xcsl8kjVcEzRFW7gxew=a+
z&m`AW9ezmyy!s&2+WONE^g3<Yd!=cuqlq%oFjkd^1RiDhz#GJv{-)w<EkGhg#jowF
zdp*tscL=EHy;r-71)u(+iRxa=lFM-U%pb1z^DwV<F&VCeGszW|(V}f!lAJOt#OgbF
za8iC+YeczKREuJoVY_r9D0}TmPK4~1@{m}1{*6*JHt}xRakafFhhZny`w4semQli~
zXSwfZj-w7BVWEP=AFM!1Ixg2WW%d`kzijjM#J@!BlzdKZ=ZZD3$^}VT%{vQTv|+iE
zF1(}pbs1t+DpYT*9wYX7Ia8v2<eMz-`Y-yw@0=^}{0C0~e|+yi0DeT~H~@C`CbmDa
za#}_@Mmh$QpAbVQXL@-iCnq{1Thsr>7OP6!vD#oj7|HeW8xqh(6K@z?8-~D0DWMGx
zab>v}z!;)fURx%U${}f)`+Ap%7)xkE0Ydh?{e1V9TmA#it6h~c$TJ_h^qXX|iAs14
z>o{0d9YSIt?y(68ZJ@fzW&R)|n5wR6ux=JiN^ueO6v&B57KO+xW_GqFrLrLa(4M`c
zty7n#W_nr?ryCb*2+;G}pzozD2)_4^ewFi@CI_}i!dyqJ*NNQy9Sg?aJ*OrtHf3P+
z<&eV0e$_$dAxo$|fQcM%e`Q<m112MlU=hILm)8ujuqyTYFW^fqPe7!MNtcSOJ9Y)?
zlu0)>QSfdF`2;89eqQ@?d@{3a#me+8d=b2K>pu@cY@|y2FV9@flYXj^E#R2hG|54E
z>g>{QU(Ee6e&Vf*osaGYjTNKn{&Nf{D;<~D@^d`?ejQys1FzukVq<<<H~Ji47`cMj
zJ(5xY2}<T;QH}JXcHWoPj!;(jP}C8`_Z(vxRZjp`rXqYR<6Hy5j%?X8B`Xa_=TO!i
zUjl6((!PBXLt!FhRcTfJP1W<F9DX>^g_N)S>Kh5^OmBmoAytz+of9Ec&KY3^w>(F?
z3(L84!$YpmqNif@49%5A%C`?C@h1j!DcR6i$5awjxB`X6qdw<?Q;&vlegOYoJ*PAQ
z{=`4C+43JJDg1w^o`02)k)t)8y@}0#8_nt@%D5FUV1&H<jlAaN1x=c6l@{+MkiZTu
zyQFBAAAFy)1nTL|SHfYP*vuq<>EdkbS%Egpt?dXgin-aOxOBaSl?>M!s)pWfM!GX$
z*eWUFIfAjj6ofl07$O9<!dHh3C3OkOizK*(f+iza9S$`EWy}@m)D|YaQ}4owB-0X>
zJ?-B$5sGzYOCVGy>hlQ4Ml5wQJ<2Q+x1OtHD`12$b@@WPnwQbB7`-0CL-i({oW%e3
z=ds|T0YeiJo`+&@lx*1H%_O3Mjr2Dxn|`EV5YmT>96Z7SfN*+7A%91ZXPL$h4d<=-
zy0CqeV`ovZY&S%8p@S8F0x)z<osHDHxP>9$!eh`Fnvx3I0oL4{Z=H>^@>hHIN7G`_
zy#N_w&Eo;)>H;p4@+p`Gz*WG;D6p{`h29ca1P(9simMzt|4CMW(_D9%-A)nqH8X~Q
zaoLazss>2(1+l?6gLBr1aI)A{fF~gSgo->XN_|J>0rrJ~?Pw#sMjp&N)0IfwA~mj6
zznOUI_?1EilI0EtU=2X_L5@RXdfKGPW=fRIC5<->Y}yjT#n;)B-gl5=S7PL4o8mO_
zM(rlRxSBI)PtZmv2l7iS-)HqW|BclLIM>iFUV1vvbr|X>^NFygfshyEmKgU<BQl2g
z<~2FR&l(H%lb(2#pTj#gNWve-jJIhnXq8RMN@Xc`Mog6tNV_ulk-vdiZg}Q<0A|a3
z)b8JFuRBT`mgL8=(-i)nN2tcm)=vMbzyEI8S@mOFw84hr`%=T<QYSdA%`ID(Z@vzg
zQ^lg|GiD8HJ_j01qkx8<z9>#r*YebJ6W7k=u+CRW5gm8Z@ANh;@|lR1)hk})HO5vK
z+OW_!vpa->MtM}Rgi>Afnh1s!njRCP%!@$=NdsFGNcxi~J69XV6`er|O`*mT937?{
zXj>-Xh{SPRufx#H&Fe2m6jap%PRC*#iN(uh3PqG6pV#4Ef`t*rZ@m!w#*=41<7}Ob
zZV5#iFe6ae6g$aRU+Pr|1s}RVl_@KF?R}KuCTWb+6e4Xgww!JXbVT~PK02gXdM?xB
z=jXSBd>W)EAvY@X3;i7Z`q8jUCa!D8lGlt!ygsgfBe1K-v;h6vF&JUgr#v?=-7N;G
zEGbl8Y2Cfz&phOhz~A*?Tf2ZgqRoc#$_kAi;R8t)h>Eo{=<Uhb(^p)Aw4<Z=BXZRf
zZ$8{1as=~kGr0xGzd_aKS9i`7UwnMW<LEfH=L$8G%LzbG!}(Y=b@Lts*hiqpIs((v
z8<^f(X~;W3z+Gfs=)|6PXFHCsea9@j{$YkAtY@wwvgUwCdzAUg-_R5j31C8@)<VVf
z%4BIB4D}x+FoEqR-rt>UQ5oFGuVjTFsvMgYh;>cNOBpp_M^56@Yx_&O-$6HBQm=QA
zJ9_;ZEzg$68lhuD#w?GUf%I-OBnBozfORuMs2?pT&B~O1Lh#wmVE8^$mKmr_kT#*a
zrNEj;+XLnVGa--cTF4fNB9Z4e?#o;r1nb^jFYCiEr#I}J(aR3aTi1k-O?J+{7QOao
zF=!Kv8f`s#9S`x)K?_i3ll-8Ba)Q|u33tko0NJJaN{Z^O7mZYd@$oN+vdVdGpz9s#
z7*A)NheCJ@n<Ob~d41^&&K(Y^58qrG1i#G%P$Ft?JC-b@TK?c~DrPgMut}8H5274U
zdRjoJ2WX4QV#gD*9$??bLHj~{?_Sv+iS$hn+2?>Jyk{V>gycPuJf%Cs7)#i)@kPUO
zJ9BZyN!Yp{JcmFE<fM{+cQFK<t?yq6&JlBE7kFl>>N)xS##MzLohk>inG{6lI!O*M
z;!50nwUO1s!b4>`^(O<AGIA#BJH9*=Z4A4%w10jlWs7`Pz^3!IzAwpZ`mI+D7#+Iq
zzuzWW!T_4a(|^_#M2>_QRKT!N0%8_gGJl3rFgys{#`CRLR}>>!J<j8d5%rrNZ+rmw
zpcVlpYZ4*}WvTLIcCu*~=cEo-6~~?`yxfd8I7B^jtO_TYeD15eOyGAI*3=fxu3p%H
zz-~7-xcsWaX?uq@617Mrd>OM#5}Zg$4=VnFsR9BSWRUF8HU<;?&vVGh!CUaaG}tx?
zDc!nd>kVOZ6aOY3UbMQ78?cZKW;rYYuVI6macqu`f*M5w84r4(QNAJHF{nRpzI%YL
zI`(WpPbUg{J}cOpVPkm&+{zx^u55mIbSDv#uW`T>T!H+2V>vfg+ip*MpMe%BsdKrb
z(90W<UQz@bhy^d6K~@HfT}Fqn{8-S~e@^q1515Z)VaXd4T-4imXLT{5)%k$>inIYn
z3;I5FU!h4%HnPYE7Q0DYpM{kIiWUQLDAKVoEu=}Pm>q!&H+lSq=!9;yPRE~(#jQsT
zH1t(M<Y;*uv&BjFu(KI2RvlUhUoA#<a}rf7g%AklC&zYG9+zz@!{+^c4OF4>smJQd
zPyi+_7|Ol`!s_$K!1?5F+&zVl$&bllEj(@q{JobHg{iR3kOwp@bAwaVMHlX6_a?{>
z;bf@ihHoc{d3)N>`Bk6)S4KyWsAe>s`!k#_Zq#e=&Ko53R8YE(2T;6&k8=quT$psX
zjn)Ae`^ixf{j;@~kE@b;e5Mvm0g;URN|V~dka>IWO^V;u**+BdeXK5K`P}_Na!V~U
zvVx3Y`!t&@=4+riL_kV}QkL0ubTr-89C&?Ns%Pi{Bc^QWTm21=PFefY3O}U_f?~RZ
zmi2huboO?Vwivio&Qrhqz#PRyr>PX!-{y$hAf~_}RNo##(_?5wPbOEtE?+&;`aL_r
zPpu<;817p%FF#%qyn<a$!AucS$9u8g>J8Rb>C?pC+OTRBIIwa;FTei1_dGO_Yg7E7
z=D{EA^G~=(NWjVIXNC7~!1;fO=B!ebkQ!t_={`~8IUNdAz2ysIilIotG=Cx>A}y)O
z)=yldG5mZgfnL4hAT0I1kV1+BsHYKF2l|qqTZE7vOHh+lnn(^#Si$g^e@Mr^)uJ%E
zK;w&>fXeCvk}S>_j40$!?v>Zlbrhuy9HtK&#=6<lNgKXqnA*=V-UWMRB((7E^mCVl
zW6<Ibw<V^977T=@xnFh(a8tB5^6?m%!i>^Z3=m2adteonXWC+8`yO;%mZ4%&w+;7(
zQj*o&!V~jSk7>rYKZR6tlP_#4`#eI&kR9>}Aa!ZVj(}f_zL&8IgZ7gnlvGo`-}%y6
z7IC%D*fm0|to8w)lV1y^{uGtJc?j2({{ur3Nh##bPS}j}ZFX}jv43$!8gjkgAK^-E
zlfLww^B*@LmVn&({^te^{Qytwe*m7Y%qH&tm(Cv&Z}+damf@WbrOkTwW=Plhy8aB4
z+2l?NcN+=S)z#3rtA?sQanXc_u=$(r#4BUGMrnHEx3&}CcJ85kaKg>9<1!Hqjn=d&
z`aP=<`<=W^Yb5vCb9Pg-YAr2F8=}@~D|POg09LF;?nz=p4rwB$Brqp)lNhW^2&EUo
z+iVWZ=tKgb*J{nxdtz~ueAZKrW+X5u1>#-8f#JZoxIZ>Z&~(hfU9~FU_zb`#2T016
zoavlvnT0}gu}-eFhtH-iEgIP@g_<&r+87lg>zer#dcZAoHTBJmY7U({H^d^m7)oN2
zsSdd)@K?ggTg%3=yf;;G8e7K@_`jz@BFp87EeHm~UK-$Q#9VK5V^~{#IQ=y{{K<=o
z5uwgHfM-hLRJ4UK?sax~J@_xM_Xv4<k*@I)jpr<K?QRIAzvC@QrOaEaER(wS!?9@F
zj-hMRpl&_D>{9Fz`Q_Xy%vn63bK6VnOBg&@I*Y&;HP3P#k!XHi(KJ9Q9&|mfUDd#r
z21u^cy{L0<d?)=7MRJ+8nhwt^V08o9!0=V|(nNC_lqrtipBF4rS$;;81K)WAJP=pr
zmBJHXW51#~%r=ndz6;*hrp#RjJI)W6Jg3?X>TEeeQKuN1cK<R|&W8JPL2PwpJGRHw
zR;64w+~#!sM;Sqg<Gw)uU`Uexf+7EfA6=X+tp7W+Bw5YIF7qd0_gat9rJMh7zlbY)
zv4nRl6=5kMQ@Gj5(#1^>1Fb=Aa(;_cw))JkCtc%KOMLMl$VC5mE!|8P6YpggV_M}Y
z?}(}8_W1BIb>;PedeRASCHcn-4RX``DOQ{&+A@>c1_%QcR9d31R~aM!Mi`3#!9d2C
zNRn8wY(m+*mYX5O3lxv{l0DGp7r<+QrTP%OJQZ{kVz7~u1wmp6fJ1Khcpwd-LPdF;
zLpp@IR3@`K@Pa>y1Ei&a5lW0grzZhLC!qvbX7tQJg~lo$bNO<3ilkAK_M$4);tGP+
z{6tmNWXGO;mo7Mz4?_t=k}h2Ke60id=v6uYok5Ko39~a-Q0(3*QI_a~JzGz9Ecx8X
zHsY?+58ziTQy~+{hH~G*VM5Uaf3xe_zI|m~V}w3wVXs8eiTO2SS4uc&0=0K?`_~ok
z9@?0G4hmA}po#%4g1?}lU3!#s0jw0*f|fBwBKnu;YFRZ8er2F=)GE|rEsE7@a_q65
ztze)cv@GQOp#BT9hn*GeJ79FxKs0pWZK*sYp~GksgNwn3J-QVpJp&fTMN%&syw^5}
zmX>t&IT0wfA1cmVg7<`x4@?PC#3Y_^o3Z_UM&9ZjlP=`3ICNvA<6Z>3^RbThPiC8G
ztn71MBy2GOw`ftgSNx)?urPJTG7wA}$g~FH1%=AR`~!H$NTScQoBSG}v^~THk15B=
z<3q_!jssL$dx<Pkfat;lvNu141`V`xp36gXQpy;UHjRvCL5L!-<_~jNlmSO@nwI9G
zMp^tO12_gt9NgK%=kvq7J?!MoFCNDk=g1`-KEpVisTi&989v4Wc4KZ6r`D>mB|qH&
zY(pOx!03Rw!!rDAKhB<6!E?#enuaM}U&>*S&0QgsG<eXfn;ER;Cex2T&Z!ykof!h?
z5jQ}|gM5LDPM=g2Iv=)JAu)~O;YGACF`9N4-c~77cd_p~QQK;bT=LE{Bg)3d+uSNe
zWLm6&p&iQy>XX?%V^CHJ7=O2@rKx~heDqy5JY(T(UH>v!#wf(E8FdrQXk?<q90!9{
zGv;s3k^jR;dYYg$$LXeO+<WuRr5Qw}Q@)3*$~Z>E=M@Y}<av|upC*6OVI(Ox=5}`i
z8%-4f<0RH0cJqA_=J0~GzxzDz#97nBD{2ZLH+zp)8!hCe$lh{5zaw-XErt#Gc<tJF
zZz&?_>}sY@V1x||dNn$TW%>4CXoxaGkB~a7lA;Qb)|vTm(o;nwj!FGfudw6<ovXjA
zcS3MP67NvE&0qqS;`*3ZZZR~8a6+o0W^kqZjF@zTO*RL_X9wLPnCTq8B(L9jB*f6s
zZKHQ*XAL7JKy3wyWbb1tG3BX}G7$?dnD(zPkL?o=S;R6+t~7m%8@Dj2TN9?(*<l9W
zey3+zG_3>MfSvcl?yxmvdfF?6q(Gd=)$TB8_VBD6W5IieFC^V{6?UNmuclg^Wk_fr
zfW)Z%Zi`(U^_xRzhG(B(5y5{!<xSu2*fd-S7Z2nNc)<tIGmy|<b57&RkY3$Pchg6U
z{MbwxwJ&NWJQ2CbR;_U>HEwrt?}+PVj8d{DE<Xcw<C)=|iX)jBk?ow@&Ut@8z}rIl
z5xuTCEgy8ZN8BLSN>-2t<(murnv9Uxv^iH9^0|N$iW>_a;cWF}jhX(5%vv+BAL&K%
zU@48w3W+_2{pwrp>7@f#Ye|Hxn%>8rrkoGGXnujscx1w0QmnjP=IgAk?PSbX!lain
zu@A(Ome4%GQ!+>pGXrcp!3v1L@SG7r!s)$6cJj3U2E+a3+1C1}J@@j6`&zF+%V%<}
zq~hhwU%9;)fW0~^(tIe>w!<3J&`^OM*3Zm-szMnCB03C&P+eoWV}iPJqhC9sb&ws@
z))7#fay!QedWHS<h$&MTgEPNv{0y41*<mk5rjr_UIN?_!iOo@Yvy8@Na}Npnn3~-|
z(2hVjcG91~o0-JrVgYodtFHBcmt4R#%UM*}Qbcm$VEkXNzcEdc&1ifDEH??bSf9^s
zb#ZNCFK1uxdj7r!7!>SXX6rxy1^*XR{891z9MZY+lK<<=|33ZGfYs5&$im*liT?l0
z$E^SV7VG~GK+B5>*w=m<*9Z;(0Odd6pa1t)IT&dF)x-3hf552o|M`pm0g6tk8~hkJ
zBYaNRta2p-A*Jn>b)}S*9#C+K{7#^lRgx`*!t{dlVze@I!;LKX`;xiVR0oTZrR_zF
z->Z8w-JS07VS3v~Js(qS{xiN-`r;>|3S0*~3!77{-AE^zRydJ??%qzAi%ysbzu&vf
z(vG;rKc}3JTB1RjC+i|0SZU=?u%i0op4Y9z4Ip(gS*Wd;JGfaISe6yv%R}UX)0hyU
zIzV<<!$9WbCgENtPD7cdz)Uul1e!EkgZCT7Aj^G^2P$oXR}xKns_|-2(s00u6Ow#9
zWQ<NaHboz@+M%G?#djHB8wUI=4aNv?*qba_KT*97Aq9G$N}WxKDq+jjt4@8Dkb}TP
zKWx9*X1Nhr?=n3Dyh#(5ADLzU53)~}J*e4V)todjwbX$I?1w`Xd*_aUaL=u4i%H&1
z<%ACrtw6hRvq1N{*<aOylUIN1`Gk8>7hy;Zu3W{GsTyZLIXJF-`0x?!u7NR#LQ4D1
zvl<lD=dXNKY52nv$~nrlpuk2X+f{*w3jho$Z`4^_377DFNteyV3CPokFvS!oP)I!L
zS<)qycp@}*wOE1h*@k-C6aC-yH7yIlGuRP4dx3o8JWd-Zfw`llj+I^oW=iY)DFa{k
z0yo5k2*5%ls6d$bs~NbJXUWn-px^mLkaMMb_k$*YHW418%1n3=35$}IELM)C?y-15
zz~vrgdQx@2TtD9ey$M{XB^sAVC=D3|cm#Ar7@3S>p+xYS{LJ?+_YZc#RL3zh1&<f@
z`ligC<a^~uHoNh(|Gsfx`GQbAi^(y-byzGI<!aSZPD9?D6CJy-N1pqgI6!*F{-Tvd
zS5=ys^s7XBwc714N_&4-5b~}k=Gx)<jG=R)-mR|PmnxiNh$FnRH#LGR3MHZN4+;b2
z{ZZfVf4(1|c7as}*a`H$I^7=k8umU<-@GK8<yak`GTu6|!mMzsW^M-cGP197fd&SE
z!%Uu4>gopc!pw|(PDCw~mU!3(l0GG6#z&kf#cNv2jwrT0Km-yLBB(GKt@%g~DPF9A
z{UN|nsBHfALn%kgwI+dzuyaHP<szb$Xd>Es8t+x@QOkQ=?AOUC!r`jeWzEuH)9K!{
z8tw^M01E-rK9{D{V}^k&o}a*3YNm;4L#hKgnoMkMa9w`(7eRkHIr-?{%pAQ#X?z`8
zlODJ|-ypf_2`Mz>fy)aDXlItO@>CS8I~1?Xokn~$F-AGB5+wXh%!Kv)h*Fje6r)R#
zl2=*+voDHP9W1_r*U+yJhY_uzdMpDg7T4aohL@`e`3G+FX3?n*Ql422SF+w8-*CeQ
zqQ?5g%M}Fyp^!j5fdJ-)#8p76h37*^tuh7up0a~9r3>=h*oc&lQD;mu<aOTMFcTnO
zv!Egy#76Va#Ac9sU3fu}=1q*I#erePqL$JoHE5}5Xzp}%JEWSFWrGz}Lr#DUVqM%$
z27LAlrja3@JY~g_?W@j`DBk<&B-s-b&7`GXbs8#^yXusGiq;hFd1TO`Q~n>#INw-l
zp@ouC<)pCRhak4C@3sRfyCo%drY-h7jS8PH09cwBJkqaOqTHXAP3kTciN7pV2PS=~
z2A(FE?K!c~;XN*jS8)cxz=o6Wy0#?Zl{XrLk4X7=K|jLt`JMLQCDs?Br?TM;qz)=Z
zX?D#<RPVciydITbiON2Ot$xJ}VK|W_EkA(x4wr7}V*mcB5kk-_CB!KM5)69&(K%L`
zciJOmj68VTUhn#IdV~$jy_DcocH<`?CY&Mcy8S;X1Jhurt}R-BCOD0}yxH`dU#+PQ
zN+vcsX=*l(bW4mkN1kNgG_=FY`nks^Vz!up)uwN8x)Rr#w^u>1Ylb-pFM3=BDXjSG
zYp(?B!MuPW_;#AQ4M!4a%NFfbU0T~|J{xmV=ATc+#2XWpzZsR0?W|5T84|`Cm2^t7
zZ^#y8RnlFTjoUHaab<>daoxt9aejF<ZjM!CDTz$1_}`p!nJ#t+tx`85r+$zmVk3zj
zPv!b1S_D^3!v9Tl=Ecy}5tKXk9^GAk4OKeeThnG}|I5;f;fJGrf_{2slN<R+yKt_g
zVv{{?nMvrLK3jd0)6!z~A+77EuDZ9;%$?{m)2Uu%h7A4HpPN*es$Y%4=;Q6H9oIed
ze9<(!rU&h2_i+g}{uY5%RyD7<&Tj*xK9=Qm!2~yhM#Q2RIle_AjmQao&`VAsIs;s`
zGilxI0XgS~W<6~Rtyw)>$G^@=U%C5k)7w3txpXRs%eSo&R^|P3(F$A9l}d{DlOpA-
z){Kai`eOLpIpf_<*8NoSvLpl5?m-XC^l#^hdDOYm`}f|-al~PQ@-sU~{rUXgdMD%m
z?wuy?_W!+i%ESuT^)tYP+`OUc{y&s`gL|i2lWlCP<D}zsY}*~%>DYEUwrwXJ+qP}n
z=-9^nop0vM%y;g6&YAl>@B0tb-nDDhs;X5jKJ_eX`R8&nP<AN+jiL4{X5T8r7z0Vd
z@L)c@Xwl5R3^{MU?z6RkW>WsnyvKe=CL${$tA@MIINPM>=Hu<)7IzD*5O@kXKK%)w
zP5GujRy}Mf_zMMNvd5Sn$ufo>uZC(tSlnXm7x@|CD+1~jUr3u*kE0q!UUf<$(2uWu
zxg7q8aH(?imef7bPEfAq42)`sR_wwiI9o(_NfUuQ3ZkNGu25Xo!s{X2S%D<)gzeRf
zHe(C!9j)gS`y|zqDCBKpmj27A%+#!XxFxf#m#>WCKt!rR^-HSJ_;m?Eh%%I<Vq5wu
z3mBngrH%G9lZn41ZzpOqF@)X+6{#<BV@xo^SG3;$((*nHQX7s7FnJZ=XZ&A6mOtt@
z&J31jfFh3d|DXL0W}PX>1K6bm*MwWn0=}QdN_{QS503KYYeEYRKWJ}%T*>10kwLrf
z`5E~EM<WWbKg>DlYM!2}TUHmZgqwe+z?0=n@&QDr{?kC3Ug~myI0tp6zZC)DGLas)
zL3~+g3~QsP>@xoiyy!O9ANH^RQa6(_VefMpv#q4v4H+a%fytV*J;Vw2R#szFjelZm
zo>}1$IjznL>Yg7F(Rzb~pcUGJ;_i+dch_O3YqhC*8g1`6N0CoaJ%}RaE^g`HPpm}E
z(6_FT>$K$L76Tfhg}*ERgXw2GDVvA=cS`jaXJh%Zm}ZLaRBO9}l-OxJ;hYmMtv1Uu
zZWo5sFK5WLuP!#2%<&T#Cj|d~{aqkP&Y1wvQ5Fpdh~Xd3f$cx9KcFMP%E-Y%&&0^#
z?~h>sK!X4v<R3JMoty<4h?`j{Duq19E;9w#&t-|KFom%c@O8|!BW*ST==XEBHVaF7
z8A<!ZNrLXPac-umaYnAT4)BH)(FWhsrI1fNK@_)9)_Ol%jFvrUfB%m6Jnc7E#KQo7
zI+9L3$8AM44`Kv=<8d+p;j-yF?qdf~7*9coyG*#UQC1=+t>C8wxUUbvBp{7oyAsHz
z9`e#?3-;*Sl1P2?S-u4HA(R4`tag+UTG2pmw&KIx_dU>sxksy=Lfe~0sJ@vwB$!d>
zLiD<<-`0xpCy}7HT7Gq()NB4+n*L(J96}6+)0!Z1L1=94bBMeQH$fH=Sg%vIv9+ZN
zO2S{F3jfPadUYO!b^$v5XP6%Y=#Z_NP&;|VsZ+ch#OM0bNzse?ZK;7D6W%YP>0vzq
z)6g7<&6qC4jbasD?W!LPOL+?RK`$O|*hIyHSLwtF1=DAkYK6h-9kiX;qmB@yK}bn9
zve3Bx-@NFfF9>9y3m#JB8gk`&cjd;=kfot{q)0j(gvJIr39@}!fgqD#Y}{hcfP<o*
zzj>aQz-;eDJ#pcF`mCy+zs$O}GV`{5><F|dQ3-3oOpqIji--g<Y1!ftek|YDnD!gn
z1-N$~T?Ca7m#3&rE0q){?ff<~WAR<l7H32BftcKYux?o`tWIfVAyJa)IlF8;y;h})
z0Ks7Q6=Oj!%TH?YkK63<I`izcvT&qc;^nqIvyB??cs01((T(Q2LCtQ0Z$ZuME*gKp
z;)Zb<S*)8(-%#9Zcgww{f20yzw7|+%0f$tWUWzP}^i;l+3Dd}I++?XZOmyq~_GzHE
zy1;kX-cdy%xOnEs7}_He{5p!eH`wu_r~leFFen_9R^2?(cwdmP6K+N-ka3zRQx)gm
zQSmlDJN>%!^OGfsro*OjYPF)U<OqHT{%yF((tv)9KK(FJengqLW{cI;C6abn%G;J+
z!~ld_-cf%`FU@txahHOK_tuzyj~<RFXv2kG^0lW>{_ei3(y^}`?ThPezD7~U#ijIg
znc#OR+B>?W4;R=--jBo5uR9Mb$*Kd+ix-WN4)1qHuT^E<gTgqXZA%T~&ZmNGpIo_1
zBDF7<WA8gZZXVrZe~(7FHq05icaA&E==?+$Ogj3Kik|rP__9&fy;-4<MAM8G#`M9?
zCwZ3jw6F7Ez`GckUy)(N%mvqg!;%_1zh)np9q&pzDSSjHxl!ONra0qQiY_;>j;Sof
zsEo>DC7I!JG~x9{U2`I7rE~G<&Gv`-kp9OC)18|-n9Lq9JL>K_4FY0?((dV+{>y5W
zP&n*PR(A@$*Iih=PE^}(H>O>G0zx*f2em~#bZHcbEWEH$cH$%kf$$YcAu&daHu5-x
ztWMsjQ6(-l6ppNLyr26k2Ha~d98u`~aP#J2Ent0TA!bIrp_Q^<RP|$kFnr|v*}*uH
zub-axd&D^P$h>UR^MY#AG8=q>B<<43Y0nm@BO#r5kB8>uq(;=e7=!wwH2ex59Cq0~
zzT700Lce;9KUW5Q{Sp{2iuamzx>Z0bX@<L)3q6av?3(HpHFArKi*nujZZA}26#?GO
z61qME7d3yMcBK9VpXRtoS(xxgjZ20(8M-PNj;#XWo=*#_?D}m+U|QqnDUySg$ozmT
z9yh_pOjRCe0`1a?cg3^?Dv0a=sNb2(O5Yqtgtp3XJ4IxmwrnghA1hTwztu7|31Ghp
znhV#N7D0JX#sIQUm5IV8HT#JHHnz=A9i#x$#w9iN`@IrVdgvrfrKxqOoeaXkVz*$C
zOyE#L%n_Z0Z#OCh1yCS3-^cnsBW-`W*LlNgDvWwxo+Ts;?#YJL)b-IRr#;|~;)vJD
zW5gUpOmG`iud;=+!<_8<+7X;eNO0%z<6=kR?lH$#8H~Mm`W#+=lm4(ZI9blZ>j@qj
zV3o0@o+_|JAjj%z_l~`e&@aK<A#3QeDo>{~<l-vp<v>ETspNA?87nE*&f3H{*-rFM
z!N#b;+zHfFjAwv$ZQbW9fg!l&3{))*J&mT~#~0)tMwZkTLXvH$MsROBfNueJSta@|
zMYM<R4#BWR-G56B%&ncQ8!lCL!q_J5Mp0(tU{v`A`|r^S`2Hmg1Aq{+0YA+@L?@0v
zi49YGBR#`^h)jPA(4YesiBknp259mA1E8J$e(sQc*hg>_Q@_-n#*~SncW3c6k~%s=
zNZNV6{(T@YNM%XWE7mKwWbrh94T%#ZGQ?{9O>c+CG6<vx0{RwuO+h*Uu-hJ@7o&Ar
zAL0Y@dI?<$vJTUKpd9Qe3=ek#OVIEb3cPO-*@G+Erwg78;!95G(0(Q~yx`@s&N8u)
zAu}2OdR=UFtScw1#2wOq0W>$XHtOm{WRs@LWswpSdTN%jjN*R*v{6vu&WPunDm<PK
z1r6Sx1qryG?scV&;#$fL@fLQKXxjZz1DP0o>opUm8s9E*F%NXV)U~{T{=4zn@k9*%
zFn$)`|0iTj&+;FvlD(DT-$MfFXj$1ldbokhXSBjLOB7}wu;2@3X)Z!(pG9qU>34&q
z9Oh7c7o#nFms1kjsPp#6_^mSpM_GxbMT<M~kd%zH9?pJ;TCu*Xx2L-s!UOaNh#lfz
zbYnCgg;)OYeWfO-C<oQ{2+n!Fy1@az1FR~I1y@%gc=TX9Y#4w){hLn#OSp_!q3c8t
zuF!uTmohzdPou&FMUp->A^>~iM8GWyp|&1d9^eG@)V5TUkM^5>L(Dz=-k&(Ur!GDl
z-3x2++PK-CoW2$%m<_h5v1@pmWrgJK7dBv=LX56~*cSr{&A)#W6ZLX3qnNaAdz7GH
ze@6pAX0d-Dv!z`H%2sB`q;qbZ)2~ie&WNepd+ZG>`XwKK>7x@pgE}(<7+oDuPyXLx
zV*n=m*Ldg;14q}tKLMi{0gE+$q`=D;^r{;XKP7XRiJn66_*Nu(tI$j#=$_%z(1!D$
zE_GZu1E0La>fru#yVr*uHYUu^KAZz`HVqXcoxO_mD_~8N1pb>%5mVWfT^<Qj@QXA%
z$>ePsG}m0sUHO=|{S~k^z3Z6kkAWfXVQ4yLsz#_^X&Q)d%z_PF(7H{K9I$hbCp_Q|
zjlkdRpo0&gPBAItbek8Dr&f`UrDIJ@VGj^Cj|aaA7Pa90;Q+;hy;d!;w#0VcXmQ89
z?A1vwP2t&P1KxD4Xkd+VvHqK6i!vv`@RAiq4|W<$+DpnZ2q7~{v}dP^Mff%)8oVjg
zV}@pTNCR~OF4EPj7kg*S*q_~wt%bv`zfXQY4n#lq*+*icadrJ}DkH@Wji<9uS{Bt=
zhZDTk)ES+|;iz&U>h$Wnr*`-Zi?N*195C?8A`td+isF+WXoFK3T{&v^_%>Ds$4@)$
z<*o%rms!I(w)vNYXD`652_0~#>42Z&AD%LX|MVt9)4xAT>1YN(nu!$X@)>5K#&5pY
zsK6Bf{Wa)&aRrnlIa(Z*vytVP3)#WeBZ$C>{ZHPm$KRWPSFAAq@lR*!W&}7B<bOKT
z9(v;+&Qx{E@`p3g^byrThkjRMhfM#<UoFt<*juTD`nAF;JgeIOj7zHflknmNd`?e2
zVo+ZN#3K-H=n#&V-cYcox&~}(@$0rtcx=y4(>?~ywI__+CQI70SVqRxL7`;_;zQB1
zYig1i|Lb0jE*jO#`;*4JnD}l^$&54JI(QV>>FRzshy3rSotI;T;2~OAvjTuL=S%^c
zm-CNTtV~^5lcchAb+mz9HH=n&2#{v>tveMq2mfN~+ba$Gzw^vjo<8V5%}(_XW@q}(
z2x6;mWa;!zmjAbBtp5Lg#;8N}O#shW6W|$JoV#`BTdCusKpFVOP|5ES<TF!>Rqoj=
z>@W{E6)j7L$f%=Nh0F`mTDsb6a>uvKSdL;rKpC9aP>llv#zhiga%RthI=fhZ48<j0
z*$4H8s9!~uf@sVN{>L+RfSPdv%RUtYh##v+9ysAXT{I97dpY+-y3*$w0h`tME2u{L
z^$nm~wlq5$yE{ZAGeWk8R$GhdkLC`y!$lO;lSpE7B&<3o$mU6D#t2FnB3q9w$&ewI
z7kf3$&SAfkwQfhg73?3cr5m+~?ben@XoX7_n4&>qxMacKB4O84wgp?F`6tpOo%}_=
z3=L<s;04f-@e>LNi0&UO|35NIXCr$@8_U19ex$Ot;wdYV=VR5fMT-6ue@3(!K}L|-
z_c`BGAQ#(hnWFQ1ibg>t!;!@O0J!~+he|`pad6J3udxLib?(knqwd*+rS)NlQo>5*
zIr(Ak?zTi@k@`)Npzqd~L&R^-(8iK5$)xBKjDb_%KZKY-_eQA;X7Ml`5L6ch`p_4Y
zDoi)8ACSyO8NV@4<f3pW>uM0T^ZIpLzeMH|I0JpepraXr3St*Ci(u9nVq-)o<~(B2
zz|#Y#Qh%Qe8Kx*tRp&f|DCiju0pef-i-b-~#u4sqU~yENtBW5IVO%*kQ>O$QOJxn4
zpz0%Or6PpbNE%GwjQVx|b0b!q-(oZNgtgT3SCFKM8O()S3X@vIINV079_|oRDg0Yo
z)b18pS9Dbo({LCryg=FbFe6~aft&RbhvE#*rk#fs=F<I$WtuMe1)JU3M^KikrS4Xa
z`ZsX_J+Myq9>d=qJz%l1e0R(&%2?cMfyZk0<%yjJM&GLw^9-(Bw!7=ut33%F#t|fI
zKksKBfe0F_EigU(k1cE+vbeLzf23gE^}QcU_p2ED&1$v%I>K4k#geld1A7QWQKYo2
ztKPXO;$KE<LVjw<CFtEVuxRq-Sk3g}2BxWNLkwszCI}pu?GO~)Bd4z=idZw!_-1BE
z)`H;C*Fdle^co+Y9y~TxJZ_lA$arj$zphV**y(ins{K0O^@IzjJtVnQH1qhAofE?m
zuNmy)MNcGACUReCCA3C?NeQpDPa^=Ba%@|+3%Tjj#np6$crB821=eCMNdc6Ar`{W?
z6UTLd(rky#xQBdb*U`g?K_br41He9{T3U_ioNY-}dUZ&VtxebUKd!sp>0=tW4bV{A
zKE)_hF#&ZXpikwJXmAZ;nJA^q$JHvX7J7*=mE5q4o{<ck*C!(c>1gNW8CZod3YZ?f
zI1yKAPj!pi8p|chMf*(jv#Rgiv9mqud%g(CZh}wEOqDF|C+X*W8?(jJ#d=RCn<%>B
z`V=ZcH9X>rzZ}y2q;aQ#4O_ymJWLp4$-!2U4OGkVX-8D;fia75-hui#l{m~!`VHzw
z;vtV9>;7kLjmygv{jnn+f%e3X^n@Ft%vY<86H?7><=+pF+ps)x55IO?@1Y#|ZQs0@
zU6@hF>3etj<@pLS#x?@Lxrksdc(t=dr{Qy>0B5t5g(CFWS>dnugK{K^HuV=7Ob;C*
zSB^2&!IQ{xW3E=czG`Z3cd_<sp<#1M0r_0r$N)7@rc_a~6_^-H?qF=`E0i?BkJX5Q
zLKWcDF?6Rx@D@nz!~&&8`nC&5Yo(VR86p`UW^c%I9_faPY^+W+jjPP7-W@LMuq2W;
zSdF8#!WYfUzclQu>=O1m0^+G304V)aO#QR&Y2f(xZ;NO2f59WvmS8XqD;!e<MjlKt
zN{Co6N$7o&{e}M3+RcrNh+k<jpPPy0^$5ONNjvB61eX&s{EqtrqFBC%(6~SGCUng<
zHp{HWY(MVT9_e;kd}>9S?M%anf;DZta}CuT*EM9Jsq2I8kqFg@bG>`XLXCYBs6vCP
zeJ7cZeWM9quE2}@F=YpzsDWLp@y<?oFvq5mA>f+Aw&l&h-iT)yC_rZ~GE^F3p*nV*
z4P_HTzgmDg_c_ro^;|soqFwZ`*WN5Jw$awAMp_<$mdp3+SaGVb_Vdi+>eJNaDTQ=i
zqT)ax{qBFMU^ncqCpB{`%A<fO_+e6L7TSN+_T{&cb3^l(Bq7~Ot9d#7M&ynD2X9hg
zAPlh`zDU4&%Up`ThD6lV;Y`ul%ZHo#Asb&=nQ~S~ceKGx54LxZT2xiz+V^0i(E7t`
z3LWjrMX?#Ved(KQ2F>JwV4XWD|IER`g`CeSuHMq7NI8Uuu7A%vu9a&PumGo82KfKC
zN#B1iC;uNu`~MKa1SEZb<Q{*p^8b(A!^%7<=U+klGpimDw3FW7Hp$(cAsOWpD(p};
zus}qqjH@4ZP$uM={>94g-@v#>ULj8}++*<OeF_Xze=qmUM^RbqwT41Ei=oe|p&Fo$
zZxqcXJ|k>FAO^7V9hJJgAp?fg7^L0FvbN^5+uTA#<Cu#<+iPlIZ_1dM5ugXMJ!ylK
zf5z<ML0_AekwdbzKGJx5K1{L22dfUZDmJ!Ak1(u7tX<R9{=p;HfFK7cCdktKv)9hM
zXJ8`D7uSTPhzu`Emh5sQB7#4XzK1`Oz7as~0fn6oYT~2=cR!8o&0iGePEqK*{*fL&
zpz!t=q*_a}D*6Rr`%J)3{SSfr&!pR#$y(3K=%36#VGTg50heB3R?R;1gYU>Z0jL03
zw%kS{t)GHqEBdNYRx1_?o1HjN3Up;NXX8a1BY49Zzqm2UXEF(O>-9mX2qtF$i+OJM
z=H7gVsLq&s#rRd1aGoMQAaVSR$j%ME>6y`31`GPpkVTMNN;2rp4l*C3G{$I$BOep=
z>!{M>jqAf<)S+yTnH<k!Wsna;V+pO2Jh5T`Qa?DbL4mzC-AH?QK^yTO|H`>XefeT`
zt9M=5nL_UYIXA0K*}Z#5r`yQUaP=Zd*kR0wYo(Z6KZ`V)0;$o~W5E%mLTy2`nA`dA
zb+Uq@Ng$HP-T6f6s@|{CQurU?uwQ3I&O$fL7{=d!50oH;yHiw}(}%AJ{?+)=`DVtQ
z0K*>up0t0u{C}b*JqI^y12dcdVg3I{J4c{`bo3lOQpb@h9Br_$1_}mPa5;Zz646&>
z*i~mlsN7)*W1PB5EAG7{nCq?7JIO@$ZJ~YcF1Opw<#-c0(lBKUtw3u~;JgVk+tWVU
zw1w`glY{&8FE?(mW57EO{7q`(JCb*N)dneK_#XKvg^RuKYW%j*0e1eLsnWt`)|`$3
zJS0m7V4X-c!NkL2a(JPo6u_M?U=|&qM_4Gi!&kac_>m&rKk)tlueYbVk<NI%i&xc4
zyrsA-oafz5<$>ja_|CsbUSpe=(!5(UH)xE>BRs;07IFUN36gGL6AG;KkfmkjZ5v5C
zAV@2-L&{FYB~j|5zDulQj0~P(>PwO&m8X!bN!A}czS(P~AM~&6o+)&``a`_Tc`YYo
zV^AD{S~b(y(p*beRWLpNiMn@&f_X+4mz(~rx78VRrFP|Ce?DY3fpLB>MDvTL{xW@m
zpvWEBB|Z4?4OIOQSy<fubWuOMiU{HfehSCdo+0k8!H+M8ZFM<zI)f{OMY5D#6FYMD
z_(%ikGXbCwiagd;lJ|ZstF3)Fo`~QJrub@tI_6`ctaa|0x#a!46)uSM`zS)Q$B2pH
z@h@YV;L_0=e=sw-{|gWOlbLZa)njB~{rfutcpxo67y#73Gy2^9FI~2ZoZx$s-CRN|
zyN){&I~Q{WeH2F2rjJ)+r$C*cp>cPDTTxj;R1r63nO|-E-KGOji@aKS9A-f)W2bK%
z(cot+|8h{xe>rH7vi>=7Vs$Nsv!@S$o4NM0q7+T7XMyMJ#fY<D0QvM^euW-<uf>cQ
z$On76fu1~pnPejAjnK1#>IB@2EeKG5yXhx~YS9*mT&8lHGhaq}?1OFsb)&k`2iuAK
za`(N+22V|!&C>}3G2Q_<3wS%`p+6o-umO(3R8VCFXKmFNEuY~e-mHBd;$Yf>!#Z@q
z{UQREGV|zuW##lY8rr~|bava#sBkZQ@v;>Ud8yoHDtto*^{~HS4$phh!X$v*0|5^D
zzb%*<SehAGJDM6<TK<ER8pX;3I?&Mqx8A8H6L^-ZS58GAw`&C`Juw5UnOFKKh=(7n
z%9UdS922P{J|4B%Bq-AfA~-l7=Qx(?R88%}q)oJhti$<dFqpKStD}v17&p7PxV)*V
zqSc}Ts(jb=8HSpUz2&Ex$GKlp%(XPa*USial28U{;GGyyXV>rcQQ(KIbD+F{0X~`#
zUmPW>ywHu9T{Gj(J~bQ))|V&I%$CI8<qiY4H~lJIE!vh<&BV=H6P-Yuw}jAXKx0hv
zQ2iy&Lw1mS@ojA3eq#3}pENtK8zP=PjkfNZ5kFUbQ1mcnwQ%L!xgi;Za%FYM$sxro
zO8X?1t&su-+Ou?}QS!UTb=Q33*2=P@JX$DwutH5p*(SC<%AiKoHx5`8&U{Ez6%CcQ
z-%Rt7L-w7fh44YgE03FG#}wBNP`tHgt!o4r&Z~~ek$6hLZsR;)B<M~iW)w@YARpWJ
zFft#$2`@QUP#p_{GC>Qs@F-Jc$~<Cey@ixhsT3c%5i5!DDw`!=(8)yJ%S+kh^lb+#
zt}jcFK0*E+o~Xo$xd{RezZozi{ZF*$pG3|dlOKQEY*(PLW)2|bJR3XpTfJi78s}l*
zMRLL8$&mC{kw_6q(TGP-EiBwz>b|rU?r(9mDQKVz5-K6K^^K=GOpcqs!7!RQs@TQm
zF8c~@h#IiRp5#2Y)?7W@r#~`rMs2qWJeA6!4S>)#y!kc+w$w$=lLfl1^(NZT+Xh11
zBdD4&lNEwj$zuZ4PpIZ~AxW%M{rbt(5e?(fw$mM}X%GqX!A)XJE&JftuK}TQv6$Kx
zxM96CDfyS^vcnqKMOML4u_SP9Evc`hUl}Na{F$$>g`JoEO98v*IM#3G*ox+wG}TFa
ziF54ll2(xoqx<TOTbGIwpqO)o3RQKL<fkSQIBiyW6hw2|66Wr>yPhTBUo0Hf6DP&F
zr(gq}R4>@#j+RWR*DvedZhx=58QZ~&E~%6jxTN#=PTb;*Y06qmb0*SDjufzxrpw7R
zFn3L1K0QH4QRH23+C@sXNI;BBoC#brFRD2N1`%mW)(Badf|r=@g%;(JoeS^QjL;Cr
z79g%Xju^s3eDe~_aU4d#{$3EL8S+{&pcn$ZU!}gG+X0RI#gRu3x>x#1X@@n-wK!&W
zrCF7Q)R9^MDJ=YU4A)C!o3CyMMh&okI<sf1q*rGdZBvAJ+vQ_otaL!R7e9GPzIk-d
zZ%?4kcLgrtkSh(H)ivbZ3tDoN7_+?6;MIkG5xTBNYrKl>m<P8@{0l9eOxShsXHt>$
zw_gTywL9NlerIQUS(F|fgziWCZ?j-W`Z1=<hr*s9Aa^`XuM6G%WnVl)2e9}v;F6{Q
zO8d0`fZ^yF|AV`?u{Sic*0cPF%1MFJr|c>}+GmINKpiGcRKsy0pHDNEQE2EK_;Rfg
zrs67Ohuiu>TbX#_>)K-_4ca_4SsR!s-(|;?=O&vu4w9h;I58OrnoG>DT^V>8Lrzu8
zILu{>i;J#;Do{)ksAS48uTR`gif342(4ka`{8?UH2Lv9RoZMjS1-!vdMdCsSjNEBV
zAu@d>T@`UxJ&-9s>)*$Vo<0PO{$}iuU*Qe0LkCHu`cmw`+N0@Ny1|6))9f+Ap!5c%
z;vABxNyX4$Vu(@W9K<hvXQUjja2{$MnUHUUd%5_UrBV`w18A2>#y*ljDk%6s(!u;z
zbg;UW@#F-b#r0%!6f_2b)bQ*SN*CN&xFll6^S74q<^}8=R$DGujiL?Np&wI_Im(8H
zKdlzPtcGSxYv&!{TeKz7nUL+z7e`|3zYp|cbBa}qg|uIvz4nf2>fLC~0!rr18IeRR
zvXOTptWKv+e)iC^R}W<?ma9|6NjVdQI6dFuZ`Xi1=Qu1i7?EX=Idf213s<SBW9h+I
zsrYljovF52VL5P^(sB@*tpi~*)D^+6<kIcPe$CPiS#`B*3C#MO_nnIt6zB*~qHrO!
zAe!`k<0d)E<3u}=yonawluNGg!sgxs-wa-q>vF?9!F$;#fs7<-Cut~hj?;CFmsOP+
zFKD015%QJ%!U|zir=md6%gfE(ee({5pdzvy|4sDZ1W~4~1Haj1H|iVe(OE_A@Ff9E
zQwN5^VqHtrs)F+HUTe<oNA_hUkWEiV^O+alDdKvOhPesqS9FY1vnriBn0D`LKaC%=
zXw+mRTeHZ1y=X%IcA(SQPbz`=e#n<iQ=U*FQUnrCN*JqzmJ&^vAfvWlU*DBq!EXts
zdqk0>R!>V-e{*RBUFcLC=pwS@U!6Frtm|5YZ=2Igob8sHz<sheuAzt0u+l7@{?t)H
z(r3OiiLis!>Y6=j`{aN;&`^n>V$t3hx+fi<pweuHvPs$j_wFwcjdm{AxuBpNOBhCP
z%oIDK`}Zh7FL~JN0*C;90Cw}AlB7SW2U`mR2L{H!4+N3Q6V^mxNS(K62R)E6J`C)k
z)G=(mDGhRJ23YMB8aB(ug;#e!kF(A%7(_8*fANrCq8!8sk9LB16(~Kzg~xiT1@z0^
zE-c;ODm&RBz9~_8j|N8XBA_VQ<wD`5Qloc;!Z9P9@O4uNVv<k<_3>&^JR^gGp3e&_
z{Kl@|!=$BA=_55)a=~1L5h4103lunrq=5Vj<Tik0Qb%9}y94()(E^BX4DHYoS`b^D
z1tl`HIS4Bn`HHu@ALt9xup5d48At#)TkPJXx_y)nbc|vj)HqZYb!cc7&9vRUd*;P+
zbz6;D>Ng_T7S=FX#Xiy&D&3%UA_J6-yY~To`FMb**-4k;@ZDbDYMIBT4h4b?09=ip
z=CNJ(yRBWG=1N&R(8M8BgRd-Xm)ol6M(0U1e_8jip}zmE=2XqZVdBnpP$3lv7Sa2R
z>1_T!mY`JJ8vhcGPU^UX)bCTxEGbN<qbGFN#=tLpPC@rUG@BWrF=>QI6bmWoq;io~
zBTi`~3Rvc=j;YFCbG2rpd(%`vo=@W#VbTV0k~$%)cpN`^y?X0|46g9`_&z#6YClZg
zA78rev#UQW-Vd&$hqe|!dA%AT=z=XoHK5~Ee4!*=hxA>60<#q=kp{JJS<@ySM5@5=
zG0I1;wkK(O#YYmN8j;gOQsI6FSb*o{=EY!<q(T%swSk0(K+0cmnKT7#L!gj`8cf0=
z0$4*|Sjy6Ky`m-1LhD%$m^><aMf;24t@Dm4iFLsGQ@+~!+)Ff2<F;D&TF+aC0$L_D
ziX<e+@%&K^=NyCTb2VFYW!=|%vPgJ7b!^-b2E-avh65yLd`6d!d59yV-3Vk1eF?Ap
zx34a!zWJIzrSt3yk!-Y`7f2M&%Df2&@V;3oTSFRsA5A8KpxiZLl}k04)U?%Ei&FY=
zf2cxAdWn(P{Zzf9++Mc%3^h3or)^rKZul;9S+CUiGVG-I6ARdV$kz6Aqi3dY;^9`S
z|7bp!y0#ri-A6~X3nZchR@0AYB2-2~%2#Rhf|`q2DH4b4QXOZ@nNAj>9>UN(Zr&Mv
zeYMQ<;Aya&OTiRtuY1OkwvoddbZA6(I(WwcVF-_eODR1ym(u<BJk1q&=g+;@z9OaP
zdgHeI72!wC8^3;#j?qDUePh{)@}K+48JZkN>gdj4Iss!!%TACs&Fnb-+LFu#VbGcM
zfhyW70QrToVB=nFc=g+oC62L$W2bx5yiScuK5TqL0i~CimE2KYZsqWYD!NBc@APct
zwGXf;@4%K%$)i@${G|ngXpfKiG4x;V9}l@(sr9e#=nDqkv#V}+OjeCa3uKpm4meuV
zG>m7mgB`bhg8@<O8hA@=u<VlA0Twg^mRP3!Qf|xz&UX|=NRItQisp%-<|AjDwB$ne
z1N7-4s@Hz)G$l$2#ij)=I$rQ@=vOxtva-rwB?fhj$bVLucYIL@M39=29(sfu1P9L2
z5?m?J&veea9labgI(j=>bQ5sE=}6M%GW{XH*H@9){_(FV6+j0d5Y)e>R9yYl2}}Wx
z8!a3V(AR%J5BdhQww8Z4N7A9Prm!ZC<T?0b1~Wb}ghu`B0QgHk$pD!Waviv(Jf*l&
z9Csu6@$Ps8ePzJ=0}oT2<%%!N%2_3WrQ5t`>uW|<*2*dgTXHYF+ez(RQlV6TB+bu6
z=_9{r@-XMN%_=;PchN7XqD6{HS=rgs1VpdHL?Xd0X@-KFj+jG^g?J>H3?uzCIGm9*
zgqc?%1#$3{vcXa@rM~?GRJC{db<CEl2s3TeMI<STX_TX+pb=@d62$mS`Yy=n-*zcQ
z)EOh)Vnid1wWQ&kLlyLe1-`2ngJ43^XHWVDm{^%s%S8RagP)8pWl22%(G{Xi+}5jf
zg>Vt@^;;7zDOq>eSg|}bq~IT29_e4E@mR0LF!>eNJYz~|HcJ?Ll6s_0sE`$9RONcl
zDi`0;k?i4-(VO%27O7+q+0z<{*E9QJ<k9~tRNYJG22+`ba8iIWVSUdbuN$i;S&tH}
zf;obpK%Lm*V69d>Dlf>3r|;z}A+aR+S!G1r_=vd#uguzfZ)s#ol3nh5*YLZpHc!_@
zySJX^WYmWJ7;gR7v$T!2LW8W>gy)TU+6}HIRoU(woHh-N!qNr7cy1Nk?~7%b()GLz
zeu%?)CR4=+Kin?E;i@W~f`;Kuaf%DU)rDgaczhP2FK{D-lb*!;G~(nE%!yZLl?6`U
z!x|&S;>yHU-zUX2dW|R^Ler+w$=v&_61|QH!6X)mLLS=5F~+JkxDea?e?zXT8*%P0
zTOSqKMAL5KBI?W?%xwE1(0PB}?(gGiXJsPjur){;5X**p9lxG)dJswn7RXW2EInF$
zr%TmLbWfY;)cl=k;quCt+?ur9RdzGk$LO0wUUEje(X_}29sIUf3teZIBI4Go5GYZ`
z_?9Q1VFdE2+e1pG-X^$>FqkJs>*OV1gjc2g9Z57m7-R1FpgXusRDnn~4`>*@7sMXE
zEWE~jgu+M!MZ&gkT#KgER|uSbtRH^xb7GhJNkZj%`wJtCAW6WGCfSqe1)7&ed_v@X
zPU*~WLA1!2wIwF8htBk&-{OJ$Y96Et%lVJ<PC1R!)3)ex_W}qiPL(|kld@pPjb-75
z_!owTrc?7SJwM-cAHhlroShxT$$`i{_QZh#-scnQM#>mw1NP`^98s%0A6=9-d1A+Q
zTC2IKRwK?$LBu(r`$Y{q|MLr?oKA>-UxnpGHQDXHtAQHNJq}V+4%~XdZTo35+}v=f
ziJ+TiYA_G}E*q$t)n`*lGCLh|xG(;W5mC62{OCF<>HI$UxWpxzK@mZ28DkITB~HCk
zOL@<Uy1?ejA_fr56C`X%W?2DJ)Zg5`OA?+C)5zOjMK(TlnKWQ|S{QHwWy|8twc7D9
zdpmMhP3;*$@G(Z8GUrVyYkx4<XdZZ5%6zp|ZYWkhOJcnTcLrN}<f*0da-t;dD*Ms`
zdXmKK42xaiHy8$swn^8tvsz$lfNn}~o80L^8LLnq*^xnFbdl6TzA7@Ngk0JhMiH%g
zc8~4-m*%B>h8Xh+K=nBVu>JC%dT9RSQ2{+P4i-i(W{#%x|IptbscZ$%2txX({9z~W
zrw*b&W>=$Ey_1ubHzAUdACh4>&<Im6ELKh$MqI)!y8H2fN6BHQf>_2oJb&F1{CIQa
z;R+;BU`TJmo%03^me}F|wWm-{+BU^}*GkUUczusL&IqIGcSDiZE2i$18yX~EP^VCe
z5OITB8R_q5QCjSgV>ZMgTu3Pi&<qL;D^l{?{5o<<a}_aT<x{x@{G_BJ7sGO;AXGpx
zdmKTjR-FOjDOEh(%}!$U)n3$9P;bD|xCJLEi1;h+XbTw>8PpdG!`=p9jmqD_cCJ`~
zn(5!DLJcVuHEP`o)I%>&LPVRSEOK82sx>M&Ny&1QHYpE0<zB(0X)~q1wCw4Q>$0Qp
zRG*UVd3lQ_26d?ld{VzTIWlDmDC9$dk)mpcEkm$ODb~rP!acY?zOtnqly0U<6QA|(
zwQe=>feukF+U6r;I4H<r`dRSNt2N{oifiv6;EFhrwyS1DM-dHal#rq_^r#@n_H4v~
zDz+QF@E>C0CG8*ICY}QETIwy*zrpmFTs{!}><qcU^j^A+_Unk?inaT$XcV4RIn#}j
z^Oj|I220u+w`^=3CHVuPw@}UhXpw&@_~;1FLTGOD;sTy<f*z~vn=-Wg_sG_aDhoR+
zWsWMf&dX)ySH#&4^%6#PFELt(hmQK?XqyzIH$hQ+sIdt~jM{l4g~L$?r%J6YTw64q
zO<rwJ;TEyElvtOJfDm|?{QHL2<<qnxue~{JH7w}0x1BDLMcxC)gB75UH(+IS7XvCS
z>4Tbv#khwMq)h^A2j%syH-mWA!WPz*%qJFSvB#`%{81i=r6|M|<a%426c^pT?1)Ob
zK8i50y_MiKTLZAGK`$JgPkZ!0oGk_{f=zjfZ${)$x=zqy=ULK%;wi(nXf)r|T{h8H
zOXjSy7t=$RursAs^XNH$zpqD;<$b(T;L7%`*>avW#=O&Ly%W5FS24$~-cG1JHy*Gx
zw&h4x(-(uyvrPwu$$x8aU!3q-7DULf|J~7e?DtLN!tB-2SHD|Bv@z+(5s#M)Yv*yI
z_{^`mR&fD$^I_Vp7JUodXLK0^GPQxA7tcz93Bn#14i}FerCnqKEOJuFH1C_LVMT;h
z>>6Kee1%R2Kxrq^|Lb?)6XFSCJ4OlK>aFw_;qlBkk~(B`C+F=B?^P6*LiVBDj+KJi
zBJ?$TH0+=@1?!W5aCO|krQ(by?l-jHu4wYSv8`ThqI73r7N|Ka5JZxyY9QF-PT%${
zQf`5`f+g&xs9X!WEw7Axj3Y#y2R7+loTI-CL}WPFJ&7U%0d2_ta{=bh#O{ygI~%|f
z-M^*y4sb0Tc13UM-l>cmI)R`e@;pg;L~5fZ$SR+lwNFVC%M7DYW_8hECCXyY3Ru@|
zx-Q(riNE?*+nwMmt%&DkWnE->Nl%3o$%?b-$-C^nXrFAw#fWZxDB5EOgb#OQ4fJ!L
zbg&0_(~Z1hk=h8I{Lt2p8KZdeUuEEs*i}cWLEyONzCqxkzlmbR-cTs2`$VJHZf3p5
zauVO=VkW8y>PL+hN5z4MHm&Cjcq0}cUe`e43z6uh$O$!}C01O@3-GEn!$e&occw?=
zS-P?MezER4XeUXH5^VKMlG2X>qzQyi3xujgOgQ9Z=f&yaz@lVDEl$LL*i0R@E`ibp
z>=+$_F4Uxs8(hA1zPYjC1fuK1P=zYI1lX!d<@S4gx23783sD$VSbu2f?PW5|W2p<U
zE^+2yt?c&4K>QNFSl6fjK(Wn4$!3rP;YC6B%ll)(!2X_glQ*k}Cu6HC-BXsU3~qqI
zBy#xK-D(yWzfcpHSQlTIHe!h$vrKOxvd|u;8l%RvGrh;{*wNhM7aMQfF5WIo+7W&+
zDxXMJ2Fs5v*vcV%@p1#mkA%l;I`P|X#6je`RWQ1YJAJaw5}HnRw6O4)jrvDu4_B(&
ztkA<{gN`%v@*n9~?V#}Iccn$zAZT4Rdl*=@u46yC?=(;mnNh%?Nl+j^jRRJ@jl_LW
z5Y(OsrNQJ;1VWz}$N23GKdQt?ko%+bF!-s(VdZ>)K=s|ShziU$G%ACW_vm4EyAik{
z>>pBQ%zxu$rt#n{IPu+egDpqmMCGDld5A@@0R!_KcXl<OWcBd<YDK1}PYTdO8ZfLy
zf+(VPifhg?ur=N&nH>1?<2XOGh0k`~Vtx*o0bynQ1S`W|75N<s2D(C8Xcf^Mu^!uR
z0I-)D*HaV3cjAhs=KHcHcFUXybiHeioQ@)aaTAyncZ@Ei3}ZH(rMHHXBNZH$AeDO)
z6F6YoMN2O1K60mwEN28XYwkv&JU9K7cPC!^FAKMo_+d!`Uo;4cFc2d8Vu8>DET3>n
zeFZSGA>Hq2?%RyNxzXyQzA;4Jgot*J194y*IYyw_{nQ-HvpkqEDScIk_*vL`YNh_j
zRPie3L|~jFw4iM>){5A0k=*f}mCoIbm(Jb1cuXhgv9<_etjW0VU`?B^a3+JZ5`E4W
zd8&`0o&pKjKqcM~L!41DPRa_2iIj4wG&aG4j(lWZe7A-Jn`v~p8;K1IWX++3U@Ul7
z)Y&r(KSnIH+kumn6E-*qxj~N*a_?xqHBemKk1{%+w}W^N3S?CqX=B^qm}l?;4@WLj
zc7#YA8<{j|k6(@CDIgXr(iA5<M>fqzR+E4I&Hx1xsm+s+S#;f@J=mtZPYn833;Izo
z5ZxuAImlhhSEJ=UfOrr3{@`?#zqXnbjkscSG#Uw9=blVu6J&PLJ`0%l=A`SXDjoF5
zsv82bZ#F6tK4ecwnpAZl^S&+oUF)<sFV*J?8c$jUM*VrN!&e)z%bqEZ;7QTBTplU)
zwAq6Ck;@+-YNsh7i}IDox*b4$Z^t~-a$)o9*d>-|7;?O5we{;idQ)P`W(xIJiGzc|
z@b-&=@$v)GN=(d9S>p2Z29(d}UvqjT1Y}UR29+XmO$+J^=sD6aH#5GbXH3cLa|Pvm
zi|{e?5QiJ@mm32S|7Jsx-3p~dl7h;YDoaQeXv<GbbvSqOl2gr)svhC<B1Q-tDrXB1
z<*U-3EC64JgRg@iP~jtxr=5g`3ADh*S+E0+e;+k|lo>PWHk~w#n8Q=w9ipbJHR{AY
zi40zkTl7K}&roT7Lb<IpKc-GH5BhOK=tmXkL5VrF0{h!@;=u0y_Sxu%4D1dTq?y!L
z773zNQ&crxl1@l#BX30G^Fl0AFVtq!53)HB-9sep0(Yx=<ztJ>%X5hxJO~MDd?5B-
zzl=Gu=1G3^a{`TuhfY(AD+w_gQ12@S;8uC^GAK`Zkzy%XTgM!_U)xW@!b7R-j_<gh
zQ4QNncW1-XE8Uhw6?McBKsO|ht4FPMy)ky;d;{#~X}ZG1`y{65+^24=jWl~gtKkC(
za6NN8*mj?lp+e6JlyF!6x|k6^6=lF(9Z1YGL$a2TV&fo9<P0DLx+n8-RhDU`8d^vt
zJ>od{RL-Hj8zYTNrQ}T{3NuJGwjqZjD#Jin(LJM4RYX#s*%MM5#F>^x%2h?w(~@DC
zX6{rTA4vOtk*P8K`oVNI!wQ0>{1h`228(4kA;}}glei}{(0d}Rq`J`Q8DfEDb)YUP
z(#FLz!i8&X&C#X^i#9`1Nwq#*JPRw|+5;<b-P2mrIU5ni=|5VVxZkxx;ua|@&RAVf
zDm<koNW4?3PZfrjg5?D{CT3URgho~{p%#0l*z8h7TR0xWJ;aZvDRjFOW*p}=JAZR_
z5>QuJZI|h5MzNo^V$uNT!}ir!M7cR4j#-rU!);QIRWJ>$oq~JH1ad_zA#F27&44im
zMOu{ce3nlHi|0q8{KJT}qXzVJ#C`<iYHcM4${h1qpXj!Iv^=n-_!mFRJcdTr+t+f|
zu2ix9w~BctYklr`#Y2X~Wqf%wDrapmdSk1e^6Lf`5+dq!*n9}bNmUz&BVLbiGh|*b
zrZ<SKAFx8|mdoolq{j27iV>8@wh`K8xQIlLD$P1pfoo_Rle6^lA|+C>_VtUo*QOSE
z#SA<~J2f&*H&>~F6EA~J@;ZU+zx2;bhm&r+)Ug77R6_UmDPk7GetNH}Q*Zj%ON$pi
z7zi86Oc@LqcHqle;p+zqsyS3*B?ljdCu_0`3;T(7sj#``U}d53;zpV&{laJqZF`Jv
z>Pti)tuD+~L8nL%`4PHjC)iL}`U#Hg{zQOW6a2}CoW2^3T1`;u+!nsp*J{@mvH!Vs
z)uC=lC2;f=xV<(*^RRdTL0@7b<Pz>sn{i99-DZIz!cR7QVOInk(dncj(J3$C?q?uz
z%Tk>J2X;mCFL|d_jnSHM7Td{FmC}|0SoLdv+LC8eqxkhsWj#gKh2&Nh8c0!R6uu}F
z48<Wef%LH7LR5IUt)-4tVYB8elz7OY>$M5>%3syb)RVD%Tg<_XpAW}a2e%=w;R>C&
z;)|*Iml&ZPxZ>%@qy??Q%~`)@2nNcha52M(0;ehx)t`}MEN4s-I@)102E#%^MvX~X
zyeCzk#cX}q^xa4mX=D1dZ)37p&I}P5^Rx<Hjklok!i)+I^LIof$qJ@f_r^1EZ!998
zCd7}uv|Ce7Mh?CVUz`pznf^BQ#$i3bKg7RpM;9oAzqrlSyxId_a7Y+Xqol6>Zeoy?
zMDYzhMH{HjL3cIeMl1AG*8gVDPZT2Oq3k}=I_k?$e51C-C1iMsFAlzAhPy4S&#APn
zRtl|N3BmpI`IPwE2DpQ|HX5ZjxeH{C=({?oTb&q1^p4m+e_OMCdTFd*T}aH%eFrj4
zxKxYvhdc$#XnfjoZ;g+hf8?e#rn`SO=jkHPEC8-w=k0UgbPZ9#Kg*LDnBf&?On~=0
zp6d%N=9+p^GV;QJgw%}J2(-^^?qRRjGSglb+PdE+@>3x^Tx=LdJhFiX$y>1uPWTZr
zC#ljK2~=LFPjUecPA{N)GGq#f@sB&g!-@*`AxPbA<V19#G@)r=X|9A(^Cb4_C6+eD
zV|mSToCJu{udseYl6n9o;eHT@wemn7Y1lf0LZ|zx1fx35T#tqI?Uv=WO(Cmbf{zVT
zZV>Z8d&|yqD+Tx&w+_AIr^RKF_gq$sG+wn5^Nr*xE6A#XqlScBg9~B2L1Ugk`ZDHU
z28(f->T{ak@)4Ec9Lh%I_cng8jXte;y=fN@RdR2!C1%OuD8Q##W7-z_nN7}YIDyXM
zW;ITFVWT{kibfkKQ%1>kw;~63HRhW07?|%xk}WZ+mMO}i{7%x$N2SNcx9f-JZ|~5)
z+<Pu3dh3sr7&vCxv#by%X1nMpCucM5z|6vNT>3rGQ5%LUvR;g)uB+5G*}JG<irYJ@
zn~~-2PU1K4d_zy7PgrrI&{;*sBf>vPXOkU&7m0`R)ca+e#{KXm;fOE)3fT$aMtE!l
z^mWj52e~xWNpdKpPQ5rnC2SVnCOg?W271M|2|R*mQWW8+mN%G=z_%}X&GxAlKbS5Y
z_pmA{P&vz&ZZdbOVFL-5S5nKAwbn^z6>n+l4wX9Pdc9GG&AU&~@sLgo-n-+BKu70&
zov-~Tq$-;UUk~3pc{f0)CYiJQd|U%OcQ4faoiO?C@yw;GS~@*y)mQJCUkF~mg)@Pj
zs?(ZUEpZ7O5V1X}orbk8QOGO{0Xq;x3~itq8sY*U{Nx9FVG!pxyL+$dF(75BI|*jI
zdrc1Y%HhV;uqvx-gRv7jC&&|_esFPo-e30da*!*2=b^_5B89W?D-hJVg5{=b7Fy({
zZ(uzvyB_Zy%{g#`y%8gtCz#7-?OcSJ`ucqr3+#CoK~}Hzh0FKs)iblsSQLGl*3LKg
zJM84<1h>vyWOUqRK=`V`<b$u@c*HmY$`6$wq+OfV=U89ca|bGt?3SICWfCUTnNh*1
z$n*`bCTWC0nwYAeS{mYU%hxyCx2`LyqdrD?Ebdw@ezOb&f>E3A@7hi7aH}_?yn`BX
zJg|pfH*Isidv#$W8Ea;t8|4`Ef8f+U0nZdLE_jHntYz^k-=@dob_xet!`ID?|7i0%
z2+vOQRaT@4T{LbNf$+Fcz?FRt-v<Hk0e84TnR08r$%)sVRzr4f+vqm#X8la?3wWeU
z)nuT=&ESz;c~3G}<5Zm%($vjO*4;EPqD473XuWcryB|88DUIl=DMFy4QF2R~aR%CC
z=e@TH1Bf!pt1IjnSDgC5@TPnO$9Q~2nMq^6^5W~}$3uP*ByL=@Ig?KIbU|$;UBofM
zVeS0bh0Oancupr^Q6bHWV-k4sh1#H6IiPh)*T}9duH;bSFw}(ablXc!2=iT97I8wQ
zI<08nnl(Q}>npRQ8R)0EP3j$OE+I<^h8@Ue2r#X~Sf2F30b2KVV&U$<{9tUyyu-HO
z>P<TVugodaGY^lzt<c@M_o_Vdy;S@-%o?sMU}=PYN7Lu>8HVQ(qONHH3val0Q6<-I
zNjej(yfZzx|HbAiudV*Y_p;ba;8;Y@Dq6sPZgleo)SCejr4SdBDnU$Hq1leb+oGKM
zSFMIlsWo}Abs4NR-%jw&Pq8=aZ$H~^XHk4qToo;BGs9U^$#u?xkc^G1ee{`5gBUAF
zs%5Y*l{%rpQjib|2#G(4dcVCs^HjkziaXTDxlkWeCQ>$*myUkrLPDcohOkmFivO;z
zEOAuE{QAZG7s>wkhdJ=Mif^-4eb}T>0)-QSU}!?0LL*vj`oy4;K8H_I6TkOcBboD*
zhe}V@K0+%qYjnei;U$}`n~01uyXxB|B{hy82UaN)tamD?PF+Jw11POE6(wYQ$5jjS
zU~^u(g4$?4b&k06WL^zfx3&?^(WhjMG)eRXL?AdK<uExHOttdws%pxB_o0&*;YG09
zTK9Z#AmiI-?>jsFvCd~n2>qLs@yfx)GsB^LCH0xMG4xx?()U~Q23Z5)u%hZ{a_@?;
zw`Y@!rQ|29MDh)9eT{Xi_y)ecdX)&$3p{aTzYsz0r;sIkuHdG?Bnq;M*7sjrAi|N-
zdw|6sZ6wB|AXZdZ7De;Axt~2ZD?AcLkQn(VLgg|Zh~CA*?MSxe8)5LBXF3^P^O{62
zHMSP`CQxD=9(lM|6u}-u-gUG*M9atYA&!|4AN9&YLT*X_`pDQw7T)P0xyE}CV5{Hi
z4{Ds#{V~MQB#V_zzQFDqzu%aAHER24<HjmaE$SXu)IB86a~)L}vOHucb4g_+bVE|Y
z(Rw8<vV=STk`eXz3IFd^cmZWXyZ_%2RVzd0zb9(`ui0Sczlw*L{r7C}pW-bW^0Sbq
zEH9|SQZmxI=(`*%0Pzqnk2F4jcnd&0B;<I^9uy$nqB~K2wj3b*hj_@j?jPbIoO=H)
z9&&{9UsH9dk-e5lpdNt;t0#b|I>!J%Jp<^@3Zd>TY-0a=xnNdK&1dXCr|M2dh1hLL
zcfaogrs{q}?gTctX;y5F-CK#}N`hEW+tmg~{f`mVN6+m49#J&_jHsUeIimV6@sK5e
zct|U=d(t^G&Pk`0POba!KGtB(gfZ;>Un+#?1^{6*zzW_ZcpxCAf2a`t4|?4|-@sPS
z5YT31^7ls&scPl0D*6Y%UK6_^ns$|y{5vO(vL=y%36nc%mwB!}O^9>byhGWAaXR4b
z;UW`E9E@!dQgZ#Ax9#<8EORPLfa^%zeQ=jGl7O&4y*RT+B+i<#Q4QwUsnw=iTOp;8
z**Sw@-Ed@U{tNy10ON=&Y>*yQlR{D-%>lD}j({YWPz=MZ*|-^y8}2lmFgOWyV|PsW
zPs-wS8Xs8+1mqR|45(oa5zHDx+(YVo{v}>%@M_FAlJ7#I`q{l<p#{CP^55aI`(wtz
z1oZrNe?!DxX~KLfzdr8GVt=rXBzFta1>PevsMD$jTVNstSx6GhZ{M=6QYlmM1GdF)
zjI*4fbzC)~t|$l*lorYs(0}Sx*fQ#W@04uu@m4wiD0ugJ(mV4b0H=WBz7>i4Ia;EQ
zIeh73bdI|E{sGw|sB_kA0LfIddG~r^WTsK?>)@-eBSi!QI=z7CxS0J+2@Qfl=P0?S
zv|nO}#4OJQA4}~ur4X%43uz;;l?%Fe?T`w^DD)T;f7?~q3h`9k0$B0OX8LKguFdtM
zDl?keYlUfQjU1V(av%Xhs|MfF*7uoz4?LWKAt8jjk9%lVtC}r9T^=?_2kL~(<6T3Y
zMlY>xqll{;_45PTxL{dPFSa$<y6ln9lxSbOs_1I+eB}Rd_l}R1ZQZ_ZY}>Z&q+;7P
zE4IywZQB*wsn}M<NyV%<mE_D??_THbcb$EAoqa#v591%0qt8BCZ@vAVXEW^tUcHd@
z0n2mkr&Pz#cm9uMtw)|)>i4~$-<7fD)wCf-p6z>LPR12m1U{n29!MI@k)gX;em3-g
zP2orvmh%M{SKNf_t2e!ut;Gu%hu~ssuF#p%9$Foj_uoStS57plOOtk^vF27N)`qpB
zZa8-BhVphawz9}I-}AmcY%bQfmQoab0(JM|z8I8<#Lo-|mShlO+3<dYAdpN~*#bHj
z&!{R?7&KM7y9(OtLY4v{9>dV&k)jw`E(b>_d5zWEu^F|X&&If5nS9G~j6J@%tkTFy
zC41mZ88H<&Lh%3+F9Y7(VuW`&O!@V*!$s4JDpgca%Aw6lI?{36Y*B%Q4k)NZ)Q7v`
zfGC+eE5R@?d;kQ;(v7}m)chwsCK+lNHRbdp`hyTU$}o&H+$~z<*0*$Y6TA)WiV8v+
z&ufr2g?OAI49wy9@3`Uf?WNgC;9`(YF6qvo)`GnP`02tcaaxAVrC-1m!@_@p3>`ib
znMgoV-=q<7Q|$}fLiUuOuHEc}qv?s`e!d~IC68BIpnayrP>|rFq*L9EiRH_+1>-l9
z3F}y5%bnS|@tcSFsEQd&vx&XDSl?QG=0aTZ<iQfOz-;lE-f6&sGaT`2krGo`_WJ4N
zF}FUU>KPpw5I@Sud*Cz%dvm?6UjN7-%8Nk)JX6_NR1En^_sW>BfwI=!EN*1M1nv2o
zi{5;XcZ>GLQNOI92u*o7%&Lt?vR_`j-}d|F{rT9?MH%jj^Vjn);lx?XqybnJ)ia<Z
zoCGOTmeRjoPv6z6JiK`*8PB+}cLQT<#0k!vy6$&=^<^krPo`QxS$yn0b3t~|VT)`q
z2YwR*j{_2iBqmVw&=RWGhlD%&yn3D)PFE#G+|LKjAxKx%f{nZ_0`>jGm98e}Qqq$f
z-w~!xlSs;=4*iW9lKO!xP<w7A=CWD(t`bvDi@#(uuadXa6-Pv$FN~);&XD$9`X&I1
zgnXNN474(IZq>SL{aLo}_;SahU=Bysu;vONv>x&!>}0#U+&4w{RyHS$qK2;^sG8-1
zlSd*8uO`+rKeiu9yfPrKx;-0;O4=MY70OAcD$D$Q)$#7hU-qKp4-9`(`3PF`T(4eo
zX<eM=+$FtGqg|;>@PP3df4=+zziNNuK8%yoqlBQN=;T``UdJF|#g1Ixjl<etm7-qD
zF^b5L<#H>JLTa_f_FQhVzwEC%yJhd_;lR`SL@^98Hbc=_2T)Un@eljRDC8~+=6yiS
z;u2^+n{k(^0XE*)nA0tzew?{^>HQy<ul}99g8%c+@_(L;`>)em|Hf3qo##ph#D^#f
zYzuYWgiG!vO9AAFGyu~JGqNelg!jt#Hj6LdlIo-gz*NKji>ZcilXyPHG?{0hpI1z0
zXpba7^3w2qzyjuzCTleh2eA?Y?U5lT7L=Q0`t<6-XOiNYnmJUC*=LBqm}<TNrkZ&X
zQ`RAnK|yd!M*t!meu3etW{~|E(sk?bs3HGiLCmyzkN7ct7VUp9y<!3QSrpGMD5)1A
z53|1_*G|scO2>(PIDoKwy$SBO+<fDD>>rY$%f8!3LLf-(e8ovUo_FcwoZtTnyT@sv
zd6O|j&W|^@sYcdL1)A|rg?U+Kc|Jg8@C|actl9h@<cL@=l;z*it>3|rKc(IOo=rD1
zG5ynYI)F0(2+sY*86efuhBg)qBF?F-1XTtvKN(Qvo>szbcRS$ayxZO{uK4D}^XWHd
z;2goUkP7#V{Dsv8D<{35$0f}&F6=K_3UQpqDsD&|g0G(aE^8R!B3#us3Q-!PL%j1a
zpne4Cee4b8Nfs+>b}v9M#Qt|M<TtbfvOYa}s1WQ423r0UM1bjcFyvnqkwFZ8@O}PZ
zg|oV6%&ZOvsdu3)Tn%4Hm>Nfw%@spN@*^M#*<yb-<=x$Gg{C}Nw~QjOLDoV%LP|9a
zz^N(yPHvfv{^ktqDe1F1odP%m+{B^+FY5mhoSXV9IG6TUaPDV72f5mJ5oU&97hklf
zlBa(x`d<RHGYx=g&=(RQAh!SelE@iAQnRwRbFnh9{!ca0f3g0jw7pd}hA}>HeIvz6
zzwlw&5Xh~si%=xfgi;40xJmN1SBOhm>#W??*1Cn>AU!rdo{QLLXjoQ+)gKl$9^LT9
z>0QigOKgS=ZB7KZFt-aM$BGn%B3Ly=1mA=dZC>PP=v?36z*A!7h^50pP#&+Ozax6%
z;gk6Yn=A`K8bwSG0fhm6vK#aVUU68m954b3xK}D-fmmclDCi|pQ|Q79>?t?Mf^DlH
z^GguqaisyKh~1=s0wpBlkgxoBj%Y{+b6RK+3^z=fkUk`4*3{ZzM<}9<?XZ&!brP`g
zV2?pc<2>8~O$v~1(k5(QgwhF_2q4p-5vkzf5+;mRLw-iwcWgfUY!&PPnHYr+@7Lli
zEcLih_+a2btVV~x#XTN&KeVmj8V}EX9BpnXJah&lQi>c*`521QJ#fX~SuL6!M|lI#
zi10<;-H3cp8D1=W*n(uWnBBR*l)t$XiC#~W%$hnrVHj`t4yM!3LO^08I9gy`kgB``
zDPWnyWgiA|vcEzM@_nh!R)LEV4oH*>9(5$1f3=U#I28vbWfV*QF2h8CwDGh*$%drc
zFZsRb?UT|Y;@RHY&cti~NWl3;3ui|R3Tz8<v@eCp9%BHK2UL=yAd$`Lp%k2!U<l7A
z6)@%`unE;@b6nqN<^0dgIwuRSxP9fE-Qn8(ZU*&0dU7aC76adDIiZGXP=}IL;=(3b
zJVz&66zh!g^uK4n!F=K6as+X=UvVxX7yWsdx3SW>v8SBp&<*C6s!L)Y)O`XMbRNsx
z$Z-H(cu<7YS&s>k?ocHO;$6*VVd#OSoPht78C-hNL)K`1O9egnMdnvFi5AyjI#ni_
zIE&{)6?fNt*iJjS5;DF?6ScishNc~wR-UY$-;bk*QoyqBLE^e<LboqSr9%~Gaz@Q)
zARo$snvtC{uaO~&Lzq^$=<nm^!Xq$Pl}TVHe+l({-(Ty~Z-EaKm%+G}M|^7&G|bKl
z(Y+@SE?^egh8o2>`7G=#nF}o^Oc=u)4v{>Mjwe3R6Pq6{Y#q%ED#Y(XHRwR52yTVf
zg?0|oDgZ#^XXXkySL&B}2q=z+DPzvpuQY54g~UT4XSJ!=lq=eF8-0%<h8CTuqP&63
z_!^-?wx)<etoBZ7hzUKN?>uUB8x98*(vj`Si}WRr&Bl!FfC_3+{vmC!dqZS|R4obx
z>_BDm;QNl36T|GY8ff;c#}5pC+md=3S_=gfSfg2y{e;+xp<>NoEuZ3brQ_HFd>iCb
zs<SDQC>SI3N4>tc<kIVUvPerG8L*Z^17Z+wEilzGk71~T2!0hbG?2J21G$kwVb>2-
zHk_in8w82lCs4qPbct1HUrx7Y4SEo!f+r@h48Uva3b0jW?mfuLP|0iHorOCrD=c~?
zpn=PXN;JYmM;$E(64u5{IlfU4!u`NAN8O=kF-lpbQm(IsdTB+v6XG{?U)<stm6F7Y
zw+fR<h4^|Y2}+Nm4&GpL=7JgrMs@j9;nSl+R4*$f4@F0j*GB=I=TbKDV`Pc8Kx%Dl
zg&vJ;X=};C8QXP78Y`IK&rtPE&j!8|{|layh1FPMa<15#j~>Mbp3}$8sVDY)J4`$|
znL0=C+s)-iY-yEf(p1KWJ4=TKxDC|epZc3})W;dTc~sdO>}Jf+5v$}5WGvH_Kx&cu
z*gtFPnO$kV{M2K2gkjg2AXf57;jETuiqi@HDDE?JengdjQUmJkB@A#^2>H}!oqlFf
zr7e4h>)mLbCS|lnlb&GRR4Kq7SU#>4fz@yAiSo(IQJ)@G4=LkI>m376^X=ooBa9Rh
z)Whgl5mdlH(>Z5#Ym^>?wGHnEIn>1UchGTv@aR_ev{#|@UOe`_vM;iCA8<nTYRdDU
zzmKl9wYB$C^hbbx%^!?naqIr#lbafQ|3Ja6nv{)1k!ps!Y0B!&B&^N@w92*4XqRcJ
zuw#Cly-t`D$d84Wm%}r-KWK1nq!ioc#69jbfmX}r{Ef@0yF$&Qhi&mlnY$Oq|L#hn
zFmzh7ZB}4ZSAiZIoEeok&&VUk7kjW0)=AaI0yBIhoszjiB<bZXb*Ej$1&m0tz^D3E
zX@J7DKPw~toiqSv^$7E!-PtrRJG(|6L)}K@p5^rZd^-%itDu}9QJaQLB!Bq`TbirJ
zwFt|btriR%EW!kY286flCK;Nj5)`!F!<ip}FL_6tn}jJ6L209ndYwMP=Gp4CQT}ib
zi3bN*(O428`&c0JJr4vQHST5AU08P5Xa4J#AR^3%gOXXidm6z|`h`7mjtxVGw_?5L
zt_*FcrkSN#RrK1(xpBN|nDVr+#fA9&<+4mZBmMTV>U7#G%Xa!ZC3PmX5(LnE&%xs2
z8E+7j>pu9XlLWgFoi!WOag(}xUk^g6MTz?Nv=3E{&KgY}$eyo{k}|xo&!WqUqE9fe
zWR@(s$)QusPA1I_xGK+?BKM}fPS{TeHT(4o%KJtVxm2fyQL}Qc7!<K)cQu@IoOIpD
zSdl3;@6@SHdz%+EMKz$VLAf$08(RZmxPzMBmIBrMbl3<Au@?&k(qY;cQ7X|AC5!9Y
zXBO2z2I)S-Ju|rPB75A*1$M;sP~Q!Av4KA}ApRP__ArBndN_MUBPnmM%knl08#tj2
zP~KnpOsUQ5OYio@VYKc?C4s}C?sYfYEifX-56oBhk@t)1<DEMToxyj3K+%qGb#)l`
zKMIvRX>lg0@v5O^2nxCZFvda|N|y`=&}_El@o=86ME5J1EAw<Wd~M;k{L)hxu5@km
zdWOeCQR9w<d}Yncurn*Pa9Q&>jn8Hrn_LUslFNQt)GE?zG$pdMW^&S5+y0m8nH&fe
zJdmyBt)mV42V<&f$;J3&LDX<j0B7wiO_GSEENe+Qqi<X8C);IJ`7T|BWz(~x;f_uY
zd^8!aL8<!Uw75v}3NLlKFH^YcGDS|hHB;p_ZHr{(_5T0B3RtcgL)id^%0*y-fN1_u
zAGw&=+W|m8zYC*3Oqb`V|7#MH?kzIvd`THY#xcM)Ak@@x0gVcyNi5M9tAQw<eEbJV
z6phr-J;+t-m85j)L0VzfCoY()_Hg%^?$K^iDCz!S>M78~UO^!b^T(Y?bXs`}XK0JE
zqP(!Dd)DtW&^|Phe(vs|dEBp2-%uz@vRN5?(oM0y(?9~ZiXy!WqikOiFTlr0F-U@#
z<su<8h$Uj9ww=ya1jHVJ{_2<36r~-_2vJ5VPH?6nD!~T6Wv2)Q%M_W!5EC!rqo^x(
zs%@uDjU<hAGE~7P<`VX(7pCx07o2kaxqJGuzv=2rp*fa7S0L=fLr-pYJWZT<%#qfB
zv`?hTkR~t)7BcEHY!P?^U8(!4UDve5)?_wc(ir>n$n2YQ=8UMN?A6Wf%@fRi99JOY
z1QAD^LZVNK&}u&#?N5L4GNyP@Ngu5ABI(haCxSTisi)2R*Rd<kM@b__^=pyITg(CQ
z9|<fyNDc_K@J}cGyousw6a_*7VfhYuiZBS8BGMtX1IdEPWSYVyPKS&zC=1EM`6M9i
zG)TD69u%|&q}e7T4bzM}z}erpfy*3rZoX+^7@xYxQNA#lEWnS#+A7HlwG4PKK}=SD
ztySeT<}sF6N%k;V<L>yL($|8LIG;^s=Rfh(QK0XAU1h7+;|E$FcB2nw-lNa?sL_3k
zc9YTZ>vk;N66R8A<hcI~VSQ8gD73DH)AI+-4A(eGPm-Yw97U1rGij1-4Bf<O1&&Fh
zid0ebdknml&L@&A4z-b**uKDh8(?rr2;}Kj<k=jL;j=a;o7VUNXA)J5dNc~1T>Ivu
z@>^y6IO3g<Iqaz$^G#_lhPj$q`OK1z>5HSm1WdOam2t7MsJRr;8@z7J&()OX>|INh
zO=Q>zuF#qKBnEY;{!(~o9pT<(J;LSa@t0qeP%*F>(xvyJID9QR;oBrt$#W{3R?jyZ
zIA?okgcb-~19|x!fy=Icz~60zBbLQc_+$$}Zj83Dp>B=m>goTmQ$@QBh5>`Lm2`$H
zU|b@lEy?VTff{6!dmHe)>q6aVV2T#%)PTtSVhc|;c(~9lPOqWSXxHdT32B+hJ<G>)
z9U{)U(tbp%rZaXot!@$%r_;q0_MXtVJMhW9*Y}C9b{Q<dqZFKrFvI30$MF5MP0(rk
zk@>!n)ra0pG(!7z99u_$GXa~_p*37~1g7&AXK68!mE|g8P7FY_0BxCeui7&~+K3;=
zq%YMSR_;@LG@^%F)Y<QJ{ycccMF>(kBLH08z4n?pX$5==w)p(RLqP&(MjQA{@CAeC
z#3AcfO~;5fiHn5*<<ewUbh*R6SiyGxrQKo2$#IWBjVqx`YsQvA@P}Ry9;jjhO?2kj
zH|P&%GlWB9?UVQcHF+xYr1(hTm~Dv05}ThfMWR0~(s!e}XqW3z{ZOy*p+JSmmu7-^
z8b7acCy>t+yy1>_`wVDFSau^gJb$X-_k2f;*qPZNN)NT2u<R`{=BQnz$I+_6QwV2;
zx%lUP=7jA<{5OQ*Py5;55C$t#vp)pE|68P=>2IXp`RM;f`U&v=KS)0YOE}77CQksE
z^n7{@pKcHUNtp<a)>zdB9JNLCzV5OP5!zs3WZ2584h(p&!T|@tqm-hylw?9#UEsil
z&>zeigZu`QGNvOKGvh>QL0_Y@{skr-1zbLyLG|QF02mCse}PG-c~Nmfw(7g<B*sTA
zWdqtQNX<zfF6qeDAooL?{d8)#&X(kg(v$kMC9=N@G)AE)7-|})wio?{^rHfg@WEdA
z7t-%Pz@&d8{l@-6`c1@&{YLt=W5_uo4qYP**fN?s|MT*}SbF~Ke+sCvur;+ZH~&v3
z?EeCh@_$_X6g&QBYP|Kob(rq&e)EBDfjWwc5dk<wi{EV0KALYb4U~h|FTZXd$V?D;
zgRimwqQ)yf^=BHb)kA-A(&T~MC=jd@8*mw>&_E@&wTa0E5T7{H13rYl+k!9jPYxS$
zOaS+YK-#(j6JqiFg;SLHfA26M=t{LEdH_0104Qt&$5qw6M0<}nS_c_`8c*qcyb4i4
zS+4mxj2l3W-+uIrhXhdL=cTrJyng-NVe)UJa+B0WD@n0-EI`v6${orvAN-!TK1>j|
zMrz8*p1x*N@J~2t6Qqvk|Gc-y{y+TX$^O6f_PPXmC;$K2+vA7I_TL8d^|k=1mOt$`
zEdK!z^<Zb>{_lVJ<^-jvbwQ+&?Vr@8H^j(n+*fVFr1Yap!9jQ9R)o^jC@XU|xbBZ`
z7BR{%o4i@YMBVdc%aD2&?>}FsD1tHLy)AymsB%}5Vl}z41@PKVt6$OvomGupr1$C%
zR0?}Am8VXC`_#SA!UScMN$aHbSJ&<`!*O|thCf7X(BUvy5rfl&>s)`1!Z-#|cBhvV
zVZIE$VFG<B=EoanrIOphX9=S@F{HEx<AY`cQx2SkRGCnQ4iQ&gYVekxK`H_1E=U|C
zADPOK@<HfNZT4{I^zY67sN}w&A8eUVNWoQ5{@E6q=uu6=Qak#y)QV*a)1h{{Y4d1P
zc59ow>R3@i>6?s5090nnQE8KOWp|cajdv>M(0u;!`Wq^BBsxz}83p6k^pyo6Car^d
zJjYp`?erkRSQZ;aY>h&z#@9V!Ou4BQIC99Z+kNyJbON4Mjy1g{m;r3i1*XZGX!H5|
zsL(aBmiXIjtgb9@Tt}S5kWxr}9&lxJc(JHRmQt6+RM1KJdt^Rw0iQ6l+3YZJ^=h|l
z@#5C=W~bo@_6%Q{eJ?kpCj7n6rasjX*bf7<JXb9dFSL9JdHYuQUb2&`u~%;6{rXX@
zVHHuDmk~nwl0=ROGLq9a;sOYYsAIl?{rh#fgCVW1HDC$-#+Uqw3i0=?t+A1*!Ef=#
zf4__XP+^6AK!+GW4hr^`Dp3>Wc7W0@hT*DK1ui@cK&s3(wd`tZImB+g+h#4T0oqmh
z^<xUNmy;)uN2yw8|Fa7&6qYS>5G|qGTr~v1nm)!&2NBX4U?-5*?|b)A|1YQ%3;-%6
z@_@oeWc1z80G%{&QZ_ucF8shNx^J7v?Nbm-)TyEBKFrP-rREv_zksO0#2)Mzz}viV
zaKl1JEB!bZJRvo^yGg$Jcvv}ZJ37n8%f^Vj#AEIpehuaywRUz#oDu-K8ps&{9%O60
zZ^j>Fu7#Tp%I?~|X-CTl9AR^~U%7R)7*4m;XRU)4%J+iRXoVr^bEES)Q-ULvAu=dl
zg$g~Y&BnF&d@T`Yf=Clu(4K;>`R?@*W%1saV_Q~md~{P0re7k}ZDX^i(4^Itr9}gL
zl=&-nf*t)s$@uXYChtcgiw8-hKdp(A+48uBtIsIQ_R@sMFUaKR97ozGZq)UET*Q-l
z;L(`@PE^=*KtN1?I92`qN&#^dfDI0S`}o64J=C^U*^or}t?x)s3GZfpqDL|&T%-{v
zTSQ435PbM-ze0XcUn7$0l8L+{v%2lK$xo`&U}iE<+H$E*7|p-1!20&!@))rPs~#h!
z+U@p6^JuR%O8QmNG>0f#{L+$6t4Mv@1k+@CTKMwOtL$6_?N=0UVn#h4WWuUZ=~2CN
zG5UEnEWze&zkC6dth`?MYY?L5Iiklm)5tGnrJB%?@N$;P?pUu9NR40k&HRY8=(y?<
zOf>2W&K!rY@Cl@Uyi7t<{C0Q@uI12<eA98B<HOsq=x=TcT!pxGfXUwBMM3$xkQBRg
zp*5BcwFi|BuS-n&$dhUZG(l=EqsfuVf>!hS{_@g}5(qft+AYXZRn59mJ2j_1+anYt
zJA)WeqUEGBwQZ?mN4UX%TTMq|x!%*$t3P`T2r4524?Dz{XR(>H?+TQ&@<+8@GegN4
zG`q9oI;hNd1s(dA1qL(<l?P=It?gFIY<#9*zdj?<ORzaXtc#!>76cjRN)|d;{@LU<
z$H5->Fg`9*@qx_tfo);h)fER0#nFlF>1dGP5&S)Ow`<<2clC~!)z_E$$F=*cnA?fZ
z3?qx}KGTpvssiZ)0cT8?aRBMSfGxI!p($Z2?j#3D(yZW^Vu*N#?^`C$l1)p}+7u!Y
z$dP%lZGw$TOMb`3i@XUu=gAkZUZG$5+M8937I}T}-etZkb{u%TK0t%EZ~C3~i`Pnd
z*EY>#UBnrOhI3CF;R3z1bNU~@viPy?p2?CI1XlI(4WtOvER{WV#}EeR8N(h-_g9?2
z;~)p*luEs{=1RXenD)UKsiq6f;a`OK7+W^X!zS(pdu}y*b@!~bbG0`R%nE1R(4PI;
z)SB_4!c@E_84~UulJ^NgSs|<^N~OaR&VNbVmJtVGx@eP)4qnBrE4c6~hA6xRjQ@+|
z&JA<Z2lQh4{#>Aha{Re>P`&Yqg;BOdFpWbs^JX8KuC^6cx@IF>cs+qGh50f~&Q}V<
zjKxrNcrU(!2pfdE19%wI4%p`P4mV?E9lXx(WGLwEOuT)vCm!VJ?yG(?EaLds-OJ#j
zO()X#<R6KC2g0kQfbn^0>Okn2MpqnBjA7mTn5I)``IT}2Yaeu)UnObZk(UOzG3NZb
z|D51nApMh;jF&z+@&zRrv}?nu4J-)z0>~Iq0NS1cVM;XKXQ}Evi|M}8etc^VhwdGO
zgJ7MWL_Ok>n#`$~!yK*ay*Xz_$u}PQ=Bcm*{>%V=E@=u|#NwTu3Th*FtnnYCSO;0c
zJn+m3ufPXfZ?iCg07}3UR9Ao%lM$X1ovFhv0+EE{$S~O5ApS=nb-$6wcvag8$X6I=
zcOr5XgkERj)Gng7z&n4?Bf(YR`ux3gmJwK@HO9_#0!1oy<>N4?hcBJttxi3)1_xAG
zub}hyH@X_qG7~fcaljxT0d4_D8xUt6472__JJ>V=YPAxO2^>_?p{zEZ;7?nhP9BWb
z)IfvVO7j!_EGSMt?>&9@`ItM^*OcI@;@<HgwfAf3s4$;WfgL!{arJSto1!$pBv@aU
zaYJP^3ZRq5ATA3qlQspb`$7*ra;^m;BPCM~k+IhjXgp)WPio;UvVoj;Z|)6-l8D;z
z4l`H`VtNH#cvM&9fDNVyHr1{D%?K-?H(nwtpxqioR$Nh+D3m_l|9tzYKj+gC_`pOT
zG~a=9nY;0?)K@GoP~AeGq|d6W)Aa?DbaZPZXPVY@^;Qm4Vm5_4ob=0$zL-Sg*v{pp
z^Tp73YnrlGf{4H<<&h|hL8loNcp0S*A|$`mu~c`<JCOyy29ThU+Cl+^u=nDDBI6t8
zEi$NLK)@B2noYyHp&;c?@Jz(C!>c_;1efNM*B~fb>~+9Of48qUmGc7&k`N0-`iydv
z{MurHBMX~7ng0O>wvi!*Euxqi>>TuAro886%Re-=eAp?0u9nj&A+2ZMe?-L>AHBJj
zpl}jLa+n!RdX3&M8$`=}1T(lW>7>2I!|?^2Wx2+LEKxTB^~;3jFUaySS(z3F62`ZP
zxNO6N&Q%xdh@zwupOUl7Ol2Y~cqM3RXAElI{G)36G$$i{5j}&OB9I$gvR<D%OX}A0
zl{^Y{e$r(VwU@%hHKC^A*+z*%QyWT|MmE+2$Ln@u)W>jPp>Hd6t(&yvDrGw2%x>W*
z$)WpVqsltSEq4SMS#>~YP~In<NSHvIp|{L>pvM9&Y>h1vts;yFn)GuCL4=m2zT}6&
z>u?F}qTQI;h0DXe{sy1FIXo>@u~F(4m>FEsDZ|^}9+S{|vUE$ieQuWvyle{R&PU|V
zZ-_lh^1~V4yIPxR-~baaq8mORVf<q3`pu&@9x+7}{EM&(hXGBH#s(jDPp<U4g@<55
z2589H$2FB9!J~u|A1wk}Ax(pvoW3k|XS%&o7my&GzD$$N1Nn4S4`mB|DV)yYoZk1z
zLN8y;7uh<>3cW)nL>j@kl-T+#8kG~MLqki67THtvP&!L_MO8~)&XSsG^-y{v=_<3_
z2Zb8ivnGEV{q(ZKc19Z<ZR$Kf*@-L~>^v`W`*5#I4HTDM3n7WQAHc~TBxndCD;kH~
z`od1TqIQyx-6b*x&EJrqP)qt*ie631dy4v7sXj(eU0>4l&W;q+A*;&b)W2Hvv?d;0
zr!@-0^v&n&?5~zMons|f&VBj7ljL<ODca&S<V>m<Z7IkYOo|3^#RW$zun^e**@Ww^
zf!d2OB8|wFoJNmaNSs5)l%DF+c4qda;mY7X5l2dp)8d}N`E-?gKT}hC|9-v~a;evB
zVHyj1jYv5!B?v!Nk(+eQ`6bGyV`<Ib?V#Dy4}58Tx2xVl15&{$brSfx!_R7J4}E5z
zwgD5_%AJlv@2G2N-kmY(M)E~cjF)%xJgR3hdirbyc1Z1_NBwIbhv)g7Ph;VysE%%3
zvhpb?%@OzlXN-E-y@J*sNz3s~kVXM(gZR~CHb_Pma9WUfd0)+-7De(o0O{iT-pyCT
z9}!xeU$6F$HcWo`G=}G?Lw<7K-mw@dOwjw~BVn9%6>&>nqfMuCHAPxTjNsk$5aG5~
zqL<m3lJT;I^1*YVS+;P=8R2A~aD-g5S<*b>A|K^(nbm~pXg#Yx;(gKN_M<27YP>2(
zmRmbcCg@P7j&L3PdPOjT<4#Q~^CgwHq^VJjXutlAg@eX0`hm15hTGOe{*?(c0A+;>
z)-yx&;Vs_&Vf_&MSVCeZ)+n03iaCzOpRS}Qg>_~~XqdmBb=6rmEx5Mh`^p$M#%T$(
znSGb!i#U<js|%6z$P4oPscfaMDZ5=gdf&Z26g1UE`vqc<RO|x>$maT4Okg%rT1}WP
z2@Xm^$@a)Io<TMO=<?ZJ?JYi0dPsu6kB|vRCQVl$OAwQpq7SP%SalD$y<%6!_Bggk
zo$(3pf}_(%6vcOlC;3IPncPk2v&pLZ;oQvvipLCR{im&9?@RWPTGUgk0?&OJA<Aou
z6=kCXV;gWb_TcN&pu@<fwAsGuOT~&nn6Szq3MW&QmDVQI*RZHNKdo76ir2C&iXXb0
z<^fptc&DqH-&UUNIkl)D!LORrMsce~`}wnC%wB%by!`O%tP{<df_3S-(uDayh8D{6
z@@3DKX)<rh<xHIh9$TTjdp@DZbm=nW&<qP5@L}pb9`yun(DWp$Ui?TVE0S5W3~Wke
zz?=X1fjg`~=2?n(aIy5{Coubqc36wm{(QqVI$80wl)=Sm>)Ga(0EBgWb+~0T*Q~T)
z@q;n*`#RYWU+HE&d<O7s@XWEg*%ZC}eu54jUz!D|t}~?k1B=FiLCaaMz}q^T*_<w8
z`}zAK|Lb?T&9W0`8^X^@GKcn^WvqT2ET3T3JMK6iR`fW{E>GV7Av`kmS}(W)%++Qf
z0Rgf9p`2%8{uj5;+0)k8-p0Ve$;{cz&g2ge<{E&K?>D*P(!fzIX!t?5eJb2nF}_+a
z6J)4?LK4qLWTCx5R7aOenY4mOJm;f__jJi#3q%zP<V%;g2jdL>j5niUIxc^<1Gnid
zuBmL)G(p#CZ;<K`U4V>kzJe~F+M4iBE#uwm`>Z^pWTv*!^sXL(aG9ESql8fRcDZB@
zfi6^#TFK=;bXHk^lltv7k$7hUW-Cp&_UH_V4G`oZ3>T|8TJY{%#Ot(iVt7oVl+f=?
zA@$IlOou_hopGAxfie-Qna~8|5&hX4-;C0z$i>m56;W{u9U}JDKoYKV!0?x!M;00t
zRxFk>mD<JY(s8Sv$y#*_I>KfPwT*4fgLWMR@?K%^nZ%!@XTn0K>+XgWY-o7!o3Nos
z8ze5@KnXCwR<NUjc0?FRg*mRTx^NrqSuhJVB2ogOgOFKMTY?`g2)8z~<NA(AD{aoB
zb0gBXOlqq%w6`FT!8lW4ofl8A%zsv&Y3br+iSZ~IXIo984o{0r$x|>X|A@8NM?&@V
z0oe*ggN=M+!(>uO50RP{n>>V*Mfp5gwu6fQc{+Lp*ykyE4?`X-s#BkMFMa{MOH2v7
zbh3}xrCXAbrK$_q14|f?AopdVQ*LjfGA>jM>6ojWB*hkKX)b<sh}e)s{SkdFpcg$2
z(pSzBC^avC1l}j%ZAhdt?9ha$f=}X4H<`j$m+vgw5CZ<=M%^nI1QM}HrDOp(gvAX8
ztnUs@D$X&(NeT@YnfiuNENG6#sYGC%%`n1`^qF51Txp=Na{!3Xo-{ciZ&bx9J`irR
z%5rmHK0R0w>zIUpsP1ZlPp|0fQuIB<QwmEpj%+&bG#L#hv#hozYl*R;@?m4h_+W;(
z08;9JKTai6z7fO^St!D0=AE|T0V-f=y$p)uW$3g1M+DuEhZ`1$BOmvV6Jp1td`*l(
zgAv;oH-6oRKKpB*YoDSBq7<)>J+Hg>^HUi1*P)H|t)Z#%?}M%8apUMP;HI0<%3tX^
z?d(;c*xg}~Gt77}()~!Bam=srCvP7<`?vE2y)pCk0h|R@6IvT{gQ!>}tMRiv9EJ&s
znssNfi&eA?cepc*9J=;=y_zdUi4a$8)e(MmMw@|E<pw^4&yyC)R;F+~{+c4QNizM>
zLd;wOVJngWZsJjN94Fs~n+O`y<)ZT0Cv=rTt5OvD4w5j`Xs+)NTxB|%G7VQqUsO;X
zLHsDzMGMNfoiz#{KHeK+3{VkMZeR7JoK@S;QWN@qGFK)>o)bmV+Fu8Z<WEGj!uw$f
zhM=2a+Y)~!)1-37Om%Cjm@$f*Sb$zG%@p1xQ2($U9EUF26OD_3wy@L$!YZjOQCF5w
z2($rtqB5s#Wj`hOb!nP$Mn1}&vO(9n2#oG3ZR2>UEUvd0UC@>&TeHo;Qq)v~3gy=;
zza!gNoyG7b;PZZe_jZ2_Ym0!hxg{S=GkwltO|eLZhO2(jj$FQ&!J5A7GN4zd>-{(;
zd74^)zmqan|A}IiV-TelT*O@(N?6PV%6S1ueVgzcDEJ(1cb=symp-iY`~nv%WlNgc
ziJQUJ-K?VqLp@!#UXQ+=Wm*EwtQzy@f)h9GUN?zEy+nTs==LmJJVVr#VY@c#VdH0`
zf}Oo<xaW=Vj}+f$l*8EB(C~|2KGMXYDwF+jHAN#t?kUKORMcGXpP+OT8`>7FbS1fC
z*;fN9iSzlD=^*Io+#A!R&$mt;LV4|J@v`TZJ6cg0R?gtbxMGzz?<4x0+E0}2WlSVO
zsaL`vdfud;f1WW);0A>#%PhysyNF@5&-p5GB-_Dn>wL<}rQ?*kU@9frRq4D>EIa~E
zXR6w1mWs>o%wJl~3egI*D`ak@kMqyIm;&Cjg5+ECX#wAJEYe2db;$Crmtyu*Law^=
z+k7d6sE|-dLHc~@SDk#=piZqxuv8K)V!l&@qZre=sYl6PX0(Cr-8r>w-VJ-<Y|Hrh
z8avgV|8UK1zq}FS&iK-b)~kk){jMsIJGi8BU+=lz$d?_2--UqZ;~!V>OQTJlKLG7x
ze!#repU}mBw~(F89RK^)Uya&^-G(@lFGjC%2LlmI%BZMiq;O>nOuY^mv+`gXh?ou(
zT6<zkq1#HQ46X2v{}p!R;*i{W+NluPk&}n{kICC}T4~y=`HcCBMFrCm+9Fmj>+|J`
zA(q+er87>@U%nELGE%*o6<3$FC&L-NrUaJCp(Tz21yWk`^pqYQDf%6hT4ZzB@wI9U
z&1v9j9r3XP$dc{ON|WMqV3GR5cUcvdIkr++f+=YM&@zWswbD|zCJeSjCDfeOI+e0V
zi5xU^)_?hUSmn$ySimfxT6Ktab3v`E&)n_53VhdV=CG%MtP_6TS*(T`C)xzq6<gr?
zUz9TKII_Ow16@sgYZL33kjm0dG}BB|LJMSLmLwRyf1_~LJ_#kf(v^c0FY-Paw7f%7
zJsJ79o870t*VBJv^K9#(yt*|!PxdSexM5KRC<u&HC<(<7Idls3TReDr^X-iS%arBi
zr)UJm<2vycFWhq`Q&I@ri8)`Sc;XUKb=<t+M$G0f!Y2g2M8O7rd^-`2COu0=I4A07
zKLrO5cC0bo6iquBsFu<=!~W47uiZh1mD@E>s~nh`L0J(z$OV*|24MzjgZKP-xJ!~v
zDmq&Rb5ZwD3y39hcMnV>-0%er+3$@04QfSoVyca!oO>wUh=bM)8TN>E?u@u)L41yT
z$T%P?<-3zs=!`fC_hsB@^?l6Q)R~d-p|*nz)?0=t^l;wbKCw%_7LcJ99$6imn%1nW
zu%F27B;n_K(;vw$`~@nr-?isC_40hEGu(lItoPe`wF2;N0yum>B3sdQic2ip#qJMP
zAqQ`!Vc^@ON2uuE_1I8;;Aru;!Q}_EYwtW1qrwf^^-#3uM(KY#J(oG+Q@H>&tnt3L
zKvZga{gQ{cU_+r9b^lRH1~L0Ja|IQj>MapPr`f2M^1!dgIXz1QHYXHDZ+Mvy*%v}1
zRa3-1vpw`H<@*(x4tTSL*i_P)c>ls+!_X=~LCR->StKuWnf^)ngER>O^fODC1eJje
z{>ViNzFNn@TQ&b`RExz3+S6kHa?U&#-R_DIcy`4RQf+4V%~tf?OWh{#XNAslTlLPl
zoEhl7;%B~dw{P@Mc0Zi=KhLYPF?R+wvW~{3^JV$=xsTq!dIkmiQ2$f|fkk9Oi?G1-
zum15pP2LwuU;dKvE$wDsT-5z)dow!Sv(dw^<eY8rG2Wmbu_fVsuI^L_`RS4t>7viU
zi$1$4S>QN@16Pi73C;l1i?P*;aHP6K;b7sD-GWPW<1u8ZTVO89>oJ`DlIQV^6l{Cl
zQF$Y;H#YE04Uj$twku50VKQ`4Y#YB-9oF3Tzh5LULs5$00xl970MDP?UVke>EX|CZ
zT#U_({@~wH`)_B>$CPlnTMhx43Bas5b<m-UpWoF&_Zs|YY+-eD(y=@elQwg3GvbkD
zZ07FG`|b%tjK!*TNNYeXUF$W$8|E@xRcv!y^5D4kDm-uyKFTmEM|(Q?{PN;46z;KZ
zF!B@PH~k)frDe@@5`()h{3>6~!XdYSRQ9)}WdUGmsbyxuf^4=AW*=XI>NetU00<(>
zQ$P*srOi{$ce5p}2%|}@UmLc%QnRYWd!nG1vGy!0V`CI<pdwWOmKGX-rA6Se0w`h1
zmv3A~Twc#<ss>%Sxacc;lyTfQF{MnG-x2~xZU^O~H6}zHwF4M*i`Muz0r8Pfp$z~{
z%RelUvc{vkw}8#u8nBuFPa=2#znZg)k&Ejen*S+kN-FytNPdrBHStQhSdl<EFM?T(
zGL_xi0FE`sopmd30x@+Ibgf${7Glu$?X8q^K`JJZxA@VjO@+=^Uu}0cqS~0)GTmX>
zE#aXiC?1E(%9I~JLqqomiwF^~k0{gWuyoaB&DWp=tnLwuFv6PksBFEM&_IS6`uftb
zOYODhV0j|g_L8LrVam<=*;eV1=4^xxqK(e5+`NJO%W<R|Kq}}K!-%8x96(tau<Cfn
zX<&6h)Xd1a5|aB9H$q43l(gZb$;vCpk7Z}OwTV$`bBacAeEH-U8(d6SE0>|v9ZcBs
zmQ!irRs`w7=&NgFQAQ>X8_Mc{Ohgq<JimYYW=r24N-u_FIK9JEe(~z6<CrL$UVm+i
zP1#%83;$IdHQy{S){w2aa@<#0MXAlT-}RTYOQNn8gKQ%!w%O>nO&Y0R2A`nD(a*JA
zCdjF=;fU@S)9K9Cab#?42mB1vYpRaN>Z1};`ph$M^$)??@v;Tmgdpt>a!G?^nfcGh
zE>|X)fP9`NYmBb(_rA{Edp<bi`tIHiI=XZEp*zyDk7*kDtVE&XaDh`C>5?$RB`uCN
zx{RR5K@!t$A%(`6tcHe%(_6zj*RA>bgNV;%x#OLEe@Cn?EcJq{cJ^kZW4Q%^&LQj{
zrQaQ(|0zvdRgOXdQ^RDmf?t=Vue)vFCp=_Pl%0e)lB{aIIJ)&X*tswA$kzLGe&3x)
zqwulQ%fri+V1xY(kge@XY0CGcp7{38LGhBPp}%3bU{d_*?7X5Gk=Cf~E3(_~EP1E;
z28DVlavUCUsa6fA(`q@Q;lP1sP^^`Ts6a{hb)i|MpY_$1=lzgHW@WPvee*`+k}5EI
zENFroA&5g~s%ObAZc}S=deapTR3$X{K-Gcb0vlBrI6-W7%!eTc_$a6dlTu`?#x)}L
zT;&`j&rzCgf{!nG5{t#c!*eGUN*_#)6H&fgA`hBH!U<uW_e+J{!(5^5qHEGo30W=Q
zt0B4vXF09q<uTl5j_&vS2c!2P_jbbatm7{OKPi~`%1hB!R?nR6qN@(3Xu1UD_(L&m
zARlwHY@5@;^LBTBJ|OrQd9TaC2Re%y1C@pv1iS4yjnPwrwBU5jxi+1Q$UY&?O#|J7
zOj%vdaSb+|zdpJ;V?6{QcU+IztP{TZ^a6jDYwvsR*$TTYOUY_U#(>yJw0{kalFBVH
zN!IX7jTKMZfa+N^Qeyjg(B2bIYq7bE)M-}hr#6FGX9|#WK2><fa%kx5NV36Ts=ZQh
z&J5&^_hILKl71zBlS+J#y_XG3s-hz-%lkTS)9?XzT0?nf?D3{JMI&rqX!qghzlqX>
z@DBd(TYPM02m%^ldrt#Af2tM#-r}t+{&V-?|7ybKLQx*dF+HT^i_;o(%D=SB2>+p7
z{ySQoLw(W>$Z$dbmEnTB$v*FA`pduth*sD9j#i&}!T*j{Pt=Xt2p6JYO!u2JA=$(;
z<<!wGiAq{;6jGiOy(0XT;qn7yxG;+9(o=v8hzIMrgAw5}6q#)3`deM0o;Hk4>j>5z
zqNh1}!~hvC*xwnhmK&sp?-6ato_w&sGh9YB+o@HLUalKTqf&-B<nnHLYY_F6mYOzz
z37ZnYgpFA|kZ3L3N&Z&?esgMg!W?Dk*q)*4N_rFxHQPh&Y+A82^WVZ!k<B$wj7P;$
z*61Od+JBDMKtHo<{Qj!e0<P%)l;HZ?S88N#Wb=nWwQYiuJ;46-d&~pD9kBuoS|li3
zRisi}Fsaf`o0lv^@sMm~c(OUhSHA*jJI5L4nBY3tRp8^}({>IeV}5jhS_}($CZ)r%
zD@UO9S*-qrR}kk{#_gWH3;b&D5S?)IX6?S5*6n)obcxd%MDWSxuvb$khdAIjR5vjW
zqj}+GOAt3Cxp0DGY|*@0A_XaCn4u=1Cu7p{L*!`k2w-fHZUFlL2iU*m7%Dk%`7%d+
zz6lCa?5&T0nzSed!bT)<DDm)elq@#M!I0jr_Uy3oJqwn@E6kN9UPF$|Z0%AAWy6aE
zv$BB?4<YmrLU=axzVr5gdPF}m_km}k&0I1%)m((nO;^nt4(t<x*?qw~m%nCp!5qF;
z>q#=>2Wd?uq%zNBgN=U(?B3+?DE|O@#4b^*^3^vwSjo9Vi~eMMdFP+IO6@TRz3pCz
zd)P$q9HK|nl<%1}_hrDGN+<HBeKNKSc&0`56M&hu%$z4k`SSSkwCwisv^@XKts5$h
zD7o%mE{)Y1z3rpU&h3V+ELh_zV_!@NoeAY~C7)LoP^mGtOBd3Jp2n#fgPn8v{r~Z?
zFa9b5A_!O(mw@L_1=rup!pzOVz|6zN=?@c!dhy#bfN<Z)_NzwrrVQ*lj}RdT+VE;H
zlWI$M#OU$5bBwvvsNV8L?_+}+vVrjJ+l>@MFf0}5vs01m7jr~}Zg~i%=F8)y7PGc?
zf-U_qC&(&{-L(QOhNJ7f3(94<q`sPa)jm;c&2J$6Akc3FStQs{R<)nmLg2v`@*&?r
z=PY0ws7igAreFg!a1Ax^`!&M^sj%$O`@`p<Jj#EI4x2Z*YiLwRT_QJ7JIn5(J6H@k
zf6u+O@xn+wFnbtJ5tcQU9iB^&;&%1nh@CG{)HNtSD%LM*n@bb{lt8t0EI<hi)!V5@
z@@q57O<fC8iK9it!k-E99`p`lSafjmYTf~dH1tF=6k!Ag87+D1@15)fs~T1eu?sB1
zi_n*ZhFtRJ8b5-^3X{7_dUsvX<{$ZbLsWlxVE<wTfBXlLf^T=n>33yZ4S4=kmHoYK
z0*2iI6`7rjfs56@IrRRE4fNlt<47=OqW*Y!wI$#RkVO}xO5LOK7(CwF9Nd>H$9Yvi
zb?o)HRp#A@8~>${Pm^&jFMsg(8=QIpuY@-noC0Fp%%f*l-!xH|J75O|C1my~GS{Tw
zAXbK!IWpu0gKCk)QdmtkPL;x~0;FK$eg3MB_2iidzZtV&w37E(NY4J&r^iFF{??~A
z0QBi>Zg9)N2)0Mnx4+pG;t!%3SlXUYkm_sI4c)vJ%3F~8qw8I@%l7v#l}eJ#gE%sH
z7sU1O+yp|7vDiOiX{cX&7)2Na55|$=ZW9w!(&in`LXe(MtN{)^Vn?+l4u60{&r<gx
zd&!e|vKt{+({roQw!STRFOP{QY9sXNAD=G?EK@dWz#f_lsF44p24!OXS0mlk>OXZl
z{)+^rnaUNw&V}?=+q+i^mMLiRH8dunDHw%?D#Vp-Gn`pm@m!`_EH%V$@!r2T={$Ad
zwm)0`YHQQGOjbY;yPFnKIjuaezfi>n#M;E0Qb8`@EKVa2<L((w0e&D@tb4<DH=NbK
z9>xJv#3Y+>N1ob47My@!uE=}1!w}VYeH^BF1gEfePRK)|FpM_6gp4rIM<3`H3$pfH
zFb8m<L?Lv{okKDVumMdIaB<jple$y^ZHRmrg>xJosRTJ&x(E^&23RXUvr=|IhP8L^
zme01WzVnu-glY3#|Ck8eyka{ja(Oj$|BIOxz?FuDveQiy&6^@3$NiZ)bCzb<(p(Zx
zP4ln~RbIyTcF=0ES685b66hyZVa|<UnQyX>Jav`jZSu9lD|#)Jh&s{t@7Gg<oIS=?
zn2;S5KL~=xX6bg1_`g6O#|DMOo2j`VxGM7Fc{L=41sni|9uk6UX4%yuZJHoyyRM?E
z9#a%gi7HvSGcvK|(8TwFYT$)_N*7yTQZ7zMMFm}$t`GU6fi_AuHcMWWKzKnX>O<k>
zSW$Nq;%7`T3PFfBilyNyRxSPvIS@&dB*&kZ5wYE?0N(vsZ)gf*VvDGPDx!Z*?|@_V
zDF*{X=XN67g5fly&g~&9?(~`b+UO3AetuOocMpxh!0bRK@cr}!w%7Ffas(6fz4<Kf
znGf`-qyIF!dKxB-U=S7E{u0P{`k<BdgmLAlMxv%zp!cR`^&iGK5KJH`CBRZN0EA!u
zG`RWqmSFDc<@Mh$#+W1{1;Anq>pjxID^*4TgO^<|24{w6PN#5XQc7o&(>W{#+)u6M
z&Xgv9`RH*@Y=9}XdPmB;=sfz>qu$cW630PXJRZ^kPHKZ{JNSizmKL))81ohK>rN$x
zgHcGPJmvM+DPf_D!?|7!ee7<V)eg%6i7pJ<gZkvi9ET7^0~*W_URNe8tR3k5okV<y
z90ys03*5Dsx8*ZTvfGXl((n>WL1GM$qXx{rAPtqPHO`nCwIQ|MW<BJ1A5}Yu9+&)B
z_WV?&BwF~lSoUWJfS#UT@2cP-)zJCN^!NZTK%M~NuBy&!!8Frw=)}ED22_u2-8uS_
zX*0`GtG6MF3^1}5xrFO=9jHq+_YJ;Fsx!U#0Y|F(zjK*&BIV85-v06}io%NB>YFiZ
z$>%z&g6zHhC7lmz@!Yx4xPLZ=o==~{(U^Z|-|p#mVT#&O=&(gLIrpRb_VJOfWXcWP
zeo$C5gjCWv_LQh}B4o`Wii8fPU9snaggvd5n5wz5V~xY;RDUDv`10`mEPb??ag7Ai
zb1uSjU>rj$bKonKC05+M$p(-Wvp_UK?oyk7a$D^H0Pik@3^7r60N)yCMfP=G{kj1n
zk(=b{#Z*qrAjH_vqDdi6M5-F}*?1JH=x4+^JVGd?6bGHcUcfniy||A2Zh7IMe0CzN
z^*4t%ptUzf2wXL9-t&Z?kZ550F>I{z{<wN6Io4R?0gK8%yNSNc^@>k9SiU4*e{Z1F
zvffX8C)=zeh4W3){F>-+bwI20NOsa_e^PoGUj88<+WU`Iv3?>}$Nx0lU~6jfM}`A4
zfZ^~LNWfZC@bf-K1)Py^L;=cY+JSj!@S{jQ?iRB=sprRT!T64Bg_$eg4o**?43%Vw
zeX<T#uxNEz!;3-k%p{8RPrY3NH=2F=q&{FSuHB(C$Nq}Q)ht$oD$umnMx0<M=S)U?
zCOVPOzYV-HtHN&d;`#na-mgI?L>NW&zw3VikrmxO&!Fsh=3==ZdlTeq4I?5ZgygFr
z_81kYZem}vxa5Qa9LRS`_$*uibTY|<Fk0h347~32&v@9&nWA%etk^R*Q1FhjsG+J-
zYmdGs?Sj%RcQ<7A*xYW^?5^ri{Sw>O>PrNuYHGGm+PW|awG)AwfOG?&OHC$boFd#6
z(f3E=7Bv5VKX}Pi6V{ahs)vvNixa@#P5R$vDb7Fa7x4=A3xY^PSMO-S&UK{h9N;OE
zv4WA(G{j;7nGQQ>+-Jo4r{{L=<|ZWH+%0~U#e)+0)LCrzJa=O&<O&gt9(mh3u>np1
zS(YHJ%Q@Wwi*Ss&2HTSd_b@H&1CZh7jaq{e_PvG1nh>=$WpJr-ppSZ>{ro5|sOnm5
z$n)B?Y$51iDg}@|0c?Zl#W`4U!ycKyJ}tnphuG0(P$5CP+NeHr@F0FF$5>6kW^uK1
zB}z~=KRPUazXoYgx0#Z3nflJg_~OfGe(SeOw|l=vulZ33#yV+KK%T$4rpcR1YyGpi
zgjjB?ZI+f+K>1kprvniMfy=}tADcp|#DaogD*ZcG9j~IPK#akqoDj^R;R2l6kx$BK
zI%HuZ9E@AFm#KNnIz(SrJM=hh8Ky$;ba5J2-7baZ_;Mppan>3ap!9nK(+WL&;MVu2
z1&T34*iK}})b^CD!pYESt>urU)TeZlWO?yIeUE~R6#}*qg4W=?m`{SfL2i@A9|a{2
z+YuP(P4h?7YJa%?oZMy39lu!t`GoP2r1i$z^rG{5o3HcT<Xqw3*8<6vXfGdNE$joH
zKUv29ciC@eVP*HHb9j8eJivq<cI6ARpvMEP9R?OIM<lm^Ac>l9n+8q1*jx&4Duu>N
z>+PN0EZHggaJ6k<6IYuLbr99f0-j0Ab;pC<KhTk+AvfXR&fDIba0J{!KTsvoxK_P0
zwP9b4^&?Q{j5@r1xh@tS%$n>@qWY&PS#e6`EYdQPYz)B@NZ~7rsgf+D3C}dJ8%JLO
zUtm34pd!<Enjpp!<m*=9k$gDShn*%GxzJf^yP4mv*UI^TO=s#K%IBA4WM7JICbjt)
zQyH@kd&N0C0+%9Jt9%X3N;XBt=9gJ`Gcm+gT-#H?BV6o!Rqg;c(lT4OLX=V@A|fHG
ze7qxiCowGWQ!n!lfhR6eWU(Rf!4t}<=csZ;(b+<#WoGYGD0~9_rm3rWlaNVb)ZPl-
z7P9kkH%~aq6+;F)g+%H9__#xw4`G)A-p(}O-}<Nd>;I$+08C#yxjOuz6%J4~+ix(z
zb-!vjj1NJ;cyAg(V&WsYU^Dd{hf(mu4I+(l;99GZ$rbM%ZpTfpL|!uGM2w7#JVH%v
z38qk~*Ephg;DbeTWcBADzFKmC4tBP#Tp6(w`9L41PC)dCf1vV)dG7T~&=}d#^U3N4
zL6SxDo=@0Nki?wKB0t3I#vwn2M)0=~<q5iyR07y5KTvJ%39>CDLr4YzgY_%`6{tJF
zS{^(N=!dVnLKW@q=KCshTm3Kg-YL5Bb^8{LZQHhOS8Q7qI~CiuU9oLDsj!lYE4Hml
zRdQ$6I&0s(*V$*+{<r&h&%@W+d>+3s2m9#VWi`NF3swu3|4jVDNrd~XmB1$bMOqZA
zgn&5mU%-04Kyz#Wuzo>}J=Wxy94LX_=ez1?#z}H9p1XCUEMK0=;yp~n>5qh%;w(Sj
zE9<J0xG06&QFCxK-UlOok4n3S=y;VebXZ&Z7al?rm?{`caN4g&E5XgF6Pvz3u9rp&
zbi`saJ-4Ysk{^;qt`hctp1-;e-d?Yn+SIbdf6NsUBWnf#?%OvkO-h}7zM>$esyb@%
zaeuZvZ6<o<jvL=cP4(08^O5)O@XVmr-~mIC#rKt>1GQ6gbY*h%c-w!Yf)O??X0-#Y
zeTW$Tn?Km4E%UYk{9zs755N1z{#EP&@c2d!zv(>yz7Pc{_W-^in?hitd1eR8?`}zK
zqe2yIyJCu1OefLu(Zm(~!$Ndo=-k_eV-M6>0ndtp{l@5WlE%MP?|zuN_tHdwG63xu
zHb&U|{1$;f$acL&n!?nKaUsb7h}<La4`v+53GM%I29Y6x8X`hrSF(3!xInGCNBB3+
zQ2U27=nM|(zmz$BJ8A;mY`|#1@LY~a<ck~X2IvBxpV=|<8tti|)o&n4&QoyckC0lV
z)(3Da>Zz@rx7;beYc$tX49dEmDI;{XXr+EQQkm+|CvnshtgCmqy@Bwxt^6^6c6(>k
z0~U$@G8?^Jkwr(khvqaaVm+h?SqKvll%juU0}$>$Clm<$U&7s$e+hRNzYBN2*t><1
z=eBH8n0TcG;N60ekTttn*UxAmgZ>Oyg6Dc>*m;rfH<-n>J(IGSMo64Yq?t|_$!0rf
z#~2bkWN!B!x*<G?_w`oNNTYWy7A5Nc_F5WY*4Io^^H4v1*!y$zGm_X@wj*uZRiee)
z-^Msec-6M=V;mTOcl=J>{V(sZHM6xbGx}$8pno$LaE<Gi24zMHz4VB5^jZO5UkD`7
zMw31krlPTBBq3Q_x8&r=3O1c<w!bV|4}{SdxjB3jFo(cY1iOrE{sw-+ujwKUXJ~cS
zKW;0^)Ya48y|as;4nNQ+-mN>mJ)EIX1w|2nv+Iq3T5O06j0k&o^q_fY+*i_GrRY^f
ze1wBPix|P<BaAax#7LoqaAgJ3v=7`w3`L+N8go~d00Z1h(*&k0YNlOjS`O$*m7QH4
zQ#X`Sa3(XQ8ParHAvv!3G2&{TcU>NuvU6DN15LE(`MKK>$l!Moq>ZbH8+=vK^p^HR
zF|YLZM{J`|Rqi_X;G3nP`bG1W@M6@DEa`$JVL0T%4G8I5U?%huV?xyUOyT&y3-&qC
zO)|I&moiIlCiY+(jC-Z(i45dvpU@9IK}k%!A)(@iQN8V~{^aof8<kV2?+1Ho019u3
z;P)NdUqRj8#Q8U(QNtOw_9q-@qXuybj;Zn;MCerKtGr5%>=2e&A;RKE7d0i&A%>Al
z@un>*3>81t-E6|bl(qB8lQGq<2A>J@-ey8Gg9r<-oYl|1=1T>7g+tx4LMp-*LKn7*
z0*^`-&-1-<2TjKd(UJu0vTbFCyrC!vv11IzUxTRn5Ux6bgmG*KuP6BuJNqZ#d?N*>
z^a&3VFe1VTeCmL0X!t4xfzuAs*UA){z#Bk>hU6S*G!*ZIrI-iwe32jp1m6cMnV_)V
zN6J)UTxLwElnCI;7FtGSK=|b7&ekvWL<d=+314Z>f$zLJGMH{uC$Jy*RiDlxd>*?E
zq!d0R+`U~BFK#ph3A3-=0BXfnX@;7@ni_6+Y{rx&oo$RLmrG;DBn_OcZU3<2v}0e>
z?>HBBvQYOE$xg}yrsLKJC4{$_C?6-nAx*Uzbe5%^9S6%e-@I=Px)(?cdreO3U1b|=
zJRM}nF-*t@5lkl!)U-9}stlV@Clixg$d1YEU>u)B<0K^za7hWR$1W|txiV*b!DP~A
zKg5}Zw?v35q%s9LKbLEgRB`rVzJHN`xDtnKD6*TO{8hya%a_@wa06eWmhrJ{KSop$
z^!5fmZ4fd44*O(?w2(kKn2(@Phe@JwU@OUAhop~Gb{2Tp^Me%07YZS)Bp2ywgKpyM
zi;lopDRS#QJ>t9~`QyF2yR@0oQAtS}dV)tobzpZz*!Xf78l-fXD`Nco@_BO{vHF`s
z4~^=M4t(dqYSABhH#w0WttTHH<6R4>URo2FC|J+hv$KEE<=yz~D#m1WNAtngQ3jCl
zRv&Hi)qiiqHsWJsB7OSEgoXB_hUs;D-z76K=L~cVth2&S)4551@c<ahcmO1aLzPAb
zmM2WoT{r%l^FZg>mttz1y#Z4KD{|U7ZSB7Kw1ha_yY+i!B@J;+2hS<l^Vy0Uxpf_e
z4X0qQfg{5?`0G2v%LvrqblJVgf;+<n%_#$f$}CMZNCEf@^^{Y-+jJY9X0Ia0Vp6#l
z8=%6#l3!Z3ny!jE?Y2Bi^nBp>Y>mc~-s&_8gW2TC(+`r17A=|29V<+XmH3Um2<k*o
zxCsI&S#|0mKQWo)*sj7%3#L4w733IvMn-FfJ!CbPD%4<+v5iiZ8amR@SBVLDd2SMy
zQ8RYiC$Ci{<b9&1=V0Uy3KTeCyTt<z?pNyg)>6&&GXSLZ!b%719`$5#6JXkMQ~4%(
z9F;j)Ezkw8Xucr(1nEuLi>_|?>BZ~*85Y$A&b0Mv)>=VFkxy%jr>^n_n9E(t)`shv
z=Hjols5;u>XG@<dJu>38IM>D)eqkB+etzf)mupfc<%r0msh1{oHEx#189EuWr&x5#
z#%)}$dNtBl%c(>RTC~zXhu5x7A!y?9?U<F0xhqhkDHp0F=|$CE`}t5mx$0%QD4(I_
zg$Vd%v?w2=^};_%Qmvx=(Ku7<nS5ygnZ0qno}msW=l&^|Z`2K!_RMpl{JcL}j1rwU
zaoL_}Z}^Qt;5*jDN*uFFj!Tb7?+RA8N_N(!FQ+wryn%Fyjzr#*4tM=LY(%a6e1+>g
z-wvkyWBIb(%u~p&4^7>RsBgP5^>wFiCH_vQZn0bTEg?d6x1{-bazgVw<>Cfx-6yNA
zRh{i0JEdE^b^Jgo>yNuaGo;ysB603DKN6z6jZaE3^E_3bP?6{k0wG$Z6DyK2{fep2
z>~J-wW!4NIIln}xTP=P0@RRK_HAU<Mb5ff;M#migIi>R8@1V8F3!9Vo3VRTcGk-Te
z`zsj#{$TZ=>!~PsolYGKM15_jPHMEt7Mq4JW$F0y6-_;HW%k0N=SSX80-8q!JmK5N
zQ(m_ae=n}95yRe#>le2r!i_KY$m*a2t^RiHHd|hIy@112N&@d9l!L{A!DXQ<|6s>3
zpNuK7a%Oy<0fNL+W{_T#`ccX;NyVJ-3MydVComl!phIkwg0U+@sN87rzFvF?h~50#
zHN%)s_yZePOqO}7@;HB7u8J&*AVMl7dXmX&Pc5wt|8jC187rkS?k0{ck+bP)lANWp
z1$EBvsCans`A31B`&WT&E>K!^ijJ~$Pl_wU`PS2y=cBes-!n;=g|2wE9Cpv8<C<g^
zoGntLX>poMUoO&TNRGyzRkzr1tB@zW?$xHlE(7(o@v@72R%xIJ$=h_r+l#B_vg?rp
zd#w^~FP#zz9lA;<%BRL{b-7;GpvlSArAISve)h<VKHP8G#OXPFUy$-Zv!Zh8gVP`7
z(;cHRwnJrP<@lS^>%^NHT3~nvpti=O#6JDoOn;C#gCri{3BCYN_}xnSugQqB<v+`^
z{hOh_T)c1`U^DuDxh(1_MUw)i9w<r^Ur|g;tmfacUsp=w8alGIsz1|KAo9~~L~fQN
zY$)?_<B&6>JCH}Y3~_bQVrGju-3H=u+8|Ki0nW{SqsNQB_Ob31xyQ3<?Hr;9{1Fv>
zkjCi}M6Hemf<VQ83mJM4yOSmh+OiN`djR3{ITO&P&?J>`M(DHY<RN-rQj~)gqanU1
z85-PU=2jR7)RRuZ$61VIUXMbZN+gJ>Un%@b6roo1ZJ@2jcEcBpB8ko{`dV2tkEe`l
z_ixzkSYV5mJNbwS%}MV5spN~SUREcbSfO9WLBvX&wl(82JXecPo=qF*lIG%xBGZ;`
zXCW%j6H*KBh|)Nx77KCqkK@>;5F)lc%CZzr!xkQ=5U8j=`R1)IqEPG|O=J(ZP_FMg
zXLyk6ltA}~#W_$W`Ohdpe(yBcm+PTREZ0N>PI-`WGTuMK1|9#L!a2;hO+}E12(vvH
zB`^Lt3d)Zq{*XfZp!~~D%c&-_fv(_ZbpnNFZ(wfXufBAzZW+J+R*8L6Sx>?OeD05c
z+4=AGo_`h0&K5S7#y0jw|NP<qP03uGs9+CZK6oF9sRW^sB6s=~5k#Xzlr%*KC(^`=
zs;Mom>hH>>uAg7nK#6!i#@a%O@uM|oPd-guc4s(V!jo;RkYUnnpFqR4vK;lNa9Gn~
zun)YnUJ49!9XMFGWloh`O`SmM6Gihcu6AIJC=cirx;l*Fw<>f+2N4LDeBSzUjnYNa
z4$c=ic7ZM?$NU|7P#Eq?&r7p`ohoJvpAv3yK$x5i@>SO%hzJeM)3V60Vyg~Cv-J$$
zY?LY;B!`rgnY3LCH6j<+Xd+YJK+euQ$!E&a9$FnHOnr|aq~sGUTzRzw8-rZpf)%<o
zP9Ha5elFFKYsx93yQ>T#EL8AlQgWQl8*ETX_KWYCr6+HiIE~yYDP;gag<Wjv87I=A
zgmhPunUbudW~{_wTCWAsUpl^Yin|OZBslsti%RU|i!Qx5Lpd>Cbf9fi@j!xx3q~G1
zPcLYqZgdfSyQC3|gk)D+a2<SAif+*Dh((l3&!><Y^VD2tMpNv-vP`vl-5VB|PK_8h
zNE?>+(1!q;3HCc`S)(NgcHO3x7ySt7D;Cs>xvUz!dUCh5+li?tcihK>74Xp<lHD1p
zsFDd&`Pt{^Pfexs;__liH)wYGgruix-=a}|K^b6t|A`oel<S7vD81a`faTbRc<0Q7
z#gQPgLsfur1p`tG-PGC3jdJ66hHy^l&hP%Cf+xt&nHPd>bJ+f0Cvff(WZDn_4cTdc
zB;@Zpw!gB^yBwsQncHvXv6@ECIGjkoE)41g=CODju)a58r#F4Tr`#>iGKI4(O)BBs
zk@wFO?U3S8S#tIBawA`NRJ2J$e2V|1QCa$^?j^tz>}%=bM`4;bVNKOGjTpNni_WP{
zmx>We8C1&u^9N3e48kQ017(tod+h=tU-MN%lT5K39OErs%~*dQI;XC|Eu8?@fK(dE
z{@fLubcQ2*3o_ZG%4|tL6_!K})|Q6aK;*i=Du(nRbF>}|sB?nzmS0I%9T8cPmD*n5
zc=Dk3a&Z*?=U^=Aq<r(#0%p<M9SG8GR_qSVG|Z2O_LPSU=}N^Th8axiQCgNEB5v@L
zpV#JA2cm!cy7$DV{qE1~QFZtE(&vW}<Mmw4O;8Z1EDn{F)#!!CR1=z$(TMK}JA(j@
z&kS6e&G2YUJ?nSWc|3vImvTQ@y0`g<?wEAZ(?>TV<eEIcY%x8q2Yq`dcHYp#&BQg3
zyceS!|2qq|{gJu7qlM?wG(kQ2{-bXdB;&y~1kmwylc{SKcS-2&#P(pJQ%-y`sfSsI
z))Y>jvM|+E(rR`V9)q@8O{7uCC_^*}-uSK#U9PVWhik{rrkU9}26B|+l~I+v?i*vH
zFIyX*ldY}C#-Fq07&p5==o{$fa-LBihX%b&FOZC1L+z@Lx9d2&f-)XS2I@oP1Ta}$
z!UvQ;9Ied8G3teDj+F%&saN^y^i2&LJiIt8!C_B__&pr5Y*a~owfu0&2TQqON1js+
zm37p+?G$r0P1x!H*6X0jl5?+|;y9|VRbyU8#SWRqqzRrub4}!VoLHJS8>;nDs#DyD
z(SPb2dxRx}sreC7f9WV(MTHQ5l0_7r_%10)0mRG*kR+J<7pD?jY883Z=ACH_Hcqox
z25iX-)BLXdF-<zap=a`ef2Uhfc{$2_Px9o4j3wQuXL!1{y`unieVvlTk0Xb0m@Bb3
zsEhPQiA-6`*;jTNKW*j{awYKHZ@>^ZgDlt`f*|W28%;9d9wekfW3fA_O^L%oUDX+(
zIt!<WltX^v!dPD_rR!`o&Uu-=&C{=4CxwW$%1NL^#jvJ%Bil~aedDZFw8-MlwVS$j
zv9@bl&A_k0xuszrUgU%4nj+|*pbNq^^`~4;wAOeFhq5D*YAlI@9;9M6ZJPWcZGtpo
zJ&Hzl2p_3HlyHknIh<L#5F<v8iT<_GSS?}c`V@B5bH<h-!9<^6764SB9MlJQK%}+_
zPp-L(_eF3kTX7{YxS!KiBno{zG#S~vJDPpH#L?R4<T_5E(g^Y4E9md5PT)J)Dim}P
z7zos=V3{!t)!3p`LW8=+vsWs_E5Y?=9!gED$LNBA8SU&z1koSdSTN}^U2+kgIc&>r
zvI8chL=_0-Wx%P4J5>5f^UJ+0?_LpgEh%|)(@(?G18SXL4HW-PhmAn|S8s|5t$Yi<
z#j?zKH+A8sK~#nD?|S6ryd-+kh&4_FEa+dp$y0;*dU6K{^A$Pk&EE&L^1Fs#gt{b%
zNN5(+uTiUL92^fFU2sca56J!;ZrbREF00j{wM}CP7mk2QeN^mlks;RFp_vjQpQ;5n
zc%e{i_l@(Scmh)}2^+AquURn;=`uvjm4?UtQa2>Oz-QXtZ+FY4>+x2~zw~*_skj}}
zx58rMr?tY+i+4k}{7e^WLk?pyy5`XXavEAhn`0_NfHZA}Q0G?>m#xKhmy&Gmc8U3l
zP&@fzHAsm{Lj}U6!LPb&S}u>e8Pz`EH;XYF?fmQ=q)!N2U=mErm{71W@!@_^WOyJh
zvxU#NKA<CQwoV<qZG)kx&NZy?EB22prBEm_Btk}%>732d5%z2yz9|Umv6$l{Eoz1C
z2AeB3I61CkQQ7AJ-R#1}>Ip%+W@Efq4v8{RNNgPV?*mDM3>$GLq+B<n=)?=#a%~ql
zjC77n&U)c=(mM3ZV|=0EKbGrg9YRoJ50{CPGYQ>{!Y@Bcp{fu@{P;FfwR$HYmC-CH
zwjh4G>e0I1HfA}R#V&ZktNeyM=cH#5y9qrH>qbOKbfRY%>@y|!YigM8gb!(cIl2Ok
zx*)K9euX7&!@;_|EFYf&+PPZ2&W*JGlxOTCu9wKBr5Tp!z0(LrGz<X;=2Pa^a0b4W
zA6acRAIeF&XA7bABKMltj($WXUr5&uF~H$?_2YQAi7)-2Gl~)#Xi@<S+Q3<3r(1`>
z<k915$DAL#bTsfB5#F1+K(MmnagaA@qcL009+pcLw^y4rTu+Gg`6yJW+JW7cMukIQ
z&#gc=LHjxD<tKtQkd-2cAE;X;DshK;y0=)3P_V?EIYNqfUr!C)1)`Pcn8Jm))vjPo
zg*>?17MxSpx7S|Og;TE=@ws*Cit4?=aY^@A#O@ot`<Ez3XY)Eg3bBWpM6Zc>i?F$8
z%zsU`>mJ;KOAtUnj=29lKM{bM2mo@k{SBJ^ToXWL0}zw}WLspigpbiNa)}(~hSEaN
zvhb#LqFI)>Q(8Q`m1Z9na)1yWeZ3wp$YdJKf|A(gT`E4*HMPEcKfeHArg7u)k#Ebs
ze)J9cv4k`?R%z2`gd|V$i5+cr)lOh@K#(z?v&ex!xp(cnZ;k3Hi3bG0r3Xi%9|k%T
z1Z&y19q5Fkr_!pwB2<LnTsBh<TYotRC5A9GFJ~xSkU)jAz|;3a6v~|8PY4wb5SL*#
z#e<kE6tc(1fiV=|>gT${y2gj$l!Zh86qsnpH58W52t|XcibxqAe5tHt<SLI)-B^?I
z#T`i!>VSoTWHAmLc9su>WY&gCY-}xNWNJ!|UkH-x@kH2VVU{CiDD8)0bhkA4C>+Wl
za_0&Eb=&%d62n$)mc+}Lr_WW*Jm|->&m>o4$ifzt!uR|dJ)Lw`$(pTemtePTcE_$A
z=@DxmI;(w~uGj;m)*Zw7GeG>vZCqQGu@wweh(gbkm_zuPzJ*<Jb)%cuovCx7J6f3Y
z%u(Gjg?kT)WEsXjKJ-g@fsgzuWf3ll8ywNJ_2uHE@khiRb6b7^i$Oftw|v~Se8fDs
zY^unLQ6BnU<}IyP)37bC*oT+@ihj#%lpM}A@bjgC*KHBmTn1WJlom(r>4}+A&ah=}
zF$~cka{35(UAj4J!1xFwUeN<Wq6YeQuM%G(04lq0w<G|XrJ^B7?)2>D;wQaw%UV75
ziX}H$wlP7T?`n^&?S$mp@F8`@Z5!frJWnC>ezvZXo!uA61XI`p9-PXdEY^%&C6sOV
z$z*!@&w)8Mmo(4@@m#k!&YMBYx1mFB&0-NE;(6U3uXg7zcO$Bf&%Yu>5?DoM%Suc=
zYtqT!rZ%HZ5peuetywU!ULxQ;8Y^6#QNOUw2I8_asp>_Z5aZ)UWIjs`-#u;ZOrCr?
z4;tJUFJ?~xqZwnYj?y^Pv(~O2>$54-`ff8=3Ek!*WUSyH3UOSr%Y0I3iZzrQ1y3bn
za0MB)mG0mI86q!crltgscM69gbILK47%7ds549313hpAy&p3wmHT6g5tlF=XX5y2d
zw>YdoEa2W!5>3kE#lD>oYez}bV~YZqWGLop>fPcTy(&ZC$o|SfTwr>T5M>M*3^L&?
zDui<f`*y`+eH10zR1sPps>#gemE~_{!1m4CrtuP-SgdD8&;xWt&1{SxSj3R{_-381
zwb0L+egOl|%v9=LWfk}5A!@;je!?h<{rIaEVYB5&=^!MHFR$%Z0}3*NT;GBmV<ui_
zf<+)VX(X|n4Dtvx21v>(EIaUt_^2}Hoe(5J`@m}RK4eQMM`TYLs{O_z{&}Z_W)Rcr
z?#GpI9fQH$MNE$_^%iy!_zw@{5gJPF8xkPaX~i15ir+y=9&O)rnR$*LNj;~+!Fv57
z$=I0pFB}y?yL+fUR<!vRWo3D@+(o;AY)V2h<;vWWIi3M&8GZYhPJTQd?dZ<~GvQpz
z<jAQ7Q?8b__lx_$r<-kxiV+m;h2U1QaceU1&3Jv!<oIKo5{W*K0#iu4aphtK*)~(G
zl0m94xSUFqeMf3FLp8O1kKh~~V+yV1-OjD$H(lXE!o`w=lHkt1&(BusWT?lGZS_(&
zb-~iokiECsh;)RT?C_bimPpZ)Hk>{c$92tueY?RCyr!aVv5<N$vAfUe=ZcstR#o|Z
zaRxCU<GFN_0j4f*DqFA8vp;QM$ZpRFV1%5}q4jIzKn_^@rPY({<pU4=!ol(kAPJ-b
z)w!Yf@P%J>_1jfSkA5cPBCZJKS0wMY$D@2KTTMcTnasPGOQ0lK8+4Sd%&$+BL1yjr
zbiXk*kKq7$xOs$#2z#1qMC7Gh)S3}!;mNt>%l2jgOY>A!^pfZrc4%H(tmVgj)A=a5
znBe0%d#;7~X^E$+&J!!uX*oP}2s@+w!SX9%Pm7@5=?)6-tJ^bcwQSlZotgJ+TDY&`
zJZJ0;44ucqlK42}jNh1EPIiLe3bbDxu9~Ph(v7t6gU=)SQ!_^~Oh6*1m_hPT3}=G~
zf~7j}HJLP626etloU^Uh)f2<1<D#KV*0EhbJDuZXsU34Y_P2Fyu#9Qe%iBQCxX&YO
zo!mAUT3p~Kj@st^X<EsXJRuDa7Je-oCS(Y4h|?RIw?P|RDb^}^fw)X>Fi>!jVF?3@
z&P%yd!yk%#Bi+nqP!`iP90+(3dQ6}N<zH0NrX$4dtUh2S%`VRQ#@yU4C5Gt8*^*}b
zpyrzCd&YBr2DZa@z%T2jv%+puLr{V93Du@k9+tT%;xn_Bq3@iLhgHyCH-8BqDs!09
z+cT!2(s!X%@?B4BcF}&u{nzw)A;Oj}48Xfa0aEDiFt5x^e_~#Z?f$7v{Wnt*A62Dy
zz6jqI-{BBy9PF=?ro%rB?Zvyuzyr;!jl2+t8?agAbaX8e$;;ccwqGCCKe&)!uKzTY
za@+KA+Z-*7jq_jXzYSs0&4hHAJ3Yf<sP?+E(i4ArJ^LAUd3DJ?NdtYE%{G5b-}U%l
zPfZeis;NZ?!L*1&p^9Wk5_E^?#61?9aI6k(8K^5_n>r_Y7JtM6&JC^w((nqj6;y4c
zA`n=Qd_t5!p-$5$Z3%so6weUILUcA_sfI&rRB626K$$v33;+-z%Ydapxy6kI&w$yq
z+1WGH`eo@~n)ELcjHl9w)nd4+VodNSBTrOd>0vqbtlL3ifCuM8F4lVJ3?`)tqjU01
zu;Af@iw!B=cF}h$nd3{?o-DDb4{py``Is2PkgJ3aX22l}*gapJ{5XGlT*C%q{OszC
zlTOMtrrDV-9z2B^de6Mac2XqdpSRIR8}0sFudY9R?z2H{U#Z#Oh4y9KUjdfcA@e@M
z>=ufV>e8%?T?se}ms2yn#NyjtiV`xa)Twon3dvg#`A{CXwEim39Fks%Z?8XUg=(?-
z+Zd`9#Jqvs2I96e#2xJ87vRnn(OGKE6t1fV3uOe*Dt~81S}rSdqR^5$eMM5P_Nt<`
zQXZbskbrMLg3X1II8K0J+Gf8<C8q8o@$XC=Gi_V(;bMk~a+2S9RXiss+DlN=H4U2-
zB8h(*GT?cF3)qz7BJ5{CkM$fSqS0OG@}a!v=i+N1lGgLo^g4EWO}qUfwgv72JLV(z
zaUgTaR{SNabO6j7r(HNyx_ZYqoX*T8!mhwZ#5<r=zdHEi#;s@#V;PMw_F-Wyi<?^s
zs_i1wTJLPm7<k8-OoyV^ZD-P4sZq1!TWP~atJ(dlB<c^{u!^;Ai^CJ2!fQK0RJ+!E
z*G$2*eSDbj<_|>O+6jt_f=w+P+M)47m#gIKF)Spb$t;hMG7?MJX}70#$J+5pF7UzC
z@Z6rMExu;mbm9v&V5>mS!(EQyAoQ%CzX~Qm{uKI*?zWwbN#B-{_TU>g<oRi2YhQ*d
z+?&Tlf%l4U_}J2^^4^`Nvm;m5zuT7KR0$`n#!n_BD&T1`RFAi7bS8}xasbDy^UUC1
z|DsJOnvefeSf!JZ-ET&j|CcoS57KCI)YTn=$Zh=KHT}th6U2YDJikYQ^#)*)tOnTY
z|F_En6DOPh937igFW*7fzczYz)M?05q?4MOio?=Vo5nfHR}sGm$o45p!QZFyjC`U(
zuj}<WY!b?NVzYdX@925lSntg4zJ=&gro9Y=jf=pIm)&p1$3k~1ep>i0G>Yiid3Q2+
zo!$R&e8`0-fU)9foCVa#@*rf+7BFFmr4t@Ro|j#()9P#yl}62FE?9w+W;TJDOqJ?E
z2(acn#Wn0+fq2qSu9MOrf&ncyCo?(F9VDN@u3L-#0IDmbPG>r;lEAF##9G_LNrM|h
zhpwobp4>;>zaN=wVH=RLxVKC7$`(WT=%Pe}lI3WN)=LG?7+yofE|!H$%I>-0)NX@m
zDs<YVS4L|;b<Lr_>fAVH-Hd|{uTI7ax!{>W(?6Udpc#fD9m|zMrxV7BFU)7Y+IK%U
z=$IY6NimwQW)9<FS9u>^l|fys!wJSaqpEK|mpeILy#CeU3B$9gaM^VnotM$KUB`Q=
zo~U%6D%EkEty)$+9JhoG+jio+r8c*oz9t@55#o&Fxuz@3fFAtO%I6MO9ck;%Mc0UX
z^?T8;Ev8W&DSiMPVJc0Cwdh5JoXUdhV%40=tnZR)y--#*>_M(B<0S_^q|ST|RpeaX
z1vz^%b$MI9pe|oiMaQeB{x#yXx|00u8GA14FC>V&j9eBx31SK_EHSKDN2DF50r|jJ
zq#ywa(z6#VgxNSpv|YpS9IQ^CJD+GsEZ2&j*Fr{q1>Wvgzw3{#23%*xTtlWdIq?C%
zkUx!b$vd2xplp>z0k2%>R4UC3kPwE6;zc{eYaU(`e0pR$-sT$k1^mF<0{#tWXO1^K
zw**%I!H88M3cW4HhFK;>T7%wV_SkZOxQkcN9j>?0BGa*MFiH9u&c5ZSNJfRm{3BbP
z2c6_sBP9@!t+d&)G0InLyw}j-UvcxbF}%{(4mf!P>=#SiM=b?jNBryD3!<pMhE^el
zT3zhm*DdZ{Ga%Q-y>YHr3IFvE1nz`UiVoPmy=%+;ZV&qx-@S>E^KUSY0M2y<5N5#o
z?HBs4Q-D~j)#tE%F(^pX&!PJ}5y=-)*3xS(B~?GYI_t>vOOlozdnU8K2TUgKZFok!
zf*~iNqH2b^%Rd-m<r3!U6MS+1^CEQZ)B8nezPY9;K-CW(_Rx?O42nZ4U4D7NSXs&%
zaL@E9-X{$DiEv1-*N`WC!J^8Xy-#DzLG|NR05K{C9InijEk4MrRrLEk)9BHk_e>0D
z2`ns4H%Jdvky_|pe3;7rpu1lK(A~$Y1h}Sht@xPZO7jKmps-FR-~jHKYDKAq_D<pv
zZZZ>0(pIm&LKA=a+L|fXD85r-Y1@u*C^Bod;;2-*z~rWltnsJ_4*-NeSaD$b{j1^2
zHxa?#A%*CG((b>7n3`BRSeQB4SpLrZwu$|A0ElVmr7z6%3Nf&@*P0O|B)uXUKN?g=
z!88Idc*E4tD%uCsV|U*drIsvn3m+!a#5c;<B1}S}ORBw;miAG@MDYfHufwo>MEb!r
zg}h$<QA``1V0!{vExRo*hu%8#w$nD(0G2jZh}=T|Eo|sP=qwvDTbGzr0P#HsmOmqr
zxpY4Z#C$uGo*9s!9;76@zw5iSV%q|kmo3tjeN3*fPTBfb+-jScS!+AV2iXkl=7udA
zb>*s}?}&iiCmo(v*62%E>CHB|L=7y6HJjtC+URNopTBWJ^JH!$-{p&dv$6k}DFfck
zhol+(hSWHU4=9#6Bt-}J?iXrxs{|JO#Rt%6!x#}!pT8M{E!nGF21o8dT8mzl8qk;&
zsi|RS)bLQ-?l>L>nP~8e(zZv(^Y+SW1$Sz{s6Wsi%%$@nTz&1xX#j=2fMBqgaI*km
zPOkav1RUpegskl<qJ^AoU9*E`D@!eUkzG3Ng{j$*t({MIEx{q$+q^m6?BEQ0oCJEE
zZqK=&0oib)VaqNn*gvtU;=0PFmFdst>9<Y3N&wjr)v}q{8+dnbUG*%8R(kul-1fmC
zt@aZjw+#Yv+wVZ9EdQ(UcQA5xcKc0TQLSnXNN;Grat$0cNZ1pkMJ7b`XgN9pA+%Qt
zLn0)xolxi7$YSg96RTW$eLf{crWxk6cso>`I#2WWEIoX|bwKT3M=oF}Y3*Y|j6pvd
zp*u9ild`B<;M7>C1D6C2WrUmW&xbVd;Oox~mL~~HhlS)Zg7T3=njHnX)j8uGiBvv8
zMpOy#kt&Ph9)lz?ss~F&P?t6w{sbhy3r3O*8beM7LW_-!1gt?e<j;!83LPAXDM?2b
z?un&L64d^wT-nMUAbFlB6_60vs7qbm4l&*A3Ax@q6Vxp(I|Qv^EP$Mtq(t(e>Ig4h
zwMj^tLc1obq#U&p9txR<nXnUll>TuCj0FaMP_aZf%DsU<uQXgmWc0HhT?)EIb8H<I
za-2x@Vm(=b1S}n@xmpp7J`0)HiG~fjdBJK10?e{+DSV+)xDP-NMX7$9-$n?w1&yJn
z#U%x4)RkCNq~6sxNnYkn5elO>{iQJqN7avO{>KlSWzNb^Q$YR|qt0p<;3Z{jlHcM;
zk*Jc@aL3TQJd6vvbq^MPB<+bd3b5r^I+u(}>=wi!2I;BI>AIdfxZSb~P8>)?3o6tG
zF>)U<?H#M!2+CQonXaG`YH?`Q=HV0M{OWq$cot=p4)Hq`rB?Q4Y%;6oV~bPhgv4I8
zVhfvI%SwWNS<Jz+%P(j&Z6zRoIaQ|T>j5b8mio5%Eu4mrzuwyk{#e!(6zHE)u%39l
z%TRMAO+x1T1gk<1u7r?!EH1Evw+~PqAlQvwse|WDI|nzGMEzC_o~sDU{As4n`lQ{M
zWn0tWxMRAQTbCawJCOS@r&h1;fie6-`nt1)nbr4i2!Od6>tIws^vedk-*MLeg#a+N
zw0Cf_wEJ!95wr(kh8uqLhI!N!s$j4ULl_N45+(npjt5ZL^3&a+AyYbY*k9v>4Er|h
z*|7OCZvOzp<M@r9JLUooxKNE%^Ti>;g$;yJVWzf@6N(U6?_JUK2jLl*`iJN^-2nj0
zOpJagKFbK}Lvg0rSSpW8G(Xvr3D`4aeJkqZs2MYMlsNR&K5BL*EEi)u7OMmtvv-ns
z-zGv35cknfYE3KMFsAr)T7aTybdBSdj%7pp_=CfEQI+IwO0$oS{l@8(&#1sK+-U^4
za#pZ+tfU3mXtdOp^r;b+bRI0z+T3VikJ;U~Vm7A+>GGd<-R5fN3B?swUp9A?se2-W
z_RhPo4hzT$Nw}#A3ffMu73os{UNQ^3PWHcN{4Bux-8|v1jBor~jg=`ozy(<FrEjEd
zoBy{F+hQju%3v;45nJ)LyWpEfLyeKxE^FnD9$YA8#>#8YgZb$_V3*Hj)~D=$NXY^;
zR{oTdy?@?6|1g6031YiZ)F2i2DRLVUH`L4+m1Mup1))XM-!LlpI@-2|LS%Irg5L;s
zycH_|ps{ieTQbOk8?!<O`Gf#1zX0xSC<V~BF@Z){B;K+Q0!Ycu2CE#}?BfP+G_*Io
z>)X&E792=VrYv_x#fu@1&|2U2X!|9fzQl?|f>_f#Hn|$(k`WXbM*t3(VX9wxW`fX&
zoIJuMeI}0TW$d2zl9inRhF3a^Z=;f?UD^?$?ug`{_>>9nY(Ur`Id(F5)mCoPqWHIb
zuf;%%*8sq~5WoWgvHXSu^q(mG0b39=yFV1uT+~#dfk3yCiZ%buKxYadn6|@(^g3Oe
z9(uu%pnVi|A>dz@YVB-Au1zD-`Pk5!@ZtLoX}xoc%9rLd``&s~BHJ{*qV*I8!anBR
zkGUBh=CVGpneB;F$h&f1E{O|S$``i9Oj*Y-MsN@w5q(z&<MNESN@i!M5CaKxKU{Oh
zu(>$%V<@xdXOS^6L88HxeZI*ZiP6SS@TB{!`xVQHKn1!3BoR$8z?vgxZuS}ns5c5v
znFW-AZ7-4}nt&C&m99XDkR;R65RW9m9GaBxGn1L8O}$Jq3MmQRkQ6E#g+=ZZ67<r@
ztnvM{!q165gEQ&`8L+5~xx^T!DKLUGAvOYB>zs1+M(!MWTo6!28cQgTCAw+02~8Z6
z9ExTfCx{^A;}*R%<W_Cb3bvoDwk`6%3_6#(iN!3VL-S3G#4)s$3&}W6)5i}!%C~AS
zWs+AsnJvTCp&&M@Pxv-lH@iTr;Y^9hE5qPBoWUj*BjP|Ci^+GElufg`nH_HT)Aj3?
zLr;hV7N6k-H3C7FJjIrSViWVqjz5g{sDOGeS8ItLqOu8gaANk)i(lnl7mC_<K5GrZ
zu*zFj+05-?+too)^_t+FibPD4r)J=~UC$w74BNHI8y&e{-Knn78$Dq3+Q|z=STqFa
zn6yySm0X~s;4t=&@f$^Gg=U~>i;*bR6r%3CkMy_rdE74dikLxk$0rmHhMPK9?N68f
z3LEsfMaz3SYqA|?)hV5p;XlK7=5eJDK(tQ-VWOE=y;%Jv;>R$~@~BYyt@$>s)f!|}
z=p#iBXl-3}_&3+9V5d+0_1z4(*m5~@lj{w@*{+ajzDNM1`Sx>+Am@T-i{CDy?=j@-
z_sWd)Q$wBId~o1>=3Tetx;JHNqW(Z*d&U(LuXNAy`mrP|md~oyP=1%1mL$!m8L2*c
zh1NO<vmjO2d)R0vJ>t$Pf*~<RaVwb42W5JwsBS6quoY<Sg-29zB)TSdepr#TcH~+?
zhQ*(6kh><m&cB+MYjd!hw{lUR`QmTP<6Hiq>!03r2kLk5P9=?WEW!S;MP`(I%9=@L
zOw8n#5VkfXe^HHa=B4P)8aGsv)@8eS7{VHzlW1WxUL@|a)#IfLl%iu42<oUG(y%cn
z&Z7*UQ}OVHZ`&9v_ip;vgpvEfqvtOg5#$s9lAYYlMa|+5z}w7Q;SJXU6V>Ip$iuA3
z=y7T#CZ8i-xE@yx8dZr0I$jvzPPb~8qoG;wl<pYlb@nK(oHDnzm_SV;QDxJg%l0R)
zSWU1aO0D@!%wt>z&_S1IY2Q{g=c2_>TL<j))$M!E(g(W>t!9R}^&^nKE=;C$J4LaU
z8j+8;wRa5`pGU@^Q&tpwo4ZJqE&GUluUL6G@bI`a4a=yOLG&{#l7r{!z)^4bkg;+(
zX7?ktqqD%a@t1BjCmd_#xF0%Z`}c4b%|ACow~z19UxSViej#l-=;l2#I#O_1n>~sO
z^-?7=YVby%p<%C4-w5K!oMJP&w)Zz#+Q<9vJp71-hN9bALUFh%L_vB2?b4`(*5ryq
zkuFjiPmJk~`HpDMIWM_y>M>K(i9eO?cug4W++oudNvB@@(SFSSvqt#_=hsTKbMEfH
zpV07MBL1KR)Vk4t2>H7?&R-JezZEzyPF%BE6G95Dtu9TkVWbP9XQzf2F9F}>K{D1x
z<;E;VBOOPzw)Svqgyb#RTj!-6uZE>Ss)$-(x}D(+Tfe{!&-v;&Ego$Q3FC_HVnnha
zeCukteRDqiLX58gs1ti=&@6d^+EWGV>zF>ZB(I7w)zGxvLPK24=5K7%z;uXZUW0`6
zqjS}Zz(0T~vlBygCpC*K#sT$wfLuER647>mfHsk_+X~QtdQ#1A=mSS{s-(${05O`e
z)oRp{o}gj@W@*KaU`?z9O&EI^$Yk%#knJs+FPxDog>KmyvC8G0ATPEaqbp8Xq)8gO
z_U(-$gEy2#|Ii(qmED#@PIKM@6X>4_fk=H;*7BHvp<6Xo2Cb)ZP4)pDL#}OIDv@qh
z)BXGC_~G&WlWz-9AuR2}oEvW5SBmlO{ghFhCi#%bMCW!E?9(I#HMZVItfwdFnz6#`
zuZ}S??a&HiMl(^KLAfJ=w17HPBog0Blr~%yfDgbUx1<!Qh3{ph*`a?Z+$01l^e04$
z)t}2tOZt>f?b_bOl?OdqRtt4}KE)Sc0Q@v#(*}|{SH24Nv_{@^=OzsK6x2INSL=Y@
zu*-rIJaJ0W?Uw`(7naYqsRUcsFFJD>)uh@EN?B=P5j3x3sXh&HANM%{z;t$6ampX3
zuZDThn$+~N-8(U_jlR8Hx$3~pzmrzFnfY`72JCrWc-?yTxbNCT6vkOe5V)bJu@qha
z^6w||1n6%h%Yf3T3DB4Sx6r_MK`tX#_y0UqEKd9fSySv?F}h9zF?@t9ky@ctILz#-
z08uc_Xgh;>tnJzDoUhlk9L)UC{8f-y-rHm2rC)BBKMRDx;+JF#g1&;K6)?LhUU%0e
zl&+4pE}p|<_9~rVMuaJ==HS|mSFsOFao@BFVbZPPTd9fr=ppV9m(f;&Kgf`O1+yW_
zgy5eg4JU{-%nW>{n*0df$BA2j3dxj81Yru-Ow%WC3HDva1?-D|Q_j3JR>Ul=Rowf0
zq=?DT8ifvn&JB{{ng=?rYJW6q_;6td?VYTN9YEIPN@m8r9z-N>9idzHrQz~rzzLZ6
zXy8Yu(-`%rc4R6~jv2Nf4vN^^z2iEpeR4bOpdDL&#Ud7z@4eZ*@3m2nRt>THheg}@
z-7kI?l~$tCtmFWKCOPMwtxtZg*AhcM0=sSVx=w8xcC>Az_M81gmcjjdra;NFt<o)h
zz7$@fF4LYn5DQ`b`zl^1WiCk{`$W$ZsXs3+%Q`3f*-Kx=*R*$qQkppZWTN=Q-nxDv
zVHsm1`ooO(l-H(Vaznuf00-gum76Ec9dt&0nZPc(PWOe}6UK78x>%9x>}F+!RoMW>
zS<`!!kI><D)4vIK&hO`kys0ObJ5wemt+&5z>lAzjQQoWTT)_KXAp5JjHZ}VV&gFlX
zF#P`|!J4boFhAN2-0m_)WBZT4HI%-M-X!lUm^{Gy-5m3;1Y%}lYVn`{v;T1ggO>gO
zNw<>?E^3m4g2o6iL<j}yhk%}kUQ?C}Zu$fPY6Q#O^sXKG^B%S&NHcoGSRKTB7;f|c
zj+n(1pdIN7wmD6@Rofri56*PG?6CwEG|St9`5=XjT>_2t_&vNG*~<+h@hs?iK)aV-
z<MRHbL}~JaVKu3|UEYd#1c2G@f2`YCU}^iOZl~+N(e1RpMg2oMGXKA@{9hjLY+=Ow
zKeN1YIsU+(ZG3RCirKqjs?CHO@&4u`i13NiKNM3XwJ!B$vE<{Kyx0TOWDm~}Qn!yC
zUw;zqf`7u;<~J%kh4<cj3W6VOFu`R_sk<Ziv!i?twk-#Alx^>p*Rx;-eG7Uz#gv7t
z$BG%Q0(*+a|3fkL2nu{~5!stJ&c7F);t$2ty&PzGk;`TMWl}R!HVUEdjmVA2UOccL
z9{SylZ1puxTRnZ|sXl1|EI)0xSs#Tm^RAf6t@H<{U^0kUPxNzsEjIrrYI?%%cTT~D
zstSAnr{MXXwl0-;+J4mg^6Mvw^#Q==2YI1(^(Qg@-pThJ(JQ?Bd=B9KZb0}CSqURM
zOBavd+Fk*`9T(#E7D=k74Q(tGNSsqq0jdmMc08cU4It}nZ`tSN+}qr3Dj#z4e5WJp
zT)`g`Q{ou;;PMd)t2(`ZHH<j3(A?eE+tXug7ySWen>4@jl-^t7Er@=Qrv4#8T2l+Q
zvtFo9bijS22CY$cH4_8h2y)!@y_-LC1;71DS7KOC1>EBun1s{k5h|9>Tm|3XTK~@H
zXvl=1?FX|+wM23kdLIHfnvtl)dkR%UsKi4Qr7+`%V5~Y{^Ssr!w<CB)W36Hx`pOm&
zGjk6W=`6<zSpnec?YVmfCeiufp1c&B?Muy`SA|4E=;PH`@gSwE);zwnqYTv%4*Jne
zKl)ba3pPQd7eN1*EegQX`!^<?r`xQe_c;G<`~No1JDITk&hWwj!^6E_EtPb_LE{MZ
z74ZJa-{FcWuacHYP9^hsS#PCxbe$(6%7pjQ=O*jB{{_`)4lK?fGKzUEMP2xD^7;k~
zA3tBucNve681W}5tP@Z0Jnq+gqjWbLlM<AJjX_T)q^bla!g_iDktXd&CZv|x5DeBU
z!SG)1KZ!Kk=z)8TA;S*9h*@0zArov66!9Kz;=8N^g^%#pSOG+uaPwf{ymn&W!})T8
z$$k;>HLBZ3?R#~1UHs+rOZ8F4GqZKebk3julnDj~$OPZ&8}NBfDr*b47w;Wdf2mj{
z0?@$8#|~#GyV$kRtywaEv*nl>#{V<Ux3d0SB^cCOPwf5Hegp7+$E5j}&l?%rJN<5I
zm>?_zxU>(se4!mVH^V%!qdhA4tSF5rqGZ_}9&Xxb!kI`xoZ+(WcWJs7n8xIByD=)u
z(jLeIVZiz2n?>x_?5Pb1?I}d<1AhOMjjz|#D1MhK6rd=xYYot__ftfnBXwO2gGtpM
z<Nyb;Va^vc)-gk+uuT?2tqZZxz7u*Q`tdE0B;t7`Jq^9DGsXc46iWsPlqHl09WWsT
z`<VhD&;+(bl&3W!6R9o3UHSMWgE$0uE#9!vuoE|Z$dx6wYHHr<SC@`KlVRaU%}NlD
z1u^B+T>>!2DpDsSr6r$DjZ{o1VU5MhQ<V~dOJ!G=S*_IT*)(>{C{8$+JTqYG4id^9
zpNJ99FEZ*m2iQp%TieJ7Rb`4#7Li5hgwIE^uCH3DD(P~>3Vdb{089whOJ5wRxa=Ew
z_2W-gPpLb>f8A}hWA8Xw0X|R=priY5XI-DnoGi^f{u^q`lmuaG+&{k+#f=%}oEnN0
zA_IN;w}3!P(K7;RYV+<~(}gdIJghe(Zvu@E5Z*BeB3&MrNd%d?{!_A_b_0j&!h-jr
zpuZ2h5Iuf}{;sRH={tK)TE!Dg2tDZ3?hhI1SC5`<c1+?3&w9D-2*t!lLVE6~gNaH`
zuNxKM2+M7gAT&+%$`<H^G-bi227g6szRV5@r9{L^Bf&FzwZ{k2)07UT>(6nK=q6`@
z>`A$vz^^PJu?7~7Yx(Va89#n<(P6*4DSglSR4?P9J<g~s%o-1dQx+YARdzmdj4Me*
z>EeTrfh2w3*{RgbLvp=IT1Qe2W26Y-FLh@gJ!06Om*;n<KYbsZ>p@D?jkOUK>hdB3
zm7Hi|%51wOofN{@d!X1$=8SGujj))#UqO~ChWyC)6%n+b*RmlOgUlIVxePw0<y<hO
z8ETVlZwoQQEJ3@Kcxo^}7EFHb{rP%Ug013LAx+x@@~>a@I|y?^JD@8n1{_ZPF68~S
zj{-;+{pXP9s(Sg3MEhm)3mtRhv}hq=$L<^mmmtv<TAl7Fl4p>~MN3GgX;_OyE3x4e
z{B_e!a$HcE?3GAm)Gh9D1K-sXL~GZEBZ&sp3S45Dh9{(T)uu`}nLs}W(I9Vo7yf%H
zh%cvzTq);O|B0XY#dgDWaSKDpL`7g+^43<N!$6H#f<)<<3#oHKHdVe-NZnSPRK+J)
zW0(enu|%{j#&w}7&itmZ5$K}pVi%^g6rgKz%#k3~_|sL@#7f;h?H?=-ZglvP)96PT
zhfoJloVca~?7*N)Q=P3Em!%q=>GLt-4I(`D`&HM<CLQ1x%++@rZAz)tOQ))ZK!+8o
zYvPLsra7ricdqE-$QbZqi7$?twe4!k^xxaoJ4Oa23(Jw8EnL>ivgMtwJaYEGs~D{S
zI4-)~f9m7fiTk%scro@oNpcH1Q=-+1<DSA1#@L12CUgGSKlyPJm!;#t@wock?W2VJ
z)5y>y>6w06HaQk=h~QTg__<a&&D$v;bCN@06DcW?M(G|D#Z&bARp3?}UV%QB(xCQ`
zCNAbxyFQCGZQig~?r%nuW%H~7{0+e%H5^iA;L}JyE0&DO&xq>csrbgr?fLh}HDEIv
zJwbgcuowFFG*xIr;IR^=N%3$ec}#X*Jw#4Em8UOx5H=>m`(wAPO`n3eX)U=dN-)OP
zqAm85f&5(f-Ur%tme;#JL5I5wgZZm&0Qp|17TX4Nk%Q)7WGF8jTcLt11?sG-m~XIT
zQ5QXSog9?z%M(Nv|1)%`YJ9mvQP3h%U>Z_qw#N4hTIn9I1$2fKGCfc1`J++ZC<r6u
zZxh@@l)!0yqEt2U-pGwQo&A>JwS&dn=}`fT)yQ`WWBImd{dcWygc5o@ZN+ST8`d59
zb29qlZ(xx{b;4iR$eqJPf8wYPw6{pmk?l>_Z}Tw{rz2eJBRM@%JxxXGbX^otoBzsA
z0L{CAP^w)T)W~1#c`k_goR!^=Z+XVQbAN;xOGr07at^(QDnfXC<Y4n8V7L~v(Ueze
zi?!w#Tm|L_BK6heJNWsi5V=a$$EoiHv`qvEy`#NRVZIt;qMP=u!O)!_WjsTnL-*2a
z-BT~`;}mYuXKubi<$LU~GIasbX@2!u4GseBrfj|pd3;DbCcTO7QxvghJkT<AR6XN3
z!Qh%V&?|%$HY|@PQx&!ED2Q?`+GqH1HHpdC(-VX_O#JLGP_kUU&Wh*fxmL-}m5-7x
zyOm9|k`@cfxNyV#i#R~>d<pnXaUVghYZt)GCj$zG1_T5I1tgoNC@qRnqlXEI_(lIk
zTK;RFXXNbhyXXMuzy6PvXz)8RuI@WA?hSw#7p*>f`VVHoPT&lxFG2Sxzp%BV<tGjC
zR|QrJjoiEZ+&d<Au^%9|tHlkLbll^%aoGWtC^VoF<%aAe{<9J-d9OsZV{+>P_Hd*7
z-iR)4z;A`=C`<sAsDMad(n&w$dnF2B7Ec2(ix<|L)e*RGHBZyjBJ)g`n<^wn6r_YX
z7^Y0otgQ(o-3VYwE<TubdsK63#E3*<FKX^sAV%1Z0aPQLCz)CS%!00Z*iOJC8lmpV
zY0=po$)O7JPziB8i&Yi;@66)2&24CbBl}5>JdB~w<z<f@Z6U_G5XYBFbg4UkyRW(D
z$xZ!lM-G44-r4Clv^M{D<nRZlyHe!;dE|gWG#C2c+WoJ_*U5zaKj*{W*!^2!h6u{=
zZ@KgfO#bM-;%{Kq5VlD_*PgO_ms|yf8YQ&DMo4RNL1y&>^aTc723k~6iL0xH6_!OF
z=qa}RklcO+9@o)H7%|fV_lSg=I71L(u>e3jjbNLAO=@lbm?3}qJD2_j(OqiiJC{D(
zygQWFA1y#`2%rV%s#~<5Sn%rZIH%ept6M~&?3}R)T1I7~Yl;0gT>88MJjKa)K2cg~
zI%G8!t6!SAG$I+MV$FEzLpx*+ird0Oa*goTj5##^7HjlZFLK}Qo&k8j8}<BUcMDsi
ze=bD+9b?3Q2sNtQ)9(s3W(GJvF5BOm-aiKpX9%WwNj6n!M+!*H+{{6);fJPip<B<_
z$NK@Jv}f=Gl45{R^CY_s$=+W<iK@(Cw2yZ-A{2^mE=y@6!)!9QXmy9JbL0~Ree?%r
zO(1gEln#TuPvfXS1%O%0pBckq;TU{ZF{orl(M05N`Kq<gK43VmyNqgPY_U(wR<vBT
zOfVz6<HM$}xz>7r(7o}!3Gc^H-J-d4%kelwET!TQvnZM~`92ez*%k<QCreRbm-!w5
zJMfL07>v-TQcKNiQdO;a-`bH{tcMQL*cH(98uAoJc~OnHp+)}hJ+F+`a|RNiq!$D%
zX?}+s_<v_?|JmQG6XmSmcQi9!Ytw5GQ~Og_(ZWdP107MJn5!eQMX86!P9vI|yE<18
zX-oEc-PD!KK)Zw0!xpYCcxSw&x;f)Lt>>EKslR{%D)DbY8FP}PEyY2%t(PODJPd|f
zB;E^Dx84Y_g}x+iO!qaaBNR;4G;Q$E7<OMjb8k^Zc#37h#?I|PbbZeUb^|G2r40`n
z;~~W*1KLau^Kk?#$8(Pgb}X)QV59-_-Ydh0g4R8EC5IVDw%Yy@x~{|n!AMrtOgp9<
zuSXam=E%fR^?ZMJBjfvArL_;=&oRJ5y0`%?ehdL4X<6*NYHq2$<oekH$huN2!*=zc
zXr1oE@q-$g_%}8%D7U2lhq8BkuXM}Twxfz|+pgHQlZtKIHY&DVLB+Oh+qP}IS*v&V
z?(V1eUi<wp=N~YSd5?RH@w?9RBCUWT3R+tc_iz&KucclbT0ONUQfm-8-O81zolI7l
zZGA>8+m<<2I%0VbXC1xBC<0peb<1HK)rVrwf-kPZ<PA^l`37R30L|m7XItQW4Z(H+
z_QPk1btp(gGIm!2cS?1I?^o#u{ucSLD+ZX&TjuoQZ{K%x=-@6fxLtlSP}V)x#c*hE
zVR+nDBurJA-_~ANzxiefv3kC$r24#;ysIm0k!r0YP`4JlLEq7eQALQRM6e-4s(KB0
zp(T_lJwVAAnaZ}08CIpM^=<`tW)645g?6)o<kQ1s;};c!`^Tv-y`J!3rg)eUmMt)^
zEnWaW&42@4mj!oCh-QL3qY_+xTX75j`!L26kcIyLdc*bi(1fj?frZgu9ryp2eCqI5
zKDD&KYK4O8b3;uPkuE-&_0lUfb<LNWeK_-LUx7eKN=8}*eVuT&0nfF;%e8*(8eGor
z8h-SZPran@%p+ArW+2$dMEz<kAvavo9dPWcKt&=gFBi$K4%p$8`a0`h)c7CkDjQU#
z%>&@&cJXI+f%(V9emArXraOhdQZXR@V_zX;lDG)oPU2wvhblKQq>89tum9RrAMupH
z)wo<IsdUlV>E50^R4;Qp;jAJCMpHKDr$sRNfyhY5<!Kk(-q}ga!_7?WE?s?Y0FuDf
z^df7zad>K4VZA5KM9`4QwfLD#sh+n;flo|{MiH$!ed)61zu#~<<YLp6f3;9yiT(9)
z@9&NbgTEwpHLV<0#1KEQy@m0_t@v?3#ho{<*ilfg*!Q1y7?w-cNNCMtKp8FC%Z&{~
z)^9!@PB9>et|_%6kzNB3(k`;H4v)>Gqhqo@fhh^#C~*#yi#&jNV9wSYiafk|byc_l
zg9|&?dVMOl9HM*3vRld*MA_ilHj628P{Xp&t{CPlv1s#wLZC*>Yz52hFWA*zhNMpH
z&H0binE+zx^+l!SV#vOX@*S$6PnBr?f-hU{Kmsz;5l7!)wTyq{Y)YR%>C&cT?XE^N
zkp^jyx{o+pk~HWcqP0cglS|31UFMN+CHapm48q+X_^6L}vtI-OV%DOg0iFi>yA|OA
zAQUYi^&HMi>_0p-oNWWJHI8cADup^yUaO99Z!a}#!e)Y+^&y9xJSBn9I#fRC%{hJ)
z-)~FK*++OQmeORW&7asErPcg^^;uJvBFv9Y%vZ$`l>#bB%j<2(*%YQm+Ep+2F4PoD
zHP3U?d_CVa+47^{>a?oXwN0VVR47&UK^jZ)wx<;6j6rj)vEty;>2v6a^u4h-XoR@&
zx`VyBuSLaYj3dW==|BU|Z<&pL!h~OkNVVE`@bxL9+9ttCR}XsYDw_>KTZ`S;-jwfI
zEqe8YxLMPKU1v1IPmsvhbFUCHAL1ubGW1aMM5`9r4mz!;8IjC^b-yMfn+9YC%MM1u
z`BsR4^JZ2n^Bv8N)m8^6Vxa2;Fb%-mUlC*ukU|@yi)4Kpu{6Lm|8ib#<)eOBr*T(=
zd@td?@`$<Be!9sqbLR+i9O}s3Pf!SgR-L)2@ZD2<nDUsLf)=cGa8EQM^z9-@;AEJk
zE>}o%@|S-KH`5h$WmST&-Vbc^pr0V$w6@%So&6xwQS2Eh)eR#jbEn3<r{atUrjqpD
zW;nipfl+Pbb#x_1%amxQ=B!v`cxF3G;q({H?=3h%f5q!&5zs@z=T$EH<@<9AJ<68S
z7kDjSlwn+cN7p_;XO_N#LWbxy8f~?ioHVbpdVzumiuSa+o7rKZB5>6p$h=#P6Nyh>
zjq+ZYjgOzEh`8jAvm)5m8STdsD3jlXDZC8&(+XliEQ*5xE8k=c<s#Q1W8tV4%!yJA
z6LL~t{S|pf)GbZ^j8K&^JTpU>`f|BCk@7D5Q?470-nd_)nqtwkl4+7i7P=3>fJS01
zoXPlfB5R$DxjPF7j^zCk(TjBwlSUQ;kt=OBjL$`AmC-`R6zUjR_mZb-TqoJc0w0Ex
zP0{&t>Y;kxGG#Xp$ebaM;5C!{9CJViU7;<r*V__LbeCJ1wDo56%IuT6<52;oSm9G@
z+tMam#}iG}-bU5EAW?fKl-Ou^&Ed*B9-#F>iGqd6Rt2+$$H1tHuj!*{l_e}eLLS0=
zLwu19btdv3^V;t|qF&n^z@Lm3Fh<1Q7%49hbklI!a#^gC3$60LpxGk>OqGyv(zhJN
zrquk@fvLd^I$MW$xh-%hL33vXx@o6Pwa#m58m_>W9qqDfM7a4~3Dni+LqiwT?xOe^
zfw$;c=c?`{Ay6Q0g;pDeA$hNDqdT?5N=O>B<`i!GPtz4!YJjqZm$L_EEV^W5mYOuj
z1L<#?OG=#je8P3cV-{(J7QqdbIHq*<Dk~P}kq^qHW}W6v<+;rDy9g+S4ZlxT>}rem
zO=!dqfmuk#E2dkOATW|3Wap?a*4aK#5e#|mD9Q>XuslfoX`7vgTX5yL`w20WLDYWu
z0`X|{=_T-mKr|I$87vkYbjb;}G>d_hgtwRp1<fIDC!%!Lg*Xse-@A1JzQNUn`1!E<
zZh+?#>UK!)E9j5Ms3%;~;m))ap0?y(o`Stdz9)XTv&QK3ElTfatgK*QYCd?E)G>Cr
z5c$k<=mCpn!IB@UsY=8$$gN$?(>o4ws=v6iL7-)W^oaw+fBn^kE^HZ3+vXJt7!dUM
z8e8`fl)h^t+qvR~7^xkZt@2waW#6KlZl7NYQAa(MbgHA10R;2vx$fxm)2frzzq5kb
zK3wib@Uku4D2k1;sc5yIt14{}9XSQJ-BrC&*9YAcFK~f{JByn_$(cn%VwRm-n=g1p
zEWf!1zA%OjfNfHyLQ)U3wn*1G=*s+bcH@b1KE5RiXjQYxu>59XenMrrzHVWIfCnKR
z5x4eTAGM^4HeSsEQv30hS#~J1h;u-dDq&|B`gi2+IjA~>!u^Qtg2L=ceP#JYN$taS
z4);3a##x@Mc5+G&l&*!t5_$+rCIXo*C*YgkuDtPla?s`y$D7VZ5?q8;x7Gc?ls06M
z2WR+B{>La~bO=sRxO>>m5l+UJN`6wO^iVxi7sr@!IywvQ?cksQfU-+Rg8SW+fHhRw
zA0iqRS0n*{0(r4W4n3KC02EODH{L|)(>aE(dz%8!L8$qfL-i4p$6T9rJXVh-BD=Ed
z^{;oO);_x&e`J~B1is`+cT(A0I`U&JH2*0Y_)R*`@j+H`5-9}p%g;FF`_a}>eR+x9
zO}fr5p>ND_9w-JvB+ssvdQJX#aq@wAL{k#g1GdyIkddux>w0NfJ~;1lclpy3LUM7_
z(o>8hlbkWxrlE{c?1N(i(t4Ea!cT{$r|)nPVbLMYL1YUeZs{N^@bhFt%8>VnTR}P%
z1vK?_xC@iDhkO^yf%LLx>@um~z3VGxwR&R{NbS3K2f?;NTSIopH=ng?Wbf)hl+X>S
z`yLd8H~D3i-U(FWlY3$kVktX|7<~!Sq%^stY7$fRAbR0)4IpNcQw`8|;wPY?mRA_#
z(^K`S9+|2jxP>wpM2EpR!nYnk5q4r?eL<4g&%eTPPs37Le8cE%2`X1g0_0-q$KE+9
zZ8rv^C@-L<Pigj!3<7)vg_C$tu;(q~BjaJvnI{g=nKSCtlyb&vIR}+WlN-Kr#jMmk
z2N;R0EhcJ-mG5Gy!a>bZEE=`k1zc80C<iN+^Tw-t#8yAd6~l-Kf(YD_U;k~W0as6K
zmjnR-AkX*L)7HOx3ja3L_}@=J;~G{rt89p05|i(zXJA-ZtJSm49u(?Ki}~R@Ez5+%
zJGSJI0fk4ZDrz%vir5C#pYO)x%SndAzYOa=p5c#zG7eL>$6^FW$auTR73`TD-ea%u
z2#{w^GrC&wH6<VQa`o(4ym`8O=(fBGwi@N0TwL(B<DoyOnu15g=zxlYZI9h-C2^3~
zAW8P}Y=bkA67Ht=dsKS-hFk(cG7)$BD|1BQTE%;<eZa4>@%>3O0`N?KCh&cC-=<7y
z%>uaY6E5n$_X8W9a!8&0R;JlbUxP#u3O(ToZk(oP5Io+?EYV|OZffZDc6IS`aN&L{
z^(|INFRHZ8(InOx_>9)i?5tsmLlG@++PoeUw8&RsgFXf>uW6Ee+NfztvU2tq-wdBX
zvy)+wiqvb-N3L>5<r3j-XNMN~>&t7;K|tYZ&^#~@nAgz#d)O;UVM|jJn#7NQ@Y2)A
z<W8S9Fp_529*SZ=D^7_c@-ru9mUJG-<B7#}9_}b(_|2YdoUYD&Om|*;f_sWLbP)#V
zgf1!?qJp3RmDtX9Z>&J|`)%g7%#M{iuhG4L9#Nk%_fQ0u9WZDuy^~PU?QV3?(6f&U
zGBcD%;y6BR#T$-@xnCwi*#a(trLB7Kjj6kQcN^9z58IQLmHanA9tG61j77wb9MJtW
ztCzhxW@Z{zkNZ|SY7$b9w3f1vWLo->hI@~y=np*U+B!$qI+-#@xs!20Q)4!|To}9L
z`do23O&M-EgcCsunOhcg4W5-$eZGN2)3mTZA$USrvs)R!9p6r%*6owl?qoyxlI@Vh
zkwv5e<QLh-A=dOoU0ooerSv_`0v-fWu%pTVg$gt7JNsl2$38$ECN$v?NA+D_fhT<3
z5voXj%AWg#;mLongQKv9BSiNYe7wBqbmH}?H)r*xIz|bsMlJ8rCqch~5n*+NIcYuf
zXh2##tFVTuX!7c{>|5_p<`K&b``A9{l7{GwG}=mmC~0tyni6lMLT`~$EK!Y6Aw>LI
za|o(*xS=^W-40ZvY51<(D>lxzgHb)@+R(rW>bhA%c6BM`I`{o{dr4BvFt4&A7K^V=
zZ)c!N81!Rn*U=wg#JH(WZHBNgD-*0*E*wyHiWQwXavlB9x8K4rP~yr_dq_Y<-OIv$
zRq^cyH;0+SDqm3{x>ZUGyLD{lr9Q1$XG7K{H5!zHoO}QjQp9kJNJGDz8ne3Hu|W=;
z@rlSlMXkb!5xj>5E1+5b!noffjWpD2(3Vd1(;9VG5MxR!VykX*`23+|q-XuW48kw?
zq6E1d;4-;G2Lf?SyB;MpHlWe(AuD>7^8&i;SZJ#il|h=2gGTBxa_$XkJ_ZPNG!9kS
z=<0Nv_SRsnN>mGLz%6<E1r!cDoxtKerL4!QHYmp0n4s}<aRo5A7$L={zuC<LB+L`<
z6)<W+`4bvfX@4||(DE9@*0Pq7JA^;wcS*(Ps6!Q8wy~c-NT0<8rC-}XgK^ehNh2ij
zW0K>DO`~F(-E&XLm3z|22c{Missl>zpAdGfwX_H)i=RBc`*Xxc#tH<ia9?KHQRu*+
zBwvf-lc?o>6+BT2h$oporzWs$3Xs;1wo&NNFJ2ZRxDX`Q`Q=ACt=IQHYepqzBBtpV
ztLtLK7%Wmc4-MphYm#Oah6HMtIF*`X#hEp*t9`-URbLMK9Vgr|Vi}P!?4(rG+@}I!
zj@Q6Gx(Kzwrqm~M$n(Uu&L+L6Vd`apM@}7rnM%OocVBh6*g7r`rYxwf5PR0GuuNua
zteM&iraK*f+ALLpl(r-PbTCI8f5zHt2J0|J4vK)2WK;|dXbog8tu*nFZ)}blp;aOd
zp6Eu^z`_i7i^I`$3mnJ9IA~YbxC3pm2=Z!{dycaLy}-I&xJF=PoS24n=;Via0XPef
z3$bQslAx<0-}($|#EA?^T8Ej$dmv^Ivgrr_Ic<?dhJvf@ZTq7Y`eh(p38Tz-)e&a8
z<9fiJMK#^>E=fefO2-U(Gp>|n&D)AmH7(Puu8$ALBmgyok2zuwHM5G{d%NT6-pRO>
zdVGLM_Q}!)_FO1oOs#-wg2{JYS#%rS!+-odLR~hrj!Z*WDve6PWOTr?w+=?B$%rUR
zKqYN54pW~5DB}7I4Q!aI6=>E#0xn+;a3DC~Yq=;PnQb$5>6|NQq+9K+54F@#HJD_O
zTQQ>k(S+Riz$4;s>KnyT*`;!Sa;UHeoc#?O-Sm~PMe(+zUaCG_EoU&KZ~w^b{CliV
zT=(n>^3cWFKKjyfUUW?K`H$@+QsnGDkg8>gHGk_cdvy9qDCHlw#^xvYYggE##9r!i
zGy<d6&KKxWk3Xf(LM>GV(<4aT4pYCIz~9_nN>FX2kHZpAz;ne6Tq`mW@lqSVoPCB;
z;6S(&cBW(89Qxdn8{|-O&`0A1`5oT0r*iMnb+l5Lc`zA`1;zA?eZRT@Rh9yDz_t`X
ztBT+{=V72jwDoW@=-7kt)JH$e;_N0mK4I?5HcGDyi+-_9iQBp0v^ilNUVePIKqNJp
z)F%B65#fwDjinFdVK)!tcdMzrfk?kuVSGJFW3q$uwsnX`$B2C7r_r}t)&;-R@N+=T
zi!tGPX|WxIG20MnNHwD1nU&a5X_DIHTx!Z!wi*If7mvRGdz7m2w_4P?#f>b1>YZ=4
zB6_8C9tyCHj#-Pa-e&<8d^S9C7Xi`iCm%J$fQmOu5%d!IJuR(TaY{%-5uOg9B(%vX
z1?E?eKe00bAx#Z&a)4^aPQ?|%wPmSKTs>)?yn;sCaL78T@@sz{w*7b^NTtv2U_U56
zq}76{#lOjX3TNY0pQy5jI8bypK|OT@DNqr3YNb1zB6{}sMmyj<Ac$rAhLVv6%y8Y8
zluIVFYb5vf8r_XGw+&M-=w@upC7se1{5{jR*fh$w&X6q#qhcXGxpJGD2X8hh`v3>K
zx#@Oph&C*14h-P9aBx8C`_mGl=h{dbL3EbOD#KlE9+EPOz5EE}wqJ)sZxYbPH=d*v
zG1bzg&X7zd(Szga%uvsXWmk{vtCfJRqBx6odP$@FWAhhz?CD{BnX~U?i77|dpmJPx
zboP+f6BegGrH?P#Ftt*CoIl~O-9F6ABx_iudmxZYw}u`JRw@mZV|s;WG`hpqb?n2r
zEyk6ImYL<tjYu4tSoM$@IRax&uI68F|DZWTv(h(EQyV?>w#InN?(}YH?R>YrmE^{x
zTaEOQ$!FO1adH5AwT!#(=gIbYllCMv5<fm`MUXfQ|94yYl?Dxx!5`y>uiNjxiaz|K
zvB~+LM{NIL;-D1sj~t8kVzQQ)igYgb5|b_>8e}0&wFfyt%DwxJ5~XAb(^rnAgUAE;
zSQy%7<JC29n6n5uV8y(22zQ$zMc-fJP?rDFV_*<&F?(b57UMMQsyAM%Jn0EzjnOH>
zZD%8BN!J?s!U2CLi!g}jJWZc4zu;m>WQAZE=i3$5&#$r%qiXC(qji8zt)5)&ZVr(!
zV)P5AzIYZ8_v0bPI^jdujiUwUKz;|GKdvID>rt&o%TqL}U*ls8Ck7ZTp3j}Hz3N@(
ze@XJ|a^kQbS?Qk><4)D|xf|pCmVoJ<Vq?b_nQf|4Nshp@F>~ih`9+@3#E`$c?1sCd
zTfaWIY{dN0<=9d<^u$?oyuNe#wrC%T&f)AGze@34bZ4(LuD>BSkIrJcEw;1<@p>P0
zv9{;ESfEBJsU$?fGMy_)#YPV;*woDjmi4X2=v{SD<(sbpcr$_a?$ahK)yKbO_TW(Z
z7s<W?EV2IwlhQwKH2<P!w?I+rE5Cy573JMefi%aUE9ty&-p${Dk%feQuTLcNC80MV
zM>eXB6${GW!BG3~pd)b-YXupl=LX-~Z$8X&c(!|jv@??Sq*0=t!;#Rt*@8#Xx`<q}
z#EAmywRydJg;mk;6Q-CmXC9n6iuUJ>plX~S5J5j=r}gshFR1ES3uS_Y{Zhg<%PHp<
zDN;hO5yiEs2^<BKeXFqsc`Knp9>$g6R8)qKT$KoyIsn>{rIi3H?sAepV360;C0lPe
zuvSxt%_2XtNQP%4aBU_d#q`h}XU>)`L@PZ$Oqow4s8Lim*>l>@FLVs(lV4eAo{8FV
zZCn*jgH}x!U9sFDC9`f9(oosshmSFJMZAzXxu*RtQ4+~*mXs7ef0k^#AK@4wG8%Y?
zCmH}~?NUvVfk0@zuxcDBqSC|B$?;<5&f?A52}Gwr324zYyT9_9o6rTRl1ShXsC^sg
zMB&KP?&{O28aF%t2Kd`bKPAEF3Cp6r3T{1%Rr_G>VfONSexH6c(dmp6l$t~0HWPqX
zw0UrZEA{F2QS`Synx)rl6=>cqM!V07Dg+~jh>xgwhsrWL%o;^xcLvfpk0oLx?JfW~
zTz+>`o1uvNZdNitWgC-GgbNECS4%5yHO-9iiS}NZY>UKU7*(<tfl`xS43-QHktNo1
zdYSRTV;e(=)RN$-{#dbWD-2Qt-ego4ltkqB>01B{y;NREX%ayn9ZZoK5qS(I+zTrD
zqLH6dd36b}sKXDUyr<3{-QE0$;u}$oFP+fs9@ThpV6+kOse7SF^g9jaVo^H!kz0<+
z9XB^1n?5yn_uoAx0%xo2^RlLSE$=0<E`nfI4L;zobiHJEw5C$==43p#bRxMH(Fog+
zM2tOn?^<Pv<tf4nWlcL}0^IbWJcB~EzBT45G%K>|ESO5fEr`})Racr2b5+eV7h#<T
zU8|%~xiiar$7aHLu!2jj-A}OpJVELerBNE{a_6mRT?dV~$l7C5AD_77p0UA8&(xu&
z{apqKUA_7OR!@5QxQ){39XTVmzxAW*p|ccq%;9{KFO0=OP&P>(eNO8M<X_Vw4~DUw
ze~fkhkdFLiaGCjUO0%!XIP>?vETZJM_)|Obj52%wYs$JLC*+=ZCl}w!uKkYK&c$3o
zACUp6@#EFlDM&kbaLfbmRzwybN!X1^=2t6UmuWxv0*_`MyIJt^spCi7AkaVOmSO%o
zx6JcrTBN%HIqxgC42ttbA=m$zTYd-G^;Ux(&{qKRd<HRb`u5fNpf^y(0<t+k_(dW6
zb+ehiv8(23225crus-l%phwzoMVHm68F@4rD=f5M53F>QvtHgGR1;<E2iFI)r5Wh&
zI&k^#V9$>EQBt&4P<hev8A{^G-ekoJCM(=7LlWG~MyDy&i|&+^NPnOv3rtC4v)K#^
z^TOrNdvZ`^<u*~_8h%#``?qV1u#g3>y{|>k`-?;Vt5@0IuQ3c6{<+8OKj6phU-&U0
z>!0|sH4jLB6<>u}rH46*L^HBhlu%5mdkN*<I!@QPzKs=Kg7W)i<~1!vju5<z3j$;S
z_w7@v%Ig`GDau0K*9oF1DJE~&++=F@d1YvMt=p*8VLsnyv+Esun?;lvce5*V+DCUM
zN295kg(c8Bsrx4kb;Q&!HGRy53GibP(jw|YxgunkCYqSCHGd8|&_w+ya6q0DAXI%A
z2~Kiq#E5iBs2`~WTRIR2u=)N%bT?9viTGvt=^kg01wCScKscQIBmQ%@%mlGxVYsKp
zQ>So)@8fCnK?GG_%b=kqTk-IkudN}A3vHu(X}x;6fHbUXdeF+4dVzH54M|3;uyX1A
zPbPY?oeftvl888S<IMyOo8v2T%)^v~RVATcN4Vtyyej2Kzdu$lLef2|NbNYX=~ow!
zTI9dlnj`dRS_mt_qEN|>3!pLUl1%n^D^;I9z>YknC0}x_A(amMUu*y=WK^MP@t^KX
z-f?_>ryL;%gkxHMT3r`q*A74Tv#YUka|~CDkwIXhDa1`;b+Te^@SvlFy$6r;SCt>K
z^T-~x@Sa7tu*T~>dVS9R9GA;QNJWI=3f|0m0Zd!Ju3|if<*j+!-FiUwuAUpbDw#`}
z#Bd^F4&0PDNa0dFdY^gpT4_70(+TO&__5t|mYAps<PNC`s}Gv2QYkLgT&|4yA(E#y
znrokf6fzM^!sTVJ*W?ytv>I8uwZLA#q&uS3OMVxhSRhgNoe8amc^FpOddf;81P2}Z
z@^$e&_OkJP7NUeJ`z7^2JVJLW8l!tjGIlrtynsS9_$gVid$8+NHfYTBNU;r9jeA^N
zS>zfsgMZsO6MHinwD&a9VqdKZjTo0aZY;@Ee|wLRt47Rvv%OB_fJv1sp-E7<ru?w<
z0lKAHTOWf+2Zm|>;YV$JauM{2^;@hY$$-$++jVXMVO%sj`;lvqmpf86qHm<A68=R~
zOm123!#77yh4jq!l6+fBA<Vagsw>@78}`SWF$Kz%kc^e1Gq$@_ai=K!`RAE@R0Wg=
zbmLE|j=+uK^XFg0Hx${aW7os4K!!5nE5WFd_LxeHObwn}({eqjL%x*&-Wjo~T3~eM
zv+;O{(!ZATk>HFybRPR?pACNve)|*;z!}+f31|iXAaHoacK{E@biW+b4d+@MNSrkB
znJp>KKoPOE2g0qfAE`7$FiBYmFx2D51R!g`?#CTSCA14F&blsG^c|Q2Cq3GjY`l{?
zoYvAkihQSXlW2{$$+B5hsYHKzUYg;L*LL%Pn^WY)+t>w?>NpF&Z|+hK+n7GTrGWoj
z`1m*8>Oc{y82xMc{`K|wzY08TnRN{8Z5{u45&sWs$-gsKsG+d`+9r&#dXxFpChR2e
z)h3*EvGM9?a|6I2|7V*p)PJ=JGpEHHf3*oyXWh64wTnD~ADy^EWlw+R=&O<}@F@Jz
zCcFp+?kt8*x0IwGC$5n<h0qYA8IJJfj@po+KTqyAr8Xw%N|v>?uGr!dBpgFu2;N#%
z1$k5YYQ_ZKpX^Q>pa`6(!u<pMDH`zOwT~Z{ZV0g;HCo34`>!_PN1Q+C6Xw2YY$UAg
zT?EXD@8j4-UkT=xnL{9<|85h`E{7-N^{V^|;{1_-+Ox5v0D;-*a^s|VaRUzz2=hDa
zCqj1NUJGCTfB2K=0C9)@uiqZ)YbpP$5Y*rIvW9wp)gYVr-;65kBT1r2Ps|nplGr>t
zqQW=Rb6j|V#9d7+#zB?`H?>agL(+NBoo~EC6VE=po9~n1XmY>NPn1_N&w*W`3st-7
zZwGVWxVukPl5Mna4rwes0_kwijcbD|yWfR`t0d-H;i*(HfE(EfdT2zT;g*#8{lzWH
zr$o;1mtldY7=NZl<&5!vhw85ZdOARaz5!oA$p0CUt1Y@@5#SpQ$?eyWv$hqPq)ZTz
z_JZV5I0j8Z)09LUPBQu)E8aHQgJki3{Bm%6aDW|7`z_dsLt)B_@SKg?mssXB)YJ0B
z9eZ%Z4)}Z8NRS}+{+t7yl57A)n16UMw7jF!N;HG26`b8mI*e%=jflUF!MbPDb5o0k
z4FRa|#HGF6J#U?~gXju<!B4T_WPi4%(|n^<wj-EFtjqdMaooYy$1BGys|a7n0qs)U
zrLi+Bsf|`XuFMBEHP0;R^txjqz_vRcPC|_UEebjA^@Q#3Iu35%e9HTe>zA17xEva@
z3utP<o<q;I(5t8*U37vCM?KZO(V8dPP|)zN<Zo=NcQC@kci<ivqe+2lJ~A}iu={R0
z8R}3*@kaNt(<H{FKS2L=uXVF30``B6(EKAEYGm-$Px-%(E&jJ?t|G~wdATo0?C$@8
z#2UUJF|z-H#2lDJ$FJU=?rvhf@^Z{QqI@b}dAW!Wu&-vNe}%+){)EIZgQBVe_Bj5C
z=03FeKbxZds8UV%D*fi)%;^4SNUW5e9vy7t@z2M!yQ-s#Y@|;v5_r=-zE?Ub#Nj_e
zVs(E)Vlank#;}Uw?9hV8x4?fqrsS14?C%QZ7hjL*{{)E@xu1On=KeDz76GH+iuv`B
z=6!wsDlqr=q@v3|-x~bK<x%zzMy&tx8M(045|POlB;<lgniF5zcR`Cy`rRNYhdNZ>
z#b^_^@syZ$VfNO8ce$2x3Wr2XqjEZ%K;PaR^c0?M7#F7Zc6W9(AVOscD=_+J2X*6B
zY7ZO>bZL~dSVHdz`x4AIe;mX@#)jrJ2r~<;yFePpj((6gxSa~B6gXp+Z?(d(S1258
zN@!PpxkSi+ck8jBW0ZxEX8fv6w1Id3TPAv15m#V5F_0>B@DJ5ackG{zqtWs4yeSgD
z`Y*R$ivd=CR*rr##(`MSg4gCDKkk=mM@-b~{OCA&?P{2!VDD%(UAS6w=NEaoX1HX5
zDKZ$UOBT%S)ZiIz4Nuetd89OL@K#N~!u!7+_HF&y3sAqzX@1auea2w=FMFE3k*S`;
zUm(HtUt8TTVC8FEXD834s*SWtkpxqlTvxn{JTSv1Hq)-F0i*tlh6Zu?Ygm_e?frT|
zKAf~$cIqpI2NK%WczDrF<l>T(iLsv5_iMZ#hrA+wh4!vM{m2zn&2^cbZEbL|(H6-L
zor1Qaa&lW?l-Esno47W1uJ9X~IFL%d?p7F9#ii>~$@#B>Tehv9D|iM3dzc1&;^D@w
z-@=vfcWE@fI!2%r8on{8487A4k@~>1Y};Lzz!lVeKtQP_#KweM^wCy(mT1b5Sb#|Q
zWJ$U7f_C+Ml26k96ARB(yiHBG2^J#8n2|x%)f`!dEJ;Nberk&0WlDvs){}>~NkRYv
z#5Bbw=bFE@bj^fWr2iP&!59)(aX)gKsQ2j`yFV{ra9lc9qQJGR*Ghrx4c}2}Bz&HH
zVi`B-QcN!HP|Wd0@aZmiyStp9^Ajbzrw@q(M@4P#wsH4fI@4<JwXU{r56oykI@&tl
ze7u21z?LZ*jC>nefNo5^;SSd~7$-6&tPCA(?WJ)2W<0d0$Ga1HqdT(G$7hKJst`I5
z|CB@qm2&0FzSNe>E;iC3k&-Eqx!`QoM;#c4HC?64P>|n1`yOOQZ80JQ&SNvKe&s+d
zz|K03i3zW3ZNO|i#0;Vqi4=n)gz6juSS`Mj!7-8G-Hy2x9~y`S%z?!7W8||uFo^vQ
zvhOJ|;5AQtD^ugfaOjYrLYJ?awqN7EMHGuPy^HKnz^o$WfQNFnvhAMtl4gi$<u?7u
zdeUrbHb;U$2R>eAnew=(B6U{+xSUR2#le{UnYSxDkTI6x@o`_T1qJ+<V(^vp?^>|?
z@46jqP=r@H(dpc(JWz2o;EDu}ND_X51fV>?MV|yhS(L3^u{m~Y;_a>-eQ0XqjGOHF
zbIH@w6Zg@*qt>}VbJriRzg7w4K9)@bbD|i(FIJN@G@iBJFZ>J}r1EQyN_XIEoO4Ja
z#1!d*zAuQnq<>~in__Exq*o~8vNofbHg-Vqhhm9kiWAAxHi~seY$F&4ATiL>3Q-fc
z*3^LVw$TDBFT0S>vfnp?m;!&rGY>JV^nVvfvQo4=Zzu0|!6G52zT9DV3`at{RoTN_
zf}TVgi`PW)roAtJW>tp=4qHKEmqxo%zh>g)*97ZANb5Hf>s_scHtFPlw$Nqiu+9x$
zq~0NeBDhEx5yELi7;t6T@+;Sxwu?wGNsoWia_u8WstP<lM~}++k;4Ca&!=ijRacb-
zoi3r27BiF2Rw-Bec6VwJ!3)>fNFbG3uv7ltqAdd1wZD~_F6Ii!Ddu$m9`UVzo_5X!
zeq?2d>zCj<S-Lp&&@-IrmTP>k8zTyk5C6+?FAuj3s7(mkR_DnBm<nret={LJ@zvF+
z-l4~lP9|&S&`ou&QX$<FcC<&~dVQe$9DO%p2PL8w;hB}$4`-dWC2cZrBfV`?i`D9+
zX01-cv)v1yJyWGvRP-}9z26;;pGt>DKQo2pnd}ToIrj4yEK8VY9~Qc;Mq64UH#WD*
z_nPEmJsH}@TNKis)D7|)sPHWsuq`iWSwFBv!t%Cyc$4(vVc^)YK+%3*T`4x-LWmjj
z>MX*@@Z#*hP#wmAL^Wn59BZ_Z5k)JLc*F^hsw>S#s{GR0=#dzuhjLXlZ^6}WRJr%8
z)O8#P?y;x2n&_@ia>b_S9#x2X>4z!h<-l>p`WeQVSow_X(FXBG#3WWCPoUt{=5zK{
zxrW&}y0ZDNdyWAd-^Bm_aP(iE3;1n%{su>DH~ZExW6d~|e>vu)1XhKb&zKVDi2fiW
zXmLKhX_3v)2Awxv_gI^O*X0*H(3paeh{v?0bx~&7TLX+zczL*a#oYWdg<WO8;AmjH
zKj3Ip=Re@+q>Wx@dU(rN`s}Jd;ApIWhNHdz21lnP0(|9o4IF~uF*yFo#n86}l;SG2
z!Q7317j+)=g?k2@0rhdS5?TvoO$fw!!)vRiFV4S|Yi~Luw^COvAeb~>E(uqgn5tU-
z!w3NIHzNQpxAC7w0Q*}SBc=10rV?|q!9NspOgewU(Uq2e2mx;Xlwbt?y97gJ;I2yW
ztJ3a~2LJ%?e{jrwNiQ7q9F4vdvIhSU%KeAo#Jq-w!zx?c=Vmrg-rNDPsNEC1&b46$
zqG<YkIUWV)vIJ%P4|zi3Tf$h%xSHMNVV6xEV0;LLgv>Fi3gd(j;+*Lt))uU}_;>Dx
z$*7roD^$7)NMnrP`y~dc<o4#BGtcq((NUxa4$05xNyrD!ADRVf-d$OA$!GqkduRTK
zT&)Mwfba+v@vZ~$8KRc)LR<zx!NwH7RkJ}oAgfr}bkDq6^h&RiNX)uf*vYv1l`?AG
z+V&!RvaX%FcLK*}=G`$uh9hdzo0<@ZP%wiGQAw#YQ3-qneJgDsP&(lA`JC-NnRr^U
zlMUQjhJ9(mZVAJGrxVIl^BCyypH_tFXYzX8>>V5&;D3X2>);Zr?MG@p3e`W{Dp92Y
z{4lh+9Om(O0BdVd>Y-(Y;EXg;OWQp7rn4{ToH3RY5|89;_jZD3L%ZDnWbb)hc|EEC
zS2-KeG_1yfmJuwBFj0|{%$148st3w^7d4Zw-^!}Xgnn(&0aA;Q4!Nw=!ENx>BaL>L
zd`Y(%Axl?%y*%9=6C_T&WkLd3Mm`hVvN&Td;Xjmf2ZM3fN*!s`K71pcf^3CN>|8+H
zBd-oGr!$DK5Hx$2cFK9R&!CNV9Wl;QCBYIIPv2^E>gbl9U&^MraAxp|j0oCg?>1^(
z(?njCyz>%f^TZ&7dUizF_nG|E`6NvL&ah6Mq&Gne#S@uK5ZYLd?F>{?Qw89jMYW@g
z1Gi(?uqKr8o`NQyfvfpGhpj#^`=APnXex!J82lvEF8JZVN1w8hp0JPYIllaCvGlY*
zym#iwz(XiP#1oD5Q!?)R;3DamHuQAm7PHq2ym9z)%y>ml#QE;+eModbyU*qKwuN-U
z%f|s2jKdl09j**o1W@+?LBO<Y{dkfwwzb!qM_;<_IS;rcRJ7VNXDu;#OIev+Eyg$Z
zb_?kmi(x70v3QnOlgg;cfs_-~gf5;Y&7pYmEEoNW8XON}di30mHt?Xft>_?R%OoKr
zQ>vG%SZ)LEVl##hrKeCRxSaaqFp~6nWIe}jBwFgQ`#?tz@aSPORJ1e5hM{expJ?rZ
z2>ygT8o>al)lwWj-PM<#@neQ!z8EoCykJO+X;YdTK6aiH54kM|ParyOpm4Fb$A#z&
z{$e|(MGm#u%$*02@m=57`$mBZm8|)h7V3NtF`iTQUUr_BM~9D}#(5`nk`zalA%^pO
zG6!M>G69{^tfD7>H!jt8ir={MlhQ$?Ss#SmjE9NIK~6WO3*G>&>iy7yiJLLX*KINT
z;SB_P3%?DvB@k=bZ)XqrnP=8y+Ntx)|DzujO8e&}62vMVv~5aNZ6g^OaCOnKqJ9zK
zv#%7yPl=3ZpI?5xs8g21y@s{cUB%Tbrs&Mm+a6effpx>_>0!CO3LtF5YVPp~g_<XA
z2?CK4MbIhv7b{rh4jrKiBqi>QFiCymxf<THEIA4*yg#qoNOnTzNdssxEH<Se4LHwa
zjy)g0a<ZJP2;0@nBrb|cs#p((N!CMT1ds+|h*|J(cjr|^BWI&mu|8K6V`3a06$Y45
zr*0y;O~J?LS>cr(p)MYKO%1ySGtkhpUHPY=QIa-Mry%XQ0=iMq)Qp;MP5?$tEMB%a
z0L>L4;)Bf4z0B2d!F%>^tdw6v>u}VWizRd{j=%wCD>=Ouri0ZeQ3KrfThH0st7#{X
z#0>W*NZrXt>M>Um^GSF*Br)Kt{iv$SU3A!7TdrAzSGOEIJRDiiyEcGq92n+U7}Xfz
zQpvB)Ir$(1@GO(nXr1NCAcLiWAz0yMDp3qi51uFdCA_dNueO}{gri8334-%zA1~(>
zzl!cMu@MyTO{Fx}YoT~J%!@(97$mSFQ^~RI8N!?z;_mjTj6c%@W*r8KIUMv0%#G&c
z3nnD<oWCkMDEv~z`s(X1!hMy%{h8>%c$67NZR}1C508<DaFie#$Y9F5*v9z<xZBN}
za^?J^@OH%~vZ}&MMKKNQhgrshOM4CRx$s&DAX%LPZbC?1{YA|0(Ijm7<z_QJ;8O%t
z?RCwMq8R|66;rz7T)S<uO>i#wpM*pvz@vGh_XA5I@AwoOWuyw!fzj_TR7AfDLxTdF
z=}i5b(yk>&im5d91{6<L2o(^>kza(d-`!f`ARtCsp$CC*UN8ND7xm>)C&JJ7_D<vB
z`5JEEBkImdj0J%;uespRG)WD%9T(!^r7a?Nz7;*|V&G}i2C}RBPLV+VgnWO}sU-VN
zM<!~sQT?vOl!}u5T?Ot$gpnuh&EYNU+-IjTF>&-dIeC&Sd9bnzqM>Iy?HZKt7&jFY
z2dD~Z>qmy>BK>j;An`YOfBoO$ED4v*2k0bl=NX2vgh8*^d}=YhAj4Jaz)C~~2q#KA
zN{E&jqr@@E`cG`3Q1!!dLlm8m;~mBUhWX4-t4_$MZR%6WQd52r#6PUq3?C}?eSWu8
zs?$JV)r1saf<4}X8Dx~jHlW>h&=2D-QyN|SjAqwt#AJ3pWkX2Kjl}b8fCf-1r5a%;
zKy}CT+-JyP`Z9qrz&{-cA*;m`Yube#mNHF2+7_aEB0DR|UqL+NdtDwh#c!7^#Jj<d
zPbR0og%xrxmq)68Z<i)SZ4+K0r^();NEeuZ3=_!Jj8&W<0g#+A9JnpyuUAI25j1*&
z8-}?`D!)8bc3}%;lps<6Xx3Q?55kt(8G~mK53A2%2GJ?5+N9iatS>~&Af^t&F`H9~
zWcY9!HyLMNzhgKjFa64E6=u7PuZ>E*<_L=AK51q$@4NCC5=v}_S3w3VQef1(=E|bf
z^m$Yi1FViIpLV28^lhx5TfMK3eWaOOzcs9$g*J>766^NnGi?kN9*wbl+H$m_Ro~4{
zhA#BVXBFE#)-BKhn71_8jrY0^=V4|;auW&{Wfmxxr4*&$F*$^l-M1^&Ip>GjVa!_S
zme?}ZlWEpF5U$2nI68}qd1|o>H}b6>M~OLQNu(b2Td0w{)IoYrtwLvlYGg|Qbx^q=
z&Sl_qX0##2=h*d+ceSvDpma>AOg4xv3{~N*3hSZegw+6XR*7~*L$IPZCtPvLY`t_G
zYgAl<Hheiu5>wY(;p%sDSL&!&Z?1t5M=_c^&htvZ<s9XjQQ3-mJVRI-<$}?b;h#{!
zPtH+$StS9TCRD__ujHpvh_IB1mjurlA*mOE`f(}g7VlwZA2a2*Kv>Ml=cWKa=7wfZ
zDy+vUjM#V}j}S`OCfikv8;o8HVM0|!w!XpRL%QMZGZ0^_76wV6sn<yJ^2Nfb%V&G=
zK#FWaUl8@(;;17=i13tLauTmC3vt)Tbc)|GmWmaU>s_L8LoVwY2C$<A=K42ux0|RX
z$zp;>Ob<cp(j}d<1D@!Cjo4CeqCY=|&s+fu=z&%Qd@Bmh)dSlv<@6_o*}MiGgrvs5
z$2WwEYk*!1hI`{*AQQS$S^&cYT5QlGux;oP-iFai?T9pAg@t~~h0q`dW5RLRYyB7s
z{OmFknedWu@tlO&@&|0*Y)51So~(jd#geZDguK?8EMx<CZiRifQOnwnF~*net>q(w
zo@Ana<l(^gig(AzI#0byZH<s+*)c0|;;Ek`EthXBO*sGgxXNuov$YHI;|Bws$?FNM
zQ04ENCo~>@qg1VA6aop)a(cyi-0b;#+>`QjYH3s?uPPuPC%caa=2aa-v*qG>N<p6R
zn;3>!%z4V7Kz&@ZJQuV&K~k4ZwVe|CmRj({#6^}PLoLJBsi};4_SB#vcb3~qIys1(
zj1u(8mcVH>44b$L;T6*j8h!?pUjUdQ??Y%}MC83FIu6e)(sQrIGI+413H*+<X>P#l
zp?#x9YJ@r=qcCL>#FvBta@>w{ZMj*PKfP-$_vRq>eBZ(Q63)zLTl_6@L_&%)TO#Oa
zC+M>LjaruTAR|uPB4aqJOW*1oqbO0mDVF1HmDt5nqa<PlNu`>!YHg(qZZO&Nmvmk<
zbjB!bl>L_o-wyN3`cKWPc;P)p023YHmXuXb<_YO~8(I!5_brLTV`vP>q4rI|=j*p5
zPfq9oWD6y;L;!|gXLg`ThAA@=Oim$-X4SIwB{(iiZ5iSHkzMQUe`}Uf*0m~9RWlS(
zjCb%y8Ug19z&x{*4YfFYy|n5<9;J=@<L(M)3(YOkey1{!qSVaaBL%-QP!n-{sv<_w
zMdKd#H5wR$g3dg1{U*u-@)re;&;Jy>xdzy@KovSo1jq{Q<<&m)WFdT<1Km`MG5`$-
zW}m4=v8&l;E^NsZaM7BvI%+%OrD_!kh-<gs^>+I;r&Tb);N4i(4~@f(7|Ism%=9~r
zt5kTiA-*i~Td`v_sjV1pa9kLF>ADYVOPH?wp*YBWS;Q)bj^VO>oeuK|q#&8W)Q-aT
zQ*5d=Q3j=#u-aE!AIAC<(@ja3sy?sfn9XnC*2vvaYoFFyl45YB;DUN$Nmx#eU<p*3
z;LA(EwaOYg9K~(}1y>g^yLaP_JCz3e$oNa$Q%>e$tJloC=2dz)N2b<Svx4uMej}~a
ziU4n&sfU;QBB{=;oMLo|YRc^<93PE9f%HDyWSb)xs3+tfFbl=ZGp{0Ef-~l_JY@=7
zoxWX4)>9N$EhMG(z3W_!s!8k1oyeQ>nZCB~v>`9b@<-nT%g!fh;D?=WS?tjc&s&aV
zemsTS!p5Oh`EC|CJfx)h*mp1woW4ISQz$*u2#KK<2^8_r;w6+lc}ny{$l7nyW(b?z
z=zP-%#27)vK`VFjb~CPN8)9Lk!1pDp5j~-pz#6|4^5|UCvcw|eXkaP^Pt~6`PW;i{
zZPI`9z!zYFi*)M$f;vxHzRQ0JE3C{_j44`j;aMc7=sqtKewhwccX3N8z<F`&2-T5a
znB`e?PpYJqk%4=t5}60A#gob*geBVseumlqOq-(#9M_J`m-zfabO5u2bkMj*<MJln
z4Y&8r+~Mq%Bg~w|PXP**q|tI#wSH+Na2qX^zNmgPi+*krHqoWrJY2M33s+JL+PQof
z%K{lLy1-f;b?UhD<Plqy{ZOqJ)UX`Z807=5@H+Ord^sTxP3eIn;W_r*Wp{P<2IHHa
znz?}f=g`MvD&G`%gUPWp4uphcX0VtZe|Z!1S<SNYZG$t?xnHhAqV$rD?9I!&$ZfnL
zBAFviC3vYv3eYWVD?ZjG>q~*gPfEcj^9bI#h(lyNN9B<E7>09)j&t>siY8DSw>eb4
z4=l}!GZUAPZH~m~a<TAE>EIDI%X+3aEQgs(AAHuyxl#Jia1FH_`9Zcg-rZQPi9H*H
zx(7{Rx5sMdN(b>(tNII{==+A3_sw;0rx~nG=hdnX!w?kKtG8gHXIaxBpNSpw$DM&&
z#=BnvI`0<(wO95D(zE@f$zD&IVCXuUMPQ138MsfQf~~h^7zIU9794)}QO*V~rSdwt
zXl~4X6&{k!E!U>9iMz}VR@yojnq}#!4c>=Zhe<^VRHw4CE^Ew`E=83|%(t<Pqpg9i
zjYSs-{qJKN#Sfh5R#L^MdA(u759f_f2)er_H1k9<`-~eW5}NBOp^~fh0zdV_vTPww
zGA0(^+kOV>Oie96PY*xur@T{kyuaV?jX$lY$03`y{({{acIs47c(Z@oIWPS>1Kqvt
zcpWPsODrIx^zDYi;VEnjPu`Yqd+dmojRzl3_rEUMObACi^{d4Hlw}R?DAwBTXKUQC
z#rPz&2y+U)QEkqBp@EBj*^j;tmeT4?1O|rr@yywJuv_#pYk<tDKFQ3KjbX;+UInGj
zDC?e+b3N6&KDqmzG4$JbzY<V`p!Qnsb6s*#FY8pY(YbJoBx!UjF<Jh$`@um_g8#R`
zA_@z$1f?MK8!^HV)K^KgWS*xSFFfH6)3V$8lj%y6|NFnSxu96`W<!066VShqYMlS!
zZpO-x`LAzg%9ZpSRz%?6Cn}e=><GcXiQ|Ws#!s-ZIIST{b&JO<M2og?=1K<UpU4bY
z4}P|LAQINBkL?L!L^o@lcX+ivs=~C;9QBB&t?%pOP*j22c~?n~295sg6&{G+w}-st
zdLJwH-xUxxqkXl-9;}*zKt$ENc?+)P0WvEq&f$v9;E$!x3NY{Ln<t{Lt8Is}ba?^D
zo&jR{z#%U77qE}aBP1X|{to6X=~l=`%r`5I3dNg?-5?-L@&s!PCh!h2!}pASX5i}l
zJ9la-mSpMf&5%Ju#yndp9D6z?h7yfGS19b6{Ym0bSi<OLuv@ov{o%(M|438z!6|<t
z(^CCx^c?BH6@RG{J|ZSsL@!lwirDM4ESzSu*g~`yHLBl(ms7**J7A}b5wE$0&5$cN
zngelrhV~?F#bzc4O)NQfvKX}2)h+WmVB{Nii))9PmXrEt9RM!|s$%YRR)Mb?emJ$H
z!@bGO1$N@3Lq!-DV6V_?hf|k9#v9<-@VPqfReG7>``vIbJBdrNC&^J%z>Y$B#TK(7
z@yfaO{rM#vV0knaZ9(V4t&V{*5kR`O=+14jYkdB)PP1bF_`}1+CCARw`0(-GVQu4K
z=NpF?Yir79gQ|AN=hf?=tdA$>V%^#HkX`%tV)+Ny+fVj$Ta(M*v)ZR0N7I_NE92Ew
zvHb%Hv390uepXRz80n-01~R?ZLl3UfGx>8j8NPCibwG=Fa5NmmfvdFFT&qsy98oES
z`zeN8`D3_2e#4qOu!7Oc2G(x5CX03icEDpsxG-D{*o=eDo}Ad~9eC;${U@X=j_3+3
zhFKN}>CsZN272^_v;`ffb{6P!c4Idp-h2aN4_qPwgD#q*zgS4NhX{{~cCn*tZTD84
zyFwD!qGUw_pII7dW}!4?OLvEd7>tlZkxxMu#rK!#=T2Nkba+v?x7?zBuu=`H*sZ(4
zebS^=lri8YtyZCY*jC6+PLhs}o*o-IJ3l`_ik}Rz`<oZ5xIxuj`BMqz=qU|a<tIl?
zXZF@E7SMCFzS8Xq&}T{Wj8)1?K4VQrK998ZbjrZlYV>h^j|kKH%_+JWd{1fTC)0zM
zJ$-!MZNBf6hLWZM;E+R^FB*67UKyVAA;puWgQ?u>*2!zMgrqIX{z>YyC(fE0d#@|&
zG(A0@wz(sZIw*`YOE}Ofv#@X9)Bd_6*TE;_%6u!@b~4A@feTBbU8cBZ5)*8ih@px*
z$|KdoL8rr_?q}cmj#kzo!Y0&4N0MUNuoS4u6zOKQrs7U+62d&H^@77-9aaZqegGoe
zgqdEyAb_1hAc2zCq}`1qk8AcTlbf~q^sG784&)1$DKCD=HQQ{ck5b+_ndSrlcCqmb
z46VAS``26dwu=HobaVg!J&yl*h570}{Oc8F-oq_EPb}{8^PXZ!y*9H<!P?K-%>9*n
z7ZC^q5gc%)qn^pyuc?n9>iqcv3*RWLY^?0O;`qBqys~mZgzaZgYlsd)n183Ye}{l8
zvP$SFHlwNU-QXweM;hPEwEsdiighEEX}nODks*AV$soCSCx6kUpnh+Rz^_F0;eLir
zz#LGEeN5#Pb<%{8!bCnbuz^k)ez@_iL#*vXx=nmjynVSGB{_5>xh!=U8E3~IL(X1M
zH4?pHj6*O4M3DNM^8&s8kgS{yTdXNqKXZfR@=Y-D7XaKendP>UgKNHNOtTH!3?EiA
zjUf3Nx0oe0xo0&aY{}x&SUg3kq5k#>+Wtk}A<P%Tbl)i)3apd5mCmslrM3lZ|1|sC
z$4RhvQX1+dnu&4!X!ZJYEriGC6;wl3{;MGN8AWR+c!H|uvx(;0=_Wy&6uLNy3Er5R
z_|1oq<+n@O1Ovm3F-M{CGA7`LD=anM_foTEYg2wKMWJT0&;zj|-n6KL-f3`t{3oiq
zdVN#+@u+CIQ?^Kg8L3fCU`xIf;~2X+#G_LPG!?`ylsxj+$xnapppRE15O1DOkK2G)
z<Z(eZ3W+=a0r^l%(NCSH=WB^C`)%$bThvQZ04h^32U9>rXkVr_eEbp(8*=W|dFsl{
zOANdiG@UcKXp}^o2*%j<J||-E1<718iOe3P!V*#q{uBr%l1D)VTzA_H@aItItG-`@
zgCx-T?Tg%mv^l~lZQ)uhlQ6D5p;nBFL=vBuCLTjIZpsWSMcDrI7Q2~F8HszBc&q>8
zk>5;&+d2Bo^o83(??Ofl>XQ;}7&W?^N<1RiSipk|aTID9y=s1%eG_^&+lFL*j~<Yd
zsCiM<uPqXzjYYxhA_^i=SkKL}VVaO!73AN#AUVZ_5xrX3hrU+dR|MV0*fTH12ID2i
zp+E$`+57#nz(z4P6%6I1ev<kn@AIpPYCpz8DF(6Dw#|t3|0C=iq6CYYHJi3=+s;bc
zwq0r4wr$(CZQHhOb#?dXz19Eg*%{t*26siQ*s(tW%Gb*9Q;u<jPGV~V$IxL9#Z2#M
z&8056*)M<7LWAzg13aFyNI`n;fvx*1g(BYsCKp`?1K-`v8A@61mm6^-L^6k=;b)%^
z{IhAibV=C)VwzEEGzUzGDjIV4o?TATYGE>yRNl^<C^+UM%teo~A=e^p?ppHj`1{94
zx&yCp(faUqECq2<hPx0=3QI66B(a4Hx1!JGJi7`WVxubRi1o3Y5Z9u02VRV<z{wD?
z(;Cb&#|rwwbYi)QcV(6BbDL%~^L?ZlZw+;6L326%srm_ab$WFPF>hzF4VVJ=q$FjI
z<vSXf`oS1F*HqHplK9}3Ww^=n0g;I(03~vZI&O6(&NT*5J6*ux0$$CncoKM4>{>l2
zVuyVQF5^Vl_j-Fj`}>4T4+qXo^{|}S)AurUw7ym0p+SaHbzw6pPqB}%NPaCkNFi5H
z%{UBgz3<Z-R`W|%+*uIbMzlxBP`gXPY7ZgIKUB9LEy}8<1F{Z;tRHxs8{&=4td)hr
zm(--|rgih~b^0sMxZ%Q%Hf=%f&w?T9Gp}an19<W#rr^XmDyNH%d-l@xhNzXdW2reb
z;^TkI!Wa7#Fy@ioxDqTJoKGfK2yxTwY2+LhFgrB$M9R*gP^G9uPm78iQSmMZ+ciHv
zwFkU~#7132?;hPpM?))^P2Cr-p2rLs)ZtSj#I>b~QdSroD?mG4LeG2Fj9JA*3CHoH
zGdL7ql+oMv8UiBkam^VNC2gJ38l0==CX@IQ>%>d{{hBvIn9e=z2skJBtBFXD{z6yM
zgC$P6v*L{p@TyyJ>gIu-L>aaR+N~3`%LI4YNlH7?j?d}&b}Kc9ryPaHCert6Rr7vd
zr{a@6Cl{~tB`?W=h+pJ?W-Zwxi9idkF<Uw1#i9p-+cXY<G{tc{4Cj}!`5TDAr5e{<
zwFyT@L=OT(!13LSWj_GN{Zm>KP6mhG)Hs5PU45V{VG?@|&z=tx@|KB8c$Cdi!qXZL
z?Q?+@sq^tYxl0hqTPhHc-sT&{bxG+8ifMPxZPb4}tBY|lc~kQB)}D3Ik-8SiDp1~L
zIN;!I{jC~lW~6``CEUJ+CZxKWlSPOzivj?IrqEykLPLiz@;bNu#3^_J3BDxFFszMV
zc1Y2i`5Vt1&`36uB^s=yx1RhcyWt2*tZY@g;kGfS=JzTGHhS$LaI_i0twPyJBDq>Q
zdf*kdNj(T>ysQKgP+vj<4Aaq0EW+we`5u0jzw*O0j1Cc?{?3aDwXjyrFq<yx;eqmE
zG^B;cFmk}2$?IA2BC9geZG`LE)hC!GMDUJMk-;pgFP6Ga$@U7$xNfEGSs&2-2jSq6
z6FGpCyF5C%6<<WxE=B^GYmugUC*Gqx1nxxaChEz}W$eYTKg8R9mHBV+ROq^eOsA@(
zBzdIW+>p|cwI1(s2Uo{bt91JPJFdC+*u0{BrTpIrLM590XTx^BIrM#PITLW2hZE$v
zEf4IyHjD_x92KL(%-qbsgic+4!148huTwd^b7#8vkZ|KhYtkAwC&L1m>^u8mz#M#K
zQ}abf$TAN-h!K6gUbeLnKH!i-nqC8lC@_g-2pW?Qh${u&A!q0b#U9uhD6@nLg)Um6
zEjSX0We55PJ?t!;$Nlt!m_pAZ8acLyn8tgiRG1#OsR1PbX@PN>9BqB@5JqGS*?)^|
z;4P9Dg@6hvyv)r|xt*4A4Cs(}NpuJ^7?B4$rIS&k?~GhHpk@0Z#!VeF1?v5KIh{75
zje3%pfp2HQJ~Cjdqm_mnv*?2W@A88P9Nn0e#S#aN_tT6yu;U&biU~0pjz_i;Ch7~b
zw{qP&MkHf6Md3~9rK#m`#2o+3!8_pLV>IK~RyxXwn3|^6FIsh)E+A^vUwO5@%-}{Y
zzJ<rHui=`B0dZ9l+jQettGUqTn%ui%>up^ZEzI?l<#fL(cYK*uQDjKIm2@4olp2jf
zkNl}Eso+}pB*Zf50}xfTQafWHjKor_>RugODql`Lkzk6#XjH%51El^dxhwUVTzA<N
zkv?h{c_2pvnwHW5RtAp01c-{mOu+En0-<joZA6YzM0}3BO6aqNyc^GZ5#wts=OuRG
zGFpqw2dRH#dGI<`z=f8dM@=OE@@#HI2~<nZJ9mYKVh~VY<;Zw?+(ozMo^Vaq&|H^h
zZo7Q00!L!;)MT$bf}JCs?%<$I%(9c{QSD${qc0d#YLq%eWh8Z65)b=PiATN}NXed6
zACBa_aP;9M+9Yt1W32Y43LF}D=LU_)A!GHU>d7=QkO%W~hU{ft1&^o$hQ63`6oZ#3
zAxa@>Cw>YAm6irK)HM7+!V#uIb=No*ec$dtKaF_An<#ocE=*})d;G@DDeLgt+6o`Y
zxdmq|6)r*RILzDc8Fm8JIB5ZjwsGIOcnw3X-o8me!s1Wt9OqqEGkfE}I)Ut<IlxRl
zOEE6jMnAeV-^VurZZ4>6^R8RJnOseSJZgbRupBt%$@$4Z5d6^>%Yb{z+~lyV&ROZJ
z(7t!=w*gMr3Mr??iJZv5@L>HLvG4mYH4;@0LT_x4OVpqXs76z@c4-k3631Sc5@^|H
zmatlvuL}gc6QkJ@S|R9}h<xbKF4s7_wbUz#|1Cu{He!h4Cr~CvC^S#vAE_(@dk@4a
zvnUakD!d1OHm-rY5+v%HHLZ<|OIS;M##{07)4c_0{Dbe|k$8{H{tFb;RP%u+G%3-e
zV5K7x9!9>y&1k2bsMrm01Mhf6*{y;FOZRmS@^^*s*QV_`SHrZ|W%uUEt4Ch_DkXgK
zgy)P65{fYp-QCdo>}FGUsH~DC9^${)WVg;Azs)V(bDmUWq+fkSBeELE{Siz1&vARA
zgX_l5l!bM9GZ*fWbr*IUgQ@p3wK4l_9Z44J9EUa+@hxZ7C6`lWlc<8%%!c}rj#gBN
zTO7xM#TO9aTDo+X-$|S4)ROFC1=Cd_sGN9smCv~4Rn{(iaR3pWa8Xf$F&76-ILyAX
zUHTakrRFxIe5j0|VQG(}h>hQ&B2$yxVQI2CDFGaUiP?j|FBfQKN8Er4HS9v9VooF6
z$|nppo`$>yXRnN-?xAYQC&fKoi%!mQHpwHSK(^6v=;v;sxuHqA)?*&-4GJ=Pgp-e&
zb9XYnd8YlrE&CoWOx!V=0YRJQD~;=G+80j{JpKCF(n+EuSJT^!lhq!H6TA`2vKx#v
z(*xw+S6SSD6HYxz_1f-bpNtBShea7KBcBBhgQWHz4|yzC!7<ssk~twU)S}({)0cMU
zGg0=+gl6Gg2<d^hfUV65!QW~eZHZJqNK*rp6cyGqNFwzs>CvHQF*`{?S2YxB-Q84V
zOtF{;XMT>7_J6v-xkkgMFy;Zzx7@2u9;6dZcrMI3yEzrw*Ii;jsSWUmTJ#A;rpbo(
z*YM-7D3(i|>uS&^tubL}6{}kw(-*@H9sjzOGgblpuw+_`>EhH3MWsvvuWUl`DVguR
zIOtf=4fp4!nm{i+UU{I`2#6j8>@9fl$DP=mb@eRA5VKp^Hdiw>4xqqzThdqWLQAkk
zMIiL{e=Dn>5YQC*#t6RHONAy5H~a`lk?RT}xRvn`*JJ4j1Fd@b+=2xHnA+G4Tsq6j
z+1Oe|yMEBH!fa|7oeRgOgYvMO%mm*fnSf<_dI}VB=xW5r%Z3MIy$t>!pu=}(Qw(Hl
zMe?g=ZR@X4S94FdW_}Z~or*T6!n7Z_qR`I^_1eK8)%>+BtPb?}x851;B4|`UWtehJ
zaL>)1V<yP6Bm~K8l?r6rM#Q!$!=0KoDMTU^u@ewyC|T&C)Lr8`xi70bCFL1odJl5G
z#R>!LX-rt2U%XhhW<s2#eYB(B*^Y74)RAVXGV96Wj`;+eus;5GJn!RP5Pe0FN0v(A
zT>Dejc-`TBqo{kazp@CRnm8F~xJ~V>Sks`uhTgNnuxj7f77Y!RwNN%a9UjE0Cp(mI
zn=%}6E7j0*+Pa)r&0e8d;vdWwQL5wiK_|@{F@-Qu+w_X?jVthm_DlXD0rZqOz~_nK
z080B!07E)OS(A~>5`NPvq|Lt>CmbFtr{hX;5nvtn&;_JgBs3EkTKH~9AL%g5UX0Nh
z<rtpkrmC=Mw7ev#=w~c<P;EaQQjAwv<0EExU9M0z29~uBugk$BBUdHy_SXjGAvkQt
z&6Z~s<B$e?D~O0nH#e0;FC#3XGKXy+E_*|7e8waQjhc28EVWu{WIU(*jJG2^RtTMx
zmMD#&r>Mft-`*}|6iDC*&l5*J^CG~Xti~}}B~Dm?LkNqW?tM%n)&d$ocQANu@o<?N
z+td;cRq);KZlc&V1B~3UZXuP75i8x;uo5?Yz{n)gkR#VN93ZsYDwGM*dFt+2nmM6d
z<zQup!O>@;!HwazmNv^^eY`_;0Y-!C+vb`NmB1b*VL2`%>i&p9hiFsi!&Q0MRnYj(
zQKdn^68e~jpOEX}yR1%Hyw(S2!j~Wc+?PA)5^MCq_eBcHQ16bfgXF!gAYnMCQ)P)3
zA#^GNIRZ)wBWY=d_8`<5JvB<b&ormw0v=<|dc{&GEy_VBk5-sgWC@4p{%OlzL0YkV
zjl)RyAi1C$YJoERnmAFpUZBW<(jG4d=!oc<!_&3|#6PMvuQu~g*dydHyV`jm1c!o~
zC&n})6T>h~_%m__o{oGL-FfEfl`1Etps+*DzT|F<wW4Y=U((TAn4Zn^iV5jf91`*T
z-2&4d?oS~tt_@~h>9iAmZr#@2EE?G?%vRIfAQkv2^DyYQ8<VttGhZbNZfK&wsZ@y~
ztK9fYRSnv_GLW-fizz9%({?f&6?wl~S?5vD99U;^ZE@IT6&VN@ZP&LzcC71iljB{n
z`Y!Zou*j{B4e_A5jEaDP9#~PpP<S&{L&Sc1wCY6(wk*aWx!@PtVN$M^%$vDHfr|WJ
zq19Am$|RAPWZdc_Y>;r(6!Pgo_$XaqP2>oHwboj0&5cW?IGO;TPpsp0TX`&j;N>2S
zdgRG~tt%B;8-^ZE{pC;_8sF&Zz591&{`ZG-tf5uJMaf3JjonO?16{rn8*3h8c_<(}
zzz-IoJDJ>0D;*v`7}$7R(z(D*2Lb)%U#DN_k5oOa&M%;6kDJt#G97@6?~T4U)i*oR
zF9)4=MDROyhXCId?1Wt#H93E<hxB`Zw!EL{x#s*(>U(E@E*A$@^Ue$W#ERigXs{o~
zg9@GF`;oWfmJe%K{kzgRsvIC{w*|+~e8f*gNx=EtoNNF&8d_kRxi;vvCJMJ%V%=-Q
zLv1<OXSKUkrNIX$V$a6v+E%8Xi4_ljxFu_z{OvE_NLz>9`sg8W66^#|AfODn4s0GC
zIo`9_YUd7L-}d(Y#~7BI*Sn~Vw0zt-y-e_``xw#z%eOBZEq*<%{vR(Pe!a<8>ATW$
zJ(r}^>Y--pGxptut6hRYNv2h>VAQokz_F{4>BB}03m~5Gf~(dO|8?8Ge+^CFJoe8?
z^12Gn9En*RJeJ>xiGFJaLr_kxz;;fUPR26UTZvYv8N#YLaKSr)FH6D?s1q0(1oR~t
zRoywUGLFvS+6#e=nT32Zc4@`6pkF<`>Y1iNrnL=aW&A+_D`x)om`mglxgtvLM1$2%
z;kM|?RVA!-f;6?xv)y*U2tjP?wVASSPzzE-quk~2U?ZQ8c{i)KSNP(m99#!RDPs=4
zf6LelE4jBzaEd2&wa5cxsxm-4Yv;E|6XZ^)jad`(+$xKu)nmkmr(`<H`S4G<w*eTp
ztW?updOp|kv1jpGYGsE^gpAzkoF$V)+UF0mw^8MYmHS7)7M9znEjx)Uy;(wAyKy3n
z)_09L><6rJL?zU#e`eUL|K`JPsT?`b&tKAUp4;9c27)O2570jrhU?Y2tUfT@<8u#7
z7Ep`T6#j&BK0V68s!!Zt3MPCkkuFScz1)|0r~d>X()e2aJzf;@lP}wB9r>B8U~XL%
z-w-<86)IOed96S9Nt&1sNu=%>8YfDXXQ*|_=h2Z{8d$Skifp;O4{;$cl#al0EE(2r
zS6$Lq>W8$Mj}g~WO0Aq(tu|fN_Kf0D>97_lkStz7ynOT!d_w&GnP8eGIKBQM$1P`C
zm0#E351Fc2xVflja-0FXK)09=-Y+R<>E9Fg^%`0Yl{&Q*yDq)=zQ9*D4<N!Z38(Vz
zxMZs!k4tW*!1u-W54=ylx0L7E(hongdcEj1^(W59U~j2%dyjgxNZecwD0-3o)9JR&
zlMOkfJl#v{T-KR8x)F}4U!BLbOV<;-(=E)^uf24FYLi{7aZR#5)I`1#0{!dF_SWWk
zP{R4k(Ux{VPx+?i`IqUB8xU*=GMiYM1dzaDoEoZIvdwvUZDQ_gU6nK1y|^|x=K+VM
zna$348(Qbj%T4iS=ZIfGaJ8!@@C~f1v&fgJWVwEd#(v{n)y^fwr!$oW54yt;O^M4`
zk64qhBc)e-E*p6cciQwjz!GxVPg{P@N>7{DRu1YO9zhd7uGcG$FVvmemK<(2LY@9!
zynA`bb+-Ju<i9T#yK>h#t`jy!A7nZ_PSi)uP(0u>m3Wn(AMYxwOC+oK4lHt)J1kiq
zj`jCW)?B+RE%d8+wrdHOYK!<xJG~t~rXr8y*1aX4{SB}54?B0Q>;!VNsbu(uUcb|W
z*jby;lfN-fFAK-62CzQlYkS>2K<7!zmDF2YL6@StzPDEU&UY$!)|wGFCeH7=wnLv&
zx0vTK_dSTaVjq3twt?3&%i4ZLjxvAqE{arJ734O#S6Q}xr2xGdPpfCUUx-$BUOKCu
z4Cl0JA4-P1RjP)eiZ$81Bo3@L!Mc_j@Gk<{VKqG?*W6;yGxqgzK5u=)&~U-uAdNE)
zcDRo`kR;rv6NcbbIzfFZ)$@y^4M*mg`sQ}?H9UttDBE4RBdW*9&A)}?7n;4k%=9uG
zwG8~>x;fTJS2$b~d!_E!wHBh=a$jorYB0ph=AJE!P3}#M_*sB(bq;5hZ>`;a2Z74&
zYsh?fI|OW1q^nMTGrrTYdQt~|>SA(t@;hwKk&eSrB>)^W3+$biAL1*7AGAECe|aOl
zzN!T+k*Cdmpttxo$O3)w3b|o=z6=JtlFoT47U@l+Q<+6x|9Im+?Y8K(ewLpKf8SWK
zyY|j*PgC9|bZzIlj_+)a?aKUlyYpInV)Z`>p@*fDM36&jPsYp9+Fh-Zz~g0QJ|8q?
zSoQkY+S&T~Zv)K$UM~ZSe-eQmVgLZr|1i*06cG@X5utN*{J&EN>%ad8Ip6)4VgCO>
z&Z{;5ZB~gQ{mkgq+d*aNs5>R<Mhd}E?s2+UW*vg0Wa#<>lSF7sXenu@bS4#|ec!%L
zO(kefI3!Tl;A3TMWoNIN=4>xB|FZ;8)MmR%EbyG9FUlH6tF~98nXI#Q$d@Sk6faM;
zI}9C~Rxm`*bX&KWCup0zNASt^N}H=%RHSRBB^bX=DI=6sxbUn-H$dx_q~^FAQKwdn
zOL9#oY717j!d-e)rgSV|6cHZ>u-RJb#IK;++SV=&uw70Gp^quBDl^NLP;7p540~u4
zpJ<|DHA3m^cZ*X_ca3LU%j2ttmXcRil{Yzd<HeYQ=2zK}n=2&H`!vCO6lN+di2n-}
zm!4sgTMks!IH!4<oow-QRORel9fo*;QH5X7N!TozuW3;+s37GCOrd-tvXt`WH$dkq
zXTgq6PQdKuyaaY7Lrl2)bLI)ky4ph69;SRQo4jaWG~46B>tLdj$_Yh#(wF@qG;*7G
zw9f2|xMU#1bxNvMV*jH|E0JDpjSUHzK&WMD&&0!_qOPJ*tBN_&FAGvpJ!MNf&U=fV
zFkV75o4T@-82{?l$#i3!FlEvxyx+_B_WOh%u3FopB*tQk^5x>R;p^HV;Ab|3e{nXj
zM7<rwgK0O^sH>-&{p-Zcq3C;4a#WnZ^{!V^w?HM`{v}^%;bdQmdp?jjVx2=g_#xrj
zKq-;xFVB2hWoNCkIU)r_XQi<L?$A=*9zX#xyA(uLWu2dRB=s!%nM}JBMqYIcFG&<7
zvAij%MB9_I6@@ww?yH#bXrzj2le~S&ju21|PaU|S>uei;v>tLu;h-yc7?0)XvzJe&
za5aB+xc7vNCn{QNj*+=Mr&s0qrhZ=h3`WY9(iX+}_)f2c`J=9H$o|l`1q~^mhCT4S
zv~_fvT=OE$R<nq#8xE2yxy^23UQrcgH3WiNkkLmSQ&1kMoSkY6lV24JgED3mh3eOL
zY9+yN?v4n8Lz?>}Wv4%L*#RT|!1;(tGqut}ilbF#^(uq<WZz?)7r+L<<!nV&n;IlR
zhy$lPIEudOMNKTHh)C~vvQo=AD-ev}$Fjn&>VGV|1?|53^ZnyVpsAHl6ML$hZ(==m
z{P?f&_HMIiIK~PbJ#n2@Y=oU7%OtkGs2ZP8Og(w^O9UW*$g(7PgWT-l^DSCg2XC}l
zHQXigQi|c_ZAppxIC+PjPZWSf!Z@DeEkRH8mCJrn3d>4pGbfj|tEqFB@~yW47K@LO
zYr6oG$rBsM_kag;-zOLp;|Ky5_e2?K2|@n~6ir|fZtQ`F-QpDDqlT>dt`H$}RtFGz
z2H%!{4D1@9LF>p*cAU84e57XCxQyVwk=aSX%=(K~b<|Z{-yeuFi40{M!f*k@U$X~Y
z;UT1-4d~WrQhx5APYP1Vj3S5_0LIK7_KQWxP)NXM+rsJ@gIM@l85l)d$m{Gqz!?by
zlHqo7Nf+HmOGh{nO;|uwr^6_EBf>XL%ZdZY(@!Iy!+kx%;ZDBGk)$TBD2w(ni0Q@{
zAm}Az{%Gc(&7g^NKwMZm&ch!+SyCV5Xho|C3AgY>)gncbo7&;8*O^*?(;G!Qb0z|{
zY>s(ilytqg<ty$ue)2iNt89^&Oq<c$(X88hga9WZfA-jtzeL%J0BQnS!vs=p9^RD(
zB=2a=_B~{jc=3b+>*N1LJ1AucT_mroSz3DbXi}e@pX3A9Tu_y)5L*`y(XaYhbBkDl
zms<&*E_^(&*p_2<mbGRgRMfQPg5~HTRf$3}@zUgHLsE|PPgW*t_}Xh()!I&L#Qw^Y
z53ratt6-5Y%C48ID74KD|6BAu2tCrsm;hrU3v-rxt9oEksR92die@6tl^elXj2OH+
z<k3t6ktT}sV<<>*ZT)A-fc!^9>A+X<r`p>Pg?1%2NWj&b-ghHIr#E(0VKjde$z0$#
zbyHm^2RZdYwpv6h1w368rEAl*Rp-m4+0m!bQ)*ymo5^YMQUI=`zG%GTCv``*r5VnN
ziYkp%++VMHToz?I#9W1dR=3vDxwaJ?^P#YZFza^yvb$QbHF3Ox7PW!$gN;q<g<VDX
z2E0pmucM-o^h+w7$gw^!<K)s1EYtU_{9~s9)A|5vP&<iDx-P+0mw$ydcwhP4DIE$v
zHjPzjBUavcze~(kdKpxt$FY0Qawx<#i(TH(99z(D9=NrkUn@-#ou1O8U<4WtGZB?=
zfrr{LYfHFg0PdglCCDZn-9||=jGc^lRKdEjPisSMY^ULdO)n_TfETYln(&u;1IjRd
zy9@e^V^+R6WFtxliSbuROBdvZoXWK$#BeZX#oqLJNS(v;;Oq(GniC4>ve>Pp#&l8c
zjbK9L4m`a$%2j6@nICL#mPmHqK09`^N3MoY8mgz&t?cA?_NHqW@=K(1Uh^v=3Ll}o
zza+CwIZ?oYZc~1I6o;V?FHXp>&a+t9_R=^J^-eAiLLK$y0?ny{EMdRPE^naiQyKS(
zUYO^6pZp7(#(SVwI11jQ?X`9aUYaJPf%|V0vZfx2=!AVMBhPMkWLwG$-lFFpF1rno
zz)Y)^N|?TRjUGunz`tu>VxEt)z_=;B*t3o<$yCgOJb2Dpj{st`W6*~&X&|RjX%EjP
zzL@I!o*ReOp9A<J;jiom8Z(>C6aCyrWfWFWt=&dSG~Y^pU=ww$$t`Ns)<*y;!KYqU
zRF{gWHYaaJ;3fJv#%!+5Gb6}mXS))^RP4>y^nN2S#>PT&;iLZ=E*>6I1T?lSZB4Y0
zJ`5?@9!&@xQHKp35;6ld=QCmM>fWXk9OQ-$|IO5M8AghBo3CsHf8iccUJw&=Dhr0C
zaXhjC2)2L7>5<~`yA;dMV9_|P%U)2y>!^=%$eDpk-6RJ>j>f@yl4Z99W>}l!H@{qb
zJ!N05oh4tjwJp7+yWP=_9bLVpH;xThn)&XJKOEnF9zIeih~UB_z3~4bfg?`k+SBie
zkjgGt;q1<}4qcQMzra4kkTCNEna!v`WkRxEpwhL*1rrTNpPoLcJ48k{n0<}zUS0Mx
zfle&;iG+bP4$1<GV&gm-@jG@|nd9BC5SWb9ZxTz1w%WL#7klD#`;ocSG9mjWBXjW_
zk`u@^G`x68HwRBO4@32hPZ&sW=A+Fsm!k=4VHCsWkP)LT5;8wiPPz9$XR~niKh;MM
z#&nX`z2X;b(R8d}K0O}-Yt-6<en|UkC1mS{J5##dlj9kr_(z8k2X~NQy6X?T=~WY<
zuq`A-+itNo(^8S+0<rRSj2cYy&Tbtf9J#UpY}#F<^?EqkAvP8AEchj%1q&K&#2=Hq
z`^(Y}Ilu2m>NEQ8qbOPZnJyk=ZC>KZn2s2rf<BL=4c7!dHM__^v@Y2a3cbbF%|-5a
z=zO7*Q6%m;3lyATtMK4AMrI2;!~It*2fGcxhMI>U+jry+5k1o{H-1^1F&c3hJU#Mx
zN<HZ1ANjo({%<!u#b+Qh2Zz2$Srv4uXNWTnW*byEaAg|g`WxASZB2BhgqnI~Ptr6a
zMs%f(ZW&$PuT(POA^FQXkDCiqvr7UR7Or9qJ1#9{zxwyLc)kgH5F1l2gQiL0osscl
zf7;W}yV=?xF9+83LcO0lPEdZ%t9~lMcoR75?B7(RdFbDxCJU1Re`3`5F%DHDWJ8Rv
z#wjsp?vd;ED>)UKswI`SD~-)hFQ9vCN{<qJBlMY4l@jUREv{#N?oliID~Pj|_>9i@
z>6}z+%VnhLMicKV-HL>HtmqNJIWmr^%LITzCV6SH6qp2a?K&~TF1lFtS?+_+R?9!i
z={nS5ZFzCCEd%ZuX1|k2hYlz+KjS)A+$?-zUVm?PmXzBEYUhPEY*eID{n4T&;1>C=
z8-{Pn_JnPoZi>=Anss&wU;2W$-wxlmuaDihy?xzZzc=rXE2~{{_g~DC{Zucj4noGa
z{aZwJR|9^W*g)DAmVlwwJy6yFl3Pl)B$i1H;S?9zVho7@<t>VUC2|l4paMV}AYxWR
zj6mj~+TDscraT9%+uky3l8><yntzwdE6`xYTb@XGp#(gu2fXK_rgC+)cVtEuS65vd
zh1IYZ*CH0Z6InxS`RnYgWtNSc&4n@>8iEViLS}r^=@u8aEux!w&*}O<uOchI4ILg|
zLeH0<r%A#0XkJZ=b!5vw9g8dST@2z*xJCeeV8CE3JYUB`Epm9Gc(|DYH>i?>Kdp3l
z3t(t>J(P0VQRgf^=KeZE(O_P@VSdcJx8mGBNpSyhE^%~gKZwhPbYlP9c2N^!fjP^%
znoF<vx-YjwSo{?PXngOe>HXkbLH*XsBH;=243|XU-?zvd4?~3c^cZpO<%)8%0<aQ_
zA-n&YnAo~o408?ovVVu;(0*bL{Rv|J!rD*rs6tsAoFMCMaSG+4skdnqRhf7r;j*gP
ze=9|Fa+!a=_#WU>dDUDEina`dc$&9xvd+$jQS(AIsw7bs8$!u>s~)^@MR5>fV~JWh
zD9m|VMeU3OKS`|s0Q~NrxI%`Avl|REygw31a1!L?GMv4B{TQK91DJYC#qLBk>R6r+
z1!GPA`fvGxW^rgZUH>#f{{Q6m1plFtGqwI}ZesHPN5`^N6#mKVVSHX|^|@H;kXOS4
zbnRE4ZseWT8S*;OBy_=GAhfk&n%7eZ$7LF;f4!4vN+(iuJ0U{|!;i=xh(%yO@t*b*
zR<Zk4+XL>yzU-rVmDG<=YAiLUPu1**-^ep4+RT(^f}{2dDD+EUNv6t*4q{3W|DmbW
zDRYtwC>d16KuN$#O+<IkC;2MeFhqXvUH(iv{KKd$2^KiX%#fJW6my?JD^Tj7ko1=U
z!zzLX)5<n|v{9fE2T*U-5egil&mM*OcKNKZYs;OJ=f02Tt>o^+2(-qEkS?1PBlEia
zRZTiI%Cxf~gU=qg_E7>8L<fefR?#7BSrlr<{ue^Cp2HPIW{Oa!s@`c~GSzNLzlUQ*
zlIiOYy2UI;sKM_~4n1AzGb#V($9{ag{f%;BC+KcFb8{W~q`@Sm<EE<B{0ij^T_}S+
zOP+c1G=yj<>XOvM32lDT-~qz>=|nZEC~hV3ZYdHK4B^nzbyMz2MRt*#upu?()Q2Ri
zx|k7ia(gM1fxXHZSlU$@3TY??(^Xb6w`FSps6dm0RiI)_)D=o@_{~@1sD(yjT^7I^
z7V^D&7;=|Nd*06g;3ozB7D}W(BtyG@KxD~8OR5z-(?>Grq)B8n!vPg(6+4ZxRk4h|
z+KyjQAjxz)@dkIx0D$daYi;X9Pt+z=%%A7|@j4K>3CTpItJ098H4?lhCjWdNy-KSW
z)<JKIrug3$k|-WK2pIu_V;OJJ0>8aXpPkR2C#Thkv1(th3N~o7YTqmmD%!~{Pky^u
zohqBiZc8!}#-OMP0O+-1XwWhQr^luORFVb_4tKsPrOlYEHU<X9F6WaP^->{;&+Jj)
zX3!6<ug{xp{mij#Ww;E6|8Y_ua7vsbRkQtK#o~d?D~HJT6JqZ&<;MFh7#(^}``Tl4
z_y6CAKX{3`JZQ?S1px}3k9D*|f%p?_#u_KDE$FqTwmCV@!}#2Q7PTZhkdCXs&_LhW
zHSBBMQybuxrIzEm|Mq9jKBhC@o$d!5GImzq%J!w4mGw<_4i*EE@0=qR^lcq9*#~BF
z?@DE#U>aTExdsDI&t+8)gpMyIXjH{b5{wK#y|uTTyXVYfV__L0H3+T27o{a$f*+=A
zKXm|3?@oUeS%0T4uyW%iRtfKMDaw|jv2$k^6OFFk98$Zy=g(e;*=zJ|TDPTV$+y37
z#>S#-Od0HWn3GSsK-s4I;qFg@`t=`*mhW%VHPAmthIhFiL08~&GCxvkeEs{<$sYSZ
z;r=U4`V#HizV(k)&x8BVG^w4Xks~{uow4=*WD<y08+R!jL)v~-d(wplL`rEo6Cq=!
z=pTpS0!vpw%1G<^Aq7)=S6TKfb*?hvBBaMed==IH`N{N(10tE}kVrwYb)y;E8v$$>
z0i=2II|Z1k(9%U+$S)+g0s&|`?;xsjiwR6f`eyb2g5?AaknWHF8*bSgPMcwrHf_;H
zPMv+?|APyvPXmO9Hip941MP-x<SvTXp&d<clAX2Ac?^m#AO_S#Y{$X0)yO4WvlBG+
zk`M7rjnUFQ69{P10o^~ia#ok4kl^@l9Q>gO@{RcRQFbR7LP^M_DIYy+l9+Qz^*j_x
zbm3$-FXiBi_#sJt8g8>Dz+Q;a#Xx}Pw79BO6W0t&g=oD7cbSX>PBRD1=9W7fw}!)^
zM%6Cl<x-9bnl3?pFpI&OZ`3`fh8<c?Z$EFGGMX}~n1@h1rSNk0LpuS(?A;^WB!JmK
z5KDWPWe8uK5zd_m*G1>ZW)siwf#7bDopj{Y^%(rZRQ!STeiDG>D9_3<Hk$B<4EPK+
zW&$Td)p~UNCvJNRReSST1QPNM*<O^eEz~K|CMGp*sT{9V8h_RUTPu|C$sm(~71dVx
zMf`jXvn1-$+5wPWL{URTITb5-_{9L4bqF+48&EGW-|$%x0#TYb7t|xDesz^x!YjBz
zlR7{H9M4^n@-Ku<@i7gbdnFJvL!fymKsx2*xM|8dlS$bOwy$v>0Z^VLw5vNsAQZ-6
z%`Hcs^2n$Z;FLW>Chwxf4#TDQkMuVI`Z|!LteliUQMdU4)yfJ^DNS-sE2)u}TLMJ3
zC%I0ymhEMD>N>s|3m^wGfMUAw1b@>Yu2i0ER=f;}ACk1kfeDKHLZHNbTvZtIphGcn
zXVf_y9dwL85*0yM>q(I^O`IhYwJz$~+zIQ$e8GsHeW-H9Y<%fy`O#lQ1FUihv7RGe
z*RLwjaSQPZyadbqWn=$Q)d*#!ae(t+XP9*fhQw%zwPK}u?fBkpBF;|Z2>~j+4w~c#
zO+>!*yW)1v_B0u{n#p6Dp7o)i>6ogM{t+vnfD5asa~!z`E6II_9Yh7kBmJD5;gGt<
zu<>+Y{9a1Mp1<tL`(`MgFTM=6f@|KQq<?1Dh$)b<_Bl0t$xK`I<hfm?jd6>RH^1dt
zdVx;vSilB0fzZgId4X$vC=$fIV<WPn?=ZSel8C{<wrfO@ETul6iy?@RH4|;l*hmo(
zgV5KvgM0*6oXYM{=l|fL&NtVCW{UvozACnXD;S6pZkmtjz%-Oq_ZQj-${uC><>@ZL
zNn461%%mvt<KrAFIIrbZ^ou$Requ=$PL@+?67;PQQ4hsACrz?!4=CFJeX6h2Tr<F(
zw7<p-E|YSmz%?jckpZ98M({x8s*qH^a6=PL5vnXAh8V?W&|fiiPwwxU7V$%FJA;to
z$OZiuknIq5$w>=e6K|y$9<>uQ=&#J^{x4IAv=e(_v}jQL1MM7JCDPoC+Bbt>k&%I7
z1~0*G)!Dl_f*tD*9cKmYtS@J0A$e{ZFuAzr@6m;eXD`nVja#GZh{{~F<V9v|lYOII
zAlJyk#6MQ9<-KkQ^H_n;M&ecjQ~Pv>+Ch&{t=Xkj7FdGmV?wpK=eRvK!v|i<H`BuY
zi9{<x$Sn?gywR0;;<222TDFr^esU&j!va*M28x>%$y={NVsIFhfXN<Jb`Q7Fo)xE-
zw+=0xU$UN~u<G4<^pJnKCO@GyoYxr5aPGa(PB`!5DuY2R>#{%>$DeDqsB(IhIo34k
z)=Jc6;r!8x6AJj#kuEF_ZpIrK1|czfwlCL-_0nUXPT@7Rrv6qj-iaWYMPnh|dxwns
zBv1hVbUl3NvZ*C~H7TCL^qfA#^EyD00dZ}%^fq3wO&T$zR}lY~F=BT)%xWwDiaO%7
z74p-1L57NCF(ywfUM`8Ulj9u0<)Zv>p_t7A8G)Bb<b&Vu<0cGZ69=FrL3Rs)rcP9S
zl(7J<casv~y=f^4*vd3%6PJB?ogwDdU5hVqbr?QYkcOf7GvCFM>iqUKISbX+%-3=E
zrgLFaY2iApp&`(g>(^Ud{nWxsxJ$Kc;^(v77@j3DA^>qzhAIbDp`>cs9+?k3<6=d^
ziT<wh0>l3F8ZY$w#_ivuxR!MCe3Z>P(sr|l75w|eoy28WWL5)!TH=ej1Dz6%p?iKH
zb=^Q|KM3v=NU4j22V68VUvMe?fvO+HpCbeb2MAl{FLILvRRTXu5w7<K)Es(yTL%r1
z<TE?YtoIU$&l3ff2~y2U&z(5X(_vfs5V)I772Cg^(V&(Q?wvH80jU2B9hQIzHJvKO
z>-!gUVnnm#r<*J4+hX^+3?+tHBz6*#ni54PkajyCYNY7#P1y=d9#dx3DMIgTS8p=z
z7p|X-^;tT_n6=;FpCG(C4w=h?JxI0GGL4uO#NgDPHv<1cxnzsJPK<w}BXyjfe7mlC
z?d$cFuG#53%NPhz$ztq4mgG=nE%}n(HCl^Beamv3y!KmNec@g5+64B`qx&0uDuuQW
zP^s9~``T;VL~$!^9$8C0y%eg|AA^sk;dP1c)Z4pb`(E^{1o63Vw|B_McC)42#n8dC
z?gj@hc~`Rew@EthQrw%|4Ko$h)h1kv3m%qk6bEgLY`#5mCqgfJOqWB|v~9Ykz%&cB
z;a9z#A=f5toT;NP5B3_R%ffP^cb~F20Kz|Wuuajy1oQ(pnth)yq@sOXuYQl~$y0mY
z9Hl?Ti67>UoUslB!4AmZ@F|p!f``7tj$ZwhRf@u0EhM_j5;=Nx&I<eDS|jn+p+2vp
z19L2zpE}NUioTrDsPr1=d~t%UJ>5ZUk4!^vO>dK~BE}44-`B*@4emQHg-XZse<m!w
zt5n%3VYvQz;qhm}8Ht$TGCcTt2G~~N<WJZYByC|Yoz!D_GO=&hKRrbE>wmqNTTk$6
z%~|>SKbw0@?Uz!j2b?mR^?LcRO4<iKNo}sLeLz_rt*!?dOB>a4n{Ok1HJ(>2btaTW
zwe0|Uyno(LYkvX$Ysq9i^mlKE1OOmA2>^iXKQvNi1~z~Hsmv{n^~{W|?2H}$XA9F7
zx3%LYTjK6Fb(|Afytal<J8wEir-YbF(vaHdgSh14%rtCh0YP{yrJ$I6%Cq*vuB|Iz
z9Dv@_LC5Pp3$hrI|FB{GE%e^gTNrL*jk-;O9h=<x@cKJ8TZZF`-h<npE(6!_H*$Ez
z6^&xY_%XIiVMJ_wt#L5zha-Qv4FKT&tsuZy(%d=~?tMrpT84O!VXU{iVw<;yb(1T(
zdP8X6LBsfl<Rb|3?9c?6!7%0@j636rfizIV`Y1s@xIbE<=UIN13|QiOqta1I_*kEF
zUhM+%cfeXmb(xnow=QeUvqkEp0M<woERds>EGTn)20jtrC*~bVsimct&mFY-aEhYV
z@l&!YrAj>6FWfr9b6-zqXQ2#m1<OH=xro}_mb1I-@T^gb_7rzA@56_DGe6s&X*LzR
z2X}CNsg8U(W9`1P-5jwg+~%`-nzl-GN@)r~a<RP5HoNeA&OVp!fjf7T(_y&ixo(Vl
z>=|OejzfD&HaT}m-NxTsc{_I_pQ-pFL}p`mdfL+1|8Ct?kW;v0cLeH)x5ZvJ8QFUE
zGC3XX11YB}5%sHs>&?gMfv{i1lEg0a$5xq;Kuy5{0j9JnKc}wM1HvOGwm_5x0$F}}
z|40WRm|M2n4Rf%_lnC}aNiIW+6Csiu+-Z*ZZ9ZS<YP(PZg_|@TJA?wMZx+(@$6@?i
zxIwv&5!~O<GLHJKAAfNO9FwdDd`lJ??+yVZ^&L?zY_~LAea;g_m60qyH)xJ7nvJ&Q
zgd*dKH>wm!m^Na>$8OdSGF{r6L(On9T^AjJ@#jqDYsogzttgW;_l~kjMiqd=RCjwK
zk#aE-yA+BVp0Rr(XSgz$Jvb#^%+`3n`NHrdnJ-ma62XcdHqbN219{&+=N`d#84P4n
z=_vLa^tCSV9Z<Lhqv<vDwTJma8yEEysc4w8$`EtLFwchJ71<>!t5I5*3J6hxhiVKi
z>bUEksOG(8E_bZ}%kNWC;BBU(5N37J=w+JVEjqaTXg<l`A($2VMov5~etDx!^bV$M
zNSvWjf^c=dHN<}+W?G6k7A`a+mHakq-Q1+ceKH9{jlpZDKid*A=aUl{!lB?acuT*H
zHj7&qmjhX}<t4zL7=f{h7^=VCN+FjuBIP5ZVrD_$DWrQ~MfX*$)^QO#DkB42TV#W|
zXc3~WRfG78MUpl)6E=twIAvJ}%P%IlN1>gy%?npM)`N}iZJ(n$$_p@CoN#j*0q4%8
zP8|uZf|04alm`3a#U!%(>#iaE<8|shD%W;bz5F+5GH<Tevl5U+3V}(Qy7*@l-!Z6{
z8PDHjgL7Vb6P4`qTl||;XCj3AKvOILPiBZofVS!xa011G$<BSQN4((i%w+A;=;#>?
zxb_!2VH#YF4E7|?rQaKI4@4pLlJXPmfd=UZR^+y;I9eHU%({2+JK7(;0fH2;;KqCD
z`cnR3!)M5C2V6fhQ}Gs#;$WC*yKeuQbpz0jd~Wuhm{Qwr5E~q}xP^8;UKp>MnkTL^
z1Q97A*N88jl2Ad3)uG@>g0exoc|a25Wd@%p^ipHnh4)p|cjvjQJx;%Jzu4rpTlgaU
zAZffgy7Yyf25d5|k_FenH>A7&wi{5E-<M|=Q?`>|WzwhEol#6sLY@~wJnF;VU}!`z
zV#wzS90R*&WEe0C>to#>Ipt)+oYEiegLXmSwVnm41MQ@+0GLc3s!tz-+&=_a>M4Vi
z%fI|xap(tQ>xwb=6Fy(u3c<{LWiQQ73ku6GoU#o;KO@<JG!ASjt<-X+Uq}xc8{kd>
z>WaFbGF{f)0jjrjFQ`;CQ^_<&0Hh|aH2;8R7LV_2R;E!Jt};Id$3D{CO8oEI5oMHJ
zeI(*X2y~L{<_zd5s`lMgm4<&j+U+m3KShPB{L-z+7uGXk8{e6+pfX0#2B1}bYos*T
z{mGyEL|9<4Y4A|x7VDofycNYlwH9N3)(s4=vj%ok+Z`7Ad-4mXW9dZuJUg`#LFqH|
zR3JY&9Jd|Cb_4^()o_5GQGN8OgtXzkvGu$qEG_tu+z&mQoko-_WBD5#kx*e^0)MI4
zDfe-=Ft&hqqj(D7l=oGuE`eCz0Krq{h9YuA-#tV?^<hjn<b{Ul$H&MLBGQln3MYfE
z13GEs>sSWK)qx(#xu)tAVP9hb0}Zc;@_j@}%RgGAUr<7jntAo&lx7UIUZg)5)k6-&
z$v_+UaH6bfp$yI}6F)FH;?zs>3`nTu%Ieiq&1zARygAp~xS#*{M9j)!%p$ADJao*C
zN0a&HCQ->hA#$@U3+c=W*jUo4k;5a%{@Md+ccx%CXFP9+VY};xP9DvAwe_~n2WqH|
ziqX~YNhJyp8VEHjNpH)Ncr?lnd)k%yxD)i3K=0X17BtI@p9IPy=IxRxK-SQb5iRU}
zPQTjYNy7f+eJb((&z*x@1Bhv{`0F7@>P9|W6w-99rD5ODMgofR%CU7p{9VaY<B`ze
zzr?dRES-fPE@de?H;Wvh*_TCI^%Khlkbo3WMCa&UjX2G;kDkGLRj9);^g9iXQ6MOo
z`)at2DPayLGv8f*)bz*fI_itA;H9%+#l8jP-uVf5UzVDm?X>0-?nw|O0y7pjcbBQQ
zwzsuixe70Ts=-e#J_3LCPwHnZ<{p5j)Nf){w`oSh+fM7%#`M%JwbX|^d+w9&DY_u=
zHH+UWE*3w(XD)Sjy)R&CocO$NoR()fzDo!=;h;7ug`ugZAA&Hig6S&dxjto^U3xxW
zcLdUUnPvNHQf5_BcY)@4YWLLb@@~F_$sd90)!)by=)XZ0`S(~QrndbN!K{G^t$_Uh
zQnEJ<-B2wPVY_&h;w7&<t5@|gE@D!D0bcaaN$>@e^ADh@yYa%}<30o9F?g9%tc`q+
z*m={b&Vv}DJ0<ji3;5~>Hv?4nRBN-uq+_Px3_xrn$n#Uzq4NI0L9#|BpqkST6A?F?
zUf_@i^+l-KidE*1bb+=1iO)`b++W&~3A0oLK-i`hnoesfN4UD?dimJZZC$&h{6V~k
zUCv_#!%}0jI5#!=Iy}rBa#B`OzZ0q3qFC}7>I%}}*CvRL(nNfMZSn}M{aB9;>0NQG
zs$mg)VU`(=ft|ye1DO7W`GsEHbG~$Dq%~Hc3=)69`8h}2iGMX}U9Ma51Q^@GvpIx$
ztxJ0(T$08*_q4CJ<Djymh_-GeUjHD>8cD-sleXV{wdpt6h5ab}vA!*gA+75uxoWn*
zG0ySG2tg2MNF4q91G2^iTVDc}(}jvw<cLp_+@&{hJhtorxx;ry-l=*_ixBlk<$A$O
zIEt6TOYxd8Xd|z%D6c04f?leiCC#P$DXqjd1my*+y*fJ-c3MBnNb_mAdP2H8UVftJ
zP9Aar?ONyjC8!=Wj7ja@g@V+!A`5A>E7Bcm0%!9i2bB~*T685R+2zZ~sX9y<HX|<w
z5&C@BrD+PMQt49e=8TfokCtD<Wvn{CjMntFQ)}-w_Iuvhbjee$nc!4q_cHL;X|cUh
zaY8tt)w!<EzRDs_z{$Hl`=(xHuu;7-fjTB0MJw#YZi<n1L2p0O=)1)P(TUiYtc7OD
z#^K9P!|y!4IB*LjkhBvT@Nar(qk9wKHJA<4RI6&71o$xWw>FixvZ}UZm*sQf0GI)0
zn|j|AG^dD23M>Jo4pJva;=h_TK+%6&_!?vG9sY$0Ehjm54B}mpl-I%mqJpzC(No@|
zRb0FIpki6>lYfGBm6?jdsji|4xr$yBVBl4_RA=K_x(AwB99;^&ME${1)IHygQeWSk
zNu8mumElL!MeHbf($M)<YcnJXwJ`jZs6OOApIv~C|4D=7U|m9ZIqx2dd7Ktl^4+^F
zTsShG(iizPFP20pzDyYFhK})1*3HscEekGFvyY#o3;EAePL8E)lxJ!8npOVOhHrS`
zT@LeHyYgqQ{0J*50bW|{<0Dcct9N(1QKaH;aaDT5yY>o+e<O_5Y7s)?b4rmj2qRnx
zm;$a{HHAJV;2~ovOTC7;C0|^^xl*-M$M+_D%vvQ@8|M6EEA?4NYQ)!rl}_ZpTuC?2
z&_oTn>))$wMrxHxZm#~mpw&bV;B|0Zcu4<viwrAf{}pmI1`ft9Tr?-C*GTf$+3-^<
z844;ARMOqY=+0Oo-<#ue`biB&QbK7g+ApyxLAfsTgIP2Nv%!PFZ)AwK{$)=0PykpO
zc*KH%m~6u4u*BgwRRm{(0`R+&{(rd`<<}6n6Azw;1!(9ft_-HI2d0hmmDP_<qLCPa
zhCEE@;1i$U=guA5JKJNxwg(I47#WzLZQXeQb2%uUDpOE+406;ee!2Do-=CEp+Th*4
zXU@66t2Ff=G;J3^TgJ<sx9N?D!S_6rCr-2vnztxbY&TkCiXR&rC}^tn&YKl|R(jf%
zMDE}BXpfD#wV}COg*T-Z6X{c~m_4)~$;~B##qD@Re+*Ik=%Ae6HSy|7ir)9yOOxz}
zciD@1)Ipo`J1>S-Dk%Ir7}-PBB{5?-3+aXKNNqe(J4vY~*xIJY5uvW*DfpX6L8&pg
z%<}a2ZJ3}Fv<lXtffVP!6yh4Hg;FVf@8+Ccs_Ts*cUEZnM}2;IY)-o`ci}v5LTdHa
zDmMgAjNh~A)YvjXaScO33~);F@d+<V$%JA?7Gqa_L=`Ey7F7P?fsdP{=g9u~mQxvQ
zF9*rEF5D0>tITk{p>3-VUFr#`@t1;&uu=?K8q44b;<acsk-9Eueq1-o8VGDVE%`iG
z)zjbf(5#UeK@If)(3<3UnW0Rjr;<|VI;w-x86I*5t&f6tG1jY$cY4iNbyJgVH<H@L
z^5~)ZGxAw{>hjd!;3&d*VowfXpAu9)4?#ufQbw=dH*Nnd3DWaMjneZcXb4@d(B8Tg
zD4w>oMG`Ex1q*$)1qYpLRp_%<PBW&W$N4X9kfA5t$cwHgW0yp?GWJejxE2g0GfyE?
zIp~E&viw?zPa5w!^}3QO?CgRyba1(W>?RaXfn#B{kjkKq#Wk(-X3`iTNQWDd!R05e
z<a(ra(YDr<YhuewTDT_;FkkT@nd*Fg%v-YC()?V&mV*y!m}>;roj;7a+8l>i#h%er
z*fYo-OqG+9zrSP>yC(*Xu>r9|7#>|g)yv6A7+0uf)rhn16?!=9l2}^FWdPHZjzLYv
zLKdfiwU^p13lxFfz&B1>I~#)iBgF~Cz1!cah7z|j0o&4Na^$<3;(aElZWUUHL~5Iw
z&FPf$Cf90wa@=5lujL5}qh>062B%O;+wwZD&W}8kY1cdx9=;_Ibopjx!<hjsp*3s;
zzZuRK<M_06oj*=VN)5WHD_LwMPGX#m-Du<9s;Otr;fMXd#`FNP5dUiKti7AEaoz3;
zujNa&RzzuH&?CSmZsEznz^0VGG>R(DWiU<HBIYdl>}pQ*MO^n@SDTvM%4-+b?*7xu
z{kxCXontn@6Q?<V5m#Zg?rN~rE%NXK7rYp-)$RGly?lNiKyYd8r6Qpw^a2;B<KcKx
zIoUeF_HJ=S-di<=%Q&WmVOgYv6i(DqlMilIuuq2UNsbkT0Q6;3NQ%-!3>B%NMkAr<
z?s-}qkm4EVKdjS$+A3md>F`TwTi}F#8lzb)CymEjt6B?F`3iWoXqpH&9^L-zUkm?>
zuy=~iEZVxYW2<7@ww;P?n{UiFPAV1Kwry5Yv2EM7eQKYp|9q|O|GQapU9UFhnq%}f
zdVemTLi#nn%x3Tqznc7>p#r~lPWY<msc92SR3!QM>V5UFu+~ylAY8q$6%XVTmZa01
z^-q&7BNE$iD<q^DTB907cWM_@9fDNX4_wvNvt8M!LY(SUIkb+i+G_~q5czv3nRqN?
ztz)}Mty*I}6WsF=8#9x@&4VO~>2gfD9#=?;4TSi)BOe&E;MG$W`Uw$zCSz_Z)vv`U
ztT@>!{36bstZ*fN<c^^k?QeZRl)QXg>`^s#BW3(5q$RVHxFz<>A#Qe6*qUi}JM)wn
zYQSM2Rfgt;R_6GX|2n^GiPExHD*)FT`8Y#3x^-9xEHMfE7;x?~un1-q%TjI}lfhD|
za4@-PoZjD#NIIUvIeefjaHNKAlA-UlgsMihdoai8T5A<6Y(bg9cE>Nv{?m3UOc1&&
z8(uyX3?ee%O;l1DhCUq>tJ#Rt+^=7)`j3y0KJKjSO=^pXd_!AyU=K-iZ<KO6`KaDS
zBzs>k5F>Uew|m|RcC27~fv{sGb<Cf(_-(7{KbOl<I%>7dNeEUq#Zx8*iZkYVwiGQa
z=#uvx5-k>%w9&*c66ib*gByL}d$|#_;Au<6NRlZjW&>{7O!&Ziy@~%?6HfERmk&?U
z!@`Wk|7*I<5!rM$8Nmx&!GehV`x;}|hFo-Q!VNmGeu}~dA>)FMZ`NC-USNVDVukX6
z+gzll0jb-7mDA{gPVg7@1XPj$6UT(EniDOteT~M-P+8l2r#U^W^*cDvGImF81a%u5
z!)lSs+SxrwLXbiZhWgp%6!#4uFr=pW_Z2p7CY?)p4;QD+AM2u*4wQG?693~nALEjh
zz2nwoYJK&(r1{_3=!zo_Sgiuw^93S6CfQ<YL1p}B)Z#v7=sf-4c2T02;!w7cDXD}N
zG&Ejkdqx~)xsa%!3W90ufwn(U<S2nIZ@_|!by(^r7#n371H|J)`Y9RNDv(b-fRcZ?
zy^pq17RD6zCPO^3?&Q)!-o!Evw<P!TzEvlv@~*T_Xc>j3NRMYrej;P=9!+f?pWoO&
z%GvD*jS{g^G(Wnsn|26#cnds=!=!KBYEaPHw9?VEY6B8NY#$a0N$HH8mc{ia)Dg*V
zqvU@gPihdbpYfk9JgGeK5-e@rGJfUk=c4BR;Rwo-3HT5x(jh+b)9{-H>0d-}G=+m~
z7?t{pgFi>Ej>E#NcBF#EFk-c*wRCb`w-j!QbxRd8O&$+;eS}6(Fy%u=5<4smxdEla
zCTz?>3Dx8{{TyBvra2`u#w}pSv<iP#*~3Ch(0{}i2|qAHDUNNh{OSl_6d<+dj6w>~
za7L!o2d0H=A}P)eXA{SzO*3!kGbEc=t;3ex{m{kd{}55e9MpvF@CLFfAiLi&x-(&!
z^kpN0J`EbQcE<8%G0|)|Y_BBtxH;5#w~~$Lxl5lJ1^k-#@h!rqO14wag`G^Y?gyz#
zZ!VkWE!8};&QUre4?INc$RU*b0)SVpY9f9V01rxB8b!BK8LLGK#7FAzj>f&?*whRK
z$*v0N#;EC{odwmOf0LVVWS(y#b5>2<1AZTfo7k0?{ucWX<(Rw@4s6T3Vytu8D)+6;
zeq7S^Sze1cAs`l{{x!&|&MR7jxiP2>I+y<3;;RGZK#ML7G|s=`-wmTaK`oI|2}#QE
zR&)&c<df?{5*c9`4Ncwf?JD#k`efxR+3nR3h=HioUxiB@28yx4rIH%om$SQBtYnGM
zh%YVSuokENc7*lnZa7d2N+ih9^rarOef`1L2z=jBmWIFQ=|OB7(Q<}nD^M2{h`NC&
zjd^L_;rHiPcmXf|Y6%pq_!gH<X!CZRIIiWLn5uQg{5>(hXg|6H^XqD=`Ujzej-yZt
z@nP-gE=+RMV9F4dxDiKcW?c+~FI0qrg-YadhEk6$U6+yu2!e+wUeAOy^<k|{xf;xs
zS{{CkiZ~~jxRyqZ)K0T61iwx^FKyGNJo%*(wZ2`sMD?6ZjTVw@VQlY+gs1pQtbGfP
z(UfqBohyiG4Y2c&4YdhI+>y?M0K?hXFCor9MPInw+@thteJ}fB@NZ0}xuABNF08)$
zDzaey9eJwPfkD6YG6!itb!h4w>e{BmEDdjnxp3WI<2PP+074zkR-)OgH|Y84G<UUb
zhOJ&KzT#tf4<uXIMbN9NYtr&P^T^rAIelBcegvoEFjLL6*WZFTrEQ|fQ`KWuY#3;G
z0Ms(us|;(*5SHG3a%@&QTFAyTS~WDi7tO9)Qx8jow2E)Q3gOt4!T9kA9bv}6i>z{1
zLB(AXI)@X*ENlsgDjl5IF|0Wi^F~oxV1^oxz3~M}n9lMNNxJG+8K#_7Vd9y``;ri&
zpI1LQw?pdNS2_Ru)x5cohxwrAdsf2n%dE5`FT7N;;!YAVs)y}n&1~<+trBsaCm1b*
zT!Yn24+|c19J*<ZewTD+`D9Pg5lILbj7%sE`_w=Agj5?_m{ts3p-oT4C<2si_!48R
zfc`dSi+SW~`Hg%jExhQJ{lfy73<Q<;X7t#x>yn`|A)s?0Xp#WhW3^815a=dl*hOU)
zfu7W`V^fbB>=Ri3UPBNEI;n(ML*=56K*Xx4R9NFzr~*NHW1Y$GqG??fQ){noOV&B5
z?S3dWl<8C>+Os2-;<=$~V$>=JDidbLA>NRRDjB%~>ZeN0`d{0yO@Gu@&=HkvZfn0V
zn|}C;$L31&6?{CI0wti?cbyuX#^JwnY4I=y@9E#vMSjBtTxMq8Xytv{ui*LqX(U1?
zR(mG!dt>$5{`RW$`*d(wo?9P^54wKE*vG%fCmU^uCC}=io9__)oA85%*%?+OlFZY{
zTFUX~3fRGSmwxS4#Z}JkOeJJWD0jwbg`eDGC81$<R&KVuV%f;+>O<)@>$8Q`iDaV>
zGuSy6q-S{_(dSx5wq_2garCzr9y{OOjM$~~{yQJ1;n}y8Q{pN;ub}N;L@GnYKT8KZ
zQKm>TGN>j#Ya+Yv2}<TrKJGT|Evn=ye8{(jMYiO%KNEgxm%CkguuIn^qsY>RF#&+P
zQae<>3X(LU?WukZhHpfQSMCNvrq5OStVt`h(6^BTw56+vh3sMbrVo#|Ug=}z4bbi`
zD<mbInc&=vpi0qvR>b5Wy3yFjgfc-GBiu#-Q)v&uZ2>f3It5micjindU<9efi!8M8
zDfUiz|E_p03TrM1#8;x=QCBY@ETR21*`3QTzs-N3Rb1`SQT}-<{`9s@X@8GHE-1;;
z*5r<rO|XiJ&Y0R3_p6`~%NY|M2Z|bpi(ReO>J>w+TG1UFm!<)b!5{g8>c8ODugF9D
zcMA;i;2S#5y`V0XR%<kC9&cRr{sw)HmAPgL?@W6EauX$sAHP*LH^#4*ox{EUVo?SA
zVesPD+E%1n_|6{>GV6YLS!EVaXA3NNp%y1f`u!azcL5}ngNd`2@A#T4O$(Eb__cM^
zNOhuG_j#f%quUfPGIJ(cKM>IGSZHj|Cbg9W(cHHMuu!qYzlei41iN}bm46{fYoiwH
zx3~b$&iT9_nhSe>`X+x)%~DWs)a0`4A;o~KrDiVpb=k~7XY_BkgZ_T+PZKloEiNbv
z_Qr2-TAakyBb(_B`Efu`XTW}T1TS&D6&L}wh*sP&M2E>?CAWD8WP4+h+(Pmp*NtTv
z-6QORS0#a=d<6@sM>CELXPVy5NnNz-tU4~NUtAzz?_QcMu<Igkj?ukE`xBEj<cBA|
zvSB@ShtV|&Xn>Xb2>!E4b;&pl)6$6%3Z-_Yo>_?-AOmXY!{$&UNE997GigS{;K%mP
z^$W3_!Ry8Ou|6R_7hTq%{VOyQlgPxe^?4kgf;c}37V*6Mg~B(XM&m$2961mVLqMuL
zB?HfG55lTZN9VH#N?=>0$V95l!}|3XBuq%OPp6PwZEn2|9eo~gUD|y0A87AAl0QNL
z<b0?EBf?jE@cg_EV+td~AUx+H^{dk#Q*_oSU<)NByH`qjSy6+TE!CX314w8a5Mlm+
z4hMH6SY`Z30v2JHWH{C5*Rrb2AD|7Q-oM52<VT^3YWDSu!dr)?E^O<W?!nhIi6CmC
ze;{Fl#E73mt|uZC2-O8}3?cRf>RAxRM8rCVC;i^rx|jw)4@P&u*d2|7sYBa_lI4kL
z`Rc`oBvl7c{j0@fk=EVZ)D8J&QIL!U27JsTkRO?fILmCgHVh+asqSD>K2TQkLG6)N
z%8rXTa&B!z$P?dWuEm?ncXmK~-SaNkH%r@lN?yW$bG0z9-?ZH(11Lzq4rKK-?xCu@
zGcy@z?UzCLcO`JMk?Z-3)q)_5AUeg)7Eks?tf-3E@K42n8Tr$CZ2Dp(N*3C4ZdS|&
zI$W4K-B8BZDL8*EbK%QUjL40|nVCNDK;91_!8p)SA;skjweMr+UA8r%gi1;0RG+0%
z6-0Xf;1_znE4h7Tmhlg1qsQhz=$4Z7IW=?UnhL^_XYTbyLo7o+)M+4FDCn?wWA}?%
zy0Nt*(Wd;#@|<)4rcPAtO|z`c1yR$Xb0J~uT9h-%Uh#*}cZj1*6f;7de}t-XS=L@L
zKZl8IxuPAiZJOfQOW=M4<qN|o8R0^MJP`Tieu;CZ8&-I4Y1&unavhFy8-0Vge%i7}
z_g}nLYL96O6xH$q&}iU`ScpYimYQmO5NS+v^~&Kr>cQpC@@8gJjn%P1Ow(eVEH3s)
zW{DrHkRc24Z3XcyxB`sMG8l}3Soz~d<MxiE)VxCzu_jjOMZ62eW(ex!HNUo4o?_g@
zeHrXAmbSl}=a!)t2}3lDlYd0tM4Yb-R^C^NhLz{F28hUzGVFfSh_ZV?1!3?VYeOwv
zgdi=LwWTaDwcVOvG7&M!E3aHKrhz<TK-y8G3IM`lPNK1!($-?a+-g<!u2;1U-4xy`
z+_x-FF7SlLHz<XN6N=Lq>)~%b^<hO<_V5GN-yHjY`LCzjh@YDF7EabSI{MJcTc1Xq
zDOPwSn7MQ7a)eqn53nhA-WlSpgS4?+8LJ!y#IAD<?!6&_jTAi_JwPElUcu-3u(J$e
z!z9Q+&c@Dw%z*GoK1bFLp4p%&H3b?fDRHr#&k+4+Zku&-m=6dxZ~(Qs<UPHYDi$44
zCBMK3wm0M5e}tAgJIq(sR%()e$Ad}9RERv&JvI9}KEtb^^TR9)zu9iO%s8wKTK<6*
z4}5o}ueglZaKQJ=03d`B`T+;$KMDXgaq_|N=GDz3(F5l+R87$#+o&gF7y$<FpSN;p
z$37cct^fufgAbdozk;sIv&HY2y$yAG)k}n}nbq_#K9Vk*n~O(=N`nx~v|#jB*O`^m
znd*&eE#uzEn+SOzSKPsV$$i&k6lL}gMeYgGWjIFl19W)Qa!Q7Q=G11nS=-ha2O`qS
z$=)<W(DVldK|9aWF#L{(Ze=$hkF2Pzq#umYp26x~cA#AaYZ-wO=*8AToln&m3T1}?
zcnDO<ZJ%Y1S<&E-I3_9OzL^@Q`%M4eby=RB==#*Pcs0+5W~i1n%Ap@xcKDfY{mSFH
zk|Q71`ZIq=$br~orqCJ#A-GBgeHl2qL3&u~WDVA5Ia4DtO@@}X=a(NiYw4yZ2#R4f
zQ$Y|#1%6jEyi`D(O2dmklcS3EPGg?pI7MuQfhjPgUIgAmu0iAnQ^eZKdM}$jn-i0P
z0r_z6RmLoKRq3Hb6gaNl4L%0WBzAyFle*YQ+!CNif=2`zRnbomDw(e4zd|V7rH3Ce
z3sz;8;*VTuoX&b12+#yPC}dwFtvuXk!R%!V6JoFqIz17Yc8D|+qCD3}sWhJjrg@ze
z#02u@E2-P=bk#b~wvf$YQfWJzne)#nPPF6)(Rr?$fwV@ydoflL@AGKeFBAlte_AIv
zv3@6bevUIawt2ewWI?R<F)<xGa9^N5c0!|%ydqpxW4yU;{bn_QHu{D4V)4i^OnZ?Q
zr`l&H-ge%+10@SszG~UgDU%Cu*+_Cp(9GJK(%mkgfd}J@y!1*7`|80O@rQgV7f%~P
zsU|hjkga0!vi``Ph_*8DP>rl~!nX$y!l4ADoXVKTW=igElIPpBw6e+his7#zVXm6c
za8-<YUv|YLrAR(?792a5U}>+F8T4LXoQMyYX#PuhQ)6n_Pd|lBy*F4Sm%ZS(b8vOa
zCSV`cS6=KNZ7LiJb{7#)Y4A#9k{HIh?6*pij7kyyNltbM<Ln|y@)G&2Y=wTp6(OT#
z5*m|h@QRx`xksK1j4rNVQdIQIHJF;3DhFGc_KzDhoQG$N5IAK?RKBF;Tg_fm96}vd
z5}A7g=?w0)+tqz_x47^U*;|e-U?L7?T;)vHnnwcs`a|@@DZKjw+3wc?7TcxLONkIG
zh}4%UnUT#_$MO4e)%qj}sUQjZD8><${)57^-<X<y(PIH`Z&@ziS_TGYXzHIqk$UvQ
zh%%EAe&cQ;A@<p3qZ2D@tIicpi^qbbgja2L0hVP&a?OYN#FrUXf%N>@qV~DR9m!J7
z3Q_rCM85RT``CLSA*1h_mKuMEN6DgrBa6nhn(;Ghvl@N4C!9<Y4zxN;6$(FfzbF93
z4xu_z)RZPY99$!Pi&WTMccU2?Ocvdmac|hoTn=uv(Z`(4ew+K6e%?0WM;K0{Gt}Nq
zT=a#$C*9i%%PApj_?z4u0QbbmD;UknB>MqvQJ2s&?e%X4S1mG27~(8H^`_*(D05hr
zT9x7-=(ngD41~KPGVFuBX@5E;MP6?%cr+nM@IB-^MU~<Jacb6L^<DQ;|FnwT1TJ5`
zQ8h&WTUU96BksrW*OB!IA(<|I>3VpasEttb@6J5<zqMCN0_9GVo5}DJsyxb%aKf}V
zA1qH;#|k_%Idp+-b^jE_4!mI}`WtqjhS^7fsOrJH;`jdmwpK41nMnKtwuWK;_kr_&
zlT)l5oc{~D?o#9YKZMrrtM0uD-};7yrFG|d`+u`Apl15BMg1Xe%+%oxt78e2v+^DJ
z-|sP!qfPhD4ZuN8H58<U)0}QTLY^(W9zy<#Gvw$rCUTD$w2eo6uHW;Jp+q(YIa&Dq
zktJUJs<6nK&dMB@Foc+pf7Rd^{vI$mY~9)h{i|+F<L?>{ajM3mxQMwX(BH5SFy_x7
z7`!2FWSf6eyn~oi7%w`TOEUh1|3l4v^Gs7q5r#Tvt&R0NnI@Et1k3C%+dPi6Hmo`+
z4jdbLtq`^9OFsGN%59^h<g{Xpmw|3IZc|FQ1}CYuv~s>5xEyU~aFUz11HT|2AD()e
z*g9rmMS5)WT$`+AQ`|V%;Ba6sSAkrl`p~W)9h-7A=C)luuJY9MeS;`@L~HMbUi3QT
zddijmjXOtqQ-XB7Nrri3U2=6=YM6JsQJS#+H0twmVkvSba|VH+x3jA=FQ1^-*TKW7
z!wtw6K8WDdd(b6W_CQ2?e1UY0mE3|8hCE<$)vpu{rL{1o07sL30^PjniNC<FHZd-1
zpAI*kvhXp<ryVWgw@G@5P4=&^c#9mo$t+vG0e7*6WJE#2i;(_x*icDEQyFrTA@dS_
zl{&$I<N@EbEKw;M{8;jmq>RJ__TC?}hW=~kCkMU>I|po833^5ek0UPZr*6&-lg&ut
zX@Fl+Y_f7e<=$l6AK8vY2b9HUKih{6{A3vQ3FvupynNH@YiexRc>=H!T{%}l28$%-
zSOVB7R=~m1<EN5b`8P%WE<2qVCb{*{I+Wj@CWyy!r#GU-(C;5w^US{w!q)&$^mXpI
zM&(N1(WAwx;|2-3C4(YRJtzxd2h&bIML*)$6CeF<)2?jx?3<)Z_g&}UIyfTqt{L@7
z7`Xlbj<%*IsPX|{+${H`3sUC<_-<||t`9$F*h(^yyrAcKb24zyc-Iq27t?}Ejvv@Z
z`Vqg+FVU?L9w%TqIsr#tR~f25(IPm*<eE$BSC3R%D}8dsO-vL{i7ZP}AC<!0N~zBE
z^Fn{xw^Kw-LM`)=k_Z}J|NaF;%}uipcbyccxfRAZRASI#8>XhY>=gL$utausUXP=1
z9H;679i<f$Ws3FlVtL<nd^&lsT<LFw*`%>I*ng$GC&>XU%3KAyjp>F{5$4TySYgn2
zB%<>mTvL;Un#8b*MN*VEBd>JJPVBx`?(h5F1wa#@A=*tg+No$v|4qQSDdEw|)V(ur
zuL_khB=UWqi4gKgMt&@{Th|w%S@^5f9LcEi-g6@lXGNgup`SyFvLl)th|JTE_mk60
zUk8sDF}1P;LeoVMjA`NXus|ewv`kZgs4uz4?8O<LzKEyGMUPZ}ht4tl0kO-Wx_NwZ
zxK9YOOE&4J&YtcrDj@p$I?NOM$4RQSe~ygDdh(56HR={t1w;!+49NURV?r*XT_VM&
zf8Oj%kn2aaD+<2`y1LAEWyt#Sk-PRVKV5Lv?KACPT@1!yzH23;p(#+9Hsl(y*teG_
zP!FfS=?6TywP#V%HTpVL-c{M-<GNE#SDLbh44Xr97;Ltm2pu^g9mKY_PPW!Bgq&%P
zvACOC4UL`hjGHd8;-e9dCFhEDbeDQO)Ss6kr~Yes58X3)e~FPeY}Of4x#ri~89aKo
zJN`YYr^~*s9A>V046hMdyV-ndoIS9{Zi)VI+v?%qZaJ5i^bK_yFKhdP57Y=%7Vd2O
zsBHtKBzuE#qG7-0$=>t`?nCZtqL!Ph{PWGfkIDW<_A2LMzjWRYxw6Kln+5+?9aWno
zFkLvfak}{*9>GWS;Wd$eB<)RF5D=38GTLhF;%RRRaQOe21piCW%ObALzo3`94!^;n
z-r|I+7Yse8uzf-`?da$+WG$I>Vk{K&<^*h2z26;8Rh(bfTx=cWsZ67jyT5=!<mm1e
zKnvj3gK_I%yDf2n`~_1=L^eKw|1_oSlsze7%rF@cFOq3PwJNu)IP4Jg92&GkOl$P2
z?cf$XmjDEjob674P)5*HntPu`_1}!X!ziK6{<#2n`!bLCK(y4#*k+v)b&3>HT9=uN
z&`y+)7r)8`aypfU@=izo@ameTY=M2*&g(^CK1s<Kq$3sz=?h0IXnG}zYq=WvHX&in
z@;Nvtf(#CRn1>U!II8!@%#Bx_S|v!Yc+@c&jtRh(2iqVv^pr1pz@kg7UPwNPN%Y{j
zZqe&B)F5tx+dEWuchBfG@No*?CoFW?Ud~s!yLTU(>n^)95S-iv`_GnurUEfP@gGa@
zo|-)s$gd<$qz>D^=+exlHYl_}EILA3Oc%ugw(z??@sCV`dNz-fdaReaT~xD#G4(F!
zf=c|$D1z*k3j$4h(P`M%_Rsx8#B&ATwu7-J{v*BX4!3m{cT1?w;lIUrjWtqgvBWzh
zW&PU2U3)wUFvYB8eq}75GolDT+nCdGA_5V9fOalcm4fz}Et(?t<<{F5?X{a?=}8CT
z7yngA{6k6px$Q}yl7t>dZ$Od#Ta#T2E`W2~j5YT?2YC#MliqP3(qn{jZ%6GJe~Y@e
z1mA~IWH~cZt0Oj5ib5l5irco+j7{)aET%hqba*{~p2+_%A-9lz3}rvx(3)iIH?N7|
zy<O+*C?h6UO-N#7rpuDPQy3)MX&klV_cD<L8EXLdty+!B=$93XmNfOJILzPt7Z%$r
z4a3^gM^$?%9g3&&9ptGEmZkkbf#FL9+1#CJ?T&$@qY6{49`z$!z<$SqN~QH_eWxJk
z`98H)dN7p+;7p8-SkJJ#0c%wn^{=Wf0JPo`&(V^Pmq&tu^XfvFva(WqD4Sr!?6`TP
ztr0w(zX}t_9Y_*rCC?i;z8)YD*n<@*FTfj;uMjUhp^h3lRCYV4I_{;P2Zq@pa2LKH
zTG=%_=-<2LlxmPwpQ$TFzaM|!fhUaMV0wXa4}@&~x7aC};+i@n|Kw&pP$npX)%;^;
zR3QnCOM6;E^d{p#m`NaZ*k&-s|4T?$&J6ok>#Yp{97k7653fdrV)m88`9O3IM_!cB
z4MBCixakh%w3-s_5;dE=^daKU-J{dckMocZWgO|-S*i3>xPNY!IKxc#VBw4*BzP+g
zKnWq!jy=L%g~$E`xI4-C266PVkkN;Q5QwaX*<u384;3uu1=FIUeU*`)Qs`lwUd7iz
z6><302N9>ufEpNDt{^qW{(0?+B&s2BsZ9R`kjv}iGF^ZWhAsFP*|`V6`DF31*@X*#
zV<VfdaF@e$`&c(H^L+Hi>v#FVlf}e}a?AbrjlGYji?5UPH4Y!+b(H<Ylyr;BR_?>3
ztj>2;y;8>+37TD*ch{sG3lvXW&MwMezuxFHiy`-8twrZK?s+qi^;V^-X{34AY4ZtM
z2$_n$UGoSA?=*PJEe~b^^cbT@WWUgXlFs`9!|j0pl45-LP(i$EEqf03oPv|Y&P8HE
zbLLXmMI_X9tReZ;jVr*>vNZWqlmW`8PoIvSCI8{DJ}AZF)G`(n8^=H-yjIQYg-IR6
zV5vU-D_OjmmX=X&!z~O4dOHX+%rYO6Ur)FbWpKwM*5@dz$Si8ix~B9s!cpYY5B_LG
z?5uvNUI|}}v^lDM)<iapXNFSD%|Jq7)9yP;q{4fDLq03g_}j-L^!DiUpy23lfp$^G
z%tRozhjBLVIP+hmvVq?Q;1O7q#1C>@H;KH&{S2I#8;>bol3d-*3wfrT)Fon1Vr7gt
z9{pLvh}h~FJEX|*bY&sGc1leaJ`tvLm=J3U31N%n6}V&(Ee~e8tpbf@zhCPDRuK6}
z=hsA@R-iUTk{K`X8Jl3w%7+9U%`50FXw-@ivlma4dYbRCO)Rcn`T573F%5`;JL&jg
z)Vya4BF7kE3Zd-~(trmUoDNmR0Y;^>O#;oMJGaasr%PTkeMJtE0-3^bzrzWa{_85x
zNId(z!eQe<z4ZDuBjyk|_?*3F<mRdNA+!#J-yqx%3)#hA9*aZ^J?eI0cjopeX}R;v
z>}@B8-9-O6Z17<c`|G=TG-c?=Vs0p^VLZ<r=*iz>xji5LgEkVAamq$v`t8UlbuW52
z9L2|ld-OQX#YuDgNwgJ-P@C>aF|sO)c-RnapY&R)xR$l^+bO~P&2Xh0=)F9<)#`On
zbSb@BHySI!2gX{fI#{)>OM{2=XYl*gXdLu1ty2qf=GF<(UVZ_uReQ=czL46Lh{L6+
zXMa?X`=Am#;$6OWpX^roCH@G~(*;*-$b+eel)RxGE=q_vCxm$!X^EWxB2jIiBR#LR
zv*>Xb2~<|nU=i?G!%4%GykK53B+f{V*~%_^beFCu-Jo3F&O?Tlag|a!;L^9#Nle^H
zA&`h4kdxH8yL-ZeH-#SkUEUH$Z_a=Py7`5L8t}10IxX`21Mp1A*f~Ukz6y#1Oa9ES
zh;2QJ$TJH98K7p!xalC4MX#0f=w!hutkh!1wf~B|7}S{K34m67@4hUcdm@t(zvdY`
zwm$fmT8?%-AUDtB%ftfj58)5!z-1~qJ8!fX@p{{75K<VuCn`2bnS8$7Xno`>!7YWR
z%9@w4^jkoKRq1ET>HuPc-2J<?2jmYQ?w8d+e_9A&7bpMy`M7{9ktT7rTU#9nL>nMJ
z7{5^API9C~A9H62Lm7im5v(^w<MIrormygo*c|Upe%27RQWe%0G7Ze`HvvnBZ;HDT
zKFm!~OCD+2Ky8`kI<8q*)Apy2b`M-i6)JM|%2F-4`Ihl5LW1!H#oE|C@up3wTyyC|
z6wZDL=1qQL`_cJB0%)P4m5FXBdUY|iEF-Zi&_;B2<rp`;b5sf)bOV%7h4fGBSy$FY
zjd0QODH%wz!8=jyxZ*^iaZ-NL@KFD1xaO^^PN}gMk@K=dA<KhW*P`fV6j_&skk7vh
z{5x@NvS{2_6;85(7H3|tnrn^t*VN%*{;R9nogE6%b4VfLb+Q7T82j)~!$~kNY}LA3
zF6c$LQm<@oc+dof!u(gXyh(t;V_~00;v5wTT7#8xTO3D*u?{p>fR<d6a6}7WwX{W<
zHxo{zh%L}&h?oLS-f~rb5MAhHtmRNY#ietM6maDF@^@1;GIg~vSqC7aYNsOn0sW9&
zwAcy=jhNkVv}zG<7GP}?D$J0vMKy+D&nE%sf?3@8!l&|#eg`XeNS`#YOra5*<te&+
zgLVswAt(W^xQ&i~Z+Lg2gZfH@mgO&X4dW1yB&Mw&)Y(3ftkXJrV_6xY&#;6FDY?R|
zqPHW2%qv?9GtUX9gjz<**~_3KcPaT!b_tVn2Yg2u|8gbT^E57(W^fk+L>s2upvvHX
zUh+avl0=K%n9=<xY_o@PS_w{Y$Dq-sT-MN5li<;Oct%pq@>D86R}eAvP|glSwWt>%
z#hE9eNiw0fLq41}*#|e9b6y(K*`|tC>!_{>aXcksraNt?eQvID{&fT%Q~BHp2VVQ5
zrNmC2FCk=<q((TlprK;OAi1VM81G!|hLOOfiJd#6V7uj~aJzk2%AMux%+C;acdi*f
zKYZjj^b)*&MYN+f)WOTegH6vM!}Bk;h!NUM{&j<PZn@(#w@O^-3-xRwc8;+&B^$&N
zEh-N-muU@1blhoW$<8=MKGEK0Emf3)9SsDi7cL=BgqbO()r9_7n&*w81srgeT$vT&
zaj<%j0#m29a4O@(V1IrwV`MWl6dOk)UCI!cxNwvDiWnd=nY#o;+ufI<Nb%VeirK~2
zS<;>?sI6{Q{<V<?R1ng@&-4dZk9$o7O3Z2h4kOW&&(<i4=7oIgkfC{9aXVa%qMptS
zsfWF)Eu}9X{x_7nVVE(792-`K1YG!93-MJ|$&Rcm)7aqRCUS?;vo+_#k89M1zT2ku
z^z@3&7OnoUyQ+d2cg%y-@M9-HMx;g!H@?GfIfq70e1l_mNR4w89J>jnP)WPCA3-c?
zxQA9ry{^-om`(6*ncBJmp`8#{eK@(6{)<k&`$dfr_q(w~TdAcuN~K#^IDX*?Z})wA
zs6fY^2gCo@cBhhTfIRgtyJVIT1cd6p^d|ojC=LJ9m>8P6di>v)|9{_Iv(7&Wi5vAh
zr~CKg9vI&ZZ+Ja7eTF<}ZK17?TUL*=7XuJpB>qGTOM6aQjnMn#yQ@ExT&2L^kG)_M
zC(krdXg|)}uq5;e%w+!w#}gqCLS9kfJDig*%AOQI?Fe;qXxG0^Y=)kqgIR&n>ge4{
z9)Q*~1RIlE#|Mg|HZkYo7-xi491v;xlbl5`S5%Cb8zm@k79yX?IO6Gv4o>v<9E2*5
z*)fIH`78D=7PKUUC#Z9u?}0aP$LQfAo&b$;0EQ%nAnzt;Mc5YH^Fc<u7fWU|hylyR
z)EswJ3$=tr%B3@CV9QtLFUpIl8QNGY8M(|B5s{FPkfP`fiS&mwwh+EciRtc?ndFmT
z91#&dJ{trkV~g*%ThtL(rEJng--5ex+a?$;Y(4mLj6V9R(;g(URV=77mk2Y$k)Tu0
zQ~E473CL3|jfk*Z_K=mOknykZaSI4jUW7d5(D|SsZ_cQe9SIac#Wr&xknY@e?9T+0
zWq7I%<S`|LmYI4J$6wXV=@(FQFl`RXvngT*3pl)RE3acGOkfSBw15ihiPAkSq1~Wf
z4IweC03A3b)ahMrd}U|X7!CLF!_{6;&*-|y)?dIZ(S<SKJ+kg~a1o2dH=png^u({!
z#zs@ufzt~J-GI(v%ePmECol-OTmeDRAz28rv|8E{cpTf#Q1%v@#h^V!SYv1{y#5WX
z`$<dJAV_46vx}Wf)^Q;{MnQ+GC8(Fg*E7hU1-gt;7$4AIx-Z@3m&k6aAko*mzoOD%
zFa70NOA5h}(ptsE1RwUHVYD6I;o@GuIxqPP+>fP{G>;^}9Nt=^i4R7AFtac$%o2e-
zrf&n>N9lE)sTX#87h8q?<R>%%{#5=DffY=y!Lnm3Z;RSIXAGkIlPC08sHQNbAlWzZ
z4j6G-AyMVrkhvypKX4P{tEt_IgyBwUF%y;qqbfQHviyhVWk?HDtC)2*Yj(Iv^3mQ#
zjiOj9e^b{L*#70zaZyFTn=KnkgJQFg?IdW~o<>RTnoW=k7OSFKf7VMOO!}o{k<mJS
zq)Jkts76h@(4*A+Y*wqajY?v2f$p3u*quJ~mRP@Z#07vOxXruB-ezY_`WOm5NYixA
z+L@Vh-<WV1bH;V^!N9$++dkq|=IH7)-gikI#}i^}TOXRX^Lih`vPk0cvydE)&c&NE
z-M6H@+Q0b$4dRn9vk6Y}9Ttu%uM;uk@s{jF+#3)iM^mJSsbViL#i7k<-&iSt&iaZJ
zlW+T5KZi1+d(Ok99h^6@@mU7gGgMre`BP&(w9)MLJ995;I`dI3b2kD<hbCd=DsB4=
z@?cb6Yf(v(kQK@?Su-ZgKi2|WyoiX9v-n&tN@^w;TkwXHWj-S7G;9~%{3XLPB~KOC
ztLaZ5Zx#rPtESR98^F}{w`f{KuD}|rsCf-Tbv^`B>Ozx6sEThCt(dj8oPpm*PbM$0
zq2KkXlclGY=U<O$Q4NE|fV3y-F0Xd31^3>L-lR5&l(A@LDP&?p)ZXT(O5ou7OiR{T
zg8JrBO&gET1h^j5=jfut1fpvz-K=QrebR{JBXE(jM3Qd1XpOppB4o3<tG{bic5KC}
zOsp|2akdaW)%D9xsg-1qt@`~zAE3mTAJ31daH>Wm!1vb71t6#M=IG3lEcbRr<7Tr_
z!=7KebeD1IM-*`Cnq(CzS(Q_c22TD%B2)BrBC7Qhcc<iK_^LpN016-}6grMry{I^9
zMAz2M4>vtIQrtJ!1`!eYp6J&@3k|`;_&0YWOos*@dV{2w^7E~(`gCo84stK6x{=}h
zoB0H9F=^Bp?<NJz&qL%kQ0yLNs{XP*W_@ms2N8S?*3o{Zt_RQhym7h?oeku7o%Y?<
z2p3+^8s}n~jtg6(V?QxK7EzjPiG~`D>0dcqg|g7AAvN5N9#H3Zmhc!+S)q$FgL<*c
z>FBnR7q+*`D{1Z@+Eqpn60Xr{F=?<M_2pI4G8{1O_x_d0&Wk;BaxJN-Q3hDbm*QCx
z+ikr`U-GV(y09|DeREdS-77cKXa87_^^5SROg}eJZ_NwfM2@ANb&`IJBl8Pal)>HH
zE4@q(Wf1@gLv^OyKh$NF;Mtwe7a}1)erG2cX}}=r`i`$_?8vDM2l&DP!Co+|{wbeN
zz2Wup%)wrK8b45{O$*tITYet*C6>%|H2sq?qk}$Z5CwvaPkE|2(-+g?<b`@PMDvRB
zrK#8amQK!7#MZ)tg*nxTVe(~$w>8OZ@k~=N76;L@+#>%#O7%qLM818dUh9V*c3{-5
zJp<hq+j3V1Im!#oKQn$U9LB62+@gD-7_G!GaQPr@g-~+|;}Pq1*Bj^};KTod-5*$!
z0Hg5JeGH6jHTV?|u)VUc*1-!YWR=;wMz%-Y*TA+Gj~2JbKWvYl9{R91RclUda@NP;
zAd5qrYy)W&e>$|ShmiF;i`zGxrTB;OV8>QS(UcAEFz)iQ6SiUPgb`igc_>A;h1qD#
z55-?7eY1vVu;ahC7vz$=m%G&n^yk51-ekx6>fBOBjIIfflpihp7c1oEVythQVu5CQ
zI;Mo`$f2vBrr8)9(#$#0VN)m_;k62t{$%#1TKFfKuiAxO;Puope)Wxss5`5~X@dqN
zDH5E~5@@_xEm&j!)!A^=s34l8keM@mK}A)GQXl`ZOu?XXxAlPEtCFo#is@m(Xs;n)
ziz2QF8?$(^hC);--*@&#B%UWN-@qC9Drsu!%Ythvqj}#j-#SZ%x{lVxn0TkCIaL{o
z$lcub0ha&DWZG44F`nX<8sv{Wf*vr|Uut$fSzTXnm(Ssp|3F~d@95(&9BBV&UYJnu
zWXqAzLFc&%Qwh<(*Sd(91-lG?@70oS*xXOTe!8u)zGT>?h>=i&_DInRy5{|^h*%}g
z^I(yj{YwKP{87bUra%O@;A!6WPg|PZ$q*~o`JfM3lPkaffdSkZ?<0ha-#1*^y%@ES
z#M}<cFSIqd)g$y`1HpIv&|Wd%TM`x9k_u`KnJG=3J?j{r^QRBseK{V3WK&^QB#jex
zDgOSx<=?kZJ1=7gG{mTdQxd-cHL68vNtlaNbKVmcNd?a0Lo$A%0rK{3dYAM2%#`J-
z*VhTT=3|Jm>cbAnUhc@BdtN>LN!<jK0_~>(hj5g#?5m23tAR*%7sWvRG1RE4rs-Y$
zQi%`0H;(sYM|9Rav5-fn!_Z1JO7X0h1jm{UWIIiESJ4Ztf2Vy$y2J(O)Vo_wmmYjd
ztKa;TG_s>*R&=C9L}KbHrU@{ok3KhcGnPyTyn+n?dN$-kCSnt7aUh=)-TjFRjm+r!
zUQa8&A^+cUarW_=SP~2bMD<_f9npU&7yoat6$8uv7Ht)rDC<%nj2`^_5wWUUZZtzq
z?;vDlFu4L3T_;8%?_nMF`|FKlswg3&qWn}pcaX=e+xu#B^999R;l^}#cX59BSz$jW
zkW5OiRyKR@FQTxm6PGpV0JaQ4U>-P409i4T_~Y1w-+~$hK3#|=bV+qqv<O5qNg$$V
zbF<9>MeL+%yQp2efdN5=L4$|(0iCNt<^g*~p&L)ec#UR+3Sv?ih|#o2H_sQ#&u-N>
zP{Uqv+Bld56l<Kj;;lwO5*3(OBw5+<^v5o9u}h`<1VOD*+fF86m7s&nNVP%kJ?c@G
z8kWHv4i(@jAM!wUo;x0=bjm;R3!}(R2G{9;IZXl`>PnWfmM`kyNyGqO^!)`6RArG$
zm|e6P1PmFbAs<XpcHNrm!cZA=f@m8tJ|{|gJ8*IXRHv?RB=V!+l+dF|Y}W~O;%{FW
z;<>zk7Q1pti&P{3yZM$u>*SYRdyM(TODUHUKIlwN*!6iaHY~9yaU{XT-i-ZXMHe!=
zOLm>c3zSg%ah?E_bBj=MWUh8I`=!_O#nMkLb~0J9>xKGNJQ9DtYlDzZ!_YR_Kubi#
zCcwPu1X{~3lB}@uK=_HTs4voDG$Ji`N&+&F8+ZuS4$nYqDb0V`j2NkA)n<n}{p@La
zx~f%BYyW_-KW)!VMD`(oIVTYhrzK=TAb@-{z=dUh5TU`)ei&}AbM(R%d>_u}r;rm`
zLfhc#_A?Tsv(|0ASG6ixamz-K0HNPD<fV(t95-k-tYZ37v?CiHapZab^?&S76$2P`
zetZy+Ttkq5yAvP8!O`6QU;FZJH?lA?n=}2Vi(xXe`p@#e^e|cPF6%?h!~V~P0W0%C
zD(HA1y_$)xAt1d&s>4&<Q%!DjyK$uC_3_dvu`BK6-_IQ@(^om*XU657%WTHfMnsm=
zuQ|tz&#SkEC)~6e=arLtA0}87fg;D1><aC(nUS<!%{3`PUoWI@#*J^5ZtamF@0)|x
zjlQ^uOiYE#ZlQJ$?Q0sD+ZC^>Y)S%4k%NHd4UK!N?kvqrtJ07^2kHwIM1nv>A|iq4
zg6`U<*^X27CcVpo&z6eeRek!F+10&<hzjJ=MK3Idl-bj>%{ONj{Tz+i_ra?^q^l68
zz$}H-S?iX}j3L#3jskUL^RF`9wO#{$rm<9^l&@7_^LE<oQRJn4W7?&AWb$cucu7b5
z_Mm<1*4OQ7<MZ{lkbXLcZELEcX6C)6tJhJ={e#K#)f~J3)5&b&;N63>P;G%jOUJ9p
z<HMffq-1L3>TcttiKl^3VrXoxps$9!#(F7M>|<EWFU!)*%Ev1st8aTCx1~q@-`7`*
z_N?uXk~Ld=ZOi*JdauX8-L+UIN+v^jiERNLdUpxENb|}s*3GQkoS&sw^YX5?UEfdl
zLNSD&U(~GMOBPNYjZ6Efl~xb>O`EmLm6KPghx>)Km*?`$>kcW(be#VFJ`Y9h?7#g{
z^$X4XjA2)=N;(DsYSSLPjcB!s7lz}B)c!oLF0TzE44@Y5+b^!o8&|}3jaiB<>Kxy%
zM6<2Hr{NpHwdx5KziN71Yhcxu`1of>dcc)ua~0?OW(Cx($*WD%ia6H1of?BX9(dKT
zA(z$KMQY;YDu7D5VYFuLs-=2cBhpiTTp*poCM|2Kz@aczsM7;97vValbUBB8y>9N~
zHP`U#p%c&vWKx`Xc6s#e%$4`6t~m(*G3#(PDjztRk!?lFWL~xE>5}9X-}t#YEp6>V
z_(|x0@ap$RKZ_|kz)_D`9`_SzYZ_^L*;X&>=luAXl%IuAY31jX4_EHoK;F2kEdQU{
z0@Hh51hZVs+V8LaOid`vj?s>@O*4bZr{n5@{Q1r*!>lXLREFp0=fmg3y^e;L@q@*2
zGOnrf-SK!x&GEtu@-@b<Qk`tbmDiFPqmgv_%IE60?{#UrR2@nCwL$HLhUmP95y7hO
zWPk53N)$^z+=l5Th7MO#-HY$@V<tlkCIcM!XNULYm(bD7I|ql452JC@Nz{DG76)W1
zK|>r2mZP0>D7o{~^Czm=<Hyi+{pfk?MGpes;TOr};g9F;!X?Y2PStwrh8+8n>k9qm
zRfP)V>Qm{3Nrf}e3BAMf-Av6|s_ev!m%_qK7<ja0(;Ne}((WZOpRTt0dWViM!CFh<
zG@*ZSh3OwRZ?DhA59P0|TX^a%e|`VP_+=VgRgSzAuPNdzdTNGqbeNA2h3?-O?<*8u
zK2)`vzT_Gp-D4dN{E80;i?z=-?#{v$FPG0Yk7;%@*}S;mnli(>nZM@(b}1^Fh6?D(
zrG?^TeX=HO4<<f#PgUoY3?-TV6wJ+`3#+X6*RDA)-S(nIM5^}QeRTEJt-bH?+T_*D
zb1iYCzxbmnd(tW~dGzi^hhm9X<nK}QSZseK(bTTos^-63x8)UrW0wi(H#y}n*hV3;
zdJvKTF~}Cu$<gVCz(l=11_x(o)a5np#0EdPPW>nN(*2qJ_tv!i<vHw2(T=^|$%O%Y
zwcXkU3B3GwWboFKJ8(OA$qyxNiE(%&0cooGt?hF2;m+A@tpbm3WA+41DQB<IdfdA2
zx^p<{lvWM5*TV~mnu7^#wwuk=KFaBpGom{NbCwHedw)636kD*}|DlV;wT46ZO``Dq
z^fFL$d^{+$!M#kyTD#d1o2zn4*>7RM<6yQ@HCngoi_O^)Z_L(#ubj7fi6HA>xpJ|E
zkojrIOpi?s|J$KpBE9sjcDk#1Z$BJ1QDM7UfL5!*7oamJnX$qqSp}<&Fg_u7Xkm&8
zxMM+Ew3o{rY*-t+c<h#-er9P17rob~FY*Hlpla$ciKUNzTM?m^EsqOzY&bCKppGTg
z8WtubR+KpDhU&&$njg<Px0KU%cq}*G`cO_IQhK=FJgeD)TrY<rPaT5Zruynh{xl)J
zARDQ@Z#fj%J0e?APXB&5?qR|>Hqe+id?YP&u-?@_-b}RSG0f@(#Y@TH;tcf`PB>~H
z#M{r!Fz)9564kapM_OEH8JuV8vgedS!u9c7Ar`Q5^jXRCo!Ln}#Oj-R&K#_<h77^`
zW@brhwLUv9dnUh|eIfa6e=#TLg*IMeIXsIOIAbNaDPPzaEiGUe8(Ah%!$8H}uwtRZ
z-d&b2Aic+)NxtcEXZ+GA-*AC{8|vd|A{cu4#@3qK-|%%2dp<qqhZ*jhvy=<IPWg`w
zXaBhxuDGGqx$@McIQ;p>cD{m1_P!~IvyyXpH#^*a@NVBwn_*Te#+OXcmA$UWH`;@m
zz9Rm3vA%*j&HB1ke>opd)lt-~{{+);*}(TCJrM?cD2PiTc=xfDjDq&7iZ@qWLyMTx
zvy!$uUzmztsdw&($x6SltUVvb6%$vKz;8UupHb1FZ3nt#*F<sG<&Lhzs;_jb{!AQe
z&kI&(lfmoNtw4jw;6ZAufAJo{y$q|jTdtp$Jvo!gtpChezZP2;#NmA9z=i*SlL&H8
zA=B2iI$b;V9ZXcluG~zlhf0a)dm>`)F0NU|0)UKT*NC`b!@nR)fSEu))jtreO|#HR
znc1H(Yq^+GR9Ld0TnzxHCdTr)P`q3^<_OUrHsLn3wCQQ##0z7j>X1XccTVzYpGX|a
zurp#rMV>r}XHIm4A4BeZjihCjBXh{cBB89nc_@zjbkSLfNT#55Lnv1}fBw*b5#qCp
zmpAd`gBnf~tcwjF|9xQlU4(vlwzh=b%4qRpbiGxqBM3;zdIn`D5!-vsjkOxn(HBFC
z#ThH{4;F8svA=BP-LgJM^bv!zS;II)xsvm#R@TptSLE?i+qz!hGycJ>D#uQs&S5?H
z#63U&;@wV2!`@SQ?FYQ<Aj($YNY02EcT(~bNJeOKC=sv>UGKS0EL;ktCbllL-irR$
zL?5ms@B)Ew{k48f3xwWtBc-_?kxIlC7-!0-oMr`Is#0eHnBWt2Sj9*(?uRm|m-tQW
zBb*XOYlOI?2DWztGXm<pVxxnT<+_Ej_3Rv<EjAIDeZ3wM!s5Rj6H_`MYLT}sNMt-s
z4_z1Wa<*`8*grxX&_&>$M-RaIv)YUtzoK<CWO&faiG<z&qwPFYJgvlT%Z-9ynz3di
zNSqEF$yqEW(AJb3gm@{d(FbV2(B2t+?B%@k5rgCgFbsbenWh(VB`A{TK>H={Y_;sa
zW7FtHj0H&LUia5q!Q^YAE@>46{;4X+g%<}Ok|~lOZW*>g>@^C5m5?#5V-xUEBl(QS
zYM0*lt*8*r3Z~x%&aZ>_fNYk8t&;>jF-&?$5(ZCF-l+EkkR1JC7a-vXa%B~W+4nBD
z$3kzuUCn>j0^(O_tUtrtUK&#Dw3J&UF^*K={Fk~UFfV!rLo6hK$P*kTjI>RZXQ-Fi
zOdtUN7a^S{#JZBHa1!xROql@=KIs>4^WF%G<n2r`;m<p1M(3f90*7!>P{B&IwgbKv
z2KZTbi$98T@G0TJH<(&-qzWn+Cg%JM^=Hh)p$nEjxlMJG1oB~OD=)$QAZsBZ>j!?M
z9Em8#MREw+{%jPeqRpv9k?()TS@4!`q#jVUY~gU?0&#NkE+10o{msQ7W)@+v!?W%y
z!oGIdfc;L;5!!8smdJez?MGu1g4vE=&6FWwzsp*xXLSM0CiH~Qt0H%#+#AJ^tn<t6
za)b*v)^0G8ulw<m;zVL}eGWs31!zmc&<$^e)0pzKG}D7)?WMIEDCwms_<@e`MNUFV
zLTdCmMMolkVWWwTil>05A@36>yA+;}4GWa1TGi439UEN^>kx)bm!+vk^@El}hBTL2
zaw>Ja4}BFj=Xbq(Orthaz%oW9iU(WyO5-Y$KuD(fgG|vv-m0QZ_=AV6Kv%!5uwhDV
zc<^^^4FBMavA;0Q(X6M)I{{OlZfF}bCLyYWyq`hEk9wkk>%7+e{p&aBt%GG@Ds|dg
zkV=o5nmeE)%D6~UyfoCh+e)<02lD665<rE74M22ivVo%AtE`!ux0jzFR-}M_o+Tss
zB3z^o@gBTsByPp=&j<uwIhAS(7;YF^819bNtF5FrasM!yUY8?cK}sV`3j(D9QO}1V
zgyoZ{@LNKRgY2sdg^W^DM-)LNH5FzxcZHey31O#xR`9_bMs(qcoKn$%P#}IF?HaY+
z6GC->xMKJ5bNk0dafDj{1-<ZMQ%|B;<>!_r2j5;PsTJr7DHj<dbpC;Gc}4FJ_=J0u
zBO|AVon2u;W#Q$BLZv~ezqpV20e7>El!^p3pIW{@Fyg^6TTf(dG}&n&Ha)Nl#@UHm
zEB8X{@Ahtz|59jl#m~Ai)FXWKffX)Koeh9#oBZI1P2rX{UtB@2|AI}4(1Ql_VS&l<
zi%|AJ(y1YJ2(sPe6j3=Mv2^W3o)E`#SkQVq<`6^FYZ;*j0U0IE;I6}Z!kTZWe1nIz
zocS<>+SYodigvAw96@N@AhZV<#p}LqFe;_dcWp`Ijr~w>q8=g7%W2EtyKi7eU>?xe
z@>opOBc_v#^QXWxyn5gGaHtB*2dWPMp8-|~z})r~r9qZG&+<&ANn+fe&{~j5?LI>B
z$NK6NDG;PfUyu<O?x}Vu1&WAdt3O`JLD3imr;3mb((v)#10^rLwy|H=3~v|&RsIiq
z?-V3TxGfEK_io#^ZQHhO+wR_t-L`GpwvFAkZ5z|~&VMK7+?X5Z{15Xm6Q>?3>Z$6b
zB3FJZbLH|^I)FadXvBrM+R54)?giOt6BS9Qj_cQz8<`59H*PmVX$VZ^u8iZ(E68Ux
zC1Ndc3?}WBAylpeXVuXTO+av=4R4}EB~LO|RGGOhA0>xbjax?{m@ZMh+YzqSPyq^=
zJ(28#v{D{JQW5y0*rLVY?77q!N~zelJOl}LknYa9S1YaZ>y92ZjqpA<a8{5Qx_;EH
z9g@d31W;GXS|@x9aR3p6b33nLGCOihm5W93m#8H}2QV-JrJJyv&J+wzxX4T?>$Bh&
zK$bp^@jln6Xjx9jCyTkVi^~!%rtGxeZ#fmw1;D74NA-iiPeMeRTR21r@)>X!WqJ*e
zg4PRC)Q#cte&tcjI>{n?U@W*`oghsU;$KPIb<ynVP%SBm9F|0Sap&ckb0%usC8#6V
zv#D%#kfdWIy>St|%F3{+T$au$`;Bniwv;*3bfs@NNp$6xI|#}h<(st@G@)ss`EQUI
z_K@#G<rp}$&v2Bvl^Aq0nPKHcJ0@O~qSPvvV3m&|(Srb%X4T4Z0Jl&I=o}VDJgx@?
z8e<t@z_o8-;})BwO?Lp+nt4^~Se__=NYf=F0Timr<&s3I%QnGf<;*YS0gGbGo6)_!
zyCgfPddHNQMe<qY=9<pr3T^0`d*19xVAN`)oh45~2=w=D9z=|ENrx^9h2aGwlt&cG
zD1S5}^vOKS%K<IbjnsxRs%IgtRpwOQerV&QBHr*sd)Eb+M}h2fEzr57(|8tQd~|hE
zmHo5qBNBo=8!>EXZI$FRc%^(F@0dz)xF$gSYzZ{w)p!w(Ki^@z|G3=d)16O?2M`qO
zjCx|eRAD`QB%kFu4z~!bZy1RbE~_HfdNt)jM{(AR<6<y6&(L&mYQ_qLK(3B3Fb;|k
zBP5T2S-z#4A>d7|dCR)m{a?ES8_lvmXNJI(ZDkoVF^j0k2_W!&#^X!*tHN7ChY^4&
z>XX8k$s7zui+Md{iH3P0mT&>7x!BAj`HYvcQMHzLwv`AwR}<~pv@zch4ti=DOm2f<
z9tuHH2TUrD=4Y`7!XoNKPo!!p9^C#voXbM_5A=BG?<}`uZ1hO|j?kB0vQDKZb_HyF
zuF$SZZXKIlHtsXZvOEYPlsrTj{W?yt))6WOLR7dMhyYN^cC$quk*12;5SG2JSxHxf
z+&CP5H$~uzXu30~V1b@YyD*hVejkpdTQ|~Cdy(4a+`>y9;eC5BawFMJe1xtFsad^O
zb8CqspS+m??*n)bqA@r3<7qVg&k)O{I!zh+q&h)*2fR6aK{v(X<d_(h$LMUfLfsJM
zsD!kzqtMzq$`jCGuTny3XQC7yi6s9%DeEQqn0(jEUH$wcTd=JGzUVFI1&!L~@H8kD
z5qpdbK^L<PY^%z0l&i|n@`ctj@FsWnl4-gzU2nN-L;Y9Wt2j8=r&#Nfe(zqvyxgh)
zDM%3Dt}xDQmP7zu59e`b@Sba=SaRfF;&$jMf{3Q%z>GL1SJ?N62tV^Q{zmTx>-|k)
zw)KA0LmEoliJWwT$%1}<jlI6bPm#lj2^C0+Hiv<Thb5rppcCFgm-`3qXu8^2o(?Lg
z<v)ALcMbJiPzO+!yrx=bvmyn!ATbaeNG-RQE@PTaqIGXZjhfWrE11CDoyBTujKz3$
zd;1dziU9wbleKdzcK4}_?iOz`kuLW(lfkk_VYgLrw{TGv%6@UEYi@OLXKP2ku&Q%p
zZ6di8ofTqrr*6Q023yr}>M($Jl3AI75{q~zm2RrJQL0{A@1ZgE?4O+G>(0h0$kX2W
zT)=yns11Ru_YaN$M{!4CY)EjZlvplMj(Qqt6if&Jsn#vtpkt%)QbqQA0J<`H2_jJ8
zym!v-Lq+Z|nE#FYTgKbL&5a~ODC-<ok(n#7thh^C2h0$@UZx*d2Cr=PB`s%cV@u@G
zr}d=5eJMMo|E$s&!P^?RjxNpN06E1|qG2GsCrcS?(-VUI+KFgm@xIY_E<basj4a#s
z1X34P?%fBYh~>`7UMd&4m}X`iGu%GU{!%%)OMa)~?YY}v{9L{ej~NQ9zmU}<3j!$4
zt@0QvI8EbNFT5(ZR#y?}5}jm&Z+L#5`o3e#*=$moKcb!$PCQK_)~f-7+|Q*rauEu=
zN+huc=OQ*0Zlh-tnJ;mrOo}b<8+twXT{ov%cE}}bbS(hj5X6}wF`QD4WKew;Gc8%2
z*4p!nP83pu)=dH=Y+A%kq+-ucJ>M+ewQD`4?9I0NsdDqwr4fiXaf&}rdA+ZW^H8DG
zDWdVB6bBITi*Pn*%7t(1L>$i^j7A;HF;O`yap(yaZhF*TZg>dGpOpNv42kq+*&)kQ
zhre>dcEOGa@zDx`j80{LgwLFgtfY9Ojr$|^2c5QH3QFN)5s>Hv<c~(qMxn2uAyUyt
z!`~>Soa&VI*yp)cmYsW6Z~RS=Wh)<qsT_6asD)M24$|vxk^~j=r*V_d782i40x9{L
zy5w%&R^r@nTtFLY2qUv0jXTcdeYaCeJBvh-M(TaZh*UQbU|W@d#Q{3b8sbE2qeMg%
zZAYX&2?JRSjj~3RRFKBtHp8rj`ynf~OA9T({5f5MrXa|0Fpu$O=`H}he6Q4q<jdEb
z6Lm1(lqjNncBID~N-vPTBNwmZN>!p&@(Ib@Mj4Homj9686JnJ&Kwn`qzZP-krQiw6
zDu;!9Da*ww=S>q5f*lL}Wva}`48?}**51Tm{tIj8H>^)ohFfu08W|L1@4{8<x&0~h
z9WhlK!=5osrZ$y8bHdR%07tpKZ@D{|7i16fup1T>XyX!`xrt6ZuU66?ChbCl>&0_N
zhWSyx=)cwdrh?d=r2}^MHb|H@C-_{!va3(ZEvk4$tV5eve3qi7^9V&y?svBiXdmOv
zH69YPSmu~=pW9HTZ+{@?@g@nuuGpi1&uNU8CS6$IJ8}4=S*xSYwmL#m0W>hkq2E+>
zkUOmqy;uWUS};lnbA#!lV&_U`$|aegY#ct~XvVh7|6{nQe&Rtq<^NrKyUXQ>exery
zd|oQ|ZX!AGUS2$;dnA5|7>EeJ4wagFCM3J#=qL}_b(SJ)gi^78E(-QxNW+6-MChOQ
zy(qFUc@*|gyE*uIw_Z}cHDMegeV8g#R8m*JOk@(L$e~p3YjU#p9=((89+iYh(T)UT
zgQ2kJ>sBs#sotRj;gUW2DIayLKBBn9fX-4EuG&7DnJR-*HKWW^U9*Swd>%!Q`XQzA
z7+CtJYrVNVvLj3JMqsM&y7uyR5mlA|tVOG|F<p|Ib?y^XRzlS`L8X*QyzXwUZq3O6
z_F0RLdYPXG&her&YbLMUBVG&%rbB5o%^Z#>fRTfNU6I>0TXZCQg}P}zbdg3SoA`aA
zdM+z0l2e)1P3^q=E9=9xWi{t2v!?8N*%D{DXRG-c5l7^UvF7biM)u-mAU5SO2{A$E
z!GOK3GTE)M$FjNSP5B+p!|CHgX`gLf&!_xzUG%=C@e4i33;F0V2`J8B!BAuMeeNJU
z$iu3uEINO?K<@(nX6EbRa}4SJNSMd1dyDt?o$;N)$@Q3}j+c|OSWku4yUyn7wUF<*
z_iNVu=Gyhyw6C4r`O}lQ%bPnqE`-r}O-Ea}|Jm=5$!ES}F3z^5u$VI5)xvq6x!pCK
z=e4$TtP34$$Dh?UhVGZy?XM!f%a68p30&L7Y}(Q#=+4$(9k-h8ryoyJS7&5w+7`>5
zkJC-57h6@EUC1G7bqmW{*j@E*R*7`u*IKITV#~B<b;xUOe^av69(#T|P%%k=2b#LD
z{%YoY7O#n}TeehOlT?mXT*qk8R2<rBZG#bzSG09z{C+Ia&(l0>Mn?BNxAMx0z!B7A
zH{ognb0ib}oYA#a0^4`&llhdpW&X{PMw5JMy;@FIm6ZN1cd_a1DxRjxzJ1|(*sim=
zF}1aVQ2b{${e~Vp1~YN_`{7XIk%rrJmrS8GkW72_L64ThO==pi*?9S~eD(6%VCq$9
z*?S-!PNf*4)DvgPY60!5(Vj@`E1YEDA#l}l)F)rc*BL2DCQN<b!QM#8NKqrKiMWMz
zDh8IN5Lc5*eDfRkZ8wLPD_L~pubx_l-sNJ9meFFQ!@6oo#yI(-ua?!DbyEj@w4rU{
z@AgcsBDSj5-R8I2YFW2M?HE(Km33Z~m_gPPugS^{KDFQr(JIc?;xik>TEUd`n8&#u
z$*Uq_8KB^AK)_QLpt}%wdAL*Cg7RfUg`+REz)My6%>_Om{@+zhPfP2|`~6!7NY%}e
zmfskk2Dn{s6Lb?JWW!<J7B%p5oegU2i`3t5!6j{;Ypn)nHjd{Rjk_4>S7~OiO=e)c
ztGt$+dol1f-YXM}UJdX>*;d)J19QxGl`D2I!%-1%&sw%Je;UJ+O`#_;PUnP?LAN42
zoDZ+!oCEpWBdC113u=rPaB1Xybl9#f7|sxqKw3@s-&cY#4cD%z&9j(ik-k_41~WQv
zSsF*SM9oUN!J^o7gI5~ITOQi`I2Rf?8*b7TB~dPzr*s<{7<?-}54kxrXlWU2^+@Cj
zj?MnQzcJ3~I4dlQ)-b-@h+f}G#;8J_cQIry3pf^#SX(}c!437O>S^nWqRnrYzvVA(
zHg@Z6=<>Jh3Eup^qzdHpLR0%Zc5Y^*p<#!Sm!qRXN}_f3&3+4De~*OP)6`A-W<vT&
z++%{~ZN-zN?sw^Gi8<6{pc~}d`aOA$I_$>P`e%;MX3NT>fuh|uI5Z!w=G&`V`vO%o
zeZ8#98^^$XI1PQ+zM_wE<_A%ZlrBOad47KrP<?eQuAXmN4r1;28Y&1j)Ky=Fcm1D=
zIV8Y;T+%u6lK=Vezi$7NVs2;TWKZ)SqNEd@iZTSiubrPA-_}y4>Mrh30D!<JKU({L
z-u_XFcg;hHx&;LQu>EmwQvVN9=l|`+5=z2yN<w<VOtf~6PXE_e{vS4p+o+5*S4hHU
z-BaNLkf!xvDaXNxL}$k_^r3^zE%QzDe0sV(pCLdc6|TiU(Gtig(dz%<M+1JjOm3g{
zRCl9Omtu6j17VMMULkaTL8t<dEAtjStB2%j?O%gt07t}gb_~rlK{ykJ#t}<EorfIt
zMsd^sVi$;guVqWi=zl1p0|B>$#Q!B>9_!EXXJc!RDo^5*ZS_ROM&JwU;puSp;(nxR
z<{Ewr`7RCSQ@3=vSpJQ}stCAGxX+i-A7yoQb;HTuBH@H=^wo6XG0$%zSlB}7Yj;;_
z;&xM>owfzlRh%21D=hL9iYCA`5zsz>>s+se<u|2({oC9mEp}>660N0>Ju@+h0uvaO
z?egU4rBfc=QpzU%gpH0o(Y}uapkGte+J5uXF{?%0hd$Gg6{jEtg4<=S#ks%vccA#f
zQYi?jtFyOddq+PVFgHK8IQ8xccc@{tBn-n9XjQGL_PoJBk(3df<m{;HNmr~W8b^$g
zifx4I+^E#U-h{@pLrJL4p@)=tHfDKZcU=*2b@fR~#bV4UPuJD%Je5#4Mok~5=gLqb
zp+kp~GU?NripleG$`$9FyDyLPbN;h+;o%AE8N5O~O|r!;vf@#~;PF&sYH@8{hdd9~
zt>j;Kq_VU8wF`aZ1450$j@lTTR7r++OdN_CH-sJ$21VD;y{VFUGk2~(dPdqGXUtsB
zy8E{0$#lx>9zDT~1u3$nCWDVsYYm7ecqA~NFZr99dEQw>A;=mNkasO1hY0#I*BCIm
zxck6gK{Ks4gQ);;BscCe-mAsTPh9Unktl^=n=o&=9V564$-Gtg`a5Gw`hW3DSrpu-
zxq$u<x+m;eV32Sk{*eWUU8{-*uha{U<|VFi66N?wgP?lSTZqEUmj|@6=2nq^W#jms
z+dzN0Y?g8(1~}B4?8515a)M>6gwM?p9b$`04Iv#f&SQ4seHbK22ko2qo!<t;cI!x~
z?HIHT3GtQ3^8|N|P-yfw1vYpQYpu_bK8pGMcBJ{cuIam(CW#ya-1+yceyu<N5@-cE
z&}U2H8W`|?NQd$F!~O_FwKzm+_e5~4Ky`z7PyKSyA(7#9&6_2ip=LpnByfseRSh|G
zG-d?BM)X`e^;wUFHR3BilEvWfI4!!nIB+h;u(|#j2ou_2ebzC#*j{X((HIAusP~*Q
zY)?SHrQBA(94DM#`wW6&qsuW|OaWE2$jp#v*Y;UlWOgmM5tF<iAhnYQ!A^~A6TSUX
z1Da%mb9S#mS!k?O9CZHixi-m48EW-sE|^jHmXP4~Nep~el$xHPr1nR=s5OO$nd@@2
zW}^`z`pQVWp6jXGq#A!y!~`3oQNVmzm|}==h5PTgao{MXa3DT$1eT5i!4&@}YBH{+
z7vsENg^rrTseVQm-q!8@I$wS<wx55$z+$6M!gdR2VWvKig~p{|=5Q0LvFr4(!q|4R
zMz_id$6Tg-M<{aljt6Iq*ind|4q~I(&3Pn%3&|Lwo=@a_wREuOLy{7bM_3a_g&HaZ
zhoA{vJno_oR6HiaUSpjGe9r|A03ffT5(M<;+ovfM33%DV{?>1!<uh^)!-dpWI2WEz
zIS}JMBcK(5-x{Am0z(5f(D`mK7w-GkAup$r$OQp-|9!@F<lPw&a<M|Dq|kQf?ceFk
z^OWzc{Dq&~Ng%B428(z4m7xE-TckPKsRr*9X))50V`odrZSmf$U8#}XJkUPJA*O1n
zCEC2mlfI_=*9g+%qZynRL(B5qEZb(q97Fo4_2?4;*!hPJ6ml8L^ooYo(k1OXhOi0R
zS_`mT!vRsfP97&4HS@VoTTl{QMPb=of|irnWoOG9Qr9|)%wIsx6(ZL%=cU-5A)7Zu
zKnvdL35jz&1HZbzB`maP#gm!Ku^mc{N^lE*f}c#FE&H}hX4#JX=P8?~;><xWeLZsW
zvh<_~swwpPxxc#}FU+pQr(K@!!+N?qSQ<IwwVS|Zs%dGU;wv^IoK|nS+P2yl>gJZ>
zF!rMFB_rC3$W^LaOqgvi3Vf;4l!Umf-`6CYb_r#Yt~r^yay_<a6Ij~SHqtXk61N@P
zgN_;oEw^?rE3~M#u6QB&SQowaOp9(aTNN?NT6i95`2<2dQ9ejiEB)+29@sq>#Ebc5
zh=y0P$a0pShj7+P-$%3QXl)n~l|+2U<B*V>s+2lhS}U9#PA+M*rVDQJcUuh*oT5e+
zBr`5aW(jW`b=6up#0@>yD}$RDNW5FLCqtjS8iS9`C6V$v&fO?sH&e(ul-JyeQTtcB
zbRLcyeg|z-gssos7ngA+uW}W8UQs)nrL|1XC#K!evo)=Hx~1O4ATI6)<tkY#+?ch0
zJfc0Z{bN}zZe<0o`Kh><zyJVj|GccKDalIwR8>Yj2`48P6GuHoJ3Hrp=6o|rlxQgD
zL=HOs2xn`N^>-fMfkgz5BQ-y9Ak7yqAf()^={fO8P_v6s+}5QkBc^(NO@kt|X8$f7
zeT3PR_mAPd2_Xp1GwCi5NS_g~<B!E+1>O$uyy1L6yktpFUGlNhZZG&nK1TrJ!%mRl
z2g#(5f$vUWi5?I5jvw5HBxwJPFrH0er>nSW@zj}G(sJN(@Yj#I_H&Wjr<IwD6vbSY
zgLwzy;y2cy*y8W0K9y5O6w3uLvaaL8Dp2D5JpaU8vrtetCTuhIzz-<C$deI)EWcMS
zi@iY3hcK;2&m41tB2>&B(jmz{;=en1`4=|&VJ$|-g4(lIuWH5xy!VQ_yU+*xd%RxK
zJ>I(OAL)F$M^;NySKCz&9?_6M?3JEy7Z_!^3c!Fc0PrxSk2~`%y*|9w<v5Mc1~Z9b
zZOCmwE?4b&@De`i%)`MVF(p1Q2#<*@TWxzR9kK(7G6NH}sP#(3cX>E9`oB*wP0=~*
z5_80U|6+B^X#n5tXVe!VxEBWq+_x<20&^j$U0>5;YbP`$aQ1e=Qk!n9W`${pT)XqA
zIjF51Y?NC9saC2$d@wx?D{~-HYu1dpR;QTuZ()+D^DP>Ip6HHXv*n0MJ*HXF-FoeI
z52{&!5a|kod`;C_w_!`4UByYsjv3@1uJ}4wiGxW{7$1D@g*)%$<dz}bG2z_I7BpS%
zqRJx-6?f(w71GM9ki6?EI(bn@`m1ZR?|rACWn%zoH8mmEUdV1GO7ZY+`8Qgipf;)S
zl3(_Sct1Ybsn9R<xX@HH27g`YA&ir{?<yfGitBvZYLFk#+|O1Ws7=p7mI!?FV~`9i
z<?hzKri{kk{H}{@LN=TY5bS7iUlB$9lw)+#t@2l`%CQ(wa?9prByu*ByQ>Lbc=dye
zR73Ld=1pgr&-&kU3UvybkJgUttflg%tkgPf-H*vWOG(tO%A_$y@nxI!rmssuwIp{v
zVjTtIiX>=@mCf2Uhdt-QCxsCKn!`|prRg@;0DEU0cOu(l5$1(yN%3YP+SR58OfiaG
z#jn3I$FSST?}nIO4O8b0o;p#>IKLE;yUlZ0%*yH<RI+lpSqA8duaj8POG>&As=7O@
zY1M8SPR8WTZd8c{Izor7u(26M8*s~wm#X0_fO@184-R+-?ZXpgmH$`@<x(dJRJ;I6
zX}!9u>TXIz4XqT|rX5iTOa=oV5Bp_ZSro^{1bZUn`{1BaQ_4)Nvk|`hNQ=I@qkq4?
z^FIHZ!?2FDuHwJ&f%Tu`gM`xmH{gM?D&YTZco<*!H$40s9{&FT51;=tJRoDeglhZ*
zab^B=0BHU>JP0%C37I%L>xqc`Gt$tdDv?kw4&QxGb!6KKu(~jSU7ovADDQehN*IKn
zOMYI1*Uoh`l#%VF1{^Y3DcP;vJ^uD+r2${o{+RLyTTaax!u>?(HKM=0I@4GJXi~U0
zSBT$PV+~sc8ePRPr@VqJ)0zm}22Z~VI}RE)Rvi#H3T#<ajwDmY8Z=51kXA1^rQ{Ds
zf+at52~LV*3ax3<9x_Ix#%1w*<WHfYRDTDLd=aJz37Y~{q7=BsF5cuow#1=0SDt#8
zaxtsM9cS413L6HHz0hsdZ!PTzlSH82n{C&#?2uwF7><oGhLcf$0;}NfBpHE*O^3s|
zmtp(E#7F@>F2_zk5|8szKppt0Mn3o}atDNo)AwNCX(m)9rz1rI1$?CrOxQ3D(%LH~
zxW)Q+9=<I(vZ+5I^ylw=?m{Wj$?@_18TlZR#tHt>_=q8fN3-I-c#Gb1dEDNSU>@`2
z@|C+q$G#KF>#}xDL#v6sE6h{Sa+1?l4h3pCvs3@b=!<^t1{1!~`Lo5bknRk-5K`rw
zX?ITDeq^ExZRkE5K(D2T<&K&e)2r>W+dk9HSInQxR;l4D<*7A_zc0HM*`G<jXXvh|
zXkzYP;~Y>+vV7oerDEim3#UVfVTs2>_EY%`O`|Xuf0qARgs(Ot+YVtbJq~0O5$;sr
zS`zqZUP3k^W-K5-hQ_+gwTST+A<sRiUFV0_GPWo6vJc#4IJJ*mPPeyLggio;o|2ZR
z8{|Y8i`nHKvDCXg=z8&|Wl?Mf`Sa!x<Iazj4AjxigpeX}Wd6m)UrGOEmEtP*pjzBL
zQiW4ffY?u<WepF|l$&hL1%;P;0r;WtdrAX(71bXIfO;LTNE&9{*XXoJa-v09(*IX7
zJ^>A}cwVkgoIeg$o$s7L<_#1RKJiotg1`DPaexW5Zcg+;pD5IBqA2Kn4s5dKI!p40
z0G^=_-yq)PJiWY1(5Fl}?@{Hh7Sp4;8p0z8R^DVFmf)Z7hM46nC@f?P<Bjk09m+h;
z!_q{Z<74|5U-NI7udV4#3P%!)xH3MJyFG@iKie0PtD70IBfk%>(O^J&-t>T2_0_Tp
zMbB+K;#-WzA+w*agnGT=2zr-{Zmw40`;!Gnz%$k<4Qoci63Va)ahTJJdfFkD6_LcR
zH`%<8G2fpDrcSWsKm+ETGo805uj8DLhthb$q}PV;{d*A3K4RzU4I|xfOMNKjJmRv&
zfEG8db>MJ<)*2;WJJ0s`nVb!{j1krkxbCnUexhcKr2guAwTG!t2Yu<>W(-Q6nr0s)
zpo2bku-J{Mx&xBP>2X!lV)5aQwKlsV<hj_&prIuoCYU|i_nyXMZ}V7E4yR>{A=UKy
zOWV3fAk{Ztt$Xs-2Mh+#Qi@F1yHlW#pTto@J}=MEo>6d5JlgO!>)3^^_d}+Iw3lgF
z_t-K(6`fNlkui^~^IADLxBy#gcFk6&A7D~7HPZTG+M)3Y|LRt|=GKl9Gg&fhFu(hB
zFgK^_3lV(2jedBz9c%J;A~smReQ*sQ=&YK}UZ>}aYVp}NI_W6iFPV1jES}i$sd_2t
z>vFa8)k(8mcweQ*(c3y&+rYvz{&jqCYM)vlY8bO8w?DO|;*-J2nb$<Sw1mG=!+cn^
z;TrEc@OH1i)0sQv$?B%FwiYr{wMpF9lw0A|pHw~n!L0k_n_m9ONPVlk8=~-3`|PtO
z8pa$<Chs{vZ=CZSk!AHsdLXR8OFl%-hj;yP!7)MpWzo6yB-)VcE6^62bUSHxur76t
zV=$kNqG{5u(dyH_Pow#}l<w*ZSG%t@py&I`AhYMzx0@x7<oo;c749F8e_}Z&@i;&D
z4FLuK@UPN4Sz(6%I{rxr3H&o4H&GdDE@wy1x<_Gg>oNhT8K)=6OYnQ>j}#Ta?5jZg
zQ&VGJrB<^<NlFlsFn{60`uZ5b6I%L%;?mlBYR(vM2R0u=3OZ`?G!ynsG`odF>SwSL
zHUJl^p5YbwCEf<X#?F@JdG&2-Qz}WMez{2G@Drg_K8A`brLl0}<)s%upGCCv0!1kG
z=DZf+9AU_@nGbU@i8<<}Yue81ousfqSV`~L-U>AEiDGjSP5}~<3a=34Y6~uY#;?6R
zXM=*A9xxgU0mP2F!$9k9h_C`@R#7ewzrtRa`p3oqEE1vXa%)xI{)Y9VS+X4IKuz;<
zQz5x4KznF%A!(6C8zwUDe=yL-`Z%*XmnoK4u)5$TTnw^1V<$-mA1x3UoaDHg2=k~h
zYtr)8`BsmH7u0a73>3)^q_x}kA0Fq57Wc;#sHKF73T^r-?vD84(}BGE@j242roiGC
z)ilo}f*7F#gg?rms?I#)LHENzeI=9{6i`VdmD&6#K-#3%<NV;~d&Z6JhE1<D9%_GZ
zaum)_kz5V;XURB)`T~CTRQR`2kHsmF3zejBG#jvY!`k>XMyB>$RxghlwmprcK6G`!
zHb0+KXm;s8zO82Q4{5#Xc4Ro5RlOZ^wmWu=Mj>etgyo<|gDG6{eaL9gy_jcS{0W~~
zzUXMTiD`H_%Zf#7-<;7{F<aLPhfDX`VfJ_^+UR@Lk6AP_T6h_{Z{$eLZ}T?mEp{jU
z4Ab4g1{UfZ{y4eSOU}(6!GAqHOREsPmW*=+2(wrtEI5Z9>bSuP5$`Y-#cMJJ1Klk|
zWpuv;ytWyb?YhLP=r$WNU)is>nQPzTt*AFk*0H?@-i)^1xTM+M_){QdyInEDzEO`{
z*&wc3QsD;rXee44-3H-?21{bN=V5hoK`e$OXKE3OqyBpJC1Jvj0IsAJtiY61G^g13
zdtU1#0ZA!Q5QNw0iV9Z+4`h%3z#li=(%O;0vVlcpXFpPkOmK8wM??$kjy|(GfOhOm
z)jrw7Bhu|EAny}3=;#8W^I|)b(RV+rlk6`DuX7`d(%~QU&GVKG25p}Y9`Q<$J839o
z5lAYi{?poCz@$SqC)L=5iP@+KWha5^zf~MkQivMfTOiVNb4*AZe=jQICb%KMAhWoS
z6K(^*&tpwaZ?)HaI$wc%Kg}VRGRO2>NN<etC0#DMw);juvt7i%j|FWynCmH<qc!gF
zFqn=zGm3$R-weW6*}*Wetl|w9>QGtBsreS3=^$z3t1S!YnBD4Y-WgC~ZfKbz3Q3VF
z&+exweJf^35G9q_cJ8neZtM_PPz`0B{0;8$s7cXBZgW%%Inj1|*zN21d9fh<DZShl
z=a~?GE2HtZ8kBN5o?WQ!=VBZm4#uQ3%{a4OJ96<xMAJElS<u>cBq>1eYcH;S)pPN}
z1@2`$?S9q9w3k`rBR)5|DuXsGyT)9&B(=ma3rpp<VD-L+B;?8|I#dr$uHFw6jSubg
zz57&mbQ;<~_rcZp8&cRbTAi>%H0y<euplZvor~18N$UP(!i${PI9=May)oQg?wHuv
z>Y7|M@x9PhaDTBFH=ZwdL|KuRxYd<(_6eUa^0t?g^0o!wHNtM$U1kH0^X5%b-L_>b
z>%v6NRzte}5Xq-!mD@gJXu1wr-(SyA3Z-LPaYST==}B^ETJ#TjEpTbS0O{(MVzbx9
z)Y@^{_bscS1>Lhz%OJ}B{F>Eq-8eQRLjC$SdH!#`xFK8khRGi={`di7l7E3rGyXGe
z%Oq){zJ46m@3<54mjHsjJ?N&hQ-UZKd=N&<VkjDLl4!PX!-rcIrx#v1c`31s;2jA;
zv=L=)kiHdqZKwUPEQ4_hE~B-eraeDHwh3z5rMpqD))6*AWINT*PNws`o3M!uTz@?G
z;56pDsz7TwO!|0Gr@7cTd@)j`bOfngj(}9Z2#|qeSbMTSWc|K}@p-Bl$X0zZvyDsI
zgSkB2SHDUe0%-Ln>3Tm}xtu4-uB1OD<kn~r7D$dGfdBvo-FajdF7%l9>)-BTsqZkU
zIrLTpva<*FhzM6i)JTbwj=eE3H-BD#cf2_^vuX$U;ldlC16{m@zi!QcesW*pL}LY=
zJxM7oPbyf5efXNIhRm2qm$%H~)SGHK^G6<12)QQ87@EwgeYRtKEv*ReA?smQv=7fH
zu5YFA-9D}G46?*LN9zu!WaMhj1Q`|8TNZHXaL*{@RAOJ711A`Mmo9gF+S|)*Gw0?U
zS=xL8SqV5=QCHhj;ECy=TmOzT0|kuXKoL);T+zX+7J#)lZl@xSXg7^<MI1d4R5Z4J
z+uSOvf$LP`&91CdAgBHO5<4JNucQqoXLSHkZS(bfBpi$8npYiusqQzo#v4ks-LI(Z
z=`S?e2&>-rRB#V?7Pt54!kkmlGuVVIKE5Id3gl>xhg(Nu`b?a2yI+yPFp8YRAdj4d
z#?fbT#zoWQhvvr_*g^KLDdlYv0)mL8Cc3Dc9a9T61V06YZ$OWNXpMbk0G0rzt)__G
z>6gjQO`W5`&CAltaB{>hxKQuLvFdt|^_2nYMR;FxPfaoC-Vld<B7n%&u02unzd8B3
zuRVo*4QHe@uw4$4BMf;*ij^4r;(tg&p#2b9=}nv^WBc-6=-*%o051VXMU919DTRPZ
z-jCgwJT~y?IyQSj9dF<!LBI_q@QE^wwfkmVQ(7%yq7rfl{@u@(^_PKI^xBr@fUU>H
z^vdkd%(v`DBr8DpF9fijHyZOSjo>FK%QH9$W~V6upk3@S=;sO6jC5K)T9?eH3gF+P
zUxb!*X&Q^X8)HVlXuzmA7i~4mco!awrPWgR8fLpEwqV~E5nPIp?06PRVB6^@$A^d3
z=B^e#XV!X`PL&Q{VK)=aIu&l^h6W5;q`2i~Rg$XeS*v*(lailf#FsnFyf`eM-+UXu
z%S=v_T>Ch?lbAVwW{%6bBH_*4ORz7CsI>K{y&1QIc%`>OH?MyJpN4dJHlW?a72}n=
z*NTpwh>%Rt{6}vG?w*!=m2_)bG^;@No^Gk;$5*VK-t}8dCs@;;^W!?@3Wc(>&dKc5
zo3<n*vz0|>`fE=QB{43CP@@3Rcyro)P}3mL)5sDRYv*<=XTM|7#J%`0hwRP(D**hr
z6;ne0e#5Hny48Pe>x;yG+}VZzfFTG2@3(czLCHgE9rVrv7kaE{2H!URX<H&afMuSs
z&{_keD|Wq6JuLsIy#8Il^O=9S`9T23mh%7{V(5`{m(=leG>q7t4HO{o>j-{~P1x;9
z6KJg_gby}UD)(!VBa;-^w6`%gc?nL5|8(XFJ8(Bdw7bU!HKOYRA@>{S&f6WxiAu?6
z3lRJ7;AV4~5?l};U8ct^0I_#Ttq-fRo^Qs4Oc_RtQznn!)$`p+ki((2ei^{05g#1F
zBL9IoM~rb0t|7^O66wj1{d$!W-f0-gh}qS|*`4_o>oI|Kj6G&FIUn_AdU~6C`r8=!
zct_&F7YF91Cqql-kMH7kQBv{M?_%>07e5$|Z6Q;C^@}u~1btqvLW<4{WO)oTPrHi?
zA|Ai-;l2Q@DJ{9P{cmFL#exl{=<FI{89P<W`=z<bZD}@CGE|)}c&~GHUv+moFzcl`
zo?Rt-2j2^6@#yl+%fl^jV{cj88MN%@aj>W>a?lVf8rOERfy>0WLfFNUcEVHP?WG3E
zel^n#N1+#g*;<<`Ef)&79d_h30{Ei#j*`7yzW)D~V`b^cMgj37*_i#53&ww5DrEmR
z6&qzKxO#Tv&3h_SyYA4PU#Jb_jfnvw5g>^;-LWBr_^2O`fzzh(7ITdpQ(Z03nF;U5
zGp*2n!k$yYyk)5kfug&2@WK#*Ow7}B#}x5H0Tug0C;qCa)!fgg;SGkFJ#mO|+(b5(
z+KB|a5McR%p!yXP6k%6UkkhAvjJ7Jwr%1%`;j=2zVK+D^XNIuXAGpgY;%aOPv?Y-(
z(#dfcB2U&mKwXsKkgH;CKN19!=ZU^anQxWO7;o;^_mGS-fuH4!lqT+nK2C!rZWG1>
zlD9zFP5i>S?en|cic28(#YMK_evHPqavg4YKGhvZgQZQ5^%@tDBS1t3B2X|VCVIi}
z_xJ7QQg`o^Chr3^siI#6430D)#?ClA5s&)4&H~eZuTqi-`(Bqbc?0{GP|p5^W8XfP
z7oPqTWKBF$SoHI=loRBU%D)fJO~FopcBVN#rZI7h{IJ!V#Hc<l5R4^IFX^@*<=b99
z8~2N;JLOgV!9)3oVm+ijQQrss7g|9k=xdJhD3HDpP_h4YM_T(n4j@L_xwOu4(6?&Q
z&Yx(46`X@ZA4=M=j^ivI4VQz2^4GV5-8&moTl3+m3LTYQkxZJ3Z*5akgvm&YPyF}*
zEAM2t3UbLO|E5GUQ#x->nNAUNQti;K;hY^9TkbkI9bL=jhDjVToH<^Og%<UMm3)|j
z#iDy`FUEm`XoYxdGCL#3A?i%$OA?i(a7kfDzF?=s1G1W$#EM|oLghu%??lq^*CARr
z8>d7t62fBF!9~{eiWnG=8NH0jvaQwz!BiXh?y6@lu;iv5>%PgM9M6^<@mM+Br@CDt
zwDS_RmW(J|P|}7y{9W8RU61^|v@pXq%{Ecv$KbQo2qBaLQPGda6>&H=;;Hto^8o%{
zKZP-2dhltzj5X`%%0!SOYC0yGV$>ewNgCm<0i<svvRy5txf%NIPLRp$=yrivLTUe}
z$36@QV`-2E@?6kXOQ8C|eN_gGs7oIbR&+nbbi!Y$N+oQ6y8b?3iBIXSYJ7Rf;p+$)
zZ$6;LCbL{MK0oS&<mSF)fdw%(f@iawHc9JWlxI^Wv+9gmO6@NWyLwgCur4-2)45>`
zQ*5RP%(uKBVVZ(BSk6sMOe%I9>ed&y+-GKbI`av(MlPQNWxOf7+%WR6CbT`BvX(e3
ztt{HIb0%7k#qw*qpg(B_h6_<>Bvm8#S}mBCj(sj2(AsX|(qz}9z{jlC9;}Zna6g$<
zJfX>fu&h@y+LGulESqIDNPD)wc$T3wRk=ZAZF|N>*glnld9}F)k@dt4Ji7AY8>YAq
zKLM`YWaYoCPkXwlLn)5sxCm5L2E@<b-=jXQu|NgK(=^k(X}v|s9Q1w1%>4%V$7VsL
znKIGR58xd9@Kefv4mxUz62f}I4F8Ozsw7Ud=X1gb9e0NR;umm8{R05lFTzjDL<<=@
zF1i39_xr@hb8eurl1`%NOEVGP#()PHRj{^FLx&7~X%lKmJ<xZ|FUCP<giy!FC{*7r
z4!vKg>+_}jsbE=q9CHlmxXOXLo(9ebYzeo^KWvM>fFRpkT-cMz$x^sdJ6A@aWI*2;
zkci^}@Q4{|`V1hXLUwkw;mxQSiuT>!V<rQ(-!JOLg*mcxySEGj)2;)<WjkV|)r`2;
zzuJCVf)J`UXLIK~0J__`fyNR*(S_g~YE*cUuLdBp+;8X?`ze2#nvHJLm<q%Gm$iJA
zS!hx5;!k91^0a0PC^3*f95kM%sL9}Tyj6j=_U<xW4^pJqBL^XkgD5Rp4SG{uImdNZ
zgE(@ZvS;3ak~{0yqm~q0+@mZ;z{LgSbEot>SOlT&Q9@3H=(E!p2U-<3+OiW6u}BQh
zPNUt3m^JUJV}ah-&Lkm6Fd_4my*S_gK;u!@$6E8i%)ahz)Hn{%&wd9IorEJ$pKTrw
zICkbGw&A$k(x}YmHb`ENB{?!7|Giod;ewrV+SdzWtvJ(Z>XKQ?iEuV}B1t}mj*x2(
zh)6@FydrMuKAHD78HDkqi0<Nj?H8+-?VaH6&rfZ9S)LDUhuK^^;%)vR<Fe5`S<^wd
zZlevHdkW9Obkh>!Wxvjx2)xUWGYADXN<qJ847FukEeatmsM6eFaOMNy07$NVD+C4j
z^A0Bei?jWN8RhS7*(!VnTG(4U9sWpqYx27e^Esi|-Zc)P*${L!qdJxhK_}n(DrK~p
z2OZm6W4fKskpTgIp@#QmXGu(gh(p?l&$o}+VQyZQB;RjT8s$%bP6%2v$Rc5w+s=Rm
z8C!7IXvjg7QoUO^{|eI2MfEIEBu&59?}|Bi=VDPgoO$(fN3-pg8{jBGzGe&VAP;Sy
zP+GgoK?`%?)E>nyPvy>y@5h}6<<n!hl+)vAa}A}FXIdFqz9G#3x}7!HTmh|<*Zh5?
zfzA}J7aH6WuhnXjQsX&P`>%H}h0-lwu#h%_<mLE3+pqY*@mT659a!nri!suEJxoB_
zz}_Gqt71(-tt!BB%JT^ASd4LiJV*z+NDXA>Beoe8^pa<<E7n#>w3p~)I=1Cnk7u2f
zc})3(d%^ds5yfP&&TUh?g3U_CTb7$Gqh9YdGc^RiL^p0EhuMs~jYn(U2)#fwsHdJt
zjA+E*ypEb?>B+9|H>mP=w`Yj1&s6ofp$d?ZkYb^B%I;P-F5U4_Hvp7YgX!EtPh_w;
z-iz6~nJDKDHno-=jL&nsZ#pHO9s7G4$2hP9z}AJY=indLRybX3(Ip@6QSr1qD)F?L
zO&pYD-hIA*y?WIFVX3{n^T*Y)a>c-~U_HfS`p$jLSy<2mUJ`Lr0qSvD>m#*n+%kCY
z)P3BI_}ugz>HN%Ih;^DX<yVIRdr6EWp4`w~p_uaK1JF0=zOqAXt$_sUy*I$lfyj&h
zmMOkgg7n16QvmZV6cCkxM8*O6y$t1N<(j)~!1%G9pbf56Y2i)#3)79Glc3-TiK{F8
z+APnUKUe;h$J>Odh#o9GO8o{!vKrDhKJWb3Q3TIKFDAfi6p%re&FnA53uU~T7LlFr
zSdpbu+UBq)`_C30-G!BX#Worhl(Wk+6gcsk9^=1L$##x?R*-H9;JX84FCLPv4@5g?
za(HtTP__>?w(A!Q7p*P6NejnEri;n%rAUqEI$1qbWHYrj{h3|@j|XT3(p&mu-a;^I
zZkLFB8GCCF+fuYPt+%Ht_Vpp`6<hN^@oiPOy#ycx;Tm5yDQMmhBM;0K)@9pPnw5BO
zZzp({PP~>xrazRJ^4j$BE5F00W^u|pt8SyH<?Z!Do4Wngz!2<@mQLu22df-iI1Ym}
zZx|%wyNx<$%bjZ1ohb9RP7aHCTC%lT;iAUlRKX7B8o$Zmw6jakMSP4|7xdzI<uj;<
zap%P2Zb-u9W!C$DYcoGfs3W`n&{fGF1264AuN*&Y^*?38f1$l>qarb%FAm@JA3CA4
z9}r~-ud%=wY(3?cv6#HD@#kZp-m|dxJQIonf=Zf(Mq8)a<NgREJgUh)9qxLycdUo~
zt=LQ8tO>>l)69TpQXf9is4-06GCyY1#3ce~A0%>9_oxRRhW_radi@)-%2WAp;7XoI
z$E+4fJ7gX9g2@|%1=?W;EZanGZuFUn;IV$On`l<|L7>zgYfZGOq-<~tss?iIa3*bE
z3TL#GZ{CZ|Hr}H+{kB+aP)mAS_c<LqdJuGQ9sXqzcA5-@9+QbbyF~N1^y5Ip-y5#E
zU)vN095=e*jHk`K`c&}V6N<MtiGp!d0rMxiat_ZjWFKYk$OvO>^zy2#9vYz={CRSD
z0MfXXJl+r9#k5w?Gp>4&bj465dxl<^wx*<H-bIV#o<RjhmyPeylgovvjCt!@@{Lz)
z*Pm@ME6g+H7gsy`t9PxNw0Wy-@?s^iTa>rfIpYm$OLC^2d-fZqIxX#K&#y(mD27Il
zR}1mY4e{<Ria}W;C8b<0Z(%GE7CqA{$t%@V(H?=RYTA35=}o70CIgvIV?f~@)-6%p
zOIwtCz-5e2norrJ5;{4<^fH6eFqxU^L&e9!HW=IvOIV4`(Rgo^Wq97V*%K$25$hV+
zsx6hgnm!agQH!vwgc#cKZ<#@5@kps-1tZ~Zuaewoixb{9UODSal1|4QYo&_msyTp+
zhyW4}Z|UCYO~6P;c1^|ox-enuwa)86%1n%on;>(#9N?>Sj2WB(Bymzwz@xRL1G?Js
zSo?rPj<v9yC*X6R{NhU~bz$;;aFTktBw!GiJLy4V6wcL}(xQg&&YaQR*rWP^wDbcA
zK%JQr;P8HPAQ}g+s=yOmxk2(Fdx|6RJi<<!R?gBRNbfH&*{{EFFKr+424qs0&ce)<
z6bPzn*P!pgn&Z1h(gC8T(bDGl)6m9Km>O1|0lWN;zOd%z&<eQ-JKqyUsXhhEuZ(h`
z7Fx{d1)<#0j_ndn=n{QOv0>nWUsdYM#7n&d*X>(EgRkl_-gkV>Q$leK`nLLE7RB)T
z#qUb*57oZHO;9-DwrOV(Zl~@QFZoqM0P=>0(JcW@#e3!)ov9)1$78cdGIlJrGVYbt
zl0}tLQ*}y6$I_gR_#h5HNs&RBh+v8e(Q(2(FGkFNy}F7m#iirO2->M@yMTeI%RO$T
zj96`EDF(J9GeJhJ-=nbZ#5ASLIk|)g<qH%zd#p8eZ_|U}RSR3tha1VVsENdphi<&&
z9`c^P9&4}est}Q!CX0LjNi)||l`yRjPH7$)nV#3vd@+U+^q?jXyW)%+W4COT^~yoy
zG<=%BBDLtws!}TfAD3;6Il18I>Z6Mh%<$Agvsw6w`)b_(B#!DWHdt*GNg$zqrE~%P
z_^>Zal<M)?aQ860wWysI+;6SIw(|ALG*4^i#kG(`GAiN<i<M7hjRD0X6F*(`nr$1|
z>sO;5lc;InV`#H39q;00wNXx}<EeT<_x&R7_64;D|Nf-;0{ur`yriC07yE;5dOzs)
zFNkRW%R~9UC88ybE!DRp1|Mq=rFDFf<ob^5!y$shbHdDlGhs$K6Ox0ry+vjFxVkY`
zmM?hTAC(;}*LVmN8XWU6I`UK+Vz{3meGILl7g$kD@PFj_8Gw^F<G;|F->(0xjg%&c
zGiYY$?q&poFBAkyEy1@OXc`9W6T36d(RT0_iF&&kdP_#VNexGgiThPIsnjz_l<o&r
zhQvSX>6pZ)__wvV-09fR;j^XiGv*-E=#9n68je9sAmI|wl*%tCM?I{E;c7-7!YG3~
zRhp0lUsz}o`~zZ$b+WN$yh7%y$Z-_PV2=>4%R22F)&H;Umr7x_ON%U4OSB2P=&pMV
zOOl+R#mn|ByIX&xqVkI0@_|tajzha5c!1vvKqZ4R`pbdL>@+CSkj3Z1)Ai<CcKgI^
z8%Jg+X!_r0iVq3;=I4yS9Meut+)JT1q&KL?MwPjK&MmoXF%RbLE@UjL#qh21yEGD;
zSjS%Z6a4HyH!660i>h*m>ji86U!V3f`9+0-J-VzHAmcfl*LoNLSuI%Uqnqa`Aija=
zP}(9sB1gjw3$EDEuDV<ph;+4G>|C!Up&2EL%yz%MCjy0FZyDAs8{yUjI8_YKUg2at
z?#_l4AV<-tlysg2<w47ST_l%cg0~N>NGy`S+%R`=uo5vK<~|8up-?Y`HJ)*}GJUYE
zUIK8RyQ>!qA=fNwVmX#sNH?YnQd8bG??t`Dy&^cfoqsZ%J_UB14#4;pVy{OKrRD+i
zQ&FfSVA!B1>VE@Dk#T|3cDzbjW5k9Ma5C-P;o`qJnq~`x<F|a=)cAe$U@eIk4gOZ2
z{qfQ2<C>$ARFQRgs#6HoxUxE}wm<}d*9t+nVi(%x;sMs8^jl*ZB#6Kx>VY8#i8>uR
z;mE!lK98%tj$3~9YJVH@3g<r@R3<5yr8AR|Jtu9Jr&I~!Q95PC!R1YU06weoT8X|`
zfcjRpD4W7y?eT>k*3;Ez5b(ySEs57?qi(s@y&^N9eaIjPnAZR}sFsi231vvA>;mJv
z(Nx=1cU%xLp=41cu(c>Bgr~hzK-~9PW~zB6ex*Y!-gbJxTDQGX9zqL-ukQD>Ghzu!
zzOU}S?v5h!6Wv!B(mJSD_(5oQ2jkfkQs5t)e7IIx_=bzQnrc>5odw&4FPea0O;P&)
zvRKrq5KKV-#-K;>`}8gXSNA5mdSl<c5?$Fo`?9T`a%R;3{Z|L&`o6*3?65hve*ns|
z0cxY^jIL;@jptdIS&3v7^Efv`Gs)_8o*OyC$RG}?|1QBUM2d=f?e-&6wFNXGRd$`W
zB)!Pe4iCQ71MgssadyShf~+L-@X=6@#;(c_xWRX_R<kLmN2H{#*hLUFBFIfYV;_-Z
zfaL*xW3`}VNRcA+I`-IN1Z8OV6jTCB%@b@+bKAANn%`~^O1NQD=kBp?t>U=;prcY_
zL5?j!z8?yih#k`+*Fk6C=CExrVuXeHI$5M;ISSisMk!=Rc>Z|46@3<C*A);>wy8Yy
z%3Lcn8qHe<hvVn`xnY*xq|%fn&v3JDxAEM;AAR?&H+ub#__u(>CvpJ@01)t#luGr_
z*`1n%l(?Skzc85<)6twy4<O>@8?;wWF6a;e3<L}f2T0@`08X5n-+6F8Vp^W|l-aPv
zo1qWAyaVW8V1chEV`A~sA)!+z`~~_74D@GwE^*9lnF(ggM4ABlouSJ38NM;#?OxCo
zDN3I%iS^W|fzqeHR~kKC{EsPOTvUY~-5_Lfra%aQZU4=sKZKq>K&-xc4u?&Dr;=Br
zor9J093@YT;@|lfDa^0<FTkW1@XQSq#thVp&On9Y6B`D{OGW^I@9#Z8g?ze~jNP;o
z^Uq7vJ`;ao4EvrfogpiwELC{mIzYb?pU=L_=|V3OIzw#5*M*aZm($aEn<f{}Omij3
zFHz=}y1J&=c!UhNCWlcaXUY7wuy}<`K+oV|?;*E9>wqj$&$|TAvNKZ_y6AN=N^}HW
zr`YN}3F*;$;btj5PI$ikTB~|ZRjXyyGK<ko#+>l0xS*}$p_K)(>pbhd3-Zv*4$rSY
zU%1_@=v?_iOGdA@a^_EV#W?`a1J9jb5Qzlc4beT}gq@|z>kChPlYAH`@e`$L5FjCh
z5mWvhA`XXBL}k^JGq~M+=Nk^IL2@g~@H5tCe3=np?#YK31qfLreR0S|G>HakU@ez2
z?F?<U@~_Eu9rhY)(%2sRIciYdzkTzOwnOz-wP;>GQNI3Lqe;_HC*i+bDRlq*hx(81
z_P=^w__rP9-*%LL+fn{)NBOrM<-hDG&Hs}fh5nd0@#=p~T>lI0ehDQx`G0BNy5&dg
zM4a?M0TIOK2WCs{gUIW9hrZ5&zB;Ab{=VF7=rH>Qlzx?cc2*8JR`2}l7ck^VpIrm8
z$VPv@N1q^kUL18V{2!vDJR-On4)^duq;@*0mOwCSWwb#2S^=W=QFYX6aQ9_;V*>@2
z<M_%C*o7Qoa73(TN)$=ujMad^Tx$OaB6|`~Lr~hKyzgF<yw9JQyRK#YR~pat{EB7?
zyk-dy19F|=R;%ZSFLI@_tbI*zcxd8_5+wCFT%@yXdu1GVK9ONIQoJr;Tdchxm{l=Q
zx{Fd&+H@{z0~oA9ywE8A!NkMyKu35$`pocVy!G_R`2EaoHOphz$r$b3!)XriFxt}0
ztj9{Uh29INa_Y5|E&8cS8Ts7fcT_+CD4fL+i>BHS4i_*q<pFa)!QSgTgoI^1;S+c4
z@e2QNoJctnC5elGfnS6E!uzmCeV>RvY<m9(d+*qz``2LWmbr>+m2KO$ZQHhO+x9Bk
zwr$(Cb?V=}ce0<(N&4wzC+E%i3ipe9{^q={F~$T<Yx0q@*(0wd)Y&a_7F(H)(z#;5
z=81jGsQga$^dZaKqAes*G{G2YqQY@GuR1>C)HMI|Chz+4`ShhEPus3`N53Soin-DU
z)4&m<mwk&i2thW0e5Uy}A*Quto@@M{c(+Hl7ilj2qg4??UZ2LzbFm{=S<Mn#N*wGZ
z?jq{N(Wz9&;lz{@3ICFIuQxc_@+x>?UkafsZw8>uvQBB`=rnX>biV<3eX(Rr<Zufi
zuTv#CtN{4j5pwUAQ%iBhW7Zx19m8lN@3LhwAB(Tf%CVjb@g|%kn3Hi=89FC&lprMu
zA_*IzpCqon5EORj&X^&??@6MzJB6jJ9q#DIn2nrefh%M$QH_@c%n-jg>K=Rn*%3~b
zpQv@qfLem#DBUOqP+&0dOs5(swrMvMmZhuP1fAI*FzSjGAF*YM+XvW_<Dq!6G*93?
zm80qC%|5LXc<@3WG8WEo=m1+5%EMeNw^Nq85^dxG3GyU|xyBd0bj03upL{m}h8n~<
zEyS=*dBCqYuBVtQgpRikDok;TCILU_y~Bt#Sf1KXnTjtL%Tc%8Fy4D`7%+(ew5s|$
zPFZgeGD}~DrgrEzI2;}^TcLP?CaI0qKlD*TFO8k}Kff)5_oj*}wi1s8o`CJ^<6F4q
zaVp*A#wBWHSmzVQD|xmfKDOHhO4=Ykc2rHlZyL%A%-FNLiv{`@vb~akkOS3azKw6o
z!y9M-6|_6(m)9y?T~=jN+tD{VlkoX#XvmyWH|r@V0T7#d)HziiHnN!o>)`t46bX@j
z4KWK6L7nYAXaZ#RDO3tyAQGE&xsn)(Epin`fNDuR)@`!Kdf|@01G+#U_p_>GV@HBG
zX@PAUjF<!x%{Gt6AIdbZk4xaLR;FDB#|(?$-oyLpMr0-_iIadTTiAtGOQ&%IMtz7n
zjb>}L*U>jG=Di)8akLNXtp%5RoLp(AQY+K&l4$*zx~Q$CD>u?Od`WaH4{vW7jmF-M
z2Ai@gg(~UlOR%Ku?<9cT1K2-ZLZ~c>z|NFACm0hG!?l!1y(&*x;XNscBwP(zrW1z&
z3xh_(-7!jK>}h@OCMD-4U?(Aj@F2WpQrPwoA8Iz_lt7#`L$|QW!*}(<zisfqlRXed
z#t=VJkG)gRThh1Yrjh;$Tg!di7wodVKZn?}fC4T6=zdRo4QI!A+}2=m$+M-2?n4s}
zmT%8jOkYM%uaF$m!R$WGe$DIRY;$V8ge}4@|5k&2uHeup(BBH1R*X~WO5mtUpGMBA
zwgJ^D>L}K>0v>36TdNQ1EV*e+T$Zi9Grc*o*ckLk@pbyDBD=eKO`F?ir#RDUFbJ(1
zTI}D!9PAA#&Umm6Of5%#M{H|_xzC*_NKm5<l)Px9&v)s}ALZcXXcwVr<>wi+L6_Fq
zXf63PU>mi%W=FmBIy=4;HmbcnLv*-vt`jMGPwZYu(44wXu;4k4j&o>}hOcIS^!E5I
zD}#-8j8aIYoBX+@{>H$9GQ{YzH^99$d1gL&SU1KcQGKLz0HRPOk8iQ^S*JV!Zz^XM
z`bRrUt#oK262*RgZSVZG6%MKzwD`_^=FwvOifDh-rB=S=6jVvSUFxUdc52P=K|wxi
z7r4wI7^$N746Z)5V)H^_UFBLycWBiiGgT6Oq?x;sn1e6Cv*=<ng%O;EZ2<=}$$u<v
z-dE1uAZ*~RD^2T?31_zMwFnl>bBrd(QkV5q8zoK~V?v+>ZTXVQTsTKv+a<H+CTv3g
zSu^`_FplenUK_5SQ!rnB-P0xF_)pEGy+UXCX8s~k2N_h$UwQI5m&p{ObVEgTl!>5v
zw5>!tOC9Qa^3S!#3bV1C$-~P8Dgj#<yt;JvbbY0ZqdHlOa(}>elM+<x7p6YsQ%>PQ
z9Una(;D5a+ub#;Y-u(L=CMpvDc8AGmQ#mW*#yy2LfU))hzdkd>#IG&7G_*+Y9#1d3
z?aQ<I&Egcow9=6g2*}g6u>eRQfj_&&8s+5YdW&3oL=-<7;LgY$Lc~m*NCQ4+(HNxJ
zIq}sF5Cz2muBhh>8J_);QUxNJBc_%%6$kFU)SBO80tnw#|CYWr`Fu(jCT>Z&?=Qnz
zVd5iragPX^K<ek50|^^-=)3Lwl<Gj`oS0^A8{Cf40|Jb<&KYW_yeEmJF-ZTg@J~k|
zj5cEvi)o?1Qu#Uf#|d&Na-bh5Vs|L7BEf_SBiGIxnM)eb9E4b*S%SThNy)riWB{yu
z{ckDP$vg|VtX`(ZC~y-g?RcjGw(#-sCEETl-O3XKmlApvPa&WBP3vvB{6`TofWC`J
zjl*V@9bcK|V!dduLhO8Oan7Hir|UHNy7gWIf>bp%0k^GJ=t`=PuD-0XD|@}1Goml~
zWnc7uLJMc)o*E7Q#S%6Ea~=*4eO^3>WT!ZkAugHH8xpmfzBmL~%aGq|?p!w6+0>>$
zJd`iXjnSBR$$_L&ky9z_G5cCLoC15CVVCj>*Z#BgSKM^V2YDUz*SCFsVVKjG+1E0X
z5_`BC3<2u{3hJD7YjH!QeT%4ZBpm&3LGGsUzcU`yoampEu<vLkXjUAxjy6u}VwcED
z(2Z4IOfu;2T@eavE!^FNjV?G{C+^P`d0w5}=o$A1D!&5k*azo~{toj9H@YTUR~wU=
z%C|mf%T$H+B^Lu;EST7LrTl@ui&A+YGZgxCQxDj4JRIx|#|ROK%)MXaCCgtJksxF%
z%fz;4ITg6V_7K(ZZq5(&1K03V3dx-#x~;u{fG<0lEGsriJQ#sz2jo?69!0G2L1KT6
z?Vv<ERD{K|`8ifu%EI`8D_)UG{Kt4kUsaBda6N6>H*gV3zU8kjNvkp)UIw8M-pmv|
z=R(n()bOAiweRvsVCNSg?!Lp0fHnrkOKm5Wb~Q$BVlHZZ9Aj{?B)U9FE8p_5Dn#eR
z%5%K+-*Z&ouUFht41fDw!J+?J5_Rm;O(4|$i2f1#bU$oUs(Cy=2zy~l0T*3X;ps=5
zlwX&hf;+m1CSIL%4uvEwn(V`N-p(Ikf_mu;=mNJ58mJ@QWY9GPxk&}lA#o0r%k3Ha
zqNU?Ipd|R!%Gp$%?i2{=!QozOs{&fSSI2fy08FvODPCS}bamO4PeKQuoKb{3%qc)8
z`vy5ScBV$hEC1rRXZr)KEY<W7t(`mR;_1{sLDoJ<xal7!O^Q!R<WipLtd~|myIsSe
zOW~G5L)b>uZfTIO3WFKj9&I({{ymJ>!O@(G?U2${#ESl0)YL|HD}JTJQy-27{_dhR
zK!iio^T_rKNxYH{ybZ@ahwcqktW8{wY&v!u=H|esUkiBl7P({ezV&;g@MLa%b$Xh_
zNR^1@=+!_+7AFBUfTEiE%s(dia@Rm(;b4|bk`ZdONcjwu=j0v*NfWw39o^~6$cBi4
z;?@t*D5RWUB!4}zo5>7oBrbvQ5<`YA`l&GC3T+foP~|g&K!B}Q$pl^&K!gCwZK?th
z0{N<Fj#WY1D|he=c&z)Xm?d&2^;arK+*D1#xi<}IRh08A<x#=ZL<m%RoE9Jm`??Ou
zZ>{^K4p8%b++{F5-08X!?M3TCu7V>It1@jzGj@9gCr_5DKj3t1EBTxQ_P$S4tCZ>S
zDVS5@J~syVj2&E_we27<JC_TmU%!Lxv8@f3zxY1F`3_4eaes>f=Rx0mtUk}u-(IZH
zFtZwaDFEAaSdT<Hcg5;3xmIWHGB}M(-hSgQal<IFg}9EC?$FO)zP7C4`n=0kdVM-t
z*;4PlrLpg)eHnao0)Taa(7pw;q{uyJ^#u=T7M1c?_-ufxYx!U;m2EOM;Rf5vA;Q6w
z&(8P=XCP1U#U9kv`YY4hWF1pXdFJZl{8#mB(VzYByTg5XFE5X$PDjGyw)a;;P3=wO
zH7qgfH`1C635xuSGbuZ24n30Q;0#0#E36<qbWK@}2`Zx3EBEclp-C@#LJqdYhW@5$
zo6<$iLJM&N+WX(?$22_a2_C(dt7yj^y}O|5F^J_LA}!h*;*ZWQlpiZ|=>wDE_jC?L
z>~huT8|{6+u+G#VJS)}!cf(CNS<8$h3XdQSs<MhRn^CS|trj|wrc;)f(?VaRyT-$Q
zD^*s`S)ALVq`912OVno7{#2N->LuB0^)$41X)g1|^vt_yZ@j^W9eSZqRZOrUv?Vp;
zuU*d~XBV(Z4OG#g|5TV17q=*?d;C<G40hfQ?a%TET&WFPow(h5vT)oXDR8+Ux7XvZ
zESXJF8mXR*nRkK__o?Qa??JK;DkJ$6F8;rqs`d1grvKZ8W&Q783;z?p{r^Vn{|zHH
zllCQ-fa%L>nek*wB}<<DV%VF$pF=Q$vv>D6vfuBGx90)H^oMAnJw6wl{aL660pr;a
z>I7}&To>n_lP4}n+`mhT92JJeUijs$G!&!#)z9bV{xbcdePl3uESFYni8Che|ETv%
zGtwUYz(*br+BXU^6|C#p_$=B5#L%#c!6^&nOC!nuH+!(IOKi$>X$#?1w#$>@Vw_Cb
z(Robpcyn579vVxvvr-U>T~o!ELt2^;EyLf(08yx_TeYpqe9~3$CHd^M&YM%lTjabn
zTRe9RAAgpX+W~Gzx6;)qdKXM5(f0${ZG9>I2<AxTlqrXc(O(H1!eVt<9Z{o5^|o`3
zDT-<o<Orjms8e$BIUQZ{Rp@JR@=6(>3hAWBDD4}KlXBRJp{Z*KD(j|I+{_1DK34R_
z?)y_vdQE(<O<UKPs!LyWpbRKJXPe&meB5p;!@)6{6*=0Q*39mxsT1J=fgYkBhhgC+
z#NmhLhv;#O7-c3juu75WXt(qF1Y8@jjOR~P&_IB|!bHD&aanz=%<I|e<dIYBJ0==Z
z)j#BEo8cc}Wj<sw18t;4dHP@OkZC>G&%pS?X+hVP!A%Hb>5wM!ebINyAV*-MH3khC
zo1T+abOFT8!hh*XXKleh3D4W$GI<!8ydHD;Il{y_&1>+gFSX2XExTa(`|r76{~4RX
zcU>x6ruVBYcP~?2bHppBic-N?zijMUQ=F&o*f2sZcGLlr+P=!LNX45d6QiMFkho0t
z7>!<<bg)00{e;-1*RF=PJX2Wg9e-GnJX$MW&m2-SP-)*ik*y;V05V(DTd{y4hb=Nx
zYLf@3mdnT^e%456Z*lTyaP89O=QQq*x4}`kU&*Ol)8Rx~u&f_zNph9b$#I&ZKRw+$
zFH&A;+9GoFKIfxuTP?u8I9x-@{t$*;UVrrs)!IW_2RH3^3E#8fIN#Kx5+(9k0&T2=
z5|^Hy)>yGvrbHEQT4_45Ib~sv1OMg`{|5Zm5BhCeL$0y^mDu_>p2$?hq(y(qlm0s+
z)+kA;zODt)_xS?}1som;#U(EGh6oTiv=0^}z!e^lsHYld%B|RXGfe^ssjNN0dQQgW
z_xK#r46p4BV=51;K?+2j2sqjjUZ*`TowgyE+J$RTFMHz@eDEa;O_kmnpI-Rg1g76P
zM>@8O{3gFMArh)s5F6yJsBv8dEm3eE0|*@;957fXcuNvLR820&;bB&h%FE!?(uo_~
zovB>0B(9Y(gqQM&-I>BGJ=6ArT7)ZXz|pzI7WjreE&#8p_DN{_98Tlmxlaed#3mFa
zg(OC(0i%WlVc<_$0LWkj=8Xd=rrzszljlYh7Ybf3$pET0Eb^olv!)DeLZsu|HshH-
zW7eR?uHGKH^rZZL|7S<Ua^J2)w&prp)&;Os_7(x0QtnIjNq)3wFJ*ei68IV!mD-dx
zzJ|heE4sBk{ibr2Rc(C_hS&UG=J}4kyO*K$GjS4_;=7_Y0S~$im+7=xxlOmNYzTEP
z;)uo!;m--}MX8o8sEq`g^8TGG4|<;PLPv02Zq&l)GPLlal~*<%mmR9SHp=&RPYSu^
z2N&VQ!ga7mXJjz4F3{oEumMY~xhx*I>IrUU7A@&Z=-QD~oR7)!5}rYLd>!r8wW9E7
zt~YVcLYbKIna2iG5jO~~h|;lH9>d9^IRKU%ag$b#b?^D6kxZ5~lt?;pl-wWL$I+K+
zhE3BHU>2Z}F-qa)J@BvyO<&a4)RfNxM7c@$kASF*@5!=Uh968C1|NLLj@~)YEso|f
zT{tP%4nlfbZTIjoo#gcEFg<gfgPp`4aP&%bRDc_{;hlCv4RqMHLvL<3RG`RvPKJ}m
z$Wo#lf<t{r8(~8W2XI*61)N|veP56d1Vt+Rn#1LE9@tUSQ3xyEjXA(+U}L<j4t7Y(
z(tE<k=fu?w!GViev;Zf()CZF~Z`HSvV`01m6#-h6%L|F;COVar;e%NUzjAw2qir{?
z=lAm<l__wpD!koI0gvyHy5R|_f|gep1=qToC~hV}*siqoT&sC~eZ^j(#;_~?@US_`
zX{j70unandsj8~nY1P)@`Z9B?={<|&jg~35n+e$FTjbhCI4tZLA~YAOv76C;mSxlW
zzEy$VK0T7!QJ(r~!6))I6!x!d6prXz>t@R=X1UYc08*Y}q)k_^d)Djh!+K^2GNRk8
zhA-kW2lTC0an;#u;ZTJOG82WSplcRr_oKC$pj+_TV~2SuhlON;%2k2P*cRJnt9%^d
zFxvaGYF2NwsoQmz#OL>VDrTVC_LHouJ5d|@dqZaT{wI!ODS=beh+@jl6s~I3+FL=Q
z2<S=!K3OOEyvU<vz$k8%zonLM7G=P~$-?@Il+CQ|Wj-VKg9N!p%hQX%$^bw<3Rwig
z-|MPDIa6;wQAm7u{q1M~7a{Nnktq*PV7Y&oNBmRJLP6Am|2_uS9H@tE_`h+P+0P#@
zx1wb_bxjpd-rF=B<1}QgVb$sK5TUSY9$pu{Tt?OZNxnHBB|%lxg^c?MHl<OL;JrWJ
zjRDsGUGjBCDQy6xkc(lPlKA6Tk6zlw^w<{Uonx0(R~H<>=YC<`)wzL5kSSQD{baUQ
zxEaHgU{zeuSjTq&MPDxaj<nX>=0sASU!}{h<=%kG*2M~b3kE&<wgN4TUdTuc1LZZ2
zyONSU{2?QwarSq|GPg-+5siW&YjaRp8#C$L+78KO>vv=Qnc7<?TC86*x-z~@=NV*m
zxZX8Q(UBO1#Cbs5jv_sx8R1si0c0<+rP)GgQt`SA|3rITRJIOi){)%%FlQMwdIX|K
z?$$miH1X#Le<$9vVVc0ayl4?ub#kw*<ZdT)dUlx1U&+0TN(CRc4Jf~_?eQkyHsF4T
zJ2(Ez@41zJDR;)G)A!tRwcRpv5-9AU`C5E!zgQLx0_PyUN5As4&Ln31M)!sfyH%=e
zl5QK2>{F5*Qb`H3!>Q>);zN{t$)J|?Mey-oy0o&P!+B5tC!WO5Y4PuQ67glc0D=zQ
zLA;<s5X`B5fMA%|K=_9K5EH)Pck$KT!Oi9@mse%;A-ca<emsfFGF%-QBQy0H!yiuq
z>u1*9^T(5j9dTJ!K-wb06hM72P#2r(wP7=Q<X8S3txJ=Pd`eJ2&c)v=Nt!MiYK(~3
zJ6naK|E3_FCk4Qud*j?2NHYT-IxnRsoq>Cuh<&NCahBC0Jzb#sVE4dtic&HlqI(RR
zqGrc8&4FrMw}ecfKm!bLbBzKQifGll{cBoKAj78F7WQ#473lbUQ>lVE(G129=M<pj
zY#C?cO0h#_u1|!IG7FuG+xzY1wBd}HOWIDsKD!5FU35ELbSiW(Se@s9jGbtABXD$N
z8h{Jft81@a8pNmguIeFjQ_-$29clQI;P3(7232%<c7Wu-4S&4|$0{^OZiY#XimcIq
ztTs>LKP?H+t7D<lg^(XhBL8CK_Q#T_0<wYA0UBbqNtjgaTK}EinXyaM^IF4IuF}OR
z=(1L;A_sy(q#U%yj`~Ux(Rx5{u7nsM5GOR$lbPRAcNC|na%KcKoxx<x@z6(XITC7=
z+=(+aD5yE__$UWAjc*cBw}E_DQ~tUBM7&j^$Wr1d(X3TNX*Cp6aXWPmy3JF5GXR23
z=}`~L!?VHjuiqZWaM@BQFaQ7?e*ggJ{`+gsPxaFOptG?kWwfq*s4n=Jb1;hnli$(5
z7fo@tIse+2F&`z15T5hXsM6})`hBGf;g}Rih!jE0Ncr$*#Pe?a)~|yU<GcT^i2|A)
zTJvlC1v-Dc&ajOVIx82X{1=~_CMK=!s<e_u#6&p1t{Tt|Zt1%2;aKQBmBiulh8P`~
zkl~hZn^XnjOIO}4j?V~@N9W>0{61S1S0s7g2bIYvk%u8pD<Bai3=YsH5*M&H+ezIP
zIakH`yvTDj3&i~lw!9{qL+R%THL15YjKwYBHb#o1zr@lyKp1Uam;mS^_5||v4t2#z
z*|jcDRm|2%VXxDu-g>u{)O))WPv$*l3m#80L(5G*C7E>+@|aH{m?6)Fj0yxfV+uf#
z)dYg<)7L)qEBdS&u7AWZ&UHjgh{QRE_6afHmo!jaira2{#3F)E$d*>u93EBO6d}8P
zxC3%EZclXPujge+!=}s-sXv~_2VMucJkFt9@lVBAyPyEpl%!@iPB?lJk1xFeol5|-
zLla36V6J+=?m+ECK8$N#ToYPn@k&Fq#DCL-5-}17qUJ)hX2~I7nC7wfxaRI$ZmoH7
z*{`{bbeghGXWcGVU4G{>c;Sx*7r$oV_gtF4q!ec=xU9O$j$jLB_*wj^XHJ3h3Trx9
zbJ%pEN5RLiltA*Ast8oUSSDa{qj}Z_xtpP}vBIKA>R~Q4rRg=zkU3*w`+V4?%810D
z{k>NN*c5D$l~ym*x??9Rl8sdLfW88sU&?DbE!CnEhvXsGNLID#aOoe_SWT<{>bFJ8
z5rG+ykSkEbUX3W;0X6EKZmmG)VH%(i9L`ra3Lh6e1H?lSUm-g~W1_73lu<U-cX+q5
zM|?q{jG?WbO~H_@mP189B`luofg@tN1y5y<vzUa@>ESLezFt{)n$%y;vilJqjBlsV
zdWl|ZhN)BH$HP#j0dj~DqrK)>N*2{aQYdkC=x&!-t2+1Ax9nABCqb0WDD=mIp4d3V
z;XGYhlD)A5H})VghHodw$|E7wwi$l>J=I)O*+hlL-r}%RKh(ka7Nn(nTyi?CW#~6W
z?I8*jr&oY`9Xq@a;!1(|sQYc~-YU|4XIi~8kND`a;bmf^R$ddbFB6fb;j?$xl7vlD
zZCY*3c8(tWflM+jn@Is3RM=6w(PoBbm)btQdch;5g=Sd-gE=?OO{wb^1!VSE$do2k
z!JBnWHl?Z?K>R+d$v}8wQQ;Z<CwWOGMI`_~g=?$5`)ov33lYm(IERe2H%|sLzZNp=
zIUXnT8n2q9lUii#T@JP=h;d@}xm-{(Z0L2F5rx(r_JqA6rAg}t*6i-v{*cJ??@?g}
zYt@E=yZfjQ10(i3^6yx#=x@i&L*6S16nHh-Ayk6lhqxr=lY&vXB{9>4w*Kllbh0z}
z@ep*>9`ig|G7s#&N83>KJ-A9i@6f|6(51W<o;?RYqAa|dB?7gZj(|&vEW(VVMXX46
z51J$pMkOlG2%7jypH4#<m9~%GiCPEDm*KWETzPyp?tD?m@&mV#Ge6G}tau6AZwyEt
zY8;7L6_=IfL|{_N_BwM3RjS3>y?7OFxsVTqJ;sYzw^@<~Y*@76NV*VjM_4c(4*s6J
z!swq@V$l@3qk_5xDmT&;vg~f7+wnB6p_r;L{`Q1H*HLp)_ez=({Y4=^C44e$mk<Og
zmKPZ;v%`uUmxB>M(3U&X00>=-Q+8|0)ZvQ2baPb!Z7>odG><IrL}NZArTyhDwtWoG
ztqR>W>bSIlC35D*0b@~|l2_90loxq)b`-7AQ~ZJlId_2%y6wAPHAe=aP&FAT5{oeG
z8Py`k+ltG>X&CcKBSF}s171FRs$QO8aWF}nxw3zj6jX1#X(3l-Q5na%303u0L|x`D
z|2i#=ZVuFTW-%0IPNNOt9K!c!9Wv8M1Aas7GtgaI%7ZF2tGDPUK1Y-2Xp&@8%M5P}
zy$t4xIAUJF8~JE$m-GrXOwy@brk!{Y2@87RXPkMXN%u@vJ*rpt+uv`RFJUt#bKXBE
zr|leeBty7uMGiiVW$8?jBqWe*Q@RGHE~hi8y-PMdYXg-?aphCQhL5VxC^6avW$R3f
zW=D&{hrpP5_d=aFUgKPazp79V1Z)L+1=n5fS^joOeh}QgICz*{p6n^((#$AVIS6kS
z0qTp!K2L`tQ^pLo+t1T-mnNx;3v-d{I0M|zY`=ZNFE27uRbN#j4>h@!9A5rAzw`{u
z=H6&$0<vnmHX_f$(iX<ISbNfWUSPc6n9W^lg{*~QIf_dbze!~Nm(APRowDE9Ca$xH
zcrFr|`Mc%Rx#)g9A$%kot5`~H;oZ2rr-Y(POsaKrN?~nZc1}A`g<*;~K*aYK+;c$>
z7sdweZ}~|LkZUc~(<1P~X$XfIdIDySud6fe5YGTC8{2PKkM0j1TvSiLT#_#^f6Vpp
zGT50MHPE_paBqU*oL<ORnUPZyTmG-#_HSsJu|5POqJf#?ICFbeZ&UkVDpl?*n9Q#s
zQSX~gZ<yCueKg-o2#nC5wTfxiTeHF+2CChkD6dRak|F&zcCFvXBd)@Ewd0xE-pv@%
zMtoG?eBQ9L`@7X|2L9DNiNNngLcCsN!Bitbcs$`(N0%p716jlkXJQ3mned<CM<W*g
z3wYXD($$rqD2}1~&iFD#`Hmb<${!zTLC^KW)1LelDtDOUB}sKx*jNjaF_=!i<Dg=c
zd1@-exNC8nGEmz!TePR#qroV*Sd$z|Cne@eK#<M)1XSAbgM2gAa+#|eNyVy#weB8b
zLk(d}=jO6YB!!EQR#S!qgnBkvZJVKFTE`Or7vrrp3Jp8Y9BL^jhm}cA{*l7x5#cW-
z`a<qyg_3%x)Y~k(HI~A4nWqNas#3!o(H%YnNeSfud8kq)qt{JtnC-ZMeHnvp(dnk&
ze=#Ff-ZaE73f<j_)Ue`NXsqha-2B^S$ulfV`%S^jhbGB_%#&XE`wSClBBwQ1Zqd^V
zAV8}&0Y||GzWS!p-INhiXtRIz;v0JxiAm~Cqb33}!mmxAmty%;iCrW^`$#|dqE*IQ
zR?Xe3rI5NA*Yv{+%HlJ<w4%<?veliuw%pawetW(jXgAA+PJ)~|)kj~cCZq4?EJkip
zj-##}Yd^gqvzxYTkmpLX=3<9;Pg&pOf!Sd1f*Gn{#=QcT#&e;!EB7hUp>NAsDTuzO
zxyg&$F*t2!CGNrm?8)VIS^M<4z)sPPZSS6+R+tDT{C-CW7pZQy2p(DWH|8<{)j%I<
z<+73?iF2NgM_^E$IEs}Ib4bXGQCK*qIaNjA)vb-pUBCm-cfi!!w~*G;iuG}b5W3+v
zb90mT!uL*iWgz?sJLv#YFT93%2loT|hke2L-T9ToWCg*Yx%ORH;qQw-gn2NINAa2P
zYMG?{fvF`&e1EH_$NQd?d@hn4@nM+vBKv*k!l30AY0jS8-M`=MYTXEeh1p7e!qkAT
zrd1#S#(63M=Q<tqcj^p(oLflOE05DxDd~HPk<9o4O~QU@I<PSSF!|7PqNxL*(h^i4
z@e^|N>jl7AQHL|dLH2VC5Bz2c7BAo7q1vWN7fnFv_(AF0ENplIjnt<gL}yfRFN%$K
z<?4#El^Btg#BcC~S~ZF%zxdbc1q~Knx6SxA>)qGMh;IkBYFFoo{uUO8Fm~4HwqacF
zJi0dx1?1lCiVY+8lv4P3(I%PyWd*p=oRRm;QO<qfM`lU)S%`0Jx2%`q;f_@~oc&+R
zc%J(Hn$G?aM*4%drIbd|b623J4Z)Yn7*Env@T)+=M-cA6#FWm><*g}9i#+6?ioM4g
zJ+(^CR;BUqJbL-{T|$x=u_gTosN)jH;LJvm^*&?zh6S?SSxT0r%aWs?GW}fCYwx7;
zYK7TjQM@e)uPv5gRqy*?5bJow2Hb0Z{JfIUQKSNIS=B7@rzEsrtfjnzQ|`H?T8p!@
zQ-*SE2U5ll*Ej|jDFP}vS(WWJ)tt=#I!8Qt8IUdjSn(R>OM=m;Ih&sCK1B*VlP4d#
z(DSuTuanrF6Zy@Tkv;DTHojA3deq2BD_E!k-ylOn5>%sO{`s7X61xl`rX@m1x}f8&
zu;{JrH{#efjA+!h#bLIg)wsfhY8Qyi^M<l+6@2O0!{*>IB=o)$0!I<H_<0n*2~sSL
z%bN&uMM-~ClOx64_QO7jvT*l`Wz-*jyL%=0jeGQ>ViPGSXztMg15z`R(LiAOBtA&8
zoIECa-$LCs(Jsa;;Wh2vbVG2<9VB(NlvS{0VWwXbVLNDJ|5Fg>(~gN4v!O7E_VA!k
zq`aJZ*P7u39YHPQ<AXwmAeT?MJXEi((JZzo=2+az&LF)t*?DRse1iXKw(v$7V$%iy
z0y<R~*eGSn{o+g(3`||;1(b+jF6FgUa<-(SE|)RsS9M=u#0ez?A?K)Vg5`5Eb()HN
z)Aq64{pE-Hjq<NIurx?|Ba)xo*X_>>@c#fj{f{nUPKo1H1+4JF&zyr71<Inngp|g5
z7!DG@QZ00cso)`6<5O=Q`bW*8-2a+Ts?~W*D0OS;EXLr>`>Qfk@W4BJ2{6Im+@`z)
z5Cr>Gg5l9tkoWw8C^LKS@mKOFUoRkLzy?Au;q{~8$N4p@3Q4v|%iy&<3@DPD=O^SV
zC*{m&zb?yy(#lJLjvBD)i>#~+(c8Za+$g2^taU-P)sv@cy329C0B%xZ4UcO|;-NAE
zaxcvpfVPt$)Y}h9oQ`pDY)c8RD6z?Pn5Ad}LB0^6-IVw`>er&;*%OKwDcCz9UpA{u
zlVJRzVXzwN0@8ppTtiIyYqX~n>ZZ#|+jHRCTtR3cBJK6kI3#4yr)~Gg0s1isuKBxE
z$F3a*MErY5pixEd&bwRQ(`BBH7@}2$+%!S6KK7uD%6cBGgNBZt;!z(dngIsk<#QF0
zoO_nJI&)8d^<LqcM$KE1`?`F!-pN#F&oB22tWu)X7j$C2D+POb_z02Mi(d3ov{<d7
zRh!DJqnYU8lsun2T=}2)r#5$+w4ZAqWgjp%50x!vBuUJJLgRoR#oR-;ihsP@73O&@
zJxL-@k0P<^K8DU)l%m(yX_q$lpg(IaS83DMw{za!an_sux?)duMF^*BTiqmj+-uo<
zI`CtewCZ4QT*MqY?~pE7b??1?(j0rgtU=6H%f-H%cj6UiOO{&@CWESQgLRhVy>v^t
z6aUnP-5Q+S)c4Sa>P*^wv}$0T@aS9jKuYwRub3}nY#SQNg<PI>?sG^TVe`?tDfNy1
zEWM^mgqeLW?Or-xErmGnJ<d0X2IvPUWd8F9B!!!_t7WD%bP@8zqbYKHXn%59k13Z>
zl|chJt{Zwc2oIS;^W<)7feNamM!4sw{0r0=bqY-h5*Hqmxk8-#0SWA0_ncrwvuE3{
zb(>)O%<~XdaQ&Al$Pr6XEu3_+xaOGcBc4Nq+BaUpdl+#c%oRlbb{1Rg-Z#WAr4)2k
zb|m-PvG(B}G?<dEdU&1poa8KGFh<4uB*-m6qA&2q4Z;$h+ALY2G*b|grQs;mNqpB$
zWJb25@s*^qe5wM!v!T?V#4#eu`Eh`7z|>&yA$R7}WnxH_XXGaz$ShOBe5;+Ucqc>D
zf%gMnS7nB2{V9=4O_LlA9K$zRZR<Fp^&l#g<{FC&H)5E#?eu$nD-t&S)}50+T}4tk
zLllbk=8MLzw7;%KO4h#kvk8|g&48NAtjd^TG^iN4N^2>|N%oV(@r!NpT~JX2)F$W_
z%~biGsi2anZr$ma{{7v@OY#m^O2i^(1x^4=jHk58X{yT8D?WE)nlO9+>S+OYi|azJ
zb(#=(rk;1A62g|tG{dc5qWxy8(=S^$YQ$1H3o^@UZ_Py^^)XY1&^j%Z2bn8|p4y@h
z?uBolfBj=Z3<;K*`d?V;f3TJHZ-6O@`u~WbejtGZ;h*jNLPWGiWc0<IXh9P~;QQfH
z+ZB(O>`qVIigL1>SZ_pbZ5gV`RlZ>Uoqv1xrqDP-VmCQPYGBQ#00&*0&<vyZlfcdw
z!f}7Cfz#aMUgpvU3mL=qJYq`4P?TEZal}LYD(uSyNyP!8j2o2-%e(o-C)u;<`}Gd+
zzrfVsYeEs5X59!nYzRkdbBTg*EHiK*HpL<9V~Hnr2Dp<lel}3I8g+5jG!-}yK;Ua|
zbW5vy0CV@JjB{YChTkjXJlGzp)KW#LEy`rLEay644EYYk{dd#y`{arp0+2g@q#ne>
zA#8Nk5sh|wlgip(8<`%>XsN{Q^OS<0vyOR!<LZJQ`C*t0`02TwaVuYmweenkMDNI_
zthwM}3OviOEHS)cwosx|Ya{r4&wHamq<ZD3UvvlefGOUh6oo0-DJ3LX*NWhfZ&|3C
zQ@sR9;c&5EUfL2g@zgG(PS<T!ZSw}k1#g2YsxfyfW~nU{PLE%((oI#ss(XIirN!~A
zw`gj113YG6tNMeEyuP^uS?E#L<;&HNr8a(1JXHFeKd8=v#CH3Ml<*i2K_dx!#hbOG
z89}{-6jUBhi<y#@Gx2d%I^V3*$NkXm0Sy0yhOV>xn6-b7^qDxh^MuImFfODCLgoPz
zrr+O6$qQ@r2Tqy%z$pet-^u?IPI-VXJIoKq0?f{QEZtOE29XBGW&_OL^JVz{z$t!s
z@Ez+PICb>{r=Z9-_W^(4RQup8e4*TJV`Sq+<|f50fXD^QP;bW#gBywZO3;AEKX3{*
z5d1wS!l`{)`5!oSpWaSb)4~B52J#P_V*Y_ss6TM(?Px7020e8>9c3r5X9Hjk(n5uw
z%k5-e-6!W@n4!J5T6Uw54AxeL@s`CDto2J}CQh8XF|u&l<|gI`PEq~?r*wiUoG~np
zyoFz$uA?$$!FX$N_jZQ6!K0YgXXO6AJrPkqSQ_B@*+vrvbF_*TmrdfkMI=}w?Z;tW
zM@W?v3%fnQ&B^lh_l+f6pGoC)EgV!x!KLnG%y>pjJ+vzYuJu7Z{{yEs(Ts(R_M<GD
z&Ti|LYV5GbDLHc0-9k8!bi}WoLj*2Z`;?Vd$*uaz1D^6fFi{-6Tv?t??>o3H0%FSv
zz2lcOLY(*lFt!nun~DMV{@^5zBwFp>>V0LjGCS&h2wl8ty6pdHTJBo9;FcEEY%|X|
zd6&bVnCJu@rs-$n<`jAL>@sgf4&4mOaa0I&Pe>!FpT%feXT?Dm9aiNuI=y^5LZVm(
zmmA%aKTo|@$x<W_Xx%92-S1=7&Tz>-^Nnj2KtrOSoVvTjx#PTrC~5szb?*`9-MN-S
z`DqknR^BbH|I#t|X%xJ%egp6T{Am<?b>03?I&}>BA9Sh{MvvP9%O3iyxsXgU=2&5#
zqg-Dp^89$)REEctqjBBj%UW`(X8JHBweq5o0VVk+W0c^BP9=+a6RkNcBF=mmza;ps
zfLQx@As5s6k<Gxgh*kYVr;L1{`F!&H&acW3??~A|EWeXEX|j7X#}qS607QOF1}S~5
z_l+#@DNa`aMDO+*w|PaCx3jyd71Kv5NgdsD=eeC1J+n={Jl{*xE*Zd0-<~x?&e%Wh
zP)Ug?7<w7ck9t`xrWhFVuKQJmV{zKo)}7mewr2#1S%&Z8kCt}XZDQjQ#i%A%RHzr{
z_S9^<5ncVo2!nf|tIc<CzE2u0zilAaBV6vnJ0abY$eX{0DMakt8_(}LT>U^Pv}x?;
z82Iu!y%25<Fbt!S*{To~v$V?=T@nhftjp9;F%-Mt9c<95ayWFLFP8QgjuKp&sg218
z;>?>wO6NHtxA)#Ydy9lc7+3oHIJl}JoX<sVd5Q?T-p(|%;tcb3_O*t-NEXi|e^bxg
zJuNy^kIBR3b8lyM1i4z}jN*UA-29i1SuE@)_W$iB|2yTg|IV=DQa$^RluWLTDoG#F
z9xF-=A<4WIM>orgyYo-fXEKX{!6cb+v-0eW9MUY^9gF}Zn6%F(qMZCvcd<+NA1j&G
z*3d0R$aI<j0|6WH(3jd3fhD(p3<?rLAE!Y)6f<&={HNxA*3fblFo|jotl}r=LyzN(
z?4hz+b#n;7Ck3jA8^J^m8KRi}E=9uB`aVQauZbS}iQMT$)X-+x;<5_d*DlUA-?e@h
zp?z%5QXGXzfLcBvLsFA#;a=AyX_&$KMrPkdRtZPWS}hu{au9%IMK7$;j%PIR4AvyN
zhQLwFkD40C%S8^r+8c2H=ro#b4v*ROt38avxRa5v63&?)5o*z)2D2K8<8D0@W97@9
zLa#jvn%uB!8WNzUE#G)}{-T%(V%@t3Uq?omba?Ks-hl;lJfpct!zy>595AK6iD%h*
z2)Qoe6|OU3Qwsy!9wDHH<DR34(gss+)XrK?@3>QM>lr5J-d!orm;)cH-^}9>zjb=z
z`*yZ4+B+GF;hmyj_6jayy466g<H|#}G$g~02g>Hkx%jeh9P+KGAe@ALw!<aejMaIc
z#j+%}2E7%jP)xx~UdVKB&M#Xm%l*Z)3C8k0v3i=zQwDdDPF(CGb}&~rEgl8?cUpaV
z;)bCFl(a6{DMlS8rHIy8v6NVrw|#nOe*+&LD|H|VFV*XyP**kohHG`F6dTi(Q-#(0
z=-ONq$`Azt?p(K?DK+pT-fRUg1u#D1G(vBw{Pe7C!JyI(@g3K1%n>#xporpMZWB*b
zHJ^WF_Kyv!6M{svTj6L|53T9jH@K`*nm)_~;{ar;fK&r==Lm1vY#?IGPNd3;iyHn@
zN=|W(BhvjQcYMGrnkKtcge9XH_(w_}{QzQhKsw2s>bgBuIWnfHc$V`1Pbt}prYcjR
z1+f+4lW?qCYydXBLbg?XT5UV7-OL<h`a4V*-1@@EF_b|`)dB4%>vQ{)^)a-Lr@0m{
zcisg4C}1te@X=q-QN6!Lr6yVx%>4`q_GLoMqE#h?MC~q6<i=Iw**G}=kEjoyIj@V=
zS_q{*7UlQaR_v_^ex}Z|lJ)?zF#!t1o=!Cl>8~fWdv49=*)_(quF*;SdTqP}(HH#Y
zzOk*)6%H|a<fGK4npF*_4+X+H4!G5>s;qyM<SP^aR2Xs8j}I0I+A9jj0n67GhMzy1
z)L`Q)?Dc})oV{j^C^vU55Vo31@1Ir0#g^lp)}ssHz0~GAeCbpP=&gu6O7rqd#boKE
ztlnG%K_}SW+dlOiqBu(e(BG`LI2y7E`cqXh+y<rfQizUNu$zmS+sI1v$9TjT!(E`>
zZ1n=3=R|W)ocpMA=^XJx9R8U!Ai(m2{6l00GV{WoEP{U{!N;uy?pP~^v+v9I4e#dP
z4>DY6kvM&Pp9v?Dl%aw_)H~Yqm!F&5CG0#b1$mUYu@<Ye90|mun*$`}%|M>xesOnL
z)ZSF=+#lW4C;m-WAJn--=9DI^5@YA57(~eXbBtFC+B|+Ar@^NOF^iyGErPA-B8Cg$
zyVipE2jQiDOLOSX8;k9orHB1Xtw6$A7UV^KFx_t-=U&s<p)~(R*{6y%^#5>@?d^=v
z7y;mal0NU*&mMNoSkHzM><T$Fu}al?;}Lle9;NV-bbIRxtc2?_0hh1IEoaGYn<JPf
z?j3(VXFbrb4j<C683`WMX}FIHhLgtEc_Y<fFUl?a=y|%nE)Zy*zWSIPSUTv@3ev>h
z9nTqRCbo%0W{WuMmK(^*j1@lq<mbawKfk0F-iqw4ee7+7&6F{F!b#vH+i4MlH}A=;
znOQ`VxU)c~=VLk62w_sgOeuD~dcDO18o{u0n{L8`fuMMy-+LNIEVw<UaR^~><+3w2
z(pb#Byl@A0u|0Pv+e-x#QkXW~zk^h#X@@q4KN<DiZ(9s|9VPE+xo}{CeE#%7ZOSj?
z!vHn6MB<NCJ&ni+QCKeA?F_F-ql@T`4$H}6^idJEI(9M{MISMv$7A7`5ACKet81Eb
z&ry%{>lULlNT0jaiKy_bB``>??n5}4azW=KV(yl;C!JYc#lEwg--T{A(B}NsDIxgm
zlFp)#oXOK^we2c(=551AcaAn+MLablT(LMOD?apcekV5P2|t!-2@|m=FO{LY%Xc>`
zJ6L1wpw7WE_M&KFIM80WCebCE2icQ1zefUB2hpCAa5>i^Om3b^si7}cHN9O8N9`7n
za1H-Uh`b(hn`@Kze)lIu+B^oIpSAtD{?^mEI@V{gnfRf@jC?ZLefuPuC+t!T!SbB8
zD0yz$$%ttSc&JY{*PQd3=8xavK11o(Tf_^-zh1#^G2w6jx0L+v>?%t9?56$yPV)Z^
zC;9)=mR>g6<+Qdb=<iDLUPvr~8jg|icSTJ^muU`<y0Z}yrTa&b{=@Z&jhV;{mG-i}
z2v!Z{@79S4{8Y60H$Fnp<rm6pWx2!)U<<P83GElhbk~R($rkv|D4t%74Oe}fwvGi$
zlQfQK_ChcF5}TiCJ|PU@a*1QMC&S=TtOCMS>8+uIa5dJ`HHoqcq@>UT?_bBHqcYk$
zWGXP1qNQb%Uu05=_YqoGYe%GT;)0Twq2*SLDmWN-+1<=(3Y~T)LA2|+o*LIKu#^@)
ztNv*bJdf5qakx307Y6+z)Jrne)+`uYza)(Z`TDpDJMRPs8GaAiH`+&yoWU&CqlAzP
zM@7Dv)y834i>5nyEQ9*_0v5!F>B47rGdHecs*yoYsA(IkOHz50rD}w_hmd@cNcS}p
z7v|`Bx<RLMVL1ih3Z(*Fo(C`>j-)~v%kje4E`k_>4_E5bqp!b<Tham)F$#gv7E9Ye
zcodwn#HM%F)qmV)^R@+#w4GAnQdw-6U7xqZ^6}krz(E<AB5+#FS)}!>C~+xKTD8S4
zCJ&WIT|TMnSe2QfX<yMtDzwoA{Iz+WWSW3CUMx&WNh@+5?=%!SKVoBhJn;^+MXO#0
zWqvF@+c9#tBzCx*x02qks4d^LbtGMl$Mb7AqrGSZLkf|vBiADHT`rlFO?a;y)!Jy|
zQs>m6!NacC8*Pp$b-S2WzNE>9GH+5d+7Rz3sh(yxNqca-eUzs#*SJPx?|#HZ*}Ra0
zd$PZTlJO=8IluJe9iYCAyaaC8<q*1U&U(D6K`xBvIrmpr10^axKBl^8v_Sqvq+zM?
z(ENarF%s~NQ}q2`%2WJ%{g2mw9)Hw-hSL9?NjAEFcaqIXc{Kj#DZ29>$)Wm$7HmBT
z&LK8d)iO|`A{ZkA#`xYEP=}|k-1u*CaXJKk=mx{KLO2f33vjLVnor5ft>mPlUr0_L
z4iKHxr*<j1<PxYZF-Xv<zKRO==Z}rNxM)%q;c$a%BQNe-Qhuf8GO75F<m!bBUwO5N
zP@$^_4ljsZqJnN`{<jtaG_lGKE=o}cJHO^Rp0+#VO|!1aSxhrXjgcRSh2J&w+afSP
ztqS~E70z5CVqDSY%=A1{-b`5*0VNq4M&2)LXh3@hhhc9vThUN_hTIKm^d<3?i!X3I
zBd{5A5$YI3+lls(PJiM#YLU!_NiJ0DC9cset!Z+PLLx?3*Qe>gqvq}qCft2bFXo1=
z3>c1|jIvA;5L6iG2QK5>M)N+E%MV(%g*B_~o~=<aTo}}8F$HR;iR;|Y=5ztMz(N*Q
z&nfm;R>K(nPBCf=GRS8U_(*y!4T-Gu@?tv(_L4Z{m4v4T0W!&%f?Wj@{-U*WI0nX)
z-_k*(zLpz-I$o^aCV*4Tsnmj0JRbS|3jc^Okkd!d>tyZGPg8U2I~%G1bgqKmlbSK!
zYT5Y8l%!k~i~dBGZ2T;$zLh=CTz(92?x2SAK=d0gR~1;d0I19t1${8x$H4ZABnyzo
zxNnbLryA1ysg{Go;sl`Y{I=hzO{gW!2}LL4B%UJUcWkvFgTw5QsL7Zh7|tT6*_4^x
zpXkim)-F{I+`*?&+$hsg65wo-`}MPaj?nlFZ2aw&oI)?R?YM(0%%pR(nDfCcXZ8ii
z2S)hG(t-~!rmo7-t39i~TqDdw8a{~2PEUB)h2r-&StG~}1HBg2^W#RY4%7lcGgj0c
zA^3Id8qni>(<rku(ax3L7ZsrEpktlMS8?^)*F~3LkwI>CF?T04uwqy?L&1GUt$(Jb
zHY=(TZ%EWCC>c}>##%`BtT(1;+Bk1%q9|2*G>oS_6`O@!%eMk*R~1d$FWXM>ktz-Y
zr!Vt<w@3dn$L9q+aFBbKQ)1irg_P+O{Q_7*w;PKq8wlEa0cmCpB=Q@AIC9Rk(HJ3+
zmqyeNk1sI}pI(Rl3?p-Cw~T6V!*~BEm(zP3SVEgAtqU`u@_wZ4?RLOxQX7f&W)ML;
zsb1D@Sm4+Fl^ClZgS999l=-CydKw=whmkeN{x+Jov}|JL)>-lXws&7j!FWo@LuZ1Q
z`1;FjCpC3Yg%|dG%WD)M$?Cmq+?R{{?zrxY)DtjG^SgFROxl79e?GVp{YP`P&++UH
zl>hoO;F!ozOy^DG&{gdMPrh=yvHW~dh+C3)e0Y}~;f_;<!$gTVfUZBE4lNVBup}^#
z-t^0tLJq~$GA;o*-`M!9uA{K*zy%X(wCExml#IV`5EEs2h0(SmKDU0_&9b#~@O)t<
z!L2e!pVLM*q>$oAV%Rn_m_a)fzv>?pRb805NIwHcsb3-!Gq-xTym6SnYTvQqHjI#h
zoD-ZL-XpP$m_M7PfE=|{L%thsLJc$Q`o9VGsM{sq+A1TDrIKJk!mHCDN^<c6uL3Z+
z7EEO&{qb8?oGztH*M;A`+5JBqPSL4**@5%`wVVf2iu7KFSyoc|T0dg9s@Ojvs(0-^
zobujuppgRdIg%^&*)83xpVLa3cj}T2B#>f@a;n<7phx?=3@6jH!ZmFDJ}(-!Cq1wf
zkNw0K6oH83;!ka%L(j?-c>4raNG=edJeU=phB`U6rL_$U0I&Z(Tz(#%)}F|(nwF8O
zZ$$%E0q`CAg<h>t*6dpzU2!}tXpuCW{25B`Gh}hd6unbPo2!@Q5DdV^_h_g*72ai~
zJYJ}P>CPoV8C6@H$PZy&eM%^h<>zD$r*B`+C7tkNcbT=M>S*81K;RDxD^^Y6fXgh0
z0nnu-EK41-b1FZ1Aw_=Yqb1vtTx|6&ybd|nvr@KbfytM8SFX@%vl3R8(%Y9|-pwE4
zFf+!kQ2_EVQ|C>myE)G3JC}i6Kl%2N@%b;Q7ANrrqJtk#+56w^bNdfZ`M;+JQ?2p-
zv;e-l*(!PPe4Jy1f$&67_GDQ2!h)^W#X2VCS*u?;uROwJiNQer!2Gz_U{f$qZps4D
zPNu`aHFQUrB^T?B)c$Tlzz|jpte{7!FkQBqIedrt@mq@fFVq2pBUDd71RlG7t-AUQ
zscG-gslCA~K^|cAKv_p1VCZ}px_msN`Veo-Fl{a$mY+BGtghp+SMj}{9&aq@B~b+l
zgrdc#E985fy5sGq`&-lixVjv4Ffuy5BaG|}QBfq_doLd<Cf{d)I@qxg_T+mr8TqR(
z98UnMauAk=2lmp~EA5mwU013{cgMlDq)zQEAYy1{{05I4TU|*3r$O^-oLdkDacwP0
zgI$TlU71STngj_>lZ60YQTDHNLS}hUf|>epz`fyApV8%sb?T0lR`sR&nR`y~Ti4M6
z<cZgWJdU!lNox!uG?$zgQV>)!tKwt(Q^t8aT0DyxW?rO2jO*ISr74znrxUr~p2~!b
zN!)g&tk$OV*I932nVS=ZGp<ro=jXisFWv|OeOkJ$I9MuqGNwfXS`UTGue=)9&XY7-
z>{RnXnpFp9ODAG+R*0U7H;t{-1bIBb%ecoe&9zGXf{SHM>+n?j4RS_H!|irx6-S_E
zO1URg!`I`75P>-VdI`EpVt4!fGZp~(vkv?36r=ug3HqOT%3jJpo-!-)#ywJ}O9yR0
ztsYs}sxLx;-mtE*0WC9XS69okuw%zrnYUmjXz9%CD1ni9x3?9}AEU(&I7BOzBt;O-
zTj&oV)Uq;FYW^8WDB5!PKN=7{fkF(4QbhL*kbpyo@VFK$y2#<OH+0+)4o8HHGKgiS
z{QcY$P%qdsgE8MDe>}PrHxlX43brTd3qOejE)uuqW7GqHkpIH@?T%$bb|W^Jg+Rwx
zw;ybE6@d0#nDZbCpEDG_mQauQRD<c!!E+>tBe51`!Gy*ppPiJ&y=Cd-BW)C>Wkw-Y
zXn01d8%gCwu~>c%ogH<j))JwB+TwYSxwXX3{SE8|B_52C4|o8_(IO)qmHdCGd#5Jb
zx~<(dZQHhObEa+Ewr$&)Gi}VYZQHhO&6Dq0d!LBCVn?j?U7m~a3&t3|w%XfM$^$6w
zv&SxU_HhFpiE2PV06dP|@>F2s7|`=3#12>QhEtbAC8<o7hW$6Sv(3;#Kvry;fZMVk
zLVXcJKTLM~)rsmsimaatrrYa&+jG{2JGi;zYbG`v2>=}g3eGzQxs1b(pGX}Y7bi2E
zA94>^kzyCD&hV+w>H5O9S`vGPO6CD^M6O;liN*+x&-y`(n4?VVnOIYp*X!g43#9%*
z7x}UNY7yeaCv4kAfUgaAVws4%W(2r3TRIPG>C#<k>LWot$et1NYjlS7X|K#4QZ8pU
z7tD&Q2p&7HSU*APY)M4L52rKDYXbObPR7pXdg38KH@q`HaJzZ<z{<XTkJvB^R(LI`
zpd74u`m{PFzcW3ZqD%;0&&(Fi8e&X@>-2zVOLkDYCpLw2=8U7IFYpo>CgF8AwJ;|%
zmXczYlR%gUztKE(--TT}^z$r%)rn<>#rPsQzAb(-qpPHB9r1k#Sz^JHGcONGbStf_
z+m&=4pPqN3kvwUC1}W2v*&wPZN{Fcv9@gPvreW5r#TXsES&M3bI*8m(e~_|mJZwTk
zU6xR?Ae@VDkk`-k;kP^Uo)muBc^Q6sfcb$Iqf+ehiISp%;Sy;(L(0AEigBA^;lKjo
zX2rf?lvEu$NMvR>BE)Bx4Ly{f4r4%9oJ(w^;|-QasM*{EzQV9vF35^o0v0B|igdJ*
zmQO-2Gn)Be18~Njz|KT)HCf!~2%F#bx!HPER<gIwlAFWM@d+5PIxeZCi=8ruQqGcy
zYNUQk><YoCm~$P7+1@EJBA*?`&bf5gu5Y44+(?08GSzm{vU^zJu}3WjMiYEmyQk;n
zIyfF;x+uW@6-Q}U1_jiSwZOfUe1`lkfDlfnHfw&gH?Q_Sw3}hJf_wK!JER19-$*BB
zoXoO(3bJsDaKY<Bu=>82Nj5vGAuvw2N|dDV-SuZ9rD|`DJ24E$Ul?x~epPEGRJ^2a
zN`9@?9_j@Jv!{_~kh=w_)qwsqdV~t&XT+)JF<#o+CGrEA<+~+QSn=!>&c*4tUt62K
zAguw4<<)Db(^^7E6a2aopXo=ifSsJz@ciidCh!65c2j{Ls5E-lMXTBFx`KAUwep94
z(@~#oct<#Yy(GGbSv7F~jn2O6-8oqU$VaP~8z$o16+$6o0&;2KCQ{mc_oMNK&XYa;
zp;V=a0FcmZ6xcv%N*ya(5t`&yk^C&PW$oDLKft?!;*@tkei8780tD?KBkDUTj>Mwq
z9Y=;gOQ=|sURIz%CUvR2QD<z4zcj<ux>k<QC9BFmW9ca#)x!d7BS0cIVgDk7{#=M*
zfqs3#UGwx0khfkT0F<xJeg_RO%R`gr&w5Qj?URlAnBKh(Nx^@pf2Q8?WP-+_=fFUt
zYTSpIar}8Ukhbq;Kb_k|mi4m)-wwhhOFCvf;?0eCR>}#i;43Zr>-20IsU*o=xY&J7
ztUY0V_qTuwI`Cq5+{mHi+~kEt*Q{IONg$~Xu%dtI$Ipw~Iznurs?R&mGz}aTw78$p
zIqqmbQ!4PhoGEM`BJ`m`Mxm1mbm|p;?X?xO!i2gGN1LLxs2b}DQQwr!{YmBXygMA0
z^{36Ru3gAt35jn2{Vt08^C#8Oz0B2GXS-|!uJx=uv+|8m$GgS*+$}bC<g%*>&7HHB
zl4LlFb4~Y8<btmm<oT{v+bDjnQwWXm&D!xYrGI1G%PmN<cP}#M1X`iP%nC-uz;Lkr
zYzi_t*GR3)7X<k_KcpJjsr70xi6xmCW^k9`;IQFHM;s$PnNH108=r?qiH8*hV%bZ)
zl|_{{6btQRmK!D}dZj7Vj`5o@NN0oH$3zruX{dO1bAb^8?-4J0&beydj+<de<rFr3
zdC5ZXYiH}8DBL(&LQ6CBh3F!;ZCEA?kIZATkgBN`RaKZ7OS4!}zo$)j6DM31sw~Av
z>zLzy{e(Nr8r;)Bfy~K<VP1enicpTaWy57yk<ssh9yr}0?kK2hz`NECeAt>Fzq2Cc
zT$jZCHm7VETpb@hZ&2vXS?NJ-%^vjN%YZCPh#%kc_rFC!yzL+`68@K)ob^9bLJ~^<
zjNt#7np|q7;GclnXXKjKJ49Jt{i!GrV82WdL4RzNnC*|6{Ou`5cE(vwE>$Ik%Wj(|
z#ruPeHk{@1lazR6fGRa0Y`f1cJBG0xr5<LG9ttDW-w--*CJ?Qs8;7|c1qsU(d2fQ*
z1wfFB#NPv|fKA&H2f>>J{&@~H%uKz~O|Pm(0`4V(;tqooVS?ugn&&rSYdjY?1eP3K
zgBKB2nuv?7HVK`d)cRiuS<VtY#gS(OClr=-JpE=M_1jp~SLB0lSTu(Ev79jyWw>DT
zaLoFP{L#?zX9bTxWB61bH0WY<kFyJ@Z*qtjm+x^zPemOniXAE>0|YRkT1DmFIKRI5
zM-Da-nI#o$fpwE!s+&i~ga{#k_JQjL<qdXo*aev}rBO=nkT-goCbagafltouiOww~
z^+tB7hgY|2TzwPo&+A&;e)LN-iwBw#j#hr$-Pc3g-Y$y9G%D2Iln>%q>|w#cp+a7F
z6d*H}=(Nk8M0z(zV9vE2UP!d0i0wz6rgHM$DjF}+faYB?dSTb9{4=-E%A0*Ei)Q9E
zJW@8H+xn%&Nkn%rSq%*dJ@;k46dqsqVQHJ(#^_fAO=2Cw3sNJB(ma2sDdBZ>I3?lU
zybUTQWI0g61_51#m0@w#w`L`e2wrbF+Bg@184Z8Cid>`6DF10Z<#1*FL|?N8;5lo}
zBlp3eU6Q<DF0YYk!~mwDnrlCdIn8}1bY`Ep;<Ih(>NpQX?I!;T%LAwX{&AC2s2o7r
zxKs2#!=}ozA!M^Jq^vR#5DGgR4j%CeJiZO`1fdApejn=ruI*r_{<z6|v}UtAg7mM=
zv4&&FdAZf8gi4!#+~lSIxXE<@*>H-k1$Th;se{*82FaiaNxI=EprYUV&A4z{-i|Y9
z>qAuj4r>3^-wrEy+^q^xD9&X0Azw0dCrYb>?WmY@64-y-<UlQAd=_H2wqV^=Y05>c
z7lnC)j%VO&D)_i#%+<waWYF~7dR<ZJ(7s9{2<ub=*~ymm-YaB^DjYzgI`>jZXLMc@
z(jsQkM@y`8Mc(_q(Lq%$mM0mP#d^&7T)FI10kmoO#o2<t_&h!<sT&B38nbY6@nV$$
zSy=d~N|3@>p)mU1j9$0JGJ$|%W$i{1O-Ic2$xB$*3o72Y^s>?GmaBj`;#04RCs`xz
zZUB`4S7p^A{fAceOQH;~O+mJr&TWt9rNw|<&9+qT*tjEHHLIMcHoJsPn!(-5-<`@G
zYT{@Sr$i!FhR<e0W5!uO9k3#o_*zCW4c_|LzuFK@r|dnWqpV^iL`Gb)6s8oL(%>Pq
zyIdVjFwM;yi&BuM@45a^pR9-p1Zr%Nt5=WD=oTnx9Waq~tW9qGS@MnD|3-3$u)XZl
zGAc(HRO@|cJi7OOv4?j+PVt0Jl+<ha$4%bLEV3{qbN`gTSy5WByV01d0?(czKlzWF
z9AixIU_Ep1!6?@3MM{60CaQ*>no|;g1g$TDEH2D}?KgAp6U=qCqXN>_+%m$|%xfZt
zqq@U(xfH8awIz1G@!^Nt^@9$9_}gFf`+rleNe6lLP5t+VhJQ&+|MM!VGB)4P3b*w@
zr6GVZuuo?#1`flBAhgOzG8w-XTx!>SbJOn9QCmr&lxU4BC5|LEiqZ%2<0r4XG*=;I
ztZE0Zf<aCU1Tw^^ob0c}wPEEjJ_Rutq*d{8ubYmwFe>kELL07;WaHB5Z|B-Yn`~vJ
zi1l?P@KDGzkSc0}gN5OO4wb`~PZk7%8FrpHOfdsBu0+oC=^5D4@e9|BmthVTblIEH
z5O_W0ei}sOFpB7pFhOT68VvyeF#Y;HLFvL^b+Pl;eFgTsNq@_LP4J+K-dr@eycAoj
zDo>5`cPU!y<omYQ7Hg^`C&Z{iEfp{jHSa@5l*f5Xy(VQ#3pdx^kUAEo8PW#>-uH<i
z7`yC#RIGw4(kA3{`9ml&G<8LG?!AV^UU%y#Wdf1*!Z<fX!B_Jt;diX}dUs>gDF<2f
z2#acZU$d!-Idv&<-aXm2<4lH91TuZO?*{G{pFF#r=e?Zk<w+rvjl11SHqHU!G38%b
zk_14TmIi9JJCex3-B&7{fX(?^Dv&e<%gnUX`~=Gu!h3EX1BJ^nCLR+o!F8QzuMNXg
zu@h^$OTxKvA|9GEb<Lz_p{AED?3&#Ny*^K6!+IHO(r)eU<)gP)ZD2s)jgJ9cGa~-y
zk|<|BkXWp(hnP*i9nLM%OE$IFSSTm$Bc^W4%?n)>R6^=}7#%$c@QM^?IukN~);geh
z3cw!filj5AKa9IHw4GXn<DfYh2#LhKri@n5s{`XvgdF0(H?m;hxGd)z@R0X0m>Zp>
zY^F;&$7PSOHIQz|bYp-8p3YZ>S<NwzJI4tJf;ik2hlzTiw$fkz@>pN<w+T@7V=mS}
z!;6P|La*+Zy$cuUVU|qt2h&P3dMIAa6sHQlXd+-zhK7JPiwjpWLcYE^;Z2?-+>CSv
z*p*l}PjE8vsUP^ps1m{dW#Wpj7LQNyjRgA+uq(i{&=wu`nK}$&C&aBrWX<#gw=HG^
zAPVFH<@W@aHcvTA&tB7<A0XHtO2E98+Nt<5+RT|B%9HPrSnBxe-D+zUFBSZ>t@0e!
zm}+Zly3w{7QfhwCAZRd)o$|zORCxuh-2S(bOs<?oJpTj7M+`AdIIZXf1I>ZHbBkT5
z->edMxLZHXB0=&g7o|LDV)CtvhkmDc89pu0Iyv{n(Ef4CsG|Xi-$vcF>pC!RAXG;P
zT@N32-gW<u`}U9~%Cd|x<Lrn&$p`fQ<Jp1rrT?h2yPA!!Q}czziw#I{o;%?qyz){T
z8{UNh@@8$HJ^!>7$aL{U-SE{1B#}7D&08hbt?sLn<0=z)o1d()u2@6Au#~q4sq0AQ
z*%OO3MF7Kdo`Pt2om0}2yVjxCDy)9JLYrCf@|%Hv7tVk6QtnjH1rX!Aq<xY4erI_6
z(|P%?RTb?ZzjuqUJ_zFCAA_nhA5DJ*jxz`{=-s+l8W}Im$xJI`MUW}797*oqLrgx}
z`6%PHEZ;I$M`7#NyFT~wUnP*ADBd$i{ko1T{f550psN71>V*4x;U7(wjOo6-pAP;n
z7}vfo;fc(lm<+UKMNd=4kB{dpjIY`fhaR#M^<mXfeb;uQ7ki*p#nO!~VDdTHFVo2d
z?@I0$y&B-~vl;w4uVw4uzYWTXJBY8*ty6S7XvCG6K)STSZbT2%DNHX6-s!qgVaaTn
z5na0_CZ%jiKdU~nir9kQu5OTF136zKGss2htGa4+tG%z9Jl(%Y-|xR%dn+h<NNjfY
zZc2=d_fly-JD1g(SI`+~S{CkAIsQ&I#c5J3Sf79ry)M>LZqb$y^6%tH%hHOk6+(Jo
z>T8~T$+Ueq6naZz*)eN^q0{SXP|;Q4HqKm?N#5@sX}~Y_wUtZUca``sHx!b?&UG7i
z`ugdi%*U=Lf~7artkpSltLZlhQ;-O!zZ|<I4@gzq-`%3XZ}Zwj7pC1Ix*{Q2V*;~#
z`gh!*5=OgfYlG&^6tI3rQGXBoyQJZR$T8%9V7>lV$>o0&hHI|;^^c)b6QDmrl)l1V
zNZ!2?7tbIB=K3P*<N7f>gR@~jK81{lxd5uX!V!=dB$J@mu0vU6y|2QjPckt-hqgDh
zXaKEXAkG}bUGfmQovyMj2)im8Ac){u0Ns657cD<>sJB_gf>AneQq=)`I1U*k1Drdk
zjapjGJu&Wg1;Bh-FxFYR%;*$vJ7UG6&q0iCE$pao&~`2kh7Q|i$0gvN4q=|f&ehwK
z>WSn}7!HLPgL+kttd5A97u$=BK?dg=WNjz89Tuw9`d2dBAue8SW1$$4JOkZ7VK^Ry
zjX%*A(6oV`$$)iV;1^rXtX@>ze(&>>bU5jD#bgy-elR423cMfGwkngOS57sw$7x#(
z3l=!?gkL@q0RAZ<nT49fwBkbtR`^RdV-Usan@a;FHQ)uf9;bC1R;vKO++=)9SHgSf
zKzIajBqjFJc)tv$TQZf&cG55-0R0$);{1*~bqigvP$P|xY()8F)iX592tMwxT?PG0
zgj}T%Rtg&eh<JIHa{tI3h0+Xm?V@3hDd@XHq@rVzschn)>c1q$OY}QCnICKk@K;pQ
zg18xk<3#o%NA=Mr&+9?0bk+8f6IMEO;hE?ebYJ0{giBkO=+f}+C6!XROQO?Fpj<42
zeO~O1>m5mSyW(0)pAF-|@FK6%jA%I;!E;GbTwTC1l)qO^cx;k7V9FsPl6A58svXR;
zBjT;%ju$&y`DlD<60z>Ie9F!;>`LA5Z(f(ou&a~On9saX6=Um_wy?qDd)nn1O2HgW
z*&9jFf)`tk={MKx9RBW*#dmgF3tFEqMFfH2S%adX0!g8Qn(+|#mj`iE)MhOf(F&Y>
z25fJxBmsIz%P#~U+sIaQH9?+_{6cpb$Q-TpUt-T4FTcdj^RuXV`E=bW21oM0r$63~
z+a2cv$4-TwmFoY@3ZDEe$&^9;l>LP35MCm7d!J`++Z(YJ4V5ar*P<QhXCC)8;01E_
z>(d}l-Nqao8cAjTbQpi*dt~`@qdB>th<Nr}FsKg;(sj4C0HSe6l?omq8vQcyi8&6R
zyp?FEw4Ln=7>x6o=xbazDK##9t>?UQGv4A+j0!>9x2e0Jm)~>pL!VpIYN76fEJ4t?
zOPYl6uc&O(s5sH(D2XIA|48x=6s$19F9_r`NyxqI0(0%x?05<apc%3c<U7p@6FmZD
zL#V|+JqfYwlK(rG+dax^lhc=bDZO-gY$m|skvV&yOV<-k*K(PMFx7X0{<5>qqOXlH
z8N`M8YP>bUq;$?4#2`o5Uk~%3fvljsSRcsj+UQ<VaWdoSkSVk?9Yk!YZ&u^|lWjDy
z8-{Ui)%4KoXcER@F)D0Q8y22o2@~=PS7`a*3y@NXke1R$b|KcsO{Az1dcszGp2OOG
z#uJtAZ1a)N>m64bbR=h&7t*l}^@}h7?8N%?DTd9BwqPXo$>>PI;3{2|y#ORm7D=##
zkVkXAb+=~tvmtP1^w^Y9Mx{8i$MTSWdQcHrIh-wV2#9eSSm>$n;voUsH~)?hju!gF
z-$fos5FmLNG2g#8@9B7+NYMLFoL}8$Y91?>2smh+cBT4K>Z>@<im-MhL1#)HH5?s8
zf5rPrJ|gJNi(ng9A_&%xpR@E|e$LTYA12Zi${F<0ij}&PA$iX(_1ks?$16^Z#4qx`
zZ|^8;R1;hFdGZRpTG6-;xv92X{)M1|A>FHxk?0QVwr*At>Z9JycC^ulgNrG;XT$5-
z;*y(8EixmH1&h3EAF$=Oj$?|>R1TwJ83opk%VGpn8~rUK9*Kjv(dM_MZleH&s|j8T
zUiD#@jO^@4?#h#{x!lvODsw3K*>Ajhsq#PVpHnvrX}1zat+eD#*g*J319F9WbkYgy
zwR}z`_N8FT;O*}w&X#>UrM(L$xk^&aWAWy%Q@$Q~`6*jagcTHW{n|HOE|+Gu64MUP
z4-q|G8>|dkiP}p6W@=%npkoU7Z*AspIokM}7+DfV6EJtZ9>smxLdlXNTZ&jKFAB(0
zugVK-8=cMjnojwiDfn2-UB4Z+>5@3P*f+B;4aV^}It33j^ik~|mZ!>5+}uJx-G5fK
zRSD=XPKOXCMLVl=9N$2;r|~zbqIAAJ2y+foWvNgB8RB8}YU;d|m!Y$)y06h1ayl6v
zBqa&o$OPnMD<x7@BPaGV!-Wkkwktxnf$y@q@QiVz6~&zDAvNLKdOh}1zF&r|8{V)~
zK9O&(Z5V`CF6OY)d&z@BAG3JMC>-=^u4P585;Xn|PCe!`W-m~!YPhTc7qUv_Er;9%
zT-P*>W*O`;3&~iH{3|JQt?(ER!T}X`KbI%X6tDk8;h;bMEebbvs||ej-}gxTOOp3L
znW(!V>W>9b^vVRCvvB|PNc?{Tm1Jx(GCI0UD6>Sn7a)KR;&y{Z6tShwT(>UX*qju)
zj^r#H^mLTi5-^wOEqKuc)zv;EWX}j8n9kf7Ut@v@CI3__m5es@EMbi5y7yHgkifyf
zs!lG%hFR?%VG%{ZGf}<(+Z569%Uc^##<FK`xXKbXai^e#`a>-1afYp&z?<q2!|f`!
zVueX%owKGGp-;Zgmn#5u%V>NRIiPxAw{-M<__0Z?*F?CWk?>{Io)qY6%5r?*zRDnI
z5cm)3czQPj5d}CVz(l3XOMCTLnfvzHL|uoye)n;Enaj4|FOdSrADmye4!C8eygPm8
zAvD9)CJ1P2I}HLreN(|FTUBbpVc#-*J=T&R>o-bdhwEVDlRzW!%DRl2VIUU9YTv6e
zTS`AY2#)~HFX=sfJd`tP{wea-U&TTw#a_a`FFHYYE<Ssm^nPMK+SO^?`WkyMeGy%m
zZhgSh<a*{=-;QYQowc0!FE4v4F#QOLM>=vq2ddMY7ATEN?=gruF@u9e`Efm1g;Je5
za30*p9DI=+u*N<wvKodxkYay>*J^q?H3+WEl?phH_V){8%0GRXSC!lq7b`O@-<TsF
zBl;bFqh;gEETNuNe-Ww!x=6YzKIL{vfz^s-3@d(ZOv$m|XQre-pAp~Xer$TAsyzMi
zD3(#voRdqXPzGh3)0z^rQq<Tl%4@F{BH)QhJG_w7*n~F@>HGRqbI>sK5VGi{CR-ei
zUH-nni>B$PN(CX1Ne4=qgufI6*S3=`d_DaZ-~3n(3J84A1`q`%m><#4aRY%6xhox6
zIMiq^fuM;eVA&u^#PDOiZjJApX0$;?Bdq?%dQB0b40^ILyg-@bEqtza+!DK!+o4Pd
zNbzI6exRVE8Q-Z>_P0eT+M&?*l1Us>raURKiWp!a4NUth;sok?O48Uv0@YKD^hxY>
ziN8fW$}=eJ^NWV9F$gpQ%c5~W&iXHM<zHMaM}>C6+0UP$iUgT@Q(XY@xT64tj!<=R
zGyfG9mq+q5R0}uAuD#LLmWjUBb<=)^sz%Q>b+&)CT~jh)>!+uWXt&#By6d-V^zxwK
zM+_cVf-@81kAHn_hzS3uOd^Sb_7i7**zqEo>5~#^_5Uc7hz1)1{rp^EWWb?r3^x8+
zWv1R-3JGml9LCl@DZ8~n7slF=(}j{Q%-X}bJetqhE9S`}cQ)O=hb~NY%65>2AQjw@
zu4Je&-ad!H5|A%J*rl@aUjD`Mgdy#}&qr1(vX;FmPG>L{C86(p_Hy;b)&t9AM(6Wu
zG4<_s)7$jpb}l0LjDzcXA(I#3o!j3m?ZvYQBBOCInp1}Rc?%Jd8E$d|7k7H|_WBa-
z)%l=={b)N^f1KkQBrhRvJm&NXk%hxcxc0`#Y57v&N}U~r4mY_uqX{_jc0__`l*51I
z7uN}YQ#?L22Oo_s+JU-K<ZUHyXCzT-;&0%_1hYx>fkkqboBUW6OZSXvaE{I$2e?i6
ze-h@38$>7wKM8YXO_Ff><vZBai=Q%yEc1K-v?d5vA4tE+LcC)|kiF_pZ3lZn1hgT3
z_!x@T9{5O0DWo#M-tWARSYG^>eS?mN(PQU=X!>}RT3@*aJ~wX013RH!*5n=W54j*8
z@2Hdg1dglT>{Cbi1~@mdE!FZF<+<opiyZl>R;THemRJnZn>Do!0FRpP>q~w5=QmBs
z<8p2f77%7+x4Ugp{hS`FNFdgcH7{*5(XI(w7=`867qf72hgZZInF>w0N%lw|kM}m{
zhq|9G2_5@nv8yJ&f4U?nIRw1C>~()0cS${GPVY!~7LO}OMNM5d1}D2pJ9Ox5QPpZ`
zt4ehXyi{LV&n9+{fjx5FURm6-6EiM>A_J8#6Ip>ThnbLZfv%*J4m(<2-;=OoYtOPd
zuNNH}J`IFpDi?1Lmdy18YnmyF8Ur_nnhwI|VojtCA|VfwF>4tVN6igGFuoh$IxGW9
zW9ldGO(vFOpqW%^T-;s11#QyCa4xBBWmWk}QQ>N5F_^1%X}^7&poiA3_+0QqHA7sp
zw}vAok^_8qN|%qx&F5;9dw5V5h^+yiz{QJ=As$)uFS{I!Eq(MZYv3~DE?f5%!+;r&
z4#}}O1Qjlb+E>urQs~ecx=a?%mB>$Hk<l3E+@+_Q-n!j20d$uyEYre%!I)*K^t8$l
z?$DqU>u;h}^Px&BP_U%v&cW~aa@Na;7YiHmWnZ0$;*UHZIn~}Pe8e)#yj2tKz_%Y!
z<mVf2v&br0k8WwBiCrl(9Dcx{4ut3vSu5N!QvF|ss@9d$%Kykb`_sAj|2y;S+yBix
z`&A!*uvmI;V%c5ZfOdxiHnp<S3Ez4o0N`KOIg994%x^id^4DEFy#rNUHJuG%#JoB6
z7la#PDnukY=k5s<NB@0~&08zB7oCuRTsUJV4ozl<b!#pT8Rl70kHzAUIagFm|G*$?
zc4qN#*oOytZOFh0Pg}DS*BW>xPnS4eg}|NOoG5NWpazRaHGHFzW_@;-NOQ@y6YJ)o
zaeKA)hM`#i`+JFuO^HXy(Opc-Qi?2=?2(j9*s~$qO)j%hVf#ZTFJj}nG@2EA%zH*x
zMV5URYAd;(YFOXai?J_?#2H+#H^VPn6=sx}KMzj6*S%UoE*j4-Z>j|~XE)Il5-qUj
zS2Qq+-q5iR$PsH?McjUPx*0y!w(Z&L=!OZ5{I6MR3VxA<BHf+!O;V`1UXLm6zw+?Z
z@-HmrV($?=(UejO{YEpTiUDo;Ql=f<n!ieH5;*M|=`oCw=>!ad(M|!hemk|!0u%sR
zT40s#zCcb$F%SL&_XaLQR9VOT3+}BgWCO-#Vh<#M>l;`G-REzeHbPPG>?LMlHu8&`
zF-p&Uh%>P^KG{zl1jqTKhYkL~GkVx%Zh(%|a}p@%hYAt*%+G%D9A8aYNOWxK;UZz~
z;0A^SxrQI^YZ46o7eSSQu<>L)PZ)O6W(wXxXm{x!xR*4)n+MLJ`i1=MBV%h%eDr1>
zC(NB7^VO=+U;FRG=`YeWO))0zn_Icpc2>>I(bI*Wl;jWGyXPzT`h63nHTy5PSKJRE
zrfKvC?rncZQuAzXh!@}xM;gf4EOJ^hHPaZ9Xo<ZOiH%#Ln^!920Lx`jovo`YnAho=
zXsNYvoIAEl-|d+7zMqC^f5L2PL&e2eBt`RNn7kh!=3cXI8QBmU7&f7*pA>GI7yqE`
zM&-fap?Ad*+_GKcvMHDs1Xu8trEb4_KX%yWoiMXOP?X%~w)m1!K4Ix}N~tU0jX@|~
zRhllbhTgG5dz@^_hdzKeoH;4UIxeFP(`@)r@H*_-Ziw(pBN-eo={bBdWgoQMP~5zj
zX<369y3KKK9VKiVACFl-hF-Z%XNAr)qRDA^(tGLtF+7NnL_^mc3H*ItB!oFt3ykGM
zC#|&hxS|XmO%pR%rf%!ts`5AfBuZRhsy43@yb1v1yM#+T`n%;16o1asUo7gt!!S2y
zfK_-xA`JSoD_8+a>v&LlW(3H37?}%LgRv&KHqa-p`NNW#S|?_X3-27ctRJ>_<{!3~
z+qlnHlFq($d`IeT1KW&}W^W})j-jj<iRcY>PPZb}|9E8pAAFEZ{%c7idl;ldfPI&a
zQm@@VabpiJU{6eVg;!ZmPkf9};EVgv<N+pCv1FYIn4{p2k2z8$PR%uweQF<Y{Ov}_
zR7bN*aU9*vLyqcB;UlPWOOhCQIMfB86KGk|T3%`_sE}3KoxI{HrJ|zlCCC%k;x?H>
z0v5KS^GQu(%8X}M54@mL=!3o3nnbfyg<0jq=F~c?U!=qF_P`unPii7E-zjr9w!)-d
zyiY|hu(SM6UmCG>?fW6>2lIVp^(L5IPx|27l5OO~IjAa)U)QL_3`hvvv&`U*Wjg2j
znnOz6`J<thkE_J_^+~4aAHgGRM)=e{Ftrn-fG;ucVee=B<tgcq*G|@r!bOYj;2Vdn
z9*6un$e8EWd%2yX3Kd*PyyN6Sle()GtHjAiqeoGkPNnK;mOU`qzw*5BS{hir9<A51
z-;y*NX7yZO;;+#EXAln^^jdNC=N9bnCye)B2qFG=@et#GGL@?+kG2135Puk78WF)k
z6CeYY$%j}$K>@`0yEFQe&4#zM^2M~8>l!Fk6o)J=2$tM14Mud)aD9cBIsu}_dQ5c)
zR8jjuZaaIARZB^L{0E1D5w!^6NORk3mn@%={h9LvVZZiz1_w|y?R?A*{W;LMc~IWI
zdUiAHP6K(VSxguPYRE<aA`#dcA@Gi{qTBBBrj>Np>#7bPwfb%9Dd6+k`pYH~?eQ8G
zxkCaCQwET$Dvr?v4ns{06W|uNEe#|WFk~`03qS!9>+u=^jk?=HkQsFVr&&NPpv`up
zi`sTro52}Sw2h2BVihZ+;%p|L8!eD%pa9SlCuv2|fcs6?l<UM0SX=b7iWg{NzmXdP
z<eA$2rn{3__7>L!@Fg4gZ|XSmm6YU5!^IVQYm?_yk+36876ELMj&+PqQ?>g|`eebn
zG$-aBm@u3qa36}R_l&o$9lgmL3mWqe!{AzE)sN;X=c&WYYcHj8MK(^lz4zxzz=EFG
zjr=4%^q9MGDO*4IW3Ns_rFMp$SGseqpt#W3xrJ%ccPiH`ir_vbt;TOn4=QuWKF=i2
zt-)5`m(2?o1^wGKsGC>&kV=_q<ffxybSXI$Iwjq1y2SO4QC>AT8H<4nZA99)lG+4*
zJTl7aWmZjdrqP>a*y<TMA{m+M=<^X$n^YsXX9}?QudJp>qIjU0pdeOcQG@A@iPt1B
z5P1T;<j87c1=hIe(v|1AG*3bo$Gh)C)4q2%rH%wsBKx`8j@~)py1`Bruc*U71hjT|
z!3&~f_%jJwC569(<R!m$=GeLOkD3E+;KTd@IxN5F$Ka%>;HF)0)I<Ivg^|=vXj_&%
zLV`{J>VcY2he}hlns3D@(}zNv>i}RsZ|L2Q1aJ?38aN?(K=%MX`Kcs8TdEAY@<ut4
zAat8pm<Kpg>EtQYwMxXtMLP3s33UzTGHG>Gy2bi8AM3&0XK3Gx6QzD?A|5cMWO6}W
z$+frWE0ncz$`8w#Yl?3v8aIuZa}?8ejOBVk18EMzzWOoWYUjVhPFuI0cD6KL-TSct
zr$C*4?98S-DYZ|dd`>|yxa&LYp5)TA<gN<V$-9he785K0BT<=3E$832oNha>knx!c
zPpp!gG^G}?B1fd02m6irW3s6-OYDmR=YO!wpm;EFcCz^<0AJ76H0nyKPcD3<#yR|L
z9@1(jZQ9#TNqtBNv{>>+VatTzJKRRajzu?yuCl~2yuf-+8{J`%AwQdp%YvDx2H6SC
zz$7;-6hNzfdUH_)gIuqcYQ@p|<L$>PHQ@Zk+4-lh9*<QIuao2PxFyG!&x9csM}0E1
zRyL9Cz}~0T!s8IS7&=@Kd3h>qGV--9^n1$+AS1@xaHHFr-=>}kwDcG6^P}&DQ7m7g
z^VmxBS6w7y$if)G@@EdH7SnRnzTC24d8-qx+kj{@3ZObbb98VWQ6GQDiFva-OfL;e
z2fy|BW(xuS^Vg+dJ21>0y+jjDv>^4}CjsCD@?NwG3`d09_cXTuZ2jvF!`SkT6j(4K
zQj^$>M1?h8><g;}@;g=Q66{-d4;M_^&WM|x7zUX@=UoG{0%ig?DzTJe7#t<{$ZjT$
zL<nG$+69TYghii_7c2bd-?4kQk~rvRiq7LEb2wc`^50l3pc6QQ7QrKXeQxVAF4R-*
zoArO}H*Zhd(;iDow9KVSSev_qIwYf`+t!BUN3sz%wU{wFH~9~<rTL}qs?ZvqhmGNl
z9>1k?qUzQ&GW(oVA7_6WP5>7$k1VcBV*N0Jr*_V$4AG?+%KY7ouIqOD%FGmbMJUdD
zVcX)8)U?kZwz_dQ&m1N=OWk$J9`5e1XZ&Bivj}PbAgWiVBvAb(*UgXh(L2MHSd#QU
zZEK;F>F~SE1(MKda5He0^)TH*cEV!~)SOK)<+pr<af)*7HObbK*-)Ff&?Q}1&-C^y
z(7EZqT==Xv$@o*4NO~5}fLJPXF1ZRtjQH;@7v;OJn*W;zAp6f5GFg%TI5$kDJL)SK
z078CHfIsqxDB~bN#zwOO0(DBs_J|+~Ks;X#u1#jLUCWby5u^7cc?j)cfs2Ifuk}YO
z(GN!hSy26n2HUC=Z*HbwR-Io#4E%j2G(yETBpnEiw(44#a!T9q+hOjBDf@m&l0XRW
z>(3`J+z8<iDT4Vylv!guf)m_=D*BT^qt=hPYnZmVRJ+D)Zl?a&$Y-}3dW!!F0VsV6
zHUvWlf#)ti*A9ggU87O~tO{g>N09Y*BY~mJh!AVI;k@~|?A6M?9|fe?faKurUJMsO
z2w?&J)`uwDV|@cobeMe70JUWc`eX0qV`6Ny>ZXyXl8DAnCKYGzde2O9tS?pN5_Rk|
z;N)lgn@$hS4gJgfyg(C#s?Fh#Ma}5q)TpCzX`1&&b=u7hS7)MdXO8!J#MKCXe{m+7
znqtYqWxt6?L|L-x9}xsc4s$GdFV!}B&cy36*d=Vz6DDqPl{q{}8Zx#%pG~V{MZdtW
z4hgfGX!v9BVobO#=IzS2VkwmK@e#oa-Z|~&-m<}NIKD%=3&N$JGFRcUS1M2Tkj!bN
zz4ZeRJ$e-QLwpk1)G$+{{wKy1)%93z*Vfz-QFPEaskMZ>V&B-L`}ggf$OT${25eYK
z5v;4@L*G?9<FkK50k*h;BjSHfAaoEvpa14J#Qfi4i7`J2Kp_{>);|b<vNo6;jVB>t
zL?2qWwCO5lUB;eabja6Jj8A1{#g11LS)f2dk)j9F1J3K6Q8$6A%Yz<Nvrf(_l>Obr
zYfxdkEQy)|!4q?@GX&EXSjS*A>|bp#>eFGZ#q66DM=XqbA)^&hPhUA{eFGrc-qzQM
z7ZhbG1RfZt3inQSL=c?x3~>l9wLJ+`#E%3pvRb18d2(Ygh`G7?XLlq5^z!Dk#u2j$
z0mtP_E(=wUDuJ6{0>^CPe5gkwXA#g9{x5|31qnwROA5@vBK1tuaE^RX(TtB8rgt0<
zSZ}#R_GHm{6hJ_tXjyp=uyXWSXWcgN?~ke_T6wyx{*rG!4A#1Nv&iXo7ziD8`=GcP
zgH8@V7jrw>EF-DWnb1L;S3sHhJyde%FrvJCWw03I+Z?QuitLZ2WU0}S>x9HRudtIK
z^cKGcL}Na~QBDVm-YS7PD^1zKZHd9x%jHxT@6xAzyYp6=Ep%DUOT1{#f?}N&MjVk@
zT{!J-<-S>heKnOjjLzL=adSTo?)yt)T5desEPW1SnS&wrkVDqkn<Lg!DRvC!x-UTZ
zi1c11efpl<*{%>zdp4wWe5N_(FTr2V?H((Ul`z4EvlCcD`GbOqd~5ZFmM7E<D*0-m
zR7`oiVUfXm1p$}QIy(}sj#<HGP>b<p=EwSjFpgt>v2*T~#;MDM4Jm<kDOfScUluQ#
zK+Cq90aqm#=_s5bKTi4LN{fE6YTpfMY<x{gKc_|Hi+8o@7JpCJpGvM@Vi79B*Rb6}
zsojF9hcXa_LDtU%ty-o=qOrFzk)5$5qFisx|58m=Myj>IA4ZF4d!!twOvUBm<+Ja&
z-6h4JXFj`I@7$Vi#o&Ffk~?F=eqby6k|RZzIWXNm#nVV?7wnF+fB4fuo9qm3T~pQW
z64JwF1Me31hbBf=)G*4f6?dfD-?0OaiM$R}sVfKh;N0#>*Nx311xBf+y?rvprZoZ0
zR4`64Yw4t(DXih57?N(;%Ohf8A1QjoC)BKhSRZhe)`ep75uDO=okw|d?pO+fS&VB}
z$B2<94bE<p{z4+66P9~aYG@1JV1&gAk1UH{0K+gauy$kp66q+@F^d4{Y?~Xhe|>3Y
zAU5#G>bK$`!>9i8h4DP0fF5ws8cN^<S`gAC*!R^4X6liWd3hvLS?@iBv9l~iNB?Cp
z2P6=w@=g}6KYyM;iMjmT#!8@Y1R*$6Gy#xWg|Z*W9N}09-I8@GPsfKY(}g@2ACZ~L
zaDjc?;uXe>VZ(_`)I+ZQL(Vo@DFhz{6;lJaH{Z(v>aM)?O};VA$8hIJxAss$M$bwt
zjGpCi*AWbU8a-|}Hj_F}Mmg<6!ve9Gz-4^W9Gx-w)G;!P8S%91ksH~j8&yxpL(8Dd
zDAza1a&{k$k)ObzJsBLcq`ZS4N^}4Nj9(r}S_H`Vv}9suWgP8BfqS+6-=n9$QWsUf
zij^fz@jE2VOpcMpYW&99ERV;eQv3{(CvJ5-zVrB~C?<4mND8Eum6~I?%BXb=wxmeJ
zIvb>5vLGqwNw1`Q@J#9<-X6enk_q7Zgf#EPSehbV$8ZBWw>7yPS%0dS#kZHnh%i%A
ziq1}m-V?=QAWz6^J_s1(pvC2DVh5y(US>`hooeE<x`zes685xbkubkhHIG>Ff~+kC
zI0p-_Qc88p$d6yE*ZR(d%<xP`G&>U7oiDmiG+hG}=2MwT@j;uJUvjf1U~beLA890X
zF6-FAG#7JPRB~FdDJ=#>XV=8PI}NspDB5ODx`92)Rj0k5K{aYpsV0NTm8hKOG|lTK
z>C>PgB-*twa+Em*>B9%a7-vm813C{%#-;)FplA9=Yuuw>hBSLJ)_U4rR`9b<Z~Q?1
z{p`>H`gXYVzc$bRq9N;F`OE)!e)!otn=80bvLC2nL<AQNfDnP^gYitA1O17Ju2%S`
zJ<J@%HOd#qYjSi@VGl02nh?qY0Tv9YA_4jezI%am2qnk`5U8O1YHd2V5%nt#@r6FF
zKwju$fkG{9r%iHrvLM8dzD;*@G}1LeO{;~Hj;$*Xu3hG$Sl4pqQMXxsHqUEVhCK|V
zA5t9({ZG)APJf_T#TBXHRkqvmjnIl#ak+S26io*$>`DF461pWd_~_M>Qx{`>CLO~Z
zre^Q8gqx5~jKTUIj{*?9AIT2tzC5T$nnV^jcH>VP@KA3s5y#~tiu~mCTW3QeT}af1
zSUa}7`^g6sC)6L}ZlLR7T7USNxgHL_*}0TX_@!R5kP8*a={Mcl0RA9FgxzPn_k`EA
zG_&0!Vv-e2zE4B2Cvsxc7f)7!l;{2Fsy$AB0NHgR`gjJD3tqc<dm_XyY9Cm*qlB71
zr7f!t&T(K^sDORyz}dkeBd*j?#~EJJQMpuXjctS&<xk@R%f7ejJg?7;sCo&bA<K^o
z=0&ZTk_Q70HluZz9fzC5gZfh^WV+~v%HHC-4CEu~4sfrMl{ZulV1^iSKTrH8-Wo)K
zp=;xGwA5#E?Mu+-s#3kL!I<9B<~7p}cY|0wP&GQw-6)Tq6<Zs$?*MfXfhBiiJTp@$
zD;2(OhyBZ3*(sm6pZX53mLc^bQ9%H1CI!)--kFKuASe-e0>I?eehYP(pO}49(@RlY
z`sy01Up9HdCwKYOFXSWc(-j^48zOZ}pz<vZM*#rnt)Sm72;=XEzmvyQ{KUa)e(CP9
z^ZtHo4*Xd=0|lIt-}Mqvlcf*wFGk5jUOJ!u*rjAFMvnnU4ua`L&x;0W6L6WYMJvyQ
z0;}tQR310=?8X7JM}G{I5ILI}fR6vI5CUHuS7|su;|d`<LM$l29FK7J2>!kt^kvgO
zb8iLpEN^os%Bp0K4PX9e?QE642ct^t#L_EdO337bsdB4t62MU2w5G6vH&5)6t*c_8
zgdRDxU_CRk5)^rG0o~rgZjDv{0yAU6ao*I_jLEyzhj9RXys|qTe<#!-1N$}w!2lvK
zyLF;NsSvOsNWb9Plb{^8jvI{BIw-E~WSz{qo)`IOwBx++M`s$T#+2$*9_d#C)9$&i
z`1u?D=mI-DNJc~MuG^p*F7w>3`p=7tbQ(zX8VKJzt1f6Y4%Y1*H*<M|SydTtLPEqO
zA*O31;X{$@MRXZm5!*oWluoNFDi*BIMP(|+szLNZGqAwDOa!p#p6)ybyFjX!^Rt=t
z?)py*Q$x?(mFy3`Jk~06H#-z|W$CG9d53qc*T^?3bS^n8Lcbl|5*_JLS|7@FQPY-!
zHUooyhw5Il`OAV6Hq*#8<Duzf6zKdw9`0R_gu-?bTqaT*-5%D_eeMipq+Z3}SnyBL
zT?v==E_}<5D|yC&q5=TcoRAjkfqt$tvmzj{{t`57e(KR}GJ@MS4{L$Rz_6A*Bq0bg
zz||xWT_E9JAxS0XyEKr`JHDU@NJO8Z5@bE>m<XY#6>Oej%qC7PTeV}Evr4_ywx?>}
zmn`nzUEU9-WqlahcKyb2(vl{wLt}}H`8xe_h^>Q8+7|w66)uS}$f_jfmB&B#V{9jU
z3Vk<2Cygjm(=kp^R0>+Ro7Y@$_B%TvvR#z2#aJ&|Tqw=Rm$)a%o5{woG-D*fAAMCp
z#KzK7WT9(j$)}r{+X#m<I@70zyy$V3Y*udJEexTxFRPrtl(>{wgP9?3&Tp5g_1A-V
zWVco!-Gb_av#W)C$qM>j1Cevw8kVu2M5sFuLU3CNPkim8lzb+uH>NRfS}v{8;}*=f
z^K8Fw%U@c~k`$S}=M$4v0l1;k*ZlZWw&$c{3b#%^nTj1A;+_lyv{$_8;GPMks(IK-
z1&h-$uQa}^gX0K@t6*gZ9<A5qSot5Q@Y0r1_`sJP<Tjr(^}1=4e0wdj9~seemlQN8
zpq-GO{%v7c=keh={qM`N{@=mzUzTMR2w;dg>4pfP7!aiI+L_m|MY1s^0vZw%z`aZ?
z)b6QXnd;rD<T!=f6w-Dgwq}BrGccNRhNsXPt_u9bH{uwLN~HOEx@YBSHwcB&e4`!L
zxL@gIw;ET=Pa*V(oPOb_b8;sDnJVr^oE}~JG>dnotA8h>jgrb|p3dVM)EgZFAH!H>
z6rLxtS;qC~K2Mm75WZs$Rlx`KNc{Cr_W@&nY8`}Z*cTUKQFv5iOV#87`2AO_6S4cO
zk{8i(Mr4FKza@g0MSTFMQ_d|ZO-?BX1jJV#0H;ZgAEOEQLLg;f+XdZnVyi2@Y975<
zCkR~PfkTb7gK5=RnpQ6EjDf1MRp3LGjO_tii+@Da5wwLiWw$6pQ0ctf-WyDj>UPL(
zY9)CCa;0)P47WY_-N+?NOT~_-L8ij{kbR~vJbUMeakH4qSeRnT&UGFI8?Q<YwjfFJ
zxMUn2J`EuaCfk0pt3kciTKgC8De#|KKH>9F{Jz}1${JtBX_GY91w%IVqp+(2hojY+
zkA*`qzI?}ysp<9nq%IEAk#H)nopIs}pxbU0p3N?T4)7s)JuoS0cF4Dy9f$6x{Wa#%
z9~E`N&h|bh@=Mt)y_W*7dFejh)uK@~hQ?xKD2YNhaxJyDpOfFeIdMwf6^T~<*D2(`
zkz4-f14yz|j}s5d&`EbBprjTqnaHLh>^WPduDlKE((Xdfw8zXLrm4wS;^pPv^}+h+
z3|0h=Ot2YH>PV2jf@}Q%m|rt6^1(lWg3<j8VOX|URN>PdRp6x<cDmN&lySjK)nmFD
zRiGj-b(~S$=)+iywxop9RFUILkx63inOV}`!wjdqy;aCX01lzR<Xs_Guv(hV_L)CE
zxD^==KeFyn27TUh*AfqFcaBsW5A{3VlCah|Y*SE*UaA*dR4cISN?S^_m0hV<6<vV%
z^M;{c=3kxqWbYY>xOJ_dd|>Ay&MXNCG+gqnd9a2o(njT1EEy`kGatpaz!Yd8D68Ua
z($5>b?l&t1w?4*%x?L){iXYW5rN=~0)`7}AvGv=t(bwLch|P!Pjdn9jjRZ6yVLmg1
zS<^Q)@^sU7eR$hmW7n~t#So>n@s8a4IsDI^Ij?1$*EHQBmS2&{xt3Lwf{)5~$d{f+
zw9cj-&m|{qNI`(m${kB{r?8wW8j5&3P77bYNoQ80VPMEJandy4{yiHVWo$-X6>J`6
zv6ON?`H~}6rF@rozS|2P6HS%pMkqTA6z*hRI!7a`c^5j=^Zg$Db3=Hl*Z!reb>nc1
zdebcg0zttcX@$Jq_dj21Qd)dzvbr@#>N;-rj@O|wo&{G>*QNlIa!Y5E7!D9{lq+73
zU@=>2@k4tFU;tAM1)O!hv=*lTIOx29#ha?V;74~BDQ);49F6!bihIh1vz{DH0Yhz^
zf}e{mXOTJ*tm-&oI6<H&9}q!gBImP*6rJPY@0{vnBERCi2dJ297(RYHI3T3;ryeqX
z${`xv6%FaAQ;WyaReJi@yD93j1psdv=UfP7BwmpPAVpqJ!uS`ic(mWXL-;`GGH(m&
z33%c*V9$SRC57cT!0xO}>y%H3Bym}Um`6IOVn%LJ^uVBN)oknO$L0*3^F8lQ&3!*F
z1QQ(l=6X#yDrkwRoj%JJ2K`Q?AeBWzumzHoZv~2Zo1{M+Quo;X-s7B_l7DLzG6tRA
zz{lqM{)L5m5c+u~jpX-WpfTGXM7rgowT!yWi1>5<aL4*h^}4nKC4PX0*x4BPID1e%
zXW67y;L$Q@OCw|I_D%L2iFY-wVldEleo(}>_Ac3T)e)thH8QxjPQisUf-ZmCJ`Tp1
zwA57R|CkUwa4Z#KGU|_)5|{~D%&NmY<!ln+B8Wzv<Ta%}lyDV_OJ%-(VBl_}JXRD}
zhR$;da!k!Wqi6_x0R>V3_c;)wH4(s5x1_S_ah0%Hoa=PcTJ)i-GCWXt|NPO^u*A)B
zcV?Ock;8c1vavh%dT?Sb*~*~yv2UDte)N@)Tj`?5({_+PbY!w=oym@Z_XcF`-Iqr@
zH(0z@y1LllT6nq_&$hDuD+m!I=(RokRFfEat!&?Q#?`;$L2cD05O571H8<`~Azs_`
zY(gY3CJ^xt!{@+PAjT2|fHXZCpZ8szb013TH;rIB5YSldSV=O%tiH?z<8N_bCPU=k
zhP1C*GXO%8O*;%3k1r(f{V15B_L{&*E9CAglS02XAIW@l+bjVR1fE`QL#C2@kr}jO
zK=tk>bpksK4L6Ahcj{m+We?6|{aZJe_j|`pate-`iC_IjEo1-2R}8v)J{~-){k+RK
zYv;P)8cflX(1JzRvl@0KO(wsSKgP=o-%HXwJtAkq6j_9v7<_8jmF0V`82?l}=6fwU
zrT@N0iG86#lCkBX;Zgpp-_Gv9g&Q~_l|IDq2B7g73g(PI%<7x+R&CwAlGN|?bzvV+
zxG}tT#LP#%ycvaNt%P97$n8_v7L?N}^(A5Ebf-}=bf3TF4{j9hDi)VMfy+{#N`5eh
z=&^($%DF|>ShL`D=LxG8c56qrB+!Z8R@6nbaRad~WxzzjHM$vhrf<7<HJ>9n_Pr>h
zYWcun=9sHXl(Wt~#~hPdwFEx!Zkn33x9ePTZ9E;e0;l>{9esnnbhQ%v<=>7V4OluG
zwZH%XS3mspf77tY^gn4>G)b0d_*r2?PCg^qTVw;A$9Lh7AQH&TPaVh#eiaf?ZPoUi
zdL*gY#VPLSQkRoZzrAHZ6IpZoEgOA;-I5Q8<GT$b49z#`t_aMW5wsJC$7TcB3G}?>
zdPKTn%}ihRvD0oZ1g4lL1ohz{%<_j~*2g4pC#0$l1pFWfZ9^8ae?c72rL@yk+_HG?
zOfPLYbUB>!XQ}&I;_+!^;U+^hm*r&Hg}n5`9u!~lo9a_JV?woD1Sju0DXIn|Daa2<
z{%sZx2G5LR#u4-h%^!U_BADa<#%-}5G`<+2_2ijnPFReFwM#Z6*+(+Bi(hbQqaV>?
zbRwiZYxSmPT*&vJsJjPqD6r4xCEeq#yYZRHuX}8@JaxTO{pb-31;kP134e)M{#yYA
z5EcLdw(Mzlp{3V{&$<G)@x@>!S-cIUEyU%zJs&~BN1bIjR5Y&C2Nv-unRUBupS44F
zAX#Q$q7JQIiR3;Xw^rZp6w4HY(=Itr+z*(|Ew2G$ub)X@l<?sfK+u6@c^9|~Y2C)U
z7JEC9A)&Lk3%1&HV+|W@L-hK+N9|!<)nKFCGH8ubCDNnmSwy)5v0Afc+>JWrbU+KU
z%pc$45txbYD0W-Uxbzd+Ro(5MI9N#SBBW?n1k_u))`ksx=Ik17T5jB+z;NaF;c5bG
zlEV1lOE3IICl`+l*{%uKR<4lgN*8rLQTQ)su2EsF{7T9DuHw^Ig_Jp6n*;BA4J{i3
zD66Rnx%MIsD>2IdhrM_1?!3>}J!9LpU9l>*ZB=aBwpp?5q+;8)jf!nd?%um+PWPF;
z`tDh0pLN!(`=5FQ-+Jfwx$wH~Ud?Bs`SWX%3eNdt4oUXnlN}0tLyroKHDU<X6z{?~
zX?iXaqN2D?CoTH<@J)TK)qq-b?PQ1{Hs1Ql!BcLoU8_rJZB1`FxW;6{*#N;07xolT
z)qZmfkGoU=*C-!}0wp(XoJXQ$F}XS$@rGC3IZ4(hA8lN<mwK(uoKmV$TD>*5Wo0gw
zHDvy*)zWzz?=hD^>!?T?VH8`kT5I??7f?-d)g{rECn-;YF<aiKS+(1BEO?L~;-@_b
zMO>V0arU=$)OIDdP8MdKpOg@5B&J(wsK*ke+)?<Lkv@XkLV4B4@~EFUt#{XsTEYcZ
zK<PBiW-%$PwNuW_;b!S$Ah}FpNh>by+^_6xv!qkK{&qYfXL6-N!rvA;Xn}*nC{mAC
zX1G{|P!7~3mAJpp({CG|D5Df;E|^1;#9#gdD5?4Es-m+Y9yPF>Z=HHb$v++pay00h
zd0|!*8x!n~nCFFyPD3R<w#G*EbQ|*Qtus9H@tOPnPfNa23`<6r|4yX+kM!NY6=~<E
zahDH5r)o!B-9c0t-tO#dxs;hoO=XgdAFmi54y7tMJ;97bz{rE>I#*CO122C7rB?To
zX#@~Wj!_GY=FUUhp_G>q)BGxep{u15g7KdPs6fWm)99m0=I$Ne=xYF`R?fnW{|7Lg
z?C-#IZBWB6V0x=QTrTtDTF~^t1-8w284JNHt^2Elsq>2MWgU2+OOj`iSJTmI;pBp~
z3^s=dgGz0-jGnNwM5+f_oixrn3ddGrCkz$4jaWR}K0aor6anStgtgWMtYw@dfwMj+
z6PgIneF?xe2>fK1rNx6%!1kTdvNkt^u7u$1>o!3Ff&6!HYHQWA;Y$Z=n#GhghA}HG
zx!lv&3;+OXY?dLjsCFFkDpPoj{XWA$dz$kX#JMHlnP^XwZ`eY@une^U*QM6@Wi<#_
z0Cohm{Q+*%hSd|hiQRg#-o}0R`rM0G#8MzWYsY3}(A-L$=z0A-f;2{3Oy@P}PvRIo
zous}6;KB+QFnx4+cRxv8ak*mJFm$|H+pA=2+-+qwHodb`a1$(%J;U!ip<S)k+E`1_
zPS#~>5j^Lz#<4xB`;}YEzt1~PC^V52=GmQOS8X}<n=+||<Il~!f4p=qR~1Wb&pnQD
zz$P4fQIOt^=~0`;$ZwQTD^I}!nnQ|W_p>%)np-lRJugN%PTtStmpScg9Ovun)Q8}H
z)i-$CQ}E0Js~)(2D)ndeW-i?-?MjS|h-ZG#{d6LlunF3o9V1u@tw)#FU7=ooH4C?e
z-N;}jhzN1km^$M7jC)Pu*uSs~`E?*m9FE~?kE-SfL8Xn9eH#ss8@~B9s3##A4U>xu
zP|#3L19+;Mn-4!SmN6@HfN&H3p5mCFHq6qk&E_}x`wUyLi?QpW*Lmvz9Lev6{$Mj^
zcQm&bc1-w~T>e9v$a&f*Xneta@+F#GN|D(0LzWqRdr(ItM6w7<ldg}qZs=p?yZ^ZK
zi+r}yA1$$X$D8T*KLYI*AGn$l;+;hQ(Gm-j!KjD_iQJN>!bhmUzo>if8<IuRio=@L
zPJbYb&@zehv9cK+6Yc#^Wcrc_-B(Mjqce|z-FW=fmg{SZtmKu9En(O_NQ`JFV%=Om
zT4Z@fJRbc=w3$Q8gE8(WO4wPCpmW73!5=NLCr|*9kXaz_4{QvK7*tOEM(_1hR4c38
z9Tt~sG&WZ%@3ya&*aPLTpV0$TM*dez3@*!Jl9Mpnjha4Eqxsi%2gYb#r@D-h&Tt(Q
z2D5+3Bw;tp;#)<SAtvQdfB_#Ge(7+I`fSg^c$0|kV@@2-SI#c!I>SjpDduP==r?=g
zkf%k-zymihyxCSRr2hw*uA?xRR)qU{5h{iWpS%&hZ?}AvbxZBpdNY@PQ~ft&y8qvi
z>1pk4xnIb1Hw!zDGqwLfrYnCT)34UV$%dKzhs40}H}BP4Rj%9|p4252wJUe4y`k|?
zYUe?4bEEca<ic-brvuU-Jok;|Fa!bx*9P76@Z<Rq02=H_DTuC2I$GL?5p*;5uxU~b
zOrq#!_z`I|P)`SuK7WdGjTeURYQDGZZu=8dl=<LciQoC)qf8{lc)$akeYRXK-`dgR
zHST3uikqC=g4Ug|oVk5V^rlDcRgQd0h6*wKG^^p=LQ>setj117){fDb+1s46WjSH`
zZYpweuj4u1Jd||$kHqvJU&M3`^FwP_BSsOXgoodoCVvFlqlqf})w!&~%T`c%gGx*V
zU-9<Dv3y9XCRmQ5gNz&KA8YP@U@jTi+f!%FmUevmTT3h)Zn_80PSVU)^&ow#m>x0q
z&{kc>oh=Y>P&oV0ou^*-r2S<)GcOZQ4p--%-lGux%?s-Nbp6(SgatExJZELf25NPs
z5WxoZeC+2@S5x%sIPFN=g-mAPSev$BIq8TpK8Upwrf{P6dz_*$_1XT*7cpJpi<lk;
zPFDhZh!(Hax|z)Q<b)495-!WKXFFj*{VOfTQQ8gT?9QL8A(Py~k-nLQqc8Eht*hT*
zeK%DP;#q`d>E;Doiw{$S=vmRgJ;!wr=d6v#iPjH)xcAYZTj>U%Uep;|TcxogF<Iil
z)yiVI)7P^H>3MIIsgz_gys%Od-httWvPGq^4fZ!-9<K2R6&jP_juKuOwE`)0hRS&p
z56C-+_Kc;0O8B^+o2(W;oHF%uwI_}HpKvt<snX)rEb#{eI)g686ty@@zav5KoNZ1G
z-mY{Ad?;_FP2U!kwm0s-inwr-HYO6O9hyl<7iOQ1TDF5n2IYP!`D8yqG?m^`m3-cV
z-eLbSq6j98NOJI>(8)g)GWpk#j{lK2Df|z-NsfIO*{(?yuKIW0Tc1dU5*Shtk3c>~
zn2dCkn>Sz%)|>>G?w+3xd9^l6?ht4!u!N2kR~Q-wJRq|_oPZiasN5IE`^uqAh?`cB
zBhSLX4*`3~7`|PiG9|!<fxE!$gS1W{!Y~KJb;sMG*n_;VLbs`YO$r}-ZN1)xTF>>o
z{tY-8u$NCnDQah`{H#*<JOO2UnFxSTgD5q$OO25#Lta#WjWLgt{c)0^n|U_|48?CP
zt>v!l1nx7$10V_I7cj0bAItSH#nk@lNb~q)AkD7SYNg=!E8MBH_LbH~_hj>i*e)Jk
zwb!&_qDr}?9Hr+d0ZonCu(k@3ib17BZCyAc=|#*iZWu?*Ss$BC%OuguaB7qJl(Pp@
zCurvUt6wHEpaMyR9^_WY3w1Xy+c){uAYO>d+qAKam)N}Dtw$^O;xK+b<Q{u-44`%a
zdVlR8i7R|46+N(%o-;f0#v9&{kqR3xw$0WBkKbQP_z86(u;%gQR{#lEu>9Ty?~w9X
zeOZ#Udr(zRnm}8ym)FH6roD9vhllE9PI05TC*Mxpzk67UHr6Q7@y=isxFxap1$vrr
z&JLe47x@cIE-HC%>Dd!t7XBYUqK9^Aus=lOKT9rE5EuHQ?*B`*&uCJ*I`5CT(s!SM
zpzxd;%Ur&JydeK=8Tru=TmD3#F7I(^vQ)#xBa%x&hG6PzU_T2C0#ttoa6z380#USr
zQUDafNvkAJ9~<NDqCOLdfDRjuv1wCHN;<;|><5*iTjoc>6n<|aQVj7hkRM_=(ws<#
z+F^o1quW`&qrv<>AV9i=pkj4$gz1qfM#-8@=8xkOR?mSHfak=o$yZymK7_uMA35s1
zK|R2-7OzXY5(<xCr~sBZ()~inKXf61!%gzyD!8KG{xPz&_79OI<o_zNME*x)>EZv5
zED8S4ktK&(Gwc5;vSjc-MwZzA%g7Sm2=3n^OKn2RGg%OSM3w~qh%9{qhPWh5YGG!N
z!%HyXv}Ql$94^txmr!Sel|BeLYyjmWg>XK_hE#+o_0@Vp<?farZ=jfS$_81)qzHD%
zamV_^vTNd{ML{kVD`}W<T`cdo<DqM#a910NK1jYJksq9QaG@W0cpI`}C5AGuZj8Lw
zYz@!;)AJw3p|a@Y-~O2X#911t`pUlf?tHKA6+p35Yb;EpQjQg0A=DR6<R84bTguoc
zBj<SK{ey(76pZBmU4Q@+Y*HG^?ZXcTds-Z9TW_3WX1U4YJ4i%YFajqHcktp*ct1zA
zOuqBna2=N0tFqpeVXFraVvk)vH@+H3sd0~iaYMn~9$a7!KWhgN;HX^S8bh2Q9KX(q
z-isveRRZ^|#}DqjHOH$?^3%`XQ>Hm^(J|o#I0L!L2bv>?Y}DNyia>nbA`G|@)p~}U
znLj574dfg=Un(8E9cSU;DL`6S?0zdR;J)F$0?<%`z%fP$^It4~VaP7#YS;H-Sa#%o
zH;RMKQY{t^UNp6Pm3oZD^o#RoLFU)8wy7LcDS%|lYUowQ4z!AtbgSj++o9X3oDjze
z6FCs9gjucIX39UrefOBFI0Z3rMHOjEKh48J)g%qoLOD$OpqN(Vh2?@4SW{&Sckikd
zr*d10n9`_tIQV&xeoJ#Z2V1ocd3X63FO<AmjF&XTB3+#M>PGO@rz2&|?)CD<6^qxE
z)u(EPwz{<1=7fT%TquaZzhgW%JJqEhSkX07X4O<06ZW!-{58Hr$wTopt94jApY3ZB
zKewjKm1dUf{%p4jF_BO)gH|EixW}y}!!&Eo$D$FfdvpsZ_Rn1YjmUGezr%3<%p!=Q
z%>Vf`Tw&D&5~Z2IV6UI3SKo6Y@IT`yA3RH&DGeA!y3&orUL}K<DLabs8^Azmr0{|I
zlD;E*lbX)Kq2p~hk92s6LI<uac#}jfnn>KrYsY@-!1n4BIFlt&*-CI>BM{Oq%qSDz
zb9D((H;XfIU{k9#Jz+GArU_u%EWbo8O!#~=kfej!7I;g%wIwuaq6~nR3db)5`wh?2
zsvsAi3Kad)YZEy8xP^{F-OI-ZmPl@WD!jH2<Z~NjjbnJpuE(XESRzHo_Cf3BFfi+z
z5t+g7JRgWyQ-atHmzj8dq;!}f73hTF`MBS4pR?u+VI}>Vjf+V76<|ccdBP%>v)l9*
zs!`!&XGZiv>IE;5>xR`EI1xQsU)s<}V$D)cJ0y<IHf$hMAEfbIK8zBvm1{Z^{T1x~
zFuBD7VR+O*c5Jj(ig@t~*Kz9WY5zqf7naeA0k`Ey<zXpXxh_h3B(4S9(Pw;#%eFY_
zlixwg;>`UHyXYu}&&ng&LzFUG9#;0j?n?id41SWIzWK7Aas=Fg;3f##VHGvBwC&g@
z+Rus|Tt_af2y2-+qe(63_U)UzTo7L8<T}nWLVTFx^pJ3CW@xH6F12LVoSk(5=n6Ro
z(RB~4C>JcQqFjyxU$85W=?u-lsdY2V^Bl3op=p-c@FFFl17RwYhqQbH@m&OYe9^r<
z4=-tWE4{qexkLf4j(f71EZIOdDf6RoFPa5<kf91b*6w1qN$#Wd2pyeelTxrMnCxbE
zsG@xmd`f-I7brmp(aAH^<Kyg*|Jt}Wg-32do|gf5X0S=W2&ZzYxFD~;Ow#cO)j?*}
zi2Z;_NHKA<^1uLEiXJ@#3JW4J!js3E4$4QXK9C3gDGutvCd&=XR9*^iUSu{mWYr}R
z3nNe2PmH0)7a~6sn(0szaK=5q&J;*ZX}q`?tB>}DsbA`Bl+UeYm%E)4Q?Ot)oDzvA
zn<chIoaJE^C_UD=)%>wh$9j;Hy)&Xjo|_Dv3#sls?<9M8F~S2B%I)Np*Knc}w>owV
z=J<3@_jk(;@Z3ZU5di&bb~5lx@+hM#zWXUTjJe%_f$Xj=<^q_{?#=z^7yaz{SDrCW
z$nkXkF>XwF=@q$D<iS)SLf6HRwf&Ey>^4;WVC<gdXi34l8_#Bn6~5ZnA{e$Gm`@nq
z70ZTH++<#g-i<Xrszv#eCo$)cyTzzAz(Mr71WF@k#A)XV9va)_vV-Xrd*u^Y(d^U?
zC7Jkftu20#w!no7n)TEfO@SoIKJD>O-^Q?kTpiZ&z3I9~@qlbL(?B1o)jHS3YdNml
z{WtlV1S0sgRc4!>k$%5ilAcB`et9*R9BY1EQ}uuXv`YC=!uH)k6at1IC&n&9McwzG
zYENi9nbXzIeJMf!Bs8memQZRk2P$@i=Gir*AM@;)o0d8c@b2LFrQMHleBLmCU|r-y
z-G>FyxRjmasEFqYWwSCX%Ctyi9_2TxjBPO&R=7InDoOd2l{sfDodu&t*kH{BNMz=0
zu~KMH#n@(OSC?FM_W;1T%T@e9IT{@I&_Gi>v^n0a*TmHRnP`uhJsZ%}yoW~Ts-5?S
zXzV(+3^Yon1Bh7%U$;TRv4`VyVGTt-$P8j943{ElpY`|myqJ5HY~L#0q6)w^@0Ou5
zvh2mv&6kw=Q>M2d8)*MscUI@EYzodTUU*FHh6V0;l8Rspx|be;!k91QZ7X$6!S5`K
zkTGGK>q+hX&XzO9JlBi4{N@ote`+K&dI?|GE|J$h2Vpx*nDa=?2^#Cl;m$ynP5FES
zTCcm^k*G`nO#w~aVm31<LKEmWaeM;<+Jh^(^X1ld`50W=IYk!LTZ7go>*x7P9Nd@{
z4{_QndmTlwNOXs~4t><(_erGro+kS^UhX3(_2JF>iAqHPGyKaPNQ!4)a{FXjk-e<y
zZ%QFikUKfl<T8%Yx~DIQGQWI~s-&h@Y9z(yr6w66JO)Ce2BKZ?4RoYhwW=MwZf>M*
z7v+fLE(w=r)ml(YHICUX85!wRCX_lyZbl$nO|~9V&^2XXW7w^PhX~w9J?J<WDtWpt
z`<+$O*>n`7iy^Pw?D`^b5^0HStk4%DN?g|ASj=40jwypG#v7H?;HOM2qr`&lR}m~6
zaMY+X<R0u24*HE!t}*IxPeO##Cz}R%fa|G(IBVyPSK!5m_=J6M+rwSZP}hNX?Ob@V
zwB|yv3l#D^681YBGURaeymZ{bV7KOEhjg|3&_gdnGEJdAJ<tAGw+$YXslffp0YHBB
z;QlO-{_B14cV9<bke|-h$VyoW5&(ERp-@d*vP8|v6&e5#<oL@b`rAK7%3sMuc9hIp
zR2G*GBY^5r2EyC~-@D#O5q_+ma`eFJYST*9>P0Ft!jOcyGcVTX`-tzMC9U@<Qd+vI
zj+ig|R&N9H+NyH2W3~;nI|amQCvf6c0B0-i;pKV7o<D*O9nDR1>snMNl#|GObC4+z
z#zLvR^c9v%V&NgmO3r}Z3+Wj63sLJ#dCbB&!cbx}?q*{Wv(-vgwH(*l$>4&plU{K=
z<!KQTMQ6nw{KX~YpCKt!=bd~FpS!=G^b2sh!K%;uli2GF0<F0q!SSD1L^<67hdnX%
zj*I}9CBoF^)F{8qg!Q7Evm9zePx5e6BfHAOxM^@9Ym!InCo=B6eWQ!@a%6QZRVXWG
zb;3(H>t}bwNs<aaoF~aY&UQ8u`mV~XLB~_;T{Rq@U(Ko9S18w)+G^W-aFiob)Ekqp
zni3`=xZ$m^GvrM`5BloMYfrb50!L6--8hv9YJdR{elLrrGWCcL(+dmzkx=p@pISVr
z)T%EYUW?3fln>%`*YH=Xe#0}Zn`$6#w*2XDWM}=oX>v}%9)CFgVZUaYkvMq@!QvE-
z#vklAA&op5BI8@mOBRN;TCWCDFPqxnYaVyXl{z)<?`JYOyOo~R8x!pJD(?=s+AZ4q
zgJG4i{jxAa0VNOkA4L`Dp3E}N0s}`D584}zL+YOQGQ-dt7e_Q__2;w$;1l0%)3{$0
zF19^uhE8g~nZND2t>Q?{Xmv8_DRL)#2+`ZZ`4j3Gc;7wIOUg|d#J)M+k1OZ86pC^A
z_A^_>%{YbZYClB_7HBi($7s|82iPh=W41r|J~sY1-h7Br-m2GUKC@e4HPg1qR$gHm
zqib^Ww-#l+cu2Of?wuiRx?C{8u~vs#R3|B)Ti^<C|3<7bv>w<79fI`jx}C+<IX*v(
zyq>uquENvhvw$%JBCwRUuOxL;!HjaX>o@J)NEoF=E>QNjN7R_I7$7@>8$Nhx7S<Mo
zhLtp;E4#r$WWxR5Re6=bZWuDE{3(V`)a+yJ+=E;$J=5M10uB!lIuAB7m|fRGn+eB2
z_?)Y0rS<}m7x$VM7*#wUcqEHJZbhJFL_tZQJC17GzN0tk9Mr=jM#qD~Wi13t$BP+-
zq+v8Xmq27@zf&PEOq~~pjj{rPgJiO9M_l;>orde~T<OkvHa&s1y_rERCikm3k)OWF
z7jiyqUh3_8Pqh*UI^;HLW2vKR4pltIM5a1yN-F{yyfX|~W&lS;v50>=QG>=-PR2iZ
zMGr!wP;Hn&PvcryddG+Wb4^JVR!D$Uxpy-`?NUBQf+Q`&wtbEge`*TFg8o+A(p~cm
zkA@t%_asZLkQs5Mi_@$|kPREem-K}={+$}iTLw+A&M=S5;pALyHywFvzdJOxYQmZB
z(t?{UJe1O$&y3!*F-j3^S7mPHvx1u)!hbFOYU{Hsx-rizANH!jMHR4O(I)!PI=Uu`
zl}9?W2D|;%Cq7MH%D$w3c=o)baG-y+{m!$bty9YyydAQ{SDVPX%Ho&-vPR$Uj|EBj
zdY`wXMOuBF3O{Ic;b>vU=30Asx?yB}sdIS3$m?89!TrW;RA;8#0%ciL;7U*0$}{j=
zfv35cl!px<`&;zd)hV{W7*DoDxlL30ybdhXRQXrkjz}IOz1Zgd=jvnM`Stk(Wq%6x
zSAa4-cx$wI^`yJ+ZH80(!Cz;q5SyJoiuS6-u4`Ty9r(Jjd;)RG+vk{0^TMGP5&HA9
z?w`3(v8W2|{|1`(KS+!J`gxrsUjK#W{o;`)(Eu6h-1UM1gGuQVNO2W0kP`CwLw0@G
zPcB8QZG27C$43UfAEWlDt@xt>3C8O!*5pBOt1*A4i3Ktn1rRo^Ej0`?XaK?g_CV<P
z$~C6Qc0u@fUni9AYm^?3wAh;;Fc37aN5rDvFN|zg%V$ncc9KlWC<MYx<rvJQ#~zGA
zAoHz$JF}ls3!Nux@+g=&bKRzkz?vN5oCv*dxk&%Y>T-Vl%G5d2xg$#!u8#}^z;+B)
z`a^Ct;aB^+t~2Jha<DPvL0X|)?!7{yUK&hDAvkm{J#Sbk>*uX1ORD>RSBPU}Iw%mo
z!{mv=_X`KxWB)l9@^d7>4XY5Ndv3$tiwdp{;kQL*yXISMhUmIaxF?I>o0e9j_fNAg
zhspFpm2jKOV`1(1tVZjB3&gF5vK7^}R$N)18oAq}aT%ypE~!gWO^d}+Ls1DC*H}C{
zY8^x0BBhhb(&rSbiD$0`<?t=AFR41QRv$4bn9vK`X>SZb;|8;321Ttl<=Qd9+}*@?
zbuSvYFdYJRZ0-FacIh<1iLOmfii^IbkWDpgnJ_sglshJ?F2%)R$=KR00=9Zv8}nAp
z80X1DSXXW0!wrd;b#9kTdC8f1_>hBpT%<Yn-L@y}Nirinvu>8gtQR>2x(i3dJavC$
zD4#KCy*S9Dd?73d)pc@!2Y@n1n$Zv-<!Hns{kO(w1Ds(90o$oKGEcS*i4{QzJAm>E
z5}1K;(UQUWkNrhd+4b3^e&n9Xo9959hq;#t_}ClpzUn!Vr}-%(VKcNmMSVjY%Mjwe
z#!!!42HsP8IgOnu_;jevix~+<OB9u&R<z(xQ)fa5)qL|iUJ}80gg1aC762!Ee=Z6C
zNw-254k4vXpcSWtWF9ex!IQW{wV5pr%B!UU>2RDEC-!DD4Ro`o%a2Z_hEhKBQ{_tb
z87ix$AN{U0MeC+UqusWPK<nLO5A7G=vOWdV)gBvP1bVtBVyV67H8m-RUMg|qh=8Aa
zZPZb#q~~>Lo;PwHeG7AWKykmhx7}o~k|1jSc^n>Ih~?+1s2}szk3g!bcf*duJ8azx
z#xu;Kbx}2IC?&&&Xt=z^bNZ&t!1?WT@)31!OYqBIqD>hbd(Sv&WG?Gpd-v<^g_PLs
zPj6Mn7u>(1d|Z>KLL|f}uP#gKT{emHtp}nDhTBd-<Rd3Fb&;JeKIk%XYaC5`u87g6
zj;cN<byTC_#qs+>16vv{i3Xma3Z@l22Bsxh=v~&<JGZjEI`=|1JuaVO-6YaYRV$TO
zcO4nF=27VgeWZ8GaMZN-+nBnfd$mrWhe|yNw`5jVW69I)wrp15%qo2SX`l)hg@e`O
z@IGTrZqfM~?xz+5h`>QU@SMod??lzw@P8b5C*Je+QVHJlwH*Q&w#kt}&<=5x_$n-q
zVt_GiheaxjV<}m4Sb#FZBvF|&O&I@Pk3J+@Gu+y^wfS{~|7#+Ig>3RSHmI%C09Ur<
zU1ke2+GF|%8N|FEW!zhG3B9%?-)s7gEKnY@>)ZVg5kVk>oRTYqB>JF){B(IYy>|Jf
zx=8nqP6#r<p)N@sv?)C^BPv=Z-x22dDAwMCpBiJ`>R|A(Exc4(;vSMu6uXpMVlkr;
zy4$Ary@s4R(bzw&dalc1Ra5YMBj6z&f@nM3*M1&=U;K=YxuvVyHz<M98KC(=|1!F#
z6eV-o=XQ6nPjy179IwpqSf6Mt%Oh1Wnt5m6@eAiMj(4u@;Q0(RLiRiZ5I5$kUzKrI
zRqzh#T)pwMW0}K->+|NeeC?p;3u7Vt;2u{VZ>!09!iKjIW34aIX=b(2s(Rz~&LLFm
zl!hOKUZ&KJIMH2pP;dwyFc<9;Y}ttIIj2u|_o(55=stobhsqPoHcI-EMDC@rvgFZn
z5?urk#X<Jt_gTn$un^OGi69>5rJ6ell1soc>q&7fdJy81fqU~Rb>~^u%*hM-Bkw<|
z`!I<{7yphREB=+b_}bL{R}c%M$^WH-tcoj4<u`nw-!+_mtAeN<=7&4VLG^KKXOJQf
z{lK@rddNS2K8B}`1osDUf!PCX972F$34-g5utRYGd8G$!P`mx&zw5kwcN1#*z3nA?
z_Lm_0-zCVNa#1J$@j3Z_&D{Md$MIhWcw)xtzI-B~$2X{m@;r!$HZcOe?kfa_UKs>G
z5T(Qv&-dnxvQ#S<)l41`gJv*z2pnnPXLBmav0zf49wbbLVR8flrQ{;1&bBPGD>?(H
zAImXjq-`NNsPozAb?K%c9;Ls;@za%mBZC?DP74t+CxlvRy}J{tFdV>eg4iMl+rUdb
z0Rj7h^u3ImAs=S0=6gkG<|nB9c1sM;8uUr{08Dy<$XG{ZOh-Fw50Ec9w)$p&&IkbT
z`MC=ypGW_czLR=v`hJeqW8^1<Y1_4_Jz$}jse%Af3+P+y_1<$nS>QoRuaBefJb!%m
z^!xXmRfCgzhN&XdhX`|1ZEZtrJYqV0gWa&AqeNaySiF1&pnLG3=YUIqrGF-w`%Qv-
z>4`B5ee{|r6$YY?Lu}QqxYY2iP@^O-Cj#$YjYXY?ip7#jsoC%bV|MsOT+rsx!1BE4
zWv=D!8Aa%MoBK!L2VN&D23MZoqQSGZtm%VIQ8vJ1-(&j+WFlc_eRNkiQG1Ef+WbS$
zI4>q@{8))9Bxndx#Drg)u-(A~acR}~6kaFq>AKxYknFM&!jz>6Z$?CzYw`hRK4K<m
zPaH}iZQ>7A@TPO=)^9D=a?i;&ZMN#GQaEmV*{aZ;KHhoATcLU@nzT>vs2~4SFOb`@
zHaYt9PSJmMRsQv1njWjO;QO*2TU5XC4O=ZoP3LJ&SJe}wlYl^C$@(aG{3@UHRDRc`
zjYL3Ehwf2V=ATqkPlHIFVxzf7c60#K(x#U*i0EqbE4y0AhY(nb&KS<hrr95!1pcnf
zm1rfc;1b7>g8l};<b4dI*j*D$A`n5%`fZHz7lSL-^e4M-F14fIWM)Q?Y!CB#e(hvA
zp;UUd13}@jtHGVk?=A$vDsLwt8Amk6Vb2-;(i%Z8drbfsTeX@ZdflGLhU#5JF`*O5
zjn{GqAE$MC_|V{!$KV)7b%%Q!b^tzpgyyn?foBippH6EgULX_QU%kJGKBsE-B-xX=
zR|XOdiLV#5c~qRCqp)yllA<7(&al#J`)HHd3E3Qe`rDjy9$`YGH+_F6L}hN6)>D0(
z;lmoI6n82xV{(dR=+$*ip$njOmFL^=VgV~#0(~~FId$zXkxtr+I1eJb&eG<A!0fkm
z(gOlkGj9o5rZ`AtaZ#7!AC<o)qV}W`l&WTd+Nvr@;pl%R=wJJhkf=|U#vqDr-cyEV
z0bI(}L*<W}D$DNh5cgz|c+j?Ux@bPaZA`N)SXAaRcy&G&c~#)hRMm!?B}~vxB=7Ca
zLLkrw!9{y{pQJ>f$a*#832k<cE}|DK&!w31+WxamG$Y#R@^_o)Pe@e%G1$cPcZEv9
z#>VkqNmPGrCjM{UOr-v6Gx4v@#J@HZ|JqFaYcuixpv}aH|8g^tme9!<>?_^h|7Tf6
z-~KGC$mxq!R5ptA<qp|cXCR<#FjV;GAwtt?{1C|}sPqEV^^tt!c-?r#BEpC@tUObp
zd%BO%M)+OyP7lhFRhkNQHNEx}(N|RJk(I|sPXoY0NFk-qGh>*Q)Z0)v_RcD4Yg}jx
z#7c8wp`PuOdV_$V3tR@&QYN4YV~z{K<4>xBvx##D*<Vuw9DJC|iN7bew-=!9n)?um
zW|TmiNmh=~!#CeD)dPtAA<#Bd$vsFV!9c^~D-nj<JJvYF<$=61E!0N}i_HT!qF1ix
z3BE(noi(uLF_jX>CU9=bF1^YrUD3?|6(U(-;fXXVt5~0IiWyl8-SJeT-p)kCotGhR
z%=&;ZfQ(o3#m0l<WtBP~)!K!E=9<zCO6tWThaCofy}a?1l?R;qv4DPFR<zuM5@%{L
z10j$@{UC(OR|9^c)dMH%gjEVi=)ufRVv#QFXp4nBLX1xT%f!Apv1PM;_H#z=e$ERG
zkqCaVU9YV1(1T*&YAr^Qz&Z1v$c@<8#8h;rOyW*&^j@zYF30>j%#t9@qk`P3b$xz0
ztOShb0XC#$+oW>Qn=FTqP22R-R`0SQ-}(`z*#Oq@Mo#m`QZd;(FvB#Zh4{{|K5FeW
z7eyBI3RbXXr8B;tfqmbhZo#;|FLd$KGMknSL3@CUgAR$vySm?ssX=~jcXzYb#Nz+%
zbxWmySiyj06qq{touf+dk_Ga>?)b#CrJO_;s9GTzX>}7IkCV3GGmCBpaJKA7a^+o(
zlHB`^7-4bNE$_{+lBw{{@f@-Q7U$$Us6~cs{hQvrHS{xhi=TU{PS@(>7Ow`Q$Np^8
z9A=Yb-IU3U9|$5;%4B_4q+7aR>Mq#taQhqd>jwJE@HbB$<H1@*e`a^5-Ho93h8=%T
zm*or8`OF*ls)kft<C#+nvtRFr2&#COn5<@PbA`H1YT#{q=gT|2-c%{&u{;KpdopQ0
zcf|bR_g0nz`38Fpo%BF8Zwi_tZj*)wBoj90Dd%Zk2v|f)#o#(3K#{uNvg@r-4n_fq
zcnS`*h1t`PROQ$DziCw};jwizqE|r#x*l(M6Zq9lv`(J+dp7RC&l-D)vpaG=-U?~I
zg2bN+u!>ybfeo>6D=313bn7tZ_Je@qxS6+)>|LP-f-bmkXUFZ?Isj@V@OfrD7I^ZQ
z(`<A#o<=JKcxJdDh=|qeZ0l+FGwVCv3ODsA(3+XK@?<ovYbs;d*(VXP7h4w1&%2{;
zv&qAN3);pblmK*7JwI7Nxal2C7C9_!)eZ88tBVZ4qKO5NDDoq!^HNJ=qC~OAVWtyE
z2rD3j%HIJp0;U=y6|YB&JU#j$BKNBu3ZnUGkbK!LyVyB=xroW0*4<_<$vP`UB{zLV
zD~%5kl7cNVLu^sc=!iKXEN@|Ya^ME@ic9|PF<P0wYyfIDqwSL#?gSqnvutO8yzm-*
z9OK}Hia@8-;7@WEF2s*LBcyLVOn}-(TAN4AvFl(&=!{l%{JRPz5je|i{o<bHC?2Hc
zM&0L*f(5rog~nh%Wj-^%r_i0<+-{F{xoCYfF<RKAo=8v3pTyIt=-{jhEP{0@yX7M_
z_Gm34wmxfuVH}^ml%@#R|IRk$?crwdioqnbF88;PH=ko`{hZ5)F)##sX4JKA`^?Am
zUE&z%IH^jdQ}*A)1n4e-4kc>y%9+X;UMj@$FHJS(#4kgjcbO`0I8nnt3?bZVqrTwm
zTtw@#ALyRRe0G;b>VYTAa6T~8tm@ZxZF3agI~I4p){yj)cojlJOA&WkNhv|_n&imr
zcf+)F$W5;<I6ZUTgnQ0sof=rI##;@0VI#qamvTOl5g&;5&NLK5YVbj;{|HLSXh^UT
zM3_q1?2rnMwRr^0GGYHdzBn1>Ibr`pEAyuBO=&Bsc|EB9U7uy{L3(xz0_r@l?bh2e
z;hx16?n-i{Y2#tldIwTX$Nd*$9&DfIB>vF1PO5vuPNJ=<=;*!#`UY$`Rr#HVB!tQU
z%P#pfSC_MhAv+eI72^xZ9j69HHf;WE-pana9KRv25AoQ_k4K+T-G5XyBlO))$-f$=
z*I&5=#y>~K6L)ZMGP2kGGmkx|#IdUUKjwM42hQ?U#C%C;jDKJQlkMnN`QbM45$sFo
z_s+qS7qgtCX4M*wywEDYJ9{bfdP_m;N2&P`oV^H<LOeZ5zV)OA>Xq|Dz?4HV0P(X}
z;j7h{+c<g58x9Kc0i#k}8O?$VGOGwku#CfO-P?7i#+vFO>M5mjVYOJ5U`J@>pu!I8
zG3Nv&p$c4G-Sb%?FL<GQM3A$iK+}4fWWH>No`3=RJJ-1cNikd$iDCd|(?H?LFwCqI
z@P-)p<!GE-P+k^r3d-f;-PIM2%fj_{>;fB8^_WuqRF_~`Ju#Xc?qW%fay9XP*uz*P
zgL=~2Rswb1Vx{NV^=T+2nu|!iJ~s{t8SrV{A>-mN@gKbu=u{iMbnF*J_LD_p_&HMj
zxqD&3vw}Uvu8(?Phw69}L7i9%G}nfTg}o*zaH47r7*1HgS4wr}TkYY_KZohR!9R^v
zyru+j`Q~ttt@FLOIwYh{oz7U)gX5tb=JnwtT;`Cl7QTAB(afYh@4J;rMvzy|X8v3o
zbRM++=110fl}D;aT2l*)O2=k}RvMk!6FY-XhVFQIe;2+e)~bosl;L%TmLIT640}g1
zRcg|`L<i_%^HHnwy?^S)L0HOBs<46WQf+^PT;$Be1zjon(0L;pzU$ojV7a2^#E<sL
zQ|7cv^f&9N!uBmV>YY^36GC2X@Pb4GOku0UyzaCky&;hKEEme^`OAZC?e%rq#-qY%
zO-!9Fk%+!_^7al@eoXcWPHBmJ3n?(^=IBP`tUjU1=Tm=KP{%V_FPmJ;&`sI*2AwGx
zVFGY&bX*4z3^0O*+#G`DJO1l|AQ|Bb8NRK0BP~`un|8QzK+>MHmAcS3Z3udpTD2X4
z6qh1vdA=YPWXsMIUA^F)4EY5RGLR71@_2YJ&>wh~ULfhvPh1R-9{ZY^)$2X;tiV`)
z*V1NZ0SSd^bVkiDu`L4?pRptFLddgVE@XLInH)a{J`pj>=t$K#QQfac+lIR1z?8Ps
zrF37jlQYS{NXo89L2UAnJ_9tYk><0PWlHj-NP5EV?TA(CA#|ERrK6u2oeRrM$4qlL
zF%uN)Rd)5?J*Q2lTYjot^qFnRxGfJ4E#nIzXfttSCIl#+Wb((q&VWBRTIWp^rL6a?
ziga*~zZLf%(j_#b8c^7pZLL3l?U)33Y-UGQUd3J~S0hLKsMN|dYri@f+=6mpf@pMF
z;iz)-Sqyj-$Z$gUDwH}<i!HEE!j|y8Fza%RhBu+qRg);6*4}>KZKsMRDHHIYkXA)Y
zPdOTD0=aC_syO`dj$!G#@4zWJ)Lu7*eqB1jTu(eHgMZ&MkPqfGM!~rabDLige%0xb
zC5<mexs<6H;ydOLCl)0y`NQLWuZ(V1K_s0&@w_$9$37b{n)cu^_XGVOPZH)r&@|-N
zNiz95Nq-`${5K8i%V_y`L?|OAN%%T;l#N?zW1G&<ZD6!|ieHKT!V#c}xSg>fL<DGW
z_W_f}@n*BXI3_xp9y1bNkEWVo0>d6t!aQYY^ns!~xADV}fQ(Gjaz+#gLID+eL&s*6
zRjY63Qt|u4OddFdIj$mqmDmUeI}u|0f};5r5f<W9Qc^Jd1RZXcpGy&s;U!>IpvS4V
zQ_2WouiJN(Rlrl<;BQGHU!a%e&_@}sy@Nh0#idZe-nu6YrpOg}ku=>bnKInitLq{i
zW`a1$9x6%P3%#ENPuwDk2c&3%wiyG)z3%b7-i%A2@Ww;2;J%M0uy7u1di<?3iVjDY
z9P2U4FH4Ao0z@cpN<#dE>F4L&$))DnE=AD;W>m?r0vH_mg9Io2;8-lmXN?86^;Wq!
z5$?4%d;AJ+hDg@-iDS<;hX;Y-9duPJQb^?ey@V6=p4zVm-bLPqpKhu#KIT{A2*p9O
zC#gYQTmU#rfNs)te#)n<To&F3Q)kMv+MS!yA>~>~U80^B1~7Vl2H119(lC&o0Z@_O
zWm{_N9xfne>Zz3WQP8JK;dWp&;WF<2ffp5BSldzNcXg-zgtF(C{GA&sV{6mFiE?e_
z9pMbx@=q;eW5n@Dvv-1ce+$oKmvRb;2fv0y6JvT$PU&`GQ!=g4&B5$#SZnTDcx@f?
z#`<wwQQTP`j`=3FgylTg{Ds0>91q66{b>1kOL7|n`vIB^$8%EU#c&BBd){D&#C`JW
z>csM3=K`e#<IhC0(dPj=7b}NEa8jZo=l%uOwDK5Ow<+E9@zTxadV!x-a-EfrT;RzK
zU6wuL1KI9P*<!J>cn`HZ#OSBRs!i!%3rA%2y97IUvpQ~hyQyLNEgCH%hWEiID-mBF
zxroTyuVpcKHj;_fj#GcWZeRHkAqI#^-Skz<=!!(pLmGM}+9I?rlyO?2jy~j1Wbz$N
z<k=~P&UVo8tmsz$SRyIEhx;B(NJA;mdWsydW^<srfIXFOm{I3mq^uae3TZ^ZKNXAF
z0y}2zu*D{HR@6V-WC^qd4L9!4Vv|`eem&l6hveiuWr7DW{({J2`Q0F;cUG1~mCUL=
zY%aOCFzD=2S<Sle3x?hWbC7Z)g@3N;^$^P#qTYOVY;0Vi?Len4-|03Z!`+crpgD5s
z6e#^g$?1ymJ8MGA!*AANyT#=NYj(~=%aK?<4JV8Tjeu}LO7)~Flx~Z8<C2m0#eF*K
z4LsVc>J)^Sm74vvp?U5Hlkx|2Sx}a>3Px*Eo%tn`%z7#J)+hH;)P_nI$jmMG*a+)~
z5^#?e=OFT~xW0R59s>Oo*TDzC)vL_Br?p9U7d2>wk!&aa$_oGZx!YT`hgBBn;CR|b
z+Gov|DCzy4&zRYN1~t`G=Air?x$!5|Z&k@ZIuifh;rWZZ@&AFlQMmeAV=|hr6~5lf
z>9QdgTEIhtWzd&5G}jp%>OP8fsdb&EUHoITXvatmdW90{c{*CPhSw36DKdj?bSl3K
zFuiR`J<#?CW=&qK8;Ng^UBmolKr7O+)p;ehHexLTXJ=~^wTXsmda$~P)pNV5y_$;t
zD)}kUQmHbed;MMid~+PNX62Ae1<FzPT56G6*Q`OX(bfQVQ-<jHEt)0$rKfItuj)x)
z-lkBH=Xm9LBewMMS+wMos6N4-vXA}QaPSC)(XPjKh?5R(78&vtW2Ut%Vg2c5k{qHC
z2`BD;ZsoKx>GP(7<6Ft7X?3F=&vQj(BSTQb;Q_g}LIz7d%8OTn=}?aRvc#-20l7oG
zo%k4s0$;y_0@K%$_BrK?5N@*G<H+D(rqdCNehxe{9~+I|dNq47VxYD6ZbE?Mvupd(
zJQ_Rm^Jb<I`9Qia@a>6RDOANBj^QEKBH(h_EivHO+J&<S)D$LnTOGcz>Pu^(`q-_t
z>*jpt`SCqUMIx*By7rWe#lou0xEdY3_n{sOX@t(=s3B&-Y2&%Zr}Gy#q@6y#iXwhN
zBAEHiTJ4<Oj#J^aWG^S#z8}KkNQ;Y~y_K#Vk!_3!%iM&NWDPOpY*jrfKhc)*^SH<%
z#3tP9TU5u&;k|lC)!=C~ASIOUuc@^9`Q_#^8M&;q9~kkEqgWGjin=!{TiUEC<xd!Q
zh9yj{)bTmmLVGN5aG3e(@XCx9s-en$x?~de_W1hj!V=_E0u6+6$)h>SZ@z_<p4`;c
z7X^d*XYx%_w}}MCg8mK$-7=5Nio>FU9S}2}(a>l~MF;2Dh;Pq*p1kz?rk|hFA3*>3
z!=&@5KltoFEqm&J{Z{&0WbjWx0bA<w_yB|*yo2~a_#t$rVJ9{T{GknfS1oDB3=*pG
z6T*!1G@VXWGCgXHdcK<y+A5*$uM32l2`a$H65xV80|5m>d?R_=h)ROmigyZN$T%#B
z<z~x?tiz7o5MpA7>L1)2pcsZ!)f+(7_?k3_g~&=SScXY%_lE;(0PNGnr%{0d_QlwE
zs}M&%>|o3zZYbG=*0RqII&y9E6yMXG<t5P1^h@xNGTzEs&<>O*v$*3}GUo*Ra_;kj
zC>B{y*VL&O5kiRD88*?bnxI^DFFQ*l1=ZOh{3GCetG(X=+3hP3*D86mxAon^4R*6$
zKAwsyp??Ts&K>mq9wse;FZEc?lc$(a%kj)`w{ty#%46xt4Lg_sXuyICV_?br-Vt>B
z+=mpUic$5k5wTl>#vajOIQ^SHEmJeCr)--`Wj9FlC09Bt&YpT8@H?)?TGIaM_9JMy
zAK<rUril&^V&a7r7$r?dxO%yr#j)oV`b)NxN!uJZTPyg4xge(p%teE+jgO^6lYC;(
z`iF(i2bnklkYsL1FRjF!xoWL^64mEU54$<C&acd+TUEQy8O{W=innXciiM-s`EN$Z
zW<TjEFvM_(NAi4H=O4D0H@{CFmn)#2l}E{4L)<u6lRLjNA5~3kAB8*v|KkUxp|73r
z_d>v*Ks^1`1^EAI7oZc)%IjC;&#v>TrD6S+hoPT$9c^%pkH_U29eVdKE17%)n$J3I
z>2@cTFGrlM_HDya$eM&<*%;B_^5?v7((3e2rWt2};ZsXzZLL-@^-m|6vFNQEQ|ikm
zYntKkX&&3mZg++2J<obE3kC-BPXo8VIDY1}c$#z<xstty>1^YG2(}Nt9bfAv=VT2L
zJpVpPEf=_yh;s%AGg~FfKZP4;yTT0-YcmwVZ!iW2+bKX}bUg>WwCbDgIL9yVG#M~m
z-m9~kZQbN4uQN&3w!Q_~h_+lmr`=i)%$Ky@Dj#BBuS2P*7gH%NcLBTC7paJDfpkHK
zBh}w^v$#4V5k;0YHVeg7d%pM(H)2PGP}B^TXG$uZRruvIr+J)!te7YO%42Xrji-zc
zy34okhnHq<X-{Zg&mz3N7b!_DFg&L%tO<U@kWuANH*%t4o9yNm>2l$p`;HcLc!t=1
zww1x?y%*L_J_E|*_=`pHAP{5Yv}ygDme<>Nu?o-|DQG2OC~D~5-!<KUNe65WDzOP;
z(@_yh4*XR!l^l|iNa~)Opi;B5OvvjqXBBZ{+>qc<ncPPS*ZvTvu|~hIwN|~_pFz6c
zO`#SuMs%IXt_<=doX$G7dWPS#oJ1jx1gzSa>!=!|)o<}JnU31ii+~1SeuS^EgJWS^
z#Ou%3qOq3I@XkNdL($4rndj3pyVO;`enW%3qGO6EAVaP=xt*l)E}tevl2BsXzQIno
zvO#1))0c7Z`*Dj;LxwSQovl*9iN4dtZd=R8gAL_J<>9h0$AsvkgwEIeqlC-;<V<BR
z2lMElKPIJN%8~Wbo{J|Un%+*-jLy0(NgifTYhm@Hj*ACAU^o3?=c6X3wbU#R>9N6C
z39Np}Ip)kMsVRn8NHVVpyZbpLAxBohu4-U><+iVIbYQ#Z)vKzlUEd0(2fo@*pVI1=
z#W6c%qi!fD3zEXasc?0Rgw6~Te&pEt@5No~EB&pdwz2iij`0N}?=u~F*C(@4!?`kh
z)MY90YaIzkukg7-Pg_|@Pip`k1DvLvB{q;aPo5-|Eo-*Y4lI-`RpiSz;XDRb*{zdr
z4VNKndu!>6q4aFa_DHO-T}gHg3w|Nb`A)58pdFo(Y_>XBn%fS0-lgSqV7peT>BL#@
zAJf{6>qq*;Xdj<Ok8J;VhwB%sQscf92i-5*jpa}LVgK9j{(q~Nl_a^8_lFMp7QW)~
z0#TA(cPtD9*ee}C&>I~gVogK=_Iw{DGvz2No2;C~X|u_l<oU`<8_In4MoPTYN0sas
zve{#k5%sMVr4FW_9ttDaS0CDc${($(6Njl61qsU-d1s8t34ou9#Mccfk5$VY2f>pB
z{$U0+#6+#!MYp0#9PTlU;u?bkVT}78nmY%vIhGR~0!x;z-h&7$Maaoo>x*D5x%w$C
z!%?KGF!X@nfWo|rr`HIib`_2KguM3wi^fnlk~u=61Q%!;idlD>I~-j4An#T?f=~5I
zgDygMH$9j9EQ^S7_7X#MU(lwk(56h%M*tJ7Sy1YUBlgZaw6~7PBq47NtdsCq**G*J
zKnMY}3tZDL_hUPgjh_iqD$#0>ywS%ZrKvv?d~#t&XnroSGrC7LvbIC}{Eg&b;fKv-
ze06tr=}<%b{^EzT=SD=w^GU(5TA9j|!eI=vH5?>3OwhxwJVe$4okqpIQ0L|t?6Ho^
z<5!l8$Z^bVA}i;qtnMNeXxcr!6K<o@J8K8Mq&c9xWNKQ=EqN8Dqen)PTzD6g)x?C@
z=Rp2l?&jqHp1#Fpm~J)1BFZ_WC?&e^r|U<iB3^r|eIm}ybFWfLrY!|r81Pwe2^RaW
zw%jjp?$wT+y+aAOem~!N=sKlZiN4v4-I@6leccLx>#QBG><fcNS<<43f_A#;H!wA&
zJf{)tneX?4$JWVfUhCFh|8GI5J!RP&QNbDbA$?Wk$_9~FujG8sv1u|b3D|9lsB4Y*
z1cHzIL&rRPk8i`=z$pFK-zK_%>blry;v~X+nsPW?z<btbm?N=e-JNTc0%feM4(nu*
zp%C@jfGpX?HUc`qyHz0S%|fNo1jIaX<xnv0gQgtWt#2ooG!3E4Kf+o*dfMTIfA^?E
z=S#4dMaEn(btKDbLT)J;a}wJKq&|aMM|sXhZg0SNs?(Q>SuBe3h8@hp*Ol{d#+ztJ
zPD!EZICr|Ee?xyO3MKfZ?8{EMVE9}mT~KBV65F<)LN=%UkenJi`E#_~B2WCe{~ZHd
z-DY8uX+^TjSip(fCJk7Vj#q*sAlCEdNmbQYP|S>tgZn#9DUhkDw~`booCOMl|LxFK
zM-($C2u|i^H0eb2Ot*}b#V=vyTc=KTdc8_@P+J1pHOW*9q`fWRBA}YgDipwo>H%r=
zf%OT9R*Qv=@xs(du(Qe5@?9%ur1M{DM@r2eA)}V?7Yg@B3VT}knnY<~NYznuxv<zt
z7EgQ3DCJ((aZJ580X8oV#N%l@cNpkPSP7xgr>yyDh35452+i*2`=gB0)28Co<QWG}
z`l^%FQNAGct+F*5N!cAj#f^hTQqJ|MO$O!fI0NsbR|xCN0ZoGngrU{GM`mLO&lfv*
zyJS@NXe3FU*2>y`o4zKYMd|7Lr-CiYvcf%0X5Y*4tf_K;qEm?2GQ<ZAHn8*^4dF~(
zq;$8dqiO4^*eCKt)A|!j<H7G)@|pOaVy<%><dL-IR}!vfUz6JH*X*_{rkF2kEU*fU
zbU$9MAGPsC-+a>Vga70GQ+7v<{rkk$pLy7b%lr{-{}bSv{}Xn$7XI4V`ro#*^^k<J
z_3sdn{-Y!DCqAVAwFD&KGtEgx=2ew&Xw1{#j-=n*6YtYTvDspfA__$O7)YWC(SdHN
zy9jZN&Ez?CKc?~hx>dyh<7t$J$@Yv=4;Cv|zdJZ+@(@b!y$*L4zW+r)`tKniX#k+N
z|J|DY^FGkO6-NHcpZ?3A{>z{K%b)&#@u#6a_IZGDG)FH5-|7GH*An-kH2%MFm;UAw
zeaXQ8jz9g^UHWghOWMSyQFB&QzAhgvH?q}Pb4z`KD>Uf!`5ic~%E4Y9KEmX;vCCfr
zX=}fjbY`*|nI?OA<Su7^Z-CB#ezWnJa$f2f|30y{j#aK>qe3T*PUDI5lXsH-P<eMN
zh8Xs|zR{%4Ri>&Nuv|1lM>1)A)V**M$YR|=yUo34{Nkp6>~=iwTl1;ft}w;mv9U|a
ze8isfS~`5Ynf2a6Y2_h<&XE(=#3HnJ(~-iaO-Rz!IM97;b``L~Xl-O3tAxDXghP!1
zkoi<wqUy<`{S}?{1=`xJ!f_=`wN3uOk4@yw&GH<W4C73)!WkB_05UDnHOQ$SL`QE<
zJ;gwr55=8La;!p^#UC2gCdEXtz*!N|96&I@v8!@&2wE>WPrCxeL@MMtmn)2P*fDH6
zAq&3odJ~rFLLYR2=)r0gwz*?micJ(by=joFy7%-9eYTS&=0M2)eZk5jA)WpV@QpnF
z6QFOnKVQG!R8Fd1=$WSjMs+_GF+cQ-C`hL;YIzN>>o58Y?|bJ#ngwtn&s<L8jPHIz
zz$m96(PTn(xE^d6Y>NSxUD6a)zsruvApc+Nz4LeF@wTQLTNPUs+qP}nS+SjpZQHhO
z+eyVn#da#_oYSX&=-v19K7Gd><K8>Q{v+1<%<p{X`#hk?zuip(*cHRS1Zml!&*ZJi
zRTRk*c8A{DepG6L)ouikje28sDycS^vM6LnjhAauJJkE|0a#9SWN4oEn(Rt>tPhPZ
z5Q)QT(z9m9`zar12**E80=>1_=gk(SuMBJo_3+I;m5rQIB{w4&QQMmAuDnSy-uij3
zXGhfB$J{4Z!iVeBYGzpU++7arf;+LmHaaeF)jRml`@M)}IwE_NN*rk<l-eiYNd=yp
z^tnbu8<Xg1id9eOZhRc{(8Q5diTeMPP)ANr-XCZOJnPV@-PifRvGLq-W)~altsO_c
zESY7j{V*?$ecRnv4D2vP#j_82Ra6so-{GAtK`cr-pQ#q^J8G9G8YwHT>wa@k#jv0(
zoF<%b)t%>Wp9LCCx%;c|1^Yk$F9jXm7_a_^W{BpWZ?PnmMdX#g^Xq>)eShl?I~ur<
zHt(ruL<EOSK@3@@?qdW61%AZcp3)z0Hom5oFQwL8)xfBsI%H}?vE+nmGGd5^87My2
z2@p3mU}-?1iP{fw+u3`pT1o-s-#ZMBs)q|l0Bo;ZGJlQk&z>C!`*t)iIDn(;<YRRj
z%!9`+fb;e@u$$v_8Gg$SvEUe}p__n+Mc`|MAUi{gZhFd_SJGUssyctEH*9|!4$o>E
zE}BVnCTdvZ4+%BR7{D&8IL6{RjI=OKL0jFnG?85(P{`yhfCWgbCu#&V>uw6cW;KAE
z=76<9Ham>ZYdhd=hGxOhH_~%|s#+NrXEFV{)&`3L@drP4l2H=%zuR<8zDfv&x5YTE
zc!vGyJ9<rsGF!Xfe0w~{-s&0;`P&BZlRB1sB{}KBXlcdX+Vp8vB=ks&MF5ASa~-qG
zO#N<?K1r}H)rq+mE)+Kr@)yPBTl#DFj{elO1r6Y@QBW<4+TWHc=jp?YD=+18B{ojF
zy|<@I;DX+mjr>G?jOg15X<J{!KVDr%${h?lFLY;Ifw3Vm^NTa2Z&a?C6hZw=+D)HY
z9#jD6e$PbDt)Vub=go5$MT46)nCln&;7ZwQl;)#i3~6~(I%T~cx`g%4F<x~9S&PAQ
zogcKXCAIPV_+*sT%dA=erm^c~`081CVp-X%sIyU0n-pV&CklwSkId!>;y94mz(7_M
zQNx+e$(KY3Fa<*Vq=;%0Mb_A;(v_$AR8Jxo$J@_Cv;H?X<<59BV*B~p&c1o!x}h#r
zugJpyB=inM!E@py#8XLHWyP-{@)C)id3NsnqZa>f-=QB+r{xFzID#}4!i)>9M(`JM
zC`sL<j%CRMH25U2KDa4$hzvy=U@KaMJ_Ht^3xxBup?@>#&pq;P==8$_wio!(S2Z5i
zQgz6cH`0j&smIg;;O|JKo2yvYCK(qS;mo%s)IF5Lq}^HR7US3QZ@$BHojY;jly|Kk
z2TaKsTrijN9jyk6Wo?`aBk}+(@hv5j=5YW=F@5KFju$M5))4%QFY}E~{u}&^b=yf-
zYt!YOFB@p`ca>mgF8NWpV+Qqo8j8W)z+v||hn^*8Rj_W!WkRc%a1j)l%1nAW|E~39
z+j)hI&rEo7mE5#BrHB<JJozlhciaz)O^sP{UlcU|FUu^d2Loppn@>FG)m+WD(@0}#
z@o!43!&l3&b_Z$m-ga`zeSCn$Z*Nq#3@E<CZ8V%13=`NYOI)LK?5EVR9Tr*g)2Y}@
zxXEg;ose`aa`Qp~^y<e~7c~gz^=j!hT<v;qUsmZs=MT=V`u+xdR(<>~j)y<3*(Q9Z
z3^BMGQz5l-32X=UzuGK34q=O7!vs;5r$eVAUg|<Vx2%BDqrHtbdaU_v8koRKC3v46
ze9nzy_!6AQS6V*mA{c`g#|f9;v%$5QmLvD&mj%n)oM_z!MO#pTHGo>8g6fF-`8$sR
zE$(oAG^m~Y))Skpgal6?7lIw2aJTf5%`{Ph)VJ@1z>_F@QL1np-`t-W9KX4SmmP-j
z<!fn(pdZN1VzZJJ*7z~ctQIJ5RBgZEUweAF;M#Xa-R#6L$ppG?8<`cc;<?d&N-KpT
zP;!s%X3$6m12?OmlZZ=N^b2{hBEEl(-?^2<!ah-S{b>du=sA+-VYh-$;tp8^jqdfk
zt;@PlPrGk6)Z1^~oOGl<l$2-#q)S*^x`jHWqN3W@h80G$kT$iMF}pVT53^+WrEjay
z8=po@5RD%`WwImd*3&ckozx!YMq>4V7qN~ku1aEjF@vUePN|GAq#4Tm+>Ed4cKgfB
zm3T!c&idfnV-wYN&hEE*@HS5!COJ#p^~mmT@2+P3Uc57jXzPDyR42z%<&o><$NbVi
z#gqIk<$coLN-5jvdyxYosoUsg=q%@9wu9n?&l;dL7jMRI`2gn>>Dp(Sr7ydoK6$Q3
zy11U<?OULGJ#ex3-e8(uUzk988prUXRQ61273L@MKdN%eEPAFF|Ks)eFQ{_W|7~^i
zUwAu`$2%&xkb;l9B0#b0aY{fzLi9SY@<0L_&{)P6^=Ep_9Yd;?QdRD20~9N!yF&Yf
zpi<CkD}wqee)UHH=BPPupvo&W%%nGwh*z~)Lgsp@>=3Q^JxPnY)O24fF++)!MNZc0
z9M|AwF2p!s$A`>1>g&^)4~8bO@UZ|cm~aTYETQ;>0cQR5J_E<9r4)|UpK;ZJlWbX|
z*A>AGX%Kf@m?P!-{pCK(H4WI#v(ce#$1H^YJs5n6Qs(yFP4e=oY`cSMQi{NF`{{I8
zbK!fWkx2F-z_Gb~EB&9HfF03HT$#3;V?PUCaURxczQV`SrqmABJS8Zeq$=u!s;LvM
z?!~`gdqD_+(HSni8(e8@N753j$8>vhoFe@ggSKu%pvKA56!_VX&G!Ka>**kfvXi~0
znH+*yEaUIA4Pn{-FFr7?n(DONhh;u4&2+#&|CV4lxUdCs`)e&Me17VJZ!B%pJ1T_O
z@Z?K-ud6D^X4Ud=2ZZt6Uj7``BgvFXHQmU4Vn#LrcJvahY1qK+_q3Y}RV&IJlihDu
zhSVXO_!du0{1!;_gRbe)?pMtPPgO@h_vvl6UBih$(3vFN<QYQf>-0@;m7AyFrpcBY
z`wC0V+l?uKnPHtBHenmx%DddpEj#<A%68&IaP6r55k;DM%!IxBan_iaZPxG9^^~-a
zCI%ITk5Msk1Zyf$4+McGm{-CFKQn}{*BBL`p)ZblS1IltYka*UNlWNJgfLF8E5P?d
zgZZ$zR1#4Tgqk}b4-uLZG1zE1*zC(BLJKX{nFfss&z#{i{0E^y{@N$bA$fDsa3))1
zH&us~F#g|1&1*hU(0UBN_=LO36vo{+Z;ZJ0ap?Z_5dl5FH?%LLHo%#FwEC%q5HrKq
zEET+<mF1LO`-n1)NRD|tG<L8LV8I>c{^h;oO^lPwby_aT3--4(9GTOz9bEWQBYt<V
zOsrOgsY||_O~woVuu=ed{28V|AnV+t$wpzw+IMb1dF7+dCJmh?w+>g(%gYh`@??d3
z6=c$wMDp<#s3c)$;NbSRYD0|Q9{ST0j04Ku>*g3&6&)G<2am!q#7WhONbX5I;c-S9
zuc(!ewr;WD@O-`+70S#s61k175xD;4il$|>vJvzwg`@l;XxUrI__k8Zww*|&gP5js
zD}lUD3LK^c?G<x<$&PeL)PdHYTEfWR*S86`Vg{YGZa9Fn#J@h)&kcJn^MqU-Xqd4B
z6h}i~4<I5fzO^03??vc3z)rP6^v51X>>fxl?A=cnhP86GD;zD|^{y|XJ(bR#l0&I%
zYn{6G$CZm3*bRDE5xPeq_55E^ce-nEzjZleHFa`JFI&F+jnrxSM$CV0GLp~^&KQH5
z&sIkax~=PL(ZZAEbr+9n5~rqM4v|FLxAE`XDEJHwvbm!)ZVcX`=8C+IQ9|JRbyuK>
zxx8RJGw<OW0om)&dcP!e%Jd_pzS4+w070zT#hrRY`Rj=T=KS3j2+herz3{+&d(DCJ
zkMs4Jv9_;e5rQb^Sr~VK&|5jXhzgMtjXje`#p_r6hIT)n@4hW{{kQ<}p}<%bnB(0N
z?2b<oqxvH(jzeW1V*xEauQOoU<<*~)R^&Hs<61uC?BT9%UAG)M_7^axC6tUIo(JrA
z2&cb8XFArxT<F?e_NtI6yS$Qk-c6>rkv+mMYTh*MjSI_J()DYD6?-dQ>N_-(k2Wj8
zs=dT9I=ip2M=Kwuw|3u=%qeBW>QeafA!4&#!wFm*s{hWCs;dv&*w5N?@f}?7$UTQV
zx1K?}QbH+C-ODrg?n-kNePZ0VW2f5GvphU5@2qok0YLY}`$erAKP|T+tCRIA&#oV(
z*=#&3@nfHdjVcM~S_L{(gQM`{PkS-zj~G12F-=D2>zobuF5f4t)^IoYD(88o*E%F-
ze>_bE9%8O1+C1T{+`8(Kf9of(Rwt?)f_1o@GcBKgmQC&my!?anz(@HI@IRt+hJXIi
z@qb1${a0%KPf~N#(p!{`-sVZ|{h4p;xIOWig_Qp2F7?Rjc8#k~!rfV2tJ}Ex?(EWm
zmZYPVFL%$?@V2*$k_n9}wKwIxI5vA|5NL>y*DVFutR)8RvL~_r^$~<~ZKoG9E$NSr
zqb@Uf1#eZ&XBl8Xx2%5XmD)E|A68|vUv<eGP{Si_6S8ekTAWCH3zym07~gwW=0oA}
zaTl7p$!&shIoK@LDZD5>swBhnHA9K0r^_jY@ak<?F)7D^8af2*Dy#yJyS_Cibwv1b
z!_m&U1j=ZX=PGiAN~2QWbi(1v`i`+?4a9TWmP`H%llHgNIdgf9Y!fCZ4b^<dVf0DP
z8<8{n<RzbN>o@r_0Ii1{cOwEcEe}k9nnLve+Qyxt?+HFdjtwb`eKC2JiI7Ox*=Xp9
zSK#4wh$j$L(Dw6>KJeNOPKreFP_On}R%f8W6##oAnw*zggG#8hh0STL6gn8HP8XOB
zx9Cc62h@N%XpLov43>zb2Y~`6>TSTB3%B+4PdaTwu<F;4&X>V<Xu-p7Rj^`l2Fr-}
zbGqJSX?2ht6?1kxd;ZirNUIp1h1iWPL{C+!N)hXMVeXLQDdd_e0p2)sb+I`aEIqe=
zcVrr@kFp5TI+Z|Hl4XPU3Yn5B2gsQ2opj<Uo!6v{h`G$sZ`S!D?|q-Bz^Ycu<MfMS
zedc_w9QJ8{+Ejw#EI|oAkM~OIMxvsoOxzs&7!_a^7JjM{<WN=^%>Gy7mu;~O5Re!-
zyU_%*QGfw?3F~@6#VeP77DnB26$nRM%4P8sYxwOourlzfoO*=c@XCHkq|ucb*jDqI
z?Vkl1F;G|YE!A5#?r>MFDkrMVZei0FNVoDgr*emySlS=cBH=3|r*k3E6RhtJ*b%?^
zTF0;qU;EiV+JBf$+j~YuT188WjJjkhPAfI1B0}kOyE>X;0RT-!$tW{-T=mq)D`Elx
znp@-=)f2ON1<Kk7Ok|yFQycZaePZ@Mk=>zeFZ#8O%aMlE`|g{L?!2Gv5gkyHJz*21
z^jj-x1nl~lMHZ)J?;i6vD@qG?H=1%(5!sU!reINja$t@N9;|2V-5bZ4KT8{I(?r(L
zQ*%lYjH36)lf{NQu;nrLJ;GgOIVvJ=%`YQe&b}mYIBGa-mrJu+Ra@fZo9zB|ySmpU
z6o37~xci6eO_6G&hX139`8zfL|Ifs1q5mE<TPde_sP#dl4Vh}g5xb)bYuE?*uZj6z
z6Z5|&=6_Ah|C*TpZ%)kKv5?ji-;0*_ZwtVGVNI_t{omL0|D4yCJlW95f#CPtC4~;`
zNTfOS-`Uf)&=+mN(g;LBV4(6lS?{{ai@YlSl#*ftZzMmWe$xVo7)-Iu+|*E4fY6^Y
zXyRc09X=gzVN!4043~+iPx#P5kW#Am9<YgO63z#*QE$Rp6<iWHoW5j0@(rH`Ev$a&
zs!n2@Z=q2nB;KtNY~=?IF_r+{SE26gN#qDV-wzmFJe9l3zFU_gv=xWS{x|w`{=SQ)
zZ&~x+{6+hvCoh3+2rU%QZVHZ8mkL*5SJy|Z8#rSp#3alCdVxavE%Fb;mH@DVph(<0
zX?U7{qfd9KugBjaDd<yv)2F>xO4KIp1iHMh?6P{-aja)W`8*)+GF%gwDv-qnAL9%W
zOrFugvs_nvg`z|Zx=Mu?QVccr=9Aw5&nLecDoSSQhBX(BpS}|>+KVk2`R52uC;rU3
zO|lw_dFozm$lRx%c^nZ>NVeBPc7Ji(Kvz8vay6eNonD}OgR`2=mvHp*WB6UVKYvxZ
zjye)sbwA1M^fFe+nWeb55br^F<umJ@qG-ocj+v48YPlMhL$gmhy`6x`zqy!BnX#!-
zwK9dLmy!#>OsX9d`*e{)!~*i#`;q6e^EHNZTQ5J7V~%cH`K;`;H=P1_!sBa59sEjA
ze(C+47ta$;kFSukEZ0g$L+q71y)C7V2v`88D58LM&eO<i#9RR(28}RHSG?)&x?4ve
zBJo=>X<gLGvPO*{EaD@y<eFe+FffEf3c_#0p%TyHR@N*7OUeKQc^2SR-Y|LIlKwTY
zA=gsxBtbBcx^1pUn%orOxx-wG<KR7Dc~hkTuza>_vWA!l!%qAxNiCP<nYzG&8lwIb
zcu4*+@*%7-7&ezP?#ov}WHuHPN(`b555<=tErjQQJ0N!X>-IQa<z~<{nIRM(J8a4~
z8a*!47c0BmK)Fg(SgW6ZuhM;pNq;U>(NWU4)qT%Lu<h-+pB4aGH~f7ntZo;8PR|q^
zp~B1anw%k_u?J-wp^%rlI^wiNigD{#utFw+!nvcalsBT~<0?O(Aq-!5=`R(Xbea42
zgld+bK?rTdry=#KhYh26(%wL8f_h-0TR>C|M*{iL*0<-<q)4}vM^a9z@iOoLf6MU?
zLa8!9bJMVwp3MO#DaGh+-&kvYtK9Ay<5ZCkJ33BjcSrH~B7m$=Zy2FyjN3PeLag*s
z6a)V1Shww$A<kULo;W3b?3PtVU=1$z8s@+^d%F9Y_;(hV(n)!v(Mh@HF~R8if3T--
zVYcg&z%4URdbTTU9FnToAA_96{z~d3^HxTByY071rcKrkxSXfP*@^$Mp(-3~v!L4G
zi&j;LD;BnJi8oX$3gtiKe8*Dw_2Ko9HwNs#qhc;4__d+YzBBXY8?EYpnCi9#K6aZY
zgrv2wVf783roz-S??VB%YS^^eOt3;@g8Tgqp58J%-9%Xa22U?u-LkLW)32);BZhlr
z6;R_U-G<7ujm&7lME>=3gaTpJ5F*(@iY~T<2K3^8au7oJht?u6V<TgNss<{l@Ttm$
z+nS;I?TPVju$@1?(P)6-ej<3R@dOqpm3K`6mCVgCY(S+7ThfD?WAO;=_2_EU9(L1u
ztK6nZIx2(TqTpVnGHBVx9dJ*z>@u8oUn@epYe=P$TbC198>dKb65(Ym(lsOtmq7~-
zTN~2rE&b7exApSBw^u~gXOXHPt2}?tIAZa-F*H)&1|*#qAGXEbVeQb)n#*f=TRwxG
z*!zk1D8<#E6`G$+MJQhn&-~(k9h#lBP1RSIucK->PJFQ(usJo@bboNVL6+{(cv`O1
zx9q9qS3=zwZKn)SDBO=eAzQX)Z|1|qb$kD5(&#kG&iiLzQtx_ZK-v{dC0O=LtX+oO
zlw~CO;47)}$^d#U%NRN3s%OVef@Lvw`8fY?%n@09JI+vyCjV471>7!EQNnfAOM{mP
z^%wu<KM-0d$Wq4sM@j6za0aLT@8-6DRmJ`vsEUbU()@o;8}qNK*uSb`|Eh}pzgHDA
zz-AQu^M4H6{--xK-xh#`Z!N39Ja6v+2o6>%G#E02K^mA_KtNtz7}KwhM$g}>cD|KY
z`9Xct4}N{Da0)WYs)ity8?b6)0aa;0!etfK={}uqCVe&JkWj+N8X95I$BEKb@h2hG
zVb;3Kh8NNrmlmLA>v`c~26xl$2kGPCMqFq=oGIGY7;wEA;!#Y19MCI7nJY3%y0l(p
zyY*#@+l7<-kBi^E-t54jeiAe}7O_>#E#?eH^3M-U=Y#pdHw9+^USZ5ELB=CjN2K3i
zz<pgV)JH$=`bO9Wwh<(ISg``)hJhr&K+KF*vJe#!?BmR+_;@F&7aqf&2NQuN2+x%f
z&SBf<c1g&OxQi#Ds%O)hgnD7g)GdzBtL4T3(0?<#yk|WsXT0=PWIp{qm<zeX56TZq
zxgJ!9En@_?#+m7lG9QRSa~VEgH~%`q#coZxvH2FiYOk7A*kM!fVWvMybdzJ;D`FoN
zuFAzAxMHI$n~`6#&h}Rx3A74=A_^c+DUyu=kJwh_Myh>G39;hho5{3GD*krX<1VI~
z(b{mUpxAZYa(ieVtU1@fxMf0ZUo4;DReXCdD-{0pywxVK3u_$v7S`+5lLxw?f`!1C
z!l8xQHF+fhEZh|J_7E+te5IUg-wuu0(#5F3H~&E>fm^Q|<o4Y-^dbWSqWDju6JtAD
zCuc)jXMJZ28&iE}QzvIS<NuuiZd%jVZe0TDBUhgBXla540cm~PLAD%KR3$=WQCXrW
z$1}M(4V;aM?Y1VfMD=aW&ebN$*9*FdGJ;Ug%xtIY7k3V8_A$IWLh1I|jQM@ApWgGy
z5mC<vbSf+if!Y#YtoTjrwXU*upCloA&g_Q$K8HOK9*2&C+y}k$cf8899JaP}<P77_
zUCb9If=T`k1IM`<1(#XP*4L{CB<%=ULr%D>GV%j<#Bc-`=Alwn9V895rB#PBs*NpJ
zn+%=G9hD5m2nC}noDd*0=j}o+ycgW0(l2ISI(UC;&pXoHHwsW537#eMH^6`UD-iUc
z4OPEi%bmTkvC$IBX@Awk>$?q|&85h78LYtt*tTH#G^n`*Q<jNo4|t<<;A%N`6x1<<
zZYfGRSd;Ubm%&t;Ja9B&ei$*7CbPe>F^Y<$ymu5v$Q-MOm?2Dqx1>AFZfuW)^~2nK
z7<_%XySw<9>*#939sr7ZT%kP>Z*{3Udb=`VN$J^Qa`F;<pHflN=km^;X8E;*o4@Fg
z6&FNAfw3IaKGfUTl^h=c;CWV~m5BYpoIO%x%9i(l7NDfTkaCnjI{k9IuNs^P5v4tV
z2&lZ(#j-^n*<=8YVi(*_euRq}!_MIq4kQnRi==(QpJmg2#q=@T?NHuf&-VzQ>Wj*&
zC}j|y=Q|o%v@ihaY1TWa(cDWJuDwCd;GB{b9%eU;(MFK{bjl<ff|H0dgNTH74btxM
zrUKasF0?<yFAK!cCVMF2`Pn?8UEE|Nw+ELYNqI0)g&oeAbo48jq1uOL5ayQvMe~+R
zW$ESw5SFUCmAc$L60r71w?vy>KQ>6qn^(e3ilj}ts?;DCa?N<9-cZ^V`<WLO?;jCD
z@nVRD)~04=NkBj!(D@6WrPi$uQ9SrzF^q^}@K3}lOOZc{N%K#vHl;}sFt}@OijfSY
zQd;4}`wa?dC~sDgMw7IU1_;a*6hDGpi(l|e;#Eb{DO~ALvbZ=*w{$DZEQ4~~<5i_l
znL0_CThmtYD9O0vu%}yUhRuMhU-<^p7zqM>h!D0hlyT^fb(2Co^~n_md-!DM>1uZ^
z?j}9<Q43{SNvPt(-WE-ygiFWIiqBM(Dl7?WRatc!VKCYCX?z+Cj<`_ig-h}&kk1PN
ztiwt=K0Xb4j}}x5XFsLTYNN|CN+Qa{E>(JBmG~nkg*vEE(PzcyjWbI0HTj#}sc3Ry
z2_-z0sYaIYvbVv8#vSlH%mJ#=J0fh7`73<#VDnL9OcZif*e3};1^XKjz*RfJX(nw~
z*z7kRU}7LSV-rRRS)tFRAYpxr-Ir)vq<HU^>WY0_xp;;e&*E`Wa|vJw*e(=>d)bEH
zJ%r>%u_aT_C{*>5@>CcPbNL1ZIDduKK#RYuTy_sVZ%3xq%DB&;yE?p_UA!-N`riHE
znhO+eQo<jfkDB(6LXAD-!G0d~Fp%niHc{gbg)cpIA*F)8p?_UYwevl=sZ_Vm^=ZHh
zX=Z94sYf`_K~$zB2+6hFruY~<VHP6zaB{_uwPuRyi3ckqA&nz7v~9EcXtxoYMZNu^
z&*j5F|FXYKhh7<V$PDmVJSeEP9k4b&f{><8I29<NtPMX1lK)_ycmnxBnc04?F;9pF
zza8-=@~JVnamjXu@`&D1_yk`v0367EW5|QAc|16O(;c7J?g9r1Nz<NRH&nzj%4Y|b
z)#uG1!O!rM7O!#0DXuwx3ai>PQ!)6ROT<Sv`kgCWr-uydVFmhubdHU`jA!y)h_oUX
zyHszw%1#Fkx`e^vbWkA1QJ^m4M3@rD_>ln4ytj&i(2$*5knqrL_sGz`!QjusUe}a`
zk;gWIYtm%am00A1{=piV4DW+Zla>^0x)Q8fs5SAt3LOAG1KCJ=bs=A>+*({kQ|5sz
zG;I5%MsHQ_D*2~%-5u_Df5}XNU>mrrNbzKRNesl_Wkodcb*>8GWKV@`4l$DGLa*!j
z$Z7RwMLVq(;Y02gZ)zf61j>_(1U%8<?jDnnO<G?qp2(4G{#zcAC+kORG4nZ_D2GSs
zsh@W)?Z+25k7i;Or!&fOiyw$jN2=DTBUAA_lf%D{TkXbXT7`T_;mUS$*$t)Tei_<L
zfo_y!1@56>%(__mY%7T`07~9DtzT|07O?fRa}Y)kmN=V?@Zm0}_n`}%{v^8R+;rH^
zxP9LjRz~i<VY=_U5d6=F$nM~Be%{bPKu0t{K!pFv!{*9tYiMKo4-cB&|7tY7)H-+C
zAN%oj)oYZpv;~aLw7RA;)3e2VOp3E&*kzhEQG%N)B>{RuBSsZ{II4TwTk0hy#O!In
zV0}kgp&Q4t)$8-jbEEjzuW4KqsYhhn8b9&C_PPy}z?Z1iNvcM8V&s766&bu&k(}&<
zBnR>byX4OEI6RZRqcCSQez_G0k`X*_D3hFS0z;}8iJE~or%1+2Lp(B@78%hO401!A
zJ`}7`f_((X?dE~W*=y3Ad1wgZEv7?&=!qAb6NSg!emju7p%T)l8A;j@8`6dVeh(ok
z4`DG7j-DQz*n!|v45TC&pl0-7ER&=j1ISn80`v8c1Mb~oVPR=0IWrIr$MZB{2A*U|
z;S#PBKD{>~KNrVK;wUb^1LZ3vDZi)B&c}R~ZxxmY&-@5>iHAtFU*>(tfL}&E7Bc?L
zY78&rg%J<g%w~*)_BOMZ;OiFetHAfV#-8;eL=YS0o#D1Hn&22-7$L)G3H@gYVaAx3
z;BpG?ae!!7{ZaQ2>T^lDq031lykI`r5QO-`XpDCX%W*(yc0p;-<;4a~cL2R)rJ;1y
zlZT*zjEDC&TjlRDe8vDYgE6a=5rxu)NEawlM-tmglVl-F!bbI|5s9ZMu55r<;f%0>
zdVK4&CrtVHIaDK|J@>E#vDL62m5Y%$7Av1zpnz}oA0x$b$z*iHzJuUtV{Eja@5N?C
zL+mf>y>CpoX&5W&rza-_gM0mV*0M)qe?UxYlMzc9+cC2fIQ?=HxM};I=gN)D<v80H
zX*y?F*5f=HV4aBET1;!D!#%SK`fw{N!nOk%8O3;qLZFhddj;dyC#cGrx?7W}s6?t2
zj31GT7icL|@oNLl>hkUnUu%rT>2}0{BK<mt0_dz~uRCo;I0eGV1*&XGo`>LpkT5Vo
zvNly)lP|$2@XTXDEHR})ENMQ-Kvbkvf$0u@YIt8P)v*ni(dWqiIP<zHfx`Lih-Dr6
zRPKLSjlWWGrIfU>+JiT@@#gcxtheRT38GAF#|N9@;DQZ9MESUObQJjxhh>fGh1a!@
zw}0iaS3Rq75KK|0(-ZEgZ&Qm_BlFD2wcorNwB4Py)?s5W9W#AkrUh$&ie3L9XOEDR
z2TnTxgx*dnqwd%l-4I0qo)8d^NFc#p+DBdBfXuj%ICiT1d|^<23X9)>yZjF0rK>;|
z0dJIHRziUc^z&pfnL@%W`b`~l!R!Vdj}Q{yW-=6ytA6k|GgSC~2_80>f%Y9MQ#AvP
zSZ>BCP{z<4RM6CA8n}Z%07;67yb})r;7RM0j8Hk=<7(|J_)KTh`S_;*#J(UicLsE~
zU#m-rhiY6B4`+DUN8T<_1wzpT4PnpZbhGYC0Zoiv)p#Up$NQ2A#F<H4rT$1OdurjV
zny<GZAYny!I>^Cpq%0F!tQ&6Obo{G3#Wv__;%MSrNl*qfN9G1@TqvtV0(`jwHh2nV
ziq_qw;y8pgn!=`GnF@u%sb7|s_Q#%d(Y|7*lOLlBy+29UBW`K>tMyoGU~OyQ{L7uE
z$ohk(NZgA*=-ja4$C@Ky5aTqiK8aYBR&Oa5Sukfjq|a%rIPdw}zN@{}_*i_4)hJt8
zJ)-hWR)s=-3qfR=wMI!UWMRLoFGT?(*(H{#PNkZQ4xCltK*!|g-zk<^pRW`x`QkfB
zX|zyLyKnpY?}^kRJL=CD(xOZi{)KL}&jhpMw^>@G9NLT>8VNKN(Su0@q(fp<PrnL6
z@U4(<6(pDu4CHIbJH+_g__|mChVPwy3+k2f;K6EE!Q=97g)b)$ZSNNgcCO`WMx{V}
z%_HD1v?vA^aR5Yz03(~5R8B6dq0{M-+`9$_KpsRw2i!hgTUBC{Vb3YP9AZS(kaAhR
zzE$Y;x$cwpdNuhMn&(`_hLDB!!Xk1f>{p9LXRrxUH~VwEnLp;F%Sy+PWt`n|tF&}j
z&U#jaX_`v~Dv7Rhl{c_eg=nAH0PF(BmRd9Fq}iOb16r%R16ubtjUF=e3s8>Z9LTb1
zQtwWQ>$hy-)kRKPtUzp;uULBdM~>%}{-s9m1G_mW(@nCV0#JP)n72tPlvy&0zV=wr
z(-~Bww%aP{+fQ+(x})!HT-`jR919ZwP^+}+=xH!8?kTQVn~<3+by|PpFl*Re7?xTX
zn$k+ZAdN{P1(U@ZUkRUnN@|v%YH>VP>JAdp<Eb9Y4f-@c+Oee?D&09l<nS$O42j3%
z6Sm&X?_^opJ9r!<KM%bhH^R%d<`H{kX(1vz&<lTZhh0yk1uSZ<MG22<2y?4c)G17I
z6uMI>0gbvu2_Blem4~SRnHuoPOA&VXo%E;Fn?9B7l?sr&THJctGI+p~AJ0Zr4lcWA
zEf7_;LwJ(8CXVgk02Y|+csCIM6Q%;L6ny5|qI9dCD#{WO5O#d!1;?{lp?uu0B_MN&
zWwVS9hgz<eDcE*pkf+grKL|9=Tg)+DVMn(=9WZ<4xplz5bDWa|X~18uO=M9)@_KZ)
zzE2Y+Frb1j<Z$hV9rhQ!Xw~gKY4@x1`h|Bh?7AY|eu9g@^d1B@yud46#qxpKq6o4O
z-VtUo-qm0w4oPYoFzQgI-OOo-?8HbzfQZ<*OZ#{u3Z2;ATVk_<9VcGFwSOK1xyW1k
zLXB+0PZJuEX@qdCgw8_|^ns3#UQr%@`%424dpB6H>5!oE#Yi1=(>_sB@oA0P$sb_&
z*JqbSna+he<2aWhPL<+x09rqT=>~a&kh2rJpo(B@pdX8ZH$%xo1QMlNFrH}P2=qe#
zv764wNQ)XDB|Pm9Q><<nuL%RseArq~mGQe(Q2>7Q02_;Z#>I4k0)cA>1=>AsdV~>k
zG$9=C-N*BxE_%Bfr7u&Ur@0H1u82Eco_4umN$`w1k&2z+Y8mzbp4O|Gp+4!%6Ql0p
z^$ju<hA)B6yXA+?>X&tNO|`Ec0>AEq9bfcUF5K6F$(&D(x0BfznxkpE9g_A#gFu<n
zeJ1Za-I1P)W>+X1cWe{--@#Wz+Pj)FRNF$JuHol_ZT0u;dIJ2AH|TPnmf7$Wj=$sR
zSM_8wzHe}<tdYUWDRRnf+bd=j44LQ6KL?`!aDf-|?CcfOu_c3Bayp-JHTV(fDA2s4
zVWtO|m;bd>t8(so$X!?4qalyE>1WYRE-A4t3T05>fY`+IvTkYQt1ONxh!hm)2gxZD
zkH>zU_i;^D0+gGrB$XfMm&-NKCdAI=`h?KAQTfKd|HGxHTma7C4gwGmrUDQU@qaSa
zIXPMX`;tQ6*xCJmzo@vxwQ|~EyX*7?Ka*ijpq{Mfz6@;}k0M?S$4<YKaI9%>8O)~~
zGm?qNPPi+?`g+#pkpKdFiKEqb%3hRVLT>9^)xAIg^R8<Rd{W@o+8X`*O)M&2i{LA^
z2rgELhCrT3#1&gezbdV0mrYl|aay2<l*i~VJBLZm(bL~ZH%Dj^(i1ueHao|awTD@Z
zobJafM9b7R3GB9^8^kAW)#QAwh*=ECHV`7$eSyyS3oQ0BGgyiGN_1CnM0K+@H+Zrv
zkCDVdJ{az98&)v61a5%Qr~Vv-`c4>^v}!-sdJ&!+O*+p7Vad!dY5e7w{q|#bbW9d{
zn^;zT{5&x5dtYG-#zZ1H7rkEz8sgkHd`h=q3bYH!%}xJ42fNH1<wJBhP<gdq%`;|!
zYd|g)GsgT8kFis`AThi_db2fL!vc~g7m>JhyTJVjjRnpK!qkyiWP9e77s^2NCOr=~
zyX6wcb!B-pwYlVi{6!zNomZIa!?(@3DolRCDP<qA0HtemNJgRAQMY+xibfjl3oR8S
z{(>-?gBZyfyH!bwFfOCGN@_`w?Q*)!iRI3AFCQvC%2^2Jel!B@N>@nHXS-@7(iMzT
z*p0)kaex569_avry1}jQhUERuY3V=0%ih23_<P^4GuNSEL(FbFPu*q+Xgu^_U^8^|
z)gWro1=s8+;)5@)pF3&MWm&>qrR9V-Tpqqbwji%h*!=E=Hy~T{X$e^0p=8<QtP3YP
zWah-13v(?fyg8NY^aJJ(;uh&U|FZ*wl{w0XprloX_iX@BuRE|lMVAcJrT>R>T*)CD
z`4bxN$Gx~B${C1La1WT+(+-n=3^k>yl{FI{;>9z(%hR-#wKGCJj7a7vW-B(JEGt0(
z;(Tf>K&O$l^%OfJ09m!MwQsw5=*Qa?d;@*RAVikMll`g+HgmD17iM3qZxkqH<Vi{V
z4&YQKsinko3~SLHo|8+59_28E8C6g#xG6SVsKEY8zuGth8|jGEzv{ds?p&QDT%ZAh
zcd<yY33@Ut&Cx^Qo3D@VKdjKel7tx~&lN9h7E04_z%hTxwVWEqb6idmD(;nZj6fVd
zCi&ytesxSP`H<%0rcCvaeo{QEX!a#rSaAN%LQR10O>_#3-}gmOj!?6~Uql$#=lSb`
zNxFEcIY^i<3L`Ja*nVqFz!KTWiu_Z3AwHoy9T3zY%&}U6kbY__Xjri+BEAXUo1v0-
z(yWBn8Hfb++9)5iPWKz0(e2z8yqF;;TC;}SG`D~$KdVc^*i`WDZ!RIS@!9#6$)yK}
zq${_?VNImZPKFFV7Zy}`<$>}FA}WQ|`#3gtX?H(E=mjKSl8Wfqr@eqtJ_sk2GH$4?
z!LS4BWFHbmb^R6&*RnegHt74HLomMsp8dF%(Zs18fSy`L)`5|F)ep67EnX&>=EyCf
z6TNvw@F!EWjbPXce#<n(GgEHiV6;#RjNy~fCG+<44!TKDF*O5?Hw=w%N>d;1ebzo<
zygr>F={*ba(s*us;iiPygiImEE{7=OD+Mzxo0f4u9k7zkGjSI};YQug0mKrw1KmaJ
z(}{k|;`LF<6L5oIgMBSy{iI72_)TceFQ(VIzW~LJE=+CC8Bt7Q`VJT(+$rn10G|HU
zv)Jv8KwoY0m@RG;j_XZL0*!~`p5qea5$>0j){({j)4ZKb7<cZo>b%GYfLg!|TXYu%
z65wg<G&>g&8bJkq=GC1A?@@dZJ2p?ta(+{wS8cUN3F5e9W~qvn2`A*}NX27-JW^*Q
zLR>w|sj1$aYLgM09$t<}ej$vyLlTLfS^bU#MqTu|2x)2-D)Pa+n4C=ufBKc_yyCtd
zEi`cpj>d&6YZKQswvTOZBj4#zU^mxK(NTGZ2!T0l5IO9k{Ry?G{WX5=GxlvU5$<&;
z>K8F4&pb!fU5d;$IkwOhPy1&R_(X1!3DnpR2=0kGDjNz=WV57b6)mNodf??#MSOd!
zxjWBWgl*2<=Ujmu`ExO&{l9N)#EDXr`K#7;ADF@Tw86%6#Gf`j1r2~M1k)Y)Ts(yp
z)uI^J2v`DRtM#jWAoNVpcuG*+?a<ECKgaljdm@1o(F;pfm-yvrr6bmVt2IE?HQ$LO
zcz)R!rodAtfwVBp?Sl&J>r-EPYD@iSG%cBpKvP0kO6QII3M!TgG$&=DBv$#3`9n$b
zF3t^s-^!5RC_<k!nH52J>-Zl-0u!+zf9%_gQ|6pO1rXUZ4;LOY`Uv)pTv>Tx7OEvX
zHz|6*?kreX{P-=<I2=ZdB&rfOGNuiFSI88>Bl;HAgU_B(A{)M8R<7*0_sPwg23Ipc
zF=Fo1;H+$?_~-fha(>lu1|qR>yXh-GPTnfc!zei}6C6?4@+cFACgO(5^M0v=cQJJ#
zEIv?aF>Z14=cXXCE&^lhbUg%&*vcx)3Y)r$uq>9NZGwOo&ttb$mf59D_g@7P@?wpM
z0|q+<cn={iaC5E`-=>mH6h}zH+N%kFer=TU>{_5E@n$`u#&>HR&9m>;92vh)$Zm~X
z+;LCzv}QhWdLh#`!yGlX1)vLlNo5MeoI_WnxkTERma+`{HorFc@_Z`82Q!<4Ap>VO
z9P2QsUj-|d<@DY*-?4v6JM4XrSp%=|JuO=~L~|ADD3H=f|IAG;Gdw$f5^jXA^)#|-
z`+Lzs-5{N&a9{pw%bIF}yUY4A&mK*R_7h^M=x}py`2)<-Kp(F|4DVY?%v2u@NI!HA
ztcH1WcO;WUv$W~he&u7;5^G#XcZwI}2J5(y8`ZA?Asr9TzJfl|rn*UZYyfk%mZh69
znM2YSEx#^F`{n>>v^?fi&IL{CfvM~@{H_YutazVAZ-KE~)@i$W#|lX08VnJX5k)sF
zXUI`Xtb{Y!Pz1{)kF+148uR)tl4|X8X#OSq%eJp0Q^t*7IH6O;FPb}c1({hlGRRY5
zhG2cuV1x)ki?qdKcx{!0e}OwHO<)<42@~XG1&6m}awC~1yRiDa;D}lf?UP+dVPtKG
za$g=}I#*++43T!cHl#?lJ~ymF=H#mwio>z$ibl+-HSNKtoI!kTpW3uPChcrIz`Vd{
zHap4DF=ANnXeJka;0&VHDQC%>&~;c4_d5m<Em?FTOHWpT(-TYVsAGf{f6zk;buF&I
zEc}O?U=8JH%NCE=V><Id)ysr#q_yRih+|Qf-nYmWfcfe*L<X6ET?ftP(wD_No({&^
zkV@pE+L?#ct4L6GB9cQQZNC8fiNfwO*^uGPF?Sd}L3GN-{o(XyJNpi03dPay)gh@l
zaL(q@dfvJHE$q7V!EaA6koLm4-LdADmp7p;S@r@u5#a;tMbm8hwVm1%q-p2@C^(Df
z*K=iJkoe6{?v6C&d>{d1`~A2~P$xl&JP4{YSYJ89`}?Y=vHG`YXsutP+JWR8`ME_@
zy0|m%9-u-MVIkel9)<=|73|aX27CMo_beB4Cd&>9=q$Ph{2|3*#@JxyKJLRQInPzl
zyj+rqhGLZ;Ks&pHgT7Pw6U+Fd+uL~+<l+oRlTZkmpKWpSaD*j{q`i5%k7alyeyJk|
z<`mKxAi`XaBy)$%)DXDeZ+Kt4d=jR8(Sb1i??U)ulpAANQN^NGI*`RSSZZc+a~J5?
zOAlxPi^0LZ)L*vej&(47O@an_0xeQ!5)|33B0ueVXY(A9$AX`v`(p30CDkQ-NNN;B
zBu|2u6#7)Jhb3TC2YnP9*SpbmMTv`W(Dk8Fx@rlz6$Nn9%w0Q8N7dGmlx~)|*za?=
zzEbj~LSXf3a;)b!o82b_pAfckqijjA+zaN_*%nNMvD6I9JC%^Ne5tr}p`|UHO^nh1
zGFKTcn<=eZOtYnRZ8XCdli8Z!@JKDMhJdIt>D0l0pw(EE%Z?c8Iq|K8SmluWBR9D<
zjVlE-hge$=nRJeKGLD1XajAoWJJLJsC*s5@;D!kSwKI~jlbauE1!EX9P-w{s2s=m<
zNIbhL?CS4hs)*5xCk#Fv2IwE=b8?qa?;PB`dN>4)``;ExUvpL*`M*y>-`Y@DqN*}{
zZ$a0^I|3gtvO7cz%vkJxl(Esn6i14Ik@gxU{aEwW?ivPkZBg`RUJ;~h%c{VzPIR^5
zI-m$jrr|L3NE@fNC_faSXKT49K5jT~CT3AC#(1_yJ{m0@be=7LI$*IdS54=|W&}8?
z!DL>$bXi0A6b+`9rzM4{w92ehgp_*#i}<7$IU4HS!QkOLKxFnU76i!8z7)Yxwa9~4
z9Z!(J`ZHTdTaYESvNX?~Wg;-Q6*ycHlEscCd!=ex#wCc_6jG9-@Tr3E4C;6sraiq8
zWY1ef#*uQ@VyNL<lCC)0h@9=O1iu{R(|3^`8SHMbiS`a~exT2qofT=djZ=ih2@^%E
zBml|W9M5&*hO91MQv$c%Lv@Hh+SbkC{S0_=cl1^!lykBb>j`{s$rEgU8)$n2(MjKS
zsepyK_@%g3NE6X%4rlvC%N?SsHuTHTt!%1wfhl4~)j-+U%G5PUw&L1wJol9fLU+c0
z5zC|qftWkUdIR=Xu7a*Tyie{s@S}P$Efq5iM47^<m`w9dDnH`7M9XF<*A406v6YL)
zZls-xZ<356P6ql*G_D8a9;>=wvQ7uj8ZXDM)Pf7KP;^o_?F#v5WbcYE+awB^x7k?a
zvj9FeDb$Hq_`;x==>icm@vm6qVY?l*q%r`!hWf$+vH$+*CKTJFQ}vl=$6x9!78jp1
zEQvF`_z-!Z-qXH#6rxbUl~kP{532dr9wQocla3vG^hJjdRx~Wd3tiO7snPl)XaRvC
zE@<)mIw+$FM3ugWqNzc{*`AUx;|eJvQvSZZB;wjgM<;fv!7j#s<(Zh<3;(KBMNdAG
z6e=ISiCN3XpVyNCkS^9}>M68{>e(#XhootpNRz{L7M&!oM=Yhwbs|kqx(<kI?=sMo
zRMu(HmDj0QsLGa_8F_!hQcrkzIEeCvfJm1<=53VKuNK_fl<!idwrT*~AxDAC79gQa
zf)}l5DU#T|#+g?s5FJ6jlcm)jX~m!`Aaeg>w;ozio2?WS2x#zI>52QFd^!sYIyuo9
z+nW7*y1$cHtfBkAh9T9e+E(XcNIu_=uV7R;P%-jjwRJxNmC|5gVWs^LC8-})mm2G4
z&6QU*)|I_I%$3Q-9H-h*f*F(S&se&3usv&=0VkZeqKlTh#jM<_E^=U|@H>?7SX3Ws
z)U&rc8U)U>t$8xT+=$=DhzDqx5<r~?q-}Yw6{x^%fxcWf{e|!&_;;O|xxL$;O&V41
zPkc^dOs=;O{7>Ysd%ld&-1Daj)~Yv$hX=opujQx6PbhI>yuG)q8_==Ik`dFSO1<G5
z7z%(<3+wlb{ro9)cR~g{1V_gF>&fq<NkVFeA=!rRBcS2xo3f#6dVk7;X&|zYLwr5`
zTtNcixCjWEY<G-*M<Vm}CR>Bu65MA#r!rjXt;Y&XMC;AHP54=sa#Cm!d`hoxKo-fa
zrpEg<zorm)54XiO4Pb|mKb$%wc#cKPV(QK+&&kw2wp)Hun(EMlfuYQ$5;cb9i7z_O
zFT&lK`Z$Ce?9+4{G?4~eaFKuY8n5{c;_DDtYGLW*lLJ5t@xp(;!53_kTP}?n6&76E
zcNPS}njkQgMjo00aeZ)2okEj{B5Cg#f>Hk5OA9s@IHWj;=dAHEN3F5h>%832sOLC_
zy=(OE3p~1x`Xw%(-^`mwkExzZi>^4UJR&qp?|%%5W_e|ylCTwp#evE=n5F`Qm|p4`
z_1mVIf+z<&2|;umGc%nZO#~@XEwl8g_TB??Do|M{7ltFwJ1e=t2|;Ez+@`|}HfESg
z9*v+XmuMNWwaUdZmT%ud;w(Jafhf@rl&by|Nml(9E`igK#1qRUyh%2K(lw&~AhnVJ
zh692DpL=(H=o96#A9IT&;v*pepM_inc?6&gy8+P=UYtfhV+NS7TQ3tNGwRk?*PoU9
zl=Dv^pR(XCKB4T9-}x0j|C@tzeP7H#K-kyw?7C@+<rGSA=(khf_YcD!DMt9WIi&kA
z4rdzwQbkof@%>BsL>;@I?A9R5lspivU2tja>NH-foYA7}u!dDL)qw}WHVjXKgV$+Y
zZv71X8x<)X%RO+V!?ll#Ypo2l+hFSv$#M&-R&Z(?2FAOui4Z?F+6?O-3~YXJ-3?3d
z1i_z4GsQzxFXr2rq-dcK%94?<un+pA2&}HCn-%CiW(Ba#E|^zNSTnT=D?$Wy%9HM1
zIt7?|XsR_1U;!u-yFUig1wlD}dbZEh2A&(NMJQM?tPo&gdp;C^EO@qUl}*rCZ~|(=
z3<588M!nU?l`S@MKK=o&i^ZU`%lqB+I7I~l!v9Zx{3c8m|9IT<f02b2tJ^rOiy?i^
z)UGC2P*H$ySa93eGYQvcct-UPN@vRK&qJL8vF;bmXJ53He|foG%k7ioNh<f`b#8gt
z?zq*i*b3l;NWR61o<|2YCN2^f_82lqV&zVY*(Z|vHV6z5re>0$=wc2r%7m-;B|)cb
z)z?L0f-y&cjDW)u9TQCoXff22`3q;t4z60e0B@6UT7N+9h6m{|48&(j^if4%)gb~)
zlZxO5m}HK`&w@fc$8S>DgBlBf<O(+=@iF}!%i%*pr3+K`kERQ~a{q(wMLf<d0{fGw
z5s*Gf(SMKik}zXaBr|-kcm4U<lbMGgG_*yc{rr%hqgdJ*zk#{t6)jd9{YS%G25KN)
zChwOT6nk29XKCD9de{qg$}6_4#JfB({*cGmuFe>PR7YlNay4ALg<b0!iA)mHm2Jk8
z!%y8=jQ6GpBjrQGg$5rdK?6<Kw41%q#N1frs~n4U7*GT7M4YB)>%(aB?HkW!cMvc0
zfNBLuOvJ+EV(NS3{0G#9R7Jn5L!ks(`R>VfFZfG|hH7#GrRCZNFdY6sw)Bagxz9N8
zM#P4gv#mGvz%R-ik+;9y??&4iH_~-9BlYRXm(K?9<mhy)2Ju$dLK4q2`<HBZjHXJ`
z7-$~mLL~o4N<%zY#k3a{*MW-(>Dw$L{!|asBCOC#ME+Qy@|yY$@2)uStRHhja~D<4
zH^yTO38sA5hcR{VsRr%n;Cec}wYK^9@$S)^(Zy|liIOnw;clt^_Q4IU`S;xORW`ek
z#blajt0%fkRiwlematwAs5?z?6i0eEc)N*|+wp33unH#B+z3y9=1AmxS+CRUb>RF!
z@KZLyag|Upw*tr}_dE_K#(ajcp^BKspUPHq@|`c|jn*k$Q;VP9eHKR|A3P8X<=|@l
z2rtHi&StHX-!Qo1R{k&^SzDFw_7gIv0?bw|S~o(*ElZS>N#y7Xyi<Bfl#5J6BE182
z5hZuY`|zgr6Ni^Tblh(PJ|1y3458-(nEptQ&ZE6@CPJ_IZurev-7O`phW*A>6ZW%x
zqe$ez<;da*t^+~7h3hjtNp&Xv@<|ft5|op5MRwp&x#D-gc>Mv-Ajn(t#5sSEz40sL
zk{Exp-DZ#u3P)+cWW_0}nfvL|-5hAJDu|wz`#xkiD383)DUuCPocM)(8jVNvL^qEq
z4gEqOuLk`Cz;y`}HoNRoMlr+dXap_Rr+KOPN%Q<EO?YDYN~*UAtP{`11>1~7L6=ae
zlwwq2Jts7<<BP#zk~)i`xpGhcV{KDz<=3OoE5h|ogH4?*9%-#(_8-8H$>RtUu8GtM
zXD}B>RY@E8Wx}9iGP_+NQqdq<&KuGhNe?6ika?CsPtr9|gE=yZLP_!bNMh$xqu_|T
zn+M9a#q#HgY%gUuhRi5Dt&*tj6(-J(&AC5Io%m5=iTTgxyN*qD$u&!g6XB{Om`6e3
z^F|{I8-Sw})jZWAiU8<5PruCd5MS5GHt7PS^PpT0L&sVEHNqq%j#|m;<Qui}KxRBT
zEtp4W*Ud2IwD$YqXmxQXtsA+1fMc-A@nu@f`nrEd?be>rRZ1PHj-W!O>)`o?ij`_d
zfhD*!{{ukJ8RjxZa;tW;p;NDXQ+d`u_-5t8gVVH+Q}dHFOS#iy4R~31anMj)pLvFf
zU(F`_ux?qGr8J{aa*j6U1>x7r8rMmh>*~m`E>V+hA8~B;>RP6y1h$n)-Dz{bRP4cD
zYs!M!bd&d)|3=w6M%UJD+oG}UWW}~^+qSu4J1e$r+qUhj*tTum>{H%*<?VCNch0>(
z<|yM=pJR^RW^L%Twq}85@3#9@?{=uuv7B(4VXBZ<YPau(W&vSz?~wkuvCQU?k7{d+
z=%9w<LXD}#@tXys$HF<9zH=DzgZws$%cTSudl-EAN`bTsYi3jJ3MDNX<}PH0aOf8)
z_7nl#E2RahQdhZD5W(b*CR{^PT$7D&%+#1lgOYOfNVG_=ro8-3gW%j}Q|_6KvVs1F
z>EEWFe*PMnOf)DsrEol|cKIr)vfPRv^&H$lV7O0sfpULFd9#MKJG-|dQ;u6=pVsew
zm~H>*vN0kdVnO_d6$VQfBHNb?uFgABqmFfjo%yNl^(y0{@W0~=*;%YZH5xNwDzGZe
ziyojP<R%+jTaCkvO4M>xS;grRCtQ*PEhR1BdQ6-#P{m9G%F(%?yQ@_SNu1HhWhlWA
z8Lz@axm*r4ix3o=t)G`I&9HEtKeIvwhbX2w-%i#~npy3!u2oR;lW#Yr@^mTIa+XZa
zjAs>Y(#4;s8cCvUuU)lBJtWCA#hyzl(wS!6KX^vsVb6M(fpq4}Ft_K-t{<r7=81*m
zO7HjF7aP7er@sf5zz;piq9nN-mtkF*LB2)aH0@WH2OPY*5JXyZ1QKrhFnF<HJZG+f
zQ{Q;LF%9m@1g1OB_^8aGAavX!Za6Ae$&h^P?DM$1O|;3wl~$b^GAjs)u#@J<PyoT#
z!zi4}t&=IW4(UbrSBOwE)yjXn6G&RT$vD>&F-{SG1N=KhsnB>0XX}T?jqnqdQ~ZNd
zHZ!p?aWHT)(KB?murmG+s*;`6e@DKxj%To4r$-2K{R*$RB!Glsxcr;v5`krb1wy~q
z3kT%HXnsaqUnK6wEz08m@tkd3bSn=xxBIdsb{9AAitiZiVB0194MHPIR&0m5Ce+wO
z@Z$Emi_DD?=p5nGq0{FL(<6^e&6I|q1SoZ^KW~X_MQ`BMUyq;^Tv;iaQyX|870FMA
z;F{^*(9MAvlyDEUV>bG?6!?Wd7MU?PQbt}Q#P<(#Gssc^oXmOU9adh0G1!whCZ?u4
zgr_34Dzz=V^j<qUT;<~B;^XGiTT_Z)Gz^t>zWH;SmA)s4h!vBt^&7Rxva`qzaN$8X
zf~EVz=q+_n-Y{gJXK;3&1@A&u_|_Ze6lj9aN-BhMrDH%ge0*;O*l|8bZ)MF6G_ett
zzwN}-)V|iA6c)K#GnWOqkiWpT++PJG)d*IXLI<N%Tb=M(2-c0AbA}A7k4B8>cY?j3
z8@VH;p-Cej^l_CVTQ)gWRPU;@?a%yxjRKz;j*1`@mIGm=6X?D?Wl?$2<$isMP&N__
zO}ZW0gw(^G2QSNgYC*5#{^8rgpy!_5ftSBsTeht6y0@!Cq_C>OB!7W1yv?b8-%n<b
zIO)np)mXwAWB~~02oKQhU1)Pd?;yrGJlJud(;1G6eSrSE0Wt4gigW)M&<fB$M|J;7
z>5R?)$D}S!&Ju_LVd(l51z4A|5zXTne{Bv;;jagI5%s>Q3#=(}2H)Jnyz2&Pd%NdF
z?0UwwC*2r7jDA-(GHI@DC0sgwOR>C(6GkG7Jh=>!uE#nBycgwpfNU*^iDYOtG0KvF
zMDVmP4L%vVa-IVWNOU*h>&|L`j!Wt_<|?WDs8=mM&1AM^{{W6OnP4Sp#OnOS2O_O0
zOu>5`lVWHeU*rorYJeO;61-PJ=|{A&X>C4f<YHw7Bx9RYNGwOpYBrL#E3+!|5)XaJ
zA#3{1+#dFPUr7|)WB(MeIg}svcW9x(uW4db4CmHBHgqbng}CZZHbHf@d<DKoGv|m%
zgVnhik<!jXxJ5u2ESHz;+%>c4n{jIdVn0#!+1ayHCgN68mB*lOo&gElpdLClD)z43
z+My@Vm<(wGAHaX#lfXNikALk6?$4k4pCWA~M@I)oga2_)6s4pF_z}8iYA{ZQ{6){Z
zLh@At=LD7D36YjAh;=qDmb_8+Yh33J{xXBYb6!{+drnP9>jzr2<0}w(hy5;rbhLz0
z5he4l2ZJu6F!*a)!F^X&3Ew{Ks#rXDB4KENlWbf{v;ySlAb?7V?)P`rj2MsGvR3k{
zv`xFD0eEyDwfNxa0AQ)%@N;0^FuE(<&>@SR2vGD}{$}l<k1ci_92cLmha?SCLBVo(
z(`p5nv8}?D;61lJWlG(gWF~fnq-7RFjgHHm8|Sk6av#vnJ|bNZe*`*~nU~Zo9tzR<
zB<|P(z8;-(E{s>Gw_OqA(R*d84PQwchoGHYS=S-_H<>gKE_tS=jJ=Wjw&p$jO)6;v
z$PTH2hx1llR_7^hTUTZF@(TBQ>j+NtVjH0Jmp;Sm(B3R(nZNIU;)4EGEZOY>007wk
z`4IgB(EbZrO^j&l7+F|p?M$ryTZoP6g7c@x0C3Ir&x$oysSFUZ;LAgZQ>0&nMNlZf
zHx%~r_+x6@c{<I^x3Y7?4_+REsF#4@gvY99`&){wL>R!X88FDhp4Tn>b~>1L`?*jM
zv}DI~rkEs82wsFwdbW$SNyuV<^w6z14sL@JQ92QXdod0tCT5o~MIu8KTjf{{TR6#p
zdC4$vacT&C;|kHVpTB}LV^r9aXMA20F8p+7{MYh$p`l6Ye#D=YODj*|<kXoaJ!+7P
z>w#bYZmp^w-1WbHhEDzdDGK5I!<(@-X8cbS+5fUCWbK&olNMI%+4t>(ag>8(^2?KD
z*;_5TRE(Av7E0*E9JO){l0cBVs=IJ~U2g(Q42Lr%z#j%Ub+o)+G|*9Z6`*knmT36s
zg_=~x;(%PmM4Nb;<2pJe-8-@V%9DumK2pw0P#n@A=s5Y|EGTn{GatsIw`4j4iW^0N
z9F`rxBvI^xD#E4~b_*7(V*L^-*c3TYQq4zg6SF9mr)V2isEZ{>f)x9RzWX8n6Q)<)
z3CAWnG@?;f_p;IdLXcEU3<~#U0KEUu74plap{kudJhkKgW#i091<h|HSS}b?goOEm
z9!h?RPL(u~<I(l#u{nhgPLW`vO6}RCWSbz%rdk0q=~=bpCvKt07_BQcB)k;$$ERFU
zxV45#xP75rtZ4S~>4h+1bLH<^=q-efjPHY0BZeN$Ru%_M93^>*xQsXcP`nF5l!RaO
zj+dwRyv^sj;LQO*HQ_vl8AN9+^*uM$f?nAyZ}k;)^*EtOG3cGpxi6XgD{v!Gi$vRq
z?S1&;G8@&=!iIv({llIy=dWq>pWw?Zr6kt}jJi<zFIG&6v~X3jvM^-(7{7g4we8<u
z$|d?3S#LQPa0HvUYTA<Z3!7U0Y6AeR)JC_jQuUGzAJ>BAcP`$p-!n^lASbYYIC@$?
z9$RKRZWj-pPp!Vb2JrCsK3}c%CS2^cAHjTTMOG;)zmFUHaC-2fIIBYTyW06{(oJsb
zEbUYDuO7-S4beEJdy51Pv~+i1z}%#exH2_aOT70O1i|5&#4+3yLf;plbWCk8F>ZCR
zHDScMXZ-O8llP7GKsSss-3?yUH+&Z0JL#ct_6(_<F7U(Yn`?3GC!kv-Fubprz}T`a
zIsAkKQy#1*N>XFL@K3aMjkF{4_TWyrsO#<N?dr~7ykmffpD5N>+xmJVzyR+V1_lk8
zeWfXiv(XK38MfVujoTO}l*3J+CQ6qoF{IyIySd*~oe=1tO50U>=$kfY3xWCOiz#b@
zN_JH*uyi|yRu5n8SoI=<_wQeaU}G1OkpUJ9bl+tJ{K1y}0s5+A&edzE@6G*nJIlZd
zx=#O?pcC8=-3%Dpt48&-<ydLm2ZAQtpdhT_?97*yKwHqcxlXy5g*1OF&!+FDLxX-O
z;HWH<QMJc#nY_dB=}yaZ<aw=RIfx^8D6tfz!Ppg5Y)t00&o@u6ys3Url3%<9CPOlF
z>!`lNsy<H$y&|;&^c%;_EIC8!r3yiACWRvh*FzMJ7r?zQK<;&VEQ$lFP~CB;Z%R2q
zxam>S&q`N8GFU?;RLL(FQ(^{swPy+BwcNW#x;WZdh8D}Ii!OIJW%WRunT7wZH`viF
zr~!Lazqh$A9hb@HOT`lF9hq(Oi(`bNIiCJo;7nul)J>`1`dY1Q`Sl-yGpHZr1ptuF
zk(d0BoB!wXPi5$T!Ht!LA>IE6!dCx#8Twy1_Fu0`{0}(x|E?-$XJVtIB>g|G{!=Og
zfcTGR-aq}@1wjA+uw?-N@K2+u{`2a}Kfi(2?!WaTliJpf>!R^r)F0stQ!59w(qmgy
z+OqMO6Y-r2RYq;X9Bs-6hyH`|gW(|NF!*70kK5O$SD5-Qq+}VD*NSDK7?V<Ray{Ie
z^P@t}sZ&Sp4ji-#4Ou06758<jB}`dQ9yN>W-0vy4XlJ?9!x}c6XZnl^W(&)uOx8|5
zRr|6x^lqiPWI|b3I2DXh&ec%1@nM~cG{3D@qN7~I%5v%zWeVCP8w8U?jnWM>F<2x?
zHBZ;`vQa4|7U?slNhK2Dn%X788D^}_>KtJTluZH%1&<*%%^W8Kw-@4$J-i*<K8js0
z)}&RBQmJL7<H!Q)#Tj8{RFw5sTFFgKT|M8Aj*1fufQO|yHGJA=jG8ZXIrj}YA^kO&
zJHu%!vaYVOEtM`n0iW{CuLy8Yo@EkCBs?rGsLq-?-o2A8o917yYpl<2FR3S>vnFEC
z$=S{ZWGY?<ZZ)nC9-=(#=eXqQqQ8$XPgmRC*ZDp>-p0SU`ChbYy3mzBb1H^qk28jK
zdx3N2wQWG19Fcj{s?b?DIy&aC6>SS59Ke!?Ak~>N$`oEF=p?6{c=Jkt0$%)lK+f*J
z4@}mo(MiXbYogdXKlG8%S1aWz)^nT^drV1QM-GJ8w!S{B_szy8$Jgz!_URWx7^&iC
zGg%S2@y^M8%D1q+{$PVZm(*nQgP6HH;Ghx@fEES~SsrA0uyjAqXUw;BCFlawpZrZZ
zgy_f>GG{5i=e=#q5mhpW>lv%o)VF{(n|*6DAZbD@A8wkq7#e<e`6V|{hpStLSh(&2
zX#H2~BtA=Yy2W4|@QZcfzPexTG49nkB{!)qc&s?xXO2+8=e6;cH!yZYL*sAhF!==M
zko9bDee@V?q^eEo4N{jGhP-k4Sx?B7D~nuAv}cGJne7b0fPkIsk$(CRNg_rMtKHM1
z&(u1tZ8BP5KS!{OKeBo-yR7<R9lHjg9JH7TXQ3LYvP52f*jTN+OV;4p!ZkevnxGhI
z+N6Q%T&h_ZvSDlSSBg6`OQ%e;(DVoFxUqkC+frWmjqX68C@Fq-DU8yA(?fxSV$Fia
z#><#bC4-t(J0&u3@%%aQ%v_l)G$V=xbE@y$z~|BH={jv1<Hto7&YTj0pFDTBm$z^X
zeJY<nKW8KL;vjcAJeo^vVVo5*_NYKiU*yh$OtPM{e|9k9<~Fa-{lM7jX~uQTcBbnh
zzueD^>NhWSG{Zh!fj$@4v8)UCnXWY4tE=wvm6u)94CXkKwwzQSX8P5_!8EvuOk>1h
zZYeXwz@gp?bn|vSix35Z0jTCj?$D5epzq-~PMWY&;Ct%jgm*Kc5VMok%j+GQsk_RC
z2BF4dB~D3}uKc!H8sB;R6p3~F58_+kl2?RVx<qx@Bh{4ka9NNl5_hTdICVJsI5Mj=
zfBn9#+7%U}k=R_nC5o6UkomUXs=<I@NtxH?G2)z(4(wOda?D}a-16g^u0<?Xu5dj=
zq^A$orEpu_mqBMAt*+CFSvb#IUA)(25FUW#^r#>~M{be9#6j=99@6d*ZDY606Z%5A
zR;o2i&}7N|%2gD}q5MnO!>5O18DDXg(tozIayqZ@+?gL@+yeB5wp4eR);yyR&(#cl
zbVQf2xa;R&%a!oa=+|>1<;0mTS_dHo*5eiYvo<50%lo|c*6py1QVI_j$uYVnvn4ou
zm*ATSR0tsU@L}AqCBj6}LME;97c_y_4xlv&x~iXDbHOxN6-d*OEfWwCjfN2iS9((@
z-gYCk4U<|24GIf8g&cH<DGJEba={UUx`U~KbC*oV8kwpJR3Gj9os>bUV4R@PV%<bU
zdHO3)k$JLE9aq~RNTpSCww}T912zNK>O2da`!em5byk6i&Uvx?#!^vGX4xw!K@h;(
z6;sA{WC?4#h35Ux8Ii{-yR*iq5yW7)xOq59J;CZ^+V~_AAHZsWS;62L$SK|~sO&Ff
z*#yAadYXB>)j!QaZqd2Rq0hY_>|`Y>xm;+QbA(_SMLx`J9>R7_@2n_0nuIbbZY-wl
z(cFI@dz5P)OiObRGg!_8UWp^)Sf`ygyQU`XjA5}szA*lEAx&FaPa=ArI(@yZenVum
zb%oZ6ZL7z;zP+VSH>f0~`+l$|N62Cqw<JxWz%Jc<2SUe*ucZ=lOF$F`V9f0v>UOz(
zrbYRR7{ogja4!>0IALrw6H^3YO+t9$uq={niguoyLv?f|Qxx-H&zm=^ff9ztqt|oT
zq{fl8xh0Rs1s5&~p@04W%k1R#L~zK<JJX-trDTAs`|vP)^CsWP{%PMIwkgNYv#;>?
zdf+KJ!LZIcaU;2b7r(+%|Ahb+s4lzgnnJ$(grFAit{!rOBP}6azCsp-sdmG63j%sv
zAu*T}?}|=;$tDOq+ss(tI~-3UujK5oI}jPxe=^Dj0b5e2WsVi;j2Kifg48fZa2Adg
zHfg<fIN!~x5}X@zECH5aRd`_~!mk8lFxFjqdcxhpl3YU0-y--)!l8)3!rw<7eWGzc
zZam*Qb?y-ihhZKp6GYxh>>doH+#1jHl)Q}^vgs{%$~Hu{&mqK(16ydN9Z=ius9CT?
z@3pw?H-{hAWE(iCQ+DII61K7^4%l`yBxt|}vFNg$ea6eNc}2Dm1i%00j&HykYUAk%
zH~^X~kh;{%Uy^kEqAC1vUfr_33EXE5046Jjr$OOPZUA<6Z`ZBg?0PITGA8C@!1l%<
z0D+G5RQHMi)#Z5%Ku8QN#IT*|FYXxg3CvT$CaU2%J%|sng*O&i(;{o7y+rISjTvGw
z$yxxl-hx1VDORv*!L}P@Y1{?0p`T6&=&GXX9JCi48lDz%`LorfP8YuXKEgd*kEaR0
zZxbdRMwI6pq@9+x*7=9Yftx`{{W{P!jlHE{kV%z%<!}KTXMWpPHnp;sYG`JH*8^HL
zvDFK26qVg`C3RDqxIs{;oYjpdlM!uKw_q(YN2MdJY^%-({K2E)B{jTWO6B+^_X9B8
zoE$>j-kpCmLdm>d-yUwR^MJz7>OS|gn?8{pg$QgC=`zThE%-|!4WZ=r4W#FMy`3e0
zTV5`p2*(jn*CRMayhkPmzA(}&r^sg{!UV~$8IaYQS}>~7*9c>+g2N3|)cIHMhLK?c
zL2c=etZO3b^pV%2JN2<ecJx9GMAml4`sH9}iXB{GJ;6E3OfS?sAI~e*#@9g`fYu`T
zhB3OIZiopc7Uy?{fSLddi|C%YwALHyGbF^D7$WJh=d#a}dP|1^GLJacjlsD^?It@*
zDy)VoLQV$yGGql~5~Hgi^Ud-zHGFeFHo}#XP0IXEw@eO24VOrxS%neB+^pX8U3m;Z
zi9+<-)}eD|9<MLzoUM_NwI0Q}1WnpBH$cK#LyCg#vU!mq>oYIH(xkb{gcZbdAbMx)
z?l|tkl_jT4K=<)9)a0gC#=E=x!;W(Mkl%nqTMTPuDC5f-GVC8xPLQ=eZT)k+gmc&`
zcvy(e&#9cmyklV-b&c}0)U6cV{uEK&rP_O_rYEpSKIuN&aunHqthrZmJl#6hN#Lr>
z@Lh9rzKID0QcS9h4!i!H4_Gp;$uJQq0U^!rD>1!t)4O8Bacrd4$h`2td)l0QQF(c)
zDFKl#yd*YJ!Nqw%GuEpdNHj=48`>5g+kdrVQ)OQ~_}I6)+9zi=QbQ?qq05M&?*1O1
zC@h_?0dQMuO<%5JEYT6;i!Y-v(%_SdP7DfoHW3eyifGj_#t1Z$W{?d7fttcm0@2Vo
zm5j=Dvh+n)aUW}#u<1`@AJs-s8M&#^LY@^mnoHOzgGM4*)ecQ5jR~aaQCy+<i-8bO
zFkGVD4?s8qvrVED_2tE6G>Lic_{1a}?evf|KP6^uuOSo}903HnN?UNp4$q}Z$}aN?
zoSHcq+TTWukis>b8qCV*vQC0j)lKk}5HSy{u@^y(g9<6l9v`#NnHIqX8MqSO-P7(%
z$8{HHeL;rKIh(GlaFG2lemHRfTQnF+dvED;A)A66U;<Kka-7h~!V4<!E)$3?02xV4
zSWwCxPC^@@Dzh2jS6k7z3sz=fE*qXKh?8|NXjr>^)`b~Is`b3$9x}3|lVf&5i~-lu
z@_ORdVFUdbv%tw^5TVQU)!OfZr;dtBSTuc&&rLe}evl{Ie2%cAiMPt3LSM<YaTs;{
zzkh64`ir(SK!qm>Z=VW3nFKMwkrRR#hZC8?2O&=hG^esMs}c~V=YSY?dc0Gy_oFjg
zz+}$Cb4A^8r+A=;NheH?D5ZvGX_1q}tim81#;b!ycQOav$Y0?Q-x|9$Q|k*IX~E5~
zZ=txa{1j_QXNwGE^Nixb>Ax%h8_#I6ixOS~WL^gRVLTfFumV9%k*|Gzvn=+Er~fpb
zXUWdgSI(NVV0p=}sM=~dY`0xyOCVp&#(euzbN#r-D-kxE+nBi&(A=yIPG>Nm&uiBf
z)43owS`jqvVR`GwOtC%fBN1=j_by@R{1#7aPw!19F%9D-QGSu0!_hPT<z+E<WwsV>
zoyY&TeRy2ZL3#J%P?6I!muKBN%z$s)G=8&0eGI?=elt^-l7}HaNy$gm217wHnw!rP
z8=Cf5qpW)FLUc2Bw+}hj4Z$om7!ZQP5`8ok)bsp!0O!=XV=j!vg)^4>7ousG?!+5W
z242W_3W)piW~rUmFe-^x81TvXjXTCHwE&|gexT!f;-X6nlcjv%=IAkhz#0rzId(Um
zM|NcDf}I~Ox^Vl=jLvN>JU*8?@j%62e@xN{<kDnYXTv$8RD4!@HvA+Y>UOVzyMoYZ
zO;%cVd>CH2$=&X>Ul$dNSJeo6a5oh41AEH3{aXcpO}MrT#og%arK2!)XCK3dHth|A
zi{b<WlmlTxxCh6G0hAIup2?go$ASeNJfww!(BPgefHytfE=YA!*hpw9U<9Nd>LE2v
z6U=2fH(WTQF@BeHaqKiq##VHJ%d~;oJ%QTTC2lC@$s5&#w<zD^l}P@PkHYJ|W<lAj
zstSSP3!tgtN*QL>&OJQxj9Xuypqxuw$9yimG=b&eQ|`@jvVdT~!AF7r<oeANJc&>L
zBsX)vPOuyZShn<R?X*1ROlsr_Kc(iR4ae#WBe*21v<8~uD&4kFbtV9@IUNXG50H+U
zu<L;1BevYW&BZ6E-q|we=H;T=5UZ5Fjg#5MarO8H9&${^hwXTE-`5|37d@k!{S<xu
z(Ft0_g{BI%xPMhJLcjDU-YmY79q=BW2&&7-PD1yh{3u{}D>#gQvtQUvmk&|5GGlah
z?gWTr^>?_cXA^QwL-l+Xmvg;Uo$}qT80p!@$I_-QV{G#C!wYRtXIfphGz<YPjsk{(
zSvXTBrA4_&AOSkKJ#2IpK(3`UHlLnu6ZQBc$+}6r)ZqHC>>}6edY@Ev(0e-#YoVqz
zt!+iQQ1_7cTS|{2YE&@3Oag&k$XXaVpx_avP^q-|u`J4%t`-yJb6Vxjsz1>QbqV*N
zq11SQ^LdUcs6^B^<nc7tBG5B#S=RbDR?}k3*L+FVx~<CsEt_-4*)La=Jza*9raV|%
zRY~>FCyN&K`3$eJuh|~p?f~cCXCjy{-cW?@Tzb&xnp7;>h&pjTdQHj9zO-Nx%&Zmj
z`Gl|IP449)LG{$B1pPD@S}Jwh4Ob|M%#U-{^8roTj%?%;(iImM0tDz!O!|aw#F<!&
zG4k!{Qesv-@IDb_G)m;+3dIV5lc=0+M}vHjb!tpzN^Qk+tSrFvsq2cUzPRHcXf9xk
zk3A>c$OPbsO;juRw@Z#)qbWm6-RAA+fr>HP*zT=u82WGNb7VTf-JCU3%{1BgWSo(t
z3R~@yEdD@?7mj{FwRBT=g_e?~ro6VE&6}`Ao(+dU=%k&~Sx>#@{mt-L&=L}D0e@Pw
z3vQ@tc6SRLKJyOz$31IyS2s+t1@2E{%WlW92Zt70^n4z7(+!o&z3#<4iCUg{d(=UF
z;}<!l)l~RROn)tJ@o@S$-&{Sm@lnxG$DZy|at%0BYXL`gG43yubvfo5z7e${Ods`2
zzJr=mUs@gRGM?7MsctSkj(Qg~ow<PfDgW_seTcK~<M&qRY2GQPJ%%}Zn{ok%XPMH8
zxS2${sa{S<geF_e-DOag-eWxD8^iwujMSQr3qy*jg^Tgfemen{3QSteSc>rRv^~$;
zV3>V!*oTTiKWgE|9^l9SvER_p$g#}xpZ1h^Z$%<b69JzNT}`*8bS6#?c^=MpZ>i<d
zU)y*j6}bgV0{Cj8za0ylgo7%OqdqG12$zw;&blP9+(@^!@F-!qFFovc-kst@n#_)p
zj=sg5s^7ZzpR*II@=S{=!oCzGkLxVLCUlGMzJ*V{dT#Ml+xb4IzcH%r*>8#(r_J6x
z+*|d|*?(`B+OmS1q9GemX>f8-Rew9U>icc{o;NP*E+cda_hf8mA!@#Zou8}1qo?=-
z3Dn77h9C$AC=<FfzFEyNJU*!sJlo;iCrkk*W~w8qFc;G>y7GpVLAv+GBTEiQUb)Zg
zSl*vNcj947av1&+c8=3rt}D9wA-0GDKjnZdf1#-4n3@#W4~pbSHB^d-v9VW#sbV96
z8(RM}B&0YGM!q2i;C$wf3)5ejp`|5<@sM9;MVQE8iTj%s*+w>@U1+f*4O)U%2Qe8)
zn_ofn`HS*7DE?lP%Wx^{hU?-=yD>uD=OXb&d)IIt+xD!h*>vb)66uiv_D-O&5f1zl
z#4IApDxP$S1gjbw&hZ`i$sZXHjrT&`-4*3SI_`-%^`t~&DbI<!zv8S`^Ib$wnkTa*
z%c}w3SLb|j9YyY|q`GKTMWnu(w$9r0WORx+icm(zsZ3h*@yO?;Sj*@mJcx4`KxDaC
z7qZ11(o{FAHkCZS8prLH2P`8xlq0&^%;b|wmnoYoEvNx>-AfDUmi64d9^<yRH?>|B
zVe@aeuhfFRstXGhtEhO`p2`CrDo!82S1z^}Az`_#3=$MW*2{l!+}8cg2~hvgg?L&{
z?x0rKt)dyEmhKQ<^?syzk{UXEPb(MfQ$1K5g0-4bqb?Z?9&;KV`kQ16UG9*)mgB5y
zrdRp<Rk|%_<B2P$LDt(!*Vu7(Bf8?E*=J(<v>J~1I(WMd*VNrOKuEmq<uI30&jA$X
zpw_A^@NxFzQN6MzA@8Xtiz1;PRlzd}I_y?Tv|LWCHBjj{C6|=QpPZ5$#ksfUQKCP{
z$%(yWB7ZaJBgf+3!__kaX{j`;<Ly(6wD)=ESFIH9$#=XEk_glCv7^=qAVnC<&o9Gt
z?@Dy7k#!8jZ<RiIP+Z)I6+WxiRx3YMwZB6nqB$ds!RZQNb*4u%+$gFVHyW<$RA(=i
zaWi%kvGbp+Modg=NHdLvP0L0J9o|saX0p}O$d>~ZB*wRQ=i4=ZlQv?CGL?bLurTlt
zGSA?J&(Rdn$kc6jBT87=Q&u$r3Q_8HaOR)5O?aebM*Jk?YKN*3+uT_f6D8%!QFMA!
zw|`2pvMTsrwu<I;9N(ft@T{Zd>pwsG_$Lkn?J6yfHlgMvSKtQqMlQ$UePg`uq80ks
z#|4?Dk2HF6o9QM?a_D$<H*~bMndyAG-TvH`MA*{t>Ts`Zu3vX=t8SMM@0)(x3ti6D
za><pW(GHfs(-WW+dstW><_X$*TjZXm#tzSP9Kz6gKYzYk`?;ES)NPtu=^>$bZn$k&
zJaN73>#HYyZ2W$*G<P{3y8$ZNe)f@`>)|H)-KXaBmi2&C(#vp^MARB|6!Cm%P5*G(
zBlgmdbI800a{=V-^yjaw5!Rfe)1Q}+4`gobPx1+G=<)X7hbu?$T#F^ATV^~HdY|ib
zjjvE~AKPo!0i2f9kbeqj)>>IZANhRtMn{)k8a!{pW5<NS7r{*`o34b)%x?n#o4+2u
z$8Y#@S8Dh;_H4_c>>UoMN`b8HR|mXP4z4^FFBR#=RX|lfN&HkOKI!cY6IPM}7C<&{
zHvJQoM!$0b^o{$QkTfK_r-t`dI-Ds)1>4#`l$(+b&koJoFBL2%gulHR+r&o-W<iJ<
zpA{)`&syY9d7E|e5+)nUdOmbMXpNytF*Ox&R`j>8a$D_5kb<MAQrecxUVEl=tR0cr
z5WY4(!uLm|FHd&`dlrK`oy4J;^5{W|G2>&~2I1`Mym51~c9I`jT=j|;vuGJCBqq=e
zr8Fff7A4m<&8+Q0OAq2GV0<geY=BNe_uzUNpf376En!Xq@H`$({lD#}9`2{65ITJh
z)AK-pP|eXWij`21o%@wXDp1P5fvB{YKrsepY`422lxmH7-P(#7n161}3w<wu4D7x1
zF?-7I{R*)5jpU)0WAfts`}3V(ptui2BBNBN)fq$(K6s=Q)z6eYnpf&{D`}<FexHZ;
zic~ZxgD#5v-CI;hpVKF%)}LLQy!UOT7HVv-CwpAP89^aeaHjLwZ%HZ*p$bwQI9-{q
z(r7{UNI8H8lA$GqyOk4ordSQve1_4iv)&7w&Rw@)fCYjhSr?^hes8GSxB85%itUT-
zBzeb+9EAq}t<U?j?!KvIul9j(T7F+}B>T?!ar3!8y-NviD`Di^Cue}5ZUmF6d<hWM
z=<pt?$GdCmhM#;}?D9dpd^-I#eLMY?k=O*r%&_m`SFUG(daAUKwI{nTBF!1?M*~{H
z(xOsD3ACeMl9MZg&+{@n#RM__34iQyeww9H0$yJSKl7#!-5Pq*kxh{G+@dWr@3Oe)
zWN_!oBiF99;gDT?nIeAqZ6IUY6-gygHPvcA5)!6cdsZ@bYO-zaI2<}|&tLP}x+;Bs
zOjbm^<&i&Dqxlh(fLeyO)E8}4TN98ZnO>D#l4)_@3@zo^^y%@woHEnWflU_-pa}zr
zhmQVIJw_(wF=UKHTF#0;$nz>R9)mrNb4dV!sI)_o!#ek<lz)7q%n_hE=6{-_h(2V_
zVCs2R*cxcI8Q}#P(~sz}!j<Igim^K2loeMeUKg1#X?2`f0oVl{?ahdsodTcCOH=`b
zwSdt%RWk~o`Idjzjt6_^BN6xZHiwdu6nr1205CNczyL%wPQcllOG&?GKp#7w2)OTx
za^}FUyR(3L4WsiEgdwY<1j&<Ay9p4`z>(j<58UsYsR9#_N<@lJ)J<sa+8vme_$o#~
z0G;A8SJ;oznbj%=KGs4U*5F_+2suVF6&ILUHnrrKfAeeI)7Sg;1jS68b?qL18-1E+
zG(DMwEP|uxFjwC>vQ+;!haiAA48Skvu{hUkJ$fY;I^YgeuoRz5PMetN5htd~Lhgnl
zJC%Cgs&{Pgs3RS4<tN77O1WO=={UbF5VIL|C~&(w8&a&a<0(8|PCZv>Po7eaL(#v~
zJ~T@DK;kLp@S-!oB${o<ku5L8=|pfhkmA3r#GXRaUY`YH(w0h!NQSUvNHNZ2otB%T
z8hmin<>D}PwKSU08Ycv!O0wS{#~I67WXXl9D&&{8a>ef`MPR)<n;fpqet<e?>@3KD
zPLN7G%nYG46K5}TK=$|Rl{uf010*|ZVC;(}vnLKPLlYPIppy6L-NGUo5UImH=T6s`
z)Jx4{&3?y1Tk^K2)fn&?32LyddAwJ1^lc<-!oh2cQ7cex28p}?2>ntApoy*`sNy1X
z+$2bDkAEcyCPnPNhJt*1gczxmpPKNAD?w4zZvj;Rg(fp-`5ALHYGn>oGV}pMg<)gB
zMxY9admSyx`XRT#Ua;U+5DiggiqM@{G9Mu#Pb1y)aj@F2<}=cKX}QNw!yG@vz1nd=
zg@!Xxh_e%*aTu|4MA0?A&DYaQI-M~Vz&jJn5Hv@WoqA7pzk=d9MhUnK7#pvnWl6Ys
zl@p8xt)S@SO3@LFZAzy`V;0WgT+JNxq)P4@Fiy>S&Od{+*t_tFmE2WejEYEP$YfO(
zte?9OY}o_MQx9{QMKT5bQxUEpYex%`HSBZ!;trQ^=X#0hyEEEvh_A{sFu-!%M*eb(
z`$pX9bdjqv46cNPClmLxHwP~c$#PtW?rXunG=4kfxDji1LoZ!}5u1D1GNQ5w!DulS
z^u%9px3G4Ahn&9#@Zs{l+`gQ2*m&OW-0t?xJ_|XmMa!8%a$29p1Q3NZsxMNi4Df3v
zNmt{J@ALs8C3Hs(?|jT(um>KFPYA{w8=TUP!>~RmgtnQ&qmF2C;AEO!6zn!<*FN)a
z7mTpk2ii9J3@N<<2hnIIJQOP@ZS?MPU{aH+9yoWxUuVStqkHF8d$empj7A6RNz=oh
zW8*Z_HoAsQQ3O|K8iuPTqzDPJ?S>1K@adv)s{hI(iogVH6ASnPcjL~D@GfPrO64&U
zztQ6EFrhzSFJQu@sGUfLt7C{wZ0oHoYWB(F2#W-H`Ur?C$`f*~39$kcyTuXHxZPN4
zas{`%R5|$UF=Bu~__E<TJ|WZ3R8psu8taMhjR@Pn0^ZdifZVv7HK!NiV*qO0?7|+N
z2(|81vg(uYytz4{w0O1|XAt2knHh^cx{ur8pm=m=m)ydl-HsNXZZ#v}k-KrlAq5@|
zFThI|#E_}S@2XMfZ|+%R#6W3)^OmH~InhS;CB&UBY<IM0$5I?Zd5}C{%(Xj;SJbK8
zb%J@(-VUI}GWUTr()-g>Gg~Go!3wZ^q)hj60Xy1WTkA_?h>;hv?8K@0=BnyX`p{*@
z)zL9)7VK$i6Q*hoy2-PmpAe_#V+m|n9O1+e^kOhD$aaXfd03J0D>Z7T5C#26+R~mZ
zEzb=1S*tVb`(f=Wa`D$_v6@@lRQTbpkICZbry5H^eJJvvcuU%@L`^l<DTDkJts|;&
zQGgj36I=x2hSII*>`f|rAYOq9ec*JCUL}D!Dhz~{6<M)IybH0-FImsUYi7o?(64$^
z$-hrS(h!zzs1D9bU)K&TU4xa?#^q4M#hB&gdWxpyH&WrA&LZ{V%<y9D?lAZC0Rz4S
zhLnrGVj6~muGW5JAO!+~zor6nhgG;lL!r1yFpd+LUw5%2<%wj&pkO+H>FG!5KWZXI
z5>n!%TBg}mF+rbf2V-J*cTbLIS^`k!vrl(&RWbffUDp9S^5Q!0?oBK47IKWx&E2{X
zOq^t2cbj+Wju6Uv!WF%fudc63G`l|QR#$=cFvPdzV7n&=IM7bOE*rjIW|-0GT~}3g
z;bvzW4L5G~fo2Berr^aK{UZ9RHSy619Y}xm*GL}VFyYG$^h<EyJW$t*p5MxTNExdz
zY@FmnLzjk6{I0BBh)td7`z&pFV*6(*$3L;6|0}Y^{{^2T7yPDs_owMG!w<!S;s1~=
z@-IFIor;r%mE-@w>Nr%lw#5?ri3LAVkt0>iA?Xx^N$3}t^B|#ELW!&kiUlV&_d1SR
zyEd-;;)ecQUtDz=Dw17>NLHDo8M*4_q`AAypx^k1gp77LlW<$Qw%0mgP70!_FQFVE
zeg~`~iPkx}6Q|SPd8?Ca078?hHyX(%XvadQday!+IO4-$qxn%|+)kk_EEtj?RxV@!
zT)V+&dHDKDg@Ot(%{_uxapwSbG-#0bLH8c5|9v*sXIk-`TWm(A3WLo6>s^k|rx&@s
z@lC$bfc&jBKNfKt#Ui^55<|p%<R&P(#hHvN_6Sib%%V0f|Daj*>9c*1>Wko$Al5=t
zFfZv~(e7}LjHLJu+%?5``Isy{s(W4a;5ADIq6Bo<pX~kFS)#B5+H$(|LVFNr9JjhL
zE8aWeUG;YFW*}qAX2(+}YRB{C%&SE`KeKoNt4$g+F-ujkMV9sfKzV6eGDoIqpKDcw
zD^JZ*xLkH^bmw$w)Mairn%w}N0siY6?IhZxTT>$lF=gYZ8(;pz{xrIZ^nUaHqAa3&
zwAW<ew0G*Hgn{6=*RKTs_80zBHyM0w7_e57fN}d$N5<+#x;h9Br5i6GL+=y7G7=5k
zw1`&4jw+}Sqr<cw1ZSEtAda>R6>KTHKdC2&CYfieg?xnyt1fwb5ln8n>Wq9js=fzD
zvo1C1JqcP|Y!Q|(jjN%RR;0}_hctH}B<sdxsvx2k6f5FpJx>fT^K2!K)Vu-7-`bn1
zt%=*1f|hxbN^h|{yQ1QPBEnrR?6u>U9f{^3yy|IwkR=C(Hg^_c<33|-0|XSYUzc}L
zR}NNIIB5MPLKD&e!GASnY54I3#jdSG8NgC2X%&QEcib;i$jW2Okd&B-{V>agJ>_b_
z+>r8#c}+sBg+OG7!VJUL=Hy|~5r`saYLpa&>rKmdu?JW}g|}dZsCx>M??^FNp;J+d
ze>bW}Zo%GH^~aKE8T%Ut^(X{_gk}+~>fpLJ=LP654D<1>*Yo@9BN2y03ks6x-;)~>
z9{3f!`zkc{qErV#y5_=i2bEfA2h^6y6)ZRxtUPI8uSHNoZey^r9HDv$ANv{9PbvXF
zRp+l8Hk(NG5!5xRgcB!G`liy)4Cq4hOIZ<iFXm~J#?zu!Qy#saIk4KMiG)b5!L)!j
ztYX9AQ9Coy;TNQqv9lC3Er_WRU^)<RFNTM9U{TpbBXWrzsEEJ;(NLOMa>LKP4%`FL
z&O|C~Ulf*+>B($(`%|k-IjX;Aazg9@tg#mo>IP`49|GCcyuJYW^vP~3=sEZ7oYf4Z
zL39sChu1AB=H!(#&#f~m`5$CjlY%XnzbNk+0D9uSM;Dh9$}F56;TL<@mD&ul52{cD
za7s>AVnR3004EGPaS%xtnKvkwr{t;Ar)?OWdqwhC)%bhlcm=&5>x&Gev}xD4qPbUP
zHXVhD>LSu4H!g?CYm%WJ&3a{4sg=k@gVZ21x1+wqA)1J#+M~b*6&u)CnXj8Xg{ZjH
zFF04(Ys&BQ3f)dW_`QWomr3Ngbd?h+wmx10lvA;v=`cC|b}mKva>wuf#*dvY0eU@x
z29|hfRme@FflzzKSG4y%PM1HYcqG@^`~#_WjO`FNZ^kf{P9W))NPa%v2q;3ei{f71
z1PftejKmxd(!xA=u!_TpDlcPl<^3y<z5iL<hsSt_NV^6JAwD8aiG7x?`+*F!K~0#6
z$h?pe$9_$M%rEB#BHAANMLLveb3^XjCu-I3P)-vBdYjHLuLz-w2ey!RK(eE~#8R?Y
z_atOSBF~QVbAqDOg1qSFU<}!<Kv#7ER5T0FZPt}pOYyYoaj`13wD;?NJ|a~1inw8q
zL}|o@`QT6V(-$w=;=<_oQ<*#nrM4~66tAhC)cb3s*5;bYC($(DE2YTImtzx*LgGn&
zvRP)VoyAIg;#Eb(_F4~K0uqXxm5vVDX#?{g0nFZc*`CHFno60Y3fLx+nA)Y+M!6%<
zC8f_Xpfh$vs(cmpx_Z}whlBJ<51t4k`j=tGwC4tI6WKKKYd#z>D?O?%eHjkjInfg&
zuz>^!EO^l4Q3}ag@A{HOumM^3w(OCBKK)}(-0tiic*>#25~1~D|HZQ+A~|QVN30dG
zQsuLvPUoQbhTWIfm5s=hO|cyX!f)F^T<{aVaJl-GX>)>{v-b_nZa2`&{3#^J!T_BL
zr)=+KE4IZR>AAm>)Cm+kH)}k{P45yloAJxK*NA^~F6rLcM%`cv%2<euJybk0@JtB{
zS|*kof<!_|G*0#&-&vqRy7MDzyf_BiFISv*@ig`;w92-P#`+s{oMmNJrw2TH;-05c
zz_CuXV9}1`{+&Udi_u4N_oH>F`B4`${@?ggB@1giE0h1hnI@@R+pe=Bd|G{>f^!WJ
z_bSC3u7GpFU6=^|UI>F7!%;;E5|C&d(nM1Esy&B&-F7V`Ue;052L=ixyx!XM^x}r!
z5m+D_b8QP&V{7T@<ut3U)Ic49R+qSqE5b4rJr*nnFckrei&8;g7&`DX0mO_2q;?yp
z9Aczb874k~j?L!)nz4CW@9o9|=tKsS^zfH7rw=EHoNn`{p~I-1p{QWFfl^dh0xeM)
z-x+njs?|zFBPv1-6;^^N#?Z|{fLvz%Yd~`Zzw3zY;wgy{rjMznc{gZIORod8n3`;<
zQ!)Gac<TlOf+SxK5xAkl#<5J3g1>AcATBe{vze6^Eoxc(V2<Kwl^O*pAgga#=y9<m
zMoFc6sqBg3QysJ*%^CtuiR#7aq1F?kz^%tS;DkG)kM&ijDSCeOZTbr4W1e!pYIG4Z
z#^D3>nX#ktM_PMt(9ju`z7p8secZWqc7+x<PGZ{J1$w5TBsTUB2{2z?y_QQLZ~~e6
zTwn3Pl5&}fe3rqU>&%1-cMK$;XT`P(_)b1-jb8SKq0(&pW60l`8{qFXlkfbQ?fw^n
z^qM8{^jP&o>HGLH1IKM0uBUo*SG~n<a7s)sM(y=2CR!K|SUOz-khn@w>?wFR(M8;@
zXga_t_3%mjWzBHl5nfs-bHAfariW*=OG#8SM*QjMeiY1fq;05XWx;6HKA&d0{sAI2
zcVA`2f?w!fi+eBYRkJ5mM?sI1!ntoZOti5AkUd*EC&#q55EbUH7*pB7^jh4s1+Q<9
z^E?D`eKr=3I;xwMu*t>sE>7(PJz0e&;D0+CC36kAl<Flb2n4#}`h({U$%um!^`HpK
zH11U~&!{xUEf+)~3U%!g$9OMizaIjbgzKAd#hbH!-K?h(2xxE-fHx}y;`th_oIi3K
zmBba~rLs01zdt=}xS{)1{-m&;o_s$QXF-cvwi4;fE!iX2T>R$PoA7a^nT|y1<J5S_
zhhQbr#b7j9iX8F;Z6yDmSbTnWpzCo$xZUz(E{?!5YpK^4_L5&EK#ejT^gWyXa6CcH
z`EvuSA_@K`x*4bMp_?5L>_oCVOIaGe?Y#nJPn}!p!3mzN4hq+{ydd8EHR~K+N3dgM
zm?N9maxip^*mPa!`k-3|(BW3qP~iup@)7Mtj9;>SG5%`VU4u+!mC_ZJLABTSJ*>OL
z?iPvm&XxV+Xl>SyNS^RCR~%Gbu9AOlyel_fx2!ejy1deK3__!$QvyF6T{4ACZI^3O
z5M^6JOE{7+saO0g8@=4rPTuohQ*}RF0$sVVd8U6@#w;ld)A034`5+O13^ZR>^+o-M
zY;DK(euH0N|BfyV!vdXZKk7D@AB_sZKcI`XiM5r9f#tt)g8yH;&;O!zfwR(t&5ty)
z^PGwm4nbU$a+T(<kP^DMP66zmm_AuZF1%kdc?69J60ylL#ND-yq%tKsx!l_3>S`KE
z5)3d#zjAqjX~$gu`RohLMhc2*c=(hloU7(nVOr4nTC!pWMm0xB(*TyblF(!J5rYGJ
zI>$sQJ#&cWfpWm*>`gOBo)jFn9l{VmOnq=TwtzTvQ(p8)@+5yBJLnr%!8j0d?3kpz
zsIcg6uhnX-Czf11BA|mMq(5Z;;;e$fPAu%|hbgC)jp@&Mg(i{KbmXFymKJH99&lZC
zO`~d>tAqnPwqY1<<Zj(UN1?UkPuZ;zRm=?u<XGCcbDE-)jn#~imM^oA8M$LV(@duM
z+rLAwIA)x+$rmz$%aG6sPx!iCYE&}cfPGLO4^(bNcV`+}eKT)pid(08?)2^U$|s4I
zcZ!$S3l2bTy`b6yFlD&8t^h4w>F%7;90`iFwjep&oBhQ6SG5y^R^?Jmz$hCU0wsG!
z@0|f}NCY&0i$;;4GbAtt7@{;OeK=Mrmu_+%Yn6G@k(1VSf8Ft&h}vl7k-@P+vv`S~
z>HNA=Q)DN12{x+BIAwp^WIr2^0!{uRYTtZ>zu>O*3gKWxzGlI=5*#^1_s@yj2~2xI
zSyhv-eTF-nZg4B~3+LC?{Uy_=mbqlwCF@_MzpzfeqNcX-&xgV}FqYR~R9!f2krL2{
zRc^_~5Nx2GSg!fcfy-BIYAAoG>jG%T@`#~wFu%%QT)3z<10kP8zwNIIYIUwOS~l=L
zuM`3Wrzu?d?zfZUCc-jN`y6lnQ>P6=*_Ga;A2n4k;XiB5jI14LOxz6q<^O)N$^TZ)
zyQtwQw=a(L?RiImCD)iztB-uY#=x{ePv9uXHbB^4)u`!0G;)Qo&Dp%T37C)b)S#!r
z_Yv;bdsx^N$-J`pcvh~b;@q-rgJ3qD#uSYdLfS%HKyA}S^2w}Kdtyo%+R<=7(A+W4
zg|DV0=`(50i0wmwPW{OS3&N2WVKLq+BfFQXO$bbulBnb&CDieVM(iC1lx~L=?~bG>
zDl8#hSu73?P9tOPY%S;`du)6}Cms*Qc#JX_YVpHG38%<=2Al#3LqaNSppO0^&OM+-
zQlik3nq>syBRExm;lBWOZw8RKi40U+N@@7o@nWYp;?811KoixjHRncGfVzl$0a_^*
zG~RH`?C9X)3IesmU8m@<M~Nv|Hk2EpwgG$veTlpA711vjhs+278}H-#f>j>?#pKkR
z>4wv1;idL>VBWoR{8Q7?0lq<&Ib%i-K|~zy*q6zW4pAHBx2@ES?}OC;wuhl@StsF}
z+1!e*S^<hnM80v)`<jV+fzzbf0BRBQDW3~_0KCc(Pt=karGy_GmrV*~%AFeYJAEsF
zHM7xbgi&bD)}gc#rL_R^)Jjgj-{pgPKiVaJ(Youk;87GhIkOqKItqt3s^In{`ZaB;
zq;Oc&7q_t6-F!9`J-?=AzHP;MfIXND2h>9@BavJ1t#L=Ch?fw_`vK9LJDlkBL^h)L
z8r|@6jpvucB#<jEGSx#6yaV;!xvIcUGK4u&A;BggY@jEqL@<INrVLuFftK&RFaX)H
zN;T=Nly>C1O7-S(o9KhCd@^(ChG$aVJ4y91EVo-y^njZEr~bT#cAXX4lsWKjhYF-8
z*LZBo>g+j<BWNO|Zos$?k#g?jJjPCjWobS0?g3`<=9~j;nWo(j?PAM9(A^1`qe0sH
zCG->UCqE39ftgxb#?;&-qMi%z?DIM?bVtmtbut~NUpV&!<cTaLlob4F`m4N=sq4;@
zF6;*{5rc|3%7nJrPxYEbs~@Vc07(G)xB@{7rZ+}x!h|Pm)N~Tds=6>JX4}NDDWR6M
z7b773X`F3<N`RJ#@vESt2$#a>h1@g^mVqHgJ&dFS2?P`xnn|@Bj)QA^e8M%w>m5us
zq<H-~p$Bp`)})34+s`;1+hjw=KKK6X;-gjSEA~pZm*?+-UwT6H{rV#tIP*S83f;7V
zK#&O<7#nPm2jA67#%8n8!7kl1=*rd=&fz|}NEc5cNavr#WyP+Ev5`taw7cZ6Z{led
z|KiJBwKHS@t5ovyxc0_BsHCDsVX@KJm$)kAv#$pue{=)_qcbY|@W^ur8htA{0p<OZ
z;RhrQoEbywoayc-^U|;`tWeJ>N^$SVHUU%6U`uV(A8;Z-a0E=%=q(??Q`F3IX5Pru
zfGa?D7n}Mh)s|iC-Jg)n3BR#FJ{nnBg7}iaUfnQBRWX(I@o4rXplSg_iG&svak{50
zdP{vl$nf-sIX52RfUj?|mNVS0y2ZTdHh#>p#dW9c+RoT^dEK>ZEDs%Q%kRAF+}&v#
zdN|wDcP51Y+Ovc92s07v3|wiB!Ub`dL8Q*t8M>|Kq#uhH>mEhD(ofPLtM8@9HA`J&
z3sd)@i!xSadqCECurwVr4-uyeaY3DN%f~#?y!~&zG}FC9ng@I%wW3_7cK%uI1kj?J
zPWFM;l;Y|L7EIE9O-cq^t;y``g3?^ec&xW*!r7Kg_`>Axie71o+RBPJL`WGTNuLz=
z$J}YyJ1arxN=s@zGE;wT*kCoGyVrw@i5({+Awtco9g8d@M@QtDpRX7?76ACPV2m+P
zXKH%!(pF9>I+)ACko9$U@1q9R(rUW9C39-Gd{5cF&|_PVhONhzxp#w1o{wn?oa3xL
z&{}_aXMP!3ZDSVeJ}TQ-!8)4^xSz+WAf|GLyNoU>tZ4;h#pYb{c+UM$fHLVuoW*+a
zhpya6=HRj(&=Xgw$02EbCnyP!s)q$W8lqhE$xs(Jd*IZhiAOFFyK;c>{a=i|LzF1N
zwr*WjyKLLGcG<RV+qP}nwr$(CvCFpqy3KRPJO6u)>|`s)$cW5X5$l_C)0ZxA8J}P4
z9AuxnA6j-2<?+Z^hv@R-#<H8QWJH91Qlu>BVi*}T`9*gxu~gbE-QvBdYU(5_1Rny;
zcIH+@fFdtB;^W<KMHKLq4yv&}5dHdxzv^R{Ckwz9^s+Y6qwoT&s1`HGA=X10`tev|
ze6!s>cvXJ9?4Rp}`tHBdU{f#8ij=x%Cd{pueI^kkf>^6$A}L3fWa#l*z2=ZH%=pTX
z#wI~G;*1WQ8tmm3=(Mfki8AJ|xsvy55Jo|~dI`i3x2sj+LUEv+x#+My))x;_4)5II
z(!u?>5v24cW(0y0*#{k1S=>Y8E!OG=8oCus{A#HwK$=xE$WUOHAE7I|<mZW{ziD)p
zAy?e=z>uLu80pLxlBzl~%ztSp7PwcyoEA7)N}o|0F3Fnreh9}cSUA`>U3a?)0ZCpI
zT_{tl8PJ-Klojh62(&F3QOnh$z0Odp5<G+tm=`aEJTY$xlCj>%;AhR?joC$biw&jf
zPf6dJ`n;%IRkA_aHtFJZ>rPSCK+lKf_<AK)s{WjpdX)RRSD}T};9QD4PJDzNfVY!Y
zRn~HYpi9arby$$N9di$J#1qoYvmX3_xs|7P`Yb6SSLskpx&l-6fqhS81|+`}k=#N@
zF>Yx@pDS0Nm8oh;=dGk>{dS4<|6@U5I<Ji_B=KB@Es{vm2`Kf7UXDz})p2Y?89Ggu
zk}<ZyC1aiuz&6d-498oS!=pmZe8L50%>@ln^(&g3c!BcXU$1ln@nbfH@VQZ`G+Q{L
zl)jc^ZlASeWc_H%DSQvpq#Ww2=9!#C5JRcE1^-s&u_NZr^N%uIf{QjS#(Qzu!AXjX
zYg6V>b?=Zt`_MXt;*0CL<7afiI^l;BH)GamCo9(0`@C00Y_3>v#U^U;(${@X?MSEW
zO76wdHK!{)B61)9-=?J}opznoU*f^(?=HZ9OLWRH{6ByN6L&3tm*=Cop1#BUI;die
zBbyWSul>@R;851)E1~ic@>Px1(kWcx*9BisiHM7&mKeySk9ym&voAAb(Rx9Z%L!?s
z8+9#-LB%S`WuAjsbC6U7=9mFJECU8>)h#j}T8VPZ&navw8+y_aA;8-D;v?Y_NmB@z
z@9T-qEc5_250wv-!}kZL<b!7)<?`5ik9eqCqBvdvGAI|tR4W7P<Ox|`pPxpb{5&p!
z{kS};mFA)}cKX_8#b_-AI^-(~c3^6E3xGuuhn%YDlZ4ce<X=Iy?o4YTB)KyBs`FHF
zaz^Ez$5Fiz8VtrgoQ6z$oxmjQqNG#)i*CGa=t%}LKCXN2Mh&I?up3KK;k%pmR_VUg
z(6ujwpz0N5{PkC9_lIafIKH`dHSSk;Q)a7i^#Ejxaa-2~p(O|QaNk$&*Qkeh=y<@q
zsXTplp!A+l*3YsUKyh8cDP0ns3?7Gu#xJk0`KK+VU}}G<CfZe2Fi4Xc*STcr9*)m}
zta`s?ia!K=`o)Jw`A99(to@#9=0(_iPoY-DZ^P?a$PyXfBHf`h)7{-9p_I?6pvCva
z$HR^G1?n>t`eQp~a6`jsz!r-PYvPL*){7Pul6ah(?9F{Zeg7BprqE|OvG{key#Eds
ztp8HbDgWQc%Cx+6>>@op_iC>}kwaBO=doa!0&KBn5lSU43pH9(M9Cd7hS=p^z5ne+
zz2Zhg0Mf=EB0Q_!ba&gGsb%blgA_a9_n5Ca1f`XwE#T0cYX1z*34?`?6p(|n>Q|c}
z?s{{4aPzY2z!2y!$~tDHBd*n7^rGD(Nt|0acT$JuP0jAkmW^p6c0=T^-i@V`<mh%p
zeK#SnSmA*T{E6XiAaFs+@YJi_lrG%K{q5lC?BQ>;IY-#fod)tcU-tqvPYkM>#zJv_
z4k31CvM*4C)bU7vsti4|B=AVi#)}6_AUeBP<Ya2?(w-Hsn;Wv?F#okK`T=k<%t)tw
zs?JHlQ+GoR{~#~vVyqeLstW7jyo`LRy79+%mYo<!hj(#}&tT%G>E?FmGUYX~`TKiU
z5i$S3H<I!<PBd$V)CP5Xm#{es=&r`7k5`m1of@4Qah#_93yi3|CvpwTN|@`|h-6Z|
zdacD}kkV8ynw6Qu;MP1mldK~RpW`5IX8=|p51U4jvbFTEAa-7C6j^>T>ZfVFY}Gw=
zM8%Kr;?Y)zy%5-@572*>^4R3sJVd{59pqQa_TPkT#%@OXPQSFH|ET2u544G4Wog?D
zKKSkjsuHCNKQ{Qd4MB={vjjm(OgXXQe@5v~2DV0BmD|pKDqlC*U-WBy4rBRG{dKk`
zJ6-A7+Akb1r+p}Bn&SydgL?%(ci6hQdj!SwC``GtWb}!j;fOGY0;O6Nv{8-F*V29g
zo)u+YCH83H(5pcR8B~~p@uNxsHFHKYz%+kYx(yq*LEMf&stRb1v;_0Z_U9=S>x?i!
zItY}^^w{Bh5HTVh1oWq!EXKK`$q3|Oz4D2iV&=51U{GkIN=Y)ebhfvqZ6&1c1PC>!
zl2WYX%|;k>1d61!Dw^eTJ^u$XajX`opq@HebQ0jvlVww(iqY|c8T~>{rjDTaTHrM0
z#@b!Q7e63!#$nR%Z=3+t)JlHT>lrs*GoQv*@J#G45XLN$T)b3+J_NTTs^F-eL1?{J
zpuwHVTABO2w9G0E8a|=8BhIT`zA=F6OKfAPx!c3vE?nNIe57IiKQ6KRLKA)F^oSFB
zi5=Uo*52CdG)_VDV-{v`m7qwbH2-Gf#gj<=OL(JyH84nM1<vI14~FZK<EqO0GDZA@
zY_BiI=!r!gaqL=3k@uVpNl87<lHao>r`353+CVan{;fk6lW4N}3wsVY<RzK(F-}Kp
z*&4+DH?fPgyU&Z}sdM$b`RVft?#2M%bhq4$(oCp$0qqExGq*{zWc!p8j4~P#Uj<(4
zj3X|dxf<qEW~gDgx(10Nb}lC7p*$FbI=m6!-Om$q+dJBao?MwAAw+&~DdQi@SfNHY
za#r2|bHABQt@((9ub>0Xj}9PwbK-nKmk%|nf(q0^R}0Gwpw7)PVjYE6)x!pM_VM~G
zg&?|NQyHDvEuVZX&Zp6>oF%p0wJ!%mE1*FukhGENTdMj@s$7kiKVC3e<ooO`#h2})
zmlCfjhvM{#wzLH$)^JtrQwJrp)m!WV{Jy;`1U{4>#hKipU@%M%BezH$?Ao;sqMM8>
zwti^1p37j@E6|_JhYuG#Cbihiv9L1vV1wrG$})%uoqk5PwXqoWuA`L*fr<#OyrhZ0
z&zjBoOsO)msr)q4+*c0uO81|WPZlP3QQ`N*+v5L+|7mVy{QofZw$Uwr<-WI^y#_HA
zOEOw@(F}81R3LUsrv*(G4ho*g1a+x(XmvE6<ASB%FPS)4y?#vHUYtD87u)W$ms4xi
zg_zj=^x$|zK8?tFk005sB{pkz-A1<*M&HZJAYL&6z3EhYPDCmE$gKNL%>i@?_#t%E
zCi6HC8DnDi9ecD7hX49UUetgK`b?6s{RvqwC=9f%fxMtt>T<XP@W9uGr0x+UaR&ox
z(d)ocgMr%MZ0cZDz5aDVU$?6vJ|sy`3}wH;PYpxIn}*@?NT|HxGlZ`Xzs<FGIkb4%
z*M-Mrjv6A|y@}icoDro#h_@mWM(s9hyu7?j16YS0D*p|$(SVSrVlHh*zCbBxwP;q|
za#h8O?Z2tNb(_=jA-5LZ>Mg%^r{YQVd^71@x2iXXXH9i(@4Q_D;_((KuB9zW%`G`0
zI%yj5_WwTUAw+9D9a-+vo*`r#c-nR=Sotmo{1!+eN0s<u1P}+kBZUqW^Ln{BhaeD=
zvLeJo#>w?v(y2#z|3)!7FBWNS8#O61qBaTWJXPZz;d^7~y<=D)es{52Lvn))H~QjV
zWrl#E(aj8Y?yPHRVw5hmGeKL~9_Ud0uveHbEr5R+<yIgkqZ|l~0A%zTkYPQsfRAnT
z51J7ZaEyDnej#o$-#z2w-)0=tBO2lMR%i~H0rrG9q^S9huT}vJ12A!W5<m?~n-rr+
zWHWf8v==@e_VSp-r2;f4Iu59Ep}@v{(-*nU)kJ(AJNEX(!tbQZ?KDbfPObY()X5F8
zNvqx)H>am@MHVAe{hG~$vxDS$w!jk3Jf$TS%BUwY@Lohs1X!aAzC?TSYrl%3@h-5=
zo%$575`;d0FyYvtx&Diu15>g(v;6dU{z(TWbwSZQh_cgZA6{^(94WsfK1}OAOI)lt
z+uWKX<<e<XlWim+N_CyeW#g#~y(x2C<fh$dClcShjh*p+?Y#b!J}Edwy2)Xs9omEu
z-xHI5k+hX9V=x-$uut8XloLIK7Q{_xb(nM;W)hc`V`IMYwH3pX9UUgwn!DTfjbW@`
zy29Z>#rlC+42_ru4vGVuqLq(r#5^aaGSN%-LJieFwo(Q}kYl9Ri~xO>mrL<Cp%gYi
z5u%DVpfP`lQ&3NW(K}E7i>^&=#n`FbS{fuWxMB8Cw0&~<vtUk~{1+$}Mm|gZexGF7
zR{;K}l+0O2<>w4<ruA(3w(#%!!vJ6v7^WLIQjo-1*Do?HaYRZg{YE4<KQ39QeL2tn
z$HJe}@kA3@NiK1?JZK0luWEfmI}{Qp|Ct-bM-XM1sXGD(s@?yRV*&bdl)~^b*ZqdF
zV0Ui|-}fdW6pC1hjUABf6PEjvlSifTfiQ5j;|=A!=qXM1S!|6il{<(Hjp1h4VY^|8
z*sbI{3741h?oJIi7c{tapBsV573)_o5oLs(i&v!N|6?0hcg-tkh1lsrA+}K8M91yE
z7Ta$<5J7K*KOh>sYi>t1C>K`9>DtJqLKRGD8p71V=1`MXJBEW2(=SF#jOkFC3_a~5
zLV29tAP(-YlOZ;Q^(YAZdn%qC9&!5CP(j*7^RQW4*^}8Mo94q7Dc?Kv@sQq1m!N_v
zo_F?&?@ZycUTy_A?%theQ~wwFy{1F9`;Ufm&Qe8D)Wg%Kh6&#E>rXv@akp`6Y~7~X
zbNnmu1-JR(yb;oUt_9(lT131E>2TC~xd}1w0|9NRDaWMw8F@Nch3=VGc>X4F5d>`}
z)SUu(WnZuS@tk<Vb14=dX^sEV&}uuj&)f5x1~+*{JUAAXNy7cQkpxyKFv)vT=tAqQ
z!51VNNvzd897%X58Yx6oz2=V#Oz5SqONhg_3YD#R#TJK8tpAp7n4wWIAUlgANs1A(
zWjNhz%offjS|~ODMlZHs{KF#fxMG3!1j66-*I{h;@`zw;3SFd!<Fj}YQIFQ#MC_8M
zNeumKlcDFoqRrsAIW3DGszZV+cWZNGhKfB^Xfnq0nID<XIVuonNg1lbJ`IDnW(2yI
z&VyE(IGvjpxv(KbCsjEqQbi+&Ap!;@ABTtIYP&Ib#5c?xoXKu_SrkEFZ_(`7{uH|>
zsD>m$to@;IdgXI*yMUx*on;O7q^CjJLzCE<KFV$n+P;e4B|$%DswBIIksH1L`KPk9
zW*s`E`Zc_5{dazzv5VdRCRP6*7Kz8+){a{uF}JQi5iJV!B<|FbJyz#45sf60NTRYv
z;w0lcM+r;F%!1-v({Wr0MC+MPzP<pDSnt8uGi&1}FC{KG_3P2sB7e*PV3=~PdEhe*
zddYc})}N$_a%^utk10MMn%mmMhsD$Xot%gsG*Nz&;jkLm?rb3|cauDqDB6d>SlFkm
zm^-J+v;e>la7>Jt>y#of%#xXtV1k-Z>V`X0Ybm0vva|%fmZwFk-}4^{6a90Ju*=A-
zLRDR7LOJ`e*I*%>9BxZXUZfr$EpMC6zyhl2Bga1^MjJLx<U0ngNX3Ik=F*b}a&c<o
z<>J9RZ|F!<1+Y$7mQL25$*l5wP8P$oa$RIH{yJE1{P_5&2Kpzrx>#M%;X{hWt+=?}
zVQ!*W_I=qONY~)Sl`X4qC%rAzU~utIv$SmD-m=$<ahi6!!Tup%YMXHRt?{uYs+W9G
zT{5yFqSx&w_3EeNBNo-H_0Z$Q{d4>3Xu`cd<yczdc>GbFCs(_K51Z8z4wq{axFZe4
z)o+gxqqHtgnE@&F%sJ)64><k^DSqH5l1hy<99=+fn^>9!)m4}U0R<2p!SCr#S|NOT
z`kpr3hU@jp-*1<zw($ZRT)Ky9ShD^)*;+1e8%*iv8+6r|yOLyR+QBez;!c&vy}&{q
z3b+_QsRFw{^#B6aCF9?P1Mxxmn*7aGR3_zk2^+yVSZQ<F%k=%3B0z8V#~x7utoV(y
zODZA6pFHGxp+`-nMzq%iA9qH{d<1C2oCvx&W)pK6qs*RA0)SQpm?5U+b;QwHoiKHV
z@ft?8IL7jLak>*#RrBU2KSMkfWF1v!j)5JRbK4uR0GdFbJ`Mok+6WEk5N7561DRI6
zwaFUbJRvSG3f!Lr-W~W}j4iEXKJ4jb4m-%Xd%h~~R@Zu0U?e~(!h}#V(cU9Vtj-et
zcOJ_XSEYW@MmAAl`(FsU(!SEuo}SoYrUaZhKCbVbTVQngQ6#aQ(`KxzU>X3}m<*jW
z^0nk2G)!C_|Dr)g%xarZ93CTX74yHf4#ZHx>9RR(f_=>O;5*Kzt<a|ljtAE7`#oi(
zDIAaJ*d>2%A!BVA5_*7YN7@F(UaWIg4vU1=As<VBWPV(8{;lzX>kQv6LKBNJR>!~V
z#Q}q#bxB;jB^`Ma-aq=h^Aj(cGss|u>I{E(Rrnq3JI4?5K6Oz?Lb4DS;aAv^uaizr
zx)b@`*65G=aT|N)iD>`vN`nl`$SzIA%TNNu>+{7zw^N+7CSSJB6tI$%k&ikM%anFY
zO4P<fbKfSH$=d<r!}FCDjmDk?--DT=Z2eRUoEBKIMev}H2eiksOt`|dVB8K*#n)le
zG;dS5bVGJ^fYdyCn?Jn?dIA3nW1rI&<TukbmRoWonMX{%hQdd>tk|tnmu!N6?~iY9
zHALwgqWQ{Z$z!FSVJX(u!-O+yG-~pS<szZ<R?Oz(>4a<tiAvcqRI~CoBYSL!74`1+
z^$21#sDE*Gy%zlKj;@ytXl$uJ6*V8fbBOnwKxvYUvp3-uXdQ+6(i!kK*lfA#ZrH}|
zd)YH)N3{TlC(Hp7eAcR_$Ze*QNr$Alk0=5~zHy8#ISXf}MOUU)_+25PD0Cm9sA-U*
zrsWm-9^WRuYssTS1knJhDF++5i=Rt;fSA$^$)0KtXY*HDgO#Z4ybjtQ>$Rvy+(D@k
zgp0l=4V7F*&whF7SW|M7Se-<xr-{54T49(!p4a9zC_L;tM<o~)K;(5z1g)%?5UuD8
zI79+D#sH2?MUsR$J9!!`sqG2s?kltVYhFKxx$yDp9aQWGap^qck5pKGnWtGneM$jK
zoVa_)a17I=oH2=ZCwyWPU>G*O3Rrjsi`Uj{6@Fhe`(77LOTNU>JnC%u+_em7QowNJ
zXR;oRYm-vEB*C-oLj9J^_LskHY*P@gt)z&y<ExVV2u{2|ZP9yH{`HYr5-B0YKz7CD
zfy`Z-(M9uU<iD7wT%PTxd5acc;YBr=msBdMC8yqoV7m2#?l*L=zK$g-2x!PgFWBIY
z2hkehWXp|Wi|#=ey51`OeoSyY)xpL_1ZH%8V|qwY)nbcw1n9@|-j$O!96t@J7Zc&5
zMkasmHy&^35o1_n-FXuSW}0he2sH=B$|;mMx(2E`_F8Dj7+H~%4^!T3oxHXCrC@gR
z-aMA5N;u=fSCkI_jMB0Xjk~|%qZoC;ukTdw7Hz?-XUtL4Wzs!tnS;8zz9`9NkD$Y<
z>KNYX%2drfvuNd)S_Okz7W4{ZY=(}@2d5H!Y}A&NP{UVpl>d@nRl2yjdi?r(*FWyo
zXIgssMMg+O3)I%BkF?Rmg-6UsD@Hrt6fUhis}u)df80J8Y{qV1S`Y4gK{VZ{{xP~1
z<?{5A(b>bx+W#t|%7f=d<1G5&XKKtWxos=n(07UsO415=gpol6g%;@uPJj`xR|2^6
zvF9&#nN;Hg4;hDDlryB5R=YU3__>`_RW1G0{MJoCE@xk1g=tsFf@w>$C(I#1O0MKV
zaexj}9wg@u#(V&VcJgaRH_HhG5Z2<D5xA5$tlcH&q{teZ+9{4qBy{jIiUX+Mh6Ve@
zn%9PYFzF4)?-oK*%qS{>tl*8jL1ygSODHo|`c{+;FKuBW;fBp6mqlTN2quK3RhiQD
za1(CA@mUk!KH}w(>e(s40CJ8h6If3n_vDN`l^ZMHmbvhd0M%_HLHy`8F@cPiXr_;-
z7H`wA`8>ixP~kb*likuV&>p(>n~y{mAZvT3Cl+XN`iB`80ib#0JnTi&jhSyJUq#H8
z;EMxDuQfVzBEm5plVcVyX|vf#QG6K~HD!yMuW8M!Q^uM|MT8VW(AH6I7l_Rfx#=DJ
ztPR4;yJjisdMN%WuJtaUD-g@@T=Tf?{l#>h&vO+6!t3G0$^NGQ47c~_%Xfe8iKo{m
zM`HsXc4$UW&o^4IG6!B_@F-$}Aj@ML?4|cuvz5P%dyS|I#i6KSAfLqmzt%Wk8&b6#
zfAokp)WaFlUa<;u)>Q(U0fV(NYuA_O0)Y{llH_LXLBGf}^x~vDl%t7*GL;_(BQvj&
zYLI}!ACYkAI<md^s|S3Vaw`ql&Fy$59M37LSh`5nT4|Akbh#2PHbGEaqPQW`VCiKb
zOkY>kB~GQ&vI(_9jX}3tCiLz2LB~HoR>M;T0JX%m1gvUS-T@5gZ!sgGJ$Ri~Gk5C{
zEMm?>OG?$$nXT0x?a{o!1VS$A13D-z9w>@%9#1ELs6fYsDPK&0P<9`O_?S7S;2BM5
zX^!;~S-h(?A|dEhiH6H#Oo8d!{T6HInS6{ysr^zMWU1fOzh;Gb&1gA?a#FQk(??lg
zF3^g>(QbO&fh>L@XMK3qy42{zI<jPP4x5X^z1Eic`UZzyx6lV|QgWQz3g`%i;0W7p
zGv5dM+JKsOwpiy%gPV3S#|E=mT}RiN`_m@k^7Z=_$Ams5czVZNM;M`fE(x1qDZ~s~
zXq#8G%W|Avv~3?K?RbzFmJD7}b5we<`s;OGMZ3(k$!8v<E!{TJIIkmop@hm}d-}N7
z9M*lvk-}`*9da$%V75dNv_pcB2<^X<K#@9nz$^#~K}zf&AsRdIHsrnGkd}h7(&X|D
zG&b=E51D?IJ@B@}Oh*n5H2_ywt`EPhX@hMjDq<LY+f~6T4tLidbFlTOm01MJ)X_5j
zR>8(D&Q+)yW$z(>7L{g(v6<SsnhOG~Hd#HyhfgC<*au|cXUyu;q2b%O`wl4EuST4t
z8wwWvD-gDtM0_&;9gn=jXeaD+pYOzt$C+B^XQgwWQ5fkxyQO{UC8fp?26d_=Cw6q<
zjutRaW1BI5%t(L$6RQrRe&gz>O%PlRe^W9lJ2s7aF&PwBJ!J&~UHwLkfM!~AX6Y58
z8*UHpCk)^;7SKD$Rtsrm(~o1(z=}Gf3Hk7-OlDD&Bqa?jYlp7U;?KVQEL|Q?mtU}E
z;aD+;wFfPMjJsZZs~Mq1<VgBnt^+C2S%P|Nr7ep|6*-=P^7N;-g_=9bW*uW6J=nS{
zO+qJeCTXf7^fHHNEr^JqwY4{G)KwEhmASYD91WX{N_X-en~|*h)2p7b6n<ppsNMn;
z85ev*pH%L}EQf<w)}SNBAn6z&z|%>)*gYJ&nF8xb;id4$(wdY8!hQ|6njSyXYv|5K
zG1@f`$~dz21m2Le0~p+dWirdDc0WP8JRQ9x&;U7XMA2eg?oN5f>E8W|epT!-l<cg2
z5Q=MjU8CGeFd~eU%mIKtL(&8AGaK?N=Qn);@qMv_zGQ}6(?Z8p#roKHQTrn46Bp*T
z%dQtR=`+3DLPqo&G&SOY9q8v1$A_U~eDmu<+hL<`{$@^>9Y#E)CiW$gu5t~w=^zQ1
zMP!Bvd_|XAOiTdpE*HO^4$3wNEBDs?OWh)q$c7d3XK+Q!m54O(2GeuhVEBN6m-LMP
z=Hp<8^PNq~vGr6Tx|>&N^Ze>K;SP$T6KEf=+ouLmZ}CkgYO0@?tY5kyKBDrULI`o_
z(K1d3TJtZ*;cnrmL%Fq>%nc8h3++bblRUP0aE4%-Om*|o0t6ayzFEKOZb3p&=_;Us
zLv$P439NBt2EjLU=9#|h1bzoTWtr0{LScyAE?k|c7+BqSSpUgz<6Eu(j7)vMq9x_o
z5YH2`(H54yW2?vK*Uzi7v+?!eTfHXN$M>Vl+k+2Q>`ojh+(=A&mCRYR7hJ+m7owyv
zJopfq%%83A<$72K6H>V_XLj6(7`;I4(Vvw%n3)yUB{uU;e)QLf02|~cm^*2y@->^Q
zX33X?Qd7zX$W|vSvsuT&lkb=>VTSy1;KN{<P+M~NOcoN3>1=~J#<5UPxXgwuJmk*&
zDYnszrgHmJ3=6p+$uobdnw8_jk&xDML(%V)n7A=b()c`niXs|DI}(oTN~sD~VKNSZ
zB(<i~eSqmBqqA~|YVP6P+gE_5wx7#eYmOoeXh+`uTgId@CO*Cn9CaxRdE^!@n)A7-
zszaoU-Qs0q`BEF|mYApHU#vcu$V`bKwPUDFy}uag5c`TKs#upag*7sh`szS~CJcoA
zM?om+87yRA{bSJOIZ?J4hb8H7m%hR|0hESskqI|^tkNwEf?*_+K4+?Vs|%$ds*f0N
zRqzMelWCDuV?DV+q#fWCO94x&Izz)A%(`Th%_J|^7bu{b_oKd0-ir}3&RPEei;!rW
zq^)voWF>JwSAaW*J^pLs(Z4!bFJW@2BUjD1)>=QSAMr?nLG$muW<7aU97%mC4&w=Z
zl(L8fm5D!=qZHuZ9q7zT2TBaYXIfBqPV}R8cep_t%%<#AbR)`FisXGPT~FR&#!z{J
zDCM0DV|?{Ubu^#*^2+QX_bZ_Ql(<PmjF(s>`Z(LHznP1~TqRhV<56Ld2vPN;L=8{_
z$;r%s^hdx@#OCX}e4xG~^TW-fAk2SMW}t{G0w#`^s!ZBNxO*x9huhIeDK-Y?E&5zw
z&t&qQaTYuOTHWn)|8#fFF&PexH4GgR>`=NR$O>6*^QC0VCrC!(U)+X?mU<d#RRH{@
zDkTjCt*0)nmFpSm5~OklOcxc|A<JurlH8?Owd2eg3tfM)A{|P+<Mt&iNeXSj3u)VR
zR-Vd=$E(Akn@H{CFhTZ{9g4IUe;Jh8)EA<%xoqM??nw_U>y+wl<G_A|n)hP{xQ|m3
z`se*i>0>QfJj_l~Rsfb)Oyc(^w#U~m>=OXL#o>%wB<%VSli>)fZhGeYDe>K1z#A7>
zP{H!&^<()MtLNX;Qc+0lkgSNGvd0(?n@M{@!pVJ!1dT}h^S}eI^a{?asM~GoIM*XI
zJEP78MQb;Rqr>sUN5jnRM-f#pC<3vz=tCxlA4fc2NFHU^#GWCfA;#{eSGt()2Ae36
zZcvY+6BH^xv4AlF!YN_u;p>d23!a_#%YFhcv>v=gs5Oj428;c@8yM4Fmq0JpMg=XD
zlPfaF*YU|~TVyN9>BpyoNW^<N6=(vrG2lo=zY($3OlTRDuWcb<%~)8k!~~z@Zmg;f
z+5&(J57<aNxq25{)Pb8x?dsOH$X$*Nxtj04Jm=lk`1MJ3#s4_JTKAw56vKJ{Fms%}
zI?imRh6?l<m_M&M{Xu%Z=_m~(;l{z=fE%4@(NUAL>sQ|S^JVuFIzL{&!<+}(L5|04
zbYjt)%@UG9BWk(|K^Fvk41}}aW~brGd-Dk?Si6$;7Wc#{p5nvMr33VbK#dlX0tfOL
zh}W)BxNw1;b~?qk;-K@_ixO-~isM1qY7jFK8Y2jMC&Jgl{fB(OgOVOg)}WT0AR|Qu
zYxxrhz(iLcET}h{O*IrO8Y!8QAFa5E+>#vRNzxft8}3#%nGrsR-*y~n)n5o-Ih3)%
zUMX~jK%$X^8{C?%xKgxRcxlqGp2id30P-)#e9X~}`8hXwkH^Obe)#+=leA4c5%IMd
zn1#H#3T9A_L8fHg6MlGC3X@rK5dzFYmencI8!I1O-yEgJPRYor5d;dDG+AV?xdyvj
zvh=eesruk}44>>p<{xxG<sIf3%!%?LEj<Y0oC|^UR0$(@S0r>XQ}cAv=!wPtYvYcR
znY)DP`-&#-%q@cC(8UbXLs!~JqZ{hqO>sszWHMGh&#-{$GdqJ^!>|ZFUq{fNcw3b7
zqjnUrsCeqOPe0gP=S(I6Y^vS%@Z(d)K#RVeJlNxdqgy^=XYSm2Wx-$dTmPys$QJv9
zb$p`gkFC<l?1Pm6cRY-%8+`_nt>28_O)1R{(aFw4{Q#_#phauIM6tJKOq=;j{=R0n
z?cT0zFEjd)SZXaXiv1n+B+7IUUEI(m^d&==c5Rx8;N^I@DBf3VE<_7LFw-Avj+A6T
zD-o<aR|ggTHfp@IChF7{JGN=8Or|Ml4f@uhT&<;TJ^|xu5|)XrgFK{Zh#G;&ms9N%
z1ScnfQ;im~aHAi0dEF24H9}fs4kT5fR3>56CzZJm;g*_`{UP|f4rDhh6|0b~wcilA
zq73t_D*lPy_%<>G9Wx4LEe@_O^lZ#ajL2_|n%Ky!E*r5t|2-TF;Ih@V8$I^Eeq>tF
z@<OD-&HH(?U#r8s(3{>L6qmG@+;>)$J*ioxAAhY=TQK5j_v+#1WAEnWwjY(2L1fh4
zdmhOKzsFabIHZ#2=Ir$F{HS+haO!k)5=W02ro%S~`qUECQO-#^ECz_zUUUL`XUH~p
z1N%kt`2G#6thmTrpSUUuhAARCc({tT8@q#@)4Sfe_LJjG(7z{wa&JmEhmaOCZxLTe
z0tnl?db(_4NIRe(L{`kEkh$(|g!PB8<%T-_uQ}tv$`K}c@z$!xfI@S2Fr67EL?pk;
zDe#WBM15mN8D`Z)mtjTOa_%#nY%g9;xU{-xW&lhHlE#(nGFJDF?_Uo`2YT$a0&nFY
z{+*Irqn~8zAdqdWYn)r5W#Fp5G$DQQ2?dMz@%e<r?Co}->zZa0cIjKvu$LMQ3kl6l
zaW7yP>-s|ZKL(&cas)T{;g+M~2PLtCj+Qsl4p&RTCuOkHj=xQn`G!pJ1liN}LdFRw
zX(BXG2bj%XFSa%Ev7F5342xx>MPiuH4v&+n6gWKQaM9EchYm*OE@%`@LzwR7YWVlC
zVt*ANg-%OPD2ffOkX<4unTVNxd3H|PwH=UXPQ>B;#8oP}E*cHgn=+9Uou*~!B}~hx
z@D{xDq0Ut+%S`Px(z3BuqPsX(-MINvip-iEOO_FJhs-U8tPBoFVGlmGNM;1Qntw;*
zH1z<?6D-~J$7_lM2)a{V_<U$={eTC7g+oGBBB?Bto>&JBP*(+%M68iekDKPe8L9ey
zbc{Z+do&S!Tt>gOfWMUJwiB|`NZ=$<H5@~-QZ5%4^ozzWmK$^=k2-N?cXs&c<AwtP
zGyeHDUTbo8h}Ec`f~y7nOmjdgmZiDtlqfGC#OGs{)vSb!9#urc#@cFIEj|k3GL;4D
z^U7_~mVu1CF@~_B;m@fmd66f#DH_#T`kUl+Nb%<%q75|&Ozf8>To{u`>|Nl*Ejs(@
zw-h(BX4;%-X_j#cf*B|rm3s!0>Tm~zLbB(?PCsbALrK&`*-W%>-$RHA?!W=C_<)Sg
zL~@{4k@W?@bOGYb0Mr`8Xq0Zm&i6g-EQEZvHg+%0@66AS@497>m%uPG&L)!%8X+Cd
zY2ko~7Nu4z$K@`jGS7H|Nlj&e6Y4dneXYa~^Suj3PR-(}8wIcgq$>VxsCMz;-nMu4
zoTPCJic>M{+M$@toiGCK<JDOO5(r&xgzO<UmyP~6MUr#c&WkV`%%nI^@N|A^^aFO>
zeEWwF&@9z)I1ek3Y632e5};2zX6E!qt0n|$WbOgDXm9nPTrD;hCwVlxw@$x9%@dl)
zjrzLr3^_<hzWAWwml;g~{m*%?6@Dr@Q}e*KJdLE4qL_bTmRL>gpN>pgeM|vRmBEmI
z5+w;}q5#dglVlc}TihG(!$!O7Gi7Iv>OHa87V?V$3*Ii@B*ZZ1?&6cNxz6FR{{76&
zPqrz_y4@VujuG!(p927&c=5T8d0s11?wV$>eTY*HWMNVIMr7}oeX{sfgu2$)qqn*~
zv{HQJq?5*$EyP)93VOE`MK^E<G{9Z+#zus0{f9cZ64%*^fVPGM#La{J6Is;K?z-2%
zy-t7R$*XJ4@^kYS8gWP3C8t}SAGF|CAl<|LyUuPR`VY9>@^m}fLKb5#Z?YP=j=*M5
zXb_{d>63#?u?)YHL8wy{jw=*26KnT&)sKC!yI|w~qAvD#jwZEd5h^MzR#vtn+@60f
zUQO=Rw<i<zgH%M<cN=RGegv}AQsalG>T{~Plb!&jdJld@l9eA(7ao~D&L0?2<dGHD
zxZS{8Z82=fpT;Upj(`(^_r8Y)4i(G1yEFr+#VAIs)P-H6S~AE-0Lxnx+)=M8Jjo9F
zd6M(h4J@E+kv>I}(}=O^467`AD!z|pZxo4Y@eh3-<L_B^dUW3!PU1wg?rF|8Fy?c9
z2HF~ZV$rd<G=kB+vkmT&CfigvQF9{AP%10Qc=oMYPCY@s&Nd@+KVq9y_wv5tg~oep
z!)Nojn1sAK)Cb4U>265&$9d-#vekZY=_W$YI#i-9(#sh}E75a-WZJxgh?`-YJhX#%
ztrRmS#_Y)!=u;^@+rdOt{J5*k$Yl4RF_Ln@Hpip<*ZKzK<WO@1w58=>bX|pm811ht
zQ%E{EwgzMY;cP6AvgwmotXfSlA8)2uEM`U)$lSs8ov(WCT)NI1W}U!&DZ@iDO}0|C
zm!aV~iT@r<$RlgqSyM%y(T#V;0Bvm9G{dSe!%^ZCBHT3$6!z9hGpw4ADILE3z6EuE
z#uU*jYiFDGXiO?F#mATKWxVMUyd1Bit<6(jMr)y?!7b@HIVWk<Z<0-@0+*`s+in{D
z_K(xvLiu<`PLQ>*o0hWn<ZIUyp!HJGdads<?)+}3_t0gu$ZVlhT84RHXmY`@Xf%HP
zM}ywL*P#wvppHRe=%YydD8u*Y!A)4|6))d+LRa}b8@yvv6VA~L2+v5%E&PqXoR>%s
zf;?B~lW6>YNt^L4FW4}h+XmHq`(N%S7rNR;oD~dmwHzI_sAi*(uJW<2oX6f#RSyQ-
zKTj1N-v#1XFmyApp*JB^(L1^#F8Ipxz1QVRqx1zy4QA+B316plFQB#QGG4cHG_o0J
zqrv)Ty8IR0VMki^gGD;>S&^~vXNakQIOz48ng*fLTWF)vGM-5{Iva)bK3)O;SOy&~
zj%!HQj^>GCIRD8TTzA0m&Yj?ta3UYw$(9^-q^~;OU!neW8Z?+IYpYE_<Tb@Sh2f6^
zy_vB0n=_Z4`g0)lcAG7#YE3aKUoZO-h+fzZQ_VLCH79{k9P?SSr%-x?wPm<HIbkG3
zI6?0mdpoP^J3ORjc*E*Lkp(xG#<Tqw+a;*+;ysI@cACavP>b2-JsX0-p)GrcEDipI
z)vKeh2fZcbT~x%fXE=<vqlQYALh+x9F-g<%!w8UgxGMX(4CuimraKHA)q?n_am=G5
z>Uph!^bZUTKUdXRFB%`gPRPm<Xl>ThO-n?^Nv`AbrC7Kfe}9WF7a_L6E6)77L5qjz
zz`H0K=&L@EUv4&kC_oA#r-MDI4?Wn369}SD#r=y;+6{ToWA(z#rVWX)asU-j7Q4_5
z;?vG`kS*`Cu+|0mW?k!-FS;k*_6N=u48TalN95Kmk?L`<O*<aljPWPK{mt$pti~j@
z62}FIQF)`9(TN6es+*sr*Y%%7O?Mg#j-Twg6UAn1IXqjc^PQY77A%U0F*T;r#%V_}
z`ZE`?N&f~+L4eB!i9}6T{lKdY_sB90H%$hxeI=6$|Hkk}TYS3gEO;OHQBpFoLInsV
z-YhO^=LDpHvB^3$GP1Jx{Zbz_OrVna>#N9rg6a3jfL=SxD9=*2tUm|1q;m#}C!Nl}
zo4u)n!*XYC)IO#)fV0iU-c@mCAD%_i8MP!dST{EYE4uJ0#FGJ!d2f7G`>WAJ_Wn&)
zbXUu5YSVW_pnlKVeDz&+W%C>TJkGblNZ-HU?^u&iU#CORYN65s;|IOvHEIE41{21h
z@EV_~?}fJp$>R}B$TJ+2YlZ%TDz(g|{oZhp$l5G%%aVEt%qt1@CR)sQk~vzW*=mJ#
zBfeH|HDmy5V!a?R6l8H1?&|{&Gc4*4hVzxXugVkn)?pAVpv&V?bv~|2(p?UNJ_!LY
z?Tytx_3khl&XP~JjJhx1LFt)Sht{(6^=f7eGpWyH$cH(|yy!WZ%0|fVb34_LVu3&P
zsmKsMJuL{G>#(x<awCEuHD)6<YcJlL??h8A-<Vc}py9CRFre%iXB=5p1)>r6JMA1P
zX%a0~FrRujf0kAU59OJFXPlraLEw);Yxz7e&hl3?qh&2yOlG5kDEHK+q_3*^p<oH;
z(4q^3VIWYgs+>eggFpR8R)_-<&ER7eIdKOG$M>BZJpi<FJPw*rbn9pIg+olg@2ri4
zrAA{3ReN7_6K+(s6Vhdrp=@aNq2R|phC_LC8JK@QZ=dc89zPx9Xwj965f|{1N$IpB
z7(3cr`xn-C2+3~Zzf~rCbm`^YbxLQvQK9`x_bTDRNcc5B5(8Ej#hi(H*uoE+G(NQf
zfvNvgq3zPN>QMqzj7p&gyK0f*`&T(+0s!gkQvzap_U6;sr~5fB1W6*<Y~N=mT<%zU
z3_qUA_Ga{bbk#6_&7)(PNjyaR?1tS+q_@v56FVdH|EZ^txmrF6mZ7a|y-g6WgHDVH
z_`Vwi#pBCQGhP$|{fJG}TFP@N0w+XR3_wI28MZ3v!EJr=(``^L=yJt@{0N@1V6g#O
z>|DXoqM6XL1G4tr3oN!YUWDA6YI6*rMWwrS+y~4`<3FHKyw!6UxXmX?An-^ua8%E1
zxou4b@)ZaTE&vSfVHAM6KQyA#3y<7%r!YfWb;n1NKuCO~&n6^}qL-LxpyX@QFAyu?
zMWfR{yU4*C)1<o$Wr^c?_mn)H6v0s;3CLPK6Pq!WmlmctPkaJwcFLKk;xoV7wRlAP
zX;v_{1*d&d_&XcbfZgqGSxxqRhcKH|zspu1uv>%Bh*%%<X3$@l06yatGTnX`_uO?}
z<EnWgAheABHETSX>WlhXbt`T@-a3(F^)Uq4v$KaYiMW#5S)X(*T4?~b(CU!*Xg#i3
zLNcr)l%>)tLPBR(^QgO<J-o7Zw#M4OBKdF^qt~%ia)Bik0<)^_E$iJn`aE|rZf=&}
z+_6~|b#`U@5T3;eB|s8T$Wvm(Mm1MqQ&$d_OVseU&#f>m37Q+uyW2LVP@1vwo`3Aa
z-RPciNkK6cZhMD%!e9PLqsO)~1rGx5ON=$yf*w9rm&-&?;?RyBo@J6uwu*~jCl+g<
z7`C6NjU<qgF4Fg%3m3frKN}}nsRb$)p}o<-zkOcvnrl9_9_-~bX@-X5^^LB*U58}7
z>Ds*-wn{E%UU=i#A$y^bvK**aa<mv^(+AU57GP`AO^Gkwa9u$1^#}BWG<H$e?l4ZZ
z_Xmd8)kghsh_=P69={y`J+ayc8FMcBA~0xVSA+-6<khhli$wK4*fpHIJ1X}SqQ`m4
z?&R*TXMnBt;H<Zf+Yfl1r>1Pq(NL@yI>Uuee94od9jE{u-9v#f1oKncP0OBz@6cbG
z);`ox(A|~QH>YIH!7b+fD%&i+K;|2#it%+J#2W5Ua33BUiqJ3xo%eSkY-;EHQ2_f}
zq4{YVGYv$d`loZ)9a!;RxKrF2l-N<or&-7u6j6x{S-@w<;5pM;e~^@>_bxg(Hy6Xg
z<}d3K2zk0AdizNh4^I;bPPtvyKp&RlEPGR;NucaSI+Je<(Sg@_U{~{GZSTGtC1h7g
zZQ?fI1sC*yuJ6mJgWePu$vid|e!TUYvYGU%g1ViMwArX1aS8FeUf$;O7!N}&W;LMY
z8La?GxnoIhs0!Yz-O#EZa)%TJJx=<nS9+ew=WA>U@za@=1BiXTwbt5Cht4?VkX@Kr
z*xnEG{Nk-han7{G;|W=OEL-s~J8W-gr=UyPFCz4WcXJ{fQ*0_7;-5F>9~YW8Ch1DN
z0$n@fo=zrXb#U;Iw<U$HU15sL6@pctuk06oalG237ASh0=e~e7h$k}O-mF9Y;UnxL
z_4gb7Si6o7q;z8bx~LX#B}5Cq0p8+qJAj3IZP6@$A)n6Xxk*g6AD<hmFjo1?T$oN9
z+aKV{zN-V>Q4Y1DKD7n7Cp53pmVCX$)16Qtd0Yz9*0$Up%!XMAZwB$&TS;v>j*ize
zCpM1K55{4c*ME=8aA3RKXtPANK5M+Y?zG>7xLG<S?^{YW>a>$aTvRCiVipSvw>oTV
zJsC|E)BgBNKkrm}n}_}Y&*XR5UtiSO>m_T4XmiGEsGSphamLZ@mm85HjdBx3HD{B_
zcfSp_S7Hd%a`NULkmF5P=t#Qk)%AVW+c#WI%o(4CpNFarAUKi9<%7OQs)o=QRw-Yt
z?}szqG6^B;=Mv+uquQJr?Ld7EP<qWkeHBo7Mb{{K6Cv^3s$it|)i3uh4o{!DLEv$o
zL=!m~EIlYVc<cMiJe3^J|MI-$uJ#>q1hb?Eh)TW<tzO<^F0y^oi*uZ)AB$!gWmR;H
zs#ig)5I%GoLk}m7tJqS=k%pIT>ZBn(MSbH=36I@fD<U^Qpap2uY%713l2Yy55VPx*
zqoD;XQ2N7*pyE#3>G%{xu>Ei{UN%2j=&s{|6<iD`dW~qT`YuMnGAK6(Np7oSQphQu
zf?#GXcrTgDkYefyBgIR>BV(`f>#55=0~YAwHUo7tqyrEsWVc&vmU^Pg>y9>X8}r-?
zea8X@VXi0yQ0@6!Vuf`ksW7q@28Mk-7~CtImUnajs>k^_U(Dmd_ORvJtmwjAUd-j`
zCXHB<sS$Iz-Ly|BFiW6{q)z8fNnY#yVUkbJgN0;=tPgBQ>vcMe-D<y$zw&<MzG9zk
zK|CvU?Aw!0O0uWCSI#8VBh&>S1wzi<2ilT3a0x$J+kiY2WYd%gbcGT%<50f~G!$e;
z-aE4TLI%@tb!i>iIWGU%YtFWiUxKNaU#&|JD3!<xZIz(rZ##Y3Q%Jxv(CRjoA^`%3
zU;EjJ=v5MV8%J3#E;Ti%(b0UHhh7H>D$EjHT!VyJm~kJe1ofN=Q+W?kVI!C%PCr<E
zDT03_l5b`}1(GLQ9%uuH6ne0njWGU3+y_xO)I8fL-*iwlH*~Hg-mve~d{&lViLSkE
zN#J8#lyyREBxK(nB-%so86RbOB+ef%YSRJ{!%>FCGiFUIepEeA25WmUuWoR1vGJ}C
zUF^Gj9qimbF`d@{YYFK-Oln=TR^M6dRQBHjV-FHW{9eY8-RLTxH7uz0?azyY(|{qi
zPjj<L{D<q^(*QwPdCT0NTFse>Z8uL|*QJ(cYQrCIYQ}|X=S}XPgkZ21`4YRv?i2|T
zKIoFW4CB5VvRO8$rB;y41msPHEa_;U9#07-Q?Cb0<*9<>2T{t)G_|_YOg>+i$NhQW
z?z71FFNST(hF2adjSRpqLDc3o4?aVB)`3=-by&5u!khWPYrjlV(wgM&cO-?piT`fF
zYwX3^DL_?)XK2tgE{hx=?QBX#FStaOXEfl4_7O_I`6u_h5oIr%6Y0+D`}C3EX<|Ib
zGU=ib?f(_JakzAk&1LskRfqg(ALWMi!thuZj=Vbw_gL=3wT2t|NBlHV1r|SiIMx}G
z%K0|pQ6`bthcOWay__kXQ%~p2*s2bvvzkf~FRKC^P%9YnVUOn(1}UyBxFo&I+*4iX
zBw8VvrF>f@vy#gNuL}pxvct=NalM<(@Z0a?!ubbuV@00gtYyV-ns3*sn~%yRy)GE+
z&Qx5c>xc;rBUS1q22PTzKKc#*kemDLbfTskxfNS=hC}S>leT;brBO=p1y~Rt?fsa<
zq3Cb=f&=GWC3oi{-3tb?D8A5`;u#RF`#s>*J2rN)bSy1|gN50`J<lK03-XMnW>Bj&
zSZR+jU9kcyLZ?Lovk8ulIU6G$)WYng%Na2RM=ycuC2TFUH*vwJI)14d9;;<?_k%?P
z7c&IV$aMc&CnzF%Qhcp8sX6=kNW5Vr%-)z}D|g0}TQjf@giV-iiIj!ZmYVjRJ*+js
zW{Zi5XX(berTXSS!}Qdk!p3>h*Lbi!hOXqdA8<Bgs=0UXziNd`-=P@``z{_2XIhSK
zEfxyR<r^8LE1AygF2p)pSY{o=;RFuz9)1bt&^hh{wWX^7VoNl>%45@&>elrWnxxtq
z-yJ9Ozg@hS1_L0AA7n*h|Kih*{9n&qp(I(@ZjAeA`c@SX#;@v!y{(&h)u9<LNeg+2
zVKF%0y&Vt%Z+pe3>hmpi`~BD{w+GgTy9h-q?T!;vOSoQt@cy%ZxK=zfgW#7KbM$)=
z{+EEEqp^dFv4gpdiS7SQ_3WI`nvy98AmrI&;5mc)2#-&$6(@|!j~E-1Rmc}q`?8_g
zb|=HBxW)cAH&^#SNS%RKYu-I9#z0~v)QBCg>t*y^NKHon50Q5-<-p-Mg>GeEl%)1A
z+D@QXmC1y3&^u09nDo++^}Sj97hl&(Qhrm9O*r6*fmNm(k}9kMJVK#LS4@kR1H*Rh
z(evD9j&TGYLqfPl-iZ~RLc4BoQXcJza;hk#>U@%>lHb|wL*Sb)r1%Q)!g;$Zf;(xs
zOW<M5Zkrqh1P<omqcE!NTcLr{BR&gFGQY~-KWF#v%L$HS(w}`^WTQ@7d?&1eU>ClY
zH?*2_#}-k4MmZ`On&WY@s~DlGFw1y-Bdj${BzsOTudOzpaw1kiaoNR>F{N^hdG?5Y
z8o6YJa2I6*YjK)A`_y({&7}>fAO|LkRF>tz%hC8RoVhkj|FaqwSHi!`;Gycs0@_N3
zIYu+n1xOq>56)%B*>DR!oT5t_W+^Mo%>H{IF7j>M+_{fCYHV{;`~>3$8`cw5EbJ%6
z`Xv`UL$GG5^t?R#QYo*pQIRzTf`AjOyO|NWT!Y?W<@DEcvdpo6o98qV9SZuS_OiG>
zz^@>exGcKFGFxQ=yD2_+pAo8k6O(~I5~qTf89VIt+R~_Fg9E2f1O{4j<PZBhA#Es4
zA;=3+2c#-bL*q6=C0HJauCl~l8Z#v|0N#AG7*|Mxgq!ZhzFb4S&AxyBbMOH^M(j_(
z{U%%a0RaA+hW3A&*Nxqr9Q6MmTG+cae+{uC2>)Z%ZZTyns1yT+=ouC_HHxs{zKaxb
zV4QBkfd$7VUP2xN%Cl}B_r2NXX>|odC@>#e^y1^&v$3^(SvP%AxgCG_bEhSxdeKSP
z*;6i5iv``InwszCOElcsJXKqx6B%jnM2Dez;H0=+6>+bYMVoq{AWJ@6Ol^E8PdX|Q
zm-56BX{<9LWOXluT5vx^eJ6o^9x6NCSDI}|;G=0hWbH(DuS~*HyyQ@kS%qxgk|f|0
zbKHTbPJ6I?<&iGzPCZ;&)j_Z?5`};$+O9@ZAqEq(bo-QzTI_QgPki}Qd3JfV9F?0~
zDV<+LqOOjzZlGvP#oP-oUwpEywA}Hze{{51DmzNm9NM6TTN`nKB*nq7$=*|LlWOrg
z-rwIy9h;gd6oEHMIj%Cw>RZFBVG{ZNm*~mJ-j}{NEV9%2sgF|~8LsQK&BjMQN&X>n
zHt<@gmz|9O&nL}0CaL)Nc=>Gh{@TigB8e`^c-gj|wjoxYWEjl7G}_JM>6wiU(L<_(
z(x&iStxGcbm{ph}c4*t8@Hm;Za+(pL{j&@{{}bxO0z%&B<xB)sfqc`_-U1=KId;6r
z7)4pV>gc#wKt#u6wLL(^3khXY;`=N2fb4GfPyY9X&$VmplJnN$Dy=qHedi6R(^UuA
zVW0LL7Y-hVdSv}KchTEnPY<m?$3mh}K`lZwM${v7$=iHiG`5u5ikX;#*+0J>kno-u
zu?VeGOSpFdMa;hmO^DV1A7SqpBw4p@4VP`Zs>`-*+qP}nwr$(!QkQMpw%K1j_k4fO
ziF@uFkr_KOBj=oJ?Y(kgVvH^P2I^=yi4$gr^%7#L5H$5TXUNm_FyT&oP--iLx%Szs
zlDMq|G)A6ABSE>e;A^tx3x~l*q<NAO4(NG?(hu6HxO${BmS1Pki9l5F;#QcA)#=8t
z7T@XHPX?f!VJyI&jHL_=68LkKkXQV}PdtW$@yCP39%<KJz->zE`Zyd}aKolNL{;F?
zv*G^D7zx$Jhd*SI1|$Tu#1w#2lGHu<SMjE$0S{mP%ur;xOBN-+w!#vGTnrf)B4I=y
zQ$*d2PAJ^LQlZ9H5}6|{y2DMMs=GalR|1>E&8Op!gJ;nj81D<mH!31%qUto0``w7G
zxLqAT)PX-hRrjg}Un5^2jDKCf)9&k|V{+|~6%5ck&)sCW>r2O1>+g$}8M(p7AVA)-
zP^ToCFsMml$2~d&E=F(SdCd=GmZ_~ewd2EGc*+=t9q683;(CNb1C>F$w&j12GtUh(
zFgutB(%u4NP~vc$-Te^>j3Aq5z*uZpC!r`>EwE1H^dm`#!Wi@b=+R1dH`LhW#saJ!
zYVZQ`dNC~1k?f2fh7;=lvySKci&+|i?kggRs~9&Rhm5!ie!1iWG6qMZTOa)rhm&x<
zf1TeOV#f=IFIco9VYG4gpl=EgsE=us0Qj}+X5TcqU4zmwx_Wj-wh#QRV8zV~$KiUO
z>o%RU_@p34Y}F2edCoFiiyr10HV8hZq-M$9g`-C5Jt)n9Zjk8N$`Rx@%tk^r0O$O}
z;E|Xo6q+<*5I;ps5^@-qF#M}+JUa~KgrjvBZO?oHHe#5pp0Ud=*f*$<es{wWPJPoD
zXEEO@V<6kduu_aJP$+U0I>Ia{x=>fZ16v~)<19#zP%t4p?4*0F4c)TfB56Vt`>qpV
z4nEmqF?2Ani7HxU35cq2b{Jenc%{g`VNskl*mnSn*Ao^2R5lH=Fd;XKV^@$|yp<7m
zzql4Kz|k!mH7x$G-2SaTGr<o*JpL(QG>uhlF4;_;5OI*k0Cn?7cmJNz6zGX6<T$AW
zhoFQe&qbClgvmZrl4ya}whmzR8yRV42vf^f=XQH8Q1pKI&<-$B!<u1ckLY7DVrUNU
zLlv#t`_(8`_q8+7R^TXCbhxl~F;h@dvT)c$&~HH$vecpmx`B{w7xB(V`ILCqUE70_
zTCEB@h5+vj_qiY#|8;=P!0gp0%OJc$tk%|ND8aDd<mZrfP&OBZ4@o95d*8(3F5?~}
z?}S`N=5?s)P>e8ZfN$(4-0ME>a&w#>ptyoQr`rJn`!4>kAWiu~UQs;3FP7?&cxfC-
z1BFXmRv^iQ3<MseZ;~1v9f+I+J4@a`5q+^m4WBSAVU~8b`q#h}g{Q33hiR<(v@w)f
zk|#qWL;0z6fG)44%&`dltXTt~-^SBK;T)@r>v#~t%0!I*?!qjU-nS(5fZhbtK*vC}
zfIv-V{Tz^^>cwyw^%EE!NKXLikq^H%pf!N2L1IO8MxNsJzvteL<Iusm;%4o}t+F#i
z6cw&SJE&0fGM!6&g_la>TY%XX`wEZ+{F_5;@`FVa{e$$M5xeB$<g5{frqc~B^(ng(
zQLg=eDFg<#%FO8lg30e;MA8csga#=^GfTmp$LO>Nf*~;LNO6)I-l8yvBY-{?Y%&T&
zC(cqS*z@1Wo_p@e`|kslzykyhLVJq73Zxb^%ueq6!{{IccE)2dfHQ+J4ofmX!TMtm
zH1~<^8Cb)22*K}eD=f{1qwlwV*5S8zGZxU{dM8vH*$P9D0xK~GtPVdN0@e+jlQW3w
z68`BoIh@0g=h!z4g@=yVz>Ss5#~@}L8zJj&=DCG?>TBY%H;SbI3t)`HFfbyJMWsiH
zm*HuR$}3Yd+A`U&?H=RSC82yRFR2)bFf*dr1&U#3IakT8?P=5zz3?e82xT<vG6+o|
z*Xt4rvb6EJaC>EYg!3ow?b;S7a(zN#iRWt#AzsG!q-rxiZ=k-hU+k<<i{il9(qwzW
z*w|ccD$-(pVxRN6`}uyvdnASj+lD676NhYb6*=xlpu4@n?8$C!(Wraac4}FMhjz8S
zfei1T&xUqKtuj2v&bF5kV$4sL42!Uv;b{N-;5W|dkE+k17@oWEQr#K~@&?C^Qr)Y3
zpza@&t8u!fmRpMl!+>nh)uKO^tm$ko*T^mA7OPlFrGIU-{!7v-?MGFt&A)WBySdLT
z{HT=auT7f&X?>MMfyYHD-a!<$*FK^Q&odF*^B~c`H2u?*SNh=?o+y7bnQl$o2#%U8
z&lbMS0G@xkTlN2U3csVlOkumQVg#1yUlv}u`(k*kR(@=z{xm!4=^t4d@Q5GTAJ^>J
z(vR)dli}PgwWyzdM29<h|5!hP`<Liy9NtNb?YRStgOMEfk4lelY_H{ue>&!6d#RE0
zb92+3e(quSKjv_*Tta@@@ml?3EvoOwT5I<R_>U27F)xn0i!9HXMrJu<%59y=ZC#!2
z++H8HJeeC8G*hLU16+l9CWfr#p547;LE)X3$<o>i{+%o3A=2fXp6)K_-=;!V28Z~R
zp96lUt(I_j;^pk34g!7GFgXK12a8JNI%mK`A&iu30Z~!l7oC|t;PjQvinAyL;43g&
z;&J*Hwr7S|mHdX$GYIxfR!H(WF3K=niIegAbvG2eRr~e<En?YTll`<!A!t8@azGMt
z+z{$99rryb@*;l$^$gb95(Z+!h50|eVx+6rQ(_JP>ntJz#dxV0u=NM(;GQ5N`Zwa<
z-+H_9{Qaf1i^5hQeq7N!KrH=`hTyTkUE!_ch>yo}`ly=Y1Es0NI_*PT5Sj~Cpa509
zS{I{(N<()h$lp>EB=9YldB>?jK3_;RBP~Vp*lVG_a7~lR_LW+-BbmofRb0DtQI~og
zt|+z;)(3KO1dX|ofy%jMt$yhn%a}2rSWBhib3bLgn5{`Jz~cprvAbY}lxbO6E6lxd
zOeng&)RJDd)@~48Jqc*gNz`Fpon}9BmUL%(c9;r!3ESA)zPu*t^ObNYtxs@_VR`1z
z8Q&-wXY>@s;dxaoFL@lw;%^#7<up>yyY}Xst9y|?5KCR{)S33`PSW}2ev#(VsVOkB
z<)uzXF=kfDb9}asCr$&_UxuPJDnj^uOkAwcoysU_bE`45s1~)ZKha%7YF)%XmYms{
z=TU)P3VCLh?B7bvPaL1OL_H4NEcOxI<>+3DC$IS(Qu1tSHZGi{yD$EwxMCBzrg;Td
zrH`yPebDyhy!>4sb-?0`)ccn<cQv4-8mI;hmIFz$Xx(##N`$mZMnwyTbP-wiHR>UB
z=@#G8HM1-vxtV`N6LRL!k*-?4o9U?+9o$bH-OPi8QbW~==7PFQwe1}~x$eHY@=Yx+
zNOOzs{WQ03DQ?~BD%_*w+l@zW{5S30)SCDEx844m4P#u@jF>mmU-BsGZYHjNrUTf?
z+b@Nz`(5%Y7PP}pS36o=XRO~xA0-Uzcwk{E&&B=6za4m<!<Fgm3b*y$SNF^gk8urs
zHOQd8RpY;jT7Y}s=hh<le0V%)r;SOXHmK8HC-tV#sunl1`1J5EHqC<SY6m=0#U{MG
z-lo~T^N#8WO`^C$@G<>n@rRLxn?5^RNr6wt<lc3SDh~=}zeM?8t4b*6PE<VARU?ri
ziSCj`HcgLgl!w^<j^<(Y@?d1~GvVXd79BaFHc{rzSgi8!x{vZ&UgjPfd`#Xedhovy
zRi4Wt4p}CV?Wl>g(&9VL)`8f<+kjo`f#j%E_52#G>YtXh=HHQ}=rO29Xq?$T29yG2
zDI|t2NB=%tJ37j~rB_o|M?K=!!Pa-Syyt!=kPLCm`N%%%WzKXvm+lyvhavQ=eSTSz
zzVc|KQL{_BPLp`XcG^M1+i27SM!-gFck<+6-df?54fT06A^l-naey}a0FXqNEz7bz
zQjv`j(MqjjTS`#z9PuL^S^&Xq5o=EW{GIARlJo{w&Pw}x8`7vx;j8$_5>;tnTAEQ4
zpX17P(ZMQ5$2|WviOoPwc1<@4E{4%UoOX;djRo8aw;I0*M0b(%wRNNAT_bgt4_LaG
z_wTwzVW-xF56Ue<)s7GLC~M;mk38>UBJvHYu+%=L3PAb8H=*RK-ppPT{^tP44Y96~
zB-X+L*5&c2Pb|eY174E&>*xOcQk_%xkec1h4uySe6ZaP38hC(}sMRWSxY2LcTmx<&
zPTarbAO%pp%>iUFT=M?gB(~_I(~vWru#K^iiSMKz`c<x>jk>>dZbEjam-G}aLU_;K
zF=$Y?%@%xE%!S>8mSEL+rk+XEcm=Gyw?s8`fwvy-+oE1>9uw?+sq9W7w5@C5ftvz7
zD)a_b8n~HzcP6(d%luS)GkU$M(wt>|Pgh$v+%}N0&c-e&R}ITPCOp@?c0#t2S*6(Q
z-<LCdM=bo}K23aTOs}>VcsreYrbw?Q2SVi#@mJ}(FK~P&U<D3+wJb{?ySvA<n_D=f
z6!i`!)|#KDuRLvthK#zlB$+2ytz=Adz@nI9vZr*v@6oHW#8{;;eQulDUKNf8Wd{_0
zhx=Nh_<1^bx*RDp8Fghs{QVD*SS{FS+MFLa7E<W{UgZ7{3X(nB|I0zuttydJ#EtZW
zgmip;YJRJFR74CCF4#U~+1{`U1k*aPYWns>q^;+&BK<N*9p(@`&`6+^@wP2>)MmF2
z+#q||`{gclJ@NRGB@FqCGkmhmNjg%@6gah@X;lbM5aJbreiIl~Jsy82%BaGQ6Z4Pk
zNw!$sA2cbA5QJc0aNGcY<W@H`tp|imUzm57)})vG;w6a7Iye9$EO`S7+)W8f^a?;D
zuxltL9uAk~>T~TOE+`*da$Zr;Eif5+;sBqBlZn*bcRbjMZPk8&4qS1B=Ityb=z(>q
zKcBMoTcTWE#FWR<!<&u;8LZPJcIQTTmNawLB%Et0?!D1&#YxeGO>Mf1Yec#VsLl&)
z-q$9$xE5kmmDW6dsHzZ@c&_B`KB8b=lAHD<Qg_q8N4S=)h#*Si3D~_Xzo-bIWe{h%
zp47$Om~^1w+vHbuK0SOA=aDKaYGc*_JP~<`#gG3yFsu!wtwKbi2++Y#F=(czi7y6r
z{$}FCeZr=WP@?_G*c|HDdqD5-%GKM5h5m9kn^>IT4Er)+uSI(!>^k{VkbIfD)GhWy
z+^3oDQffDBe8SzhaMzD=s)5(D&^u4i*+H18F>=)SWDl#+QK;y@#(@<})fGqq+8Dd(
zwncI#XrjJ*1x%0!ID~1qJLHLx?w?p=Dpe~Auf%t@t8;%QxdYo-cu2C%0y2`jH!}3*
z$$O)E^^_7nzLmmPxI`N1J>}zHEMAMH@(!|IR}_-~!U@CQD3Z_VnvEP1cmSdl%N0rv
zu%OFSU_>7|#EJeW(wWae{&|)`B;b26lrXTbU@i!bAPvs}!Ld>opsU>os0zf$0eK+B
zymGi2lGfZH60=KW)f@p1w6&06CiAn^wz{iFTSd1RXeU1wkJitQ4lZI~14)K1+v+mJ
z&Af3ipFm>B4x^7p-a64^pIPI^aO}2CoTVMS5xNbDK&EP_4HlB)ryD6ylsb#JW3y)R
zV{a8+IaW|_Q!sDcFCkQ$;by?$U^-pLV&!Z23)O8rmejDRh3f9HAN{3;Wr^P3M<^!$
z#Nvs3_T+&Pj$(bA6?8=qsqjbf&?QS2U13!CLkAiSDCi1TtbaL7ze>8EHEzp<3bC5o
zv4GOR8$C45J*`Dfrd%we(wbOvw;^KMz>Tc@3UZ(E=`+fmx2*Peax3K(X<dc_{QjU*
zY~P@?EKmP5(zmjXrfbqDWfe$vNcSmpsd!O531A%6prTn>du&2^4^BJavUFWA7g{>)
zgIdo8I9`A3*#xUeQlIxQQGt4(my%(R1(d;S0d&O$m8n0lb$1ZW;TIoL^jXL_5mrLF
zKe-Mk40hojVMO7|v}55#Z_tGvg$j`0dAlLBJW7Qd+gA^n%i;5!AjeQcTK;SJW{|>?
zgy;<Tre2A3R=}Hn_T5(26(U!U(wm@-QQFD(_av(<>SQ2Si0eW%dL=$2Af`A3RH@y5
z>uwSj^lK#HjgCZItmz-~tUA5MiQ&&0HhX+|m$f3qbo_3ndwyJZB$r0n4|5f}cC9Zs
ztq>uowGrGoB`uUSXawhlH&Fz*N~DKA-3#NnguX!8n$NX$gZoYFJTG9}uav7L$R&w5
zp4$VWz)7L~!~{nkjCs=dzd_<4Ok-xmD{@DY`14m$)&d+Z1wZK|S+#ZQbte+1<O-_}
zeu&9yn`qLg@~ZS7n)qjG57r_Nhv5t@u)|eTa+V1|Og*7qR6F)Z0!GM_15Z(%>h8MZ
zNl*NCOqY_n;bFD*E3scjt{5~qy_<GN6^yBDRy1Z^!pkRgo$H$ZN)Z0K36j<PAD3B{
zBlXNW7xh4JhficKWf=f+(nyVG%FiyYeGrWKj9{M=oGzV4g^~~21@&Ls%D%%qjC_}Y
zq~6^gQ*L~Ec4EC<`9nneLYlU1`X1_RTFpNd5^S~0t=*|1bToQ~q*-PnPw;0PgtzCv
zRy}T?{fHAEoOsj4iK51go*3|N<GN=u3f|4;63R}A^^@6t(0BU3!YPe5(V_CUUp#$9
zFVwtP&CjSA{4fyad9|E;WRu#U)^$258*}tlnp5q2Tlxz-sqXiVHWOY%x=uYsu3vS@
z>4yCT3!*CZk|G~DDnILfE>-4#w~Fs6_$5$k+d|gM%^7=9M*S-9<?MklgS@bU6IMbM
zCo-Q~cW_L3%eJVvRV`&ss)R<WsW_RZ#?GsJ+VD}{PB}OB_Q^_9rfVmffUBi>Pq8iB
z!Z(VkA^CRF6$}V?$n>qN^iKAA|HC<sZ_5Jd@&o;d^b?u+ZvcS*EPC!N^c?@MWzQvH
z!m*McMdZYLD5s2?7!iM90e&5=vjG$}T_n0(o{*t*<NH0`D@noe#eS()(`EYl=~^J!
z;SGF2WE?p5S4m#|3B>f=x*-hZNPRi8!W*?UbdMh$3Atnf5H2znWI3k0ROB;I)zUly
z(67qFaRK>~T~I@TQ_*}s5_&=nPeqiAzPMadRyq0JQR6(N2oNk|;u;<SN93|i&OcB@
zna|LvqMEk7>9KKt+5Dn%x;&_6k2ZdPE=?LM<t9%<h$}B`_3+k5To-*r1OO8d5rhlL
z6nJ@IyGG0?HZfL@uFUwj+57Bzc4Ft?6KPnFb8yOSx{plYFc!-m_*}L}q2E*%(QoV%
z+2yU7@E6ix$LU#hb%lJp*0KYFiu;>lxKZzAkrlez`_U>ul{e9fHNy;_JkQbW8_+bs
z>BN=^&D&O<mVot26sqO*=)v1KaH5#?LQ<dh3)!AnCWkPMuqIhdhXgRUyNm@$$D$v6
z>ZD8FJ3Ybwd#r<_Eu23C005xz=S})w0&V|1P7@=07eg9*Mi$n8d#L{lKf}TjC=i*N
zn;c(=zdRYfoEfOyig<iFZCag{YloFbahRKLvYAS1K$DSvF<J7}K1TW_Qu_7jIjX{S
z`aWhN=58tuj%GH-p+$0<66!vBa#@YesL8RZHKM|yL4uV+wyE(RQn}4xUY;=)j;2a#
zE-IRJyrr%DuEwcBDhkeCB3`_8!i5f!wl!vog)y4B)dZ+(P*omuXw!c{m?jdb9}oVF
z<LLim92*<hn*0xprM-!biZUbs@NQCx`u~Da<de7&n?;WhdgB3gT||lCXjq~h4Ua(A
z7y$_~ic1_oOKdPUrj^@s+1jPJRGCWc@%?tZ63w#WrHkv@7Q#Ddh{!x8Gm_t}UH39@
zBzLvBIa^>(8wSd8>AWy6wwz?agX!dBoQ}M8w8sTBR6`fM618om7yKmQ?Zp?~DSes_
z_R9$)G~Txy%M8W_a+u(Tggi9=(hdTTa^l%b=Z%U2Qn~&ZkX*6Ucwq$O`NG>6I~uCk
z0R|GXVod0Hm}~hio@&QJao%BQKpb-ZgmU{tALs9Y_=oepY)!djnr@Scj>#i#$>mFy
z|0bda5X*C&gh^Lb7xti<!bz5qsg<cwWWpEq$QEzGg<(c=*1Tva8wB10ppeKI4_p~3
zqngrm_rY4;BtHj@4K`)@o~GtC<k*=yjmeIx{wqYu;@wKC^KtA7y@8DGC;{`;5=dJU
z3AQ7%TYvPk^jLBcO!MDA`Mmm-#RCCE<i}8HdPQ^J3lV7K@__Y>PBUfCF7aV=MFa9?
zcO72^i|&WV#1gT1PDPV?Gv`TDR-1Cqu4N5UZ5v_F{O)cY5sOhxdrk$}NjtI+COmN>
zVuV#rzE=RKhc~dVkpKR-XlmqaHvM5MX@mRkTYE<XTjT#39Y+7x*l1BTu*(uh_?oUu
ze@}+O0ixFDib%>X)Rm1yd8#bN_q;EF%4+F`)TLI>6ixa2F-5BnOlncol}|o#J=x>&
z;ObhxwUQ5ypZKISjwS_ocxY^Y$Y~6bmxl7KspRYC2Ans4m^%%keQcOfoB^8V0Mq6u
z1lGn}bjF6I0YThgyBd8TEgJt2UP@p|?_dC=L;EZ_l4}6?nR8eVmFG_ebRR8=(_oA_
zsUaQUn>W`2Fl>-oz03gp7X60^SqfD5PclJMybvSmFV3*j9^XWH_Jmxh%j5TfrID^G
zOB$(rlsUrGh-4Y3ex%JjLGr_%5`>G(#a4WL{2CCa(Z*HD`4AoJ#tG-@67``|TdQ@u
z=$U=)Li^N+aFXTw!VZ)s3#S_4mW6n+`9`KE>WNalq)E+Z=BaC<In)roI=(HyyBs1Q
zN3lkr+`3XllT665e8)))D3K+{(sTw|dHrFRH>A?249F&vbiv-ZB)iaOAz*LE+y>B*
zCZ$#j-n@3;5y;_jayLfgYZ-U?Ujuy3ECJ}iGD_^=W}Cqg$UOkEoN8N;m|!}oC}qfO
z>F&N3tsj<sz!8bwkrpBcj{T}d>mgR4QpFBlZ+CHZ3uKeJBRJCW5*Q{(PP3TVzf^!D
zvyYl&89F+)jj|!r!_>(VD#nE>VW=Wi@BvecsApUv!%~Ok%Ed_kVCeka>qgSyEg#(5
zv+WcYCR~Y3krDVQb5nPsX3MGINaO=%9K5@oT_wy{q;}uldC>Zn<Rc?zt$>7Vg(%4v
z=|_k^>qv>cM{sp;cUp&|Vxa+AasDmVRgHy~oFMuAa*LOJGtFI26?E~=qpj_4w>YKM
z75OSJ?A;eW!p=NEF@Kt$_FC);vt&^8rEOx$EWH795xsafw3_dG`6gK|m;kNpjbBxZ
zkvj_gvD0E%_g%h_sM}v`&kKaqjOnU?<;rAf0LR(D>P2OOx7K5qLTHi6y54h*>zU;0
z?(qp*AJh8rH~Y{gLu;P(Mj$P{hD%<xH`t@>f@~llZfF=1?Z^v+^j?xPmybERHdet<
znde~QO(5HdkDi3zOpe^q$|ep;Hi~wBx3xQCj%r;5B<#dw<`n(FJ*q&g-PPJZW(EDI
zk1BemJ(ssMGG8IVJGd?=;pTUI=Y}{>BODG}Y%&0%=&x8Oq8+%!4Laz3Ub1jC$i|hJ
zXHA8SxC=NjbG4Q}AnPa*)2@z9?)%@SkzUciZ8DWer{M`9$-zHARmrwp0Pmb6COvOe
z>nwaJS#9nIF>@A2lh8Z}$B=hO>_oR&F8cMve0SSfu5F{bs5;_457>&XGoDuKimp3#
zV>(v~uO-fV4tg+McB)5wai5UOhBxgPUQ}AT?9?uSoA5sP=<%D=;kPs2W~)cOL6325
zCcJ8G-k$8FpB^R$I4%F8nfJZ%$${ZeKUQi(O{QgDvU0!W{YlbvzhAhedCgIue^RD;
z8J$UvEduO4NV`L+)Vo&GtL3YDYG|GN2L1Qhi@NshW%_6K5<vd%d`r&ejwS}iKMVW6
zp)~(5>-m(rmfgN6itkGuJ0xYJ2Gp49xzK`gVV|o4BEckUr1F^KCBtN`k=B6&`T4cq
z4W`#H8_Z&s<OVnK^CZVkhu^_ieVG9Kuz|C_bJxM`^YOFT>Lmm<5mNdwjw<!1I1XG<
z@QolEy#C=wJz66}wS@F4v;%nfFa6`iUjowF;y`KiyCfKV8$deLx>EgCMgX@Mq_@`i
z1P~m=42bOBVn(;+a{ix3@!`O*eUN!XdFuf}`f_iyplS3-gAKqCdF?TOSR=*20Ym5n
z89}pVh8IFORID7*>4lvvCNX^^*<ls(0;WQ?V;{)BE!a12UV;#e!j1e88n5V;u*U7d
zxV|roUgZ}!7lG5<nF(rbc_z{LezP>gWjcNilH5Mzg4wpmfp_UO!$E4FL&COTI;Djg
zRyC8xz~Q=vx353$O0KEb(xW-q+HBXA6-8L|oy>H6-Mu@sXlQ1QJ+8p_VrCA*Blh!9
zOG&qp``bE50}{1b-Eql8bxc(x)ix5>H{$9*^2fdGkrdOO^32Q*B^j9eS^4wj+HRJ>
zN8bj6+IyAxRP0{ajMLB=i{-Bc{i!H-3)hn@g<AAx7SSb}0B=H>|Clpm%wq*%@=&iO
z^M@*0lD09jfA@YGabyL|vPrqpG>7=5>UD<w=m~bJGvn`7K=^X5u(McXn=ynZ_R28s
z&^XqNhJXCPyZI=U`!Yf6((SAkuA(DQUiIPp<&xsgf9Cd!$)f&g>|R3NfAMs{`p&jB
z-KI1>*$a~^6-JD$PEr||4xKcrKsmvBkB>%N>66BaFhQAERuebJjDt@pO;NFj^KJZe
zBp%FTc|kLcDYrp<41$cI?Q`}mS%i>*1hX3dc;fD67Wt!agIJ{aGJ#S9aP5L}jot5E
zMTPW<Tm-!r2AJ`c`3q6#BR7^?6ysvxi9!aL8#`n5i>W;ov`RL?{ljrSi1?NAL9r&}
zD)i7jI)1WoQXY9vqWj2@I|M<Fat=?VcBs+BRy1pE73smLY|&9ul`|EYG+;M4YkjpC
z$TmGLrqV&>ZYrx$Da4QgF!f<^k*HFaoDAi$R`DW@2K(t)_JdZ1+-O<zv$ovQ0;#LA
zD-IWhOjEbC>KO2k1!|X>W`XgA%aj`hh0U>mK+9wKGT!Jzn^_H%hk)0u4p26462{e|
zRk!2Vbp~tN96?R=apgMuuU0!B!mxv5*9Ix|efw&InxTmr<<K#$ekeW`7$K2Xem-6~
zM|97MIi#V2c>Tp>O)HOh#qp{A>NzHqB7^bF?mB6aW9`8V;ej$D)@`I*gYrA_c}o-{
zV&)?SzgFnr?AKPbK$#fVio1h_?Z<)*<t5f8`TRWW(8#ztS&gQJ6YtXgs4JsAgxx}~
z6V2Dt2lkTb#$gkvDK3abx9y7YIsaUWt%y4drQeAGXv)u5T0Ie0S#TxCioO>?XU;)7
z+=z^4H%cm)xVl+Bf5(R7{`egUm+hIR>Irmh?fYu>27TX9?gW%xI3J}}RI}mfTqWx8
z<K&ET1io7omn|eX^M45meDer^$I4w2M97+U4ehEGXg=B<ISC@{HpQsn-1&o7FMykw
zG5r?bn}{OpXHML=G%643^skIC$x}riqOA6k)GpogWMP~l{C(f@pJ|5l;S)Adpa1}g
zXaE4X|K;@KXvF*<ljQ$$0$BQ?i~eD_{Jz$6aGK+n)z)hKL}J_Ur*_%U7tmzJoc+TD
zlTm0`+DI&}oK*efw{u4>b+2_yjoAs+uR(Z&w~dRRIKuowRS!>Q;EWzsRRL19bMxCg
zLlvF23};(}yS<$~=*7W(DkJznS$2TkqOaj*0Nf<L4?Oqw71|9OqPTt<<Urt$jyQ1I
z2!RxR&oz(`iz?HQWewmhg|xx(rT~JZIC8E1p)&C<WFBy@33nm^kp3R^eF!o=9Gjpl
zBzMple>yThdjcFKS2^Am1^K6ZCWx!6CnI|=2K9O(eGK9hYDDx9aSEaE2L?{XWvQa*
z*o5iB@o_1lA&kU6+n?9UikM6d_Lz$7xAN_3<=hDWw~C3q6X8xmYiU0n+xsEo78<nv
z6iX_ssu<CvxPfAZno8A~BfQ^Uak6^ZF*7?ceA&%Zgg@s*M2z#Hh&pxL)x`({{GDDH
zv6k@_s9oe=?T^vt9uVfB5?CSz)PG?rTZqo%I;0N(V32!HQp`3-Ci#LkJE#v$C)W?3
zJmnZ&Mqh+E73s6@gtbB0pAIL@eA8gOiVAFEchP6@e0ZvZJghW-ipxkga7ns&NZ>yt
zIgv>+s)%2XpU4=P-O`{3T8B08U*>4H!npa?6J=KtrdLk@OO;EI?VZ0?1bek!tupNE
z?$))rCp}2Ixr4(>9=p~O=YUWC;>V0{tJ5qQE=0R_N<N39eHoGXaVgv{@sF*5-oCJT
zP8wTF4Eb!rDq)s50t0#pcSexrqy}%00Xce_6))V-*2y-Pl)n>W4vj(f6IQV%tQ4Dj
zeW_@rB^?_GJhRe(hNT9|u;UW;Tve|nlEtbt68cPw>q!Z^c6$?&f-I9f!3k(SZZG|m
zyAh>FBw?>H&lfY><qW9Ub*^JKjf&)@p8tZ~M=XBEIGD5$pya6$|J6pW1J}Q?_~((i
zX;b{9LL?(AzFA_(65ZiJl{E>vs8zJ!m739Ty9lW>aRNzJv=4VibcyP`?*QY?9Ph|x
z<=rKt_anh}NXhy0V>gL&owXt)X%XACdKqF%z8g;!DU`q);g-qy?qoMVb<Phk-JU~~
z-w0krCoj{GnOV$bl?hF6xjZ#z?L6ZS6AROleNq4y=?)#9=bg6dmpfQy9&Vug8FM~^
zrHf;yF)=qiLf%v%44+olcq0ffxc<^E8B7h1Y{zNeq~Yu2oyPe=DuOnJU*x)xiVpmP
zV@sBzdySHN428A>AT~pR6q<>=yKSp&73c8YlljE#M$Ud4VrsXQtjOt1ZUUL;(OvJY
z=T5l1jaeDP9yqwj0#14EhB1`~;a&&yo|$k((5U}$3JVEd`ziusF0myTx=<|=SKJKV
zm864L#Qt*;1+Amu#zsVU!rHTV3BkdAn;n0*Woh}5ujc`cpvp4FJF2c&q%=?F$-dto
zTQ6|esIpzA^yAp%ZN^_QEy<p~nbNSoT@9#9dfvbqyA1lG_R>=OsGmyQ13uFK3N82z
z80g3C4mB3Yhk8YU%5Utc*NaW~bKya+by6HXL#|9m^6`yQzPst#X)En`tVt{WWtv^r
zctjDRLznK<{iBlfqW7BzFHhSS#I<?I_!ur_x@v(fC~D$vZTEBPXe04!_#!Nq@ER_v
zYh=G)GiiJ!x96hqXEs$zIm;9os;F`fbLNbi=N*|-qtQ7y?|KYo<`HboE*yT+6nUEB
z6bWpqRN&Eag>@>^F)~?DUt^;8T7G3lm|rz2IbPzaSvu3O%F;O2JXVD4g=0RwPfdz@
z77IQ+X4frkU2Ax2jH(maeI15jlJm7)k5E1_v~^m{(Av0~owj&Cg%#6bu^hVPqSZ0J
zU$9}5J5cPA$J<@KHX%#Nl4?2LJvb`~09gBr53J^%(hK<STVaku%#QmXx`aya|GpKr
zx3X|{qWPDj=l`T}ywcHf+h9-hwfzevJeDETx{)Y;eqP<RVMFHRO`2nDQ|9$z?aIRp
zs<kO!9Ewhs$(y^=1ByWGK=MmuIwNdJs5-tctPUzf5D*1gE-zmop(H4a9&h&*uf_oj
zms_N4%rhy}Z33rbVDEAkmlN5!W$<(hYa}hrZuW!uO%Lbrw0Ja4BJ*iZ0;K?2@s|)f
z`@k8G?jw9I(0mqspF=2mc{n<|2nRS)O53cHW5Wp4v+g6}`%E!Em0!?4v6x6GAgNv`
zW+yCB^lchIofFD1xwz^D`QrgV(TqV)@hVJ+0f=vOV%BEZA6^taI{?U@q(GF5skgJL
zwzRrRD-FeBfL4emZdkiWZs~l_$WNR~ng{P3Tv)I?KEG=+0{&EyFXC?OWEU{$)Ne*T
z5pelWo>N3XL6l?cWHNFZ!^iI*oaHp~5lr$kG<!PTJkM+E(Xlx(aPTTv&s2c-r}ddM
zI(WE0T8}um+l9Kle77qX)_s~c1?Z=7z#w_0?3|@T;$1=3m?3N{c}jj;GpXXWpZB|a
z0AiTn-*-lehq+zhgs;OOgL?HHm`b2TkFM>S@{{M(g7xW2eBWs}oQ%4Qq@W@}gfDi5
zjbJLr?@H-rQS>CIj~@hDAykU_Jy{=9QvhYRH!7OOZxT5EE_%cgzEJ1`8}zqMoAC2E
z=Xj$incE`Jd@o)QD7T09bIpGni;;s|IEp#iZlvFv=IU=Aa|#w--t7zcGM{jVqfwkU
zpgOe$>T2>wP;pvNaU4KLY(Ph}`z5scCE_Bk>X0#ruoa*Ah6mod!({hiJ>}>U8RhzW
z`w+@}z=;S+gIJ4-7}eh|aI{B|KBDM*CgdHZ>OKH5*?oTpM3p=P8Yh4ZL5+CiwO9Q>
zri}Tt_YFpDq9H~*VYpG{!C3PN>YH8=it#$*?FRhN@j{sa2yPC;nmE9J!Szr@8$hV(
z1|<^;Wjed$LA@}&VTBlL;}@MQ^8bZ?5}i%r%ilI}NB{6hFnq+8mBJ1@_B!qL+l5LM
z@p~w;4>*Uy>;%$w9J$4mB%lT4h`XVfJd+3#4$$VARR+3qk5{WBMwo#!UJQ3~^&pI5
zo(~$`j~0o4@rBAHOSQ+N6G-8B`UJ6?+#4f6*2M{cuHl?hL>!_(Rb%{hjpOZ=PR-Z=
zz10ZKaW!!G1P$gja0;^-T0nP#6i#KK2VD4E1hdZ)sa1wydi(3$-lcM2ztf34z+UIo
z4Cer)=L?svw$JI@Up;M{z(|FRtgRUOBGRY@7zfj&kWxf&&bcU%@kqhF+Z?fsq%e@t
zN+k+}(WqG%A#M%X0esP;n*{I384?fvn=CWs=Ov$rz~&C2W~tCjg?OYR3B;6RLP4Hw
z5P{K4Cv+QN#W(8?iD_&M$!H0TnZ+;r#o`WjigIo$f}A8kN*WJ;VwN#hYaDL@tO)Ad
z`zLw-M50rG%mY&*P&kX_!M8XNhEYjiyJn5KWFSA3Bxn*l9$u}^EKNQJLjs2wT3b?G
zHMfmo8PicYkz7(AO1RCUF)$s!RDh9(Nk1K^!?gSt97`cbZ0d3aeE%j#@T3FU@g5IY
z$x(k}Fe0obh_UM2$I#3l00#%mYOd>~{4<v^zO*KW^Dit@Oq;*^GAoaie%z4q7)r%Y
za_O8LCgdHCGIDB3F{X7b$KiEvQN8(&;Yykn1sTc?)m84fCZNuAEZ>&Jqcl*{FE7k{
z&SbH09fWN3wY+4-io;&26+sqLWzGp2!?V=!LK+TkVrkL{egR{~6UE_Z<U<5>)PNn|
za#B3cA3mWj8k@#`R1jd*r-4B4xY9;vX2kW-g@G`U*&q=xiPWs<ps-hw?vO(4e_+V{
z^?}#J%XeR;WUW~vnt181qSY3{UX`-FV=dm)9N=PiRaC0*dbWk<S2n{57HvfBA_&r7
zXW@cUk)^dr4<Ht%yULr>FoOTq>n`p^o8Ge5Miav%S#B>CNG!xf4$AP|Z&nRdiOtJ{
z?UxaFpD6uxf?Qy5zS}T#87LJJi%>!(Fi>t0kT8g4ti`pZ^%NRT2NS}sqD(H`;va`t
z1cF4f3CygJue9DAbdFd-7#4!R%gw6p69@kWwOh?BV|L6)q)KnYMX6CzG%U*4EbW4=
z-!$e0Hi7IMs7JB3oo5|i11YmegyPP|bzd|x;YJ!XOzjT|x+(ao-kk3ooV)t<G!KoZ
zo4GM;ZTk_!;l{{x&oXxVmDATfl;@JPEiYIEoRCG$dADxb<$!sEHHHWSB`VJ%C7rQp
z&eg2IwcakI3~IMYd0w2N&7zhh3pOBsET6I29Fz@Lhq(dOu?A;9^_q$Xj67tmAq<9W
zlq-ls1Fny3TCDP+Lf|S?>Ch4_m6-rSrfFdxsQY0YRBuvMggVVMfXT|Ex#!NLBJ2%a
zFl>RUeCjGptRrPAiL;1}!xmne;w)lI-7iDE`^ZJ4*-k-Lg(uB*fMJ~DQfNVnOSHZz
zxY*HMZWvq=rc_vk#y$cx-7c)Krwz@1uq(g!8bi#ZJ~12b6&TkEV;&kKK!eo=+{eWL
z+{nz1!fcRY6hIaYr{b_sGb*z&+K|PwpTKAQjf=K*uIyNqcN>~&`3bH4s{r`!GFz@H
zTGH`CX{=`1K5$}QC@~WXhwts8f1SHJn)N)MrQMw<VP9q(Tgu)DT0>=YJXNxtvhpyH
z@439ldmh~gNw3y{U(l?xI#?r)Czk*oE0wnzgV9?ql?jH5%2wS3Nz`|k1gu&rhy;#z
z4jl2Q37R}U@dU*p68N6F5G`i-nw#W3pX3mDBuJ8~*!>NputON{<o=GdlUNJnXd!dl
zJ99ovTAy#bo-pinB9l2?FRkr$Ud<vPK=+NH`i-lYMEY{G&TJ(2_f<}28=2)b>!Ro1
zP_+y12O@1OkD5o(kA=-?Ya5g^SM}YEV%Gifjb?QMzogjB+<c~ME3Puvu8r8FnBhkp
zt*%vMR5!Hk?fv9SPsqjJcKNh&$}6(ccrp^(wTrH;-?W*WxkS*ZL>IN2I(kOXcn5ZU
zMub=|T<N4le%+-T#N26Pt=g>)GRSkaZA1#Jw@Wa;>x_3>>FckeD?${cdjk|Esof`g
z0OLA9<KEbI_h4#@+9J_3ifj$4y6>kIOeB{=Vj%&;*T8Ji2AxT*365Qnn_xHABU+w|
z1uVo|QMv^0lRU?(T_IabPSljrZo7k&y~5VxEgKkf6H)@!KyYGx%3o29W;c9cT7$83
zj+MXfE?JIj_)w-kJHrYm>lQY<uf&Qo^4eJV>Z0&J00E82GCNoatGYrE%_SGzlBrxW
z;3%)*l(o4iTe??5)~|HKf%uFMPe3H_z%ahN_QYnrHj(8g1k~yHv0&FTUI!B+ed^np
zQYuJLKkO~cD4FIMTH@!1rM==HO$&+EBW8Go0y;>rKg4ZUY8^um4j#WqUc2Z?d&yBM
z+OG=2m)4t;unL6nH}!UVQ4J#JsK7M8%(bWnwV7F;xf+oQfa<qJH%Dp*wVPXM1><_F
zn9)x<j@9%@C7-$2x<u)m95xE1#5QjDtXbfW_m73z0`dIt4Y%{kq4x1Fi$xu|CRwzw
z7nRHCxIE)}wezATo~}-LrYUoKF!}Kh8%up@UKC;E#Ig%M-HVw48XQ-if09O_C4~+q
zTMOqH9W-CaN%pT~gR{#2xMObjakt#BeAKfv?hrgHo7iI6#`RJbJ8yQ+dcdf7q>6S=
zFfMJyhUaM9G~%_uf&>hYHkRS}{ly)Prr{Ffdb^rAh^FZpmNsg{k7H_B9C7u!)w(b;
ztbk{V(Ru2JfUsjwq3I#LF?;<Z3P8c;c(l%>b5$i=srB6xSw%x(U|SM+<<`@d3m2A3
z<Qmq!fg4(Fgh_N+ue4E!@%}>5>FM@-9sb2nOuJGSMXx3HEjqK*5@X){Ft26<^}{{J
z_{zYvz0nG|XM_o8)9dXOyuDm~<E)KuU?PTDug5VDAZoda;K=n(9}6l#66}-Tkp@@`
z+Y=Mq8b{mq;2Z0U-9LJA=Z1(Q))u2r++0+n5hpL!8>4^t@Y)3tOJqyrthoLz2HPc{
zS?M!eHx+Z(y2G)$+{g6-`%_-@caLv2>qh$K&JUUYvy7F!asP$p4~ZC5S}V~j`*kjo
z(_2U6ghC<uK>b!<y41`uo?g{DhJ@5{!wH$%w(e}>s-1nY*`6;+l<5U1?NvouvlgtT
z?T&s^zfBH>2<MJ|s<W1vM8fpJWPCK(U(KXpnjG>An|I7{`h6?69RACr(gd=D$+iL}
zwt0u*G;=Qh)d^`v+~+@{b(2{Jo+ovm3er>WmozdB#&?Z7@}Y=3k_-S8cC0a_jIm}x
zMZaST_oF+9=6_EXhqGLV&i!64>yz#@;AF~R&wcEv02KE~v13khFlA*Qm-42Z-UJi#
z@Q@oql-V{8x!3Z-!l6xxfD~ad6`9)C@+2i#OIN{m=ElZZOJ`v(vTaZ{QXRtDm`#|{
zC_0LOjkTV^%C7jiOk-thw0SPFDXKg{XdqzKSp_bZ@Ds$&p7zMdCMe5uZ5>(vL##RJ
z^3<~7c!z+&04WQNU^j!snTv~C7c@PZI$fSKy&5~+9yC3e3THQ63E8RC4>G0|V52`-
zs=~=+A?ysO(6nrB)<ZI_9d`ih(Lnp;)Ns$(LYR6I?hM19Xtq4-KyymY5Gpy+R7mt@
z(z3uaP2<<jzEb2|T>gtbP>U5PhO33CA-_l%lQO3QHOHdN)l^k8w<Su&1exnV>3bf3
zYb@bXJlyyVrN6nIB0dF`K9Nv^C;mOMCwX!JQzD@nPt2#rlR42rG{^94dt7Z0%k9tU
zy%IS+GIYhFyz0_)b5blVNr<4Cseo9{hYHCIjr}4u3ME`#&W%l=VEWs@>$S99Ov{P#
zAku;?u|qS538vfFjo#SIbrY$8uFVn_XD#H(qp;wfv}Vx2)OQUzO$12}WnEgVY>rUF
zAhMt)Y)(V8Q%3bI=rfZ&-8;RiRj?s()zBRE1T*`BEKUqd6+M%}1XMU{U1a5v2Y57V
zPUJawn2umaCO2iJqxMiLDvl28FVwKCubG+cw70fD?udz-P$__&jb^GtNTz;F@u!(A
z&Z4Z&>knXv=?$>a)>D*|gR+!!*-HsWP^mcDzYQ?S-|AJq%E$MpHGnL}V2dSL*#4v|
z0YRQo$`yKNptw!kdk5lJCRRII4=|REk@}znTgVIhMxwdL9Dv3K$>8V2b5Tr3lAEdf
zMt^dXc_o4v9nqOnj-#Mkplu(REAd{>yb`+*U&}IZL;x=PnOu)UO=geP&L}R8K;G8O
zTR8$zBelb@VJfD09fB<g!KjByYi3LHwbO}`2qj4_@#{WdQlSxny&xI8-K)xM9<~Cw
zlEEzic#0;_Aca+^p2cWFv>J;uBIC3HWHyDW;CrB`K|;^iCx3(y*HocU#+4)sLn|VT
z=LEGui0c|7b$;%fm1dvbyVoHheJ|(ZF5`^|4m3uNI9^f{tP^`FLBwhTbahDsv$INW
zZW(Y!kkNolWo&Cg$i{$dICf`1PDi`jtZh%aKcEF@Wp`=lJ0NR-Fq?T-@hP%yP~Kj2
z%MEzxN#bdeU8IOD3#$jKzWIbWt7v9>=EItBJFsY)!CZ?{f#-_(3`C`YAN|6AVegjE
z*TyF*<Gd<XpOZMkfYnn)xBa50q+1NziZ>D%)q9K2JZ8?;Zy^Y2A21A535C0{cpp2z
zafx(FyuuM!D%He4$IZ>1MfO{Dp!;IcEf^pO0WwzXelCK*^~HogSurL-JuK%=JWT%X
zi_KmN>a8Ad7K+3BMK;hkDHR*aG0KWLxe7!RD2Rudlq5R4Rt0_E&0%^R-wLh(fF+20
z7@cj#S8!l-7)wS6*Yk0(+r={07)x81e++v5<?DF&{CSlZCokY+LW(G{B-arSxij+>
z$I$0ZHU?z?G8S>!?qtS`HC;xFc+wRHtU-44Fs}%DSkj*@OcrG&56wx<=q(e2lbnsh
zfkl1$ML^3hcOB>FSnk`3o(tf>Lx5X^T%5j&S*P#03&kUOvL+|rt}J^~7=G|Ro5rZL
zjz}JeW<&}RG6sn1TQ5A5b)Zp66m}ZGe1^M9xVktqQ>!;$^*C7g&iN?eBaB!D?B>+|
z0{jW-L|=;TZF6t%X-=Ukz9%xyGwW9+l-N$%9ZR}L_sGlO)Z##>?87_7P&K<*OXUkc
z)t-#p^(V#R{4emkfj=C0P{^~ZM=h)__eW9Z^Xv!}qjA+A<z})&fbw^cVgcA$<ikVd
zmj<=8x78wwHM=B2U3sRuNZ!SrcH{zg8VE)e^aw<4wpy_s*n&ICE~3A{Yo6ymjOODr
z4hIQ?hBM~@D%jlw%!+>b`8HwEiAIlV_fK_-(8YiAzw&0|_zE-J>zGUOX7grmC$4G=
z^)z!JCD?N}2M@`M%XvAeM$Ras&o~8UU3D_l@`<+nX6Y*?uf`lCx}s)5Cr;t7Kf;w?
z0nfzkQS$>F_mo&#z}ICgaCN3`Ma528l82+n)|WM6RwjXBolWNy6C$hzd1O?n8o{WW
z1OnlWkBe47vOIhL_Q*glMNg%9n!9N#VV8jpF&%f)!vH^{q5*PzXfo?nbl6va@66d8
zoTh^dkjgC|or%9Fd#-Ge`7FEkp0?`^415WRb?@wzzwCu)@TkJQWj;p;Kb;s~m04sF
ziT<YgCVLu^K@c9AV?cC{MXy|@N<pdu>im>H1jYN5OQ8UY${>uLefaL}ac7-n(X9+j
z2La%sybUU-xZhRq#KN{98q7e<Rn6ynVnQpRF4w_l<AYWnJB3V$GxdgAE%C>CdyGFv
zZ5WZtAiVU$3Z|3p7EsE#l;IjGvKraa;ZhEdTYGVRR*jWiC!aHEQ;28qR1Up+{L7$<
zlhv9yo&N+BFUQlwXll#VBxtC*N>9~lN~-HI`^LfPZL}$UodZ`VOQQ6?Q)Ff$Ua!(8
zR(VMxU(?wPC*Jwxa^<bgFGq>XLlu-!6HK7;OeowBt*{CquocwTyPE6Qfc+OY4SMNb
zPlMvph~jpp2kmva|69o8(HT_vEI+YpeWa+1E<6N|SWw*7N_||Ky)9#jbnL6vd}x9Y
z!aj8iO(8FZmwcZ*ny=v?Ju9a0?|<ZeUVLl00RQC6#r_|t9RIjcjhzgBvIYMwQSg6>
znVBTAB^L1m066J3aI}O3r~EMhg9i$z$Aq{s2=V#avhl=qUH|&}Lf4H?9!Wd8?*!^)
z{`Gm%!yu&a3Mv4REwdjd;Rus?98ixM5+5Y6AK;R4ers~(z&<Z6kGf@W)-{rgE*{Ot
z9$VAROR+s*N0=Lw+7X}(t%x-yu4PO2k^F*-+FZeyn>>78Mv+YjQMa!os=+V)1lh2T
zs`Y?deY?(b$a$YN9u)PhD%Rr$gz}djN4&VfDucRmb;if6*xF9GCWMpoGT4>@xg5Ws
ztJ511B;Ofu$ao|A;6PPy1#4q>iA@Sq8F>$*9s;!fIpTA<%JuSc<+6peRQc1Xy|=_w
zQh|eR?T$cYiqSxH`O?wMd%aDI9&VY8bVf&`a~y%pl4I4@B&^SlXwuGvm|nx9*WM~w
zx3u_RzDT!~1Utg(&~l8Z%%0V04{a-YFiFgUzsjpP|K`|N9WZp#Kz9BaO$m2zC`b7u
zNNuO{r3_vHv2(XA*g-f*I+Re%niL!vvLPbbryP>ct@@2YESp9aDUK;Iao<zAB1Cm&
zaI>tlVC4<7*L0xKhVOO>m+`w4+ri6LW|%?Cg^K=cXg{zkDhRJx){GC|UE+jYTw23h
zHN{V_!iQFSs#0(VNtTdeAVwg*=!g6AQ2&NLu7^qUh@2~@uEYDNVW&43{N1jD@85m(
zHg|KGzCURzA5Z`QSpOv&t0*EMEF<zi33ogHdopH>s*N2X+drXLh9g-hWfWRv6)pKn
zQk*i~EbYRe$`!eYHQc@!x9*m11eBv*x8cxBpuJ2LVRbLvJP*^*ok^(QfElIw3<{u}
z4z9Nlcm3+|Z&=)%@V>uzs%0RlGQ5^)XQ!j5*6(I1;|TgmR8jGoC5lH-lxfvFy6)y}
zglL&K{U#sEZeEX{6X0_>dtj?THDTEDaWd|yfGaYo;5{;A5`-i~P~w10YQJe1)IpdI
z=&6aJi;ylM9Eub;JDE{bA#|ozNzDrHOXj4EkvVGrWQ?Eq!>1?f%CguhDrzPHh+M>o
z!?FwcLNFesjNxiPW^Pe=#4(jL0Nb080}7o$N6H}sqyi!484n*LC($v$cZTUhJKz~r
z1@7VysrSoBXZN}$nw>#h<Q}43s2Nf}GlZ%cack_V+F3P@k=J0@*+dI<+xBl}Hs<dZ
z2W8ByS8MBqyYT`1O0O)Dl&a{jX@coift0_5juo1LRj^FpaCnC!Nb&`os>n?0N@d?t
zN!44pPH3f|cav3uY>Y<Q6owp5x|9@21-YcRiNM2@oAqQ-nl#Xl?P8r|5Tokw1}q|3
zC+7#>_qq>w(>}tuw$}*9KRZ44ejPCv6jm=n<(m@_lHwBE@c)Blhg3w7xaWZ#s&>Gt
z4L`zWgAqr!L64c&HaL^r>Zoj8`CK|1F#0!H`;E~}i&rh%qaZ4d+uC`d3S5+;vm*sl
z?KaoF`kH}0^Z#S)oT5YPmNp&R$&PK?wr$(CZQI(hZ96-5vSZt}I_LD?J-W~6?;kxc
z7H-z4t6DW@z3)>MU=LldU>(Jco8{x3%s|fUFnA;c9y0PuaGzhngy+vAlvK=clo)7m
zwj5Wcg`(4<SeU<tD_cda@GWKJey!&dKc5QHCUBh69~+9qhKfeOxQJJaJv81k4zhP#
zSsG+pUtSrk!ZmLspuEWI@0C9XrBM7m(!S_sXHrT6QA?nGcqXK@Nkn#oAs7>L`I@y{
z+Z=V%=)x-I5^<g9*cm7>#DK>&WE<lFk*XyYgn8y)$ARO&qf{b?o+c$l48@5%$T={F
z`di~cukbEjy*xyz+<yOnqa=%SRfc9YK&H)I4~&Dc|Kf@*y!0(%1FR<En7OU13D0E3
zDA}?|v3$MM<;t!5vGeLfVk4`x39D=Bn{#_IVVHJaz2=f{au6HTsF%m)-+c_bSVAqc
zL(VCpOOXW|ZDBIK!KSg7j7k2n{kE3<{4`?}e#pGS18WyoaEIe*7&@P(JmvoBT(<n)
zp<7!+77Cp)WAUme;`(%~Fb;LQ92k0?c>FWy*w-RrIgRZ82ee2C^Vk|b5$0f}c#Htw
zUkMX&j#>@@Sv@RwtX5e12Bkd*2ich4^F2V9iCTZ86`w)iL|vDxT5p6VI;+c!QUtH4
zR7BF>Wf8Wmn;1%U36om~A{!IMkT_<}%@Jft2^Lr6`rM)c*|fzfrYG83NSE|iqA&TU
z%WbX{Y9Pk2;PP#<6w6WI=yUtdka7?{{&Ih#5n@Nx#4!Rf(WK0&f;B|x&MJX7RsrwD
zu<-sq5r;N7<F_qcqcu}hc&s+_zV!Q&97g<WZzeA7+Ad7(T5Ip$8SN*1{VeI<@{<34
z_^%7vKV&o`XS)BbAGVe%Q+IKP1^@&(0R{m0_vQaikpYXs4Y@xlauEEV(L_HVw6-(T
zv$pt`vd_-e^nZW-{~_*6Ng0c+WJd{oene@Odt(enFfT_ng%HB$_XnA`Y(|GkCqO6x
z$?Z`Z>#kOna8tmVc#E_4<Ncap=mIf--1i&jyyW#<d7J=Cap{E-MR{=Pv_3EM=Lx=K
z6s3sNU#H^>bJQ%rP=(cYRr;mviB2Qt4vF;e^t60T>(@J67p1xQP}bAs*Jb9j?d)f$
z9{FYs;V0}8QtXnGitxSxOF|Ci`69LrmR19)=^jB^Wk)cio=Th^UsA>r^&>DRChq?O
z1G*X>E0L)oU<gXlW?DBR^jiq~p<fHIbR_?+r7eO@Z)?fSWZD5&z30w}7Jv$=3MD)x
zjWOqZnr#|h_L4vw+o9OjG^$4JinxM(sb=P~KWXpJa>gd%{>>k&;-HcpgxsUy3aYNZ
ze|`mN1i(}k9p%m8_`JWkAM9p~)<(qVw)(R18C`4U_yV&)GRg@5Dl=;si7;h3VG_(#
zFpRi>;Jkts{euHG6d>eQv~f$DpxGs7B{IL3`&*8%rY2x4sjgtrk(<7N-1ZTZTfwjA
z$xgqY>P^=dI;{_z2clWf`~@3U1|eX6W8)b@4PuEcV|EQlBR<^g?{e`aGKop?`=GbE
z7#1T55}MaN@kqO~+!YmzQwNWi8U32)-j~_<HUOUQaBoDFHJ2ZfDV)s%7rc9wDu-Qb
z#G$q(LckxakZiVQYuy}*sU}k}>f^BGTSwv(s118d=le16Cj~{1R#jDn84*hVQ{-2*
zM{g2TT+Z)VzU~{_LD%3*Hh%#`+Y#%PB2f0Z4(nF!)$pMZ&C!o1`5P-CU=PnJC^23A
zL2EMCvBff@X*c}%cV_$P_}SIG(T|2l=oN*EQMZQ)q*}`F$O*nByvW<B$-AU-lhT~)
z&T@1b&t)m;s6yLr<D@s=hqaHE!`F#}O7h*e^rk3SKI+BTUr!lV#+8q(r-%HwCr(%?
zX*{i+DhB4g{CYkoRAqO{y%Ob#e>Hd15+)9l4R6KKZ(^sHhi0j>naKUoHNt2%#qMK<
zwJr~SRlvz+b(xfglL(ol;bth@Xjh=@XyE#A;07CbcYoKizNRdEmHQ<%Vb|nPzjX+^
zC&Wt&kB!VDs@aLEyeLm_pIMt*EszT3I7w&ki1c^mD4T<2Jr3Pn8eLvNksi&}DG}O2
z4L6Cfc_s9`y{Jv^D}C}67uZX}J!xxl!-Nt)g*x>iwF02S8-jWNd3AnHkIJLP66qOn
zJ$2WVac+`E_ug3H5QR*l7M_&xqUKXwdvr($lre>3AF0sP2U$yc4;-s3b93WT-0tx4
zxSP)2l>XH@$0k9Q;;Qd)WdTI>W!b)$S0<_w`8vHTY#dN85uBZNe<$u3-@(b51Fn)E
zda_uGwmqpF!}=6(fWKbFy1`t{MxOoyo{D5_fi31W<_&wmxU%wxKCw4-Q!x~}mTtmk
zV%YLDzgz%va1vY#NSNFpXI8j`!Dru;=!ZF4BbOj$h`8t?H(tiOHYhsw`3(--+fAn|
z(!X!Xex0I~%MY2<7B92*=jlg>B7nXKITwmPZa4wLbENUoB!Q!h?sgUEa-LPpy#dhH
z+UoZoQVuCEKpxp2$ByvN?gQ_ilc}?{69cW2k@J6-_DmAE?64RRg5N)&QXO{vYY&Y$
zaq%SlixLxb>nz@(azIWmUXIN?00RL=Ec<kPxf;1A>7@LS+Vz%SJ$$)qbhsx=eYN6B
zp?M*Bd*2>ef1{})TuXYV;@#O&eX#e2UyE3W%;zyWi>S(jP$1HX4|*0sl<ojUgZ)Z|
z8TT9e#={dpWXba|4l_hhKNc{o$fp054rZsooxQpB%`^@+e@F=ec}PH${9eEVNt1%8
z=f`V3^=NcC0pS>=J}tFP3!nYf)}zCP{I<Vv>Hh7dt9K2*ok-exZ%#~YwlGT#<Q#O5
zAF`+qVIt^=54}&XQq}^mfvpvG@Dx~1K&lQ}IZ{JNa29Y(z=_XH+z75LxJ2KD(E2KG
z#J5y{YRrM19xQ!>nS`0c#a~#z&)i>pOA<{Ggua6@8;VuZVEZcur;LYxUK|@*5L<~O
z1jg?_j8zerik00E003Vk|BP-lw6L@PAvZezAHvFisOGCRf7p4fNI&enfQtQS;|Uar
zgm|6O90wmuTBVWcp|MGq>}XLWf+(Jd#rWh+ZL#le07(B%fQ*;J7Xh%kAI)BX4mIk-
zO`Q<jm`KNG=CE63;7g6z*vK!UWv$eW4ei8djW;qalml<Is(EU+(N|9y-tZod*FMM8
z&BoDPbf6<f-8y13#8nc+32{LEzbWAl!bWPY7f(2XU*c}YOz)D3P57PJklBX6j*T&D
zF%0}@R$A~K1W`{-J7dkp0u#d8)KhklL<6Z!AtjE7qup|EuhwgUBGrUvkS^{nhY!w7
z3)b$O(;S+}r=zHIuOrzH-!L+M3EHWktbdg5-t6x7OT2O&ysk+!b{Z5jC)e&*MNVb9
z;kk11{TVatjzagyK~u=)tkjcNLM3x+lPQ2ZRymf{os4wv2Um;dbMvU55<WHC%e9y@
zWSJP<b)5KGyZdD@cbT?+1ATqx7ItIiKI*5<i+aa)+7UZ}=X%hw8Bmc@+`*|ZK)VWW
z2_i=*Z$^y}t5d6(ZxkXjvS&x~8-U}_Eel++GmO1?v0hpQF7gJjL5y@2fA1glH0m~h
zC<H@&!qAS!Qhw(~(Z%M9Km?&^a<a67*5G|$oalN5<Z?_z|AJV+!=)(*OKZVb6|wMP
zG$eyp7p4JDhI-KkBA`KaqRq%WS(!3^0gU@%5h(gHHGXCMiZGjPdf$aNt;y}dBfAy9
zAmAo1|1j=8d%zuF{c#vNdO$H$e0qli2vSph2t;fB{=d^Zfsevh{-62%1YNWKA-I53
zAcBUq0``l6z_tqSArZ%bfCE@s?z3!`$Mk?cKP3+tD!wB^48$iaN5rYaR(VMHXHh6K
zLQn?|(A&6>dp7@VK(ZVTiTLLzCme=&EIRj;|9+UEyn=A$#H-3DSy^u~5f~mlf9w2b
zxghg7`!qg>A^Ivz0E1K{ASiAhg1X}n!U{}&f8L*PAVhtL{0&E5z8_`qxPnn?xGVOQ
zzuMXp-tRS-$1cUJ08Z2(voXZM71Ns(FdM`8Tu^jxsaSMb>(GSEWiT+qYUj<~RH9I&
zEP*vJ77Y15U>HD63#PM}COIsFTGnFJ->iH1i9}$R3!>7CaAz$qO^5^u*bFZ$z)&g8
zQGqW0E<~1u{|*i?mt@#qh+H3nn!^ynI&@YY+?Y$#HdyIkKb(LWW9MJ7<;7vm{Tf3A
zZpL`{i7bDMCE7jeAl$&3i5#z324=DTe?_Kn=>Q93xl9klnE0>A@*7~+hWM?uI0J8k
zS6Wa`lB#$I|ME>8|K;Z>f5P#Irq1ZEpVz<pUCIh%DZs;ugL#{=AP?v7SeD`<;}v)b
zBv7VuNF9CtJHl3w5~WNztiPhO!m{vZl7t(K^I^Lj)w?7(O8gz9e9e6xp!sZz>aX}G
zidnFcc0lvFP-C%>+0l?m<I(X@%}Gk;c>*RpOUdvxrUC>rVN*#ECqnlEmPSHk7vsVK
zZ*VeERD1nML|1*IpaY1UP6top12Ncl5A@6xav{MLh-L921kz>(gG`V+VrZ02M*P`&
z*hoi`cxsI@UKD~wWUOCg()dOV`eO3I`f@hvL{=3J3Y4KtWKPSaG;CJ1ZCXwNcDq!p
zBm&_yY&NuQR!)_gmpVxuX;!ajHtkMM{nc6Pp4UgL2ZBw9M^irin^-pOUQT-U@1j|D
z+w5H4PS(GT>Ns0G=8v@4(+q{z+>uL3Aa38&9G09}Hb*QV1-*w-vaM=kFOFDgr@tR9
zZS}Twwo4s^3!K|&)O8<*mRiVR+!t(nOb>ipa7W)S!`LZRgYIy>v+6}uIJKwuTzZu@
zozp&3Em|^uwUS+>0gkEnXr&!CHU!OvbF`BGD3#FC&`ya-Yb8d%v2h*`i`zrFw2!n}
zb~bBxb#!wrG`<kfqJDw%Lp5e2K9lLtSrmDuxy;1t=hm<K&D7N_7j$|D*K8MfJwt3N
zL|q*qb_hgWW!aryadn{6Nyt@^zlP9>;!%9QJ$Yu59g@YF)M~B*j_rTfE33S3w86o_
zIUeJ4j<y#|P*Ko;2;`SyoAlzsYDK|I&k%-Ikx~nmM=KO6tHc(}wwFK8+*F-h^URJX
z$FJ9<(+LscN~n_}ZFs<oDjatG?gW25rp2>8G;{=U&v-i2_6ByAA7lo0?tvr`%|%-^
zY`hGBS2g6<vo*SG@VOgw+qxuL#s^op#y>-@2d^6?K!zj}JBeqr$e-9`wL1AyrS-pf
z;h4KezHhd`GpuxxxMy!XIMf~18MMl&ll@%p`0#Xi2If_jXuP)fL+V^NMI}3=<(#-e
zwLIoNNbzcxsGw<i3og^#>mV0{3@&#1l8!y>>vyHb)_Hp+lwmL1Xh~a@Hh+ob!seir
z&$>=sa;?%+gi%&+kkjoZoM#+zx8vbm+B9PM-s~~Cy0I!NJ<9)Zy4{U?#%n*XH|#LT
zvKTt*?93%QmV^q?S1>-$t?JF{%F_Mta=d+ic$0i3aKkk)^T41^Jx>;^I*7GiaLlBv
zM8w6TGfF+&v#QnhLs9>us_)@^6OW9iAH-m$%M%w)jzsUxoA+IW==rr!IOF!`g?uy*
zao*?4DlEo-Wa}RBG>LSc$HSR@DU9OQ$(b1;Et;J+QSGq&^g@f$`9m3J_kL!MKxprl
z=oni0ca;=Q8a9tr-vdbn-Mml6U18I+`7+h_2<gneSId{=(JhXIYZk`@wqv8D+j&_e
zvf~Ug76<3WjgRhcXZLn)YMP0aaVLfO$^qf;g~P|Ctkcf>@8sLB6{|=m#@TcHZwdv1
zfP>BubOQL%VOpt|^<pfpNw>MSH_o0Qj6nwvx-T=c3}I`Dnr*onTU**vwPmGWBwsAA
zj|*6z)A*@X?R-ZIhpE492~$mc?l5yq579YB;(|#Ox~hnF;A0$g#mAc&-~=pneYyO+
zH1GhdF_#+HOp_lvu4n9QcUA$(?`RTx{f_^GX>D@BqXhJ`cSrjvj{eDPVq^UOVK%8&
zv2j`xMfjSoT^ZdMMu74ZvrL?BV|Cd;lJ1vCQiLbk%$X$-RCFOTYTf_d;(-jmAZB`%
zhYhlQcKz++YS+wm;gSbl>fxYv=R(*I1N00&LC@1BiLQ-Gtwl{rPjw#`EzVwUoS0?^
zKxP5ubcnA%4MJsyj)NaRkZC`_*iWvEVL~#BD!pbMP?NkiEq@LNz<cn^dVp)x5i&&|
zN{m#Se^LqTBDGEsXvY5_i}27u6y3UA+VTcx5-vCx;~)WMj$QbEPgWp5kJ_qkZ1~i@
z1O3{CuvSvIP<u2{EaiaXEe%2PFirgD7%*(`(v@qJ0i0l7K({6=X2Cvf8b2WmWhyLZ
z8gWKkQvr-Fq=*}jn2$$3g<Fg7?_9E&<g-ROESONs_%QxlGHVHS=mbWhuC(gH#8MVh
z=^#_Y;a)}!szE!c559!DApA1h#JTP9Hr$SqK0n6!8Z-C<kist!-SJ+=>i2>zx{RuE
z7-!(a_i03_`a3au{8lNCQQOGO$22aiv&D@N7!oorxJ1bIu28kv_}M1kdpP*0@QXAo
zQsFk$N4-L|34kPBvXA{z=cL2o?c(^Qsi&u_-`&GwGo@zxdeeG(A8+diQxA?$@7@lN
zPn&qxd>^kidV@{YBafoKbz&Uk(cfmxgE>7p(r-EMXmMwOOSWmltmR^crt%BW8v0pt
zqolU{Vw3oxc=0^xs0v4##DY$y>yx+CBPO9(V$21)*c#LM=CS)&N8~U@6Gc5%?F<Yt
z@vmjKqN@DQuFUi{L=Q4E4mtRyJ*V$P4-e@QqM@h4;GGKol<PNxvoXpF8YfI=tIV#_
zQK4akn6WtTHFm?PM)RYtG6URJL(<Epg)92tzN5U3<RpOgK1Jv|Suun~h{%R*Eu}ui
z#vzN9(l;)l`$cos<WFaAExl`pKKdpRDr}jlb{C$FykAr66$Oa6q3g3GzU-BaQTMld
zmMj=@Gqt*UL=q+(Lh?&zG27TA+&iK><mpq6S!MZ!&!#sADx2t=o3G2R3@37bu1zZ&
zJ3b#v->faP_iNX|vr#D~oVyK{FQ?>N^FK@4`8jq+O5NVU>wJz~))Ci~0DSTwizE}%
zf@XsBzoWPHv`<Z?Jp9yur6c2t>3p;L9Z0Z-=sxW7yKJe9VQ%j!fR6~|BvKAHPXB$h
zA83ESQ0Eqsb!ToA>w2oO>cWi$#jT2`E{Y!^U&2Ml9prT$V4wNjsu<we;{&UTLxfGV
zRf-wis$?xRxjtY`$IMb86-IEb@P?zaaWw~4dWo!ZJJ0r1jcU~Gtjosm^jGSofJ~1(
zcN3VUUh1N}#-4r4IMtHka;46eWl2=Z_wxjbe{ho|UIEwb>p$9Z{+%=iEieE85VZe%
zC}?hC;OJ~<V&MG$!7IPi^s-wYMf~3WZAdr>NiyNdZY#f%X7x*~9sP!=`H=8(6`$OZ
zq<*(@!-QHV;d(2>=Y~Ym)v<jLuzDw~iR)*@ZBJ4!U0?8n%kCSeyxoWR5BA@j0DN}^
zjs^Cs3>0K#IlaXH`8KTaS0F`o826%w0%|J(#je3HJ2g9cj7PlXeAYpAI1)hhpaxYi
zL@uMKGp{R#)Vjp&<J*G~Gy_$j#@~;A2@jbuI0A=RnKy|5-~(cVOX_nYOzRJ#LrrWq
zEzD?>1-Vsb7r(&wXdqO52_PqFyl-5%J)ByJzGat6$U1gPcw3NuVW^SoM{Kes5FUto
z{|pNY(~UOU;XWBY?W#q6e01=HMg$Yz+Fm_%gEQZ>Ie<ophE6A_9eahPPEU%YZ~|eo
z#B49)0{6o=xleYG<(gob#x5TDCf@RDr`0c;wqON6f4JTUwjgYp&C9t@H01zmyWwMS
zM`lj|S7k5$_H)^YH@+Gl+|dvu=7?9~Sv2jHIp5|C+_jYdi-(N^122`z9lC%*^32Ed
zkVGF%1V^M`eqP4r-zZ+k?0C|MoR?gB^P@LU^!l1dYRk;3OqYnURJr?dUK(-nftTAb
zO7QV2jB|J4dbQ`ucLTo@xgHftV$Lm<4VOgGh)nz(m`9hV%x$NoYz8+2(gE#ek@$pg
zfhLIMbh_j_Ak-kX!I>!<D5TCVSl%nm2)f#nNXko*FSLYqo)fp-o3VE;K8{#XFYF*<
za4}kx3pVylO8(?ZN=?=FKvI&IZd{En*6x6D+5oL5Z1H7I%i2*GE!AT38|y;#7S&XC
zL&M&POs5ohA)E$+M+&3LcOXsKEg~y%7gm-hO_V+WlIoeCux~^<SIO??zsjyRl7Vu>
zT1N)NTZ<atNNI?TX<ua&XwxSip$x}?2SUXe?2|5?G&up-Vt@e;6SGV%4BWZ-)do%G
zVsA4J>vI0-?#$!i#EaV-vQ}Aa4#PKgb<Vy)!{gfO+|_xA^4+LWySyOHl~Zjt>`|R0
zQ5Z6&X1tiF;sipus>Bg7f}qCzL(?a-HIXHN-gg#BGLJw3oY#3lWHRk+>%bjcJ?yMJ
zkD5EUIBS52-7}H5=DDF*d=D!8x~bF4p5k8(Wf{o02eSm}(TSUqXKs7*-|=*^-PX;O
zxfpvf4OH?y0LuvT-#&jt6gXXmGh{oV(LB_cha`-|o)+`7AEp!t{;X#n3OOFJ5(?m}
zjx+d}vVZ|MyOEYS(GVS)pwem|c4uz47`#7@A$}ED3%;V?i_hbbF+^~{zR8^#k}g0$
zE&M&bq2|Ylec>1l5M2;Nq&Q1!4yu!_vxX;Xx1Fo=WxSpJ>16$3{~~$UYoF?y9zuf7
zh^Xw&626j$p_W@T(B3g~Quw+1cHzh<*xD+$9ake(nsoap(}M@P1xJB~25?3>_>gNx
zq2<X-2<yoZ^nEc4r8s(eK;*1l&&@zIyL-mdK?5ZyC@4njiZgvN3Yn2f=1>h+z>?pP
zW48z<<#1})-uKB75^b26ENad`II2y(7O9n^dRn#;(KqzBkhO-|6ozq?Qt)y{Ha<mo
zvC!0lJIjF-Q?>S%_IGcO80{9?D39!0^5@mX{=t){cSGYK=#jA7Aa}0ViiTkdo5FQv
z#nsi~ZuM<(Y9bHapQL9syL@Cu<;&QHA4OXeQ?d(n!%!?=zZH6gLNFC}Q?AuKElfw>
zr=B`@<Ac1`x}4vI%CMNM%W}DV;XXmclMt67d}^{*6f^L-MnpsPrYd9nE@LACsd}bs
z{-f;iQ+k8hh2d*bCtI;z;vV|bi_W5^nuUsRH&?eL6b4G+J-QpghMJIGh1lL3zjJ!S
z4XoMTwtd0&DYK$%pbH+f-n+rsNXxjFD!~VG@rVt9l)roW#_N0TZgI8hspCbKtUoxp
znp1E0&1WoOpDZoEc}jCAEp8Ejhe*L;L0i#}oLHSVPFJ6HOc)ypEdRR-hK<sh<V!Fb
zRvq0)x41x2m9{1*2J?nk>XUsTA{<1>WVbY=5DI$`Qh<t4g-xXuqIfa|R#-0SVFEqT
z>T_p=*<O|Uk|*zg=Od-8!2olvO(tEy5Ie1^f<=RM=jClJm9=TkcV&L9Q5dVy7^vkT
zgyk#zS6}DcDo26-x_Qo*Wz13E%b^81E%dlp{)dHmbWgt0AR7tLr)LyS1x?n=BB^i;
zPbJ)<RRorsYRK){q{JqP%T&?mF*$AOxkIE^9-8l6k}&F!GWJNgHvEG{>Yse<%!YP6
z5q4wurHOMv+|6Yi;3Z~oq4XLME{5vK{``+Bt6yiKWx$0H@*#iwe?NB7GQsdfD?|TM
zA;H0&t=bjA0%9CI>GSjhJ?|($cSgVhVI6S~+)dbv?ZyHd8z|M4tCut!uY#A>HPYAP
zN?E7KkmgEL3l<N}SuM5vKo4R;WlXM!lV#<gOZ}auzEmkBPV6o2({D{txm1GF<d+n$
ziyBIWRk*efeT=+dlI@^1<*ObWIa4op*_5=V`+=ab&a+PM$t+9ZHLdtZl3zz!K1V)7
zxxJY*X|Gmg2_ZuwlI77+OPZqNsG_OTOu{08LzO{zbK5F>Cv1x3T@Qc!nRiQERoS#h
z663CMTB(``&a0TzFs`-ZNZUWh7o>KM&AwC>y4CzvwH$~5@^?4sY79asMV_t_H@M>w
zbdv>E24S<VRoNAxb)!~wOZgE!dKEGXk_X`}<i+*7iLvc`aTMA7*~e-x9YE&Lef!3!
z<N9S}i0KMadukLu5w~^xcpa|2D!~*<x7HObT$(#nYv98xcW$xDE#4A}JgJdL7vEg7
zN^gH7KMIAe2%_(Fw};l?kKv<<U&V42#=!H#qcG@l@W!_qoYF-Uv{%uZco@pLd=j!k
zCLx>p&M7i)`yP82C6(KPa8CU>Q&Z8~PGz9JTFr7Fo#o=1i07y-|MM%xhv#dZhEj)#
zFB(d_>@iq}ylsi`FDMWu5bM%hK$mch&PK-F7@GfUv{1A~Xq}>d0l)aMLpm9F#K|Mn
zh>U7#y(F#Z7F9+@3u2XZe8bqe$De`d`Mg`8HcS^A*L?Mgi-)R}ih3(ra2rU|2Nit>
z@G_?W!;Y}y$=dU$u9C#Ic8&{MG}9O<k$J+Wdw(oj^1K<-vuTtGLyummRd_GThi`<-
zd6KM&JGaPHwW0EgSd+(cM{5=wvbF`M%2_W7Nu}AZE*_I>q3ThU{pUC7^L#ab3Fp!3
zqIG^nRuAAH(!n$}yJoI@pZiBTjZW|9cdBYVxI@mQKSXNA(+fUP1F(p_;Ul646yS$o
zqDRKb8f@l1g=pj1%Cdou%ari$IvgeKMZyk5@Lc|wioAq?8Mta428#FoQx2v(i62Jt
zu7LxHe<h1XxcAYifUTpoRA%UnU@z~~3WGTQa+aR8OLbT@#5XB^O`qugO^xyHNfuCP
zsIZy}mMsNtkIh?XkDA=%$?+R>$a<4+mg#2K7(%ROmgT4TQ;`a88ku*pwMe=GtsU}!
z;1ocXya_k&k-R}^lhL7*_Z60zq}Zecw~SCWY!zK`d^n}I)w-*H8K{j*-ut%)L(Z0O
zW$H0SB(Uk)UP(kH!%BCah3ECEMq7K$;={q)lM7?{se#y!iA?P8c(3i;K@(LAIgf0l
zp)m4i-xQ<dwkNx0>C{%KnQZSGZC1CwRF1o|o?t%em+l{+NrAFJ4Jgq~$31<E0$e@!
zvwXu!T;J-uVUF@r;=pMmnQ5&8%jK)EsEW2dwV?Mi9no$CYD&dMmz19RE%JtomZ68{
zs^x^9M`ci|KUrNZaL`!VbEXD_sveS5Zj@HXFOq32k4v>T+LM(6p(+^$E*@UCe~pMV
z$~#%Po)JB7Nx^$-xkt#W&jz5~=XCtsTjA+s8nt47gE2;9xjV4A*NcAgU7yXqxo*?s
zihS?#J6HZ*;&+}v!|uu2Y}Lc^!2@3req2xY23GgsA&yCVNC9+e*Ahvg)z_~eji=jF
z9?b%{i}=hGLpOa#cuVjOtxb51Xlr6Q_2r?(;e}0ugVuiQ{cZEmNV3_eZ)Hdp5M*pk
zVQuoTy><ElvG{cN&i}Sf@DTnSkP+Sbg-~>s80Ue@%1C#49zjFn#w$q1fv5My>_NA=
zk2tfSrg|v7wBrt|tbPjL+j-5CEBsx?+eXz(!?n(zENAD`n1ge-gMhP`=+<z$ahd5A
z?EKY!a(VVV?TBC?FxHsQxY*$pT@^W|h5Bpvk+{Har<24wDoUj~ggNR!Ew_zCg@wM=
zDvsAj^SayZP-glF&E>DmHh+>{p;rOuW6j;z!_?*J>B~{*)0W7|joEg~<9{{_|N4*6
zZzBN!Aj|wSrqapD`d<wwYYRi#{}$oa&Hec^zp1|Wyq0}JDJ+>h!*PK*h1%tTcyu0G
z<SfB?L;Aeme@8(W6o?v*zWVRi_V$$zfLj<aAGRDvlJL;w^X1j$WuS*oofzDxN{9D!
z!H9?Kmb08M;XVgR5Q&UvA+E>hyx%-MS(*s19Fwaw?S488Vrl|`3G=&f=?FjY*h4`)
zX|$|Fg0zLGV~jL)syH;>l~mv769YkSF{lQ}46%fhB7LOuoyX89btFapZ=sG!iR5^C
z9qN5@aY0E{1>WN!5)27q7^FnmI{<%R06ktJikHCnZ1wA_@$)$D$LL}au*DL@iAHn9
z0|lrT3`obJtmD_joF3n9&FWaC*?{^N_9<LF=%QuCoPCd;aKMkpt*r@i$bCb}F)iXW
zZrmBVrm%Pa-%6<?a|iA{y{#j6_;G^q#AF_m9~SlMZ;(38U&prmaHI<FlaLG(<iGF*
zfQ3ba%8BO*cDYAK1vC$E;6VI_V9hJ3$1OtANU76S6bR!Bg$H964(bKr?x|@V5LvaQ
zxqwJ1P;u@kVoDD5Gt6Ko@hql^zZ4;PC`<!UqrPOYZc;-6N+GA%YrB_sR_>WWYoQ^i
zOdH9g%@apvh~XN<B=3$%KzqFlZiwZ^f&<r4Pr4hKk!jIUspZgu@7=qf6Qxh7CCPoC
zM|yeOzuMUDYPYxfUfA5a>)D8lmOek6(!9&@hXlQ50=%y``LuOE_hLTl*)Wm603VX(
zIS}r)u(si9#`*&VA7p%rxj4u^pS!nKF=s(_sDo}Ij(Fd6BK$>9OF4Lk{en_Y=z~F-
z-hfn4L>J3t3KoCArhtp?{Lz4JZR&ph&6CWLnV>4e-CrXE0^xgxiI3%7fxT_9AS<E2
zV1`EzNk$XA0gfhbMP4WcMo`kfH-UCnkQ^QGDr~J@hC}7Lc5ZP~XH6O~fkkd_W>@0>
zbHAat`k#0Hf4ygs`<Gb7K-Sa+454&!Nc~=(?W100EjMPSYY+|v;C<;R<!KSmx%Amw
z-<Oy;{UC%sN0c8QQKPoBk+l`-k#kWjGf5WqfX;Orjc_)iIF}%5KeJbts*TF1kHBBX
zjFa_41&^x|g~PZ@VG_x~CVp_DEyVa1ri}yzPq9i5Ayxr7zX@aOo^T`bbLMj2?tBW{
za(~H^&NVc6F<7MKcr}m?l1|*IxR3^<$=|)_8~*A_UiCQ9fel^$TFT>ldNayRXajb!
z3D@i1J+YmAw!1Eh%3&6G07Ke~f!*bSsj;Pk3jUabRZzq~5W_M&_}uoY^*ekmygfva
zOW<P>bpNy>u#m~fU0xmrh|gq&C>R68x1+4wjN4Kvndj93F8DKCml@dB+sTT*wTKVH
z08>c-Ql_<kX9PP?a!UrhXX^esjkmFJ671_JWWM*c3Y%a5)(&TYaY$zi5i=pN3|mki
zu*pP}c^qaD4^Go9IRIWT8fj4=<}R9V8RagKBGkVa0FK}#4?(*^^nFbYjk~Za{n7t>
z)&z4}B<~kw6fQD(AqZMu%Bnu3i36|IC0>6Rgd5HVf&wt2_e-2{ucR#WC>FmaNiRZA
z3-!FsB0pi(k@{{c!Zna%wyOKiYFwONHZ;$pjT#{i#NXzTk}^URW(6BmyD=6N0<tgr
zi*3)e<t+raqs<ppv{G5UL>&0-=UUp4+$ca_QhQfkmAIZ%zcCvi;DC&;t5JPCoJ^d)
zLmKHu3hht!Cq&i3(gS!UeeJ8R31X7HT4p1A6QJy?teF>h!?mSMQiT)-K3DA-ub?<g
zzAO2*W6YxQG`z9()`MeK;<q(I1P!vrFl8wkj<{yd*ppr;D79&&f@`oXcuhoz<H>$A
zVnVxft9T!S!<*SlfAd}+gH&<0pm6R9I6^b_YJA3kL9lOe${(+l$0QZg58m|dX7Cz<
zs%@ZH&K@W9ExaCpR@z=*_JA<#81||rsuy1@tDoLil8%?GP~kcb`>nx`r=$Dhr|7_=
z;+Fz(yp9n~yXFo&y~W+jBPfZlzhS1bV7AvB1Yq@eSr>A8@g-pn%__^Gw7r%oWUuAY
z>me627ku|=u#@Cbd~%_N8|{8btj`snWl?dtnJb9Ib0{GHuBiaI+92c0cf+ExN098b
z>p}A+;0#5CJwIqE5EMT`SPhvN=O(Dj3Z`;FREfkGP_fx-Nal8OQL-?JY*@}*ze5Ax
zV?A0dTCmKdiSYzhq@%AAa4zeSI+wJ;d}z`Zq)P4)n6cUX^Vf;&nBoy+4wht-H&}z;
z=ER`<F2s?uG#+zZ=GJ@p`?0}o8D;7vp}kC{<QK^~*xz2ZB=W8Gy8id^R^rDB#y87s
zdcw=`g)1**;{x$ZOO^~Ox$#29n`&fsN4g9k2_<IKJiX?UPz6&d;lj}xd9%hg{d?4j
zQi}vOHp-?FM%^qO8<YK~c)MjB0RHv?jPM!&GAgbmh$0puX65>vb{|W%XKYz8{I!bB
z!dC9KVAzhc9Qzt;A-a!e3hFk97|^B1w+>J{>%qbuE38{Z&z`2{7jx%&>dsEhjFI7U
zN&c2dNAhybKHW=Mbo#ls9!z+zugCW=B^->xGBuAz*M)#ATlt}O*r|1avRZnA<)ljT
z5*Ro^y;c_h8%za`PLA04zd@9*z$6RIuYkE|6DFC5hSv5&W*U&iN^KQjWA~Kqs?Cik
zJ7w)Lr7|qm-$qN*5}c{)jxhdv-+{^Vf-s27eN<F}RfkLJ0Ha?cE(U06mWLZAhLrg?
z6f0}DD7Eo@7n9b!%Ge%Z4cK1(WW0xO2!K7fI{0o~6<Khs?l*7tR0t@N?ClFr1@h=2
zfY$^p-5x}YlYDAm{_lfJbn?r}4bAQLllg^}bNxR%0LHB|`x*d-5lQU2jqb!Eg+L{>
z+2C|1LWsQH9E@Bei@)q5O*@!o5vUus$Rg0MT1S!1Id3JW1tKOR7=<C-4)Z6uSqxSX
z%gn5eVlFX*jcd{~Jc3L-rtgrL-xu3L3U__&@eKABxP|S*x_sRXp%$b8u?rrq=v6lO
zt^4sdz|A<|wpeAC?B47AHpc=RV4hs?hpe;je*tqO{$MYx*0&rcPYYM1^i8!lV@E74
zFmd=VfCeh%NPWZYvBPSmo6KuKqpdTRxNk!nWI<DYfZ>awx#I#VJQanojqa0)V7E$p
zLbc_JMHeE0a#-oVHZx~<VV0}9*V90yBx)`cHQWNMjc1PDD(sh4C=TLJIBT4dR?XI*
z!K+QlN9d|WY28%yV_s>Toj1&RLQ{m99w;H8CEu!v9~}J2{rEJmRvyg$<FM7iu$6h6
z!`l+nQR?RdS=oT!$hYaT-uhW=U&_ORFbep0;Sot9i`t<TjfqMOXZWO-v*B@(;4QCW
zL!Lo7^m77xnRaXwj;rT)N0dwR3zdWLgF#JlTr6##e*apk(RhP=oUDCz7<CRv(o2T1
zNT4XlE+kz<^H%4b5CQXc*tlyZ+a5__q)7raEYAve=3xr14b8gvDI9!rC*BpsMw^sP
zv@4<>HybL;;vIwEF_g6Z^0(f#B{j}Wuh%jj3=f|7ug!I42^VSX_<pj?+Y0~Q-n0mO
zrEWE9a584DKT;SyfoOYKx_cObbbSQQn&N=728buK5Zi{th2g!r;u7)wd<MGwN4}(h
z{6mNrP<2y*!Mh@Ir64zQ5*<L1fVuz_J2fxG_JX%h;45O;h&?Fb1H~z*6x#MdEBK+;
ztc0oIETm=AL2@XgbHU+WfH{`zZ_1_$>p_+@i^~;SxW1XCrIz4s7<QcA@;*J7+tCES
zy*iH3&nXf>S|Z69CY{6;tAWTa-&BJV)Yuz~)zC0MVzRN&Nt?vkTqqY7ElM1n)kvR+
zB=(4oaP*%do%yym7DN6tM@2c^Ir&H+^qsIg$iGiAOjI2*3SzvR5oz6Z#t`Ui9t{4m
z$g8wkTV!O(t-K=phR0Ugz0+U@fVHDrkA#xGmJ}C1=N1F;E#jKyLk!R23fY6ti)meA
zQDa!*e~m3Q4Z|L?=s@u^D6Qg_Xt&n%)l~~Ngs}RoVeU_c_;o3HMCfhfDQHGf!t*vr
zCfy?dh7qYB8<aiLnBf~brVEc7y3^h4#?ppW0TzCrDvxXJ+PTRODwP7B=aN}@W@n&$
zr1D()%5K*ZyKCiws}i=%4i8#)KCr!$D^o(By?y7^I9P=Tk55LeKI33CT}|^=`E&=%
zE~iDC3zdWwLw#Sxm!>1o10p-Hopq9%koqtg)2y;+Tj`tU?l(Z4UUS6kEtoYx!7UYK
zOeqQcr4?#|9sCg=gCwfrq?)e6$KoJV#4Pv<J&0PfFpHoezidLgPiMJ*#JNqq(l!Xo
zRn2>p50cs@g!K_`Ack33qn@addWT(9fI^*=OdoN}8>T3|{Xi-q8CRa3mB%fo|DJ`$
zPGN8gG*OPw5=I7sAmRyA8<uwxSQR_CKu*?3Zsaji!bb737idTIS5y8TlwsTQie8<x
za$H<R7H20)Hz083fuHsXg~o#dOj*$j-$Fyw&GB8{1@}AwHUuvtp!LT6xles}!W_R=
zmm-nTbOu&nvv9+uVyD!BeZA?mq0BtTTrussBi+Hpw}+ulH+^;6K+^##B`c?PzCoGR
z4{Zp@o*m<45A0@OOHroyF`;={zk~HHlQ&kSpCD9Z4uuZP{yi5{q^ImnCLtxR^rf&!
zY^zpC4;D!zu9PX<=<wv5I`0djL@62t;v+dLkaYgFdGI-8m8l=mp2wrPchI58B)Qd7
zu->L(S$m`ZFKetT_FO8Du-YrBSTT-5IZlrAMTvMPtG!LG+y$p=HD&VkJmD@hmRarA
z&Y#?p7WupukFtORO*8&%!|DDCiBFt7-A6E@8J2nxo|UfA(o@QMP1G0=F_*xK@BE~*
zc+^yqbd?tTH$cnA^UkkMny^_?M_9LI+JwmHKl6&nWdmg-rhvOW7i>^|3toI3%}czi
zKn^GUve}%d;~G6C#ffo`-uV4kr0+VV)LA9ZQwu%cM=-q}mTex1*OLxbN3Yy7H$wep
z)JOLhCI}{XpnhHMWfH_%<XdkG_ERP(yY5h&`uwehKJc$@`9csPbYE318L|FargNoa
zZ_#;@$BFpgulA&jIxO!LX@lr~b>(zX*rf&%>b#i-lrJvaIQZJ;ZuBvdOBGA>=V^?O
zrb{va9XETb7yf$&JxP!0Kmbz>YY}C{l<1Fh;d9hb4tR5dDa!gsF<>>9Yg0Ni`$Rk7
z*F7<I`EJV-c%?7ra?^?C1yyQ8#UsGhjQC%IzpX6I-+OaNd({$(<3j)zBojJT2)3|&
zATNOJNgi0SIXbe^oSyYW8$q_k6np}{`g(hoHg#Zfk9_41%5C|mtMmjh(58Z+Z}SeS
z1t1C4Z&rr>6y5EtnL`b8u(015*37?E^{6W{nR)5#i#a`~`JKap!4rY7pYDN&>Az6D
zed%B1Br>>8nK2uExRGdJ?z_N7DT&9XTMW;9MhR~yswrS28`E|?-GCg(GJR2bQJohf
zQ}3x)=E`x#5)b?~Py}9d$tBMd3`V*hV&Ieeoc&#nhXW+zJ@A4|Q%doLt#lXCJ8^0t
z0Xb_ddY;@=VWz1UJE2L3Aj!(udwXDJQ>Z|90+DT+0@hyOf?E853B8U1gUSh1T3()C
z->OtS?LDC^HPq6%PvdgD9{#$(ZCagJ?$FK9BGUENX34R=V_`)d6SEFg`M1uQ@#v8z
zab>a^PV<l>r^VDIW)jX69F<$Mm9+zv>2dkh((<0G4AJyg_?NBFFISfW7T|~|n~?cA
z{s+z-uQf=?TnMist#v4<S;Qa87BffYki|>zC&MTTGABH*h($tqfs&4=K9P6kw0A-{
z%kJ%yWp|l=zbd7KI!WI<$$?95!mVFQ{~~}h27Tz>4RiEmuu4S;-U12L4au!WWsAjH
zrosDNo&dwHf|OKtM><O&r!2+<XLj?Lq=@hQO%iBl81guLI)#RTnDR2@BdU}l*Psec
zxn@uX27jZbVA@!h<e#%0)VSvR0nWDP;B95IR##giN-id}3T!o-z&?AMIR1Lz!9N)+
zL{n$i<!(7@$;=YML>(r-Q$D;%T3&5=;Ed}Tk`%sxP`)6KPU7`}(wgaKDx`?aM#}*J
zc(25@CTbPM3yr8!XI;1K+0ozdXy1*#2XAaIRPw1xOXw)qYIPyU>ZFJ0vLmyiHwTk3
z3CfzpZ3Y*`zQzUW%3GbN=IZMQbcEv|hnRf{4Vm#+$?pqFCTBalY~PlmYoxO#g%v*r
zo0LAG=;2>$R*}tY8fCK!t{QljbfIHb*lgjGu!9i3x0RaN8(qUL>$ox}h>kKhHEJiW
zI*D9XO`INP8Cb>87H<lW205CSIJv?-+|@yEJUl|o=ktFL{5~}j#UP5(m(=0=)6hOj
z>;32m{d`;V!cx7)HUjPa{T~BCEI<}cR)5S#GCwXR?0-<%|4-TW|KTk9f4F<ARc)*e
zeu%i(pOFD5^C8aHZ9Vc(0k*Af^6Iq9Mfupp)S6yhe??lfC1m&BAAO9+=vFtqrAEWd
zO>;ebOtYOFWLsOYQgLpRsxYULGdkqo|4P<M%Y@8#1<&afI|gr$|Ln=u>MNcXIj76%
zQ=hb*fYJjQTXcU>CgqOZ`O$D)?+ArwEsbpRebjsSxw?u>ut{kh3ugBY#Jz+uN_<CV
zL$6x)P7woDsjWZoazVc`6`R$$WQSPm(R`r5ScGe@svAzHXw(XR^h&izfAqE7o1EZy
zdd$S2<!jKY`vEUzJz!q&G^kEDn>*DKKpF&VbjuhJ&YmsMSCYxoc5g_G0E;hi@X>rG
zfjiDB&`CShzB;UfUm1}slEaiKI~SV#;rW#p(@q<bj%WZ-t0vH9-B!Sy@@OfGzPmzM
zKGLz56pCnC-K^~;xz|zcYAvGou^4{x2~gj&8vdsOd}w9Mi7lNB@h*@afQT|;uEo~y
z642PfB!_5RA1k*+lH(B;g^0*$m1C#(`*fr+Uflv$0;{esOW7MOlMRtw8Vvz|ix>O?
z-8Gt)Z#WT5IAzc$MeI4QcwDk8(CdPn)IpYtl0HNG7bv=-k$T*U2X&<tyU+{&7{XAw
zq=khSRPiQ>TBho8xZTz632^8|Cn?NT1KYy52fd7^-BQhCG|?PTa}>98!=99&)mxgy
zz?uXspTNOd$s8p%;xK32!xvItPjasBt1SU$p~~No(?7i}DGwSHq1=Ri1yEM(t^I_i
zCDq-Ryo4b;1cEsubv2h{R=6l{vsB<Y^<Em4wVxzj3IvZj)!vG6pe7|1NDzDZ^!+Ky
zo+-zvI=zR5pH+d-8Y6}F49bBHA-FrD%%TBZ6{NL-cw7sAu0l(a7S*q)2Q4RXXn%hG
zKK(kK0NgMTSnRIG;r1KJ4EYN_7)xu$id25lTyu>{9m|&M=h)WvUQhii<?cb--JiS1
z3gMgZQqu83i@clQ*lx#jW2)_m_cl1^0iBoig8FmT%P-X~4Sbw+RWaeaaw~YUWZuJj
zS%LmNK4O{OBQ9go(^2iW57nIoOPfqnL5nnGuVWNKE?7e#yl{~yb>;%~@oRf1jxe4g
zel3&D3+iV{p$uVE4*Wy_Y!dN6cVCH&+-Nh@rI@~r<Cn%U3!Xz<=Cx)G?LtZ{EB?cX
zrmB7Qw$bfyOkFG?rE;TA`%bq=_3(;)Xq0898Aab*sC4Y<cOGN-EQtflE-joqN&`-)
z=l74BGMSskoGOo7716vwWL^$+wgMO+$;2~@Nx&ZqFIFLtS(X+(v?f$v|1kp*l?hBe
z>SqR`E!sbyvzyqOS^U=^o&WZny;)t$X@L{LccxZ-o`Rh~X1?i$|1@Kl-yofWW+4?k
zlo59%)d&ZBjA#s&1N`fKHHEHTiA#oynXbCIQqF5Zm-);s58lqCLD?G>BRzU#zkAI6
zn?zd#W*V84mQHTBG4Y#zyDw`|Sn-sgE5fKP4;GU)-SjLJR0xEyO6iIzUjv{VA{|I6
zAc6^ry=i3%qqCc!Pc36$Ln|;IOmPZgL|9vB)ClaNbOs4n+n?@OVv=W<N!=b<;|7})
z{FVpM(URNvDV|3I3B?zo6qM`p<>}z!u1I}>Q6(JJ-Uj7&NvPCDZ68w;9V6*nt!Uw}
zAwzOm(BE76idFJ;=J6#AQBz!^_p*i6-GR6T|9&eQAlk4wy=Ic(;i{h0!q{}G$6#@B
zXkgTVSF_~1yG0%@H@RtEZ*HzrdxKeFZT5$_QqwPhk5Q%Bk#D;mpKF(|bAT@-?xA4W
zXKBF}MCVLm#SE*tOB@Z<Vd)AGcB7B4%~b;iOmA@8F=m;;cnYd(n}XWZhy)s8Qd8|Z
z)`Es~92@RIpSA>U{Cl$cR_DeT+vqL(aC!0+tNA!a&{3fJ<S~U2Us3yPr#2?jjd-e!
z+;d55aa_EmXd&=Cy1vd^_X`<{KNn;AsgMg)QZ$567-VMxq+-8_w(BRr{V}lzUEI|4
z+`#d>IH>p#E#<E!{fOu9kAo^kx%-$bse%Ko+Oc6Zp`I4-g+#wM%cW5LVFHr1%Nfti
z#6Q855|U8vnHN@b=qVp#D(PW-GN1+*0j?pb(I=H`ZX$<oF;&aZh0uuz^f8d^VdgPH
zt)@9DUKotxtRHN!{)&M7fG59So(%o&c$6mY42yiTy4*FWB?J^T5pZGh<XVRK#uQ*F
z7%X`*Bk71XKVq>5eSOmOq1o0(9vkUOOJR#7xK8tOoYfN<#rDWL!XmIrwTJ`V$o%|X
zcYHZtoqcbcZz$mVC3Yl!AT+!rGq3kU5@53_Cm!s7Mz2#4AD;Hkk1L(j3ipq#ufVJ`
zr?WqGeaUGFhU>v_`_Of!zfBk?Q9V<TaY~s5ujD>lJ)fA7iokn)Q_OhBG@MZnS7lLV
z=w+byZK+zj0ZG2SB9-%W&^4@ew^OB<J?ey$QiR{v#f3l8V1Q}bgo=W|qnzuIEE;0O
zhx~pyxTFb(!Ka?slg#zAA|ZZzRV6Ezsu8jj&$lwh0N+jm0P$xUUx+;ZZ~#=6nxuO(
zhOC1!YA678qo_HwvMC1rKuzDR>IKay*;5ecQ0@W=jj;}WkwFj)K@IwoIz!g&iAxG#
zNvbI04V^p&u{UPPXG2Kr=#*ISkdFqVo%s6!T2sm5EE~Zpt=S)YLfdO0;qY{p*G28P
z>T8KQ<W_n-i^tUoVRQM@tQ*PoJNrr1kv-f6XqrGt+IFGN5B3HgjgBbLu(-=Hg}2wF
z;_~=oKkRWb1*=y<<4`P@g0c!P;c>exQMVba*MZMc9OyNLVcvzf7AT&igUC`(h<;IX
z4@WW#PMiNV(uTP}P~$hjTw$<_L`Ew_#a@-CNAgg&Lb;v}Pp*-CTvIfzeza{t4&x~r
zrH}<=_N{q1t$DtDI7ihaRgX`nU)p&kYIp8Um8z7rqZKeY6$W__lUK*6j!dG@A~UrB
z4+zuFoLGF$_-lY!Xo2usMGk@$N8u=@T)I3*G;E(<Accogw3-LA`LAg*0-0TD_DaL*
zC5wKeUoyOm3iQbbg7sJZ+)h93$ZpgMrR7?G)k$7`62yG)3l+9Y^7B^Q8aaea-m8Br
zBI|ilqd`cE-*&}$!M5hHN<bcm6H%v4w<VT&F)C|Jz7TSjfxg@Pj(g>O0l8flEZ*<o
z+p{Nk2HA)nWotU|V@TbSVE`aI+R(?9P8>g0Fsh7GU57f~7)mg6l}}B5k;0;q7-^(P
zD<g0ZGc|Zums$(UQoMj4qx8}~CR;W9Bg-phl_02iQA8)EM76=0T2sYjo#h67v=R=-
z8i@P7YAvwJtlG~|3lE9L%C6VQBRWD^t-z~a`{r3unw%>g;#rcbB{$_OUNrFA%lh^+
z<kSrTJb!z11bUZoDSiQ7t*xRmpA*geLRHS`j^Eos)+dmvgQHXXQ`uuV>xI5{t)dYw
zxmRJT$Y#9TXe-`nAZR)e7aEzCR)#uI6k|Ut%D&M-%*@$iS^JY%DgWxK+>gY|J?RuP
z3-w6O5V;%qD!YU(H;*JYvlZZ+B??MSrAdWeBrGNV=b+z8)A|K-Spa~`Y(M~lf2fK7
ztC_54XKno7cat}Gten<c8n!>F5ZpASVn5<H4z|{0Oi?ssnH7lRh}ottIR^8^NB0;+
z?hul3ey@K#cSeCj-jI;WTuT>>t)TkrP(Ouil7wetUnK}JLKKdybn1{5y-(21#Cn!)
z9vjz}7-P=q^Wr6)vwxtuAkA-+p3|F-6kWd?hXO=Tk{90cxWoY>?qPbt!J@m2vD#Zm
zBf-Ydb%;Y_Js<wNr;Im1v$_&T41wHWg7QBANkF#0@g!@Hk(K9DLO(h*N{AN_C)`B7
zX9o@?4_>n7$R!$y#IXYsE)yFD+b}$OL{#tvM{;E2(O@{44^<lrw=rOIJ(k4Ya+`P|
zz{kW+5N@3$5j#IQd3bm@4q*+9`Nv^=dm?~N<Z_PJ$;OA_CwqG*hvdaq_?RN;ou2l{
zd>fE=o)d@cktKA)I%E_$Acygo%to)@Eaqf3oDXNe4KGm+WH=ZQ$BWh=0JilKSm!p1
z!k9BrNh1XGUSRwFBXQ|H^<jlBS#pNWZzkm3XfT`3Kg<`ycXOC+GC1xKJ8*%ifnXJk
zPC`Szkx-Lk&Wyi{7thEfyz^|KgR#)TIH!ZCySQACCL`gB6KN-j?W}=l7Os*9I|en}
zAE>p!!2LD>h0Ak-&jkd;fX?RHfjoeLzEbmO8?&t)Bzb0_!btT(L`qpS3ia7Lx;P$U
zFG&D;`3N$<v&q|V%WOXJwaq*-jKctW!&NDP9h49QeNI=te?5P@Pg>V8J({m!;VyYg
zAKOwtxOy<eq*SEEC?&J20r|Q2U%#|*S#n8=_DM)08|X{aq8OS?n4q>vfk=}DZ^6)h
zBM=aSg|Wm&webRB;HAt;y#!kWGsqH*lhO@9-NwLW_ziQ#)S({88_}fLJIF5&9fTtp
zL0J+;5%oJMeGgtH0$7I4*fvIY!U!q^=<mJfa@kA1CTlz4gzB;)ZU_M2s)TP@#a?hr
z`6$Vjlp7up?E7F6TiZwM5si~a#Uqf89Xz6+i}^w#8#}`|n^bW^(#6OlcsTC(kTW<U
z07fuo#|kOuYY49Nj-nq`8lY33YT%n8nNP14@B6bM8O_P{Z2H^ia(GGh`*ZldPu`Cf
zZ>Bd30t06K$>IZ<UXlLf19>}|Tpoi%KqURk%h6&qosh+pBfK2V2jl+e-EcNXmodIU
zgrf=Xlb*LjCeyd0K6f+M!@=lkGypI5AqAcDNyel8tI>D_vtCVSM0UKIO>e;0kyjtc
zhv^N04j77vrhtD&hLZ&Xyz0+kQlM!xxtfh8uZQoT1Bo9^7Q^v)I9S~D$GF_<;S7dL
z_c@)Vh~AIp!{gMUPh)aRQIV6t-oU;S1_z1IO2_BMB;*R(4Vp3bg6&6csjnwDB=YTK
z6~-IbFag;Q-U@ca6|r8;FRl6XW;Ph^{QziIUO@Fm(%t)k2ClctATEbj{hRTk2xWF;
zkN_Gu{??`BSI}|Ly5sdrt&PTU5SmTCxA78Ywz0(Z!a|epE%R+?0cKm`Z78<v{UAxb
znGb==!Q0_to(<clRtR(MBfTqJDad33{=kBL$NKHv9Qe<r0+z&V=6K!?_5%oMf${j%
zW{I$r%i#cmhBwz_&=xYynD;x*rdapv^t6O|PVyMZb);=F5;$4rd80a<_%TW<`sjUB
z-tqC-=`Yni_h;pO7?G6E6UXHp;O<<}BXmn~d@{9W^FDB=2*GR)VCtj>cUcbS?u2_&
z3bw9?n$NDwz*rm^a0O`v6{{XB%FsE9hAmUWW}W~CgEpe#+5gVGK#6Kftt6Kr4}BAG
z<lw%eEd*)_p?2(hH0Hb4==%P-qLO=gpoB0drVkMH981kEQ*3Ma`(ijjHw@mP%*@_{
zJD<Lv>r8m?0v0-Vf&)H;<5{1AyqS#Vi_4TjxUqW<!Jfh5cXG%qC;3QTkjc$>d{N%p
zOS>g|AtZu5*u!X!M?pb|@j~F*u}fBbTl668Wg)OIIbgVVd$$-gY(OU9e+1J3PK_lH
z*CYmG2Ge)f*8hx0uZZ|`Q^H}RCigV<R*#kglP_)Ou7z#kU5ES*_Gir()7el^545*0
zbU-_btUPcDP>0-yo=Xnx_!i(5P5tX@3pc=5{lQxRzzvJ+FMx6~khn-czTIvhuGoi3
z<E>*%2*}9)?%`q_2<?Ei+!tT)7L&G%y-yc=6=o<GbNPlGf?iqf`dPQvLTa;xW_{h$
z-p{q2VEC#(ryqjGh}~It^ijzlNrioOiD}5n-uelFcop?PCWEfNd1`dSD1~<$pf2#p
zG9ifG0mBKBOdJ?v9)ewq;5d<lfZ8OTJ<{+aU?2_)5-)jd4rdUzu|HZ0h2_)W3(%xY
z{0k%?k6`vpf&~upgeu;}!N0(bue*$F>n`0eK)>J@5o#f`(*^nn_-FH!mVQh`;QfGM
zJY(pGG0Ij9U<ifL0AiPR2z!pwG_XSpxMG-M93dhvxG)?2@D|%XAw||;Jc8)d>d#)I
zajMYd`u!#Pg7I)d(4cbm15&VVA^owm`J)Hda+Xp`x~JI_B$;z@IyBP36kGWbZD<#i
z$28f-LCR8Cyt|EBEkR7%#B}sBT{cMN)1KnIP^ZS6*Fbg&Kq_j903b7j)Qh?nIFVQv
z0?wiYz>6j`DFDr>Ba=1sket~Yox?ch&~__WoneL96nFJT!Cm2|SCDciv9pO<(a}qT
z=nmgA(X%2c*n*Kqi?!S2$qRDYmdnM@Dgwu!tN@b>v0sPm-@s_{Bjd>`1}gNU$C7^p
z`_(uvQe;x%F!0RkkFBfzqCXbBpHh;!Do88_lcI+f@Ta&GXhFsUX{gitZSt$R0^lZa
z3eom2EzH$s6PSBAn@wlUDa-l=BshS{5EU`E6TKQu$st7W7BDLxr=)$r%Me1bG)^gT
zE)xi^AeCIeEU!_uCt*TW0uLJQgb*`fm0<(fd)5s9c&K8-FG{FSH=>%tl5^B@W$l@x
z#c3=)kBkxi_$QFH|BsKSzhIODfoBr#8$n4B1=1{G;Ax>t8dr6f6;odF<s<YV&Qh5>
z3{K4<=hhE_Z-qu^tKad&f^$$_&@mmq7t~`Z7$k<5T)~9nQ4U3jKqw3o<r`$96Z%9%
zQ5_Q7yo>{a!*ViAdz-8kt|$gy{SoVlG&v^km6(N;3-S`~E-!6`3kwD@-Guj47OG?5
z!}1YTDFilz5eZkKk|Su4lOId?6aM>9=xQs+zjl$9r=)w4f&fN<V%~pfxM~%~w#gCc
zUF1z`F`nZ<urO=-mb-aVL8J=l3Q{WDL)T918c`Z@KSZ$?rOR>Px=Uv$u3oNu_p-ZR
zx@=)N?5{8XbJ$Q$=41+KMV?ZbI;7+YbLRU3(8|}Ku$Gc7&7TSWWSycJ$h)Y9l`P7`
z%4QBLHc_!homv5e2NpL>`13YQJggwM6v;m+TCzVyJlFt-m=gdMP1&CUN4nK%n6>>1
zwh2pay4hv{yW2o`-O2Ujoa}3xDvrm>J~f7C3n<WEHwkRyZME-ZQA9?413Kqo3us7Z
z#w3GBpG{}xj7M1i#_6TIB@Z@}YD^)n@*u?DGG1UYe6tJ{6&4j_pr=fQYdS_#gyg56
zjIU32I6v~|pH&vRp&N|aG7*-#T0^q!c0QCjl77Y%Ag5CM`q!z<1Xw|(Cf9N*Q!<}u
z!3EH%Ew65IPqerLptR}gpo$U6=fP%Vn$x$QXgcucpX7<Y{L0nK@24dZrJfeseme7o
znY-~GF;#U>@1hc^QukuwZea1vK{^__&W#rcmsmRpbL`4Nl7aP@)Sy~SY#nZWH*?PA
zgNiIQdj-+m`tF_)?=r<vBN8s*1fz^u;L>)E!PLH*4Yg?WF&Y|Ps2$Gd_?S(fs(gTk
zB$v=~NX+$`rLn~Y@~ZcXEPYHHG2fFx$E5#mxcG2Aw6IKWVP{)&Z>bQ-3z1Yc->3NG
zJq)7}F56Z#t1ORww7n;Dv79h%Zr&rR(oY0s+|6Y4X03*seS(R*&1mLe5pzd_Z0pn1
zF7v@l94us~g%431IX2gdAC-E`f;zHa5U-8<RGt(ULfB$lsL6F#cnAsazi^KZsMvt<
z<N&Y|EmanFKwb~Bwj&KqZpxDOLn0m&D5Xl5B<3-6M_DRXKJv0Ztr*$m8x&6QLhz_D
zWG@fds{-AvxaV1zq8Rg|%WE;|l-g1&CT%i}#`a#OH~0*vfcc9NcTL1!ie?+!1>r-G
zA=CC+u-Cnl!y|m8lf~`~>q~eV0)L9);bvol&SBXJS&JDpo_G-9BtxAJVVL+T&w<(a
zcxVF(iRWJIrBC_eB2los<&{UFfZV?HxosB~k$6lTG6Hf%>U>UG@JF;w+E@orXMkju
zE>B;?lx_V4@h`Wl6<Br{!1NBD+>p3v90Q__{RqLXaEmZxWqbZMrg-WK2LPEHJnM0b
z=RyMhpiG?;;<Lhckbp$!0bw?xA_<LQgXa8^VYctxQL=9@osLUao!hmyFHeLh5io?^
z*uEb+cos&|9191S5hflwmWLq)skJbAwUP!!pxnoJ+7KwmBeA8qX0g(Ap^x)A_$V<}
z)hz6h`F|3_A1yD?%ny5Bz97$^Jv)0=FnL)CBtiiIgQ^7zezh`$7*uOmpTO`sY^a7U
zj}u5d^6Lw}HuChTm*1v5v|t&udchywKk@rP=ODk&h_Od<;V((=*|Yo*{3!ZYF{P-=
zxvi!^tlsg-_y)j#@X4?=na*rNC@FYZ4T>W&J&D4`M{#VpPGc+2Dp&aPX|7nq<zH2v
z!4P>zT?QRjjfR%jH7m=PO)zDJ&0-{$e`LnZ%Fu6VX<6w71|AZT3nW<O&7L-hq0m$`
z(VsFjofKG8VFg+Y-3kvM&_#%lfTNB{e~fv)2yAj?)^qYB!@aP;rW^^pX&J^zt62FE
z5fNrRn$u39TKSsjVViGFN^oLf9ip$_kQ<i_f98^w{;wz2WcYfz81)y!OPv>nK?#gs
z5UOTnl6QEPPn=~|8;Z*BGEP3MJ!efGJaJ$WrxvFy1qyXm0QhNEMvQE+=**;MOY*Uf
z5IwdGm<|z@esiR(MCWqRy?X96t+Q&2`Ag+XK6xk2sAO_lFiL&2B|Oe)S}QSHb45pE
z^@W0^oc*Uf`h4lq#F8&rDlB<&+GX4}P|11n3ZQLBTGcFDCYGV{b2Uier1j^tmJ!#(
z*y4$q;oL$m20R5L*QqH>$jow_<c-Ox0=o;(QUCvzz#00IoMN6~)OJ26Ip$<-0|ko5
zrqT*`Lz>LFOZZx@1|rZgfZIkDvQ!+#_)2-~UU}J`S}7wuNJRgQXRwh4YNe{ba{p2G
zkuGlsGqbF4k4N;i$swmzWCjp#3qG8a10}KAhXqy2T%V2}C}Y?;jcGF_&ZTymOzmpd
z4!(Ki-9jGWYRmtT8B|uwL_lc4NksucOQaiE6HH&L396<e#V!)-uZ1>^YBXJv$*?#e
z`My7!V72}n_IN*h08NJEkKqdmcq~S|!f-g5E)L0PxVVxBB+<&mYdc$?zh;1Z_dO>;
zu0b#X3&@~js(?7m8h&6H$3Xu*ekODIs9xF7->cdJt<*SaxxmwmxQAmckUa18PX9YQ
zg?TeyOy8xw)+y<p;^FIx?k;wBE4zEx-K*?A!|t=PBE7R^Nw~2vS_EaXL@X+fRX}dM
zUsj>jKv;ZlfWY*(`}`;?o@2$gS7-upShyk1#^w3CcCJIKsd~XGwD^l@xkD&f$(9dc
zPVpRv)}7#a29ewv6fA8#KM5L=>56fls&X>WNfp&p&$x3Ce+xz%l^*`8;SLYFQbw1+
zea4zJfr$!A;WUdzENTJIR`mL~5ep(7G?qryi^{_+swT1H7)$mMHG01!GepOyh(b>%
z181)JVqVL^s?`c#iGoSJ4TZIDqO1^6BK4<Fb5%oQ2Hmhr(WHu@<0%`MDTf*<onE&h
z<j-JRIs<Z6l7^_pq8dDQ%?!yzkuInyj%;C-5c+dORq4D6w=qAnPVk8W;}s#Hz?r7A
za~yd}j_`E6IB4*OLawIS0ziq1tLT6bBLX=74q_MJbRhl~0{3<u#HSDK)eNPZ2;XAU
zMxWJ;7OqhrezI3#qo>>kZP)!9EpS(DC;j9KmQAe?bf>VvWol63kn$Q)LdprgAcAK&
z84X-s4o;;F%=}c(&addws-0RhXv6c>Fto}KXlv_!pQ_SrqAKd3U-^Nz(zvE@+)re0
zrDNMUXI!#iJk*V<$W6Rf2fN>~4)(rJ9qfH?I@tSGb?~c5ia!SmWYuQZRwVh#kK<q^
z+1%<?*|>pioPD3RarV90#@Y938;vAo*hZ1(S(4vwicJ+g%aHJgO4_reX2v*JQ%FfL
z8IX~5nGuQtQAH@7zT<#-gLr<#pTmh4nB`p>_=rhn(TFO2i8c*2_o{R2Q@+S=P>FVi
z<BGfF09bjT)fuo_#@`>oCS0O;GIzk4kPRgAeG~B#YaRE#Iadix86wZli8#H<tL$qV
zG--+To@~{P82vT#p6<7*j$b7^FkOb)02KNfZ>Q}rpXu$;t(7AB9B<b=^ZO>v<!{jQ
z-uJ5KjpEwxUC(>prk)?_Z_KI&<Ag+$z*XcO&CKBJdo_bbA?){V24~;28SKshv-Dth
z4yffLpOFKmS;ME?JreSQ$dU(-kR2@X=Dz%+J(n)Gw^gso#DR+sJzRVs%BkCz2aeT+
zbo?x|9k}6!1l!G$;&n;^jqOC_8o?dD^S8Dk=LnKGj2`iMDxWp<63Y)EqQsX<q!L*C
zE)sD7O#F>QSN6v9%Wos`Lp*@}m{9(zW$4_YAQ^uqrZqUc0oa>Py!67z_TtKE>+lxo
zsGg|71nunEC096hZ*B2FxVUXcYF^<iCLeN+7h3R#OMiftGID%;{Lk#5Mgc~2<!+0*
z8ePxJhaX)Ti##InHV}`pynrAW*@P~YNX2V&rFh7ZI-|Qy)`-X9u1&oVlRe6;A)Oql
z+ejo1H&pk&U<=+?BkqT+#c^-0XA@$+#}E3~g1IJ`u$KmKF~!>&Q@AaEe9v&}JM!>q
z0BER%2YVvF-rN350WZxfT%mmi)Dah<;%QtO<NFVlxD15_yj<-RW*x8Sz*l}A><BWx
z<bfxBoX;mhUa1b1TsYNWYIjYab$bR&@cR;c1YRD6+uh}xA!*^u52$JKt%P>twZQ~<
z5s5wl|E^|eF?)sY9iy3M)5$xk@PX-37=89^F0(6U<IhaH&rgrAg>9GS#P!k-EkK`X
zoyYi_Eh$*_WqQLw4NmGPtQpSXfMZ=uFQ+YeSKd)V?M?ffq!9QX_c9Le#0|D!bRofx
zV{w$3SCt;Z_>S1Owig`lA`!3os-Q7qcX+a0t(#vP7LYalD7cAR@af0)t_kpds48z1
zM|gJ);XjV}twid=9Mt_?Rw=JS5;Pw1w~S!n;x@YjM0Bu|w)yz15<BzHG+%=n1;g*p
zcHvx%=iMrtiO;$@oG|>py9?(fjH>jBfHa2_hgZ9YIs#pt!VFn63cFUX7H_Wv?{Uw>
zT)TS>`jL&d^KzX8g&e+9uba7E3~o4#`5FE}|A5sh&Y;hagq7go?M+bNW|<ntkvtNj
zZ=oDjWA}wFN;5TyjyqzcNV!D_Gtf4`0dNAU-6JQ_(uh<CNWPpz$I^&Q(bbY@H6T(1
z$%;t4w_7&(;y$fvP&@;Qp`+y44d@hJErm_>vh$+*pEZj?z|l1{Wt%x3e@i3cUAUeX
zaXtScTq~X9zzf`V={+y@GIhU|V`Cu;{d;4<VIZub-B6ot#cka9iX<inIDp>-3HynP
z<pOnUOfAX(@x5iv`S2$Ep9EqNVO2UJ<8H4C{Mr>0N22;IzcJ56LtTj*R_eF!>|zRu
zLw@@r9O{}36P0XC(KLy|v$LuEhlvn5nf@0I^}C>XJ}<{7u{@NfeD!)hSTxq0{K35)
zsPXV(b9a)RK|SIZ^WNLB7j9YMOkVa>sFn@dv2}H2_RDIW!6Wj!(Meh4(G}I_bI^5l
ze75h|;wYj%q$#T2|F!qEZH?T>qTll?8qS@G%@_uo;XRYRV4EH8&Hx9PWOH)!_-X70
zI%C>iw>^ZjJOBNts`OG)tJ`g3<|G^Z0qkz6R4SE9C8=HtQB%&~jWS5O!()4`ux8+t
z0UZqNh(W2gY4AD7<nKgvbQ9jjhd7Dv#Fk4GAp3iBsVdu%$rMVpphBZqErh=<panNV
z%d|cyKAgRUvVEAn1vfSfZvj?g13hPyYq&LBRYGAzKd0<bo0s_;BM@SGMM(yh#xfp-
zNjeNiQPO>wvg7~9M690#Yc-HR=ZA&*rGX`WPJuOL1<1-OM_4J0$7GkUVmuU&rB}vq
z!JuS9T^b$rbZ~=No5+<tM(oVr1PLCqRT52TStOgOmxIwLg3%}=KU7Si;5%4~<q6P5
zC}T+~p+UM1Ml~+GWUEL-46uNF9)&$0WOU~!0o#d$<i}cxiJ7pr<0s`{?LaPzwUk11
zPWK(1gDKb`h0Mr7iW}IWK~X&YzSU=W(++XQaraXsCvlH50>o)L!9BR41r{PuU+nW>
z1PZ&LPA?h@A(vJ#lr1`;wSPG4oc*o+Q?Mf5>l-NAAjRPNs|s}DUImJH#iBefg3BOT
zk5z0pxsP4D*}>+bE(d-Sjq4qHC0kMD0hc81nFm&AESQw$RYDjyJAXYt{dk6cf8B}T
zMhrMrA@JlseKQ(NhLxzxqZ`Zj=oBs9uoh*6D^Wm#i+hbkZ1XBf%)LJ`o(C4LT55@^
ze|q@;uxgq(6`6ye^bG950bnXx3@R_u>arQ94m?K^)d;TTbjYRmKfM$S`!_btQj9Mp
z$BhpZY~D<>=NAWiR;MH&aB>sxmiMifSEDHWw4Vd2RRF3rBdB-zklqyoQrrHV`fRL-
zGKIjtOdrY@Y0fChHnp3lck-%<%P)ZVuu|Y(JH7$BydIxH3M9PK+t+jZuBT@dB%~0p
zBNdUw$b+FkPx|~rZ5E76Oo9=nQNRO_3ZgT`wf9B(0`9@+gyaQL!@UKgK4c!NR;5BG
zoAVZ<-rA)_lhvC07UcoHl6d2Zlj-3wf*c1%PqO-m4*O7kDeI4~$hQ&<Cs&lr0#kmV
z(4j|IS4Cn_@MLKZL`~I+;24XhH7h(TQP36iyaKh6i3O*)fCQgJ&b;PM)N=hF-wiw1
z5#qy_z$sbZd=I|k=xzuLiyc^Y3f4BxdInLX5c4vNEe;}Fu!rD>46|8dj1!<bJ=9q(
z=*2fen|+J3m&pVPpqT0PVoYYZYU9}f<w9QA!(HYefe>O4xlC_O)#k<Al!x+?O~&Lp
zm!`X`bryMxlEj&<kBKMd8tM8_sc?DnIqXj&9aW36D(FfQewwqy*z1e58-NOOp!OwD
zW+;%`g8G8q)TX(AF2gMc<t*6f{Lns!AeUci>^+>@FJt)0dhYu*U80~&LzQWG%k*SJ
zt=yJ+8cfT9qbMQmf~;R)>2ZqMRr`JWLq*Y{>JJMRB;wzzS5-@<$m9{4gz+zH6orxo
z*9n*iA89wjYgj{PM<4Ko85PT7uOn4bi=jZ1Ce4UO(TQG~rg|!gvZ7xwr;_L%&lxMK
zvY1n&<thtAb6p}P3MtY}Jb$Kql1j&i(@To+5oq+7q&Yt)Fl3#SDqz{DO~$B=gb*|!
zx^UM1&_Q}YMb_WSbq%Z3AYu?AZ`Kv6I#Zu0`r%?a^+n4w6tCB|JrNC)ZIXpiLJCK`
zmK|%w1XD-*-Wu(hh;uT~G=YO)xFxf;TC88|?h5kzU@HqPU?!rqhntY5`-Nl2{Xrmx
zr7LRj@=h#5nI-5>o(DplNjkW5mY{XM0>P<zy<p+-HEl0E^h|~AQU+Y29z@FICXxz4
zkIp359Kl%Lg-+IVc5ZlLZU=qJ9d`6^z?sJa)dg9&+0is3%HF|ncE_WB1^X-eitsD}
z@g+N;sLh9Qf?4Up(M`9e_Iab5&p-d-3)(C%qu)vyv?4E+xos{0y9#@Qp|Q@5z?A5p
zNR1Ee4>kO9c5r-7-;U3Ic%#2<iOndGief{kDh9HcjNQmUMngBezQ+)1^2S|%r*Gyx
znm6D#K?r7tYGSgXftLlITaRH?wbpv`<~cv#nzh`Ql}|`<rP9c)*uGxiD8-+Z^U#b2
z6!_4-e0SOkRv=fQRfO;J$oS9nMp|3Fh2Z>j@ML$EA4$D6!6=}nK1<Ryj1{4H*4W&7
zUu2pE`TTlpA1Q6IXsnDO69S)ZSo3;?C0@f$+o{Gfxyb%0Sr!A4Nt(Z2VL8MU5SCHP
zP6g%x!cI&iiNIFLqNsQVCPmgW65)6Qt)D9+&Qw1avyqkY-6x!WI5X|k@c!8V#Ke?}
zN4j@5hhWH+(<9vOK*1_yfCC5};HN<^)fLQOcnvpkR>s4$1Lm04@Np7IQOb@H;zTbW
z*jc#lVGoLKP)s1pmNX%2UV>s8_b8pZN&8p}uA*)T%p8v?l%;4p8eKzHP%!6GaKhvP
z6MhDCzM8p?rKnXSv`*|rVV|OrT!>~(7!@Z$2*{LihhgQChG>6sr1O`Wsb0gGZ~dnC
z4gWCe+^aHq#|i}G>Y!1sB|DUKH(<q&#E#Ku*=fTAW}uBgl!dp7dTcVDX-#aX524}F
z$!YWb=|wyE7yddr>s+?~eyMab;8?NYj*`!nWz~&V`|#smLGGWP|Fp~$+@TdnU#7Pc
zE9yWfX3mbJdH&Pc<tawozKiZU*oTUWoh)C%3tTznZ_!|<`K}ElJyGbLADpz%0==S4
z(Q7hkindL!GCJt&ZZ;`!OFxwqnguv#02CFR*6=`HiEa@HO~)nK5~L{Uny(VPbtE-i
z;iRyINl&R68Q#W0xbBBHX@y!Sbc@h6kKP~rwbT62dVhQZ^s=9mkPdS5(|91Y&o41A
z{AGKVYUl0${CIrc?wp+;{~)SX_osKS@yG8UGKt&CdWQ~K)hGtbt7&Js`bc&u+gxKo
z?G=q*cTwy~ipcMD__})dx(gyF>>XBD_tp2$5PJ=O+~1;=B)o_4_w`JA6q4b%;Xs!U
zCC5d%JbgobxXw}Emr2E~0tLoC>az^@p`i6(XmMQB(X~Vxkzi`@=(iXXEhzKv(IiR4
zZ%+=D_TP^$E9<r$1d_?by>olab{Cm73_kYmgN3)xg~&ECUWoQarwqi;UN}ZiC<CMC
zg`rf7G7xZ2;)SAiE2Z$jU5CwPIU5#@q}r&=&t>sVGN2QC0tPxnBKEPz-`?5W2mIA~
zmocW9!bE2KG;7Dqu4_S^lK>aoLE2b(2Vd{G%8b5pC-FiOyTQR#I_L{!R4DN!pox7Q
zqc;ZyrB_!`?0py1s~NhX6uk<2w)ikP>{lwUUO_8<g9+um!dnx#rNg8mLDbM|S5!MV
zY_{4*^~T1V&8_X7-Sy=vbKI4MGufozlXEOO4np*Wk;e$%$|%HiWaLQ0{EmL{u$tZ{
z*RzaKbP!NDLeke}p`&CU3anWPslmh6I(S%9x!KuCkovGe=8x@-F~1qwFEdr7f6!BQ
z8U2rZJ*AXKHvi7tHFxxLdy1E5{%*<>zf3k5KgHlS&<{tR7nXz5D?q3>6Gn85Sp=#v
z6RZMAMQ{>Zc24fZM1QkLzS4)0;dl^NG}Aa-gIPCa$&Appz?7p19#}4PeyAf*(T#p#
zH)KK4@cS%m1*Ps}M2d~yJ|4`k|Kfox-~0?YlIoPc>C?A)ZLGXSKT)?GKbX6zU?2*x
z4X%LtbbPc>^6L{RkJu@|gzhpHiiy4+nH3YbMOiQ=@?vH-Oq6?B4ld5k4BX*ZlH0RP
zpEixMlG`jer<H3GE{jU_1boy=gWQ^D{khHoudb-dNh3Jn&jDmz6V#^=S{{uTVhnBu
zIc<54s!elK0hb0__Yk`1W}~oGaJtKDm##wa4&=YyA0N&$zUC?~rxE+EZ_WHHF<cox
zz-dFL9ldgpVNQc(S<m?Q6~L4iWV6GRK7&(1E8jvtb4(?S?FpEt$GJ%_N@|9-E8ukC
zGG)fh&=)TLvxz`vTL+AzV%`Mf*)+=ampLmgw6EL=a@Kw_ze0&qPSX2=ig`N!BYLAJ
z-Q2y&+dVuQsm6R*scrJ&(J~p%X2i>N#(aVa$h;)y#ZEavJ_&Z(!*XW%;5dOUR-bo0
zOy|Y!NobexPMvvV9p}@<j;!n1Ix}`pBBRr}C3N~UVwQQ0&W+JxWo$aXgf-5ic`AxY
zLSI%n(Y~Z5KsIKPXv#_RDFm8!0G(6XN;l6ZLoM%cbh<2i5~{gwvyZ`T!BlhnZs(M-
z)}7%Z<*T}KTw2OKx-7oVB2&t|%@H%T%uZLQ8{jto+0l#8!b_gzWnLxfUEO&H3Gqe`
z7}Afz<iIxi4y>}tDo$AxC=)mJ8GYskN8P&~Y==K<JA;=YnijwGTnLC3kFU`uS+)rI
zy#)%kRVE)XXv=#DoP$JK3W@WmJGe>W6!M0Oea#5X1;I_GFP2b>OXJ7o`|RM^n0gqC
z4TCYwb89bY3qBuw_;3@y^i#(+0YuxgWYX_fJeP8wHoRrvW7~W1&lf-5SyYCT^tPg#
zszKkY{s!|KD-SxE88*ajh?7ZVzxk5GdaD~*_}<IX4{?gKM&LBLi^z0c8T$hX?B=wr
z5UqUY<L?4j0yJAuQ?*nJ{wd^bVv>AH2KPxY7~&CLE_h|~Uw0no`8tQpW=Q`2ta3IQ
zt1yI$GeCSZ?$$a;?KI0Il)i9@_loWWU(u!4D|sRJO5LV?Z`&qiLMa@KgS$aG4h9Lv
zVZb}X8ih8jQJ}w?iX#YNjU-eVIc7OS>E)|P#X5<4jv)~m5h+Vm(GABAiU)91y)#3}
zOs&mWaOeIkG#wccpaI^qK?^8JZm;6RMTETFdGBNs&|vQ?wW#9%>oyxRH0m#??4OM_
zIs~snOR+FD!;AAi)K)O7plE3*m1yl|jY4czmHl{d3>N17hgxtS1^3876yhAMh_5DN
z^wY&K*KwEP)ZUN6;Sj>mphp=@SOx3;HcCu}a^-3znj8Rh3J8LR?;tyrs~)*uIri*u
z3v2pcI9rP7AcMY|ROxHJ`El_n9uCoaS=3F}GM;z#4MpzMU&6Wn@@24uQxm@6{8wMh
zBQaaWS9y~xqyfGlEf2ooolbF|Z!s;8C@%&9G#Ut3xE5e=#MNsSC)w9s7*HI@FnPES
zAA*V)jsKslVich?5?larsBU45leAj%K>*tJdL`tO`roL@2+@MJ9)t!#C?iNnPQ8oM
zyKvmSEtXcfP9oqKsSGw<E6^n<hHt=5RX}r9o)UJc8C(z_J5R88+*Ve^ggYUt&kv`q
zb|4;@F6w&--3xOm=XOJ1D=wMa(ahbT+x$n=5mX3Iu_IA8u+^-2>6F`7j*DdE?}E*B
z#=k|Vc$KE*AHz|CUW!M+VBPLygn_@}JMj>5CJ5%nFy=fYILR~&9}Y>_tDKsU_DUnE
z?(LNiCjEY^yg^LZ4N)I6{1*B^0YJR<W7mExU&Nid4uo4nr8i)uJFge0c!R|u7z7Yq
zltbIOljBxr0$BL=lggcna!Z(Spwg!b5v&Cgl6U8jVUVK`Z6{$uiuui81_U$9Ch&1*
zjB&|v3V(4XOEJGrVUicAg&;^lX-JK65&hLOgBJWHSjMZ}U{9-`8B6Oj{rkd{Nso7%
z9xMz?lNqd3F-bxjEL~hMcEtt9_$hIniGMX1Nop=1d={gMj%(QgP4{?bF;>H`xZDN5
zQmlqwU%hfUN8uK%bRA?dTtf!kTJWnc`isCU5QDh)qPJYL$g?hk-c;?!5Z23zg7qcS
zQ=cgH#}CIs(w9~IR8xk>Hvm<a_1rcm<k36~Mz&XBwhTL^K}|Flyx&^U2A?fcWaOaZ
zn=73Z^;gtN)EB0tO3JkSr0EqS-ztN>rx2r##AiwqjdG1Na;SvAl+Uwtf=2H(=&^Bv
zoBF!peGex+$w0s8O@>QcyRFEE)nXt9p_1l2YUpPRaDOrzhzm5D2eltuRbh4Q5AKBq
zDAwJ0{2&*|bP|L09VqOdq6Z43JC+)^(4Q16U8^5`j{2~G{C6}OFyGiU+^>MrDt7l`
zghmiQ7h_gJhJ{{Fz*Df6|L;Y+`M&)_`~BNwnL=CYkmVE?!QLz=5~mpViSXzk9z^6?
zu+BZ{{3X-bN;aq{->lFfDjy*ZgibV4g%P|uJwsu1-27Ynk`0=#R$5q#?Ll~DeWl3)
zk|7v2mt5Bbn`1H%)iq=WqM3FxLd@WpE*!^n1{{r|M*NnetS#{tsb~kH=_`8BBU=Rq
zr`Nn{=_9H&biFxuGTFmQrOOnU{vnMld%Kq}b$yL+lz`qLu;hH-yzKmN@cy`Ua4BRm
z9<DYoA1m3oNEd?lOkOGIO9XW;np#4GJ7uEQGBys2h;W_<t}3h!{L}J<8?tmGFF=;(
zcwOj#=JXs&y?ProT+NT)%g~)n77{6F><l}uT9uNLwSrdx-}+{*Lo^jdd3jK7N}GF_
zk-iC$38Sp=#_SS=orpJFF3&cu3GHj0f&0GH)s7xyAG9wnir;y*T1A0*h*4oR#aNTM
z8y6ZMYG3SG@SoVROxvo=KIK(kY?t2aSPavxBt_K-CFgy2%6sMXpBsXa(}wC`gbd;c
z=P+mvDUs`?h&?9nK3CQoKf{bm%PobI5Vd3penr65S@grK=2aH&c*V>ylG9ElM_GVi
zm%UrHmh^5*6l*x;TJI<%mww2d=O{@Z5otejRAtu0{vhlrQ)NiYVyQ6XDo~To3)L#O
zfV7uYsW>V~P+UUEt5wi&V=*l^W^1~;kUrB&WX%~NLY>1BJizi|fwP7S(-IR$z}Is}
zRh_C1cze<v_Xjtqtx(838bD5g^3@u%*ORm>uUur$V3`X$hojCMretPxXCIA@oDF%B
zUR4tN*5jj}I%jQ&&cUA?9UQ;!93P>7u6T(79SWgIrcjAqN+35qu*lcO4g&smoT5ss
zFz*QUs${NX_`I~8D`sxL@iYjSn`su9!N-GAahj0_nM%%vvi6wK=sw+ONY%vFd1WNa
zP7DX&q%~T1bs4dgt)MulLK%>&FSA8vz&!|5z@{vis%!0E3bV#nL2dC{NBAd}5x9|r
zw3dUU{{X`Q-y!TkoCY^BWL{%uVk#toXVa}tt>Ckw-1h|x%&BJX4<{Ip5@H)@6BY4N
zruh_K2Ym*{-d+$)mkzvLYFqX}v~5Lmi4!~{gO+*sYR;{<3k|}(s4MX6Nx%Q#6mV?c
z+`H(!F_;p^f%6>@T`qC%H1@p85e86F$|zSddtS{7q%jQ&>evw7#a6Ms`z{%?lm@W}
z;&S{D+=4KH>u+ez7Mzv{5$uL&s)`+`sCv2#r?*lRTLqT$XMO>|Mj^yfdrY$An6=07
zdBpr@W-NuVG;m$>$FC?nZi6~1hppn&JUFGO^brrK$ogSyrO3_FB~ReFyo?B40Wu23
zmo|<$bAS~Z-uK)YIh(Lg`yG%$8JJg=qR-{3i%B{jMaj+hHjm8mHK&o;EbuYT4PoLD
z^|{(I*HlhUPugWQ6<e#F7YZBEl#QtAS;=~hSt=?<%t%!jTn1$rj>0>8WJ`i-OoLT;
zlbUfX#+6iiNahV|B2*4}NS{W1!49H1eRO`MSWLk21eI1T5Vo$Q$awmekN|nJN`_3w
z%xhO-3Agf`!eXEGKb~J;7?Px&um@>2;8+ysl4`ohrd+zr2&z#8%SU4mCFjJP0HxUK
zOtLIkRDTzPLH3Zq_W90TztB=gYE;^%IZwD>zP}LDt8@9&SsRnXK%Y#aAG8Wf$Kl;D
zThqjimVYxP7`_6Z4rXQ$6su*gnc-7#fK6Aoc5veIv%uZqYQOfmD2VBCJBnsy$9Foh
z{GUaW5RhLO4dL*s>Zc&6oK8u-syF}&)mATzMixjZO592R1yk9{XjnuAb5y4}Vm|(9
ze!RFm{h&FhvtE`L45-dJasxJVH3tjM+n~dK78rhoJX8PcbD&fI+WoITUH^;EK>g@6
zzIOi`PuKsAIndeo+Wp^{x&P`Q!Sp{}<or)ZpTF+>hXxnW|Hhx40E-fUU%CJFCuD#>
z7XcQv0(|BEH=d9I{#*oD)DrlW`@ivo4DiP#zzkb3bwuu_;z?)OhUskx3t(kNfuC5&
z0_x-|b4~*9Ydj7XGrs51vC2bl6oS{bh`NF7`JK%6iEsN+V!A&`=x{=(?H+;^AwQJC
zajCpiRckzmTGdG}Ow|jL3l}E13wYc&ZS*<YsoZNPVW7O7TUv5&3^O#R?&?c$LuJwF
zdARZ5{n<$tcXj-VhFSoAhQ8(1{o<Zv=~yV91A10M478O;)voN^qFMFcdW2M7wiYKm
ziw7lE!bQoh?4V@TD}$1kOyFd#azzP2JDq|wQ^23Xpo8h{V3M&3A@9$_;5z;-LI(^;
z5i$n<+<SEW4SG>`^e`kRZE`?Z<7^7>n0E@A|MgRtnp7CB+qG$)%=F4ggdQJnHP`%i
z*zXUz6#$xNTbK(RzEd(QR@GuhDB)p86FQ5N*o3cIa)-@>50&*_q_9_4N*G}}LrFLA
z=;5~Dsq;>mesheaXtPja=-ducmDru~CZ?`5BzJOO22wZFUyTq_mi6b5ZS}JA;rOJ3
z_cF@$saoVdQQVU9r^spP;O~!a$qm6*3%XC#CpVm4PD`cw<P!z%v7@bWrQ99Gs^yEz
zRFK6NoO9(pl!Us_8+<ke^Ag6l2CzUuqQdkx{1l~cU-T$W``Z_N^uCqR4QljMHk!!=
zj%6qzxO-rW;R1Ya&r51HX$en5=+*gh328i?;nF{sihdFqGTGnCEmoX4JpEt*{ERV$
zIiNpM0V?cPNd}pX0_lA`?%ta41lFnt@hW7F-8~Bu*){bBF>FJK2=tFLkNP-4el%2w
zP>=@}Qc**k10Q&}kH^b2@r81r`Wu`UZ(bt;QR8zF0kiBrEC3EFn4$6D!}0r{C`Iw~
zJ<v?Z`;gpvB$8W;M$*pHlS9v`J*fKx+-T%U^rOC^>khbXa%yoM#0_)$@+Gwe5uBOZ
zn~c2Y78f%UBH^s+$j?i&)zcAD-7pR^dAM|T_9hT_VLJM+s{OcZ;suSA7#9C{zzj1^
zrh@yh``UlAlv$UG)vS7{5$t)x0JUX#=vNI8%<CVi3pZq1#4vnJzq9N{@qm^fFSbvu
zP)591tVa`-@@?_z&IPWgV%J--B!zW2Yzb6m$4ke8O4DfEQ#ufRCoYHYoaP8GD`#>E
zP|NS)qDIHR@pFgheiV-*@4grnD8)cVDMS>#>-~(FDh%9stECWiDrFJvE)G$ntAD2K
zjv3d6PA?h@379I?XxW7KP<8DHNirf-^SxM@FFI%KbD_^S*>>7swh}B~LU!$OG!pxc
zNN%9-A~57mqwXMqxFzrqonK|JvIvx13P%75)H$^4NrDlHR2aUiDCotX<DRKPfCkt2
z<1Xxu2E4wF^4fB+x*8l`oW4G8H-p`s-Cb7JZ13~5^Mj#S41SC6FnrQr9QM_20eUE=
z*w$L(I!Jx7xWva(TdI?8ZSVSD5jb4+qpD0T|JvzUVV$nOPSsTn{QWN384oEYNj!cW
zITVBvB&j*wt?t_<)8D{sA;m_YjgWZQw;y)p!*4(}Hx<y`mMS?;>DG&e?@g}LyQ(++
zbtCtEmsihvnNu0#=598i_{I#hdWCh{7qCH>2(T^nzP||HT<!ZE8fAKRObf5Y3`^qP
z7b>FJERn;v9(64O*^pXYFdHlkAO~va{x^QtO59z5j_2s);&rfM&SHWUDIKBcb$Ay;
zFh@L1><%W0e_EjU>Wl#lv7~+=dGZ^Q!~_O{`$9xBf){j0_V3hrpIYzt6%8cLuoaWR
zh-(sc_K1}ZyTh?5sFReaiYmarsfDMiVXrp=<@e_|Di}4!M&K(GJP^YmcIPHdz<TDD
zZcs(ul=#4CLcHU!+l_|f%JRBelkoNe%eW_!_7VsH@X7!IbmC!$1`R9M<Oo*nvR84^
z!<dD#5IhI=01Ng*kd?u|%(L_M$BXtst98y0gO|O5LK=X$oNJIYEhkdQDx%h;2bq2V
z;UV{4q|1cSjp-GHVWVdBnW`eSBA|@oXJFY~hS!WZRNWyD#g%prTb+)m-lL_kU^ES>
zo=*X9J)(R;Eqr9}&eE~!CNNSBeiMNhU%>}cmsgfpak#M6rM<^srf^<Ra5?CT(CSXl
z7ox&~jNMlH_jsg;pA+jkOFI7X2KrMUi#&Bt<!|zTDH`}G<d7iC_cQgM82Jf$ubE+n
z&T~Eg^-Az#^zA4@Uqr!h(TJkof;S?9hEv+>$!L5_aaDlSIs}fEaHviVhSW_n3t`Rb
zg#A8$&V;gLUoO<;)JCdb!}Cg&&s1GBclLD41M5x&rp{MozdN`q)mjrTfntH5zN-JS
z97VoR(g0A=ty^bfC#OPjy=Ye*1f)!)_FYv@wJ#TR8Wi<ExBb+#pXRpT8(1E+t9-wq
zJFsVX43vrMxDQDP1T<FKswnsA{B!*J6wmenKtH}3g`)?5Z4O9n{^tT@*scuzulbcK
zhw@`Y?mfvMS-k=k2<FRGB%Z~CiP$6Djs}w(Oe2q>>M&}u*bUr_!aEF(Z4o9+VAq#U
zMiE`n!laA96L=*Z+(j!?5pJ5r?2N+hZ6G$@BXrf@hil#Yh(qfQwC|B%>ifZH^bmws
zfXUk0TIb^3>BsjivC<#3AOt*n^yB&QWm{|>Ijs9A_;n&Mhh!I#p!oy2BWKX?Q_L1#
zuVJft+&;Oq%D@NJukO|4`ez7IBbwcDGJe2<7}o+vOe)P&><-`?sEzQy!VN><BUEpQ
z*9;BRa498C1b$cDvN`_1>J>~oq2a}1&!)~ZyaL(@@o^u<V@WrFpjNKcDPf!7gA*O5
zzdV=ifMRXVr83A%l{+Wl2S|N5wV~T9m_=)u(a1omK$BG&0RXAyUjQKjm?@N9mNL<a
zc+H9+Se2U0)>KOko;X<&6vvc@BI7+6`A(;K0gt|-*M_`$@X16!Zl9l@p2P4Ghx@P1
zG##8Bgl7d;pM3oQKH1bJ@NokVsLx7}>8+UkRg^wB$%P1tZ<4`CXaOL9)`H7h|9A;d
zQpC!5{SZw7SPD!e%s^4X4>+?*!@FEaCca*H6UJco1fds%6#O=&c=9UDs92K(fyenc
zf#H}DNozU9UT2=Oa9g9?Yg71Sh8>m-Dbp@456&+?o&^xWrrpYCfH^h30=c9<uFM$?
z#1P0cao^P}eB>Noee23rM95Jiv$AG1Mb?~0VK0D7r9xq&W;YmLWhb{It$l=fp6C3t
z5**M(T6TNAtTYWd&HwCE1Q>4W3>nQkL$U#2<RLW(IC;h$C*4s*(hp_a_+c1>5Pg7A
z0(~n;@5E0Rkm%<SP6>rd0rA*{Dh3x3=`a$a8=#Xu1h#avwfh|QAs>gOb`m5ZnTLIZ
zgRbd8Ux?#K<rjgKoFz<<_Y*=9o%CVP=)$@V<B`Bzr(d{^Z-hpht_7eh%WNYzlW-IY
zl)yBxKM=d6+rd33mM*N-RTxiHG7Sm>I|u{~YJT)v*d2?;Ad!gatxyFrJw&=*MRcSX
z^(dSW#-hf{7-R%UTEid9{p}!wRs?Z}pdTUFGxwbd<V+lSA_^f_D^fERDxcI=tw^Bx
z8uLZ_{D=0rUt><^)|k_B8guGs%;_UF=Cp*yEJ^QZ%<{BjeuX*BRhZM#3NtZFzQUY(
z73Q>z!ko^jFsG#yX1?WLw8ES|av>!KFSU^BQ>TS5q`@&Rh@KU5ZSkw2oYKFa)lf~j
zG74k*D1|XCuP_!(HcMg5Ft;PDe1!Sa^7&OiyshEiKM!A*(el!{wLEzb>MZi9XOTC5
z@y>=H)xe#N*-W9Eg7uEg8+JFPY+rO6e#@8E=}9~I9EZVW^GqpIdjSl~e*`7tGRZhs
z$xxdbOQSJo8fDCQGGVj>bGgj`o7f$d49qOA$*6V^>4WN1-a%jTy$mXf-@dpgfJ@U{
zoy&!2{6iiIR|95li`e5rGBq8C#JPx6f<@4RgpaEZHOb6T3M|I)ecq*!Hh{1$HS|;K
zs>PJmqS`IaUTC6bOmvmA(94&l&1>I!EIBIn_Ma?p|03q|9#7r*SQNBna1jbp5IQKR
z!Gctp;vd+OsMu86bVM1y=NXO^8jJi9OhsJd5NQZx)#mmh`gg~HwkTT>=`1Uh7x7Iz
zZ)|SuD}ssz9FGIw?X{@IGb$-PNoy})D4~)xR$i*hL4pfr^{S)lS;kX|n=^PIs_RY-
zQPZUmB6afl=J!v3^E*tVNpG-P{@zye7lT93zQuGs7`J(n$Qb7P!6cpFNtzhnE9-*P
z_Zda~@BvPT&@*lz6gosK?8g0g{6Oi9@%AB3r-8DsdhgN5!W=5qAeQuAP8ap0WL>0Z
zzAhF5c_guCx+LcnFU_eMUF7J~G(60U?uPxrLlELt8*|An?_~!$coi^dBJ000<XPiY
z6reN+1*Ox6yF0OAi@R$<a9|SF;>~=N3h{au_rnpd4>7>)Yy5NoPRNw#76u+ec#5TQ
zIEdk-_D*P49KcnC?u>n7unqTJU;-d^9#sq1pWng7{ym;X_IpYj=LAzW#+18GG-~nN
z;9B4c9yI+(_f6;8CiWCSdnzBdz^oso76i!3he3-&NX-Z5sA5DS<O)Mb!ReT{JM6Fh
zk~7X9)98BA*T(B~D*KN~G<v{v*tgP^12EQuph=j={~(XL<59mOPq#r$tXhoBj;7H;
zOnI~8CQs)Rcc6iFA$s=9B;N+C3oVJF9{F~P&Iw+hHrF$s0oqHYaWDEdC8WafSTOxK
z7cugp(C6X`x14^`#j4#=4jSw^cvmsnJRGo7{^PM=R4n7Py3b+6Lixk{g%oZVU?{`k
zurGxUY+l7YhI99a!9?8&Owx$+`Lor`v(*fH^=visY&8@7VQ<r)t!Dm2CIQb@Gp4|w
zY@R<`&E$NZt!7+E&sH<fRx{65GtX8te{ySrXRDcKs~KM4-<8jwt!DoBtY-2T`Q_u+
zr^~@%`|`(j`$TEW2PZ8_((ELVSF5AC=uyK)81I7PK^@i>b1^EOG;p<-R}uRT3K^v-
zf`d@hh2Vg*I~YFDYAlq=>#$3w?9ht785xUj;V6^aQ!hfV)r8FeX=IcryRTv`kGrVQ
z3`f!Djy?;`%nvG}->&bw`Z!`NxDJTnu)lR#=#bgF!s0FYzDG9IrEs!N|3$+d&Kos&
zS>F-5z|_@Q;6wHTBaeK*x!a(ylKvSY>o)v#p<2$&qkz4=a2yWDzMd-($0ry)RN??+
ze~3WpjN+Tyu}|#Sn91rn4Jgr{pzIf9tpzV7N;Oi6pi%!M4^uHC#zM4xZw2`E7WwY&
zG-&zT@8KX#<14Y97!eI1uP)4?WGpsBgGm|y!a3qAhdgr7{FvCvo?w|;P?jVl>X%q&
zgMY$^b!FDS;m~9!_I>>8-5xswr0YT0GSP2ud?D+zTsR}Dbc<B9jLx$*+EV3_D^CUG
zFB7-b;4jm<z1&>={(>&=DXgH3B`cP#U~g*Wi`DO&{>p_cP!wB2nsy3#29X{!VhE*a
zgQRKQWs#>9rHxXe)Ve11%U|CVUcs|(bFmG}AY77pcu^ppj$uU`T>IdtS{xC&;l6qh
zVAbVvAFfqL&>-9q`T#*Zi*Pg!uh4=+MNb2jD~20yI6k5aO?fdoz^g|$jW)u{&g4JP
zQu3&ULt-Rke?1@2>MAfOGB;k>I+VxLABV`^4GMhpN`+jrZm(7IuTX0HqG$CKs!Ulk
z<TCm@Su#*RG%E)FoMpjKGUBT&6221lpwFnEJSAl%Le-!b6K&;*T1o0ECSCwxAHTLX
z{)lU<2eKI2WDxWRgJCUy>9Q?k@;)ol{29`<gvrBwn3YR-tf4trtm#YEcFKQxJC|ce
z*+T=#o)Ba>9Z$NS^3Mt~RRgTMHrMHb^~Bv$s;_+GZvOr+xw|N{GwJK{)m>elJzf4-
zo-XAaT^8f#lH<>!&z{OTx)^Eh!g=<9nbQO2oBt3z0N27llCfV<XHUr1uc4nbJ1A^e
znG5-(VT8SNaBo5P<{R6#?GyXNwrwZh*tVUV*tTu+#O8@@J2!W3-I@7K%{x=I_wMTb
z*Y2uatGn0J>+^V9NWDx`iDN0<^qU276{YEmu>2sxF)jq_-{ELAM&c;;Cj&<dx2D}^
zCHWXwZ@Mylwx@2}#(6`JI<k@7MK^;^faF7ej6^V30`;eA33T+dYgl#Hjg07D1}2#y
zGjTp1+V=$Ha?cgrNpoyrvVpEbrzW{{+?%cu5>@Do?Uu<k`aO@{b4c2A!qK@N<d*3U
zWm)KX=>jE=Aq45lAkw|&i;%iCyyj1Crx}IP#vEzfyEIm5VLmo&rn6BbO}i#V-73!I
zwI;aANPr!jmCxr$>ar($!>Kfrg7%X^uVjZSg6ZH&aVk=btSPw}JV<13g_O*BvB(}8
zS<QPQ3@H&^*GcQ;62m}DRft){{97Q@XrVP1<LP;2R&E6XK(Q>uU_%ZES3KcvKpdFS
zv_6_m(4$Uj)zSQ<jEQy_n^chB{D5F}<f$@2M&F_Q#%*kD?vE1;F{C%*?iUGSDO6qN
zvLIU%B{YJ5N2Ovt>N+H0TXGG>Uz4Q4^$Uo{I9NewUX-HM5a4i^$?wiM)A*GvbS(}!
z8k#t)8?N*i{bKs9^if~)Z%4Dky)qSsqB#M{;tca?SdJ-VlAf-xaN7u>;nRnIaT%m>
zhVUL-`1cA16&8m&L1&SSqB5RZgyQ{av;qRO$z=?MT?;?FF9)Wt`oOj4j?=qzWrd}-
zK;A-F7M$q<TpET^7wfS7_?-b<+lV9_6MQ9~Kcjp=!@F5+c>*L*4yKY1|9-Ct6>Yg*
zN`uEVT9iXk+MY;)^!gR+yp-GQtK=k5GU;Wa=mz=JAVa{~cH&)rJo&_J1oN!BNz2ej
zl`4B6`l6%$1isjad#Li7lkEd-IIzzqiOcVNuL6ts^;5n2Yl(}OSf+(LeW$-cdnETn
z(gx=G+sD0&a}NOF2TOL*bSn$;xMs(5ED>0naJ;@~0cGNU$HELv+W|A`EET!L?S*fD
zJ!$*sO7{E+JKZNyX3c3~2=h(h_z!i(i$uFt4soJd{n?qL@68jp&wUXyXSY74|7`0C
z1Z9%T-8orQgT<uhNli<%KhoLcgus9E!s4z#Q_3%6QD%VzDA<hE@|$(4Fr`@%&m0;N
z&CyL%H(;Udkjf(-a$WWo1*&GG_S}9?(A=3t6}hxWdF$FzPpKc#0jE1AUA}^wXps>u
zq=TDqr~1oChu06F&w*-q*d_;ju!1=DW1RO=0&|fvAjH6kll}xdfL4I1uesT+ha(3)
zsaq5&LYaJP^enC3`91mfN^+-i^Gf*uyB(fGV`j?w#nG$JTBfe_$aM3X4@T|G-qPj8
zwNBUG*cZZqb-AoFH=s0AZi^Q47r%1UWpK<DBzmVGHQ-K?W9w8W^NJUINl{Wz)<qtV
zUO-)_z`KDV&y02Kt%6<SsOI9?Jm~QeK2wG`4R&2AA|0$=+SE*tj1l@(IeL2IaTR?R
z);F$LEKLh2S83)xImddPcY`=4vG2gejKMq6fp}zCb@dZ$LWb$(=d3_ad(TFD8!w-o
zaLt7Qc%q4RiwN}<il42G?Pq~dEsRaw`gnhstN7nn-z*VyZxFGj(}OehI%xr8eq7$3
zYdJB}I<E7;VLn!MdM%GMa|eSoAn0nUNlKtDEbj)<I4wfYIeYK-CsFxrO>lxudspW=
zq5?Hzz?otTX2sv+g()JYg`CzTQ~R{?0!)CZRHY@yOY$7)tc+BQ4S|7cLgx19{#Es?
zMAhWQ33t}RsMj!>6=;{gE!cC3lDI>S0j4Bw1+|uI3S-MiUny>6zYx-IX8{(gmKnz3
zK!>&0a-X%=-JMSd>)N)9&Y&o{_iOXf<IBLr>ZczAx@o`W8F?Pe%V+WIsQuoYCT*xb
z3eefjB}}~NY6qo8j~i;1^q<AgzMRF3NDVkrABP6CIER(oLX-Is{Qg{#H85I8zdzD<
zZwQg0OxOJW(zUDu|BI5I#h@@L`-?lwjvj+H2S|WJdPe7HMC}3_6C3vC;4rI-9_&j)
zNd-Z8>`?h$qrhW8+L-bemE7I~``H|*KfD<p^O*^hqQi(07kc7zE2i)ZJx&Rs9(&C!
zl8OW81L9~(fi-NECYVhsg%^B*H;+O$Na8b^0wP{HXKV7^kN@511hPT{hhsiZ|LaZX
z$F<_8*7aC0kTFD*<(elZ++YIHBqvTWtAV;=5y_koQUOu{7VwM!&>FhM(KlF7{%p*=
z?`-GrM86e_hAae9t5f4Pl_HGHFKIOG%VJ_aWpo;(Q+IFNI8Sb<8Ub$dtYI8#?!W*O
zVH4aJ=uNk+xXyiN*}A_I*5qg+qv{4Ko~<B<kr@|vhawif91%bvsAy5np})UL#_U#&
zK3k6r;lHl>{<-3RUD@>iTju_#ChY&W#qr{U`$e#`v8DUs)ugu{-}1s((Y`&vE&JjX
z&W4+L<5n1BcRLO-U`5dP?-GLFZ;%*YtJ=nJ3M0jqBvw1z1=kROnhaP_!u4ti=;qx#
zjAxH~soeq%+9zJ-waUz?G5!R#v2+9d>gjLAUCe}s{fGY*W#Jj@cdmj;-56nizG?;Q
z)!hzwTO`t2;v(z(<5IOS^n{3%8tVOR>W725Y0@Sju<sI3>)9&xqsxqsBKA+zQMkus
z;yv4f$1n4+MnA4WRz^h2LoXx6PRa$h<g(TzMw&?C3yOVVFo&qN->S4bRBW!QB6a2i
z;=GJMbx<ry>z?4g9Y_rp0}W*v^f;C+)2Tw=W47s09YAosIUjgC>z~zazk4-M5b`t7
zw`G2ms0A~Y<Xf3zQj=%=jIlAJ4NmZL&JbKXxP_+GCN806o+gT+k$~Y54JXX>d#GN*
z-J)%=6#jwJ`rA-h0+S044YLIlI7oO{h7_K@r;ScCkg;CC0wPyJ-3LZXhl2_c1r%u(
znYOkWj8bi@B%T58`HS1}7*u{XK)OovWnN`t>zDhS3i<9T*=@5Wg$piqT@R@!O;FRq
zL2qm<T(WFc`vR+Ra}NM)hWm?;%ql*Oa{}}CV@beE=n%<QH7U4OSSSV07-i>+TU4;}
zBuXj<{x;JaN-KW+2_G|Sv1suUtM_sNa*OA7Q?L%cAsbRu3}8@I8w`AdXs$KN4m!>S
z@6Vuc6avQPWe3`#LWZZfcO-qYmXiPciFKqM&DTDjecE9opx`b6+d+%MvIiNQT{^-%
zYq=NqRYoXOQrlC3F25Ysw%AV`o1V3kYnW9QK7)eHTT%pRBf-F9ftkcDX^8F%0MPRE
zCs)C7VQGiH65FcV2bRN|&kkRcJh!wpAJ*G4@|@3=@Q;rb*|W^1pk(HcsG~RyBQvO%
z*T(3n4kguj93qx+lMpwW1nCCs{KKC=awQ|s;nl2Wjf-x}hwfftPP-z&=Ekc#eS_E~
z(AawzLs26WaNWkbZHnOAvc#$?C(K;c%cNSaFa<lQ5e3ZCwJtHkJ&Zd117xO1ya49*
zr1!;0EulZ~r7e;;OXmu~BOc6A0y0;htMLax?bzXG@HOLYb~|K22=Z<4Bz9o|NT!l&
zef-s^>PWdrJ{KV~IHL21mJjSu81%J6-!6lQVY14JJsflrfsS}yd&|NsIFMmx$z_C@
ztQDPcNIz!h@nZF+SpF0Y)rRzV{`6WQ<)|-iqZwo87(8|aSbOs=!Q69sQy>HDX6HqV
z_ZH_y0NmIreL%|{2eSA)hGZ{s+afNCJZrw?ncdpkZp|QF!1^YV*DTXd@l52xx)g2?
z2kS-Cx)xt+dWgnLd|JLGR^fOFv?VF4gTyx(jorq13w<&Y%qbNaOp(RNslejD;cGjr
zE1pPAE*)z$$sKmA9^A!|7Q-Gu3H3s#dn*H_)fH=gwNWR4Xr4XiEGds@lS2#cSywaB
z*dl^>KB!E82*7hLrW5a;<cTRu@`H}Wlhn?0aOe*Piin+}zt3(t8JZ+}IvX-4d)at>
zC_YR)!ixB{$AvN~qCc;Qn1fzcTPdKppY5Bx8Esep`j!$|e?X;9<5qNBbbYaB_s{?O
zi0BnAECne{niqy&6j9JL&G#&vQI$yqYQYxIxTl3PfED|uVFF=-Nrn6mBo3_msRn^g
z)aah&6!Ps2=e4g?stUsnkfw7oVT-W>(6p|4#N~lRt5;xA>ztkc{A6Vj1`>l!aO#d+
zTnxJB@!YSPrd$6>J^Vh&Imx+`4b0P40dygf>#P;4KZp;iiTI~3&w5&Dauja((Q}||
zL<AgZG7bZ1&wXJF4P_OHszMsx9(Rab86!afGG>|{bCm^l<aa?Y2`j>(()9MoIi>ra
z4>dzsF-ehlye{pRfes|1ZBik7a@c=_|6MA4KtA-D!g=9(Ih7oFm&t9S`V-?Do_b<a
zs1wD9HwLA1S4!n6u+A_Kp@F9(R^u@-Nl25uTV|MaQXVD4#gpVRG;%@b_3UFlT5$YI
z+c^xUKGI+`wG~!1o4leLpoLjNlhq0s);66?=5cl2wd)uq%le4a(QFLoP!@+Hj+nhW
zBsjLxEQxP4b<d#A`h;Te0eQ+8P;_4s3&jsjYVandXD<o2|KouQ#-Ue#S+0VeK`+pw
zk4PcOXgr*hAP2FA%}K(O;i&udznITsXx9t0fCB;PBLe|Z{|AJfxv8zGqoK2@{twIU
zzu81PG1%Lvsz3vQ?j#j!{BIb~OB%X%8{BX{GqpQewvzQjYj5_1iOm)(#oGQgxEWW5
ztD$}Me>7TKE+ic{h{pT~smCL-owdDs{WDY7Q9L9Fl$h6!P*2dMo=S8c(%J&D#*5~H
z7wGgQ_~Y2{y4+tOb%x>i4`iZ8k8c#s{2CMnCG+=XXb9yJ!5Adf`pK1Lw(G|1SdkC1
z!epp01c^x~1l0vlI>7;24_SGw*P!0hFcLxF;WEPcSOX_%v}w1&z@4y~H36_tjjZzS
zL_!d)I-?L9`JB;ANb#~R{sX{~$FL#;<|wQh$At^K!|ob2<yG-e7!JkcxfmJdWemi#
zWf<1kmA<uZUS8+sSpG^8x#J!)XAe4bzEulFa~A9YAd51mOnp$tGECSfGVC~52uR*#
zkVmiV@qtn8IIGnx&XxcCVx&kU*76$Ir!`lvbJ0o2dZj!@O?&-9T6W$6^5Y8TuVi~D
zo1~)axEE5-@42k<P-PMAqMoIa7<xelbV_+F@ge@ynWl+?QOT(MA@H8CmWdi5AEDH}
zx1KMq&cKrpJ9d-dMjc}tIb#$eqhw|%PP`UXRo^bNEn!8JZSb>TO*VJj>EM#g@B`;w
z=unI2{$Z~t^Nkf2`x%-UG70k5wGiRn&9$r96zcWKAX88H)f@pTLr1q3-hrEkA(8pA
zj6X}1^9QNo3@#nzVKm3_kdd+KGDoyx*j1-tR}EQZdc48ZTE(Onnk6YJm8#A;J`}jY
z*AEA%F!5P#+-yW`d@R2gXAdj2EJ4SVx@hAaw%zJ#S>F63q;@6Kq<PT8<8k#{Rd>0B
zEF@8>*f2p92~LLntLG^~%9Y?GD(2D1g<tUP5PRTp`DwQv0qk|rKBQ7?7{T>Xi05tH
zG40pkg}KP51oV7PQxbL|HFWu(&V@p*6t1nH@~J#9l|CBq%kJI~m*G=w0x&Hih+V2n
zcYMo;1b{DtjV~CDz^=uqcx4{n1(qWn2#bfc#thz1UlbA9ID%2LSCH#eWj7?(!6t0)
zK{LUG9n;E-&u|(fs=BtX*n#yrli>`I$=OLkSx;3jVd3=lbInNAKsWZ3CcTG(z_U;*
zA6fhi1P+(`%q$hIFP9c_Wl=5ekEkrWaX!v_ZBN9%-?5oTj!e|vnBfw`{cK*jq8DFQ
z?%_D^2;0TCQ|}xw2B|f@nh+Ru=RkhSaL?rD+ld<1!O-SH-*mOEttl%?yTF){_a%!j
zx)FTqf9SiveInKb2(*mQJHFCUocs}K>$MtOrEFAv5hodGTIyCOEf-9PKas)I`XY8m
zmwerk<rZC+@zt9n9u14MSAF(7{mCY4WY3k~C)Bjq!bC_09!e{MGJxMi2n`BzZmiAT
zE`6ukA~f^lkNR(wl3tXyUXL&~7NJTtRmfI9v1Z^j$9xWI66p1hu@&M@uKxvf3$k5a
zwUB6)m31JLN>Q>gEa{b4hT;S|Fpz-e3o6HBjDV;WS_fjkbqMGUZDy4q)Pw=cQpV<{
z(X)f`CvqDZ8$za}geLz>|HC?)k8Q2Ak;x@{Sd06MV2k(y7IS+4txPEr0v_!4DJ8t+
z%yXv}woBBjT1u2hZmNZ)XN0M#CJxG$-;ckH!2f$wv(l-wI>|IO+MFWYey%3_#Eo*_
zZIR4RGw}9q%zYyuX1p-+6W#e@qg4+6aO%eU!Pl9s3lEp>CPnw`u#*<C=khv!HF&W1
z%Sp8h+;ZSklt7L3JjOU0SiVpSgB8`O>&u*3+F`S`G~(6FvHwB@)oXx8dGas0z_51-
zJ)P{}<=pV7ygJr7EoERTU(RFrevGG;RYuXx`UEUM{5s{2HJ@guv^ZlxH$lO|H;h?k
zI%M~(vpL=Xt?}`gZHQz^TJy!KDM#?m&?U;$N}ZdGerLBai))6HaBNzFHL5f!!!MI}
z^ae}_$Bce8#kUxkUzadQ9d&FM&6djpGjsn7@1ImpD3}uLhiwWA1Vr#3CWil)_wV9t
zY4bmUP4%S9G+f+afq=nIe#`>?+ha-%V7Ku@{IAh>SlSVC#N$GU^bOC17d!$1-Yg17
zH4xUuY7o(cGf^TfFX~VH?%9v3!rZug0=yZdjdq5)&G7MB@;(?qrFMB^IA_yx@}+n2
zjO0Gsr=qq|Lu=C=-DuuGCQ`MPsZ57N?-Wq&s6k4!ktc?WCyGH8)gQ4E%Os-Fq@Vy-
zfGe-kLp9C0#rk3ae~i<v4$btn1xlgB6gtun7lH%d@evn;Oc3p6Hst-1hT>KHgKH1D
zFOZl9tY40mZS2gL%ZA3#R0^D_uRC3X*|<*OL5@UUtOVUrfp&<+NTkNipk9$|zJI&0
zpgdF$K^+wy^|%TVqsygO!w%jN$9Ii6kys#A&na3Y)I>7zner-3mq3Sp*xO>GR1B_r
zxk`1N31)g8J4GqYFa>Qa{CQ1AZ6sJ!EfYbb_(zXfNXaIAk7x{scDN;;Q}B&R(gcnt
zQI&44S-b?{QO8K&h$wm^u_1c!AHhzNeaZfvM&Im(WjJ{hhl$k_wKCFbc610*Fu(~r
z%Du6Q0~Ann`kVq=$*z2jeq|QbdARgAnpu7<iB6lrN)aA4ATY+5l(gXXucSFFs@2OL
zfl_(&FL;_0bc$Rvdv#D*nn*fYR%%~kC_=fVe=5%SBBg%aRV1}^%^nTIgCgxg18N27
zzKA`wOUe_`<XH|LeS_?x*8yt?r|guRecHhsLw~+GkMSWo>yO1`7;cxx<oTNS6ZPsm
z26qoGK`ZgUf-B3k%^m{6*uNV1iS>jpd-@MNIU1>jg$(3Av^aX&Z~$aKG3CK|HA_;^
zEiWDAFG^n5t1&-=ADt0@uPL9hjr2Gw>ulnd0I#4C%^NUZU0!~eIm{`mOu6M56uZ+;
zFP)`E1N#xc8zi`{6Cdy~@qz5zFWwEt!*`~i;*{2BxASff(eoherWdNrlSe_A*P#y&
zDgg<<b-|o&HrsRq>vCcFtEJm&h67)H1*Xf9Z^d<LkQnY}%M=?2p|`>K`DFfiymmu<
zeI-^|^SvIwMcmm<zqL}G2z>g<HYc<ca&iIG+n*oVf{%M$eUkwbKOF+mi<(O!3VDd=
z({1x3m{4VlAktSxIkkeoA?Ne)tV26c+%&rhcB}BdWXxY(s+R!5vQ7T+GdROoY?g1H
zN)KoJ{d01jMi<F@mnH4f!KL-X-GQyQH(R#5q<~wU>7Siz!ynJ(V&sxz`*p0S_sPjM
zBSVM~FP~=0;C}6O#3XXxp6WV$RYm8L@G8i#K{m{nH(&l0bnrL%vdP2^LzCTu#1GYB
z-Lm8{lSN4ZInVQj%d~--@$sjsRy)C*<;vOfx<fs|?(o!9wO~!^1e*x~!idp}6C$UB
zy;NLeBQPqcRfYBl)x=!Ot>04ijWf#*;k;aH_mSKu-Z)n+-$h$L<5Iu=U)H4;Hfz$v
zKcR=1=|6{`|9?69e+fT00OgIb*G|7-RC5WyNPR%2D>v~hu}G@DIGk}Ndp21i@;uHt
ziFAe9K%4BBSFX7md3Dtv<ls)O9s|qV=jW{@i&oH1dz|6(p<c}*`?}U|jx>5Kogum`
zxtU$&2w!7c7)s5Ka1{RFBqD$4e#bPX=|t@#_ymXqu4i2g$0I=uPr3jVQq(c>lex(n
zkc+1<pzl~_4Q^|wLNw;-aJh~fuD_rDz@1K-S%HLsxb*vdZbGU36Y`jWZ6t-^ZE{d^
zE@wn_K|8k@61$*+Fh<AbrOWPChu7}O<PuZ&9vLqynrGtSx&BEg+a$8aUskMI)oO!K
zE<3zfV&hX1Br(a{gQ6X9NZyO5ywAcMW4sWx9%rv}_6|B8e_nRsyBG9m8b~={j#Y2G
zL&zgM0*cC!&Ka_1e?01G8!_p^vG-h>RfAiVN0c{YuPbODFjNsw0AZzaXPx$*zrL_t
zCFwW=Z<k(Q4NF-Dh{h9xLoDl3mIw2QqC%z<9qdsc=5#W+rBVb;^m`B*580$+A^So(
zgkNpHYlWFtoZ_ZF<NL#s;-3CyOv}lar10^-8mt{JzieIbU0h$faG!FUK|xvczzHj?
z2z{l!yIF=-eXjt22uFCpTn$JXs1I;ut&#2I>y)C`?+o3RQY`Bu@caW7R-;@0o$HgO
zD_b=<z?n&F5xzLRmou&NRTDXTEkSJkA_YlZ;EAQ?Fb7ZJgA!V2D7oWBT*M#~ogan+
zNhj&`0y|WzgCi=`732rCJ7l+EyxDBJx-N*e{XmA(6=;hk`BF2TK-CF*<lBro(nxgK
z{TsVCyXW`oQUm4k!<jckr=y{Q){gVjFE<s>ROy46d`e<{g30e2I`!Y(ULJq1jG}pu
zsQG;ky$pHt&$_~(!_!&(Yl;mh6Q}2or72x7Yl$d9c)Wo)G~8WZZk$%}(TeVRNe;+3
z3_tW5ndqTa9?zc<VObC3_+F1XuL^w{+e2tylF~Ndy;H&>r*0`Vx7*T~QeQP*TD87a
z4E%}6KyAW6mo<@ONdvN=dcN=w;73+STNTBErmlx+hgRr*uhXAi4D@0(C-oNDU%mj-
zVJ)XwA91hdio`@=Ph5*eqlTkaWwC|frVQYr#)c@mHqJ&ABS)gOM;m9;HDeUO8Ac)>
z%=oN82R{01p$3*D;DY<J?`asiND&VjJmM?5k0)Vu(?Y-=r<Bj*g3ZAwV{o=mQuebK
z86P8z?{N;K1+2ZI**=FsB8Bw7A(hP2XHLFT;82<1IjGHZ(sfVlLwO}!%!m702p|@s
z4~K|DP(PqUVDG>Qz@Rmhn{^u?gsO@rr=JK7IRiym3=hQx&ovEz$HH}N+O6g!i$)3M
zDJy%=@+s~K?o??yO4y-<!pFd?%%IX3JsZdkjMox7ER9n=r+m01h-)?dDbML0z1aRM
zF<wVZN*h(p%=~OmPipGQ%Rp+)-11kV@#RmnO%pQ16p4tlQj_C$&#XOiEE=u233-Yc
z-n=)CdYjCzMQN^dCG)f-GA~@34m~EENHFj`!fDdHgKpQ&TB&$#$}#(psC2eM_I-Q&
z+EK;#+%b@RN^I}-caU2B!GG^J@Mlr)`py@B%EXEwj<|JdmHR8A-8k;XsB&a*@fKmz
z!UwR!%5C^L#1Eq|H!}KRS35Ij-r+Ab!tCZS<btc>PR2Z`wkSu8wI@<SyXZ|G!r9lG
za;7%`6@#r37yl+p(0>tVqphzx50bX|)E&#6fmw|uQ1FC)E*p==LI(QF#6Vnb*ms+Y
zuq<ATLf5LF;Me|H-FW$&HA&|<D$SygGSj~{epSLfX28>%hF>aAOvzZsgx}}VazXir
zRBIT|v2Q!^J$7a||4jhfQe@P0U@CWv{5W6}2bgavo;yICDskyd0p6mhD((bpErq&B
z+*~GMhy{YlWgTvo`Tm7Gxy8)XK8&_)@;6bvP@2_YU7@T}^Q}Nn>8g>p^mb#URevom
z8!0(bHDW!aJ~md0S=pMKuM=ydv2j7aI^E~V*85leTc&1(D~;;$*-#~dt-)rAw=DUY
zjKNVD8sfA2RedBLuCHBU10Q`OJ%O{u?PhM6bF7<#Wz0DBKCG9`Pu!4WFvB!H*X2_h
z;Pm!(508<75pNeh-5o|A8>F*s{5FxBJ&$D^Wm4O)Y;u+d1lYD)k$r}Cl(N>u!Z}!k
zfmdU=d(71AJhnz;ibF?ct6u>?a8Pp74j&)tEB=rqI^7bsKXYBFe6-(MoIShkkH4b6
zC4l)RlX4(wdnA(i7193qn!PtDN=>C7-EW%8h|9@yLBUj<)V|@BskJQ6NfIk7vcc#0
ziITGNU%3O0e23j;$$pAg1aybz!;0B9T%wg0v~t_TyQ_I2;n%-sLy2`qp43}>3r6%r
zI!UY-07%V`-9kfl|76zcp>wS(dhM*f*xqMSei5NS8JUKS@Qqe)n%ii6?M*Sdo_IkD
zy64h-iis5VE!k|L5@1DWudE5-v6%)yuD~5>lEis<cQB%t>aAFN{LH8p&Mjxb!@+_t
znO8XB3#3Bk(s1xUB?@$uw_Jy~(wGUOry25_wI$BVlOS=3!+aKeRI@Ph+h8;tvRvgL
zYd{sYk~jkJZgPKaZ_ggkC?)vhX@{a>96?`k0$ac><CM~~uf?s?Hf$Ih2E%Jmf&|D=
zjkY;*u)zzEr-(vuAfl;^2rMe=mR;8i4jxN^zux&SW4C^BNT)}ymRPTQnpA*DLXm{3
zZV2?8J$c9X@|5+c{89H(FKecqtOpbnr&z5PV?BCT__LB5d#u&AB63#DHf;s(-UzI0
z-3vZ;tVbBr=Sq1?wp6uo`ib~2J<hiMa_8a6#pwv3<N4F{VKB9=--Qn4X{BaU(iNyY
zQz7o(E=t~>(-XCJ!Ed<-NB*F&frcsmITK5BsJ&q=_hl(N^bA&Nr;uOY?182X9||cU
z;TISN^_(MjoX&iA6ae+9N>V%`SG{c=e+QaGuFG^1TL!ThmN8Ib;G4HzlIQ17gPT$b
ztJ0c_EsB~qe(>)RXO%sCW8}tFI>yzIn?HyuxWO}!v1V|wn&DoI3;_Y$T1_wDQ*z)t
zF2>hs=;L<od%yqNJn}PkP8Na;eni3@HJo3Hbl)6!-xY~VPZ$<wM*?)zsD_&PM$?vF
z=+=%k-+mw!ajW6?ZjBLYelimBfpBXrPsfF226lKevCOH|EZv--Xc4H%TptmkMocW7
zJ)F0d#F%W4SNcXi_)N#3)=kx_!Y!SQB@V*fEM^jPY_%wY+J}05)=1&2N>NTikY}W7
z$*9q9hax*GIAb$NazFAs+TDy05`*WrKZ<iXlrk&D9*=pJ?a3=mS_@9F@d--59-t-m
zOC<3kuT#GoDNwcbpbDuAf;a9p04487r;W)ZW3{wXq;G%&FAHnRe)_*Oo7{N|35{=k
z&Q?=3441MydcD-_{L+WuYT(96Ljpc8Ym6G2gw+d`>8eZ{1|-zS0w4na9N?t3-u?h0
zn7pvxA10n7@g0+V=M(Lw8EgnDSYkYj55D{~RrHy*mLm{D^sn5v0(N{g6iXI0IHN^$
zxP7U9bI96m2E3uUU=rF^@=*QRwn7!v&j8sniHh53f{|09nn#d<<k(aFYHyI>J&T0z
z4((&_fQywSTP^)$?8Dr{BaaO}EZnmumelhWtudpBDLE*ABohS?wV!O2g}Mw5VM4B?
z<-L|jUEOztV9y>fMur)Qae2Hi^K+%T<~~&jG6OOD^s4ty(B{^;C5AW_Q<`kO7pQWj
zdx1%8fBaUE1_eU{0s?{plF3z&qESq$82j0}lR*7v<1QydTT5q;|Ih93|C9%gS@N;l
z7eRvD`M#$P%>r}HR3CLknFx?lRVdOy(2WAyLvp;3?c(zSxUR^0mENtT=jyK?07Xdf
zM7kYg$Kl)Y@}JLP>!KePro1mEa->5DBM@(u1a7AYZEaSaQtEC-tj?R7E(m2J>zZMA
zgEBqHVdY<oGVckMHK)`oh>@w3i&!*>n>Lt5;K@8~4E6Akyfv3m#SuuNr_hip{P19B
z<;((ygz2QDl@xUjOesjwVYwwTmxni)0STN+DmH+japcm}II3aDv8t$Qb@i3Z%yZjm
zv_D5y5v*#H08`U`J!O+!C2Q&XM|W>dJTY+npkHfcv+oW;BbSHKN}1+a{8x{9lIZ5D
zBqzAWsG8C9cJd`nD(?$i<yEsZ6C)K9t%28cwT|f`7ey$}UOrCeP^sI`;lCvXbJuHM
z#_+lHZz{Z)qh@LjP}i~t`Jk#H7r%-3Xywb~YhPM=)qS4#ocf{vU>tpXxF42(eu;#k
zwN9tEZD#GLjUOnc3|scQ_1(P6vJy2OA}=h6CM852nDQMzX06<(i4O?htlqBPOZ+6;
z-FW$L#&WDp61Jm`X<QiROt|ytg`(q$pn~xS2#7`Fq1^Da4h20F2$CWHN0Xf)IF)Cn
zz*2_22xkSs7WC8QJ`{dc;7>;UA5At)9!MDwjsJgd0_8#!h*hA_h5mbESbC)3RK~T4
zXNABPmLWWqf243PN1unG09yvW2x0}??5`#8)6LcrqR&rJkS-%%M6rTy4*uzCvt`!_
zg(IVY1=I<zk`_Us?8XXL6A%#GoIJej9#hKEj9#)K%4UgWOix6m23;1SA90ZWjx;(>
zzPg@5F=$0UVUumcC>b?xVs3i%=%%<eC%-O~u`i$xf9|WRVf~<TzQz9niPvusbya4?
zY)4)$zlRw5WH$$B*=J^X7CISarB0_F`mZ0f^inJouWTm1&o8)iBXbq=*y$FteXka?
z*<rqNZ|$=XW~TbQ`wibRd?F5R`4VDdC-I@_rytqr9JEC_(Ci_82yyiU_h#)ryjsbd
ztxP?<oiOO+1AYGyPk9L|e+jGn2Pbxg4k#|B7NxOFvA3}hO29~qA0O8Yo3?U#AI)3}
zoi69{@$r70bU+n0|8%|ImsDd>Ed7+0|06_6g1v6E>b+m7{`{dnV}~PLY`dM~QfX>(
z%g#gzSZbYf=-_r2+iIy_5L3_G7t5|vcsEujbnEtA_LjA-45@DN+y=w!F5Uk3Un4}m
z)(Y;~kF6iM3lI?gf5;4){A31yuK#Ig{=bolE_KfxH^hF})1@Z~lQ5Q(7*IdNQp)l@
zm*vjb?B*=lh8Ahjz`T%f5H2!PZJvF%e^>WxvyemrLdgdvR${855_#{NwOjD#2Xg`L
zWS;lKkIZlOJs2^rov%YJI63Z41d-}dO#FO4#J*b7euzQMCpy(L$CFFSbLmq<)@+94
zdSR9JufMW*|M;U-VJaexRN9l&>`AtvSwonGiWijF5}XBuJ(dc6u=k>*7Fr|Etn68#
z({P^OTacH`(V^`g6X{fmqD2|_wx@{}azYK4TKLHIv0=fJVGSGc>%|@HB;fV5spTDD
zvL*U=yKm!m@#2#`tKC-?2eU`0otv`uXo)*<`B95mvt4_4>s9sealJmAE-bVk7&d3{
zWi$THGMJArJ3f7VbEF8%#lzzb-!pJ!gC2IPd?d^G&G$|0WsMQD#OJCU#0NcdM2ov$
zYJ?(J$eFdM_emzn=i}h|wsE?~IHS+)s{64|Xe$3+>&sP5$cr?mGT}q>vOxIrLhg{1
zulYt3OTOT=AM`^>C0Qr|?5j9D^!xR;DVhKEqU!g_BU%87AwTxb{p4|}-CJ~MdXqoo
zY29@b(W5fOj47Jm>|K_lm3~j+m>gn(JADjIr1jaL#Vau<M*ph?HNp4{;lG|*!jDgZ
zvD^@_#++pY{ppY_ay9j+VefWdOv2^dxqH*L9<7lAv+-+v_Ht=fPH1(J$q3dh3zvXN
zROSYkHm#_r8&7hI`xjivsE3^Uxlx6`l&JMs^o5VjFHe%P>G2uWV)A0=32$FSb8C~i
ze!N~RoIXx8c+UpS1l5HCo~tx(M56F5WPvPfmjLdEPwnsS7d`)}UhQ1^a}AYlUoJT_
z_^>m%=F0TLi;&7W1-A;_DY~eu)!2>>S(itxv$NKv<^|OiJ$+rsLGAr@`A|@o(tpY;
zw&J=QJsmB)E`W}+v(@0JDXX~`1dBR2HwHnA*(K7kDK$MD1l@Ns;5hzPNf16>fFVQX
zl2MyP;&k6mgG4C1;<=a1<WR^4JF}aYS&=EO)H)vK?MAU?Oi4n7v^#Mn!<Cmuj{xpb
ziv)%6-Xw9F@W3kWf%$2|3mkS}YJNYPL7PAXJRNHZDBaMte@+W)GcL0YHn+Bnwa?yM
z=v7x2D{tT?1&l+fIm;E1-<5uFvHVSU&2E99_hUzvvf2Gm)FBK0V+=hoDcORFH(S2x
zq<i{thUP53P1W!#iA5T0g*~|USPQJY;WDhYRdWoutJjenrl+Nlo6Yj9fHgw2?rtO$
zkdF(yJ^aZ!8JD|{@gRQY9M@m%<ZG<jV0~eJz!9|%!)s0g1Rac<0VO~p=L(VCUbXY6
zxyz#&B2%5k+5r1{KX;dHZKgFg%<C}ubMGU@=(<1E9CG;7<yTViP%c$Jd&R!hCi|(+
zR8v<j-1CrVWBkLLy=LGA5mYlA-iq07yi9rAPNae$#G%EDi5k>Qwl}A<r3s;!crN__
zPmwjOVDi2dR;<n*2=Newj?cg$3TxD^qvlzka<cJMOTKI=Tj(SS9h3o7fdpD!ewYA=
zMYi|6wUDPoTuMR?EVj@99A*|`03K84j&ztdDQ(=Y5YEMOOm}mFK>`C*DttM!4%7%>
zV2Nx@q6Hxl^oq!xMTcASF@_as2e}Af9|ID$D?}4YrkKHoWJ9FA3b7_ro7C!Yg6RrH
z+n_+w3>QK$2>wbGFlYn}=?<9&F1^!;CydB>CO8cS44xp2hQQGTR|y)7u+T7EG}m&^
z9tX5(lX2@icoULr<TQ?okz5(Cy1<->$4vi>#Q@lqwHS&PlzI*w>Bz|LjKI}5U(P9a
z?4|Pjey!x~hnU;r)wvq0<KLsdmrb^_u<no<=$aKi4Ley8t)PVJ7&ZhKTHt6z`t=cT
zOYN>)Y3!||?UE`9I)|k<!n$E*s*b33#*`V>T0l+Q6H4XPERW29*6YJEdEJ*Ii9j`_
zU|Yx();qh&pWB=Y2T3=bR~@X50Id%D3ol{H^cKkh+5xd1c{|1oDgm3EDT$aY`Xijv
z-)hv*qYhEG&U5fNx~F5zXiO(Q)Y`^>)FayoI`toOM`$Yv_h~`Sl+d!k2==`4fezX_
zza3PD2Mo`R&vK$wr2$vdc#&cLHW77xgosWE<vP4^w_4^YEC8Dm<dZ5uF?|OChjav!
z2IhdM=_`CGd~gS6*|grGu#hzc<HQLU#b0GE5v7^`o-vAT2sBY3tOmg-#M--b_!5bA
z_A}qK3kx2v3K<<C?w(&Uumc2RHKa-V2*JXlp#=WVE)qK^S04zj4D8ki-9ZL}^&Jt1
zibC0h^MgU7jR{pCmwn8VC3IbJo?M({kMTnk4Xl<J?e%V>-k4#df_}dl-agxBXgv&W
zW162wYywkLd8KIq#xLNt_9>D~JuIR$1iG*r1n)w@7or*JI(hs6KGI)994d4-n3I#E
zR1yST25<-d7yp7}(nPuF5=l!=@#a{2EJ;0?EQu<dxy5?9Q(U9<gQ5_uQ|H+7zQoDP
z&#_f(tK#Z3hC<^67(K_qe82=PTBAoyi(6R+L;F|RvDJ8yW4u#DdjcLht7!Y~qU0Az
zOYg{sAU=W*mdqxpg@@cEq!=L&J%nY#z?!S(7=J}Sg-+WOB99tHWtE|M;Yx>xTgY~&
ziQNDSMHfqU2Fw&Y2Qk*T%ZPz;1%<z!JVH-!JUi&*e~2C02S*r_sk3}<B!Fga)Xevm
z*f}$d9nveHT0Nxm#>y)*O&ODJq&Ms#pP?&a?Y;e|d44P87M*BK*_M~ktX(H;5;c-9
zl0YO?{sxdY0DgaZoFGm-3q~=|NG(#cwnmx}GUOlNk9;1cP2xQwCwEWc)Zy5cdOi`W
zF{Gyc5ohqh=1rp~2%a!?x4-5GSaFAD8W~fV>@Hz4Z8)K|3{jj6wG@V2{&C#?OJKSs
zrXqd^#2RP^7shkATTl&9lPB@onWvbK<YW;qP!X?P(-7oj@CS~$!+XS5rT}%B(6T43
z5dwv7Vq1U4hhQHJfI{z+4k^bfL0w_VMc$sF*0Pe3Zdpx^?mlVVD?(JSPl|X#7(~@|
zh#$O*$V4p<tHxFpEt8EQkTlCRb(wMk`VQj>FcM!K8`I+C^sAoeAeqjImBJjihH-=8
zOf=(){cc?sc=|~iM8s`~(Ga`{u8!t2$Z5YP7lSkAm}>kVJvd67*>NIRgclUPt{jiz
zZL#{8Cl{Y_TIqi;*(sD=1Rn6OODl>05*bJP*F@cA$C2}fYZ!c4)m97&YIap5W=-QS
zWoMN^@Dq_Jf{BO%M}y4{aDd;o*=OZ|PvZR{z-&eQr7-(j1Nfu(w-Iij5wf!4_7G9%
z@F&w|%<knCKLo1=XRML`8b|QzMLp_77rHlfVN|w<FYhU{W=6>0ABLojlHfrmQ7Pmx
zi1&M-h0)$#CcOo03#}}ciY#OVT6cec)g7|wj@pK&-pi9{8M^UzsEE)F^Gr72gw3Eu
zD?On~ST-kvF|=V#prlpqV{IeP7kiv@*~_&lL}B_%1jn|MZVAr_PTXaro1fx!|6TgK
z7a;9P7rknOJZhOXqsDzq5hXCXk!|jKyIkL11=5ftIcU$7jni7cw)f6@=oQR0^ch|S
zkh)?^Z+O4Sa-h+t1D~}Z`-OJjG4&kNELHwf@D!M#nMgDx;{Y!UgxxvR!VOaxo1OKf
zhv>`Ybx#=7n9E(8+xse;?EsxBZK)XcDn4<vh+R6#RDZ+7#d!Y^KjqaN%`dT$8xdz%
zm&2%T)C4zdR34|5(9AGs*#@_ySmwdonbK&7Vj(e03~eSv2abS6YFMxr2Blp*x8sx_
ziX82t5a!d*Jl9cBE{>WlMbP;g&$X_IhD+6`2v<~WW3*<Y4NA|MXTSsQyK~NWy4axT
z`4F=rm@DDTw`?*VC{+Fukhj3kVMxdjfdE?hj0En=t)S}ipv+e~{zkp{G!}Zoqi}4{
zDtt6MqybHEW~|aN=2`}-ux~UavpnUAKy)hQY7kuAsk>9e!(40i<bYSjJ7)t06vaVB
zn?U0QAU#E}UV5_}nj_CCZ2p51QP4d3bYMzca-3%qnoxk<p9pqg<c~pN*@Bv%4<*(m
z#^TQm5;EK;V8hmG1NKkT<X(XSY~)cvAZ{mzieZG?lYB0IZ#KLPPd>&x1guhYg<a4_
zK8Y*bpw3Z5EG+L04S2MS6+~o&9@vMwr`AeBXnF;G7LJ*k9TT~;e%B4OZ@<z~*z{um
zAQRA2&4`I&J#Mmo<7eHeGs)1<w<r>?vn@xLaeQ3Rm8}8fZJbD$fA3l$nA4eW$H=6<
zv0lSg_5Q-8SHjsJNGFxzFD8)N=oqsSI@G*9R&@JQ5nu_{YT*mZFTk5`hF_S{9CPG9
zP8u#dZ<KlUQcc6l+J%RDf=s^^kzpNmIZ&7?Bq5kyvf|she#lB!)%C0i9o9@#)kRuQ
ztTwRSS%o=rTPM~EgBsf%0xhA_`etDpcEo~#rl46sJv?AVITaP2q(L-nfsec^IaXs~
zsL2{^n%{ipshVbgf21-Zg2-)f+A$ex764V`{u|yA(CsU~PxMLPMD82`h14^bl2io6
zW~~tdJ+l=A?X!pS2v;G>+Ubc)JH@U6(hvjvW@9~T3dx@*A1p&R1X=?~W%<?HYQfuE
zYr!jDP@nwja5u&NuSIO%qoQemsinLD$h32EKvs({UpCW-HH5J0eT|iY%oWdQR8p9!
zhg5~sKIDSQC@D`yk}AN-KxCFME2rE2@ve3e5gfC!a<b91E#-l>5DS5~^Sozu-qskx
zC0jGZz_dxJkt7Xy7wE%Cce22<sjO6_Y~d~$Z*VCib~>)`@r+Y^<L9gaE(;%~6YVq<
z<*w$iCc6AXWoa*ArJmF{cIk_9-I-yqmlQ|8J3Au7fv#ncx^+j{%$)dWv?ArXdcOx}
zdq&8f(8QjRX=PLrC;&s!NYyx*?+?{qV`IX~f!leFF=}RGb3f%)T_0@+G=1GY*n@g4
z#^ULv=Yz}8FP-YT;QrOF)x3@|EfErwgqP_qBcfh@U!4_#6e7J4Ym^~XI&x&4;G}iM
zw-G@yzLyiD;@yhe$s1-3ot0#&wSGyq>6zF>18Xw(%8P`+1h2A_gsQCZCpQoJm{*Ay
zE)phjso!U>JEqr<cE7vV*kMswBb|->;$>va#gu>Qt8^IzXn$9L<P7N-VYQF7T|f$y
zZPN?+eb44}MKSjHwV}Yeq*qQ-X-w)X@r+_)L4)tr$M@?hO$F<f;wnb}(=0d(F~A_3
z<3^2q3n*m$JH;rPWsRxW>w2?+c%7s_ED-8IQb8iGkMNgPi804*yfCMi`Yu_rZA;tA
z8*-`UU%<>oR=!D~<`aDBTH28}0MUh+K?<StL&iaXu!XxK=~3mf4EMhBofhEzz4oDs
z`e^4zf4kz0Oe6g3wM?dD<Tv_p^FMO9E5ve+lWM%S%@S6Wwr_MjN|H1xwc+dNzi<&m
z^6&oBX9wUl#ie!T>w+(&cinLfj)Nr=^%|nznA4?LU%wJ!_sG>+QRF3_h+;(}m5<&u
zu~w|cJ|0a(@NpFNl!};$W1&7vAem9691O<KHOkZ#CQU}i&`#~hr3(u|sJ8=nm0<p)
z*)hVS%EJ`pD`4R#6IW6cNouG{EGaFM>G*tM-bTzkpP`D6*Ff`gzi3P;^Q$|cmzTrA
za@?eDM4cgQ73(Ot?TADM<A&c*Y^!7_sw_Q^dd<oexkfI1WmsgRRo{<}!m38vvEWB@
zdyo}eTQ{FLRQm3%5WY5b>aT?<Q6{?XW?hDJ!C!}5k(Be2|H2<sjP#)b&Vi>1If+#Y
zw!_V-sEkGNIK58b9yxXRION1O)DF^uAx33i%pnBT+lQrnTxX9N^Q-RQMDB4{QAsdU
zvoKPda!Q?%Hq$;RilrAD#h8qx_oN{B9eW-^UgvJHmW!wi=!yBqA~2rE11#@Vg5LM9
zLyo3tP39(U;^NU)_(e|i=SQILxvsRhD}7&R(t_w}FQ{DdjQY(leTm(Q9uf6U^ADx8
zOs$f>V$mupa;`)`D5Ppz_H`J$`&r9caSky`=m)TqG-t`fivNBp%l3KuY<AuM`^TL%
zlLc4rROJuMYt8ME$tXj1RqVy>*80@AE!UiFs8y@K%?y2ZRg2Z@l?h*KxO}7aW8mxf
zmE@dFHrqo$n6c01fC<7|hDq!Pb18v{bg*Xv%M!<BuFP5>cc|gvaal@E50&;-0U>p*
zSYntGO6z;=ugC`l@qJF|(-eeFBs#U!vtFZhyZSxra28TQ(z(0GflCy6cr=k%E+Qvb
z%`0sDdA>f`{b>NAtyA1MFG4^g(Zk<Tn_s<5@@MoeJ#@7$eDXz{GiRPTbIl;!=5Gs1
z*`*j2n>?hNs&JGU^PKE|j9q)U=)?j#>P01^ivT4#aH)@zwMNgy7Q~!eJI|*4^?wO|
z+p^wqTs&_ObG|~`eu+6jf-(NiS5=AK^52KYh?+e&hRHH_o!ss^yf7Ht%9`KoI=n2R
z81#AVnD<?_m0{spOZfG&s1P%S2~p?xd#ocVJFE*p9^BcN0_EbyU~sJ4H{I#qJqUi$
z1-t5jS?AW~pX~<xZmR>t)id-pB|KdDYG&TUm2P*%&NTH`f$<)Y$%knUG}C>I7jF|;
zGHrk!d{&VE)RKR@RLnK5lwULk5JufMRn@|=Jn<q;jXj`@=*rQj=;~ZFf!eS`?#j?&
z2H8ZDRJ@pQO2Cwnd>tNgF|UsrKT+FCr78Y0&GyGge!2~wr^urIJa3n&82mj1fC+X-
z{Z~#hBlK%Kh88e!rFNB^GqbrXm;T5R4Xfr^&k)j|(jU8+-+R}baY?dBD=cG+l8PpA
z^kSJ{KT;@pr;qQ4H&r8~=w<QRs88Op^!j1Nu2@?!mtD{>dI9qH=r+ug=rODJhbQDj
zNMrdZiLw?{7c#2JiFs-t(3rhLleMYR>(_}Rdj}(jZce~FwX_;BFYdx!tZ94BmMGnx
z(rUA7a+_?S)4k4Q8N+M-P#~cc3as&6pNMMt!m{8FQjj?BR*4R&Uj3XmQ?I@2ejraX
zU;1Qvpb}rEUsS}19xjbU$kOz?w@k`j7}Z8QCSe015Ep5)4ZT0+c@z%d5_tLSrRh(y
z+JoNDj+~WOEmv0vZL1a2hhTFJ0mjoxvPv9?+Oz@1z{`#_997xuN$W!*#sdAptaAMr
zTIsS@ujp3D`HM#!bxl{a-6=kOLC$O?RSK=UM?XjQc}q{>xAv1#kBP_)LkgIWEOk*Q
zmAGe^@w?;6N}`ajoiVpoHTVSV8{=ovabgzPD=JUeS@~a%#LGeZiPnb$i9cY6TfHOS
zpKG>jQ@2j<@iakqaAUJplpbwHz<i)lZyw-)%2Zn<UIa1v>-0;i$XXszG<`RmT1?8A
z`|r=kS3kYY#67qwK58?P9$#~9*H|;r^~qd)G>Ggai;~j<%*){=t0tI&@a-`|@H57w
zi!wS_<cFUeeH{r`Kb6`oL)z%Wv)o?gnvB-^9do4kIZSpRd&X1I$(@vyQiV+uMx%n|
z(zfJq$v2swoiIX8Wp7*k`x5!*IwBz@Pr%Yf=;K#)c9+HAHYbkx8;(GN2HWV-XCB;M
zd6t6(o6RV|lfHNB^yw{VH-Fozk5*TlO{lW(x9^9Z8g2&Zz_S9g-h9^^?wo>Yi3Bgo
zL*(lN06;99^|A}OyF8rW*?a!kIF;XYBsOTtO887ptdxzBDBR;=?vsSh9(kA8O8Vr>
zB12oUgHJ<Y{Zz1=LQvr>S+LHp<7-FXxlg_Tq%lrMdhk38(<m~WJ%MYZVw)ArxDMEG
zxroqAtxl|7m%NXXui8=QU0t=WGQZobE&{l7Xh*jqzhnbU)Dj<SlEmE@&KsaKUOy*j
zd`q)q<pPGEPdy!6p{d8J2mmjJgWIbe{E<-;wXz!Hj(UUB*}wZ@E~d|u(3B-_TVcO@
zx4b*eqP+D!G0Dg$raGJx9Amh(+ZT|W3q@jZwQ8jXe!HpE+hM5E^ag#J$I@{!Yq52u
z!EyxO$=SbaUgClk0H`L6RECT1f76&)-oGBhX@kSiMe1tQu<aWE4zUSs7kXb~Tt?5F
z%~tXzRQzSf=jUzm_mk`IH{^d65TZ>tsil7eN9CXUKOHT00vOxbIx{%CJO7^qMz+88
z@cvA2V125-K*{75f@nEJ{=^9=xFO=<m-+b}S3{NC)F{J%6^JuQI$IS|cDpnLwgliG
zH?K75BT#Oore=#UM3KL*h(b_||Me4p$y=tg{Ae5*V*mLQO^r<~{_i5krnaTihFH?q
zmHsb9t5&Lzlw%+WEJ`_arm(_hdM|peKb&@vqVe%V=(Qk%Yf^jPJu^Ey#EK1B#@6Rc
zkP%twSEu)<BL)u#JIGu_p6tC0V#k=|yUBN>S<I4hjE;AnIr8#ydWjsv7k+nwl8L4s
zzi2VS$gtzawdL!G?CwSNbPflFneMvuVj*6g6A;H8x&Oi{+16pNC>QNRK4*k@y@v&V
z@M<SYerL#-lWQ_K&Xjgx(T}ZJWF>v<6Xm9wu#yL@neY=lmIh^cWBtKIzYmoiG?~p!
z)Kq(_Z;Ly;x1NE~|Coqen<NFq$=mR>q|w9L<Hll`{+dWRw19XEe2|uRQ%t!ZUZ9lc
z|3Soa1|dWZzu2o~{VtElVLijsOHTTg^4sI#WE|MziQ{9_6`D&^ZoG0XFO9wi)0AJ+
zd3??p=y#X5<Te4{_wGY*S2N|)W!!R;@6A`^{;kE&utXSlN$$-4AI9D(%C<1u(v2Oq
zZQHhO+qP}nwrv|b>>ajka|bIb>$a-Qx+g2o!&+@U&4;<hk3P`941wcOx_hg_s0$B{
zpt~Pbj&@S)5~ddHgAckXy)Nv7fr)?jm;pJvVY=Rt(W<_9qm|?Rb$U1Fyq#X&hxbnj
zBZoiT$Y+)0^K7;bXR5S?!HRU%lnMOUh1w=!&H6fG)aG?6ZP;)vFO}`AhX}LH<BhfS
z_p>GQ<GsKixQ)$eIDB?0zQ-ubD2z+a%;(VqtNQ}<6p~i~3MQ@GxOXT=#p5;eO|mAY
zncdQ@@kw7+sy7n%!zfcU_OFW(%fl`a4(w@Iy51dJ%(%uZqhWK;>(S*Pudpz=`)z9n
z_lCCdhKO#mX+8B9XlLLC*HCevPtZN@`$o5qPP3M@Bi6nA`={rxD{WV$)ukclmsjeC
zZLP~(YWQDWW~gYNTSy)X%&P2I$7UPn+?f5JNQaK2ey3<BL9`g!k5G>OGirSwo!_S~
zV!(V(tBu?jmpC(+W^^YH8VX-loo(MXE%{@UCJZDvkvDm`J~?r}81#}h8lfo_P)&AD
zprL!nFFqsB>f6R1_UQT&%}@q=*8O-{$v!8$A?52ntOZLaB|ta1X39KJ$Z*F>(~Ol9
zp@h|97x_(Ze7uaX>UN<H)Nc;Mf}cjf$IZk)>^4Nyn&#rMt5KaT3q75guM&q(+qzFW
z{2Mo-XHret5M4**nzrkHiCB%!VVp4w9dZT6cpjg2@Niu9G>^{6`K{_XSY3L2TpvxY
z|E5`L+ECWQEf0PHWJ?UJc9f_pV-w1to6zM&*L?)VZK2$e6C0$Ji1T`TBy*%E=i8s0
zyRckQb*=KEyPOG!9;;8S!kKOrT_`#kz0pkwitBN8NyFB*^ZmOz$!gX*UKKx<YSu^p
zWyRB&{j)BW{N<2x(zTP!F6^Ex>t?~tH8k+6d|!H+#8p2-E9$dZy;NdDF=uvqeP2Sc
zv(cK4u=@{Ay1QEfdn~>R(sWipFJ#`6x`Cot`tx|KGu(LDmje^|zHXhL(pq+A%)s4^
zt%>+arZV3>bmw(hmd|e3q_|gPZOq!?-rb&GZVtK%JHC*ZTUL6V^S~CE8y-5@^irc_
zkE(i<fUCd)r4|=Sk9?pMT*zqNtdqKBzpKEi9)_D4d6xkqC@;BueVp$fYGo|(-!qll
zk50IF2VXubo9-MP<|-Dzp-Knm*4A(JYOs|cQeW^%w4KUqb3uvgF3;fVV%*Gbtdrxy
zdVY2yw{`SO8As-T!R^axrN5nxYmo<c31^?ho{2926G`2s^>V&?H0DR14{xWh&Fe*e
zuB@5IJ^j|I&<d#uUp*(by&>99vRgI$S!&bLMT%+oBb|rq-+<iK<?b6-d6YqNb}Cq3
zm6^|?UydGsixci>hk8y<Y-_%No9LQ^aOm@3epe15K3k*AjrLR?FE4zK?i_5Spm~}N
z5&8D(XKalFFy4?}UhDe#th{MOC{C|z2^5VROy1WW%0J(v32CGVWw6;k-y{jG<xLgP
zH3%Wm!$}kRioqJg$rN^>^Pkd57jiB8@kaC#hrPLIwJ&Wf56Pr0j?4hV88-=x*4eec
z|Mbr<475G-_yN{iQ(>St+br@Zz>sTSU2i0Uu|pO|S6^P@HE|YIk`WOxkLc2Rza3{y
zXKOQ~RvNFr!%g_DU#L=kF}}6zIeAe@-?Rlh#(5ETEg-GQ${Ab98Ry*zt6Jo2oj~Xn
zHSrxm__mQX{y;e2zYilS@2U&mxezbkb-R=_UaQPhte1$AycyG{vheF*wB-y@wq79X
z@ZD|tatafgzRa`XzFBnm;BT}~yjH&!W~lG+LAsw~JtSLIZ3`w<kr#<=UOeC)X0CKX
zl$NaAcwOsWZjki1lrD{zda~}{d?);5KEKxZtjjLH|H!W8wJ!7|=Or{;m4z0=cF`c<
zC7*nq1a$N!>WlTh=gIjcVXl2zUQ%PbRXTLJf0(dnB5OjdR%;{+H8ZQ5MgcO$l|FG`
zW-@SZ9!J?=S?9=kTYB|?1<hSLwo$WawE`M|KQ_Nv@ATGaJUY^C6}qw70o%f1tPi-T
z9(sVJ$24mlta)NPXv5fWyD<~3w288=S1x6`7E5ere#SPWs(F2c_dQvp`JvyoY9<dm
z%Cq*@^MYr`hGv!VJr&H?_Zd-l@jT;l#h<@kHtIc3WP!z8WGsz_@GV;hyF2ph9<D^4
zll%Sh1-}&G_1}eZRGlI{tXUv7roJVc_WitJ%TrC?SF5(|d;vzIMUbXM(kd}24~9~K
zA6IVjSCUL(mZoXpmgj{3mF5MLgFID1FB2pzs%Rf`Ca!6vk|>EnN&#ms2vh<blkJ+=
z<{a@$3)P7tI7*0C$xH>Ec%7IqF*cOdnby7`TpOJ|Yn|u5qN@M|ImZbXx#raZeS|e7
zbF@K%5VItHY?xMtT22upMsd7G+@-vT9x>HvvgFr83cF@8HG?QRipZiQSwBfArfhLT
z$TJ~~VPqY5U^{2*!mQ-rek$)F_dabgZ9HwgC>3g>JY^-jX!L=oL{&o=bEXKjIAB&e
zf5%~{Cf1+50&NbmP&nh?fwKm1XYDGC5jF4%1MZhG7l>%!xxcs9LnlTUC5dX&AuN)^
zjY~*YQbioBS(Fk=Br}m|1KnCeL$yhzEui8qhJq7??5s2*#lwjgXdQo9{Y4kjAx}P(
z#xO-H2-auT-=t5OU1dNUiPkV-ZUsyOW-SV3!f~qP0AAgbMySiNa3>Z9XCyU=XU7E|
zsRtNgi<ZJ{m}N&IOGq?8XTTXEEu2^%i@OCj-LYB~Rwj)+S1!xnrF?ccvIea2iEe1Q
zfsR6UB88a`?^L%qCub1|w|7K1y2U&ISEvOk1e9TD-V0<PFRr04T$3$fJwzQbhWs)a
z133(iHO{sy0&I%(CLh5*)&@qyk{y&ErZ$NVRR|Z4axoMlCNv>rj0ELW7Im;tN*#e8
z2c351mP}-a81Nr)$ZuF~lqVq&jzR!&RvQS;uCbQJ5ZZT08p4J^(8PP?PGm%-kSp>R
zQ^?%B58^KdmJP>OjzO+SoZsM;4RNZFG@{S9kN2Npc3hW;CS-2`rk!29rw7ki6g3B>
zDz0HnP$vSSHm~7t%}@t57$5|i71$P`SB(x%1*pKHjbe5rh>iaRA*J<hAF>JF{gg4M
zPauOokW46VL}?(0^&2P>(jDbk4!$OuBA`SQ1G5d1(Y&1?qe0^GK(~uHo+A4)8KxO1
zA73o`XjKR>To6N&0uaZd#t?@D#bmV}n73YiA{fv%A0}-zo{N2j7?yU<zU9sWIg>qb
zaz0s5Jx5qRUBGRN65Omh`y*cyz~rVHB+DMi-3eJ@s$2m;^pGFWD3e%VQR)-{A1#SE
z2FdIIV7E5GRWeM0dM}kfd|6jhGt2>LIHDw)Y;h7US}r8A`3PJaLr6j_;A;#w^Io0U
z0^et?K|By;Q{4K%7}K7NCfXRiQLYe^fW~BuLM*$$Qp1L*hz5n>K;O_jz7l`eRE^Sl
z07ix114jWN9e+=gG9;QYfu96YVM&|VLm$D25rrSrm=svr1eklo_ILgW9_k!QBs#mf
ziGMZ#xezr8Q5`aU!4j!HXNf(j;7ai<U-&*hAQW~sb+ce1haGT@QIQa(1$Jn7Au_=)
zuyX&l4Fv(Ce*b$!ahvwU#Xuu;QiQ_oGgq!v><j{Qe>DO}7(wlMfR0P)@^)E-ONiTH
zkn#wDq00CJ2jgE&h)0dn^6(I(f{V<0vM?%`cMwhl?}8{G_fGag3f0jnfGC8jwDb_k
zXs9ed13aR`5Ey8hjlxB9;re2E5%FN>P2dR&hSuP-P)O-xf&{<)Qx%5tk!B%7u%-h6
zSu!D0Na+~|00@wTo`CVenyr}VAy({z8X*nCQG|OVMaxUe?O0>mW11ZxF0C30<`krJ
zBIR)t5Rr9378Omk#=D7s%q>9NgUP$(XB~DFA@G6ku`;5FVF%bHyg%J!i6V8%m6{<L
zx2>XtDwh)*0N@P?L1vW*Aela(^~B<d=YLH_@e3+Q8N=syDJoP0Mzs<j;Y*xNIGN+_
z$`&NyivSnkA%Sxk<4(XXEsC*t$FLHF8paPh5bOQ+ZqCo`YVF40-$Cn#p)_lTVbhqy
zlR0Txdxg1gRcB)(H92J_KL>R&w?!oImWcBh()U<IO1_0hn9NTdKujj31VMr9I8N7C
zTABrAUJ~a+&}eoi*CRlbl+<%fciQe3C`A9Q4&X(|%xcd4tG~WpdK%KkaFL28x!;!%
z#avB2endHdZ5|Z;+<Pa$R+eA}Dau~KymJ;LDtP$T-IEAuS<=oB7U+W``5j+$JQOa&
zh~NWK--Kd9JhCzXH3`ePh2W6IKv*cCmY}2}p};~5TfSfw-HsQc*_A<44+SuYB+lRO
z0w3)Z&j5R<j9(~#cESx$87e81fuEZHb!gd5O<Yu~Z4dNGjUzl*an?HQ9x5Zm4meq2
zPWzWXAPR{^;T)K-bBm5;GJ=FLQgIMO#wZlGTE3FdHo&RBJj6aMZV(=j^O3k|tu~~P
zV|o+KUW7xuCO&5iz-l`(jx9VeYz$(rKvx$v484XHrk4Flc|VarI(~gHz-vC3S!T&8
z-7N0N>MvViz@jU-1Pt*6c9AEL>{?8m=5%rQ=5%F_W`4j3OTc0{d#D&_0A&X&1VYNt
zWN<0e@!xFo32^+q_rPf6TJ$XX#IZ=P;{s$@ucVmvfhQo`46m*l`jqzMu&2N0E(a*g
zTRLoc5`L>fW1PE0(6~*NhF>7_po<9^5+WP!vFFCmj&=D1niyg#5|GUP+OMVu<zd3d
zu5kd*$Wc6vLMpGj1;A$rhYS`*f<}Q<K?xPyFO5JlcbiQqo2y(x-B!qSw9YAoO^Fl)
ziSh;YIw*jw1UOZ}w0!iJ6@`3_S!MwV205L<=Kg!S(6&_4eNt5AExAtAQT64Xp+*k`
z=LUg463410axQjnlA!j|nJISij5&VTm<IQ8w|Oo*ah${^uEu6T&)21mm(&bR>$WX)
z7r52ks@Ov{xOhLZm8A6|aQrm%;}GxR?c(tg6aGi-%;ARcd#uUggs(?i$1WkKj!W(G
zqtOeE*^%bn@gn-6QLE!n_ITFj<S21cG;N)=>Lv0E5KNpEWjJyMLUlnl)ktpRiQB58
zbNVUg>E=DAzT)7mX4GW(PIiJ)_#<KEydG*9FZ#h(0S{m0cnvnf)G)*5l%uQLh2`S@
z*<$hN*+LmdDbL&YH7b^_v<Xg$cz8dkuQ`iuqO90sut_JnsvAQaALb*aRiba`1Z14=
z&x3%|PLpKapjg)5gM|VfoAYM2w$3)WV%S?VrjW=g917*0EGs&-rJFF<LuJ-a8>^2I
zl$w_#<KE+YUn>hIjz4r2+vYubJ>*>n_i{dG_LGuuT>!u?cz!#Zfa?i<vjtL>EH^jM
z1tZv0#+Dka!Gq7xjSP!97mYOjx6<FQL9cKhwK-Vt{%3ExL4Iv~Q!_s8S7TcCTRUVs
z@#cBl1P+5Grh9byG-UoX!Mb3ccH&Akuf1E>xTojLvNmx(epNe0t-)~ZaG<DuG232r
zS@+O9LVl|iA1}RKh@VUVjt3=`Wtwx_ZZUhYY_%yjohts$pIC!ltajThtX#gj`qf~w
zEEi{<pM2G@RZDw*ZJa1m*8R7rwr??Rzbn{oVqc(rn{p1=bcw9NJQ@@P?0SLicG6!v
zu-L4=7NN4e^vYjB@>nl~9aK~zo@iX+R+ezK1imYKt8~@k4~mkM9Di^cj}GKW{_h7(
zU%&PIYlZKSmqI-52|0A)8~q}xYjZCsJNK;Xvk#THFI2`jZqQD(Cc4$RZEWxPNOQiI
z$K%NGx|Z@TeEgDj^t!g)*Uom@{*Di3>bpN)JGWSVa<*!QRt%=n@CH%&?u<M4ynTYs
z*bIefUism;W8|`a8#?Gdo}lTcM9-LkC}+jvy&ufg_mX-lekui!{n{uy91E*x6XbcX
zeFMYPGgkec-u)&q<-k#1ND-0vYoNMC&!?vmiL;zpboI2_U6Gsj{L3vJ?^?cr=Jkt@
zJreNA+grzC8g6`abV-GVk!w)<U^&P&D=XGRRl~xm4y$4JWwU4HyVa?MM@C5DwNBfx
z5Qjio`a}P5k{TqsKCuQpnqV5;ggM#Pf(^Lnd&}t$&r8ikXKeW$kRG{}m)^{V({(PB
zHStp|GGC%0rGCzsE<ZPH4MDh+CEtica9bDQ)E<O*(Q9sMG-qW#(33OEy}X>-KpalI
zTXZ?WNRRCRQC5)Kc%H2wow#UQ`RO<O!YiPOi)OLg8TLKdWHTEW+qu732C=qoO02?t
z0jz@2vH_-f4=<)$LooF(y9gCNO$&+dF`zqtRNKBkqDk{fcZjxl*e|d~eB7sh71+ZY
z3WO~6WPHuC7eak>vj)fo&6yBB&xDmO(s5D1SV<`q<KNIxve!yImDOHeqRH19zz^6p
z%17$VGdRni1BS(~u=d**PUkEiSJ6LeAdn;~OKZb5DsA7<GB-**8P5zlQX46e#MIXh
z6dToXM4NDZmqZ>@fo527R-jk6Y9rtzqmQPY6Lcc7C_Wmb73IJkRG1Rd9WbY@OxCTF
z#Y15YKwLiTh<FNVSyhQScAH3f6q1sG)qn~;D>OK0I_^#m@A<@OOD<PTBJr;#UKlTF
zXps_he_6|n7EL{4`Z2*(@jz?+sbP+(lHB){JRgb3G%=E?(5z8lC9y`d|Lo7MG5K4q
zqSm2YCSE>SaNNJGM>`LFOfHvRfTKIX+0H?G-I0nS?`&J&1h|h4{?Wg(Ku(MXLJ7qB
z({k-Dx%>f-7kwgfe0P$xOZ*%M`0a%Kj6#d``1Y<`c2N<iqk#dX5!G3sOCrb>0mp!*
zYaq2ieaD$veO6Mb0eX^0$irb7K5IqF0w64?*1ZGwd0>wop7(gR%N!f{FcuK+IC%8j
zR>KEOl)Xz)JqFNdzzgaNOp=1kfsPjyXftcg2M*IyM$|r^lrdnX8-;3A0?U7$KWcal
zV7u#ElcQ+kaqpt;QsoPK-&pjnZ3zW+{URIavzG_c3oL{HGH70|Dh{nxp$=%3+JW}E
zn`kW%vq!?Q-1cFp#zcJtPC9QBwP(XQxWn<gc4nvBr|SjwW5d1qw{+ls8T}oSUo^j}
zcWScf;X=n&iiB#N36A@?M%CxM0%yRbit#HD)UpD^6IhSXB-bebwy+~#QW*IISaC$^
zgR!&8%c2V*Url-eZ_NPA$txC&MX&faS4?YV%gQ|$ZFSqoe9#|BWPLMbl?-x_dFKV$
zHb=71+B9L&hdDjWc$FUJ=%tTB5?%}56iXgE7fJbyZVqm9?Ev0@`qTn1>kd?zE?cRX
z5wvXj5zuNN0#BU3`d|8gnL0_TRN)^~qdt<qx8QhlaV#%dyPZ>`ZGWiZaO(AiXyri>
zA$sFwl&;J>-!T80itiKaO7sQ<01*6fslxj=;|BIWkX4ueoQtnf+Ob=phxeV)a{#uH
z?4-6J>le}pYpsBbwyfdg7Zl9g9I}~G+-Rhu3Ayq+$;K<*f|pZIIO6hq+1hfGoqxy&
zTamnpRzCta`|QtBTHhWh%N|sA@^E7d$WYkvh_u%*tc{M@Yb4jd2Be<qI5Hh<N)N|g
z5iZu&%>79O+XB3pN4`M<o;+gZ<Bb65sX$n@0#(3EPU65F4-6<GW532FTLBXgs95QM
zlPbY#1$c;T&oUEJB;})yflq<gy2VC9hgFY};?<6}xg9K<saS;5Afd*nCzB%&W9gsn
zI||!`Ni=TR8j0|zYYk0QCvuWotVcL$qXElt-?YSAD41gZ!Ezs9<NQPSOiOJl$m51V
zp!Vm4Bqf;1^hz}Y8g&X{+{DtglaeM~Cq{_BHD4C|w+=pj+v#GMlyEO;iM&9;B2Y3W
zI?P0>CRNbTP-F@t@#gx7OTQrD8Ljay>{RtU_<T0T>C@P1@HQQsxyD`6&H});N@`Fh
zOmzOvnx}w&&ar|^BH=|Xq-jHEQTT#@@<wp^6lN>&FpvVn!0Y5?Zf3Wh19U9c`avig
zAi_WuB!#T3U^!H^BMpIhP@14=e^e%6`zLosvln0R+}IUPh?a_(jLwxN`X5}*m86v`
z+A1gqX+MBaBMajyx%r?5h6!i^EV6J)gw~Eih-If@jt?~iO>S-H^)NcGOE;LiK;Ma=
z*@vD69^O{KR$I=m5PN&^*O}-^$w(7^KOi<zz`Rb7G#lsSUq1Z_Fk$w_eG+`0f7=Uz
zY}-oJ*sk}dCi44(6Qtg7KkmGFbKdEJ{odx_x)7gtOtSXYY(6F7be(ygOn)!lCB0z%
zYf!V~L%{m{1a<w-q#gdh32Ij+8Y2@&X9ik(6Py265iBKX`lkUKIpl?V__B(UKVK$w
zW#j{7kRN*J(w~`>z+(P*^!EasL<xokXV%^PGRNDs+1AO)9sa)i9-K7d@ft3u=ylo*
z<P&$d5&EDh6~8BVu$cL{2qVA0@cUe|mKm)Iumd%cC?I4Fkfx-(kVER6EQDJ=A%ZD*
zEVcNw>D8s(Qa`WP(Dq8$-;_GWmZ`yhr%S5<gen{_HEIM(>?>uQ=b%Q{&$?My*dLSK
z2Kgecxj6#XiWFZ(De=g2Vne~uDJJqF%OQR(XnlF8VnyhkhOaQmzi7*Nl!U%%WXMV*
zBng`n`>TYFMpk4CDGX!n+nepQ#<rg{vFblC4nl9>ezLLLIuSSYfxM(i4Vm|8C{Bv7
znwbqL&IHlZ?(R|n49u~i8)J8y>6M2M_9Ji1?xo;})y<LXf)p>?2L2uT1e@YWl<=Y)
z@)^ZsK~(yE63br=TmsJy#DW|x2e5FvejIzy&lp{ChyzB+A%dPX`&Ea^XQoPfbAuCo
zPz$19U7cbwF5x1aA}}jT2q)tuQ`1U3GH-R!a}=muGd^}@&<XbAqCBnM@%dm7<%n3j
zVyIU{s*~p4W#XH|wE{yCf(D}WNI+XH3wJYKmH?ts@v0x>8quqc)T8Af5hO2YqXSm9
zF6@w``t0Jr)NWd!kvM)Ck*f_RqVXD?xq8x=sH|<2Y`a~{SU;{UOz~AEbXl^fCB3~J
z5jpDUD5)}iDpoHeE%p7(Gp~Mlw%QnPy&9rc*rlM8^2s2+-jL7cO-LyxRP9)a6y(OI
zco{IN+%H1{U0Q2Ip^+`IN?iMxrdmrALGReo#3mVfQRIOR3MJgH@*!&OxZR`uYgqr<
zi+`2^1prt^`56!UH(_mLVQ+5YXl>!-{0}d|e;N_{FTA5_)V=K1#o@p6<QPcK$BV%M
zJ5*IH<o3h8giB<Ag>9BpQybFU>qc5#SK`Yj-1^qSVqlIFv=xx2{#@E^H#OPjE$<?O
zIylap+TiDVEqj10`2SWBEF3omUZMU<a|e8@05=@bnuQZWm(qnb8i3G3><d9hG!^DS
zbl4Zd{2LrV{yR8xC`*6*sMDZ^&C~I~CwpL^CyX35-Z7AiB8&qDBAzRb7|<M8w_9BB
zTog9|1tma`ja-q}n+5$&x_#_=KNQ$+Ix2b>avT#p;g;>{*|NoQxE%k)fXcMZ2DfaA
z$fn4O3O-7{aa4LDjb5^3?&$Xyb3+qL4}|vwNKupWEPLWxvsDWcriZ~flKW(c+=1$?
zn!_}>ZI&Hf>~W$|Rsel#(C$#TmP{h*6=AlTlJFRp3Ce{cKUF!JD)1hl4D^wu%qH0o
znG^q@(iD6g=`RC<xBdj{KiS(6$q271Kp*)&*dBms{S|~>v}Ce}wBmAe3=-M>k5Ji_
z$%a@_y5bVVo-JVL+PZL8cc+ewE~TtrUVeW~JegX(S~O#z)a32Z!0ZXLnHwS_Pfr>-
zV=`6U(V`iosLXwvC*W^kE2XE>TSCT+r<@2I8%v8KiXi?3>R0?#EmGJn^^tFoL1Jyw
z(J@LTESp47RmUQq+3qjPngjoOHBzDxVjz#kr_sdvl&@-0shMQWC;HPQ*<Qc%Vkf#F
zNccMtzQ8=4%oY<8Ixvlq@|u8H3bAqkXN1bzbecsjlb8W%RgCf1Dv0uz%*e{FD6h60
zuW@s7VHL>~_M|h4Jl$_vz+9|Qrj_?`0{b*z(_mr7uXs|8x=d>b2O->(#M!z@*{Uv9
zhg>=Xs{undGlIJ;L<ve^qCDD)yiNmIq3#WI85q=6W+yB@9gYJDJ)f7Wi1nzrBm+GH
zgO+?RbWrl{FpMa_!u7-uFbB*x^H55n$Z3>2v}7l1R(>>zXgP8vP{Lv+jgLy8jKEoq
z+<EbAH=KlyHHK0SW=F%&_#Iz;+s_~Pr&wcU(}%#*?0xJ)%}*oDIBq$!0(KDG>w}^B
z<abi<!(T_vWKqtow7P6RP`r|qle%wfRcrJcBfejO+c|2HedwvPu_KE5x6pIu!L`)*
zu%SL5NiGT^J-wJdSJ`<zL!WZ?p(EG1NAzAk3jHyPOnTh&81MayZ2a%Yxhh?S10ZkV
zUWSs+opnv^`r)vpL!|HD5)q^NI9Xe9W0yNAOMOy4XR%_!du}57P-UDTE+-5Ni%Ek_
zuU_~dxF~tqFGJ+dhqsqO?5vEVmb&{soyVk%97DN-`Qc4%N7u%iD?qNL@4C(0717UO
z@Nk1HR&YJu^+Q0)GcHF+%CMZvo{A`LYrq^C&j`=wJ*1TmjRDYatJ7fG+3p_YeiFZ$
zDa>fOBW5z;OQ6CwN!&jPeO<LLmJr2#8|`j67wrVURu{hb4NQZR4~iCB9kr9KFC^sU
zZcUNryX+!P+5Z-&QV_qW0GW189+;$rknc(!W%4xgX?B&S0RHyG`#!7oxx%MGvTAP_
zR3FAEmrenNaWYd_a2uHIae}I|cSo=i++v-&-Q3Al&a#hETRri;@KUxrMqfM8=Z?v|
z4`OGJVRS<9oF#~7sueMDeDojKP^1L#xhpJxb!FV`&1u5>Y(Ul7l(#1n#a^jyj7zgk
zN2F>CVTB|Wx2tQIUD=>SL8*OwHbWI_6D8{I0gCNZ)@_&@wR7Zl_YJGox=zjOj2z8@
z4x_H=K~a?V;R57@3{gL&yc*l*FJ<d&m+Z}85@bb`S6sU9l%0Zs>RY_3oV6Om(M<(b
zXtTKZ?ZSM)0cxX`Mfu|!(P6@VfU{mm7aLQUIEj8h89s^4rz<jAnXaRkg2#${esw%{
zBn9im?W$bKe)^7%<dK`6JqMY4x`spg{CK>+R*=5rf1{bZPnqCqZIRgq9@7H;9>vq1
zv7RO9cpF`d8bx4JtFyv>9PLo<{p(o4;3#*~PN$C8PpWU)d4mMi>KMY1ZQT!5@r+l=
z9t9#o#afqe(XD%gJ-Dc;7|^T_tN0TtO*GZpeywJO*)Cl6Zj_Np8xdpg9w)@QzZ33}
zj+S}8pdLd6_TKF4&z~)ALMfsY_RT~|AFlU?V|p54MoF(PpnpB7965AK&VLkz73{xP
z6$YjT)@J{tDt7*Bx7!>wKc{t3_|H7KhW-Ur{Rz5_ikzVw0(D|$V5X5j%rF^P1Ub8w
z4)fWvt>*JL+gn@#C}3T-84Qirt~=K~K5lKz=P2bue6q`u)Tx-ASAU$^wH?{z+OuWF
z=oRkrHdkgR9~o6GkUSND(TuYOK;$|)_XLm_z)gw0X_avKNr7tl)AR|sKwx21p$08$
zAbv>2`bRYaBbbfJNU^$+$btwCyB#w~FoJ=2b&2Bc^C$LHkMsU$^dR9k65%K7LPl`Y
zNh|_;P#T!^bM-f|W!I+EF-#%m0pcx)57JTSpD6B`AE}yTXHlvb&(EzG2blBBmLryP
zjj}a{9MdJbBIetb%Fn@%Mbx{uluH5OS(AEFLLh=w?r#my;{Y^*#+1Pi5TvX)4R;(D
zFrGzh*RL`raIMz~@fzEmdz8c2FpT+W@z~o9FFiW|ySG^dd+k889c+sr=1At@+|hNu
zW_X)XXSd!{ZzpE7-JBtA*TbtgHla8{o8+^RW^Jk#8G>*^?ML;yn5o(hhDw36@WXd5
zktMyXLhJ!1kNPC@DP^A|QyslWn~8R*#^J}fmLONg`lQ@?X1c&D+7h?|4acCUQG~QT
zSi!1*B&9|~5S3JC0r}mtQK<2z5{Oh=0Mr%J)IF#YfwTkQ5lluaj|vmzjBr%Bn!^^k
zg(8yj>I8X=;N<7oS?%Vef>|Q|M%m01LJecc83wQnpwxv}GMD|O09_Z8Cinvrxjx*r
zA&KqD@ljjn`;GzqxanOIu5#qW+vW`_VN{#>xc8``?OsZEXo_9P>g<Q1u4QNuA<c_3
zMXP<Sq|LL28Fh7_KrewZVSerWcqix;m(5*aEUy@xU@4N7JT%_bfvm<GlJs$9)eAhP
zUz=|BErShEF1l6T74V_&1_N({<61*kdS9?EdM9+#z=?53omnFk3Hj%{i_ob8R?9?5
z6*~TXLzQ|DPh~Ua+BrvJK^ng9tdsAb8osxfJ6=uQFO$@MzRZ&|xiirZKzSP50;2~(
z8rvdaOm3-tydy8Pfdr@H5-w`y4owl8!{%gS#_W?D=ugE#b9XlY{jgqfA|w3B=t0o*
z`rl)wn^p&0q;tF@zq<%0<w^*Bwo|Z2-_m0A@nAc-XoAG3D~7OJmh*4w1F!<VMsIF$
z5it^}8<8<A&?Jl!q8PVRawUAbDu}OzMpv^3UM-m``_pKY3<9x)!(ej<v@1ZB{ls%H
zZJoHuqaAy|OD-&A8B8130Y(O--=a}w9~HFCBo$d7pWFWSp2p0qddD=n0OyL8n5;w=
zQ&a%%W=L#}Igp2#a+f({>7ztuGmHDeAPWL<w%ApEJXx*1Q$o<IT}X#m{EkaqdgtH{
zWPqQKYNddm=pDu{uYWeapVh2E>LkV6w?QE4ch64oD3Y)DvoyYiS8!udT~#obd~5*u
zq$;^8Q^Zu4tYN3=OTJlHBlh>XkR|^PkZJzHvsNTGT(B*Ex6WKMD>E_J)Ekei`%u|m
z4cS4POG@H9a95Pt$;gKq$>Mf_IBwXw!qNQor+3w1wn^SWsTi<kHF5dH1f<|}SKXlL
zWR@>i^A*O6a_QpLv8jib^+lpz^?U!|@IJd>0$s5mkos-l3|SyjBJ;K-GJF5C=RNmn
zr}NY8(z|=@5;aYv0j=JHl#qtF>BUYmEZL&@TJL0Ga{H)$rn*XCO&U_Mc~0okdL;B<
z&&0qAD<G8TLf4iHtgG)dzghKx1t~y@CC#$MS@B-ygqX!KOAg1gv=QUUkzuy*^pBh}
z_sj7drdJ^Gy)$|hifAtaWhzx{@q+h|S}Pk>5lF)agq`~^j|~@9+*{X`-LC~Rlsoxg
z8SCAKs&(v6lKf>M%a3c_YRu4G#00(H`d+J9DXSDK$YAgA3owRoCiDDzypGp)7~c6B
zdn|^nI;Ab-AqsTgxSbC$kF*Dd1xpfkoIR7*v`o%h2MDZ|>is%Bg?}0Dn|toIP}`&x
zs??er#tb9qxn#79-7<J6^oUmc0RHC@0{PRl3h)o7oPYfI|Gxg6hIg{Durc|EjCZ2@
z-x}Wf|L>9euZL4Yl-z3bPj<lmM@o_Y8yWS_Pc|~3HL^AR-_QRqtTu*|H!QIj;6v+*
z%Fq)9Z3kE%0V?{@MqD%DS125mAWP6iGPiO()z;7Bjo%+}#$$e%Bxochpm@b|Qy&jk
zbT<(^>^HO2s7$}L)?8r%8%v8RIWfjC$s^h%FZf6FwJ_v^1kuWghoR(QA36jtA!?rr
zNZ~N07?YcP>T|;6%MfLZ?8cO5;|1U<TdSH25oQ1E$OLdjpJ)d>6pf?EqY;L<y1ItS
zheyqMJ9=|wl`b`%eH`e=2hKp5HKWfw6l`_;lp#;9A!!MXkWwW}(-W(2AawVc*grt^
zSdZ$+Ul(_W_o|Afk0IZoV_&$$R=TM<tv$LUSl$C(tT#fUTZpZj@%SIdvZ?(Ljf7I}
zEF3?o&W1S&;4G?V4}qGZ4y_iYh_nuUR9n2U;oIuqcBt=I^Y66h9{MlRAS66h!C!uX
zqZTipQSs2m$w1^%K0J6p;bE)kw$9h-gEJ(HE!WfIQm|}SCSef^`<>$Bxrf7vJqlFM
zeHnt6)>t$5KRqy87211{2D_v%Kk~fW;h@`2eJro7k_b(pG&bZL`}-efX0y;_0&D|<
zxP}<?IfY@T?WPpbB5&5(+(g=bjC>hK%ypS4&J;H8&GDfta!M;Pwq{|%TvB!9aX22@
z&OW&?Qj0xs$)9%2qQVo@7L&0YJN8R3_QPqY?y5Th9L(*yGiynMc%9ErLbe%>WI|mQ
zmPQ}?UnwcXPX}&H!sFlqkjcap){3T)7ej34<@g$!SQw%vGx03Wx4?Mj)skT>4Kc%G
zDX~tsD(Zpb)%7-t&D8TPS)e~RVJ*+E1b)+7POiU&F{JWy1}r}H?Xq)tASQRSRATS@
zl_lF*84eMazPR6?!oSguA4&KYHNg9=dE#ebt-XuAzIxi>GxY5e+TPlX^6N|`-Y||c
zG>JnI`2J(H{U2YdMSEl@$sbQDz8_Oq%KyfiaI!IWGGO{oxwDwmj`=Ea#1Nm{LZ5xm
zD)ngA)fXRx-3B67f_U=XGqLZOGuxt3bixVzrb2dsWj98@&o|!gV)JLb+PYzF@=pWt
zGr3zdV~fmq56qc}z~4_n19@~L_2P*q#IvpIBRqW^a<`aH%~hRFC-y4LRX~TF`FV1(
z0zj-#kPazkNzri8$5gm@@+oc)@kEY<N?0c`4!godaFC3JHJd3t@-c*68gk4>e*<V~
z@|ZkjeQXqW#%0<L2`gp}A~^B~nqu4~fw;WpnAWR}@)UnraIJKkfVH-ZRY1Z5*S_B=
zk1;j9jV7~`gl?W$vB4u+AnX}pUC|(_spP6GXo{QVhs&4Y#^T7lSdLY&<>%;(XprC7
zyec!Nt7fd~&(=lv_wx+)g>MbV*RzqY<gLn7{?!U7u&<}$+CBh41qQc4Oxi5ZaNYS}
zCjbGMGB5;pV*o0DFJEMqrp}0i@ka$H0q7XGA*!jE3^v*n+RuN|FoAPNjjo225w!~8
zB`{U~aIWPW%H7ZdmmAJ!y{RT?t{Gy9vk14Qw~OqaO)?NjvvodSz@o<WI$Noz=yCT5
zkHztMNUi{rJ%M@sLMw7#->=y|ug2nnh0D<@eORo<jz1N@ME4TIlp}&p)0Jb9YZ)9+
zKhZQHE_*kty9xK}Z(XDT^%!nxW?9yR{^)4`@DLm&F~S({wL^ANUPr3U*j_~MNUI#0
zD@?8C%B@$Tq|Zq4J}2HF%JQ{aRP^3f8Ddr^pY+IRNHblu5+t4TzZ?ER<Y=SpBE5*;
zFoQ}<Cx<~Ul$lY!Sdma?q5~7|pJ<41iSs~eLJ1QTQ~km(dh1CSp?-)BaSRAm5~v>+
z*stjdhr2jSGYG{T^l;r;a2a|>?3X{)*x2*<l#@{PDM9^!jQXR8dec-XsV<{Z*{j+x
zp*)Ysn&9IF_&fGd?vzb3k>(4lPVYOPOx(A8Jo9$?J0_RgyWwC-Y%+k(w5HVQ*&d5;
z5jnft+M%2fSP#1;5S}OEq$j+I_y(R<_C$*-)SVWlgMpQX4}>u-vf%`SFs!2l(T{Md
zmAQfwiV!q44iMzyPZZ&en1*3druCIPdQ2<ctw6A(4ReDRiDL`&>|iJR0OaIgFY|oo
z;RhC1AH&r7LZ4A8GR~}?;+G!@v3y5g@({vfTJkq#LZ8%|LXpn$im&z2Xf8ILN{m^l
z&gaW<m|m8rKOXq&O&P|i7q_T{{gJhWSLOZz66m6hPsocR73TZ=+M6wDR&=GuX$oSO
zx?zi|(6GEPabzhTzw_7(OWXk0p6BPA{6vHG1DK6Vo#mHu&ZD?hH3lerAJw|@TljH=
zb>}%N_+2Di=dKkWWOfTFwfGe8pK~96V|mMFb2Le<A7>d(QPu6*U>esjjRag&jD_KJ
zuya;c*E4irCp79Bf}$PH261C`jd(HJ9(eE0w6}x@*{tWsW$Zam5Bx88=MkDpEhg~+
z&gC~_f|B0>a+L?U!E8a}37a&+icCJOn|Lc#Yx>F^XqU8+Y0YHOr?~`jYrN*~W4*G8
zKRY&4hxJKb1t6K0mYfIzL?)Rxr!`}RqL%2?dVdhpWvMN9SfcuH9LK5)hKq#zy$(M)
zJ@B6c1ELom!Eyo5JifDs#?Ulnw?MGPcPH1D)>dsT<7455Jyws5VK0H9V3{<y#lmZG
zoHmILDMQn_1N!p1#&~MRp#$~gF0b6#HX(bo_L`;DSkQpUB(YSb%Nl)^wBT8OjOFdv
z@m>8tFQZB^0SYooEs5^e4u-mP7(S0|Z_TZ^n>2V-<FxQxl8RE*dd)bTFJkXoX9N0E
z>5%L?>+~CuF>(~YUctqPbVz&ba1#f$%d%2QZA=ZxEbHhSC$+8cJy$wtsIq&ypVyhF
z<SHgf<1syUIH%{g*eoOM7rm|CVhJO<xpgn1MA-PN)ds>G3b<EY{??n_pk#&?HbYyS
z7`ZofJS1``zTeM$vVJqJ?Mw^VHA92cG_Eq|E=^Q6%{GffIC1}i2^Xc-HZ?gW#dYs8
z@66VKYnH7by+2~_VlFczR$=&4qTIlme?Ik<4CCCg@$%HVEy;INZEcwnoc4Ov>)M_g
z1&ISTf@QjKJzz0z{(hrvpHpeJZ7g8t<6ThTDAtE^t9KQoG_NqKZvFelZeeXd5(5$V
z%*)z%pgiUDw#6IJVmxSp=tSxzhos94%GiiEo{ZrB^9`GwSMc(Jf#^1K+N+gz>N5j4
z;*rxbH#_hToa2)y-hDMx6dZJpHwgUKS^Mq0lTgVEoCtLAD%%a=?g1?6E%PtCmSB&P
zopgYi;Wm4+!?v+Gj1s19*F#q*4MvC|yr}!R_y^_S6XxF$*$+lem7}-XgWffxh_9JI
zl`md-gAWzNT6(HGg}~#1#C}}ICx36bp?eD6!k%by71*gOnRiQ2^PC!4{vxQqy^TeJ
z#YjYFTGioa+lsUbd{4gkoqvN!j|)rZ)p!!94?1!p_}uO}KW}wqe|l1eZOyd((gYNC
z@7RUVx;<TAYDh<bT?KsVJ<y8F)%L&r<$C{VN=ZS{xf+8h9(S7!Yi-3|1Deb!76qv3
zoNCb5f}WcBR%q+9>;L>bS8cYHKDFotn!?`5<PlL>H>dSC8n1ng+@m?aK<V*b*0&5|
zg&)pX@rB-aTNgJ}2uro$9J$gPX$B}kV?)z@AZ;V=1ojm^u}C)&j$AW6K4*%GkM^8g
z0)Vr$Xbzfwm7Uxo?RP03yp|F{@1r5yycG9_$<8I!K(Omk9S&jM#gpkIC7GH#&PD!k
z(ibmTnu{tTiLXCa*V=35G@*D=QsJzh=WE~F<NwkI|L3-1R2K4N_*2_Ug8=}b|8Lw@
zY^?t2K2Pgp{{OnmPpc{X&zguY?{}nyBistu#t^eYRI+5aeOjdjqJUhdWXh}|oV(X^
zt(}|BzMo&y1xq}(J&KPwG5;#p!}N<!u14yD+Ff>(`bj@UwDA&o?-UGiPm`}W9@;I3
zSbLScbQzm{-65Ma4762}R0$C}Du}doU?_y8@(x2(ppszc9tC6!#v-8*h$&RDdD<?U
z*TWE4Zg(s|?--`!vVT0NWel*9W353y6tK5=1LJRy;>K#oKf;mq`=oBGxWh)p(*D_4
zqW#eWRiW{xT`<n-Y<Qvv8)xlZWhOP?)CcS2ymc^X$+i9%l9MqNkNB}_RVu_1{>vi7
zON_QohIJ$pG8(|YhQBS``(=Pc0|$Pvx!?=03t@6b;tCkOyA)gV0`_il$fay)3djpl
zDk-r%zHQ7{TU%eg7{e4%iVfhm1&I^Cp9^W&6O5P5*#Y#df2z!cu%+gKb5}>>W{ago
zj2W;x`w$=Jci~rj@TH2>uZZiB@VwbC+XCdqp_sj(eZhW4L{>nZ%E?$N>VmJ2n!AyO
z{1&X@o_5=U=?$Vn-}~KW<FOm_8?x0ANCE4L+V&;We(3L03r*hz-BH!1W>}5M%}Epu
zS@$KU=Fk8lqIO1jq`c^!jEkt8>S%U74#@4R`LUsKm$&C$JYo^{+TSk5Z0(EJmZmlh
z;57uyGTA7%U!S4^^((1|<XVY%^+z4RWMLpLafq9K{ekZ_`s=|P9_@q~C`#4BL6NM{
zEOpXMZhcDzb=XK^zG-@DVt-^@?QP9nW|w?%XE=SmSnwE-*ZK?G5i*m4GUL*tE_b!N
z!KdZSjJVf%Fw<>iKy}<nkilOJ9DN)37}p>_(Mj#zxx^yQahW92anXsT!E(<YRxie{
zlDvlC4LtQjH9N+g&TXRVvd-$<=CXimYuhv_*X6Ye%c*Z>eJ!*?QKTwP4>i_{XKN)n
zGfe+Z)hKOFF{8jDiY;8tc^pZ71pqD;6(;voWd=FEc{{o-PTY?!|Go9JO{?+J0e3FB
z_`9&Lp_3}(HXq@7O|l}!(n(SEDd#&Q0d+bA17#t%E1UwmxQyuK+uQlo0qT&>G~m3U
zelj>?Bhu047+CTVt6yKesRwzEE&_~dWw~|Sw5_?^x3KlFNx%MjJZ!E4{0;c8YP>ih
zm&@iC0Kn+a=fABy?EjPUut^wCto(sn+;|UfQd~4}x)YNQ)dLT5x*H)2z!P@8Ju%(n
z=;6IDs`RXV0K$_#0)-xr&OuAViI9VTzs2k#0K!%QNrKY6b0!wa-7h^n-E2^1az{~R
zat8sv(jFL9H;Mp>G98*h%nCeRz(d)R)RmnS)LoM%s%OP1T>rdH<ccB-1D6xG*KOKc
z+Jqrd6?0+?yhqdZ6kEPMCbkgAZc7t@aqcxbP^a|@;_>LM4-~Rsw3!eT+8}+s#sl4#
znEu{J{T$WA^jO1{BzJ^2(Kl-K=trFgtmtgCqo8pH`UufkBiuUB)D}}e^PmbYZ;y#!
zm*n+&nKo<93txo!u;`rEin3*?+(hP87dIb!5_cplPl4npgM-Dq6wblFu|AD4#i=Gc
z5sKqO2sATj_9ris<K*VS$+BGg;TLg#n^kmXBdM`g*=Mz~Eu^;FQI$XsKOnZA7zHQi
zWD9!00JWalZtcJeZ~OB8Zz=h3L7}SfvpLWF;Enzr^X{LvV>%}r6C=j|^nd0gNi`L6
zB8QxOMCK}$@$=6Kz#)RuNf39((j$o^rxD(NJgLcTE%2Q7CS_GZH@Z@`^yc*N^6Ekn
zZV~fguRsUH`C2PHqVl0zpTmy9|As%cw{(V+%39F~(*+{{K*n6NpO6M8pQalr(70#Z
z?(dMD46AW^NtD2KvC-+EY7E@{!<llLf5EiHHd@&E>Tj)QXFjl5`=+J1<&D}D``h+X
zowvCMbX>)h)1;LsM(YIXM&0S^lYJ*yM(+4l5On#^p;8W#mS81^NQ2Hq_>EdtV^)%{
zA(q7c@)TtOUj`kf@FE`spYH<I*ptk(vhI_er&7mzBp@LH&|nlJ6Agc)$yyDiT_7lE
zcddI}ZF)qxA}|3AfT**wseXTSFf?!i+{EmNEweekqL5@8r8>J9&t)J;KPjh71Ul^M
z5tz?wWfi4!kh`3_(jd<P7>NVVDG2vOpyfiIa=axF-#$k8DqpNID+#w%SQ=|jGsvGJ
zz4Z-<2b-gBPJ`Z>j|*WhJI(;?6Z+4(3V;t7{(3oAr$NTFYkP-cjeW!nzvUTIO)&9#
zuJMr>>lqnYa~U&N$`c(^D60f-LWLC0CyL_q8>UF7kxt~T-Y1@G0`H09gUcnNnU23-
zn~Bg?^ZC6F+S_1@yZH2A`GH$lYx!2-f2<zgK&pQuLxX;Hwg=G*X8M{|h)o89cP}6k
z##!qsECilA#O-N<MeQ2HG7sDWpu?!y(r-REM<-Qv^IIM0v*zm2B(;BTKm(lRfV=zO
zGNb@zW;`JAItxF$OW`mCn8%;XXv$I*#htnsQ8qHz{N3l6l%I`FWwuj|X>Sd8Zyt?T
zqth~d<j`ohLc!Uet!&!n*_7;6=V#?mNk^M>R0gdjB9?u)C_fg}w`Fvet<~`47-!zk
zpjG6mh<Dvj%<AY7QtLW$#Z{L&m2;|Jejy1RH^cM`gv_zwp%~IXw97eL*`DGnD;ea5
z9PGQ>`c$wSMQ@Hv6`u6<xUy9_oV>$rH{3XF=t<AnLS0_)$U~%IU)f;&N^a@2MsJG7
zXL%UWL4RX6jby7)JsG~z)fK&QPsrZYrOul!(pfvJ<$%0Ay)F&ui^i4DzOO&Rpx~u2
zu^1XYa{b0R<r94Wzi?!ms8G;RU;qFS|LydTqm#jZZk<XUMZ91|6nXi8ywRXllqN*e
z_2)S0HbN{CkI?vdOW-k*^Y}o0sJ{fQr0opgeOb}#i$WnD{up*mfqxyK%Z&fP{Xk(v
z7Fi7#0K`qV-s;QhO-Tnb2_OmwaL2A95!3OaDF*>4z2OauGc)Z{2NudvKge%7!#gg&
z26BaMJEp8Lbj{u6=?Cx!#OLlOpOHBd8l7gQrsGTu*NC>X^Xb-jsJMlXRkn&>$gA<r
zZUz}BDj<1;{^h{J)H94ABf2{AXDIfZ3R@vaP4WJL;U)MH8GQ>5-?$G{6!tRwUa^kB
z4v~{|Q5oc}w(T^RMlk=%U3A-95+x~<{Q4%vxdWHu^eY`FIjnSzqrI`sTEK#XFidPi
zYZ&V|M2?Z~j6<&0m9y=Ky<Ru*f&$|DRJ*m{<#57<aRjnY+LTCVm%2Y7%5i~M^}Dma
zB|EDunz1rh>P#^D@8Vk7oEzQJMqk>s2gJeQVKfg$<V;#;wHc&k5D5S7xm`<7FgqH{
z1IWAh?Zx7bYsM1#y@gY1%=MKo!Bmu}$td1FT5-%@47W$~5zkQ{)%baUwg!|wg=g;f
z5?iEDS=jkGtYCw6nWdug<jstu1?jZB0vhF2$MRbG3LKRX<AQ;5x!M$d2bNQ@FLh8@
zrHjhqcU&xkV;Eqpv98G0o<US&MP1Hj`GSC@>?1`?mI3yIvF^avm(zN5g~zEoln7KZ
zJbX>QY6fVP)qb;-k>(V_47da0;4Qu_!i-C!m}cL>^mx0`N*8wbK)i}#+C_o#3hstn
znfJJbQaoC+P}1M0S<Yn#)nSkZi~B?*5g#lb7}sp;07=P`8IC)A+7xA5o+9gMne3Qa
zT-@VU95FmkL8Mx3o^-szC!bOLXLGIUXPs8#r_^Uy!KIJom_Wn3jr8MCyt9AK$;azm
zx=7<p;Yo)APf|K4%ZnhPOA*pZR#URKvspE=8B-ZW+<-&|l<XsY?rc0l^&&_er0Y*^
zBO0jQrO$KRNXj|ML7Z+Ml?;88SkKE~=U3)w{`QfiRjo<->WM8Q#kR6lZ93;sXO9~5
zSsukEV<ZEj_hnh{wxejGzceC4KKN{dctbU2Rca=sTq0xm5`&Be{i<~hu^kh~f4EYy
z4_p;`W7h6afR8|eo*b1*zu{v%{iA`mmnkxRZ0xU-@eaU*wEN!i%ib_`Ak=3a>ZJla
zG&f2x(BbB2hvY%9ZB3MdP(v`qu1=}$+H;YmwnR0)q_Go&6XC{nt;3a`8`Gwf3toco
z27fpQt|!v^IBf~rZNA#p=@*c?od}gwAX_TyNAqG93W)z-?}_UN^mlyO3X9NG?-x=a
zQz|LTk#kCxg)k~m92d1>NVEID?+Me3zUaxY3)39p?^!$AO2A3L?t(=Hh({4{UQm@$
z;yGxa!kV&fSU`R3s@l^B$G~GjeZzT?+^14z<&#(a`<a~OEE;rZXahf;w;$+_sRO8#
zW-eYN98wxLyJtlf9tngSipaQ(Z4j!j24CGCU#*DbY>t|}zB>X;%VXUk!zxH8TauYw
zXyzLQtK#&Jrb1^*Hh)y29bE=E37h^T>E<X;!58do3pTFhr*hG5m-(+NxbN*1SQ%(^
z?ORl((bYUkGYu4ah@)vrn;l}<RuLmBFwI@6N{Jr+ovo31KSbx1{x}^`i=ZUWq#TSU
zpoT4r62&t%5GnqexQX+?Bu~Hkn{egGq%yXRF^SNby<%D}bOHN-MX;nhZZZMX_X+yh
zkJEqnJzl8yJxL*J?<1nzZudned&e>3pnq#=@6Dl1MM>}FxLRKJVi534KH_0JvFwoj
z2Aui=`1k*y>>Z<X>yoz7*tTukwr$(CwPWnqc6OZX*tTukJ9fTwpYwiwy2t7F>AuIP
z_2(XA)tYmzRW)l?T~{GwCAJ5QEtx^o5&Y>zI1A0hA(H44aALvRxDbMB-Z8_9RPb}+
z;ekQtE!vOenf`4TH$+w*J_PsDYtV*w4qB!FE^kKfsSp9~g@xV&+s!d4O&A?D*;O~q
z?#A49P?JUoLVjPG^ra8!II<&8Y6$Q_dB`s{z`sb5dSlu!^Jx#;(+n1%pz#UNef(_+
z0KPE&g!zG<r*E)d5qtbYw`XDjKAGP`{XlMVciHcW1HQ7il~QkPOap|0n)6WL0!87%
zm;pGRxpwnsL~VCQMy{&>T;F+vKI`IZvcpY3%+-7PFSxaxhzQ?A70oZ!iO(NH!DIPz
z>Mt;Z27Z*8`8LAC()OlO5U~w4YE~}3=4=qre1+vgclk~2b#=iB97a>x>4cvXY?bLn
zrD&g+7Z8n?F!OgPn7xUOgL4nzL$ndl>J2{RgRbl1Igbs;Ln2w=R)@PeO^{jp_?jNc
zvK~SZ!1-&$e%kJw&pAN5X}!mI`(D{Z+!1Hg{;u?$SXs;~!zx0jQLjL+P!gf|Wwou{
z+YT<Dl=`YVeM>e;9gQ;7=;+zRJPgAVbxH`WL*j7?jRn%$Qgpw|SdpoZ#?Cv{x#S#A
zbnq7Mkqf7iByFzAU67wiy*_t4FgD7_q#@Ry#dq(Dh3Naj)e#!)vpzJ%Mx&1J%i?$g
z>C*)ab=d+7iqq0r446~%8}Zi$<$Di`)A9;|*wxm;H!>nNhk;rJLS$p=i*4tVao`j5
zpJOh3Ta-xA|2Et6m+n3$xp}Vg@7W$BpFObpK(-+YmwZ!Vo`w?35U<zEuc4`EMr#^G
z(>P7Vtepk-+vS?;erc$NPX`_k;K2JZI#T{Y{cy<qxVAX(0)hZPh3EbJXEND4fwc^<
zuAYx|XV7Lgv5HD9bGRHRmh~7vxaZ?U#u0&uAffC*#bIOdTA$HG;ObjBGytkXrN*Xh
zkQF$d_Z@91*5bR491fEcw<V*p4gL|x-<+n$13wa9f6`}A9y_{Txc6;IG5IRGTeeKu
zdBE!*b;(5puvQuC%w=n2bt-^juTEKXQ{TsD__7bW2^t`JS96IO!;)n!V|9t1(L@zi
zVk29-;vkm~kVbUc;j{8SaMkOjI-*6EL0&<LXePIx;(R7Et`t>xlQ(jKpxtxrd(1zO
zs=kwwJ1poYCtr-hqJn_b82|8NWIpeBaqPRb-FN%Z(=!UIy%+`>9IWAhZ@r$^P5F{S
z`Oa0Zpi7njkPQ-d+$qEDf_C2k0|Un<gs;p@=chG{ZC5>?i!r^?G!|Z6GQ)yY)@}(=
zW$Q<I+b7o+k(IGk?(WXuxtE^}uHya2g)wI3?Ujxhchv0R@q^yWuX#ZFp?uEG1`u;4
zRb@Y2a}{wmrFwsIGjW}zz+(4N##ddNsKqi*QOqln&l=TmD?&@D{p8-WqDbAA?=FxZ
zEsP(|gx{2?xaJzV|B|$$5Oo<lF46l}v@Hgk%i?WPGDBA{?`gZ3zV}73Xros6lf)p*
zM`RHuz4MY%td{5~%awCZONNeoIgnQz-6h_uKzQBUFADFLP^4`6F_T|{c|v|UsvV*W
zyyp4zP=MM{*lgw7QR&+zTWpRy!U=yqQZI(DoKZ)2Jv~I@_Ff%uY`xuW7`22@Aa(8<
z+wH!LM;-8!S%)>qN|sKIYMvXp@WFFCYD8C!>+|dP4B^@*hn{ms?2|~O-`VxLKLzFE
zIsnELo*%!&<ng*z{#Y#sTt;aEvl_sr{^^(b?2RJpLGAt8gK(B|A<c0YHjuia%M#ef
zJ`cSifb8*LmZ4uYi3?|6UKADJ2yuD~4mK6~#p86=l#bU$xqjV6ajTa$ga&8oEE?p{
zz?1tVtYg)8+Ll68b^yCQiL79zaIpkwd6)Ft{_=SV;<x-~b-GduvA^WYSMp3I)TfdY
zbbNQwyL!aC?p!RE$LBz7@%upHC0V(j{O+p1z28mDFT1zEfG@uc;jUriZ-#<LYD+lP
z3%<Z<ot#(#Dg!<3QnxB1V!zRr3{X2lU36ud+(QK?7}Usu-4_V#8|T6O6Ddx+uZtuj
znv6>0$w$Sh-1_9UBBC?H6}#&M)+9a?Ppa&x@;|`!2OmpcL$N_6F@aD>%|Cx*!KQVf
z#-Uc}Sl;Sk!)eP$jbrNHEgt1)#71WABIty1H;QIq1?KID6r1;0rm9UCW2&N6j!%G#
z$tmVvV%oDyPIsO0`s7@>y|vgtp)LO6py^sWy7LoF%G%)3!d>QQInfC<m7|-Rxv3sp
z%Z_~w*^^4rS6AdIW<3%)hVU4=Z7PAUy33<P1grv_OYSCz!s^bj8oN^nsJ^j`7&U-u
zi4JbH!=0&WE7#48ua0yFF57oFL%O@?7Qc~24;U}>I%-W)u$5%-Pk6J0ga2g(>aJY)
zcF|M9ge!e;q)|6R=7;g(-8=A{L4#k^n;pMOpNJ%BWL5v2>xm^wmEj_=XIHc<q%os!
z-=VQk{>4s>0}?l=o58p&?Wc;1)$42O@wgQ8=zitlucM03vB;pp+%?H7IXSI7)c)Cr
zcT}-WG*1lG_Ar<dzYuhS-a<6I#=4yi*A_#mZs(S{uyHOK?M}Hhf(R?#6z)B}LYm19
zPfiK5Br&KK981s;39|&zZncwq^r)3(eTY?Dp(1)I-PqBkWnndi%`U=H*`3qXuTUVL
z8s^(&@#;1&wcF1raa5Dhq5b;}0!CL6>t|CvV~fTPhp9k6{nw8BGj-iH5aX8z!{OVM
zX{FuD9O5RTWYQUyR15myxf=2{*BU#Q?(fy1u}=<qr^6MFfQ%7nu@(LrBGIXS5LBTL
z1=EEMgrAsZPo_-xt;`?Hty4criXO|9ux)>Z4mge9xb_n3!5T`PCT`WSXBeuw$yy-5
z7Y2t5#s9h<RH3R>ru2CBQq3#1UJod4IN=t{6j2>JfY=!Hwb#3`ax89_Y0{;0ht)?P
zI4a{EH6;|CSBZtBulKGZvQ2&3!j{&>AGlz}bYzA_FbKV9r`IpY>vXV1Km6F}MC?mV
z0|zC185EFJwJE*4b6uKWuPQxz;VT<^z*pHa@$H1JDM;(wnvNMetDnDftq_z+-x|mb
zzr6uyp&9~i0YqHkXDn^Qfw#KC<}K+_H&EW(ezVDuCs}>%0&R-9(2UfCF{ghkRDY0v
z+)7Iwb%rA7L$b3oy2Xr}9EEN!u6bm+))3lTfZ=;LXgfHCe$j9J+UIuwJc;(6O*hlQ
z_z~lKk9V)HFnL^InfvIRd#bYQUNk^PScW&Xg*KfAb3JX_4ar5K=*UHHN)XrH#j|}r
z(_6VvFPZsB!bzR3fpxt)iWZXAZ;~M#r>?>JT%n(CzesAXiV^_E900p)6K)kyNJ5Ny
z06On-$Eh^*#`}|gav=ga!kdj^1GH!4@qVQF5u`#cv0#>ZN0sq#l=ki5wqLycIIYVp
za$M;eSxCox<@GL5AA5BX<|V9M#Y9^>Prpm1Pn0Tfu3g4`Yh?Ne!8pr3-4FKE2^N3e
z4Pqv}Jxw*WQtW0OXFt*9+=$s=i2~N^2fX@wwLDw<op4bfO;q|Dq4Gh2e!#~x%-3?(
z=f9jw)N1Jg{rqpwCH}H3B{^kusgMKd8`33u$?2K)=USAO1c7;Fq92Z7NCxZ&W^PyZ
zYPM==yVL9_lhB@yZpdDg{Wc%INWIl}|K|k&j}v&@!R;U049cprO63UQJwc{-UM$Hz
zdXf+}B!D|m3iQkMF4zi00I$<r+AFR&UONS+TDs~hhlqDYsw5AD<D;QFx+fm5l5W<{
z6Uq`GBE8IaT6cG(2t|AW;O^&>+{U*}XLF6c1_p<h5&fw?Yyg^6`_j7SD|{6EyK&|x
zp*gG6`1%Vwe3I48m-hS^SDYKeoY2(5u?#t${7~sc3wib;*&N8Q;^%MJ`p)?|*%u%z
z+U2KFgj~)mh^B4#;)Tj2%4^S){&i4j#kxjao#-KWkB2#l<@yllCO7N7OX3w2PyH>d
z(r!Z2;%zg^BwO^lObA9k{1x<13r0~3Eak4S^%_BXb;Zj?$xC)|*=?t<x`b*v)_1#U
zH_7;A+NfN@XMCPq<5<H+-_-+{_p~Dpf8eB$fdYbW_ucfWjK=Ysd-kRGGCV=9G648H
z$21&iv#h*KO4k(pe8kl&A3nT44pA#^_zF}mpI$4`fU^o6!$|pgt1NE9lSld5-^d-g
zNLp-S_`_MDTb>HG899dUdE?gr={{vFnN?2;Nnq?D4B@AAe+uIxiTAQyBW|!zZYONn
z0JGQVGnpJ@{?JWI-kQ2W8w&!%U-W@X0tdh}1Th@6FXnKs!zQZ`z5Y<zBfpgCY_$<m
z1H?6*cEzb^$t2}1YgK;uE!qZ^3p@5;Nm00S5IcK>JiH3S7Rbf1oIs3rcIuSgps9g(
zTdk-ZC_6n`CJyvXP$WYwIs!V@x%NIIN)Qm_<F%oQ;5!RweO}uzsDgw@ci4YB=%zF+
zXKv$LFLc}J-dSAYe$~<>!bw4{e6@{i?TKS2%i)jnoy9)c&vM_q5tW(0@TxzwfK4EO
zGzBEp1JO2@!{p0N{&QQx$@dfY&m1r7=p@<YQYRcT?hkX<$5ft*2}*g8CmNUP)*X!u
zMB&VuJE5bDeJK5C(^-Kv^Rw*)+{+nNi{^d?sbj=AqSOU^|J5iVU%<Hwu1fjb^HbCb
z`?QP;?qr&!_r0<k%U@Hbv5QTXC+(`C8<d|UFbB0^j7xl_12)i-7Gi0JVMa~(Ha<)%
zY#w~^e$CAaUb*vwQcF@R!LX;?e@MzZpo59|l^;Cy9(?fZhAsX;tjC_mWVB@Kc1xpS
z*>Z9@WYYDg$4QOF_jOz>C}<7=i_u=~dm7S+I(@y19p}`!^_@T`Ma5U4P%%-WmdY-j
zwNk(*CopP2ZVp&Qjj}57@R0>?c(-s!I=)tTGrF%_8vo=}^Ihq5`N`2|w^0pvCdN9h
zAa>oMBY&`eSys3_Ud?|JRu)BQKR8Pa{QS^9T2Nx#*7s`-os0d?B0FsCoU<A{*rIOr
z%bgX-)x%?&e(zB3<WbHRpDd+ueh#ZODrzqBGOU{HTs-PX5ohoeJ>K9eYOX*S_gnQJ
zLeCQhv(ArGG43)U^+!Q0PcS$-dP3NsBBt6uF?QAT>%oo(RcG<RMj$TNRh4*l_SY%Q
zV!?PnT!A}b0!J}Cl_^KOI^Tp!$9uFGAGGp3vt}!rSIF_c3AXY>V%vw=<T{3_tNHRr
zJvzv`mCzp)G{o4sQ=F?-yq!dEpLL9F#KhF2qg=;+X;Gh~vF(TW6Y$_!StSa)@yhDw
z7rXZw(i|(RsU&)Ujh^I`oX{CgIRT<JgUNO@@1fPQ+?fW6_!{!J{Gj=hOY{23UJ7#H
zQC<X<`>vmb#H@%QaGqlD;ZUZ+YQU<)eV5%X+zV1f(?Y+h$}HA^7~BLeV`AS2$fBVI
z2qt(D$i^T;u1AUx6=-`-lvmw~Gr?z?PStjaiCkGCTz&gWOdmP(Cvk*GbySC8+Maee
zq*}gU?s{rm79^x0A=49J=>B$+OJ#}2;5Fhh7sGVvk3J*v3-+V(*jG)kF6xc4<c=|a
z@w<4$y>g6K8opTJnLjT8K0H8$kR#~!9oHjuz!zM1oj%~Z`*X|()J}K5{e?Qf7p|Xi
zH_-F-4fY#q&sXNQ6K+&3LoXHZSa&|Epiv_~DwJAXv?z_k2z4#$o--;DMd38s?XXZ?
zL%;mytq`)4@)$L7R-b8?9@_6MSU4VX#0~$X`n?PZG(im^d21l$*mO#m)t3t$Lfuo@
z{z<~@596FW{<{s)=LuJUdAt{joPeCIABDc({VR~WFnT!r@g6g_se=n`z$_7oTCX-A
zH&LbaQajsdRWCta0%V2ETq9Eulues!h%3*ze?N_A!u)xlX(YkCD43RIWyX1%sxAgR
zf;x&Co~;PGp&Se{qK+fK$`aERG83gS7&-z2|1>P}URG-~;kDloG*S066{ybGE#<yk
z{+We!Hx4Ow(f2%$Em<d_!p*nCh)8bKJ=lcpBp9VVN#M?ziaYpL(EzVTUC`Wzv#~qg
zX;B~V*S9sBy!sJI7pXJy_$pXwYNg(5YcDRPpJo^3R5R#&Dl~se!UjJ__=x;*ADrIa
zUXEzomn6-bJtKUfbKp+o_UC-J(*N_t{l}X)^4q^)Trbq*Z+?Cwhl;<wKE;1f+VNe8
zYVnuJLlw#C?=sYmJL=b;IRMx;J}1JcD4BrD7Y@vCM#jd!zg~~LGp;ay*()pQ5=oDZ
zL`FY9So0%{mcN9VR`5B@;;W;41aw0PtL7_zyZa!3tQweQJvW#X5Ymisq{AIjVFROn
zO7kQ)3O**=jt%;<owxO5AS}nx=wWsiApSEbsN=+}bQIXz3@bW!JZdINnZ&oELF_iQ
zBT#SPfMt7>ZRyVe$Q_u7(nLyFykfn@Fj$<HnzDHDdP{oc+mD0|$kxYw!O5qZqjRTQ
zA1X8G7)n#9z|pcA8br#o71{F}7Rjd#iotBA7UMri@?7+y`nD|ScMIK|-6v4(u_cXs
z8iDihkBbSWf%g&lky4LFtCKdHa}Jqy+c29qt!i{J+T6;=roZ>|IGy&F0*T=SJ(*b$
zHnwUUI@gs&H^Qny_n_SZg_UeaR%^A$!pQE9O*gfH-bchW$!w1z2HLb5lcs^9X;V8G
z;U5nngM&dY9Y6Nc9(T!W4;GLoxQB;&M^))C!1L-ae^?ISU!e3VgzUvEW7CDlUWD@R
zO!G%<8xbkLH}`aZQg;Q|s3)r!)_f6nN!YgE80!Uj>IW$;25>S~JJa5of3g73LQi!e
zSUI6E1|fL&2zVf}<@L_pLqZUt^Z0Dm7HR^;pBVd~0vZ?B^Ls^GmQiRY7V=}W@s8hJ
zw^0bKM+qmYks1@}TpO;zx$s~mZ{0DO5{(q6>qW!XhL+KlgmV^pZn)cQ*8SKm@UO)u
z8`xI))c^anUu2Em31kN2>XTmb-Z%)JX1>cRGqVx<aF{{LGlUe47qJrth-!_<JXJ&P
z$EaGFwX*zgh2ZKGiOhS524Yd_++yb_XazlFX;9>#aTUKQ7WRNDr0`U2kA$Crckzci
zrki3qTSqOIHYrOL-n3cst2oHDXuuD9l?M(>Rg5(VxWl0I{vf#yDdbPpO&Be&voObm
zG*h)u`C?esGUvynCs?Qx+@`IdDsh!4FfN3aO6=Ef8}OWa65F|4UszZrm;5>NG^(7u
z2^0$UDbnH{Ev`uZTYQnUP3%ntL>adHIE6)JRWO*iMnK7u)RW~a5E@pm?F0Pl!LWRk
z+Iz_1>24Vu5%&&BWcLQH*OZqh-VqHq%BsqlgQ$Qj>RMqbd(9F>zs$n#DnO{<7wYZ=
zoyc~%=V`J*G7Ki%Mb|@a2blVHhR?Z}4@I=f!`@(=Wp{aT)!_WhUw3<6b6O<SaP5Gv
zW3y`9qgZFJfgH++J@KorPI8A6FDC}#x$cfms`1axtI6<r34n(bMs;j20Scjnr)Y{t
z*uvU8?@ieL9G-&}?bbIaw`94-W8`8bL%FVojL6EiGFaslb-UcM?L8E)XlC3I@nvO5
z1h)d3VKV52nt}Ynga!j(u7f9eWwQmWR6sC5Ofs|-czqJC8|by;=e0;La1aXd$2a^M
z&8RPtn=Env4FR<`3?6Arpa~)fxmn<m_2@91X)xy+QL|g}FkEBp5(*)s(ex&@d}~_r
zq?ZHIBTE1vMv&HU<iiLQ3iVo81@s$avEr><h8az<y9H_#qv3Mau`D{4mvqXUm;Xec
z>{oL}UbYF<mYuG&Q>KporfUoC(XW$ZPak+WPaj^`WMymudc}IVZ#3J&Q)Vk;8+8*p
zHzH)pGK_FRI?@%TY(`rcCUJtq)YWq8X6bpRHr&DG=t!$oZCb*m;&<hp-KD{yb>IX9
zFTA5+ZgOqe2w=24(@KWW@=*~q(xIiQol^+QejWTXUpzkE7!=0DgjL+!_BKr;Vj}+A
zu7dss72ix5lZ5{5&vQe)>uVf#)EqM?93pJahP9mhc^v9u2oxy?<jrASRwO-VtnV(b
z<Fs0@=n3b83$#5C`tRMGA2l?e(EoB2z53lf<-d*a{<2&oIc0dRPy+355#BW_YQRmD
z9?6!rp*u%$t&mV3??;(cNt<!orzkr0-j>YXfaI;u(|YrCzjUP8*Y2wp2;CfhXp$ej
zpD>MVB3juW0T4F$_TegP6uUu>9Z4pDz#eRe5QY<gB!CwGB~PPtr~_(_u<>wn^CHCE
z^R?3euRw4b8!ke3VD7gXiQ=ZVs1{`3a(enCXt@{|IEHF?d|1zoQq0ratbK5#I(s{2
zLRZyB)$>sHusOQGFhcdd%>EM(eLnj$r|ybYo@7bh*1FWx`Aq+;!eSO5#M41*78Nwt
z8CL-n!6QAKai`fT;$iKf-@>gq>Eg;McFN#snT|?B^8=t^{TbLT`ic@G@piG<KP7!O
z3XZa2-Wz8JT5RE?`4<#n;l{#D1U8T{o5#JqGxfAOtXC3$?MR%07}*1@3Km+$`fgph
zAgixf^!;cxwAE;YA?KWw(IYI4Q<q8D-)v`!X`$rY2~Vof#hXPhkN-^pJhKNF2LeHg
zXHjxQMk6Y16^Lo7zwvsSk#Iwqih3{s@YcaM9);$?`1537Am%+O`)IbzGDeoYty{@%
zUgioXt#gLm3R!+F-#nh&rN<hmSy8`6QYznjNeT9sN|P6^vASr;X}8^KH0u5dTq2ds
zpI@Fbrsd8Lh1|7Hke3RMYixK+9xZRNu0ooGV&MS(DA~&p>=S2G>NRS&<ic+lo1}Q=
zm<0=a2X){B%JOoDoz}(esP|OZD8jDX@UMX+o!QCb#$~9y+MO6^ibY&%&r?pq_6P3^
z{Ai^aC3}cA7-^tig7lX&QoqPIvtKi?Ao5SqN@-)$pe|vN-RkekA5%tetvD$dMElkc
znYUU<-Z8SIb`~b|5{FfD5)9j_z=-<hS-^q_ner1tS`n<E)hB}$qUpySZCZy8CbJDS
z6RL8(ETj0zYvMiChW^YGD>@B`vNqzZAHT5Z<hV&$;e7Q?POC2x81Mq(J+!Ah5j9Tm
zq$S==btJiJsd2$TW62uBGTQErM3x!|ZH#CQBHA}!Hm;B)yYiDH{=!`#9~^syof=n5
zW0oGC5{L@JYa2Hs7UhYCb#t<+q&WknQd)^r9Ccb)PZ+j5%@=km3kX!<7ga>;(3%X&
zYZ_`P&c47S8ToOLgJlgP)`B_n=Xc3yRTz?YbT=)FHxV!!*yG07I<JqEi>dekH)^AU
z9nkL)s~Ay;rEt1p&+g<e*H*`JUbSTKk~r;HCwX=hxZVtBr(fROeJ#AU8OhTIAT`aL
z`rrpgvT{A<TzPc^N_d-euIOm7JI6^TbIg-U19*)LLr)|>RXjbtyro{<$oz!z%`xvo
zJR+S_rXJ6?G6%fNj^ACnPAIUq)e@Grj=SL3)Jfp7s#xsA7Xwyxo+8<m`hD3kQ6R`*
z;|F#t{HE_pUzC7`P})zO|J*7?Lc4<uK7^k-Q><z^$vKAMmr05iTKAunipBs3C%0f#
zu<A2ROM7(*+KXRvPL^?mfa|i+;gz?tc+`(7?S^1rRG!V!k9%VPe?WqS6Navo2T9`<
zGJ`Lz)Uh{=Ks18X6qoHkyzcof91Jf!^85$`xVENclwIs5*SLpLC=qib!xRHsQuYoq
zLhJ}h*Gfj$Vayf(0}Kmsjh96)6ptG^zCFG2OY^F0yyup7yS({=xEUI|PKK9X@tUFV
z7wh>LvN0PaMzJG=ADkivq>jqZT0H2)?~Xm>HZ3aCTGH3|mLiX(t@`p8Rk#+(d~J`j
z9NAE>$hSYZzY#8D1@`{VQgQE5WY&G9U+AR+LMR|J;0TrYaDuYnZsOmyXb^5W%>X43
zy~2<U{|~|iK_j6V5`4zfLL35q4*G<6{&rp!>=%Y_2QuJQiqt)v<N92Y6@9oxqmPa1
z627nE!3Tr1jZ9({XlroiCAbfQ5fTiz-7gV^aq1>baDqzd*3~dEE%01_tGCinZQED%
z$%H=G7s|tJYC?6?cNL_N5qZilWuh;YLfo~mS*1I9_?}^40jrLdple^?m%oQ~2Y-+B
z;%fjtx!=XQ{vO=@;}8DsWH!{7HJ}Qho7x1m2yu1!S^y2vv`C2qW4ara`!_{^G@m8|
zezeG$D9_KJ!)Z%-T2{o(5tGWpIJu9Z9Wv(To!5PJHDGBa5d`7S0{3{+q5+)YgUmbK
z&kYP+@y>ncKjS>;en*_*e+%(uS7wQ(Ujz=;W=!9lO|gr|lQZksEnFwp3AQY9tl{`N
zvLRY)UKlsnz_a+`jp~3#3EX0S%jOJ&wM$&bFwaG$)W64jq(}U4A98X@mmt-p7_yNB
zDFnak?CA20Tuy3{p9B@e%@hL0wI*sMtuZiyC&T(Rd~{Abyv^h|j=M4K+{SZa*^?o-
z-5RpV_+Bu3W>ZU=aFWBxY$4$V8iq|S+ko5<#^}hs*VMX}$fir-D-X#SEK06~V>*UN
z8mXpcn14rs9!%$+$%C)kceFz4hXmW$m2OGO{Z6-+r626QedS9ln>KQ6U*!`IbwjNe
z2-~=S)+%^G%qz2Vn@y!bSuz=HXz~7foa+z1K~MOI|IZ$OPnBKZzlIwArN{qgs9_XB
z)T~$?I=9g`*sul&Qqo4A|DC<0JqFJ>oPzv!5SOCn_UQY=`MZZ?;1d26Y-msF=S=Z4
z`7<;lAqo<JCjk`DiC4(Bex$h)3Vcyx^)9xI`4sBL7)E7*P1bBKss$T0>(ld7=A49l
zbdVG0ZD(X?iotUbxwp<?_5yh7eL`9C2Vqa!elNOyqO>jtv-?h5Nrqxn9+Pi8aEWnW
z^dDHh1$mc68P2FN-%JQ^+K~g_^r9T>O#`T{qb43BzzXc)7BcKVE=@Y9HYU7R>qQFQ
zMsAnH_0B-;%)<r7C~C%iy{b3FdOwM_qsrOp#D*F3qjeKj%8yhPW97urt~jHG{AxZV
z11SpY^QZPoqqoR(KiqWC!g}82O0(C0cuSM|PeR~4pqUbKJBfk<_EwDKZQYM>;QM(P
zthUu>3L5Mfyft0~;Rp#$tkyJE&uAyx$fEjTVwCaWlK^T#65Oef&~ia}DLsQhTjxj7
z5!3l$A1{Sf&*Ngqhgn;0a4MHsL#kXB!dJTbP~Rqco{%|NcooXo+20OGbGwzf?d=+2
z)wwQ`%+rn*EqZN5<;bRZ&~BT~!N3yuzGYbO@KRwDts$`oU!jG?0*X2}7gk8xLhvsL
zRKYClf9j5LyKyT>Tjg-M1{dE~PjH^Ue4O6A{j>>_AwhX+ox4!$fuvoX3aH$W6gBD3
zD;W#z)?mEEypWN_8gyOJZdbRWlXFL9c7c;r(le_vXSFyKEpdqLjEEX_E27HdK2^G^
zehS8*tcql6x2AY9?n;{|MyCVh|4Fq)aF)V2gAAHW8H|d(aA#<iKe0{*$0IS9^OVv#
zl8qjJar}|;23h^|w#AZY9Q9-#K-6X3#lCDS2n|IzQ%(Gx6xk4uI-ETA7>|-F=FC_g
zms?es%Np&%62CeA=lruBUsArq(Rcp&O8&y5v8vb0NKF`4<HPlN4&MHl6nQ6dC!3@1
zf~XB?x*d>#)EyZv?@uEt5l^@;LvW~Plse{s(Meky1O&NypS^$vSyCi#dvJwkzq;v1
zHoE918cBSJ@Tv|1KSpKdus0yxV($-aD8!`ONc$r|x{_S`B|yr%xOwKLT*khOy>8<Y
z6q}L1V+|L|gSwM~0dN0~HJm2>C<_GVxg1vVyBKvdR?S87a5)}-lFzhS{)QUfS)g(H
z%g-Qbtz5Tksn&hGemAz!|KttRG{wbI--<b*-M2bxZyn&3txJpQGB}kch#Z;}#>mB&
z#uHDC+IMrVI1tt=r8Q=&F?vUfSr{T!eE7ifgBnt33)rO}-KVggCWqd#?wI#OVfh8C
z61QTCvFIH;Y7K`uJC?+C-r(2#K+=tem`cmWZH!A*A1Yi+d!>TrXaN!w1e|P^yI38Q
zCdyRKQ^&@tkMYuSyq0q7hU-4jz83W2uzYjQ1nE&OH)@1vo_RMwC?!_SE`^&i(tTzV
zSu97UG}GevGKW`l7PB|TyN{;GQ$%VcYX0Q8)>h?;t}!g9D+0m-CV}P`iOS-&d`LVF
z1lZQsOo#`T-G3~QHogY5Sw1$_Xc?hwM<{?BrkaZ=@5=<D?+Vz$Q(nscM3iLhgWvtf
zCGA6+3cFW#@r{M6mQHpUX_Zllrs1ca*rTVB(ZJv|z0&@afc<iqQ|iEgNobe4z9(6F
zl6+`B1^W|=QFZ1H&up8DF!c#&oS1FG+y?8uN|=y?{OR!&6s5iK)AX|HLyjt}Fl(X1
z#mG1ZKGT+)x*7ZSrWd=th#YIq%1lBA@+LCfNLRx{>%8DHp<&db-Cm^c^Z<k8tQ4FD
z1B2(nX0&Yms<HdthC#H5jmYyYFtxm42tyRumZTZ|OI=d6VvAI|dXCEIcza;Uk&lD0
z$d9wiQ*sEBGY8KVQ+Zi^;VOi#${$5r1*4g)ZS>nSsKsWK)VS{zppU{}C_FFV-IMr!
z8-kyE_(M97-{_3(>vC*7DneM#=E{Lxi+P8S&Zhod)l#i!B=|{=6u@?*<B%CgPm$-a
zLnI|11N7;oqP~nM7%BXNMBkdbI{pG#yD7iqK8|?o>F(OZb}KjY`ic#|0BTRt7)PtQ
zheNZjj^)tFWtF)Ply7QuAHbkxyEwwmh@NmGL)@Q<^Mim!vvq{Zfjr&GZ3kz@tknUY
z6NTYxz&@jGJVdFg3SLXv>9M7btecBKBJiHs4}UHisMqB1C#stR*JW>J@$>RD;et%M
zsDAzqKKM!8#=9tlJwTqT*G4uOJ+<kFr{8PcyA6LQ>U$5%Eg+qVCB+`OWNA|>$5#q?
z9IwS{G`2wXsj&e26j))z6F`j+`0))j9KX#ol0Rnz?E<Md``j|W^Pw4)YOCT{B(6Db
zrb-qO@XhtFOXL)Lv$?GV3eO9uz|Qo6GP!evUNTp=lU!m79w?{u@%-G+Ahkd6fBBUE
zm}aabFQg>SyP;d~=-*@aA7~IsnzQ6spdC$+CKi<^0fC7~UlrVUZO$@IaslOD%+KuW
zDczR4mjj}!8!Nr#StFX-1~aqCYDPE?4+H;*C*00K`x)dzzJ}~-GXHd}MN#cs6g!ID
zFPZ{%mqHdU$_O|c-J2E|e~jOVn7pCfU`Hs#pAlw&ku65~=+kMBUupU3XeLxoBIMlO
zf>KB#`%_+nHrsgx4G^trePckJvT06FL_%QXS=vU2^s@b01yI_yjR--%O{}B&8paK+
zMh{aDCG3%KJn(Q$qIrge%bHpgCx+t2N_!&E)VHPYQOZ%+fd3lPlFn2R8O<Le6pt(V
z%$M{Tjp11y{!2agUo+6r&N`?%-=%W@MP<Cb{dZrP|D9AcTWuKboCB%jochR)N26CN
zj8j2VZEClKMmr&Sf4OEGdtw5}UVa>TbrS$u)J^^4`HwCP{n#sh3GG|Y;g`bmiTMq9
z(I`{5CKE769<wU*(xh~edm11bJ-|+Fbi$?TVTa%#@QnXC%_C1$+_A&y{SV(@zFkjO
z#L&3XBVO{>tmMff(eIXiB>rbg#p=y|1IJHJ^fgB=W#B7L`wwG1S@*FtN`!W{sa%R-
zNu=%R=4ZCxHE3w}C^ZaQdSO6{YV1!w1KO=`Q4R{-^7k{wY4A*rE^&e|iM^M{E&M?t
zV$kEskXVCZA<?AsYl?-q63ctfk3PGFp0%P+8oDig)hszb>dwtD=lWbaDK)0x=UIVF
zCX*O=JLs0MZJ*3pOxo3W$=1D<Y23O!eB%+6pjOV6*WFjAeae0vG+Jiv4Nm%GgJqgm
zW#g}z*e|&+MGL;74I^H^H^$*uVvV>My=%npRXt^Z6w^q+>WznkaFnrt0pwJ5*>J~v
zFtQYzKo$O$W3hq+C66iyIxcf+foDIcB{=Uz=0Aava+Dg`5*xXHL87c85f4Vi!(g^{
zh~w~4<+;rq?2tHaQkt)V_|T0#;&tg6&~z4FN0{HsShT6poY13Uv#}yC`=JAH>~a<T
z3e$+PfG3w;=;Ymg!iQMn!=J|LV=I4=yhu&L-5NDvQQ(UIlV~aBP{B@XUmVn3_eW~6
zzwzA@EkuU%exi9mq}zi1NgDb76-L-sKtWZWxcRCFCje>2=+6f^er~J_k!bW&mZl+5
zbm{p^CvT*zOu5@q1HO-E8&E<7ZNT!ghcSmtad#0J=0Qd@518U%VdwET>>LUrd-b`*
z*fFKFu{|-5okaDH(77l!8UvU(PUj9EUk!Lk=2UMq?wR7EKF-81i^w&)YQJ(w<C-cr
zxZ9ZQmInP@c=r4TdmU2`f$Xl%D@;rJs9p^4)!?zFK6!ZssD@Nv?`i{6zQ(wFkV$!x
z{EQ&%!9_JODX7!c8r;_ow0+<ai&RqWJj|-`AQ{x>@E2$%=`u5{R}^asFr2z#j12so
z1LOF1_*&6IMv=Ns<s{)r?({_La2^~XiiBcBemIo|B`*?AnXLpNz{1bRtw}FD&L6#1
zI1Uq6AlxcYi&=Sc9nLM1J$t<A4jf)`!LLXRFw#6RcibsC?)lN4*f-fHx@A{#W(J41
zj`r#!JgtMjCEs6=>yz$j-in&g+;eD&fOYQiW#mVF^V_Ca#a-a$Q{9kc@XfKpM!?U6
zT7H-rW@q^-Ha46ho#Jp79DoC5@>3RQvZM<^vO`}+Nw3hB*F?J&|MJ&bEuEMj3`U})
zs5T=W$8?dk@8Tz^j<eRfZ~i_yXSAgv5}W`ibs1|E_Owo@Y(@G4=o|q+jh@jk-h!1N
z%2q!$K{J=9m>k2B4xgQr*=%nx;pG0A!BXtoF+lF}hkl}ju~qfz;4LeU*~3*j6&+qE
zTMMR8(WSe!1#yQMx!G1eN^oCx13dFjyzTErFaE<0ZlYyM<?jM86bXASyh80?h>pF@
zm~ABS#ZK!zgs(qbi0QcCpyoFZp)oz=ky-X`IYjgLCpsk9aegR;;RD>Ld;<_`;`d`v
zt$my9i&;~aE3L0p&)}At1z(1{_}y|QVz>$_uYdk2Tu8~6waQXw;OV3_Qx`1??ivdF
zS<UMqW3O!WQlwWQkAce%F(U$ud=<zfS%Rtfl=RaIT4`+3q)^@ba$-IAIrdIdWj^#P
z*zXjs#<|;iHrC%Y^3YZt&EzrjOT4t@ezHDKma5j@wJaf5VB9XLhGDv0*ct#$(;Nkt
zbC4s-9Ag|9%O3XvG)JcR4FQ-4y`igob(St5{Ek+77r@A@pxZ0Fdeq0SB(2+;tt0BK
zhG&?u2|bL926_#wRj*<lZr_7J-xIg<5Qicdm#+cZAR`m^m6X51J=4edSfBAacSW9L
zW?SJ?|8G}6@!P|}c=xHu94Y+qhm_MDbnt*Tst8EGqpF;cuCQx(^;{XVblI1CWw#0G
z#qe#@meH`q$p>3}%PlEl*FK+?K<EIc0qZk4;KJ)rXx_yNBg-^}9B%LE>(?@~9}o)p
z`s<pyiJM4++y==rw{cbbOxh$`bJ&i!b;8@8Y3vfX3mj$MB+VXmFlNXR?s_d*c}Z8U
zL57S|7T1u{?Qq%|(MK)e5PVT^EaWN+)!lb9i4yuPrw+wkF5*mNqk6b6QhX&iZf%n%
ztpM9$KFC=uf>lwF)f~!5_Q>eHjP8vc!WkibrX0udRwzLti=T)bJJ!@dnQ<|jh$+EM
znnaJzmQ{90r1P-9twuRq9Rv8CS_77*>!*UY?>*hW`KhJgYe}HEUM%~AKF$-6KB^+#
z=`^=Xe;fWVB+{GVT3-)ycO0O+Cqm3gK=O3ifct7gh{+cT@M!JOjvpe~>5lTR08N7U
zpgHQ!_S&Wu1lAu`P~ukqXqyB{arw$%xjJ7S_*z8XA!J6V?cp2oGe9M8+v?wPVlfZd
z=A0PLbhox<MI^iG03M|hxqyk!1cr&Bi1<)TI&v$CV<c#!oYyN%KkYZ6<}w;}M}2^u
zw;@OzJr*8Olbd~iHQ}VO-Ui;NsbH$Y*5?B$38|hh0CxppIjtsAC2TxvN|NY*JzUc)
zh0*0DMwzc0woYPdzBnWttemuIiK~}f)F;UJGcXoyhf-6&D2JHTE~WqbVHBd?2<>eW
z=4L|dlXNJX3ELwgxRoVPBf_O)A3QB&q@B@Bhdw&=@@IusmS#x6p<I;l<e$ZSdEyq)
zcbk%Oh%rrlVS6}p7g=yewmo4@g04({@{9$M(|mMGz3~HI%EF!R(-wQ-3;usTZJ|O;
z0}%U0<97WQXxzW7^#4ZV#ujp*h&{bWZi$l;2q2+#)-qnF-3*zaLvX~oQ!w0|ldGQP
z=ryoJ)tQWbR+Hu$>-zh2fG^0dzwL&(K^c97RUGT@f`{481F3*x7$M8aGxycMZe?aX
zT2Hz_X8>_CU<VQ8nS>H5K1J$|XvYPG3qL2oAFG8|uUqq(j5cZ6oks*Oi@QMumI5Ns
z61D4My&!FR^I!1ZEBwBn<*m?K^(n~`u}y(`r8^v^j6MGNRr3VvA3%C)i59u9wHkdp
zdDd=P^VBvg@l4t}XLQg7>H_~k`|w9xW4?cd&E`_~i`K^4y~vWlp5i&7pb5C+x6`Tm
zvPBRXSkNy~d(ZYbg*;&l5`gpGvdNyn1!+!*TMV5!S~zF30GwjM9U_9);`GOe6GLr&
zxsW6#9H<GCZP#Ffw2KJx6)?OOj#dvtkV26eODEMZVxZ*SV8m&GK1WWk-?aOy938(;
zvm;t2zb3mRTDB>^QiI=OZlk{Ij(b70aQZ*|S%DC20GcBwS^aXFUaI3&mC@YT9dmU{
z!}_+#;#KlONFY%9w5LX&s!Iy=n$I@Bng2Gl2e9mZFFKeuX23g<fUh=Xh2E;xOtOjB
z_64L1$o%A*C!7X?1@1xcEes2S2a584A^=KKfD_(*BPb9AGaQj0ETfI@bST-kM1ht0
z02*Gt#F@(b^rEKjYl{#NGrY)BzHn+?Fiqd6$cImj@#drUZK6TAA>iegKORy^zv-f3
z1X!^onCbmf={70mv?gz*nZoI)Daov2oS#jPc~Q0tN@bK6W_^b9Qq`*9c9>rb#R)V>
zuyc}QZB`R0bsKBCCV7*nz3k)bV$HEcpBxL;-_~l)4{E|087*2bN-xr}@N`Ov_GEE_
zW$q3vV%1LWxUgcWG}SW0(3x#V-;`ng{eiWKb1ZcpJcy)RyPjN}O$x>2xIKv+1U9Bx
zzBnn<707zv4@5+v0a;#o$dCu&Q7hS*^6&6kp~~!{OJYJUOL6#IsmIzh&Iade#;6v+
z?006reuUe`3kNg!ti@mKEIq6}$bpdN2qeoU>e|f<W||@~6jDPKuG{Ph=%~EsCr1Vi
z8Y{_eWqA9gqyYPUzTc&Pz1DvHFMNmpu5GsolO^rn7<2!c?eHHwijPV$%RJvaihmQv
ze^XHNkNX-Kn&_LG+L<~T+SnP|n$nq=I{j~CDa8RO4BSmXgxr+m<kwGxHr*67T#eln
zRNTL~N-H|K5~*USxGgEE+^Nnf_qkOexX8gNx&Cn5P!W>P75>dm{o^rfv~eiE)4%|K
zlYhq=@XwEFWNH6bkH-*f@O`^~p}KSKK1E>rwusl?^6v;I{#n!C`b7MdDrO6#F0+||
z275qeWMX7w@khTDfv%CnS+EY9EG=6++ig!w%vMcI7#`SGSdP^+Va=7`bfF)xA+R8V
zICO?|Pw(&dSt_8@9VWu6z@~XSoMwiYEe4WSih5QNLB^JnVt$HdlEp#o@qt+!HTl2t
z1LH&TLw=>#iK4_=n;BS`m;rz(f~9Lz?d|M3$xV#PjMI;e%dns@BLG6_8L(S0SU4B}
zAn|l`y%c+rMx=W}8K$58I&?t4C1_XZ6M!KZndr~WOiM3Jg-e;0o|<M2XF)JC2KRc-
zqD3ag22ZO?NsrH7jR+LIok}75<Kl1p;{>1nP;U7}H|7@lkouXk#++ZcaZFM34wlaf
zPMP0-z15;=a6h!@VwraFc$;RA$x3<7AKBZ}-gRh?Y{=#Z*^mpcX5MCfISoOxv&C=5
z`ucii<~~gsFfIa1!4x9kLo%0RR!Ea0(nECu?lkP8jNFir^oY)00$?*3Vq$3+28c#O
zAK((Um*|89AZp)_pbHt2kJqc5pI2gDqoSk|k(j%YiOx*QcT$nC@vaBt=;#9PJ;Ovp
zL{2Lgn#%_`V!W5nJr>>P&>-``YWl1@fRfP6OrPe4Oa=^b;D3@d1M;^B_FPkCWxS@F
zqpM8yv70aD64p=`%k1+Yl=6CrObGxNMnPRbq4yi5$kfDu;n<q)#qbP*SQr2(<IQJT
z6xbDX^Ew3L<NTdwl<1t1iHU{F2U|U%KT^cWo^9Tn?~=WGs*j&Y@jsKN=S@xK;m3Gf
z=ANt0u>F1<S{2`2<4rLk!rZ>4KI!i}t5mtHf5^74tH`;@CAJVzY1k+!xV#bkPVHNw
zX%zzx5lw)G->9ul>O^(isqdfU*QMX+*n+0l^<S)Q+UtXv%s9y8!tZkHR`4YAaF`8z
zPBjV*(nps`oW9Uo+oQR)HLl9pTS)Y*V}7bM(79@_>OU)g<J!_n<&d^xG)OoyFaRL6
zDFMq@$~pb|?xWX#Tvv|^*%U#?aM~Vc{$(k5UhR)8>T~zh0xDB3=bO<gaPskf%GVde
zOxi8I{KsN|@(^<DTJvS_3{k#(RZTfN$c6o?rsPTyQgjU+@Skk}*z7gi_cjIKZ^Hba
zm?~OJI~Q69Llav|J6C7MzxqUhfWE%|Ss^da*5S7m0Qj5yJ0{qFn1XL*41cKu@L$aO
zOaEy2|BQ+5zZuhCtNNy}{paD-&TowT&v2;!QrGuz{=<0#{FiA{F7V^P_@1)A$$w<4
zX^m~2|7zwK(7+(6LM1|<U;)8_^B@_(fdGLSff)Yf6{&z(P57T7{zohJ*KY;jzo>Y<
zIwkyO1_t<>{I!3uur#;OcQG{otKs1X0sX)0^$!{|=?FsDw(nZkH2D9epNoy9shx|3
zsf~^O|A#Ao=l`E8zY*Q~n=Ai@yW2>(<kx}1jqw`%RH1M!l6O$AaT439F-v_zUd3Rx
z7Z)aT%$K*jd;%f{yW83p3{rFR_2#<ngPT?@FmN($V;U*gqx)0W*H1kDfLwxT=A^_?
zgsFyCU}E5pJ`$;8-IG$vEM`Ht<FvxAz82}|v}FYm3g_tjI7TZ5ST;*f5IEp<RHOAv
zARi^riGETE)4Y-Rmo$+B22@HQJ@GV51SBHXX(hxl2tz^{qjYr}Dl$b1LEW^tIANjb
zl!<RnEz5LRd9W>uy~SD`)QpxvB6cku6fuf|Wdy7e>FCkhem(m-4HwkaxMNH8Q_UKZ
zGu0y(WM+BD&SfiJR3@n?j9t>-iNEb`+aN1F?#tba4w4wJh;$$tKM3Z=CpMfz)mI;Z
z)x5bwmd>%7+I5GnObuNk$Rt!nl5B;-9jQqA3_SK?-gn5aeVmx^K!xo=+%B8dI6had
z;eX7A&G$T!eS%zRdsnGVlSRk2=4%9p0?E$C1WTsI6*3+OFa)s%a<C9uOhhFy{S+dH
z3DyiH<Zgv3p4?Z-V;N2>fhxffi{nrh3l6=FXR1AhCwB<pDrHy?-=vZ)2SbkaN4C!J
zXY#<udHCSN#*XfAFP>|!N{I_qQk4k%3id*CC6E$=<-Y$qTi)JW(x)9FvFz>ng5ZvC
z^-~nKC^c#Ic4i92l?}ABK|j}ql5dqp)l4@M)f~~8Ai-3LG+j;t|L(2kJsoy2=ki=<
zp9_Ad8KOOLEbT_w5#)ASlAA2IPksrzWRt0BrV(`cvp@wbz`|Yqrfeo-TB-~*ajStC
z87LykAcM0tUn-9qjRgxn)VR$*_wwoz({xmPyNUw*ICtvZQJ@$8hy&iJgTibo=dHkV
z1U!EBm-3~2=e&W#g<{K4VFo-oS`Ds;v}S-|lEw#TMczn&l?ZN*!rDOXHO{X}2RycU
zi%_zfbW^QCQIRW65(>jWgL|at0xn|G<YA~P^X)9Zsi<UcJv+VV#nroGx+KYd>&!x1
zkV#fRs?OElaHPzhKd788TI_)1r8FW&Bt+D_L(t7Ps5s!do!w5c!Ul!oGyuRO9dMCW
z>ngcZ+@RGC3kcX<&@sDzC8Y)Z9xGIbZ;6o&Tg1s(sCSxp2?960gt%Etg4#0k2Ok-9
z$<5LZKX0>s_fXtb2w>8~bpBn<G+uF0kJf9wvZ+!j{t$z$nNvm-bJ(2pLllMZa0XP2
zu#royP~(pvk{+Qd&ARMEB3CS45$vkcptYJlZaLIcpV$E9_2<vG=)jm2jnZUM;ueaM
zz_>n+X`2^=3Ao>zH{()K+6<Z;ttjc2C0NA8#u5w%OWU=1l#zBrL<^3j5m_DxS#P~{
z%lri^O46Rk`22EKLaFTXebT|4qI_Aq`=}gzA6lS9+SF$yM(5!rVHx}~uPHxYJ8mWY
zU0C>F$;i7s;Fn9Jd=dWm?r{oIR5K@nq?a7I$2iuiQ}$1Ph^Nuj2T%A#7k$(ui8$w0
z%e?7d-d4lLh>?&ryPx4{8h+wqu&G4Ot5+DM2uR$qRGY9L&>`h$WlPnI;qh9WI8q6!
z*j=IZg-VlrNNrl+cnr~QhD_&PFSOAQ+jKWv?%+co;;L%oRh{%hHoo+Hxg6Oh9Zv>n
zDu1^7%^awthx(%#TFG)gD^a(EX`*s;GbSjR!aLLLva~5-_jvraVPDoV-}bIUy#`|_
zE^+7v!i?!KJ8PI`6cWtUZC3BfNRlM}3@56xO7=^%eZn);&PT`UA8!XaABj2Y_osXf
zv*z_Lud}<8Wr(FajK`HeBhGB3ezF0}Yii|8Wqc&;xXgv=BzCx9A7HPOZgR6bE{CmP
zzo5Eo-L1)`^!+7g=p%+7TC{J0vru>#|8&&fu2yAe3?Lh!dNreP-Y1<gr{-?t{9Uz{
zgE;S1LT_tce^zb55|RR2j_(ft-MLW9|L^Tn{t*m)d!GOM`**RRv$M^A7z_Tx;oL3~
z!HRwJ?7e==zuRE_<Gzdxv`(hZuC@*?miBgZ#`bn*be4AiTQn#e%P8N^fDq#T6<KPQ
zFCiNkn2(5rY9vq&(5Rb6wakh1!&v(<WX3->8?4uftK0jUTR(8{5GcFC5>&od<%JfC
zhr=JL%@UJceYrVGr`8^lKIg)&x!2kOzX;<zM;qNJqLFdsNMIm^D1^RTT9IT<jJiJF
z>b|K2;1itj7?G}?BQyH9CuBz}UN%oJml!^!Vap=o^%}y7cD%U-^dXmhLqjBkg`N1L
zNIHg;RtxdCNy_Mzd_>Z#4UT4JY1r`b=6(&DE<RG_Qv46T$4cEua0$7(l-1!yCr%jQ
z(>XxKjJXgq&ncQx?XeVY;$RA>3reOgiUFCr1&$>rl1IK|fx2rSzf_?j<al+e>LI_l
zUaR#1DG2(-QkyvrEV&*U(=hm-*-qa*b0nNz!LP*OuV&(k3DV*Gz2WvRjGDGD%<iP#
z|0P;QugH$1_})NvQvF9u#!PGGWN2>ty=5@`zpM7YE!kj(u6-s0O6c_qYJ8h^8-@@c
z)dP{#yzLs7s_arGRiwsVgM|PQ!DgG~moFKD5jOTu%s@R>&TDU<XngEi=h>G4Uz`<0
zJ$FB@S?OcWj}{nVcg$S|D0=tmk{56Kmxb1=ysnbLuXEko{0e*DN_(KU)qcMs@1Nc9
zuHMb_%Wfv*Oeo$OnA8m6JqDoM?5RT}RLbzY>#nU5u_9hNBJP(v=~5V6-HruK;cIie
z9d3_!sb%s)AI1_2eE|dDmS${BB=Lmk@u>_%XNWah)yqV*ku^+bw^rC;Ue89vo9pfI
zcfQ@LI|Qsa)$9ovFoA?!pCbVcJt*mI`;LNSMV#^6c-%?Y9YI@z{b4i_ftQ=2$8E2<
zCA_Hhoilrw^=q%0^_qFehMG+p!c2QRsNjb$a7?y`TqGLhawdnMI0<wOkZ?ri`;{YD
z0!rO)%pb2FuB^FJN8_XShJ4yvK3>mn->JXwd#5m7+r0}t2Zku1VSloc%+t%~_0(23
ze2yBDN%MELlv8j&ZW1bLrqgkur5$3ptjTo~pYs;bLGX3kq~siptETf6huBfm#hipe
z+x!@JZuTyOsikhhs^N1mp^V3E9Z59dP>KjL(_aKqivNeSua1kd>(-{byAc>lK)TbR
zk#0sLq?PUtDT7W?LOMi2K)O*vqy(f(8Y$`K+cVFp@4V+Z@A;kc&-|2iueJ7G``T+=
zYu_{X4KZ-L>h+`+|M~)ES5$waWPkrLEQZFOvr$l>mke9a`5S~x>Z@+tJE&U}@g1Ar
z+{pevu(YG7II1z;okeqCFw4At#&YrI87t!&QXjSe2ju6^`w9B9y^C-2I`+Jj!)d_N
zliz(OLgp_>kt-w<=fhPd?M)#r8dmr{#(7juOcJ0=vbSws=U^bHJGRs^On36+j?k%l
z_u}hUMcdeI#d4%y#LEs|;xT13c$rxXi=srcKI;;~Kz)ya^JQ-d59hJ!w{R(y`%I*6
z)+*N243Q2nyMoFKCArO4a`)M`PLzccI`?|{V)i>y2u3EzD9`zn6*Ln*-T73j8CLL1
zsXOEj-L12WJ^qC-64I2f)w@tCUF~<eI1H~NQE{xl-O&SgUH8fSe`3XSF;fkl>g%;G
z^xuKq(?X8K=9FT>AkYkDl_$+?_2TPjd4krTNRvhZ^^&sbAfTAcQcYN`*TJS3y-brM
zZHvXO&hi#Ec;k>|SUA7>oL<YWmujmze%ZfHI<jfS{Yl?jD|*qu$xVs}JiYD(6x>Cn
z=x=<VSk{t$zB^E(^+9b9r$o3sxMdMXbbE;K;{_+zgHMgO&pn0N2YgcTq_)Z3GkYsc
z<t|6xxwp|i?2E)C=!>Ar`g1OS9gVsjp?%88t{}`V%~WQ+$gU7cSB$OG5PHI{uo^7t
zmrRu11@Y)48^q2}6Gy%f$CJdDOJg~=;K!F7{&I+4ot0qdP!#miz<**=?Ve<{___!F
z2Bryj)t!D~lgigh6!yOoBd0Wb%Y;T{s_wQtb^k!lz(%h3pC1<})%EU)ENH_f=#h{_
z{-)9V4|PP0$J*1;0~8Zy8#@<I2TM;IL^b*E^3q(!Bdr;DUb^PG`)P*nLN)q}q5+P2
zKAAB6kBG9nYWSb+lkd4vlTU{%s6L(*dm3oE@l4=j(*7BwCpbsQf$%QnSbkX7X3fE?
zKPId9w>3LmWtN0imcZfI^EwzLAa(Q`B{WatH&$(YITD7{S!M@Sf0p2uTmRvbeLZYA
z;ysGdTz6qEjhrw#j>EnJDtZ~J{(@nj$scOE+lI$sa<ri$?m7z|=o4rkOI-=PiYQKV
zae3!8>nU7$A_J~NzBt!gEyj6>f3~HaJo)L-^Zown(N0Lj?B;~6dLFrV&>q7hC0vyn
zGqn2yz9V>dyXjQpmVMpZ7ioS~S^X$Pwmbcfj`cFcfAi5oc4mzKiT#fqeC3ms?ce*S
z>uBD{(xyMqH>*}-FhmGnpCW}1`mbm08L<c$yRQZ4>{eV`dZzh?EaI<vwcl&No+QoO
zrhR0!9#HW6%+sE?FU)P;YwkzrTt!oshseYc)tO8>J)8W+jS!8iyyZ>bqsIrYkFwLp
zBAevKeo4WI16CV_@cIguHM%kmRle41EY!R$SIarbkd3|P<Y|*UK-ZEMQyiDzvu@%+
zsMA@#q>x0+Om4-K(N`IlirkI6E8ODJ$2zaflv{rDTl?nS5`%8(`LM2T>5{@-V&+se
zo($E(xYW`wxWT@6|H$B|+Uz)$)+8HnZW+FifpCr}I1p>I+#}aRl_50@jEE_B_(MqW
z(eI>uXNmS@F)TT*5R;8w&!j6${Cj}QjJES>w%fv1;l9RgQEqRMa-@S;$`8D7!8oRR
zvhO91Q#&*YywB__ZgY)db$ts%1dW=1<act>fuHYnP*)I{`rGK&LMkeiq;HQ+e{N2V
z!)6*cPIxY>^q$t9yxF!z=B;kxX;jSdTYRl)1dUg{nErK+E2@V%T8r6qv|z{Sy{ThK
zNl>`mxft^Z>)wvQ-G?MiG5&+qTrYcNK0hHZP1RY~eNS)SVpuBq<8r674c!p0%gr)_
z`nAA-wOqGIIMWZY<pb7FgW!1v-zD$;kXqg?43doN6(y>f8O3~f6My%m`}u2a4Z;Gl
z(J<=ILM8e*JVqp`!)Ca_LXMOUB-718y$NG)S&GW%okQjR^W)OL4P#??0S;j%ii9Nm
z&$lZ-V!N9EC+_#(?bd-eI$FQvh<X-I^%8t5d^N*Rz!SH>H1(I-g$g!ML9xnzJWr_^
z9|fn23l#cWgWL1WGu}bZLh6>kZ{JL6TrRv1T*76DC6)PbMUZ5&db0YPBW^uEqDQs4
zEmN@8x86MDJ)J?j9rv}VG?6($8F4)0Zn`Sby`Ogr<P)~A$K{`Bln596jD#sakuSk7
zxPTrfPLn+$E#=9rO_-*5LTi*rfvMp2{=hXTfdZ=@s`3EMl%+rs<s-=tfu%=T0jc@%
zxBT8&Jdb;S_+>@BqIK9UgQj;EB~cCKD>LMdaHVRjA)7-EzJC5@h*R+cdHzu#eHlJG
zdtIYPuY{D^v$qz^Kg;X?jOOfq9bZ~{H^UesF*pBCR^t5U<)xprFLTr`@457Ew0`RN
z3so|1=dT*<bEC^ScBtMm!HqGUkj#ifefrE}#;`0*T<#m=)r8LBbvJGqf@gj7T9Y<p
zQZE%+57%#3-FtG3N>vP6o<6wwx|6x*?;KSY;{P>&ajn54kmkEEx`O5F=EAntRjJG(
zQB(I%Vw1-g6SlpLS`TE1Wew^RDwe+rWykKF^~bgtFiweU*)AQ~Q2lOMy{1tyJ^yOe
z?QM&vAA@YGo+c0z7RS$Lf%ly{zq7Bep~KkAr*|yKja1;VJ5Cs$Y1DVU`)iiH)|{vr
z#o^xtL%$0~$KbHDuVYv@2^Kj&*!{W_&}3(N$0j>UK<8VJcoP<ng`u9MVb|+EU5x5C
z1l4blZG}C)m$<sSJ6qUV^6H&_H5h!p$r(}oW;Ao$Aak7Gt}11z{Nr-DbGyl0rr_Po
zOjAp)L}ra%kvbu-r?XNbB!_xf_Q!#7v4(t4OZc8ze7EKdH<6Dv=|ZZG61UYC6Bqa4
ztFA084OnKg`+`Q^Y0_mm7)Wj>vj(P?c`h*+h&mYPF$f>Pu4}EN?bgqFe|Ly&3DNLX
zvu2!kc7%{YxiJ6Jsuar)rB)vt+F_%a!e9`YlI13oqhl>@<RXt>;)H$J6mjGscjUo)
z%WY%vbkpJ~b-NOJ0_RiWSG)Kk%%S6j_8#w<Y4S{8tqoane}H+V*Y%IEDe$D{%+?uT
zeddQ&rQ9$1AYbAXN<=QF1pf6LD}fYB;e98MWtXqO*~1U-^CMfV6d8g$F?1^Ztu{Yl
z;_YAh??)x5qI{dK^c&5r%j#P5RuKM5pC%MLe^=FQvg$&>#BPe?_FS?=gEr-<yxq+3
zrASN+tv(hSnT^#XQfi$~*GCpB+E?;_6iOu@-PMr@i9%K2q^FTH7D`BCReSmai8LL9
z8iiOfgF-}M)oHA<QPFAHc5=7jIZw&hz`ecim=c0Yn{u2jRC2HR6VlMtp7tP-$^s2!
z#RgIlxmBmW$|j)kkRzJItL_0r&8~?fi=*&23f2tzk17R+SW1gu&3EMQ<Z+O8MwK)V
zP#V^iI9*|{A{9D&m#)iXb##U)ue=j7L0YPkgQea5FodEWLt%}jKyD*GshwIk(YY)0
zIhH<`u6%6n9ywQ5PA7`tU$;;Hy|u;vObn$5Iqoa?llVW+aeqTe{z-$oV;J&uMuq6w
zJm+x&YI@3K!`d_voqx;X*}c`IdWBZGrTWUW?w@7_kGy<rlp_L92g|RT*04-D?!{s$
zjSM#X2_AZT(+&rYN0_otf>T59&Rb0Ujg343_Y?`StMg-><dAnc%ttu-I-baku{V@f
zn8k$;K7Zm78xW|s#l)SkABo|2K*xtRCh*^Vg`INuKB_Y|<bAqDx@?qQmum(3J~)GX
zg_Gi~4TDgntKrILFf9hfM5317`RSLan)^87g=c9`cAh%_<6Jqy%sW>1*Ax|1js~L`
ze*cm$4j}ikTPVMWAIADaf(5fM`OPdoma=oHN2C)YojO}`S`k|L0Bkyj;7Lxn!@Un<
zt0qKfu^2}q5@nH{iQc+=hD6%;+9y9r{@Ek7OwnfvAVG_KzW3#Mn$ucuvg|7PHsr@F
zjC+xO`)U+b(W|i`2I@<=bRWwJOTLN)WB;uWbM+k3hTneM6-OdV^CdY{u=v@4SaOM}
z-e%GLhig>3LpwoxcmdpeXV?Mg>lX5a-h~xYBOzO*soY%+Gs`HS2{v@nTLsqf6YnJ|
zq>hCRUQmvZNVWyv(|@ez7M)%&Gws-cBq=l2IP}c<wDr#FV}S?ObMCc+3>oh~<O#%$
zOc#zlD@4mN+`cV4I@K=KvcEMirEx8!AINCaXWJWg5zE`wtG?u0(omOIV4`Flu~?JZ
zntPPq?_#mJ$-el0Hm^gWI_w663U}V1X48%(>XiUjX*A`Of_~Z`bi97<<t%9~lI?F4
z8U&m6)E_ST!gyXWzwaH>Rr{{M7Qm;f^C_`|YL$uy3q`z#J74-wLxCej42d{h-qNCG
zMT|@ltAoF#=BqqS0oDh<G%W<*<A2F26_e$sqN1BHm~3AN7+bmC{<4ZzbfomAG?|{4
zR79`f#hc{Iw^m_2E||()5)*|MT&us3rnQAS@~0A@ib=z>(Od;lI+U2NUw&Hoqwt4K
z>HUbzu<`11GzBXW5#!;jkG@%JdD<+$7WT4^r-=$1zmudX-c|pYT7%n16y8{Uh*W;>
z=5Dmm7ghDr#iX{7ZzttmpCe}k5725|60ju>OHFegIAnXe&b~|RD)YFI%&HfD)#k&{
zXe7Gh-9~%tB02Xv*fZc{>B4Q@(jUA9<HI9CrDYiU+Hb#c-+tDI#Z?XF?>Xq9>GITi
zkF_9?hd5t2=Qu=kF6~!dBi(+v8^InvZ@KzOWaRcwMB%1H9e&x?hXdclu~SygFlGk{
z4I|Ulg|=0E9}V)Vch!7(58G(Qhl}Snj+fjH;|Fa7C1j-o18NNMn~U@JpB6Z%Qcj2x
zIvVj|^P0N(U)hpOHU^xQA9IKEq$1V*p7L)iD5k^?<O$=+MjK*7-Ma3_nsmi+bXdr_
zL|Z)3;tvrIKC~*a*n^z?r`KB4;9c1#gBIyM2NDwZKg~ycVm!{S|D!Xu9g`t=W7N7{
z;roP_Pk3js5|w<E2uh>7NwnJO;GR6u&GLz5Cb!bz_R^7^=lZ^K6`O<Pey&F5`q0T~
z>*NrxhO2BnksG7d9VKG#ftJw-4+dFm2?8>@5UGomH;nc8M6F+YF~S*4ac@wi(d}N~
z)F(KJ;mX(Z<3ncODf|fyo^g0mz;K+Pdc<TYgQM+n$MOP;K;4E#(2=eddDj<(*bk+f
z96}--gHsYgj8D8j(q)Wnv-pRDfYXwpGoq~hu^k6>lrq(RF7xzj`@=I;md&SD_MiOI
z*D0?%zSd|SDA@DmsIhMF>7@K#LwWvV0HyG;-;Yg@fkY-q69gPR_;(AOB&JNK!(Kvr
z+}>!^E0!)IM+$M^^_c2BCZbm!!cr&9-kSc6O&nA8X<I^5y*WVOXS_{`XMo=72EpR1
zmT)~WSGjcalL;~<=7`auVGDi_*6|37eBpp6^i1Cm*C~n?^GU2fPp2r|HdeH}ukVqc
zsvKq+T<6m`zYdi2*^DI1D0?s3)qB@|`4|7sPK6MHGuBx=j?0H#cHk%f3K_g}&pCKG
zvSyghr)WrYc-tBRxWD~jb|#KP9jqBFd|S2EjiOBM$^-lS)DN?PL5C@|aB}r~Y)QHL
z^ey)IZKWrlOlp<-uh+Q80xbd6fp6vl^fSZN-9lF1&1aR`5~y4JQd8og&g7JqHQM@y
zGhb&QP`=du?DY8EpehxCS7_oJ^Ehfs-_I8(6~+AY>u%V;_kU7Gu|Clq^$b?FX_h^I
z_u!Gct!}`?l-b61y+js|d^(My3La0|`1CI}_D4>Yxr_5&M^RoY9%D4Ws-NegNw5A{
zCuu6gaTy}l)n{If)PjsL^B0qmLElHv207k~t~Q&;|1cl<F3zo`3gbJW<s6pU;m6n)
zM)Z!Et+Du!Ho_C{_kHI#Yi!^NIb`I^N$nId=2LMLjuStSv|VqjrVNeVspm~vd;2W;
zK9qNPN_U#dXO6MLP*I<w6JS-+VWT|z9qVl)<a4XM$?6|_n$l@`om4ZfB-@&<_Py2B
zq`IU9$5oBvooAjDJurw1ti|)?fk_eN;qhzi+RV69Es52lSuV54+A0*M>w@N{1I}f^
z&U+EG@00vSJ5)Gxl)O7Cj{Tjz*rz<&KK2=HpEI{j=~OoESah*$-Rq(Myk;2#B`rNx
zQx-WF$O#(%T==3cE~Rt+i-3!2Gy0(jFXJFV)8K#pc`LpE!wI-|%&h!B+4%fIJXT)r
z-Zmcp^hD%y=8Q9~C{fhjDJNP%on}i4>r>Pf=E~IC4dkdD40Mz(l~ph1FPN6B#lp{8
z1JZw4st(4e$4583JiU!x!ISYQH2G*A8~kK%dUv#_h32|?Hjp}~R@Us}glPI(?-r9b
zvpN0oxvmfA4oBVvZ_0k$F3jwOOfEc>@?4m1@oJhJ8~rmet>VQy{%Ooab(4uimD*wU
z!Ls&~z_I(h^pK?3H%C7p31gGIR?`ngjonchPJUQIgzr81`Jh_+%{lU0vnP-H@Qr`F
zk6B6+oLnay*WU5szEF9TBvIbCQhAct$Z;%25ma#R0sWYbfz~Pbm%8)|MaI$xdRn9-
zhBZIGmJ-T;(g`+xls!FeH_qcSV|Kl!|0q|2V??bKm9ot9#aJ-6|2@wa`t&c8OXFvC
z^E*`o#x=@3WA(N3$9+X&-ajqqq|r#>efL9H_oGsXPfnW8`^!u43KmzFkyKqh3+&?I
zW8LU>fzs5vjWSN7&uwGYx}xLnM;_j^m0e&3pWnNC{j{mRt*JX$_|%{H)sKnG-rBaw
zCAWvAuvzYzCj2cv5}7lRvpk6>O#=u14I85A!Ot06hi=dI*9Ok7wyzHCgZ+cO{jT~q
zLu6?V^Xgj7KG%(pxE~kp42sMh?0PVIN`>6+4lNA6XOWJae;M^?z2IT+Z{?fML4i;9
zD|VK>9UVWg#lG^KKOgxs<l*>}(5bFDSjzu2*sq$UboVBBSx<neZNYpqG`W`d>G8;R
z5#{*Rf`P1OfY<a#MrY65AqI+9-YqAc=R0LX`&Vw`O8q5f>LiozS&~AZs6s0+Ax!>I
z5>MZxlEplTmsC=TkbvrzwQ5-g#ES$H_Ao$!M4Lx-<2V$epr!JRK#PRjG!62V`Gp!w
zI)qg%=~q$#nhHt|+CLh51`(c>2A91mQ1aKJsaAPneFEA4%EXLak_I{Qmm|qzhun{5
ze}QxF0f`HE>{~A@cwf83ViM#Nd)QtEv8vo>NbUq`5|K0$wuF?bzN>iBcS=VBRec(9
zNQMck>Kj)Tfqq|c)ptC^iD>!{Nc^SmV2_X{z3WO=K&NDV;pdb8qZgujwku+j1abF4
zeN_G&@(z|X{2N*Id3FLCeKzE7Jwz4X1MZlmlz2Xwzz-tK96)04uLMCJPl_-jRDm8v
zKsNRvIvwb$Z`}5r^=V8X0|k4|f)uKP8BMesiOT<Qp`z;J`8jy_NLrhO)sqx<o%dg;
z&Avga`mK=%oy=6gbMPU7MV&y%&EnV(rCyBZ6p-{Ge^ck0erJ8$I3R)c93_6~abD>5
zb7*7&$Cm^WbRJY4eP5ltdU}_;iRyU;59iCX>rA4NbQY(a)X5U)bxMdxBB^xq-r3xF
ziNmX$;^#iV{89}P%^~=KL#KTHuS>&1{_#>ZGN1T7l0Jx<fBfU)c7*3*g@5$SpSMj-
zO`)UDOsz2Gp!nj~QRfbPkjk(A@lr6z0J2mSHk}^<WX0^x6HIbsV(}ED=+??)cOw*-
zqEa~Qsh{U{_LF=KfGM*jJxJMJZhSLJTlbsj4i4Spm=`EjEI8!QJR*5DvKl-Eoh9@a
z(+o@2#EPs*ieug|ojfsV_a*}5yv4o=D$WwgB3IT39FGEhrfg&`_fP>-^x_Z`i^K*g
zMMJ(%9IzqhH<-A@7Py&j<3@m8Tykh75qKMP4W6;i(yBL?$CFHS@>G>UXPY8&#h0Vf
zU<_ih*aR~@J^W$YgI0M^-#euI1?&R3HeyMtk(8`2&#AN2A;}y|LmPixeFvvGm-rv1
zhD-7}NH$Ut1c5?l1|BWXA$YW&RUCg&xj)Ar$;G7qnxzou51w%%D%q8SjhWNqFvYc`
z;}_r5xnKUQp4sStqD`XkMt-$No=S|wVKRQsw2A}6C@<M}Z%XwukNuBhRz}3FS(WM^
zM$u1fGoO!$n|w-!VG4&K<6OCXD95kk(brs^D;v{H(J_g&DMH`G_G<%51jY(^H>xIQ
zvZnRWiXITH?oZ8~dJ3Zmk+?|o2$8TUFB6CtB-RuP>2`;8&&j72{XswdIaj(mYP=|O
zxjh)vNP|rCB7Mt>20Ix%qm}N5%Cs&G=d#@LZm!y>{mnMgt8Vzk_Gx$2maCg?HlLu`
z$J_?X<5`xApDd0OHRx-oJ~%?=6RN~BI&m?mbcIgbk|}yab$qkuz#ZU{vRlMgv;Muw
zSEO|P!VbPhMGD^g__q%S{I~n!`~o~yp8vG24j3ZtfCimb$ZeTzzOmLyy&wXQ*m_!w
zV_Z=Bl6hrT$PoL^OdpNL<zAD8+If|{A*)k%`#Rm_#RXlm;BT%k?ef^TzeSU|et+`K
z!X+MH#o`<seV*W3ZRqkd^*AzNd!)5}9rvx8BzmhYw33IzBDDPuYQ##6ny}cH4$CYj
z52CkTcTGsR2C>BRjV#G!t3Te{D)-9g4^#J@C@1?)%}2y)KTM3x!#ShyO=rWzilzEe
zg=!=>QPbe6M7Nm4L;ZC=|7w)+wCCtR!1dZ<x87`VsG`j;M3zfHamx?q>90yp^w}QU
zukjp>-t5acb;u3tj;}@oqvu*PvMtiJ#_l~BmmKBcM;}a+w3D(-%r(u1RB;=s?j|X+
z)nhtR_-V_$AwCsHf5~vP-=1F{bQ7gZ^w?b1$u~`EEUm&~R)G(nr4~z&ef3p(FsqA*
z;nxjeJ%essd10lywq;ECEC!!`C^&UA(Uv?~SN$&ND;%F(ArYq?UhtOB?76`iT5^IS
zErC-!XE4Uw#z!!9%+K4a?;q~%{QO~_E?m6n5c%hO#7jbrFHt=BW1WTPz5UlepB_Nn
z+G*BWf?_PT=f0}C3kaE3+34eBrRSjj`35yld47%J7K;6HpDwV{X2V|~KH#g*Eo-Sw
z<y+kqEkeVpVisZd;#>y-yX+c2ZW`}c+sVP6=WjpV?}>xu5M)Dk^R2$jO~N$BE<Fp>
z1LDzRRQJYjgUokA;NP_TcOb4DTWhHcA|bgqp#BeTfbj|NxVpP|x>&h5@_5_0d;IIy
zDgL`7_3^An@zy<VMSJT;MEmnEA7+^3U<6tYk3o$cn4X(1P(72==JBgsrnVIO0W;nP
zjHX=1WSpI4-q+4oQ*p(N=Mir>{R`ze^7X!wi|C4*p3%$Vc-cUI@EDuh)1Bgw+pQtq
z+q3ALVE@x-EiKugi_PC{%>jpN*XFm&7h2}mqeiQ*=bJNbmMELnL#D5Pxo9zl_+Ktv
z^Ulj&pLZ440aG`(=H{A1yzJMjS6A*o&F_tdsD=35ULBZ)obO*9+z&ZFyE@PbIX}7r
z-!VGBx;iikIX}2MK&R{Xbi~ejC@tpd?jX^KHh51XI=y|faPy2rtWAjC0)_o`5sUgF
z-l*qu?99h+;`qZn)JN~LxhDBZ^x<g=Xt8Gyhm%A9!+$$e*ES)7VtrCs))?#=#mV0n
zA%~tx)S1@VngZd;+@q=#u1Pi$eJGk$>g*=Nx7ojM-*u>_Z9;Ix`UJA9k=ae+jweX5
zfUNyL{<R@T)16S$T{dflA#){IqEA|^@7gmd;Hc@-jXN6q-$-4PE;k{kix9$5Rfcv|
zhN5Jt&}1ofc0VL`zt@@vNSX(HSu4obS*0QNe=E&gag*p{5$jv_Oj34D>e+<EFGAvh
zxeir^;$*33$x@o^ehT2Fvy4vvrBs964~5<DjphNG=7CVw3U=m-gG3*xSl_5;61!_s
z@g_uT5u!D!nmv4(bAf^N|4Y|5Aw!FhAt3Eg%?8fGlcluS{V>@5vNaFzG!LY*R;V*q
zz$$=Pg8<tdnN_uBp#7^<AZrCZa|Og1gtgx@iPAMGeG|gF2;m)7HEUNjD@tw-O>PFE
zKxX&L&^$oVJb){-@K(5dUy?lh{m|oRKG0|(b8oom@KI1etNh-O&oTZ5L5uvtc-@BN
z5krvCLIDsSJqmgYgrh#ku|TK?gj<qFW<XfJH@s<v$tZPhs?6xwII)DODLe58b5M2y
z8B0@cf*5O1Zh{F*^Zo=s*5Lh#`&gRL2_38fXeog_wuXFZoILh`Jg2$x1J6b;h?+f{
zniq$f{arOLZZ-RRYF>P5_5x~NLTdIRYF=V$_7ZAdQfl@xYF=_`_E0r11vPsmH7^x4
zdo{IHiN^fV58=AdWZklSU1+s#S(h$!RJUwd7ka2$hN=f8)hlDsg9_@E$?HM&^vbOC
zpdNZ<;d;<yy|R2gXtmz7Ib-a*(GSad&_g|NzZpuZU&f*j71S@2*N5uqms#mUJ@m`M
z^`Xi7W%>HhYW=b<edwru*|I+LP`?b-07_~gVah0-JNiN10IFwDW@P~NFenQ*fF>K1
z<r_e&4a&L<prZz5%LdRxgECY@D5+r?iy>6duuR?%s%KbcWeD{!lrUr50T%KNq1A?E
zU53z6!?I;V=%Ha5su7gbsEox3Dri(DZv@pdDzh?zdKi_38$pwe%JPk%)kbAqM$l0s
ziARiCd7~dtjiIE*Wh}-}LE|!cW2l~SnUyir!?-Nm7@BNcmTwHLHZJQjhK?GSEgM4*
zjmuC?prj^cEGAGv6A5!h4G>8y6R3wtS-1%_*`zGr1X^uU)@1@6H7Q#*fgYNap~9e~
zurd}HR1j7s4}<E#%B)~e4_H|^44MpUG-bT*vb&v#zTMai$r=}UGw%Ms`)vG14nSep
zZ*SQDKl~hi_~<LSkdcvB<lMM{S?*}d7S~3_M-*I|^7oz32!7xF^zLip6Yh;qADMCA
zl)wK5t%iN9hAI93pZAQ!pKI0)KA|3X((u3f^b1L?*zo*ao;FgR_P_fiG-`<bKMmpB
zw?!)S|7O9nB{S^*W+AZU>e>Izf_sZ8nhWKl3d-C|MK41xdqb}O-RGu%5N?)p);P|a
zakc;5XRBGfeDOoO&(CZ>>;AJ(ls$SgUWU%M(G%c_;JZu52TZL&zAeGeHBbGKiRa~-
z&F)9|5LKiTE%AK$Ev(>6_{X1^cwV8|Oi`g4R$2|a|6hGhnOFFLef>Amztj4Ue-}5c
z82WE5=-7S^Iorx<y}E7jJ9K$GzR;GD#t?k9f1_p28GzsBOJIL{ay0D`SsXu9v3VOD
zbUqNjH!st2TTt|o_xEisY~|FY)$ihLb0=s1=B%r@cwP5)=QilF?dF*A_RpnD+vN@6
zLf~c7UfX3?+trrO?QNTRm#mC(+fDyyNb~vHj`_{?=CV(YOl#2X`g+KwdF%D6?CqX;
z$nBb_?A5x9Z1CC9QV-!?_HD&N(CP2CRMEEUvlEx0!rS%Hg%4Y|>zjL@>rYV4FVC;n
zuX=8eH<xE*udm;R+^o*{ylaSOlnH$D;n8jCLg3l*5%1N>=K1S|tA~mXr<bA&H|yrv
z!B<B|Jqyy;M-x7y9k*N8#l`V^A-<<OJ@Jg$;j*+Ge?pcjLP<z@<w`5&kPEFT<oZf6
z$nI7#X)oMfG_@7-qTn1aW9a)MY5!UXH<Ektg7V$i#BQjr0PedLeN-IsDVmasHayO;
zL|WZ*WR(|tjAl%%Y-S0%=1uZyecTC2dib3B)*b~1luVHl?($_)NSuGJ*SHG4e8JV-
zdg`OXnSrkBUd9ypvi#*(dV6@Vx2W$4VW@JZf>{R(o7tj{c~iJ@ANOLS9zKJ<^`Yoe
zo8M({s_0sYvS=>>VW@hhjrn~xHnTf=;5zj_?mNkP_yX|j)}G#v^7jniK11sLQp{9w
zhm@2z0nG1yku^mEm>>1sgHX}mPc5SwJ-fD#kiLIme^S8*u6Yfvu>{w=?kkN#T(kc#
z*Ia>XimU#MYpU+qav?`vxS?(xJde&lS@sqekY%u8sDGNfimJPuD9L@e=<`^1`IAF0
z=ATU_tzR#c|LmJc9rI-e(zr;+odz;2w6I)K*MALEzkR-bbP$;_QJ>3xeDUhE-fd_r
zbrN56qWHMq$5s}#E+Kw@lqGwqKfS_iIV$_tZ{GRkZs{JQ$D*?gr;reyN~lb)R=jT#
zulZB}K81f;1^DJY#i@|_i@A3H$-}^lp*6}zmB~^@*LdFxUUQ@%d^-Od_%(EPNGX%}
zV(gemH?F~)u1tz@{t?&-6{Kw#1Pw^nUjr7!Xy1KtZkHa!ERQzq?YZ3~9=ct9x=}F#
z#gGg6!@x6$%<+j9_K`yF=Fy2w-93xq;CAUwwB85!6=CxC;8%zZVt^}L;}4O4=aL^R
zh4_CN4e_I16NYV^x83}bhGimaKNhWFSVuB!yn`>v+|f8#_x>5HN$B2I{7paOeCxwy
ziT59nR(b<-Q+1GF_I`!q+DMh^y$^p>vWS))%q`#S%8o6cOfZH7UThW%8&~6p(q))f
z;e}Gbs%)u{jM=u(x5%?kT;v|Q=f&2S5>{;K`5gE4U;K0mvP0fitog8C8G<@pMe1~N
z7$Pn(+AVcE0evtXvwm9{bNTt{+32O4L1ujw<86Op2G`o3HVT-#jnqxFO;kf7e$&yi
zmj6-PF2q9iG@V7z;k!o&PYq<icbBjq&x427dsBJ3V^cKi1M*7mcgB3=n&Bi_dDM0R
z)Vay1pbKJOPv+rTba!jEgiq)&d)0TAxE2{<_dL2}uCb)ViS2)*iVKkTZlD5-!^4<h
z!U6M@EV4fbHOr@D?#F#E=a;#U%VQ!Kh{7%Sebr^MkTHak@n&U+BH;QHX0Ox+?|jHU
zvK>Rp<W4@J)IitE(+<lVXEgAJT&57uxu+<J@x$iL><Nd&YTHWh-p3p7y%gIXjhACr
zW(pDb1;qIXu?HCtFD}!4g_TDNk$vsc?q&RR{zmvrTz(7_KQTwhI%q86w;lcmzeGCk
zt)6!^4V7D?*5{)z^U<j0NU*j}nRQ@or%fj)el{x-NFL`qdH67e?C(9DPG|xSieo(}
zfrFXl*{}YlkwWB()0)QVTr;Y@Ak^Ke_PMM^QOTh;QH`>2RSlT2ak|KiED(xx%L1WO
zR7j}JGc$&0>2o*M9oF*xR3~x}XmTrZ5NNKhyX^u@E^%FPGSOufMr&#?HMr?J2-9~E
zrtgQ^K<DYB>HXYSS8!Kc`hBl6YI`Z+fh*%##|44&aLNkmpbVPbfjL{)%%8Lq1h(+F
z)iNfq2)e~E4nrUO!jnbnM{BuH5O4q?m<)}5Q5^)J_rfX=K##=k49U3rnnL_)Q+f(T
z>sHjZKlp}M*|zre`Yp`9FYV72V;c1uoA~yR<c@)yoBjp16A)K)v@ubl1oQhAL6~9d
zqqoP#4}bUFPM7aw6`{{yfuYNFV}YTEMG=SEU^HqFTpn2yISM&miB6ngx?2||{J{h`
z%3UG^IC4(ul9A>_dx%e~XCHtrE}+-zi_TM1Fuacg-#V+6EL!vJ1YO<DQ>_3?&HSwZ
zOMZfZr~pd??vsV=;hIhO2NS4mY(yE@AP1m`3+8@tM)QC3f_yIx7^X&ReLS-eejuvd
zcEc=e&3#0<*QORLNTF7)gVm4c*+zG=sj}2D@VM99{pJnSnjgqHSGc1{nsm;@UVWl)
zxliBSF<?pO7|o<?J5Lpz8=2NjO@Nw4y_GG#J(esly5LqB6it^QZXFm6_M80~fw64~
z?M9`Z7D30lsMGh{9Vl36re!EtX!)+lc7gkQMP1oaFHqO4tbRS`b&XnBR1b<2Jf|Q0
znJ$KTg%Qo$G=L&`yyAMu^CH|y9O%+oi345HE_b-@2cX+G9mw*_;w`SYK=RkuxM0uq
z^HG9Gz5QL8KlJNvMgRC3EivYdHUd7{2>9f};bV$`k2MQHZ7hI=Q%o#?#WWr*GJr(`
zfW^wdfE1n6;T>hO=cDG$ESk7H&-EV1iW#$Q40uf@v$!c+Qy&z4nMwm|@P$7OticOG
zZdC5&U=RA6qijc}{7RmOwK~A?!x$Z4xE3!T2_zN|dhgA?cSi<;?=>-$XK28Xgu7|L
zke)^fgU!;=K+tq#J+Mj37+1>+RKsF;fhr2VIZ*ZVpg#esZ{@|N34lv70RrHXQ-}_v
zkYO;OV)jV;kjFDV!L=qpF*3#kDB|E(BlSl#HxNi3tl&GTIrhKZp@qk9nHCX0(RP8Z
zS<~o8{sJ3E_(aMx>IjgkBS4w~2WbNWq-QT<7p|wep>UtwP`J++^ndf&``Gbf;>`LX
zp7;SY_vROUB+UMPF3D4}POyJJcE!>8Nj8YbB=7Jc-0~sZTDA+w&zVMN`MYn_-gm3|
z2dsc)16Ucs_*&aW=tRk^Y)e2*nHQNxM{^G?4ci|?VMUd0I(0HlY$gZ{Sgbn;4A?E|
z5}s?oOpjNHrsAE%YjzM2+(tlfk`OFftoLLxyPI>-vh`a6keqv769AwL^3lVAvRlcL
zT4w-YWc16r3BZW-OFbM$y{>Q=N$ynU_YkdELo{m>L1>L)5<zG`;<3PS(n1j6k7weX
zy<{DLAudq;)fa=O#=3tWuTp(DV5_pYr*hSnaIjW7frZy`lXw18VI+kk=cjH8fD#sf
z62jb#?KQN)T2f$EF@_YFeTl~oN69Ij_c_({kDq(vLnoxcAOU=pS^|ZwEQbB6@;hJM
zcgytn+;5u!IYTFUfxvCI)K?(=8B=^#`Caa`&oU=IcVOo*Ztz49NDsTEx`1>(#ttqO
z?E%uIfgO|UsbE8p(&k^=9fOqi_D?xO8n&M@o%az{)ogZO&W_yyC~mL(*eW8^tf_}q
zEHf;f!@KS=%F|9tPo@Z8ZnnVdboTsH0Nw7<0At&C0SlEwJ;Q4!^!Rp{rLA-sepcCA
zK<d)17X+lV^FX>Em3`!LSvMB^1L2wd8sWKs5qM6g{mb*A`S$vi`${DD^;gNNn&D^M
ztUr67ftCG?FByd8Mp@^gUq7iS2j6j;a_}9OiNq~9cI`O1Y4zOW60P9X4(>{?I^8lZ
zK$=(=B}fo1kGrxNy3%HNZeQ(S0u)j#V*(jZ7a<&l4N+M#QDSuuZzyMo5LhBYV2KHo
zrumOi($Y~pqO`7`oIqiidh7`2BsP<PldMQTnI!geF>m9k0xvnNW4QYNXt~Ts<hMLn
zE4_HMELb(eBqH)epq5pbcEvsJV0*M{PA>v?MJ>_|cjXv`aMcwh{k2o$A~<5)tr|Uy
zF2l_VEsO&8%N7d-;C9?`QjdFfFur}@1l8TTJN6GM%>KpOB}@zI)0yf0;&}9*tH>6G
zSv#01-*I7!<C3*wV<`7{CN?@FqZ+znFY&%E9mZb}5ji=%v!;0-Bc`oK|2#^f9SF~X
z5F@X~uTtiDt%kM$zCt&9NhyIs7snzL^$~7Q7KXgeMOoyrPR(j~k^_gp#eEGg4jL2`
zN}7#sv0Wjmm#a)1(}vJKAu?*-+#(4we8Di>$Y%Ap033|D8>Zo@Mj+atvIL?HJex3F
ze2*czQ);{~%CBQ;stux&9PS7R$ZL4rp^-oZ7D*)F7UTEn9PC~Zu#Re5>qo!Y(iXDD
zyeBk#?K$hfN5;4$_hS&;G6G-Yw<i)F&$WL}WXiEJ?lr5&x4~cu{V{0Bq*iplrx(cX
z+ieh;+Lt`ssh_amllhVj>CEoUpjNsb51{%yMxw;(6HZJ)v(+iND@+jse$~%PjG;Iv
zM8z4NS13Wn6OMw5-hvz7gcCI<AE?S4_#)F`Qm0knf!Cx-D;iLHBeg3`6+_6+_JWVi
zy{JQlnv`d}!=9Sdm}3Lqf7XC+o8hrCiKX(2dRJT(3#_bbu!^NpySM+izIf<d{|Zx%
zeJXM9i9A=3!eg}vnnb}^F|}Cx(m1gPvF%VMm&xVqXT+E?7*F~m^HQ(`nZXkVQ>aID
z>7&!A!y=!Vwe~zhXBpXK$<t;2@;uW4qWc((3j%wLMuFqc%jiQMqflHCq4Hv%*}W)H
z#gCY0Jkj2d*tqxlo6OC5I6tNg^vT0DEFNIhBZUH3^+=-#i|lUbA-u%vE-Fy?nWZMM
zB){@qJ@;lyIuiCoH8-hA2MagW;|1dh^{Y-inb%K77ZNgtS=@_0scr)6pBy%cjqM8p
zt}90^Jf9JMnoiT~%<IiiVz<$$(N`|E(Xq%){CLr&89uUk#7fOc3Ik!5;QRo>EWz^u
z1@~+7HDLfwH`AGGxsy0V>Q$x#oo=?`11~yQHaZ239TU<Cb&SUT5^SbQm5N$?bh02O
zCT(l7CI*jN=tmsVwh&d8SvDJKwi4W^RzBRQ7AkIRjR=w?zEW{|Q(r_A2(RY1IS^jW
z{<(H2zbLkaR)^S;fM^DvsC$u{N(L>@xSM?jt+9RiD$3+jKAA#|^wgXJQW@nzArj6U
zV3LF<2blb9f)s$S^y@^km`GE3@H=FyVm`T~Fb#6If%ZkE_Sk2XNdxY+mo)=b0v-|X
zflu*o<G`nQ|9CspYKN@dEIhIP+$gaa>I-I}QqT-$p;FU~$4%yyi{wonBkmAyW3z@e
zgIE?P#IiVrMLu>WZO@j87E?^A=+CVA0yk}fFkOx?T@I#m3Z}F4`tX1wa-RdS;ADse
zCo|^QQbOLoOZRHy!JueS;y!@sh>9P8>4?1_fa#VYTo~J)<fy^2q`IP>pLhU)mF15d
zKq?b%ZIQ3eyWG}Kyf#XS%oGNNb~$*#a_w^SqTt3>KSH|1>sdcBEFdxjA_7h>AR^%5
zf{V=IBBrydV~vmpyV!cncD547MthrMx(_5$XJa)1O7Kx99fV{~oy`ZbPa=%KRJ6an
z2UF4Rf8P#eaiVV5>>_^I`Yp%`ioF0Lk(=TIB9WWs0*?eudv@oi=dBk(RutHTEOs=n
zQo!pT=wGEp1N2Ubga$<|k3OZe)uN&mAKfU3iA~$usENS`AZbP37NX19=wB0MOW_lD
zFCtdUpyL@Qev&~4#*+ocBL=<R9?Y(kgo~!=;i4&eV~(|X<ZVv6SHaG9TJ`keqs9fZ
zacNt|HM0cVLO*wrw}t8QgBk3#eD8>lQWZ)iq-{}smLdWoLln4Z(POyQHpNxJy@+2;
zoSA2w|A{y=h<PgtBIa05>dRrSP<PuRosi>fC7#a(I(>8Y5s}@~)}bv*R!5cBh67=h
zvS5R$OfiBDW<SLUl<%PeWv>~RVLGgQFnzC-5iotPv=Ml01OZB3iJSO+?4LcM6~gSC
z?ak<>vvID`@5!`rw#a=wgI8JX`rXgu4XUNXiaJYTl@K@|AE^=oxOKvqG!Ub>j`<$O
zCjf^CH8mU})YQPE2;5_AZ|jPa17sU)Od;J9urY;TC+HLh3$~%MA!54;4pXlsJ8OVD
zdK(yUmt_O9$aSlww#ZpJlX8+RBoYC;oq+Q#0wZtX7#V<LBzHpe8y!|WSmLY{WiXAb
zH07{JrD@yHEU=10ALy{_0Cu1NJJ{p851;@$+F-4~NF9Wr@%9V0Gd^#WJL^G?;jl3U
zIi|$M^k3)5oj33%)&wFIlj*>%%b@hYiyOv(0n*4@<P+*RtqPad;w0UORAGfk6;|+6
zF#u9U5Bt8@!?qcSdR(SMgf5%%1Fr}e8zu#f!&_u;nmBE1ACVhetx13btio-81FX;6
z1l(jEz$#gsqHLW9WESXg>pBBHZkRLBdkRD}aXM|WZ&{YYR@ALh4&=aHh_M5?%3))$
z7!$5Bd9iO}L*hx|R0f5VIF$<uC6suS(Qp;#Y(pPK<`eJybW~?qih%D+cPM;cx<mg>
zlbNfAC!f6&r!ONz2UIhq&tpkCtUgv`6fYZBk(ypAE%yx}WnrO0>}X<BkbmgX$EG1a
z0~nEQ&-SDcEq1<~dqcY92`s;ImjIUg-6bluze{6+UgnWm(VD_*8u8KB`RZW*yslQq
z2k9vv*?UzbD<?#p_y(-yF2^k*72KkLu|5iYB<{X$XP_Bj0JgH^w=%GmCHu?Tp*Ih4
z_SbzN--l8&v5defTc&V<Rklpyg6~!3&>)E<-`Qa2JKv)-9lq$S$v^P=VzPz`mgx`)
zbe(kjv@<trEZb4=Qs51QbTDrqbm&3y-cre1SdYrWs$+uh|CwR<{+|g2$YBf3lBn8P
z=NpXZN)Qx$b@Bd``$;M5E4AHjX0T2!NGB`Gb5lbGnb<}^(<|jY(DX`s9|}f81Ro8S
zw?XY{LM08n9+=?6>wyVAK-?pw$x@aV!3)S9Y>r^4+`6@3G~BRSFq+MuvfE>ciq>)>
zH<#*EMDPTG_Z*%e@UXba4ufU4`w}H&Z{66gfZmwS4bU4ixdD2=*<`oJ6P4Or9K}gL
zg8WItX$0a)!(#;YhL;`V$(Bm~0{e?BZ1~=YMeL1O_}<8yAB={_x{lnPtr?J!S)F-M
z^k+@x0U7ztAcHXZAwkem6OI@Gb~s`L*un0mJ+0(Y-o4`Pi>!pW+pcMXd?U&8c}25t
zu0A~S@%)Eq>7c>vXtBHswO=-uF4_%5QD98JIOM^YesRmgtFsHJ&Pti-On-?8IN>4!
z9w1U|2`6mAQOcVT>5be6Y#>qP9Kkiti9zc45IAYTN7B;junL_dhS$4o5FC}7Z7lAU
z5G}@=tB%*G-qwJIh=OT)q|gFzc%;$7X-ET{hOAj$mPWV&{-UEI4s7b!ivxy{IdfGx
zWI=|aT(#q((wP8K4x5b%NI69|Du7`)pCK5==MZ-$sh61!p1KSmRe8b~0EgHdlts{l
zg?4wQW`xWPAu~g#c-erC1ScPSJP+Mp`_$U$2=LN9Guji=*TW_FY`RQDNn^{4bV~hl
zV4ZRNmBvgj2XJa-JqDawTD#_kd84})cWihb2>ICs(6EkfSWCse+1e12!Uufy1PO52
zEX`fEJx8B>YnrT>CLKNctf;1rNa!x<V)iq)4QuCvK@m~4BDdbxw88*#uW12Y#Yde5
z6y)@wtm=^D%sNMg67#ahn7(q}l80+<ZY{2BMTg4l?B+_=j%NzU<8Bg9KpuCMsMj7I
zKmoLKP2^U;vbp+EY?8xw{*Ou;Uf-!dVo=gNd5?5T6Z2*C1Tt-=)F(tj&6{5&L4wa4
zj*C9W(f$bCYPVV1qt;1BAXdD)wgixtuG&Q?QysReR?hJU;&_YQDshh&d|d9fwr~K6
z^L(}j0D2w%*G%&G)0?H#nBh@}AfgU|M;)h8C$tHthxy{;MXUn^4p|{xIAn!j0J1oZ
z20*BsKVuiVs^Ci^K5Abe^&)M{zD5e0d!^MRG~~v0wjpR)RWpJTkyl<J^2)1rXqO}9
zqD<GHh8A+w2y!5j|Mn7y<ojO&(KcM<h9yJlIJ1xx!3m_A-%@~7vp=OBit0qQsM+;r
z^F;bkoY)NHF(_vR05X)P0tFYp#wJt}Uzy`V>QgK>Yal3e5xT7aArY`vFpma@&;XpC
zyqVL=6$M`^_&%2c)Xlg?3J}o2TI6j(x*W46z6?GQP|o#0bTmOZ*Xx_xhyYnhG&D<T
zSuo$lZR)jl=L(`;xg+Y8J3y>Afkp8W)^W9D#@|v8c2Z|RLMb@wK(V6Wse_Zy06;=}
zN^&s2MPMcg#_D`SbtsL~=|}B=S~;<{n|1NOY-P2zQo>dS**`yp1!VvHG?r(PdAnTg
zA3I0Dua^16Ni{*qq2Xi)C5MKG9Szv*gWKFVc_^Im_oTzRa|4W@-o_J*Kg-7RU+V49
zW6fZ!&-Xk4E3y82(g8K55f@A@Y4g|0OM@kqtT;nDp*nTc7Dgk++`&pkL`t9{({QqY
zNz(AJp#ED8oJ!Yd6Xv4qYz2;4Y|Me<d>eBMrdubBv%~0Rf{e7-1{QU&TC+MuV6|pV
zis1bMqR<ajou}wxy#=`?Iz<EImgqDMc;T^ylf>aoTAP2&5r5TrE!jF<EI>T~@q7r>
za?>9ED=T3k+nI5^(oE*N2WN@YlyH_vO$k^c;7EWa+E?5DSF9A_aCDQ_)}1LP7M_&4
z0VDB*bpuB7FAf*oM1t!Y*a7Xxz#cbmVb_1agKgk03bo8l1SG0>1Z$3^sd~r!Oxn^1
z@V1mHNx<92sw6?h25d+V@V42(Y*)ZsKdCeT=K9ILfgZFmK=f2h=~~43<R3vIhyaO*
zv&fCKniw;jywWAY$txW(DD{BskjE+2JgnxAjUWZ^Qu>As;HA`$4TslXn&rdYF(ifv
z(!zxxEnINY;tnS*BST0#*#8~vkp5fRVXO7`w1WuHj_<RZ74sg&g=w>#4YWR>uFauO
zrZW0q%D#8MQw|c(td1c90)}vAsv9cX#$p-#aYe2kq!z4vQ;=G)s!g%Mew9Jl9!>nx
zd_L>?zvUkEf6qM#;M^lt@tY+`I*R?4@ZJo=LMv|Uyx}G4(p^xP<J`$XVIFiRuN)Sm
zMXA(MCh7S2t(K0&P#(^a-{-;$>w9FtNO6%Qy&xldk`@FJI|!5B2$SBRN1D5c22AHU
zUT<wkPJ9G%;y;ib1owz<%+I+MBe?;Fw>WNr;Vtf4VAw19FM=UjONR}oWw8ia7K@-|
zjn#w!UIin2$zS3kltJ=T`j!uzD)r~LLv>u%yFSu29M0f~lguO9K^Krace!2QoQ3c&
zlZL&CeC+W4Ap_B3X24s_*nr7Y7N6j>6%}K!5cT=oU?J+Oxv>F3a+coSTn~Bsb>iu0
z{dHXl9rgn-9Iq5su<N|iSV2oO-w-X0UZ6RBbXIgz`Cdm^46ulj{7k?iN~$vf#X9~e
zy?ytNPq5jFiZ2lP7BmBqZ%s2?Bq9Su@xe1p?47Z_85zoeBr^b#tjy}OOiXdmR!A6f
z<GYe|)vC9ua0YaH^RIwzZ}k-xK*&zeq@5gebS=5>g)4&8G$2S#1Dt?7ysjJyg{WP!
z{?_DT?|cQ)67#AeNK1LEiXflw9(QS?R&AU<I$`h31?+@lRU5FAl2vWE>=MWXw(64I
znZE<L#^~AtxW>S2;S2;5Fc3icPCsN~!F%3VM9&)w?|HkY2t$J~Ao}inTy1R-I?&TV
zbO}HPfxrmh8AKk*n<hc=D2R*pwiW`<FENPx67yGn@qkNpWM6qObA#R_MwbHgCNVGy
zOyE%m;W4L6oRk0@WC($Sj8SlqAp{OGVnLJf7Nc^)HzoTza42J68c;B`a|S@co}4p)
z%z}?L`BYBr`owxL0vF^5-EZh1Kj`+OcR+PSNiB?!{f;g_rV3huzGXR40Q4=(BLeWg
zg%-DRA~Yp!K;t~a6|}V@Dh;5m9kFkKx3%4%C%)rzxzoTB2*x?9BLl`cYa#<5=O?6q
zi}MBbPZD0yJEbhmV1{El^I-mCCi577iE&isPU6<o#X!$el1~SEmXc~Zc+X-55?O+z
zETacoAc&fjt_;wUg2@1_#!pC1IK3?Hyfe-f+1RHb;PEK|0Cn+c0b!9>q7;imj0sY0
zL&Qx)*&yw#fV7hg(#{G<JAUw8i(5J58)4@CR*Q|Yvk(CQT?7DhLDwrnVUdHZn&NHu
zGt2N^1TWY_3g6Pf9#ZH}haYZmx5MGFu6-{;9*A_l<pPmTf9}7E1h!85tSLLo;mENu
zgd@ks5L8*<u{c!dB1m8=a-Rntx^oJ6=*}qs9%IqrSY^emKDd0)*?}011!6Q70CHe7
z#mFWK3%6B&fOHaJ))8UW@n5CXiWGLsZ5t6^5##xV7|$>G2^ocj7P7;UhZtq&61?`V
zy25Mks;forCt$S#nbT|LJ*VW%DMtpSTE}~zl(JIvLfA*0m$>+!KZOS1D{mgg|2}T2
z*><EXu%;=D!PV8HFO0(NjC|(Iz4#I3;JJvs$l8bqRITVwFBOyU_#b;JCcu1S(Psg+
z=32vwwjJ3KilhidQn;c3TybM9<lEqhEL`u55w3T}2o8UvP<J;yTCuIYc10H6fnjZM
zWOP$nc><E2Zt3Zoo6v+;&u-Kzaw=qlAn9k1;UxV`0FZPt&!@;ft7@;`1_8BJjtnIR
zEAugZ<!noH*W7oP*!5gS2eX-KQ&XCXeL@FR#d$>%2YAKLa2s5h7jqU;`9<|~y=yrE
zY3A=vDJhNP?@Cz&ER=3h=8;LWqYM|MGXNwXagco0YQ~bpL5EI2L1Wv5bh_DRnj`}I
znZ-zA$q$YO;;N{?(ZFC8Rpqc;09w7C(blXCdO4)i5)pbnMCkb}a>GP0T#G*nT{OH@
zsK<dbX46PGV>U(SCUX}>I$imem6NOzkqpX(<Tq8Yl#>0baK4NTA5MzY*Kd2M*jk|X
z^++iOy{|`FacCq)<6gX^SK;8!+lOk*<)GUZ(lrEqsu0W&^r;)Rvb$rcO4br0Hv#Ie
z3E&RZqu~zKF}cYO2xNErQYB@F60wGWO`nu?VACgUJv1_^@k4xo*Xqd5jFB31CODmz
z($xg4UkauPZ&b}dqnfH*H-yfWvCj(HQTXwfGH6G^@t1D|=yBVlANeJvUwg|6SZV;e
z6JNy!=+00T8%QBOJC+q6r7m`YtvlZWEVHa?04(RPYFOl!)NNTBeOx&gPf`~HWu`Zu
z4wRYRYC3qCxslp-h;)i;7KnWt!l>34!32;l@ht&_N1{IgAl+rWD;q_(u7#y9f(0Q;
zM2HeW&D)#q`iSCQcO9q9<_P97t0RJFxJA$?UiyzR{FPpkuo)2vgb<NH2tfkbTj<J>
zz2g_G1R+%dmGXdt1ysrdZWd4}J-EODdcyGG2`SbR6n+Tj&ICV%b7um1#pl=(o;qrk
zeg^p%W8s3sFA{M0r3wyCNx<Qk0yv7Gy{a7b<xbnFQ^i?Q1gJ?oU<RleIbg0FRyjSj
z1Y7;cgEi8X6@KE_KmtE;Y#;&j^h5BZo*d2fl`7K}q6ND_v|u-2G1foIZVTSYP0}+t
zcM)CEM-1pLVnBC+Nm``J(NJz@7Z{Eu4DL;U2kuRP2kz|_?oC1RF753qTRBLtF}j8z
zy~e-{;YpeNuiBE#8IcSEs`RZ71XQWN4}J!Y({6^U>py+7C%Oa<A;Ez&ID`ZT&O-2-
zg8~W!$a39AOmv_Mr05cWDv$yr09Bw-7M`&47i9Xg!RhUP#!UD0-O!fqe9yhQ%PMxd
zc(`gDLNyMq`V^s>Gc<)b%x6Fx<}<(#^S{o@g-QqgT<f2nT^(?_*v6IzC#vQtxnLd5
z({cg**afG}rsvc1P21ReV2RCBd=MfZa1!H8-u}@PduARyvJT#1SRy(MOL&Kow@U~Y
z9eO|lIupU}WmpC06Uy1EDxhi6Kt4Nc5?Hg7If*z2dzAlMAP5Y9e_%Uwc^j=AzDKXR
zzX>8QiNZ6&!T+P|9m6Zzwr=6r6;*88X2rH`vtlO|+qRvGZQC|0HY-l<+UGp)ckbEu
zyl3z4$ND+f9COaD(Rv@PVgC^kZm|KD(fnzUQ#B!hO-|h%L2MnAX)&SDBq-%Pq0s~a
zKsK@gAXHM@MY9zAAD++b48Xk>EXqioB`-yB0nm4p&q^7&GbG=m9l=JxAO3wQ@P~h2
z0;7eyyW;=;BW4(JAVv%P0qYIt{!!8m0|5+G3jg=XSpGh)>c_a08{{8wU`N0oa9{^0
z;6J^+R?4WI*VjWq4T%4!Y3q>wsA=nv0G7diWl&PJaPj_eiF_#d$Cl0!P<dj}IsyY=
zBqIb*hl8nUEgY!t|A-jP|A-jP00gd022gk&+_b#w>GhcaTpRa*3E<jU2TXu;b2-_s
ztJ8Y-+EEF*%lSu9af|auQE`j&2efrt0|?M>F3kTdl6l7dD3W=`0Y$RWW>83H+wF04
zhCK;SXl9!Gf?ns5f)uU0vI9Gw0U%&(8K`CN<94sOzoGy8*&U=+ZbfncGXoYr5D@KO
zGc$0~8d(2LY6f+k?`sSw-qY1B{wXd*HNOoIM6!a*Wh;a=z`alAjpJc&PFIpI5?$s$
z0Nf1nFc)A}eIc5B{O8*E!$;XG<W)jXgn`NfZXn30R_z}0A<TsMD7fSh(R_H`Fq;V4
z<WSqBx4pTrYLagQBmCsdVe)OzxI?*DT;|6GqRt`q%%xg|bWyQZk%Ye(sTdpyXu826
zt7=ujmf$mh*oguXd4SL%n4-{zNR<0SnZP<?<gs#bh~gwgp<@uq7D({g`6(HQ`UK#<
z)b<Vpk3&WnSL@^spXz32JwhDKv(Yk{^ct2&<@Zm>8?;js47o@}#=R6Src0B_7?9_(
zTEVc|9(ZdGYNv-u0GMGOxU>t{>_Q~DQKF3uDC|Q8^v%F*14kO(9|9?4pVgZK_~Vb0
zBQI<wBQLH1Vn0A$H>?~%0YKKz7e91%Nkll_;aK}f5Lg={^(z_MFPQVRdyLT4uD2-a
zHqIq00VDORZ&*ms#a4J;Bm+35)Iabl98-`AMka@X9Sdm+mZq+X7RiS0My7$$#Rs<|
zGCg4Wkq&C%l??L>y?jFU)r`a!f;n~FM;hIIU^>vI!**1!Jv5VG#8j>;u`-tLZEs{S
zsJ_DB6)UTepYay0TpD09bDsAk+$702`SL_e5pzY)bV$iL6>g>zb?;0oHrfWaq;`RG
zB`B(2n=v<t!PeXX6@2Cr<}7tvtXzLI*<)o6LbH}+BlJdP8J5}@q0(P6;eTUVcAx&X
zglS-H-YJRa!+0pTdvMEj%argOfR|Dm|NTdp1_3$3q?w!YkY@vy(`c7jakFdfMZ`*U
z#n*Krr<21NcNY4Vl8kJ4oq-DD$Eu>{sv`B=ChVgL!46#|dU8~@rsU4Eeb!(qJ{stx
z#+NcDQEzgu12mgg_CBMmSgj5e`#7ja+{8UYycg!NV$9Kk@A7JA62;sBu0%<uwpm|6
zK5?E32I_M!GG$m)-*va4-+8=O7Vnwgqkro1ohfQslBr?W#o9;^U*-8oaxhnTd|8`%
zsrNS0jIwokb^1=8IZ~Ir)gniEG~z(+(7t<4dqwY=u-@--{U>iUSw)nq0?-jZ0w@#y
z22Tnjt)qpFo%LT6NDd~-$o269=o0Rz*=94!KtvJ9aMBeQo{$71(1pZlg*Mfjj9sab
zfBkS>6ET0T0b~8WkmYXndozpNvxiP07mfvfHSx?0Z88P4XwOfyXz_*w0`X+!r+Pvb
zh;g@S)Q8m)qL=`d)z@;RQd@TlJq4ygVx(hbBG^5OxCQT@D@s_H76FA{BAmQf>ID<A
z;ME;J5q9i%ixASD8ITI{g(Cb#RGP?&ZZzi(2%(Ik1yh*Flx^c9UUz1opF%^NoRuA(
zF1Pr!wV$ev5OA8$JOh@TAAb#m*7xJd*}=i*@D$uP>=WhZC$BeoHh*&>`BB8i&QWoC
z?_b}cFdKWbvc2?1*ljm#d-sH0z$9_sS4`O|6|5lud1ARU3p4}yXyZ@VJ1-)Vp|mB{
zkC+7Vbi+Z-Nfp(q$cz6e+XjNheXM3zR;8}rV0EWAI6exH0&r<a!DdT4Yv6euX|KaJ
zJMy$|IooZ%ZCzD!Jvn6uuKJ|xDO#=sv!Y~%bfi`FwIgi?(dKOTwNjex?pDg^Q0-8`
zK3r0tnw+s7UWgXvy&;M(vpaui#WLXDaaz5G{`Uwy^SyDx8ekJ@0BwZ7!B@!kPkPZm
zRC*i%w8zeW&80CIuVB^3fD*KQRZY>d%(Ypt6HuWt<P>`0g<0fuqS9}v6u&@e^yw`@
zyk}Wn)4Nnca+K{z->f%|X%x*9m&$deT$Q!Biv=4uh#Z7+K?FK79@Wa}eFV>szZuQt
zs_m~0lQyE*LOrBN?3}c~o1~k7qAB}%gx@o+Q4Mt;8+ahKPEv(zL-$^lInq3G(Ip8I
zuP{;6*eCw`dJM;}Wa}gzxlt0;{%)6#)}wO<p>O5x$N&)m|1hVySY50EcEeXJg7uc)
zA-y`$;y4CkIswr%(^h4I__CU`bGHko?u)5ubb2~X?EJwNcBHwBf&Nq~PqY<{QnF<~
z+~U~Ipf8eNH+3vU=^@3KG(95)v;d)gxWlC4CPyaN@~3|U_h<ra1{=8Pwm?yNL+zZ(
zk^cb*u+JCWto`pBi-VvpO-El(rw*{3%)rGCv3`C=YxfWQ5Y%24%v5W{CuOnnuQEsw
zJES{h-M>sw+Uxogo%PVBa!VcH(|!OFFvnjeU&jCZY5#(yZ8BaaW}X4y`X8voM|BZR
zly*Bci$uwah>FiM#puyh%p?%QP3O=SK~Gnan}V<r9QOL~$-M4I?!3R089W&RdYj$8
z02k=&*O%&_^nXjQB6oYco=wou)t@KsfIUt({c=_C8JND~Qn)p&++W#fmja8tVbJ#k
zzOJb(t%)5)X8>DZ#R!rmaK8Ihd%ute=D_63b#DwqDKCc{1DP@016i+_5t3aABO(Um
z8bUAD0ZX58Dg8O|!N|;*-*&uVt)cr0bJ(MXy87Aj_~N?h198e52If+_@T|2MQ}#G9
z#a>-DMd8`AS9<Z9BPiwS+OVxpX&Sy~nJ3my#QbvofUuoG)6E`aV%9=)X$F1C@_rJq
zX7E+f`TTQo)GT`)O(>+qj|n1uSVM7HXcs@T12A?wLf>Cj8jc*S1RFfyWvi5^B^pQG
z)YU$cV+jK^TuBE#xFXJcSwh*Dw6O1}#LxBt)6-555g+R(ZcU3zxdnoJ<A-#Y++*w`
z-HM)eV@9u&0#z=4pBxkH7__)flclV3%GncxtEeB}aw}h!@7$|C>ThTwdZkRx@yVQ8
z5x4(z%HIPMIL#4o%AW}KZ>0oQT1Q)pze7*IsVXD4!GPF#q!w9+UYc&bI|E8xo{yRo
zOHsL^suH7XCa#UMe#=3#UjEr>MBd{<X&w{~^FVkrJmHz`KE**yp^GxJ2J_gHx17K+
zCCbofd!n)lw&LA**A|NKv_RlxXKq?=^mKf|o(K%zHlr>_ievtzWY%v71^OLa)r8Hk
z(1>&vQFSH_hBpuuag)ARHFE;8->V($$&%ZA5IOS83=)&HIZAKZ9F!a7EVw*Gp-q-*
zpLk#pj7%S%JOmsi+=@G*HO<NfEoRv3EQ0|qz6^q#X^5JmG5557QvS|j2kcl~J0#Ld
zC3NrXmRpB9jpR5m;>p~L$Hr@9i24{=1J`)nER<m&FeO7Zr;_uL$Up(jFJA)W5eA9(
zpli{zbTW;@Kpu2f`h@5z`|#ae8?2sh)+Rj{Vje@L!Vxu}5VxzN3Ids6t0>aw*G&8L
z)s^u$-_|zWhK5viH?pH?b4YW(4&}g99(7dnAmJ_!d3aTqqDnUjBCk(p>`JOx29fb3
zc9mQRt!#$Ulj7Qf9)+YtPt&Mo_~~WbxnDXR%a~;)iYHdz!B=x9a*8>9*3)svl#O#e
z=`9Sd<R4L#I!?WC54aOawDa9Y5nmFw@a_HZ!eQrRC4NG_@=ryq+9WCjp$m}#(nCW*
z*_N<}s9>Ge7cjaa#L**UN-`~#FAqPn59o-mDksgb+#idwf~q9iOaGFow1Ny)EBQG1
zVF{TevPPFPB9IeNPEY`oWK6lX-o}G_ga4*M=}6d6o^3(f7C&P2R_kFMCi`{#F8R1Q
zlRV#5@T48(lotNU3QzkRcFf$8sP{0{#WjM5ja;4Hzvne@<&<X@fMHtzYMuX0pXvXi
z&Hn%BEB+$h4Jyl6VKXA~YIPf`>%}8iuj6@yN|Z6u(YDx(qzlT5%*u9HHp~%Ct}*6)
z0#FbaWKEbNQVsPy%t_BX(n&;7deNCSEV(?P?_>&SLaD8`XAk9sZtu5?84B9^s{~#r
zGpdUqQ=PBT;reSzzq}|6Ea9|;`F&yGj+fO_3`eA4D`y~n<~6f=<U*2=;rA*iqjC4|
zwScua@isWXE+O3mrv+o-?r36zb*QW$nZu4XX3fq~1x6K<*<Y!<;7DrPsgbOz*SR;F
zkZp<e4>Ue;Wc;W)^whEIG^^8uynQJrzreT@K<>xNr^}2U&X_EA%H)SCcJg7JO1+^=
zsmoh}A`BK%HzZImK!_XM8;eVhQ-GR+%7+w5XxJA2-l!84hM1+y?l3sqi}<TRvIf*G
zg@hx382HUTz~gE*eicwLu{cD<+Ej5G24%a}QdE(bnvTnpZDe7nuM%Z;1_{oFa&Mg?
z-eX04Wfa%ByE%vVsreaciXb7Yk1+uLeRTY%w8LBY>TLx}o9r`c*!vrjGfQ~lO^m{~
z9`w8Q=<mo&UN#;=m^u%V22diw#w>4i0op^Kc;3#r@9QIGqZgiKlX%_?<6=tvouf_o
zg_T0Y-x<;$@$idYk9?wdUai|vZtfZ{V|&Q)2rzN1X7PMAqzx`BVkhYs-xPCxv;a*j
zMH_f%5bzcYEZQT^%4~Z2OxoekK_euy=v}HH;XK)=V+l&L%8m<g4SkohbIfV7-*Y4K
z`4d?oei8Tx6d)s`q5=W2{B>4l|9`05|H48ql5GH_g^0u3M@pG<UA`6;kn4z4hFXix
zpp`|XWwEivgb6rNVwPr2LS^#ZuTv5);;eoHZoeZa8m~UOxIfb!p*z^|;EY3A#pMUN
ze>W@n2TO~FKN5pxT(LFry!z?}&Pd2V`M|;_y+!%?c~}yaIf0+r!|9ym=0#vFf(N6P
z2usr9<<4LTQVA;S9}4ezK`)&bYGJgUq52x7_4!8ei-VSl#xo)<+YK3kb-*z&_JD&q
z#13SJ0U3<QBwC<T1&Q{6jVSexq{g{35s`W{2dAl8b<gr#XC!daDv1~pE{opGFW5<3
z!lV*5kE9AOmoM(xsmCSyF4>Ee11Q7F&{~y=m_u=gDU)(T*5qlyei!XdSaQN2fT(ga
zaIe0`Qud1IU2(|v`8zI^nBZdHHYf!kB??u^vXIrl9_ZmBDwh;AUG<sSRnRT;IFCjX
z`O>F-O{?VO|3&4wMz{iG@c6aG5(~ydU_t>yPFyZe7V@|&Yt788<ma$-KYVk-3Qj{t
z816`w^F%S1A)%D(DO+~gA+~9`V?Em;DtBXCF3eq&2kj5K7HjvIFnO_aob^B(TUJ;g
z>{Z$EZ}sLGDbRiqyCg9t<D+d4p)$4yB?7*h(<X-#2d?#+pA|E5x$?uMpPogx;XG1Q
z?=&A`!X^r5VqymuFwXeOXrFqbS<zz;<Oip=z1rd3lXPXRSePSjntc&bV~2H{NK`&-
zmJ8hq_~T!GBv+?HiZyChpFGN9P1;WLJ-2P+rc{UHF{vtI(es;7LBp$_P3DX`lvlW`
zD_g{J@%;iuy$lxEZRisa_V!RQ4++<c-9f-<wKJM^#4*vV==<SjcU665ydl{}+zDpR
z9pT=E{8|`lG9oxF-UbwU{w@&OiOa(iCjabIfc~ysymimc*4%j&)pT^V$j)a=YZI9w
zT6-oba$=TJFRe~*9-rO5!_q~sh_{*LAsAY85SCyl_b`Q+)_<9lXjRA)a5a`SD;V10
zBVW~=O&&e0(~K)6k@xKL+8^O-;ywHf`|s(%e2v~-3{VTd0)Bs^7XHt)?0?~T|0c;p
zDK6vd=LZ7~h8s)8Z-ZVu<{Uk+vy$vhc)x8_B2be#b+z?6rKWG+#eZbk=2xPh{7*?9
zIDjON8hXkyK$6Gm4@n-E_Mv}B@;vf3(+wa$4(TU=B4LN4bd}PH#EDx~j)<1euBU@M
z;SXerrkdHaVVaqdULSfm-9nvVcozols)}`33FUql$<CuqJnI1Dg1+2V+|{oph7=aN
z@H7b;WbJ%pil_DV#+5mEs?+O>|B~dn|Cc0BMmbh+p3{jhhRlheQWn#qlhmq%Ss<c_
zAFjv{dQd85GS;wW^uSgLGR5z#=_|!hC!$-)!SPyr<C--#d&<C+QzbSFoG;}1$#wmZ
z!?K+9IcOxD@1U*)kj>^Jim}qK-Mp{%Y&pD_OY5tvihtJRnV6nNPy*!epW^?!Lg2sh
zIK%&iApTdzpUmy=8RCE-`AkjofG1S#;-hvNaKPod*r>3-PnAVQP4t^fpx4*;K3(;(
zd%F+B0NvCTVi@C*GWhCzYGTT(W9Y04^R3qljT2f6{=+#Tq}Ti7mMyw-J#bLsjqRRh
z{D)?QS^z@8ZkS2YkM*mk2-l`xL0!1*XER27w+xH>DH``#BEQETQffP0;s*m_BU_9~
zB=A7^+`{+vOfYJbV(}bK@?yF0B9OVSFB-AcAh`F!iSw=l41J#{;Q}a-!i}mp=uly&
zO?-%`Wn1=yDdt#KYOhS^dgN9Rst(X2PGno}mE+h>rdlq4hRzznX75Q;b7Ppn7}!tI
zP8md)^cY?$pSTY?q|yz_Yr=9H-pq4JZ{*GxpApeVUN_UpESsg$%g532r&moQYUZ}_
z==>yX&~$cha}Y8=DZgb8K)CqSSYoGib)>HJ=_;je?6dI^QYl$(5kZsC$<b*F{MFdL
z=iuElVQwqq#<iK$zVkjJ^W&AZ^X=v1ee(Y0(1j^$Q+wOzjpg;ql~C92WIeXBG7S4$
z%`sP)_GdP>ccyOS=ZBY(j>x6!w+X%TRhBto&nXDSEaa}KJm{{v5glH+A@r&edo~#V
zLMN3}FX-g5UesR}bzRUk6O|`13|783M-}506yp9OJNAoIQ1@v~?%1Ny-?m$eInVYE
zH_Bykj+og?gsp1r4g5)x!cmkDz$-fSD0QP`DUH=N&>Agjvd~*7gJr|Lq0nBlzV51t
z(t0Ubn|$4Ys7iUvy1OHIn8_5C2?#}Evqk=;D`<&U!1Wy~v1*P7s&h`*G@>r8Cg7^0
ztcKBfPMcWU(IBCM4U=uDZq@uNE31wZ!B&{L()ar3+{v5;#~pZuhV)C9qJI6fIrZF{
zbMk(9?(f7xU|CMnyHbx6Ppa!u%$`}#?z=6z?sD2#CD{(WCJgXG^pn`zDd?ynx`K`U
za26EUu&ma<GEzC0*S`}UgT^fg?v#+t3bw5$q4}Fg!us{q1;GhjbOga6In4=*IXa1s
zYl@yUJ-CCu)X*joJ%wo}<^z_1Vvwd7o?AmB0$2jQ2w(|`dyL;6Oepi6)~Q5(fpV6S
zMV)qVD6~nIBYG5RPolYR0?=NAcqBSs9~54$Qr_zZz&Y62Z}0K!Iw@0JtmrpzCn6c_
z9ub1d?3ODi$>w>jD-)?HB+@w3?T%<MZ$l-Xe4#5Td)y#`xR&3Xk-`TWbgZ>oCoRf8
zWd#L`bkiN@Xv+ELNK~OLVwbN&v3vsU+VJ%Ug63V>xrO)2eltcxgb^EtExCniQK1Hx
zP9%|#xHUmTQ04(dmcc|pc8*bjLf`9D1PPZYLWo2F+zDIKz@%$6!P0w)#EN$BJrt}1
z@AfT14cVO_nqjaC0W{8pDjUdmn*Pm6+m0l*>)_yi%_^Z;#Hk)0B7%&I9AXaG^)Trt
zhcNl0pbPSwb3qCfJFkA1O@voDzi{*4yrTD=$ImNPY|<i-yRlnm;Usa=*&R9@OZ|^t
z_P_GSmU93Xw(Ic%gPoyV_l{-SttRbhqnaLX0PzK|{q%{QLJ?v&i@Ya4{cw6SdE4Qs
z+i*&*3}B`9rnP?V{GlF6pWLxn79`I-Zak95^JQ^DTlj_9uf?Lt<=c#1zFKggfOZWC
zVFgh?h1#eAlP{2AT>{+cgKs8Uf^T+DP-5&y`#LGI^AX(-TVG-A6Mkb7TJxxcmN&r`
z5{-h40k6bLnVHEWg}7gNO^%SOtGScU)=!v06J`M|JIsQr2lWb7x2wiLH<+9XmABF^
z@xWBTyuf&LaqAFxwB4IKYCo8od424YfOk`jWiHS|+Y1-nd+7(&Ko4qy%JJb?<%Jj~
zuf9|V>J7-v8-o$U!N3t0sh|`{E8`eN5|9{Ke_1!}yI(212b<pCKMxt#ad<<W4h5b0
zKF@==JqoKU#QW_N@p6<nHeK?QRdF4RpZsXF*ZK~H_t15a=?n=1{48#c>P&%*>Wono
z@r<zvV(Dw~Fj*1#4hgv#pY~<^gV@~{w!<gQGDh?q$k5h(B=JETw{Ox}URE*TNS|^3
z6Jmh^y<&w8V`7P6V`7m=17dxFjWB&HOL$5<<Qu%!*I}D4zhE4y+IzQe$e#LBKpI?0
zV`hpibg#v-;0N%X9iV=E{zFypU!-+un3O|509Aep;s34#|F5*g`2SY<|1EnR{8_L`
zU@xBvyjX!>CWIxgJX}$TSaO4t4ivzm$So0>AsiJ0Yf)_7X*oAcelz;oV$r6?UGnW9
zI=6mJPHw^q!NCy=ETSye59)Uctl-<CQilq6*&+fI^tKjcjlI4-#!XKkWB`rpu7aNW
zw}8&x)370JUYv$7DZwwkSd<jGZ)vyIwPbdaGTO+Nzzb_m!e*q0HJ`&{zmRP}*QP|$
zt|Y5KwaEuL7t%ERd!b)uUsJikE*S<pz47X-s$jL*Q>2!8Kz^J5swFn9cDemPCv<(W
z;vh6Y(LUTRNLdF#u0$7<XKpixKqZbIc(v!*GO&YJScN`OqU-RS{zJLxg|(%P_ZuF<
z`Aq{KM%2a0Ny_ZiG~+o)TX&&c;T7#s;<~@*2PhmDK=`FgCwlZj(QN_&yw$Manqu~M
zBcI|CaK?VH=d@i-^*t*07O{5}e8?2(7UL*)wboeY>$1<)gqHc?2<BJI;G0;&j37{3
ziu;_6!6CVk9TN#1b-F%Ex;|>dYV8yV;8wdg4F*@dGMwgY_KRUP6Y;^!$(@3mBAF#x
zj|vRu=vahdjrxVcx}Uqou}DO5hO}v6HPI^1gRp2=TaN?CIbxJ)Kd(3vwk_oODIWA}
z%Ct`vFlBHg3%>?11B=)tDHPP9Y8XWwYD;EgUyaw}>J7v%sZZjnQ;lQELSPaiQ!d4)
zL7k~5>2>Vr=^5R)C&rH+Ml)+nU`1@*l;nraG3APC6BR>vk^OvvLe-ex3xaSx?%1#+
zOC3kM5%H?JVs~jm%Q#wE!`X;?b2po#J&2WPE-l}k!kzvsJ(IV6<@{CERDS)Q_c@q#
zs~jUKVNYQ|0bzD8Y<Ezsu==SnadvG0vsUs$e$)juae;3`lCn&!D4rux9yx$nlBh*-
zuGBgxN!TpaF=hpO<w10r>k5JPHGkRM6(-8l>`^YPNy=YD56o4%9d-U|JWpe(cW;~H
zOe09*JRi9%Wr<jk1K_XV1DMAMTNI~Ct&5VFPldA`4D7<4E^36ABgv|?*Zr5;lhup9
zRpET3NJ(<zq@1StLBC5w7^ARY<g>8Q=~<vgaVsWAZz4OhWOpb!j3Yg3`bU6!gCBlY
zrrk2&Cw!dv1-f!E{K|k($<8~Vx<Fs^i@&0Ykz9byYM&d6T{t7*UOI2;Dd+oRXYrr)
zLmB>hKhH+{|D$*E?|T>r()e^VK$~WV_wU3M1_0anKlH5i44j?J|B{;ZAVcT-IvYR)
z?tvQ4srgp$sGXl4WO+51RY<?RlhVIO{#Y}V+9W=cjN<pUm}a8z+&*U{EvaHwg}RrU
zFkTluW%_OV7CuY<C{2NDC%!?`vG-T}@AFRX8M7=>uLx4p5vtpFa-9gBy?#eGpYNc*
zcYEY4ZpFX;Xc|NN@RG>6W$GIX#itR%GEqs(nfamilfw*xCp8WF>*=)FE)ygIrkgpq
z<6$VHScWtTxjoIL>qM+kQRlo|f>=Cyc1_>cqK`Itn;XgiS=!jOeP+?@)lnQSvzb=l
zcx)NB<k4Q!`q%tj<1EWM%;IX+>}#(CKU8IIez&<%LSfigvuqqpfg)m__kq~Y4}Kso
zs89pA7tl&#FN{zF9I#U7Km>5cND&d(SOiGMNJvl-v8{)1)}Kf2dhDAHzw8UZ?OE8<
zN6m_cJUV<Ab@Un+wDqoUw^HLeCXj!4?+#(lk-#1q^c;er?KkHX{OIcV!G|kT+}uCw
z#?|`%wEWb)?Z}~T{^{rQ7`)r>PnJLfUGV+q-0<wd;E|lt6&EzVMr!v7Gulb^w`x#K
zt>osHA(s?-7U-kt{)llq=!R4Tv(>GRF%_?2YHg)t)+?)T{hMwDC6HJ(C-&0wi}6SH
zbub|5#o5jESm$>I`7qpM3&5c9k_7Tfu)fLV0{xw}9*G9H5tv}szo{i7Sg2@?HB|0{
zY6Okp6AM`qm-d5iiVinGng!kHxNar|F(aIzudb-6T=W&s+qP4@YH7!ArO>6&Vt{{4
z<+nRAwwGjT+|XV8w0TX)C9>isL-_(4pGqh{&*+<sEZYALb2?d~$$}fLQv`km8KHr3
zv8IQ1d5|^u#bM<*(ROo#qP$sA@Ls>Q(A{^Q<U6_4pi!?T;Zsx@`q>J7(Pn`S+2i!A
zH_B&dFgokVdJUs;pbZ6jd{d&hAscdfq>MDBzNfEdkteHXo9rG9{2pn0`VUTfR8j2Z
zrd9FPS2J%nI~&<7E*@Jac<`<rg#idVK_@7}Fa#1-BtdIRQ67CUVGDQjo`e~y!EBat
z_49R6ktPh9hBJQ&kRf}SLGvKRvFJSRq9e^F?`TTvBqUj_IzF&27qtx#yFLmiLU%9{
zR!@HG6F8ooZ)rq&7}o=fpW?b^hFBg>d{$1tbvbgBrgcVrQVawd&>*bjz~&YtEZQYr
z4Yl&Qlq*tFncWYzOJ4dFcxM=Kd*Z{I6!=H#1n(5Xkt)L+@~Op}v+R~7-J5vm=O<Fx
zNk1#gAHYg?=S8lQfK<W>G{upFj4g<2=oB!j3r~@ogyI{s<l71hygh7xi_h;)qN*%#
z=uxakB_3QT3N5z?Wl0`Su^(ryS*_x?lh=E*S&Va1y*Z?uk|NSt2MX2&AgZ$?M5=Y!
zL$`lVMv4fRg3&W+u2J&AT4RhgMfl$PNUTyJV7$u`85adn-!{$PR+lC;Gu3MC7-ug&
z^nrCaDHl0;g<N6EL=+V9GpNp+CiW7WSrrokX1+xULi8D~Y28SO*L$`<xl*OEykYgu
z_{qlkKR*R8eCt1-qG5Gc47I$}zDvFdn{s@;D7eZ#gez$#>-!96<8uA5i>&FZ^;~kj
z`ID<yc?y3+4HC>KyrBLj4}<RW5b1fBhA0gc9i>+mZ9m<!h2{9nxdiLeJny0<q6Wto
zBjbYJpO?(BRn~`y4UTl{+QvBXwcWw1&p5AtVj}LEU)}o0`~;w|`x}zZtbY#me}NxO
z#`i}5qnGLvuHdjLvW~)Gw_=GTrGlvFxA?DKDx*b^o9mEmUXVy82Lt4I_S@Ziw!LL4
zZ+h=BR|iB)FU_sSLXDFTz7roJkN4aDDh+)NCgPT7gH3yI`_8vKq81sJ7DVh8R)|YS
zfk4klj4u7<&~yo_${Epff>n6X8O#BkZ@nV2s$vGtt3Y0M(4wu7XHbg5Lo>O=UJDSw
zt}wiQO}QJ#QOT-=(&@o{-xQ<aNNHPWCD5djUwISUa)N>yed@J4t<?A&W{Y}iWW``S
zGQ_#*5D3D?A&Bs+kM1nev4+14m}8;8Jm;DEoEKr5vj~Q^1%DCsCxx(-Pz+}<jI0}`
z0CNRf6_^FIQ89lud22)M7QF!4s9g5mve0b4=>KY?s&f);@PtU#D$&T+Z?#sny--qC
zBh?)%Cxg18?DsoGpE_NY&*(A7Z!fmL395A;cV|VLX_>HSQr*{EU+(1@J)k|)pTf&#
zIKO5HG_JXSEHmg4U~-MD6`~+CaJfg+W50QS(|WERzEk|ro7X`5pe~!lhxiYDRENVl
z#U=o@2oEp~y1%Rf0F}R!iKCOFo}q!G37wtIe=GKr;uXFFtYUckj#5@Oj%`43$1g-0
zR7HbK#z|{2P*OZ}Or|PK!%*wD32FN8%~loxxa{DZ^Se(U*Ux$(4o`20N=inEh$>F}
zDFLXk+D;`End^^>c7)hvC|5M+WLkrR2?QD_G(ZdS8467X^i1H)APR32G+6<W$+!$=
z0Z;1KDGdG?vk<d-#~3PHf<l(qx4Jk$^>^+UfulG^WoiV^MS`7a5L&-E`P3yg$y1Qs
z+|qA#<YNOAg%I_`qlTjn>wpG(!1aixF8PT~@<+7$JZEsySb|b}bmFcPWIRVDS>3nn
zX@n3V;}zdW8Dni$e8<Ctl+xlRXn%&lUV=Pwx{Am0(@Y$@Z%{vJE=>jpy_h#%?+DC2
zQ<KJQcr{ymS0A}&cw#4I$acPlw)$cO>f@&Pt8t&$duG-c-ADj+2>VAb=%U8U_Y8_5
zZkxuOT#!ZIv5YrMv`y7t96Y>O{N`A6$AShw5<%0tG2Q=}>7hSlb`JiAaD?}Ilq$T6
zr8A_ou(&d9;?ek2H=$wok`kA%P<j#*_l2wRDq#?nZyGj>!{}HKpZGAi`yNVzunnE<
z@lWXU<p5j5H-L4V1AgEB(mEK}|2bsyA9>9GB8JGs2*`mjA_iT(qtc&)ORFygK!$~Z
zai$`&_6&Zd+_Z1jTr18pIoMvOliDjvoASKMNCTPApp34{7juI#&Hl{qnR|Aeaqe&F
z?(|GOglrGKz8tk}w(<gdlnDo%hO;M3R>ugCffu%>P~=ch2`7qM(u|8z&TB*kzvc^V
z6~{O_G-rq=BfUP+#5urRVq6o4?vILonhWOd4(AclqHw(zm8yWsIxIFrNc77q4C1bl
zHcdPK$P_P|8p>|;(W%;Ms<5JOV<S;7B8K!f*JwvUh|M(oQXdmjud(c0Bn3HOE{T4+
zO3I9FONspri%?iWUo7sXPV2jUJ|gp&;)VKnBx;}31MwLPGnVWW2Re~XIFH6nM>RJf
ziae;?_SPy*okQwcmaMv6{&EwPN%l8xJAKu~h`EI?7}b9J(`<x$FXh7wpoL5Y=+sgE
z^;i4XY{Y+a=gCx=?`wa|%Dqz46seW$R)mOi5`dsu1`rXnDnoJp2GWYOxxh+qIQ?<u
z(P{tIh!0QcpHTUjwYs|MZoSj@0t1Xl4l(@_^ed_ntyxO)-2{%MI3+GdzGl0~bt&or
zJa2!l%Wzrkw>47}C9E@h6E*}R&v4nAp=CscmTzfkW7^W8CgK{(2ym#(qXG)D!7+o-
z(c;bvhJTCsF_TaVb~es*F>uoj7Zmggx3nufHCf|BYNc8Y(i61pn`wKE?bfHjv6v1h
z8ifU3yM_dpF|!VGhB!_3qcGN_O5$%3Q%RM$vPuckil7Qu79iwbs4lD8HNrU`aO5$|
z%XhohT{v(hcdNH9JnyfZtnCvXn7!~{>>7ZXBB0@yXpUVtPWilY3OxN0XeQa+W=+=m
zVC6{4Xg9Y7o2G~nJ3KJ&#a7f7r281AsAPpM1?iz%Ah(j8X3))_aB6FTzr#3Pk@MzU
z=%7<f24Ysb@14i%&pH(tHLQ}_PfSU;$-wKXCqZU-pdDBK_WSiJ7u{~sI-FV3t|psU
zA}^C@1;UkHdumk3udagTwFt}Eb_z$@WJ!Zsw{LN3#eq;>$juF{RQbrb$i&eBqrg@2
zQNx_hQYNi2N24sIcm^sS-{AzyA;IHM8I%qxbxJi$dIvp#GM)t~bowF(qNoKNZ;(@e
z!dCm<yqf5>O+8UOKy0d%cWA0~N;O$Lq2~T(g-mtI6+@`{{hmZ<gY(5E_tO3#N#A%m
zOS{1AW7dn}$0Z7d0v9;7rd%{eRP#X8noiy@MQhX69l@ya8ToFRCyN}}dzJhmLFsIZ
zF;6<Z{)^0n*YjKi0wm<{@D`+R<y$~LP}3Y`&yt6OzEuZl&Eh4@is)$LLpJ0JnHC@P
zN+(y1do3~KD{0f~xA9>(1YlrxZOA8fx6ykxY+smzFaB7QvZAfeAjo4SJS1YR&$o(W
ze-;fvzuc;+fdm2)*8N*9^Dia7|K>7_05z_44uH!%pa8d}D6l(BfqN(vp4isfAd;+t
zMD#&vhu8+L#S>C)77up4DvI6Z5}K8Yt9mSse8w{Or^VC>9t=+5(-@A@7`bwP2Cu$P
zEuRjrv*>J@(oD{!oE063AXMCzWG!<i@J^3^UR~Yb|9&&aeYR-Pq}Om~-BAnJJN3e>
zqqsvia7uZp&|vGPM@{fTRItYvyAg_ip_J;XAJ8MWR-k%pb<o43-c51z!x#IYk`6LJ
zXnD#-6tm}5eyPzNmQaO(Z{4XuQwEjvC#K_|0&}N(V}XG+!7(|9Ou3DC&>q%yr=eaq
zCf9aRG!3O)%`|I`9h)j@&0WZGc&9Awj=)?Vikio6C(sMmpU$CewaCUzCfQ({s$|PI
zH1TJm(MefX?ep^U538y3>6;5#<bwUB8DA}3qt~h_sx(kZeP;p<KOhpA`1}GE^7~+k
z_AUrEdTm)(?I;2rry1S9YHFE*!%wl|?2Z*~OvFpPl}S6Xsju&*!hba)Yx(k%=c<0i
zUy1%oOE(<0h~3*qXZA3qrAs`yn6Aph#C8E;ykgBfXmo+wNCJ(nk23^{{q17;d9XyS
z+IFh?yY2K;wQbe+?XK>Zt4Bqiqq!8TrrW8$2VSYFdXmU4hl1v#tF5>9-Jy2rzALZP
z?v(<Y!tdv`7~(f&_f9ZTpJAlCdpGBk?RFN|tYN=?-ZZd0V{9Klq(mN#ylVH^oo0Qi
zqw{*&yW6J?Xz;|OXg7o!8O3|UM;V(+JCj<-xIM2fd?k~q(9lXSm~*8Q34K-65X>(Z
zmcfTTfEiDm0}qnH)CyknkkBH+DC__&?dYCBzRxc$vW5Oh>A6s&De)uiePgn-o($18
zY_7{uYsJ>3@OMpE1zYb(piAv|Qd2D!%S8Z=$C*uFq<O4MdhQx@nnq(~tRLHjNP2P6
zWc;Q>GvVaAQ9EH5qd0EJjG9b{GK_afoxCQ3(YzDBkAEdQ!M7>_4?BG4;o#}&wcsba
z4B0~2rKY1e<V{a{5WSJ24^S4BY0Ph^FL26~o!}?wK1>J=4|q(keB#?U(zPenr&z>i
zC)Ci_Jz`Y+{7R^~yGnUL0!fO#u~n4(cl=uP{Pmv!C_98)7c#(x#=NMx7k>H5VQls)
z@fc~bB<<RiiWLGXl|`Fie1l*IZyZ#(*mF;~xHarC((Eb^<jW#J==CbLI-*}=D;iI2
zJfO=TEk^EHX$YT}VUlFt%<2zr$E`o2eq4W8p^%>&y;FbjdhgvHziu>WMX=VXxin|_
zfDqZsSI`icEk_D9pQYkpsbEDjgveRJ#e)P_=#AVM2Yz<7_NX!1*$!0Az<QG(FN{Y>
zXoT=|Yvy8zL4*L}@sdValgajVY0(3dTIo+ye(R3_M>LE=AtIV&VTmu!K=j9gq_NoL
zMR$c9IFfMnieKXYMPUQ3k{ge_7Q5K{i!#21ZWl=3In>6yZ!UUDys#)ub)X0vdcO#Z
z8jLL6io_+|XAkk7W8@s|($UeAUol5Ej>l!J14gxkhsF0|N01uM{`_L+Ze}Mi27Zj(
zm0!c#Wtaj{?g}Fi<``~n5*lyaPV2j|6-s~R9+GTX=QGgf+<dy+1xXBT$D{_{#*C8O
zef0<Os)vz(CN`hpqYD#WU6R%qMdkV!6|&Yik?Q(5&GIF-e7_u`Y)m1&!fxc|Bq5R^
z4|HfdDL<*st7WhjRg`q<gw1i_<IgPe7A;Uoik@XgL2dKf2WMB{4oQLlM8riX7B8AU
zgv7FyfI!siaOww4tAU;*Jl-zK{J7XzoL+_+;Ax3N)VCv=HmNJKZFLiOm7jjDi!GWN
zx6>a6lx>n!Scp>mpfQ|3Zb^ixtsXG8VfZI!m$5+(U4xBDQX5$@&#90Q*&4^7Bk=ly
z2BqiDM0_()kY2^*1xJUDJ8|QG>|idw<(6=N%A0^1#MY%^p(wNlt%x%Yv4uP+w+nSt
zR_E`C_Va+R(aJu%h}Aw9Nn;M0+C&+)OA6P@ROYYbhsZ}}h*Gmfq!kVid_!)@i(g^i
z5Ff=2Zh$PVZoDiMQ2`g$3}>vBAsA3ZGZoVGFEA}7Je%i0F-=Y8&}{Z4C!)P5a!Ko8
zSx+BuqK=zTwn|zM_6*$^FrZ;yw3X%DcOWUeitjW#dXLo_G~h!Z%^ZVU<7%VnYAWEU
z1aIhf!klQtoRm{+KZ0>XsFwQ4+m#UVBt?0PX1u(-4lhe-%ZdT(>?yFquLaY$P#3jB
zE_P@{(o<x5sNu%5-(<&f0rbNu&)iPb3>bvT8AwtiBS+|~+2vVW!@HcoC`ZGY70zBF
z5j-Or6+99fBK*y~g-HOzVs>0^$@(|#8HtN`4QSTc{+Y`b*ozrwpv^5sNIUc7FBhQ+
z0u97d8|W7dKgMJaafkBB@KmXp5X=e`5lq1C5lpOGkqS9{rzXUY#ipm3Z`{R&voR2~
z+U67FB@p>e&MN#8V{MP8625^|#!TqF>NxuH$UY>fCp6S+$~_pTUx!E@$oT22Uwsk&
zY9B$6R?ZDRh_S{%VWj^13#4o5C^mFlR>JQNZF~ng&Wj^{sLr<BtU>q5#xKELU^Cx-
z@x&`_&+6$Pr!pU()LX3#@E-pOG(la->Iw#+)<%**K!1&oGqC+JVNB~}VPs|U*Lq@$
zncx4|8xL*2Dk=LngYUhI?SUuyBQnfr#v+y%BX`hhrl?9lWFT(imPiO$Z)bJVs%~^@
zI?GKRweOSDdp3y$G!vn&b|CUWb|>r^+Ufq_nY<gcAiO2|QK!j}tgEMz13?cl3v6`o
z*l%{*UvH32)~~(qUMC$Qf~*&wA1+#i66Jt-VD2O)>N;~=6?vII%Zs@wRPf5w79)ya
zd=C_bH+D>j#T!3M+<|RUPn559=Cb=9J{BzEHk@B)g0xj%YONXQN=vnlw(A`+HYB2d
zg!e^v<1?c6N?ytIXUFHBiAV5;kr1X>6|K;%N8CFyrpE)<*q#W{9LQIdS+1`oO7;z@
z&Td1ZMAY&1B+1js6ZcQkPfureNAowv9$Z*C(&Q!8+gWeknqfwi-gU@o)`>sqgxM(T
zNO)7wJMp^RpAY&Iy){uC{B9L8m91nd1iYr=^_bp0?X9$S6*sET39Js+Rh(EWS9O*@
zsp|I6UG8sX>Ii<P(x!;i_n*ecjOQGH=LB`ctUSVmGP8AQgsIQn3-2#S+)kxy57%nP
zQdZb1Gx>BlwW);c6^|UsvRl)VnrT^>o~tx<pp+?QNPo!eJEgFv$SsXVAE}v;mro!W
zA&`Lt3IsvL=8}P+St0=^n+pSpKp=%G<Is{>6Ul3>Rpo;c2nr(_d<DWMf<r$jIB_68
z>ma~dxb91@dhdxjj2Mh@_o8&{=9WuIdrI9`yCdq#E!j=OnE{p{gd`~)^$XJ6_a(*R
z<c|}8CqfmAfX={KNN%b)1{&$T5`(`Kg*Q~@;tYjg-LENjBn@$9jK%2yb>QdYqTKfd
zW96)okHD!BCWfS78WAYmGiNkN2w00R$q&gchX=yt)<wV_`03<?_{DO@K;|eM{>*R-
z9(P6y6&yD<R}>P>G7mJ_{21^!T>pF=CwVOxblia!50PQp<&x;%XJ7tt?+=#$x%c-F
z_+#%1L3nZb1W?$<5nw462VbH99AT<xv|kB0xIBRi+5QK(j8(d$waX8A1v2o4ih#BM
zU)P(#AG0&Ua1sc}z|$-cLDI~Q0EfdlAeM1xO7HCF{zjqU47GodjP}kk`%jlX0vJmE
zw@VvLR3Lq$L32X>cwbzAdmaPcmk8i}0oFY7mY)lXyl~tjNbA&t`~^36gdZ|4ykHP4
z8s1V)OVt_ZnB(64lt8qoAmCUo0N#pA%}E{o&gIlM(;kM4Kp+aRRzbj8X8>z;`o~&V
zuEfh|ZPaF`b}(LuhvTM&AQ`E$aD)S}9MtDq<NMoE`Iu7|@nNXgTo@ojDDr2Ifh(lN
zQU^&S2Lrs(MrCX?76}PR@-y=hzIn^fGkF=%i7I*unwhP<OBd;6^7A`(jv<Yyp6*dQ
zGbeL#N!cvTRo*B6)~CDJF~hJl<_#!x3@8JMZ^w|%!YSU=kbb>O_5Tr6;2&t0mS4*z
zp6OLwGX@qmXdyY+4=#bAJ5R@d%g|gV7wdG%uEOsC*-g1v@JVnoVQ;B7wH-Ea$_b8&
z9m~-oixdTq%)U*T6!{Ar{6jTqL#5@-Gxc$ST%5}_hl-#z;5G4d_D8JKAzvf?(Uq{F
zbFP2*7jYb((oj*zungEF$)Ov6K}ZP%S!F#HNMPh@U1dv62yyL=(%*qo1SiumFo1JE
zs3d{Js8Njqd;1bWDrDj`RmxO&4B{TwMIO}LQ1NaL#fra}#P{}O8_Au>Bz}A-U+V>x
zk`UsQoBxzSCXb=|$s}QDU#58Di$99zRlYR_?@yxJS-#K$7vIvNasizs;qasT^dJ4u
ze@#BL%nT>g15i+UWT3wx*T=|AYwBQNW@BOtI8F9HT77?kaV@IZeE-Uc_|esExZu@-
zw(><H!T<QdsZ|k7u~i5R`et@B>-^=kQLQP3Mfv?|!i{}0f})}5%b;Su&idU`+VHO%
zYsft@#zeAyboo4$*Ec-pof&0j>bpLnPmAyLhkQ@+1aE42crh`%S*)K%rv}Qeed;Ma
z;*@UF5b#?CLa&(hB&UdTwbBaQ6S+&6n%7bU<(U39mm8MkwihHoInrN>QvKNQEJMJ4
z!Jg<7p@L)=sk_HwDJrQ-!ekLi1H@xoBIXPW1p_#5{K;U`btj?1vfT}PxO^Pl?ysKA
zw~nN3plK4OwA>XvEk-u{uZ>mR^jgt3FP*q#;5c_OB_k)>qhy*NNGZL_@+nT8c0joh
za%Q<iXH&81!HGqY+`&2oPapg5l+|gSFMk)5BA=9vSgcUW{oX*G1-W*03jke-_SJ;c
z-4k9I>mLa35WeUgrH3k<tyz}q%e=dumWe>#-JxG$!ur)Jpe?D>uC5GVd8BX3)|N$R
zH(TAop+nm&i|?57VE+o6mBPCrih3c9_2w;c%ww=}M*EYlPYL#pxHw~frJHnE(nft^
z^X#j0k-TNVKEySYhukZu8yx$}tx9q&GMnC9O8=`GBY^ofv(vIQ^0{z!e{1XVuJ_@c
znlZt-wby3lg1*Du1$-JFM}cc_BIvD|o#P#{Sk)si!GnoVmgY6-r0~JKKX3btFXt7t
z|BI}^S9$FHQ8?`UX3}RX_+Iuf$Jb}(n#1hTx{&h?J0!Dy>gnlWkc_=NUdGKv>ebs@
zFGg;x6v}!vW+=f4LdmuflZ~|!<%r%gX*paqQe`d<p*<DJr?6VmMSkVj$mpS)r-#sR
zobpjkM4qq8F|$Q<<89Vzld&+UT<gUK9FXoHf@acXF02O|8W99P^RT`^Ku3};D_bM`
z{InU5j^vO)1hK1XaZ+jH{IW~(+-%o0ikIc$_DW2tcvhSV+cOZwLBlByZjyyg@QyE?
zS<_KjJ6lRPE2v{>L?&G??NWv545D)mGaHe@@EygC+TM|(0^}lfj58}_(cF<j<mQ9M
zZ_Bmx!>QOp<Yc>@;(d3kfA&Ch?I+lT<fX^XtkC1<r4C8^y2$K1wQ~t!qo(qk_|M_(
zR?I%gT>3ygSzUW7Dtp14Y{F^S12~k#DAYOdUT}t*Xclu?Z`}%w4BlN<P3?Adcz9o@
z?}s7Ld?^u4oX~yCrfERqM-+qQk!V%NJ}q?}TGS&yQX1T2IPccO-{3j#=!92SW4iuy
z1Y)P-?3V%{M35u>og)zcVUXc30>p)yl;b)ZV%MFTH6iYPWEt6{Ogf8;j^~<1rZLSh
zF9{_iSqhOT3O{JBbyUG;HaI>L<t&~YS=A;ae4j%tz1LGuk;e|-ok0~5jzBOMZoAp^
z*@HflJ1AOIko>5+wBux@{G6NaP(Nl45k^9rGxP6`jhTW)qK03BUHh6aoRukCCKQw#
z=1!8of7vXW-}i<u^b8*Oj+>Cc@yRi+VR}N?WPeFj_8UhbDUFL;JL}C+M{DM{DW&0)
zy^)MX7tf@k4%ak@9f$gbyTb&sZvc{}sv1O9xf#6W1?}0m)Kf8Lf{uaO>^3US;mxek
zp$^+0{G_B15kVj=uXbU`L++iNQP@}m8`b#*BTp@`xy)T*x;ILBNVPS%6T}$3X>2Jb
z5FXC7@bvQ`nhoy!+^uhiwFVzE(wDK0`I%E%fhY?LZ6~c4UfUCICNzm|27?D5{<ZVr
za+6EBzepqC;Z&3j|F!qXzC?rI87HIZ`T&-}mG0*SqC<9m6T2i*|4xVxC{;?KhKx-^
z94!5*(He_O!IThbt)80`e}1TlxEsr<y%BgSGVxXPwZK$iTO#CZ##AMF8>==<`+YxH
zKPCp_bZ9*E%`}NuaDTG>XzZS~3wK?L-3Q!6E?L_PPjlFIx2-^pVY`-3QS04C^a%tv
z+O0QgAZI;m`FgFSr_Z8Iw@KGpG-5GGkvG*MN;MosIk1acl7TrRmq0>E6VwoyJ4QaE
z^}IXlZ#MXs<`?;0#g)P>v*Y9Z8=?~7dpeG3T5%Q2K(e4YfVMXphBr3m7|*8hb;Ur8
zWVqJ(w0wk{yR>&P*h?YR!w>k)sXTv1)*z;+U{(B3*2J-xR`DD<XZYVS!kTeMN}n&+
z7nt7MII^+<0sRT{64z%}<P{&zi<oMflxN&HA(&I#zZXK+i%E883_j%cj9u?#v(X?u
z7rakttLGfHANuB;Wwej7wjt|nZq=4arsgvsR@)$>D_Po;b-c=1H@nGiKF>0*E-_-p
zp0&<1w(TB4!Dp)}5XrPh+H>8j2mL`l{iGls;lK4C&@$o|I5vEjp5@x8%TGh=VJtkR
zLk&i-D=Ku5$i9s7xc&b6gZJ(;`a}8CzFkgDGeY-Ss=oPo*!|oa{NLx06yq4Lw*erp
z!rz*0{GTqC-v6la{`Yq0g@)GmUu<YTkJTJWUw$gBj7^{%2h?Xz>YJj`#-5-^gy*N?
zVnhz8pO55AD%$%KeRhVhhqbNPr|Z{>EF*-`?Yq*w!B2B8U>xdA8}uu+`NoI832(;?
zT_>lw`d2c8SL=4Xxm11jn27EgNkl|MFh40=>sjRQ$P_Wr8N+?Q#hH2lgFaGLv=^Fp
zV-YQ6PM#5*Ln$XJ0#OEvUsq#TL?C8o;0g!!*+sP;!9~#)Af@apjg)9H<plT0m{A0#
zCfLnjGAk6PuudC;YZ9`@fTr}-qx27ehNr(mgsy(z4{-kdzW&Ik-SIe0QVr%`Bu&*@
zMK#DFi_VV%AXcS1*n4to-yFjE63Z0Rs*b<TIXsojp_Jjpf)zDvCsE{&O;spLd7Mry
z%Ccv!9KR2%QNWQ#jYA?QO3Z@XFe99mdPa)`PQCQ8h-ulN{#K|C-)$4azK_QClf#8R
ziyIx5_NMT2L^jcbjPi1Z!y)OHM=a0dawthz`Iv?Bb&{$@l7b(#9|)VPUAaRm6}TGD
zE>wM>Mc@kiwlH%j-87x8?h?Aa-Ls?|euhf7=)8E`-b)^{0vO#}a2W;Lj`>JAdC!Dk
zsn7uifx|i^7o36V;{9(X3tvk)TEgpfmOc~aP>#c*&u+^qUH5L84vPi`X1N|7C(D<R
z5ma0mQIkS*`^lvw24O#1biG1Ct~h9kvP|Fz3!Z+=ubuLubR2^u9R2dEC{^ZD&1^tX
zShDHvX3EzHO>m%(;rYgdPW<&&xX}I}!PpA1O8zv5LGS`s>UNI5kgCW@B}~r^8N88(
z6YQ;^qjw&Wb`TUw^klev-dPNC-htlFUSQw98IV7mWtzL3RlLr=AFrA;r;x_l6k2E&
zdb@O1Xgplr{Ji?*zJ}265szOimNS3yO|c|<@&qVsUI48`2kSE>E%{RK@?M~-NRDWI
ze!%r@`5@zGRnNuX+@#Rzd|0+)V1S&OOHGfB7K(m$e|I0Rx4DGDE{k~-w=th1Ri%Z1
zy<<Lg%JK`0Ed?4_nc6I0^GjaTZ`PS@8YN<@L5!`NJ$#rZe@aWH+FZ)H6cm_z1eY<z
ztM5pc!QmN5m6c3v3~Z+zaN1$jksG2>^9+_9({1*h$0QvI9!-Z61bzH0^bky1zJcR>
zkqa?bga3!Iw+@RdSn`GkcXxMpg1dWg0t9z=cMI+iEVxT>LV(~7!6CT2yA3+;<nFuQ
zKKJhT?%hA;%rj@YtE;-Y>zq@k>Q`d6-;+O6-~sNRI*$&EVX5KgaOE;eV+&vRZ7!cq
zbO>+OXaC%`dxlw{IU38N(#AEJhd=+)vGWmu_JmTS6ZSr~V#&CIMDZ@f`KfYn)fjz|
zfX`fBh7yyESF1u_C#XkSWL{B?oR%hRVPUjPVj4etV_XVFQidgNk@lTH>D4)Iv3KTK
z)=6=#*5+4ZQ`th{hr_n4IiG{C-_8e)-z82aKNIKl27QwgKJk+P{Z_C{5NjeSJ2BEs
zLWwtiBBX4wm<UrBTB&jPx)+E0TWKA|NhZ)ZoNa6TN<J1ozq(uG(o5+sWX)5oZ~oOh
zw-atJFp;5*1Z&D9#vfH<4@+qVDKLuSlEh{T#j1ud;Xd-Cz1~)H(1>fQPtMGNZ(>@Q
z)5VLu6Po?Sh3tfpHf+u>&&KSU=KXB-w{^^ixs+Y3n{OzsTA3TKOzkz*zFAJlWas?h
z!rACLNQ#UT%MiM|ZXI;M*Yq;Cpfcl9V!eUZ4AC}YyH80Sp5t71k;?dCqo&BBX?7v&
zWg<^<Pe1E<54@?d;RT@Pt28Y}!#Sn9d050W2yh>j#4XfZT582haZOsIGd=}3>GY)^
z_y}dzpMR14yib536*^^i9!1nYRUtd{U1-pfy4&q}o10c5g^Nyrs3?Wmabn*5xZPk_
zS^K!~OsIs2llnRQcSX&v@U;G{tk`Q$JA832PQ2+TUe(=bv_YJrTU~pI&&y~MikY|F
zXd&9EtM8bznq>knH&g-<<bW`A_F_L^C2b?@&qih^RdGw>Q!TWcPTtw!2zm28Zjj2i
z)5B3wq`R3+R+cD(?(La&WUn)!>33mUFY7MJV*^{_q&2dUDY);(EIv}d61wKB_z9jQ
zM6dqLT&zW{XiMcS4&3?jmdep7d$m>>q24il;m}`#x0B9YEhEG5Fmd#KsCbEm{xkOw
zaTqfIMe+!ednJn*2(%zgKbTWiwu8}g>she**)I_gwAxvh>zF_iwnAU=IDAF>*4&3U
zm!p|oBs6PLC)^;?xEe01%fA&hm|Mww8cQ?sWlyTdrZ}Xw|J*L;P;8_IDhVz>skJ!C
zBA`Jr9oa&jX-qc}$Edd@DVb<RAo?O#(u|?suY3))#3M=unj7bg*kBYfAb8!iaG}I-
z3Q%j-NkHp`dTY24X7>sDvpcbQ#Au<3NBJ(c|M}L6L&*0teFy)KI;cy_GelK_7}YNb
z=GGjEVGJ41#Wfa<PYKe9>!|7>FYKxmNe(H;buAy=w!1N*$@TiMnHC~)s_B_5^kPC!
zwx!@bu`IdB9A_Str~O#yfP|(J8hFz~#>Xh>0bvH}6ZJ&BIu)Z_x2)t(>1*=4(GX9b
z58c=M{e5s9=U>Wm6xOX@V8^&-Jt?3W7Vf4Hlu3WCREJ@DJ&Xxdu9B`!%8xuP_)pON
zG@Ea!`8mZ9*Rb`+0|14nXL_!liE2~+GCqy6B)_wp^A)8-bWs^-*&k~e1}sO*@l~<D
z6m~HBBp>=w1)DhS_tU8g#FbUu_l;f`mFIuSl7JhhPY4HxQd3s}0D}KM!s365i}{~k
zAg|{dIbq3S4{kncNEOu;o^4Xg2^FAMRh39k@54x|nd8<Io{jKeYu>jv?Rs~9nDd)b
z`q?DtHHNiKnizoA?cM1n^dS*7uoCb7#8RVM6lmA=<bLJyxO?v#;MZBXn0>$7zDlj@
z|Ktyv>un0FlEb`z?5CSRQ$g)s_<rx-#;5;>EF=4AqU`A<fZyRagVE$S*P)EtvYgxf
zA_hGFHv8W+Mzxwm{!bMQWY_z<W&YzCD&KAp>ZO;{DK~!(K^&@E7$9~irui^9vuQn)
z_H=6!WJ1DeSePIRDWyd-ICE(6l=Td25@bQreb_gL%^CliN?_`YMB&V-p={YRs>GiK
z@n3)Z_mgR<{LY-($_G88`uthNn}_FYT>teOiq37{95rYBpBh2YA?=$(<S>6tg>i0F
zRmSZZmEhMccpN&<ruwhnfdAG=onIG{PI2EHA%{6FmBzVIQ#rk76nwJibo@aA>R(R&
z-<H*1Q*oRd)s;W>j4JT!LeMeon@bBm9c}4?MCET1{I|8EpMyE|SVf%4Bv6SU9<8<P
zWGb{j#s|Ir%o%q)yf^Kyx)^)Ka)4`7P(Gcvd^ZuX6Zy<7`F8iXeCd=g(kay5+94wB
z=jP+`wzJ3!di7_^<DMP%x<A}=4}7dNG_e14J2-qG&NgW%0@|Ioa1FdYzqf7EolI{z
zF=8_^@c)>)`2A_o@@(_uvUVF(-R&fMXm}kUsg36Q&~k74zWs81n{lf*y<yw7c9z{9
zH1c%Q>DzPqi$lQ23siZ-$p7N0J@qZI1Qb~G^QO!&s7(vRfM;ac<lCt{c{)+P|B}lt
z|Ng;!k1Y&>q;g4ocmZ7cD;|cVW<@d*mVo%zurAw~s^WFMqO`GW*C63iatw*5{m1@<
z8J(q>Dq&CSq=KdUZKTczZ+{C)AZ6V&tWk;SFrMBV(3A_;=!fkT9-%qV?)b?c;{Y=D
zSDdUVYpB$XWV1MB<x=v<0=TL{yfkIaN@^4=!7e0Gob(?nAzUO3=9EV#*jO+fO1(K9
zb1vLiFda%lYUbF&0!fs?uv%;g5`H>kF<C~>=>~2T0U0xK+3ye2h2o~25Dy*KV!1=b
z4ZkQeSG#U9cyCv?mXbewg!L>jjU>^Vt2g7q_55L*NJ40S_4q5#zc790+5?=ou_sm9
zi&wdHJ-EQtg&#kNSF>^(4x7xc7fI-gZh*2*@g#uj!c9}&jdCV8h${HA%w*V_`OJEr
zRFEs`&y&C(b)_q1fcJz(Jg?RnD!sM5pzax#nlq)}uO$ri9+RS}wO(y9tY++R%;Ls_
zWW^riJ}{PQ9IgJc)E{TcwU5ka9~jd(Igy^T<!Dpso3~;GQUlvys7^D9S=#V@MbJD6
z(-gkC$2}V!qY7HfkCm#d^+wyXl7zq!%N(qc+A}Z)({JJ9h<Oc(D}Dw9sG};ILmiFq
zZ?R)#ABJ_x&|nRc6sH_33t7u6mZ=<oyK<6Lg1eq*lG`&fhSI;{<A{5`gS$cpV4^FV
zQyq<nZLxD&A(<#L2aC&pH($$bg+lv0>w19Y<4l?TLG}nDGFd<vKASM|2NlDm&Baw%
z`j6_T0kWJC%L$C&9+RCZ=m!PCP>FEYc(p=TS)v~$;lJtDwxoD86TG2NKa?_b8)nI>
zzN-G>*m+D|UxsC|=}taNb#SJ95gbjh2e+tf6J9!|2U@5@qWRvJA&?^q0gF%zjJA45
z1OUTGLZQhEOsnt;goqq6G!tg$F#7)6&Ch*qPvLfN;RE=^hi_149>mb4)VOyNZdl@9
zb*`jI#JdMVlRe;NJ~BTyE-*F0|Ni#XIdr3`#~dXb%U{iEf-T3`oWxG8KRU1^T+d0|
z@GOjz!3+nsQ$9kT8j%KAq+DV|4<4Oz7>TBD;!kf`2?v8&GHfSX>?pMY1F&ea#7F`B
zH@E;1gKsaM<Ne^()o2v!k#LX_P}RK`&ja{cge0@ji^u&7-dmE`5o7o&vuMpsN@=|k
zj>U%KUS60lIlhwWKDb}WE`fc?Hwi;5twH9?2E+t34%h*!1~<<pZ(>eTu}j0y8-@H+
z)f}4AVu0x`-R~ffnBH(Z_Bnw#@EVco^kFXvzwWLBE3^|)k~@g=0#eyGLpD|ZYwMMC
zu6*}Ec(R9*%t!s_K0HUL>g{bs*@!8UzUdTPk$m(BtmP|y34Fe|ab5YPS;_8n0U>{h
zhw+;wE~JZZ`^^sNhh4h0@l8b+IrEPw9D52W+m&Bawx<1Pvh|CgBiT;$pK18ws&`#~
zK$qhMQ{crRqZNGBqP{a+qYb97-;Nas4h%t|It9cLE<vxUv+wn#Y^$Xu?@askWfv4-
zgZmdemxB94Y3)Sly{V$41LHy&fBVY>XnT~4fLG5v-Tk%{Pj$i{I8-XPbj+XBi3$vg
zdPkBRN{nhF{dgXXZxW<33u+7;d&hoG*siN}+b(I1))68_g9A9y!v1Q*^K2*J`Kwhc
z&g;^TSi`aRW-UF#k;z9kcl3*gB<reh@;}D|vNt-Oo*w5~L+b5R5)*by3}w;YRcg@s
z(=USs@DChCr8?cp-WjE>uZ#l9>zYdD+gd_K&60FgKpkaVus5QL%~<91Xp<##F)-O2
z?OrR*s#=11n|<XZl37T85amCIejrGer#Q^@CiaF@5xN$*8MqzCS}df)<b^sNHt#mK
za;7bn;=7|LpiQIi1CN;&hyfn6B4^`?uD%pJ<}!4gi0Q%r8q5c<NK<T?V37hb!?L<~
z8Q+SsdfUFH^iI<effa%r@mC=h?0*#!BU{>2MhQtz<5;LN$pazff@Jgu;x1MXUl(rc
zZc;sjB|NhewZqQJMaduK(f!31?un2!fVDlEEJg)bl#p-a-!~%gTIOAbXs<vStPc5g
zmZV@h<)L0C9}teEYtGpyoaLN(q!D#Bk0e$9wUI{mI6=)?KDIz5t}oginuG(9*iynR
zwq7N=Uj5V(w!=8%!aO|vhte}O6WCbHCRg{E&~mrK3#Q4He)TSMAO7&8WN@A?53KCk
z1aDZdvR5#EQYR}iDB3D`$w?}HW(|-aR5o`zhPU}^+Y-NYDnNfy2-NT;Hb9%IeH7@}
zxV`gTyuQ~E8iC=VNmgQ*Q9e%a{D;;1(f`-#&7gt}CNi!4u{hRIAw<b!6WPt=Fv<LM
zO8STV3h*At;V&ZOi~Cclu%xLuTk?gwRIs{`h9y+Q1cj~<!~F}lb0*L&<;^t<LnpPd
zzSNx#%&)}+T^5*My99GsuxT3|4m6p7*UXFatEpMrMq*j+9meAZ@+HHNQLXmFMP~hB
zraI%I4NUtgRpv^^`J-fimM$6GJ0n5rue1UfKe2Jd7?AWBy<R2$TJjydzm`18=&!WA
zU%-}JLt$3EEfx3kY|3%!53n&-lAVPF8)I?!?3fti3e|nMfA*pEj?|s2fL-AJ;Je>{
zpGxxIqayx|2fXIfCKw(UJ&-nNkU^6uH@H^ltgu3(y$Vf^Bv+xdQe}isdxyK>!zx2T
zG$`PZPgRbhc=Z*X=3(7S)c?`o+w{|Ph^DkREWt_1Wmg!jex-fkAlJ|77w_lFT~cQ<
zsx?b`*<vDK**w}FE~^_6lfy6PENbUNY~-~<@wYfNUTe(R_$_)A8L$tVdkH0JfJ}VM
zA)?gSdkw~0mA}LuLS1(R1v4%_JVZ8`d@IMyQe19}aRRfKS~e4b2ycl-A-XpUn!6$H
z3qiCMl0=agosRK3a&2v7@#%b?S{rS>9RBw~>K2LQU$B<)EI)ZZSkcinEmwc12biVQ
z&dy=gxv3A$#yfn27N5576DCBOs)(0N=F|Gb9*GZ)jlqYs_7M9>FsD9Jc?>5$1jNdo
zZIEX^Zm$VO?vcKRIh+<KV@Xvpj=|(^;$v0*Jbc9j_?)OfwaZb0#J4kzC~KVq^%yEz
zh_Z_A`O_=M&`e`AhqOwI+sZf6){)?Ai57O8h{w%)vo@jtk+NLzD3;>&u2Au>e(N)@
z&$1oo{+@}X!qla3p4H5};Aln9tV#o>ugrt!lcK3)>h5t~on~X!52x2s1wX<M0`DYl
zc-*9o5!GC~4Dk;?H9@H&ZL1}>Z8L^a>7sS51?jtKZcJrUl`=gC74mEgdQ_%dva~XV
zYi54ctt!Xo_S{UVWJ;&TI^hpG467{Zd;MHAzt*C6|76ESc&h#&&h5{wJv+-Jb&7dG
zDMY=#XkpdSfV|-AB`x_R73Vrx`OyEca$3V`Sm_Pbg=N>+aBKebORWXQsOxo=QwOuI
zZ>yoecGDUC1C&KZ=%xDZQT9j7xD{p9KGl%XCMBDfqI0JRYa?_9Iy1+^pfD~%)Zj8q
z6g1Oobs2A{!ouhQvp9iI;aol?rO&l3;+a3HB8ca;`RbUViv}0ZWRZP1$`H1pxmNTQ
z;Uo7T+N5^@L0vn$@5*X~kdfdTFPE3-5nh+XE$yk?rP{=PVv?EfpV^9|WZZ$$-|4=7
z<&bIOTIyYiWCw>X^Zpd56)0Gc{+SV6)$z<(T?O;`^QP%YP&4ZH9L>hl9{qQo9P7)g
zBCl2=ra_c0o7ZS!TkGC=S-<&K_py0UTHqDYKkr@DyV1Bsa3)78H25v|zkO=u0O#R)
zxO!Ur2U6<4*|%vLy)j_$E@4?C4nBVKG0W&QzIcbvxU*v5a`3d_5)84s;{tsN)d~-e
zl2_f@DZB}(HE8pLfwvnS1oFiqaT{^Q`A!^w5Kbf%+LF!4`I8UW6^K!8?;|PdGB9Ip
zlu}YIgf#F977^MM6s5EENzAMgFCb$1NpIJpF8I9_R``X_WL>B*y^o<5h=HPLRDnyJ
zI1Zd^8%Jkv5Er}ZB88z|?C#h@;ey#EwQfjs<ZJ+kU?&1dyzhmCB)LD%xRO}5%1Kb&
zH<Z7%q?DP7I)v4dcC=jRmW%I_uPyUAgrUMI&d40j3CPR+l#S0LL{caxS!Msz#(Hnb
zf)qcAoBH(QJ5plTkFI2lUCODZI)QtEKPJw&-mEolfvQt(0mEwnh6=4MSe6$XQkrcc
z(EKNA18`%=PFvOnWNy)F9bwzR3&-g?*@J<sQaBsq;+603YNBvx-F-6T3eA2DUf*wh
zX@`nC7rNnwY2#pJUutT3id5lBXGrRJDq33WONsjzEZC^$OEq#h_N34Mobn^ldeUn@
z8(a?v@Qn>dCXQ(z0=q5FzDFcPWCVT5lUu8O+`%GUfD2(+4AK-i?k;3(Dsptw8scEw
zcjs1{A2v*mNjiN&9yR*s^|Mjr6fX!50HpZ-ZzAG2*ue;JZXOQK|6h2-|K#eJ$OXqn
z$f5^#Z`MUgb<<i{zQqi{VN2-Y&?~5yAcB1zsP*uk=0u29&zpXBP==0%zYeq84Mb?L
z{4$r@>9Ed)yV||(6x-;vd9!csXEtvq+KXF^x;qW)oa%V@eVatu+F4=-htb+E6G%zh
z)YO1=iI>`&Yodl}r-@`2Jh%I%c;SqQ)G=Dv@_(M(sRb&EpfE{3%}_)qR2@Z04Qsh8
z6{Ru?P|Voi<j%7CyY;xYI3zy6b%_^{ggRkZCvIg!uh0N_LLLyh)CzJ#op7w{wz9#|
zqCn4(huAKolDDEuysX_e;esDVcW;#EcmdsVFVdTAvw<^@vHyB1_i}M2@IMb6R#y+$
zWp4tTb;W-VFNK?avS?@^ZS1-}+FHb^bNe=L4YS+Um_@@=$@$Z<`Eplj!_Iizrd6M|
zr9VNfvAC;pKI3%2?Z{2Ts<Q8REdhsGE}v_8Zh3EY?*%J;cU3?+!a+}4z5C09`}fDo
zPy2)SyPK1sH=oBH-TT?p_8UnTfo?zTT2`L#Pdg6xWy4k~q;F4mjozNOPlNyAP|&)&
zIUb~=&zr!bei;4<3Hp9fq+j=)jqR}Malg#F;agDEZ(!%^O;B0~Tem$@<^5fMk^9Ey
zQ&%sz1BGW%qxA1j*=*&BdE-uL&)Q@A2Y&bMEkb%-4^G}{pR8oAZFv=HW16PC_N%{1
zmLwWE;npo)I&NebZF+SX4DP)86>e_mzMa*%8erE%Lq^jVNX<(^s1;zqU`UAzsp<dn
zb>T<%SR-Zd(Q1^6;pglmhtZ`7$5fX~u8M>#QI$lbO6v12X?4HfaTTi)R=X*3UtbwD
zQR0X!!z)v@JSid2n#zDx<wszYEd+O{$bn6Z4gNhSIavA~F9S*w)=j}MO{vl};Uk-7
zTSo<<oF)pr*1f9OyjZa<y7)YK9wVzkXDe}qEm~R!eXeBqIno72RR|=`1KPZ5sIA;T
zNJbE9_QO|1T&ubqpA7B;(t0aWv}rV|GR@|YwEDp`<u&8~gQi@uEw=bP{eRHxdY3b8
z6=)#QzUeb>)9xkCF{~#fIM>P)<4!Li)TlTq1XMM^&htT5xd>_gorE?q3-;Q*w9ypC
zgQGi%c|N)-T1+i01ubE0RqmOJZ&Iq<(d99U+H9<NRV$J-Y)WOTIOE&LFyEt>J;Ns!
zo;4}$6h^@l&{#&OI|tubc5VI-ZY9!tJ5sc1HGX97&LMrC8=r=psR78;k~ds^uCLM-
zi!*{ifkxt?sAR_*K(0k7zhy>U>)lFF6<rL+S)?2!g&p|`Q?6&-70#+JMS%D5D^hQp
z9J#^WhoP^7qd1M`H{qs6)FDcDY{3}pa?D?pwAjgqdV^sxVY8DomlpX)#3O!&G3Umb
zs5<3;VPKVk?2^KP!p936km%ARf--eSw%#(UN01M1yRzUIn6)8*y?;Q+EV7^mDE;6J
zp5c^ZhE~G)Kt41c3~T$BVkVL?tUnDG7b-P#S`oyz;^a^cwOPQ>EO|o`$NXF{z8Vx^
zCZWBAx(REXE^@<{zM+t$QcfN*4IXtdS^=USIU;IYi85Ov^j!xrD3`F0a*X3JoKQov
zZA6h5o+Y!qV%NNc7oPa%tFfqX?3i%T;YpQ*a0A}N(_(wZSSg5ZA>*bgrEdJFrOauQ
z5HVB95u7u}0GSi;=$u-o!T5DyAH}bBs3V0f48D_;?N&y=qch<U<<|b@<Yk=sN-Di7
z*PCGN04R1y(iur$bQFtg>n$TcbH?q@%dOo<S*@Itay}v=^~s&<Esi2!5K&^bB^a?L
zpvDc%)0yXFml-qG__HlOsj?JQ)@sMnf7jplaUeWzSuMRyKAP_5U4f-O^-`$VOsm*X
zD|rJt*?emc{%$CkqwVo9VG#o&yt1Z9y)=7Z@*+Qt=r^V0P_idW+_iP)AFH}Yk4;g(
z3SlxruljXi`~rWaGbjzKU~LyT`R`dcenDH=DPC`;42k_x#1s<8ByLI}QpFU)Q45_N
zy4BAQ<>&v)lg1w0KEJ>zaL+?|G|@9C2KzON5t@?`Iy(Hdf)RSC0^J_55A6{8?CJP(
zI6H~xNAnQcvRWL88+E!>VX;9sx!^==esVMZB%P>4TYlrX{hl&%ptJVNBhcM}e<>lK
zmQ)NeaIaZ;II)PGdP^1?KM4b0j(JZO2cKQW*jNKSu$Acv%r`DRnD11@SB9(P41s;v
z&;vT^<sRHOX!BQSOe6yJH|V%)tR?I(6c++-d4;ua(5nQ0_7DRRqrj9AlFP`bL*)LT
zCC#9L*Rk9@8oP`rm~xcnTd-pCCAn=Snfqi?e5i3}TEV&?<>04KYYK8R3NXV-wiL#3
z;b4a0D{&z+D0lh)%t{>PP!M7Dexo?2#X!J!EsER1CkPqndtv|185*06v4rgrk;6#k
z%+N?8xmLs_#OpIUe-x*cF0kww+T^<wfg<vMdr0_e67&v^z}q8+CjM=ILn6LbWj>e~
zpJY6iIG@UG55%y59v*?G#=R;24bLhg^LHvV2|~aO18o?n+!GR$lZ=s79TR7g@{4<g
z<s|)5BHroaE39k=;1QH@Fk7(+5)0BLBo2`Y<PnCDEgq(k=@bwWk}>6&&E?WC_2a&R
z#X_!B2aC1I@#mAm5g`Q;L$5bg@3Jsuzoq1Av}LH-_&=t00vgYZww?iAvMQ^mbi^CA
znH%d@#K@3ReZ<H`G`?We`@g)J!My6Xd;llE+N1q%!Z_JKfNyf$+?^c$MtRs+`uuMo
z!skD&{{^ZInlf@xAce(}ZxKF&82C{I<$(EuzD|2S<53&0Jv?b2sap7UDJWRTWQU;%
z4I3!;`S8Nas4Jf><jx1Nbkc>4k?W=hl!%FcY-=)5?R<4IIJQ_B)Uyb=?G|n;Boe|V
z1CqKh)@hd@%I;NF;JZh}Rh}v0?-z>2ln}rmP8%e)O)G|Ifuvkjso&+@Rc7Cq00bTp
zD*ObLlKjC%7{cl6)0Bf2I@IAuM{H$fV#wTqk9U^txlk2Ap2R+iHlrSw>-db0`SuVB
zak|%kbTkJ%a-BL^LDyle{$Q#uSSY^^a4Y%5r@j2vTVV4|NdvI(TPb_FV4lFe!91MF
z0$W-hQbZzhA=!W%r)h;f(W<z@)PK^_d_n=VPAY|A(zAL6hiXC>6O2p2PP0b24|Bu+
zG)$aRh@sI7g~^{wwLia*Gq)N+e6;c;CjbZ&LBALvP-iU3N!n-jZ--au#%97m-4r9P
z$Fm7;;@Qws_+m@Q<_6IXa&%)*ZEHS9=lrpHJ>w%?4(%p@+3fC8|KS2zpK->HfUOPl
zE(?ZdW{(@Eu!beA?x%9b7~jel_T_pQ5@gzvPKHKYa_%FQi%-`qkFR}hR!h%6jjkV!
zZT_?^4fzqCsRdPMp6zU0xzPk@m++RkV(SZ)ZGn0X6<RPQqsugWrZgRqcx3Ceh~gGI
zj*3Y$tZve2DB#zH^ra)#K8$o~ns+P+6E*(Q(vD@o_&{T(RUt_!a|dm6rTtOFx380S
zRbjKRtqykm;Fih&pTbz>WUligW$`u##~E#*tQ4+%>z{OWSOW)a>~T6=DS4%Hv6uK-
zn*v2+KND3j{G^ZD%Ak@>SOA798TZvG2F7yDN*NiaZ$U~^4~H<u8mJ1WLH>Jsg2<BW
zo28=3IZtt7q(Yi<{DPPD6!eD8{dh9rM6FgPlb~86(ZOUjTAzOJk|kejAQ!OgK!Mkm
z%OCrL_@bv*-LS@a+)G6-kDIIL`qdxDq8GwSFSMe636|a>{|%1{-ermZt4B%pf2zpx
zZyqIUG&cX{#sq@5mn+#)a2b2Fa5W+2Z-Ed^2wOn3EN>gNWdh05aHH)`(Bat+gP9dL
z>esCSug3td&0OJ-<1q&JUwuqRGb28HbXX%E-5f<WB>Ejbe*7pz{&pB$cNH<F2uAVm
z;iX~Y?VpIUC1`1?A$$4|S-$yI&zegpDXJAU>V#<H5IVzAySn%4vNt-A3#vc_+M<zc
z2G62)NEf-()T<&z2cywEpneHe_v*yfPlFG0cG%l!wC7i-6{{mDH&)($i^x0@g_fz^
zFZaK0(>b&M<R@vKRzDfl>?MJ<2JnKm%RN1xx935Ytdb9I=A19fiqBmBq`2}+nO2@N
zOHB1>THyD0+ZpeEsQiy9c^O_Eh4!CdyL0IfTzVqCgYEbfgBQ%!`qeumTLaOm`@Z=d
zFP(NW@vJ}}QoROpW~djqPK`GZ;!oILPtO4wifmveGYhUPq8A!TqD0DV8HUC`am5Ha
zp|{%qC}eQQUFhPkNEVo}Wn;2_5}uWUI2F(*aWo;%6u<8iFAcZ#^l<y7DNEBR1dH8X
zvMh3_1ETC^Xw)7YKHFKR5u8W&#OxA4eb0BGVkp{BQse^h40Sr39mS)5Y?7-hPUQ6>
zvgH!abZ(mK2As(%Wm~oE#c)Rs>xfzi)IJ37R$RCcw&;&QvA{JHi>8X(L;GucDWEY<
zEj9hQ<IkrH`j^Te?S0FJ!e9@^3HZbRZ#@|7oGkwt#K-cVL40OTj+Xys0fOO>o%-0(
z!@WQ;bd6#(603z!73vtK71+%<_3jcwZM2RgtBq_WuP*`=at776osV7ZW9;48#V#}~
z+YFgnAUpz|Nu$tO+o9dJ{<)4I=L&?&yt6=~Evi;0^*E2QW+aZ`75uYjv4I52@DFKi
zBbb%bG4>^xH7pFlAn|dnz8_A?GP~yKQ2DjeRBZJLGcpSJwH^Z*JkZZtdju;IZ9_yX
zHI(k(PD6y%Wg=2=F9tZXEE-=FDNBFxqE_#CGzF|WIdvYbBpH_`5Z_f=oU03oxyH<o
zi?HIw)}Fd%phnH?v1-QJS#oToEUw{GNTqL!CA-i+@M%N|kE-wMjO8(cp^s%h*_d<X
z#JSK&31Gh&4}LGa0HY#*;vM}9gzQG_QwgqTZV|OhfTN3;a$H6RXCffaq-4o-{V(2P
zHEXNxzZYX2y#JNA`2X)>{69Gj1~c{k7E=q}d}E^Ys5}0ht92szwU6h#2+`Vz@k^sI
zITiH?LaFsi(5Aepk}2_O_4E}q|0cgkf@scI+BE@OCLc#0p&pwdzT2}Krt~}YkQ%W;
zUBH*n3C0(THG+I}g|2VBS8qf9y#v|j<JP;s_+lF6P$-)N2G*rqS~(Hk<Jb9O7by%6
zcM>imSDDv>o%@j`)Q)KfzC~v8qDh2GoBaUTlZe6DR-5%2J8Z4I7+NMAN+!tnC8ZyW
zwe~kF5HW@t0NROl=)Ek~-av4LR_~gLYK>Bk_~X#0#u7?Nsl*XNN?Y~pO!4H4kIv|^
z!OWD^Ib{jS@$zRALU_cXkYw+7fg<Z03BLU^0~aVV{iAP-y_<;yXOO;~Lrms=r!chr
zncls`DHnbLr`Ip=!swSUzy13KwMuC=O2eT8EJzZ^hP)MQR!{u8N;b_QbX#<PCpv$l
z7Bc2DI^utkj8nVxK!M#k2FMbL@`p(>viaUV$AVO0kOtsA3WYL16d~_)(D!DN%yOm)
zQl7sXC{>auHO#58khub$ccAC2x0zkYekP#w4og`0V=m~UVs#G<sC^VH9(vL3gMAuv
z$x!u6Qcu6k7dP3?Gh)|~Qw>ox;}25AS2p4pJWIo=)Hl?<yxeg#XdJW2HK8pb!~|NG
z;@#W=z5P?wlCJrbK4QbU62<@~#Uc8jnLpO8b<Nf)&KECmvHCh_u3_MQ((0Y1StxKl
zttn|6)V>~v?(9pmE950hqxzVeEA2%8b2ul|2zWvlM99F$C|g-%OK(+ycmS=nHLg<A
zn08vpO_Y|)LL%5KW9phGW&~8A_lIPqXP~Z#E^WvOra?Z;%{2Wr8l&l$RqZvHo3+LB
z-QXeW3ZFU5nP@5fZh7lmfqugmdr!4q6AOirE-vNZkJ_~oC76fP65jl|!IPsiGvBbL
z_%rO+KEbRr68&CX0=aN43VywP`tmAl%RJk!)%xo3Svii@j~!03T)yU%c1<yUgF*l7
zl*20tM7IN*LoINs>c3A@<@j&dUjO6%N)fjM*GCHn*GGeVAp9<jNNOLaUL~z`Qu-x{
zwwN`3xxT$Y;W+4$n#pumrZAkReBI||139(MBA!DMgF&g<t88K6#2KYjNitl0)H4s#
zd{Abyy2}GjmGm4nSI{#~LLR45VufiEi^W6!Bu}AE4U*+M=oW2jzgioxpTsehUM6pk
z`LVW9Ss7ao+tP?eJco1q>veeg_;wmUAo9e1)bulr^qPOGO040Om$0b&TH9rKf8^6)
zO`yKa54W}8{u^#Y6@>Jf5iWPxu)}Dy54}IJZ=+u9<eggULY2afv%<<~k+ALCykM!)
z4e@oHYZG>D$G*~)nne8I^qw(>-nwv&L#X2aP05mRgyRyY-iJN^jZX85ZsR`Rcvm_4
zsITZAs?)Jfoxwp#fP2!17GrC1ZC?C6!oWaC)rv7+%!_p~Q_#;@s<!v}a)4Xum9EDF
zrH5bZMQvaf_J9!AN9v-;km^E20OsOfaF-P9qU9C9O63N>X(RoAT<0|0+|1ofSj`+Q
z|DnRo)KVP-#R?q{ZzKQ&^bxq@KMpl1Dt}Ad4PM?d&~8&kf4ZIwfhWX*L>LU?DAR49
zYcy$(eTmc&?SwiHQO894b?mTl*~z<3(gT=tS1yuy#++BiI#|H2ic^NRK*3ee081?6
zvsc$BazrR9mxWnO7ai`QlTwIV4|A{=%BaZ-Sy((JC*u8JoDo0L66gP?0{XVM=m+0N
zI@y6;l(M~tJ;0~b!Mkf8k^V^nGuLcBDhODR^Vaz^>ZUj&nRjl*YlOL_l=Me@m8N&(
zk-gfD@Nu7HhsvSbgdqvD0EmMhYcg2+oz`Z)K*<lo#akz&+~Hygb<(p}*pt*alqb_6
zRyMMYcmlIoqKZAg)bZ~FIvNzEhgyZyerQ#69N^9?XZkL=@g)-OuG}z9f7=Wn=E|Z5
zcp>c0?+;ks_TN#TdptGv^*a%HF1>#SS2j9A!zebQ%&SgigbybB=WVCpX)!}T2mx^Q
zhXPRjKQv@vW^Vl#F3rfy#M6z{`hVJKac_2YEb^{p(E*2ba`pG(w&O{pq!@uSVq}Cl
zu$BdRc?(IH?jd5pG-j0cm<ol)c8*L??P2tI=fY%ec~-d`?uV&mzZ!Tix28vKUcYlT
z(0%^fRb3G9yXfm~(9`ba`^9C@D@6p=+ZAt6cOWny<ns1j2YTLoyCQoBMuIj8Mc=QS
z-j9d7LH%T)J3P_X>>ywy**jj)gNo=Y+o{TFBB<lQ=!zh4y!&NcryDf)P4so{^6+^V
zO*HU1GYEKG7YG!6jtqLgMSFh&9kT@jw?X%jLC@QwKS4MBm!PX%G|*l7{^2X|vHN8X
z?ZpdJAE*QJsSbL*j@*2EkGzfq0TV%2?GG;vfk2h+m+Q-XG|-b-;Cs?cAeg1+#CS5t
zSD@%So@h+aHC_H+0=q_Ut3jYe(8KQ3`yF^Fs(hZH$8s_du>D;{^!)<u^_?upTJ+g3
z2(+6B0+xerjo$Zzo>joiz4r*d9;<+^@PdH5n{WFn-FF$H-IGSIZ;7C5GT?RhYm?}U
zcK2$>-TU_D`+N{c^mU^9?X>%8wfmVDl-T{g3fi7}#|Z+qZ`K*TJ>|dcH<^RQJ9pfb
z?OG%Q3;yi%9>IIK`Thn1E(YE98-XG*`-1$+gKn>-gr<RWWWz?Uc~<YS-7o#3p#9Ca
zYw*-020f2;zh{G)lYKc1dR5duM(Z}}23>c*xx5_@gJ<Y6kM30)^icO6qw=Wnjwbqg
ze5uzlm;Zh&dSemv*77>Bd7~Zl0#;@_cml|R9;Z&7fSujIYf;fy=XHh>&MAY>*`@K=
zdVGg!i$aP17w9V;i2;LwWDd=N`!B>CXCLC6<4C5+0&kggTFF3TqO5oc20*&Av!ItI
zGH_}>ScQ8(LEx_-UQoMA5Z8Ox+jV5nTaX(D=r(A73N%&+@_$bRJ$640soa)tKBK<_
ziSn;Ofg-y>Ad~o~$DlD&(6JL}@nLuK9k}_noDY`jVfS)qO7wNVF6ikp=o$1H6a?&k
zeT@kkJpf^qAA;B2c0NBdXynAY{1jZ)Fc8=-`g-+vnmBfUEeqlu-|hyjf~?+Fu|W?{
zZN)=DBJbIUm+!AJ-%I)JK6*?p%{FKYekStC&>H(@_Vt_0=SPDJAsOIpevs2e*F_dw
z_p}Vd8{co2yS7Q4Pc|l`4VTV81k75WNv0AvS7nDNKM87FJbgRF`5h4FIY@kPbWO-%
zhPAl9SbdxDwEOt%5}BPZ@{nuRHkY-?_jGMG?w#Y2%VN<boX?%7Eo#)=Vpg@=iq!3#
z7DZ8ZO88-(?~r4vd6%9gF&2&9<1kkwu+F%u^uF~X@6$^0{_dm|sTGsUVZ&tdn9qP6
zU7Yv$)uHI?C1}E_?m_=;Qg)4HV7zgn)r@#CAaUk)`J^FXZEj*^ohiqpbAyu2km^d$
z3=DXPx-XE3dwTIWuXr(xy4(7RFM($V<1%rxeU9<b$IxTp$0Bzvlc9E2d>v8y(1zRh
zN8;+^dE5NDO(Kf%(>=90%eo7<Db56JxA;Yu_z!fXje8z=o=odjZ@|ulTNm$X-CEBU
zNj<({Eze4~l66PJ+&Plpzs&lT3^(y48Tf)VeOdMg>UCBd9vbX6+OErJ8rPO)LJ})(
zUp~EjZfb6PXw_TNUSj^Na7gIIf05?a2TSYp88@iv@X7nz^a-nwljEU+NyDH#QG#q6
zon@~EivMCBv!x}Bq0<z{GHC%-E#`CAT*8uXUWmt#_lXBtGc58!mt@7_>EnW0tw;i9
z!*qOnez7@EbIzdCi1u$HB*BE`{sU%1w$<8O<JCl_8&5ZrU5|%v93$zI(KXdn(5UB=
zPsBO384ic|rx>oS-u-!CD7Wz+lccg+t&j7y0rRI(9N~rsUbUVKG;Y3F7x-x1j8m!4
zgRAMfC&E|2fJSEf9$lS+o6qNVYlR0J>c1|+)55ttr%Vo=hut^tf4doK3pO5H{hUd=
zN%JGQK8x3Gd(eHDWEynYh?QpUn72GcTL@irBJ0L8SX#y_f9iM~#r%_wpds7IKbsmh
z#LtZX&V7wJeEO)~qu0R9VL7R~-u$O0rKW?4BB6DNbv~l^NBu!SSD;f3#+4<^hrRoU
zz5|5;s`IS+E}t~d34IN_Y`o4{VAnkA2YsP{sK@z(9?Hc7v32jz+oPAA^Q%LvaWhhj
z#t61V=LV5h#2VVf;3rq)F`aNKJYY}Yqw9P!)kfmJ|C2*pXhsj>Q&;hM16<_xft+y&
z^DU+SE%AVxCvy8YvhG8&xOk$fHs(NF!9%{1;{9b6CEwg7Ylh;jM9yK5#cK7SZi1%H
zCezPA{Wm#>rrNf_T-HaryO*3N!hpDza-rGZi_2)HVzFjBS|_OIIbOSTPmWuPg9Exa
zIVW9RPR(ATmot1cF7sb*ccoo4zh9Z=%2o`!Y(NMe%F~v=;z%p!<)7z!Z8F<UUT3c6
zZiH<4;JjWp-_CpOi(hBdwQP+<q}Igv>xw+p{4gCBlc-56e<=MR!eZuAV_aXizOKDZ
z#Vae?Q2R(NW^(8qo^sR4SQra*&2?yi$!Svg<Z|AQOUY2i&o3zK(WiP1jM$}o*d4RX
z9w733@jh4INy_VVW!IT^<@LWi3ZefQZPf6GYOyb7yvMasV)I!3%GawpI@1%jXj~-f
z*P;D2ewGtKjd3Z(ov#tj;cE<Kz?zGzw>ZE`KoDrmLaaP#G3<xm7sru#>R|}|t%b}W
z=VbLL<#EI9AP}S6<p=klW?ZNI&m%TlPs`yro1{nJXd@(H*fs9&;Whic5za!UJCDxO
zHJe^`fDEk-t0LFFgo)ojv8XJyYnOX;m_AOzs>CbioWpYmx9*(2abEL$qO=$0kI{xT
z%_WwbRF6Kc0A|QkQ;^5|VwQK!Ir))ZjxVBP!PDaRvL255z+$gMN0R4J%B7E?V<&q3
zAw;2`cgvR@>i!rPHt$%?PaA<XWE#4G%AVNmosY1!Db%NB28F(*-RF}Bt%;j~R;`V{
z7{?JBBcSF~xA^F=fl|)JD&#w4aE!0Rur#OxBsH~;J!`o@+PnUFo?~Yj7E+I~G1H#>
zMKWA;C+#UNwJG*6ivV8W(auYQ)PKuZl08)a*^+7X0)lG^k1a&7!uxB5-$(q7#~L1V
z@||k7dZ{scdTXMlk4(&_7mUKn^)#^hwBDH>zS1>f9VSjXb+8_g(qCs8yHNdlD1J6I
zSe+{XH-zEK*j7cHoCSj!-TfozBFqMf${_(eLUoON%(8>+vI(zao3}`CM6Q?h5ZSG!
z%Kh_0GX;o3_{K*9lc(fsyDPSSCUg=kBT2$A3y~4Ahj+V;fN#~Cx;iEW=m|n4QL?{&
zukOyTQ0n!dm5Tqdj7=OA<;o$Kz3RJK<#XvcJa8u4Y+1p$bOyxWMnV#8qc@gh$O*bU
zT+xr>2RCEzh1Ap?^<x3-TDCD#ccS6XwS~mkTl-aAo}hgv4asT@wF8%VgrLr5fz?_%
zMD^1o;<ZVn>;mF&-F=QwVoSz-SJ&^Ifv8C{xzB_+z9~@%HQ3_~Q5wH>6LVd7@%_%6
z_M#kiH^eAr+5H96*@t1kl{cUcycvr3k)a(tpHMG16%V6}&+w9KxIBLmw_4{o^0OsT
zJK`xu4h_EQ{PtRT(0w5nsUE3wBxMXk@PjN3*J%2P^fg}6?keZwNKg$=;6sG<wgPL?
z#+Cigj`Uavfv~)F4Dw}LLH>)keGHjwAy2t&=z3cHXbODezU1EkrJSRK#BKe<3Y)HC
z^TR0QJ{@z9+FhNc;V%+9@Lo~A^#D61^xQvF-YprjJv6wBz62Vs->Qv-$$mpI4<b`X
zsjC6rf4g*7SHi}f4WWy(69c?^YQpTTaD|*{C;cV+wv~caHy#AFiTGktFVp5!dES2+
zwrascCia@FAVopk04Nu+FL~Ry>z<+IB(d)(ZUrR1xVW@NiG7>sGdD@AZ%1AZcv4%i
z!8IKNjA{3y$O1Gs)x#gdnpDI@%#WcNUGxuD6GNq)xq2p5B_J%m6kPWg^B7G|?ufg#
z^Xg4Y-_^~-+IZmK@I!D`+7eO)2YdU*`ASq4^^&F9Sq!|~2jX2o>O^aFKjAP7KoltK
zs_=>C>>4u48njazUc+ui%O8xYd+BddD4<Wx??Sikl<V9A;KK`e$MHRhH#vxm`QopO
z=_>YCXy~p9uuY-T5&}h;$+v$Y*xlx~^rW)k(lurnYgubWJ<t0*%<~iYlNu77^ds=N
zJUn-fS{m!tL+Ah|O?JzT4csC}$uiYV2zV36ZjDsy7Ig(K*stJn>YBJiy_9*s@MERl
zM104l$F;s8Z`_gEv_fcvnBPtMGGrql9L%srA~Y}f3V#rm53vH(=_0c^=6Hg*G_Mt%
zPUWQR$#^Er4)Fm3CBnT~hWx0(mGY2J)FcHmS?HQgJAzF%VW{(xo#`tfl;OnL$OKa;
zTHX63tJW3Id$MZeHSR8_Co2B|6R$NtcaeYJvT?<=oKsF9;2Bl!!z2-^ce4o5c1W-{
z@ww$NTaR#dny1~DORqd=d#EbPj(I&EeV1!Mxi6A*Zz|kt_sv&(?Lpm+KsIJRC=uC7
zxV^k$nFRJtxRcaHKz98z(Z;vJ$+y?8`30AB_#-qS`F;F68RVoo9Y$quIL~gVYXU1c
zq#)TE1h`?Q7Q*H5zSZ|Ve*Uo*pK54!Xu|pLMq)p`KK+i<XG1Ax#mF7{9_P{Xv|_$1
zp|^xa>VX%f1sb54SP5RgfR48rXz78XMn#1q?S?Cl%xKVp+e0UN6;KRwM*9RS<e3Ej
z6`L<PVZg~1R(tgI3gH3qYVSjru=bK{jVyiTEtK1YlyM~QEi?)5&?k)OC$|S557WW-
z$@vXljDv_aHuBykDFiMndIcCV>7HRbIt2SZ$$-Z5w1v@Y=tnF91a)HM4q~NsrJ>ZW
z=*p`GyaI;~Wu5`Zd~NnVXtU7do{z5R&7>rWSXA)!toS=amX^Nftd6Ns<E-y{d<Q!q
zKA~HFuS1yMhsz&WN8HgI55xJ`CV0@(e{02T6Mgc<NM@}k8!{+xzoLF;l`OwKeIX~v
zp38!RhyJrdNFQGpkqb})atBsoS^%77L!krdAeAJApoNn;%-Eb6tsA<$W85)^k>E4d
zbaEDnl5^n-obz`!xIbpWPF@X8nI_?pt3XW<e4@CHZ0+3W>yi4Zpc0pfKQCf3@EXIv
z=qaYmYWQpDsszu7Cnge6-J&(Ht6r5@=1}^vtrj^d0md^@TYz0~`m>)XU3VB8z1g^<
zgx|MO$m@{K9{<)xSWA6pc2jq{*DlXT+s7@y4i}K6hmqqR^P4!3?{SH+f{8nm{YQeq
zQ`dZie6R@L8he>#6%rtBc*p+wfSC{3kk&t&?bxj2btMZ97|7LeHHnX$4ksSmuuH%J
zSy7JA#~$TQocgGDr3~dbr3^+8CO7<e=9Vw71IxC5u2a8?gev!RFR)DHDeUygqYUN#
zH$YXHSEX%#7O&3VDu+Z9CF8?pJJP<5$dQRyi2Os;%jvW+Wm<$h`5uzppHI5cEp+^@
zY{lz`^v=zW3O6og#ED;nTZw5W{kV`|6WhB|6&FIGa?wTn5!9G&Iw?Z^qY-(<VFD4p
zBR)2GxEAzghz>ZcyEp)ttO?!WSwFYnu|j{U;QQ(&lpg5ec7M4kcsS1lv6M5#IYNXf
zZt;c06YqB@)V($z1@pn_xp*MQ9Wi5<Mh_C%N+y4xyEB(=O89l2a8nTR`^$bCqmwhh
z1kIbNs{jDQiyxbcaQ}P7<KPEIIlR{kE1Qas;f|^Zrt#*oZzais3kyE|sR$Q)`V*I#
z8x~JDmJ<{cz=d2Jpt%B<=X86s<s}3uo*4$kkYHt)M4$627?ZOkn2Gmlbh<*3xY8p>
zd;*vT7}}pD2H0gnmfYSyELuZlT+CyQQ@J>+!;X4WKDK?d1J~x-n6mLZSBJalc`UM-
z-uE43v1dg`O5pNGSVSQ)4Kd$6-w%OjWlC`O*6kOClGi{E3DyHBpbLy>!hJo{Tbi2d
z;KY*M>4ZRpb`>E#1L#94o-3CCIB6*b3>m!>tzmBjuX&P@r)KIcP|e6mPlke}>F6F;
z`kBixKoHgx-L2+{tUA!DYa6rxbl@>yEDEFLlVW5sI4ZpxRowT(4t>n^+*L_A-;^1$
zD^wseGi!+;oD+;K^kKwqnxH+9202<)+5aB#p4be{%{XJ!TeT(Yoau&PwfgjwKNh>J
z5iSfSOnoa>$sXbiVCu#aRUOTg33YInP@6RSs}bXzQe<mOOsOZ^at97SVoFyv8s`Ql
zYW5s_rR+yUd9he_<^S9{)+>HIT@?bCp&;fGKU|&2YkX-hh-$CdV{*(V&V1PyLvH-+
zm~Jmu+Eme?RrKeD<#XRt^XH|_Mm-468>3e)Q1}O`K5>yR6V)G?@9+JXnuc=gcG?Dn
zA442Io3T?RE<*-Ef#gsen>)?@&RJnUgv9!O{^WaT_t<Q~O8%9BJsP99TWo83g_kxY
z90P7>Wox{P26MnK@XK_7{e}qy)JGK>RM&S$l^vWLAEOO#cU|8&H!%tbX*GCMrmiUM
zcwT<vXs6W!O@o>~>Xn(TS(pC#?XQEY6Qxwc_Fv+Gh)S2aqXSvxu@n8bH=}(#YgC3*
z_mGU_p5G>*hP;b4L@f}-u-B2kAnn1MT6xeWIf&^QC$~DX-&eFs>*~T)brkJ62V7&X
zM-jU`2sOto5|Qr+x^p#;gF?-xt`N3ET@-XCs=rNtSBAG4#|mYU!pR+4sgF)&M>%>|
zR^nWU>X4I{LN3tQ!|+BwJAW`V&8`)3q!fmSoCQwK!nNTELi28NhAhzm!=Vz|hefcu
zu=1V11!N5a-Mg217MXv?l;dgrs#ND&$O3%4%0JY#dt|IH7wThD-m0J64gIoB>vjLk
zNH)PFz}K5OH*g=n8=aa7gBBE!|3z4w{BTE+k{J&^z*s6WnWSLuid9w9pAr=3<`b|f
zVt1F~>^>6s&_%6O$85XhQ+N^Vp=<&ly6-u3sppU>t%P?vqPS~^W-QN4J_7aX7!S8~
zKtBviZ|mXLp+X3Pf+re$$&J~UMBmaY;Kw2%kzDfdN`@AH&2_Qx0NO)#NW*g4m|Ea`
zrsiQl>4M=&d~46<?{-Rj+)@MZXBp%6Cpp01>5KrA=!4G$fCiy`v<qEDB?Nw|q9c%z
zwYhx`L$E={Sxa#2L}cNm2QgT2PG7P+Z(t|%%3NtcEl$&9lT>w4bPQf}#<^EE1-$vU
z7R{g^L!zOL??6|I95hI{!$LFwocWl?vNm7p28!Ou_KGFGOPw%+I#J%;KDus|DpgKN
zi#~-R&}$8mxduv^sUF>qUKNbo*A>laBWtqYx6EdS>X?SNNRi3ph;AoxnK^ui=;DKd
z#>@RYYR3KpPmaOu+9!G|Z5L2&`lqrQ#p+A#b~u1T?9ShvT^gOmw2G;t4vEzUC9)yg
z>HvY650RakIjEY*FI=$()@dXg4Pt^BN#($fs0oIn8DqV-{SiRnCc+C}xER@iY3zLH
zJKHui3VBOP9#MyvY19Ja8f9{PRJF{nU6!34?gJ$ONW{mR8rz1Qu`b&R+!`7Cw%E5V
z!zOyIO`9fz9iQ8QOK$79qoas#2ZPfT*xsW_&dbJysc#Ngrez-L-7zIkqG0a85D=pQ
z*AklvHZ#nDP5;8S6}IWp2)h7DL|5TP+OwZap7vS^MVyp>*2g)V7;RKt)eP(89vVA{
zg^}i@6x|a9YY2T{;rk*awRTFFxv~zBzsjBXd8rZ=#FCC2iLAb=BLfd@4NqML0X-OI
zeCDA`h~s_IW!Y!=vFL5+r#T+@zJ!l=4r$Ppm$@`-rU2i;NPY|Bia**IF{Z!E#Es1^
zdmCcM{?p|W(-73p_?Fgf0RUM;sQY)XhVnrLFLu9&F2I$cXQ&iK+}n!%iS47I)m>oP
zl$}^w=qcP+MP*cSqdvL5b}8B(w^ff_E#=;PYlMoSmf(=;*hZ1iL?sTZ`kOw6;Gikq
zxZco@EX>^{HSL;bniYf;FF9FEI-`r782z9Or0#p-0=&YTu05UdmJfV36-=^F-lL?h
zG4*z)c*7QX-kXS7A%mpsb#=$Xb*rJ3+XW9CJ$}_E@f=FX)xplJ?1)^L#BQ=|=GCvh
zDRP$R8{Cwi7lojXf>pDopz$s8fo2>*A2*s!*ruQ7#xVLQ;_5n76#HvJuvUd#BJIr3
z*njsk?PW*t76APF)>etx+O>6N8%<x`Kl|VA3YlwO3FZm8t(k0b5M$}MLzeguPyZhP
zFF?@0{{?elnNREQUZ>^YUGHJ_53dQ2OIRkJL)Ww(Qhu80<2Mh<+~lWBh`+oAZw+cC
zybAOI4VU#BM1f>>5}sDe0Z!nUHW3T~BVHWm>uasz*KNT)B~wma=L8Tr@&z~G#O>P~
zDlD4-eF2Q1UC?2$E4C2dMSvjcMKoM+Z4NzzCh#ucZ!8zbkbp|qKY;-jp1~!Be@&ym
zOG|-diT{ar+q-RWGNu?p<m})OqjBNpC2nu|aDq59Fd0Yg1&BcCLZ2GJnZyjNf|CJy
z?^hSRn|on}4E8rH%D^@X=Jwjwe3fNho=BSFg7cUH<Oc~y7&l};Ty1v26o=9~v>HK=
zpGr;#OHvz;h!LEj5UOBF_X(iqX>e(Hng|HI>Kz6Ayd~zww*Jf80(a-2K5L6@Z@(em
zdR7nqusRFBv_XixaVz8D?0n4|@4=CdZf#}&ee8-kZoFY;EBHUJIswKIIdGZxhp~W_
z;oxuIeh^yf89|@H9Nw}v2B)^O$*_9f3oINhBVo0&ECpaW-?c)Mu*||iCTA@&37q)=
zvE1=CJDSHOgU#uDwyfr6vWZ=IInj>S3_x_Dbps;b-etuB(LJ^`xj5dK;Wb|HRI|qY
z;Qil_CE^$%m%|Dhxcr$1E+V9Jdw*hyXog#qS#kkPg-}d}uV3YvzitbD3Eqht!qz!p
zP%O)$hlRXYI%WeP2G8KB@iSgcz|7|PCUx)_?J}I$@^P@H{8Bp$o18_-)nYH=aXuS9
zq*lvL0R-V?tz~2gs>~%HTTin&E<A+b-P9Urj9-||YrDIErdXVE@7HO;>%$uwJJ?vk
zT-jk9?|sbejf_Q*L{BJu$H83(7>d(0V*7O3B8D7TS$s9Vb8=ksEGaba85+xZ47RHQ
zt<SqXc&iz|-sM0y#D)M+rUfR?La}hU;OPqoi2c%q=3ASp!8+`^0kyvcki9d!OpSqE
zCRlV^hyYFuKoCL!WXtSw1j_T#7N)XO=X&vj)b=XLqU<!T&J)|N06VJp!Z}(q17(M-
zKqn!oxnsVifLq>q`3Rh>{13i!9~eBy3#d`*@V@IB-5LPQ>-0+UNpNQ#@y+#F@J+}i
zsu6#-7wwC<i>>2zLmg00JS(npVn6UGmI>c-y`H~$|H2_!^2x*W9p|%I9&Cjh{OBsv
zdJ{mw4fW+$F|YovKqQ1M-~^sF>Km@-*3At5&lQjRCKOsxO}N7wAJ<@)vBTd4$YX;@
zrwF4hj-&<upo%1|XE}>ccSpDiHgevz06F%jHh?)ycEXj8JKvDY1$i<hLm<W1;2WRn
z^GX;@0HJ=f$$eb!@}w1JBGO{0hw;)~BO*W|t~&&f!b&jRMMQ((K?sR)5x@8b=miXr
zy=?<|oa@Ao0Oa?9Wy4`k{N@v95|O|4fscuBJOB4}+OAOsZVAgGm_SVjC*~l&u>bfX
zK7wayu@k&3JinXOMb~_#NC<#h20O!f>7e;1Z{v-j(G(=f@dww1`Q)d@m3d3N!2KKB
zLU`)X1b%N5h}oi>NCP7S<l`1$KtcYM2!wY$fU(2~;Pm@mx<q^%Jo&H+A{?Uf-fvzH
z9!R|Hq2n@mB5xG%iPQ9pLFRq`4i#L0acjA8E~Q(<0guhr#=^NxWtg_<7R9n{S#0>O
z%sF%N`h!r2p@s&>z`lVF#2l}^!f_T)0Bdsrv6IC{-YdSVqO0efz&#Tn4N!$cHiJ?7
z<UbZGvEZlcL5N$1%h5`HKR;~vvUsw!9@v7r;O8>&BM@b8cmcQ*ZVTlCWpg4qgyFQD
z{kM3_IWR>mE{d75b&q4V3KWzsm?Fa(h&%xdb2O28g^iuB*Md9`Ax|_Xiy<#~LHEc&
zuk#6!f<7!ig@Xjzl+^H)=lkkdVz6M=R)im3<ws*ev@rn`K!7`8B{^8WcCfxV5qiu0
z`u-E%9FB+^-cZlT<FWl-f?=qcXI@}iGcQ*wZ1??hJ?1-=25!abzyVht-f`R<<(`QN
zW>FvsP=so!34RBE2&^l(kos<$F?UI1!xP+=+Qx1xNG3c+f|4h!;9>~C_OggE?Vll@
z{?=&$uiVBb%c{;B$7yo%;7>7?W6WdRnBQ~8jj5oc6(G6C%UWmT{9tS;SsuLR$SK2|
zt=7klWA8+pi+@Yt+5uf8AYz{Jedhp6I!ydTyrZjthcUlEpzl3kWyjTbu%0{Zh98e?
z8^JZb&7uw{%i4$KN*yd|9VCDW=L(QZd~5LLnTMzrrGV8SV(aCEEP?@$KqV(!&|9Xt
zVFX9Om-0C0;d6U?+Sz>&S>iC_Vb=Tk31AR}3kn)9*u;Uez;f6T;Q?V-w^?$K>UU7y
zW`S`UzZF{mTOHa(L<PH^L|BdjOd|KT#?8To{1VcOm69`9Yuh#(@v^qC2G(}--;jaB
zq6!$xutda`5Bvx&rX>K-xj76%6Zlqo7ayHCU1Cp%LF>-}>-fUnn`<pt%^bhFPV36g
z&b}rrk7s>5L4YJ2a$>{Ka&z?&j|j8^gop9e?H*v%ip7H6L&v1yXYb1xUb?4nVB~?#
zi5#Q^bKT{9?qD#t^GRXg30c#^Ct7Aw_v^H*&G{SAbW4EJ74w;FTQesYuHA2wTEzG}
z+iC<40~Xm?^ILQhGY@=*#g?0eg{+A3?G1~WHSM;Xa8R$a-4>u87GkCKsnd|ngfiIp
z!E#Qyys0q4KI_0iDn=|f=){-curr^3zAK=M*GgWo*e!VDl5P{i_(fKU@W^-JyGI5F
zS`J&!5JozHh419c1b&IsSgpV^&I3f*EvxNi+~EHkUjT_pEMCuY!44mNAvti@hH?_F
z_`w5)f|Y_r0T#uobL&NJIj}7?y!&+%u~&W9y|aPiz*a!yqjPkCICyc$1l;(TwH*Kf
z9MWmK6<878Q0!0qt<$os?`8MRqCyzcfxozm>=d|<Z<sYMVpqW}6Bm}*Vz|fKH{X5_
zI1TD$q%1b}Y!KHDZ7o8f=Vu>@6>kfO1F9i(mv=Ei;88p1%L-eo%D@-dv=whYZHduu
z*9%nD!W8mhmsWDWS^5&Mn?#+R6*{r}11tpU!C@T&#Hd?dH_-$9%z^80l<Q^fcqUJC
z0Hv9R9vs}GS78(0+gyt^KXnz}<mp=OAtqkn<wRNhct3T223D^a60qpzUGJK4W&A!N
zF^)i(16vi7WF>^(iY*Dl!iyE~RNl9!2W#w;ug9?iCwT(gx@o3k&*QAU5ah-?HsnyT
zQo^YzrS#lT8gVC)`L=~NZ2=+}2?%*K@fn9Jhu7~PL>$Yet+7nrN)sMd;Mtp%Ay_(R
z^ntK^FeGH0g`I=?y^|j?$T`@ZYF^Jy7{VX?@5Bidlcyb!Lck4?=Kv;0yU^Ytf7xa;
zZ6GDYcH(v9xb$he7B0Y^9PbUVwmhw)#Z)Fo>h=8@8)XGJ6};(T+rTE;VkB)mY!J3}
zU{u92=XIO=U}b#%-(dL`$Xi>;cMn_ztGG{G&JBS9M&Z~az!S3PgSPV=mSczUPJZCE
zpmVKQ6F2Ug-?Y1puV;bn^C<jP=IJ=*GanI7fU)j(F-T~K87Z9J`4slA`|$n}3xFYv
zXxpY$j`^^AAjisg<?$|4z^9*i>Q_B5PxD>Fk0mznCWLIez&DsUTkX4Y=F5R0>lK?4
z!OJV;XnFm81}M=TZ-9&)E7n6{G%($^@&){6m;A!@E}Y^(1)*w>`luC&EMx2qWWppl
zqmhqfL2Ci6T*u9yO%r&(bqy9mF)eL9qZgkGL#eu+ZKnQe>%bjZS554@%qmuEcg}aJ
z@oWdK7IKhr4qjL08NI7XR`Xay2C|KyN~mJB7u;45Xy%&^5?W6F>t08Wz%PC&+ZP4h
zSp`7W<72KzT5Ir>U{`=eeRoH$%9->=9E1u8Bm9F!WnTm^0e2xzUpT5`+Kj?~;alwh
zc>!E3F$ei5Z2FES8~Md#F)r+!&*BYu0_)m9s+*`<WJB)?tAoYKF>_cfdYgoUVjdym
z*Z^=C)MRVGQPZ!umsf#!hTjhPgp`vAxnZ{j9vN_t5PlBjyp9vV$Wy^oY!+=;D@b^7
zj9$Lk*6%9Ao#4=3x@63LjoNYU5bg=<&DEwDT=1>!^MjbqJNa^G>Bb+>%h4>2ghMS;
z(zt1yV>G)6D`{1KbKcVnnD^~qxBPKbT~Nhr?>xQGEl=NBBQ^p$tnFDik81)bJXQDS
zLb+g3htb39nSePi8|rtw;lLOyPrX6-5a}5`iv)EL`}-O$zywayJ8k5`!l@UKrbz+L
zt&U~g+lm#S0%lpP%Ey)e*0z*o>T6oyL`bzVT|7406Kw2F#eN%c(%YCL!PqnAKp1(w
z*6RC=oL>%=4Zk_Csr&{ohF3CdHQ6UT`aF0@TofR@)_3v+f0YlV3y3jxs(=f+Nxr(<
zk?hCk|Ho0iI<EZ3j2QIbec!U0O(Aw%o3``P)>`wGSs1_n^aM}-ezG<37F0~Dir#f8
z7YE%o08ug4%@Rs3;?-9!Psi5o$!e{3dTGJ_hp^w*XrS^-;)yT0N+W7|Lunl=n6Poy
zdwZAxhYey}CCS^Wo3H&mze>Jjvs%eZ$MYscHV|fo`P*rY6XFo$d_!xLy}<Q?fh#<v
zzGDlXoTveDS$L{h?Y1E3TbD%8FchC0Te}#GjiT(1#aeI3fNus$*XM4awh9YPCjj;s
zP{E2LNl)Pmf#nP}hw+qmV72dSC_ay8(%)q(>;p{F#sJ6-fSAp;=CPSDd(t3FhdI;R
z3G?&!W^b}m0UQK<f3dd(4`OjP6bSg7m*)ZB(Q<W%_PdrKdLW57M5T?{wBZ^pD2(iF
zwz8oJ5Y=^Ii^STbqwK#K@&Vz8X?-X|wtSB>b6DcL@lC-(u&V>g0jb2oi<mwzc=Mz$
zYqxhHZI2QmHeihQrl+fk=Pj_{6Ryb%Ly49YzpRFTerIrhqW*-m2NeevL)jFp-+NOS
zCB6&bmSDT7+^z5}ed85hNNi^d>7cLq@QSfd5FH)~#I$TS(!G}ly+mvSUjUa1Jo1Z<
z+U3C6f@)N(nH{$B#e5|p{~XbVkF<`K2?z}jvMyK=LE=RaPE&`9BAi6PlTbM9EsowJ
z1$eWk1>Epd*aveDfS+Qw-ETNCo*fE|{SEua4yZx1Yj0Xp+wAle{NW{mHo@GzDS-6p
zu^tH(Fgkmn_vzj%;}Oo&Tg{~62?)NO%|LG*hgb5we`?L&GeurOorm)P|9AEn8{ug{
zo`+m;+cL5_ze(Qm2rIm;9kV26z)3E{1W$2ck~Sz3rClIfhpwm3Apr@u*c)8*2DlJW
zKq#OQ2Eu;N3*TkCcapSU-V7QQA?n88+g?>)<aOF@nTNXC>3@L{E|~P}K_q#o0Mji&
z1A~FYvi%Ok2Ke{&s|J8yr7A}qlIm>o0PEn_H;@k}ZI>JvyjYXsLCmM72-Q0?A>`%T
ztNot#Zl?gS#CZd%0m|F%a>&%S>={&L@wr@xJ-FeEZzphbDlIZHIY8V=rJAWVk-}Mp
zvve#M($u7;7&7FJu<_2|R@25Uo7Uk6cn&x;rc-Yi-NADa%{iOps3v%#c`o3{d{@p8
zy5eomf3SOgsR7c}K3cfJbmKEloTm31%hIDtfLJ`yJ2n>13Ze7%%BDOmWUL_Thr58B
z+M#;gHoR|hA6{JC{1^24w*azj=I~Z{$+D^n^ieYAgH7qHm)6{X?@;h{XHht&#TUGs
zh)-&-`C+?Lc@$$f*!ei`pM*dzYlJbAB@!BQY!-gMk(fdh7?g$g;fOY+f`hzM<GVAI
zEVC)z)?4xv?ri%5TQuK|a`0h`+a!(iY2JJE1WH%|5{tutYPazekiaL|g9D>V_gl0D
zT&`F`KCK0BOW6RvOZr^F_6<IK;Gw2HJeXHc7dyM(*MRV;`&uzts^RS>{w~0>%xNBq
zfy~gNZ-%WrNxmfef)@SPizVZoJ{3y_#gVd1|F&OwjGvNpW-EDRVqxd)2&5cSTuPL2
z4;Tj~MvQ#lib)pkP}jN56oA^NVYsPN0^Bo?Vxa?okB^1U<3d3K)~10+@f7b8fo#<Z
zAJ(l5ZLIUOxId|+L2x=b1b1oM($(qJY2iyIxB>17D|}ha0@fNCgBRL3F*nh^xn1g0
zL<NfQICqfB^cwbL^?9FT7Weynmu>T1$=-Au3K!eUf^o{g6$D0tQN;~Itr8}7##;q1
zI4j3x!JhBq`c%ff2k(J{i~;a!^1_Dr3+FPSqAdFWkw+HpPO`3WsZ)@F-Zl4``}gf8
z#};55Z7)_}WLOS{RRu5SG<NS6FymSPuFYEBs)81@pqbElH)6Q<<pPc#Y6_WB!g<~z
z>WUjv_~w#S&g<fp02w)6X76xk`2gp<^U=lb_XKRR5!hZ-o3TXY)r!m8`j*RjPaDt7
zB=^>VnwMB|w08pwkFo6`dAd}*aSDS7k*z4S%E(J@i*4E3>cv415%X&mH*GD_Tb_lN
zFh82uE<;7K8N1ju%!bIaEuO8(tjy^5b$P<Bg9Y=3N#62`pwO{&^3-4m1*IS<!vu4w
zX3g`2?_t#(Ts+n}%qOVv2Bih6ffD|OR<_T(*(}i+N5ox)Q^kxc5l2p9FA=-JSo4Gq
z!Q{F{qS^d459QWaq4%jJS*~E3D=l4=EeZ`xs5i+L2H}*7$j?G9YkIJ_olo1vEq;2J
zzZ@7nf5L*~tTNAS5!3aA>tZd`l(2TSrlxsG`K_4X+ys0(%U-^M&Fq;sBOG0K-&T-<
zhP#DB&js=r!4_P+nfUckcrFg{%#+Z3C;AjoWBcJHYM@~7zz{F1Q!aRB-2OUjb+;Xm
zw_Vn#ZQRXZk2z8=pA!viJ-dubiYR#I9mTCF*5@_`cN^GZS?<Uh^tHUAu#GdXf1#oL
z^KP1dD;Vl-#4QN>p=p?Yg1kNT={MA^1beiweoGs682p5574G+CfLbB-GI15ci36J6
z@nIAo%|cvxlA~t2Z2_1NVcb)U$CCivsl7`VW%wL?`>DL-vVG#x)Y);kOwYEh0?OfF
z!@fx#si%={{-q~?%{x;7G6U$I>PuV@=)tC6PuWa<@``Mj?RJp)vS30PH(8WlnC1%C
zJL5nkE;Zlhiv5sCL%l2|GiwFA^?I?f0n@TyLc-=yZ2V5M*8u1G7IVWBTm<P#FyL%%
z)qtKzg<tPS?!+i4kIy`DAuObL=(O?#gotnd7o;yf@8+dsodM&7pFA!b%)oJgFByq0
zusj@rKzVx;0lF1Oaj=3dSoK}Nd5E}KX-g%=e*P@z;=I{kHvUf0?|=yxGap;o#>HpD
z`(wjY-&Z^pFH96uLh243*E8f7^90!7{f|n>4yrSOAr)@I{%+8@$#gJae}O=({NDKM
zLP!NvS&hr)T_&*99kJCFyj9dey7Qy)*CwY93U(akUtXT}A!ZFXbQ!~2;HMInv8*Mq
zcqa3<{{Owz<uI*~z584{T8;BUPjLPVK!mqlWfj}M2XC%4;qVZy=UUMkOIyTE9Y>`o
zu$HHtEBy;CBcFE@xcqb@v>>n`YTb5%+$Cj8Va)!WIIFHA+U?Cyu~6iIf5EGiq<ncK
z>&d+VU6wmlb``IEvmb=H!U}+$@hoZN42#{-yJn5q#@yrT@wE$hsR9qk{B&qg{P+k+
z^(S`XjX1E-H8!N%1MyU(DX?O*L&qrAyE#s6h^c?Mt_DOVKJa{2P0gzkDxmRq;rY#p
z*$61DYcfMG9FMoi&#=7=X17-NRwh{Pd7e)e2jbpipEyaZwar@%LD{$!%xVCMC*N3D
zwFRhE?_$1s9^MMs?QrCEb%LdZ`Pxx>Bp`oMpd(h@il?2ws^<Q$>?TXHaGekb`{~q!
zQ&ueZrJ86-9064yIPh><JR1wx6O^I@46W3D*KUOEV{nEbvH;8xA%;7v8-d5L$$NXN
zXQPwp6}D?6edV|zq5Iudb+U2Q8-IWp?05h#lj1Min>&suUOw6A*l*jQ+E4@$ZY5Xa
zfYcXyvH7ShVACVn)oiU$3^22N_>8tNCRVYf;f+EAp0S=BjiQ1Ck^L>KbzAhW2o8tT
z?v^56QqRoVi;C^ZQiuUi$isqN1x2SV&&qMW^9Z96f2KHc4!hS62-Uz6hiU}G%U~@@
zz|b`0Vp8tb@AF7JK>n8`RDXejKy=oyEUSoIc$OQusyGxL?&Pt?qt=(JBDf1cs@B1!
zcx$xU{B@=PPr-7Fu<B{y`1SO@ol45c+h_9@PnZ!b0pqO2ew$|=HZHttB&LQFtDl2U
zKVb`;QqUsUz;e;WfwS$)60oYag#u&~24{ab$DzFA?+*DX<ZSBgHcVtb<$%k68T&+e
zCDv~Ob8m2_#c#Z!$|ZbOd&O~Hs~)^eKP_ewJq1jx5k#+p)##H`9|IsmT^@;Cx6gaI
z<uPAxjIG`UE(Q{lns2l*CK%@i@K`Yxi`_VQp?E$QT1xE@kO{oTdm!NV?PlfmE-yu@
zp=XP3%$AON+qy8c`%LHuU+`bvI@^@b|8Cnnh@9_Tz_6ME!4*tuzhJ1|OZa5no}j95
zhIIjWymffQz4W;E5<%2=#m!djS4-bA%&f>tV2h`ktPr@Q#PLDY3p`c_D5~3PwKZ@R
zkN83_mP8)il<@)-4x#ojAak%nybs633rcv!^UCHw@|p3#D)~XI((7}wv>Mp^RPZe@
zdmt|HF_uwPZ)ouS*i2E_&O-EN=S8$><1V|sGva*pQ2eH_r{Y3j*|r)Hm$NJ<NfIT_
zd&9{rJ3c1I-5W?HM{5606tqIE;-;Ujp#kwq=3J(>?M*%G^q=afs4<m^fwH^7{*P%z
z?e%W+tpg|0t)R=tqxT_Z-PV-_LZIafpxIlY8k;k5ot;yRMH0!zF<v$tRf6I8vo{1L
zU}rM_X)YcR1$Bvd$)JFq`V>$L_!Y<RJkPA)#Jk(c`-t_Bd+0(j&y9yUVzt%m0*6%Z
z>vC5-7R2Q}XE(cpu?TSMTX=!*;~TOyu$)?}7Sy*Ol=tjf&1nONS~P^B%PfOQ6vYxw
z@0H$?<#vV#+fA&~E|9LDG9Kr+IN2bOTitQ<utXxk8AL{Ecf+9+r2M|!B(&KS#&Lfx
zn9gBqeXPmaJX02UdBQa3*0xM6D_ys)w+w-Lx<A#^TO)OJwRt$F-tH@_9eks0o{SUF
z%9QCOE2X>)C`%D7wspK~KeLT!6OJSdTAb{fuu(j7wcu}C-Nx2gwuz~AtOw>JFp+le
z@@{ehm6(q`RR;w^f+WBu*$ckoQcVSBv%o`R-|mML9Y=uoQ1!KpcY+i|ymY=C$6`N|
zMOk<+LSMtoq;A72<rr+?WYyG{ipK*NVUBOvQnP0p;$>AoE*VJQ9+mP74|kc>tXcg6
zv%$D%!rLKrx9XVCaJKJ6L2&}uF04HexU=2FrEx5e2^CNQ9snW|y-o`P&M}~h4fL(x
zLr(ea*;3q~83mh9%Oltj^NbaHfO-d;ZF9zpCL+E)-!M-FS*DkwieS7u7<o%`%C{P>
zNA$kH#*d(0mvvj01vggS)RFSEGXadd9$A~pM!!opI~K=+^JS+yv@LbaFe4Zk4sCX#
zKCYIi;LXt7-m&2P!AoKEPlXTorOPrB;N_`oFssm~#pen>S^6@pr2(8;JG{&3)$@)Q
z&;wdE-csfqNep#aaRZOz00sq-_!!fi?5En%Fim3IsVwmx);>wK8$ZGpf8TCeJ*xs}
z&3K<`HL-16a2zlECh!(GWEIP_z2mZ-FIeV5q_(#I{j{6{d=YMK*_;jWZ)*9PQXnwh
z34)M~{Es4$4RZ@Te{q_yB>e0<doYyTx}OFIa6J2t-vMPm-6o*IvAtvU-d8a^KIMFB
zD=*_K>@mEBDIuKTRNyAQD_dyGp}fK)!Q{28ZKhN2c-R=ZE{sK`9!D%RD9`)ygTS&!
zfhsO<(+G>@d^$vIC!g6n<kOUdeF5r8M=YxWGxBsIz`HvF%#$xgJcWL&f)t+T6{z#Q
zT0<V9C|sGpc2$*WygcrMwF}>w**k0s1%I-*HtmiJgbcCA?_cqmlCY!dH+Zz(03xQj
zYko)>4{^Q4K{zhpsRMiJ)@uh`&IU3y!FIFW6~DGNKEpWxNyK7sz>L{>Ui8g$Y$K_h
zH6Mr<xr%xZK>0GG@<!6gLrL$9Cur^jUcF)5ru<X*bXSA**%DLl#6zsSKyU@W2s^i2
z)!R*WB-k`=ML<_>YML%G;s34`yO$`*t1_a@k&Nhh5~ZK&X$7}u!CAIPytF6y3Vtg|
zJ=8qB-g(+J31(38YF~$X^CNl~coluZHG{giw;k`Naw?A+Di(6tw2!a)+7J0(%LR#E
zPKg(Wr>v4aZzTa@OrQgop^TOR40{p1i)JlwYPWr?aleJscnzpCc2^^DlV`zW-4BBW
zkVY4rH~{O31VWZx-i*uZ{FP~%cQpkoeI`NPX}R9E+S+6-j&a+krMX`AIKj9J5xCvN
zTs)S$0;qnAp(IsGA(>$4^jvkEwGdNqmx<%qfj~giuAU0CgAKf}p^Ejc=1i1#EfZhj
zJxs(!c@N9sKBP^>qJFj2?aTpjaCDV-y`MV5x}*d_cl4H(Quj63sb0M>gJ;&KGTCu4
zW)^L5JFgyB!*+&Ht*L}{so6boN#A)kD=d31yaxnnKSLnEDd$1J$9o-og~CQqjcEA}
zk4_XhqS9EtRDGcrT$e2RjC}nHDO3+RWZH(-;azPX7|u{E-+r!S?eMir<h+M=zwcr$
zFPu&*;&yrJV+i7eyW}N_ePdR#onS3h!EAfLusR-6_J}8c^G$_4O^qKm>vOJ@uZZ~O
z)9#|F2FTe9C;R}35{S3es%kYH-Ui3Fhn$XF=_>R(=mPJ&cz-2;i}L5ii&D_ONj=9j
z;Y9Hdn~zVXP4-)m4)(UZvxOG`=50v26bEnVG{p`%7-Ea2BFqUvUZ=`-Hk0E6iN@cH
zf`-~_9PP6akLw9XXXiHlXsdXu=sYX9Ek=<8oKHU_OaUiVYkl_-+1|`+g5ELB`_YYQ
z;kcZsu;5oAnU8f|LF>1UF*)fcuP0x@!FuIPuBX7vynG5LwA5lF@SPo&)>=V1y%n}$
zsIryt&2-)xwYM?~%e*{)g@P9Q^bMB~Q%E4(LE#R2dx?IY+N+d%IWI$@jjP6b<5rI~
z^2<uM8cepWIRj)7T)o^SN<`j8tHyWXCZc`ar(hshzFCU`saaLy7v>+0C9&BS9ty5Y
zts7o%*7{trWiZ56<_4qS{4}5>1V82H>f5`Q@4XSTO#wPl)EiW120+$u0*&>;)qBM`
z)O}KyAruhTE<nJk0{YBv(Ofn`F|9qXkrRf=)ADX0nF><8#fhv#RgKVk<gLQqrEg@j
zavyIGd7MNIl~XT_d7k!p#*qLG!0OY^`;%S6cd&%e_WtDDiG?7c+a~k3qz}go{>Wb+
zmQz88_d#&-c0aOPIHD+2RhQ&~wa60hq44CrB`oh-W;4v&&Q8K%QF%!v#i#57gbNY9
zR7Yz;Df_1{a+oHuvqdNHZd5;PV_E8-o1J2@PRI2`)!Cj6l-*q_Q#>sn*if)mK;aVS
zLtNkKY1zu{Eds>Jj$EP}3>vU-JrPA4w0cP0?D90`rZvQ66OYekUT?I(dt4)ebt|#<
zsml*H{=3bk5aBw3GeldPDNVcIGbZSebDf&`iB~Sj0>-)@)7J3SM&?83PUh)$PnL{%
z6Kom)`{~!hn_kY+GK>A`);o0DM3$n;76^@6MlTldT5~qb%Edtt@vw?#AEu{>)OQ{N
zgY%7o2)dBBB3v#9>)*}($7g^~RtxyX>x5;UVZde+$SiN$XD^$^`&-h6*s=Jmt-|+J
zXAX+$L!57YZ)zNp6P9=rLf}L=F(ny~BOM;6%(H(dLver%xFtQE2!L6i_j1nJqw3&T
zr9?ywuzBlk?qyfXyb|wt?{K_Jbn9dzET6;mwWQ8{w)3qO=L$J-1}=9*f&|1CuKCO#
zyP=Fu(%Nsa2_=rbuo@PlaNgL_1GM2M9qJsU$q@r1c|T<*w8cN{^oY}R|6AVcl7@E7
z<PxHc&=WKwb`ujm$7Nl^3FmKSi)OTX8L;_eW_CJ1olQQ+R{QJ{JjK#pIIElhHu3`N
z5_*Ev@IGx>rd<gkn}d6^SnsZ%W31}nsi3O0Qm>Dq!!#9cfN09v^Jcdt7k76c0x=KX
ze_I!HeeWI0@X{7SRlQU@Z6CIkec4C}lwp;WX5F|+2ZG?<ISla5^QRuJ_4aIiXGhH0
zVu7y)_U^NaYhnFH{cvEL95lOX`%skxrU7WhLdJc6y6g8+ji0hEkJyd7%;&AX-4yI(
z3qQ<5-+k$U_e}fItp`%+GI8YZ+C>3UD4-{dqs%Ftz67=f$8bHBoKck*(-(XKY-Xxd
zs{&YWZ-p1AesoaW{oKPTg$-vMH(piIM49oCMmSg#4yiq!UgWb5m2>GCep^LVd(+OQ
zJVEsm$-{d(LQ>SEs-1COro_W^pL7<q5U1MLDg6sW|9)}5iRB+coqa2$wDwWFF2zut
zsg$#`Hi*JaIbIV3f(KKn5mXaCNrncs81O>vz>Q>F&Uz$0vhJmF95(R2gjMDan4v1v
zC!|zu{)|I>V_G2B<7STXfagva6CYZ@zOWVO-1ekg`?lZ?C#C4ec49+rz|HraMd9?T
zigX8pcC>9$OPlkYj{Q*a(-9z{Ig<vH1@1l<Uyc^21e}+rJ$Z)<$Xt$x$Ut}-=(bul
zczV=N-s3Rh+KY}2Dk;~_r#po(`)=k5%BvmSMsA{mp4v(qi<50T-OU~{MdrJcNcfO;
zsobml3cj&_=Wbq5CW2!ei#U^qya$if>M8K3$v9%Q9&dwpNUE@2Q9VxJp{V*Tp6`s9
zMFir3PMbl!Y=O_U!zK-@F`}LNPx=t|Y6J7$3dLG(`5F7+Lzn$n^_(is-2h+B=(HJX
zsri+haA~zQI4xTvbSb`EbbEDt()fy<BU@^7subo4biBPMZq)?`uz5GR@B6uczMRaG
z9MS@f-Hyk6y;rmen)O#h+8i1CSh8l+vLXr-6J;+6&+!HksWPq%*nuDDfTNeS%Svrv
zIEiZ~rZlViRi`tA&T*QhQKi_>#&^NXh%X)IB5!z{?suXf2!(R~TNKu?K$|v{2_WL+
zw!MwHT~ix`z2(PgozapGm`wa649?~s=E^cI=~l?V{{_deWf)9Wt3fjN)X(t3{fzec
zTK@@tNbj0~I4*YWQb~H-=DTf+;9W1f4Wd~~TgIM=9C+*aobkgB7_)xi?P;OHq2O2!
z2b1_pm-xEW*_?HCC<T)V!p+7vJ`vW!6Ps+dK4!cJb8e!U?I^b+Ij!Tg;a>^*q>He#
z;lN$OtZ}Pd_5@rH32N+I#PglU29M=ON5m!uo$XVHs9?b}?}Dx5VR=R6^$)x>?$$fB
z%ejwMZhxnzy)`<1X?Q;g+&9HKm$l6kN{B0LmdXd&2XF>{GM1AH#DT{rd14NnHEoYX
zfDl>nxb}!%Wk-l<c>v<1@(hQDwYFB)xn2ds-tUSO+Zo_Vx@%5Atzn#2@md)92&1WO
zT`$W7U_sF`eMcN|SQR*G{at%7Oj%ogj(f;#_I<(>ZB>ZC7)xRH?Mv`13pa^Vhon2f
zuSa;$`B}KZGzSr1J-ug2FF>}$1BRwJ0zAW%2o9UaxNXwOw$C{q#Q7Po^|AZ(%%^&%
zmX(5BANT=sXT5*{v8lCN1cA0|z}xU%*Ns=a>Iv!iM$!6NK4~}MR+A%H>~r7GU=Ew3
zhzdMdzf{h&8D)bEU?O*g$zYbag3M##WB&Z(HuqAwm{S<4B~)f%i()ci+^X8X?leZS
z99#_*nSz-kM}*acT`IJE@^XW3zd&%+o*z}0HonMtuE)Lp{38hth*f07bQ3!Z(jJM2
zO=iZ={1(iz|LzgE*otX63D_d&kTMa?yKq40S-^f)SVIV4OT{!rY0too>(4*#)vk0B
zb>Tjxm}SLr17lCsxN&B$_)zhedIE<fnFPi!Pkcu;ZE-kiyDB|qD}Z^eh`U*wy*QPQ
zAlRNif1RqIme4H-+3+&EC@ceMp51iU%YoU&Gg_+3ZUKM+e{EU-Q5|oEGiPCEx6|Q?
zM=dr>dM?;h)V<C7<Ll-u-J+OQnzJCBZ%5$D@-9B?)4)qeI?(~1d9=f>b#;pX8_Cu+
zhczjGLNq3hVfp3`^R{S64G!q!&tLbG5Egp{VuTng2@apWdQ>0<Soj+TtAMU()xj*b
zhJo`~NusH8fBIX;pg@c{w%Paq`LX4y0o1Ul{ISOP)X{COyPldN7Pjq2oC1ha%3Bdb
z5mrY|-IrItwrQ^IMRZR#$3?Xg9T%#~%@wVKOyQ{)EQ&D@MqV!+tyj5C^5Jt^Gx|e0
zZFMMsj+X^N3xX2b(=io}g<4gSjAE<!w$^SEt+Xh!?NdGKqHd8oe#x;DKW`P`!A{9=
z+F?39h(M&{RE@?e##bnHSSCQDfqX=1hrS0GZkOL!L&SkcXNR^O+Q|lC4rfz`jzCmD
zw$y=nD_TAzV5pGH=Go$(O*g(ze{$Y*gS-_rL)Adh8BQS1=|=-@V7y&rC=OV#c^QIl
z!8KG<Vcnm<?wp6>*1;UC?c`3)3&TpLtX%us*_eT|st#y8`KNm;+62+qw%D<YghRNN
zGsTJV$`(a$G(!Q2Uj&Aqzi!;T4yF{tv{(v+0s2gjb_oY!e@j^Ev%wzCDjm~h!*nOF
z(;RE%Afy1HBgWfEAR~wI?97S7Uqa`^%Ef}2kG0!&qUGD^rI(5`PJ`qpaW?nyR-1Nu
z0Fla89Q#G=mF5t3s5Yz{_opiMrRsxXq8;9Dea39|O*gxDK3pEBqdDh>2(K8W_pSu1
zV!U?*=KFFPf2fQli1Sol@>BzdV_dZLdvwPwu<yZAqIzA$A@I*#%~qPIeSBTk1zCM)
z54J7w4j`U~ZD~ZYcYTNhADSIR<<X(}X>ezHZUL2ns+X;4EO52sB^*5v_3<y37PR*A
zun-kiup2=@9z12dig&ujq3NFtR$^d(oAZnSiku@1HRAkCSWB6X7#uAcV6JDiY?)(^
z`&eoU1I|8<<IY5({>-n}8b(xe-Xh7MPR%RU!zz}ws?Is$e5_}<mLjMuF7T+YY2Li_
z@i2inkK4HvPDr#maDFT%nB6`w)#H>`x!Akgv4Ox)?^nJhi}KlE`TSr<Uotb%trn?@
z5^|uk9r((4ss9;ZSf}{!nd-34c4NZf%pWn@KFw54aUZVA3NI+t%|9%&i|>+K!qx#q
zEsD_K)s6+^N^HcT%)<Gk9v$>}KxJ}N*wWHnDGi1Tw*T<398gC!sJv@AQ_>|=V$oFS
ze|}O^e{Ny%W)Ps;*@%~kirnnZ%~KA~?oB0M9DvGJgJ|qQ#Q>8186O5~5o&ezf|XUF
z2lWR`LksWcJMFP7tSOh8`RZgjmZ@0Lad|6{yxH|qQt9^8tg=@JtX}nLjRU`b_#miQ
zy`IUAR{inVrr4IUZt%PLt|Y2kA@=AEO9WmepoIj-QPg(c#ce?b06Re(!!wQG=3qim
zh^ZdRk8o8~@&RxjDg@&FtJ7!+fKzPxCbHg^sxDqJPCjQloJ@Vr;mlbO-L~YO-*9*>
zafo0k7J|zWH7|nd2LkB|ekAB~cF1v<-61J81JCB8arZA9EIdku_W9ITnj0B*`t=yC
zqveoXPqzZ6v|HaWPrHE2Qk}uRkv2X&?9rc^-RO-abcXY*Qk6oSONHi_4-&!y29-Kn
zMWJ8g3&Fv}R~>NA+bIA!KJ)eN0+icq-!miJqWhn}u6TjOnQ@qe0uJ@Cm1--gU|aC}
zvfS!_Uda|1HQwi~945?LfpVS;53qicBxR2Y1Xi*(#Wpq!zq}v;I2HSKO1Hw73oaKr
zuGlAE`FxK;vP8z?5$(q_r?s4=`BWSP0<@#uU_VYDJ*Mdy4lju5>RzZqOpXsi5bh_v
z+iHV-%V>*X?e@@NZ*K(RG+n3cSW+z)z-?D0BF}j`=hTaKvs*-LEvG(nXsc>|*;~2~
z3%c1XLkeuBNJMZAyap%H(#-va1U#kMV2Z0Bu$O8Ca73_|ieR3$G*dnRG=!;|Q>}!)
z;+e(Q<&VY0sU>S7d5)%%UKc&xkO2<mb$wHK>a)S}<<f!`uM4Moq%za>pe$=cZ}0Q*
zEDdJ})eX>>y&u^})wa|@D<4tpQWY0G5ZUIzSr^RQPsA+u=UFdaBDN8o=k}-zLIoPA
z*1HsNKK>>VC42I&sj>?-UJ8OZbH-b-4-c#PL_y@E*`Y>y>N1k2i1U2Q;U)oxw?4`P
zDy!R7<>h2yy^5_XyJI`@m=@GkCm0+?EO1b_+~VWyPP~n_dBha3cJNwJL>k)zLEY~L
zoP<GzMd(*QOo94Hl;SbVQXAQOYg57&tK+4KX4Z9As4hoTWdCtK?s36Ot&4NK+u*@r
z#nt)3o0ojoaoOzH&0I^Sg4%701DrW~N1A1B{c?f>hYK4dsASVD3PU`&<imn2Q9A4l
zgOC9jtfB#HBs~S>?LE8dk(+D^=O}jM%p}05DM4q^_P%aQ^7BJWmdz1h#%=2n>j10#
z2*&V->fn*?=vm^=X<dI&6B7=3|Eja^SEOqahr5F1D(eFb#{hIyb@o$X!C_d%uKiim
zXH&1m@oedQw7&235mp?S=xj^^%PPlZqgzmKT0mnm_qE1AqfjO+IjGfAA5GY-27EG4
zzJM|uS_MLY{wHvyLAsTYv$jG7-k+2Bmu)QfGj00ukU9Bl;VE$WJPniRblK!j#L1uz
z8x2-g^Ek4vy5|~+W$=^02@mj_M|!mgPfyOmM~p5G+_bW(7xk)7$8z-fD0Og_-u-{4
zXb?1HF>QYCGhyiXWk^Q83`v)_F%WA(G2gi1D_%q`n??5r=>jG;EB(gP@g2<v@@#Ac
z!1gNdD~KSI@7Hv^XjI41Nw3f{_Tlcfmkr>vvKCe_?+G6>h5g7#5#rj%*A0~zopy`8
z_1no~j^@agd~V46r#`=wM8Jvzsfwzw$7$7*)6V9JYYt9M!h5SMl<?(1A%$?HDgfgT
zXLGOSVs0n3gLi<>hJ(DD-JS7klJcv;Zd>#WQHN3lj_nJ!UNwkYFq8uLVIR(80neY#
zItjOYD|t)P%10E#w&3tsAo1yV?1uQnaU&9fH{OaAAt}phM?W#gDJ{Xtj8^zsh<sQ3
zb{%_l9fZv4L{dT>2wrqceEsl2aoN#xM*b^vIM^(UQXxE|icez>xBB@t*+o!guF&_U
znsUOsrN#cREjNG}%CC0{j(~Uix5Er4)cwQdZA*G_ZfV;R!;9w%KWz3~v-<A>Ceu5z
zz@xGAR^>OvUM-|+b~7IK!8tJFJWC#G%U1*WakIJ5>5rg^F?nv{A!TZWvQSx$h%+;X
z)!rFl_8?$;6P%IZxT?!~Te+^I0q8M_YL4&}FIV+}c6X!^xSu#)&zD1oBb+A(I@-Lg
zMt0ij$~(y6=x;bTd3dY#u>-8L2B1FX=0N4{2t3C{IQ9q-1274;cjA^{A}kl)_V`##
zhszcCK!HVYgn?p&Za{VHNo4b_K_H(EmLGxN5OWnu<*<yDmBh|YK!-zsK(Htq1TGBc
zCv7pC9#p~y5}hABVXntzg=fGV0rc#-!r}IFVb$JsLC$*w+5tR*O32Cicok$cp7A<8
z9Q^oYk94s*PL){oB~Ng@Nt^3>@dQU=->FX6LoRkZD7)y*)}w;|vLIrpbs>Zv)28@n
z;+j{K2Zq98ImrbC&5C!mqAelZP8G<!Jl6a{x(Gp8aKVdl!Yl=JN~QNJm$Ql9;%P%=
zH0L_X0dIVeLnZlmwia|hXY{%(U8hwgc*3!s0WwBz4*%=)tGP0o1+)%nyJ2Jvhfa`H
zGHkxD9$<^E7!SujH>GBW%7&tXYR{v#>1d_3lqb*N_HAvBlZoxu_=t{|8v9QCsE!!4
zt2$WCHvqoPftRmv1sXZl#3^9)c<tzLYD@y|`v_kayX85GtvXg#*;h>8;evz*cxQc)
zu4?M&Qb*%<=n5-;*WhioGkAWBbQNdQ7=dsO6U_c(H9V<i>mfhp+pSeQ;M2F7AC}*;
z>;%5<weiO(T~2W85E}9H4!zdL%>ouds&8fCY$pyh03TM{Qvn0r(~X1UvS)wVKXN&#
z$*cO}z1_4<@fkdJf1Hox+%~Wie-?08oUF#d&K3s1x9fXEw1T^Q2It8U1vui+?9GMz
zX6J$j)8$GHI;jk%P~c)idCqQq<SUB?AH1Ym!^Y#M488*&HX)es6F$v9%u1S93sW;3
zA3FtHn{giau-NxAGTGsK$D^u^8|bhi{`fTC{DRC9msZtp0(=g>Fk*KjD%G1ogYWL`
zrZ-pLz`4GTNh$58mRQa~91&NPoEqRbRE}g+^sA{FY-wdKAA85)FHqxP)EU`4$^jZv
zm%)Od@q%;5a;_P^cRt0`{3up7@e=?y+gb1aB#QPf9ZXmO?b&fS;HXUu2p{L;5LjjJ
z_*9@Ne9V!uvu0sY_`}~aSZwkzRXHy^@>okyfMmu-qtlGs0vt9U#ZlenS-cU5fZdi>
zyFW<RIL&NtHG7I8%N)%6GAu-nQhX2eJZw;2(Fz&Q9o`ySJRyu=r$(%{84i|qx2#S^
zlkq|U9OHCOz{-b*#VpxW1v%}oQX2E-|A*FDy7g&>NjabK5&f_TNTsOg#h#jVT_@+9
zcfw2Aw*?@8^ylrDb2Swao*x$Ew1D0(5ejx{Upx5Tij53&F6Gm$?Xa3=n@0y*;fDEi
z$B71K8g^wK4xEuHo@LvhG@^gOt3-kR>skb)a#>{NxW?{WnuDVSf8saecsFuqGaNW(
zAII73&Qfr`1d9x@svFRgt;}#@+@(!q(_+nD7?sdp40a^Ayjo;!KgA2t@l+gjn*q)@
z|2QnTbAoGFa;v-V!QreJig6NeYo{v^;Bv&3a^PUD6i=1xi8?QYKKBI%ZBa$<>7)Q<
z0~A~1NaO6kHA(NY!A|ulH4zS^$rOSRA!RtfAcNY1dddo}-X}cDfT0q-YIxSI-{~WY
zEmbtL5zN*RfzqQ&32~9xyr*qq5Z3R`LD0DQ{hR+*l?4bIyij&@SX0C!?~J#$lfqdg
z>TnPn>&N-9&5(c?6@yfakZs~Ct(bLoR(NG9EpJiH7i8mw+XT=}Ggpr)(dnc=;HDy=
z;Gsz{Bq;D<4)a;<IIa(;;0#HpS8|S6+hVV^$yh==!Ixw8F2aAh`|yHV^37?9-4F$B
znmg?(UTbO=^Nikc<FMN8N^X17_s7@WxX1$Jyd4taOvmzEt3<1cQ+S7~X|ctU6gPz-
z2>T#rma*323~P*aJyQ}uL~A^m0>y(bi>d1j{lj2;QYV!^0fa_J_vB)yk7)xhPu`Nz
z#0yr!d>#%H;8%}vKi8U2G{rqc>mA>A;fHMrux*4RH?KGeHZMXjb=x@Ce)S7Z2xzen
z^3jA>Dfzb`fdUj5I$Nhibpkrs#pDo$c(L}uzF~q2hNLbxBpcSjf*cuBS7_(wwYwyt
z1R74c^T$(Rq1iTz{Gqw;`q?bot(UUVhj)sgAt!c)XV87I8QT#(!i3vlVOSss-AEd2
z8+ctkEoW1lK=o$V<QnY?kYn{M0rcrT!O%H&3M*JrFI&*^SVYqxi?xNaTSw%aHZXzX
zyJ3!@pQj_1Mm%3zs_2%w1_xF|?3PKG`=5tZ+b<6bg2Q*4j(SSpfE`L1^q-2fiP_s>
zXLjyntI`U75Cq#DoO3u@>ErZYHn4%b9dGS4N*kJ<OIV;5zxvLic^j5u4a&QM3@&H;
zE__K-78rzH?MP5x>MZkiblOlu0hYlt%=F>%_!j)7r8~*l=$O8`u$-A^bjf=*6u-TK
zQn-%i1ryi<HkuAJsv5{KShvIX6k)|_umY#r9$kvzB$|(}D*zS?S#6zzE2Kwi(5@M?
zfah-&znI466hjfs4+LYzn3hng3&J8i8U>E3zmDj~L6KpdMY$Fcz(;ZoI1ValPT8oc
z87rm3K{V)b&faUhY>OW@aveo=sbz0fK1wq0SRA~X?ga+AEG4wx1)O26^i#1?Ue|ku
zl#IbYv-eEt29VTHA#y^^?{^I=UO!pY+3`65VjgTLYn-e;vQ}f8Q>b{&Y|#XVRiCZC
zM=<mIkwt^S1gn9R7PGk2Gi0u#DZoG8@|DHgcRbKjNNvD!R-2;R&L@}k^NLvdU7QQz
zsA!WCH~?jsmJOvJ@q?Hf2H39<#__Yx6A6wBRtO-!dj?c29$IU75=sZ8eFI@V+spZL
z6B`1fS;c~TSC?ek3b0@WSH3^+RZ)*}wx|1QfMptA%$7NNrr+(|C;~TeVxzplq?Y=z
zV4RE#-OsgdjKg9JeDjp)ven7ahYlmWP8`YyAt>g{mgrL{1|A6qrz9mv#X$$ZVX&~-
z@d&&@=(gF;69;p^9mMejNML+XZd`?wwXZV(t67n(;KYiriUwyT;aO+1eRAA~gVGXC
z1Jt9U>$`kvJyjnt96JIX31M?(cUqh}^$=MLi<ZMWq(_$}4NwQy&${T3msW50NtSpK
zpPsp0(RqLXFbLsWE_j_YWKlkJd<64b(}u+05J&3*o!INp^lowS^v>{f^1v{*I4<bp
z?XoGIWH~-Q?HR3|t_3!Ca#(%$DJ*BLHs$^HVHx05%)the4evMc(StMH`4mepxAS-G
z`OFHDf)qXg4;D=DIaltEaOX|!^LTnzZtEvLaXiO>@kto8dBnz9OO~qy6WGqAWgBOo
zJj)%N)0vjNa>XKRpwBDi;!M$YI1IKsB*&^y_*DeAdyDhVG80$BS)3)<9B6+&P|9jv
z@8U1kM1RKDn;{DAa*9b++tbm)@zdVbbwd=B_Z^NJP%#-GWz7nh>o=>lE*{O94`9c6
zB&RNmnlM0Rfrna{xPZt>8jnO!H&?M7E(CzNUbKD8`<jkH0g(hA+ezeh?h#xZl<}Tu
za`Ci-mz!ScH%o*F)Ynj|TKvVSJ|3}j=vbcOuWVY}wiqn&RUYC!UQ!P;sDyY1=mn^%
z@TcAbzAtCCLkNSH5|+S*q@ZkJdA#sS>;^x&orxUMeqx(1&l)<ruvU9MJ}jd<?lXHU
zQnQ-=S5tdA8zJ-CV3o<pyq4EmU}Uz!LdE{5n(?F&*LUD&^HaVAfpPZev~7Wvz?NP-
zdd1Qe*719zLTXmeJLkJpo84XpJJ~HSuvW0a<mmta4_w9kod4QE5&E6Vi^AK+(QlEE
z3P<s(ui_U1fGvW#n)x~_YeD$olRGHmldzv{?-)1SsP247^{?F3{I8bMo&(!f4%KO?
zgs3RcI~5sKri3;52v;hVINd0KKUvQ~cpDB(9hZVc-yGHS*<ghn7Z7B+i>;-5XGh;n
zCotOEUbamPj>7qgjwr_=Pr|aVZA1P?s1MW19G+ciC$Bgho8oxA`;6DS+F01HLMAvd
zI7G(cC#&o6urqP`C7n2MfIBe;pT60T!RJ=BgI+FgZ~d3;Su5ElajX0VxKKpU&40IF
z?xCiZZFLwybMiuP(v~uv!M4=}rrUNb-zG*JZY(Ri3DRJ!kMjZkIfOUx1bjAIO0)%u
zK~Xtp=?$5!R91MHK)kUTOH$IZa@mp3<$!s2yxXbrg9GHA0#&%fvYEZl{NZ8yTpTF7
z48y5zG^Vtis<EVf$2*e`=DM9h(J<17A@kv;FrKuiBA@#>Gp2*lT)<9sq*dX(MaV4H
z$J^ZiO+d20$20ehk9NKoAnhr}bo!jdcl$jE(~F_#m=ut1@fs9jkR5Y-Sh<vEwu&Jh
zR=zE8d6xe!MI96d&mS0;9opTi`4a{=Er|w5=FqQ42;!SFk$;gTP>6=O3bwQK%}Y_f
ztwy{Nhg#)gyG_9ds@yspqDB58fMC~gpZABK4{L^KMG*cgg*Hq+JMc&?skq-l6UW{A
zBk7Mbbj*#_K|K1EosVJ$N?o02BKL44;-&m_BuWEHVD|0f>*g-z3Wbn|2R*Zrx203i
z5{C}I5s2+p`-xDFNtz{?B^p;B4u;)M2FCH&X?O*=B<P)hS{v(oYfB%;5%3Q9xCdz8
z{68VXfqv@Am<D;hog*-+b9gx%>Zm*2y*h-qhp84haR=gh;PG?6@nTme5?^CM9=+Oo
zWeLn?6=%cpsIgjPetAPXuu8Q-UmVYxM5TbsP#k5i`DEg&$4gvqfRBfHm?*@VVm<t3
zvCCf$`muLL`U>R42Rje!u$+{LroO<s-s7JYZdadRaQ@ZO*j0H?IFE}6$QjK+Gyoun
zlKB9m*&}8{fikq^1qlxKe-O7f9=urP13b1f#)g&OGFa1y%e%I56Q{06s%<&$u=8Ej
zn%1M*34lYoiW$mkNdY9(Lt$mz&o1w<-e_(w$!+N#=0s0^#j4-(p4n}W@N%XZm|iA(
z@q13J?M=0Ne|kKFe-$zZ+(ji8Ep*t*<j4B)b<c(aMLAt5*c&Q0cXqDjEA8F(VafbB
z92Av6xEsu6kEe4VSZoe;dB(#=#TE&GY(Dm?_z=(Lc=*?CyIrITJs#B|z6umV|Btnw
zI@kAI5PM@k<!0l>9!gvf4$Ng=uJa{(R<#^3oLW}%A9@g<;M=TksvkkK!ReEO4Q=$W
zqs{ie;;f#ZG#lR-c7WW|QxNH7Rs3R#)`>aaaz2VOse~OwWkkHK8(WXqbY-<)-6DKM
zv8Up|tnptenPIL3)zu1t^quy7Mxj9R95bziwDUxZ9WwyO*oo}@8S(|^$Tm|GAvoR^
zlr_s5Kkg|As@;lTz|^H26eRqaIizZ<SB}5sVXa{Vv@d4?S;iI|8s@2ugzd;v0H3UK
zOnW(K1|S8Y$`X(E%%%I;mEEG-#tTJW%L~lIzQ0F<t?&4r80!$V?&YX=^F6EJ>@90o
zi84FG?|^?EOHucl@GwqCgzI}h8Q-^w>hNO8y!Wt_*OGi`f>Nvmrtz|%;7D!O^01t`
zI0G8k$nGo91}&+?Nb7cQ=v*nb^N%$g@Bth)m-n&8M!4f?cC6w{uzW9FVX+P64sS?c
z=@?wIY{@$(1Um<gvxmy6I}=s$Utlj3tgwLFI~7}n_9H*FUs*J(ItZj{fQRjMt1Y>g
zHi1j2pSrSr9jnG1#g`_JoUa?pWee4`?UsH6RvpB~5_!{ga!gO4ruO;aVGl2GED2IF
z>e2SIs|9LZt9L&ygH<~a+qX0wE4`gdTugxl<-kg`W$m(&fwO1dXAVW+w{CTmXI~!)
zCFfi@4jQ&*gj1q(;aaCfI_+3rHAH@u);crcCdD;P_#NuKKEtiHLsGiq3J(hdhC*T6
zw3F@iz?hhYA1@3G;%1qaeeEg+d(-Ji89@1E5zs5F1fm!bK$lUcLsXjg1;kfX>pFG}
zjdsR74BBZ?d%C5ooU>NND__-GytF%AiMm#vT4<B*WQq%j^GOyU8W-?1CJFJ6EC?P=
zSZAf30}lwKcukz2qBSNU9U(WJ<-lqB;L#WYs5)D{YR&md*`62hk@qX{J<q}}^>U`p
z;j0e$xfJwziY%Nr)UeD3=DaW7d!)m`TqYByGK)Ba{Br2luwO9W!(?=rc8G>sHQvbC
zkMC=dP^|DiPemhxzO?7|h|t0chdl$4V{bjczCDd<+<_aT75LXXB{^@fRL*POk3ba6
zvx7dJX4Fm4yjx_Z1?v#KZ7GK(0r-b=fMwRP?PRlW3>56{)|73$SQhk#F~Lc%i#6h+
z6DJ}ZUS2U&9To6#1n}?mw+yxt5r+${NRk7%3%hcvmUEs&YTgwpM$kzPRzC0vItwqb
z?8ZA@2FuDC;}T90c1lb-4zQ!MJw45D8I^?h5F8QyP0^~5;T)Fg-1BP_35Rue92I%P
zp=x~w5MGiJ_1<2WmnR1#5p110QSIu(+2yB5TUGfth6Ujq3bi|lJsk-S#z9cC&Wq~>
zDm%cJdvQXKRBm$);c`5?h2S<y{2UAq`%;UPdB_oJ%}@%PG?TdEJtq@O=A8(0tX8*q
z*kL0588mzmye<c7sc`2AA-{8O1$QGJ$DW1{mzNz;{77Fct21knK0zq#uuO5kI}WB@
z)PNkYCKT%#$zy5cBy`xn<^)1)_2#f1&zMuyjrk%z%y~;M76iqEaBcNTyqvMK+}yFv
ziRWiYZ%%<iffE~DPX4um41;lErn44#7ryNog$xL)>|w~!dw#;Lb?EOb^I>TN|7U8+
zi9paNyW39HIDe~v`;q=?_jdAPv*PI)>A4gOsh03L=aj9*I2^1M=RWQM8d4qx$nq|r
zAQ;u>Qmz9MZ5f49AD(QLT;Egsz#hd>FT<I9whuZ96{2#vzWk`-n^sOgRU}^M{gi!B
zn#VyXA5Njpvt&NXc6M8Qs>R3SUe;#Yu>M}-6t?=lY32}h<HCs6?X>l-wml=*-~i9n
zE}u9qQzmv}mGQoMvK8udM7l$t@AecXVyavHr1Ht-bv5vpeONf7;^3+QcyKBs*pFyz
z;UqlB4XY}dW;ht<r8?&W9`ibmHWjL+4I;Il>#0t^y6B8|{UkP&wi$GuOXaTTJn?Z#
z8+2uVId$!)Qk1C1wi5_0us_R_WhQTzx0Gycj%%_D#$pwIQ}IAf-ksj%g^JU}z=@2+
z(YoxzI)YQ)lSI9H9ed|TQzCjDO)$f~M|BWKp5-GtMq729F1PI6fci8$i;qdPz=2=C
zb<@RX`x>@xLT;TXdL7RkAqO1;WM@_r<0K|s%Yvc~tOmw%2+c;mdRA23v2Gr6Z?j~d
z4ysf~Z9$gqHx3%=6CWz5bA~w}>q&_Z72zED+w4XY4tT}q?2m+R0?zSPEqjCc5yfy<
z1shOrEP7A)+|xV*HBS!8i<YEE6L)0CcB|Re*cPR+jU*1RHZ;$49hTq&&8u?F*>;#i
zb+z`gAoZFn!1TPHj;==n*{fkT1=9b{qMgvt?QB3NbznIS*WYca7VztIPs@}_5<1~H
zy+y>o6L1dy@RimYnON%_csE=9b<p5d$}>;3zc1Fb1~ZKlwsd5eNVOyRvX1^DNUQ9B
zCY7j6Pu;+3mARb>#cAY)KOA~|w6&+5L(nYeVV3&LC{cC&ewX%4E42wjjq_Tt2LhYr
zopvU;bp?+C32fNOT+V80AQRr->ca)I{J>XiEHM`P(+<aQ9^InWOC1+jW!T>uJ^2d{
zTUpH0$!9TGC1!n(rI@yj=tBw6Gg+u_jg#uuSumzxjlw3cn&X{M92kFKeB}g{Tj6qG
z0b#nV^X2k@t~~DaM*FN{_3A`M02rU2oh(+YCKxAQZJjX0)WIe!wEax;)!TlX#lYbj
zUZcV_*o7K_(6a|wyofDc+ps3!RRRP=KrDg;lw>M+JJIY+&73C)BoOh;V6*;SEX3ng
z;=G+)JDdxJW3I{_a@d54MLn7K1cq#RA2HWz8Suu_RO1+wL$Pe!idvJNG{pd&g-g@~
zUg3;FgR8uXC$s$?3c&=WR>7_|AFbPdZ3)J^#gg+3ASNV>E_D_bXMneyWVBT{hwWFs
z{kqpZ>?cjLdh(!ZAl#3nMCdb5#qqs3Na~0XFP}k=Pm}HI>p&Lj!P^ew-P=_;LZN2(
zD~J+e$4S59Hanb^hb3$iHQhygGDq{n*&O(oWv_OzA{IOFz8N}ru?Op$U9)#QK8;8B
zKTcIuH{UG0wbCYi73wQy_EdjTS1qWK(!dPrV>`<MHu!ODtgb(w+C2F`&W9)urAa|=
z6;)r%fiRg1A;wFU@n}>oI1IEUr4QedbF+)!-JsxqID_!zTL_mOalKRm1HL}W`sRx9
z#h3c>!HUN8B*j;8R{IA^1L>%3E?i)16YNRxPGTU&X}Y&Pis4}Gvpv9_@C_?a(eq|q
zUhI8f&ir=z<<n)0N`jr%op8lc?%omxf@|NU!01{%Z%5laDoop28*AFm*FD;;tu#yA
zY@_5EGm+Rq3NWZ`J@}n1H|K#sB{q#ZEYP7PPWmG<fB0qapjtqG{>z=^k*l??s-oI*
z!{?mx2UQNNdQU?+5&{s8Fe!z(9r-l+M?xklh~ZGtwY?Bc&WZtALC2E~sjxQ%n!_Q!
zR@ZT~0$aS<S?i77W!s=w6Ek0SHV=_-QrgWjWCcT%n~lez0$9b=l7o8>Z;iVB|Af@b
zZpe?Pt6qpCN1w<e6CuY|Sx5Y_|3piRayg9l*e5;|t60|Uz~Q~s{_se1K*?tOWOt8B
z(dFPY?4&!h;OdVY;ZhUFX%WjoqDeHh1*4E`W$>YB>(yLg-KbOL$5W^s9c^w7&uDJ-
zQ)sgi$1c^Iol2zW7-7cJmTevMt9F+-^gYKI8WEqF43P++Y{+md9G1R<oz2$L19lX)
z$r&Vd-H%AnurT+-GxH||MwNi04c2m=+YuoSnr-*dtu)@}Pl9O<Oaou2f3h)I7vgm{
zR2!tU{c^L<X#xVrAydDIniDUMuP92Hs>OW$H1Su-2YjAaNr%afcdxwHn;^34Xdz%#
zw-Jw>z|Y82!&6KW!n*s_Qi6-dDtvX?I>f(x*o>DVik$!Qps1B})N$A`wX7w(8Zh->
zHC2L}&!8qKJqG}|zMU!hWH2C^A0OLQ+iUG`Rt3P02O?J5v3(we7v}xImx??=82H}|
zyZ9+AIz8ppOy&GkB3}9B(<wAeJU2gLbw6+WOdgB&9(PV<w`NF!z?W&f3cjk`xnEBQ
zdRL>=d)>qXI=8ty9yx=bH}qEJ=|iO#mA%y_!E4<2F*WJ->fN;qnV9h97!!BS)Bc)u
zt7>!wg(9=n9c*z-a%o*me1=EN>rt^dI2zZhc2ZG1f=mUnjrfdVw=}{2o}fa~iOaER
zeXDh@b~C%Ac?;#)u8)s#POOFLpPtT91fhAyWZm%L1d^JHl1TW$v=qXDHta)rh*p8a
zPm}cwOD*9KC*y?Yeb{4U_WEfK9e_++;^pP_aMG#?eTRWqv*7ujuwxEROD`@YX8o>c
zT%Rj57BvAIGJ#(|zKfkT1{Wf%Gc4NeOfn~ZDDDUtB7}T|(X9^SGQ&Kf5!W&{JDztx
zlAhIksv6?c>S{I3kK>+pwi3w3zFxVMu?|NE{c^KYZx9?f(rqEeU7i5~k6x$JjN2ZN
zb1P1=yZ}3@rCRJSk?4b9o2$e=Vsf6%1)=8<*nzBK_Ucb;%j$P0wJ^PnT;3>olBP-O
z59hj}&iDT1K{*~}TXESkkLHAKD|xzeE~7W1EQ3|PHsP10vg@fXZn*Qie|t{vGM1<!
z7D&TXrDZ{h4q^`<bv$J+O)VJwVSa>)6$gg-hVvt7p+w^qzdD)hd=Z~Q!eyP4H3kk_
zCIE$>=HIl|E(MM|4zS_}0IPPlew@E&aEjuO`A{gMdIcLz!4P(E>bsuLkXZ<_g81r|
zS@2{B#|<KTl}EuQta1M3)9rIUIS%k0;j*exY%1$kqfiko_$U4pYWgT2DFI>k1A*-0
z>9Cb?361&5(`L}Y1I?YI%~Y@eONmYh5=H}f3rD~eIa5JF(#5~Ostx-bK)CnQ;p~g^
zQ>t*>7`L5|Q5*^=JyhFf_4(X&Uq4ME#yYGGxg7@Za?nGGF9;DJzVnYA2lFTct53ya
z;+Sx%CkE^!@um;0h5wTi^w;5P9K!E9#%9yQV~F-g+bWE!2G_+SMMp5G0_9M?aq%9*
zLA$q^*z~#}w_IKhjbj`uJ~|2<UAQVhaat>aA%SGOl1u!{4FapC&u~eVFnzt?Ln6r6
zFPnYZpiAIXK*dq>7<aueFAUDiqbbE0kJ|DgbTzmtN9R<a{DU+)-`tCgZpq}5Dp%Fa
z<mJ^;d_FG!bQgm&x8$ZPY{pkPWN*AAFceN#ivE{R=OjYgdKLED*7Z4#?kP>Wl@7)@
z27lD8{hAi7J0SD2sQP1<YT0?HNB~gFbAY?%lY+N3lpvvmnZi-t!dv^5XCBWjlj^W|
z@DJE(E$s10SM8^#3qtsy(=w$qr>()&@q~}4D_piY+_GNJwe;YxSy`v}#*ejYXXgcN
zf-$4$`1A48Kuqwg6#;;-5*&mX?d!E?!|A4+k*99_B|pXK0rQ{nmoD&D;SaQIs_E&@
zi@riUY`BJN*jQkLx6Q4wZLjPUr|lL9{!B<fez?74Ni_!=BgR0D;ehMsa^iRj>e*_C
z3kK&}oB_Ch+K!rD_ZrZa1ts`ocjlFq0(qJk<u+b<c&m?r;xEDFP{j@h+}G2mrl07z
zw#=!0!MFUJfPrsUseCvh8*d3T-`Q-AMdE-1Z#}SU#p|403Z)58HSFtV3&;O;e9V6(
z8WZ8FEfgR`3x$jQ=){w}?Ci1<0Apq^@p8>dVtl0cP}eK}0Jl6H7-aJ;>|t4C3~<a?
z$ZYU^=M}Zl9-T(OdT=BU;UGEb(IVm3K`CAZ{xTW|s|;>nC7+WITiTw{0a4+?tVUoM
zj%z16+uL-F=)7(W3d;0qTj8rLfqO<4gCvqYFpi>$GUx-NUC$N4(D$0cwqEzJ-$AXN
z*Udy!t@K#GG{sT8zITGW0x)*SI^@+jWiwfqiHe`D`b_>2t~g*ikC(*Ky0XP5C&#=x
z@#ju61{;#$j)z(dtgH74*#v=-xB=H+)Za;1*sH1joVF`{YKnQD4&ZcL%G?*in*^s=
zsj1eiD($^{-OkyUG~SBPo~c`(w_a`QDv*0kcRMjM=fgV{P)n<7Zv@E<fep8$dc(wn
z!eti(C0q634C>d%$N}$P<`n`CKY@iR1jlL4mvx;0Sdbd$(Gl;DUX7CXQ$=hX0fe$k
zC_c`gg7(gMUxd6`tF^UG(vz@P<&jiRAl3yrL+4cAX3^m6&~cgHtLmO3)!!Wqz<mfx
zQwKusdLMjE0;Eo(2YU)QxE%u@0asblXd$Jy*nlbPmR{)!AO29A{H&}$juMN)_U54+
z78nzh<j4v0Pz}_bMz`xGm%@R1HJb8z-%^43^)b%QOmJX!d&Z;6gxF31)~FG`P#>b^
z#PCzF3brrd5g#0{6qgP04(BV?*|zL3$9Z6R_RV|CBK8XDIN(xYVcxfu^Y-l9J<&cG
z6b@C%$1kw8S-$iXQ#~+!9p21Y-Es)jsx>NYpTd)BlN{U4mlfq|UUf64rM*xOf}--5
z4nnhL6F{C@GA-udSfw?u+5uD5iv6G*Ii~l%ttDg=41Re~f`r>5R5rS%VOD#2_l$pl
z9kb<ArRt)Nyu8jMaakivnEcr6oLF{m-o`G;zBK@L-jDG2R1JpTzMOM~CFbUIGmOz8
zY-!DrURQH=q}crQ1ynn<xOa!BI+h)j=NKl1>TP5^VUx1&Vc*bglS_-D&qo0KXRM%M
zakOnba#sB_qhl7n-1@h;heB-LPp$}VCqO$E5^_ewS8?Pe#D-5?pEM?a+F6sfqlx1;
zOQSOQa^?$o@Un9l9G^l}DY-kLNM#cM<MM{}!(dF;_hEG?01MnOiVeKj%TGE8Hhwx|
zmV=w|JeFSV(><FiB#n1aFA8scLNelX=bWWsGahDZ{u?-;e@}dNg?BkP0@@qPe#+<e
z_2em~b{{(njktzGeug57wrHsP29UXxdnk5K$r&|0hn2vz$~BThD>#d<YWr<E^m|fV
zM8U#2_ErP~bYz?TvEh9Bw=crrT>wlfkSXuMNf)IkPVn)-$;#KDXt!fd`W^GrzwR^v
z?8g$E6dhB7&s6kjI#OGK0N!a?O7;P&TXppB`4xIu=BB(daFSJ2Zbu;FpixWBJY8Ao
zh`i*HxRdq_DtT=-e0m?I;xB~@nzy(1pp*y<B|6$&pg>r2(C|&*7V)3grC8u;ztRW3
zT=Q_i!Y`k0U2298g(9uG-Cp0=n!GIvy_67kqG7g$yf}{&j&)nI_pT<z={+3(5&+a}
zq0Dw{U*-P`pfh+Y0w65R1LHe)vf5EeRKjh%E-Y2b81u{8h1G%HcDg*H+|Q?m4#sAC
z?7%}AAhxQ|2^Ro@I*hA$qx32ss!sQ_^aM6!Ox#XQB8=LW<k<_|GBO}%Rts!-MUvES
zQ(ix|SEkw?`cb~D9T3Gf8XUY#M4hPM%&La72g79mFhH}aQ8_yl=PX0WKydwFpBy#J
zJvijeVRxoduWPT<>EL%do|5;WHcSTz9h^*O5Id+4K8O{)&YO)7>-to>XT5{c(d>dX
zJ;&2;fUjF|d)u-11g6@SF&uK5_C9|aDztF1uhPAd7T&_fyDQ%gfKeAxgnvw3p3Rgw
z*?lg*25ikoWZ9J<0AK3`Chz<$#h_mwV;D9cjddxBep#V*S;KAHUI374diWFQhqDY7
z)U}!wZ1U3evbp;5(#e~~(vIWFWA<ItjX3L2TCaQia-?%St(5Q~+ZyJhn*DK5QfS`L
zeTjD_&z)0fX4Sh(kim(e9VJ}%p{CI0*zz^fZbCtMY6tIG%7;6%TDeRUg9@7TWMen(
z`RJLCgo_dAOw+S?R$tr%6D!_FSLbil__3V1J!6Xd7swwi7mge*1sMBf##wE9NX6L)
zUfaQUWy&IW*L6QbIiLiuTriCJP?`(dX}A61Rs}@)9lx*~dmuo$l^}9%c39zxlMhU4
z_(8@#0FjmV$NIwD4=V}rc#=Ef`caz$ke)$ZR*OCJ#}3O$LooLNU{MmI&ikd7gy*nN
z6g22iZ@V^d$1$DG<OV}p4BMWJ&muBrMdqAeN(|F1Uv-(~NnyQ(8-Bhaxg1|~D3(_o
z)^p*I!R6j4Uy6>iNte?zPQ1g!gs`#BAuKOYofMY>xy0?5&cMQYZ?LP4)G82p?caj~
zVV%vXY|QEG(?cl`MHfHf-F5S$Z~0Q?%%fB(<Iy<GF*V3VVcE)Ds#Hl2uVSvWtJVQS
zk{MrSkpOldgyeQw9?Os~;)g;?1>ZK8<B@F39O;DF;U8jM*%2JeQBSEVTr^Z@cwyA|
zeW1G7J|blZ&d)0j?Fh;~*oJBV1G_opdZyl-cg$%cq$n})vDpi9!$SZJfqf1jOFyN}
zq@lw;doQF}a~KuqTWL>6)Yfgj8yE1goR@PZ_Lq3)Cz*j73h`-ccW94*+dM%J@tMg<
zjA@GGIygpE30*~gsdQi>>4sJ9A*tMWf@W#1m2nUxBU0p<yWQ&-yj8nV;6T@EjoM34
z<vNcIzWc)O!1az(>KjVXZJASWc|TLK#!_EXePJRzpSEQk%fZwt#edjPn@`E$ad;<L
z>z${?E0;ZL@H+eX%eEh^SZ`M6c9^9SavT@D;>X(6vzcZ8a!`h2{6uUP7G;&Gs}%{i
zy~($YD9f4U{I$L5mse)j;B&6=x{GO1sD}+M$EaQYkbamWne7f4aM@m;88>G7tbxAS
zQMgmF)A(IeUhbXJ7rJCtc3L#qHjEsOh8K5A`-zh|ypVMAxl`n=Wg)DcrJUjD_Y3kb
zi<PY&uypRSj}L$7_@U{1IXepKbLk6>1^7cva<M(zl$n#hKFk;T*jISB+k;|mMFvfb
zJyW4aW*N+FLHSvIQ?YvtoEAreU8v88!+%)=;KGX=XF~iAUVL5lhB*~_T3lR|%`CVP
zxSa0z_U3@|pBrI8VP>x=Ut-4Ae|=Xp9`XQ%D{nZMX^(A-*zIHj$ey>yYPaAG1C;aJ
zck3z~0%TrYO(4FhDg;c`f{9C63wRQYL$$NM6MHe2^>fNb9G3F!W=}9XP4Ig~6vufU
zU+z8$pBTTjj!G-4N6zt8_Y~jT2w8YMK>rP<a`vtm9$y-9O|K$><S0~ZH%L{+aLS9t
z7=mjE+MRaFO~qw<yTnp>7X>Jb8f(`p@#s7TXCnU66b~o=0I3hw#f*&w3V?&_>7X1I
zn^^E$fxEYj)YB$A0@irddOcFsz!T!qxT3QPSf|GMC#a;8_3CXn>F-b^&%vG;RaC27
z3FG`KTnma!Ugxha>*gcr%hB@cGP6$+zg)bDhA2AdQN{3ifQ#Z~umjSJpo-?tFP&3-
z)<+!)hr48JF$vF?g)hr%6R($s8Q^N*xBCBb#IqWNujD1W!kIn3B;albW5UL5aM)uV
z*10&nC!3vsSl6cxhtqWIX;MyV!eJUOkq>)AS%R~kM^xu<7G;!%jUOx6SvBq6W*IE#
zi|Z-pm=;RQb2(1$gOWfJpIo40?}UrbDUCJ}!~3POD><Ny*Ppg@byL38@OHzlPweKf
zi|&JkMJL-IPM2kWmnl=utYzda<6Stw1YWSjaAr<dqF_VO^0pq>q|^rr#BF}xF+OeX
zRLR>5zY~vAoXVH|w%`<(Xx5q4b&QZHL5p<Md3xOxnW86*!}*89+iqf%0|LTn0d&KJ
zy#G9*6W4M~nEK{kq183)Q><@bcsXX_O9_K==@*>hgqmIUohv|cJ$+K`nc&l#l04<~
zTJ{hF!Cb7se}QUHv*HxCH7G{eRa3~|LyPvE2YKP=t)Rn4s87sCsf<-4&$wT=`G7v_
zn16X4hJiWfae47u9TnrC9);Pr(^nOXz7Lau&50DwrLcMyT=kX^!YbyvaZmdW<#rlV
zaz^ztHAzk6M_tf7E?jZfrif6teNn9kp7bLywG%5DU(<t2^|0>vm}Tl0fUdz*E8?u=
z#er{J!BS9=s5k6ln<<tuKP)`phCutHK{xv|^w`#%`>?iYXYlY8Z#u{bs6ABUYCnxT
zt*6spK1|V8r1Cl5{p@61Iw(aHp4wxn&XYyWE04yyPFw-tX4_5a#nE{`6>-<Qs)V2k
zTqVrF#c+{sV3xhwah08us50v0e1}?s+MG^w-ryw|{;Qb}R3oN6K1E}q;xqZ9swSfZ
zQzMj^;A49ZtFM+4pAQ;g5%RK|_&)1p9mB_|aEOrONV=nK+wD#EW#{C~&mD2_X6aHF
z#c|17ar|V`Zz-3C$9~;vvv%JFs;wfs%}l5Gpwm^JLJA(gpC^$sTW3gkaDLN;^L2Lh
z6nlT1KSh5p@BB=i)?S@#bl=9_IxRy2H#){z1!ZR(Z=RbtfoV;B@k<5tfapLvep$s8
zJR99m!7eIkZ1YWf=1UG|6B}OODyn4!Yu}Q+F}0lI)xqW*AA9(t=GfG)1MbI5v<1Ed
z<#+bRO5Z!?pR~W&Bmy9ARF%IMsCL}We5-Z-ymaA+{4|z=)k0|icsNzI6ks}vH6cyN
zMi5p^&-vVde?7u0iR8Gbk-$>-Q$Uwi+V-mAEz7V&*I_ZRB|FW5JJ|eXLIA9`odEtS
zq_c7QOkeKYBUXGW+SOFgI1km+Vrd+e%=)Q@Sj4fWF)xdd7au;{^p`$I@)|aqH8vt)
z7;A02%wu-4r0Q&OsLF2A&gL*&Yf-?wdb{{KZ+0eK__ME&zbFmqdYECmS@iBeREsK`
z#Y_Cd@UGQfy7bfd0C4I3>U*%unBYLXaQroN9fLTZ%A>=Hf6M7l0O4_77B=wQ)w{a{
z0lf~puwS>@hh?|vQ;KU_Ren@~JU@Ck;<HYpxX@VdheOR(ftKU)f&w!Uhs7Ij{!;P3
zV$^4J$QVC$nG{xS3;uxH%j4-!028!s7Z~t5O7|cQn<#m<S9@tbzOVd4bslAASxmnY
zF#XJBtmiY-d;ZjJYhyA|Fkq_P1pI|ny!yW#p#fd3pjjJdA}rYX1G+hU4_J#;#v@_b
z5#|#dGF1)qsR1!w`m+Erix9qmYCcka0_Lo}sY^7x>g5o2utQbW)hW9hdKL?yI7oKo
zsNp@D!TCcVh2kWZed@OZcn#v|<S7+-4q0^x1H-dG(Xn&(|M0)yoELK_%W-^P>Vj`I
zq@Lk%JF>?fJ@$`RdsOxFg_qe5JDRT9Geo;x#gzLC@)PyDqP2>aLeHygq$u-eHD9&C
zbUAtDXld4DO0Jt6I-O>IyhgSS#r==?B^pmW<*?<nD=<%RA?g&{LmX>lvB9hsxlYBf
zp_1_0W}niVkZk4HpOFO)ic|KrIq8q%fTQ+q5(c6=k9ms#Gf~~<=CN>H9bfdZv-Up%
z=f;=hr6sSd5_{&o{W3z}Qq1H{>j0e3*sz*qfeOSCta8I7XMCYy#T&arP8K$%jQFy3
z#tvnLUBExUqT7My0`)e%X|smgh-5?Yhk?K;?V$PebT|z#i^ah#d+E<qpRubx-}#oM
z;O@OXUNT$fB${Ieu14YKE02Eph4Zv2Cjb+yYy*d$PR;FnC#=Y1&SXEOOB|Inp=XEk
zRPo)gaGu{){sF_R-D%%)k*WT>TJw%{weY3cyyxV}@rabDJ5u;}Kwo%G86*%YD479X
z-iBZ1srd0>fsp5vg9x%{7B5dPY?TFva)cX@ZBM|5R|N33p1%}Wh&hHObi5t=ZVA7G
zg`bkGY<CvyIXL@m&ZqCdg1I6P{Mc-7^Ax)vOj~EhdpULVVk`Q2&*6|m)-`5@i`0ru
z?Rpvl`n()7{^9zuOnZ0s7jA4rTb|yfAHFZk?<hr<LlN`L!QWFT2IJXXIYC$eo4wwX
zC93lY#v^kt#^P6@<jym@0O_5dyon-?TyB^}fkT`XmS`9_D~RM{v#&!G`ZYc1;wP^;
z_~0>F$as4<fH7fTqJ4crc1O~6S)y%4rOITl3tzS#&%NS}cfOsL#-~8eTju$;%E_w#
zrr4StiWq-Cq61kom}0#k|1+qLz5kL&=eNE47Q3CiX;iqes`mhaWt}Px%;AO`8ZObW
zO;A`j$Lst}g%Q@cumW%>XH+o=H9BA?fuL*Y+o60{P&pLTZ*jP@Gf&$(KAw(!y01@9
zCt?vJY@MAWX)C8I=vdWqUZvVOW5XR`0hikz?S=|!a#rd~QPM8XYae!fcatA5C+E&!
zzDc3mX46=PS6JQUBpjXK!G=I+@6RLH=JkEtI7e&2Z3s3vH7Ag%<E2p8^gwdBOy+ii
zp=wFdsj<T*h?f$=y6v9R@~U;<myIaqXGgI3Lo??Dx_CTjWfdl%b6U~2ON-?bnfG?<
zOP5Z!*>kENf9*@nlyk0&C9o%a9pcZ)sbo8YU;$)#+J(ixy(+$+;oLC0Hq`(<?SVMG
zE_QzEvZPRdP|_pGaXWMJCITp9KP`TLmF%6$1%0WL0xR^SYz_wHu(t+RGP8m&H?M6$
zk%N)<GhF^Y%d|_zUWf4#Xl|!RO+8I#_wYE_!(~_K6gt>601`hiP-1xs;5$>&(@6-9
z?fi(w7Ak?!#@DqYbSSp9IfI9#m(R2g;QPugDV{>4vFuDePC&IV8;9Osp<p?bEfBZ>
zT34MAx2H*VvE5GRJ1?btmI@-A7XF1_uZjrS^zIGa>*_w>JFhQK$Koq0WUp#IZRQIW
zjs%6goZt&s0x|bTD4Cs|jxON1c}ex*0=pSl+lQCKYEy|8ntHdQ#O$!N6~A1ZJ93&=
z0wMDh;6dk}%>HR`SLpovCvJQ!JeJkT2js>%t$21Ttd*u17TLmIA$DwcO3xtB<OFj}
zECLlj{QlD)4O$PyjRYzxhVHH2Qy0`N3%!Bv-8wM-;B<m3Km=CO>Zc1Qa{=E2s?7r2
zv#Xz*RW(x34^Ig2e{Q&K+P$;)4zYNL8SM(PdGfUmUBES!9q;zEHFa1BASRBcvsRRr
zbsQp86p(j9vmNj$hMNkBzUozUJUx5?)d@`Rxa-+W962l5A(|na`JDFb-$7}D!I=#C
z;@l)vnqztQU*(z{feQk#w(&_^7Ds;F&lIL&=2vy+x)<@1eH-3!RNT-{Z~3~-C!l+E
z@yn;XpG5M0?xc58oAPurY=;X$8I$Td3Jk>COR`J-IEV6DZ~QJHatcDXaf?lV>eU_f
z>)>4ZO|s~5sLNt19-_rrNj7v1b5XAfoZtdMy}s0=r)3klwQ&w9Xcpv2I9d4QV77c7
z$5RV)3SWg@V9n>I;ls&zGjmxo-B~fq<k-6>trs6yuCnQs%2W)t*XmrQW|>0+)wcf1
z1rO}s;Rs)l%)`$hhlEduj>7i&AKvqVnpM@g_8^+zogDuz=RG|v`Q12W)y%0*uye30
zPKZr9gPAT}3<%cQGXxIUM7L-|y%3@`$jkc8S7#kx9n<m7@>|-=6LsDgJd~H!jjh6z
z+I3ib1oPNBL!vBPePH~-e#FEADEaZ?#ub;NboK2u&9=&QgzGl_vMVkpDcK9bY>Veh
zrDn`h#I6j}^}2@5HfDZT6&C^0jyea^Z130M7dVN{Gb(Rq`x+R-is9QT7<e?hXe-o<
z8v`5zc>F8}fYhE{wq|o~K@tv4b^4VuJORElaY_gAd_T<}kFMRTdh`Lm$CvW{y39jc
z>*!!uud@|01VGpm;ox>ydQu2#sht0eA|rY!TKeG~yiBs}!7OL+5@0P;%Z}r-`DhmV
zd$UmS^rp~``DB$8$iS5Fht0%;Gw`+iL#|pmxy102lOwDZNH#fdGi@P&rD}<zS*!$+
zFb#3Ck>TU%IMf8XJ6dOLzXJsDQD}G~WZZY`hn*a(OmO@MP+g&HX9_uu{Z%p)Ies@F
z=?ka^y%5R3EGEeCC2DJ44l}D(F`w4v6GM)CJp-{18<kF%^wq`;eo2o&&0*_!eS}Gz
z4T<j|o(vO(*6`&zyvuf65D*k5Qk<Lm>JBp~_`6>mG@keA3)NTO$5ytN|7T%)u>sVf
za5!n+{47BL$alit<0sF0+7L7y=|W&v$pI8}L!d8@M>lhLazK*F&__zjX}oX~2LN8L
zOc@B{HYN0aI$Xe#`8>i4(n)2x&sK-6#(N!uU9iFroO=10&O95+%d6D(ax#%4t+?qW
z{#(f~?C>1c6lYHawoX!Qq^7PS?^5mAWAz|;rM|E^`04wKF=0QrlV=L>R_fwhDlKNu
zrE`Q1_1unNmka(055J3J1lY}wFzTcL)_L35rylsF3uA-5Q*sigWq@|5IFOiE2{YOP
zxvfTZ?D_}349Rw;`)jRFEWpjJmPk>U;8bR-U@^|7t7mcW1uz>DT`cYdlwp$7MEi$V
z+_PU!!BW!-o`Qiv@Vb2t_^Dn2>B1&}*6qMupjkONK1sMR`>Ro^Wqu!@`lW{m1fgcR
zJz`F_1cnP$2Q0%@JtfZ$#UReLdLK?rz3#J`a(Z2<K4Wd*?aooN!Q7#P#hJ?x5`}*t
zO8GL~=1uW4pVzvQ8(+?gy#@ddIK^&X+bGwFk;r}r=Zo7DaoWkCG=yC=JFB0YblkW(
z3-kfBJjc3UDj1dtDAnSPA4k`|l%^1wDt=zo>IsT{hEQ$7=XB0h0VoGO((B%MD7Lr1
zA{pRqhP4s>l@4$gd3Nx-+P(@^+MAFL4q}YQQJ+BrQz_s6$^|RiRF*}SL||{LA;)4t
zWwV_tdaBhGl+6dZZzq_k`_TEIg*Shx4?8%{qTo-Bireb#1XA##*pv>mKz%GMEN^c)
zr<sZLBth`Dk$uhH=i_@`)fC=a)uY>97C;3~XSBuahDv0$=ASAJrCKq2=@gU;dr{qz
zb6CR51%ju(uQdXoaM;h`7~IpS&lyXO*jS$Jg)d9zeu@b;Hi|co&(Qdnur@oIOH<z8
zE7z(bH^E5-8)YYst;YIHguXT$?Bk4I0=9!`M#U~)b;0Sl2s>XooLI7T4;5{&yxY-b
zc#YtYKpkd=ZUzO*ISK0OCa(p~fqN@2pWTPE5|42dZ^rKAKt;tLq4SS|;!5@cc3WZ&
zi^zj%uY4{X6~5?voj0s)#qc%7Wp%0*Qcp(V#Jn+rz-KiXc2q(OQq8m4E>RVBQTZXi
zZi?{h*{e<K-wrF7LH_vt?9hkEj&!fiZoB<MG#*&BsKV887^Ggk+5?*?zgoN1J-jE|
z3VzM=xyUDG16K%2-Vd8am~O!d2!15d1KvuFs-HhbSrk6lYh|z#4Cn}ukt6#smao^#
zhUQ+=t@o)o>D!5GZ94Y!tt)T+eEd?3372+S-z~6kXvPBG2M#25bU0rXZXCL41@m4G
z{md|AJ2_s0ydmqt?WMfE=}q|NwU1)Qf?|dXd<0um&`rtYaQ=j69@#htBfNyD&92S+
zeOYHeRlZdaoC^H0fz7Q=gre}&tN{woKId&Rs6W?n#Ah7MrSZS0rXmoq%#pjo|6r6{
zFROurQ=$NU&dR}7Ix82zlWZtk+Eou2N;-XDRQUFH9b?Dy$X>Cz+7+TTRIv#_9Pc!*
zk};&5EdF(lILGS1(963hZf-AdAPVlwcBm_hh=&28TV=s1<Gqz<aJh5_o)HDTr`1aF
ztzcn|&{uw^?%;-=U3T_zl-Ts_3MqcG6a);{VTHUi7+L9M3u24}>v!YEwQRexqNW{=
znYU&M{7sB9`&Bt4kR~5I+8AY<Atq7z)?ni9gQH|PRQie)*fr^f!mmaE8&={YdxXou
zDP4&twP&K61pJ9}?QR#?t5iEBOLol{0PNsPiG4fbqdmKm>La_@mJg*E9Lq_N)(@&7
zY~$ERQ0M5Ii~WKXPCS?D%<xpuk+rMmGb0moo>6hjXQZAJ`hW@$3JlnO@R~o3L&2lt
z!tqb~xAF*Z^1Q^Na6K|%PBZQ$n!HQaiGWL>D41+nuR)y=u54=K%g!n~SaGNEHpyo?
zR|Pev?qKR*CFhP0h|_b!%-%roE*RviBFC|kHYDnPr`Zw!;~h>*2o&mJ@yjEh!pf*2
zWJL*KcR7#esS)^q91E5+KjmaB{jX|zr(30Y3~<$Qx3HFS0S(~is1;zAwO_dJ<RwnA
zzf_%qw?uTc3O21tG*I;7Vuh;7S|#UJBdDkd%A$78(t?oQ34iXu%jl4e7vvA$8shPd
zOf_}^%s)muMo|3B#ItR15TUB@bK#8FhvY*%E-%8dMNZS}fkOs*akx#!I_1FuI6(=V
z1&PNoH>-T^XWrdVZPg^E!z+mK{eDdhJ(Rg7x_v4Cuy0)<^(viBLLAL`SqWD0<&Ur^
zW>$oc5=haLWtp$`8YQV<S3_l{V>x*0P@(=lp3$4c7h}GS+mGPKS-pM8r-?e;`m4O(
z`5r{cFI8OKc?mrm*@)|~bS2T|>F7Ey4?vh!X4gq9Ij@s9?D;7jUN5X}7pC4zSvKXe
zJ;?9^2u!}+hu&Ckr*7X)DPX~zHxkuCg!^5ude|EZ&aZsQ1s7~^fw1Ot_hp}Fd*;a#
z8NtFZ#>>l57_JJHm=&bgx|~-rCLn=d=Kls*>IRe-4%cw#H~|xEl!rXo4wV(l+ILbU
z#F6(=4ZK&DpCfk1(7s&Ot$zJfBF`&<FY4qOw=M$yP*>-u4OoCPCV)*U23q=w`+t!+
z_b?@se|#1+t>I~dW6%IwytQ47m-!+>p%On<tu)W?27CAZQkT5|Dz$yCslI1=z#ea(
zj2r>Ke-E_}fT5Ox3zTsm90S})S76p^ZjMNK_dhBY2u*Kidn&4@1?1M!ak`z)Sa3Ex
z=f+(nMLj`N+df;ES+&IGH5!?n{=N>UX|@&jj`e}NLUCTN(?B_aIbLfB=dS>N=A2|7
z!sm^^lo#HNmN)M<vZ4r*RyIxhURHWoFpr^P*Ut9F6`kuODvqPZNrZiYYG9aRoxjRw
zT7Wg06R4p$rkK;hzz^|(6=gtwO$q>@inYT%AGVP`oNe~9F*#!<orOnJ#J6Mx@&^zi
zK2y@+5jLOTUXA$63Ci&Mc!AU3Rm<idzN&w0e*b8e9y@yVekLH{1}9-mJi3Op(PA{X
z;xkfVdehObSLuurE2r)E>J~QB6IHA;jvR-&<mFh_pw`s7Lcyv*LM9c=>^PQ}GM@*_
z+1FoOVDZ8i;u>eNRyLcNVlNfh=b;@ma1UjU+4_ma&SA{r;J?PB;(h9PmH|#_BNUL9
zsGXsO!Ao0?mlr)A>8;j#Z1I`K+_2E}Dt8<WM3&YUBx8o#z9hDBft4-qZb!Xsae=mj
ztCFKx`DAu9X25&~#j=v)HP0Os-{MF%55;>O_)f=Hv9(Zfvy&F!-=`F}*h)&gw{l3{
ztgPotwHbuhV*3QD?XxOT=@W3Zb$FviFhY?qSq5SGRU1y70TLe<e$eKTbMQMgzo=%k
zlg?=XVHJlZpG1u#a{eVlP$eRW4|kZ8*-!pVHI&wU&-!lPwb|l(Ky?cyqC8*0+FOid
zd7~;s*&NQ?9eoE#Qm7k>YB}0ecH|}X0<KXkEGTx7ZOBu-=Vl2k!g#b(LUaU-nr~?q
zC%7bb>N=EU29ADs1Bc=9eqVCIDmLVdMGElou7|Zv7HHT=34%RrZH|r#tWHvL!<+*6
z;wXiK&e^dopjibKy+z@;q-<C&DpnDpf%*HyRfbY*7*one5$p2SvjL9snqPCl*BQo>
z#)XdAb;pOxxYgRQ79_%n57?bjw3c<@tRJC>SIMl!PKp*Q#Le;HiC|w-8TVWr5%E+W
zZ)N|p+6()6ES5GY)b*Zf2JD3M#jnbk<8WB!f-+=<kvnL&h2}U;NwYN_WBgPuoz(Ac
zDtKmX_;sZUJ`2`aIro4c9T0O^IsvOY(iq0-n63)!%r=G%p8EoQ-M2-7uS=6*H*-9{
zwv}85t|>e<^R<ZO6r?6hIcF}}GIrPn2&*@9aO?f_t@zp(&pDj6JuInmlG}FL)3k)#
zaq-Y<I0JSdwkfOwF6VH__)-*tQ1!6|@T^1>{q%HEbwB6G^fIp+9bKHQRUIn6UJfqE
z^Ws6f!$HeIn5Y>f>>Po<K8`W&u4bY)WYvO$ZQX*ByxC`DuP#2)5lT-JspXS6vusA~
z&Rbcpcb5NK)1AL@Z_N98k8KSmF2w#|p8s?TXq8OjD~1)b#mUV5X|&sqT<~jLrn<2=
z#~Y$kpK$=yCjO&2U!Zcvt-oHl?_}xg^|YR_U&GnQ%8GyN%61%W`qhQgQ&RntQu1Ss
zYfTH=I77HO92$^5D)wbX>$WA*jLR&q8qavfrc_<W!ivr54&ds|Y5=_CO2ExLt_WFU
zcl)hE+A?3a9dhvMArdaO^|f*1p5r|25U@*9!M77%PW&X&c<p<Fw>KXe%*lldhI!uS
zGw}G;aWOAWiKSChP1p$ayP*o;v3%K(Zu;lK=+xRZu)}q$3keA|?!9_N%Pco|{7W~q
zNq&b7f`IV5ob<?n0aoK`qHP^SF@vJwGzCtqSo~;pzd&`d?cubjXIYVSDx~imGkeY;
zwAJaO%_LpJ=^RT*GUu2{88`0om5YkjkA4-nP2E1oOI27^RxrZyh@4u>n{2cKK}aZl
zH)5T#O}G%??HhvZr^cGk*>$Q52%7U2QZ8hL2j<rmkqt^KH{~V|1<qh6_pQMG$3+YA
z<M`}kM(i87>%E3<Y7@0=G@9xwJR{4*H4Z>6s%)v{rQKs+*`Wt77nra&1@bU}VM&5j
zuN|ZY>M;aO)_(9H-ctfMs>%<s*(zXF(d*6+L;TJQC#Y8KAr2cN?=wH+>jQi4{ndJ!
zTEbOEF(hL~z=Kd&vHJR^&U+ItALa2OF>+{WRpzcqf6w8V2hLy5ytvKPtg?xR>C~#1
z>WQTB`jt*~RsqJD;A;Naa@epY1;_1=14qIsZdLMvBOKL3c_v$!YkrYhFb&ZFY@@6)
z$Mg|CARsq>+|fu8#1Fu>FyG|l^^_n0F`Mn&FD)(=lRp>G|CFY2GPkAgrvo2@f@r5=
zUpAJWihU>#eckp9q*fj+2Af9q3xXU;rQM5wk**vS28Tvuo}fQ_ds!Uj%uSf$>6kSP
zqvCZqobAqU;iu~4sFuH!&R|B?qIAb2W7O<LK2%AL(`$o{b$R`{i2diI^c5?_T%E&L
z_Qw(LFz0@V!>v)ADoo8sag(pN?>0tN9iaXLn?20GDnlEm;|*VzCdX}-^lNJbZdpB&
z3#8^<2=<mP;t@`*?_$H2q}Qb5?NkIC8v8T4{=>6^A#bJClOW?L7X6w;FlAKNAqRB4
zp+nhtUye;Fds;u!?F)Hbv{-Rw*TWlBx3(dZH>Y*s0?Z?D+;qWrQQy@A0DlXZG0{Zr
zUNFJL3WdzCv6hb2;HRwy&x8v=<AHygiu#=iw5IS6G@h_%_Rq<>ZJ&F3zi@yNKkUxx
z3y$%h{j1;Y-_Nyw_@Dp7zy0@r{n!8QZ~y)O{I~!1uj2po{Lo+i>mSBH{qdjIpMLnm
zKd(Rj(0}*)_Q(J7!~Wg+hxw-;{_YPy{Qdgl`r%*y<@2-u&D$6Jc%<`x{n93NTj*;J
z-PVL>UV_&T26goldso+Jwfk$?FKZEO6|hGRv}X6A)0D7<6X)cVrlC?ue@if14%AaH
zTUxdg!}`XZ1M_e*N^K0B-F1J(m%&N#J>uV|YEQG`1Lkr(%T|;6utj01hx+BtCa8P`
zYqPe)&g@>4Sb<iaPDL+4lHq`v`fkkP?eD(%OJad@O?YuA22RSVqE><@U+KSZh&p_0
zVUMH+{RM{D%K=<+gsvV`e#TkAiIPLdzVhPWRSuRkoi7BYJX9MdD(<p_+Ved68BQ$g
z>k9)e@TU2`rja?Tn|nbLoUnaZb7#gJ!`xptl9vT84M3ayxDtSH2RPw=gu?rcXEcTP
zRm}|N0c~>j<L*v`?vFYXqz(8HpmlgZ-fospoo~0Z%Rm7Wf~L$oSm%BQVcdYL{YdjU
zTr7SAjDBl@qu|Yfu?IHdU9KFx5APjpLu^oz@ub_nJh%z@>BO(&(LRm|rlQce`JJY!
zH_^hl|Mi7WyJ^jw*<LUP+&RUjK&zz|cFu^utCtyHH--}ggK&Cr+B_Ey5EoYLvV(;O
zhlp5S^!59cVa&@|O(X(u8*a`=DFW}vYpZMwNnP)2eFt_&YxFs<HVIVu@6#V8E=fsg
zK2=G+F@NQouE7ReWdzw0tI4)qR@ZZdsR|l#-<y#8I=&t~*2CiF+XCO6thY!`#jpUr
z@-}k0U?b(%g^Eqt8$vJyNTEy>J#jMEnnpHWXKrt*_ty=rSs|m=oJ74<?+N`P0_R7k
zcG%LE=44a9x)wZ(k{i(~fN<u-@irk2Iu#3)937Gv-UEq)U1tO!7&*4Poj-m#huDTf
z@6$2IZUM{joeRvNS;XZO=lOKU+-lH+un${cIgEg=Sy$X&ElSDnYzK#_Y1}CkX0yAo
zJ~vI5+DOhQj9(Wx4n?OoUKb1sy6+tCbHg#gcLlg_cT9xgesvL6fgg6}4iz-Fm)+4j
zs0E#}+QC{|_WFw!*(2LWAZf7bTl{F#_cc?2)~LW~)mgQ7aDKA<I|yH}__&=y1jw9T
zj6PLRYG&h3Ye?Ucx%;LC3rvCfsSW1?SG<*jdFIvBR90fn0G7|MJ~&=6-RZDVV&YS*
z4#YeizjbdIAg<f$k@$7KK=7(3skQa!pBMbFnkB@H=6xn$5jt*NP5Zi`EUaSY>VC5V
zIL@bqGAOR;tgt6nIzC(C&kG!ndK_?~CjXaYS`0L6PRefVgWWln8RbuXCu7?|S>Y(V
z#i|yh4fNh*U(N-y9v_1Boj#ad84mo0t?S5PCaUHfa2F?(73JfgcRbFQ2M<pBHmm|0
z9K%~MXpIu+q>>h7^M?6`IKR4xk{oYnrJ<k$(8+0ZtQCPYuDb%BqB+~IzbC1?ViWtT
z(Q@KfQ}oseuHaOnVHKHb;=gh&Jwl?@r?OhnX`pl4%2lnsKAiJiY=U@OuxVz+5?a6P
z4)MDER+P>;=m~!sL(d1X`Wx4n-$W7kC$@_q8*B`|0x<qI*#JpEw!gIYuxqLk-U-p|
z>yafcq@x^D0hyCX=;YPoD46_e(fbfh**3wC-&>ej9aS<XGZCfZNv@~tLdWfNOM6AX
z`p{M#&+RPh(*|67Sj+<e>eXqP&t&o8prtPxsdihd4!*%3aU216kWl5i@I*YX72=L|
zdHY_Atuff;RWXY`RToe^)O_8|T8JhR%<=mc){%vI*Qa+0qL#{hhHg(>pkkZ^qYWJx
z;a3m7EPS~gKePBXu-)-U2al)L+}Rjb-p2OT;#CJ#_mLfRNTg!%-ma=YVDZxVOwGj>
zzq*u67~~Ky+qM-37~VA1{anGWeOh;*@^JhbBe05PnH)~#bnY{_EB8idVaH%*92i)X
zqgOwn2LN!Zs`a(X2Lg1Uc;V@2aJ1n9QZ`7-ce;jj6DPK{eqfIU4!0xZ+IPB?`N=rd
zVaDoL=mB74|0M@jPOKtw5CNR)5u)l&=)w}i`W23K06Bkmf~$`BsE*!FQYYe=FOzrf
zboBhy_u4RgRS+MZR)Hyk4lwV?bFxU#jApZQs_QF^gc5L)K<1X8`hvFwbC6u^+T!$F
zWPYFECsE;PXv^86io0A!JIA+56C7M&hh%6tz3;=nRv4>P2EVn+&C*ap<z0Cgg62`1
zEs9t9`oah9;$Y*Kvt*?PVdI<F=MBAp3|^{*DiZPWdt3K@JK6V~I0?J``LfG<R0r08
zw1$-yUtL2KoB%aUtm!(h`@|UpoYF;XO6i#$vCjN8_~LWxPx@3EeZ9;p<h<=yFR>j(
zCHh*=PYG5Sc~ioEv3<fN;MnOjRErjNQXLJb1h@Z&j@LJX+T&`sA_K5AXYkz4UTdX<
z=Vq9g0JAvb7hQ^HT!zU<b78Iyk!m06&SeXTZ~L_gx7Ypk_iUtj%J>d^&H_!TE#HXi
z%ZodEejU_&{mL}}Qf+hz_32c)j5Zve?cBP<3&wOl>52LE`{E!9?Z;sg1ngEIJX~ir
zAC{}RBlXXFd>hVT#___K^71q(&*#`woJcaC1@hYf`tYq1yKlM%@6TKnbyXx5<59<J
zM^n971GOIh{;EW%W#D5ko3L(mOT4v7?g!tmFsq}^Fsb(ouM$;mxmeel6oqnGEPl7u
zD9y5(f*4<u;l@}Ch6fH|-%3j#R({+L@CER)IGh21%~y#v3%+d}nLJ-Vmot&p4KZxH
z0~zPcw(?~b@RP5WraEB^zR9VpPMAK|Pog9@B&w|QQuypUeJ<N{hZSv)T?a%S*bK)w
zf681Ws|_uEp7~eQ)=QTFuqNPPfTQeNd2+QCGA``!6337J6-B+_Xk~*_$EtBz+B>RB
z8)uv483=y4H~TBB;$T)MPCi3=uu=|s$~Mi}N)w9HLkOeet14=6$eWYjmGRgFf!uHK
zO0dh=HiGoDuqxjDb`4^q7?blnGYIG=_5u3GROl6d3^|{<+}~0o`KHfp-6joiJt0?d
zx*Qy4#x6Q=>Zrk7bDO_fD2@pGpMj>;uGo3NOCiqv0E=IC(<x#I68cqA2R>(~6&`HD
zQoHrn&)i>rx6Ou&;+Wnk{Az*QIvp?SKoZx=Y1QKlAUr#Pv&!6iE7<g_b_!>$5ww(N
zwcYkQ=Wtkbt8k5HgiRX5^0rq{Q`myFXq<;*T)~<ZKA0s)tvF68Sc*%$`A!Q4D&A9z
z0M+&4I1_>>&i+s(`&K^F8@~MY$ogv)n>$6ZD*A%zuVaA$Oka)LQhF7jUkfbov)K~j
zvS660bliQ~CTYg8U30i{+h5_I#WazXsC?CqoDvvM;^6QfA=Z5>(GNQL8gye89>&3`
ztO~Rp&5|X81hfPC)eqTW`h49G9qm%Q(wklzDh1rxx~GU!f_$7yIqCL|3XE?pEE^RJ
zKoJsPXPH`P=_&u}DL31{pV^f8E6gzy&sPmB|J0G1*_*g;y%n#27hk@YuX8u7fmXxN
z9fV)^7_TzMz^|p?(D(y<L=b87SIMK&RwJf3>I8?tp^o0PNF<$f>1De}{a5(<A_Qc-
zU4j?bM6W7w4&F#|a0oAs{JL>4?~}>VFSeH8hP>Hyy!FVMYJ!tEMuV49ulXAaC*LF#
z>{Yqv;|C85PltW#t5+M7Y-3OZW#j38#e@!9KAZw>@rZHicmxIS<*eIB4kbFW_v7~*
ze5gu9V+*|k&6X!P;=-DG3u>*2EcNTcp6t?7tbE!uZgf%q$jTtVRDtv37`BaZUpFL~
zF0os>JPML!xr2l&6?vM;_&X)XfW9pk!zdjOWub{CH9(uiR+R(SOjKlhmHqop%S{(Y
z+xT?lG-o>(09VO$$Fd{`uUf{^=k*olc+Y-|Px10jVY;nyBdDkVvsTeLI=}nZ46hy_
zcU$Y1Q;E(piJd03Z=-iK?P?R&*D9iLb%)3uP;2Ke-ZojoU+bR1p&39x*a_kM*Dhrp
z#Ui2Vod9n&<nGO}oWL2YqpgpH*?uAt=Tkt!Q9P5T(JgNVD2mF=BE<!LUFG=Bn+j|3
zqs`3DGc|cQOTTMV)@`w~F?Rb!;kds_L*fDp$O_-EVYADLY!2yuZs64fxB;X}1bw|3
z;jK!tLl!4+4wY3DnW|nS)Mf>IW?SR0EZEWP%Z`>S^K80`Y^S4E059mngICV4lTGYf
zuyi(_*0*hrAtty13XYiqfWR)HPZprO7dR@O7aVQG>)EZRU=#dh5y+HJT#lW>y?rNY
z@VXHm5VI96dN(VHl0%m~uHE8io@IZH#&^+p6jX_M;4!VgQX0|(tQsft5f82JJZ~Bt
z%3Qr)t%7{alvN9s5tpZ!A*ty)eg&&o4=dtRWs?tQoB$jN-XnEr_)r82Gvo053dRX$
zp=rlVg$OkWzb220D6$Mkd1hVH+i)&xd}?3A;4@T}hFX}#2>21c5@Xp4uzsiI#`A3Z
zOb0X?Y8?|H9~TiLfsTd3JRK%H&tFmCd^+S?t@%+28l^dop_h0;7McxmLqRpR{#TY;
zAC)AV20%CWRl&p=%A#&r=+7APbaNcOF7UlLAk`MI=pa!?VijV+<%qV!Lk4#3Gkmpp
zr}Z_!NE;5GtCoT1=O$1N3;^8F9aC@b-vgVnjY(z6Ep|}sCxr3zr9nl)aN>Fe!+fXj
zop_SNG2Vfr-W?5m`2Z@}TxRgiI^6A7mywyk&}{r3>Izg$*S0MMW0XE4)SOPz1=zi#
z@l%iZ6a<_wS2MCLa?SwL+e(a}F50i|)-r%#_orjJ1`B+PsUl*TU9!Nz<m{nx{pxNl
zI2k6NPH49=z1xBZhBuMtaCp1yd%we{1}Eob5<c+&ATKELGd{Q_RT3c=4SyD-UG;nO
zy6mc%lce61m&B1JBRB@##K;`Dy70^C>kA)GFV(QJ%G){2oR|V#>cKinWyPMptoSRG
z!Ma06)#%K@;t>o9Jm54F`w7M~rwz97^`zWeel7(z#CCPNEK}PL$x*#dSw$Gt*CdWb
z1&0M4TP?lO!+kl@w+F|%D0#4i4(l@<8zLX9hF#%MR~!f-@g~+OwQ|+8R<qOjJFk8~
zNHK0jWS%LIqbQ;P8MF~oDUQSGRmul`4QdXsFKPt>*uXAcg+DWdw=+UF5YB?EUsc{H
zj(_0iy$1%DIs0)q#IOcOxGF$tt1N`^SFR`vcK6D*J?a264pUhKczYQAB>H5lR)3YF
z0Eew%9bgYi0>QW*MeL?_l!c0E6Itq~yFAG9bXKgdcnk-$UL2^Qq+(X(fPbug<o=Cz
z=N~x}zg*zs8P9e-a){oLO~+N=X)Cx8VKkSxGLOv}+|F})=E8D@iE_Vu5jD>rEL$I#
zp%SA7(_T>-A#UJSVC}2Q<Cw?1ooVJ=l`nA5287$P_pxxvyN`Qrk$j$t^_`g2sc2@$
zwO`GS{8nOjmeZG3WY$kCb$a(&PFub1bT)8659}|_=^V8ri$AkMFAcb_3Sa%&UBA?U
zJJoBoptymSQvlC%Trsd}u>{my6%H?~1}{jEW#88LbW5!^)lXxR4|M>*vdY92FVd}B
zK2`m*Buxc+=XAnn9g@e&f6o@$Jm$QhO93U7&V~7q6$e=Z6Fh6e6B`%`&+DLy%UR*=
zD}_mqBC`MB1s)IQFqEOfu5IeOs|WBTeC!fo5u!KdM5*${X+RHb`d8^RTY%+6iO{j}
zbuZ9Gx%#L$t%?WpUzco(O_*P07sf60oN|&QIf7<6Z=qTHFi%TWj^n2obAr;vepbyY
zP5;FgNdKObc|Mdz?P_~1y!5orCP73vuEew!EEs`k9_AFor&5^%`s(0EC&BKvf_gs+
zIdFK}WfsVZANE5e^I=a{F0Tt``IcDyH%_6i&j}loJsWBstJ;%pd<aKp#=Svs*oGHm
z9JBj$s8zQ+`U?b9*3uuaOH8q^>Kt=1ymchUQ~z8YF)>5l_)h%&>M&zM^e;ar;`Z8I
z?{&j}6py~`Z~$}M__zrPs(8x1ujMQmJiUYNGKjc;iF3E*G<f}-ARfaiPpGjsM~~!B
z^V+CjSe$LgyC_$ImzaXcFV8d0w&dV8sKIMD`f+e%B8RQi-7Fdg;$qlOlY!GTIpv{z
zdM}5CT9?xKYfGq3Yj~X^-*PLC2%5r3rIO&)5b~WjM>XOvzUvecgS-yUW?}Z7PfP(A
zX{)};YsZnWTpjZyxLZN1K3Ko%IKFmmj<5myI22yl91-4kpL;aNxZdr2`jE=LZcb4G
zE8)mO#u1%gOd+*A%$s1aPJ?z_Cy}zM9{^|vS6UEvsxoV9ZgVaGG=<IhBC6^%Lujo|
zyJIMXV+Db_Q#pj}cukJCLn`r*%KwC}E`_<>FYl#r8&o~dYL4nYh)`y7LG=J#+=W^m
zY-s@#0h8}SKx%g2zqjyEi#`CW!Xq5UIS9~y5omw@bZw<O?x(5NhOEu0^7;@r_Fbp&
zQnSa=y)!qvMBxu@TITAQP%B-m$$_|?yC{29w<VLps;|?;>$R7xMBP-pf|^^`=?o(q
zqf<JwtNql_#Ya5xQVJLUdVf8IoP2oTVK=SgD9+B8P0SduTvf8MU7I6L6y4xJ&Vuy>
zznZ$~q_$xb=#9sg#GX!>j>O+(E)}=2mASs133}eiamMZ3xXUkvzZ_gS*9gxX-Gj%2
z>z>)G0T7^S!@Yx?K@f9VG^t`oP&4<_^AuC77q4!@kyjWF1`PJY+!J2XF|uLx7oi{E
zj*0If=Q_W6oBEAYSkp5US0Nj{mU$Ico(IJupXTs0O$T2`%q&d8%CRjV`C0;mLpaTN
z6ACV8@Zx(jV7MuBimwk!9yw}RA*<yO*~Y5+H(wknzE$O$<L0rHg|MHk0E$irQsW(r
z$165f8lVkC7yIM3L*c%dg82jN(!SQB(wgl?b6y+}=e2~xVdS{bOYs71CGk#P8I>=l
zx#pp)sv02nd*YO<Jt}OUw`kjZa;Vw%pF7&esKO$S>;7DW=F~|CmErxNYcP%pP-CCr
z+I(>!5?H%rPa;ld3&S8E3YC9j8saxjAq(Cxh^MArGI4B+c-b*~(H)@a#0kf_OAM0p
zKd-LP&ezgm#}h*i!2^UVLJlYSRFB1%@n$SpAhPOwniC9^DjyvxYJWkb>wXHqlJctw
z_R3GUOn`q1zKgZ0&AC}mM?+9H;Z|DwYG0N<&*T-AGHd6Ni3N2?<rMRZMdhvf43f~V
zUm1KIOHg_D>t)hWTeI2`Am9KeT>D`qhC@|UEHPt@u>(1;G%P`^Vf>_q@mcN^>H{F}
zIG@Wqp5mC84PH~Yf`7hlwHvIuCxV-z#KgQR0kD17DO8ZM6If42J30d4jCQ#a*$7>#
z-+5QK)G~&32b*AER-DrMRYKH}bnI{K7S%w4BtAZUmm}bGf*nrQnT`s{B%(S{$ieEr
z{G7|WZ#z(qd05YK+mgJloOx24f!MAVx77&kdM2`a!#~zKe#!C<IAi4Ch;(9@w+H2+
z@#VCt0TK=CbNVarFE89}bFyFp9DaEoID?&W!=|E9Z^ha2gE_pK!(9Lzh|bd{H8px;
z=%)>D$7k8Jlf!)|K>!_Z8Gj_o>)B1`1+gq|8!e;~EH!7ePDc~s4!@67>}S$mg6RgU
zQ!rd2HHZSXV)6`@3}RZxQ-F`#;7~T}+|!rX(}DMaP+D&LIur#u?MFXUQ9L?Udv);%
zwA$P(;7!$X1q{Bn#NbERubRt2pt4rnzP%fweC+P<EalalZ>{bVM}8;!@c7)Xqiais
zbj{WW>pK;QjPL_%xv)O<Pq6W2xyG?iWfbx1Ss{oolV8|hHo)2<ILff-vs#Fp@8B?>
zZgT0oXT@#ZX-#8C4Nh~<pG@j7<x;neLf2)M7C)5rQ4Ul*a0r0rV*jqJd^+3%m<JRH
z?OSQpUvHuJ_R(PzQXOZ>IdxSf3dk7bvH+h?BFdwpc5X%EadZx8|AHi0WFA75EYNb#
z^10%Dz@u{W^q6_y(a-0a=#2Qa=gu#GEm(2V^)Si1*nixU{p8chk>>>PWgJZeIFAGj
ziAVL;PmPGp7kxQB=j~y&`y3FHtl(DF3S^iqtb|soGJ1(GEucu38d?z^_4Rq!;(p+P
ztu5HNaBGX=nII=ZOORAo{=vn&PVZQ;`Q;R?PoD#%gREh&O)=1T^CMBULjG}rHSAY(
zVxcoT2_U#QJR@#!=5OT}f4zmaPGd5THa%2I*+d}xRul$U=;x@C8#>g-)Ae{iy<D^1
zU$Yp{v>P4_ZFi7&aDZ>KFI?#tSY&{N0puLX!^xT5F}-T55MjT>!bgCnl^lVKn2pm2
zOzvFHR|38RjEZy&7uFn%FbVxO-tR9Y=T>M=U+oPjSdUFO+fmhdab(9>3ME;&c?1=Z
z6~f!Rbog56V59wQcPod8fOtjU!@Gk<RQDR!q@SY4&VVY7Q{^a0wcXyI^9=kto$P7n
zrX%#MB?x?|bu&047Fp*)Br0}{5x%Cywcot={05vEgD*Jb>sN_)!~t6JJkxPOO@N=_
z8R7O5w#*JAQ>EVir7s|U5c|Ml!Ln!DI_-RiSldAb)q|W{RW0ou+u~^DQ^EPy*Aj-~
zRC^4f8#a8pdfmvQ*y;^*5vw^@L-jsl&V4&#(u0{nCtsdts;F^o6CnKBnK*%FpOvHw
zq6N=ZwEzj)Hgd88b(jSF<>iRexCw4-a*@PG`{fDs=^1t~ZYWE3mgVrbfn86<foV3V
z)Z3AI^KbF87rmue0nm7<!J9=#vnH6))i3XO)>uwbHiLSpBJo|PaCv%5Y`PF9R)KBc
zN(2{BEt`kw-Htq1sz=#4#Cg2oF#St^0882HZ3@w;N@<O#B!sXY8?^jdA+k!WgcV<F
zWh~j6;Olb*-%nN#T9Pvan8YIt^7MOK!oG^A<n;0bT<d5zJF_{m6=#{hblM+RCgefC
z0Gi!G{%(Ep9IYjrDNNd@Gu+WWaXk$o*ESDaz?YGC;9eZvBzype%oBPGc6xVXZA(?0
zM2_w}r6kFlD;nPJ^?7hRo9=xKanxiZ47=$+!Jyv46Y{)jwGLB>xBAS)+^6yI`%d9q
zOUIw|+bNGHkV|!>;UMS%Q;NkpR;&IF=i@>0dF5M4xv$xo<*f`n>CV-@P%j7y+!Z2}
z$|GFC=JO9$U^)<^+C>tHhhNEnw~LM{7<QvUwE@LHb-%;^mLio0M+*<ps#kU1w_F@E
zvnXFo0h=>AOyy=UN&F!P0Wh|&u_t7r->E7m3zwU<6V9-Z0iyVFxsFqj*g5a)e5|HC
zYBJVnIkWS=z!E(@-GWnL=`_?D;1@ob6!8?-GPmrk6ssU{c0E7I_Df_661568cWbM?
z7VFh%XWvq-_{J7Kb4e6nY*Ewkrp{4EVAO3wxLgn7?Q_Xttsow;DggL(oR*bHf@Xq4
zbCR~5X?A?wPP;3PbihiQ^Fho_77lE{t#Ek0p29Y9PPk8pOl<SR)d}a1q7yO0t`YP4
zX{gIhT#F-G-f(@98Vi_pCoGtUJf1<lYPtlI-Y~q4x!YL<Wf((Ih%Ur|N<pN)oMy|o
z4<)gh>giUHaGaD$@#{l$D148_?lQG;x78vRH|@_2)VKE&kSlMq9g|*@0#57dY=15b
zpd1Qp&TRXmVB2j&@k-<S9O>A+2w{Jmw*ERV%fT$zID9iJY#5w&>hO}975?Z-F+e`P
z@TUWSV(#UN^Qk>M)jxOMuUcaDP^JfmSaC-(au)o!wySu48OfwJEivi7vR9i{{MwMy
zIl<T2@UCZ4@d~I56wJ1abJ*=aV5hzy$>}A}RxXjZF@eItSf<1kvmN%xW<rn?l=up^
z6T+@;Qu(T856vhRJ|0I0^qk52D6b6x)HYSt^32?J%uL_7<e44Gb?49C<+L>vOU(DF
zYvMr?oL05$v%))bcA5uZyL)YJ2|0{-4`2AZwh&xm!3XcUY%b<Ns`sA(e0@4%vP@Rq
zktvx)^y+on>vx=A<soi0UFws&A%IPTQPB-MS6Fy5_M<GqXJU&^&_0hPOHW_tcucUW
z!gAGyv%Q-0O-{v6Z%!_(MJdgKDFE}*;q1)}M!^4l`5e4UPnOLsi=Wi8swD$xZfL5y
zTnqGJ))eC;PCn~!I1%Y9wfBOI=nYE2z|*oLk4<o}lC`Xy?=UR44wn4GPREL1Ti!N(
z@-CSl*%i;xIEleNDmac^XB(OWlE<*N=>?@p!*=9NjL)3H?@O@3+8m(gP56nA!Y(<?
z=ddauJ1R5ZqZ3vvwi+hK>>nf2VQ^m(QBGlT>Z>9bmbTh;Zt*w%uVI)@idJLLD)A0Y
zJgsPPwD_0un0UFhAjJaZ<AhA$vMBf%Q8B_{n#3C{rCwkb%8##H<4Rw3DHOC*87n7;
zFA~?GtKfG|;8GVSo`VSO+ldx^HxRiwqpz1}aMQKxNJ~YFr~Ku)ESgg#Q9i1u?SiKU
zBi(ol2Z0NcKh+Wdl0=&GR8^)rkJNjzpGL4a5ph{#s@6g`wWy1^whycseAg+w)Sgi0
z3n1j66({dy$NYHxJH4*+pQc420EnkK>FI_3k|WLgge!Psuk@1z8qrkiSdYTm0C7kJ
zyrTe>Hpm76+s3|Mm5^Pw;&R{)`7PhL>{z_<Uq7k#4QxD{26XhP<-aDtIoRckBZdB4
z4i*O^oOohOfP?)A>N7ePq|RI(ktKlEp~iO0N?@h0gExXqym`CE@9cY7w(3=oS2~c5
zm3a|UYPo?(y^AO4&06kHRRjl7&jD`Rsi%N6kP}8H)KE;sp&jcmiy`tzJDrzTeM*ae
zv(Wh0TgZ1-uU9QQa}F2|ze8g=Bi(LxeKd5{f-ifulPbWbhsM_&>0yb60YP2=@RXIM
zOzZ+}wSbk3S<Dv`EVunLiRCn_*uOebi~uj4E#5nVc`;TBE_j+d<bd1u--Ev1>6dtX
z8_$(!_)>)ku(l-6GQ*@eXB}R34pn8m*ck^TB?kp#t%tR3M5)ZhsrXVElYpTF$}8XN
zk>Q)iqo{j&rw3TDVZ)hE!#fR#14LAzEqgiMTS(vo{hWX%b%e2P0P>|04$MR(v_Xf8
zwVMxfOy6n0%_2m9-xewXrIcn<Rto^8f8jyXRWzxlbY-62#!vfVy=)2+n(J%B5s`d5
zohw?Y9F_dS)0bUTxCY**d1QyhgH|R)j{gF4J(o3Ki<jo@pn?lzXY%p3wnRlGZ@<{B
zJexN}r(M@JU<v?*aQBz~99uMuO_%jb7!A9gA$6w!)<OvjMZhT~5`<cQX4npIFY@|A
zDpcLGMzI+;;dc?Y995~dQPWvJrQ3<65P|pi!MV5~@A-=v5)g#uRWC*f&3;5jQYSVB
zEA@z@mp3-uYxQLbfycGU5x)<S&N0k#0Ygtwiz3?9YWfZ*9}1z`zoCRxF_VjpDGMk~
z{$+u}p~CRIyk3MnJ9-BQDof49bdv<mw$RpL{^~a>mSm589AC?y*qheDX$~S^Fyj3b
ze<<OoMmUT=0#u=5fb^uO%P5NZ^{<GOwetS*oK9Yoi~=?E#M8;4@cj#>7LRAtBCcQ#
z6KU%(IrYUf^D|g>dDB?E)(UC?SpWc~IHb-_vpAD{<+R4b{&;5_e+o1X2~pPmylol9
z(DP+x{wLJ{XDtwDuhTImkWVMNKkYohK_}l;I}@ao=c$!?hq-aehdPg|v-s>ncZ6bh
zvR}hwFr9g6%wO9QK@A7Q(ZR|JhroHt4X%N~K0@=#IX+Cq+sx#^S4`90{whp^ky~eJ
z4;G$x1eH^OftJ&=P0HPzTb;W5^q!~!@f=((W&4tyNrd9E%v)L^70#2V04NbiF)z+i
zUAQ~Rk(UL~x!b|Dzq};!KVTL|y47dqLn)SrC#<7^sLo-bv9)y1rT$V<xNit7Flu}<
z1(VO-CT9!FZCAl0d2@p64ZnaB)|)65tZv73*<*QH*pu)1tuFp=oWg<+2gBo*$|ITP
zt)ty0)?o1R4w1v5DS8P#8@45!N}i1`OQvoNZ;L;_6aS>RL^~bgaywe>R4Q$n^(-8l
z1|)An`=Cb17e0p%#geLhddrE8rq)i7E5LAoLX#=|2A!`C0C5noeP{gT7fKHKtnej#
zf$7hUzkA}ix()59w%HvPIG9EWCMyT)#y5=m<#SFoDq6i_gupjT2d`VzR4-bga8UnR
z@mq&<)=WZO-e}<4KCMspQPy<!tpcRhmpYNXI)uHd*{lX;I-=Rau^m)y_W{`LyBz6}
z?KC`2fQr;4lmqHy4cVz|77y&uWNQz*NzMJJ)n!-@0QyTd1W0$;l7=^Om`!G#s&v;`
z!9<S%B#Dl>seFt*NkHnMLfn^%F|Pua69E*-BPg19@mf3hOjdxfgfN|386^7@`2{CQ
zz^%S4y~=3LNF0wwATUTyVxu-k$;)P#C-LA(Bj)XRQpdD|hQE-dblc{6%e)(y{ko^k
zGxK&Z8{a$zWLTB!oSJ<YYC2k!&QiQjVYfSyFfaiU1QSs4v>G9fCnXNVhjQd+XxMTA
zBb%Utwu1iO*uwH@3so3=QdcJ!-d>bDTEjU{$&}4j_$&f#aM%&d|7=ilLZn)^PE`4j
z=d2fpw!Mv)H;{Ne!tOj$e;^3qD8kR3G7I;=vEtgFk#F!0FI~3>#))hnYO~7(bN^Jy
za@>w81CWCwFJ<#bR#BQrc4SM-u!|D9*SdIG0$nk4rV2aJGrvYcFU8f`@%EO<!Ilns
zoNO!3mJ_iJ=Ac*S(>WrW)zs=(;UozxHPiufz7wYOu?R3;`|&@OJQ17XEr&1{r3{$!
zg4KdFS$sHMr<((?HC>(3VoO}#1S`eKKJ+FJdrv-<7byp3p`GR6N~aLa^R%19%1WE$
zkBd{jI7-tZHoNjWZwOwWj*t70Vhq55<NRi%{cIpGHYav^SsMcZkdOqRb>8C%3O<9X
z?&Wea;xlO{p5bZOS0wL>GryF1ogMM1=QF~g6X^bcm~aXsZuYjP8)F1G8)AEYV(NLs
zbwbD1sUo9VfyCX9CC63cratvN9KaK^>l}R^t2pu#f~He<l1_moK_{#dw5zJYf1Q{$
z9H;2Wj<*nN(CNOxsP}&h^e}69F1j&}k!`1F_7jFZPD1Csl$oqmv<6IvWA;O=_YwdG
zu&KKBshLXE@6#J3j4L{YM0Mub%)N6AtV>Y-kg$Mp)CO*9r?ZqEJ@NS=xvNSdfbdh}
zv2vM*1DX%Dt2lrM(4|^V#REF=Ho?-DLkApv4y+7N(QHT5b-xFF@v<jy`nL=u45(UD
z#rgu*rwtqipW3FbV1380DX0V?f_ge<X*e|~R!7ef_dYb2@jPqZpLP=Ow(gpoRax<&
zNtyghwO4DSo#1kEq#RaVgPn9?gZJ>wfGl%KFS}C{5g7XEy2+xip6bfWUevKIY_#(S
zAbO7Rj7*5&eP|sA^_c?{niI5!?d%_Cat9#Dr-*SDFlJ9Sh+b+NG%p~n@Dt33@d)L6
zEpk>TSUZ$K1x3&b0iFH*5O1x(>dzH`QFSW?;gcEr8Ya*l6gHCeUVxqDtav~zZnFa_
z9ACpZS7N?7Qu)I`V0{3*PePfvdIHV9g9DRnQjQgWT%MvUrx@W*!qc2vOqKYtmR1JB
z58m&?F(q4sI48g9L83z#i^an6nJS2nZ#F8=M*}Os;<9~Tsw2o_M_UbK;vnyNye4go
zdR^E3skuT0^K>d>+Eq(<ln*lQ)v*jfrRp{~j)CC0x@zq$o7lAm_3E$bfcW8|e)6X@
zdfygG4|{p^O4dC?rLavr`F%X2_Qol}xE!0x{_(?hg+?gfYqpG;#&CVIyIGx$mYs;S
z<d^O0YVMdLQ~}U=$^7#PeaIyP$=m&?uwy9ee9iEChQ@$0-cLKG5?a#{ch(ZMhIzMp
zf;iPdwdRB9noTx88s*-Z%yXzC72orJtKAFp6BfR%<#k`THEu?{#|4X!G&B|12qVu3
zgJj3$cIX_u6o~2o`NI_LOQ{^Fz~BCsf!t5iyYZx`@&Skie5j3m`Kgb0oN8_;Ck78z
zy%HC47VqsOPd^_X9wn7e#S?J*(N(A2eju1@5rHoC6K~u$n+J3l5asiNmU`rIxg1N#
z8c_Qs8E&Q21%P=k`K%^c<1<?^)u<vh;0sO-;#C-SDmA#F)C=77lm?CfK~Qr$yp;br
za>S5NB^u8C&bYdj9jRw$DWn08|4jY$2u46A-*mvnE!gif=X;xG$IRP@IpgcwnLZIp
zJNxzig}{_=2vWuB9G6QZQ`+$Y-fs1y4t(@s^JQ!of8+GpTt6b$n1xXBNs++0@B9}r
zi%;`!Z^P$u%=neEHdY>cO910*t?6YxK8C*-1kTs&WGL0dWBrza;31V)96-_ue*FJ4
zcCKl1>qwH_67e8NEC(cj1@!)Z%sEg6gGy;W-JYJVs#{WK1PQpC`NOPpSOG}~h_2aj
zIhG~GrMJdS_^=?lX_{9FZ#@6U|H6JOul5^3G<VxInCE#~Fbi&daot=k*O{4!!&N6S
z?qfULEO5WngxNVOAMX&-j?>1k)`neto<voHj<4HBw}!f;%I(cH5@RNuYF*coDi;bR
zF7YmY`zN}t(V*?MOJSS2$jsb^IlGG=9*0e}9Lr5g)t92ntLv;HGm9BzbL<Od@Ci)D
zu-}X<_*0h6bZ|K>K}}_)E*`-x!8w{mH+M5g3EU>K98Y=(ydl;5=YT|wzxr#=E;#+W
zJD3)VQcVQSs}~S6N2~Djv=Htt0zwV!m6c9fsAM*Y&f{#U>rktIpFMsbkdj<fffAjX
z$P!?kK;u95ssOGkA@)D{UD_DdBl8*$eWDy>Ec;_05lDvN1>n^Io8-wV+aR<l>KacF
zo%>&>a)sFfmgC0}Hr@34<E>SFulL7CI#{$kU+H)2Hm5iWh1|#i%ULNbJp!N)4s8=e
zod+jiZLaRGF>#W*Vp-=S(eA8D>+^d+lHS2}D~({;@31>zVj*1teGQWj9mVXEL8@Kj
zCAZpSK3#d`Y<=RLR#EY#=@y~T?hPFFg_7?cI#ZUrqn0-Pb^rp#HQkVONyU<uyf$_j
z-{<myt40|wg$5<s$jF>mqUT9+-kdo|T0%AF&z5YBK9ttCbYqw#0=-a)dgbE_(KUnE
z<3A&a2G~&-K%0lDl)l^#G{!ojvJ*rrScUd74l_dx4oh%uCTVo?$px+m?(Nn0;FEGd
z{jj<_HuvH6j<BP=?AW@;x8LS==VX<>&CM|~9bxKYbX={izST0^5#tjV$I~w&Z0))7
z|G5py1`x{gu@;hDY=f$vAnzj)j(ZO2F$$4~z}#LX_0#53vB5j%y~O<#8SK7SO<YM~
zq%DAD37Vt;Kr})CQg3!KzA0wuS-*a)Gu^x?*ZKf9d~&U{FFh394Ni9PgG1L&-H-do
z)AhBP0D2&{&*f8FkvH*0Od4e>?@Ls+_egHN;b8o+R^#RD{h{cnbxV%At2CP$qRnu!
z?@x5*WriC5zRCA{1mPS`H6#gBmefQ$3D(D(gOyogOD><^swik+(QjMddGH<E<MyQ_
zJm~GUxE7Z^X1Z2^yFwMAj01!j^m6Lpikp9=vm8HJZ*Db<Rm)bH_i-QMqX0qQI*VsG
zp(TX~$3fGWm8VPaFFMBnvTw!nMawn=G6Wgwx(5#Qc?IVu{}-4}z(js!F6C{xkN_ap
z^a0-o@PHG?eTzO}J5pSSY$wOg{z0<nzHNn~#}h{9fDFDwzEd55rnHPk{YeT|I&pEg
zy;(q&c<r_ZEqoZ2JI5$kCT&-GJYm7Y3h=(5jgq#&3Q$2&j;K4Jq}su)nU(SrVn5)3
zU!u*z@7kuaxHhjI$LOr5*FFBaC-@u9t!||sUHgNB@Bx(5Dre+ng?U(q<;@P|({86V
zpx&b<-OXJ1`(O}`EXVmhJ7=5rfW04+$Q|dUU6T3ra(H19Hlah?fJfff(h1;tame{0
ze1^wnp1?&&ejgCM$;VlPdzYXCew5mA+7#Y0#^J1#dXIT7Td<=XD(nG=ui5qwALWE<
zWBYBfC*Euw@G0<@UMA{LakN!oBJ=FG5~|KgaWl-D``jD}pSGz;MxRf6*kZ4*j{6ZD
zguP%}eG|mb+r739Po6&C=&*!_FcD5@Q<!TB1Xpr~O!U}y5WC0umTpPv*(FY>4K#SC
z=Ho=O^BjU`jajx^bC;&!-k82VN1^Tc#PJv|@6(d#{x|8--wudVG<V>blfhk(89K@k
zwcYHfgaIJs73b>A4zA|*%XQ0#=d#r2*<77(w2$wdB<)+?IGy$;x=&6tzes=JOZC`$
zt&tpiKD$PPtGR12$SDG)06zx=4(NRQYkwgupzj1uR4$FfOo+H6$=nrYU4IH7+J#dn
zo}F#TbNpohcYa_Wm+Ely^a~c;a~y(1FoR<MJA~!Tit>$?niH?F*1D?a*9|P?t*aQg
ziu&Vo?l$0j<NUrVTFZrAuS2K(Z{i-T_i_xWM8)%gW@JM$OLpzXG1O^kkvGb}dycd2
zB*$y=<dBv}U(^YOAcsRZ)4>zH)%@VY9oaGWrGy07YkMtmhODi}(q#W%U|J$je;-Hw
zEyV!GczkeaogH9G?iy<c3X?4jM4F@Gt(%Lgded1H07i8JUk#5-^j!$&0K9LW%%cfx
zl7kQ?s_G))ap@cln$A3UCCBGlb&EHo6}qN_&8?{ACk$#0enLrK5v1{4)%OS0EOp)#
zTdMFikDKP0x<Kn7cWAhf?B(-<N~x32_h8?9tz^8E&+Ju!MTrTvQT(yc8lXtFBn*2a
ze(bQcD_-*UR^9f~5@DViYJY-u1$XAxP-g}m-lxMzMYI5;FZTB*pai62*R>s*Q%+zt
zzo2{9<NDX=xbElEk|(eI_{O`e0k(4?x&@Gr9J8I;?w$@ZWT&uphp+2F>^5UxUFx^%
z(wFy7o}K=T@mIyB-wsG1RFFNk<_d(4&9Jeo(Z(;;%&bx`5V$#-+AUlkafLJMxA()<
z;XhpVSHVKhC7uJk4+c*3=hGZj%bxC#q-MFgcwfcNBvb%8x)cAD84qbZSsl`*ddF)_
zst*N+!Lx9=O`YyGEHCLBR(F-eHvL?I&~B)}ya;kp>5p3><%e!$OJA=I-fYutxTAV*
zC11Cxd=Ton+oPO%Y#ExMh=nIYBG;ifa+>xfp71#!^U~w|B{9Cwdue16;~+4>5<Ukt
zkD>ro*z|VYwG+CDssHoUlJ~8dwz7Xc#o;Mrzb^*KTE}aIr^jssJh?ZcvCL^Wb&sg4
z4c0jIHc_&|2dfVs#4AsVIV_v~wcq+Xi@D-<IWfSA>|0o)=X`Lt(U#o|j}lxD<RqXd
zaKm*y2#iXMl<;-7y?0eMUwKmX!Df3vu{WN40UIP9GYC(E<uwPi)CBl}dY5LE+Kx-D
zy7YOIsS_5*+jo9f7LUvawgaWZ>;Qpx*Y!t&GZm>#QMDK7_-V}3HRY&^9`z?MX$eDq
ze*M@HFQ>IV17MH4@QYI!QYdl;AV7yEZX_vR7ntjWMFeL}bz$B<R4%CpMzsGvgxgJ@
zODl=dVrWY`Fn2qL;E(BQ51+puZrt%eYIo*9Yw^A4RrJAk9kyOylK6!*P5k8BOZXb;
zy{Vkg)#I4JeAkJcd?ic)#4b3$azMau0#$f^Y!Gwj^RI*2zeSL(CHo}y%90!8klCa9
zt$3^8Ue0Dzn(^0sL(t~%Ug92x?fMCW-BREA8mEf{yEE$L#;v*~jU0FD)_1xcwh!0R
z1mp2Hmu++;voxYtcgx$i7h@;!dKIs$j*3d}I@CLRa~_=t0Vt|qw_WF$Y;^!2P3#z+
zJ|0XdnsCSa$pw(HQC_*A11tdeBZCb$Kj^R7^Z_&=YaL`z$MJ(Nb>EM8=#6zNs7{J|
z{GYEGov`>)xdN@4{Gk|DD{ak=5mlpQ6j0en=dq@ag3~mzB<F|i<%1dOxA&~0YI^~(
z-G*Q2hPvzswW))Mk<%G9Q*}3M`ko+R`fL++i#JlyVF3Q8`0ZPU2K}=a1OC_)F9t^Q
zvfMV?9TXaO{#Er+Ku&W9?egy1oyQAuS(Cat;H{^UdIJDnC4gjwWB7b@wQ!+-Kv||L
z^x^7Rt3p0GT&7gABmn>563wxM;^B~=bGOfnfb$xRn|e52+<sV6S2L9aW~HGjFU(E6
zwA1#~t1h-je$TB8reuB3pEr3bkNN(z1x%tpCRegAYq{I{iR$UW^&~ZM0X8s%<k;#m
z&~~xjzQJyH?tgC*vd8aw*WY-LA%zSvbtuw%m%$B1d3}BiFv+rhQ{dEQja6bkE3|)8
zSn3m)G~+Ds<&8jyJ7ox$t<9ZZ%OQ3lxbHUO_*i-$uKqFL^pX~V2d3+NF>jx9m(H;k
z%Kiyby8}d=tiu`)Bw7jlAcb`EP_t0yCDj&CjUFg&#r@WC5iarM$y4BXzUJeceY?m?
z(|JGlAANbk)!{PfNNyV`?FE3Gq9-@SI&n&gbkf3y7fd}8_SbkCpC~S|mo{AS1TIX%
z$*p6izc1+XU|))O7p^v~a&s0pJ(hWTpR3Lbw|@OScTH$~EKjDQjg4aD)u$cZ_|so8
z?^o6x%3;WR&)K1Mj`*48`JG;YY|PhWn2MBw$Y|AMiDP8<y^<42nI|1dkD$|XIl5~<
z`&JF*jwc{*KR=MVoGNL)=H9`CIdgE6zHv9qwKf?*RkLJ2-M&2uGLVd06?k6QMYzju
zk8ps?^U6vBYhC}I2LagX(9|7YciS)M-3ZwLkSM~%Z|XC+zV8a1!_0i9qQ)n=u72L6
zI{#aJF+5p~wxrFCA1j4DRpRsvnsH?3tlVDT4-NiCZE9MQhkPTXjN^lS71|?ozGyC3
z-8C@6^6e%U-+XAi2Sq-cL&P@zb5Wha$JdL>S+S|7=#zVR!BBQ2yx!ztyS8%1>e)3L
z(=@bY9dBL8JNTE$izZQ$NC`{iS>O{VTbI-iV$z6e@2?(U5(GjaNO&PB$!9_>?ztb`
zaVf`#fRMV{LRP`lAO!w}J9I(epD-FMjJ+MZT!$#&Z`D}&qpLn}LPK+`WHV*z)8>rG
zA#`<LeM+LCs>IR$dA4g*@%*dL!tWU5wAX1#OBXa(YkPH}X(~rewC`)=yTmk=yHV&&
z&FtNkH_p=sEaYIsKfdXg)U3MsrCv+(unNK4K8MwBYO*-tZk4eU4#gehc1y;(2Pwny
zzpKtqk@LR_w62`gwyC7WaZ8H7Y_N%Tx(T}}VYzKr*Dp-2K!oL&I23Dx@pIKv)cgH4
ziVaF2h<7g3p09SgW;-2uRwFk#590A9aPEo6qDFXFW_DY)!1{D^^A55~ubMb-V~vVM
zQU^%S6{fnouT)aAl;`{!$&cU(m+MBxBwf8WT@udE0lAg-<d?r#jF$7H>3q1aH3=Wv
zeKl?AQojLayF&Op?>cwAI?iq$*o{w(4E{MFN^-~e&pJqiGTKR006uC7G#cP;=Sh*V
zxN2(tkV}_Ze6tzOVbXL!yR-IqPpdv-P3koy+3gl`_u%B$J;AryrrjesTd!=k^>HPN
zAdsbu%X%vGChbmXKT`zO70TQ1gh)vw)<{F8U1P)HvMC8C=<TLqq+&F@W@r}_SS^OV
z*=2P~;luFYJKCju56EU$fz!DY_L}pGP3PhjXl&NSqq`tu8%3R1_+#OH*z@kL89yv0
zU;TJ>EIDl_pk(DuqVYT;cylS|Mi<4%xp~<UHn%89r3XiEgL|B$Q9kxlLQw4IwU^_d
z9(Sqf>Z6-u89F$qCNmVt8tyT1?e-<5qfyD}9E0cdv^@3D+%AavtA@>QDaJ(+POZwe
zPEp@3Nqc8pj*?J1E6z==;<dSmmF=pn9Kz^N(?pw*J-wvMqq_h^aiXJBwt$EG0vB#z
z&f%8q24jI_B-3K&@&_F;k39NPXa0miGS$?d^tEdQ9(9QU9;dI#8kbQgJgecN@Pnew
z5HV}{DZ)*8kx_kqH)5U^4-8Ka)E9d`9Boj5Yt^wgcL6|8)8Zl5pjmJ^A?d9_#7+mC
zfmb>Gs(pSyDma1I^qyXEqzSHfs_Zn?Gjv`0RQsHRWF3E3qNm>crU4)>%gY{yu6FeP
z85jZ~ak2K-I46um2c7B~bpvu;K(A%AzD8pr;p7foWl{c+276<<WnOwGar-}kNhOo5
z|5d;Ew*%sazlnf%cJupA^`l6>@S<h(r93s?Z}3ffbl{Na72@sGmOe2b43hM`d95y~
z735^Fy!Ae_+9z#E_$uz1fCQuSm|-wBSqW5AQ0dykaKrqWupsmI@tUv*e69&v2>Oq~
zAUGkMUk9Bx@}Rpbl7YTyyQvjq*_@VKP#zxj$pw9_$G%qf6S+YPIZ)SmrXz!>U{#l+
z%VZxQ!ZEbEusmVszPW`{Hszqqp-<*IbZC27B}XlHheOqnKKlWjQiunrSNF;D)@7!5
zmrD7ex5bd;$kSm!h|inMjq6ulP8lMkP<7`HgeE@a)kf!&*r8sr(F=I(hst)X8byHc
z@CvnE39g^xtfqQO|DFdSGVg>A=*3hFRM@E3bEvyfyJjxv6*Q&0HqZXp)f|LJG}|g4
zd}b3R)YpprQuUZ;_V4X{^E&+dwx=|g=MiyJb{J^MtH#KwJ1jfc37^N)m(Tkd3b^eR
zLA1viB#xq8G@pWZcJU0f2VJIIB>A{sftUw^ZAUFIMt~zYyzj>YQghS}_0=C0(=3zT
zydT`M>1OsM2<iq}1MGlD6syHhWhVCR?rzB@<MdO(2bHPb{3@?lPwS`iiwe&1Ms=(%
zyHly)^!-}mc$ZeCe88(JbEJ&7Ykt6phi)84A*#LVzPHjwhGAYG*Oy?nXC7|0)ljdb
zI^G;b^}h203v&`2>Aoz;K9y9x%J^pgjv%#bU!+*ltlEdk|D46XxK}m>wcD6#N?S>6
z(mPJcrBDku_;`R6lp(*ow77U&%3Vvz0)OdF#jEBw;X}7-N}^)Tu>pgJ0Jwq}>S(%g
zkL?pd+@}J%mRAHJ>MTQ8h5npxAh6Y{ltb72GVfZVS=lBz^Du4=_F!k+ckM-=aZH~0
zR^Ff1jia^9?@n4N773LpIVXXd5Wr1@y;v4kTLWg|%4<_<S^@XZBX_tlzHUh{ux?$Y
zf&-{e+E(d?SO=AN$*%Rl@s-~bC9Zm1B<cN(yiOp=gVZyRXr|YX-TSG$o~xdk5A*!G
z-aq6%yV2l<eyr-sdAoGq>vpd_*XT_4_A~}cTBf4^#2}GV=8xfz51ony4d<$mH9#=1
zjYO-=C@_l)%X!gD#kzR3IQMxrwdl+^zr-=Q$WRAh!1SrkNe63;O$$dZs_7&{P&nVo
za>g$O2JVDPo@f7ng<P@%=&!{mt`|t)ih4;VN7K~{w9%g+7MnV>v$$i*$s({=Eg!P0
zUD=wawb+z}*k5weamo4-+z!W4L|(*EO}BuTlScz{42nZ>m#!KtRAw7t7l)l(`y3D;
zj25Hs2$BH`Y63?7j{+`B>98%SY96Pux!kOiR}IE<ECxKfUCYJ!srz0k^c*jI=a#L)
zw+@K$rPKyg5;L!Y&-u$6{y5Tb)vn$y*#b)@XhqMW@XX-r7Y!Z#%K^z-ebHR?2MAJS
zY0+<Y6RHCzfhL<@Mmakdr9l<ptiaCUIx#0^&n_^3qHD`mqjzPlTxn}g4&*ftceyD{
zs3Qfx%$Gx-$_`&?Enqp^ca=lAtioe<H@g+Z%DA465D{v&n{0dE>a%E)_`ffyqytaN
zxrV)K+pNT31a6XhY!4BG&-t6=)S0g%XlGi;cu@k|ih>wBxb)gacA|B8#B)|*R&^Tg
z)o0+<Kci!jmkRSYY8}crbZ5v9ox*j`Bp^bofm5$RxDy5o6pv!^u;l#WR`ra$NFFYn
zz>CzB&OrS`9gOW*c4#wv%ZBp|Qk3E1EPVMqoEaL~fq~?1uWdg#-)nlNyFCNvIJ(>K
z+Lcv>&WL6gR3lz#@YbA>bt{$JQSWfHadv$`o+T0W)1AduE=L_8&5z;XGDPTC2-<Er
zM*G@L;alx|FUz63m8;5qROq(YE9$ya8t{snwhDiX0_LyE1ZVF-bXwnW{kYAl#2ug=
z7=3Z2(@BF4jwkc|Edu_2z}<>k&Pu`hYT`reWz97nAdtI55mfg#(=>8gi^`7i!sN#3
z{={4T<Dx7da;y?3q(+?tlgQ|ryO4m@t$q`f)jiqBq2by|(8;n<vVwmI(1`p5!=$k_
zQGeqHfM!meY-1f?mZtM7nU}jixejC3Z{l>-7B+U(!Xa(-y{le$j~rYcY#EuG!k3Fj
zv*<<yUZ2Jt%(D@x`)v@NZOS&CBtD<+4$0z<{G+;*9QmX0lzdmu+J5rFJ<!mv*R}}{
zg~XSg(Ur_{0P?9yxE=se<1)7kvil2GOeNk*LIoe+7g4S`KIh&N3FTI0Wk6B8sTCHx
zovKH^J?=L}ZnS=Ksem`8nh7k4pX&Ikf=MTD(dD18xlIG!10k2Dj@(f{Cv6@xo=(%w
zTh+e|4IY>3;5!sgl~-3f@+(4b`$25dgGyQ5z**M;wm>iS`U3wuh{hGsEl17!IY3`r
zHTS*v0#9?{aw>=P-dwDhH;HKH(02#^FCEUSmUMrsWdDA^2WcF-sV_nYlB?*ZW(jG+
z^~1(*hZ3*xE6Y8aeCqTdI3?ac0}Q-D;J$uW-5hvlb<8-$eFs`!Eu=$#fw$($ea@**
zcLj~7Dz3_EMsNZ^1AxcfB3AXe%gVWW_bMImZwb~P=sBtqCfcy`y*U61O`MJvUyd+%
zuevRo*8#sT;yW=m0u=J8a_13#@w#xjI{<vVRT|@YD-fCaZCODf;@hlG(k%uXd+qvX
z1b$yTWjWi__^-N&p{UVojOaS6DzR;H(CcwmeS~tpt+=K_)O1DVy7j6JJ862mHAXdD
z2bkg~rm3G_RR-o{PN?SWj_uj&CxnDExSmm8+$SVn;g&tFeE6Z4J<%^)4j=%ik!C1>
zA}z@WLT#;lDHuJBe0$cdc(7-8I=pyJn-qFDpU1DRDz=uC$%${XxZ5e{w(~^P={5#c
zC<z~L@9|X5l#msY0swk+Z;CPkq2P;mgCc%Ff!ZxKxC*EI)OjxJayRkreGUEq6iG(^
zJmAs;wR3pb{a)JgXY`2+tP<bKdRKFG5tINw=WOeY%)KCF<YzNeA<(hJj(J+$eNv8Q
zhON{s?0PCWW|Chj*?~9Z{4tT#Q6GZB=5UnY`LLV{-f3K@P4fUUW}Zq9fVQi4O~*5Y
zpuz|Y%4ogKvuKQ_kEttxE~m>{oZxu1dIE6wQW?Ife&=#wwbH<CRJ~Od&C|(3{$}R~
zTJ%m)>*WRnf66TJ<XubvQ$Vc00QElZJ@Ie%wp+slg*a!g%+gt2^%BkwAxu(zfa3Xu
zySig`;xwFesykW5n5S3d(242P2UC-K<+r~?VPBT&SzULi+vO@~l)m)Sj@7n^^&1D?
zyw&Q)zrTS@<*a<X<d-|p-<9uO6Rl09`QWt4?J6#K6?FGZ$MeM!Z!d8tw5Pnt%mH9Q
zfCjZWd3Ib5kG-Nuh1{w?V~;NOVu<3=s3+!xkTxmqi8=}GNCFW~{Y0S1e%GfOKJVeK
z44}EGcURq<x2t*`=Ll9c2Zx6c`OgDB)lvoAN?Y!_gYHhp^f_aPg*;x^1lmtx?GS-G
zo&wqcz^x|gGX@Ws-SyzT3LnA&OI2`7bu~^IUQI{ydyiu3OlI4Sn5u&>8FV|M0|bsk
z7U)fK8`3RqVxjMGyZkU}^dHZ&k5RFL2zTW+t%-=;a)$m)31$Vb2Gsp#%*cbc7`K~S
zKm|uv{EHySJBw5MHn*QPcgjX_$9Fl7-1^1E?|2}X#v-0-XhbmAc8+PCV`^|^)Jz(!
zzk2L80!d@A|DhA$;A(MY-Sp<xYx1o|NpM|#Q(LHkQ1q6GJi_hS!)UR%XvY84CHV_t
z;I|Hb@a}2o+UW7hUSnRm?vjn$q4{6tBP;yL=>-;Bb5b`!Si<=wgw*5|pDAqLx`MS2
zGD_OhMegvi)@G`DQiIG0X;8!RjHIUi`nDo=(95lU1XvkP)y)m-`(CHBGENa@HJsKI
z6%-Y^4%IAae`2OH)u17l8lcqh@x!{b27&eg6Pc0>z5i7T{&$Gt1afudn>WuD&VX2z
zoZ2tpa6aW`nT(8`^zXQCMc5j@g@ns{`5f>vg55#g0608F(b8&^7~F^)-Qixw=C4Ay
z>UIQKP}edKQm<uPib_D~Bx0*@TU_F|7Q~UQqA-A*LY<#m&L5L$_gv$CHyJB$AnUPe
zdtHyQQwyV4s|`Yx_Mols>4H<3B`Jm(qF$FA+?{-S9Kj9(Z&A})?L$sT@O;M1mO-s?
zifkn$BC08)Bk(E5S{D=3znb}>r<Dyjo4_ItoeLUcZ6l6q8!T!X1H!&}(HSxa`6!pL
z6pmifbHHy9Gwd_3+0K?6O$nT&x_WH{Nd>RoBr~?cGaQpI=5*$;W}+%<ZvcJ{iMw^$
zNNn0jLz#6P<{qe3!##ZZM%H+z>$t}ZZUdd#7J%YxpaE1f#{>@Y?q{yB=u~mn4h(9^
zDdhnM$GsGG>Y9FP%ta&(<f^8Vh*PF;@ef2fta1^;gC>KU3jN(ShTZ1=>$IHRH2Kd1
zZmr*06h0)81qiAw)n0fhw<EsXT<3hxgW$Q_0?8U2l0HaX{psqvilTS`0ZJdr?pDX)
zXTEm{)o}t8`s*R^sfqHxyvSi&`XL0j`pW_Dh6cH|s+F}~wgg)@+|J{UCpX-s;m<86
zNlnEJFR4*#j=6!rAz*c76j0WsIP*JuI^<YY49vU3aMG<CmImIt{07&OyiE0sDwt-`
z6{j~VE*?I?h3n()y%dRS1(EK$oX*p^4~P0aD7Cy*`_s852bG?QK!M)t4v3GM@(AJE
zzGZ9H&f;l*%((`Gz;{QP9MGqnkt_^HJ+xHd;IBhld(hXatw?v@Jn$DpS^82OBiO5o
z*t;^|{HA37AcLtYPsAo^tH-0?8K?DBEb<oVJxd#4AeE*g$l!2#aVOc?BLaBq6u_}_
zEAoW{)1hfYNklvNf=;R~GI~(C!X4)2O-joOn!ma=Uq<Urtc)ju&p=Mv><^E)X?xY2
z$OMb>q;*hkZpz*B-&GXDy*`I-)B_9h^8Hce67<LWY8yydH6&l!eYm8@FDiFk8-5?Q
zH;CYu>&8$*Cr~+@K?PThlIvC-fNUUx@upq6670I@7AN`$E1HOBl^AvVbSo*^IItO}
zHBzpk2i-Harv`6VJ1SJAbWe8M)yf0xT=9)?x!{$y-yO?J*J20U97sgb2sjkqSG|xg
zFgYc`SO;TvP+Du~FdcO*j+=j8xvnXGCL*_s<WYYSK8aQnyjJd-ZJ;;F<Qg}g^5hq~
zfah~LY%g!>9a>`7*A7s1xJY{|gdd><FjxgwA2FfBflX5qnGDjk6$Ol(Z20A3OkQ&F
z`*pxKf+wd-$FuBwPgz_|w}F1b6E<ZRoyESj>EfHKV0J8~?e^yfkdbQSPkWl~oQjB)
zoJ)L@sHyo)l!B(dDr9p5YhT$8E%1iWM6?YixXd-w(AgegSEl~l-N6`cg#ztwwMm~S
za*fL=Og`PEF17;!Qvm>ochW>^>`@`1e;#lZuAIJ-;*y=Wv^GPuiL2Jt)tA(LQynBV
zBVe4t8^Aq0!ZWPVmB(8PxP@2Cuhkohgl3Wgj>jcQy}j(*!yzlWrzY<3dIEZ=CvUZP
zzCq;8a9PRIN;g-HRk_9SZkwUvx}Pz`qW0&Z<h#X&+oB7<(t4|wlXJuYHowa&g2xJC
zCt~yJs~!zz7@|sW3%$V4$+lW09@*LIo9_;2;d@46TzR(EHOlGyK>}IjT^kDl%fqR@
zw5lt;Z~73uLMfraY8uFT6Na}5vf*AIL9OXaePfQ^@+H0$$qJzBnzZja?(r!|$F2<&
zVTeBwHNgf5_NcAGwQ+bY>K}md*Ga2Rv>ypXZFCagSAMv)8}V5pJM!NrvFU_{0;oF~
z(duGp9HCDX5u*giO4GOQ;AcXtcYWtJ)f$Oh+4Zj1yH&WxL7nA8#;fm&`X$YaH#;Sc
zYpzytHKH149Pj9bpQ6ag=huQjIC#3^oN7Mv-ztx^q`Uz(F=`S)g8wJUgbC|wqq(W7
z;OZ9GnTz!VHH0mjln!!gJB7nXnfB_eU~Z~RJ&m54Z7H|Ix`rk6;#4j-gh*et0#ru*
zU821zWZ2cRDcFM8IR&J3XIGj7e086DOu$nZ#;n>AP7>wlE@eEr9OUQop3$KWa*L56
zj--noxlV|Zz`C)%y-tFI2SNQVE{)T);iyi>9-1s^0#OyRb%6T(_2J-N3dm&VKRyS1
z>KrkY{X0l7{0?QWa%e7a5{@Ik_|UQD`^vTStJ6V+V8_p`=uuU`xckxcN7k&v2Foc5
z*Q<rIkkz<I=d*$Yqqg@8Y2%u3@4X{|ACrd*v3ZVP((5lJ4u`$Q+6K85u4(XZa1^%!
z=1ml{r*V5ZPyQfzg@?RLZQBr+eok7D*W9<tuZ8c%H6*|j0EGX=SrMM0t}5^B3{>o7
z@fyKCw`;HfM?Qk0uvUpGyc5<1iRSa)0I6G=y1R(<8mDvj>~>><2(~)~?r_+tTKAnU
zJ0iT~{cpoEzaMZS77sGJ2b~wv@F7pgo+F;o{b{m)=0T{RIROB`v#!yNHZGq7eum4r
zm6CK8J1t(%LAb~{*<MTWJjv(rHStYmfY<YIc{T)iw-t23w&~T?X-e9ax>v4-UCEL%
z&K#IS3&LkTjN{JNABtZmO9e@-5)aP^$^!7Ad9Ue>jIt8)fNqxvL$G6GA-Aa@r;H+p
zo};!ykXJz`lg92@d5m+FE<VK@GXJS*{Oz7%IN*K?a)c#9#3hZQ<@wrm3S8OhaOoNJ
zPFK8O0>8CwAubS=mjY*76X6Qta;Nm4U-kU_Nd0AQ1m7-^ubXokYC$^drkMa#;Z%1I
z()uEq8hp%9lQT&0_o3A$v3DPCD-u$jUumarPCJ6b*3z^AfAWzY=&vmlhzRJWq7T8B
z3tV>K#Kq4#-Ff5Tly_T8cyeDm!9ss;qPO0S;G(;OI!^WXfC={!P0<*mtB0aD=Q7;*
z+^a*m54qg#_Nr3kaPBj62kjpWBLB74OaBQ`3ds;y%klFJ>WTozQ4R>g*qZj#h3gJl
zyERVD&cSO+zmrVQM~etRe&s@JAdcx871x)vUK{l;TRV$Kh_92z10~b8BiawpwewWL
zi5y;i(CTsO5qwn@sJMR0Ty3%|7s|?~4h}@P4iz@QMwjj)fB?|Vy@ot~S-2@u_ln@$
z*sekq$)i~Za$HK@q_?jo^G)57%F{cm7ExU;0^HJOI6jjrwr2OZt<(=b(5A&!)IG?j
zL>s^y7d*Ul^FlcsuW*CIe$^6l=iGpZA@b&|d@5q?h&a^hOoJ4ttSYdVcvYV3yab53
zo5i;6rNi;eZuKivycG-f{WoWD?PL@~u&HkWK+iG_N4BO^u)7bNH&~&0Wn?Nj?Ywo_
zJzhPI{hr0fr*+8K?FTu{OJ>}Oz7D@a)}bG-nNBdW3W}#IgXCg8%s>@&2GN{ejl`;0
zEd#5mLy9K6DU5k&$o|Z*4@oMYpR^2rBe&?<v$73eAnCo9R37_x9ej6USAQEZrK?ng
zf@8^ZD~x3gF{pQ?h8HZR-Hx{c#7<!I_UtR|EjgG3PdhAP^z6hL@p+HVgQ|Qu`QmSQ
zs6O|wr>F;oTGzJQK=&{{kaO#0SYU7}wcHL2+CtaOg^%-u(%WeYB1kZSB=tI#9aT|Y
zmj=naQ$lY8Cyj%5#cv{?jyyLbNQ6wOK2-Ar0*7E^WI}HFcI;$;jhw8CQGV(Q+o@Rm
ztvX-kh^IlSP^bxpm(`&UwkNN*q>A%N0Jpo`8vp_1C}`8=7C2j$(vur!?U$if(nX2~
zU>iVh%4cNo(k)KCZ#7+cQx_38-D+g4wL~6#P}}`gs*0`_aUtp&zHdbQs_(&}vCNU1
zwe-F!0<b<pr2Kcc{Ah*ZgN#&c@bc)IvJ=3TRl=zrxchTK#N+nTi^+48oKJCl+U;zo
z#=wp`f2-SBd)1c05tBsVzc#H6Z!XtiZSj#l)9ArT-vk_}jy>z~Vh5>msS|M+mZZ_`
zzafg5difRkvs@8T&SIBy!~K8<7HLlnUPMuxyUWd7a2K4Weq!2c(W_)t@(w`JX&F3j
zXG(z`4Wit9e?J7nwQB*#-NMo{tIlsj&?AuTPH6}5Xye8eAuo~Mll`2n=&g`GWx{5?
z#Fh(Sg72^9$0ThTsa%BDaCEK2zECMxtn#800A-o%dS}5FBxu>6y$h0MS5aQQYL1aB
zaw<&SfP&An-=;!oK%lWZ<{6u7A!GsNOPVOp?(=*6Xf8#SwC`C@Mn_c@)>j``ePr(D
zCWP;Rz^<VW0D&X|D4u5Ur{khvimd}>y^myjN#lfD`>Pm+2Iu6j_h3R;jy0N?-)EZp
z#Utk%J3UIc-jzfOW2jJDRUxzxx|B|>#pGx3S6>*nDqv~V5d(oFkeJVvJo0X5lb+IR
zzXFW6^9QGn--F~j1(^K4;1o<=qW10wfLa{QjG7j6K}7oe$Nn5}n-Sn=zCoXmxeR!}
z6-za>64&fN$T<FWz_+P!JE+epdxFk6T`@ILbBQZEdCn8rIik_}S8$2E498tHwtw1A
zx8ho&5kj!BJnZ`5wq-ccF3v(wAK(QKHEvUDwQ4@vhUCvley}tV_*{E65x{>6I+V?`
zH9DNz5!8H|*C4!^?c>_I)U>YNmwR=Q=gO<*J2ahb-n5I8G%q-WUR}I+Z~{zdrllwm
zI5Vk&1v%Mq<0vY_=tj;K;7pHPqxMPB3{`mT*1Ad{VyoNEbtWpiadY>V=a?IqKF`Ai
zD8i@<sXWiL+=ZIkI-KmFh6!P#^pm3wb#p>!9^XX_qQy*;L!3%e`SehH8bAeCXv?05
z^bJ0L5gqt<2MSrb;Psr<*Sv!>Es$HlcdGAF{QMFka{<q2OTH+>@m*~Nw`^B;`BT1n
z>)4oF0RoDGP?B>JA-*RBss_@)06@DXQBsr2c@84-u*v>`yt}luioQXI`%YKZ+MdYy
zpk5f8hocjsT-)L6sZDH4bJHpZ4BUWA*S`<=wKTA|oFZiF(vm9f&X--gVVg@6btqDV
z!@>MhGfX{^rX{BE4K8WvLzjc>)zz)yocxk%y7f$TP6ROadiJ1>+cFQqOmEktnQ$5z
z!o69I^fbUyy8vEzaTG5d*9ki=4L<V<Dj+mDCV<^tK}~SnhIf9QFr+k8Ab-Cwcy?*t
z0ho5z&i&d!bi-*zOHp<ooG*uItzm2%XdBlq@Ln%VIZwT=R&XP6=kQv&;sg+Kby{bJ
zTW>JF(rd7K<NG*CsAlM{y5^ePcPWzx101@!OH0VROx^~6n<oJm%IEGv#8ay38fs=+
z?+!*Cb=iIq)-M}0Yl&l6DtRApI7&=<8z`CL&a7>sZG8mztb+cIz=|jioufOkd;!Jl
ztKXc$TC`01z*!F?!vKpn*ux&w0JXEQLvUY3(Wy~etE<e*0qwe^IM3crJ3PToaI}rx
z>{QvK0^spRrjG5;Ofr~Zs-XZMf=8b!<dFdMrpQ3}<p|-7!M{71b2zM96*HKp(vVze
znD24$^O}ZET2|auSR&R`AK0Sx4k~^|zfQ$fA|Lf~fF|y{IKpz-gc+*KY!~7>UbRxK
z*zdrhPs*E>oTKFzm6oia4)VUFJ!_|>*{S(Rx1Is1%JGpfv-=2xAzK&D2B*2_Gwb$h
zgJ4^#3mYlqm9$9#S5Z~c^$0D0*VxCsgu;PUz8S|MA;cDp$*!HJFXJP%KFhXKvvCDI
z!8a{L6`nWCj+c=+8E!(kUQSs7<S`t^A`2Sdt3?=Fvb6?<18;Ic7QC0W9>f>q(RJUf
zap3V9Ai*B1Bu&I5XNUVz2te%*3y*p7Fn|j0no;49Xbzh5Io*HJ8>|oYGb{X!NZTFl
z0IxJx<eTC<N<RV*_I!UKimoArKX3p9T`O0OmMo}9ofmW(%U;<z*n#l+5GPe_T8$C6
zo(SB+_3Q*Ik&kr1U%bfjyJBBzbf#y4OUFOnlpeXZig=Y*@hWsnJ<3cD3kdz+7@X*#
ziYZA5#Jy)TiMowsk=?dvx64c3iv-50Oa{<f*GtEr&i#{5<~AY^U6H`yECXNNX$uqJ
zu~(%tRlaxy7qCL)Ia{R5iXrkwK|RjnmE=f{Mm>j{$YeUQhO>rbhGU5x05%_FMA$l}
zGQ}J(?G+Q8$1bIF8v4wT0rq##JiA|f!|v5$Hrea>XzAiIjcNu7yMXk77V6k}sm8NG
z7KX+?^L1?iK~BD`TM!nHrcz1HnrCNCiY|Jp9ltgY)My&|#Sh?f=_=V({zwn1tX&#W
zR08%C<0LQo=5`+k*){0zh9T#X`%D<zsvmy8hOX*hyS@fUow~eV+*Y+G*F%YR+KQ6z
z`N)#fU@xb;nXiy#(qLC#TdSp-{;K}o+jo~#Meoe{P^KAd(e$)4?1;8+N4tC4$Gc{v
zhy^!x8oCLFoXEquR8TvtSqGD=tGJzD$%^d-+p*QUGkpCMMdnQV;cD(6YaiD&<*A!{
z^zJ&^JpxtKf6s$&hvQ-L_#48eD23wn&EHLYQ2>7`*Q<QzX0;gHMTGH+r}KI=qEEF@
zxZ)?bwz^z+YiM;`jYxTG;e8S!TYS|Opl?GY)7>aOv{qJKHU27O?7TH75C0AT276mx
zIJ<hwkbbi3BXV@DMh=->>*J&%r1T$<MdWoBQb{MC^6S@fe@^uR)G^xCG0;VVcS@GO
z2ulEXf}{E%E%R$#|Giz{w>bAq-f)YFC1XYYQ)AlZgaB_uDZrT>XD!O*zE&CSWdmYQ
zXCZgT4)<x>A(3$*CrXwVxW=WnL_Y!8TKUYi7kjkFSwczO-9iT`Z$GPDAbb0&Gdicy
zSNrufle|fyU?W-9T|p;g)HF`gq>|tK0L4`yTSC0s4UbLHHXsa;g)jX{98(?~&gjlP
zXJguxasUp*r2sKkL?PYRU;=o6nD1Y3>L4wV+oKZ#$7(Jt<&{COia~D>4%$?Z8{!I3
zc}i6sJTA3492wS*23k$NI;>D?1z|K%xar>zg$u>yaw2R5bwUX%Tp6bk`5C=9Cwl30
z?KmjB*5T`@T}U!-e;$IVgAi0bj#n+Vaq10KBOG4}<SSN8Zhlo!q_ZRlm;*`7HGtL?
zve2+<#=A<P2#R)I6bXkta&*A?OD^fzl(Uj!l~2j-%l%m}LQzDU9L(YC$s+9W7VfAz
zAFkCUGsFe2B6RlXbuL6Lty`6~Tj^REY6}<O1{dY(CtnpELZT3?S{`W;!08@jtpb!w
zS8#PO->WrXRXu64BV5`K5{jGC5QdVmltBQl1}odATxvb;oP3Yxcyt>qeD3<BgTS05
zjbssNA%I{Ri-)R@-3te*9#9-cE^TjhI1@zR;&<|22*Wvl?usSLpg?85Or4q|CT%UB
zF?8MwaUnYMpc;g7>Pg%BW-m-9b<)$^e^aU0#qvk2Rz)CMyT$NiGgl0h3y+M;3HEiy
zJMeuRjwI(VEyQQNBQ2RI?zgitIj-Rw9q-j#SZnIae4qbp^pGHS#rNzwlc@cngfgzq
z=KMJX9LPszglMT}oUEDEJ*c%nuzEbB&LK-Tu@fNRtwVV)7peSP0QAdd>3aoW+f~li
z4ug<0bf(grYHMnI_04HtUQ7$(Mwf+zwGQ2C&Uxw=_dg7N9~m$&#@IOuyOXXu!X8!~
z+X$c*g}blcV%oH%p@4K0x7#hauA?`CP`Ci!{0otEhX9cx-SOt!@JO?293TGU_<^N#
zLgP?ei@&l2u+MVAl*0fgan#<LYu3}Xj3w1&*W!w%-}~nHDSvm@?A~k)Y3kE?1(za<
z%V>m>&vm}K@Cs^af1uU5{BD{CnF)3X#?~<Ttzx@b`wUA|YfOdB{8Ns|!lW8>JKr$r
zTi+<7(cK8+8rs8JrYpCfU;C>kc7Tm+xe$%u8qhF4okitqD4HC?t0=lvrv}Pte@@E_
z*Fpwdv`WYcbUM($OSc-Gf_GyZs=n)caOOv+CnmM4l&v=VM=l+pU?}zPK#%)x=dB+0
zzdM=GJLl9??y(T){^J23Ano1<X{c%7GS%e>92k{G30kBZ;8K0;?TS+6u??p}wKNGZ
z>nl2?DCXM;=wz((HOVOfA+_78aI=3gbt?}&X*8$G8-Thv=d2flp7We{n7liR>2b6f
zqaNV!tOu&yg5$_JsI5xc&BQG6qSJlvdsW>=QYet@r^>ElO9LJ@s-mQhKk#o{^8_9U
zh$bQ2Q8<k<A5^OO{O&?ebDQnR&14NaoIb~U0Bx<5z9w(<MX@ZH)=YyP4<}(Y4hJ?D
z>)K9qZo8Yo#Yy>_H?J9m({#@~cs!4uz$uBS?ej|RW0;YK!|;6b0epLXTj<%f+RvN6
z9ArNUGdw>X6{lFo5;^df*Jb?;P%#TXNd4wso)Ylsh!<ag<UIF!ai~D8;Zg>h7{Kv$
ztmJC%>#PObMqtt%m#3$D`PqsGJ&dJ2>8zcl@7s#m@}A(%StWTk<#Ny+ce`vud4Z<H
zRy^<Af!bo*LYM!pq7Zj#zi)k7_j3>YmZ?jD4rFf1ap)?5MX}(UFi;(BsLN?YpR!L(
zb8<0{*48Rva@_@vuXOoUbk_1>a6YehnNWqX(>)Y2jp9Y>q;jL;k^|_D*sK{xg|>H{
z{|W)q*X2I(r#h+gFv+Aw?!Gp$ki?-l)flQ!@*CRJJ?g#D!-pBFhR1xkm;kJEbo3_v
zlL{3H?f}R>?dqL8;gDU)ln{;jOmdQ~r)HClkS6;rlL(oPwS0VOhBvD|ZLb4vgSzIa
z4K1LGKcNbn^F{olpw8=gl|(Gi5IgW?cik|Flxv7HJkY--Cj`l4NpqW~t{>oj_mD{a
ziQhfF8$DN>+tTwCS*zLIELKbcfSobm(rgYHIq&LLCOON}!VS;nB0Un^z@p%M4=^zY
z82%KOfOwQc1TpB`UE13-HiNJ`*WI3O2U?suYTlY0fD9d$@3xU$WhY^RN{FY^eay3x
z`@gLfIEs^@cey!AyLxywN2bc+fpDh^LdyREqPT5CI_JTX=1+}Xrj${i6|F8I&yFhU
z@2;8nKIav|B2cl5i}&edDk{Xg1`Ts{gDdB@%zK-6U&+U&)A5pe(UuZYH+Jdy#;I0N
zSgCM5kXotgH9H#LU@N>8{jzp~UeWWI4FAAGC=>vZfUVJ@B2KDslLt8poEt4@6T$gi
zknTrX{+gVR#>)bX+O?K~$t;&plcj!_)>mUovs=Oz=WPFc+gS?0Jsu|!Y@6UGZ_F>1
z+FKLKYkA?O_iBwhKG%}(B5snVo#2Ww)HB%`8rE^N`rzJk#BVY>CvMZ5gM9PU>kfrB
zst$rDhXm$F3YuMKATIgP7YPFXo0+_N>>E5!LF53Svk>4s{TVM1pCg?e#-mp(w~0uZ
zm$peu_E0`GBez{RdNS4Fl9d%;-ATy<mQY=$=6Lt_tp6bT4P`8r;hPnyN@(Ourz_W)
zg4`hm_W{Ca?tR}aFRk`)KLWw0E~6V?b6=wE4)!PKa`}ep@s(x8MV|im0SAq#&FJKx
zv{0?RBldGYNx|S0Hwg03)81FO)`T@*%9oYk&vk1GC0GmxvKEErReDn<f2||zlel0D
z>FsTmWKwBUak`ZMA$q>LO7}Yu_TaHwd;#%~O%G>o+2-Uoyy$o|19fF2nvot3w{ifH
zg^*}v1r(uJVsqQ{MKX#1y!8&1bMs)kNy&LCA260lVSos0i@e#=)07m%m8=UBN4{3O
zoHFMIb@XllN@-ikA}hyw^1*?nAmi;fgL3=aQ5z0u4KOCDDP2I^_qGPS0&lWfDRX;J
zTVd|qRIc&ni#(eLS=FL8CNFE#xGlTIdlajMm$DFUvYjtm(2&SR`~<$0L;XOCu5~Nq
zvO22Fi4J|^Sv%4NJs-)OY_-5$xu?fL5`zP7xfOMdL}wh!aikpAmX~|Xfs_3DwIF)l
zo${k_1`<8r)|oC+!y0qx3UCq+ff<DKT`gNZL&!yT8J`LnDb+dJ>e_cv#YCs`i`;u(
z+&PjPKuD{HKM(kRgqLG_(4ps6Mb?^C-5eM#9Kbu3+r6?qNgyMaJ*&2vk4#<yODI<L
zFoNs6T!4-4JE@`#Lw3+l=?s4~LF(Su8kvJ*UEvK5y(S7}x@7qj!U{)66;Wjh_7_Xr
zKq<G<5_>!BO5}UlA&gaqapvjd*tmn*6-HX~|E?$M=Hy`96N|c(W(W8z$@kgdE)MT0
z(L}a%7C_}f(BtMrEyuU2$fEyt1-^aWIR9;QhJ=ggj>>C`Be~E|Y?5@6$+VjgrcOA*
zT1iqwGXNi<!d~NL_h#X{-SgQO%BAvILQu^(tSPEUzO)DmUJ08vLtv5W?gBUdOiuq0
z&D1|tUgZ%waO$7|(%RCQ|H3qmvu4Y%tHRORZ6oj;f*Z}78pGN=Uv2|Ws5-pYwUDLr
z4?+ZQe(GlDb!t+o_Y>4>Gz-MKb#jw#ZrM%Hxa_0yHdHJJ0rLl(iPZ+WeV(QE1>Bzv
z!h6N|Qnf$A9f~8UqJ1Sx6+wgNDkbYG&Q|SOE7ApI8`|vxK6BKa@VFnn9!|F-J)A)R
z&gmu1@EVmxFBnh*9Jvmm&epXQExIj2aFwG?PC$GD=@QD}Ia+2SYrfk#)wxjXtWLe@
zDFtj&^AJEk9XwK*%&uCq!9X$u+*?fFRFC^qM6X*NAaV8vl_a-9=4*xjYq#x!g`O*J
zCdal4Jg~E#4c~oNdF=CJ`mh2-isFU#zl!7kcJ&o?jOo^|y21;JF4>d7yt~2(r0aUv
z+g{!BNpx<mz*jA72utHJP`u=jq!nPg<HqS%W-UjBn_l5|D>{aCb^=M12ck!LRt(db
z>Zc&e5esdJXv0g(tLPlLA-86m4(>oBh(elF^1${@3+O8;PrJFLavxDI@vtf0P6h&k
zeI7B8tGh7`HVd1w*CE2!we;mRg{+FV#?>z3xxOc!us%>6nG#Mu*o_zhlG4VCT<|vk
z&@%_{!;9l-{OS@)(<adv_^@xJ`Kkp?7QE<zq^7eD-sgNg$fwMW@WfXj*IMuzDHCJv
zu(@e!!FRX=O=#r%-iqY-%M7Io|9n1W;mKca@dK>)xBFUj6xFF63)I~yc3!&bh(}*5
zSvRpWC<dE`Q|a)yyt$GIHC3ME>Bq^S;*dO(6u1})KypF-PG{O3Y$xg#{X9KfI+)z9
zNa=0))y!1u>ugOqG-XC#LXNy3O(r$*c8*mq(9`k46wg2+Z|dLf-BQUZw7IPm^QEd|
zr4RUV*^(p2o8{WUtDV2LxZ|MGokc+FnQl50l+G!)A$X)NR;XW>wKa@2>TM<RJl|J;
zKb$ji`>bf-2kV?pY{bKECd@fsQLVfvue!KMT{GCRMEbUu+@#Ew#0Vh`ZeJ?I)yBm|
zRYc=n_DFYBh#OYN-?c`!B$J&;dsc;X8=Z0={)MaG|8@0symn!LAmaozFgxn{b_nR)
zTLBT-#=6~e*{8ew%?61bDtCIHEwIZ6ce~?14t30w6|mF7Ew`Y%jl>By*KF=YKydD=
zRDW6Kx6i`SLGUP!MiJn`YoDn^MK7V*4SGEkr0DKvg=ijXr|^i+=}47rK7MuJJn-O>
z9n|<T5O5$CaIThwpdnhNord9|F%lOpXk~C|oY~yb0#Sjf!s=-~1E?A|ICeE0_J2#N
zCk|}Y=YbCbbsf%>c14l71SGeew~~``*x;-6g4g7jTjQ>ReK;^D*9}k-7SL;3{xlkE
z_eRiIGsi8$bzr2{;rJfltG%3%DX`akrrz!P!Ebs$T~vKFa>~Iqyz@NVOUZ6E_gi^~
z^ITe}<htx4oxPc3tkGs=7Hub;E+l+@Jb&06qY?ulBxzeiA}V$U8-F=C9j0SRv|^-3
zy|ycm)5}!;3~@xj>7_2D;CH+h=bWn&#`5~O)A@F~yb-5vo>bIkI?iQMdx{{Pj^vp{
zugGDm{TYUjcRP5vd?hQEM-kpjwpClQ<VKK9S*1Ijiq4TYXeKx%z+|EFkLsSIC8P{4
z=KY)WddLdz#R95WNy1t3Yw{^h<tdZM`zWf=IC}}+a$4m+T3hx5>FeJJZc|qHbPJA$
z@1E!_5_P2QR${A>dChLslD>;AI!o?VxbSr7tEI~&2t}g4)8DLtf4lmSmuOKbx*uG%
z3V~M{H(kbejeaNy*OaQWL^nA$?(jfu$k6p+w3Abip)W4t^C`VZ4#jgxry?4h)V8ZD
zdEOej+sM{5XIBKd=SN-K&Zu6CJSf#-Ujo}eCcr2>s`R_-FR3T5%0inaB^QVpM8pTv
z3U>=ySrQUpihi&ADPbP^=v>DB131gw-argPF(g6<OmR;dIA8H31}g$R98U(o1DNmc
zaz)^50}IF}ojf;RG+n#z>|hG-8|rEs;#c))zg7k9;)f3ag_HFhfyt{p91sZ_WIRKu
zFhOO*4m&YQJ1AxYb%o|Q0pVQ9bq4>?=^7FlNfy4Hq75?rGq1ALS?wRdoa0Lb$R-QG
zI4EZg;NvsgJdy0;P*oe}j27y;rF?(B^JHzg*l&Gak0K1Wjo>r;IC*sbHH%#EvZg?6
z1he$z>q>f1a@CEW;zl{NVYvPHm>wzLT60vYR0H5I;4eDO0`Lc**T%HMd#4KayMxim
z_8CDP%B*7+XC}LrPV9AZ<@^xQsR^#S_h1A+ET>e*VCaG_Y``=aw)@&zPh8+N-dnJW
zw%hT7I)A=wQ-q%QGGO2wz;A$Z@~PY2=PLtmkE(!a_8e^-Cs3fyur5FW!<}1GaHnNX
zFWC4QP;5J((|$r$II45Qt!5VYXk%6fj0^&cI32%A`Z@7C)aMmtxPkRaNg6=a(ApYZ
zn*Y4|>M8IJ4RnF4%O{diMZyqCCOhPoxIc%gL18SH2cGe+x_r0(@*(L5I7>C7v2KiO
zgKE%S+6?;VxjVeG%T)<ZRn+X3-{3ku*S0^$)lzjD*&2^i#V>b`?j^Cj-E3^}VQmGI
zi<*u}b_Dq_H<$k!b?I>Nj-3xWlzw<VCGeh1tDqZE<J#3|stWM&<rXwP#SEb7V>f4!
zqPPx_6qm%#V}E$V$m#@iZE2uNZ*36Qz%*%FDxy*E(WY!kuqe#W)e_j<1zrmf#kpRW
zWWYh=R88}f12k@S6TSX2wmJPe+kgpY;{VZI3UMZ3s!@Hcb)jK-H9`C1eLwb(<x;#o
zITD-0YyaH^!|1N&5d3zxnok$bk_L=K!?kh>@#X|Wif?(!tzYkE39~-*_t4*RSIAqk
z>{qT0?j5G+&t3gyUyf9wf73ks*5N~y??WEuu{>~b2P<0q;9t(`)%q829}2-~AKjc+
zNuDR31ecvl?$4|){3|k%i3EDFxL|(}H6J3%t#jnE04=q9BTBd_Z%2G2MdU~(z+5r4
zyB`B$q%B2uJMcK-=UKMkhHr8$c;m{xuKtyFZ57;1JXIbykdPBBEM8UTP6gJ0flwpT
zGekb9;}=MPAw52O{7p!c<6jO^sLBflaV1qB9uixdXDi1(3$dpPYhg|&ILW>lq5rY#
zvjCSgZA>@6^Pg9r0IaZRacdan7z)JMDMA=pfdGQmn$n1)0<)k^+#daLpap8)KJ#%t
zbI_~Uh8wA^M~dCLsWa6|YFk2z%h+7wU19-r>sGN2NO4?W3qx@7Zpndko?o4LsF~&v
zN%nMZE)#=0h~isZ$_}8u8?x(1T?;XMkki)T04}Xzsn3_a0D2nlIb+m|1O_DIT1(=y
z6&JX&s?QZjuhBA?ngn?`ny7EXlTU-gFSpJWAi>ww7vL%_E2-Io{@1rk79lId49?uA
zOQ+T?WGMjs!B1KZ4+n#v<EoE42+}n>E?6F}qFMXCn;OA6k;iQ1JDHn*MUHz$LcO)o
z2Rsa&N<+|<&U(@JQ$mC$S7^9E+}$=<KHOC?dY9Nd2>kM0+f<eC0A`Jg4Rno`a-LwH
zrgeNyJx4~Vax0pV>$9D*u4G?jP7oI4bm6nz5pU(0tL?~dn-hfV9HmxmI!-*n9_&$F
zwsJ5y!oADb`OXJ~msIX{;c!=XBd5Bk$c-q9JBJLCAq_pfEeFBKm3!<(bzAk?H+4t%
zycxnzRqBBW9D-4t$=rsXd|(CeMtk-<J!(AntajV|@_XF9pQnCmc1+C`Bu4`xh)nu(
zxzgd98~B%~plK07mTv{_Jf2=}m4CLbTr|I+0||nGzT2NA?=I;&!JZw3BolI)P49&2
zBuV-TI~}1MOH9?3;=kD}|9<sJ`Pyt%-9J?pT4suB{lO}sRUD3WQ`3Z>EX?KP69B~J
zfTuK{u1WM<9VrJ})Ki22R6U)zPsuTY!ky6A%l$AwQgbf@cHzL_w=^}t#fMI`qk%qN
z4q~AQ&g!k+#I9aEw3BcPan~qeYTR4{hihBS_+z^J7FC+t_;w#YK`sxwD_E{t@io^f
z62VE86>>vAAme;Aa4HYP*%Glg0T4JW19?VNL5H@+)GUQnyykuRnLTLScDrVKoJq|d
zOEE;hb}dEuSoyeIk)5>Z!XD_dTHV+lN0hE{6K~*Dim<p_z%w5Q9N|!0`L@KT(K2`p
zJP`=WK%{1w%#8AY2gO@t#lX=Sw^s|5-^+#6jFYE9(yT$RbH`1=lmiBul;h(q4(C2K
zU)Z%#;^WNic<lPhIbj(C<n5ka60wrCG$*LqpX7EpnXL4;yI>Q{xGN<M86CUE8J{2H
zKbxtks!2Th79+Wu%eEmp!#n{0#iZ&oKN&NTvs-k3L}o>lCLVM{<hhe@%GZ_@*3-3`
zAT-S7b6v=ioEu()q8C$(LF?6=Qr&Tjj*0oukgq7;{LDAqqnp{XHevN89_l=>^NYk}
zM~-T80)28uFK2+b2nLG`%;!2ZS7P?omJBxB=KK;-Q717XR@-?pMwcf0+MID@-Wt(v
z7uV5Q`@)Ks+d-T<VE3<zw8p@ai|pwB-@4bobA3&^k9)bruF4?MUIhjnoKIzvl}t}C
zchQS2M}P*&M3a=4Cj7negbA^!r?4n6cyw22V`girm2~2`p0f$VT1YP%x(0ogyF=8U
z58tdS5<<#h6nODdi{Wq(V22_iyJF^ncXeBt2(vmYAJ@Kcc40T>q}K$01@ICc-D4;B
zhJ$3+Ve>?TV4ZF>tUH8gDy%~gj>#A1gB<)XXWy|(6Yc&eg=pw_Uw(rL4tWcaT&u``
zIN{<XQ=bmaOiSTvfER@`i0R;1V9IpeGs}7$4jIp<RA8+T(ZS`jYJNdVRJQTb(bT%$
zX)7$=Ys>jeZR3-{1W7K#{nm&1Z3h(A9SVKn;>*+P(C5O%8_j)my*TvYRG1M0bXnfj
zxXuA{%bruGM{RY_vV`M475?aU$XS$ifGb{V5HCxo;*!u(l_pMb+z%z$_)er$8yA{W
z%)Q0$)hB}_LaZY4uQ60}^mRG<6+}xrx8V{qJIrP*I0*VGkr(TnnhuSmM2Tw&<$j)J
z0>Pa{LZT}$a9F7sA{F4359CTF*B{aX!X^6Ib06n<Y#DSJBv{`fkv241^b!wW`#if=
z_mCvQEGV;H>Y}TsZQuK{e8w4D^VA7|`pe@k5RR(bm-DL^*Uk#^aLVq|Ar@@vU1@PH
zcW+=JP{Xgm$=7{zawo0sa{pX$eVWcZ0J13r8bo~be{=nI5v@rlAZQH|ZzZQrjShp;
zLj3fUTw&#porKCwp?BE7!^`oC&jh`d5skK-2!%Hd(Kg&+Pib}nYH*ZxkyhAcDQa=*
zZtk<!+5LG_7ol>|Ci3U`5}r})F;rPlaS~Lq76=ibUMc^@0FFU^*JSHhli@mojWN|q
z==bNiPPn!*c4brPHl$U0k4weM4RPh&lC2G$A=N^I!QGbEMS38fCsX~>6`lK`X-j_X
zp5Fu-NW)=uCfafzd@R7qrubj3*#?;-Y-Ed;9l<-DO69~JCeUY$)6RQJLpfV}d9$u*
z@}cj*nHBjhWDWZmP+)kx`w@2D%c&3Zll5<xl9U_VkE4YzlrCXKv}*xW?u+e>{nwma
zArzkKRugczWzHEcWp{oC|9Wca`H1*v&Bhla)Am#CQ)%_#duf0w_uCG~+Fb~9{f5s8
z`r=-8ung?*aWyF<)BP0RY_?TiZ`_f-eJX-Wj_1+>7BmnDmxFl8^5I++zkO*)&SOn|
z@4AAJD4ywqThx`E8n&bk*aXvvJUGOa>rWcGLC(P0eL0B%{SKh$X`#10L!T~z=3TIF
z!L9yg4B#My8|*+}*vz!ep%Gv#ytE}PwpLB^;OM!|7_@EXYI50UejWlWShd<)*GdcB
zNtHsV*hN(0XEbnF_CcPjQmg{J(=1|W|K8`7#He%8xyBD#_}f_h@6A0MQsGV(W$t}d
z4#GKu8%gufyFxFqoZPuR2Ujn00!d;A=)+;~4`t&dx@PTOTBtW!Ox0VrzWA`)(s3qo
zg9D2um&xIGD4*R`yT1?VnLftquU$57FTh`|WbqS*Dj9mUsz3`K-L&%J?ysTgWiSM}
zApP^{>{5aN_*)-PL3)I6ac|wSgm#YkYx2hB+PI{qVHQqYLNxDN`8$U!ZcAK|oc5I9
zH$~LN8^EtONDWG+gMYa7?m*p3<ur8dYBxeiZeb${w_Tqf6{?1)U)M#rWqov2;4?Rv
zz~}3Vo!a1F!0do*u<*m-b2wo*f)btHO^T&xCZ!$vv#__TaSZ~=j(ygbB{~<l=vJT|
z-{ln2Jgu79vE&)Y(=Dn)SBldoW%>@A*|ls|dY<`_WlGj;`VbR%<9aiIZ11ubCWd=#
zARsklPQZkmTJ1l6Yt=RO^C`0}86B?NfXgo#J;2klVa>{k>OMr2+o7=X=*I6!NgtNo
z90EqGIy!6iP!tCpPfFrC!Cbh=vKjS&MC`@gG~$U(D;I55{x+j?XLs%B08ws=xAOcL
z8`L>eI97D&=6;n-iBHf!M-X*(Y%PwvI<pL{@QWW7CWz8Jk7BJ1EF(Z6OwHpdcpO{b
zl))scuYEw*mIL?Rk<|zgCEG58Y|crr%W-mpdF2Y{R2bl6EkaQ3%e4^l;=uGjEBvli
zsuCZ@sWYzOM4vWAM&{*MpXQ02esz?!jCC5sji{hj^b>Hnt}t)j%(4Ra1*b!uEUV{j
zEq!ZdK;q-Vcxuzi6<*f+e#Qfoz4ux#Ts~jk=G&zwK=QRXX~-38%4nR#KrOP5rq@s}
zn-zWE>$Q~1+=kie=+7g*oy-6-^GzY0v#Wu9C`iCb=cwOfIgj(Dk6C!y^8j7|Njnc!
zH|@`lNy{QR0T%8!U(4%3`{-idvcdtKF(*@j&|He;VC-?~oUGCB8HoLkB}hy{g?*Oi
zHfTcFvjzI>q=9wE*3^%mr#_-XerHfG#p1Y)!;Rynf`@&G$6n<EhPx3dHag?WB3%az
zK8$(`{1iiMwN!V;rEbD0Zonq4fYuX-_1ro5W6-odojU*ASrC<RRwbU3o6o0++8h5e
z*Hx7#)>D#LTha1x+^Un3*%fab<12n=h}6L1s7BaVu!q{6mN(X1!{OLY16hLxIEpHF
z)fUEfaWZxbD0WwrU+vp^;7=8?w`g@#)2<1k@n~pv<r1*k=a%EZ5=o65W8Yr<y<2q?
zHa)Z9x9a3%-r=6~kzaiX(q>TOV1g@1x<s$bQDR`2Exx8ZNt;Po5<(kHgWuqx|E1~r
zdE*<Hhi3w7=g2As>evD)?A9{RW6XV@iV0Q^16gxF0EIfqrdyu=dE;3URClkzS_k+i
z*Kf8&M<3+FK$3{3d;5JY-aDYDRhI%PN)8YKPR$<q!4{m$Q<^^n#oYQeb2w5~tPp5+
zx<RYtZE+HmL*UFO95d;D4a&+f8(khljauM~@Q&RPG6x->(v+f^qjR2|;s`QetIH&`
zxMmI2bx%rw90U~C;fMqL11AuAcrumA+hJ*LBnPTWiGWn9<H9wkvtisP2&)wu?aFO-
z5L3iZR|?molerZ32##QiJ%yJ9kehn|b$zhaeO56F^l#4-tUpC6%6L|L^BTvI5Jm??
zHg!jzte=1`=}HZRWFy%sCJ75fLL`Dfk*LA;Q#|IzHzAVvbKMHO*!22xFg{~Ze8-7H
zg4#<gC)gLSTFMgSlt?(0L2^d@P!okW-W53~?QTOM9mlxpsT+5D-Z(GwR&|xD*WIkv
ziAUlD0CPw)G<_efj@jo{w8D9pqwH{B<rkl}nP#8+Cb7Qj{wknBHTrN{f(U0dju#1w
zBmYETRaWn`-HJ`R#ub1AS%(<7F^4W4kK&_pe;`Fih<6CS>rzf>DcycTU6pHs!>GKm
zpBG>I;#oL=;sPR%^YQ84LnKn#nb-+vuWm`?WAp9pWmvy+$Hyj~wQG%<lyU1|Tz&vw
z#=y<H&uN#!goiwB-UQ;O0LF^=fH-k}oJz~2W@V^cSp@oacdL`PYv1LwYNI~JvYX9j
zjZ7T*zDY^{xcW9zi(=ZBGcG+BB{jU3kWd+aa#un<)tl>KSaXjZIG;4LzMdJvI7RMU
zZ~(hZK+WdcZBu9m<lbp3Cr%u4(HQ#faVRma$4w=Gf7%m$nTk7*2g5zz{Zlug;HHP}
z8ClJKx5sX^W=Ud)gOR1^JUlpO(A;=0xi?*x_U++R&eg)r6c-vEW+i0~6_wAn)}esF
z2LYI%T2ecIX&-9SP$A>rata)So3c$i?EBeYW1S69$dR3j!)JfZ7S-3jl|8Zhq!BrB
zTxs7r#JLUlC#3D_jDLPS6do?BZ`SSDU1;zzP1@RU`m8Iqz?<KkrC7dS2f6U(MDiQ=
z>oJ8sROP(gs=8sAFVhUt@#L?lcz+(k@JhPY<Hckjc@j+}`?6R2+xK+>I&b(IQDt-6
z^mFyyqXvFi@Lk%=giT3;I_QH#pWSemFggCpwc-=<6kU(hhhlullbs?T^Bf8yznXi+
zhrlzIw=EUAk(POG<WOzCJaW0>@uu*+?FuO+2RRn0epDQEsB(s9?Q&_mKniOvFB>^`
zP+8em#Ww&W;7r{iC8gSvYx;eB7Z&tDKZCo|`bEBl2bS#0*%D95xvI#ofY~Oe#<)Pi
z8EuHEvsFIUHcz`2YEW!Xo5Rf;ePZt`z+1Bi+dUO6=&v2nV1a9S=cL$^%jQE{AfU9B
zl<*XZf-zTTLuaVd`OiV#6od1$C)vvDa@_|IV(NRu_f%4{X87E__UFg0$=~hE(sx6v
zj)(cV$L<J<AEjB&B195KN7qb9$yNP-_sxY5u6nw7nckqL%s_c&8_3jra<cfzDSwTj
z99D70W`~WNss;vsm2)&iHa0PJ%d_Pc_GQYQbm+9o&>>BaNvv8YbDK`Zw|jS&;Lr?F
ziMFX&08q8)6xm`@WZYL4#eG>mU7jBUMxS|vu9mT4CohQ=<DFs+4#;E>S?}kjHdkD$
z{W>QtHy4|JSFO75EP)BF0iSVWmzIg;nIN=J?d+0f@|;i?p+G;@gLhXCk~6(T2q%$?
z?;R*{m9I7Jq08T?k}J9So2huw-~izOe<7-6LDrXq0=^GurzP^^B)F2&_EXn{`&RC5
zRhz%`H!Iz(I{vLfQjxM>?g_a{lU$g)?UGzjAB}dL7jz_s;L0nxpH8OM4DR{5h#c$d
zQYGi|)jLp<xvw>_5q~+mX-zc<&+e>~Wa6?19`F>POeG~~mHQ+@9j~eul)MO;f4jN^
z)C7NUNHrG&xPrYwB`kF#=Em88&79QlW*{$YUMdK3W?pZcKk35V+R|_#s%x`zD-gwp
zKL~yWzyoya`fw6p6cyT4CD!`qS(FE5XOOO2-p#xM+jOj@={vn!n9T6kA+rItO#bub
z72qM4U8CP;&0pt{5#w;ACe44A`CN@EzqAb6A<msJ_2j1c<(LE*<5)E|g-G%;3`#qE
zAoDR=dqxqv(p6CkdaZfCJ##JA0t9^8g^8)}h?BL%Deb<rfmSNCubBAMD3ez5Nq-YU
z!V6gOkpmFf$fSxcI1LKw(79r~vzlgka2Jf1EPRcwD~S7T!=_Gsq^d}AuDK|saDwj-
z1!qe<6>|ZGTp)s}NPkyia_qXa>!Qhnk*z-lNznnPBB$4fzP)yx``Qa}*M@k_jnob7
z*jz-h=@D$u?b*Gt8n|0mpH4NniDxzCd6uV*i8ZyxcP(0(S^jhgXK<Ij`auIW?oW3!
z8!ocjPvKGIt3Q)LB($aSaUNYK^j86GfJM($A3Ur+D?y-Jm()_0>X;aZ@z(xscS4GA
zvN>-Om%-8J>N`fGs=sv{H@w}vimHTg|3<7)K11x=`>hbly{QpZI7_CqynRmnxrBqb
z<IV-;mlMi<0xH`c*2daxhDZ{f=m5Dw&;&5hUl2h%%g&$T(pxdrBlCIV2MDIGPRzk&
zci1y=>;jyQ?ATLF96z_5s#}UP=B8(?=ZxgW<9^C7E(?j@gZrK@J*~ty<0=qP@_L4G
zOs#-M&~N;>R5n=us}*Dw^Mq61cw$j^FXu_uAznJ@9WFag_Z)Ilvae5G-~p!7O4kZt
z)(U4+&Q)DsA}+D}DL->n$E7BN%WwU!%22;w{p@MK)VkV+G*zL2l0Z<7@SZj(yhKCf
zCQM3~V{dwMY?|0TMIY{pGvL|Z3HJ0wxU<L`f`=Vypx#cS?Vv#y(p<F=f~63S`)NpN
zoJtmn);Yp&BeLUEr+s%s``F>^k`HiSKW`OHixMBFJ9-CEM*kSQl!|C7O8;0`+taIV
zUrl#Oj*}FfdBBHSoR_np+V`sT9g7C4+E|1mbTyH0>pP!IMb5AV2}p3&?LEkQ-=*J@
zEv0`F2yi>sB*I1-Rk1lc=H2x;fdPToM_%=1m)@R<q1(|_u*Y$RDjHE?oVW~mj5fIf
zu_gB&wBk^LvP5?Up=;q7gw6TvDy^Y{8u$cCt-g*cUoUEaW(!mkU((hNk7`#W<8voS
z!n|%i(`Ik(;@a=MTY<N{@?aCroR%Cnp#}V`&M>%@K&H&um90q-?C$2EARNo$jaIw8
zwyeP5<A*hqw$wxEGj8^)y0b~&PtAM1sW~{Y0lG`gy9rI)mtredwOgc(mb;Su+`RVZ
zKR^BeJ3z$0fXa}N;1dvz!xc2pcCo_Q!S#Clj4Qe0Gf73RP$m^4K;2cb_0Qc*7PqE`
z)!@84eQ8OSGN=L=__?L2T4$eR4&n<Cp40(?Rf?)Rh;X_lWVa`jtfS#4{_zQbanACD
z<w$rI`)-|AOE~40M_U7gQ7Bgy$_2+(9Y%GshU@<Ml>Kn3FvqE4&H2xf9#_h;!?zp*
zMbp&<QiO*0$}NQGn_n(StV1(4QgubNv!6Ddsvjr~Z`QbUxla>Z71A%EW%p+jtd`S1
zoyq11*TMgrHy4(-c1Qvqvq!iwr)ytkI_d2XrR?pkl7W_ZyqevK+`{jgM_5zZa2wcF
z0YF5(^pw|3rR$bX()wKeu^b@)QBViFAL&#{LOILbYO$l_KrvOv`Fv|?IVl-NhE|>S
z*|AhsaRTW!aD%nnmrg8cDX7x#P{uf%XU$@M2Xu%_V8Nt={Gmzsszvj2^?b8L{M62!
z=mt&%{dUPsL=x|1JX+(mlfk1kLhgcE&cN)UNf?lDxGJv_{U^?8M#gE{x#F$mFE+^@
zP{O#Afq5ecahfHQTs%UFj8dP;D9}pwAftN%+OS)Bcm{bnH#I5Hl1)>*{7AGU&{)Y)
zdrhZ-OrFjTBdN@-R3tdbCEc2zQH!z`xwN=|suLZ*Tz|WDMzz*?ERlu^8stvG2n%^u
z>!Yq2M0J19QASnyYjEL*i2Y24PnEA5Q7dF<vPC)G9gL3DcsPsDbvT7rX@pZa^^m@*
zo;&|>=123;#Uk=`v+l(=++WX9rmy1LBowJ<xt&`XTH0ux#kapN-Pj#GN)T&rmtxpa
ztJ9}ac4!&mnlL}zf$Bg=wGlpy%#QQ<k2JG@CIWbYDw;T0kZ_!)JaCb8Kd<f?hQjjG
z|CRNJ>>hgVGMKu)ykUbqNZ<4h*5%~hN?bTK%gM{``37F@?O^mnhFsD+s-{D0yKzWK
zh?0l%JH(=4+hUfWN45f1!O2)qGiPOfqpPym+=~PdP${~<vcCJuWSC7+8wUrrU&?-J
z-oVxaVJ-!Q+7yORl%=W^3#z|eCH{a^9*Bvkf@G(QJ61`9ZNQ)$#?_$!&1#eSt3?61
zQgy6I!%X!^aYneXi}~G7)qAXy&qAzL3<sQas!_)OEQd?JIaDX;XPGxrx0>zemGwqT
zd<u?LzP@94{3EEh$Z1@i3qM?e&I)0;13_}>I#LjvE^{xp!$R*B6-?!@eU7WjBRzF>
zN>hI+s&Os}9QH=^YP>eCmL<{6hE&nYOhLVCgJ(m(Nxj}m=YllvdU@lzw^wzjoK@QZ
z6}$BdnqtFHC*gSxcY-fX+)p=B$kkjBN9ehbpW`}pHc1d4IAeWLyu?pW*5|m~r<%l9
zF-<RjGr!XTj0a+BAa^Q)>^Hg!q+r)I;j5|=D(JGp@H;uukEWABE!uy>N>XalWlq0x
z8o&?fSpZyFrTLB<6JZzNjK^x5f3XQvLtBphCT8l#>O>C*LpQ|X(wB2UQ0kWUgZmKG
z>+j`QGsSNFd_JW<U|>D<H@tL*Vu%70NSrRlM0%YSqgDlemBT*|Z0P0kA3nPAg$KPR
zg8*C?AoX9(JsH$l^p|LBUm)+~7vABWT`JaN!ri-}iZcfrAhZX?3iW0Vk8q7!0BvgA
z9n=onwfsAm5C{0IjwB3={7@pzHT9+?RBsNujJedCK55zIuHAX345xSvpYA+eKBi-4
z{BFVnEPl5d;CLHJsw=1zooDA<bGXiuszw|YZV>a+<>eqKNeqqL6=w#yG^J8?j35ug
z?RlCCvnMqQNDVv?-5qqcOZ!*dT6F?tZ1b_CK3~d|irrUb6$lTvA7PD(@CECd76#xr
zKB_^fI|^Yp_MQE72KVVj55cSSgU<ji-xS)?xu94_Q9%@d3ucw}5Ivjbd*Tn5rLV}R
zdghldvOpjpDw_4$Hj6|3!Uin`-Ca&>ldY`IT_HK%YpFsj@2=)E|JHT3dx_T!l~z9J
z^5Cft3!rz9b#ekU;`0lUko1!+xx<)Y(ZvdiWeD(GjGzmM*RxvZnv&(vi+nuW7fO>A
z=itJ*th=i%VlagaHr;@eY9bs+pD3@YX<wn~xvHVJ%4d(ISmy7Mkzi;1R+3IuW}!lF
zEiw_UZayubgr|9XZx4z8ey_Eb<9bZ9?73{y0<%)B>Gdp+12&^4_;o<xc;U6H)N(j6
zQ5BR@Vs8?!ET8GmO_UV}s80~a^AJKj1y6olawJrfh@lWZkNi4x`n=qR29$IKa2!C3
zYo%-J)&ZU}Uml#v;*4S++rP_vU^r_aq?)Pfl?%=G;B=wqze*r9$X|%d6EYOdEHrtU
z?ya7WyY7+7EQECKTI@RPPBJ>TnmD(lgd8U&MM9Y3!Li>U!F>smNN=|DbM@y~veRxg
z<@mN|Iyx|~l6eWqhw5LamGR(0ZUDIl<z}Ltx#X~E0lAQBb1|~trF|VF52ufvvUTRz
z;WsPi#d(mf^I3L-n`@>dFDO*kY_&yl1L#~&<NdNgT-{Am5%+C8zPU*U3*{`>KXNfh
z2giP>@}swo<^o|U^hX|uJ6WfLvxCR-jI{$6_4u%;d#iqU^69kM(u9-8vaKkn*3cy}
z1XwCnWFJ@)yzop$I&6N3dDJQ#FMk#Q%v5f*fwjpKC3!bb&Uw_*ChS#3cL!aA%Bj5d
zW!ow7x6t#9p+GO{D76ieq`QXk9>w^yD?a^8u#Mo$-ONk>LvaxO$gZma7#}e|z3&`e
z7{R&W^Cj@B0!MM3&a%$Eq(HYF(%&r85-2!{{L&#_PwFglZIujm-8(;vF?&&Jud8?9
z4h<ks<5i%!rA&1aAoV^w+v-Pf=Zf&3U1)K!`P+S)oC<|fL4(lv*VVtH%XJEX6Q7G_
z2NpBVY0u_TXoE0*S-*G3oq%F&I*+Sq%C{X4^sx#;2IBaFOUaJ~2594ksB!4J(yUk?
z>T&OCfkd^?8$r_s!vh`)3Ec63X8OweKg)bs&rNP17f0%Nb2)TL*qjos7dhtA_UhJm
z9^iI4PPfpgE_waw%4yBeuCUBBg5#Tq^8Y*#MXt%EhqDq@Ujf}3tXmUZdfK=Y+u*%^
zj%(ue#<@5!Dfv}S2^<{)yk`=$?au4qmytdAneG-OWrDOsmc_M8Pcmc5!L9gas#!W|
z&h;j)ysF8Q2z5dpQ?6_Jn!jMFn7d~w4c2&#dpUYSsOPf)sN@Xk2YOs|Fn$64`?Mnu
zAXQx>U2BO!Pw$NoAFd@relN#ag|Uw6b~702mOa(+9Trrj-Mzj(v`Hf7$7aVvFT-O`
zC6Zp3z0aY2l9m%^8~i(do~m%qK`;def?OM}=YNkYxyad@s&xuXN%x4|y_@7@+}L=U
zTK--TSP3$pzGQt*FU9GeDVHTkAx+{%a9om>dOSZ}xRtndFFI-VtQzw!6lk!q!X>jb
zSs#f%_ch2o@V}-IS$F|{;sKW=I>$1VRRxxUSc<B|72c<rUt21Gv-4O8j$YuvRqXJk
z4|(E=C@5{<wC4<-v{0ufRsec8hv4h6Otx-E3gIV3y+`0vbX@!?KOcIL)N7vl)4x)Z
zJ>JdwGX$0&Ufrx~y#Asr2k<RA5oz%bHcV_jv|60XA=zwrCc~k0P;981Qgd))H*`<U
zg!J#RU&)2rNDg}ZT{j06-V~Ht4-TF@Lkts|y^0m&|NkJ>0j?Mv<*ZzmHh<w#*n}sO
zgoQ-$8#>^SOLOJ)a%c1;`e|-7bQk_#eJ+)A@X1{17#mQv&Ksyn`~;87SCwx|EfrlW
zc_xs_)+hH+p{;z*=WZ6&;EN8{7O~$7s#?VJ03CBY9W){7MjlL1Ls{+DizGujbh326
z98s@2hitaWo^o>ICb&AhHpqj9La@BzgzdFTVLe*>nr^XMIykR&b1!~1Y3BGkxg@1a
z_h@IRzM%BRVbo_3+Uhnrc~Eyb*I_S}fkDVc+3=#!vgQK3;I3Po^YGiFDzMUN*B>zn
zy+>Q4+)2eifDC!KE3BkY^W`_$#Hq$f!l6>7Pq(Bi^WKNfxvFcvN>g>A{Nl@MaEP_}
z1h&_)MTcBn&!K=s_6b9q&h_3EMwe3k(h^l0&w9g?3k11w4qFc*8F$rlHrjIpoS3tL
zMn2|oDLmf6LqMIUuP=h}WgGy-{4xh2#OrwC1W6`HUuSa(aR8r`=l~Ie8(}<<aHkMd
zky!%t#nma&<R`LdXAVCK5Q3%yc95C&&4Hyu7m1^|>^+?itLLG5thttp-lJvs4{vCk
zOR|1$!nN`}mxm*E%d<S%VM%IJa_(I8K086PX{&mG0C|Yz;KCMNyRTzOEj-ojXfF`>
zL-tqfev@yBYnzTE&MPlT{f$%}K~*GFjYL&U=I!_PI1Cw|pe=Lb{OEl3&uKpEztfcm
z4=XssUD2pQo8GaV^Fv;Yl@|o1QVLHYtK3!IKDGz&^R79Vtt!o>U@=(w*SJ2fnM-pi
z&N*#q1H05x;vp5~&cLfq-aqa!U4c0O+ofde%Wzm)9sAt~89YHHIhC-{>k6u_de~)q
z$<+y7(6N(Pc*vVFI$)9WQ%MDi+PqeidMyF|a#>MmMio@@eN1~(KT;F~cCqaNlF$T`
z1ojjo9njy`{vT<qzOYHy9YOQW4|T!Fa@|QDBDh<vn=;xN*zZaYR6}!e0N_g2i68Z0
zJ)4yVVLh=ala7Ky1mMU+ZOkSTR1b-lqoBmvV^RoO2Up$FpT1TN@UFN-3~u#bzxmW9
z3Hwa&2W76$;^ef9pEJV^hOQF437~G=a<^Ue1M-27R3>`VzQG53aLPj8OVVOj+Abz8
zYjHTXoY!rMAcfP6sufU(x-W5p^?`n{?g@rdEHOcBUtC|gzGIWJ-6|e&qPj|&WRb8f
zvlwEf7Gl19$M5u!By`-WjlCKOF7gW%Okd7t+<WF7Ul(s$t+(5;yK=idtp<c@_Z2E6
zY1#JuS*<H-xN{4pE!Vg22oa?#Olpy?<epayXik1=fkL>_52Q#YRdH3@yoIIT4?OIT
z#)i#rSARH%JbES34Vs{}-ke@v796B~s3L#wDtfN$>xsdv+*SMB9-h|)GK9?~V%|TS
zd*FpjqsHAHyrU}Wd+~mn2Dxr!X}sd#n_88>7DyBr4!dpL`_UA28q*<=;Lw^gWI!QB
zv5Ps}hRn`URt5{0xa-K_UMtVm8t!<;P;@&uK^FYE&eQusX$#Lh$+psMBiQSMwrkJo
zvRzi5K!r&1svC{UwQvvhqwLDhKPIg%G}gTK?YaCN2II&Y5#J2LhbC*Bmm~8tUyh$B
zQ3DE*yup8-LEc^txW~{5mV5g4z3EP()ccptLaoXuM#s^WpgSz1XB&6GSM`Oi92|f<
z6f%M#K7ikK-W2sYb0b#!cCYEof#~KMtIIq<1EQmD032pl^hAfC?CV)FvK@SIifW8D
zIbVJ?I-&t|kM7EYA{y%xUq#y92(jEDzPfyAtr_o*!8=8BLqzYdW|bSkn{IgfT8&+<
zb%gbCY<J||L*5EMcJeO(L}!WRgbs068`#enXdoSPmzTc(OOovvt~4tTyO7gmDg)i>
zxWvEd_IM^&TvZXR&{8s81jR3*_D?Bc4+@tlJ4M#M^^@HoS*QMigs2I8TVgF|IMo$~
zXU1FefVmWb!uamQ5huWeyWQ*Xk_=A{uV@nFQnz(z?f_H>5^x7C+?U_cZ48aUCb=3s
zU>Bf?<)Wv|HzUV_@OtRisi^)qrd=-gYP+5o&LQS}LPQ<UzZ9mF=#?soe6)nz%eY2U
zz`f+{pX)o?w1jb}xdmeaKMX0ncGF!~7~Yqo_?de~SZb~xS{%EZs|wc>7Kx)=J)MDE
z?>oS_OJ~0=H+FY0T#mU_lO>qJkM&g8>>OUlRC(ZoeC+<3OIuaT{`H9Wt_K8%gsXHn
z5%{5VcQ`mTT!2lZ;zLE`${SElh2wsxeXz^ZKNvXWJe9n3Xcu6`4a*<^-Nvq?Sos39
z^3AV19`;SOJ+QN6f5xTB&)rmX!(laIM<;83FO_XYhf$zo5Hl43i7s#?JxrRNF+P!g
zKSx$7oHVT(4Ag()QkTy`Xj38RQq~yob>Hp+yHBF|cXSfsBK2p{7xyyj1hXAV`H*NG
zb$S#8iTh`8Q5am&(rd>YLTZ;ITM;h~K`y7UY|*u?g>sd~tfgH0;h6rN^jPLfoSH>{
z?rheG%kd}`IZ3C1uSrZHG4T>Ak+esy;B<`^G~#}5Tqj1X6~l+(IWxg)+xQ))4U_L1
z7e(l%aMf<P9E8b*;nnJ*sm>9(mH2R|3g6&#qjMl~;pntUF!;Rj!3`%G06i7#&;?Cz
zLB1#-W{n1`#po<`DOzR}ckS%24Hs$lN0xKW>$089_vg@k1C+3Cb0f)K?dkYlS9MVl
zKu0mAUR6NcZEatJUBEzm)~vdgV;-MR8MqW@@fDJ|IHm6U>RjWj1H3Uh_CUN?g~QD}
zvGbbvLYkjLr=HH!HR4h4kRXdC&A(jzP}2X!@7kgNlVogHONwV5I+Y!cad9@9?$(B`
zbSYZ(woUPWcxrVhj+U3ceqPJ3#d3zLzB~nIm`T6)kG}_FCC424e#0jfiGkP^9lNxs
z=-?i1HG$*&`S<qhvX0uv{0EgDPuE?e?vM(WIkT}TYxv{unV|2DNAIwZFM6rV?)H?A
zX(RFksyXWYs@6-Qy=upVr`?W-stybJ+!TBunpuV_f7_4x%L5L&f^m;h$!Bp_P_vF*
z!}{3wT@puTB;Ms8AAEQI>EwoilCNdgbLca8>t4SGMx})%)Sq8C$ouY7!m7+7$teI0
z^|=8#X!zZMOD&e44>&A0`_<R>5-2EiovXxNv~!PM6d2dJ|9rq_YExN7#V)$aH#P)_
z&@)Z_8<(nv*77ecj&LgwI4;N24_U|Mwc9iu3B!Gms<r%oe8BKH6YRN`86g!K7Hv9m
z9BT5CuvQy2h5qw{X9ZDamQUM7=VZ0!{POOR(TFj-B>u;XNdpdkXkDej^{Ep^b6e^l
zVmW4bN=$fH<>v$D7`g7q{XThO(1_?rE~(Of`KD9R-K{qN_<P_6PJhvR;D+kdY5Om5
zrbWIEOv)`eoUaW{LR?<1)3<Z(hui1F39lV|1Pr^Ewyu(s|LFm5iLchl1rx%^!4WWo
z(|HoRnT->YoKQS|KBx^SrND=#@;vGimYn9Ue^nLD9gXzO3H=!&!fJu*l*xN=jZMV9
zlbiXnDr<Aecb$lTK49Ro(s%(NsX9xkyL)8;v{WHZ#1E*I=43xlFp+Aw^fQ&0KR1V%
zuR5JQ*J;r5AD^Hf^W|m38{u&r?FPz70(6%-)LBv<7vQ*b0j_rc#~2KuzLKJPyjDj&
zPTiRk*HpK$lbo>Y@pb<^!H1K%x|E#S{Q!=k$$U=83xPwqbIA#S^p6MC*RI|gET4;S
z@3lC(1p-!}*ZP~8to?jY!@`~ZWjY(4_5L*_D}p07YkTFA7uVv)-^&Ct7i8<rpH<Bf
z2&vi-+;AvgY)!7rvAtIgG8fMzp>%jZb;P~w_*c=CmSC$jc>c|f{%<ijsVWY?$#bc=
z1G3do%_VRVBCKk+!vc=_`G9pifMML~me{-<!H_G_i4%~ZFnrrv`{M!g*|vEoVh_Na
zoLP&~N>Yv(b@>9go-pA*UTC%dy@ub0_6_-V03K>Et~j{&7SN9}>h<%c+5UD7jT}*I
zkk`KJgO##pGU#?Yn^P>WMX5_YFneFQ?-m@ATCs-;p@&2G@U9Ce_a9HN(vOZs9%m>=
zg2ZTi1S=^TZUNSUVi8(y{Y-LT%3*pczS-XI&cDFB*Vr4Nx2sCB*Dd{gz)Cf*okd>G
zl8uW_QH)FV13T4<x@kTA^Y0N)er;Zmt4Q!gW$^9N$ku+_rZY`&c;IKuk9-~{-GKg3
zz%(>8jH-RkT`>hG+qh2UrQ4^lV)S6^pAeM>)u2f?GT=oyQ(cON^>20Azr|ojxVJsH
zpl*+VGYE^VL=CsedLR-6{mFmEwg~11%IgT#>^-}-6odMC#x>}YP1M__@XuIkskS>d
zyb)RE1-*tc#o70MS(ZNS4eLewBSiQ_u0SXN>N<d%=e3Gn<;;BVol9Rd;r^K`fK@lA
zo1Yj}^Y!uaV3mZ>1IjuK)WKf+_XImCYqPBx{PL+5=?+NW-1AX~U+6Zu@Bi%q=dEkb
z?n%&(LJ4=JlCF)byq|N-^HkX;{X7}j)xgVEm}Okv=f%h3qg;+`4k#g5GVSEM&))+E
z4Ch@NL74BB2DlLH#S0~){4&z4?q&b+U?qgA+iksraNKvFRU1$~B1B;i`l0vy6Q_r*
z=-f%F(DSdY?WJ%Hy%P-yoTU`9C;HnAw)(A7s0Ex--6?>pBv+%?f@URR@)frK2+xR>
zYL({%<X%R|r;|zn<N%Acg4uY|lPB~uG~5<VAY*=OD3X<OO$amwy#^<9mkhT42aW|V
z0DG>3>wjB-;326ovE&Yh3oRh<(cTNVzy6*^=j4G9w6WR4C}Ui69sQxkMIJU&$N2eT
zmSyi@zEX>lJks_<E!hZ?RO4cIKtJb~kT;y=h}vJR@x%+TMws_%5<mD{O3(D{XzYKC
zy@J@w&mGASstE$ARsG+)wj*2ue!eaUKfmxyPD*Ot*y?4%$z5eDUh}RbUUtLTFz^Ra
zDAAszyD=Lf5v&4eaqgS{qfeX~+(h#D^QJ_F5{O#csS72T<$%s;L+U)Wj&_RO-Nzp<
zbUT*%2d6k|{RcKsMR+q%=<n4WJ)AYZ7~J8|NV%beW6kXIVN!*K)v7<YhL(zu9{(}9
zIhx*<E(0)6IpU@DKUOVJtELLF7<2vsvw{?e6HZvOzn~R*YKpdN_68YDF1C&>{_%jF
zH4BRV=;5e3&;R7R)LS@JS0;O(^Zbcc_Iq?Fxdy=yn%hN-;ygyVZ5T%nmpcLBX9!bC
zuJ?WUV*%vPjd$;8xbF4$?ercA3|{{##dnwCLTIsS7Ev{w2DK(9FtS}Y#bvZ?|8Ec2
zE1nd+uQoHcQ}t|Lp$j_Fv3ohlzrAJtclC4&y41sihK*@<2WIeYG-rfLRgSbH`ad63
zbc-nqwK#99IU95mgsW7YlvL}6WbfC{7rH9RnnJ=YqqC=uED%9Yb*vm?bX9PM^N$xA
z4M+PDAh9ugUlQO`&kKzY$*Ea8>-LSoS}rx<d(St~N0Tnn+C49|E21H_DBJ{k|Bn<|
z%}d@_SOR*47uV0uc*c3n4Tz}uiwkIf0QacifVu<9xJ~=(Tb5_kR+I{AF1tCO`o|ZB
zP6O!<A`f{HS^(+Q_4<h2-5c#*Rj&RcBwbajKn1n*$|>ie<*vX$2fp3vI?*iWKhT5r
zW_k<X{m>lc<l4Cw1Nc2%H&P)yfIeOWdSRIXE7`&Un?w;cSwNlk(#ebC9EXj?zfH{i
z4W0!}sJi8t!VmHN`R3q|P+pjBUllf9{Ld4moIlJm1F3vL4RY&tfSQ&NyI5Tf1*HCg
zM}@2E%8LJT(Wgek=<ZbDGFSnQ1TB942oX!a#(iS124FcUq>y1(T3U5?+|m*M3=z(A
zI02=96c}Q=(g`0^YWoIA-&-}{15#cgqPf&~)EMd@BPW}ls{Mg-+U1ypok95he~iJi
zX;Q+eQfEeu01`mcTjV}@&KdBOiIVY;G9@RfL)vOcfX)dP-uHU@bn;!e%l29-pX(3U
zbagkBttgN!RA1g*wNq1h++Nvu7|oBLgl6p-12o+Ks!rq@SuN7WZ80!y@=mp&e!dvP
zm`>69Km%QPv_O5JD6qEl<q4C_(Jvi)faV0x=meqdQ&oy4D(AOZ{ZSg4Xg~J<h$2W%
zBXWq~g2$a*jW9k*)NPF_u(cQU(|*FH=vdp(k<W2F8_^boToeHFS|8)g3>U%wIKkVp
zo@|;P9QLc!OG+sk{ci}`eN^RZ{(yy!68d~9AJc)?Q5;d%%_urneh#%4o%#7mFm4?I
zcY>NW<ITIE!TAJ^a$i+57=)zP0wj?Q0PKQygUFK_Hp2C|R0Y^aJ$PeEyVd_%MdMbv
zPNVLd<F9Ly;2bxpGv$2pySM3V)AjR%=XsJH$gN{(fS=Xct~CL-yX&=IPM&I&{AZEJ
z0T0eXR}|jyQ~e@cdkxX(>%NmlM}HJ~00g)C{8N=QrS&<^uDy{nqe{IFPTki}c$ZwD
za596RttfKOinV9mnH;Mot1j1`cSs^Yb8LbQz2uO6C5<a(9)-qw`QDAt-v1+mlN%9h
z?%18aKY;@<O{eKp2UelZ-FhXPe|~V1V%CR*>|qb2FBND-qz|3B($ZfeGyRN-u%Zew
zsnaDUcVafR^)v`kCB`Lb;2#nF=Z&$3tByZVbO&m=e<$V3r6<RsS5v=`pnsx|tY3-(
zB7WR?ME!Bx4I%=LSOJGqJ*#v7zR)$u4fL32J9JnBjm8Y2wn?OCH!L$2DE{BPT>eIp
z-Gr=5e;6P#PI7ENHDT@10-4*toB@u&ANW$?zp}e#tbdEsRD1Um*X3#lLF_=B?|4Gr
zPQZcd|Mxh6`8+Ahs(P~oM|~0;aP~jSp}g>>6wzsS#G7=qv$WxG@TDQxS)7>K|2Vm!
zUn;2%U~|c&DRnxvT>~w{kJOlJT1CDa2*UdN0_*CJ2qRYfBm?l9Q)ZAE@WwvF{kJWf
zzcRSXCG`8qL@;aYOB$`Hvb8T0Iww*xRO^qrDi=*rRX(tSeI%W0xCNM%=Td29hd1o?
z58Mp$fy$QVP=9o={~&dYz=PtgB>o0m4d(naNo~Qr#`WYYJ1PS@S1ju4?w2a3t*6E)
ze^k#hzp<-mc<<yRJH6Z4IEi;!ii`ukdV?m9*8tshtB)R4roY@U;0@hZbH^h&M#xLy
zCCu@+(WbvW;KOG^&L-~f1i;O`n{wAlyf+V&WA8lcKNuW*Zye;&=x{^5rsc~07^=}%
zazh3{><aAtQ9Ww}-^lsPVdzSmm5&6<9w4)%2HSCQMhW3Rlbgy(+u?j2;iwjuKb9e|
zU6X$9YpGoo_n*Iy+YPha^^FW^8Ff!541z8r)n!=FEY$E7`c9%-KXrrwRV>jkVwq*v
zIr3DT|8(J{{YU(}Z<iR1r>U!}&QV<@esH1+t{e(iL_q03KX|V3B4BfR_$1_IlJVV~
z&fS5t8t{U)Zf@>#^{kj)!Hus|VLe6O`C_VZT24PnLYFEce>5qlbJXPCV~w=w6LE+g
z^71skz4|xl>5tIGLCj8)s_tS{L8qbAW+9dGIE!Rjo&Wx=`{tdak=?@}tX21Qbm!yt
zx~qRK6Ro_*_FrQz>3S#KmkA~!_$xiaAu6|B00NU>fHM;RXtNVF*OV@QWE0AclB^P5
z(ROqjD>5in`)8Zo)dJ;=x`Le7sUu+41Cra(Rbx>(;rx?<9YwLOHrJwG_O<Zxq14;}
z9hzOf6*c|Q0N^F4qfBDj2?nZb8Izh@oms!0qglLpxnd~QNV*xS!ls*4J)uX(y@SyP
z*-oLZdAVruU*{jl3}L&h-nX`A<+rZ9sdZI%)eE%(c2eOFSO)oVQND4#v-<oTMgnr#
zm74|fHo%fT4WGYvsGO8l-*hmO3j(uP8W71TB_Gakc>0g5zgGyYyTL-S9jv6K$=ZOe
zU9WeoM0s8H=ikdsLER#-B+?E7x1w^8UP9TyzilPxf%k@gVNI0t9X6hN(38+9jg*vP
z&zdYdsn`E@aslrD7k>Kyd{aqdx9Y0E$<dTq=K02<$jzKx=rZ?f-?j4_;9xE(sqFXc
ztoK*t@)AyyNh9bdw?X3IIj*L4V8OC!Q1@FC1kyw=w^ZQw2co*;$VYCsjs81GM-Me0
z#c6tn@0v75QyJM|BQkJVp?^PPZ3%Yfd>tHDGj16-G^G%MV+EY3RUT$@1_<(%>bblI
zK|4Qg+OHAa3x=HR^zF6@6=#6w9WEwyaP*;*T-`tzc2$VkDnPw%&{%O08WbQ0n;er=
z>Ue@vBSBrYX)V;K?C1s$i!-Ur``>WMAFnV3-p1xy3pBf5)p;f|p~j!;W)~-MFBdGg
z)f^(ytCrFnn*05$-gZdp?#wX2#BJuAQ0nw9snI)gk|@?nlX6!sZ+5Hpt^T+RjdV(4
z*aEo$fD9G|32fKUbhBKcY%05}Mte+RG_)SPS?n79phmG*K~~oLhS#7+k<DN3#i*&e
zOaN@xNLCkb1yOCG?k<h}el(MJk^7Pz129_HYIh@)1arEQ!!z0SDX%(YW*FvlC|!k&
zFOVcy4Qr4W@5{L1#-xRlJ;bbBy9Pp)TXLSR*egm|?W+A%w&l-TSe?Jz3;2LzsG=^o
ziBDq)??kt3#@2@{>YeS%omC#<+RsPtHW>IQIG*C*2N{>|xmhUF)s)~6_i%0wWp>3$
zW-Mwiw)Eo`3bl?Kj<4%NSqrAc1>xI1kOFOh-GhsxtZ2LVK)iCH=FcIV991#oNl!_0
zR6ticQSP8S&|NA~xoP1NHw_l}+(rN5efvHC5I7UJc9mLoZBpm*)EH?_rxJp-LF?%^
zA#tkc9HvW;5V)6`QyqGj@ce)z4H%(yb=@7(B+Q;1=4_ElvmNDgjzf>Ljo5wsw^s<5
zQ~kD7n|FY~wX6nK3PdQNFke+r!f~4lo}>tpTh@>J@$;+J?0g0Zr>ePQ2jg_t37%4+
z?ISKBz$G}ew81Ym`_-BJ{n1xlT->VaJo})^qT$EUymQN~^FG|z&iS+s4<A%t*=l9@
z0d_gxAwoTfaPGAqVI-ja;Bs;w!Ld-8zHDmvv4^@0mt|g_!q0&0JfWHx3Okjl<E46B
zH%!J|bXXbxEpg*^8}<(Ouj$)1(mV61BfFa^Z%&d!l?rd@=*8!NbwYa%tsj61n*%?2
zXda=F%YS->hoNrf=JX<2&zb)nBzT;6xuB+d>}{Us<a=|*Km_VhUWyTnpE)BrxzNZi
zWGG%E|5@?iO&c<oa|k<%As<OOQy#q3MJ3`NC5SRy?a@0(YFqU{;h(5K4qUrbD1}gR
zfCm>?pHH``9nt#<-*256!c=>j(78eCJ(0u!;vXk|o-j#geAEFQTE)+E%^&<6EV{h=
z1(r)f&0Krs3Ock;A-PKG7|_Gvb^=g<*aVgsHtNIq@=7BmbFY+wRVs;3a7Tr2rv3<*
zMW7>sowVQH;eFX55W`<O|JFkJGZ(4^=#p7;b(had1afLqqeWmGVb&24E%~(UP#Sx4
z{8A$H`&T7O4p2wXBdzeh9eBKN8^3MI=cl0K4#8fNv_r?UtPfELKOQ~lh<ugwSxiB#
zi_~K8L@p)Qci^6)x;n19Gg@tIsoM)A{5=-}oG0)CRt(;7R{kpInlE(dH|gM*wls;a
z)@Okg`>-&}3;j7Tl6cS4fi0*Y$FW*v6rLVuJd_UND<1nA*>Akwrbo5o!S&T+3rg{k
zMc3jM4;4^2U|Y%Bft%w>GFfj>E@syXdsio^gBku-1^Dw7W>W2?aV?}Q-si1cYtxZ{
zOd&4c&oFi!HA}J78@UcDk?ud{8hLe^=ZJ!)4oV_jp3hcY;~~eNWmX;JHs!L3f=vlc
zWqMlsnG5CJj+yHnO90@$g9UH(KXu`Cj|Ax7#&pGyjGG<Ag#!F2uh^`u6Zi#~*p?im
z168-~9es^u^GGxCH!Hg9oZu}suk}Yxb#KO+gUrG~aI&TQG5l5yyLGO}<hQJJzQzX-
zE%2(_4g2dz>6J=437T#jbsK;45{8aTD<qX3?*iT8J=e=Q5>-(Nt>@p0=zoDT08&Y4
zftDOQ3{7Pf4!bsp<Q;3A1EM?><|o`n>k!LH@W(B@^iqNgEC<RGiA*+_fZO#r^A0jn
zGJU&G9zf=qrr_n0sQh4oM~1fE#5~sqi2}REk}c_9Z4YA8()s|H3{ZtDk^wNYD|GV%
zNe<w{u{E9z@Y-2H(jEt>dM7RWPCZ8((8I|hRnGW9yruGEra6olbr66BXQBvcjDx7q
zp9%vP32t;B319P6_+SJFj!Pv=yuO#ZL4uf*51Q`#sKRb*XW;y-z#%w4PrkD*;hTC~
zXVG}}9RKMSmU7vy)4_sVSL9GJJB+tPdXsAIZb?n@N3mI!-BGdh@dJ^<&-uCp%DhiY
zpL?tK^-KH1D=?!vO1JwUk^2Dn;UzRz<bS-vs<CHRs_JY-@g0s2v9nyxNJBfND|HD6
z${YCV2^b!@_P>9ga5^*9+;t|UDs92Z2OmS2y7EpIsmA4gWUH!>bG^vSJ1pa8VF5aq
zm8~OS-^bNMj|OQ#xyU-`-vEX<E$r$5W9Wdr#OpP58!jMpa<mmlWhX+#TVh^Y7BsU@
zZlsQqQPG^uP6TOV<KO*N5bn=ccskz4`R3UvBI_=#qrc^L1f%&LM$}V%UsWnC0>k_z
zSoMR4DS%my*bl|5PfKuv;KU6-^t*R-kW-lX`Y<rJ#COieb@lWk7an`nl-c~{2FZRo
z+yI%Bo{}cTF4f$9s%gN5s=I^RY1}_~A*69viNn!7vYi6c@YCiZL@NrrotwRRy<3VS
zz>YvVy7IGRab8><H!MTb`{;&(HJ*nWK+RQ`L`uE=@rOX#79<B$h1&1W;S%Vyu#20o
z2<-w)IQ1SkvM;!OOb#Omfh(v8KfzQ@JvA}^Qy?w7w_3ydIvnC^aEm&Ibp)#ymny1P
zzwId75aa@IH&jI^Kfh`>njY2~T+Y>l`U0XKRdEZz{LP)<Chz_{VlEhGx1ss7%r!<)
z#nD8u)Q*pR@D=%bcjUs6n4!Q?X%mH;L6$InJ$JV7$CzXR(K%KCr{E`5OIDp|uiC)i
zLph~>DEz!l8y@7avvgj;kDd^Okmp~7J;RmKGikj+G91y<u6^1ae0xo2MwiTD;}Z1p
zTEcLQg|N%r9PV&Qi9~iLnRu)G#XZ?zjLvP^M5t=oD{ud|rOiKYA(`B&{zf)j(>aHW
zSkbmHzk`2xifhQ*JWh2#N8b;3>FyuZnP3uCydWrI8dXArgcm&_igMkj;i|c104`H6
zjJV=1Z~r-yq7@JzsHnie;aYxZJZ{p~k<#YiP@QdQirU8Gc~n=0`B*=G4q#N#IjQd2
z(t<xYxH@2YC;xkJwr)i_djS?hIAb1tDJTDUg`^}U5jUkGx9+CFQ2!nPdTW!;QFXou
zjK#YkROp84)@pnW^9R+Fp!-UtDJ(O1#e3I6iQ^ZxVz+NBjm)qYg*gC}fN@>x|I;m0
z|FF4EsyvnJW=(O4s~%*9stlEd&embB`Uu?46KXF5Is5$;);5EKX(QX)(ro<HcRu8$
zK+(nUZsn@k8?692HxLSR;pZ&`tAqImya`+|r&G524!E@lNgJByc9$Ox5HeuM-ZNbI
zXH}n+Ol(y+a)5jZzuDbf-Z_D*&85EX{>jw7Yg0f?`w;QT{yR+L+-?2_g+w%<tYp3f
zS0}uzJiS%b?G*dIFZ(NrU@A%AG=G0ibPa#6Z8>EE{jchR=BhCPlpG_eD&|6zoR8Eb
z5I(f*yZ&2^)EYXWv}kfxHysNDKb}Mbk-A1xgZ|Kr$?TO6cdBne)z4a@{Y8QUudSRR
z&P}D^ZH?`7PGxSIK=SOlf4ogj2S1L-n}4pXI6+oiMdA@_RO5a}y?NN$;VEXVrlFH&
zB*(J$8kF9z5Vt>&t!{0cC1;2{F3m1C&nf5|r9=|f>o6sdZ#U<6Z8(RY16bA8NO3(#
zBOtZpK%SLELrP0-?wthqVVoqRLYbi(WTVnvT6)BBWmh=$(3UwhOjbsFBin%*)y+)&
zW;esjrr-FU^ohARd;bm2IM!Jlw{%4aE_EK!_38?tgH30LpL9=1#Z_ht9#@}s`ooXY
z8f+9@_X%)!q<UM7*D5ffNJ$L`VpJjIn5p1GP~47qD*yibBb(U?wc@;xZE-TR3!?n_
z1pL$xOSS!_{J80X&QqIQ0Mgj+fizqyb_9hxBi~W8*Jdi;quopA+IS;QIPu>uX$in$
zC;#Xp{ySN6oiN_TDnQnpa4O10=qy<sZ{?(>9zq#vpesEv8rtX_@i&k{|A6pTnML|4
z7OMM7Fxeb!Rx!m12sLb$Y8ny8h6hRDzXejR4bcj?5=bb=l6?X(WmSTJx6Y%xi&8`D
z&P7<}&e=7F@#7Zi1HWf|$GBfES&}S<+Wo5Tfq1pKQ3wiB4<XT$){+}v{U?0bwHM)x
zgKW3cjUvr2^eQMOoU+fVH~M+08s3US0*6CG<Hsw6fB{Z=jpI6bR$7y~_uEuAQCP1i
zcnJ(3kj;}2cEGVUiwZwr8h?n8;G}$z;wTWz^Wax=7_Q>P#}Y=|h68&^6~LiF^zj~3
zT(%VYu)<=Mi@4pqN|&zDt{&PHcb~vGb%63fj%QZubNf%#nJsg1VanVt4g?YT=JfNB
zE=L^6fCOw{H85FgB~81FyVSvc+mD<9hzeC@D7l|AyhDR#9Yvj1&udMKy9qO~bk<kb
z@hI~LCEsSqzc&1)JJTxL+F{sd5V`Ro+i4_ls=9zIuJh!{4^>uv4}iRS1p)!EfR?EW
z>d@X|6ZR!%2xg6(6meDJgeADf;1-cHe?$cxtJ9Gb)FUQud#rqw-gJ$rZpK4=6z*|}
z1FX)Sg!FLnTX_Z2ChEykC&R3$=AmC_bT%Wv;IlG91OY`5I7GU{kbbxcWB*$({VxSJ
z6H6s*DRw^HiLyG)`{c0<5Q=HcZ_W|yYHqgE!n%ebKdKnFPGr?4yfZ8gOTv9J5N6j9
z01V{JE1z9~T=!JqP@uf_6OpQaZSPUPcI5zXJH6Eyy=2Yx($X#%8pIvqBZEt)LQ4CO
zSC};^m?}x$kZq!%3Y4l9+)jA7=?D^0{35zzo%D@S5%K)lI&Ql2K{72Zc4cq#fX#Do
z>?mE=8E>sWv*i>5=F+jfZDqcf>{LzSA{Jmc-)CsR)Q=(G_qHjm1z~B5y^hnb-0ZL|
zB>3Mt6)<R`fkMwt2#{X%M>~~2<-6LCaoYwos*Fokr>ig7;h!)>%_9|@Ibi^s-dz54
zV`Aq78+T*xaD{{05kg%}T|x<mdH!e;O&!J^Ln5oVga-t<ef}V<;9<LUk#|Z=o93}6
zU9nI1XMU8YYg626U)J&493c6o*-^>rd)NC;T`B^2a2Z3ZY#3_1i5Ndh1Y}KB@$Psi
zvMikuG-o~&5XgwcY1{3~Y;8#f&elO|SKYoj)d1&WgzEQQRGOmgUI!laZh}j;d=<;T
z{9CYW)BJDS?FRg(S9lF0_r59G>#flKj-;a}%D%L3_2~c=ScN!kAaM8V%rpJqg`jr}
zpd=uv!`&rA!-eLin#0K3+8As4vuUYk?UxJ&*7*S+oR*80sIL^4c;3*iKCTITeck!V
zF3jH`#iSnlreA23+yCgcPn|im7v$tz`W=EhBUt(@arWZ$fk5Vhq-j3@=_D?y!Th7l
z4Of7H5B<Rv>)~r~Z*-jF8dh7@V)q+1aPG~866*-CR?g__=P1Pp?N@l@Y9Oucmc($T
zB7`;TWZd+?z1P=1c<!^4h0<T8*!~Qp`yGdtuv~u;f8&?g=Sh3CWB@0>_RI2F&iqjQ
zEEH$w8qNDh;8Lunt|4G>X10Pv2vRtv4O7F^ITBtU_w&|Z4E}is73F`NdIE3EF4ywo
zE-~AEEopDZ&Usw?$f%XPQ>?d3ATSnwuiKPAj+EN9DOzK<vqCIBO?+Ts9baJ0z!EMU
zuW>2ibCyoqet@tapJxXJS>WgdCs*$}%%rYz4>w0y-qS`}j>{dVPSrCHP{q6I<gh_9
z)}LW@wDp^CT~E{YK?DZf%%}_Ub<Eofm=|H>ul%=L*d~NYrh7!Y>0Ch~>LeXOtkN3z
zg4@G&F6b*kt1L%T@W79PmbN-%7<nPsb|d>ACm@=TIi0MFPSgh#bksidaj2utcmCOT
zw0pU$+)Qk8l(CY0=c$>~mGlhdVC?X)2!T>E3a*-#)%wqkC7tD610oZvbm&}D(4%gK
zNkCR-c?UbBJ1&yA{M3X+`R4$~+8u9D`Q%(6DR2WFtI7br0>oJ+v#8N7(IxjB-l*Fj
z)b1NdV{MQG2qpI|C1By9{4_9^n0h&x6iFYa)e0~IDbiAkrHlEWTE5#+&uh94Q(O~j
z7N@!9Gu&P2^)bN|(cl29(bI->vRCq2`62vbQ;NH#@0+dq5LK-7-fH~3akHI_y@0>2
zsMetvB?y9~8GiH&b>P~nzDpuKE7(v@5}5snruOF06_QJ+tqcLjkt0{T#}A%*SXY6x
zXrZR8g@a4pu|t93neMrr({Yxh!^z=#-)^Nd-9LWLsnJ4!lmLp3{Y)C(hiw^kLEh5g
z1RE#mupe6Wih$^m`D=LHX7k`!2aflv+-r75CQX;TT`Y6-dKla;WxF*6I4!&9`@ePV
zch@9(ga4hR=0*e~?*J+<ptLq(a9F7JnziPi!_KM`Biz&<q#~*3%gJd5X3am(kX*p8
zo9gXJiDXUUiW*5=_}(XpkqrLx6)u0+)m)AHeqCS#7&X_2G*$r1WbR$LU2v<7tYm41
z&qlcX(Y0@RtT9;E1++5OfJ&pP!<8hmsk;nA*8|v)NSD*1djY)v$M;hFcGDTnq3Nz2
zmqh2N%VV)+7qTpIgQu2_C#>FKoBKUG)7>@aA>OvFb~2HWM@zD#A81nc<>-*j+tjP<
zZ`^eBt$+0)`12O-N+Dm$tNG%?rNClvSy{L9qVp*qGwJC(z<9ntrRO-!KXTaZvl+@b
zRB|AUxZ8syn`#}=K_(Y;+~7F}%-kUZZt4lq`iUe#cK7PTI74(g_IbnM#u~Cc_+Ejh
ze}m7R^ah#i&SxkB`m?qPf);S7FQ2T}R?S_C+b}hNl@AUiXJxay$q!0FG6V?!(W&6N
z^pgM%KPg-yr5QnHF2VrPPVTwTwgi5aN>za)sxygJ<u7{@cU5_R7I~{Wo3k06_N)xi
z2*SyEx41lFE2%VV?lI#8UHt78p08JEfQ0o0C1iVY9CdSqpt_#FbXbi-=LGw4T(UPF
zKyuf+T6ya)<IhbE`sWiz7^}V~AS@CX2Z6K!GPI`?Lx9OfXDN3`uG6=>Jw)PE<r<&r
zJbi>5xu4L}moNi=Q>n{L=yc})2A*u?v~R>4h3UiKFYn&9_cJ*pa0j>fW>0-@^$}g=
zuwB<{Q&YA7O14k-PK&}rOHt3(*5%gi$)!myx&@E4YhdISpii+(`;nbYYw7!?s&F`s
zH1{<~p81wbR~@=%P1LRVp)QIRFUxuM93Vxnw_`)#uE)88#0ez$rq$xO$Z()#b51-T
zvI&y=bk-2?=k5SEgPXQA;}n@E{#DEG_q~5aR{?+hPUWwI#_t0XGy<sQP(>nZ8NqK3
z1irk?ST{o0<*u{i@qEQxGT)C3d7WH(!sbWR*InlLs;NglsX7llXF~MsN+R&Q?Xm5v
zLAz#n2LIp60O9s<;=gkD9gp}3h8FI><H_G2d%4e0yzcPK%ulvNZaKa>>;`j7&KPit
z6$XtB1nLkz&(kK`N179KOA>r7{~XsZv{RPDcHJ~2xPxI^hlw8T%qk5fHY272YayYn
z9C7Hu`UuqCZgs!vVJc%Dr?-NaYEw$T^4mU^4O*w^Kp?HvjVxYOY#@lQHiQa}k3lG(
zTnpxJCObf^X@__bJA<Rm%F%F)Th!Re2$?|Nvs6Q6CTDU}0B;ivSY!K$URLNoEaq<_
zGQS-Vjkc7y1<_lu;$oBPZg|UaI<&ZK*iXZ-Q%ym0>oGL-;F|&_KHAh8WdN4H&xUYY
z2GE{w4&j)pm<_8)fG-}tP4^<PP#Xc_P@t?9TN@BOEK}cKKPJF|oG1Gpkki38HCh3t
zj?%7;!?rqk>V@#Dh_OI`t`V&&;|3Gm3;F4fr36F-Y>;0BxT$rq9d2oXIU>9>-3lF9
z&T`1)B4HgMFgQil7c7u_v)%(;Dc;BVggke>YTizU>gRjAi+@E;nNE}50063xT$(C6
zw|Y4#Lk_vpKn_yhgjSDFybJegTIJW}<9HSoT&)hc+`$2aqdM+?+HRlP#2?Wa3$8^M
zI`+fORtW0&-09{#FS-1m2P9n^=PD|(e%oyZEV#M>DQ~t;Y}}Li(o$|c<JviPnoYT}
z^4KbKz1kr1zJfNl&rL0oo;Ku)OAK92h~{=x@8w-c6bkq4G^pCKiau_KZR5|ITyrb^
z#a}_RpbVftf2IXKStY6L>XHhheY8*((%oIN2GtyUJvI|rM~#ukReXZ1&etk+wkDOy
z*t+?t$LaY!qvlv4>!y}Bwc*yUacNUgYSP0sm*3`NhBSxjxUUAd$rNf*EN5ldV;eX3
zu8ZRNWlla?yh(n=-C=I7j?u7et|dJwM!->DnXB;qi4R(8k-e+c1swz7aSEfyTXhnm
zKhc%AN%ZKD#KToyRWKiCl&VlJ=;mJsWJweq*RABQNM=9PS?Hv)gAZL@@&Lb*K=`kB
zomW&kaf)$2)Y*P)_^L+7-!~aG4pR`}ax|yAip??Jh#-JU=mgh_JVAg`#p<|$==Iv6
z8WsX#c<imn#HQ@;os4cMxiQUOIHYjo7S2Sr&|3rwMf)vYCP4rOa#>wVin@T3_Q!j=
zxeV}PS_kCxKFg);9T*cR!(HrBxO4KeOC}BQnYEhX;kn6~biD<p99+XEf{;MstS?A>
z{*wF~noWbav@Bjuykm1nr*x;K18hqu)u&uB$m;S29C=Klbw}CXQvabsi1psJO0bq+
z9J}RSWH|h)N>qUtv3ge>M>Wxt&kmR7Jzt+s+uRr<g#GJ)lpW-9pUP76BuP|Jd1$8v
z_{}Q9I3Nmu2T1{bvULszot0R+kH=Co@vTTYFOeiAhflRQILxkHxy#5iikAGBp~zCb
zRpOMFFfPZ+g_!#|&aeMj0t6|^@WQ?)Fa4L1x)xT4k>6>6wWfZ0(g5+~0P^CV#_m44
zdsjLS681hpduD47ud0j&71uqv$jWkcGHy`Xe-8lD!>N+1kb8*%+Juq#WR{%%p?1<E
zv3@D;{jQqpzq(yoP%Brj07Y@m$@V#a(eL00uP%uCl3CnMAi!F>Gv4j<CLO|Zrv3Y4
zf4NQb*-93b$0heevf>adMaE4JE>$O#2v<eFJ0~C`7~?Sosa~?}-x0*}rqV<N)+_t=
zz)cQgWQWnU72mFVCp8~qCE*L)Tvb`LEX0ZV97iaM)u$Jlgl7^0q17d*ORE`C$u9C`
zQ;a%-N^t|=FXffVZ8wkquya)A=S{+KvO8qo%d@Fts}g><5OHj4Pb-x<=gyaaoK{Ck
zNRQ|8(Ow>mUF`^N&*L`f)G$Z(g+Xr8>l&kj#i&H?rU-Pp9I!kmbReBjm=+wD2L5ew
ze;}%E>fteW>${VY?+rKzi6!a%ys`?Z(;ZRJTslD~!7RX2+t%cHN?Kua=ceL8lN>QV
z4Dq%QeZNFzbeh)gp3g__?!X}ZGBlb$3b#hlq|FKD2yVE6mONv<^@xYv8JkZS)pQ`7
z{{*R#D5r`!0WU>Oj)NlM%J}n{>`*i!C5*KYW~{ss!a2Z3`U2<v0QgZZrQu&oEjDeE
zt7uT=!UML`(pAXp<cPhAMl8O{$Fqt|L0|2V2xv3ZPXy8B191FGF&EjT@9t7W-9>_S
zIQkN*h&0Gy(DG$^mz_g8WO;^|i%<(Hee7Nu#O8iYpqKM-a6@Fp4I~pP1mI9F;PCq8
zr=wQhSrb3Zv1Y}e-Ta3gwf%wA#QPau+q-%IG&c{IkL$g|qcRC)X(bOp`f1J{y&vTC
zL-+4#eSrtY5loK<rp^1Zy+&;SM?kp0c5X53__qCe)}b{e8NO=v!jVx&fye7?gd!r&
z-&qXXv|o#Ym&g2VFLu2DjX`>ej-tAyr24%xL7?5XhJyLdQpSVNGM!W&2dOBnGM=6X
z^AiU51OWsXexJ>C{2B>5Y**!4<SSOp6h8z-PQ7~tig2-{_0E75P2OpOZttIScRFOq
z-}#<9J5^b@e-a&a=B_GrH!jES=Dq!gLodhqE2dh7gaTYvLc()EGUr+K?Qgv6u?($c
z*Noi^8faJTl>MTheHA`+8s}xIslx*-=J?%(g?xTM>b~oO_flNoS34f*Y+W#c^7oY#
zhIALD(WVr}O6|psJbrZyiG9Z}P3gz36pR+E7JqNa4(i-&(zYZ9I$_#Qr(1~v+!hFe
zsLDZ;J2lXiPQ;m8RVEbh!(s@H)(HN6KpG_AGFdksLv`}MTDeVjA9pV0P*Q<!b-P|W
z+(i@KXb{4U_#`xS$w{9tntO&_^>sqODj;NcCxMy)^-|Gw=39LvJ1jw`6Mgh}4#TYl
zBI4(fYYPaEe~sjo5~jkOVA{hS)!r|SxGaKKZe~yq>Au&zfTBt+#;=vpJC!HJsD!5I
z!aJ)s398C3fy}5PD^GVgE>$%^8ydg!k03vHbEP9(Zp<i}S{{&^-Gt;te?Kk3QS&by
zb}kOHkLZ{G2YA-rD5rVL8sPDZ_fXWvD}AI&N+*(jK5f^&=cOyQZ^xQ_v}&%EQ$6ow
zD>f*{vDQ3^KqcDT11)TKhT=O&tF^<PJ}ibjaPl+$+8F+=P{u{n>Gf8$#a<He6&|U6
z=+!jAi}%_FiHf-2j<Fem9c>J7`3JxUKub+ue70tT-Lfw5Fhcs?_~~WYIBA0ArPy^Y
z&Nde6NwVVBcJ-II>f<q~bS|^Lm12{P;-GZdrMV;srgw!0(moaB-yBOIBXT@awW)cy
zx(v5a!Ta$8I*S@D=~dBkd6IA7w<Cp2mxCRcn80@X`YPA)8r)TwdM95Au+-f4<fA`a
zA6j8+`DHHz*U!N8O^B~+8$YIlaFTQ!4hAl_M#5in$uUZ!;YQHlxi%<1SG~9~{u)E)
z!*8d}Q1|t@QsN}n1%^@>oKWc^{PTcNEmGv*_h!ezrG=-2pmy_l{8a?)cMP&w1SU5P
zuuxZR_PSt0{Zgq)g(t#p&~luoJe}jbNF3u@6~XY(4cA&?c+G<7i+L4C1Gy7B(a@=2
zzJf}mhf~Nf+{-;MPPpTrZtt$SYDKZH&jFD}5FK7#NoD8m4e|jGz-8pR)LdiZga98@
z>mXf#B%F9#6@Vns<ow<WbbT<0!{5CB*PY}gX`2%}a7BN^Dd1`Vx$?`#hR1U_UE<b!
zcXVpw`{fI|LyUO5xVoAeFZSGZM|NA*W!4(>2!^AQIJxiV)EyD@;e3W`9UIxng-rV|
z?w~&wUx$%!yg+KLoCDPch7Dj4AuJ^yXOwHj<iPL=qI7<KI~@eM9oZxe1Kd*m91xAl
zCeP`gEJlsfd7M0wnN=(xEq2>~UE5#o-ChX<pde)wx%&`NZN_&c8Eg4m9s@i$?A2W(
zf>qD~0L_}I5|+gO33DFMT-&5T@x&w9#;JfJnOHRu{yQGq_ynfSMt^*dN%7lH_e+oK
z)Xo|hoJ4y=_n6INGWX(=`Uw->F8%UgQlO)$dDw?@k?IME;oIxt835~Igk?;ppl(?4
zO}timOEU}${yR7j*3_GF4kK)}7lq#~<b583V$}C*F&HR7HtnibnG*GDuA3tRqw?#;
zX%phFnlpg-BESMFz)LqV(y8_b`&xg0tLg4;@U?Z#3K637i7tKBGdOVb7=rGCDP2#v
z?Q)~6U$E>=F#mLpY@Wjx{+VJROZ;dH`L6YX%YDKecNM~d!XGfprY(vVi%J7`Zks(q
zFw*utAa_!M_k}_1>^sU^75;|TgQq28_wvo+7iPHSAl6%o1Vs?Nuj^de?fGdak!&<-
zc%>LVm@T+dQP0z$ebrx<lbXVX?4nOs|B;jOOWZHJYs?wBk9a)gl?zsKz0{Kufr4wI
zs_2m}1^h2J5VIDQnzqISymOF$k|S5o@szzb^&WW|A6}p%H<9(#S_D6xLkG|7cI~f`
zsap+ZkcNT*$J}m@pDPRz67Qv|uC8(^Kewa|m6KlGcfM{?o*c$qZnx!JaOq}ap^JHJ
z>&>YxM^56@bt&kUri%cK<^iby-~W#i!ueZ69^~K22y@fxl!PCh`q3u(+)4C@!U~4N
zaj03v&Du1^E(SFS%JU|do6Yx4=FH_UYJ?H~>}fVj??mupCMQ$m8?sW{A`oZy<pA({
z+-5TO2Tg7Ym2R)f!mswbj#d0~eagAQ0eF^ArLV`vn}>a6$LqEPsyNAXv+kB6AmX1l
z$t&I!DEU5eavdMQ5@2d2N@@sY&2^p2`;ax=N~?u7L1ax;FNJJx`<xH<Emp<IwBO@A
z-6Riz^H)xHzQXPz?7b-(?wYx6Wq<(R<|J@KuI*cqf|gV7W6P(~`~KR;3Y$_qfpBCi
z|5B<klSwmY#Appbt=6ioZE<P)x!7FeeO}Hlf1r(WOT_Sh7RtaF<WkZ;XPvWZTl&&!
z#?2$$oC!{oyv!E`$t7;m#Vsbm@5+2W)xMdb3)gFmDk>csSDo6S6c?gwWE{&JRc*WA
z?B}8T0`&Uin{n#MYR>j-kDYu7R}b?wRtlET?9Hv#WQVo87Mv|=0jdeL_PuQ$Y2vYq
z5$BbKfW&A3%2UCID7Yu}Js>KoG^Yxkj#}_`T4*U|UC5^-?{qVc-=?w?;XMrL42S;f
z0zQK0{j~<A!!tx<aM3&YPXo{b-l^oMTkd&{dO&!E@MD<=SZ3gpsmuce`atS*tjqg7
zcL4MA)^VIDyc5<3@j*G)T5H;kayF6kK^jy)yTFRLcm&x)aPm1IHT#sdzs^Sf22zcs
zy2)l2bctA;cE|pLvT3^lOQ+6Xu)tK6{4VO=_Z{xj^%wk5v9=5bUO+17Mt>>}8L|ry
zghXKEt(YZ*f&blz)W@zYlHO10irQ_vf$H0Q+OAyo`=v;dxRUX3a&p`QoXV#?1El6Y
zp#e}WLR1btZv+~M>Sp!O!f00zmzVd6uB&ME(y9@J%;`oc4?2KEujKb7*Ac#;z2tSU
zjSCpfMl9UdX$OL8RX6y-Ad2bCcUNtnODZ;Jr+-w~YFa?4tF}SiKuL#3m4l%=s1&zk
zOZV;~#rXs#6_4smZYF5#;AGQni*$|3-mb4i*OCTV)i%C!TAX3qah#ytDe!T%@O=mx
zf1mf?w-A0yF*cKfXhwk!wZ3QOJQlsJ;0QW)TT^mx$pCoC4csT0klJ=V<zT)5^z{X#
z9NY_TKXH4AP!@jVmi2)B2+f?sv<sD+E{lA2h_2nb3$FKY^-cecYkse~)gkULZ!(vQ
z1LvS4k0l%xpfqo#(E75cc76*|uye7r_d3&Mvi}5a7$$)Eb=5D22Vw3my_a2CouKY_
zEw=^u%M#e_)L`Uvlr_4^#X21hXy?;ftf#(V<C_aI<YO8&6lfhTJSI2erUFm;v6FKN
zQa8t%7g<ST6;w`chcClhKcDtq<9*j_F4#SWI$%F;d#AebsgeuUJaoY%xsqTqr5$4#
zN={<gt|PRz!%t(tX)JQyKT`}GIp^gDM`$Hx*SIesUgf#;OPd?lW_Q_Z*HVFBsg#LM
z;;ubBzwIcxc)jW%_U?3q+_X11Nk<N#>$Q<n)zrCm0mqDKIARGgnn3*$iznzqH+pv2
zy1k47b^WjmauSR#EfbVBodhc<*hacI7*_t=p(w%aZb|FRywH%JLA4?Py<eMUdsU-7
z?<CLYM^rwZD3$k1ssNl(g-8b%w>rsHI;7+Qmp^!&&n+R~?(uxdXb0CB`Fh*EK$F=<
zBW&gUqg%<>y}32Qi@y2I(zi{kjuX^#!r>n@NsiuLjZoLWd92omCCo0|@QIb#E_%k?
zy5|7Hz;EfcZ>c0)RHf@uyZe65ow8-^pAn>-s*S07Z1;=1(r!y~ZP_{j?TeM+Lo0Hh
zF=usk&@W{KA&TD=LnwWlQe~a50Tf%j?q%%}wgtEYZy~EOQj~5YmV&VOq)Kta0MgJ(
z_MXoaK?DuI=Rve}QQnD%tLC>N9CcccIc2*oa$Q0!ke3RVZp+HFsz%~8&R(Bc83G=$
z`5W(eR50<A9}VaN4h1p=L7c+^4ZrOh>z>|Hcc`3iMXbHeWQ~g*pZ=)YEPS(Xiph>Q
z1jrxwvq)v@&a=&jLy#&isl5-cCXyVMBgraIU_GAt4sUuYsURZF<iDR*{|AVK9*`<t
zMS%Y#${fx}Pt{#Z-<JHf#M0pE|5MqAZ(W}jk8{Sr?0+4QG*u$#dI#>u!W<12ehIjz
zT>(KduM^gC_{cUbf2W<TY8C18+uC+H0Pt=@g!|H~Mt#i&adz=P1?|S6S4tbX+_b~9
z)Sy+rMD;Ugk?q5Neynd~9B&^L;LjoF1nO(hMRGp)Bt=t$43s3Bwao@!?}y|1a59%C
z`gUo6_#x#}>(zUE84OMJ9op73wd2rTd#c=ewX3d~6dSE4Dbh`J;h%EL=jM%Eo133p
zkgUgXe7_IjwkCc$w{*C}Il1E;is6Pc5!wcci^i8@Z#C2oAvf8P;ZFr~o{2IC{$EZQ
z#W||2M3>2|9P-}zLELg(X}j+7+b^jTU^(n8I_M0DIe^~_%lt1e0U6WG{~lUyfZ5?s
zx5&c}38Qi3`#jw25B6bPN8B~*Bw2!lcvur8618W3#^NrmqRzLbJpk2K)!p)PkmM<F
zNr0=GDcbfMmqzaAGTg|!4n*EQ;)lDXPi@lS^S1(s4(Ru_tNy156(^36q-Biz6VSG#
zB#!d$3YgxC!k01UsrEaW>~ne4Wh}3XmK&N|O^rVk>X`yu1j15ojXaM{wbN~hMqXO*
zROm+`?(wLc;eb^?!=s_L_bt);5uO4G?E8Qk&KO}Ct}khT<9N_Te4R^WuBWU3&0OLh
z7cA!?<-NPZ@;c5(=D`Bz?dG`F)QbeyDMsQBPaqOJh66J#x`VYhz5%f0IQF1o@#opz
zfR*s?srF;%05%>0$$l+_h{vKk^Dq@PejCU8DC35+s^_94n?h`}Df;|LF=wiJ^}hJ%
zVZfh7neYsd0c4mLyW{Iom*PF>B9MmO0+0nl<60EiJXX)}s3X%?css4?Sf?n{u6o(A
zg!qBxS*_j6T4_*9S$lx2bc)(*)e+9*to!{$5F$luFS-E^u&7j*y}>z@G}`UB+_orH
zHIFV3aM88yYf3w)(&nP9C5%rlkomZb`-L`9X~E+dPR<s`YN{%t_Zj2C&%TQ48=By9
zk5X})_TnW(n4Mwf18v}3m;SNePpd)Jwa?7|fu-=7In$fsEgWxv&E=MD(8lnzByIsA
z?m-pqp$GH_gG@D+&cAN1{5}stItQf2Wt^_e!lo`Qv74XOwZgu$J0Z|?$2*)vhlqB)
zfsXcI5R$285bs@^&RxEy<z2O*m&{UhD9bWxTVAjH7EaB^^Qh{gkOwxP4DsN2&fQ*g
zRQVo|q%z~07Z}m21E+y>f^ScP2>-|VI!nO!7W%pLm5&RM>IA48J<q^U<>kJbb^CA)
zf!`Ile#%xxm2;b7u2ntcb#Iml{4%*dY#!|`j;66>|Af)qC7idzGJwW$S5={|4E<C@
z!(LV(o|L7Er(`yHL8+r&><<Q54K(K_x;}k*08z2P_3bw}0cicNtd1=oCG(#m7uj(u
z&f6Avhw%HR#~-ZDbEn}PpYCa&9U7uRl>bR{jh;Q7x-Gz=yP_#;#V(3+iLc{I$~LBb
z2|M((9D5wM-GmuWsoizzmtp3v2!w&g3dJ~h%)0HYYSYx52bQYFuH!DS;drQo>ON3+
zQT5>kzoyRKi$<JDJ`ngYamA%_wi2hVBZ@Zx779n0L#dj-YbI^w94oLE=06ccUUj{8
zaGec3T})XR)Xh(hi0vo6k#1s}Beq^o0__^UIh*W-fT4HL=QvMGCf7?YL+`<30#u1$
zP_vuFb@k54u3`a~EfvFDPnR56bV}buQ7S3dXUt?%ntpp(;1CQZkFJnnhjvoc3C<+Q
zKS;>kV#>wWmA3?ai|+}gQ}taRj&Hn+#INvI76a>f(OehMtMX+ERHh?!1C%a95E>6Z
zG~MBf6=1ea5J%>5MLD}~`8keUQw?bqg$6XmN|wC4EY)SXjUQzBtG_Wyju%&@o!Rwy
zbr-s-N^_yQyKq^9?bY+w`7KINasHRU;kJFg<h8@ScB?f+D~E4NfGtKhyv0D|^Gh|-
z*Q#^7M}<+@3FV<R=STQr)~GD;PZvXP=b@%@7(ojxhYukuVDtPm76MqzsfEfJ+T5(#
zyT%;OL#U!W$YC|S-9Y)L0B804>!ld8y(<pJAg+z(kmCh@tW_uB)r^4lL~kYm&7<+_
z$K+)prns3dqU~_5Rlj-H@0Gr4?mCS8`nGkzT(-I|kyh{>iNAthZ|z#SoV;zGD*t^e
zj?zWPF(9!T)!9;cDr&nDrKHOW{cM3_ps<E#@Td@Jclwo1`Mz5hGVE>GV%(?unQ}rd
zy9q=$rK_(khq2tQ=kl%(W2&z3jXB&?jdv|z5%2lyLVWP2H6b8Xf<yr0;@`T_zaMbE
z^E7?y<P58Z9`P}jZPIG@L(ZxVEJ#OL8pyT`vl=)v?e(GQ<nR#G`)NyHluLMX@jwr1
z`W}REO}O7n?CJ2mjOLbBwoRkh3EcAHv~b33tRJ#$W&8c+{B{0L*7)^)mY1|s&~ZW-
z<-&z3a9k{XM@dRq6FB`YUYVPd?Y?n8EHZhsa~e(=&b8QI<y#zj0^H#~RfQAqIutIr
zj_-IEpLxK+7mx`<e_hw-BhNgKLwCR+NqWhnav^+68iez^iYC<!&~RzZo`X_qTOn%I
z?U03*sUxoU%#vVz23t<p8*IRp2_Ryx(~nwgcdH+}R%8+x<P}96sL~9>8pb^$A>MH_
z$8zpQR_G2HBpV@SVNG3+4Tjg9;rR{~T@@Hy_GM;07Ngssw?!Ef*B`PJ1lILx_*t}4
z+o(7Z*w;Sot>N>SiqP^_YwBuy63o=}y@OhOd@drunLppwp9%KiF5lHfu6yZWK|>;}
zEkhjKi|>E67yA8xpL(kkt+|Xn5LPDnyR^;y>=8M#OBfuC;tXux+!(!+qYj+n^C_n3
z9+G^8%XmQniM8gc27{|;%QjBa;a3Eg>R*lptc{?iMs3`6U?3;C>7scJ*j)k5&24|T
zDz76uSkgZyjpP#K89=^MIr(10$r-pfs5c)PSYP!Ce;x2zIvhX=1Eml+|B(8g^f-uJ
z-Adx;wmQQc6e*rA3nKiTzjc0s%W3-`$gh`6Bc2dxc>Su@jN;gcf{z@N*DH6KoBLA3
zuTHr(H$&4f*G{;OB>ClfJsja3D(}}!7UgQ?vp!?q`2swakanUqDDbpdq01JiTKn*#
z+6V#qH))PjV;?7Aw_m>#&U&4M9tUnq+;#Nzn~;lu91cZ0&~hsmv44K8E3!AF*Fp~G
zE$BlNPI$r999dU^Tq&9tM&&?`xWwA7we3hGzg=u@&f<5dxCVgaf#|k?iyS7fxS;EJ
zW@7kWTzWT0V!2fS2co&r3TLxoK(eg|Y5i}DcfTF*&CzRjqtkFy#GU6>9ALKlc*A7~
zfu!WQGP~1+iVF|>(AFP5x12Lo6d~U>XEYaKTE45nIW2M(*QJurUiFUa5MM3-c6Wg-
zcymURaxifmE!a5RZGS3(Rxe_Wow-YoZEo`C*Y2uAXO0YDY~%D3!eW}jP$lw~<xbwW
zcb9{BXCmw{+Td&;*tyhhqvzD>%KfghDn~<{D2~Rdg{Hnz2ljm6U$Duf^z<F4oAwTx
zs>r9GE7t*Zc=$P9s8ek(4bJ$5<5V9HcI0bQ&bB#jr{H1LSHzN~Pw$2Y&7wfnGgzd`
z5>GJ(b$)oTl3{@9;IzSa2AL~EvR@BbjkQEjlvMJoqm!(c+XukH$SED#%J0b<+#r@Y
zr=+RPUWv;0X9Ap`7#fHSdUreS5^Z5EhnKrG%Ux^J^lc2o$t-3fK$9*acD|govV2+y
z%+jr{`uR;F2uT~}-CD@uQ){1Z3kxm|@}7nVC@J}gzpu4IY3rmBkzu5ND-{2Jz;B48
zld2;N`dl{X>Jk^1f-fuS8^2~#W^1HNr^R98#>$B1Bu|aBK$;F`XybAyga&2RIh?sr
z=0$H)KL4u>RP~H>4k@k4x#9w}KzE*msNp{6X7`g9wC$59$rqgtD?yB&iA$Ay*3A02
zNEymvsW)h&e1{)#|C}?dZ~s3D(d{~-K0H@*xB|?zDIk^A4^gwm9S|;7fc`~=46|>l
z#qTEm;k0^E*HD3E5LU?w!`@3k)EUPXes!B)*Evti`P;HmC3VPY+Y({eG~L`JQ6P{t
zeBkV|>R1K%xjF0bA%RY{&wZt=6aj7Iji^5|CuIX!E1h2Bd&R+3uydL15S~wEmVgzh
z$`$4rl~dvEd)772QV{s&P8DBU4d2F`^*X*lRtX1eVN*}J_@aEAhFwHe9^eZZEoGy0
z+=sO@b!hloqy*w7m$B`0-VSfLQ@*URqRM@sSTFndmiVHmqE`Yz+~i_Bl@Qckous#-
zFej0u{5yif>Q`&XxqN-`PR*BNNO~`yjuvXtrx3U*6;m+8eFaGJS?{M4A|tkO$%nAo
z5|2KYeqnaEv<CpSqTuCSYPq;rPCb*g3EsS)D+9?$dccuQm+NCVtl)-USA>m(*Injz
z>f-Zjp-_&d2V*wpHXRy*hF#^mUjQVe>Aic^L3!BC)%?u!jhP(f$g~3{4OVapEv_CN
z&T+__jCwh)a%h@Nwtcv5%B$slbHyD#vO9HYvBzr?*|=$Wy<^(2=*)otYbopqLkHLH
zO+hHz*t;QP{r#aOjVh-T;KBb6x8^^{NH=XT<8ke}!_`yNK-QSLQ-LBNADd=puank~
zq(G~xBN|2N=A!yL$wPNdJ0m0v9oJ#`yy@=90iYFT%`1L}o7^r143N*XfwI5^tLO8t
zIWHnO?33^O`n3%bGcT8trvv{+u~SLcaEK-$pL&?NIhGW{8jy${RU}hK=~>}$k8L{P
zB=nCeRJatnoD?U(s%X&0{r=|xcT|b@DQ34}amiRE*x)Ed(@0nKyogyYM*=xDZ&vGf
zSJEmxOZ;wjAA2=uCsj+Ai?)VP!r;TaFNA;5F0i_jfTttPmr^`VW0L)x^&*R@J{1<P
zSc}gtk+`7RNz$&?ewem{7)krbO^v8yX->OIH~jN!7gyJq-;*}L^H#4)anamVUk|$E
z!cU`SG60Pf%=t}yp~`gwDpnN=>odw#ZlZ|BI2>{tReOY_#tE@sN?6tXvGab<St`Kh
z<a<8!>*hnccC9=u*E^~cUoSmA32j|yVu6xVIlS}tQy4p3GOIQ@dhLmGbh$XyUF?mq
zt#M&c{Oj8~Y|<?Sab#7eRuHd@C1RYcOKC3%_sLgv27>=asaMAw6?^~WtD#1&svoe1
zsuj-KQXWkMGJtDUn})af8mQzTtM;33RdsmYs~XgWy!o8TDYYfDagnGYwQwJ<{e(SV
zm)z;|Yk{Qm<lZ_MK3sx!xZt|)T8tOfrHG5T{_g{x^h@Z@MiRhA5nP7^yFGey>t$CX
zIg(MVHpP@RJ*`y<Zxy;9%9~~5)|sZ8F_1ln@jw;}o7~MwoBUqy@xRpwbeJ%#;;X63
z@eVP<<7b6**u086OqwI=_6r9`-0#l&=cEz6o7)1L!`<-UyOq0XYca#v2rk89Q+QWV
zq6K!24@ay=Rd<pnx^0JgWw+uYS@hqbnXAI-q&?qLO}D2vM8vl7G8DkHM|Gb33=%EK
zLM_?|&sDJIHJTgUE9c5_^mUxx3F7Ip6s|Iw`^i)018nEQ6DzX|O~cj>pE5n=Z*A$J
z2~J*F;c=7j*j9<xb=_Npo8X|YnKea9owEV4xda}$yPLKoWm8#M9tcR{zgwCJ{Am3R
z09{hdhv;a@rI4(K#n2G|8O&1uhGYr9T7l77<CQp+b0CtmB<&8)z!No9K(#YDPi?1e
zS2)N(DdwU&$$8iv&+VmFMXC-tLr*Mz_zB&1QYrpun^r$<*WB@MBj>+YQIh^erBzdo
zvxXdTg4+@K{z=*KVikkys_C{9GESRsU^2Z-zDsr`9!jk_^k;#2Pd49UJYiy_!xF$4
zx|jS`E7hmrRIf+Rr2uXZx+)Vp3CU3I%QlM%V@+Q~Cu0G&I^`YDNcyS2Gz=6hs3$y;
z0N6&R-hBhwZbi);Ul`n-YnYVIaMc<80&)P4gBOo`Z)&w~JpW}KtW5#%J`Zj>82!GV
z9s{6B-=~YjH<ZM2Yl>j5gIgkKiuvH5;cZp36L_7|;D~X<oPHasvx%F}G65c(`{jwO
ziH05_hg8FM`H`Pp=z6KKuW1smY}X7DFtZdziAHXRO`cMF%lbB{+SF*yasHvoOLs6w
z<xwvFY9BQLk`s=i)L(<1ZWlfIN+HXpgM_;jWpn1#3O4YFtPSsQsE8}}YUJ$qQimWa
z53nEU%-Ly<$R3VBo*a5l1?_D$^|%1i!v1{M?)2veer7^w<c&K7!o{zfMlzvpQ}0TS
zVBonYn9V;AIM1C&o;JJZ!<pCX>W&?&@w%%ZX5)Xm)8&|I8YEj&9YONqTRlBpP9>jm
zDparW>dpzNr=HR7&-<RZGuLY{k(2CjlcIP~DX8F1e2J@9W4h4P%4{)+&#h}a6HJ_(
z0~ylO=ppU|eOd0?l#mDa!S)nj>S(tc_G*Y6=j+#YTP`VhDtDu($+z0`)RpUWDuaCP
zcyesyi=dmvsXhd`Fg%Q-D#V`ec}qzhi6FG`pWJM9t$>JWfOwHiXDOR*06Q@+X`?u0
zcL!KjJ!~JkE$zcjS<}#+;Kp-s>F03w<9|_P<8vG?LLMDfS(n?Gjs&CWLO$2L=y|`2
zH+(bQpFpoI99;BSRDm%gx&u`-9#24*Bq(&uehJEE67-#~XKblLD{Tl}Y3hY^dM?yD
zkz)Zx$_;+(?QIZx+^e_QycQz_D_Y0tF4654YbhF&JHp<`cRcpYvsSN^#}1``^d0H}
zOx#OQqxE#bTg|a_s(XFd9UzV5zk96wh~UzMPTmQsr@QTcjR8*58D6mEY|H@K9{j@I
zv>SIuV7Xg?LcdA7=<ufcj7YL5Gz%}V01NZw-z#%b-)YQA#nWz)SpRZVpNDi<e;6)#
zyS!z^WA9E`uU-E#RUzKyd?eG3Xx1X-=<yTWvUDbCb1n0f?u}FXthY3H)c;32wX+o>
z_s-Mili0nlLvaS1*IG(d4pJd$@x3$GGjqI;r(UN7c5Sx}Ch`V!m1`Zfjk%__*%pp-
zdJ6;_aHU)Pz`7;=-+8UV@KK#W))J}|$ooA3W`I?<8v5xnVo|5=Ip9eLy~1Tqn+YO2
z!pXmPoOMJyg~~?1oic0+r%3{ZJ;r<A_svmT4HB~EQ|`gSi52c2_u8(RSM*1#UY<T_
z(zZcR%y5ISSZg^|m>WswH4cjXRT6eiZ-`P9AGkO>R{*H{yHDM>x4Y`Fu$I2LS7RCy
zc!Zj`Xw3kWe>Mt1XzkiAM^?Md{*o=1@1RdjwD~tKHJ|?>f&&P&Zvpm^Jlvfji39$+
zViz3IA<NwItpH%tm`+u^sT6uo`I*oJy&m>`k`i31Dz?6i4wA`!lB#%+gyolt?5PZe
zvX)ac4|EQf`qPQ{oYbS!_)B=m#n@Idx6lR&Q3Ieqi`g!cR<22R_Pav!<R0zUF6GtT
z*X2vRe=Uc1z<CK35iShdl(OvPhE1({_-au#bm#C`f4Enbkzfpx0#tn{HAvQ_O!z5j
zUkWhg`@s8l=(VS+X{hk$*DF`8YIIJw%hy1K8#wNy(rg};);GbGJ5^0_j|;fUhp|Qy
z+S4vREh2NUl{|0G&8mmW&D+SUhYI?`y7=|3*DZ(HoQ-rvSBI_b(FUISqe^AO!ZFMQ
ziR&^Zy9KEUH>@*$XXk+TS2gnTecd}AaIKtO10dU}+q%p}UO4d3!ZxdWGGJlEOY3{r
zsf$w9qS7hQqZilg0S$oR#f7z33VZ+VwnpH#X3Dn~aiFZz(GgSieVc!aQn7zkSp1!2
zx+TqJA=_K^%EcLbrRUqOg*bG{SzO|?=Upuc=a-UxFgtMbk%OsuCtZf?w(%cFJ~WEv
zAMk1H7f-OItoKz1zn5fh-I_8?1dO@wa1y`<w4{URfi(7OOcseSr0;y#Nac6X<?xfV
zUA-iq8w6lkwrq+*Al8O1yDu74l-ILYe9ZX<hfoD7#}0DfPI47Urn(BuU)5J0IM0;F
zpt3&Eb<<Vi^J`V}K7Wm1?XD5uZfE(QKtO_MaMk?XcCwz!vO;4Yrw(srGY*Y_T0Se7
zYuZF6T9u(2MTteXIP!9gF+ZJ5V0=279fJ+xrBKDr&6^J3#I+OI;IQ)*!Ar2{J9L*L
z^1-o8iAgEh{nm+xJXiK#(o1UAAEGhMru3b7#@;L~?A3x*KDc{*@+_bSr+Yg5(S2L4
zac@t8t9C^WIQUmQVkOA)pW!&<Wcd791F=J$r8NX_Si<zJbIWeX>4#DmQXB+X>0!r<
z;x?5xYp$eN0X~R<NtuU#9&m!eENkm<xc@_>R@7$282y;x`94l?>x4KR?K~AgjqoX3
zTThwL(IE?1om9l}Ah+%yO*>|M#}2g3)%yHv|MVbyK%`X=O75*{QpOqA#P%LtaL)5r
zclBDbw#1Z@n>ukIgHQ1W5MrfGQd66vYu9!2UEFx8%cd5R3r=~#!*YbUFCXD{DW|5v
z;yIo9C;tMjTvZ3463`ss+d6DjVISAm##09``XBXOP2ZV_uyMcEVmmi2*|j9p=9*r{
zXvTj6>`+ukU#Pt1;&kq@7jnjMnRxe9IbOTk`an;x>6x6NdM4UtzKgRW+-IH^KcIR_
z?U(Ep2b2!iK;c!YQsr&uWSibp1irbxPPOWHO14vW5lV3Ly7&=M$$>Z;-=%A3)4o_C
zI8JIqlV6vU+dyQJI3!!un`!szRTL#UZ`K(P?iO@{Fnp1XY*C~&A=&uG>cMb$GdCw4
zV^<p>tkB+`G}&xS+1k5RIpeo+ElK#~a_4E{-Wyl<pBS8npH(Y$x}50f&bUTuTK0hH
zn=NHna^M^Ds3PfgS0ST!+iBnVx?3mXseGx9ssnhE-2w)2IQFOtEKhX4<jGY0QV?;h
z;^MxYN%0X~|H9J4R7YV26WCkS-xrp~h2mpGTQi?m4oG%Gju%Ey;mWD0tw5yXxKppq
zyaWASl7ir-n@4)OGHMZfnbq(gY;6#|iiQ@RJgxG0Jq=VF2|l{Pwx@ZmXFW*vj@_Xb
zg}1BT1(A0dodyJ?ac}2qlloLeh$uR;>T0fy*o5gE`{3?BnP^w}wH)q0>5QgQQ7med
zfKorupOCI+Z#_*+wJUjkxXwDeSG(QdOjSePM2C1EwG-#E?k@Gf$mf1Kp{6Ns)I|KM
zyIYr2%l2{U16p;U9?t<M;{~pLKkTz<Q4LJx2A@2}IUEP81lqSNCqLY6EsiAUC<Z;7
z?CU|o!*Wq2uV{v)Riau=w*yH88txyr`r%joini=Pn<Xh@vfWVfQ?cvd3c^*)_2Zv)
zaLzM%W^g>jo|dJXLJv+i$Ib!V?8C+~qq81lia@I79+RpxV15=No%eDpXD`A9QbCX8
zDfj`etS%C#yZEb|5gpL4o3=yxc~*C-pqVmRGFKA+OzH2TqReK8VVTEG?oWRbhZMW;
z(Nlw-oO^1p^O3!*B+@;vjjZc<`&hx7tMo0nS_0%cf<pp_hG|?JJ0lkDp$B{!D4@PY
zA>OB>LH8pCpqtH}lKgY7vbNd>RV{(jg=Df;-PQDY_x8B`Be@CWCSdV%ZhE{lms*Rn
z9-X)`bx+-`lm@q<FGwu0@R6thd%E1HKv~Sun0k;$i1h_F20r8BjeERjk~xffH1MWP
z=@7e-aJwE)HJfu^D?SRsbG!-UK($1cX<C~SZ9lbGXZv>@Hh8mEQ=?0HKv;k!fj_w$
z^V>T8a<B?E8`Yhj%L&N7R|uOn3{EIVa#-fRnR27Lrb@=yXM$OLqR7zvXCvJW3o6`>
z$@$3Lo?%UZVK}jo;osx3nP)3Xa2iczUmxRKa&2bG)uX(-y%R#WSjiO*;!aS}`oRi!
zj$U-q0e8J#5D4Xb)M9M<7q3<gc<R;diW;X#7jjjp5vWzUz~ERD?MC=@b~DVrokwrL
zqoa2YqV{D#g3q8^KD2&x!Y$3q8lT>8z`C(C!or$2KVH&$0s_zjAh0M3+lWXISv&Fv
zulFY2Z={XrEl{~;BXL+Yzb@F<JU*3SGDNhJK5t8)Fd?_G!oE8xQF3TRqzl6IDoAIz
zv6(!{^{!KULoFf6f|okfhvK^%X<pdipzak{Tg8WXKjjQvxKGWV4*=V?8tq#vz33X4
zZ{wXaSLp>&PW24}pX6}pM@chY!tDZKRHPwX95mC`GFNx{N72xtfu{C!&zw;vTS>4&
z*7(wn3C9|g&F_UJkg%->zWCKHb8jc8@&a%5J*of+mFB^kCyk|n=)xn^bwTe`d&{mJ
zS@-<B+i2<IoPem|J`xxhbfR3(Srx!br@qgB72*CdY(<V({ukV&%~Yoi4k(dZZTmng
zE60FcPCNXWN-zf-X_3?Ttj|i-9rz)qUTaGm2oODQBp?S40Q%SYp2gP=+Yz9H>;}ju
zq7Wkh_M7ri-36Pjcm%f^(!P^R4gt%h&rIJwiK8crhPN{hTU8~Azfigw0s419EwZBB
z?`gtoYQ^fnG8jmuQxL_)5x7)5Ywk5`$C_N1t?mdkZ-awm+I~Ir;3G^B0g*^u%!}K#
zp9C#lez6eY^1t@%uLi2-E#m%cGruWh*Oy}~;Yj(dOS{HRPwo?Tr%<cRMByNg)AMb;
z&Q+z4>ii5Bbt^`DTkDEcLd4y}y<T<j)1B1>AX5M`z%T5CIdr3wRp8{>NQb$DS_Cl(
zkneVpmf!G;XU<5IXNjg-lDyA4ZWUgenkIhPskGe7?^Z?eTr~?eI{=z3NaUrT69E~3
zx+&dlygJu`_RE6oxzvD8p4=yb!#OQ6DD<g?YzTny#6KbgC}yCxN;&`Cst=Y72!a-g
zxW8Pp)CRZJrMgC{`c(%zHS*c5j8D}8TUx{PxqY6!bs!FuzqE%`rI(KPlM;)z4$)2S
z^2XqyXgyEv;#=#$q`ia^s|Fc2g(XwP;pwzyZI4EF&=SZ&mF=lufpa#If1NF!RtVFj
zzG1XdI@Q{~MFwxzRcV6ihbrchlR%Pp2#&3WwE^CpOD|KfWlX83GPMrD)EHh>{~GUQ
zk$n{i8(8di4J#Vai9?_a@U!zQuWx%mUuKD%O752fJN#}}*e&#OW#P!gVNFlFBHU3m
zw$quaVX5{>+MC7mOR0miFQ<X(GRCa|?B%@<iX6N!c+&hDM&&3Tc|N%*U#wz;^KuH2
z)US^5We?>46?O)@vh2upo$D(Ec;<<cOft!YM}{pxa|xabWRe6t@gMl#y%t|rR<+T<
zwG8#s>wC|s$|NIpMC{mGt0;|Oc-4!_XpK*r<RH5w9$gnAMK@ba8i*<2Th}I8H2r>m
z8VGWftCH$OTGv=3@mJ5drrT=TQZz#;?v|dZA||)y(ot3yuU8YcfJ?@(VolNNEctx&
zaFMh@jX>Fy%~yYfC<M_{v467SjJH%<6$yj8Ebi?WmrI=Kkd(5d436t#za>5KovTW~
zdxmCg7S2&)CfTb_Dyi#km1lT=zwC@8246Bo!eOfQqS?0qN0y*iRXdeFD0z_ZDe9_C
zJdME|g1+h^m+KINZ{2P+<Eg5F;=L13E(NHYjv2ZCDhhG#P9mrmzyU>8@qp4$O+Xcj
zPCZZwrzt2LB}OjOIpt-e`ei+lqsR7KP(?%ulv}TfN!6Vt)+?Vtkojp7D#O;UNZL-a
z5iT&fps(d_8OAZ?^YDp5WBPa#L{B|A*P%F8`)U)^u2ZCr*ML=!ncR1cB~QM=<GSQu
zvNqoi+0b*KY+=i|QXO0hnP~U*sGh<X8}V{i|KecT^;!<AGugq`{Y!zd>)u_;y?IS5
zIwS8c6;5N&rLHrV`&VbWD<iGZJ9m{dx!v%Rra?qaP#S=?G_s<S(Mx?i&>7!W%hdYz
zEfT@K4d+0d4`=;xQ4L7Un{IF<7rX(zf99g-WX+RMr>ME<<`5&g$ESJ%CrZT+Qrx3|
zWihl(N`_Rg?63Y*+WdLGY%P2lUj5OU`lPwcJc(?NuEU^-`0K_@O*R$oNyW;T7q67k
z3G{YsEhb0+aDCX4j?8MG6Kmr14czY}Qx}GyQU%2eiRY*WpFveWmr~dF9-lqG&;ELx
z41pJhB7*HXxS8$N9*r-wE_IA;Vnoht74<dUl&=<g*F5H(L4?Cru5MKE2`aLcEUB@q
zZ8s%i<ca+<1WtJjS#d|Hy(;9#nTADYbzKhZp|TWDf^4b`N9ddOXg~U;Y#uy^TOGTe
z1w8;s@+27D5CZtoH&))>PZV)eL=$OOH-fOe-6UFSg^QD&x0WUEoomokr4cJ}W`+m)
z%*PiDD<G}dTCHkv-rB^tBEB*yg&=VD$M^X2YfsWXPy{eOh{CGN`D7<(>2`CKKq*F=
z*}18672cT;IS^3eE5B`bg}SR&p!QKTww^98sVYdA0+^A7%0JZi{QodGXiM4bofvJC
zG`{+As?A8=tM1PSr2>IFX>bPtpU0;BUTWjK)Gq>^zq@7LJ=Nf~4Z}m9;N3E`h}(Kn
zKQT?CbkG60!)3QTHh;KV<WTzqC=)+oKKhOZM_LNNH}$R}&*+ml>Y&o8qwdw>=I+7Z
z>QV0l<cTRj4711j0mCYdo>dcK*LlDL3BVQ4KBlfhTP<(!Q<~m>!=8|afn)C#ua~z<
zb*9Eqan1ma0K%(EGbsC>vjOfU2^323Um7|!FJCT<Os?hHsSmWp;nc2__PiY-HTTt5
zWT>!nHZa4ZC+mk4qQ|4mBY8J&y%O(&;^`}pz%Bx(s&wNAgWCnuYnQY@9N^J_eB#4t
zzBKq6MwnBur16_gl^7i9q_s6nUaJU8Vf$EpQQ!(giCPbjWT?R_Yf5+9{u8`hv2a13
zuz9OGp|5aT0O=xM$oVV}?a|&9L^$q8mH$F$Y(1TCADrmf^oj>85k-dUr-Z7Z(F3Vx
zI8ax+^v|Pue)mu*|CVqtmNon>$MWQEPQH7W&gTk=s<q8QE<s-p6Qvnn!R@FMlFK+e
zbE?)u1rP1pvb}WT#1()+zw7O%c8^zg;kX@O#ai8qS!!77GDgO{m8ZSTXG9zdpd;G1
zkR}}8hX7{fbZ1G1?o)<V6IDyo=VlsU3NSN{pJ(r+wYtd=E!+uz#1ZKQiZ%xQ{hmV`
zg!>W`RuyYIY1th@h11@KG;v!WVA4+BEkz#ot#3^P42zRDp!>0tEozT>$lSh4;%=An
zq7JgP+5A1gQjZc5(gR%wUSP5^nmXK{#Btx;@J$t^N+5mkA3o<K*dUis@KVjC^;_+&
zso<IuhOO`Gz=J&RU5d8~z;>ym@bLb47=*1!!3Dam+X(A#zm}(V*2fl)E_w2NZr+kx
ztd!E$7XI&_&F-+VAz^$1QY!({a{c756-5GebJ9U>lo)+Bz0r8}%eryfD12h(#=u-9
zwd(Asaw_x#c-ka_9HRiG-F^6D1PAoGwhY)?!=~J$C%nd$;BiIL<KPg<Q|rov0lQ9>
z1s;84zs6}*HpVzLxN~aYL6PjBW-65)k8?H|e?Jkt_XAkswA3+Io>zWUZN1ADwBDL5
zk?fajVd$-U7Uk?N$0PF<hAw*)qaZ3L#A;bTBVtpKgs$fEX5amKPwQ&MW8%=JKmhGQ
zc%d0r(gvEZH@I_ZH@cCd9D<~%&Cr?cHTH0$gU^yA|B>N(c-Ej;aYl4z_cp}S=Wo&;
z;b}y|`=mM~`H$c}4w$CP=up<XnM8Qt2ls=*%NZ9i$*jz0`qZ{vAKLQFN6uMs#aoG1
zDryqbWn*41`5&3=!-dQ2ng!=b7<Jh01|}RjDogPt0X&rHGJy_v*tVxh*{tbTcv=ZG
z#jd^eEA((>HQi(nmFBXUoCw0oPZSB8)zRgS`EGb)heCk7RQ|=}PytZnDR5r8ducI5
z1$+hpJ-m*U(;7`<3OTxDWf_=CPN+VR%ihlE66XFK!Aqsk(YJeQp#;vzjiRGyVy;i-
zEd;nj%Lh@LXsgcft#Xwf!EXnvD=~dP>U_j!O9@n)N#UR#BhETobY}R|S4gQ)dYoY5
zbFUXXN?`Ja)UTM=q{b>Fud6#e>JM0AUvl!~J-<|Cm+%SMSMg$!71YDNR9?T^;(~Qk
zZuoVsA*nj9w-L7-uTx<;8RI8!8fz&WyDU+NOQ8Q!(THepI+HVw@0KF?J_DYUdzpQ1
zblvq+12RAM6gfQchZLfUdDmr#0t2+2C?hVnpOXv$$+eOQz-h;(3@`DwDJyQViFbH?
zXc(>&NvYD4$oY@d4hkheu)@>ip7mp%3v$qg*F(v{qL@=9HBATa)HA1h*QtQl$Y;PL
zDxSj%#c8<mt)BzV?{Zt^*1StM!21lhrf=j(g0~yeH|hLG{))6+)TKKm9RPM?(-^Fz
zWQ4xwtVb@Kqc*D)RwbJzk(2L4jX)Otd|QBSQ9D=*_dfGe`Mkpw3OlTd<fudx{}C4@
zm++%b*)Lv{a5%Op^)GmbuN*i~GpSQ%UoFZ};_(Id22Yvh_EW!Bze&k|ZD3-^#dc~X
z>?xkv_Dur`Z>VjfnQNVFlT(o@de{%O#6Q7;3h0@3ixm#}?FZC(5iIqWvG%w?pS)du
zN_2P#KuKDnlS8EY-U`sput1en9gkNoSH1&x_5rv!Gy2;~rRez9G`VNK1yAr)ne}o(
zY$P>8s9}lj<?V^;qNa@@RkUJ_-%kl<aT+E`_ZDe&GIz0V*2t~y9kE9X%X7zJ9j)a4
zWKB+8|9pwiw<>?fNJ%m6<%o<hmWcB}p*=LBh5#hpEAzT<XG^}fwD%zMs|`#+c>=dH
zn2hlLBW_7?#lzvib5Hd=ba&bY0m*sWyV(t@k~O$b)Xw~#qq_<nTzdLSBIZOsz13t)
z)aPqEO=JzIlS1NJE11ca+>32pL<l`yQ6j?M;XOEyHpC-RH4;Yi&*i*DyS#Cgs4vkg
znSu~WvEvf6I;0d{L}fyX-Jvv<`{(EIe4cl7U=!NjH<AC;Pw2E>kt=rgQz~Infaz(L
ziYJxc&5`7yUz~D6dV3evvi7HhG<oFe{(PThA=hcE>@JknScm!r<-9IchBT%jhpF-I
zVmWE*UP*_Wq7RX~!hdUzDMn*whbteNB2%WWW}XL!04-0ThGXU-Q-ZWb#aOg~Z(xAu
zm6Oz^>$%)^r$8U;A8o7t-PPv<?l~hL%AqE>6NCZKzS<U%(CUo<bT!GGD$>Y_y-c<d
z#QJIht7yZY0#3`b?iElIn|eW1avJiwu6|sWo^fSDYm0*vln3Pj$?LTh1z2R+Y(RK0
z>+|Es*rgsx32djH*N5Alb?awnX*f9#ay%|DUvS~ClmJk1l)HqLAFM~vU0i8fu|U--
zZhN+77kCNSuV+P&L{VK}e5k~hOL&@}^4DH1!zkEyjK*K*UVlrjsKse7E{EF81@PXk
z<y}f;Dg>@(nS;j3RhoJNg<U}0R0yh#ejb9Rig}07t(0vdoq88ah$EF#ik#H8-LX#6
zzp1!c2J9j@g#60dJQUkmiH=q^a{f`k)4C;8T?i@=LN$(Ub3(eM))`X$i$+>R#hDky
zo8`fw;@v5B{9voc{Z9`09<LK9PR;FYVl4kbS_=0yNRrCWqbsBBY2vHA@mODmgq&5i
z<bvV;$0nZi(bZP<7Lsf2khS|#m&mDi419QAZV!5=b~h6aO5wA*CPLVG$Kp1s0f`*G
zS+<V{=xe9RL<UjS#$iBE;h!SEs7t7^WSkTtl<DuTDmRXZsX5dM9{SNE1;+DlAC(zB
zE-p^G^#Q{4#mU#4^0K6<EU&@b>ju%fu)ph)`Y&rncaW68lBD6Ll(_2aQ>w8NWl^0H
zwV@t~ypmCf)iT<icX>wT4Hw4G97(+MANgYZ-PNc1aFfw7vL-_S`U1)T+^O|k@8Ujs
zzOF|j5eGa*Bex?85Q)3|xec8XUe{ev(*n2XPk)1@fWY?ZvtD0a6?eB`59!qk5L0y)
z^>kk$ZAGPu1EZyf_|K&Rx9i)!D%ecJB7R5?1aAA)m%F?GQEU261ka#zzK``FSc7Wi
z`R?CJMJAhpA=Fdmi&K5d!43}e#>EkMH24E^L{+UHN$)%g&t_Wh-Q;nk?*8iOv-!1k
zQC0s`cFFuwL8*EMfco6bZk=Cy^6T%tB5@eZ_=80b!^t84V09@Su1c<c$a5uyQq5^k
z`AjM$Ng!H?O1uH~SLyY3`dx_vd);r=cPlz-cO-?N#2-C*w-kV-BNV{)J#27u<kNIx
zV!F`TCup>3Vo)=g3z%OAg%}x=B=bR?K)74|{p_ljnmm9o$3|U?>XW|+LI{s5Az4T1
z83D8aKG_v3&CeS@9<A2uS#D|Ke@EI~JUDL36#>(dO`Fo@Hn_LlT6L>j88+{knjXOh
z%`m?Y(Ax)+14DJMUv9do!ptL=iRFw+##@nUtel}L1IM~|BPgkVabAi*zHx3k0DT;d
z-TlW$@0=W!BJXDEKjH{mHrtdAqYf8^k{jCdpt7%G=E$wu^1dyM*9MpDBd3PHCyy>E
zL>0C;)lf}_i+@uumpvP#upO>bot<!`F_0URpLT*R;?$+*cS^*6r1bgsS>FPWpFr++
zKDbWpL6=f^(cFEwnP)Ky{4T1x%F29rZc@$o1fSc$;j|V2Io)F`kW9%N#PShcEHx8{
zOldUj1_EVV>X|mzl8YFhxK%WSjNHJaI`RBbmfd>a<l+e0scP?nsuH(7DJ-onlcAn_
zKDaY6yHiP-np9AeS^Rl6{I)Axe;Mb9V%*ySttJxQ0|30nt;t3vyaL+^QdFi&G6M;f
zc<Jv!s9MJ58r2z$-(E$O!`5@sBJklyY7nL-^5y<4(VJM50Ls@=04iz2(<6WB>5WkG
zF4GReo8s0SGoN_$=-h6JJSk|Vtj9H>Vl1UoRHdDk#$;Iv3`&Uil~^lWs~$>e5^cZF
zl8>W2O>{=oZMjka?Ct3xo1EV+QIw=lg{&u90%&Qq8?~^1_h|^ggvA)7eY*F)oY7Jy
z26vd8I`>A#8mIE`TpG%~A-^W80CUH8QpQ0Q=F0WY>9=X^f*utP$BpN&xXrEdljiB*
zh@x{Y#s8`JzAvnTp568ph)A1y^)(byRu|&2TkH6W+fI>vfE+KibP`1}xbVud|1~M8
z989NMaxTluKT)cRUs;F{wwQj3_pVlI$N*-3H?@=68&W#NeJ&ypvVl5k=QXK|s!pG}
zaW8`Q8~@yfKC0{W(zSQ&I8HtOPSvc^DM9YsjA?*mbl@omL4F=F=^YHHVY;ie=$`2L
z$E&YvEqHR9+)GTRN;o-SO+l=5>`u8l?L=};E>ZhZBIz2W6gz3Jl-&YQEkd871Z5Rp
z0sqEf;oYsL?v|&EXBr7n9jHzkLMJ3d@XZ^y4gl&IWFPXz&Y#K;FvQgsZjg!OurzW3
z7r);2_v%^8ULbHdLrvj{bp1<4!6gcNTW-Vk=A<NWRin`wLXOd)!MX}O&y(zYol|sO
z;kWj8Y&W*ipp9+YR-2@;ZM(4=8#_j0r?G9@*gNLQ`ConCIOCj)^<J-wHP(FIXU_Tj
z8gosxV#f(C;|x`jCy#s-VgT3*N5f?witn0!Dsa)il!BtId%JHhAdrI#ow_}pWG0~p
zpd?m&+oWG@xIO5dUOZFdY_5unu`Gk2*}ZJqTF0l^FSoN#&0NZv74IDuhN$``fa<V&
z9P!lNUs?RDgaOd6Hwe_BkTJOg0#2Ag52CWOYjW)s6eD1_Zt;PLJ&($ab*bW<w?vJw
zG1eVF^+D-=^4)EE*RN{6@Mo^tbaSzf5lzUs7l5RNmexurp`jFW*7BbeMUgL$VJbr#
zGE9K9tI3|T-Q7=Ag`>5gT^y&k%nvIeF3#+-Akll!yjETX#3Uv{gw2L{C_r4%(uaAW
z=*v0u+)ZQlMNm}>g6$f*syZ!gK8wfa0OGeBou?M?kYV~`72Dc$r=uQ0Ni{uZtAwvG
zZvRs_<6Y{Sg-VLePo^B~#)Gxu^$Iw#6hB!n!RumIbq&E|i%YLH(?8Y$m!c`g6>tHn
zj}3GyAjFcUbN<9#nX|Lkxa9zUw8ylUrjt~Ht$7ixlBlAJEU)Gl?JP5geE_=`v$OBz
zUTb)psJfGV8xC*zlQVpzx+>NYX^-G(cSXt^lU+UB!ebSV>PUM6y-w!>IM}syddBXz
zXi?UPJt|oXtk{bKw7SfCzt1d;dAW8oX{l;ol@3-=L|XMwd17Xrs245qsNNrMPZeB*
zD;xp?F6z6);5vzsM{6$NA5d`y*u!2B8b2(#jAcYKnh`-b#2v8uxdWZYOoCGyFt=Cs
z?f3w}%BtGG?H1JmgX3C1&09CYe4n{$QX)6p;m@jCWUm`lGr!g;WXyR6wqNa0M_tar
zt!t(i0_GHXbPoIV<yBdlL;}p9EslS86;NzxJHHJ<q^*5~+P1u0oYx9fPcAXdu*Yl?
zj5|{TNb|_s3l+?|l4^8-LC}LpZ1GYi9&OD<SGtCjRwx};G}YF%*NF0wg*#X?BA$(=
z!?m+i)#;mQW>m=!z3QL@@8Sk_H*s1lpk<RvJRbYR0L9^MQ2OCO%&aL-%DH?<sbhK)
z0X6shIuK8X)wziIz8UX<ZOvYC6ZhuvIk_wsgY|^tMoqmW%dIQ%M>kN9DHGgOhY5)4
z(x@S_)MD^$%#F#duJJ@?S_^7-gXD*2_~lUBN6SLh&&{Kbuy-^nd0!{Q^%cuzXX*{4
z8eAz8ltefR;s?TI2XB0-GtqAxD8;>tl7t}rCI|LzDpd<Tl4kmHYPDUBb$NSA^@624
zv+SvnDgy(IG}1s*;aZwKX1`q_6+{qLTd<mvM{F)Fp@?^VnIG0Pyvpq&zs4K=(mc7V
zF!m%7yrTkNKi-Hes;1}zfklLQM9E*ro-VEGc(639mC)n_ukG%2o`LHsKgm^nW33a4
z&8T3f6VHany{6}-)&TUhMLrzU<)<eXr}t1<);y?OFWv1Z7kRNNAJ6Le$C*$rAMhCw
zE!Y*JWemb_1NEHzx|C-n`4<&)J#8IZbL0z7B74{s_3x#Mi=fGo)X^FVF_#`P*PE8e
zSP-Kx#(KD;@&)@sQD~Gv7eu+uMP;-(a8d6Wp)lXRN=~aq?=X+(*-aS|Tc<SB2(W2H
z=H=cK_Ut51P+jpmd#QU-fHjfqz?ul!X=P2$<sXKkLQ)=2m<*6ut>-8#Dg$RE_54Yb
ztJr$1Kt$b8>LZ;c9C0_UUnL6SpO#A4=j6XoL2*&jO?+ulM|ICt!q<PKsOsK>wNu%?
z!p{7ZW_F_qsB&%c7*+N2g$y5dCSN%kCZ6<{VEtf#$-M#hhULavBFtySFE?DmDlIa^
z#9mrdX`1DStSTsbsDHQ(z95;<^(!O*#lr+q#ia$6o)9U_si{1~GmyZ60zc+(y5v*D
zWR5NK+3y6eJ&AN=uylOIyR-!M9Ksub6^||oLmw`8o^9$8n3+!#D^;K}q+j?3=m6+=
z$gewcBK33<54A?l47L8<)=^fsB_(xc&A40h6i4?#l{`JG%gbCSofbv;xN^=CI6XjG
zqn!>P!B>i`v-rZ#FhIcfbSofEulwP5r`uk7xtHH!zW^ec*1KW5$Z^SHgj306w3ck`
zch9Psnbr1fN+r8E37YgPJ0{L3{AF0%MRIlbYxg&86v9xCb|z0LeLBU5Ma}ZRIe+?{
z&UGU0P?%poUhhQ+=?0v7^@PtIz0H1hJeBZEy%#uRM8Hx!hP)w|R0;8NgLrJT74egG
zZ8G%h!Iw^<w!M3^9_fktm!XtOd2xlIN(W1Sl{cB?819pEEl1SWD50?q&#gc*sFJ9j
z6p7b>6b&9!p_X6yMMKf71|T)Rq1F!K#CAdGNkO~Lcvo}1jFe#FSp!rap4Y9`guzsT
zj#W!#s93LV_oRSr%?zt6Ra!q}JOjQz^}ke?u~cZG0)9n4hCB5LTDks&x(1ew_t6(4
zcJY>d_p=lmwQO0{<ovPCNfaaICq?#pBIP-OxX%aJ?~wD8%j-Y*CYRK@X_x<N^L4ER
z>hf-{qdL5LMJnGmadp?$+MU)ZW>kPQyzWpX;yraycqZTe`?j0Yf*}f?9#9;Y;t-g^
zNN+%5y_bQJ5LU3LK?vSmtp_nHa7z&{)H@;6Nc~V?`ZU9T&~1N82!AK*C0i+p6`uH+
zLMZP>jf;@(){>l-ynf9)Q+-(o7=ADJspfw*W8^yeH)Y^&!-A*RoSSZA8y-(Bk;-Z7
zQLbk$hgr7SM8Wi#+iV9KQ&7tOWs^Sd=Tme{+_rlH9qb43Kw)WivF?j5IAWiBmx{Dg
z2CBw*5yUV0MGC$nf~LPq76R84$&gedslJx-I~gXESK5g*GBE*%DpT)$UTIWcKd}?$
zCDrg#hc>=Lzo4nwePl13*`KKQ-M1QJFj-$6bsA1BuRwus-^d#9)L_Q%P#<`^Wg^j5
zzyMp;Z{)Lljq^$Cg!NOdiU-c;#VoB0OWgAXl?)`EwkC$uaP&mB{IBm<4IQ3wA^eJq
zV&oD{BvU65htq(lA!hqg>lRa799PX2Iq1;c0gs_paafLTk#{~O8uv9D!;o<3$UVl0
zv(5GUaGEh+0z_Q{DP4_@YqB+vWRa~%c0h*d-2q#t0ldy~N}Nk5*t_@yrIz{J2>Yh7
zr-qfbH()9w%o&m)Rr{;g1f&}9Zljb)4|^BN)1N}o;v%UH^cnrumn|Z4HDrW66LrKh
zz8+OFjcF_m;9Ch*dh}@r6R=CQ8kM8nW?Z%F%f>dmFQ_SShK*QoH9y#G&i8<Cu65%o
ziIV3j(70;Qi1!^+X(3$FGhK{SN`e*sK$cv00~1#r&d+v9xLP(;B@^TP-(6{i(&{`@
zDqE%IEzuAs8OiIbUb<k#53a@zM`rW{b<g`&8Hxp$^Eu(ns6r|VOo^2o{dIBVg)dVV
zzu5Ev9l)Ua=tZkwJK*jc4v&*PDRZkMaW)g(_>FHrb^CbM#T~t17cm~Us^fVgdsH6a
z8dLZ7z~QB!*!SWbz8l)H3ecy|NngMSOHV)0R!mII<K;(X18J}SyPe8;>+Ua4<~oOm
z>+f>^6$||oR{gE|kSu6|%EV-1drN$&i*>l0P!=*HNv<vY;2sm1VSo=v$yt7hWy>6x
znrqr$;2XrA?M2^gl9ub`M>LA3A`FYFg?s51>2u&lY+2om#wFX$!;#p_z;gIPzfnh@
zCoTG@VxQd?9K&Wy5a1D{F|g)|G0I462g&zq_sn5qs}c3Rr+C->TPrQfxPi_}DoZqE
zGgvD*+u-?+th^>EXX{QSC#%ObmI$aARc{W&vC-{!y(VgK@*|PwZUteNtS`G>;v)BW
zzFN@V>Bap_2D68^RjBpHlOcoXW8*=kJ%vUIW20LhzvFpt!{@rt7wQzH+724<sYQY@
z=C^$xEpyJ^Rm?{R_miQzGw9Al?0VL@@N$~+n$|oV!nkyhq5{oBB|^X1P^lEbfs<d-
z=1RV3(83jNqqG}G_O5NeG%+38?75yxZOqx<@$%6IFtK`OCPib~+;Rb@KUZxZcD+!;
zQ)S}sXPn!8d97TfOJf+K8=TggJx5K)Hl!x2MY}fcQ47THKCu<@d1@p(2vlepG-*dX
zRfL`*ug0>or4@b97I`>&Q1VyY<SU6nhKW3lyp44vY8nE4R|~W{&x;wa@)|+K#M%<*
zfG2Sulb=zS(7Zlcmh=4i2TeV@e>!ctT9)LeifDDI?R1aPAH9al%ZTsu*N<s-&9SK=
zmQo_L>8E+Q_ML&M-J#?U<E1@kQjp&ugMe;mcQ);}jw#OrRsHau#XVkzg|?U@n^e4p
zUI02p^Ig)OZX}ExJdqn-c3x+rgIUwx+Wr6$j|Wt~RAN#@0xOFY5S_nW&ec=F@Ziiu
zfF{M)rCoE~0=N6Dp?xMM;@2{IGaY0Ec_p|S-QPeO=Rozp&sDuLRl)6#R>|hLD+WHc
z80RiliRIDJ|F8gkINy#Q*-MM_cBW0;6BS1xH;vxRbbuJVE_B<0<;S46<Tt8*UZztY
zp?WKItoz+eWj2Dtu+1+gwLCccEgM-{@fqNgtIhPohMn?iG^k+W4@YW*(>Vl?>bxjy
zWPM=iTB|-(XI6P8ix<e}k|wlyPN0~&e$`i~v5RQHq3uejqOAfGA-UI}jRQokBy`s)
zGn$MOuE#X6(~Zh$&&*RL>eSS0u`)NGu=rj1`B~lc@0p4>))Q>6vTe|+%msy?@&w;x
zBi{-Co-#LRN{jT>*^xA7%}~*COu8bi!OB6+rB-ceA%BvGooWxe(X=7Ks&?K!ZnkMJ
z=POij(q=3JT}8v~^|*8`zs!nzA|>%0W*Qt<$fGm_)>cMTyUb4j?Sm*#w~GTiUwSRn
z0HZ3gpp(E=m)0oz*dJCD?~cknp+2<PEB1vPCegKtWoQgf)gYqT--<&4<|p{^&~LbQ
zf8cINgYW1wq(_WWfI0S6Thx!&u&{S79L+=9d*yZr%w-2vuE~r=A?+lIYw^5Svas)3
z5i;?02aYADt+0BuTWf;Td1mvbQexEimqtQ~>X89>18-zX_^ia5I+R;E6RcfO<nAc*
z$#H^eoBB#_?<94;AekcIx9p=2{WA{*R-m3+xs;khCT&WK_F-MaK1i^*XIr4fNfpYz
z!>dtf0E=Frjm{*R@2i%CsB{HwA+xy_X8`Kq+sq5Ba?f4cAutbq>+)b78MW{hSp)qG
z!IPyV@7n`pB5X1mug7sYujySTVlgZIm|W>L?!)Fmqv}Dt{awCNfR(x$j*c#uEo_LP
zR93E}{`a=jlcJ8qton)4d^&YPsio?B@4E(Zdy?9FDMx;Pt%x8Mggm&oJa)%)nleYB
z<SNg4;*mwlfwb+shjnT!#6QgcK=voRbo4(I@;E@L#wZF%%xe*9i^^r7!s2`_^4<Bb
zRN`E%f0JJNTiJ@nAf0&4i2OUAn<ho?k~Ti6<~6!jk0kyH)b!IHzHJE*Yq2&gfN{t&
zfYaBF+dxJl&@A_FFNOXR)m>YUr3odMtFBORf{m|PO$Jm#0D{_3!+ZT691D{rL}AI+
z>%oWy{WM@n%-1rsEJ7ts58}pwrZ}-7rzILr@ijZo!uRu<`LFtpBU&*;T?HstSE?3#
zX&mi5X1=TC4kg)kyZ5Jm89Sy~^Qi5z>r~?Vsfm=IE3?ai5qSaw8`Fy9p8TLKvbPL_
z;1TTd>v4xU(da6TgnBF7h!zn0fbZZS$mY#UgNNE#NG<8mDq1~ewhBCOLs4&9Y<NBc
zBFgx(`ZP&CTY`N{GZqwp>!+(`0w@P;GJN4>EbRHi%NTbwvu?Vew#UPVo<c=un_%qA
zA6)o0T6P$IP2NW>>2R`fqg-<*$S8g1?(#UZ!Lrbk;z7t!!lcW^tM5Z!@7yXO;&IN(
z-VG5oMY(bgVai8cm`amOzl5uZYZWZ2(~KXb1Tm<K>#5a-+>J)}SaRl;u~GaM;O8+{
zgrIRdlC3d%-@v0bv{+J9LPiQvwmW-P%?<seJ_Ch5+6-`|9|Z3a+JFCffOlD!U1VTK
z&5fkY5elKAO0(rjBiA@5@q;PJKwr({a|%eFdDrr<+<eEs_&6jFnEnH?^9fgqH#_>g
zSzOC6`aRYVW=xjHxk^Cufsu_-rL7!0|F-9S9%6m_5ra^w7T4bFjieTX3-(D_w>a4V
z5W=I$C#X1FPs(0<{+)PPij&;8ia_73Fus@<(&sDAu?uDCF;0PAG>^Q7kyQ5mh*8b2
zl$8Zj8Z;c9$1SOK5^NKWnKm=)VxR#cN6Yga8GDX-h4IiD%1>$t*pY+kz%`!@mdrR4
z;7!Twf>K(mPS`5ZHbSCHKAqwNYXnrBh<v8zOkkMOTnCuXw@^0yUQ0=}ci`h?g&+FE
zjgNXXEa(kk+wf+a`5-BqST&?oO~y<dfg9o5X{rK+rk56Uz+jVRxNH?@5P0fxWqIZ#
zfr)27;fZtilrb@(sqt0gYp&40z!zmNI~{THoDO)03wMrhfKAU=jwf_dE4J^c1hV1x
zLndtZSTL~)F^3+6bcXAVvS$*f8A5>6NYK|?z88MVTsp8cl<@w&vlfZ%GJ{F84KKY=
zX;-AVU!y7uJxQtT&gjx>O9?F5`oVk;j?L^~x|*2IWkdT@9NVTh1IyX~l)sD%Btg!+
zo$1t6v91Wsbzx`cg-y9MA4`v@4lQKc++CF}Df%oKk<%spZFL3*m1osh&FQ9KuLiW^
z8+sfwqF2D5icz~9{#A~6AO}fC#v#2@7HjDpIhr?xnJ<hLlA`j*DIJ8>WEXBG{Jcpt
zeS3H1KPQD(#D~U^m396omiYP{^0e5P)XA%xMZNH#kPi#~J0YVtTlvx{v>nhoxEV@(
zWH0uTJat5)YkekZ|BoA&my@TuzLU(UT9t*C8&H8h5w{qIBCs0dB&r^A&^0yWsNpJq
z($u*|i+01AmKG?IA&(oGc)g8&hV-Gh#IR1O*8kvkyj;Xab^ZQ#>N28G70+?D@?WIJ
zmrGoZ{r##<dtY82I;y&r6i!uuCqN*H)A`H8QI#S2f~N8`Bb{7>nehe}GjacOYo@x|
zKF50*a_IZqRZJU=%9zx<M<c%IQ;+2e7G-QVFiD&&500CQCs9v9R!taX(hy_`*@u?%
zYKS!1UenIeyzgi!E^8|Wecf<ZcW?E4fa48#KC&M(w&MRHeCl;Wd{;W5Rh<9D7JfGw
z30bwEsAP9Us`RH<5izQneWO7^x%X#M;mjUcSLAe8hbGk*1VCTI`q3<i_v{>?>JhPd
zf5GUiWXX2VwBEJH6^v_mv~b3brmDNpU>Ne>ddfRAN8b%_kIB<oUmjW-%>bJAV=pIW
zeDHZIHmCiV`*k}lu>(eLddufCKcH9-Tx(se8ysD-92K=WOwj)!$as?SJZdGN&9(X3
zj)tDJXRij<6xbiqs%i1E7pEO-=^N}kUc?Y~F6dV`eOX476r&8GA6gSB+Dy&woT|4T
zwhE6~XE=J1K79(ews!|Mc-wH@_-yK|kuUhSg3A-*E4-hx#-cM!aS~Y$aAwY?8sFKX
z_I2FZ6yNX{n}ojAs)C2<RH@u9+jO(V18yCi?{iECAN9-ixZ=Pp8)505sClWLm5!@+
z*ct5^m$%uYb5+f$a5qe@eVUg1-Dt^fzydTrD9$y1O-0_6E4FpH=^k@$Wtwax(4`<W
zM3Mx=iNshIFDD;irAWk+UFLyUbvtCQfWrY*Pr&QX*1#&Cwam80vIKY<p9rY{+ixFL
zB?JE?CTeJGR2=o5UY(CU-=QAu&AEG=T$57-4T4!^Dp0WnTC5Bn?z-KgqgQLijN03V
z$Lsw2j<FHMCfOfh?}rzcJ4F4;*dg!<ed#xfYkTRHHy&MN8)Dn2eJ^QxcQw&>XIX1L
z=nT=NDlbV;_w(Neh(!3l)pZlNVqU&9RqKeLoj9<Veg3Qowko1}=&1#RYKTqCo7)PY
zUR`hrp~AsEV(ERI%_2KLbjgsVWi$z1t9mifoKzmsiJcxDDG|$$AZg3wlWz$#Ei<e3
z5kT*AyXpd_#|jOO6|VS2OzR`4MzPBaT2*jqyM~wNm_`whL=$7Png0gEz0WCC*;MF%
zs|IKq3oe*VK2vLB*4=6*fp4u558+l5w}$fjol}r;>>7<taoQ#a_`pRG?!|mn2P?DG
zaJ8UFMi8;xLztMZ*9u5WCQr{R#llgo8hdEgAc>d|5r^5Bv~PIx*7w0M{BST_|D!Vo
zG}J0M12p2zr#*_fso~3G@`cT}sgi+&>h>5>VTT5@GVP1-PU$_})!P!=eHDE}KV?dg
zF@Up;4&Zc_DQNIyhk-#H2~Xq*a~|O9;MuOzljyBwe}3nICt!_W3(zcm=SAbFkAjV{
z(r{i2Uq7~G08s`{Vk=-#YO(zDo{a5&6+^RSQFoW|f-lpO>ph~0-!G(QY5`0t#m;xS
z2fNCYlK4bQnKKCE!5mBXKADe52i@V9jdQ5)N`ZRqSRD5X%LQ)YO#w7=Y81kGZ@C1m
z3jMiY&xE$Z2~XnhG7j5{&{a(f>6rkkD1r8_*m!K7!dds_Hk;yM3JBLOuTkSa<T(>Z
zcKjcV!boT>V-M@6uu;X~B-l13%DMpyb?#hceHw|2c8n<QR)vYYM(#$JD}Vdyd)=_`
zQaBpeTsCwwF<OKt^!4USeLah>19r`L<B3^ZzmM8caBqD1_x8D2U?o48F!RSxvKWy-
zN_4J7?&4xPfYD&G_!qacm1^a`z^a9-yyWs$BViA#G4mmZYwXDH7Ean`<5vGFRFFtD
zpr)stA<0|HsE~HdU~l#gtRM>&PP=KkjI~bzNKbe+e}X%$+#n`Ii^>Iy3IGcvAO0tn
zNU8qp-~5CFSzz`O;N6roZ0&V07Dt*JUR2GC=GF8|8I+OZoz@<!+mMlI2X{F14`qy^
z*y(UYB%VJ%2J`JzihVL~OXka2EVMqiiOdYc<tj#g8@oGT33xqz+lBQyvECzRf252i
zr$UVX%x16_HtpA`?jJSu0?OPG1D#7cT#K9aUc{Qe-ejlB3!vYBZ(2r`_#|YW<;a<4
zi8&YoTS=5=pA`tlb;~ZHggBG?8z$E`)$9svD)!8Vln^J@Fh=SW-6!ZR8)@=TrNOE{
z$!^@|-C+h3u{BiK-l@}6<UEehr8Ws4)r$YMt)e9>_G<VUHai<D9Nc>d1+lvR*c=N{
zReCJr)t6GL;FS*`mNEa-NuqQ{O1vb%+?SJ{+4Fk%Vv}e{WnQ&}lLXl?4M)Wk^%F+0
z!6BLd*V|Tx9Z0&ze>^_7i5SaXIVn9VjMeeACa#2izmg~E^M!D6!}oj>7*e*ovDbb6
zS-`2tZ-$4JZ${9!Cs+E|izsK)ZTK-&m2ctTNYk}=Y`P|Rwl2`CK7DzDWc}^;H_hOK
zVAOIwgE=w9t_yy}04c(i8<wv(b#0|~1i#510#wZqQvE>g(pd<kr`{L8F;9h+frL}3
z+~=&%xio7rtDVoQYe=1%V@5kZ!u~=|qrBDF<4V*2uG}2l!fe>=UBqBW%8HEZIbmQA
zU@U!it4PtkP_8u^L5MH#i8!(*tj5k{)^v&?br8`K8*~j(^VAkrbRIY%no4}gHb5tz
z^@tGhwXZ#5zCjM}@P9)2kPbV&YItYU*CX>UV^WsjoTn-ITXdFl=6@Lh{s(_CbeK{l
z&Q$4q;w6I+tx6k;a5)D~%*y8Gl3FX#p7bN66%zsx{SC~31M+fRk2J{%81@*I!50;8
zB&SW5`*S{cv?n}Bw4A7_0gV?{Xk?>`4-WbE4YHLjcC`f4{<+kI7hU6|io0x!sn8O6
zsJ1Qk;g)g`fxf#*HMXv>=CBcxlDy?3I7&rdLi-%*I_m3%rkwuW%J-ocaQvDI`pGb$
zr+KubU~5$_-O8h`Zb`uL8<pTZh`6sED{9mhxJB%&TuOl~tk~z27eRiJ&=zhO4Uomm
zJf|`1Qm=NH7$GLCtxP+=Am-80TJL{@L*1S#ZcA1^)L5P!VHP?=$JUsN))BIn2%+0}
zf)RFM3J%d`4Rm3D=ZDUu!U>U)UNiVT?1p79cQ-0kOgnO9Y#{J0nNT3|r{dI$uMZHX
zEyEy$2^jvslAL<oRPh<=!mqlcG6y5s{&*6{q&Z=`Mm?hx?V9Acp<1E)t#kh+KkOTV
z&?;`BvYL@~nUffg{=%XCD&rWmirz6E<Y@V(`aZ}}MF{<fpB;I95VYP*8Y?~*FnpCx
zv!#5d2FZ#bHO@DmDU)?9+~#y^^&+RpYSD!gczvW{X8RoGBITK@fKo#h>i)6spkl;A
zZLZ!xgT*D222D`CN=^E9*J>*pQ`Ux}Os4;uFyVd-AT^)m)s_(46wcitgU3O+a(0C)
z&IxZiTmMtbkqQ6v*{WMwfSapR39KzY?;Up^81PkQ36Z+ukRAyLaz`j}!jdjo2;E?`
zdF6+yUjaQjtuMaKT?uGNbmj~`b!C(^ic6Cx@8fR!^6+bYw%4KonLo+j74n*8-TA>v
zf(z2|;T!@~&6~jw$vw*IZF|lf0x<REe-?`TVkNQ%4oLJoZz~?_CND{Z{k{Olgx1zN
zirVJg_eYgVe^On3y}Z~h*_0Y@5PwJcA?&Vk2{ZJl3nI$ZYLGQRaq2gte4Z8;MnjL0
zo+nfHrMCwiyIHM0H<$7XHYG&;9a-w1hURJZkNuKz)v!<ABE=z67><v=Om>$_sH;y(
zh+ES&S-mdf>7q9t)pC4$HhvG@3nVWcOLkJG)28crn$%LZUB3IM^rfGIB(fH&27=Dp
z^M!YGs$V~y2kp%$>rg6}H*E$6Hzqi(m{`6W{Itf>O=K~?N?XdTF9gv{YfGx5&lE#j
z1}L@mTiS9P-TUq%7N>d}j+<6cM_noN+_Q~e#b~8600Scm0YpMBo=51srU8q#Xwvvk
zGBV7LkPQfSad4eMQNGrza-*UYKdndd2pg$vqyhxYU2#jkTI6bRm^BDJ@Z3dD7q^ss
zOlT!H&cXA*nFoAy1xFsaxm|U(r^9|Gg5Cs!`|OI=>N=hf{@aM~J~WhGT~t_du@w#G
zDfd0a(_2=_=J>hmbX0_r>6YFW-?neC>IyS?`9yb*pW0dIh4I1cD)~>k=e0BBIg8e@
z*m-{hSPIJVvhltArN%?zvZMe0)cFiyx+TYllzZ6{_TrfOPRN%ebElq<N!`v-pxB&4
zYVE*8FJ3(5&y4N5m`vuCsPN0_s~vS31B=1*#!;72c~tj3l1B95?t?__bj10o&?sW^
zPgxr^`?Pz?CGRf-1T;z}GKMiZsyzp=1K=BkV-}}lNEdMlZpc89@6P21&4Giy`xRTW
z@(d{^j*h8)MGUODDUDm0E*l_IdC^SlJ0ry^)!@;z3EKAfaFZ&0|7`2}+xMNVn8b77
zM(jjf8>(z#vBRKmocSM*#BsUZEXQw)WCz<&#m@C=b{^!~hIX?^Ms#>Jv(gf3GG~4_
ztlZB&%<j?j(^O}x#MxIse^j``$avBzQrFpC0z3-<vTi$b*b-%pj^PKzd24#F0oq;i
zKN-A&h(&$(oHXkId)YQ9f5qTfHOv#sHIY%Aoe^)k=wsEK-vp!S9j~ak)3DTub#KK|
zfy%ZO@`$B;L-uI0&(&~oe5F4mP9^N;b<`bcD?IGx1NRheRs#4Yalwa&#PeTSA}g59
zT!V0u<={!@kGueBQFYMPfYX%33yh@iPviM|zwR`x-gTH3ZS*3wHWwX3glewn#8!q?
zGAwTR4Blv;x$ox9GqYMfII}5l)I&3aimIZ`_h?R{=Yz4df0_w!i-j8?7_Sz}8#S@)
zNhX#HCJ+SpR7K=8ovEktN+(fo?O9!@h@keZzPFQ`5!RnDY6XgEHK-+O@FCM%)(HyF
zdkJzsQ0Jk=+zo%H)v4*!^pyJqp)7*j<aXEx*p%nvrLeo(=C|;a)UIPsrwwv^YLIMp
zCojQW^gq4ZHXtdy)r?=!<6y63(!LRQ*-lLmxtYBK^yIx3h>yKne9fZi-BnlV3nhbh
zw4P-z=u6G|hosDpXw3IDB}Fj#5aPFoAGW<xgXx~v+hA0GYi-;4Q-2|Fq`+jrZiA5X
z&82n>_y%_<;MuE|KbFMM@A_1U!>N=4P-~Fur4rP0mMwRBn}TV21hCt|ZwCnZHI3(P
zW4La}RW7B5{`J}~nXFWxI(Te6Nl{6SZtBkci!7YwEWNAVcVSM;jESPUfbKhZ@$|3C
zP_S4GPWt_b1{|OTfoE87o@iWf3?=2vyLmSt-+S=NtQ!!V61nY7t2Wx_^UPoFgD?|f
zom+HftS86$ZetV+eb;~)Y&;kay89fuX*Jx9tFs)<)^5Ai(e?=&&X(U%)z?7LG(@Kk
zfM;#p_B=BM+u0(=<PGJJIFU5IMkEfNn<F0>U0pgE%stJzwVzXDO96GLi2Ms2Hzszw
zG#no8?{imu{FE6ON`K}tga!umtp8czS$4&gX8+|fS-+omTI>KWVz!+bqs6FpycSQ*
zi@~IQG;cY7a5N$^wLB7VX{4vhg8Cb2EWT02I`)yXvv&FyU6qEtjc?O`mENw0$BX;Z
z+VseJC>wCZh~iahVdo()`3a+phRT5!258I96LN3LWv<ZY)ghff)t?Y~T$im$-OgAJ
zmE|s8{gY|@>uO5|f_wLAbOj2T4uUTJ!>Z+#c`)GS(aLKav<}E=Qhq}Cv=b5KoS9Y;
zNN?8NXwpj9AH?Z@Yz_!hNY$>us|%X#YIRLOgit7O8T+s#eo#%S@{z=Ot*K{amYGUD
z3c%~{lkIu48TiZ307>9IR?A25>agYUDK6a6#QM$=53h9}ClM*3qKd=rZR{!EhR@=?
zcGHsw?0k3!3iLK!ch#KK7i)S?V923*+%ioY36PV&gV(55!R_1eOyZ~`N&#N|l7pmq
z8r&L{vtGYe>1;>EF^un4qrFlB{{|}9NhVLnF}6P2=k+yx6f&Ty{B<8_oa7UVI#Xsp
zj#v;TCIBQdMKYzA5_71`v0uv7!=Wg>Z=0!U&*bHrIc-^_o*Ww5S!*m}JjQ0~LD1;^
zpa2(fD0Pvz_gYc-h1eYJI_I(PZTg=AiSY8$W`d%|ubAW{%nBUK^X@GiHza2or!*kQ
zwzML{$dJ3@p9WEe&*D^xaa8iC*OnuF;)iwl-GV$xVQnLiPDP~m<=S-H&#3)cU3I-T
ziNOud!y@fgK0zdra*DP%ADbK!X68<`i59kH?;|T3P6)j1Iew+hQurw)xzDmjH$zd3
zAcsP7YMhbA{fp@NDK&eQ3AD&lovrKQMuAofL+W;COeXhkA9-f|$&Afdgl{|?QJG{I
z6oH-PniXr<^AALK7o~TMV?Um1tJ8c1%~YFD*PDD@Q(pMOxewO27X4ru;$c=IS#7}|
z&2d*ITJOo#D+frYX`}f<5Ze16QzC${kuIV25C<l<^{8-0VbpJ|a{bYPYZXFeyYtk<
z^{h_Nl9*mb5rx$lT;d5>K@#sjz}Q-U0Y9R?jTy}Jb;$6~znyRY21iZ`oEzE=8*we=
zd)lhMd$24tNnNhh9%S(1Mq9T$te<Nx{YcxTkwL4<(OpEpP?i*d<equkcxz-*SnmYE
zAeIYhu!qacMdDMRrmA@;hPC&HtRgBfe{Pq*$M#uF#*0mVZgHI+!ad8oqn%YjT2g**
z+?PYa)HWDKdvz$DToZWmUH^2J#7IL<s~LB$oq_eYb*u$plT^F8BJ^+|$4*oi@-*{N
zR{GU>lBQqkT$2Qqs7v5RLTE6ru)6I5F&U9sim3y~!xfEM`P3Ozu(F*}iKSlI+9;NN
zXU}llTcWWy(ABwPS^T1Xw`!U;+3P8eK_J;Os!e5UJi3hQsjh9p+L{a7R!3hI9g$-O
z$dV#w5iUFDy0_SjcgnBZX{)E|uGw{O)?V{<L}9q}8KPX8h@ZZul%z=AY(Up5l<Q1w
zQ03oIr-}apspX-=NRsnQIGLZTK*<xA)eaPRonV_x{(x3Jz|mXX<hcF_9TQ$i$PjH+
zjN*4y<ruL@HjxHTQ2`H6N}F<{`S}FCqEm7GA%pU2h2FE`?;?=p7v5Nxhb_5-QP!&n
z%1Wdm1dsFb4oIhxkxUDy{^{zCWy!9b8w?bZQ>hNaNDlOwYDFA~`K*dE%pnaSE&(?2
zceLH84R|?LKIUB)_dKW%vk$Mk@;ZB|NA>AXXnph_=?#PGzs*Z6`BVZZ!28WGCd?dm
zPbE?68Hu6p^XdBpCH74SQT!k1Ur7XQ+SF|;WaS+kO4mwC<qO1UJHtCFoVqS<<n!mh
zI_~;a`Nny!=Y^#PG6lQ57XC9bcNF+g6hA6pY$Y~_*&v>US@Zi6KvgQk&kvZ*o9{2&
zy<c*l_pM;uSa)5hOb%jW7rY>^IaCpH*q{pM<;Lu=iuH9zln_^1vCVrJqB=!_IXSQf
z{q@IbQeR)Z(4=P|)+r!@{Cv0UD3&1c6zV39oK<4ETB%FJPfq2Xm+%VF-q%BOqKl?>
zRrtPU8;>sMr4t1CYyJFFRte&^1uhv>84Bg+qM{-8h1-V<=AGfgm(mZ`kEzG4v)uP9
z|CiG4w>_bcG5@zC|2NVP@YegD(Z`$6JJ|pA;p6V=<H`Qx)#&3O_nlN(4hs4U004jo
z$mc4{E=M;_b-)4u$_M}eDS!xI?_g%<>}<pIo%uWSH!~I&GiR6o9L|=e%noL@8tMoD
zsO_X;Z3DS7ZC4K@00i_g6aes_!&h^pI+z=01B~4mCyO2ikRu#Nj>L!JgG5jxBM<!M
z<D2kMRDNm)OkiYudEPW}p6vC1ZxuiXwt>Tsbo@Pr!MBCrA%vD5NkOO1tJmC+s<Tt9
zV{~H!$fTGaLV0D#T2D@Or3<n7?6C33N^<6V=bzd&XOW5bEN;BSb0zhXq5zNbvLUcV
zak~lMbhw&-T~Ou113^tZ@mBj-uM*QthCO?Fk1(@-icIHB`{IznjCzPD+%D7*ruzCn
z9{I2EoK%~txDwj-$H`y@8FT}rZ?<$u#C)yi4EjJm*#WL?E6n+eetHfE<C$ACHQ=te
z?Ha-tGBJz22dW)y)bE-zrez{A{DhF$=TKBBO*^Wi2@Wc1(8;@N%zT#HwAzx+Wdj&X
zMI^V*8u(ZmI+zI05FFTlM3Xds#a^s67_71V7+agMWqQW%7Yf!}BYg{qw!&N6Y%+e9
zvB_^0$MrHQ!O%0-C32p4M8`#tbYvH5W>Cl6(J>H#M4}DZz9^(&VX1nV#}0p{h?<gY
zxbroVOhCDr(uDuErdV)FI9@ADY4%swQKl&v3Me?j%{eYrkd`|RfhQ6XsQ={@VR+5w
zHNHuZDnJYb5|EKk1IITqynekx)nt!b8e`K>cJvq63U{q`bJK`Om!pmxPgWWo4qCcH
z*-p@&*#Qiy60@55B*D_dCtA(1ND`&T%CTKa*WZ9gZVHBn!U#d^X?o{-<IX#5Cb^;t
zWZ8dl4DhQX#pbN<FqR^&sORLzs<+TgSh#i+jmaS|*~ahKV^(9?U$__!D@+7eL%DTx
z75R_z_n|^@4Nd&4P%aK-9yTUbR)cgU4F#F@o@n|9QHZPpZIW*?+-Oi9ka!eAjJ<KA
zfx?E`YTPZ7Y^^sx-TIQ&n9?i-qH&y+3n~1fhn%Mo*uK^amM-FAhdXa0^Un}w^QrfK
z36DF4UtcnhbCEsO*|zC#+OHgG36(uj8#k@Q3UybDVR_0jvD_l&RWOa<OuSp#VFL}O
zCwS@jAs}|}{oq!weO4Cu%s`9&Q{y1u_OB;-JC6hf=64d~)??6>m*_=k*OVduY#KV^
zSU_uo0dnfCP0XO~-Fl4u6X6<tZs1rph~t~WQTZ@QFk~6~q7rm}8}hdRG|h06PK<rb
z57nh&EBI&`&j90NYtRfX>1YQxNezF9L2N>$+fvM7NSJ?69QvSi0tyFjO*VUCyPpap
z5XFVldTPut)uzV}m^p?Ov>!4<V}C#nmH7xVbmmIfgod^P*hs%Y6X1PZ8zgR?YHd2y
za|sV1;YbH^CyAg$U+Id10Z~34O*48asrKK(t_XZ5C>swfd2#CO6mLp`g`r@gDw~R&
zP>3oeOr2;5BSYR#JMmd;rFH&-TU{<OrBG9ter9UyX3Wgd{@S+sUMs`!V^zI~hOwRt
zEmRL8<+1M*YTs<;U9WcSDgD=K)?W+Q;70IK2!HqWCcv@#DsfoX-8n;NkmLa+XVzbA
z5dJftamDF=N~cnop<*Y&`qHH`1Py}?)~vBxrz*AmDDlzSd`E}|^PJebq5g)@TJCsj
zgiIxMXKRJ|Z^JLlrMG8tE*f+G^zJN&{1Do={ExUNbcBlbC$}8UGflnrp^MHA^>te7
zh7UKYgQbKf7Sqe}bg5+?Y>1gLHgCEfV4K;+j_B81=kBjzd|$@I;zvOV-4mcyK}crP
zLh^7<F2CEgI$y(Vl?)|Ih4WCxmZjYjb-nQg({y3Pp@01;sNf<Qf*e8Fm<^|Z^ql--
z+tP=alwc`8s^#q;{tpop<|D23_B5G09)H#o4v?fR3l+9%bSfcIB{8+`_t<DoM7$js
zhtmQC9-T3^D~qeeQ*1vbW@_&6q&$_EDGUq`WQJ$Y`hX=8Nq&TDF4#<__nMWd#K_;W
z&vzQmCoJ~(D9QyFr40Tu6UOhUdaE64x6K$%A2u1j<80ln7cv?bpU*tyCsdO%;qxAc
z1?jfdrDO8&;656k4~N(Z2a3ei{dIib5MswaCEx}&B>zga9>OhIAHTZ1*Y36)f5o$Z
zHg)Uwf__$=BB;qpEM>ml*DwvJCoTQws^ey9x(t`H{~%r4<{KJb<Oht2Dkd;{{z|9P
zFw(lLIo;=FbnIHB#;tL?+mJ@4_ZR;=Eo?*eH!csqg9P)fB3)ha3FN-h2qLT}IEuGF
z=AqqV?_H`RIu39~gkLxW8yrhQ%wnG_uQ2`ow773sFfgfwHj-GPJw;jMumfo|^LA{X
z2Sx{c(=PL@%&a}7x6TW!+jZ73gt*A}hd&+)ZgKzrqDXhd`%B=nATE7A6#q+6bhfbk
z`P1IU%*BG);g`q%RTo`T5!lr)NQbVnTf^$ca;g~3Y&OU#i)5nXsUr=kIZ|0ud;c&N
z_EWD!MjFbc{-k>y!`Wn%X{ztn6L%~A@_GN*)GPJ>czDbG_*e&Ly|m|EUA??cK5ZQF
zPeD;W8X`x8V)#I!)?of1s_TPu3R-~|gciNVRVD&Za##CH6IG!1)j?Adfsg<6-n=Gz
zw2H`cLfZDg-@>F0I(`rqCV|ED8{8SWyjW!!zTr*U!3RDY9ByW<_;9Lpce)hI;!&>R
znJcU+gS7aJw$0Z_M;M{2{Yms^k#+sK3(blNdr)~n>N}xO4RC81_^b!Ih74=i5Pa$*
z6%oz`8ozbG!qv`TKYI0ueupj3BmaHLQ?q*q|K4ha)M&}Dt01S#!INA>eQNHatQ$}0
z0~%bcT7KC}?W&ACp4Py>+p3=6-B->_QA*GwbtKK6X*-Ql^!pZ~j{ZZb_0Y-p*puIx
z27C&Y4OY3p+9V3>OQdk@y)S1gb3ex6OC@xn><#jI!S<$$Gs}NO&}_%<<@b_&XtSE2
zq!Ou$5R1|igR4V90!w|2ajre|BAX{t^iFjrDz7BGUN@xYHlC`6JUi~kE4gTnFAhAL
zGOi~ja6-MV4ROG_dblz2w%Gs^-dT#{iv{5ft>0oE0V~^r0|;Dd55ig2#v*%53G)*>
zMn9t!X-b)%I&Cn=WwUyw(l4WiYsMIWSccK}B;Ox~uR1+{{1RUWcScDBZ>>JohEA<S
z;E;~6c3pJJ_0q=Y@NZ2IA`kW<zsa6}dvP6K6!K9C&2M}ngSnL?|Jba+{DX)oSRU;V
zX;0rTpDvBrY)V)N-XTBgikPSf`@y_g;}M<R|5_cE?(KVe!_)kxLWDBFgw%n{MtkBy
zyfT@rWJcxSji=5~=9g8n=6SVR2RRBcYf<w8@@}<|o{_4Xc*6Qf_SX7J!QIR@+-CXe
zHc!<nVQ!xoqqkC)fpMkMJI9yanrOuGq!;s>vqkf=r-#!4sOBWVx4dQ_zQflHuyzD(
zmV|0{p)kNfTl3H{8QUSwas;o)asX$F=&mi81Y{)gG|Z@-#mXEcom`BH)bJ9eOr+GK
zN7{tmzxlZ~dM(cTP>8LLctlhf{<CfM*dIh%h`=#KILg~`*ZDr-H`ck@h<H}_({RQ;
zMQo^^Q<oPTb%W#C<ylYGOH#<QIz8u=I~PU}cZn5r`G@%3C$`_JG2v(9%E%vHGp`dW
zn0D&>7fwXiCE4!EtnoXagvVk*p&u5_eh?fj6os{weGbM_tK~li#T3UI-5jq5<bk7L
zatfr9yLNUXJzf%}vPiHF2j%|A7RzZ6qqBXu+P|1!19+R7dRnp6bAwJZ%2OtAm9fsb
zL@=&p64VZj0;~PQZjpv2M?~DM_`#Zo#lzD`sE8(pC~4Nm{$huF@vo-R*J>Mue$X`H
zfktM<MW623cAwgm+zo`Jwfm;|mdD?~Lj3{(rHNA-L-rWHn-FFtrAe>1>YhOi)M&iS
z)*&o4mXAiyWAU2ooxK~EApN|q5dFDop<fmXzpXeUm_yeKZ|&B;j0HaUsa57HKUD<{
z4}Id}(}&jeG=aYP(52hLpM59P(S|u6h<Rr;d*r#-#Y80}H@+9Q3!hfn-|m0y93Mv_
zu4RcroumbF;?R=zhjkK3^xp`N#`L;?Y(Mblb|fXtgC1hA|6+wq{3T&8742TSLSLp_
zK{wv))D}!x%V*E8tWDzwdOBHzVK~o*FSNcG7XQ$o!&RH`je1r=Ot+o1W>)7cK6Sxa
zA(f5SP?yI0`H*g}jVPD3&y!DzKWo81!M%UNId$@{c8XBgE9V>A1av^$pP5;@sWbi;
zpP0q#CXn9G9f9#G-;IVlB+MDPnw(3yS=Q#$mE=84L75AhFx0-j?k2eoIt(}wG63NE
z=0g~x09g4w4<-x71wbJzvPC6Ks4QiIS&L+L+A~Rt1{33=;z~QZ070wn46Q%SXpqdE
z?}wY*(sRk(!GIbfEG`94#XGzTbqK&tISIhsj*e{rKrKTOL0bfT<t0ba&<B_&pG&bp
zLfEU{K~Cm>hlw%p=l)EE@@sjUW-({ajKviCTL}yJ2fuhnY7Vi8Dq71)*CZPLv^53E
z$iR^Aa8{E9V7cEQ3n6$^jt$3f5G0I-_>LzsI}XC`Bx1fNSN0CXA*6=}zcD~MIRI+m
z9kCcA{;djY|KJZjlt8+@<-J0($2g))G$t;nE}=pG*N=q>nIZlqp1sjO=wnYz_^BHg
zzyn}}L<G<s4U&<;^OtqBPstZd<>U&f=kux+&1Kx(U1SbUPZnR;{ju7!NfPvK*!Y*T
z5{;G{7E;Y-2tUfsPQ!fKt;JzkT_^y%S`ypk29VKV;Me0YMA9R+Qi{ipTiqT}p=IOh
z8Fn;qw=S;wDUupld;_WKN(x%hC73~W>iaI&IQH9wnQCR`DI*g5tr{s4{3gT~Qbbel
zb8}N_#F2`U{!P*_>ep$;Gy*GsF)X5gPM73|$0#$IoH~QUEZ89RPmJ>dQ%YOcAG7j1
zBA(ji``;ns$r`gipXi+ZM4xx1f>E(JIzQRDBVIR~_p6^dLL)rH_es~J;i^s93VWEz
z<v3-JY3oOUgi2?N-?Y&I_NzUMwREd|_|y@khXalu`X=kz@S8WpNFt-xO*R8YLGZAd
zOoLxR6%*cXKz4H$f1^79V9=inUJMWKu|_ERZS$&p`=*bZRljh-xV=8&7Algd&!m$l
zQi>lB(&T%r{9$eh%bk}j!W5m+=JMf`SEB@A7Ua7hr4}xv(q#SmUCLs)P+$@a%x~z}
z3v7QcdsuT~1=|XrBtez8Uchlxv`F(^`8Lc?*AUq{0ri{ubV`3Q^0a<f9W69sr?00P
z|6?o`FI?5U_{~+?y`Wmu#(lh`){P(Gzp#i6C7Xy$^ek1LI!kp^XL8mA=Og`)uBGRU
znrh)9Rjlee56QO_VmfbUxL#8^n<6N1@#<-iiS7C84eA^(pm5PV8=LndY$1Q|6zn*l
zU*Fl<kfD^0UaT6};=Syy2(aE)STDrJ-nm$cEcoyqnhrlORwN2%5W;D|#~k5Hs_nA5
zlW)ktVr=c?p68Q@HvPog=)|cto1$d`yO<KUY=8X72Nq#}yhYvpKf+A*)2-N5G9$fa
z1OVg`006B2Da;flwAB8i#MVC@3d8^DP*m#cIPY;M`dt|XmU$kR<IB;wwsSs<q#o3l
zGU`~jmU}IJuLzKq{+YQ1s;!EAy2(rj$XwS(5w~L#+saV|i02s5V7`ae9lQ=b;|}@-
z`*-(D4FzL0WbYw1xf_a)bFWFpF4t{Kh_l3cnDxd|!}apNOQC;1>v<FCXv7|=Ko`VX
z=dFEFemuJ)md8QRy4H4C;pjMnNic4bZrK}TEP}g+Y_@D$nQ(bB>ncfUmmVr`^yA=Q
zYyY)Wi~n!|(h3qtr*va#sx<$z=f5ld$YSig6&3qq){`H;yI~ur@;ur%o}1qhGFJy9
z4()vJ{G}rpito*_`vXXgubGXUDR3uwezjhcc!O8mHGuV_Azp8a;)iB@Ta)hlz|Q&m
zyDDq3c=Qu}?ha<|gn4eY-QhQ>eu0Dtx?ea-f!SF))s(MAmO^2iLr!}z_mUl<WP_AQ
zg*}Q)y+m7x1=89G%IKwbm~7kQYo>qkQAXA7R_lN1na99jvM#fFh%EkQUmQmzdOyQI
zs^}5O@HH7m4GPb;ZCi^h3qEaj4qnQNS24Fih8xKF70sbnQjJ7_gMdfwv#fG*;CBO}
zxK8rjjyxXbUoOLHi>1ciVHc7GqpUdvF16ND!{|iUj)qzv#rQ(WD7uqrx)CGvx_#>&
zD->AHiZDSHGC495rTsO}#k`8CRvHS$)JdazX?}*SN6Rl`a!>Y7i|yFguSfBU$CL8B
zMs{bbY^D@oNxCA4XqY6H&Zr<<yGiq9_i2wd>^9#Hfki&HN8h-?fP{;2aAJ#bne&li
z(11(%CnRl=rmIhC%gryA#F(E`u(z<u+a{b6o`*NN=__Ht2?aa^WdtAhhUmvlC@61p
zkjz(lyp7F#X4v??c!fFN3Fe?{Jf0V^K1^dl?}P8rXxoxGI+%Ixs68f<`ACW|MD$A9
zc-(?z4E*BVh*2mY%qJVtU8uN_w?JF9p~l|MV5R%s%4-9?bM7)8Zx~X9Ie>MO-FGLe
z!pc2%<X}4T;#YLud<WvKn+H;cnjM$9vy%;6n%B-f+y+LN>QE9?$-0x%R34Ik$bDcf
zlEIAT$Sb5H;{%F5Ggc35^Zp8y7i#YAvTas4d)j=;kcD1dEk(i?n;fP;2O)3{CBUQz
zZvSgC!{B3lT(P&(aP$6pCg^X33*284ya!2kZjPq7_(38n5qM7%kbQ=ND@M2?S+9)=
z7C0q(@i@^*bd8B$^ijQGxM25JgJ8(vUiik6Q4NwZDUgJYj0`sYbo}(DL-=E%#`3=<
z5s6{s);-yPUEk5X==?Vr597EVv<7}_aoygY(s=h(FRDE)cxCuM<aK$|b<M%Il$u|&
z`TM{7HtOix{)+21?;gu-SX-EQ4g4J9#oZcn*Tf&VyI5x|X#j0+g%1wkzxlIyx2Sb*
z7`^)ndaIKz#yy}p%gEfc^7kHIzQ3O}FQmVV*ixtEVd5<RiSW5R-JPW>_U=qGwBx|=
zNX1o{>W;GbT0pkQakY^~`YZUHuPGWb&S0XZbnB8t&MMll;wLneCGS6sHQq?C*0zYO
zTGr22gDkxPLq6LwZ4BTbMVD?8>e}QR`h;jf$K!FJkq7MCJig<*M>DKneklk*8>Gi=
zg1$(facqnX)DY=CkkaPFtVu`;c*3dvFTTzpRv4v=viE-1wr$(CZQHhO+qP}nwr$()
z_m6teNe?QiNhN1`Dr@iM1*+G}&i>4VK@<<aaGp*8|2Qy{jNG$zj&y65#!oL^b1RFv
zclNN*2CJ|S29KBmVnx;FB&h~36AT<sEW!m_00NLr*8}-(Kz6$CA@G27QL1t19tZ)}
zZJA6(t#74{8mM-9!NEZe(g7iTxQ6$gZ*)fG>u-N}m+h1JMGQ)ypI7+DV^lxntzI@H
zbjB7b{WltK^1XGg>r95H-`Bnon735VFXvD%rOQyfZ>vwHx*r02dyHakmQ(e$;vK;b
z@cnD*+NUmq=cfc2uLRTuX!7sVn0X6=HfCzIgEY^ilgJ3&5D8p!&=&P&=*613Gd+7~
z?!nx;vFgHcmY<+(zgJ+y9kS~csRaQiSrA@KKK=>jzao<>Xa9Vheira?MuLBx*m%!d
zE-w=3<46L;f|1xJ{-gOQgRI`^;u~<?Ya_tX#t{UTP@?-M1>qC;IdY+0jl#+Pe9%N^
zATyU5*b+y}!8%iWfNK5X2q*1hwmjtpORs<h{bbPN`IQK9v1W?;T*FJA!+knE(UB7L
zsea-<W@pF#|ETc-tJFL}{@FmDLUp0>3vZL>q)&s`uk-q=!Ra1J_5FvXJ_!cdQRWwk
z&fKQ0aa7dntVfj)lXA$`R@rx}t&JFNw9|IY)Pq}sYVl|n*>m*nR4X&-^I7AqAS!a*
zj>RVk96C(v^$vtIUT7H(`G8;{YI|P}%^RU$)%HUWwh*}EZacy|OpOeO$edlxKBmsl
znn4?qP?J}i!Bo9U<A5721|Xm%8rz5N31Yo1#XAg?8yt}%?@kyL$+2XXU74&A{~&R|
zs*P&}9hGR%GGF_0bamz|Se7_r>|w<{OV7Ewis?TG^s)DQ)E{5$SW*<NN!>@+PP(+k
zM>EM%ta*BP;YOW<6m_YwPh8h9#h1Fo|B{v9oXKY`-#@sen}u-@(H3E0i^{mV{RxF?
zV#~+w>3caWs(_$lqyk<9DKi}F8dw02rsxC=UyTsH^?E4_F+~D+yAyH%1H4QWKUjr>
z?_+!7eBisC-!wa^t<CZjKhrZ;TArmu8vz)7IDsn4vn5pX$|Qv*n^bfQl@Q|-viP*I
zrfe%%^lSV!L=rr^IE|u28cIVKRnKH^0Pf=~Y#8jqBohFOCe4e*xL}Q6c&azxfY}6&
z`&Wbn1L~(BkN`<rDwpoT7vyDuW9msy0_)HcWcXa!{5ZYOprU?{rtaO|8YhAwDK;Eo
zLy<sRp;)Lxa+g$4z2=g1IAlvMhu8nq!Ha(zgT?N(5f@X)I4I;2y81JfQ}@~fRuP*E
zs|!M0FP|WU7~vUNt|SJ8+)#?=YZcboa*ZdGX*kpr+p$r<vWHaP@Io%uOZOV2Mk17p
z1%&_T3B>j9aHG{zDXm!F*DtXp_}q}!s*+eB?f2FNhXBK|1pdLfuop^HnO`J;GsF1g
zRs$xkc;TBy!&SX>l4GWxEmE>1|48HE;n~vl@yxoE(7-KR?+3tl=DP!6(G-r0O(zD}
zV)X$d@)qdeTSgK<3di%=Ecqa$+D#m@dL0mzqGlELLr8NP#ZvPC<>_Kmist8VocjZz
z;^7aYUSJo$S_Iqr3;2T<rZ!fkI!a{Ap<UlqXr=5dmjKffKmn|a$x|l*=m+tjqCvT4
z80l!j0em3jt;1%3#v6Aj^6Ft+LtBF$gFz@Nn!cCUz^Y!=Hn)&9fnhyVVF^f$dS}Ye
z*-5-~!$Z4XwF7Ku(yGzeBZA14ZZvNPcJ<@P=@S^LROl7qZF2BZCSm~_MEE2{=(a=c
z^h=CCfm$p=xZ+fbj5a#M&PFS*KMul}$d-68leK<wYQ<$;8{Yycg23AVUCIedK;w%S
zX}hSNs*>iEO8uCLU&!}95WH2Kba?WqLH5sE4T}Z*ozG_oSo~|MkzF<!77#_#*k3hK
z#$_ua3c&)*ht~eZ)o0pI(3erwjyHU!W&Z2zuk3WLqNF`Y2!qsY3BVLu3%sm?Y*JDm
zV~4i?9@)khMD(@khBe6=16pNfi~CcbQ6RHCA}dNdLO2IfJ+3uM!!g$`6IN1;uzPxh
zFDEsPnan^P=#-slugrf5r;B5|yt<l<Asn>k9c1EQM8O4umS6;4Rmv~sjk>KkRW8i)
z$&rdt9g|9@sd7B%X2hnJ-s*?xM#h6jrwHOtgQ=|dRQIh=ssl;h!~i$nqtXo8abn%)
zFdmHhp#6C3B&MZ&poU<5elqyYgMqGDVq6Hys&p5)7LZ3G;ShEQn;N^ZUUa?^l?Y>i
z+=l-9=%AluK>?$a`d~M$C}q5%dMRK~sNor&!yoAfl4+~Y2Ib&1hH0=5QK`7Awq-CK
z6C@q6^oZ`A-7PzmPLP=DWRod5`Oxsxl^r+OwT;N00zWiI2ewV1KV#OPRQ*EDshf=n
zduav&l~lQ${c-Lc>};#F`tx1DdFI#AD&;tJl3~QJCUa5`7Y%Yy{s4dxjDjXy4ExV2
z3s&dAJLQ&-0%t-0+OiVMcgf7%R3?E0fj(S;Pr%|ne*rgk>LoY9D_S-hODj9O&BgJw
zf4p??#U$r>gd}I6Q$%u<&3W{Tf3O2oIyxciG<%(QJkuWT2w(9=sjRGv*$~&x%D+Nf
z&tIaah{jM8tdb`?%V*Isb%{Y}^KFrwL-1>zbO)J`+gru`y!;;;hMwo`srVpU0mjW!
zkc!`uBx%)bV%75vn(d2es{Tr>6{CBnb5mAEwr-h@mXstX*I-KTt41tpw%%pl_2KCP
z_Wr<Zx<vo^aXO<QFudG4QDK%cQD_GsHN!2~E<4nwa1X6aPQA#((8GY+vMthM4uIt~
ziRJjLqYa`CAP=TteMgeD?6zyX3BVsgm|MLgZ=7^b7Pv=n3q&m4!k(rOZM6KLGS~y(
z2(->u+_9nhnIqt*?#94Q&9#v4Xk)W(PG4U2o}x`VaLH6cN8in8xxQ+*Duq^>&n?TM
z{NlpRn8X4pkRXSqg2!@Dc#`-MjaBZB$y^(*McZaW0g<8e6m38MT5kD=9@s<}Il3;`
zW1BMkFp`5biefLwLaneWY8kd6=o?Xvw9rE7aj{j)#pZJBA?rBk$ej-WoNEU`F#(kd
zfk|2kg*hg7c6DM?s_hZj?(|{B+P-!XLuzwVtV>F7;+4v2d9KotXGhGHi}H)x6bR}9
zBKY~^J2HE(4uu$b4L$?+J^ONFDRUMq5dE%7g|vjkonsTVacKgs^r}H|r?M5xotuo9
zW&xZl45VO}q!6$QNu#b$NCa_8P@=qHh_P|L9slZWmgwuF5Ipo&HS_38l%$E&Evf4-
z4_6kS$9}TY(sIBFXPo(m3n$+~&qE7qJ1NNAqW?$awu5*+8bJ0)ofs?JI7`dc55#^!
z1E<bW?*97nJ>}*iEduhIO2~>y4|i=FkHR3?HI?#$@1AT8B6mqK?D^VW>Gx&NW8}{o
zX6$5s6HgL=byh3+C#>w_#*8nvt-;stof)<WCpB=WhJmfk+7mbu!d*d#G;bOCfPs$l
zvOiI5_-c>Fh9?;sf7Vy%G6_mTuR=yF!2U}cAM4pr3rE71L6USCRDpm7vG#zS7t}{7
z?Y~bwlQ9VifiwTsDQeq8!WKD3?03t&Tt37g|Bu>)HG&%qChCP_RrZ(BG-{-I-qeT@
z<D1(*BWFOI%j|cS2<(eTJdJ$HO3DjI2E$!7)yzJod5IBS_uO2xXvZ9DEQa$JP!YfU
z*LfpvlvF>)0-4_BG|-~rC<*$)CeED{^Ljq5f!91R8l{01WL-+ZYM4oi``!nnk6`_C
zD*9g*HD&+?v37;aD*rNdF$RvkRY^xRMX)80zNFsmTAX$7w_{iK757aHmD0YVu5J<N
z)ot8=McdDrX{_|N6p@_8gSao<FKgDzyJ209z3QqUO-pwy$Lh+L`I@caFKR4*F}Gr=
zZs>bQ1tNhddB8KCb-+9OO2@;VaT=>0i5;XMovUn1xvEf?zkKTQIJky(Kg2;{G1pUH
zGL+g(03U7It+3Jcc0Fl12N*YLEdBbVWR6V&cIvXjfJ0~fu+iamM$S9<q?Kxi`rx7>
zoGP$Ybdd`ft`r2=9?M%i2Y<U;f_{vc%_-_Q!3IrT9Fv;Af5>;ogLjN|ZVD40e%rKP
zJ&I(AF!R=ZH>{Uk{OBntfWOP6(+Yih)`8{&N34*CYiTt%0h@Q<oI3ew9|W=yw9h&{
z5rDD?{w0vJ%XAoJT=d$3zyQN4R$N*>JwDn>Nlw*e5)tcS$jdL1SC?OED^QWg0D^(=
z^(!h;turPu7@l64iu=O2w%;a;>a#!7;5t^z2MxXMN9%ba<KV1p^j{+MdSnUv$7A5r
zke9}kOVkel4LW0dP#%E7@Xv}KzOPj_ZJB|o#j6m+`JiNe*xBPHgRD5fs6J-Pbee&Q
zK2FAywsYuKU@sl@1+uttU9g2*D|u1bBZ57id9(B;)k*mE6I6f3mCOU{N8yv;EH$n0
z7S2omG=@vjFgdeX>@^IlvFC#)!Fa+)+{JwzTU~sG3vLCKb4nxAniQ3(Mxmx+J;0tC
zU_+aC_q*A!bKb~;o(T4557&b-7orSO1e&uJ-G&yvg6=A8vNd7te&|!|yYbsw#Wr*c
zID-gCfF#CcnST-4_X$>^7dpAetZ#I>6WtVG&;IktI@6tZDW74kbKv?^ElDd(yiEEs
z&|()csMcJJumL%z+=RPa4SPC=i5dhkHt-QWi*-<95aIfy)7Jf0&eMs<$6#p-syYQ;
zG%2y^zOvWWemTK3FgRWzBhVJPvUVX&wVQlV-b@WQ7L-6qe(6#dde0XmjyJ&?pg0CQ
zYsc1yT9vnMa(oiD@VQla0Dut_LPiB|=L~EYLAe8Ui?@P+PF^70wSwAJT_T)!h3L}o
zNShGkpdfi00_HtvoGeM3d0xzjftK@Y&;Fh5;*x@~t~&NxuJkO;NeWXaoe0}c3|v82
zOKSC=zGMYW7tK`a$NUnv+_4yIT_*dAr#_PQp_g+B={O;t=^Q$$&NZzE-W@C+(Zd1o
zJkpBrRwK0a4|buUF3C0Dmsi7)nUtiegbNuxdQzb*S7Uz1A6X=d@&F>14IEPzseVhE
z<y<kUeYL5ik}6&>LQ+SxO~P8*wdslqo$5gwTd{0>qZ9%ML!LT_UEsZ(M$6Tu^}52E
zOpZFHVK!B2d?_5iI~Cx7@rwE|nJVyO;eGK`Wl?l1ES?+-W~BvMf?rEgBxeyP2Z323
zvW(wr$}q^b?m)gTu(lpmJlB-xPN6Qc&1E10kcL9nbA;7o?nCXv5+wGE_iJmfc%bJ>
z6fA#SORP}EB|B(mCj>91p-sN~Kn9g8K;;R<SSYwVs>rrUetJbSX<>~6mz893C7?Z8
zeR;BF=cwGH!TYNc{XY}Clz>0Ri^@Hf6aiBrqWL5yPh~83mHW3uU^S-z>qZN;GdfXD
z{+2WliFgFbeA?PS?pQ{C$0noHZM+!#11x3D);*`PcU!;guQ>!=tu;Q_PoN$zRU4Rd
zb5lhJh7ugERu@-w^vTTjfUWk!ULtMR3&=4}a6hPD5Ui8>nC4}3A(qTV)@Eq*gAPGs
zrg_^n7k4Q~kDP59ROl2XTo(Qc_6W><sRPS#N`veASPiJ-nO%YV_M}3v9&ZEZqbM~1
zW9O8XZ-A~>K3_`H54yFD#067-vXZSQl*9(Fu*}12qIY0%|Kpew#S3C5rTZ(mvAefQ
ztWnv@OLw+-x9l8mX)cXrkpY)K&gx28bmC>>JH-JMsXK-E9Tf#nMqnd!7VYfG%w$s!
zV;ixfc7n($RERdw!t5A+&HW{Zs?PH2+RTJT>}(#(AbA%Esa?Y<Is?Xg$T`723ktgo
z#aTFbC2_ZN!-9Uu{tke%i`eW=*(AB6@hZ>8n%qgN%e(aZW!J=OxvXReY7lC&FD$^z
z96<@U<zVvre^Y5!aXo*p#gVjjYjGcsjSRQZn-|HV2cAy#%kW$G#Jd!vH@!n6lm36?
zo7?+n-32i&Ax(#g?y>;2p<s0rfcKBT{-DHkTvG#;f~8so*M=|nR+r`XVr{5NdJX4P
zQOuUK*<J5bbe2OcRPH3Us+E$CH1iS(E{gx90rf#z76!kR*9VFVg-t>`d|!fZigUXy
z-mO+U&jXxbls=&#Q0!B`ngO7sfd7%ixk>-#1Zzt<VKz>QoP5ndL#cd)dtGLxV8&z^
z3*w|Y;)WI1p@+5w-uDwy*k&96GC4@Z{_S1X)>g!jOz_@)N5bj?V<j@+flgmX0c@x>
zpqj(Ky4M;7+DO1Ww-m3IlK}nsJ{p_)xU@K*aB(4Y(f#`0R$f+CS5GHplvTcDit-~I
zD0#2TiH7b)phsGS9QbPlNG?$_o1tdu7Or*JB-12KR#q}V9CXkaCy6dWY)EXIam<NY
ziyV>Z!(?tyu7LA8e$1x}YdqK^d8APPFxO#lnC`F1?L_gnSkYkl4AUoJK839m|LQbS
zX=)l6qB`}Cms#>8LHSqg9J~~dx@E&o<|92hPJ;N!i&wmHVE=|b9vH$uHw8akU$)r%
z@+o0XTW`3q^9@wzk>Pp$7^f}ck`V&4TdM1{v^AvA?YJ(=jpf;j{%1s{@Cu_^I0)9$
z#oaK_HIv(5mdk^F)O?rFc*qqIsjqN~GF;8|`5ASkA7_Nk#LLdXVKeA^D8}yP*j|p=
zJMYGaLSXp#$X111nfnIPyO?h*j{Y{N-B^6{ZLh#H1+sK7M3Xp6bEOzL{i`(1!i?q!
z&)f){MkJzE8`?8x+}0q$VQWt1!YF}RjiF1~Wv3v~(;P%)H9Qz<{P~<Wr1sKAs%zr$
z&>^Pj4pPI+@}eivRQykyVAPrkn?e}aSKaG@vC-4L1YY7wz5!yAN-HXttGe&e_)HVf
zhQ(_C@FBEw5TVDgB_{HPzC&vOnw)H)rzs1nnwJ#u1G@<+1#9g@@1Ec=npoaG%$|Kb
zz7VHa04>j-)A=Y1(G?_NKlBW1?9A+fDdM;^La+A-AM_r%3Z8Ya#HYrT*mweYVqP4m
zrX8WoTcOdMStI%K;&jF#M$&rC)9+46iV`#J0+)@eGWb)zRtb6F<#ZW+S{;H!g>n7X
z*%Rw$=(yA7m(KNykI=f!k2(4_s)kHu>CE^_PC!UPHMwm|Kg8wW<K(w;vFA#=<(5O0
z&mKjX0O!1jd2hm8oyn@Q+xP&|+L{c1VlDuxp)VibnNXq<gaAm*aa#_ObY^kZLD38Y
zI1tvaoICvGz%hU|O1p?PToHL@z0e1}rfT2CwC}3hGkUw9=6ZD>&+Kq@zXS2(;Y^wk
zwb~UlG+8nD!lcL9wgczab=PLM#q;;>bX7w-K}aW59ZGs|g|(iU;%~e%DY84EBv}jG
z12Bul^Q)LY%WMWNA)Ck>)4pY!gAKM-wbS(oG}`N}iUvjGE2;4KPkk>7K?&3v3#WHe
z((Agru=$x3S3h~C*mWIc!)(r$BnJ9HlI3_~b!tkgh;!9H%qpAjUwm;;fB8J<>j3k~
zH<!9@PnBD5T5t>Zx-%?bRb{#KgORwx%qR=jf**#^5+YXmfj!SU8*aiteFUlWUeSo3
zpR@jAFsq9*Lwli$z;OUoUR~3P-UR0EbLenk2C<xk3M`+lvflo<942CBJlHi<G<W*u
z;_k=WSgP%NUVxL_(faa*GYvNx*3%5&H#O^ev>n3GHWotnO(-guhI#YfSwQDaFAeP4
z{Mm1peA`VZa+slcvQ>Nwoks`Z2Xns$O8H`>C(x#_25o$iP02n5uIg+=vkUo>n0ynx
zm(~~6`Znl}9+xp3t0Zs8hPo|d#FVy1qi``w;$Knt;>D8a`jo#;TOW{X3r7olzSsl)
z!A$BP<Y-V}ETCl|$Q#B~tuoA%)ExJXyzzAO8t_)IrW1`d0GO=J$B4uD*>gglI%5kJ
zIp%#Wdqx#zolV?Q$0{vdN+b-#c~pi`Ce$P?R}&d_6|{1+HK+PWo4~D!Kqm{G-1+>?
z0y0n3$J3{HlHyXjqKY|qm}@dF<BGNZ5BZ*AWu>7RQKLW)xvs8|oGDuE@xsQzR*ww{
z4Xl0+ul+*JsPj;vmPy6?PsJI4`?TJ3{ONzxGi?HS6$amGw9zU^ra=P=MnYGpQaE)&
zKAa-pxj}mBv4(k(NILm#$%=cb5_-X=ZRH{PlEvtO-A?kDf{U!U0e>o#qlS&gc)2Dt
z0Rfr|j_U~D`d5bgqXo8Gp@JV5J4=-Zc5P|4z!~?t=A%ebld)rbOQnenQqzj@B4fxg
zzzMFI(nPb|=tvLrw{B)1m}G00+JY1+y13Z%3EB}5FKa*2CMt42M2JOTN$3Q5^wt1a
zIMye&GeuQLy^p%z(HV;x_I9DkyX*66c9YnP)9?O?nE0r6C%KC+)vjk0X=3sak4KKA
z90<q3KWYgnuNWI5-C)C6BO!<=;v)ZR|B*^UZ_^x`fZB-wof&2X{H7D%gVRmh*u(J6
zi+HIj<*vGnB83J+jlh}jJ!7Ym8sCQ=^=VzLHjxa^ew_#X8eayzVfO+i4Ww5q%rksQ
zY6qj6F=)fI-b+5YPN-=}(#DMDF1;DPiztS13Otaj#XEP_fgua1idlp8T3t;KPsi;^
z(IR?KHr_hJ+f{kE8~oS8IV51eaWTsNF7R*NSx24`@7kd%!{)|p+%rlv=sI(5vn!F9
zHD$}H<x0J#QXS*}7(~qMmVk^dCL@j-?`$4nAY5Dpke=Hd70unm2s+MV`qBU~_G)E;
z_a37%ALnzNxr}EG3ElPj==@`RGMm0F)W5A?eSR%ZWcU37Zi=t$wi*GC$N|9ZP{Kzv
z*|&1|Zbw#(r0ZFI;xB)CB>IRB40oAVAMR)|=|QcxNGWdWaTA$58ju5GRNz%VMcjMV
z^11-drhhfCSjZYa_Yo4!{R-ee=$6&{#3gYI)Oyl-SL}R7AQny1=NlhYy*mKe*gT&G
zi9Pg#T(eS|cWOE%jz3sF0A(aZwgE;p-{XNJ28<KT`{XE6k7r$QW-p1LFk{`5lX+aT
zzQ_8V8#dz7MGauxPOA1H1#qbw`k14%7wRdWU1!8h4oU=E71UBB_Zt}T4jF%<sA{Ym
zT7TD}Hiv^(Gsm&1;or?z^GVHbe10fClAiYIUezXf`FJb7wwHg$80a3|U5R)s0p5P6
z7;}%J4<{fUH73;tfoa||SfDrU^j43S>lj}<QVATU5qd=p83T%P3!fE^<B?xKWrFuE
z(nZ!!k~cOGh8F~dJkSaC597I0+-ZqSK2iWiw3}y81pe<ZR`Q4KhJf5zm@K$5jEmLA
zv<-`dIGVEtJGYR!=i+fvxKJ<3ocOcKY75=+cbGc+oBrOJL0AhHxc7;c1Dsi&=M#su
z5!ZDNr0OlC4+{^!*|e2n!?#YdcwE!eC2hd*-EpAl2LhdWX48ykC|DD@UfRV^WWzMv
z$?J$*LQCVa&20GQ^DI9CwXkNu{w|eIC3lO97|8i0M#}2cu5bT!=<!4VY0Ps-37ki4
z7G#DNoh+3Y71FS$!MxI9-E$8pcI!{b%ZUqNik5V?6fN+WBy~uzSJx{}vrpC#SK*?d
zu}GJq{N!UcpLOXnJ06>)DNip%q9#z3?szqjFEY?LH)1AU64WqYnj}e6I&z{0zl@0d
zoR}{5oRf@|-EoU-$>NsV)cKfDugMcplm|kQEwMF38hk=QA#BehbZV6=5eA1a_jn~<
z-{!!!t>MifDFSPYQ(75n8=*i6l@dhuUL+_^SUt!8bk2@d6>IkrW@+hCMy>oyid(dO
zS+;p%arIBln4PI0<}fcR3-ly~gEpz`MuU<;w6QmApnceUWiCJ-KB2|+Z{Ej9(u<l%
zh`Rzcel{6Fk!hYq+#fxl7&G_{x-ynRGI^E}K*&7wxB>9kL|B-dnht#z#|%n#Pr}wp
zy&|>acGaGEZrI13uvo02Dp{+u{*<MCi{pJbzdyFtdOsx|b(ib?yW`0FGi|#k4h@p?
z{qoyKwLQtRVFO}#^iHgEDQtDjX}w|tO_xhwwaA&l#pRI-PAyKHW;!7bi>U6HcP2g|
zmwR=@-gI{EgaqV!Q0_MW0~no;9z}PE88CYG21glOFDX++yftGoF@jSOg6rfXk^2qt
z6+c_#4VOB%<HYwpjxt0gCC^Zr?1(jl7%c81M@141xk?N`aVXOfv6GqV6jNo2nRB2a
zY_%-0o#eSpVM~!|a7#Gqw=G!hYoZ;Z6BKT2<v5KVwSl_iUxj{ZV(j5UYRd37{~G~X
za7@A#hjgg+A6jk12>U0l-PfZ=+9uDslUjd-A{=xaK;4;U^A&Aik2%`bw8={|eERa^
z)I}$nD95<EnaS9Fiqr-mJ-r@%$~t*rCWa0)K_>lE9niV?p}to}W`a%Ln7yTYNMKwS
z@S{o_a78x?^Q1M~v1Pl?fa>+HG!Uq04fc1vy^3Qq1rvdjy1#D1r;4KVLhtu2gl<Q<
zMg-1{!Co7E3iFGg_-Z}};2D|ss;h}D=%?t-&V!HnLyj0eJl7LD0VU?+(_04iJ>#jz
zD_o;->gTKl42M%Ue@5?<M(?V~&*>nJVLnPEeH)r{G0Itx7i78t@WT*2+07@l;aMXJ
zG#6d30jR7;L2?2ETK4OZP4S@do@VB2nalsTw+4PhpJgJYga^)Kd>ux8*XiJ)hRzof
zubFV@cXhLjaj|HheAFE`y&wt(kLEmR10$1V)=De1!h$D)zsWIq3kH9_SH#G##VDSs
z@zKpPZ@!sCX}>N|{fqqHgaEWC9%`iSXNf4$x7lGRyTy+e=@Ql2Nz3GOL9Z08lBnk-
zPpn@bz^E7bFy#9z6=$7&0nP@vcu|dymH6!tPzI{~8PB_WDD~_j3FQH=<iz&HF0rFQ
zS+-P?Kjjr8dQi+9cvSjC{#OtH^#nbJlck6qyt)NTJKQL<QPkPcwfY>QqiICGUet>9
z=rRWhjZ=d**^1+bth#%kaOKn%mqRi8(CC=u_pundhx=f@Fkl8~TISq#3<44z3};TX
zs-xwma;ggvGY5|WDYOMvEop^y&Hakr1jvem$-qqHe?M^P#sm1;uGR-Z>#Tj%2Zs1D
z`gg{d>sZ2B%zw=Cjn-qaPo#~TgdRx%!7{^mW+y$QjW@RgSh8gr@-D|b_Vrz7z`+n-
z*8Zr6QB0&qS#P2XqKimTQT_Ig@qPV=QAx$O230kg?}w$KV_BuHB@~zC8T4hXc|Ydu
zCo=K)p%a4$0%Tq+D$)N0R_rrkP(C-;E;cN5V|UlfgW$qHtH$UxCfk#!l%HVU@8NY0
z3zw`7n6Ru1RK96~KAAo#LMHo9na{C!SMIal|HE(iFun!`=3|;19UXk&h`{`~K|fK5
zb}bIvxOCGur6oM<)*la|x2Gz4N&>yqoQRoZ^E1!@J4OHy(Y?b}Miu3LDqz>$5=3G1
zK*Cb*Jp_i_Pc_-O<|($jM+>Bj!%6cQe1Xp|BZPV8JytqSP(O2W5nrQe!iN#c95dyb
zSYQmGV?;7)Q<L^1O#h8XLG`Qm7lo_bU8Vy?PJVE~4sZ4Iq%$drT4dZ*mQJA>RM~;~
z)nz#NAGJ>J$50dVOsM^(Xf<c1h3h8_{##U65=9m6FFq7?w<XhX+_KPn;k0Wt9Wu0t
z4t~ICGPrQS0ynBz#Ht3xX{gC+w%5A@b-Uy?-%p?Nn@!x?+A@Dg>#dZVk+4b-z@ve<
zfVqt!TDI-dv>UXGN7{^qr3w_`0X9VW{^Ur>1eQWSH&<X^+8dQA=9ZPtx+(o+&$T4M
z_K11wNl#=wXEhq$xW=48Zj;j!fgG%|Vw59FO<D1E({k_#$ia-d#(Q}(YU*6~XW^{3
zK*>jLI6S-$frwwdCC|bb5ov+8c3^~Ccbe2^36>{&2eAGuK}PUO1Jklw1>VcHyG%~w
zKMfUXS>9J=5dIg?LAI8Tjp++6demSpP)G5S418`wmN*@MeEVr3i-$};K~nx6fuRYE
z<V*DA#E~os>3FmZuGhwOHBMKdMRTgX1`j$k7$)dfU^{o9nJ$>vZT5JeeaCJH$_Awv
z)=;vzj?1D=txHz_@1syb!s#fJS65f6$B-I$PA0+oPp4xUk^<Fh>zI5WX@~`eZe-Q(
zi|SY}{04*XLS698@@_t$dc61xbBNU_WU&|a)9_jvE0Ugkh64=nOb}u9ULqCCvklH%
z?ZyEAxyny<fE8`MYf~*3gmJ`|T=05b?I@90xmN_p7#f}Ia<(yk-nb*_88qLqW$w2{
zaM4*tiCgkaLxx&}z4#|vYMN%L9TN+xr1dmZI{U%+MCx`8-9uh#(|e=48X9K~WW~Vt
z%EMaYXd1rwFvxv!l75|TjZ-iat%B~fl}NZx37Mv4I5V}7V+*V6`M<=0?qSp+3b%u2
zW>EIzsJ^diz>&3Q(NgE3yv~F1u)2|TAn^RM@o(~Ez{QP>wswCaBf$xCXTx^%R*sR_
z0*9+L{7ul?oe(9Rm%}Y1dg{FpCd{RpY$Kl7C1gIXCDzS0oSqH#x+(Rv#p_04a-`%8
zw7xM%k|x1yk394$Yl!Vmp#k|_A|5$={jWKDlh076jbU*~a$1QudDGT=o&Z5Qo$A4;
z<<rt>{6kL3eeuMZhE<~9-1_2~Ou@gaTYmf2zbbyz;sbcHi`zZ+HUvwb^os)KQQ|`t
zKliS4gWS_78Y%}^BlS=52w=UL&n!6x4ZZ<`u?<l1{sEF)O%D%@-Ff}W2O;IorQ0oi
zfp(GN{C&S~!()+9EPpJ~I(>zAvFM9;&IzX$`@^k*9I1~$z{ZAxtn8*a^PKDNMI%mh
z=i5n3Evaq0Q%vR!E~K1PLv_?_9CTfMpSNUQBAp*9i$zmy+&r^X65e~zWQ3&vEtOCS
zvN_znFWXa#pq|Jb4Xd7sGr}1=d~N~s>9p*ru@f>`mxIIyZ4c9xZf0hj`SV&ISwAO&
z00NKvDhm@nR-4UP_HNe(%WHv3XtsQkkIm0lR`F*6Y{tQsG))P`ghx1R0~sCRs|tNZ
z!35=5_KHLX)!h(xFOxI@=HQ36<Gw_{c=a^fQP<5p-kW-x6Wes!596%F_LK=&=M$>Q
zK|Gls)VwB67_Js6uQq>;UBS}rlMxd+yjmtOh6N=>R-3fz6U9`1@d4cz+QENbpz)8q
zo(iF7fY0Q5844Xs8>u#%*QBh?u2XA{irj~M?VJXK{WQO4dqkQ^d=qZGT|donKxL$O
zlYS#@iC~H%qN{njtMy(S?Jhd5R*~`;b6*a}4JOvNvu8XLX5LUu3ooa-sn07~iC8q{
zsH0>;@i&|u%#o@^v>7TLXdgz7Gyy$3QC3+XT?SKr%K0&`dpf)?Y;+si@GfQGBWak<
zzmFYGJ{u3JNEaNSXpencm@xz1M!9CaXs155dDL2A&B9``8btv|&dZcpmNP`F_*($w
z^N+^Pp8_)7F>zwr-A?3b!bzv>Pt0O$$}xj6^k-PDb#}KFQ`bQ&{MGu8dxn2!dI&fh
z8s48yH#y?qgPhp=6)j~o)4#dT;zw;ezGN3VIN9AS`+2CnU~?+1{Wm8EzY`3Pg;bYg
zuC$J!)O44;k1$(Dd#WXkL|GayB?95bU@d{R&`tPTUvhq*WdBRGLH-x@1_1aUJbi>>
zTfy_+{eK7Z|AnU&MgB82i_nTn$p3#CYGrc^CwxZ}YZC(}6MSPk6DNFIJ7;_+7khg<
zM`wHk{QtejXJDqMVZ?Veu(mKZa5gc<x3M#Ju{NQF{J$}~{|#iTtze{y4*;NO4FG`h
z{|;niXKQL<_W$F#ueH6@w!|C%u>AhRpuz45KO%&(4IHB#5bqH84abiXfsH$C-teU`
zTaL#<z29ms!-%mknl`3)z2-WI85)&UbaZ~IE-!0US@Tf5rfD7(Y?GR~{c!6K$cazT
z=wPEIE40bdh$LsdFI~IHj=ArB%Us1X71$sD*(R1A#X}kI9|t;ON}KOZ+XNOPnJT3%
z@kVU(!ic9M9*&C{gV~*;82GLcA19$DG_a7>q9uka!6U_@lL4K|3!1UM2n}i*dKv8*
zq*^I4njDCat12c#Z#hP+LDAs1`fuk25x0v95?mE8S?0NJed4|q0tCNczyYmB37!Ia
z@mIsIiyE9ii8iq3$jZQR_IDV04%Cx-L{`$Bl4Emm;IH{K^ZciffmtjgfEk@GDI|c0
zS0``^3!d{39~*Z3A`aI!MAZr;fUI8{W7gLfX9VwN05qkl7Ylrr5$52#ngo;CYZOz~
z{8}gS*dS&Q^<V_JA+m*`c!sYXLv@{)cB#|tyY=RtK64sF%cHH8g?j>;0$e)VZKI2w
z?Yw#S`ZB_*pxtYw+YD>-L2X}6Ppny_aa}Nb#fk8iH;)x!5FNq3E<l0ifZ$nq!=@Z?
z^r17;qF?`@Nfq-ti}p1@gATxa7@~1WAPZe6>oHIF`(QK+<}YA@4hlb&sLp?nWJb#O
zaCd8-{y?mUPt^0X$?KWbDG<Sw<Z-OY{7obh^*bUrl+_!QIA<6Z$c!zQ@{V&_b?ToV
z24|zCfSXvqTH;xJ1D17ox3@k5B&HvSJ#g*+hR-0yy0e&n>IY4Xi|ek~&u4<trZ{M#
zu`jg;{``09h0KDk<+E^aeuRi)AdIs&eUho~0Y~hwwV(m638V+N*}~3=9o<j#=}bYA
zvvh0nbS&H-+yU@8j#>(^U`|GFd<uU6KFBmlgB7|`0v@_X4G;uP@m|#r?lKTUp0<;&
z_-rUY^HAEc&7!}r)AZ8nv^kqZcl?`MZWq?ZmAHX^mpExR!kdG<Gwxu!#QZVd<J41;
zh2}`RNp@qZHl?tK$T1+qk!h+R`=<2P_#+#Upod7|Eg>0csxY~ra(1i^0VwUtWmXoE
zJRzjREJFw);}KcU?|xA4+(~oru(OJRA8Jr-^bd_FN=W(&1b*vt6&+wFEj7(yABcoD
z1wGw!0H?he>>;fimYnAjH>pvB^=*c6;^vq)Pyp60B^GaqGSQ0>x?Jv2kFH#3!0pL?
zEOR&E#?H5YJKkEQ&u;H@-JgHYOpBacE*EEzC4Ha7aBc?S9RYaMAKAhj?JjxEA`k`z
znV2mIYg~~@>W!tTJ8KJGuYxDAz4b-LV84q2M0o)M272@c^PM#(KtYlprhXf~9oZUw
zNR?Thg(@jiV*s@HUfs}pz^1N~TC?dkt7H&!_lH{7{BehaQL@BTYY!Q?S84@#p*nDJ
zf^s8a%2bIeKSgo-pQq8ZmM^3oM-m$Qgr}~)&OXYk?)i~X>4M>;#_I-MHB+qr>p0{m
z>#+RbE8Hb}#(OMC>;a5;Ai@C;KtsCSJ_o!neL5(BX*#HgAW+l4=?ZBO%6a&pb~G5V
zV{Ae6s8I&K`F`Z-(FJtiZ-fT_*Z@IhpqViC9>?Vqxb!Rr`P-3fiV}SOz%5QCE7(4L
zUX0E~35}P0+rqOu1ipLyREbR#Cj{QO7T}_o8ZPi!Qw0wsQSU(F0<@<R#R#7C0d!X+
zPBf6(!%;c;@eyTW1|;eIAiyS!*P5?Zi{y#eX5!bqA=*2{=AH@#CmlcEdyoVoG3+ql
z2RyjvCzA4#eMGNI|C9YXXdikFd(em->{3dpxKNACVxUMbcvJ*jZ@Fn3M#!jR&>A6~
z;t+sx@82x%-=2mSnGm1u<#J2nBSL`CNaiRtJS=d*jSPpM{n>i&y@F7bnZ*Nu<uvG=
zxR|TTheN5N)I+Hd%2g~Z)T|nP8s^%!gby)wJcEhFXPdEh%>fp}d$vi-^P3J+PcPpW
z1Zp>Ts&=HHU870^`No;3HN6=+kf%=P=Ms79!RdUVIzyR4yN^!b99F0<tSn%>L`Ml}
z#}h^f0uN-~e;<(e=Kbb;u%s3-KJQpFlTFp+iI6jJ8jNO9?R_~=_0~Jm1pXi0miGiq
z>hT=N;|g+dJdVqTv7R(RXTco{)ebrdqT}fC?3$e78X6RZ-^j0ypkG-_Rl!ckAU;N}
z@^KfsrJEUDO-;6}*4XZ(yxh49z{eOO`_&ofSgb2*IA83({QZlH8Zd>T)vj@G8mT+-
zp!5N2{doK2+f|~F6E!*l5q$rA+C*qkTbyjeU>UR-Gc(hDh5nT;l>hUIRQf9>+zhmh
zu$;oqxA?rW%vixojqvx$Fi2WQjUzN{s8ElTgf79Tf-)Vp|LDIWK$8CGX#iqJrLD`T
zKN#AAt{Ow0fy!TB^|Yaj&0PNOik;ldEKl#;O_2c?I%S$BuCJHYnkrQRc$enP5tP>Q
zOKz>lck>H@t+0~Gs`gfFe&B8&1&|(=Nk4Tf`FQN@(Uipm+KZ{N8-LhA@8<^sJ*IyD
zAvnhcI8<P!u+TsX8@VlH*(NHU*ykxZfTWhxXyY0Q2dl!yLQ}2Ey`kK;ed1}l_Za)`
zhO#y1is#7);d$-wmfzdzl|gp4NZ;YAIVjrEnuzfdy4r9^vS9gJxu`_uuOWevNs%mK
z5_Zu`D=DBE!_y##x9zd|y`eTLmFxIkd&_eJMu*CC<I6HNsCw_n&V6i&UrxOB<#W=!
zRoVg%D*x5T2$Mefn)GoY$r=Nb%llQMr<VQubD@l>^hCI$9nKj~#fjU%yRA-@t5DRF
z)0?YP;gQMJoA>fypR4J|^sLQ<HFB;G@|^HT;c}S=*7)cj8Gr0p%PULw-czlx%f~gn
z$I$|$u2^J^I@03q@l?Vr=1d*GfjULzRZ8`DJ}%XjYCnD>qc7DQMDGnH+KS#84~cO0
zlW`p38G}Tho1887mv+VNc%M7cfPnqHl2NmU*y|o!wvdVT2WOi|e9}D;zWxx<5t&oo
z9S~A~5ZO*IergRluls<4nkL$7n>77^_zn@RnQ!;^I|>Tw!n+)JAfp#qfHNb%7>fpw
zOfL~d`O{Ie($nn;-2dC()t!{02Xnbu`Bx`POSdYrGY-+T261M#Gb?sfo&p0Ing!uq
zVG`)^q!oGPcB6WHAAcOznW9*cEN2`?<Ato)mN1<Rr|CbIYc))Ds9f2{{J>R>rar*k
zl@_N_cG7`Fxe6KMhyk5Vp|415Mu{NhvBu%^bnx(i%jCwcbBF@z?fF#TlsN%KFqR8P
z@Xz?1C*uH?!f)8sVJeb&$(=AUyl1WIK>nJ>fl{@hJ%g{L5IF@oz|)CQh3hCB%kZU}
z9NC0ca(^;TaC;^ZtMeF~3RE2pyd0$w!iJxzaW&{z29K>39Ij}<AKD&kS2-W>pihi@
zd5a?cMA%3}Dk#<DAV8qp;bawK7v3X<1msnN|7ITQw7uyNESC*HwPlE~&G`%J`GRJz
zWQI=yVT*yz;+P#eefNpC1dq-s=houu=;YvL{HS1kRpKt=$_GaR*=`fLH6f)Nhz?(+
zsWXQkKP75L@B#4WCBPH`Ob~oheXL`=G&Gx8sDtO!tDOo~HH-rN$~$0PEO`W*zCo&u
zL;i~34HU)^x5I$84bwiNDn8rN-OVD(7mS78cQ>xKWpM8TT%XuE%>T}DED=OuEB4>^
z1vJm%O|HC^Ed0thSycdwG8!A8g}5dSHKBe&j2L|mleiEKSat!Qn)o+ZdYy~I>dkKR
z>~4;m?50+YYA5(Z=?bEknzt}?)^S)X%z4Zx?|QmW-eVNG5=qo|s&SG?%t&VFy>gm<
z&U#n^Haw5<K816?X)vtKGbW^jdma>4=R!N!oCDVyvkb`zjqwMNxpOaB4Xvbmp<z%~
zt-1z|a6$PFL<6#044^<P5y-jkgtU$?kaTvlZ6+C67){G6g>O%5v>$WKU#Rs?c-lo)
zG1a7md32=)Y9EY{M)33bcqTm^q;SCmuEuTrtBhc(OquWtkGu_dLxeDQthLe<%*yW#
z?m;dskl{O^1fH@pB3`=!9Z5{hp2*x+`xdO4CV>TSEzFtH73`IP5ZKj=kbMj;j()tb
ztQA0basxaw)EhVp0kPUNn);I<4M#<{`?UY0tz}G*RQCHKb-&`7lZaNs3MX*Vv2ugN
z4g%Y8ZmXsKRaUn-ddXd-A?g}7ptfNa3PLGBt3>Q6y%sdJI9c!n2I?0l+1W}Y`%6Fe
z`Ce=}G<z;rGG06;|ERTO`yRFnZCBWbB}v^uwU-$*MMY}ry!USPTCkG`;57HS8!IYs
z2GtZCA`yvG=?q+uSzNhKSRul8_;Y^~#TmV^H}9<nY)1zNN8OsOt-QxMl(d%*jQ4(`
zfZUS4g#y2oU^FX(DKKr5RRV<ANt@o}F&pAiF{iLNP;xX1Ke$ua2QR9YvHI>1C1mO>
zi6y@XG@ay3u_t*5$!oAlC9V27f-id};g{T4)XQsFi3}XFC9VrUiW`=hAN64WHpAM`
zzs@21@`QDw9&zMAeGj1;|Ev6CgCD#jF!xbhg(dFx`D}d<HsY<q^PrUz8xLv!vQT3S
z0K_9GsVao_jsYd|!RjjOxYNWhrBQV(>xs<IhG8>9x$9tH)Y1P8)(N-cPZCht?x#YW
z|3u|45Tez0Td|7I)QN!j#G|ICF(Q?CdxCa6=#uqvnfZWLKv8}MexmEh$Ep2+FOEy!
zTWG-9l&Rt4)<A)8ZX%kl7S<rRr%CFu-vn5qtSy9ti(A9N5rkP;BfyN%>UlxcwtQc&
zH5BF7x}V`1`^Kx5>fmOgl*UW*5{$&TLM{-!5`FGXr}05>*=OmU=>Cai%zp>M7y5ZC
zknd2Z<*L2qVU;lAMh8X%9LAHB87nb4h6U=prTqwVNhU7(S21(p8Hokl!d6Fsf7s&r
z4%{2OMMT#H_q*TH@-OHkC5pA->>q@BW5yk)=_%unrsBmy8l$E2QJ-uPl7(87?v+ho
zRAu9PJFVQh&UI31aA|S&tpMDu0%rj?bv2xnh4781f~ztMG}_yz6Xx)u;~iB{#ohR$
zdnkgXfg)9w%F#pTwj(ll7;@wjj0Qsh10cX18(<Mo2RndZ81BF~He|a<h|NskLl*+B
z01B?UxVYAM7A{_ulSGP#c*@ko&(_kyt;hh$O|Do`hOH)V7)P2n<bqzjnqGZFdb<p3
zhjSA&{FrZOh?)BpWlK-#1(Z1ayc|j$5N?DZ+mg59hX|uv;|~_>t}FjK`jQyl@mA*~
z9g$^WeR?bD;@K01k{=9wdMf4OYe*=GU;?azy0XUMB(}jw^C{uTrU4zHh+gOB1l;#f
z1YIKowX+A5k^;A2?j>E6x+>sLSur#O1p@NipWM(mXwp&qB5l-OBU`r0KpIWOz<Yw&
zZ^E3UJ+^1xOL~055g|v5b1<w1<=;zC5wF%6<B5*H3J+cxNcMABgajBh-*d$S6SRWm
zLSI3oPkErvPSm_JhqifIfFN;IS4VWu=x;zz;1vfJ6FYRn%>|1=0^j|&S5lm@3a2OV
z@!`lp1tR?ieBcSFNf*(n8qtu-$RuB3R8fqwuzR=XbWwRT*Y#nF8(al0KGM?EMsw+m
zBM!7exu8_Uout2D0<1oz!A_0bBToO*F^QnoZu;r*aoFTV=uqK>X#!JPkNXrK6>eRW
zGZqslXC7|M8fLmf(jh6jz;i}p`1r9-Q)pu9oUJ6##Kdcli$m)qhi^7!hn69<r9~i)
z1CtJn?$O-L*NbCRL3`&5Y*5|`tM6BgR|;!wrn38+E3#6`4ncYkP<A+O<RffQy^HGB
zxdl2v#8V?RbQ^R+T6IhHS!HoRldfiX4fl57zjo+w)B+Nhp2=St;sXh&lzs*W7XdK_
z48bTN88&EadcGql*Zj}`4;=aXBQl2xOnvwVHJ#!vVL*UHCFQ>8-Vpdu{JVB0I-vhM
z?o=@bNP~gIT$}W#NCEK}VmJ5XS*rRSisPPLmC<&uJWz2I6*m!tS^yR??X}=PCPGQM
zaX&=}hYJe8=<!X>;RpEZ;Z7Cnk4Dgdc*npl;(_U1^@>PVl(Tp{b+=U<-X$O&<n{ik
z-oMJWZ-;(3PSG@SkQx)n&f7_al28S*@UG{zlp(G+T(B@G6nI=veNg!@mKA0g=4P?2
zX6X;Nb@z6+b!YX}g_Tjk`+O8H`})*53Vr<Y^`z?5_scHCbLtPvEt&y8Ig6j~f=LQ0
z2RAGiCCSI(mIy@D{PXr$dZID|7g8MaC*1nnoIzod9%ex5TRz>~WT^Bk<|gd+K&^~=
zX}@IyVNCxvLhqH|DWo(NsA3!mtcLrdNdU9?cOR(MT&3C#_wZgflfY*c`puNueUVQ7
zmAUIoZVZ>Kj;@+`P@QJVkB&A#Qt@dyeg?q+JS!G)&_SAdMvPaG3LKf;)Szrf(o-s4
zV9mn7J2OQRnle161{K;**6D&*x;(<31+(!_)fUQ;&L(!GfvrrfxWw(e<DbLB57hRA
zU$}a;%+EzRT24mydqfxaUskKfV!9fS44k1S_#bT~G^Nf5=B!VpQpzQgBFex{e~~6j
z2HCz!b9#6&3jEv{MjTw?*w0EF8b}pzNu=2n<Kf%Gg3Q-*`x3VdBL0bsJN}Grc#ngP
z1VC)nT0IE?wFF2Gds*SsRpT<SyvT0*dbr)%IV5y+qpyv4oozR6FDz}O1Xj&cRr3jh
z0=Bx*>2%6RK?*KhP)^NH&!eu3+CRe)egA6PE1R$P%VL~3Vs4hYiP1E{plr4@6V)~G
zVc8x}7Y|o&&^~YvGFj-TBbbM;1#AmR(t-aH|HYfoRb=M|mobdqUWvpjvedMk%)^r4
zaiE3bc7{I6xiIhrgILh=q@n=aK|wA+YeYfh@OQU{oOXz-WB%*_a`0u;!vX*f`T1q5
z3OyXEv(m`QtP*Bk)w`jO+F79Qm>JHp>Xr}{g@)hVnv^-s_nWTVv3C$&?rqwX5uKjH
zD{V*=ZG?LfSpe+y()s>KZYag->iudmmz^NyC~2{PM6gW(5nDu?aR40JFWMMz8)EP|
zM{D;Z51>j25qVFgid*k86k@KEhbHsPGXf>SV8{Na`NXxZl%^ILrhgF3FVdML=MztW
z6<QT*xy7v_6_yTKJ3RDKC4`a5ED(>G9q1oTfN34mQ9am*tTwYl&9L@(4MevEV<%1<
z48$6(x@j?&X($l_q(4sE&~v3@XD!$7#4CtWIzy7fJe1-J6NitGf*<l@UkU|nwPbSP
zxq|YNvwei;#tQJgH0`VHa!M7Sh0jaCGpJ=jQVyc{jt_m-{_#NcsDC{J@Q(0Uq!9!N
ze+#46c_%tHN?YQHztMgp**BE*VZi9p<g8gViR@k*lKw>2CUyRf!6fyTF()a){+soE
zKc5#K3+B{VS;TJ!bSl8sGHs_VdtGFZYvD6mCqU_~Lt6$PGjv4&V{A`qBlx|T+A&Mh
z1?_{2>d|vHyeKc#wGO!}Wtt0@sGLrfDfh<4Bzq`H;8=6fRKzT}Dk?lu@|NCIAO#OP
z%)z0`8dxS35Qv1KwJIPc2aJS_Qjs!*7rO7i3G(oFa43n)7~qGO?QYc$s+E0>K&d`9
zE^cLm&%yTmu+Fh!2{@VN#K@@DjokglLPI)7=^XcJP+^SOlhjHR*%3tuY?CrXJl=u|
z48Lfz+U&W#6AdW1orz|17U(c^QK2YE4H~4u%`Mbc1|g0|h)&{pWo&sFsaM?~Hor=F
zEzDKfp_?#BW`MH|SHdSS`S_&R^o+WVi@ta3;*+Xe=r`B(>Ep0A8lS4B!5u7=EDRyC
zDhDXq{B@tAw@-Hk>J6qOZ{{I5DQJpfHV<pqYbG((1k+9ej@F4{84!BH(pWHDMK0~_
zbg@?9i=q@mwd3M4z%ow6am=4dh_20kk9DXMos`c1X+I%IUl0%_i;}6h7nV&JbANiv
z!BPt2B^@dDh2k;chXj%63jY`_ck#x}i83ua!n_~2(UGXU1OQ$+8d`@?zCcbl)BX=-
z?-V3j5M+zCZQHhO+qP}nK5g4}_i5X<ZQI5>GcV#!yf^nw#N81UQT0)oduQyAs?3#Z
zIeP@6ZKt`h|LC`r{Dqd@!DaOa4=1<Rcg?eDbX41yB*O+D1p+y_?M+_B+r`8w+NkB@
zbWOCyEMm(twy{$mzH*B}mjnv=160iib~gn?;CFMk>zQujfO}&jZ{9G?Ujw=M=+=VI
zLFQuaeNs$WAwQEroO%wZfW6%3V5Lh=MSJ|~KI3D83K3WST{>M)j+(4^V5+%PoAw%%
zU}9qQ4>qLZ!}O>wLy#6e7o+FrG0htaqFRDf!LD>VP;k8sQm8sm3~S$4R9u=vX;o8o
z8<VhJiR1F8(CL}QIM5BTg1j<^$-GKTlzK9K`m+QmA@Q%Yw&J1X+<SNIXV92-!dt(U
zVK%+FQ920(g*i6dl8728s^P=VI1R&xUrwHBB<h@Z6c>;_T;W%C2LJ{QcjosQ&^{sC
z0n!hvOKcaIWxlm02rxh-+8MZu@SPi|92SKHYd4QbvCX+^o?6(t2svcm`&;NzkcR|T
zF19X7WLmBCvt_8X_(EG&04=*(N@c2A=j{$h(k!=1s(_Xg-t<NrRx!gvt(t8>W1sz{
ztB$E)cigX=o6!7_rLi1tvqYoxHxA~}1gL!>=zK`hn=A2;!t%w_YSyEokNd~{3r=%^
zRvhOIW)>akF|Tog^i(FD<V^hw>K?P;xyp+d1myYi1)MI`KM;4pw=9_R=5D&A@0~Y-
z3)`l0Sz)(kpo_C%ab6injKZc5Ky5Z<eexLlH>%0%8>(5ncH34Nf6q$T&@9@!XbEO9
zZklt7YT9zqAbg#ydK*ttWKocqZ3VJyjv{kTKQJC)=vBD|wIcQ(rhV^Ir$27lOJ%4^
zHwEXLyB*;hU=AK<YM+7Az1@XjMPe4dmqbl~95NdIN{VMdsO))*)isMi=ALKpdJKe%
zb^tA@2_&Y1A3WYd!|0dxnv8xe|L$4qt)D}0fE7Z;N7>rJ3rv908mTSUL%}Jhxf!r0
z+iY49LRu8fc?($7rNyt2j4mx3D;Tja-Nq`NHlOY*5&^yM<lnug<Ev+|fi|(>AA?EY
zUm(^4>Xf!Kem|R&?*m_k^w(iiO@|?(Zt0l*#$vjq<CH#8U|Lw0dzp!r;|zodfKUKo
zz%Gt)8=ZKslt(IMYar-O?dIp?(udh23?a0H9X%L3#9r5C5z!lnWs?GZkOQ;*6!5h~
zz_~h3b-<hO5){u7dr(I;2il*@JLOs3vdyaI*}*S%!<+<5zb<eC2NA7Qi1t%`)`YAB
zYo8?YN()eGepaeNXqD<I<(u3$Zt!xkukdnGQ-Xg;UaFu~Ayr|t<w;*|;q~3oOJ2k2
z{m*;2&H+(C%HE1|`O);pf(zuN<x~*_+L_S!)Oo4r)v_;+e+5410_Px=OBplvBa1!Q
zRA|%sT=64jIJ)b{@1lEXcx#Xgc|etc>KQq|durs=5U<D)&vp;LE@iAbR`tb`%aV?J
zPfEvri8rAuL<DoouJ$=djx~I+%v`h-@cQ3Ado_l0v$AlQ9|f#>#(S2a946f!H02Qe
zPInTiC<qrtm{pD06I=^g(m$N=&apfI`Vm><+N5aNIlPv+xxUtT`L;K1vNyFWm4-+y
zSJ1YxsSX6v49^D#sD&w=bU)emGS4YwVn4i|QgfW$I>)>irFwja@uQVUM6WB++$1%x
z^$z1DRX&tte|_&ZW63Ykuyke)fzos5VM-)%{Pt}y9~GO`@~Uf7zFs;Ur^yhYLa@a8
zMZ4;udpm%!vaphTDle(VqLoznw!9Bhq$9LTRN(Y(B>C`<niv8jsRiSwMMI*n*$*kE
z3+pw8Z~AA)s?=z$B}5=NXu#wEJzkg+wqiLh=@UaqIVSm2fnmj7Tl>4|`O4AfBZ*MZ
zC7NOB!X((`9q~gxyoX3Rp(;et{mlG<LF&$8-5w|~4hA6n3|q(wsquYb2M~zBc3m0U
zo{s=7H(mw62UMKpl(uREjJ{V)5m+k(&hGG36(!o0hx{x%tYDR$an<5Hmhg8%=DE6=
z{(J{=)Um$#uu(li>E9m81$=we7$&xKBXaES_h+^8zrw}INpw-9u&0Y0u&uoB&Tn&|
zmTKx=MVk7%CTH*O(aCot4DY~iSXWZDa;WM_sH_85c_ZwM8caVr&;xCFMrzE~jYdz{
zvwefu>5#t7AEhh|Sw2tLUT%!XPyxzZ%*^oECyTf%@=qode;0=ARXahMgwvFFP`QRg
z+?<lA+)NZws;%Ylxt0^6)o;t6PAzHz-Bvh!S=eUcmJaF&Bv)6sI%1q*ZxF2o62<~w
zx0<dt!JYz}-*f9+t=_9jd1oB{eE7oau8#k1bxFL9X4LgrrHm^OI|5Vm8ljXJOxVx;
zBJt_{o#^tI!ELM^rBKsTc9UFuvx6;%0i=ByCS6r6Km?JH5bRHo2?0hl19a7bsSV}>
z0t9x%Z8<L!=KpSycsI}T<06U~op+^B0vdDZ7iNQSXpTZE{|PMA;S#6m#y=hRVlJ&f
z2`$$gXU}rfU9pT`^+b^*>(UvPG>@8H@Kc=Yx5smh+ci}5O`Ku9WFLG9H3D)tLE~KY
zzBKxdlHji?N^OkLS<brWg3vEp|Bj)5W*AsT(t9v|=j`brusnUm*BB}IZU5YDwNB#w
zvmJgH<p5&!_~kjeYe9={J2}WuL=i?f+R$flq!*q)j_!vOXzM~C-PqMu5dlY6Mp>-8
zH9aV*b_PG>f%vm|Fc5Ep^L!{hu4AnRQ4i<ODg#eSqd*vOi?$~$q!BS)Kqt$jw0xz|
z2n73{i-ok)KF<)OfHOI^h7~6*Gj?>l<Hy0MNw*fM#NX5wlAV4cPe6g4^r;ejhm&4+
z@!0FolXeefL9-zXbf+~9(pHWgmHsrI6-_pAEPIZEkRc+^S1hz-7E-b9aVn;%tfOW}
zhSs+<tU_(EweXw}eRTMjVIUUa6RCh92%7ZKb3(iM7wEr`6aPVy{|_+nzaF&z4pgvr
zrZq8jp#M*#!tOujIh+5^JojI~hySq0*$xm#{LdoYzk&OIv}a*xY3)j9@xRReZwT#_
zXQrfQC}ky8>nUq#R_NuXC1vU6C+iQD#1QGnr({7RfdKx?^M61t7&4##%Kh`I@^2vh
zch6#iivJVd0(x9R)xjA?WsF8`Y?5AmOm=FD8t`BVCG?9Y6e-`t(<%`)4G6^~IT-~-
z`}{I3E$#9cz4!zb{q*b@z2vg&h#dX0j1=v{H2LVn0q{TH?Egil{QqP8zoGW~r%CXC
z5nw?Sz#9`J0Dv=b008X&{+a(_%$Zr=)XtdB_<suTHqYn3+e%XJqxw{%>JS((;ku7{
z)@n*TXgNcpJkq#Rd$N=Suo{i@4+~Ss=JfaVDsR!~nJM;|uX=MWR0}IFFYotFt|Od#
z>lmHl;jl2$mYlNF)90=Ii+(rH2Y5qSax^+iV>Mz1$vyi;iHK(DB8MTk2&Ayl0f?B)
zgoTs%H?TlRn^>SYv6ydTv`=QdiV$)X;lg0}Cgz^oZ$NyNhvdl(aO6QU4W=m1Ig7y&
z83bj)E^mi~BmyFRF8x4X%s(#WV3&yma|<StT<nB5E?2-c(7R#a!XSEx@q`!`Rc0Dm
z|B(YzptY}n5=n<{nP7|)@*!Er9Tr*itLy#!@9%Fx7;gg_o`|GPVa9WY&6$3doNxfY
zwr1BhX}+%zbybo&y&fOoXb-fupxb{sN=k>^6V{02ZNOp&*gf3rvby$AjRyC!Ubkd@
zAGWNqQ8jk2kPPc(?kpkS??;(`|I~qkkOa&e<2VxI0}kpm{V^R#wM$N9sfEDENNzwu
zJcdc6NLI%OC=1>sa2mV|+#(mu9Jsm!cS4-fal)g|m_*NQqan~j5@*2LZ9?JzP!xwT
z(YW&QHp;P2+94_UTtQ*GNpk*}BiE}>SIXy=pcIy|X&1;%z$;2lC#QP9Uhe(g8MQUl
zp0H#$YIF$fVcA6yW{otgAVHTXEj1v7adiU(GOA}x9pEw0CrR!|(F`@Mr(_7$2^Lb~
z3fF9fbimv(tO@aA0q`Ww1o{McN6lCCz$B)SJ{%4T3l8e}%tryV88o%Y$cJPMf@+XB
z=<GXfoPEob+fGKNnv8m5lmU1|d2vYsnWsHgz|@Aa0}*h*2x`^nAT-jSBk>*c1X*w_
z0&ltwu{YU2Fvw2+bCNxFW^@Etor%ru1V%_?0Ag&HNPO%Q)9*V)@e!*7Y;pk&%d;54
z%Gbb8T`K1CM`r4t+_xNdyv3;h)%HQNb#^3;4G=(?@rs&>k1)znbjH=#L%;<%fnu=0
z?$S7T%{bPfT>C;|o}LBS0psEf3Go69f3j;j0OQbEw|{*_MEMz6S5>U2%BXS}9rJvm
zfp5WZIjKRiG0@oA$J5I!>5$rqwTFZOAV0za=1sN`lTD68jYb2-Vj%`unO&|K8bjc~
zb#O(DShkry1<}sEFayBuB47c?1hjCrqXZX%{KXo<bAO@ih*$cXfG^#T2H!S#fz$9R
z6nxPZlEFDP{K-xckRI&h2ODQi$QXiW2@xnxpSzW%&|qLGV;=kz3t`sF0;|&oU_ThN
z6_KJ8{6*T${1Gq@jrR1rhQAe}t4SXD)ab1I1>eN|=S24qlN)KaGQBp9T|f5c-c?|2
z>(?lUaz=rFnPwBya-_odrP(%0oG%`I;?D+x5;DwKD_}+>qEGxBN`QWkFx$@CQ&_oq
zl%-`$5pI>R?y*AzotYd~=M;1h{m!a;v4<c?U<v~lWoqRmMZCV{5jeZgiOk+e+#~y4
z`&JF|{HLBiOheI3!Cu&t!wI;NPOR8bT`x!d+X{J5%^MKm9EqSN2RYoA?{&6Sm>E^e
zNw&56%)Lc*E_{SpX6(6609BmosmQ!|T4^e6NZlsJ6w+J-Ilt9|BZh2F)?Bx#z`Ot+
z2PS1%EF)Vsvab<m#J6+UGZ>F3{hmy~E5$YV5wFz{H&T2z{E^XHDV40J^xy98M3$q$
zXde=qH+!tzCjs&gCL6NI%j0Y92OuzggD2@j3>UEOIaqg%I|(Rq3QErpV~z+hE3ApJ
zz&c~)1B0YLK}o~nGx7F8gu4Og%pRMYm+A=l1OA^-40@3RRm_LzN52ehp?3x1f){hQ
zyly1LK#b?*tN0MO6$W6>2`9RAKJ_Miu&E$bYY6Gr{vi$%eX_Uy*_|{ckY2%prcRet
zzJ<sOXKXoqM)#``;7S!kfo*4_dlqe71OPCj=&>cgWiK2idKdyCK1hwoQ(;ag!NFRy
z&pKM|uz_X1A@vR`zu3R;2W_Ka=r^yc=>U~9?f`qRFB?}s#PBGrNwt(-{Z~N<GtGX+
zr_;~(tYyyj_j7}NL*%apqK)!FJtlqp5U_-#>)9|vEsUs%#Oc%8xcOIJgfG}<v0d>U
z@rKVF^BKS)vz+ThL561`%{wbO{|cFk4&Po)sK8g{B8@UcKHjaMDron31C&QGv3FT;
z@-cq`;sjn7`?5~%yHf#azz|M!;Sa(_@7V+iXvJW^2F8_s_F~;cHN@}sY6DjIYk+og
zfFnCCFihCns9WnUkR|d&2KGM>IMIkJSft$gpN04k429zV^kZ;eycrFU?}48R1#dY+
z)GHkIBo+BZ-T;N2nl=KS`=tg50HRDtLLBwS-kN7Xi~{B{zb4P1gU2IrTp8ZXQ9wgI
zp1duYDl<Y9IOrY0yaI{{C=lW&*_AgS0}vBJFpUcv^az);5WL<_e^#-_ohWEyX~sjW
zDw&X*UIhsf;Xysj4P6v%L-eaFmd}3$4TB=;ypP2?tW{p5XEG)0N{CV1O-UO3#-{m^
z_byc+Z|L9smN%*0K(-xL62B`fk|Z=dXKCBJ1E+jLd#dJ))>6dg-v9$Gpu;4SNC30L
zV8|Oso&uS^YBYgal1V8#inb|aFV(9e=U|<$rAl0KC-V@UO4+_`tEG%87?ZdlcHkXL
zt!)B&!2Q_;Gug41*1TVq=^*$Hv!WoMYb5;jQdxPHdTFU@(zwgfZmiHuog%f{E{O~2
z_SYA%BdF2fsXB9=fv;WYZMxOS)vOM_2u`x{o_J;twij>X#O_1_$u{HSB+gfG6Z>eW
zNLR0kzA<PqXdC)iz&)5;T58~Q5t~4bA5@j2KrZ^#2{KbGU@G_&K(_2=@&ageb1EAo
zPZieJ^P4VZ32Hq8sMi(Ey9Sh^@z+LIuxS_sM>)J*`2+y`WOoGel&I_o{5n_031o2>
zR#%vL%i;tspp?G{Gcv2<reF@;>XQCz!wQJ+%L86fLL%BqJ-I&N2YYhJV?2>I05>}6
zl!N8oRe!-b@lkbZDpAiJPagi4%Edt){A5P*NH8CXc0o<N!)$HFT)DNGFWD8;klI``
z^Br=>Lx}WpE!%O0UW)7x+KKP#G(O)4<a2_ch>8S-cNgF(%Y?!`C!RSV+x5+@=d6>=
zRF+22wcE9LnvJ-oz!<TmOiP8Vu1?+UGWX!#sxl=ZQMJ89FyM07h<5d=FkRJCHm#M|
zr<|5oaRLsaE;Fc8ka-x*Ysr53wktT3TkFd_D++3psgCSLgAVWHYUO^5q06ls)2Y;i
zlb$N@x`sN*zwQmg+XR=hG-rQSU}put2u<CmrOV?M)xLadKIHxoL*uiKD+pTj`lfa)
zy7mJ^fTx`Pv~9eGL<o=Mh2KmsKa+(gP@z0ey*04SU=ozQ*kJ{!6Hhwx$CA~w-1aZ*
z*?YoyhYs`#HmRm|fkmpx?qirFHU}NOAh^4dJ190W?+yhe7EK(}o>?#M_3?FY^i$fm
zl{`4nw$nUE-?`O6^;x_Mc>Stk3qfO1UTSb^v_H@2SQfdhZ)gYbu!s~?b)$jQXqctN
zN_9tQQ_v2rm+7jrfLq`2b%c+K2iLtjcm)Q)%d*_Y!qsG?4^}*>w9tw1BBydS^XY;D
zUtoF4VS-N!5wx(yotl{>Ep2Y&>+ZrqpkV(=W@pOdhU#?&jr?~rg`gUcdZsoGPG{-z
z6Zm+-10smWE>UGyvnr8=bPxd$ao^5G7r3Asf4n-T)O?jlQMm<Ml50^or|t|54_Xv2
zNpp=E^<^_xFqYJN!O{a81IFyKHip0|B^3wXoItU-nz_o32Vrf*ox)i(`HTY$WR9Ic
ztQq&l@KBGFoXjx_e0)t5&?M<GT|t63u98zLjN|ns0n7q;{0&pkf}@<Sp2fj=vRC!V
zs7YaAw&=ZYQ=NZe0&OBj{In#z{Z^As+k4*SS{(dh{I&P$j^GDxicpq{u_?|Uif3Fd
z{bG0poAy>`tP&ZNgJ-E8jvfRQw`H~KxljD<JGL+<!%R#}d0*U(>ebc7R9uWzXldo|
z>+_JlBl38~sv5ts9nqVMx@bMv*_MOiHZ--HgTC9wUMrJ?V0ESBW!NOl>ZwBYOfAj8
zI=1z+<$#D9)KjpZM#|%y60H5vkMt`&dV2#hpCeMP9%gW-Ydw874Y;Q9^Deuy7H1&;
z8fM!u<SEzi#}Z`P;i(F7F)lv-45xvB5?(dag{2rDHdpf{zze%R3%)(aI)L+nrw<=y
z1ln!}vrw6fMKGV+3k#cNl>G?i$N1e<PC%`Q{7?c~55U-A5J{8bJ_#lvjR17uMM@MC
zkH6!vx7*+&fxeF75JDX3(r(iwDorD?*awvs>b~UG>&lgihh5ctqrIk<=zKWT_2VC8
zDzZvVf~jK5PV|0MaeqB*@6356E9+F^jKV#9X-e#em%(?)4G&--p4jB@+Vq&e{0_kg
z?OB+9NL_{JMUs78$!tyN#FuNxbt=Z}@{;0;i7oGToZgZMZSiJWuNgW^12C$-rd0Y5
z)yZ>0yc`eyPB0!vFNn_cZ=CD6fnbcx(`J0My=E&l!2VQc6u2?yGkxG_p0G0Dg7$E~
zHD$ST`>56YP%(6m!g$!evT!S?p`!Z!v1rk(Sxy_%k4qsmsU4Z)Ql4r466o2Os^Y@m
z54ce5DtNnQ&%~P^9kp@FLDua|Yo~W&DJ!<VdDVz{X{X;Ev+9gmtnJO(g4eVK)IkLc
zwPU3d<V{qh?mV}Rruuyt0Z2!6DlAOK?$}kEwsh=YRyir(m)x%3%!6W|pwP3S=dnC2
zHQL8)WNN<oD3CY?=L;&8s#!nw#-Jzbgd)hM#T5UjKZ~N_>0b`_kc`m3)XGs2-~%i~
z(F`4<3<)$gs{9@;u?qr%aMegqhrrj&c4*d@JUYxe;*?FyjXy!5os7o#$^g*9RA97t
z<+Fx*r>o?eE=Z9q%uk}1Fk;ln&5jHXPhK5B;#>f6yink^w$_!(7IfmBvBqosyBM7n
zM4Zv{IQQAJzyhdF{KzOP#2C7|(ZY#z)viF3g%4C-YF1~nS<|KX5|R<L!`0qwt)6`#
zdLoI<cz-I<X`^b2RBj$5WD!Fp?ItIhl6Nid64`kpJv!NRp0T2TQB@MY?t8uBlGtwe
zam=bm^ZmD6SKE&Juxd3bzqiH)eq{g$-yWd2l1kuPOA@Tp;P>*=UK~3gq+b2ao_TKd
zonKB&QRo*z$bLs)mOdvCZZBu9PFJvS&^)T@6m__AOF9ngx@%=IX+ti*3$(d^^L(<&
zlh?|aTvx}X7VAe@r`cy8TV6<iaC1lRTS<-Ca6*@}E7&+df;`KeSNp=jyL_jA^_gt2
z?|Qy`HOV=|kFE1J9Thz>Zreu8(Mq@7DY~rUa@<Zw+HayG#e4CW{Zj3lg?`;_g{eXn
zp5W563yVjOB73NrxpMPhhiiA`gT$vfv}STZIxnHO7WqQzbm>?Z+6CMjUqS`e>^Ny8
zj_b&v<@}wt@Jm9^2yDSAIg7sQB);B_kAso5Kg%u@C2@N%`p%KsoSh^j%)M^MtZjN1
zsyhAGxnjoN!ba>lGf(<!vRsec2yu=Hh`Qwghl?6L{zANb>*F{NRkd^LPVbUUa63n!
zAN>=>e@@^|IKg)tyn=nW2{_lZw2%H`KWIY1MZN&%?{iXB>odp3VOFi6>C%`49qe^n
zWa-8l`wERT=W>T4tD!c6(Jy&tBIvp!dn1(&bYa2BaCF)TgZ5n5Y+nj&tl+r3*x~GK
zkyOWYY6;`^n^wQ}Tq^G0W(w?l+OxYSHD=o%X=QKFS}L7z7WM%ZV4G!@OD87Gta3i=
zf~)koAT2D=b6>2yI;B*!Jyr_A%ZAMc%n29|*a_*wEewA)HsK7w*8C-L;%gM4ZxO~6
zXxJ}p_5m=9s)#qC*h(Jpxv0vZp5P1Y52{kz!chx8VObNV*^!W)BlCP9$Y7<Q8;zEV
zs<ZsuaC@WJ>jo}7&b^#!bK}K+D>(r+9@sz&cgu^HsJnVhDb6Avyjp4Kx&*4Qs9tIR
zQnx#~;({C@8|97RdjF*~Kiz5ghA_t`qGMfJq~fD%KYsqyiwD&We72!C^T`scxkF>^
zdDyPyM;SLPj2byu3G)DagSA;<b!I!i$EyV))x2ofOLF4V*DOBDqDk{d0gswU*PAop
zdwn7n#)qv2;11Q(6v&@&$kN#2T#BOkhQeI;BHM6#b*%s#LTCokv6x<L=g|-t)?|$v
zCYeoD{z-Lzn{WF6%Fq30W-yr9P!s|Hpc@O|U)t)w$#MQ?;>y`Z-^Ih_f6iPjYuGw(
z{HwFi)Sa15V()_r>x}CS%lU*dl294vBkT;hdY2$AK%CH6yD$@DU$FgtcZeg|r|Pro
ztKlCoEPg+E%g?gBQrE-dCeV=PO|y1=-|hPz)<3_nr%z$RAfs{1;fpDKg}-BMROCWe
zz~$qLGLV6R8keSbnf3z$A*$tl(x}k{u)w8*bOR!rY8%WOv65G>zyZ{XK(X&285Iz!
zMms!ZQ$u(T1<?AWTI?~t9gsz~p?|{MwB=&o;gEsfcVi5xcuQOndNz_!d<iClRolCF
z0GDZ3Qzl4>K({R<$}3NUK1koO+)p>lEh+x>ba!_rm;);*1ST|}j;_eaa%Na%M@(d=
zPC4Q8`2gH?lYrB%d1XLY-J1NOWA2^A?N#nVA{++-C1P3e)bjqpF)k1(zvYRnt#cFU
zVrtd`c5&*n(+qh5WnjHwYE%G>bjZDrKnEAWKrN6}s!*a|$sbk=7?*69hAelO3k%Cy
zxIDAuJ8VD~m2OMYu|CSB+Yi$BcA!%_#_T7ScRZ6qJgkL~My)n3Hx6ag(bU7`JXNh1
zOJvRF#KP<2)L!X39nUVf(P0*qppqRkH=rCb*t+cN9Q5}oPta_a47~vcj12!cAD|Gm
zBvMGG0ZJ^RREsFgmSqrtf>p+PpYwH0T`HN;QVq*2Vm63^9AATVnkMnW{4Jyz_ZeZ_
z0r@Lbm(<IF8k)x)L`j<%BKn--=k9|G#4@N%m7*d9ML~!}Y3FHRl=rDR%WI3W9gPYC
zgjvt?*9(d?&U{MY*iO?kxM)BzWSi)jNJu_?X>vdu1D9S;$yVA};$Xfs-nt-^+^HLd
zrlC@{A;~;~NKBmKcpPZyP1WGD&1{J~3TAD|FC|dFV-LnVsqWel-3DCjaR2s2^A)Dj
z7TjNbzl!&rsVf@*DS9(_92LfU4o|1QotJ|fz*~Ue`Y*G$5j;2pCRQKw=K0g+i>P}v
zMzGv(BEWUv`edgpF4&-Rr|i~D`DTN+TiN!levJk$aj|`?{B=)^lJ_9v5q8<({_!b2
zGDmk%)jsJSSR&FK!u{wRu1v&!({;YW(m3AJ$jhGdD-gScr#Hj-%jfpYQR6nbv-mb+
zVw`P=3xW;k)3RF!xF+&v#;9L17z`g3u7e{3|GLJ+rh#*27-5pOx2ldi@xD0tBUM4j
z+OM!cB=D4*JA+Hkcm{8^fgb=Zhwi8#eFtP|qTArm#rikhRk)<ul(tBHZ@KD^I^dVw
zHQ|+f-1IM`6qB#cxL>G&rt+HziQUu<%}15a#fMsr+TaXK@T6Za7$$-*MUbRrLUC?q
z#S%mghog59m&>TJ`&F*q%T|xC7PnqQ;g-sXLGwfNZKzwV(MYx>?iiXDCJgs?!QwP!
z0&+^%DUgxI5y=pW)JXMt=BUJAZ`(un1M?qXJhh1&OH)3tfdopnDNP$L<lLH!^yr<@
zFvw4<!J0oQk7_ToAS*arw;rM*QsfnCXp*&sb78@*QOoX6;J7UK{DPN+ZlQ1mSN(;n
z1Lz4=q0-<^Jb%$*kT=?gYhx6eaUD(U(jkkV6=&cbK)j)bR|I)!JZ<$3Nw_g4oQ8^*
zGlz}^Vf_MEh+wo&m?M|9n&AHAS+9In+S$&xu5>3^0*Jk?*w3>U{giI$(D-(WrF1SI
zk=8?G9l$GIY#U2;3zSGz7{yUM2MCc3Yy#CZ8vGzvTKeGr>1>O#p$;06yxOkU$~f4R
z^7khgwPc;W5A$^ckvH*-IL#hrT-F}#+b5<hWU_lI!fx;=J#Blutm`~)&ARZe8MN2L
zSo!)r`1R{1^dH(RW%23uNa3^qZ|qq}jeZBmaN4Jg*&mL)9TwBbvTX>{+Qy)H&7{>g
zU(Wo^2us1q=9uKOqQ3#2k!m>ku>2#vteVjn+2ICFP@TDrI)t}}@uLG6X94Mq@*||G
zE&_jfg>>aR{P(!5c~*Y8ao&{2tIK7CIFpx@HMtiBkn|tp$^^{1mS+oWC=STnni=}W
z@>Z`KF&@*jefs^_p`=e;!l}O9eetcpj&DFd=5{pG9Z#FLqQEOvHYJei=Jn#`ts`vS
zE<}r?)IaUw4PWF5vXoCIcE;c*GDlCDNVngiMz+(6jh3Ki+`)$SrTy)eHFefMGj~Q!
z=O|vx1(Su|gLg>J$bxqAePO^ak#LR3%=j@-@p%>ilki`daIIHt4QQ^ynlHEXAu8gG
zv-gH%&p%7esI4(v<3y|DwuSphFF`&e>nu;<a1wD5VAgSon_V)javpaEnTu(N83l(W
zgG!pZ$`y({w=q@6ncP_Pn+*F)1@&yqWr$<aRWO<&mHI?piGR~8Xzih!n}OP%)nmWJ
zJNAi#H*aMg95lD8eGt1E9mO@_P=fDk0$mwJ7bMcm23uci;O*r8{Z`K;CGps=IkXYp
zhv&j0*E*pc&@q_7&N6HP21SqaOAiH{p9)SGp3I@hzK+H&-rq0gt)I3|`*R50CQ)E#
zRy4Uzo{svy(&%hDd>dM}8QeA{mOCcV2UUF0=ulpdlPMz=k$6@O&GY`mj76T;BZ~$x
zIajQvyuSWA!r3-*0r;yL<gAYaia$UJkRIFH@22R-jqSTSMEkS+1vW=4S@0j3TN3&&
z9TBmDX^rvpXTxfZzoj~6b>1hCTWz<n-S1&MC+mlH#iv9$8LKYiJLN#MXjrp*n1pO9
z13q|8y&i0%QNvc1<}?r!7Y?HY2=~~q&bO)a!P)%gKdeW*)T?y885!Uj3-%ZD&P-H>
z2bO1<@Jlq9FAq|?67jv)*EY;qziz7;PD#0T8?)yGzu^Dhqe-I~o)9$)0Kiom;Qvrl
zv#~V#pHC)Ny4KE{EiK<S`hkZtE+p#r%$7+fP0Uduo0(&YwG?I3E?hWTK{R;EB=C~M
zuJVt&w_tAw_yB+ljWyydwlqlCb)li5um~Zsa4&O!R_imt)>|_^E)O@`S?Xn@<ot#6
zFhxDVw5r#If!4p^alT7BZ_Jy|aEgm8^YJ2ga|qsR-$CTz@d%Pt*3k{e`;b~1$X7)C
z3DKA!1z7Fv_*gfq@Q5Ea^m97?0;$(Uq2ZETKT~&eOAL$y{xJ=Q#DhY{-Z$xCb}@_{
z>|dC&JThc5Ce_+wJ@>8*EB#xZ1d{!r4aJeJ+_WWSRP(&EdTsF=Lw7!_ZJKXku=l#f
zpCmg|uei6TMMa;VpTgJ|d!8o+*E@Ki39$ngI5S`EkSF5a-s0eAX{bI6vQAz;K2b}d
zp|#Ns*52^Bai@B~uGNf9!mWS8a{f#vM1@6F!thgGm*ax9NLw8edP`YXe)jO?3U+$D
zEcLGHT7-S4+72)8)Db&52lW~tQ*jHjqi{cWgx7M_80vpl$0k#wGTk)8VN0}<E&1V)
z0y6q=FK@~9WtIzsD2&4(Hq~J!3~RRS2(^CMV1c~UCrDr+1{0jqkANJUv%jF@9OpM_
zS=ewe=jXIC_*iU*9s<A=HynZhsthj3J_2rchTRH32#WG!&J2j4LyxXn9xn}V-3?j?
zF#KalfY$8nfIl~+r|FwdLfnJBSa%P@bKzk>^RO#DMD)pdh=Hq#w{^}$N9l8wfR$86
z6sTlJj{}5tvj&)P=lZaq@5(0y>o6x6{?`i9Ts8&71_94|Hsm<{3Vt!_tAgG3mckVr
zB|j(rr2u~}xW1o|Ocb`n6Fq;|6{?r_^HeKWiK<3P<vlAF3wQijB;_eWZj%>JYZI?f
zCP2hXqy@(k503iilj8z62&EDOsU~A%4`z^$y#RlYW3=57!1NW`rNc7<*2FGJCf6-^
z#}q*oD@;&-x)~chEvD1sZM+Vm0K5H&MmMhz=eE~IEhq$7`y=yeDX84-Y9tIYcPgMz
zR%^IzWQ96_RAeX+D2vSXBg8Iw0q6D|4nb^zyX{4AaI+A_!3Ej0ZCaW^cT)f!?^^i+
zf@x$3h>%;>saS}jjy)2`Edv%80XV)e3e%+$zrm0Hy@EqkUR2m$|68%BwqeoxkCc?}
zqlUTTN<R((1176`-h7E)e0s<HsbSF?Kj<kzB=g$MeChmku3R43#(hbxb-i6Fj0$n|
zhE=kDvB+@WVNsy_XH+f;>O#QMb%vWZ{$|!uCB<yvnuXt`19$AXi(kaBFWm4K3k1*i
zEt>DO4iO}PQnDQW96n(II{^Yelgb3j^x|nIJZC4=2^6sSE@wyL+%0A0tYe*Y8J9ws
z0e&?4he7VFHMSB5tZ2<WjFk-?Ir``N9eI#1`#ZA@H8xoM1$N$z9<>b~Fw-(_dT^bO
zc*5r)EN8`Jqz9fRCqBOWmdwLS14FQmbJ1&6U8{<@jl>~5j}OFxx1>sEnP4Xa?d5?B
zGl6)YQ4p8nyXP#dVmE*qL5p>6>%}Lj{!Xnmy4O-4*45T3tJD`>g}h>`;|1so@FB%7
z^Q8M{50M*vls!f53l)Xprxp&pTueje8*cj-6Ly&l1G&h{W*G{su7ZzU21CtHtOj$e
z)$eGnxUBVw(}jk@2Uu4i(vZZCdKyd#wFI~94twRcFlv5<<ia=_(uvT5B61Gjzfgbf
z_eElAPv2z$;zy}myf==8f?Qzd+DiSJeY}1}TrS=X{1rLP>jNnXBl1$FF)v@Uz@Bxk
zyeikC?B3O2q12t9W%J07xN8b4L1lTqez$YZ>pM5G&3pZ-d3o|gT(r}wrK!bfr|Twm
zj$cqOc;C~)EBpPknJ^rIWLlU4RRxJK!uz2K0TAS9#?w5%7Nq7jnv&yJ8N_O_NcV5u
zcPR_Ml{8wVkjQ3KWlk6OvKGFUIgZIY8BoY9!O0@<)@2-0xneE#_002f(HtKqXH3uc
zn_6t%wX~>pRV9RCLxvkTo1{v=PnlxMUd0+s_ywJF^Lmer&@e#L98tKbm{cqL)NMU0
zV=0Y{<(GtPq<$4Eq)nMUa=c=ef-EPQ5o;(1!tuFbH%QsDBf?0Dj-T-(;|Lv+D4-t@
zbAuZndYGqG4@xCcHA;G9vvXF4q>Dm;eqdyX+6@}1G7q=!W03^OBAF5qq#|2D)T9z!
zZwjg;+rO=p2|j2rc>xKiiYW#qeKJxct*IH5peBdv21MkE+#=)Y=JS~&OlEQ<k7Oxo
zd`z6#Qh=HDUJ1|elrYG_PJq!eRaSiOi-PTRz%2ly*{aQk-Z73k!+X=m#cPclJg4V(
zI`FHB>@kMKH1m(rvz{yI4OQt$&fdLijhTz>iqX0Smz4b)lp*f2#+u0YJgLKKsODGL
zqRXRn!48&MHmdWpyA&4qhu7jhT^72MUR9jZnsKN^r8lgb^fbVNv`8MMm(5V4tRR<H
z*VYM-nSYaA4OS7=%0<CeOuN+>%}|-tX0%o|wZuKtr?gH4W=(6eo2#wsWAFF?y`7z_
zgkGX*OwEmF!R((6uPxuQv#?MeG;L_PGuB}G)Ti#U-6u_3*OWHUcVLRuWv;XTPL?$P
zTeAMga_T%Ad_GEXuVbVJMS+RW@zS)wS8`P&z<fjGUu&%bkNPq4DI;q7xK}@R)MaJ1
zA*2qbPl|&-JIX5RdBqD`uvLK~q^xgeWPYuL${)dLtQ3Tm7!cRciA-QM3k@M%cBC!T
zi7E^oGUsCwH{$-9zOBFy#Upr>bOixI9!QH1r&XUo6b&2x{5}z=*_;PJiM-Uk@;;i2
zx7~6r5ZYZ^R7EwQjT|G|KT+-bm2>4Gjdn*0%|w>8U@4qGlZdXwg1QAgOgYqy#wDz7
z#P_-dV^R0VoOQczSwrfUh<khb_Z_Jrl*8#8q=co4ZflALK%;JGBr+w8JCtz+5!swI
z@l15%$1y0;s7ab|7Nrc6$X>*OCk&acO~9NF#V|h^z>IBkf8k~j3VT4q&GW7P2@e9E
zX7l!e_MBA%83NnvQ@==j#q#RsD~qE<JoES$1{N3c^PbQ*bf?vgKD3=oPeQzb?P;xl
zj&)a$h9sE}i#cA-Floi$z)MFqjA?;==%O8bA-4jxBVbG#bbljd`%jVmDX;#znbAHk
zzR0v&PgU@FSF?d(w)&Ly{YxQLUbm(N^|_t03ld=Tj*2B6_^tENiFez@=s>MzQqVv%
zHcK>qdH;g#9yPM{m(E<*moIJHky?-PKyD@7d-=G!YW9kW({5N>6z8`kpdYCWUd17_
zHLbhaeb;k~wx#9*#h%_C(`v%kT!K#w6IO2&9X?Mwq@5mie3XKC<PzffvAiK*G0~n<
zy5fN==!>V3#^CQ!=Y-NjS1f_Lfs;c$!+~Ec+`=rtU|#Il^vZc10Sb#o7iidDm;vZA
zSfw^rvqyFQC<kd<`~w4Z6XAR0Yq||P2+2BhK@AgOLXcpXkloyXyABRb<i+HFy0?`G
z>ye#bc61%b?v`kS+Vyi}4QY?(_r8&=&0lgdjA7ZXERo-t*a3vIv>w$M#Umtv1Y>Jb
zF~*%0&{w!yM#a!if_9y+U~}H4+?~gJM-ri1H#e{Wj}=Qq$9|AYLL+Jurkk?O68-Ac
zXh@|>0``Bkju;NALPIKOvaxH>L>*4fMs(SbwI{qfF540xm+ICW(I<vd8)t6020lPW
z-^ZENW;#NCn`0sPN3GpLPhTaGG-gP(#Y6J;9GE@fCN<OUpjHs~QJvE{Z_snWXvPgW
z#SL*0^%%oF<tjr~<NsE-@THDh>hjd1*2YV=L2*u6U7BQM=VDHhn~?vWCPT>#VMO`M
zS$^a5B@fgEM0qAjz45|=N*|CL92nz~K)EW-bUbM7zl@pABjpzdPoz#$S%+<wW>0}{
z0yR3JGz}2n)gUR7i2(&U4K)EJYnPXa{wYd)Bx}i4)0ExD<E7OiNy(;Zcy5}gyl6S6
zbWZydQ2mAfM$?IJR`rw|nGleV!&?Jz9Ckr@$yu-vv{~i(uJr<0n9XX7ZPnrI4Ogt+
zm+BKwVM-JE%Em8avPa?tu6+_%h*GZoDbbMb)Ajw9IHSedV;9${CL^@N=OdX`gJs`3
zZ8<5R<`E{nk7mZ0oz)xJ4iqm0y64fCvbRNrpB|i4zv}$8Clz2<O|J8`1AEz=<y3b8
z;MC>ry0pJ{ul<iIUP+oVTze!{2>>RkCa=dwQ{LP3rWvOE{*P5+U(}W6UhSgUm^mo>
zPpG)0gXjy5!(uOZJL%qp4ZW=E^MPhTNQDMUt~1vg4W4VQ^kg7~bBAUDfDLVYyZ&6t
z)%AnGzrM9s(vHu+!qg2?goaeh<9W88g**YMCoWTZ)L@DyeY}d~yK)51y&F1(Nt1x%
zAEBqy=SS3@pZExor6_0m4DJjxJQbt^+G(<Hb+J9axtRaj!uj*EaeFJ6$?*l222$m6
zb`g$Tyl~1gEX^s6Hzq>Kc|{m85%WCoNn1mgrB2(^vh08$1iAm>uc9<7on*r*a!Y2?
zr-8fW*9_f}!5t?6YY+ipA6yagX#+c@JfoZWV~pi`6IoFf5ZV?D95>Wh;yR+ohp8^;
zH~~75BhZD`@pSCgPupQ58d96eG@#lNu4CCup1ZYy(d{3jb^i7KYTFOb5xTm6P&?3`
zrY_mMM)B^Eex+zavu90ai1Sbu$Yl6o&V778=p_<8qRGXX*w-bJVwh-3LY<hRc1L|o
z#GywF4Si?NW#3FQy-Q^=H_Y)g>HK4GnvtpDl!)k1+TIm#s#eJcdKooitrr7*PlqU~
z*XIuVpBw*U2Km@UgnmG4sVDSrekD|zs(3pp{R+lsLLsD9-fh~<73pBcsH{}pim=c0
zmC~H%;nheCfo^4uiAyJ-rWVo)voXM#tKjiIx*RFld9BS6QiY~8Fv-uSLete5;DGrv
zu`vmK+d{0<Mn#CC$7y1kM$d+@aWVUvG@Dei5+@}FT}n6*KF{5jJOuur^0krT(&Y4Z
znjK&ESyTD&#(y36nQZ7^@od$vmzHDdw?8HF_LpB(gPyZ&-C?G;&kv)bme^7*tJcFk
z&?Id=x}XzhAXHamK?l!Jan%DeM4ca{*u6)BzlCPdVm~z_hmaM!UC1acLJ8_hci-LX
zHQ{L`iRlZ?PJ08>?{5P2k$WUXN#72tpSgQjs>AW5gN~8%`AmIwcy0*1e%Sd#ygl+N
zwQUT|JD5TUwmtu$s6K83M!h_cTwI*IUIM-SZm9pu;ND^HOzi&S3(0!a5XpMb(FccR
zpk<-Gyx#BAi*8j~6RZ+A#qs7t8zTNJfen7*SEtHn@ojlg!9v$U>icBXA`(U8-5Zqz
zJM^L^XF8K~x?pBXf+S9iB33@f@YAjkg`AvlBS{YpASake>0+zBNJMsa7_PiT(cAJX
zO2R>>yg*5kGVNcr#NJO2DL@~_5)6o+Ckzlw80e_qBburZ+)JKRB_@f7JxPPI8irQq
zMR4GRD)H#@*?6xv2efwAD}(+dX(USCbX1-sjs(mJ6R^e!ahdw=@O<30vK0y`?K5Fz
z^gs<XUV@pBKLw<S#Ra<IkKB0gJn6s&39>AqazW{SH=V=;Q5qU1gFud_=@|SK#{gr{
z=7DLv^fugc)bA^NDw*sW<JoU1SZ!f7t1bo|R=tv7;TIDys20>ik~*dfw8zX{Al4as
z_28~%7L*PX_pUi}gubcrxOU~`{Pqa$mG&(W>U<9%2Q&!|>129n>kb_y0gEn^EhYif
zEIL5svV+rMw9V2YLv2FJY%c4vB%7hz3TW*>!fbX~+;lv@D?og2M3GyNt}?tF2galf
zf3njC%%wJgGLATCn4#<!F}`r(a2l0SGKW@Qy}fhmK1cour^bzhF%Q<VwVcM@9Biz$
z@ZkG4#6WV*VN-Z|D(^yXaJ03{pwr+!L02B%u0FqJW3YE&uq*H&4G;eeG{@g`eV{V=
zhuWQ`y?X1vzF0W&%r5b4J~!6`mF~Z@A|a(b^pZ4znVA<vt_t`<MK7q<Dgi!&Jw*35
z@QRLi`s4g!vY~$$2Uad74juC^ChI{{Fm+tDjz6a{!)hDb7JhOqF;gJOV&8y8YGHNf
zUhcDYKjbgOx`pF6VK3tCk_y>1gz9dOBJ@8NVBp~a3qc0o%e2}#hJaZbWJBa&rP?L>
z!`in@A$R%JY_}^cC9J4=p%+O%0V|Co`j2}DQq~-*YFoQ<OW7CaxO?F~D+ONq$>Xxl
zT{fju!W6jQS6f87ASaFdB{yWW4vB6K_JUmy0Eca==Q&&%Kn6i|9*12J%EVV>>dLaf
zPjr|FNfY9N8+Y3WbZ9v~?EUh}LHO6DNuFr27|Qwry9s54OJ3>eS)xld&8ET}sk{`8
z#WFgSb?&Z_W#}8UEpo?nw!`Wp<6Ug2-6}|NR823V{}{vBg8q+p78fLxU!cswj2@!o
z8&j;TE|{8S6pfN*X}#V8qJ-!H2PS7*`1J$$!4`Xds<Z{0l<m=%T*9(CZhzO?+fXk4
z8?@8HD&5S&E%_>~89$DY==+rA3>rj23(%S|u0x^nPEjUG@AiXAsYFISs)XRkcWKbt
z(R+dHj}j<rHSJulBHeOZMv+gi{PR11Bcgz@+}`hS-m@2h*4mQ;9U_zO_)^;P2H>9p
z&xqwIe+P%4c@#fnZADZjk&=n@cJ)_*Z<@hXJG4dhUL;M(2@eHlzqbN7L<_ur-p3`b
zD!~WXqY&0eBH_vSrUDsP2=bg9(IXceZ>~^|QA<@mN#b}y7matBPVl1^VdQ`?Gd>*J
z(RrG<J6|$VEMZ($ai}dG=szM53Xe1S@$+M^t#(0PD?pNUfu`MX2;V^#o5QqT)}L$x
zwb<%urGiPv*`N5wFZ36>FyLC&Pn}`{m7cC@9lNw~Utve5YkBL)V_;9FHb&c_8n?>0
zhaoz`Q+dknahDZ>@J(C8nh}x}UFA_{dH#hLCYLzHm_X=HU=)!lIL;OoZKKIlHC&Rp
zs7pOC4~l%SP5t7>&I)o`@#?)?7+|FSxdbK;bWjuTx%l|eaJUr4Tz)R>vG}||MQrXH
zxAw8Smfa^Qg`6!(()QKXseGe-LnXKkkdG0SsejPU!cQ(<F{L*u-;HJo!=G5sKZi3E
zOauU39@&f}w_Y}e+J<xSJ$Up4g*wgy(gJ09UhYLqPTN|Hy_aeuekCu!Etix<P7M(~
zHRf=~O}le%+yoy>EbyKZSZ1LqI&Ecp9_Z4~g$nJcobR;#t_#x3tIVx5kc9GzdK;{J
zf#M(y9dz)%G60Kg&cFaid3JT9zsLS$9CE^J{_BXtyo#<wS~~g}sUKhC9=>TLGl1sw
z+;ad7PEwu<TDhd`jRPC}Dc@D5yO{FQ+6ztO`e2I=U`WUKKtk4YkP`3|!@_(#SHOE&
zt=r1Qn}G-39dyQ>p69*YaqGu-yXK7cRMy7c9g>sd&~>qA7WPY~GT_(bK(UpuzWQ~Q
zP|82lDqf4kw7gPjf9u^ypF)bTSGJ}cMC8J7?(!ygx>cN8M1p%>bDvJ;XUmnxDnJG^
zjg7h`nUJr}hl3m)?PUMDhcT;ul;q8xjd6tshr6^`Tc%4^WZ@(tT@IW0)g2_cIQ6*d
zc5Lu_%|%XnD-Z_dn8$a`B+ifTh{ix6xdI$&cXM1S7vR0^<_K3)w}ewq0$(NRld5bi
z`YB&ep^mcuWU!~zHB6lJZ1qf#PW|Xf$dr-g#nVL|XZ#TPOiYNBs&rxv=rg7Jm6oO3
zOgl4RB3@6lcO9sIr3{t`3G{Vea#;UU1n+n)p>Q@~>O_D~fxr<HvcJ(TW*UJ~7nr=S
zfNd3AS~&od{bRS5&l!SfUkr13>s%pnL-sWt;wP&c3Q9V`kzq-|U?LNUwDLF%CsT#?
zRk?osqP^kycd;9f>I(@UJtei{(xn0-4xQoN1A-iH&ZFjsz@|rx?)-@ykE%$d348F>
z;`zemE`N7oDV|PEXa-BtbqRc)wApltkymQbr%j+QkBGtvm@h#sU3vz|&+}<KM94d-
zdXY^qoJ(`(i|QtAlCG$k@6Jn>k#=eF$F)^<)to*n59K<z@TmzczpUx99f%3zJ4Km>
zLg~?KNgs_WIIxu7K<^bAmnpS^_H=MxU<4uVPLdTH@}WKoT!dkclJ?qYtrsspSbJ5E
z!zLl%euAi~=$#K@*q7~|;wnn<ynrtxv~`Vt<*Zwaww5AAs50pvhbVHnLK<2^Qf#H0
z7y6`CIqD@K2Y7RS4HAt4?G}Cd3{8*_6O_EM;5_%Wfnx(*hP%fqdpGh0@_cpI#%rHk
zoA?%wO=cKy4>BxaZHvUrSs4Z30maS-bGu8v5v)t%rNI$$Oqr?~5=p?kaR=4g?1rg6
zZbJKJ;~_%Cbo@mDA|r+`9>vB~7*)c^xRcpAgBh3H3MqUb5#+p!lTij^#HU4rff%U#
z^E}QOBx4L;AThiit54t#ay5dJ7i=@=ZuAu9_^Up#Pi<zeyC7HlS-kxH8!FFhKrvUh
z{Ingp)(d$bzfqeRK(59nbQw~G)M^#9P8mB9=#7=bdR?K7{y9^_5yZ>yG4J=kvPxp_
zYn_0TvU+3AklSXK9MY*=1Inhlf6Ng}-QuMKMP$o6O+ux_@bmQJ_jPM0K!kl%<MHJ*
z@AOcDgh7J_4O-`)VI#_QA`^{Yrk1}SLX)HIo1bs*3>Q!EF(tAJ9@#MHtBCjbS?knU
z<28jf@p7}+!lzfKfLQ!XsBvoaSYqDxiXs!%y1PU9g2;M%J*c0S-$8kqnhong>frq1
zr+HdON<poC<p%Rj>tyEgMVs&C>7sWf9w<V7ROt|&8(P0>c<$dM9Q+tM0)hR*j;*D?
z=N>uR><*6FTK=b1au+1^TZjd<vq?rL7IC>uR<c$?K=5LLq}5ge$V|DdaPwajY<W6(
z&2Qza=lXtEu5{qJenuf2<70xi)m2fM(0r+UcnX@v;9`bMWZmavk*CKDktwY{@Ac{s
zDz@SQUg#`is*ZE1e+^lLbtyXSCa&>l?qV5lw6K<pjA$j51f8CtVfiJ=U*I3ik!Y;G
zjhA@&h4WVW=~XXJs7!5AR|0p|%zwLyu8vbndv1-}dt$jp&1-YdV3OAgj()@xn%o)l
ziKgdt1rV#Ik{@l=_nj#A0y`Eltjej6baa~e?>%TfgnOG$8kWUfKml%805Q^aD#`a#
zmbCcWDE+dw2Gwm^*I~HMaRsdNK7G$qSy7OzT^wEkud6&0Qx^Caip4n;zirRdAW_9f
z8PHC#@_5D1S>3^7%~B_B!^H1oDb@G=19zrDWZFHIv6F-svTGODFKOEU1kv81%l1#^
zr&#5$YtF>CovU(1O@a_Bt`Yq~KZXsfi?$FJwrQtbV4}q6p?BaGzY(&kZ?dw?)wJK`
zXmf6BOLEDXU3@T$^2@<)=|47~dY$#OA!J#BdvTm4+P_lc5S_>G8;AcjHNL^4<q2Dd
zE?-RkfA~6w2F-#ki>7U((zb1WY1^u_ZQHE0ZQHhO+eRf`^{ji)Zx+AcM%;7uUMu(m
z%-{9bje;%Z`%!-AJf99f^49i}kIR_Hcj^w|QC9<60Wvp6m7K$4=1zRip+Y!kdmntu
zNL6$n7{z0TAxBtg31bzm3I;#Q%g70s#oS+O#reY}HkSDS$fTYuo{UrxdHg1>of8Cs
zPOO<?HK|M{+TXY6E}D@6!t`=)<1djI=v(4r_%vxS3A<5f6(*!Qdgtzl_^nWQ$k@k~
z)OZFAKy+@T$B>;r+8;cu2iMrXU0R{q`ehhE<XR@Jn!c(1S@`e%88=~&yF~?bB&m`F
zmVZEuwRpoIYa?D`-z285xJ~{E+5<XSwXhy-J}G$cGY|1s2p|C2{NgFZ55P@AXQall
zT$U6m-pUEo^h^+=VcAK88TqL5*izQiD0Yq6j49xIWF{DMVr{|eqVV?h=bx-cZkYpq
z!UP~TYq+OpOVBmcJKaCi>k@6AI`fhV4oXA?ZP<J@kgJ0p4}isGF`z?fre@7IQEEEi
zrwxWHv>uGQyBgXF!bV02Cwiyi(0B!?w*wiPi?kUoc)ZT|2x$%GP(Zt!gUhIJ9Hk4W
z7%$w-X;)lsoP5VGyh)iQ=aPNm>}W3MN!QBMs=QqSzYo>2&(u>Nb%k^sY#*w}_Mo2`
zC2T!SWqB*})*7O$V$5zmg5y5T(+8(s%xpY2UBsbNA^FHie@tQJ3tlIHHTbt9a<=O_
z`CSPQ#a_NerNYw2Qe%g*Q@J|&;4FDIS6P+JPT5}m(vEb!dB<N$-GR#?zs7O7#mmgZ
z?O}hp^hSr7$X|mY^GCo|A=(li5#kw8oHWjx<R&$@!I%oZ{Gc3p{afC+(Q23Y;KuM?
zkT%A5@I;j(YtT|Fg}z^%?D$&m?3xwsq2M1RwIB&2mQ|`%F*oXSm9(wp-@|U?24=_8
ze!l{Dgq$6GqX8B(e@n9`_aaAwR3X}mfgXXwEwL#1DFPa~L0)AJncH}K2+NvS2QZ7X
zVobTF5cRNEA4@8WRt)$A{n{YtT$-PQ|Cl30I|4<5vhIxW@Lx`i#Y2*4Fy_dF-k-4}
zu}S0yR!>)IX5Kf_#gIU#$5B^8C)67&i;G~Jlw{|DB%jH5`mjBY<1M=3^oj0@EZx_)
zB5^?k@*==Y(}H5`832ccS!8sVyX6|kEA(=_d2hVCFBEF3$S=|YbPF_O4);kThR{%T
z8)Hl9N-q~R>pvS0gri%{GVh8kz%G;8Z-4Y;4tI0tSkKdqab$;9aaY4-l!n<+{Hk!a
z!*id-IVZmPrIQbB@ib)w1!FfT0jEBcGfZdN%ewzAnIbvP=yN8bcyi2Ye2DhPG(w3m
z(H~L6_*n|O?+k^p3V|QQL81uxTnr>lSR-Ac1iPYS!Tq}LJ_)+SDX6!Fza!PGzwqp~
z)RW>HCJ%#h_c80r7_|cpS>z-?mu%7cCoV^>_QIC%<{_~%w0VC<U#*TL^}ACWf}w1-
zEGzs&1-E4mkq5Lv%Q&f^63w*kX2OVt&>yu~?SbcO9;1BZ*GK6Nm{k;U<sGy>p<&?8
zN|tBb(+0hv<de?LT?z2-Y(kUaW>$(n56)G}B*(G(N6ckf|FpI<x1dYc_*d_BQ;^{1
zfJ@iww&w=CAGp9+_)s7i7-D!poVY(I)XwP28^rcHR;im#siqs3!|3<gE)O%2P#Oy@
zi=?Mk%@WlCyT=xETiRdskK%~=x1vIQV}M!7karf#IzmwCSN0y0^T9Tkwhni*Z1FXY
ze-UL~XOsX$T8}fTAoY|U-<H0?Z#<r+4=I-lcrT-Waz}=%qbs^XxGP*p6jsYP#%mX4
z4y|5`jlq_4$?LC_A2udgNVSy6Y@O>6t#3yO#%&1bAMuyA&}Gz>Q|BaG2ht(ANe+sK
z3unS<TR$yl!+DRL#fJsWwSBp6-9X`j#cGrp%g_2rWgD0?wqt1Y*)};8U~*Ow>ri@h
zr{M&Hb?O(Qce8V1LS0-XKri<3(90r1=crD3RcHvMt!iYUI%qRS-gu{Jb>k#Icnt;R
zIoeju9VYGbpG99)_-jw2Zyj(njf3U$Kxa`751X31(Dgq7KB8f*BA3zUd%$={{C+iM
z2yT73bTxx`sEt&gUF#-zt{$knDbU4`GKbJ!e=DwE83T&0-2zV$%ec}8AJgI~g=wm_
z+F}M&SIFVGW-*c^t)4-%t#%BVQerSs`qvBE9Jmd#ku-F>%Z6J5Jdx+pu9<LIaamjH
z`;QX9Y1CRz{6kx0_jn5S!OCbsi-}f5N%r1tEIoB%@}{6qVu`y~9Rn0;=o>RWT;ZkU
zdEJU6i<)zIEkQVzvYWH`7LYX-&kGsH`nEKlKj%?id~;AGGSK`cu!}kl3A9i@KK4ZE
z*0jS-&jxBZ?E7O2@5LCw3N3P2Tt~JSyl>91ZPdj9G<8&kRowb>(3{>egfiWKhb{^3
zS%1!4Q#b_H=(!*LS?15rY&H>~Eln^~a!Z#-%0PTCVp;AZm*W`ucx%s?mkP7w&7Wap
zlV9v~EBF^MAn|2tZ%E=<?wewftvLJR>SuLZFshIl@994E&}Pt>#Vw!D(a3-H?-}?k
z=5)NzYiz*O?jE6j)EW)TQ<Q0j$B`#y38+@hr~BVBWf_eZ0>?$KX{8e#0t}Z5Gr`Ou
zv|z~CPfsO*`v{_(5fTY=C}{ChVDql|Kq7ia&cVDM;Wq@O8xsJ7UMfN-bbjnobjHoW
zj3`$}_($kXnn1-pyMvDb%z+`oG;eH;Z-zfWpi+M<XMH!{v%CFfeL-lT^~`78{4iy^
z$$=iWHlal1W(2+gth9;l{2dVz6nov0qt!9<Ee>A+5_2}>ma8K`^DB!kvlze|SUxVK
z9%9t^Gi7AYIr|VTHsEp!c!wN9|5Oa>a%&I@7Z;Jr6|w+$ngI_sm46ez@b<W)<$5d7
zHAI5=0UMB?^CUgvRsBI~tB32Hnbw1yP+o?kZul$o!(L5V`QL@0n4DO-$7#M8I5;~_
zf5@Q&{J*>1qg2FqCK8baAmQZ!Nmbt34!*M2@2l<9sV1DTBea<1PLeF|9F*a||1QM|
zckRD>l9jw?X~(;9Ku-z(lNva~2!d^`x;#!03ZuK|o*!0t<I1CO#8SL~_T7ZmG6N%Q
z9|depEIkgUPcQz0F>ZM0(L*>DhCxC6J{GP?m;5;#cX95N{Tbf0hM5HUF8VP}nSLXs
z>ZS4Tf{tefXVZwC!rPezs`xZwpFAz@N=>{D_sk;CtjYv^HdGR(Fwc7rAxrTG8$d`>
zgo`5Ug6QXpxm_oX7^P%3hBnSQdSs#m^=G-8oOJ$tVEdb>LZM=tWFp@8=;0Zo9>u7c
z6-hLv>CF%@3@5=R#fbe#o38xJ4?<uRHW1NA-DH?XYNVPyuZ?n;4UOYoy^l4u4~QQ0
zaxXOF)c$@40~G4!yGcI^XDk0V1|bO)t6z~M?7Ly6#elt9f#47bb*+0Dvx9M6Lrbgw
zL^hD%{1ez440n8rdUXNV1uzN&<R{d$tWKTXsP~N@kJsPa^+_Ap2x}&?p=!F9KMKHS
z=ztx5WPJa}SR0$-jv_pV)hx9aD_%{~K%H`O-fTUfiCv7~rXk2h_Mnx##D5;OzkY&B
z(C(Puv=l%n0)jxE%gI1p_R1i4M1I`BPb@SCV5<Cw?a3Sxq}l4GVVt!t^S3@10Wp4a
zgFgRg#iMZ8B9~=&Qskoe;!;GCjxg%-g8F#|fVptbieNo?A=G|UOJk@n7{N?u8EDsK
zAMhuPV(t9I5(WbJp@Qop8mJhE)PeHjP5iBrMk(8W6>MSUYQJPWpJe%?2<|UIU6=8&
ziP9l<b{T#vi}l^z!!^0Ze*y5h0IsiN$bS)UNrviRV)t`}3_29$bj<~3vJjN?lfoqF
z>S~*aQ4K;P`XupTkyhe8&Kj`>&nb2KM>KN3ml;}AuZf`@v`tS-Oply7_I!3~*a_E0
z*x)YqKcUg?1h}`;>EQ%gCG7>}4?{9`Nq^nM6V~Vh%S}F8y1M)n>nP|9+)K43M|nzN
z6@){TR*h1+!=&4W|Io$amVyZiz6iq1=J^p{M>Avk2oYMcs&`7u?Fdrro*ZGuui1Z~
zGSkW7+|%0j!q)h{If$LUUEA&6e6qf8YM<WTN>!Z*M|HTc3Dr8HBMnWyesdA2kYsYg
z<b~&phfEk#H<8XwdO|`fp_7-x1>r7k8-e%8?hUi1kD}tK-2#!&7Z+<;)=nv|LT2yU
zSt3xwL;MT$B&m@5r<H(jXD0ibXKKq%)4$y9UJ@mEB<#|s7?qP$OV$@QgDF^Kf*?lv
z^<9%&DS?thieh_EOHRYhk(63!+QX|MZ6{rqlRtOrXi}w&F?)fSQw&O+nV?<osQo$~
zM=73exMQP7=;(1^FF}K5=zv(WNt^^uZn6k)^MmV;?u?6kqs}SKr$uMDTgz{~C3ed<
z>qj?EE6IsbO+~$X%=5~{-}OiDdD&yCtyE4<Q9sy#CXZkFJ%(tQbu<i_qA%XM(-hRx
zS29Y9I;MmjKnq!{I%_B1&Zm%O$71V3raWFH%^VpnvAy1sO*Q1}ADJXxLvA60Px=rx
zr<t5+4p6ny>>sh{#{<q|Bq}xnN@tv?C9|Q<-|yF6c+kQXe!)SFflLuC#nY$)8$SBD
znC3XGY3IN9cIR(fqSCO?{`>i@ntyUO<P1hNP-ixB#gVtY@@I?~9ZyF|nx`}Q^*}eM
zpwp`o?Q34U>*fSx)poA4*G^Bgs0grZkxaGE$F{pY|0Q&aD-RH51l@Mo3Oe`NxO9^P
z8sYJ1uEx}8#n*6SgaX#Su0y*y=}rKHeT@jtqte??A)f=qJ2A%KzgmMI45MEe1mMsH
zF*KnbKjn)B+*5)(qXe)+H<(VbP4oXNyd?$N0@FF7X&v(Ztw~mxbF0xgHLp;mL0<HG
zg4><2RK5$bW3ysNr&p26q#8*)kobAlBPUw{XHn=(Tp4Jk_rvuSxwwf|vO*%X^1ZE4
z;$;!wuFF>9v4urRq3S(T+NJ{}@Kxmfd;p*obC8v+V4k%5aV%&cMrJ0AO<_C^QI;~r
zxMpsd{~Ag4q^Z#qKPZB%8Wv=7qH;9LViw}&YcFy~iu2r&)1_8*7@)P!nQEOU4>@Pf
zl^2B9=0Do$H~YwZj1mu{OB+Oq1O<a7d8Fwm%8?Ex1i~iMcFe**0)tE8`}ADp_;I0@
z3;*p7+PP=wwte1eM7ve<C6Hx2yW>a$<qwalGmaUkknDe4Pt$ME*=~kGd6q8qbM<x|
zTRlb4JN4#2+yCCZFV$x&l8vI!_uq<_MU`+=KtMIndRY2hR@;wcSgT|Z&YUf?#J|Nj
zAF%&iOQt8Mt$QApgpwSi8BIjsrhy);&ZU30EaNn$z1%zg2y<5BNk-sz4z%C%6n9U&
z&e6d@3#W?<9VoH|ksX4wwV8w6;+gVSyZ1#EB<av7T}Z_&x7%?>r48HJ5aDS3C`XrK
z=%YZp*43kfvICVHx0efaJ=av<DF@dL*DAlVA42?*F2~=K52IoS?3tg6Zp{cn2`~F?
ze3exnjavdYSwz3G5BHYP<M|gGVUNdw9G6qD^B<lX+LumFI%VHiwwpRxd-WLasj-7J
z2+Pif>-+7s$$*tS;`M@kzN!j3Tg(T0)^E2kNY~54E>AmWrR6)P-qrI9cmB195p#Dx
zG7nRCB7NF)zm~B_y`pYoY|D@7c}L9?h!=Z@VPm$Y;k4aOtu0JN=G@cAKP}(TM@!iO
zS|Fm9l3s&&WD{J~54aa3GG*mN_~BlaJeZgiqma%%hD+BvuJ(%;QZ;$_bir8QzJ~FU
zQgp{J34Xw~UC*@zm$#jJmJfI)zh>RpqwX>sQrvTklp7_HN|18V6Xj%E93l`Z!aCwb
zH_5|a_%|z&p)CcWEZF75&o$0^2*2vQE|i?M&Nlye)sy003MO#Ij%LgRLUo%0-tqKg
zI&IYF49ES^kQ87w^zt}R6V|f)=WwDf7Hs;nqg;XUR?srUYegWK5!6H6%I;tb^+ash
zX8~9}BK$J`{Jp7sj7Uz5?Xinj&FcLBzUDwD@+CzcgKH|&L~d6Z8woz1*X7a6{-t*!
zsIta2<Z0^l5+xF_^4WOGHSV9v8inE*8kiTJM-ut66sEAMSGym1x7=;&14C{E-FzW|
zFA|m9EJfpt9a$+1al4P5I`7LA4-0F0=qX3KTF&Vu`xfCWe2G)5R76DG7%}W^!2MR4
z-F0O-ubuOfr>lCo%9=V5B3#X<NpCxH-mnkTRl}GC<jcW|Nv0O(l7kl)NtVhY!=Lsk
zdK<<?dm~poHefxC`A~;Z$&}|(@rIPF)q<2Ug5HLdP+bF~IK$TFDu>O_ODcrd(3MU_
zKBs}H*jrv0pRKrdHXg7aH54sTGheN%V82#*nPn`hK6hY|@y7p+cebk+Z{j*~)rKZO
z`5KQ9q_4i-YOe}@paHkI3pd4OkO!EY3(OD?%}^JCEB0=P0BxN{ho$%LQUVF-9$xG{
zs@qjBEgleD{CTp$@9{;w{AROh9PF<qvvca4r@9gjPD)li=t$x@h#HedLz|FyeyN7}
zO2j*g1yQ*r9v;GSREI!uL4`O5k6NX|IBqjt$`2=o0rOkiTjkTof11n1Bj~{iy~m|$
zsu6irH2LUoc-e!czcbH12P0!q^Bju)6tbOrt~;pE;~x1&Z}R3ZqtRhMPXVa&<e4n^
z2xPwc#p5Q?nP>+W@Nc&+=<#p(wQWZZaq14-no~kB*G6#0^;r47gXyXg?`JR>QMQTW
zq;V%;TVqeu!@0-kL++=N=d?Lp;_R^#&KVk$ARW&;jReB@oHziQ!*+y74K@M_BP{vZ
zPCj2EoH$7Ci|ni{K<a2IAO7t{eG87zq2ZOU`7beGQ8Qwex_c#7LtY!>>_09H;n$WS
zT3K}!V<rq%M1pg(Ish#KcUj8dE!}ZF;DBz=bZrp?!{3FHp=}Vz{G()kIGAL*+bn?_
z{oMl=iXP$nUZ~O#xWcmzV8>*q?nWY+c99mS>(P++w%2F(6s~5G+847W>>v$x!_^(g
z0CMe8vz~%16w_ZA3dopRI(nv$LxeTR>Of)w{oc8<eHD2N3{>0glpl%3A)+U}i5@v<
z&A=!U5XQWmrfEjPg!<jpbD^mMb#$7JQR~}B;JUkB;C&AdV-Md>Qy=gmft2nK7R0Ek
z|6tOTm|UR7yDLO@$`7_e#v5sUU?|?>Qn2-&QnE=@XNuK{6h6&7Cs|Wy+E8RE&nlGb
zEBr~`h6aEmwtD408P`pWp!~46amBqJB#-gp-b6WP)jqDtP7@i+Xq9|nFcS$*`0a%_
zg5uG^B<1bVCj7{c$V}`zriF*lf~LmcQM%ba?)t1^SuS0N_LkPup|WolxFnX;xd_-~
z4{b>w9WmM%xoUcD+TA+O(h8Q==M2sL$`^yP2VU2C8QeVi_VRX)3Y}`U!S?{H;3iR5
z%8?iXinqvJg+a1cK0FN>DYzH#9cApXnBwe2PpkFuQb)X+2JuCr>GiVD#Xc2zbGg-9
z3%Ab4dMF$!m~j6Jju2>uyaorSjJD=edCY=#2!nPQ3<L1&qY-{J+a&fbVbzM}X?D}(
zy{B&UNHeq3Q09$}vLw+4>V~8vwZhR~AO+@({n4yAc6s8rd8Sv!;^%>D4sPRh|CGXK
z-ZO6&gR!+!oo|$zOzW|?)IoVC4ZJc4UHPgDKKjITj@N6=O&xWy%Kl&_b_Z^w#xBoi
zdyjh$pG%xLd#572KxrPf_lI9=OjWbueHCWiprB`iKjfK{JpZ<7ri2ka#8{XpxKPR_
zRS;e8GX8dc@1&kva47YLjAk9sQ^}&`+vf67cEZ4b9|ZBouKj+c1q>YJ;fa^|6JXxa
z5Lv$_EF*R2-7|GM#|5U$XgwT^<ci}NY27u)U(UVAqxtk3#d;u<deHPPqp7Gvrd<_y
zg8lT7pCOy$ffQgVe^gP6-_=G!H7xPun6VYZwR>#}7*>R>$}%1Db0+ojKnx00Aw{=O
zOhe`JvMG|msS4?OL;**fbmI5kRrR&_I`=8ptLfJvhH+^;a_p$w!m@c|v!e~Yhx5_I
z?Bt0J`oHl2vrN-Wht+kWbcJK$l@}*90Ag09i;VD?clCvu&-%O*&kEh>f3d{+R7Gy~
zN_W{#a<VFPhh6s&D!I`XK%bIc(G9Zacq?{OmuN@EKB-(`=)c%S&C$uv|3Vl3Pc>Th
z_V_!W00;;W_g|~gza1U_djTm+SKIDT%F#Dhe?HA;j4Nt<3j?~Y9k@w!Q%AZ;Sc&Cd
zg+)lQX&5g;MPh<w#^}eZqM~#Bq*>buAHiDl`MJ8|;-51z2hq=a@O$iLftT)(d%JO)
zrgLfie(>B&>(A{hpyes;GGt1Ro5<HmF-w2)>Rq8x-tYTS;Op=-F84b<BrMtEloc@$
zeKUDjf3e7PrI;V>_j8WsD9NK@o{_Is@v(G=AEID*^F$(RZQi_ekG!-R4I|*2;sw|D
zP0joM`t}yvi<bTht+%18Y`s_txs=}o-D@J2O4^V7yxmlDCh@?T-_#+e=n9}l0HxCh
z6;C>&Szl@V<_M=R&`XT=8MsSYm(p0b-S;O~b+{O;$wzJZcT12YwP25lLyTis2fzBy
z!~S3#fxr$XV`v3;55vSMqRv?m*34fKAMSxwfi927Fk1Q8RG*3O>WWv*`|mq~2>{4G
zD1HAK0TTZA-N_)qdW_F$+tiECtQoAG1tio@*cEiiQ-lXDmQY=!4nv@wU?m*?^aENi
z!M5%8u$_D=?|ZiIwnkLg?p;`l6KcR5&*x%iT(4V*_a+SQYb$e1C2=m&=bPN;`*dbS
z>?Lh}EqMNIo7?;X3|**Cpha|DM90VNkKxbE_e*HMpPv<XsD674#_P)g5loAm`K~Ce
znUkF{i_qI&o)>nmqVd<V4ilG-sKhI8iODml%Ey=6+mZSK^J|~_LIY$7Qhh+_0a*<7
z*+4Yhix)Bsu+CqThLB@3ND4xjD?)o-%-=7$EYF3Kl9SE(^>zu@S{yW)q=&pQi63Uk
zC-*mLGg38!qwsK32)O;qU!I})#fv^-?e^#z3C%j}M$h$;h3>t%$qxl&P(G18A9bXp
zYNB58A822chD4@Edtm}DLxK@MMF|BZwk@r#?3OzNj~?>n-P_0K&}v;WNd;Lq3`F*H
zFxk!5HiKi^HQH!3qAspdQPOzFsf)Y|-8S$0F*YG|14J>Co~a{?EV7BXyE|_?AWMWD
z&()pH*VI_2%zUY0iE64(DkHO{tg8hMl>8hoN>d1DY|zbZzmjKFJ1`sB%5QY<zN4jC
zlc*qh>Z5J(MR?4Q`>C%Ax2>`*Hz?M%CpFh6bMBPkLNzxX&$MmpTn#!0DXVz2!OJH(
zYvr)5eXt}ys}%W^R>wB1$E?TiolDZtI3s6I%?VcPecko>6M!4Xx%VI$a>p!--?LPj
z?sOPMwd(*;UX$I8#Y}MQF9nN*lvIv&N|=ml<3uyL$`&}4P8nG24tBL_dQZbI*_(j0
z*`KWqbB9q}uA)(6<nE&1FHbO!e|uA%H$aqG+*~E}Nb6P&&i`B!m%q(g#L(!eo<m#j
z?wB;=G^=_sr1s3~Hg_tUFIaKYpCNtv6FxN3LT&?3vQbHo@HYv2;nArfTshXv6eY<?
z=n26!0i{9VnRrGf8bf&H&~TNThkgzeCG@@Y#=9(W2wzpQ+5{t&Cz#vN-QcCZAVZ_-
zIY%ae&IM9=G`#Zt7Go79THIBZA6hcVN7rBT#nSwT6i{=+x1Rm$!lD)s3Be~h$sPIV
zgGP`GyOtj&**TLh;<x-#Nl%fg?)_I=|DaUQ@_ehGJraX4mE<ME{$-uzDu*&4VtLaN
z;bM9n6hTYJ5DMyP#i1Jgdl&k~;X2a+1U5SE?Wc-+?_suJYrW>W@P&6RZhm?~o0pYy
zmUt_?r?htdMuT*BI(`KMOAf2B`|i4qX9D5@Er>2es6>)W))&mW?4OTE$*K!iGSP7F
zF$h8?oroFHJ8;g@q6BJf3<3(eoRzllkeyRde5MZ|5o7q=Fs>`bscR+;<f*?Y)uCJd
z-r{d!%RyoVqw?s;uA>m!?<EUX5;njipEV2=#&fPnc#{Pm4<>E~6H@1j&`$dnMmEI3
zXA!>oqWR5B68Gd)20Ye3t=5}@$d?riEU3E&W{y0j?y!13=-c@y4B49XRoytxNy|lZ
zBPqS+HY=9Bzas57W78(Yve)Qxw%1+@whe&<`Mxi{c`psVuc(<T>)Gw>%|G1#a>BqK
z9LKr3H>L0;hWe&zZIqkhy-_)dfJ%fuBk<O;jwcke1+vR#1OABGy9Rd(YYICJJ;*@U
zv@ta#TzO^+TOBw<-vndRF~@=7IDfa3bVIl?EWvvz!gLC6Fw0e0kJr^{0$Aje3587U
zOg$j{#VXj=1wn=IDL^4Hc?{UW`_MIV&}!QCJJK!KZPu8)E+Ogd&1z<@`D!LfDivsA
zHkcN0EseKw*YaDMC8P+$-F+vfgf!YC;3VKpU5_IC<%t$^6WO(>x<TXr#o%kgfPsg?
z6RO*jte8QHhr<IqyIcaj)k>3>;ftAWC679&A1laqnq?%t(J!+V@~XH;6-g?|lNNIN
zfutHDo}kup%pvV4bNK$J`#DtG^{xLjz0uT;x+J~_5ZcX|Escc{%mTrK0kXYmUavRt
zJ$E~9p$D-hWgd4ezn5O7S<<OI1kZ~2NCX<kQu2iJ<DPBHu|6DL%5ogW+lwVz%65#o
zx)Kz_9hyUJ9*S5$OZA;oV4AO;aVQl`EEDvpYKFZ>V}NB)Xsu(-^8})b6AgM5;}l!H
z8q#7TdO?>TY0?!65;6MPlx`TM5L{(hDtcVccl~>f?vcm|7GGSyDy6ZBF)OUhp}FIn
zC7>jL+cP3=oqxn0zhLyxp_B-u0XZQh_ScrBZJ8E#bAXg}HJqE4-lcUmSXgd<?1YRv
zBoZ2Al^I)-Z@fN0Adcl~iyJn9FWyghHnuT?@AtU(g8>{>1IX*5K^vdU$3k;on?O@v
zo4Snu@XGDAx9H}b&rja&i*D9=Kx_EOp_&0j*gtz@9Jf1Aaq#wWaNK<NA;L3C!0fWy
zoaCC0<`)iL!+B9V%r)f7Q`P}NZN>`1#?zFmeGEk_EI(JTuKgm_3GJwZUH3Psy=Bs|
z{ICn>BA+#K^LC*VRfyw4eR8N{qKubgC_%#7=Qy^c=h0VoXGuGV?3OaSbgSS6{+hNu
zB0{}IT{uGDQU&PSfadx&M3u+rSKrwkN%kf-rya>?j3&K(`$alwEGmoco@cSeDiILu
zUuFp4s>@+C5tE8>UGAHO?-G!REmp2^+TButX7d?5B#`<L+~h0lGXGF0#h07Qm_rvQ
zabCAq<5cvIV8y0~s^5n{bop=Is<C3UEbwm>**&%0WOXhV$ya0LYoI)(-&2y*qEaFS
z?0@3uCm4sFVx^x{d;c6^v$LTH!E4U}6h!vM;rftvSRwmxnPe00Tz#1&nXN4y3u<85
z!um2IK2l7^M_LGq9<mpm|5zL4sQY5FbUN+AWBjRH%%P5Wq)7=gU~`hKTa|4tnvLvC
zRM9-FFDhyXI|gKQ)Am9P0a?#pmoOmA6Jq616s`mm`+;OEhXI9tL%T1dLlw@8AkL6F
zr-eV&gg;O^D>3V#5m+?npepX8Bj+3Ty;$|*1n$x=>+xBvkY90%C(pf$Cf|3)B!8%(
z2@@8>wfPI}dHBqg2ZqiZ0Q+WxRyQ8;d|Cp1H1p61ur@mO!l&-6x=JCWdg_0s<s$lt
zh-xYUJ+t6JLJ7mNMD!PShJPPyvr6lYrg2v3J(7M{)n|&VfuMG}=y*x`L81GGsiteZ
zwx0g>%uuy)=y8vQDM?$yxGx@qGaMcKp%MPMuk%9_$4!d?d>m?UA8_DrWkS9b3VmUP
z&zC_soKPmtr-kNwMY*UB@ncu(qnG1~p05JVAm-nn6WZ+wn1>2UvE9%+2<4M4;Suvi
zb^okWsVHYf^iE-zB1{BEQwP=+-84>_Z@M?_ZOsEic|{dF=l<sB8BPkh@;I3iQE`b~
z!H8&(JKP{H7DjX5inO!7!}~WCDXN}RoDd7x!h0u&giJg+QzVy!?%%vAIM>RM#|XK*
z_1$!@i_TNlpzjXdd5dkna3%Tjpf?cfFE@K<k@13`{3V}5hD19u6-CErAn5=F6?Ae0
zlI0e=A6_uGDGuYC^K~N;12vAl5-tIk&a`KVQpU)v-?waH`|vwCw!6L;I(yw6*xhy3
zPoY#5;(D$3sdO&SNikrNVWNGeVmLk0=?qiuC6WbQJ)bJ`itXM2FzHo(L4EMbx<PRA
z)D>pLK<=<`L|w#FJ711J=j1TmHs@wdsHd|_IpPcz`45Jge`G=4$pHpw%)2w%5IL>r
zpB_`Fa%?iSEMgHCgQLd6zx1*vG3X?Yn<wFhp8>L6DY$II8dq&wSeX%@(&@DK2;QZu
zp;^YE!>(Co7D|FD?9{1M5>T@?E9IyrN{_lG)uA@TU<yy^vFhQY>{zFMo@s7y-cGV2
z>VFfZsmCaqxu_T55%L0~0D6tSR<aRgtEy55;MjRklmp^cQ*6S&j{K^ssK9z{X+EMl
z=bs>od0mvWp!NsUl3NLq#{hY-YC;%ULXPB7P&ieAFTM|1G5@i<j3(7fi<o?pLS2Uw
zJS@)a(LXIzbw4Q79@pd!7X>ghW)%l5?U-N@o=+PDvFeiT2(i_m-TJ#xNrIM8kWveW
z#g<`dF&7k+sfdElBO{|5Cx({!myn8rt5Jr-6cZ6r2MP<QfWg0?U2mQ1F0VJP-c-a6
zV~Z_qVk@IQR<4L`^<63ko;+j&6UAd~_qaIJT*rliN~~RC3BrEU9YH_)ayUWhd&q5r
z0R~A(&s=B=AZr}M@$+JZp5n!q=aM;DH4a0onK`WclMO3tn5+XL6f1oDDZvlPi!(T=
zzE~+4SZ_@FKGqfV?6$`JeY{7vt}UNmIsAUquf-gE^S$krb+*Ju?cT51WY45ac}e(l
zvGrz#GCvR5aCEa6n^ti<<o7qb2E=};waqW&|7|fB@fyW&&@C->n!X53p^DClh>483
zVd?PAT(!O;EnIbP3fvXZDwdxItaZOE=!vuTW&%xuTNlf^21k@*d#C$&{v;e*bjZK1
zk@}`*M}A##^2qwAWuRc*jN<;adFQdaZCudvU%gw8DUqzICom?yx~AV@v1P!fAg~tX
zhmdGnQ^HtP|FP-%)%AQIe{ka9E=u8G0DLK({<z90E`Juf*P>Lh^+ct5k;wM&n)bE5
z5px#MJv16+N<Ex1fWB<TQQ#bbv;qU$czXPsssl|nDHt9>8c@WZBXQ}J?=&xeglLlS
zwRUOUh!^v*8Px|4hU3I8J`4G<-6E?s)Jk{t4VP=|+->@B=8CDO3>6iJxV7dBI35G0
z7*2?Y)cB(>*Qr;;0R%xFq51pAVNnLGPU6pr<h$pJ4Co&@A^QW4jnLo9NQucfE`uVH
zl^mFRWE$42=#=pJ+088?X|SsJ#O-g%D~z6a!fg>Nh;nX~|Asw0KC?3Ha723<YtEch
zQR~C?y$$4Gk+4Y%&}68?*Vggm1ndF$D2(@Fu_aN<2|3CA99$>GJR~ewNWEU+^7y<`
zRNQSssA@ekW88X2p84L)CaLI8d2&D9@ilNK51EzZb8V=Ce{(i>4Dzdbns&|3q}7Dn
zB6q$<>C2*KM-&Jg)3&#tI55?koI_s3tSB_J_XC$0Bi8vbsmJ6rT_P_{#4&*(%e~G#
zkPWKTKtL#Y-fjW|-tIYRy7dz8)Hgkm8cO*hz9kN^IqEg$qHtOs!MEaU-f6VzNy`nY
z6Is20-I7L*9Zcs{CdlMIk7%%sfYC;V-EIA2c+;7HVlX(~_~QW{6hj8%vBkeNr?7|;
zakb&mIP~FaWZ&$OSILIEp!lTx747L3GOz<qfd94z{x!eU(l_v>O<{zcD*#(n##<wc
z(>Dl&_&uPzmf*=MXh}1-CQ+_|DHIQ?{Xw{pm(t-zswz=zOq{|!V~hXnxwHUnpNF<U
z-2}Q@IWRwM;U5_ILHa8QCQyp?5?=+*OtR#-5_N~i*2!i3cIb}Uy@g^kXx90+xy5-`
zR!Y#CM}rU}Vb8IE6gs{I2%I!_YOPlGi;lWGgr|aJeZ1h7(?0B6<YjenI3kotxjg2j
zh$2vcK|c3k%2uP*5g#XePw?E_ifeTSFy?M!GGD2Oh?XoytUnJ=+98(pjt!Eh6)z2i
zZ);$+S#{mUBeGFAVX$vS$+^<<aKwIH!V{h$>Ii@q(kJ8&xS;p&>dgXztc^K|)e8l{
z6ZM%wH#y99-xv5Xqtuh_(y7~Qb`_j4#8o2??AkQd2R0w2b#=~sidP0Kdh3RqFx3H&
zcT~(`O*A8-^)8H3>|#wYVge1J?0LMJL1XQN)7we6@GqdX7zE@~4J>Fr;G1*IV2826
zdUf;_J*HXjS=*qcu?s=$nB{c41aNF-rZmRCvUU2OPTr)ERp}>i1!1hwFiLOnxz$%Z
zL8)2Hlr&4E{e$S7V30$`tOU<~-qZYhQ51dw;|HmyZvL`lv8k);Z2C?p00+?n-Tap}
zR0-Pyt)<+H)+GYl!-AD0AaBu=nvZ`nXzV_lB#FusjM59=kLwx>cri?nQvef}AFcat
zWY`Y9341~<@DcfdUJ!1kREmFOH#qR8T#62a;)?U+r`M+{@TB}r{(e*NK=GwxBrJ(<
zejsS~_C@U-9u;vYgL6fnc`2zJy-bD~ObT14kt!im$kuu@&%NuZqH+}Zs%5efRP}^f
zMK&_{rLOI1UWb$xW`B3h7l=EaX6TuUf~pD4E!_8{QA{prx+(Gx@S+UgzjR!vnHTjw
zv8oT}B6edKIv1%j#OD16>emTDCTF?wABKR0A;X#ah)l5Z)u*(+fSC}JyLKD+EA#W}
za)X8-gryqt%vpGwlm;J%i&S~n{a!<1Jnn6C-@Q*vWDD<P474XQ8|U7MZ#&zs-jJSU
zlZF%yxB#9Mhoo_QFO=FKk}Hj~dt5se(pbg;(`E3%3rBI)0~X4IdMPh1&b=gg)dLs>
z#-UJ18oVl=H7|F~8E`X@Ob9GIPt;(~&}_`YMj%KKT(V&bkEC?xIUg+BGql6Z2SFk)
z>Djvih#&7|Gce>rhN@IY|K%M`n)dznZqa)<tScvPYv%nelNq4)6$l8Rdt}u_j&XCr
zi9?oXU}B;sd-)BprbDBASUzfO@orw{KgJfY-3*#6h0e~9@Xii+aQ1@8@+?t@Z7So@
zx|*QMdk6mxe4M~^jEOeZ-*?3V;5GH%hYVk`{)Z{M)w8u1Z7Uo2LL<_Bsfjh`b-eu3
z)=dyCPM~EXRJdyy&8>c{(Mkg-cG^{`1%-52Osz*v99Me&6*u%(<dECMs%6h_YAy87
zTSjcDJ!FN}^+&pP@RinepYS=9A7A^1mTw^Dp@oH>xNq8Zz|Yqpirw(m*B3f_EC*V&
z4gpYI_H&5bq~rp=fKnX`<Jbh+bcaCeU@Y8DWij?P%(z#|f#v)kb9r?w6II)mF4Y9#
zb=?y!H0D<|f4f+xTfDM^ur`nkGTxVH_<(VkGc>HNraa4OMf54HkQooe9!&+d>G~8=
z&>i+ZR9G6JfF@n|s4%8(X(<#0#NW{e&gjzdmE-)>6nv{Lj+W$;m0??1CwFM>--v9U
zw|qgfA>ezX+@3}D-N-@-8-*Xvro6PwB81}nfkMB$F~FajbUX97h{Z{lmR#>EP7K!2
z;3Y8S-m$Rm=(Fx=>O{#KAXzeltzQj_iUznKb_1pef2#BL9Qd9}@!|#h2R+XcY+19W
zIn?Ta4RC0}8zzjUuUUM;`^qW6?MdwX;O)_jn6P4mDW=4OmqWY70_Api7rshNcWoEY
zW^whDw#d<6Fpiggd#^^JQdKXCvZJxjyadgT83=mw!;Lo7uV#D62iwb0nen)eTM+K@
zE3K@0r7w+Qtw`J+x4$dc9b2@QpR^!yLWyS?*ZX^y82*9o)Wbb&<rQGqXkKve#^kF#
z<_M^YuSIZJr>%)_b~4&^+<!6Bf?dlxY&CKB9XH9y^O%RP7v(p2OVifZLSnd|weT;?
z)Bf_4HzuU8rFkd}6T(ISxo?zqK*?w5CyI;~pcnR34NYUp>7aO)2c@d_Vt=FjY9L`?
zpTpKK$eq`)YqqW!3Qid0RlbxOnu|Q_DThV<gXkpZ*}7n1K+DQ(Zbz%eY~7;_u}D;y
zt%U_DH=$2qA+LB2jdJ~dK7zw)wSu$5tQ!d`$<LF(=GhRKDrd-Zn*wbZIt71CK0;rx
zH`?PO0XgqzbT;7h{re+%y38nOp6C)j7+80g6W8mwt;I9gYi8yg`R5q_n#n-9^aw1Q
z11@8u2+sR+O&dZN?fHU3zRA|()32t7#p71HNRz?I0!UOT>pNyh;qyzTJUspn_+&-X
zUWwBJf4B4wU3@>NxTy-6$ihQzMt!f%oEIz9!EQQmoTvB?Q<!im0!cz4r}5j*OigiX
z1S!<+7Y(h0Bs~pr@*s=@;|r%oS~}$nX{K&9@!?uOadaUks)73FYxTtiKvll8(~OG{
z>AW^H{l?S#`Rocvi3FNm)7YeLeCLhC0b;$5BxOaG0ALu!G*M1YP2Fi<lgK!Yb#!&3
zqVj@PpM;{;LmT_&v7xD*BZpcH3#{0t=U#(qY^)#V!V1>r=MX}mtTgEW<8V0TaJp6i
zjm(chX3n?S@83rHmEkh<uZRP32R5{7=~UBo!kTblOb0W?E(XpB7^Cf{(gL|NU~FrJ
zjCq^IUi#Za-2V1LMrL1ZlkmA4-0e8`OvF+as@AE*w5grRMhkP`@1V|j3$`nHvqX_U
z=;?B0a8|2Ie`L_`FO>))_^3M{+*4A6=y`+qL8I@Y?7|0m`&AW;fCthSTR!bkY=^Jp
zR<4>0u61Jt@s!B)EKo~)G~K!78XrO@I2_ATqwOYjoJlViWtI9R^-yl*fr|&@2<;*o
zl}L-sT6o*EnznGDE<F&AmLgqn!<bZA%4eGQRZa^W;6Gh1V0`_03}=A|UgGV?3T0Os
zrd=1qpBL~~Skd2z=%YXvlelZN5@05&qi=ly&b@J&Nyn#kS@?AbLO_{~+>(&{@%~W<
z6(4Ctdlp{}e?R=d&c1Tc@?O1ifadw<sjLr)MdigdYLA6=5QSy@FD1^vZ5IMt2Kb<C
z9fMmA_z-na0)$M)VNUv2$gBZ#ngP;loX(qlwxrzD=}v#{qCS3^t)rbkZm|D-K{nf{
zdYr8uXE^XtI8rb=2Myym7oTG*a!?%>5m3Mw5%p&g#*vjz+ZroMi@j*)Aj_6^|29k{
zbGw{w@NriQ7B#o@1jrbaqMG+k`!Hq?;y2pqLHa?~qJ56i?7#*q>;(nhz9rg%5A1f^
z$wBe)|NBvuik@Pa=vL56qfuq#a4lfx$PeJ7aO2KhpEnRWU$Mpi^s+$JNM+9AxvSdH
zpJARev?74Gfe+V?Z?z9Gbih1ma&@p@Og}yt0cx?BmI{k^9;UG9o7Z4lmy2{9c>x7u
zXQ0r!rBm0y1*7PSXn6dEW^-I*|Aq4lq55!}8=cMF+;`h#kI4&738JrCkOFAyG~(I2
zDJqcO^u#lXWHFpo=A)7(vyeM!kbrs;I{Zw#lw_Fpf(lD?*e-y%f{46}i}3fZZQn2I
z71$<a*nC6Lc1fbtv!z)Q0s~mcUt8~C{Q7yBs?b2ErJ9^gyA0UDFSz87dCg{VE<cMN
zE_k9VHGC_dcKEKlkN&b?ocQmf^F!X166n!_T7<e>)T6_nbCN@WSk|%{)rat?V3(<%
zl`WLp#*}?u8Gg&ZQqBb6qRy7~MUPEVPvRM|!&Pn>0F91E(;`4r%n0i~zIwKu9714w
zmna<Lnh{S4)h)zhE&bgNyM%_xWv$E_Gk=>kRd2c4SFMt&6b;;f+h=T4h6_kVoNg{e
zDbwq<ZzK4DaUa8*(?4<^!re}!=hU?<HKGhENNrAK&oU+v>Yx)O0*qB}&wPj=v^U<u
zlR5r8(F@d)JT(O_qlMZ^=c-}m+Bfve%s4lIh1#m`Ugh-ciw2pGGkP*1!EJ5n#W6Yr
zn<bNT2fTvZ{LJpZl9fc<8Hnpy%D%el9DGq82UDxMlQj8`so5yfPO65mR@jr3vTOvo
zWm8}a>(EHaD_(rVirsr>WbNpwJReul3LD+AN9P}S^=xM&<houzwnQMi6Coo_WF3wB
zubq%eOK{wY^?h=t61C9;V+-z~7}|9kR5;jRkl0wmufr}H+g`z?hjTKRRii5x^CPV0
zrkf`->^Cc8L_d(7lQxDedr%IHd*iFoTLCAgG`Kd?=(I#BhfJDQ)1Wa)D~l1E7N;rD
zXlMilpDsnGOn4)oR-_DhrNmXFlG=5<jtx0p`xUFhIt~JxAY)?;!nw9o@+@X`yF|^S
zwTCp$zl}`7caU5BHGQ3gXGVCPT$VqtGj*1O4W-elqkpUR6}ucrNSif7s*15lbV9=W
z9JnTlRZ=p}el$1+xN2|_Y~(xhw}4K3?!iTMNwhj(W3)#{TwB$23Hgqe)SZhST9Z$W
z<=L6AtR>W1LxDU&@K4R4>HmHMdIIaQz9sPn(ytysXy?TFJtrC*UsB=$_3o)f;?mp%
zF|j<46Xu$$i??ghG*V2BcL|u()nXRge3K{{oEVLGRez^^$mUMY;<&i>fKO=LwCEPV
z7!y2-1^GC9dcHOFpFn(b@(zytut?}HmAtn97NTiL6b2`Ic(-)sp$3}^ryZp+ZR;MO
zG+@E<_o{|yFVCD)U{+$B{`!Wp`{Km^<Z*A_-jgL9gdv6#gHj(;fI~ZSW#JtdcIO(a
zCMJ7&Ac+xO4ZZsD{Cc&!$c+oT-6;>_TuIu$OGUR69SoXy9<^)q)j-Ty6!@C_B)Dhj
zkh(g$-do)h_`lfEW@68$QaB)><A3PU|A&ZfWMQZOkBt7`*Z$Ku|G1;<51oGCiBnIM
zV!kdV+2yK##Z%6Qlr<kD9*Wx;e(?)NVP+h~8~kd0{(9LQ4kDFMP+EA>@{y1+s9$@f
z$Kb@rk0(kmSy#s2w!`B3+7G)$=;h=3%BkW=re)5kQe$z<Ed9ynCrL`QS?J;<PU0k&
z)=`Kjqci_bfB^VIIZPAhl7qubq=T_iR0WV@C=U(vr=r{)?}f*|T1et=Q6v^cCxeUe
zTBD+qMjJ_;QRJFNi$dQohSA1u4V4}-8R5q26eLJ^a}bq}>HxU{|ML^8+y%t{TEFtN
zoK<hZp;=&tv=&mS<9(3AD6ZqDpdWO>9cehYdV9OS{}-3Vk0j=odi-l#f2Psk)MSXr
z<WE5Gt1A*kfF4xJmsSI*7?26;LmAukqJdBL`hhk5Sk$ay>w9%7kG*)RCk|ccaWFE9
zZ~L}T2ZMAWZ7>(1EFgXt6xdGtAcP;i_hyXGWclUXO*l9WMVf{d{f5gyAyNwm_(e-a
z0CD)zk<}s8Eu*g>+PiQQS!EL9K!PL%k5@X*2l=Xruf7*P=m#Zkv@v}v4>&T$0XKp2
z^V{5}$&YiiaigCqH{rBTx7t{bF`j)Ec!~#dbSog0!P_MnWCR7fqACQ2hh|g?TqOiL
z0EY16A-ogO#~K(*bM_k*x$$6>X17K0AI`x;m}@&SkwZlF%xxI^y@yR;@hz(HB-qZ>
znB2}(F$y{=Epoueq=jTpawA;^9wJeJ+@wZCGvZw$6M4oD{Ca%Fae^m6hiVEkVDn*?
zNg2P;#2Pqk+yD0YwwLZ7jfb?*)*xqy&*^PkyGu_$4jLkXhDNy>oh99V@cHpo9b*O9
zn$nMb6aBsROtE4071Bc4bK=ILVf7vGhWwTTQkPi7JdK07ru7vtqUvYyhn3qM0)i(C
z{{9vTyK$}n5;CwgtASZQ{8={1sjm4n7E-<CM$EE4nF0=-uxgl2v~PLp9lcD_2lkp6
zo-Pd+h~E&Os2=GlE6SK~n1)G+Q|NOBy}<e8r4zY6Rod))OUATuc&R-@XZGgLi-8WE
zQd90&{b^)bAoE>zxTYQ}v89%59?t`Go^{ogAC7W3vLF|<@oSHQWgi>A9G7<*!{6J8
z0|1J>C5rm>ca4w^d_Y?YuP655!SM2Hq__GER0O_Wo_?=+p%52FW+M2xaX}u=CE5VY
z5FV@Q0@!{-@VTW@{;AGISu5-ksfzkU6PLclTs1o7Q{|M5E!}BLdBF@(&IAz>ooHEz
zfKf5QCj>9y<zjtJ-2m<-atm~>z&--F$(xhoLK<>zN}FNnb_RV{O9>wvC=P#^2fbxP
z3q}#4$cFhKuOakAq%_b<43t?G3ta$AnfoVvJrW!TIERcAFzh8w)SWJ69TJ4MW4-f9
zRJ%_}I*jcLiG9^(I3$lBmX-gQFvWKgtj0PcKT*_R6gOo2>Z!z>2B_j2jsfOSn-Ffh
zVUU!UO`5B?*H;HDMUhUwMu&jPMU9R0R}Nx_ACWd5*ElH!>GL$lkY@tohR%6=9G?VU
zC4ra!7ahF0zd4<4vhF-c7m`_u*!X3vJDIKzNKI;vQ{Xo*FbA3D*E(b0AL!o9snwZ<
z9Gw-{DiHbOC81+quRYJ!F1<~kG10HT*lWJ;H%E|WEgGNRZku6^V`T*G^`Xt^arVHZ
zibLCiZ5+r+=Sw}hKlfkYIo++<^e0YUALuVB;V<j%&%SIS!iQ6wt;}&hn|cH6FCVsC
zn2!qCoxi7MWd8E4GHEw55w1Om<A8d~4bE9sjp3M4%L`msOWTp8q~jQeqLq|#JDoSE
zOI>0xcuFNL5BgGFyHmdOgTnFvWWmaVATx{(edC4lr2v?!?1{sGY^0F0Z*pv8vO0Bf
z(LO$ABiO4zEDlESs}(6@anZD1a*~$yw@PN>h54y)KIdm>cXjbkPY`y=ho6k09#hXR
zZPFnD3Kkzp>JMclcti@90w&h+F4rVDTGi(<=0BA>gHGTjan>d?#Eie(#n__t6}bma
zgsCBZCjkUv5)6d}n9c{kBESQVetoZ}+S^McZ*bORpkPV(^YO}&1eP~8tV%o^OqR=<
z!fBNJhV1d}&I%v^O4L%_=+|kh_7$Z*7>uH><T6ZulOQ0#@WGh@7Ck4;=fA|CRJ?Rt
z5YlZ40*wjim|Y)#u2;9+k(jdhYrfSbD44VOZp}jrgV%~8OC!yHiPi4Qa~+F=%|JY7
zf^1J3ow8{$qTOdob!6b_MO2;FYRsO;c^$`+Qm!*wi(v-&(UF9A>CV}ysnY_3WL=iD
za_cVf$yu;BfM_9@sf+!2ZN>9<qaUFn#5llh>Y5|!`PsyV=kgNQ%c0d)I*(#FcJnil
zVEnZ@5Ed{y?gnq<IT0>L1Vr<!Iz815n6DF973kLAtkmV@(AtkQmY$cS_a9!g(=INl
zui5G^NjTw1JbB-iO|m5!Kl%QV^EfNnyfSOq6s~B$z`kh2tWdsg&PYiVhufr>ZY%g!
zYHzqnjXercG1gDUo7D%kciUz)@scY>=ZCu&&0=R1GVC+=0Iyxf6)GJ*dyyy&pP4W+
zzBdT2qf4Ny5yd!ilY$6m1`P@M!@rImV_p_Fb}onNXRJgOZXG4nDAhu@e_%%m%zDrN
zDz>gWk5Wjh#F<T}=DHckBYSUyZW&^`EM~?`2`g0^V5{0qxx2mbIC=SwiyGj9<GGa)
z>Y4DmC$2qhjv_kV-LJwWbIPl&ysSa>aLAvmGkv3G=Te>?_oGh_j*w|8zXc1n^VQ^8
znJ{u#eG=EDqC&#9YICW^2m6eh=$72ZMfPeDY_^bWVylQ$hn#_#NjXTP7K?6r_krF`
z{CxKx!p<p1l&D*`ZQHi3-L`Gpwr$(CZQHhOyL-2J_PuZa%{}K-Qc0y!50%WUm0GpN
z{6@j>!a{;tBWtUeWFX5sxDd=RC}0T6VVxZHv>ZXBkYaK1w0&!fZXE#DLqCF?a%EbB
z^l-N9@dcmtYM~AboP&H4P2wA5EX#BV6Bfuf1xWC=(TW_OiNmoNj6QcH)6^nO(9=qO
z&X^*L+_H}tpm7Y_N}K`?vaJq|6D`HMEcY!ywm`;TT!QKs6*1J;L&dg~XE*yh?LkcQ
z7>Qp~CLb@JwpYfV+#^$;Vy+8!h`2weU>Y&DQdLoPb}wC2tgX2ZS;CSZV&40ftR78=
z{l~AP{g*d~wyqH}%O{_y4K1?(Ue466*0TkDhqpPV{juK<PhM7Xb>vMx5$8&6lZu<{
zuY+@EgX?M+wzifw*F+6l<{PrQWn~8b8^rC}tQ?TSm}H&ko)(DCTo3`dt(9J<`CenV
z%O?14O-xNN05_KIW(hb?DmPrQzyf7%Rq)mu1-t+^+@_#6M)5B@5dtaE%9Gn=j@_Nx
zx__<tJniZh$eK3(^>NQVgZ1Hd2QE7Ze)z@n)YkfSG|Y`#CZ#$M=<;}=;G=;3l7xjB
zV;<B<%~Q^C^$}()#334$I<fKk3H&p_>ctyA|A>r+y&K+i=X^oKMYZyrWv{2vx*;uc
za^vE6U)IIw8DyaO#`5)CBxob^+yQ6~8I1p}Bc&^H=lP8&L$<~`{QUE<CZ;AO^fnY?
z&IGlfkB<{t6gXVOl<6)&z9-g#vpnue4)#rmjH30Vb8O=Ub#CJUwQk**S$A&Ff0zGQ
z&~tbAHeXw7nkV+>d4blqgjrx#zxzwX?gOLaOXo%iO-Zx?C0bB7n=$c(QcB^fK9Cp1
z#@gX2;Baw!MjS=n&B~z)sy$XAnyPDQI=0IHml@+8JzdY5Bhz<_thiuz%f0hXr>FXJ
zzs2D-D_Ynu4}M<-WO|IHA#&2)D)2-Go*-C*;jtInqPOn6iH}n^LedE<$3kkjQEz<S
zEH54nq7{<YKqapIRKF?eVs6rZLOz}V%F6pf%MSv2ByJS8nUtRdG}Zlx;=CSAzVl^Q
zmaS322Q>fQoQB{8OgNrM2}qzTpvVE`R0h+#jD~ZUOZCcd<e_P@M5L+;20ISpJs!d&
zMt}FPx+c4>3^i}h$Yv!{PsfF_24&^cPnxzI&RW1HLA1RL7*|h#n75Dfljgz7Fl`~H
z?GXD;sH1$W=G^wMtkre+3zSL35Fx^L_ajMrpfXv2Z}kkS?NAKxu2XKlGFj(ULPZP~
z<Md9wozsJLa8*k$T#(~$$u=Mp`^0=<_~LNHagjVLQX)Lpoik>sIKv~tFZy}P*AN9H
zj<i&&x-JhwnsG30`#i+hAH}{x!oFYG>iUms3Z;KYslknMZ8J(HnUD=1PGT6k&C#v<
zZ;6>t%NmkpjL)(#$N7n<0WT`lQHHujwPju;Oj#OlW#z^A=2c3|+8O!fgPdMK@!p1`
z<p1kjc%)EwAVC8F_|pDwJ?74g|GUThM%&A2OEmF!FVC>LYP?vu$DAuoJ)w;NDN(*q
z9F2ctm6Q@i7*0f;pdXZf@^SNXqt43|045j2#70rgWqVT{q|<L{X{ipA#l8M-;B|a#
zoBPvEmxg$(@AvbK?&tlv8B?YLle+vGgQxMiSKb9X$s|*@hi|<c$`~Oh6Nqpb;Io=@
z<3FN#rD<##_B@zo2l82hVu1Y%&0>FqR-k=loBViGE3xBQT$`R`%AZJ<y$P791y}Ms
zjZr6f*mYt(iymjoaV(j8{UAC38Uv82Rr_!!6b(U(zt>%u;w>;4rn<~!xwk-c4an{S
zcyky|aIaS<v=#h|w?XhYE98L4-Oc{~{=WWh04K12<Mpcxc-EPqw22S;3@#qO+ufmF
zNH+H%NjLH3;6Q8f_0}fpYUj-JmDzLbS<{_&mVjV4d1e+$$cj6t1)|&HP5(XrqbBxj
zRB6W&N&YdowjB6xR=idz9V;5dK5+I3i(v;ciF09z4$Zf|MF$~d&oWR^Vz4CQzfCrh
z0&Y)e7Ms0|+7tG;<AJszgmydpi4-5Z1SvaAb?f~C)OF!!9`sw!B|$)~`ej=HD~vgB
zD|2nzgwgpjuTdB>Uc$7e28q!ZLs0=&u3|tU&?(T%Xci#J2;WsgyUpKkE95fLQk03^
z*YQE1_d#<-z|076q4$MA2xd@t$az!rdVWA@8i)Y+<uk`3I%U;s%mJ8W0owrr${gUe
z9C*!8KLeV)*b3OI7zRd9=x386rRWeMa|F*QP#4VxZ+O>65C&Lkh*aKAdH#6<wBEKx
za_gHA-JuLrCV`U{B4l`sex43K8K145qG-u-($!E{ATBuJsFD+ckHC)uqhexp+$kU7
zy_XGPG_>8PFXMS}WWid0?m#tWGqD+h5a>t<ps6_i3|$@w{8tnsF=N2Srv^~n@?nhZ
z7+$JQNtPg(=K=7VD%Xir!~R#=M+Iyhm|8Iq2<H;MPQoDO!Y8}&lGVFg<eE4F$+oJP
zW`VqDFqrx(%$(dpoeEC<C$1hVkmZl-+;CRfMSN{bC`W9emZBUB+>*7f2n|?PaXBT~
zmRzu+Tv%r!+w9ArtG`i*96f|=K~_L){wM)p{&mPLe1f4$BmM#cWHo-JR^Lv~P`3H^
zntsJEo|b0LHBa`PLMq^nI>6$<{f7B*nFY6h310MCxm;6`C4Hd>BW`ZycFEIP`_HAv
zu(>{)Xd~o7#(<;eC_modbW*n4^Q5Ef{9|PA;lNbxXD1M=EAMFUOs}`JOuP4=jac|j
z4G6eCGI>OiNeYm0GK9XX18Q55n|0#@;YDNOtGTh;H!x^Nr+!#)FISH&$+d4jwCj*-
z*Pc6eNwn=QoqA;2cWaL{1qphb1oDi+v&MPRrc1mr;p{LS;o#Xb>3^Py22}ZAW~%5m
zGUUb~1(Y=3l$>}iKxT|YLtewuE@L(@eTcZC9Ns|BKh}D7AD~_F6@0J;M}%e(*7YhN
ziD`u}py`g{5pR-N>~Y}cNq!?uz=N1fcNa7GDKrFzGc}-LM)dg*LDylPeOPe+PUAeo
z{BzY7UUpVwohy3kU1Z$5<U>z904LJ=up!-Web%K1aWgKJz?bq^46h{urWcPjyk%#|
z`Fnq+=JOkXR`fUPa2X5BJYtuVpb3+W00LuWPU8o6CX|SrCOun=LE>WoNz30eRq;pd
zBg|kN%?8QCbS9w@hFHjuQA%@0AZC1y)T+UCbJ%vJu%9^{_S%x(erC7ZX+{L`k>75q
zA_1{#u-n=Kg?GHNzP4K)w3p!#5@~y-{k3<xREph<#+(n>&pSfj(>pGF$917x_FC>P
zi#w$?F8HKqHxruw&K4tZ<A?)_hrn$#c8H{yh1*X>sFp_g=bKdi06X?>Vm`+%f}M~N
z`oyOI4D5LwuzKTDz3Gj(n8`vX8YtGylJ|86SF>1cFcPXjZ8*J%>}POo9yg$V2Oh}x
z4{S8Q``(5UL;yq49M_hPJas~!)dX3Irb1&)(&%;H(U-|rXYshPY4l{*Whe1W-#F4}
zmd!}fZYI!DH$wD@g%%%tKRkC!RZo`tx6*6z<L!KF3U1X&Th%44-vk$cJW=cl?(6}4
zp2aEc4bmj%dZC)|!L@;C!I<++ns6X<dh9Yb^M*NDL~&hH0(#cQZ&LOHD0TgljB!t;
z3*<;K=^xaI?4_9;6=(FzFA^39ovEGRY-d<2BMho!W=I6+ZqMoWcZ#781hSRPHOd>T
zC}1YjiRPVT`TEp&(1|k*J_^|Op<e$poi1psLt=-~EbHuUu3DeWHj?Am;(iurCQYtE
zGvu!b9zfm4Hm;%1=s+SS<Ho7%#zlH(rSnN4umu1-PM|NOOg1y@*-Y|M#6fAS3wpdA
zdGHFT8PCZ!!-}t1A7-pH#mc9?5e{z!cX^N*nTh-s`SIRWLt|p8>8!TfUC+t(Kq^o6
z%oc+Zm_@YzCzOGslYq~dlK||IIt37RywB10%3pDPd%P9)4G#Z_blw&+^Md1&au6k8
z@l&_t)F6Xnepx2p$Pw+Ljp(Uq6n9QsG}(K7a$GmJH(s>Xa{~T1DgyPRjZ`D>YnXs&
z+W2e0IrQszb_5BZ1`byTg1NbT+~Qs{;W6Z51}>qBTocWSZP{C>G4zmbIrP{+rPGMm
zTm8cr_ga;eF{@;zwW?Yvafjf2Bq<<~A0~hk3RpC~Xm%vVjOlrO({~7s*$?dPo8us+
z5<?l}aVQ3o-Xr~Q6Lt)o=up;MMJJ4+ljZDr(6;Mg`SP8X^_)dzIhT>XNn44=Dx0!<
zA3sFzQj!R739w2yqlXFwXNugEnf1f7Fc6DFd@|)gwiWpC6=z9w(_)7_;uc?|leL&+
zNCU0(J@=iPnCCi8W!wHx?Ci|M7zU7{;vEJYtHjS)7DC6AP^y+(P&(0!9nYT!c_B13
zRVw!lpMih5;-G&U(ti}zL@%8{T>xLuMO|1Aor0eo2`H<NJQ!1sI5&35QdU)%m;c2g
zVqBfvV+NI;B_gsRQzSxUp=fJ|dM{VNl#e_{gzOg@6o&>VuHg7OvgV;xGdz)pcdY*c
zANuZbV+(_7apDWB<s~AL?7}(;4!-|t9E3FiwbhpugU-GOcgLGZlZF~&BY<WYLxqT}
z86(+bGJi(DnG0RV@7ub<t9Ca@*et%0jY^2s8=viBKo9T%i!@_$trOzc_<QqO@V_s9
zjcvJ=R4-fthOv^K<x~a9o<&agK$7NOaW{r>zM+VI`eRc<UEO&(F)hy#jh@>}<P($c
z7n%vH$?*TF1Jn7laMY6yyF1X7%6yZwiRxv;8^oSmH*lM5=tkA>_t+c8D`kaxiribw
z-I1s@m{RWciKT__Fr!wY*C(ogx&ub#7vQ(PrUZxY6tHPoWHbGNdz-9lSe9;p6H1az
zro#)UwO)!>YQSDa(gQyEm6Q|_`-z=i18+n&u1&W2)3fjdXOZ*{`df-7qk7cyz->p#
zUs@iuaQec#+ufQZcaz8+%$Tj@?`m4(LE|O_ts57kwkj@V`^AZ{1@S&P-Q!Rw1#AC_
zs52cA9MDvv_zN*~HmoqH7bh8joP7o2a8XFDk66%r{hc-}zD_t50cTeBn4dj~Lua-`
z^24=yYMl5I=Cy}vqyC@w$W_FU6l(RFd<326r;qF~uRYfx3nQs^j`xfEnKC|YeGzc>
z4a<lj`B=gmmhE_N8R7om&9}+e>2bA3Y<HaZ&aN!ktOapC+*ZDCmR&)w&+n@|S_o;q
zft=XPV{*qQr=+i-?!ez3;<_JuJ<>umxVB5MtLfcy(jxsX7;U>G-+<vYq9gO14M2)t
zW;fqaAtPoh5qjneXPgf>V3Rd5&p1e<a^mP+n&>8EF|U-W+Fu~-_g)Xl$!ZVtod)vE
zM%5DYRHPz%segfm`6{e3B7b5x`}*bk;_ZaB&HKJF>5Wll!azSiN(_<Fk#WDhyB8X#
zetmjf%p4Nvxs7koI4s+sUeK}xVv_%+rk^DZaFV{LM<*|3R?|%Ay~O^A2Kff2ZB;$C
z{BV&Wq1O9IHoQXuU!vJAbOTI&(FURcTyUrdcFUt&<*<37t4W&OReq|{8M4W)yNf5t
z6g8N;`z!3RK6ryT&V5Md;?|LpKA-Bz|Aup8+-yGl66;(5(B!Ja8k!sy$lII6(vEes
zjJ|HjzxiJ@&Ib~NF<Lw)_@kuliPT^$Ky(0+xlxeD?3p)-l~AwuH;!^*{A#)4s0Ueo
ztEI@TWD8JJ$6LI+Wh7d4zv^1g__|YB$wYKGFzHw22ES^Y`7Z9#f8_6zYfKc)Xl_0`
zT~sFXO?9YxaA)qU&GVyJ7kXL-CEklo4m{?3eo!G|Sf)iV_2bv}aBgfWFMe_oZB&s<
z1|N=>Sfd1v!nJJsv(~%hk9dxEQ+_U@@Ph{5Xa>Jf0S5O?O>81*a1kNHqQnq?;k8X$
zqomd)>)OpT&Y{$})l>nMec%2rKfz~R{3HO>(mTrVnZOd`RMlG%`2c6(C-wp^&^hB&
zaIbJ9B8ty|`qWq*V#6(|4pbZ%3?j8rPkPi|vjEBEmbg-F;3X;naXX>+u(&ah=+I(G
z<jF=^3mvq~!0)vs$^5>EPMBer%>-(lZm7C+0GLcX$3L%R2O{dW77|<7mI3c{%SS{1
z?X2?#_^T}IW!dYINXz?b@*?Me4}qtJhrWXz$CzkRa|wtz$CVhHc4?#{kb4yhSXIGp
z9ul82vQfj!E!>@hyohE6H}#$AB|8ZTv_XdD9*N_zf#aCKW~*<c+H`Iq6yri2MS7Uz
z%buiHk*$$OQmY~i_Bt?8*+hKjL)`ru6Xx2j!?k3bb#h6PTiD7aEh5s}WZ`;f<L@`+
zt%w^w_XmF$FZ^T(nM`TJOx?}Y!yi8*>uEnqWTz2Mxf~F^8@jO^wso;sBS8#f8reA%
zPeq71iX8u=XSn&0_6^#^dddVY)YNSrf8caZzQA9#F0=^yue93ig9|co0*Gs)z!N(Q
zUCskbT1XarWo#Vz67Bm0jVpvpjaFFV%A$bF-exQ=ui&9>XML@cWy2|jve;QOa?ip@
zSN^Te-N4Qg@3=nn9&kN}#r~EzDE;5>&($n<@cM4Aqpb(uH_~JjDxOl5-Xld$#tUym
z-b|&v&MYB)h(fY6^Bv*Xxa$Nd^%wb$bWX3pu{`jM<~IY67V9wXW>fr}e`84w9V9)E
zK=jnWv6(9}l5Zg$5xrMI!v75ABGNvR9`?}hMnBYo)0X^nCCA-~^r?hR4Qf|0L2IbN
zFkDV^so0(R_NM2u(fre_l)%eIcD)F89pdmawN!2_mk*MG6Nl9aR7V*$Qa}WM1m@6z
zq3KqH9JKzCN)~1Et%Q>NJH4yiG#Pp}O|gi}K=T0W;2ucS5@GIJ0YOMAb9~J?8Xcfv
z4bq)BX>~21d)SF~msh8p{VR1xu9z%wR~m)5tcEi7Qc(Y)RBECNRC-@K&C`Sf7c=9D
zS9x_ym>R{2PUsJeuXDLCmJX)lu)1A_;+#i;%@H}S&ASlCAZ;4NREV%FdaD<CZ_?I@
zGn7Czpra8s^qccv+`C`*`)&EqCVzVv`)=K)RD@K!i*?P$-W4^B4j;)rB9`6~O8b$i
zynsJt73((zU$9n@B_aI7*%E#CZcyu=18pddfTTv3VJ|3qK_SxuK3*T{IOA6B*9x^x
z(Ho1o%d9UXYqZs1_spmkToB|4-<rl(L_o&;EbeJ25N{kSV5i0$dg)6d(@XoM>(iV<
zWap~APei*0fK5uDI;dV%F^E@O=jWH@PdjN?+9r2p#X|Bwz8)Z&e&AP3zVaHcA?T_~
zWhG)Aq$6t)+#O*gF3P<LrEK!|Nqaa{Yjy`-(pmhxuY<|lmUA2{^JRu<hV>Bi94aY7
z4i=yWaLq$SiL=Y{$PK%N$uZ{lIY&yO+D)b=#JW5JRxWF;-WJSZr+klJ<}(Strvd%)
zY90J18a%E0E^+{@*c#0t52Td%-xIR94}5jY3R;>x6>M?XznB$kv<^4>B)p`d-J_z5
zTes$8O1CJEJCc3-c4_&_@-hMsP(+)lN*ZmVcT;J-Q}lkvGs#9fhjx(=zGlEb(HQoO
z#d?GPfK3X4xo%jqSn`EK%?V`xl#^o3E>HyRQ&4P@{D;NY0hj&7LFnS9kCgR4BA}0O
zc|m=_foPv<20N+Ve4qR!TI!vXZ3aq5;L90E>ni<toP$sW(j?H()=-gq{&X~XE0w8D
z#c#Q3Z?w4oK9@tq#Ob&$!+o(u5+%MaK|fmxEkF>zg`oo&V#d*OeWtIqu>Ej@X!Ff6
zkXG!g5ntwPXHgxf9dN?bG#(VqQ3<-pi(wHaEK6oX-xH1D$~nrG8K=q{=|PM)Ar-09
zxGfNGQo`%AN&}*k8{$gqO)Q>RF6q|BJ&$7^-EE_{A#HaaE=?Y=j#kvS_LLa>0!OhY
zu##TyCg|7i9p6kiWe)8lP267FvE%})V25)(#vS#u&fDx7tRD=tZc{R$ZbTC#63h1$
ze93sFuK{Y_3C}F2kwflIajtkWwDhnbrGiJ<HCiIf4Bnhz@u2kvC!D-Bz_#JZ7eX6f
z(`onM?m^IBF6!=S^il0PdFl%($8({es*}*0S@iN#H5XEal*tZBO5FVvWhZZ#oD@+#
zUKSiy`U~63ne72D;9<1Q#9B@HUYY~gHhtE1y!d32Is1GXPTlCKz)nf$EN|!?7$V$T
zDLQo=B;T*wa$nb%jtEahs?mRt(aUohSK;L!04&w#TUYtQRzgQslXahpan}T|o|m1j
zr;L*Ip?OY}V|E9OHqkhkc?`Xl5UFz!$BOn{8Ql!8{<?Zts4#!y|4=ENYr=(ax<%I*
zy2Jj4TlVb_z>P7(eA&x@c)i4OU)hc7voI((@nKk)vE3cIh_7s5R#Ny#60G^i2X0~(
z_*H}!WLKTYdu#&rE4}r(*W5^6BnOpTK>2r4ZO!CQ9UztOaHDAr6D<O<Gp+&*o@?0M
zH{j3+sncXUkrmd*J!YUKqWA0aqy3>vmU7`Sj%@~j(<4-QM*I}$RRCPwRhYO`ah#YU
zM?}+1b>K1f)kJO#E&$N%gr0gfu-7ogX#hU{=OhVCvGUXr7w86i?DX5f_r6{WLKy~)
zR{+4F>U1m-Y^MUBPC%nW#2&w<IJu3VM**P7f#aROsPw6s<Wn*xg<Dba=yEAZ8&f`c
zC<K!fR0SY*1Zuw$U*p73nrwJ%2K5*6VZd?*>nUf;$DxzbFb3EsHq$4oh6#~8*IW|?
z9pDqBA)yaW;o7abhvGa^LNn2K>s!3rr*~3S7tX9@_q?#w;|c37QKlD6b(EnnJTZRe
zL`kf3xgWR?U-(%6P>a<bRiI!dEBwp5oWUSwe?aBITzm!0byeNNI`14NKd0(nXHd<E
zauxlR|5VF{L3&UDp(S**xZL?=X1E5<kkL60noRf;PNVEkEM3*JTd~+t?HEGzVJHPQ
zi8l-V*YEf^1x#m{AfMdXk~XKFD9<kp=&v8(e^NIN(Mgu+fB*msKmY)^|F|1FdlTD#
zhz%_x9U~os3H`sz|8wfOI6FE2&)7|jf`Zi+1A^~b9Xk?+&H1$pwwL;bkSY*$aPjc&
zP;M}7o)xSJQ>RiB!^fVRr1ttb7_$2QUGH7jo$QI=0FdpFd-RKezWe9t$G24nFFy}~
zwb+wNOXw#?Z;^pI8J=J<Q0nXe9W;ciI0k+L^)Q83O^txuy1*l@=>DGdb_WPLX12`m
zh6&(3Ey+5Y*nI#YqA5Nejes34&<_JUlR7-vwU`;U9RgfxSkk*Ob4L28ka-89Bk|Ki
zdd)F8vz+Nw*Vam@CXW${B1+pVlGqkmtH2W?)@)~hM{%5q2RlwA0W(4e(Qw!!4ON*#
zWWcNJd5NOaRg6>)47u`6pu-5mls$ddxq%mbO;yXT_4C?{PR*5y3bn{~{U4-N<e*{k
z#`B7-S$yJ#+axv)oB_RjxqGF6Z0*L~M&4%DbJk~`(W<jaE}3zQZ2e9}CwI)NDa(#3
zzPeNw(vv0Vm-&VwE1psPcyai3VOvIe@!390C;q(+U7j6^=e{6X$56h8s4@L6DVJP2
z$*=Q+6{(9D&qUHZt{<TPEH`NXlJgM(0Dyewe+yat+h=fgG&1?0tNnlF&a6#8w|WB~
zInLGV62g~;loiax3d)BKw4dU$H8!C_Qq3c5NFzdu5j(8E-}{5m;`)H&GG-qK=1g!R
z*G*mPIyAN@Z-*DT56ksz3qm;Cv`RyknXAlCWmeksK1WQCLmSuI?U8K1&u0~k>!njN
z+1zYkRVj=k{=?}X5%_-3=yQm~(^uT-p9Y8Y(KhY(M#LuT)#eEf{&u%!!Jjc_p$`^K
ze^z&c5N#EWvfk3=I$@BGSk>P{{rFysmLUX<dNstV`k~KyA85tXf;~pbjF?^pjhvD^
z!`Fq57l2Jedi5m-ufLXE$(YIe(yUt<4_hG;S>SA2E$Ri{*6$UgwMs3LyS*O{x7zIH
z*vjD~8a;a>?sVnnqpCUQ(k?th#`UgmzR4lZs&0T(;1W8kX1t%hJL2s2h_tq`($vJC
zuD5fvJKy@QF8W<xUUa$t)ONq4^Zi*|7wRP0qSzd+aEN*urwz*}gHMR-AdqPrNB6tM
zJVy?$K(t+}8&7*DlU6k9eKI_<IIsCu^V);0hB&w?WvfyXM+bg@5X__Ghk@_)tRe<h
zV2R#?r2f*d)@EEtaFD1x$mT)^$5=*q)FCXw+Xl%ZE<PEAUm`Zj*-qf2=Hq5UXsd~P
z^I)UKN2wYs0#R~R0gV7CHca%iV5n1%s3K}5uP`049aU1iB6$P$`6H-(!ejY+t;&z<
zuj7h<K`#0?1rehULDJd9U3}WreSN(9UkkaF{uYl{%(hu}wthuSBi1?c=LIVqtfWwP
z#GUV+(d5gX%q&?NKH2B^lE}9`syjBE9DPh#2I10nI;zKZ7?veA*?>;?CUXl0qo3;4
zG_)ff=8f7Ry-by<ZvLOq(89!M@?aT@(rFkO$v2w_Y<JPAOsob$UV&FXD_>s~2LRKs
z7&{diIY9Q^7(HJ`PuL^+Kvqna#xkiIb=W!GCI!++L**<j$>v`YMz~xWtiG^MvBpyo
zYk|TngHRR*IJt08DmDky+=f?bLc_#)evZ=~d~)`#0{boj4@|RU8vRPyfxTWu&9Cpa
zxpAcBWWPez6~{fUrHzXd5EU@;($&AGKW<one!6*c(xn(af2KVd<@8k{X=3}SAVmK_
z7IlUrjv11iGU7xtAPx<&w?Cl8eBXKP=}Eu@WeP`b)38iGZMN*ek=fy_@%DILN$+f=
z7!gChEJELTbA_k+az}l66iCKmWpgcA3A3xeJ4~h!r50^$4P*pS?0Oy$X?W^+=Z>wQ
zUT%P`m9O5K+w=5a6D_OF@@$vHbT3zF064jVEnO8b_c!i+=w`$D(9h8L1C=6}?&p#Z
zAOdfiWGq3^It7^I<mq)Po%!u@FjLvJY)XIs?tDnpOop%X^0|;<f??aE5@aERh;cfV
zj>mysz`%<fQc>2}6#x_Q;rdlp1!{`fe*#dlIPgwqW5Q9sek}7kF<2k^WxYe%lC1&W
z_PlEn)aAxDDAiwCA8+lWeGY|DIh=Ys=ESjtMs{Yu!_R(a2ggeTDdCGI4)*^ESf1?!
zGFuC}a%-yW#*B=!0a~$h=5VOw#j+9XK)9@~M7XTPS1o(EICg$n#Uwm*KmeOq)Z^~l
z^;jy1!Hqc%R9>(@4Q8rf%R2Qz_A!rjA-|iQ+kr1zv%5h3Q8E{Yn2EOM#Aa|tFOp4}
zMoKK$RwT7zG@c!+l1iq8cwV;cx*?lu)iH~Ll&Kn1awU+I4Wla$I@uJ`Dj##m`Mem%
zM6itYf!F7AG!1V;SgdmrYc`w|$Y~6b$Vnh3!#6!99(H71QW>i)JjRLv8FnnmMrsI(
z8C6MErfi}lNTo8#1RdNMP%c#onpm-nC_nLR!3^(hnU;kmTdSfjOucf^)?9~PFqbW2
z%<91s-OQiq6%H&u1x`SyKNUi3=|1)7k4s>kt?Pr6uZ!2HZYLh*Ab^`xK248R+G)C|
zFDl4fIX)*`O`S*x#GGkl-`vi1Dbt|s7{&3yUQQ>z>Bn+v)=6zeWA}(XtMq^gNRJHw
ze%6=Qf;hJ-A6+raFTeuFqEbEra0P46%#rx8w@OYpur45QVN%RiMkzK5O^%0+=dmXU
z7i?Uiai&17K+#VH;DJO_lHx(61uGyg(xFl@#iuMJZcJRch^*-HPvP%p)F(xl52^+s
z`iM{A9|mYd3ddNjNe;siRHn2MS$6PG7zD)WR}iBL!>kHwiM3$+bC?30@w~Yn1kIAb
zgX@pD-U{-pP^1}%RiR*`kh5GLOEJ7$UrRBYTz}gj+Ej<#yQS174Y#DmCJV<rZ=Q!^
zUcMmA5nq!q#Xc`yWU(gD!-~-?FL>@^EC5~D*_aQiFt(TvYVa>MJ+Qu)#auug4_%}T
z1{TF@h_l2QV)JMeq4Bnw4M`zLk}Eo5IWkUUS@Gmk22ofwpcj%bU-F5T%rhnByiIud
zQL<SC!Ge?%0jOHIZ5PBWmKiAt4>}W1dIy<>BfXQ}(vsnwe|cE{v7p>y;CNsDFvf>)
z(#Xf2A^}jd#}##--$R4UghuMrzgR$NA1ovvkY(^+)!-Tl1!y5il9the3nb&q*W@P<
z;fRz2V+rG>72zkF<CA%ltqCE4H8_KdVN5U)6OE@F(MT*vq_pBmz#Fj`HZh_Jt4#bm
zgAJPC{K@czkPDC9HJRi9GU2tD<oGw+L<s7^a54Xkby5FiQjRjpNGs5M5+<le^Z9qr
zOI~iPkP?X8h+>>nlV2-dwZ)%UA#+&}>JyXpSUq{%Io=hyxzd<QKZ~hq(m!>&k}1Fb
z?}A`!iE0WVmtvJ<{Lwc4?8wTW-PBxmJGwf#3)!CwWABUE>kTik#S2y^v1stKv!MVV
zRq}?5RDuIb;+T2-iPSt9H!zXqL&iFpR|pY+iTbrtt`H&=?#GskQbG_Ucwd`Nzw{s+
zm+v@2$9VuA2*Ngg{6GmAhWG-0Y#5E9i5G91&Ybb3z!rSSi4zsKU<`|%F#?dv=8fuf
zNnNWY6l9?lR$9iM=3P@Mm_(Ir>miK#(-c?5Qv!#XE<?lm(=kI&j~Oq+_~ug|4B%C6
zJG`a~RJvsa8}%UbkHy*nXV!3=PTUDfia$ZX7vv%_gwMw1hGL0Ja7^wEjFii8!Wv9B
z{K`_yMyj7GUE8h7q%)WM3v_IZs68m;_0$6s$GBFc5VG2G)MECFADkBH$gJ}d!`amZ
zlWv0+MLM^RfxXDGxHpb_$d9-r^9pZpiEOE#a0qKao|GZYsg%#SB-4o>aEU55ZjmbT
zUEAa}3sT5NRmA@$Je4YFqkNJ@&eg;rjoLEONM;>98044Xnt<%|B@2qOv*d#`?y^RU
zT-r_E9Mv+0Y?y<e3dv~<APJI|kf>ZJ37dn;GRZ{u4JA^^?%Rq)(ri~M6Ua9Cl*Zwx
zJSvUD6}c1|`^4g8@VO*qCUAK&wFsO^f2Ii5_-Pd&F{Es1Jcb0t2w*ZLC<|QMg)#(?
zCpO&MfDl2j`88)6i!UL^;kn0h;}#Q45Tum^69jQZwM+p5g~1w&5}Jc1C@KXX4X{v>
zh`c9-2&CI3N|S*h{*>+nCO>|rfrNa?WAzk1fCwFPhH`{;P*wWmNB@U>No}cIJ^~95
zFKRKlNa2+m2*gC36%(z@-fSZT(j?ODR{2RJTRjRB2RVO=oM9fw!lyXe7F-gsH}49?
z)O!V`lIn(KSO4lG%c{kf<p#<D32zr`0Zg%;mcaRasxWitfF#(ODyxXlRIX+cw-F9;
zDTeyn0@5~eX;DqX5oiKU#gnZ_{x3WyxlUDMfrqKqsh#7PV(|=VQ@pk;@r9v!P9(2E
zazhv47imgGGNpHC8j?m*;7JmwJi;}kie1%U<3KKbO~(OPM%oRY9B+__+pA+@@kf4Q
ze1X6)tape+>RrAiB<fwMrNl`diXzf@FHKRg)VB^PT#v&u`W9oTyrJbpN^deHDKa+Q
zl?&yM?R1qgz6<EF8qLRGBQ@HL!H23;=>rT^DYE*}3Q|<{yX8daU&rCza>YSD%nBt*
z{QKkb5;@n^3h*yYsfo246^nP3)I_Ts)$U%PzhHi(p!a8I?*2SrU)ykvA?~u^52$k|
z1iSl28G)Sva>h{R8}C@F!XsV~3&39`TZV#N{Z|C>HaM`DE<K}Iij^2%0M>e&cHrlE
zE6#Ovb9@;!re%>pYayuY2Sz7QFl=e6^IQC-iABN87NDZ+aj6EQv+TbX%%jnAb;W!^
z|GEVTJIvYW`5q0MVhug<A{$<oPD~5f-+&f^%5<e!Y4}8&uIr=p)COcyh}4EU<h~L1
z5~W`6ly0YCjTO$0TD-n5CLJacTpOa|b_5U8?Lz2io;SPP?2PVgW8%Ox-w$*;g((Jf
z2t8$EDICsD9EfgNbqT=^fe7PRcF8LG?9XyPNBqPQ+Fii~L(*>sb!vM!KpEMB(}Qtb
z4o9DiF|D&FVF^v6V8WwOL<HQ!5U$lSM7nJ{zlxfH->Ft3KFG_=`Xb+nqdMQ@iKn^y
z&=fzaR1gXf9M80dk+)i0#iBF27RdOi_G}MZ(vZ||Qrqzyf>+{*9W3n8iIm2AuWD{t
z9pdTM(woj%k3mTYW6HtDOX6)K;sQG#c&@h(vFg19;~<H_2@t26{=L;Y{CAfORz8Ig
zz$td=PuxIWGP}Th)y2v4$*{*z6SRVqYms}B?K~-5?IrBwGCcY~&3b-&2*V9E>?%cg
zk4rKp8Woxr`y(1O*5O79JLjOs7eYb4)<=QVmd<x7MwrqTkVW&0{8Vhh^BH49XFI<~
zGG^?aCmc%z@>#`(jSpi?P?Ontp@O+lN{NGqwN_Mz6(;x)RcTJzi-vSqhgR;)>ddWX
zjWlN`1qW_gNkhbmvZR-Y#jg})S>E2w362*`C^u~;su>OSNXMVe8D5bh=+bqnD9TRF
z?5z?fYekk${m3m7MiI3rW@r)9wu$Aj>(n+(r_8bGo5fsH`o5hub+YeARy3by7##-P
z*=i&W)hq!GQ;)2|dC;K7$3xjPk(S9V%*rJb`3zJd7Pq32^FYekn)wE4&1kxGL+hBV
zb?8C!CJh}#M3V!Dl6VLTXs?vPSc`@bpTv4}sn^|0=V@LpCak1~F!Vi;@;@W+<qC&F
zFF@Ij^0wt}P$2pdfN$(FRRH5#R5zTLMWor|LmsS9hO)H8ScL-fW4>#SQ;wB}C5%z!
z;kr~ItI+yS%}<FX*tUY%+d?nSY^~ls{k|f8Ate)w#08;0L6fvtY{x*wgxL2_K!q01
zOuW~N0x_jRTO1t-i`zDdEVeBYt^BS7dY^{2prpJe8zoSt;a{;}u~fr{;iisZ1+y^s
z7|g!>a9-+mt&kDX*PXTU5_sfzw*$!VWEu#GA<-Z$%!0x{VH1wXEVP`!`7U;jh(y9D
zqp2ELf{IRehF2#s<ytY`++;d6tb6jrLPbd+&l@SD;t+!}lgJe#1rJr?ri|W4p=YW!
zED@}4G`1`0fJniG{uuRxehDNiSvAp*tnFeeTFFZVuA(!j&P>7hwBIfGUevAiSp~r%
z#ppsoH_N|A@N+s0Muv~#K#*;ft~;_KJllZDCObewsZ`Y=W6szDO~hq&n@e(PYiYMD
z%N-cgwG$f6Y7KH>_M<e|gSe248wzPl1IErC0rpSvQbv~{Q8QRTCSmqy1fDQuK+5H=
z1x0Hk{j5JsmTY{|aua~%`18xdY;@i4M(NVHjq*&-Jt1IG%x6iGam>F4<SbSGAYLE3
zq;F5(bn2=!(Kva&&Z3%)F~CT@qQRQJMsBVuE|$~lqxUYzH0R@>dA>2F|MUpJ;~m6T
z6{3f6ryj?LMH?w+F3@wAqSvzj7M1id-^4+5U<b&D*ck*51$WKyIG?(?RI^TYn)t61
z0xx}_c^as#7KsU8c(-hq;9Y9go=rVI!yUKT6H&<PDPbMZJohYyKK#88y6u#*<miv#
z@$V3g+>bnF|KjJ;a6Wv6WbN4s56#`8M*xmm3{vx>ul>LB@-FaD$vdGzu);t<CSvY2
zt_>8bEUVRsqBq$&3$H0S5<)n(<t0dq1f$FX2PZRb2g}E0ZGQo4ZX9mO$X|(ZgH2lq
zj0{0u;7Dx=^w4-G?M`w%rMY-5cKJHk;BrZh_rE=JD*Wo9u0J8i1HMLhPWit?cS6wa
z*rnEV7%zPAcf#EqWdx#4im$}lM$yhkonvw^Om3SthyB_U4(d$VJ}rGrvGlK)m$Emz
z+S{j-oFV=umP(}qT1uqS$lk72bioFBHBN>Jm2P~B>n_LFVn>R~YTPN=b+W-zW-ca?
z**#w_EFuL<Npa~$N<hu`Pjnd~i8T3Y53O2Hro+{3_hxb2UO&z3f6ZJISk&7c%|mk3
zFd%q3q-u?098VpLCLPE3x*suky@rnSu9U_Fy@hLBnwuL;!z9hLVvB*D1W93(TvZg|
z!Kd!?;AxNPHAraKptw<>R8SWgW&@2R<=LeHJ_wgj2nXmAdv@DAmcI$E6Lrr2;S+7A
z|LE9B@>W1(Lg)2J++VB4!F1k&g*_0~t@EU>(lqfxa2U5sa?mSvO@-|Rz3{d$?&lsn
z(>=s)oXJlM!D_FNk1ZF-7)<+RnF8o2BgO#P-!)8Pe7^`r!mZ3;6d?7TLz*!UXFPQk
ze#1M6nzSTg0+BzvB*T<9k!qR*Z=MyY3+T(FLZ-;LGX|n&3vf~1;Rci;*i7~6c(r2z
z5k=h0TX7JoR+!M*kV?C~2=AI8^ZZ)4jMO;XoR=YXID%hGZdq)@m>_@1#;2{J^wE>q
ztS{+JOG;RO?d1;`vX1xxt{{>_VCR1%p)m_BhlBSZa}hiGY%VKLQx<k&1cR<!K7GDI
z=B6{e^Q-etikaCw5dzVhm@?W1^(91dps-p0lQ&77)X{of>$*Vf#V#Nh*BH46>lXqf
z(&W%mFscHV=|^}b(?bV7qvElMK#LX|0vJgog;}s^5g-L==d^*I74nM&d-F8vWG$J0
z^%qt&vbl973@e|C4Vx>(=p|VA^kcHUuy%g1@41y)l%aLPuq&1dja&ch1vZr0Y8&h=
zkp2CfK>;3KMQBj0cK0A5{ii<OLuG$LqJ_CK<kxtJn@ZINq(nzj%fxb@H@#O>{!O=^
zhA5GS<PngETcc7I*m34vGAgW7g11)$fpZYGT2@szQvI%AiqJ>ndlI52^EGNiPpfE&
zUmEpv5(2YJQ)O_~jNdnuQ<*wZqg}`3Dajmcn6%LQFi8$jyxvqsMagz2@&u=@deGK}
z>1r(X?b$-Qsu=m#xMk>yXX4DErm<YfM8;ya`r~_;UP6_;+Qd&9Z=ajVmrT)b_IM%{
z-S=>Hj;b1eM4Y{1mf5d<ojeKOXVx9`*!lEO4IYnxFy<plPbKjzYbLEfP3nZyuZ~<`
zf-{CQ3o=QGV}8dcR(8+j%+zjV>Q!~JTZODf67_zs?}w><q3HgkE|7#xj^%Ow2%N<4
zFh%g{C_&)&mku*g9ygZh;CbcLqjhz<8z~;Q=w3=RTgtI-H7%a%6ogisIM7Fmu5&i*
z2j%BFW1SCSN^DsCUA`@gPn0eSW&P$~7)-9CqM0Qf+NrNeo|PSrNojRwe2%1wO=btd
zucoK$vIeP&7b|t$2pBW+au>~_ilQ;`a$UQg9eyLYDBj=Q^T#HmyTTQRWaRR`B?oTK
zt4ob!jfS$z)z2%x<}_dLx-X;XPrI9xm7c=Jx;L+$+=2}a?#?3lrwvcsfw=KacT>8V
z!Y(s;3%lY3l9|3Vk_LY+zLCCC0cKCv)^C<Vt?_q^Y^%^J8Fw@HDy~=PNIK#BYnMgO
z7fv0qIiX*z(^0d!C>KMw7~^D>qW(Nauh%JOR(&oGDl7-mxqm3(I*#I<A{C989WJAk
zGC;jBsbcCexxHa&F@(O<WN~zzshMGGIe>noWHC*G2Y+odOlwsnTP56hR_Xwl>I2y*
zP{&yblT;PSbg7!*X*s}t)V~M!v}bEaxE&z-QP3N-rRKXPHjW>MjQbWHvnD5)Z3Y{0
zommoo9(I_rnB!IKNgGvTPv{%3KxYu8Yu`DD$u1N=!h>kUnD6-MT}S22UyY1`(l^i*
zgF36x3?|_+Vd_y^x8f4%%Rfbz1wQ!Ms@-yqPqXR<fULx3qR?&sroJckg;*-;bd$of
z88V+45nAhZ+l%Xd{_JMV%F>fR!vefB6C_67aUFaSN`8;1TrZVbG=-^G?I1N_&}%;a
z627RF7ukc~B`(sw4bhgKVb<ItX9nutVrY&27+&~h-eIxUo06cfx=bM--)<)0!y$gV
zYIapzz52w>Sn!#^r&N|={^o7`h-A#@5Q*{;^{5CX8MoyOA^p}H^k`VCZ5=bpn4vTN
z_%uU)S6@N}eTRd687WCU$z_5+^nHfC`*|k&IZZ|S2HdR2&87dUZME>0*?>IUy;IZO
z79)F!TZJdFJ1oV*G|qq^QynkA?=Q%c(2x-@><9af|L$&io$n^b+n90(fxd2z?d;y#
zp>NqN@di!)aIVsB&p&9~=)rsLxUxlq3A`@GZK@5R=MCGeJT%|uWwus~{*G5%VHEou
zfY#)I6H=y>1U>agz3oUYwD~>-F@xKSkzX2ROx9K5tOVQ5Bfh$@sOX7ZoepcKb{`DJ
zVkyC(^qk!V&l27^W2gkpiVxA)Pgg%A1DnYxDlZ@b=~MIN-z+;3F`^(fWI+;L3j@>l
zPs4r#02+DJuinFRfi0&bqqEGTFs$*ktxRzu^dLo6h!y4sz`9oBOpxrBE6R67q-fGA
z+JtoWE__f@dbH>G`4ahY&f;tLad^kUwUW<e51s6vfN{1rxo_%n?ZnVPjS>Fk5bdQj
zI@V(Qr@UwJyuSYT8^UlO+NFldZvD4rV-zM)zM1=n39Wkf(BW{E1&FFASg)YJ(SD78
zku5yhrbU?oGTeD(?2_@RXDK&s(-*;YuG5D8iPSu?)Lt}mnffs@X~vvWE9v#p6xwMj
zC#ZR)HK6u$L1T_9j`#Ijx9yHC-g_M8Yw8@FWJcue%Gseg=P73oeqLY1)r4@=yr&~i
zI{zi!sI@LS&7?L-C9(Th2vVj8SQ*lQ>Id73fIFw!VBh7Tb9SKvJ=^n)_i<JqxKSyc
zOLaYTD&$I-+mx&JLjtrtkRS$F`01?;Q7FhwN%Y{`>{8ucSdxeDSG_Xn(m{1-hAyQL
zu(>hRj?Fm<RBVj(IL=df61%}cw-MJ@`{q(nhOBV#&2WV~b+fUdWh#`Jr14MCk)#l^
zo1J~`7#-fID?iZ&(V>=2A8k+zG8AR`4|m%hCZ@q5wK;h!Xs@pYSSm?=_ukfsX~61U
zsZ>1;&9U?7S!-ylrhq%Ao+bbRBEYewefJKg$<P=2-%0?UUxcs0*$Y|6uNu$6B%E9n
zbB{mnlrqbK$!e58O@-+#{h<9LXF@6i>!3UzVWeJ#K+Z}cVjL+LR7(Nw(o@PE{M_rJ
zXw>(DhTQ!;NVvvM59_wgm28(a1s<oF2dHVtnpaG$6c%?LwgB0eRs7&~o=ev+zMZm3
z?eGgkq$zpx9I87vQk{KK;2YXZHjpYEK3&!XHH;e%jUBX~BPN%wADnNyt_{;;tJiDR
zvhsYHuv#$hYGF!V<Y;EBX=O&|HrZBrqfCUsDl!02ety;6XOZF<7%2E*NyGAP*y`P#
z`;_I6@zvEh3b%twR+uZ^la-SV%a#V|lBt!zLbR^s#3sPh(;akD8Ku@F$ic-Hhxb2k
zhq<OQe=Dv`B_f>2=AtR?4Lb9Ao((iFD5BOb&b17Ol+!W_P(vD<@e4pQJ2Gcs`u|{(
zpw53=J|;7%_gasaF2?GrWL_#8nCI(0TW>3q9GzAhynt?WD>eL923n7Mpt8HlwjX)w
zUN#<?=T@&3X>~Uq!`1Z$JT~@6O&I4`k2mpTIbU0V2IDpdrF{##`n8laeY9-8l;_`I
z_uOc;+;G7@Lw#|m<}%>na<vUN^XGUt)BHiIlQ{liI!0}z`_jE@VumU%RzwhO0D-#6
zRAyseAp{7LVub}jah~fH4fuUc;e%<>KozjRNoxZSo`#4}=czYDqC8(A&lw~CwK~>o
zqwoId&|}5L;%5Ep;_ns5L{7$=a$2k(nd>M!=x~-Bb#3E?<tnkHk92dIN^41waB|R~
zXC&%+;@F;>8?Rxu<Ll;r;5IBgX*pI7Ip9Q1R4)CGZ^qJx?Ym9Q+awAxNxEUew5u<9
z@L}nabInuQ`!zd<2NXmN*?A$~n?Z5KbZ7BsA)8)hJgaMb{&s}?L-Oz*eGyD>g(ib0
zpXc-~(DFb{aw2(^&=lY%Jvoz9ch#|ERcxHxHS5L(E`jw*S?r*+L@`X>L7laAQ<*54
zCkgQ;N#S5+IpFxTXU!Pt*5QqU;yYE<zvV1u&`d+7U)9<b1YP}alGotY963%SPp659
zTNp@pnkY9BJiM;^Aqmi-5QObJD=34BPmm}OJx^)|Ucy?aUrUrk4H8}SyN6-5U)8Vz
zShz^|fnzXv?utt;knCgD+^M{0R3dw*0eMZ9LO^u=f@w3(gyS|@3gPmuBEVxc?vo+9
zst$1rqXS(ur&bcAe(Aj1q@qkSwmA!}-p;X@1Jf7q#N|Wa%Df~2+AXdQ%|)rE3UoRS
zJ~;k_7EiW$nFlYw<B%=gOHy}3$JC6zXG5p<CLOrMA*b#pC3*^xggGu=f{DL@TaRDX
zb*vLeGpkrsaBgyv?lKSC7NXFg8>Q?>s2PwQzn^aWeD9mMJc=4BqWz`TMCv}qR`D%x
zR4bUs>Q>0?u30?JSv-CNs~x|;?Ro6>aBr$xxI1e?x-Dc)kwQ_d6M%abxTcbWf>%DN
z>2^2+q8EeF-svCvnhe*Rtb81k%pc&N?$=Vu>-IHsKk#wPS{x)Ku??LB^ex^X0efGc
z7`0-d5u@e~FmBPT&aEm9+6jh&*o4{RezRb}d9$f<33KZu`*>Cp6@9cLq>G6b+HXXZ
zlN~C>^W4~GW3)68Jwj|i?K6qO*Ps<btXsS?0NyoeZIx78%$Z5tT7dCjw%%gyXx6`>
ziS<xf6)5c^Z|Zi|&aNJ#E;no)UvDDH3G*>$IqD+?d5nesfk5g*>60#q4ss0l)%PyS
zJDuqzt$$H^<(Nk%hLH22Z`KoNhn>h!pJi^<YPUrB6=byd1^!QPLUY#mhQ%2G01g!h
z0Q>*X$@~K+{^fc8FWdyTmD<*L;@&%I&NN5#4Te!vd@#u|9iyy1IKvp3Q&P^<LP7}`
z^?0IcqQg4muTNDaz9r9>xanQT=fQ_i;EK-5zvDU8O-rkK<U`>r{;h2(`WX)H#jV=*
z4zw%Nku}<b9WSq8isWN*CmMIA$s)NJ*A)fCIv9Ww`yrY9b^8i{XxQbni(9&5?6hDE
zITh0!h;bO}?Y<)Wt$D-XT8hPt`79trVf2(zjC*5QZX*WYezdQHdo~@Pi7j&^;4YZX
z44N+s$uUBd$RQ_QBxyQe0!}&(9|6^SAS3wtx|y#X1Ae)QC6nBL=I;{C1Nq<SxPLh%
zvZ3}%G*L@yU0qQlg~$VVi!A5D6F0R0n<-lt(oGrwOKxqgz7Ild>0a4AGR$*voJ(#a
zVgY=Vy#Gc)5#%FV4gT?~!*{>)X}i>Y#|07w8<gFpSnrJ+{O#-IShvOZUkP>hAC%k;
zfn%_oi>1yM=4@E&$F~@K$5lSeCqFK1ZI*41#O942<Yoa;Q{PqN-*v-#3l{V8iCx^r
zPz;O4yFCr!=ijg`jV40;MqDy7){QN1g!?~PT3QyT#=X$sxeYYpHgR1OLfISl*Rf`>
z$y2JEU>cB0@jVRBc0vfcZkHt0Ax@h>NIy{S>tv0oewGcz+%h(M$l>=>VB!8WUfdXQ
za$)GzE0Ktm@1xsLj+;4-ud}Yed0_-o0tg%R0zb4(9Z4YYj#g9s=c{C7>Tva-em5II
zQN2FA?VOl+Q$9L5F?U|9@H$&gOkuc<d=}^cGICq*YzWdvT9Zv4)_V`&UO<BmX3^V^
z@#M0jfCMw{K+HSAW}_hc`tDOUYjI`lFxUs96ygcU`+dHgGixABUN2!wQA-aIKEBIs
z0)xD|Ip>U@U+cGdIdF8f%f&zUhTbc>jHYpNzgF`640zGL_|cb$%h8w+;r8VF5~f`V
zX1Ae!QN-?0-j73C>u?OiVblW1orip!X-Q6>#`exIQt4blNjpNaTm6jmIh=0WxsKq<
z^^Do@v`BnMT5(pfAA4cn^#27zK)k;>Y`pw<A|K9<KH7uNmteC_uk6#`|0ObD{aXh9
zKgj_5UK|>qempw+IIcWCIkNU&*q5UZ+R&6{5YsHXe|mW`7>)mFq7_8pt=KIXeP<q^
z;hphlo;B_x-)n9OiP~)mGF!}IQ}C|9AftC?Js02D3@jYDW?)jK-$t^@(wKu;OW6Wk
z$1I8%Ep`(n3K=?Z0+Z{2)nkij9(XJQyNAwTAgArp{~(6*BxH>jT>zwiEU<)+TU*j`
z=-DA(C=)5k_HS6@32hz6Qt&nuvlX^3;2{3&yqj@wp1qxSWP$@Q(T!9Ns>waEATmaZ
zd%}5X$>AlquW*hu1X!iTM+X5IB)uB7C{iXSmN5$gil}LNkuuz%K{_xFS7C>TB>G1e
zUu+P3bW-x2r^YmKL5@DFSpq2!(8I5rUR{dF{>8t6SmH+S{bFbj`deGsL(K6pxbAZZ
zPUMlmX@$P`hShv_A<~(H*TXJOkJYgYpUj>3Sz3XC`S0O5i*9hr9Ax@|HExn<#>SVg
zy4{`qmraF6yL^c6CU9;IY=GtiK6%a1M+Hd^9@y78DA*gHgE-<g5X~dGr!Ep``{7Ll
zmuHtEsw-y#feR2pV+_X<P!_-)jJeoxL}8Q11D-*!6ha`wQw(Af9wj0KgDc`BiSzJ;
zoo0An<`|zj@DOfHbT^MF-ojO0(`E62+uv|O4!4FdJ|Gm_KNf(T!5l~5LPZqCf4j=n
z6b7WYA3PR2fI#byYi&vXgp)uUko8{d-Syh+RaYq0{wL6=cK_sPWIeW#fqD+!62){A
zI@tg^0cfip+S&lxVvW5T=z|T`KA^Rq*F&#e`+(NouR>dU#I;_}S^-XzK(Ez;C!2sH
z?Jw)V4>no-09Sui1O7@7Z@pRt{)&h{s0B|p0Y~C{-75U^uAu&474<X;;A><KhLTO-
zY5f|h+ke@^^}$N7fTu|SUn6%glxzY|>sKW&?!D+%Z`|eR^n9Sf#T)>yiXIMC#l8wo
zt5-#jhAMJj0}gWEtBPI>TwhN-&H?a}=zTu0Us!gWfENNY?l-_fd#FlaY+281<i7+@
zlR)iMB@l;du3r_N)K*mjV>tSn3si>3NdRvx<pRvO-vkYjQ5D2^@742~i%^26NdR9X
zi2GKZAeZ2262O-vagsQG7)McXNd&IiMQJMFda(@G+8vdq0<M?KaP9Z3)w|PEX(pg5
z%d54&-#e%(x=-V);kiH|rU0lAQgpiucDR_2;;!%?Qst2w_89OFK3{=%bvZn}xcV?0
zogZD<^APi{30QvawU<wGV3p4YAXWKnAz(iUgG5@i3D_EDp(UBZ(?}~`MtOH)TFvI*
znp?og+E0~>3Sw_LME%7;p#9ZARcS_`=c|E=S7^;4r*jCvCc^tli#(7AAsn+y8zpne
z5Ufb+=m?0r%AfNr@a7sgpdPe~K5#20FIdGEwGLs+6@ISV<e=YIXG~7^=tG}9e|}&w
z2rKE!%dYiO`|S{!G}PMcE$fNIaKj{`smI^3Aq5VDv%z^o`Jv5fyw(-O5M97CHIqHl
z+hjYem&ZnGlM0R8HGmR|op&M>Frz#<fH6uTx&+?BGfS=0kb#U2&M2wPe1QvYFl+d*
zO!p1*VfS^rgOO*?n)2Kg!P*D+uRHKJMsl=>DQ}WcA9gLb`e<&TOLU9S<RjPD60x>%
zji(rkKE;3`g;BL@N>Z!25d;s(!WV@exc4_4;v$bwP)IZ85OsYI=QAn5-yyoEfCC;)
zAfi#RP^!`aa`6uDv_<U*BbD$ro8r{(vBCm0SumU<rqxD7V#<0D;lRalU5s&1=DN5Y
z${rM`CyAIkxcI#j0275iC0wYl0w>FWNQk0**U32ILTThl=mZRQ8YQpUg0pl=*$9l?
zCY(7g7P<WJ7Acq_DqJSbYgY*@8V8Qc#X7^|VS~^7z;~J^wuCzYgqMIY&7uU+5&Z_?
zfRKNS1K;%_4ki9O35J8X2^dT>?sy&6IEfY<V(_+z9!28Bxw*kA;KUCdhzL<-gZ`NS
z4H+RyBP_q+ex^<w^H9;=>vTKcKo~GC?KI6WQ49Yq&%}u!iMl4E>Lou_b!o{{Z>y`*
z%8$KtspL$M7`jngdFlhpF2)T~I7O;L=3I0Rh6jNUN9gK}ywQM#6*d92h4{+rM=2A7
z4$LTk1{kA~XYbi8@;JyYoVzNyUG9*>ak&F3Txm?&@WRg^q;H5UE!hZ6TN$Wb2UbFD
z(jSbjWG?a3>DA!94GxHXHXOe$9EQme)8xD<%qnglm>%6U3e%g#`4bT1J9!Qp5oHfA
z&c6I*%B-KJ;=tORHK10lA0|S5m0r#Al{S&a>XB?Hi1>Ld*pnw}ZBvFyG?iVl^|Dch
zXqK0M+)_@%-@!i=2{2H6(Sk*ur&K?syiznB9JQ~g_dkGwn{`Yt!XRK9-H3c2aMqx%
zQ61SIM85pv;7a)4XQ!C|AB;x!$Od<IFuFK8v*GJ-WYB789HCg$K+)R}TPjXAh}u;m
zA)$KG{(_a{xB;1fO9cZ!|4kn9bfpUqCyskpRl3p<lR&HM;51d}<0#(Pr9<Y@&>!9F
zil=2bQF2o6+Hm7!4PTG^qyx9D{T+=7{I}~jTfe}{m6Wn|p3`l(Zy*+>1WVnrzkrl^
z{*8H3nCVw1(E#2?aa*~6GUePh+`%@Zk_c;wT{qP+_pw}$-7M;yF%JuFO*BuW@5Dn_
z#6{Yk%FY0USbegwHjf}`#gna*0jWJDNG`E$<(L*?0IBwrOI$QM`T3)eKRIN3c=9pG
z3VyjbIv*TMmS26j94tF%%^$%XaKm8hskV$I{-_mA!psY=si#7ci~ccL>pjqqv$zxT
zg)B_&yhHchRD?0eR;?S|EzWa=(@ol>{~HM1@yP)H9Us|$KfOA!j|O8hY9IUOvWQpK
ztYS5b*i?<>iZs;IA^nL>$-zRRBnRAyA0P*3Z%$6-gDOt?$mohHuhMX5s`wuD89%9U
zEJ02o%H38nyKQ)c%LJ?(Y2_dkU$vEQ{R}L3IoLv(K<>&Y93*>tn-Q<_hfAcUs-S`1
z7$dT_><#J<FSSY<^nYuvh}3q_J4c5xr2B#0RKNzc(p1#LA`$9*7jwRY{Y>HB<MpST
z1<;s{!lu3(>ZzmY2`Qv75*M#iS_gKy)6)y(v75Z5HM6Z{WC<d`l+Qs@sKVRAuxij}
za532(e`psdTuPpyBgOVgN|K^(n!QpPqF!kOz&wsC8c~elUpNdX+wAKbU29YhB`Pi_
z{53=G#R(rE$^wlO=|DO4JzmgQXfm*23)$4I2<whvPEB@}C33mnFK8;>)?$<)G#>$j
z8ww89%nw2EiGLJ=Isy2q-UGV}qeU4J90nX5FkA+@RMPb3bfmzrdq0{3D%9i{lNVr%
z*Zl`obVXJDg#KNo!s_zqZ}4C#`YIFtliGIG;yNoRS1kp5Qp`5jq5AsNdHaCr^oAU5
zB@k4@mY^~}q0Mbkc^Jzn=`1Sjy#M1!^e80r&=n=_ngjvMoI9OXQGk<qhJp~q2$hmQ
zOfu5xNP#kLQ@w2{u%uz&+9s8Y`j(nyRKL&VXz*b$8eH@TO*DSpB7$vk`?r-MFf0tR
zG6ZHhF8Jf%SLbRAFE{NZ;MuP!rg4C!u8-}_1`m}&HMA`I8vwp8pWr`duZPvW3Z1vD
z)L+$_uBJ7&w0DebQ_0{WPHArO&x*0FZ{9_&Q}B&STF<3rz6$(bC4QR1z9N1BRbD_b
z6IVw&4*Q^q%BJJvp79v0dI{P*jvC8O{3{!FPywUCakHue<eoD>obxxe%jEpNtD}Ub
zftexosdx4EEqev=m)cHAdzMbLz90Zm%*Cg(vu2g5$I6qtXU~e$9!qK`cjip-smRuy
z4h4pAbHHIpu!T?qy#p5L>r>TqW)418w<K*;vWfg#mZuW&+tMy>Du0xck6|(KSdOhk
z{<>9kCVaIorQ+WE+02Ox*>6hsd1yt^B)i~F%rUo%Y3J7>CAf%^yOb@a`0@jRDQv!%
zg81)Q1?^ZguYgR{KeW1b<yRFq&rpcnMyP6Y)HJ6~O-?=(BC*!NMhEv$tRSzx;b<=p
z(|m8{q(+KN$hGm^Q?X~c#3EgA|GH_;Mr;7lJHz`>4)dM>HcU`x&TLDFiZfMc)N@5e
zW=(vU%fCkd{jjpX)C%dI#RZqYupG&!9HzfDU-L&I;bt6MO_J#sCg0S+9zLD-f?3w9
zCGB@g+<ngtv)t>&G>nrZe-!Y5f_bD7cVZ)HW`asQZV1ILE(s6#OgQLx^O(q$ILWQL
zQyLR%h42_Q2mjVxDAgh;1e%J*;5z<cb+2>L#l_Z1E-5BhgR(cUU7TOo;3`05|2u|N
zzGg#ZJ%I{*m8G{d7@hH%8$Zy*HWU27w2f@5#7)50>-@G-g%5%xsiZ@Y08-PmlCcTl
zmTIM#FE0=b-~XqbhCd4#{2=6-_}gH(Pz;6psfS72{OeT(PQ|1Gh>8E%vujZVUY38=
zCBcb<CA3JqbQWM4k;e}9xr>@xA?(yPhHm(VhK89p0d8DX=tFlR_v21FN+3;%d(t0X
ze6Xq7CsqbDZT9QyU)z{e5Qxx+b0<sXk6a*9CrfTdufVCYO%+?yTatt#+uH`!I`N6Y
zr-<<(zNca`_M3v-U~M+x|2_99!jPRK*g>q10hvF;7&Wb{HX=!23qUCAa-79p1~~wW
z;PYC0FFtU~ej9uNHRbB=aKjLZ<AXULN5fB-taY2j#>pT|J;#9!$12vwxqc=h8;Uq(
z1F<ySfKps`AOrpVu6>(C^SA-Xjiq4LMr(<{&FGVsnuO@j!wEYCJ~t5Qn|xY*KZDoQ
z%TOSRb0q<JQQV6#CxSk7lw_d5Cw`V-v00U@jV2(qC80>FIT7WtNCL=huRKJjofXBP
zsm_dC7;*6BJc`NXcs>Er@GTBxb@gggNvdM8K|bznEWs-r)Fp-QlE~J1`_n~#cn)FM
zcnl#yx!5MjWQXfJxGH(qYLsJiiBP}Gb*EYfp`^Te5x{6_s|G9Uh+En>R&<vNZw>qv
z+|*xIEhrkt)GL)<v<`x+r@9^j`3f>9GajZCI@f3#QHS9|I%JM<g$`lW$Y6~|TAiho
zjec!ijjbdr^^BTY4({S>IR=5N8%Ok#gMiE#fMH`wZ8F3)A5^{W^I@2Ll1WZKRk-9e
z2YMSR=h)(f?Ox4lzDAuggxYn@6E0CC2qH(@kZHw(C4CoV&|EGI?raEKDV5jN4kSvI
z&5&P<@r~McF5QRuVOB3#sYRezp!dlG$`@XxmyF_xlDlOVzEpRkivd!QW+(u3F=Qee
zZMDo?*A(MQ$ry;bC=F9qw@Yd{U%_3`T|V{2oa!bO&acRr9*UG%ct=CBHY*NyV8MTd
zZDTex;V$>@@qL=`L0KmddvF2o{8)5P(S<0dwe$8yFXE|0MLvyaRM2-rwPYyd`ofhF
zrcv%8AUe8?3r@d@K)G6X8bz3eSA<qb5^o2owze!n6u2?QXL0tR`^S*J5>;hPn#eYi
zRpKynf(3SF%sA+0^aS+m)w%zrg1)v$r<zfg=JoOtohr>qmjSbTx>Q#fELZMUQdqc(
zDi>rzR)ti0z~UaI;+HKjp(E65sv8n@h+(evL>G*j%UD=r@}&97UlYVDmn*o{tpvHb
zS#9AMD|F;(z4T|*(tz+z9oQi@KcrbSE0`X!Z>$G`$mf;@AIP?$iXBNevl*?T(O7RQ
zS`}llk&UQ0VCKS=HvNiZs5(r=Z6*&#1P5tZFiI7`q8nM-hHAzt5z@?ipz%|2%r-@%
z#87t=ON+u`3q}C9+~caeP$>$C;H@Dx#N*${7F-e|1C!JTXq}7zvQyifDw}EW1#Tis
zUxUy4-2>M8rW#e@xVb&^>T|p*g3R@YCDToV-!JV;3LRtc5_8upxfg%qQ(z-5rUMRi
zC%>6t9Zp&i*U8EqxUujbd106_j?BBE$iP^QuwhM0KOFRz#`^cVwMU25x!1a__pMRU
z9z^IP7Bcsd+%MmSQVgPQ?&j`?EqbtZn>L(Oim$ioiy@VWwy6qJ*`gLb&wOVEHy)Gv
zx*GqtoPyUB_vKsu(QS=m?)pw3+DvgfqSXGrgFTL|^H1X|F!3N!pyBWUMREF>s5R%W
zyo<8&Gb#qRnd8yD@cdhjrW>SyV|P15)Kw>23ozQe<&6Tq^6+7%k(4fESn-2RvJj>S
zb%;k&>VwK{>;{HVXa;gfxV8#<FT@t)i4)vL3FwGfS?d+z{q=2AYJW^5D7ovUj*ZGk
zwgeQF-v%pGD)}o{fY~e5t7ee#Y<-!(>>{}!!lD5Nm<N2rR?|{GRWnc1dRPU+7fF!)
zph>4rI<+gwR{WIQBJB*-5wVHyo{Q??5{J&Dx%LRFL>gTrGw%<qrAW=!#~cx=FQ645
z8>Ko<ZDL|0WN^-nn$~7x-)IA<4paLJ2*PR>H59CfS_(|GxHH%x1>So^Su`A|yteTl
zU`NrSfl~)JDx<&xp1QvGn)Rub2Gf8L@FZLWc^;=1OGpjLAARc!!<$XPEyL*Gj#^t}
z%aBxL%Q4jDRgBkea)YmaV@|!X(`5^cv}mqa$|c({;o>I_K<0a53T6(Su+#xoW|}ta
zl_sNF?^OC<ZFV#m_pDb8RW!MuLMNkd0VDXQF+yq?LLPEhOLi#6+-sK6Z|TuMuAG<a
z<C2?E_AUg~@^>#lfeN#!`?siD-0bWsE6%^zE>%plR`qV3CjE;|QY)9-P_=GVkeS(I
z#ZzIFD8ko0_<46*IU=j|ByvxQlE&+lU(xkay;JOhWB#GG=PDN-v)vIJVXIZ1V)cf)
zM`c$#TlT@G3sWbFpFt$X{$Kgg#ftQ5a_Z^Xl|M|GQg=w6Ss}Xx$a(HKh>!p+8BaUP
zrp}x@PUlQv1x2EMN@on}E{$ef#HDRAvSGB)uVEQk&xKCubkuJ}mR~>^jgRt*yZT)p
zvWs?-It}0m?GJzjgV)TRdHRK3y-^%&OD5KlaJ-xZ?*~ZmR*~SXCIRf)60Bsy5$^^R
z=(+VY(6B*89S(y2N5!(&Gke`UZ^L<-?v-zM<8`vM2bRCxU8G;`n%pwD{rf%Ry_J<S
z3o3Qx%!0mOJ=5A0XRlfJgHIoa<0}nsLfl4amh3(6^=gh;jdiVVw^#TXf+Fbuw)f@V
zZ5&Bszx%HkeR+{V3Zw|=Sedf)JsN~8#uCX8l<ke<hX(=!5+<(20Fszk`P)-RAJx}j
zK+;F@cHS;6%yd^@)z#H?HuqpUb%=%}2vuecm}e@SM;RC>qj3-Y>*MjQ)_eD_K>&qJ
zm6t4Do{#~0srsufdW?Z69-OOQcwW0m4ijQR_!$@XIsUB3F6kGl36g(81DDg;g2mVl
z7bWxymVt`TEq*Nbh26jpmPcgWJXLRlQ`>cXRi(C+mF1=`u2matu7~eCuO>jdeybKd
z{`#WPgVz)nQwd0L8MP{Cg?f?Yhz+~VqK;TLh5S#_<AJ2zto=j&0saz5Gl`B2Rrfw#
zHe8l?IlK=`DXr?0Dmt4ED>g1lmNYF&`3*;)JM=$=XHKD%ur<O0#gut8{}INC+;Cjp
z3FfJonfq%#&Oi31S_0+XznY38oaY$nlg|QWCj<B6_lHO;@bs>tH;)Hi9$nTw@oK5Q
zyim*Us>#h;GFlS4aqhBN4kU)~N{dg8?6pKNLpY_NL`|D_e03|{;3;5WY>~`bhTtE(
zVp~J_=^3X7PR>nsDC?fK(fpsni?V6@S@);2lVb`wdVFyH;Y=BU1o&sP$!Xdf7dXFi
z1<qA2xpggAkKD|pWf%$i9T!p8a6?zNH?><!v#SWOta=Wq+PbTuktq9;uFcnuEOj<8
zM1JfX%%p!L8O9^Nd834dq#gL1r5?%&y<F`Slh~yM!tpK!)sm9kgd+y-ggxoCDjB4N
z%S5I5E~8Vt6i4sgwV|j!fDezpZ+FfkE)(gI<KsG1eAz@4z3G%B>ij=3B^7Y#i+|3i
zl%&GjU)>z>?c?w;)kLPp#2PRENT$`MkSB_Bd>CH3Ae-EWrl6V$Ux+UO;Ttq>sN1(u
zr)0Irim9S<%Fcn$2KS3^<Pg{oz~B!k@WxO_npn<I3DwYi9VXW3FPW#8R+~;c(0|hm
z^dyam4W~E1|1MZ4lq+dFMTgPtD2zl)#m@QJQR{r`PdWhcFY++XBI8ih0ELQ>iz(aD
zTlVh5@eju*KOKj=C)O`mxc4a6DiB}8cp*f`i%_GcLtZ<9Ev(}jcZj=~+V;%db&<WI
zVQ&Ew`LwQI<A&kaHXsJf)}Og#LMOYNDSIrXLM62V@VCImjnzelO>+RwVw8U*V-$8i
zzX7hSxN=4LLM=pGFQEnw){(q6M1(bTGU#RGlQbJ*o*I-p4g}M^kM>y(^KJ@hYq06p
zl+MQR?{zXcLq!R4qdg2&wni#iXDCvGzKxm#vILuQYxBiyIqT2HnF`%aF{o7;gI{nR
z$j4fZb51FKR?|M;2boVM9z!c|NUM*ul|-mlBe<_CWd-??$GXF}INd}G@R*aHa6$n+
zH?=LR3?Z%62>osKP)LlcZYzX>jPOg9YsEtG0;mh6A1qk6XH^FNr)%*^!G?LqtO(b&
zhXEX*>5)zL{-C47J|K)s+rP<Z3ZOoB)k@$Nb%4TWitXmMMCAcsgl#|V{Gf>jT{Ymh
zimxz1`+^G_B2Uu~bk}f5#?I?`p_A2gbuqcA!`b`&6%D!vt-VYZyVk`_sV^I932-oR
zNm1wQ)Q*585{r4azx=$5|9y{pl8>5eD7aN^EKst-SguVmBUv#NA%e}>jzs02R)$Ji
zz$hKp_j0wH*(&>lcXbtILuggCN_bzt(0hko&*lKo93ZwI65wFwscwy4_G{b8x>o3_
zeQ3o6u^sFhBhraaF6-HL-w#zqT=C9pL(jSsyhlF_=ijUha28GllwCzC^vdE|g_|qx
zs3NL7z+oJ9x`%M60q04)5cV8*EN~Fn>nyTkO9dn7tcn1jECTp83+X^4jF#w9q(}H~
zozkKE{kiVo02-)o+Ck`_1Mc0q?rsRKth@634EPfYyaj-k3$niKa_Fr+5piov+P~@u
zX|N02G+`2-VlfkdWSk$herP8>KNEq$ENSQJ)VDq3O7HfJEF~6scLhI`yo^UNZ|KdS
zem4VCM6ADRAkR^&c_J|KTHl&C)QRF&X_i%yF5dwBTPU6sWSJ`#6nq^kD9T0V&=A2>
zl%*|~^Zmz<m$TWp*d67|AtmR-Y<!Ow!~V18)93%CU;?-EkKL!cjoqhpeQ2pvgBK*g
zoG_0^_SL!YXHlVtiryqwGB@<^Y|#n!7W1YdQSFcvhkovcJPn!lQ=F2~5^ehmvf}=z
zf)NT46y-@mLOC3bIac9}qvOt2%U!g~Ul_UxvxiKLsEn-8YC8JYDzCe7Yi$|QT+gPI
z7}16ZKztD~XjSan;R-{@a#&ajs}#hqrH=K<_}0z);pzHKOI_O&g+!+Zi0FW%JxW-k
z5LLYuV|%5GI5JtZFm?)=m?0tZZkvL1x4_c4uY{p(z7%m^(YTs}+4KsuFrKZZOK&nw
zGzpHXP~%>A7x@IH7dX}0LtAzW(0nf{%A~o14q0}<AH63tRLvltH--N<Wi!CbAuNoZ
z=ulf(iA~Qbn9AsLJ_rDqAAx-Caz;n^RP@z~THLkJF+IN6D7xNap_fmRf`@D6MVe5`
z4JXXE3h68+-4dh#V1+BTx=bE^z^q#b=k0F$=X2-;98Vn`^Yi_|yLTt8?wf<7cW|i`
z_epQ6Y@kx$kY=zq8LKXP%PXG<5HeWYO7DS~w~H+uM9a7vR(bP>!7~0B9DA&2rwEJ9
z$`U8^(QVf&8Kbony#*4N@9_to-`Kr&F+eGeQRwU8og+y8Cq}HpryU*-)0rUqW=8*2
z00@7J)IEf%XR$q3clZ!rKG~>*nUVeZ%ZMC~ahpakuWZ$f-7Gc#6@6iywi6n~gX(5r
zTi_OhMfdfBz^?TMgGi>;&|;KpT&#xcy`b#l)uyDje23ZYjb%6iXc99qnn>l5%5Y&p
zoh0-i`k5z)zNXc4Hn^}gTO)f5O3`4gMXet`GKpx-+s*rZH|&H+@b+3+bt+yTd4KnI
z;rkf~cLLWW7p+yU>-3+VEz>!NP1-$qQ?r-BEsRL4Q%Uww>Vn@$RKmlk84C;tfwh4B
zx@%!|0iA0ST9{%1pU8a_4FViUAA93f?!bcO-tq!&(IB%|S#WcG85HaJ#qhowD$8mN
z@*&^ql#w<s0{=Me{16E@hIdGAg>O1Nvc?T4I4zSvg2v0>v*!qaPZ;z|>Q)e4AH6bG
zEI0^!1(?K{pM5@pI6DdcvC1T_5+kq{o_JT-wHRq{cbCYaQDzJV+1U{`1b4+8Xw0Zb
zSs7f*6#FgraW)@|Wi--qpL_@aNFjA(+I&ogxn*iz{CjYyvzESX10T|5B}t{TPR^5<
zd8fxFFE^%U&7NkDvfO0mj%v3VniXp`r`n1PrR{RC6yH^J35z0detWBVqfXMy<>S9}
z>J+Xb0`M1wQYR?U?lE2=fq`y(eBvRLl8cH2o0N++$gU|4Jy~7Z@xi5Wi2+$Cg0{!y
zD%{2pI+o>R8w9GNGOY0RHsky41pTWn9aDB~6odaMmJ6|F6lYjJ+e#3K<IShD)#X)I
z%sF|9E%KB;vwpz#18>^M#@JpmQz>gU*+I_KB3IzBSi>}6W(L8Bkj&>0#-oyt-n77c
zAf;a}pkQQGWR$sJmwf{bX&{^Iwa44u4T9!QWk8S}^!6mr9fj|S?MXA9N7=JrcS4&s
zyN*~o-x1vd^dttzS(v&>-GD~;`ip?Ljgy5(ZV<FbjSb_*)A+D9jV?Yef6OYf8ZAY*
za&@ybuI3Q8yWI)+GHUds)d*?}!cP>i^PI^*)hK@QEFhJ>VLZDWO~tN`?`8)u@8@bv
z=yr13`}>|c(pAYi45B;T^w8Yac%3z$Jws+f0Exug_%liNooLo#&Ks^0#cDY9aFw#r
z0Igxs3C|XL6n-uvJ0Tr;1|ZD*Zb(QlC$@?2Va8HML>BWH@v!Sl@#@_Iwe8dvHr0~b
z(!sO39cQ>JJy>6)!%2xvqG4a%lT)rxxb51lQ*{4%qaq$S2dT56qDvT$+@z!0n1~QB
z{hcTSHaU@;L~ucOGD9D2uT>1uC@>-x0R&|@HmuY`8NkD1-((O7+WCLMKDR5l`8L0}
z!TYV=w0YkPdsT7MBNPL~9-5TWjUl<aUxVLx&pRk^dsaQ~cWIm!mb-gZO3pA23+BUX
z?9gzz@4G(XkO&c>3+ba>hRupn28)m`K8m3uO>p2;-`y(EQA>q(+H7}kn3=02*wx-f
z!LGbz)*Djw=5_Y`*|R52OfB{Q`mWRwx2oM5-0C8HQjG5}`&_mipF>?a+ZYu4PJ2?}
ziy`;!#zCqL_(e#bJ$1HfYc{{JkvvDz_q8N6#KzIH;vwyIZ-c1zA5KqC&dxEgeMEpn
zhtQ)(HU-)*d%wP{P^#gTl42!$*1AU{Mp?qi+o8$Z!O3$L!7u(OYsT0eub5v%QJ?6s
zys4>@a%h$lFN_pi0jl=YgKrKSpv|!`Rf>vf=mu6ygjqyDF8V6a@$iU2yV8rwZAp6}
z@=G-u_!eGXQiXS3qgdR>C#QdjdVb7C)k<tMp)yi6;E_Fdj2?(sbXbKYA+5wm9drqR
zQ7uFHEY-7kx6^Bg=F9$SMvUuiY0ulme8AX$8!UPGIO20j0x}G}h~hy>3?*%E`A5xS
zHk&9>kSk58tGC$w1sVVkb*LqV#2u=5FrXw=%|(Utz|2A*xsh`bBS@wV_mf<T*Wta}
zziY*?ErB|U#Dz$rh@4rFeM`GY8$x_V_d}<xY+8LKkd`*~#+MG@xceTIT64ECa2a5^
z^9B6ax}$v4<u|m)>#dj-<;a)hR!YB@VWpmnN7?hcV5M<&msaB`PQ~F;Iv6OGjH0;T
zg^8o#<~%|adzxOuJ}^67v4&=FW{B=R=8cke=th0PrI{8u^hNRl?|bk~iv=ahMx}x$
zt&X)W7Nl+o(^!ypT6k}D&JWH%bZDk${bF9CC{<fV2iYGD+{2&KXE>VyJJLOCcTO?d
zyOT7HD!cSNq9GOaNkwYMf?e&721Q&^%DLOz`m7iYA+UN>*5*+Fgi&)KL8NjJjX3EB
z*7?@4!W9b_KY@7`U`=&aS_Q`Ohxb%y-U#3yL55^!02JNP+JwaFuN~D!gEARl+(DHd
z@TSh5cePX>9;vB<!{zgvH*fYTkP-J>mNbv|0mVedb2rr6B#TOCGFJ$LXi^EHmDB+4
ztuG|)EN$6GX)ur0RW2jg-<XMhWVZS3Z<mVRs9A~XXWi8m8X?nNE4zu)D;FTa@nPH}
zVFBV^V1UT^tQakoCGUuoV##ch%q0BFKb>d+?nI`rFXnuUcf#5@$hW2R?V&q&s-aH{
zbkmMELUMTmS<n6z1RZpjI>tCEBzWx;naadVblFJbBd6lq_QBctckP4oj>9R&ZG@B-
z>}}p#EHCoj($!krBj<J{Tey|%7yVx=?(b)J+0Le?v7H<UUA>t>XG84hzB7>h41E>J
zXrAK1D^lUoMO6sRHgyO99X~!&-W|SBxSDxpOQS<Iw71`N4^QBxaMo`92!H<jhj!<@
z;{~s_G$>ZH(>^{lHC>@ZMKJB-gYVw84=X5?j-kfs*~$6Iar=A8;q{lFQS1WaBwtCm
z$&K^=vfIC)AP~aSWjLCSimUEqK+3J8D(c+E$m|V1Vz}#q-3>TgzqrZHfbkoU@n<$#
z7FrA_VIiI#BXXZ=H_l^i{UkFD-0!wJK0U6yp-L~-ceuES^_b?Dv0bw#Uw-ji|G(1n
zCzp&fFidy;SH3{ITMBmClLlp+7eUu01GOGH?G&_Qu=v3{m>X3Ur^>0UD^l7NG>FV8
z!1x3);Ub6Kr{=*mCg_dlQ|*As1Lh2dm2vN`%S~gt)#aCJ8VBR#9k@!db&~t!L{(I%
zr|?X8jCaSqn|#sL9ql@35#nESeXk-0JeySTL_hJ0C7<Ft_|oE{w~TvKl%iz3vhhu$
z#x&>l+8jD3YV+P=v7BR*!_hb|BBsTTndV~|QW(wR*b(Z%gW#l!m?WYAo?81`*>T=|
zx8g)s+pUkdte))+Y4@GYOZ5V5U|U*c9sg>(Qt{a}D;1&kI2bMVxQi}^6gt2Jv%}Xm
z3>h-YDvJs#xZBoe1h@mK&X!*L0zOQa#%`J!<)qLXhwiv`BqF@yG;8cOcK6_X8lt}?
z{ph2AfidVEWbNg9jxT^4y3T2oFoA&vQjEr&?PJ&*jhVyj^_MHM>>dD*!>*F(fQimW
zDBQzl8f53aG{<e;Q{L^%1?GpN8)9B?_63B!fGMKxU0?&;(K_~2c15|NQ-BRMv`C)$
zva8Eo_h<Y3{a?yB<<tJ+X1?s=Ds?Bleg)PkM$cR4E{oiy<Wqc3nrISHd*(Y6xYqff
zGJ$E)3&|e3B2i6uIhw##sW*udvr<NMM`LE`OhnM=eP`V)2#j7k`T%tTw816@FziXM
zSfck!-e0(CEN7@589^#G2U4U`*kE$=-eR_bu3xM$mgqEl^DN`o_Pyn7fib*ulkprK
z#*2i<_+Zf+E_ZsD;~lt)?x-eq_MT+N-|Yj<>i0M#hD~1B$ADIxTz$4$diGuHpbe}J
z_EWg$0kxo90Gt3#gHlm=#yyIV>CJd7&VZWFQ#f>vj=%R=n=2O5vQ2}Z;&uz*;Zf1O
zSPfZ^>K%<&T7o+qB0ohxzlER8y+C8A8lrE|)Rn{5x$s_PPeb7}ecEx9I`~ARw&}J!
zA1Q|ll;VHZp+ICn;DOZlu2oF-Yg99FGQZw<k@p5SJ~%j>96%NsW*IP=85wVrghyFT
zqdXnYAT?=qA0Qq^x@C%!qMIMj`g95oVV!JD0*+3^M!B$N!+hZb+#!$@DoIBK?cZ>c
z<k<xrSySkk%D!<qQyZtRGMnB29{Nf5eE2@aF#B&k?PLItOqJ;O#{tfS9O6~-@`X=Q
z%i$9r)eoPz>Y`VXyAeKcKPvJi_Xa4_RZ;`)ZUO5=%+9E0PuCnjPTr{Gx4DA`R?#3a
z_*vn;64WXHb^5fCA1k|T{QvC78cN`xQCHFfvw&-rmP9MF@QCB7GI&w~6SSjZPtLfX
zW(c5H1%UP7^qp&s7pL{x+)DXqsxFAy_TLm}u|i&3!+pI>xMpg!{sTQTMLZ>xkacbF
zs_w;zBxcq9FeUom-4C<VKKrqK_BXu0)6lA3;JGlFRsG4g_d7a=u35~@FY$lSdIq<6
zeJ`)#9eOLbP!#H3jh4omQ@iPPu^c5oHr3+>pXJ`9cQ%IN@Yj`nKL5B|Sh**pf9cxX
ze<<$Z;~M@es~vjl@DR6iJ`z!>qV5UiN7BcKCB6@Jhy4Ag-*4dB^S33G+PA0B4lTFQ
z@466@8VY+w3@cPbcJ%hq)Bi`h`e1pp%o{oEgjno&>o95w%o6=Z8fmMmJ;%$eZ_6!{
z^H-1&5jAL$7julXM1sU#*3m8xEs>~PI8B=i_nj>93&&0tQwMyW1Amh1WU6U1{k!Au
zIU7&^m9oI~Hpwm-^)s8eRF31$aOz$>8F7%kiy2&!HQnH>_Udyl)9wU;HFh=zUSJWO
zfb@#JveBR;>#OXgbm@B*Nrpymf7z0*wF_H+GOp3pkw>pp)7`I%PBMmfRMFk<$#sv|
z;%MC}a{8_ls;9WCehU4iYP+(v{i`{C@j0rtvqGR+LIyB`LxU}7->@*~^NT&(GG6qn
zR}_&JAF8lV$n7bKGVMbxRBoO9^Yr}W^h{4e_qz|@Z>{5FNd+_m1j6b6<;ioKicUX!
zpNAOO`E&lFZr;IWe*SE4Z_k(g?S0<Ez_*{9drsLW+8ksYgf-z>PpDQSubY4Gy`aC(
z?cZh(|Gs!u_gj2IWt!seH%T~NT>~=;r}5l@<F^~@TO7_mEPA;VF(v9Q_xIpve$L8O
z@lVw+B`@ayNq~-rObLn^Zg0I&Xo=Y;u?{FsU*!FK^brG}yFpbV;jAl}A1dp=duHA2
z5dH=>rTXQ+O-eP)Kh31nJ0hw`v?J1ND^`w*x@pOh-`%K<u>vapqHDxjbdBlhpxeJ#
zEBBbrMZiWU7BYMZT$N;ev4u*jSlT`bF8~t%#T&A-6zd;oVZ$2b9qRTLmtuF2m|V&6
z^f`;X#>o$%6GK(are7>(WxIi{PKYR!fuheCQpqY>JGBIN*V~mF>FOG~xu^oqoLPh&
zTr{r4^AVB2m+hN|&;L0#S_wm{#zuxzE=@z8H(yTDmf?qVcSbF>Z>58f4%!EY7}x!*
z^)#D|F0Yn0O$S>wNl=JIlxCMw$fAUCCXY0i?0Tmw=jU3ZD1$z!{eb;)X1z*%7@)2X
z<GD-q9CJ)JUo@Wn<Ha|v<MVq2B{Od;Y;sr9^|ADXBfPx#MGY#Njd_c!7r2sq0iViS
zdz~4XuCwQVFwW(fqaM^L;3(2Cr+<SZzJ2s#`w)GU-goZV3U9snlsA?4Y=yVhoGLnj
zUjntNvcDd)3@oDZNu<mjYoS>TPN3izOD@GJ+O-nj`&pUWc^k0bMN|(e*>5v$>us=B
z))LgIh#vo7NPmg%!4utfg!7Mo;_!a3$Vml&o(GEd842BIz2^Ti!x@!(51mL2Dv3*`
zmj{Ltzs#?f`y5qjHpQIGg<f{Ia-HroqiKJ<a*e1MS9Uq0_C7Q~${EhJg<#+<aFrQ(
zo|=1*4%YY){U*@vkSwEDi=5!_po)D!Tq`lHv;36uxWsd}(6+pSK8<tjyFsEhV<cp9
zw_JzTJ?fjmFXcG`Guidt>7QzG0EW6C9UOKK+pUwsHjCY)N?T=N=oOJf6V#iBP9qi>
z;QS6VIJjlAZ{6rt3okPyqfjsqj6o%TbMe8<byGE7b*N@8l=9*tXHUIAU{jV+qv7>i
zjM=3Or9<9|hF*1t%)_R?=}b4?98w~T$cn-KAFSrJhY>_bUAG>}Qv#~YXOxd9`kEY&
z<Y*Y1hz9_4a^<)$%a?c&CgFtD!>v=97DPAjt@rOeZQm~H!pt7_w(YvZ-JUOQ8F_jO
z^IYlhDo%NHbyb{&*8lh`8RI-i5+H8>E=105Y0i{~vP+e3|504KOXW>lj|@zS4sIbk
za5A36n5{_YuYd&<(aw1D+Bud}oCtmvf(zGGKMv_n?N$ARGzy<DYsaI5Ry*uw6+xSR
zQ0h!9W$zj&_#6ey1Gv289NOXd^f*XVv`*M2gakB(*u~G88|dD_DQ6JET#3}p)`@q)
zN)qu1d5c>!5$~-MjZz*r;CQ=5Z`fOmvfgruXI8<v>d^CezQFz2;m>3Mm7R35pE-GP
zA86S*x>->Q8U9K(3yu*JXTJkt_&Xfpzwa{dh44_NfK%Mq+kH-n%?AZk>-ClOM<H_`
z)tQ=N9QDN@U+g24EbAN})%jmu7)|xkGlEfBN`J~Jd2?cr)*U3j$u1VNYq$oY748n%
z+?s?r=ohxP`+}OkU>A`a>!`1b?Pi@BCp^Wuk#KaTV@jGrhtEV!%>ahaCJ@L>0uBvx
zG>JjOM>SRO_aDSoVh?toW;ITpjQ%QHb#ie-Nc3@+{yxz~*zAG|I_HbYgY2V(mxxs`
zhtc$tHszfvSxjM>my<bEP%>&0!Ajf-RWD-a)HN@Q^=SMK(didg6{%H=dp)aKRJ+<k
zjCkmCQ~yO!|Ao3f#!5dAN<UYn;k4(-tmyS0soMBQQ1x`D`RsYLY}l#OohL7zM$3K^
zDf_J1aLfWt|1ZMX@^(yg*v+6?Gdf8Px11^6a3f3yO++iLrkIj!0Zft`-&Vz}9?npS
zgqw^~EntdED2t32Y*eI2jooH+FoR$)v0!)6s{Np9BR&x++-&Sci?gP<5ftydJ-~H;
zd<Nvht?{&^24GdBMzf?wBiX`}WD88xVr|6hG~60rj4xpJ&Jn9%;0xHRd_l@;LrUJc
z{4^6s!<IRk9WtT_jiMhdf@7(OYUNedc%hnRB1P#KkyZtl9KhC3y~UvRkPFtcrgH&}
zq*~MkIeBNQaCq0X6@hwgg}2r~$VXy^2PQn1Z}{v>O>8z!#WvARN@SQfndP@kR=1|f
z>-L|H)NeMd#VPbwwqHK?n)EXpH7byax`2c7Ml&O?^bI%v*Qz(Rvl4G_Lsg&}Jmp`m
zU>o`%G!9jlM@*#ac-RYvP&}dmCxO+FSIQyA>w&A{Vl-P7n2DF9NncT@n4FTg&n|ug
zHg-4rF<*>^H|!)B&-N(u)++AiyZoy65kN1p)qF;AZC4XA2tvweitmt1{BYFY&5pcu
z!W8X)iYeW*9C(lZQb($>pz7oqU#K*~fPk~?BlmS=te&@sEh6O-a9fn_7zpc3B^Ab>
zE$H<M1t!!ya5xKeKO}Qk!!3%G^7fjn@*u+td7=I=w=a;Lgr5A~8~<)@=ySZiEr^Yx
z+j?-pro`RAc9o@qER&8UI3dnLY@JtJeSDA<dA-C;ZyVp~LxW6&8>KYeRqjL;Z#Go6
z>SZ)>2^F5?>06x|R<bF5D~~i~1P`gE<c(g9Zmoq<)coXC_J3+|1CZ?Za?-Tc`b4<q
zl{=`!yvaKUZw}6mx^(sE(wR%9f0l^Hn0}1#f4wyAZb}-}m(~~^-!ZeOVW~2~Qdxpy
z%(>J#9$RVD%%a7R4g%~hw*S>%@0dciESXo(gGdf6|FvmT?hnrj+LSSC76@H&;yq;t
zIe;xjyiS`*%mteiC{Lt3@4>pn?v)@}KaQVrJ{<gP_Dj4D>-5FWxj8~N_VIWJPmdfU
zK4{@F^8RC{`ZBp8pI>;_(nkz=4)7Txo5W*KL$XJh8;ik}fR`p=zg_n22$$!8Hb3GT
zKtCq0Md?9)vARUtEMGX~eOH$89QIyy40UCqA6sjAsFFO{>nr<xiU>fxxY)i6X)HYn
z`HB*%txF|p`|8=_gmdk_4UTSU669pQNV#%~et*#dxN|o%rr;1^mn?D$7SSuz#kSa2
zJkt)llm=NZv6jvMqP(Lfz0ae`Y9ch%&1cVc8I0FFxoZE$$1-LuoXyyyeYU`#!0n;p
z6BfP5FzjKWq;5d;SgwTDL%2VOsC`w+5CC}zbGN{e#2ba}J04&;L??t!Mxd}=&>)G%
zz?yaT|LOODJSjjwVelyH8brNEUUE?PGmc`Ep^U-|jiw)G*Bm&CWQaTjj538Yta(JO
zO2-c-#4vER`FN-~$pu+ektX=_GC7^l<aG9FoDVK}N||Gx=AX#K!1f(}e7eG*)-<71
zh?4_C&#8BK`9+4lfOTIXFJqi+u_Xm&m+K$c0gxV&dbya5Ilzd%8SG}*-y15><J{jE
znutLF;|y(nJ;;mE0?oy~c2<nKj)Rc*lyj8JBCv~`(^4WFLJ7{f(VNW2IWOqj^YhaV
z4H)3O1q|ND@Vl@Y78wjT09-zU@}g^UA+iw$%);PfOYQ(30jQaS8NujXw%-g!NrZBv
znZt3Y5UW@E3?kW4WbNQa1L&s&%UGFpeM(HhBcUNEgm6}3vMQDtS?npU3|WnK2WbNa
ze*W<OltljY3%Kx;^CQv$D4ZCwa2Z&LkAN8*3+Adfy`;dScqU>?&_#*$jGP)(^vV`Y
z{YJa_F0X;yUwG}iKmvy`sxHQ(;>uDIe<}^N+SNqKfPv-X@D0IMv?LBq!!OY757$Fo
z2Zeyrkkr_DAO#!VdEi{YupC{E>`lx)##lD3si+rvXf1msPZN^U1jh+Vx~Q+m0R9~s
z6A&8UxY1Oq2me+!M@VS{{SrP=Ek8CERq&_JurKc5q&X=*+u6Z*c}132cFDTlntkeF
z1TMBmL%MX4`#@A#+<NdGH<vk{;P^dz)5@McdHy^DmYXTPpTKrID{kNz_zcZxP@^&C
zNX6^^$vmGT&B0K7pP9F$h+DlP0J7>|1%{H?`tv<#y+2zl_?ROn3s{!kbxxuR6~)Ny
zw-1L%I4XI7U?5LAo#_z0Ls(H9JI4OSz=e2t0~SF6Vo-fRo#P{Jfe0ss6RVTuzzB#X
zN>Xr$(4Tejn-0d%+;q0gjhKkWI>#t!OGVC5I)Lpl$(p0p0<wX@*nli(?^~{Tg*H+>
zRMTCKEyLk=DKsRNoNt3LmQ?p*Lx$T0jc{cNA<zu-KF4a8Z&&Vv$<}@Ay(5Be#9&0P
zbhg>-wI0*^gP-5EkL`$Jz-V?ITbB>VXYJO>_s2*7qkTxz5~|SCBZ-X0>#}C@y2#{p
zkv7%Jr|i$`p<dl$xtNl%kxk$Iuq3=m#a^$oOW3%}QTbfM!>pJ|06so_rv7H<Cx<7s
z8IVD^@$4+~-ehZE@dmWH2eZ6D<t{NQw2d(sVGPjFu*Ae(4p;CKO^S*uAceb;8sWhd
z9bU;YL?`s&Lr=mlGP0*ZRTK1!^yNv+NEw-wrg_JwoIhF2eVo($#$w(*+KkU=czgyz
zD80D`z)N=ahR{N;A%>BC9l(Q7aFOp|s58FKELrG-`Okewo~i<wdSLE*1B1s}u0xSH
zQQB7h5Hb{l#;eGMBhO2lEmfrt>+F`Qq$tOy6tjHgd;-n9V#;py4p<ih7(Kru;-Og8
zyD_g74q)FdHP(wtWF&U71QGNqL#k44ZEI?={-kp){_D#cJatWOQfTUwieV{SpxV9u
zRfhK`4)BBQw>GiBO92oEx>GTqYHn4*U23!2T%>1J(LGX=usv2i!Y4-S|5vnJfAD8-
znXo6f-!Xnl^gnjT_^tgdcFe5;Q0Z@L<RLOTQ%pq8f_JYVd8<-#qF@jY$|}@~+p7<}
z=T6!L?<wmtX&T%e{D+_SYt}4cVwPeWwNM``Ve#T_lBxh)l(a=?Q>3OPO%)|q5fFbk
zFF=Y-@=OuwV;u~RbgMG@RT^ZH^xXT=>&Eqp>dRcwjKz&LBd$5Z)$Of^Q7e;;<SJ!p
zb7hwk_AFJ>=jtcw0Yj=tijnUZS9?zd8_XBo(LlLlL7gHjzgF8Dom_Wk28~5-X6|fO
zlpFkn*RTl&*h58+NH$q;HWaI1vQmH;98`!c*qLcHy}+~#Fq6P9%oaD<<zn_}d6n&C
ztsmPv&ArC+o##*Xo<^WVL<w&4&G~F@tS<cgo0ZQ52@rv8#g{DHyx}6mlBt`n2VD%4
ziDEQ?>1sT#Mf#xo5rdO<s4;W7iDQj^(i8`uFCiUD$*7X!4}$_Q<lt4(>u|G02ohY!
z3Pm<_ykL}2KsUTx8uF=N>Jbu>4cQz0IFRD>0iWpU>r_piyZTv&DDkP_iL$1<e84&_
zC$<5a=na}9CmAlH5>Q43b%QxuGx(CNII_NM6{e;H3{S)ZYs5Sq_`N8ZeV>5Uk`w24
zDE2kAR>V7b#CKI(#S<UjXLtV`!WBCnv$MQM+JD6$2?Mv-(X^r10Mo#4d}hbbA%ay#
z^)&C|Z#AkIpCednH<xqrtVJLjQz#F1;@G8*gso+-lFcDe@N-Zr!k{N%v%V%~yZZUe
z9cC&~MuN>6c~pR#y94blf5S(%?|+I<RZY`RIzBTeP$IoDW*|`3Aiza(%qZf+i<y?q
zkCv5{M@jqi_^_(Pjl{>?jlw{XvD=a{-!3&Ixw>ErlImBf>><~wDmApWpX>amLq`Dl
zRPvsNHSAwyHPu6}K{DDx$FP0#iVV3q4K-OJW~;(PIC%S=3D#J?(AH4?_wv-+@*&sQ
zm(l(;WBt<_&|bfv&zFC2=c-jN3nf`HOu+QsYP{SpM~0(!@7mwP$$5Hkh6WPtyXd8=
z`pTC|A6$=-m}pVj>$^#{WBh0&E*g*~&ITYBnymk<p%VPB=T~#=2iKX@6zKc%Ny`#}
z=%KniC&Nh6QaVwUIN_TQLi@6b&Mxw?a^)gxTJ_ez^&z056I1z(V8vbQN3_ia76ubb
z_VB+HxUa@GqydaY{&fK)dXg)W4Y*dYaVtgxB*RxyyRt2z4*)P5w${Sf_U-JjQzq+p
zb(Tamjsd2h^C7@t0n3BQ;YQbNqEuJz@@V$UhO}tQm~X8$bjm1qDEX2Im$<K$(c*e3
z#<mF|VDn3nwe2vCm9Kped%Iay`-vU#mc21$8th$Qj>w)0W5!wkMr2blpNEU0Y){$g
z!2}qiG?#VqfY3>F$<EfV{f4?nf)`FmNSMS5Fq#MSl3t-*tatcq61~C+c`3bF@F}GL
z)nbv|oibR-ZZe+L?JWMC+%sP430$o{JD}^0ftf{0G9x(iRXv?~I5`OhMu*3bYJH-9
z5q?1ZTTPM2T9zw=y$F!&V`U2LbK{;K&zAXqreh*z91}6)n23)1Dk1~&Zn83JhuFO-
zOpw^c<-Dnhu1RZTw-e+o3sfWO@=HdttEuh*s;H?jx&ufc)7ez{D+pRtR|EtoIdj)n
zo>xdurTCVRoNV8~)%9#KSm%$V0Yi)I#bB#W{XuFsW3LFu0Czhx`IsrWDAn=$FkMY9
zaK>j$<j{M-I@L;0PKGMB^`=}c3Y*9uL`-#nNC}+|eiE^E3A<Ia-MjfUt<go|&d9!X
zT=Mj@CLT}P!_QafyI8iy8&79MGOl#mELoj7MSOlM30}gmY1;E}-*|Q&=Q*XcgW(C@
z1dc+PHR(a%ImJ=I#A|sFJczol9=v;Z@>BQ2ap&MoyNm2@>z}TVL?ker8sOW5<HOF|
zgCE-6HwQ=WKAZ_l)F4wxr*&}LZM{2cAD=s^Lj3inK*VL;=^h?+IG2Q-LzgJPl7!p#
zZQHhO+qP}qwr$(CZQHhOd+wZBy~WHd>YVxoS(O<P`SGtunJ)a>?qn8HNx?)s;v?I>
zuOtu6SauuhwB}IBfsq!QLh84r9|U%7lzpBmp2Ubt=JqD|`4&fl=xLI6!i-Sh*V!V)
zh~U3I@NPd&2mqt$7eyh#CLT_ljS=6ARo@y27Ph3fHlY`Xvgb#E6cc#>&7ZxTr9qa2
zTVAy}ND{KQfL>j<9`01^{W`cvd)-C%xQw)5z8{!JH|Db{KO0`fx&h;(+)m9Lk_rl=
zk7miP4||Q^4uz8IOtDPSK4D<+fEKj<cCz=ihog|i3^e|dE*^v<Z>EXJii^*;g~xS`
z{zByp-&=LQ*+FhRGo5f~z9$dDBw59K(ES6BYc+Z{Z)|9T3+<C27<CO4$S*)O@-7@|
zE@Gv2{j;WZM7j);J9Tlx(xft$Aw7&Qq&|q4o2Xl-XDc@nyXPK$FR(=DUaAY&YQ=6$
zVjx*QT-Wf2&B2CT0mVy{S%Dy=Olj*;NDhgqeea_O0lG>dA+y6#9~QTi_nrZ4TB<Rz
zS$+N^YrP9?oE-ZV<Bt#u%_NVQ$qkA1$S$X1@Mag5yFipQsB<VUiBN|a5Ux77_lSed
zzF9|ZL|WX@Fmezw9b#&y=&N9{In<A7kBw1z8z|vTl6~V{@8O9?CW!SWOZ>d41*^EK
zwL`?RNUG5LS;-mSQl4C(bGJv1UZR<xg3>Tvf@7#v`?BF><)=gE8pH{l!DiL(JpuFz
zahvMn9hxXrTQglvYN^C1rMxB6!%HBAY&kpI3q@tYM_4voP1$Aa<FtKDU6R7@B!UXJ
zm?X*)$uTm5G_)nbpWyh5d88}j=w~T=x8X%ht!c^})Q;0y!;1MmaUF0P17y{5TS+~e
z07|05_1a{2yDEmekHe@1wwx<-t7Uoh*>cgtA8Vh(xVPtk^b4FCn5!6GmSe4dW73=g
zHy4C5(aawpctD3RRUMS)uW6X~XBZxc1uv%>RqqfLjv>zfu}7rWnkc1cUEE38qTet2
zIBDI_Z6<EfyQo5U2q;AXz%^JgIaRb#qqF*9-u0h7txEbg@5D0M{B|$CQK{`Soc0c3
z!347uvW#h>19*wU^iI51v$*7g(dIaJ0jVuC_-xl~r3DHZ2uH?iCRM3vSEdONNtZEg
zOee3t1#F#{G*-FP3{w}T7cwzm`V*S9?=O*~1*z_R_wymrBsoTbdJq?W9i4%caE!uY
zoJ##khWO>maGZ!D05vdN9>9F&pC|@%V%#{tHIybw+Z^XEw!5P1bluZo+7M5G>fS-m
zIwT!5f-!Sq#a<X{uoaT#2Z<bZd`%Upfc5ec6;+O`qsHAz`*w+N*9XmJ?+;VR;!U+b
z6X?Xf6iRJjXWLWzrs5z-?wGhv;O?C$0QriRF+&>H)lETmOf(yFj2*uj`MaS>$fqgl
zZ4-%~SUHB+$f`DmCse6WD)0e?6C6G*VVE;O!9japg#wrU*-o7-V`!n7W$l!?wpnM1
z^6hk;hz)!1!jA-OZ{@VV=kyDsH}=^izWvv~zqOQ$xR0NQ6B0>WPE2~vm_;{+eqp;_
znoxy31OjFzNclqjU5*0pC>N5pUEf2F_*Sk-JxH~7`YjPa*@bL(v_M@F=Q?VNTb(gS
z`Pm$Zp!Pt|j6S*O#*J(lUK?eQnKJ7g_}o!{-{U4N3t?Ea{;3Q<dZ$MZn-uuwA^J4E
zZESS1OW&%qEpLG8DU$l5Qm=)3FFgWV8+}<=gy~N3jPQ#XF`8@OlWC^vb4F^U>6|w)
zZo5++pJXK>CYq_>2ZKrhNotn>-50twVyURZymkxarvwhkE9%!9hgkXd=NiABK{RRm
zp(5jbXU9>k0vvd9JK8zWjd=rBgg|WK)CwX~qeNA~<65=Q1pgi>2#c=%%&5OOUb&o}
zd<`>4qbcAza8Tczwb2|C%vo=c-HHdc)GT`WzT-}HzUb-)nd1evw^!1vDpsDqm?ZLf
z(_8>XpHa`+jT2-G+yarqcGwz&2J@VZkpo%7vx$KP>$x0#t%jzNG3_!|Y+y}Y0-6K%
zMiE^07AxGa-HXojuoG=@cJ$gY(G+8u+TqsttzSy4lXr==*O8^#0mVa*FA>T}W8^tW
zHF9U0#f2&bS`rHDg*JbW3c5*ya!u*c3*NveTd%wh<#mi&UFf!tKV#C`Ec6}ekY3J-
zByyF}zKzw?OsrGGtQ}pUW6=;!3_E<Le5-UPiB$&v(a};Lxym;j=t6D-5-#+y+)c@v
zDlEy0vyj^8ilamXS+%c@=1<ne*=q&^Ke;)@6=zoYlU|9p5$TufOL){wc#>BEoXni)
zd!nn9pk@I!wmEwmRG8;K!ZI`VV%J196flJ;>2$w2<2bl;3yfNlkU0mI(m#BV7{Sq}
z<b0mF#KIf5tzpen8`pIs-lp01%J{uQr;9CxWW!FbMaE3_XQK2X%J4l5%NB5vNDZZx
zx5L^x9Nlf0sW}&|f1iUl<kp}%aXmfWbv^&2hSSVq==mXY91(9>@aW0lS~-R`Z3XSR
z=w!*t`58JwwbK%Z9q{ku^k<0n@*f^7;5QMtQ<HGWF4nSV6W*1A5@g#2FSS7zOHZ&q
zE0|>+e(UPasQ~A*Q8N3GUS^XOYyuKgorPb)dJgfUB!9O~mk3fqJ7rXD@O+957F@bq
z`B2SLV?cA7nK@CVmYZ9>Y16Z4{wa!X?**J#TG!7SqQMN?GW8T1KDT>sSD^{2>Ky?q
za+E=thEKm@2j`Li=)&U1^?ernGucHfJ8U;%*z{_a`lzPAODQCVQMQQ}AqJ7#E_)~f
z+pa*uQmr+bJ3<C86~#mcBSM7WcA2<cR=L@YbdlYKyEB)dI8G}~kBj~5_w)C!$(o8L
zhc?M9B1vM*3JHEpakA=nZ<o-DVqJnvi6N_1{bvb7^k=EF$s8Kskfzd(FN9)3#vfbR
zFx&~_Et}VPa-FyEjn~)j#(9Ddm6Z?12+!#3SJ?6{<iF4yz~6H}WIb1|F+F@E)R$}Y
zY+!z!_8_bsVxfFmQoj&WOrT1ULcGo!5I1|<ujEMeox>K7Rg#(Nkp-L95C`A;OnB1r
zjow=W5e{J{gDPYZO7+{8+l~)Cd<q&^*zRwxwTJ;jue;nbu+Y7%8QUj~r}r6OHZs>{
z(WVWoUQXaeZD4R68CH~rg0&%~UUpM7mCoBlnGo7V@ZCT+MhLTn8R8ff+An2>X^hM-
z%W@c)REI}}EIP=nVx~le9@y)!`aguGoGNnnno3xRY1T>Jnd#@eKX<r0+<%YQp(egR
zC(l;<dc=_PPCAxQQ=f2T6)p<FtrDszDoM(5pN^bmS5$TZqfs^c>i}JWRW}S`!`*J1
zW}lO#;zRz17{63~;?k+oOq+UIJ1oyR9N`1WjEESlV@)VQ?9NliY+J7$reQck_1ZF>
zt;J8Pfh5uQ@~{J&qEgKDb4Y_>>+j}f;biy1)<9#0bt@_T8IvXyi`fzC$t4>&JhTlI
z+R=6BIdi^98q_j*ufaM!5+&|!{b?E1Seb0_jx0*LYHWXz3;^>UVVZXmrEc7WdE7fl
zF=CRpd7Us#8g6c`X#!kvRf&R*i5Ya2#6&_BYuq5vYsv;mg(w+QrpHIUg2)I0qr^5g
z(^tGWD6$YD2WM0{*$j|?fJlW<S0G?7NXkB_VE|Dz*_d@<l%IbIvoQjCmmVm41;l#J
z;1auf=^y??gQGe4ED$+IeFzp;ZM3<X`Qq%Y$9u+dsnCgVf<i>&TP~_5NtDG$ay0(N
z6>}lPPQhFH>nS|gl-@+^LIH?{mMJa;#H$bGm`P45d~2*7Z)j>b9+tq{mvu9lwq?UR
z;8k{Jt7q$D1A!x_%ARP6#Z-!+LqZI2Z};-oGy|Fr?FM;$EJ#yO5;G*Hca(j`645-5
z^6uI2%w%(m4tHLmg0{4ygt!eE0ES}fBPU0=0|QbnoMvb+PL-LXmcC@2__R(Jt=m6>
zBLVzh>WePqO?l~ThXel4FN<>-cNj7r2&k0?sA!E#z-vreb3h}X(vHiJEg&?}_h_TO
z%9(Y8<WZ8sPg2xVU*n{RosUc53@B`<bC=}2SvA3PJ51gN4ID=TMXosGykn6%DK7+$
z2&I@tONJprBdExRW3kD~4Xl$A@a%H8D_uKec0;}ffuAl4K-%Dy$<-AU4lv%^eBnL_
zRb}4xm97*+LPg^aEW@&<$!$;GI_4~;)L89i^<b-wYs3Ed!7GpZE{FZ2CV+;#xrsd_
zZGT28LQ((D(-YRLdbX0ld2AFv6?-a)ZkuwN4kMKZ<c8#rh;^U^^o<23ON*5{RIf&%
zzw6}_$k|F}V&g0L=?uPMsJ3(2a#*9>iE}A#5WQ3_<y-4>%l1cp#D>Ij$R`vsz{l5N
ze`leP-PCOi=c&W<NQ@DO)vu_<{y03H-7U$x-S|r{$!2kajVFH#M+K%llYUt|*J0L*
zBtF;ee94e!$>_z!Tuu^^2=JkOUWSc|A=+d;<thJZk`%k2#>vcB*%w_8%;fLP0~L|N
zZ!7&S;aYakyDdnAr9w;s;#k)i_HIW%2hz6vK)eX&omdEw6K9;Ud!-nml-2YgU8XQ0
zkr}Y_fv`fbj59pMLTOb)<K^;}rK$qebP2Pvs=Hf*BdWkSe%=v+j6au|6SEwFQM>@}
z?6^XPzW&tgeZnAv)^A>IkkeIgecPlm<7<H8d@T7TXZYC6Kf{F+;{83LX&&S1BjKvy
zDYp@9M2F}LCT2r%N@0Hw6D#cXnSClWP}R3P#1fEu#XkWbQ-03Ol#zpU9aSwD?6q;j
zx;d-X?;;H$$Ym%m=Y|fG5YDl~>u4iQUQBT~&1Mn<crf%9UGipBDauAG6A5!`eh!|d
zFOaOG+Ru<GBJ?<u;l6(D8;1lpBoYMZk7x}!-jX97F>|h?YghV=IAfr6NhfNsW475n
zEZvV-OgOnHcko~09f{A6%DH{|yAa%e%3IHihodXzr{s%7z|G&3SO`7}{lXXo$m=rG
zdo)>s)<RUy&CSvLFcSh(BvgBWUiN3;jnJ1nW#Mz19%1?6ln{XKGY<c^E&Fz%7%v{6
zo|;{yZ27j@o6-sDsyeBgS#r!$OCrX041FB?0tG`>>=Wqi!jqny2x3Vu!ct!RG<sQZ
zDoBKxA4`i*qQUk|5$1;l3_?~;xQO979gl|F0JR3Ysc|17eu4>WI%kYd6RtwQJxb^D
z-lfW&en<%;*n&t|tXiA<e?&pCj4}m<D#s9Ez%g&h0vQhv3&NHlO9F+|fy<FTOX3o`
zb$@E)<Fz}mG)>a(mNkiOwpzWg*mfO=Z3^w5dB)D6`D!RlS>}M<8K4(U8RRSbD+Do_
zK71n%*?{YX)!<G6*`{*mZsP^m<%t*SdT(HF3G_JyX-E}`>SUwOz*hFN$be_{O6^t9
zwiRuNOek|*kRG*@sqKuHwlWz0&22!cL>nSeF(Youbw5ip?!ZV8%|PJ9pzh`a`m$dI
z#-<~+pmJUmMfQ0-n<rFvydWn9gqHUcjKhM$d2E&VX+aFm26mZ2dc48mv@x*K#*!(J
zl$Q#YQsyXg<*uW#K7I;jdMFBBGz?m9@5p`fZg)FCxpp;7$NPK@_^IiWNfEw|1PoPH
zS?~l3DbgP%zt)D;+J;i3hCp1#r&6kO@>}b)#8Icls3k~4;s+p8oWwPuq3suvJs`eg
zD>ucfp)-S|nW<Lnlz~fyf8!%eO*|SX6EN3Y5JI}GK-<K7=}L8;sT-d%AtR^@)O(Bs
zt`1`Ozt$y(iF>jjytMP?!U;SI)Je(<L++T>PM$IIh?QG6Qy#e|nuc?G#GB0Bsus@V
z-(~5MUi0%F6Qs0AJX2X0%Vrni_b@5XN=nFPReP?(kVs!qEHKwdF;^n9ca0ee_$_Mv
z*)zQT)rJfmT}vM@Xu`J#K#k)FSVjxu|6q9YF8(2xiP$KYg@%G`2?%gk8$Xs)M3db@
zIR#)UT8ho0)0?&NMUE3n8j2hnd7KND+RvKdd*L%Xu2i&3=T#}2S#$Q@_1Vr!JnFnf
zng=(2J(2)xze&2B7qHaYHXbFC4zD|`)*u*)KYemYJkGZ3BvS2VJ4=hgN(ZVS%5srh
zY3)6&6dsD@xte*WFG^d}tiu2HY{SS%*NGM0SYUl*j+|Vr;Fem7!I(w<6a4$~VI?x`
zL%nHLczz&%C)Bvid%*UtrSfro5*)kZ%=3CNMX8ism!BxwI5wa$=2N{>$WT5CJQ=XI
z%-vvaCoIxZbQFBE<X(v|fW5+l_0W0~*JPS&ihX<bVD+jj29mN5GkXPBPQvpua?m4)
zJk6DQwmp$mSzcEe;ad^A=7c5Zp@9G-#Tqo+KZ|USP&0Y~fYiwSY5#ROZ}rX*5!jA5
zpgbeOwOqU8T}=anAlSi{D)<!Em7c4v8Svf?ZoK>8vkQVOP(;V@^Ssm7EZJCDb9xz^
z4(YX2!*wMbw8+$}-5F0Gy>Vzm{j<hSzE6A`lzy|Dui(|TmtUvWpHM1A4=J%InqsAP
z^MJ_EeXpse&QGS}D%!=REUK$L*uPXoNZ3+<yZDR-WM{%-e4BMx6?`3m_VC}ze>_az
z8tpFfRV*VA^$~9Pz4(!0JZ(lLP_Tooh^!%>87UYdbyqwb7?$PnU|lSCLTOy+lE_>6
z9dm8L-uXjHe=~U|FlX76Xn>zMr#*0DFz2~p5HfyOV#yFNr7IKaFY#xKN3)VO3boW_
z_@ev+zchEx8sTD_nP@l66GZCZ7WXvr3;~+QyGq*5^dl?+>V2GP<Dt`F2cOxRTL$={
zT66x{+u92KfXnYWgJBOvM^~g$c-Jj-TCY0%xFBo1{|Vk!_7r<Gfl$(VK0(KD=~0)o
zO0oCebaZ3=CBE~k{1y6^YX%_7ysD2!mP*PR^>#XuG5XI5H9!$p_m|gKe(%%?GL*hZ
zsZcA8`{w<mK7lHDVcgmoDhL*9Pw&S-J{J1KL$r+JdGp{SCy@W>*AaUNkbEHFg}1vM
zLg5NbUGt7)${VUXW>bpSm%{SjS;;<4wYVl?d;@p|dxA|Bv05CN5x&3q-*U`TS3OpE
zzP>-G7k`gDo)j>W{*~qa*Ko8-nl;|~{4}_$E<ymhXMl8Cd0&R{Wo0H7%PK<{=4`wZ
z<l`i^EW$sSEuo)&ugb@;9k-V>6>ce8G?yv;*dE4L2h}E*SGlF9WI7^kAYRdjDU0cE
z^~+u9q<5$t8Cu+YnYgMD+AC^c(UZtgbL_Tew`O>c)-_+G04ym<Rd)4JGOj#Y^H-KR
zIsyWbI6P@u`%{wuz&8M3=}q)NxdMO&7J{HQlxPCLC`gE+`V7eVi%`?v#{XVl?Lu+@
zY&O~ksqk;)Z$oL8Z9yQ3?Z52rhnz=ws2uRT30zHGu(={4$_BI<{RHve$*>uPHG6$l
z&O^rV3=%~;4a#a36!FP&A@A&NH_0w5;xcaJp!_&=VQC`_ooxo0sHm=$n=g#FbR^_@
zO;%lz>eO&(MO92jIJ9DFYOT`CT_7sdX!c=y+lVOU=;uB18jw&z1NEF3I8SS@hQgAc
zSZFX=eBC017}Ysh_<JRA!qB@{Ci+Fzwo`mtZOJ|cnd73#%_7S-iM{UBrF#&C1hqLE
z4>74t<PX9J#2Et$AJeot9nUKLxL0;T?@$=68sJ^=M2&6%Sn*PD<<msqZEIK~7Ij`^
z#Iq1o5Q>g@SJ*0L)SVhnC7=>J5&`yJ&f>KUdJm%`woF*CVFEu;B(`S^{p`sanO*1R
z`gFx_w{%C#TUQPFYf^vqg6NtaGCvqFz5;C9U><yh;P<8*J4omJe$o5C*Hb&b;l4}<
zY5eTEkfu)-^I*CjrFcAXQ~theQ9U1tKtS(!6z8yH2vE3_NdZdw@=>Lj$>p$OZrgF^
zrQVtN>m{&ccwR;1l$G+OuEKYmubkrgme<+aOC(c;u9X)8rh!Ej+Pf({IrmDB51Nk)
z6d8A-P^7(zDA?6`(yw)k7A4?b<NDB*UrjqB^PfB41}|m<1vt@`YL9}MyN2@f0hr6!
zH2<|`X-RF%zT7Y}mMBU?8+IYQ*Wsu$-YXP%fChQ{*CFbdBVnMw$tA^QI1-II3eaQf
zDH>%|2z*-@RfNwZ?2dOZ$P@++i0I}&u1R4G<&W>w7fP{HI>@~fW_jp<;2QXDzPoHg
zi!x$}8<~~Kl^%ht?lKa>lLn>{K>ZXXRG}iL4bF|*wXq5eXP0z5Uj=>fZQO3$T74X+
zbP+LfKd{I$k7qO6R7m)#o~|Z%C>BrPPy4Qavc!4Yg!j+-S_nhYo1bP`4XJ@~qR{%I
z#ZzT*5b|>8bdY$)m;d{qxan2kCX4L!qSHWs284WYP}ZsV69U#=-Ag8UGULn~1Z{Y+
zPRjHakX=8PQn#xD>c_zO*4TgatT81!ccoa0IRc;OS3}+wxcm`wDSRI&pEl5_z}=6w
z%WB!zX>vU<FNIs%pe&ml5$nMYh?a8lRP75jD_kb$Skv(U<*;STo8ADEOoxmt+;lC?
zNX3OLe(k<DNhct_6mQoq!za0rc^x|IM<fVYimiTwJinr3rx_w0F0pYl5{s&WQM-!g
zHS2-ufV$lh8ptkZNlZ$!dBe)3w_7b#*~~0llyzgoI%=K+SlH<REO3HYQ(@LY5<~YQ
z_b=8h<Cm0oJ!M%Osb=T$zcy$Cr9PMj&w(@KZ1Rurfwj^^N{NJFF|@YcJ47Dpr-asa
zQHS!82m7f5az7r$4V8s)!u07}u0VFAg4;5vT8y?2qdj+S$r+>#9Wi0`gHX1h5hgz@
zs*H7LA?M1G;X8>W(Mh}S!G???u3}BLBi_4-s@+gsmYKgKp8#^|qtryYAKP@=5E=S?
zw6hNJ;W{FDSUW%!X7p|!^-+W-*IuNy<5}cC(yFhQ;iJH=J1_n&?)}`{9jL?i`Q>rC
zgg~PH*x#nG$L^C<HFgSA)%j~f#_MUa@l;&unr6a-`iODqaJVXYRlH~hyKviRF8Rx}
zajMRS(phs6sWQ^PK8}EwHIhF!?)Do!`VV>jdQc+OKf{gP^vhTn7F6cOz$VOzLzuwA
zPHD)FaXs|1U$(bIWIcqIMbx$5Q4#iM)sj{2D&yUeakVo9DeMg4<SLVX`r+Ksp)i{$
zoFng(r1D9fkjumujO0}cdtL4P59%iXIvp%QS)Dk+tk`)nw^U*X603DC=Cqd!LrAz_
zcYC%JLwv{bn1!^C)mMj#&+{O^Q<-ZXbvp;R#Ca`hk@J%73#HkV`T4jQ#~Ws<Xd$>Z
z1#W4F{&{YY6-z<GrdE?RVa~>@IY_AM=xSLKBQ0rtJla5TEKaL2J2!}F<PGI%@eau1
zc73KK3`6s&F4z|^R?0q~=+Ss7*PyF{ZJg4PQQabo^!Rhpx`<+IZzs>eD(FWCOun7-
zki+{^bWSmq3l8wS_;&OvLLI-giEuC24BY{}@tqhAAzzO71g(NfeOfhbtv%1700<zk
zwVyA}Ic}jAP;ZSvykER=D6+l@8&_661@6NWghu<FeM-!(yjb<j>GqWu*k$@GOIiQb
zVp5$n3DLuSj3Zm)g_iZz@f6Ammjm4}FMT}jeu}6pBV(T_g8J|b+n3K1rBwz?p5Baw
zA&177tY=kHdhxK{?A%57S06QV=^4a$;fB>;@%-#+ew5iK6%C+Tv-rhq+#)WXHm6eX
z){7>?u0`*cG`rT-F1wo*yY5#>&zjwjmSNLj8haUO=Z`F0{6(qSfxM;xgVIB_JlPcG
ze4J@C9-5C~$owq_TlcLFxlz+fMfmAAK-sGlODJCmfkrjt85ncG6SSX>CdQsz6z0zK
zdy%@t>v4=44y!6HvQkPI%T?keV|@cku$#j|G4wo)WhPHu#gROIA>=zk==h?5(XK%w
zQ`5^&L{qtbebD!S0S!XB!goNKI{86sqv3^0^4VkI5Ekf2h6Lp!wKwlztEQWRMD-oe
z9nGhQ0eEK9HXL%ye1DN%kQ(ClLC&S1-?z|9yJu@ju&|e^rZ?b9XchbLyiut1wp*a|
ze{0dD$C`9vPf`K}Xc1|%8bzAJx|b2-32z+fxE+x@9On9b4*j3q^+7&OUa+F1XNi9f
z@}CWb7QL0XXdRPyp5^i~BIcRx-npMvlg+;73sd{iI$rQ|iW}(XN3&O<Q*KQv&<OA~
zP)oH_ZHOmCZNK1Eyq!ceBWo|_QK+E74N;PTB5zG2<YeI(S(6PO-k=!PunPt!i^gR}
z^N9)Ih+GM_=~rkOBnPh?qt=q_^a=6)UfKzz=QqZ)h%kstuMXuKq^mIS;Cme>wBQ$T
zf*l2iC>O1H)juH%5?|AHAS)dUGGtz)KF_$pq<@6J-Sm5w;`OWXm3+?2b6p$4K;i@t
zx9~gPYCM=Im*g<c7uf>~c~TaX-M~&nO^F}33}K9rclt!9%0k}Q$&XP-kLiX5=Z%Qc
zL_U<eiXhf5iwD0I145h#Q4_h8$0KV^kctOO^YK{qTI4pzYT0ysih&2XM|Ly6Rq0ji
zNMVnJ&TU2mP!4W;f~v&axoh|W{<zJBZBhX;oTXrnZ0N4XS6?H4vyeF@Nl+vO{~cNC
zF9u9O4r4KLpZS)tVV@0AX6dS~UI4AXEB1v7pd0EZi@ND_<p-%g2pa%+1AKl<D54M6
zNe2m!A6kf%5;X&4%5lfGM}p)8c)*2$KW09{hzLNEdcR-UXG)VmWQUdpJDM(+4FQn|
zxoNVg!-%;R_ICKwjj0es>}|5HyXEIHQm7r=>-aqmsm_OyMx0{FEv}L;Tk*DvAmU+(
z{TI1bomN-cPPl31IE_SIRx5ra@{+l<K}mrs4*yjYU2OwhudS7HSD5UDHAe(u60#rr
z7{@^>T$#AIw0DvziuQCexJ|Y6EfYfV8nnX>i4uUDw^17+z+{k0+`2cxR(tTS=_qja
zroAM1KwJHO6jx<XvbK@O@SGuWa__OWe5(4->Qz|NJ{a@Q1G*YCU8XzkY8UHA<#_m<
z&9B$TO__^xO;Sxm#LZQuTK)^0YpA@;5F>?(rCcmNSRY=DaSbR3>V8tm7)|WQBn-;u
zI(uoIo>Et1<`6fwMU-H+1@ws=XXao9{W<FwF{Y5qGPVre;F%=6^#sA!X0isU1?n1X
zZXo5Kh1^`6=9$)okk@Rla>n`!bQE_8;fKI$(^0b1YwrcvXgZG6Xd_oUlXq-}ixFvm
ztCt>8O$oLo;fT65g=}fElC2BOW=V{p0-0P;8Bh0gX(&>x+5o@$2NR6_;4<bj7Bdhn
zE;ULA^=1pk5a@YSnVGug=#4AGHCjcS9a=QDve9UC&v(pC<Ar)jnal-1ld>fo8)=1n
zrL4&+%hI+d98OSxmW2`27vj}%EiYSHoLvWx&}P56kw5P2OFWZd?mDpo+HrMjz7l3K
z<;Z}?JytaoniRb;c8sA#r(wajJ>M(w-;o98A`Qu=?JGKXO?w-4;+S2SomJg7!p1#c
z>6Ce4(^RvKf5Z!k5*V5tEg7yi>gm5s!Z=B^PmG+a@9!yTqiIEIJ^L7+t)r~-leG03
z4#HPKX3eDv!}>%LghhLa$?W(gU>HPM6qgI>2bby?W!?Trn~;!*pd>eWEmj`2mh1*6
z2S+Uq*efU%7MDqURgm8{w?b@c){VDB#)Y4g7=O{(+eeppga~lBoBVTf=DW&Zn#!vE
zaprhhj{NFqPp0QrYsIv!<3pJjP{H$Y!2Cv`nckOb^_?HK#*azQDClRx)SJ$0i+q=c
zN)GOKG^o*ZH`At_Q^NRBn*9NO3;SJzG88s1pvaB@>dyu~t;5V3bg>r))BsiNOpXgh
z7Zy`0Gu#*ogg5IW3GPUuw~WBZrJy&$n?mDrW3N_`nfc2*L)Jw~JZ-RvCVi}rZL#!F
zfdALuD6n^)i#}jdA$neTl9LPuHgiF=3Z%Q$^-#aH0^4bgY@;@+PJLKlzM(^WUyn(o
zl0pOX#g}Sx9CO}^;YYC{B&*4l+e7t2WH2<B(1^Sp6Zk@#Mmf6{&zojC>$E(i<rFAv
zC0{=I+8pQav291F<-z5;5YMK|Md1a1@WLYvV(&_o(bUoGue?A_p0wr`$<oGT-<~}3
zVNq2rjG+M|>MN6I!@Em$ba&!zU+~^PYHOh$6ZDnIGE_yNg21ubg(YS^LZoKGv!7-R
z1^HK3Yo2*VQpLEbeBY8J#35pQkk_jtT67+6J=(-i{(C8m)Ak&zA$tfdP!+|yB7au8
zWL*hy5!@Y}3<|B=uul@!jlkv6TeRerfDGbN?Q1XTBw5HXs{Hu1SVbDKfjRr1Yxvrg
z+Q=Ogm)1%bo~BfT0~3|qObn+If>?R<YCg%@@RX26l-6=!Lk)EcoDrLYL4`Xc+VbTB
zZ(@D;M#kRGHh0x!m+adL2xFXhd}t7s&9asUb<IZhd9@{u<G-`(=R%MMCRWzfEPC)&
z<V;C$wG`HY5zI0y`x!+@^DqZ*a~JW=QG3T-@U9dhF=)ZqhACdfRh6m8Ob8W%*NR2Z
z6yGVD#q35%&H`oR-EiXG<^>*Vy%@|lW}e6nFxuTgi#>@~Yib9TZQs)F*D2rc>pN`g
zFJ{FZ3L0tSv^$coC?7>FS!Ky}Dz<6SrPA~DDm2k^)a?2dFjI$5!+~Z1-3dA~KTKA}
zpZhsp8nphqj&nMGaF%(M8E&8vxVh0|j>53l+tee&lzMIR%TEF;oO!Q34k2T7+lBU8
z%`@);m!UV~nV2&4V5jR7E#(y&7Tt9vAjoOzn3XFoobi=I-iM@5n4nh^E~|b+pUTl0
z(Odw$btLyU^q{8m<+6^a85ghSR+ZK%y+bD%NM!TQT<1x(^v|bdc}`FzDTO6;wPSr6
zCtMkD>^CqTSlV0mm_$u2Ytu8e<i->~<PFEA8mxLWCyj)3FA8tf)YodD-q{p~W|n9~
z^L<%}Vgc{l%FgrQ(E>sz*b}V+fJk@?bIKr^K<tYe5~LF+IN!kHN`3Ev!bs#x>T%Pp
zOk%ln0X^!N-(Z@#$k=0(TXoe7!AuMZCj_6lrty}7REsU?$G&d5N+)kLiqg<7P*yDR
zY6wlkA5nP>>ltS;=2b2T*T7vRyyEJ;kuNcv+3?p)g5ny`zrhTNtsqQAtOT@Ch+Y^2
z7os%wuH@FT6-fv-6zl1Q<|tcn;v@XjC@ukHaU6&lY7czPn2OnTUOqbG&J#-gJ<jVa
zgo4KSMjOvI6?NQI^@^{6@C@Ugive7d2HqTem_*HUZU(T)6*`o4FhwQs66p${SiE&h
z%m@MUm&_F2k|H-2)Dn1+yKZ+}6-LAUKO|8>#{3Ej&Ppi<yDT5py=|7Br_W}67=Xu`
zy}5Lvcm`dzKz|8cD*(Rhc0o+ZJu6|EBj}DTvD34j&B-G7iQ-H2Whdtu>*Btp+vVx)
zgR&^;yd!7bl9ynDue)TOX%E84ZAZ<drO*|U#oX7zo_aPUIr`YL<Ys}^)`uM~%sSBy
zbP781qW;a(Ps_W%!>X^b_s>vWu4l^3*?IDIvk|@7IqiJS@~3K8CI!|iFjPrNteL^2
z#-A4QId?V)u|dy9Z^q$wpnR!sgAlEF#o@-}*owrlQ|GP47DOT)DgIuCQj{5lJrI(u
z&aq1lsuoV+4$(kZ1<hId0X-2xmr9q@i=0@YwDy)aGR0?&9R&0)1q`?RIo4f&9(J15
ziAY*cV#=L)77(OA64@=j(#B6Lyg<SBy1tUR)Ob91l5iq?hi|$><8b&pq*rR64E6EN
zA`(|?KZ%e~z8=;d*$pGvdAKTI=o4@pin>AC;HIvS9+K*OZ~sUOSK)#fVF1tYciM(?
z#kQIC>`yz7$~g+k)j`h1PK%j!Nu9uH))=e`=XpAZz1#MfRqJ&d-km|>%q2fUGFaUe
zTkaq9EACBl1ZuLcO&rmEkn}ZsWMr>{98ttz6fBXrevX~Hk#?P{UhPd9{3vk+CdpN_
z*Qk^yq*=)8e-0lG$ngviF@w8orM5pr4w7O_$%85_VLeq-WaHFwAJf_XZ8YNPzW}@|
z8WG!tggGE13Y0e_#iRM#MPGT^#@gjs#i%tc-47WTtUgMDq_vUdv?Lfv-v~yE+OcCt
zg%F4|`l#6vR!Zl4Mn&p~+WB!y=903lfNh?4u*4^%r;tRSL+cX$dQ%=W)A7Tj2<^%5
zTe(TH5ELD1k`wUO<w;-AB6`dZ@=wjCaLgbnJ`|#EO)9)hm?c?RL0Gs^&`hB<SZQ8_
z?pbLYPn`0g@Tt<oPpl8-<VK2BG*biAnNO&z8l5uAl`eTQh9oMS?*fO(F2WH8V(S51
z1GsjSQ?whaIL!;fFp685M^ec59$Q^#b3&8BcZ}l6b6P<+^e>V_jF%^>7P%6#&kHzq
zUR-U9w;d71nR5m7L^bzOS?>tyN7T_L-rZT#0W9L$gcF&Arzx4?Cf43hn{w7Usl}PI
zI_W;}PR(17V2@ywxqPlp!L|Y6%i$L=AKf?n+8kA0@r|S7RvA4?9*BH6yL?CYMJx$!
zwFz+w^b4G5^LvsdQ^B6<pf?7kjTBogzOYe#B!i{Te%sj0sPgt0(e-@Z)aTikP4sU&
z_t#9Y`X3He$b;%X1?m+L=1L(bNyhL+kq0ABarCa+t{ISwOpxaQD3mrkblB$tV^EUM
zxj9AXI1G;>-YTNZ=gaeQ{Hsm2`i<W`Au?Wm<(ar68S8|0o1bQpL+nE-00Dc|z*IQU
zd;+d{kVPFmNV8T-=2~9vKW`%Q<b~)JBIUsLPoe?6NiRg&Nzq)+lZmi+#R3O;@X0f+
z&rJLTWRwL?&Xh-u1cIK8<n8!FhYK1m{3Fa@5~f0a4jjDj<AJ>2Kb|8xj<P;N=qvUa
z#P(!^u+kKknq|bX&&$UfzxM_c+tprH93t5q_On!zBNBSjFIS!j&&e;r=U`hIERdWB
z9Jds#NtbqJeEG5)XYYRnV=WF;<NC5!VLcw^4FQLKjNn;HCg9=(F#h<>C!H`Kn5F7J
zjiF8q%WE3#-l$VWq2hI?yRhNVub1}86FH?E=Q4<WhY9h|k<XpcinVh#Z0T0$2g0Is
z;|Ue35?hZQ6gvMY1*1>Ga{N@yjc5#Uz{n0GSmVL+MVST)uUx_BHrwadu>}Ge>+M0;
zjc?adF4=ad+z556*tXqnSfuvt@zxoYxpsYCFN~_+2i7+S<D$Sbt2~BKFl-yhN=xIA
z!zy~Zsu66)#+W9T(gg8VI}8)g0Q8kEI$-JO&jxejJF)$EsT^#b17^pIhj>+;)Nr#$
zaWKczc2R+mUYnpRGU#>{^he^yhYU(pS8{o}qiLRBv*NvG&AA=NE)VE4Y$^UR_erL6
z)x`n?7wiU7R4Od9#STv*>dJQYS%aePJDk%GRRk)djXgjKDR^bJbBv2ViA3slbmj%h
z;iIRY|1+IBM_Xb;sP~egyun#FT`d)wSah?>%>;fpYEYsK;2{$j-xy@Y+a|~gg(`AX
zIef~sc8Is5loEd}rRFW6A{h{*{)pi<XLQ(UgvUM59)*`Hk3N1}x^5^B9I?Cgpyej|
z6rI}PGBdq@MH})>Hk&cqNza$q^$8S_(BoBU%#+xhd-Y9JCIjSv@#j_X#~r{4>TvCH
z=GP@$Nz~#ktszL@C65}TMvx=cEqG@xb?I}m`mFw>rXS7sk02MO3ew|-_|4YI&LY~j
z>7&IoOKtR()nV<mmKi2-2@@iso)UlJQ~ClZr)nGPLDiTGVUk#a=?U9_?4J~U7yoE+
zF3o=lSHM0fSAzK>`MO-uKACj;YvR!1EbDbiEgH-CCJ>YnUy{p#bJ*g?LT--|h-~tS
zG$gD<d(?M358v^6h&6KuRtyeBHQ69uO7=c$JNBRl(2=I$97%ck_{RxAJfaID5MU?>
zrO(-FYx>NSvDGOwo~h@oQ5P*M$R%w>5}sEPKh65MNz%0kTwR6gG&WVVy5SYFrEr0_
z1~5eb*)14E|3B`d?Zt)>cqmfhO!K%4il`;{=siYCaC`7(=-7p~6se-<Gk>|KlJ>;w
z&RPD2C!4aS8i5}M$Jc)_Y_dDDV<a)IXOC^D7hDY5s{T4`a2Uh*jyUH6|A5CU(1B?Z
z<Hm&4mO%EclJiPYg8`)8(-i1jdHIfMM3MpP=R5a|Xb~0TPT?>p1t|Ck1L~^wkH-#X
zcEBB_o-Qz;_N>MC$6h5vbbD;r=B_6nb@ap=Wa$?g0(jnQh(1`iGQ88!o2;29vGp~W
zRcOC{9TjbQ`05jSiP&JXnfJKJS9{Q+G5@MaWQt=d+5jzl$b3u#-WXW%HN*SZ!%d6o
zr`gQ}tjq7>lfPOyz)o)B)q-(k_8OJUdUX^9iln_57P*1EV3czNXY@D1q~iFnu_Jty
zW(5KApNkD*q2k2NgXpQ<DH~n7vUilGLcqiVnZ(3`x-~N0@Qn7agSXA~ue-1YB1Os(
zsS8b5Kz;s=quTtel?G_Gx83H7^IfN?5mHW#>N_yXcH%R_FY9pbd&h=WeB?mDGz9i!
zG^he2jpEzBrjasdQ(@$SZ>?$95L`8nWd%77;^Yq&>cvmuoZ})QVWA0GSUBKBP96cL
z7%ouh>^!~i6iDs1-Haw?`1%F<PY@|_h(0m`2mk;ZG5`S1{|X{?G_f@?`@d17$7(iq
zm>dW{Gqq_&3pjL;#5~&)-P%OeW2^$(0Gj45-^S@Wq0cV$YAqH48(*(jbkNj65Q~)U
zqNCs-olLPjv)qRmtrsX|LRzLw!=vH;i)?m2d_LZeAK);5z`CQt`|<sH5`OE({McB+
zl{+AHGX%|Xn1iI5o`Z*FKpNBmW7FoSL(0R_fs_IyPHXcl@o-T?LYqnZ$T)%_v;E`1
zN-{LC6YXKyxJ~+Q2vacjfCxFp6=g++_EIv5!Rhp&;=-Wfh=k_T3OraF<=;j%PxJ*!
zuie0Z4$@PUg3TFLMepaA?8ASc%IbZ>8Pb0mmpi(<Z6u=vE}JNp+gRKzQTCbtFiFgJ
zsg!pe5K5LZ1ok$Cw_B5*7K?!jO2ts8{=GgX=)o_KS}=7~FK@co8+PdFB|nx<(_<kg
zT~o)DeWZzL3u{N;6ltf|@3z2BY<C%0P)<k&Cc2tYwgI~MfLJVeSJ(F`2%;=A6Vpe$
zp!g$(V*jNc3)wA{t9fj7Gi;ZavAlPQG{9SSap?5DdGArOhW5`)w}#igA8;8o3<8)3
zSjxh#*O!cN1<p2|)Zj^W8}|J|ODoQG_O`vBj0eJl^r7?Hz;@*>l>6oj-x{L-Js=~+
zc=aqkcd5HFv*Lx!q(ri3{QT6@@D&~onTB5YZ$rT#^=Bm8Gt5qaP#e`+)jYcvf!rGL
zgsIBZ2wWUEA}6(GkUEH=(sheQW~N~*D9zjJ&c&jtST1Fi33$9BA~24GNfmipbE8R4
zE?aU#02B0C(SFaW&n<lX(`-o`oeY|!_QfXesni4!MbkR6ueR_irC1{GR2|A=zn21|
zX-JmpW3unQ2Pie;{WVrnG_@Zs%weGyRdYiRo_XhOFt9J3iydX>;w4h==8cYXN9qv#
zU_whgf%HdLkT@B{mlU1eeCJE3Pg{f5>hE_#uIoU->=--?heR4I_q25i*^)5iqDh5y
znf)Gdy&3*d2UFWi$aUrDSldGfS|HVJx7?0L_MXt$E&iaW`J_vN%3&$RDw?<?Vu~qH
zXB;vR7j{G-b&OwYEDrIcXevD7MDzS~wVryRmY&O^3GPDd%ZNXo&(mP)Iu;wcBmP<M
zRmpqBoc%xUz1C)!-RVlp-F<hoPrLG<N(!w}e@w!T9kqSA`)R%3wuw7G$~-rqklCjk
z;nG}Vw5ewxTD)?M2Z;Kq`?cnha&0UddX-j%gT+5fOe9z+f*b5@WRs2~AFm(>bC)+<
z%PDpweY(4wF=2)Qsm+SyJ?cIsYyT&?<W7ioV<4hirkBr3TCWi@HPs~sp>IU`?fg2f
zl$%*0K_*-9Fv$5qSG5z@^osb`_;0|q4R|8cW+&z?YD;VNYhzuvm`JMNrk&$2+JBZA
z7n%V=&wpiR01DuL;~g6_=-D{^KSd^6)k<zt9Qiv(&jA`KVlfWfT&)t65`!Lrg;)W*
zN$XmbXcTu8cxH`@iPQx8*ZcOF$N^tv6Ney>=QO9i)+yAs5|E}%e1VJvHQv8a_cnE~
zQ1@3YO$2*{BDIDqC|vTU-L7v&I*EK6kSoSO5)89M+v#~M5Dp1(RsK!e5|^J8xTbH(
z{J;=8<H?~G<VFL>Pfh|%>K4-25PvbtU7DCVi14JZ_l=tcpZIN@F*=yc8;;7LAgim0
zLc&W<kdX~HfG4O_PB@q@Xlgtp5ZdgBbD1sM7-}6TKN{(ADh%Wr#XaPT&`9yyv$a#R
zniFy)&t*$usXz<eWzwEAUSkB}mKF085I*?G{*-eHN6*XI)YeE(oNopQ27Ov1>&<~|
z!-_eG86i#mbzKs2Fg>+|`YvkpL@wl#w79Z(lb`-E>46oDsM&v17-TNPjDYIJkhXec
z6>P6S%^^TG41o!6z&*gfLx>fV>D7>RoMBt_CsGpE;TKRCf(kDFb*!J*IS7&Q&`&~`
zwMIDwv&#5roL_7QxCFteuni5Oy)5j6`voEh5CBwOIYjm<Db99Z7eWRq5;B}`fVmkI
z9Q=+pzsWohTdHL*q-FJ#U?kx5Gyq)f(Tm=+U(iE}lzFj7!by}-Yg!~>5FT#DzRZb;
z4ujq?_k73~ziD~xl;K(HeDC)T9>W-aAnV}r!yM2o51y|oo_eY%_AU_?DE5y%6pz&*
z9qq7839)Ure@-?*iz^7t6Ix|br}r?enNaKOPa2#lTqD^ZSBqI|*B^_MwriTgXqrsM
zzdLJ%Qm-RFXLVGb^j(>p&5c&PI4^9udYHpb*&NowZ~R%K)|^JIFS*u?P2fbV&Z4W0
znH{@)7f$E+1Z&lY9WTv;riTn%c-pI9p2u3ph$X!>HG=>4K?+I*`-pP|t4IV~c$8E9
zDHXiH;4{>nN~U0GCuwEfLW60i&7|?Q6=;;V^j~q%8GKqTMAJIkKC@+~mS!p+7Ay$(
z8dEyj&=XO#rj9bw<6LA6&2{V7DpweD<u~OKK0>hO_V#)sc>Rk5Qt<cqCxMQIO{U30
zs1{c9YcerTx0(@e=;OzGeqgAmemIi&DAWsl;a6Ll08`L}JoU<TuOo2YrFwNDqlU{I
z4Uy&hmEvN%IF^_J^t<B?YWmT4!%ufLgN!#}6h*VXShtQ`K3m=cIwi;e=UZ{yYf%@n
z(gpolb@}UME`4T0MW*E;@|_k^>b-a2sg+VqNw*c$prS5ufYdxtt;%u`cRN#naMFr_
z?N{r@-$hYo7cGxN4NsnnX=jot2Rz`~E!YtI$C#w@`Kzmu$)_ssIbE~*nqi%|U&9$E
z$f1M?D%cjF^6E}ANLgh!^057s&)TVL!}?|O={%k)`WLi|;xyCT6>j;NQ!w)7k|?bd
zl}j6$QF;a4T@5DGM(^8$pqb{ZgyP{K#k%MHK`F`Z{vWGLU*zuMqg^ayTgUk?RPX-s
zcl3GPwP-nxtAnl%h{(uob?YlE&!yUt)FI!0*0YjJ41GU40D$r}z<-}6YydlZ6I&-I
zYZ?Yx23mR(x_{UIKL0<!eTm!3X;U;|_nB%$GC4)L%xuOpmHY)&Mu2q^xtx$<^IymT
z3M7P372oe4cBMW1_tWK-n;t+wQPPo4b%M~W#IwWmgC$y27VdS8;F9E=68aX6gX{Bt
zbXDxM)Xdjp5!9?OX*6-%Z`*jBuPwLHHl8j)8oSXJxt;+Cg7qZ8ES8%cOgPL6;e#8M
zTVDkGF6tOHLtM5V74D`o`19Im<R&42rW++PF$*PtD8~yCiWQz{=1ncPlmpu6glv)-
zs(bD9ied^aNIPFa{9kZtocdM29(-~Ur62&WEg=r}gU5{B;VDf#0;Uc$f2`47^~eC|
z4&%`=NbAUh(ub47<L_TiSwC=sf<xj?zIcAJi0ng=o+$nI@tvJ<0?$V>uL?0opTB=+
zNJXY<g!rU}B#*o(IIHkJ?co9ev0it5(`47y(%BE?W=L{?o&NHigq{Pz@gp0+d7)Zl
z7!wP7V?yS^8_`9mQt!ob1Hl2a68X#6hF*2-V#SiWC6+t!_-}`FAHqEz00d!5DfC}(
zmuJ~gE+3@@-S7U3X<4Un2jwjFOJC@#E($E^7^BH5)fvkQ|Mj?ehsM_=e*7Ar<cEFr
z%s^9b+cnLzcafOW<>v=G<6eME0;G;=$|w~fg`%6e9N-UDxCjnwYEVbs=yba}be|aD
z20vSen)&KC!b=o%Z@P~r6Ff1NfN31>itmHVi39Lv&AQ!{=DlfLkr|04h1TcR$9u1+
zehOR?!Y8dJr0M6t(tBR(&Hnw2wK0~eFS5WRrGED7(Pko<Gfu#6mca>Q)VM<hx@HRo
zM(Rr&<5A9}PXXH@r#>VZ0t)Ik)z8YJ1H9k`rWn*)qdMe;-|s?<?%xsc2tLF2B7vZN
zAeQl1VtC>SK1Kw<%0Unbxe=yUhM3zOrO#_rbDT!gl?~c38x8;g=u?r{Wt<&&%UPr(
zK_!YtfQTWa4<Cp`@SJG$DmDQrJshTba>8Ip_{*Mdd|aZ56hYgsy0<@epKok00uz8R
zFv+Z#U<Fk3<X?!ljH$0=$9xw!NLpBVetNTJ@D16C5zG5bmo3$@o85Qo{nF0&P2ce^
zEKh#}SL$Z%JlrwJ^-|B*#SIqfC*F~o`fcIMY`lm_&~+vEH_-NX14C}k1jZK8z*pR9
z;?Z@@{;7VKgw5&j=|k-s*S($#m@{7n?E9wkCl9_;H+n=`rVA_9wtuzW&F#w8c~T!J
zg|Gl|50A-=UBu6A8`2tz`8ibW@aL}E3HFb;moK{u7;q_D_cdJHHkKL8Wb!9=G;G1_
zcQ}#v+K!vSm6%B1`fMJhz58fn>q^>KAbmN^bs%Af!hzUmq_<T*6fW5~%y(g#;e6u!
zz@NyI^4eNCU$3ux54a~b^Bf7Uc-C1Ete1U;HvAp#({L2wtPzUbqlQo)GBe&bbTHOy
z-T)^+ZzqC=p9i;>5dW@F_8-V3VC9i)PQ4N|Pfz-%z)Kj<n`Yn-*KvS-c-j*<r_|A&
z&Z9kHAb?+&*#6U_xSzajz7WJ9&pRjmH&6_ifAUzE_xa0wULtx{4E#udY^XHBp|3wh
zU6lryYN5k)gy-{f&`(RBy~btTw&1Swnt|})+IjRy>RThg?_az`qDihdxz6ZQS>eDh
zAT_0V4@B04t$ikh9^*!qtLaUN7rn60;Vdmo!v57U4^om+oR)jwaB#mM!+lzw-Dv*O
zeuIiYoE<o@On$(bSi!s98jw&KBD)bH*iNHaQT45#bWbI)#P6PNEQ9OrX@Rb{v6Ur}
zpx*;qU9QP)D3N87OnPMld#x~a+LF|-OH{&M|5<=k#Xc91)Hp52?kin#cmd}~=#QVY
zAV97x6sPw;uVInJU;X=7pC}6_H^<A@b*l!squ=F3y^834wO3e^Y80smB2oRnt2~)U
zD+G!srd!Y((v#A*RM&?E796DRUD|ZVO@AUBp<s(syo~xXk^gnNJ%YtYL=rRr!@g}C
zTAEp9`NYuF<3V?aSkPT*os;}=vnlA3DRiAeW}InltJ@a0z(cC95lNU!PHVkMqa@=O
zS3ul+zTc~GT#0^h7yYxRf<3%kw{=dykbEpfBoIeo>i3Ve2;yBDLt2v5rs%{j=zXa#
zIa{(&v+vG_x`AfA+5;x|)le`aQBzUcfyJ*V#?7K<d0gq52f-vX4SYc6jkoLT!OXkz
zJGiI_<NG0h6N6({b#Lf2PiysBn?a=t4G8ST(NC*_i}1QhDAz05j`SpN)9<^+4A%r}
zQY$C^3pzl>zaacC2#Sf{iZSm8%*nhZ*=;MmB0hJmhb6e)5Tt-4DeSl3^sb6F>rge?
zdB(W}vsAt|iBy%7Fu}77ZNR;9QRHrK`UUcb?z;h`md<$Wj^P9bgHg}D>h=e>W5)tk
zLOE5ov!_xDxJ!f9KuQhj>lINBz5&u@$hVd3=a7`QLXgJk1q<2FY=pZHoq==R($><x
zVBdcq+ALO;X&ERvnZwg&7XJMhERTewO$bC+agHDa*c?&a^V|)>d$`!lRsdDU(rz1J
zR}i364da5Bk|44EVuO==K$~9%_A)q{=4JMvu?ZzoTQlD<%Z~JfR4&Vy^n^4e`l|$1
zD)KjD+~g{a8PD<BywkWVT4fQ~zGxsBMX2^~gew)c%8`UyXXtc|`aBYz!U+_^FNh&N
zB00=8#i%Cv`hiM;T&xq9AH5B{+*5?1y4-wp?#!G>AHsGMSi4!YQmnWP%?yMIgPJt)
z;8w|Y(<Cj~IeMGJFeK)NOD(N(vMOaj_ysOGbu>QQxd07Kt)ZdGDjKs;!7p)51&Btf
zCnd*`)TZ$uh4k?aJ36yRQ)~1a*8TAEC{-^>SL}#NRy2UNHxKU%U7Qgf+)W@^3+Jj#
zA&VmNzG=lS%xwr^P^2>A=SfE<H}fo68Xd7y8vJ1gh*vr!N%wf!IzUj=5;)0?p~5=+
zgFI2I<p%oa@jUYGQS>D~IaFJQMgXe_4cP;Z*4AicSXZf-Ke=%cMJ+qV)Zx}+OC>^R
z^>r_AZ+>5Rz%;Rux?<U~*e7xnu6n${1FDCIHLGvj<k5=?zP1hIi0xW9K|bl=$l|;p
zXra1*)fd9M=k!f*tVAUl{UA49OTpJZ%ApVdWF~Q&{R})+LrYy|RfYPto{!PauHgAb
zkG+kodQ|OH)7y@n+S)c^n+2^z&1uYL*}(zCACpjRQY=!c>*?K%<4&9@Sth8KOh~%J
z;b`iPK7qRRFZC+Ky-U|h>fYJ`WOG_!=cxE;%2TxntOOLdkO^q1MfD63t~8YLS%I;`
zHs*_l`b`<%P66()O-p9l6_*N!pT?Y{n#gS74rc4zsqD7Oot5DJuW(mMoXjkwu>Z-k
z<Y*p35{pIUdoMNFD}IbeveOc}fS`YpH^aJzGD-m%UL`PAWGW|5ZJO7JR!LoX|6ETK
ze_2aEPw=@9#|Hwi3q~U>W(T3bn_R$_ctHx|d%B(rygi+2el1azSSf|p=k_;P{1Yoh
z*yOLOc1B)x8DRch%ZO?Y$j;r2B~!{^+jHFul(JO=Rgh9XjULsw{2FDO-KZv628Z42
zOz7CXRJ-A7(MN_6b%&);qU5v|1}_?J;>&7kP5vB<TW_dZ)kb`k1W13S#HhS3+qvg+
zygP)3uG_u5tT=b{>?)mF_vYGmEq6|Y{tOBS*I^_S14~N^q8(C9eK83%_^x{izouPx
z;0)hSKRhS0&}oA{>ace^>ArWUO7TaC=sDvlJ;a$h66147(F$czGjZ_I%xL_F3DSt3
zA8cQ3NCj*vNC#~<AdO!deLYG%KSXS2#ZZHRq&Zxi)}w{Zok?Rbsi|w9v@REa!OHd@
zQpEmyXENQbikh%jbWi=A8zMiX`p-FFyg=8BSUSY#ZL41LOk$pQgQ)odorVJ`^!GxK
z8Z&rfT&$T>S*jg2RX%QUw3Hl?Be^K=NP68mZ)MrRE;9d_9Fwu|rJt@^=Kdi6wWw4V
z3g9Fp=dC0DCoc+NF_)bt*ssCna06s`X_q%<Ob1w6%p!<@4}7JA{_ebfJ&CTxsFaFY
zxmWUr)dY69RxrSiuC4$WQc)>F;72@#kf4-~uClu)_`2IeKl)R}!lk90hg2D99UvVY
zb^uwpyo*6VNg=Y(N!JR7_^F$FD`iKtxLx;3oAu&3`mrM>G+<lzT&3pNyi+j;T<xg~
z=M7SBQ88zeZ~ec*#Tpx}YP@~dpUOzwW(P(KAdX*mCm)Hq(<aW!!j@IhvOhDp(L8LW
zML#;%pF?&9rX(E`(s4BHw$9rf_EdI@c}2e9ajq*>kD<r*&mosN-DfDJIzE}i3E9Ac
zHD_$YtJ|+^OUeq7A9=Bl?Syi@m+?A2>;}Z<9_*=6{d!Mf#?fBG_?TJr-+b(ULHbW6
z{a$gu1fV)TL_n~ziKd8&3~&HfSY-maSIESw3%eXnI@EdSi8b;7-HO@_mZ1=M7a<6<
z$#HG{$+~7#>X;@{uP52ng{D|q7RW5CXmACuOm(#oi)v++w5dtq{y<33pPf3p-CP^)
z!}zKC38nTseCq`CV}ozKxqSz2ymf$X{Qrq}1(FB-o(p9EUbpn8xq`EoyMh^73<&#A
z^8-80Oyyp0Y8M|V)NXtIwB)lAFf>$(svvn(_XDi{s0D#)2UBy-l|=pI@MupTLI_z8
zawnTz!x&r6P}*sN*V%cJsiwatC11t6>4}<f5K6X6^MqQ)=pXlSzB=~7TYkoFXE;eZ
zV8?0w&^D(u4>JL|g-GZKG&b^Y*ib#A7DVhc1YfDvdP2@;{GSD$MVu(tIxE5`0B<O}
zh2unH<6qNIwa@||i$vtHx5P8#{(}JW-f`b6l<_L^LV;I!o`u-LWtz1jFT)3*9oZoc
z|9QUb3&++MQp|u0pT|gq<aoAX`=kW>b%B9Qya?D9syEt#1i|nOK~1Si*P(J)PkpBI
zl_e@_J>?j76q8u3LPD8$A4Xxm(yCi|_~R!5uM;(;2$F<8^>0c#^x2ymLr5K{3^Q25
z7R&Q{;u;Iek|0pZYkVO-)hEnjf2B!~#<T5_hgC)S15Z2P@0RBsl}Ctck2+vj->2S6
zpS9~@cMa<2Ca9W;8W5{eVRHHBZf9VB-T>RMX|?i)HB3UK3Yqm{Vp-$dMU=Ibbv=Hy
zegx9%)E?vFG5pV8BP9*R(i0Etx4Qc-^XOfT0)E83%vJ5~@>#0T^+#&lgK3$z6<LNc
zM!h+qJ8wkf+9>c@RZA;>If>o7G<6`3-eNx(jci{=ePDVWP>o(5rAJF^lv3FY&Rq4w
zKI6G(Z{T#tI)xaHRD-Rnx~`k*myiRmm+B1ZGvG-;5CFdg{MWXIWNSigy`&Wam7i8x
zo0Nl<>$KVnW`TUFg{b5OMiyaS`7IVj9wbk(9JJ*E2gmP|JoK=!ZnsdRI$}roc-S4d
z@N;*;FhNn!)B2@4A)$2-2vF_L=+^WpnL$IpY7(uit*^<RXb+gAHlxuLOBiaOceht?
zjMqlUVI1b}teCeAv>vI5xM~5STus5;O+EjC=ax*tD)6-~nJZKS7NlX=Atg!F7NQ<b
z*Lx-Ocv>4TF9rtEx*=4?Dr}gUO0R~dxM%FRiQts;j1mq-GtuzL8TYU5+?(#Wd+jch
zNABunNLlJ--m)X@%xt5>YY+1lN(CV20v&`@`H9P%G`^Ru;R%COB%IGVITfiA9b7At
z4v+;@npA5BC!nx+luYF;NGN}i26F^%EaQdX)j&-y+*V8M4+~=#I|;?YdjK}tSo&?*
zrdRJLQuE5Oyds^H;e|#jhHj}g?kdl)YT~A0zlx?B<zCegK}w4*r4qx|d{Q;}u3@Md
zq-?Ku2i-eotmeosN8XBOwTRI=YpX7vLv}0VYi;rvA%!I)>`lK2(;SFySusfkM>q@Z
zx3Luw%*I86lv%gbI6K77232{)G4;B`A)?YgelqR$KDwhT3Dm#&;EdZ40`vvf5+@dh
z;fv{>LV2SUAn-s$QGp6l;=E-6!TnbLwC3Bpnm||skULwsVekx4dLrpub#Dh##g9Aa
zPo^Eoie>av4na1`G6rbngIfxMvQP1#dQi6ecsPcMGj*-EO>`K<e+T_{<L>y*{m`9Y
zSd{1|Tccrvwor6Nbf~-bA)CWgjp&9yYKD47+#WigP1MF`9SV5^fy1(=<eR<Ci_!#Z
zJ1smV8GUk=9Cr~R)p7GP7tyv3T&z1I2;m6>`pUQp(5T(L@!idI<W4_e!#=)Z^+1BR
zvFWwX<#|U+T4|CL>x{2uFcqJJaoBP>a5=Mbg(Q{lD7}$(png_^oNlo*eRFn)9Xdbo
z^KdKA6DymLM_->PLA<XUK<X1E2;5K2D)?T(h4xGSz{X<+%Y=qg2*kH6-<X!8GLkx8
z23b+2-^pT%1c5hL>5H+Kl3uUGG6=p?F5k4p`g}*ehbb|IxuBa5gj;bTU;cVp;ESa^
z&oP){;e>)Z2Q0$esZ*XE!9i;*xLrqjQ)C5!o{}O8uneN!C2M)AP!oh1z87ye1k&u1
zfWl0!K@lNJWKn`u4EgRFz9%bkY~R5w!Y~xe4S*5P*Yy{m`q9h6q!9S-aSD(^)>`KJ
z-BAbvBB5e~DNtxx!nO}FCeWTR0a^t%Vz+(FhRGA=Awd%VB?lUl2PR)fHAN=L&|d@{
z0Q2T}Bn$5mB^(s;^;=AUayS9Mmaquv^mVjC`C@--Q#3G3cesd()nV|ZyO+0se=GJ!
zdz5o!vbhxZE}kppU|Nx_vBrh?#!=H^95(=zhpt@PhO8m83^drqEOm*kP5OrA`ZEo)
zX}-J_g#k5Cs(0NKSann`);>+X&DvUrh2Sb(wS`x|5+Wb!9+VT1PuM$kbn~1A+O7+u
zE@`cNwP^!(5BItZa~jPzzAGU?8>UJZOLh(`*Yo`Ku%Xs&Ry6#zjwp;F9}08psz7AX
z_mb~_79nPY<;9g2RYxmcRq!}~pySaaEZehICd$JHi_4pV8m6kTAWV4_##~h5fF7)f
zsJi?uJ1fQXTmw9_gkCv%S`SxNdSUUc-C&HWiWuuF=a`4`xFtGlBPJbgbxu>HFg<UT
z`Yhd_WZjIw&60n`4QIu@G{Mv6IcfiuyQ!MbL%dD9{A&uHn+HuO@U~V6S9N$03+po*
zfVSbqH@?9N#0JV}8oq3u2TzmknwPB``Z~W&!p2*blKw87(@Rd;7eS)w^s1Vn_TxT9
ze28mHFQ>~&^(wk)8GBQ?n3!f6zBIvR6X@0}%~nX|L2JEWueOj`z3x`M%?=KYtKWMm
zeT}yT4HHEnq@uoGWRHA{yz9$eAn!Wp^W|NK+%4}lZk{ji4V!I~_XZFx@9*&O%e+bX
zht8Mj&3H5&4W0KUB|wxiBR6HuvI$n<s-#LtiWj9|X|lv9fg297dC{gLRJXUS8@Od(
zmqpR0eVX1+Tt5qyY;45SVcTh1)2kP;uyI>gdcNJr>ZNU2lH`yS(L>Uje^tqkDpl&F
z#T|Vt^BEoDQb^sNf{kfZZTeydxC{4!O!X9Q!(-N!1erQirN~#7C3jT#)-U?<e`0`5
z-4;d(jF+F3bf@|M3ZPs1&ujw92Ps?jrIo6-fbBH=tBY*5)R6PV?GG>EUqA*b2MI4e
zrjTozkv16k&E%uWO2vcLm--1dOkLPu>i_Z31Xi1>ItT#&M=~p`<qZV(rd6q7%H`+y
zFczCJDSRu`CgW<J-dzyXpDjo*wQ7{D&6TRbV3G=RKbbtFQmlD#*{4$3v7X0;!VSRB
zw@mfcdM>A6a9MxiUQP!SEV}=Voq;}{R<Nl2sP<T|_Hvq1JTFg{p-*ph98^ju^#4pa
z2s^qoR(~h2d~&63$5-ynxIdh_z0vJ(+WN2d-o3evBgq&2e?CRq6ITXkkRs*r>^YL<
z35bLwtSOQ~K=ydO4nzZJl5GKKY&Rf^yVCjWr}9x%S&wc26z%bidl_Mi?C#2XWo2b$
zW&ZL@Rr{A@jMA^WgMm87tH!I>aDV^A9gLQG2>QP6l6zBWEZ*h_rV%`%hHua1Rv#R<
zVH*j$lZaERb3bYy!+kv+WaSZcJF_w0WcE+gpq&9sQP4nZE)72(4bRU<r{`y{HaNmZ
z4(YJ9*ayzB+dpW#zsLiRa}TcPseX>sEL5}4oS)t225&&RYP@0G)VOo#K-2X6fm5SK
zWQVDdU*BVD^b(4gGrTqQs&{5Ob^IckjP>}s#&Pm00O3GfgJR;D<+&P@3fq%hTI)rW
zPA!ksbb^^|_YUCLii+{?dvw636YaoFT8*@~m+XKP`?YH&pKcao&N@--A(n`>hj)|z
zTIXtm&pxE{d|{l)Bu9hC2%3E5!^wP^R5!(Km8kz|Vz(K3@O_C*hH&dIlT=?SgFW~<
ze-B83WX#U0yu|*%)%JdpX9vQbeFe^m4v3m2!+veps1?{K$qG$&Zh$|S<&zb<Tx(ho
zq6&6(O#yrcS4pv65nv&>^-Uks_$1oYF78yJ#&u;3(&IZSGeC$+eD>HV1Ux!P*-7@6
zVxMK|W|t@r?1b0urs^Znis!_Q&XtKIV<iXu?g$O}VJD&gq^NMY7!6yNk%d*o;c774
z%x)avr+QH4+50R~kpBR!wrp=&J9SlREx|$%MTHyRR9JylA<&h+!SIx+(AFwxSbM83
z9f%=O-S1hI?j5=@2Yth*TUAHpZDmw4=#{DFcdO!P1dh3;3W@QiJ$ARLjmg;Bbm5M#
zKPm<HA?mbb8tO!6Ks}c57B5sy#g1^sSGwBxh*}D^PAZ1A$$mhk6v(9Ai=t<UupYNi
zWiJ;zCd4>!MmdZ5B8aeZ35fQ{TrLwyGX%3@aqSX^9-HwJI*D7v88-J7;2X!Tv#nkt
zuDw4#PsD9Ew;m{LY9@KQ{c#O_^gQ`L4K3Ak<jqgO=;O4?ro}wX7s7i)#PS1(PNm^<
z0=pkO-yzI`7e5wg(dd?|;nGM~*2*!2wu{#h|Ii?iSH{$DLQJWt9Upa1VZ-@(i<&)U
z=|nqao%It~BL_(`1YMxa5NS8b=F8O`zELB7djkmYMm{CuY-TkjvN541G)JX_u_h`M
zB#9fWFf5W3#feh#v;FMq3M-Q;PQF0XhWdB825V(Tkj}cD6h;wx^I03TiI9l+vpAL-
z@%@OzL?;pa)EI+aGbiW{3kR+t2A@;l(V#avIe*jbOCKOHLm_U7#n-zi^EtS7T)sU1
z`_Yqcg};Ovz6FHbS$Avf+jhH(?PX_^OW5ahG9J{uEj*Zgs?o5j01V58McWbyYZp9=
zU<mHxj_;hALKz%x6MS6SRq~>~8Ax95>CRh3Y<u`!8@T1xfLlB^F2(E``RdMW5fp&F
zH>c2V8*{!lM=-w~wu%4>4mW-9vJ9>tz7Y2h!AVGSgk?Z<#`c91`ExsBVo&>X3miW8
z(uh0d7UD=eiRUMQd_)^KYVWDzm?xSp7HrJ~02QkaYA7v6P&0pT1jDf)Ts{_#*zsLR
zoIQz&^Cz6oNWj#dhO}^|K;T>GvhmQTJ%N4UPND;ZVR(bUm0aFn{|TqKfXlG`TBTl5
zzVdQPy4Vj`5GTbgNEd)^L2=*Lz;AY19j=QX1?-gjTBJmKav0U)(@ku8PrxR5k}yrt
zt?lSWSgb)N&p04t;D{YwEG%H`-k=`vugT^X!2*=cw^iD6kZSPMG@4Le!}I>p2o(^o
zrGd_p?7d&kw>mDjtm9ZGfkNTA+|<Z>*5}lQJC$EsgrM#+okD{ydzINfG|_WuVP`x#
zwsr2Q9T5wnp>f8Sl;fP>L+wB69sTisu=xfq;+3u;ccqQ2;f8MCyP~sqZ4Fm(Xq0r_
z-z3s+?56HetApV@>*y-!j3|L!D+kw=y99-Hx&gPE50$+g=LP%c*-)GpeWsi$1y&V?
zkGNj{RY|YtU45vVK31r)Pt?(;Op|J*Dm6~VPS}VpFJoSwZTB6Ax!4NdKwcdR!T+#A
zXYk~<DBmSd_uJkfPFuDkhvK?`O1t++`)xd&lFuMvT%WrhOrNZ4wd%!7^)y*8p{eNJ
zgT6(O?FQbvQ4hgs)ZVP4Wbj(Y-oo`Bel^rX*SKemp9h{@+Bu+pFHrq<nj@G6S5NPs
zL-iI$+(1xA94A@s+K(BOI@06w<H3cl0e&A{_68UIlUnlmR8f~7YSOiiW9+suI38k9
zm7R>qs%joU{(?z2d}usAYv|Q@oOz($XWchFr{7%SxXa^-A8>!2lCqHNLgj*j%cW-n
z8C@Y>7rV&fRX8!1N_$DGED|y3^F8r9zUmHsK06-$)a?(QFK*L(#b2o@Ouk^(rB;mt
zU^_a@QFlN)fidP7Tn-KU!S5rep?3_)y5QHB{nMUhm~yoQ@{k}=@P*tOWZac5#(P_&
z#i70Za0Ig5=&VZcCwnOEc@wVL33%S%FQs+EKM~5e0p(jk+1d*Glnkv{ua@goLfaGs
ztw52y;_#b%kt}EFB!dWDhzL${9bV+f_c636#$vbBROpXlUa{Y8+6!&jTkNKm)|c5n
zr7lc9LZu&d^b_2leuPgy9^9vGfCR<gb`skX|C%H^X^o={NJ2MC2own0!m&sdqqS&<
zJ-94R=5P&c1Ec}EslwcVM5wr3s9o(QUs7TeHB;7Hss~3+>7rO6Itx(b;A?fzD9m#)
zHpE8H^{Jm&k|LyUy;ryNszwD2cxrW9Bx!lQh7b!%J(m3!<opB7q@+-X_^a#|vLjl%
zXJzsk;`Oz;%*F^ajN@8hOu5c1sWgv(4@)u8&<Wi?ni$=3m~M7Gllqm@2aJ_NTqPip
zn~|g!>9km`up6cWq2;<}aDA8vyJEp0Z`ogtG5r3?Yvd5z4iN1JV%P5GN|cv(2|m1v
za@>K_uaf#@Mwz?UJv*_l!RU|u$3T9W9#!*bhbHuvGRtXVTMbVQgTb`<?D$2<hOt2`
zc@WE{LDUQ7TxY-RaC66MdD!+=2hwMvj(pwxscKLlI2~#5m1Kz?7QC%17?W&bOeCHe
z@-vG{1czGX@3RiA(sIoqoaMew%b}Qn<$u1aB$bc2>7slUj~{#EjH?U2)Xj^9jI((4
zt&XFs=_Zd-98L9E)eZ`mHKpO3645-gZ4ZZd+)=Wdm;N{jmMPn)d3OL`AB;h2jZxMk
z{_yCeH#olRUsz~mT=wBk0|mHyCHR(PTAkOvBJ{-T&+WtX=k{OOpO_wYe*A;u#Bnus
zJUFhVVMh;TKXJ<zNGEm=2bX&Iw;ELigq*dUWLzw7HeL&XTjfgw&;+OM)BXz~Pu$py
zPezU5zMwjAHKk!aJ3l@>AM{*tF=AnXU)mKyU4<z%4&1f;Q89nS2hQjvF}4o&C!L!N
z+DqpF;tZ5?F!_c*VCs59GZ27C0dVt@9k5R{#Hyrfk{D?*ea*AAVa94_?Wd+`6XO{`
zgl|8EVj8W~7g7!(S=>H*x<)OPvPM{jKBZ;z%-^~*e;dsF?S`4Z-Dc+fslN@T{tun|
z%RhMT%bn)_wr1`%m0LOY!Q|`X=i@#7m>nsLt7HbyyemM;B)G>pq`$t-5UCUuGy;n#
zlCRYH?kmixMRyox&*hTNUemFeLd~Veq*yPEYaKr;9h59>>iZ_9lF+C4djI>?e0iXA
z(h65lO$4h-zK1eCjNclgxz!6>f*nYytr7YiZhB;GA)QY<kE{+k-aNYCs`jrNVp03=
zH_mP)TMV{Tas>QClj>*8UG!<FEb+@}wp`sb5sG>ga<R~xu(jvWH(_5+6>Z!H*#I|C
z>Qj%dg!J5mozQf`+qBw2sk>!r`7j!dG`#_;Bib}f4yJ=MP+nc(VA<-n9kM1!jEHrH
zzHl~27?Sv<C^g(rqfF1myRcE%V7)4R6cdYFf-6c#BgV{45yTG@p&0K854r3QK52Hu
zb=kSYMZ!7+E`_Y&E;FlUTPTaWEOsEX-!`mBr;6*kDqQMIg6@rywH6ZbCB%FHh9F)}
zEz4q=m9smTFsN)FD}xg+IiyZC0aP)50j~aavMOh-gM)((v+*Ts9bg0QzE=OI)XgyC
zZ2}+4SHirK&zD72<roT5Bv<(dCEda56=`CbA-p(3e=-92JiSZC#voRVF}!uEy*Hs8
zCjMd@C|pDyB(1Yz#c?Nc#M+`!#nmcX5D-!d;Va{!m}TiALCj$WPyPyknN|R3L~Uaq
znS-`t&k+Jn-YDow5#!7YE821j^Lai?5#Y-01%O0Rt<dr#_yDk>Fdqs9+d%xydkg-&
zuz=m@>yo}t6=j%^qD&5xLYsq<mKuv<384*BV_9C$$7%$MD@|>D2l)^TiS|MAb}`G}
zWnLrE!g~uwbg))30_FtwM@`8xJI`BJbw*oB06_cB^s90@CVQlb5rrXqg?$9Rp=m?E
zr+k5NM(L6usle(?UMOk=6jk{8O7%!nQ;k*fgF&+mFuMA-D&`p*6+^S09D&eWYy#3_
ziyy~Am-UxEdHy+Sl}JtzWg{vg1KWiw1K}x#D4?Rn4k&>GwOO*7#aN`@Lv!TGy3S!j
zy>dJh^vTc*hiq}54f-W~+>Z2~ZvLX3_sjlK!$3`nnbaA|HBIQUlTvLk{DTsPv-LEq
z7$hz$zpCK6L*^fOmgHvr8B!GJ-vMDeEiy!a_wGczA*IB`fapd+dPND)b|{Mx@LKK1
zAWL~^VH>_$eFgNZ8x2!erB{S&w+EZQ+NCL%z#=n<aw!XX;OOKE-QXdXZ=CVHOof|_
zz)6K;L=Yjm66mPO-j(N`L*tvAfRr|MlblT8B2rcL566XE@A}%oV%0G_wSIKfZhPm6
zrci@h5HuE}SJ7TCQ9yv@A1`Mo#Z03YqQthBH?wz27NO7$B*;qMSYH{`T?w`xxww|F
z>nj1qakU@C+g*iV94k&X)L=FERO|3`MLs1_U;^{b4ciqSDJ#b#Wo0k{x#Y9jNtB`M
zE3C;xTVMGB+ncA>F*t!=jM7tZ4^yf@zT#jHaFHQUX$<Fhm)$+a)@le(5B(Pljh1Ep
z9^#WRX;tmv17(u~3JcQ7U?J{*uZr(~4>>%noZ5t6aQwQb<lx0+|3}Ej_(Sh!f&VTu
zHFgJs{;RVM81TB0ev`O+nD}fP9QqCI5>K~pmwt*HOEBsVQ%8qXKoAGLYPSQHFc;UH
zBLx@)v>d#TBwm2)UT{b@2&0a~tLF>H2a*x@w;R`ROvxg60gi$v1RjjXq~5R>LAQ_0
zH2PlFG2f1D`Fy_fTeB<Q{joe39lWieP3rsUog~1S2(Ss%t}{xjyTv4)BjUGWyh#&1
z434i#&JoSg)zk*Xp2KT$ZF+g4c4cr<(=iL`oS^>Jb-VsgDCkIEVh^YqAnY0u&3}1L
zRl1$fLX!H>9&Sg_BfjL{+$*)EfeBpn3!hY*CeI@?&1N1MeDa5nknXn`CGMZ?S3*tQ
zhBx`gcE%0g#-PbK7n&pl2-6i?v5!GDT?qrlLb12nX8&7hcX!!J-nMH+fGVVP2j-gB
z-Ou6EY2oBRaFeSPi$ym1BOA>%-mBFne(hS|psw<HrZntLCS<MhK~Y_VC5p%)&gmnR
zaz+b9Ne{D72r~pfp_gfSt#lsv|3>a1dm{{EJ86;ezwO<1Ka)exs~|S!@~zMD0?xOA
zSWL@xqZ@U`Rw7RW0z>hL1Zqb#f}8+4s1$UP&4Zy~kz<2tk06-3kZM=k_*2>Wnv^ht
z&%7JLVfS*#lIh>iU+8@g;yjgJpmh2ES)bq62Yrh6Ty)<KdJQcSU!812Pi?@eS%Zxf
z`MYgMzEoWrymlx`*gKDa;XPha4?Ef$k_#ybGQiU{0Ic7n%VoBRI2Kv%43}$Oj1UQb
z!RzWha*{UL*RNUQmw|~X;CFK=_spzI$lpey2@67w%Q(gMdrK3(gTK@%j2=)5B6?)V
zQ(`%Kh}B?GUU>8v<NV}`0Gsp6w`a#s{Q;uyuMS`pqA?Bcr{T6vk!}kH`RTGh>}@82
zs8e+`6ch9=H`Bl)zL4<Ve2QJDl-CgAYLsVS=WQwA%1gA;)53py1`EF5J?;NTOwIKo
z+x4ZZhAbx!#mnAtum7VGAA{F#hbQMhop}O!!>S22YI_E*IL`!C^yd7e$Fd2$BWYcs
zUPI~GP%1~$K*#x%nACg(e;#0%{WJF&ajfB0^PHI0u&a5_(Wja}y|;odljnZy0X!8=
zvVm{GMhpR0xWTyVzRm~3Ivo1dMHu^&d&iW$`(63*qSyQ3597!BGv)vHm<?w34`eoE
zqz%kQqE>SoX|cZt&!OahNTwU~&W86CfX$7=_@Co*#E>=gL+QDH^d}deTG8K`v&|+Q
zXKmz|khk&iAIRKwI)cO9nrDJkqeL9fk9=+G+7`zdTy<79-as8MF{eCUJ-{`?91=ro
zGUS$ZkR+GXR=mij=#xXdm{=4^wZ^<bNlP6~+nwZyZZzrPGq|MC#Pn4Vr|kjvfOWOT
z@CUe4%@)P_`lgd)@0GHuxNgjME=m9KIejbq2p}b*8m({4NVL6Ms{5~Ky*BQ@sPRrA
zUr>TBH?-nGSJT!js%};JE5xXvkx!)h8LkqWW+rwF-hHt|7fk)4G3!CbIDd*SyNwgB
z{~rDH8bTQRXLy!vnt4a*HsO<T^N;wzyB+gi8iOi^XWov?jk0fP^}R%78+=a@@otok
z$7S{&BRzk=wjMrATeTNMoxmGslVT3n-4K9-DcN*cL~{kWw*OM1OLg^Ga+Lx{q}Omy
zj*=+VRE)U5SU>G$Y9x!-4><x~Jl7bI#+-&8P6OcvHUVc&d<_ZawGO-lFnaC}z0^a=
zr&d+WIj$OisaKA_RB&u;ZRrRm51}=_SeEt-Rm3eF%ygk`o!($rA}YyDdvk<Md^318
zI_{pHz5w5h?&T}T$`Z+@wlvApL<L7t@*tPPG1apB<8#?sw<IQj-cTN(yJ`u*!~%3V
zTx((AeVmR=g;+a@HFRby!^3ondhopLi?i6s;ndXEt903u(aX#3t2auiwRMAZ0dmQA
z$+t&O;7S_*Ldf=SMwe9f;<T$IFN3znwt&N+xqgN+x5*;SnET;(H95}QTI1i?QH<n3
zb6G4tOoNNl{;+AFS`sw2%>xzfhaSgGJ{OI>iB5BE>v5v`7roQ|S#J=X;3Ic>-4a{Q
zt4tyn&M6Z=a*6GlGHz3EQP%cHgSQtK=a=3Tq3eFMFYMHhgUnYn;A1k*aWk_uJ5FHX
zSa{+ER`bi#?yEsmEYK}4xx#1|!wsTpSBgS-)eTkmCq}(-#SRP?Zg`$rXNHj?AQ*3E
zRHnD_`;|Dqz|UUG!x`IaFG=>t=|78&JBDJ#zjs1Dnp9MP&eI90duP5{8V*_SpTjqU
zID>s5{0Y@^a*r4AWJ7}X#=9vw{Mzr3r<n~Bg8?!JwJ=KS=$@>MGNgY-wh5g8I^aR<
z9C`4gi`KYUFQx{XSZkB~wnLML8dktE(H{^8K}O@oeeGZ0TtAy~yXLN`M(ak^6zpQC
zk)kq+t5Vt;tRAaXsJKFlT5N0YYRPx7Hn3xp{^~1mwaS~Z`n2{!F(7_0-h@(nEUATN
zl(D&#xOub@)i1Ocvd4v5{2k*^)l7m4<Dj;#meE~iw<&XGLC>9{Ea&X>b$9R@e3bRV
zg?#E3WlyJL*od*GKXeZ?=zYjMAW#W+JKDhSj|syC-QEe41sr-4ahnc#tpTemsqPl5
z^n>=46i%&m_xLW;)#HT4+41=8<&V9Arz?xmS<R{=a<~9sunLu9OixdtD!hyw+^cv+
zgZ``T=_|jcNP|xMXb_Hm9&4D|`_kF9)3PN_$)VuEfawIKAfETr106>v(e&8cA3MGB
zwwd0G#>2|a=g3Jc|MqSt$t{j^CO7hD9q2+T-XLv%sH;1!fHH90J$~I&EcqY3Nc9G%
zFI8)H1ai}BL-@gtr^{DO?QjM(tg3cY1wr@VUehrfq*&824rcs}j>QcKHC5G3nWA>~
z_RWjlWk|_O<Fi=LM{4JsS56gGop}hFd46`*JFeqqP)93FL8Om98!3%mouAhUj*#5w
zx+v<Th@g4dJL|nVANIS$+R+S23)5bG4c+78-o+N(Cy&BSbhhj~yC*jHohk0rbtb%3
z&tLbq==M$CG~+L}BQhB`(|OY$40@4ct50X1S5-ZgVgF6<{OxcHI_%`w&@o)QFV)7o
zMdxt&Uae<wdC(vLKFbDaDKuIk|7a_o*`YSu@oGN(js@{1TVCB)atr-K?Rho**~OyQ
z(5F9@P0w_--m2Hs!X{Id2)B7K^H-ea=5=#Vqs9Z72#Cz@Zqs<s*6wQ3a4ILG#s@l{
z5~}|;rVTvN`sR(;(f0Q+as(%fZOt4HXy|wlQ^x}sJK~e+%#58?&*-6DmKjzZLNw<~
z85D^|Sk*ic{c9eM<&}53|GnzR_sJOkjm0;)AAVQ!p|-3Bfl#8A%T+^5>B(NYY#R64
zV&kO~{;9~cxnC`Kx2bQoz;_J=qJ4b4XHcI~ikGKst69PZbO90pUP73zOtBcEdqCo%
zDT6}nB})rryZ6|}?c45(=zWb&UkmFQgLcx{?JO35>?_HmRSe-DxsYxFv~LesrVOb^
zk8BdXSY1t(d1XS^7C8egn;CV(Xc02{ra{{R(g2>*)dXM$1T131BE)T&zG2|%H@Ej_
zRIQf)-~zDh+~z?Xn87Jtz2nG?j#?PHGVGj<_Sal#q5Wi{13eO7@WX}<>g|!omh<{e
z4H;neR*v2<38d9<^FpYTcT3ly-hchIWQxc#rvz?-0J`OA5^4+Zf|b4ya>q7JNy83b
z@Eo6CXi|Lt)H?|{lPJ9lcP1QZuSX)A+*UM#5%o$);sh-IPPIR1BQ+<?x$(|xM`M+r
znwDAh?x7`JI=hCHY&Y{HpVrGdm_oszls6>iwY8nBqw>2+Jd>-$4A1Uz&#QL_=@-`C
zC<9@Fh5*Gs!-G~<UZoR65V__wnH40yB>eWY3f4a+TZ!b?9f=ls;DhK=uBRfhYM(U<
zt8KCanf?)*ZxCB8_`;FkfzVOwBKhvQYIS2xb@B$5;6hY5*{a<}<J<q9v%TDZIiaTh
z8OnnRXZH8PD3FHaZ@-5=w>o_#5yRcAmf0k~x^p^57&nL;HontJGNbm}=D08*mB)<k
z!9}uewJJAll_n<&rJfv3$_$(?9cH&0dWVl};`QdEUQmP<GzI_*q>Q${AtZu(HO)b6
zEzL0t&cR!);1H#zDhFVkDp@ZWHb~O~kZyoWLOP0sI=N|_x9c3-&dW96zpXH5M++D&
z`;g9;Gn8=%+NIu`hS6s<pE-ENYr?lTxjGVp2kAIdMD>>2KA^<GIif15W@}1_Ob1fv
zD#d?lx(qoJz+JUm08T2f{SC0VrV^-_@I{UMHEmljr{Mk@$rAi-6FPvA{c*XnF-<fu
zG2U>pk4%3sl!zYm^i6ko{5m{OI$5Ia5oYTprnh6UrXuSp$f5l(E6Mc)p>$`vEv4AL
z%nPaVQ*lA0#H5&`DKKBuiH|>a>K}gE-A%eue~IIQyH9gEbR7jI5>L{b<))1qKdsx}
z{ZxN-=cZQVFywv!X+XbAp49Kn_<Sj2{D|vfrz|nKwKEn!-fVe(0TtUnx}ZiRB0`!J
z33+CLumQ!)Y5;_mV2G+tERwI2qvU&>yT~bJ3EMQ}@e5Yc{{GU{_4i=>zWUF@uiVEx
z0#1mTJr*!*^HT8=HBae5&?3>wW%Bj&L^ulWwU#h8s;;M^DwyK^=Tum-_VSngqhFnd
z>8Ypegucc^2XIW~o_$zl3*<H&TNsaJS-j7uc;S#7;{i2!oy}$i!c@W}AArs@C}8{P
zP(B-z=^gQ=DBz3JiY2Yfm&eIB-~R3I5OM|KRxvf%w#Z+7_!n>nrQ5aY6~-W`i5s2{
zdjA|^!Zt+8H*INR(7?g~2N1AL_^IyyVTj0e;(zrt35y2cKemqq^52kEhAT34!|5p6
zI;T|*OK#J|P*&6qro&eIM*_-`HbY3RJF-dP0B?7eQSK=`J*|{>k(N`7N=QXiyAP5+
z0rl<~RQFgUB4{&^Cud6WhZ-vq?ci#2QoFQnjNYz9iaKuJWPE^!JktmSX@!(LRkfa5
z@JOKao>D=pW5xg4ALpx%#-)d|LjD2Of|b_&Dk95Y;EQ~v>b&B9f%?V(n^T6p<c|Sv
zRuDqed!llP34j)e@pq7%75Ld-tR6{_#1Ox<z;v0^1dajhAlM@eXPLt!q%&bQP{JAM
z&;+nPYlbARo+`<tvxpJTBD5z!gRp5WIlDNcyi+hoKn&YTD7gl-S5J?cVEPbmIw<cE
z8NM7OT+lHI(=#1I9r&5?fd|=xsJp2-@5sWl?0q&foj6e2py~n85}n}2SI~MIpmh2k
z;7u#S%%ejAYB$_B-A+4P#LZWES*^s7EnvE_B+<2i!SC}FOLQ;#mZ^c<mF8W%{eja*
zwn!&9kKeRqZY(ica2yd0pp&a@gYD{9mF@<?0-BzKif=ojX2guxUofE=oi@hVBwd5X
zw)#pe4Qjm^O*#@FFm=A5G^sEVYVOw9GCI_l_G!>rjpC~4A0&S>e8w+*K1&z4s*5YP
zb7tPGJgGXCA)yZ|)T5`?bd%z+<7huYkwdafjeCwEs>b8<;%sERU`{Y2E$YLnZ>BT1
zMC=MKHE~yT3ZIY8f9zeJb}#fPFq~`ExXBG3qns0kCq#qD1U0llT6FacuHH6Y{CLF}
zx3{5~^gH08AKj-W4L0o1W5c&lrk&S$C;3e(&K^mE)3ypUxX7%*EHCHb?U}Jn2VltH
zO$<}utRH4<VGKeWQ3sDigtDvoGGDnT;6UFs!}UxmocP&q^x1FVePTx8Sv0@}sr-`v
z3i>vE`^#^?DrF#;0?;t$%hn@Z0u;nw!R*3?_-{inJag$Ebpre;BhF4zGI>ZODE-5L
z=FbyT<*%W|JUT6QZG{Ceu@}}|XJLn*-#}M3!{L7U+t**mH1HgXL|U5b&uv;l%<A|R
zm|T)VeLhQ<Am(nt_))A&D{oMi1|s*shW+vYQA7E>6&(;GFMv(4_jKP4OB=5EJ?3vS
zX>$f(5rD~J;LR_Gzq;3GSZiH2IGO5KXmr<*94VUQ7qqP^*&_^pH3oZ7H$c@FIb%!T
zpq@e<|4Kws+to%kSu#-R4IXG|nS6M_8-pd3OmjphV`>Pbuj#Su-_z<G=!2>ucvi8{
z7Fr!(dXsb!B}PEYMNws}*3rR;n#SrUk&@~u;(vpl2l^wdN6J?~svhjc>UVQ7X}O5^
za5`_Xp~>h?xI379A@ws7Ju>-w2PPWWXexpqQ*uv;XByk*6t5p?gSh_0Po-?xBkt7J
z7(WJ%U)NE#Ns~UghmKIsuSQlgP|7}WYHH63qz{>c1cd#gz6r-3E&gF5p-{u5A^V=G
zT9XTYgpl?YKY;kga10rs*A+5{+GuWbN)fB1>p?;%2eQ}xCE2s36gQ~$qk{fXt?-Y|
z8q3LC`;nIZM|xD5L&cD_OvQ&qc}E#Am^l$JKL?92XsUqV!WtPVdREU<L%f%~%d%xf
z2O_&IVr6{ZFh?*V!XgKzhmVqgJb3;CS=mu91c(H*ubR0!koqnm#M}tO1hyVW&N)FL
z8{nLwb;4UM8=1qs0NH9`=uLyN7LD6UYg>P(x}V5Wy(cA74)0mm(Y?0ND4Tw)Ygb47
zt}Uiu$F5(mYPTFe+u}nGsX-^u4I;rF{kM?@#Ob_2kR(uyN+eWKyMJjDgxUO!5GO4F
zS1hhTUiQ2t$xV{!%6+j#rzSqzLy()|^^f`DW1A0XnMjZ49NW>xqbmbXKgcYE`EIm~
zzy(Vu*@j~jn(m|p5Nan`lP?@H6ML#zIKl%<z%C4-cxrc?AY>C8GKO{ohSu7XwHRKu
z2&r=u7%sFm!D<S4tm28o7O>htvYfVS!X3h#<$*BTC@L(|+)GLX0wOrH-E*<-eDtgN
ziE0S>eJHu7w#EILvx~?O>$z51*l%1xVY7Jp@*<rr+4s33F@ZLl(~C2^z(^lZ>p@k9
z`|U^i{v)nT{fEEJ@6$G~4u=P7n?uVxT>YxmyC@d>XmRS0ff1<C+TJ%NMz$`t4;W9a
zf;?FZ4VLCw4<cQO-tl|0PG2@pnls5PkA-Te4-@D*g;RlT;KMD=h>TFI|3aLMl;$#B
zFI(I^S*vg$X`-}c77(~vgo!49_JKx9e$zcYJwHZx>bIA@sDm>6^=VU&Mx@)?=Erg#
zNIUv&yr@)<KO-+j_>k13`|;o|{D+Av8u_o`iyir|k<ylV&Oev;8rrZU?>PdbUTZQZ
zUMmYpkJ35;<o8?S6$M=$qIRzHc_E&ocD@p-)xza)w62<K9&Jd_N3sI3D238ev!S~^
z*>NlXTrEF-3g30#|NI^QA@=&u+~qg#?;g*2JG=X~R{2K*iTGBv_gc$O^TZXTEimsd
z?%KwvgA!GpM;CgP!0ibT`G{5x_YnSZ56|9|i?X<Km2sffvKN2)o^6(;_`4%skwp8z
zzjQ-`7ahH;Wua7XM7>B8VT&_Wq5+H>qz}yhot6HvI2<D{>(l+sNA4jqVmh*((?)no
z7%XF9q8HAzOZyUk=X)HvMkWVUNE?`<gh?=ptNQE%*n1#-667^f8>ZSO(^;J+k5@7r
z0#$6YFr@dxEFEVv8$q>waeo6fG?v@YfS#_aOy{lhd=GTG!0*5+cBCWxzy(3P{Nj0X
zg0Ek6PvDbiypQK;A;Pu38D)#f{`WOQtwtG#6~{B7LAs|kf(A8F1GLr1)cwfOlF4e!
zJYa+%MRgF;!cAJqEZ+>8pd_E`@g3aC>7;@n;Vf=L&iwDzH}f7Mjn#ZPs#ZmrUT44j
z?N{N+<&fiygm6_wnP5aQ$ID*nK}!C~*PZ0B6D{>j76OMSr;t;<_ovQ}Xel@YA?P@_
zH8baS1ct=2Vat1A3I1~UYdiV4&4)+7Cf|LR{IAn3KYxOsAN_sX@4vzCpZv}Dbf2}w
z#&-7NDQye#vY}PLrTaAF`)%Mg`;tsZYjkQzD!8pAC-+H_mTG6QAEI#t2^Wj3jg~M<
z)743`MYS$7sTo4XXzc(k^Q3aQZ1N70SWh5FvHD_m$5-q#JYk@fopP`0#H`5v2t~~n
z8ofd&#WL(*YFnG-(~Nh$#a)tpPzs<TLPn#Cjl;Ml8sBXFynjMFpPyAq1EDx^ly-H>
zkWcf}kNE^bLJ*FfC!zc0kvK9$7a`LKmP0Ki{Wo9xdP{4(#Y&SbHoVEeEun<8KbAcz
zYto+s@Nt=1i<(ltv&k$ic`n3Yq1;1rp?s(siFYQThU{q<LGU(DaX#@X9(}G9Nnj9t
ze*y`v(V0WvN!Z4vWrmI-IK6oPclT8Z?u?i>9Es&AO!>hLyB!+!U$Zo%>9Vu^rZ;?j
zev<6LE@hmybrCh-Mu9PN314n)XE^KqWZae^38t-*b7Mwuj71cTM2pu)RKRl_sUEiU
z15BZHdaib49Q@&B|LoPE6Qq+4oFReg%l^dxfq_~Siv^vl(*-u?d=<UzswVZigCUq;
zM@OSW^{#i)I{}z<tP>zd!oFKwQS@9pQf41UpaYID>E&Q}e%ZrH^XUiG`0us|BM{9)
z8meEE4HTGFoyy-{z>)mLY46QIG!4BI6fw`KTo?`hTOEIkNsBi};F`8r`}nP|wpyZ^
zo=BYxzdRGqeSik5@6vl862W^P1)S3BRHI|{F4bt%7Gn4<xwsj83V>hw|Ir(r^j>z~
zo(@es!A}`xrKN+-UA4;Q+JR5_N{D(GFo%2ZWeODSvT2?PP2RkKG!W_$r-&ZDMtC@Q
zDD(31eCV%tS;QNRG>$b2IG~ZYow<`pYbYNia+^D_SVqlqesw1&5*hjD(b@S~PXzYi
z$DGjGq`k($Xm7`m8rutyS3D3fMa5TpJN{1VkGUmRU%9Cp8w=VW^iiz%*ksCY>q$qP
zV2+2P!qu#}HZ>j(PtRX9RVlx2sMF#*+6e0~)JH7;Ey8-J0U{D8e8jOn8)?BfFoU^~
zHfCIHuReZ^#B=x+W1#3xlK8a$;<9`B^XPSVU?Y2C^7o0eF<`}*;9BzsF9J+69i21&
zdIRU%r8A#?t7!Lryr7Jy`E^#U#&;O3@Fg5(_tghqwxcOmHg)>#Syyc{kpEKe+uw}d
zoP0aFJbybxbfkvvyN#@F(xc{9!WR$N%)#sK(N^vB1rgb)kGmAzgHs0a1_A_Nvsl7K
z#3CNbu}aY5N4<Y4{o+LZpZkJ*td|FW+pZ;!`E<eQcUkgj0+d&<cgV1}FIYzs<_yT`
zERe8!kOUNfu%W1{fvI6o<VUpBHK4@t`5T%%QMLZ0)pj(52<q9O21ZTp<x#k=`ht2i
z25RG4CYLXdzdii7e@m3Y{Z6Se@3K1wV7GPIJv$kpF_b2ngH7ObF!5j*Nn8@K!c<$T
z&C*1QpvLNM=II1V*9yM68g;>)YfQ81UKMgVU7yD!#ga}tABjQEFF-O5`^P`@lpYY<
z$Oe}emO;%O=j8<{$N&J3N@@KL6$3y%d!?56U;e6y$~Q=z(1z)YQTOfeTz$roUr7d*
zf>rsU^`VV*{q;lmQooZQYp#2%PNf_zJ<&cR>N6;vu2%&F9H48-!NEb2UoT(>#>i;H
zl~%q{1CzbXNuscTdjxJf;bZ7lHTO}Px^SRXG2fROw8Y6QOUn_q$p<!JYO^Apj>hYJ
zrjEfQ>RaW1`XJ5x6f_vYc;s!F#`ysqiki|wp$VO9Z_~F=YI>Q8thQr)?oT*uC$HH4
z1MWQVE8IR`_W9PMI!Jzks|@u(eK?0nz0IfD>`s%JX3JS|mrW`09Gk4rjODuI*Q}q@
z-mC8M&wR|$n6J<LrcwmHvjqsC1-Jt$A?@5soih4wdIw3@h9ZGml8MwWv;AxlBc-~3
zm0z#Pf<oWwxuB8dmJ^DZUHh;_Try7kGhI?`PKxBZ(sxX>mz=#!X8E{G%e$=x#w9K{
z8x~jOMn2-yZ@zuM#PrpQAD(K<$&SY-&=^cv{M<W1`QRAR@nyXnsq<hIrrr;*W(^@#
z0wkY|(&@DIi1EPnd9srnDODk7kO?>-`kR5hLB~gzy_chl%f4ED$LDX)hOIBT9bX~|
zZa#bjh90%i_6O>t9D}u8d!Bj-iD{C5BuB|pogd7(*2Xb0-AwB`8Mz;$I{2H&Af)aP
z?DH6;JOa-)^)wY)HgqExuKHm()VfWmzGHt=R@pVeW4g!??@w(c=?q&AkJ@3BPYHoL
zm?kit8OtylG7gg0#jRSx<x|4x$mYfS44eeoj1<Bnp-I6<tT)0<uTd*kH|xrINhd*Y
ziNwI@v8HWOQKna`tmJE6J_g@r;151qS2q?}Bk8(yAw3Ib!z_#S3Q<r={-v|3Pyz`&
zrUgyvWJk7sUQ}?EJz1-|s$#arD}XA?=8Sdml;a;;*pN0yA^;V<Th^ptLUf}z>;k6&
z^MYoXEoM5>8o*=H8Gk93*#eBRMR}e4^~uqbUk}=jaB^+rRfwNs76P==Ca6d|mW!CV
zp*fq+1u3MJv}Xe1Fwe-Lnb1I-KeOCQmI3{RH9)kR><rSVV2WBpf}0N_f=`ylaQ-%a
z=OAJkJCJO;rDRWK%VKH2(MPvVVn2YFUO`z#Z5?HbRaIO{6i9<}5Q+DwW;?tv{ZzlB
z)0En~VS?1JFCq1&nW%EL1WV{uKFg|hlWwc^WnWb$N{vNXEr!ypbW#3CF;GI6vZNYv
zj5xN#)a<<31YJ(ZeNW7I-RHAeuD16HrX1nV1wZ+vYMtfeVv=T5U6A*M2+_#K1sW#n
zPorg8RkvXbMzYN2^sXo|900tpq?eFi-ooI5yU<oOj@C-eM2X;5O>Rl+ZK^XQRK07g
zHfXnQ!u7^Z$CByP)N6a#Oh4Ym9V#*e+%c`4L3E30n7eA1ncF;TSe-Xt^;K*+TeUMK
zusN(J%XTxgd3JUoUNbA^^ai4aF9dXv&kbI1@7Iz&J?!mmY1KIUEth^v1CKxZiR<kb
z^qanlz;MH@NPRm+FLMY^_q*DBokNr+O1Ndywr$(C&8oDWf7-Tf+qP}nwr$=-SNE(3
z@6BQqqgX3e#JA7cu3Fc6&Fg;{W@#ebDtc!kIa8~$q^2G^Y6bs9ScV8GR}-)wAz%Xb
z;U({#3vX*?VlyR-<H;zCxyplP+mn#`d-^iPZy??tfdRFbR;%ZoPtBf`1AZ%`S>6Nn
zV)W*3<Q9kHRqAI!#MF82$Zik+paypDDYw~Jm^v)8G@KD%&C0SpKJ1#r9&!l54r=lT
z<cz4i3|1Y@5(Amrea3x`Vv1L@VgdEv$E0*pENAEETG8K9<(CL{xN<OqKgkNr*bDEb
zs6@KmO)@r(Zvz0M+mXNYX6D;?9*>y{*6Wb>t14fEe)VREpmqd-T(JU>UW5SV&6*`8
zzGhE!j!+1s?Og|dzktyG>KFz{U8eEhOuk0df7xBHO>;aD{zG<g$ZvIXTTS;t$i>e>
zN_g=r^NEZCsFhuZZbGBRaPn$UpazID^<P>|$B%ORMX!ffbYJHdI^j9%zg3oMsX50}
z7c-Y1zn~04@4qlVf+4@ZXNR)ttpJ7?W~SfOYTzLe(u~evH9-&s%|Y~_8+LEUXOrg|
z9`;G1{FAQlJ3*i|z^unJ)j(J!>)q1d((qyXC=dU2pjU)&K_~svPg5CoUSh#4t&iia
zzTXXP5BKLfi-Q7a{e&xwJF^J4O_$;o7BmWm!}iTMMZLFN@M7U|i&3~wgRBU2Wn3GV
ztf(9~2nFW57W?)_ippCO<tXj|7lbuDK)TEQT_?-=NY7Ey+CJl3x-X$KyS;VGthy#S
z-4XU_gaQmmP$0JIKM%%a9y>VaHF9NFELfrsN0!#B;WI+S)`poYYzO>t$~PPb=8(-H
zj|A%S+k3v?5Im89wIwf&@1%C>=VGd7aLKM8>*vAEdGT+h;B{_c{td$3zh^US)~ZAV
z40(?gqViRNtYV)--`gpn`Rv*Er{?`TwtM~>l`tcO;4n<(*qqU|MQ#x-X^MvlhSm~^
zHC4stdNT>GjL|P(>QI}GJ|uL$blO$2k1wiM@#Vi}1USi<9{Fw%g_)vCZ~e>=CY31r
z<k?#7YVwO<P61C+b(mP_W|e`-!F#X#scrkZ2+HF}&u(*do3MVaCYXaJrgYRVSUc2s
z(fVm{22=+Z=M6T-Xdo5A?hcO~-XBA@_OAyNHE8bQ0de=Y=fBV1;sm6pOHEG)=O-WJ
ztLuVZC%U$sLOsnK*T3@p#>JUq@z92)sNW!f0Idvwn1NA-B;TH0)PQsnG{H0BAyu}0
z4$F6cH_vze_vv`5XN@AU7!l9GBa2C7M3|5GAJABpS|&vUfawd6Sg|hpa<UL(O&u(U
z4&Uxq+z_?P3Jm;I6}L*)w+56M=<~J?sD-5VTE4(;14PM&wd8j_H8Q_X-(B!lr0}kw
zqb>QixM+puMJ)DR=l-g&zVGW?XwMXD3(QL1S=uc=QDe@bp~LpGJLZmC{!%V@gkr%f
zQw1YfP!P2T5y)0%G#@dj*IAd;BMy(A`X*TR6HNpo>(hquXa*R28Px+Jd{zt5Zw#mh
zw%A+H!>EO)os=<2JEPYWJfW5;n8Dt1d!S!7XSGb`<U_RSKL}xi0+Mgu&nfZxhW=~`
zXcGzX3P9-(PbFX)dUB8K3$v->jOu|gTZ`R_f$n3%ruuk^_?Oj5h(Emiqb2cdIDyYh
zo+m}GlNUFaxiGM{^|N&4YEqyK{Xt79d$$PXZ!Ea~xZaU-GUo$QD)S=BJgXay<zFJC
zJDEqe58K{C=Ld7CeC5;dkVA;9bC`sPm$d%HT6imgZ*lesaolEDg&t&Gm&DBvmOx)f
zJWV^~Ps8!op&ILXJapQ~jCC4Gi_V3KdZd~}LJTunm~J@JD_50xv8=YJ_R096$&Wh7
zR&4nTj4z6y=WrCubDeIWJ~xX0#@RbnT#;bV9j<%Q9rzBbj1UJYo_7#qRkcS9A?wwJ
zM}l%dfInygGe$E}gw95*1!(1OFi6+>KLQI^ZGk*>d<5x<;_uaNFcsfK$3P=W2sp@6
zpM-3ENdA;kfAdbp=}aKtp$1(eNLRr-xQFjqFoGd8DpR60#Xd9+rsx4!*UWyMc~)kT
z>Dx^47ZzK!OZLF$A*O>I*r3y#lME>7gm-yeIG4ie?<|(SJfY4;>PAS~0~^w}Em7|8
zJ7jac|EuvwbjnHXE5|ms&o6fFyJ^iq%xpSyhFpGa<9rd-Z1nLw&blZ|dzTz%eaL>%
z>nM{yG3j($i625#R|k8I>I0MPNoS0iW7Gp<1v6f-MV798l`eAw+T<x#(NhmfC$fu+
zSzCJEX!6V??ztCfG4+Ssj9oK8r=|Vdr@=?1w_q^5mk@tc3ZX&#?!ks%M4>Swt#y8j
zjWFodkVWgmxLP{b|4`K_y(hf;HX>#sIZ%1VA@S4^n+^+-a8MQ*iar<@HX2DdM_rtu
zmg#0vS2jGv&?V{2Br|=0QHIH>KJTte?c_V}?M5W$olk|b0Is{(%;j1jM_#N|{1J(#
z+Ji=TjEH~wF{O(T*nYasPXNl(eV#|@b<}O|91<=`E<Ri+5=QJ-0C|iX*$uYO06ilk
z4k3t0G{FX}uMm~(q@x&>fE`b!Egy|}Ku=^mq)_d;V9g9H9Yzp2e`dgF1Iz_lo;yY7
zRrWo+RWE|z(*Ug>FzdPLw~$#-A4qx0Xkp04?@fCyww3drd<aBB`{gzw{wncU+l5hy
zYb)Af(<jNF85N@?n$*iVgB~Dk_99Z4GD?xluGT*MVVqCZH)}4CIa)yqp{F*Y=!+gJ
zDy!IdL2m>|FoPUd!`N#Tv<bW~=_>02K)`uqUh*lpwq>JASH-5zKVgyh=w+}2Q3_nX
zuy|&ysiuzTHGTt%cc}hOrM}Uz&`A}`y}d>NWX~meGYa2bl3UcFTEf8>M(`i|tjfK*
z$VVcHsBa(aaY8?EIklFrDeZMZWc_w3S#n7;H<?C^Xt9I?8|&!8IowF07L`5#q@lND
z6G(K>`|0)(7B?1{z1R4w++rlcfKxS4;a4lw!feF&*Lw5A=clF$y2OpkM1mI+(Oju|
za0`USEQeFTlMCFw;AE7b?rT^NeL6Fv1XgF#Y&a=t1_ajb0e3jB7Jr6O9Wwu@%3L4|
z+Mx7F`F;uXAyh|i0b!?{M#zP{lH%KYyIX@cyAGM&RBCW^FzAkJ574OoJ1d1M(%4Db
ziKrWe_e6b~GxB`Gx<lrZ=enEHe?;7H_vh|2Qr`FUyaZ4(-fjo{zIe#_0QB9%P)hw9
zqCJ5mZCn#a9mhafFCK<n^8*Coa5n8$udtN16NdX=#_lkE_ZC_C*w_Qmc6Y3q$ip2^
zY)w1%n~|)prKcytUA<+An+%-AOIzlOvKz#aeRG?^Z84{3ZRXvW+w*^PVQ`ty+AuoR
zU-!Xo&AL*eiSv5z4c^-qzw4Z6h`K!l#aTZd*z1bV+#3#h%p&K|Smk057sX}Z|Ga_5
zUJZXw=5FL^j{Ke((6wJe?HK1anP&t>f%5{l#40G_sK(31bEEE-9yjqsv5#TqP`HNg
zQF?GUZsKC0H}?@4^QwABWn1>P9ML^S2Ft;uylw*^*i{^q66oJp2iNfJzeyJ{kU%KU
ziq>|TlK#E^5&2_C`>P16xzhEJ7{VZX3@u_?+iaIL-}p4mAV898FLZ}!mQxt1wmSe;
zP3fL2v&pXKcY&Ft|4ac)5#fCcucFzpYrV;Oh-=blQU$(~mZ#Z>2MfT{MZbZF3-)uZ
zGP33lBJGJZs})DW)ci)0UQPmW_u+lfBi;t?Wp^7>trW|-{1PI#D23@b_5>a0F%CWZ
z3bl>g;Jull!?Py@xZ^|I;xm)ouK|QC+RGg5Z})G2TH})NR`sdWmq6VFNu2v>E4%vj
z-Q0g4M6YwnKt3O@aG2@6@7Ub}eqNq|v^OqqW4q_#b&%=uWn~bKa#KA+of7>_o2mW!
z+RaB}PrVk=#{-a7n46l`Lq@rH1To?43d(q8sy2|pGP~xcHori($&t4Lz1~Bw6Eps>
z@bgr?q~p5&TvwgMCgV-J;)Cm9;ns?96j_YIeShxu2=Vzo7Q2dGsPSwH?VBS+oIXMq
zL4gP==xcU+e@hFTS%0q6?mxc|27Y&?3R;0Fvo`%2EnyS}x$pZdeI_J38AVs;&B$vT
zBL=M6$4OpMT<D^B{8beA6AGWwvc?q>dbjyxUj^ubcSV$cBm62L+dSGf)V&Sg^so4;
zD9(ppak&~6_!lq{QWe@w{T7<dB@frCETH^Og6pP$pKN2!zjLR>*r`)7$^)*|sXlqL
zB~nOg{yweT9*WRe)RS_+2YzVJk?VU3`H@gb=9b6fq}MVY2GY-!Uw-MO0!0XCL=iRg
z%mh?g0<lrdfSeLeRUON&XtK-d%ZPk3pb3f9jDub8QR~7DFnNQwZRtlC<tmb(1qURj
zH$c&<czAY()t+B5*b>gcEMZQHX3;0g$<Mk&Y>bpn;IArKT;aokpQN6O`4=WdN2@1e
zTuuX(vl7^{fSO#I_z@aPw6q}iq(-j96rYy51rjrk_Ei9Qv*{h-2Y&n!?$Jr?rwS7S
zcq|Ci?qH%MR<>PNVroSt-vkE#+#f+iXj8TCPf`YBf&r_F3%bpJ4w56CK^{l+Ek_6R
zRGLTIvSNh(y}5$`Zj1O2Y#i%y!=DS7ABKw)M8l$iv*sDSj{Om)_f&A$Dwg^9DIB@w
z+Mbe$q=H_ny1kCZhrLQR&<2pa>mM>nO_7_$vK)P>CBdS0o0N&jt=0sS*I9G$@9>e6
z46Cq{yW5Ir1=Vs7Br_*IkKXLI@CXf-1n%Pl+>gN-v2_VM2h&fv&^znuC3=Vt^%5D<
zpbyN1JSSEFslcfdE@~Ju40KJ86uLaK&^Y@F4tl8ZAz@Z!Kh>?E9aTuHGkUA@@WDrj
zL6{iG7ydJ#Pk7BS3V*&_C@mdwwE%yywFHcXI(7DJM12m~*U)7%@meoA7Av>f`8i0O
zjlwL-1ABC>2}wmBQmeO4vv6dw4WBNa%DAHhl0c6L7)V7$O-1T5_Ve|4(whVL*?e_c
zL%_^xxCo<`8a2!~J2*IwtIP}QUhIM72VSxwr<8tc4$o@<SO3blVM{<xX#>zB{|gHx
zTC9?Mz$)0$2u25Ce?wLmvI@omcQc(ZVuvI2uS78_b&=!fss;**ut*^`_p7vo=H$AM
ziD?ZL+});t$aTPNE=ciAR(z(yT~@+_vZI@s>P)EK{jezN%;-FK1vPh{7iVr^43fJ?
z7`*VT)mrq0@EG&icriR^LqgT8yyKN7P%g+;Bo>GCr3&!K4<p2I=vV(f8hr0RJ4lh{
z0!a<IwkznE4++`=J2T6cDlvsa<Jc3ES4GgMD(@+0G-^WdeV>kpm>Z*|=)6QtzU|NZ
z0z8P^5xitN8jhqEYdgV-Tz<g|V-RaqtB!@0Bnqw)Nc-`k1+n0y&ZjOadV>M6i=(}i
zw%{W-;UE@9W-|r`)kYk8r0pmRS#%Ak8PQvCM2m8cd1ea!v7#Hf*)$0Y%fUxHGDZ_Y
z({o^$8ePp`95z^Ko2sUDE0&uw8hR0ePZIdW&B7er#QHhx!bk*bNy2G~Y2TgpWQ`Ql
z4$pWK*fr=LNjc^%%B0Y)SH$!!c4gk`;%)l*F;u6`y+2Q8T(f>$rc>r0p1t2p=@QRU
z*4nNbp)&_;O*vZrw+fIIq~HR^_Y{kz*i{g+O{~o;uC&#03RapFbAv$nnSHOplj@3u
zw<Ow#`i+(jf(#+7cE7(%v5lF&5#G~0N8t-ePvS)HKgNDHrQ~*;&XB?&dtB$20$W2&
zKRBU${~Fm!WAsY<L=pK0M@TBjcv8AG^t8{VG<L$On5G6VXINW-Z;RJ&-kCCG+y`aG
zxH3OyHV31poux|ogES}H8w~Vvd*R@SW+g)3{faS_YD3knKG~ZnHlX~Naf;RS6j9K6
zbO<2TG8p6wMApU+eUDZR;ym$}=pcu)O%BuX!e6XS8`HuPKbK_S8={ara;UV)++3b+
zU-}+BwOOi{m)|U9o?ZBpymzW5j&(04z53loy6;<UXJ}19<3YV&dI(qN4n+PeDpiO=
z=6s-#96+@VU*w%*VIYr-LFjuMfvnx81Ur}_14DPR(Tq&?M@sz?HzMYhsJP;r1MNtd
zt8pTTPHtscFTkSmSFL4hw<(%r(Q5*nm+}mDTC`PzUtXYb;hj{E)t<y!Dj*od-;p3^
zpQkh#+UAH(e*k_2rWU>v^E+}Lm(7Cf50JZoNklExk^{soF3vy}3VBDGj3??U3WDTD
zgC(d8`x$n;T?oEP+iXm$>?b9(_AGUR-YE4N%%?T<#A>t{i>}E(<j){WX9i#oe^g?>
z!JK8NwT1iIJ6go24z72WiJ?<!u#%k94Ju}*D(8=oy5O@y=vZCN`MK4g4mtjYgq~iF
z=^cdHk;_WQm@F}5vasOuvt1pu&oMwfZTUeKqo9#Y_z^sBsKDagOf6lE?D}-}l@+&*
z!S@J=bAq9#b^>6YU%nn!>W8;L+@TmXnq>Y1?~<a@aW(IE^|6{_&^e(e!?c(w-DD!*
zCQH9fD^nF!@iKzzofE_h@{#%By0&*qXD#(4tk4LuCkQ(H9LLV%h9~sEA2O~<FIx&p
zsSO3_t5s;SG7Wst>eq;>5z3XMWuV8=f$dp74;?-!4G;JrWZ_JAi@R~SCqQ!`1G<Nz
z9ud-5Y7ONUD$2MMDM^;eIpH{kxPAkUVpeWARtF4>RS?OZ>xbaU2m!?nF?_>KfvoE8
zS~bq%+_xe(Tf^I3B?blT)za3XHG=6lwH$^b$n=XnPOO`Xs-g{ir175<a}S?Cwiyd{
zfGiH7daAVSO}ata6J>sVrA)+?Ll(=N;|nfsZUNh@^GeMhgu?Z@H7Xq9I%RNWbT&Gf
zhWS`)zlB&ZP3p$Bw&>P#*Nr9Y9f1RSeekhrle6tLCZITK?W?n7bz`WJmspCD?xh5K
zKnDL*waPXlnzo3t!@eQB7^4pzP|$<%okTh{2Vkovo~A1RwK$kLFWytXG|G}0alL|C
z^UJfO)y8t7kWx7t*sbYjG@GVei?}v@^bHqA<Fj+I24K(=*opjIU-aLJ#@xB4^*a{H
zQ5=Cl*``hC9DV)B{Rki&A@AvcVW{i?Y5ZF>2XivPYKHxzN>hE;4E&DmaMTD;)#h=6
z$iKDa-&1;zWe?g>iiv!cWn8z(Rn_t$Y1S;hW3h%AIdd6`lZ_4Ex5Jf#5+mg0F6AU8
z@QpMuv`P}`BWz-L@VQX1sHAY6Wrn#xPBL)0BouR+S&Iv(T*wu#lWKYQ@hX)E2;Y58
z3f6@g*ih|ytSZP~j_W}tWFB$MTykz{eP&m)v;f_SE&e?)!43Cc&J_pAtS5M%^n!r}
z`EjAZDIDY20O20&oS8%c$o_IOJYB=6$U4pvsa5WS<n+|f<0Q_cfs--ID(D$cPJq(M
zQR^H)O+e2z{}t}d-Q_B#hWExR;lol9!q3~?=1mC%T<clcc^>(1lV1I`Us6e~+Igm?
zs`Rw;#{3=Q4#V9`ov6&-NOl+-l3fQ6Ejq}8U71*Th*DTIGHsN1z`Lo)W6Ljn+71c3
zT`S$~;74_xsqtzBW?q{hQ8z6zeX&heOc6<{yOrR)v>7TG|4^`vo`sDl)2+}mfqnDQ
zwo#}gw~)Wi`<JizKA1C5*iO%TyUB;ttq;+An+xSxye;OvZd7(;;|uHVL3jmNceyye
zhs*95Na5KpNh#ugWkK-B<eu}a^!qb&sm0V*W~fZNj9nFbA@>v*uJ+>bi>@_B3L$Uy
zlO;T#<tiV<8J6s&#8g5W7JAZjH7KFx<Y1RKD6?OqM%_Yhl&|`U?=r!*h4Bc$;2gAb
z51W}pQT)JaVQv)cw<t88-l}L{3!cWK%8EP1-OxJJ=rN_fkspOed!Z!kbP<AwQ!rH*
z6i=UV1b3F4UITju#{^x3Ii<AI#M+CA!j$6tY_Myu-t|l0KM8FI7ZU^)?Vmk$!1xk`
zH)TWkFt~9K3v{^&Sg9n|)}*VlmX5}JH$k_CCCd6GbKQ?R1aXB&f95IS@g2+j_)QE}
zWJ&lm!kVc{<lV5vJeon3#&0*Kd1H$a@O4F_qltC}YrQ#FiK$AzRz7?JFpaE3!3(J6
zj#q<QtCaU=_R$Z~y3YxIk#ciau!09C2-jnxzvDqa4T3tRglzvsy12qKMKMQU7*kH;
zk0y+W{1kQ--0}$&-pTUX8d2-vbkR?2v_MGMiwXBKRDrdR8adtnEB)`Vd8~bsF|)H7
zoz*Tk$O~>qG?qVW1qZ?o)$Nwe-X%yPZEFWxZz<?W*mX*iVSEa<0ZA>Tw=wkG%^pU(
z+^^2b|MD192ps=v)V>ID6}bKmMrNNN4f6`%Drsi6t~!o5gP{sJ<LnS7vHO#v&{|+M
z`<Jwz*B0iHT>s=kuI3r0X84>p)FAW8(lO#p{(9mXL8@fCgSvyXAV-7EI*zF<waGcL
zKvF@rcRPp@pYc0P{>M->b3P3cBy%6LRnEXrXp$XlVNM52@*UQz*|vg!&oh`@;qj_k
z>t#S*;J^99(CIRKj(qR4uEYqfd7dUpEfQ_xxYK*pBZrB&206OGDQ8YBIxL(vznhxO
za}GpJ)YHc4rZ@kmeCDWwD!3u~m%lOaxg#4(W}WM%lxPliJf=_IQ1l<SW}dn=*1mAs
zlze9&Z1;e|EG%^Ykdf*k^*!>i^m?W5&mP;PE2t~8!l)2;m7uE*+0KVs8Qh{8a7(c|
z|7b0u{tD63?#nRK^|TL?oD4>Xb?_kx9K%B>pWAwd2$uW#4h`}KJu@qEOn{TEv3Da?
z=`e$3P7AqnILAo>tHk)NIH9OXr)YXFqGXt4*uB#wB^O~`T~3sqH_0HytobS-6ux2E
zNbhDn&_oui1`q@5US3ka85;B_=!JNSiDT|xZRni-J#*GF;&-v^qVeGhnE5uqznbuQ
z)IIW!0m@x+oCx^&WmkUCsPDC&b%Z)Cx4*}*YT9ETkz;@aMK@v*95Y}bQLUY6f#xD(
ze(bFw8W(D;vvN?4t-H6`PDzt&=exU-@Xn%>=z-bi>2&fJIP``JyiMUJA3C^^butq|
zrap^vUS#5S`aW65M<JwIDZ8&67wX&EO!d-<PUR*Z+$TG>+Qs~XH^J^N1uM0rpKBLb
z!5OQyf6(S7{3(gffGdxH7yee>9HICJYV^7JV&|C7c-~whr9g&IBiIv;E~vu?$!Z;=
zDPN-lw=qe}mFY}sRhsk?_wC<SPd=sJgr*LNqDjn9J>|hV{QIE{^Aet@nI&n>@)S^L
z%w`!C=2)CzHvpm;XPUI6nJ5q=-t)x-<#EpxInu!(7$R|pQ3FksW*}rIt;;S6q6MdX
zq>lV{5Iy9`zD>mgl%>RlIJhS(K0PiweH!leU6iRPFY&KKLv_VS)d2s(u%-HzvV<wY
zoPFM2kmOv_ud24P(nM?y(lGw}Wb1n6LI^Kp^LiHB9?7PvcXaT7b_@z$cAn-#3m;K_
zggsc#ooQorl64Am`pzrq-5ppxd_@Ps?|}*=ewflhPC%#O5X*=!i{7f;>SL<|5A}@?
z&V*Htj|o7*Y}NZ?mMw>p7LeE?MEVU3l-P7FbUE8V@Ii)9$j+6=V};XoPa~2xJj65>
z+``4<$=9&fGQhzs^-oG85C{#^^HLxbd50Kg7SX4uHztw~Fr(dp5B^slT(r!jFwa)C
zo#o9!<i`F#E}fIaN{TD)@)?@WFzdzXR0Zk_hnW3WNh?rN(UlW24^g>};#xEBxtGe6
z4+ND5ReP8;{%wN^pl@b)gwVkVDF!a8UKpVXJF1M)=>40_rGMG<QgTTp79Wse_ei0<
z?L2a+T}m1hE*gp~y19QFAcrA%K7Zxko}a(mpBuLXL!x)*vKN{0#6JapoV-Al#cMEL
zBD5n6UrvG_*+=e^_eqz3?4R@PB@v0xxB+4=i(<~E{@g-IW#{h_{_dE=%iiDHLDutC
z8{Q=FP#Sk+fu<z5pmISr9--zBQS2S%gWE^o$yrA3zf#t9W#YmN)#0KX)XRnG{fQa1
z%&l(zYC&ro))EnMsg~09gX;0C=1Z3o0@agf<0Gr!eRwry`w<<JNK-+WGX4*7LB`_|
z-lf;%CE?|58a$WFm{T*IWLs%efU_z66d`pRAw@^L=cONm^+K!;$*EXL6S1GC+vTZJ
zUKU{Q)&tCJ!52RwK`uWpk8NCdMaZIE!7!P75VfZK@~nOWt4f`&)B?E?quDrWaQ^Ae
zME$d|AlSdfS{U*CQ3m==;)%8WNf{>er~^uZC~xV@(lI{0i!$+>zBELTa$)@<W(tTx
zhkKeIwsI$g9e0G}g#00UZw^W2N2Lh<X4PjVT92D?%Av<jJ$ZN{sF>o<sPPvclN`D}
z5H0o-w>~93r<X=5!bmKCFPvWVlkBxaI5--;_z9PIiI_YW@So!ty(+uBjusof4z1js
zd^yg^y-Zu2^~SJwr<n0{ol47cd2@bwq9Y%MtGfu~xjE8|yvhK;Jopi{BAO*^%IXRA
z8g=ko78*eryd}x_F{73#ivEGY^VFP)PXjM-C&-~`v?wwre%~$(rs%$`=XpImHw$8F
zkqhP-)|fPrl}x}l9bRaDcuxr6dUKdp)2Ip)PG_`rzL$b<RXE-hd(yL?ltmG-M?wSQ
zsKoVFMvZeev#E~pIBeH6Ew96J-FH-1YR|e)v0u_8-z(6nZv4#K${VrO6cR9O)5@fN
zzknTw6^d^X(fqq+K%(;Ps82W>+c}!Plf-ayRRSX`c{f;X7E)`B*DHn=qtYfF4Dj2{
zH|N{d(E<LzvL#h25Z{cnZ1*p}>sv+L^=d$<<iD&wH<r7YvRX5kf3haf6ibyhC}I~>
zKDMCm(|_lniD9*lQh^n&fO8FmPa4OOcZPv(@%l5Go?+YDzmOT>u66uV{q%nj(&MPp
zjs+7C#gsc4<^btUg&Q?nt{*zrvw7TNpqOGGa%C@}4ML{>(mLpwe^pm7J5Qg@8w`*3
zG$?vS%GXDeBDS)`vKfxImn0ue4nT1`quer5o^<Fd-gwRxAJ#`cEPvn6l<&qEaMcsd
zwyd2a!<#0o+x7a%&#0oy_#&I3Sc2u$-mGT$wM2Hct>9wg$6$~+z1bk_bu_GHw(&x>
z68qjr8w}bo&zvZxs5;lVB8s9&RAR<)&{*G*fI)!Lpa-ZVo@+zKgcK?FRsP7usQ(s6
zQO_*<!|frQOS8of8<PKO2x95I#>wx;s2C<75Ipb1+%rMp=W@}%-N{YBo%phFC?{xV
z%mfMP!jiL(L+_dcTs56Hl%EvM*C(`clup&;3W^|zO!|XG{D8^CQG?9SOGM8~8{1nJ
zBj=TFsR|?~rD9E8b3~h4v?{XGp53tm`LWlOkp)ZOb2u$cb($I~h&Y*4&Yu`$k~P%3
zU`slRo<hWe@M|8q$>=f|vE}lKg<$zQbR<{_!hHV=cZ=Oa2tBhia2kU1mU+N)Q6%;|
zpDX&wFj7g#g7N(#s@*iKn&S@o@MY3%GGl3J7&t!MQ19_9%1lOr<G=Ag7i1ohV>>OU
zD3fm+F!`9L0M_w72ZEWncTcuFInWpiMOFm9a78lbYPIe!-Zz+C^PTu$Kmw4VwfT~H
zf0OKd8`XM<|K3ia|ICB^qD{RhHmMav{3gE0xcP1|I}f!bmWb;zNLCdh-Sz;bO<z!~
zg}Ep7BI$WM7A(ix_Fin)!f3F5;S1HQnF)M<87I=${^@N|I0oL~y2yP=<d>o>4j+5~
z^DS9pMxS=$tX}Cd0*bptvK}RoBpZq4??23>$8dWx(sdbkRVR190I$Q!Ukudjok}a$
z+Hg>KrOwF8y<j(k7nDl8b>yDHo{ut#YE7~LjIuV0v~3&pBuZke;5o1AGCrH)wM1oh
zOk=vUrkAK^X46G!$CGHBs494IP^V_}2L4dv>VM5k8k&y8Qh;Kp$Xw+3q))Fp7iyu=
zT10DoMOBQRdgrMjxjbtFr#%YcKs1YZRo@hlsFv=h07)-Bf$yt_yE?`_+aHSK0NGTe
zg-YN=7x9SpmvoDUkA@2@jh>>go^r!$rGitqjMcnhyqf4472MmbW7hDi1U5|uX`FyM
z_zX~a3&zg+h5K0CYT;W^mbLby2K*B1A>o5B3`-86C|$#FdGN(nHnoR<lOp0k(M^3D
zw!IX?^M(4oc-Gi$n#IwgSKXCGO~@;Q#EE{sWvu`-`F+0J|DrWr63wZpLyCKRznih=
z@iWv>{Jy^V@qSvR6toTh>>=cW9l^Eirwn6ro#izPp%B^ge>MJo>s;_!vSH{kll2!z
z&b{{Ot6#XBZqFA3>{kAE<2&oWD7{99?v&y7UA$a#-a=hb&cc&GS15VgTmbN_3%c!I
zCGu^o+xLr~{xiC)tfg`m=Rg+#`OF5Rx^`*AWNRh;12QhHX#l<EBe$}6_UvUGfP89}
zT`BmFYehy=lr5_~vawOq;kD;u4;JEYP-aEJfZKyA6Q7g<s-R@g<k^uGyXK=Pcr_*_
zURgEBPLyq>X*gEY+5<gSZ%E%s@CPo!+{;vZHJO)2VCVj-q&aoAo!3TyVP?7$%A9Nt
zc1LoA&?;t)iGp_5mbnLrJXz}{yXE{F)go*HTzVDuf~p}F+s%Q_S=h>q{nHxcxeqMV
zu4u`HgbS9RlPk3<HV3GUbdsIltX``TCJrq*CaAy7Q-neb2ZeEX>P1Hv+d;#KT04c0
z4Aa+j+VqqFGVA9C;v_!q!lc#G33X_NXG!22d;LEjbN?z;;U+zNeVRnhO~ta{s931C
z(N3ZZ74j=;Fe^8zUO+f9EFokXP;$ftCYFKT(3if{q6>gr#a?_fYx)OU#@(ZqyTTTT
z#?1=x|FG3NYj&&ivdcq_uLKU@({{?z0qbK72Cx7*YiYJyP*uNEqK_{Dr1cA8l9!wy
zA}6NU@@f*6%J-PoGxZumiB-S*c?Q<QA<<mYmA&4$@&*(T?Uqz*j+p}T8RXZh_^Jl+
zm)GN7D27%kmGpfKy3H;m$3UA|gaaFYnDHrv5O^p9%dzNOO5ZYrD4}s#;yCdk2g{S0
z#7G}}3D%@xb=K7RP?5~QXMD9Nce=3<X(N3XmG-mSZ?1JNR!|nab9W2I5{)=qHE5cA
z>ZL(g8J$L!D;l^Rtez7<Vn^$(h0}8WHrI!+gcjR9MK+8?emIu8>$8-`qo02IWvXW@
zA+q)jRVq(sQE&okDtiE_y9G-t=%W+J)K0?wv@(|-uFMk@a;UYy-e7zi_o@_VqAz_B
zmnuC36_UrV6zWzf`0&wqDvpTB)bm-*OT|%DGHa-w=fo6sVpJaXZvFmK)_`FU`Lw<5
zCZiPolcC7gEZ#8e`C}md)@;?NI_0&{0g!-V2uIhf-M?!2yxQpUQNSu{MxdqSEQ67t
zv&y|YCTg((E8DH$chBo)B<Uu7DkwRKjGwCa$$v}g>PFDApjnM$J;GDaR7lS_pgH4|
z*7p;gw}C+Lx6AkQ<+xo>M(3$D{GDa?ml`n>h=xOwT7q6wf7xOAA)0)(7=a7)R3by*
zuJe?ubh}`%tO4+(?HMS-nx}<sAEkAFiU~tfr@-6lR})yM?wqn^KQnnInt!=pkoUM<
zd=isR<dUIJKYL2g^*Q<BMgQ_&4_jATE+xPFzZTCK3ruS%dDZG?Lqn11F7*c{{8O@R
z>*(i1DPay+AmSj^v?m!XWadLX6sULPBW&<QS{a8Vy})1%?vou0hVD~}OPrb~xo|z8
zHR^8RV97(nypxqB{KEeKRzHmdthNg-AfTLw|51kgf31GTmi89^y9{}n&&FwsBWdrO
z7RiMo;m<^ZNtyKJzuQ1;jOWURjN7Jm?O-0w^g%9xC$aJ9tm3Y1k3mlg2+WkylK0FK
z6?I$p8W*DrmZ|OvvRJ`$;g$H+Zk5`y&+oT%!?MMXB&tP{LYpyrF3bc+^7p2L`r>xc
z1&uPS7#GYW6bd@SBLZ{JV@i}LxH+`<DkP$ftjqplge>LXz!JUU&>#d<4G<RW9qVdx
z#23#bGr{l>uh995+V}_>=dQ0~mxUroX4||0(Tmzi(DAm!PCh$fPg0ATc+TSjv<`fK
z1DY5J8C*OZ8kEbPt8GLV;mWL}{V9#}-&)sl9FQP|LZtf@+YW_bpRbRfpC48LoHPoa
z#KVkL=yPV2Q@a8uuz#Nbm%A<{;ZGpp3R#X?mFQ_#e6%-bY+@MM3x{+NoCxMM6JFxR
z{?Uk$g4ybJrcdLi1*Fl7=kQCL6_ZfolWM$E+l~bD-@<wcu;cG}=s?KE=i6=|GMz-L
z%KDF$^k|5l4U->_-g*hAbenBnYa~jYKo!wa8h-`SkzVanihqI?zchy3cn9Yz-f2kV
z)1Zdapz|&&1`Sr?g-Di*;)<i%fD1CMk~al7Ta627O`v)e(tZ0*igTTQA-H3_OZ;+B
zAh_TxJ2!_$r@=q!5Ik^hjAUfl;)hDPJ;Yf@0<TMG^>u{(r)>xw(XJ7ql({?+iq%{&
z2R6+tEbBtB<ok0O$0-+IjUtsx>sGUCMDK|@o`~$Xgv<OW#bi3gneGG`Id9_*XE*=h
zM2?7~bjOi4y7>3~flAp=j8J*zu>I#%Bi15o_iZ!C2LqE;f!rBI+yLREp^ZYBz)2Ra
zHFWUYg{ZeRnrHcfcN)pP`Y^B~OH#JW@AZa5Vo(oGD_(HD0*{IA^Ah9)4nH89U>LPe
zL~@3@-{bX@wwZg$tj$Sgq1lS0BNg&j8Znxpc^$%y6LDxU*}M-pAo3?~Z~`greK~v<
zK8LD43P!{_Gol$^9Y|BoR-|DY_>dU~730ErS7L=i4kSq&jsRD#T!Rw1s0nlU<L*E0
za~gn&k)b$?+2?AGfjvFp%<;i?uI;08F?-M<;)_qmK%ou`0@QTt{*WOzEA94`p@T5`
zEeZuCRlIeFh!HfAPDhb!;Ky_a-xZX=o@G3arAIt4kluTg&?Y>ZG$ouCno+TWn~ms+
zG$LSL?!+@;KhKW~2g!8xVIuJ!)wFR8V}#HBpPYbVEmSv<5*ZutC#z8mX1M)o&QNjx
zl7Y7XZnU5lse8aQ;wY>YSF>kS)h*IUjutD>*?|+w6x26Qx;9-X{?~q(ZN0YVaT=NK
z=fc6~9~{S}u$nT22i-##=a>K{=DuOw>90{(VzA_R=c6#2N=Kyt2j1}QeS6&miG?ep
zaI(53muqfWUJyvh@F2p}U6^xJ4To0t+YKKpTg1;k<cB31Av{Z>8<62@x9a(GEFvD5
zVP#;D?ONI(JWQfd^`Qc|hf<)0meZTrF1%ApRI#%eMegA(5V5*{TVgwd7r2!m1<wBm
zGCVfn{c!s)Vcb=|++q5HUV_mwS^Tk%>(K71TqB1EU0kj%QIZyfhCWp;MP!-@j#Rtj
zngJk>FSO0j+svSChM(*?AM{JSjNHW6kNIO~wNPy3{mL5Ufi%k>-YH8c$|L(g1XDWe
z0yKw9>9Te_3+;+^S69RvSL>iN!US)v@POdB?MFy-fKOLg6q^I0;^-w3W)K|w^LV_U
zu-|FCRVHtlr^JBqP8+)YkdIhFE9QvEf{+k4@TdLzgJCCc2_$9^$nRY@=^ODe;OX7Y
z8x*!V0ClroaQ(LBzxDh`VAtoryCN7Y-K5~iX!gSm<kQwKZRmeA9^qJB<35}>lS!zY
z*}7x<uhKQq3l60QhVJ{33{jm~<e(X0iN;_G!wiEAjhGv06w*ghIAKVfJVG!0J(-Bm
znn}g8^PH_U;JG;<U{PD4NbJz9siBxrYMTPc2HmE0(2P<OG)5IArpNyfcUN2vvu}H>
z3HbhZ>tok#0A^Q67UF&uS|KA78Dz8a#Pr3iBgK|R;baEfxWkbSE|Lq#z;!cjjE0K2
zi5=j9K}K5>6N{|7AqA!6&p}<Aj)1DWG5&vRRAg$2Hu>7fg13%pCPB+AZ#D9!JZy#2
z8v#s9H)l%VT{+*uH}Dac3)^{1dCH-=o1#_R+deC(3WYLLyP|#IFhX3&I3(Ycd4Nym
zX3qec(_kmsUrvH$(y3y;{73tT9zQ@cmEWVpYF2cqr^FJC$k&;@J%w<yJX`WkeNu&C
z@A)gk&4kBa|J8O9q9-%}P(=dd@r=HqGg&-R9I_!_0au`g-K$4u`g)SX90}b)aQ36;
z8Ds?^OJuqM2siXR1Of&q)b!E7;qg8sqU$mGZ9;V>B(C8=v{OuH-^TZVq*X7`?yo@#
z*oy4oZ<KA3?C<Ch%W8x%Bw);?88)?=K#ZNPWL6;;@~K&Oak)J2N;>DEVi~y7yOnim
z7+B(E`GEHADdy;>*0K2Jq)6cHapqCp!5Ewkh{^ioDatkra=B$`7RiYXjOqHQ{dt!#
zDre;fD$3c_dE0jDF7AmP<{WOezM!dv_wp4D$N6Kce)~W?0O22L{?KpKDj9%w-_=dc
zggspATy0Fy!#m4#@J2!bhvVvT3<;vhQCAqG5Y<B?)gKDK<x7!^_cDJjGoAF(U$m=@
zs%{6CLZWU5_q<-83f#<Mr@~*fubL6mz2>lhfzLffi&f%OZTHAc<0vDe3_fI?#wqcj
zoCnT;0h0`6t0nFy4^&nSRQ58^ZWn_&Gx6c^jhp)4P1;_|iw|#>TL*=*aGU-$mjeMV
zivP-$z6LyWzf+o(A}}%#b~u8NrQBH>d`M`IysZllnpCMO5J>1>B7=6IVPZ!jd;@{3
zN+9X(zd-XrxGX>nIb(&gd^OJIX|*mbydpPj4ZuLUHwfj?fhIutEbwAb837g|Jl`KW
z;2IPWApRn)?)jxaR3=rr{>ZR`K?5fY15h?*Oqm?`rxPeb?XVz~@*5RnE)FIRDW3s(
z0`V&h&X#_tvg)OKM3J^`+7llQP^rncVO8UyHLjZU%t|@PM%Oq04agHt+UR|RT8h#S
zSV2zb<4v2BbF=&#hHTcL9wzBKTDyNej6rz)JdEMIL3}-^7t4fYl}V*}zxQ8EO%LmJ
zMu{>{9R;whTIb>MonnX9!j>{|hz5CAB>Wm#XZ;xspkO;|3|$S6Sw>PMlU<U%YU+9C
zYbmeZm<^yrYBO{uG%7u$yQ>e|AzI^A+G;uDS^peSXm5KMOy(G}Y)nR4HL#A9a0}Y@
zstW{C90fTnBZCQoT#m;bX-Kms9S<GE#R;b-B(-v2z5vB9ZjH<@6<}(IxOLysz5{lx
zT@-@XlT5;22geaRCMH_zvId=`=*j;W`5CJow1c`N$wS%zu94L;YAa)9e;T~!rJM@y
zqb8*eW6@NMI1AL@IA7_kEiMdLVR3ESGr!$f-P1t`75ywN>buas4q0|Nv7=yBxY6(v
z-Fn<1cGb*4{fAd-XPQ5ek~%D>NN76@BE3WNzmdYqWgX$u`3OSmmkjR&(1uVG{M0{@
zyLO8x%DS!rhq_9zjToaX<{)TX=^kBN1K3KofBsmkKe(We$iA~8!}DRpS$q%C3PYs5
zJ>o&Ry6OFNKWCGB(Gcq(_Au7>Uv8~;4KWzhN?DcO{aGB&jz)b~I3(|*jmlrdN1%P?
zgLWb3d2hB8ugt<n3iPDh@T~27)b->z55Xc$W#`@+oWSU#zh)TyPJO@gYr<GJKCM8f
zyAFL8GjUWn<A}eADWxILKq?y^ERm?U%W<m<je@CIL~ZoMDtVEk`e;wceOdw%nFGP5
zPJaSN95O5Q?;ig1AgI>GU_C35pa~`8&eGv}-yORZ^e4$;2yybh-Z3p7cTwmZ>FXc1
zh$BLJe+$i{^sHB8XX~m2Dw@0ky(biNE&^AwkW`nl;lXH$ba#ImZ*W<XAOjV>5ic^Y
zs`rKOnCfU+FP4b79~A!=xbYK{8)+U*IuK5@Y2uqnoF=q_>0)}o0tS#7d)B5nkWqm?
zu~01MKM-UolQ1Z=NfR)QYHoUpVu9a^mq=j^0!JXnL<fo?^q$<sSdfNm6xe|mtm509
z!(Bfhh<8BfJ#EOK0#w9Z1qLxk0qKr`rpQaqMg2_W&$pFIbP>LRm<xRYr41$2MBhlJ
z6KEo8+Mga{)$but3yOQ5D3~XLc1wJp9tO1qOWPzA04xsAfy6L<YiJM4Pjt^;IIZMq
z?GCby2AV6v92`WcWWu=AN`e0eG0|&Hq%A+oN5?s)@pdTQIAntp-jD<q2r(-L5;_rf
zORxv>e)!Wo%qud{e!Q5JZ%P%&a2RThx<8{kBWH!$pUVU#jR2H7p3B7lxp(mNkp?aQ
zG6PIMJ|qdIC}o2=pJ?pW*n4W%US-1}>2aG@ppSJ<SQh07@1CM;K%pr4Oz)w?1VNrs
zw}`dBTpn@MSwoj^R0cXES58<xBj6}7HJ2Ji!K9Cs<v$&oNzEz|NzW!o#fI!aN#3y%
zcXBBTIA54j<9kDD2?KQlMXCIgRs{$MdD^60%JX_I0E90`HPy3=J%?UkKO&YKS2g-$
z*{8M6L?OO`!Ll{=0w)vEJSqff)lF=MqC;Z*1^`#m@>l{mz=zj^Bz0&nFZNI8^-aR}
zMCJ@+QbR!2i2YB6u2A4YD{uwKk=xCX+DQl0B%SM6^lAc9lMh`?&pm}MDyMxSibq(I
zJ}j6^2}pE6PQnVIPE4+tnE}LC)WBF2Wdkx*UD+Ju61OE`TPFUYbwkxD{fWpL8DXIm
z+Y`+W7ruxrOtlcqTD8e7NQ)^r3nCVDwiTnl5k^<=TCA7X-LR~uE<xge)#mOBFN7os
z`S4e+9txoEZoQ{zH$h{`<2n_EL<=rFm_+}^O#Go`B7{i+VPpM?axSsGE-#z#a^9*e
z7q!c3Q|W}BO0J^7I?hN?*KQqt3-@;xR{GppBbJ_L&{D+RF6sUGrzOuwf2G6e3ka7r
z%!K3?8#enNrS?I46TO4uhZjv>LhpW5;wsj}ONqq)XIC@KTadzqCsZ!N*WLGzL{`ks
zM?3vyvkPS0)Z<U;K5o~Eb9`^u7~GchAcu|oR=rZyG-VSuZt+H~1Atb=bevHiuudc#
z)!JUg_~HFuoiyK7*uQanSuwfWV~6JlTd0~(l*^@|uKRCvYKFKp|Bf~Bv?(TC?+Oqj
zb`GU=KB4Vb&+ESG4+u-SBn9{Z0eMQkoNr?-OF%nV=XZI{usE_ORZ_h+5%i7wDJ)w8
z0)C??39y-Hh)I)dRteF%haU`BhbKsAZVhvKP#2WRobA{>eST!oX;M|=QR8#)$Y&r|
zhY>P$#Ni(UqpKdRCB$JIvXDNR+vLV2mT1vMekunuGcHD}+)#^6#E*?IIFj_mTFnnX
zDq8<fuz`{C0*pKB2izuW!+n4$=o(@_xOu7TWA(*JZXaDjdH}NqZM(1Xx1TQ&H7`r@
z@ImaXG4GBIMHB0Mg7_VBvdZM^*R^dj2+bF3+eeZsc=C4n2X*2`>E(CijLITgmxXen
z<&ZpF<;l#W*hAV3%Tl%3RbjY9Pv-Wpvx$Vcx#K)=x~3Cc!=6zmcG(IFNg38`r0a-a
zL*ry^*pAmTsOZ>8o$WnX(kVoGVEFMQQ{KldOyA@Sq{jfe%cINt;bg3w&=U#rpd%+u
zD8uV)e2!4%Ux`>=rq*Tm*paNuk|cY$={=S>Mum;FGCCChYbU~hs4|VvKPvUppD$kJ
znmuLZ5k~=(C#AYq{Hnk)l&7AvbpMTH%#|umfD(O}%AbB&%P&jY-E_3knU2QMKMYb{
z&uDBX799<_%5LUtm=_B0WBTUrtt=>>VBv@6aDd@fTW^l`g07%MiY1(2aE^KB-1vn4
z2R=C?5)D0yRu`CNndz^W;8<?1oIJFiTl60Yt|Wdg>;>=)7Gw%Xs8nGtIY*ZiB&!+f
zwYpH#&Ib;@{iA+WNOaZRf@oKf1;~bvGJ{Up3P2suLh^kGV8)-z=Ceaso%@LN=nZ|u
zZJtqAomB_qG17H%q%@JF^GC0{AMOP!L~7&k){N?lLCaoFCW_`(K``hg0xAfs*dK}C
zMttlc6sdyAgH2C_C&XP&%x37jl5TBV|6b5Q_zUYv=UpiTC3kmVOz_mnSFUubTIGt|
zZjt?UkLp{cqV>7LyUN^H(dfO?)0G&xdU$tX@eOCNm};_Zm5G(Jdx;uMw0U>0Bar+>
ze_#9CF!q%7ifd=wWr_Fa<7pgcqX)Li&GHTM>2_nj@&rA|^@VVm?7d#}u9v1lUM?`S
z>~6vEVOBn+V9jEb7zWrH811}|%FItk&9E~D6)Zt}q#e1Y@(*fDW~R6b94NUke4|7G
z@#|CsaIji&M)6@13@Vw;i@j;l@H-vZY9ze0+ZKLuOXnB7j3XjOsvUTBBG|LEwzl!a
z^0vbUxwxffvS*1(k)!p&%1YYFo>xCY@7$V$Z-TUin}l-5ZcaDP*(x6HNO3M3+=>By
zW6a`du-2py{ZjtnYSRrIej6GuXi95CXtPj-K1*cRa8r*nDO-rB47Fl{*!QG*d=zYr
zN2Ly*=orIl4#{qFv2MroFYD{Ja}z%`d}Ky+`&n{UUnwJfLsB^5_;(|%_f)vvMbJ%Q
zfLjp}wDUMjEBv<9KMhpOSupfBB%Cuz2-X2*_lI-e>khksZIAm&2iM%Oil`qwJ$!{x
z=^c!6awUPYlN6>Pjz6sRSq)D?##t}}Ox1{-XFyx~t^Q&6=HQs6x0(^gml6|WQmH;R
zw#9!qx|?fsq~$NVjeGgo_|^Hb=nzG}YCy?p&-y0@!Z>ybP+@Ye)ypYxLQlXNi5?M%
zy#6|mxOFORu$tL2M{|O*7RNo?LDLAQyldn=3{ccFOVvCB9MRnaA6%wQIdke|*3zF#
zEUR$TcexFSAAcISvEk&_-v@Bt|4#UVZ#lRd6UzSGQKteT$)ezomO_?*VvHE;6s~-m
zPmRS>Y!WYw%pa8E7D-4(vwK5IDrh7KB`TUCw_a@N^hr?*sFUjy;U664eC_DfC-lrP
zE&QO5Waey%gpK`NkMdqQh31Kz(VtIAx9fYQvA0EugrVB#wa!EABCM$7&Tckh#_Lux
zh0J^@9BtHV?BJw!RUJov4@6Hi@oK0}=bJAF?)8ZLM25U6D?7$lV92xHD!TQPGwUzT
ztg8s`qoSJ2#8D);k#BykEMacgF7j{|i_3k9HMLTvPvH`5C1anbIiFjW8GCL8Db9Ki
z5J5#MxMUk;>bJu>0@3CD59_S0m@V`bM#!szBDlw>Urau|;$M#}vqSv!9tq;^_^0`C
zK*kTSNAG}uDa|_owt-;s7Z%s2Nv<=cSDYf@E2?NmlAS-^3iMxIG0vECiiTb?Rlo7l
z<RhfpWKh?6%xC{<ad58Tz;8ja^gluWZxJo5+=n$)WYOUZWn$Q=4~&lj!!jM;kD}m(
z7F33$7N;xXDJJx2Knf)$<gbX2`RV1KB(041E%z7sXM4tcW*;8jw*Lsv+%K%`d&{Z!
z-rzBm%;#z>SCI1_mD|b>S=;BT^7I?F|MH>Ue2973c7vQDg>dt;A%JXc*cOxq6wib`
z>V1|&!OXXu2}xHW98&)EQoLfvk>Y%U)8X-to4&`aj8Tj<7!OJ&IwB>g8N52B_C+Zv
zWK(?juiWS{vCmk;OIpbv1?4?f@lm*NQtD5J(j;29+?>Zz;nWcx-#^AK0ok3d37h7K
zuq6W!t&&wyni7)G@`6eA#mMB90$n0!SPvh<vaZsYahwUBCB2e>yWp41+*O+3W-oS^
zG766~pX(zZ@$+QR6@y;`wqstDS(oPx$>Vy_2kN6gbc5Z^J2$q9AuYz(<W0)a(%bW`
zX01c=s&;W_$eHK}_VV9pg_*uD$Wzsu-wnT&8>(dE-V^QUBrq8%_7s^W6KvNY#y+aC
z6MYkRhji_%2G0NC>l~s40hTOUwr$(CZQHhOciFaWyQ<5!ZQI85|7SL{nOx+_Rjf1f
z#k~=1Bw4g9fpHu9eXSjLlY24BV<I8Px5ddRn0sF9r>d^5x=QSY?=OL46FwrzrX`1l
zlZ?hnn?z};yKx6<3Hgaz_#q0c^l?oiX!EDhW5m}(;-v+@Q?U`N#m!~j8Op^y#&2uU
zBZX$%KDo!166L{#>2J_32L`I33+nVjw1V281cQV{qGdXK^z!*+$YFxqNzyV&E>rT;
zzsQdIIzFAoZ5$omi^&mVNwG6G%&M#R>*XqeFp8Aisz2?d{E^0dHd9Fv>^e5>T!_<M
z$wbv9cC@eR=m9h7ovgDc@{?YB-LzT7Bi<em`JFIVZiFo=OfZ4`(bWk0NeF<XLW411
z*ci-rRinK1qR-g{&!fYAwG@+9J+h^04)jwuOHM^aaOb&J6pM<Az}R=S5bSwmCAkXn
zFTRm>j(IsRF>XjEjY>zt!#;u=;Jr#$O@Iqe)>K%P<;br8-;*|}OnmhgdKbKAM?WO&
zvou^|5Oyymy*XoDC}}TnGegOjn6?zV!oKfMr?BI}&6Ca0tH|47F~-G5vaID+0OUgV
zbE=rclIC&c&+8;<@m-oE&>b1+4c87C^Dk+|syY&gUbgXycw@%uu+B@FKRw$uAG*IM
z^L+}){_1}(euxD2jU}|wBr`#_3)0wRoj23d{W96eG!)NZfmOHcWD7s_QsnhP!H-?$
z?04wu$@BfFM9o9Z3@d3BV9*;gbOAMRr-pmZuvE=iN6T=?Gk+L+YZ9K(zIM7yJM}Eq
zerKOm`Pfc}kzj9u!tg_ev7syp+AZGQ9m%bS;SQ1>ET8bL3xz??eUd@%Mav1SU4Dp9
z>DC-<(1odW(<XY-X#g(^J$T6QtTPDWiZzNbezJ^UZnGo|8A5rBy&{hnm_eo??kQGo
zQIsApFJIFEiZWIqw_NR_Iy<v{gK4qiM+2@R$}^-r@jUq@>*n*-;CW8}Dn*A0hVaF4
z5)YKkZKs;}*c&V)>l!A@P~7na^hta)CDUd{n-<1C3%bu>fiR8r!H=Y+O_{|71cp+v
zCqVWY5v{T`g*aK1Q_z@{Em>I$BxeY`lCVK?u(XMzcPS>NKS5))AIucoBf`vt*iCqU
zxwN$y(|Q1=*(eg+>M%;2GsMYnkN;U5q<bia3EiMIWq9~j1_)+X!h~pQi4;Rp7aViP
zRfKfOZUD1<G#`TX(rGOqt^trP3s0I{S*Jy;(_Kk4nt>(kbd??}N@E?O=_xgCvjgM&
zT*!!$W!7l+WBw<7BW?LdrK*DUibZ<CDJngQ0TA~Jw|)bd?l3L@A5bttm=b~`(xWYA
z5rVZ^VUaAk-yOF8NpG2TtU}7!d8x`I|MvsC^L{8<PLeMRc(gzn+>f{#SRi<|F&H&Y
z<=m2wU2Y-O!psLeZ^qY9!%{=0w#u?nrZ3>!H1-a*=e*x1YvT@qEPVaGnI_|lE=}RH
zKBaazw0z3u6;4<_RB&eQK2mMo(e!zC7~J=JCcM<mZ1>G$zZP#X;Vgo*R**oXf4)b>
zJ!wHJIoWzQ$}9c-XPZ)J<oiYYsCyW|M(MV?tm^Wn+%qwnlXZzEbbLTYr#yThqC-M$
zRg!7ectG{A-;G7Cbezh)ip`6%<WiMln7U$V3ragABkrP(2PK6eQ6J==LE5N6Dfdr!
zWojD2vXe&So5Vm8{;qs(JDi)AZJdJ*k|*HSZi)&jgNRvG5Q9$=B6=uRklx^5N!O3w
zlAPHrU5uWd6HsUr0AMAx!r>u^*gzA`2+A9hCeyK5M)YL84GT)aVjYDyZy;rsoqH58
zuOl=9wr1y=*KVc0k65%E^OqG0&g>`bV0cjyA%4?hA^w=WQ}TP7^|%|8PyShN2EFuS
zp`iIDl`x&TBHZ_&22tlMzxAu=&sq(;=1Ih3$G+hU)pN_D%k-VL+;+8WuN0PLVc+xA
zH)@7xwVdZfhm8IO2h^@(`QZ_Vh`a@ZjE)B~JLCKz-VDxg-~3*q7M${x@WhtVj~chY
z4`*VB>3A}42R}Ejhs0_a9}O=S)0QC$XOs6UyNZDLtQTpuF4s{$RA=Nj4ilhu2(sMz
zp3(M>a}2i`8=pHqQOFsosgQZ&^oewPX1cp<Q^-d$&FglOMb0hnu&`cC55F<~X=FGF
z0&O3H`dW_SQ5PBP8>XTWm<`>|0yqjLP#Gh7oSu?jXkHgaLf{-s79&<-6i;Mj)>1bK
z9-nC31ZLzur5z)(-Y1c8L$nu^wdRLhH~U59)ernU+g{3{;;1W717{PQ`DfiA3GiVw
zOSb)g6BgWr`V_VuJIGF%5!c!wHL}8eqB!ZfWEVwUa_H(B5t_%hqBR?{A%cNkKfIT6
z(7Xf3@(<b4JG<VIkmPX<RI5cls(aDeVhD@u1J9>ind#5mYx-Cu_yyzsV1W@e0#6;F
zyXN=J4BJ&%j8|40+EA3JG4hSoyH3%P74+$ihpFs=7CsZ5tdOFcK2)Kln(%otPNs|u
z)=wXey<nPQsIp;5rTjQrFkT34$0h!FxdHlW6`e5W<L-R|e#Bqqa!Pr2>M6qbV~Cgy
zvy+eGUb7}^hT8dtJ-kpkstpp+-m4}$guA4_$1-(~CHmJQJEcr2Ew~f~1uV9fPHOVF
z0-pc$A^P3^@Dg<5Q~3RjC8$wRCEDOpJ><QZR*c<|GHC`e^+i>1fZjtQY}G?J$Rp+y
zo&AF2*itMHCPnz8CBID>QinWr0DZgQuennaKtY?nQ@Z=-Q?ZTo%aF!EaFly*UV`-9
zD4jYn-v2tUo5!COCp$N%t>|Zc{SGF5<nVAYct2`q{(iHmmtefMO8-s|WP6gMDP>td
zCm@o>5+F^1u61q?y1J#u#z@MKO0!nKx+=dAwQ2MnX&%erXWKh?F?^S!^satiWA?Q;
zR4B}+A2&jtgUD?t*q=Kml@-(}9|Lh@Sv5?xzn>wH^V^a*uu>i#^<8;Mium!ENz&xi
zMqa-Wi=JdD$~5xFdr1?9lB_6upF2CZbG0?k)E1rO$(1^7YegLVyUCg0;bZFV`L5(b
zSvq$z4wV!^dYEw*lPaBlCCzhOe={32fBGC|L&_663Rq$@c7b|o!iiJ%WahcPgA2h0
zOB<s{y=oT02@=Bp0+o7+G**GWnb(yy_;&p1>vY?juqU5)*@8YSt*jOnC-`j3SySwU
z3bf14nOIp89fY}ZZ@Vr4{HzhNy9UZ*?8y$~?iLk5wKCZ%-Bdu}3vy%LfIs@T|E%Y<
z!nP$?Ug0y}A4@lL_!Ubw{WaCzEGNxpok|ajo4c&Iq+$yd0<%x+qH{#&9mx%@`&oa$
z&8U3i^?OhC)@F_$|0NF}2M<?cc=`OFh5&TIzs_BL-KckzAoTU;Rd2G%TqUle(OTV8
zr%1|1{asxWwV`EBQRKVB`1c)UTdeoxh@7=u5>0+TKmaEp#VYWrxgOA&MJwy%`;(9|
zJ#BDUWV9ECQL|24fHzKF<36BtDG4>hwt9z{d<Jn%VUSf!7}I14xGWrQl1qMm&MTC#
z1mK#9g*;mQ&RQ=&Bb{z%lp$f<iD^NG+icsARf$KuYuKd&x%|Q!B{F@O-MkF^yWha$
z<)s}yx+t=QpNH#R{Pyh(ff%6sCI<(MYy$@(n|(A%@BW?wi0|S<ycdclt_V*dgtl49
z^Ye=x2lJBC(Kbg8WwEED(N14%^*+%_4TNlr*O!5Zg^X(er~b}Tv@lM2_MBY>Go#(a
z1;*XrkGkgoiTY(3xVFdFo^XKAGBMxImmkz63rqMmxn0<G;nbD6Cy!CVEGaQ~&YoHW
zH~0Kw$bh|0Z5bU&qGrk%1HR!JlC4|_J$CmuR-f4{85e0bGyp@6(taW?)`4)5`<s=&
z!$;?Ce!Y$7?N+Bo{o}_doUwfH1DKGqItD>V<LSa#JG?ypP5Ux9rIj5y4l?u+mfrH^
zYeWaDN|KPEm&yqzHV9R31wm;oc1>Xg(whHXd<-U+$q)zoUBP;xZO`q%o2zUzUULjb
z)haM%nM4I?T9W&%`n(ZV9FkP9`ReRST7WBZq`iAhwg5vOBRxbj)~tQ)VOCE0doY<X
z9fS@&h5Ya%>QJyk2c?3&+Bg#2jz>zgJC1H*@YP?m#V7#qN_<*IriJgPOZo!a!W$J!
zlexcc$>^)<aosyM@5m<4=ix4u-$N~aj6Bxmjy_NAK%Xdi0PBNg2BQlm%N)b4<*NFD
z==o+z?#?Xy#ZAC5%l6UdK_C=iw_EmTGM#2ektd{oS$wfjh2iC~U>hm{eWc(By`_Tk
z_-z|$f*fnOv-<}AR5j-4-t(aQu6`d#9~H)~uf)-P)l`Dry$7FaX1T23$X$DqaSt9?
z(!EuCi@INk_B37z>+Wfz&fUKUmuYBruV71GLy|#HB6%VHRDX)Rfd1K}uFc#-I(z$?
zZziJ4HL#~)C2OA=EAW_LuPODSui~Z6uATnCNaj9&k5g_n$)O&7I_(FLey#79@ntj9
za3jOc7gOc+*U1aUcC$tuBZRh(#8ngamwI}u@xWrw7>+>*>j|^A7D$YXq8vk^rmjJd
zT|=G`J1k8sT<Xd->F*QB6#&OTN?cYgMB+oghYE>&S5s))w+;!pA{b?JG^z(n$s0B%
zWxw)t7?XEt7dk1M*DcNIn%FexrtF70=gEprGG(H}^zG^Ig08GNg+kET*eU2@fZ|>F
zspTW_;d8D+sR{FQa<$9XZ)wvnK@j~&AR@e|5|G^-d3%x?Ta{9u2fOM}Q@=tE{5lS`
z@5q$C$ZMXNLo8jS_CFXuVNkc_BWkH5MPq+@b|{L;8`NU}>745m(rr0@4Q{OLXdLsN
z--dlE^mo|$75{ysbUAdaQh=3i2ugy7q{1pVkdO0^;3@}vUB$~fN~8)w`Msz4Xoc{<
ztQ3K6NHSbnNKG~R`1fj)78B-``(TgWYNi7O4Guooe>{n*3~=mhU>AI1>@)=D_Vqo4
zhr~e;u}D!S&NyVX5N0ESlfFG~Q9I{e8A^z4xPJws9KC<QbK7$DIYc&MA(@0pQT?ol
z3GO>79Y3zbtvRiVC>xg1Q1!R}#Z$8VC!TJd+e!ZLGxv^MN=6YgnYX5!X)Ocf-Y&G}
zU%5d!WkXW`?RZqj?5!+Yv2}sv*qGXJy*GqfJKveu=*tN6_rHH{p}2c_T4|fln_A}3
z<YQQAi&O%Bf-hDCsc;P&lGf44X!_cd_gFQ7fxcL$kiZVS{?l8=E(Ym5)h000+kRUP
zjiVBR#C0xL(iGL>126q;1&2iWuATmQy4@pQMn1|vpmxRgG~TfYfryU*A4X>gARNHJ
z!-orl7~MEG&MxFR3GTgS*H*8~iz3L$el{PP1Bq|(SKT}Am9MC0)Vr`}i(7W3Wr~w)
zR&3m<1bB|eG@;rD!>?yIS1Tu}i1wmq(P8*1!_h_)n6d8~VGrJgiEudQ)_D2xP;hB`
zeG(X7rtF;61|!7*`c?pp<ei6|hI2BfUEO;4Qjyd09Rg3|pxjl?Sq_v{#MJ;FA9jY9
zt1ry$*2iP(7M2421_7Jn{1yH)%pu(xqfQ<k_{5(~@?cdl-f6zD&k=e+5`mXOPhh?A
zN?SzzMw*<XqTf;D70k5xLZPz~PF(4_o5y2&zj`#r2gUEp32>w+olXM=q^eH{`qLE~
z^+53WE~4_-S%FKciyNDLEUVK@+ZD{5l<|-5qbuL`vx4eA85=Lp<?rm~zr1V=z04di
zd20UtGTc`1p&K{&5wDNmmoWQI8wblV1pP^Jn32keLX1$M1#ShWzg5&)A7}6Gpp=Z9
zJU5@Q#5z7)oKFjotAOx%*JToZYj@O*BN_Y=eqTaR?g*bdQQibRN04FvS%p_?xTuP)
zq&8);GJY4gypaY@%wEL~+!i@T`MX4ic}ZVY(HDed_FpjLm>PoEI3|b$P6UeyQKMvl
zY3pr3`}&wVW&9rDh}Lb^Od+#c$mD^B<lvS_ZNzi@6Y$(=-9A$278LP5qfEi77pH+7
zWT(Uf>fw?&am8hZ4rB^d4ayYBR}pA{fJH3@x6(V*Cvvp<N0ov&O=h&}ZX^QD(vX72
zfTEyQRc@OjH1R^~_-%tG{&>}nwN>gk!Y@Ztxgo6iPbgIF(GcOnlmuSnSRNZMbV9>f
zK4#YawExr!w@tV0=+~4I@E@7wu>dGpxiQy37#ABFx59{xdHVaJShK3@(Z_F%beAZo
zeESgCEh!<B>o_O(@Fu_8Zu>kD)*M2PKubBTKuMp12dMQ%eMuDkjyyJ)p)Nq(8u&<^
zLsgMY3D0xOU!G}5V!V+_(vnkQVd0)mboMg|mkgSDe+%&;qh*Oj@SFEgO1ubKbja_o
zQ>>bq4y$B<YR$&zGDIgJ#ScJW;{-f#u?oP9tAHjDf0@RN^@aH;m+{C)8_@4|#(;<{
zLyvUeR!HX=J)D5iY_Q0ub4;Un2=gpb>FS_VE%doK2vHceMQN7>g)MNAVZ+sO>{Pak
z-~$U5(Jm@jsyrNWKDC0Zkv<X|+o<en!O@tVeZzI8qSRr{nGM=7UeS6%z}Dhx`lUU?
zUyngB)`1@e!Q!Yy3=m{zVlf)%iX+q@fUwCk$Gb}K-|MR@m0I}UGA0gz?*mP$%WJU7
zME0?qEo#m54_U5F6tP&3Z@P>_zU%=ssa0uK>B%i++&erm+n4PK$3G)5+?vJ2Bf8b*
z&~P<PLd?@X$RhWoBR*`7Zc{gGu~E-#5iJn&zp8YjW?dqObDm7v#giVKfKvT|PlZE-
z<{k(a^Gla5&#ez1jxa;+4cP>n&cd`tFWDP46)xO_Wp$fZG(AQr69l<sk6D_XGgE=_
zp8+=_^P4u)W6cvqe)PyszN-pPl+DPj3E_tb$($_ar^cYrD|s!lxn@(>ZBmP8K;)N3
zw&AwDb@x0VR5B#orvTb52~iOA(g31x&Uwu4DYE#zRJIy}knss#r;{1pg+4QTm08}*
zZ$Fc)W$vJ6SwLPPU3I`;Kf_EtQYRK0{ELEY&CE`|RzM8?VaH^fp4|gLc9dNifVXYg
z(fQ^@$FSSRkZraPo3Zo`AV&;Rh8q^6X8;RhQ^2qoq$KJW#C9w(%=|-7YWuP^e>f90
zTeCS?53le0iI{WHVYu~-u6zkHJn9!%TRHtLktBwSbT25B@w+*_6CPbo%fia0T@t1Y
zVRBTFX0<-sx5m)OOneZ{k)5{M1;g(l{-B**eM)@xf7vD#h5Raas;6+v9sr2-y>%nM
zK+Gt1w~@2EBC1xyhWA}YoOxvs^%TKCw|{+hx;6RF0r63G%9GnZO?7*i(J?H8e=W)s
z9tEL17D2Kar_A&Oq*tgzVgg1_G5~hoJT_cgG$vhPAT8M<F2>>p{$93u(;C&}Qua#y
z^;;8q5p-4h`&DX+@NZ&^?9MRpH0l}BY>Ioot57TQm~Q*&G?ngHI&kEuv^b<>16Dj7
zmXLGQ@t><k!qzjGSh$*Y(A?x!@gwB2*ES@(j$+z2ZT(tDb0EGVc%>1QuYjYbOfI$9
z)HW8wEvxO^V<(WPLfKDXsV+^a1|nMjG7{sJxL^n(YV0Dtki|lbUvtba%<`4!Y^MNz
zJze0H9U1_Lz5EIIeBN@GZQm`eGjpStd<oH@FNEfAz{-BLB;G>Z+=#~1co+gl<b8_)
zDw3^F2(bK4Ih9R38|2;8B2COoXbecb&?LT6$)K-i66S?xR;%BYMMk+HZ;e`PwfIE&
zBz*C#B8#>lDl%!{m<!?stCzUXx*ULRsCivgwvn>t6xG+k{M$?Jew}^o;>t)})f7uv
zs;UDaQ`O=3Pw~sf?Cs+c^0|3fyA*>x_eC?sV!vOI-exuoa4%o*Y*gZW#lxe0`;l?e
z?p!AuL)c@Y4v`$o+8;~01)3}!0o0}(tpVwHDs#3UDQnu^vb!L%u}fdajykS&3vvJZ
zx)<F;9`^E37I3;QMmiso1{Ob;J7FSp_|u=oGx~RFrm}h9W0MfItgms%@EVx$xo0^~
zVW$SPVIIq6Jl0jKG}l~%b#D3V!!6f065aFoe#VLJZfPeq?jE5-nOi|YP)~zp>W9^4
z_KaOO#MK%%oAle81}?mcPuC@cG*j3^0w^7H1842v$=i}>3rEVYm3uFMv37saWt6@m
z9#S4+l;+yR@HRWaoeP*Jp4Y}{85n(D5uz#rvV7K+Sc=Sooq$<NSaHW#9?Et)Xc!z0
zGS-w2w9astkh=s=S|ZHevj}{na+<<~7IF&i7MZC(?0#wnMF%LlfeOCbFHDXb#GXY|
zhTu5_RH<_OZrnN?_T)J9eQ1==kCuyT!-|J>?v3UsF-y6WCPiNgy<Af|_j~QxZSO^v
zT>ju^Wv_po(XX!~?!6GxfuWGjR-W8tuHRw8Pe7kb1OtKUZC~}9<K0)<gzpYP)S5?@
zfow0JZQSWPOpt?Fn{C!GPv(OM(k|aA=EOF+kkl-GBZpZV+zkq(itF<-Db^QbDgDOh
z1n69HIT_<SA}-rfe1SB(novJ=HVq^`|G-C>y7$r7@wFCRdu*4gOxsSV-fHMAG481v
z;csS3-KAmNz_0#wENgmYh`KSEf5p$+Ip>)u+`;<!CX4!bMEvr|7Ogu(><PRkqq(F&
zij5n>fhg;Gl~_YmoWco<8R@8B2ZNkD!Q^q7y(Vht_-o`0iU#$h)@cnLdC_SlZEsws
zabrotW7eZIqOIoP`$3y|M2}CAg=ZdZ241jFrHW&%tiD9Yft8m6nR|(3Kh>{roR#IL
zTX3})ppGhLLh;?z0;jL4O2iwe4XdxF>cjlDQv+64Y1PjFg!*n<QwwHw`O11iuF$2o
z-M^0AM$}zd`TXGGaHBTpzV9U!<Van8s{Z)owNtM_6Cu2?z1xhd&4E&Pxv${EfzjTw
zr>aW3RbkhHymwJ~G4I-;ouH?-+>DlZsaj`bQ$w^`sW*(FZqs(DcGR}t`9?qvw8e|o
z6s(oxi?B|GakkB?bQ1ng-J)0l>|msx+4yANXhXf!a-%0pa!AFN$mt5iK|X+=9>H}5
zy=C|T#dMede(hcpN$H1C8A+eDeT%26%E$dSQU!gR=~1krwhgVaU8VedR=@jraWKi1
zg6ut5zQO7SgN^3R>dm3NJl$B~Q2(O$Oysyp53d&n(0BR4OA)Bpg%56s0iN|#1TsSQ
z4N(i;yIW2^tYGzYod4SC@8h!sO*je&p|W^RQoD!^OCCZ7CKvMq^YJYV571lP!X58-
z&3obZm?j<vFSi7!_0)2CYd~{%=2&B?EXHLo7w3P)xAnb(-$ZpMkVX-Bp{NFGth_)4
zl$Rdc%ZK7?T-ywITdB6MT6d{Bn6~^(12Sf<*2Pp0FH~;VvJ0xG=*fC-D$1*Ox7ri@
z9rTJMiK6kN27G7i&+yeLwtcfRCsX{nzZoQVeZ9ihsanGY@$z-%l0KaR6*{CD-^I|&
z0F`hpL8ZSzvD8eAqOa&hYKY><6h|n7#0H?4*n%MS$LAZ)#P2u;HL)&+8u(%vDrO&h
zI%zS<uWElAo(H`Dhf6QE32p-^z`=(xqi}fHq9Zh>8Cg`^!dH$`Yz%}gr!FzBPf@oB
zDM2TBHVzz1!`&SH@Q{6PIm|A2Dp^9)g6K6%O2@?f-*Z;$`s>alC*KD7OYt8WJyR$V
zp8P;8!+yM&59LBFp}5%+n*!@Leu3?!*2vI4vs`sx86E95Tz-C}-J?;OHz9%x>ldF@
zBCTPpRMZLcEixRr$WMcRfp2Ztnjquk#Ja32)!L5K&v*^U;iaR?o6R*S0PcWt;xAJ8
zH%TxcYjGFY5{xE{`YnuXxZE%MUT(y+svsbm0}U#mK&h;5H=ch<_^D4DhOyIsQ7tIX
zh%Ej3D$;z~qV{2<Xj!JXD!aMpU1v&P8GL0J;O~0MdNChgICa3gPPs|};#3)2%Cb8B
z;@#FHb+oUOfI|5XS<K)(hoNCM>eVJsxpN^=O<&@f+-XO1NF6NOr>X^$Y@Wli!%muq
zV)9H%lEBD@y!W<7-1GReuQPzzxD`9Ze4S}b(~mIUS;iu#mv|5JCW1F|+-Tqo3#9DG
zb@+ruUibV|;QFy9Dfr-Q?vN!`Tp0Q#<j&{Vz)=#>YLd%XJ2Fc0N}m0UaE@e|v6Y(l
z?ik@6z;>I0LQN({FW}?QG&|40YV{5}_ilBDZx+*`<|HyIvSpxrfh86YmxlH8@JO0<
zBq^>&@m5-C;5u57wJ#+NT2u0j$-wHoOy?6OjMybXHs^<j3x`h8sot2f?mYwUwEL4-
zkqhSvT<GMR({ct$)g)Z@Gw%HL%nds?wG0o<mfn!L?^NQTJeuikOMk3sQF#qAYXHT@
zuv*bA-i>%duE*J{$qZVk#(TN{&p`6;4K~fLZ#VdHV2V_#1%04lot?}xhcY2${*U7A
zP&$$uKL1ds_pV=8+@c^Iw@oJq%sF^BxIT7LQFZ|k%onxlpN`Po*?PZ@DhxV_+xVdE
zZq7^i_*bP#?L7;6=z)Qp>|A(%4laLJ7bYKPw<q}KWzNf-ZkV-07uu7Ly{l37)3N~F
zrhSW+Y_{dyy3e{4?&tma{MRpy!TuI%=ltNu38&O7TA@{zl$aNJkt}R^4c)=wTHoim
zo?~Fn1;@=d)I*4!(y82~qDvFi!$dF`K~f4JMqaxDHrDlr#22pD5oXNN6ZhO{h7a6c
zUuPc|0Ww20qEtEO{UwNnW>ZC37JQ2IBL49wn^>DHcd62`i9tjUrbMy}A)&@N$n5mG
zA6%z7vQkABQSMj!1ZX5h=iPSwO9B|ex~q7Hnt*FBqHNB3wlmx)N7hcmoXXxlr>@on
z0S{XD&c<zU8z^jROGSy^`p2X=oD6>LVrSpzL{+OBV5!nBtuYieupv()7AzoTG9S&h
z=Z5yUSkBTI?|vILinI=DyH1{50REo$-rvJ|e}_H|tJ>k3jj&)rM_m9O9Go5=N?-@I
z6%L=FcsA2#O><Qkpud9zl>%38lY&=nwxr5s)GRVit`4M@ke;mccA@Q}@f&k(t&PbH
zjEx?^v=3*RfuQC;DtRh7=74VyeM$^t5b#t`Rmifl%)WEl`35FJjD1MH*M!Gb#aPDi
z-dyU!<%N$<t{@Gw@?V;F;58YBs%x#^*;Dk3geOlL^qB{&>+$e0-!a&Cy!P%v*KR)1
zPFkoNEdtQ|vVQ9s)HPBDLL<lq73wWyCc*s;=zp;-bqQ9?;b8Msqc1NG)9{chqr~-E
zBk0*ntKv|F3o-EZJrrybj}hPLIcPxCnd&9kq8ag>Tb%0850VPIJbV{`=!&6vM(Nn@
z_5Z_9LIM0|$>b?W{rB*{8x{Z#fW3pM-9KQGmXVH;j=_}v-;v(Q)Y#t1gkDtz5&(EN
zsYJs@x?IE60~!Dj<O~=9;J@4dWim6c?ZX?$0RXIW001cd-<tnQ>)RN5nmXy5F#i8|
z<`$3jKRmPbAD$V1B}3DZ_+{b#D!1h!-jK4^6nmYLZ0qgJjT0F{vVu~9l#FVd^xJ!i
z13)4Xkhrx8?@nLlN`k}zF!L#ji;r7R?3O{tuE~;hdUbVlH2Y6Ay!f~NKD+6YR9>t|
z`z5~Q?;U~pw<@1J^Stplhna9T!CE|YF7JIkcmTqREy|t9U3^Vqyg3bf-_Qf1_5O64
z)!w9ATtnUhs`eXpYB8raWURx3C&?O1B<EosaPO36ay@}A&Ec3l(9DV=ANd|sG!W7o
zq%?U4e6TM@?-l{YTM#ki+V%ADo*m2Ft4QYrfEGpsPZU`dkCdU`$QRD(^rH`@9zK5E
z>ZKl(IRep5$@-Os9GBYY`ShbG%wQZm+z$$=U^f)!r{0la^2-VO2yL!uL^tY#WwOJI
zBg>uGYnnfPwD@s-TF(w+_2IB3!s`ir%)1r%=$EA?Xf?i!+9KsF)vTTwk3>^_fExlS
zXBXCPZ1?`&gP+Io_KQCjOixIi_6e+8^6+)=E*yr=iiI0WF8*AR#e`N(e2?KPe8A#-
zP1~KZMg?i1|Gmow7u4o8oA+brwr_Wj?IKJ!Q*K>jNQ>MClnk0XJwhZHwi~_LIFmFm
zT|itn4TR{ex<~Jq>#%w@8?^HBnD40MQ6GbU$CD8ME3R;qFzb~-Ziw&ufu05*-3(<I
z=c+1&;a}9?WwBDs)0^dGNgU%>{PVRaMh#@eST;P1kG<U49Fw72eN@Kd>%~Xl_WNY9
zg5Yh7KRxf$&_*}rv>1fwOz@)Gn?ZD=Yv1B*MO8smST%Smip$Y}p2epTIM+-Q??Jfp
z`bh*Fhbr<N7jd5eaPBs_F}Ta~D!!f98GoQ?E9;@Tnm&4Si(+kCmcUSz(#{(LD>kqG
z&_Xvmr*AuDSH{E}_8i!-ao%aZ5(U$~?){R1(eI}}1i4S1s?O|qwf_Dkcb4q;U)aCU
z2@4$=j*8sJHQpws?H=oga~Z#f?nU7Fr^9qxFbw@eLzBFC(jnT~f72n}Nt-8Jn6->*
zvxUsZ;kmPMILVT(U0DUpjXF;Q_*Xt4DxJAD1#?3=mQ3DK6*SOwy<(g<AlIN{zLH(T
zG^1@MAhVvWp4h`D$Ef^-9YYJd@ZO5w3j4~4rezeVK5Gr#)0e#~?PJ0NX2x#u{qMS)
z-)iJ6hreKy!Hs#|&*kaw^0{vF+Tjy87=-T$d$hfAQ*@Lp(pU>tjPc`-WlQwue(&ej
z%-!<+CI?=_RII@fo_B~mE*sX@VAtor{>AODSAiShBR@P)nC(YSh)nj^B!#JO@h6F|
z^&oOjXyS6>`2xmwv+)|(010gt7hMQ~f8B`Pqv9wes2c&}9)MxRFz6xm7N`N@ql~?b
zY?vnv9M2B5<Yg$E%sMEGd5+%XiIOj@I4oEz?<?M)_uJe?7<WY=_B}`fZ)>{(Pf3!8
zg2Izs()=DroLtlkQ)9QMGm3b7W~sB6!OPdqNqsG@+*c`<qZ^=~nBFT7`vCyqEQEcl
zSRfG@t$cV0_8?(EEq_A<w3{%b)uJGM@`NzD?tsI?4-HU1QPzQAr(3i~4ocU2xIQ~<
zuS9Zx7xV5<^ds|SJATU&{iSo`t5r^+P{XYJ6Mq^oJTgQn!zazyclVTo=cPin#G)wD
z5_kz>OO!uo)In4A%)TOwA$<6QF!;lQA!AUM7AGG2D`-E~dfr;5>2~TDlaQ$ccq<z0
zg%M=pSeIMEMB$*taz4gzA;sW>dnoEnrzlT1{L-$)u3ci1aqek^fjn<{A}mQ&k@j)f
zFb2$TPwaRwcAo8d-@N!)28AL*Z!B4Vm_5N_wbE*xy;Ue3U<)-;(lf&~ncB5atcc9U
z_s}w^mlIatPt#vA$O!Y$lH0pp#nKMLgd`qOo=!=mdK^;Uq2)o|k#w5NC^AZ=`ZHzT
zUQYC2qd{Uwv8DmAG5aha?|SunsLB<1M2@HSDH|a+n&#KAVSC)!-PwyS`&BK`1Cm;0
zI%vw8WyuC*K|Rq{Ul$6<(+>A*+@Jl{eg(i^ci=~M?jG{k-EVJj(IhubL_ro{!l6n2
z_$oWE=6N8AEs726jSNhGd=(!=Xh$o59J4wv*ky}f9b|`9o0cZ)K_L1^`3+lDs1y?@
z{k)7q9^FQiy{w{Z?YqlY-7hnqsDpy1;p6<O;wZtnUx+grfnF=NYmF!ZWRs=CJ0S#h
zXa!BQE!To5Q|!P&YHyZ2{0J*9TQKhnq6L~hM3&pYKUUNf+k#(n^fH*0_$G|eI$C+V
z2q_8(wjeZ`)7TZ108*19QID#K&S4n#9%r36^P3~%m5s~f%ZdZTmnJKQ18U#g>w#w=
z^rH|mZr)`(J#oF$#YJUSBN<gCwXOfQ^PJ-@5&52Fzd_}pPV^&QwQZ8|mzzI>h8%#C
zAE)S8WP#T%47F1p1KF9G4cuK%zX|^W5`|IdzfC%)&@1v`+JVz34Dg>a{S&tVw=wsI
zBo)W?nUvY(9)8Wwg>EV})9HcaIB}l#6Z0h}7?WU(6zp|9H=oQUwb2uo{blfl#z-AU
zZlP|bQd*r_8`aI6Eiws>Mk{T08=u9*X-8s9Gz8JYWGf^BKt2V@cNzrY$;G^#8q1V@
zRAU2dOU_B>NcyZ{+C}^f#1BG<;E6P510I&ion(<lCt-ssk<nD-ARYnat^N)yg;U5`
z1(Z`DNg+XVfVv-S#CqG+B}331H=J1@&sBthdA+QU#L5+91=Y^)Yh2019~c=#39LQk
zF|_89$AyD%Avs}Lg^$o!S>Nc{C^lw4kLuEgm$CDS-!$IaKz3*uhoY~fxo{@Qm-~w=
zb>7XS0Yz(u8>RVxMs-62Y+gy!)3QFMg%xCLkcA<2;H`r7(E&fgBNz(^sY{$zBH3-2
zkIQU=8mSxZ5WtE~AxoO$j*wX41J;XI$>$-`b=%NZrBnISCoj>p*=HbF*iGNJeG>RL
z$bYr3j`3j_EJ#LylBbw4QTtm`>y#|W#b(#J9S45!bF$x}IK<hZB>AeG6S8TLnzEK@
zfaTV28_VJhy8RhX5}{N|cG8)+KPh?N0Y>z~oCMv~{b+v0uAS3ezcqmhw;d27e*A;)
zD{RAL{JUG&^;NR~&?~<y09pv^%mf!GtuU&BvRVa%B18s3{{Bo7QHN0jeG8KOwyzr0
zRlwjQrY1F?VtL9nIpkc6vx&17L5Zm!RFs-NfJ_ZJLw-CE;}65@%K_V9uT@&`7r*Cj
zQBqN|G@#w;`cSD2AVT3^bXEK!mlqV4HoO2~`qV@VsFYe?^X(|FW>dXq8+r#dQn9Mc
z{*NmH*#`>E`<zi%(n1ijW~z_&lYowr6^C4tu_^!O#N~m=r?uCs;_G~4-Ppfs!sMR6
z;f6cf=Oh`u$e9g?V!)EoT>Cup0+EClBaXB<tyN-N)VB{Y7yT|x&d0fNps`l9cPj6%
zx=&MK4?9*7dZUE#zX&wXWOCo}vTPXCXbaGE!-OYY@X%FJkIOX>h^j~LrIt8l1a(cT
zm6#EMebiX7J(oY*%V(XxuYhl;6eB1J#ER$+By&9JR5761f&RLA8~z^cJsnqZ_BXdC
zL<<1{m7|Q$Aa4#S1?&gHCfyT)VI&x766iKJ%2!PLP@FtARkXV@irx~Z5fU^Ez9<ux
z45m3|aV8|(M>ha2Ye$S2#RJsB$6@hWlPcjBKo{l>k&hOb=zh>r<62#RMwI*-DZ6z$
z>RRnCiGcZaNdZX{(WwKK6B$Y+^RF6B(I5%169IklqBlAqD98%c3H*%yps5qo`$fM4
z^<<#kPJ7XWEBEu(U(LHLifIFk<ONS+jW4-|cB&lhIq42`GW%iD_D4pi@(2V(1~CoB
z1M4Yxe!9r5Az*+#nMY+xaeh%`;?1Z2?K2aC_q>1}cx+mSilQ6ShpdkElaar{;n5DL
zbg0o#i?<snW!9|`yeO5SkqA(x&BTpx%`dxh2#&V|<%%)EVS|XeC()fg31PNu0m)_n
z=M+Hj#42vM%3Zvy$_fD%;PB$%!?@&mY?5ujj1c7D{V;_TbKr^U_ytL}`<n_giK3+`
z;9=Ts1KR2N9kj$x$_cuf7sf*}G7{JPC_a-m^p=@J0&UHZ_#xXjoBSo+S1np(Z+Pe^
zKGS_bG*(EOTTw%<k6vsG^r;JL!)Qz+Z5fc<beqm1Y`bzzRN|MQ^D}hW$AEFf=_XR!
z*DnSII5x>46x(r<9}Kbnu&BUf*YE7AA@MF3L8ZxzCe^Nh*~s}uDuAR^Km7EgWVRgt
zZz5nOTrS0TdTk%^zYY@M&wQEi48I5AxVb|Lrh_tKgEn$XyxDTDO0FW1z<Y&xB!FFC
z0`n!qzximBxEWz4(hotAtu;jeL3?Nrcm(Qp+C#@9vqz)k{C4Q;`%IYDV9R@#LSGPG
zWMH6ZS}j9bdIxmFaw?o(`b>2y@)9h?Ub=u~DMZDoQd|7q&ynNs^gAq>1yZDaczPH-
z97AdJrsDvX4ftQWkQe*;{>MGvmOL2WGfs-<K%gyW07C}|MZnV5z|$qg(~7-6D`wXC
zV+m7Kdhq*<MH2$bytwT;Of00o4Fr0eHT{oMfl8MKpxD~vU4v)+Pw`jN`M*()Z;*=(
z%ZN$T+^ILH<lBm#3-NR*hc<gicgO{H&?)FbY=qjhlxLDD<_$Vh%R!!4u+aUlHY$H5
z8Z0xQq@W)v3X6w0Pm}|<9fBROOTwh^$)s=Kc%}Kk6;7-Gl+>2WLvoBvRB&P1(RbbG
z4RBy7KUxCrXDJF}K<QNnAK{HghER1C%kqy!Gb4pN=fSK4>Qu+y6$+PPnVZQXstd;C
zpAGE7U=F_v!u+A_9{*i=?D*lpTLPw(3=*GP004lRzFZN7sv!%MVgn>cSO48Dq6&T6
z!h=W(7z!^CZ=RM#qr&arw`E&Ck2AxPug5sw=2=N{<hY?|d_Z_<H+A70zX&-Q(piZy
z9c0t^guu(H)S%Z8G-oSy6ujE8$a7a!2jR1M)G{QKlG9?9DSXXw=>k&D4dhhc6CO%y
z;VcZOwgh+#f72<i_rCwg^RW^D+6OclMlmq9u>8rDD^LB>gA7uw&o#A;8vO@h1-4x%
zqPn*C&~8`5UuFDaIW_o?Z|j)Hfus|2E-aNkWb0}8^487pZD^UVuHII(T~=wiudeE~
z2z9%yLPM82swr8YBc%uxpHXPtxu{xZ$9E;hHkIWPgX^bLArnogSd}$eLfpxa!l;7v
z%TS6l4q{BOICUN6YaC6YH_@a}9+S81T2!;#d@swRx+U&NWlXsje^<~$g!<mjU7ffz
zI%@=<ieP%E407OfhI1$#JG{S5B#Tj#nIVIf0x4W0BpV^iQr4yRm>HT)Pm+iO&$oCD
zqEDMxtH%p1MQfqw_~TVm@acVO3UwkIi=^!LZJ?|5_(TVF`ZP?jV`XZ}#DbU!+<kGZ
zR$x)Ph*OKGu<M>~_B-fs?zj!V7Y6ktYFa?&^6Y07j$WlBEkSZ5GRYTdy7I;aarQik
zWstaRB+iw4T{@LiCKbX$Q_Q@YWZx=g!_R@zL)maWnvrU~SkZ}25ix{oM}282<}q_X
z4#xT3S&cB1I=dQFzXeBRdg<`&zh@5i)6t8EWV>52^S%&*5@U+T@$96}Q3Q*gp)%Pg
zJMN)e2uM`KqMG*EU^k8~xXhy%8zN`Yw3lM^28Y#121jSUm+UDj%P4lpB!wvFPM4!C
z8BKjFZKaypjyYwiE018G5jAbiK2p3=crFtOclYA8w-U=BUeqH4%jw2xY#fT2g_krQ
z9_d3)OfqGpPoHAeD-@utYGns3RF^E6VXY8?&4t+{gm&9fLZdLJ+?X<{1Z>0G{cyHF
zh^^v}s=xAYEeBor&a7UEtk!Gz<HNV9#0cAXR;|^D6|ewhNXJjS0^dHI?0W(14-D=#
z*1lr}tNU1ptbFhmn(f=c<StCHR_ly?`)sbjVpiQ42Ff+}(RnnYUoKdK!yKEqURa4!
zEAt<sy2ejL3Y=$Ms?=3$7Jl2Jd{}L1nmM$Fq%XrD{u3$lKo&<K9OXq_`0LhwYdB(!
zJ&bns#|2a{-ra@uTP*qiQ_jZ1#VeB9#I%A;^vzwU3XqH_$6d<c>xl)*cjBQvstB|{
zu(7ePX4)`(8+|fs6)#O9orI)jRNEXrMbWPGLa{ksRpDskZ8@bo6t>hiFfQ*_?}(Js
z2iinH`&9A=5MbOId;2Rnv*{~rtgO71OlZl<q@*;{j!=Yt7?!6tj&^ic(<+ws+TeE`
z80in@_0PdIUT~@3UJOC`O~`i%$xjj!uJ-5UGs{A<>P{W31?Dr`n;4Vvq&`>L;(=I!
zJ8{;3IxJpc@YH#C$HtKTv8UX{iq?H^=ennH4t=UjXYQuJ7-27|ICeUeHTEZ~eq3_~
z5tZiveyukZDjBa5<KKowny`XrTX;($Dv3sm6eFIHq7<J8DQPO_Jq|L#s0=6CAjoT`
z_$9SWI9A(I1Wd6(qg0FPD|k8d5Z3E*WBZXv1$YQ4E5ScJ*Yeq(z{V98dH9p=NrnBF
z+1cnrQh%o%m(+dYzF4SVOE?iPxj740kYN(zVR8c7^~u6H2$tsUT}O3Hwb^u;fC~$2
zdgMfeph6MaM%CKi;9&Z~U~_D5l`U=TriEx&k{kJmWK2We{z4%Q4z8jz(t7}(BVsZp
zu!v}3z_1@f(Hwq$o1o^v*n%g9Z!k8k0sqeGOnae9DZ~3JfFpcM`z^1+%CNO<$tsv*
z=3_q`iUEtL3g0Y2uIYxav*L;LVmmoScY<cER%ogNv|wkaaTdolU)@{97e<Y47kx*X
z)Of%!k62w;C_{ga+v1kb-gO|?yhg4vXVFx;Uj=^D9{l^h{NU$mDAb8<loX(gJhSm?
z4FhD#uMjnaxI*<hDl2$<oP4WH$S{e%MO`YSmUgCqx^iR^5ncLgIhOqmN0PblIuS7n
zrKKCwt!xRd$NVZ{^%pVNHorvAvvM7<FUll8yK*f3d%iOZOZM^}i)xML&)QVqyd9iR
z11;Ikc8)!(;~1V((IX@q3gmcCdLx!Ow&VmC$?|(|&!n&YvJq$kn={b*T~ET&OKsLf
zjs02%FNSu)Zar3i4#TSfe+xZ0G>{Is3ixFQIG5%>S^8te1w5p{dqKP6YsQsRX)f&p
zg{fRlC5mFo_T9%|ksWZjSIYA`Vw<JPi`V&)_|}xQiy4Dr&g>#b4q(>k(PsRps%`4P
zOiRSKT390<&y|~LTp@nlcZ|WpWaSzc)nC4>*BFRLZ{%z$*20KH3(#V}cFdT7{pim2
z!iZs-n-g~`>aum9`g|%Bu_hLVF->u(zt**$N*EvN$Jt6DkW0$G>9W2LDj#n+5#8mn
zPhOub1%JEV6MO+mou9rApTR|UwX5OuYM~JITF(q&4H63NvvH(iJ#_g|l?t9E_^7?B
zk#OyN9%G~z_tWL$__-6=xS6Ro;qA#pF8(FtD+0;Fh#9*wbsIbfg03Ej*crGOpUspx
zxdj5UnuzqA-}lbsDx0iB<Nhh1Rv=P4wQ%wpmxAtW=9p4Lgefm@3BX6t`K1n$*8_51
zrnP#w+QUKVlf!d(tV-g~1%yR!>5uRW|3Gv@(tK_oU0Xk)q%i)V3|0N<UGOaQjj*1d
ze3Fqa+^rsbeSYYrvZOp{8(#tQx0e?@jZ=Jl@S+A#2?IbVp4bESZiWP%om;(fJOgz*
zKYB3AiB!-~H{0JQb4>(R?}2|Y%ld83TTNy=?X@pxqdRLnYt^oy*KQ&b3*|k{qV}}J
z`HxjP5ohy{H@$#@R&>R1bm$?_gkuU#0P)n?UKcbnzelxMg*CkP8#VYg^q%8ULM-j|
zrf>o7(OLa1z?U4tNhlA07Uxci?U`YvfM0?2{t*t7YMH<Lra%9Hh6_hKcK2WW-KWuw
z9Q<_x7jcb@RacUBh6pu0wcn8$_Fatz)q&Mqv`O}Aw7ZHnnaDph@EI1G*v0xt&Tcf<
zc5Ezy+?jCC$5wpRa<)?2htFZG#4Bya8RFemaKSr7jKHZ*sx2?Tkv_kN81Du=U*i${
zysPhaZaslM)KGUstAB{vYxzeFaQnZe-_a^NGlT1p%$jHvGaEb<-Ds5;-ZrL2Y`$wi
zO0`KI!!Iyd_%o+DGGuK=>C>x-qt2<)3|Wx73dY;C9hfP54g)1`@Qh#6iS@+`k#G;Q
zB!0}WSu(QZeG(R>)05KaLw>GLC9}bn>^kI{KB8_=DW*f#`018ca{=pmbCG8<onN4=
zpIcOI?mjLM$X?qXl$U(~q3^=I=p)Stm}}s6)L5j?c-bZWotn6g76u7rB$$#wqbvPR
zut(cq{A{aaB5V61#NXAFhG8z^U~P$4W~Df?R|Xs}cUN%Rl$L(Cw^MFf9ZB|oJ)uSf
zaHI-t$DuI-P01B7I1$yt3@Q2Qtr3zXq>>bbgM>4g&^~Xp&E20FkLFhF0!ZTp$h@sS
zDlaa$dJkmKecYlkWvXne@`tX?b8!rM7c<FU`7)CnYC3by%wG#2;zN4_kr3RfgVFcu
z)B&iPxnsy`W%)$*E)vU_EwDbeQ#O{r?1&RBKg+}B7=m-6^7!Yv?Aa%y&};Ao8d^3D
z_`NFDO1-!9-j9w%Exr?89S=T(w<*}c*7|SZcCv%ECOFRpCi~YW@Vcn=L$@Qe%M_y<
zT9F^r5N_TYU7hZ7I|qQzU1$CHWnn(v)`w(5^TaYohSxQ3kM^E|&-*=d1c{V3iz492
zwK3LQ+r53<{K5fs#OwH2Vys5xcj}+u1XUnb0CfRS$^P!BDQyNAiQNBiW5hy-94VN)
z#47lQ07i1+vkNlDug-7t6>|ZH(x_^ZfIM)g0_8f#G$aQXc3#Ya$uc7JPC3`))j7yq
zmd!xsQk|Vdz%~ccJEpFgvpZ#;m5r2z<PH5X3T-JU+v%>z0bB0#v%el0>3Y50<!4VP
zNbH1jdP7@kl^2#9N#(+W1}%=U$Zy^2lN-8s)|P0tMQbJ+EWV`e?SMrt&>y6w&q?UJ
zj{(Qm`c-2=R#0)Ntz8g9sBz`**-VzNdP%+uW!5h6;rhY;sq7g;yfZNWZtSGRkrDEq
zX3QZB`cz8v2f1zL{KNK=An(_W(+`6X@^F)S`wjN($q`g!rr@moo$5DLLUlqavQ28;
z#Tw+8`lyI~#Q5Z~;u)|*Kmca_zP*=s94z-0ignz5a-sNZG@mWmvm!whtvt+f9QjlY
z6`aTVQ64*G!dMl0DBmD&D%(bK+ksPGyN7eC_t&CT308xFym!D~bYMzEeW_fa4vr2E
zsU+IN!H@fUbf+l})7IQoqP3Yw8X2eaup7!$n|)3hZtfrb?dP_^?frc5bywJ8Jbs*g
zSz;rG5lWQOdUgxG3u{2W!XMM{dFDZoM(WKiAnhN}=8YGTju!|qCru2-#=|O+(BlD5
z1m4481<#yn8LeJA8TQph#y}7be`s3Qc8`aPkN*Qz_4~0m-9NrBdR1?AX8iq087-E)
z5(Qt!4r8t73mwx4IRh_GZ$k!%=VKI@kgOQ&lcM;f=F_UnP;h+r{MlU~ZZ8@-kVcAI
zJq6KuQ8cL`yu$$$@+FK_AEB`~Y@%rDU<l+rC==);l9ErM69m>@jXTHukdXG8(*DpD
zM>QotsKL(#+RBlRfq`ArTSiIsdX}!0Mu-0v%W?a1q6YVXS6H~$z*mnxPOkI;TSv<>
z8NvZ+kI|$XpMuD}s5csKiTGjb0_4Q^ChRGXvV&*OU297e$g9~mr&@4V<-7haGn)B*
ziJNq#PJ&%2tfDl=vxWq<QUjrJHQZb*lU$X-Clc(4=_pjh7o=f!>$sP~+i|C`Ki~Xj
z!KF0HikX(MsAgQkyAc(;E&}T+X**F90r>o*cKr8JC9-V#L20;q=)({TUjekXEPB@B
zkNmi`)Gv8HvLHI!^Qlh{ep$zF>5hF;+qKP28KNqIb%Nzh-o0EpPC=<3=B3a0{Q44p
zQpVf~T3V=I+OO-I!H0T`kV1c_&i0bER3{_&prSt`+8OFs-;Ica0GHJIXix@}e`@)0
zhYqq7lZ0c-@EH9w;ft5OpcQUT&dw)gxj!rGrJw7OadkX$*fMqI?4nrlrFpMA(Nt{!
zZyYQ^gHbo31VP>|2HrWw+<IR-09{HcuBOsBH|M1bZV+N<(F_`h52^)JHWQLDH?)s)
zGC`6m>W$_5N^x|ZP8WwuhaD>1NwujQIVhIslJ;07+XO+KwRgvaLO`wrjjte%ROWko
zI|+!G40I-~6i_L}L}h^TxM65(8%+({pBhrZ#W~Tva@vK(NKR6sLv{^O&NKqF(WKXF
zhQJb0TnN#YwJ;jOgSmZ!D047+eo;=1=(@0$Roq~P1Q?>Epy=xp<mLzv-wKjUYtjE<
z>>Qc|0TMOXwr$(CZQHgnZQHh{ZQHhO+qQNh-f1rz?;q5uDk>uLOV50zYe@xfzRo&L
z5Kp~44RfY9=);EZU&(WV_=-ww(2u_-Kpm>~k;L5SnLbA`{Ul2}5*FBqE!<Hdk;j1}
zvP>BIl?-j&ZKg4CyGVn&)7&&$GJc|{UG_hy#Pnv)lQ@!)sXBgsBYQ$#P_3m52SAT(
zty-wjjaWWv&a^>0(s;X(Pu!F&9Gx2^l(aMBg(&pt#WK*6x734|9Q~q59QpgN6!-Gd
zV;wjFF(s5nY*&Xfa9sdlSf6qG`QmX4lXID`LvhKeRj^w75KcoZxv=)1pptf^$&gfW
zz!O;}Uy6U<$$<CH9^ILO?I#6fpTZAolI79_hoFJ7Pn2-Ho08!IFjL^S-hnE7Sj_+B
zAoVEdNTYB_P8q5Y{jzbOX(#L{@Ht6;&aNCmm?w)FE*;D;$5Q_4MugD@9gLOX#MsC@
zC%;lxV33}{PBdYN+<m<5ovFa8@d#I5r@N!#$#|BOQVNu*o12<J>5o!+H`%$vnyU82
z!wJ1cI#he1T;4Eqn0gx38iM~g>q%sG!leckZG_HYcOAIHk@@eeJE&~E0}y`W1-DD%
zGDPxSkv!(C;Ankh3U@nmU<<+y4wR`DKljrQs?3v40fg|5XN)A((<Xq<q+LE7e)eCk
z(RgtdaT8B{;-u_??nu$=&`q(~n=YFwwu%YZH_8_4g1n+?1E;11uBViDQEVcxg(VRs
z0ySTyf&41Kh9x!$rzo;~Zb>2WhMpgpsbv&ES9Z-1E{lyAF=9Z4ce<OObsq!drK?}P
zQUmqz%qI;2s;Dgf@US>W`kejY=*{pq5u%mJD%VTch_o_Psj7#l96<!RPRvduPE}+E
z;xFYuyP^%m?IWTWBff5S#N-&#86qq*j41=hdI`l&6eokK4+yn;jKeB0WwZk23|k!$
zIz_Ns*xy|3PSPI>aOLi6*@6o`im5d`?JUA+GvATjeJ7i!$;BrgUSeUeFTE(<{~Tm>
ziX%1SRpQE-piJUjo+2Ma(rAF<G#U;6H`E{=2D1~ihH#4n-?FJZRqr`oIz6~@lLIC&
zL<YiS&7(8pemV)z<t@O`A%p~#w@5hkLC&DQzg!VZRcbZ5=G7(LDGh6~ImCEIjs?Iw
z6k;9^Y75^OfJWn(3$KOp+xpiXNqAwtpr6k?nvp3&HA$OwT-ueSrSDB!Wh`dGV&q1s
zxtx(g)`tGYDp>yM*7NA${G55WVi#;telH(jQS0;<-Fn9I`_1?=?AtZw%8FE-<TaWR
zYgvJn7AVo~H9B(NeQ!F)N6zVpH^hPq$cN(iXYXI{l!cZ$5+p-`=M%x{kABM?+{)cE
z_tPC5{RDw;>`n{HY+5Wxxu3$mswZ2<%veXwx2Ul}lTm;`II-V2)N~i+2uUK`o$ZIk
zP{C7?U(@P$yL9T6hU&>8r;p^lWVHkJPLVw_5kdQ_Qg5`Eu+p&D$pgw_VklR>`?#PF
z5*gb1!|DyByf9rgA0}zjiQ-BeVitjP-}U=jnU~8vw`Y{qjxX@V_VZGwY}qOPZgbVW
z?2Y-hw-e56{Ywn}vEXSoH3j;lFjNnL2ZWbqSzyP#NZq*^avT4F_h1t`o-o)SSzJNd
zwqTM?AkvnUv|&+B-Kk>JA~U-Tt4lpDXqEF<3!nGg+m^|7W1_|WUJ}M6XeWdhHgC(h
zjyw!ae@}veRT;beqVkIH@2%C0bSwQxz+`7z34)ACO{ZfRTQ+l}7LV7HvjYWMwttk(
zs=Y>OwWEB<XsLO!hz^v3Hd`KsR~k@k8><ANxK+c3W%4@)Y)#j(<cbKMK{ZwjSYyF7
zVjnw6NGXgp*<}fV8f}3j^-cKLK#-E})Fd4XeV8vb&!6BoS(6%--uOZnN&k|4JjkaE
z4gNSe)eUF@==-Iv#F#k-mpenROcIYQk3Tf;^^`<YdLz)ec6pgF4o0H5u1=^9@yLy!
zP-&MxHVk5DfF1y|3IH0wlt~Go=Pi!X1VH7AqpI$pf^z3ru+pt!)!lINYkI+lvPs2<
zXq;37A%*LXeQoUTHhDtoFejnA=adpwU=MI9Up87?+XC5USR<|_oTpmr!8YX@Sz(pM
zlrr_N-0|Nk(hmQiTT9H$<y2n9;1Znk%Gw0zGkN~vLQ+GL-~pKBc$GP4L``L=p62_p
zDh&%ZCNN?*t=S{Xg#m$Q&z4)R-oU5<#;PglNaw_tGN{hR4W%}uBx_zMh5~O4W!}P-
zCVSN!RZ0oY_H%`D)vg4CBp_>*(59|TpOOOVE7OC^uzFp04B#p^+%3!%-Hats0@T{E
z09G7%Oc^_dE*%|xY%`7F`gh3rfGFW8D3uGgGe^Mbm&llgPsd3**B>x_>^*XHU>ci%
z=w1NOZ)EhlO>^~Do%eA}awxu_F$H!S$}VM&EprpOM`NR0M{zY8SI2U}`p;YzZW`;h
zE|?NEy4jRga@VSH+tPkUyv6+kQV~n`?U25@B+LoVYEyMij=rTKkvo5-g{ubsx}>7!
zHEJ;i_?Ew#IwVV3@^h_wQz7@W4xZYp!VfIMFGxQ|Er4kp5VEjURtt&Le1Yuz5Imh|
zCi|o|CI&%p9Qv6NGC|L9)TQLjY0D4Rvc;Q?&z@r8kr--rYUrwOuI}XmM-t`5G)i55
zA&S7&yK-C@=ioXpVHn{zXnC4qabkHr3Oed!x+O#)pNkjw^I%0(L%lh3oFlg`rs%~6
z0p<9<?5l}W$Nq6*OlexoG0<6e$FSaeA}vA{g>lCYTjyc5kbmks8NrbEYq=;qS~uDw
z`mstap|s|l8Uvpot6!voahD{m=A8zt%<fkh@BP<Bi$^*d#FiwDM=pYI#|#S@GgE5O
z{aI~**~e@&4=Wt>BK<+*Ve}E0IZ`8w1j!?KMa`sPyRQC>pW_YTCrOrtM&`x-bGdu7
zEQC1m&X(kjhya}Svb6#@-7zQLJR8bhk0dhKZnB%d#;5!_MoG8?9h9%<9vZ2skJp#m
zpKygOueyp&F(w(%eMwL>1}@T5gYUV(g`C7=)u~nR6OSRl;=XpE@d>2&KSUw$8>kZ&
zJ6yHDHqXb}G_vzn?zPhosD6O|8wn&5&JL7g0stu51OOoapGe?8;*eSY|B%D~O$1)?
ze7kLMwDg|VDsY=akq8KNGIMVhWe6j0oWMeA{#|@Ab@q-%?2oDMZh@55|LDE#R!^jT
z4~lm=@yU6<DlsUcKELqYrM|Yauebe!65N{L#VW6HYVY@1{_I`*$c#P9i5<L!AM<g=
z1I6b|Zn$mA1YgiL-H|&Qx<+UwjQ4mJD!&N;Vfd^Y_Q{ynP|SafD9yr<`xdc$f2_QI
zXIVJCR%$Sg_Cos@6ijOz>yX%v-I#IdIMU0(Ba?o~Os)}}YyAmlPR*Wy>;NeS<Y<!z
znluzT!o~t`kBH*kp9)gt=d{F){qJ(;&=3Q#y%>=^l1q)i7WfTchkVH*m&EAZ+SaXB
zy9QW67}etrulXZds@tCZ!lUUv=j~>F3BKyqb)4J?%nepWa{X@ja%0)q4UIrU@6h$~
zRsIrmNzU_NYrhKl#Zmt~B(()f&&Cs<v=(FIXEhMphAgt!G>PUfsS}1Muokh_{a`4a
z-Hyu$a5n&TUB2A@Hc6j$h5A`b3pTrxhR)B<{`+~$$8YbmxeGHt>m2?wZfW=Py6b}@
z^i&hCg4Y_N02oca1rCTZg~7l(mWIAk=f;A8$Gm5Z=12(grQNa@MbKf|0={KP?k&~j
ziQJ~#opela)B$J4ZDqy{#WV4BJOCsXg{^HwK7G9-cHU(F<KL~5&eM|}pi|x{0Os{M
zWeQHo^48M07(WyMKM-IxAL6x+#;}-YK*=b7F?+|}Cz~{UqmDOqv8h;CpVuPg1(a-~
zwA<2Si<*Y(sNpt+-+m`vZSMew<i6BuhIsnyQiJ-)@3nhdo5lYZ_~%z1T8z3XKbo@D
z)VLX?uMBx-rEn$x3(%p0FWS?ub!I0|t1#*Js{g5nl8EQ@i_7dKdowryV3@v+v)g^5
z<c|@vJErr@7N)i%TdO@sS>ZAd04NCwtM<Cx!G}5o9Aay9idZI%IWt~!gha7}AWafO
zg3=D0Ftm6*34#s>jSOwX+}+1_7JE10U%)-cFG7^K*+jCh=hsOH4MnUMz$Iyz*Umgo
z;Y+By=-bQLgB8Q0^;RCMv6D90jr1iHZ6oLQO8+n}7Ua$KF}6(d$uaOiM1O}rq;+@A
zK&e87E#QeLBP*SHuNaxHUgq|rw^ZN|>vD+R3|WNo=fHbxhmF&G4rp&Xv;^VYt4;jl
zwh&q8^2=gCOtpy~$gdv9fto0rJy~UN>^zbEMGAB72Mq8c3MBehC6nuL>q+Y8Rvo9O
z2Bj{e<U!1rZQM6C`g70$#=jmq@RrW(!^oTYE2@3RtFdD5rQ308w@=<*k`3$OvhP#R
z9x`QsB^mzX;6Rw1aoh%S+jnG#Q3wb`b0M%Hj-q3k4rpQlgT^cv!e^KM$z&&jPUM+|
zcD65oSKR<dTp1y`oes!rAi>7u5!X7#s|M$?0hb2WQ;4<}6J~#4+|3aU@Jsg&ee>%n
z!bWjLEn;C$%za(5<IzC~ov3;hr{04!JR#-ucy^`yK!^D0iE`^t{pZmvS+p2ypu_?g
zGiKHMDhbaSv;g2n<&Xjx+bO{b%pCm$8yyK90sLp*ljXAvM8%=~Jts?~V-*ZDcp?KK
z_Wi5wfqPj2b=_eLf^uLWzQQ<PG51hTu11{k*w=Bd%uqTA<8GB?5(%;#EVx408Pu}6
z0sXiBoJ8VU*<F(YMN5PuH})+KoEL8agAi$%!#YCBT7~B|yhe6vVL8g$A>$#l(sd8P
zDraCp!yxv`wGE+Am1DwIzaW_bY{FUqqYx%jl~^Z1C&N~PN$xLLw6r$Z8{^#Wp$c_s
zuj$i>WQEx{iYGU8#>h>p%v`CBJ1Jl`q1YrwzC~X+De1P<p}m{}xM2IZ_<UJ-W%!@=
z829S|!?I*-4z&jg*t)(j5654OTKMI(2!Qfl#EALBE@e3C6f;KJqc2A7+@7L644*Sn
z&PvbIfSocbGBK_?8*-yzF|RA>JgSxp3ayCUn{NR#@ka9ds149kEj!FjE;+z2hM6di
z_2+|snZyg1z%+{01<C+f`yA&IUVxH(iMSWOE($c3`S%6)%wNHhc(6$LyBFsw8m~q{
z3knBaN+)cLVZ{U(bd0WC_TQI+b#_Vv?kj_!6i|r8#OPEGGJmLE*ltUaq=Zt-XAIW{
zX;59SvGkwj7Vz#v+s2_iZRBER<hOmNxUNaBRr?ge8>x&PiUFpgthmmNS>;I}pcmD(
z2)|*t$4s)7X>Q?8%l47e6l&D-ld@%dCLb5(+9Cxqqm%swq4*jUtd&<xRD=K><VOs#
zC$l*D`S}`i?q~KI?ccXL?Yl;E5Kopx$mL}wzZyY<tvWI!<?ILcx!fP#A@u^oJEZr5
zeLr|7wZlE%Tda3o;y=$JJb(HO0;*1_)-wS3+~qNMbjqs8Of)m)y+r}s2Ba2S5NOIV
zk=)=^#`U@jqls%4SR>r*M3w@nMnL13VFD@+tH5r<Q_XBL8>^=f(xUKzgbQZCN|v(*
zL_tsH@Na(suH!fAO@&~`&KAz}#uVVRX2IFg@Z4t~c_{?+nf3^mO;vqdm<#SfKuqzO
zP9Z!GJU-!WCFOOC!a>)iFj)8)tGaO8Zakdtys_{8e%{`zB~3v|8hZ4y56@&6r3v}B
zj4N2`DHiRQ!@AZF_z7A>4o%OMM#>NmJF$nO7FDBEzf9H2Hc5etzll8AC=e(yg54*y
z`vi_3i7^1a5%?z5Ipk?PzqIo*(ol&YA$-~8^@QDpLacq*-**8&v%@w4s0V70Gc#vE
z`SWAz%!B(6m}Qo((uIoOStqNMqa5&D<UQ}jPgNKxxm-cx@npw{#cwt`#6HBUQ_F}a
zV)LpumMCH}i$8Eh)Ym*ymlb$RLzb&i^ocW)E~&6(a-j1A8g%ZSr~<HDpI6me9UIQ3
zSELC2lYGVoJ*;}yY1m{pa<}>HU|wnhtn~Qa!)BpgYncQY<_V^B?+&#ms5HV5`7G}F
zOlqPZFvBNr#QdQkiY0Fl7aWLc26!Q}d<>b9{h*CXZ99ODAKLdL<!i)p?P{;lk8P4=
zR+#wY{b&ZC%z1X_xo=B~Il$y#c?MNY#J-=J<gG|Q9Mz6HTZvX|h9p`oEGVy~Q?d&@
zqqnGd)$a+0NS1P>rI1yGrs&bZ*A>YyTe3oxJ?n*GmvyjR*$(UH4ol+~&setKj;kmG
z7{i1=gm+RXfV&G0lLM~uW8oC#Z^F=R+A4qtAU%hwfpZ6ZN1>4EgWrX@hMCLYjy$Kp
zp?-(tBhIyN!WEwZ&@wrc>rU#q0|KFUw2*axLb+l*iD(f3V+t!&86flC6`l0y4;cKy
zYa2OL$WJmSJ>2fuqx#bjt0XXXc;UdiV2<Dd6z<l)Mh0n`2<f$6aT4J=Ii~^lM)RCH
zu5GUZRdP{$j`i|S^n{NE`<@D<y1a+rCP)Df3!`vTy;FhAT)gpv302LG{APb<S#ji+
z*lZ10BZAQ+D;wxDLtSW!ARM%Y;fvg27Ml^-tGHM%Su1ne+q`VCF+Qz<0>}W9JmQY3
z(?hS%1}n=bCFomUB>R*WZtLO<<Nr+-<iL-H7?O_z4*(l=3*_*ttv%#R=#C)rV#muH
ztnBT*jj4#{ezqY%4t7*;h87QMY}5<&zs>w1ThVG6Ky<nqmG|2cirT8g+si%lPb!qm
zK4{;2i1{Rr1_aM=Pph!TW%vHKCudW#)q5wk`0Zym0G~E~&P090MEm5`)iOwx)v$Gl
zx??LjclTT7)(K|ahlvp^dF-wo{98n7CGzdkGWYi^b@)ZhKQq~DpsPgUI(}sULs2`-
z#l&j{i8<W{4q1mLr#&?QXgCCuVkyLgr$R$+$ao>@PBSbeuIRX6X?Z3QGim&mUyUF+
zVN=e-p{R}-)g;x{kkU;(y5gA$?bL{dp8wHiGlrq##y?$CgobkwFgbWq_d~z*{WQ3G
z`)}fpfG4?(0`>x+X}2cA!`KK`r^fB;oJFfZ;LT6w(N2oy0fU1N!ywz}DV%Vrd<l+g
zc%45K1!=o3ZX_It2etIfT6*z=eTZy$GyXY%ABQ-`w}{!hDx<$%%GCVzc+>)_KHH69
zEdL*%;TUEz1yR&~SLNfcgvsFG$UxA_;`G{a8LrS=D@B#U7?ej+t;m>bnI<2!&9!7j
z7gA7ijbgM89W_WpXDkD!$+jrGCb+mGTDO8t1=ReBFQ|z_QH+SIJc%Xh_2~VeOpF3C
z<D-8g^Gd3U|03F2egV`$lv3iLmGC0QL2%UZP<GrzNfsR;<L23X0G$S<+r)2`W^%Pc
z@YD}<=e<s7h*JO+L_tM@;mGOgomN^@z*x$E1(Sv9kTvp8ozl0t^q2;(1$0#w9RIL<
zx$xcKs;^;UZ=z?dp}zN5$V4$E4WM);1}hW*^x($gTb<Xey6|9d5Kwuj4pe*|Uk8nK
z3n^+8zdmv1Y|J+!j5A%BM#&Q4fl%p(YJ3Re;3*fCTO}^-t7`oXj{9&lAH`9Y+;BMe
z81l!U7?5a;b{zryoFIl_3?iyj6BqEjT-f+L?k-DhVk#n-#8lL9$7!mPy2ULz_fzKJ
z^C~e0e5)!X+FnLA28EC?zZK`Ld_~00jjm4Gy>u*`lNpg6_wTDaM^<c5w@@F2iYrWd
zbgSFQFxMach$_4npL7&PaCpY)5|a$Rz*N?)X8*p?zWh4sTIJ`wOp&qEg*DltP`k~U
zayTqzuncg2)P~*!OmdBk6v$|Ji)0Zbb5&W^M3)W*p&^V!-h5^-y$o0?48C+aXopiu
zf^Ryao1;>yR#*lg)R9goR{ca=ETmk-&KnpaJ%E&apL40%13Rgh_s}8&mJuXn9}V{M
zR%Qn<bD@GGTWZV=!!QhhG_i*xsjKo8zm#9GUP&%s*4iBuT19%5LC+yKKis*i+HCb4
z+&9p0NnVkbKQnoj*VAUOh(K1Oqg^J4b+epn%tys7hAppqZ=|sKu|Z+;V}s5@_4U{0
zw;q=Sec)5U87zqPiW43hksPBcU2>6#L2c4Iu4rU|fx7?IyokdsG@jXye^%hh0AE}o
zyk}y-QIp_2E9WV!k!?v2Y$Wm~#01*dF(sXestk`~Iqe$|x)IeFy#c5nzu?fPwlrDu
zQ$mzleBE;`neGqt*rQV!RvbF%dpVF%6f$nXbon+&$G%nkB;}K&7FhXJ-N*VNs3{jv
zP;xxMQWB)%+oZ%`_bu1!Z+u0XyGepBlcUO?0$$1_O+E8U&?#a<U+t~uRWH_rP&h5V
zK-^fQ^hjhZRMRR{v!sTsCQw=oIc4J<H8_DYq1X=o_lE!%@1?|bi*2wb8F1KWIc~k&
zT!Fu_nJ@=AXnXzm*7n2|GjN%`knh(r=9l~3=eM;&s|Qgp0Iu`Dw`RkDEU6V@@B#fZ
zCeY`GAPd%CM(DTouO%cd4i~QDb&uLs1LyEZqqN`GBqtC1N?k4JSFd4%|0}aWJvw4A
zdH)-}FZV{qQa80-*d(O(h%;x&pBxj>b26PIti{8%!YR20tYXmR!~?jXYd#4nq~d&V
zcxfq=GCovOxSU<dcCB(yMwzEyOKV$=#>)I~OsXC-PzudZGQj3vTTP*~5|~w~wO0Ko
zPT6|6qi+c?K4shK6j&HZh9h-qk&<S3keYiYDDsV{54p%Dnoo#|*MG}gV?6f90oezP
z6R9JWAT*WH{)8}JnKm@J#@A++V~jxcxE7l73BupAfAP3a?S)9=L((vT8OcGS$WCd{
z#gm{iJz#neK<5Dx4-V4X;{c`PkKb_NTmt0}6L3DwJgAAs(+36Zk~YnuNDjFY#<CCs
zNB_c*;SP^Da+^VR;hl`FBgQfpsF#R&(^I(~5LCkNaj2Z3FkVd7w6z4k!<|#<!JXs;
zwIcygz#9~@e#4Wbh+w=Yd9i9*kyl|c@c^+3W8f)NY6M=usea<vAEX#VDnUwCx@-a-
z4cfQ@$O7vHY96nkndmCPGJw?Fv886V>e8Z#f?$~tfE1yICXUOHV;LN1`9Ing91|s(
z?`2cn3lEjB(HpF;Zl+Ou_o6027bcQlOA4>$!|aYpw*U#%!o##~(Z9}?UZf!an+?V3
z2RV@#$_CJGstZuC{oe*2q=&H-6VmzRs6b_q5^K{h2Fxt`#D6X|PXKhzeCSsnxATtS
z=KdW4?T%+nn?hjh%G$L|EH4-hfh{OPJZSOJ(4IvK*qeZSF`o@*sP54<>9w!P-FX~A
zK+9sWzEulNuf?q8(r`}WXhpqD=bHqoL^=$Ptsh8%z;(k*3=c$}q}$>)0?UO#NW&KB
zKvB%ZfVY{=xHirGXr++ZRZBn{JSd31{)HM0lxBD}CaObaf}jDL(m&ZBNBGgubXVz3
z55@1iPlVt;G$;^p-VH%fIg&6c85M0@ysk`5n&Bewraj$2VOv7H0y6y3>AZY^%U-{E
zUmRQQ5LDegEV#uG>(k~ylyA(-J9<^ah5sxsMz(v~HtD+<H!j7cgD?-eq_E}-sh~-!
z`q3+p=+$A=2W+VO{Y%y+e4y;|;XNxvRz#IHvcb}T)+eN1CfC*kE5foIm%dtRcT9IW
z$jii~f9-;`(|zYQH~ZU-M4F-J+s6aRvS-F@{aw&|0RV#UU*IqSMY;UnpA6kyuP(74
zqHbU+5iF1zzFRHZeY$mKVZ0r=<}6>ub)b9@IA`eGHCgK*9!*pnLZBY~eRs)PbTpxE
z0B?3(f*6Rz9yuz$AD1}JB9zjLXXmkDxlFDz!RGH!G%S=xjTo6`q$Im>e~3l4W^%*@
zEW8sn=;7ZmHQgPJvWp><2TuS{Uk;kwlb$%^-MnYM+}BtJH#aEn6`xOuKPk%OX(vt4
zOizkiT4r6TBu#9?m4?nJ7c2|N2V&)7o|@qRN!vtqq$hMlktC$^xs78Wl5v0j0E+hQ
z`tYnoBP_rn!F>t8A{K#{$Vze-FfZ1Z%GDNy<=kUD!{1DeYGg;IWy4B9LIg>5j*DbC
z9Y7@(NKN`KP86HImjrmQ&IR7&me<PCUn;gNK$;9@t+M<jjhU<qhHEL~0*5c5sNRwx
z@2Y93lS(!Z7$6h#OZvC&mXWz@syt*bkp%Xz;OtaWgs56_N0noRrNd%L(fas${dr;d
zS;J7?chRPD+XtiirV%9DveT!z>sq|<jC5Ez&8Vl|?+tufi8Iq0t+<z?rG&Y1iR=0b
zyRDwj!<s@H<5rx2-^i_>d!RB;HD};fBY%5z?I0Y8xrmCmo1x%eW4kjFo(2#a7e0MI
zWZ5)4NfSmO5OA6;&snGYp-TsDZ8L`(nFc2YV=gT(WK|7bOcsL9B*2_(bM&*=j_25|
z{RcA4J=ywSZ&q>~%b6uG+j)qFA)_}_lFYG;8^%fpC^?e<2BLz2Sl7lYvzMqJn&EF-
zUc-pU5`q<@<@n-(T`>&aW~fIg`lx}9fQ))^DhRC-0S$Mb@Mt=Da@1?`uH<u(i?H<G
zWxtjO+T96g$iI>*O$foAKb%CV6ih;8AjN{nyNX_o0S+2-<90})321=K*9p4tFBrU8
z%!-;+(O{7&5ob)ztcEDLG<kN3%+Jz$382#8zKZz!Q4VSbQg^5Ev!#u1siG7U6Le2s
zmq3n@kr3d#I3-rILWZxK#s*MI#D!*nw0!e8c@?>%<8~3W2%Z^M)^e!~r28NT8Ho&u
ztWu14>{}Tk3`>8(zj&-?+&6@NR4db2zAge+)kzB%EAv2R+_8r{dva$Uun85O;>y9g
zWdPgXu!#Z?5mjP{P6R?jGWSLQE_Y`5u_>{t*}$UJwc;$-eA}S5^_l5^Yq~*+A(rtx
z74brwQ^WGd&G`e$^qcTq%+k2rMn>FJMgb)*;|fziFbg$X>DVHXDQrn?1qNKQ!Vo8!
zBeH6OFM7Zzex>!QOi60yy%6_3IA!gO@H4z<;W`G*HlCJGdPko$l8j@!vPvxNYu~M`
zY7z&-IiFPsO?+p{pTCXw^_$nOaoR6Pm77TECP*UIR|z&Ppo2w2c#0Zyt>SnFF)Hi0
zL>IBvKzRKJcKg0#P<`{JGhBrD)(zPyO-0dM1p`>G;<%NYq{^QS2IJm#4VPpGaI%;k
z1ebs-F^rfX7bFQM%qPc^l+ae>bI=Xoj2bhZTJ*|WM^3+d%a5o$?%qEx%B3c(H?p3q
zMeCn}Z1J7~O$V;db^Yu)f5H}w4|E{k+WYeC2IPF{rQ7V4J}1(tuo4yvXc(qSh#s}i
zWTjcvPj<=@4TF<}g?CmK43AWx+P$6@38B`Fcp?uz1)_)s;_%@}s25s|IK$vDvvdWh
zG4Z{H$P&DTxy-*2&#eAEWN3!|`SRSE+vkK=jU0gg5)$LFHW|XAZU(q*oI6%~zaP|i
znISE4+}CzP2NG&eGqED1=M3sG9Va}+C61H6Kk8nqJ4+)8*T1i&7`N3-NJun$qYW>K
zDE%{`6&!6aHCJep6(bgXz@F7&O#5i<dEdF}ui3umfDK6#-5atg2_0UZa&CEiw|Nt{
zKE1z-)-{i-cV`<X&vs5|D+T8T`Zg2&t-i4ZpS1$%xx@}M{Z~d#V7@n_mp^M#3k%}<
zmZ}$Pt>416y%5PXU+&k;(`;5Lle%bh;_W$eBi_Z*lsb+Ve=gJggl7ZFlhN)Z6W`Ef
zwfho?OGz>+>Qo36Y=6rx%dMcpDbXn@_0Y%Nu`{h#Qb<0mxUlj8sJ0KASA=@f4d@bY
zY3MC@66(t`IkfNBL48wqDv8h!a-Ck(<4uC`=@YHbkDt-gf+cUTwRh^O+>7v#y`!Qb
z2Gx3Cq5srn1KXB3bVOyuQhs$ss}P8eAYl_In!>3+-?cqrtzaUXA-Tb+nf2YlZ)xJV
zA=^|h!CopALqmZ~-8|L)U8pVW6zK_{iY;qqwt%R<d(VkC$T4E!abv1$NE?Ty=NsX`
z0e%V?>ZV-YXY7I5H3r`~9KI?k%h|)T&2qCf?@YjBmKFgKCJpP4tM2?ouj>4TUESSX
z^B*1#srqhbHYrep-mT%0hK8@&F~|yL6!GI5Xz9|^nSkhFqWA5%#Pf0~4jbH9@#BTY
zagx=QkEQ~hKI`pf_43c~X*I@)#N(`7m1{yz<>+jK_^e;KXlxp96MrH4_&NHHt3m71
zXy*G7Q9WzPu{-)Mui^jaVTl9qGcG3I;5POz`&hs1ZVax**;n}cmyhh|DJy;GaMMn&
zHZNbC4_CFk1t7QW4pYoHZ8eYN?TfPE22eFUeu>(4#JIvn_w<aTi+yCjmWcjA<=(-#
z7iF7^M;c<O8JD=|8Lzy;vNQc?*`LFQZCG#4Q$?Z!#5SyTG}a$30yUSMw1_fbl-6&7
zAniQLtPj<WLNr=`Mz;skj@tAv2AZ*fTuQ>AFkmx#c(BDA1r5W4Ek#CY;^gLMc-@@@
z6L5wYqE`2I)1U7;(V=tsIw?ZKkK@bk`g90%^@&9{mKcc-SC*t6gHO=)lTFB2&Y+h!
zrSJ4bHR1a@&sTx#=vQo?#o0U1aDcPI@+Rw@aym2zR4wM4I4N<(VOl;<Eu^=%w8eZM
zU&*+|Zf})3xFiP0kCl(z!HOBO{Io@Y3(QL+K_jA7-YNLt?kcUjz%$D+aA(uwBzQ?i
zZ%yVs0RJk8$AjK`Y_Zu2{df&(9ly%((q`hNHjBy&ixZ+1(DZe*o<Sx~2j#Je<_a(>
z7c3C{i%xXeze;@B4>jgF%c#>p$0M<kipegwA9fV!WtQ4O)~f2EN=&u{DOT*UI@Yb0
z1s+Iu^c2-*Ng2LfCA?%<$sb`;4*iLfJV>T91<}Y9>22^;H8H6LI~<099sON>di>_C
zB_~6O4r8-36&nqX*ZImR)Q)9nX?l1O11llvfFC9Qe(J=5OP@*`LS3w9i3zFXOBl}=
z^Qno-n{ElN*1G?r@D<i`G}>%vPE)v*G1?q(PcBNRo-8^|*Zg|ZJZdz`p|CVC0Tvm|
z_2o8~9}XmgAszB<WD<~9xDC6#Xo$s51LR^_iPutwJK*iv=*m;i`1<q_9vlGov(M4~
zsSCenVW6J__W&c_AOn$f&4JPEX{9spfIK&x!n^jsv3nF=2x_>S3?SbO(tOHk*b*lf
zo4%3g{1}trTx!NydZ?BmvQ}kO>taw?-zY|x93rGPrVq1rx8UBA^}YVJA;ObVLx*a-
ztdPTqD@$84cU6p3t9k|#a^*HTS&->6M5pb79S}7=4a5@h%t@AHAM6_Ii$<4$+*30C
zI1S$Fi9l!Hq?n??d#=offx??p5XV{K(5-B!P+=2(gUzHU;i|xkwjwvcnM5h9U_#OR
z-0-ENA_t~thsT3+N?=URteCxptJQ#1Ls8YpQRRQxe^5USG6;63XpP#bz0>3SqvST-
zaE-1Bz1iBJ+u*qndbA@e;}G`yXKv?1XI2zGz#wG(9{v-1Gum}~a<oma%i|u8s*Q_k
zxRDL>CD1o;yJ)ms1o+D(nb%s`lf4_oXBBq`rp{@D?jaM((1)P}f*L_3-Fi<I4admG
z8)vgP=e=~Ymjm+qiGDVPb*-h%DF}H;f!5=a7N(}YYcV^i;~6#57Y<z}T9H_#^*raB
z5o{(05xcK7O_|*^A|<WMs(D5RqRd(+mL)vXW$`*1QT=-E>JzE3ngO>pP8<)8M4aXG
zB8BtXX{tCF$1Wkn&b#X%7a|}1qR)PR2$ODM8giV4nz}IE=5?6t$`&ixmWa(XP9B^+
zAqsFz*tMkg2@1y>E4D2eI{|I+lmwtQ%F@o0^vQHLjR4T69wss?^w#%g7J@8Xb0Fp~
z!fx;x<7H(|><^=;^Q!G}h`vHd@Bw;;BDe7~3B!H3$0@7gA+Ty$oo--Zm(J@R3jKP{
z?446iE=J%6ZqwW5K>oUBgFF?E&kV&7*wevYBj*zF^8IUT1^26#DpgzET2P^ir%{~i
zmQ0z2Xh!S;XSgmTOh5(QU({a|=m-bU5&BzkATO63DPlgCwlC;NWIH31!X66IT0&6o
zXRVlJ(*rFTDQQaLoPVB|?MkYRyQ)g+ns3E{1LsBUpfH9T|Ktz{(z*n5jrzx*Uw_#=
z{$73_4`DyNye_}SU$$dkUru|1hNCja%;zq%bA5gJj1O5=V)`Dtg2PLk;_#k;%_jw;
zjE1NO^p->ay2u3LAHU!DxS6#I_Q2YU2UYGMsRqEo$u*X~d;W5%e^L#emv=H21auCi
zx%*-PQdMM`ppNXaGfTa@#FQNuiCF{#Ml*buK)OdieMKp?IEj$n!NDJriDPwkp#^KZ
zEG6K5_)bJZ9pA`Nm%SrmMcmNsp+gQ8@>*VVXiju@+T$!SZbM@6q16k&lZ+Tc@h>zn
z!1bnI^lPB!%MU5^kw)4=S4hO)^hosyz1P1pOj*_KNLY{xWAf;zvx$tSG>mwI9_$Y#
zRhh*MGnVdz-esKfFVQhB@`m_f1+*G*MXlo(5hiC$S(v7~_&wZaD~H>@OXzK$rv*5w
zCkzUl{qd5tSN`FOj`KaS6PH)_79f{EP119<CHXqn5%~wKKJ-OwcB}!oVB9zI4y)JS
zloTi2rJ=WWMK1OXOe=Sy?%Z8}f3>w&f>L!#TYc;Q0?sirjfYUfRUVy_p4cjDr=@q-
zu-fo8Qf5%&B45fd;JtFOuPjH|vucxdP^Xrb&-bPNHSg`@A-s<(gQ~dn4z@F(T+udf
z*a-AV^w)OT^zLm@EO9pp=#k;N!6o+XyD+wI-6LgjRC1I(u*-pbNF=npw>LU3St&ab
zlA$j5ok)z9O5Z-p;GqCqqcn>p4o00|^iqdPu65q1kp+95@D|~@3P|No65jY$Q5Met
zy|_rsWfZ_$VT5^h;<&QHFSQMq{LRB~FvUJD(`es+<~OfMH1+Rw6aocp10MW73GXvv
zWG<3;1fi`LDDg$pjz!=boVmh2C2CoEfFfzPubLD(s{mGE^@j`~f$Vxn3o-X{6}Q#&
zT(|llGK&?or5_blUHwp%+#~2q{q8ciW?L-G6UnVc=X8H+VWlizT~F#Ci_5c;50(nW
z-vbE7YegLI$?M0yBdxc3rojWW;T|XS<`dxK=IpA&L|y}2gA(6dQwyWx2DvU)hrQlX
z0G)py_+y9G+sgOBk*WWM@d-T#P0a=dn??1A1RTH7wG45e))tLd>`={ZGoZrzYy8lr
zf`Z75Sx(N7)cb9=RR_CttuTMwQtw;i&k7~aVUXMa4ZUN#E=&@^o72T7UF?T3`^@qg
ztan|vpGxEzN#5z*p39Yq0YjFDa#>q5sYq44+hFH%wj%Fy%vKi=I*!JgB*Rv}d`%pq
zqH~hg6@5k4M!%tkhLvMR#$M4Kt(K1$>oOV8SFHWIT4>}x-1R_d(A5%$)@!^B=ZtS~
zt3hhHmT{PFI_!Gpd@3{Xt?dwCG5m9O63;u!7(vHJp5GxY=*A;g0)b?s*_OirO1{d0
zVa9S5+lIDSq3gDwOa*@0ZHZ1V(!+n(ms)N6sly!4<EuO~xgl}~SN?U8Bb~GIlJm4m
z#=?xGXQJwZY^{ttqXPJ^3z_xRf;6;{&of6xTuZE@yPo#~$}NmIE@0eO$^JtB=rkuM
z6r5gPP=+6=zptH~G+jargT)7nZF%|*jXER8&B@7I;Z&(^sLZUxZE+w_8D{mYuDU^|
znK2mey@>JSBuwO^k$%DDgvHef`y04mTHn>d(U=bTRl2;jH!(&xCY8A*ad6t-O%Kr0
zaQ)1ocgx+KQ#Z&TyOR~b=af_bc5D>9_iKruD+KwnyFO~RXh;rsf}g9sZsM$Wsk~Ec
z#%^5YB|*P5(h+3Fpdni!PEq(A%C2D>N<Ee~Wq9Mz;?|;qCCHDat8N*=)Oo-U>w@1D
zlOF50B^>J)Pk;|##b98YvK=A0Cx;rg(v@`VVgThv0JMwP5gtbd<YeB8A^2%zFl=QJ
zfMztv)K2qf`nKKQkH2?#p6~QfJ4h_?@O_6M)B|`B&OTGjMlORA!HXxqI9|N4hKmy`
zZ7m(jBLV)=h>L^Vjv|gj2x5HvO-;l~o#SmJ6!NZiL>|kCe%zvte>~&g__c?hOM_n^
zrm}{^>mKYrAxfPw<fX8I@8}?8qmW7bFotH~QUn543TFY@kqSd}ROsn?l(|SHEW&~&
zS&2!@v`ueCiI12AW6CtW12(hE9akv)KrI6ff=P0kO4Jt*I9N--GeyN8UfRz+zB#m&
zalT&e;LeB<t~{A?BQ3aDGy<%ZEVjlVH++&er2*7u<%Y$?*gMRfkT{V2{5Zx~g2Gr$
z^dW7e-jd25ZGxV`Q%ie=Xy*Wjz5D1~F}lLYl%!uHq*Ao~d15Em5D8{ImSKlbz|9Me
z@^n~Z`@@YPvw7?YN><&JkX-rA0)txU6Z2kouqy%(RA}y+%3O`>)i<l8LGiy6I%}<3
zSRA(mZt)$j?jL@PRe|)y+^K3+VpX8^Se(-CC54@eJsDoxV73~5yN%cETN-GlzSkP)
zzPz7M!7!LYdtGm=Uj<(-P9kIh_YT4<LaE*Cd$x5#yLD9OSGmfp+9LnbjW73TZR^h9
zXybn7tk~EN+PwmsCTg3t?%iB4U<7V~=+g;C+V^X5EZE4uqefY3*Tg#fZi@r4wk$0S
zIeL9=UAy!BKL?f&%wuxaq@*hi#A8vxi=mk$gmrO`fLj#!&P^ExlM%!h9xU}!oubf7
z3#M#2sP|98)&lCdF%N9<ZfT+}Xca$NPz6*#3a~0}5mh#tv&FQC>m=4(jZ)CrFI6at
z8AB>wBWR48%CYK2&h|!J#&1hTMposI+aVfmUY@bFUwL^~%gzc?CBhmQ2T*_HT`;CM
zDeSPZ{DMa^>Gw{lng$23_1-IuK<BPX_hVq}6j$$hG@q)<);#s2>ge*B{4WKSDTU&e
z(JAo4O1Y=>=8{=MfE5C2LY9&4%}FiTvGT%rIfNa|KRCc5rKXkB+I~a#Q|JKM^JDzf
zi(EhYX3L8s5!Wpdk-B=CkGA$qadOdrt1^T;_8TWrWvu2=9~07TI;nTp#Z8K*%geQL
z`{iI8fZQClxgM>_#<s1hU2wzcrPr*|j%)=tSmv2a9ImXTR)25qj;?<?ZE#&mefgM1
zG$NTqJEd@=Dd)_-K=q_YVGM&6t5i*UR{-$)Y5DJ?Yja1oWew|)?zAvC!Rb+qiV*B*
zRk4zZd;_3u^ob#w>q(6dHGubWMI+z#r+=*7H{t@})qzc$rVW4~D6rbB3xLE7z}<o)
z>jymCk%*2Q;J>X(yELrCf;AmiVD#+Vx7ivHHtZom!&!z|xl>rnjlzogS4R$6S#gOZ
zO?Pbz@&$vv>V+(<_WsU<URb7uHI@+)D4>#N&L+dk3(n@V0m~jq2i*7F`mt@m$k$J-
zxWBO~hF|nwh$oOOtJxc(_<3TdXRcv@567^yMC~Kqo(6`CMYSg^*SnRvIA>dRH80vM
z3Hz@zf9T7S*_x6Vi||HX=*k-4W&N-WWve@du#+&d@CLJ=rwpGCBqS=8g#w1k0=aQV
zyd9%F?diVWe9r@ByTap)`zgV^QU~~e+f!)+#zD;8<G3PkMKuIkfBdCD!BWiw{cSqf
z$sJkOLv!`{e1&T5!D@0XpOaYzMy#&CigS=EAV1ax1gpe}HUdYK;0z;bQ-!;Y7FL^Q
zd-MBxuJ!Nj!RYC`g*4u7`qe_XtjX{p4L`3Gl-4Iz`VdxJ0FD<Jwq9I2qwW*cCnWQ<
zT3}>(8jhbs@4-41$e$G)(4qYD2&ZerT6;tl%&mpF@#ZXZ#{VRPb>suy!7&XJX~uQ+
z5u5KQEH)b~)<TVczYv%@1xoiy&JhpK{E)xe)_&!T%8N^uA!j&lqH`vgKo2DM!(j2i
zVe}S_Kic1m@{hL$jh-K2gaj@LByZJLJLS}&^=Y$um^`?Y43bo&1a#y@-|^(css%&m
z^u%owAAHdQJLB?IKVz5m*Nz)?wr}VBy8^B6_NY+3c>9;l)~R0!W2JK0>=ZzQ97Qvc
zk;SB0i6AYYLQg$HyRRJGzw*UvsicxKe%W_)*s$_DS6Wb=dYSzrf>4`!FucAlrUV6F
zfar1<C5QrZ8H-M6U@R%pd4MwYQ2s>I{_&nQv5G=GDf3EA#Wbtp$gN>{2@T1@+(^vT
zSODwFOABy`$#7h$DtrhvZk)*^+JH?q`SvLe)F@0XL*NS`8AHp7aTjBygy4*Eo-VTH
zF!HpO#JK2vdo8Zg?4=gNoH=-(({(CZhW%_c*3Ek%++3`ZJkO2wuWRFa(>@b8#;-^z
z%np(#Ann}DXs7^ckPn5KAR&p_8{uxg0+F$`Nt8A=U7lke4Er{vt#!N~t=yG^%nE)a
z->|c{yU1YDc0;y-gR-WN5I3bz@x%?ta0;R5+)4x+Z&#Z}1z0SDDERlDVkD$Nx<)qq
z5S&RC*Iw_yuB^mt=q$0tvEixwI_V~{Uz?`f9Gi{c(?)3@Dnc^9pcmX;Jpq+I;SBC~
zBS_#%Y%mf;S9qs@)GKFd$Og82M-_<8qdlXa*buOyS`J_tX|`)`k>9>zs`1&8v>|F}
zxnUh1Y?!0cR2jqh2NEq1hK>sCrdq`5HI#PH{BLwimu8&lLT`>O8xHEB4$<FWb|hX!
z0Ecd#o%Twsj>vlbJBaQS^gi9ykuqyosJ2t7382cu$USs#>a_~Ixbi0wvxlg?_lx_q
zp>D-=w+1D<2}i{GXnhKOX~QNJTUKcFdLh3IVEKpi<IqFonZECvvuFOSjno9EF%di1
z`1-?KOz}4?2gvwR?@Tb*OYcXo;z!D}GVj;@&s$S522|F#X~q$=_+C|XB+-1VZ~ii^
z!WSJQm*c-t>=p<9S-C2#{JJ-lj20^i-FGN}l}{Rl+RzFjgeT!f?m}werT_+u&s8<M
zIWOX4Qr+h?^%QZh*^=aHV@a{MrBi!h!NNu`iayJjZIQO)f7<X<hMiCjW%HxvsJ%k5
zoLtuh!H2{xF6jzijg6yPVlSUSQk%cniu*Tz-g3OX&o>Mj-6*<_+nzp1v{{5aYII<0
z$fQ>H^jdZ>nzcFt%iCR)diQBj-ls{vuN2!MF%Rth2D!}LK0X#2TR|y~i9%w&4=_XU
zvyub%DU#gbG170rp0R>*Dj1F2fWOfwPmmm;$rFm@+-5SHbg&>SgU8wEm-;U9SIP_Y
zFGh`&AoEyR?qm0i-AT^D8orH+Ph?j|O^O(Ybqh3X9O#3P^y5JlvBa(r6M$wZy@KDj
zekl&g|771IkCOCBk9IMGN88)ZqZS&*Ucu*ktPHi2@9KkmG#Szo^rIh|yuR>ER$^_N
za7-yMMs(R=8W??((MyF6X31>V4mFT64ec+P^)%yJC+OL#sR}%pr~HNUU`Q*GzkG9L
z`o!DP*t@9IXN3riaQl-Uc<RBvD-M#I_|uCEK>?o(6+WK~D6wzfXnC<BqcQ-m$|&5l
zhbVRF3t7+_h=6Qm_maErNg=bCE6mRU%&0w0XosdLK(L=d0WHa&*XJX~t`3R?_a22w
z>yJy{l%CGXh!-n{b1XelyW?O{?7A{rw1#C3_m#r9&+mxBs!F-_1OwYkU9X&!gTsz}
zJr)01q5GFTY~J(%&{WS0m-58WUl4x8`g>9F^lk6xAL5B<wXG`?f#1(#<!a6_RfidG
zeRk%(i;L&lk#^X%3&^B;nuNH{At~iwQszu(sG^JL0e8x^`hG9A9(;=SUKGRR?OR?E
z!|B@j#K+6&>GQ<o6_Zjc4ddBKH#e)4&>f7z;(@FHPCm>z8VoOjv|$vLk2h21de?)|
z=*me)-kLElZpha<e6(q>t8K->#_7v&`bL?wg?@<m$R=a8IJL#_$Ua@`TQ-hrY;`oo
z+Zt`G4rk2cG9@}XcQwuIKp+<G*{(#Iw~v@&YU?nh|1zk(CHBeR<KeeplAD$lpzvMA
zw{IrcO14Q%DFF34PWnN&VPw|#FMUE`Jjg%u2*~xorzPFQ%A|qq)kPCADa?b9h@0UA
z@Jml_vE0=;8A@@7%zm|K7^r`pJe|LAsg=d&zJhCOrH(ITC7I4y8iW}-6J8Ml4WT6f
z?h<Df&LB!_woLd5G{fUcP8BzEXz}FuCGeBW`ARIR)N=Iuapnj3-@1yKoRsq?2mpW^
z{QpZ=F>*CCGj;mky2`S;t^Fn&!q1JqqileH+!s>qn*WM40KJ+LaHQ?nObY=8gl2(_
zZ39WXifZkd->%{k_V<F>*^A+aiQ?$#4c-nf&nvx_17NFTgK@tnvBBNTb=)?74H$pF
zldxgxoJD<|!OQ`F8MQ%jr0kSCyqF<G%T`~1Np?fr(j{U1Py<k!Shi=p7@jEs7DN6A
zNT?1EHO%Y=uYV~=NOfZn1zNllmE#cE-X1t1=*M_*gg*fg`wp4mo(NqC4MG-9mp`R|
z4tbzEDGtk@Ii7V%3h#te&UDsx)>7z3okPb7glXtDgMKPh!RSv+4xyV(h=e=0Z{JkY
zZVcx=o~vP-ZS|}VQLgTowNQ&4`({1x1nd$#venDy`OM&Y>=!ok82IQ8#>Wcy>Nv+e
zz{JPUuLpNG^NnC-K^}1qF=IqJHQXt(gE6_GAlKlh4(zc0kkx(}5RvPZ(|?ipHv{*(
z3#^j3)a9A9qsC%w_Vs_`RMS+?-2R;fFATqt(uB{TI>IWnLp^bddkf2T&&A6Zl~|DF
zg|W!Mh%5tzaXtbaS&l?OePspw8<MSzn*qp19kG2_{R8{;BFbVsqmN~`Mfn7TF#z9@
z1X`yqcnXIT2rurG$h*+m^0LQ{{-YE?PM$!HY@<S&8bjvEXj9AC`_L4L&K4eE?mPBJ
z=f#jf+<1b>c_;e=p!9;TvGj`mJa17*fD!`W<3hlg&fshi!k9Hw)Vx!M(!+rzEgsyB
zqeED{hDz2|_@O;9&O6<P`Hh8Dx@!{$@tCq`CS6TvVD_u1O7B8E?~Vdjq#pLMBM_Du
zi=W3{s35SWUU=)t;%;r=(z|KoI0g%mX9=wBd5Q05<C!rdwjBIngU9Nt>g`F1Foj+y
zcy5D;3TFcV&c3q5^mms_lg8AUz<lZ+XP7+EzU0o<EE#BeRLt)>R%RzpE54cZ(~KG4
zRvS!gEM=PQDv&UwkY%C1s>+L)?K!+t)Fzm@OVI0-m<ddy6sHto8<;8idKdLlB%3-k
zSc)p+?6?L$(`uaw8ew~@e>Y)SVTc8Tn4)ZV)<T0V)tjvRFExe)Fe?Qsb|jlvkK3JI
zMRPLM)|4=iN57LI#Vp<Sx;R!(E8(vT_!V`O(E0^ZdAa=5|G@vuT>i!$J<(1bA7-yf
zsL!k7GT3IVNmQ6l+l_Bq81ZhDz<Ih>?J}c5RIq!O+CA(1U9?RFfgFDBSl1_kqF)NK
zVO^>(QfD`n@udCeHL6w*A$INk+E$48;+QjUl<X<NqgO__3KR6X$V|Kf{vx*`%JY*|
zyzmv&YMmjc2^kxl9MH7CcjC#%gm&io`Gp*%23C$n=EQLvgCuL@#GEaWX6o03nx6`L
ze~8#xFZ={|?$E(;^NHV?44+3K<o4V(1%J(HdUlLwo<JKb^{*h@I~7}3uS`pu_FUbN
zmMd((eYAPj+3>??VaZLNAJ-P+BR_I3!<4K#LJ9PaWp~=X{(K2zs-m#%*{=#UQahSU
za3Th!c*$B+^rBaw-7hI%=f9Ekx^CxK@GDyBT~8{0?{=yV&b*B=^C-^4ILMq<A;#Y<
z)&(tl0WNwtI^lXYiyzkTyi%hy{%(0<NA0GGCpInoV}|{{I;QaFKa8D&jwk@Lq{p^x
z+qP}nwr$(CZQHgzbH=vL@Se?XZt`c7yZaK|)t#!Z*t@Q)tA5R<d8=nDl4t7{%+6)7
zi%{G6B-5`r)!Mb)elC*y5#!6tAMP?M;FmtP^h3T0e!>28w)#*X`n`h!0BB?Uzh>+I
zP66uM*c;o>S^RhXfZqRIKhUc2-?Q~9V9*Vx+j0?5HxbA#3kYzh#9_w{6bzzCWLw8n
ziMX<3uYO;##72tf#AV`Zv@LGl+5UJ}G1(A4%whDYx8N!^D0;nKKeyk*?}3_z4dm8o
z==RS1Uh=+QqR2q20v6o~W|=0q6HFolS#ktea$KUM(~N~sCJ6;94GD0na54ts<Kqu=
z_x+{;%zY|)L+sl?N01QGY%!b4P?Q<S#9PQQ6h&}|{Zq^s4PisEm2#3cmUPkx%)8QP
z2glgSUp?hN_`OXe*}FQr`+NH8^Ca{jO{FSSg6W|}I1fNZrH<I8PJg#enznDoaC{S(
zu$>$8FcwC-nD;7d!=}l5_e|bX@NI{deWkc^S5W7f`igC05#>SBlT`<iZaP9V5Z+n(
z|1#<71Rt6PfJk;o5Jta=#IX9^Elk4FH=)?wp*4_jIa1yWNoFA(P{V(PxXNE$EBi6D
z^Ou{5Vg|-9^B3)xKW$rZb?4C+Rd>&~L)Sj0%JKVD7;!QVhU(md$B08s`(h^ieOcZ8
z@@2{P>&;95%w!%y>A>0{UCgSGpov!1Hwg|){?>mUerng^fhcwd{MR(pH3)=^0cLFp
zK!cbwKFMC>Z~^fs2yIj10Qv2MK!A8GfovL5yIRInCT3(h@zOJmUTGw%wWrdTvIJ)j
zcaJE+dOzICPI1i?G(x%bt&31&B(6<`roNS`EQo5ktio9<$!($0h{`z|Spz=0gj0em
z=!hvc00sz#i;e~bZ7M0!*108KrX>PNpFt(t#AAE0sd<(Lx$wQ|?E+fKy>!amxbC--
zuV7))Qq<9Ut;H^zR@GQUtO`iP58vgEcp$}u1kJCVFb%o-IeN`!g&!Sp%(K~YBlVzw
zv01PlP1HvX@@faV5v`v!Jo4eyhB2l1Hz%{+_G|ZxU?0`6@~^JeT(ir4*}C@ui|u%Y
zW1ZEgSB1MrP${lB3fV=Lp`tunW56FdqT<&pA}{ymcaCq6VHMNIqGub)Rkk^Jw!=5+
zD?X;E#Y$XHg;HD$BNI$76X3_Pa(pb+4Ra(S(~uJ%Q4mSn>rz!6ZE6TO?&Clfbo`hW
zZsu_Y6p*kJ_1HlG`9ZN+fs-Jon0vg=srPM?v<j+o#l-TiIkp0dHA`o0o9gy8C55}%
zx~EbuL8pHhD-+=)dvNeePL|ASo7%$I3Z@qj9qjK$PAgVh`nS>Ud3-*QaUk>1O^uDU
z^w_bTaq=^JYueq=NvPA5ORO5r@@%fgc`%nElA7j_SOV)Sk;t`7*GrwsvL&b<C0!}j
zy1JK$t0k=R3(DtB$l||Np=>L&Y!1Yb*}8<{1K@lmY&q^2en|dnf&nj~OjQ;+ia4k7
zr}*p>^63tro@~(D@$pAQ)n_{cxRR*8&Mi7oO=54m%M3bd;ti!#YL3R11wz|k13ofA
z1yYh*T-m!|s%V`ToMk__*46%%7i6ui#a@ErfR^fT5**4){t_hu`NYbWwvIHhPu8}z
zj}%{pAI6_b;@^$9iuR7J^Nx=;doWXDv6E{{f#}rm8;BKZw3Q8B;T5NJt}W{Afb+8>
zDX1x7FY4!FvQ>q>s6$Q}P!AAr_PG@>lxgwAoOcA8>SqKQkhHMkLk8jrUd)B1TyU1*
zZc~p!o-5d4N?2<4gC0EE=}k~IFUtXb%r~F3778xmLfk>bVSV!;5j89@<BylpL7~Mg
zIH5?FXxC&b+RwSY9$5q0FSu7X@3<31xC6chHkca0czQUuK(p3qh60w)0wF8(8+7!n
z!_nu{FJC{Ww`>#D(R$(%tsFSZ2=5WB?l|Ry8ZFB~aKT>PcGmu;wfQ)&CCl<Z(19+m
zM#&@FyH&LpE+9`;gPC)@vQ#IDb<ZAQRoX!_Sm-Ia_eTw}IRa3M*pJDkNEhpki)?aP
z#k}+?_gE%hwam#Qkf&(&a2uSwW>%>|Hk^CTPCUdZwV$+k<2~>k6<TIIf7Ps<U&bTH
z10L%R7!MBO@Idj3zkXXge0^<p&Vksm#+Q#o+dFrEK>u^Gz({~bG5l+`2_ypmAo?FO
z=Km*N{y*-NRZZLY?GD6$dR_3CZ^X_0W||C^uKgS}?uaG&R@+v8+Zqd^MMV2@swA$Y
z<~{1?Z7yM@yJzlHr@$OzQY*)k<BqvxY#0wSsZ!#VX)7eF$K&br?F@at&qFqikk}pa
zD0-B&GyPD1X5A#|QbB^1D4B!I*+ju)4keizEd~Ihv5q+3aTF-&F+j42nxRpb$k*q6
z29Xat2I8+|iHY=E2(+xyD1vx+BGDCvS%~keW|8DbBz>DCj^ZtIk|-C;0o+*NdkS*n
z5=sPR0=aic5Wa-vKwW)V^Y$o>f0+msAZ<iS+9K6zB7mP{g;<}$m547tp1CF)QbDlN
zgT%z_22*S<SFwV<F#-OY*U=wJeu|+BJ}|f(s8?`ZW&QFb$|9k}F+fd51~hd<4;UVI
z{{D|E6Ha0+3~b3$Xv~C++f1B9ZN(wS!TIWH0Hg*evnrxK!I+P-bDTbM%-wjarCha5
zWxs)Tul$C9+FU#kqd%qXQtQ@ayrq-<-W@j{5Q)M@Vt*h(zNGE@p6$r|-)_m5`RCL2
z4lnVUo3^aW<|2${j3~;MM+hr_0FEFEmF~yFf|<V(q?kfprhT9jg321n(!wjw(IqG$
zw(KQaz|v8!0(1rl6U(1S>CJiqs)tr8t5q~13Ih=zaGIlPN;mlCCyDDKHR=ufgLqId
zNmw{GE1)H;bxX(g(|dn4h<m>uzCSm=n$|zTMxr^0qc`<?w(;$2dh!1HtlywwC$iSh
zR10<i3mfNgdm3n}nF71bC!$;)uoW2PL4k85RvG+NXb0F`q$sP-P|a*kYp->D7YpZ9
z_%{fV>4n`>3aH!A?g<J711QrKL7VJAS5EkamV`+|=~31Q#DT@d6r?xP3U?BY*^?<l
zu%7U3a!;g`bt2mo*a_Rp?91gmS)DM(R}dBytpdp~VaGCKSezGwOb`?h0_MAAw8XX3
zArl}xf_h8U@`0)@j+8c4gu2W$fTadx9-Q`)#J@}miSkNJXQ1)!ViRqhg$8VaUgkiy
zIXUR#Lih0-=H4v{h^+y?+7kjp+S0LT89!};UAn>#?6Hai3HdON#@03_8Vd24X_wHv
z8%5p;|6I6@9%KH2X@Zveo7bbQN3X{Ng$fP9GprXt`RY8?pzRNv#|T2;G4R!>g~W%N
zYRs3tH@mOfHYHGC{4%61>Ls15g{vV2h4}Lbgf!}Jz|b3DuBVp+OseQzx`{S30sQ!Z
z`VO6@*Iz~JY6YW>^0But-zi=*rg6#%gJ~iw=ndXp>^Q|RtG0NW^8f&b1*C>V=FDB&
zP@3NxoW_v$yr)NNPxfZ3++mavK&+&;RWuN8M(et28&_|F@e|X%;sB?)gJ>AzW@Adc
zt@YD{8|F4xt=2E)P0(Z!h`Nppsjc_g7rBNL+SwhxY3F#eyXP5w@z_^2Plcq{kmzzn
zsZXBw?2f1pU5@qxNpT+SYN*&9{ASmb<8qZ<ZQUisI`c>rP27?n6j6{nsU1^`@S{lR
zYp{0C0C@7kd6*biAaU*Nms8M42xcCJEY%c}5DIyOP6j$sZcm+lR81gG70!Unye#?$
z-`!K+3-y<Mjj29wsSZ*gb<iSIpJoda981y3))v*VTNOBEqoiiQu?>-+FSExPwouN5
zqt9U4b_HQIa%$83hPB|V)239{>Ca~*3LlD@hRASP&$}*+Oshw|lE690Wm9ljbWu!b
zyV=wbEHcN?yV`zFaT2!;?uNPa(<O}bxJ#D+qI1gIfi)@+R12R4Ew}O21Pl0v9<=_5
z33_D4DR^dzbC{B1C%N{Q|FBbyMuixC{Z+FQk~cx4x@{I`z>*M9UZOV=bLBWblr;KM
zMhE>6h@3_l=}qRGqLjLTy2BGTEYEUy|6QDxvINELd95H&jv?QcLxzqwzFD$+bEi9R
z_xJMSaCsb;vN;WT3YQNe%PcM54$gkjtPXYv$}VGuXrYn8^9koNlnXYzmQr0?VkXfR
z?ZiZsLLO#K56<zCyKE;6>FuhhrL~^kV;wnvrso&CLr!RuCJs$EeDl1Bkl?a;1``9{
z@Ct~lbP3jaW1qpMlS6IrZQ~Q|3!}>}Ci>&_2dqH&D6AOa?s<ijcna_CnZG|5-wLLz
zv`j^$dk-R&?->v_KAiTbbKEjbOvmY$aoDYooVo)B0Q>=B1^nM6=7J+N23!6OGErdG
ziqs^Z>lX_RT)!Jj0%NnEaD2D8x){?i_^y;&jx$olA*1uPDIKBAZFud9SsFdw+!ZTO
zlWq~U7Z4He2rn3>YGEwIy4wk{j4Sj2hO9KPJB;Q9JhOcI!|8xK;yJz3zN1S&H(yt7
zZ6B(6)D`$$OzH{b*}^tP>fv4Ej4_;3iU~&>CRxP{BzS!y%Tu!{VDp-CnWBd5>~q3y
z+iObYmRXDai%=MhpMRBLqmtc6)%6x38n9B$MvG>CRf4udZIOHE%LpbW5xmU|Qt7?0
z(tOFEL?<VcI8<?&3AQ}>-O+HkX}xaJuAB{Nb8ham17(=?Xn{0=!$IYt+r^I+Uf?TG
znJ%rO6$P-QPZBKd^s@@BETUFx>akDJZhIW~ZIjqH{lR!7`T}bQFHs}Oms@R2?_1U`
z6#<@5-QI3FOs*$#wWk>po?+vE%QlRo_@=ZS+%Zg4oM`&Vs8)}D+7q=MeXL6ehXKTM
z_xDnQL5br;(K0{5^r2Yw%6BwyVuR9U{_^VK)D{q-s3ywX)<1eT%~6^I`Hnqg`~lk^
zdRLI$t@Ul3-MHOOyKR}udt|1wPqDAF<Fz0`7v-3-n@zKqO0rTpDD6?71NX(u7v#po
zNaOp$%K25OOX5%9qk-#6WRoosEVPHdK!n&%vbsiv==Mt4b!|Z^9lKS7FIXV3D9jPe
z_!}&T^2pr)RhQ;a>%x-M`578z21m#7J6MYwT!G&MyTtD;58LOo&b8Axo6Qc~@AXM`
zP_VuoNm1bqT<`PovJ`gPu>5q;6g(V{nM#``r!;vFi*`jc#<g7#dN6tlQd()Ry`J8%
ziTCWnHzSP`&*gG=oxQ*~|L9Hy?n0}?dl#W^MPgF(wnX2A;UY}Y)(yQ5+wEaxTdOO3
z51KkX2xm5rtVso1jR|`tMn_a4X~xQEEVYl6i+b1Mbc99CVyguR6{2p0D{|qm_{XI(
z)5ro&BnH^xsmC~uJN|$m6W$IC_a-M}z8JTRBK!glHwNb*Fc<d)Z?owN*UpgRQ+#Mc
zI2_<beF$6^j8GjygO?4K7!If{=6Ewa4A-a#Zld<AV3Jz`m0ck4v!-&9jUz-ovXTct
z9tr-Yz(Tap6WMWrO};HA@YB_8kbiqOxcS<k(o(selv^ir>o`9BlZ_XRxhD-KDr~2&
zVb)!&d>c3FBJZ=#jz{*K7`5XBtH1_@_U-gig!7kG(q5E95wtEKm*OPr!fj1gHj}zs
zY;32BtnNB{T2*s~CTJ$$qyIm(Xdx>%jP5_)(dYR8e+8m5^Z)!op3(Vr-fm0!-Sr2}
znTsYJPrGTUPhX4Uma1XNI@`dLluVxX<Uj${Y@t+&FDN?iJ^p#!)&(E|2y)tatt+?0
z%?3dmFnVj&Z&(<-McX!|Zyx1}w>Jaj{<tXbzvJiS`ACd4%h9Ft;KIpkuIA}JQ5@`=
zHcC4w8t#%D0^1O507U2c9U;dh2x*x+iYO0~-(bqU&p`#t6zMaf^?8?I^;x-PcqP<s
z^6W6PRBI?bkSNa>4U#<yVgBJfj1C&5jBff%6gkXtXoHH*OjI{PL8O?`WTO+Zz!7p9
z&6*U%-$07Ueb;}j3*-HfIg!SxkUdf~arDp>!F-<I+%VwRT%-|^4-cnStx6uu3X$m2
z^mQuW#-%WQF%#tpGz;I>))&1@p()3~jW|j&$JMNSq=+<sB(yQ_kyqZd86tm_(%e3*
z$I#>RH-67TgVlTG0%u@DFiBL>{B`2I-pqA?pVnsRW7LB)_i^W!4t_cE<y3L5m?l5v
zXds(%I6h~m#MKkD2RjdZn0@!@>0tHb<lJhZAER|Mo&LJNE#t$cJ!7?c8yjr*Pd1zP
zS4LiYOxs8CHrU{qIX@Wx&w|=~V8bUB#MTU6gV?d`g0J%_`6HQ!exC(4%a-<j;)tB)
z-LC3=lm82shwI)qD@HDSd{FVh?Dmu5?<nUrOpCI&tGuvV#|y4J`Gbq~l`@+AM#0;o
zlLK0gJO4A7V9uE6w9k;+lSzDG+I7_HTEC^9XOlnGhBH~*g?x0tfha?)vm%JovR3@)
zk7ZtnbzZxvbHR&m!G{PW{1e*JbRlOfa?eE{eBFn7@6(T{J%n%H$0;Ru7cwh3gfav)
zTr<fa#$d#5^8xGEIc!{e#p+<)@gp7gv_^g@&OqS=Mxq%fJh>o8aDIOS9R&{$6ljZ(
zC>_Uu%ql>OOAth1C9TsB<y;z(W;3>)fban%cD*H$NYC;G1coDc#g1d2fg>OnKAH_`
z9XGCm8yd81bRIIuPZ1ujO{%m`$Rcin-yGduUOql|d~irPdw}Ttrs0cKD&5&?GH3qq
zO2oI}kn=_dPfzAk%Z72dx6H`z;pWOy+iu-I;qM?r{};2OB_q_m$1%bS+BxGx+nYiQ
zdtjV|qG{;UqxYcijPs2R+=FUU3-Ttqy<RW1=`AA!2CK>v$jKM}_#pRSkSZP;Pa>iC
z1k#wX0sJqKo`YiSmqKpE6|SVFfDq+7e>#p0;(~=Yi%MGxb4#|8c7Pg|&k`NuISd2I
zeFeVjV^#T~aB<Kf0hzS1-~@8GBn;Wsfh{X!bbpH+y!Xp-;3)Ovp|abCK(S-|%<KYm
zCwkFgi-RVBvWQ{Sa<*DZ>5!lOAS!*Dr`6;JEaiO*gT`Q+q>hjAWGRnDgRBjZ_XbZo
z>dZ;;u4g{3u6-8X)HVr?P`qKH^FLr+A0YEY5$3@)T};Dx0@Qg2<ON;BApL3^G2Q{n
z*7g30&}}Pl7a`JyUx7f{w?vge>~yF&-OcM57{%=GWuSBVUx5ZNcC+lHe$!%JG5!R9
zsoK>F@mMJB@OUyvCWqb21EH>$rd=3RJdTgB!W+EXjn{3r(&84)wz7>mS<2`QF11I{
z{<O5_l#Zpw3k%HV(Cg8Y&2X#FYTI&g<@-}@Mnw}w?ncj`Y&|W=>0qOWWb(3*bb+c5
zWBC?Wv2wV>wek0@v=LiUvtY%A-makYV(v?QJrMI<#dSN2XllO%WcfU1ca6%lzCc^a
z^ydHxQiO@t^x`+Agug60WTBN(5?!TR4Z9WZH0@js06=)bi%wkB^nn3GIM;cB0ysXx
zD=u=11A49B(~{QJwaZ%&%Lzv0jd13~qvQh$^u2);<$_G0BWa5@bnaSsL<}l;DW99D
zgW?@VVR_W^__&|lMb~UDIOfT&%I(e5(R#w|l4(w>vJbU;4w-wUn^e9fpr?F#-*-)x
z_aBBkm^~gC+F<7W!T8`QGZ+(K`9mg<uk16NVC2ww%M}y1YS~1;NdGQx>P<3%<lmX$
z`A77hP5_OR{$&4jQsmiXDwRulRbdhC0iDzpiN8^$pGT|(1uVwn5VES%#3k4#=hCT$
zNi6ON7@-I}vj&fp!azmBoOmx@sKO~Mr>1%)oO|$3JUY!bRgi;X(RZc0R|Q9OXgpEn
zi~<}BXr;QL2t^;#g{tALA7r?+45~Kh&|p=4<8A@++)jQeh(VN*MAMUU3^-Z7IwaDD
z3r)SKo6Dz@uI07c!_c$NqjjFIk;_S|&xA~*U?_%q1BVyzky;a0vg0I95w=PJxd;@Y
zlnpR>(pEvW0e?jNXVvbtF?A04P5wgE-;cK_0LG07-$&TROiVlOqPdIC@&f|%vCWuG
z$>nA5m9ar=DPjUUE=LRy!Jhf`_)86D#>`PsW%DquLn{;C;#U$n#xhVWrA?21CC$w&
z2z8x(>(d8S--bU;-)eTdB-D;?&%;M%nJGv!)zp@Mm9TUmIRriJjn)^hkE@k)X+GEe
z`Bjr<3+&&zw$F1j&~ni#KMqe}UDoH=P(>2)l;YDzv8FZ1mHUVEA|t>wzDe6D`d+r-
zLOrfoYN0v{AP?}}P?tmJbuvL$<np~W59Aa?wtWU4@fs`UCdnR3dJai73k)MO^c%*M
zZ$6oYK|OJ!jPi)0)+X2FaI9QhVTc5fcH6_%@DFC8?o7bep#9pg3cm_%!-ua=g+G6(
zwn_xJ5AE{xpOur_V15M!|9S@=Q5vW$E}z%wd-ot#cS%ImIgNTJSMbb;KSX38pL+D^
zq!18A1T<do9pwm^FgYv+%RN*Hq4Zd#rc++G6iP^+K-r`M#|LF0i2@}n8+L4?@d*Ji
zf!G+dCFdY!m@l%(G-kq9=pWWg#xA1WgqhLE`YYkMa10SZPa8RyNAHLXS_?h?=Rn2z
zyxw6^9E=NyT}cb22D~RC8~dE&!UGF`C9kqjJ5?ls;^t4EWQ7g>I+yJd+LzC6)vwy1
zJ|>D?nozqi?PoZ?f}e_$1LbpH*uYZ4%u?J)6mA>T<l)7M|0+V{`3gf6&Y&uqab@b~
zJ(+SF#TUw$B!^r_Qw)Ksasm~Tt<$HU8MlDm_6~!fh<^H<FqoJW6fwqMT+ZBF-fJdW
zw}pvQLI`L#nhBMmEgNieP=~1L0JRRN1?g#wY_AH@0Jj}d0XF2cTZtfZc4=<SWCY1U
zgFSV2?QbX-aAhZO`}sNwSXgYf=`={v!okl#-`rqsOnM}}tWU=Hq0$66P`AYvCI>8G
zF5M(CMTO{98tP9XU}m08t3U$-8zCTN0522>WYIE7RXE9RWn<Ql(r?3nWijV#k%rP-
z!8Ph)S9t_2H}2G4rT5ScyO-p_{8s}hIU{=@m=G>gwv=E>^?)W0bHmIj^1PcyqMqU6
zPEPjpGFfe_x++P0LOZ#e*njuMck^AJiqfBFCCr|d8@lKi`ieHbse%FPxPpj_!pCa?
zFT?U0(Cu}*Ny!3p#n=e$5D;=qbQ0BOhsFRlFtVXIpp>PtJ}4DB0HNGy-ZgBPAi;l%
z<^>FW_X*&q2dBk)S^RD~@7q2AW|B$=I;fPS@2KW9LU|9QbYdsaw*CxGsPQHuH!`F^
ze*(kdN^s%HVGer3&Di(7$b_45EltzMA1K>yGJAE>rZaOB534T>ZCH(&hb?W%-3U7W
zg1Eq5z=4050)T?A5D!X)lr3%GN=(U+i;+^(2=qfJsZ}PLqY(^XQHQPp_b0G=@lRw)
z(?m!F;Crm9_239Rp*_JG5x~RLquRC^ncWM=96}W(fP)T+PcIX5A4SS{v_7sstX|)_
z{*;8KA_=kFMlGUGe4Ej}=u>?i%R#v&wgnQEEr76|PF#?o{Yss@1a(N`xYuGMOlA%v
z?sG+VNkfw-+n?)3o|X=tt3jSQ?_EQAQM2J#DWjySj>AZBsZ(~`MF{gwC?F%}!4GyU
zV1RiK%jss*2RCI0kEdO*YW1K{!yg$X6{w^dV+N}O`Vyl=L6eq=W}@gO5JdC2Pzb`7
ziN}oOe!w<*?EsKuqKp!X7ehAXR}k@WABFKGx8&B@GR5}$ZMLtJ*V<#0iEG?-H5^2u
zDFO--Xnt5lyV%8kE`S(HE+cvdllUExrU*^9_V}}v39{8~>ujvr&F`^>vbF-Udg)eH
zSiMXjZ%iQ?!BGyBgpp7tr;ND5DPTcOB%Zh3!F=wT`X<RJoGKK-Wjaj`5^)d)FihtJ
z_d!HdMmfp1aY?jYLg0^dT<+$wI7CGG+Gnh|%K3JRyO?n;!5f|G3jmn+fSc;4a3boQ
zm}sfPNKqv8zyaf{O9$M9XgGKiI^%8Hl+F$oC?Se`M}1dGTN8{yTozqVvkn!`_q4w)
zvY4K!^#gQjT^1)L0p}AB_g#mgHYLdkACa(et_(l63;2NNz8EiISc#Faz50Ya{_D%0
z5uZ6Jvqn_X@G+LlnBkBH2Zg0ZnbiuoX8lD2A%UGGJ~9&{IL8X(!xRG~Nu?p_j%=!7
z5+Q@XfF5>-EHV>bl>4f$00<Fg8ih%>C{1#(IJh8Uvg2vD!O~G>fRs#5F6ID048n5G
zFp6=IG=>tHNsJJQbV09}T7`3)a3tgU0gx%!jOVdn_$oMz`axgFQNe4fe{!D@9ZtxC
z9opXl=WVZXs(RoXJY`UQ3zZyXywg$wFr$eyi`nE2LR`s`K}FO`6$hD)g}i?-2!{{V
zGjJf#Q=vn`!moi{#nwX<8Sy!4ND(=C3M6qjF;x*(vVa0MwuT-JFva5d1YD{UbCP9B
z(8`<Mr4ev!%r!Q|i}=cqXgqY${&XPbq<9sJnP-Zn&8qXs(8gCd@Yb>V-a5MXX;$mI
z)6a#~cmJM))^~kBwFl?ze>Qy62CJsFDG_R?`p^iEEeugBPB25Qz@&IX=qoC6$Hbbc
zlA=e3K^04+2|i>Ps#!fYEuF5^S`qlIr__MDiErhML!=jwteXWD)x=fVM~AN;!1Vb4
z>TzopK*y#sOOWt!evQheuO8R7=+Civ<O+l+JpyKab1E<}mlqkxNQ5;AZUL!sR`V~O
zW2y$}G-5R;M3c|}e4Q>`q(DefwnEAqfiMRqfJO9Zj~s}miH!9O2sjTqU&oRT<GQ8Q
z0$`DmXe}|J9ESqD2eM8ODG2R;qczB#v0wOtWWdSsWszXI@GjrNuLYo_j(1C+!&_iL
z(=89NkmVWF0<4)`c`b>d&9aiW1csi(NizF?<a`4Vw_42whD2-~wMhbDEuajZt(|dq
zNN&jQfFL#)!Q2)<R9#CF#)t&(oyP_-_=K5G_r7sl{ZO3uC)-cid3|~Z8)SvB7n$-5
zIE7H?%`kXv@}F3il<-mU0l%+WvP2|QYP2Pzhb700@9X1lr-%hVaU~v9ai8}YJ~;|x
zLJ0>ddtwOfrDX180H@3!`8%S?k&VnVL<$EML2vWP9zp~Wlfyh*ZyLM3dvfKr@e=Cy
zKKwYpz7>~`yB$c;A%1M?_cf$CyO1->Xbt@Hk`9(M+R3-XB0dyv06w1DnI)39*6uuw
zHU7+peGhsGFn|sJ_`l)_EglIWo9B=c5=*~$jk#TYUj`PM4bwe07@{YmXJ`E$VD9p0
zv~Ko?i?3F>)4Gk$^Qvi|LN(g_KAHx1j>V6g9F22uRl?z=&in~+L1I2({REjW=lmr$
zI?K#AJ&M7B8|7!pHrF<&0^;U-1^*@wDaD(4&V}0R&kC=F;6KU<cc&Zo)g+U_nv%Mg
zq(L)8ob^do@jJ{xZ?*x-9T;4h1-`t=6=_aZqPx^n7xurT6K}2aR{M)^BCXC4$t6^z
ztAemMxLmEHW(KhN%3g6U9QkuFG?6o3JlchNC>S=#R35XG3!PPIzCNMi0CrjL*VQKE
z-C|>#0&(wqZt?!SBK>gg;LNX|UTpoz((LoF@>FyT$#J*_8mSe`p?lD2!(r(`9}8K=
z_T$C9e3Qo;l2jGGDs3rjq40An=-FF>Y})X$e|ar5MvSFmIzo4Z`41k~50#XYtFAXb
zHcJm&79I)kcs;-U1-rf1?ZNr(!1}?)mCd$W*|UV-j#ovp8i0iVdxTZY41en}Pk?2a
z^Df~*3l6YLYcm+{8mKUC&<-*0g0SQDSmHRd{rzoyGTRg@)WRfxjBBB(YI)mrchfN2
zkyMggEL&?b*Di=+O>*K|#zoc*d-7e@b?)a4MX1|pu8IxolzCa$JCMAIink7!V{`P7
zK0|TP^5`nvYvYY8{^dg*wlIYsLacwq@hqzsvLF0@X^0?!IcWCbe^#%mN8#P%8ATap
zEf>vnc4#(Q!f!-!b*0zV+LYD*O`a?2XN+?GaVXVl&Bwv}f|Dmfzxp&Zd-7I(9RG(?
z8p*g)k;Y}VRz~RoLFS0Kt2a8bLOexF-%<B&wrVSrxUAA;1A*v`WG1;)ijyfbtip<M
z#EB4|N;REHuy>*vBFHzjP~MS3>R9;&56@q1`1;Qv8m_>#!X%EKeYjs1(l5+({9(|`
z{sl<cj+}3u%8B#8EUajkX|eLWZRZ$Q=zhl>yAmm2+TO&liqWYQEd=4_DHrLLtWXkE
zp8LVewx;H;4Gl2=K1!yaH>$MlgN51DX@Gy7b^$V>S@zA^-JIm6#la~X>+klO#Se<+
z>e$9jv6Z)PWDnEyk#dEy{q6i=tUN3(^gq{lXw_*VUnPE;3xwTz>p5X6&9^9!$gc+y
z(3&MxB(KK~zI7C6Syu-A$|o-YKfG}<!XzK7-khcW+eU42gEVg^-)>hD(AP?kO0i~j
zDby;w5BE0Ml?g(Tq3iy#(ka%N0<JAL^FRA}E?a5#t}&dpwM30Xo{C}tpYJMoc|fr;
z&-kEGU{la)siIKw(-7NT%X0f8&;hNQLuKc%{wpf~H)Z?JYZqa*pS)9z+sIQk4G<VS
z4t<x`x*F|Ru0N^GxdGOUJF_uG_{y<8tn3c~c~#_lvbcoO+>m~&iGufINn&VN!(c`-
zO~sD+u&teCKjsjftoyt|`|$62x&7LT4f^Xedi7gyT$l-bJn%;Mc^}8!pNp}IeN}Ld
z7lVSj5*J94EZXJnCLy7R%dlI|$!!w@B(x?MK|SZnO<Ymf{{HZoDvdD>6v^;rmpi-u
zU$_qZy};+_e0HklslX+HRdp2wURBqny%}BCDc5>`o#cIQ>o+_HrzI3#4Nn_xn+D;q
z`j5EQT3lIC#XRX>yziFlHM>$}KkrjQfptvhxOB0bn@ZjHw5N$QP^!lHzS|&J310i-
ze-zFIn^bl-<@BplLllE5GkM>AnM^YR>U`mm`^}#y<gOx2e=5T{f86=XVk&&F;XMb4
zDM)U>p=-+JpxTzOX1%?v^fm0nEfnY~bYDB8YHZ%`(pFULKHlMuCf)Ahjja^sLVKMA
zY5Vr+dW<0oMRf6_P;8zvfq0<>-EEL+l}aW`x|zSb-er#s%_zew?<#v#1Bva#23*u!
z2{}_t(>XhYT|&{#rBn8b07)EgA=fGTFQ|m6H7xp@F7jxy&7FUN%B3U{0IFFI+=A!0
zNm$sRskjJm#v!<*VW(&fRY)|-8qmTrYfYTqXE8%<ovWDBZ_ElaTBp-a>#Qg$62C#w
zUYI#%UE1P7osH+ZdT%r5U^U**NE%eCbew-<$i`3}BAF$%gQo0Sh3c|luAU!vpiHS$
z_aAOY;ZnPgHBKY`Myh7A4?Z$dX^bVo*C3+sWUi@rXfstiR$s_A>)OT96x&2jo^xi%
z(5%AP4>*Iwt@8l6;OO;vSaQP?P^-}a^;gY5$@>2C&XH{jCPsW);J8N3iw>JY07KtD
zhBk`?TKCK&ckky;dA7`m!T^{$>JeEk@BMK_*{aie2DVeraQ38DrfQ}UC+CNyg%~Kf
zNnAvy?-I`=U`xfMu?Hl&R?vKHGLY0zKwOFKG12mSGQvQeW~iK%-UD^hAsLTvmMy~k
z(;=5*T7*3W*aQ(jTk!?)^Hj17YxIMhB{j(Q!dv@d?Rlq-t-cuE8_n#byn?BGN7Lc6
zj&0y<uZCAEOl6>c1X0g*&>J1`$+WKKbbP%u5x<j-SxLX;a~V6y_Ob642I_g*4m;+A
zO}+5Dzz!?{mUT~XSDEJ3P()xBlg^gr5f55~4SIh(6JRjuWVbs<qN?W?DEC5nZD=Kp
zmQyd}^p<i~K^H<sMp;VbZHk834B}CaSDM$?3uL_H(Fd?WHeRM-diiM*@|zd^nG4Zp
z-=P)D$oPyhwtvqHN!G}J)Q!X<d-9^JDfD!lv%P)$1~`c<Y|%}w-A4OqO?|~Kxjk%l
z)<;=xd^Gv%;$GToizEBt?KjF1-71l3LUOVZYKpC3v4y6V)<cFnjsRjL5m(Yk0mm#H
zwFZ6GZ@<3iJ}-!GA3z!;KvwSkQBha-R4ER2M}>&c)-(Yk{`;VvlX^o@9%j{teuDA&
z<VbzF85HD@Y_my)Wq}S0%;iE9Cqx!Vg7l$~NBe|QL~Y6g_l|-iI-JHL4Qx((1N`Ve
zp!G+zf1th3c_@*%vDA(WO$kMdM`w!2b=_ami+pg5YL8@pESD#c$L}sm(SE}jJxl#B
zijrO`yUpYVx6$OEh@R{IGE)YQT&~MKn$cyJ=||2X;(%7m8lHs*!{EKom)^JRXFNMQ
zOC<gfzcG4U;vkIyKB<dMuJ&u<(1g#>lr-yRCgM+9C*VnWi?5!-Sj;33;uGG%UNQBg
zPVR16SCv9sQ3Z#b=Hc~C5d{i?URgS=L<{q*xgI*|q5bP=e+U5}2&FvW$H_w|RC}RZ
zlq!NL_4P@gJj#gdoTffFzwg*%!)A7bcFIS6TsOHGuQ17qPu}20FeQaRb;CY*kV)t%
zASukavG2E|pGiuG)#PO6Xbz43sbo<i64qm;L+Tj4pgs?Tg>B{!wTV=NpeD){?Y>@l
zRXMUdN8`p5wyb{$SaujU(A#^S#-s}z3PNMeg_Up^-QI=nczz>{mB4Q?wu>49Y+zIB
z9i*1jXPmo2Q4^4ZNs)h+8F|g_93IkpqIS{ZCPR;Ei%hz-t5myl4WVr&C<zynS0$r8
z>O!Z0;t94zxMS2i1-nDCJHBCc_j`G4LfgR4WnZu>M71dYq%q+H8PlN%e7hn)sz9iP
zQ}V*T$#6l>;+KkeGxruODS@l}UcaX_n_AR|>((mS3FC3V9*!<N8h9G~ui7=FAHnKP
zxCu<CrHx%L=_!hRvDd}~$+Y7iYaY?*7b+$<*+WLrceov=YVyv{UJ9<l+OxdS!{Up=
z^3P&+qT~3P>UORYgn1`uDF$8%&E}nFuFWa7`X3&&Ah36x@+^_Ih*95)ziXYH@|QmP
zE$!#B5aoHWaD0YMOzix5vpRl+=tMH0vl}Xq@sLSbt*kRUR<<e@E&N=*e0pgAj9=<g
z?fPyc?k4<J9)LQZBC|mrFzZOY(vrlQ1eO6H#kA`k%3%i=7*1HztdD6w=9L>gX);u|
zU)+?B<+`4gkBCw9gK!jBiIa$~1*PX}1JwcYjt%z(Nww&~^Lci@=~B5UBIGoSKaH*N
zNHw*wRe7Oif33lPpg*XjxpAQ{>UCX5sQ?;a9nD6$6RnLz48|<)mcQ^80sevs1}j-b
zCXJQC1n3JkHU`GTSORTA83qHyxW*n{H!TzZ%JO$F(qz`u*X7{W5*9P8l{B}umI=6b
zt|kT3L_z>;`N3_wN~AGe$o9*nxbaOBl)#wEw{s(i9*urqVwqWh=Wt%pjejE&eh#B)
z;bN0JqMBg9yWC~&<MX_S!*tv;TI0WiD^munEF1$0Tner25o$01L}Ylh7;30h1O%Fw
zRvG$*Iesf{Vw84h9DX4wX{Q-e)eTkCFiAbV_D<#q_5oE)OY$&Bf_Cgt$tMSW;eC<H
za^yG)IDHu2LxwUS|7=dvL!6;buuGWcn|{ZGTo5)2m2%mIcRr1=zf?pULP&Ypu-)7;
z;~?NbyaEigy`oqNje`tlOAQdvL8wI*%I4*`L0pQ%JzX7Y-5Ymi!zd6GKL^0a7%w{z
zXbC$M=e(j{Goi@5mWPTU6`{{P4k=DN1R`&HV|4iiv@E;*YtjxW>WTaK9?VXB|BOFc
zPG=H9BVTFTM<E#k7YR*cQ$zFkG;@H`uqWe+3S>VT-)rmoe655P*^fHmo@^=&>+F^R
z#1}_m4tJ9noBKn#*bAnR8hyJJ8cAqNcGjbtlX0A-acq{Q!KikE`UZCZW=Bz6AWH~V
zgREXPx^G4J#<neRJD8O&blVu6(sdp2nJxp1YV%&$?xLYNsM9G$=BIav-sn}K)^Bs3
z_mR7UN6R2HpnU*ZrEl`67_9hF45gDP2F>laY72y<VPFXw45M*Es>vVqI$UydS1CVu
zUm13sgpb;PqHp}8mkNHmHvBS34zozB=*{iIJNF0!)h}2Zj1iKNt#YKu_+=NiK0vgB
zNp=N62g3BFinm{csTnAzIS)qKZTrSa(F~gC-Bt$CE@;5AtI}xMbJsogB3r;7f->u8
z-9`e{sAKV{QV@s;fQbo?@O7+i3COVMbVA?!muEYo)ptfnh(x1CjpUy;SsAh*MS(i7
zk<5^Q($E5a;F9fqw<rb=QGUt36|LRmD)*(UTd&q^(*&R@7NZ2YzY1|D4xB*4VFJZT
zY6|QkSg%x&aMJV(7VCrq>@*rUkv||ZXvK=HUQmuU+_-gh2n<mxQ2=6^!K_!}f+-pq
z>ey=fxtxHy86sd4fXPP2@o1b&_tau=I$;tF%`1jJP}36@%xhgxF-F)gB8DkW3AQBd
zt<LKhZ6d-1e&0Ir#a`NOF%P=0{Y7%xt2!6;y>BJ)eNKW)pL_;SS#kuIgwrXM<1jXH
zQ6(l;f-wJh*nLh)sOOI!Oqh7Y{74?+TR;aX9va;&PE;lUt7lE78DcafM8(~1oni_C
z4jDaO>4U5FN^_>%I!*&cMxVu6i`ju!fHh4uib6TcYJ=$y`9fMJD5DwV$S<kpnQIM`
zpoUmOrJ^TDZXK0t$44F%>#1Qf0M)a8vGYp+zC|{p(gaUvP*e&}lx|TJl@l3i!ruCB
znuCA;YThgimCug|oabJ7^i-00a)ETVnjWiPSxa;Mj9#v_Viel+r$swCKwo>=R&0mn
zeo3tOqI2X%=AP2p^Gfsy!bQ@3ojiGi()DZDcwW~g(h+sG({Fgf?NxCJMfK@u0Go65
z0@V&e&$sex0V!v@q0x+zBI`5wf#BPL)ZsD02|N@sg{Z)2r?0q)lM^p*^c&$qd?DZ%
zimk*QHDXqFOa+3c9uy7zG>##~{#QWck1}#^QQ|lAQ^%sBL6uI&A52hJyL(ZBtLa)E
z)tPq-_)Y0D<z})9ZyGvNZC&irRCO7w;<2D6CD)w#j9UJSlniHqqn$SV&_bw!Iw|;*
z!0eZ$8Vk)^cRR;6DmENuXAZ*RwOdE%BPFg|tbt_rrcUB=De8lz1(TCX7L~-+K3@az
zo_}DL#_4@ifneUz(UXpj)2R_?7$h=8QdoYT(?^uAMF#2*5N;}KK03uhs3|`{*wOfX
z*zgA>*FK>V*=yJUkCyX{R&6|S*w7^&FLKW?td0(bph;Ihw!$m&^K0mOISQjI6;+Pn
z3_+tQ>P}?tX+sB~g<~fH_<U?BWatP%J~NZeRhYlOlVNS(5H5?9dUQ`u@F)=A<Rbvu
z^hB!QN8kpJkCefVK1;V(zF65RO*2@L+IW+tsdiY{IvGPY>_a|qCkw}-gLbU;^dd`c
z^tTaY!`O5K_G-Q-R<|?0V1TR<VNla$N77y6^Mi(d1KPA|Zhko$ua4fQE5s&iA<A6o
zqcxw*ABC^hnEyClDE8VxJ!U#Mkcj*K7%q=U28vaBTS5532av@JDm(~CSi?*~5rs~}
z?m>`3R|=Z^jLgqYqc~N~E^TuJtg=#pba9~o4RYd{z=E5--Os$@8aQh&^;YuR(}Tff
zM13_vo_71^A#~YQUz^iQFSam9<DPnYLY~Jw2?czh&(&9bS$%isG5Duy+R=0>kTX2n
zB@%QrV|Tf)%7mXvLzJs+`k~b3vRIn3F|`QLg3z>t<t_pNzR_t?Sn%-i0otAK5j=vp
zfivFkuks6&dv?#qZej1+jR@Ea#}m}N1`*7|sJ-%BAz#Lt4E!$ksV$KsAA>veGFeDK
zp3Hj1yWL?9PJY2x<Ass9k3Xm?KEl64wJ^#a!JC-i6i7nl)D~=7>u+iLQ;#j=6nStv
zu{CYZ4U13Y&I*lYy#^9#@DhycMD1%A;%a4A<@x#<le@{8=1d7DVWuWJ<>y>k#Q^ir
z3<jzP1$tzzA|6Ec3J<hYF#?jtW)M^#)u}5b-RU7$BOJtpkL=p&3I)qUmdw%a#lbv#
zFdqqPFCI*|I6ZjUX5(uSD5k;Jr@^xy0|)Ng=kPzvZZ8KPFJ2!O4?D&F33eWYi_Dtn
z5NW^{X2V{fEIm;%-toF!3siq1H&`pEmW@-Q?@a(fZ?NN;Z9JYK`KHPQ9Y<qC@DcwA
z6pVf^HZQ-o|K&M%p~TV-=jIEWn`i#@U#t>ZlfT+k9{{xtF8i>Qwe)O1CjzIyFr#4I
z;ngY;A^5;f_MUVWl_nNq4cB0LC_lYc=VOo!;||fHXDX`*aXf(oSdBs$TgcsIIG%dO
z(47(p*qX_$xXM|OlzC_gm%+eL>k$>8fDd28O!~mJh-O_a-rp>|qxY6hNuv|zEcp3Y
zKEt=<E}z^P6r~}m<9q!vaoCo9`<^EOH<Wlx9A4g!hM%UNNUF>F+~WSQ<kM1OB80?X
z{z-29+CL2;E}PBz6{Xg0_ce!)aO&q&{(E{;47biG6}cv{6fsXSljDb^C=ecS{t&B>
zML4=1rY<8|rqCx!1)HoigZ*(&*eE`~smGZxqb8e_WsgW#+6`8}jOTdQH@|D&H)p;2
z!bW})aZDqHk510FH=#_8?G=LHJ?lQajP(5Ofji@yjhY`e$&{->nP;c5+&GJyB^qMC
zv4t-Q#4e%FH*4_g4I;Q!9P0J_mH=f#wSa#HI1~#*m%3v4*Ldi~ABOf{B-<?YED2#7
zYK642`o}12E82M<;v0>Tm^xK3(5`)nc+1^sh?OYHU2MeZ0r8e;-mTmMYOrkiO%sXX
zkLyBQMBcot0xq`Pwn2)O7Wxr6&SNhnna16Dxd}0KBt(!F5}mhCazSPggK;+-XS-6)
z?r$dc8dw94A=Jz}?zP&c<s{V0l;L}qE)MDPg2^q5fw&htWhzjgJ|nn@C1rQ|Y{wrf
z&0T;p%}`{LY5}X`2U0YoKw!~BM_^Dj8t>h~+jeEEVHtcMl4mxJ5BU`^y-yw+G0kMs
za`McxtfnnYMm#%#K%I0e7&CVtUII=17M}9ZmYgJzs%Ru-5kLsQ=bK>!^B^=vu4T-W
zmi|dBftFYr<X=qR7bgoH4~_FFqpQPC<(;SIlK6Sv0%8p{5`c<?amMW+xViyFuiO*P
zFd3W2riH&`ZngDI=Bek!a$FIOn+aE*E+2xo?WIw~BuK{<K<jB&2b=6vE)~YhdqM#G
z3O^QxW=VmmrfD+D_chUkwgDlYK4$76YCUTZ;~~v60TPWeS)*E7Auaz>?2#N!1sdhm
z*3JECP$_{-BG?ibbLz<?XlIvvnyubkNqBjg62K9dSq5(6AG~GfV`Q6*%7X~Ta__Li
zCK!`7Bgrwso){(h^{kHXH|<T<G!1RFZRf<orCr@IDnmUk;{tF*>n7lfVyyh39`7=h
z9TCz}V^pwsD8aqAOy49CCY<r*k+$*B?;MCR3Jix2wqKLePwu;!l7G~p8W+JEsV~PJ
zZl;S@Mb4OU`d@eL;**y5vpY>qpT_)jUiiE=hqdyH35hBJCdryf=NfipCZ{$X(p=#`
znOn3unw#I2aV!KD#dgS#66?y~XMC0rx<V2`6eI2j<S4Ssg#uo!W~S5CEmB`UC5u>+
zjs6T%vYglLB?4&2?+!{1`?PDP*@HN9*;jV9<MVb!3;|-@1~8_oz`X5z2co3EhSKk(
zQyS7$sGVyH_g{6*gG2FMEdPw`oF&!Vhef3j22RT^9LP6fKAl|$Uj=<^JI}K@HvR%B
zcgH-l;u*<?`^EoM2Bv{KHA;Dn9MOBatauRzOFrR*bm6Y(xCKCPD{e`9ZGdkh5}+vR
zw0rZ~9-jVf!jX5U+<n8<jm9XMa$%gc`xCX-81j%it_C#&OuDY2HU+jwrl3{rh&*C*
zNa{IDffc0k^R{ci@#tlEE}3glcufD*_ZeeME$nvnannw4ox@TvFz`mtQN9uCS7+mT
zFIww&s-`+Nb9U$hXx4J~YfE(Y71xIB{LtQJWS0ukv(6aO8RtJ?)$A{gUXA?y*t$79
zl_PH$HU)i_A|5&qe1S7!gn~$Yub^ZE@#3-%CkIYHFE%btY&n7Vq3Zw-rVx`ZBofv4
z!HY3_z{fJCte+IDh+k*yh6}Nsn6L02x7#w6^;SFNxwGhjj^UFdEfdF(lk#TgGG^&$
zYD_Py#XQ4GD*Gq+5j4xRixGhFAA|<Dik-h7KVP&vnFU%t_k)Jqdqs=^41fhG^u2lN
zjuI2_t1>RX<`Ch=sEeyjzP^rO1bEmNRnT=pdYUjl&g|k%jPQ*i0|t10uy!xHh<O2n
zT_JH(P7UErU)6pY<M0{Xv9SxBRuaOq9SK8pSkJ!6hp+m))Q6bIpB|w$UD?!+fHwh8
zv^)OY{Jv%qo}^82iLee*y(>`3VAWQlBM6PcNR_>Uhx-1(I)KydRxB^rX*{@^&2w$%
z4D+;GU@fdI-&4Hg$JR_G$(AlM3B?wPYHp~-GKlffDzH;fB#(mJRe=`4+U7NcV8S7;
z3DT@`;EDE#qjmExr-8P)qfjQUAa$5k`1eK&mB$)VE4raAI5s-W&+hZsU?lDuvX%?d
zIIUQf@qcmT2!s)P46)7}1kiiWzZbWa1@Gfc#SM~Ym1ROR#gzx8xii3lB+c9{fgp_!
z{j?%=VZu!oNMgJj2XCnBWoz!4X3?TSn9IkKQxbr1HWdly5PK=6Z~EoiZt`*9NfdU}
zqubV`2(s2MmESNQ<j{o2%<ab%*gwACcQ5YGM-6<KJUmx^4JJq$0Q3=VmHZDl8ij0N
zjBlDlz(r*uoVb*1T0=-M77S-O8xWs?v(h(8fYD=;@v?=JltTkYhEi5%%@W{MS8eu1
z+^g51cu9}6C1xum*itiY6kUsg?Fnho0W{q*E6s--VU)wn8}L@C>uk)Ea@x<A{P#v1
zGgD5^fO}M?NfOBAi+<6dvN}KIYEDBay>@<cLDaSa&y6u+LHFzx50u|HKp21#YKiC2
zT|!1Mq{Ef{@OJsWB_!9;akzAGl>V{+;kaNh$hz<Fd%Is|(*J3eje(UfP=m(E&5hL$
zh8Kf3=unMlVwb&gsD5~rp9=$qIN<hsAY@@@4!Unn`N=^T3RvEa{9PVq`aKz@h}{@Q
zuO`q%>ozU1>@qrolqR2?xf$x5!Sq64jxe7j0^Q~{*(CpK+XWDbHVrbeSel^Tg9RuO
zl^k+x{a~bQ3~--|d4YuW!16LB2^e$y!S?St%>|*Ot_e0#<4CA%vDgpoO4|T8<Hd!V
zBqDD?ZzrE_Eie%}xnHKf&NRH0*`VYy5zi{BQYGC^-Adx=)Jf+c>mp71%28{>sNz`9
zpzHajGu!#VvPaL&hPqz;m4cu7D?x8QS&FlGb@T@T!79vtAK>d{d%1W$*j9~TrH|*y
zXkHxYciT63Tvi_^Hjd{f?zVdM=F#W3JsLo|27EjL4UYpcw!?9@F2X;uKFqxQs2QC;
zEErKJzj`kRSE$vlaVC_*X%negVPpRNE&iADvr%~w3+Io)w)hT~6Gg=5kNCohB~i}P
z6EWJj&F9lz+$yW`*Zm>RH>Drw*;Iz8j_}rK(Y;u0VbTt5aweFn1a-mz$jCl2MH%_I
z-SJoi>l5hjd}RjHzF#rCeOpYz%Za8mWYf`7cmXvA<3#~H^PM;!I3pU=An|LQ;;Om&
zpeaY+OIGv!>`HKy#XCJT%#R)<T<TzN>)x+B*X<;9N|ct_0kT@Q+B>qlC0jhEFQ7LR
zQL<`fg;h*|pk6X4mXP8%UzmM5V>U1`j!s<O+jlBlT$idvy1zaN_N3JHek?@aFFI${
z8blkbo`2zDS7&3_js$L)@75m0tPR7;Cfb;Vts|W4$_j+7)_)Q9PSKr&-L`jZ+qRRA
z(XnmYww?TA+qTt7I<`BuZQIGo`EI_k_c;6A7d5J`t7<(ppH*wlU#9S<jkON~orSZp
zvoPsB`|#ng*rAfK6BWmw0}{HyZkf7?Yaq#VA&Qvg`;=NvYi-xIbkH-D_pZ-!q;;3P
znxfsRCU?r|)neQlOr!+YW*{JBT29#0iR){iH|qML<?B#VmJAr~UqRaB)@3>p;W40V
z4!tX;_DLc-`_u-*`Pu|G>*(K<?{b2F#WY%VPXfU69qh7=&K+n(J7@=Q<zX4Xyl{nm
z@+wZ5+3|*_`$u7|zs$m(loY6Ty`U>1jH;EH!D6}hkp|Wqz0|hJ!Q#RT_YlO`l^7^_
zp9qBv8E(3arc6y*W~u+7NI|(J1kAx0a3xMKNokO<u3HL4lmD810X=oJ_*)ljzjGH)
z(5F<L57w!MeUPOf@a(?PMIY>Nsq3f&GtRynPHKh>TVM1+%Ppb<tM_(A)Jwe?;XMGA
zIt^WM?-InRkK~nHhiMTYiHY^QDj-M8%u<RNMW8r#g*v(wldotFT$_Bw0vFM=y+2vB
z+FG0JF1HE?3C!)xQjDJZXk{7M=F!(k5#(;gWT`YI&|uGnS$q0t>In7sUn0VE7fN#`
zGj&Cx?0`c7`zejrAs;5X=>=-LZ4$}4$Pj=9GUQY67e8q8G0-)!^T4g+Fch`Bd%h?L
zt4l_WeQn_1XC&4rOK7aRlcPG<#&nAPM<<8`0tN!byEM?CXn#@*knq-TSE}L-bEvc=
zw~iw<J}<Jh+%n7-FzIbBuE(2<@UgAYb8JO&wsNwx67mavnUFwQ7$U)&Vgukgl~R=e
zdOy@-s9pCCv|<`gVi)pIAKWDUTNVhE(c<()<r7Pc@gN1ML7`3j(Ld1lBNiNa6Ryxi
zr5&<_N6y5m5&qfNx_=Ns=atJJm=GfoCqGvAIBSqB5K+Jgk|OUgK-qWaHygeP|EqmP
z=LDjj_b2~o1s({9=s#Mil|%(aWJUi|I7f=Qt@S=9(pRlMv;MV&ugiUn1MI3TCd_IF
z`6T^C8e1cuorvw2hLbQ6|Cbrr2xG)1dr+!Krl%RJ*AY3cjBHMy7D0We_n$M(s2;{N
zr1hM}_$rWs%E_wnnIJaue&-^V3T3dOzRUQpWIx3>Y?Na8jO__thV<;72<~*c&anlP
zVq<|yxVvFCHX-U1w{mP&qYfxicqdZj3jqi+@yz@zmIBZqd09>Dn6*_XHHMd>QAzH#
z<?#gVpr_H$;+_rGM|@tsnzY-a-SeKTchQ%-!yfx>0(RKH`u2Ht`;2kx*Hwf>r!;~z
zdUbw$HY6VLr*Z&VO+1Y!1fyD3u5`Ss!Art=kn=MNSHrvyrZR(ol!M$O|GBpq1PPzJ
z$P<l)#5y$NSpKLn445vdt&?QtQ(qZ;Iq&2{Akk84Eoqh#8EfMZ4fLTB>m_mVQ}&Bl
zhM>z)m=O{p4@ng~Wykh=0pwAY7d%V~dJED47*{brX5A+q6WQ*8g67kgWC>%Dei7xm
zIZv;@zcA>qyo%-384D7dc|_eF_Zyb~#O75hL^O*^S1L+KYc|~Mpp%O?QT^N6f=+1b
z-x`i^BEu}X`D%ZKdtP^y&->yV4K&SW^^AQCi^sAOm~bv;Ur;9oCqRscB6~87xnz;T
zobjKwqbz{7{E=u>glnh2<lvy&WXMZ=$a4m?7zISJ0-bzS6AV-}(P`Avq0K~OX_Ck+
zP6@U!-<}^`*m7|uW|NkvPJ$~NI6Fld<Q?=WM}d${%`-_rW9nQ){=jL9Oql|bx%;IM
z_?p$;nEpD^u(=osCNNm{U9csOnojh~<^hqG6{F(MfG~N*8psep*fYy(&_9O(pkL{q
zl7C1nGa3w2EMyK~-|6n1rhkFk7k<~<dk!;^i4vE<NOIY#Vw^3&(NnFK2`%8n?EH{3
zS#Y~ejBh*B>8T0?54#JHY^Q{p)2fFzjqcPix2O@48Jnp>A#d|)xV%p5Lb+8AaWv!i
zixsf$jUu2JyP=&{)1?OmQdf<&#2tV2#D0BOjCK=qYS`mut;GzyVaF{cpWMP|F!I1W
z@-!~*#GbE+JNWm+t?PcSh#QKz&F$`I+gKnKY5W`43+7SmIyTvlU?b%rm+H^C_&a_7
z=KFSj%kW6dJ3{VL#yT04q3g&pH}7Wgdc0uPL(AY8r#wu-(RI6D{@|84(6VkD3js)a
z!zMGmI<~HktJ0(8B0yW4Y)TlelINWoVUK_;xbNt~Hh;Dlm%<T^Nv7c6#`YnF1`W7*
zOh5AD7Rg1OV)5)zE}n^jGL)<J&3lh3#9DJZc~8Bn_~jV5?@YYo!SVO%IN0yhQLaZ!
zOZqDUP{UMW33#_9M^&APkKRaK!`Sr)Zy<6B`V~`a%Sqxf8;dS>4>T)}9=}}5d%wQ@
zFI1nNhwdYKGRLwo2w+DT@%`UY*&HaZY!pC&fZU+|H&dO7i;Xk0zLBMit)atzHq~{h
z=-RJIA^ASnVU;MEklKK9#8ie7l~5xloM0ALu3=g?V0K=5EpH-HwNCn9SKHzx5j7(!
zeg+Kw%WiTuo3h)u&xc%Y+@Nlmf{%s>KHjxp;tgBR?(ay995RBqPWg~h2321=P&$RG
z<qT^BwMbW%T?{otM&YW(madp#1*K)F>~*p5$N|{~m(T1^A_94#qenA=6vC;`<R(b^
z1y4InJwr%M56=W#K_@j8E<tURF-ChAT1qS#0o29{76qM}#v>l$uVX68-qDuZtt<1)
zOkX3^5^Y(uGKWKfTo-^9HW5SpIKjDP*P0*#uXQg`>G~7@BPN%e6=dvr;W?cy(Ke}|
zgEpj*<B)Mj#eYhMCR;MT2EcsIkH>}+XB0p+MrW3(7F;h;1fyh7H)uhbn(in6RZqO3
zbm^tv=qe#PoUL<s6g^@cyo1&>tVlfcx|;Y_frb-C!>SFtA(e?rw*~j^z{?ENnMbe_
z#(HcX0W3NxieCQ?CC)^s`-54Ceu3Sdy)|^0jfmEfok1gp)G-1FJPV+GK|?ZD<)o>g
zm)loKV55-Fa?2?!4#W6>$ss|Nm7&jLK?tT;m)D@!`8}Q{7xmH1j0T2!|Cki0sueDo
zU9pG1g1W9qdDZX;RQUhBaSr8Yp5`34shWnK8_ul=%_b)4CLXbV9(B;p&-;4#@@T^)
zsdKd2*KP?T`YOaXHjzt2HLlM1rKNy7wOFycyUb_$jpUp-6yAtbl88#C8q6ql>P@P|
zuP$z6LErn9^FUF8zwQD>)QdKGabSlz4us~_xS-wXv*hXZWc7#ztOkEjuy(xh=1^M8
zP~ippuRWnX088UuU2!w)+(cy^7v>gr5C+*jBeYlfRXOIT*XN{Kx5UaRkiO@Qr}#70
zz}*0QbZ+z|6y0t)u0dMHn0X9sHZ_`(B-ujNSaUx(z<k~8!wv7ZH}BNNT7jiT+NJ-=
zyw(Byq(D|ZACHA@BCNH!kZQVF%xj4oO+;h8$@{$heXrH+V98x-_g??gMaXUbVZQ&j
zuH*UkrP1t?5a6#1vbOsb9o)K4JQBPXgkjls9~WNbwiY(@Abj_<pJn2BZ@PBURi*o?
zVfo^sWG!1WlodRy)brmeR%2oswDhN98Hs>?R0JN7y@RQpv$G97GXpaNlPTlRC8MpW
zi-o<3^M9_=MGam1EG9JHV|ASpM#+WH8H=QL)ucHT%Y?fUimU}nkzVRtsMvZ*HQD#;
zCSu!yz!e!y11cpjojmX9249<^RyK<PzE$3^moa05jSZi_?N>O2hP%Y+b_z^+aRwNP
zgrkNtap~ehYk}R@1Hl#oyTFQQb_wgd0wC4^d^CjvA+*0#V5vd3N$N9bh`8^)VpX6w
z5+oYy(@01V$f6)&p6UHC?@%-HkhWMmKzNN?FDnRmU_Adiv3wAlARRA&MiW<gSB`eG
z%z=mOMNHt>akdaC?)xTwNfpKywWT*AF_MNt+Y<&&itxlWz<(B>cWl-Qb3#geB0%Ro
z6eo0-&EKx99q+c6>hAR3l4ADJn=(+~UrV3O5(rXC7m!bO+T38K%H#Fyv$4wB>qk69
z&FUOC+IrWE>A0s+NQUmOS}+mFU|`%=kn3qyQ8{GtZk)*z)LaLLy*hBW0cu|?6&xaN
zz*;#&!yBoZu(h;XNWBE<mxu*>x%48*v<KQ-6m~RfCoeF{I`{UCz~`~ALtjTTW#|dW
zjD~}UmMc7?bHk;YP%q1x_yD8II`|`zuoXefFgl$yWOh`@99!X0!;+|h%-`%fa90S;
zOeR`b$8-G(%R-_NPTW7r1r|QmQPpt#+bc|l%ZyPpW!ui1aj`<}HuJGpz$gmg*Ka2w
zT*(=E?p%>_4FNSy0Xv=a`Xd}1spgGyD|&PFk|hdfH#RvN;mF71H5I>tA-TgBEbt3`
zF4Z6gQ>FYX|L*6CbRXTWvyaAwwdyIxk%&#H1c8DO8k=evJ&)l+CmQzq_vu3#+=|Re
zCtVAvH>6(G^_5g@JD9g=m1}{f(bGF{Y8D>lGq*aJQAF>u1)`C&SZBH>7s2cjmfsnM
zdCtk@+b8Oq4asQLqbydx5i1q<@qQJ0nPs#kG<nu+Zz$*zN;BS8MggMlbhpv|$cwIO
zt<{o?NgfWKAHtxIIU;D6gR*@r^?k0+wCBZ|e}ZoaJ(tb0weR6rViNHn-=QU!P=Nf=
zS0X>i)DGHAeWI=96rqC&cHeH#s+nH1zl2g47LMCB1vRbD_{|BC1s`q5NQ8|w1cJ>H
z2xn;~91~GMGxIKhU0o<}4T=t)I7&KEIVh-@&eBK~sic<paC^(-`f+$FG4(L=(*K5v
zR6)k2zd#nRB<U2}1(TT0Qp9{Hw@;%LQ*pue>aE6AuTuPBDz8bIAvHH>C8F|3T@qW#
zE}kO!^$ql2_Yj&s*?dsIKtKr~KtTBa@7gzVwX`u|u(UI?|4$nTU&RSIfB;hGwfYS>
zQoko74k85wh22xJ8Hnt@91GmaX8Pl`ZMxx@MDm16Wu^Ym{LjCv^y82w_$Hq0+-b&V
z#5#_>&lk7RJq|xPPD6xMv4({pUu1%T2T__bGEPP*GaYQ(A6Bq}2oz{@$nW9BZHdq-
z|MoB|`cMdvlULH)XR5S<Lr*b^LvA@mERNtRGW5&I=JgW#6t&Oic$W$_JV?T%=!%5R
z_9ha6L@4YGce(m~)5T_2z~JMQW)ou(-SVPEmo70}x3-bm#z0UjL=1j3%xt6xF{V)5
zeTG*I0Skl@6cY~RF6&>cG^-TL(purQuVW#I&ID(L63gm`#~1fpE<C^gc6-Ch?@ulv
zfPl;}|Hs?=v%Kot8rzxu=e4y)!`69C4C!mC?(g4U6}?!AGFgbkZealu83wyB5?QA%
ztc@<cTwaF7N%)jc{?}JIdUEzHNov1_C0gG%wyv5OjaJU%2{Hg->*1GA*_~ducgv_R
z9<oc`QmK$Q)oQR#$RX+ryC&H;zF0$`EKj^fg+ekiIP)i&?VvzH)!@z+NXltsfzqV?
z=veX$$nb;&B|+kwz{Gj|fR`tFXd$`8bP|N^rgWPOap=#z8Bj_(BDoVnUNcApa*pV0
za1WTIAWk=derdbldicFCZ9ouiGMYius|bgh*ApE=64Z<i#(lUhMRrI&A#zsHR_?v<
zhZ$#QTN^gOA(Zn8!tf8SREeQic3<v0K{z5$PM*e&M}+j)dU^*P-o<pXICcLFbg=C`
z%w83&_)YJf5M(ZaEB63Fg4_>Q<|LH}Zk;@V-sVY|<F*&t0vwM#(4c??Ml<kI`L0HI
z2LulEy1(YZUWUsLvggfhXSh7pXlg4~0`XBSV-19NflO=j->vRka2)3{E6O)Y_)PIc
zw^9^pJj5p1PSMn7x!rG)qa}GVkyVBGQFmPNj=?hEA5z0C11O|F7h6?Gl$S@;cJGsn
zoK`xciJRH^GO_be<wH+%4AtU~)!b}yI&FSZh>~yn(yhB<#MIY`e9~0A@NnkfAsH)c
zsE{`GCX!0NP$1GSFd2um>|iLI>8`~L*>GfJb3s<tFah#lZ`-m!HWnK9P-+5JB4$x2
zS7<ahd)K@b3E53YlBc#eR;3b(xQzyPE;I`5_5Cal_(Oe%Fe#LiX6_kLE0(*W9*qwA
zkU>H;nKPV8C3k#2!rA@m{-!CQYStWhzxm{uS((`VhD(8Mg?$FtBwjTL6$o2*A_mMq
zq|wBYU=k~m*`zC3qh=%tamk6o{fkr2=Am}<$0eQ}6BS%uSs#dGUUAAZUSqv3U7k8Z
zDlQNQWr!yA$i^wr6S}7A@wrNK(GWDa?9|EN2|J=J83Z%#wkU#BrbBOmW{K645t27I
zu(Xk0_x{%^WA9cfuliVefF;%1x@7}PIfQXxVCjxf;PF1{krG^iLw3SV7gnHu)XCP)
zy6#P(rG!H+PKyt)%y2*qESpjoyR#zPUDd=^^r*fbtXDu>(_f>8_KOH~PmRr4?0Dhb
z-%6%*QO_*0DUdZ5eGyff<jDLAwe)XI$`#@*nw{JfSar~X)I3Be4V^9VNs&*bB&HPg
zB*n!2eFL*^{6Gxv7XgDhM}<>+$Z`)*9dl~XLVu12B;vcsOS6Zbt8>md__nH;lnB&b
z$K*c{yS6bwTDQvKn!*LNgtt<}V)bepg@Cd@mBm>74-%Oc@cUA&iz{w#3o-PTi%sZt
zRvd0xIQ45HkrfOb3qHx(;OkG>0GG~6kycv>6)6F)hkcueF$O#<{wC0dVC|sGq*Ve(
zVdjeoCl<O0^N<knso!%f#=jW8cwgF#u)Xw8c&(*1b@+b!3Hg<1r#;i1_hoXLXAGb}
z9R)E>B!k1Al%h#h$+rjcBD8fV*RRE{B>PBBBhL>@Yk(ziczzF;X@E+*sFZE^$i*Ae
z^oEZ~$PA{_YVgD0!{?bN#pSC;f*Y+V4rl){q}f;LX}4F;=^?8lyb@kY1+P_`3^+q7
zMbMt~2-Jt;_;Gc)iZJtGz&Fc-=-Y;0!efw6K-1AcA#Fj@ykaj7VbdTh*^EYaT`#~@
z$=BIgjHOB15bSWS(o>xG5JkME`PF!tbSG_s2~mp*w(#<#>1gLzClQ%-1hg9&p09Rj
zzz3e_zr8&lqKR3IKg%P^Ytt)H%=3EZ@>BMou*OGDTTi;QqlxGATt^*QXkqRzO66&l
zLv2qoYgA>$$+(jvNa)cF2_j8=>sgx^=iw@p9M3<T4&zO{0#|$aXic_zmB_Khmaz<5
z?bHNpS&T#DEf&!mkZjOQ*)aRrPaeVQ>h@H@$hbK3<xNuVH_KhoSeJf{nAx2zg>ZdC
zom>6MTf~n{?pMgp-ff-1uc&2+#n{Kg_TH0G2yaZ2oFzQ7AbMcsg(Xv#d7<hmEF6Mz
zbP9E9A@zIlqL2*kDFZeyx3*0Z=$1hX7HAq#YkyVb5Qm?M#|4hv;*aIi{O4-SSE&l(
zC{>V@tLSsRL|bT+tT8t@Em}xY>R#dn^?VpaH7?OjPG>$P(_zei9g)HXhqiv?wR$C|
z$7fhtN4`D$VnFxJ+Bo(W7W#;D(s9e`+ve%Q>aXi}`0v>1rvEfyFSP|T{sKhvMzdDw
ziBQj0xsydaIUOk4=vGgptZE9=lo*d9n*{mJQD`vo1H#|lfj6)_qz1&5_9vE-zeM5?
z1M*G-{?4haw~!6|0Tst!9|A@9<WTzq_P<J$De3&zNpv6}Us)g^-2b;kasH)mY-IeO
zzo47EmhS7EiQAvFOsB087W0YZgpTW%7t(mo!}dA*&GXJS>=PwaqlK~wRs^YRMHlwl
zl^_Cm#blI8KG?nzbSP8{A?*qZ_TEvpP4_k}qx)HsV-Vh-eGDJYgTLiCz4`Y~A0N@*
z<IP)nX;vpHvrRl_O&OB_pP{HQPq>U8e$(Q*K!Ez%z3?({!Uh`r+w2sGbdgRYe4iH)
z1fM-u?00Ro2Ft$&mTHZaJ5XiWgW$L$(B>b+drgV|H<Ra-?*Gf=AxJ|7Vd#?}`oEbx
z8lg;_fZZnWpdd!h!~k90T>Z|DZiVT{>T%#TDu!`h0yWd@zK`q>@~N!k!)ngc$D?~s
z4p5v(l2fx+S$UZ=NvHNCr_A1)t)(S-M;!7+sPL%y#AD0!heA5~aVGj;mfSm{vBF{=
zPa`<6^hf2-7tA&tdv5LvIlVufR20PBD`&{_+ua}5H%Et$SwBfTBRe0T*Vn%x>b{<C
z_cDPI6aHDgAjwxzOIMvD0TN?Y9Te|`91T%0lFY$Dq&&Ppqwz<0v0XKf-zFzEKlg*T
z4E=$Euei<;W8K3XsYhJ-3g63+2}h{)V?@8pBTg3I@4w+{8Nbi_hmaEtg?GmAY4>`Z
zJup*krt$*E(HCt}4^7itTE?AoQ^$f<B`}CQ`ca@*`v9lm0(_`d<UhF%uqaIc7#bd(
z`Z)Dv+KM@<0g%W-D}Mzubxb%nK|BgaU>$J$>N%2b$=6ZycTl7B10Tvqtb9%g_(T$*
zJ?>wKWP%rQ6D+$Oy!b=qqg)sH43~rNOck8twxJg=;?IAfp$x$mn~_qnT$S>GcfPlb
z?&epodZl=Hwlu{HMhYd<y#tc%qm8RZx;z{|UJ5>oM&j`CJaYG_W?;pPbV`uzMuZ$w
zRe;@Wuu}&k6f7d+tySx>r$;n@4+)Z~uDBL45jIfvCNp{V8yp`H+dBNg*Hi_;6?gO!
zRxrP_2T(i%o$4xzq5?3MUh18gql%b-hj2|hk*dXu_rf>LnTe9nK7pQW1<oOUB2Q=T
zFUx&yGDNx8b7Mhz2iM;q8%{6J2X;R8^>1&9d5oEMlXGb!`u8_68GR|tn>&4)uMS_^
z)9PZ<^jk8~0{c$=K_%<Cz$H1ii>a}T@qJp}jT(=4Ogn!(n`|1NR{oDw!ILHk2yxvp
z3fbirAwBfal@+(A7<@pgra4%l7degTpZ&4B{42N@gpYm+5}-r^@5&#m1*a1<4}EZc
zxNkr6PH`;{d1BvxNr`HPzbWBRhNE@6J}&tgYWX4R7*F|o3tP-4)gfxfO#;L>5DN{_
z4tPPTu%nGwuL4^xxEQPOY$WrB_L;Ro45i^%VN69AuEY%PCGligC7`7R)TV^4y!Q@D
zhj`FH>!bMnp|-j)@IoKa_xG94KfGRdxzo)^w}5HOv8WUvAm)=mqA?5>XB9x0L^^}x
z(bkKQE{-}TmMwhcE-1@CC&h#N1SbXtijIVD>L$a80H~Oo-2#{ZOf|_>k1lhlp4Kkw
zu_-gwVJ~!U3D#+Q{an~2{yoL+^pq2gS(9KB;`+|*>%es}4Wn8ZQEZwUXkeyv{;8&l
z<Xb!)DUXqJta7#B+Vm-Q+ND1rvr>EGcs{IGaFM!?i71&0{(*4;13NrO(6=sQr5SU`
z;T#48L)auD=_5$*aKuNG#JoEd;0(PxM_|oVlXIKyJ^H$@e*$73261S1XwlHvce&E?
zDR==A!Ujv*Wiw+V5)yaH-D$z%hS-q>cl5sv95ruDE`smrn1HnEu{#eBlwU!?E|CWX
z()`&4z?zC_f-JElVMbenT|7@g4aRg&BLiWKa2NmtI17T%R0Afx4?9@E2wXF1_m&j*
ziNlExVcCY&{8ga=6-{S8iR3!;loC%F;UkWG(4q{en84-#KEI$N_OE%T6<G7l4G}EN
zESv$uZmZrvxzof3WNNfIzIiO+R`)~D!*0)xdXe>rLH0V)P_&euYMVfQ)asltTIixs
zWe9mb7zn#LaS|IPt2%>hve5Zf3JP%Ns2;r-aG0e^BtS}VrM+5Gz)FCLhM_Oda7}PP
z6|)ocLgt(lw8W5^l|zQ9Zs;t#Ny7MVVF0+GI=~8y#}cvUo_E@*u{B<;rXKTBY-xGc
z{C@rnad}GMH+Tt-l#Moz-i}Ef>C;@<*Vl1fZhMT9H(ZeHso!VyFvhEwi=|^j2_ZQo
z-)|)C8O(r%QYD5aDQ1M_f?=v)Us&!8p!E3~2#p|QUm=`E$1-erkGv9Pp(Lr(kQccE
zWylcSFlB;uJcYKT30@i4e=-+iHF!lni_S(2gD|gg{xd)g`qL}3fxi;}0)&!2f|((a
zbYN4eJiQ2yRD_XxVd!zOc8qc4?kN3tiwG^F2h4lRIz<-af4IH!cfkv6qr>|klO6y!
zr$NFXg->Re0m+r=cznz<EnKhlbd)5H3&MHnjThNK7%Q;MJT+B<ViVvafD1R?sg<xJ
zWd4?ciQ@?7=9B0`wLHCOz;qcs>aZgMMTE!Q3D;i;swv8m*A8Rjyv?`LWkee0{y&~K
zIDcRdViN*L^q}l;kMxk|YfIW%_ra=2OqK#ijj6E6r_1Vb9ZuZvIb09d^@JTul8gHZ
zV54PT`?d&%IRdLavMXMY(LpZ){;{({6EZjU!$4WEkv;6g+}~u!5ye3%tF%GKT>+wk
z(fG13cN}Mv`o21L$=mxYDNLmdrPR=vwGeL-UenFU1auj&0?8%tQE*thza4H7K0J^x
zz^5msAm*W=m41W@koBH_Zt>Z=kk=l<0h|WyUzz>J`HCut+(!M)QR5x~yV4}+j}>B0
zKbd)mPJ1<m>VjrsV{?p+*gvjYq?1`;Q2r{t)#Syw4{;Ck>{)I;R%_MlY%Jk;N4%Xp
zx+w_MZbEXaX&=?n7~3IvZkq=qOv&;36SIA0p$lXAeJCEK8A@p!-I)5-LKBGlaJ7xO
z9QD7vFFbw)s~Fj^Km~kH{Ic+`PvCI%?cMoFUhS-ilHQKuP|G+EyM<8KoX#>9_uL?=
z;jh<UBbfc;LaSk|s!3*zT;uP#RC)8%;n=L0tmFvpN1!M|N1+M6i-ZqQq=+2>y2%du
z9nK<SAVxG-&R__nEPRR6<n_2M=hJYUqeWvN64(+wxv=0CYzJIRAMJ<*P4kDQKJ|t5
z7+0yWbeZ^OJi{s$6{5;wOv*@M_?<-w%xwX>FafQ7A9sv=-EtU%=K?D!B<NewaWsC(
zv?lJurV7ftV`L>3ygp8P3<n3ok6svJ7%74Tu2H1i*qE};I^t%?S@Rc3N^)40P+1Cu
zeUXtk`f%Ugf-aunFW!ELp*W#xBj9lG&VG32!3|s^Ge;sxHUeO=MbDFm#t8;x#rM0K
zNMuz7V6bBJTUHs3gjs8-L!f!?%U)>7@R2h_azz;EQHR|somunGft)@9oCD#6F&E8a
z#%zb<S6_|cXI@Pzi+q>G<ntfeDN#ipm<;(|mmMY$j0VA;oEUc4H(f4`g-Wil-uMEP
zyNCJpt_R}6=}9jq!}AK2bY6-9qts>+keM1V$*V#^EfgjW56-~2XDL{?EJDC(5WKL>
zpHZcxJR14F!ad)-@d5#Y1HoVaf)Qd(bJI+Ey<EGm$COp*(Pna3tA3T>JqbtefkSC2
zxv=CoGj02TPl<jQ?AV-~!Yr(&$aOtH*T;EhJGtqh?ZTJV!k}p!bgGPk;;i2Mo~i_K
z64F4-k_^=`aZEm!R57q<x0)uh4$Ed4FK?NgW9TrRKI=z&cVDTXycm`J>o3aJpGix=
zeQzGH6CMVgBB}ZgGdi4BhK#(_Xl^QMK0(#`<yV7E_DkW<H@ev+Hj$)H8s%OuSd-Wm
z@T#}QZ{MwJKK?(=&BEF<O;n(dU{>tp4LmKfwknwa`V%T&)@tzCu+?gSHS+^b+TYl<
zBM(!%SL*i4^-k2M@(P05xf#nFkhw_D+|K_Rsi$Cht&2HYyB0;;iBq4EBrwa52;zHh
z;@4mE*jY60gRyk1tv&OFlh(8{1T&h7L#ZBFgVtQA4=7kyA$*q=0kTpxFXSbKnfDcC
zw9K*G*FB`A>$ZbDYi*r}`&Xm)B`w$wo!7!kJ&mQ!kLecs|2hK8uDDEFX(tK%9fp!f
z>l!=y$UXk8-I9!#W`mHG7i%eTdblL&d5gm_yNEF*ESsf<D~clnH)3q#5bUbh0dR(O
zz8p<HZ(yqdr^R=%?AxTiR5BjIj-*O5s*v{J?fO0x(`JZZG71f1Q-AkOHTRI1oB8Ts
zhr1ZB77DX!yukRprlXS@xU^Cxq5DmhZVitgU;Ap&gyn_V{vygQg#vt6Fi0bv6Ai)K
z2sys6u;m+i9Mg|Ts>HsP5DgB$@ooFroy2AnQrOV>2L%HI=boFO7nSSKjtQypMsWsL
z!?qrxG5?EAW6S^$Iz9jdA0u^XTMiH092=Zvy~4i6P`Qs=ekB#7aNanfwC3lz7srD}
zZZX!;qNll~HuyYyIO|An74JkS<w@lee7yJ4OtIj)3M2$k;o=Y__fCNtmeQYVL{`Aj
zh(PUNU5YmYEvp^64nxW@P!H32cCVI*)>5^nCucHUND4LT2$y$Xh#Yxwf(K=k@OzNN
zJ2wNa8J7n1pcYn%GS))DrmlGtVp>W{V#7RMrma-`*v8*VdhG)6q4Os|VgTq2Xk4HX
zgO0`Y@aZN(W*Us5gMN%7A$RvQNezXzrl2&wBD_w4RV^i-np{|k?UpC;?WmM!f2^!G
zI+k1SZZ+4r-TdI)u5@G6nAkkkJPRiGSW{ZGDWoCUk!D>cGA6<<Doqxq*;}*C%2y4;
z-|QQ-iQp;D<V?;2Yp5u;R{8ajby|sNA--j<yMit;;z%&xs2JP%vJo_x=6t1|>+Tm0
zPZ?jz!RsD4E-%5<7dPi;k@x_1b+Ge?1=A-6lgkB-#*_z0=67?n@55Qxc0`5v&oSMD
zs2sQaOZEH~AM1io*-<^E`bK$R;9i31H^(qRf1D-pt?=bsKg{o`hJ}E0R;^$w9wdT0
zQ3!~|P$M*UOIb`LGZOUTbIRxuGzI>&nUm}orFlPnKCkz;nWSd0#%aqXAk66<Tg4$3
zYqWz%WxY%VBY6wLJ`g5NZ79`HquH`^bQXOem66+U<0X^%;(t{a-Oh%a2icM6gZm|>
zcxkRjLOJ@RdwNg^HpCPCSWX=`Mv4Yb1kcsi<(%wJJ)GUEs+0vR7g{Q{%Ker>t6FFM
z!}9k4Ab$O7`{uXoX7Fd*DFptiN&dc@?Ad;E>`64M{4BwDw%@pdy((-=Wu3jY<*T~T
z*64Q-F6L5~yzl*<TW!EBi^Q37E|*Tp@onT_GudwcaLshjKun8>v(zN9r$x$b1TWe%
z8?<nKpI`HbUVnb7;@MAq19yJK`n2498fkf*vYP%ve3iyd857T4J~4ZREj!DXIn-9(
z5CXLEMpKCSrql3wq6^NcP~zGFLpjkTh%xRr{mL+9P%RB=tysumNvU5O5{oXZ@JG)o
z^}ufPP#_PY<V7iQZMT73d2vaS1ZteQWe(Jm(xbclC`~oc)(d2@^#vu-%J}oQ75PGW
zRQ6MI5*rJU$Y4-tw|%<r4>pqX*Ut5xJqXJVh}k9hMjIKh&Hi)B8pn`wtc?4aAEFG8
z<~R5C#*I)o#9XiBaG$Ja|H!-gy^b`xMa87ADQl+>73k9*>}ww5n%cF#>KIg<DW+JY
zp6Gp6{}~FpZtsi11u<kWOA4GH;~c;W%C;8ks0)GIA%S7Bz{gtjVV2yWBhjBaenu@O
zz~Ydwh^<OcK!cW&?Xy2494uHC*a{4U=|~ia+CD|Kj>+n(z5=wMUt<h4Vm=`543_YT
zK$n2mmnf?{y}*l98dsSUWbwx?s{%i0;oJVORFl?JmH*sgfZ+r4rj&--Ms=|#R#llp
zq*%Hk7pYKlEGc1`ir~~(w7wCg99G&{e2b#DpAVvpdLMBIn*7~R@<65`f=zxpoN>IA
zJ|^a_JX@4S1Rol^6?;K5TeBk>GnONCr1c_1yLQbMjaJ+EpmfKlf~vrXm1G?%4vb^T
z7Iv(#S@z~?WSq}_GPtnrgHslJ8)5Wt@AwFz^%wZAsXenSL8jpRQD!{uVTP}iHDoOk
z=@5l$ijEfOFC1pmwLPcire<T+)xYp$4AZP_^6={R=%8muHbwg!hxf5%RfSgJ7CTE5
zn<fE_)6RS-hMlDd<ThZiFTvU8Su<s%XB1D+I8KlUVQDn2-v2I<tZQfV@`v)-j+<!m
zOm{BRDt%g6uV9g@L}L-`Au4YSZvJY1`*4CewtsTw8cNt?`sW2o9<Ys_TW5+?khdKs
z)&NQptn%+&1I|<gtQ556b0;6g#+Oh<ZvYcCFSwp_w1}uf;Ln!nr7t|dwFuw8n%9eN
z8mc*9Cftbk#P1`&CQnZkgFn$H0iiUtE)8W%HPFT#yANgZlhWv3l4U7&mqSqo+0LTT
zN?Q9ubVR<5exb~U*D5-(L)MOUAq9o)c$l9Y9umL?3a~e8Oas;fkHp-);flJY8q+AB
zQQ*Tk+It6B(t5n~G^?C*CvZs-RAt&MABemWVzMyAnuBX-ZaTzd!0EAC57arlmP4p)
zot=sl;42rJ1?^PS{Y(s}Ir@Gc&bL{e<>H531_Qo)=b5nO6K4eTvdahm-tAnDC4Z0J
zy+9C_dz;-gXxb(&#COA%f|FpS=_3Jbi`WYGLR%@8jQzQ*Jdv||xDmIy{e5Tu0x^)v
zRedhbkbZWOw(V66EbA6c5g~NLr64aW-75WL`U_p+K9Vag@+Ow-L8_f4hA7d%QQU?y
zS&%)kDt;-n=5`H1G+0&Iaa9F#xgKfPe>p4B&5~`QPWFP`nS+xkw;EgLGsd9qw$E&C
zt8e-d{*sKYSVjRR#sinI_RLkSr*IoKbYc#%H{FyA!me^uRJ{^3FjiF85$U8ORel<O
z5i5s}RY&r4nGxD@Elu|`>Kk!hn4;4m%eWDax3VHHUc>n?US8<T{i-!Egd_y}{Sd{a
z-`3j;2t!<OxfAOx2=cR*T=FVMfxbJnIvhv_t%^~uf613CR(|;D$Aoi+;{WtKd}IX~
z3cr612ZvE*opm>>{zdS6@_KRRb<&_6;phiS#mBE!;oDV*Fa0ShWS+$aP^7p`NPgT7
z)pSrDIZceH))m&>r3v_~p!?*AHBR|uG)0O#h*m4P(cZ2t$CBgB<=#D~DO0HkDkU+q
z8`|h{T*(s`;uf$YOSAUy-<oY`$Zk=}p-8wjjTv_0L)#xhUb*#}Vsq-B4~8s=m?8BX
zDECGfVh67eac?K3@}I)LJ(fFdbaW`wRNe2!;3HbBG>8vdR7w&Skq6m4P|&lf7@Kal
z*nGK5XWZ!(jXWhz^SF6G8y~;_Ylrw>BlpU}53El12L$>*cZhAB&Hr<UIOqR|e_93#
zu;BHuuGCLiLQX5H7v<uQ+O-;C{lGuzOB1QWRdk9j{kIbe>DC<Q%)WL;4>n1+Hl3%L
zyWC*cn2ug+4YD-)cMd1=81x<>`3G1^nWimUG-P&5cUoDKnP`3pF0&zui2-$ZU@s~&
zd$D4=U`iUw7;`c+P~&uk;1aMD6)nArQPa`8zgl5$64K%!ct-yMloUcpjVTN!QD7dN
zC7hw@g5%3P`-A9;>rGjfb|8iW0D=%c<e;nwGrZf>Klm#;wiOqaCo|YOJ=9J*Bzhwu
z3>#Ic;n|)50h%6-ah;E~bKBN+h7l})M0@AT15H^jbQ$ghtKhv})gy1Ab*iFA&&{aO
zZ@*)D%$j35*d&(zfY}@}UYYjWCbcM26o=hJk!*ltye$>9Cc%7Acy?&4l)Coc8b<ow
zI2JSEPpmr`34u6}=L)G?2YV8fOnB|ZX*SNiy=Dg4-81qoxH_N$#<7=6i>EO0;iRnA
zTzQP#Z{Y8jt&?`4q6nJ)eYyS9!7Tci`95hzM!gBvYrjIC#{K~QzAAMlZ~mP2n-bs}
zL@K~|TSGvdet~9}M-GILkrW!ra7$lek>U2RVxAtZ(&QHBXoCz4PhtdCd=Lb(<|P?=
zY}A4TisCGcwduRD!yhV@sWIF_(ym-W^OIp*_hjO}-VxYnuM63qw{j5obw2Lu2B<E-
zk&eaTZRxFb>1!6DzLJY#Wn5dVH57Ir*d?bxR;mG%^pEO7fo6HWNk)=yE&gtM9Kn&c
za@Bl*xJ`0kaqJ0DlY{L)HPt|?I(Y3!)xSkVTv{QW;VxMvSoZabzAXh3+X8B?qiv=1
z>Ux#V9B7^l*5&BB_d%6>s^atg*r?2rQNXOFUBU5ir}T*`F-oSdDiA4r6%CRo)fRKb
zdajE}IuUllIo6vJ{66tahO9~7=R}mcHNokH{0Fgqf<~Q^H~@_sP!!*9WznVCFrP;I
zfzRx#dC9p^1vT{4&GQe!E3Ij9OVXs(xqI^>>b^YZ?K2tSBfp#qae0wS9HxQyc4Ua~
z=SdXT6nGS}Kk;H?JX-mvUgAk-%!MS?hxm`@(?pQT)dXI_Pr)5T)ULROsOVNNPIz>o
zr{k{$N>=uTUHG4g6k!%|HZ_lGWpJkc%o)==9~%K@t}N{o9A7?MgwtislJlQOm%|9C
zeqA0sUdIU>MPm<L*YK*mG-nfbgd}nyxo1*nxdKt_2jFSE2hbI9)u5<uP3OTn#I&*2
zp3GQF5joYjB=ra;@#SD{GbD#p^5;QiR9uEKwgTdq7I}DN6IruPKRdK}WBICIzovDv
zqD?wKvQ%ycv9x}ZCFk*^J}i%0rmLyK*AaUX31>SQkT9*o=Y5@iM|HeqBWl7Whm6ZA
zzy8WrcmB?l5hrY*ZvjtA-YJgOXmOlEE|3Vqmnz-VOYeZ1hY(`vyr`kd401|d0qRWd
zSruL={)~@%w~!%)TE40`GqQ+SsOyio>0Rfxg0Wdl#X)`y-Jy1a8emLawD6Kj_Q)Ps
zH9#J?nlB>F{p;$w)57hR0o^j@@KA1Q+pWILGezRCwmS}9)}E&-(ErfBarnopzs041
zWZM1A{-E3sxwaGQiVg2N`t7AX-ip(@{Y~1W`k0Z&!7q~iuTGJx!A#&+V7nfE#ksqO
zr+wq%V|69d97<?inpB@(-oIO~*qqVgN@i(iy-}ip%GxBQK`XBP_1ebXyH(D2Z((}U
z$`2g&%0cD<>E!Nbs(zUxc=?$Xh_%A-tC>Jytx(71H7gApUH!PXOASN>z(2)9cV@A|
zB1NQi^nKT0?a_)ABv)8n@ZB=u=ptG3{E~jE?XJ5mo`ZeRXK*i<Sbf1DBj>$vI_>+e
zNxfr)odH!gF9ew^$4XDb8HM{?FwgC;6M%(>+qXaTW1A>oezBuHNMGm0ONlB>e1xe>
zWVk1(=VNTH>X)ClLy~>>`Rnw<$2a1C{ZPzigS#L8%q44){Ew54Cd~TIPA>n;Jo2KZ
zwf&w1#^+RB`IH2<FcdVlt2J7C(*%k;q7?{o{3>>hT51Dqd7p~rp_9a)r0?$M)QKI)
zIukFmW(nCWuZ{L;<zsHlW|)eESg1VmtV#5?b{qET-E&avX=-dha-0~S6XTHmf^so_
zRa?Ab@SorSI7eZTP}ah`gg1C3K%>{cBHqH^5pDA1irCD8ETVLHyv(rjmGDA-=**h!
z(*Rh}z3@UjHgn{R#sHMJgINXS;Rwo9!(N>$#YQ8m+7Mi3vG8Lj5{mJVAqG0cJVmsR
z-V`m3y7h*4QXc#$5jw%lX%g~PGBufAKS`aC_amv0*~g(Ft7a>xdg92S(D<e(llc(l
zGG_G&pj3So8q77&*8MH0sVC|TUQ}%sMBf8w?7s)3x}!bPY`W~d$+-IsG0!z}=p+uW
z1#)jHH2|F*xxU#Q?o+2aMXhz4r7?$(SB4C^KQFP4jN!X4aS3-B7XR#7gok5cnft=U
z+Qv}R9YA)$V_u;nGlam(OdJpqa38b3da>b0o>QcXb-=}T5s&>ivDR}O-DgHdrZ;nC
zNh*ZQ`-UQU3eZj-PV~Pi@<#n>z<!T$aLsnCKb3nv7R|Rgi}5#SO~s{AKAL#FS7-QC
z5GFqiEdG|{*SSnt=pKScxO$muqlFrmCm=mO`wZK3`e!0IbtrvU((J~%595^fUcr+y
z)-<q5-rU(nD@l((L`-TvZLYpx)y$;Qh@gtwfE{)RPgSRe66JOUEhwpjB;?Tw=qjO9
zcdq84<?RuKuc}Df87LiW+`+qpZlQ&iKUZDMCN3-EobEDBXDCm~Ue(e@bIwSKBecaR
z$82#LNUYRwa%#i&t*9m(XlgRqh|U<AR68WcM5Du$=i`!g7hD$8&fQ5MX<HFN=!eb2
zM?l1mS<k7P+G%PYI8_Z#4qxPE4NJ2xEN~}_^dzw`^`rRB0<B7KvB}K<?ZP@=la2&y
zK0**SpE9sdRA0$$@foJah|3{>OH&e(f4|yyJ@tZlT>H5w2OcdIJE%Hv&^fhJ;0|lS
z=C;<gl|N5l-=fN~yEVv)YN2oP2M7~6Cv8hdtDU{O=c{|I@?h?HbE$u!N`9a{^_Jt)
zS8irxc`#_OqI9g*q*+TwBe{LV)njXILIGUWsfql2`(&t-;~N;OSvp3~owc?_>fKxj
z8l>#VoTa4sX`KLdfHU)0=0myKTeKFh(e6{k0_cIF?gAHmlInHldyVj;si&s>J~R2z
zd(51c%!oiEseR<*2hS-4v+{Sv<h|P`Iav!Q;h&a|Sm$Js9E81K-+57SDM@q+7n<0M
zY!0^KA(g{Nl2ZT=w+FJO8A5;@pCNWCF_)+UsT)tKed7%p#kBncdD<*((HH`~1pOQP
zvADK8KghRY8#Yzix~+<I%1plSR!V_}Jeu5A3xl<!p=Xr_;ag#Vs=<{Qn$E46&9Y@j
z9IgGhnm{SSKMb@q5BueumM3iZ0CHvi<IbS#maLjX%1;4(Dlgl&jCAkz5eatD1C)#j
zI4x`km<Q5C6wEKjhFU_DkOgC9F<;p$<+a_n?tSoRrxi3XqZ}uMgKh51C7me~J>8~M
zoNNy;<k{J<L+NK~VQ|O6fj9Pl(Ed$J4Jw1M9%k2eV!$nBHsq@fd|}EaGccD$xVLjc
zf{Pe!<q7u`+&su|?I)?!vXAxY@40K^G}8H7-CeHSUA3Ep-zEdHd%V#XBKYrVw*)?|
z*H<Gw-A9R&^QkgcWiZ<6K!^FRF+0MjCxSSA{9^#$ai0CY-c$HDeLZ7vK>6i+I}b-Q
zFtQY75v?8h5;612MV`>S9dnL0AR%rC_~rYe+Jd!o>PyGdB{==eCeVtyJSMCNaF2U*
z9LHF7?Ie^|;5EFAJ>}FFj*-n)0%1E`iWLpWv<s8?9bUq-pu+<NRzSNO5Uk*U*lZcM
z`!9rrY6k*xy@QHcr0dARQT%R}DUR)m%tDdUpeMLoI6W^ghMW0NW|CNJj4C%EbJ)V+
zn9l`9M5b&t8EK3$E(9pEKA1Y)$YCsKANjhxl?ZMs9Lg6g4yV=nC?mUY7ckI6EBy|3
z^$gGU_UW$sTBgB&jYMid)PcwfHsTFi`R_=?^zVtPt39dnHi3{TzOHHA(Jqo|aBBVW
z(iNPY?Faz^<N#<4;_wyGKMXt0yD^<&3K`Nfp(+s_sHL~N{zezz05ln<DYW3#V^*B=
z6GAcj1xE7p(A-Q1iFOx3mOM=gs6`S$8fZ7dGWEUmpS`%@3t2}V7PrF}Q=@c%VN;73
z1YR~iRKtv;L{WVN0@`f$WPJb=jKJ@kp~}n-UfRJZa+z`yZ&IH5oTKpZ4c}rDp@KDb
zc>$j?8w}~n+iYu;Wb|Fwl~HiGdrh?`2=b`j?!ai<7Xp0Pn{)-!fMpvFQIF0SV*Zwg
z+(V&JB2zm<iUCbeFOrIml~ozD^ItKviDT%%25AgCs3bd^%e8G<8&Fd8P6gw+s6f?8
z(0`16NAaq^g@>L<GpMCh$3>yfv4)!wy?>)lHHrn!($@1c(>BvYJ&+So2aR&D<B}YG
zY+UiJZ1>L8Bm;SaesW;HVm?ExL%B49!90H|g1ML=`nQCAYlF0x9P@QUdjtcYo4ycK
z+WTWicU(63dIQE!QBmeWh=&V;kWJULiu1kb4D+uMlcs{XTH;)eI7!Y-J&bB=d}Q@K
zedJ$ZFrbLu5mr3{zfIkH(GxZsK&25$V<|Gld#7fhpVA8H-8e--15mey1jZ=eLLhnx
zko-!&-C#ilCdd=LK91VDPjJ_Lk?cCUaz9II;w-mUjo;(jAoV4S0Uo?*4w}ZKROB0-
zW4Hu~D)1S^;*q4;p-M==_xT~Ww^n5e*d)u1#n&_lUpWV|xh($6n@@Z1HP{UWwD_A5
z)WBx*_ypmDiB=%tp2$OnRK+A1e;g~|h!hk%T_^?2T>EGK?EM7(qurKs2!cPoym5fG
zy&Lgc(xDEs=*#%{wxK^TM&;Xoe2Am$sNOgbAv@I_^%QNG&yV~6H<JjPL@RkB3=mKp
z>;EX7e(YR7+Ub9hPM0|APFWI9y85$nR>~5z+br7eJ31}#H6ALd4bq8}lD3yh^b11K
z$QBmy)nf<S&o1-%cKOJS=GKIbD&#B=r_SfjVe@jZt}~{8*Tix=!e`f;ntJei_;|i~
zGU=e&wG#|@2@2n-K2kWDS&}@E#U8*iy5q!bKt)M~B>zw}p$ZH-!1INHCI3@E`6mG|
zf{w{!AP(m9AqUcLmPdNSp|FT(rGhd}R_MPOgpDg~J4O}B#cPaAz$Bv7sr5mGL=ePf
z)N?ohi4oY_0ScMN0%d}@SxhYm!i5-1fQL-;wceP{o&AButp6)=JdjOVfi?68IQ)B}
z-}4Y<l#}Pknv{fMQ8>#3BzR}qaii~L)9sZY?v&LmSu;9(n261I1N)tctgGVX(*0Je
z7UfJ=t&68p!qDpzUPr|LHo1*d%m}tRKDi<w!$!0{pCX96(ymj4MvPH|lb?V!8YE(*
z)W@Rw&JhP-5xIgKkI(SjCdnEv1a7;XYs2;(P9^}io(w>m@WF-Ie#Pq|M<h`Rm|wpn
zMI*){@5J$g=!RYoBI+_)lqv94f%H~tyPRWKZW`6u%~op<x<<{n4>fD35XglZXYmfP
zcR+T;f^?F#1pE3&=7=X(HXGsckeXZVkJf}~CXHs<U!up}G!knqYokuZ?t7DkUoM(0
z8I+aiR~jaqrFp%PEB62%rIkPDw0Z{NReCPK@9V`nIY|Ox4NpLgGQ03Kg0)dM8eq`;
z?3qn*Fyu&eMmZsyUc2uVa@<*_iyQUlf;$tJ-pLld$rj&97rjXr-$@p|NfzIU7rlw;
z--&!<A?Lcj#1S8VzsYPDaZeX<_Y`s06>;YkamN*L`xkNB7jf&;X6D#69GL&9NSnoc
zNyqePSQ-&&KX|>-rFG{SyPhHR@8z40i-u3-xM#~zKC_WQ{hXIA!xxc^Rw@$YN8LtL
zteo2L$baGdcjf$*Sw<Uzy@RY-#;`Zsvu}*hjOq?M-Pf5)^Gj`?Yf;9MBN+<?N6S!(
zqlx?Q!d;Ay*7Y4w@R5I|EtTWit&<^XDo%?Qc|zsf!C`+lVE9#jhLhM&r->dVGsfI!
zt=+L1B4x%8uP!`bD-q0|FUZDfA&k=n!Rm#B(-q444}w(&9=?efej@;4X{Hz6vKn_r
z!`h-6cP^bhpLua6eVldeM7taR4%H<BLRvY`hO0`@FWW`YpS4k(-2e}v5hPmI4l4}m
zsYJf}y0fN`rq*bUN;R?9UClBGGwnsbN>)=IGLosD;xhppn$YfA%v+?Q7J`P>5!vbh
zCD5?rW!L&x=I7bZlEooJh9uor&kF9hw0eHdccxd6I2g#zS4+$ySJtT_RB}6^d|$6O
z*9cUwd&+6+FRI*-#_XIRKbiq@^pBX~^xMf~f@0{LrA-VG*J2oqcJO&8@F=0nk0HQh
zi~>nnKPd-Xto;K0jiCTfvfovF7uw57dEY6GQ!U2&HxM3J%k@K@jfB;>=T}Xp+i~_6
zeX84;a1{F6k})#M@)c8{D`}AjM>%1@DEpe~YpXAn7db=)c#=L$vz~?ZH9S@Nb_11c
zB}eI2_?k}Jt@FWJI9GvG53yDe1?PByBY8GEmq}dAVM>9#EH$*=?J>}7rMgVr+mf6d
z8f`ZO(SC%fLBB;GnID5%=LH0pW!sd*rDEkB1R|u=>mj}zB77-t9c37ZW`WH19b>*C
zH~i(-PZ&pqe3Tfxl?oVCZG(^T1T3DDd6!f(=?<qBwbK%>R3-vx`7->`qM>wu$QWI@
zU4&Tw=G~zxzP~dC5OfU2^F%$8hM)cqVeix|+!Ao-F59+k+qP}ndY5h6wr$(CZQD5e
zRIZY$eEA1m^QL<aJcA+AbpeSVDY+T}EdnH;FkD<4<*^L`W^H?~HThid&<RA-_ObpT
z7%=`wuyCkb#%ECC?jMs!7<SF$0{9d=+NF**5lCnMRP?mt;aI%^!+cJXj`k*rpSK?8
zERySOi|h9S75udhst{Fn`i7{inXlF1{B7|`j@7C0A?||)G9rUHH#bjt)xX~ysyu3(
zo&?2;wkx_rpfY~Djk%0QlQs_Z$vP@$igh7-2V36l!dO*rg(HOT$$g63Q$OIY3f+1g
zN_1Bx;@+y`4}s1`&A-z4Qz+9j#M;)-%YL;k2%1?rb(5(yxBW!jy{E3b@b_!bBHuQK
z-sss{Nhj=ZJxFEp&Mi?p<%J#3g&p(=x{n-fq?|*r#wB4>@THRWiu-0g_fMjOk_6}x
z(u+0N;JV-nWIP_59hFztp6e_03Az~e)yVS`NPVv5tr4*m`jf^pi56|OJDiF#P0waN
z60$~FI!KA(!$ycmX&K}90+2yhnm}W;&c=2(VwIJU>WWcM0jRD0jRz0(k*SoMB!e~n
za#IiR)s<RmdDOmQ*?dd-p$uC}+%ByqiN(qy7(EX%qL;@-@`a)c)P&R|N6=Sn%&z%e
z;*HA*{|2(jAj=@6UQXlh1-UbW7{NxAk((G5YmAEBCN399S<!P0qa)u9%?N1JT67Hd
z@9=-f@UKu|pWIPOvJp<_+f<zrIcOE2qq3$0iRDYE?-QNkj1ci%;v?;%Lwm#Rd6T0%
zI~m@@+<Pf;Ss9J?dBF9N>ADKP^x;nu8y>O+yYTA;*%2*E-z22!7b&_W7ArVof3x~<
zp3cqqI}5e$(<nX8rN9=9UCS&ZEuEf;t}iMw;~|97>e1!7$eJK?A>&3XI1nnr@?oNA
z<(f(OyzM-aN)S<8R7})ww?^7fP@i$c1U4pT-U9EFfhp<UYHZ{e-cxB=(!YARuK`BI
zXcxMKvC)qEBiiBY2y%-VG=MD&(9MM3%zb-Ea~{vk{&;z`^&A1EhZ*SY<!Of8M%2s3
zd2p}uUM49-ND$c^(&c}JsL$rQ!+wO%-X_=uYKp5~m!7pJD6>VccO+1t<x0n{>)SFg
zD7DuE4(okvVXr-$O!i+%zZU8P6??GW_7mPtUoS>hCOqBp9TQ|}rh!QZ?>sp!G5CBw
zSUPZ@tHXG2^!Q>Q3iYWJ;&nNWX_JRq7I>{p5Qz1Q1*!!YeBm!lUlkDFetLiZnb=Km
zUyKm!0XJHMdeCRTXP5QcOXiG=D%&NVP&lAXo16~5GK(?@ug6QA@7nC>G=6D;DVhd|
zF-SEHW^@{bHCLE2oZ9K3SgS9<y>2IOtpCMtToI3EP=Qg}@-1!u^oj|9DF+ySUd1(6
z=36f<wPh`|TbgO*xM>$mCPUibu)vnzdRb*0`nAMBf>SY9C0Ch;v}eJ(ulZOO>Jxzg
z$m<rOr+fVK*UQenOG<z<;!aNU9=oUr5ZfZ>AB|slDQo6Ee;GB|G>oA$&I6r8=!1qz
zxy6McSdg=NG%x%z?%(R+jbA4ZTlYl&`{0f#dTVAjCeG(lY>gx6^-lJ&V|jOC>e(qc
zd8s)x(x~ePEh4G?xpUL*OoxUIS;SQp<Re|Muth5y(g&V?6`A_cfeVhMw#l15=rzLj
zp<K2#^^F0l5;NN6zZUlw)>{1QX+31$7}?bemQVbfw&s;<0+~6`;3<tWjjx7f!|$x(
zYui%mcC;&x(nDwG-PQJb5xp8Ws&emp3O=HJZ#+xVKi~4~Jy!$t1aI-`f^T_sdgXy@
zB<UVctA77SV=tmy9~&A503e<Ee{Ad-I@>Y+&u&tS)_;vX38eoTd+G0$6e5T)vu6LA
zs&z#L<XlDrh24?&R#K%x2hNE|Qdou!?VtAQyjY0Mo`GIharKdAp1t0lpNT)ZcL;2m
zA`g8I`Ry<+`n=v=UqtKvh&62}GDcZkvLQ1_7y2#|6Aof+3rTJg4H4ownTk#1lrz0c
zs^}nuG?D!zhmvc@>2wx?8AN5`Z4=Pwav=wqi=@YWnu)dT<p;wPbfpyGw%#c<zW_;}
zw-QIA-w8Fvwm9y493&@_=Gb)F5r~6ndg4Xkr-6;&$B%d;1Hp@r2gz2)n{kzEOBUz=
zEvflUBmU}*eL=n<A21$mF`}0AXXo;Ab2|~=<4XnErSRsMOPvqo{tdMP#^<qPo!L5l
z@V{SBcAUTLB5{8ndTDMa(cDTB-lo@aNX-W&i&)?0jHS123(zfE%;a{12>G!^4sNe7
z2MNThKU2f@_n~_19~^e}`-2R7@DS;>3k?dCvh9*y%tB)tCZrm`BtlR^B?2nZsI>ee
zSo|%*_Y|xrmyejkaNz$hIQut3%)UVP(tenc_Bkw5h~QS_S`vUO;hHW4=R7xOHaml9
zIfL}Mx#53A?IipLruq308hFE3L@6cpk8w1*SxIW*+f&51{rw^*zz#C4_{L4d2>#l5
zu>xg^1V}YPCY(Z<gOGC71_n}UpdlF$KbU?xvXe>UV?u%*0p<|^RPq9?9S=F2=^MHe
zsk4~x7<=S+ksE^^AAUp$B(Rhw(iqFd=_~hJ7^)wZUiKd(UO}>f;IQQLivGiPRC{C0
zSbKq0?Kl+>7)S1ghZec-y98$ngft#3J`5btIT|;;zy+i1y51;6<57qg&lcoAl2-?2
zDL5%pl3-oRjiHLuFkIpw6haUp*&Y$76UUf*AMb*7ZWGY*)ic!h1(Mlk&j(8m_K1`C
z4e!q^R<^NYoAdrB%nuV<KDj$I5QtM@FGu;(H4}@yB<v}?e-Wld@dxfUwAB@|Xv%aB
zHk?Hh^PQ|`1VebTw+i{DPrM7ZT*JA$8p6kJW~bwwtzttH$9(3l?THbr-uALI^Papp
z$PEv^d_7<Hj)J>;NnaPZ0k8z3g39sy<fT0Vp>M+A$$_$|KD=$$@Task`46c*4CKhp
z&F$E7^E(-w;Ex@kM7Rj4(4QupX6)8ReosTD_1cP$){|<!%R4$3(gA<@H93NWor29U
zomtEwN-WdP^srwt=tOP3JvTi=Ibd7DZw1yI)Dv*E8GkGg-+>g~B>D%<LO|eQsLQ1_
zaJXG}|1F6+A8<jt<Tf`M>-E8|g<sWKy|w90S{(Wod}$$B09Xt#Qug0^P81n&J+(F8
zW87%8K4KaPZZh&3y$Y5=-^4E1+vI~z>fh;FKzI4CL>dS}+0Zpppm}yOZooaI>2LSz
zE3?e*^c(V#LUV$}Z@Y$L1_Lz}bacEfhrsEKVU_9kLt9|;ZQ-jIDg~lp)qcCCFq!jJ
z!D=IQ&7&ty8xj(|dEvUpUF1LH<P(g!;BaivNnx^J>7*O~9?dq3n^j2|#7iqyVCJ}T
zXC+r~H3oB=FtzYw<d{29kp2SIR-bd9An?eW>*@HZ4jwFL#{&RuU)U%T3gKix{lZ;T
z5KYgy64l#rALn7Tz+Ld?fx{Wix;^l)@l@mbI&dG)JZVgdw=b^Y=aS2EKXts==Up`K
zLQ&nkBZ}m3ZHON#^PHq``FfhwqZ+0-`HE@7hkbeMrfuosjsByDB8IADsrsAlME$4K
z67B1X*IfFq_&ga*gZA%GwBd;M$zgOCW1iP>@+GZyl~H#IFRjb0XaE}mj>4ed!7zr2
zZa+O%_U&^P@4)3m#Sy5t)7Te)RA9BsA;U0-H9GEhWK#8<6r)Kf??Vp&nBf2q*^#_D
z$wC^>?TU4}3W5;`i*GPELMMax*!sB69Y2+v?NLyz>d@12C|*l-qZqeD^YqG(8-O;B
z5N1!hpQ5<uF&+Hk@h_iFI4fGrtxx3Qih4T;8vGCQIBM`#nuM?V@w?xMUi%Pi&^UN)
z`=XuzA=C@eND)2q`42Ht7^HaZH?z5Yt&T3jhdl$MBiKogX(T_S8H$lrL_rgX@$eCb
zI0_o}UNq=^f}ns1kIVveq|(X~^>k=QXMQEtm?amQR*inYR<OuSL~%@2*QE8RaO1D@
zy~j>U$zJaTPyQj(a1Sh|@{}=icQr<4(_4puV#}$C3x&5xOy(kVfowEQ)-gqRd#Y6K
z2dn}^P}Tn31|vM$khJwXUMEtB#P4?kT~FWigVTm3OGFbKw0(s+TKI-6`6dxzj!b`Z
z(N;>c>O%11wXq4mMq4jZbP}?=nOaP+eAY;@qYv;rI4pofl}wyKT$-gl*-P2b%g&I1
z!x^6{HcIa4Qwpi#W%CO+T<g<=MGLT_lZam)CLHy`N4svy`^Sneq)2fGgdkj(6NLT5
z4`qU5J%<C@!zO?F0XC|u#Kt(BF%P?PnLo2aThj;^=R$K^$K#4!`VX1xO|<Q^HpRS!
zr3IcPB`k9_YPFK)vnflLZgjz+YNxb<2WO$Y@qCVc**!f!t8f8Vm0DssEKn#u);OQy
z23Q0A${!)Q2B+N|{FxyPIui&ltvDPLL^Sk8y0)~Vs^oWrrWWU+O@OLWVzq5CV&$?H
zu7mB6ZKaI(pQoU7S-byHO!YO^)bl{Ljv(<2>ZKVf1%1?Hq&-XQHug$Ixj)m)<7R?O
za(Kv7*$OI)tJEQkhw}<Kuo>TuD$ZT(cHfHH1xH~8|D$n9b@w{e{0z85f-dK9q0U2W
zsC~p&6GP_17DJb)AsF!Dop}G?<zO8U^dcGt>d*=um_fe$7!+4O(UMVeL-R34dnIPj
zk_ly*c7<(@!sa1PA<_HalcWkB>^{xjG7*|jPQ$*qw1%mFIE)wpk&e`TJ_{IOzF3q1
zGI)+=_ye~pqYAF1XcEZ4M&^68A6`KfO6ZFHuUlJ9zs^YcpiOi1+ekp}7@NK@o*jEQ
zHz;Ez^5OwgKNYA0DsgSIM8&m#-DJjlE!2eKrfO|5SL2}W?cRb8B^gB)>cv82x55io
zx~10!Ig1*grCcy;Rx<M!)@0Tfl5amllPykoM4gm23|+veAZwtNSA`oL3w-~BxAHSW
z@KooLW|jcabtP_L2x=r|YnKm$t*9u0a^N0R5BN9Kj5X$@>M0s3%G{*!Fj29J*o`{g
zV2HY{d`;oB)=FbMUrV&GAR#$9mDPO9z12~Xhot*f(nz_+^chktoZd<i<cdN*plG*7
z?ao6;iCEJR>GTfw*J!S9<3}nAV>yK60G3@Wlm-F@#$Y|WQlc04H@9yY5<iGWi}%sU
z@WmQ4+J{r@+YqBu&$j)U9b48c`sq7qudt^JH=X07q1ZroKrVYkvj{Wb7QLR;-FT)C
z%K^Uk%&R3|3x7NE(r^8{`=kL+N+o32KZS66z@(Sm=XZOdUzGstRzPAgocF6bh!2Oh
z_KiQEd=XJ0rIUE-D;&9}UMCJ6)HhKyebjUmwc&NY?z#sX3L$sdT{wR0n_;Xe1U!2{
zS2ZhtSg#|?EEO~sP}xpgE@+AC7!SY2>_9Dczo2wivzlWL3{TgJ*qv-$e-cTh2TuV~
z>S7#q4{$cBX2Ri0#q<LDko)w_==Yd;e|?Ka&M0JpTc+egq<9!ne7?R(@*g=)JtrhX
zww19y1siY!YUFEyf*7<sc{B7{hOZy`jXb#li#xz)nFo8~-+W1tT()1QAivR}qlYZ+
zo`g2cwl)Z(5mQB=h7yc%PG;vW5G{{MD1+w30OI`X;8`e_(I@pm9aT?#iawf7rOMAn
zu^4GmEma|vw;x`9(v|+6@<JLF+y9i&4IWJ+C39)b3epO#p;|2Q$X3c_a{aM~EOIZ>
zQcs<ACHm1`sj$8?omdXw<k}&p5)(G-T1)!xV^zu;BzvK_kkauz>fU>9pk;ZKTDS#|
zG(|#BpM%6reNqc_>@}RGHTK*Ve5IN*iTJw`uJOK^Q^o5IIzQZ9O4zE)mjy0w;zMAg
zt*Nuqps4n6Ez;1z3bIuJ<UJb$3}24`)JVk5w*WSFC=)8S^6N(-CKl}Dx3WK=|2>3&
zi}3Z~01W^j#ruE7HaZv@TbsJ*+t?f1&{_OX)Rh};TYGGFr2ik==;$x@IMGP@6)B7h
z&Y-im!okjX2-3cbZrCENS*_lsooFpu@wjInO8-T4!?h?Ck);RQ9FTVG!0|LaM99gv
zZ9l-LGd!Vl-xU!!p!jzO{@!<YuoFCx6)f7;w&p;5sGm`{&!d{8F^-oVM%Y~fh_uTz
zF$@gtNfB<M>zpT=2pTU2h@1~)B(wx#``K>Jee3E8&^Jse)59s!5U9eGSVX2Xm>veR
z4xUE}<qqP@BP(<($`^#Gj!e59*&yUiALw4pbA4_2W+GR3kA7JZqN}f~)7#tQvS*SF
zm5k<40fJu=ImV&qUuLl_QX%r|;LedX<H=YnI9ZP#)g{b)K2KN1uDFEIh2N?*_kn@V
z8=6Nq=hyAc-Obte{&v!J@RAjEbs%4J<}b@*v{JJ^P0TL?3`Q@Rc3#Wwq55rs%7G*5
z3VY!`Eh1Y)e;N^KjkUp$3T#Eqa{C~`i0E-(m@Fp_lf$>MbYrZw?{H3TNOjSN_9cL8
zcxMFfI|fGs_1?as^c1WpuOl5f{?P;a?%WQ~-hc)}6}k}&=|Tbw|M#Fws8Kw~32_SA
z?u`-UE~Qoy;EN+EB1ZC|8$AC=p6l;}<#c)6yQ(F`6S|<o7@<@O0hDMgD)E~DtNQ!X
z`~n#bEvHS3;$XTK)%1>hx_88aG*C;XhmtLXAWqN1LMWGVY>^L>$D1igCGUuD#Bvrd
zPT285cnU~@C#5vxNMn`@v1ul>E`O`KW{J{RzQpu8Fb7^|p?TlN{OOzNH?!t!kj0m<
z39{5CQ$m!8HK$mEIloU_8go@|pKQ5OZr{>GF>~A;Lk$J(I0;=dn%IhJ<r#mB!Qe=#
zKy(4UtD!l|5E|64jK>Jwoo16A>K_V%<xQ?&sFP9}KoJX9Efhgc;`4Uof8p2$`Sg+g
zrH3)w1;X}Npo=2ZvO`FVm%e|*IeSH^LXUB8Shog@Rb<(pgynyM!YJ5DDAzHrGE5et
zZ&Ej#n6gh>UY{xoONFJeHts{H8*JEhJnX#5^C#k!D2jm8fx7Snn7yaNs*TiP^TUdo
z>VR6Hr#G&MI|sY+t4pwpjy8{sW(7bWe~ZSuUBUnrgn?~wmG1e*k!phYqKpy`DnUr%
z$qZ6T835Zu?r<dJj8Is<W`lI}n*W}RiIYqO;*g3+Y*5euWSn}ykXr&oRUP#D4`GP%
zfm*#}d@WStuWWIh!d;oO$~&m}-&KK|^L%odEn)+=&OGpA8hWYBD~{hIW3wYgcVH{x
zvgMxM&zsZx(}&+a0$7e*X^iUw;-gi@@+?40?Qt{E*2aPlbTkYqK6JT&MNu2j`?!dW
z!vh7Rw!VlZMlFYNis#(^%h%Nv7Hb@pP_29`r32anDBW3Xe3W-Lz_y@2bp|77{hrdc
zg+=(Sz#xt;G4EB3eF8<myPGqPVD!#NbYPKfu(Xs4Qv!$|ZEMldrxi>s`b}+T2{a_~
z`C-Kd6-CA)NLu>C`7)H?DWL-;5F0>yYB$!cZj_eopO4Ozm_dt#=oZHt!lzm*krO@-
zH}j9$g8KW-;SD|e-7ZX-&82*j+o^RkgjMO-kmg1Qd-P5aJE5P&+X;ovxJxh+ng<k?
zA(RSHMIm-W+3R@Ru+TOK)J8<pK6nrS`D~&2C}UeH@*|d^nEAp%_PjaLe}GrXct*^D
z>Kx_8!m|scDa+O@Ncw?q=oLoV&=&?*NXo{jCA<Ag5Lu>SL*XLJkR^5!lCL8YjF`&D
zLeINCmL03|vER<=5xYVlI0>l{wdLs@QT?qM3+{hQ5=hUgJ3e6^)&pDGUmm>d{8fNi
zm_}iX>7PHP*-qxblj-Mc!(4a)HR_b4MpkH1Ud`ONrq1xzQt?!1qwSt$!@nff4f1%J
zHW;cL3l8;B{*#R$nSxb~axkz~F%_cwy=!*pr2jU*G_PG0`la8;EDOF4VP2gRN2*)&
zjlJ8yX-_P8Cx;j`qreiUL-+nhS|5U(2gMZF=_qUs<FKDLDuG`pcI=5=;8sUZACL{7
z+{@NsjJZ<lpl6R{`y~t27dHNUA#<yUQ|~+BDzCO%126B}0j^HzY+$aAur$=a3_;h%
zWF39F*=pr;A=b#{!>^KV9C<k`L$73y4C~c+mOH#y@t_Xox1VB$4otcnI4rT?$X#D4
z$AtEDLT-G2JVAeK5&L#aHN?Km6LNvOMnynU=*=*I#QGjq_v|CXI;+nWJyEU$ASc+M
z(7wPHqsiJz$LYo5MCXt9vhHrJ6ZcDxJ+>z%JYhYbad{KhQZX7Mp0aKe{%tXy%xXHZ
zQbme8*aG{^>oyKO`n)&Wz<ULKQ|F|)ibKBM{(B**tqY0q#z|b{28LZb5VZ$g7nM6?
zfqBNA(_r|LD0W1081VMowQ}}4$7kFj&;M6Ho^!8mF3K;l<T%v761pMktL*VtJ=4}v
zy|Z(}f%ZN<Ye;8>$Plxj6bd!51x0IG9^Y<eQ4s(Ixs5=JasfuO)o&6;p?PFBex9W`
zEms%JC(g`i@l2f*3OQ)HK!8mQ*afZf({vnQX80M7ojFXk(?$N&`mj7%b7f}uRsQlK
z>qR)up*uSXB0D8cxOAsYlUOkif5;^evs7*)(no<>y0u@~yg#~=O#<DkO^yZi<d+fe
zASyIs?qTdoc0r`YOyS&Mq@Vkw1>y{to0XDVmWnrBN@gj@Z;>&y4X;Zy4(SmsO<nP}
z{*<+9E0cE7Ev0erA7XH-eazSz3O(>P180-?)ax@wCjrbVH{A+|*Zf>^6F`AG5p_7B
zM&@xpmY?D6d42;$n!?XZNJ9)+tMDMHf!PRb^ruDQK$WfD7~20lY&0`%S=D0EK2Iw|
zZ|VhZ`FK5eRoNuTX;1FN*$K=<m^f4&p$_kKnfaL#i|>_J)PU8?%EwNiFkWX-0W}c>
z843&Y6f`{(!WZuK*2YR7=%S*-I`=W&2k6W0`SkSh<>uxkp6wA`P;}S;pG|hTTiU)~
zxrQa07muiS2ZYW#zg{H7vhcFLVd%fH)O0q99)Et%cmj|>mW_>x=JaY6L7p-LmkQJI
z!nn;-8W$}onJ211oQF^KsOYAZO{z$&t%+3a^H>g-kg+dm%X;N8t<vs^LX;|;h!)}K
z(3g)E#m$-yveak1n}PohIdVzcNz~oR@&O38lq~+-MHj#T8ttHsX;;<IS`^R3OH}2m
zCM}YJS{j|qLRxr^7S&h1{q3P%*VbKL7RQcjL*g*yE_^4p0;nF1i%yqPZ~zti?6KAD
zi46@v2j1p0W1hNqUP)-8gjVGQqtoP6Y`V=2TN5c(B}WKTNlzx--<t3+Ef&fRm&{|K
zU^Gw==SN8Fj9h`MnU2z<shp;=c^^|vsLFgnbKA7y+zc!y!Z;qM*2>=o(-xU$tPQn)
z380%}8%i10Vl>%9C$LK6VC(6>&ZA9gRA@C0F7E*E{0A&u3h!P!%FB#sGtEEmxCsK*
zDbGFksLQ_hR#Me6AypGjt-~2I1PrKw?urUc`#a9cf6qslW;`1YHDzNuunCk=Se#i~
z9}UcRik%{`_!8J~Ij`w+(b}`|u>74|C51C9we~hbTm6_CIBlM(>vO=;@HX{P`%zt=
z?fb=jy%=(Ly$cm3+8S!a?@ZF<BkOh$Nq#eKWYnDvhMg-+s(_AS$d~16Rub89S!-BP
z&Lpov6?mMv*Cf8PEDAt%A1J^aTv4#<Vde%)>hi${3B92~I2Qih$wlp}jZB&Q?IiFq
z>ZpX%A(YRe@bt5=G-xS2tJ?HVKl|gE&He7i(Z-Z66S49K{s5Po?fx$`l^<B+H~E@-
zU};1D`|IWX?cMsJ&NpYzhsjt9u+Q<g<`Z~T{zJcpZ|!eY8*gqw)vrgo{r&#{u>0aR
zekVWz0NfD%UwbDmjQXbTF8{MraHF|nzr}&%H>b~N8&I9Y;nqp<N@(Xqfpn+mPXL+d
z!k-JGRcNbcDM_v5=)LuO$1NO*^pe8CyMKEUUDz;u;K1j{EG!TAx(_g$<dPL}A~h5@
zcE^u%;Kx5O6geb2dGz%~-9D4(_n<ITrc;+F6LXN1>>!Sfvh6t1B#sx8fcVgfL>Pzq
zA3=dQH{f+$q6-Ar^P`o(n;QrCJK?zAOgkJIw&QSEye>E}Bp&Bod0ZKmD3n37OsSsZ
zxE|5dG#%Xrii|LdFvB`@7-nLLwqX#wkY&1-Zq9t|jrmQE)FX78sKABnv;z(DcFx~&
zvu%+}l{{&}tO=96JV?nY+hi(YhlO$(v+h}o=)=U`KCpB;MQ)X%X_WOal&54~TjSVK
z;yR_koBUAW6frCg^hmONtg7kqN81~HoFw^ZMSJMo98tVjIq8pRNL)#@5YG5Nr27&P
z4Fzy9%qq?g+CadYRlqeEVPw%(Fa;4``2ybc_k?1)X|x`C1K9ykkL-uT9sQ6{gx?bY
zE(fbTuG4}(M~Tnnc{E-!sct?s7?65w8Nq&$JVLM}p0&4+I|q=bvpYv{pH##M5SSbc
z2QMp%xOs{}?=|L{2O2h#*L553-OI~aRn^5V`y=4UuqjQmfra(16KH6ai8LseAhigQ
zNv7~LqZ}hF%747Ta=B4qx=5FdYhE&<M_8ixulzauKU?QivC3$3R1&aNB8RDDDpxCT
z^I;ZZF9q*L6le4pqd+uLNzGD`ZWcmm#Un}~X>Wme$9yreVwh1AUc?PdZ{B9M<0;&O
zNYl|yzz8m<))MsR6+GYm;wGOw`*|`ok$3RxB1Pfciz4O}UL?wF_d6lV^PQ&Irl=6?
zEJ<snrb$NWsM>ZNjCY-UVq)}eDtO^qnB(?pcVQdqJ+$DvGSmRo;W;uWpEpKu$e*A<
zFX1<NI#Zzk)cLQVP*g7w^)YRJS_zsY0HW8AZ0P{{ncs#tUnS{7_8_z88(=W8{}cnl
z_m9gZ`hlP8Ps4L)>vV>QRIm0<KYZ^_2tNHizuumn4zG0GdA{MlsjMqYbTAxs`#ui^
zgPJLmQO)KMmLoN6CZHgSHpdws>OO+!oojEmkE`p!v@W`*k?ZeMBedz;Tf5s*S$o_s
zjuoEEE6X>{7XikLv8l@7-vxTmnT3oE<lv{;`v=A*Io|uh72l=~HB!u^qD{P1+AzG+
z-3NYWJ+w-)?qtw;a15~#rbwJujgIg&9(@{jvxT+*E{Q(sQ<nQ90AZoHO#2cI=pTO3
z_)q}~l3b(U95$*6>dPSfrW}jRW0&Zftk`-E$TX5TTR=zY8!OPT5(zqht#p&1j$54T
zL<La%v_uU%NG~G%xJi&$FNX2^%;nsFgM~~rVKw=J(w2y4-kS>kjf^HrvzqUq>)Yd^
zz7$4+K8Tb+vSlo47}1+rVz2n`HD(K&x1qYSM$^F2N#ej#W3ClHq<OHUo;?ej4I$fO
z?HCz<j9lIv1iff5nVafN-oZz$ucQiUp{JUmZZ{0YWwVy(b&H9p^hapS1u6!|j<wpK
zz}W!<KpaFJ`&a5|;N}?XWQ?J}dHWE2Fx=WIbMTjA?(_Amim+EGvxP6HNRzcJxP7Nr
z3_EZznV5MfCN)NoVPzv)>fS3~A$vOZ29NbLX_p|hQAx2fsT?)ss)<wKN>2$&{x(}X
zDBIgcKcmG%qsR*mYrh7Y#9JlS%hdd}>4BVQ4VId6)oBlVJc8*)`5H1yI_-z)bzBb~
z2fsW=%TS_{+Pe7u<y;+zfM+47MP@+o4;_k2!9&$CTF)3M4N?+{!i?|_oiVRUaROqQ
zZv8_<N8KTGEhVwpZ3#;${cJ)qfI{aKQwl30>ji<e!~#v6u~!p?#?w|Qc2x2ht-2+w
zN)*z6*;S46sAkG$jrD5x-`@gqwR}0N*9SyMN#H#<5AJ9`6c0(F+NXq{y`*A0?7bwd
z^S!}nD{xcsnK7f7xJ7lY62@YxfF8dige#aM2wp8aFRmC(oiyH)$=$Cfp?*0F7OUYI
z7wf%WuZOJ4#xE6bQRx5%f8A!r30w-_K8{rn{elTnb)4g_`}@7oP<pCaJ8LPMY)&BH
zo;jTp1G&*3mi=?~ZLm@~3Jz#uh<2Ata?<M%l!T|tE7KjuqKF1`!qY|U4k+HQZv`QO
zFZZ>>oebsDy8KS%`AR32nI@ZDndXeS?YIXx`GzyS?OUQGE;bY>RXZpspd!k)NRqYn
zMcWP_o<;e_cATRVU>c)ap9)mTGC@x29^$MbveKYaQB~|_cqGZb??-NE>+Y}?Pzcb<
zJV3Oo9GDHRoA!9=E6D+@omgmtD6wz+13KrM<?498U}N&o-#kMfxlJ@Wm{G2B1N1t&
z&yJ(<!v0PWfx_&oE%V?BXHNZP)cv;zyVxo>!rO+7Hu2-9*JR~thc~Fdl;SDM6v)NS
z@s@K6pf^~~#s<#U?#Cv~l4qSMpC~ceJL-NN<4H?I58tF|?qzf#-y@e!&ClXVw1dI}
z=zT4sjZ-IYmP;&ZJ3~XaSbpYtuBpzz*a(@D)x1Yf<OLK~XfjmS;OGA>v9{HTA`2io
z{oZ@|>uMWlf}{jRLEi>~!3q7ac>Y#)A~a#Pf3-I;`g%FacwFit50S%Tk^<#E)BU*`
zAyk%_sX}2#V)nJ7Yzda=n$_Lan%(20vbfvI2HjCu-whMRz84NBTwynB6q$UVdcMF4
zPkErm(6yvtxbq-CG%l2F=kdGmlpD8bLPj){4s)etj%=evX4kgM-to<aEQ>E!AGzVM
ziK^&?IENCBF%D`@KwmHpzJ$`%IrLHaVM~)19R`J{kW0&T%+s;{&f#^b!S{W(_d~l9
zsPr3O4mHdy%ICQMz=h#7oKNI5N_w&RiFJYHK+}gw64L`<p@+@DG_Fzp&E>1JhjMeZ
zw3p%B*mVuc>>VxFid}x-6R-;z=N-Cg|Jq|aXugK%HEEc>ubZlmGf@8|KLQZ<PY(k~
zH;IrN5(TBxBhyYVO1_!lfmsGFf`wCBm#X4tBm;ddAsC|zx5rt9<fP{kCuh4H?6NNI
z?C$Vv>&*FH?BZvY6C6lBBJ<a1H&c2-DOQLlMsu%tz>6kCF>1dlQyl53d_k}Ih@9I4
z=Kv;6ksy1v+&0BdF7~40&^d<)W$9z&a#p}|dbJ*7v{5ZpID&f=oi1`rw^D{4Mve_+
zhVaJPE39N6mY6;Km!Tf4f6RV<UfyE}_yzml^;(84nbRIz003go|1l9_Z0hv?c;{{N
zSUdkO0wsccjj$z(wwzs^-Jzr%s%Eamp}M4#nNpK7O=K`lEv1sUQfqhD$KBcvfP_B?
zDd*KjCznq>Y5f8~C-#p}koXPns@adpM|x=6Q#S73{ZO8M&n?~`dDb*%m)4^@51;v(
z<s<v;S#{gwnPetzqaI2FqTBd-xH(VH*#IGdkj`1b+)*^R4JtT~X-6m-Qe1ja%ombF
zpX>N~n#l;-E^$;+b`4Xk`=dvCgC>UK=o+8?DNS@n9!;v^`3RpmydfX?F;a}kp%<fc
zX$N>eo<BW4BI>t*gpeEGH9XxI@JcFa6-qs*VQSfdOG+5zvwTLHai2#neN&sbI6ORj
z7-Ti!RN)Xw4=++q?6DKv*#{BOeNj(O5u4W=41N-6UDwW<O?Tvm=y{psYx;?Ig6lfN
zYXJP&nGMVL#gWOhSkQyPvxh^Zw?U9^-p7Fx9L%_yA>5S?ZJMN%h|0DEfDeY3;`2C=
z?;Np)VSlMe{lg4t7sji&`Vsxn#J&+sk?t!z_jD96ffbDe=)8x~{Xfd#V+DkxE{4}4
z)&7k*O}yZVgYTZz*0~)L?(93^DVSrEQMx)EjOiTj4!r1{IIq2i#y4ZPWPUo2P>kLq
zM}%1y5yR{!lvKy$cENP0<jN|OO+}WsMo!l{-pt616?~eH!C!-)vs?H#`|G*DQbi-L
zt~@?EXJ??V`CG9Fd`xM|w2V3BTTnZoEC9mS#_cI#{P7g#>kLP~l+ceNXpt8+#oN#R
zgNm~~&i-~9^YJpaaQTO+8+l(-TYmk2uj{q=I5e7W=YK5I%n!71L2zC2gZ?eZ2vN_F
z5Tf+Gb~z}}mvOy1^0nJlQ@{Rbp(g*DcqBWZlS*Ei{&6L9=RT7S^>TOP$jPCkevt(J
z)!(7|P+1Hbz-s8>4z-sBH65Jv<L>BOp5thjaZGD_{pFvq9)6=@k0n(t08n1<K5m~_
zv!BAx^X^-heSti#^L>p^V4hcc<%Twim%exZ(I577bMoI=_yv%zXFqzUjLJ^={KdM;
zzxLkV5N0TrA3FilzimU20_+O<5`#jzav0A-i@KfV2W;S8t&c~jH5hP8nw+h2F1dUK
zEr7HF1HALhByf)`BLuj^Sor6uuNkl#nEHWpk@qHr_?=Bm4}{SsYqcN%`I1wN{VGnw
zcs{bYA`E0mcfl!ir3LA8*)U*r5WfMbe5mg6Uct`Uivdfz*dm52u=wsMM|r*c#_|s?
z!{K~31nY0uhkt)A?MHEAy=@Pe{=Fpz)a{mek1E40Pv>tnyaFtTUdb0Y7Qt1xgwNYp
z6lY||?L6fBF=NT~wx0#f1wBcD$6^=hK(+ug-c82vd~jer%PIctAhI7HlbWJFJ1?rs
z`ldR?8efZf+JyPB5kjd+i?bZel|>=dptmZ%*C@GqI{(y3sum?nI4%{#rcrF_Gd|>O
z`u(vpx~G-!#SBd1EB5r$bN*<^DAF*dcYPR5=q;N|O2^0TG2(XOxZHne+03sjf=Y2~
z<)vndf~Ku!a&cL3RtS1fJB(8~th*_-%dP|4h9Wa9uhW?DHwqc*?CJ<iz3p8=6Hy&0
z$Df|)24tsC_lje-2$X_oN<~0QxajQmc*b#Uh>2*a0RjkD-jRbrWT1))gBCKXOEohd
zGr`{VWEXYYVQBy-4W-eZl2lGt1K4N8@`nkGZ~=Q3c0+s`MiX#lDibnivK5ZZwb>KB
zbjS(}1B87XU+Mj5cjyL}Liq6)3oybSX)cQRK;--C1?Wd6U;|$z@(E#J?BN*+7|w^Y
z@B64{HEfPU7uaBzfvnQ>&YYnYvca3_5BG&FW{nf98QG~*he!Afp#MHLI1Z@IH97{*
zt`5ZP5dPjuQl67P&~)pTAefjP)S&N}Q6Lk3KQlngCJQ7hfdS4;r_{5iRP!&x)Dt3e
z!A#egTG2pbP51;+xYk~<tb9>F+E_D}DG39|L9?lEmM|Lf3`S3aIYE4>mzbkGa@d!a
zKeQ*5f~g>@QkVAz)PjWuMw(fxy0^{E2W}Dkdzk<WRIgC&#38so>L`QmL^p*5q##89
zWd>v|=yySUGJ*gW^dW;L11pXQZJGzS9;OI0+F)PSJF5e*Kcwb!Jz5!@l;3#4ewW~d
z{$24?4W;2e2uftEEV<oG4EwJ_RhS=4mnm22pSeZqm$yuyL*G*)WT<T`9KoRrQoz;G
za<7r`&gE@7^VwwN(6gY?F>3Qj;+7i-r&r?nQLf{&p;qRNXb7e8&_tL|BUnCyCYnm%
zU6b$`67Od*&5YgyaVB6ZU~^R;WOR3EPy5e6>Xb}J)6;%Gv9G3`=3w~cT{(n$>UtIy
zc)bq8IjApb&CM8AXe(Va*Jykrc(PHDcD?m(rH(2*K8cEGpEuY;n`CI%jmnr7SFgOf
zE}4QK7@<`wGTUjm2jy9>n7UeqM<|1+rA1tF&<NsESf3fyu1Z5&Yz{QxY6|&@(<9b>
z9P4O4l!)j(b$oa&FiR=ws0@O9vUk;>5NlfH0U*c{YRaUdfJn=2azYicGJj~;ba)O#
zoy$oTrqfwRP}xJTvs{-{U%!f`6!E5eC!~Yuj%X1M&*pgkUk`x;oHy^#f?-{(A$b_?
zF$o#|aiUld^P4A2cXs<vRn}BQQ{2-!I0daCV&hx2H9FPxE_R%vR;clLY~aes&V06h
z`Mus0<oQCE>hDUijGC(VAsE8aOcQWMuQ)Q<fkb#%rl{f^?dvp<Dm!N<8d*7T-|`-|
zK(f|ud2m%!{e`^joo1p&Wf>Va*`itk2EBXQLpODyr+Cg7205b*&&3OWhq^hOQaNZ0
z%EFa){!p=Atz~ia5BpRwH4&4uJ?8#0mJ4)Sca`Z}ms?A@3RJsltPH<Oim}!V{!u)f
zr$akg$o_7W+IB)Gg^jC5o3OU9At7@JWZ;pNfh~OHSdiq}jo&paeE?aCz@|>30`tip
zxuvAA@S@*Q{K5L<$&vk;(~Dt#45d4HKDBhqMEaq>TQ;(d1cPM<DHcV2-13S5TMSj#
z)pRu?-?~BO^g*v3A(w?aCm^AZ+vE{Pb<gU*W&G|Ow!4^?2Iy<<e!8EYC1uK==dEoZ
zw#ABwN|u5hPzpD0KYv_&QO{hxtC`;q`PahzQ>rX%Z3|ug%qzPsmj1q@vZuNDfl3Gz
z5xeZzTq(V_*1N0lF9Uyd%65bfCxvRE5|4r_GVv101HLePtJ6(GAZs@Vg%`Xkt5tPy
zUI25|vN2eXE`Ar#%(kjjfv7-y`d}n&nyD6~wmd^!vMd^`UOF&Eq`gKH&4yK%L!H}v
z*-aKrqB57S(_C2bBgqYM6^wDZbX%*-f1K~Gg-L=gF7tJc--p|^B;SrBa8pe_ISI7b
zC&{4|CA~I}F~#peB;Rp}x0wj(hES3L65q-H{r~>k{B0g7hMFQ$#W^Zzqy6bZLD`ew
znph6kpJ7%slS~r6P=zK~S}W&3*vP?>q^e9(;*++d(sf#`B~PAKf>Rn5%NL*HhZh@a
zqQ7;uU+yxvDM|B$rZsS8y75Mz4lCkLWf1pXZ?U=r5;csCi7z}?l#JCZn5t>2$ZCA5
zj5Cn5qr9uYF-4w+3tLZAA-P%%*}2*8Ww>~@uhFzQ&@=y6%KcEN6^tC#A*`mT&&EmA
zA7r1!4C~1Eoj;>i9DgYAPe6j88dOO)E%%^Xi>irMp=G14@Aoq`h7;&G`={g|^9Kjs
zbH#Y@qln*s_hVFOm<cMV&16HWOKW60xEHCWLx^>T|NK7*!jTE!Ck?dGHbetjg#Of7
z5uft5eE|HBU*drw3K^6eN)wLvmoma9H2`?WqB}#xivn+NlRdOz=K3%R2d?H@IYmxY
zj)+4`H5H5lL%=yx*)wo5q>cW)^e2DtQ3p~}N18wsn7N|sby67RfDTEq#>UVpgK~ie
z;Sh9-_UZVdN{aFqZ?qHZw}LS_uQcFn$haO$6*};<(75_;3x|y_2R;s0I0G**y=hia
z#XO%iQ3S@5LSaG4k$!!S1o$Y;A$Pc@iHN7h>R65;=UCObBu;SUDAG{^EkHK9K@GGS
zD4lggXp;{vzo;iT!DxYQiYrk5bzuxqDCWzHPe$3%L>0p>c%Mx1)0D&IVFS%dQnaiJ
z8SG&?6?v-Bjj(l7eGtNThrZSc&jt?ru>Y*MM2rR#cYFjS!dFeUvYr%yzc7@Nd1W6H
zQC1lP@B@A|qB@2)nV;I}Od6i8;gdlSxu_9!FLfL6N>}?17it4hMWG8F3%CBo0*pE+
zf3+PWL!puvmLl4eoN;j!W_gd$;x_e!Qp-duu0}K&Y8FEH?a=m4Fe44e;v`va=szIw
z))o78ht&ogYYiFt*~L9Q{RbE|7001O3?<JCAdzfZPBh&h$n=s4Aq)^F_+vcuO+sbY
z`}U$U19+leChOE+Py#npBk>8pu#_!;=40(GzW?TWyO9b)kKxf?X3sMUg{dApe{!)y
zFoPF5na}lJ>A?08TYchk?P@SuUq>&L-wIK*posYBOByhOQ{Y)8RpJ6LL4~y9U1g5l
z00KToO;ciP(E_yzFTN`YSlA*>Q_9pbjYXN;PK4cPXL))$MkDgz$CB(T=7#%ZB{dn@
z4+PeTD3SL6VSPNb&!204MjKW&Qj3~5a1n12w?|Xrr(1`CRful8MG&}GF_g!B#Ge|-
zUuTNTq`J%E300=Y%u3UC4WTiyPI=%C0B)eJtX?KJ>R{?@RDXhGJ`T!fg+gd%k}tMb
zCA(G_RO=%v4p9TCi*55vmLmH9mkpHXWF%0<Ium5&_g_nR96UhaOI9P4Ff45*$J{;l
z{LB4OmnIY6&1b`ducI@3`tfG9GMoi4Y+?^lY%1jdnXY>KF!F%lg1*SK6tcwd?8!=X
zLBBxc#U;i?5>4m?SIY30JF6i^N3<zfQlHVw4}A{IH<1b|5!g|fu-|k&Jyj_y8Y`C5
zmIo!k7LiUGwMFfB>n1g-8ZFXC(XA<UmyOXluhz!eow1;;j5}9S_Q_gNPeCc|<+8(k
zv!LpxWRgVHE8iu12h`JJS{djxJsh*u$1dVr*kzHEy(xEOVbo5d0>V-%Om*ua6DlmY
zsmQW?5ns9_kzyhiyM|(b9nu<WhE>BI!2$7<i9u9zMB6ojk<ip<MAKtyhFJ|y-^Yb*
zK4~#YiEdZSat8!H5itK5M1C1IRnyQ1+S}_bk@Xs<L#}?x^5PuLG!&DJ1OM)TV9v$@
z+q3mXBjJhCKV?Ag{NsGPZ4rQT0E=ihpw`G_6yF^n-F9zqYXE4WvcD`;1`@Q3B~)Pw
z$}r<#GnnX47+EOxqKR*T)0~@A=dcscgPH|wpjG?T$pgy2V!&Gr5t3OJkf;W_fPf4V
zje`^^mcZ@&`czLaAOb>N^Ib3uiw8<e8^)=7ryGwGPmI({qy=Stp=0p^^<1{ubr8z*
z8A>Q25D-XeWMiXXd}ru3vV}_A$3B67@FU}*q?fVl^Ndx6nB0us%JkL&KL0kh|6aJ%
z$;Sb*U}0~mQ<icq+m>bZq3*iM(4`IDI>*S<f05hy{c!MKVdH(XapzmVBv6l9lA?_<
zDW-0ekX(Gg07Sm9MfEJv_i<XRTtB@U2oYd~MJ9qO;L^Z;Bfc4NRz5GoWv~fHE|yzI
zv%C(!*nqGhZ~kQ2d3RV9UAJd$=|TeyN;;e4JV!Qx!MKw+9c3Y}!zr)7zq0c9;M#Q+
z2xbGpm&gwN&gBlh*G9&78Z5KQY}ukh^)t}z>1e7&-&xTS{l-9sIf7XdKYhL|Ttuk@
zbg%~3yCOv8g%$9@V$G9{^0K-%Kc~bwsZmNQG*?VgT2-qQ2^UNoJRz!78GO$4i^&pD
zS&V4T%+R7N61R->63n-u*WfaYp8!dES(=Gs2qQ8U*+Y76I?!*5NhGk?AHik=@r80;
z?qUcA1e-!7e~yHr7y5bD=$;K6B|73b3773oE2_5}Yc6O^xqE_{wo3Dz?Pky_*>=D;
zu{bepR)8dgSKM?mdLM*)#3{`lGh)yg(*H@s5-%l>l8!eo6=F28%WVhQiJu%0@6xx}
zGqUa*DOIvWh&XlJ*l!*<5+EM$ok>Vh6DO#k@{PPguh&;=xPt(~_>ZpY!Tt^xGQZVS
z&I-K1%}ZKEKn-rk_sw%IKYDvS`Cm5MuX%LNq#}0@26K=B`Y0bI5Ut1JV8do^t<i1R
zh-^}^3fQj6e8w#Jm-Sqy%LCD??#m>LVE3rr)p)|k#=^(7Zg2iWFg?(n<l?A};`aoJ
zm{9o*SSXMRF)h9XvOh*C(;rE#(tUVrEtezonW+^77VoTp+;)sG_dJDd=!r3Ws7W>S
zZ0$yf9(b3mWt&N6R?Lf7uSMjp>Vx0Zm96>~GdkAJ*?`2<Nd@-(!hvLwGQd!+GF8fC
zUIG*atV|p4GmT}?D8!$cFY5rhgJE`5jRbpiXY$cpGIMF5S>m_K`6!I@6Ct)pY}pR+
zfG444R&ZXB(;BlYmyAny#+UoH_cv~j)rS<yT=plW%zsA^=h}<RuL7~*g4Jton42Eq
zWOa$RSyn`}%d+tSvMXl$YWJA9Usv$m`C|!=>axqBbPuV2P0^<pBh7=`(yqxpW3ba4
zPNuhrws`3EFZqXZi~JE1nVi{gFGJO_YoF6fKxJD*VOee?j(`%wuFL|byji|i0VJX;
zYQUo*%8Tsfge^PsBCM5zu{)OD_>gA)Wm=R9Se+Xt#{Srp;ncVkCUBI71&xE<Q)q>3
z7CT=-*M?H}LkZFL&(vCf=uxF0@fS{RMQvV1)Aj)0$_<(lAvt;R3|b~wSFHm}9Shge
zA-bx|!jf-0y8}H4dRvj2UwkBdtMl=bUTT^MJixJ^THMtt$sl86(v3GxrtSgBn%W>F
zQET#|unV~tF8I%MmoooIsQXOhEZE89jZGGBe0xl2Ui85d#<Sm2yc}+~naw;bUUisk
zAC5q^TkxCA-e%?YT$ekgq#4eEOam_2tFMLlC9wG1^?MXBOvwXyB?XVB>T0=6cCEdE
zMeLYqA@-_v{i(JRx8ZJ&vG@R6IWpE2bCFa6MMWVZ$vqAyr(ILDl1$1>vqCdXJFSA~
zbdf|pdBI?Y5X#i@?0z+;d`Vud!3{+prA*CQ<AY0{*YRQoPJ!NR0a_~tdUCQ=Zg%W#
zEV*h_i#EWYX>R|ne6W;ZEOM6yTs9~-0z6h6Bx#;{84L8cy{pI@yM%fRv;YV5s>pFF
z<)3U-POSW-km8LiS0V^d=S(Owj}~eeVCb`n^zG3<$sANLSOLUHynAr>W|dJj+Mmkq
z^V0N`Q88A+8@D7wT3H3xV#{$sMwDE4I;8tpxN+e2b}rm~-M(GeYepivl9HC*%@gz^
zE-y-6QGXQ`#4B_Z?9MF%TIs5PjjPzmh;6%D<oM1x9a)u0Gx;imw;IN#X^Sx%N0)+S
z2--eytCc2<4Y6`~mD062#LJWf!U94H8Pl=Qjmr%7`jMN0?*Y0Zb{{?HA%LJ<D2wyG
z0{~De_sLP{8&2z*v&mn0b_E=g=q_k){jMem&%M)8{|bmIStLaUED-4yb_*|;ljjuD
z@#?u)p~`TqONzvC@yo4(`+biUD^eyt+0r@C*zp?m-=$F>CWg2)TcMy7$I9eJ*Qqg3
zyS`!d_gHj86#Xlag_OAFfO9kx0kQDQqt%2}w4@N**Ct7<Wk#yO5y4q*dURw<Egt!)
zdk?u*L$iT>Gp$ioM~rQ+=iM^oyIv_G=|t5kJzH35=w1c82RdJ5W{n;wJc6qGg>_on
zgTU^SjSneQOX({ka%+I-0t*NFN3hv3&|)0l_*}CfXnuB?4LdkUN%~+s^DZA?eRJ)D
z!nk)~=}d&&Nk2`;A1|E&HEYI~eln~G@q91UStGONGXvEI9|upDlGG75?Am!F4BW8N
zT`2l&MYZYeHoGNRm}zeN*lv^fqo=wQ+@Tv~+m2nujm0$?!j*I<lghd*e^R}c^L_a8
z4{JI6g!m7IPE^H@D$p3>SKD?)n57~SvTKXd>%?AWx>i3~uabbOJqhdEeRuXx*hPR)
z?JEib3z6hpG_cuRp<ZLaS-VeNJK?17rY@bBg@{&sjXdubt@lt!z1uN!w_GUR+txXF
zuwT8B0QEk%<7@i+`cDwo2bQDkCxn)`-P&a|mpu0t8BIQ3MN`h@lxn$O4<8d8T28Ld
zu|79E?#SP{&iyJ)5Linss^{%yDW}1%?ZC;g_tXk{7@fsas&$RpZiQ@rt(dt=`>a-G
z2CMss?M)^=awNQ0c#wQ3Kz=M41oM^&1*io3)hr4)g=LhlBJfw7S<YkX=vro3JTg8n
zbB?lPdfWTiE1@&@Un>7@Zo}O+Lj(GdZVG@vqKi=)tb~j#o7Jo>Q$Q>iSyXXB$|)p8
zJKd13`tELR$Xkz!CELnQ096Nix%1{;cRp^Fwne99(il@H)Zf!%k#7s{c}jU}6N{q^
zb?Ki+fL#p4qrju+v1uFsu|GYbmdFbQL9XY0{3Sk^m8vs%Ydc{aHBvF^JuFOiV9KZ)
z>6^i-zp!aGG6ho&i$QC^<U5UZ^g#Y>5j=ZRSw5!LaAS$Q+O(|D)Td!jv$9=<zMTP?
z`v7ZJddI_dY~HDe6%T;Waf<(vp{BqOwl5tI7NFSJoV37Nj0SB9p8I5O&Yrk%z%`bG
zD<|d@RxsTp*2-%Ae}tV=tSC{tWw&kHwr$(CZQHhOoo(B;ZSS*fyU%~S(@A&Ix9eeL
zJ*}sz<V&qN$DplJDhJEAPjE4SF@x$}Nf&cJ)BWt$-znvu3zoSfL>*ip6{_NF<zA>Y
zIrFB(ZY&#c-c(34oT(_Ln9-uaAPT$0Jze)2OAb1>ZTpBu`_OS#c;n4~yEpKo$W|@=
zK=^wcIV54xdW>ZFbuvgp4RyZsWmu{aJc1FDs{}Ne&5sw}X@Yt!oAqS0E{?F^788!)
z4q0kS{ztCQ$QuhGkD^5Y#8k5#27^j5ri0ap6Mqn+r_M$fjBH0-tXC!tR9GuhJ~Z}l
z;TeL_|LQsMBngXpS~eOLS=9d9h;Z;!G|3g6JezLnQ2}T%sMs4YR-CIG?wU8MNEPd=
z2(jk5^Q3UtMBtAWnUf=HUoGn@8g*gn+R^0MN;lZbK=E(MDi%JgDukkE_-C2ZtJV+~
z<2&2KKsqWFjTgU(^oOgi5-G)!<+7LJpxMbEju+%ZK}Q03sa8~bpXQY2%4vhiu_lxY
zm8p_(N~(;-=EhxU>A$*@I-HYU)=vOC9?e!>WgszYn@NF`wGqFU#cGQuT((kU2B*Uj
zL9sdTX^8Q$Z~lK!DxYf}aWTHkbO+%Kwj4NudV&4<`sx2T8`_dm_8-dx>ZB;8Idiu(
z61_`SM}%xIX~c*)>D9M(@)hoeZ<D00U23azS|ZQ<i@pRfXPh&ieu0cd)`nqNH#1l;
z$Q?eJ<%x|k{rmTM&KS9<e9m9#n~^>M#pBMC8CE=jau>{l)EM7Cp{vK+g0ifJeUrLE
z`Oq=6`A`vzenHY`=1~5yU*W>6zr#z|5afvRoThvYN9H>Rj_b~Z`Dw7?Qib(g_kDrZ
zeBjDlv;r)w#k!pJerN%=jGG6v@a7Jx%)x>_A;xdV8Vj5`+A;gCI3}EV^nodD>dFuh
zd?1!h%z6+cYt!l>6HxF6y|QjdK0tFJycznre62yx%zZ||2;A>|`;w&}oY_MAd!Z#7
zE63MyR0P!}J*Ee2T4=Sl96XJWIXS2wd!DHz(xp=^N2Ax<Zg6@HFoPVlS<#0)4d2Bs
zrgcXY*P7Y8$6PpG<%j%!a6BrefNceMnJm-_ObNI3oY_vakM?EB+53A)i_h7o8RMbG
zvg3aF!Kc*p-Zj`@6FPiAQ0q>z=MTrWYxdaMV9}t4UIR8)*}-68NOo<`Ox)4zpHjfR
zhN6{CzLp7Op3lHA1V>C&U9fsxL7=DBSd!-K<o&aVInpe*1Ou|7v@cBMnmaN#`Nn_4
zv#|jNUIN$x@jrjwj{`hYlfDi@?AEsj%Y9D)MX+g+;xKV!2N(}dyMA{)h+P+;PVGoV
zLS<a!CTYNkTg7?kvkEt@Ab0ekVSc56af~i7AqiM00SOPQrk$KVQ|fiV3O%sxW~qiT
zR4LbRj+hvMAd8Y_O}EwE8^O>2MF}vN15zOQN5gvh?<oP!E{6Y~JK-9we|N&|sNXmG
zfr{o_t>o6^8+KbIwq_PljT}XiX(iRFeGUdlNeW9O=m6Ii+@E{i1L4KsZwbhACPvZi
z;IF>%5IXvKh0-PF?`aFqVg>N|eBTdCW3Tu>Q9-bRa&k(0Z3$D2zey4VH3-=;_tYh%
zkPjsQ;&=xkyvc7+0VHXn#7Ry_#YC}?!bad^6?lct?+4|29G&e#7MZALkoJmMkSY#D
zj>BP2%|(!c$JQcFffi9kSCsM;a>PM;<?AW?tTM1j2PmfSKto0_Q;#(vLHx&)NYhNN
zLocy^ne$L#=8Yyni{V2HFvpogLQ}RN5+CQ**68W!)iKxmJ)Ke;o?S^@bhDjX5al6h
z`uMoJdPROe0Qo-&-`{?|>BndBC~LoFsrs6L`=&fjFq6?7Qfj0w>k&9M1!z24k?1o5
zFU7smdb7AX1@@0Kc#=V`q8EhEYn|v70swL7c!QQS=w!0y|AHQY%7G$n=mnG}Tct}C
zj0$pN-Q4`Z@yM>Rj7T<$(#JpnF2ZZOh~qP6nSzd;jMDu@!K9HsuxwSLdV>?nb&5Es
zIw4-mkDc$B8khe8gNa{=v7uKGd4vVrsUXlHx+hBK6F$vBIF@yJN{{#dbRnFnl(lkc
zV@@%imuC@k%p}9K8OaJ*wuC|*G@bp6KmZr!2<Wum+bm^O+N4JvY~PQ028fiDK%St*
zeD{x|@6CvW2z8&vP<M7)(pOFsRqh6IKs4o?)a|`;8|nuQm=VZHpFu+yXCib=<6Y*6
z`MFtV6f9bCW>>9{69|xEt}0J0w!})QzGCP33<esS4ALnYh#Z-ROx7A3Pr${oGr4J2
zO30Z8&-`M$G>Y7!hhtk<Ic1cdmq@MT0CJkaT2QLbY=Ivy@)Ab|?AGEx(_azjV~#|_
zGAB?LuQS)dJ~oOG%Yy%dR~U*Zlj|8^5cp?f0ErX1WJ8*T`T8D}$riFGcFfFxiw!CV
z$-(BMvozB^3>>4?ZickLGJWpC?h$Tdc6zy_`4+2_lhJjiF|Dr1uOrgbioMKquoiht
z_&FGRE^|)~*riEC+B|L_kS0|CZr^*n9+=Xh_`RO;%w!XJuGv18+k+sL{kp%NMi~BY
z7U_&DEPR?bnZO6Y3sf_M?@^_dk$;h8%D)29?=ex?#>(HRws^4w7sDjci4`*!H?nBC
z0*DJ}T_Le>)5`G1<T7iG)Y`c!RHiNZ_mPd?S%j~7RIWJ^xsET&5=#k;sddi2b_(=y
zd@+#$B^Ijum>)+qzWoI71+d(yo>dW*e`Yz=am27Y@HG4n!E*0HxYofsErwTqd_dsQ
ze{Xy}2HyZ<6oK@)lo}!>b?bipIpSZU=2-n;gf9#Z-Gs)>36XCq6TE1dz!PtN1Z&3S
zRX_uFFq3>om<Ith%qM6}=`1BdM<IWD?>L~LOv==N*fmUvG+0wmitZd)Q4(k`)qV^G
zZr!#kf*c_{cn6gfg^f72`Cye*L9Mslp0#*2Gf_@MP4tYXPlb$J9OdAd7*mU{O8Iag
zzNDHQE^L^dcHN$N=AUmc)Pu)8s0=b%ITjy$F9VE>k7<l6K#XjiQN8)I#Ad>&yBJ*U
z#2~AAj0{2P-6s%pdSkDmCJdBZ-r?T6WmWH6*)(7VcOqc5B~|Sj8CHwm{8V0}Q^ixY
z(ot4*As+HXuc}DP?4M-}YW6Mv^%mVF2rZ`e89e&{UR7&+lejh0*@L0D9j@v`D)<YN
z)Xkk(7#*F%Csp^8Bc#&eB0yUW?dpB6k0So|Cobz*{?fl*Q8k!}!QHIY&{FxZH$ky`
zULX3%;k`d?=wWGKXYe_4!5{hlgDzOBKUU9PTYHGS+&6wl_M$o~!#xL?$)zwa+jppV
z2|)N%$CXS}GOG1s;m>R^-fdSY`;3|gM2KS#q8}M%^p?*(4SHW=8~8gmpP!Lz5m<Sz
zXk|M?CctxUduqG`gYdikZo#29?)8OgjCHcr>hkgx=5uYK28B=3*xzo30H78eYi?$h
zBfKV9I_$i;EWzKjN*6!Cm(R+O4CB)=%A9l|%iNhJgK|g8XC!Yjma=PiK$tD8xhV)G
zH`*74p(N+mCGwRuldr@VtCAlthzFX|#r8{exx<22%O9?YEyQST@#{tU<jGKI%BpbB
z4xICPsz|&n&{%rWD%uy6&=tw-fiX<aT#!g4(Tk9|HlS`ws7lndiHQ8Eo&hnNS#nN*
zO5UL^T>b%fRES|sAtUS|YE%qu=FnZ1M^bPB$OK}A>wiD%b|~iS%yUpm3V~*L==nwT
zdkgw*Wt{>(IG3v(3O!pb_wcMAf;6Gdy2#j>kZI?ujU!RfI55Xu<r?qCu-iBWswM5G
zKVl;x<H4{V&7XcQtx6fpVXnvSW9Qv~lv58oeQlOGa)1dPVR;!w4{#H(WLG>+-Ki$9
z-%c?*j{-}|@TGSsN=FGCPrX?Evn<M3)g80%MMz<S4X@-|G8gDLRG~KIG`~)?UjztE
zFKyA>qIM`o{<iYF>y9P!U8CevkGPBU_r1=_uy(v;*GZuaT6sw+7R#e##az?agr4b;
zT4|*@LO&l^<++)Igt^mL;5}@@yV7|`vs)kumR`Np|E34IZgS2mk*76rpgrQGYS^lm
zTSG0eq=uATCR7xZ+g3I&!Tr%RPGb%O@W?B67<qHxxb7^HmC&yYAsCk9%>V9Zc0C_6
zmOOHhN>4gLN7!jNR(MEtx*@EiIgydLhBS$^1X#F-^}WdqELzD3XQ@F8+pZ^6)QVwA
z&CC1*ld+pwJt<5j0&_mmYdyAWb%gFwQ05+0<1%Y=JIKy5tm<J_uk6$po|P@gY;`lH
zq|&#akk4FiYkkLG-wD%Fn(<HF7c8#qo1YwZz}-@3r7OJ;XHcHW4|~mGRVTz*T<n2z
z{?@dJt4fv#MYOve&&g$B23O2sho7ZL9DB7SgWF}yWfF=`@tKh%k-*`bD8Bf9)fX1O
z0FFC&r7&jn8eDLXS<4vrX0G;oZ69Qz%up%@M0O8e%CJ9H^ahvP1CVQKZHo;KzaRRM
z9=Oe#7S+-RChW-w9)13~JUYE{{AJlMdGCn^l@!(FSGyG08`(79{Uhg*MPfo*=WY;|
zA3<;x3yjZ{Z0o#Ga<Wh{QU9)wF8Ly}PBoz?M+!Uxy~dshq?4yBY%g7*^=aovAk7>$
zzS@Sf>9bBq_q|5PAHpJ_H9@T~k6+Lu7KQvBNK(|TfM6Qwvp1uy0Hy>5h1wA$Lpz7a
z5eX$Wa^QJNkVZ&P+<?N=vLfsoQ@sD6p|hKAB{}E!kT{v#mRkkCCn)NsjrvX{vHADx
z;L4<rTE(6GUf9XQggK=NrGjS6RmvY6Rrw5#KV*=HqV8-wXNK7`{E7R0hVTpQQFerG
zch)<r6{rd!^oKx83FATBSy!5hQrlG7e3E7G{Zf{HIc4koR^#XYV%Yn_ea;yFE1a17
z{Xa`5{}}c*mPY@5>E!A^VZ_$7e>&_0lhsre&DNad+?wQR3MO0Y;&AE-Pn$nOg%lD-
zvWZlJVhcOReYc$80FZnpW4=4z^_^`Eq5$Bh-#}+aqkz`+cI_LYyH2Q0OUcRjadPsT
z<~E&&Hq8eECX43mif`EN#;cNtsu+=Imv4O7M?eFkI(KKt`E39QgBRX(@F4k3BpHtp
zBVZW%a1B^|K9yvAHEkH57-TlrR~iVTG>A9{!_@Nip{LHH{9QiC%=89!?YnPz$n80{
zJszU{s2HHbu0UwB|Atp?2Hz%Og*#Alq<X(PYgqC$Ke9m*APZ;t;Y4<6Bl?hML}w$N
zwy2}nxAQlTuANq)0zrsARIw@Jjx&wKC9M%_{4#ue9G*v@HTl0eJt+6v(ArgN;B$X{
z4nT8u<Y>H^{`qvukd3o~yl`d{`hw6>z=+8+PQ~&DmABw^`&zuBvgtCmP4uvL034Hh
zdEYr2_F&1LgUxA#Ey?4I?PttEqCY>=d_DNF`fBv38cXFXS9@<^^YhheQ=o%8+Bi56
z8j!u|K2f}!TaO#A$rOi!*GD~B6NG`X!utH3d{!eaPrU-shi&jai)^7aT7YUJQk}=H
zQQZZWtjY~x7fLMe?S`@o0tdB$;-=w)Ngq8GK&gY9V!Jb_88)U-BwB}GgSfq~L0`D!
ztR%pu`8e$A;nA0Vj>*BIT4ji42T90qlhZ(#NpuRbDEjR%A~@jvEbWUN{!aVE75KlW
z_89#RZSv>jux!9zFOhM7AH?{E_8cqqKXur`cD?jx>BZAw-27D7KK8eq%3bXr0)ycX
zV&<_m*;|i&fnCY4z2NR`Fwa+V8=Fi3<8d+;97SY^Gc3h=*vL2p`byh%?V5!S31G5|
z2@2!j|2_{>Z6VLwY^C=Y+B@08bLn>3!`79pooDd2*LQvAvF2Pz?kqSk+3qr%$$S0U
zo&d;H-*a2*z!n%y0|-QL^Ti7=4s}Sv{&qtiP~J^IrwPC@3_JU90@4DAI&R$RY*0YF
zkp518H~`oFVQ=xiJ&uAl8hY;UZRJ7_h?@xg*0PI3XL;QhoZ<NP-+Ak+#U3e?yscd7
z%R<2ULJ6<q-bcR5zBhFY!SJ+l_hw&P^>}cv#Nkxugkc<z^f{jx_>|o9AYi?2CycbH
zS8fdgfXc(lJvxVekF6mD5qKh%mmpTM%v^VHSPQZx<c%0o_;?V-u(ZG^A*EPzJlM0%
zcymVc3)%(->a8ooU6P-lBZ1Pmz5+p8<o~nZ*@uT?(#yNAjSGZwm}H%7X>Qdp+6{|x
zqzn<*Le60lUvp#OWBAIAA6VM{rGV2D=VLxr?4_HT+3-HW$@^{<5a{reqZZ}W!_niW
z#4m5Y`q#Ez2iNiU<jo+7_24@?JQ}M&E&N-r$7pEFZ*M!JpPmSAKy{!ps16~kEnaUf
zX(UM8$4+<{eHN)`mAdtv_W+WdW(6pRlELmaH}#O#fs7<FF%qrTeduoXh%LlSqZ%S`
zVnYFw6VvAi1TDuTq6B`C_Z5L?W2o1sVz6(TTNJ^u4ykBh;cy$r!8k81Kg%M9M@ng!
zoB&Hz$yeWbeD1WK`8d3GE|(&-*s!^@H=8nJ`5!tN8MMd%;BQDo*LJYYURsRALAG;*
zoiWY}wXI4>@}47bujvfdQ(a2rwrLC44TrP~YIR^=X)#N;u3?ydRfVe*UbaKAYb8w&
zm$wpHXOPa6t-5$Q09cVZ8P*AElc$o`+l&f~4wd*_n@Wso3}fc&90O@x*{@w#22LTQ
zsd>(8JIjPaN7Pj}WvYt`r5Bgk=8c{y=N@~D#W^@B^PkA)$D9KxLRAVu#k*!g>l6g8
zIoQ*L1mTWDARUtt<!d?AMbjUtm`NBlKiqOAlu|0EE8{;0FHnjlQB@l@=NBtEDHLBA
zg@Ul?<=zs|5Ip+AXe5%>Oy%7!KB>c5%CBLqDwBJ72PJ^V0>uvozBqOaj6y6MgruIu
z*xnqC{=F@u_}2qZZgaCqh@4=U#b9+zWU2&>@?P~fe35Dr2<P<DPgRDsn&V8YGT^NH
z4gD`LB9@Dbvv<X?9Ump^SgSL!OP)@f1&@OA++%u@0FqW#+5KXfyAwi@{SNvLJ#9w5
zqpx=Mi?|1?3Ro~TH!N*Um);TvVFHlZt>0zNfoD0Fb`iS`SwT$i#|$wkTd~CaYab44
zk7ZUK91D$<#y-Zteb)X#O$7K152OvxM(!h4^=j0~mk^mjTRZ3N_WGL2-kaDO#arj{
zoTRx`S`5-3fbmM`f8;*ZL(#q@Og77Y&iBj^-EU^A7&>oY=s(mjDIsa7)qU~|&DJ;l
z`jH7*_ON?JmnN5@U`*)`$Q|1B7ND3K-9sZ2?`|7-0W>F{Hd8%xOFf>$Jhxq(+R*8N
z@h%*t%;2Kv=I@pau6X6S8>vr`&EdS4umeHIY`}jb5wvUe0y_l}i`sMT)B_%IrwI@o
zAqZ|cvcnsFwL__Z69=m2R0a$ItpK?Fa#+?A8#!G71uA)ghK3eju}56uLmI;?k7+OR
zpUf??4d50@Ca@;ps9Nr<>Ey%nOQ$iDUL>+IGYM7Nn<d@7immM24j`|{lPJYB*qL!w
zx<&YcG_K#7oK{=OZ4O4WS?+Ai^&(g+EbFLv@Tl-Wznrb!&6=w*YSX2#WZUgvs8hV5
zLupmM%l+!{JK5-8aPSM7Jdrq;%gITthT5@%7BNUvuXdyO4a1>|#~`_ROuWlTyyR*F
z(wtXVxOe!UHT9LZ$#uMVFTR6f$5+{S7a`KLcEdm0O9S2hKE|B!D%=vjf2w~{B&-($
zoiPYG#g}Ynvk1)|9$IZ<CQM;y;V()A0L^70ZAn9|<h*An#Nlwoq|O5Dqvz8b;r2rv
zy)i?yot6QC8d8DH6D=0(At73S7UA{p{b3lT69w%60)1zzQ7~DVn+iL4+h_mFJ<4y-
zBhjCAoJQR1)-OeHhpaQ7oNP~WUust9cXuK!H3?izNyEc4{dB+=)-zo*EUqdiHpQDB
z_GePzCgJR#9H}ermaG?9ntt2?3PrHtl-f;-4QhsVeP`z?W~Zu!>(Q0db=l+m#K1L)
zU0l>oby|87IoX9ws)6UzRPQ-z3lBF}J)U%uwORg5c|TJ}m`Z(~nt>dj$pcN;X=IbX
zz9r$}bVTW7KVNp3ztGQHNWimHaHjpTzl=tQp`omLAQ++VI1sv;T%AtnmF_XWs8kJ4
zUD+PX998>n`|3E}D%D6tvcajxC?dT?ptW&GXh-j$j09l`UB!}QM5*O@Q1K+<!2&Tl
zDWJsgu9OLqU&gZ1%0|tt81Rpy;g$}Gnu`*c1|ixts9vx_uaDv1BN5(TG?cP1#UguX
zWkwN5`sRnN5fV#0GG^ivdI=MG0{d>GKbf)D+0R+IxyKhhypjW%H`3{itxoJJ!v|$4
zi={;ZT|mlFZugT39)zG<`M#(~b^Q6AycrPR$Q2=O7wa?vtPwc^)dMR8M2)0{n9l;r
zT+Al!BRkwZ;kYE1K@5|=%}{R52Dv;qD0}|?b{NY%j-0_C!JN?;3EZL%k<fbbG)R2{
zf#nbzrf&sNe<<7fzj@zZ^b}_ajRKR8yd?d$cprw0o*I{K`_5e|6v#k{@RLKaNdVhC
zEKyY67pppzpP%=$IS8z~&J9f5KUO`g+{N35DkSk3{0|DGN16s0Aljq5Etw*!C!9u5
z2r6aFbHM-UT%%?70prK%uBBJVF7&ho>J~M<J-989lE+>!CMTado)5~{Tj?etCl$M>
zI&)B(8|GUm-a(l$0*vKwPk4rdaH6cq$GKs+Otz65hlk8lQsY?HO1I2K3qmvUR2m8=
z0~jh+E+@iX$_4H8<d7v`NJZP-I~0diQx@0M%z1o`UCWS>F$vIf7p=_f>s?^eLU*K&
zHVjJ#z({TH<nCj*HNC0y5!A&KkusKJE$GdkOk0M$k4LCCbR_5_&$o0<u<*&1tph&b
zG~@VG1;BF}2%j@sVJm%Kf=K;F1E=)%idHNeXB(m57K<k2hJAQTxg>_8cCQXtx}SV%
z!wFXgbUYEw2mZ-HndcBQVp`)5{D0qxSA^yS0{%f2E$6ZIdi?#YwwgiKg6YGiyLR}z
z?+-`f=jP;|!lT;FHIvc$*}aCKtvPtHbpK_t5_h1B++Pm6n?2SOI80*=h#ORWYqEg6
zs~=r_A#6%I>+W3WBbGXT6K86c1|L6bKM!aHm9}Jln9=5r>7Z4kW}UjSAV!<eW-ElG
z;_G<#UJqGQ0BosP@=B{gNJ+SLrg6*L76FQu@mbXN@~&P5_QGC{Ten)skkdYM(#$l4
zFB)Fy_=AK4=GiluR{6@WQer#pCmt)Ym3qOc&`M$<V7zjpqZzHoS9>=E$C^tfg39bl
z*)d76vb#8#UzWkPQIDw}x=+zjCB=%{c%^j*-dn6X_xpaC8vI5ngw+$4O9op6vo^=!
z455Lu$#SvLM$bG54g(nW<IS56j0pV;$*lwVso|gvBfB*t!x61d+Zc)_0w}*zjFVJ3
ziYp}K0u8}C0x1a%LNi0Xyu2;ps{si+XCEXc-aL8|0i4Zu*>Srirvf&b9Y2;f-V24l
z5hlx6fEe=ll_zf)X_NYED&zYV!WHgqiX4WB{mq~7oloH3N#{wsIZoO=<TdqNm~%Q>
zy`dX>BaGRQ95odfv#6^0Jq;<L)}{+THlUFKv;ClSRf{kRaoCs5O+SOHSk=PY*i0A=
zQ}o6Ke}I{xF*}FdvhlYr8f@&fU`KY4ahNgHCewCXY%LSG#Dxms#FeMN@nvEg;fB3u
z2LV9p55D3!Jz%$C*D#d2O3>D}Ux#i(D)ZXDxDDv;J*P5(`O^qp>4aeEMy-@=>J4Rh
z!NU<l+<6|*x)^_X4~Xmxw}yhZ`x)669tpX;oMGiI(4koSaRYY}WW5@Chr*!ZdEG0p
z+B;-!9%^F6Rb|=JKrvs>2CW+1E*PPCfM-tl8z^@R{*=J*^xe*!wU))}3U}tvK9DC_
z`jhDarmt8QgJA#~my3ppz;fx9n1r$4s2JPMVm(Z<GjtWwZHe!f!Ms>1u$mP2V%5a;
zYug+il>X$PmyOb5McA<)7%B(YMqsY>i!=^+r~B+uAvBGe(JK+V3n&9EAac-jt^z<@
z)r@LSp?w~6V&OpvOjhby@vX!pZwR|Rc>bH67Lg%boUC2Pb7FaCx$MG|x3aSrJgjur
z-$d|j`AsM%iwpe+r|Txu5ns-92AWfwQq`ZRxP{>hqy0>6;0xZcT?@gkp6$od0!=~7
zz*;Nt7d&W+9i-b?Pijmlj_=xU%J$A-Rb8sl8<wok&0uS3ZGPPi>ink~vP==BXA|VD
zLkV=)(axcjncCnV5y7#8_J44#f)Aldy=0yl+=w1eHX32x!Lps)Q9V2;x~M(q({Dy*
z-}KnB4SLo8f-E_?hi=%Q2QwP}%mdLQ*H{*(5I!bU5qELKv_mHB2JhQp%w%?}P7`qN
z0U62eYsS<fdjuvngo2Om3pYHc+Az&;21`3I)9vj>4rFryAZx21TZD$&Lv-kM1C!$k
zkhm6{xl>|ApgI9ao7hxj&M%t|0}bIwlK%|5CsI&I@C@|X6aE=_N}VATTz7a((fafg
zr6b{&j=)}opKFKb>}2GeBC3xLyTPkk%9>6LxbdzoazLc)7fwwssyGAIljKp2<POqf
zqACp<V&Evs{=r~l)a9m|(F)uDCKR31o>>$30Psu$oz?-Q&NT?PT%A6(R)LhL9&orz
zNyhSd!pdlbkcxNFU`1d?x^)YrmNzMjpfV|@TY;lgCz%B!#pAi+@EWRM#dG^$^TCb9
zKY4iw^Ewg<vgR$Us+Tg9m@`R=c$d!O&It4{q4UVH9Ly%agoVSMkWA1~@~;{hP2Xuc
zrS~%#+>jJCleY)n>pFUy6i&XvA+p`Y2_aXu`##J$T5NzVDbDz$5DA6JpLx0m`UXUC
z8ECW&N(P%BZZ4egxN5x%<*%20|B2Y63Cz`rxBEo5I0^tSIJk8R@frk89t%_N4#L4q
zGVKl!*TmbufI#fb<JmE*a)@r-1)*bd$_W@AWARlu3!Ne*KL%`Wf)NVjO_D{j6)Gpv
zl6M}pvZ}AhR7g4C4hI0=aSuriBKnglRp#IedgU6Q>>HzYaYL-To)cG4G%~L?Kh-#Z
zR>Y{sj4X{kGztSj#cDY-unGC>)uNr0AstQS3H7KfOPyjha|qYkO{@$PbAq6>U*78a
zuPiq?53f3rMGkqHUO8c@`AIQHU`lY_0M47x-|YRZfk?r_m@lKbg{db~%WYpXM(oVp
z%(tzfJ536{YO>ft^_S!IF!@zQH%ce!kqZzmiFFydrkN}GAU4S*1(}gCH^-eGr9GFm
z4lZ~+S_Ni2R>uie@vg7`nlB4q18qA-d`Zzg#cXw5!_yem_boVRF$x&Y7}`&wLXNx6
zzymqLuA8t%L&eCI*z*OM+k3!FL6>cXd-@<Ox3c>J^(cE@7d5!Hu=Y)=Nj7<9blID6
zOXSt6^J#?bZ94QdbM9KX=DjiUA->$VB`uKX;8I3gtd88w9WF%(5GF?8t;(rGvm>f7
zsc}mv?CdPtP|Dq!YAIxyXBbUJXU?+V+`il;>{obOAvRyfib5z71=5=IbGrUOQt{ts
z=Ker!#fTemwAT9dF_+y;M<+zzuRN}igutm?76(ZIa>z_`MqJj@AerptszQn4S7kXf
z@p&ojRf9Z8SVHG9Us3El>(Aa`UTZGVR>;t?*KirOS7^n#TXhfk^~%!+rVrw8F=6Qk
zDRHCNRi1ZIyv7rfC1KXO{LABKdE|_b07~3arDEr=fc<OItehlWykk(QzthuN!1T+m
zF(y!<H=sSmPZ5Y1cZE$;qPr|tf#*T;>(T5z<euvXuh0GSzKZ2m!;g?GWv7A%Ts4a!
zy|)(BsRYrR2S{mg7RHVI6sOUflR(SCvZbS~(5q9`87R~H2Bi6sQ>EqxOAshM4enzO
z$wgj*zgH`iFHK(Z-4Qt9*nw^hq~+{Wx{Z9vh4vayz%1@BcX&T^CkGy_bjx@m1Xn{)
zOd_kJ!k@kw&TM!5j8RpH^KkfW8O`*uyhE)GGNT~(rvR^UvlfP-V%dtI5;LI!e>u8i
zV2I0&^F{}@zqvZPJNA2qRcMvgHjR0cEHvp88f>Qb_O+)Cu5_pe0FQz?DsjZ&b2A&y
z%v|%=Ml^xl$`awiU}n6s>E%@~w`5J+WpFEhb$X~H%d=ITzRyZ!PWRNb`p}jnx8PK7
z)QhEfH(q?Gs*j77{e<EfKE?hC-09d&kbHULFh3{}PdaV+9~vUXPo3RvEiRrGEg@ZM
zIi*Res}|ZyCMkc=@I*uEj_OM$S`&|K@kt%6Ri|f*c&_q+udcv&k8Hnh8p(wAVq&+@
zhgy;mPy>j@VxsG}VM826gPVgaB?`H(2TVmShiN1A=KBcz7E~av`<E_Au*_%eju6yC
zzaX`C_=9IP+#7yE+|&M_o%d;T!{+W=q+nakzO1v!H(X$kZ0kT`=}#?-%SuasPztH7
zrD+Sm@2$FPI(1h0aFuvs$ZNi{suWrCr?J?%bN-hipwzq+6d@%2tyEAfA#L;$T)Cr0
zMHh)dB2YX*kb-q5aixK6zlUm7n^F7pU-5EEKPpvKB`~<CJ0eVvi%uY2hZASM->{yO
z(mdZox;M{`7rtTqmvUt*OdDq%RT_Gg_t$nrNUOOM!1u9Bobk$)M8x+JhA6k`%!LE@
z5Pynt2w6S3fY_|g5&2W;RJ0#}SoC$*G*b4G_(n6Ee`)0wWYvp1Q{2M_ZFx7*l6Ta?
z1$_FhwTZ6<ZkQA6A*@YexWOMN5vX)ZrrAd7=kVI;jL(2*-G_oJ{h77OC-d7PEidm2
z|E;dgU6we4FW$bxA}Lgi?0>NXMTE4kRSqR9@c~P!QpCYP5EP$q4&p<ppW7YJt*zW0
zZn&iQ6XDDLo!#xLtE+AvX6qSH7s8KY9T4CR>3&4tA0KwzS*)*AO^u=vX{Y1qteuvQ
z*SXLIu)ZwG9}IaUp9gy~`>5#d@Tmnaj!;#K?Ea)xLu17oPMbE+b{IDTTP>v*w3;;9
z$KT|hYJm!?gQRxgKar@=r{U*KU_G~fjS=H!n(IJD>5r@>UtAypQ5IC+^<NC2W3&$$
z5u!<Q5cQ*eRyID(%2%kP%%e<<!ijirJdWPD%tmQj76iV^6}}1bGM{Q+*ainA0EEcG
zEGm|!LV_=$#i(dB7}4^B;oxV{CTSD8Zyx1WHPhAu=7Ivqw05w>_A?|&bQiW6Jp)D$
zm_Tsz@cX1v;I;Uh{rE|x(|Hf<UDt54%Ubpz7P&^}ftcv6K2SgtzG1}({DZZC_2EVe
zo}q+>@TO`p;POOj-7-uL(yL84S}j=C5f+n>{)WKsEmwP7z9K|gOAj03p1Anr^g^i`
zPK<(sR$3}<FyQvB2bO?LHA-7yNcVBWbvlt6)-EaBcW5EBD(&g1O@pef(Hc-ye~$ZB
zUj5+L7P8A<KtjnVPO-FV;^_86tp?)0MC*wZyr}o`^OrBuO-4~Wu!SAo2B~1yc4$@M
z^LLh>g=~jH?Vt<1fo~A__#<|M<uQdUi}eLor=hGy1Xi$}ce){k@)REr@aH$!bNA8R
zG;si;WZ~V}y$EtPfdi5lx$Xzd@DbyZh>vHsV>@T=D9rT*;Yk;KK#FWt+(gCU>;2J_
zCzAd}frw>wqp9(&HZ)-prU0y21ybGZ$gu&lOkYFBf6k&6)c?93fX@#GPBK+{CHjZm
zB8~LcOx4@pMRuIC079Xy*|kw-#yB_wQr;#{LF~QX(fHE@mL%Js_D5`zx`&vt`Wy<u
z<&W)WdzrN}Tuu3;%10_IDinHO|4#4VG!*sWm7)@dG2~smiANlUe_K54U|0v#se3aE
z!4Yt?N~<4dXi=}!(e7`K743so;S(BKLgW7%6emRM2DGjwp@+bN3WTmg-{9of1-HM4
z)PDu`#~9_vy0(*Vmld!;0Y4=qbH(G%>J#r7>pwDSQKm-!afm-Iy<-w9akUwH?7h1a
z(S7b;GZ`xw6RXR+7)N9G<8KM+em$X1%u@(OpB^}*$?afvo9az5JPG5gVZ7Q7+e>_S
z*U-XfFC1|s8@9rmuO8T7z_yGSSwLPfHK<ozn6Tp0%|bn0RBnhHBMY4BjqFzVR>(9<
ze?!nE2}vrIW~-Sm@>P2rzj6?eyEAz7QGFbzs}(T)6k>`DYDd=zWlmb&nSO%@bzB(+
z(N1w>rr@~lv|a}pt~w_P{`&Qz*Bs6A;m7w|;~Kt-EeS9J+cd7|)p#S5^xJ+HADmOV
znm8=*{>x`iy7cV{7N!m}=SsO&8liOt?#pRhtx}d$oq;L6Mu7iKR2So&eaqrWYAK_-
zxS+Zx?{mnsHR=<|FEvc|hi=-gH|b9N3I=frly8N>nX6@hVf-q~hyTvEEg07$5N4lY
zhsEsCl$vmGaMs&a5;J`*KYt-HNJ&$!p)<lj%lY^=P24U>1k>kH7cCpjVvw@-g64@>
z&S!F6&>z(?-{ZX~-0xwZea=Ok;3gh<sG>G2om~c_3BJTYJe|y~80i)5Q~#7*CpTgF
z#|4=S+EWPy4ZImQaqG`P7XzmjSunvPt@j#O>>7Fmj-Ps7my_RrQgM3vst2y0c6;c`
zh0U^Kc0~{@?U03cj(~|sd8yppje3Z`F9;FJ8RcY|b*nT8J><((cl5-X;-%Ci_XRsy
zkJj^m9cRFl<N^GS{V2u&m2N_99Ko)hwek9TC~zcqm<GV&O760GH*hRc5r-D1=hP;0
z-=~zLY%f-Z((zJ>$LI(Z24alT+4^uZ^oIX*(Ico=Etk4_0mBJk1zor7s>ey1i7`0t
z&6pb4x~vLB77rCjI{B@^Hu+1jN(*tR15Km6b@3S$J>hF^G0C%Y%mg}51@kmIV7e6X
zZmjpm@o-u#RZ@D3A>AwzFI(JIm&mD_Y?;_E69-)v`LcMlv&&k`#5JUm3$Tjga~ayx
z*9IqzZljudQ*0~+7*a)ryZ?}tFM)h=Bsl8BJth}i&p=oToQGzOZ_@j99M@d(FigFP
zUKZ2rs9pKclO=A2n!}i5B&s0)H1CnDItkQlx9<~36kvO(cMlExMp+2wNq8z1<`U4P
zF5(C8x@*YK!}XEWbU#Id&f?;>fs7u@Y6>V?lhz=+`^<550=~JedjnDI)@(mykoD7D
zDFbs&Ep6H)P@25fD2_>Z<kr*4lghK8d&jN|Y*4ukFsVhVVgsXE!{Wls<md3>_-SUu
zb7@9(t@Hlt<08xexBCwq)#X`Ntz8ifn+QSF%o0b??Q{V;F!R;K#>U7N*9<w*<08&}
zsu?b&kx1|KJwqG#5zdFr#xklE`e5CxzJAYU&?bwsQz~=0-)wJ?@hu`$d{(InO!m-|
z2O+pa)l8im#tMG*thS2K{gmE;fDooRKm-#VG{iV11O#^gC=pmvWN~}iX7E=E4SNLO
ztP_Q}?#x5QJ9d{*shbGeTf_B9prD6d#Cy*MxC#lZ)%0bS=`w`Ch5$p5@l=|Nb@|`>
zFc^t`{kJ+<f~Ix|i~TSj*)K2oEde-)D|QO?m#@Sy#p{wPgFp?1PIL0eOq2!p*%PfQ
z?^oCOqA0};ap)&C;Hh#reCeqU%AYQs4;!1pmlizj<pAhN>Xscps?f#?TgxfMEqQS&
z!w6&1v(>j>{I=tWTCTs^p20k2G-jwAA7gh3|9GcxHXj3|sMXFzE=w!l9NK>-jSQ*?
zyv`!7=i_r>%2CmNx~c(_r-6QE$1DOIQQ2<)G{**SkHKnN9Dln3m=Xj}y|SOK;n%u=
zOUSJ`0nNv7>cpG922|t6kxm?WJ2)t32Kp3eGwmaPd|YhiiU+z54NT~xr}_2YjEqb`
ze)4sK*K(M%tWN;b*=JPjKwh2gx)thh0-2_qJOIwsD<G*h52g@{5ZTfV)z*HjCk7A4
zUuEBhIc<wMya~(4<Ky+KV-S(2lglR`!~cG1+rUG6)4Hg=nNiCxBn-;3+IULa8h;y$
z`bdY!C=$9=wYH^pZ(3Dezumxi4}}s0uPyJG2~lL(C!2C*MpJB?>8p1<U$4%q*to?%
z;{w!uq?uXsY6&CBlwW6`trw;qla9Ch07wBep~M3(^y0>$h03mE#~u2fL&U)7AloqD
zNY;DV`ahQ&j<)<v78Bc2y`&vZD6TgoH$KCg2F2gRUizG#;9B8gT%Y1$UF@54E-n3b
zW)3^Ayqp-Z`(F824N7wC$fxu~D3FJ!mWT!gyS6G3#LNEx{|6)WFC+Z#k;zw(`mfFZ
zTCf0c0PG!1?VO!$Xc_4k=@?Au|84326BjnMrT^c+e;es?4Ob6n06>s4U;u#sTK-Qo
z6}~S@pO6j!Kur-K0QrA==KnnUpPtvv>A%l~9RDX5GM>2iOg*|uRaY*tJoG|Feaj`9
zoG=_ggc{JOCV8TOz=47o2oMx*akKIJ-FXTK(@*$TpSr!$(7H;*xU{r%dt*7h@B_C&
ze$9|IwtGZEO3wfLb#wRhc1+HcqrenlVW7$DgdF}`Vkf1g$p!hZM55IzFO!pikW9wn
zS5{00Af&-NS1KqZP692)LRJAZdKy2D_tQ=dcEgqxvK@|@$>od`LOFpH<**o;p3rcr
zEX3c%A{B{_z@8)4dkR8F%1ocjun!aiaL5G+iLV3>#?8Q!MNIJ)M2uOl*Jk@fEBuod
zq6srErk6CjE1c#<I2|9EeAq3SB{s3KuwcVx9abMsa-VJZ<uOc-8+pw_e!d)jAkNJ#
z{&~E1dq>%H{PgygqM<2J%gYXz?3uJ^=_Jq@2<>zB9I?^Uj-xfqLNoMb;zELNH;Cb$
zoZv9+c2QDsBo{z0$suPh2V=8t8!p&;y#qFYFaDJIQNMxcY0%tc_j%m8#Rk6G!^%=i
ztI@t^hlfCp(Qsc20?52rKYSA*9V-F>Dy5qM;O|RGqliYHiCm(JA>lSa5<*A{A;9lV
zoN>w%GN)2&(7ZMLTm%`Ro8(F9z#dIR0L;V<4k7XkH1>LGg63@rwf`>0@2U7VIhsZa
zx0RDR+pFRYj-;9?;K|^8T@nya76eF~o($ktg5T!>r`Cf}y}P~0Lt@Y3pZO8JlE>T{
z5XdovTSSdeu+@Bx36f*p`CmEtIH8I`nuFXfXZWAP1niCl#~P7GfKx^w@-g>zS3|wa
z<d&=~d=-R^k4W8R7vXTAgji5QN$3ShD$;Y8%wGQY%^A3jw3Wp1Hk`x>pijk)N{}0|
zjKU^}a8NEVQfA&lw7&p^Ev*EODjeORs*F^PZhZnILJ&^@{v5@OcT~Xi4ShALLYjA<
zJ!qm3pP+}QIjWWbM0SxOs@y-}i2V@?t)DH2WWuPq5K?(xClvtUk2RO0QkaFLwm6{-
zz~?mV1;<N}_@o$Q<MHwxfZ-na$Q%xSp*V}&X_8n!E_p_=WBi5~5jcLBV}ph02r?6R
z(`+@b5|}uMKm>`S5oF2&E6DG?$bzQ?q(Z|S>D?m1>b{T18WZed%Xlp3+wwIAZsS(t
z{wH0>B^*6?n=laYw3@$%JlJW;N*}rUj^7{1GWft|uH2h??z7~B0KhAk8n?QY9yS^1
zSmRqXK)27UOb2%G68`p!)(pWO#?75aJ8YR(U%nNi=%>z__#HiTHD3G-5uP^-IJ<%V
z<oMTPKL_c3Kp0U0-~fB1V*X)Bd~GxuC=S=pQ?oXIL!BXDk=`wQte(6Dyxmr>_8sh@
zkb^;Um}#7O-8H7H?db1)(AxZ1ig!{;alQ2%9}2%sTef(C8ykL?@4qJMp8dl<m7W0)
z2*Gjqg;8Y$vu+o%=ZF3JA<?{E<D<q{>1i|hf%|b!@`K<mY>_{NzHv|RWXfYJ{O?~k
zZ|2|03nIUt!Uey+TwdYuZV5tp($$7lzNYZAul-=_*Eg^TeS$BE<?zn+Qf^qA+fo~R
z7%VuT^6+lsYWdh2Qy59UfQi_>wt?pidq~Saeh(<P1vLcqkEctH81lI;+QSIby+`c3
z#t@^^TwbH=aTUys$_bgn!qoL^1S}4@6cauPD<Rq0cZeQLaGoVlWMnykv^fD8fs}qm
zdNGo0l>H<oY=uNVCYJ@)!=?QsNt9V-;sAVcLzLJ@A9(9yWM2FsWMBy{cngCU_k#6y
zKnw@)0U6k45qiBcOY|^6j!hh+fH0J1(a3BBoL~K{^^xscSGV+wSBdg*x3K_YEYZLZ
zS8tf?Kjv2l6PP0Gbek#>(~r7RS}f}sN6dHqj0%#tfeW2X7Z%{}2t_2&#`PhvLM516
zWtPULeVAL|6siP92&RKeDPK~0r`bTGhY28G0o;J*xp;mQts4Y50ha;y_%Ad7M*b}Q
zAz0=kx48HHolW!u1aMdKVH>=CZL&voZDFiDQ>1g)$vu?SKh%IeyX$MhT|1XSj3-OS
zS`W&j|NItH84R*=Uiw)??G8#`AFRKZfD+FnY*lvP^{vzLWjmNpu|TRR&pL$??lNX6
zJWBhJfTeSwGnm2Op?fr=F>oP@6pny}c%9a$gOb79hIA}YelmbF{(&hB2K)Uzj9?fl
zxUsXvZ*H3i5HT4A_Z?2Ot^}VPHl$?S1fmyEXA^{92O@(8f0&w9ZfU+=`U?dakj(`H
zv?8jBy$jF<`jY?N<E!9in@Lh-?k609THFZ^MF%kyJ5gs?A+!l7H+U1gQk$MmwztLZ
zZKl)SO{*dfN>ZHJ!||6al}ARe8?9U@m~zxJ3F4+$2Xbg5B%hg$YZ_&-=WQ(^;4E9`
zP(JUEmNWmY(@);qIIXdpyUE-71_U-~Bb>CL83N_6JX7P(peRt4R)8VQp96w$A7}%H
zcgh4~&I}~w073hP@cAXbYlb7xsvJWg1s<Mq^yDQ36?Ddp!2r$Y4LF8itOyRHv08=U
z(E5O}Il``wGN8x754Z|MG}*R(4hR`iv-brb|Kn<dP!Z?4(aD4XZzo%P??(xfA$*kK
zdF!mr*v3|clVJc2xQ}qC7d_HOohS%FX72H43-B*I;PBn*)fO!oAk8%Hsv*hpod*A5
z)yo=IGWCiKyxqdx1^S0nIlNE<MYncMwSJ3+Vs&dE>bwSK=z8`+EOT4GXUouG!J0#r
zYnh{Qko}1^w850lB`(=t!@t6KcmiVZiI~x8QnmNUO|c!Jhr7myJn24V(+5+^=*FTB
zrIO=2EYVj06d0dF@Q9`N=&1YCM<+o5I)cBgYrz#7${9dFG#f^mez;kYP_Q#43?alq
z`G&6Xr;F`&h&gGAd&M(jWb9*dgOfO*0<GlXr^iI!=Q?Z{Ni<KUbG-!Fz~f#De><Yz
ziO#<ji1dY2yR;p<Rk;eQ2_?tV=}jC%SyQ4SOU9jTWVT#8OPx(Vk9Cfb#k!m|D>+ds
zf+NJ{F#%Q<Lt<A3q8h;;{&nQjo1q8s@2JMKs%e`z44GCR1cw>!J1{hcyhsMbtpW)*
zBeV$nDiwe&d?fh03WnlUju=_<8fVoQ!)$B~*%^w6sy7DHHuI++KhasrVf<=Tbtzl0
zl{}=ACk1n_zxHE;5pk0TVi(3d0Evcs@3-zoabO73J2d7E?)(vMO4-)eS(<@AAP$gV
z)vT$3S}>PkJJe*pz$QKbo7b`H1n#@HZne_I%!NTtnx7Z6)BoyMc}V-!0v8P42F188
zcEo^S+xx>-pm;BxEF%5=l@bLS<j%~`Q^kM4yviq58}~O8#Vy5ShHEk)iM^OqA(kh!
z3v{pVDO_l%gPpR{9gpx`@)0Bfkv>3O_)*s^Z)(rZSNsd{NHv0*i#=#7;s0W;I8{k&
zYDjyTmw#2CrOI#ON{Q&@F}OF`iQ+-7?M1Gbk~C5dWAT9@fN~t3z{2%Y{0#!52J{p#
zE0Xzg2h0O!OrI-rO&Q=r?>UUwK4&~yx&=HDi~;CF`ZksF^V21a*QhcYH=HPdfD0%2
z+`zuNg2~NczJGvyFScLb<03~^zXbw}2wBL1i>hi6dNILN`AAwCi2#`EH4GKWMNiW3
zb}|q72FT^dsF5=UAF2Roy5p%&n_Jm6&}0IBsCM!m4>`)u#}Ge)Ibz3>7>eMdVme#D
z7BX>zTp-lTaNuL)f$AFPlrdL6K~ZG71mqcM_3-)_WJ@WulA#n(OdtT(;h~`(mc*{I
zI_N<4(9i&QuRuf&VgE{nJ&I^FRJIaiAM0d!`fQD2O2Qj5Igw1O-sni0%0-iKf+La<
z$M5`CGSCJz8VQL*&oCee=?GA`k}$S8Oe)Q@m<UKe{lN?p%Z4#yt-O<SB_X}0vA*sS
zgNpQyO|;_?lqR(ZuMtO~L51Rm$~jQ2Sb=t*2%_GcZ%QMXyxx*RO3zCTvQJ$Vd@4HS
z*b=`%AuM{?Z{8l;f`Gu5d!9fQka6-(22%`2Xc@f>k9&@f8lH-fCMs!>D88p(n(W2J
z<TGVOG+q#^l5weOlc_AoUDFut1zUkdj}*z+4{X(*54Nc!N6ye$(9};z_iv;7ii}pk
zmZ-w`F}n#0w{iVp^*2#@K)+q+(o!2gtJ=cZ%C1!3iOIQ0!r(xTXCYFxr1Ps}(?*Ic
zyyxhdh$lTz8i9wjSV87=27&kuXS~JRyQT(`B6>G+r=Vlp@kc^^XOTl!M&zU!BZ9S9
z>j>A2QBh==(PPw$l&EsDJ_BzEqFW#-wo}MP{mJw?x%)aE;yz;K+*LD?ijId0CGsj&
zMSuTMvO^RvN3oaZCW5EgSsOz;k=RfxffnCTZs<KS1ge;%hVbN^)rp|3MA-rJCpxoa
zNGWHXXnX0Smfy|rg?3SeB+5~SZZC6}aPUZHC-5vN$rRbgh#Xre#t*1`GoJ9e|5be)
z<F)_~`WUXqhgJ<kr4DK{y<2&S4s;cKtrYd1qF>I7fHbreu%6S5^b)Bjku{dTuYRzq
z_dLGaXIt2h2Mf4ktJA=MYJ*H>X2mt=UH({O>CtHGdbxSu2?{c3q4kCbMo&6R23sIW
zj2r<5^bmRc!(oZK;=meFoEHelP(%ws{f5i{7<<6fex)^v>Qm#lHo;I-@tx6{#<m9i
z5$f1d>e9_~dF#u>mspUNP{lMz!Q1dsUS)qW%F7p~cFHz+K`W1k&J%@eNk9quqM`Tt
z$Zob1qCsE@wSg)$<faxGg^{<=4*7QQn3uQ)*65Pd3whW!xGKFzbKM8bK|Pgm0+luP
zS7<CET^k(z(CMtq&xCV;Y^9-l7BKZQfUTxezD;M$k4Hsk3LV#;2c_C7?M82Dj2<AR
zJ))+r+3s>T9o}Em&Y%br$wKPOw29%>1;$;iO|49{o{<@Yyvc0gBL;7i`_)F?h!rYr
zO??|Sv`qAki9^qmFrtnIj$Rz$Ri_QFgI$#fR$7(pcNAyI6OCKN)kyxkCNr2uHf$+a
zQ0cFYkB9o{Y)jZ>vOF7awloGUX^+Zidz+tO%T+9C+B|ie&UG>-HS)gblplAoVdyao
z@y3WS&d1@%yX){xmSKjOK+2_I9{TP=MmFfCH3*_{O-AhF84$oy;>@ww`e%kHUY>Ax
zO-k5gWO90IW4>nPT9M1f-ayY0WOm(E@T#qLuid#yn0!+DrL|6yB|wj48r;w(fPU&7
zm1s_J&LrGGPmTuNd@ja3)Ka$Fo^VIdm{8%}7T_1z`O5KUt_aA&&f+4tq3}Dcgkxu<
zsPOf_;a4N>@P}3@(JtYDZ2lTTuHU=cspopG@he%Id>v^c5tyc+Pz#tSA<RI6KD$W7
zZc(ya1T?Ay1riz&`=vM{#Qyq!0VWuWWfT>*r&t12sR}M4pI~99JDvQ!J(PvHrvv%j
zz+cW7-O5_i*CVsVJe7F7?}SJkG}}W(1r;03<I*<`*sm0M%!O1qkrGzHSv9ogX?Nz?
zV)~4AtMv$M5^e)>F+Me>EYTix8Cto@q2&JIxYeX*tz8U>^Xw}zp#7B37m&vO2LL%h
z#=nS5PF2gs0;?obnohzIjKza(8n_55%_0`DKlq{hq@i@xnNfU)VZn%~%vYRFd6)mk
z*xKYx)KgXuEVm(YV2+Q4!8w={d<&7XqT#VPeiU7PeLAx^w}vcylveei3X7ju{|FI3
z0)maOay|hzQuf-m!+Wgxn+45pm$*%}Rjpczxo8x`iBVoa#ux`3cTEI?uYu-4M-gc#
zn^^4DSb?oJvZ;w``1>6CkOui*6wkK^X~HD^UNOz#2aFr-Ae(YFewRpxMZz5Av7aRq
zbPcb-7ild&!~J?-8g{E{PSA!h^tcSrkv(<Xmo*^U$5G$DX^`AY>iZ#Y5tZlF_y#%l
zhzJsp>sDLSR4d;!dBrQoC-%oy2T|qK>;C{D%S{_Y_D1mMv<Ug~Fv$sc>q48!KO+E{
zO+1jl!i1`zQs5B2-~B|<hRvKrTpJMsts)04pfXxH*f{*a#@KvJIW$@`YTPa&(&vPE
z?~*%lz)(P-gymUqlYjr|?LW%&W+Qy(f%-h8{Cnd4PQ&pYXEb79w{C}*cCYo(=r#T!
z_Mu}0r(kO|0>aMlHFk_nMb8dFK!<pF$U)w)4j6{9h)=^R7#xr8Y*g<nrgZ8?^F0Os
z1ER%T`zA~6RvVSAO8V2!cwGR-9AJDw)WH;cj*pH*q4P$su?jSl>5T)GCEEZ~rUNjn
zzC-f95uoD+`Q=yq|6&1pJx#_>jW*-wYnj9t-n(h+SEKp^_M|;Ddv@o-Y+Vapbvm41
zSH}I4ooOknep8Lhl1^Csdr3^Yoyxw_>+GT`wRvw7JH;+36kbMBr%zQtLAb6yZN>rC
z@w<Wr$6WgAD7`$q=S6t=GCY&Gz3ty!$7a_`PcQFcWfdnSb^PvrYr|>`^UAQ+zc6%q
z0Oy;x?zY<k+4bE^x!V2hfke%EOUjm8E%!a$;s0ONs_iNl$qWSiFO$u*@wSgRb5kWn
zQF?6hhLmNg%32+i;@*P1i;~?@P<Iu9E3vW#PA}4`vuR5MD^V4wO)ydw@2M$=cxyMl
zC@F3g=qhNsN~RW^peKX66k7SzxDJkTY`GNL;;CmH#L7YLas=0)o&HdD(?dorny7Hg
zVJ#^!Y5`*HOcd9|abNwmt0&=0cP<Y2mqV)*`Bu3(z0g;@eMH@omtAO_(W9#evYxxr
zLX>Ik`jLkc%d9&?sc15x$a85H$p6O{#zyM8Vp!dA-crY*_IO@9pS@`|Wsy4B18wy)
zR@6dIaGAGtPN*}2M26iRR?6jza^ya6*LT^qJ|lb!c^u-^BFUM&|K^nZf&3txi!BNo
z?7<uUguUg$-=~5-Kc*9ww&G<|{FsoOuwmjEzRWBX%^Rs;rs{qWLS@)#1&aD64R>Ov
z|8?@yVHwzx;ot~kXRbvKugQ$X%3LBO@IM`%EQ4LlA*DGL*z|Ks101E`d!mI{8hNzy
z14xhu!G(I8j(y$w&F&ffi{WK1lP7OZ-u(R2PIbIA{tHu1kKg_&A6&eJr~^&NyOXz4
z_Dm*@yu>4sm)AcjGLR~FF6Chi)@5hx#+e;<;Kr_gY7&D9u(()C4(8I!i?8Lk$~55#
zAR+@38-?g48;O^+sR}h+!lreudJquM9Km*&2f+(<*1dY6jDUvkYrh>WAhFyD9wLOB
zUaQ+L;C!bSUByCL>8p7W)m(6$a_?<x<$jm?uRJJUfbb$V{3gE)qof{6Xpi?s<QHF5
zuexA*acx~7-P#cDh#O?|{T6JcO5}c!-*Fc`y-?3Zt)gJKATbjTMg+wN1Toq`V>F;j
zad92M+TgeXv>Y0*LQ}6)C9uV{8Vb1Yt6S=N#RUPya+@nzX$P9Pv5qda!J`DKgpMkx
z@1}*S)`+5$_AGIn#q1bF;Kg6E6PLX3KuN}2OiQDbM_NM75L!iP*F8vFrm+8xKB?6@
zt72GHT;&vaBR$i=tSZ}b(2BCHQ~x5G4~SAX;T=#o{?D2h-&S|gRA&ItRxB<_%U{h5
z9(BNZ5l(#psMNQE%h}W9k+tIhh<xc-Ht<yYNqK9C7w|hIK{xD?lR6+9r|+u+<C*Mg
zWY-WFtxmUpQ69yraIB{cn=a<|*moY21tb>dU_qA8Kr~iNs8)>GrWyJPYf?ENCpFdM
zYQa_8X1jWc<GQ-wI_(qd-9oX<ZfWY_U$q_q-||-9d4_$t_$rH?#F33=Udi`L_lDwi
zuksD(fHlzw#<S%BbYJcSMv6!5t_#y>4=(!MzrmLKt!p_*-jBHYdI$Bza**zvK5RB1
z?WUibsMGAt2>6~Qc>D1boC{<Z503kUC2&@`RfSz%e<J|kt+au>z-o0t8(#%}cl_=x
zN$~Z2>vC}0>i|jcLgWM9AB2rUu*Q(L<lsf#1lFp;;mabnl_y74c_qJ=ZxbmCbcN(s
z{lQ%yF9fi=9e!W+3i&R$i3E`@#X%E-H-YCgMM-DZ{uZKM{9ni*{DZ<L;{z0yy29w<
z%k{6AvVoT6eL^<R>GE@#>tRua#riI)pUSk-Jt`<0pljC9ylpSc1L3tz8}IBk`z;~M
z%Jx<tMwKsAEXNBcObPQG6e+=KaIrJfmz>Lu1p5!!c%##|%5?sQ<2OJMuSjB1s(MQc
zyGa=Q3Oswivp91<5^5fSSiv^lOZ(O07g}VZW=~F<$3&Ee@V1Hn>F&$B+DMXp|DR7$
zo;gEHSYW{Jo*ujHIV`fxYqkftm*?xFQ%D7rkyIL$1ZH0M`|K~4Tq2i}N`hYQ)tqr7
zRc2N$k&zLR5x?M+0N*@+@ejQPRvV+IPn(H$g;A)h$(uLHx36XuSV=a%ynU-Vk}l)U
zaMKQu+fx1wqm~+aOHRQnHK3=jlb{~Y1iWCBtnqjy9hiywmA6Bk+lLBt9IRe7=k~qu
zS1{OQwW&SC;PKiUJk|v-MtG9R7vQ~c;$LOMjv8Y3LZJE?N~$bOei<^pwhr~JG~AF}
zoa|<RClQoM-XvRJe_grl_hS3ry%q{O$8bt2y7yiCsDnuZb`XO-#ClzlH87dXW&<m*
zKp&Z$-ycHHxA)qo%CPXM{&sfPA)G&>9?>N@4nZ5jEVt!O99B#p4hH>P61zQccu)0S
z^gC~Wni9TfN419_`0+B5-S0J)mgCE42wwkOTwV$nM~B-+EE|;ugBkV=0vp1!&K|4o
zA@M5Qm!DglFDVnj7p?&^@A0p+_Y({154<{h1;2ZI$SMdGg)hj|2gp-#M>;<B@gxTd
z6~$E0LqlC2h;D57@-IvmzwjMAS?BR09ws|a`}uzqh7B(3x?UqSYu4i4O5CIe(!|{o
z)@jXEZFfL1y4?cu?-pY<LrO&DiE{baaM}l%Rann0CCGN*XOuio_c{mLKLZJ(@`Z^H
z)Z+%~y5oL&pN;iK-~n~0eTu+Z;eIyFEWIVq#6J3PBJ4Y|LFa~pys@Emc*O)}P~c<9
zo=KMF5Rhu+Rs88-BHc^ZEFXYVm29rJ&!55i+-@c)^xmc8Ub%+T1QU7D*Jk}S+Q<x@
zLv^-fJG}83K?u*OTn(gPFpoR<-XcKLyD@4Xbn}y<LM<ENL9Qpq)3N$Hp=l<}aBUOu
zZ1&3jkH{&bv~<8vSCydz-DeqVgJWFRll=)n&<s)}pqH}74ltF3^3gcJ;;YHV+Gb*o
zYkcDx=w01HW#ds68Pj7~bBq3qH7Sq8n&Cz8Q!*+D`weA%S?BrM3;3_O{jv|fUi${Q
zfHi)p?#MF#So;?Df!SS=BL7_5+#r|IK0eDLB@i$u!GFb%&s_hgCyMM*zus&B3v4AT
zgNbXC_~jR%K2)QCVz%aGXb80>1?9yMPOP`C3y5dJUYjuHKUq>#syJSXKxHCY$`SOg
z$8IcCzn4w2@gN^k8)ObAM0-R4L@KXn%p|HKkK=yYovnujdWAk|<b2FkD)4hvK*tRO
z#?P<S%QA%jZ>gnG)D($@;ZO-^w_EfR!;q#350&+vEIAYnFsU?3v=r|iAJiC(9E(Vu
zu<>PMV`D4Qd6j_x@Amq<WFlh6q?Mbj|IXvEq1|Q_s99WIZfuZ<+Bg%rAUcQJ|LgcP
z`R=>q+t~UT79E7(1n0=>@GPhTB7s%Uds)iROlJKx`Tqf{9(2?VA3)Vl50lK?2wK*&
z33*U5<3om?Dt@d^rp5qo;B8|d{aj{at2rV(TPxW{4%5rOB<&XBz7=$;jMFPPw63f3
zh*a#jhI0t7Hdlhx3f5Xmje8)2?6qUw*bA)%3(%eO<KxcR`{UE|*jik6VyoeUqwW>h
zB$1(B1_A$vGocXWKxkMeI7(8~?>Og2LdHVfmTExdwJY$n%_+B_l{?mxA0lso=O6)~
z_sBTJ5`9t~^{3@l3}Ph9Wl@xwwpXd%7#+;TWze2FUUW@o`{-wDGzbuNsEFR)2j`7o
z@mq<F*s1C&FQIM)*YM!@$5-*qBC5HHBMw79oN4QdlaZ<F24;~bcsA@RL^aUrwa+~N
zaGjRdHR3MIe31834*f?LCo<O4&TT39&OU)+s=KfOkV+^QaZ{`s&OC-?HlC1q#!ex*
zBQ-nI3u4RryU3c|Ptvi9^)v}_hN#n}J<Ye+b!okh%<u9;bi3+jMjW@odm@E*Ym}FD
zj|$F8z`UNcHigM}`~0bzZS1seQ#Q$xvlI-IQ*-vR#o8RaS+AutlCqIoB!Z2sk;5@{
zYCSX+xYBIP6<zH*D9zG5eN|61vTq8c*QzRRhiX@I`W<YKdOI>^$6-dH)mCQthx=!T
z+vmIQJ&s@RjESEM&TP6<ki4Nr(UXO4hm}9<zV6QNchpskyT*v*s+H3V6(#5ri7`>s
zqnV%?Y4uouh{En@O7b>?+X{<$)`Aj9!SEXO7GSPvjw#vj1r+@e#FYK_p-&k10rFUZ
zqse@hxRJC0p}(6mE6!{}SKRM!l#kl>(cbZ4=WPG~w3B~@Ke;%+70hao4NCO<=BrF~
z6mc)fHtM(P9l)A8Fm*cTBW(zxh%JKr#NL`b4M(yzuOVk}^JsCqcZ*(9r2?x*gPB~6
z7<KAlUQ92IZA};lSA3%$-q|llw{^7dd1hVxnM0nT!O(8eW`%tB43F8XDGE#CP+zZ7
zMg&<9!-$hvKx4Cb5L<~5OzATJlJ$(y$Fi~CQK4C$%Ln{U4&Z;nF*Y0f#6Re&R#lm>
zV{ygx2K~qbuNpj0fczF}8T*$qaU_q7;kHQxmXQjWJRL1ZD#HaPMh!qzK8w7hAS!n=
z<+(uy?v!Dv(LtR+ywR@@SbZ_RPwuk-QYASnSTk0=QU-0u@Ja<kuvhKdR0n6cB0Fig
z71XMe#Vwv>bbf-YN}0+hwXK+FwG;~y2f&||2kE~M0$9UdWP{P<-eKYP9Dq*ay<(us
zSMP3Uxs45KQbJe^jU9AN%A!)f@XCUh5%s(*9ry2pbL0Wk<$DFFOKR&F@FeanRi|#l
z+`5u`p&{5Mg3T+5AE`guTohyhKa#|PG_N5W!_V@vv}nQl9L!*v_^D!?`U9jx;)bFe
zC*wnjk-Hh*bVZT?hKXM>*#dhcy3Kf%g^f*baA41AU$27i4ia%gn0GYQSc!#p{rst}
zcRs~&<g0M{Dy)#NLo1{|9}C$$<?Bqvm=d_av_(vZVh(Cq;$rJsZHKGB4vvkR(FlY)
zfHiuXn<UPF4rk1CFj6T~l60=kP1~rG^W(kaMlk~3UiQ}}SvqLGOmx!o&8N~7kQ{zE
zJGX~}YCyO1gEpLBWS0fVG8^mvT>pp8_QZYUsVq6a19UgjjoXy3tI|Il^)A&6nkG}q
zK~F7_a0F+C+RvQmg%1QY*6X$ybwSRJ@<%EY^Z`xKcUzZLCkXlzE7AJ2efHt-1hdk0
z=-W~I-SPSUHvW(_^2t|t6N}&v*a|4|7$2b<o4~1tnN|%*gl0S!*>!r0h_aNLH=W2_
zH)x6MQv!@)Xd6;VY09iS9b+P|J6d!~tcxp~qoGwLzA5^6q14YW#wo~j`X-}kmU?r2
zV|~+^%Tir6r^)4X$k~K&9)$CKC%w2BXSeuguhBGMSF0vtjk8{~4k&E$%&6rhHX%aG
z6F%8W-PCkgW)mPg9w#z^Qkj6!twLYGkZe21Qi`|a=&<G14qirSTNE~jODw(c^2Tw&
z5$=2bsN_`(K2rjUl}_sQuNgRXllL$iY|Yy^2EY|b-RsLhPtO&*#g;%Oy_HR^NM9zY
zc1i~w`!bbrPVHiq;91pzeW4lXAf12;!G1A@qGWD6UDCDLqbK^-i*HEdA!<@t@sa^1
zh@O_&<+Puqz1zHt<{GiRWh=D7Q+1u14JUyk0eagQr3y&z0ytcb2*8ee4Gk<E;?Bd6
zZR~*B!_zVBMI|oNRzT*1*MqY9{t(`q!p`cVIaKjKrI2wdD(It`uDqlfa}jw}f^LwH
z#~c!AlNIq8hY2}qR%f-&@l4)Sfi>comPo2d82ZjHypcz8$uTFHruFdpiq9!2C|Eg)
zI<U6sH(cqQ5WGKU-`QAVk(zs>;(fjjgRPNmsxv8cC?6VPX^(h@_LYY6MXV#^OC|zU
z(|$7+no)gSw{Oz2Brwx0rJ9>CSryiAJ&mx_l8J@5MxQ-A?Ox(igbrOn4^Q;uL`P1A
zdbQWy`CwB3UyjE4aB|rwCvg0XTghK-TJlNq_nyvU_g}-mf;4f{vEH2M3v1>u#8bxO
z07(aW2?X%njJog~o#9=w>Ed{tDun){E47lm`D*64W{vIR-?w_m5a2(bUjCiN7NvoF
z){tAmUzTYY<59YisnDy~#pOW4$%FI@dPz4!p;Lri=}#=53%=kp+gIk^jtc~E_H`39
zIF#Rr4jB;`Jt`=9q~93HgXlz)`*6kXes^r#2M6tU+XtPK?bGeU_IZ0Lqe*PZ^o7v>
z{;+?FA#J=mpjw^nAH7@DN5wi%$8>sY8RF_h@VqTyDZkUT;fqV%!a$}?4YsL|pFc%x
zWMSkTulAeQ`YoQlW>}c}54jBUO;!sjuF4_&R7pjcA$$MretS>Mb2UpuA0A<qa+#ez
z=H93vvxp{Yj*k(#LMT6aj$Yu5C!S!m?ClK?6$tgLjiuT@MO~fhI69dOU5M?k%(=L4
zu#aQVeDIuJQ&@DMFklEA<B!0(V5A1!7(PKUgtlJKoa}i2MShBUe_w%sKSq18($CeE
z9IJV{F$_#3*NlE?0HnAFXjYT1t*pQ~nBck*5nQeYmQzYpjF^Pl`7P^&j({HVJ6GXa
zMQP^~zF3fWXB_U;B~rsBNLxCfkBX2u(ZV(&*HTf4)46;>16HEY<cei)D4~i7`l6@N
zX_apc!!OVh-7)z194ldp%X5B^mJ@|_raZ`B8`#rmG4Hy!s(UJMD$+nrljzFKUTQ~&
zx|mukVnS+GsTx@)9bd)5%mWcv{qBiWNQ&yO>Y^roszkHF>*S}eH~!iAfwJtlQjQl6
z<4ew6%`(bjU=C%pzvFap{*Q}$+P-8m@{e4Hih@~_Pygk7d&y37%Cg5lE)TpaXXwFA
zc#HAiKI!`i)!sv!3&8-`@F~`z`jX<eG%}<0;{CRji59Xl&)E_fW@<<1?FvVJz8q&6
z-NRVjtQqVg@i0&Vdec!OvM2pU=DifOMAtkLzM6|H(SeH7|HlGDIuP)K0`kc!p!0Q5
zIIH7qf|fXz6i7fXq<K<Vrff5q9jIRvHyW;Nu%4g@KsA+oxV9<V*DV=bgVG0hX<@+I
zm<(;8qyF1HwSANXC-hAP0?vpX)WH?xtHaSZr5tPuv(!aPN$%^wcGlG^3EVEYPN3j4
zj`r(>im|L}SIuz|73$VAi=?9rNyL*&W4g**zb`YTk{9FMY>I}eUS6V+$*JKx+MpCe
zVwRlPh{MH0m8AV63`X8RJIBI8j$icF`9M=%Y&!UQNsf`!Bu)sD41`?(IzZ~RzNMwr
zQ#gc8C>k*laOA0MfNcb^CR)iL!k7(-up))}c{F$HEP}^x57OFawH`k#9=`NHY#;3J
zIojLy!Mo$r{qy&S4_<$@=J_yihz#i9hUwr&s>?UwO3zlAZ$9buL!LfwCEU5csnDVE
z^M@ELVk@$^{lW<}LCc{~HAJ{J{$NX1@ExVZgqzYeIh<vg%f#6jF1Z`C<slqzw=KpQ
zcWjsr3oe8(JREx4yqZr`vYFxVx8NbSiDew_6MBEa?=K{I7hxx8axg3r>A0HCi%(U4
zB5E!p#zXu>SP_0)=Yd~?4Tp^`xSPT%3vkW=-#H*v#PHFDtYEe8Lf3*|p-$NzW+cN4
zp2;L*W65NEFRrgstxf2bI6g%>4m)DcVnWD5(s_-uIJBfmz(YG7?{d6cj_Iv<b?m7-
zBts4;3_b_-F;yz28MbfkzyT_wdrY#^D;}RA+U$RGmU&j;2Cu(90sob3fL>}hn`dK>
zi~KXh^qQJINeTLK{4}oXy#09Y;<L}>7{-QKM}w`R>}bGpL1ZnLmM^sr6aB`ZEX!C)
zBg^M5Sp@M?<JIXO80?Rxg##tXh(S5gDcaAVb!o^l4IO4GR72=2-AP3Uhy)`*FK5F~
zp3Owb#M7~cr62<7qSSM<sqaw1el1Z4Lj!w7LY3qIfkiNc(tz4cM?Gt2P6TW%DR%~M
zG;#}!XDt-xe?8NvDTkppx5}wY7FLEz=QlF(g(n`qYkV8MBh#O{d%1d(9G{&p?Q@Cn
zpSwHJEw4YbJT610Nj2i{ss|jvW|FD$;Q09a4=3>+%)+Xy?n&^TqvP}U0X(N$uhMcE
zwNA!3ddolX*ghBPfpcwhkFd~>V2JZ(G{mYjN7yTW!?G#)?m8nR;5!3$qD>OkyUV!S
z#kVR5Qe@a3U^Qc27w*?l^;s{BQ=7MQRfCUUaW<buqY}%L*7RoYeLMMuaXs6+@TI9j
z6(dH2%Hf0~N2g_W7vi9EGs~QwCFc3e*A|E!%4IO&AO|?Rsc<WNZPeA=8f8sF`(o(p
z6Q!DP^T?ChJrvXpE#7bpie9E%<P;X$NgHT78XQEswwGUJaPE<Xuctg}O2(_5XA+;s
zkL!5n3XRnPtU`~7;?8<QSX69EG3|JTIk9fe17Wx}pS1*i&Fp;*JvFI3%CLUvj%rO<
zWy_lF2z5xbbCH&Lmz*(mJ~PIza?-x9B6Br9Z3MhEq1uR5_S`9FD8}h6W@E)B^fSc%
z*BPe0iBy+v{&+1XLi)8{zV@{tM6YsEywhg}-#}NOOg+;e2c_?Yp!0fkHK;LjO$=qp
zq1EctxHB9Tbm=D++BkGp==2r7Kl+yarsvOGNgY26Z6y*Tg*>oh6x2A{v!0MZ{M_-4
z_=Mam=di)Jz_UT3%`8U5p3oP{$ger*lPs=kxO^`wo>w#At2O1QKz`b(GN<5RpZJ*8
z^GBqStJpn+HoW#SrF$jZDs=av+_4KZR{4#jI=-FU-zRVa8QB5moEU?K;+P*&2weP$
z@{Fi}gAR|*-;dw}!_%X_UXBul-p<?O4@Y|oxS|O|hli|B82D20bn)EJ&W}%)Q;3s!
zXtHs1_Yhgz$q{%KM-UcR!I9rbtz=c1Ruu$l*|%RwJcuHj_LoB*enxmy5?6=N6)Eb1
z-D~=(y~pSgz%uhAiw#aUr`Bp<u%6{{5u!zlrwr&8#0;IX>sC3LUS6&zZ*%t9Dzy8)
zbnlu#KT5_A6u~)_xU*{asZm+b>6pt^C4dA0QTxx#Al7sz7=RwVNlS!ZgcZa)@zSK)
z(x?Ca9)UMy+L?YeQC!+dEQH;EsSB(TI+!Ou*es*`GfAE;T_qt+2xW6>omgYPCpxii
z8{fYq6xghfUX|`!8f-fD<@=_64KYkgReCw?x5BsbdVEzTf3@%atF7MPto1tJA?;44
zEXnmS!shZ`4zcO>Sv#JKke<l<;i-LFbolR!J6y1q<H4w;E;DRS?+SC#&(>gKs^&RO
zHrCXBio8q7g>-}s*Zz}@3taXrr_+a0rr7*@ya47sW#NhM9B@@Y#~IH#Wy)eX?<=H2
zJjTk*P?;h+>gR0xzpKj1(4r^i`p9UrNOe+MI-_G`d-r`?WuX=)phyyKe|5q=d=OR<
zV_5b*Z7wMM%8sU=yh$3sNShIt!3y||;9#_n<|>_bJv;W|aOEz$RHuN;tirzIc_A58
z*|(g2G<Cu+^fEI;f8K$|I*8=r9uq{3<M}~a$w<B-kGvr25i#Q;#SGKAF{$Y+U?xzu
zg5MoMM;<&CEjkx1wg>2QJ<dkJ!qxfidR>Q3wY5oxB_{r@LSS2tY)E$)NlPN#cK3SG
z5x|1BNN~`=MPcT^dX_0xLn2ni1q87_cF$=_?lE6gsHbYDAg5_yf(h+OS36mX+w1<H
zguzJBc5}8wOG%s0mdg~QMu8ck7swOi)cS3Pu5WxaJD}SX6)7AGy;#VaH@{E6F1`#-
zYBjqY5yQjYduq1*!%64l`}WU>fzrDU(hz($>@LzodpD+_WJ7{$KS9Lxpgr}_$-qDu
zlvC(F`zCHUSJ|?E*}c5U!zYJ($?Blzyk)k!l!B<4$J8U#YHYEge9_MSyQ2?>$?Evy
zi%+5mer+W;s_4##x1B>w(`WQH?q6s3{3q-q0k^&uKVpPuqbV*Qb(xSk&ff$&1s|fs
z=*@7r4NPG-k{6|p3ArLniFCj4gpA%KIQphgFSUmLapMy_7=PU4|7`Jpo_}&yQ;|u8
z_)gBgH&aL5Vlfhau10c&V;r}MO-8MA3E1QYP+#c~ll$a4cajrWI}W8#5&8C<OWRR-
z)6q?IunE_eLv>--!b@k>k*78K-1ZS93wsCMK0VvUzd+u;R?$Up90{RZ%?DrPU`ch6
z!}Sa&;wuxi+mgx;y#0wg@k&^$U@1Wl#8ndfDSLn)yyQ(*>FV5EW{Vq1mqEGyPx#q;
z4;%d21E4kY+Pm%mm3GqUr11GKSJc)Dyb{Gyo!)f-)uK3~?up*HvIqq=P%)E>DWS%z
zFHra1v&RG!ix`|2x#wAsKU7I-HT-PwQ|~g?OjcSVn+4jS`DrELaP_+4f9Kri>7sIR
ztBl1BRamb8D3JkOh)dcT<PlV&1HF}OZfw1XlL}H4mM%JYYDJdVr<aFb_5B%1pkiH}
zMe^3jorDF#e;#4{tZOOH;?DWu3D7LoTFBK*$h-`2qvTxZ#qRNmYIT;bWcH12pmUK=
zN}i`CQ62yJXP7IVA5M9I(#FCwCFBU)CslZLkI><VCVcUGst*m0CFWhu3lpA1ZpB9#
zq8bkp%fbH6A_H+xGC1`%kTrX~Y(~ysKCEzz;&qPBAdX~ic=Ye92D1DWl=WIvioR@q
z5>4pB%qQvjmMZKZ^v>5q0=a|yRvaf5U-lqDo)AI)dy*xHX792|a<sok3Cc&KaWNXx
zRhSB!C%wv%TuH}br&lV{p(4np*0#i}g+fM!vu+2fZt0&JLnm60T*gd|I*8`W@|+Jx
zXCF>Zj!)0qd!6>d!T!nl{%&XY12nNf%A*>)Sxt)`lmi?EbFMH1_!0q|Fu(-Cj4!|i
zmUf(eD7Tmi@ZKh!oy=XM=|w;9;(%Q+RjJiW=CX+<#EyDQIoSNESk9wuMH(4AI+UGx
zI3?=2+g+5=x|-*Y%ELhC$wFwHUeZ911R}e<+hoci#3STYNd`*wfbIifnq*trzEiFv
z9v2Z^nNOyKCebobHkasSmG*i$qX?Qbo=!`4Wl{AUXUQ3vk?{Q|m|MC`*t|3yS0oZ4
zW%fn#RFJ@{>N)tT-?#W1_SW+I?7pqWWNw+WF9;-<V{XH;fI-QIx+&*zgceGIBgDN_
zM*F9%46e$kY!3d9Td^NKd&F`ob9=W!W0u}O!id3{)Lr|c%!Phr8Hl)L!;dU=RjX7f
zOF2(=%#+`Yn`>zs#><g}3ovoDv~pU4C6==hEVZ13V9Dh?#KaK%#ZF31>HC56rcXfj
z7Lr9f=Rcpw128n-;lDlt*$dQ(#~<@gTEYo{$A<Lub+U7WA%-f=0shvE+T=7j<A-RL
zfbO<f_x9;KVins2MnbQ&Bbg)mDU%a^JO@@BEF2CQNJPMIF7iI1jUvJzL5G;cXv$sW
zFz=3wvbdc1$x_Qn+P!H>gfO~)AE~4#C}F~>NHV~rQ22@i4KFVnN*Op3<g)>yEEfjs
zKv^GEN9ehqsPx&~X|1%hMW%U+r+K4dnybp|Ws#R7@e5#S3QngmHr2nBO=Hx-)TIHu
z;-BA`@=(`?-hf9s(%hs&mM7B9%2wQHjj2?7-W=5s&KAv=qyM^b1SB*=H%2Z55hiaT
zNU3s!zDk543!_N!2##YZXb|}iXYJ0}{=4micZ65(^y<bpSkHWoB1rKLr+%0bk7wOI
zI&Z`ckE9rNQPQ~@V_<bZONWh%>17Kkjb_(RNsjmDPocF1uLVOP4&=8EyxixK9*>;s
z!S;Zwhy-)Rgf|QkWufX)zz1mp0_sdu#`?Nf3i4H)X$d_t@jl;pWx~wI43fTQEq-k7
zU=U>)yChj7ctn*Df!vaH-r&1ycubB@lUP&8|0*tDOrbD9<PWfY&Wl9a8a60PlW+EQ
zoO3FcsfFw5o0W0<IZ3Ue=5c)QhWl2}X?8(5;K66S*TGfXTHXmy<9qtlAKL%CL;sP^
z^T?VH*}&#gn-9Rr<zRabQ37thN}fLb9NXu#N*f{RKYco?qWVxc_WGB5{R4^eVz_mY
z4;$e#qIOr{cvP#OtCs%s(@!tSPj*<`(UR9x)KUAE?f8oLZ2k5+Eng-dH%Tp*t?Xjk
z=P(|alaE{Un14Hhj(pNJgv_WEZ`lSJTA)5VeKI5-_J*Bgbqy|-<dZV%Uq)$@=-_Dk
z5JNN3!bVz#w@d<J!zY{Qb8S$YQ%sr@stQ_WDy=~+QCHBECLFS2S6GiKJy*=z{cib~
z6AXktEQa?3gclcA@>Papmli3&ETR*TErv+yo^i+!glwhJ`}pEhliU_Y!TOhmGm(U+
zfVH8w)xhe50P6`xM83asL{Qy8L=3G!b|Kh>EiI(O2r!K?E+yFnlR=o_PIO6292t4M
zv&<2Z3-I&c@b%?n3H;QQC-Ada4ExBF<++q{p2eQm!2SL}?)f<B3B!GB&m_X^#_6vF
z?Z$#<Ko9%q&y#&oeoMG!>ehzbU4vf#@=Ky?ejs23Q*kAlniEc{TFIt@;ESbS??iR{
zZm)+~8_uuvHXo*a(d7{y;5GW!a4@7+n=3hQu{hAL8qiXz74-ChZY(vU{6U_`Ls^Fu
z)EqQLZ)4Qaj!k`0w<?@`zf`GQD0+~iVNLMKkkWVkYZlP^?{znCVhZVo-n9-^O?Cv+
zxxV+VOBJrV{@a*G=W*ByA4cJVNx}ecDmRV~rHo~9bLRWnI#=m)ueE1ME}o-o<*;f6
zFK$%077OGW?fg7DbTJH3{0tP)Z-F?2h8})$cD}v)edqXXgW`fw%4|Z5H;&w89wn=I
zF7c19r!D<d<zrea91%A46<;P92mwxI!@#8Imx%g>k>-r9I@ED7D8<0U&_s2xEJaMH
z$?fqqg&H-hHmW{0WcJ!@*@-=o{dtCO;^xBl!=4aYoKV?@eRZ49g4f7ET@fJs3N`1N
zBF}E}5ygsWfs|49?<9xw#S!rq%8e}Eg7O`{1gXJ&(Gj$XNcDL88JZtShXne;Aq9G3
zU%Z-su&039@<4aq5^U)ud}?EciTKVmJPykuyW1*Xj(Y7-#MhFo?j|PGM^e2QQf92i
zn|P8Jq;f`IwB;52;tgkbk)=_!&$oKEYy;~%zBBqW)AU+xc15G?XPnM@5Db=Iqf_tx
z+x^|`^EP35w$IKrzs6pKcj@@4V_K`;&e&bICX&tPP*jLb*-BKNz>AO1-tYa$1ATDf
zzdFO`ut;{dX+bULnAP{<QpF8uVmGd2wNK*cq}Mi_&sehAN34IqRs_s29;biG)_|H5
zHTa0aQh7JgCzXldhDkwd>S&y$1K`~THjWWQDa&t*<zP6j<54l%l<)FVX!WBulH-42
zizw5SvcN+DV-rwslXhLXkTudY%c{=mtv)1Q4M<$r_mk81_TkP!dwz=Ls<^>0_m9)z
z8W#$`#W?mr5YvM}kJN)>2Oqd<FeO{ymF{P-Pa=1Kt95jlg}aTvQ6fc>Z+CZQbUC0Q
zkk5t)zwgX{%S|*=kCq-`ICD5fbTGVaSagf5f{$V646}xAPA_Qb>@V<lQ?gX`a!ajh
zXa9L7$wE=<iSl%I*La8*i{lJ&lX}|rcSYE@=1L8%lb6NRNyqpsKG+y0%`!vwm&sE7
zObnPPxj34T^dm%Z%0GHWB+lt7gKU61h3J7NQ`OJ~NE|9NuY_b1PQ$-Fdzcf%7o8xt
zm%O#~(c~Sx5;%I6L3Qr19*6qvaFj|r`<Ne>=`yGL>DhMVbVq|99>OXo6X!+xh*gj)
z9B!YTE6W3)E+PiB2Sx8kbdbM_G^`(A6-BS5FCXcfBRrspijJDYtBx;3fVyvc#!p}j
z$tsM0R?sUv?x>ds5x5K(rol0|AvYcX-XOdPZnFE5CW8vVvrhYH_tW}_@|R`Sd4=$~
zu(df`V-fq0BqeyWJ~Oq~Aa+Jbtu><dq5kc2zA(YmaufI~9rq}~dr}PYiM)FuXSa0^
z>qMlRJrnSDXsRuPobj8T9T+e|nTW}7mK3H1>DJ-*wrE{>(P`2(Z9=~SaSbXpqZ#LG
zh-Hf`Q?+CnE)g%2vsnB)xlZfkfC#07mry28><FV`C)pRwbBu|RIkI;^U{A1`WqO&3
z9N+nbJ&(ztA)KD65}JJyyD-cJbj?O3H)yUWr`cyjgTq$w;`kb`jd7Ra&Vep>(`jiE
z3&LCTvBFoOes|NMN}gN{21Sp93jA&W#ophg_aXWY?f~*4gPn))e%0N4)RT%98Q;yX
zz<ZBq6j&Tj!eLJ4fW}N4U3Wk(XR(!ji^G?Ow9J|75GrL3!1V-a!eR@j`XoT!aGB<P
zq~W65osJEC0Qu==cKTV~z0QUgh#@ils!Y-edZS=|rIYV>&yv4wCbygGUlWO`a|2jY
zmQkYdt*sZ|SnMYtOMK-&)?cjuV|^1y^_;MGdKwQ(;d|=b<9ykSybzm8Ezp?u*+<kY
z1*jH~sD>*eI4ZM2)xdQ_IC$Wxm>T7JG8vUGpFNut1^kp}lgssDeD&;lGUz`WUv@EL
z`rp(5*3<wD`CIyj!$f-}$4+r0{70WQ)h$@WoZ&6)o+3SRB^nlb-q&eGU_tacQ1&t4
zQt%>R2R(HE8R2ccU0s}%Nj`wWYbAoLPV!r|Bo`U1h`Yswd;#Q*dqW+&dM`wDarZE&
z8(!liSy`?Lu|-?>g*gP;RJQl_Y_c9oiz3GL-OL40IbzufLe2S^qV?x5Ui_mah<pqF
zXQ;!j9pUdHdqEo%Hj?!O_2y-=xv7F<U;`9{eU$d#Em(zkxNZm``Zxdzaps1%X`j%v
z3ce5=r1zRZ<by%h!zesVJxk!Du+p&SO-m<dgg{4Z0y_1rk~ISM?#|QZrgD*8jKjl0
ze){vt`QqGA*;TkY=3hdN7$!6J&3{6cg-*yJtX22^l|%0+BBQSmUV6aM-+>L2b+UhV
z;H>X_E6)OQdjmOU#dN7golU5tLmiEa+!njY$<D8Vp5*7Mc6zw-I{AO@`|`4bj)L9`
zKkIncU&B$Z_`{4h;q~iNGhk8s%)Jdz^-%I(Ciyj&V`H#lF&?Ar0!0ldrqojmLqq({
z7H3_&%PEubSNs6`O6Q8M{(V0mq-!U|O)(zcubmd45*R#b++h{Rn~}8eT!3RCBafB!
zJnfF@T-e&!c>ZkT>#b)^3JojrN$HGtI2~NrjF9SH9?z@4UZg!!su-uB=>HWvJT1+y
zDuE&HZ%Q0x0YdfCAj@XZQ!F$YXJlmQ=QsG{J<p3g<jHvL?q_FOUsuy><+^{G$%u`k
zN0W3nzP*y@s#=<I`mwT1M}P}$KA<xU=GqJ?_?#SNJ+Xo$D(KrJ)j+4|z+ZLcWvkl}
z(ANU2Syves%EZfbSAy&`8KY}v|Gp(#8I6Itb&EbhjFL=Ou!b@1UeiN$?jQ%*d#_RF
zr=Vk$7H`x*gkDUquI>$Jef9+}nn_3^_c}%mRVc<i^J;HL0$sw)05#_l;nwy~yR70f
zb?0JHJk4-aW9!H;kR2l`1#th<<AZ}8ypiAe@J^xJ!*mpVl`9<vZT18YA_@hnGO;Qb
z@JQ2=m%2s^#1>D-Xq*%l68v}%V&}q=duATt#<owaM`9N}_D-tql-)+UoU^lkc^#k8
zKx^3n<|SDdGCBPY+I+y|sYN7o=jgJEHH)7XoVGz-i_5b5)N{>YUZ>C<fP!VBayu*V
z1Y|to9Cf;$d<m$O<qeU!r+sBT+UP^5toM%K_rz#OwzJlSR&uR3a;ndk3+P00HBF(1
zlgx^C4AWaq@Z2n?mzQ}LcMAxN{d9blak4$w!q|Ctetc*BnTkswmsAtj=TFHj@+`AH
zFft%f$5>fs*UWlly#}IoS0OAJ&ho^8XK>2n9g#E+Je49`z1=@^rhVkbN3}F8cCXHs
zTj$c;xe*c5;9AuwYsBwk@Siuh1?~L3>!oh-18mFEk5EK(udarra(rYJI-~}D1ck5T
z0Z)3yb_UCL-`Dlu7h2wZ<L(gtuMN6+bEe@oe{|#e-utSXy1n<ElMg!w`@5YVwhunE
zwNZEftn=fkd&3@!rd0FpVSY&WsW=$QqYbJKs#kQgMI9Yz0q_#`&(ql$DX~F}NeQVF
zJ;%IA)E~nDO`WJX8y3?m5DB1S<?ZlNjE{!6AmgK5$3zr^UnJZiK||VQp30H;A%)I>
z1~4wEV2eny8Qi4TU7MXF&vz}_;W)@v*It$>uENL)7x{4OV%ShCW!(4708L>##wS1*
zrAE!_B5al_)CvJR9=s;957Cr%Fb4K$=0bJ076Bw?<D8MFO6qwxx-x$Z-FXLY;yZ7L
zfN5AJ#FbJffH|<;Rs==-{zvt^X<6{7&bmt;*2>L2IIN?G#==KzO&-oHu}8Tvv>r_;
zOe*OUp;%OL!)19s1*gWiK0cVu_x-Elm<U6xs9ItXW4F7R@#IYI6^r-9>XsKeI<y88
zuFR&FNW5!x;yHYu+id9n?H_QPj+`{_=yQ10?|vcfEb{Ct@mXj`GY&yLLrWcmu`sYY
z<5?7dQg&2eoW>C1xO;l_q9AT{x8H)JsSEPP|NbF|nbYAv=W+H2ooDlBX2BD!9FLYc
z&on?rj3v)w$Fr3}v%EE!-ebC3!-$Oh3oRg6n|8IX;bAQy<+f)?ywSWc^ZTWON_@Gz
zsy9$@+8vCXPPH5mxhCc=-M~49vg$U@DL%s<ba2pq2Si6uc5R@*<tNxQaW-dAfm5tW
z`2_u)mf09XP{f9gJr;gA<z$SGvSPgb;wm2seXF{W<(F?Umm4+-!mEu*P&tl!mcjaJ
zkm$-{9_+ujL+!kdF394p3KPq@5RZFze0J_00F>s0fpaHc0$H7J08u{_2T2Pn%y453
zOvBH&KFwgG6icP(oE>Y6>4cpSo^RoRLN8s){F3&sI;mA5&L`<rD>?7>(^AD&QmJ!O
zo4(=>pkzDd=Q*~)P&-kwFT%8n2-`$?_>j!4NQQct)JVI6T8iDMT#c{dQe3gkt?J-`
zqwFrhGR{RN8-z^#jm_i&ePjy>A}azxZxWF#!E+qu_jkVD+>*Y-o{=HySYNm4t*^g{
zH|=K}So$R!o3maZ!Zm`K-`JEdTk1vHyGCs>sSD_ALZcfe_EW>oRHYSqxG;)+U6_UI
zu9@!Zn<ot3HXRN%lgI6DZ8k5r3VGQmi-6p-Ipv`*$xtxt;a8o67SBbD2ydZ(*oAQ}
zn34+(-TC1@*ND#RNwP;Kh(Qj`kP}Hsinp#O<_y&h3X~jW<Y1uuNOR@aGZ^(VbU;&A
znVkMTNp(Y!L11T)fdDW04?$QF5SDvM88UJTq-C`K=>;Ke%788CnzYoqwSDx?s=*nW
zX!-B={WtN0%ZtH0V--Q#bQjXNa_V%cg3n5(4nvFD3G8TQOW?AtN4`L;MaEV41lwmv
zo7Cmv0=?E7jp(_x+El|>IVT*$6*?82d6u6QJ}$jcqe<n54!zJs8MpVO5`(RZQfC--
ze6-u9N7SNt_~B?DgDtkJS=bVq4Nv9bj*dhvgv0eZk!L&;j+GT+e9kl~=sNUUUSZ*-
z#jjD~%N(ZoJ5PX2gy1@D38$brSNFldD``xAbVTQGe_6luUNf%CFbT{V*@7Bjymx7d
z%(*A0%{kk<lW{*rHEWyve^K}pq=+_q*0z!@4aoIIGD&366lT9ZEEuu`loZUE?ZoH%
zo(4{b6n>35ssE@8jJazQQ-%)D-kC;D+vgunk78NiBWW}p{m7&^rIeB|hPBNq)#66Y
zDg9kXh!?pNVfGN15(9fj>9}MMR2bDbhsjKA#CLHq(b)mTaYn`$eyso`MxgDPs0p|$
z=^(>gy%8FB^b6heO$c_pucMB$FOzZFMaM=sm0^CzFEL08Y2qR?ISl*RWdMX+-%$T3
z=HP?<_R)D=e68gz`Oi2~8-YCfjLliiB7;ki+1!-1>Wx^o*`-s<%$lBM^B2*-uDWz%
z@LMsiDW0#=%t9<2I8L@<4=Ud~J4<Esy?EpK;P=+ZQWbkQ-?u*C?exA#qLJWDXa|4j
zdyrSpeGyrs7JQR!^1(N<HTFO6eT|K<yMOW?&e~Y+jmX^#9!2u>0h#!G|L8+o|FD1b
zP9C^Cg~;vJHpSsx4~cFDvW)~h7{{O#S|N-;6}kdj?gR*3Ef60$35o;3Ed6+V`hDl@
zeEYo32Qtt?ty5XlyDKMEcQU)@Hqp*qNin2U@$mSx-P!gj6Kn0CbuflIf?@0GN@aI4
zLbVw>_wkz-9<Di+=%*K1pW~B1D#?|j!?9PL?GJE_9Bl8j51L+OA8vm&+3xiy;h0M9
zrt^+rJ8Rp}hn9)gfesc}1V%F~5;J_!7D}A!-j6P9rNUPh-ESq)jz^ElnImlq_X9cU
z*%$P@z=cK+-T~0jI8Xa@t7@ltA)kKL4N)Dm1UaN78WYu<_Rw9Vp^a+%)%j`R^+#<d
zqGR4iZkb=*Io{bnCQX7S8Z7{K7kL2<x9AC}4twuTw-41~?d|b`p(YU@T6AjVx0v)p
zn@{Y$9fwVl$Qta=9n1d&0xNdYfm#L07Dv*%8m9xixWlgagLPWk9%tzFIL>tJ4G^8*
zBJe!>Jd4!6DpU&Y60s7|=(lTiyB|oi^4kn-WYTM+N<C}F$BBdN49cs{U7BP6&49;h
zz>>xk1J8#Ybp7mrE=Cc*iG$yWBfg_9sPpu+y}ieWlcXd%K2R6A?_BoNt1@`8TfQWW
zOe~GBo>ADRe;Oclw=5VEYBRLfhV<l12lJcVFqT4z>8@`)qZ%{b!w2@x>MNGQQTtUJ
z1gM!1709QQ^bVh(A_>nBT39xQgl4e-nHh=aq1y1g)61_iI8?hBc-e!ocZ+ea<dOS~
zs2&pv8Bk=y%R+DWkM_^rV>$sP`&29z_nC>+ALM*zB@i_iR_bafGLJYXE?vCk<Vy&W
znxH)PpUhodg>6EiOqe@|-4kUCpkWV6c=pw;ieM!MsU5s^ggX8N6tz~2mL-(U--=LN
zDY=SPYM5{A=A31=u{YB}>Z<tFa(>m)m$|cU!@X*#&u9i4h{|j_YAIV=L?+gSD7ndN
z)apNbHYVjP$-m-742&n!I8i(hMukpR2R&z$WSzRkuCc{h-FDp;c`sSL77j@kRT|o`
z*NzHkS~(#aMmeasX{^?{+Nb9TkhK5y=ehTYbu1Vakl%d9CO)g?GF2B@-sM$Q-rfgv
zORX%uS%Pd6gfw64$!y%5a8KpBVG=$^xagyrelB9J<9aQ&wGDd;wC3YeAnYUh1)Y-P
zC|fmMpDIRgEaa%dT#SnwL@LB<%K_+m=|tyg3Y`)Z&vGthadCjZQDHQaQX-Y?OWMWI
z%Wqz^)V=6MN^nm)nF+$V6jKxZsWGnetlvu-yLeesoQ#X0R|dF)qC9ucPLdbv+Q1&q
z^J+N6OqcX;UPu|wSlsg-CkZ6#+uwulop-=lPM^Qn+~{m=xV{CvpTBt_Pu6(O(s~J7
z$ZzE~qOMh4e-f{Z<3-o=rjC(}{<v7s<6Da~j+8{V#R_k{v4Z(XP;tcmcu5xZ7_b4d
zugvM}(wQr)HH=>s)%YG`S{BUyg2pBUdb-_Q-%8$ZpS`c01*R%5#)lHYMlRE7f0D5L
zU{j(~nlxlve##(pjO~3<sMr=gpEc@=HNy&Tf?I$5&>1IeRD<3}DEujGV$iE{0rHpQ
z;VDam5<bhh*Y^^@PrXyK&UM5?Q<w6;pOYE6OG$HYU{(qS)&0!rr0JJ9!^1M>Jy^Cn
zRA=!6PE8BNsETuqGW5g`u=u>h6DiMk|M1uIan^E~{?dPhsE5ip_IUsjJHdTb=vgon
zswLLfwBp;Y7Lo5Nb*$wCsVL*CNOz^~-j(7FheR!|M~jUm*qCF|Ub#uHBqfW|I@uEy
zzGm9c)3^kIR7Kq^J$IFYijWgv%7C<4Rt<y_+dd1)T&_Y;ao7z^)Xd`S(z$4ruU#is
z-LZz$#XQVOUWyqf!lS4!i!4>ulIf2t24O;tF?v^&nH{DMpbB%zs!1><LuMbbe^ub#
zN_q8(Pz=e=%tVjBl5v^pDd4xW_AY4evrXnwTT?gP%CiiF^ku64;rq=@sO1kTuN!BA
z(+gIWqU}Mbe&IPop(grh^e-^Oj)#Vd_zk8SBllb+(V~T^nMg~0W?Pq-T=6`Ux0r#w
z(7C(xpE_2NAcYotH_c*`PV|l0QtkmFJ)>%SAPIZGJO`w_HG>}K7?{{<^d%mJK~|zZ
zkmT$j2kffyQl!608shR!lCLnoml{w>5ZG3Xq*6Ku5;{o@r~Q6o(Eu^F{0hs(ToyfJ
z$NF;nb1k<ce|64&QLsce<+OW~O|))I{|V~U^K*KLr)Oj?=E<5BlW}*Q_p?|Im{JM#
z8-bfgFm-AkR{B9`b|_TqvWBo={$@HiEfc04PEYK3;Ta=FTEqJ*P^8SCX1^emox5M~
zgPXCpl@s+VRk+eg+nE(t6pI>S7p4;4G30<<5gHv;7<DI1|B#v+cHmF{yDp*}+!M{B
zM$__|6106;K!;zPJ<acx%g1Gex@M-FdoGYHo~;t>w}FzR_>&E$RCRt?|76o>rC9hI
zx@Xo~UpS&gL4D3T9_{mI6TNTKyiay4N)Um0;qyy&8Tj`!NB^4CxwI7%WDI|5nn2d;
z3=rm<9pYFLBVTQF$qh#`vl`A^Xa6m^b)mO6j`cyLS3Q%|{vN1Wn5BoOu~U_GW5K1K
zJNtNH9=gkyg*Gtq1!bZxC?n(<mH1FqS@b@9hH1>Vhq`x*f+s68r&?69b^;&Ihm0BF
zaqm3pA4HQY8cF-<c%U+l8gdzD<+ML({#I;LrwA0JxZu9x@x4g`v-?8K(ocr@XoOc8
z*rs@>&BwXX49p+#J3`sN=f4{hG;XS5)t1QwO`{Ir1;q7e=+0!M_wqWwoHU&LT)Lz~
zu57t?ell5E)gfDq;+^1K)Uw^I=oOcvzHtF@fjC3~D=#P6u#1L4*qbjCyF>Y0T!n*i
z6%?*+f7)XY4Q%zRGAZsXUby8`EhQ@7p-YCTmJ@1{Qfa&W;bgt5>Z%Y#S3#Pgb30yH
zw1(*Ufs?jG;_76ku8j@9^hiO6{e;VN6E20P0f#B3b>hE3>D78J32X{XV5CE8x*SMN
zArYnx8tsTStPDMj-BWjF(Y7w&q+;8)jf!ojV%xTD+g8O+zSy>H+xDro*WJ0;ZU2OM
zF-L2okGDT>OqdS@4&5jRKGG~T-ReV*foZSCt`yqBm^s(oH2A6K7HUn8ULM`Gs57sk
zg<4iE%a|kxUseheE_yXix?!>x?^|x&MTF1yx4l<dp7uu^@z^MYg<8JwU<~G~kvQ3e
zYAl;Q{XkF7ghkJcA9WG<<R?~UM{Hc(2{w7Z!$g~_l#)2brs6~@?Vr$%w9jV}jY7tN
za|GLY&KAN<;k)U55(U8zihIYR=sCgM_D_J36HtZs3D<W<ehbGh>HeCG1d41UO;}BP
zeF(eW`-MhB{rR#vhp{m<_8!5{@I=SI{t7W&0>17R?}=&X+J-5U^6*Zi<<rm71&^zG
z+oU*p+ud9CgMWw4vczT{Pjyh!e@n9BQe!!$lD(w3)Hf_L)Ni9UTiqknDOCTU$xXTF
z_|Z-X#jf+8yIg1A6fynHU8A*c6Z#X@R`27*92Ko9wp1UQTGO8F4w6jIp*3zL7H+3-
z4gw#Z|0t6kZR8j;9cO~V+ep=7#*D`~Sj^tJAbT0x&^;R4fMhDVgs9zD08({cRMf5%
zWO8{u<8@9S^m#Md=!4)Uz=v=4b&1{>dz!5|DFo+eIQF}(&)d`l3&=m2%dTphx=z~q
zC+R2Z=Ez)TFeiNQ)Du@8@BX%e6L{7I(w{3@`ey#P|E8j%Xw*!0VWz{up_B#8&{!t)
zE^SRZ<EcLDxnqIvKrerw3ix>iYvB|0(i17~JdhzVRI}FCH$!nh-Rdz=B9~n28A-)*
zU6VTfmpa#;i{PH%d&xjF&SJ?%9XQ{Jj1ER`rtK&JiAAs7=&Z^(!IY}nK?($~3QQYR
zx1thx8a#?OPhZyXz_Y;#^f6Kk12G_9Q^y4-?Bf2r?g3w92>@Vo0({urx|ojQu^mU6
z1}-2{U+lR0Q~22V<}UQ^;d}V+cAU-sYZr}9R<~Hm9E2F?E;){uzi*0L2yc|=4!f+9
zXd`W4NJ{(!$QnAtpnyOSSfaJ#O|pe5hjVg^WReY9&+T>d`XoE<!|1!4V`g|mtw52*
zH2)?{=(|XH6;&(Uf|)sn2>Bg9-W-D9oazt@i#{0GXYR;=8CPTCP*t%L_@`1=MPboS
zYjp~YrCxg><@7HsD#`D5YviY*3p+R*oND7mZxg>D;Qecmf^|0@nu8MIU5ziz$c|y7
z&7H5l{OCv*3A1v)<k-Y!=yA(XcpHOLR$uL2{?)5oz8ffn=t&EG?8gxa#K%uAT75F_
zuZh||Desexy%64ik%M@PSGRQAxt88kQ=io~^6<0Hmew{_nmJKW%9;&(NV0pmJ3h<)
z#?5e%M2T8$E^r1^tb%6*OO}Hrcp+GI5e6l}KqohWx)Ss7V2Z4r>F7{)yaJacon2W}
zfF~TZqM00N$^P_GiWzz6;2Y3;=#m91TlY!!b)~)11V_JGmf3d}4Yw71+Fz2K$YP^}
zA}$MkvBd_=ousLrH{|+0!O%{X0Ji*)m<C(ljEzT4%JPCWOTyT#VKT61Sh26pEO|x_
zWcjd4Dyhh9!jx?tLz69d(HF<B#2}B4bV61-w0wzjX2=U>`Ui1($dP+CT>771)8F&;
z0aUsY)-&XTfAdADl4cb`2`S3i#mAIT@FCG+$3z6_yFlN|r7YlZ*mLF!mK<Xb6?gMq
zEfr7EzF8i`*ds|l_|x4oQioL0=qzm1mee-pX`^JU_il8KYDUs!E>ky%sQ@Z;OzAIN
zW%3OwuJ;Ks%jTm15iQN9Xt$<Z8$S8RmT@r~n$0Aug_Mg7!`aKE;(O3LIOf=p;n;gk
zdSvoX!!?jNtG|QyWT>PP_N*|Z>6Eptherd2D3wLKPbN%~AKOsVVFFJHAJpwIxN`dJ
zf++%!4aJeo0tJB!PQC+PlQKRjw~XSd>7o=&ME>~UM%+=R5y;2`i5FThhXzIc%n|_E
zDjqtsEKoEYMTMH6dnwI2U%ePx77NrZ$6#1rP!IzVaqYL0Z;%qRvq<@_6LzuiSIihF
z$_p@R(&Np3Y<Dnb$2ZB6Yc}DD{ok~uC#PL~R!4(&RqSHvKG)5stZ9Xn5{;FMto^yX
z!<bYolFxOX+u;Zs*97L|{{oeD&0puwsNqdWUkPy$Lx7S_ZsGU@1heY4M$4A`)gTz_
z%<!H)#gEd5q=kcrgQDk-p8VT}^H*4ShwS9Nqy`wn>>H%d<m}VpJaOz@plAOW8bBMT
zK*A8npQA;zsXkhxK$XtMe#wqO>qNgkvh;%?^Q`ovt}@?-5G^jRyvDby2f1V@h5gmX
zZoT5uM)l3)<cyaRU)U<J*V&c`bE4<NB9Ct>T74&IRbHq0*ltJm_8YJf91x@x`UeJ$
znPQgugDPjLs)~P$00Y&xvQx8gq;2qX+Om3m8n#ISV&T+1#A=>kfHHNBte@qK2q6CE
z3e}Ma<C@E*>~pviR7)``JM`3~t`r^X6LF@5CW7xBf1E?%U;Ez%(s`?O*y=xTdf$fG
z)@KzFxrLQ<ohhj6@XonQvvT|`_BT-(Mw7ZK*zRFQ4j8s%+bc`=rcL%rlv=%nb}a%1
zSjF_lynJQ{0X_)MI$NVdCl|xpX&P;hoZL383*Y1g+$bL)loA)7jU9%tGt1&V5%RUL
zY=v>iTN=WCVcAO94@R>o*<euw_mb5RFy}h6m1(-QreuAN=niu1JfChSW{-v3{OnUV
zTC1xhUl$rDm&IK$r6mUl%D)9e*C7>OhCIH0xF_Ro=ymL1`R4B8%^_T$<Mg?2055(5
zh|pT4mevk=OBDtd1a8tn{R=wUJCkl&Wx9EsFRsnA4rX*wgc4!Gl}cV*3I-ocv^I8N
zd1t&~1bFEFQyb*k(?-%>_Lvq3ZMug{m1qZ#HOx<Iaaa-^L+LqQ`T3!E67hD0u%J#Z
zAD<S5&-sC;f+<0rcDrE#NpNs-7Gwxi;gqZUEg9ppayGih2aZA*pyu~8r>Q)6+Y3>E
z(O1$9Ck4dQ8kT0x7Kg)EY+T;bmhOXRR)G}j^2-yo704KYjHWYJ90pak@J~El5d~@<
zHayXcY6@<pltw;=JB@Sr=GId)5MWA*s#A`XK9hFBIF&djC~UO7%?jr*ts<Ajl2QB^
z{t=xUOC&B|(>}l--)ncbUt_`w^(e$dkeQ%Nwczl3XI6g9#B<TM^gN|H4GeeqkPN7|
zK?%$4piJN6P8fJ5OHq_T+3=(G+u%OBkB860YDHP{maZtvr}TI)pM38O(L?Ube~~^x
zIn#tP!$o{m=Nn9F9->Ap=*rt^-`Vo<%&rF7YJIH)GQR1N%rSB|Z^olZ-^6v9lVYjQ
zX;XBFDll6EWCM4*rY~^tUb?OYg-(Jwd9R006#`CBbgPi9^aeoj@?$|}lsQ>;%zDu{
zcVg3&lBOX|FY@_znF2p`JJRHa7i91--hCFsd9n6ws>9yo?slQFNbKlhY}EU9c@2PC
zijlp4^X(mfo%gVJJ4(Vaj6CeII!zk}Km;c*^YL*0V2RZI`{NHDzHFpq{teR5=d@>h
zZ}n<Z&q&twTKI?@eq$RC0xRZ?_jn|EZ^)=7#xSI%O%WaosqP$}%h~A6nBkf844<T7
z&d1?7^pYB>jnU^HZrVSrCsvllD9FuH(R6*kcKeW0%#Ur@E;|7ucz!PaOHMpxO{t+7
z8*EgP$F~r!U0Yv}Y5EgxMoKG%Zpg4jv?`4}Q&$8o_y?wSBLwfL^umP4ws<hneYBD}
zL9@1lCrr6<sLLvYE^~!ZA7#6iapT3I&4)Z!ia@j)JewpFA@=M@)VAX2#w_H@EJ({!
z^AKU$NH%XXHIv*bzIwoVZu776adPtVac+rASLMEXDC5>P<5JC#$ci{5cXpL9rpM@a
z*AIKE$ylnj)>axF@8k3KjDcUBf6zq22Y~C5D-wj(j7{UCVCm>A1k<__)ET=FF`y?_
zA6JKnkX9JsxIfI&8a{;fs3YsLx<p{2mgp|1;WY2jrbJfQUxm;zf4`^w{C{=zeH!PS
zCbB?4br%0eqTI;Z*7<)Y$|tpboHknLes=PH-Ax_R=Fx6QE<Eo?<tZ9-Evu(~#ye&=
zJ-~()5=OC!-oF}(+T3sD>2$^uLP<3oY^pff&?2eRx?=EO(xdZi?ht(xV~AC*c4U<v
zzOLx);C6CxebZpgP+^I()>Q$w#SZu>{wCX^%?WduC(_xWAa|7rmqfwlpS6I1B&rTL
znI|kzN(58FPEsa1cn~*6@Y_U#bJM~T;tRvl;Gp?0Qtmw8mKLA!4=L|y{V!6kE%HA|
zximu#%YI-q;eU{FigJ(`Jahc&cvSDc)acdx9hT5kB0uSVT5wAx21z5k#1dV|FQfh9
zRlD53iucdA_HEj(Lg~VZuQ`m}+=n^vL(W_e&U?ZS135VZKKIvHd?qRXzQj|sik46<
z7bk3tTJnt8BFT3*5FZ@G@R?sbn$8eA)xei^x){G^0MqOrQa)_@AEbO*@E=kxohAos
zxq1~M$al4c-bYaS81T-xMwP+1rtw?Yap@+5<f4&{y@nRkef6R#0!2o{OD)kK-$MP5
z+hDaAb1--byo5kcH)|?oRMI5WJT)9@hXV3^JUVDGK_}It6ZsxU3JGQxzC)KeylI-T
zF7*0TA>^R{_%u|YLRatI7n;VfZsso!zPUKv<hMg%^b+{2>=e3AWp4;1RWt!`M(4|7
zfjIKOfB^ziAiGh<&KKP7Tf^?#{qcU`H?cT1F7tv4Cw6p3L~#ybWi;r+vvbP^e}FCy
z;fYt6cBn=_o5K|;KGQy<f9amggg(v{V}NM(jQ7iW`zD#!3KMVLG2<OoTXAJ7BZ4U&
z)SpE3hBO7K$p`$miOQa@^?r*8D#`6Iq6pkwhLj{JM2ddY7+Fe@T~q<%z<jiTK;(4w
zM6OnjPXD4zRrNLl3MWMHj9so`m{S*wpyWM0Oq##+PXap<<fYqU9v<P5HHiO3%6F#U
zv^+zg^|9p=jhPJ1`_b*Yll>9Xthn6%44Ydt%L$(Xy-otVpnLV<nN$a>J6gE+*4+&B
z|3k{l{~_gSf5h_fDAb8sN34kxf)EB;F`F6&Q5t@!o0-QY_Mrnq5=&;QBbzwF8T_=C
zwt7gwD74Mc-S!hMpL%<5u))o@j5c$=uky1@kJ_#T-gF!S_`5N;qM=wBI|lB|n7Jsn
z_RJjD2y$J3-s2@+F01&j<3f#j3_)k!RqbZ4^sxSh>~gdU27VEFkpr^Wv0~{zbim72
z#A^MvZ-AZsraLsP;{|&@y7^BB%1%g<!Xa*^=HP&MJbp5~@wX7&fn*bAAy2agF=Oio
zK5D>%e#w9BwXG5OGS=(@Gw%?@#`N``#@MxkWM4NM2szc8MNekW+UziMd1HKx!D#bm
z{khjll<TTv;ivOmzjB7}`yZuz+WVhUKIyIKcbm1!i9oStEp~w1{E4-Cp!`Fcy^EiC
zN-!TL@uSb=Q{=~(bK#c<3P%F!FOQmcwF}Cd7R=$paJy&5>ari`vBC7U1^xh==G-18
z?Zt1AGYY?Ynp<P-AJzsE1^ykbF9k=ZGm;Aq=m>vCocnWsHZ@oKT<2vH@AEy-J<uoj
zV*clENVa2dqff6GH{8`2w7)#;Ci!yfMn{wQ$!pNog<cR|({7)SSD5wP7?8uwF9G;;
zHJN7;Ok8$>rZPSOn6m)=PON=owzC_oU1W{jcCb~%LSn-)hW-!%#NM<YBxy9<iT{}5
zyRTSb6)l%12Q7yzBesr@=!j8kmn1HY4+QLjtJNbQG~(?3_yUL&kU>F>Fz}o;H;RG~
zVSRGj(U(_b5TyupF@*HF$b|3f-;k9Aj0K3B6KSAXWVHx#3!;lqr+-fOcNgz&^be#@
zU^almGCM_}0W6(Zu$tA`y(_gFFJ|vfv=5oyM@{+<R#Z)f^y4H7@%K-!#wS^e>1+rr
zep0E{2SREDPlg44NCVv#kPB02uU{4Gt<=G>pNy>_UTuvxW84jj_%MW2<Pi`32=0I6
zZdqtUy%>lmjUpZNi6O*78q`6)gLVUcje*7B={>9RfM-9$enSMJ%flq?(n70j<^exC
zscho#9>IJ<RZ#H;-aIXlWA_SFqrb_k#N~5*K35k{k%(ql<3S1>lfzc_W~@`~{%e5^
zZCxS$uL^ITa+~wJ6J%&o2)`+UY+#>Iz|3Ao-+?i+m@p~+DEnSQiWUt4Pst2=JAf5E
ze1G3Qz$SfQh;`PWJHP3#Gum7~Fd|nbH`M1C)iED5$GslLnc6a5d7B2V5zaIQH4=7y
zN?n^<yaRn$ZO#<H(uAH19WnR#A?c5~BnkUI=3x;)U{^sC?>gVat^g>aZ`C_N%88(0
z8#t9{F|d?s^>f0TOZx(L^(N|xc#;>m)A0ld>#Wa$$;N`G2E-RhA1@x@)#7T$h`WKY
zixItj3<weH^atK?;OW5Lpv`6V;9i1WvoA65mzCUXqI)Phb^deyhh2Bb|LBzCsoNwE
zxV)=a1+RV=0SA{P$Qn^(`}@sogZ2AmxNdmKR?~C_+SY|t&Jy*!)9L%dPgY>&MTml|
zyfTnV8V{A{<<FM)p5!^jBaHP{u9y6R_F22eG8zY~E!{xB%^3cRS6ZklhbAzUOd8}O
z*#d1&gZAogAp>@7F)s`qdyNnX!=kXx6l@rJ&H#$j7$@a4?=^G>mLI#uE}_&4mi}Nz
z?H93ef^_)bbU6F!mykd0jImd8qfu_4ya`V_qAiIYwsQ|unrR=c?|mHXy87$+G4wFx
zUyR3xS{~g&b=8z(=&cxcc~}cvj*el8HWCDdyhUC<_S?<F#&Kle-`~frOXN;Ko`l=r
z^ZplzvzBLfj8D?k8e@1n8q|)3n=S1?HNvpErKtF{={sCj#Oisf;tP*;wt=vEy^pLg
zk8jJ$25}642dyk4*t6L}Hpw`^@uqEvKX16JMjbDEuD{RfhX$fN2+TM<ywN$Y0W4f4
z9+7E1JsfKwqY!`pUB*bN0Ho+_voeY{myy1I0c=eU{xE)4O87JYQdfa2=Dmu}drw^(
zJJ03-<u^+;A6ZY9*KcRjMBC+B(t;Hx-^{1zJUf@G-`DmbL{i0i7)C*(mi1O!Wb1~J
z9RG+&a~9jo@c8dF^VejwA#K9TkDQ5fhgb~g0{gZ_IMKu6D47s2S~JPmm2+m0RRpQi
zPWkT0D+YtEd$uRE4>DGjOmvv~%M}$*OLoa2dq(=!di=dema7NdET20ezQgQN%>%}c
ztj1*hAO)~1AwXPcb7{W@+Hfvb!|I7->yvS(C$gN)z1^J?MxdYI!7H~j9hN!<oh70i
zMHZdGm1O)ggrqQYo#<s%(AdbpLHp7=q*u$chu>-oeRQK{Q=5*=+o1bBx8WFFQFG~F
zT->8m9_igV=t@oM4{|JLxl6VbjVGvI!^8qd_IyUt+u6ps@U{^I27{mLXe<i>?oJjp
zmE<aagFf|3B<Y==usw`57a!paKECJfU^~c1C-*h{;R?%#sk!$rw&)m^59q~Ju;gPS
zArQ<&QPLAYVqT+HP&bnZssFZ7BX`qkIbo4`*3={Gn`Q#>Ac?)E+&uljEB^B^Et&LW
z+%j`Lkw!4Wr5^0>gj8~(C}(LX4RgK%o(^jGTT#taGDf>8K7Ed9iL{X_CXMNpT6ulP
z9P6A4T%8JA93~3^;2vJxBzpl<w7MEsKfCNWnW0u3S=Fg<^kXVimGFV<n9zgo+u_-R
zYWhk|SN1;brA_7;w;+f8gl6UW;CA?2Lk6mhP<ML=f?(;tJ}L9aH2Ll&KoyD?7Rzr8
z=%#%?q27xGq`W3Kl{RYgB}p~HR@}Jl)q^*!Zq^%(*ABevm{Lq52zV9OIVsiGxVV<)
zThqc)NV&V~eoNqbIMPSA!6>*c2-4QKGDfk0Q!;8i)+Y80AapRG4%TN=8f4B>Vf#Qh
zQ+3nhg;IGtEOGrM8{5N6NKy2C$i;q8q)(a(&0BQ{gb8IK%L282d8>M;wJ1E*(8R#b
zJB-Q=!$uTf-Fc!G<q{MH-L~Or2rOIlm?K&fj?ualr&lLQR_jB`tk>KLcnn?-S1>Cd
zDHRUYGPkCEOGeMl#JHC2pti3yf~kj@ao0*|v1$@U2bS(L_w2W6onJ&~(%g9n?F9KR
zCO?|dGx>*1+P~r7lAlJ7d+_{KhJ7B*`(xgrNI|}%Fa-2j+Sx-}vEapbIsCBovWl4U
zH^P?LKT!p~l%N3Wp3T1OM9u;9{&+)(d#iPdfg8d>)%D04O;~aA!ZIlb`W3~J%aO=O
zPlhxBDxkV`9VxyS_-9;zL0Eh=B@4OR%vUU(R6L`lv0v(dE}-v+^jgow`S)4Png_Nb
zt>X*tfX*UUJ>OU?E7euEspFYMYhiy!$_ukuoh)voWtW<#0oVoH4CcbIB7ZCFnSS>^
zXwsr|=AFDW(OrD9E?0Z#dXD)4<`_gbELE$$LoZZ(lQAi!`jb=d&jgRLE$5s#grW@&
zPu=2tRy}epbQ+%d6+8R<gk2u#(miINcX0|b8f`r$Aj`g@b~Gmk$vD{<f>whw=gfE~
z#!%48qT2SZa}6kAO?2MEp;eZ-MO_YC;qeMfYgB2`CNqwCLWQzODpXU|A1m2Rag2UD
z`jS}&eR{yUyuMt^<4HQ&l7rSg-t5by+0)ssz;Pe63>*mVzsr<q%9U{Z_`odfZT+^X
zWC;r3$b)<pSwzD1oUV6<1`7-W`;r=%_D`WTrK+8`PEy~;_h|0+&~*PZGPlD*_}CS^
zb4#{65p+#15qf*p{@&ZX-~^<R7j|uWA&r*amX~0Rw1CdZpR$13(<l%}nx+R@pkG)u
zBY!8MX5vxR{{V#(FH3ovu(W9QYJ#YK&T7ReH_%>=NuZIRISDTHQE8nE0(Qlocz{Af
z0W#`RG4-x&%y1nOo$P!`8F^$*&WF1BVYOSyk-ijhR2lv6stUH6$s~s^kP)p&Xdq_9
zp_Nsvh!9@ZQ6o3_IeyD|*!g%cM=7yk(6WJ)0_x&Zg=PB3Bz1~(I!M6A!YXG_g%V&Q
zo<)^byyf<N*G8)_&<2z&x$Qf;cw&!zx6gRB*%m5jb+$ljRoBI}XDgE+m_JS6`rar!
z97EfCsPFr}5+E4j5{=<h_WNP<=hj8-fP88h!Nsb^CtyUi9aO-3-JmV!3_UYo62*&j
z;3)-gMgOpx0~nb|)R1zEzzDp(M<z$RMaPD<_itg`@OYo;fDy7TsKtR6T86k8l4;q{
zaZqwzSgpMdv3V~3%?|Or2GQs>L_Tp)cRls`OYH+&7O%N2WCdVJwwOq;sTF5)Togd^
z#Qp0&cvv#G<K`(CJkJ{+An7udULDh=;etl23g<WR%Y%KZX30vlbf$KuoxbPH{{U)Z
z!;81<_ZwTC(I@7}->?;n{YhCgJ5f%Su}ZM4PITA2<Q(atcT1;|&1}E4lA{aiQJt|A
zI`{VkaR#{U=>2H)OUUnIOf4q<Rw|+vJUlYdb&2Y0t*W9jE^I5TDr4A{xx?~3Q_HL(
z<}J;1)nRJ8a3mLLU=y306_zTB`_8f7SEHgr4cPcLGL;r*W0c-rr2-BtfGb6J674yU
z(;IG-^B)V44L-PKFwYBSg&2u4e4&RZCLTt04!usWLBab%{AeEt_~K3+(%P-V)$o7E
z@twb&grqjmIpP6Kha8o8<gk-Fbx_AAG*QQKNgt2CNMTNn`_FfMd}&W1kx0pQXnk#a
z-emyOCu6t!ykZ4mxz(aTdwIH|f{+!6Wc>hf=lR-ZvuXoHX;^N`SXd9f^T$B53~Rq#
z$*N7|TC!F7_(%vk|KF<VI1OSk2Dx)to*ikmPf*0d3<!qFI-%`S#y|5!Ujii<L$O(&
z^hayu#AqREkiDG5J&j(zli0v`Z?U<f7&?=k9ki;_f7iO495~^$!Iop{!&WwRym9<l
z?x@aOmInGY4c)nqET%_XQX}ZtrF9xPsahoNz36W`%*=DwbIx6^XiHWa*<&}AiJnMl
ztT)*lcWQ>G5d^0%IE*nMa+nFJ@riX!vlR&G^!D?&Ij9_U)RrMO)w~Ev)lm;{l(Yg+
z?)Ip4^|Q3y6#p9YxBm!Yy*Iyxb2lGG&q#6w+XUkJASlSG>_=N(`z}S;`Afm&k%c*-
z^pOLpoHdk8N_VWFXkQFVS(@Cqkob|Y+UUzoqQk)48h(3LOpO*LkbxWEq*wXJ#frv^
zw5JX{l@%rqH>Gtx4#ViLB<WscNEJrvRU~?{*C{#(l9o0}zG|R1u4D9J{M}F-z&}Pb
zC3<(fr^g*A2)9#4Zgw5V*i*>aFx|}}Jd5M_y=nf;8u+D!qkUXTae*w9r8Yo>AD6&*
zt2P-11Xo9Fa*dc2eHLJ1b!#KGztUP}5?q?{p0}?LEnjje>Nql;nQxLi6mbNl@?@TE
z=HBJ6#{q%USSok!AFY?8j593l;X5s*8gs4T_gb(SX%g3)5^2M;rnOeJSvoAzg>ZcB
zj$mvg9CkiNmBnhrZ_swc&S}e0t%e|W*hq}gno*+(mM;shaWLo7Mrf?$asO^oBgrC6
zA@f=#S)Oc^J8q>$zIG|{;<ZTrq4W(p<~5Xu8P9*HMmSECuE*-+?U1Obhw~-~3HVUc
zC7<#gNt>fB{8KlR${l8&4&f<vldJ??zi)tl`=D!rPUk@l5r-f*m-w*a6|W`pbyPCP
z_-}D!Uf6Y&fmg$Rran~_Qcn&yOnf5Wgma@%E!VKGB>lxhQSvr*ydMeQv#5ZL-Okg<
zW3pE}%ayOf(DF!{vfuJG$|T)+&;e1`vL73CES)Zr^i3>Cc5N@hJNgQzzpR@Q%I)={
z{&4E}^Z9YpqZbIg?%toGWNEs?J8#p32z`7*u~yQGB&!P}kh^}tQ%S2BQMa3PKf@8G
zWbh5&4>vfRP!iCKSOMzPz#2pp*^u`DrUS29k%<0xz%p`{c@<_-f7$nR_e1os^KdG!
zjDsbq_6`UZ0izA+8WPKZXPg!xou>JafeiT4)%#}0Ir3%LL7Tzm1PVotXs0Y>ihTN)
zdbCh97V)aau9<4*eFA4Ucg5gJ9;ng!AUIIEuVSRx_(<F67e1>#48B(4j(Uqdpft-T
zs`>2*Lq|vQQQrO0Z+&C!=?~l|<t-Ke(yw&8Bau>lzP$F4Sc6`C)7+b=l1VHRbYPmg
zE?0KCd#$t9wmK{edNTv6prLKGAg{JM3sqPW=YSP_5@1G;9B^A9_qXDdB%XN7G>Ic%
z&GxrS_hLJsV?yjs6RASIY|+CBVg|WB1A~Ww%7L&I52-;0VtG{Ys2;o0QEiMHL7;`F
zvYGAcGV*UyE&U>-?sUSVT7Tn|?by8F29{iY0~dgW%Uy`j9ko!dfhe5-dDS_{4o!k{
zc*t)q6Fx9Pab)|Gy{^a9K`vk;h@=ri`>@F_ZfA2Rp1g&8b;h=2dk6h@6DV2X=WB+x
zfAN8QRAb2xz6{Uv@5y=bR{uC|adrIq-T|^PyVwpw;5EF9-LB+<()kz69i)(2<wzQa
zBK_@x{G>)8BdE{GfJ5wT^uIlWB>^a224wX^y7P~!0MopKSW4T2aaEa!hsTP=cNOtY
zFQF#6>=bKvWy{z0M#0LmPtY?rsju&OB8)dSGIUIRUc{HcA&w(>JIB~MF-j!wh*?yX
zO7r&3hgvJMZ$jmWCzHK~MI^pUO}L2#e@W>^jPXQI>bU2YY<bhB*XuYq<cin`h6$J6
zaY5wyLN;>$7Lr@C%*&;WSP8qpa<Wf68x$$Aw8{N1vU53WqlOk!Fq+yv6~zEL3vI=8
zx)g3`sE|s=(raF3=<C3J**U^7!wO9H?%!~!irv(d9lw#oSL*xKO?IhMTd}|MBc!3<
zuwnnE5K3y8*50B+=;9gJ*=AL>dK{(y>F2y^x*Lb8WYkZt*JKJ~<^7f-b4cFViL(DN
znie!^T2Q)wNs^7xO)O$))Tr-E-&B*Bw`NZ=qCM@8QT1x|uyCbQgfVapGb^ImIR6n&
z6&5*6b89vml2E;FE8hlr*9sv~u?`u})!7JK;ws9_Q%mqy<5<+4N;>Yz?f(I@kX|dh
z7_^$ZUY6q+)C5=@Oejnlxb+IxO3Acco4RXYxD2lkDwQ#zxi7`f!VP%ELF1i#@2k>h
zE6hD&(zM4zOJR|!LRPvzmX1lVy)c(jcygl0tpDh3wYW7q7=L`{$<Ohb;Sn3G0VAJG
z2RlrsgjlPC_ld?Er^>6=idp6d#iKTd@6}9xUApm~*H^Z`69wQQSdoL5ci?waxL%#u
zVeH(EY0Q_A*~R_4>giNVRu<P2B2$l`CXg58lT)&qf*h{q=xx}v*?d9f4Lcus>nmqb
zLEB)u`JLnAy6)gU(<louyd&aa9VV{L)mvXK-!3AGj|-7hEQzB&d@!whJo$(ujda{`
zVQneE$~N>iSrDa6k;HcN!}QK8BSF;$X0hgwoP4JLshbb3QCf6WNJY6X=#FZ}H2lpY
z3n^)bW*4LnQ0ip_AtGoK!4uU!R(WBy-~Va3!lb#+v7iCT5o}nPyq9Nn$hOoP{;eWd
zc+6vcVXna9Ft0n-LNCnd@Lqg3z^=FLbZa^(2-=pjWJgAe#Xn<bXcO93)}~rV7RP2M
zKGO^pwj@vj8VLQ0^Lb$Du^PXE5W)`T<(N@;hDfkyuGG9hcQwVr2=oJCzJr(4DKwlA
z&drqB-hVH9BX~Rtm7%O_Ct$k*Klu-3A&kHNao^lKo>@%;lYjB!tmIhtRHh>=IjU(Q
z8$Q^5l?V|9S$p_{VA0r`9Ai9htM!q{h`hK@+MCr;nN)f#2Zh~FUM$oTKHPB~An28&
zQqCDY2>UpC<1w#m<I9nDt=owpv|#^l#Eg(ffSa55%)e3v#uF;oS|&&3$TJ7L;?TCz
z)NeGIsyD+bqrSd9Rk?i>R{(7Ak4@e&u$&w*X0q*T$uS=Z04&E5zL-TIA)K1H=EWY^
z_!<nbUR9B1l>7^qKY5LK{aZBb)gX6dv+9>HYvgP9_TDcF+EaX~YPn%pFu7z%j_=i_
zp&l%INzh$EE&^=0u@%Tp-|pVl{lEieC10An7Q?<CM=f&k2u8w2g4~`Kl3^l3oRfQv
zPt@Y~f^VNoXfg4=0(U>x*Cy|2$CQk{1(un_Y#!#c0}R-?h72(5c9qkHHI#ABnX`X%
znhWaP{lBQ!aXG~|D>y&vnJGKC@~p=n_Ub0XdrtZZmK<K%255pVM@A(B?3~C1L$kG2
zzAKSSRrY}DN)51XD3^;rye7rcKD0yatEbX=UeHHx8+l@MCO|l2A9r!w+YYlS_gmb&
z%g7#5PE?MeXym|(IUh$k+;5A!;~BIhT?4|BXGFt&fzkhZV5}=ILQyxDdrMwe*?YHC
zaoy7|<-b`cjSe#iH`cbBN>9@G?O9tiz`H?hHyQ4_Qh42*T>u7cNkkL-vzoA+&FA{?
z?ZU;k7hH_*KeTVUhmX*`e1z?H;s1?&@mh7tpQ>64pR`IJSFJh(5vFFw>4NFe??Fo)
zE5$LO-g9>`7T?g7sM$-lR@V25vS0)}a7g@`J~>Fz@Ks9ZtChkYO6oohON5^iuCm@n
zV1(ZG^s&XPNwk`u5>HZM!X5H}qKpL==rM{;`${2$lV$G9z$Pl`fU_!!qQcBWdDw6+
zX6a4#cu7jTRKnRd)tP?}^*c)^9Redw&C%Oh?&X^waJ?5T&wy7;8YGsW+Wd{E%vyLZ
zjXSJq&6PECgCWrFih-Bh6=?*6jJ<ZN^D$L25*T;qfZD58Vr_Q3pG4m~I;Z6MHEn}m
z?qeKI-hv{Z(dF{M+7)43(G;?df~Buc7W?ISZCn&L=A6-33$5ka1-3-^m16#hgQFS(
zH*no?jHQ<-Y)g<OW48G276jL@5h)~_qV(Z{$~d$!GU(7!RyYI|--%?MZ$LaHc0`H8
z9{2#xP8mLTJJet?G`3HT>8U0`p9XWg6C!ui!Y{)0S5%{d0iO{uRR%XOV4`UPkzGz0
zf4g^8k0S4aATMKK_Oo)VLq~DCIOay@fz6g|fzObov_+j<R>y-9lZ#leypp``-j@F=
zuw1Y7X5gjhsEdzirn8T0hpWrqxj+oZJpe-UQ-=*z$VH;8b^j1J-~&}R_vn0XXe%WT
zbW=guqT5esBy1?~dQIc!^bnR5V^)18%!g(QcE2mA#qOijoN}O8Yeh=4E6M!d6DNAe
z)y+_6!tE_mkV9G&L?<4U#wO%AH8RWrhjDMCjR079alXVH3WOIPJ#&V_Ga%g3`|J@X
zw)x=C->qB_&r`hyyfuaCt$uC>b>-Qa@>>|_p#ntzwsJ5WJlY;|w`glfFi;)cr5GvT
zXJJ8HFpDr<+Cbz~d>O<vn6sO83V%n%Z|2h1TiTgCem9IR@@xh~N%VE{YgMF_l5B$w
zeaUAfF4KPrl@Q5pcx+zxi?=H4;vhBvbnqh@9KyK>r{o0BR0%ADGdb_{G0hqmwg5_q
z5Q+6ANXd1qDau0^v|yVoBL_e2)~mMSa4CB;O;uU^E6VSR<UQVsBbBPo@yPi{K5`bj
z(Z*lO-C2d5JWKH<hTPuJX!qW?zV@FF0vGPq?3Xu7mYb??*r%hEyUNru)Jt0VC|gq_
zsE(yU!NJ<ubUlBGBmcS*wqU>(AStl6tf9V0>`IJ>C4MA^UG^f-yMz;~I*Z!~dR3J-
zn24Q68eR-~H3}&xi?@Ubs&n8e?#vwWpPU7!u=)rvb|ZBt3~N`BM2KzsW9x$;JwjUW
zyDYlQbMrCjvweJRe~5E~pSw=Xl>R#aX|B+8)3f^DM(_NM0iELHxI>$tWM#J1pWuHl
zKvh2ny12TD=-^Z%YDW(PY8>{tanHdoK0M^+Gn?u^92jzF7Fp0#O6_hHnTh?6(1+e+
zlg56phtHY1q*Ih_00TbZ$ax-yfyXI%60`{6kt6&iQyGd#ghEe%csaVCJ#d~PTW3a(
zI3c%=6&V^f`3t^FW~QJ%*ZbX8mo9owmbdJH6J!E54N>evqHj~=TiynK58v(OwlOVM
zAjHmOI?WQsV|r$>=0%c2a(k3m1CW6ylgp5XZ5S3slH{@9s{SR`o=PwusfmqN$t)@K
zj+|dbq<#1>bMvxs^Ky}Z;tQNMdA;4dJ?#O0P5mxVEwR~fbreo--ZDL6SoRU<<UD2h
z;p!v_DW5LVxTJL0m7MYL?OHa0f0ot>U>Q^Q^xcQYGl(R}uxN*KysEmI>G1CLJUWG~
zy4NjU-0Gt=%7{y<hNe=*X<@$K7uCA5AGZ4tK@e%o&MH^9USW85P)~+lJQ(k#nTrFn
z`uRURXMzV$7;-RPMJj|mqF2YN5aL|e)WB=!d;?&(<WqWj5OI!0N2{8s{8I;feI_%p
zWc%R4x-i@k#_eGyDO7d~r2Oa;R&sm0!X?No&8cCVj%}%BU*Oe#=mI&~1>w^*quFR|
z=fe<o{9Y=rvb)KEN~1a^CY<jCHI}gSLl|EmZExy6{`#$ctDJV%u)!D+@J<R)i|)X(
z)}b;gRE0Bhhu6Cn?oz^xlsQV-Fp<e_JmT}(nU93wq3#rdkV}&v($qOyM}L%mp*}Cw
z(UCrqm~|NX?Jv2Cw_yTijgLxD_T$q2g!7lQMh_VT`(t-_d8u&35M@g21B9(95hIKH
zkO(k9n>7UvjD!kEJB4kMjUbBR(SvQYPa8ot-SM-EHGWHP3$PU^$}TN29rx<#+I;b@
zce>I4*lVM9ibWLQedq8ze|AEx_777kPgvCaEJ%9)f{AnbC6?dA{8>44{w5n;n<VSv
z`8%Vjzo5s(TNTxH(YC0FzHVEWPzdn2ehX6Gy%ZT$T#Q1b={eV0%VRMZ$+Gmcuga%u
zmeh2ZNlRL<hCIZuy)Qb&b%*Eqvf8E2n7yK8rUD)ET9U|$6kn3<NOT_YB?KXs7ZZ-5
zoelTdx4^bNX71OL{sag#vu?yAjlJmXM!<u~Go>^LU#pd8cL{AD=yUaUzcnSpNUzBs
zf8(~t)J#>F`I%bLoxaOB)^YlU(0wNI^5kI?x2t8UOlIWR)^=<)4mvLQ1p6*ZwkQ$b
zX7RCXA=5`NBbNUrpN89#Nl%}oINtUGYfzXlEBF4TlyDoR%1t{3z|<-t%(z~4l-(0&
zg}nmF<+SC~n1}6)q+;><rIS@x{PmB^NtutR38<e&zol$XTayB_A@RjCsY@Cn5Tv&6
z%o=+H9%hoP$qrlzjvN(*Rr#5o-2@gnxg;N|F*VLRi8MSlXA_&CLTevWGN|eaG3bhJ
z$6N;OAI!cVL@G1K-kMrkv_qjKOcN(SS(yDr5iz);f{wB%i`X3itpZ8$PA=!BBqvn`
zZ=3(ROLq>}s?fBgD@M^yi2(AGQBP=-N|~*cHcazJIxDs!dyh5DW7mE_Can(hz}lKh
z1nooD@pfj7fmEm5I_~-RYr!XwQT{BhXtPo?OW3I`gqeM{9bElx9K^5MccavpqKS?(
zNQj)C<a+IF>l=!ama<tG*+LrtW|LPAVFj?L;}q6NwBvz?y0J`$u|CVTk*l+`Skr3L
ziG>m_Ww$HV+%E^^@&5YT)qOD`IqFn5d!AFL_JTZgv1sM&H{(QFTO(L}RJuYJy9Vo8
z3fEv+)P`2TY7ktN^5`pOZ<NUuV6^HZRFQUeBCIX@8<w<-@xjr{rkshUo(v<g`ut0-
zKb1pXakn%xh4K<TI{-acA9Mp9Et!CLqL_1$DGOPMX&^+vOYbC61KW&H!llSc>qw#p
ztlHef^loJTXmri=MF><)GVwRM!(`IwRh=Ifp4f)p&&N(n_s-fkFw->_JZRIy+CFf`
z(iDB?CpMTTqLy#;ZAJFX@!b)z?4I$@&7$$0B`k?5k~uCRhizYuCon<t^@fnqZkW3W
zrG+J25HY)gWF7?!hlI3D{IFTh#%dSd5wVuaEtUMh8<0&JrorR0ejP?$b`K}dDN^d+
zdRTZIP?-xJs7++&;2Um{D(aKNle`MYV;FGz=b5CyX_f5UKYCk-ZuiUk-i>D*T@1;^
z1`v5U-L?nfCdFiz;7<i-1Yhp&f<xjKC!O5*xkF#M!O#5!;Qscx>)R1}HaF?;pEs_$
zJ~zk|ue-~x9eaPhi>cat=aP5aQ^*E>(A{zNWY#X7xcZzYzbH1A?-6&12KUHvt`&-A
zw|(w#(r$X_wZSYw>1Cr*ll+?{X3!lB>Qm&6dHaw3Zp(}%@?D^&$Py5;Mzl9jK82Ub
zFTqGr;U>+iWPV%lh=+DaBx&hS5aB3=ZLbH{`=QYyJ2QLB^H!+UwM7ekrXetm+Dm6`
zg2-F;g4H-iH>}_mXdzWz?*kvmJXX%JJ-y4W9`2ufpYi~NPNtF8y`x3J=v^@RKeul1
zfm>=?N>`mt`-VW9z(%8~5(abbOMo|jWi$@tnY4kEvtUc=XvC)}E>5Y$Mo59oN=S`+
zFtJF2O6p^#tJn*MER71KAMTOA>TJc^7E<P+H|9i2gArr>!At;xe}1>WpZ=D_;x(aB
zC$g#TjP|k@pmB^0`qzW2>-*Zw$0NF}=Dq@7aL=ihgVC+Q#<xnbaJR+7*sjUYC-wv+
ztyW6g&nF=TgRbv$OH*Yadh2(Ue(9ckk)Nq`9OaQNsfojmRe#ZXeET@Kml*~7;8rtl
z(cY__4}a=`B6DH<8z{ULm?uz5E*y?MlycTC<68~<ckf=!W=_sl(!E9gRpw<z4qV+H
zhLenjJ7;`2xgGeODEn4hdOIh!%-Jp{v^|7xdUfNl578NUM^EBbT3m09=9&dPyh!JQ
zJ)=is->jH9AG~kp9^y7DZs3+G4XjA#A)J{BzFH4=hEd<EPL#*lU++*-1>!1vD$6=b
zWAY?<7tdL7AivP1S>!kH09d;lkqTmH_^9Nf^pd@0m|rxfHVnS3g27Cl9z}4j0E%$M
zH;Nd>H5_;_fqT;o3&MQ8Dz~ff<`3GIsn>Q9QoTFC+D2`+wZ9xCFM4NvadSj3!@I8?
z|2nQ7H}ObTkXz6LiMycBdIWpzWi5u%QuoPPPKE5RF!u}?Tz`hESeCCl+T6#ctE<{d
zsqi7DWjYRCx+nbV+3oJ{QO)5=t7Wdx8DD5s@g%L0q1dE~Zrh7%)sl*|77~VD@D-94
z3OC2K*F|!uSOq^dBIl@W^R`1SoiYAFb-ufGw3_nWOyCPW;@&&d*2^DR3>JOr!8owI
zu+RpcVFoSJ$Gmgay)CefpVI3+kH&C#caBo-gO|$X*G$6mbU&TynnNBelP81LNN7PO
zM&09FQpiKrW4H-<jjO>JV)rV7l~=M^90qgTjx{8)&v%*#T~{-W+wM8MQE~)qhZLop
z=~%h^QaKT)1Bmcj#y)n@g_zojlja&;VcLHDp_v3Qqj21oF`@Jck};-5&~-*P(3lqe
zf3Gn^z1uj97-U3|-10w~lsb3MyJ<z=2%s@Dx-XPtF6@k-zI|w_vp+|x#Nv=_Gyxq3
zUlfF?edwc5Ia;C&W%I;`Kyt$jHD*PpMnYh<BP^k`Oukz^%DpCqbySqVxu5p`W^b*W
zPBP1`B6n+nxS|X(T}#lz{n~IRp|q;lQmQ{bM_)D?A2o>>Z%(VyHU8z9N-$?oM_Mr<
zj`dl5Q3|=Sxl*(@FU9J)a!l+dxHD-yRr)~cT!yYaR-&ie3J?e7(-KaK$EVzp!M74S
z+#g`Wuu{zvJC{u7I}G&zO6z<{cJV(7S_w~CmaRS}Mekg3e^!@T2-#%|edR51r#U?(
zOMoCPDO{i>M3l^(aGM!JgGg(w7mvToFj$JWBd&5R4fW4S_mO*hdJ3l7Iz#b>%x6V$
zoHd#X$So+|pCv<(NCO!*QOvga`FJbiueV(E4=KrgQ<bz4Zn0sR1;0R9FU}x^feiwq
zdwX{sC8voP0F09CC5))HXC>kjJnw*H%et?Ylw!e~{g@XGiNBk%C#C#P7tTaZ;Q4OY
zc3k^?!)xvke6}`#$M~X?Ie6m2s3M{zlDYXLJue<^y=R1Bpxq*xbe&OKDpOE3sJ=p?
zt5uDtg?fUg=`gbqaYxrwr#rNR%H(6g%W;?*cT;>Z2J#Sm#0Qop+CeV%e+}_lf5;_9
zE$&nf_Ic3C$55Ag&`jWsh@k|U6)a9V+Q>)+|1udJEWnukv6oLMFI=rVoI*W>|5)~3
zzTu24(}nU~YRue^i}onc4X7PfuMXDT%Z{DLaPGy+CVr^Vkg*h?w{_8K2Yy-)6<;D&
ze$#8@w;!jCCG^O&OI!!f=1$##+m<kiMWaFUzMrr_V~B7%Zej9bP$kI;!tAv6nAqgN
z8Vd<RO44fsGjK~_{WKO40mHOiGFq*fDgt6WZQQvqC>epg__Z;s5u_cym!HwE)q1eI
z&#QolSON;#<+wH~LPOHBYygb?DZhd<{|mDWx19|2Lf>$}mP4Z>0$aEOrn$cR+R%HI
z#>MkJoj&Runf^8sT1mKMXirwY6tHNV!dcP+f*qYD55Co-uxgA8%G?%d2hI1(f~0<g
z;a}&G=`lfNG2><p6fCF8JSZDR7yN+CC|GxiSK1YjZsqMedC*gkCmJuv7d6OM>CvgW
zb_nV1QZ9APJ~Y%fShJR)|1Q=C<OUDbb_~V9O9*QD_$iH?@3p-KOxR9}hBgE)#mq-)
z|2(C?IbUD6e)M?&|E|og-9GMx;QV%HAH&+F{XiTxJ{7U#VW(|qDMd5NfB+N=foiB#
zsmf)nIHb5}9HMUu3GEfW%46wy?sNq{(AS(fq&0>6A>lakuNjChJ-K(@$vghQfo-3a
zK~0IkLk8`-?S88_I5x&d6n1p-LJ@20Q}a{WPM1ffH162e!N$ToAurMp*&yA%==4MU
z%!a&rPSBb2Io&1?Zu-H2do}B|R<hBt`O61>1IcevX;4X;wrR&UiQ0xU<rFAq@`btE
z5c~C%WjY)gzaC)`Bk$hfVMWC5wv>qk$P&!-9i2f~X8(F5KA0^9OE(k^N>r;oz)Gxc
z)e_>7uj<iZHCcT}mebU}4ZKc0g3u+8`wFl32}Z#{UVa4Jw|`MuN6ucX_UE3Ds)6#K
z82y}d#6zP-*kQC&6)O|!Qfwu;@8(zGHAUB^D5zTA+&@+a=&@dME1Wa-y2_Oa%&U;l
zh%O7Y>$GSf0PjR@>eKkjgtll}=x3;n)r%fZzY}jCPQBjlR_mh)rq1<<?*nglM)xpR
z^eP05E4Q$ZIlrSHman*2Q#o@4^Q~AUQK3bs2Xf<oFgGBfm4p9*D6(~1IRa}Rq~$=(
z!8gacWzZ8;F=YxTq_l_HM7BiHJ5wC}z9TE3l2xzFWm-sO+E&t)c86!4IOrCI&MuF{
zV=?Kc>|gakFZ|X;oXz-i;WJTg*9Vn-QaafPSE;r@>C_-(FZYVT3D47e*fpz#V(5kb
zEZ9<+Uhr~x3CRSSrBz)WQIIX`(4*0l#j8Bvx9T*Q8+i1>TSPw$!rwJyXA!m#x!}!Q
z3Psc7gO_P2v87G`QkCqF!Nm%AXm){Kv*}b#jv+^0iPgVH8RKT~9PnQuuS<0f%GSJp
z)Y~4|`mWX1jSO%s(P&&=mN%?3W%>sja7!|ERXQaihy@D`Z0(upsVS^b&{`MI_~obZ
zePk7*tB)mU6abFBL_Z?^b23nrH|A&p)p~sZd8Od*<~?|@FXN$CuxFThL3mlP8tuAz
zBwm_y$zKyL$vQeHsI+<nWdem(l9icj^Lj!d;-A&7s)oAeLTm1p$-rO&PcG3+;{+^l
zBNGMq=~zBFlP713H)A_6F2t7$I`@JG(*$yFVDGiV8!*7TP=^83$+GhkWPR5wk>Ghs
z{TDxuuIopO)j@*2o{DVZzwgS(&lZAv>omYmAUtC%?xM<aC?^-{aC>%2-WsO+wSJ)u
z8#(MtfU;xe3epbC=o^(yw@Mh?<$Ep0vEP(Fxf`@LQg;sn*s?Ldb-^jbcmYLIipVgC
zzZ$jazS`unhDIb!gBXSv+?~1gki=!kh4P+%W<31d0lLX7*-Sw>v`98(u4;Hf4Z30T
zl&%&r0)L{KwQ7^=c$#Hr1p=Kb7N&&i(|x;1kzo`y6Xce882DY-2|`>>%P+XxyBgi?
zeILPL!nj&U)ifk;#N8<>2pPdeqw5Zdg-%dd5uDK-o~tQjP{j+w{GtfkNVt;?$EaS0
z>h5ogHyR>^_v7fch{Bd5KEIl@n0*Rgt%`^;XM$DKc#i3#H-UZ0+%^zZoYT6jI79H?
z;=dwCEg3amWf?;(C-hZH7Ks6RMMY-1G^i;ahi6(I(#cjMl{hkoeP=|JaRVd6YiNx2
zu_(o>EHd;bx1<ibpCx1wh<0A9V4dv&4aV)E!|52SPay6HiYvJ2L-G&@9H$ktm7sxV
z>|StG>Cu<R<C|;D9X~q;lGWt{{`?3yIB}#F>4?J}B^LGHn=~bxGs6dw_A99CJ<%g)
zCXT-~hFbvN;&=1cE=3Dnf@dl^Q|uL!MMSK#3?G?){qTd(DxgZp#)m(b!b4TDzY^sS
zNz$v3!UMvf0#;27NZqX{6%$=9Zbj&Tt>9Dwd&%a<%u1a>9_Oe#N;7x@;xwW8e_B>$
zc>e)tarVv}v&F?2NPJWlGC8N+94|A}-kw~=M?D0x%<y&R9c^i9a!(QpalTOe0q5Gr
z7{A~+nL{vq$`vDua+}WQ$MhK@+)x~Ej_@iWrA7YsCaprvYg+V)f&qRdO8FoPm1sg3
zj7Ot$NOV~CTRMT3s>5@cINJ<`2ABKuuZs8-9#+EGG$~wZHRov#s_kXCqR>Q?jYuqo
zE@+ZSGDEEj->Mir+t)9)Ex9M^{GEVR5BKkd-tyWhx1xR2EVpD}kYP(U4Gi&pwNMy_
z_{x(7&TIs^bi_+`@TmyHt(H;|Xyd^<|9^~~Ly#~`(4@z<ZQHhO+qP}nwr$(CZQGuA
z_KS_Z>>mEuOLt%EQqf)cbmk^bYgA`-J0==>Zk%fBqGbp}Cw$Z%eJMhj*`;cOrO6eu
zZH)?U3PTr>CMLz1RN+^=iAydLQ?;<FY>$Pqz4UkMb;B>`=~W%iy*C0pqnIRXJ#|Pj
zW_}0$;H^>!+8Kd@r}}0VrMR4b7uc>0=4rS{zMXwP{yQA}S8#Jt=w5Gn1Io|s4SX10
zuB?sg`t<0HnrZ?lmBPUzg(eMNQD)U16t!QbN%D^MJZtB1#=?4Ift-!3YWPu;n3JcB
zu(Yzaq2v`90>O0O{HT_2AZff?ZRnira(5Gsk)90&z9tO>ahOs`^R0?@>4iy?M0f8J
z(EidUvjrY0JSwbl7UwM(eBtvI)Y=wn1a6a{)Lv|uKxJ?WOtbOEZTh&qblA-v|KfGh
zc8%L@?)T!Pn?^~<SH}-Wbj1oY6zwGw?x1M()I_Xmc~)RgOk8;kC4ch6sYaSB-1?VK
zV5_g_tYvQc)rkNCQDU80)zz;Si)f$MTO-`6v>Z-3b;L1ec{8Yu0<f(8ccB`^DfStY
z_RdCPtZeD#HunXEEZW1<5D{Y)q*2<LC={@)Sg}jrh|{_`nsLtJF=PAA3@?!mtSfkA
zqR&dRDy+7NV^xXl!w*N5D3|9#Dfgif?)f^zTwNMK;}k6}G-}Hw5|-|~S!a+sc+<d#
z1#Cbgw1Vr&xrd>-vg_Z*i}x;ymM$L?%?b-wUb*tdSWEz&*(k;j7mItx{_cOG@X8R;
ze<_c)jN-4c70Mf8OIZjyq=XgYp|xPT7v3f%G{-Dw5aF)JO-XCmsY}8gw5T!Q%$BXd
z5E#}E?Oqn3KllC4i6ly=4X52cri^(Zt{bP%ML6<Ed>4MCM%`|Mhs1FkvL9pf6!UF=
z)0#Xy*Lk_{jNfc|u}`1Kx<D%NA=zz&KWzv2{>v~0omFP>MKa8-Li|6IW*t_mMLRi0
zB|JfV^U+UXc&)_tDEifvhaFZ#9n9TiK@z7;pdyI=V7SdZ`Y&G%2M0J4@?%+il*&qq
z;THOpCQ_w~%=~Cp@>JIA7Hqmkdh0G@ikwT=Kb1YeP$Yi$9t#8wU0D^YA*Zv7fhpS*
z=qSpd)J-c0Gfn9-Vvg#==3&L4>V)8Jo1m(n4d<8E^2gBC<(9m<w}a2uEm)bZlR?;}
z!i6tY&z(qL(E{-bX+sl5HiCtS?&;|z+t*|@ExIW!YLL^`GHpP5Ysq&a@dCV1KLX2O
z3^fs^aS+u~x+F19QETX=gW~>QGq>`P#>yXP7<>7MsVbAQtIAagqKy=j7M|j()d&>)
z-@u}ttNnHgr!MXcHOWTwifjIjvsfTvtY~N>Px^M0YempKqpOCKey4oQT@a=Zl>$uR
z4K`5FY=W&LLHnf9)QvnT8^N@oa^|;ikWd?6;<tG9|8miC<i3ZKj|Ugpds&Pi3hgq*
zabWze@bGR{U6x)Dq`yFv<oO!m_Y4DJXVj=0%7~utb0>MZwZ_`g)NJJR4b+{iT%yj$
zDWTYIa!)JhlI?hpiQYWM=ny~vSLBY6LqE)`5=yfo#idn+H|e`Z*W)NW+WW2>qFQSu
zlt=HXr9_MYSc)7KdplUnv7cB#7ipD8k7>>a+;^3hG-lm>LM2NvA^3|=cj^IbTp`S8
z+ip{cL#sWUD*K}i(0XvX2EOg#!N7-o6=GrrG(g;uLs_P-3P0?gQ2}H-JREyKF6sL_
z@#raH+B79mu}iv98A>;=!SC~UG<b-;@NAiz(qE&+BJEE6+w>ZC$qRwvy1c+y`39+i
zKFF}t7$mOa{wABZyCsAEf$u`0r3XlMf}s^9+dT?zE~pqfiW2;GG~yq-)13x}lrjFG
zZ+)`9?2tu7IM<V9eh#T{CGJ--4oKI1YBl2Rpi-qyCiF&PV!hoz+`RO-qrFQ>#UGeY
zTuw|Qy_fWsA;Kszpq#Vyf<hLRnoDgISB16xn^9q6SB8^U-rYE570AK`<wo(xS&X*m
z*2H#x;i+CfbY}(@!Z^^}z+$rcPle%P-NcYB)RsQPW!dBfG*4yx5^2Vs!f6?N)ckq-
z@M(DeD5Tcn4o8{e`!QNy+EO}kehu~Q3rIb@#OyPS5xu140<*k+OscHY5i7z64>~vo
z47y08waZ%`BKDMwC1~R#r|bYu{l`0BioW0%v4@{!c_F>W@-tm0Z9g4}ohlCHL2$ax
z1NEzJF$i+LpE<R=6&S76S~s+R*oJ;1%~O?_H8To#dpFQahPNm$GOyo_Z_SMyP6+AT
zna8J^KD#_H_nc2*UK@yxCZk^FEjs+x*;FYljcFNxx}a{2cU~TF=UUn=nx_KcN|Vl-
zu)w01wLWssQw8Nx0|lVB6-^UbvaGmBJE%Kj|6H)+lns80R<B_sq1@CyQ8v&iM|P60
z>aZR-w0*KoEWBMg7*#A*^Q6)Yd(f+8hDYbyh*g&zTq!s&JddVnEZW!oui_QSaM}YC
z&o%skuavDx)>WNf-9_zT+DPbS#Te|bqr1o^48P4!bqzm_$Z$P@|9u?4xIgpKcLR>U
z1<`g_UvG=kh^X()j={-ZT=`M7MVVz6jJ{zXl34CqesTK-54lSsU2sLTB~`Zsp82C(
zK|Wi2j*IK!^};yyB4}dSeWhdwp{};G)|?<s&On$$qtf999sb#rQqKB76SR7YaSwZj
zJwhT&NtB9ppJ<k6V(!r?Je2135{#7v^7+Ah2VVimZ}x!gb3!sq3v%<y;p8s{<M;f;
z*S-Vy{q4K=-6?!VMHZ0l2gkVjtW)CzJQ!dxjP~#6)9$$4{bt(%c)Y>z)4+E3kG|)c
zXguQYf|s`To&e?%^rPDZQbM$Qd$$ONWE*il%NmCL9h>xZkv?=v+i*}^65nZhg+@;h
z$AThyrSZ8OUC`t;Ks<r~$}qp$5pc1GssM-E7Rosk+9$Tg11Ox8K80H`-{T<N2s=Fm
zzpBs^_oY%=%{yb&VG*Yqily{1ht98k=JVniHu_)Vi~DFyuP;^<i*klI?f3X)%(Cd%
z!WVHDqZ4gT%@9d;%>F1BZfAm;Dd{i8k(b-#p~}*0Py0ObDHb0Kvo`r`=Q|3%AM-#6
zly5n=sSwTiCJL$;T^Tp}W{YVS%f2TKB?o={D$5yUesNL6H1bXsQTzc^RY`<CYY1S2
zyqRCE!OwP)@p#<nE4?}LE5>AL_8YQulo>HKZRd*#c^}weAB^i!E)gVsZxFXCU|o@k
zwxO}a9om4;d8Ez6ESYBh{*H0kmNnC|k{&zNjR7@T6yes?E84OuZy^vVN+Db2!)clM
z-6k6sIH5QKR*jFeMmotP*NVb+PfnmnE)fJz98fREqy<a&a_W(%LAoXvV^iK)%yu^*
zw4Q~d(2xe@?HWQOAL5!Psc>%=<WIKv!?OGMFtfAG!8<{g9|-k{hZHY0{7~I@8Xk*Y
z1yr?#s$&di`==@g)vFs0dVhiB=>z^ohdX;ae&6nAYp~XEc&_^XpOt23m{^#&5mfx!
zec+>Np9-rB7`Qh^{SRD($Jc)mx!aHX{oXB%R;&d6C9iLC+s+8;u#V=|-sEAF=v11$
z(z3cGIve#DR>HE8Xz*(YXc11SOu5Db)|P1#k`G7Lb9yB6Gsf~t`}4d45-~{T@moc9
z6wq8q`xO`=U}Y^GBOZzk^_!e%wpeAk<y2x=1cJGzRb5GF!ruvk$;uF=oXx}9f;aFP
z34Y2cw}&f<r>`;8jwrW9xHL<J`Y&6=X|$LTn-*E47zA9(d7P-Gs}HN5Ntpns&U1aM
zW)<TZaQxd$tLa59u!dIFo?{G@;}<oEggpoF6zcz3<L~@?SxL61Lb>zGZej1v-9L<p
z$QK9acbvL*YAXntv%$jj`xHWtDI7R>*((t%3_ELJ7<?M;XqE8!PEePV(!}Ld20JvI
zErzj<E#!-Nb$$$ZEo4cy3$IPzi35^rr42nWvIhRFYS6-VJr@|^({%@NiK6H#5_T30
zj+lA>NN<MbB@7JZ<8^!0(y&V?N887tMMriv;$Dol)kZ<K&6%>$7PVa5p)_mB8wKZg
zE$WwqYWr;%FE7U4uPV^Vag+bU{BInhF3bW#HA=!oi%n-peX62#X~fjc093>kQPgwh
zlJZ}0Ly6LP7SoSke{(2l3(LOHGvkm!Z=9b|PBI~o4UCsYl8CR7+0y>;U?WK6-GzER
z5VdK|i&<gC);(CinsL?Nb%gA~7Ed$&BHBN8cby=mhut^32kh5A7uH2$8M@co=L_xC
zdU%9ZF=cKiD4|Q@q-SL<WN3}{*Hd(+8vd;ly={HtY#-2L4PoP&Q$zWB2BY30@&)u?
zo77R9%FiZkq!Jw~O;qg3#>^=;Q!W2Rk0}1N0IL0Gyr*35e`)oa)ESRjV?Rp__&DSf
z3(z4GkRhKF_0fUqMtRAbs%l|m2W(AEzw$GkjZ8<lLu2NJaedafp#zu(gVYLya^^Lk
zUHz>%7}+7PMXZksei-%ol5>=-;`ueo=yr86y=2w7)Htm<TYaD_j?HQjl6uIHdBw)S
zfA+y0yIOj0Lrl0_qRTy24sfng((#*04}P|6yW$2r7{?{y*ccVu8&h}KXnNFN?D=Ki
zs8IExJCyObAg<Bsiotl3dmkjYX{hVedg|9M=GcBoCMi^Vqky;6f;-@}z*k;O;PPds
z);)6GclFCAIdn5NaZ+GM=fZ#63dAI1yjW>`1ZSO3Cgl|RX_6&WE@eE`rDe=fkMG4{
z(?YSiL^&TK#XWbmy612-dp?gian3OXbgb?M!r$!t=Sfo<H!@G5()+s(OKX*rn@3b~
z7D^*Yc-1MFwUbGHVM~dQ*;G$EWS>aU1Es_SMgX7f9q-ZHe0+k+uk+*O_rYKRtkF7`
z`y-PPKQiX?H<O|gYDLNZ&pdq7PNGq@v0A4bgT1CMD!+0qzoIgYEu1PDQsl^l<c1Su
zI+ri-9BPFza(^>i<qp+ZdH=fS1nZ?5Y0BiJguLr|7M<ei7&d(H`~L3Kxrx5ql5|Rt
z>m(ioL%)rqw^!76c=@;E;k)g>!fj*S=R=yyEts$3#vy*oY-hF@17UkEgvN1`L*a_E
z4v91N`J!iRRJb7|FyMaF)ZiG`<WO)-1L0NVDrw6~D6{s8TVXrh*?NO;0kMgs$x>R(
zE;l%|m0jueY~4vF)omquw$>E8v>|9G)LN1D%wFGvjoT{Vc2l<Ce1*Z5dfm%+iA5`W
zdCSmn>IVdZos<1TG0wLFvq+r+Etb1OePvUWtFbQ&?D|0c(J0Vw)ZiFWsT}_L8$ziY
zB6$wj`%8m{<_PYlUbF|LF7B;aZaHwy;x*ag*y=mM;C!95RW%Z5@=5Pjy(*KPm)4)B
zRV~+EdLw_CRzR@mn)nY$w0?CE0Nm;9Ob-xszGZ2nZv~uVV7;Uj23ne=UOXZ|s6R!q
z&|nU|I#q@_yMsClKwJKcL2}U$YYZG|IV*?;ZVx^uZCT^}A?y#}yeR}~A02Ar6pO4x
zU_?m3N^NB&@D}F4Dyu8eR$YRDB8+=&?y4f<^_o3pd)eZ)pU8Myug@)T3+JM^iwqW}
zN!1>g-&_>gA~HXL`R-l*FFhs7zeH4VlBhydW$<UUe-Cb1WL2(2aGn#@>{w2f$7e>d
zA|9(IDhkOQfNkt2%)vy2BC^h)=Q;=VSBEgloO*9_Ys(D+oTb7iC)iKT_jL6w&ik{E
z(;u5&X-C>2lhO0Dtq)o++QMG^s+xXMz|q{7m!P7FI72WV(bJhlJEjwDj$>MU(uf9u
zLp87x$Oy@M6_d{kr<zTnWfN)(_jLMI4H1!{#C_yNk=v4$TddHp)RimMv#JW;+!2UW
zw-&406;NyvMN~^@@xK=!b2Ilyl<pBT2-|kIHqF8PB(Si7Z)uSShAZ|(`X)sY$<%!l
zDN$UNmN*$8c(woVf62iu?e$#WQ?QUzxr~Qv2RQ^n-bH)PtHNxBTapwd!~2#mU?X-L
zv_plYh;1l-!M790MIP}Fp|U(<y*>AgOpPCnz01%6v|za)#x(+p3?_}IYOzYO&i}k3
zmEF|FgEJiOwT||yCG1a$Pv|WQ2<*&?O+_|%Vcf|gV-XkEBih^(^^6{7ad!hYmjFP{
znRnHg{@ubs>z?+oc`+kUU<d(`MTZl8)nGCL7CCCtu(2Za9c}*yau!N~4L5^>-xs)p
zg)lH5C&^e%I+l2JWtva^^=(+DD-P!|b8u7yAoHo}7h;w<FThQ+E0ZJH`^>=B5stSm
z;X$49f-4n4^6F!_7BZUbto$r8uGKx|l!X`EEbp;O(72N@ToB*lFj_1Ita*0G-66%$
z`2f-;JJouL9j8yu^IS0P`k(>*2M>=3d`YlLopuxpOb;I)zn_zLhnBBWK{|EJ|4=VD
zLa@eq`5{>_{8)lXQ;hYivR(m+f{mMhgI!Jf?$JMM?-X>NLnNZGcqm|LOf@En*khjA
zGj?}(jcIsGzp^{MFQBFBbE$8$r-;{2Ga9ruh}g+af<k%!%6i)Ijn^wVPt~j@n&JnL
zg+<j*yRViJiC>Spd83a@DqL<*`Q#M>MU$lzsFEvJ9e9vc*1?T};d#19ppNz)2wM0-
zK!N{fw648kPv``=yt!fa!*(P>MhDDK*jCC<*#O+b)@a(%z4N;k`5;<{QGw5Kc>TnC
zhGWUt>%hjeenO!W<dq{DcY<3Il;Y;J#ebRi23wGl`b-4?#aNjIMaf)1n-kCeCnB>v
z%)Yz#-B!~6nYtED4R&~P%WQWg;lRJ(+qZ=IW~MiH)+1vsPfcSu9=N5TEh?ur$m@TX
z2WQZX`7bg+FYVz}r!j_nQe4{FFC4s2`KBgQ4Dq7SY>j#k^JDpE4?zX0Ce+*ihq^@&
zJ3&JQpNVu|5t77D;uR9*JK0u~<U(oNH1{T!BzKqg+&wFl>a%vuWC5z~^LpzYf%dq6
z^Yt~@xLRBBIC-Z;?$-Nf%rfRk8_fh1|L2^ecVq}{T@p{<WV$ES)oxotvIBYxyH=a-
zDfsWnOHCNnJ9;w7+7pY8m!Z$S#)u7|O8Ac?7UU#LgviTobb#_#YUu=3CE1pbBm(ys
z6A!HvJl(>H)=sa~<&ia7ty@S(MNrt%w%yjg#KCl`HT|T5#v50ScJPBQp##;~7o1nY
zE8<d`UA=$(`L??Q)l>T<njg)P3ybr+IDi+#N~psJ<t(`AoNtn>PDzO)*hNnRlB5<P
zSyP5oA2I?6xQtv#&9L7@<$}x6_uMCKWSC20vc|N(o&6@QDelVfdnU@<(M8~(j<HoH
zH2RU=UT)M1=*XZp3aT_8)jP6H)PV9FNPa*>kK^Ft4%2`*af!QePwTUiLzJtChXf<V
z2#itu?-AczB-zRB7b7dbPUH~)B~nP3*?TniXwN}|YqWQsWz>~T74%L!SwePPL%F-_
zSMYwBwoa<s^W+5eNQN*4%~%+gs7)k*VQ)%YRld?NNH%7^5K>Apur8aGI`V?7ZHvYp
z<&y2<Kh4C+%g2r9q91x9Mj2!<pWYzHbj}Xd7}kdZlUPSs6Y1m3V?9h}snmQs4)&sL
zf)M>y5zX=iC{4|@wx#$lNPdN6(Rc5O%Ubw5qagC%7CL_ud3N6K1Fn#2rko1H1O}Gx
zDkUyTxXBfo-r(>9dz*4b^AOwETi^LOMVSy!Iq|W!vE0fcAG}UPhMLglnS0rOn_CC$
zN4-TMa;z;5uxyewkbigzWbXlA3??qym;6+**E6Levw`&DnJQa}-P~rK(dh6j=dPF%
z$Z4Mt)55{-V1d0{EnN?Rw@kS@0Uq}f9M{9es0Wkuf7l-1TWpk?fot}0(RBjas!Tn$
z@uoM7o#jqQ(d<sq&Ey|i4ct5wA-k1nQvi#iSpA~tcA?4#X47ZHVrLH#^A_=9T8M3y
zFN}E5v(F11MxJZnJ#Ig#-Uc_v=6!w}Vo-TP35&a%2>I9S76S*$7#o6ZT+q(3d$pZ{
z?QTZG*RhQkXY{k;Kk$~1nbCW8zkI@r>8>w5m+TXE7&LiSQx~T;y3yL4<S2tLT6Wc8
zAX0SIU|LZb7PpyI?*AZxdBKpgu^+Ow=h5bEp^hU8VLt=+FNpPd&!nn`mV};6Y<G^H
z$uqaG9uv>OLId?>xoYHC4JG_H?{V@jV&%r!W@kgH|E@X6p+Ww~vToUQ_2$MM+KXlb
zzB)VwhX#vSn&K?EP%dJBW$i5S`TZo=OuJM4?hEqeWsTBtC^fw>-TA#_TSGreL`VSb
z%eM-Z5s053VZDd)o{Rmg<Hv8^^`fBfs)H;ucCw9zt9R5`6>Tqp=7fj7F~x@n-3Na<
z)rr+KtH@r!<A+Gw<Q=44n<xt<wD3+LtL<UF2!?x9*Ho~dl#&N5Kc)*qtTO|99)b@^
ze_vOBzzWj9ASeI;01yB&`3h1D`MR?%ga7~mApihm05|~l4yJa_&Nj4+bc}Qiru6?E
z>788+T}*BN&!%r<Y4ksvxSjA=J8z36?Y~l!Nv4WUc_ln~wi}7|6$?rnWfFCgSd3pw
z5fU(vGy(zA07RXUe%-J0!W%pgQI1#E){3g)AZA=%-d+Cp^~upmL@oj?WP3uF26^e<
z<M_IHdhMHjL}Q5whLS(iWwIj5Pw*DxWlgdv!svO)v8PE4vJq1mV=P{!Gh6_I+J0*#
zzH)etZ@3tV;(*5wqUFKt{pi4b_IZd8)S8K@Z6rR439fQTGR<zrjBY&A*JzockWT)_
zAk~Y`bUWo{$7B*9x&a8n_LC%oG!2H$;DbYS!2x)j$-oz{EWV73Cq3L6qJZ-bN94{X
zmm_cnJ|gv?=QIiAF*`bX_UsuC0M^k4H+<13Xub>K1gAb3HGG&p4z6xa!nM7_Y5Pgj
zY8OdztNfiVH`I}B&Vs6slvf|@_riU$<Ne!QMnWUs;yC^b-5u~EYwU(yM+j`hx*d>9
z-7rH02J)#L2*BPe?ff=UIG++ch08<?qYV>o!gn4Uo*bVn%&#9%HEheXve73T!|HiW
z(4u6*_I^V2B&Ycpe4V|wb$C)fkNYXv<L6VY6a42bebhS+`^4_ozn>qV4m+>F+g$p7
zb-a;CP#+5Z4@sMqQ5)X;Ws3d)AG8^S`Hn9_UzloqAJ5${#QXs^;$$PJorw9puD<My
z2COHxA~yt1M#wXg&9D@l<Nomyz#UK1IN0Yp<_ozyu6x%5KI4{-`oUoB-4(B5ZeJTY
zv92`}8JFLXfu(vGat3xp8xkQR@`m3JkU;i$KW-w2!}|y_b@3bYAJMu`8MfIRTVyPD
z1H3s-QhJo0`8_T*Bi}UlpwFLlWw4U7B;eoID$mjNykxMt4`fT$<xB@-+|LrnH8nBD
zG9CS7B>pDP2^~+s<n+NU=M3G9z$`Gn3dW1`N8HyQ0GoOKbr!j}Ksp48x@9#WF@Ttv
zFg))(s43kKL6OV>F%~^<$cSe*W7||l^vnH-8}}H0X9708Eb3{nx7#CV!q`^)VX6X*
zx232F$>;cnOvi>z9;zL|yu8*?Ht8{7@l{>I{?m&9@oEplt%57&X}^hJ8XlV#`NuWl
zSR;l|B^@b~o3S3m?mzL_l1+sOQhH|!pqX6;D346F76hjfh9W}K>r085$+YgXtAf4o
z(8)|EeIZN0lyc%Sn@IF*gTn!?+FOwuURR}B<M@%gqJPT~)<!pq`c_7Q5JS}}{JYgZ
z0Q3*&Bgo#EPNA&n1}4X)uL80Rj*3eW*-p)n+o!0Y_%}JdrbCjx-#527wI9wWEi*QP
zP)UzBodHwT&Fzy^Jn0l1QDfaF<=0Tn3sUZ7ESn%C0V;zvsJfenZHRelaiDk6tvr08
zzqGOt??prJ&$%Gs@M(dekO<}o?1pC~MSQv-k=BfV_Vks%2+#=Vl%)HFKp0mdRY9=g
z2y!xCWvIi=A<5PL7@6<6`Lo}3oR`14>L+Rn#1fFiUl(B32^{mKeq?sv7OEWT;6(Ey
z<U+g!Z`j7OnUCQObO96wz9kQMEW~AzMYz&dfip$Y#&aio4EA2Zdna=Dc}Vq@c8EOX
ziXmJ!dl_Q>MpnavBN+0mu2Fn=*~ZQ63@?ub%j}2e4mxZcwK!%+X4#tY_&b~wi#(>c
z1{QEH`LT;07BJvnwJ=x;*2p9HD5xU~&Fgp|OpM4&*pwyjxUrL@doq-9hWJMtS_Alu
zrF_wez)bB#c=m<@CtD|s4!J*6LmraPDr|<CfkMCiR22&LaC_+=F3Dgi0<IL6?&{Q6
z0ecGe-(et-eEIdh*sl~}7`RIy7<7V!oN5q?Mi_@EK;1|LZ=j;eBM@n<qfH0LV9S2}
z7Ls*u7v$uPb1rEo^I3}Wi0X9l;qt7?U}-9L>_numyf}$dl~6?DqSDw)DEBiv|0MHF
z*GYTk+Cx52|5=mwaFsO%9D)z*=i=k;%G=2*ILqeC%rx4`j02;I1>|fOG>}zf^%n@m
z%yN{tVadgCZF%noU>p)E9(zdN@I=ECbp_e5#a=&x+o0!LKJ6z+up)>ky2i7%u`G6g
z$r@Z518KhUuNeT+APw_OL@=^)kY<-!)0=kKdLnA9({AL6Qw7croG~0X>NWBtf>J{>
zOb$`8W?g760x3X(5xFto(!3Jj<&u{pt!=#<Acb8pc*J@n&|#dlebz0r@?RK7&Mid|
zN|3)uBWa!_2~%Z4v$XX_MgkCMP=WQw(qxGuCux(>Q_|~6y!nxjTW*c?EOYBlOn!YG
ztaSuawB^R<`~T%uNc*%qM+&QR2CJ$FJv1>432Fg4)bFp`4@$>!9nbZ`(Opxqx12nb
zxTG!5NZAfX8jA^v>SgIe6_Gs%lF_8^`d6_9@MtEMwEw%kOl~AwWY8O_Kw1Tzmebia
zAX4}Jxi)w&a}Yh9Krw<Gm|N&R<5k$|TxIsj8-^3)j@r>!f7t^EsBj<qm516D&3eWw
zv6%yyZo3K-?JXL*J6&aNKkgj3rncNh9$sB&-45e0nA$clXZ(n{<Yx@e39Ku3EH48j
z=GM(Dq0H7Xca{2VU*_}99&NSobSzD$ucr#0iZqL{iXt_JO8kmJ)um;5XqcV}VOqvj
z%<hV(k%1op$Okbf#lJ`caYlusa|~<MOCvYj4fR5~_RS`J1=T?>R^aC($7h@fX6)%X
zB6#&v2nib|+;^g~roHzPUX~+@zXkG2nVo?(z?R!Yp2c{dy`#kd66@N`#B$g1YlTN>
zZ<p`f(~)$qxv7azRQ-b~>|ex|`Oib3caT;BC^>>%XGGD3k%o~L{+XzAl0b$Xw|JQ!
zG!qpFwIL=1olucYgJwGEH7hmLfd4iYT}m{3i{ema(t}aXob-91Z5?qY>CNJFOe414
z<V``!lG^nvd#jLU`e^Ok%_0N0$GUIXKFk=`Zy@Y$WyKe)B9%UACA>@Ov?h^yghkgy
zI@M7Xm$|Ep?dA$RyM_pR0nf#|{c8ll?~g&dG?qU$rZ7_Slgb7nq>*CWfwz_%U->cV
znsy<$p+Ad2FvhLi`d-k`%eS{Xzl6VB<GH?aHRbcyUb(>&?kZfxmWrkTCEdUDmUi94
zdb#<_i>^ENbxUcmUxnhFA~)oOi&i<Xk~+O~89}Pn(A<nx-EwL@9&<m)6{#)|%>W1K
z<g4;|;ib_qZtpsOA`+MHrcMzZYPsPbwS<Sl&E4HIW|UHD+A8O?<H~EJ1|DBd61rY<
z)yMR+cFowmju2B<9m8CK&R0Fw0rYSS(hpJr+Tyl4j|ktZotM`5g8Lf$=Eva*hU_N}
zjEHxz`8s^6_Z}VCfSW%~+<rDPFoJOswF^rr>8_>e4w)P=s2aRY&PFqt<--y_KEC%R
zCehzD;!E@cjfwn;W?Tki?Wn=5rpVfq%b>`Hq(;oSlZ<ME?7T6EG5};u*K91P7XaG6
zOOb8Ywv#UocwbDQBy4od9hLm-l4;Wv?7yIe$+wD7$J-n`hOj4egqpCWY=&PW;<ZA^
z#wN~Zpzp#0fY(o9KB2#fIfi)Tk92YC1ejwIhyq*dSvguwe32Xjm0M*VWAJba+bAfg
zZNi6~WOW^ypZWbDsAYPCAqEX_FXHL=$BSOBo4h>%7<c<QVkzvX!zt{4FD}|rVCMxU
zu-UV08z<m*n8r_MwW-Pym${8TK>SSUb8_MI&oCs9!PsFutpNWTu29eL8jNo+G;)Bd
zTTl(9Mv><k?&An?%q}&fvP9~c+!9{ugc+_6=x88#LVg*@X__wtc8r_wVj8nxqeyR0
zpaVejQS*<d%1n)wqdOshz?pl8E@qSrS#cdybn)`5R*0hphXOmSe)ISkpg`dV14^?`
zQY*q>FvgKq&kx|uCcqJC5p_do$5K6BRJQ2W^T96_8M8uvBmwo_Vj_f{OfA5Y9TfzO
zJ$QgkJbeTU3=CiaI;pq1Yfy)7;J^=pw?>nMdSeHnS3+FH8~P|F{b*{av<N?RbnPdo
zB~KOhq?)X0H1Jnv?=l9isVvlqmD9*nkdtiNnoft3&SU@mXXWbDn5&eM7N>Wc#i?03
zhiDsZRO)xMD6oiF?g^Tg5J;Ic0JuY$rizD~?5(KT&QH<hWri^c7Q8;;=G#2t*ER+S
zf?`^_BRNn?V2ec6dM<!dj-bT^^SU1W&>VEo7ni=H+KX;}6~_y%Q$4g0c@_fX{U8M1
zWcVgkGOjtN)bW&<+mk0{ZTh2(T|fo3fVxp37}6sr5&rOu>(>)p&TSIf=P33Z&Rt_G
z@21}Lq=3q@h|uYT3w{Rb9FR!WRD+wVF4IG?D;?XEAVtGjP;3sG#`X`@&+a#fKP9Ci
z%BBa7makI1(!jAA+bIm8JU8h%<{8jaH5Yl}x>BmkWRDgW6&>b3$IL1Xtv(oDe6vmu
zHx+&hRQd_lN(Opxg9uq&&8&JoO}8v!Zs)3~8-MlHAN9uf`Q3Nnx1WSzc+XW^3qNMn
zv;LV!F-Rqq{6zPV(6-Q|SpzSp+{xkGy?c1T_kP*eNX5AMs#y>=r)Uf8*nm^p8rzv}
zb!giZ&EUyRP1F+DdFC8|W2jZ02QjGzdTh6@1Xr!P2=4kIkoX;lYENqF!Dc}22%;Mt
zvRwc*ac)y^>-_caI8*HzN7Rz<IJXW}DE@X#e(j9<uzdPe{Q8f0E^d`6Gb->?_by$C
z7*!QFHd8dTIaZ6dC)g}gb>9Yg82M`7o4vgm+zZq%mQ&LB5Yw5W2g+NmiRO<kKD1*}
zRx=7yo7Uk1wxM+TRUKRwe~!DX-#K!CsMM$p?;aM<V>e)IH{$uNAf`3)N8$b9wFrdm
zA<rJz3cfzCNV=7$&3NgcnGKD^;XTa;B=<8#)UdItewp8t?JEdki2*PvL!+_vSkd<;
zjvR#Bv!Y?38&okzs+a}sXUf$cl;;N;1XXPoUz7lotPnKLabB1fMf*m89*H!ncPFHW
zCa+(mz|Ns<k0>bIn~|rkF5_FJvm1S{`iAutWfKe%<uoZY#Rfvi>(Ss?zOaykj1V;w
zK@!-t)&;)1#P*U!Yz&QJ@OmBGO#f-R2(S3^zZg@82lvb8p+G>r*IKxJn`pSCkfu!9
zR&Br2PC>M)b(84kfz7f`BR+j@MXsJrSbz08@~&RxVrA=mw^6T9sts|kpNw@Sp+Q(1
z%~2%Vcp`uDABi%Dp-P5!l}x*H4P2^jaPP_d&(G%79E_7CCO(}FFZ>mPbJc#b?~$#^
zLcYq3|H?|L6?*O9dgP|LMDC#t0XSuOs8p(WRxFAqC)ga^?87sngY;qJemqY_-tosI
z$(1S(;2lXA4NZh*RH00cW^73cSn4xIAa}ppx-n_pN%vM-GZ*zU<t1bO{iHkLuwG1n
z`wLrd-)(8ed?ho;C|=hg$3a95uYcTQy???{aN8tyn(9k~`INi<vD^41iH~_eY2Wu&
zXBhjg)iOO+d5({|YTie;Vw9n4Y_wd$h7(xr`*J00Z2%^`h+AlCYJZsDJK{Qj&F^{b
zW=^yxfN+)h1HO+>{gPX1J(&)>P}6*7(hUIhDmgztKT^a1Wwr)8<hPD$=9LJ?g%pd@
znzTEkZmG?!FI$O}y4Cx0w4{`lS~YwPL=>%46zu7p+6H3SLnL3|@3;Gvkn5XRzf^$r
z2p3u_7-)J0-$aeZ<ocd0Gn!aq8h*VAw8PdH__fl5o!m=~A(U=TFCkQC(ghzVje@3I
z*YcjsuKN5)&TTGp9#59DBze-{V|fi!W3BJD#^VXe_;GVkMFqal0_D)H4llFTy0W1@
z*o7k(19M!s2I8ODCXgGe|5v@sM6X@z#%q(aqlBr<*zaqp*Y|JQ4#Q_gkE4D&-TQDL
zL+HDl$cLtEGssP2F$$UxdO!MJPFqh<Z3BRi0EVB;3tz!^=Ca_qu0DG#;nLckDKp4$
z$S#2$9A<s&7dRYp0`vE?=;C|u;do$$EAwcMAi=L=3s}ePv+)i!r8ABZ_xf8w${bK@
zJ~IS1DM+yRvfEFd+3>jPoN*Y$Ey|b;1FMPmrL6qDJACePCm@&G1}b6cUIxaQ>&h(#
zI6aUPBMF~@eDnhO<}6&UU!5IJ5RU<7P!@d5gNyM+*LdvfuSv`EHGx|pQ}A4m{oXtI
zJFakd6~Sl!^7TFDGFAYt+t`L;gSTND^TNX2t+u>aCtwCfHejWG5uw)kpyHbj`$h4-
zr+y93ts}YB2e(AXGt>~au9Yi6Ir(RSh>BIW{Tre4T1MvgT+v>K8YV!<Qo+$N6x`|H
zkRs+4e)v6H01X(PMMdK~Ak)<awmgi}<h28<5r=^mh_M1WAu>>{lpm)rKdvgV-W%5x
zd{5WcWGB;qeVicM>o4rKZ*TVyHL5tnbI@!^xF`6?IRJsAb*#c{nLzk@*C*(s)46#*
z$UHVyCiZK1(Drpe5!~Vok&~L~YPU;w+U+#Eqj}C^MSL?TB^jB_PX&11%Q}P%uO&>x
zlLa?EEE($-)G;?sY`C%To}HqUqghTLgqbSv#7i8zrma$hJK+ul8@ZYs@!p=Ag*n=X
z1mY8Wi+<y37*WgI)`MTj7*40=TPOHq^xN{*^@MD@rd|e^0SZP9(xTM<93bup)^*K#
zDp?G9-$0>T$um4|^p9QnnE3`BX=W;`AO(uLT6Fdb!Tc2vL=nqCP>PNC54MrdlQ_EI
z2$7EH8p~|o0zj*|j0r_zhyXFzdQV!8$pth}sDUKZpe3f;Fg=Gw&ZfqnO%nLqIs0|^
z=%=AP#d*ViY}*C0DDoZ<Lgg_cx7R)m%{0#MpneOP)`8-hY7|WU2G#_;h9h6y_z_p{
zv9JPj7pzYiz$H)ZVMNa<MKwo5R(DT=K)o#AKhXEPmJ0rG0Q0v06rD?yA>Ko{hive1
z+Adlh;p4Vkd0;x)l9fb_+w8B&(Nz*LdreKCC3>QzI??i8wCq=Pf&u_4LZzq?KJvUM
zKox{9cNKZ*Qp3?#RU~kKCr}7a3>C^oqx#`SGQy)>Xsml4>FJJ+@}5tBCf9tzQyuli
zPLVGcOVJ%J;T5R?n7ut4QiGiySFSXIbCszKKw^K#JSI~Uj;S1iY_wWHfb~mtA)l1<
zl3X1G=tq>$iEMvEPw8zC$<K^FwhkNl>e#PLpXDe21J=4o5Iq!}5>J+Y&S+RZeG)@I
z5cb@^4>9)}((iN#ah`O7@tJ|qG7(_sa%&8oUw$(j9FtBcY4CFVgI6ejhIU<BoaMa~
z{qjk53u><AM)AX7wXv+864{d|{i|-pwW+J&`k1;((tv88YhW+42BzA}RfD${Mt#=q
zN$KLgzdCg$t3rrZTO#nO{j|QCk8TvcxAgoB@n-zT@@DF*DLhMe1cjV^6Z71U<<6_!
z9kk6XF~j6<DhhwZJ8KnTH6a-n)@s-f?Tm#ar_-F)BxJljKl9aceqo=Lv@@jDu-RT@
zuA#ceYZR`pFe(*^rO3h_jAm&(CUltjK3o^^xlGpI8=><umJAc?V_GNh)D9;?Sb8u}
z_6(!q5u5*fJ|<vC(eOu*vXs<-mf^;^fUtG96FS}xwb<X(zN?)1<DJpp6bdX}p!dPL
zMBkEP1j+v4`@d?z^{Qe%3}t;vN3}FM#0ITeKBGS<)yjXSrLoaD_LcgvHOV@Ow$hk#
zzWG$<)^mA+5c{iqr+V}Yy{d2?%DI%3ZTdL~@j*6^QcO(=Vfgq>A)S`sf12kGl6^{8
zcp_-`3tK3$)-N@|r9TvM0LoUDVd%xsGDee%>*evfy#rH+!?H-?f8j0d2%ZsRe++`!
zo%eGMy;Q~nb}q=S{S*v(eIn<h&Ch(`q*YG7sX3kdhb7R`y6L>2gr@4K)0Q`)V$GVH
z@SAt6Y4#B|3qNm2A5(7S8XnOTPYu?k;P;_ph5`7cVWimm7XN*9y{a=UlHrrELYUC$
zgE$GsdisN8iVs5dzYPiD{KNCYQmW8rGs1UtMwgy?(P$(!6ufTs5PrKh3oF6kfIwEz
z5*(x3RBK^6cF1dnWtFM?(b-wg0zN(c*HZ|}j!(F)gcq?lhQ&mZ5@u>#4o=J^vEQ3?
zSc+P{cJ#O1-F03TOYpBA#}8n<I3q-SDFu>2p)7O;!1ifuA`Yppl~z3o**lEC@7vLP
zi#yjQeF;uxGWoyEC4KMy-;P~gT_S+uyh;?Xa<6Y-?RZ7-Ni3HtKj{sH=?%so9QQEa
zHk~t$g-x=9NF6RO4_@ju44kUg7D6xqV}lkGySSg85uW5buc~GaI9p&+u}0uWE>5RN
zw7mOG5qvl?M_dAIKU-!kN|x)86vGWSQ&=i5AuycVfCUhzJR8vgE};S11y%5cRG_+q
z#-KWqA8*D4L$vOhtr8tth0wtJ1sebjz>$E(xhZZK{Q`Yy_0t{Wxra}{8iXWdxuCw`
zac%EXr&wD)XZfg#R@ZRjaj+CzZDgLVr1-MA!`oRx^iu*Sjax)@sO4$(q^J<Ume(m%
z<G263&N>od@HG!GGI3Io##;de#^iQUn={8{+sX85g>+@eu&JG>cP!nvIaEf0iet5o
z!7cdkvrQxUl^p5spnNh=<`x$i@8f`<?<$NZAyM4ZTqF8Jh9Of}(<de7t=8*|Y6YC0
zlFwLPq}@&{<6}8d4m`CDO5ZGvwaf|>oPXHCioJF`uRUM3o^S7aDI3uUc~25^pzR#b
zBpF4sF%VdaqZm-M^*6Hw@S=~Q31#C$;f@ACNC@rYg|pyI@QZ*Un46Wa%hA!G2{xc{
zw;=KL`n`^EMP|Mx0;nAGnZNI!K%GIYoF#U{HG>*@+Sse3N|az(^cdxV3<p#;i@^O(
zP{Kfpsjap^MXm$WA%d?pHPwLAVHJ-5HK8E(93bhS6a??ZY9DmuyjRon4<tmXgyMiz
z%0qKI7o~3X0h$zE7S-f&o+B^Y><!f*Cw2GAyc2*VNx%dqM7Co9(rU!boSv3?0z$jl
zuGhj5*rY^e3UETF%!nWX7J`D39~aVH&lzZ#^Swj5ldO$E?LWk)s+^>q?L0#AR9>E{
zl7{|PSkfG7AGQorV;`xIK>zw0&0s>^23?^pIKTm?hFwmAC9+?m>M973f;@JC3Rvd7
zQ)@4`6k|ap^aACi&6Zq>eoN6xQ)s_61hG_gycj(W`hA_GpN)SY5K(@|akb6yl_9?o
za71~2`dt_@xWRzqk^V%(I|i|DXZd))q4RUa$Ou~@{FT8bAcYis$eXS${08htcioHB
zWdM)y08^5izFXACjqDW22#nxQ=92q%WOVA<Ryfr!#6G5NW?nN+tIs_%#^R)2ENxiE
zSkRm0BPSd7r~{FaQ!t69sB{g~RL4QlZcn5i>3G<N6@M{mUOSQy#aw<-Dfn@%sMBPE
z*1O=V+F(o<x~ojwR9QIqdVTv^JJ%w5s)<S{DBS8u*REE)vCo=Mn3hKZwrNt$3FGtN
z_^sPt-kO3-3Bz^OsSKjt(?D_UP!pq|L=F?)SYDie7K#I#yC02iKeN+6CP=5rko#ED
zq;^G3Rhn~(u5tqO1XJnA)gxLM2_tcm=+x6hc)elG+#VhB=qDqiyw7uYHJww=TY)b1
z3fdl)J7Ja}6bX1JWIyLCCKu3btt#1_3^tgrDN&}UDTb9^vUv_ZRj(Rrhyx<Y!G_oN
z5Eh!RW3C?_a;~;0jVW4N-XlniNbl#V+sP+4-E)vpy%g2TK?cN?Y{l6kcz++|21teK
z)~rzA&gX@>*<`S!YH7CDNUG<8O{SDq=RMC(hg|HplhRVCaLR4W|2rqwo|Bt7?n5q4
zfr$rLo^~M5cuzc(E4U*c#@+R&7{*Oi2%~O(_cf@3E+QOY?ehT$fOY-cNB%q9f$J|*
zhN=bM=Uxpu%T8k4bSHf7M`g-O4Wuyjd}nm0;B%9R`zWbMjzNxv|0A+wjxB|KnM3`(
zNn|&C{`lzS3%5>~?~`2-Iik8Hmo_W0=T3tcfjG;OmWa{y8Q=&~iz{dc?Q4Br-RYEE
zf7ujl=ZalApQ)3``w21uRzQ!ch1Nh;;&q7c7E_Kt#zr@N4X0FZaGr!c;qou9|2aU0
z<NQDamO<@th(kKPV^x7n#>=rqN<;6idpbq(6BUnrUvFKkzJA4m>~er|%jj)`_HT+~
z{^HXA{sT70;X*p+?2ZWN2^K3-zgz%;O%p-PC*#j)bWY1nj!n+MnJ_Z*Xe}GW%EfdP
z-1LHarpE9y?hGsMtY)CCBt8R#kgj1@LhX;%16YRtrQNtD8T!B^m6^6A*vFaT%|3_a
z8UHsngL0hhD7LqK{D>HP=<ySQBY!s$+cnvbf7}%THL6bIHlFtAg3HG$aZAWjQI=bV
z&@Jyc8FxcWB}ebK<c79D7|b6hfEM%7PhVt-;e7WeXk`^YA@=;YoT~a+Lsrkn2`KH1
zaz*u<&4H-Hs1$pvIuM|5Wl1K~s+Ij^Oes_n{Z$8$L$}?f%W~6j_{~~3uUgr+z4_M&
zRg#%#HA^|RPGy_F@_m(B_O{cD3X>jWz?zHsWh|d8Keauila<(uS4lO+Dpc(+bs-Bi
zQZJ2<bv5r_bu^z^>Mj3pbU|$f#*<jcU2$1-J#fe$lt}*^nF|;I7eH7B%RpqQ%3kdh
zs%{-D@#rJ8TI%Em$iXXcG>%j34ie@qL&zS6bRe0Tiy9uAiw^!lY^Y-g20<9Sq3hXK
zMKn*@6DVKg=6-YRGjUbk%uscd*7{r4iE3pttw!thp_SYd=vjN|Bk#qNlIKeK$eE7s
z7TB(c{t8IgiC%k0M#ff_D%wq%<xzv)a0o#G<`)nwQ{mg<(nhyPfn;Hn&9-EsRKQT@
zihgXCnS<5n4PG4XqjL}d=uHrk0~?<;56p#@1kBsDh4U>{?qru0a-_(^Gl0t9P&^pt
zi1;BPUO|Vyc21fbP<eWylYa53!&rBS%vgiH6=0MwY{l+g+R=u2&|xTFt$SDCdsQ1#
zUddnqP)wlt2M|-@B+eIv!;TXAy3)~+$sa%3i-#tSOwSz#EQ?alYRakB?0UW>J)byP
zkL_N~s~0&rZIGP-9Rkdh$=K5v0IJDb%h1E<vMoNb<L5LnO-(^pH{S*;9O-@LhG$nO
z%fF%kK(ktG-saq`u8igJaA~0Z1<^Eb5yKO4*l=2J9o+VBKsW7_j^FIctjmsG#d6vE
z!+QLAbG7$}B!oJbCtXoC#AW+EtPgVi8E@Yzt5Htr`1(Wrw18O!nFo^GaTb~fFuZbM
zbRy+JG0{@X=0(IacmQo1lO=e6PVYD9vU>Zt>spQQFXFAVsq!zblWK1zWVCBJ`73m{
z(3dzWnRAm&fSKeN{^Fq6o6e*!2ir7y7HGzQAG!0s;$lY1eOb(XbSsR@JS>oFQYP3$
zo@@F8{r_e<5b$v^g+KuSJP-i@i2gsA4mt}}6-WT!{p3;&J?RP!R}W|aK#&Vy0D%9!
ztg6d8Z?hrvUaK4A2qVc8wdP8~zZMp6$kas2T1k-R<!~T$qAVr=KnJL?<o>+h1>qO*
z(ag7874mElHGDU0_<jS((TU$A=~i16k5aYYr04tjy`%m8Ordc$6aZn0y4%#P;wNaZ
z)!NpzU^ZJSHYDJ{Ko17^g}B5Bgt(F;C4ecZO{1_h17{Rv8r54o6tVVr@S5FJS7}bN
z%TP^Q0f!hn8)}e289eX?PB9T`7EM(l=#UMp4V}UDgjxzB(Pe6B#f{<2R>KM&LThq0
zbZ@qvi|etQsnjCUqK;WL*3>Fo)MK`vq-$$u?vo|Idhx1tfE!0OE>%k&vskt>&)I4g
ze44Oi>Et~ZBFw#WaL`bl;hX4UnK`MVQ)&a9Nn!<#4i(J~Z>C=k8LP2gHtqnakxhn<
zpnO}Q%Tay0je`^_T_lha5C9npLc;v<A@6#!d(W8%m6k&EKM0k`1lP8@c(b;2r<hJ;
z)}%o`jyFKDz@-S)ZD?KE*DL{@Ga`@F%mk5905g$7<18lxc$A>eNil@g4?IrVQArRw
zzZ&_+S{Nrwqg5g`a6;gem|E99kZUc!2qXAK^)kQ=vFCmQ_pC@bgpL*(>`*b423^!C
zJ(ZGTIdob&6c$8Lx>ybE3jQ%Xn=jV7Ba25H_*tbY@d7C~nI?tYr?EbWFV+G3Gd}Zs
zdq?16w3((l!&rA6`{9S^@%YZ2{}#@FFUFtIY7y+#SGaBlqfMApbGij12jz18HG73L
zhoaLDRraf=UOMEmj@#8FgGlGEiZ)uhz|kN@OSRr{Lt(E%X$~WP1pm<L1S$%b4k;;U
z?Y!X-Hj+)ZX@yJZN>T{_S|k^Khvm>vuXHVjA$tloPB8i;Kidm9X<N1~K`hXE;`_$%
z?|{NTn&YeMc(4bb7=WkhC~*l|-z2ErI<jW~LDtQ~IlOt!|2LMVSGBbq#v-XnK`l}H
z&MQ3k#t$Bascg8f5A0^M{eEKjTFBm;`HBDbOSw(<OW7{mx6P+Mp~+KK%D{naxM!=7
z<7Yc?h&arvgBjiS7-|1lwq|C-@WbEn;l;=SUnI&4A8bVz?RaxD+u$Zgx0_fgKrAKN
z@jvM2%*ZzOR<g#M6Up;;9?2sj4$o`Y?wI@hAs=UC!m`J64H5z#mp_44edM?9Ab@*^
zip?qWEMp?Cqun{Q^!*ATn{}@eP6$yJ>IAXX;sED^armic^WNLZeICr#ZWb?lh(hlU
zN&ToNy|c?_)$H3UHzclqbZFw&3v*_Kd|1_U=S=k+a_44sfPLV?-Ix2#zHs}hj1E|F
zgCHW&%`#R&>c+(wFcre)&KP4GqbYDXCAeI0e2NS`cOfYZSk4+rpX&3HT}Sh>Kg9so
zDzrksP3;el!<t((e3Mm)vs*8yoe&8c{Es<qk}Xf`ceh||8<aBoPs&qq48nUXZr-(n
zv^Qu(CB3L#gie%9$~A~f_ko#*Kf3T@#1}I|(jJvXQwh5C5qxj3c{#3HuQ}FnpmdMy
z`}3E8##^o$2;RyS;#r)MX;W8$Ma>&^8BijGY8;tW3KNjlYq<1T^9967PpjN<k&{!n
z*rpZCYkB|i%av??5Og`;z2U@P3F1(@*5dAi;apJ4=QE+7y{;~w>599!#Y6RDy3s%x
zc#ZS~X2aW2%WHH&FR7jN<Cypu3yMRTmNRa(S}f|d)E3(y?x-H?xqmh<;xXD9T>enD
z<0J^)4vW9+`?C4+R2`*k=Q$hkm1u{Pw;Wy!byqbaKk|FIB!Dw9Ll7lq_y2#0yN%`N
zgUbK9a|ap#0Qvt%ch<MDH@5koTXe0uw)++bg5SCN%qE}Bw4_j$-ke^Z#t})5((smD
zHs2*j+rSpaH1#CuP2TT4cM?702AI$hIMRqu{@K&41m27HLO7!QdJruUDEhfQf6mdk
z_yZBt|6=SMx&#ZlESk1$+qP}nwr$(C%}S%vwr$%sy1HlGgKzcht@s1)MBIJ%Sxh1O
z!yTBp=RYsd&!CKm{s0r^2onb;;ZRX>01i8wAmJ>lA%H9?JeHIIrNElS@e8SUIh+qQ
zn7@+)=yQrm^UX@4BS=<xqKKHxV9p5ofiR~6C{3_8$ztY*q@clwiun*!MgaK*@|OEB
zzb5|ZQd@Z!-O6H;d_UHxTdkAKgFJ@DR0+~KiE<c$zDFG!og#H?AKY)%!gYudoN|we
z9xVumg|eR`YK2++Ua*S&r2jBa*R^GQ=AwAY6ZalP3Jr0dLn<>$(~pi~HuH8l*CcSy
z!#<&oGKnNY)Bi=}2FrAyiIe8?vJ}i+MU4hDn_@x;%4ZLZf3!Ub_L&r4N$c~1Zy;Iv
zgpOjAMWYb-jDn`dHOf>9_{KF`VOUEZ;n~>dMqxnpfLwfsEHK{>^}d!=IFf4SX{tfF
zrI9?I;?t6IzwCaX;qTX=6Yqn!lN4#H@6GOTzn?y_(t^W6!dYUb%!hvZW~1%j*n@oO
z=CTOT#oOz#%Q8DoU*6gR>d}l7yVbf~eQKLIDkR}oz%;d}HF>r@%7m#E1D&PN&#Wmw
zw!DVd$-ZK`iiW>?>Plsm0)@BNt921nC36Odq%>HuLMf_LAlVw??~N5BkWNpj26}z_
zg+RnVTqbT=+|BlOrI(z^jH~%anr1YUi=6ZZ`};jSj~+4^aRd4yJnIPMXhPnVyB5R>
zL|rSRDg(#bgR`|xdO?rwC}>lLuPQ-@eN}0;P0OY1A3BwGuw*I1Jw-$(1ye;L{a3}6
zpd&02p0m}$aKXiarKP*!dzcE{iq8(bXMd=2Jouiy5WY%lw?#BDc*h@`pF8b!xWS*j
zr8|l_6W%XZ8OlGVJS&lu3ZGM&X%(&R*>f@79%f9YCz88;2p+;nO#0A?ub)R6XmO}J
zDdw=A9Ml+&kPD|MBwu3jZWxWcU^*SD?c*edH`-%n&Mp|+KieZVn=3!!@_c?XNE(!s
zn(n6h+v<e6^5wAM#2bPO2#$eJ$|R6T^cqihh9M&K29|eqqh9*APy})Or&2IG)i!=3
z!o~U&IRjQap9cQp{5vqw9g#Juo)+cbby^-t3XW5Y0`zNKh|)p)U+)ONE(PcVMIp*s
zaj25$H%#FYv451pUe!_{=MK6`=6&9rD(i`m{<{`&$ek*g%(W^FWR}{#SOqc_+tEDx
z$6Dau!~G5+8?v_e^k`X!_RyW3s^CJuFtyTUc4L0X%X0B$m=+H0sIpv&WbD0R@L~v!
zs8Qtk)sna%Tru@Lo=(XL9=?g@#n`kj+^~zC>iyz($OM@^^{U;ZhoG_8k7bkccPF$U
zybz{`TlcZ1NOr>-pRgVWL7|2n4%}(bLJl-}&mi}P){fRA2K+|EVQV{LZ|@7WCtY0c
z8~`9Hl<X#ePR!ApUCh)AO`o;?Gn|QRa*>9;Jid6jPIEI^vixD?BWeAmJeub&83^-7
z*J3$sszG9s;YoK_K#!>#y>8c=Es}MRb4Q$q4pzvUs%ty`oZqNhr*q&RUck%Cn5ny3
z(YlgX7vH`Y3(+&-osQa1Y?Z}UN1U6jYQ@uF>CJ=PCYA-YCb>$3o85hl;(lK|AUX7d
zQRq1K1dDf!acVaCr_BWyv-Ng~E6RpiZTQ^#JJY)kZu*adI$V_&$a^SpyzE;Dsv2=q
zv7s`rw!=y@jl94c%+@;1Y~WgA*G*mJUcTl=oE;Y0WXE*Ryu9i0wnv!iQ)lu&%eB7U
zTTomz!0cX?z9sne>b637d?lUX+ltJ+&Nn!9WonIdinvZ>*ESWvo4&V-9m}7wwrpU6
zn|Eg%(TJb?|2wDKFjGHwpaTGCnEgL<y77O?>DRpfxNDC8=B^WLQq>zx*LRj|ZIAb<
zG|h~*DUzg>$e7z&hKoqX4zh?^NK8e&$NhWlcq9NoC@03Jr)_Dg$yy}~=C>`Lko$CU
z*v2T&MYDac_-m9N$|tLTIl}#aWXh<e#IUjC$bg;j#r?}4Q(W54siKnM&cOgNjl)A?
zEQJoqJI(+ILRjxkS!B+FYz9GNC947;-^dq+(&<G9(`(@fd&RUHUtUOJlp19z1|-$}
zgwp&3AitT)vs2y(GsQ1u_q_LWl5+F^U^oDZ0c3g;Mw(TE$MRbAtP@kb0c$fE1pCcm
z%Hh1zMYb{uXunBfeKy%%h|lqp=|z33S$0V3>FZp%b;^OTkVwu&9)v^hoC_r^YL;FC
zWa+bD`QHtC*6S)fsIl}$bUVyz>YnQBxpAT2^}`l<&S`e5@R3xeFSx!GI`*$|POt3&
zU%SW(?{ONz!E|T9k)gNU!5jJp20y0aFNny2${5N-g8!CwM%WnnUk`g1Ut7<=REhE}
zklf=1$O|?vY8wXgw~XN;B-eC_YrRp4RRaJfBbGU$I2;*Y(0<(o0th6{C4A%2j%T^c
zzm*W`-wi@(ffk8kgq|`R%oG1?<0F2Az*r6jY?_d6>;cHU1@U$XYILrF%h-JsyTRFD
zFVJHnSS6@%+GNkU>=61Uw1m7_3I&s94$l+A0%o%a(GfL=*mYq@O1CyS=VqI<J)BZY
zR*R7x1oV!w^#5~MVqK+1QW?{Embd`RM0dXzli2md8WU(o0Tf5Nnywk%!es^>k@8JA
z6Lr?cAZ8fUk4v-)M%8k#?~|tgTEG!Eq>`ygzduPyiOI9P2ynhpLKdAd2D1K2tZStO
zx%o{Ar;I*e?)#EH=hv0`-?8K9g(C1n@5GPHPEcG<)<t3T;g>}~dI;Pf1%LW6d|bul
z-q`xT3HrZ#Zskv;!%0O9%^pdC(d%Pi(!QiaHLjLEodDAcvYOx3&|lu&TDQ_2517**
z11;<QoV`~7*ZnAi?-Y`j8CUS6&H6y<7uXUdUr%Y^Fv_+$O5}AJKyL+`o%;!+qby0a
z>n8u&5hz??)LKrsJWpu{C~X8(f{?;Aae%<ae%J3GEyi+Zx|PRW#*7v_a$n}cc0LL7
zYYNVS&rKmN$`>psr!dbK0bKa{ujOxXwyDl3sGnvzosw={7FbY3wZqzPci!B&Ijw$=
zTly&X#N?ir-`~j=2kw1yVj=J)QLinF#Gj$qz<mbMscd->Yx9f#0P($5Mi*UdaGk_X
z3rfcFy#q|K;c*L@mXARAO|K7l7d1HHTTF1X_6w0s1qh~-Sg^LcKtKkupRR7<UhJvd
z@!4bTV!`HT^RB|{4(Y*JJ<WPWn|ZB<bUPo%Y#Mf1pcOQajYBHxomM2e-$Gy*6)fR?
zFEJtJDk>;0VSsgW`^b&szU3)i&Gy^ejK>@dctF0Sy?Q}ji~%cr(Id?8>T^+>o(GH$
zOf`W}YzKQb3oK&W;;Wg2PddliH8330lll<;oIMr20>zcJ$@Dw!n%=4HAU9z!(gAKK
zt_{uOERk9+%m|0~Y2AlV3=ZsXpa4?0(|%)|=vHXxwCdpmQ-d%9xT~p7^g~MXy7Uxa
zIthML?C)C*7YG)C!!#DOm0OBGwJVUn&zbCS+=?5QFDFnb=Kt2Xno;t@3iiw7YSRI2
z1>S-#9U3P5p$&xxdkg**H4K~Y2bO~F%NQ}eWF6=e41sh8u^v+aY$2*=7ZXmk$+c=K
z)c~2hn)pHyyU7`;gnqoCf1Nu}D)a|xMy=en%ShXR?g#cPg;%`ro>Er))`ULqqh-G}
zpsRr*i^(l~G-SCB=Bg^88~paO9?TsEB8X#&1N1z%H_kaZ1X`Q(xDIUx@B}VM7;RF~
z%ruN(6hLvCkTmJOL>`?g3Hq$fpCWEWQa7*@CD9WJ2<6ftt$2bk|2F@J=Z6`F*8}=`
z_MKd?zNdm)hv@W>4MrdaXUUg>YD`Khy7rKa>8sUIh^h7ffRZtYUof2<n3)#Yk+(OP
zc69a4=>V}r7Xtb00Wja!82UE0rcz`fkmkMV9jEvZuN&fDT*XMU!y<VVoWFZ=>QQ5X
zBx)?)5JAOjSeR~<6$m>~kFCtkgwG+i)2J9ZqkXzyUTJ4KEwP|TxkaSGl4Ok_CETP4
zsB^uxLV|E#4XUTS0_E8<1*i7FD)aZHA{1ec*HEq<gN&}!dPWmdpZJ`EW&~Y;Nv60a
z0Mz4)LpjUr1G|XU+V{8xNBAoDlP##uL=+=TPXkqHH(9yzVRm-+J6!B=2KSFqtqNhM
zL^O@aBTP@Gp+>Ne(&)-!sN;meAY^>8%6~gRrkSh|RaF^S2YxRqbz80=nGTEk75lK%
zW`(w)$o{L4HhHsTprAl$GVBQ;$?^O+hA<dj=@=RCi~2M21@Anwatw*~pvhsVq>EmX
z;UH|x>>kzDzpV$7#F}ELD1PR>!qLAn<v^K9B7+&2-WDUkdexXBhluQB<Kdv)pV!Fo
zTD@>mLn6bgyuo9MF{U%DJw<`?fOT;<am#N_K*C;yHTbwXUamKrDf2^?ahKT$!}bmI
zF)f`*+!5)JNYlDCp9&WY<D%IJ>+?$LH?eCH*%newbn^Ex^0l3Ppnu>qfR53&Z3=}@
zPF_aw$b+wE3_T@4s5PAXZP=tNon#(Iw?;J0PG5Q!KnTvhVK0*u(bt>#j{T0k4~Umg
zB`m9e$(Rn8Y!996a&<1e+#3^xKDDT-QGtts=6wiDP##|g^JL$nNq~z!$FZe5ecUbX
z9`NV;1=ov#0~#O<(0FEwalTW5hdqC%6F)cp$fZ>`$=#^(Fr1dA7+l7+pp0DEKUS)v
zvfH-wu64W_>Xw+LxDrM1_MuQQ_+dAoCyfm!dO-6Eww=VnMV?8xU)z9v56*|PcVd?W
zvJ3elin3Sbsgc8ss5%(lOqpN>25lc-nNE=zN@+Y45%Bs9U(p+6>z4i_XCaHyN~!2M
z)|mMQ&R#d6;{=kaP8R7mpGAx9J|3-2dJT%<a6Zw2d)WGiYMuPu`o|CK$=Z!1F+ag6
z+c;Fmv(St%3GMx3*#RLbZ6db@I(~D{_+?z`7XQmMBF)j|7N%j-;YiMF@zch`XEncF
z<BL%&i4K*od@s2iBgs&|#y>!u(SIm_=0GkPiMozaJK(|)`Oy{34)S@0ioqZ7_PZ4R
zn+Q><kE<)BC5CSjM(tY|qNHgZj+l>v0_d&>4Hs07Z#p26TmG<sGFiAY6CaS*_N9~^
z7k+CK{_sXztdrZZ%+5c9JZ%FDI?{GzLqt=$PnCw17Mty6hjaV>Y2;jvJj{4wmPEab
zg~tipIb)_GJ<hT*P!;kJU{xu~G*4%Uknfl+1sDh&OARbI=ooR%&e}kY+gX9RAkw14
zEYnMkQP;+J7<y_<7`uDd(|a2i1y34kXA<4v(EKJ$eND!b#YE!p1jtK2&>G!VM@5oR
z8wE3+w$F3P-ZpX0e=Idw9?+aA196YC;(Q3Ek#RBy(Rf)PO1n@AOqhB+kY{O3t#D~2
zYYQSBR$P(`at-7hr8+Y#CknX2)DOWTv^aquM#+|z^hW_nyk8T6I?3fW<a~h>1gl|h
z<A6E8@G?$mv2%X0^N`a0yn1M|4_mt+W#A0*1A+YLVbaOdbA6y8d+mJUdmU5$qqy+l
z`lzJ-Bs&Pr;F-{aeOo&u)1TTP6n+mDEvWEU&!n5*&D;IEaM7&Q6h_M8A|`x0kRiw(
zia<b5p`Y%Fe)nN~uTYd#{7>DuKE_MHIQ2NRz%jpT=cjhjHiH_Hm_G^+9sjoUd<IAN
zeD@Gqj8paz38bx!k$xy=503eeyf`sBT5zBjqAjo@+V*?pBn}hdI@^hJxa^y~orJq=
zUrUKFuAga45&`~!MR;-Zdrn-rz#09`cLB7S?H&xj%xw*lra4Zm7|`!UtgQah0BO#Q
zddB;@9l`|C$yB4A?G&41pA$YaIH?@uD>5p%qDkK?NK6=Y(u<~V8SIXf$t%7>ayQU2
zEYw|KhqFJhTx9enHB~r1Z|l5FID%0)iZmADx(y*ooWm?aISwpVhjgwSIJ2;ZVIPD9
zu~3IGQYBS7?P0?o6h+H!0d@0x1aIpa8PZ1=V=rNYtk7i@aw6@(t|)NX;Tlb{X+B3a
z%&`<pyD&YRR&6Swx~B&$F&R>db>^M%S8FoE16l|?SyVo>+W_;<65)ix#PS$Di1ndu
zS-U(tcXK}Xbec37o|*>?TaSU#W>n>Dx{8gPfKKq_8*lKGv2eRv^-#RIEVY$tY9T(2
zYQv`6QU+q|lYjbZRr{z?z>~oI;r-|cvc2k!0MgBAvM5F_FlfPNB>B;W{i3@+0}Lq*
zp_|cAcI|E7lCNfcRxW1dg#d;FT>&GN43>2P!#AHd&D?t@71b&K{Kx)xmRA}9zHJVh
zJ|I3<%I<U1CS39V!fTJLQtM@$2b+X@#w-4!|G#C{?9~I7R66+V+nmHz3k(K_mXb@^
z@KhvYz8*YP4Naw+j>7~k<p}l_y)O!owc+l}`79e@eGtOmsWy)>bJ<k}PgzTgrMRuX
z`;-uyuW5|Sb7sfoVWw1t+Y1-<($fZk7y=CA!EC&5`#NoR`iQwg0}7Ea6Kv5IiH1@0
z>aCw4s-Lk*@faEQtQ7O3OrYBIEJ&79LMAD9TWO~3F@K>jZFatLO*<7Zi{Y8CDNYz~
zQtG^Txh=ILSO?>r<e<JLIW)rq@Q0-sD@ki=7|W>|M17iLwObOCRK8xE%YecA;$RJU
zvz1Q<{3o08z^OWPa5PZy_PS;|GE0wl31Tr7Vu)xgW$5=<oBh{G$gs6R(k3&MU}&^G
zgS5sEGPIVG02ZCNxAkWK=6B4{e_LXoY9->^$_o}6+q2+sbsNpvD_Jp&Pgg-}o-0cN
zShWyoW>ck<E;Y*J+9nlIDeJ<HlW>Fs(;|Qu(%<Z<huhaFN(o`ib~0VfNC}-Gw^M!w
z)|}SAce+08iA|agtjHrDsA&w)VzLd2JN*HBI9-LNe@;<~Ns}-r4N;J_YjzBm*f0V{
zuUbgAk_6XEXoF%atySIHL3JcHheGHc@-1C%yGNL0L*b5l3Z@CgJUN#6DoGt&7b7k1
zn>Go##vS@VPy0j4pw`1?z1nD?o1syIp5IMd%XryhRqRxY7M>5srV`eJx&1TYu9=^k
zuTPDCBc5F8&5vj3`B!YXD?n6peM^t~*Lq&+w>CwdS{`rDFcjYZ1l(`J{eE2bxrfi4
z+Cz4I1jJWJ!zJ^&mYTE3D2I+QGhEngbG2TIZhx$QJ%K`&039+6#Sp8W*pO&k<US`J
zw1W${CJh$}FVP#&K#ZN|ZP<&SpBOkA>h&T)Hl+m0LydNziEpeJHa1Y!dh6nkGemzq
zvn*1gU3+@ST~<fJ8K-o1<RO>Gfb2GVA7kV&OoX!p9=~*YzW6|C=2#G~8V_bvw(Q=l
zr-2;b<8V3c8p)<=Un^+-gsjxKn`~3E%Z}E}KVkw<fsMjNrPO!mpBAelo03&;+%DPG
zs=5VSKnYFKX!FF9E`qiQ^>KB<V%y!DpHsQf6NNzW8X^%PgI(VAkCIF&kkk`j=nc@$
z>HHhH9Ox4;r{g5|sq8pi;<sy3*1vVB=&K7S?PU9Y^XN}cZE%g<sG|0*22F{EW1P^Q
z4)Q43zmYT8$9$pv;NJGdiaVPo!QGwfQkdIJsH7AcT2Q|uE(_A0gv=nbhoNWRI(iW|
zyTj0tLY(wZ2NkT?220lO;jyDWUbN<lsq*d3$H;$J=D7JmX)X2&TLnNho1N;W4K9OQ
z!*j3ui>_jT9}S6GBO(2<_BFawVtMmd;UT%#p|zd_V|uhj1?^Y`uEqAKc}4b^ov<fs
zwrRAktWB>yV8UJf(3&CY&!+Ng1QYWDW@@st_X=Pn=)|P}SOig>wTVP}o0}q@GOn}d
z2Otf&Ezbh6#K+)_4B|6Ta70kDYyo1|R(KuEhtVMD@Vc-}2c^|>hc$^_IBXcOwjVz_
z);kblHT%aZrr=Jq39q<#8Y1JOyVECR!)V%1N|`A?zrJ#}TB3@^+Fs7*o@D)|Y?-o9
z(&wUe6p2&`WOmhMyvjT%EVX1u_0X5>H0@gLJPY~zCWiaEZ{z-jxk}^eW$PA1(O}F}
z=Tr12^$-3*@VE8vz4qiE|MdyfSp%pV2xVUr?|ihMAnwH0_a)aN)c|=p3C>>n$&Ri$
z;D-`jupy|vkDPnXj!z03Vb$E89}xVFNJj^^_c%BiaF`EvelxD>1$+$KZbtH7Uc4uH
zbw+LjidXA>V=dLI?~eqGl(Vhb4?iw4Wgd!wjO5HQr9(3<lIGYcJXG6kk*WzO$e6eW
z5!dn{`S71~K2A{j^9R|)VxBXB_0vx!d4dm%YR(+CFri-fbzX?_JP2&w0LC!&39=k<
z!!m$FL{9n>b1hJPO{K|<u?Jh)t7-=(#!bt+)LLLx8xxeSKeCpr44E~Fmi0tiUO(h~
zshhmlQ>{dK=n_?q;OQnC_<l}D(9|EQP?EB98c^?EYxU6w;%75O7xBdnhi=ijW^+ID
z0^Wk@J8Tm1gED4O(qI(k6_J6JqN+)*DOX1uLM&!T(Y4c3Ev$A2w6K6wri#9qW{XLX
zO(`+>6Hmgya%IJzyQ>eBw-!kzxqycZU^~bPb5{H!`@ayT`m@gbCU7RO%A6i?sse5~
z{qe1m_2e|rX!gt8`6fp}_dcUu2j<swM0y?kJw+tR1S^xEUisTQy6$iN;}Qs+H#N27
zjn9moZ=kd79%d#a?=Q-53)j!Lw|y<STio4MTKayxqt%B6s7&CTB%lgvG&~wODdp={
zXyDX#)SQ2~DgcDMfixmEWw*}TxpSTzgV%rk)}<Bvebz6pzB)iG9oJ`FH5tch0#NmN
zDeIOPZ~C{28cBx%n|U!t<BMRK0S!il=H^5Wqdd|8IH{NB)-vU}nN?p_X&qT*JTMPM
zwj*+%38z}aQEa((j>EOnjl1IF=o9*+Ju7AZD$65MI7*9tGa*qwo1~W9(hxT&=V_6i
zbDEMQ%W~YuY?UayQ8U3Igtf!oGVP^rQPec{&x8~?!M(Y1!nns?LeNqNc|~%-QQjt9
zB-jlIX<X)%zw_)fYJsRS=`WYI+%Eg92`#ONAVwQTH`>t_u1o1QJmFMNYKJ~(<jQrW
zrLR8=QC_=iK^-m{)%}|Mbhbc@^kSiAN5MTf?-cjZc+UzonX7fgk+D`gE|aR(O5loD
zooR|$bq^#p4nd`ocKTA34gBbOj(Jv*eL@4K52zlU23j<1=_W_5<Z&sqoH#p!la(!G
zS0Pev7WXv<#>Mq5v#~NEu(fu#&gej19!aJB1#kM-G3tMqBlI_=!2Uki8A=pMg}mL$
zDI<@86*Z60`26DZ{=xuh_ef096%%};-mVx=u>PDmllK0gnMBt}`ZBA(-S&{P)kiz2
zo8ONUM}csG(?@yvyx@n!3aXJYUOQlc>E~BF&`QJh<%?e{yyd}OoV<GH@cY;&J-n-$
zr&C5=g0J(S%L81yD>-Jcv?5oapES^W&QsnZntM?@6gA2IeOi$k057i09mYZUyy)is
z`o01V{=RWK<B>v7K%irEjRJ^HFrgVu6R!1IFA~jjdD#5*j)EK7jHYP9?l;jLJqwU!
zNWn10{-CC-I)MdxFbYt6f;B8n%>zioQnTwA!K;030kt+SpXO`ll7!|lt3SP5={vz*
zFj-@A6Ir8{N2<GTInJ7FYfR;qvJF(|gEH=m3e{7(X4GD$KY1^s(u}=KK;vroO;~RX
z*VY&nioaw+j`Cpm&pNH<S0A{-keSSRV&`D$yM~`}SZfS5a^ppd*Gh9W&z)JAOsNba
zxHW9qp2+?0VQ{Vk>e}lAfb+t0M59ihrrR2MFSr|~2mBQYY!#$i<46_O5LvN}KKooe
zxZj%>eJ=y*>`Zhpfub9(f%XyokoIMFzSrp0m_bO}3$J!>D#Cn%x(Z%p8<l4fHT^t_
zs+y<sC2y@7oSLqEmAiml<f7#NHL`F6I6J)mgKzL)0RRa8<9t|2R8T}#^gqo6O4VfT
zH#z>B-ML%CJJ`NqjMi)IrkR5`&^=lUC=+92XQ50;$p!ei{|qZJ(M(GPlO}Pj+3)gX
ze&jgdnvgiCR^hgl^eHQ7YyIG8s=64J1E04LE_%Kxu!bUP=Z&;2x3)xuG#A}M^lR~5
zaHD1m`Mr3mk?R{^{i=ncJnI2b{S%gqth8EmZgjd{VoNevK@BHkG%~DgT>=CRX`q~(
zZ)3#^+Nfwj-P2~WdP%<==rcD1c5nFnc>&L{LSVV&NXijbdI(}fE?l(B5v-e&y!j<f
zbpaguDP^!7>2GlhH&$;QtHuPBw>ZTSc^Y<*I0j|PvbbLm$WzgUx;L8c`tTFuA9bsB
zyT9BOaaIb;Rd%GLmAB61e%Pv2*rPqbKD(Si)Mv4la!AS$Xg45OWbg(VWHPrFKY~*t
z7*0(4&}|@9p>Nr`rVQaU+0xu%s3dEyO2oBCDI_RZy}Mz7?^Fn2Fg*WGzTZI+*O?=1
z7Af-2uKue76rhE!?2?WX_aG{9%SF)B=~HEbPC$5QWH7)L5+?*G!eMa_VfI#Vnua}#
z6u@vGE#1{?Zgb8V1xq1?%56CnE%0~oes8g!Hoyd^`<7e0_DRy(cR@kp-0N_gZ<+e)
zNV)FY{VeCv)eaI0H##6hKx@wR$jfnmH+|IIc@CeGdJ-Y_d;l&d8*IiuZ!=gKxm29f
zg=+>B<_Nw<@968guDAEp-k6=P+Ub+GDt~|!QaL(upNGM8I{PSKMVVT*=i2LuOZB@3
zF3M`mL5oBVeuIM_@8C$TF~teKFu~YznB2VBJ&dzCEYH>F?<m+4gC0EI6c*@{E#p=+
zd68PdVK)SLdKYbpuvz;avjqeM>w1RymQ3eIE`oQh=gEo%^z1}oN#W*}?#*%1L{;5p
zsxRodBH1BVozwZ>%&og-=U%1CCyKw1D$6LOWq#AbI-c7v<avZ}3)ZWlSLx)l9!M>8
zAl-~SLy9J%wwyT7r4p58ZJ<OG3S#tS*95ueOkT)Ae=SG2RNdQFDZgnWZ_(J|R-Eep
zmdAVY^32q5hA#?*yd#VopY76nckzypM;P7s^4v0}JM_-rWxf*6L}^|xB<GvQ<gfOb
zM_ekXck0hRCM~~B7By%M@zG)>+e>O=V$*xOabXAZzeV2rj}C(#u=j{QxhDm<XWKc*
za>T~Ir!g_*aq7GI4S23-&|2*`TjaR8jM-nfNWoqnPJilz-`KMIo?LLgU=H%i@Qp%w
zWn}nCiXEiJ!Lfi1+c<Rp#R4Q2U7ioQM7+<c+37pP)<cLYA97f}+`Yv-Y{ji>4eC$F
zIZ_nK(5Ka`B{U>ClqgHaopkb+brf}5_W$35M$C4Id2?a_fTFbjCvsxqV&nXuEl=0H
z|JEA*$MUo>?#)K2xU`>1f{pLlD6;7_zfX9Mll^=UXrern0fGV0Tod`V+g9}<pidy^
zZRYl}_n1st)Y;M5ar4It=jx_j*DZ_o_Tk7(t?_VhkpC7RAJ2C%jCtlyIu9-k-C8!!
zCpCWhm5J(1W7k<@@_Wv6gK+;x*WNog-#HLLh-+eur`8>$b}4dR(*gi9db|d7@0S$Y
zSJk%Z)vC=f+C8pxQ&KHdoWq2sQoSY9X^cP4qv?23N^H}xQ{K>dM$=|V4x$637!c+t
z<)oM?Osug*PnWR59e68=0s3iqceS9ruewP!PJwJv(Nyw$l?>BaepCC9UsIzF+AcoM
z*3OO_vxczZRHvq&GXWRw*s+WGu@T%fyqjB(+`_#N>;Ba_k0y!fd@e70&miFf_G_nP
zlBT}z@-<$cz&sE3Y-dwl47ey}y3anp2i2(?gO+SLPaC+xY$M{00ixd+Kg}RK-_QHq
z?%nvzDl(s}(#%KjBszMp82wCmI(aaDasPYot5);@S=M9ov{voKEANYKHg5gxMvE`K
z{0D!lnB?Dx=vQ2@=*daA!}F5qAA{e9K`Xv-l(0gz&l=I(jjMBJ40Buh=S=f+Sm`8k
z*etm~7%j<xyh_770r8iV`MtN#9lh-F^WT-Aw14S=(|gNr^rmnU(Hlzkd^0>C@}&cj
zpOFvz&l~q_Z&ucj5-ayRMG^RXxJS={=rY{tr=2v+dT`$fzNJgclN)Z!u`{~2<O5s)
zj$e*ko3;ihM?J^C+ifhCoz5EhOJ$nYEcpES^Ko|cPQ5x}ZOIFqbX0^1GX1-kkWGEy
zs=a^!EL~AMK))6i&2tX!pHgCDq=1>?7TLgP7@iA486Ccg{!%-cHyiFjJUgrvp;S?!
zK+U~65s6tqror8p*G*W9Asu|BRbWBAcJ>_?anAT%e#Go}A~ww63#z1S6qhv*v{OSj
zz^GEqFTnurx8%iH#_z8<KfD8ZIsVb7$4=pw^YITw7@bdJ9K8A2e<#`>lDqi-^R-DC
zR|xi=K#I&pc{;4fBFiTRt%q_C8*jz~cD*H3+okPNRf*s$_xMIOVK5ZyQ6^u&Y-c>p
z<vwg;_gHd-T~6#pL#;951f|FIT}(o2Z9p>-7JZK%0`r6E3tgWgrFOSl?9%df)!()i
zg$1zU29N|1JP%8NV1Yk0WyErd94Zqlc+pG!Q8m*f8iIh16EK#`(i5fRw+R*BI}BtI
z=4Ir5oy%WQ$I9{pcIEy2a&Ryn*J35eWB^s`OOqkXUdV=2med>V0avD0E%7tbWEm|6
z!YfCs*cGt?B%n=CcX~`EFI!Pni(u=2mSz+-V=!W8X;MHj*y=<94C03pU^&C-%HH9H
ztfcR^fyjT}8?5`no@Xv`%5I=+jRWk7ascVq^4lf!6DXE`f6c5jj|}_3BRfHo2mBCI
zt0Dx4p8CMJpzT+_w=Wc{%dS}JE?xU#52Q<Itx`NUTnMxP5MPf39;+W`7Dxw-uGKA7
zB8jkeGY;p%B$7LB!~z_Tj*`45g&#qGRk<G0`HPcUn~<fu6md8pB5_;JK7an6z1r>P
z!u3_E)x2y=D~!(A9zviy!6OIl5K82v*TI7;J<d<Zk3}&ANI$y*qXsPBmo+>r1B6WR
z>Q-H(yiPYaP|%&lX1kFN?BonRw^+00p9hdDK9;|yaN?75oE&7TthPhT=^et4&xleH
zU;M-1<?H0i=HdHb46h>-QrN>E3SQ?0br{Uvy~y^SETx1mnk-WwJ89+<GWXn*JVt|S
z7`_{)?ukb`v5efL>nDy@w3}6<S?khAjxSCDz-<Ha^`iF$1@{5MIfdW=Kg8m%fByvs
zZjEXyPj-Wki3{MIOuV-51j-k5)+M1-M-72AS6uxbG93WWr>%eI1SZEao<b8VXy3rn
zsY+xrZP6@WPj>Vx{Bl>gM))?knPcTLilnX}kS{#S^<WQ(wdv&9hM0Iqax1lo##7w1
zKfFib<%`*Ulbh4;rvLOu4_3eJdL7Hfw!YNIf-#X5Rzq!aZ~L65hf)iUIX?LqMurw0
z?#&Foo3!%J{A6^p`aGnJhLBaV=yod?g%)A87Qf(X>z~a2=eO7<hw(W!5N`xz(-kWK
z<c{d*08zI6pNB-0CntIR9I^CObKYPi*6+cw(Y{VN1+N-)L?q`GCK-$Huy;ZVm3?@E
z<2I5rjCo5JS6&}qzvrrjMlwk#F-iQ?82`OJd5684LAy3?t<<Z!Y9WxhgCJ_Nzqy7y
zQ$<!!47gs^rpP30$#oF~IHgd`UztsyaBz!)F$A|Gsj-Qv%u$FVR6^;(i!`O2S_#dl
zp~Aec;z`A@j1~~TR0fWk55q{mtB2+R2#C5YG+6Li)a-eD)yCU>Dnl*<L_ikgc-a41
z@$gR2&}s65RkF7Vttdekj8MiHzk(L(;5Im<8FwIoaMWpIJ;<KOv}e>o2~`ZdT)?H8
z;N}pt9PY+AJJqXu&>so*JExkmaS8?nin)1PxC~wmO$;s0^2!ul*56ZrdQw$-LsM4)
zyQcedE3!WY@4SUk+vEA(vGF$QblsQ;cNiIvf)9GtX`E*#VhS0(CLd_D6$FUEHec94
zCfBiTtmh34Tmw@xMgHoGr~E|8^6gr$$byn#7fCg6DNaT>qp&+W&}jMy-@jRoBXSOW
zQ7|<VCzuEqPysUL2Ia&11KTyJ&YU<7FY4krCLzL>=Ew^LIJmQ26EyBnd<KZY;g41m
zaS$IUSw>Tc)uM3;qG3ax2-20XvTe!<UwNwqd!5)s?;D)yrz(OO=;i2(w@KH_2bM~d
z$0gO&(!!_gpQLFQyi$R7s#8*KCNjyioqB0(qA0MLw~&1q@7Cj}O3(f)4yGEe09%R2
ziZ)7@b6=OubMGWD7qB{z3yOzc>hs70rXRpaA8fP9jM)XAFA^ckJPfFJM_|)3@_|Zn
zE1UmU@$6tLo#Ub4>>2fQ`tzQE(!Hq^#bSF=JxhK`AB-`O-Q!riToatFYd;LOvXX;l
zf%{Ap4%-~a9Gxz(OK4Yx_%4{nSQ%V`J|1}=v-krY))q^gqD9g$N)cAV0x($?Q4WTR
zy;!tZm3D5}0-J!bpnleXDRGs1-LXGvj6OdX@IIuIAIQ`Q>D#prf;i&r=EoXCC+`P2
zEzIYo6yBkqfYp=UVUrqnj)GcSPg6`_fKK7VDKBN|>FDOgWiZJ>Z|$gdo5NXBc=GE4
z9R*`e9|GhYhD*nQK|akCr8j-*?okh;0b+|>?mnOa$XqMY2M7xYOtHw3$*u%|Es4h8
zg7`Jyvg!!?iOnN}ZNvbh&jPp7n$vFeS%`?V?!SXFMM8JD3)6X$OUMr!hB~m4!-1I;
z0Zfts*ChU0fE1KdPY`*WaC%@B2YM`CkQ*pAY{e;P8T$cLYsP@9CPHff0g%}>ngQ~r
zewYbun)wJX3C8x$1V#zG0Co*)_?Ni9rq6F}SNs9-i7a9kR4KHdg%v2e5I>=WI_?Fg
z1_o14iHcMyAP~qc9{Pd}jKHKhD3I;cGcp?3-G-?S29t3~i<N>A(hb)mv;ub2lyB4k
z6_=?%%m($EOeNG;KKwiS>`L|bhzaORtXp5sySr&eGaT2=<m{h^s6-+Kk5#(}2k4?N
zS?cTI1D0cMUVrE1qnBvUE%&gMvEbNm<qh)<kn;<RR<s!r-GXq(#F_^UY8n@e2TlLY
z9-~(+ed49|yV$KZOU0MnVVEM1phw~<ngMg3(ZM7wXi0=neqVurw4}-it#_5L$~?P}
zKEe(Gd5fjfxUIwxvSUt{zlKzp+(3Ne60_-<o@NI%6#EbdzT{ZR5f}_9>k`e9vY?ph
zU_etK&-*DW_;l<8XRL+-A5|zy!Awa<sfG;XDvclL83ej2C)S9ST+so07u4&m<Rq`I
z(SgM|*yZ)8TE3Yec}{`qak+g6n8#BNdiPoiA3Wl_@bdM|fq~__0g6*QerhZM>IO&z
z!5?&k5IzO=>)?py15!ABGt8QyCVzsJgU&~&2u+0Ii|Js2s*koNSXBTUp?0Eon<}TF
zb88dWMUv#2Upxs`I_KT-qrG(VoF>(jd#j5>u6hOZx4VZFkZ<d*>%DK%76{|*odQN_
z_PbxcwjG(6HOBLecv(v&wn(Z(Cd%jsBc_do(hTuU*P@<=n?)p6t+E9&*zTBl61ZY9
zCUgxUW;~|v4Fdj(#R}IIMo-BsjT|&<J=!G&FV&X1ro&to*ML3vc#1jd5nH`#(rmdO
zp6nk+L3Uql)L){7qFe{rI-ePjny7$ZDs$;t$(`5@0GNGv1)hhD%T{ba3$x6Dt@1XT
zBWE27doi-jl-QsB5O4a7Ftw;nSEQe(J9YqH@Oy3`m&+dT1Ah7Nr6o2jvLu&14xv|u
z2O-=KY7y@{YU$&&>=;%;)o;dI@)xL&jvIWF5D=B~K>)H^7nJ1muG2f_IzfQB?Q+gZ
zy(&M71#Y;%A=TrMY;$jLTlBolNbw_<=TNs?ELf9H`cylJBGkzhC#M^|cX1Jk`7kBx
zS=Gg^`V3UR504^H9;`zuJ#n`sk{WV%S2_Kv+hyNsF&+RDewZc32KydVifbCEVpjh}
zUQhSsPuSH@9%xp@sA4bs)vp!Q2(V#?RU;7YY%+WRaWFt1-t^GYbg_gpmwf5pdjfBJ
zp!83_3MHg7{xu!MN=m%o3q6|7sG<<8ayIFgDfSK?OY0nOBn8W6Juqa*uR~*LNREyH
z)Zg&dw>o(Z4f+<r^+KZar3l+>_o0`Jds5G;a3W%|^tD$~3cE)>%_I)Z6U-B|LLdBl
z&WI3$97}Zz4{rV1T8zH+Nn&gIWy^nMS(dFEiAOCXRw>DAwzQ1UTo&_|!V``87qG0W
z4A8IXD04$Bb|zWpHDS-P{FsqMhRPD9KVFi=;VVOfFVezA%XqrHwREv5H(FNPQV)^m
zg=b47(L(k}{WsUws<aV<h2@A-%U^ofcIfTvwb6j;CDl!7CS|f;j8$dDM+iZPx<l`r
z%~EIvaR7aY2(%RDQLTg-q_gwjWbs%UNapAUk}6}b!@lWKk!TE@Az(Q^Pt)=AW6Pon
z8qdId_pk(@@!-jotS=Z_ZzfqWj4N#N3dhkQ1H0;w9^D4ME|iKBvMgk(t%kL<``J+6
z)hac`RE6|}>c}$Jg{?%5lgau;JIj{8tL%e2nJuys15kU)>K6p1{meRcA(u~YeYST)
zTZWKnFYA&IyisYK=?@C!FjmFJxuS)&a7-Jp*5c+*Oxh>4$Wd=w9A`_gSHN<h>(+*l
zD@0&Sy~w956bG^YiaHVM)k*o9POYrac7ult%)WexYf;qd5#~mnC)DEg#DYk6p1kcp
zR?EBl1+Z~RJd5~->A`~^^S$Otzx;u`kRMex^P>7!2*PLS>AdRX=!)3Mzmq3->Q`S)
zDy*YjYwy5UH~`W_UZS&`s1+<O)Ix#xq^mTM_pc9sd47^(#86}8%YAf$Tv>V-%Z*LY
zGS~5iT5CiLIZWX%jFe#McX~ijbj8>`-LPX%dE~UiXs%Q?%5FjiTg<X<l<RiGeFygG
zXY@mmy_ZjP`onbkZv@gW{q7Qo4ED!G=%cYsl)Z^<(VRBJU`9VY62N^XPYMdAR_@Bp
zL95UCJk&Z-Hcwh(x%|qN2h$$k;*bLBtDIGN4Cur7-Jc>M5J=<&vtu|t916TaO0)Vz
zaxkjV)|r4O?Ng={#R|ZXL=#~s=x5a}*HFIfO)P9r8GeCna?F@G0nM<JZqAg*zkuV1
znEGQMLU=sW_6j6C{pve=i5tM;Dh({$xDT0-;eDL-0-RWVh+(d&%k^ACujw0aSqqBU
zP&bj%t_6Uua`9RG%DM5{mKC!Md#^G+n?N#~4LaYH31%jJ>vYyV=$41*{$^6?Fpta7
zL-g|+PwuMw3>TB0-lhsHQ>4JCafpW&m22M{+8U99nJ`A?R_=-+q#>6Zd_vy#`N?0}
zjtZ2OPWZ+&q`B#38ln(p4u_7ZC`FerizPI0iq+*-gb&EJ+5}+@IJC<UDo_Y+Qsy1l
z+ZDyE;dI6f2$<LR2$?o&eJZa*n`d%JmeK<0V3T5qMmiGJ8>-qBTgrHVV#8ZS`NDm7
zx%m$|7!}I0u`}s#4g=v*S6g)QE>8D{|I_~o3}M7@TWk_)f)HNACc`Ys;E`~PEbmQO
zI-eN_Q<w1V<;JGF*M?8-4rCyY1GpJV%u&~f`fvyqVq(A1C<LopiwTwBg4QDE<H!Vq
z@Y>O+M_TAR*pF)iranEGcsR`mep_jW1>oMdk~^GLa=J?F<0z<48J^eTmbR(v&8ll;
z!^85Hw)U{iDG;u_LV#GuzsA=<-6+tYay)1A$G+L`c0&)VU~|wN<$3tY_sKKjk~=8X
zXhc8PB(4^9Dl;I<L<*=D5wN=-S_M_4>foNZS8SI{av?flA5lOO4!<*r5h<FFNF1qG
ziO3VaX1nWsHQ5e#)>C|OmoK&j%JnQ;S^MTV*JfN%%$do?m1@Jxq%@=b33-MWipNPN
z(h;$`O(z4OT;kC#+&0Xj2NI-kt`gKlQ)0;bRiu`n&fLT8vuh31(Fr*T@LC-%Ne63B
z-9{LxQ%0$lS$eE&ElH{p8{}v|8xs~epBQrUS^;7Hi$WvwGsf&-NT%zSccG$0cS3&+
zeW4OjrOlx0S%|!qxGlB;A`Z%QuGQ)^X9KBFOS?(-CESrU>(Bl3$bJi>OHx~<aLp7;
zY80o@ktiFm81=W_)kP`~-@Vk+Mj3+6yj2!mb}2R)9#dI|INZ7kzstVoH->TzJot@J
zlBltd*Mm<`YjWLxBxz1^oXnC|i#juwTjXb*0+=W*QZtKP`@zS^423vxQD7S-_8a(h
zo04+(5ja$~aP5u!*jii%*@RtoGnIhIx!~gXCaqXZSRLyx%$gxBmSc2F1l;9xsGA4W
z2`?+QdC}7XSxJ_AYlhT($Fmr)rINPpb*n0({`k3kwrkzOxrtnH&vIIru|pm3fn7)M
z`~~)4No#E+iRy7b>r2St*@hznbc94+2&BAVyo}o9Uycui6I37hSOxE{89T=QHe;cV
zQM1<ydy}F<z@VsWBpJmKlVk5exQ^Sg3v%QoTUBRT5E#5?3D>kz)4XZZWR(?Eg+ULV
zLn7_P5LO^lj=WG{d%1zKO0Z2dTpKni!@3^$<SDe9%;Up~1i`gnMLy@&ff_uQ`|g}L
zu(&BR#}f~()LA8DSnH$rFKQ0<79rPM`}zJl#z?$XZAOT%RPwI3-4jm@wKLi_X!r&@
z+F=*RBPk|Q#)ep+0Io7Z<XSRG#<<5wATmzQc+n~Ky^cnU;fAXI%B<p)(2qMqQB=aq
zE!30|SB~YRnW2)JDpMG0V>XtZJBr!d>4`I?C9ScABFmgh)bWpdR0o>dvzG_!{nRKZ
z{;IRYzkH0|o_?-;9^2g2FfO_SoM+Ge7th73-O<sPaTF(gx5|Ta=#DEBTdxgfiF1qQ
z&-Yse<?=3VWwUtPTtm(>*7h(0m&J)Ge@$}1GAl)(n6H0du`l?4g}=dO72Apgtue9q
zmFQQ%AE1Z{0JEqamhLeDX}oKvffx*9*kHSS9FIubuclMY^!G|Q3*dgvb54hr*ymiB
z^QUrpt;_63F#(bNyiX00TfXpJ;V7n|Uoy!}RJW>qyTWB#$PS>=y;T;4dX;EoW>Bmh
zIdkzZ3p9w3I%O@EQDGMFMkjn_h}!E=<-KHGpw&U8Qk3>#^@x18+P4KYsJJ%7u7AzB
z88>$T&QC@Y0UffBzS{0Qb>@;aINGAuN7atj3$9oCZQmFot3Xl{piN1Os(D^;&$tpj
zAv35({x-jxRSgK9z+s)kN=0~inhc!&n~4OPmlhmvSVXRS?m<vFL)l&(vi|PbwLy(-
z!XJrM+4z!|oto=!{2j?B{=`??oGa|MD}op}G6+9FazzYVM3;{jms~L{!qX)0!Dw%)
z8$TPwSYgFP@{SB=%Z;u(QK+4+`Pj-4kZ19iV28S_`CJUFUOM;CJ^AhGzW4?TV8B;7
zfnKMYlIDxjdsZOHfdT9O_qMFsM(`mjg+%56eu4*KDO=1HOHqr{+b(^@D{TcIiQG}P
z?yZqOW5fPu+`5|HN@G)-Y?ISjDa6npTjr+R$#z&)>NpIFU)eXl`JXXO^ZD|o$U=%>
zI#O6E2!3jfEgh%|mHtp?YedD=p8DMa8i^3jzN<4`J4gbL>QS8(R6CIPQ)6Bp!i|pS
zfmmMbAR1Y=o-TjkwagNN<aBS+vN8xrX?ZabYh2;DyD8o2_(3NA4~6!~hu7>~V)m28
zNB838kEV;`1GNozrTQ6a<VP!-n&R=}8yrqJ0xgeTGVPmYbAXbd{!c?9m<x?)+GDf?
zlBkM6>@m^C{2w9KhcJUu1XXt%DtOM#&riyjmWgp9mMSMBPeA=lnkUDTSroRuEw?<O
zY`Edhk*5=Q7!90;m2;jzT}0MLlf&4iE8l@lC?Ov3<JOK$!%&_nO%nI}cxf5EvWctR
z^+M3n>+6!tuMY#+_K~d~-9<SKWK=q;8w9jLvTeJ>G)yONDH~PpaIAEn&;I)jV6VT@
zbk-NECArz`c2u~QA;}amV9g)tZU0z#TP22MVk1Kdp5EA7D96=5&YD60)Tp=8f=c7l
zQ%-E-L$b-Kx+H(Z`=I9G^8Tp5lGB*XOA4_+&>G2junGb$0>cOUJD1HIjIL9mwlu`+
zDUl-Q^BAR*mm9tcXv2!%x~#?i@VWi?ebHsSEmydG-l_we+8LFv<X9_|Z5N1ivaQ1K
zlT^&*u-BkIm!X^rzs64bX6=sK4k>{NGXE{Wy#4nRX-#caW4|QzM$3BB<Rpi6Vs}ND
z;513B7tXq@=bO7Ewf0ji`qz~GyXTQ2^UKo6TP>kd`_*3`>}!dY6=2g?#1vAEe!6;*
zCh;gBmNvY$58~*Lfl0zcIxLdWa22l=nFvA;y>$hMNHGgN5PuE1KN<t3-RX3ess0ef
zULTZ1P;6<fsOL(|V50k3ERcG#ZSm(=rp-KDsPq?um=eYo+xnb}`met_fx<kUMU-yG
zF#`S3K=oIQH!4yt5}HF>{S{Pjr_d|_C|dO}(DJ%f<-HD1QaTw*J!L3Znkl6lZ9^-V
zmm$1oe!4=?!wTcPYK8`A^I?{PVRtGgYa7vQ-2P>Hu9so-ME3?F2TEWjEmBf2lu%ra
zP`_FcqiWk#l{a+&NW3PhRrfJfY@FR4{mDU@9TJy^rN>_Kqi;@t9sShnpGM$e$<q7&
zSJShRvn(a)4(sIjd!%^RK4_NsCKWfT8#KfK_KiWkz@=KtxETw&9?J!sI*qpUs%&+7
zya*RaZ;&89P;>b$JbY9Gl{PCW^XF~kC)Y)4SPSD}P;oIGQRP6}u;|HOk<cukh_(=s
zKr})wq%6ojaMfgGl3yFy#ILZ1hCXd}Ub*i>jqQaVqVc~~?`ufBH>qsgVcL3+QY6C$
zK;;>54VuA!vM&n@h3|=A6%Eb7;H#uT0!R1{su5%*>FHOIzh!>UEPOL<UA%l*F<y4_
z!0ZbWOmo~K%WhBC+MG04AN0u=T?Wdz3jAGhVdcW@-TZoPelcLf$OrTGpt@KXfe?{p
zAGpJzpS(FxoG7@k>C=T?gL%Y_iF%ERf<=i+J48L4l1HN}Fw&*%Q68y8i8HF`>RnbP
zlhaJA)Qne06BwIGP=gRou;z7G_s7MsVc<KS5uqn2)cnZx`3g^RwI9{4p}G9~Rydxr
zMozNm>OQ;AhGI^$<W+Zo7AEe#E^Oi5U#z=eygQnVS7Zm2=3(}cs}-DbWZU2AaKAQL
z<A9foB48EtPSHJNO_{lxgX6%oNkl^&6L}8s(>;{-QSvvzs5^=ohZP%D*8};LJM1Cr
zr0{E_NI-W6wB@DQr0p0WgfFTSrYy6oCFeyyKo4zTz@*+Q`XZ(&MuuciW8k%_op>WC
zTS@?k152*q^`GRzfQSE4Dd;mA<*mut_NBAgOu+j9u|-$K)V#yBF#(K7J;f4w9y?*v
zYA09ea0_Z7!Lz@26zmfFxLz^0(wGRUZ`k%k6D0bc_2S&f<G8k{FUyKV4^-0M4<x{u
zKI)e0-xHjIlMmf;9XINjZWtz#2L60iTR^cehP)9jlm$Vk+dee<<%RSciE8mdWDCs<
zzksrY#M@A}zbUt66jc_mdSGRCf=d&k;d;yCE$yUPGI7d{9AE|x3KPIKrQFD=lw=oV
zC>5xpSe9r{Mf%GbGj7MJnG2|cmlX|7P$vbHG<4yM)iej8B3kLN)i5GQS#hxXa$!_L
zC#H=#<OiXcqh5)pBi$A(FNnBqbz=3<#$0{m>?-Mgb65c|isN~3V9TsMon9lj6X)6J
z0XPC}0-Q5YJTi{1(v`1WsWfQ<WDOAplmby1Lnr&XumSOu7q*ea;bVM5o<Yxht?~tQ
z)PRFF=rp&!l0k5g*!K4i4}>_b9Vwuup&o-dEK+y$+r?5Y(}zgTUwi2E?=58Ntz0~L
zLDj5``cxr)>Z$)l*f~Ur60B>sY}>YN*D2e!ZQHhO<CJaNwr#uK>EZ3wecvF~%5e-L
zGr!pXw}%J=TA}X27%ho*bSz1|@(I^G!)xwwTSf8ukX1Js<YiXs^d|;O4J0^)3Vv=3
zFO|p*GoRtm>e*pe+<i)(284{avRnzqM`;CM)16V5Iaf+6o@@lyldUhD%5gm|x1;Fw
zq7rG)yc7K;La<bOa76H#Cp>*<{oLtxN;&E=YENKIKIkw$r&ISyI0rZD;?4&-9cAY`
zd01T^dw>jJA9Ll(!iRi63Cge2`m|D4Nrfa1NECO_GV-0JU;8O!$kWBN^AZlb)kJnl
zl*F=WH-W3m3`SYM0(eb#SKrf`rO&n%Y>FbyH)Ynp4oFwDO_q)6P!&KgS%K*r?q~i<
z5$J$&nqF^Q;xU1A<EV_v1=}w=JlAN^3CuBsYZZ4XACu@*RqFZo`84e0SQF;<VloU(
zSJYf6wx4>W0V_YexH+iSNb<{jTY?A=6&@6&??+t`-k7jwvp3g?Zb5$jsfJF@JAEQ{
zT}_BQS*FQQ!y-BoG=;yVo{YLftEpw))3VGv8*13fc518Etz4%?8FrATCYrA#sEJ!g
zQX$r~cdSNn&8*eb84FgM@y-rWJwoasCZOR-O4IzM;lh=mc}~#&S~1!7Y;Ncm7)xW~
zqf9s_i3m55CNl8CK-80|C;P4*$my~)|L|6d8orrYg=SV5Z9&;_H723EW0XWw@HkPM
zgu)l}66*%JXZce#H$eaLff{KoMI_iZw)OvocN%M`gxws%?*~|}^K)cv<H1)w)%({{
z*cmF<lv?IISS0Dq-u7X+-C6$ZkCsvky=`Q4iNn0rc*4=a_d3sLEkmeo1#rC{1U}o4
z>1vCy3!f<t`^R;gg|DoN2m38L_oJ^h;@DU`Gjt_k-6#pvxJAe8IQ{y97SpPBKy!UV
zQo%!QrPB<gmD0GsX(C#2r<{PKW&*XDW{62r{)SybQm}h~!^b`Wt#F2HrGm@}dUP|Z
z6e~91*9KMzwrC@Z_F56Jf0yP+aDH*Ofxa#Q>s8wfnmUnDFS%3?7e5hc!Qs8Y_vvHG
z-QM|o_3@nr^TZ(U$a0-aTGb#IE<rZD2>1w5|7?~BFz=L|u>q>2iO+bvSm%{a;c+@I
z-@V?ZMpb_046Lx>n)mk@8TLtFuM&Xj8d8r?Ket+Ay(mEVnV#dCJ>Qxu^LI(Qo5*&k
z=I(j)VEQRn=Y1(vg1SLgFRxvi32EnnmKFCtlW)Ro<nMV+(1nnkN(KufosihUnnowt
ztd0Unoi8e%4+sukB#A9>8Rfe5FCL@8);jA=-30l|tID2an0qzWmzkx?3^Q@5F*=?5
ztFd~8f(l`7y<C9Xl)KlHoX83~{fxwi#$(Ss1LF-{uRZ1St(4YdCKKb{$E)=lJ7<lT
zZBVMA_c_$PfJjV~0HVl0!J1!Vno_X3QEN!i)%E!3`TduJRP?0|B*AJD9=a`bbzJ%F
zU;CDdh{V`m(EsFkoPYM7_WyA_Q?UR5xc?tC(8*fQ$;9b@p?A7?ZvS<9HS9jB5!^`2
zI-0D@(p^_A8jB_z|DlgON;o2Gm&FewB8*}cxqz66^c?^FaYYA!^iQtddai_z5CMuB
zrh9o6DjSVkW4tV_vO(LXb9DV#l$({y&CU7kD}|mBrOuTm19r_R>3t+H%W>%uXP!6B
z;V?DICRj^{&fR{jgY`#PA%Joxavxif7-LSw);D~QWWC!@z;a)*W`3d6X)NhAk;rUp
z-h&|5`x7`_l+OIaxmT4f0tvlvOcnb@vS*Ea3=LG<M?nyfSLdAi$*>l-Uqu@jNY9bz
z5BssbW52LC`=?_DKocW^C(87aN7BG|<O}DN_Q9K!PF9XRONKjy7Xq<$@#;lcmP=*R
zg8sn-W>5~Fmy6ew{x>*oI<d^mY<8WYJIY()ReFKf=`8k3vjp=-pw3yg^YL*D9<2{L
zVdgO=5AZy$!$Q&exqRGzjIj5V@rvG<nFzfG6v7x_hCK33A{^LgdSjUj*@}N$BUckf
zl!!8sh(Lw_SlH<qO`fYG28lnm)jCPU1Fq3b>xHl5alO--)?4#!10C_w!~)1}(StUS
zR^NrlKWum=u9o~ZR{fCckUR<0n#cI|tz|sWym`;xE7>U^e#kR~#R#^a6I;(^eK+st
zO$oWRq@~yazts8|*tdNrxz8wZKrzEKoU4?85NP%a3WG%7h$zfMpyv<Xg{C2DA|aXp
z3|kQJ_&bv6wyA*08~)0Kdmr&0dmv?gYrHNZlt?~AzesMaDvvGdn@wRNXdSFxxJxJz
z2?k!cO6ran;l1uWtKJ(Yq2)tl2&FW@eewg#Y~fMrB85n5AQmD4&S*aEif{Cs8qZ{F
zrf457|9YXdSyMtv9Q|Uowz87YKIs}-ab_?sWe_nEK`?@EX#kRrl03c}j!PIHAlb_>
zr1z##(){w1u-TT;H)JPXobS2b3*EYc8PIOrTG-Fi^_l5}eqS4Nwy$9k^$Mo1;qAxZ
zB-<rCqWI}U1OIhgs5KXnf7-W%+uV8YZ4BT@9e10c|2JW`(njfUXp!4D+)S?aYsYt$
zZ!0r~H&v;ud4gc?V+a4)V5M3SqY}MtoEW>^j_mrS+|}Y)Xg@SYq`xSD-<0PdrL6mQ
zMqi=7lAk;44gBuY&LH%k9{%hXupnJG&qd5V*S}sy7<@OtV~_yU06u4Oo;DRjJyD4S
zx?$PhG!G1tn^9^b#3f*IhavQ6&wuyqL!Ry2ffi<J+{Es-q815k>0|MDg)}07T=PT;
zff4V?y2n8%u7?RWbVt(8dF}QdZ=Q&`;T~pbolv;ZrqMqI-wfRMyg7!Y>COVGp*e)Z
zkGFf)1*1%d`*Hm}jJpTuTX|OVvC3;4vtg|w+ag>C!E?$&bIu*;F}#tlU}&&1_2vzG
z|AHQ*{AHGZSm--{?2%M>U^3qC#bbOMGsxfg<NY8h2r|{Pa_Fi{U{>IAYlcYWsXnwm
z1iGdf@1!hU+y|+WK*tH;=BQO@poDSKlRsKE`h<T$0=EGUf^kk=!zcOSIV{jhKNbX#
zC5tU~eiO^DBPTZYPaCup8X9CZyI?O>N%gKZbAn0X;`ExY{s;?R)2Xq?pB-Qm%v$ti
zSH6*$WQ;qCg{6td3u7+`W#&D@96KWxUz^lb6Pmm53-$MW)8VfZq}ek3aX`WI{om3p
z_QC;OP4jW|d7PSf1R2Pc((G1Uz^QheyF$}`7sbv@F5twgJ`bLJGIhYOqrC39+3(P4
z3Xk+61X<4Uh5Ed0ww$CAd4>QUMDo8&yR@9xr{hNC`{|RrSj^BF<-&%e6RlpVwl^G?
zp4Y*4Sm6qdFWErtB%SdZ`K)1YAMhOM7IO&m_&ho6`tpqycW|OT#)Db?`Qtw(5AkN0
z^Dh(3Y4|UEP3m?$FC#l%b)ZGHZp-KJwj;ct3;#^k$?(0F#j?8Fk2INf`|{x~*}$=<
z^hY?#q<_wsSKP<>`1n7^KZmiqtt26Z@HfCI6~oW~QOh(Dk`MmDL>?WYbN@DuhsSKU
zv9~uKn#XLCLgQ5bcNycKPnPc$5gC}NC*(Yawav5@62c>!tX0N)gMcZ;D&efxIhKWw
zgzlfzDd^W&(F(0-#vFyIB@Qxt#wdhQUn5)ix%_n=I1liLmBFIlRO>2&Le6q=OJMp1
zl`B=+kGZ3iDBf~US=1-L#6N=1T^alGt>^}Nb)h0z77v2l)8nYm2T|h=6qFfs8d4Uq
z{Yanr);-pma}W~pOz9h@YnVlALI9`;7M8<0<%d!r&}{+G0fdnbhGEJ%S-I4@R=Ywq
zu|H%gh2}6Xl!YGGVg^Vl`*`nyvQx%j*M3I&fbN}1-Npi{4kKYf;2u%PMS3S#$_%}R
zdWdtw6`CceEuYQCxacdGrlzEIyvabEa33+s`}}jjUI1SEVwxz@03JbMik<IcOQWMl
zN4_}O?2<r?I_3@4^s3Vwj_|XKV9x$X5Je^a=4e@R%VRHz+#}hp8x-lM#9^+|C~|f8
zo+SEYgaS2ed1}_EpZ^pOM8V@A=|`TRa_qTd*@K5ba{@VxZ}*0jKr%wr-Z79hcz$IL
zs>2ctuh9oWW@L4QB%y}qPMygMo79|xRi6`E?&xg5IR~|D)YBlF=mqd_kR#LKF5W#F
z4!(o?2quv{{oX5aA0(b`Hg#btQih{c5-YO+AA44Z*r1C`-7RY{MSEFXrQ)IyVD4xS
zfX`JdNo5f)0dJ)`>k<@N8kDzoqMk^YQxsF`LlKY;AKS8JD;{z{q)FD`Dxm?%MQzTK
z;ctQnEYcCS%Q2jMb5^-fRbq8VmLjO{c6Y#c8@~Tb5QZOjgCvYiakJuvho)o=Xp|Dk
zT5ssuI(3~Yuq7fL8NQ=96&@IkLwuNlpbLL(rH7FCYC944eF0`{Y%Nk{<<O=3RbWMt
zCg=jYlV{nseX9~9F88a7kui-m6nqf<_Oxp0&GFh!hVE3-rgwduHETGY<A-I%q2}cF
zQpLt{P{pAvZ#LJ>lyJF{$P)qR%^BSBN#F{{rUddiCypc-&bHwV^4eU__82ML8o(ig
z0e+z_&NOGJ#YSy*_Zlxo9hI23Ptz<dRc!J(ri#SLn~Y25AdtKmGWLj{A+GWs$sh!d
zZ-G(thyLTkiKkuNx#xXwT~1BH4*Hy8>7U3u%<SmuO#X-g+=?VaJf?dLxwy!<c<CpV
z+fQ{S1r$t5fXbs$S>g;}gh62h9$|eHe&3l(#%-&{3qJVk>I+6J?myNKvz;yEyGYM9
zD%zDsq)1W>onyBo)d0?nz|6&>C~%KAdH-g*lRllomqEN<lBZiZIW}U-X8rUVDbQtL
zE}fwo{l<qT;N7!aK#(u>=Lb4WVfwRc>H8rn)AaH9bQ*S7$8q!P2h{n4^$lR@l%fNU
z2YOF2N`XI|!p9f^z%%;F8RQVrP_;Z_9mu4RVdmSZzz6so?>bWJxVSX~E%+8B%q8Dh
zOy5s{2<1W3FZ87BmojbGB(%neAzqw*;aVUHZr?Q^)yJx-&4A>i86QIGLK`$7rs)}Z
z0|b>}9~fOOji5A(Blx3Kuy78|BQp$2{AvS&ZC0X`nKG!74rlI=`a*Enc_$aRWli*?
z2^Uofk!D*GQ5s~$>Y3$lbIr8ShSU#|ls!NE#>l2JsNob4@@fGwQq3CKys~V|!<&mO
zYsVI&C-;0KN*H*fE-V9U+*|I{+R8{{i{@ZaKnfpbS$_bJ>{?w)z));J&U$XWi;GU5
z>APo~H@y6Ka{vscHNm2TowDSI&QgS~l!-KJX~gyg7c8KQmGLxzs@?4E8*D7-2bLDL
z$57+o{D9Hu0P6GRn>5`i>J{}F76C`$ND)ZJfc41xu!7s=HnKsV#*vW?4?k~7ZTVLf
zk+Tn(;<vfyWQKAs9m7~U?Hw1B-?WHEAq;Ty(liR=@c9kP>Cw));4<)|lu>Eq7X-2j
zJ%lL(!mf^jr&rpceit+NqYPo97uvx>7l18=%4xI*><-V^fFdj`3ZTs~ulo9q09Kq;
zPT;?Y!@r}rr2H*}FOt&J%yL;`qelhq1i%9vBg^H01;*Y*3V~4Lz*>%ak}>$@(l}5>
z$7O8MvPo9hRr2tSOiZ9V%MAGqV_kL~lNzZ1^+VdyAEQd_pM9{h<>hAsCK&b@|5&1m
zX_t$F!G;ahlF*r(EV0XU9w_Ass;KvClWu@bfo%@6WRxuZQ+;BTtsw?*p+lQl5lY<w
z>L-=wNPq%$K$~<ENxnO(+*8Ph*Hq7B?bI=7ZLiX#_iy4>_KD}o(+)CuBu`kVZcFLJ
zaWXe3eS2gu{bVP}JVrhES7J1kr=p`C13AJ<-2zG5zn4(_QP=FFQ#jiw))bw!IFrXQ
zu^U|iPgVJ>Y_l1tu0UF9m@+4wbJl?u!@?`yU}Q=!ox{uZ=zSV#3%#r&nsD!m++R6E
zU#_pkFEdO31ZZYGgWZ+h#lovwQdBwW<LBhZ;dFY^3)yNdd`%;Md%{Na{y-;km!R&s
z(LTt8KQx2=ot)!N_fGS>fA9QK{n7nN!?gaZ7ooEIRH}|bJDK=qf3*!m&c3=@bl>DA
zG5F-F+ct+ILy?VGsz8C@rTpdL>8%Jy?!?%0@$Wr;FQzh*)Dl3i_P)aM4O>UNKxD~H
za|*wx{jrFCvKYEcbH&)f93p5dDMui?$n6K%6HH@_)}l8vB9}&UuT}R+$*Co=zZEo#
zJ8_~Ak~7qKE%fH^GKVWZ^-TfRDgY*yJ9g9PDnJ-zU$EqXDr2b^11ca>k2#ZM8`LUb
zjXe!TmZL3-gM!mMcT=b$YG*#_WIZ5!E9{lxSVW6HLbUC#mfpM;4c;?vrY4`bX9<2y
zC&8XllT4RG2Wzx?6bW8AjEKOb(E7${WoZcNkZ5Iioj(&j%jh`}qo8kH#8{wo<f!`5
zZ)rLb!~#tTK=Xbz5FlKU#k9^7B(D`a9WJTdKfIR+rMtESvMHr@@*}Hb)+b)2U=&p>
zUBgu|4{z3jqUb3#h7tlE%f3q(UEL|pm>og@6^KxLF(vkjO>AFqu@s7drG9JeQQ1U&
zg=z7wJHsN9ie<JO3pQR;gRc(6?9$qN*1w0J*=*I@!EW_y>Nf2Vnga9aRwuHYa&1I(
zIpIP+>JLi@+FW`)1#DT$17`}mKVVf)4v>G2x2m-Mrh`MX<W0Z;Ht^;#C%RlhSiJ5i
zP2{@LbK|_Lu+!}JPOkCSk-ZeHt=JvyQ=F|5T-YY@&ul6#Y1!Qgd~S)&99RY<R9KO2
ztZh`T*jvZ_ux*Us)j((#{lEXHzpe~#fT4R6ZJIcbS`Z$nxxcJGUDwiMPRX^Cc~iMM
z9rX~YsDQOcH9@Hptoo&W;`Ch3J6UR#;{E;WSDvQrTU<*XP9^#*U06?@i~Q3b%(UYn
zB6#(!1l4XI_7d)Tf^F(maEd-2rwj+<lCZAhabY<D;Cf<4X4`{jrgJllLwY$*n)mbg
z3}>d#+ckRmQ%a5TAVj;@Hj!VdP*=O{-9}Z|GXmwq7r!mE@#QzRX2T<rEoZ3@mf0$y
z7RL~+4lU*h%}nYG1uL&X!B5EdnNthsYbNyW0A8z_+>%hNw<JxuIbE5fKQ;Pt#`1ow
zXI&ZYhq|q+zn}xvJEP~H5jjhVgT2Y`?3u)3J$06eF^{E{#5r?1WW)=7S$Y_PDfdw3
z?#v1hac0`4xchP>BZ*0aRMh+uK(*w$*#<rj3yUC+4Qsb@8j?8~%Bz+biKm8YLrd{)
zymJ|<)}Sz_^QWcRnz`QCLg!m&CL<3!gCW^&j=qH0xW{U)t_JRZ+|%MOw3w}5^U5xZ
z+sN4?gu<OpoVw%-1PMnc$K7uc%*I4j56eY5l#s_HyzSnccwi{d+j#jE+Qz<E_^3)}
zGy-37O!ILlTQBj3#ODl{4j?kuRxo;G1MJPq>NL;^#dAYMpmIT~_yXtp0v1oP2F-1Q
zsXImxAnR9P`(5p!cSIx66`Ticl~VJknp#o!FS=T*>2-qmSF#$6`lfx1xwc((c@#Aq
zxV%ORs2BEC53oz-r@V<xo%q4SO8<SLvd*@Iyr+(T7oO)_D2Xnp8iudNeo+AGvcV|l
z7(3%GH7e#obYL|magR;oet@P3D%c6|gBkidYVb(FLcQ^B&mNfFqwyjUH6Et})6|%-
zBcf$tWwanIu}2Rme*;|bT9U%8y6?tSSO<0N6p2|-<)xYS+t%cx&Rn4Np@xbSwV`l<
zW{@o#h9vy}(mC%dtWJ&0!W>L>qBk#!xitu7n`ntXU;Qi8=?b-hPAcnU$jGcRf`n_N
zBDA;b1lrjU$mInnPG3np#Y|!;?%M-sp02s(uzQ&~uc8W1#>?Ud_A1?Ugk3F!TA+wG
z?K+EL!sp-7Xe5N#L4v+A&1hz@*p_{@f%gi6>NR4(>h5f}<?4|l++8bBw?**5qaVdK
z@{RTln9l<_-1y7^_$tTHh;<D#UiP->wdAsh7?tGKUu*_<tv3*I=)Zx7bftk%)VlhM
zgnD(MLnR@9D7O-Sxhp*-Zh}o;T@E~XfY^K52?wg{Qy{98m6&mrQ{}WT$RtEOAgcln
zUMLX@Yc7fJ#Y1OVsPcNET>)rg`ORH{72|5ts$=rno(Fvp)(Z0Z@%{Q6akgAs@Zfk;
z9UE`Ha%SmYQa}p+DlDv27|Z#Ln-%uBN0G+&DSgf!=o#oWzigU>$vrcN=L*7Xhj=`O
zaJsaPA;=T&&p3ic_6kKo@hNjIAu*|Nq~h%mh8GPDGh>r(=-HNVHW30Xv@@#_6jr9~
zbMB%g0tH#EO;dyqKQ=a;oTi<UFR$s_UYaE!f$_-2aMMz#edj*o8?(_>0|$?hzN`6A
z%EusI2Mc*p4J29XN%Y0Zeu?n3fTn1S!{}t!WD{`<?0peju#7Ft81?lHeLXd?TUGw#
z))rshO_P~qCHh1D)xDoMfq^v9cE113TYGh_B~vP#h&9QX5j)Zy8B$&pzlBZqdqQcc
z?C6drvKe=y&UAC!%+hIa>QYyZ3m03Jx3$vEU&FKb-t;f#*x9E$0L`MJ9V*e_#dxd8
z<oi-iq$%;NSzek6A$|~MFGeNyK+i_0y@-}%ZvbW*mL=Mkj6zH(Kc@1C9%YS)21=pV
zqcCaE)=;|6mVlLyI&{_i2(r9kagiLU@T;36p&Fbg%0qpjfV~#|DUX7bX1$oZJqEB*
z){^s4?Z~ejWG1kS)iI)py=g<@VhQ!UQEPlH505UPVNi*@(ertz^;*lxpUO|7a@@G3
zMoHK%W=7eImWq)wa6sIcr3g(UJk9jI7r0)g3YlQSM56-@wnL=MFprQRBEbbagX^(D
z;<#W=>YX<fQd$t(DoinW_)CG)J742D7`5nZrltrEo%2NzU=Teoq<gWU?19cAIj06y
zVJda)RoU>b7$ls!2ewjQVX&jPlh8XLatmE6gPq=uEW3!fk!GHETOk_c`E;WcNiE><
z3>@$oP7#|BX;-d=z@CgoUS0vfoc%hfm4DuY_vX8yQK;bIM0Lh{<CEjrHuT%TZ{rr`
z<G1cY3?8gQ50{qUulF)(`8C_-y64ZOQ(f(-Xu?1T%dFwxi$M&WX|gaPxe;#_5+=XQ
zKSrwt=T@Zxi&)n4Ir3XBsk;Gtvg<YH7dM8wruBFx@+eNzvt_s{9@8^c4y&!EtT!Ve
zX*u-ux^KqMX|Rrq=@v3s8|<8}FHa-LH!EM^hXat?U>HHUxp;8NUik3ZfqvQi`tCA>
zddF90sR-2gFp7y-JgA~x;D;e*p09#`qhX_0TggiM(y&0&P@x|)%9vYGS)^3$7Yto}
zq$UH5oautZT}E+pWg|UO=5WDCi67+;=37bp3DjazN8YQDDa%+pDEM1!=W^$0*y%oe
zWw!>G2xY<#g7auGf5uCw66oahd1M|ScjDZmQSPyOvBXTDPv?a+H!x&*(DMBL@sZ7`
z&fgPusyn5kpvr9OcFWdkT+t9H?kQ_~T<&-sQf`8_gc*_)l#6WON9XGVd}g-Kkryov
z$6=+`9VIyDopDT)%^rtME4gTm{;3G%GYC9_M_Ujk)+^%zu&+W9xTe0)PK!?><jnTD
zquWwc>n-foD_Lc&(V6a78S=&jOy5FN^~~M{PCax)>6fnsRfpZnU#rfB9ky7KuNyta
znIK`N2EuEjraK`Aj4X8tlt2IUwtzCR<pCCOX`@^~g}=GAm3);S2l2|`eFdSs+sn&h
zxH`|QCCMDOWziw<_Ur(xP!9HVKuNC!gw>MUS8>>KQh+j$b>FU!VoF(XMVr2AMvNXr
z_MMa*iGHdZ35rM=wh{Kpji#?67D7>;@2E#yB-xcRlM5|02+G%}_(|cUJj=*C&y}w0
z21<+RaD!E8qSoc>K%8ozA!Yfn*4bFlB~-OGjc+2J!vI<JM5Fn)aGSxt0wq=hXs7Kz
zrG!wC(@ko;1dp0Z-{mYSZa8KMe5b6@{o4TXZ>b-3iIzmu=uVeqs%4=z6^+XXx{Vua
zZRPdUi$b*CpIqe4QM$3W%W>(xB}*n4&61_Qd%l(x;9ej<>7H6;OkAE5wm0>b1a47(
z*=N|{9L2!&Uodosf*oWqGvzmdNzPTc<WqRcLJLCC-Nh}+#ODd?Fo)con=#80GLO6+
z7|~PGJ_Z99AdFPjxDo0MOi4g-EP>5IHC&fF-?@c!f?lG_R!azIbKOm_PEl#0%2%7D
zwT>605)3^FS9gaB2+`B(f#JU;ID3L9@s+*>yBl4A+u+Gu1@V*_ady<bXnQKBzQ*CZ
zwa+49FCjN?`ziu#EO$SwN2(AUren5|-brW?Dv=#YQbMziE|yk_Ze2g7E8SUI%0GU3
zbxML)ZQJEzkYG@DyQ>eV({%GM!J#4Z@f=XsW5j4SnyUKnwl97BAjf^}b`SP(uG8%2
zVC!V`-?L<zGCAR(g|R}SATvw>7m@*@`cEaz^(i-3i$k!j0lkG}-XS0=F#h0-;{_S+
zxu|Mk)P+!SdjoeBAvu$9+7M_KTO^;U&mtcofuiS98I$l@x|?4XY$DI}aba{k>2^5m
z4K8qBS50oW(l2jxHT+#kcS1pJ#26x<&YWYdV#79($RpoMyqZe!1BzPp4jhEAJ~U`m
zw+})Tqpx%nnXU0YuSTU+4&zmsWJcUH*J^1&nVo^cO?V<AsAObmWrbd5VBVs;nOUl_
zB~9X9R9D9xaDIz$U&A@|u=*Zt>7Ky}2Xh1j9bC#waUBj1Gw5!FT6i#mLi1y+(v&WG
z=`~DG{4s~~5jN9l^L@3aVuJValVO)2&5-+{R!?J(T9YU%r`1(;ednwb*%Gw?x*Q8-
zjxPa>(H)^}6}6<ZCUT6_Y(vpxE8!~|@+3y&oK60AR_&^orI9SX8S?pUeYo+p=ceO_
z;optr=4VLs^<RK-s~O>C&F@ooV#RvC9X-}BuB?daMQ2M<Qv&DZL)ubQGY0Z0gBE`w
z<B@tGOwp?<W5(;hz`KMS+Bq&j<M~+5p<L|5ShqlAVHL&ss(aTwu&Xj9^&`h=WqvL7
zGC11nxuQn8nH)Tl4q+~f45;6p-p6TZproN-Pg1H0CQwTgJcgtwK}!M0PyoBD6Za*+
zigI&-M=+UlhT5gmnp;Q-qK2}(lMlm4Hj+A0<;z$t4F-lL<=KajY;5_`vgM|AMfFp<
zM_|kLJIS9WYsvbOu_VIXilOTm=8udzFx#?H_gha$gC$7GS^3w;=)^%!pzE7aS7aQE
zUX4aM2GX}>VfulS`g7;vznTi9LXCPZFHc)lkQGF@AMmjexN*o}T)s1t6u}$yM$0Ta
zdD^G3G$2vgJD&a!g(Ce1YTP;2&rr~XXF5fOeosa~!-hl&hA9@;BpU}oT_0^WI@c#=
zHxc`B2>l!=Cdr~<%7c@-I=C6<3Sejf8$kjq!;r#K0pAl{=qDMrN7fcY?v2+;8yGU{
zNYjN%GdbvJzJa?J;_RG766hb!NlX-Gznlo-g&ja@BG>6BSQLQ<+o_klN?6o-Kb<3V
znq|Xmb7f&ICC=#TJ9&4IU5eCiNSsnaYmA9zszMI16CJwPpeaWm=?MC8efCx$Q=<F8
zVncAMIw8){Iut!v1Q+1#uI?suG}HzffHUb#TVM5pfWp-N_dqO6#OV(YxHtLx;UAI%
z(NKR6tV_+Fa9*He4kkzezniN=RFnw`3}}=!)rGwP*Ia6mKNn|xgnAEWquL(=+GB70
z0c-2@?$R6*R5v7Jt3zu^0w^UR3h`9`QtXAXkz^0OCh>_e62~eDkKmpxeLt1}D)6fm
zXv`pM!Zd00<41cb9cN*~L&qp_K3#A3Vv^^T#6qIJ%Y4=~-X!FUvnPVT<mClgP1VG|
z1y*Y1D~pyw&ipdDnH*&*Y*@mHKX<LMNoo$WmYZ^MH0}-Kaz)eV#bxu$#F@H=DEmw~
zKF=Vl&p7#QL!||>+|aqFyHu!v7c$Rw%G=SjxY)LRX>sOS$rSjh!%tG!wLJ)8e=h9@
zP|X5J9#GiS@#MktMSZ&Gkq&Et5KrVQcFG7hi}eO4+}69AM2bX)#w~jCF^b;4sUtP1
z;YWd`(G?!*w7!hFsc>)3M-Ds)5FL19S=wF;3E0AE4sSF*s;9+85)}&n^!nJ9wB1~r
zOupu$7L<Byy^ZtB*-HwRib@mGZnKa7P>iWZ)#l)@QF3<X>b+k+3AO3`k)MCDPzlhA
z8$glXGi}eTCf}88Ztg51b%Jv_cgCQQ@zeF|!17^Yl9WrWrGhhasmw9tX*-AKkDKhQ
z`mD;5^6)FLNNQm!n2KCY-a4>qYh-#M25b7g7c<D~Y7MQ%QZ*Gb8&EnHyv3le2QD{8
zzqk8~7KsCOa9tN~2EKpJWRJTQYA?Q{kMs~6hS0Wh?%Vu!o^p{4X)Y7oekWXo>bY;c
zF7wnh@deeTZLzB}xmaX;Z~izQo^6)yAC%Q;)fL=W%=vUFZ$ojs{4K_Z*_8nh*~W@)
zz=4O>IbBp>l%&vIVxxtO>zHbzra8S^yHnBAm+N5hyFxi6JG;&BIro#xHM!6%{#Wb)
zM5SZs^3EOEK|AZ#UX>?<aeMP_mAXd)m7jX%&~6Hg^;D`KZ*!8l#TIbR(#5{Wg?+>y
zU^dDCER4=N@zYRCzgEk2%w{yOFdN@ZD}Q1{qw1Xf<H_Ue@@}_P*W#^PxANB#U_8V|
zl%EiQ=b1))*cMS8k0X1Vg)jwtRg49r$;q})+TN~!hm`ryh5!L*8y&urv@oep*Xbdp
z9xv$}jAqba&6oY8h31>VA-yUE>9J?)snd=tA{>c6rb=Bp*<DeKL=;O90|P`mL_Q$2
zkZro}2Pep6a7c8_YLW#!?@vlVuxxUOZs-C}sc^C03NIWAguA&Nt<|(6{|h0(324Tb
z{NG35%+tDD1;Nq%g6`oORv)jozhmF3vjkg>9^nh;>|2)Vfpm8arLcdcw)kGVPPxvy
z-8e_lTEgL(Y<l6)T-jVr2Z5oIh|x6(GX#64P?@9z%=t#+zE0Mjkq%PVGm&b*VmkVL
z3udm4&l~UhH!=ESLZg=_+H-_G%z)l6<`~Ohp}TUOt8Ql?Vk<jM;fOL|3Rm9Yo3Q52
zAs<d09y(TtG3;s)ZeGNT(kyJv$9*w`p{}*&rN?PU{c#HvZ8-}sVbqbz>MvWpgY#-o
z>477eud=o9?X@~UAkQ^i-A@a}$jvwLb<symRiz#To)NkQVJgAJ48@i%wHX=^T_eVQ
zt1np=UX7|QI9E3*d+bKr#$b}JqGbNsK(11zfxRBqMa-^N`rX3^7V*|leZ2gR3&B;J
zv$iXqYJ7CGo5p2D377@P1%`59vl@OhY2tUtLlZ)1tDR{#y>@==3U;6WUe<Pfn*H`(
zY@>qkLG?&6DG3?n-pap<oJA{P@AnjgjK_$u?)c(ty@*J6@Y5|j>eBl>#_UjgqN?5L
zE-E#cQSUmZ#Oj$tX7}RPg6k9b`Ma}vZgcp#n5+irz2FQ!l%8@qN4xc5RFcOZ#UbS2
zQUBaGuz%l|5r$FCvG7v(TH|pq=h}i4iAIClIb+ls(}}^TDKC20P`fqH^;bc0VrgiE
z$tub%A?l2-7P?tq;TYE6KXYo-<d2p<2B0Au#K-P(2lAFNlUG9H3={O{;<!n>34?Ls
zpX>aVYWt<tD%^vkV8q;lx8hGK7u;0w1O6vB<SO)~b$|o_P;3qGj~c=O_{SjGIyqU>
zGSV^9F__T*d;C93&(X=?e<}UZ@%o1iA^q;=0XdjyOC*qTzouK^o{FX%D=Vozh|6Zl
zk_{G6j2Q|iP)WQyxV_)BLi>{d1R_z6J8W{xj<ksD*Q?X`e)cI^u)~Q5IR_mZo$bsR
zIetvD`*HiaIDWV}GM5>*75}(<i_{M8sa*^eH%6WcVl<17K8`_f|1thUjI}dw0S!S|
zL%mwy`=`wKSk6M+Fd}*sKLKlp2L%@Xl2*tUQq|aiABjJFoT^ZqJhu}uqaBa*slQ+{
zy^YTyaCpJVX1CyIC+0M|jet0uqeU)I!dln}JChzi0mZv7HF`~@cN06>YrLC6Jw(9f
zLe$|*R<#~m;5UAa@g-~Yp6R1yyQjC;4wNB`;z3i;ee)z|!;q`Sqw6l;<8yD1deyCK
zIXQ7vfyX6i<x9r(62VhTch9}%y<kax&PJ~3<UB|}urO{4{(O7kYj59<d^bIh<{Stg
z=TALuC)^kz*_g&3qsamT?aLQY_Tqh(aW4WvEb($*Q_JqJKlqI+-FdY&m-wE&@nAb)
zcxxzV+kwZ%!P^;^Ym7AoL@fTITms*FyWk*nR|q>f_q}GtF9I{O<9pl7Dmiyx?t*q$
zq2fawO?RiA4zogJA8FsVr={T0(V{D39XHXV-O$jTgS$mDaot%v<-Vy4kQQA~K8oCk
zuY8Sp`?#Fwk4~xu*!+$O47Lf%Njxm$5=q%B%xnd-QBG}25#x7svy&17;{j9o4QzM&
zZ?He0(Mth9O|%G&Aro}t8<1ZVWHVcE62SPZ8EuE7q$$I{)MopgKk+QuzcgBCSV8(A
zL5AxPdfAP@^H6-k{F7y`tY5eea2JWibu!PW&2*n?=MBEEHwzsXe&mq1Y~jE{-xWkW
zIItNI6}%?iZ!duZZ!)2PE)Q5_jjZs8dL!8G;_3qT2g#T^`Sy>KF0&WW;E@eqP=SZR
z_mGM+5JmB2f3=}SYypMpC>a1F3m~2W<e*18ZobX&pzw~w2C}3L8IZ7<aBC&nPKMz}
z?Mj_Z|MIN;xT0*!(T=`!MO=GZmKIN~iUO7Q?=QvLxY(wkL+1GxI@8f;pqQ|jQuiSi
z{d8CW^n^(JkG-4%zx=!LFV&jL3`t(WyEsohV%OH&k^lhm{VN8fT!n*F{WaG8+%M@Q
zp6<xwACuS@uyzau7T!%~WfD_0iil9|5#XmKhQw{iaoAR26WP3`qd6eDenRq|!VSD@
zA{x57M+MN`KZg~=9qGUS=yJ9L_>A8NWx5dZS&S&^N+h~WlUY1&EpD8Kh7!wj@eASz
z)X<s1jnfh8O-KhJis`?4*;yYnBw2&`)S@aSkb^lPpqQPE3jisvj1%erRf@cE41jZ9
z$2wg;ws1NdY*bjE%-mT4O`wf4ekO?mC2_g&gnDJ^X8P2+;whh~;Tob1Vm1~P;!e+&
z$HKwfc=QZ*$#%0{mw;5~&HiS<@a2(zB?!v`y#hb#6uV0RJ`etC1l=v-9Ok^7aEeBs
zimCI0crxsIOdBIteQX(MIA0;zwU=M0=UWVmeDd*bbb4XA)=bC!UFAmXk?GMr<_fKQ
zExOXwFGMoG0oga28`4jt1QX5IHx{zzIm8kT5zMS~(T<D-Wa%EqL^yZ%k1mUh4g#GH
z4za>95Dzk#XVE8Akh)l%q3&R#NJ}ats^%2$zc0ttBq$@O?k^&mW1jsYy6Y8nOXSK^
z#{i82o0s<*Crqe|nE>K=YlSFW^CDq}s45J>9bv*9g)0M9Qk3t@d7urY&fQ5~AG|yZ
zKlC@-71dBHRfhBisJj;hh~I^$ub!-$(aN@X{nUL8;~FOk?h$KnF^Sb>5HUe+9kQlP
z>VQhP%*?>dWBrIxvsEJ9Y1t|lR~kN1CX_6t;9$?s05Fo!oBH<8o5~kN_PrFx6B!&_
zytckf4Ukrf(MS#_tDl#{>ZfqMUpGuQr0dZ~85D`ZE9z*F!<xGjOo<nLUSC)<72YG#
z;RYAvs(F}x#pldWE^@pI=67?{mkO49Q+mE$4l%BafA{I2P6ty#6{b*8lLAw~02)_N
zzPM;)WpUB0Oeg7s&?&SC<!%n7P5z@N#rd(Z;I=EZq+;=JoUo79_MXk0eGGcpv97DC
z%XXx$daYFzm=O;q1!cEqpl*S2RMW>tF{xtWRs#0)w$G9;W}L>ZGdLRcusP~@BX7IX
zxVfcH!|R?s_zi(p$^%=a*}#growUQ+gxCdRC%t2BMfO6JsUMB3?D@p8hRDW7@;Nzc
zJ|D}ac;tO&y8LFnP*r!-<#M^(!;UL%@Us|j(?!nAkz*>2Bkd4+_-*G#duHrxqmeU1
z?ASauAjgwM?IqYnsdi1qIsMX_PUVGQx`Sm%UlImWVlP^Owj}SJ<!CUKQ{3b0fpg56
z7N#OtSItmx4WUKEbDQoYO!uh+O)6=<CuFUlB;rjefwFRlZ_X?)AOic+5n@K@_d1{7
zy)*Wkrn9(Ap@b)jFyjMUTF8*k-UcZ0`4`xf6q>AAD!0MkI0uJPnaY$=Vjq-Ig|9gA
zR4e(>n?hTO_nML(8T~$)c6rK`w*`bvkj0{CfL>cYZY?8dun`D5t|bQGEDR-H9;N_!
z(6;%L^I5|AR!9w<2mCJ18t5@sVFh_SiMSSsnH^-H9D=K0eZoy0Ql14~bthSxLX}uX
z!79EDrNDxBbK(>#V)ck>s^O%ur%u;84WUJ9%#OOFkQ44fi_)XGIGp{YNCP+lMfNJ1
zko~)k5RqncdQpZ>0;^ZjcO1XmcX&^kM~b8~BJOvbD^;g(@B2hQD($p_T0K&%R({wJ
zinNWqr&kgUnT;eu9TNM`v7|!!I}R!>8R9J#Y;9Vb!ioyDRwAL}GHqhhGZZ>09s9_R
z3LFGd|95Pq_DaK3S*3G=;aYbw<`j7Qa?M90-U(LPuLkVLFTBgEM|o%2<5rmiT<&qa
z>-OGp(wwQ*K+Cr;yw$Y1(H(NjxKPw(oKvlpZkNwHUJBY`ojG^zEtxe67dhx@mkLr*
z1i-6%N0o6@OzKMYyqqmh?_9mDZt<)o|F89Er&qncU*O=zz_ZT>@a8~4)ut4#Uf$8(
zia*2q;3kX}8`b>IWkK#e!fIXWCsSU^>Pl0n%}eGrM10WNSI&yN?I?we_cbd~KNX2$
zEI_~)Lfr`h@-;Lztt>#o$&k_Ckr|*_=o`V0B(Z$7`CV0%-C9`F;?0DLKi=^)^mqoU
zyl`)v&?N;=xi)H8-hxGAJted+zSYhIm1Qpa_d2`A$4^9oQ#+(wDzuxEPvLYNL!gBI
zTOiKT!`wR;boOQKVw5OQDO2PdjWPwK7X~jg<l4d0@mmzqZ%Y~c$yWgJ@#p^XhnOcl
zaNDzyA0<xP0s@JUi@vz!k5_d}g*s~*VghDne{Z65mo9yG&*6L8*c&sVre|P2O{CMb
za@=l9l08J?41;dv>B2fZ0tc$7h)w6VJEE6O9xJY%Sa$#3T@N@593e2=D+NNfiOD&m
z$&wWBq3?mJ|7+si9yg%K0Am?IR&uL<!kYwufN}Ko71FFxbz~b;1knEjMGg7E>?j9l
zinvdxNLW>3E0s9}e>2Vmg9Ak-obT64jGSN-`VNsp++buzJu1NcneGWP<pqEVHIKEL
z1gWg405`IgO+b%mm5Zo`rgD>g3jwXQ8VaZ2B=>Y^GrUKVRvGK=Gh@CzJ8!#cDNC1E
zlA~sGIfH&P&>`Ee&kqG!1HG9mD@T%We|<RSVbSGCls0}w(pIr5aRdzkCP;&WKerC5
z3Z?G@^%t!!!3#Zi4KYGB7MO3$`q*P{U%E`%&c(2NBpRHCxGzP*oXPXeIRHK-2ci9p
zqTQi3oS?Y+q|ZPLa<Y|3-X0u{<G@xG@MTF0tH9NkS2y^BYM(S`|I*MXkd2aD*8_C;
z@=@@I9-uU@9smfm|M(EJAL&z6CcbYKvCWAZ8+1yN&2w-vb&Bsw9}$2_{^^QhCXJM&
z?Y+e<s7*HrtSb`irr&JHD`d8aIFSYand@+$;5uN_B6z*%UdAkV2#i-HY86H7XujWn
znIINIs#srwcYiZt{Q%Cdqi9wLzkQ4uZE1DRV4HKHF4n47TmaWENUg`?>M4r!sQx%p
z;!Cq&?%52m>9q{aC!A6}wC^t_@MyJ%M11s?pMn%7Sa#i}yKaLQ7tcfH!w3|Slp=#{
zQ9^=HS1lWQ1#_NM0~VGFDb|F`#2yg430dBd74h%8oUY{-!v*2}JtcWCt8Q~6GiDFU
z`#noyw4$M?K=y80KST?LXgQLZ=I{pD4GCOI4Q!KF1VbAyAV^**VVZehOJ)~WE>9t-
z(1;n`b7_``yNoWT1^{6N%~*V3T72xEhrw~NhY!|wv7D~tp}YO3B9cC7F8bMV>cybo
zdZU*v^T;+3IbPwODLu=;F`n2rvfU=EPpDxM)Jnqu+xkat#>4&Ua+41F{Wxaiu(C|F
zxb{`zDD?+Em2pazm<A~=`!s;F-bX=UfI2cfYF-+U8;Y($A$=AgWCNB=&Lf(*4ACJF
zvvz4cK#JN~$q@UqP}tHiGmon~v;xHmkbK{+Id7jcg07XB5SRH&IC@Vs4&*@vI#ly7
zy1$F8XmFsQJLh~u#%$F6RJNt2Kz#WqY>P}$74|6Ws^Vy+V+)dFa9qoyIK=KV4W13O
zfg?d)XM({dZC8v=BfpfREmy(UsUv81eY<jF=F0-bVktQwZLtpo3bPepcYctvP>0OL
zc-@UAfBn&q8*i~$HfeI3yNo_mu3p8r?5<mk)hZQ(&%st9r-|j#xxitj2-i>kF+v*1
zckTLnj;3A+V+*2H+bFCjh@Q~v%ocx;U7;L}jL44#*z<ZNILE2$M&vR;VwpTMUw$!r
zUlvYmF-*S-Qryc3Yjn&QF{)P3CA?&A<4H+|?Ky#{48(KRysQ&~JMiB|FCgeHPHV91
z-NX}%g@%&WdA!kfnJFb`CrH0Zb4)mkDH_PAtLOYI<8(Qv6RUt+9c|?%-do1`yzqWs
zn%3$!!)~djAqeY!e@1s&4`6Y?Hm{Bgye4{K(3Asgs!C3|=*+kHU1mK=oTXJ5B}$T;
zgveGcV~r9w7MOMGRGmI!iS`0<V;?k<hC<|Tx$1TUK`)#0?|ITir(6bq#4K_~@3EWi
z?7f8b7W#IBJrd^cvA+-`sKe10+0)EO?|8W@N`{$a?LUtv$@;nJ^)i`6Dg329Ppgmb
zvyNgbz;!dNWgjs~yU6kl@*d*&@XPZa+G#_0dMe3DF_n^XBcsgds5s-S=!>XZxHWPQ
z%heOqV~2-ocHooVyXx*YOMKJjONRDuxnq+Je8VuN;>nV?wvbrkNMWrKIAvhUMVHH7
zk?_qfD4Xa1v7PNEP^=@}^K#t^e)gQz>J?>O%hLkoYr-10UQxWtDO$SeOZZ<)?H79D
za@A2YGG!pWi5?Z270KwDegHyP&b4jGy#~%M^#-$~Dp~0$uRvl(uv2;_W^`q)8nTM`
zK4l*0zL>=pJHv}Wm}lGo+%#tc8ho|L;2Kq$<J@T>-;L^AZuBuV@5u~o?d+i-2z&xf
z$3n*c%(6Z#42^_6ub$WlUNclNiTNc7U_cp3WU{rz>fWC*!LjS;+hSI`k}8Jx3#W9)
z4Mdt%PgV-6W>PS`jpB?p{c<zVj~_sF*PtpK2dxg>7U_Qe(|?7zobdU)gUiA)(#MbO
z|G+^*)v0@|1gGpCF$w)x8c59epg~|xfmJzg+Ll#?5Mx^h)khmEmU^2j*5h>e_fLcV
z8TWtxC>TdOo&&W`t|l;?4>!P_Z5mb~Mm*A`^V*BX-^bZQUln*GzNY)Nd8(5(!F(?a
zz)saOCjUg1w1(-mdE>sTNVYXli9Yznn};}xJ9^H*UMna0BHA27v}G`Mk?VeC*SG#0
z>|e9r(X+3fje1CiZnWoF?9;<<E7J>dE~S9ADRs99$Wg?dL)B{sL<0T6P}FZXf)Hf*
z^wWgvz3je*50Ay*Oyh?$u(4XheM%F@=e#-UQ7i0{b$Tzj1FJi%$=aX8^5e(ZHV0xs
zy*9`Bm@(8ijLdXcVPUEwkD#u%UI4K{Q=j+cz0i5tRZ9=md?c;G`2bOh+$Cf-sTxyE
ztAkI??H=$nkhGkVAQ;H3E0@^_*)Tk*p0#>V3z6u1s-6#1)5uQU{+bj^Hi%tde7~&C
z^e<e@4w?=m&N)tuB=IAvfMNf`nQeUCK3bH0)IiU@>T}#omq3HCOfF5LbDTBzuVZb4
zUQ~}9XLwYhXJ3b-&#}wu;gh6Xk69<k`Qd|5WIdu-V;OcZC0cdnd)#HuRs6!xKE^Re
z(e|i;Xk2)*1FeUQK;&_1b_;``m{sgr6p*l?j(<LUZ4WbWbLPj42E<pzV6n1>s2)|y
ztOg=EY~9{dW$9mel%ZXuH{Tomf97Vp<nQ;hzyJXJ&;S6~|L@$)-oeGh#pJ)oW+|#t
zc8dZCJ)dgQlf#e_I0(w&3*sunfRure0|83MYf0`E-Iukiu$0HW%%64LveE$f7tXFH
zS$4UX<~V&AwSU@^tdl6+IrDmRd$M~ug6J^^%8=ftr;%z)-eMyHCpArkRGHhRoZhNo
zsotVdC%~o6K#J>AX#{l*pjhP;0w44py+8`ka=C^V=VA7;$_v8X`a%Lbgkp-ARQofJ
zA>N4l6#)<9!waW0rjUbal`;U`7~n`EIKxvSB{<2R9m@*N@M|pkQt@kd{JK1L$EXyf
zgrqb|NVJwCAsf;VsBO|HRaEVY%saPdK!)X2-lfN6jAMw<XK0i}WG@sDc#L?)FOvg_
zmp8RZ-f6h6i*Iqnn+_VS5kZa`ORG~~Sy$Y(DBmyvcuAGi`_zAHW@3UJMEaMsbHICN
zg8C@aS7}FW)E^^lIF5P74JE)6BO2AHv-^VdDWezFhl}<AaOn0HSxFB~J+y{6>tU&1
z!VPgV7w5;`b%o8F>Guv-j~$JRKN89<$7ABfEhGX&6mOzGoC`F>OI?xA-Z;R0K(EI;
zm<*>=%g<Na$xq&d`$KN0-&aSI(+C*)H;SuC4bMV0{_GA}%}fW>H=*VatxKLIx4c`%
zbvg6CEUN6Z5^~5McaM$*YD&^>5D+72@zwUNBq}6H9Iwmj6R?m=T2hiTtgKr$NP^Pb
zmO(Gd*`VtDT}RjyPMhk6avRV?bCe-QvXrYOK(=4DDByzeaz3B}pOJ*tqW*3GeX$TZ
zgfoKCVri^l7ob6$(Unn??ibEhk~B|Mvt|~_U9bf>iV(-#T|+I<YM|Ja6~j|s`e6%F
zNgnFI2uYP(?f9(uGF=iWMXriLXCU99<w0x>pzTX7cKT;T)6MWKCzJSme0lXe2Y2e`
zf5n4c<7#H(%?T3n8nzYKbdSIQ-3rcJX-Z5|H!x{w&5fqDDeNxy>Kp*ZPro+ueiiHC
zryxDp?h9{bUVk|$D4_s{`RrV1#80nE`nG&mvGm(a|DjB0J+!bp`K>#89n<udt1I;)
zzNVkqkFhuYo8`fe;b3Rm`Oe3+uyKzMR?|tm6RjQgedQvLEQYTCSWPnG=DX?nEdrZq
zoW7MYscRq1Q|grp-4UY`_JdxgpDqLKY<M)Pcuw+<S6-z~u19)M$Nuc*bJjDLojzuF
z7D0#?TkqZ6Kd-QO?PUioS-I%gV231?k(_GVB%KCmzl|)wWJsn!=#I;pCG61tH6xSZ
znRY|Moz4lfDdqnZ%B$Gb6#ag8va8ZMvSnoboG9A#jsordzp{18YCZA_Z~%Z@jQ={5
zYhi2Q{NGQBZgqpW4RNGzzTQHiVw`9U9%0kM?V}eGIB_)E07SCRNaw`mHQ1LJ2d$fz
zI%~S$@5+u%eXptDt!+Fk*fpK!%8m;cH5cwQbbCnQgquclWU4d0-L3$WF@xNPA(t}y
zya+!>y?z3<f-z%wFb5du#FV<dM6)=aGeWR_Y2rNcMDTcWz*&J5eM4pt8_)HIz#3Wj
zy~Z(v$(MKt(DtL?q5<&%u1L<iU7uX4aHP9owix2nHyqalDAu-+dICNvfoc?CgV2NX
z-2A%$64o_mCY;$VhkMyb9^oc}M5-v&_DGNmvp$sb5Xq8<n!|sd?%Y03am?30Ee_F%
zMrDi8%WR?!rw0cn$!`vLdq-{L#`M-H|HIcgHEE(WYqX7NylvaIZA{y?ZQHhOo71*A
zZQHhWCeGb=vm+|%59CD_o?J^$G-6+4z%a}V6AoAG+p+<df1~X8<3KNK^xbGPS0BlU
zj>>k6{NJb$e6`)UP?dBCG<T4LGM}W#im_37ium8flz?qqUA{;PpcwQTrqnCmMDvA>
z83psUSMT0zuZK1JY7;fsrVpjJmJ>S2$??BgQ)H8Fs6ncmQHc_STE2l7Zs<jKALG`S
zw0zSO6E=baBqykvIZ^Z+{Vshg485b?9ZEL+*fBrfXM^CoW;v$jrdz4MG}2uPR8qZQ
z<Op|!q^QyImI<H=jX_1U`F{)NO6p7cE3esC9P%fkLF|*t1)9s$l9=e3Iz0|8*&pcL
z@S=g`2AD4x^_85|eY!#d=OXR_`}xFk+n6(90c86{fX&PVXhQ##Au#<cQw%D##1(a#
zEq2*YdfQ=dYWP@vVUoX>&Aq4ibEc6gr7;YC1-?<4Idql95c{*%>WVn0Dxur+X4x1|
z;<W{T=!ITSX7OE$Jo_*7Tca`14BHHwnLd$29TDe~WP^T1P+!T;T5`;`dwS`_y+Ip<
zYV@4_+|n|cH{gGqgg@PEXNQD}v420~G&2u9qRa?$3r|4|{S^<rJf7mrtCRoZ542-d
zByX{MXMgL!lOrozE175G5iNR|J%w*P>A_1!=pN8o6byOQ_>~9wx)PvPhZS~nvM|eD
zS9iljZW9Xo^S+`>wa+V=8p9^DiW?_h)<<$8xOGPs{jO@rrU9pLNgx--8(NTH<0i(W
zqw}S!w>PU=<P7XuEHSuG6M<&fw$V3$n;sgZyR7E7g_%g%Rj@OCt$gGsY|p|Z>kQ++
zA&*{3TvjGxeYukhH78gYu&)xa!tV`pa9!$``0x<-(joF$0iF>&p7>{PqDYnDK+&+e
zi*~e?CH^XwcEVozvO$@q0^yR#T6_F=@ZP9yh-RM(-thT^YZ@AodKV&QsBhFXoy$NR
z&5Q?dibIN7TP+YGrhXFB=Wtf99s0LRN9#R9$;VvEHN8(NcsbEp=IF<7%(v$*Ds2}!
z0P}0m#_|wj1xOWeWKI1_%WEmM@$kT+yPxNa$iNUG(rP3@+#4b9Xax)OlGLXiPN57D
zQ|uGgU(D(ovTuK<{?<HAf1B&D`U9@@0Do#+KQ5_LoN9G>e+OyGSx>Ovjf#l)(!UwL
zA|eyB)vUZ39ZFwsR)H6}4KJ=2Y@bJ9)z$9KF2-v!V)4ese8mr}S$pc-mQg4ylmI$#
zE*7EyKH8Im;lOI-$pvX1F%i8;PKp5fS7LFy@cl7$E{zIvFLgqTSQD5mGp<mBV2g~5
zMN}s^$9D*B`edKJQQ=*=CAP;?V*_fB&9}TO(Wi9Y0!~d9p<<hm%;y5r_6b9CX=~(|
zo{TdQo+N7wXicmFnYimXAFe+d1MG~?8H2lsFGW4v>T@1B9cL12d{`%fCuC?+z*W5I
zA<F85BLC?0O-|v}4*j(>%;rK4$`!SL;Jx4ECg(Ao%jLRcL1e&?3R8A#m}jzF9h_BI
z8H*&oFegwuylcdYCUCIhe+Ii0=G=Xp|Cyg3k77ow5tCS}<3si7cv(dM>f2=Lw{5Jp
z)E|_35|bTTU`9xYS=+jTFVfw&*FY-+zKH~R{-K9BZQlhkqu3aYAS0&i3$!DeA(0jL
zrNx{JNXv&#2LgYPJXP0pKkAr{`IF~VwXZnX*<~!r`$U)rnoj8sl_SiJ0fb(MWEj+m
zY{=Is{@H^!$DBP)(E_p@??~`LR@bxlLn~#P-D6Lhi#{~dGy!X6XDCMb$+0cA4r7GL
zrHND)jC!lDg+z&>r)N#ZfMY7jylTqF<1Xvb$cvtVw###=HaxV8WWpK+-HqPgj+H$s
zAB&2T8Fq670|rPEe8*}d`R%68bma(W#<cJ8uCaDIo1VW!Dvi_5+m%(`I}eT=nLc(4
zxkJ_rL94bx46+pll$Xh|QN1}2gLHd2sFK6Zli8E|W`uVb^xvk&pp(cu5*PLsxUWWD
z#b)G1?!0O^6-FaNBqAg+>D5-dmAzpA*=338k^)e|K$*o>Xa<$V<v|7X_p62uM=N02
z6HcUJtrDpCu<Y<>uCLu{F}>VZ=Zb9%vp0}Q7ANJOEvmp2ug716;Pg})>|Wwo_i#Uz
zrJf8}9zm3B%Sj)3qcAVyBPws%e{p5_qPI#mcoR!>i>Mym6_gL3s|xvCur-fP1gDI3
zRd5G1*>V749Uk^+Fom~>!S4l?CY|ibG3+g1J2#_#XG3pz$yxD!p#OVE_?q2Gh(`wk
zg0uL~{%>SwYx>{)e~ZV@X@e{F=S8XhOgit1i{HzQIj!rF&Lw+!WoTy2cE@$Qdx3%p
z*UCsrS5h|1rYY|WC_Y&tGBKxgZL57It0xl#7y<0xYTxi2(X2+Mze&9HOl=72{tB{r
zz1UfGA6e5MFPb~e)*-vg^N4RqQelfqat_OxI<XGNRb)G)l(T&^hD0E&ePGyCm>{=C
zm2n?nf}7U%HiWa@O!U{9#vS1srEa~wQAaVePH`McnjT1&8RRtkwCYR4gds*7iaO$X
zEb?!nH((<^M2ZnXdPR(?W5W0M0n*zhq<RgA55DYLIeQk@SxOzL0;`u9V38WAQb8N}
z%WvQt`emxoDh+UR>-BzXL>|PLckV$ZU+FAdsKuF?q0yQG_I_DwLN`E}QbV5cm1&a1
zxS85Uk<t3Qku}=yZPr=>{JX1D5Jv{?^;60_q)~1QpPbp+uT`orjIlb<I>nwX>LiJw
z!!)6Hm*%1F7>CRz8Y$#Qm4jOe<0z3lieYjWJ?{ZLPM=MX#wlL(_o-@s^cy91UYzZV
z+YnS!Cu!bo1<7y^uhA`}yBssx)Ms!@{61n!sDjwz2@eun6$M-!aeir!`$D^4jwb#I
z<1H?|16h}rUk`}&3#>_4pROw_|G-`&A_Y*rxDodd;as>P2FpK>(D*<ckQzom3Nne@
z-U=Kf+(V;>r+<(`Y)Nd~x*!x8IAe^A;;TEADaaB2)_t%@k5l(xt3<0-{&anQASWdB
zfY2R8ny%mO9J}!&xP1h1zuZC7Lz0_r-4C?;+DAtm3*F~qs8}4RkmeYo)N3+1G{S@-
zd+goGWUZS6(>suRsh3yy87%jHBdD?AX+`JFuHz>5Bj#Pb+BJ3`LWuU}7WdX(I^&#A
z?<Ot@itNoQ5rmA}^N;g$M#VQ|;gA0+>IHx1P6M^>sRsi<vVE&7`yW4pk<}UEi&@S}
zJ1h-WPcgu45!d$|p0=xS4*1KJ!FLvmO>M`<dD=`&k1@_}7CV2yCi9u>BhO5c<r2Gv
zO+X<lhUJqwt_*6$c*DAPt<^kg`$hJ0+x+#+0R`-#g+;$Fu85FCRSHyf`oJ70@CJ~y
zF<aUmL1N&*tC;LxV3=)^SdWI!@6nduYsZ%%@i6z>Vu3}JTIXE<?8ju7b@o>ed=ZRu
zEyjHQ27H}b1bsD__n{v18Fh)C;2(c|-FTlT#UnEW-fxQrIbWoas$^&{OtB;eAZ!2L
zJ^C?7!R$Z>6qXX1XA`u*4W*Gc81j_@c~YM6x*`Naq_sw^XN}BR@CR3DTcXd2F^&6E
zEJLbW{CS_!%HG>cDG*d%g<9Pa5vA+hxt)S`>>p?&3KTg)_FEwYTmL0(pa<<SYVf2=
z^YU2Q`1u4&16l;#ek<6|A_~KIG6^V4MVy8BS@PF{pS#cOkX@I9@DoM<?K*(}#j@hS
zNjmp#-2ml;j!495bqMu79|Y#98k`0cBsrm<I2#?mGr!kY9J-%%U+pp8%7Z45oxg^=
zY#h&t=i(or4$5OuC<6ozZsi9}#-i93mQxw~4?X<A&VTrPd+>r-Wm`n#z@ib>M^af^
zfjbyp<c3N-xkfZmtKR{FO%8BSB#lYRFA|WK^78#$<kIF*^9Og5Cqe8SR-b2jFW*}i
zdD_ld`E-2!0`cy_rohSk`hOfa5DAHAc?#lVc+?T7fm4M#sdlYTo@egLxWa9aGdUv5
z7LJ?jT7}FffD-KpKsW3bEe%FTStzHo9S007#KFD$alI@&>k9!1raxX&&n2XY4&Ev|
zJQ6m6TPVn<Wv>6o9Y*NH`lHf~w)A+PPAT?3$72z&+Cr>!RxQ<nq(q07)}hdi4gtLn
zYX5$>NGvSdX2I!B6a>eijd$X3vC;WPeOkcZ?$f`f*R76zMMeg`x8FL5D-{)>N>!=~
zOL>j7_UJjAQ&zX-Zi*Tt5&+k0;j8hCybN45K9Xr4mx2sEXj|4RQtMlO$b=Lc#4j|f
zWL;%Uz*X;2t!~@>rmy7-%!5Ij6qC)D$+mo*;JC36D|g$5yW{6qRn*_<Edq^^Z^BvK
z_*I)|GuaWo))-8HEsae`LLV=Y{6V)w5$~1GYJQp&NeRvv$5LQ?ty#sQfULPpqK<RB
z1;sE>^d!cuhMJ0<Lew^4CJnBtU!mX^><0DumQ6!V%A1VWvX-Z2QF?@o!epjdFg>3x
zvwxZv4cz()<F#bEVfq>36un>GnBS2piAqtWE@kj~v_${T-q8BCzf?tB1czW_mnD;$
zOhZcpWzC=3mn$Z~tU)m+7QQ2S;b;`DG%oa9^@$m=Q>Tl#Sfy4nY>Hi?-LN5Tj%$%E
zZ+L=~4AQoO>K%uYt;m*dS#`uz$^yrwm`9}U=Zi~jz@`;nx1uUkpYBc!?wTmPwEDY2
z$h@KA$Ui($YvW}=p4FrsJc3YB-Sq>H0RpGQagWkm-8`5Tp!9ABz^tJy@T7v0)9{4E
z&Zz7A1+cZJm3I}Us@|h^Y-EW3J<r0C)0|A@?5jkonUK1sJV3Pl{xPXx{}zYh#tMlo
zv6Z?{)qW&L$3%1wKvapihamDqlqH@51<-Z+3@zikZ^2hu{c(EFHSq?1KPPvyJ|o{{
zW6rp10*k6o<LrxrYGat%iiPZyv@hs4E<KtbjDQ8&(*uH)XVC_*eXapFvpyOqjs@Bi
zY;9MBg)wRtQ!v18f2XC1x#+x9YNIxix%c_l4fVRKxkci}13$0S^NQbc)uqj*2$vil
zdafCs5#sq6Lfawk*cRrp;VH_%#o^4e>~#@lZFxQf3X3q(($?E^9*k2+2{_@GfoDyS
z5=6Fe^+u>qnE#G)t#N6W-lu`ze;b6LOW+9P`D{q$h-ljR0g8<>&rjak;^O4rv9vOy
zc%@(GYqjDMoV*Iyx_Z{P$y+JmtF!tDAH?ehv{c_T9h@H7%-{6Q)%j|dnUKk?IC-2C
zxmBJ<=u3s(Q|$*u(8$!mBSEJFYaCvCyc8;curDP(!dW{{gdk0JPtjlLty}kAt=Bb2
zC@YDPr(aLc$tAh(l{81Lu~m}gu9r;B5~lxFm&~ULjhnM{7)JI$;3H{O-1O4dodld<
z91QJCXg`U8RT1o3yiYk&(WzpwT7^4Kdyq%)FQG+!B&%xR5f_o2OlYU8pe*uNx4hX@
z;fv#-7~b^Muv%Umx4cwv<2*t5fC`-9fBN-e>61fNfO5$TK+5K8ugFnHSVa0*8ZeQV
zSgWaY{8iQ?B|nmn+=^fQ6lp%8tZqtG8xzI(ZXj;`HoT`ruc3wL4r6S&|8TY7kE7I*
zu9*k3GwmCG?r}jCb}sN@3=c598<L(^1Oqh?+E#ydXuDzkGfGzI-7Dc2VYguiOLat`
zZ&VD_3GXBWwD5NXf+8nMZAt^Vw1cTSu{XIU5sEj_e$cq9CaP(Ah{U`U_Uld*gE9?P
z71m9UVUiR%^zToE5J&Q;#&Ltp`HmyR=57W`t{fsq%u#$~ur>u_2@xFe$YZML=E@Wv
zF7K5En&T*2@Uj3NnwCUB<^(PZu%gyXkE^}{QsK`M8quY!Zz}>Wg<l6kQ~*x`LR3;l
zDK!sD3kqNpXGuIPlU)xRJ61puhzC9hJ2xXhq3)r8yEewYBg(|pE%kLpnY=|MX*1Pa
z4)Tl98P_GusLsoQ^ZPOfPHtPr`QtzVykKN`W64F60iwa0Rw~E6L3$`Xdd?XFJ#FwB
zDo0txkB0}+L;r1p6!q5~#V&ZF?9IK88-?5uuYl_^uIopREp3M{&*7P+ATm>UD9`?i
z1KPac4aEKckml_r@C`ow>FZFD-q&?!f14YVE_?363-Rw2v;&N%_nVo{?K7{NgYsOD
z%^tPK5joZ`Y%Tnv#k_kb-z!KrY`D(!oqoIR(eKm4>Wdt=og8OAZgDTYHcU;-6pO>F
zm1_(wEs_gjYq(dlk(E@+R}si1^t<36X)AwmXO~ierAliZ$K0_92)G-;2a`YC&eQc&
ztZP{Jz18lSUjlUudlzW_p|Z=xW2sF^c-7C$+IX)CvD{YB@R1?f5z5Ldefxo^UrsF2
z(7xTClw;(Jv^ALr4wx8JO4i`gP=hHcbIDU<lhyhJg8iY8Lwz2G{SqpXp@*hoZQ%m^
z<qS<6bn{l@sft`=8i=6WW0A=KuQw$BJNg54)-*<o{rZm`e6K+|_n7UnBnPz<rSPs6
z<q&3p7n68EOL-Y|>(1sa_oka&uf{;{JpV6KmBiG0CvYko4hUaxc!x#f7VA~vvcuxg
z;mzM$XyO_#sFHn-5Hwxj<9@qtadO{lqbsG^3Y=bM-S87_U9teSS;E436zk3uWsKye
zZI85HOmv;-*rsSz3FwvT5#BY;qF@VArFWP_zW2`5v0^A+p#n{=yes#75rTvVL*oq#
z3a3S<*#ujyORbMh8d@ff^$^ie<^8{<QtPa#WU*o(2kENCO<Ji*{JSe*m2~E}PR%sX
zR%|s<!3@ZKU@!UmehbL0$D`MTRjOccTGEWn39-yaSfGVxw#*%jiw-tIda9{en#i%o
zHp&cg#C<_;KOmsShSy9lCP!FUs^ZP;NpO*;0X+y~H*42`al{hn8G6~OQBv@EKebW*
z)(ouADunvXHIM&jA;~jNwoTlxe;1dqjFLxzOLduhpPI*}r)MiJYBOieWB(1&ft1G#
z9wPmb1ii))N!jI0N=M{@894~BmF^08t3n$cB>&2j!AWB9Xk)>FoGQDq!Tbt7FdDx<
z^I9%kSR=CZ*}$$>#ZVD%RJS^grmaABCYOr%kqg<d(o|)R-V{S-8)Q6~8wwT^fqo(P
zn1cLzD1NRhDR#w#jsXyX2OLpF3;H_q<sp$ZutoLKnl`+6n%-P&E(*)mOfz467JDoV
zT0WF(Izy5Hj*O$^IYuK3OHvsse~BKBw>*4fQz;dJ|5`J~wk+6uu(<M%CtLmkw>JXL
zc}-WNDr@3kq$5|?3r`KBsj70_mj$oR{%qVzw`@JAP&G1Mw#HzW92%pO#oiYIXXt-c
z)c)zKl*l*Uq!Rp1uM4$`o}zQT#X`V_@%(<HUF=MBu{QBf-G`>0rNZKO5yO2$nu}Cp
z=VcjS4#XDloxh_}qLuwNY0?qpcQqyNadX>qH5FIe-c~I|`oOKZ-##{f>SV%lS{6!o
z{D+94?hHo`_QiO+=od{^*#~x@2R0~PHE0(S<%Y}H?eRU=zcIynqG72gkrJPF`>k^2
z=gxom?!(=uT>N~dGHD8RQ({z2Ir(QqX9aE|`&xds0g_oEuUmYFJEL%4G&%QBWaTJr
zbqH|-qb!^8%wAR>YAIsiAPt^2c*K-h1N!%{VAqvVl|2TSJs|YVw1{%JDzsc@$&_dd
z6_qi(FKuQFmt~bp@k)c12T_4INS$*ATR6lkX*ll6g@z~GBaKzEDb)6RuG7%eXA#8y
zy2Q4Y>;&Rj{Y>AffAbG0YdHCigEzUs;Tfw5gSCRCJ8j?JV4vpPPRTW|Azp9dG2hK6
zjo5HDO1cPx?&p#sHFjeGn>C+r%0Ub42UzXo*ttE(KjeRjZHPZ#4#cEGywEib=Nh+@
zFhl;<{$u$jWIBSs+ylq#lZAHKJB^{a^M={_*K_oXn=%}#)p-XeVCr)n%<X5u1H&d%
z2<3wp?=&}A&}bEDvW;`rlL;%SWY!8Q&8cHz5l>K=%LUQrcU!)Kl79xk`3Zd!nThlp
zt)2_iq`-&kg0PB}UgS4$_TEr>c64ZjopYkn*1N!E{9<Vi7$a0-uo_fTp+9VnJXLks
z8qP92DqkX;dPn{!TyN+zABki89U;mDV^y$o6%EI79luOi40ld$Jrrj!mw8(VL+7D^
z=fGD;FakDu<48ooB<8t3Z0^#|u*1CHA}hzkTF*v0r)hXDB!$N}3NdBNo0hjo#IWGK
z?^!{w$I=&Ot{7`J<qjEAS#{Z2a*stHz-=2e<FSYU#+XwAdJr<5X#|e!H$1m9eCAQN
zV?wWo6@FTKYDjt73RifA1QT}zY}1ki?4j{g#vmxMT9pX&^to9&PqkHsGM2aCBd&<R
zY0!J~)4-@#8x{O<-nv2g{ujK|WPq|;jLbGJ&~{E#!QR3b!5=i~=)f7A&5xzRl5woo
zip~)GEfsC@zVrLt2xJZAf|-f(PZ5&<1MRiBrW`0seG{!kd)DBufRmVfto&=Tc;p5O
z^$I~6V7yp$Zjsp!Riz4UNA_8m==<|Z4@S*n2k$0LTW_MS<2YMn)+qI1$zv*`vXGW^
z<=pu2A}|xa*#N&vi?Tjg7p~dviP2f22L-qTw)$$~i6S-yB)cW}BfYG1&-xEXdy9rK
zm;sp&%?Cg_d^a@>E^R@KXVEq=1D`z7ib|E;I5Rg>&o+O!N@UK(Tk#8kH0fM2V1Kfx
zy^B6esDN<UgMdRE)z9v+JlJHC#b(6pK&ZLAzV5A(S6f+;wPXd^+XzU-b7P*(%E5di
zNc9(xM>NBI5kqH^K>$J3Fj)AHOvS#;j<#|poVSH6k5-1Av3^ndW`rA^QiCsxBPH$B
z{BcP4fZ)XNrRNv$N5(9FINHNkn9s@vfWzZWTCl98Asq^+QkJ%gj6*}TeaHsJc-i@$
zgb;6r#|M;}XqphBg#4si3Baw$7PGz2SsDN1<A8tUVRB0u`ijK*SHpqSSnN~lSz5!5
zvUs?-LdPGGcS?9=f20Mv<*SqfO1L38&dQpY;LVAKyFa?v*SN+=w6zdV8UM{nrrh1N
zf<qK{j*6_BS=|BWY{*?caEP1-eshs_mkXQI6VUnR+MWX=)|#?LrR)!R86L%=xK79|
zAirn;=oFWHduaA^q*s60mXUM2Fe4OS5olD)L~^rkWfUJ{Zhg-C((e@Dd(pWZVk7`L
z;-6U?DUl5k7IXV~_`YmGae9m)0<|KjWwUj9Qgg8cycG@<O=D!f0J!?16bi$WC8+K0
zqk9eogJ|fz)TbyWAZe%KQh0cG)5d9gf!kD9n~N6?r41{hlLbLV#SSIIY3fZO_Gj9B
zF>;e8hV#~~&5!O#$0d;Q6V<E;)UMCWRPc<YBfxE3aty3H8OJO!pwtWTTa<8EFxFx_
zH=?rz#$#D)h0aZ5I{l#2KQMAe9@a~K;F-ezFi?mdRF4>qNt2A88n_m7S~s~+yq_w<
z*rcz4M1$;))LlwxJ4Gc#bZJ%@rL4|q52i<?qCR}?Q7PTil?>V18M-^CjF0)$I4iX8
zHX{pVe{y~|mU25_Ix+#Atm<UJ%dImerc<JRp)b+xfhu4BDFbR!rTkXgWC1%rlK)(7
z&hy{Z@Q93`Vu>DDRM{;BuT~ciIP*V^wMcoVG^gAyM)}o(B5n;UwR44_8gBeG9c;+v
zSMK_!(mrh$-vPX@=P??0X(40(`yW2XrCS$GnDH7Wc>N2A(9{W3xSco59us0!W2)Xb
zZI3z0T}v$w%@cNUpvCHw>_Ze2)I|;0PFo7=w#icJd9#CtAa$})qw{H<IqYoPGldH0
z3b)ay;|?$b)(uMZ3xbQhq)b4%8k|0r2y?xR;Uq4ltsX{6A!tj$Y|)MGprqWjsgfQB
z>a$YMwV_fp>ghmYf3C>o7)e}n2}WB|Fs;4a@ox5AR3CP=?S6mR&&D6#Jfnn8ACG(h
zDTIdzECCZ*MA(_*%b0$d--#-6X;Ex0+O%1uczyj8dO{QJG~`R1IiO(0lTQ0!XXg>a
zNJD!I0dCDugXtNn_$&jcfsThT`ph5Ndf@`@B3aUIK>OZMqaKp~lIV&jAWkrdgG7)*
z{8B5_?MQ9%0yzaXIz_3E_$|Mgv+Pw2EQH}b9K<tb9_5b;1}*0l{-_E4_&>0)3#$G5
z!}u>2dS)iQiN9PHH$*2n$`J}G<X6)hT}fRO2kx+H&*M9-)1Bt@lGtUmtRNIaDy+8T
z!Hg2<!JI_o!85(Ka~IBFJ4SW$NuQLCN@~HHVCNx@Isw%jQ_jF9It8KA&ZKr;;kAc0
zfVq^-7VBE-#m65}wQs=xKJ(9BQmd-V0s+a30{<6!+uF{^n$BEB85#(5C#ghTSE^jy
z#T^C+80_?4jOhQjOKl&geU79bKfVw;trk!Xp*}*)V^Sy4K1prDJ_9D^_IBDlMxs|t
zBc;@wV9&;#uMX0+SJbhYO`WABh0gJz^Y4nKEz6cgrqM9FF~T#?sunwb8jyMKpYKNr
z3zpe2W5IEIQ5~I|q=cKVAWh)2;QoOJjT~p3u;_$<1V)oZzv3n?AVSrh*7C{I=-_`*
z7!rv-j=~7#+r0o1p7Ler_7|Z>mX)C=5G1BZj{X5tV_WXzzh+UjAcmbo_o>vQY&ubi
z<lO4^_Rz$FGz+BLEDQmwVE0Q{1-pRaLw%o`DtKpB&ylXbkj)v>AUnCC0aw7ia#KKW
zXoB^I__1+$xw+?f(E*HQ*KdH)z%zCDvL2{Z_;~zY4<~Pl8NYsV8>Ess`Eb0B!{t`*
zxEc+Cv}!Sy6%g*n594Yb9XV$vRTq~}(W?U7@bxRCNnP4LAev@S46`;(4?Z<RV>rOB
z&5Cn2YsQ@Tc^{OS@dRq=4%}GHGA`iB%cpSr{O?A-RvqF(PJp6L0aZSHSF(@VfXulz
z=8sMX2Px=Hn9VQz#}L3fCcend@LnJ*=H0Qj1T&Ph6|fMq9Ue~xU)!D_I~EKAo-#Ct
zwkmQLJwhKON0JxhIS^FN*tA-~tk42n<Agw1!gYv1LK6vz^s}y1=E3-%AfUD~tNJ%U
z(xy8hv&SfL(wfK<?>~>ZM}a?UGXkhzthg`3ydAuR$>9RA4=`w60(M93@1Nc4egsO#
zgkMF;(e$0gC0$;6!v^DoqKyEaMkc`?0xXn4$^-CIn|T7q387|v4nH-00tir}fCyWo
zPQyTSD(YAyYv2h2rS$A%x`2y*NZLWW)5$Wlmi}!h<f0XMJvIm^DXPH6KCPN^rKlsX
zMs_lPgY@VSzEEVbzl42$_*a;Jx)-hL89?dG=T(i5fkA_*5VekbuK46-NtckU1|b4)
zAxlNfxx#x2ed}YL!Il}fSVuVX0LCVUMJIM#F)V~f{|bT_3(2<#tJszgH6qOqa^(3$
zko=vGAx;dC_{YiGZTbE9kCbC&R*fV>UUYXGwXEcIm|rxw19@1*){eI=1BDRH9W>61
zshc>no4aWqq>Bpz66oy7Yf}gZY0Px!&nt8D%)MU2wajSzc!MC1eanXFVP(wFHOIv>
z6}?#NTH!(%xiwnNbyHmDLf6~_(X9(VD#E569p;8`F*eNGj=zm)4x|W%1@fI<9t6##
z?d*JtVmuF#W@KYuvMmJqs}7FLvbWBa+%1O>-mN$`Ks$7Hj|1Yp@~kr4z|Obnq&{+b
zyk-5Y!U$A*=@iiEbMQWGx0~v;Q4%84YQ?!1ohV0>&iUNj^P26Au_~465nL7b5$_@4
zv-5PTvA+k*%A=}>vs=`TVxY<x{kJ8r>hOs4VT_?tAmh|*I@aWc<Xs>?^jcVbyWt3t
z#|2(?HS5tux!*3hgV`%Lc`r#DCa!GHTlOn@QGvL2iBv{ugW4hh$l!~@;vqw0o{8E9
z7&Y|?%*w+dYJ9oAIn}-<4JJN5C5BUi9Y-Ml{&TJ2m2?`d<xani2d$UMhWa!ZBJ@B*
zwiH}A5->S*H|0#(>L4e85AKJTkFL9E@s(Sk_tFCMiad?qG4A@bA%Y9IZGYT#7T%wo
zv*(fI^6$gka(*hE>sIY#w_{uAQ_PN3ajHyEQ^9eRrAk3aErh%k-*>+jZgEtvP+#Kz
zE>{KDiTNDGR(y8QouSqO;`1T8I-dn*ne{~yuu!Suxxj`cr{W|+GlfVW3~cvSZ+`VO
zVFGc$M<qF45Hp~&tk!T!&eS6P*(8d18g2h@km_9EaZ7#}VMBtr2yG!q(c#Ugw`}G|
z5GOnV7v|>*?4K;KyNDU=5>8LMVwi5qVKDRRi+`3)U&vv==e&bYN9$wp(`6@zdU)ti
zc=lftW}nVs=yXQ*`Cb=#P$Sajh*WW~Tqe^NSvdD54gw#yL?z3IqFUO)o_%<GhVDc?
zd@zH;;0J&R9-Igg*h9rz3X$6iLTw@Xx`x%&?A?^DN`8>9G9TEIL(+}HQEzEXLe1yo
zUK2YJnpxpHL~&yKr9Fteb!K~Iw8lHpSD`sxoBRcltv7Kr?5s;)jmWs|<s<hKbQTB<
zjDX|fl%g_8lhusTW5`B6QX8rG*;uyd9pNhLHRPz#Ye4zx&HDtrj{C0h9x_*4;(dp5
zj5&E-m^FQ<m0l~%tFo|>T2%QUz3S*UOg~E=xCIQiZjfi}z=tM(1h%vWvFepHC2i?{
zTu86Mwf4?rcJ@6lYCNv7FS(&Ytl@4LgQ2Fbs|t%L44=Jr-<54H^<JKL$9KP#aj2B5
zT5+_`rksmGKxjZqnUXdRf{5042SN4S+QJATO>B-OO?b#Da@I+BHbFm#(eAQvF9}5g
zXL?<<fC-G7Ka(_h=N6~VIxbz~AO0zK{UM+iNH&b`@{x6~A63%#eSVYh2@U(QZOb0u
z_XzL@?};$`QnJi&@4}-weW&I5qmv)HlrO8S@S5)B3%1BY$HjXP#Z{Y776RvxP22T1
z!@wX2-O?0=nh7%YMdS;V=L0=NGLK0^B8rt42FFxDJoIF?UQyX2m=h+bU+?7PY^L&1
z4;sF9jsPD@k%SBsi72KP4sv7(Ow;NRQOLBUK1dGyi|WY!oUZLbZSTn~;^oc7zH{h9
zn+)$5_{-qW0{Q#l^}V7pWFg;eTXUJ~=t~jwOQ%?eB(8O4CUoogN`Zp|zd{U53_Dxy
zhNNtZRk<g-W$?0Uk^f6;(a!C%+rt~rzbv-u5}4@08`uUr*m}NKq4Jc71dD-=KfWK!
za2G<JuVRWN^rQmiq|FKT;|{Cy)sBj>0#-J1GG^`A=1Xd^$H)a-e%UCphRBJM`0asm
zTYXT;xNm*<%&BFOm5Vle4&>~gpy9+NQAyPKrV8Bf3atBe8oZ(h9Gejsi}Y%b=ryIV
z<p?%%Iv*k_ESfG%?$jfBT}4=$d*i76BF?NijhIQo`Us<+{28oCYXlhrtVO7YAsg@w
zaOkwI*D<Leq5ab#Jd85F)N^-(nc+ZEpJI-U?pp%|9){q4YB+*1s%)-SaNI1k<xi1@
ztj!3DU_g5(U%bbuX5np2&ZHEO)B-EM`^2yPdjHG{MNZi0{7~p<vtt4YXYN45JElrc
z=IU}`;wCg8(yF#-P6*>cQvtZSw7pfDa%JGCJB5MzG&a+T)OMz_RwGC@6V`A$r`RjL
zaLsxej~Qzk%7W}$e)1!5xvm*tF`ZC#NpR_RYfi!@{4+@17VO8Hy|CZ*mC=igdw4rn
zuwx;=7R-gXZt*kB|0rkxHg7;;BCsM;Y-s%cvR3Q@{7*`^SX7TvLL0UTDI<;j#gM-R
zBB#pkHWBiUaSg#HQO|UoFjfZrH0s?C13XtODdPtMR@a|4pO|JVLClYl1&Q!=3V?m=
zC0k&UJ)UiAZ`w|lV{<tTd(7Y?vWe@ZW37gS)g8iYw)d9g^DgCi$SEN#*f_%Z@Q&7Q
z4WP3?tUWGFLt@Ic1a$I8Sv*8GXAn;$jP^}IkAU79&gq}hOk**q8`$&|_j`;FJtSQ<
zXtMyO7&NzR;eaT@et!Gkk)5dHXMN+1maJ}aLAkYQw}w)fb+_K>>_S|f@Ci7emXMq9
z#W%YcRUTvgI=y-jl-gJrNBWLag%(*}g^E$5jl(S^YL30QNlB{RYaEKZjQz$-utHGo
z!|7wd#wK*syxr+;QJsH&9a&I$je{DCrrVr#fM1L1z;s!42ZOKvp$&gY?bRKgNg1zk
zgip9HMY)p%cA58496GSA!f8(-R-K60z%;BWOP%pIb$wo-{jM;M;I7<OUO!@+LZU7+
z8y;#WSiIV-{OVbj93T&pCv-s4MWW_3jN~h9&Z=>{dfDnHk=&d>yr^8KR?y)Vr)hRr
z>Yhdn8XI1xAX5Dm0o<-7ut_CMM`UX!XloX(aHx1l)1WAjJ;$7vlHH~vu-Sdx=l9!)
z<#LBz4y%mOQ48VZP=Y#k4BX5pAgwvEiqroZ&EFP+;K{AH7FLjZM|9aCQK!o~U5`!J
za}7$3*7XiY+pw_9_*e){=$r$Ppx}GP)WxFY(5O!+`{KUAJ$;tXqJF-TV@m13re0{*
zZD$hRD2NoXeq%5z-U=pu+R8$86iAGa*Q_-><k*ev4tzPKkG(H&y;GCm7YvKnRxh3*
zDT=sy&=(3zud!bv(M~@>$Aa6UgywNyphDv%W=T*|z^W=`SU>|;gY?GIUQQ-lwMpy;
zF5U-6WjkR{&E14g0kc1ieLbb0?jp6R5gUm%FZmChM@yr)^J=2t@Pm%#zPc1zg?V{A
z6pJQT4&u<h=B0FKd1`}0>UHd}anLiok=ahRC)uSyX?<9^e?>0ZmhZH^N@WRVwii<t
zGB#i+blh~`696l@onnyv8)TkNS(4}ZC1jskXuz~!p6Jw6)h@?QOs-Rrkk^WebWVs6
zb#tf*d>aVuyRYqSIK=oJ=anpj`xvyU)O8@H$jv*f+h7DUI|pwiM-TwkrSO&!%i&?k
zqo-?IlDJMWKf~6;A#zyV6C^bhnayo|kQhLFlHKWkcuD_Q%j@poi|)C^ww>#_)_x&3
zhNfaSwa#amYdbR}b}*SN`4+&)!{Vv-4#v?kDLJ2WU}{UJtx6?|_kE^>DBpqsxuh~a
zd!S~JA3*(f*25pl;zo)ets6!-tw$M4S2rT$R*oW`(cR!^G19Y~C>4p<N7Qkcgn#gB
z2Zl@!1<|b4yX?5eJ8sI`2`@ep_1)e4q<Xl~fD1Ma=H8$F_bMF?RThwnPtuE^50fhQ
zpVL7ES$Fts4Re2ej<(2|4(7K36Vs<;W)jh@fASynUj>lvzHQ7p=YZbS6V)~6Gu0~#
zw?CvqYt3hxofA20DW!60>*dZ-SyFirgX3i8#^I>#ynX{?KNND)q6_2MIEY8mB7m@&
zHyBxfZnLE``r>=Q4S_%^c=wnZ6hjEmM;NS9;xskbxJ`rYu9GfdO?}bq{_EE%voSTf
zJBj@xrZ0wf2vM*267oUgPW!&Mif@M?<@0CoO|O5~Bj(Oqz^Cj-;>ESB+8vRX-i0Ny
z@W(*s^uJ&br36Sl)^wIS2~YHIob(~_x3*`+wBfKb52T?C#dKF_pwtRrF{AmGD%qdk
zbs{ED_e`hMqhtX^4lX#OUIUW9GhIkgq4^M;z&*pD;eF?#D5N2{>~TJ6@qPNxxe<Sj
zd#nYQ5n-T@@eDDh!X}7Ah%Sq;5r26+lmrwdJev!Ak^b_Rm7&4FI_y^W7K}o(0@B=p
zsK4@e2+#<D3McJ|sT}I+AlkOcF_a0JC7BEgw*Ys@@Q`Ub((RGFv^v*sRKZomPnqa7
zE?v3lMgALw5r*jU@Rlt>pn-Hm4=0(TdJna>Zwuc*b}@t9ckUW9anD{foJ7DV=Wa8K
z0!~2ZQtg**Cfb1>xl=oOITeA@CbgAe0*Y3hTOezT2-z|q8_OrYJ>v1tc2xdoC0)A&
zJUbUp?<8{TQZ2LC8#IhL+}>X^YX2moqPRdBi2byUae*rmp%#FIBtIvR$O0qbX@OMY
z54OWE>n;0Bf+=jZ1}Sj};-fj6WSue(H6C`}>X!Q~hgfVd!wu!i{$gA^Y|NNE^DC>8
zB=vkKwQ78@2M^sQ;<}#+v&#f*Cl6JPmnWWBQ<HHsLv@ZM4idytD&h-r_Ast6*4^T6
z0Wm=}8sDfN4)3M5-NuhRWo(L`r1cmkqFPnvwgS4%@H~7~`Xz@Tma^V5$j~|$ALh<4
z$>^%mNSz5%kIRSFWo%wTDf*gD--T5Gl2Mddm~pwsS$~2=BAH!5cL1*ZA#EG?oDVFj
zBO9^p+z_1Bp*?J=slB|pbWRP@KVk(X-F?<)kCRz<chsDC`{@aE;}<S7RU@+?jQ_pM
z#3@kdI|R%azejTa#{+pJu)~h?<(l|+bSFV?rU<-_lO#XcKL(K@R5(~3vGXrbphhXe
zzZ*?h771rueM}#l&zStLk!U~>0Zu^tVfRR&v2bW@V%>MZ;*fm&FGBoyUo2mI-I5Ib
zP86|3#fbA8G6;Uuc_v`8E9?Bf1EQ#}wbJjPSPbcC<ZSmss&|cwD+>1)*fOSxmiKc5
zvij!Dz~HGH5n0wI?IUtMqQ9ZED*Bpu$gRlWjrh_A(q}&g{aKnovV&Q=eMBe+;|r~a
zB`8tJLT1TN#VYQB^D5()4*np9yVNgIOpFG@o*z3?6SA6x=fiEzc>g;KeLCWIu<RV~
z0yj3ro;b8lk~lF6oYTM)e!q_u&Fe5liY%{hE=rEVCQMozLRjijDS}16auMTO9%Jfm
z9RBg(8<|QG4t6<HN-1+cj8_poC^DNht~!!m*qP^hp`2#3tG|<-r=qY6LpTv?)sh9u
z%=^bJo4ea%$zI`r1G~o=jhx4?JLs!h%7;cnbbHY^j$%mnkh^BP(|O+oZ^g7$Pz)Ta
zxBuwU!G!?qL3=cCs@Ijjt`J(|<C#JD)nCC|pI=*f=I`TcCxmpY6A6mBiM8LGvT0=m
zv@l3RI+k6=xBvN#5A999kk%615}ov~S_qh!s@q{i&nIBPb2;9`VYk+D1dO>dT;lN5
zVE~r!<(sqhU9~VtQ3TWEj$faPZE6OTW{og{iW?zhU0cIUa!6zs?6z&mIfdi)!Co<N
z<_F(8ZxkikB*S*0w*&c5Zpdw~Jz8S)ju^bJZ4pyEfP;cK@ICKbZH*xclVmBkq-Mt8
zlM0J3ipP|SfQ&d;jRzGl#eGT-l0Bx*IT48y4UasbsS~|cq8q<`$ucRf_x$ZcWKstj
z)BSV*GD@0>bQhJA4a>1mes2!)j(0n^c+Dz|C&2J#OzP|<WbgRlFT3Q)**S&6qQ~JU
z444!>Fg5=WOIkt1GZ(%I*iK{@p+{)nz27qV`ib5H4}Z<oN}kx}<wI{nmp5R<6Uh;6
zWzhOQ2M!(ZgGtFpwVB1*3ap9__~UPi1;0twYd99EMQ`1G&AG<J2^@pfrDOWZ7=(c;
zpe5$+^fNq-2zdJ}SsY9C^$UR$6NT0xkndLMu6YeqXVjzF3mHyt^uwancVw||jOt<W
zPR@ktTTjxL=0S?~0%u-GcMPf${I@Omh%k+&=okN-SgGHtpAu|ZAki^e3J7Jy(2I5J
zLMCG#jW7EZ*4r61Tg8EcCTZ<khiTv08{z4$BYZ&jYz+vY;)~g^RPG3v@BT?z838dG
zcDt|bs!KL}!bWO9GNuIs?|MdCn*>6pBkAED$yI{gP#k#?wH$8iAN@e<{VV;~slUxO
zqgk^LnECb4tLe_nazBNd01iwFgC81YWw0vi?>_AtyGKFT9uWvH%g<&c_C^1CJ(;XQ
z$ZV`Q#Noq0Ap?I3(^9F~vHPRmm5-Mb_GrV+&pQf-tO^(rfv95a0dX#eXhQtBx;F~+
z+TD|j4Xr<EyEqWq8n^^iY|lrA@ATu;%)TJy$_bf43az7CshKMt@7Jq~oRp=8VzD{~
z7Co`mVpS}uO?RBTGRm;m-v-VX`9#%)?i|9{2QZrNBJ12^qiW}O?*TlNjWHa}+Q?<f
z%whp9l4fr%V54A4Dn4`qt0AnS-rn_XBCVu(8h0Y^B_Z6dTwO?8LjR+zmuHsv3=v_d
zU@hanr(VP#b+G8gJkiG(W8a5W$pa(EOe<jLu#qCQf8{`eIk>y7Uuyfnz*;lyKFIm;
z>kWjtEZCH-vMy;_MR8fnCul9!Q5$7G%-mMH)P*I8%B!JGjBEA)ZkU0L6a#^f$|H?a
z^&kfB!Kz$AhYqCX@B;#Fnq}rI8dD^91RX}JzYOpS^7<e9p%^`=g7YuL0FO1y+v(~3
zKyT*b{_@c5Sf)_XhlioS_X-}+Wi#|Z`LaaB&}~azc_DZ#U0{aEJ`?y_3T2qvDGHzA
z(WKd=$V|ufegE(R=)otr9gLOLz*CnL_UapmgYFoMhlnbq#?uTSj69WOXZqP|S1dTI
zlJo>A6kW|rp=Y=7ZpY3;un0IPmY)WzydAEDFCNhSmxj?$^FR&vrTIsL<+*3(;^qB>
z77%mUk+SUmz48jp$xCPOgSM*J$-re(+E6+#fVdthy6xtGeY6DWdh51%e1uT8EMWA2
zCT-&jG!1Y9)87yWz|Z^{a(kPuPWkVHPO4oufmhxj5_~|l1v%iBrY06Wy7=;KX1X3h
zk^A4>skAtD%sX)bk|H3n{5EufV<h!YfTrIT@YO)za`5Na60t-)1M)ANv*r!4)6hVj
zsKE-$3A!w&W+e2Zu-w%ujYluw06t2b1EM2!Rt%v9%i&TjQ^AXR^ZWoEZ&_MiwMfx6
z2JN^%#gnMM4x$=jZwV$nr`;VAo_><CfR8Y-=HFsxJT1%o)4i1%Y{5@|1Cd;^T<~cZ
z*{0-}bTds91-=LN#ZpIHZ6SbXS1w25g&|373xy;E2jl}qOP52Twa~n8{U$$iu=pjp
zO?z%SYi1VhO{T|=4<>jducO@~RKF;UE^!e}7E}$}04n35O#{`WzsQ2^J4i3v7L*~)
z0$nv=zFYD4*je#TLRH|yV448SHdNKfR*{%)2a3$BT?Y0^u<d5OpI_Jb5@S#R$~y8s
zxrRF{y@6<7sxD^yljvSS()U}<pyoAPXubMp%@<Mg@VL#>GU9dY7(Jf`j0)wNy2@;g
z@nwFBnrY3oFpmeFuiNMS(@s@0?eqlX3uizw&Y0Ka@5VDR3kVS;kg)IH@jhTs3;YiO
z5}k2gvsfSBurmbiblBtGz);w#I6eUy_6yJ(bCjbsIOM64Nq6vIAA1Chk!?ty$AL^7
zj8Q1+*R;lPX%Ayf>;X-HV`V@QZ^uyUP^l^-hOLK8K%)Kkerl(+RzT0eII;tDOT&gY
zok6!ml8nt=+4Ov+C&p4wBpNuYeb$cIt3mWqI&ZXUi|~>|-)aBFf?dDUHYa=aRclme
z!;IC#PQecsYaGOJua^vjYb`Q=bsl+RLw=IkY4vM(Wo7~iAa`x}(nE2&|D2jG=37bg
z7TqjuT%*p<(P8uaZ-5lcciYSHV^>-iFJ~8Df>HFa2Q!+teiBsd71o^bKLJ@V>KvYf
zulw=_m-{hi!gMRpFqm$G`sVt_#1BUI`PLi0EBZDaw=LuHdJVF?gA%bVT;xYJtNIk9
zA@-(-sc7S4!w6=qNWU%Z!Q_{3@NCWTF+)gg*7NO0-3PiFuki9B8>r|_g{HIrG#8Pn
zMu;K_fqIt_wuvY7;3)Ch7@KLl5(CPSs`KLd>fGL(WL!()&jRw|fvgoeYYC-z;YXNf
zJ)UTB*fSD`Ko=uaoNw=I&fFwB1^h2Rj$ah_L1KaFh<$Mw2BvwRm#Bw~;tnThsAIJU
zBaeGvdgr0UgLZeG{#A6ws=I{I(K#qWpOFZe#%IYvZ-{3BhP=Ys5~_;9wLyC=c<MJB
z<iiv&y<d-FL)LS^uAMloK_l?jf0Fwd1&^Va?DO|p8MF9rdE`IL)d`9F37Gfqtpx>{
zXxIiCwkGDOAi+VG1WE>rEKF2aXb+uuhWma}xvzm8ExrrS40%T49AU6K%rn`IA{v8~
zQtuN`6{#nL2`l+x3*KlfM0v)=K-dyHGOBp3gN|h!sX2VoI)imEP-_;oAa_q$i^4oZ
z3V?%5Up006m!OS}CQg`!YhWZRcfi%BYF8?`+kJ?jPA2>P9f*zP?N{C(EBA;}lp0`$
z5yDr)r`kQ6;q8vAg+NkjyS;(TN86y|f<Lr<VzXFF-(lK#TaHdnzt1f#o8NqTJ+GR4
zn7k$8(VHTYU$V1ZsybRy)v=zO0@;qcMy=)q-=OIX*X}tE=x3dQPaE{XMCAMek^;~$
z+!sL5)gnhRXN9X9pBwO@puJ7c)7JFhkaa}&S}6qD;WKA-p-?+xjYPs(Eu|w73`*NS
zsmuS8dxIhG+QoM~I(O5jAF2R3Ai54AfuW35n(OR^)Y561?w+Su8}i|~(9(dc)HAG|
zYVTq?7_t2b{)JxKECL^)5<=t)G<3ec_W&w=kQOu5=g6Cal3h2KgTO-+2X=>-q^KYX
zah`&}t2MF#R=}&p2FCM<TZ!Q)9WPt<bai10;?ljrRDz`kSF!yBPP(clJL$RQ9Q}yT
za8N}{_b3lk;bE@Y8{}HlwXqu?^BscGk3K|iX^FtNxNbRRLYbR#*El9-!YN#&Ocf(`
z#Da$tR(-qVG>m1L`YTy|cnNSOco$YtnJB?Qz{w{x8@-<KyZ$WL_@@~0jIA25myKU3
zHvRA@R#H}!W#zzRbjD0AYD@ofc}7f3f`nrkD9Wj56$)vPDud(!GinhQLhgB*+#j^W
zG6x8CZNt?Awj+p`V8ME(xzZ|2E5hWijc=-rv;@P`3BLAsN{(L75qH*n>FE^-ZuVgC
z%Ij|@x`Lg~oMK+sWTBpG#I=Dm?MIO;cV1Pt-&ZJ55zjFLKIVcBC@8jLxtSk6&K-Xb
zcct^Bs9PDXPkWMOOE=4-#6=DLhJ9R^yZK_?j~T)R>NxSOd&2q4zfrpCv@=EvR@v!%
zqt6;(m%r)M`6!$QCdPaaSYg<4KfFdt(W1}3OJZl76UuEWP?IR6Q+G7RM|>4!{ZGg$
z3nTH~8N-3OD0F+waHs)$KW98v5O&2|M&b~m3d8UewXJa#t47x6-OqKK;9m-3Sx_+h
zOo&V>e#4!LTbYU4r@^Gz2p0!WD`}wLZ!b{k|LXv&>mTr(bC1@~x`h2+FLy4*QY5ma
z*}p|YCjsZ|-`rT4tQiUq^L{ik0GpcOXpCBHgbyi-a3La9a?L;ByJ1^p2a6TQAlRg|
z_*koySSiAc-V=-3=W|~Gcw|0Y5FUd!z^c=>i7Ne7(xvJIcb$afxVp-qFIoXqu0Equ
z1>rB&Ov=@MIFL(Jq#Qp?L~*Z6+$ql^dB|HzR@Us5tm>fkIZs_q9*x_co4F~~sFKbv
z|Ce1I*b?A{n40$hb2(&0T;L&;+&??dGdYAuEj30e4cch12I-z^Wp=*ObbvbeS%i>G
z*<|U*6;b%#I7YF6{o}_XzProsjVQZe2=?r_D6Q7MId+^UExV|VWmcX_uelyb^I&>5
zUHm6%r`^Aw=H!g}Q?LiwQ<bz6!JP<xnJwV?j35OLm{3E>%t<X&k7sLLf6joe5(Avz
zSho-V0Y*&ycLP#1H{YYv@>49Q$G+Y2gtD)lobduVLAQd^-O!6`HTWh+^hdjyX`(wn
zfe`gyi2MgCD2k)`SjLV48Y7H?rH)T!Z61h!g7$vp=gEnW%VcZ^I;$}UH3FD&P@*VH
zD+SRh)=L<oV4f8%Z|Z+76k?Cqn+3i7m8?2{_^Uh=xe&cD;?ImSa4k3l(SxRs+_epQ
z0sBsub+i>-h>b_Ea0<yCo`NOlr1}XR>WeOBxxOx3q^d$oMzu_2Jw5M0`;<b8;2`e|
zo#TG<DsOqyi1~}9i7HDAHCQ8$0dioC-qv4`^^#>UOm^0*pXRCbPkK(PfX5ncb-LqH
zPFso-i_(Kg_0f0-=6vP<5q6Hjy+qxbk8RsdPVAi6wr$(C^N(%Ywr!o*ww;`0&fJ=s
z4|DI-+qHXFSASTwKCM-~_S4U=Mvc%<!_vS=$IFDUgto1eBl^31btRXr8v)Iy5jc5n
zd{@=>CBDu&jyj+#;7DF^cYLnFSWvw$t5|s0uV+hNlYNG!kIF&NTL^QdjEhxEjcI~*
zF@8T&=2Ng<k8#e{#-#$wFM%P;p2&|!UR8E`{C1THOo%m{`k*7FAn*>1B<TK@2lvH*
z)w+g&+7BV>ZIE7P?oX{a95J)s!dd1JNkJ<LCe;@WnIc_qjHgTi;Er*fci=&d1_eOT
zzQ5X}bbu%iY&^$au5qZ1vDMm|v0P@H;E=ZnjYW+akBTj}aak39uPk=N;vd-yXhtR&
z@G}X-49Qn}j5s*r60aoe?r08m9_pd5qyNA>{WsID%LawpnS3^CM~|l~169As$0N2!
zGLUedZ&_d2J8=S<=3)(OcY`2YI~1#5;M)0-DPBa@;g2^Sb-s}>T?%{58FeHKTaVBf
zvJsIMwm*bO0<A>0mMgc%70e->#lrDMWf@vHLnhTQf5IYyp&p~{<$7P}e80NVOhYbA
ze{!8?J!4d#f@CgW|6+m@uhXa=N)6H~UG&-_<2HWhX6vb#EVG_T`P?gEe%;@ka<&(4
zCLCw&zrfv0y(gmw?4=45%a|i7JK53jj1$anK+8ZbZ?t}n&Tyo!?ACN8OE|`J!R+6)
zESl=E!Hv3h&c@bmS!GmsgU`lU1y+38V;H+FJGCJlM&0o`-ld)gm)tH55+;Le8qh<C
zbJA;|_?w%$CGp$++2puQa~p__Au&5SxUIkXCWxPcr@pc^{kzbP2>uuHP8y}@cUbYg
z!vi^@XNK)kVL4lnE<$ILe9x@M=+eCn&Zh5Fs&95j%|>pP{dAel#4|_H&+(*06G2z=
zSFPiYLuN=ahqj{&g_}ga`8XM#+yn*y(?~SNYqyhv=>EQ7A%pB-dhB5E*V+M9_^#@9
z)i=4%h%8^2G+D%EKowy-%-$31!LR&{uWv+sU(IkaY!K+|mmbpg0|Gx^=MM~-VpXm@
zav|>D8Nb&vf`FaEF(X4jHFAm-;vuT~%g{p{Vwe$tQm;sdx(3S+;2L5HB;gZaa+AZQ
ztE6P)2^XDAq~I}4TU*d7;2ai6Q>J171MkaEpmpz9K2Q$>BaUNv;0Ji5Uz$KO@<9w!
zZ~Zi;CD6fa^WTV7|0tzW0G-c+vkw#_0dwP+E48K5O9`|N!IxeNv^vDcH*$@n79TuY
zvDA$3&0$>&Sike{!D;1(GzIPz`8KP|*`_wsj{qk{F8Z|)=coC<<hHASS1y-eovY8h
zost0y)u0YLh*4b9BPSY9TPG3Ol`zZ&4FWM@q-(wg8hPf*QR@j`avq=vdZ5L<GCrKm
z%?lP}buvF%IZpAIkPV3zU9VAm%TciyB?pK=v_v)_ClOgejeOvtye?QoErEq6Vu<;6
zBOYK%v%Xp<Sb&g0zz}pq(iyOrmx=%+mQo9Bn}yA7#XTw4z`z-2d&uh3@{=dfC6Yxt
zU&aEv%dUJhq>ac~#B;!)(sV%`4mo0CKg@e9B}S<gZM9E;Zo!wpb?l60b^skEoE<G*
z`jVuS7|)xVhS8j12!trptP&LN2v8BjgC*ZjP<Yir6~{SDMWurc7x`7O;!vVKmhKS#
zcSIMv^O-O$ff5Y`P=7x_Q3zW51LV>taOwf}$GNw^1!3P`({hE|g+YES?0CSZn|)E=
zYPC}z+3RkMKl5D&>n}#a(^BnGnFz3fTo_?DJWLYzdflO5KJhwq8%S<Z#$rT&_#ve0
z;-dpdFS>jbp}Kik_yXt2>pj%f=1Q5v_XqkUJzl9OU+8J+i?cSq60H^<A}6K*RPS80
zC|m1|m=NM6Mn;iIYrSs=W1-q{K{NyXLTCR?PSwtHSCe!y)Lq@<P8;UmC1H;MT8gSV
z%~14aZ+{hm524AR@mhk;TALeUO(Aon)zo6AJ0XQig?!iy-B-p~ME~uvKk8;fbban_
zZrO!6l1H6%l#T<iBA73TpFJ$U7aF01e|CGAet*H4tob0kI1|G6Q+Uqo<mV$24pb&x
ztjv*vBNI7{C$%0oCa`?6Y`Q)bM4!YBXq}Nx3xVWIP|Ux~YF-VwFhw3U8U4WCePB8%
zg|J0uWzAS!=umU!hD`XJ*L$5bqvh&`7S<-fyr{G+5DcKjLANPXz0{p$rJh3v_<MN;
ztmXsh?S9aNu-_D!qNJI*(u`45QVu_hh6m6s-zBS{WWY~n_P9ZfX6_SmE0JOlM;Z?9
zMHRg{ttIQe#?R>qB6*`{kC+18=SS>&$Vu8^rI|~;d*z2(6=!>=eW*Ta$b=tx2|rfj
zXKpg*Y#$5z(?K(fJlD_aYHfEA@zLrGu~A>St2;+33LI^p_Uj<J6{CtTTbabM4Eciq
zRd8u`#NHUZIW{w~e{okH@!3DGQVUq`4JgWu^H+@hC87pCDN?5Fa6>+)^ROm1ak&A7
zO$)e!DeSBY10aBP7Jz~74-NsLX8i~(MIG@+Y!dP@oD4%88h8Z+vZ-lt8F4=yu*DP_
zQLLVQ;^^vv-dI!bH3iG0-|);51LNr8zcoxPjv<Nh;u|o+51`sF`p95+R2&iT0pDfP
z%-5e<OAsv~R@fqvKr5_2*Pv$wxukc?winV(#UoJM#rcC&#^M%cgQg?I8DEex17kF*
zVx<RWL=6f}AVHq*+R5k5_HF0VZsjV-P;xX!!#7zRFFV9~Kun)5#7`dPN?*DVB!pm3
z=Bk$Ji3HA0&V%8e{PV+ysEpiR`J~J8WIrt$GGRTAxhc=7jg$*zZt%fpNba$Y$7Z7r
zml-8)dmt(;o!mb@Ph9+gI;&6->=F>_%v&7gYz`3;>6AlpkVKmbTF0Y6{Ub9fzd#r%
z`^E8n{kXU5(fWOV$6+@<6w)HLZs54-ve5vKJ@s~D(IPa=V-?qXd}Rg5?>{alya1^F
z!9gjRAG4bxlOvw38b%^(LZt4B&R@=!c!Yrzf^Iq^a}72fp{CsI20?cS3p=5=9IJ7J
z!Gz2lD8>b2GD1TEuJ^!OT;pIBNo59zGkWQES9!eYDRu;Jp|O!B2<-^6W-j5ZirMPY
z=7Hik3O+E`SnChNP!6G#-}A%Ur4JuE;Tj+8O(zS`zGbic#>}<O*;Lf(WwOSGStsl!
zZ3>0K=}UkS4ZIh2C!;5I27_mriqf)Q>N^%=%S3M);WQ=OR3x0yN>8c6nWbIZ#@{7A
zlz|lYz0*QCjZM%gLCj2;#|Q%)i)^&lO&2|^c%4kKon?r&y{0@a1Cu+wGPj`CTkx$p
zC}sv``EYv)V#7Pe^O-pBF2kwZ{iT}5SiRt#1*#78V{f7I%!`n0aFjOD;C0qQM}c`E
zqN&*r5Ef)a)6XTaUr(S7`!gLe{@aUc`RRL+V-qfs;;m$wA!WA`dBV)>*km?UJGnaY
ztl0LROE^<tpXf{JQ*18yNFS!Yml<!X`X=HgsBqRmlOr~d8Wh9APfTJ-v*z27;P83#
z<F}lN9|B}gamvNi+tf?reZ3BW5_Y6vzQ5O#ZXF`6v|%T?YAB@<y)B7}bJ)Lrkwgg(
zIWg1xZb}5qsxU9$+{sI_d4lGY7+IOS&a}utgLj_fyRb~CzVtFe4u*LaBAh4`&-}ix
z1=WI4gb}vGnWaXVJ3<RWf-bfjLB1`>kRGh%YU`zl7|E_qunKtsCw2qWn5G1A3sP&d
zgZAJNOyvUr8IMGfQ+XSZgOj7Ipa%adibYnW?iC>Q*RjeQ7_298y0i<=vt}m9o-6@4
zO%p~+DPA;7*AT4<K@4_L5IviLKOXZhSBc`g$QP25_bj#*)($DzVX}`9q?!w&LwuQq
ztEfo{c2g4FuhU?<KUv$pCwVR-D>t+gX50_Cw>`{<3jW>pgzikA$&=ky&uz4^$%^Qt
zlW`Vci|RaLWf%hi>XYkn9Vn6Mwdi=KZSJmaHPnblV&Ig%A<Z;zm~`FAApYQ7%3i23
z4?kw}___)jGRI=lPpn;Rix<yxB;h@p#**xL8r*8Wo5svUyIs>1W@jlF$5K$y1(%&j
zL~w4Tk6YZqC0abY6K)PE1&wM<Li8m^{=WgPF^RLajjXW-rqw{#vixiL#K!mhpfpJ1
zI?u86wXsQU;ruVPTF0D!_Y4T~*nW-BB<97Z1W6LA5ta_E<V6RTi4p4kc=#oMy&t$%
zJ??@}!9HDu4=wS1o-g{?0qOt|-HfXxr;n5Y1X|!JS<7MR!Jo<h%74)8?yX=)-h2X-
z=RzFQ>-JnMNeB8W5jKWRKK6;YxV4w1njO<SG;)Y~_~{s?`HX7%4_)1Zke%X4yi`57
z*)f^)f_3^12x1QDq)n&qN6$X~`DcaG1j^ZH_C~(AU;PU=+w?c=?!m#p1CjQUk=cuu
zA8a^C`6*X>z|0iph>>43V=GX5@Y?V2Q4&rW5AH7_BSc`GbUup2J&}8l7?Q-W#8qMh
zTdT(j0WW4D=0;G>0JHqe6Cz%oOsb4nr00_+@N0iJUV?2kwxKJwXe(?c^D+d2{SjZE
z+d@w>bnE(Jhe;yqCd-~It&F)6;5tdC5FRpcWmVnvQZ9|DuNMrjwN9q4ZKzC#OO+h-
zMcd#PFEL>u+w|t_MO)QL3B=(i;gs*+#+$@Ar4<Y35jWqg$?-M9yenBVg@Lf*fwu0F
z6gaW)s~A=)Dv5%gU{-{I^4H+n_uE|figo@Qb=wL7H@0ggxnu}lpqg9Df|ee8`=*$4
zIm95>CLlQxLD-*f^sx17O?7w!jo>VpdULAR(%meY1hcSM&g9G*{_r=qBgOZ+eB>U`
zWXp~+eW_lvUY7R=hL3%gW;3|n`hV^G)wj!Fl{>{9xO-Q0%HK%kCjKN&P#xtGoqk<~
zxIBD0XqrP*p^CunQmFiefiM0i3eOV5hY}LrX_p3NwO{T>mWelKFog&NXplf2R5@0b
zbwKJA7k5GmRzDMFi<Dhwh~7nAtW_N*{gU1`4b7bRQ@CgjBAg{^%f5mot2Rc-;3Ymr
ziFI9L#5Z(1TqKU&H1x%ln$gcrCkk9IZ+M5Kdlm*1$L}FGwxdW``|i8lrKF7I?p=x{
zp#T0$0FB$IjyGD>7uwZkAlQH%&n?od=tF>`SS(6#gMupPjjRs$4y_mh>&;-~Y&G`@
z*_Bl%TX$3~+H=}^q@YD%mOwp&zj;AvXZhkhsN)HP18amUH?+l6Z@s)C!Ba0@6#yq-
zC&c(L6I?V)A^tqOnP%|LOd_dRdJOrydLJ(2*t~aGesX8)#zyJS2Fu)<!$J(J<_6yu
z<49L=#rlPB&%b*{PiV#>Sn%n^efU>0b~)dlDz#SUuA(PnZQ-OyUHm#j$ox=s4_y{r
z-D<aH3Q`E)w80_*ORP^Hm;R%+Qp^;Nyw$y^FbF1GcdgV4jwoiOO0Ra3SV^BDWK9+9
z$iew`DY-!D-OVBiN9G4Ae51=fY4OAqV|&^O*|Qzej>NCi;IIj>d!zt8QOQ~u73uR<
zyS+&~A7SccqM3pPYUyr%`GkOarj7RBj|4Y}R~OrFg%c;j3_ed!rO$2EbVQEzmT&J{
z?6Op6VUaV>f40E%b#FISLqJ5m3_zN*Z}-U^il9#GGv=Ec0=#3dDJ`79R>aIJ=zL-Y
z%Ceb*rxhrJtG9~H@XMDC9E;9fha*m}(MhKQAH(1wS#g=aXd$3*B$sPn^^0YPmS4k0
zcXmj2#eC4=L$Nbn(?3C!f@UH_E1>0~xyS}`Kh4-WW^lwb?OYPtIp%Z#cbKws2+)Q0
zPD+eS0ap~i4vk41h;VO=2utH`_QzIyn4K|NNl&*3j+&K$5|xA$qEbT(1i14qyBI*$
z<B_k77L%rXtu1e4Q*wsa6mnI+%h)hf+yKZBM%+@_m;Cz+f=I4E2XBS1+vpHlc4uma
zJ7AdruKkgr`9}IMXSSUSsDbG=*u?%zoZ?#wiT<U(Ri^w3Yqb?k`6v>*Q?x_`I2Q@7
zOT~%Uy5o5JiTTnhIvYM!)5<K3#tqmzLAm@=<(lacK)@xKQ2C{>LN&M4E4dtROkHgX
zPhVX-xQLed@3B+Y2EiEMcoO>w4q)gXVs8?kN~Jr!-Ig}H_q;Z{)k{7%%StZ$z{L8u
zV~9gwHqyc^ys~*IJ{r)+LN=c#bQAEK3Dku~6~}2nvXbzRQ=v*7>2m9PK91WT($@Cw
zr?m0)F?+V`l9!NB4RtqHtMjg2>x|&K@l-9@*qbWfoh?nlKR4aQkqptVW*34ym$q3y
z`h=6zXAB^CpWQ+G_~}j8!b-&VEj~9t3s@aBvCHaY?lUziHm)OOmlaatBe?H-GWB?e
zq@nu8&G@=gE;1aZo86VN*|#6%{+4><;H+qc@Q6u6?thbxuJ<o@w3j|Gd-`<rbOuT?
z6i7PWcD^7=dL4W{0^g=qG=FlyMK&z-qEPdjkT53FOz^pSx_>I4yH-};#<~uraY*ZE
zJ=mXi4WlW0h7QN8ecstv5z_K{fxVM;0;yL7aFJ{1eb9^({ohdkLGc7nS<wCx!f6Nk
z@AH1C$I%ow^30Ls^nKr;<^Mi=4w%K2<@#E0+kZtXG+$;lI7srDZRqb?TmMNp2w{&4
zvWnGexQc_L5mN?TDw-5@;E=TVol`_QzG^ND7RXiE2^c3>j&ZH~Q0)(hGfbDgy?9#d
zV#8C*RjoI?sC?SFySZz4?NLc$V86Rz=Aj&8>OZ_2)uSN+F<mZ*F_WhDP@ohsTXv;d
zpwSe9nHij&?v24%)2i@TZZkF8@>05b9a96HX8enugv`TN%k5z)HaZT1I&`^T%lOBn
zho7Zrf?<A6tPg(~CcPkI?-S2BGcR<`cxvUWAfLzg?ff#2`tGHQp>4lZV-^UZ@#~tM
zQOO}zCVWKV{LfWZbE$=mL~Tq=O!>70q#sKbHb``?<1a7hG`!GOsHLI0UOW@sKRYV}
zEMLJi`zh=)5a0GYi%1!htQG<oG;3Z@=`<UK3UNHbx9~rqU06DicC;3wv<OUNQ{yvH
z>y4{GFwYxSSP@<vo{VY8;gXh{hGU3Svc#-4kAut)Ir7BWeMD+Jt=Uw-Kk_b<c)B`1
z?i<NSDF+qgy8e&S(3cI~J%01Z$tAV2C`qme0!9R`rP9X=&zf!ZwBg;d`zBg-_dt++
zCTohD!q~^am?@m!m2$=KDEFy_qKyIoG&I<8k0P$wvfHEypM9ek0KI+jiY+OR4JcJO
z7|X-E(y%0Jz>w0sNoM6}`>}A)my-$sD+YCus1@Zu?VBkLA>5}i)3>0kxGU^p54ceR
zUr?GOldL?=>B~O))({UlQvE8s7+3%qm)0AzRJ~2{s}dcv;*Cl!X?&F;dsrs-sVIqg
zE@~ftRQuS0d$86BGmXV@Pf?L=`m~~D^Jy)*=C4!pCY&=hB#(q(C1+?$u>KzXhH~o0
zQskN4T!NgJq^YW<COxO8n~P7q#h?4eRjccfDEu5ey=(807gZ()9DHy4>$#~i(^i-@
zTrY+BZQ~4F-31ViX1tJ2xs2T`Q3yRQYoH-2QRYYx8oBp193hOJ=&@hTF)r@IxA}8i
zV#rGvk@7f!u8h{aOpj31TWcoy=Np%0ir{mnbLTLR%#>sCcPWnFJ3HJvO84+9AtJN&
zE76!W>}DC8KMz%Qmxw(2H&@p_>#n+MQS*0rUJobM<2rV|hm>BlFK6w#g8+bevO`?W
z(p^#0(&67Sbu;|}#XT?J!4qqU1B>m5SPl<f3w7;ZL*8wD|9;u~NxJTS)^^$jw(b7)
z_OWf*_sYG#`NQq$?b!1i1LDY-pGkr>b1@l?X7gUD>UemEnK8d~FZ@xEsFbs(X0$om
zvX0N&<bi~~+sDm&(e_=(Hq)BsdVc#YEpAZN3hEbmPiNw;*5T;$!c5zyDu4=*%K#vQ
zOO|%%@YDs2(t@!+{9zIr=WZy)$g{f!4NQ=cd6=gJXDaGGjp&vaj~FQOx3U-93ts)I
z6Pp!=#~eJZG(baGPSAHD_X_*NcOjJsa)S+y^SEfpKvz#-)NxZT)dE=Afcd2np+vYw
z4vuFSh^#I=EeC}V63gXHmCCgQ^=jTi4&HI$NRIWl&;7#}kq*;g;Mq$zsOTX@$|KNo
z4XhZ3AX9Gd*OHimw7q6qt@o*~-fCCeC%knt`%1D~-9tMFpCpnQW=>uu{ecucQq?s<
z10pqB)mN^P$||!wUhm)iyD{q&UW_oiY{Mt~t}SzqGN2FX>u*C+LOrmkd9v;{SD^(A
zWoCHdVOgu<cqG$gUN`6vdajZ$-h=KW{NLF|=HK^{4w-<PaXU!)IQhLvS+7N)!Wn`A
zw{`S(2)NhOM|X!mE=&wo1K{>}X?x(;v(1&QGx(dlP`&VDEGJ_sdnT^mgLLXOZdltb
z;E?8Eu&7~r&Gc7#%_k-yYN|)U8Cs7+^(z)HoFP{ME7pg^CaE7lNJ@uwXF$G(eC$CK
z3U&+lgQiA)u5)9=5H2EVTw`G^yT%H28rW%V1?(Ie*}jIQL85wQ263o!cG(iVMKy+O
zQ{olrJ8uf1$Bf|ElB%*?Og`$05wUTu9n$yX&Q8MpjG&c*XJ=+^2H4bbUMcIa0k~sD
zjTS+%d8s&R^o4wbCA1p7JvqKM^I5i+cN*O2kL1n;@nosLJcFBk8aW00AI~3X#3-(~
zxxLWrIo^njfp(lT1Jx7x6u&q*iC>b20sPdAnIqLUKV1q@+<#y0uG>~UZV9RGchn;d
zE_$MVvEoDJ&0w<N!res)0ZwVoOND7x@A>ejvAGlk&e{E&M;vXgo4aAF!_)alf}Q!m
zEn2Y&ytysoC#PvVeh19UN<i;3*;~4gNvqPHzl*(|yFh8A5Xlpk<-Sre74MsU?W5Ci
z5QFz*V_Ob^;HWW@X_V(zLaZ}TnUT2>oBy5wO^XTb(U&NtNSlj%fwT$=7UiR87>Cs9
zO!sot<lIS%NEC{C2ulhPB#6f|&R$#oA^O8<ne3yjbxlq=sA#X)4_qM;=|zWYS+5!8
zVFy5}o>EdE5}dLh`mF4BzhxqsnwI1HnRmEXPJy@da}lbl6;p8PBtj8}nO)@^Kh1_S
z$&4$E<hM|}f6&i(kTKnD+{VeuVSjPfghTZySBLyPO^{}ctWV?yI}4S4tohtaZkev-
z9%GEOLUS7Y0%aUTnH2_O_2#4+&oKU}we-T_O;$Z`nggw)UE5f--g0ct2P5RK@I>N!
zvT-6{PDoC7uLv>GCkA8DsUsG!GF%HmJT*+{%fEEaG!Gn?Pg-yax<jU%LKtf;qV-a`
z(EU=0kDdgq=OiU7%f<toD5$HPztT9krj?ZOz5Jo5F-XXirXZ<s6lYOu{P%3e)XB?b
zx$w*JdR9&Q-xtjVe`~8q8=6aqz|*pAJx>=q$6I`(X=2<9ID!D1{?-=IHyjhH89y-F
zaJn4U3~5@l3K}x35Q$ij9MdHv5U+waommC4q{{4<`lfdI>qyXezx{OP7DE)Q3H>vh
zxf5j_+gHU*Y5Q>s!s3n0BAeCXOQrfKDSZRbBhe>&N<#(=^yIXJ!>U<L!ku6YS17;X
zSP&GU!-&W0o@eOHhU6H#g-~4hEYxbrJ*-z56c-2qiT+Y~;Pql)y<|$-g#YyxU#1eg
z<f(F0@5{cMgCz{!dOIQYX(0zqarfX6&Zuec<g{*XY}zz#q?5I58h<UW`d4!4{vnZ8
z21{fo==Epwuus29uu(Pi=xgXJWj$E9V5n=-=CZV3bcXG4!C*OB?;^zsM`zcPM1!?b
zO0skqH5f|3%a~#$(LN@5>k~2xy(~#Fp@0dnhuMXla9x9<AOZho|4Lv$n%AkgPh0TG
zghO&}Hj`JFZ?*wjZEGJfU+Z50W9zm3-J`DV_&*#8ToF@2CG%OUFvDAF0j=jmTc04I
z$ECY8&gO%5G{AHd?f@S^q@pk*K2a+;Xs;ZGW_zxfSP2$|vAcu}Bc7^jXG2e3)Vbbe
z@o1CdC+{BD%_pSnwVi2k0#_5c(qUqChltG+xo1U9E~n<g{|q`RMeObC)c*5Xca>6`
zrf#1aKiCMJ>{#3jrc{RRsfJs1p#5Y1dT)&ZguvvJBnymE1bP#Gfo^GdRLq%*0;4<{
zrxz&o9+NCc$}jW*7N1FtI}$YW2*?qhJLC%<sx>`w$F=hdqpHBnKEO1?7~CA**TBJF
zD35bSTqOS|Ka~(4Hi0R_7&e6~zY&?vh87CjkI(2O(&3-j;_wvHbV{L|bv0qLzwwZ~
z*y62t*15r|f8s35ny32!FpqUGtS%#gV(R=x^#PMs6?+SknqJD!4YC}JVkjf-DpJ($
z*P(u&W*i`+CcrQ~y1-p~0fpKhOQfpZA)PhR1bn6`<q~t#!Zg9vE8?dLtW+DTB!2eH
zz}T-)S3V}o*{;=;xn5c7Ztga}DR;K^8Lo=q&K#dnCvkaA+6a+v(WJM$Q|C3mIK<_$
z?-Z4Q($fvCJYqpsW{k5y;kS$J!$;rNY2!WbxWW?JFW(<}siW<5C31RmRbH5rF9bf`
z&YY9y9bNah|2*q=Y0H97wAsVn*it7vJzYK6-d4Ns$Qw8cR(Y5!ZSEKbfv94FZgiH9
zP`c>5kF2V=rogSeDNE8Rw~_C{HyZl_uR~bOG^5??H`iMxulZ=`2ef|J`vn8O7OKek
zUp6o5-mEVf&OR^akbjtF2yk}c$27Ird%+b1uZ|lRRD-cSp~o2ZU~%<94w~=DqgDX+
z;Owo%hFLvEIn2;PsHuKpLF({yx3^Kui5MXPn}Ct9N2l(i<HHA#_@LBZbis)6a(vvU
ztiaLF(Pr5MCHuVn3z|~;MdpAi1tn3YWk$7|wnls04dMhunL_BREs-nV8B&_}a<w>b
z<%u}R3&c+OqUX(c@H1w@q8LP6r)-AF!>im+^!1e%cWToo-+$vVUN00@)sxHZy*q0?
zM@KdBq(8$Kch`NI+y7SG<b_4Zih*nI+w0ue9TfUcT;lVQ^|z&H?*em%eY4IP?%yBs
zXUC`69~M2ThVZF$;uK;#D$5zQ6ulWt&z)~_?87sCStt`wd&4jceEbvscF?t#wui3?
z7P^2~wD#uACJn1Hc?FDVz#i-go`0vwbgb_pPxnRN4gO0VuMjJ3_Q!x}fZI+ro2DZc
z@)~?l_dIY}?FtB5;HfSfA%k6?i5?k}D`O8j&#y4s;lYrdoV=GLzuV5Am_f>WHxz^D
z#+#YyPDerhnqN%)cbv^ST_iRxg_jr&bRIUU$!6XC7EIPlq;JYWT-Vk&C?Zc%4O-Z6
z?=B1-_~*=5zg+7YPOXp3@1^3QOVy&qz8{co=z-!FaAI}(qJ+=e)&63+xm+s}W8wXn
za+xqtpXk-PXHz2H0J5j?W+zW(rFq-Y`SGy0$9js|!qt0@4xaOpR#(j?2y@7GdwV>5
zEuwOCDePze^we&res5d1Hi$R9C+aOE$#H8NFR`u=OfN@>F%*s5q%T?9Envhm)aj;q
z3cPIW3H^RXwQo0GS)4f~eIpafkqhmgEOQlh&UON(?l?VOq7rqxH)0>;0)DD(;~zlW
zYA-a1Gkf*o>aZoL(kTOg?JZQ&e^MWFCm}x<9hw4kM2A-tBFVaFgvm}?HNv6HEA_cS
z#(|ka$Xe@+W`R7ZeP+{~@!Z@F*8w1U)4g#|gu+gZ@ASG?7N=Wd0b;_mS&`Si>_+Dn
z!@NU%xKvI=mMnlC`4T~aixB6X3FNj;wPKh-3n+*g*NBK3SJ<XN$9b65s|!?%>go$h
z7xHKa&b#O~9)N}oVH&<)=vG6t$X{xBiUu!zLQpu=YIRj6m7(=dB!gw_RcPWBo{eZ6
zC2ZGa(<MP-3(<`CBq}O9pFb%+yYF7^i_9XN%mL_!IiT6DETvkY<)nE`{xR`B%o>~D
zZvZXqC2DGt+trY1FGcx0XtIA(&o3x-9mFJt@`os7wTT_I>2Js}LE|wMLp?B*>Fxrz
z`EhmCwI_;Z&ae{Y=vuekJt3&;G@x!RUwfG_9na=U`G(U=8x&M5!~VVOV^2f7vN)GC
ze(fgGHOq9hX7*n*2l+few4A_?iigR}>QZBtTm?78rvba&azIF`(rMh{@Mu5|Nv!Mj
z3ic28oCBP^z1}1WT4!cejFgJGfK}uhjf$9>b*#5_c3t^{EnClttX18xaYkZ|O%-cB
z*DXvPSF1_V!TE8S>7FFqzdi`1ov#*5`J$+{=!H74RwyK9;_li^2FZzeM(ibSI&hWG
zJZ2_Qkq*xZ?jLW`%-$Mj&B)wYD|J}BbU?iw24L|wzxu<wd_2lhSv^xrFOl2c=8+z&
z`X;v__R)tV@IPFWRb6#|j>D|6rY$ZXW;-)VElC#&shav|<W`y^Nm5dJ>XGM`>cKX1
zk1YzsRWjUbL{{!{r~5ipY!P^!Z69^Q2Ve&7i5GxRG)}T|R!vB)V~mW81h)qc#O8{%
z7sm^zV7cz^?`VC2Q7+S;L%h9Go;sYQ!res`ClGuJ#W46E!w%0sto@*KD!c2XqZmy4
zsSr5!zgTt%{PIi}RP%V-kzdRUJbeR62T>?3nbYTRrb1opaR1z8q{L2XDJpg|H_QoD
znO%2n34xGy`onT-kWirwp2_H@RUWbH{ar}h>k`Zp5!-ya+}^+3v^Nu*5ElEhmJ%=5
zBhRGOP*miHs}v&Nu>zVG3C=ARJL-iO^1at}Ql1>I7H>B@<0PvH&e+!rR@^~_`+$mz
zkH2u0+|XBwFbjSsDMXHGi{^R{R1X*=>HRem&zc$zQT&w8XocZL2t|^iv08ia4`x+w
zQ|)==SIu8@Lw7IrA<*Z-$*jeT3T4A5%L(p>ei3B!Rn+{xcJGS*7+Y9T8ln;w!NX7p
zUB77`*&Wgq=G&hki;h*ji_ZHpH#9LhRL}~}UPa{TFw{fF<q&+lc_kA&91}Y23F=#1
zVd~<#Tl~(6`wmxcmR|aBq?DX-R|Qw40iV*qQLQ>hHx2tx+G`(yRc$>hJ;`OTDJw$N
z#CRL2rEaB37pyEZKxGpvRNGukM$xRJbkW)y0qO{!vq^ixmg?6yv`!f;Omd-#*lH9{
z(|FiPb8Ol>n0PnE*_AP77Nt>r6wAu&pWLUY+3my)n+e;>Ka6V>`8KZhXoS&Q+hUvw
zh7qWv5dTanWvN03(J&jL)DRzvTfEf(ih(w3g(`Oq!NWeON9KxTlK$64h#p{TQ>?(x
zMpET3`*ks}R&;3A8-Y+WD+dUw^Ag}HGxlW)*7UoxybuBjgVAc{EL(dN`0X0LV&+s)
z+15d(`7{3^9+TN?wETu$MCl{$`(a(^d$eUYpCEisK3uc>2V6<?->e6<r}mtpx-Hf=
z0-{T>M1R$Oj{8T4_KWt(^Q5h>(Gb!bd5)#N8q<j67dvCTmvHDh5?#jqiOIz-rP`*f
zMS<Xiv?x+6yr~7yKskO|yaJC_nTk?5IMjMj5q4}5H*7k2q7A1BA)OYo{pL!rK?P1B
z9>wL>LkfU$wEDVtdnj4JpR}tr)pfd5<migYgAL_Zo?*~>RiaNb|BSe8%+5%a42={}
z<s#!{JM*{<hIC^0=Nq#clrl?|P*;Ocdb%e1Ml^<(`*t6vbLh(@56K%@wu&DT(K>fi
zM3zcKdgrH7-OSFAgk+{EUHew;X{x6Wr85dg9!e_@a4o)hf=V|GdD<+TgTYD*gn!M3
z7AJwoj9T{Mu5=cK@=;k^-COYSIAF-O6f)7@>L;(R`@BNyU~GRu?Ao}P-B9_b5V{wa
zLMg){&ELbNCFXU@X<eJk%@O4@c9<{Ms^Je>X)i`M$Oego6uUn7D>rL4wR}?IQ16M@
zn6WN1e%%#5wvpfS4s_XR@yv`cg~HUjH)0J)mxM}><kp<Edlu&hb@)1rux1bK1SeW|
zs?S8?{&OE$wXRvbM!hFlW)&;@x<@TFl8Y`s`qd-Kc4JtQol9g*OF$;kqEqFkGtHpj
zbrtGTmScp~8r0V1538UrM~QRIKuiuwVDCQnHl_sxWnI;F11hLYwKr9}wCg4AFne}1
zwpJU`M{7u874|tD#V!laudUirI1=s+c2iYzG4(b#P!(kvY$KTTP^3A?=$@zxlIFNf
zED-0Q05H4j$?k?}!fy@FAdi{QLBJ_zb72)nv?HsraF)vspBGLqc!}YGQax(z+K>3(
zO!*+C+`$ru>j)kE5+@%L6(D`$RF83*+?X396`TNDYXO?|C;!I*Q_eUG9D;!q17YG^
z-r8$OMtlWnW&K#l8C<vDa^WtbdfI(g{YiE<ED!@Y?ao9hMQUB&4f~q4zTeUa&(EAr
zZ~OSPpt6f&R6FH<A8f7?_`%Y0OA7HH`uCofE*9^nksL{_Q6{XLbvZ55{t<IZLK^a3
zo`nfywYnL7+4uur3;8A`ubMTOia}`2VFw_)zmXPEfD0wb9{C7|+y}!PjhM%yu_0B2
zLL+{+&-q~63z28q`s;(lEaZw`77+<s;)c0!wI}GNI!SvqX-J*)<?G<JVDs}Ee?m|5
z|I_pR+Lf_$w`s0n-;`Xat)3%ioqJE|vocl3>7^+yoriTurE8Kn2w^zUEBgY62cs-%
zMa9FB?l2?8QSEuF?!Jc!y07xefP);$A+~r`Lgtn}X&;DJ6ao1KLyYvX#d2yed<4bX
z&YTdns$*^zyq_JD$o6Z-D60Sm4Y^sY1*?dt>_pz1!QYQ2w57Yea`nt54}gh&0;|_{
zyD<4SHGL&mpXWbGRsL29ppXkSP1sm#;c!upSFNuVC*ydpP6Rh`Gs~!aE~=Asb8NDH
zl3?IFLyfBaXZ+&TuE>r&CY&)AfUe5rJjx|Wg6UWT_9?lF0yLx5a+C{V1#O=fu_his
zI6W}KOz9^ume=V4)NOh_E(+$Nta1m~2k0}Q{ap-vu7-0m-$1nqR!AYk%SH33_j(qe
zWBk!;b_D??dUH9a&@}ar=Fl&Q$IgjSY%x-9{Kl`)N?~VK;Rxm1(eU(u)pfB#=61NF
z=M1k-dNBLTiL__0wcb9NTX9Kc{H=kO_H_k%U2|=JAPMQCC72s%njBOZB^Uf&ouDE7
zZqDxCZ-18e^Iudt7@+@s$>b?W{nx|)+0gzwxzg3e(uU!`T<Z4zxzySGcbB^VZGQJZ
zN5lXBL{pJbR&cWS@cfTq(f*|c^<PQ86$%z4g98Cc|9eIIpTa7eI=PuTNtoK$*wZ`M
z{@>jH2Zy~D4O{z7cBJnceMeUv5iz{7nJC|gghIiK0^lw7h$W*TZm1X$Z7WkLqKfj`
z{hwaa3e1a<$TS0?gYl!D-|pSs5+^|PhbA*arbPQse=c|T+4JwX3T*iD2H4{Il;sCS
zX@b+EnRG;ux2QCMIaCz<<o`O}=DPzm%@@fi5GtK0BP=qbWKcUS8}MUZA&vq0k5E^S
z<7m(kqod7?6QR{Zk-|KciK9XjgEHumD@vq`6T_P3+n%a9;Sv}k?Mem>f{i4xX$`uQ
zm)p+N(wF6(EE&lRQ;Qq>QIR3uDq)Y7&jw1Uz!u94uTMy(njT_-B9Y*X`FI++$USI`
z2I`3R5Ewz24kab&F%a({HWoYZWEpSx)y~bH(C~kO0t!8hLT;fk9o}xN{2V#Y$t$1)
zdgAu#l|Cdw1z0$DQP1%iGoRUc`^{Uz0x^+^_wYoJ=;zJ(uHc@e?h*(T=K3iUHT1cj
zjc#DAMI;7IyEUL_Y8Fx)Z|FHSJCVh>Ma*w?4l6{6Et>lsgHPVBzowp_POjh*xKsZ^
z6siThIbF_{ap;$E+=QRoyuAMi#7Rysh(sT@;et+%=m%Q&j$rA@T7hIU^6OPZ_WfkA
zs)Q~&3hQg$D9nH_%k=5zJq(fwq*+o~h8NP<yNjC6Gl~04!3n>sQd8SlBg>giW+Y@k
zwU%n3R5Mupk?vJ`cETo0JlwOa@{1ZS7nRSbG(U~UkA-1{8LV$Kaw@4Vb6*3CC1+dY
z6T92Aq_5K@$T{pE9yBvwcJhp*cVEZTf{2UN8YK`}x?2laNw1O7u38<R;v-72q&;(L
z$iueR#41ea_H_t_b<lfrL1sR>467ivsSLC7oS1TkWffv?BD+kmdp;c?l&GYeB`Uh(
zMMv?GDhwJ-ID!7|*G2Q@C(;WD;tH$EZc(PQt3+#JjEZTAVT5L8XRH0y+*Ghx4AY3+
z4;z!uBT(}u@C^40hOWA3qy#QIETQ1xK|txxVR$>TUV}GEC|`1+0i2&Pm#<2O&GDw2
zJzJSu%{<?dzPlZa)+UChzouy9l3Z>Por3nw>{T~!I0rl548K#3!k_$o2CD@5yoT>`
zXcNu`)juZ2=NAX09?Dp`R}DA6OgX&-v~5_OMy9~yNkrKJtLrTzt!$GV)fY!sT6tA0
z$xXp?R*fYJzAFc;V-)RSDuQZqBigQ!UY*(YYND(!J0W8PBuq{tI)lPj=e=HR=Hzcy
zPEIR?9F43uX|7sJ%+3DK1ZJ$Ojn0cTuA1Q0D%Ef9<HmQtU!Rbjkv_F*BqZAwn=b%(
zS~;jrzp9gittT;=^nneniE@{@V=7&cd&77NWB)V|i|N*4^LCE~Q<hBIe5hHu-~9Dz
zcZIT65vt-0gV=*7=*M~yk5UH?B{3U&JLQB;D0&o56KsvRug(g!fz}gPON4<(lDD*T
zWEU1r2d5_BEmoOP*}c7DnJ2p4Sy3$M8ft!e>)x>fbXZB>*mUBTIu*!iV^qh=ZJw{*
zaQ=!S7mCC@bNR|2&wL}^J1%WPZ-b9&@o=gaHZH2R<FTv-TU!l@aoTp#NNaKflHKZZ
zy*R2M=<%+inw#sYMOfmu-+tAvz1MSh<Z->n)w`|b^RK-1{)D(|MtXrV(%yvKP+iy{
z8L3y*|Dyx&U;`jL{GD&6x|e6JMW`57b_rO0?tZ^g^Qga8S={YVMVZ2tLNl7$Sf!A*
z-0TE2v!RKEj<{?kF{*Ghjrp7=hR%8Y@J+aX-n?Rkg^7VqISYJ2-j--byXCfiKYv~p
zMcYTFA;GYF;{bg|eU*PIwL9ohc2W{s=noSHFU*%q33MK-fR9}DoYY^Qlo>u-%})RM
zF>uq^P4*hmWbK2-F5?4~7kj_A<Y2e(`q1##QTF)%Kg?7>%0ryhKW6GVE)WpKe=7V+
zrpES8CjX)4Z(~`@Z>l|c`;BA_X?cgl2Yg^9M^F`)(3Gf-cgj|pV4n*8voC9`%MxS#
z@jdOm@~*?*P{}I&McB`G>wM#>+h&+ducqn3Q|2&#$sc;2-QNW+SzAlL=bQR1C<HSU
zG`mE1JIEMoIB4OV9-nQJH(tGI)wbb)97;AZ0T*Q=#+;uSuaVzxDj<%+t%tey+8oej
z04^z2Fb*A6@JJP&MMWXN7j7a*EJY-9i{XeyMjU7=a;npsOkx@$2y)H_AI~Z9Fakrq
z&q8|CNUs++nx<|HKD9(5Y}iCqrs<+PPbK;S2NGrDEQR^L@cr%7aaDRIkUO@`+O>`O
z`*ShvCVOY324e$GMoc1ZWa{YvM)<|k)n)jH*abPnAEJ%hOlXibi}=D0oac8)24Pr7
z9%^Dg^iwPsNepS?JOo&Q`#~rz+!9%tpiqX7KQlp3R`&bp;r_bEfqo2wzU<t-36Okz
z`>$mX-Cq)RjXP~X{z(=5K0gGcY}vhj?&o>%Wx}K04r_{MkNd~#f8OtA(uWYG-tLTk
zXE<r}g#g6V@fK-``*eCcd|offgI~ORR<ywO#$vLLS(@g5xhGNMJFp@##w&BcRZN<X
zHOE04{NQhkfF0<MwIUBZOjvrl<%>4+#ZapAMSJe@o6z%mQydl$BY+j^3qOGustZ4H
z9-PnNfc$fMQHeOkI55)M&rKmNalA2BI;N{pm2mZ5;Ptt1N6hJ*fN@tCdq%I-AA3ft
zJzcgH$K%7_z%uL>=;cI9u!}n&n%j>x=o-+GZGfGp>xUp)1k)By-7y3-Rg$1B;--VM
zS{#qCZJ}I9SEh23DvHVMKp#DxK}4$rimw0J=U}=GW@}$IACfnH8C{dqDDQ!B7JtCI
z>;-NalBwNcY@n)gQ3FO-$<+ssh<p#~g=nBi3R$-j^p#T+TIen|xGrR%N^@R;*Cp#5
z`FC2~_8UuJE-7-xFPd&p#9g2jj(U`f9=Z_M1cPb$-9=A5%)=h2FvXJ)Rdx_ZB1W|(
zP~Cx1uVVP<SKdb5oq~oq<|&Xf%HAE*G+M7(ZSUF|HHXIo-?#<Z@b85^sO(zuhRgov
zsKhPCguj)=j=d-C)+T~wzrPXqtq?`gpp#Dc2*@YS%Es`?x0+O(NSUOgt?{HMhY@}!
z1esW^-H*ZtSf36BcC;6{9(xb9x~^7mX+^ygRr3Ym*MM)+ny+MGGk8eEwI^V}%eSP%
z_oFH#nCp4HI9h^OM~T=}q6{FVu#x4-hK(vO%DPRQg42tcoVYe8?}Zr(wXZcs5xums
z4aXa6nh@kv+oe8Hwrm^O$H$jwtJ8IAm&GzR*2Su=YmDU&xLVX@#Ph5NEDkD;ZDe#;
zc<`ja+}<V_K{e2Zo0ePz+?^@f#ywh5-0h|@?0x6|V~pq-D?P&W*VI9efu>Igrv>84
z?{@0(UbC0FB*lmUBOV_Xj-QTlUQuPJ9c`qYqoh4-l90w@pouF92qH}31;yBF*(8ls
zfo;CLPsX}~5Kq?zE+s101+{^+a~SXh7AlOX;+S<%{hl9lD?_p8D!2ySP1mfiDoOp*
zJmRsv-9niS=O|{8K)&b4I`p|vk8VoBwHZ8^4wkVMkXeU`x8%{Mk%p@w!<T>+#3+LA
zaetWj%Mj6Clg?WHFO4~_%tHBUXBj(nleC9fdUwfp=Me6*cCn1VcQ)86(>i~&(+lA!
zbX^j!4qswV+YmAbQnZV7(Xgpq5pe|l9J=<0`m0vk$^l37i<dNq_B(=}H$Q&5MwLIu
zt1VwAPQ;stu(!OgVRdWd7zb3{MxxdL<g;hV=OA=u4(%;pFa-bmJif+_lRekkLs#ZZ
za48m6l21J`nGq%KTEPOTF=LjACC2s#;$l=c7kegnDOD*XqMbNJbomX-0F)>Jd7D6H
zV>=G1YHx>5vO0OTV}_wN+|c3Mo;q&EWi43cBUU!ns^n_Ao2_HZR;XuyG0{NuE=lZQ
z#NZ{OZu%@sHqILgU2sZ<wHD$@VDPuHe2S7Z)X8*Al0N#p?AF{vcmK<TzC%0S(=Y-e
zhb4q$=hfiUYF`h2H1$q31Vim;D}*<dXbtprnj&-6D6VoBlo<<#Qz@jX701*%W$)(%
z{4O>ZzH~}W*=>p!-EMK>^|V_Gd{?H4Ypzx<wsl3Qct&kUPS!isZ8sfgokjdK$d)#F
zU9NNO>yJdo&)5AAuIS@j30@aExrG>V)Q|+~%Kb~KqM9Gq_&5nE*KA^dFZ>BthN{lP
zP$Ikk@meDvDs~4H4feat0;)W?xXwAMTMlNjO{`Dg&gp57o_tAiPixk6k%(~{9|=}T
z{^i}1uJHIJ`yXXxGEkW-GCj?zg7js?(K4-@^i=PG26}g%nJ3#}tX+y^#`6bur)3Tp
z@}RtRb`VbCiCVQ#TQaI#B?;Rnd(xWG?piqq{|wQ!uxZleiwi+s_-J1B^7}eMy&LPJ
z$^E*Ic14cITkYgZ&NBr6J~iG>?RFcD`=0&pQO2sfmpJYJx045$Q2NBf0|70t00B|{
zr%o<w>g;T2Zu*~EIj*(+rr1N5--y^GISL)ETjC|U8=Xje`dS3ZCt0cOJS<qIj;0Nj
z5_wu{=<?5BvzL)$X(b)Ba9Ty8hnuUbZgV%cO_Cvtp2)vh<fII7vHnCaiHTEe@a9cS
z9Z^NQ<x}HCrc+dMUM5IjCQ<d!8H*vKZOfNzS^x~}PkMONiv-pu3z_slG9=|<K(H+I
z+SL=(J6?&&v5f>4Qz8Z0e0@n?d?=xU(5-H#*)U=xZp}*IZ3sQNJD;}G7E1K+J~we>
zZ3bvRLO>ly0JI+|(HL7V)<1bd$!H=K06626lJ2EW`9!?_Hw8klsr2Z|#6&cvySsZ2
z6qZC{KIRAq!*C{MV%kn(O^_I<1x3V=X&GR2!?BN>BYEu*JL1~U+36vH0y-ueMt}nb
z^&|ui_=K=#-R5p5Gfz7>fh{MlX2Sb3JNtRUI>2rsG{km=b%No0h3L+=+3?uIhbvF(
z=i6k)M#pnmRe9(>lq~^?)4AH*Y~_h^O>VAxnFaOIJUwTIo}SYA)97vBfK%U`v!=rL
z{>F&2{#R^c$Yb!cr`=!X--I$dun}ph*0Moy`l^d;gt~HIVUydZKpyuuERb*J3CAeN
z{1y@Jm`Ty=9c%|SgsMil>!6=YF`(%|?<2YTvJAHL^@QJlJOtq3L2y`5=CyHDXe<~Z
za=uLfr~HVesKSt5U)%izG4E;=LU9y!S9J>{m-DgJ>qu)o*_w|NCBMiWmuF=CK?>`t
z3v2<&1&$~%3aG4kk<SG6a5nQ@0bB=9)$B)vw1%P1%|cFM8!4%)<TK7VU<=9Lxr-re
zv;d@lut0g?QNgSfE68;0(WG`DWp<f>?D;Ni1xTYt-&b0;wwb5Mt{{cKp|{*Iscvkx
zqW0f`cGceQ=OG-;C}jh!fnCEs6S<FDfWmr+9>$yBFL@SM4D93+7-yIuwZ-}wd;&d>
z!u*;_bzbiKK=0e;(}tFd)pwA!;ocAfv7$3#WmqR6BP7iN)}6gBI@!$>L+7Wo-gbG~
zN$+C=^Dg{+Khd_bVips@8Su<GnnM*(at!*W3di%$Qa1}hArM^PP@(;Rgq>)MK^BCb
za4>=Fc~U<VK6A2CI~UM{Kr*);#q}!6gfAH;VdOky3}lE&3L+DRyCGbZUlD0SVM3Os
zpJcqUTW3puG@#O1Sd@ET9{yM#+sLoZQbgb(epRpkJ|;c$1BN#|y3>edyk{8aFk3K6
zP%xW*u)!PZPx#_-)fGs9pPygy?^d0Kmze`i2Icgi<Zp?{$>LIoH*uEN_3tTmO#Fy}
z(E*V4P}m9Nv=gK0?S&v7Ywio15)9W5gkUjt?2%@|e^tfCZRsQ=Kt{9;^#fPa!ngv$
zX~26%5LCFG;L(U3n}e)C03<J*X&lKjf0|8FqeG0jNhcQd>y>%wIPZrZVgxjC{Hxk#
zH5A;4DkExS?lt`dH`Zt6XPX7`c!N#Qcj`^G&&z_B#PQEd-#qz}&4megem9n~-k?y$
zj^nRz@-6#HpJH54uepH-hIt@3f1^sl^P@GFSu&oZ_z=Dj3kAe6W~k4`1X)fJ@99HH
z4`oQ=is#eOf^lb^(77w#DU^feNskp5CT}UE2BZ8&FfUiX*e$GD5=B!kai2{s=cF#m
z?28!-O8zG%^5nXLZST0Gcnn#r_uXPrK%pW$lS89Nyk?`q!C82P#daFAaN~P3ND---
zcc=sBA@=_goEE&}pxk2-g{~I7jA12KFDGG_6NUrm>1C=`)7~l=?n`9GNoF!0(oH{2
zkx@B280E&M6P99?tvZGjfcbN4?fymx#J(#U;x29TOQtZj33BE9@yKPQJ0DJm+Y=ce
zMGOfXe@;+#mAj{9oB&9pUb1SY4r!`O_7FkWP@!w>W~bnFOVMSAtTRi2%C}GAEb5S>
zy(Ysl7IK2gE^)>lpvEuOpuQ0#bmhjI$tx;Eg7xVoQRza%$Y=JDRP>n5axT9rOgK}=
z<C~P8D{|~qV?&57@-JnSsiBcrScIQWs+1O_lqU+Hhh_Iz+2W-pE1JdDsU@BZvP;zM
z)2-7t1R+<zqW3na!nbxqpMx3JRuc<1_=xE^*odj-DjU{DkBF-$ZPuu|J)4_-`dWx5
zK3dkPIcTOB`lT$0`u@^G8uafg*=w=Rhm+=9{vG|l7<;E6(Sl`Lv~An&)wXThwr$(?
zYTLGL+qP}%u6XZj--vVe{j93L88bC<j7*F*&+M?17tjzD%L>sx4ytncl~HnMvdD(d
zvpsK6?N7{FqU(SQo|}aX&AaVOSmjRATko;TW7`Oul!j|ZHfC5isUp`j^BMYb1n`G1
zooYr$jft(BIg}UdhmM`+0Mj|X!W+im4IT*AG{Tx}t2e@et?UZ&EpwUHA?Gjmwx&F0
z&<PXU`0bM9TLX>(4#flAz#@w-v#H7|2hv;AonQ$RkoqU9(!etAWi+@MbXQVka8^m7
zE34*Q_`&_hTbIvk!fUUD@mcy3sFRpNQ7w9*oi0K?*D?I&tW;<;@^o2efCJPew)h#L
z;tt8mQKC@`NlG=;Sia4JMuTZ^vo$<wKx_Dr=Nw|4B2I#3bolwmi{P0-FkwaVEF^9e
z`=s3*`d6nd9!Iu+sQc+{7Koeae)PaCqu#WnOWG*`2TLXB^WAf~!RbOT=jJ1itJxP4
zdS@f=XxH}E{bt7Z{U;MDe{5*)l)fv+m~YAxPcxWr94*151QlQ6_jBn?Wf0Z8_@L~r
zxjy{VTpsX!Z9}1XOgNw%!jBX!h8dOdxRSD7Z90uR^{|nZWu~zplr5i2-8%l976SEe
zgw3yZLx{GPjxLs`9qbr=I1*<>TJKu8FKR~J85%$Ni@O+OKci@qt?_N@Sk4AfNCuhE
zDi}NaKnc~x_%l$>UF>F~*-^y2^a3@(Y5Qbs)(#7aBe{SSI>s=7-P2cW<pv#1SMZTK
za$u1|Z?VM6Spv;~(Q@X&@6g|3hcr;^c`)zPP}<(#pr9`u6hBf#*RGVFPT^5rlx`jb
zX>kg^t0@2R%#k{qHS>E{x2z5V`#+xf?eQ7UkWu|ABj8N3K+|@oE-`%4E(#FM7Kt^h
zh{Du|q9Ug{eR18Vy0u{-Wa9VDR}x-*eMFI<HQ@&6Y*y3N7?h><Rz?@YW0>jL*eEzJ
z`RaD)OXP3U@F`NgdQ#8VsRLL-qApS{RUZX_Flq`*|J>CInX-!-Q|`)FCOR9}JDaWZ
zkLg#Yo0L~%f1AfgCq&`D<%UXV!%^eEdJ1XJN|#D+EYUZDI+{i^o3!C^P>(rZwQIkc
z1n=AlBD>%Yqo9b+pT%*S5dLitt7F0~yPS|!E3`O#YgYTn*>nt>Se-#fZn{d%QX69y
z1$m$vi6kT9#bdcCMK&j_GKzvhpwVWoB{y*&CdB(>GFf9vB#;M8qz7{epB|x(r#HT^
z@2G0l-%vTh%ULH=C!G8u_A?!dCmVs$or~9={p3%sIl~zP)s=wn@r?w)(#mYPD|of4
zdAb8c5q#57tnPpXM<w{m)kL#;Z_0S*CJg6fALL7cj7d512_4*Si|nCCc1y$zJVk`H
z$_BtQ_R{rPEbhrrbX#FHiP-ZT%ftp9KtKwVa$37@6@xuR>f>6mf7Y|Fw9$?tdSGds
z2cmCM`TKtf)`uhb$0w~HqH(tA&`PoF&sPCnK99s)rfDz$`3ucT$g9n3pJ9YgM9NKj
z?YmbRVs5~Ck_LftcI`QQ$?dZ9kfH@OuiWkB!WeEsO(L-LAxP8va)(b`;h3Si+7Tic
z@^dBUmNRT9y(2_M)`MwqL$?cs45;)ubbys=G7s;>uo@PZ4rfu&ePK@Bd`M|(!R`aV
z13&Vyi|}anf>1~|YjqNZ+c$hAwrjhZMqL#tJ0%WGiukuDaig0Eq_}zi#xkdu$=5wY
z`|*4T!a;?dZ@dO_*(yC|;-!m~XJH8xLI36)X=1JyCp|SzxW>AhHk4`T=ti=+U@G7a
zT28dAq&PosOw@ATDP5Vm`f3gJ;OMj*YfTG@W~-cnSOd`PQ59SL6R>XL=$+G_V@hqJ
zuO+84MiT4~^^EF78R7{J#+M{yKODi5Yf_m+SX6IaWYcfT69@NU?fLKnEqQdy!mjd%
z_H0r|3>s@p5w-n*CaOp!H`VF=MRpZE50@$>vLBqU7spW(Nyk|{G|AYXwSm<;vU9_Y
zhukR~Gb1HHJ;gdoyl&V=pOLgi%`%#FYl}M#-%76p@Td?f2tiC{!Zj1+CYJwFlmn*}
zsGDIY;7rA&%dm&Ryr-AGRPYWuXp?FlfS{$6M9&cCI%o=1#-)-K9JYephBV>KQe~bT
z_N5wQJg^+DQ?#)pHJf#Vg0<RUnp&dhAX_#2lW#jp8ZhjYFTDkB2BuEvnUTmzFiK97
z9Nr2AJJBkcuJSL;UYnx0xblE4XmMQN-PdcmNbt7Yr8USXn%q^GW}&S22RIT|aoOy+
zChpGyC$;YwUo&TfH!6r6gB26e<_i8r>81_Cw=Php>1XO+@l?bwY2)xgroxkD*+6$=
zK%4jIqG~}kE5}J4Q@b+IV#yIG2gZcDSK!(o@Oe3~w`9X)$7{}q;`F*oS4nu7%51+Y
zY++rwZS01u5hu@G!YkfU6x<NoEEb6*7q3TDMrOplH5z*U%^ee1mI%gvzqdH-{m(sE
zW1He!nLq#l8DIba^#85klQnTu`d9N=*x4#u7+IM(|Ch?IS-IbKgCC*$lS<S-m?l8N
za}4k=xxx@&aw3G13Xet<=H_Oaj+GlOxX726Sxh#2Kv8nV#{lE!&L*4P%FRIalv^ZO
zc>tZ+DSDkG;*BGU0DYJjsh@%IUI~4<@<v!Dbx`rJrFwzrb2#?yIj2tABSgpuEQ(<e
zl(ZBHmvw+uR5sSyy|;gEgFnq?Ks*>!42h9q4dDqU5U)rY_8t&X`!v&xaIm~%lIljY
zWHllKprZ{&0A~LqF2(!?5LNa2m1_q?iHyvoV8U9cRpDC)y*82#Ad|3E%=oiAGv(w$
z>XQFTI-Lq5r@g2Pov&p}`eD3T9acg*yX;H>cnU$)3E=Qc6LuWBI#?OYc&+=BKbkRS
zoV3N6-fUpz&(Jt@cAyS?-tWYhDDy&rj~KcYf;#6c++5>7iT*^|iajLfF@wd5Nvm3n
z5Nt)Dk0-XN`ep5actwn@N|V9F82gI3=JNIa9la_wB$MT8;b4u>!vgzU+ORSgJEkt^
z?rrJheVTR$&9$3tY)0WQrM9$Ra6dDIsaupiOXoMI&NuvT^Yg^(-Nm}{A_Nm&;l37(
z675vZ2S;X>|9XsUsj9p=6e(PIL?fRxS*eGi6|W2Dv%Bs@sVu2F;nlFiXVgy~$NI~)
zOl&y0ru{v58;g9^xnl>-5&$ijO}ATrmg8B@)4x{_*oDeKhYl&MR03d7AHFLsvf+5&
zP*OFB=kUIaKy}k}>UMDg$#ijfwekh&LDNJMV|k2kgE5)q3l<)gja2);H)h|;IK71H
z(G<l)MK{<ruXsPEuQnxU2QL?h*OlsPrplDI2<j*bK~Fl>SiHxVi=iGcH!f%WjgJo#
zKAzoLOW*T0KjCIFy&a$6e15lioR8iIUts@f1biw6@QD8mU;+LAp>Zu_ZDC^T{Qugx
z-VjIlnW;@9R%U=Dl&S52C#VqqTamE940V29aXG$`M(S#1{m%r#guY%gbvE5s>G&hy
zRAAlBay(pJcUHvc;R;C~@pJ&~cC&r~Uui?=5MfIet=dfX;V&TCqC>D5cfzE0!?-9W
z_hTI=a?YxDIW2Mfn@{Kb7cqzWqZtvf!gFZ@Nby^k`dwS$?`Wb81X2)!fed94MceSg
z+E118X5nH$+yUA5i5_^6*in$=+Mu|E#_4g8_}>U1ppa4GQo@6Gi}MCLda&edOOn1Y
z;f+G|nc|>Nc!ma`6|w;l%TAyW@B7#PWeVR2Y<=y!@au;f6;3JF#kY|myOxAz@ffif
zEt-f9zKLQ`ud7PVn~#q47@v5sLu419`}C;3MA3uy!^=+(?rV{TH-TR}L5G6pOvg9|
z_T9sW;1K2un#}-wQKZf|x%P0xdo^rgnd?TCg|dOqOTh2vQ{e;~a-!Ms(`_%o&;!Ek
zxlWW#rBO?5JZ4ApFAk+T%&rE+sab%fKRCI?(z3g9y*siuV8F%}7Hg!er@!F!(Md$k
zAHK)rdYk5{hYmFf2buYVed6@c=#Klhep9HiYh^}WOcC0J8IWViuAAD9U1K6i^<?Hj
z4S)JCt0vD{(3RU{KHfd6S$)vXU`R%>m)L+>p1gZNNe9ZpHR2`Vv@V%<h@#~yM6_LZ
zO#57j`tSC&Xn<sXC+i}B(-Bu3?6)S@#i6!=NO_PV@c8txG%}Rs*3bHH?U+1F9*l$G
zL$TPt_n4E6nAd~XmjUEtDfPA1|5B%vC96W8DaQZxZiH8W)U*B)jHAH4enx8}N`HC#
zOOe|CceT0uV*jgwxSd>34}7Cz94Ua(&Zk-5reuB+?(B^CC6PdyApef|1jzL7o5$(D
z4V`!R+;91h$O9bWZM@nh)0898MT!jf-h3ib;spG`7KW6;lvc@`T10GgDLXjSTf2q!
z)rpSizSzmzb0N!rOil4xZYuX8-gaPE4dVlS;2SF1X3D!M<Kt73IVc@Wm~4&jd_iuV
zGb?JsO@vJjJbo3c%bJ4nwyC%X8Vfv1kI<C5z;7M*1nbvJQBBy_3#Qc~+pAhR61GG<
zJy<JEizBg$xvNuDRavH48XweQT_)nUA<`?0hgv9;^CU8~c4In}k(M53C`m24i-5Mi
z=tHLXn<oOa=qll6K5B+dEyBaq&+_E11p6jPiB1f#T8>wpD}wkInXsBZi<K^0+1~Rk
zWEx)_p8;#i7Z_*Dbgi`6l}|DlO>@M8@IGQp(D({J2Q+M#@4UMoipI93$DQp;LK3{4
zrPjHPp$Ynt!ioRN@)sjRY7GD<pa;@d+h~f2pWP$F&HM#BA5(Dnta%@#rmIzLChMMw
zy)nO18bA@rqM1){3KaquXnY!nHiDyu`>W3ov|C<|0ysS2S%@z85$y(Md*or_h!69}
zZ+kN-^M1Q^)9dqR@o417n?v_9xq4^8gN+Vxq1lnNZvy%7S?YrhM)rQz;=mwiti)iM
zTOaS>o9I4J%w8LbTd^i9@~|-*ei|a!d04j9HImVURm8{g%Gjlzacg;%mUJ6GU8Jf>
zRT`rCxC)RGxng+1VtJKLs0X)e#MQCBqTKRQ6Exe}hK6Z>^p7{g{AqoNgmA<mW$SOz
z+Up(P4#ryXpK_ND*`N{0f*LFA<P(r}MTMH4{B%c6c(v+QjZteq52A9NSkbw79{ir2
zgY54IU&BMXt`0q)_IbAMUog1M0lZ9g?CmZrpJc)?H!271s&pUm=W<!rg`#HvsTrg{
zod6ET)i4?v$EGtj({|_2(4BXNkHZ>DnrgI>DzFj?juJ|r1aQOK-l^BpjI9=EkwMmK
zcE6qMf0-q<bp;R5tL&yyE;bDq<b9&*nII%7S)5y5GkMzX^hgGv(L7~%qeb7Fr)2R$
z1w+OHX6SW)u4MA<gE`u9hw?unEzsi<MMI)4B<KzsJTjZvQoa9Z+l>@XD+-WybC$A6
zadmo5)SiQ~_@H)#%vu(v>U~``Srv(zEtRIxey%OY6kB?&{dJuQtNsP}&!{s?K|E~s
z4{PV92LK@bZ>iV+$Hn?D`Bt^2jngJ8(m$e9z*tU7hGfI`2_x?LmDG&OpByLLxMW?g
zBvWQ)NC|Ew66iox=knXu-5VeRfXGCX(<j1uf1m!Iy>-w$AJ-Igs)VVNL?1uruSlOX
zr<Z@%?%v}yB0qL`5-%l*kJ^8MU;fCf!!D#;g{Eq6J-XMm_O{N_CWV`k#%UxEYtx@Y
zNGzj3+t(FBa%}?|{Z3G|K&Vkql2%H>86I&{tTRh+9Oe@1il-P;PoRrr1ZxbfGbT7C
zRu`LNDx}qasfP070D05{N!+m^C00#FH9l6}w_{R0O8#4DPEjmwOO<}qN2^XAU_)!7
z00$4BI(bY04m`n#dt~TZ<__0P6V$F<<mFXo8p=q-QP5kv8%O7Blx@&XNj6EJkmO<3
z)T$Odufu+LHF%8i_3pufv*1TO{ELRhjuQ)wM}dicyRU_}?QrgWO2Nii^%ooOn8-Hv
zXKE6ui6v}yA=vBzS8lP3gJpz1l1Axwukvwro_lI#Soi)I10@igkHm7?D+-k>E$r3X
z(ZT08GP|x25mrZAuEc=EDIhd;nP&3M@pcj~2wqmqLOq3FXC{e4e15PWa7fN^z7X&W
z=Wdp}g2YXfh_>jF<)n4F3c5g7jz1|u@4*?$NYAq4`|<*<U>pSgaIjdMq_z~Q$p&ep
zUZ1SAD(OTaZRSzY)e|<62pvg6x94jT-Zi!*WNoI_qRKxt7Qlolwl=-?t;B+zN}`3B
zu>hh~mZFAymQkEIgU41DO(ObG%vJj?diF`Za`i$07fJI@)197^`7kV^K=|+}RVWw5
zN&Pazg}I8_%ZZow=V$ciZ5umGKLaV4#ioyjQNp0~aB5V})iVEOd}Av}Hp9n^3@!|P
z6~>=J?G2ETL+i)^bT06UC->>%Ymh2$rY9Mg=3J-eXz$RKGo>^<%>eB%l`)uqENi;}
zEFc{H(Yg3|s7w42)&GiF4WV-k9pMp=fjIu4$B06Gq_5NjK0cO)Bgs%?$%33Py{XEA
z$o`l<r``gh&KH{AgeE#B1mNRJt<M*dJjx#Y4Ly?NHb9@a{3O(cjpiy~%z1dCqEDL+
z(|<tf7|j>IWX2ceD~=M;ds~DUn{jKjE@D;uqZHtefJ|7f)Rwc|6dDd(T()xgY3=h1
zm*tdzw1=ys=M}u$wWK~KLI8V!=Zn{h!{}$JLPje0+z|XluQ8PTOU6APL1|~~JRBv_
z3m~QMy7Bg<gq!gYVr5kQs3!Iy#n9M<-J5%1Zmk%eOl4uMR##V4DgNUNS{z$f&-7#U
zjvG-O4b;%5I!VpuAb%H4KEd*|{Z$c!;7-kjz_5CM(q01+W@quV>~eK!)S3CM0O}g~
zalX9EE=5xZ!Ubn%=@*#M_aYsZC%%41p^jAvN(XP5<BcpkL{uX_-}@r%M9Van$YfdZ
zd$TVXG4x5=7;7hi*+#Q3Stl-EjOJH9+Q|}5?pXPlP3)u8ZIBE?F2ICcrBgo0rGrh%
zUNOwDEg<P2cf`<T8-&ddXM|)ZT`M6S!NQHElN*32_WhEtzD6e#V#&1RpngxMmcv2F
zN{ttfUzourUNqm=(+_$XZ}y_>?0J2{F>mDp^O@^v-Uz_tCc;@c6f_>N>HuKbUkBZB
zLN53DKAgg<uM@CjpTZ~Cj%gb!>yaOF&Aj>zkZpPoL2z7ES!KgI-xRq!kfD#j-A3M7
zQ;87`xKkv^0HbgE0w={$bc8hjP2R>$<@wT;Dkl1bU_15<%m`q)P>Fr8EKA+(?EVSO
zyyZ1+|7$?ah?V(D_f4D=b9?Mv+$Lr;Id2=RcnbQe5>qd(5o<Zgk()80T^g@G%uNF_
ze&{kr=}EbgOeGwq*l*{b*-AZHy4K^?MarcE1*U9LV46HujaNsrxiulOI39w1D(86h
zl&h2w0hc<4k<G!x5m2cIJyks4ukXX#TwYwf8Bv1oP&!9*c|OJ7k8$LVjJ!W6R+mP<
zORm^U0$o8uC|@z9V1>n}O7d~}<XguEKU$J?FfT11`m;oZ1Lqpbbc(aFyT4y2t&Oj0
zYAFYygM?|Ecm?bw5w^ITL)9BZY>pw~jB9Ee^=VlCjB^f)6m>J|od*Fn4l9}wCJ^st
z@stB)r0deSQZ7^K07NmFVA;BrfwY1dtK#QNybnl&>)}|n+MUcPYyexFg`h*zN2&yD
z>p#@=WG7|-9hJ^ZWmLOuyAWH%+$T}<8R;966{mG;Xk4&#EeLEeq|Gl0GJmSTWO|-K
zSC&hIs?wY_K?r_xS;03Wk$lP+{}DaQMLI;8BNGf^R_+S8&S1D=94M8szs+vIG@<<+
z$KZ<pY@Cp)Wjf_I6pB`kKiDp=sQOZ?#7y*tMiepmB??gaW9xWf+0m8~>76+$5m$Uj
z0vLCc?}_Ze5ie-|y~wR7fNx*l24Rc@N^Y$(WW$&Ta5qJd<BAy_D!1vLNEM~ERqv=R
z#?r<HFF3z?3aZZSn67`h`JK?nI0c=&J!j>l&=@Q69ybOOLvo!gjHk7G1XUw;=?!rk
zXY4xU@68I@m&B<G2FO$ag&pz${*B+Hi=JW0^AeC>yjH}e5L=nOtLe^^DtXs-qMds0
zTIuzj6J>M~*1N@9J@>0oOz#2)ABlk;)+9*QNc%*Cx@z5N^5bpY$)9`qbanNEfx2U~
zYB5A#mDWh-@1mFH92G=+qySKu(rz8|AYbPmvSO!#U8|&*QTsFKZhbRWzyV$Y<judV
ze&X@Cu{X=N4qZ)d4?MTc4xCqVTrJQeS3*Z4uT%+!FL)PXvXS_><2jyW<KN6D%RvVr
zBWNx(ubz2&BgPh4R6Y9j8w)l%ZP->W>Va`!O^i!@p(w4`p%a<pWn&Zh{>H9UTM|(;
zA-ZhW_HSH7*U3QCm8u#&t;=lCat&xMNt6)g%C6q5!EXu9?QF}VRUYHo3^K<mo!JIU
zN8F-YcgH`vLI+W-z0;nGw|gaU_=kgjaf*;C@I$M1=^gb=gI$k7K*4GoXgh`}GS0ms
z+REsl`OMNLTwl_OrPVn~|2X6$n}pQ)(+ht)rGjzZ_PWt%t?%2t33_!dVQiM(cN3nE
z%vH81QJsCDovk+5D38#Bje+Zcz{fc%xw%>1*UPk1;kv1=(%0{9S7G%D%l2oPhs~y1
z>Xj3rW~<)k#%fFMgi9W_?HMox;GrgH6IEtIDJsWy5Z8k(#PknlywPC+Rv=2=FRjF)
z;x*kG6~iK4%S9Ktt^BI**5gN|>rBijK5Wm+QO~>Wfc6wfbz#+P>^63@YR1WVG@Q(f
z4ubbHKCNRo+=RJqG(u}kZ!FCKmM2z%%wW1JjUc**QJbqQ2D1tLmz1x!(r9H`GYh|n
zBT`1nEFW;q0@q6au5#QJ-Jtp-+snaFOZi(ZEyd`wPHgXG#wrI-QsP}$0e#$T#udRa
zNO?JKga?UgNLF7o)0rwF`JRF*jp)uhc5{<9`PN-H*{jR%;1VV4E-v%Bvx!B62hS&q
z45Rv;^vwMiySyLRh$)%!OAhe1s74;1+2uh^j}@8<xZU4XLb7`|980N%O>5re*|vBo
zRNll2GRb1Jkp*VGK*ZLkk#b{9-tP~2N<486nsR4L(w&Iv-ak`qS>_vkp{qJwF)gee
zl&4qEsUJmlxgwtIFp<1?KAz@<&-fD5@AqVj*j8bjJD!=w5**--QSy0V;8!qu2K&-N
zkiNM?Z<1BMVgNdzZ2m@^CPq*S%zMkSeHMb->L0DaXGK+i3kHZaaiKz_IjLU=hiq`2
zae`FYJosTp**w|My2OQ^J*x*5dVR!_5z<;HaeP~8oiSW?y4mlIR;gDpf2lWZ!(v$M
zTWUq1th#36``l(fk~Ex-xQ5W!>g=2VZ5*Zdw+u4Zx#?f$EE55s3y>=YJvB}WNC22t
zIWlwHwG}+8GmZgG7JOKDAB2|%;+|NTl3Ppdk%gvfh`&I5uPuoCBpOS_9U2$IDXAW=
zl!nYxG(ntq<RXR9xHgt&$<OLN$OxYon`Gdgtx82B*R0yB4ISLNbJo6%&@9&Ry+gxT
zlW;7J(z|~?p}xm@I(-Xjc&zNKa+(3c{8CZdj$%l;H^Je4kyG|O1p0p(o2XWFP^>1f
zG?t358vk<ks=G^95<V~6?v8CPr*u}*U<;H)?bkv$emezi2Ud+)O<r$5JyyN?HQtwj
z<2dd@pM2e;#@hR-*JsjM!f8+Pe)^LMbl~=cJPNV|<qT@WDJ22wpf<_#6S!;e@5|XL
z$<mDBo`!HrZqy|Dx@gxljQz;BQ|48N4b*sXTUv-!Nuz<97f28f70dJCgLs&*WdA{I
zKDD>baM-q=XTpb(RypJk!qmgU1m64d0#zi5a;o_!D^7pV+2%gRjNZ$X@&A>bK$3-c
zV$x0DBTS){W17j|mOSzoJYg-DgIYVm2j)SekK2*MWq<S$Svk|&yh@=L*Tx40>|7Yv
zNug_m#9Pf`S)$Q8w9sSjG(ejxCj71d|NX7pAGX`|IpvToJ7LO*+9Nn`p;56v|6(OS
z+}x~^u`TyAe@c@=A+!j_d-40vDz43ZaiIwq0HE=oyoTYwRdN5n=tauJL&V+4+`#s~
za;KVAwd^*;QG9Fsh86e+%p)v5>)`W*BN|p(Bs~#jJ2%Og*ADNkr=nSyYJ!M<K6C0v
z*GS@(=V|HEoZfq!*nry-heaJyFx`J&wr}k-72Xu(5k=VURL1?xt@j$3)0H{>C%MBy
znwRVHGAeSJA-e+D{IT(r@-2Xh#mj&efyc2?-&EZXVB|&s``|SOGOYQ<fs0EZj2LSO
zk2yd+@fQaG&=DqG5}b$(p-|a0Vy@+JM5RH-k_pYF=epJika)EQu`W*zRo*zDw9-?G
z1?z(U!RQst+6A3JhI2GbC3B7EO%)aVhCrI90m{}JZ_+xn0;VhNrv_8{42DdvU4cVx
z!3u5N5p~wDnd{UI&kC!~$UCE$h|x3Hsky=y7&_k3v|>)R<St+@9zcaN&&bPI{qncx
zj-Y|6J3-)Y8g}{^r@~h3z}fdG>Dg=eE8p@-n)-Z$!59ml<>u5X1zt!t;f#zjEG#_d
z9fW!%k##1q@39G2hU@g#1#`@D3OmA1o_Ic=ShS{0(Mz}ce354ofp7Mm(F4P;_VrzG
ze$<1#wY=KCKTKbIiG7-y(|d97`KJYwi;It8hEWz-SyQjUSMhb^YLi?Y97PM>rwWs(
zEX7DMo;Nm`tY~ZQ8&*YB`Ikn>+hnwF8Ak{@Va+_~)c$ltyZ*FMf|Og_(g0!2c*o7!
zN(OzW|Kvw&B9@ET>fJ&BTEbg+TRW(rh2b-S1Z9kPX8zD*xBlj1q*w=TA(e!~5Rgk?
z(bj!eTaHXGuJ!0GWf<NRS9_nt3>i(sb;gGtW)>(L-M5g|GsjSDqqiQ?mXi@eu0PF>
zc4o5dw`c2sA4X}1V*1_kYmfPLLiu%K`EBKIc0i8$bjoE$-ioEN%d$&)D4i9PEY)Hl
z;3{)P*aANplAN<UczXaJkTM*GxBR1bd)?>9ZzJ#ANg9_Nw>VlFgN@H0R%&m9hFz`U
zQ}_)&5tZS)DW-Z+dp#x?t5O%RXzscoqG}`4ff5dpdZnmpZPwEg7AX|T9<)@QTGKYG
z&!LB~nk}i|0Wh?syd8JdO9$<y%d_V5%|J|Mf2^WZu0%^&VP;%4c#-gd^+y5L=zyA3
zxY5K4Z$b@sH&wA__N#GYx}kq@id`I?!^jnU%vr0F`J7wLwOUh179|~mJ`w(z&X?HX
zvR%*zE8pgy%<<udD9_vN`NmCNj-TcP*uKO%wS+o7LIW<O)xg!`#qNFGsfqNKrnOKt
zg$}k;Dd&|b#qLb6U!ebV4=iiU8*2yv0ID_s0C@j{d$6`JbaJw$wRQPlWpKqhI(CPw
zXg)Vzk?(+?`ibMx3$5!z*B~}Y1P%cn$S7JZ&Gj_3BxLD+y<Z5Vng=|o!(eL#(AKi#
z4|l%VUhT89ex{iP(;0?p)SHIMEG}MCu`bQDZo{YhVqZjz3DdsmzinQ+Umurte!IKW
zH+VOGKE9gVzMd-tF<|9U-pR*W-?Ovx_!9n40Pl_(IM0R~T{MOOP=H(1zUuKN9$RQG
zEmWDVK=uhhb4#Pv?Nm`hnYg=Z>x{eCx(~;dplu|t{WgOQoIgthGD@mpRnfPDsY@a_
zk0l<p7myQbrijxoOEnd*LSHCbvnmrrFViPqk3qRsAa~q;zAL}O@>VI$#}CbEIU#xM
zCWudVkyRYHaVj?E=WxxKg!+P*Xy<+_#|BB)6@z~opaV_*eg~Q;v>yK(L1j)sQ2fQ4
zHcidjpt5ta$ReNh@EPBY>eBv`Uj4MaHZr5gFS<^rejIid^8kTT48+MCqZ9o;`(P5;
zhcxkZP@#TWs&koEE%!{y#UgUuBEm14j%)ooYTZnV`K~bo5xjY8R>}WKK}ZD~sO#|Z
z^mScNyUUFKL+)#O+M=jfwbW}Y00Z#8i3ftzSbu6yZaI0^)|?QZmKhMg9yht}^3vt*
zp0RmLrG}3SBsKM$BWYA2?nF$;087?*5Z^1@(<|0D<o$NZFsYUyzWk%^_E|@_VZ(A2
zVjRK2F?WweZukMr(}^E;z~jn?GCVCurC}OSP0%VRU>Ym_eEqH~jVSK*&i+f~RVy|9
zrwd7B{=vh+>(&0I&r|bak)vr?Y!49SWza2d_f&3Xj$O|;&0TTWaq(Xpar_pM+}4xs
zBL}}k)(QsbyxpJxF$&-uQ=Ll2&W6JXV$ODDL)yBcg@lOm(@DT_v3CC~?U}P38xPR&
zQ5{9eh(|Qf=Y7%0HR(2Go$Z?S!ds3ge(MU38A7rnO&EW&!+g>w!A8n$4Sg*;v)J6X
z_A+p58k$!4>QEWoaK}3;{*Z`5l>1D|#PGT0;^4LKPFsGeEB9BOo0o?g@8-1E@8fk_
zXoZ=J)w)|83O&=%V?p%DY)VLvKV^q|>o<kwwepH)H#@TG+av4dmejahLrCYUvUP`0
zHtqzeVQEna+y26uPcM;L=j;9J4`cbSdo|tF8YCzLij>`HoZMrkUDW&awvXvA+3!Lc
z*hB66!RKH#57nWzuIy#=5A@9%9JtR_VQ+lm(NySQ#z=AMT-ym3F6`xAxrS@M%N5lk
z(E>H!xea4w8WI1b<(ez^@@PeV^@d5}p;*8g=}{E}@pFc_OJ^<}iJ2X)!PGLHe8Ee|
zR2RPO&)Mrhd_Yl_KtTFJ=zfq0Kj3-h!wL-b0rc=B#3M_|L)UHZJe|E-7iuR2@A!t6
zAICfzCP-v+0_skVo~#^1D12_OJz!AYv|1Q|#q@9k8X-;2H54J8hOSu6n_A?0ekM~s
z$46GJHe?@d09*tMkcf3}w9St3ztz3AGN}G{_IeVwnQd#T&1nGNRKwSVv@Lp#(^eH}
z1_pKeI@Q80)#3aNLVW>2ZjB$}yW}8a^4FUP9JoNnWp0g}MI?upwN?AqQ?TtxYS!Y|
zXq?0VxwUJFrR`P%Cgd4TIu4<$Afqgl^g0PgT{6)eH9rCSF=;H=l~}3x<CdR%fDxNw
zT`JF-XuSCxVVws=V16DMj!Czy^~7OA%lQi(!tZ$k1QD06nsvH2kwmnp+Y$DqokOh_
zkAsx8YU_l%a%c838#=Ic?jNp9amgJo%a&N=I*lu8VfPw4U)<EqdQsa6R%5n}p~o%i
zJs(dDnJ00p*4dZY4&|#w=g)u(p%N|BP=D&`GjoP7b?^#zT^u!b|8h^y$1WCG)zsj_
zzK%}nUqX(asBrOjW7pSh63FBDdjA|!JHy%Rvb&-&nfng{DWpc`qK4yuXhqs|%$~#S
zkzAuNMdtlzRT<<{OU5M@alx*;7wSA`u4j#~f1*PR)IU+<!tZZ<2zz=mNHw(HJSZW=
z*UAVw5}T43d@n;k!z-DU%Oc{MgHc@0u6cc_-|J1W&w#P!t*kUhsw4yxa8%l`q;fkW
zq&4ouQoD)hj?zTrsnDE;yh%&NH=rGdmdK7-uSu<s*oE{}sA(~8Naw&!s_xny=t3&K
ze0=`cCeWPBM*Zw@$_DA227zZOTR^A+K2A-h*x*X=v4B{4t{&%Gw}46z1+dU3$yQ6E
z)0j@5AM<TsGN+gSG=Ik+6hW|Ffs)pKs?cMlk=1`<0R_guXxpA$wX`@d`yK&;r1T9K
z(w0{}V5y(Q9pWcy&WIe72ZYdD!S)5Phl514KrcPpt|Wv&XhKO*$D4=yVeQ2#LY_Wc
z3f^+un}JmS#e`7y#3v93`V3@SB_cGhriQ6iP^S>DzmjGyk|_$%ht$RmNN7f&SH>6s
znbYN$Gzt2vy^3mBw->@_23_W5PN4Xg(fX)f8I3hM9zmUoD>W_L9X!g!%+RsaJetW4
zaETHBD(k|tEPjX=q~Xzd$<IsX#uyxMUBf$V2RG?4ePL7g)<)-~lL5q-?9>q#1bd7~
zXF`DA)pJ>{lZ){csYuZDYv}8oVpBy2a~_e}(+IRM@m$0{3b9C<HATQj8c&RnLsPN^
zYeV24jgrkImn{Ql@xq^AxFP>@(9vh%dmaWsg2wOt#y!ol43CInU2s|=aA{C9TO#SF
zj0qvJc*e(Rp)ep%eS!q6ggVW?_7`Avh-LC3wSh>(C}UkcyVc+;hd`upha_)C6g=SD
z4<C4OKiof2!|zDE1G&hQ)iINxyx63Ehug6pp*$)Z^wEbJB}Bh%vQaI509{K9w<DAJ
z+5aA?i17p~5C)`K0xxiB_{+5sDYmZyW7YSJpbbxWw&$U)M!Z%0(y-godI_4-bP*xG
zuZL(O+o!2pEWRMk!92oMqOgv^S{?oRGhl{*9PX1yDM``1?;>qedFjNMU`<xzNQ@e!
zHqK%CD-dOjdPq_%-nh9tOn*?l7FD4{bM8U?j3!Ty^toQ#7RgQqsp;pK$*RVZOdOD!
zqVWW#?i1M>GT;&fu}OHPG*Fnq)L-9d>-lEMTELN79I>i3z7B9eF#f7rhPn|-@teqH
zxo)bWcd>>48nzHd!pJXxsjrIjkGO|50ox)MNgXSiGQt>|O2BY^xm2d)d7$#BXDTa7
zjYJ%YxyRMMgRh;ww4upM@Q%Wmp3UoCKpK9;FhgxEN2L+BGYpZ1tbu=;C}bka=!esB
zq!gnJ=HtpLdd382us?{7%DQS;%QUMWsSw?Gr9qZKqB<-UwivW>Z)y=%=*z*CGKuoQ
zj&dLfsRSu?{-o_v>AYN8@QvaEQF`?nipwTFs7-_jV=GXlbCP1nP@&$B&|bpfdM#%@
z7Wram?*~5z6kt2Hs)Tp45#!llrJhfmLd(|4F*AEI#iL#uwD`h>+OBX|BOPr2NHe)k
zJ%al8g;gaiPZ{w$WF72c45i02Gzv2pL<_^nN|kmmAYlKAu6EU*dkFPxdP54#^Qd)j
z@P4`VH_KOfNE`u@XOaw41w&00p*jaEKe6yC5km_q>&W@13ZtMDB)NbXQ>iP%$iWhr
zFg{WWo9SD>-cG(t{Gj$SX~Z_o0K&C9lqOME1npfmE&TYRzGS3vHb|S@#HHR3)pP|h
zR6wDHwog@7!T2Jul(*`}D_nGY(v&gFh5`gZl68HQ97*bg=Wln;_k3fa2-1c>`Ai~)
z5!4tnlMkt>9qvrOoH>Uw+3<0!9-I)`eYi+u2g5+X0i+Fe<(m*3ot6jC#v2Hj7te`B
zyeCrjMu4mzH13I0BIk5uOVrd7KGvR5fs{yi`U&a`m$Bn8y355TzA%Bs)L8v)2;(wL
z_e)Fs_A*SvVp=#^g^zOF!t!tD_pYl)B`+d)$T>vV$vKU$4coCB0VEXZ&#?T1&xF_r
zBwUiLPOWXsxP|u^+4I9&l+K}&T51t43|h~_EjmI)=Z4ufF+wD$uzSR?U9_UIp-%|b
z^ZwYF@zJ!b8_>9yzS4wgudrKPaJ-1-sy3O~<##HT$j>u@LmjK;DFhk5;~?8n2`nVF
zUiq<3;Qg<|){ldtdW@D;0*3QcX!>zM&Jt0&s$!?u?kpf$P9op?aDgf|vssEq>ZCcK
z*jVZ3{L+T)lQCgKusZ+=@$N1hJo9v<^;^gAs4D0rDV?#y2A~@woDeO06Y6@f0u76C
zVM$K=JRnWkw;t;m*1kH+H?hKmiJXR2UN$b#oe}ExiZ@W7mhEh&B(>%-)1k+j`rIU{
zO`hpsT}s55B9othcXj?lkts3ofq2F0pqdSb+KqSp;k@_iAqXe}WJ;7<$Utzk<9{zO
zW~e78P+h!m1mYKUe4!Ry1J;k{Z1fW`Zy%7kRjgR5x;ZX-P!_R4B2=hf-Emz8d<o<0
zOyS#DK_n#AdBH6&y~m%+#TADcA#7vsSRF1z?j2Luz;z(@3$FVXC>3Y0TGy3ynr#U!
zIQYf}QL4>JJ8WV5S9IFl8c}M^9bh}4s5G~<OM=7|LFY!vZCfT?wc$)DI-tyTY_zWD
zLh*g1Welb%S3>^c?usGc2n=e%p~8~uwg}eFvO};A=EAAwfD1!Ss_xtmWQLkh&7A-H
zf_9npqga8Y<gbQFL?%>zHThlg-Z+m!B!g<|?FWIz(EU_u+Imp~6R4{<rv&POj=Yiy
z6U*+t7|q_~id|4#80})WC@ZyK2|>O)((@n55pAnwDn()Z%sxtxu+foAwMfQ3ddMP$
zN>G(rnZc|EA<NaeVPG;S|Bl*CX9Q>H2551)NGeFMkABf}jz;G<@bVz=wUDKcl-%1Q
z%-J}PuA49jknrfv=PdUxl>>`9B_Jl&d>L9QU(V=iZL01aQB<z#5Y#%ucn)b-pcFdK
z303%7fIf?qGTnk&1@6yK-SB&=fWV;F3wn_*&P&YxeIU4&r<IOIBO}CeJ`Zt(VB59x
z8ipaumEze14}@1#pjS${?j4gYPK=-g!%}Ld9sceGMM3_ot`8l0MYTc(`IKE%$_VA|
z`A|Frmjnb{?fe@8^gf$imGV#KY70qxzVR4SHdIxHm=KwuE-OB27C>=CG9mav+^Ke}
z^KhynlImu5S<_$!v1@fr@3c={%>$e%g>_bye<-qQj3B#dhC8y%*`O}fH#iFd=HUX1
z?B!=n2of{&5_I$5-f3^jnL=EsZ`!rM`_T;B*Zuw-Z2J}j^>L}J>GC{DQC8{$@3jQh
zSwmc^8qNi!n$XopGqw`QL6+(jM>J8&jf%T@Rwr$)Yc|vmq^Y<gQ95kVfIl@Ko9x>g
zQW%haC=@R)_(urUtVJSGI)M-tjUbFrsol=u=SOdsAR2%qCUn@M`eiqbt2B`0zRVFK
zM+$KTv?|5NsQ~tQB@znM?E8MSwF~RLh&<4{sw(TQSa^3Zq6ZpMIn-srl;6?^32<2H
zh{Xa8fCCBx01uvtq4Wvr%3TmXq#Ya7<P4@Ku{o5BRn;Fa@GD%|Xt1y;{>h}znhgXn
zVmVDs@Ai2_EOq)N*$G4{bWU@DGqq4wI%YzVq-zky1yRvDI4?o<v=r3OpuWp!Y^W<G
z@Jj~dFfBc6oc}`34Dr`h1G8#^&T{JNJ4AiDfcLvLYGT}xZ-J_|wCTAal;2uRmx&qC
z)-||*2?(>ItFL2$iVe9k+NkMxgj|`h{JNoTyVlT;z$}^5b|E15zv2HUUP1&uowxFj
zis|(aGa>mO@DeBUe~5{mo1=j}t&=&eh3)?~JSbVsMrl(N;m7(rGUje6U;_;>bi8kF
zg~Idz6Ip38y^n+fXJNgAK&nP|ppD<pE0;&Z7kDvo9H6w*r`^mgcYD+QP`h$$KETAM
z_yKI0NMiFT8xK!>@~@>^@dDWU11I(z{R?S~3f7Q@BoU^u5N7d5UW<iBcign?<5*9k
zE`pLrrutfGMp2~i+ehi6PvzI0e15hbj@}NZ0$Qlra|dh?OYYS}cY<$|Q{{uK=i6H*
zY$sNUU@nmd6*AP2IZ2^sx2*>D5`<E^Fp)}Y;zHU2zr}#x7Y9;AiZZ#2>~PFgrF?^S
z=kxyS&9Fx8p=+$EX|}wM*SPWD5f|Lelndmoi@~6fMf+<6R%2ttpBUh?L#2ME(yuj2
z9=lV@C1q$e5wwH~JD<vLAQ(!u7KWqI1ZKZB+}Fo(iOVl@sJrjL$Way4wh_uTQAlI$
z)^1OiY9WZfx6sIOEz4>t$GUB~Sf$g2m8}{ip^28BP7;Ut$B=#2siojHiV4T23Zp*e
zE?TErnP>xMD<nj@Z`h<7%2KF*Lnu2EBK~+#4M-Oy4smBtyHO#L)(Dj+xI?tp761+-
z7LRch86OHo1!+hM{vwgZZH%V2X|~RHw{crN@oE-tHCDFDmLMl>;rya*rP>*F(b=$U
zlI@!N*-i3TIs5H;rd4B?j=n`uB_lkAv(RLAZS5W&eV>zQ9wNi>W8lwrOuLpkL_g0b
z@+s367~vNHi8>@MEI5S6Az_XfmiSrR-qqRrxtXo|RPEZ`_Uy9V*v+9sk_<vhLQw=+
z-UA`R9u-t?<098DV_)51cmxZ~(L*b#AV;9b=bS0ST?*s=6=PJ@RHcw%%yw*-*9+cn
zzO!W>P@$xZYMfc$brQsnQ1fG>s#c6>bcP-1<oXS$yPqw3KTy#Pd5|8)Dw^hvBo4z?
z2Sc9A14%I=@XRi!C)F-5fClwf7fz~A`;x>jB4aEvQ2?fnYeX5jmth66C<YwgZ+_Ac
z7YT=1qgBSU95DWgVb<h1pB!UaU~oEsg8Jhqs6@mf*i-~$QUsaO_98D=6)?`2&`LSO
z{H2y4i%6Ts=2oUeHZhsPR&+;kgZ`Q^!PotYVVp&NYudcDuB=x!_obR(S4GU1V!iMj
ztR*|K?7KcZ-H|P8Hv;+`0>WpL-R{Ag>2#g4sRj4cPdx`dI-N9f>S~8~mkx1cW*VDC
z?&^F38e5xqT-X&;IHjUY+i;s{GX|QjO|h#MIh!1m3qSF=Y;>I2t=Jkha?0{)aW5+e
z1<?7Y%?dh?T^?ZIa@9ytT*hGkcybJdOc%h+?ezJM`i(&h;;9oa@4K6V_YxojkNmFx
z;rUKFq~uKhnUQ@Fm`=a3_tn$-M3$ae5qj3Mpx6B7H{a*P=6;#d1X0erkyP5+CPfv)
zl$RT)%8?n~+6L9cO+|3(>`>$Sv0a6;$6a7BNoK`?l3N-U!G+K8GGgkhavGN6FYvw$
zl+~K&fyobKm_x@rXRYF>OW%>xkDlQi8SVTQfs6}-4~reCJLcm#L0-f9&>O`UzPV3c
zW9>J4KAnDtdzC~`cdwd6F~(U@ETx5PPR<h65g63*Y$!ae$4YtX5GMI7OjCgP^whKr
zVZ`^85i8r*E}7cXu>(d&qSify+$m+jBa@k#mlyg8|JWeLH>3?ggjnAE($s`5cShQa
z)0VAON}Ebfq%x;LGPjQz1+s1OskXB_d%qL;xcnr8XIFaBqp58wm+kEV%;0V&F_tCY
z%1>OsdDGmyT95$|gH$(;)J@qKOVad;Pt08hhRM0f)@|=L$r^>1!;)H%mxtT<;{|c|
zdsvnw&3=xC3*30<z{X)mfA^oV7dBqnzYE?O;80`^7$ZhE92W87i**PvwwFTpzyg2W
z@Lp|VOBWo-7rx4HGHA2e82OoH-&_*oUyxWN=edzt<Pj;E5(Eps8@%VYPKZIH;zB%H
zU=m2OhzixMhWpv%FssWAT@}k0p@;&Dg197h)MW5k#uEww4cJX^vRYjSvhqBD(pa^a
z;FivzxwvhP=riMRlwM<)JeRTg{xDmRPmJ<K?^AOH3ToSq5$`a`1um?BzrO9q$(?3G
zAKr4FG@sugP-+xO#s@rkGH9YQ)y7;fq5OS3`o%}ht4uZi^iqjrfO&*rF0Nl8YhAyV
zS<hc~UfnTD7|xkWe}oLqS)RD94Pgw|RRK+5d)i;&s*;Cw3kTzs)?0Z;^G&(UJe{6A
z@qmxx!7cO6K!@-BIoA97pqnuIKr=&~Vt0?c%#+-@bDv-)nAgQMf3!DSz-T?jRE87V
zL-rlkn!=XKc$jTF`oA<h*ZM!g4F5DdGymF<|5J~_#>&{jk;b0Z-ui!wmNtn7c8l}~
zp}n7KT~=h`b1Bx|c^4HCGK<0Se?nP7fS?9tx<>Za60WO+jlW!HWGDXgw;tVepLRcP
zJA->%TK6P!qJO}})J4iTm}bmOxEwpM=gz+7;^Xx6bxQ6vAbxy&0NGW)(?Z29uBeT4
zz?4evQ=+hILy}!(lQXfBE`(4AyA}vnN*V0q3oOM8A_XQXuuCxQ6<R1f!fm)W$s&xX
zE$pjO0^T<w#Dp!8OK+2pyAakT^h91IFfu~b7^vnXr6qNphYRltU}&J%&d%&==h_*~
zG^OYlJMT=WTo&g$Lf`y@qk0^~JbKox8HIq^OBsz;-{q6y8jX`{QHkG+|7gmL&3Gtu
zc8~4a>1T*PgFVM7YLblZO<<y^+SB#9glTe;J!8SP3W8fL%xhs&g-8j^BIt(fI+VXj
zMnu<l4AQn<f*Q4k(u<(_C1hpkc6;U?pbsLj|G?UP9yiQ>f)3~WJ^91xut-9fOS{Hn
zG}TPSZEV=g2&y(t3#y27codoifw@6eboppDDK|cuT`c>#Gn~~W(x7Kp1_9CswX2Ei
zecKvIlYhhKH{E;Gy=f`dyAK#>B2Q~*2?IBhe}!+icdt!+SZi0AY!4@aG6eTxPoFux
zQ2pws310F>pzk4IHnr+36N|>LRd$v)D97Eu5L`UWbkO9^sop&^@)5Q#gk3KtLFPB&
zvUc3|d7aT|?i;L=Vado0$E>=rlq8_ZyWk6bP^#cD`}2P>nzL<g!an{DfSkkx03i6E
zk~bF`QwwWn6UYDZD=w>R{hRuT;=5YQo)Dw_AR`fAbGFq4+rbM%-a@o4g<c#$#8eL!
zq9{RWfmYe;(=|>+s^OZ{B@GCa&b@l8?OxW82LejkZxRR`Y)2?Y;sSQZJ9#VN*lm3G
zuy<EV@%zg3)hv8x7JGMoF7_te;3q$|*QP%iJ%@=?N|6Nt21OQ5<QRp<WY$OOBW)N=
zp~)YB9uB}1Tx1E&U4LdNxS9*-Jp<JiaRX=u0~OhZ(IQQ*O-cduL?g-(1R|8RePn^O
zkI}C)kfPX<QeZNK7<!c`lEr>-^v;tyv<sU5_xb+y75|6*TfTa}ia>jfC_kDc6;z6G
zMwY-Z%Vu0%)(<wYv$IoU1UHX4+vJE-o;%>hq{W!6{LnsAU@Uxn%fa@>AZ-s?vkwtx
z>UkD)pz0?ZRk~X{kzBNCCmbT8en(4~TG1~0flo2wfPRY{?$ma?`$4z&e!m~^$6T_9
zt1GP%RfG>OsHmEvM+gCIpS-Q*tYne4LjePVQzA{<BiT*NUY%lvOW=H3^oN^1wb=QF
ze#)}4!Yo1OF1t%VC-3fB26@P`8sx8H{uy-i0MblP@RRpdh}pg&O3o*-EDkSoGj<-1
zCKmHXOQ>fzc4H$H!{o&Mny&Wf@(PCc{+l?l58x7gUAyp5NIKp1F;v%JI<{deAlL@r
z#R5Zp<>2dru%v~Z{Y2V7=Da@~rB=Jh!?Mkgtc@QyRxpO>mmV-{QbAVOn+<||ra##y
zSF9(ZmCQpnD#-VUpI2gcI{k)=?yLvaHWjCeCo+2)zxw26A4Qh}%)p=5^6`ye9n~8v
zS>Vr41b6xeo(ZCqp}pSc0~n=0x=>S}bCT_sL2hU=zdSiVK8SF$vjhA6Psu+%yeC63
z)_Ph7MLOHwQ%|XQoAo1S*qN(;G9ygdeDiVXvKJh1G_^MZ=A~7B6DeolW=@wcxau<=
zLaB%*IyoMJ=)BcKjx8G;)q+&Q)e2~;g=aNFb|{~|^?^*AOpuMwOl>KUsEBa4HItg8
zDj#4>Z5y{3hxThlM&xmMn#rTqbf+LEB+xdah^oe}h$DI8AO<=VCXXwl^T>56AN#e0
z=FJO|yG*CYagegksM-qqY;Gp&TCD3`SH&Z=Pl+~2JOom~oRcz2<+NeD-j^U%cuYD$
zl}}(cIjw&d2E@avT;{A1EetR^wlOT%7cFw{eMZiy&tVDd=&~oYFim-XbI-;$&O!6G
zKzb-U|9sF$(puXk6*M<htaQ%88$|7jj=cPotutiEVT)rUyj%G|DBtisb?l~*QTnd&
zcxfT!Ftjx^K7+098fO|`*H)3OuPEtq-NR~Hi;8RvZp|#4s~q(C1he&**{E)x=UT2L
zDBoekZ&I|;xMwank@;L_tSi%TMPxP&@lY1T3CwuG*f+TPt|>WK?XMOoc!l2@ke*G{
zg=>8syd53AJw}~^RjGE2`-#-czzcLW9$F5dlQ=QtM&2*A!D0-ady<z-9z|j{l1!{O
z7-{SZT&Z}$s312p1i&2z#xwVq)q5u+ST0rPP}y;rN!1%nJ7*^y1u@rI!zGG-4XgCJ
zM0nMLusujKMPzE#^}w^#+6i_!t8YcrOaC9jt|2^=Xxql<*tR>iZQHhOyJOo<C;4NW
z9ox2T>*Wpa;J!DkuWED#tIpm_^lPhkfb%j$>gyV2+PeJ!>n&4RVDfVtK%*F-a(_m0
zOW@U^<rj1O-Xkk~^mr%SSANU~MNld6O88v#4JsL>*(j|S&p$4M#K_?)V_csj0Um!K
zw%i6^TDc`9K$;qw+l-u+>W;Th4ZkjT<;G~rTBjW8;ewS{M-PIx+1I1yp<KT44}-KO
zp~SuQVX<6Z`gmG2{$9;3`YJMsV`%@{mQc^=&aE4|zG}P7edz|k1$O;y$B9H6=IuQ3
zA#<n(iR`}-!S`n<45ei1dluOjG4vJmu1YHR7O*N8u}!{_`$5&ejGNWOvM9L&_i<P8
z?md+1)UctKr-n1hG}`fphI_E`a}HDdp|zlUU)@>kF=is2X+gq31`d?NlysD+|G8Hp
z*+F-CkD6JS<=D8gp;`XXnJd-Y!S&^cbeE{I@eA@l7XlPl(Vdn*%YZI=ARz4j@=vj}
z`-zk^{l6|YRoIs9MPhdi57b^JMuO2M0?73-vn%_?6z{kcSlkVxS;1lXrU`<*AoW!q
zjXl1AcHlrd?$H-R;7wO`S5<<GPU81@(k%k7K0dfBNfG0oZsDnZ3v_Sy{bY;Cisl`0
ziWXxjzeo!QXJ=8r*a7~sq{MkkF8KXoSvlXlPT`P{&LZfT>+<#LYoHS9=>kC^T_!jk
z?4(AKf5*Ba|AxdMR^rz}KJev6|K%nS%8arU2$17>Lt}aJkv+^7C`xq(aO{%a@p3y*
zdfv=27Ud|8T5z}t^cz}%*23+~!cz7zgD`2S^JnYoZ0j7@N^-;mrk|5pUcmh=#{lt?
zxj>y6vcx76e}6|nK)6Iil|b&n8*+cgHRqo%;gzHC!|R>Zh(Pfsq{@LUkLrhXXNfhU
z7ucPT*U`}pVp_;3eL^&W4zp0qP*4aR66lW=;2t(p3h=)0_|s2n%nf1vw#D!#mF?z@
z+<!uyQjsYORyfZggP0paKXEr2H<-oILut-u#!Sjd06SpNB1mcYq%b+CMfWPzfknz<
zEVplpEM^w`lI_nZii1=4iaV+(!x>nP99_YC6<#YJ>)DKm1QQ;zJ2ujt2s!f|-rIck
z3X&&sB`0ScEb_byHsk@xIn#(wpc~p6ooB@|ki3Hrw`4eU>VsH$-#YSH98@FkWW%3v
zXAxFup+*Q`UqrGZ2rjw#nOk9~2`@NQV5{hW3CZBbCX>|sa*=!zX1;pjf@d8BVqK3#
zAiAA7$rB~81jNId4p`C%suS=%M|mW~{z7ARJLPfbJ_?IXY#?IHByd$>NmXA-+|oyP
zENlt)L|#7G3-0NJ45NDMzs)}K`(Q#!@F?CVqc;d}P9`1B4SE1sP?zGB+79z=b`z69
z7Zkk=-N~}R-UxS$6~0zJDW9}n%5bWkzc0yrAyuR$NdMe!O7x8D4MBR#{wY`@+KY%3
z5U*r|C3Ea+s4V#DTd@N*6Pd0Nx?7(JiV2CMd&s1`KI6ghuFlTDdZm%Tc5%aiU?@pp
z0XOBgsDP;>YJuPBBt~~zp6Nmt!3aZm>qQin;S;#4oW5wJj9l4eG+IWsrBq`x`M27Q
zRFGzne=rE?cq)ipBae8GvPAZCgaV^M@R^8?KtC_!8KM%6dv>vXivgp~Lz7C&EbLk!
z$>J13wVN#X=n|Ti(InO%Q&^QWgpVy`uD}<A_>2WZtCXUXCt$IN8B1U}$k)G*v|J;%
z&O7dXN^;t;Kv+CQPWQR=?_k(U&O)^DI1n6z^*0<aI((dqcBXFJw<CcqcL~_zvR++p
zKVP}x4-xjL)Zn23!#|#<O)binr^Of|%PJdDAaWEdB&GbuiN@)_Uy;+O45n316j`_x
z%N;=U<;DxWB?Z=w6=Q)={m76({>6DK4il*!U(8k(wh&<KEdzv&M3hOyM()#yqJXTd
zXnmt{lh<IN$3bNOl`2UAJlBbO&<CPO_$!x&)W84R2E>;k8{gFMBuv;M&<SaSY{DXc
z4+CAzlqlo+7@*k@-WRO^PUigm@ovQ|((j|2oJ*?UK=g)eoItOD1XG;FRZgY0cj(G0
zRjmpxbin%|B_2b4nMU_vo$hV5gQ39tI<G^YP2*8&1hrKsAKc+W!z4;-vBC^oK0@+J
zDYZhmXG`HZpv=?^;w@Cre8ULt&L>4!YJFqW!N9gVWlhg_C=BV%*k_c55iOJ<yv|2z
z<})=&TH?}egM}san<pXzAw7+ZDvc?V+_<i`3KmV9hDB50a_1m6F{`CzY4VzXE4Nz^
za(DgpdU+;bR#r^8>^MDn#lzu*c;J_*bUye|X?a48{%AYA>Y-#4Y8VHpo75HkUq$?F
z%@DJDoM^XfD-%kvn7mpA`ofl(7vaTg&97H5;d%!s2sc}01M_TsiFi)y3{03lke+a=
zpL{yX&ka<Rbp29dK(5m6T(&nj`g|v;uL2*|cjJP|{CK46eKIg;QSp7hW=1Jy69=!h
zxugAJr~hF07P_(D04Zmd3Yy;E(a1G=g@{RA2THr52E7(yO<Up5j&f_ZQStXVpYozx
zB+tY^UNXznX{Gb6r@t40KTRF?G$~p{)lnM59P}sWFfXph7c{*Gu+Q&9r6z;JJRA_6
z4U(ykmFmTnV{@%s+#RonY37*AFxr9w^)e}Gr!o)+yxXey;$q;)sc=_ZBYpYW;9&j`
z(g7O|WDE=QBlov=c^=N*)}IeY+Zg68V9M0pdS70?<S9Ct&@LN&lGW+fAXI6GdwZ(m
z4ptm!Q>NT>#|HiAkZcq2PMm#(K)UeKv1x;(<Cm;zqWLyD+C6%C`Z`Xy38#-be%emY
zI%-Xzxd#F(*m3fRmgoW3v!j$6YI4vxy)p$%88*d<WPk>R4C8<Wt*pns$jQJbHc(Ss
zSQ@kOyZcA0t2rruF?fm~97$$uh<U8zg!DE6(rmz+;S0FhCXI95@3G@Fo+OHUiogc;
z(ZacDa;2s+Giv8Q)(Z{5wHn#X5b`A@9<Hvjuu`(7Mu4Eo_?{SB9kUr)SX_;8`plO*
zcr!fW^LVIFddu8T7r$8=C0yw&{Sz9b9&fEw<5+8s`f-OrRidgk6Nd%|&f{$tnB$|%
z^0Dmar{Q_#pH>(dWB+*wIn!fs#``J^dWloKm<Hc8il=uFXbyJ?_bH5i882~A>~$&{
zmHKGsJNyY6w$S;~4b-ijX{@j8eT4MokzKHw#^d|-8l=iTOLEBTFifEB-AS8pf>7=I
zqMJN~+8vAX_J^Db|2LgZcfd8|;xfE<3O@vaGEMo(%iSDr9tUt<^J=fS2r7>Vlc-6w
zf&Q%_0}v@RirW(fk>Zc=pm4&bKn;<)>=L98If2H&siC;}IL(&$7h7edNnZju#$1+3
zZYR4MO|z~bk_9fovj9XNK5QdjGGK#=jM5NFx`=2-0nq^}AQAZ0Y+2{TZow_Yu!QJu
z!xAdBPha%eNy!9oYePTzd^SLrbt5Zp%D)A5P{~_UO2fKMOE}+~+<oRR?_r%efyL**
zzyL2&u`3@;bt5$_S?4wD+6j!J*0{tX?c<H7Sd1I`QQ?B!2dG=7k?R)(cTRhliv_^j
zV17D#+l^0m@az+g50b={!$k*jAqWTw7uMbI1r6UV@Q|6ub@1#PE;qKyI`-^r-Gv%i
zo~c=NJWGUc;<UCZV#8AkuoQ<9RTIVl_zc6?_5tyzI)lS{Ta-^sfcE|kV{fu6gKhxq
zL<G}<tVAg_yv~`rMZW%<7R(|`)`OR<gPbac#KNm#Zh=&KpDSxE>NP}n(J{4~f;WNb
zb5H<CIN+i3D}v(skTQCQ{8lK`CH_yT19l~8<(#487c$r8rHckoPe^Qc4m`|E+6?E4
zTp0K!Iv0SBI{Oze2z8Ni(MGY+e3n$wA6auT@P=U9W3*a2HeJjnPi8<2_XmSzpPro$
zEH+Oe)dbg|Xxu-x?FJ_qO-H?4@=rvM(>D_2-fWrAg(#nFtR1%EBwIfkf}Bczcq%Gj
z2Li&?hYsGVqO$rs3GrBK1O)iq+ZzLmj;Zkeq6(Kry_TARqIpNwir5u}@lzcVyg?5$
zEzJpRw#hg0QC&8<vdidIZY252J1(_=6uRGO^d7*Zd8_pir!GoYlmBq!#P69<C)S`b
zH~=OvtWPpSg`G0!31|4tQo~;C+8n%#WB(-A59X2r_=5b8aG`!tYbOJLi8cCQfvwaN
zM^R>#yKBRWGojCWr`|4ECD-T>4CTs;iWwrv1IM=g9?#}1VAB3)fFl)+hYeYo@BWiE
z1XeQ^!+{LAT?gHn8z?HJ9gno#0@S3((vlJ&pkh8wh<dNO{L+Wu#Y6SiO649-#2?%k
z5fkm2G^1<D@Nmn$1|>vO-aWH7TAGJ38z<BZox`qg4Hr%q#oJ@4pr>EUPffmA{-w3T
zPx8jA(&Z$Zq^9Ep>PsaXDZ<>G#Mr>fm)`1Q0mpz8p=2GucvH&jl6f=M83CR}5L;IQ
zk+`P#+Gn8Wv%S|xl9+U3Q)@YZTOrKt)lzc;Sz(883BTy&+vGo^j4SI7kEia40KZxK
z0K%!$N~uHAdbNW+aM<?<siVJhx0~6E){EAU*7vww)o-mG%7227?_$vc;L0fgoH7VD
zSS~j&&Kk-u!du2YwR`DfmFv9ZRL!vy0qT1qIk=_oT$;z`fsevIWB1*1s;$>I6RMTC
z7XHwg*i~&SKI;7il)aT{df@x?Xc+BfE_g@|?%LLNo6T3qLOy1}Zz~4+D1gFQDsbhR
zipbV4iNUto;NluW>BIVw;f$J|y*l1U3`@#iNT60u*FK$|IN6E2Vdn}iM;eCw$)T5Q
zKr{~=mAJ1Oz-0|V7tsYudG-7A7~CN6P7zv9Y)yotGI~6AZS|z<R1!w&I9@SkX!sTV
z;iaE)N$9L)y3L#BPTo8)%*_)3i<yBHS6XP5V<&%2fQyece6;g8dYaW>W=Xoaf|3n=
zX<-e)w(cq@cK!#cc5gs}bAbgzOv>J59Z#M2A{L&dW1ahi@>6d6k~8+|!Ml2?3bx3;
zRWii<qYy04=Z~{FH#1C+C~#D5klWjp{&gJMMn768o(~pfYtOqB4QSRLv|Ar;TKYH1
zdmewY2s?DoocM3(ccmvH(7b}Jja>asZ*lB-u=-vkB-Fct&{|rcuMlyPk9%@9&#GB*
z2asw50druWUTzHav?^e~{-nACq20X-I-ReZ`<Rq|mXV+c%j_kG>&FCQ4!hrxF(qGO
zj*&*mj+Q%1&G|y?#B_#3M1I)yG4@zSDb7n#oh^nxL5-~!+}J#Ln}lw&`eNYAkPm?z
zj_IVdA71c1f#ZC1nso>E(;0W{JU>kTO^bQ-h=N9R*YB{zWLx9gSW`C4u$t7DO6Y1S
ziyd`l4<-dgR`RD{ym>dOsdnu5{PRJ5vXr@B5-y)LQSSUb@4IhH^(e#lFLL}>yEWK`
zw3H1)*>P=XRkvj(s;AM;;ONdLOzm~B&|n&jx`m^EG{2g#b460CDARHtv^eJ~^c4ek
zSy)(dg|GPk=}Dcxirao<u}yTQBUQ~o(5=Jusf;WG+l=<QDZ_4!%8lPig5<{SCD01d
z<)xDVaRcl6zy>v{1%eIPDRRCPkV%(M?7zRvyTzs(cJ>Ay=BvJGG-TZHK0Nfn5SrG{
zHRCfa%ZIDf4^ephil>WpU{bJMq&f%YhUs<E(nQ$M1>O?D5b6P<O&rpapzy6!8-tL&
zWC-svxp<pm!IstFX~==zn?vnEfH%Z^bwdqI=+$)hxKW9AVVJLr@G>kGUjxcpZ5?7m
zsj^^@m05z3ui5nja}U<U#8{Z{voW27FslQJ<&w}mOzx1-tWvo8P#t@$Ux-%WtR9TB
zz{P6c(YGcV`Hhe1u22R;KinIqxJDFXfz7cGffeS_uU4pocr_9}Cj^5Piak^RcUQ^*
zRBT}q@z?$g*(kg4a>MN)g$IyI=9z&ZU07F}r9il6vwqqIr=95^6(Lc!Hg3bZLvU1n
zSB*Tel5CR%dNv@nelJ_0T_N3E`&2;l1DcrOG8r%%{NF_c&fn4F6IRp{XRc41jJwcJ
z-~YM1=#z$$DFp)p0)YhrBKR-M3o}axXB$g9>;GpTUZrO1yvBj}741JbWQd(a!m+Wj
z5r#acpoc6EJt{!w%s#NdDrV3$^dvzHoiwxUM?H!OOM2OL6Ij>S5tr*be|7_O!D;>!
zF2)vtPe??=0$+ed0VDP|FhE}(u!!>Uj&}tD!VVn)5lpvH|3ZBW&T>Q?j#VQ-0$V^2
z$MNvP&;&+P4-pZ&mdg{%4Kc(Gg#@kuK{r9sv{{x$nw5jxsPlwnv;<J1GaQ2%iU@GZ
zSV#o$ypkdbklgHRA}i6~LGvgfQC^^u4c>G??IqkOtO`Gx1WLTnqM@lRTQ++KKUu{M
zJO42-9s@5bYRhNLWWE8*1Q#Ox=(6SK<5M$o3AnFCZYZy^y;w+-A~Y*7ym^KC2zc4n
zi7r?4VEfeouERiVC1!}sy!Q&MfnhgFDWPd7GyCoKAfSmmDM7l^XS{$z)K>^FVjxGs
zPPpx3U}B6V+Ql6Rpy5Pa?|MHj>=4-zVmc1wD#>2g!v^2TYOokIu*8J8tBXX*bXa~K
z2OumPE5{C5Va=Ur|3+%9QBdx)kin|<*iqHJ6PbZ4tNCo2h;`<6$dYY<1<1F|_TZYF
zSI@sE(_SeobTf}bDJgL49v7{T{R;+&E!uvsvPrWR+s;61WL0Oid_K7joVHc<#VBc~
zs&uk0h9qE-Z{yu#Vs#tk6DtuCEv;IomX;5c`oi+yYh*l2xXc&sNtfDF8p#s-_W#Bd
zzf|d`Jlb#}7A%d94237#@acD1ZX9=+lsF2Fu7ZJG_bmq-;b_t~MRGcwAe)?GR(%2Q
z7T{{|H>R&ry>z482Wh=21*?hGB=)x6n{}89haTy90fs+w&|*#va7=~AD<-ooFFujs
zPLsZj?~gVb$w80n4tm0i(=}7n#-J{Xr_8&fs|uxD+g(qY>oQS2*xqX^j7RA+o3;^s
zaUG;dwm+dvJ@Jb*0qzjIfG}zBbBD6zTS8FT^>J2BFr_(Ht?Lx2tGxOQOnN5Sfh&^E
zL+VtHor)dfe26SZIt1?^s5i6lZPVl*ubryv=*JuuYgT5ykxSOx2<wRedA#n`|MR&w
zE)7?|P2@ugf`hycFa2!(u^!3VJRy00);_zChIUlNhYLUX*yi+z(Bbq${!F8&*)kCN
z;l}uv+J9?z98P%_Z6B;`w4E-LWW(21EVPtHlg2w+QrbgyM5DNV2c)Py9m4>ebn16E
zxjFij0ZL`X;Hot_YHb>m6-f4{B*0P%$)X`z_4x^qvBAq&*{)j0B?ybpf5(KDE&rCF
zm&1ti1}|!CVNU+_>a8SzX957y2998<#=@izCMBRFbXuEK1S_PWe~(N<(kB;*dYW<a
z;_?n2$9QS1Ih8x6TAB}xN4a&Kir!5Y_^8*AZbIFiixZBJ8wWj1W#hY9V?+FHNhIb(
z^&8Dz3)C&}8{I$5atGM5=eK0~)END-@UO;Q4*S4ZueLQjApOlG7sAA~1iTw1;URx_
zN?E5urY+(9JIIwys=nTzoAwgi;2#C*_Gke3`>#JT`{@5}Z*NtN9l)Pst_W;f-5{1@
zI*!m>?A~S^+b>;xfvl|lO#ptf{IuX6q;Ks16aG#MCF(r}e)zyRFd(A;0)IbJE@LN8
z2N(PQ*Z<Zf?Mxz>Nb2)-rv9*XE&#UW4GL_6tUD?WYT&l0BP2jL@{d$621rBo^PHdA
z`PrjA6S9q@gLs}+S*tG~tfQ?w^Nf6LXx{PT!RLMbA<lp2+w#-DsugYf!+(C;JnHcK
zvqwLdU}$`Gf8aYO*58vT{O@(oApLp~$W5HT2#`@d<|h|{yPs#~*6^`OlVSdgVY^PW
zxcs~aPY(V5;Di43eAumu!y3?W+I9!~fJdEA_B?;n2d|$r9sBLuu$6Zij|3!eG{JS=
z-a*a$nE*l^ceQ^|PcaP8OJ3UFm#w3p-VeR0^#L59(}KSmbbIfE%N}muEP1>%`^(OW
z9>8xv25m2<OuGO4tMr!~oiy^k`E+OGnFRPpUHak}^XPI9RPht}cc;1j#oa!vd(6h<
z+5Nq>Y6t{sY_*%|SP{!gUmCV_)w@)N1Fn*P3!7~Bz}%FdOk5!~2MSUv;~8?P3pbA%
zymyfscjUwIy(h|VlB5sLGjdIEt!vkrx*gxX9kAK!3m8}ag1;{rqWUJg)8c`$@E!YU
z2-&06L4+^p<oKR`c>XK?2HO*NbZdcR?(vXkUbJpMFAoa3aTi5Ei?4ON@4;E(Yap5T
zPo0474b!h+a<aST#bv9zhEDQ>`E@-wpc{N`7ybV4%loAT5lpy$tM!?#Fzo}aOsV|+
zsYheBoEbvhN8X22dQY_ayGhG>_1@#TG&Oc_4XY5qTPEsly=7H`??pHmfiEbl_I>Z0
z%-{HKnM{wM29jQ(xbp7w`L9PxG2=Jq@FR>46q43q-2S@$0mimoqHkwG!{H;C;Ea$y
z4MoGSz8%4y?wj#DwpKFIM&x}?FdKtcOWOVR)-_wu_;fDBM_f;h+cK#iC%${Pxxn~!
zTFrdesn0`IZ6F>!f8sr8RSpw~md}yvoFdbwlsCqA`|{=P-1$Oo0bGmWmny}23u)H`
zytW?Rj%@R+(5GqV$J2`{uQ&~eR{s7W{WP=Zn{%R`dzwcNZ}Ix~TkH^<R^Bx8tMq}u
zTGwct)9d>IukN}7hFQqt?=F}9eQLe!5FkLvtkEkBy-i2T{^KO2g>5F;)VrNNTg&6q
z11O#i7%0ZcB?cGbBJTikKDgI=iB20;i3twf?1%6=X-CMD#p}`;6rO7Y-|hJZMH<1K
z*jCd0)1$pt?c*)4KQmsdh^6N(|Iqh`B0!DHB4X~2sV9sUMGOH&`}YF;klZ^8<OM}Q
zFeD9Loc?j#wEWX_DJ$HU#RKomEr)(|na&nIo65z|uvL?8uYmr)4K&O8u9EeZfioxG
zcfeL``{Eq%)8}o==|93*s?-^BN1kM<VfYQJ2I=9w)0PZf{w?!>^YrtSVMf(S9WH)8
zn$jIrmszeO|Ch8=AN;(;1M}?cY4I0XlwUgIA9P!%E0QfvS2pZA&oe`wow>`<^v+=c
zOLrgRt((^fhx1?eGUj!!&22ly)Au@n!Hyd>wr>4@FmIAc_ZK%_|LmKh)G&d6S|x0y
z-miB(R;tyTk{V&s(m%ZqXtMcuw&ye2S<e4`TN%ps;!J*$ZsDH7t`45w`bc(mh+@#G
zXcC^^$39Oyc<fjgeq+rDu|^&2o?jSZ*U*DCZrSgcHbkKVfE_q$)(6-=cYWdS`FR^n
zXyGwN_ZRK(YTUKgx;|Ce_VY!@(Hw6hLFv0;L29g88pK~IUY8ZWGW{QRf({8hIwaKs
z?>`B68x72ps8kQ4#NSNdvtAy(G^{Ca>ecvWTkkXp<a6EEf~8Z~kIo}fu~rtC!5URO
zjjIVNI}dmW9kf#(zl650w4U5PFfB^Py#89{O6}g-8b05B$rGePh1{gh@cr{9+5~^L
zaD6mnF7SxyhzPqCIBOj>dN8R@?IH6IcB-y%?YVFbRl5otFT=T<CZTL~8b8MPjQDzA
z=YR8x61*B)#&`gR0nurC-Guvo2M4ZRyWJna@cc9I=AocwM_^a$Oc#&2JCVbqGxNBc
zcsTe(wl?hjJK{;bGvQ(Ph%5H0t?+<*=*gj7?_e*jvJ>DRkV>PPe8-o@+!pjj?}zn`
z*{enP9-w|&VEU_wHs_x!Sm$59k?q^#+sehkko>FiEYg@HxQ#hD5Uq@jypiwt$<h?o
zS$z9%O>jl@V*-Tzm+hj}IoI$*ME^~dvy4Emw>Wcoca>1{ccK)KruAhY_F^c(?ppp+
z7|yHRF6#hv3ff;=uJug!PjQDXzzhp`O>@_RaHIaPvv)dlzw+J<lRAe~zTfgppwj++
z-~sO6hM#yNmY2tG9~ajtFbfZ<{9$a17%d=^6=#qS#cnSw8&?%lvZvI;TEH*}g&U=G
zQ$|^@Up(^HheadxLRdn0K`K07c{Hk)B~Q%wM4}d#U43xB&DdVAUHm`p#6MUv<E}h;
zoA>4&TXgM{K9n*0SvxW5Wg*x62gZ<Qu<_|>IUT$tiC=M*7J@Mgf8I@hduV0$9Hmgx
zYW1Ez9{MLWJ%={g85qVh!Ui$}T#II5TaFgyVr8R()b1`Zl;t<TU*SOlVP56z3Q7$H
zz?Ef=Po3UsAA)*?44l%IrPlNp+6AT4a|iTjUoLivvgPN`r|yXw?Pidh-C?L=68TS?
zo4(3b{i|>qO-y%j$akOe=Iew2(6BVHHc3S5tg~nKn<rh>?DP41{+N8=rGqBZCT1>T
z7_-z@1kHr><XPm~2)XDm4bU_<)Rux~(ezNAYh&4DUYIfLn8WgMGVWH3sR5KRW&Ycf
zN87ph1U-ZL&0${7`9MMFwton<UvTWB?oD!R<kLLw@~jh=mh}KXA!O?Vp0h)c?Z-XU
zbby?mzw<$0sWclM@3S0!e2y66-kd)uS-p;;l@KX_=&<W_==A<fCYd(8-6&g)wo6yF
zid1YRrKi3z%s=~NB&AGOrUVHL4rwMHPru{Vm>v^aoEjM)m2L$*7ZjalSt!B0UGFfV
zS@qeKj(*VjBTiGmvU~oENA!7EC7~7n#>73~@g?gP2KvdlLt!tt2k<-Kwo+TarlIUk
zm~H80e>O>)T?PWFGWtT7>hbmBB=}C<8YyW9ZzjYr^Y>mIf<wclZ{vkO0H>9Sxc#Yf
zGZzM5dvZNLHRpmFiD*-z|E_icmVt3LzH88rt>e~a0P8G3)1tYfnsIA*`rM!$i5WeP
z-=wamhv9`Twa1XxY)R#u?`hn}b}|7EXU1@?J^ncyO|>ZJl$Vjq*<d#n<ixGoL*YF7
zn6a>hAX3dItx7&gG9m5sL#E9D{@l{Q>$Xr!x(*F{aea(4<3_@1(RW}xaU$J#fnMDt
zL_aFOfPI4DORihcX2RD4zkR2ufv1`iHf8Z3nAoglH~Yjas0uG_yvCj4OYPZw#+`G!
zN40f*t@Po&OhcB8iT(St>CZEYY9*osGFIWwoR{}z+6l9^LK-*~Q(6gg*<rKMyE?}Z
zb!HflG@9$W)y<D_tDenQK%83qRK593mM_j1s6_nCSd+Ozij7EQ26}N*E1+3cmLyYZ
z;6W%fMO|w)s5lidv}6A_cOWd}L0im;i`tv<BL2c7AzJud&?o=)HO97hkGfxpn7aCi
z^=wK49da}CE??e*(}O}Et%SAaCQ%n0HPA{8;`dxow%X|jqfJpy%R-QgT7+XVyyhLo
zRU9MohJ92@Qkg^VyRD$oc(s<9^Py+97APOg(g>ZU{0ke-H<El$T=y<Y9e705t<o>4
zc6D2M?Pa3(HZJ=rqvtzyV37`;!##{2Gba7A^qwyx?T9@VR_q7o_fJSk7O#(|2tAly
zB@IDzhzKVbdFg~2uO4h6g=*+#(1c3PItXzUI%(knRjC-?$Zz^XDuXQj@U&rNCk+~(
zyA_a-W@<gxrrKaAl)pG@KwC*3FkhMINBLv*kgp~d_Oe!1>*(YKzvPJ`$z80i4ACnb
zN)E20>Bl+_ZrsY}9%v<mB^m3serTp1*ij-vNYkgs)xFd8leohN_n8eOsIFo8u;)_`
z2^6m+!1&^Ki4eThuM-(K8eQ`4*H`d9S{V^f@9o<-V=t<nJam)7;#XSk#j6)|`&%hn
zLHtNJfud1d*GpD(Kf9_v@sgE1QFy7rvF(2@+0I+41`o0dtP*+8ndp6o{n{#T$G>z(
zwBo;*e#N~UzP&|0#zKJjp`pntk#kE=9TGHxm(%n4m#Jyer84GWzsdee)OVv1xJo@I
z7=5EyDr+J9R#iOyO%Il+kCp)0Km{daub0wIL!w!p`j1w^E2G4l+nLM1sQLLrlvcv?
z(0|0MX4DE=s0#WZ4$JrbjRSI`LZA$XonMsnZ~GIf$G%@Uf_6J%EeO%s6QM|mC2hyK
z)OIHIDo(AoX#CQcSFvTH%|&w19jQeqUFrNN{hX2!Q>5PplI?c5eK=u*Di6ZqJWYS6
znk~xvWQ}DsVa?z@;h!&9Bn~i;adl--=^8o#29fyrJ>GB(YWL{V0KLrdcK<#xV5ulZ
z6OsYn5-4S@Ro-OQg&p|ci1BkqmffJUh+tq#STYu$d^Rn61b~MyCpPil1*(`>N`pH{
zq>UCa2QacvKy;ejFgAyYNP<G+W&L+`by*$_?Uf&i7(;>U6|fdk{Lzn=FH0DLzoSks
zRkV(F6)T~pjWV)QX_#G=Xewqj;0|u{MBveRA1d})(Y}E9VggjFcXu5*apaGGA}PU2
zClB1*Bc^N4%Y+F4Z99+NO<f#8jhd!npajxLq!SZjj9POD{_mYCUMonX<2(y+`f~71
z-990bOo0Z1x=sr&O<)Cjh^J$@(5;mMaTI>i(Yhg2jO#{P(cLmX@H2Tl%HDbQ1K6_+
z4fJIpnV|vN?xL+A;t|9nA%}PK(SgV8chmE)Bb!>YCU|kjlTQM90@(haPH*C1oQ!Kv
zcg`cx_xYm8;3u{AadADo{EB2}^HCg7O~iE8sh`YpNW}wSd!4a+B3MQ&i1FE&;x5L%
zmd%es<k2l#G3#C!jkmG*24R#zCK?4W<&A{kLTQc-V0iUW@ItD1cd=ft=g4@;fQDWJ
z^yu?ZaxDN<y@67~nls-Degq+k7|hoESZAx+kyV<o*e{G`2GAoo8%$zb_;Wud_;7Aq
zC@q_4LUosWDVI?Ju#8&b$-NZ!1H@WY1MDRp(K`7ldm>%)kg)bvau%?d1^HiKTFsAC
z;q0A70>5R<8c%<rVb797@%Y!4HPeZ-S!!dPANWw^_eyGU%agHw$BiGN66_423gTCC
z1iQ#>om5E4_ZnG|gvwDfIIOPi7Hkt(Si{6YivPk;OTL?l!IJbO9tky7!Z!q8sMr)N
z-`xHr|KJphA8yYR>6t<5hg9$w6(Ej6C^)NOX%nUdo=w3eMws6225<f&QBZ%8d!A$R
zTaeNn(9a^M4LLgm4eOgciEN`!)21fgXFatjqcqsnZHMsaG%6qvc+PQM111#%HK$S9
z!{i;!Zm$A6beh?H%CD|n0U3Afp`1|^OPIp?%0;mG-Hu70=U1-#uopJ^ApL2FrfSxV
z-Taq75I5JPI<^f6Gz#k8q0LXlzE~_iZ2Yn4gJUA(R3f^hiFoW^#K})fhpM>Zvn3$V
zOZ!@L-$Ro~z7Xo(>5kN8HGjDE&4iQ_>`m)HGCFKPmc|Hjkbo*^W8<DC$%X9vToY@a
z5V4j2zBAm<+zIi<delxXBR`9k(8bMwrb&E8q>jKa^XlnU+DAU^qvc+aSCm9%el;*Z
zUxg)z1uu$Tr-&#YJc3Y?y{&=X&CZXMNQ5OR5-QPkN^{4XJNL`3+0x@W{AMG4q&4GO
zSszANWu@JJ8h>rJ=G(kSYhH=Fl;6i3Qs0D5Ja^Q%u-%PD3_C}S1A5W%5NghnNrOFi
zW3WfI`(F>jey&o3NW7vmSIu$Q>N8c>gT0&m-yXnQf_S_#z()B&ulf4xxOd*<55C)4
z!M+<Pof}f=eEoWJ(?p;>==_h*2=}Xq@SnH~o6@=c{Dam3FA0xuGtElHj2qK8Xsn!g
zx&pInZ5@vHtQDV3Sqdk{mgnd51{AW@2ACo0t9S8u6u1o1(E?KgigA&Pn4E*{NcoR>
zMh2gwCo^-Zt*XJQIWT>-uZzqNzZ_1J)gFOKw`)m6!8S*cTEcXvW_>7H>(IB?a*oYp
zp}sl3VtUGekEwL03V8i@kyw<7$MLzF`zpTCZ^o^z`ud-5ED}tlQe?sdzpz_1WIJR<
zfUSC};5eHqPO_g7i$jSqb-VUqZIjRP;WV3!8Umh8T|k={fYFRa(ZN}lY;8)?vt_-<
z9b*_V-)*S%B2CS4i$otR{;kEUj;BBvIdOS?;dLXmw(vDf4>;x&R~)1gB|F|#1~lzA
z+!k2T9SiJOrFhOtZ?s2nIRe7)Xx8En>YV}IOoi|u%T|_5TilaZgbPhpzq)T8Tyd0i
zGa$aF3D)ng4%|P-4QHe#>67o&dHG~6Z!BRp+1BEp$HaVA##|WR-+Ixo>3P3N3QVm_
zS@DFghF&^lJaOvv8^y;e8s=MvN{0N6?Tx>rA4&_cX2Oa8%z!6iFd8EdBUV#S;Zup>
zbdapoyW+L$wlE$aLS)}Vzy}5JF?rtq@!#_VmCs}|={Z{6WHbI0hQwl%X>5)u_~I7K
z54HBisp8Pg3AQ!<6%AJbn_^E6+FbS)9Bgo*po;pL0TI;Wx%EdR6XlarSf0z9?ZL^X
zJ(kT)<^b*9tORh2zAS4iQAFe&UP=Eu1f=V4)3<BOZM5d9CKw-%AZ1L*2id7sH=D^)
zq)p>msI|I9lLO9u!$^!ub3HU?Bm~I$QA?cseAwWgcJ>!)9M>VRBQI@kRjJzo+bWyM
zZT8ISYYX*t#pY|-(Q(5_Uta!+&y@5_zkd2KV>uj_uvXW-qe1>ypg_L@&#j@Rrl?})
zIK5-vi%?*1%fGp<)u{}RXsY$}BWAh+iZ#_0(qwjwwywy}e_xkPs$jD=Lg#aM-w4}7
zDE697)>>3$D`Ze9o5sj$Eg1$-8tp6N?|x0C#vxJ&CfxIXzzk=FHSl=t_ZivUo}`v%
zVU}vSpceIPl8XHY&oNZv7XK6zwh)E_<;n)Z-(CKq$J`?4i^AO?AKR3YnQgvh&|UJ|
ztrDwH=)thSQH~ES6(2>vRN{1BKcmFk?u@(&EMoMMByi@6JBRSI<&jE@O0Ipb4h+~1
zkqE|CII<l9`IVvdK;)}jh`#1QJpIA=pywJCL6~pD*AiL`=*!g`A4hv9YQELTt?G@L
zP(<QtBKkDX0!tO!U5oWMuMsrHK{!Iw^<h;GV<Y|EP@p9sFJ&LPBR&zAm&k0Qvd>Rx
zM7tJS`$M|pl)z5Ak_!CA1zU)H?qC4|Q2XMkk@J!BB4T(yPADMbpI%Sjaw+$+6Mmxq
z(MFnk*sVmp>2Q&)uTV2l7;LG4l*X7p`~zZ<5Mlyrrq@niM^djm@nJ`Fs59%aRx^4_
zNwc+iOkdn-Y^Xu&lh!71L&3^X8-V#IUN8QVsg8N7qVI-t@2bLU10<>**o%V0+<qgY
z)s+>{rHXUs>ijxPeW{@}fhaL=i2frzVAaAwaTj$&KL4EQRlz}a*FlKLJZ|TgbQVyg
zY9w-2pCL!Z6i}q|T4S)4+2%xG-gL_#%6v^gMNQ_LDvx>X*n0>dSG?TGXch9;=;WRm
z@fSD0j+8fQ7Z}y=-YyF^-~087w-HrRFRJN)C$p<r)Sksr7h5FVgCYp2<k5LEXh`Rh
zgM|9%f+0&)EP@w;?wiWGeDGorxkQ3=CIB)07{lcKGs+F=km$^-ii&RZkvJmv8u+QX
zod<77QS98Ez#7Szzkasr)vZnxw@$m(ju+kN6qcqCK%{cw$!uzR-{seKf|heTviUl6
zAx0Z0?EEGRA7|W}|K-blg`(dW6+8nOeYr&ggYPoJmEHhY|9pKuhG%n~xcGtvcjDLG
z;+0DVZ3J!WIBjj*8f=QB_4uwvpmQViZebzGcL|p#Aa9&|$;ibhs>zjV3|{5lkMiXm
zfkIWyTSg73*+F8ZOOts$ksYEIIAJdhrN+DEEeRH1sCN?b1`7;W2&1C7IQ(k$n=O&R
zV;!N{M(!Hh1Bq-m(apz(?EKt`Rs5N-Dg<{dVc9jPyFhq!)@LtqWRGL~bGz{4P?@G_
zGt6Fz7IM{Bo6&i|+3bqpE<G7@vJzxIb7%XaH$RI}=%)d~Z(cmsRjcqO7f=P1rVQKo
zHw@Q1f~<AGUrhVI^udf9%D0zmg0b2wS6~}|bHx{oYojT|DE0?hFQymbAry4zLw2yv
zm1c@c)KYY<s`w&~m5zm(1yfT7QYNK%nn@bemjs({ZscPB36Opi)PuYR3hV*r<}(v+
z0Y>S8KiZQTgC)ZTfQoN0eG0KDmVYsNNKb}J{HEFrT+o;WyQw-cz4$k_?u;dYKui59
zdYA6+`|5rZpzXE`D^uY{s5^);WiuyWMGY<*M>md(8F_V^JJu9jg$-lq@W3~<zIe6U
z?th#3h&Q2WI<<Zpx9>Wf32&cIC@Am^-qv)K6kYMC2U)M?R;BV5P40D2wPkZ5uovlG
z!oB_rUKCa6%*tt)6I|A842l%-Rb%EssN5fNPCXkT9t-1?eHxy;_JhfiE`G}8rzUg-
z41_yxT*+LE*qhDe`QRo0EC(r3qncUQwpC+LQWkz)5oAP4J&JwA$&Ik?$6Z19kW#JJ
zf^f3g?>pB-|2(RvYT)7kl7S-yE$imSQ1h>9qfwB$CD@bfezgq2fGBxTO98DSMG%rn
zI^&8vj#n`koLPFxj}m4KjF}d11Zp<&_<fD%9Cl}{29&cv=O<1idC6i)E)?4;oBGS}
zfY6gVuN<0Fncf`l0_haTuhe}n5DK<!z2oT4jt?(G4@noCXWbBzTXg9+QmUOJmeBf#
zH?)ww#;vYu3XG#q#TqDOB^9OAi2!mWg1>O-qgHd*ubw7&@`Ag0XcS-wAtF$}D(LcB
z`dkA;sr((T%Zylh0kB9Yb17trQc^;R{5zi3^MB(43HGC0s4+Z`o|ISYWbb-WAj0{$
z`xa;V8NuB8pZZ3SS)51s-77ungbWE}OR)6k2C@r*BB>5+p)<V?{EbA}pCI$_2lb?^
zGsg~R>mOVLaZ-l=3;(h)WPkAm?E+X+YNf#y$JgPDCv(lg^D5og&ouKYpJaQu=2!ae
z?Oww(^q5>23{zEqCCxe&<7(&ZLXyRqDV!yp6c8}xq3;O`APA8-yl@@~KX4VThmz{@
z-7{F8Y|bqPuj2Rnp+JD+Q|g<^!+cevbXkyuBXA%@k(pO<FRD&Zhteh&eLnhZn5Q<W
z+FG#-%+VfC!#IP7zT09XxpZn~(lKpQ*Mci!B)Tv;^W@<;$vOigqN?KbE$=?wI?QA$
z>5j}{5rNUxlee7F6|a&{mG_C&TXKu56C_fL3Q&RjVJO>{HnPgh(Rs?d-3DUV**2F(
zl{Z(a5Btv;acc3s1Ip-%*XsF)BtWz)E;TUXMpUtw<`M4%DWe@Yf1`c#=t?vka$g5c
zP1q~DKD59@G*8GcBU9}K1-2jRP9&qvQ*EhtT#DIztFs!v(3y<sboBcQ2Tt)5^$D^c
z<6DsKeUKQ2a_my_!gwRCQF!|zw?>`T8`&L>o?o03VwaRkjXc+Euy`{hER3$76~alm
z*KHR~N+y>Soi=sE3nX=JDg`m}Cpo^AUm>Im?dPO9+Y7D#Y|J{*4(ZqWHbOr#D9Y&8
z-we|8Kvm7~4$wOAKzocN{@&U-zRPcUYPOXj3+T#}%`&I!GAGq<cqk*Z$19A7(YVs-
z2%tKb^DxK|6rLIJO>Uh97fWN@SuUw?W)Verj^aHxCPZZ^YKisXlk|*zjvN}VB6aQ`
zwm!ixyAhR>4|jXGY<#i3B1^LV*@h)wy6F1y8u1d~i9ZVt!06^lqqr_jGh?R~82eW`
zI~h3$w<nDoSzU+3I2!cD9D8|Y<W>b6xbC+3s{_5e+Yg=722ZVVPm|!8CqAiu*LQS`
zb`6CI{XTt=GY$8yMR??Q2h1xEh0Jub@S(+(kkoYc*x?`CkXLaGgo4!!fJ{*RkWm<&
zoI_TubC&O=-D+rKzOx?Hg1*JCZa|jW*bK*1K2>iS_V)dgh-)Mr>)D<r8wqnoY(p0a
zekA~`6)iLB9gaQV)9^xf1bR(&#3P>bQ{zKKeNj9wPzVE|2`vtKa<T+QQ&7+T4m9IZ
z0q^{}!r8VO?e7N<EHEwot2G^-*53mM&DXdpx?=FnZiDV4O^4coD9gUFEm+6)x6TYA
zoi^vFD(H@}PR$&Ll)KV1>BYf&vvK{@Z3}{2r9jkhp-UsJnbo(7FBFgh+s3K(-9&V=
zmuOT#P+`;@=o??4!rgYZz_ea^f>=!yXJ32!mVM>+;H&-BjN<pNz<_h>6s#0#H6)M%
z&5ENu-1E>r@FJK9PR7G#;HJQCeGDaMWQFr2n0I7{_MhS5px=f5uz$}AoRJ4A$Ag|d
zUe~xwg!};27e~d(t!|J+yJrGD>iCpLZw5kMzt%tN$_hPBw2<WW94sQ1u6Wt0aNqOQ
z6w%<VJzcYif(j5L@MMTF?TI!e@Bf%92)1BQ-$uUs@sAE4vxxuL)Eg?!*!{LQJsVk+
zfMT@&R<LY8TrD{hgFF|<0t3ZL6z*s(d~ABuYur+@Q{65nx&k0tbm+b;FpuZW$we|0
zpXA;WkygZIB9C}hcV59`EOW7)($0Y`YgPC?1O4uv-D$g*)+4xNiNT~jUxOkaK>Vg%
z`xyAD)4H%x`cUvQ7n?pR)y%a!U{Cnb`NaJFWZ2Oj5^yL;9g{tbI#)d@*ilukn2`?(
zv&)K}<Yu_`0LQ?x$66SORw;#nf5CpR;~PWvM{i3IZYk&M8Ta5{BlAuNrX~x_n((->
zx!F?<kKVR#Khw8}pMiAcKb=EoHIFe+&|3=D(O3$n&n|yIhtDnN9dt{aQeh{!<;di-
z1V!c@iMV}Zd2)aAqoDNoVYbSMgJDBnpKfk4%YLz4_+j-Z!L>5OSrdqGKuP=~<0xzk
zJ8cy5b(oo`^oo~r#>tIl1H<|;!c*V?zDi*W&T%UG9_jsut=sMGVJaH%pRy-NP9F{`
z@QdfAzOdKW<^c+paPBqogpls^rCp|_?=Nq2=LY2p2;4ey82GmKyIKlDeKF7x;F{<1
zhJu8j=B5TqO7c1Mm%AJ-7ed6g@;sVL!Ik>E$aa?>&j38M=-X00(1n3Uebe#acSnRd
zztxpM8!fM-(!XKtO~grfZAu^UULI0YqNFoO!!d9p(~pFM&pgzg>2>*daDtD7qv{jn
z@R-ccH$N6%Agt$l@A!mqXLOpFZ~E6Fjs~a@+6O|$G+9Jb|BN}EYw*&|6RB;&vs_2Q
zMW18!N;s{73Zts9*S5LXYP5>WIIas{^tN)>R8^iVHT$Y#^4<!aSMPP-Dw;ogt^Hn@
z_6TuHtVO<ZU<DV0_)7g*4I9C@`QxGqZ78D;N??k-BS3TFd5b#7CjKf?(fH&*RjMiu
z{bi8Q0#oL@0DiRkWxTGwb6`3AC)DfF#J|<n6LbC-uD=m)I&Sc(b0stJ@vFw~Ss(Fg
z!^F=y+VZyoZtxX&v+<6bo%f^A^<()z9f5gA^3akrUBYldW@(%-L(?P*qz`P%9~gYq
zYLS&)OL?=OhA{fZ{z4MYATw)K4)&+lK>qRaisxy#Ry|h64d)urtZO`GyQSmoOcBxL
zy?~&~a_#jJC1kKx%LO*I9Xx6`Gwzc{6Jj0CkS#5`@gN$=9~^_adgry7j~bhPNS5T9
z|0$I5<Pi5o-soTke|Pka@Mu>LQ~=pG6=vDh?5OHTdAuRjHMG!tvz0(u2u{{4kkz#k
z)BAAL>k5!BVlkU^*bCK{cPh`(=AFniHFhvN$PhQ|!Whl%&pgC%{)`b=nkcuInViZ_
zusGX21a>yRyRGuCY=*Qpjq@|GnLDXiR|xm45$f@^u-X|oi7AD+fH?pWBVV>Szk?@z
zVz@jWufKh?_VU25A+)6jLwU&s(H5VHU};McM(!p84HP{^nCLG1ZVXkxG@Vz0eU*P8
zRM)U^igYr^v{Z8m0i$==D{kfPu5^1?$M^4ND*G$5e@Jd#ss;p8%l={kcxxDurKeo_
z5*Mnm4z`8RX!xdD-`Th5#W$hI0MDY^qpkWg6Sx-qQM}<X2!ZuA01tvO&m>8ocX;)3
z)Um?>#c|o9(onxiGcG1TnCF*Q{`&pMQ$nvh`|FvIH)HhXN8Ykz2)As<Yoj+B1J{mu
z;wT0Jyt#Pgm&0**w6u|K(iR?Ek08O%*NkIs1;5zME1`Te^k<4qU^T!iy@G`{28U|H
zMwld$$LxidC*;`7?lewv>N@<u5XuI}0g?;A3Wdq#u6|b77UAvH#@dU2Kv^YtQ;a&i
zN1^uSKxnsDS~!TKEs2SS+KRxO*FT6|@!|xvXp`8zW8&RDAuAE<KYY3EQ!BBH@ZPXf
zu*s9fj8B_(zj}G^6nP%Sho1wmVnvGD9xig$Y&>|_ef8ryzJ<Jj>2<XwG|L*k?>v%I
z`V-L3u8nI`#8Rx(Eb*43+`QvV9E4(ku&6FWckH}Q%fGzlZwl2kOyfWDylRvR$M#P6
z@Yc1n7PQ9u8Nh2w#0WVX<4dMQC%rXF{@ts*lXL%+cYB4{7r%~6yuiNSf9z$z?F5CC
zJ(0{W;rpw#5f{d(1Vtc=@l3eAsyAo^59x6NOeBE_Ek>Uux2HyYOq2eWY(3nXz1Huc
zyzc7<(f|hMaRk{K=fYmoZo@KR+X-|~#er=*f^VT5V1f<~2!pI2{-pk*e@QNQo`maM
zuWe(v+zDIP)fvzl?o4Z7#0i*unw=RP=gAv`t>Di1OkPb~INdpR<DMMAyXyH$U+b6Z
zAKIHBp+j_eIG$mn4ILaJm<p{01B%!YXArUwb*Kf@s=r8A_yHb@io`hY@r21S!Q+MJ
zeQCE!Zm8$Nk?}Bu?`E3S;}uqi*MZ||ts5OZ3o7oQ1uGVcy6`-5)Px)@SJi&{AVUV9
zI~TdIZVmw5vG#+T=Bg3+w}RC!sV~M(=0_rDb7b+!0LPa@p{r`XR+?M6_K&eZ2-%&L
zFNt&UN5(XDS6A__c)o)>4*9C|m%=ZqwNCNDP)1R@XkXg3n5~Kp+gI;1G1Z^CO{k;$
zF|Ze$#*ef81TJM7z1V`l<8Co%wF_}W&-r1otifb~CY~Ul9gowL>~{!_w{#?yed|Fw
zCNFp$f^?kR3&==~ctRJ(Kdjq`>u^*?-_E+1qz){TL_2KOK|QMngRoRVG7Lc$M$8Gf
zJQjaC<6e8mRMEz6-Z}7M$6k&PFS4lM<;KnebO=*!&C2BohImwJi*c}5BHz-XD_ihC
z`5g$D0yWR;QeCfw6@3*gKv&7&Ab8)>;SZ{B$f1=g!3vJrJMDzNT44)N0^PjCKc5(p
zET#?9rSk*@h#A;dXsNb#yuw^|oObt8IaHnx?FVfe5y}NnTU2Iv%EX=YV;qxQc#DAh
zeiwA3@0-zpbvSYt;`nWxVG)%hfc-uh)_oVfYx?NOTv#4<(aq@qCSWZ+zw?7u|F@pT
zv1$K2+P+kGV%#p5sQ07z>C`S^yCmCEgwwF)e0Y3l_Ia3Vis1E!Vw;+%2LVld?;e_u
z0V$7w7n1f`6$6MF*7;^{nH`n%8z1=6cEKgxm_lI|4Auh*HzXyMuZ;I-^pBEEWdCyd
zAr5wX6ib6JL5&D&!2IdAA&Le$+b`!khMybbHHr&czSMRd>W=&SHdaa5t@})5I#g-F
z3mEz~e!kVvS8a#a|9v!m*Sz2YyP-w{##UM1ZlZttdjRRQK(%w`k#RSLo<&z=Ngd)o
zQnTKvjx)z6W}c6<)5PcfJo#yVmfiBt{@>nL0GloQ!z;Xl$hyx)L>$G^-C08*sKwjJ
z=;}}+>QntMN{<vY-pQrqd+)t#W>`XfHoPqB(MuKsrhkOH$p#7acJwlYZ%5>i=^gbL
zMd!Oe_xcS!-;S-^Hy~&AP!O^EJCbk(5eG2`X^~nCAp+cbwD^sLfQVI~B(;n${+&qX
z-eOfZ83>O~VDhR7414ig&(`JG{U3Ar&+`kyXi{{tKIslxId`yTI5{9`3Y{eFL6{Om
zaxK^&zy<bd#taevI_75F5=fhCpLS1$e~4uO5$!EYuL3Tm_IZnzy8${9Fj<ni#uAx{
zd*YT5s&n~20Fgj$zx1*?Y*y!uNj6N&JLCXov(@ayz|tQ;8qEDY70U+yTfy;cRuC0b
zDG%Vt852tK<xFN@xvj4BBnOa{5|;F^-9)>9(ZT>voQ)svpY)!YgMdCbgpirp#jmUV
zc86>C0i>klc3BEmQaHdt^uZaRvgPy#(Hn_JOLl&o*aJFm14xF+8z@b6Dc7h0cC~bh
zFu!w75kfU)E%Z~R`A28=nInAH1=Y;}dst?9uDQ9sw+<RW3e2VT$*wH*=Nn|c2iU|i
z-!+8PE9jTX>ViRFPR@L<ti5se*ZvhWXn)iY@UzH4;yW9JpdB_*+OPvixf$lp+?U?W
z5EI@g2AFeO+|Oj5%TlXQOfkTda#<N0Fhd$Z#*Gi?eEdL-uo&Q3IZKyWKIz+Cyg71Y
z%IfTGVhwN@U6ogLJbalBWeAmV%XW)wnBIdSF!&R3g?-=@7+`))#>yMSaSb59CS&DA
zr>dyiLt$_ONU>#3Rax64U>rHnh&Ee`@up1o!Nqv=G>sQezm3M|kJIhdmi!S2`-k68
zh$*uLgYrWSAX8Q~7KUTP1IUxf3;ET?^_q!5-E(_@gXyxagY57>lfUu)&NvMcyY>0*
zfliraT?ZK_^3OgD0+g9KGgXFppp4IrGbIe_j9Cb5F6<N^TiWu~0HgsX%$&d|jrXgc
zNxXV}t;z`;gy!x*e+v7<@#TZ7e!07I;B5^=i%`7%(x{0-C}_preyQ?Zu<{%9K0TB4
z3H0VkCZ)IyBTBC}a0b}w5~#mxUXKGv(>aE{^c-?ePWG$quKXM-Q72KB!2c$PKp%)y
z$l}q_z%g?G$-23Xv@L`jU64`H0P}U3AFBK!zPoG@25##WlXdxpe6GF&$kka{NfX*+
z0BN}_vh2(4<KwsK=s~+6eROv3)5wjqo!Qx{{^4OaqD*7JUr2pUYM^B3mF#ew4?}%u
zV}LXC#(5#9u!sf(9w4640~6eNQ-#nblWG$J;37G|OkmM#`!B^DZ-AM=idO)Xk`Ew<
z$KeBcy`RbBd`~lgES?KDq&I7+nq)IsT~<K0Fo0a1jE3Zn5-NQ@z+9efU5%xdRBQ(Z
zn9Iu+T42W*1nfDh$3c9$o=?X#DM7%B*w&&&9h<k`F@Qv#JC<@Y=@c3L5AgI`#k1fI
zQBDKQ<8keodmv&*|G|f&?mmkgwgH>Xr(-Hs{|Lxl28tc1bImegF3>k?fM@LZ-M_pd
z?M4v-eGi=BEcYU*n%&HaH#K5_Nk=1hlWx6Ucw^Er7jc}OJ_|s=FQV$f!(hJV@(_}a
zWn-wt3|m(VjNbo~IU?P%c8FQWg5dUaRIX)1Jf&AnrbQi_A><qj&Iox}aSZJ*hM0Mj
zZP$_)Y|>yhaUX<w$1K}$zj&S1hLCy8nj6x!|L<-a8qgm?22#5ABBC;iM%Arp2wBMI
zS<a_CJb%+H#D<uMl;)8+T(JyUAOg9iT+Q#&AKO>Dn*8Uw_4iqZn2Pk;nDttn>gF`W
zR3vjUbOc2g#k<BpXy#SCOpS4#3Za-+S#8O2lj!-CLp+36=G(CJXox9D&a4d6vJ8Q1
zT9DMh^ZV)Lm=%OW$UpMPzH{*o+!}|NeKdyCu0%NOkur0r=iP;3!3;#u3A|4Q991n)
zE<ePqp=re2fBm9<YYYLUlh#}Jy}=;c5YMq`EK@OuV~Bk!p*h-iwcGwTk0u!6DYhfK
zO3)(vM*qG3I+XQQUK}Rc)VDl_n6|Taw8~_ZgTUg+yGAx|1c8kl@(gy(eM>-eIfiv`
zSRFPt?XvFRKg6t^ywKbGC!Fr=Aj*rhVJqSj$ib32V;s1Bs%UbCO3+<_a4;4Yqpp@g
zGQ@V8#Wp|hHmIL4gruGId}tEjHH5TXkvlCIq=1gV5W8GfHj5O+DG%|i9K8~IWgXN1
zn%WQ5Q%^$9&P+|+KRzsju`EN#+GVBj>|v%7IYUgh(esbS<LCKkjEDRUgwoUHUsqR+
zI*?G;s$e-_`c1rfQ6*FYfje;VcllkBEey43wvyw^8@{y+@ibdGQbO4oDjeNM6YHBJ
zH_9R~qYJ8ln1D4gQ|aBAYjC|4GlZO=>%$aQ0cykyv74qb>t}*My>b!+)M+q1P#X*Z
z6!H*~fjk(J2d?O&3`5KZzPmmAcBZ(JFoe=msLUUL-C~ICG&3*Vz+}=;VFPP}A%3cM
zh{xxIgI_E{w&nz(ae*$BQu#A1ibir&<2%rYGsI?^E}g=<fx{&-gruAu;x+l(da*_*
z${y}~XN-Or8;lGUUhaYK5@8kK5D(Dt1-=PQJA|AZU*Ic=C~%t`RyetE4vw`7`s}|T
zn1y5UO>h2TMyJ_g^bHr7!~UlZkWU~t;?E`xQjv#vQjou?LbwQ?He?hyVqj^O(m=UX
z(>_CW0#a@cvkl!KWlq`t&feO0h$jOJq4JwIx=_XG`f`f*>6?U<*V<%5NDNNC(th_V
z-7cSOY|6{_5^AYpc8`Z;kFSBDC4tbLu1pneY)*j{<}fhiXVvK%c`(G(o;WKv*e`}~
z$WNS=i&|M7MxF926YvN^u?DhJ81tvch4}`k`1KiA4RLy(yL7kW<2u#4<(L@sgmL-T
zJthWA+@d048e(EFBZc^eg_BeWqM<Xz>-7NhM}~ODPq>svTBOr|>4%y!<F|N{vB$+s
zp9(iH+V(iPYn1UyC@?+bPTC8n^Kq?OItYkbVuzil7y>R-o~@%}bTXmR1v>8w1m;29
ztTG-`wh(wokRVJTgSyBF0xOcI(}@j2Rd>@N<m(vWmr8{XON!Rb%?FE?&qIehRc4IN
zDj4DvS<w)3$ap9t=cYgtOBhX@hqAE@{G}0+Dui}f8!v19Hzgc3n6H$W2x@!6&`SG)
zkGe7YNw3>WQon~14E#(Ab5|k}2XBQjRP}x>TlV+Ue*lhdkYQX~)r4rm&`Xb+WaM(b
zR^VDUm?*3>27WOiVKj`Gmb;U8sSpP2nUoGn<z7t~pK?L`40Q0Tw+6n!3@bv0-dvd^
zz7n2S@Au_kAtzebNrlo2!hm1N^GvL(!T4+m1AQf&IFwIw9Iks=>E08CQ1oxaHPIB(
zvvq?x#=MP2H<<I^AQn+DG^-+0V7S!c)T@SJ48^Oc@J6I`IsSQweE~>>qQ;i&H>$A5
zVW0(fKk3*gXqIIb;-LL7YR-;l{HwOT6NX;5T)~c0#!w3vk@W=HHH4vS??&IgKF+Zo
z%wl{hb@DUN!OiD>(v5W?f<uN3DF@XSeaW;z8iLVTcqX*0To+XwgrOe*0iRln@u>sg
zGtf<YJt18fBP$00-)2IQ9u5Zj+T7LZN1maZc-&(NB@kF|r?JI-JAI3{d!ULXB*mD~
zS+-tZuyV+v1g0E~WJU=lV+>7y?VR>QJ-OBmHW#Je$vn*^K;sKcAoHZ8YLsw44+cC2
ztf=bG<5{=xBn;J^!6aPhJQrc8XMlYB0e33G&?PIm-WXn12tyZ}(i_>whvQ}Rdhs96
zg3;g%(CGuh2pfpFnFEM{DO1MC<POS<B@AU$%*XBf%X&;>)<-b>EEQoWHaGST8Qk9p
z1$S8rqeaPI_{Sj(Y$X!iXC>In^)>pD`~~bY1qZIzg0iw2#ahKc>y?=q+VY#2e=&>_
zL&AB_4IHf*1&(fwBiFs)&^2||xOJmhg61Sas{Gu90lh>lOW>c-^FpacU`3PD?STtT
z$p<XCOcMs&W{Z*#$v)k#&pyiq!q9B)%K>Iq&9SbHk`fB`6fqysp4$b<%k|Cb@_bJM
zO+^gE{bYLk{PmYP8w;gL60(3MK)CCc=eO}sP8j;GD}%;c?51NdKG+7Siv?RZI5N;P
z_2Rus5JnT@aMZeU7=iv>(LGgDL=lpDRg|WT%f>wJygxQ!U^krn%Bt?)grV9PY}5G9
zWThK)6Gq6#K>nP-gcZT4S4HV?i!cUvxd}rLFbT#03I>k2Ec#E*ivdto44mV~=?vDZ
z==k!#fk(l-p)+m_b?pfQZ?*YEAWLF|U-AWR6Gnimeh^VP%x5ej;kwq{g4CdE!GN`b
z`wDpo>&;mFiG=!pk3QiOA*rc5{2QeKi49={s@wgACnr`L{96--zR#lRr!q#!kePpH
z-?g%U0ZBxcG+V1I{URhnQfgcqLQ@!bgwGQ)x_5(WiXxX#R0ofIcj3=l-CdLcK=X>P
zhwKtBGq&OvS{$?`jKJc}ggIZtJ`C>PgalQ4wj9gbpOT4jKJHIq5lesLb$!Y26a=L-
zgtLLBKo^EkKIlaDdFWt&r{n~5y1rmq56>WGC63rT9Owh|ckNm&?0m|n-zG`pWRtYD
z*-pX;%yV6iC2cB%!MlCkq}RK)2t&2l%??0C+fNwSW4ELm*Azg6qN%>KK_)X(0Wm^W
z9tEu~?0>ef1*$ROP;FcthUP74L#Sx0Kg)i9qATXs!vYZuyb%_!VZ8XE>868%^rG1r
zbFPziSVi|iK(J6TT4t`vSw4mk1Ow_uSUOf2!NaLk1O(Tw{6Vz+Mf+8%WfKyHK91v}
z(shh*|1G<@_&cP8@u88i;t*f~L$%xI{(-R&RyddzCi}$PNMC3ULvf+8Txw|^#F&SO
zqxtG|Dp6guSoEc9E0y4b5fH9ae$8|0m{}DSgZdZZVMU{$r();3JQqy1CXCNSW`7Dg
zc#85*`#73DIk7sdMOu)xoR@-bb?q3zgc>R9OB%TEv@mPQO}CIKpT$65j5OWcMx=rW
z40Lbuy3D@;mw5tGtwS=^(Cr_~DWF<tQw%yKG_e9E9Nb5#R~X*9jxeGRuJKPpHyRrX
z1%_K>To##aR6G$@uS&b6g{M4=36h$yh%f>-h|C@I$Lc-dI>H$+?aP;QLc-IR*-mWk
zuj+fzFTm1XFaxki5KkED@zNwYgfKLdvtnm1O}yr!76#8<)+-Rdc`ISSZ{&VLn~+Z2
zISh1`Fob0^*XP}<ZURd<dcb_ub=9M@Aq+KP-r<DCW(Y?O(URpNH*uL7r$4TmWRl^8
z-77iwbiZ1o)+J%!fR|Y&8&_8zVc>S7%s3d=jMr6qxqvU4Fz_5uE&VZzyA2FVQR%5T
z{~8aN_b5(HgPC5@_T9%1wjfivkn`BXR^FI{tBwRKBknV2F_8RE(>)6OO;8eU`^;>!
z##XsUU|DKm@M6BToW$r`i1#EIeS)D>nYX;-)r8T&a6~ulB@9@rWL0&A$&#zWX|O$1
zi5mh76F!0coG@@;QO!9H=uKOYu4GY&?B#Tyj35u3!QgA@L;T<5eAGRz3`T>9dHr)F
z47dk7yA931&SEHGn<g)0KK&AEq_uh<^@#X1bg=T`)j%cFP02>zj|{od`-PKo1!Hyz
z2J-rL7PjDh2ji9q22cFt81gvWwBusl^C<8eDK@tJo(v8HlA=b!)uboID7rYXFw5n!
z+I1M(M13hJ7`5sMLm8<rTguQ^4-AJ01=iP#yAd4?=slD$^o{-7<Ku5qT&F*%QuphL
zTi749I?95in}mV+(45f8(&k4G^=g(d&|0;31#WGukB39uCbEX4W_1*QXN|3DwIDOP
z%+K)FFpAe}+$<y%b=BH%9Z958FjNgnF?j993aF}jKf(w(_7xZ*bFHfv0U^KDj1hV~
z&sT@H1Qn%(6dL0#6-lpJk%XDinxy4)t#}z_7|^`0Bxy1GjIG(>BMG2hoxB;PTYODd
zZ%D+{!ZfK75-#bpynS9y3+^oy|GHKS&suWX#wjnM8y;cca09}4`I{~b8Px(Y^wK2r
z38wl43}Fz4rlKmDrPEep_2xAUMMWiorBj+*H%IeV;Wq*$(zO6y<FfD?&e$N-kT`{R
z3VoDIVDw30>28YeYTYb5$56#7{2S2*vyosS@M#jp2h~)Y<a8;2ovjGdl{UJh9eS^X
zq0yDj`0?Ny{Vv0(4fDdC1&h=o#WhuIM$=0-V5>_Qu(%#AmRT?Cde}y*6wY8X4y+xx
z(5C}wO9kcjcqk+gRmQXk16I4sT0Zg>bfF0)R6S(p64HbaMxc5q&Was3CRWM!eG`&y
zidLLuxzI0-e(qL;2O_!c`Q=0(;r_&?v}mxLF+%$5z_^J;`DhRO)6k8kS)S&PzyD$F
zK^0{9tw>|C!B`Su;0d*H<cK$JztPc&Ggb*lNsr8(_5y8~2ot2aKPX3%$J2-J({Hq5
zeHidtk=7<%f0x!40}h@?tq+P{^3LgJ;2Y=gz0!BS+p<ry`Vw^`Zq7}E1DFm260-6v
z8RI>A{$2S!8Ar9wvJnVbf=;}Dd#&ED2}ASFlE(;&@&qO<(iN`mb$i(O!sG-4-blS_
zd7u0_!nCN{fhV&$o!R)bB@8XG!|+7`nuRbF^F!|D<oSlS$H>)qr63{{XvA&1Ic1AL
zKN(3dYMXKHX0+sKe$rWKNrgfo+=?J4DhU+?llek$5BKEf5(ow@S%#@v6eGzK!Dtgb
zrtiN^V=5kGR|Oc#L{EXHtWPnNQS?PCJx^(X0ByQp;OOex-zHyd%AU5r6Nb9E^A9vW
z9xnD*Mi}rGYV%#HLGSBJy&p+1x&TH76hRP5j-fG>1p-(tn_Cf1b<92f>323J6?OsB
zcjZG;FQJ*zPie0bhGzGZo#O%PbAo|;?PT%j6vxL?a!6Ao^^5S(q*O@xygQb}MUbL2
zl`5~hY<`AM?s&lj>O(cHn}D<p*L=;#^(8tTVc(xHU;#d^HmqN+uT+GKy0?acPxr#{
zq0L6LB0TqK+xT(1rz3T}!aD2-vWfg9TAvu^0c%NW6&NLarYI6}OaG;2n@1RMwUtHF
zyx@RmL<D(68#&-QnQvMrGr}}tkqNk@E3BS~AdToGuJT3$qd*b%Z{<Q##wk|2-OEZD
z2#+v-SO`IpR0;({6+2mRtK_d^3_R}0%e9GfDq#edYwjKh&r^cYPIXgwVU3Q%P)>E>
zzh;Z4Z=*k!)8DagKcT>-c6UD-2W`9!MyM}rqmi-4E@8lhmYb|orKCTH-U_x0M9ZZo
z47kwdV{uJhhbDAe5hUT*I=NuSAjRi7@!Cx>3|edS1=|!;=cahr0M43F^nS3}UDrV4
z>oD*+Z2WJco6aDnYmJ5hJu_^k!jH@46dzRc0YXv5LXx%fOjW^rwzQ(x(Rf^U;v*bY
zEcBM;U%&i~cUa8DnaMZq-3H{(5#-|Xpo4<)h-+*Fq(>_|<0UiKck%T-=?m3OO+&Vq
z1_M@)+vwORNQ5xZlI0|kd}3b%VHBmU)s1ywXNG~>T3xORa<3xITPuPb990Ff_LuW#
z`jN4<zd=!jK~k7AnEnT$HCs~1i%t$UOAU}xh1OgG!B;>iVfBAjznu#rZ~l+%r~-x=
zxO!KG=SkUR^IV=Fh%f_JO`pR@+3<r+;JoYi8Te*hzXvgH(^MZ0T~Dnk_(DP9e}qRO
zvxOSCE)j-)<#LsyC_`Va+udb*u%UBl<ze(;8Qu`zlXL1BaV}t}#YrQBmk1Jl#c12i
zFVNpuB^0&6B^@c7AcKTLtv00kxP~p-WT<_ZHe~zQCL>cSPIRSW8<Kswmm)3Rvk9$3
z50inZM%Je323!6P125h}i%OjeXy1HPQ1@x*APq!^)LRyo7w=bpl?+o#$mm0%L+a^v
z8h$u~(*N+E{z>TIpI%(bW+ZfdJZwA)u{Pv1X(^i*coVPImZJsdJfSElkUVCjHUcvg
zNM`bwk=yoGm*g*fo#5fitT%I69X6{oY|;=0ti!SvcFsDpWQ@D6RsU^*(X7vIzs(*d
zZU6&B1~P^kvnzJlyH%>0PZ9=pTFtd{>-~mBEq>#D!U&k{WmH8V?URu3@Gz@ml6RDl
zTf``@+xXwJhjyfDWZXX3iu9`qVe9OCJr&-6yKl7vcCO|ETK73FW5Ct?QflIAe-PyV
zxF;>m4!#ov#NPyiW!o}-Bjt_eZpau=S>n1#MK4#-CnuQDWaM!zPB5?Z(|F~0jDZ$3
z4?Yyy$(tivP~yJ`j}x14()-cV6Mg0io!yQ;Y8CNm=-|=8_tey-s4C10A#16s_UaP!
z<7wmAOCgeIm!(5THd{k-^Bx;V6%6RaX2O(mYXm6}{q0GDQS4Q+EaS)9e@@3rTd|Gj
zB87GFOefc@hTA&fSk&{zfG!~nt&{HhaEIeztrWVDaHKafc7fI9`>78lm|9&_l54a(
zVPThTU-!#{Mi}@ek&AhE$?9hcukUS0I+nz|wv1;TVd~Vl2if+$j&%eZusvyJuiM79
ztr-);DdY5YDi~PpVOk|p8@`>7aM*`16x);X_^90BE_8y_$RR>OE1Ay>qw3+PkeBQ0
zD{@Q~7<~xA@Wb?pDp%Pyo{}u^)u@(p7$F&9rZHk64Z;y5w2)0-r6NZZ9k>xCmj1?8
z8?%{J_dWb9kj<=|1=>b|sm#Ui57VU;18AN<gaMbWdk*@t&)SDX7)lDryGyvjEop;+
z^&a*zKIU_2IfY}jgb`ww=zH<{XBIJ38k5BxbcZ->PzTpws3Ts^o>bqsF$I~4^RZam
zVQBM<tOeQx?F`$2`NeXCh%?M96%2%-JL*gyp6_Xe(B;G44(g->Vd#!J3-<`#sXK=e
zObyEhqD=7kc9+oS_g=zKn}p7S$x5{o-j|No^ExTWwg>~x+}c5#%uxFKNV^&`6kKX$
zLe;4mJl*g%wnxok&_m;;ZOA}Q?uy*~^`Nl#gaQ{ETS3znaBK2#k!(ybRQs{~1jPgh
zVW{@$1?48TJ8t7S!1`?0<PKm2dI(0fEsb$0;&Lb3@&$*GKHO~kEOdBqcWHIz@sua!
z?R-$HcFQ1SDD_-cl!RzG2nsA;?cGh(ymZb(jajP=`A&M0=UF3%5k^5D$@9!zGTwsO
z3vI}G+H03>+T4!5D!B=5%z5%}KKnA`Zjk&=v#H;@i7?dtl&)Q7X4mTqn_<BHR5JEf
z=QN3b9MemhoZle^q$*vGbvdTW&z=$v&X0y)L;1}RhCX2xiYOKgOixZHv!~H~`G+ig
zwI;*#WX8_P^!zz_Kcd?eX84LVooRpgr)3F4*8=AQlkm+D2Hr}Y2FmmXH`{c5-tM=D
zRprwm48^R-elgtGn~att%vZKCy;oAaDs4u>fUC?kJfzy?;~W3F*sZrXeC*RAJB$vV
z<I70KG+=+)!KsF{E7}oQRUW_?N_bZGBz7u1IWYa2#?{e4LQ#)>!I3XFD*${?qUL>y
zN=LDVu^4cza*TcPyFt4%VW^U$%n()?!6pnXg`%30faD|ugClz8Pw{xQTeB&{JJm4C
zB7ywC{K=&SC4afuJNOsj**!4{6$2_I2+Ux>^}4tlbz5q(M}|=mZG699d>{R;UySI_
z+ilm|OKAd{pwtPWNwPj}l3Q<Vcj0lcjepTti#2l?L)FR^(go={gI!ArM^{kDX%U#x
z?_jnoZ#$h76|rFG*@6ZC3^8i)%;XY=8u!zvsnNlNmZ(7%3tLh^DKcXy;)#MHOi9ZY
z6nL}Zzh>Sf%(4UdtXzU6r_XK3+g8Bfvb7gi&aGDcItc@_TFhWrk&i-ZF$S(bA1q~X
zJg7Zn!cg6vi<}HygWsdJ7ejM*E?abB{R6>#FsQKT!1r<ZMvAiHFvFi`Wx}I_xvgx{
zbvDseFP#dv^}#{fkHR;50eP!?t_CP{AfsmQ`@;8&NN07}XhZ59%&KL11+2Hy@(Ma?
zcA;#frt01v_zPp5yr=z6Fu^R*emt3d)q<Hjc#=>4ob5|cTT2+a(P(}Xk#59MSoInP
zJXnmpuP`Kr@~%6OPBY&2rp*-^T<>6?Q4uHr?N$XN9PKQmmA^e@F`!oBPL3AyY0bYW
zXB?xbdE_2*HM^<SaPX<J{Py@&<jSw-<34^_rHR+lgD@a{W;Eq5+j#qy=nM~`=;^n|
z6T7?ZS7)uX!|WMf-*dIUkG9P)!Z$@DTJspqISifeT03G}e7F3bii82jp&Y55Jx_4$
zW8SN3!h}o*2m?#aIO>Vk$wp5cU<|lHO5}iNkbHICn%8|!ex?N=m9ZTyX2N|@$vRSg
zZGs8Q{$1yr?*)DgmH$eQvfrx$Ou~SpD%_7_g*nxBa_yrfqv5EdeCFhsEf&wTFYv**
zn9`a4t%9NRXy4o1%8L)26M&xs^JqoRXM6aOoPlhfFrcS|<$Q{<dNXClkf0i=B(I7Y
z3t?!Xn{Vq7FK94u`OV%3bQ2Ga&Jc#?&FQ2_Z+3(gwUP-&$s;ZsxzJhx39W>p^0tx%
z^rsC%!het=?WI@ya)@5k6bOTYDY;BGnqOiOhCZND@QuNz2PEW*g>6P-d0iw8P9Oo!
zev9@8R_wYun3}6O3nCY&4y5MF&VpI_VolDKp9@PP%k{q*6{OnXZCk%o5)O1oF|TQH
zH);<$VFP$VswgCDO{%IrA2N$2D72!DQEZmQq|ShJ@Wfy-<u^U<-jn!0S30Ry=W`7M
zJ8wnzZph9gzG_2u9mt>=9<F3Liza>uMX{XavvRdwC#Qf)m{8Dqmb224_{<8@x^@wZ
zwI7Obuzsd+_A8IV7&y<6KLaU5WYIXcf41nNBX7HQ%aJh95|&TF=#m=DQ+5U)mH2)d
zI!IXak7=A0gUDg;0e#GuFd+Gt&-rE<QaTV;n8{tpbg1>O7FvYTU8u0FiBnTCsIY<(
z*!}tCSpHid>h5S(p(W<ax^J9U^@4#=FrQc;Mv$40#b}yrFEFK#B*#!|?a^d1H|jg}
zji|MD;WyH=J3Ek3tfiv<x!PV7pVF=pXP6JqNC)b4-oEq7sV2t~2Hfe*(>QIS5jPRw
z)-MhqB-J9cFJ-EJo)QKg<hUEP8s)KcF}JvlR&gO;M#E6oZJ|RV?Li+QM;KVuYgN~7
za2gVNU2G0&GoZ#|0H9^LbTP5W&#``4hs}ArkXXz++A5#V7?4%WI!|SzK8OQ%+ib_S
zoYCxmrW1ZY9t^lvorF%E`!^W+RCd*%+K+*4@W+N}GNMNK7>uEG(JG<du%SRGx&~dA
zS(<3&9$~1vY?BEA!chCZ=FNWl`UrAWErzZPs^s9T&%1h+*TsaQ*`H6VYnp((>I_4_
z7v@zS{C){TzZVv}f{Ix@;h@!;bp?xVbo{QN8orAeMUMi^Yg9xSn$pNPs|57$grO*n
zwow{aHP2#GSw~S*H~aR}fj_gs&|Qv7HWwlWyHuTC3F8B+77U7YF|SwL7cC?2PZjRs
z+`vj6aLjrMpP-E})G?n5!*IBIn!kjBb(7qx;<`rrQ49uNsilN;n@Hfx*6QLIzj5Kz
z+H6|JC8C}~U{Lh^wde(O^_u|^2A=ULFbvsaJl_7(gP{vH_+Ee9ZY-mZ-YQ(Fv_dx9
zce(_x1DCHZX4P2k^xYg+x6-P3fEY0KZ0;_=;X{XDuutLr!jK4dj$Xll+w1+p&Vc-R
zJO>sm!Kgc{{cgCB-zA5)i#N@q3t6=yhE!RXqc;SOG4%e#Ir+~uNiVF|p#N1~kq1NV
zPh{k{*<>L-PB{ABYSlEF4u&u=H)r;N;5un_wWL0-Z!}-d0!kw$IQxb@*_VWYhc~PN
zr0s|?iR67Rgn={qss;tWng&_fHyY9=1g%Zd=h8B+F_ekME}m1XI;!$H<m2H91FqxA
zjQ&bGQvc8nLxTZ#-QobZ8)x!0oC!mpto+p_fnC@R3cQgVOeLC&O%*qyRed+DE+*^P
z#kX0hj>)=eYxk1+rJ{tPj98Q<=jxLvwwr~SC}T2-QQ+oVZQ*D7=!#02Fwml1E~?8G
zhOQ6_T(-q0;j?;=F%+V%F!qgKt3g2vm&MJNODd?v{i8Gl1D7oK%s0pQ2W_5sL|QN~
zQ^z~WIf=7zi_43D$eA#3Z998(e!|FI(qX{eH_P}Asc^cGrOQQf?u-?U6bSU|LXIxW
z3eV-h(}(5UpEyD|`n;w%!FWekiWqvIHW$yrDRjaJ+{Mg|Qme%X1J4#^V~N?c!^8C7
zUJTu6M|S<KsgX^|o}PVz_*NH_as1=BuUVri2m_Y6{4l>db#gJ5M~c>Knw-slyR`;<
zgoWdM7bE@<gO<yLp{W(C{ZS-iCm0--VS0+<3@m2|3exLB9?fuI`AuS^-z4x{+uXw3
zjut_q)h--sW0=gG>&Cfr@w;Zdayhu2V48FSG;c1#z>{sxJneYBsQfKqC{vVNzY94j
zYEX8$@K1yg3cg+mJEkO-<{0pLwY2@o+sDUm(@}M1wt`Y#xM8OA)6hYtlfCDfoxqSn
zWAC|=hjxK0u3j4m2JX&P<@^Dt@Cidnu$B-1ycRp|7X7~-GYbF)8qAKnrXEOsRueqy
zFg?tEm3<26u5sFV8}Nh?zKzLE*>}UuFm#P%xP8bNjlvy`X{3||K8yfkYXkQDze<h*
z*#r*QtE(IRF;Rr0m9V@@rBu{dXu?oRSUXYP3c7*yAphlN+f4+L3}1>HuSZx*DEQJ<
z(Ppi7JFh;g)q@O}<yx!5g4Q6kcC#fUwFAI>woCZsJX-&If&7(R_X|9!{i*!&8p2Wd
zR+IfRPu9uybeV&t%NUw0H>;HX74S#wK@uygluDC&^n41I-o7d}Yuw%6q?48|c7&re
zTxXj=RItN<JEoPi<~v?s=&z?cKU$TpI#fm&I<K|egi?eUL*=y|a<_h6r_#gLkNM3<
z4#vaf3|RJF13v4Gw;E+SqX+q{$z8=DW(C`Xgc6)bUcbH!0&iBEM=t7?=_2(G<4}5-
z(kdHSVxpWdunpL4al%?Xm0CT>YVlu``5*e2{xS?c>^)n!D6Qo1&*fHx5ttj34}c51
z{pv5VN;@9X#M7-OB((*=dman!`FG04PrQE>mg&}}B3wjz4MW?0&9@jfULhErH7Gdg
z!)|L2a$NFSN}dgx+N7t?k7=*8fDxYP5&py^&U>A9dzj~<Bkg|iHJ;r|f}-Ne(StnK
z(u5xtvh}dvYOg|b1#dqtTJclpp$ia$=XQcpfn_P^9&q(rsk;EQ;%%B<tNld6Q8)TY
zAY9yHgbaRz{s@GjjY7X1q93~9vBAJ%n}>MU$eX{1sWln0ELh+u7<#j!)|DzXq$~y=
zdt;2%C8yW%b6{dEvz!aKRuBd(Cis#p+q!D8A{c0mWs$a7<`tHg5e!^rxgIN2>*-T!
zrW2}%eh`KpPE$&`0i$jfNKaMD$ez$lVh_?^#W?CW`&%K0!d`G%EjKd0u7CKH!Gxi*
z39fMvr`OllEr<f^1zaCX${{O=sx<uwqd^TUwmw_~dj%?l0k=jbi^K(oN>4Rotp~|3
zSEuoD!kq)ZpKb=D1;O&u$kfXEXX?`p6<|WtRZXJl>6{S^+~4Q`w?B_Ql+)@#>dLU3
zTu59`^c}&;NP~iha`Mkd+(}mHHmznpWGJwL9h(z*ecsI``rbk)<t4{cPd*Y$u%f{2
zwt`iM%6BWN|1>B#<70NKEFZ)8tt&t}A-0%(4Q8YCDuh_L-TZ0jV7u99R@2Mse9<+l
zJ<PxrNqx;+k1&+zmZC=q7-4rPm@_s?RrV%|S68~6tzHxFJWLPMZ)Pbtsm=D~3WNcK
zfx8_}D}Fq@ZlO!DU_kGNdK^gVRP2hIv_-`VNgJM;Y|6^Ssw9vwG_j7YX!)AYelkoG
zphr<Bl&9v@NH!BXjZNFua|?xJo?I4g|0z=e{AX=9{I{%jUcFcka(Sk5dgGvA-t6%x
zI$_}Ehe_&TUjciwrni!&HE|zdz!ZvmmtbVcH~&^`VIYym5m3c;e9;r7j-s6%RpFWc
zQ5Xe}_*9<cw<o?BCzs@$Rxtt*xfP2@^d$HuXL>o}AHGKN7=r<Yy`^~e#puiQcJ$Sr
ztZ#MQ4k2k|M=lYQ`z4U3^dPymbh%D4RIl155z2@2T0RRMJaZ%k$i+=UTtP-(N|sFj
z^gMrhTuim8oK{~Mhg&S<PvmZz+;hPBMHot}r7%?II{w~KKSBv~2}{>NZFsAXi9yqr
zlXNNN<q8J;R*KZGahNhuHjks}Q@nqBZRHq{g?2wt?V`U+-jiMRQFIl&F(Kx*zxL<A
zy_s)a?+vtzgb@l_S--3cX6{}L?2<{FJ1sCbbEQm7_2DcVZSJ{8tv*gpD0teUzGS_-
z5MeZ!9B%YA_c0%6)4GGY2g1Ojhpvn*UJp``gkV%UWh@pE%HLuza5-UBl+N)Vj&b%e
z2YCC1N4E6va*KhM?ClrFkY?pMqDfnQNdJ|!WKwCd$)&VWV;*u%X*CyzZwV_bp1_5T
z!w4;1#aKDR2rS)P{E(=o!h{5iVHQ7#U6tHJffgjk!PPJUHOa~*3|I~Gv#gq?e)aKq
zo7~VJAEr!)8)-BPGrSmR{mS*6wmYkwHKGNi<Ru)%vWE-n>%m@HluESKhjbtp*6x1E
z!;mVg*vE8WAp>!H@|xCW7-~UWj==CsWe5W|oySqL`RqO<0a+wgA)4^8X&>@{_ToOJ
zqGMuM77axW8hFKyfJF>!$Vcm>fu@Qvpz!D3dQ~;asO)1FFw=XRk4V9QEMO@Qi+0=O
za(#npCc+8Nz6Uo1J%X(`J_4g(`$`1ccNTyotANmqG0>WwO{Sy56tFHOAsl5sQ{KqS
z^)(o)(^p(1i*6@BlD{HwBoT(1S&;7r61C`Ee1xHN9_UK^ta#1k7`XE=8s{s;x<_Cf
zOv@F9YPN?IiAV$ku2>#43U<8>hPq<U>nOC?7z0{r(+<fWa>*4C!zkfc++t-JKz#Y3
z%mNaIE`0ZzKb0GIgrN%G<+wQ~l2)tv+7J$0vXeVDiM!IGHL6JE)k31>?w4<m55ab}
zMfsqg_UEA+bj#`MXp$e($1I}L?S^zSgrT$?oTFl4w-6mhwZJD7^o<ziLsrCUw_T-*
zme~L`wKc)U41G){W+O=<i?lxWysS<a(kJ4Vxc1>3-LhOLYWD&{(HqKzi~~uA_8c{Y
zp+?b^jja4}C4>PB5p(d5m(%P?{69{skB8_?t6@GJ&z|fh5|}#n@erLn$7S^v1*TXD
z18(V7>1$(XR1C!y&_qCm1wDikin3hZ&8MS@Ydx~*Mb%!ck4ZDXyrRBs5ynS5x1WX%
z?tjH7UNuLck2yN4qF|0icfRXmj?VL;duQSaLu=a>Z-iQ~a32rH$#SyI5GDSdF;q@2
zlVfI#7#rA2yELo%2}9%L$`(7;IFtK~=VX0+&u`uY19wnSgcN<Q!Gtwo=tG^d^yprz
z%|`Vrgj_=&{4>zOm7Ph!3f2(-8OuI?U&fPLCmCV8N}%oO;~6}Omq=Z_gx{prVg&s8
zOh&Dw|8alr;ktkEc3%idi~MxSQ2XOSCT!D7c_`6gsKo(&@1}#l+rn*^FmMTNlF=vA
z#dtn@;{VQHJ`qM!ZwS9+%3$Cd-&hhmg24`i0d0h>7EQd$LM4};Q&)d0UJTu#ub{m~
zJ85eG2{gG>tXPu%#Ir^GI1gj^_YCk<UC|F!++Q3k!2!T!48;$%Ld@DP@$_?@mJ^H!
z1^3qE3#5OvZuwOGYs%}@P;RP%BePOhypb)oE;Cwl4xUYV_I!^P1FmCHx-Uk-HWy*Q
znGqL2Q>=24iTOaM<|Gni3v=fjhAR6hS<Blzjj9f$HNe!IyOtR%!`0=Q`X@~ZLn$c=
z0rtA5$N*Dw^d#04URP8RMxf4hu?RM<=*_=OAT8%+$SQ8SGT7#w=pI0J&M|yJf`c&7
zs%3^RAI~rZ+X;+^6HJp34Rw;3FjQk-_gnu+{-V!0dbxsj72&AkB7C7)2N=iJpwW09
zL%}1KF!1(ECFuINKcS(}0tVcE?-xZuy~mln1f%59bGz){quH`}PJ2?V26#H}e;T%c
z2&24W!zJjap@Su8p>--OD;o76WL+##Ft)rL<6ED%1!3q>Tuv&_KP1%};5pPOk<s(=
z?r}a_{=qV4;Ce$Cnu@yY73DwY2m|tdOKU6keYTj<uV;@b?~g|)AB?U0JanVmi2bBp
z%fqWlBxHDu6z8;Q89Xn)_{T#DL*;CWyblVrAq=(dF6UDL`-cIf2Qw$y!tu&ybP5yR
z2AC$y{eqkh*2#RU#R8rbw9<SwPsjVd!O)ZDvXNW06EeWFf>d{#QU39d<93b5#R&s#
z{-tBS_}zo(E`m}G-KhZQ1*<D?20BrgFBl#q_V;E81FJIZf)QSsH`9>bWPqpl>eII9
zGw*y<*Z*ngMu8ckbp7*`9O^NBMdUyxquf(fu9YzKgFv`eeY%G*LdrYaZWSV}-fI;M
z%u7~{`b<-#o+VBgN_qeE_-!`+BfcL!J;B}HqI__s_Vdu;rmZtn{cZ9^O&cBHDaTyN
zlj=&I0pvkBd`s?nTJJtX(T5xh$<eM)uwPN#R8Zs)MxaAUJ6(W-BMkU)Y@?Sr95pH!
zkOg&DX#3|FGl1CZi$*Z2Q(`^^g-sw@1IS7ir=YA^iDY#8&qe~m3O_e*CXRg9^LrA1
z{o>g?2t%1SD`~rxCK;iq=ZN&fWvm2euMmdjTbEBt2B@n+@1u8#PeX_A61V>}j@_OJ
z-3l@`!d;B=nHc3XCk(Agln>DB5*32c{hXobp@f0IlG~{nmJNRNm<lcOU#f<1fT>V>
znz0UCHv<@8D%6;X&_=$ql6upz@?iwcMDlBz+_X$nxsC(x+S!25TyH26hB7K(!|SDN
z*&Wja8dPUs(9wx|Gd#aw*{>P}Ucu3<>#UcUSc#b#X@4C_Fp8JhEnq7=D7s~WQSi~*
zrcF6{m#O6RTK>XY1I(J<Pr6Nlk{AQ6UV^AvP1@I77fKL}zJP6}qb9*440Qq9p}Q8(
z69@hzjXLG;ppmJ?08^*F1Q~0O%b#b)q7sHGgO$uNDo@|}ItO?H!hr4znMYgLosw}r
zDlYgmbnwiomgwB?@hmGwR^l*OBick8-5Nj=R%E91(V7RL8b)(rBOKlI%<AYh*$QE(
zre{V0AMVc*j+Qo2OJ_YD{aS?qWKqlMtfi6dS2q2E&!rncIp4j5V*5XUl&UYF-k&aH
za6<lN_BUVc_?GE&w<Zj@QPWN7c{%%Lj>OZSkm+j;A*o6?rH9AmY)tFsOUPMxh$&SG
zaid=)_$3T=qtf@bE4|d`!19)o$(@U~TVKwV`9#8in`>t33B8~)4A?|mmfg9<2*w{~
zLnv6cRaM9!3+kc5c|OEfI=J!c%rW3PWAEwlYPXJWLl}_rWbbK-3AbZv{_*<^1}!wv
z9u-|iHpv@QfDR$=Sr$g5sxV@RBle0dVt$t6p9gOu6k))U)^VrlcB4ni5AisnZK_tC
zTVe3V5RW9*ZOk|si%x`!`#xd7Wh<(N({UH9{f2lXG559;+t-r}eflwQFVBU=7{><`
zJ4hIi@XUxt@qG=LLJcwJS&i3HFw`-FNwPj}l0bmz5EGtUmM_n%L;89=E51dHfmR!r
z<-8$S!HbmS+vM!!{s;zMo#ypGd3L;<dL%sr6G%$0_3=>z;SlnOc?4lOpuz7gZLsu!
z2KmRoJwE<MdzI(<Q~<(>dD-H#HJ!~k@nPUDfO|24Qk5_u;qG2eIk8SDRfmx2qs^DE
z%rG{fj1n}mD;tX;m?ly^*)!QM&6h4r7^=jn)R6!!TEfse0NfJo#!t6XJ{Y&}o*cjo
zM&&?^)^0lgPG#M<N54dlFt9Bym$=#F8!B!c4&)2%A#1s1Zh?!jzmHrd6u5d9cOw=}
z&(Q8&z|fV`dH#%v3-^4DgrR6f%5n$j9y`PapBWk8TpW=z;84%cD_(?@_n}S`Ql;Q-
zzc|5Th#5P^NRwm}oUt52#%?j4P6~EA8j9dFGWk5v0a-Bl{JV^SSvyN7Uk~Ewb?T#T
zDPbstgwgB<(rXw)DNPFoM7q`d5Rzy%A;>q)?(-KMs%d$2&Ezjvl6+L_(jlbMn2=*r
z*$cBhEH_vGD!n@8Kg0wjXc!8aw#oCT^tT(XP6L*(gwZrl_jEm<j%niV07VQu-&Y^Q
z0Qs>)g+wz&n7q}J+jt!#U?^mF>fm%RA;DcX_nTq80v*bHm!Pw3Hu_e@z$`)OOUB-O
zgrRp>d8ZDZI=xRBEPe($*wxIY_(I|2Lp)7rUtX{ZAq-V#Enj+|#v=?Z64ewSvTwb<
za<<d@csy_D?nBt|*DulDU_c6OI{tM!j_zxw5y-KXpc>TBdY6kZf;IF*79Abh-yx%B
z_V=vVqYDBPY6_4V(U-H=`pHE&+B_^@Q-XqA!qDbn&Gmv-o~m_Yl+e&iE+WVJmf?rz
z9X|~n{CKk|Ykg5LvVQGk^(Frfx)}ijVfxPWD@NTwE-hnd>WoUbx!*B`Ff=#d+kcwM
zeRJggfcDp@hf2kN#`}&5L$&VBoT+&C4%ojCmVUUHbj0mO-5)W1SM<xg(G({`NZ+wy
zf?rJ~Uje~rMmB|8bXJPc4^|sBAQ;uihRbI>5a}==o5p|9*XaY@(7pw=E(G&Y5%#B{
z8x1?V7#h_FU<lc}%-)>VX0GuBWBfxrL+SC1@@AA0M#y6?Xevh-n#Z2o60zBK2BT$J
z@K~wIqKN-<-GUHj!oV&h+3VDQdcyeVdGcxK;F8L;GJ(lELJqevzZ+f-OlO$?iEgm>
zX?<$WUuqCWqdae|6;BvSp0`}k8(7K^3Jj;Wtw%TVwoT*p>To>xrjH0FH1cLw=>EDh
zcFt#?-q=7jslMo3;ubOdtCZ@Co+SAzXgDJ%>h*f@`@>YpG;$d5{=jGcOPZ|C>mP9d
z0}mYM+?*<iif-_nCQRhY!?+wqU_icb$rerd>-Dg{czz{93S6?Yd(r8*JzQ`|4<RWH
z_`>t3F2aO@mT&nlE4?FDk5mUz2`S)o&7@NCf!;t+G9hWClJ&ja9ynL{<#=Sr6aa%3
zF`Jqjd2-NxiBQyDe3QsX!cceMU#$nz<C5yDK-Vg|!NZ%jAUC~Hb0~Nzc*0PO+F2eU
z5DFV*QIzTV;^)Z?TQp)tD6mp78EW(Cc=<U0qpr6sV!%p;w!Ghm?G`OMdLd$)v`>7~
zkc5Fd@~DFrms4B`11;Qw*?T|NoqR`E3_`-zl%-%qy!R0XHdMXk#bOlo2l}p~n%#U6
zMj1PEG2bRc7C;CJq(JFov>9y@+-h2`blR@#1puL-h3h<G#Z}~dU32s=?Na_nA{?}I
zIdt6o+}A_4=gqyhFG2}<0y`zk@l5LvS0jW3cj0k%g$tOOF^ZP3SQrV09Wo08i|si5
zvDzH}WSbCcUF+}C6UGPac=&enY4lL7%-|rW@>Km-5V&>`t}Aohc~*NyY@|kiU)Wfj
zG4QM=Unut*`XvJ@9KwJFx0G_U+kd0~K7bMMNii8WijTKJ!FST^`VdbazE8i=TJ_$P
z2&40{b@h4Zh6axGaq9g%Mn>PIO{Fu!AHGDZ${zx1JgkrInS}9CqpVLu2jAe4rSjvj
z;XfgxZ<1?WH<Nh#tj;77iaPd|CCkillPbD_1T!l<sxC<AbS4<}Aj^}sbxj)KKuv^%
zYZlUa&@v?qe3AGyU!es-^zpoX<Aqui(h!!)+GQCq%AZ9TdSi7te_q%U6*#sq25zk8
z)tsyvLp9fLY=jXIrP+9;Y-$vxb`la=zV;?!$K2_se_-D~uNgd{G@05|o2$`HU~02G
zn`=s_yrw#y3qVS!2;cAPY1H1w(d^>BP9Mg%h95jbe=EWWSx%@HZ5AUO&R%gsTwngG
zV&FUmZUM?j_VoMcn-kvN#OsQuHDM@<^ZZAi+({xdXl)S+WCZT)2R*q9CkR_C#dq0m
zcV8by%jdb`)k`R<7_E>1XCqhq8F0}J9;bBPUsR;wKgVEb;`7X7AV2UBOgN@&vKZ+<
z6y$#=*%V{3E6P8aTqQhHAOwci@N)6X{bU@4C3b>>b;06ce&lm0fFd}`O16Am!I=!A
zD0yXk?kDH-@$3TbU{4edRQ_^zKY|v66%4rfa)0+4(!vV{=3{Rk?14rXPTQnt4?O7=
zgrNtDl%jlP2%{D*LKtxAigLkBvZUToha5v?V_7X5D(eVC6aQvkqGjb!1BhVY#%p%n
ze?5=B$@c@BC4_-ftgDvQ&JVDTp=v4R5aCpk81`Bi11{C_(R@55AX=6%lmMLa5SG{I
z*rH%x*<##aJ!rjzq4=L<(;H{Gjq_RPwT2-S%_h!mw&;}>V05ufWfXanoc!er0pVhy
zCW$~a7><P;SF3HGTHT?jlJ#mJA;3_!*rJi;CA~nGLqZ9p@n+d3DRO)i6m`~TdU#KE
zwD8TikC{)YVYDDg$*YCi9Zlxv2?kaP%hJ$>CJ!YPU9ui<$FdlqX~^{@)nfz+BakSP
zStRlkc?=Q-18%c95fXf>3OiYuaBj()A!rYZKD}FEtbB}~#erRg68Gh<iL}%CTXuv5
zd*lXbw3uxk&vW)oRb`=3tHM?W+cS=3{`9{g)TMF%0(a@K6ML}fMgIcy>15ZBtYzb-
zq(Rq)uqxhHrQG%^&TjkShpOR}VY2Tz)%kUTQLCOt<w^_BikgyVwn+{bnYn}7g;sD@
zv@n^Y#MufIj;4?p!SzdM=$kOm2bo10ra@C?!GYBe_vDI19;C%vkZYY=10gwz+?+BP
z8jV^C&06HvX}KLe%_EBuPz|u4KI(+;WrU=jBL&A^7&lHB`skCHmr@Ps2}2)!a%sa_
zd#{Cw)<Q(UIa%YbI$@}~$^B*>7&a0Nv}om~>lAxy*0||7utPFk6d2#&<9x<jzofyA
zT99Nl2V=pNMmr-2=cCHWPeV6y95g46-1Sq~#%@7Q*V;in$V`E(u+8>8UY-3_8v)^d
zcy#XxY`^iAfP{lp39=*Z6KzD>V(2k$ydF5fUef`zAfKCa4ckky=UPkQvIqzI1l3+}
z`X6jSPC%H=p%*L<Br0xRTgs)qg(=odRn9FzoSs4$I>l;+z*z6Wo2x{d`7pv6#c#TA
zAYnk=FMEegX;W=rL_{#~lFPH0F3GTSqfd1bj+XUm#vtix8MsRkjB?HO#LmTsZG8z6
z3e<z;H}}HyFC-{iALc$k4ISLqD!E_BJyqAf)(|19!7UZjX7qHhD6;ip2J>aL-|qfa
z{?P6xFDRe>H#EJVWS0TsXb6d5`WL9=D{s!HYZ~CL1V=YazrBA7gqbh~zTH3Go3lRP
zH%%CDx|bmA%_P57poKy>p<6}PlU?>&iXe}n^ci2d-;3o8v=t?c21&P!roI|Do9@o6
zFw1U$v`NO?ugJO7M)jjTYC-a~ILUZF30r3n6gG;>bzX`QjbP}OicXNH6t9G#S}K-G
zg5!?f%zv)FRxROR0UW;<CyKTm@FN%<Bpl_yF}3*gLAG9{N+pz!&isBFI;=ACS*m*e
z4TSt*Vb5own<e1oQ<T<9s7^KzvZ}5Q*uXjr?Zz+a$?1GK`!eJFEMbIZ(>g~SwJ^6V
zq1ZWVFGFu}RRCZxFt<D!7bylgsKgV{Bd{hM{Ap5UD=7r@S#CG=T&e;FJXxyln5#8y
zTdQ^L4HJgKDVMUW71str!P07}BsWLdWMETAFrc)0T<RQa_JV|>c8(1T8=qg-?QYbw
zJZ$G?*sJ5f(;zoE&}D&93$nr1K)p1l=g(oaK=3TEcUAt-`M&D=xZT5iIAh?m(2Zs#
zt!hU-mkGI9465*pKUe3i2-m2_&Ur?{(40}qOWY1S9ycD=33Jf0AVQm%!D!;=qYpc^
zFbACvC0|}r{@&^ow!_dPplySD_CM3fa(3^%phqpt9*aM+yFlVUg)x*V6-H?^FVn(_
zq#12RyNC9%5{610|LVxATPm~1r50U{*dr{}s-aw6YZnKcPD<O@&-3w+tbb}TaDt)o
z$4xRp2}4yql+&7CUwp2<gb_6D^Xl$B3_W3~jy&&e8>Xmu&_)p+bge{&KwnY9fV;A*
zis=%h{X75~LFK-TfsGTWDweW@CvW^B*dh+La;CC`z5)8FpXa0TAI7+BOTU;;CK*8*
z*%~J}#tD%S7DXkJCwG5oqB)0wR_^4ks-M8J#0ZbM{`+n=|Mv9w_$|KOYGD(Ef!1yY
zArG|OBrA3F-+-aTD?Z|O!*V~Cf&*t>{V8_dS41dq2^TDG)UhPOfZMOh1PSY>2}7II
zE=(G_Faz``upjS)6vkHCaf9?9E7T8R=p)*NqI$jKT+kDbd^4ZSQ8+UHMHq?*!p-Bv
z@2lNb@!292$hj_SkvB+kMkt|Ny0?%_m@t$9L0h>5W3HnJ6Ryr{UQE<=4BUu!%|TiH
zN^>yMsn((il9`U>o^@Kq(63%48zq1K3}GmHt@F53U#UUC+DNBT)?IKJLvO#+pJY|1
zy5A%LDN?hnJ!~W_xbTS}-|D)Q<#&wF5rR^}AFN_OXwObRHe9(`g&HDCBJA!<)xufK
zO_YD$VyKmF(cA_}<Ou^0Q;dtc#@B7K^Cuw^hBC}*#S^?r(D05!3D^l#BVDaMXl<t>
zBxS$#7?*gPri9X<8_hR$<MH)0pM978v!HG#3~jfqN1gea$dQr)YMaOf)!NH-ySr=;
zbZvdx9+K)dg{^&a$A<58shMJLb%%tOFFQ6^nM*J(i2jfCjx_f^?9c!z>Ifs4QdL+v
z+OsJ8Z?;(l6nBL3!5p_5TlUd^Lu0lqS23x9;q)&Em>Lv6MD1=xNV?RRTboAeq12Rw
zqDYP9ER(RG)#iV-eqw}YLF;Y=)j2JP0cSyt+{Tq0@=#jIfenZ0(`hv^^d}5F({aCu
z!ydtcp(Xx!k|VsP_XMMejVt+SU|AE!NAnLq4gHZUb=jQvC(--)kag0tG@El-z3h^j
zHj^+^=cRL!JGNb3K<7Wg#>Ne=ZH%EC8;_Rsl5d}vCQ;K%;!@q%z}R@3a`s>>SAN<$
z&ebyt6P?+M&}VxXL(SY^K}=BP7eS(v1u?k?Lb|8TXT3sd+ejHSotuOLcFIxd{s<46
z^655d5L7@Iuz%um7mC+MVd}jwxcOIP#l_2t+d@`c9p}3lVJNfx=BqYQg?a^2Apx6i
z7@vR+=VcoiD=WsZAE6*)%F#4fg1Q98z)hMOd$CEp>_vp>MhQKS_u=uX2-A%P_CjVc
zJj|)Xz+XpxZ*cu0Uy=-C1nv!%8cMdO%iJFFp#6nMSns7?Da@~0V#QPU5R6jwxI8n{
zWWi!ZLV<g_(Mtxi9vGv6fq?VBML%<ZwY>e(M5ib~Xx-j^k(ATxUJR4sKaXcTFB#!c
z);vy0*VhvUT)7;srpDFh7;xo^S)y&i`JEjyjBsRK$dfIC9HMpVDJYkf77Jz(tK;Z?
zqb|Wv%Ji)FR5U2@qbRpsv*ILcD7a5D7UU$etReQ+4OSC4qtm7&4uUe>2$Pc89FgPr
z<I#h!(@z+xof7@f{t3x4hC0u&y5u(oG@?itxW#CmLvJ1!3_OHnc1Zq()jl*~s6=EI
zwe9C19R_aDEEX=Z!o*d8MMoG)Q?W4NvOiKugf_RRjVZ_i(I#O_F);5V47gIoL;iFP
zddL$7T&euwIh#ps!4n3oo!y6LQ`FKQ*9)gC0vNbhtGf~uG_@i3=s5hBRk~g4=I?}}
zPE^=WCmRk%U4Fs|I|jJn1Hd#B23)fBNfm##HDTzA4|}05k#(!|XBh+A>>9-{&rZl8
z2HvV*=mCo|rD9@V6b!gv@0^S;a9j|E)&)08)W8%uVJKa2kbuJ+VN$$k5sI1<#sg{~
z39*O)?|M_`m#w&0<uF>#KzY!`Z<uLeAbqpQ;s+m3$ziboHK>INkd7tc33x|Q8wZ0r
z;YslW&^)aOOO@gE&E2K)1J^KAQ=tOM0BybqL$&@lmhrmjK4GXi8EhZLn*sas#Zk8^
zk1PS9^*gz9`=sp|D>e#kJnmU~E%+~D4D6`uZ;;luY{Ec`u8<>ZCSa9__Na{sLy@jX
zJ6=!OB8)~+Mp`LK7~wcjTRCy=mrA9!72=RDVzTbp?gg_zgrPT%?N_K>$OuE-FxNj;
z^#3Bs4*a`C)qo!ZUZU<s^#6W+di?eW|HH-B@PCstUVj7$S6^k^5f1wh20ZDDjyy@4
z8Z#Z%x&Byf4`mFE@h<q5Y1gu-4T;0tw@kK(LvrToFmLYGDH#I8b`fQ>cSE6omjkIo
zYkDMUXPZy~f-P$O?pj_9%^oQ4iArI|-5M{3GR9JiSwF4P)N_#_6s>{9ojneJrAp?n
zi%6&Z^)A8anqn)Ic;Ngsq3^sHdizR*#GCD_5(!2a*n-VCOoY3XZJZA(**Z;Zw%d@d
z<JamsdL=2DA4Y9mxm|aSPDO*E?z+Zu3}>KN49z_M_S@`XqAHOM2HbVMl5uhOu3=~y
zKgPfFMQ<b!23)EVPa5r#7uriSw=lv8$AVtjphA(jwgc=LegFITaJ<|mug5dm?lF7D
z?NK%g<W@oyVcv=`V3oio>vnav^>+%{Grm6L3a8LdQz6j81kI<R8;z$`FX$Ifu|~)Z
z?2L0?ao@d?FtAXcwyn(@osAqZl&&w(QmKvUy03H;{kj-0pZLV}d{<sH><^n)kEuzU
zRZyCV_HAp2Ua|FuuY1E2mfnEKC#kWRyB+q1U9H!NN=mdLnYMTw|5nb2Q#M4x!K!Ea
z?rcpS`0lVdZ00ND90uvF0&6~k`G6V&Xy4j+fR7uRD=L2jrwn80-u2v(RD~OY@hR{6
z&p<bG|6gPil&2GDO%pO!V^F!ltvw(xDq?6C&#Jl;!zc!{^ofinlX<wW1$jI9L~vG)
zksuau0zp_A5t4oU@QFf1i0gnFLWC}VgKc?0g)rb(!m6}J9AF#sclVQ^AC<#EUkO1t
zT?V&)0`(Xs@T}uOqD8b@3^o5*24(ru5YvCc7<wI4^3e3R$)h$NCCr<`$zQ7HSQ~S8
zM%EUzvSAF(t6noaDq?7Z0VN89MT`JL5vIC^#AX{9w`gP5u5xPoO^*x)9#}PfT+z!N
z5AQKjFA_#5=Q)dez%HqT0@qnhNDJ0U)PanflgtX?Maz}-YTVzG-6eh;O`mE|Xt@=7
z+(G|+f>Cmlb8U8Dw4ejoH`ZpGl#m9~xE;v8(Zfg~d)=Qzy@H%<4N53wEv=m#RWHvD
zWZ&$`;XZ=5y(ocUTY-=?okP}9lVa^ix25;GZw_JTCbB#nEKWX7G^-FT1P0G}cJe7Z
z%^Y7>#Ym144kY6&J91u2fG?emtsZ1YI*^Xz@ZN%|Yrj#KF=ph-(xt;526S{VBPV^V
zi-*>%W9a6UEdD6!%RE06VW`^6qU}92D(pZaZJu>cbF+6Dw%J`%ze1nDlxUfZtlYfl
zgBKl*O>@I$nK}ld;1NEFw=9ovAPm);tHiO`<iU6AqB1G)C4_^SG`Tv7S*p5f2t%QP
z3%(^fhO%vXdt;s}3ZZ;T4*wbGaPG9sH^~<LrVPL{GAs{_LmSng=j1=?MY;o7J2PTY
zY?QuoAST37orRlZ;Sh%AGnC~OtygL!U(~_uU&YJUsC&|SLx(WbP(M1n?iXL<*}c$8
z{*8z*RKL_;?Qk3&5kbRz!qRyY_r>yiHtnB>>;9#*qY;Lh!St4~=P!T5*sl&||FRuS
zg1=TN8tNwuESGqiPuWCjGJA;S|HNDljk}c@fk06|9ZUf7UzZ%#!7N9@z=_&*2c()k
zu*Fc5m`bxx$3w#3r?2deI*<Z%PD($LzoM6b>oMb~-l^8c!G!Iygm!=0v3|TbP)-<1
zfl+W%*HoPy$o#qLU&_I)$;Pp#GN@HB0a)orz`izNe00PAG;||Brt0sIIs&s`)j`Oi
z`=BgMTIx`wP8gy4pc~oP{N<lNGbmvWNB$NjK;e6WcS^q*SABU!9ZWZtW1JP9u%oz@
z-d5u~aC^Li>Bii$Y%=>g#aXa~p~fE+TNsE%B@Cr~aXb6^@O&TOdko4)zmHEtHyQWI
zSW;zQU}SwhFgHw;`(1VKwixgnaZ0|RpGpTZoUG(43(c?_55b@hWOA21Ot`9oG$%id
zA@&(TXfnu=5e!t3<P4b^#o*E^FpAN^6NB<g1tL%^hMqTNT`B^RBLbu~{EQ3yzXDSW
zjDkud6T#?cKfDt;94IO&(SBLTJ<@~-RzvSF+982;5@7^s$ookYHXkrpXhn1P-Mwnr
zXr*iYBUx?g*Yc<XnMirn#j(86SUagJY-D(o`!sX|x+{+t(&W>Gj6R*rdBAlgc$fR<
z>3rk^oHJe4$K!cJzte?obYH)m7z-ycl!rQA*71-1YRw7qRXr-9sDV4hTw>*~(tMvP
z_BVhC>_7(842GQ2<hnV=XU<PQ^NR*gqN=f~*GGV%mPZBeG}u@p44tyiJq(pqSm7fZ
zwlzKj9j<Z<#N|0bk$Zw1NcE9@!blC+o$qu!q>1nDK}hIRDf>sz2cyKAGmi3^*hOI@
zQt_utC=D}^r9;m(!CP{uVKiy)%O91dbdlS!J*!cxW)VsR66o*q<50oPdc#1?i)qlz
z$^Lfc)DH-w;Z-8V(a@a$4QePZ)ebW1U>cNj@9(K<3r#^12E1%n-IU-2RR_|bE-&(5
zEZNnbLr~C?bq0m@3uiers%r>En+Pk8XDe$25~2CHUNGL5Q1Aew6M3ASA2A3K>_95i
z$#q}j|L(T>v=76S7wrFho84A;Bs-@nWtBFmN?17cApf4dgZLRn7xJnFp~rOm^xKo)
z0;Gtf7y`3FCNo*aqgnZzx{y^Bk4*`^3lzZ?2fF2O=$+3W;B~d#aYbCzY7vf7-rKi)
zJp|G$2_>*;PG*azZ=*k!GB&DdN4l64<)!@Eq>%1HQq(QwgIqC#FmU;mq<EV2ql@Pf
zZOe?u3FA|rRt?If?c%vav5dE44x4m^=i$4U1(h?v9383>j4<>zyS2dECGW}3=80GB
zJ_sWe;rFj>3JO05b}G0V;rWU(hTaT;x5g3%T&kiTyIzhV=XJt>=X>@(Leiivq)*)%
z<9a+@z4~*q4F)Dpvvqn-_4B=pM-VINcN&K3In8y`^I|%GcwElLit#$(sJ+6HHx0%J
zIri?8JuUauPwl;;wQ3>mC)3;Kum0?ZR<~Wte&}LaQ<`4Es7JxjW@+a<5uCh*r&+p?
z)tr8vm@<mrbzq`}V8SXreQ=d9Fe7Q&K|H8*I9^7t7i2X^80tify_TwJScIXcoG$-(
zGDXXAeMv6fi88_n--Lwx5WgM23q%()k>zpI8)+B#w2y?L&2N=Vx|F*E!C>c78(XBz
zFF1^l%Ye}X9H>;;!smd?EVD|7Kdi%mv}5kJ{yb~c24^s3W-#kgZBsf6xnyG-llmz_
zD9Y`dw@b5C&Zl4WKTMk%3<-W6hB7r+oPG_U=+m!ul8Q=X{c#vc9~|U;#YVd#qfWxW
z3(t+K($^4p4n;k01y`jrsg|)*1jCeGNkyi`h<CB!XIT+vIwL+li7-@wQ^kSUKbq9V
ze4h2})u+%6MtIznXKz@IAhyPJ@djZi3%B4qDxIh6`E>NvL4=}Llvez4lT#BujIbk%
z6LQjy#~WUC@P;tdz)mxgLOaX!>vWFaD%>l#QED)B2*SVvgyzcaMhTS6-!7!pGXJei
z+Q%()y710HRY+KByEBs+W;7_o2^(B6b*UKS69!zhJfOvgS-Sp_XeAh7KyQobqI^MB
z8e#;aFWZvkt{C`uHUphV^ED|w7;2-_!>suJ7PxG=>bV|l-J@83L|w?9an)nu-Mjoa
z>OGTS(8|4^bn~|&xpUZ{j9{=Oc^*8nJ*4>FP8jNxc2Qd+#DB#T*kb5od~OPczHH@{
zsNNX&6Y~rzz1PKKeC3s<Xsx=K!YYnf$S^AyvLFo2M#$_()A@HQyuLkRB9vf0Xd9cW
z<URu*Vxa`RZrkN|c#FDtoUb6x=TH7B$9Vi&D@O<ew+y7?%oiQB8Zr#kK9&bVbOgb`
z-$)_Ppu!qeF`(Ak^gul!Vy^A>QbEGEHyafsegt&ZpiCOV!18Bj8*@1yc2yFsi~+wC
z>31jVm!Q{V7ZO;~@2&)zVS~3WCb7yCIQP0h0!$Z@Sj)vPUuI7W?oWlBJP8G^*}TAd
zn9(CGM&JD09$~;WD<^g__61Fhb@4P`X;SBS_NYWM3}rr`>L?}tuQ3%$brfCqT=K0k
z(v@Rc{d)8;KwB&7X<uFJ!FfMvaGNj~XuT4I?-TY;N)k*H>dLM5$(`>}dLimcp60kt
zPuq>!uqGsI#BtZie~&Ss5yxF-WZ&zs7)C|WjO^|1w!E89M-vxle&+4Ad;$?nxJQ=V
zV*QjQVPNOj`Qz_@IA<Y6vq=~qj_Up_bW;gQM%As4`xDo>9%LwT&J_;EyE<S4*TW21
zLD1q>IX9L)7<gFFKFxd{pOWOKj7`MJ`FuRbyTUAg0SSxw^QVEz4~r4-1t^r=%x=Zk
zboG`<YC>9l8eM=nna!tT+DZNhc|-Inlv#L<eHuC}Hl~8A0d>mA@Z$o*B6YvR9^~kx
zP+d&vSPDA53l3WE3{j1K!=kQUg{%8`n$k!A4NcRON{t7_K9BwdP&7^V7QQ5#Bms@&
zU>Iy%dcP<%5p_ur!Qc;ev5<}qFJI}0A`wmx5{C6qSY%brC|WJWr-``^YK}xbZPt=+
zRo(dM_P5EGC}t;MjDl-_9s!aqEXj8)KZYs?@+6bj6eonC$$@zAOi1PJ8+fG|jM|M9
zNqjX4s*a(ybxdE1wsOS*DC)tn$BfM42Cey((<|+8zN&#>0xr85nWcQ>6`rx#aMh=v
z8|kXufZF)Sak~b)6Cr=lKh14TpZ+&A-TO)_dTNe?WWy8ia=d5WIrJ|;->2*BmHO+z
zQ;A@38_Qk0%=H}enLS9YvYSOF1z<x4Ck42v8SN1YmP(mI+En)Ytj4LgZhM$n%`~c|
zux9UH1HVt1?UGGTE`Q#)VK5-GnhTM|$3h9R>%n18V_#8f5GtPbJv`89?m3;fqmr0{
zf$upT=`)5b%Pb69Y}{weTd%t0m0;k3P|9UhE+mBUQTMY?LpO3zbbfwJ=*2%)sm~al
zkTuidlH?dl=X#L8r3!=l3VOhgLxIF?)>p^}@a#-?y(%UcbznJjBPdLyRQsod0oOMt
z{RE=F9R`%2F7tgbpu{E=EvwhiK0!Snq2Rkl?vSkt7zjhNe+??iEr#ajQ?x{YF{6Z`
z<Q7Q*Xh*=Mub!U0(>{cP@8xb3+NwrTMH}@Xe`_6=csNJC95b%@c3quUhfDd$BNTPL
zS}~KVS|g00RWWPHwIm9{fCau7T5Ch1Ifhn1$R{l4lxZt$cj)lPj;#FQd^w4`?x`EK
z@C<DaGOiNC96!*1`NZA0uj4VloL@4Nt>B$Z%R_Xd+N~(Q9eu^J7eavxP&hVmDGDg%
zdyt7O1!l>G6$g_M42~+`UtW}jfyA92q+zrBZq@9@<7G-Pn*Uy9jBmU5wR8zX8(@Ek
z=hN|%!%%)7%*AG<<C<p${)-u=9_C`j){RfI$#f#y&GTaP)g#OxjE1r1w0hAXcn@;1
zS(qq?<|0SK97e5T>$#0S3`mKVZkbYZX!X$Gqm#Fvh7Nc9p1-ikRT2<?GqURN&`6`x
zgEVZ>e(PVM%of7YCbQ<#MfQm}|Kd8G+k+%*xv`{39t1`A9k$zs)~F?nPx%gi20CoN
zCB((Qo@uAk2itne;9~AT`F1`k+N7Qmzi8UXre7l!t4|$kP$27T^bXlRqfdbmPEd?i
zXFGSt<InnENLczfPVRsDO1ItQ>^TYuqp_|B{Y-=raG0m#WcH+nQWA!0N?6R;gr<Z&
z$o^*UwrGhdlr{)sAuJ{Fw&cSF5|S*6KA2O$fB}0wOad3e{)7-mgI7@>lEAWh%ke$-
zTlf4@grj=4J>5?A4voRUs)bV6v!cH0LjqXlLXRhJpQ?(1SFP+%`rc$QF#B6%Q<Sk#
z!q6^_tCy73`&xjoU|_H8nd#uMrQZur39iom72n4pjD;&>YHla~iwR-qQ#g{rZW^2T
zZ^6Tk6=R2s<X(GJI)tHi*zL_jR|)p<up|Gr^7qIR;a?eI==5zZ>mEN0TC7~2It!4R
zVE$BtLF={P=R<o6Y%SzKiVsLd?e3WS)2ce~+t+6w%_KhhfieuG*I|t$!;W5kNNIA%
z#11?0^gEaC_*qm&vmn{=iWmwo0e6n7gDg5f2njdonD}loBi@IsrV!tG<s&N)E@i^e
z^BC>x36BW%A-P$6J*KFW_Ac5v2}u<K7q*)1I|$As3~XjbN0Id`xg6u@XYw~NKj}k$
zlU4Xxi%XKuPPn%0>lEksc(^#e)_mYqlMlvFDbCzwFW@!Q#}sF|p|6;^^zkSqcbMO-
zY%aa5pf;B<ln!(GHmNY8{q_gNGX;h9C*T_?toawU!e4b;B6K)BoJYM`vE1&s20d<q
z!DWh#(g^zG^%br$@1m)Z?}VY*GT2+;{d9TvIMF6W`jBp9orSC2ieBj6hk=A+Zi8<3
zwLA}iE@K<s7wTYvZNH#DlOl|R%NeyKJ~K!Sa%swXBJ{R{ma<H&o|FCY-RRepdJ0a5
zRy>Js;+y<-6mTgd)L=y;)vLTPO?cCX?B;Tj_nxdvp@O1%eKU^v(+CBD7#!UudCr5K
zHc|xmBol^elbrRzF6x*W;oxb}j5!%bR0OO}F^DB3jDX~&975;Yf(Qei2iCJmjL(dJ
zh+j}d7>Z}pd@O+yOnd62LLV}Y94bM#HoCE?S-K7e_s^G3-8=nGXC;>)U|WWiBOP$%
z`?S)~?RP)g9Q-tNusK*hk*)_mlK?XOM)K&1)KQE69&aCVoX@j7xR(khCAXJQAj?T8
zjy=W$dKrr5Y$o?Isd>^13d&=QfRM4=STw@wQ>CmW6tyY1NLIU$7b#)DZ^U`xD%?^5
z#(g6XkN&>Iw!md0JM%uCPt62Mi|H~RJ$UozEk<}gHDo;7$MdOnTVFiQCaS?RVSIYr
z?=$d?icx+68#)J)P14q8H=;hIWBH~d3p9{RYhmE0!lF_$uY8PGyIq_f&llefkT9?y
zpypUMS&aP80ev$}p(QKp<q&j&A|z}RM5QquD4XQ6QpdRoL#y<&^FGAx_4^+kNBJ~#
z@GzJcn`1ii2Tw5Gg+7fQl$AQpSXScnVLAT;(<goGWa~m-L#g0|fk}c~z4X4?U6leI
zkI_CfRE-mc>gdsm;``A!o{W|wJWtXed{8C)dFW;u!CJ!OLrrW>$og!114}K!Q2mz5
zihF;BN*F=EC8?6HFMM-E%_M?R{g&uu({W2X^?s%7^_aXZlOucqfEaLHFYZR&Rs&P?
zs9&LO|IhdP#rM(g)nB<(7>U(aeZI7hr*>`XOnP$n`_<*@6&Uv+YnxpW%MQ`-&w@o7
zHy%&HYm8vvJ9(k;XfEMEIwLSzwz4sC<g9nALLYj9WC=s<#d6IVlE@N<W~flKhExr7
z`j~Nj%5+Ha6RnrW3Gz-GK*lu}wu%+dQ5vzwgY{Y}q>K`V;uY%zhrvR80QuHTc7}r0
z$}k_@l|K#r5ubDZ&bDjNdLrb2n?gZFVtR9QfdJ2_`H~sM<^FikXP^m18QE|L^(tLQ
z(1FgNXcFNDW}kwg&}P*kV6LNm)8&K$yQultt(jwykz3_?6xP@LMqxwl0c3rh4}n$0
zXjgGUfhEi~dWoOD{}wW%WDJ;lzZm_>!yCo<Rh5PwK;}2=;#m!u+A1X+y-~{drk9j{
zsr3(T<ZFK$_6}w3McBTYF`#$o)UdYI$YTHl_j@<jRnnneQ*?bIC{?)GC_8k3?QctJ
zA2V};FjQX<CceJSaJ-epfII%Os16V8Rgm}P<Ysz~kX64$fpYg{ZF**(zIhePgc6WZ
zzPGtTKg&2N${isTv~sf%Xj9ut0@j&I?aj`g(@0RdEhPWc{4AO{Y|y~6_RWe*O$t$M
z@;DmcAkON`MUO%lXvtXxMWJ`3{LqlC%{oL`7LtuR^#z?04z{GXSx9*h-;Emr@TU<B
z;IO6*A0MxF>lpcV<|uIIoIm}ta`pQ3;rV_#XBG>=;Cbr8NY0x!k~6>rYGyr{w;a%O
zz-yV?T|%EWVL&(1W!aoWi}M=baZUM4M&G_Z&dvBKlyD4i_NF10kkX-qp@(}vFTV`1
zDAHl5Epu*;s-89mL%WS_qxWWMF9S%4mhGdJnK;6Li?wtdDwPmngn9@CdpN&%l`!C9
z^;u;37A|3g=Gac>gne$VmxN<dd@~sX$bs@zEcbEWBrn%DWT{3daJIPQ<8D@Nu!v_s
z>{>Tk%*G`PFn`TU7$3dZeHyxflK}mu*;L_sTlvGWc(*k2gQb;(p?@dO%dy;EMM(yq
z15aj*$Lv2spYC`*d*c5Nj86<cOul{^I`{)rMoeu{=0#QnlSYfm^$(rP;%$UpAGY_c
z3^T*qA7L~Z4yC)jq9-5V;ZR{JkL#a2+^yaF2m|UQAIHBH1%+9+!Ixn{II0=7o9tv~
zYdG0CfYYI1vh(&KPXAnm=aUIpJs76rPy&)*gz}N4hLQUDa5?|&H+C9eF4a@|`V+th
zaKf}$`m%M9TKei)ne=XDPVBP6u{ah-i#}-(CL<V_)y#WcFuU4f1R^V+T=}g(30}uF
z^FoLbkoxAt)Zw~+NzO6cY4Dt>>${0(u`-}Y7_gw>$~o2B$_@j{7ncR|eVr{L6#eSR
z^0Hvp^~1rHpN4L7>||qED7DWbD|c0HKLz#d1_ioMP8X#tZ0n&R)Q1NK*8Ej>Wk~)G
zAa5vp$AoWVCc{Hb2_qa#!O#h|<3?_PfFum`jmQbcIHSpAE`uD3Ac}CHRUYHmn_;ki
zB%BXg<$WGHxI)cF!>>P}aUNjCl3!q!xkGo3*RB6j8VztxCReu$+8shRw1j~##-$25
z%TVxP;2bTN2}yeuJA}sRe!EZBo)UskU`OYEk=q(tUoX7EAy?_TciGK!^!z)1GXkYs
z4Hx}J#fM`>+dvHi^OeqPYO;9LQf~<Z9w<e}vs9C&42GZdll=6*p{b{u4IbU4Ken%`
z_Gu8bITp$LO3UsVhHQ?ry2Vlxhy)@eb;h-<8S=9&gaHG@v$=qBe30^bhIrU@E@5r|
z4Y%QkkO*aFygux7IIfR}+WRIL_~BR!=x}1y5OScCyJFu@w^|xv4zwsrSM7X;c;dAz
zXncJ^y)wdpUZ~S7OZak(OV%tN7)XEG>4Qe2)x$u>XIY2QjXZx9Vc@V3zvpgE4MiAX
z2M+7SuH7OCN6+~z#md}pm6lX{y@U~VS`-V91kVW$A>~=lcG8o)hj`j`^t`-#oX?hj
z@C{8-=n}?9OQKIhH`2y^Z_7#$VPOomF+zs>d#TYTKZC!ljE0z7wPPE>SysY8p9ha^
zWCV&6vSJw3NlaS(c*k%UP#`c}<QisQj7}K_ejxI(N~hLM4w&SHs?!W%pbx~{Kuped
znA0CZc9s7miKK3TLom=Xm?Np{;g#OI8RKA8ZNcD5)m{uSLrWNcZrKz?>!b(<W@x!Q
zWdA$mA9omPi_?W332hDJV1%KQT*3;y>7k-S9878pwHGvbRlo>HvMMvibM!3|k{Si&
zN&t;^BMex@n<lo5ZKhhQi!gL8fcf<Ht1bSa2}3hFG7SKc3P$wvKn!K1wG`%JLJYrt
z@oX&75R$TlGFtrcFpghjO!&0A!e$wv=t9}W?BVOTX*Sd3(<Tsxswi;Mp36DlTRX(m
zY_{izxXdBuRO>quo9TKnumHdYGOhRQL5Vj=!cf<mlfj7f^s8S&NEjj26ezB0+bluh
zn;U<En@zmhy;*4kdbNQtQe)%*BQq_AzTDinthIdeFE_}g7K>IBRV*Kohfpv$YG}Bn
zzV!^EA*MHTyXJrg=MdAIW_w*5KM0K%8wTP?X>;6ebS8i>@X$YdaZB^wC$cJGz^=KN
zau-8d-R2hgiUP=53NIGj+od0LI3*}dU2=a-ex^Xk31OgRTe1$2c9ii(NDgnl(3&CS
zFYTdfIjFEMc&Lnij$Qigb`$YE5@TqF%=zEMY1HYDntefr65xKagHZ_%w@AwM&9Y*2
ztVW7GfS@R><>GGC9yBoVCX~trt~QL~)wTG{*oN31w>r6D8dko?fz;(M#e7~>#x=yW
zWi5sdydJ{%Xq?5Tp_`CVuEQbC-*fUGgshkeaI^n(Y`~}wF;B_?*4<u%5vQS^iuz=E
z-<Cfk&S5BhxyfB4hZjbH%I>?08hejjfroe`vN#HFhOGS4@Pwgo`y8IrWJipKN<L{l
zoXj7=H-w~Rwv(~1_U5P?NDGoe$nbSCbRD%QxS>3Hn1uFIi=k%c*>18rgH0HL3MHJ&
zMHuR2zx68*{Vj0K+B_@M+1BT;2}W}!DoMKCAgRajlVFtCboMGx{CYABNFZjmJ;mOq
zGWtYN%1}+VxdcBWY*j1fg_+@|iUF6cO}h!Me!|c;TROtk_v$dZfg`*yF0I&x2$ZU(
zGD>PmE)y-2FIAo}FcVU49lTtDtpZ^ve*MKfYrfItY1Z-n?X^`zK`WO@CMot^E|QWB
z*S>*No)r5v?`?1h5RRf1F~QKR=o1@J_-hl2ZlQR5ebMjif}vU{@=sl+75%qE!qHef
zI-`G^e2IS_#vRXqZ3#y4iTKq9vF0I1&fvVRp(iB$e&{Bi>~Jf1ny{~mYj588&w9dW
zHfpZ;xe<o8dOdw-Z&BU8(d}z9=^Q@`{DB~kC%^M_k@1pRJDp%OnUmGZ+>f4~fO0;A
zQIC3;obtBzG`(^RRi3nYJFoT}o)o`QdAairixLJbP`}Pc_ih4TVinjhMNIiU$29?|
zCT)Bm)g<ozKPu!-{}u{GCJeo4YxeJ#LnK=`M8S@+<6oX`rzSWpAloC94`&K~7CM|5
z@xXI@!8(+Yu@!j6Yg`W}w!Thzanu942t((Yog`BkBO(l4Q)Jqye15JG<3kvjjmR`x
zbJZ`JFwo-8r6==oN47Av;bFjFt9ab0%0|}P(+}@hE5Tqxh4QpU*+RH5@Yue=JQ}T)
z`$zgpLiahsz$rfFYAOOhy5(*Uo5cH56NbX0F+1|_(Jb&NgaOyAx%h;m;0WWRfzF?X
z4qNuo73q2~`>l4rA!N;=ihf7c8omIddePc(jqP!Lfo&7QP(`Xmm*PDB(~F}=JmfTr
z6b(KagD^sqz-6m%Pg+d-Mjxj9-Zm)!9ALZyL5GA945pPsk!~SNu#gDjv%$0<h7RY<
z7_LRw5_15oUXz#lHJ6Z8iZC01W_KyL5a9G?R#g;)PXI-5)L!1i$XrzYFJWM+QG^&_
zZy>@@g&0MZ{FdEo021Ngd1GVY6w)#?M#b~6cID=IxY=UyOlQ$zN-OId*nZnLkZ!bt
zYvsAroA~r|omMB+2?c&BnSvO}<8ll&>namQe_8FfJO4pV7$JY=B8O@YR{yb2P_PIp
zZHDqv{7!O&p%+2sIaWUvjR;|=k_`HJSd#IU9M~uaVyJh@mseF7>M+o{z5P;C)uG!H
zp{OJcs}4iY(!POIqqGk)wb+|(s7g3+(N=YM3WlCJRWLl1rm2T5APl`^f67}sXVB9l
z47ggi(JC&ISIXa_W=`2gllDp(L$M7nsEEyF9iwP|IJN!|hSB`bvatjn_QX>O41;BF
zUm7&!1p^X`^!40Ny81t!qo5T_5PSqN%^$DMXSyDPEz-bX+9bNKx0!${k8r|DB5v_3
z;ts;l@0xWR!kRdOFw})x>~f)JAq;4SQ}N2v$`*pbJFVfzvZw-d^biK@J{x|l92tVI
zc!Z>KC*|BhgrP8gW3%Aw$P?`B5QdWSCu@$I>cQ@ifl@|EtXpK55h9pSp-_#8L9dyh
zv;^a#-MN{@^nVKkqt^<{`SW6_n}idFY8sgt4zUh2S$j`e!oYQ|H5|$Y%j`u=c^+8n
zmP$Is)Qm7-AKLy>#qsu3>8`hLAPtz;x>C+5Hm;1Ks*k6K^>LHv$```W%LaK0lMZ)$
z`QK!H@g4b?|Eonr!d(yYe>RUiWp%>dr{650;44~P6fhn8F`y{PY<iC8vLncBEqnBh
zrxTJARhbR#o>zaa%;H0T6I!}vXxClRxlg8U!FZT2i>V6?(6w8T0W|$fw(h#7$vHm#
zxzU7r1Ox?k^QT|NZhHt_g<IG{)ol^kduG#MKCuDyOIWH+$TQtuA0C&paUcnea02m_
z8MA}?kS#pUXZxXVMv;6@cFD@Cz9kH`7Z)}$5)3s5uyp)m3`_x5rwLGRpoQZrGa8W<
zB}xmY-Gcnzq&)g*T!^o-+sT!-ekmp}WfnDU<U2<g>el<-4kgeEhVFFW^wsLOs2iEu
z1$SHvoxVbmnv8?zm2Qh}_nRa+NoF2^QH4WXpFJ%WrVa;-jxZFir9_Tu;Yb9do1Eo_
zZ?GI948^m0yy(VHx4%ukM6n3p7I!1hcv`!q%-9t)Af}09R3NP5h@%pQMqQW2YC%C}
zVKnM`d`sW*bBJ^ln2&m!eHuE<Xxc1?hsjin{$k`H-_EK~UQ!B%?rmn5lQw!z7@>KU
zVrroG(<cngs(LgYKhH<wKU}iJ@v!mKeJw~rE`>8{lJ?9fsxOBz?sFl@2m^DF)j7N?
z=xGy1qhw6uCUm^~NY3^9e=9J{SKctF7_R@ugrOQ%x>dH;R2?li%a`|5@&O`$+qs3O
z`10UBnE&T6pmB|yx3owu#|Eb*0jd6~Ofc|E&0TrC7+Aaf`!b%~hK-X6L!X!qoCXF1
z6M}MGqQlK73$e2qVJH&1x=L)5P+?#D(+CAy3fSZN+nwn6;73dtdXl!0TyC!WlfGC8
zNRJ_=ZE3L_EuR;rQiMs^1f+OU7t0WBI+0Lt`TV8P;5B2QRm)5TuNS+s%>HLOkq-ZA
z^S>SxMa{%jZ$O-GFf=uj#{!!6b`J`q=(6k9n9G>pw2fdv%T<Cf)$7YD-L6f-4~lIe
zobYs@RXg5D8mFHSB^<czR@*w4)IVrJ7-$Jw*FxWK?m-F9jF=DFC>N5twudlO{ih8k
zaAxQ%KJfiDcs{T+7K>9G2tyZPRGaD&99_fEhW*bRzH~mW)j^zg3l9aB$J(=~Qy+#-
zEt_yV83$CJL#380?sN!4HE}5wD@q+nIBK%p+=N%pt!^`Cm(vo4rW?vE*h7S03!9h9
zD@l{X=A8UT<!@S$s*~4JQ4rYXU0w1=IBKgn`>D}`7!0^%XOrou$??%{L86W!oQYR@
z4bkN-JOwDf&BOCIq{%2?z-4>ac*BPrT_t9k{!d)h&NZqj*yC5fNWG<)nHH}3%9WNe
z;D+luqkU09rWaZ@-m;r8l&-}pt{X#pF+#Fs-XUq#;CULtP!4+eYmB{9pcaEvo2kWK
zc+U(r^#uqmKAzwzwWyR-4uVk+`Ni)KQv<NwXnPIez(an#{PyUCMM`u9V<^EXC<DCO
zz9SUX+$TR!j)!FDnJmw7LI*vsnS=L)&oSUZU!H!!6*FOI3J1Gc1?LwDMvDY6ntK_H
zdwr#sLWRrmyxAV;@zTsSrQL$$nllBf*+{-_t1cLX0=La_i1q94ngV%s3zBQkGwIxM
z+bKviw;;VXci)g3u260Q1k<F=Ydc5h>w#8YO^|PJ;BILLwBgmPfT4(U*s?h=o8(X+
zLA*5QtlclgRuX9H2?ecOIcE#JA)e7TIDyDDa{<V`J&mub2PuLqn<JXDh#Vw(&7m}&
ztztz6cVL1EW(aLJ$x78y8632f<z3qvjlPQ03ecerr%@-C)wDnMt96|ISkZs3Vrc8Q
z)B)XZ>1yn|d`6ICbE)ob&`uF35Q^?oWn#%hZWOaZJU;HK`vqa3Rm_4cSH|Q8FnqD<
zU2Ao~DPB1S9<*EBbCbi2m2mN?V5riD!f*>FQ6tQ+-A_7U^9F-~7A!&J*KyrijbTDp
ztwMls)|4$xH4%n()pCW0G$}N;FM{-%e9Be*EEF3>*fdk-`)4J8bc6v5-p5mN;69y8
zUp-v??QX)r0o!>-gxcC|N047LIT5qR_($?rU}ju!^bP?Zj-he22%A`znOLRk62Z|s
zW@3xeuC3VIEC7t6$uWXp4x?dy4yQa3iaKG+o8vj*FcG?2rC<~}!i-m5DeHF4gn?aN
z>#;q4)+|!JD@}AGm4%vJ0b!^*oXquIxuUfr$ahW0zm_bjiq_Avr*OHMmazgRD3d!T
zszT-^f&{tYyIhAWCelbPA}A{VRgw+@J6FPhcQn_iF1i(P;q$uM?%4dMI>$~}3Y{R|
z((P2t^t9Uzp<qE|PWY&t1Ysz8GCoH*e;_&Mhlnrpgitg$lx%Y_R|#&f9^XB;8-mg0
zWco0b#lTEhriqtf3@nN#41LcXEop1IeO{VmJ^$Q8gn6*6<)<^9jG^;j_miken~Z_b
z+9e2iFVa`wLHrnZ1_(x1@w&oP8HOT^U^dU}VWz8#A|-4v8&cPaSHe*J;GLnY+T@F{
zBc>c>kK^SuBj<q(Ey9kN){LkXCswMx^c$%V2IjpMWgU(pBq110hvPVa#q;fQKE*lj
z1oKfH&ZnWn;ql*}jFRv4r~TsT;^nCa2pN4L&oi^Q&3MM~a+|y!LE;mkzz>9Kd+^?C
z80Z5jT@Uz-QFeBM3C(KIA9Ov%FX_fA_czIV4Ws;x#PJvUsBRaNIMzDtzuH5-<i;|&
z6H{5=hD-k*n5%GS4xt~bbFz^`C=ms^7X|Wh{1uoF^7fz8@zN4C=*3}5&eT%j&^y9V
ztlQiqlXNf7cmSSIa5NiFGUe5nYOYB*4P3Zu8<zixLRxr!8Z!iRec{ru_DF;g(86;C
z|1O0$Y%e<`OeWWE!2ZMl!q6%gGq__DN)-bQg2Blkh0o(A9>#-Txy5P-Aklq^tWv~Z
zUSw?ASt14$wv8~*lFsg;yW{bv>a1;W(6TnEmj&DLn|OVEU9B%QXCH$TNSkjGe@G~>
zd9f_Tj;PA12$O7{fH81|Q|97|twVnby2DT@;#`TYFk=xU>LzZ?&&>|U7bpU6M|dc%
zE)6~$edQuyXwu-!8}yO~Df|B-NYedM3fWOR7m%P^+8&qiHQSB;4e8l^)e;8xxbP%g
zK}UAFdQCer483*n?eXz9`V6(W3Bthnmh&h3<NiDx|2)KR5B}T@!hmB$^Cz=xXIMO0
zfC+mW2jV;0k&>ck)09F|Ov1q4#?$3uJbIeOi>Kda*4*XAb083gnirG)San;fVV_`B
z3h0^vMt0lUuP$r6P#8*?oVPP2vr$(`m}d+vRLMD?saarzp}2CJ@Qq-k52J+L1D)w4
zur4MHJUUdG7{*fpgi&!QX_!^{3Ft<)H+|=Z!iK)q5v97=+il1I{$h=DgIZ<6(4-fo
z$jkKliXtxwM*T>fgSDxQ=-TGT2#@Cn%zz04Cn^=S%4guAWH6do!8wx)nR@kL!2P^P
z8_IFHU7wFW+OQ1?Kig8Ah>B1cs@QLLCMdeL(rH<=TDXn*zJf2zRuv1iG2dqv{G0VD
zO*Y~`wtcx)FLZ>Vi`1$*X&=$h#(bYx+^&!N6OY-Nm>l%Cz(`cKxGie@)mCjg5Rhk2
zeU+7JHweg64A3lwvX}eP*jXWc-d?svJuRVV>$Pynw$cx8uar=*mvJ?EGmx`QSa99i
zdiAeMs@wmz+jy#uyCHN)2F8vALp5e=MTT2A)75sf`&$_N>tS2P&`0o3$K7`QH*H5r
z67Q1tWLHnPAq+eRdi&2fJw%59N6i?Rq!w{pa6E=FlzU!*xtGZl^aT+L9&o!~7~XPy
z-f5H+VL)+^GksrO{|en+2?kTt_Sm`nkj7bh0ihD@Hl9u^{=kRhCMo7+Rxos$L(btq
z8@-LE(+pKU|E4hh4nq~6=fgf~juPX*#pVS0K{tXnWag}!>SE*?r@QT81G#$w(kyqF
zaycc*&k*NAFzU3t9EQp}u^5=@pyx0gxqT9#M<5J*M-z<w@jc0xt*^aGKM$OiudB6l
zuUOp*i%<i(O2wN2{dp0%784LY>&rx_<uPrhRvAN!KQE>1@aahVgiqT>FbyKX^z)1`
zaHF9-5`vo*ZAjJ`VGlpc_t|2Wt2Mk(gacPG`;#?Eb07@0LDon*-VP9U3vQ-9jHh&w
z`U4r0wkw2PgH+znLI*E@B_}`6oL>Q13yYSakN+T3&m1E-*_r+nFLrMNjK$EsC3swF
zw0xc`hA4!gcH-&=Z_>PaORBU;JK$fLv;20j$K!F_#xrqM?f_l72tzZL@M$nsyZX06
zFdCCl(9WqRI>F$LezA}rh`)0YmjEO>`V=cF?(efk{q=m@^E74x)V+iPS?y(2%cuN3
zcsdS*lh%G`!cYqoGcn5z6g3=?aWq3Jvl0GzJO_lI?M5V=x}g$AfP~|}$iCyy(}ePr
z$~@f9)p?t(;v$T;dYvJa8Kczp1|=qMGJ6`$mwyNYqILS)m~rDjM@EOi#BTvZQ)EaM
z^ih12WlRJmViF8oymcmqeyaDV?ZMDSJ<8TkhDQdEf-R^@DsULi#~9rY9-W_tZfX}U
zLOX4Qh>)?$E}x*w=es;}L=2+jNm^q)?kTXEOX<!j!+hq;4^Kn2@i3qH@(Z0$UouMp
z3Dbn;d!5X_GBd5{(+H#Wi52lF=-`Slq{@sgn}NyIHYO#r;)50fyH+Dwk}!gfEG$1e
zYVxzTLP_5G9T@yDu)mTyFqE<!SL@4lwWIsTf9w5H%qnJ)U?Cc=jidFrUn)var}EQr
z!gGK7)z8F!uzn0}?r&18@J?72L@1CpsjEZy*sL1+9Ikt>0XiY;eZJ7>hQSE8O<0xx
zT{b&|c&cIOZ4-GItG;4o{x*3}eB>nosV1*(_Im9lg)$7CCZsK&esFc8B#cmy!ScL1
zq_4*_v`iw5V35IlZYJcU_wo+oR@)s+-ucFZ0fwpqDpK4d+!J7&@b;J8z5LUogn@^q
z&0gb-^zcvA!R%duc{74E7B_j?yM&?oq7*yJ$SRyLbfXF89xVUY0{Oy(p&Cs{3v^4@
z^y@A$j$`TB$8Zx4T(<VT^3_XC_9cw4F{WozC}TkWE;C*#h<6l+*$yP}*bnacOMFj{
zWd0@qVNe>?(fld?K5TnO2nj>0qfIF3jhWXuowxfWu1<$K7|e*6Uud7~bqbC!;HsV6
zx%`joi>g@c;DEh5bN=jKtYRA3Y6=Qg;yZ<-mj7um@Bow<<_gXU5e8hds+(o2hyl4f
z{(+xos-CI{gI4VGtehO6jDHXclv+BMyDX8%T_t^=00HUw8&wwELtYUET(ibT`*7U_
z-V9;j{Ac=v<ym-Z(J^%EKR4ySJHExqf#?7HOOJq*DSzL_@2lepMHfrRR9c|j*1?l|
zs6AC>YTF&i1={vhlg6Lm1k#_mAru;MCKN5hKr+XZw@v)=_a)KB@jH+doPM1Y>@xVR
z2v6iK2nj}+>yVb4TxkL~z7F=SWP9CksFh$~4n#g8`iu|BT5T(JAd_bV*cD$=c>C-G
zEGG+B4;XgT!Gm^kMQadeO&GdFCzB>><tV1@GMOY5f9C{G6A*@a8#k#3`pPE^y&M(a
z5UubM3|x-dA-w}{0gg3(Ij_!t*Dylm=;G<|VWG`76NXxj+64CV>$=^Idam5L>C}?b
zI+(L_4#_+lbXsk3o2i32JBesHNzHZQ4hOQmX?Ng|okX<65A<I?#l24abv)*qhdiC#
zVASe`kg=)6`02N*j0s>U(?T-AwhqsZ5elqN#~tZh^U_mipA3u^_)-m-N5l)kpp{I2
zQ#C^L#ynb$Un3N>mh+LW;*6!gZYCJr3?(1+$Gz7McAb>xIIYg!%!D$Awv_oI#nDO8
zQ8@(K9muU&C3W8=7NvXoEZ5!}G@<AluLLQlMxhYX^H2?56^0N7+<4{VzV2U=vz*PB
zD)(BzXzY->Pv7VYT>pv)LvcuT{6=W=B@~?vetMoiJuYk_V(MjV2t#Fqt!%_xKb{s|
zzXHP0*kEx+<SX+z(ZiBD*m1IM<?OE$2qTnK`!6m?lY?<n@reQ39ZaTK$|7(!3r4_A
zq8?A`|BeX>_W@>f4VkohH-U+I!hrj%{PWdhXz3gMV1uJg{93fUC#0~Wdb)boddq}?
zE7P&@wM&oJv(FQ(fB|>e<u8+|457!z&4!<2dx5P0NO4JugIl=4O9<q+#KYOSnU~^U
z{Wxgx(yowwMggY0-N77J-Ww0d5<74d&J<*ibOE>Fd%o+P#Zb-CN|V+~Z;o)n*~giA
z8~l58(?5Q<4UDh|2b)ig#zjwQ?#r!q+m+v~ql2g6Y@rG#&kGoM@m3ico3V0w`MG(G
z)cn+ro)A|Rr25toVdz)2JmUb%_&Rtv&Thiz<c*4GI<Ae^w1>m$Kn}}p!v68nx(5g$
z!A;nBxyee_tlSs_uH#(qFH=Y+a>;XE69(>TJ@7x-K#SACvvDl);7NEDz+h<Wm$iAx
zU!lqD4yL>^chbzc$A6_E4E3^hx}1X@P{L40Iq4!}%oFz;7z*3&Layt6(*2b$Gnw3w
z9%sE$isde(ygXL%z@Vjz>8@hl-sy-HL4={^z&Re{?R@+*Uhk3>Dwn$f%Bysd0V6YA
zNO={gTGJ@!csuRo;>me;9+mIFJ`AjjDbDZYTFmUa=)uC=m(y*@ol~KXyO8_h3nzV!
zr!={4j^bJgQ3wW)ubHW6I#QO8^FNfiTf%^AH}mVryz=04gsED2FFZpBw(BmAgUd1=
zEAoKqK}Hx2)~)GSZfN299)vKO<Z!-j&q`E67mu!)Lrk0<zs&f&myzAs)UP=sr1HXT
z5H|K%=td?-*4SR%pb0q;oA??m+Xy2(tnX0<l`-&?oJ^{kNpN*kl`!Dv;b@@z!1E8P
z5eAI<T>b(Z*p-8VP}Jt}%PV^Zt1p!?&<Aq+MRZ1+V>ptBP|zpBqN1Wb3l&Fn9o>2R
zGThTu`jJ7)^k{EUl&xJ1jI6b{$S2LXntz^<ptMjpI)vR!rMCVF1+LupO7JLt!%8R|
zk93)%m%H<645WL6fm_CPgH7*17Gc1aac-hyJ8&wiN=P9k&VT9U9<>Eb7~w|7dVf+i
za$QWZl_t2DGXP_!gn<JHztPq?HKQf!gmf1V%ki-*m*b)(kRL;DoXMs#dRB!mUB$<;
za%U3{Rxw^E8?h2b;LcWd|Glh`5iud*{=;o<tSNKBim_%Fb7b-v)7NXwdkM@25Y#cS
z_wR$5D%l?om$&0Ssd8fl3|PAIwXIQ(aTm|Djp%4k)-RzfH^$Jse>ce*Gb{xRJhslH
zPtaC{F>nZ*DSP*)ZIee)$grY#(;o%rFmQ`@+>P5&_{|aqT4n@M(|5qONf!@@xzymt
z(ez1+4JHh24A_LsNa4GQue&3hChlSe%Nbs0XW;7W_tNTO2CKTG(6gcE2nJHTH;eG@
z;`B6Ai#G5B>S6|}tN?BK4Xg|XJpV+i!t*)4_E8x_J^#kr(+?isQ${-&LycD7ywUT=
z>H2bF57O=HcD-U-#Zr+$7_f`^m6qtQR2V<yo3;FTc(*3BfV?TYlVdxhZttT`NuP#p
zHs4`1S*m4nyW9Whgzu-JgAZLWQP72CUESlcoUW)Ou6Hp-HhUUvHtcruWwqb#{#G_l
zOp)2J87`#?)<)W&rI5Sw+GQ=Tsc@(VE)`HPOIFPJQnz4b4y-n6<G=6`2Gkw8QJY*l
zWjw=_H=}=^#nv~7cp(h5opZuV*}pe4p!7TnWXZBbHnCW|9JN#vf>D=n?g&As3Z+9h
z(8qc)vRy@^a$vUMa<oG{yX}9IO*Jc&z;vde;(1;(Ix-l#or6`cXi6i((Dey?lP<OL
zF10Zb!caT5=H+rcn+!904L1lw(I@<xTW&ZVqH1Z?#RQpC2OP4ZWG%;N^*1MsKuJ=}
zJL0gRG&yfqySi4W-NiJSO+-si$3vPZ8Y;q2*YM(Q6h#e;zzIhQ8j9lMiBErB7f%>C
zXei28O&~vjU_Lsv`)TOlaVRxQKss!Z@lrRf&am-RH$bXM*Mz-OkZwVf1=_Z4+qP}n
zwvE%aPTRI^>$Gj#wsrfT8~0&u#LPVGUGZ&v5m}WLdsSuTT3+vUSwD&n;S_#u!GP)<
z)YKfZHebx3f+Cn;Y^i#6C|sYd3^MTdR$@@yvM~wF!SjDo<~XglG`2xM5FZJ~hS3!`
zkzEhSzzf06c<9cS$@#Sn21>#rT8y^S%z8yI2zM6mciZrVEr-lFiTG??F-2LWQjHHT
zb+A6S!GiNKSv>yWCFD+@<~tlC%lI1@_i#^kzA*Hgg){n8O&VF`a9mr@f=_s*88B1D
zyBjkK@ZUUln+YB;2;r_i9pT*KUY;2`q_4K95UTuZ;bn!Pqep09p?s9OO`uiixViF3
zwqq~3=bP=n=A?#zM#Fw4QXH?D^RsP3To4rjqftJg^m-PrK@KgTJlG~@FBL8czrr)?
z<-t7j75*(w?0s!D0=~IvB`#F6y_5Hm^{Ha-@1tydQ#Ktn>*n?n1Ocly;L?OTtg7j|
z+OuerIWG4INQrZa09IFk6?4OYFs~Q6riaey0Rh&PdI0$AbO21$Z&nM951qmBLJ-!h
zW3t{NA}fo4(&mk3JgZVu46aGzg`_yjD*1VC2sR<%D5~hptLZM}A29RLspvfmS&KeU
zwm8=8=+~Mp{ge4kKNl*eV8tBAPUVcPgbyBjY-YUq{y_@EVW09F7w7D}Miu=nop-|K
zfrmgX*%BjPPL=BnlVp^B{{TK8$B3+6HEHp9XL~mut58-2-L9004xtzQ4K%($RO4LR
z&TK(n0!xf~;SXpkTeU0k%Je!$l_@$&!_V7m%0(c9B^^W0Q$_poTRYGa!7O1f{R5r<
zDX7or_OCq5uscUL_x3f2rL8DPNbs-P8f0`pI``eW5-PtA&Nr>mXa;>Lf0T2AXL6Vb
z8QB}`jX;E|vC^$%={rOeV{lq1OuJ1`4+aIFpTx|9_u3YscaH*LH@74U(|Q5}F0H*4
za12rrAAs=msiGU<-J-3h#4xmY3RW2^>6LRAVj-Se*u;CV4zeWzX4e;*D<ExSfU7@4
z6SF4afKRgZ`qd0~M}S@)tTJe!mAP)x4Pcx-|3%+u<^RAeyf}sCh>oEDB~r$8GlTGs
z(spqDst!Wrf^1Ns?wd7hvl~*dm&s_EnYE#yaHtFq78iyfmQr4mqk*CUfhcyhnh=fv
zlm?(hneO-FJmDQqiI7dh3Pau<*5r5C3(ZGkhYoGLc)4=m^_>%AG(B!!Wnw!Q4%s|-
z<UIIiKG)>K3<ybveR*vUopEomtfc8&3c^)OxHwg%(S=?ae#^*R<!vf4>^?(I?pa+G
zxyh5xz$BNFt7~9Xg>_>yQev{vTo@V;+AI>X^sWT`Nw3-?+9}?FWi(gA-@0XwgCNdw
zBdU(Mc*70<rA9sLo5oh}!m>8wCw|^)^HVBp^McYphGO<ESX$eL5w2Cs&gOt-JL22x
z%rz>h`aTH%E<t+{#_*tFvR(kMg7!`$ZPY{G!S^%f1G4W5&d=mNv0}V7U$tE!9=qCe
zWZJkcol^Trf)sX?rASpuD<MUZbxx^YzVEzLI~&?rC&2L7o|uq5gL0PpM#jJWr2f@7
zx2EvH#DhftRYxEn#Fmnup*<J=o?u~)+|~gk@X1>lb#)<B=oRt+{Q$r3;e*9LCo}<q
zUIS`S1)Fn~4SqD7ju@5yTOd>pU-QB^c&w$9`b5cRlduIf=JDZ?6f=W0VY~IuxPmOk
zgbwqE!)^ujIn9A36R~hGo>ye1{>(U|ngX?bFSHAh@ReZ^5m*0Jc?lzh!R5^pPtsf|
z*0;(k{`AV%-(X@A5PlXnj$x6YlF!GYsc~3~h{*8IE%zIbi^ue@v+G{DZF^e&>cg9Y
zN=9P8s}sRMNRHh!i3ai3b^8_d&)UUB9a+3}g+Cq1VvNJydoKUmlv0=lzvrQ*XaJfN
z);GQX-8z<|ma97$RJhK6UWuRYe@;5G_KEY%Ac8WxKR1o*{U(S8lj8v->x^C4X4-+3
z4y3@~Xt!XY%W8m6JVSrd3{20+vj4-gxBizQ!^|qfqLF8^COkl#r>Yoo=e(Hu0>1LM
zsC>R?6KW`#s=rLt``s9IF&GgHuX9p6kLqdjT6n)!Kv-_XYdb|$DU0ZB^=S;Yg19>v
z3F#~8JtVK^*KwW5Nkxs87L>s-JgqA7NJ;C+O6I3mMmmpv7nwZ-@TAG6Iu;s;p=t?j
zXwzoS%b+Me5<ne2(AJ>Cm0MgrRMH~?mWDfP6dt29Mfhnk-qi7YdiFVP_zV7^D`_uF
zf9Xy}rSfB|$+tck0BzXKCIgYLYFN)K@#ThMQrmMoSi~A%YuEV%Db7C`Cc@_XKqDAt
z8+0XvCn2xfj}@*WAs}h>u4k9m&}ykt6@Y@C@zjxe12pgx|8&LnhH?T93rMHF+}(F$
z?EpZM@x15U&}~QgcE)=0eLRGZo!t53c0vf>iPT<{lp6aZS!i#_iaiuNNjLy1TdtCb
zMlz!0Zr|TR;lU82v_0H|$GzpsiAn$XXBw2HhoyfLp&V?ei#_9+$mBq$_7*N-dgne9
z4v_;ts^ZH!FE0C049uyd+OZ{O{<F8H5w&}{o7CGf-Lfx|$H0>0#cd4ua`fxSnB_TA
zM44Iqq{?SEhZNoM+L~>rWKKNP@gw;al`qnm?vVDg(WhUXie$W%agN|g=%)?_oSJLL
zR7%Tf|B%kiIXfU6=+tL^@U)gj9jj`-cR$0CKGrYP1*?NDZjY-olXHS}<kILBdSbmI
z`UCVXY)8wW(NAFfkn@R?lK!@GVd!)BhyX!68xcqAXszqfsuH(fs;K)THSq{QWC8Pc
zy>X)Dbb~)dITws(M6uO!!>Koy?go!MW6Y92Y0^w4;Wa1k(BP3VodT<UXh1H48o2uF
z8{FJ<NdBksG~YEt5i}V)mLt|aK{+1A{-s{Fgxy3aY1!2HH+dziiB@yu-AZ`b=WAd3
z=2{pi(O0HI^fed0tPDgnp4oiAxKPni2-X}QDJ|VYa@!ub5pn=3CIKSGlc#GWe3uj^
zWE6+Km)EzMzu5*9C;u1Z91^0Cat^vbfX@`bCaTb1+&}d+YR_p)1`0Bq>&{2uT=M?4
ze9Z_h+zL}E=_FjaxjgRZky@C~gA%kX_{_+G`d*D&)XAuk=u?@=@5|ots2rYnYm|f;
zjBgGum`)y5qU^?wZIs7P$haP%%lM#(1;X}fQ8hW5#Bv0soJzQTq}|0?SI=U?--oSU
zx&=|jXU@p+M6svb#1jy6ZXcz?%y+OC>Yw82FhS`Nb8QN7V8HbIkjIOT{!7nLuxV(p
zRE9+QhsS>BH$fP~DlnklL^{bp7Cb2B>MAwE5TmIa+aPgrz^+}=?U6R<D}iA*=Rye~
zn3SXbLwej<xaS(Mzfbj}D{cBeSrGL`ZHA0|=O@3ipJ0$ZkJbG2V)~_b3od-#B3T~Z
zv+rfOBmaTbQ|hG`HT~ZVeTS6x?&;`ZL|w$uaq!@Ha8;9x@C1ls)^VBC&Nc{&!2t<E
z>;ANZQ~m89$@?7Q469MZ%2ylQNO7mX=~$oD1e=8Qu{~suxB@~6LFdqDH|MJ(c~AZF
z)at>1z<T0|iZcEXj)U$*a6mBR!wEY};~S7Ivf+rJR~1+N60QVAjteh1dpz*L81^xT
z=Nud%blbp_Z>?l902wN*AY+S>XJ%d88c>Mxr*eO;-D9h2Yz0^yX*N~wHCY-=ictt|
zVAYdM54Tw$mtjJhYrK|Zi8`DrsSfxrn2-eqr31ED@Ljv2dUyj+Dw=`el#6;JEu7X_
z%P>^jZ6$W+Z~Z%N0sDoQQz4zf_Vkda^GHxSUB@Un@<DIMz>~jUcd2(QR+uW2qJjpS
zpmK*3U{j=qPZ~z6B4jYTyEgNBQ$K3C=gMk*RymHek(vEW7g`2Gfz}L1y0iKq4-8P`
zyro46&c*az!rR~Ej204D1+r9KSAmfJ=OZoDNF=yTC+Z&DS3R~q6bshe75r@~jM>LI
zsj8U>!xuXGRo+m83=*M_bwtr<vxwOS(%T}TuV2YauH)UkjUzdgMm_vpz>#PqWNW7%
zUt7l6f@-OvC5iH90ZgaK=Wl_@eE@jQjPBkv;~LEagaocD0$Tm_Z%*=BZI|xBMe}Dj
zS=W*;Q7iNA&7hPV0P_?(`cFaBq_E(^^<=Nl6Q7v^HchDwwr_8OyY`sBo81G?Mx0<|
zd|RxBjPFd{xIWF>(p9;dr9n_oa4X$k<bM+=3=O6mIfR{v|DGcV$4j^4?s;}7fDb|*
zEhOB{^s#pkM58(Vz+n0?zJs3}ZNWY*{DczpE2bGXcFfK83e*?Sl%S$r0!*NBgNe?q
z95$x4`(pAyf66h_$KUCo>LP%#)zy$%ztaLj5VHj7<TkSk*NVa{^<~s-N33+TKH@kK
zC2b(1mYT^N!|{zHb3<J#pUP5jI3H~0w!A|d+>+^yRv@J@>{^m-jNZlF_Q@|TRtDzh
zn5AD+FT~a}o|dHiNON$|_ZY-hOfSF@v}&^<tNs!N0yZ0`cQg^$v}A84roIyW7HLn^
zjq`Z&V>z4ColbU1K>|BfYqGzN>7qC`5%!m<tC{blM`HU?Nun%q8V)E(|Cn_mJgd`s
zCX|V<>=wfPCcDG2c|g|;zf*hy+}EcZH<}@>Zy2M<nhvWQ+p$*${7N0oX@(8z6;I%b
z&8CeX*<#UFhs&llY#(C8MVb;v{6{>Th_;+o*b=EW5a$|KOaMEb_9o771ppj1BZv>B
zoE*cWsDSGzGBg_upVg5TEfzn_epB~*yM>Bu%GA-ne8&o`WUA^~^@I`v*q1`QA`R`J
z_?sF7rg&~<!3X)>J|+w_g$@zwQ>B61c)Rb8e++@Cw<rGy_&$|1%i(|tyF?5B%&&Uu
z5)$~tb33NPMH#wd4MFV4OW{GTklm~I6>H{Nl=&2?zgs~Ir!Dp7zQCdY)P2{lGm3p=
z3C_0<q;MSpKDs#^Mdg!V8z+<ykDAutw2)1B@(U}r%NDCvy>tn>VHO=m^;=KFzMWt9
z$ZHF4zkVKSI5RN7vtZ4bLw?hMr94HIV!&UUyOB9+O<h;Vm?2L&it_tG=OHQC-kj~U
z`V9jqIwc~>uxR*V09pt`tCV+ewyPdOxKfNM`U0@<m;TCh#??RJF{w(P|DxRJSDs}}
zdKuprAPPuwib(2ClSd%9fW@!GxZI*-;!Fq89%>vslmCZ)H-BNn;Aa^myN-YL_012^
z{&Dw6AOGwW0(*V#uV4BmCZx~oo-c+^-F3#M4<66siS|x?>ejhAQn6xdsZrt8?(@cJ
ztEGy7S3a|zs8D90C=<7xM<)phYrdB3!#LwEWs0H1%1<QB4FqthKng<>%Q#_4v^2)!
zPx6TZCX8j{>6PtppA|Uw`JwuBDuW7rY*l<-ud*wM7)d&RP3qL0{AsQ*MuqLQc4M!o
ztk%Rg+E*)V?ZV<PjuDJ&c1g@OcuB;BAM_-%VYJzWN`~bv=b~!{KloqAUz+{w<DIPc
zRuEqEq&d{E{F;TPIrgx(z4?#X9m_`74$1k6x6|Tvh{824)fWOD6zy-_rX9400aBPJ
z`~J1W-zIYb)9_(TZ~70qUU6T&X*lNIC8rRcm+&aW#1zqot{$8n+)P-$sbH!>5^uZ#
zOXV>P*(bW?z{mVTUhilh#ndZPv{9271A{^-gz^0${KjJCJpqOUEO(m9Rlhky#zXa8
z{Gn&!Po9e&cwtda@^@LLhbvcrZlnPUd(3_3Tl(i!EDIvWmC*!)jBqxveV74Owb5Il
zg9Ld$i`J0Ri{lw=f>x*pOAAyX9lu1zvReH&OTOx#J%ISWcWZb;*WcoJpDh9QEh-u5
zuVR82&36o;?H=J#lVx8@*WP}yjyLq}-GyKsGoRl6UbKD|y`e}?+J2VpDA%;%N{uZM
zLQ<_D#TV=)QTCv@c?eh;3)Iq>l-v{n&F|vHL3F3W?E^TAen_&W$i`AdYAB9ityh+y
zgJzHg3smr%ySUdXdj6}-z|B&3>5*EFrbyEbDLDI$AfrUyU>FOwT#e@C7<F~89^Lz#
zODKjqv>M|sLYQu0JJ1Do90PDZ@BszW?kPS}316-&*~V^Uxcn4@z|Lf=YHhEK1<#M^
zgkN?XGjLve9SH%x2Czck)wnnp23e?xY1l&&X?f(=I!H0*aLR8*EnXo8i?0*|AaJ1m
zKE#gkj=6EHK+C2`U{SRGU^T}?Z1DedWq>uxfBnMBHNdJhDh47*o29Z-l5nvj5Y`OJ
z&xZfA3$x&YYW)HGUr#xu83<Ljjopbb$g0<`eI*3l93jXYbZbxw{HHUHV!eLTGQ@Fs
zr5R*jjIJUj8DiAyoel{8)2DA$T<mcjRk_ORRH2)uSC&b@p$1r2Ljk}4_@71(rJtpS
z;&tm4opJDYG|u7SJX;1*whd5)6Q(+C_xLO3sN|mBe_yHI?~`qI2KH=OUnsi(Q?mUo
zfVI_*v!(u0x_BT}`&@z`dz9{G4Vv?%oG!7NO*g>sa5N<9n1hs~h$CU5kcFcZ3uryY
zA$1UAgz941F}*47Z=~4M1rtpNm{i<N)>Oz?T#5#=pS<p7@j|=2NbTOb_3Brv2uyh3
zjf^19Kdr2hl$HGrhf)=m718IPTDMAO4^zCa+bRh&ME1BrN9!<ZQdJk6TC<;MFYQ1e
zOPHeAej)wm4j1?n{rrkuA{sy;i$-Sv-2dBbQ05z4mp#%DCWTt7{{S&KtB5ID@rYU0
zxe1%O2hST^fze$>&pTX!eHVaPw?49Z@sSAq=Vm~D@VvtgEKgLATc!&<1SqqZJKxOc
z!NgCbW3;2ngyJLF(ZLme=|S<k8HBLCk`~Mx)?4qb@u{I$a$Us5o>Nar>U<TwA&V@m
zM0^;T;U9{}ffE7=3<ZsSPdNKCSq!g8Ma;pm2<cei|6J3=Kjq|$Gdc`K8LzR+#=ex+
z`q8$78D(2TA&!R-)-Oec`FZaPa<WU>6~9OS(w;$NLLiJLyHJ7M|4)NLrmgYYEUw<a
zHTGisKK|xTEr-AB!=hPgg&e`~=xUWK%-sx8IL5`g#G1;c2a{E*AxBQpR<1K$Ih8UZ
z5~B@fczUrIj!nn!miJ)EP<QmW3d>qlA(hI2axiCx5m?}uVyaw>KTGr1VArVIc}!wH
zVKAE1uy2TJIrd;AY{-c(A)nsZhu^o%_*648OQm>P6*@GdSff86Vk@|?qaDMK=_~~2
z=Usao@aLh4V8^&&5q~%~vHaRu4nvk*y<K^HW2@w>xvm>YEKw7$y$(N?zm|Nak}w(`
z1@M`3*%X)9kY!6}4}{N<WmBiI_oz$S8bdY`z!NT~Ti@GdGI-9!*$297flO53n{Q@q
z*Bh~L?AVI6Vw*pN;dW9Jbg;9BW_V<!Jc5+k=(kTCd^Dp=MEyhOJhG{73eUKbH^_-q
zN@*YqE$iPyef0+{v_LFo=1j6n-rb=sv2WgQ_gu69;ivAoL9KDUExcC3UNQ&qGJ1N4
zTEh^A#h;aL@PsgAmn|cE*rV<Oq?7$(5X26?R6PHdT&S!i-aR6322u6?dIF8w7dll?
zKxuB$PK%2iqFAD9#l3LwoJFX5I;-h_1~b#sG}?c~T1~qDKJ$0b-j^YO$@P@hbeW<C
z{h~@LCdTb7r}W(@l}$%v8#r;LSJVO_PZoPY86UH}tYwPR+g!E06!NgS7B`C_h&^hB
z0P8_v+EkclE})|)95Cv7xqN=<(N=y_Eq>|IiW1mkgtsA8^}9kFIP~liR}R*8!il4I
z_fezgE{0y*XhM6&%>1C?E&6*!aU;AE?`rrDelun^-$8+EbXLmS_4L5!o&a#$A%tbC
z?oB<I%`kyuMNDTLSH+h6Y6A0*?H8Oe9wLOV^!5KKZ~+xl+OC%UQkM}cU@56*bO#qq
z8ms4kve`g@ejughidw!SL>g6Qi)u_o<4#TN_)f<vTzctJvcEIMrM8mg2^!~poi~W_
zFapA==8f$u!sVs*a(bb4<AFJ$^sl>P@D67_Vhk9>p@Cr1X9I5jlIUxz+3K_;qstPw
z0oq#;*sLpuNdn4f2i#FNwua%OvV|CML4Zj#b`xyD2QGf&0Xf>*!b4o}$xudtQlNqK
zB#&*;|L`kF1B0Ld002M$$mA+W(K_N7d_e#J@S*|${8onm*gKfoIXm0XGSV^9F__Z3
zx>(xK|9{ua?44{4U1*){U7d_gRaGDXfOiv%HT0y*G+aHP0RTZxfdK&i>r|{^>%2aW
z`fc+SiL8lCY(#j#W{G`1iGV$l!!>Lyk@?rL4gq=;EuluQ?u_*7%4hl-ih(TMrG{L+
z%58@4<V)23C7Bz7h&>adbC?cyWQ+%PI57(j{@fmyXIs&os4P3YY@t1`lBEaTS8j?Z
z_n)O&p&7<JtN!SzmI+aIgrO{vE=W%}6Jrq(R%FsWYn%eEVhFpeti?KOf!_$IY&WN<
zqns!iK%#tLw3r};1kW4M7-jfqY^fxMM?C#0<0v_jcA*8#P80>+AznCd9Jw=r;Z!iv
z#r|iT>zZY<x28@J05+Ir4p<NoypfLl*o32P!inVbwktk9zBMDtXhR)Zsj>Q&V>4Z|
zBp)nnc^jFNm?PJdleqCgA7Qg<!-O*7=))HWF4$b!y@w?Me+suIUs#ps@CATcw9{DL
zXji>QEa;d2N(^)75b;1zvo1^!3SZR18|{+SI5$I`2feF$pMX&{^L;~A8q~YXTQN^M
z?lPS96R=kn$agSaceD~B6nsrG(d|w-27wCPH`o*f#vBe_ng=rlICJQw5A4vVlvr_Q
z%oc9=^eA!~*fg3vWRa=MuJ;^H(i!l+1;X$*@Q3fX!ac3BjX`@ro@MmvK{Gno0Yq!T
z0Q4ZIXQ56JQvwKyddm1(5po$5g3w4JfV2gD`(3#@(<4Iono>|&(h~_cloJRfM(BFo
zuxg{X+aa3f`F;bslU27m{Psb}5D8dP^g`C*dzI@J7t_sd@o3OlbrAOg15<n=G0ef|
zeUa-L@BB4ANl4;c;BdLbsqslLUmQ0IGdmT*(8Ws946>jx?e+WGUf7B&*=%^mKZe~p
z>;{CKeRi(A4KQpfrto0?h%uFZu>9r1@w+>PellPg+I)W)hD5$DJ`;cPv{Jihput!3
zi+AJB1uiU4!iM)E*l(+~vzFS7m0Yg(r?#&*=3wof99DY%X1Q_e>R5d~+;oO%I`af7
z*nP<&-?#`LFA>(;q$r2+H_}2`vT&(lpTF{P#f}(G1!$B*v5IHwBr%%lKDeiSW-Ebs
zE#Bd2ak}IEmD%&X9d@}n`hD(bowKSOth;H&e!0k0%DqJ9A|+3sqkjxNE_QjPO4%Vy
z|41*-sA|<Gvf4&1xtBjBmEw7xwe1#-Va?lZD=c9foY^?3X)2zRWdmtHg!o4r!dOuD
zSSIr^pDiJ#duoNdo<U*;t=oYj%qkr9JKAV*Y3W+{yMp+JSg=S{jFMqu@|UEosfZ~_
znp`G<Z8(gV1Ypa&A<eg1V!BAnxPrZ#4?BqY;`Ti7Zeqd3h4dWviYC+6ZBT|OXbnH*
zq<In^SwNP!!q*OzMRn7<iyXgc)cG}wXA#zb%=kDsZlB?8#UK!$PsWEB*J^d%k+*su
zl2{@fx#Q4{(iGo%IoRb@j}%=qHpDpL;tW~bQXmLo`X}gs64Dc%DiMIOJ)->(wOqG@
zYyXLa#WWQ;T{@tUn@c@eU<g+@#+BRP5Mo7VZbJUoMc*J3dh1^(D|K-C{6N71l`tCw
z$fLz3u;d(o3b{nhLTtxOH54jcLS1OX?BK~_=wAKTEoFONMa$=?#uUmiD>L{qKG_zT
zGnY(U&GbDk%2J4Kdwl+0^?Qv}^PIFPRW5l#!0dW%EtML?HnpSrVrKE(Ynzp&US^z|
zEyarI#oflkSo~=SArXFv*ixL0+TBPMRS`^G)dI*lREJfm#hgQZMGz*+3^0SDio)ao
z{y;+Fr-Dt!+7`WdaWw+`<tsmRg$!EW#0MZUgFaQ>&!==JIQNlw^eK0+^~S2FTk7$W
zPy$ITaL*GxqFy=qWWB@mSQ47QR-T)RiNKzd)1j9fuU?2vxTz|F2P$6MwXIN9w`B63
zgYtwShFKJ)f#e8-Ypb*=e7w*2Z!s>Qnu!f$bgJ|{QmAg8@w#S%zMKgu(mjpZ@iO!H
z_j#3w(C|b)IVv1<K{|79+o=BisL`0VtcDyOH|ewh2Ni25wKvawaI_26Jw^}ApD_u6
zK%)G5g=tk`jfg<3LX0x`NRrUzLx(A#vo-9-8iNZ9MbppUJyCTaTGKw@c9<T}JZL{4
zEKTe#5=6ZUBbVV2$i_Y$xS&Q3jXj1zLmdYWYwb}*crF1zSE>g8=Fs*8p$|+~LDRQD
zFDr3wkGGs~7LpSHQ#Q(0g$+dq=GOTrH~X^G9krl2h3Lb3+1?v+!}vSD?$cv!`i^S4
zF@rgS#VDIr^ruZL)n<ZHA1|%yXPwHP9``Zr?onL!=a#x5#paiae``{UXKb-QbN0D(
zbkiBx%ruvJ#ZC{fPM0s28|-c~HM4=H_2)hpb@pFpoa3S2^vOSJid<_nQChv_d$2~8
zz!TZi<wm?qFV&^O*l$|(=N~4x>#%aiQWOP_eC25beeIS%U-b5#!9y8(U#TUXJ6@X2
z>KTReJvx0d(K)Ksx|zPMe_U)IxL-Kh*?QT->kZ&1z#;xI=-$oK?P%y!sHEr*Miqtx
z@nbh=)7f#WZEZPKD{)%l>a)~pM?K7_qtns}x%GB6?v3ez=!?;JwWF%7RWLo_iTH77
zp6+}TC{4H=_ExX_Y|ex^=vS{dru+Up$3ED)(OrBUkB#`Yg8F1^p$+~Rsz7!E&}@|G
z3wF_KrIIT>X6Af-%=sQX$G~Ave6eb%OKEY2W%>L$pgklSQ*M^<bambQvg&Nom<@%I
z=smZ63dO9w+p5`D^XXZTZc>WXpEs!2(sIHe;q6N4bpp^O*Pdz3rY%2KVQY|ChP`kY
z@-(NN&(0O$vZd(O7=ISZ3WAL=`C3cJsxY%vOGqU>Bv-AdjY5IhJb^lL3aQAmu~942
z|5x|;R4r6K!@V#C1^%E&H?M_M6V7+KCOu95nclHY;IguMKK&F`n3sQoj!%r=bF&oR
z)yvm@3MlRe@@3JZ`S;?*B9Sk&r5+>W9KyNmb7-+m_VNeYkK5~QYubHj+NGr?K}mDQ
z4olHz`82>Y{BAA|{_BU_mn;#<{K==H-M*Mc^rop-2fy`He+tgWE;lPTCrHl^*0!|6
z#ywY2Naphc|G(oauub#)qF=Pd2nYax_dnn(BUeis6FN&fGyDGyRK@(&hYn;w5#M>C
zq?`ZcyU7!<87C;US&oWkv^^Cl{uB;)-C~9$VmN);d^o_{FD-=4)N2m89<gCq5_R(|
zx8_~@aG@61>EjC91oB3LFhT>Jgl#X1CrKjjtf`VAyQ%IV+MSE=<oF_B%vG&aRkO6T
zQaugf;tT{(p4>bnt%d9j{cDN9=X5XsIGZ-onc*G%Z%nIcA(?uM8Fgp=J`FECHs`<F
z9<;u`{^!^BwBG~gf3V%b-qOy6&e`IBvs_tiQGR@Kfqr^-pK4rnR#sU-iBV~PTt=Bf
zl9mq8=`%=}2v{c>#Rk<WO8GuYx#5?&3B}4PZyuEjknb;{-M3&50V-;Hy64#u)G`z)
zX1S*hlt7#g0Ly>^q>+V{oFkP63%R^tD~2QyZ6Y-*Co%p%#kyu?fJkRYK!E>lkwA$$
zi^MNlra%V(Ao(9GGPATZp*68LrnR$lai(*y`QI%21<J}BTxj1p`i@xh>u~*K3|rjT
zdC=09shVgQLN_w0v(fda`%$!ST27WJncvU637<qG0d6<%!bZ~KGoEvviEMfSsSlH#
zQDx$%>JpM@?rgt+B8sLX7kYJVdwXqt4euMY<^+UJNoeGNxovXwm-XEtDT;HV4O-k0
zM%@W8jCw%wIXT$Q95{Zuz+XX5Xw*`I2?0!^s<ba9Xe+Spq75Kd6E30`U>xKyiy%5p
z9LG#i#{Unr1QkI6LLEsAaV{7L9x<c(DyUQd;w#E(_HF#C_`OSj#48;n>hjvz-Pqe}
z5zYb43<6Db+h{?jjtESu`7X2$8#>Vu@r?JMKQ5S5eV&&Mm)i^0T|(&YbO~(>XC{X)
zJmU~uu3;P3&wAj={^I<Fh}|de(hU&7zP%=U7A`#G{lH_7qu@z)Ebj<&v!CCcGmuZn
z1tWY&{Ys2jF`!7U3NW2vJIdF)>J9!m1d>qT2A)Kc-Ep8SNSmlT!Of*5^nAM311rBG
zu=;g2j7M#yWh`MqaJ$AqORa|!{oHMU7oVs4<jVk6FXRUYl?xLW3sKH*o_`$Q-p(Hn
z_-km}aLZf)guhBxV)%3Qb^gkaB)kgIVq+I|&cy3w>-cqWh3Usm^JS+&Z(~7M^y^Ow
zIwVEb3Nt-CXf!R|FC<x?8$u$OM5!=vHfh7{p`oXBA}NN74s+~49m@67l!99A@y_%3
zmjo+8QoMHH=IjJ)wo&RUq}+#Z$el<!#&aWvw8{R#o0`QPXFSVs67?oCP(g@vRGTU*
zhdqPW3Jt7I7#eB&W1?AB6dhb?!Ax`?Z6q=r?2LTJ?E&t*A0`ZH(&<zBN~3y@q$f?3
z<o6WnCF17`9`A{K9<YLQw4Ji?()F=47l2hsFi1h&M7Mo8jwCmgCXVr1?0FrTXQ9Y8
zN<z<WYB=)%L(D8A6<XX{S-uiOX=&Yg{G%0fHiJ14jz5WtBRaF677wD~4_B4svRi&j
zh9XhzeLhFJkE*780Be?+i7-Wi@wTP1$9WG`n~@4nWHa?!Hnnh}SpElnyDNS)sVP47
zoPCOj$^o~dNGgHm?;0@~?c^^NbN@-70}pUSi4q0AtcAP6-FJ-W;<b>we>)5EtpM7e
zrIcxaj<yox@D8E+R;tMMM7QRNIFT&rH8V_UtehQ$^2d9ySSkyXNL9gkh?Ds(KQ=8X
zFJhx;k~IjdNr2xt%Qdoi8+|djA&jjTu&mvCT&M($y~0G2Uu<pc-yhEISB84~9*)*b
z<Pl-$6v9>^?(9&Ka8IegjP(s>_Mw_FRdWOR;j*liII#@`^TOykkZK_PFPi%slk{Oy
zCwVxX728?qJ6LFn9blvf)D)w5q{$sSKO_0~QSXIx4&<gAF2K5$1GMcoF*Q6vK!8#F
z%N~@W`X7Bw0mz0{J+P}H(w!23gs<&f!|nixaeBMIE#Fu6U*_HywF?`vrL_I>`_;QL
zm$||f+X(Shv&#3fRm8R+3_?99HL!g|^G(Nw$!v(mmah$rk@MFmh}G-|yn~-XV}T#5
zk2C_PHZr;$a;2EaGIoDE<rb}45>iWj{Ym>~On~BL&G#ST+0H5ssfT;!LVIvG{{(2m
zXEFU2cj9oVpF0`bMX=P?K)AN3zt=P}+iJB>N>iARVYg4%iKG|Jh4Ab+E{e8SG+&)x
zVyJFfDAGtDEWZDP2}1S4lN%@QuTm3fS#t2a^EH47x^l<ZJKIe=a+ILWkErk@@mXTc
z8rbcMmAE-CCopSR=<(QD4X*e)f6kGbJhI?8M_cc*bhDM<wqT%t<E(aCph0e18+SH|
z>>^JxxVd5F0YA~#P{QFTSuH>D)p>3#)L+MVqVo+qoK1|Wao3<Q=8zhNNL@Z07-6cG
zlLyzB|22kojymZys_0g0s6Chn0|$#@bSO$7BX1>Cih+bd<R~AO7@}MtG~t70RS@v_
z`N&??O!glUR^UC)M}fgpIlA%}^vG7rA!-j-!!Vy;PCSZME5uSi<WVZ|1xnljcLQlW
z_$ANKfu}#?tMF|$<W5pLUR~WnOIw-}lRi1ytvL`jSNo|cH+7`L0Af3AxRdBAVnNmn
z>GPBSdtQJj9(#M;K*r#20Szz)62JH80{_gV+0WLMmzk)t$M9;<<V@V|8DoMdZhxFC
zT|sRTjM!?p1;PoTqTKkF(N(>mr#O&)&f=QP%ecgwzbok<>J4-BVT}S2k_R6W8X9@{
z?*ah9<s^f-J>M3L(Hd-5(G<LQBCuWzxszyU$a%`9W_97oNxWpVkiIU>2lbR6dRyB{
z_t`am@scIWia)-q=WyB<%`T>rvT)LcH|QI?xHY<Jv|F1rpaTVOG-p<e`D5B@m650C
zjW#iKD^HR~4_N{03QsHZG+NZ)NUmoKJhMF0K8m`)WtEMKz2dS(#O(m3%%e^f+QBs&
zqTmOfLQwurYc<-rnvsMyQ0lcRIpfy`kba+lo!-g9Y`Eu9E)tVCA=3LB%%rvh^=t6;
zj7MKNsVs6cp(umR*-5ted{67Cn(}HpT6Exbz74^;bhwGyS1^SY;g2PGLA&WauChZa
zk7c$umK}>!tR(7FGLD$+02kREtOSx;ts<r$2P@sNBn<C(lRyDITuoEcAc#@E%I<vc
zJ+($!4x2xK;w(0+`>!0S?xk#((sAzAnX2|isbWq=Gf%<^W@)gXkTJ?7Obwo2byQRx
z9wPXWl`@a?o*`OMDGZbKB@Px#-maA6wo%#*#ML?nx2NX^wYTiEKg4aZYuUCTG`H`1
z`esU%>)-4h?ANlmArd{J6bF8Q{~e{s_@J=Tfdc>(Ap-#5{|_j|+0@3&#njp5{{SdU
z8rt&2BS^k_KaoatY-|H~0{ax;%OccKBoZJ9ZUs2i$QEYnIT79^<XgOC%R;^%<>xt>
zBgce_&xAaeOk1uO6}5JkHvzfUNBl$OGYhCDIuX-+(WWhGcSKAMPA)Di9GqO=@G``3
zt(fxUiPmk(_w0BWuW6YQRJ_5lLVdi97HuaPm8kGx**-}wxZpfXJi$D$?LZ3%M4PCO
zr?b=$-QNhieoSG()r84lPE(4}5k{~N8V<XDAUw<nr3j-W$c)m!a5ME0RhL3igv17v
zqvV5eX@s6FVv?`ih+3K}>IV~<W2T-ZrZoy07}kaRrJMhd)=(LOY~mTy`5wMbPEPXw
zfm_gqD$)KKIY76^6eB~#CFz~XmKbaX%pM5^mKN5yO`;aV&+{NlK6BaUe0(-w0Jo=E
z@a!5zeFxxk2k>J;Ed}f1?#FzW%$JFT&odoZ(V3KdXFx9gDmEU}Fmx!=f;TUBw<Epd
zHv%3x$zG8o*A!l%#P=i-7zIU|D_<nO$+VA*MODYbo#hw<VRkN0D8x07Ax@7!$S43=
zD3Pqg!EN6OG&lqmbi}c-UgW{{4D!1l;R+TZZo*@5fp<=UX0b~_lQZ*zwC)1vUJfPi
z8z7N`M1a9Pul2wpBDx)llNg%2d-M>47t{9}X!1bfnS+Z}gE0ctJaAEjTHHLuJe4>m
zY69@v2SxMXkdE05H#xqyd5voB6z;p&`sUz$q>Dr#QkhL*IQF=h4P4nx{sc(~7|J8&
z&n%WxV*jO=5s!W5$EX{5xQF<iIsSDn;C+7JGYuex;<$!bh*E|IaiI7!nh1g~fL>V6
zbC0v}+lK6?sSso`uCbC@GrhL$`!HUELB1<D+~I7us!mCmf;@*0k$8qWZ3~q$4Q%M;
zkHFea;|}nawxOCcx?4D2_~(`L!zbZZf;WRpQ=qurm3jIZcNg-hFNu{KnTo|fy0D*-
zr`PWXj~g2w_!%mubSfgP?#d`Emh%QkDk}$f5O8c=_f|i!!HYOorKP~=;R|K~b%ebt
zP`tscM5Okdsh4X8y-Jtk?7Rhh7*)H6`(KQpza`y?oppQkwFZym9=X1gesebc-MT#V
zh`+2pZg-lEZVa%IGicI)EwGsDz2bLh?3nP6w+1Qi-)ORO%U3<#>09pldM$Ab-`@vQ
z?x~4r2v#_&ag%UnKL55(3I`V!R(jxXb_R21m_WE!42tY2Y5&+JUl_$S=RSt?_VghB
z%U;u3{R5`@)O=^HpjW5@L6k!GiYZX+#(~p9X^(pkMU@(PT{d~W|4Rv`yM34~FmwD1
zrQM4SGROO?NCr*pGZ{^-`e7f1?4W6tmMwcSTMQj#H^^{}FGe)VGuk3OG8dOR3ljel
z<I(8)asU>eP?^ZkldI?j^*t}=frTXstn6NmSQ6aF4T9SaXuuUlX?8f0?UybSs#CcJ
zL;fZ1{x+w!-_G>haV8|;ktQ9$Ofjd?tX17`iz6%+<#bT3Jz2v^*qsbs*Af@4^~8C<
zenou#2I<WoGIR@LCrr{Q)yE{#=IUh`Wz#0pqa|^p{-fTgko?R@BU-Ep^BGtB$%0;B
zN$|v1u|%5OYKjIr;i^~?NTIjKL0asOr~K7xx25gsJb5|<$i{>-AtjFH`VduEkVf*g
z|FZ<=zq!2^&eiTq;Waz>cz<%X<3GAvp|TDp-I|9X2%F9&bwq1eR;6s}dSA(;IaXGF
zKECSU_T-dx&Z@8?AjzQ4)Q@S#cM^$wWX9<td#Q`s+cHVy4>xGHJ6vy>uc74R>zI{v
zbkuX&138T`HLesIJZ&2kg3gk}&6Uyn;Q&ZpT6);fqBp^8{@UVD3-xYBTshRF6b@$b
z$H=>HZFU!D@l;m(bD2K*MY|+kk9&BU)Xt+hqy}ek+NZesRBWCp*!jV^$&Ff9hC-pK
zRyN93aseP~ceg_*coqoVNw|`X50l;~#E7Xx2ImkcY7%Eq5Xe}&70M+f%x#Uz%tjc>
zLJ71xx-ry6=a)is>kJTiKX3L&yT+0V9wQKiq(z(zO=(Xgw`no%iAZnWH?pG$*A}_l
zZ^Tu;0~KKEB+z`d4wmK~g)yLMgFgt6Zf12^6=LNND)u0}V#KsVEcBkGtVc<A0mlB`
z>*>YMywjEsMzZc_S7Ys$3S63;#kV6q7U_N6w_Zi5@`ouoHqY%x_SejGff;@aH?<e(
zAn7)kiyw2!M<=5F)(hFCtx-#zJ!Z!1jm?Sf)TT^e3{7#&{8dW}+E_8{kD2dc#Wv1|
z;y7gg<WDmWH`YSr&oYM|^%i!&q~8bNPQe<)oS*)^-A4P_KYA;za;sKPdsIv4t!PVK
zqL=2NaNY|J=C~sLnZV~B-<@ZnEib(@q}(d|X@zZaknWAyo%Z_P=lo&<W~$-^FYMCZ
zjn!UZ)Q+vP$d0W)*9flLZ~wp08X+A+nmP~w!1r%h?0?-XaJ6%FHZ`F&b#ik4-!=<W
z6SVD-84*HuUesZ17Xi+_B;!2t(95Y}R49`wK+7TWhwrA%VD&a$6KqA^ZlbfH4e^mK
zCe!WB|GwOUsyLTda=zF)LZlAYWa%^k4%>^}>^eu?jurIu<_=Ud^DBU~h3B(QGq))~
zT_>yz;(EDAS7|y*#Fe9z@h&5{#=s5WiBwD9GDU!6AM{g$-7blozCtxYBJd)SHO&hX
zqXO|kHUSoa8FE#UtN`Vw=1*P1nhql91f_$^naR0z5+P+LGB%d1q^h&OsB2GUo<gWe
z<7Z`!5WqHb?*^=|BUJh6tNQFP3qyO<ra4AgZ7JKj8QPwz2tG$FS{|jbiJyeei_jv~
zFLnvTXPv{flMAL{eL1Str4Yu<BM$rnC|SdfPI)(&y)g7onPllrz?#^0v@X`e5l*GA
zJdzGJ$YTS!D-n)V60Z@UC<=NiUmY#Y(wAeII?+_zO=P9(8$7Lo%C5#@GYaaL!?j;>
zRDxDiwh<b_s+7gM{gi1HhK`O55r!Tdv3F0ri52#Mo$33?W%#tsUIYZQm;Z*5e2CB%
z<G|;MMvASEoWp=EW|eejLe83mFT~6$vh~ja-DB=jQAm+hp*n#)0s%_|!7|^NN{uyd
z)FWA;v}~jSdkii_N`ihb**gs<niV_`Z>P(IeOEVvY;EXQL78^r4-Ev%|Cn9N!TS{q
z)IR9Ws$6>RDQ{<dY%fLqZoc;V_BJPu!Zl~ml(zi3I9t*KI_L&*g7TasP4e+tJ0sYb
zdB9&-z4^0+<hK8wB;7oxahN;cO1b+OxljM!u_MQ+Art4X!-9hS&-<0e*80D`YW9CX
z#}Jh}`*jYKZ_YPry#)*D2BcI;?sA5junxNll_#<?xh?+!1DHFk%Skt>_LT1{Z?}QJ
zlC89nMk6<G-a9Yd9AV%BRMn%=&;$Q?lVni83A4tW3SXJnXZbii7rcBnzkzF<!TeHX
zV8T*w702kKu};;=Ql&~~>7g)IVX?qum|bU%%l*P7QnQ%y*Knv9&7mgoBoxC48lnUf
zG5%5Zk!$u-ZTQE5QB5HXAL<MSqQk5Ln-&Ao`H!n=-pVL|S=%{<ZRN3GupkqdlMNoi
zEKI->?QN2ARZT=SK2+|#*~v~w5w2!g7rs_8>Fm3KruW;nGZtSXH0aeTM*ua^DV3)b
zZ3|=3TH2|F#Gb9B&~NKg+15R;L@sd8syG(ekxa*}0o7ZUq=&jrqd24JF%=hiML<MJ
zDU1l1P=m?!Pffvw7GiYgOKH6}Cm2PD0dEIMT?S)l3iV%W0ye_ZkfKXRZ!7~vQbBZQ
z5=|4)LQ6;_D19^$vrX#T68zg;)bfYD?sr_Np88#C>=WCj%;5-`8$PQ0-R|YCzTo-9
z(i2puuc<?5vHog%U_bf>+qyeS)`1(3RNrXI7e-YU?p6y!7<qUN$nAzHM%bun$Qn4G
zHy9)C_RM-MLSMRMb2Hh~*L-g-HQK;Qu#?>GgT`$*CWsVPJ=ym@d2&f6&S{V*zOrEL
zao5PjYLh3b-*HGWQuAf-gfP|%z>N{N&YiMFl1sAKksY+*9e}(bRQ5w}%zA^}0~;ZQ
z$<8W?t{Hm&JYhx?rO7e$PH(XNvrfxEd1w1uca1omjlt9SINdRp3Y1wdzUZZMt7)$;
z_BgPz$~0r`Wn8(w-Bz-TM}dkC24rqUF2h|~TAHn(;q6Xq@7~`G+48do!QmifUn*hw
z?u%7it6&inF(W)<?Qc1KJ817S;*OF5Md$MZxj5f_i+;%%tdckP$_&~G#Q=qWF-Z%T
zs4p?F`EwRbYni+riN@42EiUWWi3P(C8}#bV;;ZC7Q$W_(-DskX51}P7bu02u7e52~
zjEk5CD`AaW;pwdsFl^;!8XOp6`=$0H71x0u<wL$OGWoS}bJ2AbnEe`o=#>4xPsrX$
zTFt26uZS!N0080tu$Z&8{;v?iZv^50n3Jx`U)CE82wz)%LzRi~Mfi?f!v?a@&}ZO5
zk3l53(IqgVYDU$OCM2Ae8lAm9<Rg+32E!Q6H(Lu^-O9G`l6y8x$y|tD5jq;EOS9~6
z>*JosclFMnXW@LgjME@?&iUenfY()Tq;2B0x9RmYF*!;Yp&()T4g++e>wm3^SmJan
z$dypIP|?1#!`B5YLJf2f57e+<4WVdOvDQ6M<l>@diUwt<0PiM6uL)V(G!Lbira;x^
z&5PZNl`I`f3`=ql(-C>~6Oq2ajmlYHmwVeVb#08NQBwXXopmKI3`h%~p-n1l9s69%
zC73j8HN&#*W?5l#%d>GxE=hAgK%<Jz8O4}o&!A*>3NJbjeNL{5LYu#?W9#|ch$)6B
zk-+&Vus(yRGF*#2C3y<wF=bKGqZh25i?t`OA3U=3v~m7;dh_>m;v=)Jfm3&JW<b-@
zm=>qi2o6=6+_BIWNfqZbJA+mLY}Pp2BlVyxE4thM{UWI-HX>^l_;H%;#4=O{9ur#~
zQ6=pFO$VMz(v-eV!-S<vmQF{L2{4~zx)xmxb##c*LnBce=3}%T{b>kxnw>|l!nvVB
zb|dFQZ{pj=IM<qyW)l992JeUCh1Zgr2b2-bw>gmvOsrmiyML^>4-?PWxH+{I>yP1j
zNg2qt6KM#%gE2*r6{kLoCkflwYo$PcMDTb9zb<}bNN2&*rcadodM(x#V%2FhpH23-
z;MBpXkc&znFc)aVoaW)^12;-|aCuehC`bai%-(zDMaYSnyAv7N(*0z82Z!xN?dh-Z
zD4fO)1L^uU*T+hfEJf^gbMM)K^*Wf?*kj$lD#+=&vgs<!ei=p&9~AS%kWH#9xclJz
z0sZe@{ues~(-jf`faN!^g8M&sxrx1*rH$$T;o;dDw)PtwNZ&X=P->1d&(-?tgNFPZ
znKtvwwn5T~18(;9t27{51vab+Wu)aC?R{TYFEEsA4F@`2tg~W7=AjSwlhCfOfv`~3
zV2vEu;g=~#LZmUm&uYgnR5|o8A0w43{EcTqb(K0MiDRH2Rfp<`7;b85Au1g+(+R;b
z5o(R~vqD>ubvqovaZwxy>1c%14GI)yRzgUvL+eea$-#Q1GpjcZ29&+#=`2;VKt_{9
z%QTV5{r_|coCf!!L7Ao!)64@5CRS;xE|sJxiFYv*nFj?Y1#@<Uk#Ztt$2&OuxI40<
zD_CivK@AP7Vj|5$B1l(J55R1ojh%RLU{WSb^#=f|6MIx10uC^fS{~8KWU&bFq4BK9
zm<559%0ZZc)}0RImZQxHl|@T5Z5&z>hW_-I>`%jlEhNl#+~A}HYFrS7z)uBYpFrW3
zafCJAVce4R=eP>qC=)bN<b-YB(%HzFYLHC(?dptzNO49AIa=c@CVbIvITZr_DjxAO
zh(CLdsiK)X`y96XiX1vya5C;8V!me@@GyY7w250d0fofd&_zEq$RM?YaBDlnK-^)j
z;ZdeH#1sfyQ~D;uT@N{cG9E!|hPmtZplRX^5j`HzB&1+l{h@6#%qOWlppo+gO0}+x
zK^x#Spj^d?(@L3<(~nYFb}{E~Q&y)TwcLkO@P9$19X8h@1Kl?-Mz`!m9QLmcp_(H~
zdz$6>JK}m=&tXJgrLeWlS!dk+7O~TpD}&xhAUK;I?Is|2JgS|qf)mI9jv&0_Kfpe(
zE`%O&CIrKx26Ps0ggvVPL7J5aIRsFTrUM$~8}~37_^SQRiZd(NeV(;_@y+iCR$=bu
zsX+Vk@QA=kuk25L>s&5dV?xj*7Vd-jhC2Es8ozZaMtsr_n_H{wYaG`690So7l4ii3
zuG4{WwTgXFWoq+G6vkJ`keqgnlv)X!CF;KeBfeJAN65%VYg;LvWqEKfoWki_n_m=i
z?@hAr@Cx>bDL<rWYYU_U6Lu3tlZP{B2R-fYfIM6g<M(g=`RnBbop|TQWn4#a@~fH2
zk9K2YcohR#_qU1-1_EpY1ep9dg<3YV^dym)<_J_NET_|(b2p$83b7BxsTCqx1=c_O
zmwXZrD~aih7x)lD1=nrzk?3#SjvIIg9+vjW;wq$9lS+jZXD12(ZKE$~eYq%-U>5Qw
zclw_<9xV7Uj^-&jA29DNKy$-UqB0|BLiU;tC|mdH=<Tr}dgw%SFp5Yu4L-Blzi@DC
z+=!0;>jT@@%waV9MOp>8eyu9~xMjhVD#vbru_{AdhvXWP=JDKQ%e}$Y*0(FS8JjNr
zU-C9-ueQBKJ{IY}>Z}%<v@cZ0Mem^`W^xu!CH3P=-GX_ELod&to}oTWH|luFIi=mE
zqY8esZ*qMbv=-9hq0ErM1m)%`*-eACY5MphL4+ZrDxyV<9UDbd9ay;kT(3A>u{0x3
z!HlX|=r{`a2sQLVS?-_W5euBJ<8$R)%|ZK0PYD<0r4F}1kJjVD9LbLW5L&22MgRjN
zCAb$F*UW~Xyc0o^6RMTbI;la924Fdw1&;$lo$pDRIWtUND=u0<8Skf%`^<N#+_GlM
zjGUz6*D)2F4GO!sQ0q6gtQg`XilAw&Ode>*C%3p%(+Yv}v^IhlESi?;y2)-0G-lFr
zp?V<%mm4~}$^Io=_+VSMhP8^X8Hl#2C7Sx%%gAf-<G9tu*WL51<>v;rvNE+2)J|;S
zS?#O*a#srDN4YG|5F=Zn;SoCvg-4@7QNR(TE<&VKAxLp8GO+IWtCHTX#g$Zn@(u!<
zu2^baDAt%mIW)55zgXZ7Nv-9Y>EL0BGBZ(1C9jvH)s$Iw-^}~oJn^rE5-<ee%QkS_
z^q&r~E2oK%nJ$A86x-mF5+L*p@f)SfLNHy6X@0iFGgAO)Mu8<bzo2E*8rUuPa!M3N
zPs;&=5iF(LzyKO^TTEU5M0&&_z-j8dN?}=@H4XJVrd(mV&+)MAI8hBub3D>GR}>*q
z5Yh;pDZM-H8rA+k8cQX?MGGa$8TS#zbA`dufE=+dOwC<0Ee8TY|Ka&@V{A02YnlIt
zuyY6!h6}p$*tTukwr$(CZQHhO+n#r9+jhQPDyd5T&0TlhO?RC>{hUc`#p)1x%YYHT
zP*ov@4cS_p>0SEdi|(gsWc%jmgGvYy(smj@3SP84TUhjFY)5_04!HQP{jwcji_dCU
zu!WkKD|$X|L)oS4zzL?#Dne7~z<h$q`b+ws_|Kr4fTiMx4irP<_Dio6YHQRk3Uwbl
z<%zKoGxrO}`fgXZdcPv>=`t17Ds&)Itf&53d;XARVRUNAbaZs8i5p2bR=z(6KToz^
zEOt0}IH5qdxHJvzvcj}|B1h6#X1iL4Vz++A_Vgq-={AL>8k?kOXF1L=)viGW`Ld^;
zy}7aUihSW9MA!(Tm|5uhEe;L><6igy8~`ezdYy~r*Dj!heQ=P7pQx-ztBaRvQZ|#k
zwT*^?1);y!i;ef;er||+>S?3yu(dy`qnaDngD<B&CT{tfGd+Wuv;%w^P?tXv1eN5S
zGI=28B-TlM-6`LapI8J=TvHTQLlT<7>?|BxrO)w*)VM$4-l-z6U;<Y#S9yOli&@iN
z$5P>X`=f-wM%~5Sg{h_w0U&GE;S)RL*t6C06M&!T4wGV6barTwE1IuoYG=9-c-z6Y
zPA~AXn+*?+XXMEpo;KaUcE2sv-&@7hz0bwm`c7|{$2+SSkHfIH5zOkJX*J8c!gg+u
zHtw4CM}U&k9b}-%!>(?LCH4>#hg?`N`FkEWr*5*~scE)BWw`3gjjRN+;VPD!X2%nw
zwMLL(+54%Ws|5b3Q;ZM2Zv)j0f<GWa_dPtQA-`04Tb*$8HoFD!+zH>%iw>LhpIakF
zsGtzA2qJfnw9qDe>4k*4?Hxn9M7a(qs4a0q@KYV%Og5?gG;n<WzVBDL^Dvg5pQi}i
z{D!pbbA>K4b^S5>o2+48&eIF(q0fljN#geo4G+AP8{fB}@t(hEYu=qZ!{{R0KC##^
zopa(<hp97q<)*98yE*Y4UyTnBwhsvr_>*?RX$3#z&FO}Z&UlKrL0<l0gt4qX(a^Y3
zFYmC*Pl%I@s&?~?%ls-FW8V|Z)0<b&)7r3Cm?tj-^09tZ`@Qjy$d0)a^7)1vp?^$w
zG=BLJxTkk!z!L56_kEkwpLQ;ezZX7SSn?4E@Kyc)Vk-B4JJSzl-!JuxrO9_@Qv|;M
z@AZ>L?LRv(OaK54x&OEA$JY8k1>t`f<!W?n-M8A3{&SH-g{ak0YNFk^ba$sBvBw#=
z^R2ZyAG>UIrxgoF7mQj*sR%MfRaf-?%)#hEL?vCdEJ`9Hf`AS5@G%E;{ls{RlJ#s+
zJa{}N&UQp#Z(Vcb@<yE7B{c`%^?ljhjs6b$H@_kOXYJ+b?BX)N6Zy2~o7+%Klvhf0
z-B847285ef4=~s9ITmbhgiV<%W|U{bYaoK`Fz6H|NvqF@j*YuKZ|REpp{8B`=WigH
z)l76GK$b6p30<7Q{A)R5&KZrwCRg6f@tDkL{zQ?FU@I!Ri17s}ZSRcF^|j#p3XrnT
z?M9+?W<E}iu1?-XD-8`e5=1dA>Y{zD2sI4)<cz^K`J}n})bru9D{Ba>iRP~Ccs9wH
zw<+zOB!47k{5g<y!~$8&{Tjt-{J=1+{Ga4{k?3>%T&X@_4}IN2j~^{^-{6CC&lVNj
zL^%D!gEjmVc*{Ts(y)Mq2$;{G3M<Hkt~jSIIZ_#a7_c%K+B0|HofG%N5nr}#JK6Wg
z#fc^Gb@lzZh1~|-)c`MYK0AZI7jGbb#IoN+uSBC=5t$c7l8%el5s%zumZlbZ=@W$H
zsE-fp_uh}D&C=!&L!ZDYYty~kf5F~Xv`{Mci|zcHFbemwGexGD!Hfmd+a`6Zu1|v*
z-wYKy3B!TsyD1>n>kEX7R8nMA;w2!`qHu9Be@>BTEmaD}<H&L$%&Ap9jx3)1m{QzI
z$7|`5B(<_M99wtGZ`x9urV3SBMHMxte2%!xT1cM+uo0bD!kAAUn|tqZ+AyD=xzh6Z
z{WH~!LtLI6Nin&x^3_fr4Cwu_#M#Ls`qTq1d^u<2mOHmVZpvP>b;E|0{#dzY!64Q)
zAeZ_54Z|cJURD#}vqS08Npt2mu#}(&#`7G_VQx9(4XgH5^P<I)$`<9mev`X@&&I&V
z`cTdz9PTxaO!tk$^XHZlb40X%eG*bk0dL)0Xz-Cjj=(#Sd<EHcU8`dfe^Vjq!96p|
zXPLM*v5)0Py_92)oA&NW_|4&GvC^fh)5m{tv5v&R?`g2C;@~zt&ey_le=bAM88Hy{
zsKQgD*-SCU0B(-VZ+sM)zil`p3?})cp8pmaK#{~?)f1h>{hAoPm2x_14*H010ZL(n
zRYRM{2mAtnZJ6ZQupNMVr4Wh}J}V}4ZvzG$%jZP8yXhs2f9Q&`<YveeVSP_dlf)Rx
z`MimFeN5aGDBJ-9gy#_?uN-w;Jrbj_MB-;KN(1mQIog0QF}7HHFA5^RzcP-T_TfBQ
z$Qo6~M^}Sg1lmy@7xNnQrv~uG+(s<x6b_hw#uLZg@kp{GBUNjH2e@W8h_qzHb1>MP
zc3A%$sT2``;Pa2&l8Rt1z?4Uv%xdw7jmO$K$&(<AE1G&+$6V!B+Enf4_Pt?vCfQF6
zR9*jPgQob-74+A12ziqD0s+GZxYVoyND<?qz<7ocj3&6=`44X_gebSJ6)QkVd0i2Q
zRHr+V?kf>G0n~vJ<BMnlA`y`L<2kL^%_Z}zjBXx=mPj5Ge06RCy0C1Rx#67{qhmyK
z|ItVbrl1pZCRz=U{?c05j~^f*`zY>0Iz=|aF+zY{Vi0X6>#Bz-D+(teFTn#ySn|CE
zDjF2Vvw&7{j9-#`DgpW*D`lCE0Kw<^I4A|E9j#O}49(zt(>Wa=F3{t8vP)?jS&rH0
zqd@CNxlTarkU=w<4xy5AnLO8eed4m8u7k!pZ5PCT-7}D~OD&Q3FVbT0k1xU&XorNy
zRsCB*l7!ifDbdoQ-H;m?Hw-MOt018n^}s)iz$bxySVUO2mkg6z&iq=_A}z=ojKLoG
zDAqU7o^_j#67nM!FhpaE5=Ovz&ZbuC8~tIF%fDbKr3K_`UKqh6LGe^)(Mgwtk^&1T
zFBm;Wp~4TwEsJlbC8p2B>H9%Qsq%LPtx6-K*rd^au6)PFSfDTfLlFpX(@)Lp;lwf;
zN!>G}?zLTE8o^P=^svc4lDWDg6o%lS(<0zMT?RJ{iLj1MX>)7=u+Ow2U=<yP;w@Go
zg^kW1a7<0rPm32DAOG1>`MWtPsS{=}O0a|~!T``m73G#j#Gp<JlW@!eAcJApkt~BG
zjA2<x%}@55jo73?Z4if8Xml@@fcLX4Vmg8l=|UHB)?5VzmVhDWh#j59sSe_Fx|Yxu
z@Gd;52HtW(gww<@WtlDO3DX7BrUB<bDhv-3K|w5=l9?gx5Rp{CsX)loi5Htcdx#^T
zcntr=fHAkNiuB1k@Gs}dCM7&o%p(qv9Tq_E3$+|`Z;N({9!5PDqHZh4v!fvh(OY@%
zM{QWrn|0Q9!2+k2KgifY7jhc}_d@=@@cxo!*UYbw<W6hI+B@ApvY;XKtXx&N&?I1>
zAVC!mA;K-^REXBg@wS*~GK#wQ|Ca~^$1#iQ5s=_4I}vOH?1b=3IYqfqcpav!hxDZx
zM;mKe9QYAOBr7>>O$s=1y|KIq>st!GYL&vAI-(K>ifjiA^&0GoSRTk3=<T*>I47O@
zAWQ_hp^D&mit|N5d#yAX>@v=$<ab7lQnNr(f7r*<4Y1!@5ET4&;FEFFHC(;3dfA^R
zg-o76Pm={MO{3ORP=fz2Zc|Son+7DN`OBis!cUovkh$M*A0sz<IvP0@)JWWL!gsm6
z%;C~sNf!L;t4X%T61o+z0$pxiF_*m;0+~<UHtSYuda0xfCc{x{=bMeH9)!LWonZVQ
zPely2jZt2~pz42ALCWSWiH`yDpq@E82@my%y@@ee9}%x0N_47M6vljdSumkMmunHs
zFm(lt(%LeJ6E<?d5H=Je=+kn}Jn6_JC6WfCu%=+Ulu_x6K`Ls@o?vR31*{v;!ve!Y
z13EHjQD4m~qWf6TPPn%4OYAl>ji2@K@NO1zq(@7hY)VMNU|a0~%p5dFbl)IWm{hoI
z8q##8gyrkoSM_QHxW0=ER~S*#oheoV>K=A-{v6!^3&RD{sL%Juo5|F*B&|7}PTu$C
zX5#Xa)L4bC=Q3z`-<=wb#%AJH`NaFM;WBerwcaU53N&jFnENnWYY?RWQkk^E@!ISI
zU*!f{#YLcY2s!j>YHcXfBp%mce_r~b*Q@#Q&>6snP+p5DGmGp!XKG`}?%MjxJA1lo
z;6+XmN7gCUc5ePlqNwd1T)w5FTmNd{o!L}8f2mdX_CBG8yHNgUGXd;ER7wC|X@^!3
zsPDRYprK>>p1%TSGCofk(B=Y28E>RFgs79E<jlHtzy|5WvN{%z1@B=%zQ{1g)X130
zDUP>LoQNEK2_Jnd>m^~cAp-7$jAn=??T%f3@KuxYebAgvlr%pAE+@P=LSQy*^Q5|E
zrflib(jY2K9{^ZorN`ESqX?_otk*C5(QE|WiBXmazA1M0nKrH?SlvoKdMX~AgxFrv
zDA6>IR(raHPxJg-ap>cAsSkgeW9Z(%ZHq9BrIjF@0PQ4Tg_zUZOQtJoamY%pLC3G=
z4s_>TDK_g%dhuv-P6v7&5E7L7K*qaO$t{*4kj*ZoiFk-mI`!?qBWrkOqv@&NQc+Ic
zd`?lXV1f9fDDIIi+GE_4PVQ|*W{I&&uAam<!+B-?9vzlSFx*}FDn9a$qmwti`ttAP
z_Vjk*x@>E#RF&f`C_-EA-C>Z`_Nwi2JTD^A!aL>9<7J@$$hC+N3k=m5D{scRw~=;-
zS>_m+0ThBMn1A4%Z_EoVfUF_%J7;8f-@@0n+r2!dZF7g1k3KP~#6y$blJ*vE-wJCr
zxr_kHtLGm8(k>w!9(AB>4cQG41_)1Xb^M|A30QlVpSH%6AU|#!9!)BPjQyMz4Te3_
zm?~w$#&8UHhis<MU@vgphM4!VDC{s8X4V3%3r|~Q$XjK$4shRLtHp;QiU9%Cs1Xk=
z3aY59ya1C30vh6Dz$luMObMA=tG_&CcCl+3$EQKxZS8;iigovGdHZ8OhR7z|j|5o&
zeq}V6_OQ^}W_4U3MhRdXe9`l)WmWY!6UXdgEPK5dK;)kP4+FapEkJPRFH3LK5Xw0<
z%ogg(MyB~M;iOW=puDQ&@Muhi7ehGrk1`8QIaAm01{*d#C|(F+s<5UAcxXTvhK(t9
z58$|srcx3k`pH5<-A+b&?rT8@phD{q5%`4yN#c;Hebw+-4_?k*i&%*Q7EtZPCC%sg
zh@wFtFGo^JBHZdbtT8d+4bZSXFl>kPlEsS{p1HkEC8mvmr7n7Py;zR7xhmC^*Lw^C
z5iz8zwUn$<8}f<=XzwuV5>*Y&f|Ry7w01}LO2Jk7&a}FX0m3m(C%riRj?bB}RoLGY
zfZeuv^!EW?5=RiC?mVG#21v3sV<Tfl>jai|2#h~T`(W=>tyJQZ^`o_`#r2zM27=bi
zLM<e|5lGKorKEHWcS;|jeB!;emQh_xbAOY$y0ZHEbMmich#2PpAj1vqnLVzQz9k|l
z=X8M!Q??hLH-e*9Pg(2aKP+GTU?WMJ#pm@2^*#&?fyAK@6J)}1z=Gc_Xd1}BmgyDW
zDDvy&Hk^lbI#J(r>+7~Q=?8ar%FAvRATd)heP>tK+Z3lZ*vkZ`_n+1+`dXm+Sq)7Z
z*o{)5M1^*{irwpRonuY)yM8fQ-#CC2p{n{WVKR`wkJT#9N~OrcW-D3MuGhBqDG^^y
z*%fN>bd>f(mfmtzdl-Azkct4=1Nj7?j(*<)L6@q)R4vWXGGy2Z^+X+<9p`eA3@8Fa
z<?BXmeq~pkfYT2U%RxJ4hlF=jBQm@qlxED3-^Tn!slYI<kHxbrk4J7UT*6%(STPMR
z0FSt8di~`{s4-@eOaMqqKHb#kl}L=dC6^OA=DBhZD#k`b6*hJEJcnkCsdh~)kOrp`
zYz^>5`#Cy8*6}-k)hF^Ca1qE5s%7e)l+ih%F4)lWEy{U>V?~336XjBnJJmpkf1D{a
zx(i}R0tgKy5O>0vOU$@IjA!cMRrNM#z)~j21N|Ob)TZtpB(XY*xQvcy9Z}Rl)DtJO
z4P+!BuvcDsA*2hQdJwf}37|xvo>Ll>62(J<ZIYsmhnfZ(t%b~$W)$?;lDaCcHSH?9
zq&DXHz$urTw2PT=rBx;2_UWyU^OP&r7a0ZPIdm_VT+|Wv({$Sg@h_w@TUHg>EbJpw
z6a3X-CQ0+E80AVY&ur3+<git(&J*SYw(<CR8=|@JTO%L<US26R=PH+?=Tmu}KV{$&
zKnz<AJ8p=Hz&Q9jE?a8=*!Eg`-4OGIt}Xp<JFo)c_r15S)y_|ykoSnWkRQBvz{hNM
zS749mFQ)5Be{Gu#VqI1Pwh*LLC|k5A<B`~;V63GC>0Q&4gA&in5O}bDqz6(6R*)JB
zsB2*jSe#Pc-cL^#7n1<9bBT$Cnjvm4N^~HA8D*M%Y!l5)Krxl|S(Qj%MwFPei=mTt
zCb*fe-A(6B;x7zvq^dD1828k(_6~s6l#;5Es>hjP8~^58FP>Y<5G(bbu$RVEg~+t_
zA8*j7y`DK#<p2`)1{wTKnIk**X$yZu!+G@J({*VJn1HF&KzK1Uo&1_IvO_&|0*dGa
z8ubE<VgahL@e_ubx6oc}>$hmCMK|c>c&bS)9Lmryaw>`RUe0Aw|8=MRi3l9+K845d
zimxiF;@~cbpk}Q^LI`1>WQ~2snzVWa>!@nUF+lK4Fpst%IcxzfvlD%#0#{w0I$GFg
zz&mF@f&$>ynrMz!qIYGo(!Zo7F)~y&LAla5&@<wV{^P_mIF-RCCSMmouWE9cf;8Wl
zfF)YXNpgZ&!k~ERrN5e37AP@B^=tT(f0O|xq=HwAV_OALAS9+M`{KZ>|IG5J4!F(T
zXI?wr)Dw?V-PD(sx@#@T;^h-LC+wI5q=$E_{TblC+Ap%STFjPXG7(`(mGflHRRmNG
zqONH{Ja_@eeg$E9I5p~^%B-*Kwy*1)kFpuk1MWJn$ZCShmBEdW*q@skMmYJs&tLMQ
zRVC}MgnILR(zq35PeW$MsfVS4`fGA~Is9$+egu0%-`ie0hS@0JJ;cAX{vLLHdx!0;
zcgfyc_@Z|IoZYAI*r*@(c#Qt`=7vJ1IsWr-0*Nyzu>rbk`>x<(aQ!khhTn;INori2
zkkIJ^oF5hi+UCXMvMKaVM%x7GVXLOh)uH*I6v~?E{r=$1SS@6$MQw;QGA)11NqUc@
z1EIxSA|fggq)Q<D0bT;V(dSLEp9M9m-vQt&MhmmVDR-V}Fmf&*qi2w1Q0KS9|F^=9
z7-)1}?WZfHc7nSEQ~4j@7c`X9lGtLIX4G;8Rg_0#fc5M=^u$zB81XZS932#dWk0U#
zEucb9uc$G4Ak~%y{k1oTw2ytQAw@==PDOI5mE(oIvMxrWck{(GSjGOzEIkVDG6?;{
z*LfNmMQG;<=mAi*c(W`?d-u9Z!EIP=9JO}5&YjZCc7edn2vj~5LOnWUe_A1H;ibi?
zJt-^E%`;&&hTv`aNTuNYXT|@Ae#@9q{`N6)E9O5Auyue%3(3M?b!TZ~rJLJNA^3-c
z{28$#(z#HFSW*IgDl6YhpXw>lYDANX`k}b1q~XsuFLMt~Q&yQ3mf|fmxsvW`I%p-I
z6-0eC)yBP4s&(;-HXI8hEVN`#skx2Vd~FZK(3I{tpu}q=tN+~=I5mq+MnD4iD=G8M
ziJC}_!gRi*hE39aS=Yf@N`r^UkoB2=SI8(alAgEGeK}HFM%=)0G${?6v`6lSbUH!_
z7DnZNVXd%|6781_xwhayIL>?r((i3-Rj<{;X)k4{R9u^Cj5&Q>famuKH-8&amn>;A
z(^%|FYm~S!b;aja7cMzu5TXB8JW~Nca5fKR%%I9WYBmMY>HLp{HmG0KDT87Vlmrq#
zDG`Hy&IGJUzRoF{f@U7NazSUR*U}SWt&~aO_NMsY!Dr|5zXJC6?s0}+J%A$OT^jwM
zEvlvD^guKXR2=2~`#64iI5@kydIq8r+5kLNk5^R{%^9%fwrUS-+j(6YX82vEh|A4<
z{ZpsSwO4Cf4{C`#qRQj5DUy2Y(e&XcvPZQLtNx&kf2!SHrWf}QuMflVz9dsMuCH38
z#AeY?GFQ`hg*(k$pH(=+n&}xe$z7-9Bv%A-XfF&^f#5y8*Xxf6KZ2ONQ+)QUK7&p3
z3G<WsGad!TK0Ste^8J1b{QF)sztm*mT`UFn(!(FW2Q~#ZEYHvNgvW81Q+TOyEd!gf
zCFfRh{Us*vkh>D5Z-R~XP<k<Ux5kcf?s)fQX+H-W*yxNYPWN>hD+sUBQ}ag;trU#s
z=XWV+jwhBXUxYQUo9o|#yEjBE{D0P2pCyw>m%t17cXd?NR578C>IuI81NH>NE)!-(
z@jhwiw5PjFz8~Lge2u9~iv%hiK`+gV`-}X(JkE{j%Wz`rr`b+jmwdmNq=74L=Hh6{
zZdNIPy+T{UgM_V_hQQ`FTY>mFMqXGHk33aqoLlNXiy+PSb94QcYb(yc^<7`LR}Gig
zyOjp-aJcjrbFpAeu{9p8d;xY0Ep8RRiPy{+iygx?UtueJgpPn*t}+t!P62wv`yFcZ
z(uGjw^GFso<+NPi7H<IHR+E@GDV~r)g#}jYx~>E0UT1Gt0}{xjk*OBMtwLK?ZlN|b
ztPfO~f$-eII6K%HGP$JTqCy)?Ax$^w0^10$j}U&n`cs)tvH%Cgg(A|%04X(L^ayRb
z4aLXR$8U$6SX}#s>wf$A_1ORb=MlJv?y*DcR=LzkH3NNL{6z~4mDmetbjy`iH6V(E
z)6$N(Vh}PtqL9qL_*x0pR0#rW2eXt0KL*;h#2%Znk=eId8uUu;3qgHv!2;RSIm}B-
zuO3!5tqNZSE6h-197qc7k-==gA2x{_H!fOQ;=~;-#+XhD!n*%0Pp>qy!2mCI{-A~~
zB?wsMw33Fx;3{*qXh&1Bm`oR-aeefQ%e$NV=JFp4pbJO%zJ0qSm3niX3`_iIc5<s}
z2mokO1i2E7ct6kTo)s%8+^OByfKc#mL(#q)!qxd10xN<O-ffjf>}zYiHpt5$>A8KK
zCCZu8!-mP+IvVjZF4Z~rAEw;^TNos3g_zU66g#2s1b(2BcAkMqv=c1jYR~sYG{EEd
z;K298I)!}0PaANckh&fyhBKD*Ci!0Ez2C&+!5UeD#BJUuav*U+IYXp=k!RuB2h;c7
z{tJ`l4Os!tT7NC5NH5tjmZM^cPj1L<Yl+BTP`N%F8l!4c+SZ9mXDs?M@*pl=0eDJ3
zPW~%}h9<ASvyW*CcY)UtK-Q7-UEYVG8p?sSCbWVIjV8ZvNf<pmovV{!AcWz|OG1ul
zO**a#;HQ|;Sm`Jyyz}E<FwZ;_kS<?LBBSQ3t4GQ0LA0E(UD_I7aaz9g{>ck4Ey3<~
z4-&g5TU|v0SyJt~DcYi3Zi&kuNt?9E1k@&L1Ffrc*>IXAFjKy%T&O_1Dkd4vm|>Ag
zEaFE^q!b|8a&aNya05hNWB0S6e;4Z9Zmg<`N5*s_9Ufd&uzrR4KYcPL8mlNt%m4sj
zQ~$r+iizp}WCUyBw)Nf|Ysx=Rw=qcy7>;(#dLBz5133yQXL|=+Y9VLg64HvXBD}B&
zwXK`|xN$dgBPB@~?ByMgjBVj&=Dy?p8X9C)(~c-$Yuv$dx6hadCifrM%<G4_uGXBm
zyxZ-q#KB+LYg&wH?wj8^xX;lA+s)sG(X>XK>k&}VoOWCXKm@^d7!1a?Q+)y#xY%av
zr0y6+s~ZJIBa7f@ibiczR1VOpoLaxz4VsN5b?!}|1p#L|m_f6#;?8;CPW~cn);05T
z-fM(iJHB3pGZ)cTRAiAEHr*v*0ayoc@P|y<#{`UA^=#j{faO-qzDEN@XtqHFdo@Aa
z#47-wfdI5c3+v;kT(Psauf~HQ2vL3ss?Hjzq|~fxcDOy3yr;f>9Dv}A(P@280V|2K
zo1lq@rd%?a^dUxQ^A^RK=?K&k(intUGm1OYH9q@CyaU*U?@@?O=c{nxa*#Dq!eQtZ
zu|xMvr&BbW*$(j|N>RJuDvUSNX^K6_RD|d7A9<FeWvYOpA>UYj#^54cZ$)?J<op%n
zBxH>VK@c2(?^JA}hZ2skqsTNG8HWsgAfs)Xx{mRT6Wz~=od<z)E7xlTOlhG(m-rFu
z)k+|kJIw^*<3H$^LH0}=1cc!Nf)ua}%^5PhFU$TAIDU(LM{|wT5=TN96zCs7kXZ*n
zXPSxkxHEN-Fgn!C!a#wleH9qEQzNu2@A!jVqxT#vI$x>HH{5nmaC7c^9AXik+yK*R
z<bjSS;QkzFq=umuOl2alTtMTT{my}eu=$dg?~9S6199}aLnf~*1o#XvDOircLV)_*
z$4yMIo06TDnNv#ywgSn-%$Z+@h}AyANVveI#STW@3{L^l_ND<}0241dut*#PAuBtQ
zms3CxlbcMz%&(3>wV+-bNpopu`Vkf6f<@kb<pHpRG7_E`K`XY5cNrlnga^b9qS#mr
zcb@?9e`S*!Me%T<cQXP-_$0uIM_4jfl0Om!DDj<mB8XLD5DEG^>;Pms+Pr0fkEqi?
zU^vA2!J>(<3R-jziRlyP!<2Fc^pTum7>T`8Vl!bsBIi4!vs!K}QxbF%z8fn#Op2bh
zPyZT}{B2^L*B1J{magHse)TGq02zX{#b=>GqkuKUb~<TuLO4q32^}X@%8EI`?wf^q
z(pEK71sY^P@PV&vltma@)e2zOLIKVZUJt|zK$nDIveyej96|At#<W5(hv9nAMM3c7
zQ(DpWGfAkjQ8rfaa$mi*Dq*%-cSxVei+EUZ2qjT%s!nWT2_Yd52Bi}PA`Pch4n70L
z_{oRGD{+i$P9qe>P7Kx<l4?Bin(}gsz>A0xkPwM2NJk{s07h=_3Kj!u6X3t2$&`oX
z@ReOP!kU)B{_LLv5MM_E3&!4pN|23k+#fjr?*q+eC)YBd24HI#IApx0sb&H)z$PxW
zOaz;h0k&VZ@#VR<RJC+VnJd`@E0wT!Hui=pgsfJ^Okl>B1!E|LX;PV#8gFOL4IMUS
zFL{tqoSK#FlSL@dPl9Q|tkZ(Jos&`?u%zi1h+RW2S7`<75xC3VP)|d^e)xgq`8zR%
zSRNc7(`4abe|-B)LZRi;)MbfZ%7%r*Im;s3U>HrHKqqbY&eW&j)=Xi|n8&HDDk&GM
zSs}n?V37jK0Lm8?k}XF7v=sajf${ntXlpRCY$y_2LA}#bKyF<+W}A?Lf~6?mnN19;
zXw#m*REj~_%&awKZu<9P{BC~MRu=5no^@V?oj+V%9i2C_N97UZ(%s&l1i*SyOylgk
z+35(=g>{KyD9?ozt9_wo0F}2{C#Pl{d~HK80LgQkEA<0Z0MDPc#(}EL?1x*gb-TW}
zE?G4ZExY{C?0+BKtE{y$Ez@xaKe20Z=1-rrT(d+g{Bhj*jmZC4x4(UA2wPZUvxbGU
z?P5S2i=#vm;(HPMoWsYnrU~hTr-<OTKpHRn3i|a7#@||&hvt{#7JWU)IL)@WSxdOk
z%f+9J!#@T$gym~r9!dDF67zWQ`8}z%_Ek<3(#u`h#}h?FD^E_W&F>6;nD+b25eQF)
zeZI%|bK8Ery%P!j_$(H+r5(5Jbe-qqyOYxA&QbdLT@vqkzOKi!*}(htlPqrLYui#z
znErjgeO?hK-5hydrO!2DJp{OJdcjkbN&noyf0nyx*W>@iACndv#~usmLWFuzRa3U;
z(>tc@?c($jONRA!@qPX@0sFDXJn#$C1?#lL{xoip&wZhboE)V$H_rj&&+)g1m9RYi
z*J=$ADsOuBeoME$TFma?pq$nmn7}x?|7oY|N}j90{dZ&=RGtr38=YH4I{W$(y*xKg
zAGx?qO)))6mmH&2Y^Qzq%;)Njd&uke`JEaQbvSlB1c0V|og5g7AVVotpD$;ezy>em
zZIzudCl+`BCGo9*M4xINZ!|Ed`SlXd-<N!INqUQu3vW7pl5mU<Cvld~T|0PgT+XVM
zUF};)u!WJ!4RX^SZY{W(A|bdXC9Jru>&6YKeW2w!R~QrO8U)jD@L~N^#QeEU?hj6P
zm0hn5J02Of3>&iy3&Cnv|Fm`Pw1EHOoh$FOZz2ujHdUC#X6YA)9)k4U;>>y8qFp>^
z*<Ox+araEYv&8Fq&h1rFj`tRTw^=OhVNwC;q0<guftw9JX{NAcv0&v+lylH2cgHw_
zj-Fo2Kr4wZRPf*EB!TZ5W)1!kL<(4|UmjLT^IVGUI{g+x{Je#~vE7V9&@;M`g0yy&
z=QyC1o_@BoOJ4&K&CjN}4o88qIvyR+Pk(by5n5&%oN}D=vfUI42%49gfm{GyhH96=
zthSxSAa$JwfyRVz2mL7}7fzjFLJY7i9pJg7!C}aUY)w3&-c(jl`RZSYBH6f%<@4D(
z6LPn1*f?foiiXOTClA*~mHOEE<s+A>>Pk}y&2{u=gw-k#m{$BqumSu;%A(CiVyf_;
z#C>xY5qjqh=uw{*P}46e;jN`|$1qqV<Rqf}2s_`K=%qtQ6CGd}R434jWN6S!bf9XO
z97`CTBSWJ4XLF=jiCj3*B@T!fNMa|%K|_E=$yMPO%gZBz(69h}q{^24&}&5Nh-xu4
zNrX%arWj+WT|>cwnHo)*W@6hlh}uShgeVm(DOqV}i{?UUt&?Q8lv0arqI#6&6tX3;
zY&SAus+mJXmpw7PD(VC!)GA7#@>>Q_LAnCF^1uedGA7{IngdjvCNZ)3CN+A0W9Den
zOBGu^880L|6$1!Pz;1wiF#L=um-+gA`?1LQGZdmwF?`4P-6xhhBIr4rPQ;uj(PZ_m
z0#xpp>`#nGf{yl<KLwg~xhO-@D#)bkD4FIk;P>7grE=tjN}X3rr1l%<)5y}Dv1Jg-
zEu=&>mEoyS0bi$Hg;E`E$<3)QU}P9XhUFNPUi)Wes8Idy8EZ*A%Br6>8`VRP(hMIw
zpb+Xsgv0upm)nS3DI^s}|9x~YPc#uoBr}R0v(%9*DX?S^3A{{?HnHb0V;Ue8v?L^~
z5KaT#{p1jrXdAtw$-YBdZA&R;Rd599<W#*yU<7_Dyaw_K1-5x^yP8K9FddE^gr0fc
zHSONK7kbp8J|OfpXPWaxag)E9ORioC*9!6b5Y#&jA%Tq2$zH=LPe>51QW!)1I|Mb(
zKr{>k-l{$(b)6k7c?meU5D!C!4jv}W<z7ARb->}Ce~gX_+y)oT(WPbFS%>s+SK=x3
z2ouc?O2&gAY7q`F0QGb%SF2>1xP|R;euYj1?b0ilXedto#~NsnO+>j_cayBLvN#g!
zmSrYD@w%4H&}!!#9#?S>k|1b-9Ka#4zJ;+Ej{IL3G2K6Q2a7u@t7hHS0l_D=m0f-e
z46Vg*ojJ!hb&o~N;Cn08X-6wnzj4bg9Cy=)24MM;fB~=NFk9*BS2GE`mmCC2qterh
zG+Z7)sgSQik9!K4k<?MpfCjLXH0ZShAf;ev8iz*Y>9&r<z_3~F2cV~L7#542;1@FF
zt6997Bbl0`Tn*&$?%YkIv_P)R+YuI6L^A`!C%K+2&HeYhGlW~ZfzDJ?gqGXEDJ9PT
z{r=-*yBk4nrm+uN-2rR!<!f)Uk-_D5jFo9;f9>dnL{2zb*PId4?LG+!2?FdSBySOd
z+B!+O?PGuwK~rAn;(ljttnt;*95kGDJ9J<M4$tOxG;=0~hR$}^rX1R;RF=!8+*(bz
z>7I?)>eYmczUgkB27+I2a)Nff9&7ET5!u?}1=k>ghShS1JDrJ{!I8M>ZiSb=_ua+X
z4eer0WPYPV-g(#5b3VEwxs|<N4PPGzE`b2zTu+_%;Mfu$N3i>$WH{g>;MBC2#J+xo
z`rAa|zfDCAxE%i~xc#rUctgebG3)Yy-k!eb@vmE#0!+2~GI+@3r6v}7wijm%?TLFE
z-nk+n4sANn$3OKJMH$eucbIpi#}TI0b*AU{-g?+hGNhe!a}~~492_-!gMI<7AulFc
zCHFQoWaUH|wTw_N8x{1FRl*hj`)}<e(|SlP{^E+ok6(*%5(iCp@)$WvR(E&#FT<Ph
zKasQ!JFWDHH-}X{eDSd&2c_VjM!ndPu$(AOx-c%vm%f;3*$)nF@%=hWx_4o~QRxz4
z5U*ha>XFAtza+0LUfKkGNs0G`xO7)-pbR*D4*(jS>r+Q$CP(v5W!(fycx0%d=dh2z
zp#2r=G2aTW>%O>a2jf3FR<pQNjRUjTY!%Asv&dKvYU15gV$_}j_gpNSx2g^{4Jtn=
zr)9E>u~?X6lKAYv6oSMCJL6z(u848p%@MldXMj%Hhh=%Ka{n+yJ#G_Xkg_jsfmn~i
zXsYsD<_)Y+2HjGKj(q`xCKJPk5n>d#2#Xenu=x?#^s1hGz(06hdL9#v!G#-YfNTde
znr-s{9bj`%FXv&m=+bXrymg>hgmf;Zx@Fk#;e+$%#t4ZBjos>N-j?Pa64s&R8AM7g
z?Zs7DzSn~cK#9<chhp5u@uo>RM>mBnRNZ(-cuEp_G~_ZRwslf=eKcs127xvDX~({?
zHKiwDyWFFHLG_Oh!UMt|&o~C5UNLOjSe@H|x~WXtrX0i6LLQp#P_136X6-zi7t1V>
zVQ;Z{QAql22^9}vXZkowx^LDcyDrFD0W%Rf7;n<4Ti!0$HHA^PJE*zTi_p250710$
z6Hq-8677(%uEuN)hJi*Ls+D}pZz}=N>{oo^l9icpZJ}NHNcQH*ubPUug|Va6TAOmJ
zv6iZq0zA^wqTF-J={G$|A`~fe%UfA4hyFtZEI|soRG?bq`%f*L^5ssk6!z}krZ?p0
zt5O+R7Tj(JVpt*&L$o}}*}0sqwcz%ImI@RT#le()6}xAJfnUd>Dh`fz@7H+n;#vI7
z#BG~h^~zM_11-O%<>BJP!+YUe6eh^jzQE+zt!wi`GCBArM!uMCc|ogJ%aPu6;RgSN
z)T5E^JUq{zzj+pyZr{R)eL1jPwu)V^EbdE%1zde-MWa;Z0@<vo>JR>mDD@Q!@MlB=
z)FqbLlcchHwe_;Z%g4EWoE?kG5|~CJZ6ll>_2|Y}0}s_`IT``bf!y!WFOkqq2wexW
z7el?Egr6~8EmItB5_UE@o<`hbPDq{4Jt#3KI$#p%%n+Cm&KGy=?4>%6MLQyKL_J!y
zRHcTtjJvExk*h~VLSbIfpa*;h1N8Cz>ZJh$I2By6JQ7TCq(x1{Ws|-kckK@ZUD!2)
z8)%PcW0_(E@<mfCqCoqf`}XrKv@DyCu(;|>$JGFoUeX8x2lJK7HN<c|{+5FwHGq={
z;8@QvjMV|(qUWvlpjlValnueSlEHO7VBYYCZ$S=|YEk~F-KQQNG4Mbh#l!vT<6_P<
zvZ}2rL?*T&jT!@+lf!YoBge>V0qC+|JV4}_X(OzJlDm2&%tAq3bqo^CiZRg58F|oz
zGA&DoD1?G&fk_(CL=qMAAE3JQp>oR@J$BPicw;b{*fp!mNp(uxX#dpfRW|DecXaMu
z>swl98)Agv)u>A>Rk;P#tW{H%my0=lk70q<MsXB<HgWX*xv6-*jaNTZJ^vn`=mC*%
zd4h6;mY{rqMcb9LSedp};x5g69b+fah?b95LdX;)SR%oeq=uDUCvROReQH#nQ+A%j
zF_Dm@QDh6o(mBJ-)tww8U``r~O42yzoO_F;zMDgTxrK?2%J1yXKO}lFQtA7towaBX
zy6PHgzt5H)8+QK#u$|QS^f?G&O9iO_>wS<gf7+Abi2)A{2j3R_oVa+O&+&B5M_@X!
z@TQw#g#HAQlcAWLfZW2e;1+SdYMOaQ<1k;cc7#^t%8KcQDD7MY-F3(+N>K3^cSmoV
z6zODS-_0v!{zOt0W8%~GL$BM3tfP#vJ`!Gq1gc1t-7b#mZ(;27ZSA{fuWNcZ=une3
z1Fovr0GG&ff(VbBc9OhostW$2*B@i2bcs>5+-x;feR+E<J+zzM_3$kv38MN&uJxTI
zytaR^`lJ1~h8!2l$jCR?1lG^gOxg4(fz+86quN8Rmi*Z0{og?B7r3XeuUMF1A~>E3
z$Wl#Dop}nBFyMkjgU8ZY49FieR)^PDK4_(06sQmL)aa#2ZAZ&XhiG(g@UcSuJhb^1
z+{n>V-YT}OSXsk;FRibrAJ*HCuL6ipqt46XYfgCIo`yrxx71Y0rP%%V`s4R9eh|gs
zf1OqAds0Mtt8N2CU26Scafqdy$iI4ToFga7l3(b)81nl5kBjbHLI9s%32db=zO-&Z
z)i5?>&EClHCo}_f(RW%)bQV0aO-Pq@lB=Z8N-af;iL-F%Q)EYXfU7xx*{!s1R=vj;
znHfAr^y#ic<NMWD=krL_vL|~{7HE_PO7t9~Kfr$jI0X**t@YT1>&>-_C8ff#*ee!2
zf4vMX|C$u;p@}BZ*ohMo7_%#lGN<U>y*1Oe8K$}tCL?bAd0#&^pf4U1mcAc=rk?MK
zdmDau1;ph_l5XIHJfRi+@hYxC?P7f6(0)3NbTiGQ+NNF!k00+BHvR7k?@uNCZ|nCr
zqnm%AU*_?T(LNl}&GXBDV&jj$?|0APg$4T$)BNwMuWx#V6OI1(vb|nvLfPfdQAc)1
z3{<Nt_LMI|8cnmoXr6uJ2Yi+Tm6nZ0c6icHC%Ke8Oi3@`n`}UR_NaV)HwROlr?4P~
z)zD-mr$ndndI=&GKt2uE%OM)-Y#TR=fN7RQ#5nw58~~cxIfIqCz7?uVi#2;(8%n0^
zCI!77Fm6d}qga<+iM}Ra$bzy&!t|yPKyaSio~Bfz4B{`Z!T&+K`Vn5k>C&Hso}V~>
zR!9m&2g<hK2<{;HA(_geDvKgbkMV2@*Y<l*3+AqBELvM*&CEuS3~YNhMC_!dT2Q0i
zl&aJ8KoUM>KWgAJy4@h)zMk_jZ1u0c*ZfBANaD5m9hG+Afq*a}Wjm)=$)RSQq#9ZL
zRZ6a@b8H%OkYFAPFdVaFqUrbR#_Pp6<A9KRW0uow4RPkVxvQ$Hs|(NBqjs<XrdDx7
z#%gZkoJz*~E}--xiV3OeDVBmRtvNtwguSD}?f8l)=^evHC-B@+dt19BQtjW<MrvN1
zUluL!)KOFS&vNpAH|47CzdQ1LBP*a!JE-FpVH%vk?T#vJ)-FrsPY<IMe)a10IPg<c
zlJ?<>iz-d9$vOmIDc`n6uE)J`MR}SJJO5R8<lPDhRD_w_X&YM1b-Cf18>ZAR6q1Gw
zvA}Sd49-)r-x=rk3zze=+!!UkwwMB!qwkS*SJ0(if4i0@oNS7-SyRQ?o$9=MtpdaH
zM28_YRC}7zT%`d&0|V(pn$ymG-_;YDPM0_3_8T=3)yLV6XD0EIBS_iWw6q?lL`$W|
zW25RI?RqZk{JYt3eq%K-r{}YwX!akj5L*h*AQyoxnjo7Us8fVmX$(CsV8yCz*y-f`
z_$wW}hnwx*YTxn4(bw<Ay1=U~+d@vUycx{GzVW`Nsx%`glOd`0?B*_BepC1P{I>5~
zkN@IacqZ)>Mw|70@Y>M$Xc#<Iy)c?RkaK0`G<8vglb7Gy(Pi_t$ldGfcw_p^7P)hu
zX3L;=zk4h3oN;=9_4CWI{nONeH|~oSFhQSa_ijGDqC#K8@+N#|5CHFo@!eTU@W9lt
z9$YOLefYtXBW5Pokm%$vv1m)c0VMOX9i!KZD^IuQX(!V+WpWS`+;S>gln@`SXj$vs
zWRSFF;rHz7^#T%O%_40pcG+eU73>!>yxpPJ!?na@k!WKjF-aPove_^d5$UAs+f}oU
z3TEaYooQb5pMInnOrs09!O=rL5oW!}%k-@QmZ)@8Oi}i{%UkB{@1;w6^Hn80z6T@P
zqP4s{m2Qjq-15n;QkRZKQCE8o-5cNXiTJ|Fu6dV9*S2xj_E+)+6SeSZ^2Vk1!LL%%
zblSTNZN7VB{}i3u^Wo^UIrLkT&yvTvTvM4uw@lH`zmh9?1OE@4H~zb{{EI(&nZNP+
zEq+>}&-spT&Bw252|x1rt-WkA_1($ye<7*9e0>Gw&97HJv=?5NbL!>e<n?R#jd--4
z1}{r{_)Wc^JA6LzD>IjcM;<Rn&CR_(qMxUu2`o1){+Dw0r($=w13yhWyB}Vo&hqfG
zsi2eOWUi5sT~y*hF9V3;2TY^@D8z5;MNa-~TVAknj&k=lFjH}ax9GEvJb3jy%iB%T
zjL=tf18F%+q3=oohB}n+<bTqP*Yt5*_`&c2Zq^L&0!#f%Q*_6;f0>MaO1lZ&eMD1}
zQ$P2IC+_0(YCG`!(c{!n;|P(}{C$h$w|^|-@AV0Zv>Yu3*T3&5OHOLXO?aYl1nT>&
z|6XQbp1wn(a6-HAuP|B6^*HWKO}|~z-VGcxb*2mN76GXDj;6d)gU>dte%0yp9bxlo
zPeQLqWzjHJmC}8pZ}|ea=fdGMt?WHt(>F5B3rDIA_tIzlIniiDQ6b~x5f)bI9t3`D
zV31z~kTY@C8LG&yPw5v83DbZ?0WrebCxPyI9FyeAj0<u|<-Ex7=r)>*{fTG7&f@5f
z!q0>KA;TiUrY|-^enU8}N<Qk@a}~)wyH{-V?veczQpp>npnB`5&KXu~KH?cyG+55R
zvwRmT6H+ykajU5>SuW?j5_jY1%=S}4FN_%8z)ee`tW<0m@LpF?7G;~mcTH1-?1*Fk
zAWt8;6a=wsbk~Af)a0$L&LV$(-TmF?`EMN{C#hOCAh8<mBti`C_keUD2kP|s@3viU
zvs*--;o2%`H=ElW=a)b&uBvVY2V<ogSUbAM<G_Nb_IdbY35=jL7Iy`LI`~X}24Ps5
zFYeLG5lO-Kl|hGV5lb4~F`(fB^D>ihdBSWp!qQn7{YSQ|mHxY!Ur@BqbVj|!!6E^-
zZ?^)sb1*h=&4MP4^9C(q-h^Jd+qNTpzcPS9B)b+vRB&c}-gB4P1hQ#O8z!g`OdC)C
zk!?z5Y3mDJdF1&|hdhJ*-Ms9n9rWUAel!a~F?uAR%~d1O<dm@pwrZLnO8pP@^z!~Z
zq{%XqnKj7K+Z9Vo166_`Pnf&<j->oH>UHHC9KUNt5=7&08{=@ricJAVx1qyEsO<H?
z!zGBk2K!ADY*uYKGxt+Q*qhXt1ShV5l@mvp;q;au9BM+2KN|?5h!tar{HjnsS|#)j
z>8I37GE!f($3cXa3c2{^LlL5g`d#cry8G3iK}6iNWwSq`?O-MF40dKNJT19Twp$@*
zwVk`)$l-H^1iN1=WF#tg%wc+z=W_GtR9|7E4tRe}DXNyafDdClNOudaAUgu+fho`7
z0~Ax?hbkAu?K`ze0t8My!`m=KlDy(Qn!9F5oQbi9s})#zCAcq+)j{I^F0F&0hw~7U
zev-B1#5xstOKq8AEf(c!ARfwNAVmr7Ps7sh^b2L!69V~HIm@0@vjjnB#FN;+Bm<b9
zda{(mc44pt<FHhJb<?JtJJeHlZ!0vvbD@x!py#nrzz!hbMOiT8O3Q#Gy$F!VOVSxE
z0R^6j0z<@q4j`IWU!k6$i{jhy;>VF46v`Q1PnEg<{$o+`CM9~V%7^dz)m%NPhpDz5
z2h&91ntbcvqgaLk{URGftiRU-<?WSr1Y(TW#X5uedR+5WQ(OAi{K{{^$&oKsMnlP>
zMiT?u|A}1@;D7PE{#y(Eb^5rfUc2~vf{J6-_r0aAVwB93c$^*-qYEvS`|~5wzRZg^
zdI2@c@P@>rS$I94qHOFrct<F)`sgGrb?#Zm1WnO)NmFnw)f^C1Jws$pn}84}_`8@y
zfYDxk@53WaID><=Vm(z6UFp-Vc<VA1OD~{vsWhj_f#AfYan)GB54YlW_rordxls<s
z=>8(+R8Qdx7V2J%koat}Yai2=8#8>dcrp0^8A9C|vJRX~NJa_9h<<iXKGrIWd*61)
zzA8EG3UylykNxR=Ads+uW7H#YNC7xd?<P@6t|vHA1x&7K&xT(*U<1wsNDdp5oNoGy
z!XUrFOThS0c)nidKPw5|HPh}UiR5C*aa`cp<-<0V***x@X$sSsF3UHlqfI1Z3ND>!
z_^f7}SKy#OB<k+TL}q#(&&Z&@)AbEU!Fu!GcZZ$>ubUpz>*8()v9@Ew*%u;8KuR^<
z#gt5F${0;y!Ccr=BD+4?@nAb$YQvm3;t4{l-K{HJc56qtLKhArNW0Yfk?=Ft;FG+-
zDa%asdKXj+L!*2HK1TeP#L{nARuPU>TrDH2m_hYa#0}BgzAt?hvcs$?0_3j>aUtnT
zEV{7eyv&WJO1?iY6X#P006kxd7cN`m!o-P-+$Fz_mpfI&#>8Fvg>*u_ZgVs3gc<w`
zz$ZCFgYcR3z>=!qjr`p3DRxxkr~;I^%@7J1);~2qvS+Mvjbc=E+Xet0X@t3WM=4c0
zd=YRD1m_Trc(%`Ngg)KL_J}jpoi)A4p00>k>U1xWuCybxx3sQPwLPs+>P*Djkcdsc
zgJuXI@k)V=+mVGDUJz+Xlg7ko*Q7bf&>RF3Ec^>Q1V7S~WrD9`hUWo2e}%OQl{Oep
zYoi7f99C7k7!&xb5)|KsqsV_`UwjUB<&44@iMLsl5d`+|!i>6J25@1yW65dkoS-->
zSFV|k_YI5^Gs(-VYOJEe_E%c@v<3VQ4t`z$e0DBZ`$|h;qaaWgsi=-1pD?T(lzgc(
zz7(mLxIPT09w5-m$bm5pyh<e@tI>~mbGeS~AFH`XfRNl_1qwL0Jt`RL&B_U&HO$9t
zDq!$KJ*Rvfam(Z#&__<>nbm^8fBO&JgXQdg8fZ@;`VHav342G_F3_2dAO|=PZ?3+z
zdCIvUU*8^V_hzM+raP2dUbw%yP~EnMEs!$5M+Ea?py33@L>>IPHjTh7Z~eaMqa534
zc}X%aAY{aO9|6>Ykra=4H$h>*S}Cqk!$e8h@z^#mcJI;tDD%3`OB_B`<VEfU<#5k2
z+TOwY%?{%B3$>J_H;MhoQlB2aj_?etAGEa0PXACRtic%pUcPJXfZ-N<QWERDtiSxl
zhm*>KDl}(hEoZHITC_UDnm1F|@?QYY-6ysRl-pIxy!G%5WK)nMa49U(?ZP1TabWjS
z7<*Svpy`|U;=F3jt`bII3lSui;HtP!$z6jkbN-HVFsqrBBb;QV1iyNXwN<TBUXr|V
ztbYHteyN!I4^_%KmUT|gT&03yf+a6pI9d+)GtZyjoJ6*kU-7i?Us}6RqA?+X=g8nJ
zr9)^ZONz*ok2+gVsa1yHEiMVd+N?EV8gc-elewycJH#@KN2?<`00HC|J2HD$MyDBL
zGRF|qlI^KLwEwLc=ya5G78C868N~7JE$MbYlkDyj=*(n>ktH_M;KXXyh*YLzLxSb{
zXQ}vrm`(3YYC@>b3Y(PRHtHDJz3x8mM<%7N?MEuz85JS-+{vB&)Qi=q19MD*wO`P)
zHhn+q%=DQS>$+0#Tp1>}EgKV=f&eHe{n?8l%tR5C7{s(lyEr9GGXaKT3<+b5{t)Ah
zZs81=6aE2NJd(DEe_33E*wQmg*Vz5`>Dm7EwJ6Fi5H?JnSSy-%R$=+Bt5i8LlbUh0
zCi@S*&}e04MsLW2l_5<wD|Y%_ErCF$D16i0URmpls0>ZWI~0*|?J{8v@A21$b!2Gt
z9)+=G%&4i4le|e)Kn8vS!R9ymZeeD1OBu-E5b(4Q=iC3{>>Y!1`L?z1*mkmFuh_P2
z+t!M0+qP|+E4FRhPTrhdPo1iL-uj>Y)bpWd^`}{V-`!*MxJJ);{d%;9m2N?ED|a+e
zz^V9yV03148xbkuH}I9bJ^B5kw0sAF<2l$&Bl3h#R*^;uyF)@Pa{?c=F~I~}@W_(c
z<Q|jJ1kl8(=+?{tA?ZDDyL|!*>u?(dVt4x$iM!@Meq;MTJ*ohHi@f8Sk>E}vO)j*g
zA8C{U(3plIpV0@-Y}TaU4e%%Ptph+-6+ve3!%S{@K=@Mv<#jYk9ivD+IYf+#k^3^w
zXV6UihOl`E6+<n3V~k!*=DT6`5KBW&5)G=q>*g*{s&UX4cS$lbtO3tsvf3@*5^|ek
zD#JUK$@>K!yH&N}kM>Al`^XYx%Xr)oI!80?OskLOz+Pa_0qpIPqn{MdZirZ-700=k
zV>yncncov&gq=CC;SubHud(op*DIwMnLA3}2j-b8#@5CLD>J=}K3j(g&w(D&VB5aL
zS_uXN0Ntv`QF;;wUdfXgQ$!CJu^8n|C(G|ruyE?H9#o!AV9Tr$*iuaV7SrEd0iuQU
z2ep#favV@1ZZnomL`i5mH&_NvF|i$AS%<9^l;Olo!3e>lFeaA%Py6Q?55P-+uiV*0
z1LU;S`zHfuXy5}8==)yFypcvd=<<nUo2#%PwFEZNZ&_~e^cX}L3=JuNVqTxy{!s?s
z7zi_?bmt1N`P-zup;_vrMhq8s$G41A+2F2Sd>Kf^{ZwSah(uE{*wx#u3^Idv5W=qk
z(zlC~%1v&|oJ^b^p0A?Kw<<3cj`z!wYn|?suQ~6hw?lKvmA*LRjC9THt{MWl13E12
zlK{LyylEE2skGtpIp5F)b@4s-pmq~z=W};60dQhlS5&D97|fvAmC#Dm?NuXj_tS*D
zEf%+)1qOYlN32@^&{71K?9Nq>^UADmeOO86g(2tde1;--neB*jxq*8INmf;ZQQH6>
zvy$N3-Y7YM7N#MFzWl!!mF#mPd;DzaIVEp}$uu*K)D}muEct%9fF*|=rPZ4A-_@2f
z&n7+glr$(f=ixnXmx*fccDST*hq-o%2fEBAyAub;YV70&FKOO$co`1ypgD?z<P2G+
zwR<wp_ol=(<dL8gCKG&}N3WHQaw0mCVoyazvQjET_IF6;&P3qaDdV*mU_6w4Z}AZo
z9*rF<V`IAXhK`g4Ys<Pu{$mBBy^tHtXQMm(rojHk;S6tY3hs58-TA(g#;mx6W*P04
zP#Y}xr)L5!_=u^H)7~u!gQup+8|Z;n>d=%u0&N$GbwSCfjzO0mBqq_u?>atMhndB2
zoJ7#!R5%k&T&nGfpL>bP@~!x7=aIg;@xfQU)|9$d6MQ4ImnoUFPP*y866mbd4z=RS
zPaLkp)Yu6Z^Wia3Y;AvGKL47eU$O?_nTYM>>QYvDY)};~v2FsUYua8;P4tA>(_pvB
zAZg`$t2iy_?RL+9a(?b{ADP+RrxL1S92*OQ$Kvqh34&<9P$c$1^|AMbYG16ugW{S@
z=$GuO+6-*5T8nU@hYwD@-8NgwkR0sqoPGnStDxPi*|tQJ)NC_r*XcN)3@psPstn;O
z0Yi`~nY26hx;H!iUJ4{iU@Ya=I1kvvf?>$U>*ApZ;P0!LPnlku_TjOv5f`G7RQG@Z
z<OgDDH}Vo%7*KVx%2Sut0D?R+O(Q#3qyjLm#*C4tVGl9-F;`0Y0A@SDo5Wcr%8?yK
z<wX_!5VL8;1>i}Bt{wxdVgippa}q(pQ~Prwe`j_){w<AShZLnJ62FDtwAylb$KMtK
z)V^-kSlVUO<ScR2lfO?QF76g0e?W63{#I)=7ZLW*6`q+H2SgBeeZyyMPCo-R0S#*8
zvIULhK#|CT79Pb@XDY_2w|V=h{9?=Dwin}S<RkQnkw|n;!49tB`E>fwVyS)Hqb@AR
zLQBb^D-+yOdhYLiKo@m{?a|SZn&K4s3jQe0b|IX0BqS;UMo`B?u|0SAAzcWsQh>t!
zEMg`WKGaL1V90QABN^`dFt92sT9fnH^_c$|lM|z}up2oHprFZCYz<t9wY38VCZ)tT
z<u%v50m}Ha$Jxz<5k1gdnBp>TkWt~cW3J{S^fV}fZZm~f1UtcQyRd4uzlals6To_`
zkmSRsBPDOktCpr@??7j$bGAn{VdhBemYQ~F^(B&^Ia_H?I%F_c$<(`uET_$cdtxj~
zkyD}%txSw*$<;{GSrKgOyd549KWUEeG>4fAUm?zfBh;nj<MB#_re4kGi{@~Bk_mU|
zmHE~6yi^K!6%;a3&MmK|ciVId83&R<a9)<zt=lqLwJ;8F-q{`a8-v)~?bC~k4~FXo
zEipbWf@NaEFP}H&ONSP3A}aoV$bSvfkzH=$&6%No4Wvdc(!O(yldO$Wc4dXbqx7n`
z8|lp9wi}TD7nM45L}=vUlo3bwk}Gr?T8R@KVM^oUOr`b#+Em~}Wb(yI<r;G|JG5wT
zvio)Z7KuGUgEf9B2o%^K93*r#J?*@nE4nD47L*mRo>iao1JbGA@FZsroY=r)v$lL~
z0~=-aS>z~mx;>uI0y-rDVueV}MeR@}DQxtOca2m~Ki^MCyxsB-aMqZ1aLAlpPk#I@
zMvmM)G3J3nZb!35rJ17ahyWL{I?XXW{sKAt^)pwy6%kg648?SCj$HLxtLiG|HX6O(
zH)V|%{Tl^RlY%3uYMGo}KR}{Yj-@FwUCeAbgOy8xX@La^Zfn#BU^OTZspS+9KAu+0
z6%C)|VV|AW5jNY^;&GbgupgzO(+SQUG=5ryZmGvCT|EEQguT|Z&-_aCDu^req@!QH
zvt<j~a8+gruQ=Jo(W@Uz$waa_&U&AmS0Cl#1eHAQn(A^{RWa}R%Zy0@J*X>9gmu~1
zERhq_Dhmq_6;mx?x=&PHT@hK&3Zr~$QAl|j(D;jPz!DK)!dRM$bot&==w`Z#L=HUR
za)7<Mzt|mfLPQ<8CYx^g@e=jIl>RgP&v3~#(F+{T2LJuT#A%Jr-|MHWcZ;do4y=|j
z15q2BqTgK6F2|S=tGvYyA=hn3r~aF++k`wYFVF}p@i-Bh)e98IEux<?<+3`zv%1F|
zi}J~&BgE8TwSv5A0j@_GwmK#<G|hgS+T6N^Hlm_N-}DJON_(C7+t7m(+5D1GOl;*E
zMjj3)Yd>Y!t#1fJti}=i)o8**d-h<LSNWMHY@&WpQeV!bT8cNycM|^c@Nifb7ge|H
zLLgL_t46fLBnIgA5YPxH1k;(|F4~T|wu-VxuR0qI4*4)ac#FqRX5q2U@0enAG_p46
z4G}J$UQ>Q*!D_2l5nWjw9&AkYd{eK)*Vy|VR4=Y!v8XF#W~8b^d4IrS$KZTkim--E
zrg!w4*pH}jFotf}bh0*DR3Sd<JHLVsH_x|G->1>je1}NBheErbqA9eNA!^-v<E#h9
zhGUW12mSjGZk<yiBeaq3QB|z11|>kTnFmE!KBdwL-?V*22B2v1BX)_+TD$hHX7WT>
z@?UR3q&!MDbojX)bJf;AsLa2p-C|rAvjFI^w({w6ytD(BmlhE<S9a?UsJ@^EsfIXv
zo%V4il&>LOO^jUPCRXe6qJu}(HX}<?pk&zPkXVuxhOlAxMHYIGv5Mv6t$h=X-)@|7
zV|o)2?3qH$VSdC%UmyPvlgWj_G0ShjWdPqf=y|{+PGiYcBd(06d~cXO{ylkHwsX<+
z;x^cKX<3Yd4FWyB29Uf7k!YP$bqEoIm$fn=x}pf%3dMe3zI?0CA}@Eax>((o@7MMO
zs|eHzD2`7V;IGAp7S`RV_ZH12z2g7|0{pmS6JWNQG+zb3j*|N@x0=75RkIiNd<+7<
z`^X;z-DoylB5vqbYMW#mDf@hT6Ik=sV<Vp=C{6~4As7p2yQR5W+O!k3tiVlRd%#!b
z>W&;D?+Oij{v_y#p#0Fkj-$5TpXI<Be03rZ&1crPDlkEArMh99UyAj`6tj^OfCH5p
zM%p^(Dz&fnzAXW1mN#v@zH!si%+AFBKxm%6KYJz$6T&4Vq9C|?zU@$UUB(I{*2H|<
zwAj#a?eI&dSo@lTwkUHt0`bgnuuKe^V>4u@cW{V>7J94f17h9_$Ti>M+wP9w&1ti-
zm8VeHQ04;;A7+XO${|_=1Eh!Cm+sa;z)xr*fTgR$6E&ry{~gqVPsGIv<%G=z*e`=0
z(_f{q2kM4!EMM3GN_eI&8E&7C;|IZv{0pq{VJ!lbIGy>qw)9w0zY$u{ER3McAOWvg
z(#M#(?7K2csIYPy4k70jyvDPsZKk5=uu1@evq+`tKzHJa2IuE(|I$%Bh{9wMKnELA
z1XY|9vh={R0<gGH)t+u{f(!I4y4>f@g>eEoM8qH2ZZHTCiOK<|$BO^4TWif~NOG)c
zb(?t^y$jcmXr!fVFv+&)Kdibt>Bo+Gnj~9u`JC-}tqqI;3x1-VkUKlpqh>HiCZc_q
zr2^l#WG|wqRnaK#hHIFJIN9w!qAA}ISCA@=;g8j7NY08KL(8lug6MFxkC@JAVuAAl
z><2)2<vGH!z{-}C=27CDjbVlV)^<bqyM0yRJHai9qh<s&EtMS#gkeMoG#}BJtL*lI
zPNP&=VY}U|Xgyq1-N?WoA2Dw8v<VeeH3Wfz5zBbTP@TXO*KVc6&f*N~we{`q&GiD$
z(0ve?e6zpFmF}Y6$STK6|0+tT4<NpN!+bslNLbz`Ewp+*wZTvz4>ODf^+KUBH$a6A
zwO|b#V+b^NAsWf@C2lF)snfLACEtj)1A4C=vjga?jnOzCSR$Fy-r&P6ESsOrIaj_U
z0_sUq8&t^74%VZkNlTC)kAAxMPPt{aYu@2=BJpe+s%f?Mt6!0x5bx2ZD|9j=^ngqz
zHSxHd>op(C-e%W|Mk6(1%$TiUEA)7Du?=$vi9Asn3tUy`b3+>)iAo}3_l8C(E>oqT
zYiZq;X*5OU?4}UoL>&T<IT%n`P_Nc6b%;V?1Tk0;Pe&b8AekyE5CuP9;qmNT<1sTx
zrMRI-pmMunF(Vs1K0(!6v%h`C_z&qj`Bqs34k*zEaS>S&p+?qNe$-Iac4f>VqG$I4
z4;?$Uo4%0FA)Dzv8~|DObta@HF|}8sQ&H8~F`%gQy_#ukjRJcUR)k1Vf)!31U=1MH
z?>nT$f?6eVQez9#64E&s?QmS6iJh~Ebo5*P_+9N{IA8k2{IPi-c4sQyXQEyDSpfqI
zzGS~*L3HD>f%~#I<&M(#nh)`Y_Cc#;N`hGsvy~&j@cQ>VYNz{V>imF%s*nSOwP(%f
zwgxJkqUYg(>ENYTNFNjXJ^hYq01>k?&q{*_DPEnNlvB64Iqdl^1?NY-ZTK}uHaHau
z-l$}1b|{xZke9xJ|9zj&*EBjh<&W$0?2i>Y;XnA{{vRy2i@m<xe*h?2E9%Ssm+kY$
zM>vs?fgltAI;&ifbUs!Bh7#o*3jtWPLm9jl=N)_D;+RiPR`M+1Hum;wm&>(|vrBlq
zR3C-7%<%Sb!2?=ReJoBt6b2;*;l=IQnaiK9oGKNM7IS-g%pBPg(*mY<WL>T!H-hwF
z==EIvCG&VWSXH`8y$ayTNEmx4LBLbOb-j(q=^jsRJXuAIpmmh$m_ACT(H&v02e3K%
zo&36~frzcbVlvQ(QawfQi9ddtFdcSf2$coCq)comR<H|8K^*k8jteh*{1>xgfp*8#
zj!T;XcFoMnfw3o@_`nKWxi>JoCmM_oOrkSJSF`+K5?ry?+HmM#-mzs?!!u^Pz{{CL
z;iXp^PevxO(mcA^0>8ZAjYxo6oTTGtUVzCp;c?th)jAuLDY-$1nxhdE<@dvu6j5Z#
zZJYba50499>|9^y;b4|dNE{6?|CpZmaRtsQvpwisKvzBI)lDd!@kw^0B4)EXNUl@$
z>7nzDB{znA99&e^JXBnl(D5_X)57H{5-WR}TY)DrLzH522EpBPT}SE4VreW57}}aT
z_MqH#BUeKu-jkY<izn#zcR<)udC(KR+Uj~TdFGG>c(0o~(|3I^W0ur1`m?JhS9GY)
zbJ=<#{BDVNT(ESVlK=P-72E-_D6bqG=1;$+<$4gScoxqqa5IvM?}{DrN7b#3uOOeR
ziobVQlp<@IDkJ)+P`_HFb?AkDiY6A5@BcvqkgHSa$NhN(LqP!me*ME^XlQHa_8*-5
ztP^x?=fx0ub1r4+*$|!NEXfx8fV;9G@^U3e_{{;8LCT}J>(G}vuCB0<wOgmX8!StN
zAbKiIosU?3Ty7xd{+>8a8i(I;E|dzh`KFb(q@x!F&ELM9j-I;S!PrOy3P;_&y+Li6
zKcX^1&;L!9$N(u8=$&K7P|N54#JMNNMmP;OC5Jtl8Np^=0S-N>#&;eoWsMYp?5(oM
zHPDP56EKXWYd!#D(Zb(}fw6?v5-2X$up?y*OkSUB@Q|1uNd;+Yj*P@iTh=6;?O}YV
ztQcP%`gk*_VJx2o8E>mgulY5O+GeSjydhy}dCw)i-YkuRsuwAiNHaG@c4;Xtp&3R8
z^V{4tOPq2_4C7@+oO<J$(}FHl%AtIB<TOSL2UQ}YSD;^%#$gdFXR3X-A03OmV`QB^
z4H#L(NiN!Gl#(e~IZ=C=1PS&u18b|^_T+pbj$umP<RCUszbPn>vTlkgbKs?No=$sa
zTg2Q*{Zu$qS1QGpCvs<-Zs%8M7u+=g$7xrAJO+p(CiV`gDY4{-{^lzqOy~TokDhbI
zBF!eMX<x5w^x6>Bq#stNO}Jyg1Pj)uR*SHtD8T}Ucs$)o2?{6d#`bWWp-6$(O*=hF
zr(F<K`UXABb^8qOfL&{xw6Hk$hC)y`Qq6ZpJqZN8z05B*Q4K{CetbqWtBQ|!F%j6P
z&=WiMrgXcea`?DDz<WHlpy8NZ#LR=8NqC@6!Z^vJ=W>hCMv=AgOiOnO3EOvk_`@G3
z0|c7CfQ{!KSH~V(%bn=jEj`4tJVh0Y$1n5fE?k(fE(4=iGf;%n5}fR3$3gzM8`qAe
z%i9@Mf8OzQr?g9A^#8PYHl^xrUZJ_r(jLzrUP3r?-aJmFa@BveB^2#nd!b+3j;zk(
z?CjTrPb8zy|KhMszCLcy<%5#i&MAdYYbhFMDh62S#P+m5H*tVTxINX~_v-jaeN%o^
zDuKz&J5O6Ywcv95sZ=Q!7tfGvm|Ip%FTxs;f~XD2B1OCu8S-EhBr`WY69SMeCX0$P
zPXQg&xk`9^mA$qoSEaci`fq&xJ@Zo%F(ak?z=A`6vj0C(V_eJ~&2&xlt*i|64J~Qx
ztp7J^jCP!?<vJh2(DbS-{Rqbh!a;Eet`U$#BrI4$a%)QVpgVJYv-V|qM*(^9ONYzD
zaHCMIf$RNIi)|sOm6pftn-;R?*TW5H_cDa8X5;WaV7J>dGHRcqXwyAG5SihQ(+!yG
zknb1lxDwSM5S&IHteSwS<OAO~|HOj75kkQ#2DPFuUUh(oPA`W)4ZdON5+H>&!i~1R
zWG*%Na-)c31%kWu<4E>zMnQ4tE1~$w_{+;6aV_}2aZW3?&9uXp($LlSFqBUCHL^J7
z!~3|zw`$T0!B$OY?>tVOd=R8gU!CbDD)%(z(ou-{NoOfsvUTASSPlmI)IujRxfx4t
z{=7ghyN7zi;`JBmV2$;CkKmsx`D69kri%z<QkP?HiRHn>w8>KK1FS#vs+W#=TmqW>
zrq+2>;y*miqWQ2*)ev`|<44)NFiC4<p23_6`74+3>-lP1f{De5J-1o09ww!l52PB^
zWHJtZshy2^dp)lZvsF{|r)z!p1XGjtmfz3}&|ME`d)RFDnGMc3DV^aJu4)lI|8>)$
zez?d008%+}68}2+KLh4J<XJmodn?-izSCBcrD{&D&;WoSCqMc5U&B97`A^)4e@!WC
zXKbUWDE0q1HR=C$wf{Y}qxpZnbd;ap5Am;mgD2qH<MHQ>BM1)wK=pq;znrbne+Y#l
z)gRij2*OvjZXGIVQy5Y1{HfGsDkNZ#s|1W;niS)oGj>Tb$*4j_M>1@%`R%RE`Ha3`
zI%>RH&z9$nE1r(&F-|+exeO{T5GZeUwhvfRz>tVUvS<gml(d(O4yb4c)KDo6J8WS(
zQcXxh8aL-j?(r3R=N&FbH^Me>x4m1K1uQWoEB*|$$+?*eHGmu;IQkAhA@UItQ4G|d
z?Ot?yy*(XV$_S)8;cQU?$*tJQc~DHwVG0JVRDkrVFj1K4C9I)=(?+FrQz2weBXt$b
zzwcoBI_1i#GLI=xT)BXYZ`5*?C_LWZ#}DU_Fnkl^Na}~Y|Csbd4nZklV~UJz)L6-j
zuAOU_(Vacg1TC||z(AY;sXjj5#~X{MQW>=w`^X9xyQ)~}G)VQg7<W9*;&Ki|Aa-JM
z4B!0yy1z5vD&sLl_vy8HWn<@Y;P5JF#`AU4!%6oN#KT5VaRN?P=5x>TQN?svq(a@I
zlJcCrm<L@0Nr~j|O>==L*oSY{w-SM<0boQAqBuZG<iky%n<Oe`Qwyy`rnN*lo<G@}
z!{i7C9DI0+1RP|ojR+Z~bUer_u%1Wv@12Zp-Xd5M=-I`z3=ziEaRna4St<@fWk5Pf
zfJ&t(A4d(FFtq2`!6M$LSAkQmGOMjLZDrhaAT1e~)u@-TJ~ra&%)}>ZC9QS~#>?BI
z@AUe-VN1OZK4vLezUY59JpNqqc6p$>FR7fGqTS+wj)wWOO|wKYV}QoE3FA#_a8Z~(
zOheUgDKmK}^><(vv(c#?8SOs$3OisXcM=K<DA^UU1dNP&v~_|=cmoCB!3s-n1Z7S9
z!h~gcl~nPkB4+Q+H;8Ej*loIwt%tcDa8K@v+K@o`ZSSeqqf<(RfrIM0Of|;t*=kQp
zC+aA6=Q`Culj}oHLT>C(4f)(UJtA7EUz!W02~7Db%3h&a!!w-i?BaxNc5yEdji{Yk
zK=oGX<d<V{bMeSb61f!H*ZY{0{8Q-~7z$;$_5?C$(bL3CQKoRiTm|mO8p!3XTX(4d
zj~b4_j3C~p>OyqLCWCcQQa`QJh&dW5l=c95o$uu>27Or4Q9<cZ9d{d6%+CJpYtrRM
zZFWqod6Ma<mq|wDD`EH`66y@T?{Pw_xWw$Rw8$|R5_u&Ci^88>N}VyTWN5VXIwR#%
zdWw4{RTYQdi?x;2A26g|!`{TZFaB^dokW%Wl`xo!C7gjQr394El~G*nZ45AJ)2xla
zHgR^;bkvuKV-YX{c%s5hT1$nQ#v3)x`c3}p9cv~(NUTq1@dp6OJk8^Zmu3&V%6Y9l
zaMwiA=AP!@-$iyAI9*M^YFbRC*UWAy@v(fR-Xd!xrxYkSiW)^QtD@Su{HatNSifcM
z7{tsHXpJ8}ex(u<n3PDtd{%iVtUR7`Tfp1*XcFk1yApKkNY(%949(1CpV52BeVk{a
z{{^xMV*DB4X3^8dalXq5dw=2z82-ehb9S+LhO*6!!R&G(UgvJQaKIE$&^09*phB~i
z<VgkW*!0=n%cUV3s3kpIwOHPUo@Fsy(IZAzd}sU{^W`DbOzKeQ{l2eayT|dStVtup
zn+f?EB)+HWStBGh+2dF;23IygMma5-!(wbr-%ydXx|B&YOzB=!i>j<QS;=mhNh<Z1
z-gl8yIrXP1zfhyLv3SI)#elKvt$!e%(~4zhK|r8$%cAGJlxj8ZSk{+22pRd$qRC39
zQVIOzU9g}vcEXXhb1S-r!|r!=kBJk!*mpJfs?X0ahccNLBr$nP+i#+2O<T4wwt}x7
z7r>~(Z&eB9-aw%=`pK%t#F>kVyDmc5p^$uJ?-5LXUTVw<r~A|`kCq{D#Rle#boc>J
z4W;G~Q+-dllUbF3V}M4JCJ9Vs#3kw-@bklC5g^@pOKlIP55>5fc4f;ZF9mi<3)})k
zOP3&Cno4eJx1`MO-{4M{(h~};B<6{<sujX`h5^OqBwu<;BQ7qBUI*FXZ+lsXenPwp
z<u>f!;1A()?sq{)<iY-%FaJZ(kiM@X^Zk&N$bVQf|0HOvE$t2egP@60wzS=2L-~~Q
z4k8oQTxk~1T{MHTCLxE<8|4%Boh{80CZ&&Z@lR;N!7Xp^@v2DxFh_5XKtam!xN3v%
zk>Md=MBB)eH$iF^LfrLp_P-i18#ryCm0zsq(N(G%GiADi#1aZ*kB-81eIffpVlg-e
z-$o}#1TiDW4#7n1e?xK$a|x1Yb%sP58e(vS7;Pj&EGAuA$j41|W(=H%ryq&t8lXll
zPX#d|mIK990?2Q4881dS7W<1P-`C&>sWE>}wvjPOYG4Q^h%wAB(ht{~53(DTezxA@
z`LcU{%YZPFJ=9G}OvbdXkf7BekfilhK_uTKy<%|;A`gH7i0EM2<jl~d38PyJBpr-h
z(223|mpeCRD?!G*DZFH6G$%rriUZ-^l0{Z(8%1KN<(ff2xMV-5vZvS$nndhbg_0DB
z&YUamVa+jzu?>R9;Kbc(cS>+g3cnPre2LSS3KG;E`NKO;BydcYMB+@e<f7c|JaPbs
zO83})@q9aF0Xl47%#{2nHWwc>jt7T1eAZSj?`2F6^ZEeUAC>y0n57}+?$mEC$_yoT
zR3%cmMA@Yx15kUAT%i5<{_Cr9U4_#0fXX}DC3ha#n{jTPvZI>{?&#{Lmq;-fG-Ek6
zZrB<uz*4w4SP0N*5)@UrCSu%{mR@Rf9cOJpunGTZNrLAe!{bIzFhE+0!$S8Ls%7XJ
z4L=aV8aeOtYF$^OvSsKS$+ki{*J-&QGIBq#hHp?MnV0vX4l^qR=x-+t3xfy?LQI{~
zM|mrljs($jQ=G$@o;Y;|Z(3f=qG4W`6Ytqd%OOlO&Jw7|Q4LZ-=4yY7_-`~NBprm_
z#xfypLM<7hv?iMlzn~cQ3oEr#?E5I45TW@so|`_z3w5;xfB->-AD7xO;`X*QnG&Z<
zV$JXq6Jbopk(+C#Nt=g`eUX-^$|ff-I3HB$id?JF$G0rNhqC#GbxfeDs?33deh0{D
zR5iTdfTb62$IRRfPUnJiPfIpkf~mueV67wEv;y;rO>CEY>?Bdpi}H=<)*`#3SvM05
zHZumh;`!??Z_As_wn~$ilVQPM(i{cm<IRjCn5@VsN>){?S5I%FAFP*spQ?qNb`*7{
zPL2;NTnmcx(TPMFs!L5y%nc7+yRg!qQpj*;JqA$7Y95BEOc#GNao{5$8l>^i0=%Oi
zfJ46B>`8IikaDu^;~e5C?w7ok$yYxpUPr9suM!7I)|rP-xJe;R*;Y)tHJ^vE!R%(`
z?M{r=$^NWe6&cFR0Mj}j<~>FB)4d2E`nZ1OgzH6viCfyqd6=$D&-v5+PMoOoWpVr4
zcO{@Y@p-A!*8O#Nz5Y2_H8ro9Wo!EgtbPO>#r8A;bgvuYuoj2MrfndeP7m7|lXjL|
z$i_Bd^{lD!m38S0d4zYFAcbjfOxU|>(704<9lt!WW?l{+O>&9%?~*U$8s<^*r-~ne
z`)B5&wWXo4y`#f_X!H%GZ2woIZ#d^x_fH~Mt%P{4W*n(mNx4566H5}e)H>7LpgETU
zSp-h*_ve)JT(NmBuL=nK5Kj)Ri>{A*Sq$7J{eE>Q1iSxwC?taSUj@h*s%V0Or-hD^
zon18%lw%)<<XHgEbn)FCG+qE&Y0zjPkm&uR_@S$ZtxCfMqEsH=>(#NHLPscbC;wlK
zC6EUvzS&H(o6XLr&&r;vGZ%g)WA#%difmCL%P9fZT^$eftqzmzp=GR`;BSefX;j!!
zM-1WyyKg;=SZ-|8@q~QA0rUw!8z1Ig`NBh~Cp3m76~^dIB4BKJbRRXEb8cd#bDJ+-
zxU7CVeMY*+QvfzbD~W~3@k&ep?IYJt%meW5jN9eTlY503<JKIVgvtiy9P}PNAX*{1
zWnE#Gj&f&B4wO1&lC>?A@5@ybO%%Zfm}g8T_(Gj@0D9TEMGt%Z`Qzpw47NS8oN4g0
z5fykZR-Z-kkQ|bpmp#C;%&H|dOXgXvtT5h3^hVa2j4BXM&&z)RH?z0K0Thu8y#0(x
z@-KZBRH~c|Bav^o!jcDHj$E)J5(A2CEhM-KgozR|6CD3)M3jSHb~_m!dOFCKRPTF(
zO-Ti`>e;GA3Q~FXn4R7f1iyg}3>&S8gPAazrR?97L&`_0(XGlmcgVNiilB1~^b;$Q
zDV;v^9h01ui=cGt+~0#+U@4a)y++9z*jVXug1%=TRx#6^sZKkoQ!m(DoAc3NB{yq`
zxTr-y(Y>!w9BZxct|Fw$Wf*g>xah(cFtd_`RuamBk=*)AeCohP6_M1?)iHXvgqu+H
z#cSE%)gLl71T|O9MD83?N!-S2`m&h1Azj~BdbDS?zrCdSx3GFhCedG<nvZMh+K&OL
z{yZ9rv}rBBLe+da^7NG5zrLS&3MQOUI(CyHHeY%sVc14y_sqRY*>t#cTUaY=!zj2m
z?YK#Vwr42mKDn~1e;Jq3(k3|_%IWI5yY0CbnV%n8_+-$!pzT_&S0sgqgTaJv*EnES
z><<l;`&ID!7dp2}g<|(4G>;7Xl+yC!_zs~QOT2U&pElm)bX%R#4-85G>mX7?OJk%e
zf=K^j<Z4D(Gse8Uqgsaw5_qKin-*%uH^TexAxfa@FQ)$!q9ouy$3I9?6LT9QY9|{b
zTSIDnJM;fgK{zR0+Y+)Od`{`ox5U=23t7#<e*(BH&N9Uj3KK)Mot4iC{<TzViMVX&
z8YU3>ev0<tbCztM3pf7Q%DBy_>$t|RiJC&!I*{@N9&%hf?T=E@oK!6e!mFwF@lT2G
zD=;wN@bV?2{x(?XZ*4AGFag*v_csk;zL|iT-&UhPag;ysQzV6<%tZs8*ZW1NtmeM}
zngAhH57>KMAI!Y!AB$!&Aon+Uqc>g^X2oSJ5%h<P+EmVlnAjJ*K4&SKRLUO)&{hl5
z2eNAsA@OqQt8>2lb>z&@#XT5V$sCTlp*D%$bcl3{6)LP@Ud1rLwQa=$9QKQ@7)z{c
z445p&12fTC+lfPskqy>D^vgrAamT<|ME?}d0X{@==)}%d75WS*P2TVn-5?d;lI6@%
zH=r7)su#J=SWns0&!Y)+`FD48+EaDCq?i_20+nz6<-ji4IHl1z(73woZe?jw#l!-%
zoRHy>dzML-Huz27V|L3KaB4j5A71*mIPxpCtD5@(qHD608K3PQ80?;-WoGwq>TZI3
zTi`Wdgy$=ysCbDw!Z3r3xgyD3?($C<%!_CSf3M+gT7sOk(f!Ng_ftt84(-m*kB65J
zhHvW+E<D*|mmE@7*u-*aOo`!*W!#*vTVs>2&Ji$1WWRSgh$`atVCBL7#G`(JxggH4
z1{g>c8F699v&YPJo9K_fCWMd*>8l#h*i_c=(U$@9lqS&PzbQ3T44-8(d7ugF!iyFn
zXXXl$sAfu)Nzl#rN?+lDVMtaps@<60p}eFr6n|EH{lybK%i&lh+-dE2=9N>$5ouME
zp!(&OF2^}MvJs?E65ExZQ3Or(v0sfo%E?-9(qoHym94Y#UQPCt+S?~u^=K&TU3E**
zOVpd$Xc<76t(W0$(~g7ZF_+&C?xJ2xf?nxoNyZi|J9nMYfb{NZrEFDC8`C6<-2SSP
z;^BI>#bsuyFGc75#la{~;!&iCEfJAh!FpsA<^uEP<;}GjV)V`Un_zV6{z-nCTRZh@
z5;d|U!LoO~ZZDb9LE`z8=L7f^JtXrOHfV-6ruW{Si*(DpCm<qX0Mn|86}zo<l$jOG
zR#DBOjpvO8SqC=iIup;zHj-mY+)I@~XCZ>^QS73?&zfn<75PkrXYcEO@Fhc#QQyLU
zT1u`zEhXxIh+hXYeS2el11n=)b8CH5W8Hs!STm$CxB2g;o6i5g>DHzC!<%G5_`1^l
z<Fq;W`y<{$+mHR+m&vIEKn8ndwKg9XMkAl98Ko>vNs0BwXFD$5KwVj<7LHL5g99gr
zljr#+8kfhm&w(v&RHIJWsF&087K(-lYCbUh)e{I^!n?TJZ+}5Z;S><t0gmy!LSKYg
zd6@|VKR76jE(b~)SWK7?H5CeGT9<zrYdy&DT@T=fzZfBb8NwWYabYht)Eok{gs<m~
ziM|))g+YdmsJ|qZ9+~|Hs2Je(CxDqivLM^ZETMzom*)MXWn}*z-~Tb6XHX7Bqq9cQ
zEDjdes`16>pkW}LE!d?SulF0|Hk$-js0x0~*RRXsH!_I68c?x3!DwwvBa^5`3G=g~
zVcdZ5SIA#(#XLjT@1GM-Sxpq8R{RSLjY=2PDcN-8w=ORgXjh2TP{ZGl`o}*8i7*YY
z|1K|@O_PQ}INmQhHj!O$3>!MwGmi$UK9mixGOi{P!f^T6T)y^6Xg1c%i648?`PTb_
z@`bIIpt_mh$>a5JHxi71Xb=#`%!!toc>GC)zw``r4rBQ52d^+r!LY?v+%C^o#i>h0
zwESEFHL5SJjFxO5WhlXxTfpMu1bErCsuCp-s>ba8V{^V;Rcj#9ACquYMZTsQwR+11
ztT-3xR3}mK4gcJ=?zYnw0A6w#*ANb@s3XWn(E^vU8*66fk1QwDLtOQ<0HWh?Lci$l
z;N@K8p+LyI&x;x8i<Zp*I2$&jij2&hRL^9K`>Z6$MwOX(+fbD^VkG`D4YQ{xm8@hg
zh?y#}V$F6=>AY+fVfRbtiXQ%<_JFCw@Ylcqe0qyOs@q&6^2E?L-ArOJjI}*I91h#z
z`-Iigp+m=|LqeV0K(F%0e(JN`G9KP@t%+i?{a4RFZXYHLHin%HQX`2h9es3Ce7Aj2
zRmTTyQuL|z{RS(##PB=mH;GS`%~lLc7G{}Z!YIu!>4(=@Qa_gIdC3RR6PDq}<&5lJ
z4h-+UM;YCe(moBT-#iWQBUV0!ijPEGa?Y@ShopGid3)M9fTFCY6HR15?>t<Uj{CdM
zm6tRc|2oncPmBaRHJ#bwCT!?^EW@Rw6T04fC!8ve4CaKSJ*1~ST<OnI{*0z`9SNhH
zj1}{t6LQT+Ez*d;sXX!}hMXsq+?M!~@79ugqaYoH;fpD_IN+RQ@{969>u>h;^xItB
zUdEFn&&EYWDB!v{5;viq05f5v9N{%sudFl!SOyC@z$vX&JT*P0>=vil3F)s(Zws>2
z`|9BLnCi6u2v6pV<$D0Ioq<g8=L!^4Y7yap)f<3Y01*$A+4zmQnY}j54aO?mFgO2B
zpy(SMb3<&BFw6vRSM4`K98jWzg2UY2@t=qy30H7(fjee)?0GzRa&{fKyjo19;m{xA
zfN0zvz34z)`gH1I619O@{r%wlaTN3XxLDoTM4}p6|9xu53!en<Z}Yz2umhESD!Z3p
z_IxIvZlN{Rd=0fQqmcEovAcA@f%hsLCz)T)K(0=S-|pcyu+d>{=CR(as&v>rz2zd9
zr<WEqQw8P?d+%oYhbJowM;6ZJPlVbdhn3<;ANer5mY}Bsp-l1hbj);fYTF=1hYiwO
z&%ta*iYTq=bjRWB`?Tu=?!m0((QHSA==Cj^yA$s50-HA$skryEwnSvlx*%nV%61;_
z^47IczPa(}%O>S`;_y(EOUWg`?3GV|rTfbDMWC8Oz%tdxYPXvLX^)~;R;*Raxl(^t
zFsvc510x6_k`-CQ6~Qdl^#@H;tJNR6A+jX;s7=KVPVQ)TnS0osi(AE_3t^7o73;_t
zF861YJ(b?5pjwJGzfnd@fj30)ZN)3R>1hu>ng*?pBvJ$l%#P!%9>?Nc8TrIKHr~V4
z)y6Nte=pcP&p12AU;zLksQ+10{nTs5HjXrQ_O}09h7ZzMcg`3=@|sqifH$hD%Q9k!
zfzV(u1cBLnVW91b4YXD<Dg-7En_kW-?{*P9;=)k9v`8<eRqlZD+F(A0$8+gG)&l$Z
z#p}7Tz0rG!Urqhtl(S?1V;Fpn*#|5Za&<N^y!`dDOQg|3WVVTUv#;98m-1Q7zT*U+
z@~I!9deZK*r5k1myxhPy70?<zqs%LCe&5#db~!Ly=k`}JBn8ioogba3F;m19;GH_$
zP~f*LL{vqik$D_6lek!a#G<YMLE?5C89_3M?7b7gfra3ZPdaXRp2b@Vi=1dx%jW{O
z%OyfjcDvWF{Bm{gp#r1Bu}tBLNVP(5raKDb%zBDRR<yNb0tFPzF#Cexq2@>o-DNi^
z>Jh6N;+TlROTUB1WF<tRupnH_vb)>_*wH-o<S#*_WE=5N@O_DbX@YphdV-`y%vE<N
zu4X1a9n&;<y*ROnN-Rc(jPyCL(RzuN-;&qjH*mhk2K@sWh{v^SV0kt!GwDK_+gC35
zi+c2{DHXYxoyKWDUX8t3;>klQ-V{}NQ@hF(92p1cLptEhnm(}U8=~sgzcxykvU)zh
z7Ge@siJ3d7%M-c71bYuxZ(;4^6zbGfYKIJ0?AaYL`e4GHE1G!3@r{E#rzkdiSrQcT
zzQVdCO&W>IBB`34yOshNFx(m`!*|Zc$y#7xNK`pNl~>NIouag>#SabC(-YX+Np7mc
zmclugMa)TsyFhPqkK(j~m8Vo^ig@&L&o~{p$ZsV^*MXign3L?nab`1NXDE?UWF*J(
zUt~s`(zH{{s@nI%$jpsNQh`;t+25>%Y=ho-nx@GI=^m&giMlNQ2>q;mFBwEk>86Zs
zQC-&kQ;+Ei<rh2lA-il2qxoax&Lji5NJs0GW9|mspsf_<2zJZDP=R9mJBDVSvVGEv
zu_>f54a+)o9Wd+n-rQ*PUwd~>_)9jhOW98loTATraY1o#T+Wl^hxa2co#>a=AkAK`
z&YbU<$?Izm53VdPI-FriPN7e~X2E6b`|<T^oW|Seja9K-U*(SLDeaqyjwfz+%(W$~
z<CdxPm*<AO(_vvldPiFAZK;yJCk+_8ae;uL^|A4*mCMavdi3C?hf5{9RcTz5a4zY=
zHZExz)3sbe=C9uVTkVQ5q&?I1n8SD_yS1*YzSb_;Kus3k4t`#Ux%=*HUF@kBla+1v
z@!$1mJy<~?c`-$r8z~K*K-P^Or=M9QKP;Yz{zpYWv{b?1`bRsv$mKU)*%o1iaRgGw
z9!&U3($>L6#Zjn-De=L4c7rTu-x36PuNOP^_g=;eBfQgfJUD>p7+_E!ye@k=XJ`V>
zIDHBJkmoPgHJ|<MjD6t;hzm*sDK>(g;J?#(o!k0~RbH0cudP1T@F@kIw<<bWr+}b1
znc4fqpu_5D2*_Sh=X`NW6;b9=M32*#2u$f?fU^Rh$oFQgfIxhkzDkfA0?jc3TnO6C
z2oPvYoub2uM2iuFgv3+@{?0Z9b7u&?y{Z{ON%(;TqXzLr*9*8r^iuvdq$r$7a=TvG
z1<%zAs<zO#H063TbTs7;9SHov8f~Aq(#i`(@yfY?qh5j9aEX+JrS<aj9<Br)`&V-~
zCDq68<2Tw=?BWU-ARcq)qIa-#;FNzbmwG=(V2k95kDbb%OaRWvYj&w87}Sqx2Fs<Y
z+qSLaZF~oV;DP<?7BKWT+@XsrLy<D80chqUK`3Oy#Te{i_pJRBc8Nm-5tm4SYsp-{
z6Y)P0D|;KTzN`|E>iiDtRg*Sd6c8WAFMvjFg>vo|3epuc28v4xB@WR<5uVhepUvk4
zt|X&hx2cg3-G6CQ`z`16n5k7a)|?hx;B$lsi4kiLS~p5p9_$@LWf)gODMCt`A#{l+
zSuN*^acx{G)ria-6b0dQBhL_3N(3?%KND~BCHiI#JOqppi2y`ZF4Cy)J4<02k<ry5
zR!{<UlWOydYpMeiMDLpKjY!yZry+_Z31K~-oGpNwb@>}fwfH3!q1?GSb;qus&2Gk*
zqHH`LX;fgg>K7<m3FFI~*hRl^cn#`9M+}I}2STX8jP6j+`oVAX?$TA#aYd?t-?iCn
zweNR;vy%iMBs}*&p>VE5puGtFL5M7vW-^~X_+<c~d)%##D>otUW1QZ%#~|piQYJu2
zuPvt-m(=Ge(K}_PB4M+`e47g%mZa>5S+qPgtR#rp*X6u{Im^=4yhldq-E45tNT(xk
zD4x!2rk;#pMJZPCO3l;5P!1s=0KM(_m5rdj9M`Hmtjj8lmYOHTZj#gr9|VL5z~ZKk
zHphM#IE!JT<IW=SRo$0@FbxENgl(6!#)>fylY6L*5+Zg67?b1ktq90Pp-3;I%{UI7
z+|L(^A4z9?)QNUW!8Ys5N1-)h)D&tyD%_My*vJ$rhK?*N46dsPt(-QW3xLP>#X>Q%
zHfqtOGGFS{1(+x^zKBe;AovjftJe*`yw-6L@G63H2k6R>pnYSYvbRG+%tHWtloj)K
zE4!*Tn@EXG9RuUi^EZBT5*94GD4*b(sbyE@_91?$$OB|+uSPd{hcFoVa$O*sDR<nW
zYoiWjH!#8J8aAjL_A8A#XR)!jj(_>znEdd_L|<E%o%FE)^!BXY^F$Z=E_>n?!+O06
zC9En)KCIUPh;V*&Z5%@Q*md^jUJo_XQ)-fY43R`Kxbaw0{HZc(5=j`=V5&wA_of-M
zr_vh#!f-ny%>adYGhlF>Z0dmb4S3pCefdl`hEIsgYmPBbVn<D=po?6kj8Rdeg0=wN
zyK9nSRL#1+ash&d_hcJN+#HngfjeTAa)<KH1g0^1NG~*jG4Pe3zoV+H7RhMJ2(*bk
zm3y)(9}~8f1VNi=T3)Z(wo4L6Hc2Vdxhg`1i39-_BSppn;N8ZWa-&h?1f!9Ta+B6U
zge#?25RKES%h4u-<qN2mD5$5-i0g3L7*__Co#3|8jd$_)Ucj$4OSFcZH}^3C3z(gz
z%5;SJAmQm4<r2R?I+_P@8h<H=Fqcma2Ks|f%M|$<{g`F6(1t`oPd*I_hY9o$PioPJ
z+0O&IF(E^zKO0HY0xQee`03LpqZ9sEhC-x@#L@>2wZwx!B$vT2Td5kr_LQcPV8j|^
zn9>tZM^=<lP@R&F9q0$3(1q_~xjrT+v^WL`CrP;3@hJ_W#7FW-EFc4wN47f$CNjG8
zCQ6FfUbz~TqiB`fr8m&#6dp|Ale1jqil#gOHi2_9!nc?wg{8Ngy%S9OIYESpNX#XI
zd~a{x<T4b=yY<XLz}<4d#x_adV3T*rn20e8n)yy-N9)Pp0u`o5`A)@pMA)e<=htHe
ztZFV!z^HTZJVwm`xo&MNtEM?6u2t_Tp}iI=7*|^@tpa?lzsjiKZ{euRZ;Y-*6a;&j
z`Rk*+>kIHbA?FmNtFsEJP*89P?+^&ey*s0i;}c8@$d$0u{LQ@d3#)jZX{Ug;m^@Q6
zU(G=hMvkhM&{QxH7WSOf<WgB&kQwwc60L^I`-99Vr_6)<eV~g^*b5op`D+422FDaW
z$grYsThl2kp6buF@EGdhkjibEs0gt0H~hhtjKYv~um!K&pRLD)2dEFGXi;wt+?PC@
ztThY9C)E$GyJN{7QLp8!mtAACtrvdfR>Z!yd<sRq;zrx(VUzDD-sjK@-3&jM{I6Et
z$LWu@^N!oa2XZ=JQglqRt7TXCWgK4a`|A>!KqjBqkY`+m_bv>iZCPIJi#BvO&-ETh
zukjKS7pvD@5MZVK%W8O=VLF13o45OE+2tE}zi!SO^OLFiN>7{Z7j>^LIh@RnGOzi5
zUtP7pyBtXm^ETI~m1skkvsdxN$>FOWI=IB*qo5Yv=}t_Yz_sXv?1eIq`KU<8xV#fW
z^ou*xnr++M5b>UdxvjO+M@PE?yqxcD|99tihp?HQF9?IaVsFM;J^9zSjUDeWT{^=m
zL%?R;DfGxa#*mnOkq5wI%kzBU1r@G=JJw0Jj3HUs?>U&BSE{sQ-K3+c3)O<&BTsCN
z+K;(fIwwipU^LB>Yv%09*TlWua^KFtw!^1fzbXuHFwHP+IuPY$-9|MAcjHOjjAZKa
zhtppHcl)%F5hb+b9-tzc0Gf0oX8XI%#fSScd8U2%lpN4t>Y?g%D*_UFj+W%(#rCIx
z@2E)IN2-WN&AiF@8Bet8S%JKC8Ht{d%cHOH(k0v7(q8jV{8;T$Nt@LAg!>tqj#ua!
zXbru&apKEpc9rJuC;k4V8x#N?UxzCym#)DxxREP`_&i*OcMkVJge$K|)oyS8u%{2$
z%#rSWEV?EsD$}qIA&7Ptp!*6BFzOFARbp8wmGK0$YA855wGj0kz8;lJjGAKy`y+KA
zggpj&7fZZ1FgtVXSzxgFNqw8Lx!wFeQCj|!E~C9C-p2RR?PFI3>$PdsZQv&xA($DO
zEjO^uw>pFBeZbEte>l3>rDS6#mRY~Jm}qT#Y2<L$xD}Md1wk)C+~Jwx#<yp3pFBan
z*e|0sT9VDpeBH>Acfg4s{3CHi?V5+@PcuFs#Ry7?mGehUX$h-h3!H=kZL47`g#&B4
zG1MX;e3(n)2P0R&xm!d>yMlUMt`*l|1c`WV`%nx}v4$A>fnX)hQjpXi3Vn_!$}djK
z300VTD1{Ge42ptpmOdJZ7{jx61?OAn__bs{L%#oqLTpf8tw{S>2C#?+06_E)Ex{jY
zXlU%<p!?I)clZwt{UJ<ihc%J64(}o4G?Z5V(u|CEUs&mn_ytCp3;HQ1hN7Z+HNK{q
z@`@z-fY<A1t`159NPQ&PYZ=C{p))t1?acty8F7Qzw)+7%Xgqua!dkeUL{Z6ISyLqM
zkKG$xJ5ED8)H*x5)<Da?Z=>u$m$1w~h@3Yx5IezohOPSa$naJdYT#lAbI)oR4fMpj
zsgSYkgnnNjuo{i9xtopv-8UddS4aXh1Ywx*ag4mdVR&?UF}M-LF9fchxS-v?++onV
zGk>oIhv)6K5!`T|64plS%p(2X<piYANI@?-&H+0<)tEr`8~p1{737m5mP6DIph~zV
zHAa5r%n>ovzgx<O4GxDsAN}_fLpw7q6FfPH0eJT2AkJO4mGEJ}+_R9kOLS}V3g1Ad
z<(&tT+W-ackSD8^9(t2~ye5wIuBS$ueZJ=ta>2XDA0g`HItI7{)Cu;MV8_Mj<Z-t~
z*fjha2lmTP9Cy^_IX*<O%YJfr^Xhmdi-AaQXPbYs?7RjSp6tu<LIS-9x0e>?O0e4(
z6j-%(!O^KvMNV`c5(b(kc_-NLV@HDTz0}vA9ghq!0#dTWPmY6PNg+F%GEM;aJMJlJ
z4So`B1w@~<iHg)wPGeB`*A4v`lWxD|LTDrew;4WpxoZ(R*1&_}xc{W$vW=ifSL+r-
z1UQ`-aIcxXkoXnK$2kmtUa2zZRe^oHVDBq;IgKkr7HX;r4>*VOCfiZ=wS-h+YMHMu
zUD`H1BDxVqgBn^8DU@mJSx9w%dE#g8RY=#1HJmt6Hm?DYTes3`ZeR?^vl_PGKu)mM
zj)qC8NnCDR{c#F$TB|rdBM#Eo2jr1lM--f@7S!8_@gUR~IfasWEGr@*0L)3-uchCp
z=ZU(HK#+Y$AAZ(xJGs0Viy$Tu6ufGPX#JuN(!Xtvh0nu{HHmi>)n-m9V3IM07$h3A
zd<_`E7HsT1oF8AC4{|$<-W;F2xUXMHi<B|QJC>x_svX&?GHMlK51k?pP+R3u_F1KN
z-}FDz)b0iu1db6mGLCm@&HVD7i{Z|REVT(#&u*Y*>t)HaMi<j*;M;6d>kY5u|5jIp
z#`s8;)-u6m#Mb-MXS@)AiKrjr`1?F-gNppU`V}kn<OvNmw9R-EMTlS9<5<a)@FXiM
z=U2GbUPcHy?nXq$@K^CDOzb7Eu$Hr@4e<Tq<KRAo24m)mt}(`05U^O!gvn7ih$N1W
zlojeWa`O3x-nm$8o#l&%=Jy6Jt`UcHp=$jx4;Yk~;_%p@mMvJ6M|0%vV>xzg+HMYO
z1rSSqq`NWU<ySe2hUu0%Z%s;>hH%%zp3Wr9iq5s3SQ2%~zEzJcgaw|Lws6ElNV7Wb
znnzn<ZZn14!j|Q&J?_iyXDIicm56pWcPk*8Si@HBWpWfMI9yq&dYL9_vGbG;Jf+%v
zle=b8n5UUe41*n&&1+=8zu0A7d3>`1dpf8U*4SOBo4=ay_wEkR;;cX=meyhzR=9u!
z1zsgsxCW|yE93qD$JsjuiM9mkqRrj5ZQHhO+ugfu+qP}nwr#t6w{5>Y_q~W4GjHNd
z%=uA&GgnkpMdix;U`#YDd`@wPC>j*qK#bIl45)WlfhWt(ai9RXnn<LLF|SBO(%}2Z
zFbnA<Y^X*Fx}lcnXSIh<c=pjj{-{+589b|82ad5S%FJRGqB*#!GF{f9sN>Vkx*|uD
zB)qYHZd+)~Yjia<DURAZI&OTxS1}VKBlu*nIgXB5zxpiOTrOcw?9r&O<ASF;JkUbh
zkkt^ke>oT-T~4zY>yjCCY0+OFm!57TMf@4Ei8U@vx813b4~ZV4LWcu@Yp1GGC&UHg
zpWm&On#D>S{m#&|Y5hsSp4wgUZA_#ER0Of+CP)BZi#si;!vpSYF+*Tj2Ey6Z8ZTBY
zsh1(LfEBz&bEu}SE*DZ*^{XtuY-@^scW!61#zu8Pv3+}Us5mi1mc)s}hz+P25;?P7
zz69fNS@m!XEsoiO*}rhW!{n@Yg$oS3N{jt@(JR_NE@XFZ2JI^gIk}p|yTx=-#*92t
zGBzH?`c7=*HMWqZu3f4ek8c_z^U-Q!^{@rEo5{)4>NH5&1@qBz>+Q+)qxB{;I=4e8
z*>*bDD)5j!dm~@dGXqy)c`k}-ki6E2^?IGsH?pAmCG$1Ps5yd>t5AYU#yt78uypg#
zD^C@pHesKl1-n^g<MP7M*yWBc@mrLQ5^uY*Y=&Voy|9f6`vdw?t6n*iGp3V36s1=2
z5ABk!N#UB!gKsdC4@2je7p70NNY6Z`(~5E#4AU0u%SAQNuH>N=RtRfPl<s{S7fk}p
zC~24Lo1~T*5uVGk_n+cXD7PsGbGpfpVW=)Y3UvI7Wgk>FWwakKS>356=1_I^DbzHA
z$C|ONE{pZ6gt&IWI(rjNV3nlzjEuU)9j1zNPS7#44_VPlcV&f`XO<k~2Idz&Jb#j1
z9l{)kZP7KC-Z}V6O~sgxoet4isNYyTqO}3+)mdfBQ!R;Qj7hmHP&h=XM4H)}B~?GM
zs`*Io0s3@|5)3*n80K<4C)0Pkza5IJX4P$uy@EASnkQ>w9;+~s?N^(caieGWvZF;)
zmIpiherD6Sc!T6_cyqK;(wRh!u7_oj`LT8cE+P05-W(5{`1s{9{QFbo)K&u{{Y|p5
zQ^y{w_2gn4$rQeJh8e!zrVC7%XiFo1M~9U7+#I2sHGD6QGswt>gwf)LRrp{yB1v;i
zp^j_)K7&qGe4Cj8D`i7lZADYdrM^h9Nr^Iaa>A>8_`QLXS$O#9Q06wLSNip<Wxr#`
zVTq>Ww(M}EFsJh@;~j3T`*5K;KuDTxRo~+$3Ea`=Mp6xrsh4kOtBZZU3l44cfjGsR
z6Z2)%>A?^Ijt&9n#T4tF2IQ!~mR1KI*z_7$>E23|P!E%_C^wk$Jz=K{KVJsBO|VT0
zY>#I(0;FbW8;`qfz*T6yV3U~*yv}@!$(yBhPlCP$ReQ^|{)&9%3Mwm+EGyG9N0GgH
z0Sjx?ekI+kCP|6j&f`=A@Mj1OTjP&B29voc?y-~RRGR)<B=;3xM{$OoQ$%8^Dr|Fh
z)1wFo3aAWiPJBh*+_pqgsX9j43Qe}sy@ZE<o|0LXo0Eupg$^1uLt8-@RL2*Ag@q+<
zyHWy9`={5(o#F#6xqiWJ1MPr%!CjcdwW*L%(}EU!#|8Pho;cbh=izw^3Qy=hpV){L
zPH>1Zl^GU`US_8PXrWu1z<5vQRAZH;O8$~YJnvO{LfQstkjsh3iw1m_u8wbe`|IsP
zwFyd1-fokg8=UnQ&EJv!D#~LdZC>x$d;7`0>Er(aa{Tv93-teg)o0@7Wa40B@c*$D
zb`y)$|5ro{oPUV;fB75#>#+3yQ&{D{-%X=zVr^$-;ABF>K+DYf|I#`BA=Ce*TXfr<
z(d+yzgm=*Z0NDRUCIJU03r8mlqyIBR`HzhM&6vDeUB?lt9l?v#2Q-4tOhute``W>E
zoQEO7%TOdmJ;@1;FQ5}2!V+x_Kz(7VR&G|mS3JI^h_a@kdkgeeU`|dBU=X|^Gv;_|
zb;@CSEU9qfI9Q?u)?-?4G^%c;gNiwUc~ZT?Ci%AJNHqkbtA@@36t@_ekg~#IWJ-Et
zd-%vYzGbE*-HTSDbul7Ta(8)jN-^gcN_1t^3>o9nD`qR@{Uw$fPS?6sVV5iDG%X71
z$S!^$RWmpyE=8t=gK)Et(e$Yf!8R<@m~@S6hn>p0dzDFYN-p@Tl6gA=ml4}%G3-WY
zqQPetcK<cKAZ6wx_N04bMIq{A_jY`};`oBQ_tmF!zEGS7P61Ui-&ixGmLEgBibAMS
zWwFO15IUF{ihfA&R+UT%dRIAotB18!z`bqQSeu3ob+>NfD1AHt9c1=A{l*|>CKRxk
zV>{;@Jp*U3OF~Og_qxG&whcZ%{){?uA#_ecd)rgZ4!-fbWtEEk(NofvS4>@{7p-q-
zq8rC!YGAd;-pYb-yNZA&ngFErF!?%>Df?{hX|vTX<BG-~uNmUC%r+DFXHu*2Nz#ZL
za}cil1&xM!Ahzeri?cR{dG}uDjIbcF%84dZpbnf%?pt$T&~_J}F`Smq^<}Hey>o~w
zq#xgtaMh6>guA7Q<#?F|I`mV)kX^$eju!Mat!Hivvg&4=PZ9kwgDL_hlVh~H*($h&
zb>z2X$dJOwY4qSX0$F2SH4!A%bnE2ZQ~LP%q%4hO7Zrh_op!@e^)Li`685w#$v41E
z-~*BQAQ-@JHEZtpLFdTKHTXyDhdP-wN?4xI$p}|jITM%_JmN6*I4yN9c^`_O5+g$M
zaF)6n$vWWBGZcfzc}tkg#%xAV0+x}GWEhJWXXdzD$<FD{y7V$B21bTcLm2Ru@Exry
zuIhoIIe!7CHK3S+Ww;DJl)}H1F#zE}79Mo4<i`3$G|Wj=f7R4NH!4vHY71$Avk=Az
zS7zSD5VhF7!51Y727I9+!mM$5X70;7NNsh3I+KMpo2$Lwv042slYf%gr<Y}SHld3_
zhzdMpW*SKOC%QJ%vzh@iK`w-)NZA2YnJ+kow$#OibJ_QxB&GHLYC_U7RZ;j6QX#jU
zNW6S+*~+S*0CiLdxI83-YjWT%Paq4!`wW+0i(IJlfkI)4tam1CYb;T{lH1}WBTuwl
zPg3v++-XGmp;O8c=>^%ZEyxNue@-q>{o)_s0EjGYGgRYy>@;-ESC2lz0~een?;gxO
zn!z<6#&ww=h^Zyl$;0ucj4uA23SZ)`*{@-@&A3|rM<Jec!Dc&0Ux*~Ap~0NFaE%^D
zrg>i{OW}!wCSOE>muIJ$S+h{TjYqmrR^n4ZjocN|=5{3JU?JkH(;S+gK=e>;yhS##
z;|#rw9-BY3j|+0*i0p!2LpQJ`V>u%mh&Zl1n-ZKXVW8uPP^hM*-OFmw-at){Ui{4p
zinqSlkNUc+%(9B1`hw!y$k9%U#V)H><aTPUs_en|ic$2WQ3>uGXj)Il-gm(>*01@|
zAi5ZvwS^>I43cD-Z0<``<Kd>oEwTL)a$MFqHry<`8@3wjy>jMUTp-UTO0CF$3EF{#
zAF&EyY0RaKIX9Ejf>RLHURC-?PO6#cptx>4kLp-LOVXtLu*}?ycxUPs3YRq-y6ij>
z80$CJO5dlLJCN#DsuQOjsipgYN`bLrdXFp;S6AtjglVVgQFadaol))=@b*bbe`mCs
z347|h%@e3My4|#d%&@*I@qt;;t6;zc69lK7kdE;N{Q+{?Koz%Z^AeKmnz9qtbl>fB
zzWDsAM!{WZ$mn33!deG)R{`{<Qn9u4cy!DzBxsxLww?w8Tl+koXdx6ogdsm{?R>)@
zXf>txEzWAD({1;e59GgQXp`r|%<S)d<8kO-F>cX=!kpGj*W@8{0JTPTq&O|!f;jt|
z0WW$0FF$*?dLFQ)sE|W<W}AvLvXJxhf-wD?f%p}d<s4Ia>*d58XbJi9YRb>O47tOl
z&gD8k?CEWtgGrvPrMm8fuqO+5MfWzWy0+r(=qW+lU`tv0s$n$E6&r=Y6gBVEq9T5p
z^^KHIwSg24>?Cc@TU7Et;6;rTG9OADTQQ_rZ4%w}eMQ(sc_Qf(Hnw1=dt+12?;5+H
zyfYsY7i-2f^#PE^we-<6b%>zV;-x8-dWq>vpUl>9uVs$u9!?WSExlIrT#Jk?G`{}F
zbQZDb9_DR(x1#zW+MgB^YG?!xB@t##;Sx$|M``u!+VTnV^=4(S-TX#Uc${Co<ipnB
zzd4r*dk3!1jP;NUZZ^P52M^cJnuN?`e}ikgc5UTx<Tr?ZWzi;DF`q>HC1KeWvtxT-
znWwj&c_bk}IG@XCTGgEynfJBZZp3k6BQE;yXS75x7+p5fRx)4=GR+6Us<C4oMX3rV
z&o&zd=iphwlo?Bg5GZ!KSAdsCH&{p$rqpfNRdkcBaqyfK7)wy4rL)T^I2q$*_rC?>
z=;jsjS5;ca@zJ;N<<yo099*-Qql@=z*~+n{c6B;sAbJlzKPd0?O-yicUbAM*f=*Y8
z;!_HR!Hvq3^_k@P$*(F?)_C~TzP`>G`*|M*LgrS;X+q>`%H>aX$Zz#NL(Ls!-;*vk
zl{~jbj%QuxZ$uUW${?;xqx9_oES>Lu5X*Z37YygYjkYD_WR-erAIXUU0)C3&vc*e)
zr5d?@5Gg?(?JOtBL}VN}QPhtp1bp#B;@4qUfCoIXaa1!1U#6C4JxRJe`%y3BYs7Ly
z#8>!H2`F!*k}3{#uL?R`>3pDZc7L!$GaDqtSgqX2kkJQrHym)SDIRxpD|1&qS&Gn%
z&d3ui6tug}gLCWnwlMV8!IVufG30(?i|TyBok5WQWC&-%p{3HEZ#eWAD!+<C$a3O2
z748&AcF?#9<Ye8q%N8|k=;$!N_+XG?rLB2J0723W6EV{)y!ZxK{*@1GPuu=9dfv<~
z8a-aTdD!gK;>h7Sd{LjlwLQjrNc|{XMdS8OasAPzzRAfwUR0doqrv@y{yu8ep2gEM
zb(2Hp@a^_+>%rywX}vJ*k>;DxJEi+aE*6P8RAqsAUM^7%@3^${c$(+y^W)Rt`#yd3
zi{00~sF|0S=FG;h#VdWci+3u;;jTlQn`c*MF`1{|Gc@tb7vMi5UsfJs2(tciY1jWQ
zu76R^$rxCgm|9qw(8^2yQ$<HbBdcOpO%6dbK1I>ea4$0@3%XBeS#w)3g-Fju!$hVM
z7^wsZ{fX_ZgJN}syd<PZC0SJ^sOSjgfGDN7?5qztpdA>%^YwMG9q{Sh59!F5_$UzZ
zWbpe5(!qZsIse@M-hG|l!a45XH=Z2dP23nj7|MCGozk)rV`RQ$)|WSMfOcSDzvMzC
zBh->Ja)8kG7B^8IA-;9SiuQlmkTtLURnWhT`s%;y-_*A<BFX}^?$%cSv>VZJ47P*#
z@WHM=pjs({*lhQGs3I6j&UR*zdy&xrvB)t?s>?sRS)vvpusHAmuCb#pLGaRegrL^q
zcR^&2cw<flJ7B}?XfK^Y4K>z4U1V7JGaEKVYz?%O&8uW-YVuwBBZu=Y6n(xSn-EX>
zG7m<IUc;RH;2C+=u!#qed|sbG1e&p32`X<xt+kn{RX`TSEx3*1a7@M8$s$kM)M<^s
z=m+SI<7fzT`lo)R`YCphvX>n=URgQd)eJGbA%Dg2I^iRjx9=`zR!V8BI?#AxYPakj
zF#2gXMkN{jMweKk&(bL|IK_&jiE>oUlwvp<WXAgwbJn88e5s51^Jy46t9ps`pU)u~
z?q+@qCIEn^C;$N4zc`0Na`GAyvSR<V>)F~`j+^WaKDtY92;{v(HHOTIQ|psatu2x*
z$HJX4m+?o&pDjt?8e8&3umT(Ny?kHJ!1!fSrZW;(R)*nL%$VM9??69iav9%VY24><
zh2!R&U5jwBYOaTtGC$Fzjq&eDeEhz=nHzsp%6G}$bFD2NJ9B+~N|SnOS~@v>b=lrO
z-vf9*H)kPyi)}599;-B2YAviEt(Q|YHsJk*V<(UK&k}vVKO1v0r(5XX^Tks|d;dDL
z+eUq#mEs|JtE~TG=7s4M+8=%S>zM8Nab1e{lW{t_9*2t6o#vs2u-d+?rDS_w!jNu5
z*-iZHtZB+QX{~e;nSxqihBkEmOYhGJrB1a|V+mWNmxZLIlPb+-G)1QH;)6%K?Bq$8
z*NQvvy~*-v6M2PNA`EhP?D30yrc)z1G=%i*>WET<hsv^tkmtgR6y%S|$e-C_yR{;{
zv%yuTQdbqNN|bPxO4iqrnm2dD9F4qb7U1eymm$~nrE-#QOwCBR)ua+xsINI%a|`Da
zR>8|ZCPov|DIPY9oW;2?bj7``$URCqC#|+;@i4DVG&~_9gD&O}+>=-&_3*K(ttn0x
z01`*4Pa2Ck%}$*(;;-si$Af12@0!J&)gDGf5Gh@mO<QLXJLOL;H8~efg?g(f<gL>k
z6*LkSLLU5b6)O{W2vR4Fzm2vmOPSkR+f78y1rM|?lhB@Zdde0(O64x8>8y<wtnBii
zl$Os;H1ADaHPZ~{xngLt^;KZ<SoBs(mTHODswH{_F{xE%B?4;u6s%QCYU*(k{J8o+
zILljDs^z%4$nHlu8o@fyaxFIasg^js<B?*Th#GMI%CdYvwl8MCr>h9m^TcCz%`I^1
z`8WAYU%eATNX_e}kop3~x9A2qiIOQb_T|8=YZiV+7BxK@JyPb_XKXBrdSoZbA;n7V
zBMM9EWT@@0PJSsSjU|3)s@D43sQQ<Hnj|zHFQ%)xH8V_#N{8|k94k@C5KnIKD@vKi
zqudimiR4fys<x4VFaBkK+92eEjN~soS9+=JEB{8fnZ`;g{q>vn=24X(u|;Hq{;s$@
zGl^AN&gyK^D;~`~k&6#xf>6QvQP@a=bZ;!&SIOiJ@_e$Ot(b1A6&aTMP7a&IZ1Y&N
zRQHIuve|!~;=O#_ee{y)aRQz|x0HnMHjC?v=xQunSz^Fn@2sfLAsEBr^qjvcYIj@7
z%)?~#R|<$q<WgjhO8g&$Y=Uy(y}=p@lGF5PwO<jGw*t~C$RXd!s}p!IR%_UchzlR4
z)tPFXiz8N7bnl<rpra%ZmEPrvniUT(XvBOCj-{ju#vVE+#L8o1_o>0|q)aDaW*i=!
zaj8RO(#*bl^h2ZQwWHc_P*R8k8fnO6BiD(a)tiuI1M22N1-Dkwy8GD!6sT=?3T?p$
z8zH)l`{YB}DJb1~M37f*5<5C{YjXloYG4c@>9gx_izirtD$)id=vGRWXH<J3YK2*?
zb@jgxI<LpV(*If&Rq^wd7!60n5YsIZ=Cc?}fin_=LtbIU6gww3OBn<Pg3G2hA%Tps
zps{;o2?|TKyFG^BuC>63p(~_ndFfmt>Jq!i>6dFD73IyzSSqxIQe#09ba|p-x4w1=
zWRY|S+M2-KD;{Ii=Js=~G#EkZ>*D-%U}IN8@CeIV6V^3-lgeq<msEptA#M=wV=}%g
zW-ZE;YGI8Lx`=`Pk}()#M#ce~u}F~R*Evnoa92ObWCl)~pByNP5kmCej7!@k)Gw1(
zUMye10%O}dJ~JBQ;Z9|w$8v*i8GZwsJbqQ4haI*IAcYQgiF3N1JnKNT)`G-TSK;>r
ze$s=b@&%J#Y<-x2T$F|*V|#!1abU`cy&+@r_T($Z!^;^-gbVM%nEkVOw@lP?0LHhy
z8)ZAXD&z(5#}}L4f%8{#7H3191z3QQZsmLB12lh#la*>QJdEKDDthJ<isXEIwzCR;
z+nUo!-c<-ZxkUE^R{C$DPXr8)EH7+bXyHpUxPe`ad^4c{DP*IRKHkt^bGW^nFWj>u
z3|o`<2$qM5oQw_h2*-`1uH#dzIRG6)7T<g%qAx?r0k775LhmmTD^4?A^OL43?u(&6
zOYLGBwv`#ne*MA)*uVs#eXx7GM#=R%$02K3{jT~yUWOI;n^ucvVV9po?xGGLREYM7
zx_trAJE<a2w=pCYs2#F#E8aSkzKrkGx?j*^jv#8+)PXwM873f*YtmJ`g=_YrA&kT?
z--H194i2DooF-`9GK^^;x0mn@=AlZVQug&x6B{FctnQHo!aLNGk#`)5&s(_RyB#NR
z&(f&v!=lUM@krR@tq;_cK~^de?L3E}4y-tS)nQFz#e}`{&nM}<Wo_lH19>E8CC7~d
zIYJ4&X5pY+J%Ep*0Y8ZV#K20bw)$=6nbb$bav3CQm=Gg&VS$H9xcU+sJgHB|yBir{
z2OdWEv*<hOHUwLdLpFg7jlGUdXTttahM8v4ZB{e~SIP2*dUKr7dN%~;EBWQi(2Lqh
zkI0qJEM%S7XR4!G^bnN8FY?~&o!5?786eI9gkC3gnR*WaeG7POJp?7Z89bZ~WF)8x
zP#1QCE<n!Ghh5$ef`dPbh(+{i-Nj5-7cLYOETU|!@W_av$VxEc{Hlc=jjPnTp~eu~
zf7FaxFSTq)0O-mtOyJB?x6Tgj&jIF+xJ3)NX3I_YoSVvc=vl-Ly-6#$tl+Jo-!bBx
zEg5Q@N22+QN3Zi-Kp~?|iO3n@Pt@_;Mc@RhjSWgj-`wI#rX911JtZms1$Z6JP(a)O
zWm&-f9eKd0;4x1EIN8*kAOJGeHUR~ZE0sV4mGTV!;6gddO#Ml@*)+?bv2)-U6!5~2
z(Lht`cE7~`s*Ziz-vI##(h%Pz&OXzi{acC`$5@ww{h<}Q@0>Kq`Fl#TY_R89JC94f
zr2mHDvPM-rz#}ZeOZZ$>f&jF37F@w9+C3YTQa(>fyf4&e{ri4E=mp;c?^J4mY9u-6
zH&gkvor~YSayB7!e6D>anV1wT>jZ>I(wxF~f^3DT_>(R=D&X?rDp3G5;==+%5T;VL
zLQ(ZT4LbwzwFCPbW~d-P1SHM7a*B%74yXt}TF^SV2d*66lN$w+9bVRq_l&;<g|7rR
z5Y+pA75^(ZowgGwR839&uvncg^Nv(zY$U}cRuoiW3Hjfel4E+@rdZG6q2mN8T{84`
zMr=1FWP6zoyskTLTV1KjYkEEx@NR?{{(`*-Oa^{mDmm{moEw2`<$>RaEfjp;ccUu>
zF-m@mh_wy>==y^6^HMYdQajOcp7@lic0C=8tdJ56HSb1A61bVA=5_!`kaN5i9G%l5
z17eh92^V#bs98l~sVxc0T$xGm(hdx_C8P?@BLuW+&=V`+4(h({R|@=QUKTYxT&8&d
zC+ccNr?)Ed2GEC<q$h0n1y1?47N*Ea3j|#mPjTZJX#!;TbWNzEv^_&Y#!(BJ@{*6d
z!6+uMELu}gh#cg$)(%v84@eQfR<aQBEE4=)Km9TMt~{cvSgl=Cv(`x9R7zoRlF%uz
zEU$@Hv%Bm?Q~+QuUw4rnLP;?@Ybjb{nGAqz`}Yn==-JUwKX@N`#Sepgb9981*khWp
zD+?!P5Kx*11<0IZYKE-EbhuC}aw*${7gKXlZ;u^mGeHu4MBzXTVp#<#yINkx{vw4Z
zGUQy&D2ZaEHYXpJTgT%YhT^@k&J59qpK=U>;)i-94zcem4zYuOuF{tx3Qfd2)r5z&
z(sGhINAAv*T%GMnFlzIQFM{g<t43*jF?O^ApEq8`jjchhXHguYG|#8IuRpp9&39l%
zM6Lhg8O>(M7YzJ*{A;D@&cO}?+zm@%nG$|P7NDf*Oi59Z0OINGqMZbTJ5-zCJC-bP
zE=q`z4h@S5Y!Frhw4l5#!c>0|Kp8EBMAo!tWpo7Ou0Q~y<@@G7uuEtw@$Y5QYR842
z6||5JLV|#pym~1_14Q`s{h0-QIp}tzuLRWgIHGivqin32-tit6(&~1F#bOlbxHW=H
zM6fZO0LuB91Ry607@l9EHG{`YAi{h~o>f;MXcv|P3hKtQ$j>CW!>3<^XW78Od=P!U
zm(a44dM@`r?19G=R})fU{M;f*jf}j`{^@YyhCjM^=R+y}3T+-Ks6$c|-&6hQt1Zd*
zeG!wPByr^2B*oTX$FO>${BwgJ{=MjyUp;sCKEV7kfhz<we>vicJM)b$`-OvoMRIeX
zW5uiZTF$Z}l!gOPt)R#3tOO1R1k8up#Vxt%@!ai19+MJ6Q%%Z80cVrv5o)O<-h6-j
z=-#tXE#j$;byft^b>=l^q!leIO|GE~je*bs#-=Fg9Lt*tXB}oE@oFBbostmhl4JGs
zX<eNeLwL&K&_pnSLv6&GCS#p$>EJo*vKzDp$!xgOWMH3>GND>u;aRkKV7Iw#U_%t;
z0GjVCPsBHiwNJ?tqfoQ_$+H$k%pfu!`Jw<=i{_(bXH7!)Ua89KDL^vR+wP!Rg+v%C
zQi_(Zt%T;HBc<)SzP^Z*2+LbY4pIMbP#0rc$z=yS<hRrDK;BmZH^D1_4Mk7`Y-6gC
z8Htd6BP*N~Z}a~uJX~rn(7<YwzLKx@l>)9wwEUIo2?E<RJ81o@P&%r|9OFdG8CvzZ
zi#P+hZ}jSc^Zu&+B26mZv9Y*_0+TX4>@qo$&>+t;@5$FS4N#Lf7@uNQ{(Dr!slS%t
z_n83%Ne1K<%Wez#kps}NV7KcDg0cV`5-90HgmoeMVHYE2l`O5Vhx4o4W3n(<yIN8U
zIB+zSX&4~~Y{Tjc_dp7y%PA-{__R#^o_4Y6@W8FL3$Ly)c<fw3hW=^q+jwx-^@uHy
zkrk(xw7BhFBoA;BT*17^k5+TATMD5Zg}ZUvix~%J?#}Q!sj|c7<*`1in8E^EsfP1b
z8z|RiowuK%s{JE<Zv27Nddu#FGYOBwJ{jz<r@WEt7hdD%Ul_LMjSU%@P8VMBY>E|h
z3#)V8uHgs!K0&acsgT`g!?Ku0+O?;Em)!?n?NszR)D3##_FyohCUck?e9j`<I~Z)x
z`tv2C!}GBiUwW9H1NQoQR}l7e!}f)+z8K<o#p7%vfJrw3U%Tt}NN_Bd7;#EIMPoad
z-BL<D@s~aE5(o?jJ~Rx!Z#{d)I@Zxx%*`^9rseqr_qUW}<NH-;)vTw#Dt7w9C;K}J
z-m!2JWKOiRf%Usd6{^~YS>(N?9FQmj6382ifAkKrIH8<qipOvsc%K;?dSM^kNc^)W
zDU1v9nf&niH9mYdF4HaDffNfal|5!6;>ZbO?%=Ao+~2<e&spBJJEk+Yrcpb5Skf&m
zFGUInX^iQo9E?T$uCqGd(5xie2#-d?f)-4A?M}++ys}2h@X{p?<9yT&XGIY$TEl6G
zwDVrWorTP~ziOhi+uq2!a91CxLPuyyT*SMrdMuzAm58PZE%fD~-Cf!m9^NT!HiZ{G
zLS_;sZ{{s&AMvmW^IFxWkXlYQzC#lw%K5hGd6b%i0XWhTmYtgmnGIf2#2^U|W9$O-
zg0ph_b|OaYD(3VZX;PvF1`vt<c0=I!6fnoj0-g!9jAsYKgR$O%7~$1)yPyye`x=o8
z4%kOyY4)J!6>1Th1UbUs-ncHILLxJG!9XeAPd1SG7ZRY25^9hOnWOHB9~mLg4;yF{
z@0;Aat=Lk!Tin`2G@WR-hK>p)lu1M+cIEEiM6AQR$5q()H6kF(-87u!N4pa?TdLOs
zamw50$D3$*ALI<5<{!haMkwV^$yB!6&oNRjKJ#)amnHV`ZCz@xirO-0<aD3W^h#+9
z`>zRMy;Emp7W5Zqn+w<47^Z0ZuW{=AzKNIARA84w$>QOAlkcEwzqDw_h4eLj4;-0M
zO6ms1V?0K*!P1-Ea9X9shxO(MYTLoW&w7AUq)WP58ZZ7j{mK#j?SUjK-nLw_yVsat
z99vQNllYu1peSrwo4?${FT-i5OaK}qdo$)xA1hE<uU0Vu1Y+-a4hQsAp42*u#z<iB
zK|CPNz;uX{$GGVnM?su;sv=cV#18o@R0W*#!u|CoB(@hYq^C0kfO15yCa&1{)5qh8
zc-QK0TXVHa;bW&%>xoO%I{yl?0p`P=gj9$rJ84onmn{2%)>+eta&mT1$i?nJF9lLN
zR-SrwXP@?~PE4**`W#jsi1XSkaJ1F(I`5?g9j04eJ5e_aQ4G5!Va(ig<5BNQ2Q1D(
zb{t<{sNC-ygrKId*#<C?fH-9#OS1$~he%Hvzn2h7G;*jxC{~@Ai>&$)RCLuxTY0@d
z2{14<7mORi(E%AJ;eHXV*?qj-lS(Wm{|{PwlR+}q2NKa)0HB|tf$SrjwQWfEF!P#Q
zUK;YgBfIOtw#`Gv=!$px_<-FumIDtEHsbZrDNuJDhGKnyP8T%x9il;i;s$n67&p-P
z-Uh;;LViz#2T@GiOk1(cAl*CJgi9m6GaKHyqfyPDDt4`1&u9F2cr^@|rFL=8UnkK5
z)f-CeQXSMWLM^%Trx7O#fX#4aUvX(S@E#=<8*(s@DfeJo(PsiUO9;;FYo4of@C27J
z;rg`_El^C<$)j)IC`Tou?Hn#-LZYcY*lxF{X7WTA`c-!Hz5|VR2fl|C$`|jhJWxBp
z%LNu&L?PknK3?)RA-K2QlSMep&<gmEL`G~cTnW2c*Gb*F_b4&Hjr5IG?YY54M6pP7
zwpn067*e=a>BsKHj~ipqqN4cJEc#cbThw~pnvvA`X-kvsbv=5ifNsUUL*#CDqU0-B
zRmRrsAH+<t7#-+oqk`0OhI5fSuPYXhbbT>oO9#h4!)JfC`Sqe}LSq}_b9}MSLeIWJ
z&u$ZOXFruMqkFPrMBl$v^?b2q`JxcH*>Lv5(@;%~iGUuLcz(Fwt$8!1o(9d|Ex2=$
znk&h8yxi~)1}i(`d$4>6EMj~*ae1bmQez9lJHX!Pj1J6L@eYFTgniRvP7cSxNW%oS
z&Rz#c+rQm>U70fOo37!SID5<RLKffLn3aY`Pwr%VmCOb)>b*;PqfYQ{@J{^Qt!&uc
z7k)71Y!G=cneyjt;TGqko@>LNUy<y&3+P4@FFHrDa6x(qArn71#=~7iy=HDSn7=jT
zveO9O&lk-l?=z=D)ebuuXu`+$H}AXzrEb0M<k@?Dy08{VaZBM|8WGOf;0X{2{N+X)
zeb4r#Ir_if*`b5PJA@Ax?Hs1TnqA}8YJ56;g_rWYcenQdkMaESMBh!FxH@uT`4;aM
z5}T$j?-s|#Jz32Fx3|y6PcvR|WOE;_n7_DtLa>*d9_g_YUm1vavI8c*guNy|0AXXB
zj2|&LZ`s=iZAuIE@GSVmm;sqX@WeOqr%tz)QyFMtkT&=}gY@$0ItG0SSvpp8L*y9K
zzK)gx*Ps(Oy{qwyPn#UwoZ&FE5%`QuBhmf&?S$C|<p$vjH3|X{Zx?LRxaS)~=bzAj
z@@^!aPOEN&DUC&Xc@L1!fW?I2&e-c&PV>1K*YKUJ51fNmc3LMNY_52|0(G~xXY;I@
z#=OeXjov?g2bGo<LX1aFTex|Dv6CzgAh`v$rSl}zN0WJxLw=Z8;>y`}@ziHMUD<iP
zu=C6@XujnLgC|s3?(=sgOw%H+0P^${7uWE0EH3g?dN1Iek=KYmuHF85K+h3dQ80%3
ziw_v@F5EjBi;1>PUif}}BLe<R`@*wf$V&A602R?5@+UYcQZ&nEg3N=<-E$!Wao4VD
zoHIhhV}h&|X)cDpqE}#(!Ps_iZ1kWt=6#@n-z1+9E>d6FfDb0_cXVe%1WQ70W9$|!
zAea*?+2%kzjy@Ly2@l%efE`KnAelK8G&jfiAS~!bJArDHN$eO=0*f0EuN{q5jKUAM
z6Et2#Y55g1xQX>cFZX6&3bETJ3-unjKT)<N6hAHy06}MZ!l?$bUkz-zJ;nfc?}xlt
zXGvR1-}S)bD|&ARh@6E`L8o&kX-hQ|=!PG9^5#}p-GuuZLsY;8F&-`WjdOqW^0mcJ
z?8gSOK39sk05!p{ngQfXNhCsH2{;?_6KHXz*S~WW#*4&%WVZJJr;+Tqc#5cS(?mB2
zGrEHT1$0dtHjZrK=ymk4W_@VGx%pgYl(xnNlhQGX?C`Wj=dj8$ls4h+tN4BZF9a6@
zg>N(3p==dBo--n`4ot^L$vGt~DoS2{2Z$Rp2KF{-2Q}CX)jp(kyOf7_L0kue_)(t`
z^Z_RLG*y>UW;cE+%s47G%;p|%snP0;ylPZ^9YW#JNLUKdi4b0vygq)9$U$TA{-RIc
z+xz1Qkih4${d23>J1{Ivi!|g&NM0QNb9@KX{u^S*ioQlwjl^2~8blF@--eE^=y@G$
z{WQ9abcf?TlZ4_(J+yp>@Q1QS`3{7bXS8N~qB&xxj!GlWo=62xQgEFP=&yj<&+*Ao
z8pDgs+ujvPG14{S+3jzazY<f2*AyW$sa1%wSWb;ZU*Bwcdfwhlr&Wf#I8OedME(?Y
zutyyyIB5Z$(kPJPykwnGsaieZ7#L%h6CSN1C8N<bHkX?ZqufEQ+3)X_t=$(S-NN@r
zpiLhrFRI#HMOv|*qo^h`IF#7t9rjXbh%B@W!mYV64S#5vB+7H9eGQgM2or2mhx*lO
ztgNKh6Z)n`dc2|7X4adm9WAaxq<*e3!#AnrPWE{j`GADVT^={ud*5;Y#BXn6De0NF
zPw7xaV)w+Eict_<ow6R1>ZoO3T<>K$tEq6mj;U1)>9|v=vGR2&JRt`n8#kshiVolK
z%N!33D>YX(=vZ`x6XDak7!Y8<pQGzT0dm{puF=Q_edC<HVL6Stna5SlPh{&>ZkIul
z8eEE$Rm>ayfUvzAb$tH*{p{zPs)4xmO-hq~GqzB1j~DJE#$P=H^}S5OPkk>Epto+|
z=sSMFWD!Som2=yXKX;%hrV|hRj+9H6%BJju!uq-5KWA2Hq?S}5rKM)BIJka$lLD@S
zc?>r67D4*gy^8Xh50Wg1(XES0mw~c+lRm8g+g?uuvGn%*MEI-wI%+PfSJ3fjRj2H*
z_xhl&<E{5U#$^9JAd&H3jLDq-7f3%)=VxE7zbaN2-~a%8|0)+fJB^8(ovnkDi7~Cy
zKaJ+5RjmI*iS9efcNhW41~gLnS6DG6xPU*SewT74DgT&tjkWM^u+4puu%8~s1yo3#
z(NGC36pHAZ;n|0+H*U7f0@*d}OyJ0o0CA=K;Av>5q!3cxHF_&UKA9kq(@JuwIPK`@
zL=eMuRbzojK%?~j*6S`I-PQW861Mx|R9how>dvkSbz~y9X<aKn+|5BC;R+SC$ZukB
z*D{$ZV&#D3X1_0G4DjeUj0v`ew?hVl*KQw|omUrWzi1Hz(5iJLRKnn2MGbRkY~a6&
z`}Y(Zs#6wH7Tlrn6Cp4kK7yJxVS~bohQ<QaAOf1D&gKK?ER!i8<ObyhVM1;skEKx1
zDby>H!ZGb}R)gLs8;{s}G!JAF{>Tzz1f2WPWoydyc)^M<Cstq8YI!=BSp)DL%h$lx
zQK#H%yFn!uK#2DlAhCzSw<-CjruHeZ8P7tzI@s4|5b5{?E~zBGO~22N+Z@I{gU)L1
zmcl0&1nEpP01`EVDGzo{Y*I=Qj?*03xWpj{-I`V6hZMlg-^dE{99<s6Z-y6?Y<l+&
zcE`}jt`G2GDVyBt)>7AYHgqBE4yTApk0kRRA_YB<;On8L={THI-544A(hmA33_J$~
zF+G7}Dg{I%;J{8SPju|-rL2D-Y~q5SDiuc33c|723=DJk_ab5bsU0cu>6I}^FL-j2
zaXk->E)-3iNlbhS(3|QMVDKHTO<9|Qp0oA6@Y-F^=_BIL`S3hrsY-0ARA#>De<)Iv
zE_$N897NHe=%mM#pqZD%6=>c}FR>?qlB}T~f)X}VW+#?PH1aa^+Hkwleh>R21x@;0
z0>R30pa<0^`7p?0J5LmViSKZ)5^%f>pgrPg&}VFsF=TAPGXRU@M;tH+@XTBg0*oV{
zV{|;zgtb+F9MVy@NFW~6UZ}#CTS{wrt&gLA9m2H-Tx>mxN-jjX!6qF13bj4`j*NA*
zidt^C_uO-Ywut%}qqt{@Xi}$m_>o2&F#@NNbGGAflOe{AqwwXU3wI#ekRo|>Ollt=
z3bZ?`E4!gUk!>^VM}>A@{UyMAK!F{suI~CaFBH)TsK%~SBio%Jrgry3CagD<@aMsj
zBcv)TocCgsYiXHIZGIr2v);)4;rCTKgI5@h`w!569<%4~kt8htMK%ciz1N)o?oPAP
z*qWOE^L36+(6ij6M;_jNqL{%BOe}s7$M6=<h^i0S4;?14hYaqMzsww2ir1EyVHE87
zsIkUesR{Jw&-=J>ol!Z_ktl)3nfE8Uz@JpaJfn<^W)(l(3mFV@F(JS)C~d63mu;q{
zgFK>K#wHNUhfgk6J0l`!$l4>>+zN=@ROBjTe(xXK)<SwVwyHt-wO?8(zjXn*08g1&
z8R|IYtHFf5BXbf-p2HC9Ox!3>taTP=(ICHJK!yjAl2mM0Je1nZ8nfvRRHiJj^4+=b
zw&hnBw{SGkj}^3kEb0EaS9zD$v&Hm=9^uoIlDM@i%aEfVKUKKi3PpWz{Au}c@AUay
z$x2uaSdh7qTX>TzOSFFh!}gGM^N@9R`D-+TNiDXFh%8@9F^q0c<{S*pig0tQ0UJ9t
zC!JTCwW|cL{d{Ed$R&NrQSIgs_rzrm=aGKVJn~XiO(djx3u$HOOKDm+gVH%ExGziF
z1o^q4?3BZGdXgE%wx_vd*P3e{DL}w)790o~Vd)!;CuBLQ7W2Yu`G!eA)BKy^4x=|7
z#s1Hel!h2GXENw#EK!Jw`|5m<j`?Jv>VyfL#6$Z|!osb>uhLAsv6MNyDVDmIRm!!G
zpE&-|t-GiHg4du+SO2d5E0LCk@b7R#PIUClG>!(QCjWerw$-g|H^kw;wSOWg?999*
zveSyXQE4qCqzcPc;SoGaCFhGHyZs{9NuD`DM0$38m^%M7#}$<-b7luct!J;Anda70
z@Z#LDH$<o+Aj=`w&4&$37ehFiKwJA1RxGpP#SoUTLz~2jVv8W5h#~|Hq_z#BxYAI`
zyhgZ9H^g9$l9k$70^VAp3it=jXr!Y3ZbNp-*Y-F(wf0lMh6Dwjb#|o-+7T<xl<%kA
zHd8g#5E#p!yAFle6MJe8cSD}koeH@)=>B7mC<&O;`7_YWJBh45MIa+MpLvy>;#{%J
zhgtoQ_=mzYm3#(h_4iA90RKHmkTSh7Ff0Tb#NW^=H)HDg?LZ@G5n*KGrh#B!obW*=
zIh8MhWR@1x-@k!+fj)>HGEZ9ii=C8xSGfa$+d4X?!NV3l-p6lpHDNRhlA+y#@@ghv
z%Xm9?e`m?`M`+lNF@Q_cK!Sq70pSLNL&EuuG8n!cN3s?eT0v-EO7k05(u?H5XfW1U
zJJ@QF*zYY@EwF5?qRn~+LnM23p?FnI!kEKGicRuR0JBuXi4<L=Kbl~I#ufF<y2}S^
zF(&7G)6glgNTNIsin>3h$3K;u(7E<3z?o>th;D@h3f0YSRwphRd174(m(<&;rVcp5
zcUkN)O(u`FNSD|mgL21yuN$D{_d<)Tm#2SCgnT``e}u5!BpMekF9g^+RCkM1PvB^J
zwxi-+HJl_-$-2+_D}{R#bUH264LXc{TxJNR1|y6n8oawzV&Bp}%LBMm*7mpLL$cza
zZLWs|VDn3yiqeHwS8sT9PxLNrcIw40Y`98OF(T}7pw1$`3-}Qy8Ns`Bu6>w$uVghm
zB!5u)+n2ou0nX!M-M0g9<PI=GaOj37Hc3w<GAq(nNDIy6_dj_1&XI0dV*JXoLR=@9
zSBYmxwiXv3rq~UEeZgR$Y?m3PCRiF>1`(aYtHW(zg&Jm!`cQA=9?+f(J0rOs)lSdW
zjt=-q46I!=QW#^E3`jtS)Nc|D=3U_aUg4b=1e>iU{KihiF`!ByHbL7ff<h`fVjx<Y
zZ*mFH?x;?6E~E%&HS|eFoIj-AV=E+o6he`a*67Jv-t{TNW4pAVtD*UN;F98_+K@ah
z-+4h!rLIkpn9T>(NWs@5bQ}KS+Ss4j=_P7JgY{Z^Adi-@cC5fI6#7${BodZHcbIms
zap>u<bHgXBT0Zz^3nnBs6(T)Mps^KKgr!a{liAy9@VJbY*gv;ZyV$YNTG`<Z^vw2b
zcg&Y*p~p3D9y+VoBqYBwbdzW*5p)RGHOq?rGdF`&)6&<Gda1vc^Eg%ZEm`T=<wp+5
zta|6K_jK|JhyDWL0AmCPDh_XHN`rgMvN0;;mZH%NC?>d|Op{M;IBxt7NV~+Nwiynf
zmz+8ZlBx;n%FagJ3bX{YEvx>#GOtGJVL7)IEA3DtTd+lViJG{n&O#;kBfaa#;-lI&
z4SQxzO)tTEeYo=_PRI2UK*a5q_nDy#FeaK>dC?06DqLKdQ92}(-Vr#+09)}VAq;m=
z1g^cWR>|NXltNIBaz?0ynkTO|I=WOFt<srLo6i}+SBsP5o{8J`eZwfh2;N`>UkqYt
zEhC4uJNw(N#NOJ{V-$Nq>bNjl2XE}7?v$a(A-Q|^*%ptVPZJgP{gqq6$6?v>=Nvnz
z6}pJy?`$qA2`>69Z5Kn1Js>j%L58e8IcOv=M~y(l&SfJ8CY^}E*)J0_vV68-!G}Sm
z?L(En=;A5qxpVE%k;1qp{cFa{9o(;>+A4rYL3W`#b0L(?+*!;?7H(Ug-`y;ht?G?a
zE{_*Kf_hcRx8}Ne*oaHrukI<&tm<+(-1BCGmwGE&qZ>Y8z|E~@ot4MgH}XblWIVIn
zCsTd-y#&y-H-g*~9K<=I0aIqp&M3JX9)0VLr@nAqZ(#qq)c6fW*6#QV000{u0D$}7
zl^P5*h6aunM*sXoT&Y_t9sGSFtb9bUlt?+^2-`e6p$>4!udkAAgSE4l4BLg!NzA0_
znG`5eetdWmgM!qYyF0ckIVC|E7kT9PzBp~F;LP_Zu_k^sksm^TQk^3HS#!^eQi$am
z3a*@MY(MlIa(;z>p(H45`-)GUr19XggD6E2;i5~u$%oYB@}N^)Sz+Cy#)bx30@1sc
z03crl-gOLp9WCi7fCd^p%+m}WXj#5niYPGGT}HI!R`s&TugT6H8CMW_OB@J1?4Sqd
z*g|3}0<sqC1Ut;XS@X6-FDtUFBz?5tH?Tw#ZR5-tQy>W9?4Qs$LxpnCk4E7Z5I}{V
z4C2`};s&>d1q#NC(+7vZZFA86JOq0UvLEdf#dsSNBMjFMr_ijlck;MBtMi{znPGu}
z88n$S$I1R9upK=9D<~qv5S2SO&=)u(RJ!jEsZ~M^o}JM4gHY><vlA?we;_yrvip&+
z%wPYK<*Fg41B$r)+JdzjI&2rGj7#}MBg)s5NtL2~5~TC|!)L~lU*FZtw9a6fNAsZ=
zCxQ77`+n#0+n_po^ACAUe9)Jt>mX!;PBnd}^HigSJVph}%mzgOQvpgN{5rxp8ku%M
zlBM)XlhLLRMHt}}<tm$`*x<WdJA$1DdC3M!8cNJj%X7ykwc#9}Eu06Ej4KJ;3YJgZ
zQ}b7=*wGa^j!kwaL}=|9@(s<APHm|%W~ac0yKxs|_9yj&1z(S_h(5a4wH%{e5;%in
zG&0>nHQ|RmScaYuL(i53l5w^&?2flyl#M#KKOzNt-k}7@-aw9==tfm{v_zTFX&67K
zgM66?zq#@n=pkMoIOfQ7;g|&c;8`Gr<2i>Yn-i-Q5i-zJ{da$lel(zxTfPRAC)_5o
zgIa^BtH7he1H|R;nV0~I1S25%><oW`>lqNB#kWNeSo}0Dk}_I_Yw6jn3Igwp{-Xc=
zp$lh7y{2WxIC1kWV*L#Sydec+{$unDKzd_gKhZuL();6_UGfZ0&J+{^h|#O!Sc0e#
zLC=!a(i-8?(13D<FA}6r4C>--;tVttjfXB+rHPoY+H{;bvGI=yZI94lbHuE8EyVI}
zH;%^2xp9K{iQ>7ZbNSJoh9%xQ7z;tcp|!QOGq-!x7OF>0T2J&-)CFF<-AB}~v!Q#3
zlNd9t!r+Gkg!cSCLFn!n@Le#zHiR5p5JPmA(7R$F@!C+w-n8@^i$38Q4bVwNo6s?=
zoW?wF!vT!yXA2?I6^+Wbv)4lCbCxh&GcsT1mxASY@hhj1b2quJ*rmJgCD9`s0e!q*
zD`-Z{+6bd4$<Z&M<^gk{jbk7%w*><TW&u6$fYR7ebBZUjrdQhMip??T&nmB=PB;^J
zP~9ErvmGo*Hk-93H<@Kp?wy@j%W(`fF&Br%8VSy<T{w2qGE*wM$yQD}9$LT3aBvCd
zz!c2a{5B2@(=aMDaMS48OZFDTF!Oi<Y>$|s?JCNS_nX}B>zCPWF(}pIQ#rp4%}{dq
z+sXX|5-=oOD3;uCX7#fYa{82**v~Sa0vficptck*Zr>fd?@cQoubX4S4`F=46%ohE
z?=n2xxSULa<L#fQQd_SmTjJs?VhT|UPF9J*mBI(mQb+DIPYr-h0EgZ;r#hg&#675o
z<+vlz+&)6ugPs~c7P9MUhu-!|Jt;DGc&arnufdXPHhTAhfG-0oMHok&3LIgxKFW>i
zrc)v?67i&lg@O1Y)?}ScSN14489k5DzA%!c$NL;D(i0?SGyYmfab9hbK<X37F>xD*
z1&65v8*yzABZ?ril@^5EvM`rwR_(23lT#0mYBwW4mDrXqSf&dWN+jp9oDgaz6do^3
zWKfSB=Ve5kR7DyiD4`*l;T+_kR&HzsO%;j@7+<f}(r>y=TR92`FB(}dAj3>E`STh!
zBSq)KPom!2MXMCyJEJlNUKKs#_n|zQn&Q)R?{17}oFP48n|`QEmX(DE4bH*!ljh7A
z@TZlLuGZ`h3%Y{_g%9I9a#7@!6z;y{D^qI@zZAR1AK<+Lt-T@G_!YzbJW=hr-2HIv
zO<wy2FlRlPfb|-?z`KC4tu{n<Ch6ynM&wNe&y9}Q*K4N;tMylqH(nr#g!G6j%Z>aT
zdrYIOCUNMZesxyZcfk==na8*$lG=d6l*GcO3Uv+)(2o63Na;9w-f7I{=jr&+>Vi-E
z{ulREL|Pd^%D?`5jel9Oy#MN<V_=}Mb1?bqtoA>&$*z*_EH~ugM}42aP+G}_EwJca
zf=S2|Wh0=g%vs5iCoFkbnBD3AbT=g*{Pai_EL%}dybrFS0!du=yo_&q?iPI#46y5)
zsQ!XWR;5p2cm&J#DSZJQ8FNM~luT4o2IowDtzYOX1b2@jx&`GnsPdx7vsrH$Ru@!+
z(`!0(Ll*^HJ!NFQM}W3Hr^-{3b3_-e&l=*M($%6~_sh|%!%7F}hCw`z9M`H)q_)qx
z$?mW7+%C*X66I}3V>`waMMMEFCpd})|0|q-p<4Ic9mTQ_{VOgEAbA7EinWo~Jcj%^
z_*bEgMy^fpeuEt>3Sd&n)`=|o*_%*bas`*H>sm>hhH%Dp$;3|eMBfrFiCJya=j~7+
zh(Js}V@d+*y#MN>O+CJK{d?7Lpc${4t3nh)go1MlMYypvkozpKkwRfX1gU#=0iPO_
zSB(eT7c8@uK5Vx@tE)*)10v4gg>B#@bxw<mCS|e0SPWZ%H#7s)wu}x(yy6AMBcdhs
zO4t*(Sv44js1JY6<mNiKJaM)w3HFD8-AUx{UhlVN?_{=<<!Mb#i(02=*zD{J%uT1w
z4%x(>yqtVLiz0MY8LUAJ9^36xuhl8cIkkpIz29aIyY~{j2@pzL3&%%8GVaf~JHJ6=
ziCCZEAI@U->Z9dMTJ@%ze>a0)7yPNI*2??rv4tD_axdZGn`^?`9c@AjO?zIg{;2%y
z91eK?(6qz5?gjl>{vrMNFXBa`vQ0G7e|?N%q5t*IIwOs_f#d(s_8C^SmOK3GnD@7f
zyQJ<wjYtJ+Hz&Wh@H~;<($rN}283yyAki@J{N8mDL_XnrbNNm}9Be7MtQ%z4u;cCW
zC*4f9rB{+3rrO#P3t1ABT0(t7nbd$>v8|tM*=AQiDM*??*f1_wT&wuN0G#_8$|Dfc
zdvb!f#+t983Q(-hc0?QKtDNDFD{(n`F}2582t-LjBs!4qO}6b9Eu%h#AgMcd#STZM
z*~Zl_ueMI^kAuLoc(B!;7MoFtKEAvlHL~y}f`B3Qd~a;EtXxsVo)r{+q)^hmbKjwn
z5jck-2}LZ*n*R-0^~YKX2^lZ!qfqky!`eFr>DqM3!fo5OZQHhO+wR?V@3w8*w%xtk
zwszY*J@1?^PRzvl-idhP{J4LwsJQD|RhgA5vjsoMJBs1Y6iIp@Bs4P!BZxUr^I6*S
zXa<Nk$xz>uLG+>e0m$);$(~hO1RuQ!Q9c?Yo_Eu!PRqt@3VpW^u{0^|On-KpgAdSi
zO{j~ZAbo2-n#Yap$RMDK8>}*-;?P*Yd}K4D+{#&PyH!eFfNQON%?$m_CRdx1i6y^&
z^^CVTC@FU{=`m#+T~q&`s!lyzn_CDun^UL#?Cj0H6mb5-bIlBi9Zi~jO%e$Y$P4}k
zL@l{UCTP_Q+aWBa*rq}GNCYZkY;s|s^SidEdgssimm*Bv$FSI4@-mp!v07dDo)h3S
zq6gvm3qvcAT4PDH(yT`z9^GxmdGx9w??&yXluJppy#ygPqNIezZu;r9ZL{r5ZwJB>
zlM*aoZTOF`?|l(mzrQ}u#wV9Sh@Zvpn59qb&ga?SCaip<tLk|m(Q8EuAaK!CbkveB
zlN&NE)~biEUGuu&oB=99x>R*%Fl|gWPz4wC!FWEFsyH^sONPV{P=+cYSr_D=BO2x!
z17$YMMryInw<fm$VLW7BG4gjw4mCs3P9|zuq%f33D#lw<UQ48T%a|~yzpjLSZfS2h
zsMCGze|2;fwmQk=GsTy)Iz%YmXh2ThK5VxCp08|O1#VANiT~-`>}eE!Y+ZjJrL~2K
zCHS@(oc)=$7%HX8Abe!>t$!`gB+9N1=k+nBrlic%Ej38|&8C=ry}%1L!O(@+I|uly
z<V+L4zUlXOMLLd`^lI<oYL|sK**>(hf^-R04{<ajD=1<KO$_CFX;ZP%AyXI1&g^*n
zDpMfHnEgveL&lLX3~8!aHT^=8k`Jh#>`hqaX50a|Y~fpOg^Zfkdr8I0Bv5%t)<~%i
zGmlVA9hLfOaDQjQz^;L!{=t1d35&(oNwk%_erXbX{xMG<d)+mA<`Vg_nAtFfnE<3P
z-yI3zFgupnLZW8EoQwERQ2gb<hmGSa5JM5>Bj*f1+-iZ7k>SyzS|x?bsS;iK*|Ljo
z;64i`yG#gD#Den$G-zq`@*99wa8;(fZL>TJY0GrkDR5V5t-JI4=a3%HOH@a*Xl}t=
z7mi`0v2~?Rr*rzuV9wWyJ3dtK(fj+dUAtPJl_JVVTy;BR_0|Fk81HE!X>IB!Y(-Cq
zyw3c+{C~xg_x@ys|B+mJ`|}d^53wZczt~2me~%@r)&4V|p+?`)8DvgOhww>@+&SJw
zGjpULfIM~!78J^+%C#X_qDWlHEvWC?S6u2&`g~c7u`doZp~E}pWZUCm5l8hL*Hhd;
z0eknJQ+@Lgi>TZnP+z8(zuzXuDJX87K|Vg#DzS)?#E8lg92P7m)!N7Hqxt01&DEDV
zm>eDeohKxem*p6dO>a>NNpSJI`KSf(m<kaLE1Q7hm1L98_konr!DvT)d*XfoB%d(?
z8TNsh5iR^gY6fNYX-_wAAp&I%Qtt`qx^OChI#`F?sAc=!z4z?-yR8F%XA>?Wn{8~c
zFLP*9fI=}S4vgvRSDvB;3?Jn6U873q6f1-=ozl|V2H5N@E<%FoVDqA@i7#N2B==X6
z9td5wlt6SiGc7(Ma{-n!VhLJTw82a%ypLF(1#E(i-Y&%0Koqp;A3LV+*l5<K=At4N
z*kvO5pIlRo5#)Xg)1~Xq;k(?Jw0n*?X$B;QNC&F~(30OF+iEYExBgR1PA{PhnMn7{
zkL38*HM<``s~%4N%w1--7(0G#{@PW^H?}0XADyVqx7+(0mrc94Vm$J&J|k)LNab%1
z#6~Jf$ngo7GM?u{6hCGH_M_oI;uzysNy^a>xcLnaQ&Caj4NtWqERtbFAfwYp*xze{
zDyyEr(SrDCF<jQo`Goj==%!t<zoFB%&^|B=0pPTEE;!{9Df;VRrKM6djx8bBo?~Q-
zAN#5Lp9H%)ecs=XT=V~g;{x$iL_D1!RmXYnX`ShGDC8fktlA!hnaV6{HsgQ2+;tCL
z$-@ikV^>J-9l3*kBZArP#tVY-$hKL-COxu^vx`Z~gQv9^Qd<;$Q<?}@2%XnOa}cek
zU^?Rt22%g^N}ndA0*+FY+!)8VjJV-;Dyb6rG$uXgX@A4HET2`U^~j|-2QTs<El2gO
zl?a-=?OXS8l4na~@)=gEQ!kvbbu80UdeD-i2vlkw?qKk;X+~zJY8kBaVl~XJF<kSh
zP-);a=Wd&1#3tt!ZD+!SQbvC&59yZd9*mQ>7UFwnJFKlVQ4VUUpFd&NoB}`5%*-+i
zqaE+4nsL+Qg_da*Gnx6aRz*GFQ8%?mQ!+r!d<>S2hYJx%1wCBEAhE6Ji+q%Z-gFI~
zs6S^O+<>gtCxE53Qp&t@QMIgIUu&?VK*e0(M0A<J*LZ<zFTTO~+TFyr0k3pkpt?g$
z(FrP|o=zw!bc~HM^j!!0`$1)L^@XGkJ9D*8owx;6fj!<6eL6?N20F<yx)8-ulO32m
z32SU#i*7R@+!_%8Egy5~Y#xO@M#rB~qm9<NK?X0<!C_<T)*9or{jW#$|6^%0Px=^C
z_S0Qvq5o-jVPvLtF|_<i2l%(I+&}lDf2F_7=sPBZYG~2ULbcd69}|dT=YfWrSo{GL
zRfcd88PzdaASm||i~H^&CLK<pC5Njsl*6IuYCXx}-Y$PO8dm{Sl=6yWvSpbn0upX#
zm=`*RF^kSnVw9CA$3*dg`lS5&MC|<>$}YaNXT~eFsi!G3ge2rN-z|2o0ra2F3J@Hv
zQ@InH54qoA3%HiCqyrrq%+-S(N7n>Wg^`*bo(`I_--sUd&+-3w*t-L2n+u)ykyzkl
zjgu}BlmLeIniOEpU%QctV^=PR>9~gwpoA)UGz?3O01k|xS>B~iGk`#*pt>W#+arfT
zCQrW&%%5W(QOC1-){&9Hk}Nte(P0RXkCjS6)|IO?Zxe<|3EriF-r@)F0~>_Qi)5p^
z5eNQ&L@wjwefhk@wc1Mb78+C1MAzfN$r(}~s1$@s8<HeWY~6*uxjdQ#^uWeltm6&v
zixhp8i%JN{(zLEx%%;Bz(@-Qzl@W+6DOHWcBT!RcXl<ZznrE+5+FY%mOHop61{)1l
z#tZr$u#PLr%!5t15L%C2bLTt=ym&R{!wvGXgKfY(3Mrf+BP;bcl>2KXRvK7M(+^3-
zD1&-0+<l6Ii-w6V=wVOl0~X-FtYSEbue1RCJtZi19Do|$QEZ}Jr3mAscl4`lU<9nU
z1tg++9qlezrS%*0&Q{@ffxDDEL3Tscm9Dup@YQx&^u=X|feMJ<lj{R556Gxkh0!k~
z4p|XocXT;z$S1^h3py#^sBd%`4k~Li8-J({16GlhC2G6lUyB30V+(yJQ4iB$&^B+y
z{gR=}#SHSR?ird#oLqFV%A=Y_;ANsh$psfs8pxcbp>~~y6edt=F1Gj3asw1Eq*Y+z
zyr-L{GU3h$Dy6GM-dhW#70?TO?x`G~Ka;F7a{2bApMX9cA0M~X+~u1*^4>RnKzPIA
z8!bTX*l)pib~ux(weuHsSUJ~@>z{589$d**o~yKZ4(^8OmvPd+*sRYHPgTL27<4~x
zdN8YBZfcEJ&5N)H>8RnuX?SlbBK>Qyt*lXbZNg=ZS;@gODwTEES9_|a^<7Ebu*`#Y
zU)jL1YNj<x!?yB9GhJBqKd2)0)i2fDeS!2_)xKKKV}@-eTSBrUxQ}olt}ff(#N(F?
zx8U5eywEwx3r|Vlwk~K*irZ3%PTa&63N*|gX+jrn0<nFr1wh#ap3x=&Crh=Qq+eiC
z!^A9z2~N<jcW3Mb>Fh2lqchL&|Lff&8Ez=M?FZgh{=9Yy{xf*b^e=e-pYE{#zC{$P
z_}gbPAbfUyp{NIfRbg5#xUL&~7PDzmyUL2J7FlJJt#iOq)nl^Z5>B}9tdW?MFIlaV
zfQ&p}U2SbOVsB7RBP|fXLX^h=jqn5s&f$W5E?zmT!W+mCr<<!#3<X0$H4F@=#~~C`
z#xQXOru7p~i%elQZO!yZOT^B_p)K4Camgl1D9vJ<uuQ+;q7IOopeQp8NYVh{bC&<`
zk=KnD6`nlTU*Zj|*E&wq&H`9*QE6K%Z1<l2v+wJ$q3EB~By=P(Vswz?@xh3tKp3eE
zF?bXZ6Ckek7@X}#=|gj1fMc2k5Fe^HLBO&IQLKZrLEFQo=x}{;3oNjk(v4}74C^)T
zU!i*=E?{KB0@$`z*)uodhph}h((=gVD$ppX<dn=5CG953f?=viAy{a<LXy(HQ3JG!
zapy)24ONhw$$e0h&QC*F6_%<sn<o$s<-VD1tWpV0Q%%19WT@8P3^__*hP99*gjH{b
z05h7@dr2qb;hIP+GS-GT<V(QL8(|i#0RC&ubz#MChje>VX1p|C7_1rO6+YVPD^+dk
zxlXT+J_W(W*vZ3+KyICoop4i*b<KjsE$;oUhP4d>&A$_$9`$)faFY4uJlsJ8p@LvA
zJ|7c2##3<h;1!_53}6R$_s<jm1RH)!J5)T&oY8bD6>9^?)=j7;xMK5viDQ4K*Gaki
zIk~#6Z4vn1b6xW0%bvs7!!2@Q%-X25G};vGKSQm@@=<+Ntc)tU(Jztw#aft0@WBu0
zcH}P)EiMMeTa8r~XW;ChcQ*bU|DCqRWrZBIwk|aHI)0<WISc(L*3YhZn4;zWl%Y^D
z{6jOdsSHWE4Bk{>gBYZBnW|a6mz?>ojJn5c2(IIt%CCx0UZsSH(7Fz4z{$n&@5a}5
z%eFKYszEpOy(f|~dY6%3Chq*#PbRIIEL-B|lNtWu9R8uogqhaf^?x`{i&d_FR3-?Y
zHNE>OAX#xUQ(LRxVJ<e8;Gc7DP1^<v7*am5qNd}?GnPVQ-#v-lCbkwB#zP2mTixE*
zF7lt~tX#Bj1@OT+0?W-V30UwUu5o*j3oL^b%LzYf5q2!jKZy%iN$J|L1cp-p1-Bjw
z42VSP5ZzTOcrS%WopjBO(BzdTUNrNbrm!TpnXUU_wgOziBh-znVPNvo3lHz57n%2!
z(qxB_rg%|RNg(Z_@FPencX0iMw-`HEw|-{0j5_iFEMkSvqkyH0Dc~1n*-RkaB(aIw
ziw8jg>12Dq-G)jXdJ(IYs$rg~Z3~?#j*tWgE>PIUUtFkTO*~8-m4YlQFe_z-!N7*%
z6j>mJg*fRA4Ghu*a0bsR5u0v3u;7ftUs_?owd;MS&d#-;+_e}^7t-)PpnHv*fYz0b
za4Y$IEKm;qj@^cGYTr`bnxM-cTion9P=_K`TSpssfz8Xh`TD(*as`ZSj7)bf`hJGj
zCbvdD+c|NBe-D_3kIvDYIG+UY2MYD7wl(|CPc{Z7`cX0S<TV$>E*QU@B(~2pU<#`3
zd$|)c+hiY_hV(u=@my*h@Lu-s+};U5DLM$Sa0TRaA4prKy8k$qpuGyc?pC3A(Ah{s
zx$6^b<noSA*qH<%@X+C^T8zp6ib4_1aSx-BtX`RFpqO(^Vs;MJQW~EH^ciZ0vXkAj
zMvhyHn_6PJ05aw>M0Cc~i)I@baDN~9aRuEe?-;?sle)ARaz)jP8yPEB(VAiD<rLbL
zLWF+(Z`ps7bHd6yKbJxGAJyYOgqrOCf||_#L#J1@wcr0C%W%FUIfG0TkS62KwFL9V
zo7<J&2+4IV{z#FlM)Cf-zSP~h;_4Utc%G?>fuv}!pd#pN<eufZ-}Y3_o9T*O0sPTC
zQb6U0(8AIrg<{tHwO|?S8VeR3Q&loM^(^i$EUZ82?tFFd2FHd6z!w4I)9*lsei$W@
zLZ7?Pd)#6a$XB-P#}77q(Clzl(kewG`s#gb$w@7O__9gH%KNQrI9)SmRWAC4)C#^t
zriui%2X8NYO|Kd_2T?3})WCazcOEU~zv<J_`{@B*&VnY2<kgs57e~QDkQ}1pBg#Ml
z8=70}&a1wTlqHWNou1EF3oJ(#3lU;^eGzj1=VD^~mmk+5fag$+?}slKbWtAi-sn<I
zpTa7E8fWpqF-0{YZKtyf&<<NpluU|LL93E!N}m)D0Yn={znKG95kQa6Ai;281M#Gf
zoFJwr_Ni7NOdumTs%TeWP4G6r0757tY4q$MB(yNZX}2k0vBgI;GWShwQ=YayvDc0M
zOSf3mJX{28l@Sxs?L2BO^g|~T=?AW6g-x{+LkdzOPdGI-uBs}1ooWD}ObNo~EZ^3)
zFT@N1L&cIKt?lD%S7IV^nf~+2wf&~yW~o-bR<RWxe%OV-CNYHh%^|Dt;nO?IWLd*=
zEOQX6d1nY`F5T(EPWdG+qV7h<p>q(uKACX0Aif!Om0NmNA+<HJlg-3;lX~We{aoO;
zj3_uUMB9Ae7v{@3HR<A`gnCZS^4Q>g6yLA!%mJ91D4@o63TJ$}-nd<<vsYyaTc(gn
zib%g`Fh`Po!%fsQn1ogg*Fr-U1peW9)cP?;sb638Qd+bwplX~65s}h%jE0^9bwjAj
zL38D4=3|Rtkdc>)Dxm;U>AQgyY=DaFwe?Fyd1$+lO}GkLG?;84u~UR(`3zL*Z_aHY
z#pW3SE@FkufTYHU?V7mJOl;$r<Or$^CnJGk%4RKiDMQiyl_{dYGac38wTR)yPZU_0
zDzw3Q@k)4$2VG8FkxuI#amj7iDVNOINMgpFeta(3b81C$RV<cB)a@txV!MK$m9Oa0
zv^1Vy6$^wJ8mKISB%oui(Ft_qjME@d<Jdd4H5XG9X0rF~W}lT3rcnMR7+!d_SzUpH
zfE|{higj=;f6UmW14|7$aoL|8brCQJGJo~f<a}gr#{CkXd`)_}42}#An`t}1dv3Ho
z@!AA2$MbnseSVuac&!o3rM%(0oR7r3Vxw_h*zC31Y5tqX@ac8bQCvk?<!$c%_BZx;
z-#rErx9#%Wva`1J7pCn?;l(?ioBO8w*7UUA39EedC;Wds5HlhGex7Ur0N#HN#DCaS
zIB89toa~+ceN$;p+^}00KnT5lrYtcS)}Rz)k))57P*N-)D9#66q(Z7V-)F39*lu=P
z;iM>--DU&>A`Hu17HXKfocjK3Wd7rhY1Lm*1%(z9LNQ5%yS6D%z!L0X9z-z2f*da@
zp_&C<R5;>9_-itv07B~la}t)1bK8jK7$VtW1a@wArfzAhDdU{NS8flic~44ck^keg
zkvdtp2+?Wq$OYHA#W`@-+nwR^kv?KnBibl8q;X8BYVMZ`+QKPTe;&)}Z_@V%ZA<AR
zDj0%Ppcv0~gU)UMLgMt}1)<`zcX4A)OGa^^VG4y1t;VnZAo@)jf|!X%5X@~6AUp}9
zPM1%OecNg4de11@Ve1*nrf-3Rlb4M#5oMTNO4)cMJ>S1V?-)Ki{_ule7IT`uUa<Cr
zDoAjHvs?WDS&PeWwNmrILOHcEW!4Ud3&UT0o*t-f#g{pcbRBjPGl~Au-Tf@!C@fO;
z+UpXUnE8_&H+kga@W1=F&FyuD);Frhj!cg2m^vWYnXwd6`K>$1LFCF=l4lY9KHD&K
z-Db9&ilQop(TbZe-}qm7s_;D>Mt(d9Ikz2+HND_t3-)~e*b7A*rUdKxv1u7b!OFP}
zN6sV_k$5)5K=)r2C7T<|v<<bjG`gAe^53Ybczbt7wR0%y35p*PrO-i|QJ_1(O7VE2
z&;qo)w_f5AyGdXFH-e)I1w<e4XX{=35FGyy!Z6U9nA%v{TK*UwJOBGV_~(DK95|nm
zm9$AnHqdIzaM?Rg3njw8SSfL61rV`;i5D5s)14%#TH@b&uPL<rDmQH)81lprG<r^Q
z4tU+Wlplwq$A`+fRKwF2phn7rWf<2Kn9=ST&51GUgXP=JkbY9PS>;2RZXlImnq2pl
zEb|&M3z2Z!eu0yr0ujQ<Wd<A&5Z}?eRHD|O(d1_|<C+g)suVz~|MK@T8aE(Y<d!Ub
z6@1cllhFUf;K*HoVZg~riRz4*-g>rdu9<yPKS@RRpeV+~1(jpT#}cDdCQyP^_L>!7
z%-3K*n5k_oUy@LF1YnA1D2_#T>wFbth)+Kh5+;QSyqOkIS&yX#h_NUSM1MmVCsk0u
z!CY0FMswj3oVy@A^{v^-x{$0H1S>Gm2IX<_dS{Pf9ZFDC2A%Vnz<I_pKKdTGA&04k
zZtl2wMT`Q0XBo#RG6ojP=f-{RSb<i9NR}~;-~$usz)?jAh1gsvm`Ap`63yky5o`rl
zSN#6if9B#Ke+j6Z<bSun-(d%Fwf1y>8hs7Bhfrl%#$Gs!<BHS!4ddMTd%^hZ{@5ea
zY+M3C2Gd(^5+-q{$b8tsS2wrO@4I0KOe={=-q3Jivt;2k#xvn#IOL>t<*3pVZG=yl
zaB5ZnqUl!}AE6&E)fsP_k?x+>^z!pkSd@!hRBJcoEy+=R`C*!*GbvNPClHxM(8d7h
zx9%E}?5DlCyUvCA$>$)Ky;uSWi(6ZFSi)94s7!jvZLkzpCY_&M82_II_N&Jmf6G7E
zh1)mWwoB?e%7tiB{PY(**DEnMG4S|zoVj~F7-=c#rFYv+)OOg70I6VU^k9vVN(wHT
z;5q!a-0=kr0seLOQ|JBhGssjiVL3$>LgN{R2Psr|;9L$R(l5gWoxAa)Ql_FZUcpQ9
zQ~f@poPhV`1NJOE>X51!0PcxrMU;Oua#;a<)vZrt464sJcEE#tp_%ldz*<4~=<X1r
z0t!7lhMAgw(+$d#7<b}1oGR@<@J%1){6=T{to@wec?G8C)GxOyA!12iEDpp}o#<+J
zh)}23%mDIbx#rA_i&`{Og!zzqdf2Q7^c0%KwfPeG3MujC6PQqa99SWR`rB>?jCZb0
z_BWt1##>}tC^R9^!y}yrs<y<^A+;6vzUH{SYs2Qic(kSKRqJBk&1Z<y(gBP9Cps`_
z6;SA$GzgQ@UWbo|DII^hOC!D+^LI<E=8try1(Pkr@&2vRur_3HAiNRe`VyKMqrFe9
zL4{s_U`9Truj2Ly8V9cI1LdMs0v@s&1;8y&SM=HeP+-_O1l}e<TY=cT?g{qXA<UR|
zj5Elm1h6V=pxx}HhZO+u5<+JW#ss>iUhVt8`6&*@vqhQym`f)A{Qj9bf`Nh7?WgNl
z+S~p6#-pr8BSAZ{w@>xsH3=bEO;O(fB{@wyCP^dNd`v|#F-5JYz_hf;96hewaJ)Yu
zqdcb|sA_78dW?l~d3IfDU|nfYW^Pnct}tB;0IC3d*N930wnSBQ4Dh#KAud(F;FrSC
zFzA0<T%D8!J<`v)j`$<};QeRZ5DTr5lfAX+|FE{{BzyaH285BFcjZk2Wr2{Ywe@a*
z{;vr1KSfH4Y~@Hw)?<iOTyAyQZZto<Q2YQ(hZ{tGO*7JPr0<h+@5$wPB}$Bms)GgY
z4a-qz=hT1-HpV{uiWMxQB&j<@L@ZN8v?<y(Y%`{Gi~<~$Ap*{Cl@LFV3giWHB#7ia
z8I8Qr=^MM;rPI}$!+c%4IgNbO;QsmdU%IC-ZGvM}3b)sc_RJ-J-nOx`av$UcDK6r~
z0kLP=f+Pw-i*ZRlu=)!cFrrc3S(ZoUolwEzC?l5ndJIaHq4Gs46re8{j@4uUVhHyT
zr353<Xu?bYa{^|%bux5ATATNVHQ~8*Z>ovK>UZ*NzyHj<?||uF5#8NP8`jh2ZC}cT
zB&7=dIk(NADp4S2<OuWhYdN;@$RfaOT8N&f3ahL{rer)uB61{_YC8b^5Gf1*=xC-?
zq98%&(O)8@KdSmzUfC^QaQFqJpk!$iO@CH<tO7ajMb@3e#bMD{0P@}fmka(`+pS!;
zhC!A^B6>)g1i;V3ywl7ArBN~YY1Vj#?wuxdD<5>bRfwUkm4khRuYwo+_N{<xn<v%Y
z9Bfq((+{~7NY>)OE&RA3?MQjdO3sK+zoAV8cznNk@Ono=t;<rTy$xVGt4JqWZyLfY
z<(Cr{qkEMeZ$;zC6LCM<$^D%mKdZK}V*4DpX7iphYxaIo)|-a(-%)E;ju4;p&s-1s
z4|3)F2OIHUuBBGa_Wzk)|Nmpl->g_KH^_jn^^Tfy!e$FR5eJ$di5M)Bu7JupGq2@(
z>ChukN%b9@T|_7fK?Ww><2`%LyOT{8%}D1YPC??B!lakkU5_6s&s|oMJq*wl%+)j#
ztYFWj=Ezc@!j!n&RbgvD&ust=rhtH=>1Xrj8ty?xs*|M~-5UaYjXO_yxsF6?pHiE5
zo6iG9qUdY_3w|LSS$xtXUWfM0LranY?rTEbt2w<=0Bqlqpump#Z+L|ZpF4rV6_F++
zvgYOtwScaMCo|jw3QLK30G|pqQmdcr$w}$F*}gT$oDHmL@h8ID)QH&xibLC&5(S7P
z+V6u}kY8Y(3Y5g2`gUS|s6YdmoeERd#ZivrEWDLZa#z~?0{k{5p96vZw;5mSFvO>9
zdc+@{$jhNBubs0uRxH>cumgg}5(--jZN0~DU9q=Fsq?M_<kN@9{}mp<w>M&`{S4AH
z|HMzT{eyo`NmNioR`lNuST<{YI&ZQie0sj98|X@n_h846a;{a5b#5oyuBk2Kb4lu{
zpF5cvN=(71ePAFLi6N&x+xI?W5sbzERjDy5R*DEE`6c#zakT<Va&p|k$-%)s%(N1t
zsP3J3{hdW}0)2t<^@pl;QESDTwbF`}y|~=fc#_i}jf!2?*os|karqb%zn8=RQHl0(
zbJtLnoH_Hv$42^3Fse=(>Ff$}G29=~XQPeU)+RF6iVVX(*TRetyMz!oghETFLOGf2
zN>klwYh4c0$ntTfL`T1kvXJta1=CQ)7wE=b?KGw8O1Abqf)^`nXqStaSFv>J?AA?=
z5tpc;S59@?8&@l&F8ZYjHfTRf>tV+c!*~+UfIls-%}gs;iBT_~Lg122UREyEe0Hp8
z_x=O;?QXK=(D#<nsiO$E+A@_uMk*Cn*2Vd&4fU#&SO}7=Y^j)K_rg)?n@l;&<EIB|
zipkS~ji0}#-u=pLpY-s)uE{Zsb$7iXyb`eg!mz2Vl408Vx=gO8OkZAQUz5EzavL`n
zM^(^fdgmt5LM3X3=hRw?X+j|Hx!1%{J#b;l#!$tKJ00lssFh5)aE4(uKt3^Jbyw9)
zX?%GVUr4*27+Wq%OL?@G$UVDX`*sxOsD;pKry|&*Og4K8Ps0idW4L)eyg0xX<^29*
zWw;nZb?Gx-)>T1=4F0(14Kww(I6hzTzV<xAOYY{=(UqThv7=bnN3|Z_Z!`Du@3$bS
zpJdc`Q?Hsd$L5<?URN%mHPmT)3DFz)I@K+72ME^2$l4SLBu^V<OL@2|j9esDV`KA+
z0FHc>anap%nR?Gv*l5VK5-~-1n1seJrdL-pEL-PNGgsBIIU(Vqrioookp2eSrQ<jd
zWL7z!UVX^-U-6*{hJT&4EHyK!G5W@{tTNO+LL-osOI9h2<1(5}r5ew>kdgVxx)+2r
zRyW%yuJ&bS5fT89pip6G73&!~T=*E)(gjE>Cu}c^?Xq{~kr)vbv}mcCD=HDRMaHnD
zB_X8Ln0)eUL1HT_YF6+<UtDN8Y!Fmo46lLb=3+HShd7*V7gF}wk&@iLcKL56rl;xx
zXH}ZBHxlZxEzp<DCnE6IgxtvWuRdQ6;6-?N==I589?iwxFyo?V|9}Y$Vb?cWuiMaC
z)Ey-|#$-o@jGSZKdv6ieAPYuF8}fSapuI|_?gym3iq}JJSrpggxnXv(ui-|uiADi3
z2a72GM&`Ol?Ut4$wT107#HI%sJ?$zp813HLx?WN#O{LZ~=LQNIk#kOTp%mCPuUvNI
z+M>Mzs4=#ercIZuY!FSUXx~^)*UYR;pO=ktAeSydWz*9#K!eX3{^sxuq;<hcQ2^%;
zaRXS+&{IW%%66zgo^isT@=B_sl2tNjty9tB6cNj;aOr<xdUCM2$Z(_`lfAWD^)An5
zrn~hB5!0~-oxn@0m}s2Neg}-!{oYzg@&Q2*=n(2!BFq@Wumam4cgvun{7U`{u=y%?
zg7W?PY#Q6AF3-?#-_9U3O>IHh*er={1GBC4VvvxeI+)v`V|*}iIKxBY#E@jqVl029
z4D5zv7F2YCijsk~E2L^!kqwX9K@$(5d~g(M26mdTbE2?_fe88}d=tFcCr=p*7h!j0
zUdo1F7DsPmO`(cpLOMH9C9OSr)S-KG23s#hsBlum<#92sh0QOkf-$NnSEIBWATo>~
z-+oSjHWR~M)t9UFO6w9`j_lAi({T`NP(uNfbMyg%0zY$J$bEu9|24U>m<k?MqKUWJ
z+pASg)-8ASjh)dcKfQI0*8XjAN4vkuEr9kAEhch<5Qxna<L?ijkT<|DL48zwda|Tf
z!OTrRZY)}x<6{u}bpRW3$+Iv?it?G$^ysVHEq-niN=#nfAfVpEgvMxIyb^ocFUcdW
zS84f@TvAL3mmYG*EVoa>2-v!a(lra(q7p%hsGiX=f%@m-Q&sGDL^y}AxOzka=~Qf1
zAOpzO6nVE2T(Wjcvj|r(HY6{ev8QMYQ3LCZsicU`*~dv@AxDNJI#(V-^13I97=XuT
zn!VxnZ1wwRUk5zgQe7G$DB<Fw5B|ROiAaKFeKkUkaFYwLY?nBkRq5p97+*U5u9<W&
z=rP!Qp&&zEtVA{j5S5xduxnB3eh^oY@SFCs(WQ_%2@=^dM#v$95-|L44seVCQZ)~X
zLSWkz8}rDDpX58`J_cvT%SPo^Qdu-`;NqW2IAUG&(6=$3#+5n~&FT?f+#}Xe6a?}J
z7P1o1t4%gw-R=g`px%}INSK;gV%5<dFOT$&8ms3u63yfm7$&~x2eWq2QyvTfbAMun
zGyuKpSrx=^(6hh4j-zI>EWMO%ZMok1`{&QjGL=nv2T`5qAd}%h*#lsg1Dfv5?VG&l
zuzpcR&mtXXL_}kmsaaTbLhXSwOAL{dCK}+BmI1md=ojY@5)hBo0K)>n2<RxI!1tjl
z?yj@2lF)5`IR<8nlT2Pq?)85UjH>k0{ul`cP(H!+WFzw<hg-ASp5R<|VhRuk(l2gq
ztek|6*3PPGo88El5I+u@xIc$Icfto-h=|wV`1;{GZU6cbol=;>)eMvYpK}-F$_sDC
z^3=9PV8wkIJyc6-V^`R}VprL3zYOIzWEhY;7Z~5oyS7PJr4~tM^>DW+cvz=8z|nIw
zRlRB|?!MydC1v^h6zNgN?r^#CQpC(@Wqk&aC*VFfcFC)fwUkdmqS3O(wjSFkVLNJ2
zqQNwaz7Tz`1*7!smh3_M9mc2l0RQkBjQkR4h=AcMpw5>k?e$lS7&P1t2Z!4_kuZo;
zY`)CeH4S~l4C_yuSAn%ecNy3PUnnxcF+PD(x2HFqX7GGbE4ft6NP)mxv-C}MqT7bS
z#Zj*i?h*6K+FoN}KNJaNh#s`ssgc(7y%p5Z^oI`(RvR&|f{X-u(44SzgH9v6kVe|{
z$=*}YV|QY{Be#=_L!t{VPSz3`0^Zasa+Et;Y|p^_>cK+{;nhg9L?O%{@=|f~Qu`d7
z>}=PY+jhsYTnvNC4(NBrSiXlMSsf>|$F_b{;ef!0GC@udt46I^Qhb_tju6cdwvwb?
zrSZ3`v@1m<EuNlY$kr#yuFNw-a1ZWA8KNzql)lBFscWNAm$EZrv#XxIn`D9`FQ2z#
zeDPY#5Uk*_6p}U?V@U9_-ir5fUoNEGegpy`-@UH+oB-yxt=n>iP`;ufrDZc<@ar$m
z8E0m3(S$W>YEoFHzqKVb9J*OrDZV%QK{2>H8d-RML+N;9)3Y!)?Cq?;Mh@`O9qJrG
zQoc(~2&}kjj}yTr;fpSYy+049D-#Fr4@T*KFD0Uf)#l=F8PN88ohPNGr<3Wj2z$RO
zkTUWGk>jxMA9m|foz+G<`v`s{&V@zB&G-AjyQ%It-9qc>_}DgXYy`=&0>RUr`#o3m
z`j^+9xl#;VSgoF)HZ7l3!tOqez&5*p*vzhn3g~X5ctGv>c<#IhMmY~l1|s{wc@-~~
zB+Kc9y=mtU!Goa~eFI{jBT<&}Ibwtf66SP2XL~}9Fz>9cN=P_L%deS?FHJ^x>0w{~
zE%hR*VpW5nY#+0=G4t=cejdLTHwPWRWGU${6{r8LkDH61UD1;}UvKZlusXL?mxHy&
zX@%_nFeE^yeaS-Do`XCFEat%z!gM8OEAW%Tji6SsIDuc|3Gu?$>6+->TJQ_7a+{nG
z$5j?2aE?~?{5Rk!QHfdUd~O>jihlkzOY#i4Hf}g#p~5QQl-jur7?vCTaxSpm`g#3*
zc62oAUph^&Q4;Au5t~7Z_~oI}{itgDeRATeAv_H3>>iRc*g4de<&d0<)zssjEk?1=
z<mj}CHU0QYO{<h^bP<Pj8)A%%rIon_tLxu%z~B;MJx4n+^s8|t)PV!#&<k01C3*NH
z(G3wDl0Od%;yJa4t9NRbe7n8g@4c4K^kCFtD+6~`sm+2+cQsdmK@idWP`muD73Olc
z(|*gCtk?q&Sj?G(y+JX&jm_30F#h%8bqt?eduhLa82ewsrXMI)t+6S0_))76H#~8W
zbML0n>*^X>?paKxuEHAtj$iO`@m|Djqt&2h3w4qM%7Y%q>?W&WO6VI{NV2jO!fO<F
z8a|+3C>_)gh&KJEw&xdK5t}-d4>2&2m2a^d90M>nbIs7cEuUN2pZGn{VHi9*yv$@-
zC5X-wn6sF-*TaUf_8i<TUo3XknT0-oCON=|gCp51d5q1=xf?HWUzlyL-iP<rqJHvj
z6JlZ|mk_fS*j652%-$QWK|`T|F6|$u2X<{_X>s2<ix)L2TJ~Lj&A<ZMm4a+y2lw!%
z{3<jC3u)))aNz3u9$Ai^h5Iw#?9irFCu+yfv=Z>gH7Ogqex56JIocnxipLf`YB;w}
zCF^(hd=G4&NUO2*C>lUD8eAhC!Q)fjqR6Io5q3+Mr;;v>ue!!Lr5cVx=Cq03`WtE{
zbk7b#K}q6)L&xIZGPgd&Cz48-OqzVnw!lzNlOu%~TA8t8z^?+DtE>Z08o9Uz;$p~=
zuN&GYG5ai@M|1a@f{kHeR=kky?w8`t?XH0R3(@wK_*YK)n{kyHMTYHGWyqxjs}vZD
zS7J2HMDNdf<D}(*Bg+13#I@AKo^k?B8S+Ahcaw?IAWR>@6aJ8%66KiLPeiinPnSaO
z_2Th-gZxx(5D-{rX$=gM4Bfq`s)3y@UVcw(Zkm8fcssWjx~JoLJQgMk$UbSTLT0gP
zA^p$|h&?9(cgo;#p++S)>Frg_@fKUa)<6vMF!?XXmk$XS!g*S^+O)j8O(HkPBSU24
z2O1IqbZ?A34RT??dcwcQ^?XJInYF~@(Y`}}T&HzTtij9s4b}Er-YIY8U#Ef@l+AMW
zxfBMFNJd><CAzp2-jTKZZ%tX=$|9TBGbVn*)Bij@3G-Y^Qv_z?hR{}CeQh;7yUF`*
zz6iMnk^8IS^ZBTp^WWUkAC*pf^4;=d%YT&Zspl@iPRvKGYqrRjE<_qNPM<tWu1;Pj
zpbHaTX3H&c_tI8`yFLe!>!_;U+2pt*t#dl@3!qtmZM;)Xc5*5oS7h1jL?Oyy{jI4a
zlz`s`RD|(${gV;|LBS|8HHyX;VCca<l=yk2H@eI^^^ls2|2l)=cZ&dzvl+st4s(S~
zPLw$3=lJyyir-xozM2NsGw&NW>*MRLASb!HV`JPPIr8SwM;eNQo54@F=u<$qJ@~lU
zu^M}ZGCX@K9UsH|V;aFIDkWOp#HL^GvZ9RFTMtFL5~S$t46BzSzP{&^+pKlo-g_66
zAY*&e<sQ|{Z-*Ec$V_K_;n5nFTJklLY;^xXruziR_cUH~N2zF{qp6|u!ZIE6NY|Iu
zAq5D-_<&jWf*txh*>x|02;PO2BP9s|eHIWj+nB?Jt=h@e{Ng-zpA>jfnlule^Jd*e
zJjSW6Y3q#WYRZhlpzWyU^op&%>8yCix$`4a>35Lw1R@i%Dv8~egv>$=DjbPo1muH}
zw7old@g=riVw+2qMLmMGCwm8FaMxSuQ)%EZIvil}W1rY6`>#jG0M**JNxUwv#oUaO
z^!4mZMt9)dU|n}_a<*bPY`0U-M{CnP=!MU|+N(!n|Ftsb&~$#Fu>(X#XmB?;W4Z^w
z$sxu0)(%g-Muq#tHbCV3q1*%b@Pp501{a42*e7_|@cMHu1pkgwJ1J~<oGmP>-q>3G
zSLaF(Q%iwgo$?Y<8of7Q!fgSlSK8xe6xJjNsV}eCGfZ90ryr+N>}sDow|G#z_3<rH
z3b(6iX6VxxLRxRgeh50+T7ZuBJ?OX_m%#faKFa<0E;36D%Jr$!+I;z?>Onc<zNcjc
zC3m`k*o)FDL`ANDk-gJ|J4Rd1G=g-ZE^AfY7VO0Mft&(%1<n!<|C8zdzk74B`~w!p
z#?t72bm#iNSNkW7-+xs5k08*0SW@U8F7RI^|G(_f|FQP}(P-lU!E<?m0{{#n007AU
zKdG(oGjaL9C7BMk|BgG0QMYu)l0^FC`J`sDsRnoB3~m;uk%+DXi&>i&1keg2!VyH-
z0!`X-X|Am34;FvlI5Bl~KC4sDEvl)ino6bDF9}o$&K;InknnSzK9-<c(BSw{CdSCb
zz!f)F6Eyyw)$aGSU(IKJYoNl-Nz(40pX|w){&oW&-2Mw&!)E3GZB7kg!<Jtjc~CEP
zsx8o@u^69xi-P7>Q&N-cPyH#HmQH(c@!Iy{l2r0?AKvSK0pIc2|5wzVqYIa34&VQf
zui~#bxR0`Id2praH<n_RFyi8Tn(mQ%)r<^<^w=RQc99rqtX}uF$XZcEmKE{YgT>}o
zT9=h4yZ!FnFtpKm5ogm*7wHy<zda5lxs><;Q!YP<cGRA3FSi97w0^NOo5z@;bZeVc
zV}H$It?HP08+=M^p(EU?^H`G`JYV4D)B()g%;-{ySkx)&)|Z@|GF8>lU?WY$VG{14
z{mTm$g{=cyDv{Nk>`8~T;0+UPnbcNoxdf5ZFs0w?xkd42)}awmp@i5{D%tiMjR#1r
zvni&fWISABh)h;-)MDz6)uIwsrHjzDTzcT&>dC#&X<PqQY%oAx(+@*&5IiMt2fdbx
z7UXuSKUU2RqcWlpvWzPLTYI!^-m<9_4Ef+}5Goc4?cGR;D0^8#xRM!Ij0YmlJ_}7M
zHAjG$mW^qJTuy(ULK(yJgx*<;8`*q)fc<RlRuzF)o+MS@Ucfk`ofm<M^*aZn1Z(;4
zcKz`!J{m;UQ$YG*D;n@cGhNQxVB`j65p6ofmNFAECsV5wZ8D23t4ve~k1XOf!$L_A
zF*uXO$ns5o4I4V=X-CgwNs-{aFr-FY%O+3#xCL~9es*G7E`l9WATJJ1`%+-{_7JwD
z0Gj{WF&Cq8I|^hVK*N|Q4rktb@nt(KSWX+iD=xb?k0*OUE<`mTMbts5r7q$$g-9Tm
zxOq`L<o2RVi4kVF3Jjrag?`Fua?Tz`q;)AOxgeSudi`2h{6KP?#5!Y2T=MG!{mwBy
zJW|Iry8^Wjkg8&t;a9K2G^+UAAqrtP7`uyu!Z^#K%-sLuHzdycN+QfdVN}T*)wH)y
zyrt33N?Vk95l-na2YlofqUIcO9He32=A%FkmJ2-o=}nRh3n$Zu8b@|lLP40iJVB4C
z9w=><j@n5FAeJwqTbB_uUqq-OCJ2O_Q3Z%3*Z+-h=-(r5CC^L|X+n8YtV5Np8E6G9
z_QH@(1Gy$m+J~>VCKwtH{_B3eDp=MJ?5R^tX<W%aG(x=)q}$xA9gZLPNRWV2k6#;#
z*%%}81PF=^(DQq<W>1HN`3m<);ZAQK@DC2IGT9N5x*r3OLaZ;Z-$16DZKXT@_RcpF
zNUKG-igqO#28*THO{a}lwU)8h`>Qc;At;uVLHW()$8U{DLkpF2DwN7uCWCnkBL=10
z#or;RK2uy^=t|wZZ(@|kx^yq_8?~j&orM?(CaW7WZt_jeg}F|`+fHQ1m(hBp<h6Ad
z3O9-Tl`E1Rb!aGN-Z>X;J2Afv`mJZ24RzjwY;SPf9cr1Q4UR{oNUkIS*JT_DSf+=S
zo#qc%WupZoKX!vYE*sXU)OvtDrV(KL{E^{KM^)=*`rd7}HuEPs=Tl|4IcJm`hAY&w
zQlJo|n|r^Mwo7#Bd|%y`JSb+XtZb|CyQs+ZZs0RxW;#llM}r=Ai{0iwL$)#FHJUzv
zHfHUnPu<F$S-W5ZD@PH2XcqUv=T_j&cC=$=3lqU_{YN2E%(AWDnur!{Eed?tAfFmg
zL*}GI7zsx0npLUCvdT2Op!#H+ysw)J%B@IZ$D8^-krg^e=VFrIZaHu4R{45O_Y<LW
z+4Ad&*x=R-KB~Is7%_6iSC*ISF~$&O&AUaW6LVTn$|WHRJZ3=}hBDr_(nv9(DX#@B
z=t{T0A#Sjph-jRnP%5%4o|V#6iG6$C=b0us<Ph!>Kxu}xXaU!iH0jfvPZrF&d$g*p
zI<+6a``xpBSJ<1&t|j|auM51HFONaqXV5w|X*{bRTF|+4u~{>@y}UO$@=J$lblyIo
zd+yn+i#AirhM^Aj*qMML#biCah%i;!;CxNshvP=X)ohfbMH}lfF<&>PaX-nBE%V$z
zZ31rv)v1y&T1cwg<L}hD!(!#{Ed9q7Vc135Mg9PgE?CE_<fv!5?4bSjU=LBRA`O)q
zIJ!%lEoLGDa}3_t5^YY`fv%qkV_JC7%aMN^wS4nOTooMU;8-=)^u{~eqE;jnWLcrS
zKo(N(q=o$CpWcsr?zeso!+X286Uol>ew)LD;bJd*Uv?81FP`!(57Ad43<r|}V7e%G
zcih6&=^D+R>D*SecbV1DeG+3wK<fx@aw*%vjP^ozSI-7~yaxN+FkE>K*&O)D_LAdO
zpwJ{?j4{$Kn&CjF-qNA*?1U=TB5G48mHNULxz!V?V)W=H>*S@;=CPkEUrma>`+Q3h
z`ud6$Lp>)Y{9=9`?Hy-NJTwfKZIK#`*3HVoQ9sRYiIuJ8cKK+Tw@|?*AN{VF+p1GG
z795s=2;~27Q|xTX+Ozjc004n^001KYFRlP||Nh+X;<k3j5^u<5?JYphhv9(GmUEhI
zCondIq?WRgq|V=*uJ39CjY+de>%WhaVR+xLSABE_i~BpB^LSgI?x&)zuDViL*}8U>
zsLO^d8P4BjyNsUOpjJs=(imr6z?tc_G55v=A&e$+DO|#(l)Dapu*L&vM~><JWpfSw
z)H3d8*-+?#CE~dr{IzqCCHtBMYlw3&A089PA|05?gG`eNLYYZ=YdcU%^IME4fDABE
zi7!MiUPgID*)6sWw5|YRRCXlq+a$UydjEsWx-N`FK!Y*!i*bF}_tFZbmp?7!wp$`&
z&|_l6aexClC_h|jo@CP>SrTgqal`uSg+GV=V36C7TI${2JK`k`Ji>sVHJA6j{_jz_
zLAQJ(2jIv0cK^6(YPSJCzEwvxTuirrR<7;?xOwkH4da|0f(Y=7KEr2#O1Pb7FMR^Z
zh$h5K4mst0Wp`9mBeXu-UYp_aQ<oKDz1l_V_VCg88fDeq0i3~y%Zyv>PFDAM4`!DB
z!;E*S_?+f_6teGA!JrSm+QY)f2!i1rV~b@(OKVaPICE^*Kz*Is<5dl<|DOtX*cRsU
zK__rv8(}Nq*2^-TlRuqMU;d=uJF4GjPrB!2$T}lP@kf$F6^Wn%8Vv?hL*xh<Dy;+`
z#igT|n;tKHCuasJ;pyRGIU|T`P!`3B23eFgm5v;NC06k&&{$G)E6;5T2q4u}DQljK
z+@X-4JG0)apB3&tP7`R+PX`Zx;gq@cqOLaujjbYU9=>-aqc^#^ou%S8_YMAzPF_<T
z=;&KJ7ha`p-4Z+$Z&e$~B7xX%lZuvXxsVo<VXWir8NX@yZX#FKPG+kDsnySCqB-P4
zIYfV_!a9ZGrif$07ffN6YE1y6vS$TU6!XM|tr?IE7@Wft+jDG6YT@}N4!ILKg-(FE
zYv6?t$!gk?j0lp5d0A_XDfk?=^Bs;?Rj=Q;SF*|&`Kedx6z9QdRZXA`eW^ifC?x7!
z)|oY~8Kj!4qldjU)||D`ROvTw>Pv*u^a6$@GN82bfD9uX2l~bV_;Be3L)z*CL_|g*
zQw!<>g`i;>bGGi;+G1|aF~V4t4gbxpT=aWBY?2Q`aaITK?%;TDc9$|H0Y~T}Z8tra
zR^vYJ=Jb>nmUYf<)~MDClZ4t<vNOumjb{}|eqY>OgNIcC;>l?AsA@H2Y&~UE;X;B3
z4F$F>m+#|%LxZ`5j@rXlXk-VP3OoY?Mk=h|>q}&TXV#GFmmtq#VU<J8HTaYCa3mZj
zTW1SJcJ>XjTF5d8`T!{f+CYZ9rxO4O4C;Ihnw3Fdd;lVYgirL0$Yy><BOk~iPs%5o
zAwskHm!>E!|4VUB(AD@GRx-`VMVu<6rBWyvhKd8YJqIJ&W8{dVGg^f;Z*Hzg+<=9-
zWSSz%{tH2Pu2;a9K><m6S1{6>2$ncm4fr@v(=QD~xF8zz7c^7dqmdV}7%>4G46z)7
zK^}Ozo28)+NppTVV&rm1o(J`x63bvExdq?^rNr!g;(JoF9zMqn8lWrUVPZy*g&UKa
zu{skXnJ8yP_Kfs4l6(*@^5|EKxPbDiWR51u$6XQc(^gyvf~1JuLe4Sik)kd33c-4W
zyf*Pn2bIYR<_?n`-%&6@E{xDXacYURWN=TG=t9M~0Dz#n8SwMNC6dr9CeV(8sC<ew
zx(A{Nxla3J8?+Q#dn7|zUuz0Ewb{6j3x&G4?{L8?pE^MBD5VppL9gX2zoP;}9uQL<
zUn|;qj|R(&*rCh8Iyr2No%bYCoFy5oO)+H^&<{R1vAn1|Z64%QM~D+@QhOZNolbmz
zubs`Y$KIh8Ss29QqKA2Id2&a%nT6mTXoWNbr!XFIbN*;W>#Y&kl##Mo0rViFVBCB#
zRRA$a`9^~=J{ZqK^G;+wVBf!k!641l*!Kie$ck>3NQ^C55rS<58b@*BG_eEi3u#jM
zala)SaX>-2hEyd5)?`L7Z&ERK%s#*v0B{xNuaZl~6<dGY(BZ%RT%G2*g%&O`Pn0Yl
zVc#sW18FIDkZxMcKQ|k0PDw@C;wEe6Lku4Ku;aaogF_~@SW7-bWclcxQlJbN%rOQn
zcC^|tCZL<O*M&W41BVVm{luU58{7{&gCqxi$5k-xtw1d#2kldezH3C#kJON_HinuF
z)+dapH67yeTNAAcCG=2Vh5&Txi^cqU4Ef#+qzigVhbgg#>Yx$IU@pb8BDsd6q2~&}
z7HX}>SQ@*Vo13TUhN@pc9A((DAV^{z7b7mvKux2oQCWC1G%wKk9mJ?~YkkDk%DZj)
zcP@G>BUZZK%s*xC^YiuM6HzSV5E>CM-kQkzeR^Wg<*_eZ+ynt@<a$H-n^Wm)YID1^
zX?9ll_4N<FbN6yDPCv=w-il04!Ta0KpTFjxX*<m@*MFOL5Q0dF*7GHe>CatYLgeEy
zOeF%wVHJ|>{OU)U08o>#z<ALouw)JC^`>K@MX6b3a0uyx7hE=V$xA9vOhM8{sRl%1
z_*NYdgbzF>rOz+~?@$&4OA;+uv+}OvA2PB|DMfC~2lFP6Sg6aiviJ!(cA3&67Sym!
zcJDPE_wsXelc7yPEBhwlz}3Y3;)=^)pkfAI`bN6H?o|(6<bsRDky2Ti1NL5?7Z%#w
zvaMY(*N+$X@~1ddkLS@L1_HN=T;9zqG~o79COFcr<SU5!+bifN-7QN)0euIh+!L_`
zw$|HT0o|oZ8s%}Q&>VCHYRiK{tiUn1WHZ1IUDWZ#kmal%bmsRSb<y>L?)@guvF1`%
zDSu?u?J{QG_e(2W=Fm`=Y0uP?-`iTW$O%`q$RjHf+$42Gu0al34N_MYN0wWuWy^vN
z7|q7pC8Y&wL6w9}ve4VCx-hw3k45O6n7EMwR&2n;h>~ucjKH3KAB`prk%t;LSt+gj
za5ka8M&7Al<-3w9uc)v&{*jr?ma));YGa$ZXNzlR<WYFJU3R5rxq17y6vtTG-}<qo
z2ndx5)3Y~*5dyPN+O-UqB1ioc?1G6YFaT@7r28Ieb%j-^NC?9lJ9#8O?>?>xC`)!$
z=3oU%oBstnK*Yb}29AS4(G!%}NNCmxN!No@qc?blg?Jl}YPvBYi12Mr@IW4Hp4_7U
zQgk{}%s;80D(9pe3xkaE&}tS;UC|cgX+_RGyYqXVOn5qRu*A;-erlw?U~qDwvc(K$
z&S;h5gwce@YNAulAn(qSR3_w>*n0il0MO-mm?>B*z!kBIps~?{2RQHEI}=krE@X${
zbKO?su}hFR&t`eHZk)L1p{9$w$}q`q9C|%-`tTAZ!uuf$UpM*n5;bgk0@{6@j*`)b
zX3Ap;YJ={|*|Rgv87=^`NVr<V$WFm8R%CSnxpYB|HHB#2s=xAVHSiGt&Zv!0lpsF>
zWpE2V<9u3k4^N3xdn-D64V)nlL%cjI9we1Pb@BWHieI1uTL*TP7#qmpvg9#HIBvI-
z#Bs@be{o_#_9;3QOcHnsD8$NXkdBQ3f!nVY)J|vJ67`Lerf~q@XVY#W0FjrD%m*8k
z`Z|1m72HCIn?dAv3o$TwyQ0Nj2cIxlhLD*Y22ASasYrIynHUD+0HCV{6$}V#ag0(-
zxJ$<GA#CP1q0m`j(lMxy!O_4ZnaqGaSrn<wn#^yte6rU&3wLX(qfHCGIXf!JSyG6d
zkanOL@N*m|f)6LA4PvN;qfB%z(Xmj(33VNTzu<_=U($z>!K|}_a?aGGRrkm>NaW8*
zwK2%zfz+WjHH=9ojcNAN%BF9^qY;o(^?@$7T>ys3Y1c#x+d~*xfOJ(Pd+McAQoz69
zUOKX)JzPcO5co+6PjEfAr8jBFR8Z@c(nRz*X|Ku-;-8A<^y)Ekv~c@6a#xmLq=n0C
zBqA-f5K!<X3o(t}dr>nmR}0|0+Q)@VX;sgz`gkR<rPe4a3>xb0P>*!ht{y-eq6CoE
z%=WR}FRg$>0aJ6h;d?bGQ!ooN5oCen8}RwcwLJBMsx|Of%PY)SexM5}M!R_8k-2d2
z!f?(Wcq*N&hM7DBVFpfvj>%#M!HD=Y3xgqif-%qLOjS`}A7;|!Y(&NYkjp;s1oIRr
zLkA#fI;Tx;#rL(1ceNr3Mv42H95QAva8^1{yPcX8Sodf`ET^PJMkuON19J!H98kwO
zB5pr9ZJm-E=MF%DD64%y(iPcnP&A|)3d#mx6>owc(Kq;Kv(6#d8}*LfixpcNj40+{
zgnXr0&ZdG#smzmNFpC#_z;gglmj8c)2#=EBQ35=+{l_+6Uy~}a$ZrgNpI1ux0O_O6
z?ryF48b=93y|NdF(_PU)U;ZWAgRqIvxAivbNLIe3*ug-`27v{!gsz38oUy611glCG
zg+AChed0o^Y1*n949nw4Oo$W*+na`B{EAt2H;7$VC!`EdsSTnCJn%SSx8v4?=(`BF
zFr+G-f`fq!C)Wg%5~7Jf*A2mSRawFdGhRjEH2_Uu<bZOJuItRqm5ux?ZR)YmRKb_2
zn?Zw_F5F%UzC2HA(xb1h=uk(bipdCtzG6a6p`{ip?O^O)IgO)D3@I;A;0)d67x*%c
z{u5kL60(UW(v0fjxnel3x8zi9nPk2O%dH?|pR&SyL1*1Gn_C0uk-w>HI04*gQrp{R
zYWBZa`t&;e9(?uYlc!I~@2Q-t#NRmKx8$T@4&)yE`;k&AA3oq@->=xc*b0XAoRK%>
zPhPvxGhP<3*XSWfs|m?Nyp}_CMx%)5Fb<T?-!>&1z2bfR{_BoKPZvWN?Eb_d<l-zq
zIsK{11!}$&@One``P)8(4*&t=5k@thHJ;Vmp!=3g#}ayh4L9zz9$rkN2$);00jj{K
zwdRw$r1;XQ90W!Ak(ftG4uUPCKs9?XIPV_*+CA<K1~Rfa?wul%a-K{j>l#6$>YXH7
z$_izI_>D5~&vL2fQ&rTkKKesQD$TW0B)X`k%}T3PQTat3Mp1#N08;?}q->|^M(#}A
z`cfmrRyeSbo}|?6Hai9}j2LG)Y@CO>0tur<lqXryn`ZJR71qRY;OS5ylB~y)o~NDy
z9ExR(S&mP!cnNETv6>ha<O77W0=}Ke4+5*nFz#hH0(Yq@mfYCf$QynTY9(zo62&&O
zh*zg4SZLdQ(`p4NubH`^Yk%%u{_L9y9vA96^YLDbfL^x{%o0|$12fu9uwuYfWEwSX
zU>VN9L-NA14M#7vpR!(Zj4HVN9dB@-EGkvDKq@R-Et+330O*3o8jpLtb^)&sw2{a_
z8@Mwo%hKW|I;FI^o~jnb@0B2k>E7!?cR>h=!Ky?X-4dy-pnVVA8SlkJ@X;Q_3?uWr
z;;~@6SS5}H@1_clv?Y}dnmRZvZ8vaKu{A)#0szv0qj;E4sRrS2zX-p>?p5LTt9`8g
z?ietazn`9+U!Gio<Ae3%<#Kjtt{RlS&T2Yl)8ty48O)&afUkxotGiqy{0{48*?aa)
zV4R|@qCua08=N)Hnh)ssUj@Y}p@neYmgz4WR0@pFE<`5K&cRb3k3nZdPC+H{Hl2gX
z_|*FHT2!@g(g*1vnpIWB1l<k4x9foeI1FZiOtSdDf)exPMjQ{tdR}1rz_Kx{=744h
zmDq=cg|PIcpnf1Qp7P6;I|D%btyW>RU*dG~h1HZ5!!7g`ea<;}1yii+wMtgU_gFWp
zEzW{Di=iOF>DfIMx3OOcCC3Sj7^PCM{3-gb{yffo_P#JoL}D5U8nyu4#Is3?b-)Pt
z6+Ut~rpGO-wa#W4!4os%4NsCe>xH0M<H%=AXWH^{dZ1<}xy4OtE&@>;Hi8x~TWw(9
zf!-qY)CyayQ~!?M8}%3VM)m40>Ui?%9`WH24dr*}!{1;K6kttMN~s!kB|N1IXjFnJ
zC27@W9^IcU4Zk*^8>(P@(7iaOy@RrL4@?h}HFywaC6APry)5O0rHDe<Lq`uyxk#n~
zRcEJ<qITJREmejC%thmzq+JDE1O`n!C|4wjbVHFKK?bXU+ktt8^$VR{_0O-Ug#P-8
zRa=FnfFVwyH0|hX6vn2leU+|&bx&h@f5mOJ*^@DcJtj}E6};?Jm%Qs#y}f%?G?G_c
zjw6N7w1)AB-eQq6Vd4qtE|H53>;=e=Z(@UTWj;QS@?9OfYT(F1If1XMm5Mzzw!hyy
zd)r`+X7c;KA<_{X7Ut?iIAZ5~&Zbm~6GubQG>82SxQ-2*pk~L--=Gtqe*s72>pBdv
z9n&?^*17`IMW0qb!2@}LPx<gkRy2Na$VJowTr*C!M3^Im(dI~bE5@eyf~vNb_K1dZ
zG>&?ghZiU3ee1IXDLLdf3D(tP6a<lsNQmS3Ic4C;p#))_V-Sw8`RD%IH{gTciWHx3
zct`*`TamL%2?e68CSzUu0@0W20ds~judM4<JW#2CMwY>$p~r(tofID+1R337(W6B2
z>hU4R1i}qasNRRMeD4VKGl(>>M+-4U0(ubxA7LfZpnCW=#Jmy-5}Alj@d2ZUk0OU~
z%F+yvg<S#B;_|S^c}7J!uw<g)!`yQb&!873d(#*c#k}~?0++*lqwLd1*iJVKtJf(W
z<>G-eASJSF4WigEmCsYK4=<kSP&a6Avs~Ws*(n|>&{U`Owca*ymc|U$?xVI*Phe81
zC~nY1Az)8HIGrab25bzWwG68@n()z7QuiFZY7QWU=lu*U^HX^zKuw5*%Psj3<w5ws
z$uytMu#^r9fRX6>35rL=KHSF*N#P{Nw$t*wEu{c5a7M%ueuSVPDduQE=LzOraT`<8
zcgQ6m2y6{qa#E})EcpHi6=(D@CxcGHm3Ui=>NJkB2|{~Ea0fFUj0V*BehKGcP8XlR
z?@*vAPQa{Z-d1&yk|#E<Rd$-s#}&}*d>ZFbR$sCJuZ;tGaYPTHq~PFp$dQk8Z|g>|
zNQe<8W5PN3K_k3c0a^fYx3;!OhtaRMJh@|)--18m84zUtsiGhBdU(!-eIdo%<BAHv
z3NoHdoz#<zm<F=UI==JJ2a#26VQ?qk0ULt9O`6gL`|DJGEpCz=RnbOz{_wxgn|sgy
zBJIAKcqp-wGU#|vP-|-L$P_0$N>LJ1_1H{Gx}zP`snP;38KI6Q3Py@r4HN)Ub8Yaq
zWiqCl;|(|3D;^8Kj(0FXAbI<sGj>C8xUwW4T8E{znkAypxuQ@wFyhbXh4e2xB1RdG
z0Tn@Hy0EDbe$Ux2xhbMt`{$P&xYEsU^E6|Z0w@oPK4E9WEXMy&fjiW21f~Li)aAYE
z4!yU2!D@8IX~!UbK3=AgrynHp#GBy2bZK2cJvw5rUCwdF5ql6rgYDM4Qv>DE#eOM<
z8h}F^a2zeERDWHwv2-J_HoCZ`Ez*?2-HV)ywXQ0(Q^1zqmQ0V7Sgg$9ml=%75v{7v
zCjt1K@oX~pJhH4aX}zZWu3+`RTIHdzx&X^U8Yt*<@K~mCnkg5@lXcxUbHD_xh<-T<
z9vT`8a*xUFpagD^<)|jm;=YD9b!HkK!6pC0tz6OCN@8)izq9jO_hM(KgXdLQ^pUaV
zp1I3D+^@p84w*L*Nu2RAJNQ#N2&gk)X?*o%Z6-c3k!YYj1*%d^wq_r8N?`#4$~{n}
zvxeM&&?G_s3z`)WRCo}t;5~U9tI6aha(qtiDeuMbAq1V4gAHyfcaG0MJ#m><W!VEh
zV2vS2pQc#%lVE;QdNvA<o(?4QhDk63YLA+D`;R)Ba0c}?ika2^NFkns%aY&{C}-%t
zpqYrr4G*Vb+yc9}6qs#qfqxdW2ab9UK!GYxz+Z}F<-K10rSx*tyGrjaiXX@cBuYI@
z=J*1XeDWZB>3OSZHS2bwS<wNobQn(d5mHAvQshj^6drjq%I>%x2+GUh{-VQFZPbmp
z4I&C2QDq<QFHH|vl%}U>g*yZm{eN*^+ug=-r2AR@D`pwxQgT2@l%4fiibhOPl1)c%
z5$QO-VU9fj2E>FQ2A&y+LUeS0`>lGas$T{}N_(^CT%SD~3c$?tbXQl`%TrHTP=xh<
zQLie#=TwYP;k+p2Qra5wAqtzyrQ;#d7&|ksyH2ELqlO?)gcerwtza$lFPzuux`mE3
zmX2TW?r9mkVYZq~mPc|8gO4BvrB?~w1!BjS%|{p%+pC}|p_y<-KQVEoB#uY4lvELb
z`3|#;>4i_wi658^!nkfaiwlOCwB<rg+;+m!=;C4vUK;ZUlE+JAb^&=9#5S)Bv5GwS
zx~My+rG`JuXtzFfqUSh|K@<zE)}|~LQ+>3-@o_CjA7FMIWgJpz791lxK0F_>{E^+h
zY{d?i_dt$BcS!iT-Hl|Wd&T{%K<NWp5{=hMjI8ilXxsjCm6fge^MMYW^AGrSv%cb=
z?qePv@nb*i|KZWcEIX&8f>Z@r!#DiyOQi2rj74v8{?CeIFy29r@W3n9bYbqaDo;EP
zzISeDAcl(2z^~_;*fIS^&!#thV$)SL4iiSIi*<(<qWCF>n#h}mciFsV^+jV8*wQrY
zLLR=0&b-9%{gCaPDv*gEBq6?~XlYL94$qf3Sb3VlDr(sV(phpfmky^RAxXlH^&=WM
zIWSmcmLmgRO)IYE=lOz-86M24S5GpI7zJhJ_<S;VQRdNf(Kt*T>7@EHp34ZA!^gzQ
zA>DRFkEfk+t-iO0l=$o?wYMbq?_Ci^pTZ%0d>Eo#Bhm%%6SM3dkNCym&QWyvQ-Ar+
zXh3RWQC$!3JNJxtWmi{Nh3J@<xGC7DkoW>75(O*R=BiU%vfC8_yQV!uQ?a#Q5HleA
zFx<u!?~BR0g*G6m9qYYXIdBAC0ky@U_efdD-AdR*a;H9@3wt~q9@~C7s{m-Dt_SaD
z!^jyRd^hMg9%@xji&~T&#Il&pP~?hG0-e;0vZx~+iML&G3ae>lSU~25CtzRPeb3kk
z7z@qgY<Kq~58?$qD*K+i$?SNZvo*iqAO+hf7Zp2)<f^|XJ65iO9d)I4<%Y(=0T|kF
zcR9++w)6XJFWdk6amJnvdF8d>?dgAa`4cIm!%wY_j!ksCdUsiI4O~)n$KM>rzqOmr
zitD1bpGVFN3hU^TJ7=nvKj0=Da^OopN<@~?;j99$RD$p>vMRAP`hEl|358O_gOTd3
z?FkqA^nL4B#TR|?AzJCdH!o?n`3?h%lxZYOAIL);A%;W$;PEB{XkfSnX-Y=H_Zz3?
zjq@YJOR5gymsETiZool=?1mu1XGzFck8YKZuoRE}m|^*DUjq59!41@a7o<Qb5kE73
zpm-T4JM!io)=&ZitOo7K<*@6ex6^2kZsbUaB5D>-U}bn!k)lJW3~yAn2c)_+=w&gI
zi%PMwd`R$Fn%8x{;S=;*MyNNVf!k6Lvg+O{O>_tSR0F&?4c7|}X-pje3eeJd#;?t4
zAz7jj2Ql!5N*b@niJbJbP<Rm>2qkOa{r`IS^#O05FS3(&6?@VA=MkAI^4A-(u_`)d
z<X^)ft<3ACoJit#lvpJlSpPx%Z;kAOP*W*BBjCmnN-%syncb7gPT{zjT{!$E`|Y<6
z{04W+^X13*9t=W?^@dy#enBckLQL019Fjqp8hbwWDS+5x7ewwd3gJ>`mQ!#{vMdho
z!`Yjxd0+7!l>KS*Mu%tJ(t$>^e<Jn?BJ=7~4g9W%9QU3v@dg<>U;7FH2HX^sLp&CL
zk)%NAOFAcwR!CHZte%TD%+aE$z$L{uWY@>`BIah>X%M@IeDH-E7qs|gMWT!xAfK7$
z!A8oBM2pR4ok8fy0oys#vf;r_ANx#Va$&Di5Nmar4=jR!oPF$*m4h-M##@stvUmTp
zvi%tn%;f+izdI(qJ2y)&%c`Gze*1D+wk6^wy2eF{@K<S+2oQ~($Ktvx#^yF=b5*l4
zgofI34-g1&I(NGg3y3xbN7|;bU?e`hWmrg2zN;=x0!)%kNJ6&aJ4sz-Z;PwECf(%N
zkKXoJf*-A-b9@MZ+=!21bzs!CDq4*|>3C_Ry^**PzdRd`eDrDIM81?0g65C$ZSERU
zOCI1wCrD;{q^+SmC$#i!60#HiGNh`^IU<XI-6L={4sID1HmnUSJ;Yf|dvKudH~&KT
z`5=2$3C?e(klblW&RENbflc`FA-OIix=$SCX70pJ3ie)hGm{@etk`Vw;+EIrm1)E|
z>XM_;{K=E;XU?ynu3B@;l+bL`;Uwaya~*50_!%-#vavYj8$8!ecto6Co@s~N2`?8e
z=a=>u)3T8W1J$5RY!GI-0~s!2T_OO>MO17Na=ikBE$ufd1H5pzPI4ar+X{L8Y;(k}
z6YcSd$bd88>(nOnw;&bE;u5P*cx%Up{P76G&zUPwxP4e@!o6FSE67o<Cyhh!8v@PY
zvW6CJ*%TJX!@Y(+WQD2ZTjg}D@cn3YfGHyt<9YCaq!EAHFCF|#C;lb0+oz|`gVk<J
zg2X_*9XqiRW1Y0@k=m^O$Bxc<`Wkoxfb@D_z=#clcTAQ7fGU$hi?d))LO$?XjV=>y
z_6a>UC?C3AV?m3?mFb#)dNK@1__=fO_b?mGHXCMS=TrBH|J#Y??`CvZ=f8j4_QM+%
zAw~*)&N3{WSCv|bbPr0B+#S~8IMZz#9UnfYpM8&?jac%J4^Lhn9DFe{`eVQ_NH8xJ
z)mZ;bR~g^j=aW`*zC5y?IJySm@+gSuM-dHmy`sB1vh4P%*&csxZf0)Kt8M9E&|*IA
z*Lirx>DkkhR|lV?l01;~b7krL3*1~5&tj9+m4@PNCG%D}u4x6^T_*M9f{#|U1V5Pc
zNYDt-eIPuGB8IqW*(O0|wRX9}P4&<<xw=hwF0u-CTa_nLov^E;IRC6#EUIhZ-03KQ
z+f3KrkqhY`q~`COVphpd=6^K$k3IZu&wjXvU+&pY_wd_2{jqz)9xUs)%|e_|*rPZP
zTmDMzWww?WdY^qof1vO>iR=knhB?HcXY(mXaBqnHoy;_Wh!4aP1c@7Ywr!&(bsXQj
zQG;>1E7f9%rMM7jjpDA5R_1i15q9!CYN~E!2|_eQLnNPf;{wOEEBXSL8m#?{&}W!u
z<&qqkDAxhPLo&IRcVM>)#VuC=0&R3T;4xTAkZc&2SjrM23}74H+dP#|nQ;hu0b3Ox
zBV$;>UF2UgnRLBwXbI|ezS-5O@*|K<z_w=2QY?ll>5v$h^~Qq{eIyK4!#(j2a+<Sp
zYMEd1@5%|&+B%L*k=zJW1@G6AL5x9p!vc4@&+e_{ZHwi*l1ylg3D2u*E*lwW)q}hq
zXo$lb1t6AVh)It>paYu}HLPTqyDS;u9-IYdP}71@Ud}IM_RX`yi*}UlkL<-K2uoFJ
zo|-F<DddOuWk9P;{Z*ax$-J0cN<`4qsNg(#l=Hj^Hl~_`13r6%P_glICWacK$^0&1
zy<IvrC#}I6oBz&0Fo-4|g`6;!#alPFh@vcQrgjx4s;41;<?JhHgI%_U1c$V&G^|ZK
zNVXb-UTFi5B#c<qMS%8{OG)3eBGLp2zXYez5Hnm}B8z>>Wk%T>62ax9$w_d&BZsk`
zW`C`VqPZ^rc`4%mv>s;1^O}6CYBkTE<i)&33T9p`RwkRAn<VF9T^G>~S1|2JZR|)h
zN~S2sI<=M*QUJ+F<VGv^5IJ+Kqw8`yEtV!*d3~YfDG)Hb)+?g$bQ_rCcM)*$@u5IV
zM+w+-w56g1GXDQ*{QB@{RGi(4yiKhSO+3!PCPixEMa52y#fH;jAa4+PNNc0U%z&BQ
z8}U4y-i_Zw&Nu~~&(@29cS~s#6_165@VW%VO+KIH3*`8x?sg~CPR}&gZS>SSgejk+
z$s?twhdTdr$q~zmJ*_0VvPOo{PzZ>dXt>>?9(*iKa*4;;8n}B+QOK;{&-?_W!<)&%
z3It8YX9FJMKnuafrC)0wK@3l)yIe7Ftj{8FVi9P(0+Fb`v}9x}u;?5oXRy2B3^p0^
z@0`exFCqZK`jqWWZo<-Rr2*dBa>PgiHJ)Qx8M@ad9YJh-nBp_y6l!vw9O{rpg8Im$
zf+eZOyeu|*Vr{K*vYVn4F9a*OIFt_sd81&QHsyOwp~7-R4;aKVA4|qFihx=Gq(mJN
zF5%Dy=^erJkFtBS5Z1bH5mP7bABknaztH4cA;250hPSHtJ^NzMzS%QYqtCW+#fGG3
z?$P2GHQYI^;G;KU1P=foz72pUEWy!1gFCt!mltdPYOS?7R<qABr>0uGlMQC%I6ICr
z{jk*pc#BxD@uaj2P8VHVsF|=TTaCZkxEN&8dJ9^26B562M|7qTh1?uu(X0=G+8#Lj
zlZ$@v4VT~G4+bgX52=$G4b*>$O#43Hz@EYpWWUZ9ACheVTLYjLo28^N!8T+k_yj(w
ztxIP0FC`8Mn=ZR8Yj7twj?NzDv5{m(H?C?{&o){nN#siWUn9KlB`5s;<Ip>tn!E7I
z0`|&QrJY(aZ+GvHGA!Rx4@u4vmrJ*$>}^-vo{V^VaPWTQ{Ztn@zkW4DC<gi{LpI!e
zTNlO^q27|27L(XU=u<`h%$7q(*D-;O>TKEIf`^S0$|pGM5O0;(pCD$i?7lvcr;$^t
z_MN>NNz^L8Kn7cD=+q)X0Yxalc;-u>x-bkRppdojov7HhYkb!bmKc@EVEv+qgvX%O
zAbz0EG8f*T!)a;YNnsi<)zlVGN5Pp<3Fgol`iE>>F=TyGkgf1vPm2lZt9G+HyrCY$
zOg)=?mh_)_SZ}KhDG$!kFX?n*==`%K0C>}EB^do#39ME~R&^3pZLxHB`jS;?wyFh@
zTYtieKmA2W6a=c_Gg$W3Fgsu4Z)CF=xxsWo?#?Os<ZKPy>4h3N_fw(ya!s~N4n}MV
zO|+`yNHd6#^}=tQPswYVpC*<(OI;)03I|+wAin`$d&wzrE(c}o9{=x3)8X_t7{dDM
ze?!?8d()(5Hz42hu%*1IG{`4b7O6Fm^Obu1N|wmY^J#AeP3LeVNTzBPAhITuDo(44
z_KT+EI{SK%g}}|V>1Yy^@fcqDcw+%>)*@DpVraCa`Y49?iA?h$kvEp>qPKu?(t>fK
zS&wVF4I^jps%t^jRZU7K5pD#W0sEoJzGlmq!wyld(~^Zri5u%6nA?JL=S8?L_ys!I
z*HZ3M*;05kuWC&{&wdG_{AZF#qUo9zlZ7-iDqHi1uQq+=zkmYikqG$!=Z1kf_hjA1
zS@au}KR_eE`_R18ur>%rviz_@b7kM-3=oJx7P|JHfWwcLH~F`JIXL*Y<Ug+a{0sWw
z#Ubr<aFVnXu}e>9ntvS#FTuch;2m$Nx)9u*?rp~RB=Qf!yGBC-UKmKLBf5o9!?w7^
zM~WVc<XG#JO`};FnE#730Q)P+J9$q>8ac6S`?PWsIp8qULKK#V=5<?VqjjlPy!|zF
zYC1O-m7a5u1A@Fnn>BL~;LNSCt*-`IWW96197ExEe^*WmaqEJc1<x~>Q8UDI<cga^
zzHnYF<F{&DqQ&&=*SgKbkn8u=tn8-4Sg^yRVk(6l@bn2$pUUni`}^)iwP3#CU9v})
zmwb{f8<h56ZR&cy`;X8ct^Yqw-hyEcv}^VdRO>=?QNPnwi{1esch!$@WHCE$n~{Y3
zw;B1cwVliI8l7vh`26Bpa{&ol7b)~CtcBVm0nr>RqgK&9{19hXO8!X;g9ko;t6dm?
z)*~HW!VJ+^I<4Lkpd}ZiL1RecXe2`%-UvP>Cpfoq!8|9}THgLV<)g;}kk;39a!D#{
z&;WXi<3m}hkpY4@Z~z<Ty4ZbZ19Mx_DuCcY?@WdJ$1_F)ln+OKf6Ue-42IpN#bV2X
z4}+?{)IttJd2zIc9ZMw6y)Wr(Vw%fxWp9QqB5EdbcvP{6=IE>L!fq>B&(nuNm_%;y
zIsTNfc09i?ET-ds#aCDWLmixyO~jib{4{n&zr`P1-z9$(?PNH>JA39(dGsw$%p-})
zRi^am`Xn6lg@&5QB+%DOOG$>&Q=Uf{1n?7SmW88IT~Qj|FsR;CmLJ!*>A0Mp8@iP~
zeLoHI=-qy=cXQEO;ujF(tCD1tj(a-clUs6}1^ZJ`CjmcTX^9ZpA^l3r2<17esvXCH
z<M7$JekesD;_Q)Xo{-NHEHVw%ll28ZURgCJk@>16;8lIaty}U&st$uR(m_;O1&^-Y
zg6ogv#~N177bX2;I=r9C&5|RyZ8=%XevK--(oM@4+BRqxMWbMfqy(;42oOp|neVNq
z5V!Xj)98K)45jCHr(@xpk>kPp!fNVmn>|`F7+XA@`;LOu!<XB)#*6CVOZqJG@7@*u
zG~(K&L29PPkDW_>)9<^FG&M}#YSl>C#{o$W;s9V@x#~xQDg8rw9Kry$G<h3>{I3B0
zT*xL;1HWukPtqUb4Kk3ETq{w{>h_d!Op+)e;~R<S?6;;0ms!V&3A2*8DiI(GvTSx1
zGh{IA!N<K=KrzNbtI*mKnBDI!QK|PlIpi~M)ML=Q5Y6eP3Kx|jwr+kkI1hfb{zVzt
zi5W#uan`C`jkJvhr&*b-$5MjRI{v1UsPV2@*!1>LaXdHz%Lo(O)QuLE=E4CIRH@Gn
zz;+R%@n)?W^8s~HP_d%){=6BW9*^nGCt)n4{e!5Iw4ISd*pISXvSY6Z@_d^(2hAE$
ze8{YXlwhiY7#eytX79FPDFD|-+qjrtv1{?7IH71$4n~PBk7WTgRN6S{wa%-AB2n5#
z+i(ZEQ*tr44WO4LkHS}0X~HhOxzve4fTTbd(dkcU!oQ#Y-mV{H=fCG?{eoxxgH@nS
z8H_$ZZ*1T2>2_UpT~IG<Y+iio$se+JsSA*hgx&I=UikO@!K1;K|KO``^8#)In)yJF
zrFY(qWFI9~KSJ-{+E@4R*!!d5ot{kW$t=#-Y?F1(U|EWg8G9~3OHyt_*E$I<h3XP$
zdj&U#M_IZT8_N=Qk=Jk&?#yQy3xAcF82&D$#ps>bKH;JE6D{k{w!gU*KLKE^MC#Zm
zhCQijrsq!GMBGgUtu7)d+2T0gcIy;J-Wv8!3?89I$|sZc)mkDGB=Iv8JsJMT4=f7*
zl)fmES15P0MXuN+D?wl_QF?t8X=r;r<5}3mz!%!e>aU?}C706e;z|^jz5@Gg70u%3
zOkyxGwe|wf)aaoET-_%MBIT5guH(ZNjY1{A$`5i$qGqdP5;(t$QhJ2<AnRKcuio+!
zO1o^eoQSwbpM2s~lJb`%#n4yj*{S|x!*&{;IE)NLwvv2pZqF+8NiHBtB^_{i((?t6
z3ZfC$0B|1m(|pt?3&}oC%XcMMP{|g1n33CXCo1fs2YvbV?yht9V!AtHud)hSayps@
z>6YAbJ|yQ0KAUK#A+g|$YjuD4<vttwXI>Q2oL$eVmdz(6PJ`fBoUqmv?b5my-`fSM
zzBp%i@5?`Yb^nV$f+AD@{OBAq$+C4750L)$Gp1Kd80DXNL_~;5-RC(~u?PYYqHgI-
zBv{y6;NxM+@UjV%XDN1JWOnf$GKumko-@KB2@4BQ{3Z$V8AeF>*GJKHXBL`>JP%HA
zbCqWcuzEYM3$FY`)!RW&R+_c!Na8Co9{ENc!SBfDB%MG09++>v3ADCeE$d)%%E^Rp
zNB4d0CE{0{wjM@TvM@tyAu(7=4BDq^+nS!tJ5KBT#X4hj&SbHk3N4)F&=Xk&67gPX
z&>B|Rw4d+mL5W*wkZr=`MiG--0*Q_9IY30Y_jf{1he_H-yM}2K&U>A=XbfAU2V$fH
z0*F~EFY;yZ{?71*9(N3+Jw1#(g^|jE2m2%d2f%x}MiagZn+CwmWS`&%k+~CRz>>%+
zZ2c|>&WrZ8p+eR&c+92x)uR&5qW#mSwJw%btze4o`>n$%E?}NKo2;9*y6U@;d1yVi
z(%6RsY;qedc`c#TP@!hU5?jxhXwJW>BJVYRP@Z^ljxBp(UR-vz79X*UWfdDD9+TQn
zK7r1lysP!HoFJ{nDSur9X@!xV`tT97@ec}v-5n+tzuNd#5O-kQqZ>qh(P%>m{fMvp
zg=x*Dw@LGX{@+LWmaClkfA2=W**OI&IesrmU3WStAdmeC;$A;O>o1h@_nym3>6e~m
zOg>ct1n`KR&>>Tzs*i&w2buh0M+QNgf^C8uy@^iTRJ@CU2QTo1yME~(AP=UmpztC|
z$G1I_9fDXLx1aQ_Xl9hqg&W2ko+?SsBnij7zfc25#t5=ZJQFj#;EQyQJqAIRv-GK8
zH!WuEw)jfrKg&0RCyW=6oCF3&P9{~&(I|#>c<lr%me)(j5k@1(?H4|$+h0Y&NnIB+
zGixj}Dm!BG=20A_qLni~U=)RI74t^mnxaOGcItU1<L-b4*2NPLdPwpcqD)W_6<sA6
zcZF0Kg|zC{LMTTYTbE_e7>cVDjFm>rOpj|SRsnCFn3$PP&cCLBqe730F5fkXq{5tu
z51Nz7ET&_*OhSPfa?9&{VGbxAvx8_s^)-{K{y;tLmrf6fq5Dygygp#qbqIVUGg;Oi
ztQ`znzpY~=U35B!STH+eaObB(0Uj*<OI%eN9Eu-lcMs%9op}TXJ<YM3;%2iW$Y_ZF
zCX@k^4>zja81>ki85sgbKrvjc$X&Ok^>N~XBel0j_uQ+Ni%s<04!pwRky_k^H*c#8
zxXzzD49Lnq73AEBEIPE)M810!`G>Y=lTMsoaVTUn)D6WzLQgaj(St0iHX&*DtRy@t
z7pO@<N6BxLUr6Qp=9<%3KGM(#0}B}qsDa^vdlbNQJ<o6>9|Os?5+JgigGb@6@=Ha<
z=rWDV3(r2_BPzb+A76x=hM07E4(a54(wvKRXjHKRJ12}$`-T|MkiE&kgAtWd+Uo`G
zzApashFE1xQ-6B)l>X@%$7hB(mlyLFkGysfgHU244Fa?x@;+GQq9M!OeYOt>0I*r5
z%pH=x=BZ}e(EYY9Czr67^Q9!JdDh^i`Fe*gHr7LmL)6AR)EbtmKjc6O4OPnJ4As&Z
zr9UsaR8Pbt4EDCZ&c~`$1@9yDe3D`H#$aDHjs=}1@X01ys9946c0RS&WLJ}7n*jBy
z2ZMK!I9^`>ws&JK;C2a4=1Xwg=a%3k)tEQeSl(bAbliN-e7Kt{EI+Rh(%o2LnSEY`
zrMtbtvj3JctL`%@EcM8ZBP40b>Q;4Lq8~Py<vtvTG$Zyq+_7i_Tb}SmOw&VC?JqtY
zoE841wM+Ziam9?WB^Ktn@sD(?QnW$e$hZfaa$<~1MhToJs=t>l#84?q#M(8O6Kz2j
zBc5DOGemos+kJIXR{BKe^DhCg?K!$CMM!9IrZMvm)NT}GE+H@KyeS*X#fsIKOS$wk
zcb66+4U|#R(s^19Vb?G)FSzKjWvwMGQt#*$cGJ6zWO#Dka*(Mu7A~hI>m*g{tvaAa
zZvSskk{B6_okkExySZ~m%j9VJ%fW$idhb4E0{<y9+wrGHb)D^hwLkpNef^Zp3jXbU
z!zC$WvWDOqTQiJXJ4R-Qhr7>SzuZmQcl?Eso=V%VO#O^D&#G&Xww<2`0{vYk(BF*+
z^uY_r{XOWoJkjHp1o={|n-6z+upi0WR;u?qcfPB68UxWgFaJq>xo(?F`WbqEysAiZ
z7jQGK3k$AwwraWDL&(a^VO2Tfjbi6>_bUQX)(UJl<RFg^pB*mR5&qwZ&!0Svf_jmL
zi9aovxfHs>szi-03HB$R!lK4n;yPzq0hoSmIWEaP*octvnT=A8tLmL{RHFDdulHta
z94{Ixcd*ktR+;9f^>j!o{<JGg42U~vnHywUG?Tg<d(W$jH0zep*^NjEv~swwS61uY
zJ28_5`cRQQUCC2zeBf+F5EYg)8y{xLhX_NG*urHNW!*ALrA)``ek+qOMZjkN2~DuN
zEmx#c*twgr{A~ozcTouzNz0LhG!r`4+GNKu@Gzx~M@K2Wc{&ZndscZq#ziJ1d?TF`
zpQB~%8B<;Kz8wD;)79h~+RS2xcRKI*y(?B`cgt#A3tQ-{>KBti!fh?j`mAn1PSY)I
zwc;Jy>8}!tr-!YtL2z<|oC;zjna@6<oJo<e+5{p;-LD6cle38wVbT?7t0|BKMd=@-
zgo^m4<3<cE&zl56jYIv2@Jr;Q@4)LjkY%fGA3rdShf-H>$!#B$@N<zcQ~EvwcEn>i
z>G2+a@1sVWRITv$To{gIG<dll#Pi{4eNEZ8li*^BuPW`Zd}T8C)qs}F8wnZZQw=B9
z`Z#c*srjMHe*%q<?nh;SMwy-MoObikGPS(9)btq&y?*`mr};*sEHMGL<!DR={b_es
zOh#K3ro7jM1{)(?)Le5oTXTZ+e?o}Q_86QFtMUdoz&{~|PQ=Xg%t>Q{ik-eff$E3f
z-hY_ntrxD3Oz+JvoP-DHUVp91#k0elmhD|J>L!@&C1lgn{i0oA*#-?(v0}v8>C#9l
zvmqHVnUtrmuT~900VO&Q3CK#$Gs!D52X3bnpI@3Y53K;Lw9w3Wk75fj-LxON232U4
z?Dy{dkLpI{UXjzOIj$Ih8u&5606PpcuE{pE0^}r=;<wS5?HzQ<@!fg0$q|q~lDixq
z{>AsO=&3Rp$kfx@eZjRZDjwft=l|>Gm-WSEP<5963E#)brX@i35(ng=1deZLrsG3>
zB#-gAE)?qm0RLkEyv~Jb5%@pJjiYtadnSv56lhb_QP9W>hG5A>sPwEv-CEckZ0(1}
zc^0-aKUp-*z;BuGT3V^=Zkx_ghzrk^{M}9;nPKfn7#DB4m;gB4Uiy|f2c6;jzi*Yf
zh2tA!>2v;zft%q187j~lF&Sp*TX6h|+we4P=e(AKubaaW9+-o^{nC5d@#0v-WLkye
zA-ucrC6_a=<9JtHaoC@yZL^A+QoJmi3Ac7y7R>n*&g!d8D4~nAGn>V=fKV9_vaZRd
z0hx>>a@a(zipD3me0QFxKkAv{>~<ep2d3?VeY@Gx<0zj`=9b=L<R5oYL`>dMe?3s%
zpit{i?ulpCh>LijU(y#2;gailwa}VODgR04#iQr>%-O9&t)YPAbHvU{#)+#{sVIA2
z0P17>xZ29rx|PiuP+KY8D@p=z3+s536hU($qUgM2z}@9c!Nzx!;F)l=`txkynMw*@
z3Mua_)d;z>H%zC>=c4kS9X5|D1fh@ZCUo;R>+}arssNLEzmSb~2~zy#oKs@>nO7bQ
zW0<1<jxeTeGEpvh$GNJOe5&b337RTDd}*EAV~;h~iMCZfa{xCK*F`%mbf<ijS!sIq
z5)~Uty_+Uxk_HAhr03#(6WzHEroXTTB{i`=M5^L4OGySAm6vH1RsLMm#Rb!Uu%3b2
zs#Uc3rB>-X(lWKw8h27{FnT*3DJ4Z-7sW~pAfNLoBw&@6W79aVX*wfvebSn*IK)iX
za4D&>fb2HbIb>NO9(YeTyJb8%b97(wIb=aiT8C^7JJFrvn)zB#v48gjs+@Mu!2zuu
zc@y|wtl`1Ivn96DH`zn!)bP9PsWO8#w$4fpX4}%<2@r#-mS;R*e8jxU@P9jxGrrL&
zc}6WVkP^QDScPWh@cH+np*)MO^TpZ9fEn?Y>l37^nIF?^=xn~aw?hhfubyQOcJ4DQ
zkJQ$aL#+9T47H?nq8Eu!ugkiz;o<Q5qlwiu^q8~svsoSdLzW1H0adMuMg*;zh_%q#
zU32%Wy3)3v!GI0QBu@6D#n7x=qLm2}Uk5$ljCzeq%PW*^l;pv1NyKDQPU%|~5T`}c
zfOmotZ>yd;vP*+WC|yTzD8yySD5b$h(E428vBE^}?yUSpIKFi^qRb?xr866!Eh4#^
zr%!x7r9HU!dd5MVy73g)yS1b+coxck<@MB<!<8A(tA{H@>BoqYE;d@YOokZtwe&)H
zY_>_@AL7uUaRZ>Ph|#4dxc{ttp9%arrs}Y|e{a?{;1lvK4)EqDnj%{v^&&@KmDs5!
zGR|7}@N*i@eO$rxUqBaV9JHA$%VLCVm+OSQQxtB0N`wi}>SFn?D*J1`n36uv>q=}3
z(z^0!Pb49An93N^i5$8(n|xOMO;d%E-<!;<QWDo_$>htCyW;AiM2c{{Na~hB59$A~
z+r?D#x<dp0_tC?FmjDgAr6Y(Q(Z;>*qRM1aShO)@sFJHFO8vHwaK*j*>Z5ryttah}
zFCwo~Q6y<CyjAM-^i9fc;7)x`O0vuUE@Fh3p|b1Rz85FcZVw3R@!{XU-P;>E!71$R
zefy72knDqD7(R}mbVylp8DghrdA7^9;qrIB#cn2T%MnZu815!%3B_`Aa=74sNbw&h
z6-NV2$zBxig@oh8wKW*TX;$@Pzqydk1)5JpXHmT8q$>?LUu>GlofzJikpOO}LFITp
zm9bK@muder!*BWyS+Sn#dRhX$@$YE$r}C1{;K3>OLR>i8N|jUrEY_3Dy}dmN8iQ}y
zC{sylt8^ygMrV_1Ia`#PMwGp8cb-<h8=TwXz(bBeQtG}hhjjwkK0uTy)XA1*qQC}~
zEzGRB*{%!b*_s(lQyFT&PBI2j3aefe%xd*$Kkiy%BTa-mj8sFXTMbL2yQ6{Zo!4`k
zn*q`(`ul^7<@9{H<L>Yu&KW;0hZ5EPht}2-dyue5pa!Rb?2zb5zssKU&#f<EL^24A
znt`WW@s|C!2X@lhxcIoMC2!Cx0nv%-d%=;k<fO91zjWTQ6tfx49FtZrNWCxtgP_li
zsAt@0JGHP0tmELoGG37yOZOH8YsE2tDe83gV6BAWr#yPN_vnwmH^JefOW)~=Q+wqF
z44R;>St~i;jFZ7;z*CGl0TqP?ZU#|g{UC}o_!8++AKQ$s>JTUM30uHw=BT;Sx<n?B
zXW+QBv=Pt>iH3&3>a5SZS7*V6_910<2vBFWj0Tk?NrY}%(1$!Z$%BM%Yps0#lNM0p
zwa_Fr+3ww0r7hC<FJyop`wY)VIRS8o-*JkRcJ@W(nPq+rcilx?lrKy>ACKvtf5`S9
zu_@1nI{%yXMcD+_^J#=e;X#N^|Ef~(ELX|o2<R}Q8Q)<SBQpWNE)2UYLAx-h&NRhX
z6Awahz>I5(m39vcb<&(Ig{y>z2`j)R!sx)kiQ>7PM_K&#8mU8ld$xzGN+cXPN4)a2
zG~1>3yO>LT;x>LRGI<^eShl=i8wEK6l$hIAQ2pkh&PXGdNgcAe(Ly+Za4kdeK;8`%
z86%urKAnbghEHRBF!rAe3Zorv`!F>fYl*goyQ6y=0Sy6*qzxV+a=T8eEu{Hk^ld=o
z8CZ*+**i*P)g?8tRLBpDLlWB0Evwpz(Hmx<JK$);`60%w6XF0Fx63Q0S*PXb|HB^r
zpV@nM+p~F*P_%FL3dDsByo(8f`7tA9<8CE8AH@*U?FsBKA3^LJvwNONe`yKVl~dfp
z_fig_^YA>4v6=SQxQ|F_>3e0lM2Lr0I|SPI>q<?31P_eB4;j8AU8nM@h@f0J*!qxM
zn#l~p3=>pqiSq4XayP%N?jg6yucwEIlPFqx7-hv~y^=c5rDbq+z3dx`#KRQSCdRSv
zb_fF@@12ZkG8^or@cGRvWRu{D@M0K;6ot4uT?mncaDLHOzPH=i@w+z=q9|gmkAZ?E
z;N+0>+9*zo(8F_bb*<8@qgOs#y$zg&)gVt1fjQi*&LlU1=3jE|5jUzDGH>L?^$>Yl
z)Fp#>j(O(TWKog;Ums64$ec@@7NJhx>cE-#2|4ljC@ZeHu74_!&cL4{F+<r7D5FHZ
zf|_NK`s9OQqC6Saw91`qeRjj9?9XxzgrfHomtfB1+yL^S2UF>cx{C`;Y!oqVh}<ca
zFuCcl=XhnE+*q}&uP;@SQ){QIjV~^h-bQBG*H5$lDVI|XA%L<{_5jS<t*&?2f#_RG
zM^2-lE(D{DSvoq9jt@_b>*}_<@)aTwpWbW=SJ8?KnN7T^+@36b5y#P=lq)+zEksNM
zuvt0LS(;Y$yk^_8A2R`VR{$9%6;NqY!urxu7F%qlzyI#V>nBGqe(^HIwz))SE{o0f
z3R~Zao0cB*B87(3P!v%)9rr+%7Oi{n+ivz$4+RO5`t$<oduV3-HFQ{}gZ^-Gh{+zY
ztAjmh9~j(P)`F7^+m$%_R0cQ;X8QyfQOiaOUoYs_r0wOcBiT)7W%uJ~+t+uu2nmgx
z)$9l+Bt!~M=4XrH$)UvBN2;6<-{<y1W<ENGrQumO-Qu+JC~V1OGK^f?m2z)%QLY$x
zbY|DJ1Pv>J7vi`6JyCVLB{ByGeOd+HE<EgwBhRE2U)077L_znsV<PY#_}f)AU31xq
zi=yA%S&>A5c<MCrb}~Q60%Iu~AwU|@KG3HrYQZorYXzmDb+b}3<tvW!)Mai}6qYIV
z)ei{`fD%{zyfwQ5Oblc}=n()jAh4_D^|);7oV-`x!9~x+AM$tk>7*`Kt#dyVbRctR
z<moUwZTVm<YsO{4WFBQND@mGNakUn>OqI_m+yk5O6nzWkMZq9xW8oPw<rbS2Cvo67
zB)mCe!ln@8D58-F;TYnU7OO8T%&mGMdiuCPU<vKU^2T*yh<Zu^^R*R;qp6M7pTn38
zfRpOPV%ac*3QIeT8IGeug~d&mnn0eyXf&1|ev(1-tjc4|0X_}DNWlO!2RyL#(jP`)
z+|J^P$vFT}Ubj1I6mCY4T_<V~N)Lij-x~z)vZ6^QZED3<<i|yU$G9Z|41M}^gBV|4
zS9CnE)a(zvCoJKEb3}Z|f-thN51{<vkT{O1^O4{S8DGsB-gRQgeB@RMG43F)ViS@m
zuEHMI-+YtpEWg~jpMA*OojVU6fbCL#@X`4!hM@O)t~%eo?EE8$7`dq(nz&y1Aaf$i
z#qvUkvxPO!qT9+G9h$O;V`O_(HATc0tzecjIVy#w)FDka(DTvvQ@9oe$`!DGx_B$i
zY*|5HOr0VOTf6M}@?;42Dth(N>X_7&2*Wf1Cm?5SHGU^a`hg|%1bOEyl*Z4~XRy!9
zCk1D4HFJ)sVzkl$V+jR{d3^ZW2Rc?h`h(cW$&U|r>GNH(;ZKn%xGpq>tFQ3e2YLda
zmgX?~5oDbqsIyu}`a;oYhVIil_DD~b-N_P3U>W-8WvNFd^2XUOZ@6FghIAiaf$y^o
zDmNb0F{fMqxcU!|&O(B%L@HQ%6{CKTCqVm23p%3Hzd+-f^k*3bUI*O}iP9_F1?y<G
z|Mg>wTPOh?l18lmqi}(tH;)hZzwQeVO5W0W2$d&B(DaYQWcfa@Yu^^aHKOse?buS;
z?Hz7TcuZ9lMTSZdIgF)CVU$ZeX1u5vN*7T&J42V`AX?>uzsBQjIm#045M9F<9Yz1U
z|Mk$Ry(sUieGCR6KF*&;ITMM?kbVpRpN|sAv?+>kKx`x!rQ=x@^~@;f$=Vdo7nP>P
zrlp4bg)REVh0j3T!R!BuSp#||BcO>q15?_>JTOOd`|uJdxlT6{lfZ~>6h^e=OK%w3
zy}PF;FP^<Rd-3yq8Dl7-dBXv_D^{pz$6~*;5Sm%*O=S(ddfCN>p*HVY^)!Q0mO`!a
zE7aL;RQC`U4mtM>6HJB|+lYag2$e3rl>wXnFhqUX(Ly^fR}0ec&UYmeGXep18G{5#
z5CM_KrU&8=>H^1fU!k8*U<-*_Jwy~>uDvdqmmJ)}Bxr*Eq%-N7$8LiGBN#T<{_v}Z
z47u$^4eUQ0sMR4*kI>|Xlh?GRr7VldwtCL{lfe2Kl0@Tzdz>WC5T{8FL9w=P>un!3
zXs|p`uuHF;ULDcl_}lO>85ROuw{&~v>$s7Nwf${C8R4FEr|aQxf2`B>@S#S*6pyLv
zbI$fa?sJV!mqUQ}eEA?dKZnk-i9%8e?rgxY`lyX&1~FtrV7;=m_7}_(zr0uoi;pBE
zb#58jh-2LX)ifv2oiM&U^v>F)u;}tJ4?(t0kfl`IjY;Ku!$!Z=@>{Fb))2UW`IgaW
z0?p&Vp}JVCzg&4v%4V{L0t(yjiNE%ZzZOBF?O+56bncf&gfu)ko@FDFa-NW%UrQz`
z7mG=_t3_D+O)xvixf{VUpYouQ{;+et-1#^{B%WLV&g({m5t?=$$Pdr$ha9qxeicC}
z;+VaZ(fd-Uo>g<#u&#E_cSc!6{1Y?ZrFAdtfW?mkIzBKFV0T8R77ZDL9^NqVkp{s|
zsF9fPs>1VOj@K6l?n&>G1i|-ZDN$FsL6~6|kx2mC(h5tb?`BUA33_=#?xw_3QXRH0
zV3`wJ21YR|^OcLq*GXMtGlUfhm-yq2jP_jkkKaknirbnw^WHh&nTnHcHbn5Qg(D)~
zY~nu^!pqM?_B&6qld2iFZxv0nB7{|GbR=oLG@i&LjI<H*8HTbLZaojBW?Ff9j{iPr
zh+h7M;Fm3+LxIx!woxVk^xcsae~c?e+cuwYs0)nYTwqp?{-QY)Y6B^n0y+vim80{|
z#CwFPd(IuRD!6y0Z^9GVbZI*5d}JFxibVtt1?hpbi86l@kI)e)s;B6u{*aJiu){NL
z=T)(L;M-ND`&4W;ZVB*lhkq85h1-3VOSIj!6e-k1vE&A=ZIsA>J8n7irTBpBm8V@O
zQEkw~NlTJZaa4mb!+xsMy~M_s8E`z#a~UXJ2eJiKgclgye99;SPQ1uvWx)iTPr>-)
zcM6(IVcPI6avy%!zGC2#@txl|!t+~(7@0rTY58VU0qMEEGmfoe#n4T+n@nv7Z4gMe
ztbWvUb-OidK&on8Bs#W8Q0+z{1Z@h1!=zPC3GqCk^=CEfQVY%fN`}lLboaCBx-kcX
z@_MriqE0X+OT&Pu*P&;t+D5(xVyLHZ5oSfP$Ra|yTSy$dB7%&p*5gG<s*Qo-vstNK
z$Y_dYxpk-sHG!TSfSJ!A!rALTYk{1-Q<P}ImMxe#Y4fCQ+nFbA+qP}nwr$(CZQC~c
z+^X(ZU0t{DedGP?pBOvF*lS0um=Q78oSWio4db(!5-pCc8Ot}X;ev9h@>gM~{qaLe
zcUS|a09dSn<4vL*1i?>OZYCz#DzpTM!_mgmn?@P8M)%NXk*|05yhIe6T&;PYnz+BT
zA<32IY`Ot|6+b+9l+^fmdPE|ob#&WDVKD?f?L4GVvgXHgGOPq~oz$5~a<RmyB8OK|
zdH<-s_N29Fp(95{P9cgLaNL*_RU_bD>Q)F<lJdfR?7Z!`D&TOD2X2h)P?nEjs(G~4
zNAa#-E?IJoZvnv(@kxf!i9oc(AlMyjNj)pD2knzMorHXKYKmrO8127yB*e94b{D0N
zr5_smSRHDw*w<{Ou7H5Jm=gFh@oJszjqImJL{nQ-1o8j!he=cN&eN!}9f!@ydPhqx
zPi~Fh5QQXEr3;uh<effu%co1uF6>-l%Un~gDrURLWUn$?mAs~3)Sn7_BAI&&-OhP9
z=JqN+Z0!2j*ar7)w0rtafnv~BdC|u1N<6P^R<BY$xMq-oB=CCNiAYeH$?o)Wel+=p
zP_RNTA|tO|q4oBBgFL;V9VqePcE3Ad^mP5M+M4sJ(1TSt1?>S$$HOA_@;yKUtzZ%$
zQ>ecXbg=154Cn)nm>jb55Bk+gxoY!C4MGf5Bcnzh;w4a%&Vt>cGxwHWnVbPiQ!p&k
z%S+^}XwqrBhFo~O?iP{<h-Ie^tbgXMhYVSGI1*wHb@=3MR-tnUOZXe9<d^V1Z&)Dc
zZufhxo(I$!VSK^l`rRe*FW1`wq94mZU&J=EarJUxHve?|Ny(oph>_IV2=poyM=<o4
z-hKR|$!v2I#jzlbv_iZ$XM(F?g;O(pN6@#F3?)Au^&h*hFCvxDaX#ngOB)ka=Z20q
zuz<^{jg_4}gXT7U{8Wdq^@+~zNpFDSFEb(K{&dvCDWLWbWM(7HB&sbtxe9@7A;Jt4
zGYGcrO&&n6O;0^IHR^_EjMI$p3b!BjtplR%?64KwZmm6Zf%`lH{dON^-wZ;>meT5%
zZKVk2u5IpFn5#cb^J-||yCrQg{rIrVx@ScTBk`6wVf)$n_#lJ_jR2Osz(w<dH7=<h
zrG3`xu8p0=T+?}tvKlqTh$APv6qrsA&05%8uC`uY+|VlAuYVkGz&vljnl*3*(aIFY
zjDE&;Wm()1NtG|2Dt?gtPQJheV!2HFW;8ViE%<Rc*M&k8g}x7+>Qcc!(6n=at#caK
z<|ickYaE477R;j3B`d6!;i%MWCj7EWLDfIwzBI8Z7B%fx)T-kDidB7HE}b!k{Bk~d
zjUffv!Bwe{igM<O!MXNHvx2JMCaIo045SFiwhYGg2#9ocTQgk&VDi<J#-07%<uuK)
zc&FR7`AfomJA8Jj@t*8X=#E{(WN{^3i$KI?W+xtMxizjuA?7-f%UtL96VgNzs{?|*
zcEMAxkAP)ruTp4rBi3B5oO8%yOUI?~tu7?!!Qo~sGt)b^^-`YWEoHd;1}b96QkSHE
zfc`w==o(JzobABZeZs6lO-dT!NVY#aCPQkn<Dha`pz_D$4|bQA$K(0s$w*q=G(~YU
zT_Uwg__ATAtqtDh{!v5A$j$<@h>Wy$X6DzV!_(*C<x<1K!sXjV%VAg-ySs<8{pUeM
zLCabO?oPLx*E?09fL(~ja>I$@lsqJ<r4;NolxpC{n^$n|E)9D@=H)7+!`muh6_Iw4
z>a<{>trvU&-~#{**c$GS1hkwwS7y0KA@wV&j<;C#EfUAqTM2DUeMrpn%gf7ikLT+X
z-pAeJsL7v~2FCR9KRNg8b;vA>5^y9*gJ9-*gTa~jg**x48bc@0nstW0U}oCX?5W+9
zMQ`Uq#pdGZFiRAPj7Rz9sXPwc8Th1cOr#p@AKt0hbL8qKaGP)_ZiOO_JT${^@8LYJ
z4+J`_MClXkV8FPo1x6p2wd15j-UUW#bF6Pe4Fc&|Lyc%ko_u%Fh4-PJX3OYsn|GZw
z8G8xsuPSZ1KHZ0|vkC3#_gu3*Go$InKH3j5Im-g+-susSWA5_Quhu5SUQ;KqF;-HL
zL4oINJ>#Sf-_M0be=aUf?UWJ~s#EfB%o$E@kKmLPDqGV$<TU61sPWd9yrF<Pr862Q
z7eDxU$VZ7aRJ9TK2YvzOY(9S6oO|{Y=I`hU7Mh>s{Ep<<ujh!LHJa0ZT`+TID%^4C
zOril$(|_jYDQmzzO?oXF>(#E^kfeRmn%ZS}fAm=(?4A)5PvL;u`8|;yatnO6N%7HL
z*i}mvQGr-szHw<YaQVUfarD@?VLsVNOB=EVF%cZuR5;`j*R#8Rl>EnCqtZ=dAx0bd
z32`NB=_uS8%x&kfaPmv?gu^QA_Yo(<vneOHtxu8Eqds@rqr@9S&N#e~s;PH6I}}Px
z0(Vvl`&mIb{hpgz?C<761kK&wRKI8`x7V329`U)Kk4S8ikBpwC3kf}h{MGMHvu783
zgrnGhI*E%CyT;6}Nu_9LqY_zbXk@T{wn7uLP#fiKD)hUlP^p9KC*|@!n)lJUvrZ1^
z-IV`8H!OIv3{ANs=)-NstTcX+I^z1uou)CdWXI$Ch;!t9rO=p4(|%y{6t)%3cpr-x
zKNeyTy340*8U@m1B#^Wp%5_rEj^WKn(^f=)lp$+9Eg1DBJY>S?yC2OT!`is6D=$&F
z<Ms5u>k!ZME&xfmB-@~-a;m|sPnbNMn-?wgw?U7d0>9)3M*lg;7x+GLrf2m^WyBxS
znQ#wB`J*m9_CbP+G`}BxKGsR~8ejwh7`OCMW_suWekQYoavW7%6=9K{m!o=A`<O`d
z<U<*8%aU<<qCfRksUQ{LDs;MW&&6=QZ^(z84s3fsPbcyFSWTwNE&MhMGx=^CVgw~+
z9uWRBqQBE`HcPoj#ESE)pgCd#gn)14h7*H^iV8Z~@G$3b3+a7|fs{B8I5QrQ7T)Vu
zR3aLcy%2RselqFB)B@`$1jqbuO0PCGx4LS9l%*EB>FHx%{KHFFlyt>iIxG?r9nJA3
zX?iU~T*$XKP<%XyHcV21MAt?Zh3!V$zm9nMbBP|W2;?VFbulq#F!s*lEvmuE5I*=P
zys~nem6${y+;y-qvg{<Ite7H>x?9j!!V=R2_24roaXl5i2;z)aftdOgR1U3MI%L-H
z2B664OJtDqI-MK49IpVo%Z3`&n#bMt*$<A`&Wj)}qf|to$aCsPqlB~spzw&hesauo
zX1_$yr{8Bm<vUiW#bYLvz067<MQp{r$XcaQ5BcBdXj*IRkfo!<vtPfw1B?`?;uZ@(
zhOIQ&qNjBl6k~;UziI!wE#0_e0l~*#+s@6u#)54B2ZEbYe9~gVLJEriQd~P$!X|(Y
zKJexn1#4sAUQ$P7aXuUp+`RSC^fteh9&Igy;_U?_Qv)uHSmPl|rC=`EEUCw&Be=`@
z;->Rmw+!D*%(?Oq?6QczhelQVD!q|xRVBGQ30<Kc27_zv6FOl(@SEwAHDG<$&@p70
z<_9?t|1-Z%K8A-Hjc=mr5^J#b#QDY%=v`FWy7wL@%Ujjyau>nT2i-^gYp{=T*K9sm
zmdzWGNjL)~AO05wyJ)%v8>zpUbyz`0^gar0kqRl`zP+PWK1`!9uI-tQvDA4E*pU`z
z5voYgw(lUH?fy3QZ=j%+>@K6B3Fa4?>yh)j;ntb0=Jw<_u>T(H7j6@C@xOr<{c9)6
z`hO5?F=+)wK1s=c6>BTG4(kCr=*)_m-Q&El4wLiQBHjpRa7afetGPOiF=VQB>F@5u
zeZz22KDh0>Ytv_FYf=C0n@G2CCimAtB&TVGuP?nwy2eV7gGESDnU@`@ZkTY0cL07d
zaXX&G_RuScn7_4|F1x=t9C-j?Q{>}W;JNh(M442<73sLdG6!wJLO3mo(4a!{Ek6{D
zy2m}f=CAsZsJO`;C#g041GD<kqAhDl8!>n9AVUdfrV;TRuQf3plu+o2#f#o3EW{ld
zn?Myjt4xN-o}&b}VnHUZkWJx{M+B~8R32a=Yyp_#ZMK<dJvbt)@!gTj4d{sVe07@O
zZ-JsHEIj9UIMwT$hs1Plu{~xYFrzub;hA8uQ7S1<@+t5hZk$^{K_^#UbI<eQv4o`S
zN7C#iDF{vBTl#)Al`HPeSTjy3E1y1CJaR3lR**fw{o~jDb18n3fA{Mg?e(l3jE(I7
zt@iyt@1OF2yZ`?!asU4k*dGC&CU5vV{{H-R5dF6vl>h4^{+pctztPjJl9#gCpo8xE
zP=S9Y22?gd55~!q*uX;vGF(#z19oOWPOENOjmMvN3efxMQsjA_)28eV=H=n(7NPKK
zyMW#1T7<^kmZ{OxAoM(&J$}RJc7H))9<Z8edPwZITIluaMcgFJ^BH7_iYN1Hnlpuv
zIJFAHdBu%CPV|=pA2!kDk_Pl{#Zh+xxIlB~&)ZvvS1ji1C5^%ksLR#bU=~)3qC=~W
z*)&OJ3{ghij85`R>g@=i8{-Cu(Y#pltQ-5Cg4VVTrDhh|wf1D0ndl))WyI_tvS!Et
zEpR>vAeX@LL&v@(IjudPzCnWc+OmDhU8|B@uDgManP^=brBD=U5FwLkq=5_-P9J`a
znxl;QisFY=2Q4v|V&oRWF_GN0#0Nd4U3i0>r$qf7#cE7i-Nxiiq%#^7uHU9k8?OHe
zyU!H$^BLe@5#d{5_I}497=(wD^NKjC6;a<Rea7t$gg){z(*`}ylW%f5i>V@?n*A7m
zvfEiHsV;x(vB_$761UB(btkU1`{5H>!nRbb->PPH%;@TdxLV#dst~|cT?=1XejBOf
z6!(IP+*5Ey<qrDaQ<Op<M)zOsWq_!^!{pzNLqQuCYfBqFLnA{PM_0#xm6p6>`lNyB
zp#^W=Aa`18!(!n>y71j|L-~uI!6t_{1jmOf2Iu6vvkjs0NvU!w(^#{u5(mpI3KpFM
zgLEI~fcVFlk^wx#0ZE#P;X?%ga}J^aM1XKEf^>HUD<riH-~Jx`a1HFHIyBLHCYn<A
zLQ!dNntSAs<G|L$wiWs{%FiU4HW~k!+Jo*hDH|7l1q5E6K~-^*GIk5|n~S&Vgcu%F
z7_$7Hmhu*BUg5qky7?(sjN>V~iBZhq!*5-9fveT+p0<h`51Z_wPosm8hWl&4b7q+R
z9Ag72K^<Fvw|qHyU35LnWc?Cxg`o^Z;`J`S^Iu^V&yf{pkCM_F`8(@&VE_Qo|L64n
zPjgoqApwE^2;yc!k*c;tsj8DJ6ae6_)4%Wi$D>Jk&OU<!-s^<Y`QDLJ03x23_aU+U
zZ1Tz~OLFWB0A!-sn2wI0D5a+-f^Ide?207H<P$)Y!(`?<d+GD}`xt4nhImuCUUcCm
zHd*3<s4=kSFF**CGXk`b3;2{Vj*5eVmt}=(8#k1bfTyHB5=I^F>tSH`?r9x!P(n}Y
ztDK8LG;XhwY@5$lZ?PqXrU|^+xLO%_hH{lRhB2njY8ygkF9a`5GP6sfs((f_Zk4_9
z5iRl_Owd)fW|223|4=@bYUy!qUy>itc~Il{06>GVFZk;Vgm^y(#|5pPitSTcxJ{-I
zu&&tVwGcuR9@HS)G<V*Y4RwTg&X->~XjCpc1eq+KDm;O)!z~^q3rBrzmA8m@-?_0g
z)J*lz>3P1aq8$33Z~%V;{CQENT@nTMFdr}*#b%d=+b_N7W7wfkVF2=?j_jml4(!s-
zWTbq&3-DbT>tldSp#Uo1MB#4yJNLZ3uYoSqMhf4roj0DS+n$UeHB5hEx4qoHCZU;B
zKx{A}G+S(l0qyP6KYZ&!fhHX~<|7hL#$0dtcdeqE%uR^tM*?^Y)?3m5iDLM{VAR`3
z*`vUzCCp?CRy-wX>VB*(EBH>#fK!oDv=gT-I4K)ZWLqBYrJZP0@(?6tb#DphM)m9+
z#x1QokO$pVc^OPCU~mpaSn31gZFbT?#IFR?QL8{**6l4O)&4p&^dg)O1J}F6V6lDs
zcHD*EP4dMKiS)EvVnFjzvm{9Fc6j^0)5fNN-KCjEQ?Zib-kA<hc-1qxH|eXpIYf2u
z@+m`Jk>u4;2=^WMfoOStU!!TW?ORP*ln}W<6j=|xR&eZBCW{&wxo3&(>s!3?AhI9n
z0UjN?a9tLLErrxa8Vjx7g_C%v%I<JVmzL1yEn0wMtN$jUz_aG{dObSqCa<@4c2S_U
zvRLfgPX5$pux3<nF4HxX6msQ4(K~H;rJA+EhMhHV+)3|j@<r1O_5CbeCu26@y9Dt;
zW=w}qq(^4nj=5?-<AU_NygE>e9tpoj-~^Xr;xCX>BPRF9!a#w|V6%T)Yx?ZJeL-X$
z@d&pf7#Hb0a5l;q^-)5?CYRzcQls?<aviI1KLSXJM|ip29@>g!WX-#~k(oDX0hPpW
zNM{JlL!!$ZOci+!p5AcNWgy`0A?Sjim-#E(+R7BV%>*!94iSPN5`a{zht|P%vb}a;
z%JvEeBLgoEbPfvPwSjkeBhjdmvx-+<&2j#et)rX%v3%a$0edu(itrOZ==x-`*Y-QB
zjN!)4gPLpP4fnri2JbFRi+)f502d?x0F3{c8EF14!_H<7G;UUw|1ve8t=XTmJ#Xpk
z*%fu*%ENN9iP0<RF6&wX`TcS)HdRZG>g}*JNKN;#N#hP{(@=Q?*gw6@h@Pc`z*+5u
z6RXt|EoFzRjOm2`5H&zUS``L|e(dE31!@&#>97fwi@Sa`jkZDrSn$+UZFgNBqVWKz
z<HAKeY?yU&I~5!)q3fsPUBJq?yz|4nWF4~y)RdDugkEdl0{;Y%WIBLydBNQU4fH$%
zmK<_M(@nTVZH{8@q4}*4%9DdY`nYG}B*|F++G{7-3b1<o5-l-Dq$t1%PD|&-!%L)#
z7J`*!BtNu2u#HbYz&m1J7xqcmKP`S-NHl=Q$&novzIon!GQMl1c*NE`ht<W@K0x6T
z37!%>@_->P5YU93O$7i$A7PoB9vbpJ41=}3j*IKdLxtUvoGfD`ir$7cFPqRiLbtop
z+fqgfF|s_ORhBn8-#Bgs-zFSs3A}O2pQCdu2n56V!;A2Wo=^v1gnGjrZDksa!BHZB
z*bowdcD+I#SVo>ccw->QLzel<FHjwW2OgVT{T&l3bAPnq|5A4hH)M914-lG!^L2pQ
z*Cxdo%t`zEL~)QS<#)75U~13=w@sezUZ%WdR4;|!1AGV6;lgO>cp-bG*!(G})Cc_x
z&L9xbC9S@d7vRMUJ-8CZ{sv&%v6Hq;IM6CvuZAKB35zAvTHne!RCW0Wh`kHSj{?Zu
zwfQS)_X%czaREt>;}C92%mhDso9?rU6#k4)4gX8mlLg3UA)G;;B-D>Y)hjc?Z|B@s
z6^tja%R`Rtc)^mn5MEqdFtqF;jt|m_4JsFh)^PUco*2to-e(ZPdfgi!T*1^?%-?gM
zGasXZzPX(4_74n|Qtbt84Cxb1-Vb;FGypskBXi0oCxamvR=qCBjwY70ag|BIUe49Q
ztBW*yvJ!yTtFKEP9g}efoNmz)G12gbh>85~VY}e7cSSO-m~w}!=FH506g&g<SMGq7
zu_y}WG!@?isuwG_KV^`8KB5pmf8t=Q{7>6l$$yM%6onlvu`%;vR<q!rj|t>dznR5^
z3jsNM9rp>jU<kYRXN<d7Sh<mUR1fU$NS(ZYW0?24`|a)1F*W>5o05&M;%5!}{CpX1
z^pu~FWavxR3)YQeyAlzlgkP{tLANpn92K~nmzezODGJX#PH*I3|GmIjQk<7P+Xna4
z5P{!9`C;KWCZ5ezd0ZVY7TPW4x;p>@3lAM1yX!CO-6<@nL)*!BfYFXob$FA1hk5hJ
zq`r{%LfGfglkJn`DRS`|yo^3j$eexCz6eCAcoZ*_OuCu$$xdje!vB&5nzC-uy(Tr!
zIWi?Z*JVP>r;{!m!eQObd{Q8-5MQo|NE+>RH9pl>yLR5K^kcuWuCr2+r+_&wMG-pP
z<Ycs1IbY{|qQK(zu4UJ|y_mId41w{+Jag0WM+Ea7;^HnL(cl}q`y?HB?CmU7_=Ek!
z7YENrnqL%m<nZCj1>;;{;o$WTz(mC*b`@Iyzv~E0tpU<=%+GD{$B5cJ;lQf2uajgB
z|LbE3U_AiKObaJptnxYV#84?UW{o%qTdp27Asdv^3chv@6_gPjs%~476UY1eGOmX)
z9?wa*mH|cdiUyeaK&L$?K$1IOq(p*|PE8BPIU~RX`W&`YXn(jJ)Vj8DhkErA$Q@&W
zo*ZL}%*66S#$q;gM{nb`$8hfE#rpDJZ4D!>N6?lpX%}?{6UsIXv&X&S1yxDiF`OrY
zJ1hAx9gKRtI6QT5Z|(-_Bkd>Y0Sgaz?q0o`Mf1@*6e$n?d3TDg?cYVW+UBXQPzO#m
zv(?m;y(;{gX-Uie@0!jLzoIgNtRIPvjL#V^raA10Dvr?QAAmJnt&h0I5`)T=bU>mA
zdM~I1hn^fmiSrP}K^6Dc8X3|%LFB%z*3YGN{5Yo@-6iILk4jy1QVls?OrO^;rH{O4
zlA$hGDQgI9^4GW<DacB{hy>T9ifW=CW#>cqwiI-P?-!j%+SE>wKW3Urk(j~u)GMV_
z{t_V+g#}hFUBnHkn%u47rMcK;-{0jCld+XbnX$>ib{jh=P+8O?i@%+rMCD$f>+TfC
zQz(KYQ?bX@DNU-gFXkyOe~%Lv(MSes@2*QjGnbnUR}4hn)@L0>xOd)(jV*9cqqT?x
zQ=Vi5FnFGOSU2(~Q;!o`A;fTdSsXpsgCHaCHIp?7KQ-&S0Fg4PS`e8V)wfA`P#6)L
zJnM6c!=@aFSN$-R(pt|I(@#$)Ukx!B#1$RkKWQW9=e>AlcxX9)UXz9V_3lGyQAP2;
z%ayCNpZx#e<-$ij;)cH)R{=!;0G$81DoW{D7#W*c8qqkI>e(9^{;QSoh|9uZgDpO%
zO2;o=iI5VZjIE}lUSiF`(qtdAXWZVHfq9G#9ztzXHZZx+l04({<-*#Rh*!S(l8w{F
z<1LneFL&<7+EGB;rm~@hATvBw>eYlElD|)WtRL@vGM+vr2ySK|b;M6p6`p>&m_hmt
zzF6xa2&!Uc1kh7#)$lk<4N<ZfzgK*Ot3RkLQ7`3g)Wm=tr9cghMwLimm7f7&gu%JE
zF7j6|zNmkcA=>x_Ub~@6E$MYattbGh@1kt2V4<WifHs|sGzmDGEOBB;1KuMbB)~88
zej(s&7Z*MC#CtsP#dI~S2(qCjg<K}*G=5xJU6C8mlhz<O$<V-^)vYTJZG)Goz3G_%
zZ;JpN4uA*Sm|)1>f><3Aj2<<hQtcR!Tr!egava)JtZyw>a)D(M%K#q4YF;8=O2)Q<
z-7L4d-Ll&b$ze#W+60*rz1=$|08oHwGJ?H=U!XQF)6Xw7%0keux>oJHrtShQd3gXs
z=Vc4EeFI<?xeKP5SI>O<-c<2GX^cZ`1j2iHbl~&!3ke-mwm}n+!M?W!%^j_QHvr(-
zF}^}8)&rnwc(%nx^K3llB1nlZdwmxNSp{GIAU-+7<Z@VdVY>E$GwGK!dW0tArO>0E
z(=6$?MPV8ums-e^9hGO)G#P=(r22uOGf26__d>zt7wy=BENM~Tp%WdGQii{GTfM>8
zV~{AqS&mhJBG1A@81q!=BxElXGL2LTc;!0DFCZYlVJs<+v81XqG61B}#lpyHgEEhn
z4<rb9SZk|>+l^Ili&^VU3=gKy&LAzB9_w_ChJ%WyL{uh)kam24*Cs9wtu+B<jk-<M
zVX&<KE@dv1v`kZj5trz0b*yYVoNNL}eJI}W0n`$;=)JItm?O4uM%#Eq>;YfDT8q|@
zH;Xo8Cq8KWF*2_(a^=~Xd(E;*>`^^#sZn>4mOPuD51)K)Zn80lrv_q`Rkw*BHp@DZ
zZ|Omi<<(G?uNz6plwe}-5`+9n$sq;+ARC^xM=?}b>RGL9K5k}aoS{1hxuV!JM17Pa
z;MoBNz$y8mgmVGH09?KGN+EQ1Ct^ovNb!xWrP%ohkN~#C9#HoG>a9}!NhTLhED_(R
z_myp(o)lc_{_PFq>js@jTxe+kQ6EwR0C`2kmzSSviGcqpp(ZNKH+rct<%9|1pFY!b
zodW|a9er`ImK2Hv4b>c=(I?cJalN3FTI6yw@ECkoZnweB&auV55)gnG4sXtP70icL
z7y&I88h{lmDu0_vSbq&<_6VUL=YXrY@Ea{F^o0R*M5BZeRp^=oV=dMrr^fB_giLqZ
z|J-B>M3o|9bVPYCM2fyX$VwgKSHCDK1QDS6ey*VIW+AGU5Y4(eQwH=H8LvbyKS&Jv
z2p-3gU3fpVeBl$GRY6xkvy@Rh9=2Av*fQvtWq2Aol^*8F-Q|%3v&chfz#e$%UUv=k
zVzLB$RH6Q~pua|d?<oib`|}>qZ~Pm^1|k6o@E*xb-8>-MVQBv-eRer2DE(9+Ub{1*
zTf<QJf!zi?D2?fHE98Bo=CgUs&mOU#gHfaxv4VDS%Khzcv#1EgHxVMPIHJ^R09-DJ
z(uF`zG`v@R$Z8Ei?Oe?iq7<V*%`On@6Ry)gSzr9hiTUT!2fN`V$S0M(V0pT=KHhiT
zaFq&hsqmZ+!oc}s$_7%d24m?bcmAJ=L{$xhq^;Np4zw`Uf~~KZ1|AINCDsjdt6S`w
zU88Sp&v|t$u26^CWWp~kY3|sWy;!aRH@Z$fbfo%Hq9_h2vw6QYII>7STBG7aZPzf!
zR+M_yh|nxb3sg)GbC9o5sg&U^DPOsB*KKTC(iqo28>587dzYcHXrpDGrKdltmY1B5
zG<K+ip(xZtQ=`t)r+%dxbTg{d%;gIEdE-GoP<w`!J~BaK<noR5X!3gdVHsNjlM%5y
zH=`S{^)oOJPkoo=v|#D~;&JYtvu3ihc`=od8X(PV?2y=LP}K4&FnJf38B}661>$st
zLGHTp;rE-A!>dZ(j$f6SH*5MUZwk?`63jP;P?`1kZ5Wd|pl!oxb>IuPV=Q+YBZD%E
z5$N5*Tf41%Q=dhfmlk5%&*tjY?C|^nQZ=Ju-IwqsMLXbw&e~n)|7<ha7xh!N&`!<9
zcRB(qxiJeN6@mi&qkQ{XEy@KCR9WC;WP1-#o)0UT)_!OcJf8Xhc|^Z$1yVl~_!I0t
zD9Phxz(U)d$Gkw5co95)$H{$#%|OamP2%JBay-@d;i*;8<lxHo`em9cJ;p{kajQ{v
zkT5@z>9>=Y$cp3u$8jwLw6~!5=PQuo@gr{8cJ^sMNIzyT2`+jEr;~@RXO<B(C}exx
zm>>{51uSU;K?P^c*ZTb-{)UxlHB;%Y&dLJG0mNWF2g&pWohmRhIN>poWKb*$YQ1#x
zVsR6WH;&_dsUm**szSaSakzQ&U(W*$c_wo=O{`4K*~V}6YKh%od)3&`I0wQJ2rxc(
zxspOyHayRz^F+Q40VfJdSs#2vNs~zI<i5JO_SYxf6aJ0^{WpfsLI#!EfNm>_jY-b{
z&2g6GZuOSD&fi$e;kHwmszQhhi@MYuVT@@jsxb5Bo5mRCeH2V)QT59iK#$H&p-QeF
z*RPHyFDYN#L)uTlOK==!B?;t*>Q%}9$b_Yy!z>w|&jG7A1hDSi+@o{ZS}iS!!ukHm
z{zaa8&HA-5mz0Lt3K<B)pl{{^tl>3XB5A^_k`;)Hrk7Va1NRX*F*|&LS2nV-#?v->
zD{o0po_0$S#<uou@8=~_q24KVsrAn}bm)Sc##t(F&;XA7yuM?*9nrhJ(q>)g2Pq?t
zbS6sixluZ#5o5B!ekIyVa?T(j8<V!Y3X`xXUIAwic0=RSQ-DDE!n~Hm_8cI7Ug^5n
z`Wzsc-PERCB}PtG`4eq86S8bv&%?I-<_nGSZs%cfl^Gtu(W#HP%Xi!cY*_uv4aSgI
zMR%uZl6zRw0x4%0yezROQHtzdSgr;X8*Yn^VLYtMQ|+eO8QAk~s4>CkvN+VMqPLEy
zCPw5+-chKwhJ_CX23spie)dmm6f~v#Xx5TO{t{fCB~)U19yN8^SUJonNNI(8{$=lF
zhM(e~Jh7<a6y&-=_`IENsdRuPk046wm=|d0S}Rtu0s!xu)P^q3*+4$=ONW~irl33D
z5l8(1TNh~FS=&pGhR~-<zY~uWV4cFVC?62~JpKHlfZ$>p+L}o;SJv6K{%{f{6hPXP
zuu25ff>}#OZkmlkN*OgKb}=}*^p_Y(T~roN-Bw>POYaZ$F<ouwGQ!ZvY27-d!oLF&
zgA_-cpCacE-cqr53?0KD&A>5Lsuh(@qcLZ8xHp0;&W;$zO#iW#k6tQk4(+aBY$yE7
zu%HY;ap#|Cd85^rUBgf|iDgKL6kz2XxE~(>d*9;{GqMt!a`Ra~5ZyW=4chf$IiM5B
z^K2rszsmq{gFtgn(REP)vY`6T2zOe5+9&IZ1!V~MDwpm15aBhF(A^6}s+@)7wiiN3
zJ3j@Ta#cumNZxu>2A#i{8tWVLI9#rM353%J&l~DSK~O#pOjoXv&@#Zlz&_)O%5Fx7
z&~`v1;z3NHGpq_X=x>b{YJLLO?b~y*3W(!<#$d^x`#^)ldE8z81`9IJ5+`>{e9;S9
zR-w*22$&<~5AKo4AZ|bvNfMFCISMtDlLuf~9V@yy1$Trj2!&9Rbu5KQl|qY0?>j1R
znG)!~9|}w_AWR4Ox^I%olPSa_7*naz2#8N*VL{1+%?zxo3(;~QAC-8E)|Zzfz9X2e
zNFWmzq39hf5ZdrI=ryhHCq?bIWV2MO0E9V3ATxwU<xS|M&j3~C$*tLorGz!o-$F>3
zg01@}eb=nsPKc`d08grpHHU5!OW#DfMMSHx8K`zOW!sV<UlDo#_BGL3wpa2HAwQ~)
z-5?v^JTNac)|AO!3dpD%^3y&b=ruW^X7=is>KIM*LRAv_`dkqxVkitXBX2kX573yP
zxtzSO+US#={8ID*RP-Bo?s$(`hiJ4s1_VAtC*J~s>sK9;KfT$sQPOo?>JXrGueT@_
zdoEIJDt;MCt>3t>aH?wVRSxv32a})_{&<G@jxWueKg2JKa_)3-Dn&qCJDI=h+?cE+
zEm%dlgK}h9SliQ?{s+nL$_O<Sk;-s&F&T?rmn#bX=U(Q?{f_L~=#7;a0oS|*z{MVZ
z;vR7Nl!h!er-Z9PVe)$Ou13+;{@R98vY3)MBA4azMGCedUy=co&Q*YB*Ir11lPPgE
zjve_;cD7t>V9nV%na=Lz=@!cJEQ>t009T1hd01&p6qQvMoM5{@bmsuiuG+fi4?D?4
zb2wTyd_w9&B>lJ1sPw;jHdV~ZLuau$Jd?#qQ*R~qc1J#nXsS@Fsj<~<8q)k1-80H)
z@sEaoO-LQ5ny8J;4}WTeS#+a*m!nKpsx%*BA$T}Oni}b@t&o^8CuQrctyTXm-Ha@W
zHmsF3?o>x-@#_XTjp4A_sY$I9+%u=dhRw{x?p#8H?r`3R#j<T1V%UJK(<C~M<+hqX
zapiY_x|mF=PTV^NW$U}JLEnEbFHkr40c^<Ly#mw`l7qg>{*{v|c}E2^Cwry1skC<p
zgSxf_$~Np_t1Y58Keodx70}!sVw9VD&r_EwW1#Be-s<pue0W(p(2UmS^_JO1L7~3>
zGcRuPegDR?(9PIa$Yk-U3Zvif_Rx2wrTY?6g?QX(*9`7h5#+JGyL4@ybGXrrzltXE
z#$(}rr=LDf;?NrHVgoA;*1<VaO0BB%c}8mNI>b-kA#+Td!=2~DidjN~$K_#e9eHea
zdv=k7%i<UjS|@_bF*Io+)8oBr$qKb$-Q3e`_C{%Z-i78BgY^D$<zqguV4gjU+LwhT
zGbK+r`(Vp)94#rFVR$kDcOO2d90m4-chN^(@vykaV*U_F9M<nexva(cZlP1p1<{I&
znQWWaJghJR&iweSYrD-_)4OSZc2u_Y?7g^gUe@d)l>?`jvhF!tTt1c4<-JipmJPLj
z8N|%kU~Ev7spAl-O5j-AD9TlOsA4#F|H*}5Mm$3bU&L}ueb!o~OL?ABo|XpLtiN?R
zP~XWDhaYqIy!Eo`ZpC2h0~f0WMoBKf(%Fs^xpsx${%mVo;n51VaXr|i#1-s+2e1{;
zu796GlYDe*Uz*~aRZ!h!8Rq*azM3)9uUPX9Rixb9<{^63M`fLrB`L%NPmh|XZOGhz
z*&=fOn?6`gduZlcW$o}Qzy84?i%p5vRY;(NkPv5c+?$Hh-2ITX)ZUx6f6;6zm%(AN
zsk|OFMG?^__5l+I{U;zgu{7@{y087)0p!c`uImlI_6#TuSnk_os^ijmAjv6bZ~lSf
zcn)5yA-TeJ=UYON>+gA1tEUHmQxB4kit-EY_@z$~_SW<bSY6rgm&US9et)*qA0g6G
zu!)>WE_JQ@vt^1G?r9YlqnVhy3lXr98_*u?<4UzHqWh%LOyewgUb&}28`oYn0wf32
zY$xx)$a2s+|K9O71(I5n`5gIJx93H4P;$;KyJ=X^j?1gEhih)61pF^s8>&=?(OQVO
zuXN<Vlv;}=h>~U^=cYQNiu|}x#7}x?mMLJble4-LnLCOdR1o^7<qi9_oA(o?u-Pv)
zs^H<pkHPVAe&(8*B_(omk%eqmH;O?}!iOVf=1cDEds*#zq9_v_?YQ%KS~~@xSy0O}
z6aPiBtl&+BReUp~uqo{)iB5oHKv-3ICAM*L=d3t}=$>Mkh7a)Cy#2Z3VouWdQ=pXh
zF|V++bN}B+-m&M|+=g4>$$x+ZspS$uQ{o~~ET1?@Vn|1^mkx%Y0Tht|u5i1>YA>Qj
zbsmO9KB>L0=Z6>8KK-sgOT{Ua{Go)*>#3KWaj)_^*gP9NHmis8lx|?Fw%y9hgj?cf
zQ)VbPR4Dyo&c>zY0JXL(ujU0`?v#j>DDToo5Kcw?!OBL&UhZ7OCWKJV^XD&0wv&xU
zDYsUJ*LRhp3WW8$?gaghpAO!vWF=d?!BE;xK+0^(7B@uzYvR_ks@0Z|J$3?rw9gfg
zV7e7j%%e}3!;2>7D$12nOc5fkbB$bDjf6FYvbQFq-W_8qPD`)db+EE7uU`I;zp&J7
zJMt2z`PhE%PN&4g@K|<we&;QGE8b520($eiYd_-hc(=mjG=06$J{WNB%J}krF)cUz
zP)@=EGKLr3#Ruxb(pL>RDX8jO^Y$=Ol5a~f<6@>U-=J8&(5zpM@T?JC1s*;0-Udr`
zJ^Ru@ioQEQYgm^;ET{hygpSpky^|@tZ<DVy(*8OC;x+=^BDOf>@LAM-i+KwHc4yBr
zk?r(U<JuFRlSWH>|9jF2FyQh@_^F+*_qk@B!4%GmxWYSSQfM3SEF`j$MgFMgIMAnv
zTo0-5Y=&R-(*pdR0QczwU+!fQ4#9JbAT5k|ENnpq&HnAMD$$c{=#RT@4?Dg2C+Zh5
z*+p_;H-w&+mCNqr$)StYQ>&X(4;l!{MD>G4K#|1(s33REyNB=m4E%ZViSLuq1!O*(
zwvghFY+rCGm_u`NZ`wc+z6J2Wvi<9D>eLEkiEiy=8Akns8u}Uv|2_H;%JjLhd8a#H
zy|sjcwVh9OdtJ6khD#6vN#j0`7K#9~c2~4=NFIAjtAOH=>`X&diGLnMmFM26@GlDz
z3|z=Z^W!C5lNt43O}%?1=m?u9m@f{+35!cuD-<&W?<FXuT3P`SswA0mJedKKZRUqa
zIFM%Mhx@(YEAWX^^w{xKvl6v_nJAipd36JC7Ud-R=4E8urEreR1`uYN?)lAXdo`cZ
zv(sg}^>nL8go@2+<7D}0$PwyLwVoPKDKu)<0ds`O6C><Aj78h%w0Fh0@jOH9Z1qU(
z#19k+I(NO51q*t2J^jag*n;2ALS5kq(aBH~PG~3(_2$MXgy{w(ekhTUWNLhs|7fuw
z_>UGwtADf{JN~2P9ZmfJ-U?Rf_;5hETl?S<`uY~*c=zS!|7D5&59&ZB^%Zy3U&7cq
z_&=o%=sTHN8q%0q8{7P=Q_wCYE1PvX`0s2TyKxSu1U$#3!4NT1ed4WDvMkY&lxX|}
zw0-hA#tlDXrI!sCH)<;}Q&uNDN0OIK?wO&J2h-QSGZ4$YaiV!3+ag8XOc~GtJD)>M
z<!m+D78gzMtS9+TTTg~}j@p(z)WZtc18aB>WXO)Fsr{;P#@e3M1HPluc=TbY+5u70
zSi)YzO#>PwlE6e;koA(?xlsEU`xH44LHS%21SjSvfC+V3)j_J+RI=mhUel>xq<pct
z7Ub|!uK8ZWD!jl#Rr2GNDyA3UlhNhk5$wsyJ~e`k>Ee<bYPW8Fug1J@WxyWd$fxnm
zamX$})EaJrNR*IKG0&^nkF=Lwa#7Y1ck!M!QcXZONNsTU;P@>!7h~erf!9NY>d*$R
z?rvMb0hwp&NNxG=pzb|+4_`!TR%kc8AI8SM4`qMqz#i;=E~nXT6O_6wZH(l22#)dJ
z@DHPm_Fu9C>>PF1!PFW8{K)6Nm3TZ3nHB?Dmx|jm&DCW7)D-RXN%;7u%{lL+-{MR@
zE490V6{~4@TmL}$JY1w_H|D$<9XYP(VVMR`zbC)8xYS30%Iw}UWpyqvf_eHgqG&#j
z#Q(}=+QW&%vGh!zp2icUg%vYo_aGEYxeRwl9nOJ-IAOEEGFcoaX}W;I+U`Zhf<*SR
z1+TGvEGGbG89f3G3}S0X2lFSFeM=V?n$Ls5EcQy}7(mq=RCFWqn+Y5dB(dELIw)Y>
zT0xtGOEd*s$R&e8p@Bsiq!7Mx#e6lCVkC|mmF6aUru30j@*`(4Gh3?ybQJ(74-Z|$
zOGb}RfUgM)K2{AWH;oSS>Y=T#ulUj6lm$;O@xPzyhM9hDixgZyQ(lOL3soYbcZ4{e
zC@`S?N~_Ake%v)%<8e5eC?Q*u8)~o^)p+|C%sZt2c@<!2WAJZjcK^wMllVKCq^s<l
z)_ws1@IV6q5dQPd6a*A?ob@ct4D}q1Xl!l%^KxPPpEGi@ly_`4Sm3=+bnH%XjKQiA
zU+@Rsq3AS=P|nx=iX0~r@Ffz5qzIVf>n)%^c3ecnqT^R#XG;bT?>auNyE_&_#ET-m
zM%^-_^?2Tn8BwJRmRM*6F*JC9-kG8LOGGfOJCO1Y$5&UELA4u*PR4dX`Rn4ig2-2t
z4GH>8;KSkz)YQ<?@chyFE7{p11pxNGJnb++@eOVxV#VZ2u(m70B@DtR2HoF8I_o~d
zOSph(E)c(scK6?S(m--Z<Z4rE`b`nHf-2q!)Pua4ILvHWe>ikL>2;=1b7U~v5*Aka
zK0yLH-dudpH-CMrWstx(Lf@tK`RK+Io@uSQi0X(!eId#*>;d6M;>pdc_I7LxQKfFz
zcs@3z3;Xm7>H9$MaCdqs&hkA#2c&sxQCoxCoB~XpVl9Wk%TyFRECffOX|4Tv+jB(U
zl$XYtu%QdgB7?Lo2g(>h)jxv|G%F0~QCPL7uIC1~=*_*IO*_W%kah$|SxK8O;-i8k
zp<!?ISBj5qYXlMsyUXWHiX%O!1Gi#kb<#VF)aJ3h*d~2-pW>^sq7r?(;8v`o=eOPj
zhFqg?=3o_wsT-?vOkqBTj-#w<CJ-`A0a3X7g&C32k}4SVc^6aL83>hYnxMVobnQ~t
zSDA)^PX}^(O@azS0(o%Wn`QM=CE+chHCnQ`QLN)&IHn!n^TNjeJIwk%%+p<Zj&2-e
zC|rpA`Sd#nBO=~^RNB@L4dQl%8=8eKbKu?>a-~P72i+asuoTvxE4Ru5N`6g1TZD8~
z4stcUXLXy~TTujy!n8s4o%#>47+TbIEN>pml+Z*!qJg6yS)W{bX-VtP_|Ubu|Igp#
zT-4{zv<n?IKt_aPk@!=<TZ)R#EJ`h<r6jI#-99aw4_Ym`L9a&Kw7e?#`k~9}h+lV*
z=EYv<OvWQVS<}TsTGL8_{9c40%Gm3iQQYQGQ@@T5$3#mPN?n#c$G#Rn^)NlqDyN>0
z6wPnZg%n(gosu)**g=QEVaK{2iHUkb<cd)@aN+z)a4(QfoK9#UX3Jc1uEkfZ<YxE@
z*LPS>BTrh!eAl39ARred=Sx44&bQb1YlJqDKfInsM9PI?P59DLe)wa6iry)BicA)!
z@EbbDuwRXF02d~Ws~EkXSn;VH9>PC=nw86IxAC!{;|MGE4BO759v>qgjZC!LEL;Ma
zWm5@G=mLDK6`-0qS&_I@Uh-LqQw|(1wBYP$8^vcchg}hWoAqvW4&`BCkItp*=6U)p
z_F0+>dEp^c+A>wZa73vXR*`%DIDx3(!octW?TooS4@f?I9VTd5>VQ?-Oq-23`?tf#
z+_UWa?28@))bGftZBpmkjoX90a|vFgo9tx}*2O&re4bTWEKY7|Gc|n^+S><uXcM~U
z;q4{hTSq&O9%vq)Ftm(v^O_-&mfK@<&#PsHms9169^2~P!sfPlPz`_ro%kw0V)rGD
zl7%$UTTGO%C59o64IKVC%|2gPou=R#TjIX1a;*W`cXNR%KLZjZ5U_8;y(G+=Fp3KP
z!BzHDwhYcg)B>SgxR~RLfOW{UTI+oTL}?};ocAqcrt)R*BuIm%UKr7%k}os*j<%*G
zHxIYAjjPV*gbf9EhqcZ&OE=dx>WG-c;lk!ipa0@0{Ud84`VQ-d|Ailyr~m-$|36t%
zK~hIRQB}vm$Wh0@@&8GnW;WJ326~p3`g#Ty|1OtSscI!)bRc-G)W~je1v*u!eH6zl
z#y3^aWgp6?Kxz15-yjhi59Yg~NfE)M`s6IcA4h=HB#bXt!w{A&;g-m_%yh_`M0Rb6
z#dRGu%-KK~OdL5<L)DEPaX7VPc1Nq|Oye4j^K8t!9T%yd-MV?fw~YrXw5yg7%&-!C
zt!KYY<In<Ij1NyVJgeT&`%KAeu@yM*BoCKWi3cTk8VTx2=o!XkyOud5Wn(C$#5BAO
z*w-6I{z#*kX&c4wT*#v?AG^F_UT+(Sp+vuI()Y4{k8i&xMgJ9q9n0ux0&|DO93=fz
zI`8gseQXy<pUB&JONO!88ur;e$yFNGfp~DNetM~~nR?CBI6e8vy<`mfO5uSlaB#2i
zl6-!=N#7cn2N13Qc1v7#noi2nDr4^DA(^<-zpqW7G%+D(Zr#ftrRhBk4w>1!BBG6w
zE@~=w-FKg;a;GpHo`-GET9>#O>~8d|#j2r_ro>|MtbqCbDTZyhH|3iiBsun=IkLoM
za-|UQ5qRJnB6+9s63y`jgKk|&ZT7-<T!OE0m3Z`uVpjfQRDB7{-pX#LI}+FLZ$pvP
zu~NQ!pagaywJH{Ph}nh&RzxX)IzRNpFg9J7U|bW9m!|w@GskGk1C~wEL(SJZnltGd
zFV}Z*9U=C8kEhk`%Z(|^6HAV18E$O9Wz3%aEweL3V6}*PVo9Gtn~&#APoaRNFnIFG
zZgkbqLky*q>PIUqlhf;Nne0AUk{p17%}fIyw&E=Q#uu#hr{Yk=^g4=L6bVSmx&U*u
zt?F`SO#l8xBsHE2PafnYNghL)K=C&8C<r$D<QHtub{EOan4Eq=RKi-UWxFTk<oOm`
z#!S5KU>jS1I0ePnZk;?}F1rvSy=fC#z0RZDJ|aP%Z@Z$Z+Qm)>_N;SKP&|O8uTel5
z2FWFvXa}v2=R?ZV$<wFGuRi8t=Iii@F@3-z0l{Ti<FHd}KzhU}b<Jq;UG`F4?o87#
znJ%bo-YD&n1q|tGd)C*1DUWudEwNN_4&kaGgDMx#Xwi7r31TDV))jf@0a?T*+JLE2
z!TU7Izva%dxv6a&YL#pNiA~7sgdvvXMvBWU<MGKYpY0$mQxLR}lt~~RdPhE>9;8DA
zyJHhtDZeUnlMzs~p}Gl>Ie`e0OW!fyh$NE*<XrvU45-@%1#Dx;q!DZc8S`PvVoIHU
zAt<>DAE*S)`paZd_F>hhkzkM@e>8T%%jV~$;uwM(X(~pIa0!7ojQcXF(H3<c4;$>9
zgrD}$>!gioy2{lx@Lly@D<WdwLtak-PgeuXDd$Si3cPPZqcxWTwU0AaM|=vNC(rYq
z<9I|nAzLsS*mgDv;?p{Mnke0PV50X|QXPfvni*wnw<Ps#bcY;;Tiy*r!n#`SQF}&r
z_g3du0c|(swg*HORm2I~#_s$|N(<)mu`yW9vr-5g^`wRQ$&_{84K{~rrD#VM1MquC
zGgsBH3PUHD1xEbPlmTJ7y%7ScJWI*^%=A~wVvV8}ZXXB01|kh#DQXTMXNGf&zK!%H
zXpox*cQ|*&Q+#cX->2~uULRIhhqMqIAi%>*c3tk`aBni+b_H5~c`P^>{1TjB<Ut1e
zO0s4AgF3&OMIkUR=bA4qd<`<+NF7cjk=`p#X0zoC=)M))>eMjhTlCip64QRAY0cN^
zzK6YPp)tS0ILpHvs^D5m+I92R`sj+u9Pevy0bU9^!MBp<4HTk|H&NOHrW!qTt>o-6
zxTO47zhzPADCySwYE3hYo4f}<%8bdSv>|tnWg(TS!B1?|fj{vhP>r$&BW=d~72^W7
zKRn?vCA)j^DP1NfS>K;%<FSh+)7u9a=G1SE_*`%JZIMvEa;f0fS6G-L5OC@!j@V0D
z0c4Zs+l#|wX@0LC-vdC^l=$<`2dtCvj@6IgN`+!$Gtbx^Q;S|4^pI!ydv{@?<EQLu
z>?z32uq^N2TKf^uv4-G9U7DVA;;2=TOsnV|?~N-Oxt<`WEsI1gSKn4s%$3WT);G+&
z>w%7^4us)mHDGYf&Yae-*`*2anhm7v!~16Dj#ZvMqh}XB-Ke4=J;b0FYJk0uk1>Xx
zJm7C~L9gYdr9qdN$ms#Bk_&SM^`a5SQbV3ey3RkOdCqR$^fue5lOq#g6lY}Fs$~nT
zG;nU*BbJ5~0FuRgk9g7*rr-@|lCx2MiCo=^r+Hn1{X~#;hZ?|6LV?hYgz+V9RPV%-
zG=>ihe5`@Pp%`@Q01FmY<)X=mVoGxIi$$QmMph}iNw>0B(B3>S;BOQ}H_iP`h>?il
z0;YK9gI#7@Eu#HwKuNnp6*rRZ2^t9OO;e<Y;l+qsWyPxl`VTOIjYk_L)b|Tx{j6|<
z#<}*NHrxt#?T27GfkyRd%qF~vxYuzOV<}7SPp`3+1CpKBwoC1HQy<xN6*3X%A|CHy
zbPk|>P_(V>a60Cu+Sl&w<cPzo?sG45ri0*ZOi<ag8tgfxCGU%vH^NNh!+1)bQuTGY
zpRo>UE;NJ6Mmse>*a}7*&+gjfb1Wz;u6fChL9~LlBBW0UXHYi~>Eo~mU6k!8*1jQ%
zfVQyD1v)T^E6@(Cca9N(M)9|Ej_f9u?lx9DuZ+RC&slw;T9}dRN!zg~Im@kQHJa{l
z%iK?q1hvbiJlTJ^Xh?ouje;zfj>bw$vJU?AxP6dHCo<9+@zq%1M1KFCVk#KFYOE9B
z@i+P1xN;x#NF@~Yu2{qi$xua6KReHYcwajR_IO*;dRLNxe-hJvKNMigt9i!RR5f09
zUR+-&O#qE1J`2C`XelS0$SYN}&9=AWQ&=0gG$|BcoM6YGLBgCN1PY3nC6`g|9T4PZ
z>E7c|-RRTR!HE+y@Vf3?I<=t1=J5Lp?Rt}^g#KAeo&EVg2-^R=GVAw02R{xDmj9c3
zP|3e&Dp)Py+4L`(GX9IE{z=K@KQ^@g=uqMRMpXYOu+ecgvNtn!)3LNM&~y9?svQ0o
znA-X08`HmF%4UNN)$62Y*Z2h=oy~bZjhb$O$@ecK3b-1H=xo|i2U<O!P}*orK;G{D
z=4DetJo#wQ$`3}CDQ<M)!*04Q#l3?@0e{<Az39ZA<&z0@|Jj)Xck7FNMj~k%w~={*
z^fQ~xX1xE&@N3=dkIa+2Qd^BmRnm;643=sfhR1CG{GocbcqhVLlx1}C#Jso-<%tu8
zh(Ma@#nk+6m9rFhi;l6%N=t$U{^1{~xI?A#BcZnCAcr@ApZ7Il?X>=h06m<Mmiv;y
zKhK8#BHAQr_4g%nv6+_;Z&x{6R*6{&tXT^><NMLTI}K22Uwhohqua%)qb~;=b5n=!
z*7nRFphVF!g&G&Xie{zXC0!_<uYvwA#@>ND6n0q>j&|&1$F^<Tw(acLwr$(CZQHhO
zC$rD2x$B;}>pR~&zu{T^bai!Abug`mf?M5~RJ@bqNW^L}#KvKJ{l)xVRQ+74%*Q=!
zvWrADPU6_oUwIQ9<Vaw@mV|QQC+g8%yp_=G;}E`CaO2HzJ{Q;{G_qBjJAUSFqXeKr
zN|JK+cu;au1paQ3T|HH^h&)@?>pTyHedkwjKZM<iY`ZD5$Cz3EJyr<L9HdL&dPMV$
z>MlV3j`i7u{&f>I{9M3v4x60J%<HlBx3@i^)1BTQ^-9ORp@8~e#jH~QeLrQzT{_)y
z#J2`erU&%QQbosEn?9zS)=k}u-)_`Ci<Wb)U-}H#EnCUF*U$W+@FOy#Hl`}RIE$s9
zIDZ31g=)Nf7j*gdWdg4dA%n;GQB&)GY;X<O&kruFZJk(yqh*q*t@k$bAMKyrIIhGG
zj@knU*~UvCRmP8S#N_8M?nnXCYZBpFcZ-ye$O=`}c9}kv-@dnzjfq(Ng=OIz72n-h
zzuD5n%U=%%jF>tx9~ALFzPh=#oA^R#6BlZH0BPbGn1{X~sv?qy8(uz~0~dT$)vC00
zyBBOVUwpB9=Gsr|T1$!HM<F)vmM%nPA%Kb}qGSrVgbw8`imrEF)UOq;5G|MaC1dNW
zsgeEW8xvldsP_=l{DjU$vy`Zk?Os@sHK-~G!T@4^!Q8u+=4zS^GvIr8D8VizZJl$J
z{T9Z(kgRX+Xy`(YC%>=%3|}p0hMYpsZ>vD@=>t|TO-fF)M+eVRB@-393b)OaFCrU|
z<~&sltcZ8yRh+@5W*s*53?>}Fz8I~t>mC{R4>z#SWqMFA#4~9N3>DOjZcFbeuF<vZ
z;=0IrYVOIAyh=!b&s!KLNy`PYkW?3ll|Pio$d?;6uiSfX%-5i1A|bB0Ns^8u5D^a(
zRsjIB3>WV4&76^WP<-5KTS8tb0#UL*$SJK1TS^4dkT(NL6!3ERYlh`tIl8u{q=pK;
zZdSo8#MSxM2Ba{j1<1?}6E?Ot&|Kk94+e*0`J)_G)0<Ml!TuEe%!LPE+z(`19fgbk
zjR$oIb>+{9ZDtRV0UMtYR3yhrG6TpNVIMqio0kKXo;D&<s)Z)zTtAmmprX|49p492
z?jR9LIHzCCFsZ=?tK+pKt7+A6ze?3-b9K8*WCqQC6boWz01%+0SM(04YxcY<NlDRB
zx*$?89GC}~qj;1gCTYU%u@=!3qIP8u<fcAbsdS@CFI}aaADv)TnIz0ND<H~H|M%Ih
zu9Rz*tB!qxL2ZQOL8WeH0$|uRO&380)_|fA3(=Y2C2f1^LBb)Jk)Yu40LdkVg-V^X
zu~ZqxVD4I+Om5q^Rp^<*6Guw0G~m-Q7O27D9OJX(Ay}8Z0-{@G4SzXDkku8d9dD}4
zYwU?(F_&4bS=VtfuqFZ{kK&Wfaj=Hn<wBP978DF}gq{g|0Dx~#iVm=6d4E2P5!VOE
z?}bH|ZTME4E!-}~;$|4+R0NI$3-`U^6^F;;bsB4{D+tKNCD~oBT8l%}ONR!K@HA!`
zr})U@vrrUP{dVO}E4g1ib6%y8KIv^xcG%`5wM2HUX#$0D-R20=u@TMU4Q6c^yEII7
z)=3w3uEj0wlsxF&?A1U}kH9DicH=u=do0y~SD2xW6%$F92iD@v*AZ@|)1%NNC!^Uc
zq*C3buIFRb8~tU%ipq$#I*;wW`7G4;*L&NoH?rD0%Y>Iq?z6Z(W9jJLNI8<4;Wx)1
zP5~9=6+PggbTuIxOLLlQTqK|^T#S<r%;Clo<2rbqkB`}n)MiyR>;ucIEo;v3RSJa+
zIZ|f5%cUFadm#>0a_75TYU&azzR0f4k4Ij!|HHfR(=(S6=mU*XjMge8))5al^e9uS
zl7=TVbDeB63wx@_{|SPR`{VUo!8H`@gYGsCtF3dbR(Op+*tBHX-8P@N9jOnjTK%Xe
z*fI*ZbH5(2231?smQgHwjtg@`R!X$h5>jGk61x$&6M4h4GkNF}yfBma1Xt@~yAEAS
zV-88uQ~8`k-T&vv70cwbH>kxCETLx?^&qbNM@K6=2q6$O6F_?22~jGGEPQX4I7dVc
zT_YrvJLHMSmNHsGleEPEahi{J#_^sR+91$&uQR_#eErlwCx{bim~_O@@!-*I#auOy
z_LOO}2!-yRdj}iV8wCngcJLEhRWMS~X?n)^3I--tC3`GY!6M0?%%bYrduR8eh!oZ%
z8$}T)rkvU;&W;mjV(;-;g3lE2y84i3C+ht73)oIK-dY!~l9w~!%n2;Wdc&<iN96#f
zwzf}On&;=2OsIUDcl|NX!~N3Q+S*w~!@~;K){58NdNS7@45d`~@|<e8*7htYsSQ($
zq`<%;Q7j-vRs@p{e#--SPyEQ^Eg210Ke2!}Ii)zaZ#%vM!E3-TO0CYtgwI6EMsZ=)
zykmPLD<LSU&R@F2bU^r62sZeC%sJ4bOj{1#P4>sfNea1O4|WN3n5ez_Gjxo$Yqo3x
z`b-+mM3pa6p1t9pp$)LUCTr}kYg<dg|9w^UFJyxurZ=DT*R6{FmtCj%&rs>Vkd1?}
zgM+TMla+z7{XgOv6=|CT7Wl3QRp{oF!qM?Dl+(N^P`XZ$72g$DDx0}X=yVLtO^JLy
z1-nh%ojjqjdP0vRE4W}Q``6>CjFFg_ws5o$G{Tr`J(f=f6DsJEin;rmBz{8`^|)&J
zo!+@zIrZRv=a}kd31QP>CX-fW75fNM1TFAMS%iu{8a`eJ9NOgN%y>1IsN(tAm$BR=
z^74IVAXNHl7UB3_4>`*TV^C{>a_Dh(x@1lBO5|b$X3z8~+yU`Xv`-?&IAnzWu5o%s
z67*TpP+T(#`85=d#GZS@+lE@&l^&O0?sgxd$^PB=okjLB%F34RV9&%4?FZZ_ZQd{B
zj$5qt_L4EZ>-=8ztkoPa)zpvXSkWj6BS%I&7n|9tE4gzh9E^Hnf%&sU2|*T!i^VKu
zfDDxpv1!6tcY)Y#tZaZaQBIND0!><)ky^|FM@)gKrg33!JE!+_abltb%5&_y<xi$_
zQ0J}mGAZ16M;fH_gJ^Xe+8w1hW9!pxY6w^a*jydZH&@?=80d>L$Syc9K8dFvZQl_B
zsIwDQOBEndLHJb`%YYeJ;&7epRxlc?;+O-E+ei65l)O$)6HmYw0!g5O6bviS*5Ki0
zzv$Qvwq<4o^n|n}J&ThttL9B!eCK^>zg?WZU5MGA4&J517t<`|)x`U#%@uHU`BO6X
z;A$JjEC&uXj>gBDw?9zOOblhp3yOb@_XnRx%D^SE+L=#};u;8ILc~(><!vdgZ?y?s
z1oySq+Lp?g%y7ja2>tR`-ZclUjhx%{Lw*r>mE1zmi{?vtlT_@q@88?~sRjab#!wUv
z*0V&;jMSzPdy9~YczmQM_~BoTgS!*PLmbF$lSer?S{Z`=#**oYJ~I|b>MI@<YRlqI
zLQD-L8!w=U_t*R*WW6Pp*r??K05@WYCNscpxZvTw+luYB&?Rr9#;heiFXd*e<uHD=
z2}`i0W%PTGf{O5bvEc1s!Qg)6gxHWU>85FO7=>qZd%Nq$*5jq(0&nu{OxX6ebcxjf
zcA$S)A_E}!u~M`37buF_`v3$>l7F^^61#e&yMZRSIP))6>)R|iPZw+et}=i3dfF>~
zZUW8OzS=m5<f>6CH{&uUS)v&b71A`|J2V{r+e&X^d&rrW$qHQpY0`o_Dy$W3`tn(j
z-*Xp=lJ^Y_fL8$4;$5rjo1ZLbm(Cr%JzT&=Eddr&y(<WVEYdhyn8NyNJ^xJ-|Eu^3
zD^!p|zyJW&5&q+9?Z3tvdt-g0f2w#dHF<}PRs`>n8onC1CTpX$?u*TVrMbxcQq`$f
zs+dA1X<aUO2#Hd1|6hER=QTGiP;!NZnWph!(f|=#Ha%a?ad1sjL9ew-6g>&D2|FbM
zR4FmEussu&V?UK}{2uCT9SMK&ehTX<9;2o*2h_02$ihU8?8C{?AM(J@hO+wlv8K+J
zrs_^wn_HJgY{M}n{$^IKxFXy-rbL_N!}}2@MQAtCrAtsBPK|FSZ5}F<nToZ~GKU)r
zya2{qs@2nz5syramn|4gYOg9rMKtM)R&%Li>MC$86|<0;SADK?zSNrHP<<6KkkT&I
zYr4cP$(LfPy2iS`(p-;N*FT^*;JNTgFbYYI`*=?+?M!J9NBqm{zn8C={3vj5#w>vD
z&rkZ)G)VVFlZ@MsZ3rPmM>jMER7-v~%y7A^o!;A>2y`&=O)a-Nh}o3iG}yK0uG|i!
znh*jdXmN~2>!RYc^o^@p&Zky~#Wf#Wjxf?DyBdFYEGV@(9|1lej;vvwer<6KceoT?
zvWuzT!}QO;#l95%xx~OFvM!8pB9=0?&1L!_JgJ(L5OmgCw|oHwaAsLKEV)DUSx&#6
zu_}U?kxC*SLdAdNXk6`n^_3zHH10s7m$3w{Tke%=une-Z4WEpIE9c;!DC)e*3S$wT
zQ_=!2K(fBB@(2nUCyWn8Piq5Ik8Pi9-xTe1_?-x%^{AY|ddZR`#(B839Y`JDrMNR$
zy;hVk4~#1@vqf8jYm8v%{*m^lXA4HeUI%~eqpG@4BH6dr)K|WxqkWOzP}Bq8fmAS6
z2-`I5;dY;5C5>}2lT-PKVB`EUiAMPA6vm$ynhgNe?trde#V@Ee{Pcz?iS$=s46=8b
zCw$~NdBdp%E~1N}JOkwRVfzqF2%H!%mbp3&#|Ol=gwI9&^4bZc#5%zApD9q8go?P)
z*Y0JhXELlR;1uQ<C`?sx8Hg>HcAvp;{XV%B8hI7zN9ybL#xQsmOl(S0eOcsYVO04^
zJ>H5&$LtkC5Ab|L6ycO>-pG-&^>)6X!Kbsn32{C&9upX5WVwLuCvxpg3uz|*+oM6z
zF6qrk<AnoGF)0l($X>)n`*xMJ3fK{c#zmwQGE!SPowGU6NDo&WI(>Z@<_+`5Iv7{m
z{xXKOD<}VHB_c)DJF6sL9BRGD19tHO@2FPx%r^*x!UHpsqA8s_V^4_Is@8MxT72)Z
z^^Uzq`M{1ylv#luVt1sQB4=3MRVquYhJ@HkLDgeYjS3z95(VS*cJk-cKM~+uPL%c*
z?P`;#w7Mj+6)8iG_hF0!$)f&6O&5UTD4`(J$wkwg?+JN3CppEm2{RS!mz5~G#`5LT
z5(e>mAxk}KR^qMder0?+qP6u)Pn=}s^BaNrY{>&@S(7Zr(-en(p|r4NnM};J-LK#l
z4B*pB(u?UjteJ7<`9dHx<dWf*0jX@nSV~agV$4s)<03g@Se!m|?S<lpoa(#JK6UrT
z^qSHmTH3Ml%J_&43#eZ?u@%&VhS~%t5?bSUCGm9=N&&vDK2Ce@ymqV-+>Ofc6pIwk
zW}|^J0@K6F2x2YB#^U7|U>2xg`IoCVoR>o`wJ~3`R=n7>)A#K0x}!0}58C;%@MqLX
zZ?W-RMLRHXfxA>uzXZW)*>WY*YeA_qFmsBbEX?!80-&Z;f;r$`V>873zMI4c5+nuH
z(^bcT=c-gd*JY^X=u|GiX&o75GM1m(^MXXhPfq_R<gtyD70N!7g$aZ?657_{E6<7}
z&xV;H55XH)3i2W@dPYw%Jr%GTOLY4iuy9I+X4V~MP{^{=PLDQ3r^#aQvEn4~AtnWZ
zR$Qs^>r!^1a-m`ox27zowpd?&GpKV-WqbcsQS)N9%Pi6tv);!UEX2(=w^n91SJP0^
zEGu6UksDVD+a<EqlrC--ugQa5dIqg}>2Qtt$l&lUDEgUc@nK(O16@e^n(nG;_zam#
z5?<=w0ZZ7Bmb_%pCAZvts-x!OQ#2jqlZ%>5%4$koHlHj=(n8g`403bJ3%yuiHtBqR
zczgcrVbiJ!#biUr*jg^cSG}MdBB`76Pvy0mX@rq9)(mBGC<_mGv?Axkx#H!y$=b-$
zzq!Wfj*v1VypYWR&fs^oO|fN&Gs`QZH;9dG+SbWw>Ri;8pm<Iw_C9UJ{v4e>zegJ!
z?mh4oF(K+&5q>3O!kR4ef!Fh8yK}SIP3T3!`rOr<ig>CS>Yd>%ER<z((VXmie3`g@
zgQ9=)w^*^xyC@m@Sl(={U7zb@-E`#zr^GLM-*1o{I_o|~#YZLFtVX2hb{Jbx>8=ic
z(fNG0r+z)hB*DWq^XPGHgT5_XU0prNwz%}zj-(!#xFd3Le&D*2kismE&aFZ&qB{0Y
z1RaABPFci|Ec`Ynj(}s#Z;~4(b`!?+5ySN1GmKAEN)HeH((BNZr-CkIoYE%YE{Y`R
z$9hZsLj<Mud68R-{s7#MaK_%7jAIJ7P;%7hMc_KANtc8P$1Jiz;H}UH0?-VT_uR9+
zdHM1o|Bjm!=aiA*dQ37zzaFeT_LC6D%>VhnxzPU(kfKRgffx82R`CM|0KoAN0AE&G
zPFLT^NY~KD%GUlb(*M^k*vi<^%;q0kf0gQv&B5Q+f1*p@+PxYwSa%c7qm=+)z3gGR
zXbIN5;QWC&i)d9BCyp&Xl=5-$0Yl7Quj<haq>Z;4h&4T9(~Z9Mo8|XDjUof~oad(-
z!Jq}Rhqs!iw`a2Xd*-UwUgFDo`bigLnsm)6S*>E8V6Sdi^Wg2;=-;UGq792?nKByg
z{d5NNd9AwBDfeaqEB|$NbR`LDH;cmzHWl6Dh>;~nVvsNK3?f=Z;g)8(;g3&H-hfLS
zRXGt<gR45|4-8`-+2tG*+|v)Eou7)_CHK$Umy@9poq__{9o=!Mo4>9pT+-!NK5>$*
zvjPhBuJiUbU*XbyQ&JjLx6kCt*IYgBJ*_X~zlX?&4vePl4@S%rv1`tfgL|Tb3-Et3
zAPin;R*J%bIFiJlo>QOT5|#$+-&?b3j#2p+FOX=sf~1_3;=i3UE^p3q1xeHdO2$FD
zmd5u)N?wrvc&1qjS+@}B7EK?K+{_<=HBL98%By&+A2|~~d`3MZt_{M~Ha11u4#y$s
z0r~EA#XL9p5pyL7$6XNVKo24pB@D0fVG8R6mG+`i_{E4P^*r@}o67GU^HM-~;|&Ts
zK8}^iaik_621w}`*xEw>*maJu35#a_vH4~S;1?WcznG?4o^@~O!+0y5+tvod+Rpi?
zUSMSAo5Gc6V16vmj2R311i~Ier^pPxDLpfz!+`z)_<kQ$H4lQ3^Jiozfd>R=(r$xD
zgLagYnJZp&W9uH@sRl<TgoJv7k^6fG5=Rf1jKv08-pUzOJfAmL_Bj_`Bj|VT)GBb&
za4AUqd{>`thmAo^KNkEHb(t=@N;>vDzoajd0CW>_SvwDB;CaC?U{zxNn$^Mr)q7@Z
z3&HAk%-09n;u>{mObzH`T$Xvf?hzM11>553PcxG^Q>w<VgyarAR@WTFh$oQ6c9HwE
z1VE((i4=tzpwEjKui;AW#o1DFPLU;bEI@<}UsK)m;;GWQ+Rs<Hw)iFW<LQd^tEwuw
zMh?L9#(|;%ZGGv=1J0;d%KJGY06*UZL<5rC&tZ`uTi=dLydAXUkuryU?gn6sPk#kW
z3gkpsGYoQ)^IycJNJIR-(Fk~ANT=_`>#30_8+;e7PpFD8v&PjC_5p$vT|fzd<(!Tn
zE#CQ94H~RSJZ{s#VjdN%H8L1sc6Q8M4uTQxa2QgFz(AK=#jv$#745&slVkw#3>^ZM
z<1M)kDaKHn$>)w(RtJxjX_vvxIcFnw+xFvoqTdP9ff3tW|B%Kvi$2Sg;R<NWlMOh=
zsxThj)0G3BCK-Ab6;-735B(Z6z5lhxou<`O>e{Y~wk7h>b&|pbNJQMuw^d-MdNT`@
zYk}d3tI!7o$-|Zvn4rediqwPeFy8dg6{qvD@Mpz)B=O2vjDZ6?gJ-=|ys9i}6Ofb#
z9D9~NL}rjKO3oCY$kUB`pqkAn{3{A4lLf29z)~_{xSFT9*t)i+9>1IapqmQvf-QDO
za?;U*%12v#Iq0xKsd9?mu5Fv`_yo<6MAy(wcyQdN6_|k|+`jUVll0r6GgJ12Hvk2d
zM84`0tm?DH)bP)V>j;<2CA_oHALRJ8*otrIB2``TJ_6O1O(6bA86{9khyaI@`Su-Q
zEZU`m@EA3#QcL(!VaXdnYSN36qs(vmY;O8B-D^COJPYE`<mP0|Ootze2L-pwT$g0}
zchk@Ofc1qQo12g&WcF&UQk!_aTGePKg#rh160GQJd_}dmRgF!T(-eiIP3^`d-zsWK
zE_PyWTC08QfT(ky^?m|kCJ!~q#TI9pyPxegno2ueTHTZ<?U?oT^q9i2z~P1^0X^AL
z)qsPok~51gHE(nE?=0<0Jno{A7?|MoF>CtMX>dj;-P-Aw*8OnMNT*YCzX$!hS7Y|C
zw*`$*FwIW(t_h$oI;`kwAGGLi#FyaXvx0_B?}gUD4zBzWvlL?9+eW20R`ok6(pQc^
zWw}IqQ)Gmi(vgszCI21$lLFf2$l4Q<ek_!wdyqc{Rgy{w9nk|5O-2fAu*({vRe-vP
zuOgw0n2V9NLR*#c3xD2ye_PKp)wUD`lq)gnTaUY|5~0ftQU&(^I6646VSzr4T=%wb
zNk1JIM;pclc}-8eYAb-=>Hgo7=}X7B>(*b<=MvOEPNpvU){g%)nKr3d{Y&)uJ^feo
z**z$1KzhZZr;XSv9<-cciJsiRk^>@<PtDR;8n1->^RXpQ+pLI+E_W%271qwV?eMZW
zp<Ko|Ty5Xi0F@fW`zum-j;Y#hPbSYJ9O}wmz4Ao{n&Pr+S%jnR<@<5t4YzLoJ&!`x
zBY?hTgJ3J+{^m|Ks~7!r&`#agX%ixLNFoEqMFF)oQ-pBQcZ|%a9eFtCnMU-b!4^lF
zV0af*y|8>7L@QrSzY1e-hpuN>w%+!uinNTT(kEzzjPCW})*<AHm>#lMl7WYU7UC-C
zoLC;W=7&g#|4XM9YW)MRU0dpSLY!@*=)(v=q;(wmSq$+OLW`!8KFjlWSwMy)lRLN3
zpRf}&Mtx_VP7y<L)o~zJpg+}7l9Z+%j77~VBoa)lYtII8bw(W%3wo`DCauu<z^X$?
zJEK6#V_5sB#k=RB2kuXkH~3PS##2GJqsqh@q(>qY(bwimyV1xcDUN#@t!iimQ)3%|
z{auuap70~xSpr!TOkmZOp!~($ES=eI=&veakP(5O^!+O1%&e@FsOWgFpeXZju6J0=
z5_ilCLF=&kX}I~DN~vZNe!Yy1p#rhsrBoV4si;I{xwN>Y;ZkTSr~6d$9A3Flb=|@6
zuA*^lX+&+q{FUINZgJ#|!9VF6vz-GNwyBNd@!xZ1ZuU%iA4CKE@nP6W0t4m8nvy1A
z&GQ_7h1Eq9Ycx8%QW7Hx!nK{6le;;0kI}CJDK(7>?Id7u4%r623*%^=paDgSp3iyf
zZqKk&=c0vAHLt!wop(F2;kcv?aNBIdA{x+eMw@m9u<o+VG2H<ySAfjnd)+}Z5o7i<
zK*FmRhA$VT=}HwzbT9}VW-h_p{K5(RO~QJY$M+_PIsyBdi*b%lB%fDh+ldl*PGWu~
z)dH}wU`pBCsKI|OEt8O=L0Tqck+^mJ`wS3h_Gb>(<_#fWXQ}<~JYudBu6>=r$q;K9
z+#jF;KEVM#egI=Tz`lL*oVj2IdTx%bEH5HR64Gjdwkw1Ru`DAkl2VG|%?U-PiMYG~
zDB)k0b=^8X5f3agDZ(Nn6!mXO`O(-%2pZtjP++vh($4=xaqpGHUIDTLunot#Va|-W
z$lqqy(YMP06SB6?CT$67+8+?<bYI=EEa^JzEQtBOPrwu4uTFC=nu*R*G<0+9k@C5k
z#<cQ69rW~PG!Mc7%(BF}M<kXH#-IsyyNumiAzJKVY8L$6W#5TLBl#99XoeLnL&{Xb
z&uWE7tqsw<B>Y_I-2%}$13*Uu5<-JSkJe{ce}OW%HrrrhF?9^>zD@_7%rw&&VG!Sp
zCeKEBwdMknV4Ri>Pn$`m1F!16yYXF3r%A}UaM}cWQ&+7r?~;M*aYYFPNA^DDqDL%9
zLQA~7dS!BKZP<GEq<X%#8eOWSXcDfp1+bo+pqkoD(|W%!(hd$qzaMOx^#nvxhI9lC
zN$Fvr6zb{YSJK7!yI(66w}Km7d)3_aazK^8fsi`BmjCt)Vh{4r?hCfz_KKxt^M-$v
zAfO&pq>vE3y#0;u76-|j-+8nwV(B+5*)eaAOxsdPoYcaUwF%llb{cBpWIU@BtT;1T
zXn}$Xys3}ua3b+x%~XEjzIxpxXti7*V!F7Gc5Ho+Qb)Pju=+nZJ@GhM(%ip4=jmTL
z#Q#Sc=zmESWaWfq{zdAWTbn!T{w4YT=?9(qcQ(J(HnULsQa=M`*C;9qu;#bgI1u}<
zMxl{QiTv>xw(l1&!7*HMt(RFzI8dYT%(TC02?gCu#qj$R3S;~J#RE5l`0*WcOwyz=
z?aSYDZSgYX=1Nh-9OO@#sz%!II1U}woo5I)i}i~#?pEhkt&jTYn?(mo;P1jKZs?H0
zDWG}q`_Mgo_mDM?S7%n^3BF6RxVYSD!yP<F#m*ht2WM;^QljcC+1`?8swJH(PYD-a
zbyJ^CiQALIE^BOQkax^#oyF^`63O7Df2baI_^KSkn(CR_9>cSXmPpw2lNkGs$KxIk
zI~%hF1iiz2lx@3ZX(qGYDNEN=E_kMXQ&%ed!q?ToC@H0@NS_1}P2^*tymIFo$e-0h
zny(s5lbF-Nsc1GHWQzv?JfY5=*W$Q36>0%AUP$Dy+0$=>ELthKl2LwqM<94^`+C)S
zuAT;^L)aX&)rO_Pf`$!5<DmIcS06#A0YwdXppK%}?aP3Cdk8g}z`=QD5NU2iWk%%a
z6}A-XvOQYwnL{k7%~jM?h9+A|qA3zK`g8ey5b2uLD7OJG*6E@Zs@b4G);+V^YeBpM
zy=jhXz#v*tR34M0Kvq(fnGzlubySfr3k6@SW3;5l4jKwmDea|E8YBc2Z7|;ZK(OdW
zIo9GZTcEY9Wn^mxYkDt<W#ey!R}8oXz@S06f6gLRXaXFtwvJ$*Wz@o%WWzKwAeM#@
zGDEa5Hn5FeqNFr(c(2@cwUMynp}HZ!_r|0&ZeZ&=nH1F9;=cCBe$a~(zzdJT8i}uh
zCpzF>K-gU1Tdgu$ZqvuqK=1y;E1f<m6V_-tZ>Gy`3}(~3z#IR98C_+p!~Vby%!n+y
znszOxx-?Ej1rlJ4nPLU1N==eOSHM^8*6t7N8gyF`1aY{$fhe2O9WdOl3|*qokM0#l
zF;s!cs_d3v+fMW-Pk*`L+o)+HvS+WZ2(tG42O4}ZAsOhK@Ti6g4@GFG_z~-Z@flm~
zfU^7;*I6Cq8ZY;BE}8hf6;U0r26WA4cylw1SHF$7Ur8b;nN>~0(hA1ZwVX4s*RE=K
z57lB<LRMUxwuFApUVP$NhNa37+kG?BF&oo%E^wiSMPCdg)&-##6RKp}0<9LN(8#Bx
zT2yn|u)aPqp0Bz93CKT~wGL@No<CK-yE@;8notdOZK*FO1zF)<iiTh0JuOG-$^3wv
zMRe(eB*58_M@7*KtJ<Fp^3J>&^D%pe-ighO?vq+o_k98js9Yj6hwPS!b~A52e}-rr
zIWXpI<4N{&OszUzoHI?vF7v2&`L?qZ5B&SJ{6V`u@WNisY3`)$U+6G>I;H|!>8IAu
zONvT%rfGTPBe${J8;)f|eer6G>T+#Dlc!v33ec@RKd?Sn=GeP?VrduWq+bXUuP8b8
zhTyh_;kcRh`vP6n?>qBMx2y{6cFIz;m@m6;Wwm@Y>akkx&kY<ATF*?PgYQVCV2Nrw
zmo3=ljXZ(VMHZ`?b|96^aDv=Ijq>Q{1HOu0qCPyG|DMtT-8wn!T`g&No>UJptbJ5=
z8)7={i|F|`1Kz(D8v}>zF;st{BRUQM0OvoD9{)!H@A${T*ws<j(cIATuO8mg*iF~a
z;GaIlE_F*AOjeYyY2CgnAni4|LpJjT;e9k)>?VX<w&0_}D-<Zd^gJT#<E8=hwRM&s
zubD2Q6aA=<ULZ=mIwqo<gH6^Gr??S;&TWg|IpY-(E{gal5pVbR&m%=kOZ5_!-6Ob2
zUi~$)?mdwz_hEzaN(>6(^$K&OZPSum^~;B8j+(~u#|YeGEHF<)vZ^;Vs0~5z_cbID
z@f^$dRJ4vJR`x(5B?(vT%kf+rqdN)uhpb|mQRN?XvEPRE64B8GO9)r7BhFM8lj+jM
zhUiwx<Y%tM3SSRr5kAc&>#{yAYhPSnu3erkcL(;*cI-JiUOperw`f=Gnc6*B+qFs~
zL<ycB*ZcEdoA);H(x!8Ba}}TotP4X&Q<v|~&)?@Sez@2Ox6L7*S;D{jcsL_ePX2^e
zjqeBA-e?Zq8#FC}q($CW0(oIM0A$M^=J$9}8FsM*296C*xuodwejQ`hpHKJxp$H(*
zL)K@nC2y))@DB=8%2OesU((sOaw@~t)V_8km(n2OSW+)?t*B#|pv3xiv67Ihuur1^
z2=b|)t<qG#TtQ;5Fv=$OC<`Z`Ux)nDlSPXsE5+3tb{6+>nLWW%5eDA^e?WhFEfqhS
zq#1$*k{sOWf$oO@ZOWjT1``+>W(Z94IDzxd;~S*taRs^S{}4%dz;|!$6n{uCMBikm
zp-)O};1G9EDN3t*K%R`Do@b+EA%>5yTUIg8C&odZZ?CKLR;)C%EL1N?oY^^F<h1H2
zH)Nvd&V@~MgAjmB9j2ZHiLo*(di~Ij1pt+Z=Q(E}xt&@<o(zr>1F$)vVtf@%M_HCn
zMr-&=90&g0IBPwjI=?)Jl3!MC>9iLO<jXO^bcBQ$gRC%L92<p%z;{mBqgW(g0U}|f
zF_Mf{-3SiQi&()O;8nWiH!{fpfGtQcOUCSrKP}Tr-yKig<x|*HReOk4w{_$t(8vQQ
zVZ|mz^ifENfM2=VkrvslDj$UFR*VauQM-iYM<1Hx*0ly}$&|b<rzh4#-qc)$Ap;Up
z&ze5A`&b4g>6%hDYEOKU;RI8;W(U~4RW93p5C%!N!;J@e+P#EVf(yLPu}=ru5BC;Q
z#lg98|5D|zSkpKiI3{JRWI)BT&7S}k<}7~U$#kgk64)QAWm%HIE%XL^?r79#6@749
zrGYfq*1Wb;4&Makj0KDi$XHfBFXkLO4wfgOReK%_vOJC#GwTgc&RjR6?cAw|qBcU3
zZ^VEy0KhFKTKRDay>y^OpzM!%%j>j#FrXTEyYy1n;WQ_-_#xEhEEr&KOtH<&S>W#~
z^EBr7g-dN>Y7#;kNOfh3F3lgks1iN=r?Fkxc|+Zh^ZjxEEMZDk*H$~oP|;*xLKcLq
zcdS3$6Q)Tff7mEV9TP+>7tqZpzX8Vfwr&3BzIKKu*k+WGCd$6q&VW%t4Df}dN^yN7
z{{8tfcQA)gQ0XtN0A!G|{o72glM6<PM#~uhE7)0K-Aad)9vv<?#N91CGI4Qz#2rp#
zPyf+Wz=*}#N6b4E(iFCkjX_zOJ0-J0VIdOf0D3X`-TU!#G-tb*!rfMd#dPR1GN8;u
zA`}+~BpeQ&6COW?ooUw^OT!U6otr8}R#3?{4t)9oGlOp!cqx&`Ko>%-yUMk+B#km7
zuD<G{4MY%h|1lrYsK#~1JQz0N=ZIMuX>KeE|6n|i!wufdPZ?at-lC7ZCGNRp!VzzA
z=c!i}$jLuS-!Uq{5CM1Ib5JwLh4h53Jcx~6>}J|;`&1tcGOS%ww_}=hm#@JIj(`TB
z5L{pYPwkwda4bM7yvoW$ENj}&rb$LVCC&5L2wKIU^;BwyehIY8*FkVPI3v9Sy*60Z
z*`DePRRNFquDE-PV=;^{#3dp09Tw9b(>;2ZHy16zPk{(k2~Ro9N!vcjx`c$(8ArJ3
z24R_9W0+IpjG<{dO|goBs%uayu7EsNcQ1lJDE^0y(?=vfz4`F*^XYE>;zDTi3Ykn5
z{9Ys>t{d5youCra9o6oSm`!hI35tR5#Xxg_&;=UqSI(HBs(ZSW#yNp}DoZeMT&+RN
z?QVmWaV_;)gXNB>6oshD#cW#mNy14b>PW7qGt(KK`}>bj<G{-qoo=oa^{*&-Vc7Ch
z&#qw7E~d2%c|5Qa_Fh+kC~d|W+eQ$--Nv--Lou8rNkqY~=2IgqCGr&DRtT9}ssa>x
z+q22gG7-{P^o(fCZIWghdB==w9VQ;9ARoH=j^dGJm~nwqDfMGODS86B;54qlWULY@
z2MazO#eOqd@$DTMRJ3Kd5uH{`bzvvt4ECAhtjy~SPi+NLK`EgCYS<C>r!1abdiY|q
z`Zx|q-ey4-v;hJe2So?5h<G$(=xIVfx~LQD!1KrFb*EoAdb~-&93k^%AQy}1S8J(E
zcA`>!9EV=$(wUASo{O;5bW{2SkqnEk)dOsE%H9<QB^>sh4uC6$z%J+ZW;7Z>e=TuB
zGG(>(E5@x*YYvW1GR5O6T-pZqWoT+iSAs$yJwa`uz`raixt-RP%b9agvaGU?B-_bG
z#TuHWo0+ko1+C-{i#puf6pb(0L_G?{DUmy56rSRwf4?!io0Exd>4js13X+c<Lbk6T
zkvz}agGna|-7>U=SgNj|@r=&Uwl_kE=8Km&o{>4*fFjRafui-bAd(Fwp)sr!mC=dL
zq5V>vkG#BGT}q;b$@cmZFsKBF(pui~isJHmcG0;v3t&INrBJnwb<rxtx`pV$WpXSO
zJOBOOB#YnFsHAnjg3hinW0|Wy^4P~Mb|#KAv4Bgvtvy4YY4fO203<w0*v09aBJiCz
zF-osp0aK0B1r!Fs1LQ+4F*`RWy=(aKGdgq>&}7(v`O`)z7J47iGaN`P`Y85IAR9d(
zwUd^7bSHk&pWwWsrPZZ=AIJn5>2a_S$7N9(5@Vy0o!L!5L(;%3jATmBOZc?viIRnD
zbhHxRAgHo8avB=8igo6>A#}h~(}qht(9)s^)<4k$-zEqs?lR){78C*C72~>l0snp0
zzJxOu9T>TlgJjEKo921TZY|zI?c%{Kz$$-;A&9yF+(;(YNNiIOzyw7j*zdrKyx8%j
zuYl$ct^JUS415hp$2|yv^o}8~Drz>*HX07YCxLszB&*A<_CXcgQ^FAy{zVozp4!UI
z?xHKJJKN;Z;iAX$9WNM&0**_BCuGRPfiY15_s~YVjA!aBs$J)fG?PNJ`pVavLS#F5
zrGhUD+U`}>Ib1R|Frz>y%66G<ZB56J1y?=S7Yi0Y?=?>sgjGlG{k0T!EbS7!d}sZL
z$-gnsgPQgevFxSDmCE!}NPg&7UeFy(SaX2n#@LnqUE7(}l`)Q=ggwb6V$g8$r@iVf
zc*oPJ7_|E9bUlMoEk_6kx)tmjyS3AOFa?gApYB!qsy%JnyR|JIm-ZO9)VJ*`S>v$N
z+z_`TLcUOWX}NF6k%IO(;zeNcEC@d8(lGK)>9zFK4dk^BJmzgK-X`JT8d6!}_lRJK
z7DAJA+R~XsN`T}b9G)URmzp(^db;bGjqql5?&#6SMUJ(}PEXhGeFoa+qP0JiZ<l9h
zs<O8`5!<(}+Q&ch^2D?jYB8d!Xcxh-YHkH@&ROnrZDEcgTP9g|9=_YJW0Lkla6Pw}
zJ#6V>Z%7K<PWDU*fVg`)`?;io?U9cBhV)&`{5B#tv+J5zvIB~zk6nxDzdiOc(2JRJ
zv}I~g7H&1hj-4PB=*N}KXI<VjJ(U6btdxI0AB~M|ZEX$q*k&Cb9S>%)-?>XQE2qyY
zPgzdV?f(y!g8BY35ALt*@a-1>0L6a>=td0Yy8mJ+6onNP#bssw36EPT$^R=d!~3O%
z%?U1m0;X|+#LAMAKG{kP9Z#U;83O$TPbUg{4L0)YJxefm_8EUPbH-)IWyf?Uk;L?}
zm@iwmzxIVupQ<OmflAU;J>EEAjt<Bz2^VY^C~(fQ5huF9<Qps~B#5~pnss&}I7P3n
z@l?*^x@azhXKlciX&MyW@K(ekuN-S{J+U-P5&M0AKe;(NB8L}viDT{WX+_^dE~WLc
zqG2qdK5DB(W03JvVzNa^-9}!<*mYi0M-A!o(<BZ@N4Ou$_$ShUyTp3*3=|=Flq3|t
z`~a*Vd=9M>-*)wGhLTh-M&}fK2%YF`$)jF;0e9@t?VcO&KV6nP!;xKFSGx#x&`Prw
z)qLV#Vm~Ou)#u{CIT_;tw6PQ%s098IKxy&QqP66516YEFW!MnnLS@N-1$D#gIoqsR
z+wBXG^q9=-C7}fK?qgQfWayJXMEZ@be3Hm<gJn!bl@zK0`7nlY=vB=iz!aiitn;Wf
zk0C0lMtA~uz#jT>NM<OLA{q1CoJ-Mg2Ga3oTSnkL?q}NZU34xL(qvx7;%u-*Wnhp@
zp|f%a!MAork>FF&;te7~Xn}u+l0jE~AQhC0f`JaEuGN%;>N9@kXQNq-cpu?`eMuvK
zFm{3Dq}Jlb;1!-3HyWI<d4~-iznY}v9}7JFukkCwApP#AQ-f#DQ=dPu{-seN%&H7A
zyAw_?&%Z3BugT_Eim+xmR$(4W<W0qax|lHOlXVuTVXvb`r$j?dp(4~q)@Wqnr+~oU
z?;41`47zuCx<NuvzUE%_8D75)$JKTcH7QeqLMp6Z?)S?*-T+S-`a`$lc9ZIuoBZ69
zXd|8I9~1q>*>?2=4C^j1JScv3aSGMXyUl)=`mbB@Q-aK-4>mYM-|A7Q-C1!n+0#}~
zx5kEpd{EXt>M!?KN)Wr%`dnSf6_(8@f!AlSYkRiWB<fhFZH_6ZN`QSCr4r8$W|mPU
zjh_K&ve#Ikk78^tltSJ}zLYJj{b8|th#VfK;p||{3KrFRO@h1`iz?;%_}`%%|1AXQ
zZxXS!{abR}e|=2<Bn0?BGqJ6MrLN&0b7Skj2J!!C3I7i+rX^)*8w_#yu9q4zV_LmE
zKOqTNb+9n_Mt*%jK%FYt(lqi^ofpTLci_pMo%3w;UKYFQIwSS#YWJt}rHX9YqG_~`
zc*2?O0ms{y(7Gf0dYtNSZB56Ed7f%Ta=A9A@uJP!$2wsAUD6a=C`aIjBe+uQ+&1>#
z>O4}W4@a(JXrK5>6kfr$C6Y?Z<1}9+ZaLM@8b-HJBvtP?)(S6+`f@+6#zQjtp#I}6
z*6F9t;31ghvwljHl8g4%yCfyG4)#tY4CREIbq`pTyRsL@7S!_EW$H&rYm{Yqzs4<E
zemYNYqP8jOdz5uc$bB%WLn7`xnX{$QF_}zujmd?_vt}V7WtAigUX;*Z$4G0RD53yE
zv<lh5F>B}yL$H3gVqwy?*OfBlIo~;=$@=WtJqj5u!RGN<vVS>ofT}ThFhLknzLz`}
zFQV|<P>!lDL1f)iNl0l!Lu6YE0aY`gz)A+RBp2c{<J_S!aQT^RGgX=qKvD{&H`3-!
zwhg5ZmRbB6lD8JKBwN*e@0n_JTM)VeQQ^I?CVfuIzVt7Uld~Uyax~k$z)maQ$=mbn
z%Gj1A`O@T|4&0Ak_aYI!#c0qc%Qy&Hrri@z8{BxkV##I#_rd@nguBv`DWUyZB~=Sa
z#_|It?B>5HB5YdyZ9%HB1kEZmVvZqC8hKUEA^zNMdv(le(Vgi|H6UXg|KP!)8FiYK
zVSx(Y>On2S`0Hyk=oc^Ox|5A*?~s{OPijAJz?c_+PHaJ>KX*!Ys&y0%&C5Zch|oZF
zKK?d8u1uYVgja12dPW?*SNeQ8-^C@;Re=I6x2&it_D=MK+{Eg+U=21(1xl)voVYkg
z+9;a^QvtFAygnFA?9(io)n!`KR8xw27GM|1a9`COd+liT^>Q+l`HTgO=|jlSYt0Si
zaBw>pM%@Iq=jjvAmiKAb4>GHv$WGR+=XBIJE!BH(N2VGPT`VFBeqTROK?d+inAjPo
za8&{qlaPxaUInFD(1456E~f^c>nsnf(pl}E9|v>YZ$!Wx1uAWLvZY^Lky=IIVEh=M
zu^0s+Vr@WOcA5TXb%oBUr8)zlOz3c;3rFDRj1^t@rBZ69gTta>V#e32hcqtLjX51#
z1ADQHIa@**+AZT}%U(onlt#AOj7L2EO1zLbL^555KfwR@+SFe|T^{)_`Hu(j|4aV=
zTT9h7u{Zwj%$)yF)KULN{-bu>j!*xU@@K%rPGM95{+05Vn8|<=&LLt-Ad6Ax{Csrh
zedZBu=YtI-i*^5t`k&Rs$bh;lQex=IAG*p>#GiNU7B4a9(4=9}EJ5}vd?mJwA6}IL
zO;WT$dfQ#6YLv<HogW#x=gBG(n3Zjxmdc=PZ;mSOVm0)PzXz41Rp|i=p9A$e%;~z<
z*>Hb-1NpK_->x!wv83veb)qZOGL}&;hs_o!8!fA{FP}y>Zmt4eqxS0J$=&u<h{jIx
zlGnMtu36z8%wVLqsH{$Nu6=CuiRg{vZjy#}jTch_aQ;9zyBd;`IJ=WEA=V=eOYM@7
z^3dR#JW<+^J8$1T*<7YzPqAprF0KK=`*@5Q=hJN0K_OgEf($Bn;=(p$?O$%AJ!&9W
z92oPp1v>4XVgT7`9=?pzTS5z3fbdc*)tDw<<(R*v0O5K^@Fu5^@!zWY+1~v+j{PPv
zRLK}Wwz!?RH9;==k}s~Ts2~pECQob_9T5aDO$wTOVpOT!i67n*qzmsu+;;D;I?T>S
zZpwb>#`<jV{k#XUXWLV{P-m>s$&GrWC$pFX`@KaHpSK{U67F9eyG&(!b&GgNb!uXp
z2+APFMY+`J9DJHdZ`MVn_SdCo5EM)n=0Feh398t8tc6GCDhp#jfwlx@1??0`M4HEm
z0t&kif?*0pO1Um!rDv~JDZH+7SWg4paH)0UDR80S=CnOZHt#A~Z=UFw8MWzvmV_L3
zilwS67Uev8a7v?;$w_)+@3Ddh6i`5DrS=-hoE3Rm_NxV_E8E=hWcIJ2i!wy$$hFOb
zVO<p7thamQtkY>y{h6zaxr#QX`uT6F`vMVaiR=>4@-n@l5Cdp$=|1sGj4PnVS!E|1
zt{TNt7d^*9CBWk8F$O%CyvZZD=x!l;x7^-&>V+QKMgj-LP#bgFfE-?)TERpW0wHR-
zNj|vA#;#L!JAyq9?tY<=s+09vHS6)p8)?_sp1mA&>ulM;HFre7z1ns31SGb0M?=+^
z9f%Ik#(tH-x7xm7MOV{{n`?FPMaYu>cY79ZCwhK~=3xI(COMx@s#mqKyrvq>#mf;o
zLzc{$b2iPd%K#{v>8^?UnD3L>Pg>0T^IvhYYn#+JxT+01KWb2RrWsue!sw?9MhtJS
z=JrpNE{xRlD{h@zoR|^b8^QDT6+8K5DxSRykkU6gwlKa))3zQ3dRAEl8hIgl?Zg<j
z6L29>xWN!}1y%>8diZUQb;+7m$dOrPB(@{N=DEbGb|r!<kYJI(0>SbIIsS{DQO3E1
zuu(X1#|<541X(y4I~&W!S~Qzm7!Cd(xXvkn;Ys*R-z|5pEgQrkyo6y+L#>>QJhx)w
za%q^=f0jY-{>M#PPZ%61pTCFlJW2i^ZA6Z`Hn#t7wrGtDhjk8=pXwfgjW62)?DOEp
zwixSiXngAdEl6~{F4i0_AgJ5rRUJuKW7D5k?h~<l;LPHyYbnf7YV53&8?Hnbbqt1Q
zYf9nOgM>cOoVqtpENE1pUlQkdQ;vxw<r8;%W58NX;YFhpBaLlurCM$5+d4kIo4~}X
z!ZZO|B=!mCV!Ic7ztxkE(|Zm%<Al@^ps3?OS~eshj^Pr{wmg|kBY(IhRO}EWypv2A
z<SD#={d8I3>I|9J?@=3MubF<HBz?~_Ph3_^^IB{~H{a&?-H+WD7-C4gEeFW3crD0h
zkP=zMZa0q35<O)yV{BA@+kC#+vb1YP7AL5Pa$MLV1czT#Iet30PT>;vrNnJRJf(?3
z^mNzLerT24V$$urtS(x^+rfrln;j@rFKF2V{v;?lD5OIFn85z*z=585AMPp!xJ-uM
z==m-Y@xoN#;;E&CHoZxNoG75W*-Ib^S>4}rZ&;A>Tqt1cu}7-FZ-?KsAc7wYF(=#(
z(I`yD?!qAAWE5&R>pK;)eQy}oZH@^|#3~U0aHzPQE9<dpzxpCU<#s1(-k}u<PcJZI
zhh$@mPG}v1bt6Jh?N(HYvG7@nAFm*QgvG}&pw=O+5o*YIJ4PyF^uy+5a_^cWCW9<&
zF-SlQ*RS#@AWkK{pyR2?DBLytIChc}LWDN8zPVGYrVp|u=r&FwA-Jd|mvCqo-KiQs
zu}RpX5Id_H(hm#;bjU{tKn9)nzEG?S*Nv{dmQUZqKH5IFFWA^h!Et(O6H!+1I4d5C
ziP_>|msh<?Jv(wZxvM%&FC6j8Yb-kF8J*towlL`XliKV0z`@q}uL_&0ot(i&s}<oL
zp<20#7VAx@k6?jc|C%mRf6&X1H$lK*Bsx?6CCeoR0bcozt+cABJ`{0JVFva#fLyxB
z5|2`qn{7AagfVi4gWlS$fr8mB`!GWw8$oo*x+%>CDfi8gY|}TUcq{!4+AXAUeL8ri
z4S>t|^Ce98aC72K_h=fScV~M7w(^3D_P}*x_BJwS%aSF#L+gJr2e$cn#!Th)vz^ma
zl?}HIXHw9MyS@4T>cB(iXfuCEI@O?6?MLYT5x;$}oXGE~m`f^hWe1{hLNEbcUvz5f
zP>13+*ayA9{sYyE=6%22_L6ZjH?y)!4X^L^j$Ya-02o(tREm^*V(4=VpZVjA13g0M
zQx9%!oue>pzy)VbljH8e7&KKdhNXP&)2Yb?a$_0*hwDeAHz{2>OBKFZ-Fvz&o(JDQ
zC?XUF6gQ@>>+v_z0B!qWx(!P0S#1y^w~ry5(5qI*zniWThoi1Nx8JO3XjDiRs7N1R
z2&HO1%SeUWRSY7sKM*@47i^@tI=Wp-fhLME9|K<w(Oe)gO-~#mIY*BC_U5Mv{2G*%
zwE&{j!dG4O7P_AHT3AQ|IU8g-$fgv8=_^*shq7-0Q0SYQei?C4HCE(?c<^!Ph&B*6
zr3)uC2m+{HlPV!<+g$`?oq+l<Tq89Wt1!fHFD4Z?a-`P|i!%^G5}a^5l6}1qxnd?V
z3S13RIg|}lIHF0Y4ATED++Zg(9EVRR<1jU1*DQ)0A9%R3>?Lj+apj|GcDgSH#P>m+
zOc|s|6iN+XP~-yG^G7F>Pd7(;<lv(377lZ8IEcNH<l@K{n!*pN>W(mRolX4LK~v~A
z6`Y=10)6`vY6noJt~edSUiPZr9#ZXc^q^tx50JlMQ+!(Sfgf*pEJN1NE@7QOK*&<r
z1sPbqrXvY}W@87t3_o$K!VRCYfDVB0WOv>uSz)gXsJ8?B1L@?l1+7C&&YLdC`4@FX
zU9=V@QfmzAG2OlF0ClTy@Z;^3Wz7q0s`sUn<)M1I?~E_7uK;s#$1o_51au5#-eFn4
zBM6U1Dr;opGFu2CET0asC_Tom46wumbo?|AIUHkjvSgCqFZB*sv3dzNYHweZI-FT{
z5p@9nx|mr=b+7|VT38xfhlKJuelnO<1%YdT;XDF2Vn8EjCF8A4pwL4+%H9$KQwfRf
zN`^-osD7(j#9%@yHV(A}<z10+&2$OCp^(f+vEt1>oKfrvm_Q>F?R2@{wqQk8nN$3@
z#iu)BLMBuc&>OUg(|I25fPn>BAS6XCcjxx}6z=K>=k|m`twpA$+y<_VJjI5vLd6|i
z1fzWe`qGW_yMn&c3glGE{6r)1)PBBpN>x!X<apwVO}_!+njeKK6>b4~ac@)M>k2_?
zgYVw8tQH80&8DP*LC%?0QQ~vK*Dlo`l%Lk)DqdY$zD0dl(7+nre3>If4HR7<uhnX<
z=a~13nxC@7^~{~6+}VKE8vqy{Nncw7I7V~c67boGk|X7&i^~|6O2+<Zqv|PBrDBK(
z=;`14i6Q1qAd_^eSp|^`N0k*`C;zU<1LX&!A(bLSo2;Ibrw%+90tdbb4E^AE73BjC
z=#)7T!*}t4KIzhPy#OA5S+_`k_lN4pZ8Kni0T*a*0z)~A#sT4G+%My8FRf{3Uvn{3
zmDf>JHVx_`DebxhymjqJ<LSf+akS~ySv)5TP#f>Xrl9*@jGY5_uHCX=W81cE+qP}n
zc6OW{+qP{dJGO0`JL-J5yGM_6$LMqJ`xl;7>#bEaYZhyFG56but!2&7sIJ)_V~~yW
z?P`EmoFy4@6Ghf(cA~9H<2N*E8GhzkT-I3|b!0+78}wyhjVPBMc~4VS<CnY555vcw
z`@000;{N0X-x39R)*ktL(1j5z?FZFBaY;|Jp3}$bZYs}>_IJ%r6iOLy4z&gi2!4B`
zxi4CA?KOg<bR*MpeybItvV9aNpFR|Ym>olTS48S}WTd_;JGe{qSg9!}lv*4TiyDiX
zyM_1fUj?BCuNu~A5w>A)qJTmfaM`7h4m1X!t<!?Tgo}er8SKH`C(3}D<o4$GarXSW
zK&mIz@=ei7=R%UAhaB#*Ld4d<u9n@eDe9Ai;B~65$-9Tc3n?jMLO7llU`wYxpj4!#
zcD(f<mX$u@`ebg)6+k`)H~t<pcy+M32Mm;<VK;IWc(KGRXfx_`u{EiZ$fMA;4NQ!L
zJzm{)wiG}@`o-Us`_|=1MFOLY5_j%K2^#wA{y_v_qA~Pj&xPqOEb1G4Aw_x2;`G;N
z>*#TPx1Y_ZR~*fe7D_#xs4+iLh9$zLN{1=8F=;1RPu_VzQ+cvAp_VAB%609%g(VQA
z&*S|Hd++L4{ZujL5aGSJe#PIe_2FN+AF1dkC%wHszMh_v=RsInN+up`XY01Ba6<2}
zIs#__9DrMS1G6PK79DaHE5<l$g#Pb5L|``Qbs=0P@(^_`q}5GXCd*D1x{jO6ZEV{x
zYYMPc<zO`1jI~E4vA|^F>dV`{zu|SPiZ<VYi=<A@a#>WDk1JHla23`(vxQ`~M71*8
zn#sN-c^%z^t=KcVcHLt<Dg!Z$2P?2kPsFbSx3V2e+4$tVzVC<L3o*#ouj4naJTz2J
zbu-}tN&xprS(r4`wV22|;7pM)bIM#DNns8(0TB|4rrI5HgI`Egl82ER;2+1*+VC9(
zgtFP=f_9O23$c{`JgKJ31hI+`S#;gFW$b}JN}RwI9U%j;5!D-s`z<h9SYEbo3K&7Y
z^=gXGt6(5a0TvcY==jV=LNz1hN1eCNnGLsz*8WY}yExscMM7+1k*(Cx$4os-MdNuA
zDb3Gt$05F4*lZT^#%~;hhnn5@jm#Dco`4=Tt3d}Z^(;^U0(V5hoU6Ow$ZUNOn7x8%
z@Y?F1lc!1ZDfH?|$lz$Ho=qzmHjBc=DPRGFSwihZie1uXt}M(1)o5+ai?+4_1fgN3
z77TuGuqr_M9pyyU;v6&z?hL#~r(=<ai(lqaPR53piz_Sun?AlPU_t@DM~Ef@{tH=H
znQkdW8ESmIwI)Aw(hxbhu{?Xg*f@p-3oa0iKcF-iH!q+x`l?9B=tdiGz}<r}**aXO
z<97xx6G|Uko|s_$r5Ks&$*!uX0PA1681SN{<=Em1$@2C%D`w3z2e!9$5eHvTo~PWz
zgNrPSEP-p$f(?)Q0d<;sG<v2Sr2t60h44#no5g9!okK<6=Pb|)?5q}Rb%FGh31#d^
z!={!kM@Y1ml+W{s)k0r*mt<nS!awGuOu(p1P>dxQ7L;VMmAkbCIIT+zTR21aokfTm
z(9KLQs4#vt`DHJxB^EhvQSWOZ{#emBcRA1AH3Cz<Ea^y{s-=G3&=W&i#wqORNK2n>
zFOOT@+{dqP?6@MCIXqSiRPr02UY}<3xOZ1C=hv}4=3TeiHH#6M&NLka?i?P^R=P1W
z;0JF>^^Dth2Py^D;td|jTJKAnuKU2xmt)T!k{3xJ=u0Ifq|&X0Z$@0+4E?qf92MuV
zMHbA&z73u02b;t&vWYCL{;WeY-8<boZpo{IXIq0dk9%%`!yay9g;Q$IrzKvqN>6_I
z*e)lR?w(SuGr>SktZWk=%`AhkQ1e8dJa7&pb5OAZluX-TagI2lt6lr%ueYJPuLTE=
zUvX$EB1SEPfuZRP0yGDr&?NdYydJqI;y`;bQZ^(;mKspuJ7-88%OTffjlhiym<23&
zu%CZ6-I1}A(cYj0k;P{e4wab(oiMBFm$;Pe^}E+^UUELYsp+TKYbSHm)!^(a-5*B@
zZq!1}zCr)BzEo&qK<)n1vH|~j>M{QR+cy8ym&|`Cs{g&}QQz6p+|b7SKMJsl)peb*
z*in9LqHT$MC`=%uc3EMIhQC&eOn(J{OKk8k8mZT1(#?y_gDvRqI5%q%q_riMn_sRi
zjV`sHWO+CHX=kW}x27kYk;c5^g9%NV6%K2?g-#Tyo(&vXYgXxoJs&&)bQ5&NSB}qX
z)G7_MrSvpJGT7Q&H^yv)<@jRBUz-o6BRneCBo;`aZlx(%o<u@_xHaOHI9;86+|j};
zIOpw>dj6e7d>n$O_tIm^lk=G_n&1*Y*!%p0k$mhrMh%GIWp}si$uefR-kU@8O*r-q
zeE}aBt+WYi*1GUxdgj3Nm%miYtO`n62OJq+jd^UJBS|f}KV%ktx(`0wCwPk|PT{6X
zZg{*NdFo&p?NQQdSLBNhOu!o`^(5+cBBa?~3}&coG{><K-4^lrAyoNRthF>7^Zk=p
zp9Ib0<~%&a+Y4#8yXJ8Yw`8XrYLVqk3I-}ThHrQixQ;aYp$8|<8pI0I3X?aCXQzJE
zHk2hHkDY-4Mycfv(7Wal8$L$@bWE^&0?O9kbq<t=i6k>**^{9BCQTA`Y|-gmiZu-;
z3B)p1HU-UbYf@c3K)H-y<r&3te|gS;JH{_H{#(fZmm`hWkU{R%F+oucuCj6pNsN)&
z5v{@yz8j=(opw$hJUEa}4%Mtdsdfo)*MrI2Aa0yeOO?ye2&bOGPkkUpw4V428chJF
z*h;f{<+8q^q1f@(iW(y>9SIhYpPQ;$D-b)IV#Um3Lk1K$j%FfAcN)m1_&HXs9c*aG
z!d_PJn7U0CCAtf07{Co0)xh;E*zt=4;3HF*w-Ny9M<|oD)DST0q6JW7pf`wQ%VQZz
z0+6y`n8B83*v2(Hq+&S)-JfLqR(Pq|119@L(X5ej!eTf>3h~)K02kItXchDzYzQ^C
z!cF$8e~4)3;;62pT$Cr2>6FFzy|qIv8r7q!G7(;<!a;|k^lo&{!ah>LISbF(a4D4v
z{E@DE<Ic+tn`Vb>mvem*X5=jqMM%M(=k*KTT}*?rv?Xx$411MOzQK$L$;oN}Rypj<
zg1_B}oE`0ePYFGzh{(Nv<2{HM`am|CfRfT_JFUEcVbMsN+tjdgy*!P-O`buK#!ExZ
z-sNg`!wt|6Lml2p8Lh%Mgw5-i17(KB^qyTQyKeBf5L4H!7HHUgN?J)%W5Srr%(;c#
z)e=L*Rmw-Z>CVN@E+eT4z$QZ3*gBYq4=iBNQBdSH-;ViKC~h~R^0+RkbL%A&lP+VH
zNVAEgpExrNdgfHMr^e>8M}nKebCHS&q=)sK8pyjZj5-Fc7`wxM>JshwC<SDcOCu^%
zB7oJ`-`n@;oR#wWati@&MR{r(WJlwJaNt<nXSqT81|Ep57|8(CnXtX`Vx?L=UljVn
z<f36p`f<;%pt?LVsn~zXvW8)+aAJC{84@IlOQp1()H?_q(J>FXllmoT=xo8)Unt<L
z%3lK~b7f6F$TyzctomoPYdy-FN)w(;G-Uf#cC;@Lm5)bl?@R2bN_iJlEM*dU?z1QX
z$7*iFtmdv_EtTmEEI(<Mexdbv;FJ&VzS8_={`tHol>rO3h(ARp6m7R^-1^Xq*4MhL
zq(w5ZOn;>ZuKX%@Jo?$P@#nMj?6!61L})X^$y_kMv@$hyh5q)$^%cYNu($P?xd!E2
zosSs}?KC))(%ykZH6Pu9G5Q`P_mJQ>WI4Aya(-E<!;9gqrp_yjZy;YfmBR>60K?;A
zmOY2bhEJ3Q8OTe_A+!l}x6mO5vDogkQHq`s<2vFzVtsCiMB(0*0S`6{?@0PMkxC?;
z#e*rT$1&e=ztXYq*|v_3P3wl;2YjLR<==vBXT*n7Ge70qu;q=S`~Ckmc$KpBeY*bB
zB`o^s68@X<fq!oJf4tGo7OpNP_U?B7sWTt?(-!<cGN5_kD<Nv~Gb8woD!>)RPB0zr
zx-8oTX#r{DOx=jb1Qng{_i2R&T7McZ1cLa%QFi<7Xg*sRx}j3m@eeq%V1A^Z4#LOz
zY;T9_k#pk`;_Y}vGtf<5l9p|SkXOiH#lweX3IQvA;G{)Ny1E#?orFHwLa9p<6d*rE
zHmYjutpQtEHnrE|&;_4uH)ir6XAGS1mk1*w#Z^8Fr<;Gi!50VlYJR1z1{^s@4dHEC
z(cs#tC0~Xd9rKk-ARq4QQ*)J{FF_ffhp@emH-8PHS}6pYujvye#3(-Fe&POtr;yQP
zt)2vvl8dyM0vriV5`FQz6e2$4Xjgvd%VPmg%I%Brw_13FWq$sPR4vhJ{_ht<8E#p!
zhn2^NhY!cU<d%#9nN<vMg4newoteZzG_zi-QsNp#tVc8Dwg|Q;+j4KTadya6z2kF6
zaDc3(CihxME;W$0S0*D`0~~}L(!c(kO5b}3-9u4xg`dX+q>TLN0?SUf5)3kyO&wEm
z8M>O2a@=OMjNh(9CwrDfc@@bOx}+ePsOEzj?+JXf^Joyes2IQWbm>JaHNcVB#DBM_
zU|AO(2SDH-hKO}yh)p=tW~++=Zb~BBtdtGE211&HN^QKgZ-7g+>S<{W)eWG=i3WO-
zB*E*C7SNjLqDK`QTAGTXj+Zw~Iz4aPetmt0aTJj=>;EyB*9mn=5nL_F8@AIwLR*o3
zah1E}Y<}Z7@-ABeW?dhRNsR*H?6VjkWnPZus<gI^7DdgHiaJCbFi`Wh{*drkw_PKq
zQPrqrA=SG~6STI$m06Feg^enCeLt^<{NO?fhHfSO#w_R;!BmgTu#l}=5}S1lmvx0Z
zRUzz9Q7At0G;fi`_Z>~uZV|SflyJD8!f8X{pN-3u&1b@d(okdJS}}{_(X`U9mmeY(
zWLrYjOmf$t`7LahGMQ_R{K|yE|4`TIM8tk7RDHe&*`7dcdwLx`!rkg>@cjM2RypRn
zev`<nB#{ULcHlxq0ewzFhOev0W0in2{SAfEt6Jf!NxeU-F{i1GTZ1E)t7lfY!#@*>
zkuf!0v9vz;d3Ckb`M%K!-`CAt>~`e8n8^AacVM6pZ(J2+D3CGp8W4=h)uduEZd%3k
zS21BFNK<&gJEUMcNX{ah?6w3OxGOEvZ@Dv%4pS8*m=2W{>1%>l6e#gPnyPnE({?>z
z(|`ry(xve>A*j8Tojd=$2U6l-jv>7WlEr#jB_+@4s7rM*+=dDdDyK=?yVnulyZg!w
zoBjK9byc;NZ^8OLe5I$#KT-2&*#BP>#4iMfS=OKHW8=p-!1V7E#Q&?F{~12|$Cdhz
zY~VlLBEG8skME%`E(mm6z-vK^sJ9R<P(bXc_7)szkFyzxwE-XL-C2`_YTCk!>vMnE
z^4;-eYb}<;?3{`(RcFB69*!pcW5TKRp`qm>ZGGevHG-z)+7G@y2-~4k`n2}<Fj_Zg
zthogO2j$v;QPL|3RJQ3VnMcn2<qwA;%r=VD7?o(-94VF1`5gH;I0{u#u>Yj<cGh61
zgMSA>Q-kZZZr3Z<I}Ez(;Pfc)_}MKU0Nv%cwEl=5lU+bnQBcbE2?yrX=u6a{&0l%Z
z8EygcmO0AdX!UvCv!}BXF?@lNm|TFzb95+kOw$Qoh~P~_sPs8(2T#NDpd<{D(e^&l
z;^MGN-90C^_B&+6$+wMZfHpyeb-)=WDnTu(FGLNl)uXZu9m4p`I9XpcjWSjUI?@uw
zsq6Fx@*zF)q5Q)U)PjUfh44u5Dm<>B`e4`{Wqbw+fh`6|oa571O1Zzaxi9ReRD~Z9
zn#Cc+&H0Omz%08ge?n(`C4I-pr%2}Zq$bfAJzWGreI}s)s3ZMOi(7yWWV1*sKrPXT
z9}}g{)b}E07W8|e(VJ^D1JWsO0#};$at;YlqpAuqGt<GPZNa8kR1TOPs1;sZ0Xx#F
zku4~T7CbuaF}*MrTF9qumikoNkY1|Vmkjgl@<@~4+i<v_J&(7fe40jIG8#;ofa1jk
z)l#TkZmadq_3WwjJOO51N&>q%mELmz=C=p?>?nOvuI4mpg0)wRFMP#K%VS)e<+}E_
z9)q&VqeeF}@vl^M3Gq-Ro=-IPxDBfg5s(QkwNnRi@~GU$_?2ifqF2)lO`cl*{?YTw
z5zig#*)wI9%2Fka?{m(YvBf_<s^3G0fqmv=AL)9%+p%+_ulG{B9gOcOR$HY1+&yQw
zF&G)b%odcN#P9-&cHHFG2&+R@l+s{QAXU8mB@WR5*Wb?1V~sS!h1geEGl2UDFKikg
z3Qk5myfGTMN&Hxn1ghQy^IZjU2v#Tvp{Btp_a|$9g4bFGJ&x=^kw<oaIb2QsSKj;p
zSBIGDYJ@)p&RGh#`Z|2~wq0vf27iP^rfY4@87oi0rtSFzHPz@B(7y&~Pa)X{$xnb%
z`~)b`zYkD5Q}_QAkhUta_Q--T-7~dyy9p|1WVGSJl<`6k2$Up>Y@l8hEsfjPeP(8?
z__Bkwqd8kX3SQw2#=moObFbbMGIhe?NzL9sC&hQjgo@5C<qlfFKM>Ekqd>EQo6<Z(
zV8({=9JayEf<-B!Njq7z3LnQ$f%Uw&^=TF?sX)5awA2X2+t^sGPAd356PzUIz__gw
z-Cq5>z97x#`CWIQ71ncaPlq~Vao$mK$<91jb!$qa-U2;KHyT`Nw|=i2V&*Vxr%0vb
z;dnBR;&cVht32u#j4|gnlUAEs<}%|+OB?7K4e<m~>K3SOJF;**>Yag;%OK7Oo>)}k
zreh2rB$BhKY}}rMpt7AxC%%M~znyyBN`!|dXg*#udhafQ$=-rX0}+4vyN*N7L(y7A
zB#|nt^8_+V5AZag3$^K$Xj5GH$ozc!aO}lx$Y&m5ncYTF6ON;NWE}tckDn5H+yP(8
zCgcZ&qPT5tpn#q1mBuH(h3xOND~ZUMdTs(fv}{N<C-lnkI5gS9G?_ttoHuhF;NlW4
z`I2I9C6F!!kp(l_Tgi5cDQDe;!K`Ysi_9gQp5JEd$QkB2K?4ZYv|*Y>6IghSR0!IV
zK-iSQ-31oH*&(fu`8;+8e$1Jy{f+|d?JVT<KjW<xtIbG9H)FWfq%G6tK5PXFT;MsO
zB{h?C4%Z7bu+^|fq|M<I{C%>|$^!}ywkvvkQlIh~^E4}hD`0*7qDix$lC}kWh{b|U
z44-Pf-b6k=h-AnZQ}dw+jTfJ7F550)ycW|91CwIH-htae+!@cEZp?DJ@FsS(ms5`=
zw<m;K9`#+ivb{dK(2Q(P(-mR!gGUAo9KAR?T~VD~c_-o0x>^rWEr?=)YIFBys;E^Q
zef?0l>*7}6b7~1W^a<p2ZYci06<Fy`>+V#&?^M|V+gJhF*5I1%5OC)C<`$F{f&p_$
zmUBjuz?_uTsSegQsr1GE*~=2{?0Uo8F<EQdjV#qFEiKV_=D{RSKD(Z=6qp6JQSm+-
zjRo6Do-B1^?Y?wl-?~xc8-r|&|5sL~x0;ypvjoct-1K(;zctE(!EM)Ce(0P#g8$JU
zq^q;3zOkv3i=~<6k4F4If;v;0+CLf|RKJs2f)@B@;M&CW0?>|3$T*WO+qyN9@Wzd)
zL_uknAu%-7gvbN`9cMVos032(M&C04XJpUoopwfjscfca(nO-qp&L5?bVjz^9lDxa
zKYbN7IwZ?1t#T0#&OKo8sEN0&(mx1mM#c968xsy`YYc^ajFMz3dpD0t?labS@M7Kl
zZ!=CC$6G!(_4HhuE9Z`Wn2e^u;yE`AmZNEU>Ao4yI4nBr<9FLL*%*%$&B|PVOzt}<
zKJWIM&DvkmeP^6$mGDGEqKJ+hhLrb);DR1bI^V<Irm`5n$W=)^lcoG>q%}1%a|doL
z-2lZa9E1fhLT^4u9B+`n-t}j`rscOs`SD1IqPUYhcvFW%)I(M2LqU$14PPa_qS3v|
z2C3&lT?4nd5ir|qDUHo|Q*M##+E*e8p@Brz&$4;LJQg#+@xYt;E`!N7Vm<cbxNOOQ
zrJgG0cbkd*o;L>f_fFQB`6&UteB&>R`XOc}R&e)$b9rBw{4UjNqEhVuz|Q~R3(4EV
zo;d_D`x#YnNUfwIyvK2w%=<094sy=1k?$ICB#0Mqq!IWo!+@L+L(cElqbK#{(-RE#
zznU$*2j5<ub*s;a=WxVY(7gBgBE<p;^?!3^>ho{&@N8}FFg_<qQomJDA(aO7y}+dY
zX|va`!U<$&Lx?hB)rJ1cU@MWN_oYo{HxScA`XSu?$A_Dgl6ykVBLUjFUC(uB-LIY2
z)72h6=yi$nb<b#AF@Q>Ky$Y1+aQq%AL|`bOMsX4dkmF||g;-EPQf;&zIGInO&WQbt
zq7Wf_VQ)13s}nRMb!&x3x<eEc#3+H!F!Z@vO8Y$!P_W8_5b${n-7s_qRICVG!aQy2
z%{bRCGBq-1$qHr1SZhBscoz{y2Npc>_BL^6aICeSDJ0{%NrS=mHc9G0+^|DNIFI;>
zfP^mC_wP2i*os0&e~5n8U5xn!?s9jPO~uhxM!9VmfJEULgAeUkiXs_bkXasj?b->Q
zjuxcF<-VFAdebY~yh<7{kajQnJY6DL^!qJLL@&Yy!O=P{nnAu>QDQd`zug827As8Z
zkUC=zW7?H<gE(aTtjdSSpx+P?3OahbwUy4Vqr<Od@V$awm%E16Wp2YCYU2h^kr<k#
zu(xVu?0UTh@hN<6c<vz|mCjWz=!6NhVi!;x^zH%4l!Ze>)<3cZ6cu8~h^SmUJ9GIN
z_{QPE%T&pCXe=IF9TPA@EGq!a+2<)8sSaQFZ<b7FYDj>%lsK-9-!MkTX3V-rlo@JR
z?FnF;u6;+0mI`W*0O_*}ifwlu)WTMyK&Y?OBEe7)ISelCY#I>N$iE6iR)q^~MLEAu
z)b93(<J+VT6>5?~mVsFZq#np*v(gSAA;z7%0ech#1%)k_nN%hGeb>|!s(lD$hmhV0
zEk;b@3yAW_E8@#jVIKHXXQf}qEUrfSOucOULZj;^E1JjiH^yH;r0~@30D!h@2R#vG
zk&NL;fv8d81krU?+ZfrV47j>NmuVCt(w@(8Mv!vx0^D#^G*H%a<}QIN@@V;=Z<1j-
zBd!$0wQk3#*(>3QnDZ*VH<iYLc6aYkwNtHVma*c)ospp%g}qsi;&1`TEjWG_y!17J
zdMt0YZnP{)PNnBp6f69C6<o2q8+tZS^bX-H6P>-b<u~-fJhhRA^c1GivB02JC)_Y>
z0-4^r0jSG=iBTByW>g9THTLTl`V5shyCKd-yGL~Jli(71@K5A5VA?(I<B`)Ema0da
z{@II42f>}`Lmow|eOA#Y)<RwRjc$9{XU1*;OLoZ^_3OFnfX+y^_BYgI{*`$+xi$4V
z`tWDA+2olv#V!N!paLv19HH_hd2z3)1Lj;$`Ow^en!tkeA!eDq^`vXsWBnZRfSfTA
z6&vyF=i|i(k~hq(@Xb(!r;t`Z#_t%hnoM8?vYGmognNw@f#|Fr8Ez2ls$!Hr4I&f-
zucN`vG>>kqd=Nb8)199pLK0ZL%^!BPDqu+2_oqqNb<_;^qdd2JT<vD3x>Ny`&xAe;
z$=fDf^jGQluoo0ty#dFOduT*h7*IIOEluPDAN_G4btIe<X4t{x&_8{BS7j8JoMT4$
zNSo!&o0$m)@BpOBkUq*f9UnRQ<1+gWiGwg9_00^>kvJ)RX6gaI>TX}qH~|n>K<ZBP
z>(m@=!g0HvZ01yOKZF6kEH8j2p3ea%btyK~5d*KkxV%B!=~W5yp68R`??(<%*Rct?
zabQ?s1U5sJi-P?V<G#xc(k5E*v1L?OWis1g8(T5y>!sw@<m&~!Nq;}WP_;0}20YAR
zwkvCCDf{ZyeAKHqXxBli;32FVc5U1NHAD12^)(C{XiywX_@&#>CggH)A13WslKbxh
zs9&IefK3^Wyt43S`aNGyfw-v0>O3s3V~2R_GT7#iG({JXF|Rp3(;#|tW?`j7u;Y|g
z(S)8ElZz%G{yuB1;YbqKcmnuv_2y~NUDjr$qgXG>!|P7(yB1g!5WU9JInO8Q{u7kL
zRA<HsjEj-f_WTeL(66Xji>@Ko8b?b*IKEzicdQjYHk<9I275GNN%gZh49^2t$`Maa
zIh3sFB3WGiL7<*F5F}w@VSMohUcS}2?Y$to0MV+Ul?;>uOz@GWNdFG9@DOjm3a{5^
znzduZrYutQH|{DRdVpB-I-T2Nel%~hIlp%6gzgm74W)+nWQ)t<vJk?Yfi`JGlbdQ_
zOSB%UJ9-5ErI+mE=TI+pO=z>JSqLmLDj`}bv>EmH=`t$_wIh{!!T1(XIr|xrrkAkT
zilbs)LDR3~`DT^TgpPQG*R8H&lLS-&5L;1Uexuz*c2aiaO+w~Xn||vltwyxkHar1B
zQ89^FenaT^2;#n5PuNj32P6sFN>UYtv8gLDo6-YadY>%b&%Yj{{+(T)sNVa&irxz^
zE61U;@32Z)TgGqe6xuJ&x^GWw^r{Tuee6Eu$_n7;%oa*1cunWIAk$_a_ilbOeT}nI
zbN-3X!4{u8Ti$zz#1<JoBuZP-*&`k9GB@y17Zb+pv+uk_U^{PC<~lq4Jp9`q2f6am
zx))B?5X`wV)6+fQKF??Ni%jQG?*=TqV)|-y3nOxGqy%S(kTm{Dk9<MF)74T4L~%`^
zM-oGXFXBES_`T5Rz1Z@c{>!L+*3t~YT*qOwQoVm=3vZi6BZ%UsE@XERIc8Prip;1_
zMLU-;?CopJ-5)e#)GMihe{hjX#fkA=Pr*#b-JZ$z`7Z~rjy0Q-J@X-DTRl16Da$(J
zjCNMpd;Ns*`tSetLR<DcmwZ6|*)_xeKSC)@4DC$yP3;VgZ2n_*Sgq~tydjqGjh}0z
zrk+XMjAF}~X~UM%EIKhMhN`I+5oxThi)sx4BPrtHz!+e1t=jYcYz+pC(BNF|%!!Je
zcJ}idt@XyLbu&d0t!)t_FFp5q{u!=~8eY2JzaC_o3)RdJs%2tU%ntMH-bpWJW#xwl
z7yA;-*6d!C957}p@tdA;Rkoj?s($%I=lIz_UR9@K?q%$KF`7P?++~S=8FT$xg&gsr
zY<sfi<owzyKMqxS(X#5IiAJSe?N(crjNV!pxT+jarg%O`&&0H<5h8a~6Y8OB6Aiz1
zXN!goU9sqkns&cRGMbCpy`+xK8|+)Q_2ia{){2#2Bc4Zj)bZ2u!^t2E-QE0DWZ2Zu
zn$_RG(dS(Z_v8<WQtsOVz}8JlGm#bYcVkt8!yKOR`D%yjes#^_os@QBQoCGKu;z8&
zCr_)0@e`TGT*l;(t0wOsyWE9=lFR{;0l@-mUPZP~_NuakNf!)E1?HLQF#DWuU0nQ=
z`f>qBMH_bhDgJ%r&QAHT^4%P`XXnk0**kRiML6D7WdiN(^+XnviBY?m95FRCY*rf%
z-k3AFd_?^`6pUH?V%IT5iAl3>btqmrKIuWs<IK1H{pb7R>-#NNlr7sBR;w)(My*a&
z%bp1tIJYXB#*Jjv>SfcT>_M3rJO8%V=Z#+fQkQs&*O#51&y6#Vbxa2c-BCu|$MnMb
zacqu_WW`-JCIiQ8wcAcQ!I^okCCn`HH&p0S_*&a)Yh=}9ec4EUUgm)<mJXVPM?zVw
z?EG~UvFH41+5?nhvUA4jRuQD_m1AUz6tWdniet#OTDkRh+`j_iXInK??x;waVvh|c
zL<<5obvYa(mCQ}mq;2Ca-TDQ-F+F&>-iq=HL5Q={A<?0lSUT`BW%GxB-r&n)Yo@a-
z6oYS*e;T>EXRkTGf&lvMH*ja==7xjgfTuMlJ)96Vuoz(d@dJT_r+HThVxhz@`&k2n
zid?@1w83G_D_&^ko^`%$E08|Q#-(=)<eZHyKM&P;{4lU1LJTbu>|l5n*T8%i*jkkp
zq!B6>l8R_xKKx^nT<XQI)V1UEz*roAJDQ&6DRKrm=OnmQu9y!|Mj9{Fncc`_)hK7-
zTDa9*cw`23?^-C`WSEnm%=M}GU{YxM!w>ALXaoe@g8;YG$kYSEh7wxlH(IhhI2kN0
zQ3a<vV14FydGc%x<vGTcRYzn(E$cplHI`vPsF>JnPY(ZrXU}7|1d9ivKy39!iTPEn
z^X=p6>c@c-TI($&qZ9>ZRydm)m*PGmTiBXy$<Lz6=EWz*O)E7Y&?Tdw2T7HLAiL|K
zf1_%&-0_FN#Z|qBL;Hin+wp!s(_XyP0FrpoaPur`;U*k1P3#LS1RZj~lGU)3Iy)0f
zS4$^(n6K5i=?*74x!B$DS0EA($~=CqxRVU{32+kqwA_qjI@sI$@#F9*C;~=FtbO3y
zjFP`2o!grxIrT{JhRX=>;|**(-F@e@Vx&EyyM!HyZYAP%9!&%92S%muTA8?R+zQ-W
zA^+BLx?JHLu6EHwO>ARNu$eNCp%-L5r5lf%*y2Eyp!UEPr)`Pz&|M_COu?uvmc3y)
z&EV1xzhhZb$=fb)n`m8^PXrcEa!L?rB#JF`1JyfgC<a;v+J}U^6C9O63Q38O6+&R-
zV@ui52Nhcj!rNk04g|-eYbP!3gu9N41Fl(iycO<LIs8<-P6QWRNHL3PXV|x$ha-y!
zTOHyEXn-a0ds&;vy6e=Cj_I=3F+KJ@XV=lZST1RfK(Zwx97H!ABS{Ge<5v@J>{T%=
zg_%+q3bEkY)3pOy84r)8DVwEYUUj&on~U0FKV<-_<N_FhTsjO!yeFWu+<G|Kj3<T^
zHW7CKINUmQ9hE}Z95Df`>${m7J9Z)1A#$i5#F_0Bd3K)>rwLEv@bD4oB>1b!Vl=P^
zgEezNlsv}zf|jXG3-_!CC$RxA-hd&2yQ?zlxuAKBU`sAAIizJ~_(K^bmXn8g1@Q%9
zbs`!AvuG~{;OPV6k~hPx&hNYxzuYzxL$<z~;Io=7x=KW-KAlCIJ|fa$F98C!<pkhD
zXVd%y6-i?%6!J^V$*e7mwFsE&>-a}=0a#*^p?Gv(<$%sUMCN&<&l3f)9PmN8T*Jpw
zg9+1M`8NmPFWdA^*Z@rNREb7vZ4!7K!Vepxtd?KlAmwk!yYNfGAIl^{&)&jW3xv|(
zgG30x)3(`mSSGbKP41+wpk|H*Q5g3u?@Z^4NNyNLC8yS7KNlS#JBW?zRXlE+rF7gA
z35Z{WM__)J!{tY+Fcd?0wt$gUwi$`6ii?><?RZJ7181cDZHfuXwa^*suX(iuLzZx9
z5F#AP>%SF21+E=X<nl?7CtQwI>G_J1*swE(JP|nuII9yrczASu;IHDac;k#RqA-Ok
z`K7sWTIITy$~wGM89t(<@C}IOAQ5Z%<tvfKQEKjfsNy)P3+p2;`w;f3Ep{f-S>uEK
zkspFcs!$p{kLNB1cCQJ)TH}l8xf&vee1tYAG<7?uWmSp|u~8a}Qxb!u=~fi`sN2+|
z8!CM(l?g2MpaX|{Ol>3VIk6!%gx`?}VrqlNXj2XlNHOJ3%DNEJcgmavJh)7r=&U>f
zP+<mHd1@~`)1wqj+Jq8ROw>ch1T8O+^Rim)ibKI0wAvuZoKU7fs%xkR3-WRDr*8Y+
z@QS?Q#8oYH4diWhfTQxX^8BMo=xyAj4I%-sqUqFmvYGsjyG_%Vm{W%;Ei?~x62|s`
ziPZL^3rK{*Ee&uuqXF4H4Wv$2U`|l^z}%nvtXhFm2_0_iz+Tm9?fg1GvaSPrvwGpD
zi@c_wL`tuxazM#Z;dDhB3iRX9^RwqAvY7I~HFlty97XDjV-+w*HPj$@E(H;!ZFd1o
zwmLSm4+EN2Qgg$BSoSu76$6AMVo$1r(LNinoSt^iCs8kjTm^)owqJiVMsB#uvY`;F
zeav<)0^T&q2(!BUX*T`{oMmVp2rO9-e|g9X4<dy4Wxh-WWWv5^0VIw7Ub9d^LCcDk
zjN6wT=V>m=i}zSQLSIY@U{FONqeqhI<Wx*Z*++8_t~X(PTrgLJ<j5DSnAd=L@j;Fw
zIPk!QwQ$7beaAixY5HqAK7q}5%R)4X7RU>%qy0gOGgXL;YM58cf-0y4QY{_)HODHH
zic+Q4XSJi}VH~2RT~d0AGJE`HA?V-nE~uP=V^?g7n(i>+;=WL_ODRU+6dz3Hh?L4b
zDiEhECLxAaaQP13VeaA|s2XyOiDCSg1q_hhY5zigSg^mU`Z+eDG?3{wkWezTVH1)E
zr%ymE7y#B{Fp>0p+i6R^8??AXC~n%QV`Kj0A>VV0qDFA<TxY}E9nMZpfxrTqoma@C
z%^K{kR#)?3^JjW(pjlcJD~)5e%(=W)G|W}6hX2+^Y#^=2=}XKx&Xf`}Xf`96_1nsU
zeAk-bP*c4ZmFU}6Td(zRpi!Y_ZGRQwpOx-vks7eGasRn0H%X#QAXUXj;5LesiD^^B
z+L>F2RDPYQul6p#)*}3eH>6s8dcQ3Fk0y>(tdZM@P*I3-MS)##f3y+=10ReB%E##w
z1XM0SU#w4nO=T~X<zjLrO3A=G@kXV}3ZIbSUC(pDtR-t?reGbB0nzzcY6+8@sQdan
z51FM;Vvanm!8pj3983{mCs<48HH}u{ReO-IyEr1IIj1R#=3fk{1n75h1HU(S6!$IH
z*DXNebueQ(m^pl0)J<S{cZq2dEXqsyi%i8FE2ye@0|goavsc@s+$n6rE75=m^(6_G
zz*;f_h-HfZ%4tD~5t~*@o;)hNsP_z<F=4Z$l)}Y*cAbV*CKlLmufY7q06Dz8-6Y~^
zMVii5fcMawO(t7d5~1DR-a_~TZ*OlWa*NjO0BrZWi^)q+(J;I=YU73F<0@>dbRJVf
zD+u8(XE`J(lAgFtkLHQ6#-Gv2K;_IXagZCAXV>T^7I^3vAhgn?$}Pebin4VGQ*f7f
zo%}cwe;{37hmTTTL0+oHy3n24&-Cbia-9T$x_RqEXRdwi()-%d%mXMo|9WL(|3yt{
z2FUJ|z*@^eY4G2y-FP-)*I^WWq%^S=VN=|Tc%*^0hH|3{(0;4-(5`mEs|mx_CBFh0
zT=~)cuQ<*zaP{O7c7x3H{DX5fC%s%=e)u{J4GOTo8g{Ly$*~aMVwUyReZWAi+8xT&
zDjKy={jw0>hjMHE6g19Hc5rmX0Ai1V8#H<(N{xUii_9YY9^Aq!2V})A>YWqNKgJlz
zx^N^##83p{{P%6tFceU_X%bmZbz(rR#^EQF8&!Kq+n7NSRVc{rLr_GjGiHrU)`g#J
zlx~^>loMcAPMAoaaZk7afkCA;Vf~NcnMsfcP#1T2Tf52}b-?3Zw><PwP`$o^Cs*is
zw2w;}j%Adw;cB31JMdb;j5vMhn;|R3I-$t33$yH~QtpqAQGv8{P7s^`U<6jt8@uu3
zoF;Wso1OWa!Q0z8R9D=BaCb7+M(?KNIB_Ilj)m@lI5nu}Gq0}ihJ+&akpgGD$1y6o
z?_$`<&vD+YXzTRGsvT`WT#e6Z%gLNd<y;WAAVF4@(8el}wxxl>AT}t2-(K6eCvYKD
z(~CAQs;edH-EjCal||a<Dzb6gS%EQd&eytaj1UGWz?7+-CfwQvAul;gjVld(^<09A
z^vrC+U4;Tj3ymItSU(}NiF0`TU|}!>2s#eOjFFo~=^+22jkib$F?DnK*R7?)5~5zN
z=r|>rYg*Ug&f-bn_lR`<Tz%(<evJ5QUe`%a&e8t$)>YPt)@7kmEd{wVauk`q6zXTP
zSFHTtNG4F-pO#J9qa;1o<O=?d7>%n};NoG)?l1Bk(xDhxddESJJq{qhz+cSc13a+;
znyEOWsc~3#(h$+ct4KGNGPpuBvA82AQBeoxLUt5vi6YYmC-T#-T>*8W=!d{3zMfkK
zdk%`{GiT5j6E-~DBdMcMfL^f}rNO6KG+`NLHw)QN2t-!hI$BguzW@-Boei>axeTXE
z#u)lPVbs(Q;|L%tlq6meqLHe34WjIrVt(gF{C)Nzhuni+n_jIP$n8)sWofU>I+)4o
z>4Y6_?>{%eZ%R1XGjsEH=j_z_a`JpSHgbCx(-6qx%8)C~^8IxOix<1}JwFe8<w0MV
z#}Ata_AS;4%rB4>VH`3y*usFg3gj#borRazw-XO;6N&O+x#?!_6-S4Qo@57Btag@b
zw3NnW<c<+(H5q}b*Pk4c2p5p{MA0dWv^XW7iXYcfMvpMa_=vL15!zRwSdI1P({qwJ
z1=i$}U>*_CJt4{E#QU$H#Mj%4l*v-fk;H7k!Zm=_GHjk;+@DfWW4#t-y;sUW8=(w+
zcknt=P!@H9DsQq^Y<$?P3XTXmuanp=`s~}+Vr2*#`MC$ZoAedHCP<yj$@b`)Yw*5q
z|KHRfnUh%ZM@yB4OxI&vSojEWl>Tqh*rE>5y`kGyWSB&#lI<UJ<+?|vLQ5D5hO-@V
zqrl;JpC8ZnVZRO1SDc^8gt=}WyX(iCPEryt1EmQBctf~kV(8*cQyo}}SCIAl_V6&n
zUs1-v0h(;LaK@Qo$|%$nEfLOD+X?A(v@VxF#SPZ#cx&!Wz3-v;Dx~ikC9P|!0XRl~
z%%hDvi`h{Rt~`mXwd8*!rBhU{*_Xj)PGNkL#RN28somNy)z8t1**{eN5^&kBeSKRK
z^YXuB<d-R$a7h4y?r;-vneOlJ`mK7Avrmj+yb>7;VGT~Ids@+&aq(*6Qe6zq-KVzV
z@{tKH2%FQn)w50e*64zW34KYS1=a8JHJ7{ClpXb{G6*ZApLGL*3#Bqq{^8K|UcrtA
z9#u?rOm9~(INIOd(t{p9=F$>x#$}a5?BsigrgCG>-N7r<I7O<d3k<K|z`ALneKv8p
zfI*|k@EPr{Z|^BpgY6i(!-Y-u><hwCc2c&Saq<^IwXS#&?5G0MVl0YJv!^)w8)3n#
zBx-HC4u%$RfTdf%<+jTKO|)-7oUXV^&kmQA&{%`^TSGLom5wb*mxem{Nhj%KwLQjd
zb_CidLTDTU1QCQ3<H7Iky3|d{n#U)ym10?7G40wpKOt$9a#!S<d*j@~N|>n|Ea5pO
zDgsyj{(ZHtV(`YKxH)}iLhfSoD*$6~5$qGnG`4nqKFV7Rg~O$FM{ahhVWyeq@<3^{
zlDv}JMB2yvIr;mqP*cE34!9ubcQoEOiqb-05W?JFDTPsW+RIld2XJ~}$Vq8=I0rGs
zT5)k(^2=Q0mz4r)Bf77w4|&H&lA<&Jaz-P|56OAbCwNyEcIYTJTV<&z_TP&yzFb{w
zlWuR^3TM+6`co&_>fk(x)%C*mawA_^ytQ)k2A3;)%}`4-_0#%Nr5@jKnPVQRE>6BT
zZs)&z;GIY{JHP?uyZbJE?p-zAUHyetq-Eg{UGV|3$H7*?tVxtS!Wj8}NiG%x1YXg9
z9L4nF#Ag~-EP}YB`DCIR4-Y6p#qVELAK~%d<|)Y;?m66_^)g6w?y4b4LUA9uz8lcB
zK|m1C+h4hR-CWm^`D?mkBkJCcJ=L0+jimy|fCYI-#$56FJ9T?WM!c|#9~q>$9!822
zKv=IsXQ6*pruF)L!m8zz;c&)F;VX&FGO9=(FkPLDJ0lLLGGTWn+v7H^7r_JhU}!7s
zKc@{4`85+Nz%-C4NQ+9psTc_+ztvR`yzpQvr$v4=l7u64aoY;eDhsA!ybL+7V;tLV
z9U>@awe%;y5KI`^#7Xg?jXM=TD8)&eyY5UQ`K=B3lH`x*psgMzGj-%qPs5?^w{-tT
z=(!t#cOkUsA5Nm#-xWkx==oHGZQThnC@&XbmR@b$>aG)Bc%-cs4<t|#e;R-fZM!X-
zdub&fOFE2-=&$u@V?~|M3U)5u*4PQt_ZfLCQDg_bIE}gprWp6iGnM-5*FK6a2CL)j
z=`)#*B<lxP|NG|mmh60D1KxYka^HzXS!NrHmg@!)J;k&2OY-mqv&h>CltKX+T{|h^
z807Q@)hE!v<fYXe9a4}6Hi%TBMc$e}63x0=ffxNRtY`AzO*y|4as#_f<e0+#i~QrM
zTUT^;Q2JncQLakQ5EA-dd}f(AY|L_hVIz>woP^0<#q65l&){78T=BTMzE=IZh8kW+
z2j%f8s~%3mH$PxczU|DRXv(tW<V$BZ3VS`=AMT#-bNRPL=S15#)Ljg3_utN1H6$Mr
z?JDloCr`{k?k-W7W@WbaHKH6a9_YIs+og<Qh<9BhLwegEP?-FR#a?eE!0=)Sll*9~
zo#ZX9cY%n{#0PW^lwoech*3z(%S+G{USNx65ujG7cD2Rp{V5ar#FA?0=#N*T+Tq=N
zd||}Y)G0l%|8n76R)IO%UwE1K`afUZ-8oY2c*sv!Jw%`IB>Kv<y5_`#4$I<xg8wW0
zbA0L6MGOQ0(ES4dk^g)6=b!NnCnHPy|3m=kD(n6zw@`dvYTM5B^8O3S<BCjbun-;x
zB4UUrrE;_jUojAG5gzZ|apmin3zJxRIoLdK&MK8Mjpjv7GkHOH>jfIw=kVby@SQ7H
zK*o@R&EAEh2sv58k|NY+1g<2AuK`#23*PP<770J+g<NYivYQy!RmB|AUZH@cEO+)0
z37U*EfA#$?26vuveqfJZF%@=Rcj}Em-&#3k*Bo0@{(D4(wsT*eGNxr2iHfvH)OHip
zCeSW9P{-2UAR{0@Dt~T(=$0rRX#$cZbQjd2!#Of8f=4`N-m9)qE#@jhxwE3!lnOsj
z5F>6J2r~ap1USv}27MK*^OG%T$FB`uf-WqnvOy&#ZZz<klhT^yN^jV+8sAbYTX7H_
zDts5Rz!!rFt=vsFQK6P-WYZ0g6HlG2nYpJcpdbP7@U%sL<DG}R8$H%8<95aW3k>kp
zu*-}li#q~V@)G5XM^A>pg_#Zn{pIXs?#Rn|wZ`vbld(l*N%SXq-7{p%+~S?Q?rl-3
zIm_qh!LG(JytUS*u;sa(Kx(n;>qCP*cdj&{;NYd%*Pejk-T@0~pza?dwf{SkSr6`@
zz?zjHZ7pLPw-%%`E*cSFk3)Te7U5AL70)4$Z5V~tK6;9%C9RaH;4E~t6smZ*u2tmF
z3{$`nz-O*f-R{jkVimuvMsc>SX(Tx`us+TsS1P;U@#()$>6_)oyzqsmXDFYI-PLmW
z-vF4ml8CLVpEHR41EA6T`!nd|?DE6B=sUYOS=yQZr-PWRqHB-Eh~U$!Utd5^LL{D`
z<|~mX5t0WM0kkhsSyn-Gpv}R~_kIWu@!ey+6F*C)xB*V$+{xX@-1#h8{6Nx95qCt+
zaP5mpBAF6%9pgH=*X=4+rV6g-(~+uGy$hjs+P7EuAR`o;g00Azk9ztuN$y}kwHU1T
zA#zRdl8*<27*sP`7x%p==*FHS(`cANaw|tc=Ns!FXF0C5R;;h3qZDp!ihCP`$>B4n
z#T|#MblqRtYa)jDe%47>1Fq@MmNgxgct`El1YhQT64TJPi$cN`26m1Ckqj-Dae4{`
zavdXhWYvyHLMSd|GLum0T+l0{pI^bfdGfA~#l+_sWyXH>$45ZSpIQMB)~H+-^L7=#
z@$7Q_YFZpKPYW_s!K<O!Xv8QQ>u~)rn`D*N#wN-H49n?PISv}vP6<Le+d9u8Qn(c%
z>+f%c>d?6g64dNeKA+!W9|Yt!`Q4L&e_%J(N6;;%YP7f1eqOs!+C`3f5YW=K9y+5X
zQq=9BQA{hOGzch0v7R<X6()~~fBo4k*wS{UM{b+hJ7C4STOb5CGL;XS-ekl2i;7c}
z>?v}p(jP5m!X;||<iWcjz)8<LHZCZ7uRsYon42_mHm?c%MZ>6ub{NVjo#9aD&NA=`
zMvDCozUwSy6;oEPQ;--u?5H{gB6!onoSIwrg{Z|#+NKy-%XXuXx0b?XsYltL%uu9+
znMPs3Pyux4e;s_FX2cM%Pm)bAL2>K&{Mx;zT+WrbF&ms=e;_%#u(BSiaB%SQ@o{qT
z^0`L@`V3(h>`ueNr5Bs&6vECFl9x&g1%hU7vRGF9p~b!YEfl+;lpVZ(h)zLn9~;()
z>R^;zId6(Jv?RA(+Id}=cM1|9KBp?3)eegsgGgeV5NaZ);5mX2*m>yDece40a>OY*
z(4x6IehhP9iyqA@SivJAo4tXR8wOo|aXQp#)#s{>EgLq=hpdwIst#A#*134Jnks#W
zYu$V3f4$aGl73cv{mg67qy5<3{(VUOU+CJ{Mc>WP#?r*_9|z0-SngJ>p=*!bj_Uhg
zcv&*AxLk`xU`s5ZXu4bIlGLxFqPs+aDFw95Ifs-(iMigJc9Ik6`2D6bL-P5!uH2Ix
zZ_XR3Y{q9ha?$6M8L?i{Xxh|;W||?g)QiO}r@vf!zI^^kl<!k1)6De4QeiU}!DFgq
zS@XkOsGdEDXQ|JV?#~{W8p>=`Gwa6PqaUo&u6xnbZyH#oEmWv-_sNK%w4w2$Ui-z<
zs$Nz)x_nc|zbF1AFn)on7I`L1`qlnJjP2~%w|Vy^P~qH!8VA^aBzHei<7U2aC9?b5
z!#@JCh0DKIF8cc3ojwJyj2rH}{dDaINBnnB@>ECkAs>9~o?ez(?LOkr{=V^JyvOu^
zN#lnya&#~8k$FG6Z(SQ&0+48a^GIEQos3V{EMghpCmeY&dg{m?H#R0<Z8|8Lpc^<1
z4w_%PC8Ua#&TFaiICmeZ@uD*sTY_)NT@||;>1*+6#Hyo}qQYVIEd7H1s)B2{wd<P{
zDnaqAIk3uUd@c{=+iTm(SL!<7RwVB&_y_R1;v4&5F{#XM!09EDed?J^-pU7KCx^S_
zVA8miEp~d*LiOo7H|Un+j)?OicHhr)F&z_D(xFehl;N^`u7F6eeER&<T;g%)%U_=W
za&g`)cL4_kEm{r?SbTXQoV<`PJUbi=Z>aZ^LF<)GnfOzB2ncAH+Crlq^~VGB%_K}V
zW<3s*X=RkqIPr>9*`VR08;R5XZ^1IfeTohx02PR(HX(fFS;9>Kc*u9up}59%Hm?LS
zlB^*yEXt<ZbEygA+bFV*BpO1w(5n<BEOk7U$k4q|*qAd=nEp-0A7`kfRf_`?Hj-RA
z>ridpn8r66NV%*i;;OQO1Q<kWRDcX+viRWTNWynfe9|NYNU+7?f${aP95;atRWvc6
zI=~dz605YjLV^pv@3$%amE7eA{dka-w&f6NI`SycXn0J`!8Fo_PS7C<7HdaNs=yP2
zpeKg{Qobib4=`3QY<X*t_VKM<d3N|Bk}b(LDK@dnP-9ycpBRY*j|oy$wOQ-(jy;Nq
z_0)cI7os;=3JsJ<mAv%!4vi`ffTU)Wb>c7^N>i3)wvmM7){hSG)+tDODC%U;PQxRA
zFz?bKqFu`ItvHaXyi`O~J?S1I6mB4*l(Kj1HyW9gK?RY(H)GoNAz_H$6mp36BFqJ{
z<uhfjAc(3SVh8G>vqALP)PHaq(#f#MP~IE5;}i<=HSi80RCQQlM!7_x8pi`zG;52x
zjz)}kRw7Ra<|`*n=(@@{*7Dp9+^HhqJVS4f0nOC|EU0ITQwe=-!C<sq0CkTrS491Y
zoTV)ZTz~V9az!;~GIDNf7sR2H^)%MJbjQG0s-;+o+%`4H-E2(n`tA%mi}rY!gM#z4
zgro6|Y8a@`xdGy9DQpRjEH6nAbBxsnt;-DN`8P3M)wNg(9rmRD@|UyVh7fKB)j_2c
zMHI;6`-Qjcrfu{K;xS-|Z$%jx_QN|K!1`}7fxmQrRZZpyI<c;409+vQ@P(4L=v77-
zm$;XhK>Qkoc?hQ~5dxRbhGaf;u3}4lYRZ6CLmdP}IBkxr>S)>WB({9tdycP5R$Hz_
z#z@$HUN3^(@u(11r?M#pmy~?dpRsO%^cLB86G>zZ$g65@y1tr?xK_Jn%sP}`BpSkd
z9d7If*?;ZjE?BB1mZ}O%pBdJ-7ehv2Z``)0^T6iu`QRCc7$C>a6Y=BXpiR!2R(3N2
z(|oh!?0*s{f=RW=aG&|B-=B6HapW=Ni+4W5*CNYNf5gUvSij)cIOsHl=x?o>-5(mL
zw>X)%2q77bdlHS!A^`{6gOUChWAD@;*tRX}R#w`!ZQHhO+cqj~+qSdPwr$(Cb#v}}
z9?o75XRiOyM<1<6i-_-|-z>R9Ckljjd&c*)n;85Jbk{o&t8mR|BqC>KM#Fbzt`u<e
zi%ZDSB&J)&=9FmS8I}#l*SV~8igen(+AGxCYJ}6+B6$e(HK_^YBF+(wmbm6RbfAN0
z&N){dAZz8+H4b6h$d^cv>~e80Lg(*^abfRNQGu*yCvdr{uaBgl1LxKDl2*UPxVWe7
zuQ`%L!5qw4DNjbXn?_E1!Y84uz@2n%ayk@Q#RALy_ms@8&tpqJrx#6w+HBNcQqx~z
zL&vE2f0XgNC@3)S-(iAwccAB;9!jak^4%5bb%|Trza!+@xl|`Int|_c@8UE#(n(d$
z?xMy8b+!#z7?6LF%;R~$l_)!b*SDnVVE~f5dzH}%dWHpxGZ~CFgB*o}r7g7yBNTf_
z3eer1QHE^|mWC!S_94qHEC6s$LU^iWTK_O7IN!>DePmI2*^>PIrMUO!Jj{0)n|VP*
zjig)65rpgE3r9|dr)H_5WY`G1I`bR`xiW+DxL<ntCrdsUY54XoM$SHd6Z9;)8A3Y=
zNehdt4HT?t(0MYfG{Fu8)n<`J*T$v`TJpAli7PVkYv@;4_MP>?IW7dveQ(f8`Ni;K
zH=)1Ou>2S%@mjWb)rEz)>X>|>of8FQT9+NPEe2`kbKVI{EC3Ed?;h62FdG_LQ7h%<
zz&tfVvUuN5A7p0TX=h_=w`T422Ioqnr)c|Jd;d@T(dLaZMTc=#!*J8>>!l&}<30tM
zLLr5;Alo(i`{U?Rmo3WVUIFD{Xn*$P&wQhvQfn5A%ZO;`mj9DRS8Uge`BGLnk{KVf
zvM@?<pNIfX@{2Fd7ZU526XU^$xN7zv@?{}bpOw|}Obk^DNsA$U5mo;yzsVIuV<B*+
zl+!50FJu7-*;I(Eb;)#@p;4=}n-{8hw3(yGHKj*MJT3F$XU-o?Rdaj${w-UiEl<cA
z*LD!2>uk*K)TLt^c$XyQ@YjEoRazl?Z%X~p=Lb;#)e8SZW-+$;9~`Ztvz?u-gOl;U
z5@|2hB!Ac}a9#JRP-_v!WDZz`><!VsMC~yO%B|HT;xeHuQttk$Q=>{&BOflinuuKq
z#^ah}J}3Z!FG)_lXV{v2wlS5#)i4sz8@8~0eoBR|T6q+7u_>!rhhu7{6qRL4gm}@V
z{ppA^_eeO<K)xa=t74>V;|aW~Q(nv}ZyV0{eu6*|Jn7I-k+ANjG&Vjhazokb^Wq2?
zVjeMyJ8EmO{>breYw1YOnhx~Eb&fl5F5ekQblW@<eX&i9x)no(!GSu&%k0zN>w?M?
zv1|^KP>=m^$WVX==K88fWC$GTmS-aZO()t!&+5Y`PguNcwumqfdbuG2-YP`pF9^_m
zGIA(6`!;o$o)%2on0E#BtRGT%h%G0^#lpHeFylK75qyV5$Vu&MQ{fsl0uBi&c9Df|
zdaG!&=UaAEhFX2eo5&$pqx>n{<T(Y#w0NZz@|5k6g?h%Xaiu_lzyIu58k`RlOme!d
zVqS|l5F50eHc2?YuXueu403a`!-6VJp&k*tqwb}Z4yp-z=uA|zOmUtf7rZ$lBC&*G
z`-%3tcg2pHMv!*F4hecek?nHsO^Q!^yDhldru1d+Wv9H!TxFrw(v`Bssi@nft+CVz
z4Cm6ppo~om4fGfQrm($$X{jkFBb&Jpj_m$cQr-;^k8k^1;CajqqC>8#8WdzWGfv&V
zS=$h0B5YZ44lwwMMF*l>)u>zmLTrkAY>LV_0460<GS6C)ux;luJu5e%kU{iUz?PoH
zlx{b1?9#t*PMkxV41S2$8Bq$2>smP*vsxXJ4D#hXGGZC$-CzwqmoOib6h*ii2}G<*
z?Qmov+o6&%%cyqAT?Ux{c@|Q4u?K3O%#HM3qpsMwIGkFWrwF;S=urX;q6_LTm1CBe
z=rUa%dT$@!h8qr9B49=uhb-`_m!rT0%T|>C99!TM1cIO=WR5L-L@+kIW?2b`=R}YF
zxwU5BLT(9=lEa%%%B*y-licG*g~g(f8V~2tlV<*IW`Z%}tNLRPbmQP-Y@^|1(1250
z>VpEYM;SLCom84)MW^6wXk>u!Wjn==KA-eVfT3^CU<kPYR#*90;Dgg$zThpIdX|P2
zx}uqWfZwJ?#7o~fw;+S=xHRq;MML3A3^3A>jBT8Gn>Acz$Oujy&O|zaeu0vaqFw+f
zD1xH$SaPu#`Er$TpLG#J(X~r^Evf+OR6cH>iffupjlv&^OieZpd0G7(9MOS*Xu0ji
zS%-NLl1F{di${gk#D^Yt&?mlox0%BSlCZsB+KV*4roXu8G)U-x=&r>5Q4q*XNv%VM
zz^1Uj6yW+7mkj+X`Ly$6FvVDdv`&pO5CWQpCgCTTlo`?HRc=7=&Bghnipo_^h%oSC
z(g{_HI8QO0C{6W=S>?!FBz7tt@ZcNuS;Kr3_zF!M1n(yYA{zg0=@DI!5D^`@dLy8=
zKO9n~r6viqvk|so$^MGgFa$LlM#xV(aUJ(s{tX=bY2dx+=8a*PjLlKaokDwdsG#h{
zW)k5&X2b%f$m$><m}bqfA|oMl1+GXEMv<j;U=hJQNN*5Shl2l#<)%%(K)rNMBXFhv
z8=3oe&@i}D7d8tsBwJ%&mH@%<z$c#0*~Hk4ODT4WMC*X3)-nhIezc2wOG{=>kaHfR
zMp+xZ_ecKESK%acV69HwU|7ROK=~HXp2*^a);>#^ViLAbtS=ZIqNV>RTs?-h?4ksR
ziIkFP;W=P`+g3Q>)}{#T2SZ%W(Q8)sO~LPTk#NLKN(Zk|{3P*-<9F==WhP25`R<a&
z!hjjD$xot}=g3r#w0up%+v)ZSK^Mee%3<);zo&n;yZ2!YX%GS8;>x5G=M)mB>U_m?
z1eK{njtLO9u27DUP>wmY&!!g>hR7(SOoB;mb@;nkWjuFVdok!L#+L>=uv`)|*n77r
zMCcsB$6)ZWMLP}mIVxSRSHY+3BHh+hG{C823XlbAi;nnv$c@mlG;%10U(Lec*5rWh
z^OXb!iU+~VJCDJ=L^{fB$d2;ssE578DE`q4>S}j(4Db5JXU8x_Mz6$~74fXYe+jC)
z)er|d+k8R{w>Yn{X8H)Xnsz5<{uI>WR<s*e{?HKD-k!FI1-VINYoO^4mt>(uvdl5k
z8K~qo&f5gzK@%24f@{cGM_fZADwGpKuyb99a{I0jV4k5v6%bZkJ+$g8RM-BUw?yip
zRDT}F6xS&ftgc<*WCDafJwq-MZfB?a^C?41$GeT^`|(pNG>n`zscRCe!_DX84*lyn
z{H<`-UOA0dd2gq|B`uG(Ua|1R5~0?vs%5RARNC1ehr%CqO45bHV&oIP$_l~<4D}CM
z<S(AIHCvisR-8<Bv^j-iB)Ulzi?S7Nu$y9U|L9!5y1#Y|bndP2`k;E!^Y`FBN7;j&
zJqEUU<w(sT68owkhlwWji1P{m7?i!78gyzzcWIXi6*qC*(+c2*$s8%On`;u*!n%L`
zZ@HnRF0M5Gr(`<x2e8KW?{dRG5w?Gd<jswKdgRTW+;z>&{~g%d`O`Q}Ao@Qw^6aSV
zeJeV|o-4ItEBxRZD4Kert6Fl5^Zia-PB9)Hk+0A0i`)UwLoPD>0$vNlp30AH9$m>l
zFnP;rBM<R}-se2H`c*d{@8{)?>V=L<oFfk9A<OQx<Fyx<y4PBBOm%YHi6n=Zu}MUA
zB*-+bffd$BCz0Bj%Zm)NdIVEqTW~wg=z83QjP=!@29D1{X@!Nd{A}u^vhqEwYn!c*
zFu?7q{g%2p^SvC7L^VZs35U~@#7WX_o?|!0Y#BdSI+dA%MRM<%7;PB;bX9ALP9_Ry
zplDgm>jYLjO$|^4Ay7P5f$AhL2qp+)nU)^vVb>Sop6{%6myK>{)8+Zu%gqy$J3odP
zSv5Z7SFKqEUJ60g&e2b|4c_~)s)jh6(wal(#r+tb@kq;Go;BHAtAo50w|nIwvk&dp
zCqFnOh}=2RQV_efbPzNcGZJ4>^>a$6#UmIq@k=a)A+NN0%5bC6Hj;F>xN-qM0oBmB
zF#W#@4O2;q59v#cLZob>{Gkiw;gOFo)^mEP!2PU^=sfzdCS_(t<q~^{$iS%rg!Fo#
z(g^X!>L)_M1ggwL3LNiXZt)G90P5BTs7tLf4#oW>PH=&fkRk_4`7@U*&*#3*p;Bg$
zT0(*$S35dO)eUC;lj*@10e~pVTw?+yXu6@cH*=fW;#a{%Qtq*bT1ASc$brzqppCno
zNeUXA*2!^$_o?{lZG{ZOOav9w(7E>nm6XvI?8>;8Dkn1>w_Ex@Fb;Qh8>K58Ve8UF
znd;me75OaIsRc*LTsT^k3{;Gj>G?JS^k><*{Hecs0Ovfiz?^!gj+vdPl6kTbQNtYt
z4zLd#FxCJ;Zs-0x>&Oh)Tbr_^56605yqVq|La7U$!<+gJQ=yW3<V)he%bZXAsn}W@
zhuDHrK~PoXpvS7fG%syPe_eIFCkm2ph=J>BBDrXL1GtZO@$N@FSqT4menT~IjjJ@~
zN=&PgUMup;D_G+~YiHr?h!H~>dwr4$ZKMgGA<d4mn!2YnHc>!TZWhLUO8&z0>De+_
zrG-1Qk#%?4d0c;>s)#VCuYp$KOVMefoj{J0N0bXObMha_1*;sXZ7#$=#B#w^f)fQY
zA4HNYAv%6mgYhii>r8E2*fOIAI&)<W8iGDPBdYfHgXomD>K*a&HUpG0XR&NOy%@Tz
z>>R5`VsDtL26~D-xG842GF9xCx!hHS!iPD<8~rMS-akCu#q?K5YLOmIcDI@qFiv(p
zE<+Y5j;eN`S{<mC=%NmXhRsH|ot}A|yo@<LdFH(eY-u_iIyJsJogW-Lu9rnk$>}#}
z?PWyUHg28@#<Y@q-{6=q{gp}%s+4LK3zjogCv!6aqMh5X&oYf3ZkBKObzf@F)%TT;
z+ccEWM=}wN3*j9-YT71On2n$utc_ScGe<<>;+w$4o(>guV7VkYi6AZ)JySP}Kkw$m
zojDP_@S(c8hOb;s?*L64$cfRMhPtnF<*n|`&Z}Fqym<uQV7Yn6HI&Kf?Bv)@p=QpR
z^&Uj>#4mZ}q~Q6Veb?4V$9(5M8w~Lu$(8lr@4$bma{dos@}HfCv*UjOmn>4#{9%?O
z{gdTwL**1pZ0UKbEe6n<)(miW(c=`nH=04Pwoek5F1&c#zQ&4gdnItzj4N&&b^M-U
z&v~F%hR4S>oXQ8tg84>6{HrFVQgE1(bYx<TFxj1!#4>T<fn04nK5u<~+DbLvWZf6F
z?`ZBQ<(}c@yhXB3;_6c@kX6l4J#QI44tWqgB@%(kv6lvq3D3}f+P9VG_~km)n3tgy
zEJ9W`ZbZ9PT%R&{?+^DD5UU?An#oh1C|Q-@Nyh}XN6IFdxG~oh|L}p|2|n4ZDbW56
zW^Q&(VkG|8WOtc|BA2z<sYXc1_U#jvRD@RftsBF-ehr;cuh4uMvj2H|_kr1*cFP<)
z&msSpVP8#m|67{V{DHIMgNQD@(<aym(_*u4JE&cIQR{*MrMpmns&OnLmpPgx|F<x7
zlWpZTc*;qn=qK&|pxM{QU$1OwaP&Dkc&w{hCh1!1T>g`2Z1bb`p#dnEvZK{()0>z`
zGXD^UQ;exrfmyT$6jJVFGvRIt=h(#4I~cN*bsxTzaFOsnXvF)zhG^w%-(_FPk2XV)
z$2Virc_u`Pf+5TC7Drv{o_4~c$kIn$E+&rL{(&2*zSnG0QKv2(+Yux4PH0GP1&v@_
zI0Oa+PxwPBe)_XY=FZ=*6S<Nv_$CZ<^zUPU3}f|B{-CBeeBv)LQ}as3AP}KTr85un
z`woB6{-{@@jPKq#*LiuOujljf6Bx2>*ApEN9NSKsk2QeU<5$he#*`k13Ai3|)*{cq
z1A#lAr0&J;2KZVTZ5*U28e_MeL5nkXp;9cP0kJyKs;QzrlNX-Y@C^n_7|T)M8Mz08
zqX_@LhxWn6uYri41c(|0tBC!z8toQZ0t!UsqjZ2LWwq%V$7e!?1z9=wIBS8Ry^n1V
z*}~O)))~p>Ye`CkajZvc$w<MZuRo&LzXU!^#rL7|2RUidM_I;<5U8>yfAJFH5B}u@
zpt>`ZJ(zj9p6J>W%i~U^edXwyyV7ph^(>c*DzH%`8(^Yi6+J$jahD`Lt5A@Bw)vXo
zee59y^{z0;pQ7>_bLm%BG&P5Fs8g=UbC5Rx^MfN@erQY6c2Dc^IB+n00@N`d``#y8
z{OdUAPAMPa^{GO<-oObX!wGy2%_fmk^Jw8_Umic?GV=%k<VLL*iALxeU!DvP!-R^@
zNNw`WFy`aGa#tKGd8D9u?tI=}HmtGVxVqGu1J^nE-r>l<`K`{xtE#~x3?INi3|I5e
zXm0~9EIOJ^^IFxFo~%~K&JC&e2yhx%q;|{;0NTl_aww{kdRg0Ra>ll%=R?s`N|bsL
zNPTjcLcllliN(BAW%TnvVfDUk^%2&Hfi9y3W|W7O0$r+?j!t{07*XZw_Ehh0_l#Mz
zBO^YWMi-`vR@0m16AUhLJ5M^*n29Vo+o^J=@%^DnqHwR^t8L~Yr;{J4_~(~L4;)TT
zbX}h$g<S)FxyL@2^aeQK@g+|)t?-XmlIIgu2f#>SM5zNXx@;ISf1)`4T3VnfqnxHO
zCh+Z5dbGg1QP@30rN|mU(bbdPKbd#Q%&Ro7t-Gi8H?KTB1xTqxxA;9bsB!isrzEy!
zZq03m;_6NGsJ|iNkf$G9jqWC1lRmb=L(;+l$(E!wl2?LuuxQpjgVkW5B!EB)vuq(%
zPBi}`0y^^){edB^*#|bSE(Z*@4$0!s1=<P(r74KFrRID@0|C3GQd|Xn^PO*jFSo;1
zG=%34y@P{X$;5Z8XzI$d2eL^OqdGQ-<)^kt#!}!nEuuYvD0IVMgB{3EgKV#=&Gy-g
zKE7YPa9vxsC#hQizGM@I_0g`z7Lrm2SD4US86yoZsoy<Oa=mp^D1Qpasw+#>mylV2
zCf$E^cs#db&&;GK!sHVbur{8N6?I^kL2T%5ICZbl1XEvbPZ1bY7Jvr6_K^JD?3IO6
zn@9umg1$qlr-MJ!qCupJ+NzjON#P+eo?Fpg(0T(j!`*mZd|u^g&KN)EPngqWPqWc(
z@j|q59#}TJ6AkXSxa5FM1J9O$<SbJ$fIR2e7i9wMSEqj-->h_hc7Jccp3&V1>b3re
zQuJH%oN%j`;cFyjSAC3_hZxqM|3=Q8DZR5}GUv~G2a!?XoFPe5UEVb=2=7*JO%9bX
z1(7a;G581_Yu(s|qPM^?nXm1uRTtet7+C9odD8eu!kB>IUbGo(x7RUkSHPgawvx@Z
zCmxFa0=y_8FqEnrmtSire4qtrm<hu{gIB`?M+b;eAh4(Z`DxtCry;X+wy5EO{9w3>
zJ4iV}-tMSTR{JvqT^@8A*U(Vm+wuE*|1R7MYrNlB)3eOc)-e2lNeY)fP5(yhpZ|DY
zcr~h1z5dYaZLxp-qWgdUTlKAex-oQ}-0l8bmq4ewv?C@fLg&6}ZcB(*JCiYIbrtox
zJ+k0Drm~T^u!OjmIx-tzd}v7ODu4*n^YZmMhzZEYj7aMRJ~<>{ZnsYN7092`F|APC
zC5^+HgU6S9rO?-pGk)Z@Cs-fVQ_y2eLsda{hu1u^=kCKbW724%aWA2+Sjx+y<!!G5
z2=N?CMR!FFbsFNFxFMQxj{>v0dAqN}w<8xHc2t3{!Ierg2kPyVq^2ok)EC=^FJD=8
z^Q@Frjm5hf(nTJ|rEyVZrniqx#-{o)Pt$CU#FbYp^bniX6nN_|wk%nblxEiy)@50s
z;|r~&HP%LFh0!?+b+c<{>V8!=23GWs&_8dDC{D2*k$*&G+a*j*%$;aZIbZiZRd)JM
z!1eiOmG;Ex@5CZs4C%|>6~KKoaaIb|ZrTE$0ukWh8q9*0HCla(cnuHb*<{q*6=L0z
zb6Li1u8M!%)L2@xt4$qTkQtNf(_B>_@r|3zt38oau27t3Js3}bB`cY~2vCm=K_UYY
zL}l``%*N$0$qBA+%vMz{ifuVVV2I*+I~j0w%ubahp^P0d&^9JC9bg6CvCLB~DDV(y
zCYidLHO84nQQN`YVd-yJDl{%tlXoBv-PL(pqNIDJkZWn2d|>&Y_xG(iC@DS$J4n(f
zz**{2;n&BuRgb419FW)vCo?x1&JW;GN{DiJ)Neq`sJD?C6WQi!Qa`dbmg)WO6~hwi
z%fmSP0r-GFI=6eVtZ06yq-h)n<e@PwF)ITr5xk5h_rAtnh47PT;#v@}T7cHn<`deB
z=;zPOK1(e63~w(Vs_+VIV)g#k`USEUP=VkqdVCS8VY<dOXD@=11+x|1TdQK)>!~ug
zmF=S0DKrCF;VW<R%T3yoOjQhgBqAJigss(_&t?|r&ROnE4{@n|0&WCqF1Uy1oe6#P
zb_-qEYH<qxP<g6HwQP-#yKlK@-pa$3w>`N#vgV4sYQ%f|FWDHir*Fbi9N=#?HYnLR
zGPs*=vTJIiWTZgWmylZzLeOp)8jxA@0GnGxl+|>fQyj^tPmA#??AYiY<3dTcp_(L6
z8{<G2KNW5Y#ZuusbzRx_08_DwxR$DM;I5~OIa4a)JceX#6~Yc5UZ{iSps}tmb<s=4
z`|N^f_4~jAlI5EoonR2?_?EUt3J3vs+i~)WQR(5db<an}cI4L(%2@kZ5iM>Ir>gSu
zwn_^@b`0KK5>i2bCj^e-(9-=Gdg%NvCSe+CQye5pRGDSA(DoRyNn7TTaG)~{wERTq
zc)#v8oqb&K{h%@NkiWr06qdI$W$+R(;(3XYn9?;(8yMXrI--C`0#rOPq_e3@Q-F>h
z&^!nny#$BFzoj`9e84N28>8XbUzS$jvSc`{3<>eOEIPR63l>8q{q?YHSB=5I+2P76
zx{aL{37Lsq4wsK*$thrvKEsf-_fdBCDr6EfFCA5y5AkhQK|l1f<w1oOzyZM^qYkM8
z@>ObnN%cV_O+*^qkcRLe`)7(Mpmihe7&XqC31@2cR?6*3sF01WBXyDsyB=xF>fyxm
zR3Ruq)c4t4LQWO79d?~@;eQ<T)XKi^$Lv9ozrAp)b*yBOf@KN;;eg9fV2l!5F(WgD
zMgAtvR96SKYwDVimgxhY14Q3Mkg3CzxUA=qB+V=;f!rq_%|rbmQZJpi7>Q`bW0gM|
zf|F)-Q27+7M0y}G@RRDNO2J-PM7-{5TW%nC`+bqsPBcMFHPNNDxg?N2Z{cpN*ME0x
z{G!|N%Jn>x*kiwPf}T-D6vsG1kjYwUx*qH_0dicv1n<Yz@`R?b&GRFN==}Y{G4od&
zPL(bU-sv65aGN#qNkhF5X4Tx>fj%08lLQBz>6lW>|8Cxh5!^`eTA)uMSY$i@PF5<Y
z!VDzQUN%>ynB|F7X{|G9tyZl6Rj*r6xL!c<$a=;YgU)*Wm^Pf@9m731NwkMD$&qr<
zc`hhh!N@WT0O>`tKVkb7rEQvcb`|;}d_pS7CXB+Pue^n@ioFh4i*jtK^t8CLtUFk_
z=KJw%a$Bd{>mIgeF`<brpAw)mriG9|KCaYRQx+&C_=;!rxzpqIO}gc}^+<ZiyPe<`
zR2^k6jsT;d${!fIOtJ`^fU0l_<}m*@<m3=Lkqe+PF@r-f3X*Zii1+fZoF6|!X*XES
z9sajl7D00^%rarFwRU193s{4QV)){y8_}xGZHP+@Z=cN^1fX<vRhS$%%je1vU3p-E
zP^z=~42>TSP+&IfYLl9)0PM7iJQ@46=HoiWz~vJo<r|aA1J@L3rITl+Bc40O#ToWh
zX!vhTqS0yMzZv?R6nKzp8xXI_EXvx93?9Yxq`Dq9Vh>lRq1}lU8p>km;?yA$Vn$^B
z@34m~F^T!KhuZk@bqr-)PSERI1cfKqkEE7=?a1^9MAJ2Yxea18UuBHx+>$5ZCjPcq
zjPo}0Y85oN{2>9oreO&4`GVBK?d~T;$HfO^mqmCFXSrfYhA6m$RrOU!fXh*yCo{c`
z$1V*)LU*m+D6wS3tQH$bqI~(Jez|xuwo7h=Gt|=DAB&tmp`t+szA*si@5-P`70KM%
zu}`FIblbH?mV@@4ty6{)H)*Kf=dgIT1ejNRie-CCaLfJ9sv?6I#;2aJm`qiPAvQ%s
z-()erRUg7;&Dd*5OL3$~K4D89v17^Y49A>m!f)0?qGR3pv*FwngAD$A2MB&<O{NQ7
zBy$sI`&LL^aQ6>uFh)h>c!(haYNgPDgHRMh(|On)5cbFCM)8}&m`gr<t+nKujN~bX
zMz{tlMR2vJZFp_?sd3mjfwq&}N)Pb^hLE8^*iq5A7$jIhJG&!vr>~r5$84>Ah%a3g
zX~0MVVW0lO6}g3-(Iz)(W4{ut>qp)99+I!X04gr{vz2luxqL=k2b5I`*q&))cHBa|
z4#_C2rvv*vbE9SV{5x1w<7K@*!xKUDrDF^N*BehDcv|(2LiR+RC!r;lEb1i|Znkow
z6fL{Up@b$ugu(Lk;;0e>q#}4*KF;t$y@JFAesn3cTUD$v2NRJcG%?ypE=!-p3N1lj
z%u};e@322)Z|jD5gN@N<ao#7SSpTkdrP%`tIOR!PD9wiAtG1YEx`L3^A|fr!{yen<
z^?`?-ksK|`-q++|)=nM#cZCF^2xEDOi7}aOekTCN<vmtl{Zto{=b|_71EIU&ZL@=y
z?>!bnGkqz6cb6IJzR2R-P&)47Lh_1uBO+j!vt7Xc7%H+C>Kxk@*af;~YBtOJs!FCj
zKKLPyaA~i;ksXR|3jJ2pRPXhi`-6`(vH6PVTyr6ngP>6O6Bp5+ccnh*f}-IbKFV4y
z^pbTZfr*uQ*|{F@ovm#W>hsGF(=a+d{iAE7j#=A}RGckf0khM*`mCb%Ga&vJi3U}B
zR+~dFm-WqTvYUIy?3X#*wlCgkuS;0d`7$isN!!2{k83Uar_a}rybcf98n=Y@ZJf*}
z*oX5zKx8rwG0e99A2pb^e*Dju6X`%<r3<s@>*IJzjZTNp>)G{3f1h*_HBExttLvNz
z)Ij0`6EDq7$_xOhDF;^$e=B8zxum0HKX#q04Ot(lyGTSpi@k3;UUwpNw@Jb$o?-8o
zMt;W~p`!EO^?b=a>{}3@T`i}n3YW`iB(M3!Ln9CFoTmOd$_xzE!{BsgCyI|VASAaI
z`%CY`EuDW_p5;Hl9h8<TBJ7R`*620frF*--jG|Egv&Y|Kb9nckhUd>8`Rc!9!8+Pm
zng8@X8`~KDAS3lnt$)P)f3@VQSv#(?AbdsZ`rUfhVP-TLur7}hXUk(ZE=5v$5;ZP+
z&G8Wt-AerCLTIRbfAn_gRh0~P#AQ$cyD-qr_IB}`PKyeB>6oR!7#Y23j{A}E`}b_V
zj`L@1;>uA!m}d==DxAxsI8z$D+{#GRjl?gaM{zVZI9VeYvj#*^KN;7jxx>V2l+s#+
zVPsLp9UA9e31*9vxc~C&jBr|N*&xbi5JbHEX^R~b`pZGZVrkBpMTx4Z$aI_ToyEm7
zImC#6z-xd=VqADgdci0hr?sbB+d8OVfd4s}o2^oD7c$eCS>LnT&EYQ^bO6gX2swg8
zAPQqC;If04yv}>(JCY%aJ#zMp?IvXRJz|O}ddK<q>r8FzxKEsFW;QCG6=~;1HQ#xw
zJJQ5;{&wE$gN?s+MM=_n35lxAfqIc)c1}I*kYzy_U-2Y{(TmdHtt_(17{A{uMPD(Z
zoNtQN9$z4-%sA5R!pLl#C|;6UG6Xg#TCHMCIo|B8+X+)Urw>e9ocL5VU)U^a7M~pE
zfR-iYO}NNNu#?~Be#IP}LJ-vMw~<wDcOA=e-XtLnV4iYI+)`|g6{}R3bfMn^SgVAK
z7G<4zB;>&W$0t0<P|(JZ_;3A-wY3jgE5!SdRXnr~!Wib?!Q4Y*`4bEo3CM|=$LEe=
z*3$ty5`7=EFVwP0tD~k_s5fU;yjpViDRr8J%J{NtecXNkwf!TasgRR?aE5?caZ}{k
zlGYCpQ#B45Z@x{$+Z3<|s+tl7-Y_g@=y5;zn4onsQFpg!LO#4mMmJ@#FAYv%KRs7V
z$^-Gj@GNjy3gV~^v}lunXI|}zs}P4WvQzFLFQ$-2%Z<*>Gt)cM0szS0yJJTLea!<V
zQs#+xC6FuXM`_f0KhwWkz@_Z8+6^0Mmbh1m;ox-6lZq`mY?(_f)YC$cW<{dQD=uHd
zuetEZS_n&5WsMwV1q2|-l;MUTgaQT4KEzxuNu=6x-At{kox~WZ{>WOXD}qfR6uxAv
z4x$G)F3`K<tjchmp_vO=0j|1h5Be-xAIz^-HxIOE(uk1RgXPywE^M!suhU?Fkdts_
z^Oowi9u@skMxfRula(E<w8ms!n5}|gta%?iK<dXU(e8E?VVynBP~xOwsT2-Wq#O@b
zUIyYk@m3Coxxuoh+v*DybT{8ZIg};q0r0v#@n(XNY{cT|t79EGcD%x_rhFdVo7WP1
zU%{wJ#iX5>)>8I@A_3g9G2GSr5HA_Y9<(zLd7Kxt_m}7#5!n4vut@t)oH3I%c82V6
zkgi4ZwjiYS;`lxYWsZ!!54fd^LQ2Qjz&I@bpfx)@8OW-`{t}zMwZr-I`t|UnU!-}u
zXhk<}%15<~A){fNAkY8}CwX(5@-9Xej^#GSZvc_10*g#?2-b*(XN}Hv1QbU^DN6I@
zN%|hYqCD%;b!KEjD}zX}eXma+eFgbt_8x=PxWmhEJ%USqlbD*Dt^*Ss>ZM7?2^EX*
zudHk%bg+}sEetk;_%jNixi{5m{-Md=!BkCq-CEo;YM(tSr5^4Xe5s5eCRmeT_X9(x
z*Ba;b@<5cwl42uTZ)MOU*9V)eAcS$?+L@*9+qRy(mB85=j#jACeEm8*3y+wYw>IRw
zZsjMPJ1Q_uZ0jy)Ah`0qJM%B%Hum{~x?$DBpN<LRH?y;!Pw@JtFdG)K6?+hreR$&(
z#%Fe04&S^8!v;rA2#{#9P?bYL#OU$j$DjG8?q&aVny2$vPVZy@!`xWNMMi!!nVMi>
z?8S{h1i{n|Gj|qNzL&W+1ZOO~GqCcvC`{HaM%Q9P`m8AY%)<%YfQ>B#qq*+TqyIc|
zJlz^u7AIG+&s%fE56jb-`=`}i30b-AnPWAq$VKySF(dZr@13l<Vj0KWyaC-J1lxKJ
zK4Ju$_ei^J_WS&GiLcHu_qPY7`p12!2LmLzEC(*QWsWO?c{R4fxDb{;FQ{x&t_u}q
z$<_fl9M61hO<4%3A2aZWQ^%4F)4Er8k#=%{CI$vq-F%GkcKQ?`dm%mQDw2hHT?Sb=
z-Vjow>Qoj>qY2!Bv@YB5Rnz4LL}2H3d+x&f{Q5Hbkig(({*{nZvLnYN*p<Ix&B>a7
z+V*{A8Ci772XUB-lmB`IHE?!bV5<gGpAO7x6nLEv(GfyLYi1)ZSA_rdJb{^)IY<fx
zYNc<2uC}Sz(}!KPmiK-xK<i{OF04m$S$VLaCf)JA4{YNCz5;X=n*B^8s}=xSTibG#
zdcwTT!)ODVH^YNP3Px<0_2{qab<oWcJa>;JsI<+v0-Zy4!BBVNhb83}ULl;##Wc$b
zf+wWlcUx-%R$|Wp<0v+=c4X=WJCnMS(%|3XZjsIXa@-~Pm<*5+I3H<;6!A|aH`uMl
zQoQ@=*lNWV4?c61f#nfF-EDK&U}hF!MnM;98x6_C&Aw~g!q0z{+3X*}Z>m|hV@O=*
zYh>?dQwH~O3r;`HUV^URzB}63@1d#9a1e?MUa#lFJ`7)O-pxn`=xzz=yX6{QN0?;`
z02!Le1bvipGj(P|lEM=hmaC>l_cNX3)9hOwAUCDKByVoo0SLE%A`8)nb=fo(!zv8Z
zO-dOF5Q&rG#gtRmqt~DJSAQ4;&ba+G)oh|TU$r+&iiWCBH+RomI4X_ze~_n>UxbC@
zu6>yYVf^{+7D4n_Fh+O#FXTgQH%X?RA-iYoo?jlEIldl!Xa=$-UDzAdBP{}8J4J&_
zHs+8uVI=KrbaFxQO%>NPN5~mccnj?Gg|I9HgA~(8x(S#t5W0zEPxr+eZ-Jh%eBi`q
z$7knD&w%b<!#$csv07zW1Bg^e7P{6G;w40j{LE%)vi8jJ14$nnqnWuQuSF78OSAt#
z+z=}X({n@SilHx<3B%}bu%#g5($Y4sTg!3xg0Sf7dZdky#pvzN1%g~p>z@v6|8Hx<
z-RcCm&QCb0{m0($FZ2sRSs4-Cf8rGXMNPK%Pfd0PA6(~k4O$UuyM$e)1b0Ii@o*6|
z0x)D|IS>9{DwB#wnl)I?*XJzaR5trHz}kt6DNoy@Ug-)70UHbz6-BWlUO|C7E*cc`
zyH2%AAJq8E>0RZ*rO4i(7y#wJN0=p&<4J)EV8S^mjR_016LK87q^Arq4gx!XDM~Hj
zy^R)WOd?V@5b5Z}(SAGongj(|dy6lW0N-51%pTt93h$vAus~fwuLKdv6=c$2>daO<
zV5D^W0Z1mfiO6=N)U?2?o17auxH+lthK&VF=2T@&Z2fxE)_^GVFqpa+2p_N=iu54g
zbUSN53*(i)q7kJ!GgNr;-fDoXu^YqmV#b&>tY4i9@xTEmR9c&+;2-J3&-y+b>H~97
zX_A0Y<Ub~80|72*>e8*VAbwi@*5>7G0EIGd%hV+_#YB$Fq%P8Gg;Hqn=MlNSYNV@B
zN1R}~nES-o7i2sARB8)(n~9ToH<vFR6mKOx!>^<qlqwTu-pP6EN1aNtN0Vbjz~*)`
z-J;dDj6C<Wd_V5{{o^$?vI>X{6Xc)m*LRXs!1#^@S)EwQIn|qeGl5aw8tEi!R8YnE
z=_2qJPXO!i?v6qQZ=^;l=Q^1c*+h`<1TI}He%DqV#5;;(cn-V)hx#KSmlE7GIoj)v
zdiSjr*00K>0PEKU>EG0nGkhSxU_VCezf1Y2vmWazHwtrvqR-545J;xgI98*dSma~)
zEqCi}67~&X30#3ZCW-TE<$Gp$UppM{1)35O*0z<_lPRM{-P@p_y7+P)jP5*)r_Ml8
zo8f8A5YEXT|AFXgL<Ny!`#Hh~KS!AM|E-??lkxn&ojLzD&qpc!-}nU#KNSsJmT({_
z>)F4)U{ZVFtzq~&*qnc9<-R_r@QX6YoM7YP+poLcuQ)kji$>8rM}Vho@Nqt{7?X)+
zEeP$D+e(rq0!6~!V{TNOk|d*MK*IZ(UIEJD6Ma*d?6UkqurP_n-58|%0_k7yoXg9l
z_@)yDI7>JlfZTHw%4T8kCtHIu>aA;F$;SGjm7BUcbX_$Zke-|~BTaUlaAfwHq1hg+
z{G8<2;{Y&fe^()C0;EQGeC%&LPB2qdR4!y-@J}|1$zwpv=qW37?z!dO#ZT<pO4RGe
z6g~oq8Q~*0pG7{V6x9|aJ}Uv$;7knN4^jo|2AI(oLkC&Th%|?Ey1@&7LW2HGT;F3B
zu6sZgu%WylrY3BvXgxD}FdGm{U}goiK?_@TJNe1}*O(e+68zO^EG3lw*skA(a#k~(
z<8>fR8=BP=yRLk+41fiTU$z*;%fF5Bdn!L!JvZr?FnQj1(xp=BZ`PmL4G9&msx}V5
zequ)6@7123u#N^9Gsw44ik24P{6VdCG`@Zcboan8CVk-T#I9%&MiQ#wN99f=R#nGA
z{MZV1mjSBKH|5B`sHBxWOQ1az(T<olG$;V}*pZ2~Ev1i;isH3Oe!Ij!?TceX2jd^6
z9|_6m$=o<hpG@{!6q8{^?HfT!Po#|@D3f4gZx5HVY^v>y<m*JMwM}PD*)&6@^9t!*
z6g!rlGC2aVqco;`vps_w{A4Pd*{Whc0si+Lduv9`Uh{K6AAUG;{{=(N(AmM^=dG!0
zXl`d_?C|eL^xATr4(_wMdvB$SiP(7#=1JcYP~Bw7_ZWy18wo@>E=f%=Ig*HV{7-kn
z1xeI<fHxRPiKnaV_2y~u5->h1amgTY;d~A~zI!&8Rja376us82>H;yVAlpFyH>fb>
z7A%Z7tvPk3x1ZO+5Jc6^Z#py>)B8i~OuwyPz{N>>6Z(CAsy;b1$*)|bKs*qGMv8VV
zOU$ZEWAI=34*sIk5Lw+mA&iyQf}(7qD?60=YjBih?!g>eH$eWru6MeH5QlH7&mNfv
z(1J^?<)An3+6-A{pCqyf-ZA&;EV|W45f9X$(;#{+mXUu;9jfYRS$CM^ocDU)V9T%5
z*eDX^H1{N6fSV^m*V^~A@9@X81dBEV4c!5(Bf0{5stPR0t-{DTcgN%|)|tb3PdS8%
zj<Mp;34{2!&A!d){GwRo%=gLh@XZP5a_V9^dK|KAA2&i_xo<Co*oZM6!|`;~;DAXW
zM2b=l7iqk;EX{r?D#)8OgfuA$xGpN4tDugfkMZU^R6tY6`-L=RmQuVq=Uni3991le
za85P=O_Ok><_uP}Qw8bHAJ9yF_kZC@TCRje2=dj<w-W)>;Y$!2W1=(`qAX?Rthirf
z)2MWvmmi>%{LVs9rgjg?`dp*}Qoo?*jWJ9mdG(JSfc1BEe|h?arB^?A$CL5hq7Bb5
z|F{)ueY#`8g`=w#Mav7=6avfx?!%ZY5`v%2QoS%FLYIWV09zZ2FL{slLh8SZ=ud>H
z{G#lp!rvrncNBozHUJv{wxh%9R=`bm*<r#qbMh%72J=C?-`MXx1k48vq#PNN2b<K6
zp$!}?xhx&Fo#G+e<_?|||4JoukJgsD7}cu~R67;wJWqqKaV*y}*Sh9|9_7-mz0esN
z$FeRTf$sbqDxo?W*6hn1{qY}x2+K#S=9!;sJMw4w`Cr0w{{OE+*UH@SU)7kbA4}!`
zL2xyNtVIZkH<`g&v-q;QU;^4;t*kbAGMJfL)#ZsN6~>o#cf}+cc{YpJo#2NGLvMGu
z-xob6Q3tx|{-vThad|iw3O#gaYU}zoJY=tQP)@o~(Rj5JxE(|daguO1uQHX8brHOi
zr=VU=Pk4QNxH9>B;|V)1`_o5t=tK_WT_9C`?teO`V%4#1`Z7L7*`Yu(LrDd)$=*5H
ze-D1R)MKq9A!_Sw*PjEEqT2$7S)<#wFpnvlyc}`5`RU~IUJet0zdN8vrVG)={LoMr
z&7<YNpH$k(ux<o1+^a5ahY`c0wKuFR^6Uouo+YI=Tgxby4e`{fXh{>uz|?-R1B%*z
zr8AxT96>p@lLDbN(}rKx=!;uZGgAG1fHmMa%+R&T)_%@rV%?w%Z+<<DvFXGwa&sXk
zc>fMQ=lQMCav-T`X=hj-<pG33#-j92l*0s!jtR$Nkq@`Dqw3q#r7BX<m{1+Ig4tM=
z1qC4zkga0lnluL{lctYU`s9n)MbFPexSz>es5Jumq-37vC^FyEjz+kU5}n{W+`5VJ
z$cjq3lQxd=2z^Y@JXKdyNlqYfUEl3|kbyTbJ4mv6fv2wspg2HU<AS`WqG^bYivAf%
zW|>)`qe<Po4%P&~hP`**FkZDZLUKlMw}b(n8cb--Pxe<<zewa>zC^7Y8wEJSVFyv4
z>!QB0Bi4w`^qR8>5?Oi5%w~;YDSXyQ2iYqg1_tIUs<4w-*OrAsHpQaAZykmGnE9*$
ze=?>rEN7mL?=!fQbQ%VE&I94EnY&mN&|v!5KH@_So{<P))iXoV9eksc)wgOD)^$&h
zsR2{hswT>k7bYCFk}t!B|8K<xPy}62jO|R7xl!y8v-S#jMSmT}j1|lte^t!<Y;J>?
zNB1hMSj8w_yMV|jvpTHD*O4M~M%;Q$gTiz~4~kvUCKXYz(zwro(E)&dMNZ2h)&x|6
zGwhOY(LFDeLNqrMsPz3^RF}naGFA35E9(1@Uf2E#eFNSvil_Z=BVHZ@+Q$Sd12`y!
zFpBW}M3Z%g7zRcYnC9M3-K}m>jh;KN(n~>9K$=Nr^K>2-V;ExY9jlBuByHHjSZ{6R
zC4IR&#}C<IaCe0~AQbWKi(gUs()Q*o>v9ke`_HJ?W>t2r5w$h$hwXWDQ|to~Qxf-q
zt~Usrh(16)AGMc#tf`1NlF-Ff&#Z|}hX&4^y41EJ5u+{Z!-59KR(EyA{W8VubFU#=
zz<M}n8}b{NMrU-Js0r^e5t?t-Oz&tVALo<|`JEjKSRrfZZJ`O5cz;)9S*9=bB;k(b
z*q~LSs7PsI_xMcN(`L+?G9l?BEXhn>3Mu_Bx9Wac+~hFj?46Zjb-R3uobpF!-!>gv
zvbVi8r2e$FqVBD!L@BN_%(UO%-_N@qqw*FKa}P5_<lwqa4IxVva3n6hx|mS!0n0+l
zgweunNFBc5`TuSt-^=9@n7O3HC=7HBwyixoNvJX>%}`<jlM6&x-PFS!#Mz^;@lz2a
zmY%ZK7Kw!^5EQfS7#d<W4^)mi3FpP1EM87nKP<Ebv$X^*6&Tcyv`=G!;vnTKV+b7k
zc5``pct~{Kc1?3$uYa0SM-^2G)_%W@UFQGKyAyp-%%1#bs*w1(KRN&3W3QsHqN2F0
z%>NK-?Hp{KYz=MyYXVu4qGZe(9bDJDYGe~?X~V93SqM!85Yw5+51M{8i4A`rYQVad
zaNY0jniCxVvOHuH$6<u4Yk1<NjtSi`hCSR0XngfKmVRoV8kRjqW&9H0v#DVS(>(kV
zyh>4|pIhxgWf#0R&r+Zn!_1OHtV_LmiEA&i7qrM&-WUu~G2f*cZ3gu~QG)z(mwGLm
zX|0nYAg20zhTa?cl^|@1oOtVL=6o54q5}H`>pKp%jpJ%Y;E>L+UDDK%$9_K7P^#~N
zUA=Fd$_M84k9|0%-&|UJAEmcjQNX6t!f!oWs|0Ihu9+AI*1&=rhT)1R69EBF&{?1W
zK|14mag6)fCt@iJbw#{F7N#qIBQtX@1pgc83C_q1N^0-U;|aKDul%SSfw1I4986bX
z03yjRAck2E&a%jf4{ixEXltCyoVYu>K=ldL$U(%m=&h2kh94#!mo{;REA$%`)<sg0
zC%pRP8Fb~zNhzX8FBzIkZp5NTg3xxh!VpSvhnn*UcVtNa?57*s8x*;CH*<B>tKVFI
z<=sESFM68P83-siM+51^h<GKDHmkh~NB{Yr4cH(va3_b`GRoE?pl?)}SpsS<`x2+=
zWbku2Uym+=q-==5I(Kpqf(Aim(lq8j%%50+fK_+?LI1IFNX6w-R<WN)SqfJm%aN2Z
zIE7;L)?IaZvwBX*4b$7k`<ypA)YP%#49`-}O8?FpqnS5QD=*5VXKa#b_kYa1Qf;;r
zT0f`L;=j-pek27)W5<8Oj{izbc2?|-{yB}E@023zkV;l7n?Jh3g+!tVH3F~@o0IGa
z8{$Q^p=gt0a`*L0Ms4XOj-1feL<Xy^&K0I6g9~k3N^@=I*9bag_@GVGXY2h*=ii}z
zW;^^7STe*J^y<6-K0Ex|4IM5T)pG+KI*{u`_%>>Ik|zHBPMmq#1X!Tg9SwLs$*aRD
zP`B^r4*uugTM;*0A6~`Z>8SOSUY%Jr$=~5vP`&zQ*rSItD}_k@L3p>uNQqoG+$A1x
zOF-3;3?X3k-?qR>&Ns#a2snRL160;Cm(~%yTtw5D4xmx4;IeDM>mo6mQi<pTVEaMA
zN<gN|8B!IaNKY3!m(dzi#`3`41~}dW3jMnP=s1nU3q`L23#~)@`TDV!F&@dv&XgG_
zDo4?)CJ>V!@b+UAz|l>Yj6|3Mf5p`C=JN0#T4jB-E=VmCu`xvVh`PFqIZl<IC8tI~
z*NUpFD=3Gny$kDYBiQ*bJ#W#HeB!&SKMhMIQ0P#e)gmiZ!J8kPV~2BvoaU?16Xfa*
z2E%KeV0B7+fxAO-H%K0@#Ti8^AB)#7zS%Q=KY5R@Ot6raz%cY|PEKAvZcbi`hKj4n
z_l3bPO?~Av>#u>BXHDysGg}!1gg|>Zb=MUlqe#r4@>e$$N1}J?&CtR@?TuGd-&mvq
zaIGazIY~@4;i!iT6p@j>P_?;%YqDzC6T(GPj0|kpJ3;wl*1o%0g!|_@tD$ZUG^9@7
z8OJ^QJvBKCDJv*t=JyXuDXzKU0UCoveKX<U#tc`!_b{Hr?5AYgH;a-8R?ROHuJwHV
zhbOOl2u&mW2TG7D^{>rQ|09eUTK{`MS4-1zoh{jCxQ5Rdmt|Exapg2E{mw|KXhb64
zLj6v{!Sz@iI3acrTG#??F8b>;8<Ni#>5xr)+2+wkRa%w^0tja6(+l*5_t~9lfVWv=
z(A0sY0|T;7OJ=#?_2QFbZSdSPNyS4O=c$eK9G68rIn}y`UZE>d#I!E*&MIL;Ifx>G
zE5NorYwQDJT(<u8(cv$Wz?WvcusO2jE6euzMCt?b$MQDJP6-jEG28R~+ql_d#zzbp
zMfZapzT%i!1%%t*hz!`!3)FA6Y>Jf`MHB9H|K_b*ib$u74lG*Hh|xz2h8*y^HH+4=
zzo9F$D+`dV%Y!7eF2#dPJ0YJBSJY5gBO!$w;a)K@N)*rKa-7;{zkP}~p@?9qyP@73
z6fjzA!o6)8q#~&t&Eq$Dq**}Ao^F16AR?B+G2L=PH9tY>kw2{Qq}7$=)sfdm)&n+B
zU%e4XSF@Ce)KX0X3b_sjO~Enk=aS9i%|{<F#HafQS;WhwzYDVgbRnQE`znZUU~uuh
znSN!L&e<2uU~2EcyqC0C1w9H}QNW#5CC5o9VoNsiU-cf780VXG#A!O$>_SUZbjbQ`
z(%+$|YoMq8eu1d3U;<#NxY#i^0kT5#0X7j{Lqk80DxX7Oy|CIjdh_T~i=sU=^KoX*
z)E+xEVsX*!VG>c6KdF?0ol|=E*6CTZnMSW&$GTk`ITqJ_KI}(10WJ=cF2BkY5|^x@
zv5x|Xw{?0IC>Q9@05Sd9LVeAo)OReP4kXx-`vDRHX8`T9h^KAzGq9?MbB^m5?E#?c
zNdz&f$Ma<=2XBywY~l=1M<&Xr_hd&3rAN_R$veHE8*81{saoSPjZ3EI)5^Cc#~8pG
z$aY~>Xm+x7yk1?7`(<gxjqGG8iTX6-MPQM|^7e)lE^vDF6S-1!G6E`*m>^Q-rT|2a
zAZY;Bp3>0vkhxMtEIN^2Prn^|zv7Jk<)qff=(RX+Ad!K<0|bh&<<@ujED~xuMxUg@
z+Kvy#85*g@zT45y5L&-Vn}NO2Skkb_uGp(y1L&Qzx~C9^iE}T}6B8-mi{)5AZs@CS
z75)uV80wcrhqol3m&8w6M+&&8F7y=9E^G=4xm@#QTrq*-rE+72r)TP3yh==++|LjD
z)fxC_l{!lF0X^vbin=qpQVxLdyllYBAuNMJV$K-t_k?^Y_IOM`V>&8NX3n?LpO5qH
zjbYY5-{yLqd&9fB(^H_{yHEpDGDLU)OC+37!l9$V4LxrHB@4M4BhitSRf-xutUE5V
zxyNt>z3Kcg%|R3}4Qn_>Hc}25dkT#>^>0<(idjkY?uoGz^k-_uDCGkFl9=2aiCbkP
zG_wn@M3&W*ZIfiPxt=}tGu+yVqaZ1BdM)4O4dfZY!e_Ky{Gaw{mmuJ~>V3*@WTeK;
zc>7xQsTXV1;R5ddFZzWG8PIBtjg*cf5|2U7!y0HEu>%vGNaEm`&;yCmf~0|_csy&d
zbIbkusJRSNjU=(<d_v}6-TvHMBu-hy;BdI&IIB-;YdoUBfUXI7pdy+!G6us;oe5k|
zGWmjB4>S${Ai1Wd43c9Mp)o_!vYtX9dLK6${rda$JUwr*CC09?X(X5_8@2RKoNNwA
zC0rT%!(+ESBJ_EPk&Y}flO*HFAtJ9@&(|}~+TB9kx4$<LJ9eOuy=A$jIy~EH<FkVO
zo=pQ#z1j1DaqO`g`Rt`SNc^J<Aq4sGPGC}Z()B&M7db~n6~M3V3N{YuudK59ckJm`
zA<pep7L_DWtDi731uc+~He8gC08uJeNM}tGp(XN1^t;WdxdyBHl<Tnc*6-Q*;D`ja
zAT#(s(5``D61Jz`$pCmzdY+2**?0jYeeo;Vjix5JQv}sv;jEn>&==cIA%v8ET(-|m
zK);@pGL^|wJlm-<9q%|0hsoDuFc?@Qz695LjR6k(5t0g-mUh@61i!FDH?FAc>}mc#
z#?G-j6LwqHQOD}owr$(CZCf4Nwr$(S6I&g-lXPsItbNWN<E;H*zw1BTV~%-O)x3%m
z3M}G52<lOevwjCy#<IA?5l(+)fW?|&hD7_oDn6hn#B3l`q@B>owVvX0EqA0>{%v?x
z1wkjSZV)rhyeW5NY>UUbc=6h){eZx`j@UYa(yw3fnqy~BVRw^PE++PmV(2Gdu-29|
zLnen+kmfJIJOQi=R0_ki>IG|j>k<{gwtN`=O4N<twhY?A!-LW7q=TwDGGWp_ZOQe{
zAVuN_nS<GG!yhjHTkHA#oOinIkmW5&Lg8<6IF~8BVW87M8u!BpKa>t|w2T{SSpY*Q
z-&@HR_Q#CT%m=_Xd4kYvr>{Viumwba8TnE9Yl{Ce58=;6RMM_AcjxD6=x$r?t{}5S
z#S3M*cxM0TTXyye-y>U{LGh%*{H(APTGIlezM~BuY>9uBtUOTG`F9cqK<EhKEK}H+
z!uqTmq$3HdMlYk#6A)|w72m$!%(#L`NHh|`O96HWH1Ug}_qz$lKcg;2G9&J}L}ps^
zV6yY!0jJn217iv&x@<mCmWFuXo`m_S<;{Ui6L#D|W>FU{=*%lQXl|Ns7LwLc0&;Wl
z-HSJ?uBZNknSOkQnP45z@G-<WNHG5EP|EAnn1db9TX5tS=b|Gz0b^&ytx8Td1cB3A
zTaoi7iYl=iWJcW`DFI(KpX*wyKPZ<4qaa28+^RBc(UMv0sEb#IV<!EHHnmR(b&RlH
zPz9aeG1)4gaHtt@XUy^)){Rb^obX{gbuK)-4uJ3=p8ycWRfWSKrBV8$yw$xKS<Hd5
z;yn(QOtjgsQJBIAH?z$AEmkWcw;#DZO~`p?u#La)TREcq6P*(xo*`Zw#>I~L!K24&
zGH!`u=2$-nXR4IEO1Lwhv=&W23<60-P!3oIZ;!2k4+N`PRi!MPXSK#aH(<*KBg15X
zAP*);umk~nGkULs4%CZGRv0vEW69L<!=Yc9yxB*8hDiVP?Z%iDI}l{nbW4$qY9R2p
z5)W++{TevF$Grv`(lj`x5r@o~%%T<wUcI+v`()6U4Sn`Ex?Dw<dB}-`Z<f*{Lm4w*
zg*U=Uh=<CjQZ-uwZ&b#j$ELqGP5LRm0fEN#<@$?R8-6Elb@3)_?^HQyZGchIn#|4i
zMVEW^uRiYtC)w8vTgNZ14-#W*=t0yPjBGiZ=z8;Wn(n2`-s&a7o{Sjr@+HI#d5xc8
z%=x<9>LWLBFx2==1STVt)%P4};s+y<i<Az~=SNnIm<^&^m8Z_+Vm#jbFAhxxx}N+Q
zz7R@2!M%QP^klCNHDibehS>aN9iqk`o&AC12U0Yab70n+j|6l61sfE7lSm>6{V=@#
zHQG}%G5D`HWd*0;l@|#%DT5ofUj8rHJj%Ex#-Sk@dB#q{oAS~S_MXtVb(}HhLMh^h
zv#F$3yI(GZXOTttRV3nkL7z>z@3`j^)^tO@pTw#uz|;H++P>bJoI(?Ep;rOKD0&x9
z*5#<DZ}goKY+(le-U7rT)Rb}r)Md8R$Bgv}Z%m$!kOE^=l9b*E(h^F7(7I2}Lg(%i
zeaP|4fWa&fMDiaFjV!uKI5{R+*={c=ISu1)%<uzH-LF%|t$1sw)1wtFJYPr|G6EAv
zW9OYbUqxuIy7Py#qdR#qef$mw_97ck+!T*rvuL}ES?*gIr^>G$y7s;`CG4+FMNfW}
zMeZpkt9WvD(94DZJ-T{^y_kjl4tVZM_f=ncuvAkZ8W;o`Z%EI%{?xaV;PSK1%P|Wk
zO1r6iqy&3M(>~RQqkFYDf;;|uwaqtJd4T{^2D|<YGWoz>2q)3FkWGmQ9YjKOAM!m%
zZ2!g<Y8(8U$#6Qai=W|{6;MKZTnmiiL|h7@VHGqz9R0nKGtdS8#vb^hgVZB%21m+z
z6EfPXwlBcSW$}E;$so;Tjhf248mAt)0QkY29)jm+w4prNUhdqH=OWw!ijJ~9a2WPy
zKk>^AIJe-b4?*!6Y%47grJRKi?=uta$*d!>93W~2Y+$Y4a3U3pM&9xOsRfg<+E`B6
zh*DseBLqZT4$JlBPOVwh11f>zQU!Mn{9W~(>}LpxG2E9V3vKqLB1p+*8W_uaVC4HJ
zATQLD){dVx#$|lQ)zlX^ilYv&<wQ;e{T@N3My#sOvKt4yv#p#<wX<G{gP>q!ER#*2
z)<j|adC2sq*+n^_>ZsjTGyTXE92T^Fj>q8Oawanm`@3B<AKR^_hyZ3Zw`Mij(_BK>
zO2ajiWt`0(T6)&3ktIQD1*lYOZ2+I&ozd>>dZFrHCo9GPdg=KvD4N=<q;?S8)~kN-
zG3W)bJZN^qVf}%31<XL>S%%{^d&t;TdPjE9v<gF`8cXH?dcxUgROS{owclUu7A;)a
zxDTB=$=N0rI_2nvMZivq_%uJfGAHLUtXU4lv3Po8K+bZm4*Q#NdkV?tDgS`})}<xU
zFoQ*X-Q&f;qe=`&nUkou;g9G1`)omXuAXA(3o(<9bjmHl(!X-k-s-dH_W`i%dkR*~
z3^=q)VhK3oI1*OH?!nf~UL=?zr%_p&Hk1E6@@dtQH<KQo7*k)Zl0Scn+6$|?v1vK%
z=^o-c47qcD+PWO?)zN}#-i(7Zpb6+zd6R_wMP91oJ1m2OZAfnUFxdUxt|w=PUmE8U
zUGC%x<5n$B-kjS@1n)PP8I7j98uIMF@*29G{VZi)+ce7cXF8(p>DZ)6o5(kxGi-gM
z&<-%&BwC~ydSRQshwSAXG?wLjwY{y-WF^&8x#G05mdU+b<f9~AD+vkXXToi_BM}bi
z^{r~+Z9Y9MV&wDyj6Z%A)MD-%+^uS%&$JTs4zQ1!)2cZR*w#DHKd%G^gaim<z#ehO
z9P~*RXj=@Ij=KYg`ga{-buiL)qsv4+nwc}l$-4)r6-E)!i{J(Pz?5MJ87?G)F9OXe
zw(-Zf4NvD>?=3s@a6CFDlVLS42A}F3W?9-i`w{T6!~nbWBP*wdHOoN-a$^$$EeYSv
z|H>0|Otd(ci#Z&RN(bkP<pnA0BB8<5u)!2n)Js1x3hp(pyKjE3Is8&6Wdu2sWUTyl
zVw-m7O7mAI9zA{s^h)=~;ilnVyyOs3Ovw=yY-VU2TRJYU*oUch8jsjK^E-X>mJ-FG
z1@a)(<IN1-+6E6*?Z9WD)LNc^Bd9E|gv?NJl+1G@bMMCiI_;qV0Bwwhj$Vq3J0KS?
z%E$WluzD$pFEfb+>WA-b&*a4ZGi#kkTrYRlY^Jr>-wtXi9jx+N7zZ|w!fz#6&4{*;
zX^&?s;c@Dix{R8&6|WqROcBvjl9G89!?FO*0v7GSscp8tvkA2d?wCq=e~(rrk0`>}
zR*?TgbT5Q`69Mio?7}7IQu{HhSSQ=dREo9&8LzkG(KT~7w<ix$I8FKa5dM~^EU>Et
zsA&P`pCT!~*!ZN@g6jO7O*n;ZdUEWB5T*O=eea*DQ>UK{J(6+?eu1TBSIP`6Dv0Ix
zg1A%t>YL?=ky$1bIhi_4Y_;j0%;9r^HU))3Ww(EKxxaK86E(#=j=@|8Rn2{plB?Q(
z&FBK_fVaX%#t5OfPxRDYC9=h8XhfMixGVqsyO_N;gkzNE<46mPIu_9rgGD7_JFaJF
zNL--Q!eW*7+g2J)$yqZHnysDo9CT#T`Gv<tZDvJJA&Ft4pDu#M`)VOK?X*y?eW(ah
z=VfO-x?DlrezlmqeQv$mBSP;YwiCLLssn_}s;n>!!n;qLvtZWWBDK?JVGljtXb^lU
z0O+wBEvm)L?qe|m1q?aUoo0>lXX(M!(#GJ2&2$~F-+Yp{>7P&m!HJ;BR*Ed*%X)Su
zQCu^vAe-FB?3{5q+_|7ByV6DUwR=Fi9iKrHR7>k)XMUj%WcaJWv~TH4_C-Y_nr2Iv
z>FP-;JKF+&U{;6Pw@k@?D0+!8mp%+h)}LeYDArG@S0f9^v9POhlJ)OO5)#9df=}}z
zKJSl6>TsdAGihFG1|^)=Vw)}cOyrI4ckZ#15tSelPUgwI9So#IGu{1wx#S8%l#9=q
zsmt!h`<3m<^7k_IT|gG4`K~jlrjH=nIIElQetmP+2aD1LC7TV>FB1wJjf&aw*AHGE
zKT#LlA0%~(y?xsmL^vUIe;m3VSR^S*iVlqsUML=1t4+5ud1?&8z5mkN#ra|D>B=*5
z(ewJc6h?Uw$+)=yF(xWFztR7W=+$_R`=k`jKovF(5$9!Cs!!^Fn<j_<y$aOeOj<kZ
z65KQ-6D<Dp9H|CZfeAnMsN=dnJ8&t`_VX7gmk=18PDd0RaAnkH8S56j>8|$zF;Xw(
zhlQ;8%Lo~z3|wMWzP+K>%-gbmTYXpQww*Zto?uw{Yt8my2;8|gYQO*QA|MDd99!6$
zgLNU6tC^Q)45&q&)3j6rk=09~K#2WOnhgD;DF?30AHQ#SkuT|(vJLFhx?fMonYzt^
z1$MBeUxkgPKlYEQtJs61ydlk-%Qm3Y>~YQb8FNC`HC2VKQ;!ceAqhd=9xOo+)0zfC
zz3Zp#84#>!o_6!TKiy};)xZCaNm^e2h^ZkTc}rD*Hm*R)-W$WJbS1;X4}*I^t|H7l
zMQ~1tY)8%g;WuZ(sJBI9cAK_$AKI;dSC`&S^)TgW;Wiz7hF6x|8gUTU(CZCDI@_;y
zcfH9eCtQ<EKn{gSWcx({W`d1_j-M|#$P7*N-bAR2DUw6K);Lkt6KwrFrO4vMBZHjf
zDI+&AB1ir0xaKIj^gSG()}WaWVw^G(V_(i$216(_+(557whWwemDJ~SimyZAC#4^U
zb~fjjIBW^AhR6L`VsoYBE3&4O7)yaGb|Z7YFFP=hO{Y~75~LT{QnCclyv$Bp{5(YT
z!1>ugz=!7W?ylEOwXl^+75Pl!0!uSMj-67BrdO{q?LiZ^c%&14wkh^E`wYUy?O|iK
z0aNVxphEvV`fX`*wAi}7w`k{_itv4}{X;G3)3H%!8a*#|>Zd)oV?5}nqtT^3LeJm4
zC^E?2>|6vZmp~_L?Am@rg0?2~Se^MEWyOR|Fx3FZVK8*#(U<%==y}^fk9PDWcj=b;
z<S|JRqWSg~s)gVL9e1HZKDe-w=r3*&m$4|tR1$arv^*bvg;#UtF=a^1gtr#oJJ2!%
zk;fZRCi1NL_t!<E+r0y+aK&DJ6qV!LK0a<gsIMn>u7tzw;EFGpb+}mfC=V>%Dvezj
zF*=q9thqFqBnk6Sc%?D4&1-ScGxC>g__vLK*?jOsk2w(9i9r<|Iz$a{N5L!U-@qT9
zMIr^&=XZ{7@Z6w=G;J<gKVEwHA+48K7G0RIW>XI~=I$!PDIzGNz?wsqydf1yE$&-s
zo{smItHQ#<dOx!CKf2q!N3OaX-%jl(arJqkE0x~a|2>}*nva;)_?^vpf&&6#{@<On
z|E5XXI-CE;4Cx;AZ%#Ys|1AvY6%dgSQh%E(mVh#ClUOH#z7WrgH@{}shCfKSgfjH|
z$hAfQrJU=nSt`f$`yJ;z%e(rbkr9H3?@WrWe(&)1rV)O2@5`6@!Rro~Rk!1mH&rBI
z`q(H^=61GBb9{QvF+MrVb~)owv*?n^XfQ!4yNIGoQ_(z-wSv~7JULYAV4FEh3mYpt
zGokt>J54s1qet4wlt`UK!o1(#5w_|@>t(}sEZWRz{?Yfou{oiU?Znmf($c<M?*8-B
zubbk$nesr~N~%tZ|0zrA;d%1K<AtW836JxmF4LPz1(T_aS!7XzUwC2b?*qcVkwxqX
znw|cYxhqZ4FTXE$wlXHpcGs<yn?(;UuUwvKvN(h?%hfX^3rCg%x^iWu!g4n&!R_!6
zfJ=ph9c7bvO{Wa+ZRvz;CTyP}RuUpSo!OJJV?WoQcCKkjE`Vu=L&tmNMi1SKj#r{u
zf@;MAJ>-zap1);Yul@nuz=q{+=f15~u<~_NwR(LF$@O`B+Am*{3A`HTnDiFpThTv4
zWFgR$(peVvC0p^;l|p4q0wCxgSNnZ2_uLchQYBoQ4nItEJ>XYCwa|gJtO=q`l$6iX
z<tkQO+(C<km-g^eyu>HOe%}FbymOwm48K(7f5vja;nYllB!HQi{IS-&2xP>hWA_!k
z-z?+T*#%0a4^zRs4`~Fhkw^(~i_U`q?>j<uc%xR=R<lHBi#J62U@tBdA_sm@2m&=c
zhvM60a?v&=`yB=C#-xm5Hf>m&Omp)EaUU;8y*T^)W2;99Og2mS)r^y90=nZcTu93r
z{&tR;2gp67C$(4Syeq4!;CU~l|2F5l*D27urE7(z2&JL{Mh<v6?*9Jmr1f}UT_FHK
z)d$)LTrXd=q4iA5##>Fy{my*qkrbh@Jn%kybBE%^bTPuzXOEsar4U=Sr9~dKAr$m!
zI>&L->xU`lv|j5mPj%c1!7)<Wm3GzZMsy~*eqVTC;l|dc2r!~$Z@`KVB`(|3AV^=i
z+PojU>B>@c;WEy<CyK)AjxKET&%Z0k@gGV3&E|RXmn_7ec9~~cwe}*rjXP-4PCyC`
z@H(>#tq;_Q+Bst|hpVTo<jq2}2uJQd$fz$t&kfp41(_f<E&-XJQZ)BaO2bz0U~J5=
z4T02!Kn;#Sl=<7>l%aBu+pWa-SOP4`G(31OtrIqwYp_TR<i{+_rH{pj1xoTQ;2}bD
zV+{mQQZNXFJ6Ud|G!d=3E6ZgY<OJcL)AHkwcY^U0>!Ba9jUw>VsIW!$FV^*@fkr%A
zAX)ETT3hP((tSw8`BGYLlRJnFA0wYpUAGziF7e$1o9MLV#Q~f{N_ENAsiLBwvH;rx
zr7oxhXuFarfN411F*GWIkgh>3A@X61e2%6bb1e;Wa(btZL{*WtB38F_^P*2ZjGBqg
z6-t2Uk=+2V0x}DIX~My_|24IBOpKK`#;cTF_(!vjXx1n6=~9)BYRI3S3617ekO^aF
zjuvms3q0_E02q_W`T$b_T}FRN3spIy`cq|GHPg#!=&ckyDvOHLQEN<ycR71v?;Z-&
zO%St@V_R{XtFSbYqOyDfp^ZOM$oCMLCPH?o;bI|T^L*6NxxB910dUIw%?Y)4b0_cl
zN&+7AotLLyVli)BWA7d^ZBL8h0cUY&`x84w><9smr>8e(lXr)0v&@8Ir5hSOQ@n6=
z^mQ{3Y3hB!vA)Clz&J>!*qK+Yj~xvbPujsZQ|LInRfyz8zIDp)%l;;R{KIyd6ozU4
zT<>=s?{?8?+>9*IY6De5O66E~H!N9KQq9^(!$}mGW>69A9#mV~u%JEvGDlirV8B2q
ziU|k7qur7hI|w^#|LN*f+R6~p7T$*CH1%-U77St0@s#rB;Mky7_co0$_{%sA{boiq
zNu2+wil{$#MeqH8bjZZs6$FQWTiLze<lg@vr1r0jv74!rrJ1L`t-Z-VR+P7>{(li;
zg?RyP+lAIvB;)zeWDqF>s&7ZT^akx>+)e7`i90Mll_g(N8{eb<>80zfms{VC2^HBX
z$pK4$u-xwi8A)`&h@nTH$DzyPP^-E%swL7BLMQ*GJ~Y<TEJ^+PSXpe*MRNU0tne2i
z9guv$k(RUNA}z+dx&c^`8U+;Qvdc8>YAF)(wD^G}OEhGFyHF!b9H&lIw6yU8-Dme9
zny}DD>6Dyy6s2V)MK<%>(&w$u0R`4f!Ut*NL~b8>-2lRx_6fO;wbZ=bUJLwhztdk@
zB8!fvS3+Sv<Q;A=ad#J&U&rD>4jdWqV?{;8%T__hY^w|Yvd@O%y4@>|gcGaQDvsxu
z7+;{+R_jfyZf9Vo!2T-LqP9#C@d_(YL#Ps}fk;*c6CGfm$t8giNZSEX(uk!p!^Zhc
zZtD_L>MZh(bC#LTYvC*-=keHheJfve%V>Pvwk>0&_Z=3{RXUAZ-fA5BIzg&+#qn0u
zOK+OaJ%hFiQo143o-8ndRLVhQYt~+7T<gJY3HObx_Vg7#Jq7$ZA;iz?2xfeCbK!SG
z5Is8$y$Bx!Sjb52T-sNgZMcxNPnT>d>~u<7SkdHn4$mKB$?@O77cCwVv|6v8?Ge?h
zTVk1pDaOB+Z8l_DANx~6{B02nqd|OX*qt!oLU!%GG?nmRLp`xf&Y0X$`V7Tgh|RzE
zG@*E`y@8xlhBEEu)z6oZv+@n86P#R9_naLcnOnq?DopH(Z-6-y6N^j?R06fMA`K$1
zZO-wMgHUA#9CqV~@Bz$4PBAJC3~EuPdQ%|_0<^Db8d({$TYt@(ZUD2%W%t7F?q%A4
zu93Rv)K=goX<z<FFmtN`AuacNC89(8kKX*h;v3%?4wwH*7#SP=Q)anDT{mu@?Oz*F
z{RX-K4Rcq@>)Z^{w47p;h`AW3YM1;tNoaf48jG93y8e!{Ejc3OqOL0mA6e_wSjS1O
z^|rk%VC_vN@}AbO`|H=>nh&2gAI+zhmL=`>Z>7l(CQZ1P5g|&Lrlc)v>~1<Vw$*A|
zy@poH>Kk?+?aUl0QhAZwI+5FmI_ew_)8-><Whd&%oM8ytguEP@mT^wa0r+f5rV@79
z&bzoc`PsX(Y{t)?1xdZVxtw(=TU+0tRSIllOLG;k488F}^t?O4eLe(CzXy5CF>g>V
z4A8&;KF!^r_!}RlJo!Alm;9Ztm&_gT;`7>%fo+1nJm1xRx65>(kE<U!8)tA9?&7{s
zREHiVH5(Qgw<O4<yx?S?v|#;2V(J`=&;{S3i@I9GLHQC=E5tL8bmR=Xr)&Bpc#|zA
zLidC8xYc=07_J`Ibr+HkxkQBnkwLOF?ts+PqeI{-XIU?5I(+3jKG+Q99IBjp;>pKi
zj<e0SKG|JZ+SwflU!9a%UEH>NYFD)|L#R()1<3)xNs&_-vdm&OV4fRf(_Bd!33<S<
z=4V1r{j;BOHj-Rv5&Vw0+OHh%6{lJHt<~C}mi0Ne%LCda$BAA=%{YxIG9sp=>alD{
zDFlI}kF}yHU7%rH3ke$<p*#-5D2Z7qtQ{_i;>c6ggt-yPluHZvPL=VcPCn$fQf@~$
zoS#~Q;_bqr!fuH~u-i0d&bfzDg=-2gH4Wign8h~KV4lH-Ap&wth7lFF$<_ym{GkFR
z%7~*^K=yRx{)fEOq*+_INgM^#wi;+;DLweF2cO{&f5!Js7`gbPU(F%2B~-pz2E?j_
z%F@EHpZ%lP!>V;FfMREh0vxP;q*9B7Gz=WEN^uVyhRdw|-88|ee1N2_s8-_>qQ>~m
znl^k0GOMI6q4f0ObJ38a0Ttj$0yNM}BHp$$@EyFTB-Al#`XUDYPMTE=)w&p0>W6<|
zm^Lb6cPXi7ts9NvNQ|dL_asp=Aq_|9t|?R>ky!`O?gRWpW+h$KK-{RXGvKv~ua<5_
z=E5New_7B_-(bKt&~%nA$NyM&{(Oat#~%p_fH}!eAgvgQB-z#W@S?4(sqc-ef8T=#
zaFdzNF)0MRzsWVq-e9=xZLTerEsq8KL^HD+8%j;SP|ZbNs-z&m9ET;+f=O9}EFrc+
zH$H}Tur-YuyHEsP>tqq_8sNnv?j1LvN7n8f^7O9ZkbhvN(nXYh@vM@d9Dw(e$PR3d
z`!H$(l$gay9Vx{_Usni2Xee`=xB!dNweY{;Gl|s70lMf)U`?tB3w&w|(V!=V3>h=W
zbe9juthjQqFqtZ@=7jK{v8d#aVo0sx{_aMQ)a6PstfPr|+x!7PPG)_@JyD5&h?h@;
zNw^x>8wZQ43_I!OF2}Gi*}-3(#+96<li=rxN-0K3i-t>lc0lh10x%dt3+Ur{*df*F
zGl)e3vwT%MZ$~PjB(flj_Wv;b{TFi~U+GghK$kBQSxwmgItz59#Ph@_XBA_WYrt`e
z0iCqhwT-E&FJU;IH?#5DJ*3u|3Z;WlP8K6QAcqWG=|o?pJz-=%f^J;35a$93U0Hu!
zVh%%4c;P@JU7qaSm(9;;4XWJIahzM#<ylqBt<yS3ovrF=eR28DBNR7gDfs#N{{6=E
z_1qq26i=Z@$(CtsXKTCn*WKU8%eY)oc?$!o8D~pKBVYZFsbmcHr_&R3E`yh-`{c3&
z4rM4TJjA`mpFgTv<HJa|i^6tBVs;+Hv;A05>4yh~zC8qq>J_TA&&HOL#Dd@-kp$(L
zvihRf^B{_VY8;j2$)(5sLV$;K)7j9WBVR?zSY~A~r3<Vbayz@?gk&+!E+BhzBhSw6
z@$G}+^AtD3$r*X(_b`uG2DOv^-(sf={eS-)n=LJMx_yWEFuo)D|8O8^Vy|yuXlLSV
zVQBr2YfsAm%jTb}!?vasJ6w>^KGvVJ?wW+G_*+A?wh4MMQdpt<S2q6}_URs)$iL#a
zc#kMT7RGG9-HmxGZF)!YqEt9;Z@~0UE1US@(>-<Bh(h*M;vv``2(4?l1r0_sdWVPE
z@9Xa8@yU|GHzj^Y5`dqa&^hz-wN>b#=kL6J8_rxR6R;epPW=%6#NqAT_U5XKFF!Uf
zjo9LZwFr7zy`t8TSUC__v_pbqTs^LXU_IiqUrER?T{JW#DcJ&65EF&9fTs|s5;cho
zb(V1$Z7k0)24*0_;E$=UdX8<m?3y5^Q$y0$=I&U+37oIm=0vJfS`Szp;X`Xf5~0f!
zPjD5KQPKmxGEuZiw8g}Iu<qwGC!j|UZHb8GdAlctx-%luUQD&nV1f0G09rj{A1F>G
zQYVCDc5=-uoSbc@?5_D_9=7}JYGzUQ4;k$jA?lzR&ang%YYNS<0ynaT?6W74)Inqc
z76pnTp9oHeY1n+{d&83I9Ae)c5yR>ZF9@W9o-M-lWDh#+_|_Fp4D9}>e4mCGG4O;J
z&M`fqkP;%rmh+?~33Z%6M5(<57m6PN1kP@^G9yuxVh#n-AU5>_S{Apiy=sgJH9{bs
z=&JEEW{c~$jvSga=4aQ|OJh|zW9t?P@K^~<&@-)0YK2cY-+il(0p%46!RaEwRFMK&
z#bSoeit_;gN+hiCQb~#w_r#?bE}OU>T6PZ;9$9usj#?Uz*SLZt1y`w0*(o;N6m4O+
z%w-jpr6t<oBoZjo->M`OwF(ipq_LpzXV-OF36<>!&LiJ~pP8#-zBQq%Koxo|{&^7+
zz?A@9kR@9&I!2i=U(&)y6OCSVo>HeN5h}sfWYV0O1n74xqeSU}!kXpDTt}13jV)Wi
zPS}Bc7d&0{irdgwEa|>+YJ(`>yk(ad1pi_fbbBEGYtZ@ebyb5*(>yy;9jSDFxhqLr
z+Am4`j;(aaDMcMX5ImWtvWb3yN=Ra$=3Uo?8=(ZzfK*kN!z_qb-rUvey>q|L9HfPW
zbtDN7>M=!LR@*J-q0oWYhH6Q|vD3+^78ll4S3wei?2OD<M^jw#qwBNZ?*bIpi|as_
z0(r4jyVACtmLf<NNs%!__vmUwsa2B1kKHKVN!19^f>Rp5&J2Zk3vogz0{B*sKp3J&
zbqsfs>>2V-H{EKz!OLsipah8zzhwBCWV)B91yiA396ex5=%E{*%x3hp0sbu=TnjX9
zx_u?<RUId8VlS8rK4#On%bD%8x6`M^u(I{jG<|eQC;O@z<ylkz&GYlks?GDPxP)U$
zII`NupeDaWWQ>)9=2!|$Bw}X1UBghkt#8q$nxw}de4k^`=$IR!b3G77?|lx-xBUWy
zXPt`=x;>I4lSB_OWZ|7{m*t=<=%{MH$zay|yyyWDn;#|+AJIh5*78-P>C}>^Q=a?|
zWrI~-oxcN+QZ^tGGxNt_>&Jc#Y{6}wSI@NBqAk9O?s=~FbcSA*cpEG=E<SoA`~?5M
zkG6iKLtKjQ(H0N&k9T?ht@|1Oi@xaWV(;{i11?5Q*M48@zf`}CUJ~jR673eHO&by^
z%P0}T!Qu^`f*X(i#dJ(-Gn`bv?;RJEO?F9wAcNce?<(g>CVk0t;i+`3h@14?ynYge
zRN}f<_iN`PRdtDz;boAkm4NtLt9hAxGqPBkDq&z@9slol5ub8)t;Rjkj$=h_VIM)8
zWlH^97JVL)MUu!<Zd(&Y)5yOz712*4h&vp8WAjnVm_2$+s@A1(Og`94>#Gx14cT*J
zukWvE<>o#;A=H*J2um>`QDa1YStJKX_lB&xQ#+Z{%d7*tVR9)U@c`xV<uCaGyVF(f
z!_G2;FmGI^_v)doF_x`(1~fyRHs7qzA`^m3NwpbD<VfM*;bK{AO98GqJ@g+XmClYm
zj?ki&G<@#$Js15I3Y-U$3YINU<2W{p5=m8?3in#VHyPql%V7C(aGGhX0e@h^CI>vI
za&94OnWVB7l_=Tscd2GaZz%qBTp1j12M?$7Vil^!0$rbnp%NU+`OEE#o(dKJkXi|Z
zw$7_cbfY?Cy8{J;Oh6aUk6Lp$f8H$_y>6{<g)sj4s)kZ7K-@S1H0xS5U8)cHbB2h6
z8@N&!(nXeT85ilcvUCoXID2Ne3E;W6M*)b1S-QA|G&K@xvX(sT1a8!K^moSQiMv)J
zwoT}qx(RJ@?5K#(9TI9i)wQlzODE#pzSkE(LRkfu2H4o1cVvtQMf&Wsge_Al6RJPH
zSiGj@rGXtrn7rMS4w#u=#GEE6`L%K8ra(Btse6S}E<tZpVFnX9iFLX+3BrEH8Q?XR
zvLObb(j9Yl=%wKdQxQL#t^*w~^v5MN0Hfvm7T5%sx$=XNQ6`3dHk8e%jPa++FCmgx
zHBK)c_|gP$d)OAkR{;{$48{{It49b5CGF+yc|SvAq0_m>xU(cGOZQ6dnWTlZB$Jlx
zSWix&>#9!?-f`Lnm5mOe-NEcu8mYP(idJH5H9!3u9a*h2qAms02_1pfhf(8l82gD6
zpaf)5XhH;s0p1x8I?_@_O*Go_+{ZyM`0jadZ|JLlT^m6p*TVKw7VF!TDaq&BNV_<i
zzfj<$KV(X|3ziR@<ox2y;<}M{k`2w~Y1DkX!YCJwtg8{Ukn*Xju5-7xbXUjwYjUV1
z$&j(86Gg!?_l^MFSl#03LF|^E(7bv)JhWwg?;U|Yww?}NSrD&2&dzUVci$ZL?jp;8
zRW9P2U7P7f#Sq*Jo@@WuRG)!Gq^jRNOWIDQq@UnGQ-CG=c)8$0&O&N7UkhA*oiP#l
z)<HF{C1aC!5Ezr755YfKDyAQWU?~B83`#ko>!TLL46ke>+W|7WdU!-U4cfStY`F5r
z6Tw<pZ7IU#GC_u1HJO)(5@4{j2nF~22w`s@e0E>U!z;F7(>aEl;@M%kj<XCCR3cv>
z|2~r3u)qeQzDH92w-v$pA6XHM|1CEC=c6e_-PV3X0`arA&uGcFU7@ABxihIYjX*Jy
zP6AAPts+z2qG9zWH+pqLH|+Y#-psZiEGrnHCNU?&d^<P8(as5#(JcuQ56*zEGmGK)
zt?7v4xrb%&F>O|8(xVGDq*dBD1ud_D44-8@?s6!2vU=-X<f3}klkemqdQ8mz`o}fy
zso*Hnp&CP&48K%Lz{0Lfzvb2BA^%K|x8EOTaC}p=Qc;p!ts^34vdg_bJ0_8YDVl8h
zBURE+`GQ|Buzg<_Up@Dr_KX4Yqi&y^0T$zLO5uyQI(Wk+kPzXIOx<TaydO{LY-JyO
zWoa6JF>amr<Ior148CcInPpY**EC*L)3{<HEfM8OEybiLVj_sh>ehwCc-lYsYh!TT
z)?fB)B9Bx~78C$KwNRO2OdjvK(pxLDv)qzfXT517Qo;O<%f)I<0j$XM1>?GW+Pj{)
zc9a5E4Go=;wgHtGwUU(EikXRpKM~P2B}!P~rEBlLH7qkmZ##o&;TjqAK#>Bga;B)C
z3V(14z=cD(g}GhTMQM!+M9~t>0_>^WW=s1GNI+6kSfPtUTn%Zo3%qH^Q$|i&{B?dB
zdfJ4zm9|GVTl+{ueh`X8ngRw16V(+l)Q3Vje06qspMj@(3?RD%G?LDT6mJ5dY5@cl
z5=H=z5HbAGas?-<O|cEIUw_-xtN2hkR5(NYbN1F#UDovM43feZ=#a5(YFQ9(Sx^<x
z#ZEz(nMJMQv?Ilkyd_CBpkVpY2!9YxE}Wd+*56kSSLH)(-{1=ayFkwJ(2BH8U0Iw;
zF{`)>2fUKT$di?IG8{S{71N*#`Hkh(_bsT1p8a6P7qS7X>{$D`EXex&`^~5}K<L2U
zFCDyW$+%aX9u?tqVI{u&Z^|2THr3lkMRnOFcps-VOLi)$epPt8C~4oFuUx9LJ*O9B
z_tCQ(OAdm&=-9|0_CkCp;gIo5aL!1uQcU;eAnGOI&7dV4BSxE7;_G21kq7{jt!tZ>
z2T%0jm*YbXvq;_;wDgS;t6#}7;c4{EU?r;?kx$PZ!>0sRFOiyFIy0~^HiI=7oolk)
z0R-01yQfn(_RN+56FUOzQo~iv49qCkQg~~@%^zVdIYn71G9_E7pgGnzG^&QDO@Q{o
z1Gl?tX{dR4Y$HY}JT&KL)=b{HQj3ko)51AS*x!x=qalOI)Rk9yMs&(HpTG-wG6pPn
zypOTR%PQ~?M=A^!C<GRLxOD*vDb4fBMQLsbm#2rDj>X;Hb%fZWT?<=sXHm!V)Ax!9
zY#syzsT;dB5rt0eReFQ@n^(TP$$l4G{B)&X+u+eLs=dp%lnvJ{{Lha+zTRLgv@d9`
zT3!*_=%b;tC}Px;Hu?xaL1FgXkQBYigx`C`zCR$UZD!x<GEsZs7(&W^m>l}9BI-BW
zC-zc8ODAl6TVtQEyw-PQL&d4n#~YxIfhrV^tx<zB!l_$Gi+Ammg1BJAl{@tTrD89J
zidEo1QIlF_^kfd!rtvzw@!RL>fh|k6?bW%U>R!37`ApT*1-Z*jADi9KaQ*Awr{9|;
zefsOS%I<;;1jP0qO+S4XTL*m;i~rb*ZPBo`KWP8?Iit@g3sa5D;nb*$vtf<YFX_`Z
z;F&}))7q8?t5rzrW-2MJbkjNV@x&*r*oZ<N1tJP+W0W+sH^n^L?LZG8`ngY}%EVdJ
zHBnZ9c=uxC`0<TOq-t}>a!M$U(lA?B8r2tfY1gdlq3qttN0u_pHHoz2TTpLlYNmp%
zU{b|4H5rvI?j4EOtXe64N$YwGd%4tsd@Y(esFp&>K`#N+OpiXJm!z$E(Yf44TGmho
z)r*fcys;rIy#&yX1s$N@3iAn!&G8fEa4)zO^rnP3KB#MCR`^^l>|NUjHWKOgIeC7`
z`N<~=^%`Gdr+)g?Txes&LY!-@*_Ym(k8OsPZN7C~AsI1{RBJg^6q?1Tsp4_#9`g07
zpEw*R>Ih1cQdJ>slv0sTsHZNB$2b8r62%e}`&2gsKnB%M=<PbAhn1g@Z1+qmqun^_
zfB#%@gq+b)YIrY;G*q!kKHN&7WE+S*W&Q4bd`0t&n$Xtq>*kVQF!-VT;K#Jv7t%Q1
zr0bu+il6-#@6VdA2dtX*vKY8W8mY)G#(hklnR7Yg?DV{a{?EU8rQ<z*4&zi+f`pO{
zVgRfStF(m!AECy<%Z|kclV##WPx6X$m7NpUXkGHY!3~*FszU3!sg(`8{AqOX3|rDq
zpm$K!wcutzqr~syi#F5t>PBJ&5I&7kJ))fZV!(2z!^Zbd8Az#6mCMa4C_2GxRU;Dm
z2=&HX8<;dEsT+g(;2wGhEbuZ&g}&d`N3LWh0}0Pl9xHU`k83P9G2=v(Pa7o__FNN-
zL0l97cupxJW(wF45@d%L47}9?7dZH&$^A$+-LgzI^%<lqg)Bf%;hXS@!ENuAZ~|Z+
zfEdPx3nfR~O!2o;A*YN2pLV#k*0Z?_ul-JWa@x7F;%b435@%}1Q0a;fy$zYb-1j#g
zN`-itY<;H22JgzY>=PXusOZ?BFu}PK)JwA<jH0qhpTrX=z{5jyB>=Cm!qyWP<QC}G
zLB6hLlUOE@s#L#+cmhu`V>K({HeLb~xS_?`l%U!VCv~W&7x&`b3>}x&TJ|uwFs!N6
z#|)j7tdy2ZF`lYs7nEuCtF>$pd2Lv)Td8Ek<Hi)n6TGx`a979}cuN1u2aY0d#cuPh
z2^#v7#Y}*V{-fsxwqY4OkuR@nufc%UVG5?L?IHjDIR&)|8urPu*_#k0q8Dmvi1Y~v
zyo<ClS{GFebPbZdDfJhm<Ykq|Srx>TMHE?rcSs%AMZ_9m;+lksPlXXJ^9TKioCL@*
zx5DVlZ5VdeoG8n>uo0yJh;TFrYVs*j5gehT9>yFL^6f~$_Uf5pCJ}f5cMBCPH;eGw
z4K%p<(4?Knn!c?!qn0}2RF2ZXH1Rp?>(|dEYdLbd=nDjko1~fg_~I*h{&!NUWwS%g
z^kRIuuUAk%bJ%r&`<(rbVjwtf*I<!SS|R`=nQmY@2p4klsXlWoO60%_4(%FG;>e`P
z{&VtjsEdz^xIxx6`<11^sYJ`!a2{>WO(^a>zSRkeFIi1h(h(#q$!KVr`kw1bBOldn
z6pAl=qCDT4hQtbi>Gg1e_0{d{kuLlS=+jxESc^l<s%T)x2PF*n?+^C5VXm2d(ylT!
zKyU;Emy`$9#^7;TXli`*lrqu}$EG@|fEXN6u*-}44+!{7NC{$8M}7BlL$+t7;g`)R
zcAg%W)2Wfdw7cPo0+vN?L;{$K#tl~4!mQ6x_Y}E}r>DFY6MntesP@N!a`S0jruvCi
z8tdSm9`%#Ua__SVN7rrmuCzk_Ax5Oq@yDk&RR-Ad7Q8xe+1KJvs=;_;>S%YiLizlt
ziA}<Zp>z~H5w|2%Fy4Z`H|M}R8M0X}*aTpq(x)nA3ino6vg7){m?a*=g@q^ltI8~d
zOX<0bz#-`M8qL!-<U#}nPNnU_PL+8yE$67i-C=jWAlaW>FZT=wgx{z;)n3RF{LSLJ
z*%ne9h86iagx}!G#=9wgPmUF%ipTIz?t|CJdn1CY1T2s81o?V!i*bRUBC?pUoRZ``
z+=f1nJ7}^Gx9;9KlDw2a`a4$!FNRK`rIpT?KCvO2V4{j7nTS6}-8wBmL-AO4pHQM8
zvG9=%3@>{$s~3+?J!l5+0NPNh?s?|S7SCsHY$e9@fEH-#OLNGYwY`D)fG}}lE+%ms
zV6rShZzGAXV~B&##IUonAG!Dw`^QD-jo#}CZTW9m%Rg(3U`;EFkgNKV00QcDI5V#f
zD|{b%+H>0)Z>;aJr_|X`@(1}w5`OLZO>HP1-Js<7W%7CWSEpA=>*n%PSH1F_Kev6I
zLP*$lTPH*dNu6LGIL+Kr2~M%EMubaRYPAq@94lH?FSI!)bD?Y5l+081#N{jF0onF|
zvN8LVN)+_)lu#PvtS3ZXZT9rz-A_N!QsvC4<0lYVXi3KByKARl-~wwa-7qxF*Sa0F
zkIT;Gbu(%e+P^MEpT+arp1;1Xk8U1M;^c*N(2r(LT>&MB_ZNpBXX^;Q$5xr2L6pzH
zGRWPqFf##AuUo|U_4nmID>tW%i;Pa0_+}k>#oSnpUQyuP9w=aOp+D!-3U4pNi`3M`
zr}+5H8C<D(Kv-rm%e}RZ8!BN?sG+z5!N2}!z8VH|TXi580C~waZJwWP`D~zwYO8=(
zdKJN@SwZY7eRuI5cyw>s6)6-J4pxsnWH??EOKpwv57F-fBEJ5|b?;10_Z0uPzo`Wa
z1Vr_}ZyLrHrpDI##ukQ_cK_sS#;DEP?Q?u<KI$4<=vuC)E^18+GfWc6X6Ew@{t{f7
ze1u6H!<z=?#%0NUJI*;klymbE$z*H2Pr1%<aUUHFP{w)8l!@AWm_9HVFhe&)GbZoB
z_600{V;|UYre`XZMtdZ6;x;AO8kIU7mwaN+92ql%isKkxvS%E1NE6<r@f#cO;C@@x
zafBtf{D8#)?!Ly=_pz}jzuT%bYdoJkS~LA1abHy)-8%*>*gm>aKX;4wMEw`hG`~ya
z9f&;#zD&`gvqLc9lg3el7qTR}q$6qu_nx#*R(h!i8GCuBDE-JXK6Ea_vivKrPrp3s
zO~iQV+{{FEwc8jcOmPrAbyG^<1u5&4`HNcfx2<0_cLZMP^3P8L&xDY(s@hWODI4FX
zXMh^f0a?JJPBl%sbU9XuI^S&5xGKn}CCGLLg1?A+k0C=G&o7u_%&jN>WmiwwhB+U~
ziv7ds#4Z~V!hl31<c+Rxu2Gz$_?>G{`N*u;5$EbH=KbHm15xH9>4QQFC;iTW1trPJ
zoST8<p?3{LKM$2)Mz#&A^YU!nU)AxDI>}5a6wIlQkft23OqK%R0ar%Yq^#qWDd6_v
z=Yjq7xcS6_O}S*yEI_O$)XIhau0!-8cEW0@5ge%@>H~_qd%Nl&+L1H@za8dcquW`|
zYt|^d*wPVtSsh^%BU@Y=o4dG5z+W~Jm^L1WEUFB)6Sh>_2z3RfMGd7OS_wkTJv}2&
zF0;)Muk(nX8L{I+i^{j!+9J0dM>cR%=t;<rZf(0dx{ErUAS`7EqDM_i^zUZ1-Y3yd
zqfz`|Jy1ds27Cl-*HFr<YY2qkc5@p+Iq>G?2F6Z(CRdac7%fxYHuiNA5=BKfM_Ijh
z({;Tf@yxqaY(ajva!jy`;`xpb`LfDCGeib*lT_sFt_=%y_y3I857Lz_o%hVrQcr!P
zbJNOQrO}2u5<nsfVal&4EtWa%5bRiqOgS7cVyOz#Qq~Tae$glW*`+yuM6A9EQ?8I~
z>n$<4RDn7_t~4y)&oEb)ZC+$^JiT~v50BEJEJ`OY&mkdU^NZmsn5M?%qG*>`H2YFQ
z1i1cO{x_GRm-TiQ)snc;y>BWa<DrSQ@q}5!q?JiS#clDU3e!N4JbM<WYKcA&JX1*Z
z^jSZAPEk=n{Q{dFb<N6hr=H}>FE6wUY;nel%R)&=wbVq_)|IuNu5kLnR|1-{Nn=^%
zOWsYy<Q!eg;j#(Z2VDXaf3ilhY9lDYVM}zd-73}R%VRdDkkgg&%Fj_U=Gr{$u0207
z6gHWw{rgW(B~Zg`6XRC{v`>9HYGBC89NG)|toN=bsgX_1r#@fTjA?b5-2S4#u;5G1
z+8MjqKu#|N5hnl%;pDXV!$-{Ead|IpdaBu0mXlzGy|=yvDBiyvkBHNhh_2SGMxl^K
z(r{k7g58J%O>fZ`${n-{SPkOf<I??*#JyLUG%N$t9@i*|7nc@8@6d_x@K$6G_@H47
zrMMbs63Si*a^x_z`AvL)CB~0-`W9%RGdwwSmG)r`yC)_U_hveDcHzkPdMiJ?HixpQ
zRKqmJ-`)4|46pC!urP*_rrBBbjp(V1#>LN<FKzAzf0?!nIC4HK$;i)bh#X*PuVI1h
zXYPoKUlr~a=GS9Erl;%5=FhZ}CoDI9;FS@)zYUoIvQn{G*;P^)dU9JFwji2wv`mc!
zgCzu=nW6ecg3~uZ0{duQR3Q~C<#0*0+*oM~KeOAfbgW~@zxCUOEz8b1?JCpBRk^Oi
z(!qtfZRUfPy%y&U|KC4@^Nx#>?%z@v{I~H)`oE88Lt|r8hkwL@rF<*$MC|{q$fFWY
zwEh`N6(!PKB5EK6X|;R}j6RVYjWJf<L<aO-HJB5`7fZhRr#JlSo8f%&;;Yjk96pIO
zb(B*NsuL#sj?oBFjZ{gHH>Ywbo$*L!#+jF`5u37XO3Wv;a#>+|+BYS(LZ)<|<SedV
zE+2ZaWkLz=SXRmCGCcf_w1qrI>9boNOAQ?>>ldF`ep=)C^gKD4ba3Ou)twdp?qkD=
zi*=6O`@V`Cp<ld+<V;QR_9(AWW3n=rG+b>g2;&k-93_4SM~jn@Hj@r$u!2b>JmsDg
zg$CK#FANKQYyMq~thmXYUATdEF-_K^drv2p<og75IpG7TqV!HW)Z^AduD&2>`vbIs
z2ysE`<*Ex?cGp^^w^5FZU}J&9H7>>XWbQ}{8`RHCIM?`+Hdj?l{6aynrGT;(%%?yo
z0ZLc;f)_7aspUzh8+V7x`_>G80c`b{U<I{LjWE4JR&YfWnt(hx%V(U4Tn4@YX;+XF
z=I}i9LYEUaJb(OR(0W7DvyJ6FzFn%07CvsF|Msw(T8t7MrNBgDUkzz}&^yv?%rQZ6
zTy>ZV)O~lCGo)iB#%#%PUYdL8%!Nt!H|#eQ@XX=51i@w`DktmAg73neauWGQ`HzIQ
zBP3<9?a~<`0;cm%PDxF%M<T!*O&=<(TJM=cN=XdS_DF+e#LBMi$Gj|{7@iaB5?K!T
z3x^wIN%aiZg6KK1!T~Lq#+m^TswyNQsJT`lyeLy?<eK-^L3mQ9C2Rxo8;y(ff##x-
zPWsVS3YY1X&oOnlDRINSJYJE_f^c->9Ah1N3OkJj?zsDSjKsm@5Q~+3lax4MDT5Po
zNyz)w%WD73;nUVjv=44{r*&F~%lJ1}#^of@A(iuqPhg9;i9G+lp!n%^oZeS8qc3AV
z!<JCdmlo;m<c7)hf>ZgmLVL?}gy*m*E(1zU?NDS2-DU$?>$0t|0M0z6d8bQ8@!ihw
zulXTse#3x?IscV-643DVs+0E`uUxAEl)-CV%vc?l$CI`pNIR1D9MM2wu%Dhdmqc*h
zWS{&O8WUXZu28z^=EyM^szpH?xf?<v;7E*~;D624q-?FiP1q5f+sM?ID8q9P<GR90
zMYtn1K|KGMMu|vlnw`cjMcw-Z@8#ZS@Fr~R<qr@nT*JHGL%Z(pRA@`Ne!18pgt1`E
zk_kn7hkg2SjI!9HY17;)dE04!JYxJEzC2Ls3QD?O<I?b7AAidV(Y~<wt>2gZ)mz^!
zC*7q&Prll=I8Wa<6VmQd6|?HDS{!F?ZcdIrJL3n)mSGr4WU1|WL%y+47z23jvIF@n
znjl&L0zQmaRy3%6^8Dj?u9#%B5lYt!i<+Mcc%S#$rCrXgyyCNHI4EQev5S||ao*iO
zGZ$LtJ5$dFw-T0KEqD(p8={fIl2+8Pqbq%Ays_fw!ql4xTdaZeU>#IX{V78$;)|0-
zzLBt~2UI>>yt?0gs*lc9=kHsV#?Bin^ELZH6ZoW+vHSmHssUzl{*HdvsMaC?0g?Rg
zQ_bDU(&Zm*#$W1+&iibLzN>W#bqKO{kdlA7o*YQ0;&FPIh6KUeOV6am)|k|cY19*k
z=Jj{%NilJRn37-(B&)XU`##)$sh%Y_ROv+CC(48Ggho%F9E8Ov%H1;K@ug{#)4FHE
z^kU4;HUyA&(wOci)47+OJSCl7`mmTse^mpD%atd*I}=M<MmRsaJn^L~U3}b!pfbGT
zTHrC8WBDypZl5N(&YxpUd-y(V-3QY4-p$xLb)!p@Qq#!G2BatJyw`T(w#~%qIwtpg
za!eNte(JxPsJ@N0CPn~~W!7C0;P176x<2{KpbHN(12|HPTLx{o-`A%rDe7An<e-3B
z#>R};WeB6AQ#KqGF*JTVy%bTY6zVh_rLbhMS!WCy^ZiX&KOLGFTjW~}4GANXG&#z1
z<>U#tt4<6bANRAi%o(W>%Vm`dme#$tq10~UAePdGB9`vtt%;#hkIuJ%2=>9WFP=mP
z%bglYT4>qh@@}P1k+8Aqpz9HK&5%;IF-*{p`>uj>x8<3tk@lPvB}%IKnJ&Zat1mOy
z2@d5zx<w;hDis16@*4Mhm4^~#J;0KB8ks=jTqUsx;Pg&Qx|R1Q5n~cr5e3B%XkKbH
z|IGmR+gdrEHWJ{h&1ozFvs&m%r35V-&!!JxI*z<uXImghS~eXjjHms?!MQ~-p>eql
zC;uS!Ss=YNF0O)8s+b(^8W5uVdkdOe4FUC;0yq|cjP2*PgzY^gsfZ!`K4ylFws*2Y
zg^jQ<7vu>f43QvN#(pd(5id?nm$8F0Z#ui!vt!WYnF<Y}_n~baa7y!>d%Bl!U|s_c
z&zTnmwr2wzbr-C*ou%y!?Y<d7b4RW7&O$d3Nhult&t#40^C2WFAy5N<vW1q=&2A4W
zqNuTRFyVjwl#Zy4N>+~0GB9eY*-;5hfAqhL#t45_(S$H+wlWoI-BTH+OC$|#71H3N
z=BouqN8>q=FZAyTy1o6hPYJeO?IF&%zP&a&vSZVNEkFXb03j(8p|PUXKLssNw>({J
z6xjY@UB2b!e|vT#EfNzSe(~mUDX)iP6mkQwKoVa_WKyXQ;OYlOXLn5CRH0rI+Y}7}
zO@Ru`xL7iX<KqtXohxep>UhN|Zl1gvPuO^!)W{<Jy|3H}f5ct(e;9iQCPCOGTeoc6
zwyU~q+qP}nw%KLdwr$(CU0r=^?{g+@%#Jwo&3|~2xpL)tb|+d{5Ym(jgLDD0#sW#+
zn(~<k;17}}j}lB2R>i$hFQPCKD)<9mn(MEH(>S~2<B}l^wMmoD@08j5xz*c(44v7p
zI+MsO+(gI8D=gemE{1Yr8c>pD3H-W5CT;}OxaSi4xNAFBT;FO4kh*K2&IRuU^=Jn}
z>U9pZ2q#fzhEF<_vd<iqca=>G=(cnb)QKV5Db&Q4_1Q7C<HF!ugVqh1F~DyE4S9Px
zy+lxn#(Gw|Lidm_v(o}vBmb)J0a-9CX&r<w4h<i)RM7!w1Iu{I@7KD@JcN;9f(jZo
zng6V=EXk3Xhu*ap0m<x(QL@#pJ=lK2(!ep2b75q93}8dK#%No~pCq$Y3DW;^X2Zq-
zk$UdMhIS>R-Jl`WzGI2uq<)h!S&Xm|&~SY}zyEEPzsuvpJzDkX+>W1m1J*ch{*c0$
zOH}mtrwwy1YtKVs{yUb(B>q`x`KkyWwDE3G8qroi_96g@#NSx4I&@|0T%%BPTGfwe
z|8-%=cS~nfvel>nAs&B_cZ<{}^JZ?nYli%Ns{fU3Dmvj7DqF_pte|ySt%kNM%6HgQ
zB5<PS9e{1cdsVHSs~7wjM(YQB_VRTlOlawXnE2~L_t}%u!q_OmA)*rWzI{G}9k>_g
zq%#Kphfm&J+4^;d+juOMBm{|395JwvUW`mb*;E{GG#q^Zo>o^YK>|xgD&uftl6&5O
zeL*?Pb$OmMI*ZVLvu~CQB-#;}70NU4VP1MxS1!xVV+blVi!3MAuOwnZZULet*-E(G
zd1vC~x_+NaCzi?8`E;LPZYPn{d8NC$b>iC~?_QmMl7aKsew{kecce#SmtmkL6_C^D
z)sF@DuFsv@VB{ons!wy>RggE$>j`IKVQ16r!`%6Di)S}IZwzqg<z!#p#5e!u^Q*f%
zH>T&iUjIr|O{-9~{Scpyj&6omTif?xf?b4<oNNc{54`lFz_p_djVNXwYawvzY*Fq<
z`OyefzZI$C5m)c5xlulZ)K@TGPZaj9f%jfA3YLCEyFL}PjBtL~2qGqO9lA9s#XcAB
zkKr(|cDook(o;Op{w@(o4_W`mmV+sKB7~Q#F$OAKJW-Hq)OObmYwQL<<5ts<J3Gsk
zDZ|!7>ej509ro*#G1m5GMI^T@ekt}3{C}_fNAr>wTYoD58|eS-5d6RL1NAJ7^^ELn
zolV^Tu^SjxRrrC8BmBU|*{$gv_9rA*ukxi}+sfy$?6dnES6%7BXcf@VBbmjiV*mcR
z5uZ@qB%!Sf17+xocN_gz#CzE)mlD%U2U=H`|M1aZay@r$ZLM1Fs;v7L2YHO{q@xbT
z^>7eAP&S`07(F0--lrYC4=u};mBvzhRsJ3pD^QhrHpTuFq!&F6y9N}4CN7v5!+YBB
zv<>ehW{_SnopKbKnkjjclVxyk72aXO5?&6tcWUgu$Uc53$c%@1bCOmJK;&;N_x&*(
zIn1x2-TAZ|*&Hj<r@dL^tkV2F6WKp%7_<CmXI@;>wP}r;%U7oNg^4+^W!7-sw6V=z
zPALPi{mTCNtv#lrG96Z5E<W$bs5Q~B0lV76`k8*h`;8Fiej!07XZ`1#d!{TR!^iWh
zfUQ6+g3yyZoTb?8C<C6cl_2y%a?NuDc&;O!<*mf)MW{|XBoD({$0qG1OOF;gMiwK5
zY--2FUzX4$EwL6V5_N81f7m2pGT71wCo$U7b|7_3WPr7?rDyRXxRBRbFI_Qruajxo
z#76rW7?;Ovt`ih>fpq8XRhl~ppws%HvOyHd`0a_Fk7j<OJxguV)hnCU#`zn+t1lnu
zEC`eV=_*T#fiy2HSE*SPX{Q;Va_dR~$u%8x95U@)fX9)VYUA(87H~-#6SK5}Q?#EZ
zc*1FU#EC?1U?Pn(nbVN2A<A$Qi$ZiEGE8F&AX;n_``gDRrdu9*Ge~(cFBuc6uT3%~
zqXYT|=fzM+6XRU5uP|>XOc^Hbeli?@S?uBjvOt+N{XRuFHFy3nXeFLH{k)|Jm;)eB
zG#5nXQmM3;0k2}~W1Pj#nq@wMA`N*d@+`J*i#Vvs)yf5;_O`M}E)F*2ZYd2d$PtOj
zTFObcehaeRAX{!At|5mw5+4`+AYjQtPQD5oKlRP5HnUrOJU`gJ`17{(ol7=3Y<&+$
z-dE)b#V|5r3&jFK^;QBR(97r}Y9y#if`OPpau3gC;pS)>KoaSJrIeZK*(LZ)g|Jdk
z5{QVU9BJ2TF0cx6y+5%0B|F4`nnneE=K)T^6b(>!S^*^`VK?&Xk$=OOQ49Shj2UYD
zo>UhI3SAf5Ph3|7SM&0<hcv<bR6Sh&1u;f=SQE!&f&p@pLzC_%xGx-zBs*TW2r?XB
zY#)+>J<!YedO#9>?ELJ|?%zxH7`LzU7BS;_^9R39_jiiI#LuwDt44EQcfUGx;T;#f
zY#Z#m2P;=>n7r8U@gRd-WaAR_ULHarl1X~K#)(}g<~)b<EKCMTREmN#hQLIyU4gl0
zQ&i{ifbKG&H+=8DaC#);e1j;Euo6}?x96oqDShe@d*tMaDfbU62L5b~ooz3T+3ij(
zMki}$5G?%4@%#Jm<m6)%A5e`fLhH(05M0vA>d1i<qd*Alcz?elNc-HjQ`XGykE-S3
z@Lyd~c?XDD^C$G<cWDA(cf(C%yM)eEtdtKC+{%g({P#0LZv^IdA$uJN_sjVNl%kRR
zb}8$@wcuZ|ea`99j(Osb>(9;!a)j3$i<&SZcBB)HusB5XTf|b$uUxN|%p13_8Xq(>
z(c7^FvlPb(%RLGPKk-Or|7jOeU&Ik^1O@;Q{UO`Y{m<RRe>oVPEo@BeT>kNSELQn}
z<FF$5oT|Yrpm*9E+W|f0Z`16t3tIIxqo*#q=ED3gAVEW+yfdu*e8yEwq@~Zw<Hvs?
z(ml!g<z)I+KF>jzOC|dVu0HE02RYub>|6h7W!JvRrQmeE4e~Mk&;fCqUn0q@t2mmk
z$E|qY9wLZcx22hn$}mBdKLIWM(y+sAHW`iZCO|>vGqbP2rmaC;`j(_D*GAe*wGWr3
z&<e)K^vY=w*M3iLN0+?Y<`3?LrMF;Rufuzrn)$3VU&u&hkEZRSf^JOdn`ovVT6ook
zj)|Hy8wYU@B0G30_L|&R<C&D+2G`sQ2Ztl+a0C@RKp<VYMW%*#3=2P)%~nx7(8Z|D
zQRIKMBMkqf2{+zcmZ=k2{@r*GiQf*01)^<9Y+Y*%G!P;eiCrvcf-?C@WvLg00t(MB
z5MNjH7pBx^FoOaFkB@+`GzQ`rf>~(EA3^Sdi0-9K`FKBbt6_8($Up(5fFHWenqKjQ
zJ7umAY!q`V?;;S{NPxIIB+4Qz-d)NfEaNHlG(DRhBHSfX9z!tF&oCWQp0ZYi=PnWt
zn0t{dZs92gpU8oUVCMEhrE5u6*dGK<ymJWcd}b?j!lg(eD)84Aae}5Vm@O`kxItyW
zzPwN!x}QyO`!q9Xlrkwka~_myrOQt0#Ac18@iPWYTCql`jy>b{+2I=`lqNJY<_L9{
zVNH-U@YdYRlKqrkbzGY|hK`twpn(rc3LCM%+}=_~-5{(eeVyTQ4?KE85P3aRf1<WN
zyO86MasPvPgLzm<LSS>n{KFEL&Y@bHOK8HeHvj@>2Xt>7^GkXdg~OI9!zt*q<C-AP
zWe>ABg;?e(1!Foo7PFpF)1tJLW1i|7<j($FU?`0%BRy@jIb=p*BiQz3rf4RE;D<a~
z!Fqv%xeux9B?8UZ=(;rnQwQ&ENoVaQ%NL`b59}XbzdTrQ38Oa!bGuua#J^k-HBAl7
zA@5Y12sDs0FYyuMeibuETqjxHtNed%*q|KpTh_RHt<!qHTZoPGGaC_2j`s$wU+%sK
zul7sXyV%~S3@F@LKW^vZoo=aYtby`VH|_feQnhSj9m=Xe2GwYs(<cu7J4EBJ(V_<q
zI&bzm9f0l%cw{%6uDoz$Nn(ox$L2Pp+32_tq*u?}D=@;4TZE&xhR=wC@m9gbL>MT9
zI6(eFj~W&&J0{dLqI9rScK6G-|G*W3dY=*or&MNGUQW-SoH<Fi3$x6XWH-4MWyKWR
zHAmD!J;c8MgNie50%73&v$cBuQ%L>8*6P1DR*g+e4P2~$$nyWY=OILS()Ncs()CD<
zc1}u%v@YR~r%CRA2~`ca%1TpOEe9qvPXwKT@)my3dz<LVE`j}&H_03NtFg1A+F5q2
zdXKp`aQMheQap9q4b-hO>$aSJduAMXb*G<HA7z6=-L`rOs^f~7mghF1;o7i$!W5J6
zPL@jbBWqAyO<O|??p|sLw?wiU%Kfn2sU*dP5c;;>;I4f1JJEFU*}6G{7Tqq92j72x
z2HT_`awo}G0F8o*0%f-UJUr>=eCOri`#PP_Q0SVImk&mEvm%x;ZCI2{`V(Z{oiZ+T
zO39MZu~A-pQ??z%Z2^d6b+k(HhIIp+3l@<J>M?Z@INu@^pe07gYfUzQ6ytIec#XI(
zJ6!I;zNV5hY>KteVptrlERE=XE2kt%sNvO52ec}p8uP-zNwf93VqEHUVQ%RNlL*Mn
zILFpDt0u;t>CFhoj=@J9jsFD?o<8e?>_yy>XtDo=MJS^kx|Mi`CgOY&vrh$er&26q
zpYOGsLsl=#_Ie5Wl|FSlD9nV1*3U#t9j2Ro@pG`pxwVj-0nIQ~dYOuz-9{;pz1{dr
zW-B*_BRGS4Rv|tYwB`-gPS^c7g3fa`oZB~Q%=CI~ATlm4%#8_gwBtn8(pC#A;p+qr
z)7(||B~?YknnNPo1hF&wK(aN%z@V*c+dZNm)1^Yy!b3e$9!;Hb1=oxAxItz&1{wu`
z>Xz}~o-kIyPbCkgUK)<tqz#}2sPsSlfBMovnIu`^e`Ss9EAQKIL=K}&RuU&rrHT~2
zTmPnOK-oxN-XTz?tN!)S9~L2i(JOQs?3D6{9cRTQyNNGFIMZ<L2}TPy!anST0duGC
zKLj-v5Kw@B1&!<coO9a$`3wBNA>(?ECN54U|CrXCq9kLt@qZC!X+=a}3l(9>1cZjo
z;&k%T6(#6Ry72Cq!<RQ=+TT8AHjjiVJjy_j(_ODG(^H4}3miu9pby><kK<|S^~^G?
zXw@klTNqDhPHiE2c+-FvKso_n?9MT8;4H232eMq_xG7F{#_d6YY3;Oc&^fx|xu;Pk
zoKl!UYz-(Arx3(C1{T#9i)>UQONqrny*k=TkUL0cCx;TZjIyPb>yA8HQ<$Gv+%Mm&
zBnGphg^zS-m+98LIRau-63^n=6cI;CcSux))HaA&wz);NucjbYhMLT^<`@ylc}>3c
zdzGROXVMF!8Vg9Eq70jYB{~k?0bMRoeQsb0i2H$C#8gX)lw)`74te%#R6W2J<#?iX
zXW=7SqnHi$3KDBqb7l7xii*sO*=co=t8$eb-kBtF2ABq^)vA)K0&{tfCBbSn+#8}Q
z(EHOo^)3vbIlkgyUT=(8@EDnMK$m`7L>>Ncz)wgkGbjX@==7%)!;I32&i(341@hXx
zotUo#n9c1DqgTu(E2*WIw`tWfjW^S}rx^0&`{#!5UB7)kx=gJrDuWU_2l}`58M?Z$
zVfdKAb>t0&u+l{T3h(P5=;X)5=nI;ug9e76vWh{EAX8H8H(BYOG-0^q=lv{Nh8?JY
zcXdPn<TQuz@bQ=9&H+*II8Rh7L%eC}9}AiX?<_96Q^q6lM?ex~i<Zu1kve7dp=e-*
zjkEH^C^BV^JTiyYm^QPKq)1&xPkE04nM-CDf}+i+y!7nWUUFW1*Cnua`c9s^ISGes
zRywq$+{OMUA4-e_%^mrtiktW`B#{5lNBCb=oT;P9Kg+^D;Ic&q1mD+M_I_a6jRhbi
zcm}c*#Td!_?B8%}O2_PJBUAOnn;NTrv+EL^R0!}kI-fU>Zo6)$axs(`pUQ;vJAIZf
zHvQ_U#hvdjr!`IC_K^2sR(q0|{XA%M;Qr%&`FEvPSH8_X)2Wz7cZ!zz8$Zlh=CW)h
z<PVZ%7F-@I55aJ?Xt1``0lpZ%oV^~JhIdnsPMsRH(=1UV3VHP^1uyU(!8-K<5n6;`
zi)L`8fm3S1&K`mTP~6oML?a5WQ@EG}&g3K5qfuVUli(<vCYd2Wx^6NGFA$CI$DK&7
zjl+V1F^hq<1*M8#1Q2;f8~16R@G&evQ7a3y#q|U(gtUx`VtXbM(1G!IR&D}6Y;9&q
zs2u7q1OpsS@)$Dxj!Pn2%5%egK~_{vw;m3)#G%0VDV@4H`Z-UH3HhX`W8S@a(19R(
z0^F*b1(c?Hl{~4x(1nZ~>yJh)8nkL`8qx>Ag_E+E>JBr*LSs&61`HnP2WOMF9evqj
zVuua{)VN%vxJ8QbZWKjAbL3^7R9vI{l;)VxOfGUCDMn@kBz2_f@hlNx3W#_x3P-7=
z+t@<Ck!5oaIVox|c|DqbS2|?`XkBTQ12BE~OOn>n5WmWkONhjrkBt;4^}3j6R7zJu
z^_A}B!F;!HQXtu2K$Yx3TNw_16EDpz_NOzl#FPAdHB7T%mS0y(ruE&MRePT_-CD+e
zaf$u0oGeF$MG3SdyH<x?C`-vCKGQrFcQ9$RXbe(~EJo+c{>AqUo@`{6=curr+TRYI
zR3>ux6+y9b=8w<Ue@s0dT_)GIn8m1HQ^Hyo&z~NypQgQ-5DaAGAO!lWSsYBws%xWN
zAg9JAWW??31Qvcr6aFqoc{++0tEQV1%?1Zq#_gxD?l}Y2i$?bMS`?g)Q-ElQ5s{NB
zkB>%Pb59KHAY(>?KlF|7i5%k*jUzbAU~WG}nWF6CVA33}hZjG0>`^y?K6}lwsD^Ol
zvNPEMO9+5D&PlH9vfBz9KeA^h`2+nMqchi;BdI60=%Kj-ZYF%CareJ#Ov|Je1g}4L
z&hKaUi|wE9oPn{i-jAr{Xz+iGKzjdLw)iJEP>Aa8&%F8P4(c&>^aLZf22^U6+aN^{
zH;EJw8n(YY1b6MMS7|lsuJ3?+f6k<n(m-nCAt9cuvhA|{nsKplBCL^0en+?w^^*w}
zUtG8B`f5q^=oyf)cPy4HuS^j{|EO!F3R>u{_j&_C0bdbtMwkaI0Imz7Yf1$CBQ^cB
zZ|j>Yt3<d5u0y$a1fkY4GU4SU!6)G%L}pYe_J&s%wE}^!vi7vUDHo)-cNpsX>g$E-
z1NNo>1hsM4nO$@^{N&4#z3Y?vI||S3hA?^U8l^{@F&Z0!^*3j5I2|EDcdO*$C{B(G
z1!b)N7D@a8GN(oC8ZasKSUhxMXSMtoQ68{{M#X+2@PgC!i|dEHhS6S?xETXvJ<U8Z
zicE1}3#y3&gr^R+w$bp;!k{LVnU5nz&AX!@)n6q;P`pa*B(jI_a)>-XG#MJf1i&$U
zomg3v6^zfR45DTgSw4X<8@5;kY3MTROa-qy7Ahvgoj3zgGuaMW7jb2f4}M9?$!Ua=
zGE*3uES<+(L0$<PV^f5YLL>j9;qQKy90`I(_?2<7D`Z=g#>#H0kqK{+h6_WfT*`Eb
zuDAMC#ZRVRI<A&xxy+L?cRLw_YZ9Ra_Tt~`FKset1VcnNzp=?k#qhJX4RiX+fHYP`
zZ|x)K)q0v@#v=ypfwLN6cMY1>d&>p{PKQZ!=t_)qF%rFWGic!{5E1&&PKRyCKSZ$0
zEONB`1M^s@nBkDymPG<$O9{yC<>#u$;q_ddbn9T*5}QGE_(eAf(aytPNWwOqoejHm
zCt9mK+D)%whc5aRNC#Z|j@>@*krXDo<+>=Ba1z|M^bXyeD!bQi6@Yq`BAQ7FLi%H7
zn)VHNt1|4A$2*5TBtG}+uedTmR4lkr2^@ha7gS8&T^zuFR<HCtkaxLEhvq-kh6tPW
zA_y&}&QLt@iNO`p0$E8bSm_l0fVV()inzo^^NN4OmbA~I%xwe<ol~l@ecY)^lQH}*
zb`q!*mIJ1j?rl_Adafuuv-%}Nz)~QQcGj%8ZWY&P<&kAlceqz=;J(2B1=q3EQx7Mn
zC8x@%aqJ!PxZdu%VxH7$+$HI;(6nm6-Rq|={rAm@a%gQus}z3{AQwESzjQWef3^?Z
zT9%&uIKa#7ox86Lve+dj7CO5G6x>~1Uz;XpE<^R{;89iCdG#><>Q{O;B;DI2eDz_N
zF3_Dmwx>ypcbfYF=q(a#(!Q9g0q$;u`&e@o3Lb0I^t|cbpiyHVcmy1BGx5eRykFBL
zhvPb&>$$FW*ka|5GMTlFq2R%_fiS{an1a`S-Cf?kzOoyB`bd{}^lpr4Huw^lE1|bv
z&6a_0|52V|;wLL5|Ex45AOZkT{J-BBVP$D0SH^!+?M(jJW~eUn!x2I1K2*!=LZ>WV
zySJUjbH!B~Z!s;PiaSosTAv;VO^6SMl&}YokNp1AW$TZh$fM;YZkWXH*X8@CBV)FC
zI^?Zuk*YUUZc)!nkh_b!=4G`u<X%ASp-`I7x+<w;!rG#uy66{Eqe^k3zV$H|a;2SI
z)akM}Y48`eEV@k1aZI(#v5!LtUs|VD7n4dnxvgmBa^aW%E3yZhUY9IBUh0ETbu;$g
z&R>5Rw6^I_XXzh@7d7Gw9iSGRl2drUT#C{hdlDpf&_&huqv)WhW6)*IHm+Rg24z7r
zw60A|fVZJ1l-YANKDW;xcYq_EPGvtgRNK?QkzExbSwAyfO`Wta_^^Jw*19IAEIU%N
zhA{5k<j|t0f!T^QGidj^=Gr3jn(OY@cW?}c=sM*t0$@#Blpsw?yYKIshvFLOoP8VN
z3=4cHf9O`l)CscW{nb)TI^YWL-x^AX4opG~dCT%zWK$fgxxZFsz%thdCZ$!3x7l)P
zuwHDBgKDCwinhm6T)mPk$_3@u-SYU37m9Z|o=V2Z9T65mR#u830YKU@lYv}6oTW_y
z6_llvWBQ*F>!ksqXK+{jaX}0GolAi5KtH@ds2f^#i02Bcnu9hKjc?S!qn<9Z$4SO6
z*1GTq)ej-vcNx+Wb&@w(=@!RMOiE`J5i9OgW7`V!@N-5V;zr{Af|g>FPgsY?$d0}=
zD!9W$;)deg!SIyFNh%ngrK3uq>hvs+u}1-%24IXWnK(x|(2S`N%a<_ifAt*khm1E9
zecT-bJ3zH$Bpk`7u@G8pni{-qBrCwyM(j(%aA*%?Y+Qs3#m&@V9&MWX+a+BKThc{#
zmBZ{5)fG0QU?|~}t#j<N+Vdq`hRVuImI(XOqBzqD0LY)WqL|ZAtaX+;GQs7)nuO1=
zxW#XiNaQ)4H;_XJhWS!qW9Tp}a>OpdwO6+_don=@4iaq*i8oYM7*(wcBhhoTyr|1@
z{s~$_W@6mSMu6rfnI_RZM{;;)1t8IfLXLH`Ljkw1QOztdq>N_Y-R5_(6RDot{;huE
zCTuhzn2;FQWP^N6g0xWMNA7CxB16Ea$T8|?FYG+limn?b0o@&@;~~#*XkyXQIR_}r
z0}nR99l(h~5bRn7+id^?`sr`tKD^J8hAOT{kR+~}tyhG08-FE5*{K*=lZ<U9MF#+j
zx%ZyC2IogQr=agS0GHw!Hnf7Zs@0tn?p6viidW24fX?}50`I4E3d15=WaFior?K5$
zMP8vGUt(zw?0q?p6Z!RqqQyAvBm`o<FM@DACqjajb7&sW--$hN+A`=9<j282!+(V3
zkHWj4_bU|<IoHz-f?}56b49t`bvR*6h6Qv6c9s?}*L52BmAfK8Xz{(+Yn|Na`V6h7
z-0HG`J9=@er}N$Zx2&r9v2%`i(37%-KjfLzyPTizpN}TboNc|xoY+5IB3nzD8iJQZ
z3ik)xVs?zUiMB&1An#VtZmKIyHYBQ}A3?dZGwM0!C?cJ!Fzd^sDy;G9;$U%+V_IaF
zs%jPu^?%1!qVemNSzyhD8&(r$f(4aEpZO7jZuGuCBg1OvcdQyp^%_~elE&TO>eGnv
z5t%W~p*JrN!jo0!E?X~9M(HCVHZV$~jQCdWevyd<T;=V>3+!lZh}f~GaZgvqss?Lz
z__wHODM}G+O7xF85zyp<<Lx)8r7zi6>jIO+#~TH3%TTN8F81zUUfc6XNp5YgRj}_&
z2usq-1s+plLt%2}Cfz8SLU7AzsrAOvn$hc}$vw25AF63i`jVkqiS<7pKOd88%OW+Z
zi40!2eQM|qI?MJiAXqg-pRROC3aE`iL4>b4*9#q7x7zHwN-q3(Bau|ZOY$jHyJl@R
z%yxudEfBE4Vyk&=<6Q`womS?<3-U*hBR+JU6I*V)@Kw)tutGj$lhf(Rkfsl8B(6c^
zN-A0BGh-3@Ka2U`g4m&sqH&Cr4GjCmbjo1Jt&@w;EaBiXvrVH3f-^_<d3*@wMKL7|
z>h4zwbgyBa>%RDyLH63%?=^Ax?Ba@IJmr9_*lq<_hm{-qq(+4e&kmT6l-{k#T^e7S
z@>K$!_qH9kvsNzsmL=gVNx_;6v`WOItb6m=u*(o{4T|Zi4|OsIFVG(HVR90ALj|_D
zg@BXR4HpWaJd(~?u>*IaGG_^P!yV&7&fUt}zTx?*`>dU5mq{{IdfZrY!i%JYJ|9}b
zDy%xbxja~t7Dtx_!$+|br)f!&Wa7RVd$Pyg7-FnF1C7kvUXC}^Kk6G_OnN*uXnMQ<
z(C|W@@k<G-mbDejFU!eCe-iZVQR&FDX%E$6enhVIxD`V0`QCroaQr=<j6!&A;pN<U
z{Qf@wD2;o&%(ZUoe!rrz8foe;xm@_}DuULfW3ij$fZ;o+tS_*W$tfb=RvS`t6o#i?
z=!Y(A_%g+|)&6i5dj`409)gB_49Y8lc@tWT-+R_lZ%Ck-GfjCxz#4v5C;~H(ihKNA
zU$k6dk@<?93~2lHhPUtF-_4q5*ok2Ix3;o!aNj=T8~z9h-(T&1MrGpA5q;tywQlM+
z!8gc%?=INjYdGtE1gXd$?<(2<``1@elGd{~u{E}^HT$P#B1W~}_TMa9YOqbA>kze;
zR(|+R68|I&9pD<=wVeVE&}8O@wXq^e#rum}E}`+%tfFB&BoZQy$CGY0A>A}G)B{ej
z3|Rw~Pb0b^*G_LLg;L2|vA(}Y3)#GV<l>IfIfTE^XmAr90uWa5aEDY<^M_HA!OA&c
z(%<Z)zc{{M9GZRC=voB(<Rr;OQi!xMp{}(VOL8fC^GS<&o)}<|3U%Iq@GWNVT5ZMP
z*M{jfoFqN?c6V&h;5&ysNr$?hkdle_AS=?q&KcRX1q>3+z-KpbAidWNtS<-}PXKtu
zC=hKx8eP2_X(*H}WCCXtssKelArz&pbv&iRaJI~Yy9rqpWxdEKY7AuBFs+NbsrWrK
z(Wl639e6cTLnMpTL<gf12?!HJ0C)NxBBf5dgY-h#=0kLY2n8Nfmgzv|mkC9o$*fR0
zPpHNT)995M3U2!1X4XKAQc?lB#8p6CQd}d0JGzNp>;msD?E91@;`)I=3=%@TTVbwC
zRQ{NOM^WqgCDMRq(;Vek*q<5fA&4lAZ{O6Ce>^SO9Cw5g$6Hji`D!r8+aW16xxg4!
z!R{YrNtn=D(ql=4+Q+-p4)9ZI3`!NR_kar(U#D&|I_*Z{^wW{6H`tftXEV7I-&knL
z*C>;sO*@3brq$u%=IsvsRWd#P=2r*ujg5p8sf|<x5#bzptHC~)V7o+v4^H2jf2U>_
zkso)N6C*B3Pb3Xmx>*YDI^qt4&~ZoX_ei}Opd&I?@|y0F&l2*tVLbdBM4it(L-_(o
zT`MDGkQBXzVZ;X3rh!2~Dl?D9^2@bTy-_=&3gVz#`a-K9b9OmKFv|mD?1Ur@f>Pqp
zB0U;FPh2@S(=yl1<Fh-_G0IKZnT|IA0$|Y<p{wAHM&dHsU{mK0$D+#`it>n#1M&q&
zE^IycC=O-9^)$GV2)&xpH3-ZtCsi0?RkRswkzd?fE5ld;E&ZYbglK}eqrJ-2U2dee
zJ09j~K!2&Mbz(BCMm4*$cGr)A(PirM5y&zGbUiMp%fOG{9n?21tYNQASwc{B$^t(`
zoO-e)FLk*4o(iW>S0gx52s&p{l`{*CPJp(W>F>CZxqUJ9l?t0p711v_BKeP4AVl?Z
zm2H&?niop;bzy9H7MW_-;(O#cult<F7`ls_$OL&wsSvd4a(~IGA``1-wI$P@&lZjT
z+{WY9_ZRR{4}6EP*JhLg8>JT%x50BHKd!^wj0?MRH1rv>!-L`G6|}Xw65yj7#JiE(
z?Mi*#uyw~yw1Wpr?Eb$x2*me7PU%5&-NSx4$i6z(ZkN-A2%TX2)IugHvOpnXcuE!<
zUC6Rfa)lPm=Y6}?_;_qlyS+ETZNE%xmU&<AJeV@PKe#i#CkCIqANqgu4^<Tanx1cD
zB*3$I_w|R8wUKtp?-djEvH|ConCsu8<eR7J_u=z3Ve`p<_7#>7OpnUigyKLZQ7WSK
zlB;{x5HKz!NM3-P$KHE{Z~eqt*ysLEzm@d0ljkT%VHDP+yE&=6{vxUVl~OEU?zltM
z(U#8WnD9g*edBZ96FoY5$Y{CimQerc;AFbBf_VHbe+PZSS>E-A{@>q2xNAc#;~$ZJ
z@aIkZ2QUA>hEb;fD9(rc=$k(r(0}QhF7yoZ{GAr?xC9DlHVI7p!Lk=W`X=1H<xgtr
z?}uAAI0@_)TQ7djtIr?TPN$P;@eD);YL=;5ou)TDq(tJI!R)qBPE1~u%wM@|GkZu3
z0XmYfXf0FW^Cm#bCF0pWi@b@_AXz`h6J02h*UD$I2qeM1Y<X!_%&>C0_6F71dvp}1
zE~JV6%5cEN30CksJf+awS>!3dUl*-RoFaMy#_chzo#x#aZoC+Q`!!4xfz)sKJ}V*m
zpb(o@Z?2I;kN!_Cu=Al;(qdwtXq6#2<@bRY$zY`zmc%&Vs`ABcIL#@T8<|9^M;vV0
z?EnQ`<F@fVWu+WJKrB3c5Hp_DA<2K`MV;fikD+yGwn95Quc3Tt4muIYJ0IO?i)%tQ
z+=}FsRkv6>Sd3EI1)6*hz<3S)so?EBTmlbRF)o5t<CT;HtkN7ssVA{PQzqIH#Ady*
ztN(x`yUtA*ZD4G%+K(nC1ylzYmLJ7b_G<CKbad=H-<~u|RQ~X+wqnwz6esZX&^ciY
z5Xr3s56az^a&Z1IWW^D@Am9haDdqco1!~u@y>6aew&D^>>EOkzp~KaXCygIJA6+23
zvsig!_?obZeyV{)O`w+X_=Cz?T>_%DY&kv-{ZdAQ4uyw2W+h{Zb%uFx1_kzWpC{9W
z0rvOO=?}oe#-2Amfcl}K2k`yU<@A;~yUb4xqzc`n(4J>##i14YwYsDrU6QVg7jZ_b
zh(kN5f+Xl=>SB_<D{>hvUTL~=#^Q2ju&-@lH*(lf6ZF!FVBUzI%W&8dmuDZg$e?~a
zM*rWBFpP|x>-&#j`1ND8VEmuI^ndd}|I2S-YHeWlk67CuQoYlU+oJnX?W!nj12-&k
zTNbYT5K|=IXojIcYQffLfuDe)ARhn~KlRUTBXnfqv8HVaxCMcCm(OS2XI>n&j@bOD
zYTXA)$ziPoN{R_<=F#HhdeMiKX-FmuuGSjzTIOlCeu-W{t2`8VM*zdmVvE)CSP0vc
zMD<x3GCbVCi%rvm?Qgv_3rvx_B;~HhW`Cz{q=^mN;M}(EKGNDMZ3=}TWjNgu*C%Hz
z-~BC~tgBq;%~(G_*lP(vzF4-R2M$Vd5l@}scjm|nRsKU%_;P%GZy5HLyL0ZZE`E7?
zcWZ=;MGnyJa6Moz$+xz&Z!v(d%9+Zdt-dfRVcx#qqW0j`x<SuQ)Zh0&Nyk-}H0<5b
zvuP}$OQvd6Q#3aYmUNn~^b8Y2*g<BUqkRSQI;E?Mw60$_8mA$krXU#o&w>)v7x3b8
zyU@VB`}~~sTOnOjBYLJuwYiPXzq7bAd!&ESY|_G<p_ZGRmjqYbPhi=|M;s@XV{w+-
zhk2;x$6SH9QyXG*LKHWt&o<Q(e!I?@pF8-{iC4Y>4ARJyEIS37C~lDr`za2+Ior9r
zDw~k%mJ37DCNvM^(XfVc$H$#)H2)3KR#ZMW;lxz)a&$1rvL-Q;1)ywVddL~s9XjlL
z1kg|Ta!5iOzv>XT12&gTF51QcUQa`97;*r%hQ~rran)A~G<u2wxuVPz=Tx7p0X|`P
znNWar{k=Tvk5!oFQ_m+sqJ4%1e7mVZ%y^7OjasOr6U7;toQ{ZK7KxD`iV}j+?T-U$
zT*8kL6wGqEgR@ZDHSsr#R3rg?%~Elhr`dkaaNSMaYYjO)MXi%;Z3V1=zPPywbaRqk
zh*2CBF`t+Hr4*eoz-M`RmJY&>$1co%$wJdW2y5PX?YJP870)2}Q4|(8LZw+I@XPY-
z`OkXKF5@M~;ciQbBFVB0W5}k1tI&z#+-KQ@?tMc}JnT`jx?N68A3W^@<OMi-Q6X<h
zAv0X3E0`J?WOO4_T)~w$JsJ_-A5U+G2k#t+gUVk*x!g^@oLc#w54)En3(!v8(rtAn
zE-9%hx?7-!&0J=!b!efHEBf$_zb)Y_iAG!F@fH`~bi7+a(vMc%L_Ury1k;u)#fZ_X
zgBsmR&Ft<kdEyJ<!E0l_GhuwLbSlSrN7kf4aqHy6^{H5>QYB*J=tiE*Maaf@37r2R
z;mjXpPLHsSGWKP^)EUR+ht0PY$Oq)J4FRLCRVD8HIj%^OcCZ$Sh!r8gj)nzl!8vO;
zYQxmRU&M@LA}~28$w(c)OV_xD6<l86BtGRu;qnL-TGu*NeHk=w(ycw5_6t|f94_Pg
zwQ+>lYP%ky7Vm}b^B+m$_QrTYKR8N&?w_q>mVbC-{teA`)-$rUFtK&k6B78hcKA<S
z#I)+B<IhOKXI0JF1`mi1?e0V|MJJOgH69jqrOjXFs!Lvwn0o@sg2<xp`_ox!aGI6f
zSK_$8M&RO-qtxr9p$^k1t^H`7L)(S#6*E&hv~lOj^u#0`vbqSeQP-^`1s*o9)9CbQ
zu+iFWH9Q|Kc8@lXD;{|b^r-{SFB70&aEz3MOZ{}gKglm`0o>%qzwts)9DPX;67Q(x
zZ2Wrp%#$gd0c@9o*f~R@tuBOl=MwFk<q=M|x@uz2-K_ZnYDTzi)U{-L$F6anzBv<r
zgKrull`|_r=g**S+38?kh99B-fNT!vl>+KfR9sfa&a2l!5M{ToVK3m>>30zup0*r#
zVWra1%7t)D9JhB@UeXLSO1)3y9;HZK9h{H>eYWYuSFTA6Z~HI;25SE~b6-u76BRLA
zmq|KHsJcUpbBW~momTHY*wq(3rJxh|2H~Ac-)^}hO3S_!<O44|UEq-a3|;xFxM-<m
zP`B!<*oF~!-nU(aC!(`E>{(_u^Y0gjmcMyK?9yRLXplQnVF_$1@26H39+Zd`KI4T+
zn%ql0m2MZX@&OyuV_xuqqE%Me)Cs?u)Tyfjpb4Xb_RL-Vk<hrOQ{)0tNxzd`LsSJp
z{{TF$aU|z>@^J)kIR<1FYL)aXx6v2nMN;8pG7Jkf7%amk>N*f4Q9zNaO{Dq`iZ~Kp
zjKfa<f*t{@(pW1t?oYXIYQdEaf`zmKQX>-~i6O)}Lb<P-6qE|~!>|4TztU~kPld7Z
zP^}M`H7~5XAA%NASLly~Ya7uvmIz3zKR+u-<T2z`AIif1K$7#WQ4$*iS1Dv>%@gN^
z_O=$DE|oMy<+4BLT&bgo$%7$iBYdfQiGG_YrsJoDz8nx;5QRGDaf6S)?~|jAikuxi
zjZ@rv*8N+?-~I&7qbfN1{oDT<JJWV$YcTe)UAWFzaqB!gE*(!v0~qm_qmGGjo2+5U
zwrbclfDr8BV}X5(Jrrau^2-xaszw&fxr2yuUIAe$noF<@y(BI%o@~o5t-pichlw|6
zuUnX&IbxRe$<dVZfGbn-Or7*SmytsuWHK09-In-8^VhLADX{=_WwTBaT?I<pu{~G!
zsH{22zLz%v=l*PzY-T+jP1^#gU_d7rXy=hAYVnDd3C}BRLJP4vq2#G~%i_wmX5Nle
zwhFMf^F3RBn$$guY5%tW*=OId8di760IN-g=(@xWG1+FvEOEwARg`-Gy~B|)nnh2R
zQar5PpUj)nOM{|llGsM?Iz)2<KHaAdW+#hv5r<&`a#~zzCPRo)G_wzLE~Yt3F`wHg
z^MzX>H+D=$ZQwFptas67#G4$j-A<kcdaS>e^)?N!qN}Zk{iS-P(a+ZRdrLZadpe!l
zzMnNd-$vS_#9264p;l(ZyW31hXkkDd;RoqB+|edDs6f7DAig(5)5YV)o{ZK+XU?E3
zoZd>9J>_hGwl)#Jy}~u~w{gy%MR4=24>sW-BRjPnh~<l@ju;(L3nTfLHaNOr&Tylz
z8N4GG`4d8ebpKi|gk4N+E*O--D7aYaiUQ`px$}QLAVB@?S=OvwoxZs2w%FF8es8Ma
z{q3P{`El2dVxs?_(G3(2uq1Uqg&5h-<o190NIJM!{B#vg<}S|0c5eSTUMc?nHv`(}
zUH2y(z^@EsfZJm0u<ow<95;?B^NJgXQ;B#I8?5yCe8nOaBZp@~UkC;GA8!8DVaR#(
zu7VofN*xVjpe6Asjx<<*v+MkQH=pPER)PMoncP7AC<~q2xu)CFiS+o!+u<KhSzAry
z3chg;BISe7$%IpWsZ-xEX^ducCsn4q1lrfURnVXodrC@Xb9R|4@Shy}iL=o?z1c(v
zc9cH{0>4#%`*hU$qfNcZ1F?_tq|^P_yvIVwrFUA4ML2aD*S%Y^?#$AuHJcihcCvsE
zfU9XwDoC&G68xf1{SMc%(HCX~<OeK^JbpFUJnE7ZT;cf$>J&K(yTAaohNaUy8$vY?
zf$lg;z-}+G{dh7L0k!`1gBx<c`pcAuAvs(;M074l<y+8T4+>(O#m(Xr8Uu*o+^m59
zkuRGq&o#FR!D#yFpc(#X)>K7VQf-XOx4!0FofU5b^K4PK0A6rKp^d4rhBd?wOxg=k
zRS5AG3!PGz@n|N=H6~T#%4-q<^*gy;*!Ek5)+=How`kcdjeC8-F?->IwyC`AsT^=5
z$WgpKvWU3pVXQ?EQp=DLhV*5NJpirZ_mGVOYM#}oXZsSGPobgL1z?)Fx!9a$Pho5G
zGsf={uA?Qk$E1Tj4|!a3!MAlGi+sJDU$Ac6+-WZqMNjvHsjMh52TVii_(!{D=Z1gM
zeY*5^>G<fsU&t$+f6wq1w{BYue9St1CeP27F;e!lXc_kAM*3ldAdo!yQNyVh%3Be?
z)>KvFhoOREO`tu&$kBC`<0inJo|&P@K05G{!NASG!R8&##0L0!mD(;f=9u|XEBC`f
zGV)W}Pg-G$T!lD}ECy(KnmG}(2HQJvrcqnkrqtZ3LBBC)?0Q{ypZTD8dCWuMrdIs0
zSwMCvZL-HKHnidvtzLV-%4qFRs8^0)V~&~`hlrvay)Q_me%$Ykq{M)8rtcZK$cJ}<
zyc@0aI-6$M<V~;Dx6Ur5lbvD9SFdqaBPE`GOonQl?p`h|zK<`KUsiQ(q&{MQ@OCk;
z`2ZQpb;@I8^aZ`@9{|x*&F68t4(r;-&O4)az$8raFIj`EYx3}07<jK>k^I4Rz~df_
z%4nI?z$)V*-e^a8Bt#SJE4xv&k1<vVjAJ<rL$lEI>~K7aUjZ${B0^u{EqF6aqG&?g
zO(m?8D-c!^RxbABcKC4|)HqvPdt*d@#D<8!q9hwvqB2tyFA2#tmfQ^Fiy!|{L#5)V
zT&2MQ0F+SwqaX0UTD1Q|Yx$?zX<75H-C+yr-)uk7Q-kX4kF28>S9M1Yg0v2`LR;@}
z9~<~h{W&BXEAprcisA8=?^`cD@r=ZjCfra1=nW~Fgt*(!&n_{&V=}Y@%Ssh*I=k9l
zTxiBzxiq#Y{8ZJnNiQ9e%hCKHv;NaqmPz%~<Cg9Pp5o^li6$g^lB)Rjm5^v>1+q&L
z#p2W^fWOkxWKJq&*>o-jRxc;`wq~~{N$m&^trBR(DpkkSNtaU_PblB`HhP1VUP(g_
z>AgK(Byt501{6tE$y~@*rfsG&AHB-IYm}cH>@g9nk&?(?c8M2@Tj6fb-jPr7S(mln
zjs;WW+GC%8=e)>adBc9ZG0-=88S=s%!{_GyvEa~~x*3`31NH@@i%(VhN;`a?-agtk
zWa_+jjQa+-wlHb8S+~!wh)J<h8e^;VKd{okYG1emRC&>?p!wl(AX?9LeNI=V9_UWG
zq=*PdzpAQ^5_4!wPKo!H=@MU|;q5cYvEm_ZZ@w;;Pr*XO(UmgEjo+{EIu9v+OG5So
z|MeqDPLfXE92(H9G^wy&AI1tT=YqiJMPk`F8KQlXCCw1=1-+B9Qi(jNvA9Yh<)ntq
zWO0JNDX(aPIU?@pb40r&@{w+cv8Mwz%g1SxOA)@(Ek;1N17u4cm-RBeGf_4dC#~Ni
zKUS62%g6lHef!sUFJ=SNC&0t)f^c1hD^H?UceN@cgK8sisbC*+NY@7U&E%!|MIk=n
zYPQ)F-~F#E9C)IDSWrvtA2)Tu5T3zAdWgnhjD_oh>lahp9GmVz5i)A%q!Rmy3k51B
zE*hEX&~35w110y<!l1xYAh=)r+TVcR;*#Bk%CFmRwhzl;$JbYAPz#xAPC9!?Tdw!N
zF<QQibN%fz02y7tcnJ%c=i~PUhfzL8C4;<#ocl%lsY4gAR0-|a3!DfT1i@_GGmHo{
z7B?mWa|NRZ{m8twGN4crj<obE;Sap<<B%&=^AZ8udmu3Rc%^SzC7O;~%jT+Mc?~)F
zp;0!7c;qR@?~V6qq>HZm$)p7<SWLlCJQ%Zc4Ug9ZU4d@j%0Qt5Z`lo5!Of0@7=15r
zn2G$#-0;&uFUd7P%}_lHBiTjh(l^P%q@9)wZru*=w;NwXW7hQy%~}IJZ0M*fiGayI
z^+i&6;1~v%Jae4uE>Wmfs3flIv_klWNjkG*k=cPCNX|Udj9tix$Rz@x+kqu52PXpk
zpFP8>OzN}J1#wm}*juTXqZ$^pTyoPZ&SE*Xst(xuW2jIAEPFe0q|=gW35vugCo}K2
zfi9KGzBA8_y*t%sZ0$yHvT%FwF^H9^DH1Zi^;QcitG0>MC1I&?Da$zQv)CiAI&hl1
z(DX<$VW_mXj@NWH_*|ciaZidcDsW0LU)D@>%qir9p^|5*<X_;dvPC_sl$`0;VocLI
zCsJAbDPW6&Xp3p`=8!t6IU3M7lM&ih>#xXweSKiuz}Quo5g37Q!J-{VzQlbk#0@5x
z^3IA1SoawCg9G4;$Vs8H&tm`!lDCiiwBf_;gY5<Oqwurlshs<~N_+;GolyoSvpq?M
zN*T=zk>nLL0>EMqslmL6j<wPA0PcXxk%^qg?kcGyCedxm?AL4}J8Br=sb&}T*L{$H
z*X<k20BKe}0o*;xLN4@L>PU&1P)uzQ()S|jTNDzG#3vT&<IKq;A<Qb}{efqRJzx_y
zhED`&QUv>Vf%ugXRm9Xt)2VH9_8640CWABX>-PFy^5}x%$*D&2yq?GM*a`NKL+nSQ
zlAblul@oG;@_7l}1_d~2Wn3Zk<Fx%DqS4Yn!3d-%^ax0jE9~K5Jnv-Z81(YQP7B4_
zkcuT_S_nY|G}7yi>bf_ent>S5?;=V+yC_CQ0B?>HTZ`SW!@C2KP}V{pb8Y;wsb5PZ
zIgkVK^4*R}x_=>LT09^wW+5#N`L^QhZqx4W>h@;DrbVqkT)Wq2O`YEA^ytW%v8^ti
zhhf!`tf;2fpf4rF!^waG!VJ79nkOiExX$A#K81d7zlU_S+x8&cEKfqW%dlc_f3<hV
zPQiSKubb9PE@Tb^`t(ov`{*^4w8Ii;s^-8Rb11owx7C6DZi-rlBg)Fnh7EbBKh_E@
z%!fweBmmo5HeBr}delC>$imfdbq^M52BZG0E)hq&ZjkUurLu#(QCp#0RmGSEEQ1`t
z?z|8b<7^)-@wDqpU|ojm8qftu+jj<DutsY{5jqM$+CXGxu$q7IwD+hGe#6?F(AG$<
z#YgJp#Mf^D8AX{sH48$#+drj9zEIiD^m4a!^{9{vW%$THGQKx9TGd~}EczwMv(;Km
zHC9`u=`dUER8@@`2}(bfEu3qg6tHKhnXNRxgCbrv@#=rdb9pA1yI~sTtRq=XfLh<H
z748n22Wo^<CZ8ohNI6LqkabSfJF>MKWS936Z24P6sijX7M&aBMmT$6RJF-5Vma#Ff
z9VkTU;l^I=w=04oS#gv0@dZrP%a{xJ=}%q&h0G!5WYWf_4Z4l+VL72z6AXo*p5TnO
z16<)uDrakhT|PGcU;97To#*bncjC*H0`XYfb&&acwdl{<cg$e!ZE70A?_n{S`SgjX
z*=Zb49<>XRlJ;p=I1gFH))D94k7tw59aIb#oO_|g^$O?$yh(~WZq0!}JAxhhMcl6k
zFR}5xv0fNRq|0rEBt!4uiI!%Qd!BHsc)<$%8E56PWB|K-<frd<ZF-PLRoIuMXJse^
z;m=1y?@HGyJjebZo3^k7>Q1-`?lShHl6&GOQz<6g6cx~v?5&!`5!)XMpbeq2s8d8k
zXb8XuK6?$~O~8;>TZjaPxAe@BS7X2+lEY4qkm?}AK&J^k<kFJVQ#(q1>?0)(rA%)k
zDaB4tlLo7}%GKpRj*&&H;LtWh#SPQ1yv30{VRkqnnbv~^nPTOLpa|JtcYx)p$uTN6
zB5cWC6IV-IQKGlp!cEJ#5QU!KVMYS-;wRXYJs0}k0lr6-GU}S0R9$z7q4DeVqL}Ud
z{f_(q`u)h~Q&JREV`68i<~3N-&J3|Lm@U%c31ZH{G@z`h5tq{%O`Z1#f3~Z?ZahDB
z;@AVuB>cPNfa>f_rn-x*XaQ!a`J3aH3K5?1$3B_qG<o3KJBC@=qRjOZ$oxw85<dh8
zN!;PgAaeo=q1)nL%l9EC*}xri;6!Ze>_X_;9|BrU*+UtUes|-dCGtb={e;gxLj5`8
zl;H}@xK2V34?ma`-30j)bXgG_wz;<UfG43OTu}kD+x>ua`Tml!0P894R4?E#hjJ9o
ztxY&;4@bvoUrXK%9D+3U98iLvT2I9YR%ny@6)wsEBaUT`x(WbBF>R6kzEOMJ!N7&j
ztu9arF`q=hZ!hj)uV3;i<=^xH_-jX=d55sr<dM}bW2ngypkZv@+_??sNa%<!IN4bN
zf>RT-G7V!tt$(lsxEjCVl(ze{|1tOICIOCqA9y?b;V0B=0XKR%EwGsTqTKIW7O9pP
z^jB1m{NAlf^Y`QAZ0{R2qbS$jD&!mbH1->%;t0MwXEHdW_;lOGMl!xT;1T5Ckk_)V
zxU%s|G^wJ;GOD`5QdFNFMwiTv)udZ+XpY1j-3v`WH}ohjS-G<`?gTdjRGVisitNYv
zJasNx2dXhQ<D6vrt9-Q&DL&U(ER!(ss&BAhvDh)nKVUArgm7MFxpb|50h4fG`5OMF
zR&w~VSgc!9R^j3MuNbLhi~a)6xjB2fT8NXA($~(rTCV;q7Cgy&5~Gqm3MRoqiwhW7
zemJKjy8-x$M6nhamFz^b(q05wfDq%AL}7D>fN=>t1&`|-0IG);_B(DqNEvyfY5|1(
zc$%47P(@vXo}H^XASiPD=@Al;51_zU){iKM8%x&i@y7-k#HZCXy{lV!LX5%H^0v<g
znz1ByJv}*Fbm)!ij+~u7mt#wh*m5St?ZrVbk$7qTa=H&+t14k2pAl`57)2tea^h3J
z?RvU4@it0h9T2ks7p&_J!tkJmYi3tGueVM`gu;N+jPJ;$CH4Z%(w;L320TuL4~t9g
z!j@_Owiu9M5Ye7q@h#(glW}*9BbAwM-?rD2Cbaw8zFoN858qyaM)djpCA~zvHt1Gk
zeY@wt5Nph`&Li?qWn=)OQ&Ti&PG6+Nz~X>$R!fTkq~$PenN|V6R^8G`y9!NS6^HR#
zG|Ih16g|rg$Lq)Cp|n>T0$kx|x1NvMQbURDD#&+wA17~+Q?*ThAD=(Sqx}3O5pG5}
zdz@GD;QlAYxr0kl(>z+$1dm;@2AHF_N@mR)5h`{$3%Z4UX-G(-ND{AP+tiXb5BY4%
zi_T*aSRc1HAL*N`4ARxRu#64`aO|(ytBPV+*x>B{$JjfzSK4js+Hq2`ZC7mDX2rH`
z+jc6pZKq<}wko!hJ?1*r-tW8ShxN?AFphEe-g;|SJI`B;Ixz0lh^!7lPpcp9@TTv(
za1_uhJRQT<aU|zT_FIFA8kh`d%b@I~doVDgyyv7#>E5#=IaR<hNqk8sM7d5?q_4o}
zY*I{1hNb)XGf6)@4DE(Zu-TEavE@B&-B-#So>WjS@L-K{D?5Z=fB0Erqg<=sA*UhG
zW%J6(w`qvz8&dZKNj`QAss<3VNU0<w#|;v4u}-PMZ-)@13Fc7j<D=}qU9|(%KnJ=%
z!GVWFDeqc1wAmK#$*rU@ess5F`5Yh*%VUx~wjz%hdGKb>faN)G)O?Er9XH%g6&lzR
zpx1?SHo_gmm0<5}FP5#==4p_ymDoUwM_M9zTnSyJv7=U}#IzJGPflHIg>{Z?)M5y2
zrhn8+ux%*y@Njc`-QHb%z|4QrtYC3HclHyqC9SBmgM%?7u5xVeLBJ@ad2(EAl}Z*d
zTc4eI8KPq62#wd0!Zmr>8rU%;-UXGPLN85$zF65|X8ZHc%AYY|j@(A{=XBwxb7RMX
zETc72q3u)!aP)_8DQ3vo4!7RdBluZW5cd-W93`;FnAwBCTW+M9*wV|%KfiyD`gph)
zM^62`=5%q4ZaJbGvRFj>LvZ_VQ%YlVvikzS1Yr{pJmUTjCkX#i+Wfb$)X2cv+R(tr
z>Yv`iG5_CcLw8SnI8b{90PUF|5v!X(De~u$PJYxK?%dR^`-A`yu-UNM2@_1}h9D7j
z`TNzh$8Pvb;csv~LOFnRECcZki<LPuGSNA-Qk-J@v&dnhn#HnP4?4$$nht*t+8##g
zC){k0CUswSuzfUN3SAzH=I9{K8b>a_Ov&^8To&Vt1{(2wL~swCiGj`XkRC;MUv;(W
z4{rp)N-m(Ze%@w5G<eOl$79j+^V;s6wEH1vw&<|+x$`5@&%UYS{TYbWk-ZOFwhlc2
zmg<^frz7u>w(UWqU)E*02hqT!8V=_XX-_tc38ec?K2m=i&z?jOGr~n$-^LmKmh?EW
zKn>%=h_Eyg&e|iitlg;T^cS5$+BnFt4~W*N&UqRPOA~OQ3>PF<X%tcFI}CnmINHk(
z9dkq!0Wb+v@crP%PRtpiBT+-;FUpNJ_bdvld2X=aIj-F!liy265=~7C=8$(0=qVFV
z`qDq^Qva-Nq*y`PQP(oL6-O>G5rjRbHVo~4pi$M8ESZ(bN6Ww3qJ0CGkieh+q-EhU
zYx@bT9O9yW55IYZvmRT>4VN@?;P8+>%KH2}C`IN~)xvHxAz|49<&>m<8a&lYntas_
zA|+*_$OqY=v?02Mgz)2hJ`ZEDW5#69I_SHKKj+jhya)Ev**p=RMrq6v0~3KiH^s4;
z|A4RTK7>l&awOcQ!Y5UKe>xMSrd+H-LN}dk8HT7De3A6w2Gi?xHKP(1QZAk(;r-g4
z?d{yagCBPq#5haia1RP3s-E_Nm@($B5$l)%Bm_N+7xNb3iC5^=L+mb$j{dYR1n7tI
zs1!w!B(-3zRs3v!$F23qa|;#F(%-kh><}THcvZ`%pD+Mby^r%5Emq=^jUIO46x@VK
zPrvPme&N^8W<Y^9A`cYaCcHwRtX3|8rf3vh+vJvFiD#H586#1<Q#K)AX84Pcn0LUQ
zY9pDXHbJ*EXh88>gJc`m6yAh@Id-7-YR6pA>4xF62i7!c?hpn3PaKy_fi`b9V+)E!
zh$8i*yyAVnen#1%wDFkjOdcM*ijSJ?d>XZpjdfWxH-#+iIA};M+0ZhN8i#-+zY0%O
z#5PX1iX`r)(1{7TUUvx5cAN9l3p{1_&*qdWOI4WpAAu_G1Az|jm;waHw+YHHJ6**5
zo?*&kX3^NNafjGTQg2QEZW>FcMY_GiqmiaR8nVxWYd}L9&lsSES=CV=Dwp``yx)Ig
zeg$ZCw#Sbvur4<4XM#9TDVAsFdgdU6F<{P=M#sFr@DSmz*D@`dI+!g~(HUjp+9hg~
zcqrwLIv0&W#GbdgExd=Voi6Oa3|~37vs)%{x$m6o=yhM~e5048?^j0XqEZ5RD*gG>
z`3nbi1*p?a3<BMBUaAr9c})F>w@E&SPeR_sW<nT^tzZ=Tjtb<?-ewr&rA1pv;-2V)
zq4X}$9~_-gCYgLf<RKWMO#Fax@gu<-06w3CBQmetapqUodSL18sV&EEgnZ4$(OyEs
zssXtN!M^p`0kci{Z0bvbtt;Es^Ivhpu>huM)0wJ=vr?Lw0R+_b>i7Q)ZydQwxPSq+
zFeU(782{nS;J*i}|7F$rXQOSl`i3nDJ2C*5fw+w^aXOmwqv4M&IRvhFCZ;0Iz`Qk+
zJV<fLVwMFfTB1$Nm#;k98phZq;VPt-QG@!5a;en)!1l4whk|)ZZ&I9FuWWGoOzFh?
z5P@{<fTIq!&Ym#$ho(tG`$kVk($1)mibuH#PnxqWn`t#j>@SU)#kZ)<#U(CGt!DC*
zTzoV6`!GN+kf1~}&86lDvU4Tn`H0nbc!;(}w`%NY!&j$-+M^j>kJ&>1^X~62V-co1
zXl&-!5jXblL^U<N+k~+(zuZ*$UOB!!{clkM@xp6Sr5o2OiYGBYEtksIZ|BQ*HY<MF
z<L4O!`KYk91HGklM^cAV6UvN=2iuGc<2F@6Z2D7?lRJe|sfv6iZ2Ii4#$`SMYnR~o
zl`B#1i2jN3CzByT50AwF+<2VxRmjMN8oqNEOqg5l-yTP3GCaOna?Gl3vDh8e-P0pF
zv!Fv*eParp;{(0jqQiUob&Nlnoe*i`E>sKkSl;s8Mu|MjpWYKeNa!8A8PS+#y9g%2
zVps(6e~FH@1SVJdvNbI5*FH}J2HT1%?Jb=t<psw&mqFSVcXEr{zqDFD4<P#oXw6<n
z5Wv7cHf+wb$-SICZ?6h`aDv1W4+~}s^m>ARN+&X;Ak;5P#D+)-T(bo!P95W$MUC-b
zzrWn$j%4BRqle!$jm~4V(A^(8kki}J34kOA_K*afO4PUqGo-o!x>Clw#U7-3zceVq
zd@cncIXlH*4`3ce8|AXXuZqBb^h$Y7+Lk(jMjbiOloCL(24h}kxuosH+KTF>+fvNT
zG@cw?yTwJ3J?=YlWq!WhMi4Wp<XDb<I{t;9rAsXQc@K4F6|4^0)2gkaWkRJ<P_LD~
zpHi2pwgsFQ0ui5kDJ5iF*PK5Ld0sYe-i>D@U6xW^xKYMunTDS>F3#SUiDPSbz~a@=
zqQan3J+kFZXbg3$d<m6NfiXwMg_~X6%7)3t{&&=%G#1V#t0iESqw`!;Kmb!852B@d
zw&@3hMiC`^h-^6SK_5GzWD9mAC!=J@{<dAGw8$^SG=I%hUXA{+&9dwO6Vl3`88cvy
zo(O+r*9w^H-=fa4?zE4_k7QMSMBu{;2C?dg|G=XBplYFWu5z-Ve2e*Y-n<Rj-0$Dr
z8?`Uehbm}>;i&-7h7<?}_3B2`su)_$L;O{8k>pXN+-!#cXC}n3KrGhaJes8@(0ans
zH&E?v-NtbY^E7IuXPrY*tQmN5wXcXCB*L?Y>`6|wz+AroHk4>dl9{H8MB0b8@*&Ol
zb^TKYrvgPx#L9z(t?4Vv-hd?*BY`bZfFrSnQ_toS+nB&<uU?nQNzt_<T_ZCVlZCRG
zAVgOkS#}u*7MXYLTN4<mon2BEF6TyRdc`$z9gfDzKK2J0!hWH^g9csn(gf5Z*|xNT
zgJdDgT?JuY%66EB_&!^FQlYA>!2(;c71$@4(UGlX1KW87?1QUNmRMezBYkWdnYEWg
z(q}}IWhhu3_F4d~TkfOQ936CYk7d&(z;>Kc7!hN$`z)Y3v_(f3l7rL}b0fQ?0AxgM
zLqTDtdj?E7CFJqFQ@KM~#@W>jgq7}XyCZ7?cfzlq=Ec7tBe~T~AIQ+B<aC^1*7W9`
zw&o4NvP{IHl6GuJf?F(hbA!n$4L|ncP9G6YXO%Y&v%gU_eSfM5E8K4JCb>dWsT4DR
z?IrNHl=*3KHPZ}^JF{YuqHoEpTQ-umY~|UH=3&9r4FL}a`A?@G?t$=Q(ECJE(H@~D
z4z^^D?3}I)ITK(r2wmT#RTTGy(PgpAMo)Uq3LJCnECDx$5zT$&Wc>O?cNz0d)G>UG
zbm3R~m>!BHhxs>R!O@+<1{0<xN&&czp28NuYPC0St13ZHo2zRByVHm-X>3$la|)Kv
z@oGixYskJbfvi^UQp!74f8<j>m0lAL`(naSk+9t%9?kS{+mckVow9qN6qa@ePhzW4
z2=&^L-)+os@V^54*Z!hlF{9Uk_g1#~Wietc85ftASg1NrXim1QDh7eX0@CrsE>G^Z
zYz4#>+Z<EU;kzEYEKc-K<De@LT*z=_57*hl5|9`-zALvo-b@K@3$HRj=Bp2qM&#d)
z=VM<Gq&UB~G3wqs$!w@UH`ut>JY-_ro*PT$XAt<m8xZ%mui~byqX>6)HoLx$Kc_nV
z?&y~4zLFZV3Ol(_mp!VYC})^?Z|*dh3+L1ZehR1}aahtETv^-RpxH+ZM3K4!OC{!7
zPfbcMiHU*DG{*>ToYqD=h+!ur6Dza`NOL7Z*cPhf>6RKa@I#|K|5|48Y0KrAreMnU
z(Bdu|Phc`rWd%)N<sftuh4T8oK0hDWW03pCVFDy-@piOJIfg}7Q(AwWx!?`{`<OmO
zjtci37zii>Fsf(x-(MpCiu?kWt8D-Zc^7+oyMNxSPEqay&}U$~&#A+&5@DkjY**p6
za0o}EY5mi{T)7BK1rpXIGHJ1pS=s&c)*YB(%@MfO<I4ad1c}!ghhjuGY!eUA%GbDG
z;RT~l;zhiCN_bC1Y%%v>D7(z-$kJsdgb#=c9;BE+7>S0hns$*UL||Qvsw(v&Z7y)@
zh!sEmB64n1>cQyIu^mvinQT9fgkD)`(O(@K0eFMjQJk3H^(<1z5az4^p<9=K<Tl9)
zG-jX!x}iSkjNBl<95PYMI+%O7s$$qtcX=kX75Od=mOz8sk&dHcD!|L+4bFeE=A+qF
z6SG#>3T*p_=cBgD&3?-SD{wwpA1|PZOvaPyM+So6#Lj9to_Zw;yD-Z(9`8bsB*WP}
z)~pG8tTa9qn4<#mN_oss?8VV*WU7zb-B$+PJnFGVJvwpckzfp8v{@QpE2D8DZKuaB
zM7{0!a7q!StGDNsWA6yXdhI=9M~M9}#;sQYX_Ca^L>T10BCtyuD&9!oyOcfyYsfCl
zL=@c(|1Yz!OHZI8Mi;if+5wpU3GoKUW2i<~o^M^K&Ou>+Xr_T6Cw@(WDp6CY^9+wY
zEUc8KJ!B$mDy*Gcpc`J5*?4M{vq}-eU|>{ExfIH1rtpPc{5@erXHi7PjR%*_1{;=d
z$l&Y2Ll!fhH)+OS%jHK6QDpi5S=W)qS<dhPs2P3$QsjTgKl@J$I)KUphaJ%yP|%%4
z*-$!Wu>r4hfEcUT1XCvFE5{#7=3P<Z8U1x9^GK}K+tIj_<5~mOeCP`maWo5S>=f>%
zmmOYx*N(ghoe9kyjwTy(X4Ul7;XG3-Z+dCHa?re>xk=-}5G^4q1#ea?zj>i)(v5lu
zu&W?`97h#DJlwGM&6PnOevz+`a7mH$wUW}{D6PF+nSoqg$4R**DC#v|eo<LJsJQvq
zuUKm@qV)w2){X8#cJ*5O{HOta2SaxF295np1E4B1zxm|Eq5!o50DGsf9wiM=lsngX
z_;TDfQ`qlNzSKH$Wt(8~=UGTCk$OZLRB8TBxMrS*2I|CkxcdiU0S#*k6d7mW1J--u
zL;+}A-P*}n(+JFcS8|gUFtULelKdWXyCOIf!2)1J<Me<xVb#uvj#Rb54q43V3c{zi
zqJ8s=`bSDk2&^l;O)mYtoL_N4-XNh$n^H**Qq=LdTWi^nKet`wqFOS{osbNObTcYC
z469;GNfTAmWke+CmaG8xF^HR5ak;atvPBIKviDmS4dkZOAB>OC30}rEur)4)^!RRL
zs|eYm>wBVaElpu}Mr7^$w5H`I7Z|Sa=6b$SDU@T!TLF+)+zgvwjEpcTj2A@V5HUF+
z`a^WG)rnMf>sbFYs!=ekX@%eJ9gbA4;g<G`wiL|BQY$`e-NkZS1<JxtQMvSxW?>d?
zUFwq<mGlE^j*pL1m3nFmuO9~|UJt~|qUcR$M78d&l6#s3=8XzBLVRxu5iJSwhco4o
z)e7L^E^)L31(U~%+cqTg$8L=!yxtcq%plpN$G^ZmoiR4Bmdc0~Ps-H{QCIp!4S7TR
zwO-YVt#MlyQFYN$E^@V9dT<9`LWkC}z}9={(DD}(=pw?f)Ll9#*Fmk^uBz9K9t*2*
z`k4|7_YL)vYiD48Q)v$)ei176L?AShG|;ptDzDkkCX3M25lL7@pA_zSNUO=AZTx{i
zWUpiiy9l6rFbVEa-q<Xp$mZ0Ec-o?x)HTkQq!pfj!^H!&R@zUhpS=}1h{d-3Gxf%O
zjLVt&+S|n`lmuNvRUCphs(u3l*DC^g-^_~8&}Mv6x(Du+B6^>HAZAt#{>h*=YfGYp
zg(|At7xyT*Xgm9+{QxGex(u8LZZn7GQkDe}boDV&O-&nHDko{MQia^{QH9m4yY}S`
zA(oEqHgr?Y$DXjM#K##z()%)*7S|a<>Yr<x8AHO7Kn)O-=L8&$;lF<%#1mB^&vgHZ
zw-MEBy%RV=_7&Zf$+v3BBKP)N@LN)-V@ffWJYgDSk+T^C6_&m|9Jqm?qa=cFXl1C~
zV3{LuP!w{QZ}#9MPchW%1^DVJ6<XxP#`|M$I6%fsS=Kr{RN7EPF@I~9AV|Q_&atw5
z%w^`XQbsH_jh^{P!~W)%V#m)0E4o8wpDl~03LWe;hL8xkt?CBdPTqxZYgNZ<Lf9J<
zNW4u)C>_h{^SNzFIC*ks*)O#f)QS=3$D5r-UvndE#D)XJ0++U8g4QJ)>X`@$e#9I<
z?*Ia1{4`iNzZ+We7i;ylKJJhKg2$7bf#I{Txo%dLHgEOUO?94HVQptY;8=QNO3*Fm
z3Z)P9B3u90jXc$;yaV*!ydjLKK8!l2uc=?&6qfUer~{2~d+bsRT}2JSbuTVPvn`Rs
zK?JnLeddVfr<3c-TM9JVkhQ-!(Bn&z=G;@GJsOW?On_4anJSl6>>Vo_!d%;*i{CHb
z-t0LZGILvej9OP1k2~7M`JcIY^Y%+p%>KO)7z%I2`3+c_kVFRp;`-kUf&UxGF*C6>
zaWrr?`Tt>k|EVL{4G=rxup<M+j(sHpMD39u$lBNOt9+C#vnac(p~X#OX((knQWK`l
zn{@4|E~4M>yuyw<q-$ahf55{pbsR(Q?<ScCx<_3mS4D|My~pju0jIWXDf@lpT3UO8
zYfs{Dn&1?72C*~intk9>!0I*EnMnGp<|?J)S_R4L{fjFfo_uLi=f>-j_)}`FXvrN@
z2r_<?0riSBR}iEmUprfunei<pOiiQnMlD>9Z+CZRu3Sm<?X?Peu?fv<`?QIvjA!)s
zz#+1<YvzPHUHdrAHJ*#j=`(RQ*7-CyAXc3ATd`7Rm`6&aFK(3L>#kQb5Z?a}Pm0Dj
zD16C@TEQC3`3Gf#d?)b!9EhhSD}5PMi`x(+_uWj92|dWyYwd^u1+pxmP)p6oLS@+4
zC+u=}WP>ijS!?Kq$el#dnUKiNOT#2FWPCB5WtTB^>X<AXIvP$Z?B_^hrp4oS?}vLV
zrJiHutI+(wzT+wFE5B9%13|-nJJ@3aD3%X1XpbbR_0P64`E|<7U5-=5Te9<fXT%4z
z?Kv2!KPI`<1EQLQkXqx_Xyc`$?IAK_#3&Zk49FbOf(X^e1@RJOl4BIoA!jiJY*`NM
zIE7!nvc?dVT#O9b*wpCdOh2ZzBsvpTQHvvgMbaGilt5mQezR95>TA+fxR09IN<Uuk
z^m_~mtqGxO(R}KT(<B=28N%EWkwhRy?#ih3G@LB{zPq9sy#*CFS!W_CY*0W)8k7fT
zxDmB@?GPy@j4~<F_n)vmn2e9xS4a8<lzpkc0|9Zs+^D+D_8P7f;kco|0i%IUm``HH
zqPC~5u2PJ$oPSs4S>)Xx-h7})dZv~qJRmps$BjsmLZ3GeaXWy9cZJJytBj?ZftKj#
z(~!0@EkyTzbChWrcX`BpeEd-ey#)GRlc(GzLKa&ns%gAG-lwK}t+Kd#SELTk0sPsR
z8Vs^osh#R?dW+9d`5SpVZcS(%*W7RiRACA#<7Qx+=1GW{w-T+tXhI}SL4jyLkhLCg
zu(w%$H1Y|%!l8bX-djjCX@M-|R5LXZ*MJB83bwzD%i(4Jc~{e93I$rGtNjKBjNpKz
zCuo>k)T#=QR`LXyO0UfW<j}B-SPvC=qG2(D2JvnkOx0VQ_1Rx8l`&Ou;kpo@q|?9)
z5stANp<$E7`Nsg4yVu)IVPz1RLtC(A#_G#a$elcY<0H2taj1CjNPRExBs3wJ-=ZPG
zG8diQV1@=wg?&k-Nho;`dGR{w1_Yn9jDeVLbd_n#hUZ%pqJwTN{kQPG+3%FoBdOd~
zB0>}4r#4At$@68nQe#0vAP(WFnq{big1EKe1)37<tO0}L3MfDE)Zn>%iY6EbI!d_l
zBW)QIM~cfo(R|r2G@$I@kh~W<yJQW!rM)R*glfnNjFvefo~OTjo?3G&rk`G7JvR<4
z{6@*ErBH^GiGa5cVYw>vR7WGVDBwD3IQ-7eQgS3-&HbU-WO!tj5>MsKCVq)Zn1XGK
z5y_{DxDC=QMN+sHjh#LyLQwx<ua^XC8&up=Dq9?z&lq)r^866x5_^Q~`EfyDZZ_K`
z_=m)Cn<4~?-Sp9LtFa>4B%gde!9tW_-UQoeF-eFIJrPMOf12m%2O>VOExiOX3~v+k
zB7FoIr46zB?r1-^<vpEvf5W81xzdpNgk_it5{bYUPQ6fIFT3Fe!JY7)fOWa_^2Y*`
zw*VeY|E^58?gY&fE~vX}dhH%mWMbv;EV7P~Ydf*TyRN_B&LPu!^U9n+S+Kf#A5>i2
zdNJ=1p%Cly-?}5FYYt$1|A}0JB#7v$g2#@CQyKVI-TW|5%h{beR4YPpmf{r;D%w89
zB}5e{ttvus8oaQV*Ngz9WJJ}y9deeF*Sl-fCuVq#egA3!f4j<PrL)N4Fg^92!cMF?
z_`2bEouvTRGQ^*lqvuY-G3+ofE`zSHOsL$;5#?ItfdN4_qA&Ev2}pvA<gVQhyIXcQ
zv0l&?6T}A;gQSsVl!Z<ky!EW`io(M2Wo?+O-1C=jMGFq&7N*oBh5@Fg_<mSE9liPW
zuQ$#CFCG}31M27MC%gd^lQ!;08O4R^0y+;tn~;4P^s{&y+8W&>tV=u3o2<1FJ3RD<
zO1!r)U#5*~UA&(oI307oab7I82p<cl(mr!p+B4#fYcC6**5mT>m?M*Mz-v0d2s-6o
zC+|;v=WGXlb)XZwG9O*L6a@WLo8N`S-v-WJyw3)|JKZ0`oin+;8}DDrY?hIFpZ6@5
zUb<2+z&@Xq3;;^yXkp*?TVAA6x~Q5QL{t9_%a~VkEx6OjWR$z@4sM7gU2}2$>liwL
zEMzBrV_CJ7(H6o}K#Exk09bf{8!<B|%9oBNmC06ZaYK`>nd3TSn1nUnar40@H3w5q
zP3`as8Iq}C=?Haslw)&cRs245_&ES{jZF`o-+j{d7`(?h-bx4QCBXv}l~WIXx45yf
zadP5<{K}88f95gw?DhK1{PD!Bdrh|N5N~S~{(Unr{n}07_fW^<R}=mAIHsSMv*Yb?
zdvS&LiRPoiMMVWrd1}ZCAsnooglT<EoE|eX&YkZVg=^@3sP>CMfBb&?qlQzxV-6&o
zu_lyu=Dli<da|yz`4y?Sm7?=*)dLYb;_b}bZFCXJr}Xf(-HUsZ>C|8Vo~Z~^)b?EC
zrxB&SwdLoN{_#<ZB@EDVglLkb=4NMQ_3(0YevbJ-m)VX!hkU`Yj);?$(8?rx2V1%m
z0uK-rRkAwsyA~2}4k^Bv93StchAz_I;&*$au=Vr_4E6q<*AeND9@wmFCas$bp=>>@
z%Y;qN>nkw*okwDBpY0{Mg1`=RqJ_SH$g(9<Gu*o1fW{3<9{JH-sE~*Cyp>Xu3Z-jk
zW4ld25cCqZXZ2SBqtb}p3HJk&-1V{-OtfwH>)#fklg%Kq)dBNa9Kd|`KX|bI3p@AU
z)Y5+{fB<$gfCvcHXQg)bq9+&+WUOT&Y>SjR*|S6Dr!j*?W)DMuYQ3hGBN=C~-;R?>
zP{3@Q&!|j%?G^8HmQ$^d-tXjkz<c!}bw-R|JbLKXnN|0z1=*s*ah}t}Id@?%6Ew1+
zfrb9=;o~7%?_SAVWhvw)@frao;qXp@(>G^|;6QQ`)34T9X|ep!tt4^1-7vgY@XKFZ
z%F7pcOT}xLpY*F)5K-KL=l6{L{QKtCdn9-1kQ~n2&STHjdQKEUfqPdv58dr<0j3&n
ztX}MUm(l%u=V5>s$~1CexA&v-u^s`0_m7<F$)Xgl{8H9gli{3g75Fj~pwzakyT{la
z_!rWHeZ&?OKC}E1%FceOqk_6W-3NCnoY!x_K|kl|25&>d<Jpiz^B+QGuVbOqO;pD#
z?K}~JY7Ut1JZ%zTe9V@U)40CFu))F=fZ~Y6!ePc2mide{OVf%5L19q2Z60cziNJv<
zy#&62i2^Jws13StoQ2u+#BN?|+ZT&S+JMG1Z4r2znW#D{MIE>peQJ1E3H3zFn`GA5
z(!yKJgl@mlq3;S*@ki|wSuH}GTz(jO)A8uxkXl}M&elm80C2H^?Ay!slO9G6dim@*
z6*O(rx$aw4-|-RGNwhQ8{ZDK}^VL<*2`oAJLgKJ4L)>8zgDbPnBk+i?XdzwIxK%v}
ze;?`TlJN_ZwKJ`hA3<@)O^R!)kLe4_$V}P;$}YoKF(m48?Ftr8Wo#@9_6bMu$1QoV
z{UTHwUoDxm#G=-qMkZc~4K;|^P|M{X5jsd@6@d_cC3G=OF@Y;Lvll~EqjDEOv(yI}
zYuZMu^}Er44A^tVv{O|QPjX$&FQ?MySCq5AN;<gy@|F#Ti2_);<66d=Qw|C3AJu60
z8uCCu)enU!xQxpyp$%#R9_gE8PVRGa@V!9s!xHohDxi}erdZ5%xji)a)Mtb&1qK+7
z_Q8d93qjWrmQg3;HN_zuV|KLMWg&0uhn3IbDMO~;&vZm4N{6DqnKJn1P?I8<l~GNl
zop7_}WTXyKN`&o$-?)f2uTYdi-gfp0j!ee<dcE5E-pMD0$!r#M$x+dNr7L2~+hUIt
zPS8<a1XcriR+^i_@tSU_>$<RAr%tGn-N~+--o!GaY;B1N!ZqlIhM=2r(`Y#k@0LYu
zu*<e_Nfya~20U9Oe5`d}7ly}`+-4bwA3VxgweQqeAumYwVmP7wt&&O_KPbB|_8sNP
z;pd|#=l9iMVq;sHu8_TY9m&kxIFDm*-2wM^@>U~+^lKug308zV(V`hd3f7zjAHiUP
zWhKfDWRx`(y|1==!iqdrY_!~N4!G7=|FX99e!Kv&srv~N#THbu+7nU5Q=g70laKrW
z&qWi#CY~99Yq6{w?2?g(x1318BujB%jxO#cm{m@zRIGlbT78}e1flG%km{w^E<dp6
z+KJbcs{(4oK5#r;cWD&=-jMga>!alL#Qr}UZm`n5t51N2TOuM55dDAjm}As)vM@8S
z{^uR|X0>ZOY)-__tKR<o9sy~|B=V)7HpC9bUZUc_f|{&c*|QB+e^!P%&AfzX&%U0$
zjObwk$ZTpmBqXE#qEEU#n2l;0SWGW0iTYoXpEn3VhKCQfi=5s)41;;IF*y;E+ASP2
zc(c}a*d>eVWm|gJ<oWrK$do9xGB$G7wA}wLez~Aket?f4vwNf#uScdEDTc7E1RBX#
z6zkB)j{SM5;m3^aGy=5bltd-*VZPX=f|<xU`|PY7Vv0#s?xkKH4HNmJE`*cB%L74`
zG`=R?AvPu1<$^7{))<@ZAjD<ve8{PS6wj2JpjcrweHKIRE=T~OJQbaf^lt)_gW2`C
zc%}T9>!aiFhyzr#ijE({*@|xN8+Z?u3zgfu`H=`Nv-a!FFp9-`Elc#d#Tnms=#(|>
zIDPr&=)FUI3g`B+%!jn9X1K6ZmxjzC@+;QAlTL1Oks-7i6fA{<e4mH)1+5Gkehnd8
zuO^Q;($ytsPv2P(lYEI*xoujg6g~v22ya#4?V6~(zJcjRSNA}G;L(Mkts7<Tv#5C_
z+RM<A!6GNAqU3?F!x>Nynu*}W#{XDPbyr$N|64-=Hhgd3IxQ1%ce3&>a`Cfcj)&?=
z?7loHMMl-GPl+`|lXO~Ta3S~50RA{7MbX@(B7<j0ygN}$K?DdpF{yqhezx9{jG!eF
zlwqd^5^=R8j~1*e{fLTq2DZKbh)H@7`3gwb{Dmpn*|H0Q>ZU;nu`9Np=os^5QDCwg
z5nCI(Mrp!KGyG+KjA62&Xg4TRG=qY%P=!v>=`fla>4%X}x2=uW=`NeV`{^{$`J4md
z57a@ebkei&N^SMpP7N0=keXjVG<8EQr<_1*iB^7Rop5E5tB>&z&7)s=u#T*z;iOf!
znfxYpY!u;<;Myl<JncQWG{9h8RBwZOj=M3{789B_C`YClKvL>PPmo<^xO+_AvZjir
z0pr+}CbpwvYvo@nX!Z3E_QK%ZD=-<wR}XPfRnI-<wpHpz<~tt>br$D<eyl$M`q>cs
zg05zwIT?%&-RJ5$)(_2%mlm{Fw1C%xAeQ97@D}Vhpm;-v3H~WJtKTMXDFF-oQ$h83
zy_JN#309jJS4fMK1QewG1JK@UCrmEV@IgSOL;Xo%+c5BO+)g}RW;s?YBNPKDO8i=-
z3?PZZ-Hhx9Uv!P1xTKess3WNIgGnW7R!5#i5OivkE<=EnK9&??m8~B7yb|hUN?|xt
z%C^<D@3>shZxNLo_70ve7ycTF9CD_>kJDBtW#jTHDYDI)HcgE&^_X`6?`EYIHa6a0
zzU;ej`aa%sE(xl7cX9A;IBTo~>YPq|5PHnBs^E=Xn)Q|L8NX=Rvtz|<$m;rbV6|@T
zITD{*C)xoofQ@#$qe_wWBA|qiH?PYEMJX(li0X18q0=U-8{sTl64=sN%IcClMScr(
zW9f9!i3w;&1GOA?0C7W)?-;qmxu2r?FOF_#&gL5cgZL&?*z>yt+Yb;LhTQ)NIUSrA
z`5AeV1+7jekzr!2M*L9_FW7HA;c?UcX|P%t$@lfQ6>0?qPeczd%dV&MauNjizWFyc
zSaY6qSMhD5&r(O&+O^*e_1AOFFV})6b>YsrualTo)wQfG=2my6+y&4_KOmLCzjtjo
zJ+0h&-XA$$%4vm;>Kh)sae*6gg?!(OS3X4?zq%ot{8u7#x#}}`3TiIAz0XWd^JV-k
zah4nqZ(Qwo^sB_>N8T!jU6P)+6C0fjD0+ZWs^+NfD;GKN@X1tJ^fWJEL){9mYOn1S
zq35lukGu_D*CrOCFkbH0yQLsruqAiUL%BXtVv<@FAC+P#V2H5ifCt3;mprNZc(L}Z
zC<+p(El*rWg!a?iv&pT7hBXU^UUf1K%IjQXkk<Tz17FOLHGbj~CnR*`F&CA?&P{n=
zj7k_3)(KeT$l08}!|v7<cyUX2+ftmy1vOlfWa~pmgtQgjD}k4~HG!MJSTQ?!I5ucj
zYYw%Zs#cs(d`(IQ6gJmQ1aFV4DcY{}{?F@0MT>m^4ZsN+1`G}Vp*&U=RaTaimjjf?
z&Wr%<*FTlVF3PfT0ANt}yIOP$M%gNuW^<S;Mubq4$T%{pS*2rSS3OZpAl{ms#@A=8
za2{@|L~Pcp=k=5fKF-t+k1DVO6!obb5+O=iXlzC7(#n2l_MfC-UVm`fq<}nc|7EM#
zA0kV!RXxiXPDXqoRnchG{u5*y+|UAl3$}!+qr~}=_pv(;k$VXxRb3UNs?n|-D6GL4
z<T@q}X3LwV9~Y1>O1pS-60$>Fa8ILq5`L54-#1I$lr7@-B^_MNmVLGY`ZwM4%OGdg
z3Cv;Li!?WI8zk^b+l9#;Vqv$RFzPPN8obwROj^XwfuX-yOe5X7tc6xu1h|AFntLL3
ztb^5X(I=d}#m-Xj@JXcICPUK@vZn3Xdr<2qSnKG-0N>0P>dMV+fkeTQa!;3`bRm@K
z57{4*T^D^Tdk_0s!z}WRQ?zi9rUuk-@bM0@&UJ!6=>qk#BpH4Tr*YjocaQCtn#hf6
zvx}3sr3BF*jJ0}s`-I`LW}~c#eWMizX`BOODL{=Kp_3Hqqrqs$xw{g431qgohAoj%
z3yafef0JM!w%u1Cx8XqjV{8p(V)IyPvd{)q=3&Z2S6YVm#P);?OUaar{euQW--vx;
zdW6PMPt`^k(hc05NZs!Zbc#uH#Hq0b?HW5+)gu8Ies7!XTy*$k&I{KgZ6m+ny*+!V
zHv-C8Q;ZzPeqC{ecAu@ON^3lif7=|Tsg<^S0Q~u=0D4xo|ERXnGjg`JGy5;{hMuW~
z^*>ViV}AA7{+CihEqWeCBvw+hJd7<OxGaTOQDC(^BdJ*<?v`z$rnwV-@0!~xQ(&HL
z9Qa2%`@!>e*R6^T^l%N;;Sl)b2tV@hymP92gI>FEE{6J@*sHd?$#Q$*^hxnA%s$3b
z6{P8OrY<0OlqTI&CHuH|jT)UPTFZLSe&IjD7E_`A`Io;%J=yhW7A(dwz2h~@N(9<i
zSS?Q$!}%OsWXZ~TyMoU0M*fuF$Pd)|J$Hx131G_7hz`+aEpMu^7|7piCCaHTn6T+g
z?i{V@L-nDHJ8GSkeAMz=GmL?FUUCI_hs?^`R2LvWN)(cCAo1<+lcRU=MC7r=&`Fq?
z8-+AccGYvQs+uFAACe@1pF!>Ms6j`)kbS$|OvjEo*t13wf(8mRN+TJ#a*mlsW%5j+
zSCX!@;dx{0qA+h*TCmQ>!9Cv+c}LOYXPcpMQL$-)1;Do`{hSR=&5L)td=cR((tYOP
z(ljIVf$S0AWgVlb)88J9$Es7Orn@n5Gmpx12)IlD2n2w{Yls|DQ?tN_OUUfu%xNPS
zgjiDBRFvilEv)EZ5BD<D3KT_H5QQ(tUTjfjw_<AB5LlO&o`Sc6NXLizVpI~hYL0K5
zcsk)~y6E+?p1zLBe~a#@!(k9kq%Jo4Btx!11x%;JD0R9Xsf%2W-uwF&^M;n28U*ed
z=W#9;ra7^DL!$YKAV+lEhY=hTJd{X+9B6dtTf0iK<L@KaV|Wp<zLKalm?!1JU^~qW
z4dB1Vb@3wP(xkdoo=rVR*GH7Qsn$><5X{i?ffirBlBO<ylxPJw98ja6##*pf`n%K>
zD6Eg9-pD|Eq8R`?o2-I6@(a3<VFvTdd+v@gK(sN-T8Tn2k;P__3~Vs}p$KS3AVM-#
zrXFKGa;ElKlDjf{Kmq%0eZ@<`K;hnPB)%57=A1aWV4TZthAmwPy&jnIEXx3A?z5Ss
zk@DR9&V+5#y3yv>I6Pb<t}|1%f~4kKSThhSa<KMqIBefEp{pan;VuLi2vPm--x%Ov
z|4(}#HY)$m<>-vi2&pF5k&j?wNhlk$<ZlI;+DPZcNO@-LkS`fmwEw#E9Gi&Cc_r-s
z;{E~PHS`qnUD^;0mO`62z(sA?DHF{*_uOKh&Ul%?b%DQuBQM`O%b3j$1%<%oKdB2S
za+|c2MsH#Vd2sBN#6=zXa7l;w>m`r5=n!tM@?u{<rhg?`3W<+{xvO~nG4E9zrpzf?
zV9BP%K(&YsBakQSky+?my6}}9!GMJjHr?I3m&Hkc@Z$d^p-ttz#e4MQXhY^f&{Xpk
zI_j`sj7TAe^=;JOq&mOp3S5?&rH^9YORY4MK!-S4F`AQRE`KbcVub}#>#4I?20L>A
zkH~<ifkc~vfm*K+3kND(@)I{%3EDd#L91Mb0?)}Z0wMH=LSyjmG!<@<-5ya|Xz86^
zj2zOuU<g&ov|Yy9AWSB?$IZLF5Jr<+u(_w}Xtl(pL^}yqCG{UR<zZ?^$b@H4kRVtm
zNy0oKni(wZ3kqm631#uTF*i5EYezQ_BmWw6V?m7Ii!ojvr?nF2a4>HLO=gXfS#4rt
ztd1HjB1(N1qPKO3o)^wHZze+s)FQ*l86*XAnD`Qoy(GG)-!L4V2ix-M?UNB>0x9)Y
z$R{oIo(Kuliunym`4z$j2;|TLhv4rA(cn*`1O7sTLWK`|q{eLm7GfAx`m~q@SZjve
zlD&LYy)?b_;q9;-GP*e_N1hpMT5C3SQ(wgm_&JErT`#B6i+L#?1$v8{a>F^srswvi
z{T#4@nG#Vb?CioV^lK1!zccD-E)4<rmbdGc`PwgBA|&Y``?a}n<5ej&bE#vpUwys0
zg-92c1lR<PM<Saa3s(J=_8J5bG%nmVC|>KLW0|W`a+Wzef2ZtOb@;2$Z&ofp0?gXU
zi{>qD5GJ<`07*!*a;paiPMe&SE6^=+Y0j6RFGXOto0+M@igp=YhpA}k@=+v$fRaT1
zA@n)UJCO3xUfSeH&1>hpSl-_~knW$@vnw94>a)_48dw2c-jF5AZP}&LM8{o;*5!&;
z&5gweZRYzM+lkNpY4S2|LJQ};u$h$4re;x4UY19;9^Y*lpRX>ogV|dI+3Tvn+d4Wr
z-9BzEpZMu>iOUg79d2w=?pk5vT=MVYFrE7__^J{;Ua`MUs7evAHS*X*-yL0{IyeJ?
zA$OW0?97w)=9cS{MqZpzP>^I55()jkPufnN<F#8itjN~<=@D##=7>dx8vo32_L{vH
zDomA<6Hl4BEr@c3upQf6LRI9UIZ{;?8aq5%_^SXCW(GWbxbTwiK5|tXv6<Wlsp3i@
z**SF`9(aTQ=7_Z$gZ|9~I7s>cm-Rp4`2OY0v37AX|G&q{KjQdeRAlW?82_tS+)d1@
zvxwRSvMEL+4oA(X!1>`BiF-|Ibu%(fAURNLcCkeo0<s@3(lT;yy6ttK&DvskQ6Z+A
zJur28A6(y%MLQBzJJB53qwD#gt9bw!|Kzt7l(ws|K?}miGH(DLmSi-3_hss<B_}<+
z+s-011id%UX5OVH{D%6-if2<@wL8<+ZHuEDe!~D{G6fNM)$8Sa#!rtc^~UgX#BE_?
z$l3S4)zr%ek!K#7qs^Rfae7!*w%6S}0R*i2BBQ&PG|vj^Nnki32b7veARc?~(`0r<
z6y^;~ft;b2effg5s`?#=;B&ud#ha1HwA4yqKn=Q5utp)nf7<?0tDL(W6{-?75=gsT
z+~rMRrMR}<uwF9zPz(pvk+$4-il8VKTV|2kdG<bh<gXI)8}tNh!^0iq)7!6u(cC*T
zV<XV2cn)G+>blTTvSeO+x2BoAt=s09iUR#*WX-;HjchAR?tBp5of7SBF^XA?y0QrV
zKDfLhj<k5He*Hg2bs3O9%MN%iELqx$@1s^~`*yDsW77X}ASHAfH%=($?&S%tRJ5Qy
z=|0xJM-R?#4o26l3kN11cKAWH<<VhZwTUHGJPsvXPfA;*>(Gk&?1M77jNzd6F<C5P
z{lG1|0X~CYe-n7=k?t4Gt60~@X%|fzm#*B_$Td;vC>r7?CmPWZ?p9pce~(}yuy$-^
z>1~TOafN;n`b8n`hEM9T%!Z8(@#fso;%b9I;i&errKPh7MOqtKOv&30EGC~QNKrB$
zPt5zYY8(3?!Ze$meJr<<X4%4Xd<;yi(Q*0|qFdz5`9?4B8$SiAnUROrGthSsf5z_m
zx`cqA787T~^!l&_-rm90_3Li`;scJ<Yw|3i=$HNZMJr2vA*SW|=wFh=13H}>`!M`1
zwh8v6Kzx;gNRDCacq51<d_j5}zH^Y=M;L!EoU!(Io=js<^m)|kVyQuBYoU2n^)1S=
z7<Un`w8Dw_;prNXG)X(b%erY~&IN0(oXzB<AldbZ5UID_Ln_nv#C#9J<G+a5->w{+
zm#(7E1d8gdSS@a$Is~G4O;R(bDd7R1|AxO-Az6UX2Yi@<01gZF|9;E=-^hoJo$)`G
z&)I7KPpD(5mk2H4Sp7CDEx$jii;xloHL7#{<F^i|ExMP9*WSzZdrY@9;aIa$u?UD4
z4}b5g=}UJ*2x6~YGL5bI=6CWB#>^P>pjSPZ+I~YTm?a`U&hO#p^Twnn92X1fn3}&z
z5JT)mlbSf9-X2XX?||QACX|`zRNUsSVR%4G>*s-wN67c~F<y<7)$+q;cGR)I@AyEg
zT;ksSL@Nb?T*w&(B@c#oiRWj=UuK{4lQ(rqlnEU+9GS4^`#s|iCJ&4>(x`sr)go9#
zI`dL8T9;L+Z;AEUcdZ@|@xFZ$n%?sWNwg-`9OE<n14KRArExA%<nLjKap{maQTnxy
zohQVJ?|Qe?7HLPS#c3YqsFM-@K@IfpN5Q+(@Ubx-P?_U+t+j?GudU>SyBHR$qrxCZ
z3YVX0#cyy3mvWqM-~`SJ8|ppsNuAaSG4I#nYx_O?*$D52LuqIB@J-JeW~l4jqk0dX
z-SEGq<>c-Xa4%g}XIZ!Q4`{JEW_gzeY)o_r^-kLFbT8P)XLp(rNXG_7lmv-eYw}_q
zM#*f~1Qd=N#P!tElg1VG?BSuC6J4<AxcA3Wq%rBF8%lV18bcekhc=H~wNj|;*(~oR
zyjCqI^U7$PD{5ptqeom2r|%Hs`(ifB4-E_bRMP6!D3Rw;=Ta4SfIxqw#b+sZYr%7O
zoT*T6*rcRcqHzh?xx@!pjkHRGC#^5XUPNNkc4L5_BS5Tu;^y)rjQACK(r)v6zr@Ri
zypR&0oe88o>K0zfc5enu--ihRNXwebm1zEo>)K4KqLW@u=~_V&LGt-8ga~u;^sUfG
z8Foz+9}Yuukwa`p(|?6TP_1&EGz=*OWgtc~uaKYcU4%)h^%#ApV|;(@%lv&Gb5EB?
zU$Ex;q#9Ib>`y~C)p3?kRVi0imvu;hh6D9PyADbk76&4VTvnBbRRgM27OS?IJ#*RZ
zQY{8^j9jl5AMU6IgQh+zkO(Wn+-lI1LBrtJ>mg~f;ga0GpW9wGnFEp&N$X%A6qqm3
zmsbg*Ts%^5ryRCyICEyw@ji<?32*a*6o<p*ok(KhzN}g+FfW~B2iGQsaE84{tAqrK
zRQds%(W15bSb2J>tlv|ApAj?No{)-S0&uJNSxTcqk6BvYM8=Sl)h{A8JSxir7;{ZO
z>#2_3n%61BMolhzQ9#2cvMI6e5-Vr*gOhgIwRPzRlnYx?16Sx3*{8%b{FYnr+&P$5
zath-HkUEUuOdd)u$#(_GNn0r@-J6!VyF%~a-C)yI3`$<WLaNs_hyD8r8noU=(aN&H
zW1UYU!kqi7F&mSlNqA7woLj_1_`mNYBmhejTvvFfVug38D<3b>Ynap2Z7IwaqH|lB
zC>A?=K=w}T1XFS|dL?G5G1uq>Z-sO3U%N9y)(r2_f+MKmX(uN<Zk&^X<-nzJ(8`dy
z8e&v4{t`J81DxZ;VK;~o_@oMwR2SP-*);Kw<7@g(TF|orBT22ZAw4dXo@$kKe?#Zp
z;_h^E-*ukfxX=p~fKif!J2G#gi&^k2z8p9Ju@VN(-1*2s%2ic;i8ZEvBn2LeU0*!v
zF&PU9pM$jB6SUzWrQ<kS5*N7=juRuDbD==ixvcNA7wV#LUPnR^Q}>6Y2goG5+4`2_
zoF-WNW6l}~xLWd3n+9+|$WbB(G2UHFU`}M*2llG1icoSsYh%&`4bOs2_Y&L@84D^j
z;gR;}N&!5otRiMwzC6sdOq*D7J2Ba5nK8j}GOPE14-DHqJ@(AW@8OTvoYgz|&9gO`
z^(dj@72nV-O)xPdSgIJEWFvM@&tY?<UX_CdN_n;so9zRijeR3c;g>lZ5+=^-B}WB(
zwtW2b{p*|uErxi^pHuJtpc`B$hj$H&5pH$GqCxqa%s}ps61Rm;-#ZJ2_HQn{uUiMY
z!9S{yr7M{Nb~Uwj9d<Q#z9!IoJzZ{30Q<HtT!(8JDw|lw9jLtWQOd?pv3rrzhi8DI
zz2ZPybtscgvFLS}*bU?b+QZT^QUs4Q5L&{jEOT(rEqPxx>Y0X9ToWajLSn2KXnOnw
z^5^6NwKzusQD&J13$F2j#xioexY51+3jSwXm607YC*&_P6rm%(&JKWDyZd-VeWv44
z#nWkNaBd^mW_|XaE8Gw0fA%8ZXK=1Q0i$|T0F3n?dXfKqi81OKxj4F-{BwD!y78}U
z`M=!Sn;08)#uFBS#P#4Dk@HXrWP*tsZ<2X#?Z_KCj)IOPm3li^iIwME(?Kyy_BCe5
zupWAU0fYLKT?<Gt1iuHY%&E|*?T_maw3<c<s(YPPYI8(7M++T}H8m6QK;Gt~dT~^m
zi%6UV2*#$o9Z;>5Vm7%V#9)nLWQyj74G}Z>!dqjubVi6?iIhVXs$ID>A&pGE13j;$
zA(C=!<?Rzih_nc=_B+iqNr}XsPcyp3p;9&8m&DjjQgsOJd0^}-nz;RbGSg=##>{=u
zdo@E^Kg0>?=Pd$Z0@^@6G9{zWV*Ybk$fQ?&9?Ptldze3Z=$lfwZqq^~aNa$_{vEq4
zK0`vCG*l8taP5rV%DHYE3_Ih<7u@3lW`FK+#e(Qlds>gHScp-?%0&Fx${B24A_X}o
z!<hS3^f^(9u=V>CG-Mc3#7OCO24Pnv|Lza%@$9W$ayNm@$P@~fYEWe{g#04*C-Pnf
zJ}ld|4Q6<FE_E<o#wt&xTotAsCp8UDKhn%^O~e6Qa!~qt%KozqLooY9?dbGflup2A
zNz3mW(<74STXwzs-y6>a(}u%ga3@qYIdd>^VJRV#ob9qAXL~yeHl>)#))i@{2ry;H
zYWc4x+_;;zuw6V*)?k*DUjEnh%F?uc+lcTzpET2}aa=t1kTuz^Jdi4AGpp9w*`)Y{
zBcU&PI)r&JmVBhzeav_<_+i5Q4^U#i?bPkByX`)&1{A`DGU2A$<Tz}&DXEn$af0e~
z>i)pAAHi#4<lwUsd)bJk;PI;;LZVAs3`c*Vhy_jd%Ru%NF@YE35&cfwDEzwy-)0jB
z?>1JW_`VQVR#rowDo)&7B?I1G<^>-_V{YJ44S!UWf$b<k^(*!!@&S68`gc{HKzJR(
zFKwLR(?AHgsFKt2L+Rq`q%rgZYSla-ca3AFKXwMR4m;*4UgB+NNFvgNi*?dL=<g8>
zm91mc*3eJ$GrY2b62^%7U(@$e)+#PXou+M?k<_6!TED2!u<({th^7(JVb|BY&u5)t
zN~BR&StkRvs<;_5mSud3<4%0K$Qc>Xd)4q&&E{~5Rd4)0q3_$EFQAF58<X_IaR*GY
z#!O7$AyI=LfC|H1<rQZ=M=jupR}+JO4;~T!pw&70dC!d}j#M~59f_kqhZENWk;j~a
zcnHNV{}bau-Ge2;d|M=quUsd4;p@YJE0CWcH13z(0q^4*bqOE$nqy2H)_m;Y*-Jo!
zN+Oiir)Jk}V)O*A+FB;}g*zHc%ylL%i8u$_NEZ}n=-5R}vRx(8r2J|56Gb@8D_jqF
zB9pw*<TZVPMIf9|3Imuy9GDV2|0BaU+Oq~~Aobs$eL87}Tg!3Xz6AK8jf_SEogDy;
z5k^}GtlqAcM1?4EG`FAI+!nSE&gAjI8H&+;A)~I*YeMJg;LZlaa2g41zTA6>PbbVK
zj(ko@&`$3Z*7=#E(V^qf?o-KqO~^Oj3w2&g7Um}cAH{CIBejja35rgsvAzM-M*|5m
zf=OT$N{|va$b54c4{jglkC}q~HBp>hNi|=5a}pBS-&#ahIf}QwqLD=B@#|Umf>xx3
z&$vD!2u-(-jR#EeO`CO>_`>o7g0=h^kLOzer2ec5)tSnzwnxjty6b9Sic|5YyHB@n
z?Z)lc*0QMwo^_28-en5)2cB>4uh`Fjf5xZDg~0)y@v4B=!hf(O_TQKaM-wN2tNfov
zJ|Vy6Y&SUmwZcQQj?pP$QreAfPEWfl9ka}_0#8%g#)HKoD%v$)B%n0+dTl2$<~mR6
z<`1Vp>gH<d+Ma8v#qd;~*u_ygboicJ&y#CsYqGj2SvvkXEV*+kQ2WDc(Qh@;@+aPp
zvp}kpT|uP|z%p$HiJ@<!y6#b97Nci*^sFq=S^x69d#(73*^(Kqg_Z5uSQDs048m=+
z?%vzYGs#_=g>QR?PPN&@5OXr5@GM*mbB++%wPKv!^V*ZwMXlQb0s`q$cmnzVq3j*I
zL*2S2;n=oqCp)%n+upIcW81cE+qP|M$4=gy?$KlPeSdgPzt>;5)?BORteRD${>|?w
zs3JLWRACw3F7?)J*~c>p2soIL+s{_D$s}0~wKM(E&5D}5`-8n<d<4h_lGV)CMY~Zc
zagT7^024ggM0iNyCtST{S(D~rl{D8DaLD-L*ARhF0;-|I9HBH=CGw#piyDMoF*#79
zuA>tzn)UN*TfdU9`ePq!rk{#|3y!bNyB`3}$JNBojj%Qki$hls5NJkgo8wox@k)qG
z>13O~?LSegXC#@P?Ae+(bH-hl+4vjrDLoa(ypNRD*!Wl{_<m`sjRx%W84~dAt@klF
z3Fh`o$|YHo(lHt3Eur9o?u4EiJZ0)JDx5<bQ(;H(%QK0FD}Sp7g&(7btWwxH%I)r6
z{k<OxUvl#9(wvPM``~mjq!F@cYPP1)-*Iu(X3NFepqOI=EK5j?>8&FW>oLgl-<+F^
zCznh&9s}a-5C3lB<>Hr}EkiT0!$lnKR-e0UUjaS3kC@Ktb1(TlF*LJ)k|t}xG?NlJ
zMb7}5|J1OJ{XM$kHv0AB&hbamRobzwvt47V`;XQy7mJH7r52T3wu9T3$Bf%o&v029
z#`b-Nc84chlyEYc(n_Hya?J%QFgHzs_717}6G{C=0RtnbGevYf1SePFfY#Uio)^PZ
z#I02@cu%>yv{@{-Uh_mIILOzSSm#qL6Sdz%QNCMs3Pj>DbHs&Z4Y1lnY9s_92B<Zp
zg|C+m?V}}&H|`tk{HWvLCCxHyD7a)$k>!G=pCfan)*F>Mn`zE11$3s17o+913uO-Z
zke7P@iEUDo+gDJ2{19MJ{-6C246N*Ieg<e(CPqJ|^M?OcdsRQ{7(Zg3uWLPnM_v$w
z*hbf?a#n$SO3NSh1)%rBS>R+f+r@?9O;s1dwbS>fsnv}ZkOZ<$p<;dZv-|O_6`dj~
zk^`b68gI$Mo-MH;TEy77!>e;qn?@Z;QU$Y;=o#HmKma`Ud^$NdLxuhpschdD)oYYJ
zr|eOBMngL{yhY5gbTDKIjSMm(194&@<i>rZ`Vc><^4)KfKrTyIa<v5)%#ZyICzmD+
zdWbweNK6v<(X%$mwna{kAfHb+05QSz4#Ey?%`c8CkmF)0VA7_%w#9u-K_`JpruAD5
zWRD%WvViH#VXD3Q&t?aoUY0BVSUG3Un29Q+JsurPQ*R%`mjF1;Ed8xwm09@TOMl?V
zRu$UZGt;!d`0?*P@re*)nCDA7V`Jd@n@a}jFI-xlx&V{3fEPKHJIEIg^xx9Ww6eD<
zRz_FHYO)Wh#X(Y@Te|ip#<a9o^u1FgG^aO!e=R|#8N{R=Mq`)y+iu68rQF{xIdEs-
z9Zjlc02Se8y0MS3PqAR=-IRs3$;Dua@GtX9fCN?%Y0l;pTTKY}FZ0KX&au$H#)f#e
zgG9NWOn>;=ILv}V5=uQ?YIw$tv%&x%JK!1{Mt!;GyU5}zcCs?QRnkDpIFAD(LTW)M
zX6h4zeFC?sZO(&vVOTqsC3y748&CP)?2@R%j}tNM&jz+}U^}5l5YXL^03!^eRLbPK
zHzD3(VbciUSUsPmq)M5k@*gh9B}k;~%lNsAn^d;st20;vx0^^z-zLr}3ltCnoS@+q
zNgLVCCKz$>18Sq~+hh~Q1cGW4UTi^eoUVV@`tK4OVZ+%p1%VK2iGwns#N(Z3{@V8s
z=EeMtIJ}kaWCYKlfh;^iC0E<GC@86MrkJDvI|NLV^hkTNPoacuixog>Qaf!I2hm=1
z!5yA!irwt`Sdcf$PqlWiSW2X0vN0Z-!paD2F4Sl^p|kh*ZiVrE8heT|LTRzZ9FeRM
z^-}l2-EP}tw)wZ~WCDt`NL%BoJ%44dTC`41G%R8U^B#7pJbDN#0{uk)#!v$W4z^RT
zt)iMtMrGKZ!X8v!SZQg>+e=_;cw%&HD+2D#^j7EUm$EQ-Z6<JdvK$Q!)o~?qK*b4Q
zXk5T1LKqB5;9iDc3zRP_aBVZgZ=hv=49>|z+9~2W4H;vcn89ipvIDXi{rJ$SH?&o3
zeW%^+Fp^vSMvOzCOjDIkUr|M90cwb7)d8f^MTafZ0U?qVV|dyqU!GDK@Pi0tIzo1(
z#UPY5+$osEaOTrG=0Gx13}6aOsm3CAXlcE6N_mYauV`&Q>zm4H%RgTeg!F(W0|Lsh
zqi|Fzn?N_yI@)kkqglPhJhdR17u7g5M_8tiV6V#u@JSNR4x&M{24^g$SPsDTbU@{o
z8j<-zqdep6I4U<34Mz|zA4k@w=bW{!z5HGK`P5^bxkkYvw<HxrL`j#oGL}y|Z|yB$
z1g#IA7GQU55Pgr^yS-+;$?bpSJP=*4C51mK#MbD@*Gh=N1lX}D(nF&dqOEm1y)0;b
z&+<O!9SsZHBWL7A!~t3$6vmBxk*oxCx(OFLCkbQkRPD1K=1}2b9|-(~9X)~2fyMS&
z+%$}Vo?*><PlE|TyZu^9kExC#Kfb`ba=%->&s9>gPmy25Z;1zEc>ZMWkK7~oICll>
z8G0Fx$28K3$h}=-=Y4mRPMJ)exB#lH?r4k9q61f(rM7k5NWnEJPX^#z3=wfby1>Lj
zk!;cx9cl#zlU|(1CYt{BpIAVs@PGT-w+AV@Z#wolVz?aJt`j5%DcxRmA-rd|9|71^
zUJ`wupC1y-COP+wgEG*1?BYebpSxS|lH`LY&#`09u8-iX2gn4xJ>`aIU1nwE!g;a)
zi7?CVJNhtT&xtO<-`4kSjd1T4bP0&JP{XmEsbjP<(;9{Ti9kYk5Kxm${w-6Oi@?Rt
z%6~1mXZQl`RVU2Vfh9AC6uW21`Np6X9WpWJDHxoc=Q^p>IQ1%U&SUP<obHV`MLs|+
zSbW~RC8V|wugJ%7iqEADT%#wD?#aJmpGkimqXM;{A&XW}GqGgOt2gy0h{*kt#kKnj
zG3w09&0P$VvatFzpZ*K!7nT501SVmEquaOT=VtII`H8c3y0FoG1)~;fnx@5FEc0bB
zg?f8urjB<;44;=al0(_NH(9ljkX|N_kI4qJRNG)nUxoB%m<sMOnJVTTZ6%~*;*!&J
zmHVVA5fGg{P2Nm44HR@3S3a%R%Oo`K?`O)-VuuNYFVuimXSrUNDO;dyP2HdtRQ20b
z7&{@rCqd%v;1=JMZcS`c35?}fp4&xzTAAS#-x&n~bj>5oR4C9pK6y49SpMT$XPIdu
zBgN0-2d9>e$4~seH>wU^XU-Ddm_JsmVL|w{#IOH_e5HZ^v^)JEU%a0fgMU%d{vWB+
zKRyXg7S{hdCr|pxiu?h-UH8;rSEO{>92S0f?GgYh)R$OxS3lm@Q$GO)bwi*sP$VW|
zK0Ab@9E#;AQ+>WN)7;aY&+HE}dB28j91hn|X-amChU1NIQwJrO^l0&)Pw}$YcQM*4
zT<n^nmWr?&^6b_jF1%-X)zJ%EaOL^@1<XM35L?H0dy^<6$8h~ceg~=U3JvHc2w_h{
zHnp6PC4?NE)1{F|_Ic(hYM4T-wDX%(WzLe1+geCjHsN1h6D^ImU!!@|7W9BIt&h{c
z)g5ro<ANn{e)fEl<UG6?WDWA!9?Qsdmc8)Nv@2ZQu%}g>xMGK6xSS4+dKNH``%l!}
z`UNP_&2v{a!o9j!+wKk03SGRYLS-1C^%YMcqCM@0LIvidoD((ZkC9{W?+YSp|5b|y
zb6qEpdd%CEwIU5VJsJ3w7-+;0VC}41M5RP$G6+U5ewr7{J=7kyNC4PUz1-o)8#ti>
zG1XL*AETWtu61pP4SRoh_LW5Cqjaua4q95Z&3Ks>p+;4saJGVQDAfwr6p8V>;t}a#
zlH**?_sO*;!5-nDC`Z&vt$b0*%n#eLTv1a699z<Uio+TnzmuX}8BV4z>Yldw-mWRk
zLYBn&iUoxiH6IZ*=S6^Guj(yAJxb(FTKF=<#a#z+PWtJisy`~j?Oc-1vzBH6m%hkT
zzzN(=8fgP4EP!}CT)lp8)OrYQrTca5SS+S)hB$tAn{`SZ=}J1+?n@CRJ=~HzS`MxZ
zf&O<jtT()~WStQF$eT6yLR&Q3^9AV#o6aV<W{9nQ#mP;i7P2l@!1!3W!ZT3?huc&x
zaIXu*3sk6^R<RQ(&!U%@g$lLwgv4%uRz%bAk9U>-3*xqbS%@<%pJ@tj5wCyo)V&tU
z2!jp@wP^Y5!hs4#51o9+5vB#q>=tjqw5luo#Vg;p4MxUUK9gY%*Nc<8`{V7x(NYS-
zx$46<BFZM_Ctn&!aS<`8HHZ?W!4)!1<rvs8#<)&s;<lJ&i!$c&XA?yIwm)>wOEshy
zTQ~rolLWmJs3aE!?R+W`oQvQaSEAwG2gct9C8+C>3Vaj5wx5k>#cF<A+!B4+J&~gj
z1%v@&+T#Ydw87a*4IM21@xUS<$PFfQ5f3}D$)jo1rwd~T&aC|7wwT5>x${hk1+m1A
zfQN-svLYX9KEVIP*MlGp%e6n|CpZ7d$^K^o?4P3kCkOUthWKxw+FMb}HiH4>pU}f|
z-T3mL!i1;VqBsm8Y@`5)(?)KUXnP~MLD44z=I=kOd1o@~0YMyJ)2<v()+N}2HlQU_
zNOz}Zg5oMB&z{lGU)U=>dsv(Jxx0Ur-5K5h0%D~BRJx(&fqrEY`H)pKyVsS?ha<cY
zp#FXj9*}g^*4PNP0X4je&ZeN>DV<JLMH9Q00?+p0xc?(n-YU)Jta*6TIeo0p{v@iA
zJ8MxEi_QNz-nsp`2UDXPNT8=CYX}R>Q{pR-?`w6Gfr4*}e{!*VnJazX!4#sW;F8kn
z)<pbWlbka>hGv_sQBLAVQ2`~$M1MnCtxKJqXJ5CLeD;jbLRfblEqV>wKV?|g*{wmt
z=f@`B+V^H)9f?O;fEUEd>RW1^_W+9~Y18(~<uOX)h`#6WRDRp6$Iw_pocg*y^dl+<
z2hiFY@WT_Z2;6q??+5jar3L>QbvtpO(tn$6il-WuBYq%39vST2Oqk;;gp<bY<U(q>
zuZ^RWIv}Y*O0`sd9#&wP&yVZCD{`3vqiD~A9Gw0GH(-F_f2ISvemS5d$9@C>g13Hq
zryg_oU(zRw3Bnh$pY!nibLlhv&u8NQy6_qFj4bTTO&tF9Z2aH)R&{G&t0KI09TLd`
zBuY@>Q$Ho+%eAHoeX-^Sr*H2OvRV}t4}QU42W<DecdMFXs|A8|<h7aJGnf_S_0@Of
zRH_qim;<e7?JB3cJnS&C2hf7@5X@lSA)dBD$AF|b&hou|1<&j0&<;&n)ypahj9@p7
zh%)4ecvca^@20{%(lTYFmA8aIEBA(7qilAbN6CE~#+Span{Rt36WulLEITL{v@F#~
zSTOW~UWSVekm2C$4)9szg6}J<Mvb$%5QC7>P%`N^62%&O40k=i7y7RSGy;5na0IQ4
zti5;whWxIxU?#(>$+|s%iwE2UPD&xx6RfJ1$Oe&V?0{Xq6IA>Cl;TEGBy_BICjxTj
zeT{Y3s^eyB>{bb$E&4Q`xI;8FsxYYW#gF<z_8y|Y#yxeu3CG($Qe>TH!8_-%SH|D;
zUwXi^af;uLqD2&})iSoeD?^EREySuFD8r~EYV*AY6J_cpSiAM7)GoG)Uz%5$SX-_t
z7G|h=Ki%#S^UF`zew!t@HPBI9c!4z(`^jWJ)(XU2lb$JC3SbsGXT^=Zu>~G4`U}u(
zKLoH1!04NCF&(jt$zmEDN_2J!^y&d^02s&BhBVJ@LU4N{Ar_9DA__aOV@VA|8}>g?
zszR309KY6&=he7xaQMfsE9pP$j1!VZfh+0;&A!PM%-y<8zR6KFT)R7Y{5p3xrou_L
zhzvdjdWZebTZ%v3LI36Fmh$~Mk<9-;PNcc5qmzxnzvB?^_`c``287_7KjCu@xjM9G
z*F^TdHbsg*LYnz<x{z$Dm9%BiFx<82<nGVt4CYD%yV}Ib$nV?lDQ=c#<4cJ=3jEwu
zA34ke?w#Ajdn=90XpC#upMN79^%o8YtmGDxkOD;4nBg$+S=AD;HZTDW3dHR}SL;{l
zy>*@TZR9U7+r~H*Eh1^_fZ=ybL2`v(k`lkY0LlUbHhj8`7gcob>i}#%UlwLBq{h)N
zteWx$ePE)70|@!pJ<wFJKf?gX_r`)CYxzc)6Oy8R$b*g*x4AkOB|_#taMi(wVz|M*
z0gODGD&+fDgRh+hEVnp?IvdF~qn5~W1N8HT*V}(B`V%>M<gfRhl;!v_klv3st4O>(
zFb4(*d1;aL2$WDxI(8e=<RGogz29C&^G=9$c?RuceFaR@nFHOYXkQ{72xSa8H0hY>
z^;lzQtsY-KD1f?k`n&+l9mIo4tr#3#$|V9GTgxxMf*h-WUZ`IfMB#1y8ZJ4}oF|H1
zT274Xrw%HY>Z1U&ee2J#2dZtNRp8WPZ^XkCxU-u@1^S9#1tBn<UzRBfid(%hK{;db
z0HuUk^(K)qiaiWGv*|=H;?^nzmCK89-{6d=YAWekYaxuzA)^DDQzT^mI{4=`jQ>-E
zd=Z^+Jze-5S1Pa8z)rgc_5}2wr_3D3qbB=@N2CAY(f%La!vB5U{VRv|lbC8t#PN?r
zE76pm!BCuuddh$`Y>?>^3>G+)tYQi>&4%qNs!ppJJJ_d3<(ghlygmaM$zf&1^RfIg
zW0NFu%h;b>jRE%qgAq+6VM+9*B8mELQ=L9uh2~ybeI?+0gGyD=d?&Nv_+!<s_2d23
zz_V6y-u(&kFUTo<D#}Z=)X<7#BH-|S$6P<lqX_)M8aI|$WFNiaNVzzOc80e3$s*|2
z+Zyek@Z^BK=cUUSS?qjhd^xJiK~W<~?x2{{wa+V-9%O<ldT+m&y6@NaZ+BKMlRGvY
zxlvvvcXuSS&Fp;`oE*0YeoOeaq+v-P{_pf{+XC}ejG2^!wZtr!#syGnFM}rF97wzD
zkr;Yb7)7JK=iigg8%A`#!H<AS;mYcHMsp$dnwY*$3|%?W06L9+RJeB3>#JS*eY5qI
z0wkaHy$i#g1>#oQ*5531Jt)fN;i;Ly#;7*z5gD|M!U&#3@-1P&1$~e=MceEje<=jx
znVcCelQb^M8B%Y_Si`SsS;L~LV1%{hxdg(pdeI!S0`J=;$=TA0p?-X_N^jSG9J?A*
z!6)1wJ|XW#D})ZH77)TtQn6G9c$P<!G>PG(+f`F$n7WZ`(F7A{Em;X$SD7`K(DmOV
zJy)fQW)XN4LdE5MafIQvmF;Nux$-MWbL;78^{Ls?LOd|7qEKNG%Iaj%A%>J_{2L~7
z!Txqqg1^6HYN{PqF$Eg7Ie;CV<=I*LFQ(H5$6vP=jDkF({9?fAP_~J^|1qQJk~WDv
zZ0mh#;Tml_(%NHG%;_@1*?nct{L#_;CTiXs!34}b2PUI7By@$y?O%U@Buoa)!93cQ
zIJzvoGi8irL=3;!aF~aGEV3z=*amQK+|&%jaR{h@1y-h-AEnPL`lg-sjU;Gly0pjp
z>(hn216YoN*(3pZf+dvL!3*~>EL(B2x8@L-f)mDoh=;2kl^^|k*{yQI!mYV%X1hD<
z`hqK3_%%P+P}uK&-Ix}KHBvz!;Ual;S1Qx>&(*fzcneYs1X?y4=Tl=j!X5(KNSiAF
z8HY7c*%Fuu$gPf|+60t8Z^h@^$I&b|8`M=1CwW2H?f!+&@s*0DI_6W^Q*6~=Jx7(A
zI|g^2RWqjP^v@Jc0SNZCJ^rg-c^XA3^C(A=q6&e}j6mOFgV}Z<CA_`yC?QyAN1*)F
zX|3V*F0n)S&vWrkP7|ZN>dHyityFf99^}gF^dhR&LFu`~GFd6%6ViF{X#8bh&#j#C
zK;CCgS`zf4Kb--}7nbz3#5&^g!(p33&tFku4C#DKBjj{mB*mI#jHjWj&|uyMbkbE}
z-05TZh}#@jsl}Wzc-BqK9C~_sKJV_%H$mxs7+1DA-WD<h9ttm0yI%tUT1^Dt;LwOq
z$du+pMqbWHE?J=rpE4jSfBfNa|CGY;In^1#7x$uimfj$uRYxo58xPH>AM$Rhn?|US
zkF*GKz#9yYW2k_n4_U&nr=NhU>X;MG8*}5x6exI)aVV+7BoSz+Rzs%?Dxy7)Y94!E
zck60jKEMBY486wgXru6^qr&-|v_<WTwb}1)@cFN9U;~j|O8@7L4fr9s{w4kVAJO~2
zr=S1qkwou{{#<_4k{Qs#kp`>^a2XmT$+;k5L5Q_sWGM;@bO+O^HWeK_a6UO|&6uk)
za2y2dIx01~DqZI>NfYshMtxKrC6AZ)L=r9?OOCrQnP$Z8nV(l;31&`W>lzcBiZtpp
zhj2b)W=4hr;SNenCOD03Do$UtL)R8v?who(5`sIJ6%(9B9(Jf32;+=@EEt2vR>jq@
zfc?Jlh82E~Htfylb-aA<Eqt`h1g+3VY<YEfZPK${Y{0<;2MU=-d=!(sJ;a(RDQ3;B
zmPZ?@iG3(kH&V)QlXGkiw(DID$9wgvzB{6F09Ol~(SgHY$SmMhGnz=;YGYQ7-${cf
zzmTwh_TTEkAXJSySY`UOO%AYUkd5JkYL%}B^p33>Ndf6RNnR2Q6aEf)wP;I=hb%ll
zm1S^sZ!!Z-M$z$C1r)OYOIu~I1FbZY88^kfO?-0b*lbiAt$vlkw2B#K@`ZXTMxOM8
zezerS>VRtmnD`>Gs%&r#L4pzZ<CG!)mQc#X4g}zH<O(VR3=m8)v#8HsF3ho}F%H((
ztzhlUb14op(`Gi@yMdT{I}bS>?+0_cn`@az$R96NZY3X;X%Zi+ESomwc-Uy4sw;A+
zg&Ou<g%Xl-_E4G^zm`W-)PabbOKdh#5lr&yOwi9u;xmh3cj72Cz5f)bvuak1tdz;<
zQWZ?{h{GHC-KFlkUT5K^VJQWaRe>y}quwb>`G8}2d%l9|Hymy1Li-aw!j<mYLJT{>
zMc9{Ds%-l%n~A_{ta<W$r~c=>qVbIYt1#&f9Fiz;E!plmQaizxPXvl(RoXA#z6;;e
z3*>tBS*xZElCg6EO^-{~#}LBd)h+P^_~9nCE+xJPE&3o3l}=|U5!_!Zs}bmhgktfI
zG0($>-R@rNbUvTfIV6s1SzR1xaocia2_4S~?>Xz%tGSQ)-(olGCHAT#{jag}FhCoU
z{JFH?Pc_y_)CIRNg2^mk%Tv$(@-AdpqemUvw_6OP9u6#7i<l7zWpJ5;KpP9)$R90<
z;E?=(OUjugRqMU8K>tC>>y-HU{tf<~&cpS(JDp1o-Rd`Ji#woJ7`aTy`E0Re($K`J
zh&nWemHi>NtrqExK1)g`F$Z*}n=5f>w}IsFU5n1rU;kCUoZxzxB|nYZ=?{pZ{hwj-
zPczS;XJ=yKpyz1h^sg8uNLj)52Os~_&qsl;mla}*bN8y21;S7XYO!D%%Eeu1BMDjl
z^la7N*^cqfS^SrTiVi;sqwn2ZC+%|_Mk}ayA4tjfH;6_ONM@w%5tRbWX{giv*tq~C
z29|xf{O&PwB4b+)O|oc^Mt>!#6k0g?lWgQQwB*hp%Q0~wt7r%d@BeBww__qMVoZNu
zGv^~@ZrqL#f1FT2vPC$ztJ8jqSTmD}R<n%zS0Gf<pdJ&<vTKO<;rb_VHAdfHL3dZ-
zDiOKL-+CHr2|FvJ^ycUOvJiOE4`Lo%TX`nk(wL*#D^vy1&#OT1tS&RlgFTQ(iuadO
z8*~DTXLcmD1DfyCU1r$@-jN9US??l$xEiJKZ$MTL8cQEt4emy09Z#FNlhoTV3olh-
zivY0EjE}|z-e5bOI{op<>YU(8ZwrfeYJliUW2TR<U=Ac7E!!Js-ONP-Z#`+6bT3(A
zTXnd7muM{V#%NM4k9Rg~VE9Z^U_hqxq?*KoHsjBHAN(eXBEM`Kd8lp-s6P^(By78U
zC=jLs(s7dP7{U=<<PuGi{u^xj`#}OtMOIlZO5B!B>V+}Jw%{<RYhPY!9oYZu4W(V>
zb?`!Cdzf+5Uli0F2DA~OildGzj3{+vEWGX|+@}9@%Z)W}CFSZaO)Sx_se6N_+e-!$
z+S!qzz7nUitJMphvP@@A=03&L`hgw=?zpOgInI~kwc)l6jn(`oA(Wg*akf7$j>O-}
zfgHlw2ZR`(8yjh67_c|X#$W_~i$*hIAeO{E0v-rkEJ7CDYh`iXmWwvOg7Xm2h#%oF
zVVhHSEOR~sIKi^jED(jh-#ks2VX)E$R^aHcGj5}K1I!_n>#oM3x(>g1;qwnZ3|~5b
zhQs=bG&runk;~&GyijBG=YLhhE*?CV+D|1w{y5nD%NXOI(boSehX3ukYHnchui3jn
zsyi|JtUo28$Jow`BI`-x`bp?)YfI`PRdY&F>C5As6DvVBXkAOZp)u~WgUJO6XtNO_
zzB?9q@_w9==0zn#HCTdU@`h(xz&9*Nld|xL_Sr7ncmYzSN8YCV24y*5_vx={0<~c7
z>&joU>ln!AgY^Y;DR?aGfpQC)07?yRb)(5Ua~v}<rU>yOdsbMg7^tO`?^4}bY!<r{
zXVHem<E1g<b76nT+v!c(qHEZApGnY3y7M)n#xs-9^I(Pa;oRw^E{&&_@Or5t>)~B{
zN?m~~P7yVaN9*SJ$2|m*oXN;l(iWH)7g)F)#}Yn6XkrC`43nguf&sLkKq>Eqv_!EJ
z$!oV$`U^~h9XN1U31j8W=cYZy3&a_3DvwlDIP@tT{gNu*JV2inC({czc|N{~o&N|T
zGId**L7D6M&*={A;9)6%xC+#|8wD*`W4-4J>ST7Yl6*B8+JYZK!#noNH&i3KFj-Lt
z!97?ax~S5!w)0V^k%dczBTPKo7Y}L}6YJ4FE2qtsQ~iaK{`BitvhNmRzNj%{iU4&k
z^lMhJkIzQx4P6r<r!`2O2^Q`Wi%{15K@y)+mxN$9tpQDUEGD%I63__>rQe(tf`pGs
z{H%s5>L5~lJ!_Byhl-ywhD|i4qW;r{6nSg17~81=MbUzt^Y|rO5_EJ3i%J(2H=tP$
zL^kSRR{d9dw$GVZTnN_np<e=7t*IK?X&cnTjR;z}^IT-rtEIGK;j%g~rTC}{m!$u_
zOKiGbkx{a&rK~q`!R0v`8t&`Tn>~a^5i-~n7z5Qrez7m7$T|OS0L>j)3hEGx8hUfA
z!bJ9G?tWge@Fmi(RMI^Sg*UWcjit!>y~-r?RGi}^d~rfmqpU*>_C~Be2K$&G2c&m2
z*Wzdo`6Q?0+4fG2%;1I@?FwkEEV`hnc|j)VPuWg=4bgUrn*)?ZCzzsu2{a5!nn8U6
zPeO?%qw<OvK4CjUfXJ*9?Nnhak%dN;p$(xSA(Ze_!D}bQ=8X+%yfHR=J{Mk#Q-+-$
znv=U1=5K><22cN3+svR3FZyAWF)Xi=NSN4;Zp6m#iM<K%y9lr|=TAxmmC~obE=y80
z!$Ycva8xl`XqIl6_php{3YC(hh}voh&?}-IA~P4wfDWx=Geh#?J;!q=ND{XZFRlVb
z>wUSP?FbLKT8m4JT=C)!n73y_ufsH|x<hLB`Orf)yH-q!<@0iu5n!%+;vL7#M2wy6
zs0nh%!d0#x<MG0T47lP4-}r!uvX$6E>E6UF+iCTd-nG?j4ldS1yV%wC)`F!qlu4dq
z2kxr0r#;IA5~b&kgxH>=?>vA5%oIb(41S7kE~pkW8Hbk#e3Pix4-!T)kZP<6q~jDu
zD~Lf5U5slkTB8ujkpH-gIczp2|4J&7r?h6Q_;H3sk`VLQr+MynVp~~x|NJBGqX-+h
zr7M<mfi*(#+_4`mm7=Ws0sWs7iAx&-e8L|r-t}W*!~Q=%=>KOu#n{Bu;74+%XJ_E(
z=xY4`Ab^QdyOASi`^U}3(CO0-<O;M^@^cmlNo)a6ks#FWDz8~^x;nvm=68*iZF1xJ
z_crE@Ed*p7LPZnLpZnvfhG!Z!NF%ed-7&~bZEZP>jG2;{lxIEstiLf~>UV;#Bbi)k
zWHGly{#gStLCCCo*<#kIOV<oqAvr;7euuOaE(EJxTwVZ?@WV`*;7ja-+GU_IJ$>`)
z2%OCsn-L&3<SVs_lKkV&`GvYomDBh(rY-js97cb$7VD^x087Zw*EyU6eGVRQLY76z
zI@)+j#r7DU<PZ;uDuyGA6udexJ|B|VtvzOdf|Ei(LERBO&6>dMHDNkdtib&uJTW`R
zfpFSCUvFl30@qR=D=-hv4XWSoE0dYqU)-5`Iy>6CdeXNpE!qPR&u0DPKo<jM0j?gz
z;fV}PsF*1RkQaC3?uYk%b_H_kYIW&;;st#b-x}j;m_0hd1yjVLf`n`epZfjTW}mRV
zIBBPe2MG>PTI8Y7fE<1=Gxg#1r6u-Dor(r5{toC3mTykr1Ns@0u=uH?aTbesGk@}^
zi^&;O&FWeU%1K4ZE7+eHwQBma;wHy)A;`7G*Hw~>p~P)@rO9sS6jm^X8sl&BI^tfN
z*=2B8!H+Me=?Xx4Cti|{s~tX~(GO|VbWk1#H$Q_(4TZJUnrC4Ww?>=gR}jJ@r8M8t
zhsp?q9d3G9Es5;K`4X7PDD~2Oq1BBnUbmD{`AY_C?0xVDN66%cp9t&4YNKdx2p|BU
zcEAQdY6RYq#G>RSA<aEbR@Q7>(F%x|yWjx>S}(x%mI@8k(lUtB?xWe)X&dtJW$h2R
zXQ2(VNZH-t`(fqzoT#|rz57$k3)a*Q*pCyiUX3vnh@wXUgfWj-1F{Y0HfvLLbBb|G
z{DleOg3h!87O@^6i0y^X3Q<+=UWfw$S4nL+K*TGQ*F3WjJmIcPvtz<)(6f^i4J7Gz
zEUP`0g-FfjZ8#3N5j#1!UT5ma**$ynoOv;?7=Cx4UO9Bz83a4H#Y1;U0yAm#FGLvC
zA8iv;So&z8rnZriozDw*F<c0Mz?>Eb!MlbW*vuKDajKhJtr3OKM-JKBCWwb9w9P+8
ziwOITIzUzAMZ2yDx?h1h@J1F--QZ6kq}hpPiQMdL7-fq>jCQUru-?&JM7gQLmeofm
zIzp5Wwj8Q^*oam|g{<B#!vKT=(pAX@O8;vQL3Ai|Kl;gm2<r*Ur9%=ZV-dNF*IXwC
z>_sw=77PofkoB6=cO2EiL1_eMg{iO7e?5nsb(a=vUgnYjX_*DAKSD`?LuLtsUBn~K
zPs-i-$r*jHdlDE?-I2)P_ouk1_i=!nOR@5}Is;aOOz<&<4m-cXgM<k$1)CE@&sbCe
zNoxp`UB<0#zL~zXDf_@!5R&*LjWPdUTu^9q%?FF?GK0NbS9iMtelWFZ7zY@l_~@eI
z!u|t4k>DsBl(?p6TYN>eyfK1M@B&;cTvQ%<v{gDC#~qpLp3SXZTl59`#lzL0>IQl6
zFvyNYS&4_LM*Gt3FEpLTv6YC64GUa|1*P%C#4NXcjp{)c$R^fF9r7W`^vfb!xaoWY
z8<i1zx9^i%PyRd;MPf`y$LvU|#xr>sFrJiotzfW<jyz77e6xP%Nv%QtTLztU*tOtF
zCfT+iA#IeP6emSxxg@*}Y=!_I%s~A8Is0x7h=_B50wSp2XVch!*k8ohy?J}b^z6{$
zEr+SFDB<vgP=ZxIS5)`zmp=ZuJl8&FKQGq|9$Vh6AGNimUv{k}tCKY+qJ4&uKSntR
zo64p{CESj^w7!>SNbeeQ<}kAI4B4`C#u9m1{WY8%$=<eT)$!oy@NVsRd%Wi{N+H`>
zwS)5J=H>nRd;4-2lAB{XqxJhV7#KZBE=mNvi(jp+02J=J7V(l(*)!ZF_Y8v0Nil2M
z8bk%Q53tKiP0ouA3z$2VXjOWt&>vI?O0RaG63yMtsUDq_quu+li(lXz!x`ibu%Wjh
zy_%1)c)-}?j&T0r+`-{j4*%zLTL183A&Fb(l)`gCn0?G-(e}ypNI^k8&B)`(?W+2R
zKjiP|bME1?8D;jjgZ_r^|3cM5X-;jXKO>@~A5rGN=%D`@5gFOq*!&~JbaeW0$^JKL
z@Sknw1J)loh#E{YddJ`KF|^aX4A|Xv(cisIz!M$TvS75bB&<wj@rg?x?{Iu1<YllA
zxzHS5ziy^F=TbzWhr5+WhiEI!dgw7G?w7XnH_$aHX*RbxukC<78R?;{<|(}bhxG?w
z-+s@A^qc~+!)CG05TK$o2_Nxe*P6?k@0NnXz21#H9uw*vNA|fYqB>Lmh&}_x*F7Zl
zRJRtEB%}b*Bd}fzca(Nt?%!KiRJtLh%6v2q@2~C*S~e?d81SOXOwIOAxIEl_{1Qvz
zv+#Sy+#au}G3y(yGq(JNUkU_4tD!WnPdfNKdAMxy7{ptFIM1lmw~9i$`fVNtUjFnO
z!w9vLx!F|FpawZ2P#7a-KbaI%G^Td8g{#zkg|83g2?vRy33XPq2KZC66Er5{@hGec
zC~-ihQuiTskrXbDn=-5;7KH+dX{f?c{SovhY!(?(Ni(neMO#Bo*+NbuMUYK|$|8PM
zL$qt28I@oMPE(|)n54`#CMc0ui|R8hQA3%Vk5FFJ1ecw3om;_hDsuiRr24lVZY~TU
zlBmT#mV_BYH0}T+(gwE=abSp&S+>OlHTMOYI4&Hk&5yhw29SwTUU@w~9j1()bMQGH
z^P@vV>M9Hbj8|x1JdkORPlguy>>QoXMFXj@Nf+ju87hPQ(QtS`oa%>pOepka)b%5z
z#h&-*xL-aacAck2YY-G)&&_LNA7*7ANP67xgP@{mO4ytMiAWj(;v^oUuPb&EE}-jI
zeivN*KEApd8VaibLVi9Cu6QaAOqud@Id-XgZ`T=USv#+AJ!K)Gx`jf4fR*H8IMpoR
z7uTh-mS7`GLZ^aom`<TbW6(On7QM=&jG+=%@u<*q_&(>uy&jnU%&K+um)oAm0t(!Q
zPw(OFF`UeMdOhB=@A!CZ!8LN+>P*#tlw)IS!ROoB{DSxcZDro#Nz99Z%eqlXDu>}P
z8|l^Z2v1|hh#?S5L9H>{<GU<W0m3oRC0KfZ8u_sog7RXJ3CMlE%*9YD>lxlAsp%Hq
zgrB0X-_!RPNA?r8tX|qjf=EpGB2oe${hpTp_c-VcwI68Sl0&cZ9<=aRg_e-Kpr+Yj
z-Xkq6^gx_Ll4I1T1?N>eom5Y=bcO@gjx=&irNhYE_Kd(B=M(*ZLQHbMoPzWpkCQ4?
z004^r8Djp^C7U=n*#0ZU-=waPu-}UKXQf8o8n3@l-Sml0LgmS{%uwAytiKPXwk@Mm
zz8@_Y+XzttFW4uiMyr_-=290=v8lnts_oJFc}1_~!@^97kk`6Vl5f=h=H#avTr;m*
zHpt6rknK)!!Au-0TIe42m$oWDf`UITSffoI-@6iC&vK!{$XF>hl{*+auwq9R{OUWD
zP~ENaq?zcNvAJDYbGjWp6v(z(k+iyg&Hg}EZE_D<*gFnczdPxx<iq8i4oSGhTwaEy
zrPaPJ;`H0N3xc#v6WKK=FwyJ2_e74L;@S&<@~F7C8<0!d<j6W*Jp7$jN|VsXBn&X&
zjHJnC{Z$q(d~>c>remd?{TAi1+&WT=Gpjn|s>!#&a=9?m^$YN#aO!A)XY<mfFcWww
zVjN26Emx_HJG53|k7T}rNRDFGL5o0Eiq>`9vyxVU)yOaNDp5%bw-FisnPKA!f^o7)
zQfYwoui~a2P-mpnI{M`cF84DEdmPF%p=vAH_t)tW2nVTM9PKxyQ{Gxee@~OLAsQ$l
z825M}c<+3=v8@2<p@9_d-mOS-6Q-?A&=8WEP^poS`~AGFRa}wcm5V0Fx=q=D?nNhz
z%UM_{kA<7On3}EYo-Z`P{K~EPK@gN5+C}5E!@_+RV1fho;dZ;3G5fFFgFK}K56)Dd
zwCJNAj{<t&MVLLUHJS#`d;=0;<B$+X_aGiF@r>O!;>%TZ;r*FbfTrfoZ+*@zY4n3J
zHw0MS;Ox~aI$#k+xQJWwpaDK&>>v&MMeArC`zfoqfOqH9aW10e*WqtGY4V8Em9sAs
z(z#>oBSdXjlr&IsPQ%uHiknPW*1EJnC0?*pmc93BToG5J<xx*;shR_mT$uDI^wFI0
zM(9p*u_;^$^(*kMGv98q{8j*E;ar9?6<J7}ja*{ewZyy+x2RKX7-6+yG)fYp-ufq9
z4k3#BMUrwRVJ&p`avhi4OYjnT-)7-INL4KY-$iWMMm5_fPp?yY#RKjVfkt;q2~4Ts
zAbdDdcloD@q(Ml<NJ2P^>6$`dmvA4L)$0hf^>HmTTW+mB7_#k`LgoHQ=OSs9%f?g!
znoCqdKFN!w?7z`F*!&;T%Lk?6m6`aPO)jQ9p1M5;N_T^KI4LZv_Y9-Fy=j&KC{sG5
zN!v+4nF0!h&<M%}G|Pk6!8n7RExhc@*0A>}{h(;r#nOdu{JBP}IF)aWZW{!3>=UhY
z?8C&dmO6#noN=l*$CKPeJfO^T64KVv<y*QtSLy7L;e5H`z_arpfj}Nmf5D6EF+{b}
z>>Z&!cr$Lx@9)A6vJjsuUeo}mouOy>W%-OmZ<Ec;hNXJbYqd9AkMfZEZQjO?sz|;;
zXv(Yc2X{`l&h%T<1%M6nx(^r6(^wE9pqqeeV<MFj4Z@b{cxMe|LJTA=s?lo(#nh+Z
z(<$XNQ{9s^?R6We?MrqWa&@ILP$An)_K}DbYdfl!a*E-grxJLIOf54dIT^EI+R7p>
zG5MKHa%-xTaeP?|)I~C7P=J&_RpY61Yw1fICLUvO!9bDF;#|ln#b}X%ugPCCXDQq3
zS53l1fs&4Ny2#tWSg(NPIpViEKp@URQSytK@v!@M&Kj_ne~!6vpU&)@>eTGub5DQw
z__OgPwC)9l;jry)`?0~LBaa#^rVfreM`OUIyqog^XO;Oa3LRUs=nc!r7H3eWQcbgM
zpw-v#$aD|emJSS{Vbm7g>82Ebw2V23_6v6k^aSEV`{1}~c)zHEhW}}nD6pVorf^{v
zjKx9{w_;y5cqb}tk9s8{EYd*5JYDNuLu1}yf<-XL0`pcvH7<jyP&A-?C=yJpuVu<r
zDEHo<q~jOGVzQ4C?fE*owvCuGzMG+s+1Z!Yk*Hmt<&!;CB#e`1N#C*v`T9^pYg5OI
z00AB)(g5NH6?i=<)tVR$rb^0UJ6H!jYws1i)i@{&9%EZl=2MZ!!l-fI8L+SV=6k(@
zcdxf+Z2_f7u92CJ8Y$2-UWA~iQQ^84Cf!FmIb)QRSvzZ4+>c2N9TNQeC)*1zu@|bD
zrQKFEar?Ko&p;O=FGrh{ic9n_1uiW1LBt!y1cPJH#BZ96PypPl=0-H`>Y{2d+*A=B
z?t&DLwZB|M-TdoR<TBcxCPZdKaSbN3)2Y&_F#*UZsp`I2!jS-3>~=<d%X8|V7QUzU
zKq5L94^9#&X<&PUH^ewSs`TEiB}z&ybuLGj$s2z&gz$!XIRp61E0qOByhFQbcZ+K7
zoNi;rgbvRoP<$Gs<db@lEC7N0_gfW`8ezHduFm*i#6Re|4zUZ&opEXx&pVfyY{X@3
z5%-9-+4M*oUvLAHcL*9=Ma_jzm#iYJIp(u2=Z(?813GgTs%V!B&zD9b=RQeGB;lB;
zbEUm;RL2?$m`hRT<ybEqOaClM^eKA9Cmv8Qy|{Z^nxaRG&9+$N@JzjR&54I%PF=Q5
z?JQJA?fKt}tYgGnErropo&?1paUbSF-?miJ;-1LJR*~jY2aH^BP4y+gPqcl+XQ-XQ
z<L!E7O#Zz++{2?kY@V3@8GX>d`Xc+Ej-leASCe7xO-#<u<?7_w24Du|yOc)%QUe*n
zryV36ku3RW=|svY<-+Zmg$1i;OP2vzJ@yvGF%Q5|mri-C&k1gLHGV_kYsyL?Qmc|&
zaEq_*^*;4F-NgM#;UJHZTiA=?Gr+jm*aB4PfxPSZ`JQ*Syk9D;jxXlcc5+ke)dHiO
z@$zA&WzRtAOVUduiN;1rI7`xULg=6B>SKq*>P6UglAw3;jE@p%Q-KTNVu2AYy_ag3
zmj_>=rJ1SZoHBz(#VraNdx@1k2%z2ua21LZXrqEZ``lPdd#u;``;>ol!I%?7$AQ6C
zfnLb{(>|SDTQ|>HcOB*<?T^-8C(RE94Uij=J=MAGga1u;^U}c~R{t;r;6Drj$^VRf
zjI2xy{uTFl|44oQmz-S<rahzydgax8PACCOT-)|{??3KtYnP<CW%h$nB;_O~Bj10_
z#K-V63c-Ps*}Z;w-Au{rQ71s%vIwPR_dT4?#34v9xyy4%LgV-53&B5tP2TA#<8=b2
zotOgGGxG{Tk0+ASnk!xF$G@Lll3|hy_S&{9yJrz;r$b4d+#$a`HUQF|F#(Jy<I3J<
zFSny}rP>x4v*Yj33^$Y^+{=$Xk_N&2Q4z+kzQdtdzPOtcDB;gZYXp~6Lpk->_uzKa
ziACFkq~6)d@ovT-4GCF+vkajmub@%w6iN<Ju8ahQB(;g2-!b77qm#P~H&1w^*t8%5
zR-*>Xg;C})u9tR%0%?GnDQ`w2=5Rtd!BCA<>*V0Q6+L0ey62qbJoSS!R|Y@OD)*pN
zqGAhz4WW$-q?yE0s;e)C(9onIRS8y3D~Qc$g7a))_%?F;^L6&C&OP-3Am{!mP`B?e
zp3+g{N~wX83%>(+6#)ZMXx3deZ&HbUWt(y`6Fh(I6%F81DmK{1l!?GjpDCRVFCM=o
z!nUD<a*lu}K2+@CuWAzZ_M~F+YqP7<p=eJsRx+8LGf6sAp?`&R+Po1y8fF%LPK7r0
z)jcgr-~~qVw4XN=1SFNR<}rc{x!|jXwZ_K4hgg`Fi=@|69~51J+-k_6FWeu5kdgS>
zRFaDZv~b)ZR)sdx5gfe8_?!HL`cRXuI7X(~)amN7vTc6kDTfV>*5P=mqM?vy_}i)g
z*ftPlQ6hvL(hFm69T7YcUz!IaG;Rb<D_b~qiL8}D9w!__BlvSB7ZJ6=VyQXGiVB2n
zCmHFFjsjCsTg{retBm(+%b!%I9{eZQ66}zS-&v1_{Xxn#FsYyxNGC+(@p++>R<RQ9
zf|aEluRYutLNZYt?_F`zVbQ-pS*75f`~2Dk=QCrQ*g#2lMc45-!~6zi+imcNm8Hj;
z3&p1OkamCHhb=y6`1YEWb=t*CmLga?G4(Otj(|S;vp}`Mjti?P(%c}0hr1Qxu6KL_
zCZDp2x8E$Z^KK#;TKVU&BtwayJjK29GW7%Lg%Wpdh&_8OjuYKA%og28#T~AnqG(su
zXT=GJq}sKYhUOkbp^rT6yDz(Bh&**hCq#Y>C)9PgE_yY#X36c<RE*K;VIM;7XIKv)
zX*@L18qnUSw<<VUV~8kyLSM07#>+j3dD86WO!Qf7dYw*mRV9|)Gb`5`r_o4g>aT|w
z1fNrmo73V?OZ{OrERvv78nL&q=)T*klXH2hFy__^WfK9ZJkM;Qg;c?zo`1&=;JLj6
zI_+Xy*jU}$zo|791nzKw*14(?8QOcyEiJ)cWEx!zXUN>zoEh2ip$WuDxBNXI%)!UQ
z^J(|T<0%ar)znGO-f>4Ax&6Jon9)GzLpt>y4E)1dfS9(3Sgvt@TOyB6DblE3Wb^>Z
z>E)<{>@V&k-ev}8Blv}IF=F;jII0iWZo@uijfO;hPO|ZbH#92-tYGcfycAS2imvt8
z5+MzN%<#Y*Gp4}(blN(Sa(PyZhsKD&XbM$aio0GLJvn*CRPm0N^JA1ZcbKPay5qwy
zy+dGCjV0ZW|MHa8q&oWp^0VOsi2bi@=|5D%Pu|CmiO4@hsop=F>Ay{OvNUvJu-cHk
zpKEGe^n%TkVKlCiTy8+Z5aM%55da$`vtvs(V7o2Wy|1nbKi;)eTzp(-rgbR8di7MQ
zIi1f_J7t_lS2q$+_5y3na?m5MTq*{<z902XTwEb!1xZ^vSy?S&!WbSd;QW}^Xe(r-
z&ykO!jog`JRxQawix{FPIjgQDH=>%Mhjt4O)OyaU*X9dGw1)^`Jpz7AGaJ$J)WI0i
zv56BZP1|hq@m8|ao+!S9Ch*e`Bdr{86yu<T$=ofS2&z=Z>L!n`H$3i5S~eMneN-h7
zPVx?)Ig`SgZhyaU@yZxTl49PNehkCkstG&+XRgg0`{1$S+jM`qJimwb)bEIWUt48;
z3{+JeHa#7%ew~BcTwiB=BzRjxd_)cK;JNP3vjeHBO=J)TU2MGE7|z2SMKnJI&fZ+W
z3(1{k>+GP{1CD5BKL&?4v-U5lSyXij*Rij^&3XUqcn__!igKa85Y56|da@dNi)=BW
zT^x=&uS<T$rdc{G?A)Mtyt=%a^lVnXi@%!=iXc6qo`w#fXJ;7)2$)Ah{&vpY^&F+A
z;%ZZwE*Q4Ny>)%Ii=v!i_Nw10F;XS}0>jD3ZtMeZpsZCCZ;tIV96K-G-ZHWqLvR<`
ze0JbVyKgww1)n0eF*Z%~ihnX8Q@5qCBx|q5x5sKg2&b-Xt;gJST1E0?JvExPeIhsE
z_~Iz3;~r34{d7C>3pKg~>hjH9pwxl`N^O4}uw=nq^14}E3SEf33W14fq^ylKcLaM^
zOU`p_vmRV9UGK$(f#s1X$gjXxQZU1`l5+~yjb59V5pzc}mLz94y9e0NNgQDg`ZD?R
zEi%M-_$x|;z|)_{^c~qSoWgKi$zV{!be?|~>5HPGRiAyEhequN{$8%(=<Tlo%e$MK
z`b`Ub$LBszA0pkTW?5wrxFRg0I8%bw<dhd!x#8~W<8kel)sqrf$a#aqkOeb{KJP)?
z+{qIyxLmrA=H$2V2?qNJA-Z)X3(lg1*HDD~pWhs<aS9-bCD|m0^WnlK0F?<a-3J`%
z6JWVk!VZHswO5gp(j>*gsTZfqN6<u*V4K>1v~8Os1`Ip4tV*<T0omtMf*G;ONhV>l
zWf%m^2yc8C82m%vw!NEDttWo%wXRx@n|-3#`a%L=s*n^GM>0&^ejhWX$Rj`_X4W3-
z53BwSC@q?Q`8!vA)J4BcDTWmQk3jEIFzf(x4681-2wvx(roaPeq>I9chYY<z^Q<0$
z(76!Y1{au<HN+pllW|TmNbtJf;M+(r5rwm|A<*JX_<2xDo2Ie~=Ck}0U2uXXAI~vZ
zTDs|hgkk0@<Q8-uC$Y!u#H_=ftmO|&4UJL$94HD+4_F?OUX<Y<b-uZT_BAA4vclf9
zWx>?)DQL?47l2~=EPn4Qm#lPMyCfzC!d5j)g$5?km_Ui@j{1pLEnxM00)<Fo!)<-k
zcm#_*5vK_E(%Y_dSB_}fk25fd@cz^tyaqtLo#S|wb=d3r$sgNh_*Y&<{i|UI-zD1n
zK**6x3%x}Qlr|<m4TiiygG}1f_TzrVh9*P|$Tp*mSwT`bM4H<!uR5)I=$gnoQlX{O
zHqlm)xqyjsrnb=<;WrBee1^56Tg&%4ZF)8X7uMK<GBDjJM;20~R>~%Avkz^v(zzO)
zx3C~6C;@A&CXKF?6Ef;4iM_~mYX76WE!3vqLVm(--X>RkaD+f0nF+Map@NyLIS3Vx
zgpp$?dRyA*p~rID5u1OZdNgdSJqfF-C@zx4CG52W+Aj0nkyZ|MDF{-?lHKIQF2l~g
zNEC5~L7({^)IKWIhRz0sXPm;Ysr_c2edTDo8_;hvL=0<0^L3&LGR#EoICOR%z?6jE
zS%;Ne6OukVU+TP>cU1v-KNuIw{t4_r3cdicUUgB?d=muDH<%c=D0she2+2fvHz&5E
zJX4JP@w#NCX6dO08-biJnD*crfxy4xHF$F6_z|q{L(y^R`NUSFMp@H=g4B52s5J^3
zOJxp2;jsA2wGP{N6B6y-VV(T9lv3enaSH_E7f#s$;OtlmXAB6vZpE&n$1$pcY~(ig
z`utG6*nWQ#mb752n<Stfm6ZHTtx3myZ}^wiSdu^y+3R%l(K8oXY;NKGV%tsZhF#bS
zPNBc>cv%8}O)6$tgw`fh68pX<9Oi{n_~@Rj)kW9^t(z%(%z1kh_Y(A1{Wy_1EP6nx
zfQ*JOGP+8*q|Oll(Hy}LX@+xw2`qs*fo}sd)0!lPD=jrj04(VX!c3Z(L^L2OBuPM*
z51*j})a)#{Ypdhu@#kjBMEwbLXoAx#1NriQ@ha_)PW`<J)e}Ov1+V~#x^50$D81?n
zbL&8$$Vh?IsVOM$MFw2yMb64OSSwDCBw#E9NX!xyr~-|mBcuWCjia6}Mug1R0};Tz
z3tfzI!fP4hq?h<v8M`kuy;$`BQTC4Ap>WI6Xl&cIZQHiJV%u7=ZQHhOuh`Ct?c~kg
zW1J6rk8#g)?)(ouySu8Z>cv*7C#jS(MYzMXh`6u5-AkV@RCsI@046_UHtzwGhh8NQ
zCl(4EJO0-j%rmSv;({#^S7dPchcT!-#KeV+5(j{vnec{zuupZR(Jo3@WOK||9x9?H
zOOAEeGXiRra`k1&{6+Y3wW+PmC3p<*r`*QJk2~cgx}j*{#_*S6=ds_k8oWd)FxC+N
z=KDj4JVGwQ_e<z4?b8W_mhimJMmJ*ku3|?+K}GeUzs+AjkRjZ`M&kVa<NN(@;(R`F
zOx)S?(fj@GZ=pFPv-DGsBL`dooa)N05QEzUfx)P9)7Dwx?Z>*eaG(0!#y_@$tAD@N
zF21=kQZo5y-QK64uo1n0wb2QD=__zS0tnd3W$JEaN8AqBllNYaCtEM?4oZ1ZisWj=
zaOE-moY-F<(O*vVDUv3$^`pMv9jR3&An|&PW6*c@!6sW1b_4b_$^lOC9CF>UsN}=8
zP<s3Ob3X=h#f)cq&u~~4lh^CKPz9pm86wHyT$N#`sz9g`67W7Tzd(xEKhx&v4JqJi
zrdpA>ESj_Empeu0^{QrM{e6&%`~%S`$*_}+!6-RQH7&p0Ki?eNqdxtdqnbH;T)p((
zy`tpT(sR`8f_RL-f&UYCzj7?Gs`$Cp1o}DeVE*5CPhojEv45#9e@sn&h%_hbA2WaV
ze;T-kRb=h{ZQx&vQH&mjgsfB^nnHm1mrY_xEKTJoIOP$`&dPP`v+w4|zaNH>ay&m3
zPvHF3{od^Oayyxd^pNg^<x+^{1q~^I<Y1T~riUh^5g&T+av;s9|KbU1#$y-j21G`3
zvK6iBZd9f!>sWl#1aCOeBnbiNI@sj5H0OiLIO(z54f>&vvrUr3Y|72Bb}3w&iM;n;
z`A!=@PvE^~>oyT`GrTZgxWqkYmh|ZT(?`yx^&Vqjwv*A8a>fWqOAn~zI?l~!@8}+U
z@R0a-J>h2f5zA2;xzSMr2>{^sAf@|gg&6_dHSpp+k`qua&OB(~s$G?P7XKky*ze1>
zA>FwGhMtFd;1;=f7t#oz6r45bUWx?-j-9h!*Vis#khfmkWsn>YyjdZYy^A99@%j=K
z*IYAR`aS5eAi&Da=Ymm2M>M1gojRPYkf4O&n6&IBXK0#}i_|!31x%va6_t{aMEdrb
zB)$6wC}z%>B9)Oa)Baoz*}=5~mcZ+v+rpElkiQ5I1h0v-#T6yBoH05;zhP-NA-$18
z7%<2g2@kfJt;Z{u-(A1|7H<*%0@Y1l>DmIlVnW{N{qP0<Wer`Sj(yGH=!rqv=+0G(
z9uPE@Wuiu5k#|Qt5zJQB%rZQ@dt>ZP{-Jsa#@>I4XoMkuyg0uSib*J}dex+Hgl22k
z(Yo^T4EPZOAC6q@>u6@UYhBYM$XOs!!q?x2a()h50X<5L!6%`yIG%K_^$Z?tbRC$&
zuE!F9ehFYugHv@@v+d8EwThFP6CMb>!=$H0kGUkQ2|<Oqvx5b{V88;QXJctme)Dd;
z3fG?qUl~7AXox{d$ih~bC03@g%Zn_10)8SYO&i18+QNd*on288c<ck4r04R)nOzb~
z(0cw^Z7`F-|DR<cMw7D__Cqa~BLe_%{zF;(PeqtIIa%2K>>-B6=BE1pCwpFvoy2`M
zB;OVNd?`G*3XRn*ox8Y=Eh<-`1{IDpAU3ymk@1$k4o0;2L&Gus+*;DL)xIg)E#Tji
zO093B|6-@U@|Z`qPn1mTUc5i9A&o2lSUa_TU5`kG<~B>EW~vmmZ(g{Nfp_WcZ0VfT
zw$X?xjVYGUeBQT(F5;<PWh|=cA4k6baURC_)=Rcf6nx3%8(Ua63f^J(_AeGn<^F1r
z>~5P<erACHdg%DBg+AK=Yb_>J(te&aacRxkt}TsxT@hM17f-dhZ0vUA;@nGiazCU?
z#j(ZOs}n@oR_pl_;^z&H%x7QvBQJh7bmx1)Tzub@P)}d*EVeL>qS1BOPfkwf*Ydm^
zbP7Q~hXm>w832k8@zg6Df^ZsmO3*Hi#t|%4yi-)#6+2(6a2@fahTbdcZ|5*RMP;ol
zB8=xr6&+C>e|D_RPc<Qt3BQ7ETOXhxHe`A_S6Y^H%>IxsiJ^w3MJel6C?1qI1HRUG
zit~3?t>CBjSjJ1P%LBoa&)+m*K)rofc2u;&*kz<eF&chOc5&A=yF~snY@d*TyG~0!
zR?HyG<+{$Ji&RF4lP4-R7zDM(cf<=6?3AoKRN9+msAonBGoLcY1%YlKc$LEdZ+&T@
zf{Lj#VMB*ccqT~13imgzP7+5OezUjJ!FN%Kqipis{gYpaO{p*!fgvT#QMsd>Ff2Dv
zXyeRq)!MZLhgdC@+uLY>Kwx~9^%uck;Fs=|VLN~=667^=(QvsqMy`XtapkyWb368q
zPlokz<g{~74$aBInpum+$Jc9*e(B3aA~U(z_2J@gT!1)tl!`p5LM%X!F*UK_a1pzr
zEp2VHy3naoQg=%Ck``^r--Algu=2KZu*6i9UGN5y=8%4+E&aUIq?z5F!^l({BCp%<
zpYTas1LJDwzxj|RHe?VdP$dMwZi-r@G60@O_Hq>`Gh#l-@sbj~d=WQ>YkQg4R#IUO
zePRd)l%tjVrtX9ZmE@6HAGW4T5??dwI|()@h2j-ig!7$oG4JZhNv-eNgy^7-Hu@E_
zG+=Y3;Q~uSmGEB~Q%N?YvZq}@wFGZ`l$h`K(kfZ(cBPvWtfH%)m=J_nq)3)A0pk6#
z=md026*3QrIlRDa_tI1FUI07NK@L!E=;o85t12duqJ&J*{R!bhg^F{!t==fYTD2Gr
zI6kc{g@SdM{QxAP34)<os-^sf5J&>u&w{K}58Gq%C=<06QLoyqtH~z$$)r(4$FA9b
zo%4%m$im`A@ew2-ScSIUmMK??K>pYRuzJSvo-$b(W4kPGP#Npyx@Z;#ed?(exU5U3
z){F-N1wlN4Pu<f*z)McNIm?7H1g^vBiYy$^F5CyRn>+Xj^RshqAoC8Xn0M%pkB$z%
zAsZv}<K2jKez<zPM)amj(GfKa;hB|vHo8PGMDy38D{x@ahXYROp$wmKt(kCsErd!0
z-<{>b<X~6jJqCI1e7zV$zdyn3q0QPvP8_qw(GsTT#$R|~Vh%VAje~+AKv6)b7a#~f
zDoK-uk@w7G0a7pDASEw)sc24oP#O|&%+GL`n4&bLMu#IyQc2JT6;kMk@^Ux0RVL{}
zoP)k$yszRNLkRv}h5h@|4fIv%V>Q&+Go4gz@fU_^KYK(mx27YJeJw1{)^g;;UO<ux
za{UsjSK+9%ou;l1{Hr}t?*VK*H|&A%21E|z7`*B>`kKlR1SXG>44gm|htnK|ARGoj
zYAao*1C_(%6g1jGkpV`D50Gh2oSly?uMa;LdPj)ljl~`90n2>CS9(V6d>AP;L!U$|
z`h)~`-$NjS1QyQo-CHsyP;*6<(?E7px_wd3!}IF+m1k6R^UWYQ1GrO5GzsD4v_$JO
zYsIV-&caQw4>9FO$N(Y>Q%d&tf~mWktM@aGj|f25_D>Dde9kIzd5jVCT>yC$lgQut
z#n(Y+ym=SooHU*JTDMo#UJ*eicaiI72x(1^QsCw+YE16+t$O}Lr%Q&{mzNy60HMXe
z_CB1mb9c_0gcd2~)8VwOp|X(M%k6pPvaD*h)L|PEI{f7|KK=!rfe9|ZoH4iwa5A#$
zIg3L2c<qk2yxs)do(BQ1ieM(4tjxel<16i`$82p-Di1`69R+y$rvmKk6pAOSKQ5J`
z_0Per4Cf<gm~<U~D|$mCxONm%6CY2Gvc4H}d`de1s$XwkQZo$8o=v=QXPoN=e9v}1
zB<CEz51R~(HvS3B2iMd_Py%lq?F6jU4^<vS`J>k!@FsY|XLwms^%Ty+o_gA~8=?9m
za%+t{v2g7E*fc$IL_b0^zCBuSIj}KuZf*N+$ohH;zk+|WXR`chAWx6y?6uoHzW2y>
zexYsb>-yiLsBME9Is|>z(nxjQls?tJ!oFmR8;Z)YgfqLkL|;gW@W*>2v3r5NZs<Gi
zNMs7Zgz&jDsmivMJ?vFJ%eR9{L7Ib!>8=bl;JFIG{66JRBSB;*>_bHtZZgakJIB3Q
z%fpBMP89j7If#)aN4EOxA+&9_2Yq_5aN)%czVus_P1~ZFh|R|uUOj>OfOzJr#eDvk
z$iK@$q+{Tx_5b;4{pA09>vuADaW=7Y`$v&RvWBkRK?kDGNiD%bC>OdO`5Kzf>M@vo
zgIFyfyWZ+{=T;Amd3eLxSb>z1gO8ujEDYr<b31JvGzZdnI;Yd|lmh<>8~Xl9v)XI6
zH{O>I$&feS>)wj&*kwxsKFMd&hxYieiEq#fQ=@8eqk;9G%WOZt9N+ZV6QMEwG%D&$
zok=h4^NII6uy62l@Gd6RxX_d5)27^;x3}6Y$z1XK(zTaKBOV_<*AlnsnU_P@um0ca
zKK+#eIN)b4$zGVtS~{l1k6LPMX-00Oox3XKx^evrM4DEYU|tj@k@Fu@-u7Z%>jJ;-
zYrYRo?X05targll<l;*g*fmR7ahhY~&hD+4xbb=EeW(0hJ6?D`pJ*bLs*7$Ja1cD`
zlBTduoKYumaYLM%o}KZQ0l@7XFP-VuI<s8IlACWwmy?QhEME)G{eu~VF0W)v8T9*7
z3mh)07o%7DOao4IotqoeXRu2PX=Afig?y9vPS^eR5g-Vat507!<@Q0yljoedf|L&>
z*2Ts?=X-xQ>}~;bPBERYY60Oy`O|Z#ws+CX5~!$%{i-y@JRp8sa<O2N3+fZo29%bo
z668tcts*M0E-LqTXeVw2f2?CQv{7W#HU;V?(gu&`xU>=|F{Q8CTT;6`jknPOGcvV@
z3cvlUdg7Dsy(yvb{-Tr&cd<F1w>6?dWo{I`0w<aW0C!|{J;AD6<GG<eR7Qk~MFi>5
zQJ=LqT~dz3l!HlmQ$^>}HWskGa5yr|tm=_LGcv0`DSH5H4atC?!WO3BIgtW|%a@Z7
zf^$(}eQ9m#yZE}R1C-Ix!l6iq$N<EQ&%rs$=d4HPmNhLQTfb!WXz9;}+TjDL<2M42
z{2=D4fLj-6E*uMWu<KQ=v)Zlv5g+a2u}`16k)v(BpQfa;7<`MZy2BlO=9rHEr-h@;
zrsm|lUo>~MWij6&nPhoFd&~?l8N38s<H`z^&BZkHPsZ4LXV%}MU*HM)$dOU#h~rTy
z0At9t65AOC4Cw(i{pe->ladV87pLMJ-SK}}0sJ4)eNqBNcw40DepnGO#d#K;*+OBM
z39$FsIU&m2<=akAwzx%-3%-=u`0V?>HODEC^UyBrrY4+gm%2*d8wwpuzIe6R=f1rF
z5xdGR^JfxN!3Q(p54I%^8050Vn1b?xkVmrTL&D38&$G8Z&z&T*!qWMdmHCs%XbXF-
z3Y-<~Y9>`_qHm8$WN*inx+$;(LjsSZtFR`w_Yu!E!GtfkwmD0h2_i2*tmu=L_zJt?
z!TfLD+Hws=KSTt-7py*eK1x;T<ZcK?I7x;qItlT9MGDFR@@itF#Ob9I4u5r3whXN;
zMq8m~70&*|@JL@Y&Ra3eK2QM~H?9lOPB%;YT1#tiFWXw>#A}wjO~&%OO%bm#p&F~4
zx(m%n4;*<1je@INC#FaDUK*RHKyvu&GE>JjHO;EGnl8-=#miFwEGV_Ki5FHS%*+l~
zIDYGq1I4c%?Br^`j~ME#&lVPXXJszxA8e8N6whW5om)?3xcrKyy~+&LEQl-yQCFwR
zod?wf%B3J?DKKq3zutJ4SMZK6+6aKVaBq|N-i;+w_7{H-tfFb-{LMWu0rD@qp6QXu
z`9T3B^s%2z^K8L3)4B{U68>fqS7p>RNf8AQ(q@HUR^opqn7J5-zUX&F6y>zHPt>hf
z>%EhCrbtGhl3Y)r6IkCiZpLB?W^H~S*IA$1Dik>SD<%Nr`F9}MG;g2zu~XFR#JOj>
z*K;s+igYf}wJ)U>d*pW^l3SYU=pR#+)x2A0Lkg+`xe-X4h(6h8yOSOd6sjaOxnUj|
zm#;y<R)J@6;)f|gU}t6y3^6RU#osmB&A7Y#xe{4~N+JjhYJ*<Ft~qxD)wb;eZeHl2
zm%u5c<D>oRUx#RtLt%=}Q~xMgEUV;@QZRqjHVw`1Z%rje8xncy{KU0k)AG*dozxFa
ztaVn`zL_qjxlFO=u8QX1X(aRJ!v6U3__p_Q>|T>LFQo&1bry_!C7Ne@Hel<ZhmlpV
zlW=0kc44+B;knZnhZ5m=9+s0e3yM#>v+@qFL)6w6dRHMemn^n9IO+*L**TFP9531u
z;dKU;^EXow<>^v=(jnodxRT53gPE6O5*5BM_maXx-6s-vM-D-m-#(|)KX{5f+YZhA
z*iM}H!JJtTqSiF!_Cqi#!9tq^Dptz@A#2XJrCFyAY3w&^Ng~~)XxGO<6VI2CTuFyR
zdkaIb(>(?JK&e(IaUqI1CBX`H?CD)Y_b%k0BVB62hd7=u=4oy4<-z6IK9~jni<M`T
z6wxN;F{a4w)ueAIM$DNtRVt)YHz#kVJoQ0Q9hrJCC|cSm*LioTWv6bEcNX70V6jDa
z(_^hq8(o~6eJ#I8zw_&$_p<?Ee|(wym)bc2|MvE_?~A+FGrHLZ3T{BpgSW$zewY9p
zw*C5R01nV1rp=9G$*YizPDYxHdeOxuH%9AIFjG$idwONl4HP@+>lT|1?+}ZEw7obT
zjEcrLxmB&I3W(Ue`GP5JcD$THzb4p}l}v*t`F?7O`+~^_i)T*k!U{U(^*0kc9xkBg
z6uv;;3_#y9;nLUQ^z=`tchRf`@VOeh!>nwCaUERdUBGD^tKbLvf1(3fuSD)oKcLyr
z4`}v()I-_)FqHO=cFuPCKbGA8!U_HfIg3`=vHQti{SkILtm~~ufSMQcTBC$7Sc@8g
zkXo?j#5u?uu+|fA5FYjJa0cTSqdWpqZf-qqZMnJi(5eWH*-Th0{2t$pm6t$?J{f$u
z-n8eQ{hfubrOB%AU=y4`>wZvDD}IIL1LlDQx<jy!hCp=3M6N>S&v=C`qlqG=og)x!
zKotbmRLPYg8)(520TECu)KDeE@u1RQ%&3X&r?)Pi8izLH>N@Yf7qPaYhP&fV=a=J;
z|9r#w5}LjTMa>J(oqS7TO+D3(5BtLm<AEXz?I#U3BuyDb0g`}3rieMdWF3akB-c2&
z@m@5*zg*XZqCW5*qJvQt>%*u4%N#)ymP>;r*IB?S4fDN9DKK5(Qmwnw+tR&b$kNVD
zQPBMT9aN`4VLU{1V1P<8pzuLbvMWOa>ZM;QjtA?;Ic>NogcUj9uf>KU#5c%^6sT>X
zJD0DrdaqV~`DP@WjrNpo+E+|%BQDlr5?59M=d6-m(Y7XAbwn{~bS^XO<he`w?m)AQ
z-K1e&u|hkyiE1|-@ym+FRl{<+czPKed9%259TxVnC!PP*FqnGYE}sxje5*TvCFJTo
z?K~TD6E3fMJH2!JlRM&F8Q|B0YbNH~tuaSHY5&W7?B6YKW{PQ>a#Cl&W>!+;%``6U
zQOpz-lj38q21x|&1i%VE9*33YvB;<s3YZB+EcWRvrs}DjT|<;%K@RSo_z2<*GRS@V
zLSS!&&3>2enw7O)-X8cM2b8$j)OOHl>a>rHMjnS2Twe^CUwfy|!chmx!&(Oyv^s7b
zJN<teraAxo#fQTJE0#@W!)wzMMz<muig}D6U!Bol@P5$AWZKK*-eNMrM%UpuNF}?O
zECy##CWUGME2o(l40mzsLTMZPNWL9lThTEIlp1*+-Lz+ciIP%)mS#*da<3<QIU2Am
zxivqPC&I_dR4f*w>JqFRE~vtX)IqdV99mi*_%Ls+thmcy-&B5U@9uBP<m*~GzM3a&
zt!g^_FBC5Ps@Q$==P)W7`XBwa{s)(~F?9d;CBVNkX8)<intyUdHpCEoc4{%&;G2O(
zTaZ}<v`77EE6WvznM6n>-iWHk;@eo;C$EN?-XF6y6B<l3EdmPQdkpA*on)mm4?ZW4
z2fODMPR;B+{XO`xgvXo(Z=`n$_0^jg^@v!Wg+B6z@2LJWsSR#>ksY$4AXQzVAQ4Lt
zIZ(w2T>2%Xfd$PcUWRb_4EGYDRgpAX+^*t@Y<2hO>X;gZM7YacyhvmMfnFkXspBBU
z|M`*70#&GPA2;XF30$l6y=n#LghI~G-`PHDa6*Q=!}YySeG?(X^)L{5ihY=JJ<WhA
zBktBXfB1w=$;Ah#<)kRIu3$=mt;-$n_K52BHUjLN1`OQz0<0_~O}hZtVJ!=}f{wCE
z>JAL8l+{mfsOaVF!$`b)=_Peyo*WCWq@jnn2d-I07KJ9k_O6#qF@ioNbMW?ZIZjF;
zE`O7q1T;|fJ>;cdk6d>e^au8lMI&+@ot3|ndT4QycKf?%?-A7WLp0qW1-VfU{>1bW
zOI2h}50xMQWH;G=4#%4KbGC}J;45*1ypeG2giIqQ2+*;dId#&jz)Ut`=8=sDGRDwF
zZ0{1$mWdymyfn+lsEFBuc?^bYZe&o3H_o$TJ9?ZZvrJzsGcFmkS^=8c2G^K6&Weha
z6g*3kUQ#iFyt0`F6<re7DQUz=H~0w2Mn8%LBNGu=O4Rf=0HwgKy=6b3q)dIe3e&mT
z+cq%tHzWzDNfJ=Uh&*H@B~t7%C{hX&N)MT}k!qPr`fh;|@A}5#7pCI;(l}YC498&D
zDp^nG65%Df<`7x%ePiRh6^E~M@9+8Bh1X8d_A9dl0a4tPyotn`zhS!Z4w76(@`{aE
zA8Pi3Xzzqv9Ja`U(`}LV$jVWL0^N5W$da)y&U9CAi@?qPrqdy0re(e@+x7*E8>(qk
zPyqP6F7~FUdpeHu{<YL{mn9}M`n~PFe1y}!`DL9}4HZygQRv~GRIE-*W1>@kge9Zq
z)(91cQ_8Yuv9GyO!v0n{2^~VL>OUSVtgm`8XyHURiC2!h>%Z}5eL}by3KI6)X$(rx
zS37TqBy~mD|C%<24XO@am{3A>C(+0yzC+wJ2&fzjW$%`hbr{NKdhU5UdvNa7dq#aT
z-C6xZSxMExruJJCWW_pOE|&$pw}faH1UtJtTE>Reoay)0Vx(7?b>)2WW<d4L;lNl2
zE$D>#qNf%;<;ok&1}o`2Q^pr0+<}Lpk;N&dWW*3M+BeKZgB5muVS6sMyouPP-$4Xj
z016ymNf@SC_b*u6>Ifkk(q?TsL81v#?riv8m=H;(H=ZoNqF#0Ukb9GdcZ4}D<6N#2
zXO4H4?%%WO2lAVOy{yscZ~2sq4_6_0tYlXNqO=;%WpDgbop7%=Dyz6q+<jZ(OZE`z
z2PQ;gjVw4=iB~Xt+k)(N0$_=qwTtti`oDx=WK^}ACwRL!xrs}2vU`Ir&E%S=^ug>=
z$DUHe_E3E+WL^V<D7l*89j0PcrF8v~FpMtWvK<gwchk^g*Mr2Dws$Kb9VBl1^0|=f
zM;oh+U{!L+z?1zXqlNyWWHvENM9vf0pD;kr7K;SMoI?CL#rR=0`fu1Ug*uOA>Ohj?
zPt|CJnyCHwJdmPc&$Pr_a*O8^rn47Q#QC31nG+Xxhj;#SV)=IAC+_~4STsQa0BHVq
zP~+b;pRtXJzM<nU*MIs!T~s#y70~^!AG8==7J)H9%0~hcDc?5e5NM!?O5R+v_Okjy
z*NR@}tEX{<gC!MQdwnh4DdyMAOTH2$Av|ZPB)-{!J|Uq4jt$xUS}ZJeBJ7_vI9ovD
zz9bpZW0qziNuFfVWJnYt$Fe4)O$@?DG-|!s<4AWbWT4!C5qumls>8*MqVTx{_<PB5
zXxlfst?}c3;hixWLv6Fy%5O4U0*+LKOO^56*mtyMt_^uK<<Kk7yv4?-PU5(JFmyXk
z+nIuPK+AlUk-)9W@197566*FQFr{iKcbw%Y;v2|PU~JIcbk`>Pu%d<MM1=65N+e4U
zAhm#Fi+)TdqjKk?6f1qtW3^;-8?E2t;Riq$B+wYibw>tmk9o0!YfdQ90vHI(y~Pc?
z-X0tIrfr^jGrP|mo^S_lV$nA9n_SU{*V0~R64Y0CR~>WL1O61SC?vCUgxqjCRxk|7
z_J_G8_S`oaayLEDoT;mYXow3PA2Pw^#bvaARG#(K^-C;gRLDRp0;&glDAY;r8Xu=E
zT!i*H`q>D7(O&kL9fE7Afr^_sC8gkDtqCoo{BoejjT%H4QRE>f!P0wkCVu^To189t
z=ZYCzD*~OK5^w#K{q2en3Sa4<&DI8NcjaKtw=CtAF;e;JsH?rxmA2EDQ~0iwKfli+
zDF>HzK=oFA1@6|L_d9J0{ru?RWHBNxydp-+r2TiluAhBmZEZ93>~HAmFHh*$?CE4S
zz^F)|l%Bpmq}Rt9Ha!xID;`I#^t|K?P$7qoKr8$%OQc#`Apd4Zg@uE)zM*4|1C`yh
zmw?-ex7*!^N+E@Dj*H*ZR)=7Pf;SuaEh$C~&#EpY(<)X)=3J1!9Ncr76y=Cjh@$=g
z@g9C-ZO5T;=V)uEzw6oc?to9z(<pGAXIpwsyMeURM#j5AIi-C37ZWadGbqphqbSY)
zXD0kVd|E8bER6pTqEa8#>sTytm`^^x-^soKVE~eT60(Vj2!gZ=U<i|{?egYnj}417
z2bWXU6yH9VhMa9yH4E9!cdN5M&kG-$D(OulpKg1==+2`=CFj=$?}$y%X)BmdQ!y(S
zQ5PVba1}z&2hSI(ZEl&21Eq(^BtF`tD&K5!Abu6Ii#CCG9+)n~W0+s)A6$OYvK9Kr
z3rt5sApSusy0h=6urG@g`IY-WW<5GxGVLqivGtEXmWUx$k*9<U&%bu_kO0hizz&y;
zAnwm~6jp(7h9{Ycw^iT`9CA$!gjeDsYa8g;nbr1`BU87dOC>@qDe9VL#H4Ne+%swL
z$IAde*=^mMTwpu+{wnXrQ43U(<Jx%aF$F`WtwU9+h}7`8kjjhksGXvGEiNsuj#1)$
z+cMr12~`n5fOIMwtty^^iX{6W_>^YSZ}ed~t)`T2$9{JDE{Jn~5xQ|HVE3(-7(v&;
z*z_6od2T(O(7Feh4M^EgeaZ}KKc>N!Ms6;nZdFo`<2QwYdWzdL6i7Lf2o4aE8Md)!
zNnYba+G&=z#0+TP)|Cj|v&z2d`-{M(ONHZQ3o<M<G-Qt^+L=G2XHW#Mt>M9s(-q)y
zUg4We@?=L-RSS=-64G;v$dk(@@j5ew68NkgD>fo;e*JANohVx<<Z!%?8pwx*{4lGe
zOcX_6k=&BXTj|Ae<lWe;MZY;A=|ne%GLdwV6))$o1L!%+s0IvKksfLK;#E)7*eCxQ
z6yqToq;AeDg<IV7<VR;Nb{HdPk8_gIHcL@a6S=m;uDI_e+5Gb;*Zz9X+<kE@b?3dh
z=cwIk-7_hIb=mal`Kd5%#xQ<YY*czLE=I%j!v77U*A*r{cINn4m-GEKDppR(N^bY8
z8tnEH$ur$~yP>~;l=?xMWUTKY6`9pkPlW%Hw8m&f2~juV99kf22J6RZT3dtQV2kkg
z9{GXfr9#?!cm)!EX+SVH0q~VVrE0alxO$il44ac~dn_QkaQH+VyE1sw&>3PJnESSL
zlRCEWVyzpJGE@Fnq&Ju@jlwx*Mcsu<r`2MK$0JvRxoVWGJ3kg~?5N>$tbv3tKi5iB
z2WN;X&yrgM>7v-<f2l<!n?@@4eij3cpS)bM|Gl04>sZCe!tS3MS@%y=?#7Rg(uuyq
zsa^(=VwUZya4MJtvmNX1dO$YZSfZe0)36v3XhOsOx33!tsdP*t?PXmkL5h3V`_)w^
z{+q^6%wTN#?iuJ*O>Y#YHeD$-^(Ixy8_K|-xoJo&E8hSni56u%hkbe;^V}`FXI1f}
z|6u8O*J5{9?zCNMBB}9BqKc$mF%X>#Wm5Ai=a=XjDxOWVOg{K7Eu~NBXlW75HY>%4
zypa9f#*Gv(v(8^#4=Q#3c<48+uHM*G_Q>(eEfc<TA*7|;CR^=m_N^~xNpkhN<&j?I
zGT=Gx!R)1pKt1+?)YA!6s{)jM-LMP=>~au^WJuzmWepQ=Y8TTVOb)-_WGg)>g|d2P
zUxyrC$>y~CFXmb)(QLqp8t`9ahPH(@0*W#_-SXg@KxUn_W(J5ZwHNwCQ+O~A+$e%P
z146Vu>Qd+j_C1dtV=H12sAN*^MQM<(0(NR1ulM_L)Fp89Vo*Qgz;>X8xwa)>7bu-e
z0UoLI)2hJ)hu}WiB(XSpwjIEdA2Vnnt3GQ|@EHkC4||X$Z6=6-Y*{QMThIVjqCA_b
z0t`%tjCt)zXh7{8b&O!XxWqE??2df7>S^FL|0^Or&cjr98Id!rouc#8ktgR$aOcW+
zwtdYW!O7NiS0akXlc*^}4dt7osh~u><kCe#IwW3ai5n8&QG5_=dr|5Npu;$Y@Ees;
z@@TZV+`wxJ>eIx!luX=W;6hsw!lY|b8C6jlo=0w6w3n30tkHIixe6+Eii3M}cC@Dl
z#H3<HaYAg^4(vdA)-zCQ=q2mj%$V5XgR%`i(F+Dq1S@MFpNhGo<Mwe(w{C(-As&4%
z64$0L3De4&%3(eW9z~htLMK?!xZ0$xf&m>=KCuo8r(2AE{7cRj8tLORH*m0k{9kG%
zX+bE!$&s+~uJ8APCVF8h)6U7IX#{GTD!~u*p@*lO>$_xaS-U6gHJ9KQlb(@LFQ9$|
zE6^i#s8j(?V!<)eFk<>Vi9VImOf_ug);7+9L<`QvYbcdA5;Y9Q66hhmrDN-5cKM5&
zsFLHbW;2Su5Jprh+ps63-glw3jQrbd+^6zBAVFIB+d_=BPy;p72tUYhswm{qx%aAD
zfq*J~bO$3-5SwVS$5gc6%|5@-y<J>Z3ngeyNdm>hy&&}M(l?&Qphz#;N+e<ge8UMX
z#dJ<TFTrpumtyZo_*24&65cwbb<HqAz%o2|$p(=R>LO$4EQr4k|DW$v0GNnxaH5;4
z(?ozF9*<MDmEo7Gb0aW6UHRUaRB+(hjonz5^A>e-9mTy`hgGrnM<1S$^E0I9*E7;_
zJ1tZWH~GO%2H;O>bG_SOGbQ~ovt;S|wN@pLj`dtY-Cy_jCLZkioBX=Hv9cKW9yD)e
z9aFc1fo$iIr$ktn-EHYR+w^39zCFelVyWE3?CC+zh4ZHupQrok{Gscatzz$=uN{u*
zY;1v6I@svW{R2W8hAlloGNysK3{7VhEHVXZ!rM6WYLvUO2;NRefSczN*8(VJS)o<w
z?MUdE41@E){CT9MQ}4BuN=VKiuxaF*7dYaEG5bd`zpEFlGURMW8jspGSR5wh!!njJ
zG1YzDiNozx)AY<{lAi`&J#<$TUx*@`*0R{$W`gh)kD)eS7*iyVR{v`s$o^9g?fo<C
z!2d|@8UObW^k2w|i<9Zk)!$E4tD}Xj*+2fJ$*Q`w>;HmP^cf525gcS~sU8UlC3N;l
zBtYV13%1FdR-$fOo@zQf=~BPmW>!bgwIq~DddyA^vX~nWo{QHYZ~27VJ425iq$xyj
z=vx}6Yd0qLmh(T6s~5^K2VCCSR5=H5<52ag{Acl+mBrk~4@QqHac7MQcgc$ryVeP#
zWF__J@aMV5$efFsdKJrdGWJyWb3@}WE_qZ`jB6dhCCO;JxPqv6x#>&42CDf7JEs+|
zec0Tebs<<+DmgOlyr(F&M(_vR(WX~2Uo9zz$b^+Bs-5>GQNi2exlg+fulmgpg>}Ba
zqdaU0cqC6T5&(1eAk_&<QtPuf^KdjCl1&wpN_J|BU?7qNEc*%`#M6$Tnrkb=YNYHd
z?>_}$mjmV@MuZG69@V%dswsnmOAE#0mM4sZJ`81)WPt#X_BOlABs$1VV38%&Jg+k#
zC~>|N^X1Bnv`(B*@FqyO3$;QUzao0ZWd|}lJDf)$*+!8<3%JcYct}WHX-aKjWdY^p
zNq4S_QrSr@!1nz9-Z31PjmJs~RcnXp6R@_#ed#X^$0~(>7tq-%+DS8op$|9H+<-X9
zBfv)t9kkOhQ{zT#3%^+O1an07{GRuIbpXXzM|_YN^;kbWV9pRiqY*q;t!TTRi`_pv
z73RUcd7$c$XPUJ@qAGp(Dggc^_}O1q<1K4HkbF`_^nAjibV%bk-jJ<&6@jQ97}n2M
z*0>xqVGIa<CLsdkj>m4@z`9mTWB~gO8I&>pL62|)g3&*DPlgFcU9nlo)EhSqYp1Uf
zEfFMH_3FxM=}Or}MUj#rka})Nqa5o>6qh+oF7hNquu=fu(Tw&xvvwY-M;2XQc>S0f
zwnhrcxyE8_GQ#Q!VH5l!Q7Ty-&F-a(4A%^ktT(9K`!aAD$?h-QT9|l+x$T+EO}gmW
z-`{_TGOCwj=RX!tq7j&t@v7H<;ca*Ie80x<`IgtNM&Pj&p;cAC!Xm>jPW&2KP)b*d
zB!aU?Fsvq2)-4NOI>B7xZeq<-4(Z|y<iqx=HntN0!IK3Az2vds;fI5yDp%*nyXEX(
zxG$EIQ9PDvc-lI$aB9Lt>LHNVOJHseJcW2ujT}iwyVq=s5;nJ)QAts{G>6rARH-lN
ziYP*lbU5}o+l~<n9V9f*Z49V?S43vE^Z-exzk{?&kL&RJubt+z=7Y!aXP-I!xn=l=
zz=Hn)Q2$lnKR1ll)<%ZLR{uCPX(;}CYFeq~a6dIbuSskf#9JT<I)JED9EG!Xvk3qM
zqn$@XPe&1<lACkw^>ITnm2SB(0p<dvg-Q4qSux73M~8&!xh*=R`GOU)g}rl6me^m#
z{>ihrITfr^rrEdeJ`>o<hN3<BRt=2gRl0{NA``+0t|g~F1wm@q7%5Ex9*~d#-c-s?
zCf5Ta-kSI|biYeZ7{me1nN=AqU44N3u@X+_aIP1Q0QWZU%zeYe0Dt*me{Wj9VcDW}
z-DUKcH!9mChfN{etni?#=~Zp!9&W}be2y56Helh@rSqP+-R8%A85<%_v}z4lW5IwJ
zT6u5uh=i8j#M9~!iWwCg%o!?kj}UdYw8=myh;3GZNDWkc>}Qz80zx@TOh}{DOyqrU
z4{4YJ)lM_KAPn6A!thm;2dvx#nhKLmBtTBiQs$LYLIl%3g(&-2G%7&O^P`tZsxlAK
zKso2RaL*+|p?{C)8;lJS#4e&L&LZ}A9lw;5+y55a{lf{?7(!ll=RAbSWOg7as1R37
znM&px?1g5mglMR3Db2V1%MDsdC07a-28pz2kJ2-ta-E>Crh$8#FMGqE%Z6VAS#fP`
zxp97JRLU@&+MQ5pk_Ndq#)|~BaTI|+d_ilfULc?J=+q<m6jd@jCR+v^dDoGWq{KPD
zF8UN)DvNnTShp$6qd|<&SAIr0V?zb9PKvI*g@NX{9596>tGF$2d!J|<{v#jgCst)+
z(UB-gdA;1ABT1lGE4V1}E$M`x5s%iy!P057MjuEzbq&h6zFn(hA0xAJ%1{7#TuYoN
zEX-^WUuKfIIiy<CP!s$Odg*tBjcZOz>kOe7#f8JUnUqIlD0|fIZC7e=4X^HW2e2Pc
zG3*3ZM6K|4hTN0Jts_r-Uvy_+g9F`E#2L2+qcu|+yQLv0I#tY{3?wl4Q|2i)DwP}P
zFNBa<C~C06`RbELs9IuY*O_)2qkwSIxkmqeofx(n%YZkGAt};qT!n8Zzc-n=EWR&)
z$mkH}$%L3y+#Qg-16I3LVpOVXv=PXv-{BO%3*rjn$7YhG`qRd!n?JU(3}<pyqb>D2
z-F!xwohGY9LLxu#kq79(VjKTsE|_L1g)_!5S)U?`S3Nr?%SpR-+V-i{1Tfu|jnC%&
z?2+1|RmvY<>g;XPF;8`H#YhABYawSZ-fvgS#7ZzDCKvFY<b)dlkm3a=g40bp5jz%~
zw{9$EC<wRRG)&Nu99(dQzZdR1xO(#2Zu~FqJzgw_PIwGe*Y5Bn`l(kys*r<9jrdoz
zPmkuOsTbTn?oMwsvZ%Dsgui1PSxHVRT(<WtbHJ`3<Js}$>;NVdtN6EfH~C~GfWAxL
z=e#!t$RV^LFOu9>BHwkJf(z=d3Z1;MO`gVEpzY{Krg(m=Ircg(S95)F;P+y$c8OiK
zgs)2#3;|On1QIH|DxC8Tq|2N7f9W)1@jvP@m;&8D^)!!sZ+5ri#t|+`O&`NsCl9$?
zQV6m~yXKE&FJDen5??!}U|mLpob$F!AA&j$H=9XYGEMLzp9oFcUnAAL70NN<8<4Ls
zU-UEs3)x6NMSy&Cye7+ota2!!Fr9TyhoF{f4*6KM*>Ao6dfC{j&Ad7kK7-)P%(U99
z+3rDO3>bjba-A(1QG<_VTy!J3zf(js5$sFk<#Z!RB-B@kVRx-|08@_`le?siSM(mc
zn;LPPcb;m^zZJ^up7Wa!%WUefXm$=Vs~<pFaRu9W?OEZ_W}Q;IJkdzu?xMEk2K@ko
zwTy=42nw;Wi}q2r<P}b8t%=nn&(8H4ASH&gTh{x`!jbAffe6t7_X_+DU+LQCm!%Fb
zKx%9AU;MlucB7z0lbHh@5kE&BLfz?=&5QOjIe2A6e%AGxc<DO);Mj<~eviNL+4*u9
zdCuofi{h~+(pWDuZOZS_ZH|3Rhc&QsemC9x{^WIWP39>v!o+lU@_c*ylexIkyUvdr
zg+y0wzFiVA;&*CBro;g&$R1-T1B5lAbI;;84=d6~8hxbVa;I4-5Oz;%zF;(nYu&^J
zpsx}l+*f$1wYu(*RS%2X3E`JFAO;A5(t_G=(sxhJ62JiyD!{ukoxl=67R%v%2n<RH
z`^M|Xaob;Qkz5S;C}w1ua|Dbq;|=B!8729!Ha_mzebvVA<D$~RGj1xEg`YiEb!W&i
z7WEAOpRo4dNBIu(A6R?l2MhQ=xWN7YO2hW~$qe`*;D0g$#5SN+tPNT%i(5J+lEi40
zpu*}@ISCJ7hLV2>_<-YUZaE;Dbz69e`KkL%4?8n=8kvz*;~1XKptDo)DUA#=t59Db
z0qWL2>jl)wq1p^6bxgwM#AeW-1)u@Tlhr7j#7lMqr7UkUnKdPi9$b=`LF`J<sz{?j
zlnUIXZx4}ogvD@TW;e6zxDf-|Ku-dg-9eQm&-d*!D;&7=WcNoVY(Ao*rO+r&H%EI^
zJTO|`F$QeCitbX%^@Q%g*f0*RiZ}|hqB%yr+wgpPoQiYUOL)wyDy&5Ae~cZWb=2pF
z@79>)^sk=|+r2c~`b8M>dzvZ)4t1{Q>ec;A#k6gr7v5aV!t}7^jef5w7jEXv!DOFc
zlj_QG;c$t2^V)-%2rq{SbS%?E7892dfm_$sFHK}G>C^+OlMX0SiBjmHjM1*u!E8B-
z7NV1lZDPGUa%~d1P)_(5mo3FL#m(rtxidN;(&wTnzi>+BeEs^XX>T}9NW)SZ<88sZ
z#H;tRz!9RDFoPi-XqD}@Wf&_3zP$y#9cPkig7N&eCX{uT+B0i9()eo0`1<5CzPgHn
zikafoh7SYQ`W(~=k3f?#-yBSxrmbvuTK3RhPZx-|)(!!WLu0;o0m%H9KR&P~vWm(@
z4E=8|V;LD}HbR$00Q(k%fvME$eT8dCiA1D`@s`wYe?Jg3z85)YC5rK8h{Okv=}pHb
zn7~C@YaVh2a(6|>H>kP{%JirM3oK!5r;;X-WXY52&7^5T&E1@+iEjGMQr~ZP9<j?@
zQIm_BovyQ1u7b^L)o!4Ihl~G0w%SYGu_Vy|00c~bk}m(h7qcJv)j!Q<)4aM)8ypGO
zAE;#>n$*P<^^I=ospB0|4m?&X9QBh4zsTijB7$jZC=<lv8eDq6I&KAl2m};!rndQ}
zhREikuf*I6=gs^4s3S=rzFO$0kkB`1r>&HdSbot!w<>OnXpWidl!|`c_U3Jbh>cUe
zvVD7Ef<z9(dPv*mGk<}6cWZCcNTk$Ml&!b=pzri<ZPV7E&*ds9*-=Q|lWY}3=8+kJ
zD2c@;A(9a0yCj)eF9-Uy>*#Fi@6guT^@8>z<^6Hb<p&HuvE)dwos1%SjEb$#b5QQ*
z7yS^~Ta;}oMdcK1+gj_~3WW^6BhgS(oS7)7Fy#i9I_KpS6mu;_R#Fqy9RfuVsj>Qi
zJq42@Rw}*?nYykSzX$V^(u_lK2s&5{wl)|2m9>sD0w`s;d1LhY&Pl2E4Pq$dhNR9i
z(1U2Ctv;W^hyDk-99l>dx4I$81}JYIH$lef1;FQkXm(hK!Erz!gB{8#ZSf=#KJk8>
z=7qLmp}>$Kyuer#zmQ7uUL0w$LT<$Z=AeNxykQh5ZOa-n--U;mQK6$Cc%DnbDUNWC
zq6}2-tDlpQvzjv=7uN*%p_Zaa%D0518nq&<{(%v^BcPlDz6~P@!px+nM(~hBT}&9B
z*a8CqA3}{ZQ+b>d0lNnILnwmkw5NI@&@U;NMFy!~1F_UU37)zglEpSh5U;EHC~KC`
zSJ9~+aM&>OG<=^Vr3t8bOG`w|L1t1*iIg%qXm>QPplS%vjb&q&1m=e71>gbc5YsF)
z!Y+B25CE@^_<AT)66p^jr3?~x2#RZq#or?L8C{`%w!r8xV*5RFS%;pi#NoTIJ)>89
zKS(g2c@<Q1@0OE6FBqq-LnTvWEYqsQ+m5k@eN0s3bO;SyRtH$INxp%wVYsA&+8bbo
z_GGk&M@J8r_amLOTXikF2$Mi&ls|rg#8OIXVyqa(k&t304#_q4FnjI-M~*k_Wa0fO
z2S(RiO2w+wxdZub3w25I1Oi0JEf64=e0dkHrOHg1(`2V~{$*JUA`+Sujc2fCWM1ei
zKLzld&>h(XLO-wu%zMtUj-pA#qhr<Ehel;M#ERi#4)TRU!)x0B;msvZf&rxvPn4$p
z0^S*CM4MIYycN-iDJYJ8*@s+s5YK_JBCHVQ@&-{vA{f9Y=ww?N23TE|nZ-xIF(JU-
zR)EThdc%s9#MWjHy|?dJ4}iXt2)U06L}_rR_t$p7A!@Wrqu+U?Ko&XiZlW4l^D;n9
zj9P_S=d1yx1eGI<5{uFC3xW@W#YlE%`78wr`9LFhtW_}sm>E)6TvjcJ$s}5*L5pmL
z8z>2ka8xrmMh=mP&{^O1wn~KXMNc6_s)Pj)wCXlI3)oPq-`Fs&n%n?Lqq;(fn<eyl
zUWHc!HQ0dTSxM`-;#TDO#!rU<rl3<YA#K`2Xs=nz^@3&(1oX1NoF=HOi~_OPk}|OY
z^l*#8qNWK){X+95j@-Z3(vfjdM{|-%7)?<F7I_TD%@iYlDKZRHGlQS8>Ds1$4jzbr
z(vqc34pl*^lEN2COWf0i^V`uw-nYF6^HOwUZtx)s9fWbf{+y+drfw-<!>OB|TNL&D
zcS#AyeD#JCr(T{>3n#l7@}P*$TW7rXgJq23Ot8+0!!ikqFpzyW=o-2#DuuFe{vK0=
z0fvO6zRB$t7a^WMC3wyyq1av<p&Eck(93+W>KR-%jeZHILm>a-eFs&GV^rIEs>?ha
z^8q59=yHJARg0l#<st0~i7BsRx~d4nv=0%uasuiwGQx;KLGXk*Q3fUv?*Ws~*gX5p
z8157Z6_*qu>k(#%8HJg~tij_10|~7o44N|z{)LC(^h6qpih;^+*Wsf{l~!NKq?KH}
zq5<M_$@p(j<2u}7NU2W9B6@Q|%8Ijy5kv&MBJZtf2BNjfn$3{kGv-UnnB2S>T0L1`
z(&eaXRM99dcd4Ov=xz5HR>cf77i1Wm+@I8;cC=O@0f#yC;Ol&XTqVm{{1g4NW9YgV
zZc-pb$A*ITqVv!$ZBZ{n7#eR>C^h*%aJwM2HYUK{-<0D(2IfPi?({R_zO%Xv=kD>$
z*<1iGinyHIiwKtV4;Z8&-!QNyo!7{7d8RPW&Y4qbC|BPa<G(sr9lCI<EC|#fgQP&!
zej{!v-Q98Bxi}<hyI+gud>lOnXFpkLqAuniTNdtYmiF6juCDG05_Sn<3id-ZQKTkI
zZQ>H&yKM)gzMez=rG61Z^0BEehC*V|UQI*bBe?Xp^Mjw13w&zJ{6Y((6R)w7>EIZJ
zV95DnvB?b>pAeL>#70AD;u5cYX&Fh)=0i{rB96PG!+@54JKA5WQbzW#p#qvxLQn9b
z>%UL%XXQJt52G>6sSMSoJtO8>#?52)-@s?hZ!aNte*8X{1o2n39V3WW>AQ+H%%nBm
zdQpO|&*cF;_~zaE5!YBYDBu~U4%(rk(Ey3eIdbE@pl||Ah6pZchy}seV|ns5nAxdU
zKV_46@94&c(V;eiXvY*uFf%Wq*c+_^FDW#m180d?hSd-`kw}^k%k?;i+fs{&9PV`N
zaqvAHLyVah1*#}TA0UHx25d_L%lQoRym){?;~NX^ycftUI5Ox|4Uetm>coeON$zlw
zCsA;eV+SS*X<Z<pi;076%?|2%8QF;_>6ZLY3NTdLiHo-a%rBi?n^XG{quvRB4lH2w
z_4Guz9<hA(EZ%8%3CbCuF$2##PaR|?Fs##NV_;W_`t+Vlq4yYO{DeZmddJOyd{f)w
zco5Uka#S1c9jOk&N(kTFh_vUc1U#~em{+O!otgup=bV-zDB`+|?lei9mD&q+OHmmj
z#^c884lLY=n6RJ8twmMn<nKi<F#{yPTV~3xBUv_n`v@eFShBXIO@?cI!8NM%%8Xxs
z-+uLuXQF3O14jOMcm%{yK?wpb@C>n}frEea3NMlilI>X=(Eb6}_lDSqjm{NHUxUa!
z{rV`<4nbj}M|RLPeQFEi-zHO@XOFB9KZ=!pX&3$-nHFN1&1zlfZiuBs#`wo~E<y>G
z;4c?e3n=e=T|om3qqOP5R)5~y;PBnk*Fwk;B~<(1eLr2weWbpZ!N4Cl=w;aQB<d+8
zHF#oy`rNiX&aK-CBF_Ql3OkI+qyh)o%!J9EtAS2^`rg4%B$NSaR~*5T%GX;ZjC|2|
zk%J7VH=<tyMp2NoQi<rf>r&>c;i0<=r<1RcD~JkpG8Wh$I&#Gtb@*@L<FiDrN;`=q
zC_8_C&Fqh3FHv+G8in<tG3UevGgeuhu7VX!(HfI}{Wi4=YyGxRdg<j-!_M&-ZNkZk
z`HEY3@JGCX+-s5O(z4|Q1QFZOW2se8w68t$td*P%FmMcv8(vgtoK~cfJQVIq6VL>7
zOjOV$RAVsX=I~kTNjpfe^`kEIEKF|+ycz-YS>jaP;~RM<vw#A4Xeu~Y<WX^kj$Fpq
zMn%xTV~$160z=?K8<uEZ%%=*Yz>ma|pN$1To9M7@xWLF$Z9Ch)R7BVpIdu;+{+-{a
zM-F>+-!5VgexO_Aj5>E&Kiq!{Q;jZ5M@=6*QiyElrsX(^gnqPb_jajpn(ifRL5w*>
zlyvl*B~c8?ar<W7KXi$36;IVDi}~RN;=eln3P3|XOSszSEDye4jJC=;tE|nx|HsPg
z>t?qmUH!a))66di&iJ`ZpmSgn5v<wJzT+_BBzrHj@^wE#V|`6u?!)+nNOgQ5Gv6Qs
zR-{sycp%y)$dN$N>Y>j>wyDf&|3o5qfGML{O%)E#tJcu7Dr_}F2vNj%5rbx?ZM8Zu
z2=HzWCy;)pAB=r3KbTx1YacOx%Slw_q#n7(=$6Uof)mr|;+MM0x!7?e324hD!a3A$
z6?~WooQdx~k!?}bo*UaV|J_^kCRNzM#;M45MaqFiHdOiq>N_+piG>IwF6Y_Xn~SJr
z8o0oEQ!&1SdOk8Af0YJlVu!pKCO6Z+n>79AXu>|eG!byjY@W_0Bi!DTXZTq4TX~!<
zW*x)u<wt#2V^1SFJ_`hIv|cztxDK}wBMP=qrWMjLA(DhQ5E_#OfgXm=JfTsORurji
zF;g>C;>Z|6*NEF)x+a&-(qe^FNxxg!@Q}+W;0p(jcET?hDDDH`=Jya{x@TS5Fjl)@
z3otJ8aq2>!y6BMJ)B?9RWLC7iM8EN71(iFK*%;S28AgMbw8PNZXm_y(0DA>c60F4l
zJf|TTA*hiiM-Uzd*k6k{e!@$PY%pN2MU?K;*M(PT`^*9@A;dZKy}5Z$d<8Vx#jQ+r
zDi>1s56wZ|df3?-fr#YuLhyw=d(+-EL&fe&jONWj60Y(4tHYm18LMc;z#IP`WADJE
zYrAY~mhD+KX4$rF+qP}nw(VKAXW6!GTU~4KINh;UM6d7shWEYm$;>hG8Yh7>GCJ#%
z;gb()MYYCCGd8X3&m^^iqxCYw)G!RHzI4jhbW;i3O?9=yOPU1Yg2|f?hw8`Pz?(|=
zaU_0h)z7F2)(=P(B{R&3e96Ed=EC0C8N?U!1tJO|C6Mdz5~8?`-}t9&zYFRv_MA@a
zq*N@vTN&w_h@5kSn~e7aL+>}UMy~Wbshzv5To>ZI(VKNur!eGO+XJ(03~Me`ABjLg
z=XiHd`QQaP;C^%5^a(;jkN14&31}`lE6}CcIqt(iSjkZqUkA7dhe1t}7+|$9xYfs#
zuuUgaYM|xz_Tdz4`gV7NT2o|8u(0W4^JoRm8MJY^-K*}LkXkxb$2a&u_}48vm}NWm
z93pU7mTrnLAqcGXS_7Q<<CWo@U1fi?zU5zmWsfUIbJZ_TF}BvaNJHe54#a4aOk?^;
z#s)hh)@x9K6At|KW%TCedqpttyMc;=I1)5Z!9f?Nm`=A$A^=pYMvjO;M1+oP&$LG%
zpy(B&g9(no5(~V6Ul7+Xv+K*yu{Pf2G)sjtYsPn3b#GXd(O-+MQFVMED)5&%?A~-L
z3BS;?#04+G0Yp<u(QUI)^ZruGHPkRAR^Wyi&m<(NI9t-#T_q>K^JC6?ib7-S9>yZE
z<RgMD9&W8Tnz^SVqG0FvN+7hlu5JI_*E3QhZT=L8CrjcsTJC1@mQ9|6U}X!oM?D<e
zNkMrHb_<QpzRIGWos!<lP`K%rSrNd5U_|ui?u=Ltk1F$TB@TJ+(Fc7V;tRoY_9iMr
zJkhjUbG6#9Xr~2clG^Wx%yblLbEQg7_pCrMWoQG$lwM+!B}~tyt<n8Qht131RU#d)
zAeK5K59_@GV*MCk#MN6CR!%^`qj#0Fthv8WRzWI%`TE~-iu?hpD(fXmcZD2X4jn{7
zfe)fSgO#_zVAG3}^b<J3>E5IntWNJN8_gM`WSS`#I4$RtuCADP*?GIX_W&jwxS%3L
z=;o=Om}N5fUZv|)!d1Ns;5iZ1{7{``rV?<2XQaV&zyFf}MhNvb<1+=!T)d2)v|o*@
zfU4)Awg*|?OEH!?#Ytwa%Ct2Au1EkZ!zGnb)J00lvxwpiEmmr@xIp-rwb$gd6Ih8L
z?T3^muBKb6x5G(sdUVX*ZU{iBZ3t_jvAgMZv0woZ4g`U=D$<ge6VNsmOZRdiqjvE2
zaPUxS9kj*jRA-H}Ntct9`(dM@i{zo-xv09WSvgnr)x3tAr)s;JZ2Fqdah+06SI)>%
zVi~HI@|1xeQ?Jtk69vqO7W08$RhEK7=>)k@!su-m(%)LS0VnWMv98tr8(NRq%wD%9
zyStBAn^yV!+7iq(UPXC!9u6bveQ;%4?9A?px(Ey{BUlE3qVvU7;9FNyCNaR-0Uv;K
z_OD?!<f>g_Vz{cMgoLr%)VaxL;2KQ<DE2Ao%gF8}Eoo%rp^)H%j-G-2rby6N6%O7?
z@*k`PcH75X&_UKN9JMBi$U4E3QWC)sQ|rklfxcTF&?Psup9|Z5SIq(8NBwxWs~HG0
zF9$K5eD>dX-E!}tbzYIlChQxpdBAhkgStfI0I#PeJ#2G^Wg_wiVhO}BLcezShh;zd
zl>aL19LGat9aUH$>{slL26a=mt0>b6ZYo`Fl4TKb&~K6d?ZAJj3SyL+>%yYtxkMGV
zzu1w5F!LnOA+r>$(NRWhb^<Nx-q^0g(zywceY270q&@Z*-=~5jH_y4r>fKeZS%|-q
z2VO}|1g6liC$eoo7IjL2jNtE(U;l{MJDOZnk1TWtlP_z0;0o<{?%x+g!MHo5!12Sv
zufe(#ZRAT;(jL?tO6%^YmYq$hxZsrgGnikj?r~@!e@fe$5QwX5WgL@7YB5<h#STbv
z!%?@p6rTF%a~fp>6)Mq|wMhRBmrTD^k+x4^@U}?j5`9)Cf!+Z%G)IFLrv2$)rxocg
zx)@o4uoZzO+7t=aTsrk;498UEY-0Mk=T{4WhNpKY&lW>%DJ5#;qI4T&e?rg)ZWFya
zjJ=QFxP}^8+gu}z1A#{;NtshmhHi&9U1(a*3awqMd11%={bX#<{QZa|F!XxoAa&wd
zTRgcSskiAEjBRzK!7*v<B6V}3W+^IE;Vdt@Do-C(I3XtSWEVcWdq*fc`e9cWU0XFG
zuVdHRKcp@5TOKwU2{s9_D}z$@b*2)dVLZgER8OZ2S5`C`%6&XYXK<#kT4DK-eN5E2
z_K$8F+M|h4=j6L;AO>J1BRrPK^U&TaLN1-<m^>X&8}&@Sw%?(#_n}NP*f(b?$Ln|&
z*Kat90p+a+4s&eXHKwFMyqz0#Ip{Gro69eUSG(`%50)PHR<BFV*~oE8h930|u)ays
z*O14bf=8{!^)kE-7cvz2e(gHGu4AIYOmw+fx4FQhuAselC9V57>H+!_JND^8Y5^Q!
ztv)(g3Q-YdlhXpO<!w}E%DT&5_c__wZQG*ZPTH~Rewo5+yy5924L)Bp$(}j!Zofsd
zhniKnIvC;JG`4PWc#-wl{@K{Dy21?q5VxGB#qFUQpq2eslg8Q87=2=NadIW9og=T$
zQN!z@y<}?(x_#|XWqi@-sz{5w9X7Etc@%B6Px8`CwtQ0+B*dfG%;&=&(X{rez^_vM
zN-Rs-B)GdWa)zyAFhT(a-Y9kRB-(>G^h=uy1usKKoO7#*cf82=x<R!KN7UJckvHMo
z`ynT5m3uk-bC5%^K9llwqvLCG7t=G`L9`Hdf8_OSGG#t-RPj^Mn7lc@WC3f!sc3bM
z$E?<u;m*cozdf{%0O5#U`j{1d6`dWkr&9EM5xh%f<xxAkwXFGo3bx55m6&}`Bvt(}
zASFk`97ky#?bZs{g8LB2EHJXta$)V--|gJflvjnF_^jg<9lQ2bPWmj<Ek}IgXV=eA
z{%j;`TH5fuHw{;o+A;&EN1f0i5Y2l7q7u)$x4!q%OAk-!K8mc;0>WZ4Iyrc``TTy~
zqf338-0q-T9GjVu)#dyBb-DUJ|NZ+7Z>_Zw>MIoE2o^!N4kO(ZqfHb*<cj>51@JGc
zISeA&7dgmRXY-eY4N1n|Km*><7+z_UATL@>ovFZLHZ`IlO6!+RvA2L*w54Oc&ZJ_*
z6o{rK9i$%&u<vZ1+U_sA59fD>+MM>iG@BY)njUHzWpN713@ABba*F#3#9|$kaEr80
zY3<aD{SMb3moXy--&DleZML5~>1&$xne`A}RAeT{%YWQtO$|#yh5bk_&p(n2<^TVJ
zT2WEz=LE~ZLEph$*WAYZAIYrVO470aqqe9<oq+yk;iG(<xvB|TF+&R{A=B5i7m#5<
zXc>yJ0?+t*ixEVvpy>z|`$}`ap3JnrqR^&uQ6;1$L6GhVjw(JiAQCodHD?ikWDRN+
zIFxmlx2j6UqH$e=P`$d0+w_Y?)QaGRKnBsKFoH$jfIOdpXbO~^N~h5ly=BNQjp_r>
zcTh)zXvt^|GZfO5+nP_7gZoNd;5Czn>2_(c9p@Z&j)K?ckUSb+<ciT*Ud77-)wCl9
z;<Y1iCs}V7sT784E0gdYR|X7T$#-VayTJJZgoprJC#%ljwrX<M9?uK@l@jhvY#%$O
z54cf!>2Bj>XD-_bHDB5O+~gcbaG)h2F%=gk)?>k^NC4(`6{NEBLfa@Oo?~bS8`4N|
zIRZMT*Xn?FhByB^Lo`-(wA{*b5~GazExK=G^hl|Q!?q#Bxkg7V!R|3j=*GL<&8JX~
zCbqM#Xl7AF{Y2VB@DFCt{TlT)A)9m(%TIoyr(1*(IE`f|La{!?yf7wXb8B(TBQNY#
zXrolgY~XdlcCKOW(J6(@QdG5sSEc*4OmDMF^(ShKSsaR5Jm?0idReMe8c3qv#kN!@
z3=#a{EVqiUT|9SW>bcR^OQV5RN##(O_UX>P8&~%$TaFhP?G31{`GYJ2W=RueQyrjG
zanN5<HL;ljc0K-H==ga@BJw5*Gnoxuh&v}xZ{L-3AkRPmy=qI$$&zf8GkQnj^d6K4
znH$%b<a_7Cj1YCZWFqX*Fx0kz69k7EKGPUQy3(5p{l+_e>Nx`*B0PbUsj3=SetFYu
zMD<M>#xCNkGRtDe<WGiw`Hb`4JwetkL`t*dRYm36yE>nBj+zYrlgwT)zow1xW0QOQ
z@zDH3lJUR%Ge36$KWWDL4*J&rB+eu&|G(G0XF7Qnz)ojH&dA~QR>B2-NE*qcMp=Pw
zl6xaAc^}W5p>lb}iEjWBQ?A>eFWrtdjwtjlSVXZJbQe4?QNg=<OPO5LDQ1}sS(Z6E
zehppTt~_AY=QGW|p^_qiy$ui}5R?lJ1fVSn#&R5a!qz&9q4T?D*iV8(JCPGY3PKRp
z$%ZCUb9uRFt|uq2?XTWX2jHK&^Q)~`PIx;X-c3zoAjkdP3%oEKaDI*w0#ghPq#2w6
zoovCaWAlM0`y)v2`(>LDK5zQ8C$XfTvp2|)O&;tMti{Xxg^Nh4Vx=^^XHleam3N3$
z1}sCdCGgP2yEW3>&Us!19GoC#4#+AsbgOQ3`F0ZWCon|Kfzr^11d6Cf5YW-+eO|yc
z@jK##4a7HGvK3xi-RXgK7n$q~9OWOSdL}5!;)>^4RGaIR?o7Ahl8MqZ+Txi5C2d2?
z`NB%w5}PMiYs$$exLwY@YT6KIIO_UZnxyIk&#pzSM-UHsFmV-O8Up(e;^F9Y!HxLU
z{!w6NHe)e2!KLm2S81XkfOQNkg=74G$-b_z9&$V2_W`Xfr&phC$XgD~cdWW}JfVxZ
z^5+=mKo7(^As1XYf4K5pGEADS-s`cN(RidAEgNkc%n==IG9G}^P-}}=FNwo?5VD(n
zg+xb+cO;jyzn>CFL|vABR3`zobLX^@^OceGpa^Et<{Cz`jQfo1gEzF5yWuza*$k|1
zx*@>1HGg}VTj-u=FQ>ixuwj5ID*TQY<Ww~35AW~A6pw~3H_r{Tn<HvsEwG%{#-gr0
z)xNxc64^JO`S#`|m{abab->VUwP>!PJ-ya!E9)4kQ}Hzm&evQ~GvDWD700&&1OuYr
zOT2@0!w1#=lhimu$hry~WaJ6LY|2%MJ$;7TtAtWiFWvSP%%9Lu6e*Nob}OuBlf4q=
zi^MYx(yy`BDpW&90m8qYf0QCATAk;D&duI}WIl8KIxrJDW}=i2Ns%D*CkyS61Cen9
z3AnDQt<9V%>!IR0xb&gEF4|nl+pSLeN3A8JdjAg^c()F$?+zdUfcwuI{J%J~H`902
zHMBA}w)qKsb9QvHwbnIu`^PU&utHzVPpJ66bpG*TVd72Da9}6OWF-FL85MD~S;Yg6
z`L(z;c`lO6?du{~z;I)BwfZ63txneI=VZ#D)@8CtPPM7-zXC?;3Dd0G4%FT?5`ifW
zC|qrZF{A;ic}x{}GiJY|nZ;)2P>Hv1jJVuaI-1o+Goql1s|J$;b0Mo)r+~64FHB9=
z4=u8(83=ZQ>ndPC`~ND#JRYXW7L|S&rR}I|10Pmh)88n}nuGWs<4~cdx_}*C9_+sR
zJPosDmPS6B)M<PTKk2zOUFP0Q!u}C#+=;Kb`fk2>LR-Gkzmpt74q$zn=|~X1U05kY
z%N)uKb%NA29Tl8dmxvdz=HBpM{T7^nu<2_uz}mlMl}8<>ldMlh7!5+>a%0Sjd3ozZ
z0DA<vU-ZbN;ql&rpm$wtV*!`Gd3(B|wqoj!XfUKvTfX9?2vEnrw7~1Dq9U-a!&P`t
z`~DjsOe}I6!&ayVy(H^Pm$XcZ-Z+>E=f)TX&`i@SpVP;&$6SDK{j#5q<bDW6x!23z
zW~hv5jv`<vrklnY6T>eKXCj)=m$192ep4N+ot7}jrDH<x#C$C<sRa6cyLJJjt#DWs
zu38#S@omFplR<LUZF6uo@Uq5u<t3C6bJ#e^4~i7~?~aji1W_yEpVnpg$M{VC-`kge
zRrH_SKofJ*f2!uuD%L-NfiPb+x_!pF2?fsUo6Ydrn)s>rE`Sc=h{qw6&4PJjPF0i5
zFyc0tFz?qy#+>3EsG5Et9t7p0(}D_Z<v%gp(lHEOL9Z{0R6+?8ONooAO$^E<tfjs8
zE-<DuaF~%Z>Hc+GAjj5)T-Fzb#LxGG+6>Y`ezwlV5hTK`EX*oXD8~=ccbaQ+$)U%j
zaPK3eW4zgS;ZuQQ#leXZDQs`2J5F|fzn&}1;g1Bfq*CTP7M<wP43deAq>DRALQ_j)
z`BYBrA7*EZjX|$#IYTwu+aVg(2QKsN+t>U`e|gZ34#!~;wMWAl(W=nf-}`_|pn`IK
zLW@aW($mE`Ynv^GC^6N}nhd4LjaiT;k)H$Q_DVjN27;f`f!3e*x>a=oCw2kR%!BIm
z4HY~L%CJf6J2e|hO;33q6-q@QMiB_#3C3hH`}?n9CdSw5dDYv2;fAp#TYCL{IBSw@
zEvboqq~%A%j5rRe$?K=qa1%NYFmhT6KnizGjb<fgrwivaaQzrt%(Eh+b$AT}0S#x0
zj9p`@S>e|=iZ~@l2=|jsc(o)(P8|F=b~c|Y;cGEzU=GEMArw1lZ#b7pb}d}r$tp-~
zcgxmA<ZIPFJe(&0Ou0R~cYy1OG0kO1{NjYAM#4kU3c1%RMCKS~cL3xt)R@&66Dw3Q
zq%H{!+@sx>b!Du$Fps3p!)VkeQZ^2Z!%_HEr@xLIyov;>s+5D9P1?3Y614=ET)MdZ
zlvt~@A!k;QN;5^^xy5-jk|y!<2n}xjz|Y3^)I(~_rNH*%S25aJJy``ur;f5^<UMli
zWA}G0r#mxL)FC6t@^l&pQe0M(v`>-eo7r+@YI`?idC9Kc6S7My7UlD#LmRlih^SyU
zxI+cTFk|XO?YxEfej_39s9TqN8VepP&P7@oszgVI93CW`dr%L5c469eK<7r^h7gy$
zZvRYhL<HA~A!mlI8N}x?)kxkpbGu<!dVZgTZ32ckjYENm8`wl%z<RkeQGcAHVrIC(
zSr2mxH@ovbmi#!%b_Fa#DIk#=Ux_aBEy`@InYHt8112eoKxI5E9Podn3buMT0+go0
zf%RX*MHW9Om{vJibJR3FMCJ4+OWQDsj(0!2(ou`L&Tn30iR=i=iMwnC3mU$Khs`sF
z_9&Vse$vQ}_rr(OSV{ttk}dVFQEo3+`_}=C&ku+XsmB=Cr4N2$fc+4&x)@Ab`Q8K^
zY$|$)eiYvMh%Hr)hH|m4UVFTJvlhLP$iOK(zDt-ZX~FAZIEwx9=X{8@U=n{>C`;LC
z>Y!5LaS44n5}_*tC&bqHOmG__{L#)W`|Yik%vC3(=|uE)W>ZYbd<CSfvrrPUkv9(o
zqUUZG)#Ky!OO~@Q8lfSZDb3vbD_r@jaYC-ri24J(f3HKCX~HQSKXs_{C+mXZzt^FE
zU7I@oFI@JY3Q@9(wk;tm@=v}+>zX&2dc40?rT2;nk+I?eVI2Z}kwp$6qoe)?3`-Mt
z{>MA6Cy!r{aud9mnU^>36#Mgp*J_4V7%k}dM?^`>wunH{>4Ev=*Jz#N*a;6ae28t1
zR+H>W0+nawORzb;I5=DB6IrT`3(DN^=>-o?slbe9aYOxBdd*}?lj9*kPf=^1yjX6`
zoD)~(T&U{h14CgpJi!AX8jTM(9?wVLi%rs&ywUojZQ+9rPq*$)KbD&Zn*PI>g=j*v
zi1~C%CxI@VcNY(ZvmnELGSxV@a*U&bhF6zJc4iQ2SW~CLIEUewR55q@VjJ>UJPWQX
z<2aT`b*JnUgsvFgz&aR1x%p`NDxHC@QMrT0)hPa7q@CuuLg!Scd6?KC{^+<dajle?
ztqIRo=SSd{x5lb7+z#=<Zz&HZ;|m=}hqyB<`hW-^hu%NGutuH~KxxL1o>hlz_R7fK
zWQ(bg{4vK<FFLhS#!&K^-exiy&|4I{>CBW8j&M*Ej%(tky>QE~k#re1U6N<4K}0+E
z&~J}lxQ-ByMFi=YgF6J0srp~#hY`#0%Y%j}GlY;E5{fTBz3c^tBHm`l7=}s1ru}3z
z%Y|)-p5<Uf*3!^=K~AkCpR}%oWvd0aOC8_<XpG?)04Kx?O)%_+Z)E^q6;FwoJoKp-
z&WiBg!b-grx@Rp_aV%0iWOWF{b?k#szWJj@C@UY@)9-)MC+91wv}P0b`or)owU(i_
zekGd=Jeh92wQPan8cySY9}8hNN3~O1iiSM{`HI!}rH&<mt6w6Uvd9Dx`#n9yH^Ks4
z;&z(fBrV^S)8eI?Ls+rw^Bt5p)G>UoE7ybv8_lpf9D2DF4e1|XMltu>T+UE^hg4zb
z?NJMxFgs~ce0tSOJD67}k};(7@2rsVHBqwt!7%HmsDGTjoPlRa!(7Xd;BA|S2~T6D
zFU5JB{nS|N6teq~B5-vl=W78W{TMln5z)Y3gj!%dy-Ro=H3-1hZA-x|kfbA%nX#}b
zp3jyB`$CTj2M4?)e79t9HF!1B>zO*}yf5MTk5D?w>=TWXKcm)nR_1753b|~}-ssZ*
zj;B~kp2)@1DkT4@_#?H@NxP=`3_j0)Ml^HA6H~eDd8XkT;R%R-Zka7haI0W49oq6}
zCe)JXM1s$+1XpoBU!MIiNI87!D_WyH*RlG!@AdJH2TgD_;bObke)C|@hOOg+t>YbW
z-H*WoA)x!bB$Qx7nO5(7BY&~ZrDextN(QYNQbI~G01hHn<D^wk2xIIm)OB;C{p;n5
zkidgU`JwYqw_I2lQ|(UeN-2y8;!O-mnNghDf~?rwff<94OyT1$ahyK3zb^rmNk-JQ
z$h?!#B%>)sq!N3|UkY^oon^H&9DK^o?e^)wKARTFjO+ZrE01~IjAln-P(9_KaeYw#
zNreZ0yx_$DS@K~0R4A7JUY!($6&1y0W&U^eH8=WK$K>>X(RC*)YX9J^{-;v?YXJVW
z(#S3KgSRq^PC^V?1(qH89pVP%a$uSIw0+G12_vmhD(qmi8N2T|U5AIM$nYd5E+3;$
z|DHoP<lcM;d2HUjf?I@Tt=vW(<#M;!$1Mk<MeJXJ?;YSMfS(}%Nh--kuIdkv6gGAO
z&9+T-M=Z;3c*B2M@KhWWZeAo(WvC&~T#US%4_qsc!=#Ur{KxJcu8@D(P8qPpZFr}r
zXFOhlv$eVyS0{~^*sEJ2)e^{8HM<X?%IQZGLV4@ps6wODG5x6e#U*2h*_XlK^y2@U
z>77>}xqp=6xCqR2W&ig~R=}E~ZHwT{P~V<tif|NY8JfK3Y6DaQ0meK!ro2V~Kz`qa
z&scw-yj+~hw4Ae7S)P#^hHfhL9gW_iLLOD&_7Dl=1VavEiuA~EU+L~cOfx@OlFj<G
zYxOT>t@d2S?kUwwUr0|R2v6ft3;7hGgpp$>*M4ej(S0+gzRctCNs7;>P7^De4Ax4x
z<iOa%+hfl+Z}UfPR+?&a(_D8|j7Y?ZGfb6yKz(BQwN#f0DHJF1Q>of<{B;z8&0;--
z09NnaNjjhvblHsVrV96@gH|Zu1*8K@0<1fQ#OmP^6#=w*Pe#C^;S<D&rMw;JSCtvI
zD3|;y;juaQ`W?szdZsNTrSci|rh6JK3PXN2hC+v$zFK=Pj_iW3N#P;fy&BT1<1h->
zs?xsIe$FT8fB#y_m6cKJ{LFw>KYJLW|Neh8aWMYJfN$rYRD%B#@SR$8Gq%;ZBACG(
z2jB8P0pI5F^8qDfk-<_Gzfr2cy|?A+v#I6;5!~7CUydfRe9W~7{-#Qd@BN~-{mz1n
zKaR95Ue4fAcq64AZFi9n(MEtH7uv2^@$jaY$W5&r_R4|g=f$WzYo2l1$FvqK8-5wD
zAdk_>5(j|%42bs`T0OKSO$$}`>B-@>IjTHN9~vY^(QxltW&w*xCaIOYY*Nlhvb6rK
zI=2ZMS3+b*ZP)2a+b#<l#x`3#gfT8HB)UEzmniX)!)KjnF*SMRe*kYJ5fh15TW!><
zt)M)TWn|!E#7{DFXI_VYZeV;7<BK+Rc2RY2!8pF{M0UO-wtJN0f_Jz!#90g-2d~5-
zJA^u9iE<7+TK^aPibei<0D>ymDr1eTt@_b9V6}PV7RHfPHyZ5HC|=`=>x>OoL?FFn
zF2~|mo}F1EgPsF^SdP(7<g7Sb`2?RUs}yhUA$tk)<ln%3A8}t(s1Qh!dwk}T<wkam
zKMUb3*32`^yI|@fm!OutLDOq`We9_KY!Q91WiP>IrgYI=Tym4vyT}fgog0w~8JGq9
zcd)Gi%%C^{_AY5_nc@N(*H3(o3t*Q6kFy*H&EI~HVJHaN#!8Ph-%{vYs(-3=WKlRA
z0XwEN)gy@@2Wv*na-y6Iz_1Uk=s;%xi6apY<dL%e5|-msu%Om7p!I0UlnWA7u~E8U
zA}Q9RX8Du8yyeRcKS%m!I|&Nhx$({)9%+6(n&1C<^9(l*1sAb(b1A9u9JYC^bDWiY
zp`d&e6TkG;-1oF!>e<%S{(O7wggRe6GVdztu|bpNtrFUGnnq;w_9sz7Z)>0tD#RyS
z+myUQlJkyLaot!mGgI$F;sM=4w0+=hx1*Wp&m|3ct{gso{D`f^BDm6ayfIM~ZqJY+
z!K)?7<@xn)8Jrq(d3S>I9&EF&#*W9(9xP``1JO8y>jp9CwW~4S--22wQ-Fhb_7z6M
z_M$KLVV91`-NC}{ot7a6t)8J_c$j3fBOrG5w8Aqwbs=>z$)N`W0TtV}E)s4O{&0kU
zldOX+qA_u8I_@PRNY%PTxr9Sow%T0fqOkyxT!Efx_Y)JQoeB%@ee_|ou^bi3Q%`Yq
zPA;q2B>$g*Zmk<!ls!Mgwm9xTq8k1+aN8KW{!^3NrM~I7-iqiutm`kXQ-l@ToFs!+
z!!ym6vSv0!>P~gI#$`^1&?u(}0_~^Z<m>GU7`InSy#4SN7cNHg<oVnJ{hcrx7N^_H
z6(!>2^L?Hax47@Xs}Z}*Y17QmUNG2jWHGIL&MXNcD}9?ml^S~<y4bTs&Z{-MM=-q<
zG5qBI-FC2(b7mFpscw2^yqL?eXim1T!y@~XWt}s$tSp05nn5b}dV73i7#h5v5}p{r
z^gM&WYCcYs*ltLYos;g=ZZZdRUqm{UIK`JJn?#O_DI*A#PeUkuc(k2`foXwRX*Ue7
z&^4z<;k3j&Bli*xLoPcY-A{ycOwK4!(k|71`24zO&aR0hz#EZ7?Ed$(dcv*3*#Y)D
z;1b7+;^0$hv;`2DXUONxx&5s@Z6-IXexL`DLSbHPn13`d9gk1I?EQnBEU*hXMV?iD
z(%jU{GKR{mBh2#j0c^g8i&J*1a7Yxf6fyR6&zxge@qQ5V>-|FZ`L;uD{F!{Ukmz${
zUhMB?dqAM5?TH3;TFbx!RZ+u&uiWzenoiZVC-c_;N9^<&SGQ8=EvGYX?tGiKor63|
zi{};l-Z-?G0|_N5T8Xi0Ag}D#7ryM2h`WP*T8I5%0<i7*<*osPHV@Zyj!MH|mQrYJ
z-wbfl6U5`;l5f{J2sshtG8muui8Y=^em%LX8_LXkV_@kFNM0~y4g=hQyM-I_4ETaj
z5iQdNN8pQDbJmc6KV{U4Js+i<5BQR0fG#E#@SE!(``xb)IEUySsCmN|h9X4TDPVEF
z@3uqo2(vR0B4S3^=K1Zm1l7E)_^TJ03Zjgf)|57blfK{aFkTo0<aeibB|yM@ENbh1
ztNMeOYx=Njvc2>lp)*V3C`W5$S?OB0J4{71DvIcED!pa&P6wDupAP4Dhj0U)5ope~
zz@Af|OEQFJ;23xPiZvjGM``vPy<x2vz^OtD#x!?$0kILH=_H~752`6-R5ClB<D~ec
z#^~s+yGlbeb4b`8e46nx-!MbsMz3fu1TfpmBGY{{(ix9u7%ow{f%%USM=YphLzpNe
zx%FDcNL$l3{=s0jUJ<|k;3&ModAmiEUwQ9gBL_?m1er)+jv5Jk(m(JC!4rzlq$Kr-
z5mBh~x9ou)WCmniI2ZwM&A6wC2Pb6~7FV&M;bq&)JcTzS)K>Gm;NLW~f77C?!(BbI
z;XkXVK#V9>$yT&5$Py}H2%j*V@o22bR9*BFbL>m~4TvY?B&<nC!cxi*Yz!b|c`UbD
z;XYE`Y6*CdMhgev9Rozy01ul$ZV5(}yBUnP8Q=!LmFtQy6(6a3pIoBAwZS(XS(PH!
zT37%c=N#Buxj#UkVdq64(O;^0m0n^FQh{YgSE_G}0368Cu6xTrjC!wMRf%Z2_>1Bx
zi|B-5Hckb85KwY@ANC?e##owvT2?IgOEQ#ud?&Z)v`lusgo9h-3(v{QQVr`lG~4py
z^f9+GKUscuCQ#r|yQ@Nr)fF;FB2XJfQ^S0%NJkonX!nmLqOI$eNv^Y@(5fMx11Nx*
zMRwiRCDkWcYaQl$sJ-;G$l+s@`am~mx9)KPV#-zQCwk+xTt0D$?8i4BTi906MHBl`
zxDo&i@t*6|P$URH&Ku>gRn%4;_n=wSKDCjH#6Ix>A3_*>s8^3MRiA~W^C-%|idKv{
zqT~rJN~bVV<lm~;N053tX$RN>p4|kl0?*1s&tj@q$)hu8hrw8!2sugWuCdA>N)=8u
z)#SMWHvlo@8{0u&y#*?<VF|h5VFnZALm?(|eUc4nxW+Q@1X6%I<3bmDNzB|gx-cW4
zJpy)+iz85^R3O#E1|A^S{-Hwc%~4A~4$S+Ts|dCNp8%578_`UNLV4o_am4^qju|*F
z>4o8J|9-a;>s$ccKh;7jhkcSW$vi)zVBpR5$T<Ckvy9l$FV<9&xRuO}_SKjwwh25t
z;s7DGS2o1jthW-!L*J;fj<)+QQ)TiRiI%lc!n!d%kbWV_g(<M4ee~VvC(41nQC+f2
z-oVt#YpZD2F3s4i%5}UUS7YwCsLIeu-$s8woPFfVvrq=)ElEuX(KLVW8FD(NuwMXp
z4&cyIL29=<SsFWGnZMQRcD+}|g3jSvm0P>#?Na;drbylSE(}m1qfbK5^~K$UU3V!}
z0;w-%R*+k!oEPHo`cvwoTlPE&9HomqmtIBgzYo~-S<lh$>{4>>_WbS!p7LVLP7m1l
zQg+f4Ga5AG97Lh&tO;ro@7P=@=}UB^pW73P1V>%@+qNC^QWyEUEOGq2CFvwR^lSMx
zcMG)#{P`~KHpPh=$7g~<<&br4E{jKP=Z_Dq=zBP+tET4{TaMX3FTZXz>soW3cn9@6
zq`5s-pc0}EE4mP;dboMo2WS@Y#o|=6Q?Kcfi@Kaw9G=by^O1|dCZu1e%&B@^5fpq|
z5G*dPb*2)L%K`h$G}d-54pfyxRERD#Y|CYrK^`6ZAnV6D0f&X><1eo`Okoh#z#fOX
z`H4QZuKBh-@6WB;G`M`hV{n_}R%|qgMHtKNTH?(QXhoiq`A0uri+`zarjj(~XfPv3
z_ERR|2$B4R>l$$lilcHE+wDhn8ZmM~T22qoB)Kz=&z4N+WRT%z_h90CL+cJAB?0*>
zGK{IWP_t1zz!^(Zb55c8PNvJ8e(pQ)i`iP%1W<3`D{lwKp{AD`JgxV_4L8bEV8<=l
zVp@^`7_O$CaZ}}V^G<)=Itz~kPQ*xbTEXIMZ)|vBZbyAZaJreVBqlVsUpe0R_rLSr
z%rN54JfyFq?-1USq08Q8{H>v2aRCke>s<is_1gE#2OTWQC-kTrTKheqTZjr`5UAq=
z-U)yM9RXrZJ#5+J5XJ9!mwn}`jy}I@#y}757T<`SdkVMY{;&~*#Iq?BXO#@F*Axq?
zHx!W9HhT17dU^Q=&~W4H4qfEY=3-jYh10imfwX>%-k9(W^zV~Rvt@})-Vc;92lgK?
zSpT&L{NXa_>N~pI80wlBIsQ|l6s_{VbcW+vHY0e+2qkeAJ$OybUg<7oKTGiD4jS2i
z!5LV^7sMzsp3k3ggvVnHTc8mJNZf}z-n-vpt}PNFZ)sE+I`VIK=H<dxts2dWpV~EO
zRfcGa)|F0;)pRI(;)G|Zsa4X~sY~0cmMGS(!&{WbBx+ECi#IaHm|~==s~*;r;FkNj
zi%Y1K56i8fYR?7YYvu}mg1!baxT8s98$#0&9<(=#G+)ZIC~E@lfA?@Uhx%?I+MS-7
zX&kE+vtI3`Zl<fU4>6`P?Op;FwCR4l`EOO#OFF#iHr+gwSV&}XIo(%~lxmGqao(V+
z$mzVjZTsg+p@94JLxDF_ABFB-_`Kb)`KCq5@_GC4r{9gGv@67{X}xNxC!myqHdaU!
zN8y=^nj2F8p=2TSAP{)~**bs?gbnK|a4bdcvoBjL9Szk_1x+R~1Phy`w%wTiR%1g>
zP@VSeZ0!*HYmZB4Qt4%AA6X>8DQhB33CrRyR=(IIs%2d>pQT__ue89Hyi1rs7)%;7
zSq_xm_bX<pgzN^k(wqEE!ft{77OgyjM|rIHTyb(m*Vs!S@U!X5s?xqo8SdfOjp4L7
z&bhki(4&7g9n|hGUM6Dz;I?ntn!B-BNq4-k9Ul#=bi93z6{*Tn((nZhQpRzw{h|_1
z$?TNUU`TWulUB(hDh0zhul(=2Snlk<-ONw5sb%Lv#DIOfP8{hp-7rJ<5L~HN<x0VR
zip9D1=b8pFPC|OU$xTBpRC%u@OV}GBz`p=*<c1O0*v^P0%qvtONgrk#&oIacOLgpZ
z^3ujMXzI!;oXr5t)8i)4x+{SMseKc(eUS@Trp(pss8RBdQ|$0gNnKPsM&xQri9(ZO
z{H|>aJvQ=(>kY}+b*T8KO~VXez*Vf~HebJ3(w67O5>BCZVQ->&V@15&B)y6Nayla-
zwV&#!v3l?nAd)FHGuz33mu1cb9v{wtO~9XnoM;vfJSw2A*`hl@*a5fHs8>5x1a?y@
z*$kx6F_3o<p0<R?F&?z!L45}#Nj1lWbuW^u8BusOuN|8`#qC!D*%7}c?I@PqzW3j1
zB*%t>mp%tfgy!Lk1?7&LF5aR>Ok(WrogC=lNnmqqo5$pAqRqYTPtHiRoCi8KE>4*(
z2kk0Fd_8GLsvP;cpuU-wNNS6Xi)GI#;<S6g8*_v^j3D!c<S)*m_w=8%L8Bnly3Zu;
zAn9ThI!~oqKec(T$ZLncTGw4BZEiJpuD}NISpBidd+K{Eyrqdt6<uqfU=imfEgg70
zK27t%i{gPdEhRNpvNeI<v<i0M!~s(2nkmef4TO+Tcm7!8tfNiFK4!+qVXJmIqYR9d
z^~qchi+Su4S3IOku5LZr=2vtTk0o`KaZ#8>(>5*%Zp}YNv|gp(-I*1(8q_$G^RY6{
zV%j#4AU1%{FGqog-jO#bLV=+Z>GVp$$3MSt_@(Q`C9rn2_8WfY9-9guGM^2@sAEUt
z);ah~62(72<#W?)XR^Q+mINTub6jAvDJ>M6E`EO>!D%1dH0{?3bjl6-iG=3yyCFR@
z+TI^1VmX0#n)zgt{2*pQH>&>Y*hh&6syF2F=CvTysKbq2IxIMIx(w+cHij>n)0h3S
zmaiAOOxY4yQgKiB`r{sc;@JY^Iyr4x!WT$C(}L~atfP-K!SAE{^AEc%v5o{+(p_~P
z*`9B^Z%3sw^O}XCmH|nym|_5`o_;PFcj}^whe^R&Ka_=f-P^$G^7<E`bq}(3YL4T<
z2Dcj+BvIKCNP~bDG}&u5CAGmt-tvk8OUlN~lus^w(pk}m-f7_mm}|)J{YR0LF4C2g
zT_3g_Sn?Y7d9~It{BIS*1P031MQ*!^uG-CMRaNVClDb$V!)4X%N#zNmQE&APdyM&^
z$Zvpu{}N2>`!&t{>|DKnc3l5}<oZ85*MIpPoXia^jsMZ)5dFjH#iU2@epZc|L*p~@
zSGp9;#Fvl2{0$XWtl+MZu07Ds%u?UATBN(3-i3gKFY&uzQERGhI_q|G>vz;<aR4cI
z8k|oII`n`za!kJ+SEh*OZby9Tt?uqREfTq_Gqw)1(yiEN^o;{)fs(~VH`oL}Ay?`c
zpl;?wpe$(8VsAEM-GR>UILTZfaMG+q5j+{Rf58se;4lK=6^1D!K{hhFW~R#Fz5*I!
z$qxeV!L9#_bfAfwwH>K~rMoy(#;aj;c`sYj2ymmPcZ!^J4{nDrc(4g(IY3vVHZ@{&
zz8)X&BD$NA=f`)XoW7G`(+u4c?=?UZSu*uO<*HxifjbBq{sH<e1KO|Pq?VHnbx*FM
z9B2-_4C&M-=Sh<dA=Bxo(h1Be-801(ACK85ANRLz*(Yx=qP2d4T)Ubnjk#TF-uns6
zJ{Z(?iwUbT4_Iw3KWNKf!79e{X0I)I3tC!l+eZA!2Vfu8M^QYNg6Ylq&5|Ks#5?{A
zq~e6O?HsO(UW2<1yk<thog$eGUk-=bK$bxd5-KJCM%c7kCU7X=p^ojS$}ZDtIM<KT
zR4-bh@J1mOIqRUl-*{|(lKrn1IR{=im)2Jd3x%V(QeCSEqubWRECg7h-O$PbDq7ub
z-Ky=rsRL1AA>`t&V(i7=wvC|(LZ7@gywLGg1Lx7jYtOKeMl|oldEA@d{JMGdj9!|5
zkUaQlPk6Rn*fMKT_wk-3e`bSkqeGTQyZKA+_95TgNcn|qN6W9BKYDSm3u<V+0L0pI
zfq}tx{XAhH{-g{;sxab=*>UPI2ukSzV4$@X{goyFe;6=ksG4pM{2iECjegytM|#&u
zvF&svWL4Rz6+jgVgtgT)2b07s>%RyagU%UoVM`AnD$$!VM9PIbZH+mrq|K=9;F6|#
z^tkGBWOGdip2@>SZMux*$T-L1KXNXTQtwYReE<8?8D%^o()<xp+pqutnE(5F`2S$8
z9E}Z~9n78Fe|+vP#{bMxP`6fG7eo5u=`pal9^j8am%<-4hEyJMW36%Y>o>Z-3&)f+
zWC|^sos6Q}((T#gCQ`2_Ua8&)EsW5c)^z3ld>EJFLE|vFa3mDwI#4aF{WWxSzxw%d
zwf(HZ@$&OqZ@lp&%QA59ur0I3c;b2-y$!h@2oXx75qex8Eat4mFXi~?Q;cw}O^hGE
ztFg(CUt~ftyq9p6zG!A~c4khxGY_VU7&#PA8b*J7ye~dZdU2RWeM=w8YYZjio(dc-
zm4x1KicRUCiC4B_u>?5LO5L)?d-Cj1xMmGK``TDtZVhd(Jb{U9ziqaooo*~aixEbY
zvvf5A8pZqhSW@^l!5Vm-g9l%Bg`>VVfp!3#^nYuUp;1jJcX}@5eiCGFo2805B6N=&
ze>SssmE=WyAB(tI>qOPkOn*BcdM3TJmG@Kb#fyFm_H_hpz#dgYSXOL0`96y%II8Ys
zqA^O!W?8#**HeOMiZP}pzP`A4II?zi8(h%Dd#NAAEB<*YZmgdc-pb^9BB*Bnaq7)s
zN&jSu4q|w7;oY1j9Ix#v#7HVO(e+okQ>7M2Z7!*lP|;RLfqQef7^OzXXeUmHnIe0U
zoYI*ZbyGXfD85?kUG~T&>LqkxGjl_+9O-9SHb9#;1wmUn7X>BK>yoDeboPcgZaCVT
ztm8*QX*7FE1=EPyF_JqZ^V)U&HiPmn9u+qf*T&Wu5#l1(#zb9GlBtAibTgo`Hd+8u
z(i~B$UDI<xaQY55=m0fY4j@U(zV|nm;^73=(<7i^Ish>56@fk?;+@TiWQ0Uta#7_|
z8X}Mwt0#?5LAtcEt)cf$Fd@hq6RQ<F@C#7oAAr!Sy(dkl#K-w19A6=ZpWjApRFp!o
z=k$?>Ske>KJ$d!w#+0cYHS~RemPlK;U9!Awg8@uBa674JKyCfydhIIatW|plcgMsv
z>{3qW{DN^iYG|vY|Bx6!^EaY%%S<zipGORlm|%-j{6-y^;RA$+jFb_;Q^YbhFEhP&
zVvSgg=dW^x6#KC`<Tim`a6nwFlZszDbaDZ+(0jkwL80&r^&x1N(eex>ARgFyLdY>s
zxD|1!m>|@j;3-2%p1t%jWfhZ?uUJtfh8x2s%U;pf4CVkq+SIwcGb6KQRGO%RyL1h9
zItvg$P!V;Qto7FuKkX?|p_Fmj5BVDEmT;C4-c&!&P|;!1FCi@kjM$E)&SwD(C?H$n
zA5<c%gd&1guL5p4&{!6=e*fJQhfV%;krzZoKU{rS@tlUQ7b%pQ9MIWE+Qw2+q|i2m
zQL(UJw@%JoG0Wec+Cq98r1Hhd>~$Vau-wV@FQ_^uY+Tn@6KKuuU~0=<7cZx~TV|_R
z%a`?)dh#G0Y|4m^IN;6z!E4KD(OHoI&)+t~q{)v};hMh|T$y>&M*C<zf+dF#K=tsc
z``8p!sOI1fwjPOGKW;<gJzXDmUz87Iw!eiBVlqdXAR-YK{K2p_Ab%NhGcst{=1$)R
zD3gNVB@gt)rR=gte=t1rF_adFVlZ6_KNR83`hKvX@pjhsSK-aN;(4~R*%%y>vwSmP
zHWysV<~v1=t6>#eW6OBjmvMgqv%$!2cln}(%~QOz`0M4?r7bQxIyo|C#)z&Q7!YUc
zNYlJ}F?_jjcD?JQDz%!+PSZFmnaCvx4~_*_o#}9~ZF5CxZA<HY4zBiyw5ZNk>Q1-y
z9svO%Qt&LghwivO^oDzgSzyi5U+^Ezg(XQ;j{@?S^`Os{dnBD=I){P4@!Nva013m~
z-EGt^gZdOJKycSn7l%r|%K879Q5ON_LY5Eac{+Yo0e=NtD}~2Ql47uGtb-ENj+W<m
z0>Td$onyO@41z{dfuaEMGd%D$3K|p)N(CBUBT?By7P5gORd`vOGT1wJc!tfh$Oi~4
z_8^0G=?tH6FS|2CX91%aR56^SfY-|E>gw!H*U~qHkm{-J^x@6?U`hAB>W<1=yM!LT
z;*?ItqheXd4Kk^ONk+~##@V7M6YX32HND+#U^f!bJ=yHfPw9W^1*t~_byGaMs-6RJ
zHh3d}@1|n{y`2}pqGzia%B_j2b`KaICj{?iSjHrq=gr+)<uMWrY{Y8y=Y0W6SiF_Y
z--VClu4fU0r2{o)B@kfCX<X%#27?6qm8zaF`F$sqAsSNmL6?wV7)d)X1+WwCoI}eC
z4LXa(t$3A$Pes5`yvyyznIhMlH}bC@5N&VMfQv`1l5rB5pEqJSSZQAy;kFBwlj+JR
zOJvgoQ3DMbkyW0#LHO$EzWWVS9=I1c6}qJmnh85^6rF1hqCh&;-9g^i2;=U}gfh^|
zoFUkWQT9}Y-k<g5AdnGI$K2j@tzb!+0W0ImARl`$_PZ>3GdYBo2nX=_7H`p43`)oa
zbqLH(Xo=BdR=n7ltsI}cw<Nw@^J^Gf#xx^^_Wb|~idYn*eTAYbe~7Ho2J3P+;}_d<
zJzt6m!C&f0splWmZ`EXI01z@Pa3BaMe_+dvcgX_F=~CcD{u+T_OoKd(0e_8$oH(x<
zN^gOpP_2fzBar03y&8b!l3N>GutMP;Xf8C=L%DDk_6LfJ1?EZoPBn(|;LnIAIQQO*
z&a-3>Tg3ULl`A1dRq?na&n$#0ie@<-n6$Kzj(dcmt*4lKIlw^a|6tNv8*W1_OdV2r
z<AR1X+DgD)snsWFSpN%Ir$TKf85Auqo&_;>PEqQHcw;*r$c}7>3Fyc)xPgGVc|4hA
z5~1|7i;wQC5v_da_o7QJqh-Y@2UjUm;L@{3frZ%2fRW)zU;j90>vwk@^fr~2v%23`
zS^5$8w}HhQ#-UUI;8kz&=;yv)X&sYDqA~zl5E}R72n!ltE{p^NH<K8Du)F5>3~ih~
z4=2kQOG;L7&`hnx=aKr}xRZ~o_j|TOjdk~UHNMG<0tP<I!wZj7r2?$<%T5`OftUCF
zr_0-UD(BEpyBgL4vW?L|V$036r-ybK%NDw{vx^eP2~c&<^41>MxGk|gqH|`s*wIQ$
z(#(sSk1}bIPsH`^j;#K!>^tyO&p8s(NroOk2ZnMwapNyHwD{mc5{Sr{{@(51?RFw;
zfQ5>*H`zddV2){bhuJa#xX2vwknn~osU!uFU_z4xMM*F=zhWk*kdC3=PjBp+G+_IE
z-(VWu*&aOM0&xQW8qahCq{yGH{D&>hri_*n=11sf{TYJ(;kwAt=_hqT*U{+*N&L?S
z-TyC4?Mz3nApf$6$I6;mqyaV@P;$<Bk%@qmJ#1M|v{`Y?x2GXd0Q$T!l+U3XZ`=Dh
zo0c+}(M279T2`Oo1(N}Fc)zV~gYeUWAeDQiWkQlT)ec6oQSWwksWS*$x<uGGI3W*p
zXLA!el?Ges4U4g(8hKl~q`?iD5zIDdVvIwyRSreMaEynW-(FZWJz+>d#SYf?ncgWw
zF!h}p)QR_FeN&Jp%DvwaXK28TNm68flmIZB#;ma^1&l3AFnp;X<On8cLU^d!vk6o{
z#WH%1<&*Jj8^aZ(cNm(&3k4h19Dt|x0S`1x?@7bIG+ib!&aAs8(`bp$`p>fi6&QsL
z3?|)+Uq;AjVkQ96*d{Vkh@aegLh4~iHJkTLpgX{}#X=^jQ+0zDS=XKpG%{H-=vc?<
zDjtGDk*k5&Ks%rK<($=TeS3OPRwo&iA}@1tsa>dODrAdG1Obs7MOs>-6a}g<eDid0
zF@iYONe({H)Hd=LZX}|X8aeBYc%?fwYGs#e9+=NUW^TMcWyZjSg);d9m-u)_L|`nJ
zWqQ<ByQ;sV3e1^$aHJC4k>P6mJ=PhwMGAjAWgqn~p3oPP(YAnNJ<X5rqMi1k6sX`}
z68hK4CNV23*+b{T)V3rNO_no-2I^CX7KLoI;1|K$(KxD7AFh7JzzSAgVG-wwbeJ8}
zdO=otZj#eNC1#odZG-P))$+v#MO<zoCo_l?8CT)}tFWtG7RL#Si*!k1h7!OG-6qx5
z{qi{0ey#xDhYmGM`*?w-a99C@FKy^Bdw7-XUy)PBqD~18Zb(d=-)~5qcdUIP-{iNU
zH_>=?#$0HY%TUqhvk24j^M`;v1Luvd8#$RGOlz7DPkmAksb>#}VZ?2U5#0pXky-Sq
zvY`$0S<}-<0JR5xNz*qjcb^-npa4z9urUv15zXwIlr6S_{=8GdT9TPD#f%Nv{SBAj
zgrRIHkqk{*+i26e+)F*Hrly(x{Q2e41-C}YCg-tgYw%``$FHwC*_E)E@(K9wqZ8CL
zH$1}6gZusS;28e<=wxN9|6}j^-}4GVeq9rDtA8}w1pgRq*4Yrc?p384&^XPETh>v{
zu)t?3ESAd*uu>W_vp_-$sBOp<c0{v2-r>lJU1m%?5%6I`f9@;X2h>X~1x#Q|A1&32
z(AWu#)s+<H+YJ=#4lAgtn*|))Knb9tut=K&<cIlZQ#4mFHwDDpK`3g`#+BJ=A^mxS
z4Ca=xr<{h9n;Zgk=d$+Y+r%4e7w^VT&Nd$eQ6ge@AJWf=N|K#>F)enOK!$R0E4`=2
zt+;iqkH!ZZE<_FK(yU@n;U~U1pdpX>l%v_Fu#6!;iQBsDU|T~1A6dWck8t0XbrwhY
z2M<YTePx40M)_>@lXdY!%*!1+eIyXr5q*wfjHiaiVy(vP7=?0Jkjr~}r2XJZ{R!qa
zFI$~cgsyN*3Gh0LIpG%e?3c~=_0CZo1uFSMkWKUbtsIrruVOsn`rBu7_wQ4M*bq>Y
zT=0b{ft*VTBy$ls$`W*o(JBcc6hY7)$Mm7qJ&f|$fNk0FSzwVKoq;XN-s#gyOhHR0
zHoZND1pWC@DD%Ye#gTwQ5hixpX0xO?&N9O16RBYRi}o)eF=79riikqcn*3>{il7Jd
z`<92q=;orp_G@kA+SnU1Q)FJLLAGFp67@d{R6F-_Y}4uGHMhq={_#*YYe;krAM_R4
zNfwLJL{ZE{xd-k|JW#XVp!(WjTOX|G4lOb^;!zKFTNEwYJ>fLE&JxGNsfp5u48+nq
zl`m4b18AD(V;Ag4`R20|h#vFWj_4_$W9%>4bR|98L;Ku~!7{LQ61u~g%hSv<n7)`j
z)VycY;@O&xFFtyFJzm2Sq+eY{uQ0=HNtMp4+LqLA3&t6T(;^l0jh%?GJl4z(k;F+r
zp4;{HXK32kxUXCb(0TRE9Jd;FqMZWrKZ(*o^(7MA8f5`!S;A9y#d-!z4Waxk4%az$
zjdE=jgi5pFBrh}gxcLi%4*Y|ej4n)zlJvhs_<%M?EKf6iEtt>`Q@?~2SS$-eWaXK{
z36;Q!SY}&ZjZGZ&>5&ZqXP-4;J-wC+;Yk>3y5oWgau@aakBy%bvqQ@NL)klp=hk&;
zgUOC<+qP}nwrv|bPIheDwr$(CvtxI@`m4M8|GK;0>gQly&(T^ZbFMMwJ#NJPB#kd3
z005Bx_h;`X#e_l6+|KDAfxdr5jbpK){zQ%IcfnbKL|C`1qHYX>Dr?vTQ`Qqul-(20
zG9?aPP0EvSs78r=zh`@mVMJ5641t0(rtf|7K5tHF-&oTQKB`uHNKS{~4GU7EE+nn&
zSvEECK9GDWdu)G(*L+y%lt%xlVdd1WcGc{VOw#NoA(^*&F3cL#YhX=-99DHK!G;CC
z^0soh^Kf<RNu>^s{iat@U2IFfxs+AgMnikyTHW4FC=2BNdzmTS8Spx($~$UZk?Adj
zHyX4J2Nu5k+LPp7Ps#^Vi&8;l$C@;)!Q@AnS6!bVO{|e=mEVO!Cwf2j>FCIYWZ1T(
zJK>^Zl87zWzHF+*wRKp12m9volo4uz(VXs`sA1rY0!nx8vK?f8`$Gs`JEQL1*;w1p
zrBHu8;PPw_fUL?aV--}HaXfiQsB5CjE(*n#1eJ)7r#8j;z5r8{U9JK>IJ!J=UPpVG
zB%RRl_r|aK$fuXrU#aqtBeYgK@hL0MY>Gg}-5wtYZCkLl(SZQ7hEDxU!E_}k93O(#
zW9veK67yq_QGWWe2s(QMi9@8Y)R*i&sT>en0F>XfRD3Z;&f)WXTQlKT^CCU@m#qt{
zjm;oZm>%A?@LU~**g2vAw-eW4sg##eT&HYAaAIT6nmT1+DArq0nV^k4-$pU9Lb7Jx
zq4}z%nbt9!o7ckP7fKQft9(8hJ??=+vGTPBXV<c<8V0Z<<1aa!q~dUnWFm`VN_kV=
ze5$>xStXuuvz=eREaXwT7!N}zb(<(xSD?WZ{H-@UZ{@!8hX-J3i9X0F%f}$j0eg`~
z{7FlK7*PQ8>K6-_M3ML<ldKG6?WHx*rD3|q+rdpkF+~mv>#pWH{rn^MwjaR}Zjh#L
zYt5nv!9x(iCU6=z1#`=idK(scRzidU-(hhTJBUECmBK6$7*eS@gKszr>rttR3~#$X
zZhOyC{Q|cqITK4FW#>7+EgrU7c61&W23FYV_7B*=M9&1Ddnsx5+rqq*kpCjkQr_fo
zs^5`K38tMgViYM}xq?W-$Uh$)G)(>w#CP^b#}g<mY1c^pHqXAvr8{JShrNj6%bZK3
z1$IO}(l_31v1?eW1Y{|uj#zIIbuLy%#Np17KD@u(@rgHMuhlm$MY&sDS-(;W3|$UJ
zAVr=PFRc5*hx*>aY{pJ;E7AT59LxjH)MQ}G4g`#n08=t8*yx;&mA{kztpHX;ysRE5
zwqGQc1$z~hukE^8xnN7iy&L4%3%;<wwp;lp9gCUGAQ4*-#{6v{a8jVt9;;S2gRY;#
zU0{i5Ki0jVpn_qUR62&PNdXf2(H%?WQ-yrfmJ<avV%}cRP{1ykdjgObq3`}Qi~@o>
z(_KRyK7<G!v)r(F4Z7BrX&|1jdmzM-XwOU6+#%H_IHhSpnSq-kwdP?M6v<3ZzJ~y>
zL(pW>u@1%^1l~jj35|s83>n!27mFaDb?R$T_%$KCip**TQH)At+({DZ4M_{IGL2sd
z4kK5)b6wH?@-y-(XmTz6eZp*Y*05@9WROf+$8N-E6wjdU$+F;G1_|;~ZqZ(3al<jJ
z#%<6U89Ex_qc&BCc;>RN(Y!Ovh#s$zYRS9vgFR<VZs2U>Zr>S?u!62G-O+QXbMJyW
zNQ2j1!fp`r5b*RHM(lR57v5rJyWo@1wVK^NlUuEfOSWOjC>6lIFYgQDy3(n}d*Qrv
z6sKt%_wjmR@g`oSMNYARj)oj1jg|obL~+!{^^i!c+9?bHdA>TpUd{X5<F}=MEC!5C
z^9bAk+_O?US*|v!I@i6)D$E0#ilIC#qgJ-U<ss5BJY8%Vm(oU#%O6;CFw+ZMc=Ai$
zd;yM;0?gbPszBCoV$CWTDx_S;tDrJN=`qRlKMp!ywVigX=V(&K`=WH<8^HV*zgVt}
zV4jLqxvj~C$=QR;@*{;QDWO>OKQQs!_WW?uYMC=^*pCmh5BK0C=j9sZ;eppKiD)pn
z1~!p7PWTanIh1qat<Uru4t8JHR6X+Rn_!ErM_?O5s>)lbbJPDOfuJZar$~boJRi)_
zRpb;8<ft`tEPdK{XF``$=#edK%-Q>P<a)t*ID9QRG}HwuaX)ze?SYT|yDwuXS(YVq
zwXMDTh^M0yN*dk%g~t-u!_Cd@O?Ptu5@;lCP~adjYS-7bd9H(^`%5PsnZ!)j4)|p;
zVP%CuEJxL?hZ%RQz)F9kbEU-1X!$NkT+z6k=W~fgX<Wc8!eu#cm!}OPOytX?m3Wgy
z3ZP;?YBq<@&@{c`$(=fMVJOSpN9rQ7$Jk%3h7ioqolk@M<~T>ruIciAo&6B(D7xSr
z_SvidaB0`l-eZ=bz2loZ=i|edVsP|28^>*OB}Hw=v4chMdHOFQ>!8cn{1Y><$>dpO
ziqllI?14c9Pg}l)qMFBkjHnO--<Xr9M>1^o9LQBemB&CXLX<~@X}-!9ynMH@CmQ)H
z08zTa9KQ{j{(Kzs?A9=^qE`NzLb+L-c>s$HS;3t(gKcU5#<~ECEB7rxSg2-Za)^JF
zozUv*4IS;%`zQWq&S-D@lt^NmxC3-^9(5}+#_;{W5BcQK@n*DthJ15B!ixWa?CXD+
z75*P>Ha&FLg&O=835DiK!2s-!{8TEM#Xkkul@q^2FfK{Gf(Qc<hwlBcz?$uBq#YM}
zgLsDs@3Zovzc5P2EWQLNHO4nMibUd}HtwZ1VVR;}rWY*HOPs;Y9yamUBr)=GE&?f7
z(aNwbhaycXi#@!k6~)JU0EdRG*}ZW*J!noMsz;h+E939Q=_8)@z{?OtU}tc`15{Z(
znK=tb<ljo=H@-!VMR%{(-{ck@J0WB2*^_7qYY)+#vS^iq^OkBA^WIcl5onN7WJ>sP
zyyG$FyBjEvZ4j8#B@{8<qEhlOOH8qjgC!53wrC2Dpnioc-I7?)us|bw`@GrxGYZal
zq~BO;E#@UU8Qg41WUl6C$F$+o@W8waL4s|M6>B>5&F&oVWmb(VXF=z?5F$p`pf?5Q
z&a-}CXx?GiouSyi!Pwm*$!`i7l3v7D8fVH7F)U$3Rp{$5g2OnKg^RnRQ#g{`7lb%}
zRjRc~7plp09q!zj9nt&AB~7D5z7E`I+u1@lw}>?+_m8Z&loumQC^W<^QsYj#ge2T%
z`FwBhth=Mgc5YCkqGjq@EE5Qz-#`0aYx!P&`NGMKwz2e>E21Z*VqE+}KjIj~-NjFq
zUC)vZXIBjTqP5gKS6-gxp+A&?<m7dqN6mHy@-Lz=n0Vff@?C@eL|vgw!S{pG$W_Ci
zY#v2f5fm(<uSnC1Nfxl@1Xmp`Tg3w%%AQlQQJ6uN8Qx=t$cyGs(#)4ka=R+GmPLTV
z{>d>l+@tmCDlZRwss)eQdcc&fSwb*wt@`e_QXqW)HzCHcNcDN>&;C9C*}r7}eareE
z@@Z$sf1Ir)CCb?SjHW|wzEBDteuYs>P(IEg5(}!*Ac73Wmve{=Kh@iIJ&ohRfB6h|
zVAV@jNb=xg%)Df|Wn;8fL6aRe!zbzuIKJ_a5Ko}WHC)Y*9amxYzhbFaimlyDyPPb-
z^pl8R{a#WQ5MWVLydi)~_poRT+FVsr=r!jKTKhzt>}ZI)bZFBwyN`l@!DmqlfI`oZ
zG(TAc=aXRQi)AF=blLD)!lD1>j-vHX@?IsTw0ss~M;|kg-)s9m>Jn@TXDf@5{cL3$
zt?;e+GsAVGm(vTd^{IBmSN_#tIB~)|Wt#Eo$)!gFv4)zjiph-VGipJx1R=ehM~eeY
z#_kS8vQ!Tl;Rz_~{%64<Rmz*{KBbM=o(`V(PY^SvAt{pyM#J^+sgt6ffmt3h=7>96
z42@g}dR02m^oMPx8j>_3KCChb^$ZgKjjXeEdq41yKx9y@ai~cwZ2R$iKAelBe)%Ft
z7UfxyeJTw*smNLUe(@|&Qp9zle^B9IF53o0fU4wprNbD;3F#KEb@HuIySsP;XekP>
zI?P;In0xNfJ?Ja-s1@r?FFabgq(tLy+;e^@$bebJ-I;?b@8n{79b+m%R3q)2?UAoT
z?2Mo2q>R@UJ1s%eVor@VI_^zv9UZ-GZ5_Xe5B=Xq2er$~gBE?vFa7E(wd;dmu&iNg
zxUuZZvCw{E=G5jf`rcv!ECi=R6OpWU`8fdG>HdqdxzT^Tf+qr@lB9&Gv(rksZLKe{
zxr);v*d_HA$E!pudP|3s{vsz(6swUDVwpGnIKN1xXh2?NG4<smr%Y?LLB+Xb;yj9%
z-F7?Xh!q^%r8fFOh5rO6-J32x#UXbqCyb_n$m#yu)eNa2FVFpFj{`&gqiW$t@Mddb
z^v@SFRUM~&R%D-*n$`v%2~Oa6n-Vy!WQ=}B8YXIEf1C7f`g-aSN<l{wjzqs5qBZ!@
z;<cxMzGUZ~A7$=19#sa@Q(Yo=Pu|+?eQMp2V>{|HI>j%YI7UixT;kt~^Oo(G1{spJ
zj(UHi3$q|e9Go`q=6NLC9$LLqr*4ve(j_0V7zJ0_3cITc?{uGUFOq?*DUeQy&qbUc
zcwFiHcsbvgbz@KyI+l!ixh8J+|EA{oF%7Xc&{o-tuU<8?O5WyH8vHVgUTm!L!LP>o
zb#3rXOp!3(3tvG>cHQO4%vhqYRJg&bh%Mjzhb)ls5Brd1f>g=#-Bq(6R~lUV%;~h6
z5dgx08RB(P70z1Vbj29S>==(mLSW`w#^j#0VrRYVIFWX7)vCV9tjC^HNn?o6kBgzu
z6?C=;VIog~vg1yo7J!^yzVroQ-8=`kI)UYh@t5nb;q;1@gx&QGR)}V*BP*7`OwAKx
zYkW9g?>f2As6>P$G<yd70JK~^Hb@@S#Q@sBgY=ujS>tQc6E=rb-Ob|M4lolH8MGOL
z#_}P%x`MQUL^|$&_Ha$q$*>hM<duT2C;QZxi!Gle^W!&sH!<l@?}y%e*|n<B4)#g_
zcTM!JHt9$!?sAvN5yRSu><D}iTP%pr@eyzpQ7EKzfg81VGYb14L6f9tCPWt9D)%?U
zT@&cFB3nenpBa+YOYEH`IXylmW)1XfqHcPT=9nbfSaOLg1j-j-gnym)%U)$9BNicJ
zQQ|j;WcOHt^f3^pR-`UQ)@tY=&o@!Hh*!uM)0~&=kGqhc1hCl?3{RKA7aE{5vz}va
za**WYkH*E>Ami9Dg##P<730rBWr1I|C7~TGr3^*+V#)SkYqr;FZs;&`p@hh(6kopr
zSVckz^X&_Okl+3J+HGg>H8Ib_QG!||tk+xQ3_wfq2@l=8mX@3(pgs2|uu8h3qEMcL
zW%Db&hW~XAuByIOq_8;cm+)+ZR}&NlQY-|dDTMfpe_WWI(Q@ul4Uzy()H=^N+6lA{
zd!of63W0l!kihF7#vC6LH|&G+1?MWCjoc|4t;3K0Hl$7zUOy*fqlQCI2ortE3@)cc
z)jH3j?1&vvrbk2*juQOmjVzBO)RK(A0$--v7y-lL9r_BPBTiSAVKcV6EyIv6(*<4m
zyr&PRs~_jx?V6F6bq4LpU3%cmaeB4U@A^AbD(b;B4rqn4FzIPE?`42uGb(gMdaWVB
ze$}uIv_T--_Sn^@@Xpz%@y*BPkd_vQ31{jC7d1i8SBHVMerdaGgmL!$;^Ly>d4-LS
zMDjS*Pyy3z`U|7SG{l9x3dmb1w<QcT8<o)qUD!q@sW%kjRQ#Sc&-petgQh(!@@75g
zhPFc(uDO_IhpbOPpL&bncmH9mpID+j42z~3w{E*wj3!=HC^JcYuLHYe)w+>#k<r+K
zGb83qvXSKqH!t=sr5dghv=Ra3kHtPf6=U$Y-|3@khfd4q^ttBqs+F~;4bB#$waXhb
zf{XsY_n+PR0tfX!_1pNLNoN0|8~+#DYi;pAz@C)<OVf)hTFyFqEu<+%Rix3JXW|c@
zwN7SiE!0WE8i7Op?YkoJGMip~4m4U<Gt>2)dEnJGpBa0hEbj|AuxlnP9zWPnRLhhs
zk#|WAZJNgX1ik6Y-et!T<kTxun(PVqNDv&bMnncTFvpHT9NddlrmpG;=+lKbo?02n
z$Jf<YV2l~eXIfB`^$yo1$D|ewR&sUZoT{1%1Gl&6p7ZV0(selCg9cDC$xAq1y-BBl
zC<}UUrq5jY>JB;>B)D2H4{A-R`382^I!>Ixx)CT4g4&MX;xp+2R1{|k;oui)o1Nct
zZ~Jj_=q_V9Ul{W9;p>vRve%0DtcCNodipqhwd<p{E|eLQV#(<vMS(2r?;O%Zj<uro
zMlaQIx$bCIicHdMClu4cXi-Pztod~gY=)1<zqGt_!4_WZmO$_Ux!*y~LB6_9tMcJN
z+X`CbCW1hFrf6YAGH@L`o2glr<R{M0!KaUH@ZFI!-&BgJeoDQ7MJASDDAS;rN_8pB
zb-sNds2SI?%5?`Gj<q%bfIKyX)Z=2gL^ZG{Ny#2xsEGM`Xxz<Xh{P$z=<!wUzo&zZ
z#JC6+x%Aii^r9iYz*_rngrOSvY*$>?vK(ZZ($fjOVm^2vI|c#NbXC&5?vtq(FcQeu
zl+GY7A9gezX^`DcNpP@d6U`xGll|Jo<20QY8lFJ}O_aU=PY4OE^CNfQd~rKHFR%tE
zl3QP|uyVBHPT7$CE(C1R{%RYK;OIHgY3o!1>FwY>Ag(h6$CfH~k|@5*e6OJCFAXz8
z6PzyT6LJ6*X=S=bL0fuEU{REA11W}7!xu{_dligXf}tRKOi~19FVU2rEcwIA*!y{p
z%`<VD_!P|!MzyVL(}uf@*Q*P|wW=HE4Bn5$<1{SYmCD9Ly8nF^!YDV6{4Xv((f^E#
z|DT7$(ZJT&?jH@`iqtl2vDn~!PSl_`L)QbSi(uA62O)AfEvfk9V5*exeGp1@Bqu_o
z%B8B4rdFPz+bSaI1pIl`Yu(c(ILu5-TeQ@`@0ykCU&4<M;E)LFt(!MXYbT>sS*fio
zpwwVW^`6SR)gH$jS;y+nrnqg@=E1D}RB3b+s|2f-x(IFR%!~3mG+6slBv;OK(?vb{
z(In9z(4Oy%bB@_s)|in3eP>zOWb#hOZIT|hqi)%#cMK*jYAi8M$7*Ms%zQQr&|2wp
zhdsOM%5ystS-R|H&>ui=dla7br-&lSFuv^~<$_%3H}L#Dj=Ef*-nAc6yK;<IBG0aH
zsJVrXUO~#}@{&DnktJOOK|C@GT%vC}ldi*e_gjL2P-LpENUO~&f<P;7nSM1W_b1XF
znXwS3gN|>hGIih{uB%qA$97v-OGw$m5Usmq6T}^wE>*7BH&ktP(Z)75KWw1<^=5<b
zP&^?~fr+IgF(v`R0D)cr1h|XgBzsoGYGVWkcHj?@u`y~MCBfI<P^Nm}2R`#AH?S<R
zOq~=WindU?1tF{FWvuCXDYs;E7qvz6nO-Jf>A(=S;Cq_6Ec)<@O&MW^hFi>vxCvB^
zV3M2k&?p1Eg`7d6l!dq=zl@d5?)fu|Jjb;ESzSBt0h|Z~XUSbEf}J5sxSgwvrWd0x
zxM8#~GMDsgwbf{dy#koZyr?wR6-W@X)KVtt$@&>)nks!~Q-%?n!8Y{tnI}f=_sb!s
z>MA6r#aK!;!|zW9(IMZvHd|}l-T8y-tux5^bxyy<#dg|eu~*<Wz$zV@boXrdi6Q|Z
z=1cC@O^iR8+2A1{i(*O+VD$X_jqKzEiaIvY<-Iuf$2vv%tML(4iXf2qGY)xVo_H2F
zD#(<%g6wV2<906Mw_5Zk81E;GQ<lD>X+X`h5qF0D=+A_gkTwOC<tFwlC0rsUKxk)z
zYS<D4(_jm_+0&r1l7;ikEY(e245y(3;ezw7aNaqD*gg+g)l>mMT15Bi&XIQ?pNz{q
zjO!we1cfqJvol(?M^R5E`JckE{5{1)EQ)#bk&wwm!^!JUBF?GCiGyF7$h3&-P+*@M
zOJUt2yYgZr8fwI9r;H9rjRsCf5w7ILa}I?`D^3=Fhw;5K`TqpuROc$9MI*9DTqx|p
z<TuG0d(G9&r>eo$!fG#wgQCQEnS=RDJZAzr2E-EhA4XPDTvO;?XOm}@kpQSWW%Lo?
zO_Wqz8P$6u1EsfZ1;@i>g3Dzx&CR=uk>v}i%eSwMEjvBbBu`#Wg_^K_dc|YD$JU!p
zPz(`DyBDd(aIQ0J3%(PcxqR;9KMRcwDDcIqOSL_`e?_k^=AiHcLpKYF>{A+7y%nZi
zdqGe;0IbAvx&h-^r6{WFTz~MnZR|81F$}i0nj)>7T>>XHkbgHI2~R)KQNDyIL-+Gs
zG=n-oimg6>3Kd_vuBZBF08*ZEPYtCK5>s(DP>n4mI~T>pt9E>%Uzo$TD~f%(GPJ$7
zrY`6mtchKBz=cqh%hrvevq;f_!J#;B;^0nN-{~vDk$1rw(o!wQKaWw@s(tU1BXzm)
zdSg$tY^nW?tWNJP2rnoBI_Gvl0G`*?6$LyMi;z{MP_}7pHm^#e2nj8@HWob4a3vc2
z*%zlDOCZ@?4HX5dOI6+lk`DX+?~hYgB|{H?_-=w*Mb(?O69asGUl-_7US5(~Tefng
zZn>VCUB64YXIlYResm!G_I+sFG|G!;Vw?*cy4$&YrU>_EG^vduCkjPdeGQSejVkq5
zBWYo9-A$~JUG!=jy;)ptu|$$UTOK7!5b|aP4e)xARMOOmHo_XtFnpTnGBsrP*7I<H
zaIgK!c|5+}yD0NXc*Uca<<JHfdVfSawrp2FW6|@|qUW;|QbuZ_lMH@$PG#VK{abFX
z-Q*;=&d*d_{%1P(5B?|ri%{(3^kdQV(=Qnqng4K7EIj{lGG3%2V~51><2tAowL70*
zYXP+n@I#Y>5{8sWl0i7CckE24?6a!*m}CC%9Da{urFjr6YRtfy$?&+}ZoRQmqJQcZ
z*3Im<eqb@7o+y5Gf8}vI#s2);wwph=Ikv;@AGCXn4^Ef2uemJX@CP1FydW=JDC%ay
zc%|Xhgmnx(=tL0;1v1!4slZhh<}4u*4OvmtZZ}*vrX9T#{>yb1_j%;zE4lU6jgaKQ
z#z(s0&d{+fbJ9!>cJDNG)B~*h0K{~QTk2}gvKqFGDFRX`PYVujx@;fBT}bYW&|pH5
zvvrSBz8(mcL;zp~#2o4SmmWt!;D{S=xC{(rZV<{(<_9iwo5yOQ2wtV_J93}qqVAO;
zhsK9U*5NeBy@}*H^|wTsi44xjn?||`bDcLgrk})pO~H)^>ucOG-hx~~#hGL8HDykA
zW|yynD<gneDcLo_q64xS*~0>wy|MrjAGrbw1T&Cj=R#MtG{FiY6u7KtS6Ny~5~6k)
zu;{KOay(VPgUp53U1^RDg$RZosMx5L5rH`g)!CUATlyHLyTSv>yM^)xn(MvIabU|Y
z3bD85GXZFeUy-fWGqGC1{psy7LzQKi0K`jNcr5A=SS<zBZTRcnVA^w==D?`G_v`Zy
zm#Xu`bn4DL_(GZ>t0&(L#cE=(dNe90VHi8BiiWyAs!g6|M?(!4w8=@pB_o$BqeR$u
z`;$m^E>jo(G=S+ZW^FVpmL&^bhTM8vows6TlLOwA09PMgX<%|a$(sKijebC98@y^H
zubNx*6j<$!GN%!{CIY`}8)<BKCe+cTF}<~6?uuabTjzatD{XcslCgJ_TJ${NYrfUL
zsb~H@$DF~Wm|)vSzO|cOTh|gJqZW`1h?kR3>RhU7ju(Q<Wu)iH-P5Tn&FiPZ$jbUS
zJuY*0V3^&_&BfsZbVr%G@F^{BZ!sl@j4RrgGR(P7GjD-_giSr0M`94ZpbXhQbC7@j
z%VwZkOx^}OW`DwLtIuo%qPGbmda0nbk!ezFZbh*vL&dB8&naz{B}rRx)hS6RY=Kai
z+HVaH*-#Fgn&)Zj*y02S&I!fSEz3ZXQbA6;Bg)3+x<hG9?K7XNZP?HstF^N)9+F|(
z5S!`RgSf<QMKlFb1n&2LJIpG64oXr#hq?3T&cpN%n5CSosNR1{1Q_(}9ZgIv-2X{s
znWVB|`@?bZSy6*tOlb`}VuyM#$iTGMDMHCz4>+P`mHQ>5fZD=bb~KdIvqM0_^<=B0
z54f>w;%+)UnRZvAs-o~vW>APZ;QhuEou5DYBi8s*pH}rt4q0<pvsAqYg3i-NEsbZ{
zVV9v+o4=vvdRe$i9);vwVEW0V(c?zZKoGf&k)qTd+7)P$#v~Gbkx7Tp<*;}Wt%q!F
zyiI=3n1FJZE92Spd<M;86CQY<w!Xc){E*U|OkP`{)S4_XU!pI~DkL~(^MM9%1Et2)
zWBR2sZ~}JYjHvN@;@Ul)U$y7jA8T_m=N>y{`G%QE)uJ%u54Yuz<$myQ9E2E>nl!yi
zMd|s=aWW?UV3RjS>_6g5qK-kS7eweSte18pvf)C!&RSd0gp$GZ5Zsh7m;B9D{BNz*
zZTiQk?l}BjwhX+{K8@nrITK7C63vss!*ifv5Uz5X8X`$yb_1?+Z^7y4sYMX*Q?v&M
z>ez)RPG~thBDie4T~fKbTC`!PBk((8b-RdXdZFQf!vh56rs$#M1-@h|7QZo4o*h!|
za^8As`y0)0ZcjoR5OMF%Rve!`rLw0MAQl6ys}biz`LRU(QhO5+2MB{CkCSiEfmH|K
z`$V!7a2YSNkUzkL;;lo?f%$Bx*kNRl>w@&0B3HZ!yS|ifsh85)e^&_=)nI6&hn^x2
z_UJ#P9(@PFl3qs4iU6!MPWS5+SDYMSf2AJJ==S!QQ%_Yc%=fY{VvvZWG4xI7lt}mg
zUO?kfD5Q|SH$)J59YCoze$UteP1x|uDd?GJVzJxK*Oav0``&y{ejU@0crZPon`ZEt
zh*&awMH~+Iz##{Hf_74Oie@2HS$cf`b%NdB$KED&Jp<n`v@pT={$_Ku(ZyrgZ9%=c
z6MYl<au4{C$;mUA{TitNrDTRxRF_dA*gMZhUn~6WIYK$9Hcg=l<HM=(xUe6L-%izf
z7wTY#4u|NEcBC&AqizTVD`kg8U6%t(PCu@Rt!n_8yBt;s{j|vn*!JW2L{6zuMI&Go
zczlIGf;{<4F?(v>BTmrIG;sl3#leV0uY*3k?sm{{9m`7V{@uKB=O*Fnn?S*n>3loN
z6Ia5h#c-cQFf01&->7M4-F^!uKj*gkrwIRpAnyNE^*EaRP}B^}f7X9GwZDJr?}jLR
z*G&z2AsS;WMTv-$I0|5We)BKoG5Dl>UJNQna$BjZ`VOhF$(k8x5lu&7GBB*c$&4B{
zJ25<|1jsuEv9#`>qr;jsc!y5+OxrIH=TkhIH9Qh8u-P>?x+|D&xQ)<@eWgib745en
zn9HJMu3)1WUNNX`fDQr9r^Q@n4Ug4jT$~NbgUof*mrb9KTJ5codv)*^iL=5|#o#y!
z1uiw{GrIASLr(OhewPWrwB0H!c@#L7_FJ|&Z(TS<V$qIa0rx<NQ!;Avsaw`NIl8~7
zqBpt*_agFiPw8!TMx4C7Q~PJ0zCCF*$u%@A-~#8moPziR_mnZ<v}`JIu2={=8{oic
zb-B^qYpA5Ja&y4g$AadQyn#DsKskrq#I@stTc;MAMRnj3CN!3Mi^xxYMbyQI!6-KI
zm^i)3mfO+i6W|`P<+0kF4W@LZW~I&%&82NGTizgm(Sp6Cw$R%2*Z_OZDQGd}<m-2*
z2ip9z$I#?ArS{1P7y=ek0!5i?C-Y9p(?!_G^YI}H8I~!b%-RX@bucx-@S<?3VUc+-
z3Es-EM62@kikfX=f1(J+qU26LTQ~Yp_mcI%C_3uNyJ-MOCqT){S-b_TX#e)i3j9eF
zj8UVgt3lMTk6Q^wg1Czao=I<aB+pXR_47Tjx!GUzk|kUxyb5kwu{`q5RL#KXvLPIu
zOQ*_m7lDg2gcawPe^(@pHe^wbA$C&c4VB9f@g`i#uc-_PqNX&=1oqte`qOS!R9DGZ
zM8RkEk;p50;}O;|hrt^nd|q89N+6y^sidJPXS9n*%!8Zb=mr$tOVDrVeD+C#9cqTV
z+%R?Wi1?LF&C7)Mnbl16U|V9c-z=9I?Ft<F9DedTKW$2{F-S##O2k>Yxx3qbV)o+f
z@?D$#eRm=nRz_h};o26OW4H6^DfGR~wsD5L*TwQp$iQ0WZCe?sFKFj51qi#`=<d~<
z_@-VOJSZn+uInLWmXgQbhOd8+f%-xk1%N9p!bi+f5rHD87I-{`j058>S^H2ZD-OLy
zOyUwq_GusgLo*Fnv24~wR7dQrJmY1qC0#J&&7wKLXk-<8FIFyd+@@^TYSdqDdJxvW
z_BrE)4jnmQu=Fb;G;$kInyk$t8vpD@XL^)48dCe;;g#E)O@!qicx3_(0D$%%>ac{o
zxQODvJO%Y^4Q&3onO4)XTNg+6eXc<_(aR;&o_AGofj}fs4Uz;9cp{LCs{`ZKI;b-p
zCU{u6aWl21Z?UeZQXI>6dY?{n>Nc`v!tmI(nG7l&82%L7xj(+2o6u+XxizDsvegxg
z8`AD7B($t0QXp2<&S=QTvwM13)rie_5!O3R0l1S(T+pAA!=?+KBTKK*wjfvlItsgx
z51-uK>@b}z2iGVz9!^5gzKPG_`$M+yYJcr<2^SY4f$OmRTeaL}zW>{FGl)E~jFmbH
zXoxp6K+EZ`WFcI&?_&=)siG5YMkFhY)g6Jjs_Gx@Oc-tBZ`(_x0ZET-z}-pI*Lj1v
zeX^d|v2K~^whsM9yWAam$ErsxP?Lqve2KXjw8jb7w&#<eHTyT_%qTh0VOPN{3R}k{
zOVnCvLQu6yaZ|%-@#(|(Ef<|7PZ?J2_`!`V`n<K5n>lb7HZC!>raR-ym6~)i1RK07
zqILXN&wyC)0uOLNBAjF^+`1y=q}A=(Kx4cXnLpD6e`JZ0Wm@3MqY=*{Yzz^GOD%}|
zd+kF(nyX6YGKZ%}<w<o7U<~wE70Hn~_oV{FRd)g`7+JYxvcs9|<?dA8?rLdedxwA0
zf*TaI%@EZAu~UG0s&VC&Gc!x-nM?1E%Ppi%V4Z2nyQ1kCEbf?<wYX$m>SZ00!0+Nq
zMk}6uDX5g}!IvPWg-BkF{C3x%bgXflU4gsoYeTo6-=D!={IIMUd_wvCZfOqe@FSgv
z=mvD0kc>7uBU{hQ4C?A4S5v=HD;t1Q<fTZ&HL9704DyDkYWzSn5^!!QaW1nx&<!TX
zTh5(|{W6I=jA90y&r(Z5Ff-F%{7Ae{FM1T8d`V0qJyRNegx0}sM#hpeTV@)BoK(}$
ze#yyOgSCacvAP>8dIYie?#OhoB#kxS*L}8a>kD8a1W<=}S!WMp;x;R}fT*m^-?Alu
zK~#)}4^!%w=HrqtC1G4xSRm}@iKRoxsils0(BgUubJh^%`x+#lRig4Ioe0-$bB<(E
z+c$wO17>rv>Dim5#)2j|>tW>)&=}bW$E!aQ#|b+j;P35sjV<CSg;-IQF6l`B(h#NM
z0q~EDx0n|OKf;`7D+o>r5Wmd}k_G6(nK?vqhH9sgE9;|OPF78u&GqYm;qNZJR=g#i
z&py`3wFb2ZxE3AOfOmYDuL>r74+g`o)(~iG?6@U(P~ME&H|LKAg`L($I%9QvB6)2H
z{Ma+`bY9fw9Qg~*Tn+KQ-?Y$q#^N7QqSAsj3g<dZJN(?TVVfiXzweclzR9l|IC<;?
z+<NgA^bUq6w;9Z3_W9B5#hzuq!iW7C2|L1g^t*?&0L^PJH)A0Xq)fWSD(xaZ)eZcE
zx%2A$3R58woQkSA42t{fPNQH|{G{2hsnf?V=Cvws>Y_`hcLV@%Mf*bErQb0xsx<r0
z@5QR*@{w1e@8kQN<uyX^a6MvPCwGaT6vYt}+xkuTdZ{Z(Zd1BL%%x6H`PMGbRV%ar
zlq`W38Ox}zz53iq>#>N%T+J2?gnRcWZ<&)FDZii&z}NSeBc;6>nXg>nEG56`w8!Hp
z*PQ^kf!77&r;q7pgeI$O5!c~fb%A<_<|F2g=He}c^v@LqhIK*{q>nFuqh$-%?E_iJ
zJ<ZJ!a_^MQfQbW1iKScmQ)d2`bICpvsXI^~v`PnLo9~9vXAM8*9QW<gNIik3KQ4`r
zrBd>jW~#847O!n4MY<yAnC;AzdR&j&)8G1xKG`rmJlr1J{H9tYs&xizSFZ1G#an$k
z1-vBGwL^T$Wa$Fo3<f^2w^7i{83x6R6-9w@;C1lf@pXJUGfB9JWQHu9os`HmVMRG6
z)60F!wv^UrGlPNRq<NsQ9;T(-jW$RKg#>O)qOy>9zeC|&lAw^lDec0XYYQvWADJ;>
zYjM0)GcD38VnM@g_2alW<yZO1^{u6gdzv*friwK_Ky4(OEIBe%<HVR)F9u<?Q?YLJ
z{#8AG#_vBrsT_I9|M>Ht3&#I@^$?d+Q<kGsQHB5j+D<4^x0WhZcX5XT00ch$=_3DQ
z`LBZXuSfPrE@LMBaIb+G008LzyGPnP+PQn^8JRdbTbNoH{m71-Xr0}i|F0M6{y$$d
zrFrAHAsYXU%{^q?LP?4eAAcm1S)evH&Wv-BFHS3=%atTm$FI*X3vSq&8bGc)e&dK|
zt7o8xPv_cmjo}XfVVbl>H$tg(s9#)C^8M8gmgD_*EaT$YZN)I@A~ZV8*j6P!e^wF+
zm<;Id>*M%*|9k_#wY?iN@?vHGdP+U2S}%HNBjfJs<=pl|vJ+z`YAEAg>&}t88?k`x
zV9xD8EeFzpEroEt4tYE*2g>NTH+V{gGNyrx{;?+wYdieI%CrhAQ>u1hU8*F)g*0p`
zKkbm>)N!)tm1$A*EQb%lxJG>WXnHny13SK=RZ_7b?zT}mY8x|WQH@g@HgMlUK<lV=
z^#NhMq?y32>rF4=plzMBGO1A>qr<%?akh_(=RW(|?SXcPMLWW8ivC85s-}9Ub!qB8
zS#y`}K98zNXji9s9D_HJ<kP;ssU!xFr)<L->8J+u@5*|txxR3QXjj;}mdOqtg1Vf^
zAoU~0dUyFNKHL?E$XR*~@K)YUA`aOL>UEFm$TjZXX@dx(;f(k!o&|q?SZsjKA!2V*
zEHI9;m_?c>UCF#~BZAK~!BYD+O6rhWAz~P2jjV*%0ufc3HT_d_KpY)%E8}!$4XRq|
z$z`hnvgbqw50ZP~6REsA5@MeLTgKH{ZfT@EB+}v)jM6qdF2SG>+ahEqE46`xgGWyu
z`FT>HteKd5;(R}Aw5L8uYog?I=ajjaPK;!*5+DcKWrOUv-GMS%>xxJn3wqMuagJjp
z&dXHMHVGXLlB|rBj-2Gy&Smwf!~%a6NW(Om#*=|h3^tl=(X#q1ixo{}t?)%L$Ecmj
zj^(x6A^KS;mcqj_%|CLZj)1CEDdr5vIKgx%h5mx<Jz_K4bmxV$&-<j7r_v}0-@|X5
z5}V^%R_Ajt1Yp=S4^N-4Drgis+1>6gm7-G;n-nujn>SE!c@F^6V@{bg>Z|<zopqs&
zVXEU_ReSQR79y8(!JPC1XPe)Vuwsn%Aur_g4SHDC2(GeVZ@)_FM)O;*+LrI5*UM`}
zBC=a^R2f)FEF*ESXxA9KdU>76(thX~N+2xa&D`QnpKcBFm|@ly0q8a@rWpZkj0D2`
ztzs3GQPPAv2~nyhD55`@?Z8JFPz=KmfE9C;jZ}vX;(z$9*&i7-ojK{93EyPH83Ueq
zk9%H<SN~&MU8uQE5Q7rOe^}WMJ6P+OX(L?R&|Qbj<79}Ltbj=x7kmUP$S?m)xw3}X
zEqfOT?LB2-lpKmtgq{(K%w?EFJc^5MS-$z382qrwbb<kU0mf+`<WE2k3V6k~pZMq(
zFikacQh+zUnY?iVb`-J4Vd<!aTZA#SYJAg-b?$IA0~uBx$OBZIZMD$>$#tOO)Pyj~
z2?aOi-CktEcPjrn<(hO@j%><SwyT7)EwvnxVZTgQS4TI7oTwWfspz^yd<fG*_@&Sc
z&*#PA<I!tN!u`a=#dAUn+X|j<YSb{BTgw)j^d8TNfixKz!LX{P335x;iTdB?v|yPk
z!2_gTUOyn-wQS&tTYj?##&`{IArkypdHvrKht0_9GQ@)zo5&|+*~?Kt&Q2oEgO3|`
zD2?rYoc7Lf94yGqqdL2lv%}?%=vN$;DtwCM8ZN9*u~v*m^8$$^i9a4?gIIyAVZ4X-
zHWfko!hgcvQRib>CgGtBvTF$=#P<S&?7ZQW;LN7WgfT^-V#<&Yq1&Kv&ce;axcQOf
zFpC#CAQ7hjkOzGMEDi<?VMQM>LxXFVY3w<Ykzn7v*@HpG--;0Hh9<2RO)#(ba%j=r
zfFOJEd>B=HC~Wd&v<iI(=lBWNZ?Z+->}+j^SKR51uocG2M@?r)V7|dcM~K?%y7NfS
zXGTwl*38h^jQ}F~jL=Vk0T54uAdU@DahHd5CuBsX+6(0y`-YrQUblsDLNB<qGQ_}x
z?9(Van)X27|Gt~v8r0&AHZT#wHA8SEc3+ShuvX;{5JGv*OZ82)q5YJ%Ls|ErY}i}a
zmJ~9{ARsy1dzC`3@Da2hISsK%Pm0<#(YjkfKgzT{q?`<Asu4~81|0tCKR}YVmn`?K
zPnK++d0HclkGX3=dYi7yVYr|Z6R;l<2pS&Uf#Rn^O*qgI>9^Kb4ioLUO<5b+qnjnS
z{v<LngXGP8e9?fH3dY^V6@^9qf_O~H`w1+y?V8EkpuaGuSBHU@f239lQ>R7*<%QR{
z{H%feia~xY5TGQUZQT2i@j|E$LWd`iKhsZ!YWq@35&XLNrk(t|;&<4f_ifvpuzmbj
z_pBd$Q1Zaua^IRVS#*jKoU$4Ua*`>=!|l2K8>NA})SO^*)GP3pI9(hPhSRt?@jTV<
zRLpeVpUirojp9k-wsZb-l(a#k*y_==U!vQa=|6>S0&Ff(N$1B<FQtiLZXjN~#JRDo
z(W*a#5!l4AYP~`zN{L#`Iou;ueJb&)IUGqYbVe@pfDfj}o5TCd`sJu%?}E<aaN=a(
z4h{WvYn~*pKLLJm7ruXqgrZWq6LUwovA8T7)>5$8h$&e12wETnUa&v**W!u^fz%fS
zelApq=f*u}*Wz5{b~-Iitj9h=y~BFk5-^T~Zxy%*_PhK7;|6r}(BrACH<|5?t$eE&
zSg*h)g~VQ_3R2p7dU=_?BvjaV-#p7EQ;L)i9JSECG;*L!hF$GKV&4u2JEa$ATuq_`
z_}(u`Ima$xQ;HVi2$KG)sL;4zJ@j@NCV<KMMWrb41VWot3cCu);?d;=dNIdKdyNnQ
z$iQ&z$V5X>$P>W+{?Hpb1p53y2Vw&x!^3c{z63}mcYecIt}1d>ZF`h5m0DOam~T4b
zi%gnF<6WD@hRD2<Bly(aCLieR<RIa}2^)T%<c_;q)KM&ihG1O)Azr|xUj#gNL#zk-
zX2jWuNy{vg9=U_-wo2)IiSSan;6LHMkNRlwiV6OA;7NSJU}|l~brkOuD$Q0U2)2La
zbxvnRq`RVRA}H%XUSUm--!C7{x$#v1z$pZKaf=%9LH!HWQw&;#`Tg(nbNT?@V3)%%
z6_Gy68S!qp`TeiJeHTyR;}LzbSvcLK@%72s{dy{Iv7^yj1-NSxVsab54I_sXuXk_Z
zec_4sb{>l0+G>~B*f&w7P|P8J3ECn&|1{S$;p|<ZX%}6Wd~jtS#GOQ(sYIds`(yRm
z%2fI5fCLm(QS&`Y>m~2|yq}+cd3o?}7jVMuns!BW&z|oX`9Mm)l|atd^4Ih)XcgK7
zXz+ax0-=OdfS04CSdKc=OQ^u!D9qHK9BrTE51{$EgfDMtx1rc&->%c{eJseE`7L-M
zdl6c3*-sw`GZ7+ME|*O7ikoEmWLkzLU%ZeaG62;O2T>nSwPlJ*XP>2qO}1zTX-I?)
zBGWw>zD2{Jg0Gy*6#U5#gz6+Lc-=gbWjhz)iOTo|t;3xe=btyvf+XdxPn5}n5|I{@
z4&G?~%0G_9F^b}_+iwr~mueIq=*2kxaSWka6sm40Q4SyxQLTuVl$ZR2Q;i6_&zzrB
z*p5J|**t297eSS;1sReolv|BA{s1nrbU>^iNWYrMf<rgWp(n^+w>?9hgy9LeW<y9|
z*qB0x$T7(tZZ0`#p<(8^z}$V&vcq&heHt|v01=N#H4d24Phz23nHIFun%5WNb!Q{k
zI;2>XDOrDk-C$59ql0cKLtf9&+nAIi#bMrW4X^}Y$C~nDF0`;|BtAZ7N6IvqTdF<9
z*wXGAGOI~G3;{V&hA@BX&<ab{>V8ni=GCepUby);3=40wE0?4DYwr1QFvrJ&>ARgF
zT>?wa4a`THt62U`Yvwv<PRaA~ny<GLW+5Dov_x;V;DCtpGHy2;g1|>@`g!nogX>Cf
zmm2tI7%>U-9dYYs2IYl#u!rms7>YIehNhFs%3sQA>zJ4_=8Z}KZzMYgYcvwO9(QbY
zW8l*|0z-{!x6ir-_TiI#4>jz_8eh)<7Q7+2l^a`9Hng4YwhkW!KD`G0%KShs<1`DY
z4*OWW<*B_<tYEiTAkbYSViz6lk)#N(lZ)%k{pM86*OtHry62BnKz6G*vkhAM28LTl
z#=}tr464Ti?e%o|8l(N!jMA691#9q#f>B=Qy4J)(GRGRF4;d1r0Y(SXH#xl*4oU<Z
z%=ZTNGgT;&hPBjl^SXu=VC^hvb?!x<OIN+cWZc3rxU>KtOJ{ojXo$!>r}+(yr`8!f
z@yKcojo*oUA6A9c+d8^W<=>bm@2j-Mgzr3ol;Q47{_3l#S)UOKX>6M^qtaVS(#ut@
ztuk)!!%D2SJZ-SiXCiVRND~Aw=fByxkmNEjovT%R;RQ!m?S@ZMQut=C0;g#nuPM%H
z3bn6}%8m`)(u8)!U&RmiPWjpUwIbNx2p2AnJyUWhv;x#Beb+ZcK)Q|g6;+)W)aq1g
z)ce;pyB;7Mj~Vd%6{?%;N}pU&t=xF<Kdux}t|>o;AUq(#5SG)4I$fP%$(yBe(=4%O
z+-9^lZ14_YFdP23L91Z%q`IC&Zjyvv+$Jz|g1cg;qjB&(`mgKpa;H|mNJsJA4gs+p
zJ!f^J<_*Qc?VHiqu31Q5Hj6<(`gtEY^w#(h>0ke*e6yxQBt=uJsUbUnb33Tmh`gY3
zXpB&%%5gD}-d6%4co<w7s*ota+HevOegUW#8tJ`_qu^Sh`*zAN;ma|lyw>meT9H1W
zd57}7-Kpo;*g~^GCe&J3M$=F^fYVa9^|XEEK&*LaW@swwt*^G-+l)>v)desw>ED(r
z)fExJY+nBQC<b}f-jJw_V15*tp7$uJNX_L^)<)i>Mcg?dE}1?JY0N@{O@mM&<3T7w
zyoA?(AUmZN(vxy{PfSM#LucG*+;UtiQkiUFT^m-qhSeOyZi%8jLX>YlSbpqz8p>tQ
z3%T)=%DUuUW7Bw(2GmFGfTOgMzXP_%T0{P&^psf*|15!BA6_pul2m=Or=!zzHK)>W
zlUc$m`PMrpI}({$6ZlEP*5iHeF42TLuSR+GgQTNpb=_rfE62Cnt_m&P`#*sfv@i{n
z^|H|);Gk(FnC-Hc6>mrERjX3LpbcHr;JsQ&{%MuS25ufJ^@?tG41$i-#=O|B{!5a3
zK_?BBG;E>-PE2evNzbQ02Rw&S*Ra=-K4`nK#N{(06r-u+m678l6(n1vE^fdTXJU>j
z$Yl|%piGUxYN;YRROUrinFOp&|M}?WNoy%Exj6~};!?Rz(VVbngKHPpao6%e-)eiW
z^tQN=u2b!e<7D0p2e%O(^a)<~T-%XjFfP}TaSt(3U0<?v=7^(J3BaI@nfhj0D3ls{
z*6I~(Pw>h*y9H#=m1eI^*^rj?+^hrXlnPJ58>v$^gQhpGs<!9C(9VXY`D0M`iw{@3
z&&H8mg7-iwP*vqVp4DZ+OiUDqR{Br-zI^kw-&73|PxU3c^q|z0gE8+0=AeNPzsn+E
zE&>@{u%OFwX_<no(Zl^rM^Bv|6U}F-FJewsIFHnzdxnXhx3&9DmOFfoOuV*azx33(
z^k`x}9Q{SfAK|KkdsO}3%71m=a^tT6oez7+ilLnrPephiJkAz;q~82O{GR1JOI6~@
zE$<ZFlI>2VklCN@X0IIWmACPeU-Mwoj`MmFsC~T7K0R|Jb)Ywn^W9$4%{r`(KOez-
zeB_uO5R+E4&US*2sN~kCsiz!E>{lYoZEKdcCZ>#UhRTxD-w~#_YQf!XwBJ0s^iSHq
zM6T3MMthy9K#RBPpX{hUv4&R-T~JW;u&x_aO&fEQLe`4rHm;<Vg|$?dZN73e+~mBQ
z3p)I6syM`gJPF?I`dQ8ogJ_U+CuqVXgnY6X%h;0Iui$tz6S*R))z_P50YH!gNFp>J
zTnnd%wvKFSEEV6iG$2ie%6*9xyQZP_Y@F4+&3^wHmOOrlIDB$lZ+a<t+wLM0rMpi0
zK#Cr-wHlXxp{L0P%DNsW2Y>TH*d&)6`uXfWk85Il{NJo*{)PVZuE}&a{{TbaKNu6i
ze~129nRxso-gBiQ^Jjw<o`=qF=%JAYAIoN52mu%b)qa5%(K$#5$g8+0P9~TTCB8oQ
z>#ZB(RY;?;?MOZs42zY8Df9WbYi?ueV5{TGttUMrBZCh&y9Mqcyu^A^&Z-@bWXQBM
zGO{oAnVmEvbv(ertYHFK>pV2et?4lK@jX?W!x<b3#>d;QhjhM@0B-qxY_ZPBF~IXe
zvD#dieyG>Ewz~+YqjqI~BAuLA3_(xgV3Lrwt$>C)p!H0noaX^MJDXRTE=LJRsE*dy
zLmw5bb#{1BBS4&WVRTz9k!Z~XP392W77E0)5oxY`&1pAyAI9Xm>f`Uidg`B)LTR(c
zv_IgFi=JLlfnKA5xehiH;X-+wGCtw&#_vHDQ%R!!>%T<Nobq^|f?6a_e|2$;te;(t
z8%&k8E-$gqA*79za246!JF8`}54IlP#Y}sRhqA|e`yWI9UR?%DqaZ)`AL`UxaJ^fN
zPXu8$x}N4MYX)=%K=fQQkObxo4-!<Ab!fvjX@TR9uJ4(74E|L?a#$B7mBAZC_VDgu
zzpj!E@JmL{!5=tAUY}Ve5nRHm;MqaAjcpiS1RURtPN&4$V#(fDrh*+=C5XJ}Bu4l1
z<(_W1)G#rvKxR5b@eD<BR`w97Lzg`nwCaOK+iHgglzw<opZ~ckE|WBZS9CEJQNp22
ze%eBChFC?m429%+-@z3rv5u`}{eq^cRaGu8NA~m{7PXEGxCVq^E(dO7XFJxaNec}U
zOohZW*W-T6OLd}@mzp^hUvNq{tcXypv?1Za!UC@VQe+bZ2)n>4Iag=yL8*@lHmof<
zlIC`#k8P2GIgY@$?#bIZI~|!^sis*zG`l=j9ayKsHiW*V!gpd_TE}VH=`9LgIgG7;
z_6nZ-p8JBJqvxg25Tf$1I*aPOcvT(S+*$f~_el`pFCx_1?j7@0Li?V|WpJ{X@ER>_
zDlMcG1F=EI?@LSyc*YeV)&g*iP+yKSq!h-0X!Jpa8a+-+Czr)zJnSZW*vuP~sVy{%
zRTm#=kwZ{bJ`i+|M8MS}=YaG3-c_8EI2t-}YA6qnnU%~ok27g0lc);qR<z%v*0XC|
z)Q^g3zolx#O+;L^*^e}Kh*-DwBEuG1yXhSgsz|3ndB3&TU$7+g?`?>0y?5y|K->(i
zZabZfNue~rU+=XHUB`ZNqeV?Ct6n@e)4u6e(blBCb}>PnzJ;_~Cq^+IYhHz>U^Tox
zN4F7we^0&Q?POM<q=})=5`F{W=}=gIf&TAsa7x}NLGlmRAPn*UGaB}PA<X}OfZ%`m
zacmBw_&j|?Sm+W1A+NX^H97<WS7+i2&X2|_qx)o%gie%=Vz`=?F6E#4-Ec4+(yD0|
z(dc6kv*0}+WIEj}x#igMemOsf-V9Z!)%bRQIl9qMT@_eJ7v;kWcG4UrMQ<+|p+q+b
zeq1&?o`|kdYPr3cH&s67+Taw%W7Vh(cAOVBIBx8NWOP2jdP$QH?L6Bh)jL+zLG$T?
ze&+JHvET*A{uTV9G5^Dcq5Y>RYmQZt1sbQOP+(?x7ekC&%gKXYxtyVSI-?b7znVpW
zl~jWS3!UE3&wohPR>s`K*|EUkU|vBNMa#ziWI1_%@&91#8-r_Iux;aH$2N9sXGc4>
zZQHhO+qP}n#*S^<dO6+qRrkAfPv7@5e^ymieQSPWjyW(2HVaXS)viW>*l3}T-50!Q
z*1nMh%L|!HnYmSArW}YO0aGrPXnEc)7eYy?xO4+HK(g=O6d`-mB>0L=;8*QIO=*l(
zkKt*@*eWZ6B5?2uINivE`Y8Q`VgoTuuwYY5Qz!swQ0=sARLh`Ot8t=I30aHjukBbR
zw*iTzOil}N(X^-~z5yD!;k|<28Hw4RB9X>#qF8NC->$MEM3E(B5ipkiD*_1hGuVb`
zx+rEwu8#=1jbRdYr9^VR2VG~!6=FNP7E6tIisrWZp!+%8J6rUCMSt2-9cc|)Z|Ny4
zM^gYp6#h!gHNV}#%w#f#W&I3?)wXq@gHMD5t&b7J9ev3M2W@QZD(IM53+6(q%DI7w
zLf<qUG1xKWATxb#E<$sRZt8p({sm>ke)EiuRo(t<dlEP{C{r&RIpZeqQIjyKxw#t^
zim@(G4RoGfe;I}!>+1D|s8<jaF=CAeAahwWw)>U*{39Mt>&t!tA9bCeVhUl|T2m#=
z$LqTrHlBIa?*v*M@?s?b*z1XR6pCfY0i+qOjXS;wfyuJG1mO1Yaql+B?@y`_jgkku
z)(!7@b%{S_g0g3qf!7}O?M8a_*L$VLvRrn}fyub4D9Y@3c^`5>nyD~*Kai2b20L~!
zAG#WxpMG(8Ti>lUsL67=B-V+f*S1=Zj|^yFgz{OGwGU9-=lpRfstj7{86)U5oQM#~
zKtiZ~f88pxRl`?iXz9<2mg<P;S_vzlFnXw;A~+9(1UNvfC`D!0*F+BqiJd%DdLmID
zwF$`$^s>9ib?~arh~Yo%?1HfGXQUIjJSST3kcUb`I&zjWTbEM%X83$w%Ln-oCP?U=
z*>5P}hnB-qWp1cMK1#|U{0hauoxk0``{0)a9RzQBz>mb^`cXuS_LXJsG&sNu&sokk
z^yhvOzI|mtUr2YlYGv$tHrvcpUN9gY90#-y%rXZxf|>Wuq(yx}?IznAlu=5_cBop5
zytr|Mq6}!Zx{7dZ=0=yq00nZ=zc^ig)p8yw*jx=7^x8eRuEV&T!pkcel3DVN(!KVA
zez@(fLv>A`k7Iz!$kWotV?rGSE~>loy3m+rx=b;SQ@G%J>33#o8y`;CdLoASyMyw_
zGDPF(nZ<{E@=$nu-c&Q#ql~tjiCp=OWlsU8cd##%Fs}9w8t2*KoX%;<h*VJP#Om`q
z6%v}FO|!#cg6)`?@e|ZO(^QKHeD1gtfLjU`0lP==O*sR$)FhP6pDZ+pzWXKUaB^Z?
zK|^LQnAQ3J;wGp69R(6P%HZHi;4FR1>$(T<YH^^2Ct9LWhnsq`f0MyBlae#pCq!|B
zi#txRQXQFz43EaT6ev%|mSZ!M^(UwkU$MOW?dP<2wC#MPKG303YD)SL?}gluoMzx&
zVMo>=po_!@dS0oq;EcQrqIAdr@kv0-V(C)SmHm6(khjKWJ^R&x=VebeP;BG!nOOad
zyg@e?;tKJWNEso+6;@^EewV;>=tX0_G5wM{`hb&mhRhD=FId4>ymRZr%(pj_IfOCv
z4ORVR^4e3G4GC-ZgD3ZFMfln)$v^uJ?A#o+<IC_X8Njrp<3i+zXI|}H=|t(Qg0IVs
zIgVOsUN1K-Jih+BU#4%;KNj}hShhNd<SEGI-KtS2-qybV5^mc{z7<a|%y9~5c1}Gk
zH=5mFj3Zp4X+(aLnND?+Js3bexX+6BZ?al%5CprEb-}Q%Zn~Y1W@*)TCGc^DC~)qC
z%0Q(LMbGgZt{iu(Q|_jU3$y6kF@FMR)A?BlET~j(kNePnh8FIjm(Y}0j%5Fej2~N(
z&h9hat+DwTdU>~V(XN-}RR=zQe@8Ca_71=`XJ4Db!XMjC2&-Izj*OYv=6|Lgrm(Kt
z$3ZbYPanv;u1@E!=Ui#JmnZVA=kggVDZqJi#C0u>;)c>Pd(9AJT4o%o{PW04VUOT5
zl*3t?&0dS0W*;nwX7rIIEp>@I$TF@fMT|P-$G)Mof8R!OS{l#8hOaLu1|USl`KuON
z$&w~1^el}C3MpZ4V6gwEX$32V-EGSV$}L6lZ&8?s)V#Dq<9K*v`3p)mo9TY1KYm+)
zma!d@)YiBR@^8TrVV-~<sA5ve9rTet5h;^?4-p#2@Ws1a&iV?z3v5SijM}MvOdp<r
z5aY-hK|M?;T&<rui#cH%#!P~V0?0sn9fs}p>;0J%w{@*Y!%V65z-TKy2a7AK&`fy~
z*LC4g<W>@kx3uWpr{GArqF?__Xy_I`6k+sj_6~*qTeG*djiHsjy#=*CwW*bXp_K!T
zp~XMWzgypT=KtaRTdDk43KzV`Q?<(Rpd4k^MVsJ!8JSth54|2q$h8kZ<mh6;0YW$;
z={l{~wckY2cu5HgU<5rj0qRpzQ_xGv-}PM6jkot*JAL#1x73Pa;uMC35%&Y8Vq*z&
zAh-#?_WLoVDbJ4WDJSRW`EBV_C3dBUM2{3G2AfsT%tZZ95-`=r02?)^o;9LO6)9zh
z)1I-5U5ferLLE<XsC@Mge{NeI1xO5VEZ-Y=x8TNq_mmHu%C&*utALOf6zN*k?^eGG
zK=ZiT$>}h>&&2_+DskRV(&leyM9VD~#lq(nOpOn$AkvES>~3MQ3-<gHk;C76(QY;l
z4O+d83%V^lC^E1GF>(PG{p@^wyL{POygQ<VBJNz0sHtEIffLHltTG|-Q@j0XKTOCy
z)S#dhXrOdXS5#wV$o`Jz?u)GjmX!H+ar1F^#S~y5Pf{YX`?A_bhlvD%=u?>QyMM-8
zdxCrJQDul2<J`+YsBC&Hc00p{VR-g28HseCaFZGEq?mAo*tl-t2h5lxr|-lP1y?G2
zhiRn8+D8^CNbdmN-DAuS2fSk5b*?yaH$eoLyF>EYV!M+A+%Y~&fdUQprxGg6{y~K!
zqEryT!;i0@<kvC_{V2pR27F4BpLx^1l%QT`9-G}7?dTEbAPcL17G`@l-g#C*u``IK
z=^sTDXq8eK`Pz#^{Ul{E^Ic2IR^YE<5nMi);v8l}FWMSsOkB);;Q8udR|%=rRnQxr
zw;bAz-hF^>5peDSI)}T~`;*<$B1b3kd=D?m*kpR*iXAaw?gouA_<cOjAgHrLL7+D<
zyq+0StQd+3a*N_|6Bd;UePctjlj|J2rcrStt2W*!L0O*M)vE1oEMfHUmbB+c)S)Vy
zz%m05yu5;nlGapxuC)=AnEA}88bvhzESZkNH}Md1Gbjv#AG&J~y7p>z8@lP+W9GyP
zGv+)mKV32CcZtng)Cc4xA5-PE=yG%Xrx#H;xeNkpFRi@vmadjBCY$4)^vG189gRBi
zCc~AfXoATyY^y=)6$3T>I&b!lcYV(2s)>WnPVWrKM#wxhg4=yHjUAWJ6W-r1Tk?|i
zl^xvO^Fl1gDrU`5S>}Q^e?@6TKbFT{pvQA2OKlGV{Cu)FY>COTt@L1Z*tg)oe6>2P
zEi^oYu#MfMsQRU~;}x|TF}%US(6`*fDB>_5^kCwk;{4g6TIn@|^xnL0yo?6*ZVNfZ
zw{j)jz!Ch_#~OqoMt+Za_Byhp?5JJBs`SWIZlBuOH}666AnUUk(Cpj7Ht4w~qLb;B
z`JuY*>@qT_9KecX9bXs8Pq0x@Wmt_{lc4*@j&$<a@?>#2lho!(HQT>fqU%Prn>OVE
zti$0%HSd`_lpT(CyR+ZwKx|WCOgGm8oV$vZkL_V4OW67G=nd}6W0jwEJY2qgp;?Zs
z>WxK4X*fC1M9#wR3BY9tvtyY>(_Sk4`HA2nVlvDM=TrL{XrR}biS;x(dE?)$-GA{J
zs)u(0wcqke;%|8+_5aLg@GEG`NK1(Ft7;1>@k;!|=<x4-n}3OB{)b`KsJvzU&24xs
zY1@wA8abE7IhY4IS^7-etpZqKt4#gjz+e(o*C3WfDrNn=dct|=w<TnO8}tFH8fo9#
zaNhDX*hC|N^?M3Myur}a_QC}3HR)<em8ueQ4!_Y(jvqAnbd4>aq<^TW7AuT;!~Qdt
zNmD?fS)HzUS+U7^TwYnJ;JVzt!hM{b_Rz;JU&fD*%8XDLcEgtHr6O>5V&Ory+IMnp
zgS}ah+{>DrSEERgQMZpMSZm`a_F!FT3(dxVs#So}WExL~o`4*An8Z+s{R0yargJXt
z>8NnT()Zl1wXm;1&8i($(0OS-{g?t0=#}?~p;AxqN+Q?Jd>-kfZy)HlG-Dy!hbGQC
z77m;@RERg6qst7MbQ}2N+xzSNWH{Gw6d<sv-I<%cnci`Swfk@!{}JBX{EhZ9N4EH6
z%GG#L=#2zdBg(KD+!@)QwP4RauI!y$t%v$on<jTx$D_L+C_JoRhO<xtzu~u%i=%Dm
z>MuQ*)sH=5RY5F_x1(*D(lj?Fs*9F*ZA81f-7$~+8Vbksu9MW&6k8oISM+EC&r<n2
zrxdZzBY#ePJ0JrK0i#dgdFK+Px__0D881heqfa0a$#~0<G&KbHR7i-P0`kgxJS$w&
zDgu$EX&}r2X|YDyqdoBz>!p^(9Fl}2${QBx?!!N&2uwMBSEEKxBZ<?iA`@sRQjAf6
zXc81r#FmGp2Vk<*S^F0D;(9g6V{~4JDJqEXi+^7%CdR6LkR9`~=4!S3d*7^X5q@sA
z)aFIjR1%79IhPq5OgrZ&gKPM@$(AKYM+9pZ$|N51N}`=p1->KZ=n3kDGOX1xrU0l0
zfv2gfW>$ByJVUrp4~~t=(WWv{{7S!`QDjArqe?_`W8yOmG&gKJKph#XzgqC;|MKzB
zL6R@T?a6qPOX<@_vCSNs_wta33--uFE^J+@JvH?$vrdYnSj7EQZnfam$(O4{W<<Lz
z0&<a@#v6ppo-URhAjROkxcaj7%3i-HBp_S-6AYG^{$dQ&f(Q(x!SkK-Eti*Aqr2?4
zoiD0Cp1>%Bzu;q&v9uQql+mSCE<B|`v-pJThkMJR9i1$w4cPUL@aekqwjyIP>S9R6
zPH)*DzU)#A_W*6_8LK68%C?=lYC0%Xe4>S|omX`bz-^GXpDcxk2V*#MEqdhTs93ui
z!1QMC@Ok)-g75M14mcrvCn~_O*tL~ymCuIx868)JZ>(1V=|sMB-I*ec|IsC=Nhw=+
z*)mlnxyG-5{3~}iY`UD&e>EPALL->TB<DTUi;EKn=%!x&9k)JTgnmOy*}zQ37&_8H
z7bZbiCzy%Am{n0d&=!o6uA+|Q*|G{x1VxBMx0qEQKVC?Z3}GTyf;F{fs^UzM)(Fwz
zY@j%i1{Id%eX9b#6;S)`7xpUnel5#o_o>qfYM<KH6xYG6bgQmpGI9X^q+ql3*NF%A
zBK*Bb{pdXPffyiQ%N_57$KXVBr}%^erj`GZKu6M0RV6NrZX(Mgku1glYt;#f-$y$^
zK)XKT%VY*u@cX0R_AWW}i(qkb;+?X!m4@}R4(Q5B$%KVroHGK1(Y&mKKk712G<YMh
zIdj(5RMn53O$HNi>mS;xr9ERARo0|PLX`TCqG~&C&FvwxE)vP{CYT`c&T}wcI9d+s
zc-1P}mmb!vZ<q9Y51I|n-xVo5$dboY98l8EzQXhA?JJAH(Jl4DMaxNUnXGP(Zcb9`
zr+-e0n7o*1DS6aZV`yTZBP^*WZOmM!r9*V`h--GlDWkD8O$ZAfP={c{g(G)n>4@4G
z6_<j-jI-RMiW7hq<WQpGjq$}Aw^z!DVR+NfB|$<_(+iQ-EmF|dauT7UK(2?EW?L={
zsZWskUv0CMt4@k+cvx(!YOJNDnA0Vf-#3uc>^$Y(GMF3#LdWNzf@GCwp5gvQYe{^+
z7rN%v1EjtqKa#!??%#B$8+}Kp8`{}?C#gI9i|PIwXd9WZVYNmF9eDMD4Bn}w@j@FK
zY-NJDhErojIoIW*M_EfJ3`x{#`gWhcYcSG=T0#TuO9ID@+gDYv3Q^A}#}?km+>(qX
zNKYk5+JeFi;dK$v*4-V*Ce#z@Q^+){L#r9yp58u=wYash-R#nYe?23H7@x^gnYbsn
z($nZiVBC3+DRoWVq}Pr(q_=hIe+_!2Ssv+uFbSH$#RQ}XF2>P{#E%XFcLC6=DXq8=
zosST;L@m3RV1QltCHc%0;|4k23>1b7*c{v=i&VY|ql$*#`~dnK1!gV453Fbq;j+7?
zDJ(Yp{u5Fay|JXVFDz)j)9fb-lcMTcWYALX9?5z~Mk6;q=q=sScKng)Cd~ugu<KIW
z+5M)qFzj(=!_@CquTH_QIa+_3byscwHWneWB~JIDtRYTUcQtE%HKDj4a+Ggu5KbSE
zJY%;vw{~(0uBuXKA*u;c1k8G-KK(B=S<~%%P$aHNI!z%I6KJBogAQ3bxJUFc`=X%)
zl=caxa=qbw<zSr_*ITM%Z3jiYl`aWWKQvPDZ9E-LbXcDnbSs;+xyj~WlH)~6CJ*xq
zt6$+XziLa<3M(eYQ!MmWLWuLpyqAh>IgCb(>XAj`reqFK_+=9?WQa_qqAmPHhe)pT
zuFI_TQSV3DYs~}uq&)~3Ds2oiT|9p6Aut)8IJl0E(TmS>+`dVeq~-@?ns-5Q;vg+r
za7EJ_4WvgNA&gOt^%ni0KMF?{<e=Gp*um<UeE0ty4BG5I>)4`(wQ+ogvSo2BOyBeG
zj<3HUOidp(5fR|`WBUEL{*A_0PLNkXQt&@XZ#`pqt%3021Fzo0*qTBwH`n4tEjbrV
z%0#DICTNJL_;r*{yRVMTE=VL>V|v`TIB-w(TU}IX0U!Sunq&$Ws-dw<(6{!q?$RpR
zXs$I=zjuL{@xob<voXcY<WE7YI0DKmQPjf<kunBWoRH~}=!DB$(*ciT-^ptx%Ta`(
z+dZNbRxvN^zrxn8yB8{@Pk$7B=2GVj0ws-Ugy^BWCFo4Uhv4h@vz_g~{|F-UYn_b{
z8&0|M=`3i04GenKDw^zsBKt84C2~j_w7a}%ph%Q&kj>!K?tFb2<G?N{!NMOe6>EBm
zG2K>>?>L!#DQgQ@qAb>Flyn;<SDkNj^0l595Y^TX4R_Q$X|Qj>#Ko5nj18}b=?Ccf
z73lrD`(|jY`yc!7Kc&@wO^AP&R%8Cp$Wh<U)yBd4pW5ob2E+fVtqzPYS1J9zuKnep
z|C^w||N2Zx0e%K;Q7hAbC8+%k4vqY_>=Cg2WtmSfqNOA7sBFNT1S0}-W1vRhVZyMK
zinYaB{cY85*xp~$?KSS?{4>?0kxf9RNxRdnx-3P3ozy_iCM{a$SGzPstM<e&=k-^%
z9I?jTP3~Cf-eht$pX?8o9Vp}lRGX5&g4oe2&TShv4NQd~-bs+-9jA7blr>Z-!M_vT
zKlH+k8|!vUTwp75z_{FcVCTo$nn_)+5M$MFcpo6%Z=VijQ=PvCi1=E?IWw<KyWXI<
z7&tnyhajt?-LJV&PLI7w;NFRptGE4)GPNO?!@90bAJmCfJkqV4PTWwa0d;-(Mm2No
zZP?`)f7w^V)Yu?a`OH2eod*JIwwF2C(6te{m#)C+<WaQLdirSgQg^$Fz<`(WBqZ(=
zD@VQ39rHJ=^dlN9Mmw-;8pseZH*Z7YUL~xnx$Vb<6AEu!mvX<_l@}R!KeCkeTfZRB
z@5_je(FG6%_L+q4e20it_|!FZl^Me}_5HS)A=&p(D{vNVa#tfMZ{J`^k<hsZ7toPF
z5x;oE=VY=eSw7WmJqJaNMe0=%$#|<kuBeXFJqgOHWk>+27cG?rqV5oppJO~{Tlmu*
zuGrW}kTXXUg5SD#D^W2|vYXtoaQMzff!bajZo31LxQkZ}&S3eG&39kV+%el?DVl)k
z+4~+L7CI87jJ?;&AzZI2TaMS1*iL-N)JxjM_6?H8shRhYt1Nq%vz*oxYB}30DVKO6
z(<{X}U6zRbXnMaKOVQYUu*}jmlo@{Jt1622nk;Ohwk5SLajjDgAiSXspQVn6^BcIP
zdu(w~11<i%zuF+T8GapEW5*`XUOzjE6vVzYGPBcVwVz|*W%OM$c&gFteOkH2AJt0R
zv|$>7gHpgW#!B6$0@K31N*#M0>^y!d{|E)>x>gPo7C?Vt23KcH*m~4~z?7X7Rq@JY
z(ys2RYJNI7g>^FLo3r2)iD!!l%AYO9(pb&KLd~*l4~z#f8i&5>DxOBUJhV;U^jt$=
zSXx}k8Gs$?-?=v85V(6+sIYZ3UO{9Q`ikW1tr!yAUmB4RTYd#cZEBI8V4RM<mZQ^n
zSaxX~>l9LkV8G=a2Ipo%<KABH%dhG$cyZ-x52dtef#tK?=EkVzg9>6pQrJ<0Sagd4
z%jdnW&wGjrdNERg?Unvi<54TRGe{(!8K|g&xucG%Cw+8WcL4(j0j10+KR@c-c3^)<
z*RJYf9_IC6G&wy+t4ioHC9QDU|A%n{`Fp590Q@yw?yx0?iodak%y&T_$$y+Ka=cOk
z+PVh+t9Lh1Nz<Bu1=%xO+qTiwHw;Io+_I24bO5m}TmS&jG_iPO0)1$sHw$O&J2G^-
zF*v&5l>ZLi@chkjit~xxIdL?8zbb~{YTn_RRV;2$=k=Q4wu66%mh#|5nlz(%GI(A5
zLJCcly09o3q#0zmu{7#i#>_Y8LI2@4RpXI0bvS;*AbKoxQgPo}pe`?JX}MAvI5oeE
z>+GI?EB^Scf^fXKE^gd%5HS^Ay;|+=t`)rfV!DvAdT&cuP(agoxx`cr|LB{HT%EDt
zN~1}RPww@2XUO230;g;%+%)fAy1JR(U*(ROb;FcaF2KEL;`g2e5AP+!Im|;9;R?+*
zd=>~Y5Abc5H*1S!S59Zth08y%q0g!wsy``YtYp4eC~xrHqHXqZmOjhx_qBNjyL7L*
z=;Nm6N}Vg?c|+9M3)f(^J@{!Rs-@gGp?C-)9|*vgU+Au?E{pg3T8^1_&5Yb4e&bBy
zkJQh#*nw3SG%0>|)}scbEv#`FaA=CFI5{<O<x)8{H<Wk^7~ru9SgZ8a^AUAb#_xY?
zf;_);ke$ALzn#MlI$Vyufw89ls&hRTsR<{JrBD|C^u6bqFP-Y{XFP3lBr^KzpL#5E
zaq6l@CU7E9Y!G@ZSfM%gMtub%{y?^wDPuuI%Gn68su|qkc(yT16+zwYv85ZTd$L0C
zAN6xWU5Mr$nSfNgT7i4FY%p#%QxRhdo``gYWM<T+{epSqzI$@?lCUrAMDvzn;oLzB
zUk~=Qo|L$@21^nN#E`$qlw$@VD2g8=si<aRYhpb{_s2O(0~*2Qk79XtXA3&XIKzbL
zS6N}z#-Sy3dUD;b*rVBvQk)_b^PvyHg!($?Deg`hUw1I@#o$YZQQ)<*<|IfTO)}S4
zj#U?ps%u1onm05q+qvdkwtnDOvkrc*>jqG)Im|q)q)s)BC=Pj=t`a9$0surfeuq8C
z80dc%3}AbaWEBg?1Y(H$_##jqqxEp?7qPWYE{OYI(M68x#ecJp?laTGT5i6!dS>_3
zvyn%RXfu~3czB)as)Sljk$SrXg4Ngo9+ve6^PRS!A75S;q}cnkRP2UmROdJ?1GWyx
z03xO60;{8IA1*ksh>>ts7Y~{|G^EUB`;X3>xR%jg&M_bRAT}0q{lX%(k>OD?_o7Az
zUxnW%ZM<0{FsbJ66nWrPed#ioveutXBp(MGAfHXYH*VWqyQh_2uMg8#W?9x>7YrEy
zsh~F?yn@=a-a9aBa{25QP@|F*jl7NbT9tMupN)rM^vu*C@Ka-aFqc4Z`o8{FJ!?e?
zF{Mx$|6uALGtzW8uJoF6bIZ@FS5y+q^+ZW<g8ZE^nT@try`?0|5FlsPNR92;NBDFj
zU;QPX@;JXdWq#K@feq6^DG{ki*JDDp40tY95$-uN3=&^NZ-~B&{oYm%Vb~Ft{>ZQY
zoD0L36$#fKisgeK`P_*Q#&i2CK5-8xEE$lIG-Wym8+LBMgy33_>8$1%bfSFE^mmX*
z{0;o{Ye-ssizm7AA72+d5{x@iY!RyODQLZMxnm=e{v|6XZ{0pyytXX@)lBKybje_G
z=lySqvVUP)WU~)S$?pUbz;DCZ-z0zk7a$Ul=l#q1Os8#Q`>$fFzrjSA${T-ibKXbV
zw#Qn#J&JKK%l%21HuCwuwpV>Kkw@ft#2W@BNl;?Ljy@mS3CTn2Hgq&`f$sLYyq?;B
zpYoS74sq@K8MDygd1ul+n*Q?IgmnMV=&}grp`2H5t?wShXE#?i#dmq=Ab<V?ok>6$
z0rRc<>~LrcSQR7Q=A?48yh-+rtOAI(sRgZKFzUOCP=}QRB-Ncc>lQFmzfzXI8~iY9
z(}VVkrJz2Q=&7U$WGHGGgO<KU!0j|k<;C6=EK97F+A(A{uzCG1X3Fr&;`Rz0AGdSq
zxU;LP$9W%}kzMn@B3L%5PTZJIzATQvXb*k<>_~rDJvwmdj;nUC*~Q0TyQz_#vl5uA
zjF$bQ4pXptG2q0`eBXbvW%bZxz*g<Z@WqiSy?q-Zvcs@xl5%5O*QPFYg;x~LroR{R
zJ0S8v4x^^kCr;Uew4wysqk~!){r+M+<T;qTDIcT=)kW8VbO2*legqjFzJ&)P`j5$W
z0F8rbp;8AKYztrjc5_}QmJc=z;t=l4D@J^+Fu8IK>M=_yDn<odiz2cD3MX@Z+sPqo
zMn*TJ%xWL6$^rrM&jtt4+)Q!nr@CJrp-E45WFz19Ii>!0TV`<`U&KW%Ox`^3?Zj(0
zrUXnz{-kS`tWih`T`>Wbyd7n&g+3x5S<K#b#Sw$R;z4`}A0*)lnJNKUUkD@@um-rH
zGaJ}AB%t2`IwVVuv8_Ebi;~3f$wD_+C19F>vSHg06HPjv1mafExb(ODp`L`&lBXGN
zR(i+$9_ea@$TC3AoA74wMH^u1wua170M=InQp(`Vwu8-j!8+Kz@Ci-=xOKP;o$YMR
zSpYOQ$k2TOlK0g2=vz5YGf(uxBN?!LVg>;<Ma&l~hm^fLDD<4HvhGv&zgK^LmrMW!
zrY+}<nYEhGGaa$VGB2#or0&n48P~!c9i+dC>k#~46?o%m4mthFlC>+jQ`2Np<2PfV
zi_l?-d-*_MC2J;rPL`o*DUw|t42GwTY`w(S?<;~bIV9g8%6Lc}bIgrAy4D(gTEN_i
zXe)Ye>w;1d8V!=5bcK@=^;OrWN$I>BqA&--?pxH_H5imT0(3V3yGmG{$3zSOHPEVs
zbt5OA7(?Qr8WJA>yTX-h8kKTAb1ttb8$L$?g`XP^WXtCbS=%d<xagQhIH`MX-noVG
zsr?~T<Ma!g52sHQraP1KnK!o1EB2A}#0T-D(*a8X_RlY|<_IHL;({$h#K%UO3aW4+
zW|{mma?CATbr>{r(~S%jD%&kHDpzQzQU;~qpJJAwvmiTyf&8!A&w}Q`Tr_ceX#D^t
zJ3fqjJzUOW?IJ2iLvTO@52lf>$^p0-38eUZNCanrB1L=f^vD(znq<Zf^HRhXnmaAH
zepSoPvZkl#VG1C8E-<=rB&5})fGvsBXfO()RFixi?gcNV0JFec9l>C|Fb)3qG8jd)
zF|-{yeIX&Qs5cuo6h)+$zb0jMVQbhiL2E7MJf)~`NuDvk4qu|U6y!Scp7x(^h<<|H
zb8%R_BFtWos6ZsBT$~1kwU;NJP%Dj)?Gk{wtQYCD=|Y|b*TpUpH&L3A7a)&|irh{l
z8Xeo=9ZkDXx&gJc&OzpJol1a}f_4l@YR`Q%r^H`8MZ#ts?C;pJ1zYc}5cWD8?#xF2
zG(fN_p+opk$dOKoH&?T6p*j@{IDaZD67BMzW<(aoAKcvAo~9?)lO9gi`txdW<GkXU
zS3!b=KCJ{bWYqke>vXdQF#LL+RI%qysbv+2h|>1C-dQt+i=@*q{mx}{@iL$MY*dsT
zxnAZH?nYEL;fQ)wRg|qx>eqzC`=U8uE;l#QK<|}Wg^M~)%59TwW%(0{q;em#Rahg4
z^J7o-P<;}JTT8hdqeCxcVa+-&eZS5B!piomA;atQwr4q$1}<^^5Y?-*>t%z!9-*tc
zVSKn{Xog}BYbov$Q)Txo&&^R@k3{}mPN=<cj8EB;3HcL(#^g@3<vEJtRCK8d-jqW(
zF({R+wl~CEPPXkc?G#4|T)Ff*P+H6{D#ur?;;X6`EK!e0vi7%R{mF(wR~pkhQ(Kjc
zA_+`WyyFF)(DEuZ32Ac^ledQE#nT&+$1`c$s+MbNIlOS(nkGE~`uu90_kX*JE3sLT
zWqlJdhu=3Ps{e@FResU2Y0E1}%L!`#`#I@v2*gYU&FEFSf853!X$#uGOcuo~ucY{x
zPVozU5UVJpM_6HPvCc>EY+jx;gL^<>PYSq*S8%2;&!g;>OCw_1{l4uK^Rv?-F<aSS
z+Da#SNdlCkPb@PpPK#o9?^FrqQ`10&dfwJ;L{hKt9ala+N$B}XWUjzjydy9&slLLm
zPwS$G^@j`UZ5dOCCq%>`n~<Yo$+j(uD9J+!AEeVA<7YK3!yd&`?e_GYnTV>_kv`s9
zWyg-w7aU?D?xp97GrSjPHAZo?I>L=x`3@NphvB0ZVk3FmHo1hXk`PSIQsThKbhEvI
z#_1Mkpv&O%9^-|-bYju`HS9-O>Ar<TW)XURYFWKn%YFLnOgVqNS?iA$A~$nXH+<(+
z3fZa@Ep^KoV#E83bT$3^I)q|`5)Z?~r8su;MCx;LZo&YSbJhI0$lLv0t*UVJ5UFwF
z$=@*tqh;Mr%!z)dYp4Rl79ngFF3@>K=)=3_N90=L7w0i8eS4({bWp6%%-P`<N8#<L
z^sx2UQ@}V(2)e@N-%pVl0{LUcny_o~3-=CHT`&dd!sapXZ!C`*cAOgb)b=03DwQ{R
zI-`3(*o^uwbQEPJn<Xztp6PB*4xnhiMRay;Yc;}WfRhXvtub`{;~7Qt(EYlstctkP
zhvNpfd%C<MDvFJ$>EBkj-fPBZr6}V=wU>?lkrh5uq&^6=M3)NR0IVu!j{cVcza2Q>
zakkW7TpmVbaOB4?+kb`DKmaC<^(Ot9?8)32K<(q9nQ?y)y%~GmOkGtf%=yH{sfKC5
zrUuSOgfS!cBkwCu+fEPuC2?bbEjbUdnj$Mjs7MmAsCSXJ=AV^=nymO;j#&Ni>D3Ll
z_N85NU*yd?Z|xWmxRLa<i8!Hp``@_p#~;m&_TRhf{P*rk_aA=)a^IlM#!=70RA1ZB
z>K{Pve@mcBRO+=`6@l-ZR(2pp6Y;e;KgUJnLuo<@h6IC*Re0IQEC8Dnnkz998aiLH
zeiG3MsdZjL3!j}hTdLmTc$PaA2%#k(D*%t*(Igw-z~o9;WRSlBMy*{*ssi?!ED=7r
z#^>#Z(9{ZaBYp3qem3l6u9IkXpE&kn$P~;MfpDn~V=YGv=%T5uVgAji1a{)1Rod4(
z-bSsZWvJqiLs6lImco-E28^d9bc6$V|Fi~G%&Gd!GlK)CK1L)v*!J;KGhs{lRXFuU
zv2gE&B(!ulYeAnTB{jNg#(!tfTL_`-c}VAT@Fy4a#Krd%E=O@i%xDF*pvI(f4)kmz
zXiSdN`(6i9*;9`RK$S=*lUYT7xJ+V})x&N;QR5*K7i9a3S4)+kx)rpzlSAnvvJ$g+
zqh^+Jgnr2g3xa*4f!zlL>OvcBM7?EB%s6$Eu2zH8ggX}V6#>Sh0Q`XN3B_ouI)Ag@
z!o{93Z5^@~Z^si3*S#0-Hx95$!5E(ghJRrGq2h*URp_M<v50tLp{q^mHu19q`cxKW
zfU|D0GLITTryPffVo%q#pp8@xP2llb&DvSd#>G<Bk_@Vk>q(QJP+=<C4I_haaFOoF
zLuy8^$`Kpt58mnqz%+E^7C_Y`Cae<^i^mXS<VbHVjjl>Q$uN<b!zyZeCCW6$#QiVa
zcme!!CV%)(;BkZ5n$v-BDJ?!K@z#kb$25s-^XY@3wN`qf9b6}4c}>F~5wC3{O$IU*
ziKOi%9TPEWPP^NWNQ_S9izq)@%m><ie;GT0r}3O0p)m)VlImiK6vW4nAtoAMDe8EI
z;Zwy?deDkveChH3K^y*^I%4P`s*<!@nBG2f_HsfO&fhyIXD2Rf@!Oiv^Il}P;h@9y
zTGZ{87M9U}4*^7vHv&3yjtyC{iwNeAN=~dp=u@VuKoi;lT62zXAW0i(Kd}kJQFDbk
z|J^-pZao~@?9Yx^8bcCtu2UOd<vu}p&6NO%2ZXm3<GG4hiQ;m{v5$f@i=hx0;nPK|
z+(vx)LMBgLdozs5liY^ZbFPfE9#-tqZYn)~{2E3ZLS@YaG0?aBtl)6GyC3h^QQiTw
zlrNSuibW-7bg`Nc%)cM+6@7SxGjiPB_^Nv#qtM$H&wVm?2b{$a3?rCvjvr5d?#`!p
zRFz&+dXJJxh}IKBb~?<FZrefad9h}5SIlxgM^=tMZmas8o$Q}Ecnv#gNd)E)onQ+d
z-Zgum_t{|2W+A!YQ1lHwPB-Y%0()|i{c6vSw(6!1X!&#Sr^NAed-wgl!`*iC4e8lV
z;zSu()+cq=JJwrArBwk7t0yMTX$qWbVisJRk26A1qMM;aTnxX0_8k_#T$?u>ZR;1-
z)-3C`mU7HEwM<%_Aepr2OyZcxa51{LwN03-7_I7n$`PVJ6FLmgnMSxoQgkWK?0%Lo
zW^`4*DDq`pjNTl)LS6-<nd*ysuQpy(fmkNxMR9%oq!AJmcN&o8ALEDA`l9Hcj;@Ep
zsLE3B|CWpS*GAgyA%Z;fJ>1@){<iw{zcx}qer;hPo9|p(OB)MAZA(K36YGDGbbqs%
zCMvDjeQ&0o!^-Ccv{FL3Sj3MK>cfmte57e)aYAxwuZ7ql0Rj#@KEOV54^JDQCE+OS
zl3K{dwaeox_NX4}>3+4%h1-La=v$sr7~<e7!EfyLb!CYo6g%Sb_c@J9LT~ozNmcVo
zPjA+37s^YSkL91`!;fBzvO`A>H@3H2>QLF01u}w%&W%3FHe1K*;`ulg5uo+=8fK+S
z!;~g(!uy*zubJEtf5mc5p}!M2R;BUvM3x3RNoj_0kXzpn4TpRZjfB&9&@c<3PJg+q
zzJWA<J#hBk1$#)_eDZz)e{vssXN+%tl|mf>|9%y}$j06rWa&L-)-(ry;L3zE>OawA
z#b9hA11%66T^+{;i`;;au`_Mm;I*6-LhS<t-%t?uWm4hASEkejJ%meCd`64rxGDTK
z*(P8eEFcS%US=bsP+mis6&~P89T?TQ3bqpHup1Mc5otd9pv(NiFxjx&7l;HT#8TW8
zzBFx}4ZL)2YZY?Mv#7HrUQ62{;?t&%lM>OnuS6pVNZbUVL0;3xq9l(2*svO4){8ZE
zdwB@3OFfW=)o~<#iGRdiusfy8anHTLCe=+sC*Xn2Yfy0nq13V`4m7BiFp1$tRT7mT
z#Pw_~s3L5VA>#rVuhRn-PaLt4zvuaNMd1d2zW|qoRq6ChIMv6mg_#<TJ0d`I!QdiM
z={fUCL_}7P0wMN$n9oFBbdvKmGcb9!TYTKO>c=|yAT-K5j4$hB%{~Ze(7mCFvGyh5
zWPe?3S<c>N!uSv{ZI}!){|JP5TNiU8kCt-eZJiQB^k6fGJIfHVU{LVNEDJo%iOS?e
z40Mf=XH+0Bv0_|Xj;-8d<vnpk@EvGfWDPQAYwPd}0d~U|KFD*B_+YZwIq0AiN({BL
zs?8Kr^~_7cf}HaxaVREt+4j*U@_CKRuBxvOphmZE;r;pY(~HJa18k-gy&;@;brt_U
zdC;1(bzphyi5=krjc@IZ$TA{%3qq4Kd<;@WILqoY(!LEe(WRQLw3?l$OK^KOy9V;A
zI1}q~5VnCpA4oE1<(j11I$%|)=xSAPvVqoa1U=p*Fn;JNRS4tp59MBpF!muRa-1KN
z^9%*?Fv^iW&MbR7Z|Bupb!T2m>Z+kC`_!(()PhizlqwUCnKrJY)Waxxwq6X=?|&SI
zwBXxr+&~)PDN6}!MMR&sjZub!v5#?jN2?3^3cI|Oj81mPEug(OBfAQo5q#LKUGH`S
zJiwVVyDeF3sJB|LX!ff_J**q(m5|AWROPWTZ$?Lc)MTeW*Y3Ec^=+7N=~_6%uW4Su
z{HO{hKz{kGwrAt2J1Bz1DjN2)Wygp@Gme@K8b2R+B==->*_q6vt#_dNU>d|HOlnDd
zB$cje;D_=bz1L-azqajN1_-aU({wxjdOdv*e{Y4IJ_709KD<MasLZ|MY%#ad_!B4y
z%h<N96Ewj4W1f<s&sk_5)x-fm@A3&jfx{1qfy*2xd&eyhe4b~}nRl>-URC9DfCm2S
zFz<1IXFa2(zIAFXP>gpK-4ettZZFs@N4ir#wuOGqgjHntu7Q}5bzTKpF^9;;o!Qn=
zeH+)7va@>QDmnQ(QrMJR2T6Y^`DV&+O<3+#Yy%PJcBuZpi|x`OR%CU)XD7|~?ELi~
zfg!)7{9kMyy|$d8zM-j&gPftQqv5}Gsr=3Oj8vMnqWJEMcv6nA(gq*~i90PbYZVEI
zL)N4bXfKe<ni+ZoYaVwqch7zIH0}UnMi$ZXX&fFlHk!hCRL=#~-%4UY&`g2#ia^Ku
z3_*+CmqVe6`%0K=17%^bt+NMhNQRi@ge+m+Eco4N8xUlhImkYG4Om4EP~kRS2p~VW
z(+n5TFwrW{-s~Q9Gw$$+9IZdJO`3RDfsE+Z7Sr0e0;9e1SQoAS)s3WfRBx8x+LBF+
z1WZj_#d83gFk+zfAyFrhu7Dv%mIW8Ig;pOtv}eK|1{M#hNNvSOS(9BdEwIvR^*O}x
zoSMdL!bzfMlu?YSrj%JmLXgHj7fRxRS*oa@VqQ4_9%-IoWC!Z+vZ^_7XTsr0#M4!7
zRQ{}hpf2dt>NPSed*T%K?1>DQe>3mFk**bImH%Ur7HX8ORn=JRQjBnoPFu`rt9&<z
z-I>8z-xrTUaqb?Fn-Or#FA-L({FbHVihMSh2<;P%qSzaB)yED$f(^#G`MQl5l0C3*
zOwNSPg|C{2hz2kb44H%8GfQHXt|&3B>QQ}ynz+=?2)881-T<`iXSGf(obkE;ETwlz
zLke9j;gCq+)SDCm8l2PC@B3mnLA|&{hq;WM81o}n9><2RNv{2!arL!~v(-QysL|4i
zq?(ntlCsMz=X82LHsh>AFBbqSZ4-7ao!5noG~P!(fH@w#>bCtV5(Bj_OZ-8n?9L%&
z;My5za`9X0MS?|Q<^s8p7>)3myhvGC6k*G@t6bvH9&js*UBM}`)~Ycu-L|}`IDHCB
z?PkU~5(*78$W(>qeD60cVE4!cqUNhcscADQHmm?AXw7-7c?fIfu`wh+_Lhqc+ccyP
zBso2BavZ$gQQpS&kG07|!goT~o~BBsM>Ub;k_og(kqU#j_}cz_QeLSfcur{R?#&Nu
z<dJgBAU(XsEgHwrb;m5royB1_;)31~fb1lUm#l)RM*2Bab~Fd-Umi<YPigz2QYuaR
z8fxJHA)QG<ucT$V`-{8DO_7KAJ0?utQAO8BI=2#`+So~C#dG`F7)h)LDR`hMU<~m?
zI=sJ*h>ZyS?4*A?I14YSlkW5L*Yjuo4t8Ai1E+HIz29^&VML`0K6QHA!^s{D++%u%
zw1_Wg1_EijjLW5jyZWOo4qi^wU!auraJgZ~<kw4-MbCT^nHPen`V5WbESUink83E*
z@@DMhq6LEc&@!W`q5BZ%cKo@!bACdM$^A(`40NhzzOXjeYgv3Z{$N@Bw)op5s9MIB
z!<RJwD{j3v$3fiE0t-wP3<0MGUf0R!f-#LOs#=4n8GG^kqn3Z9jM`*oHyQr9a0Sd|
zmN?1qOgtnX@XN6Tha&#x*FoJiW84`E=I_zgfJi&>Xlyzlpi=GbJbBxi`1WSjbbnq1
zQwH3qq8o_5w8cVRGT;0@GK=tRMb<(bRLc_$UGL7;6$|EzYp|6+hZjZc_DHuTv>Oz6
z{Qk*NAK?Gei2VfxYo!oJ8Na!n#&5+2@qZj=0wVu!y}{p%FGu;_zf@wKXOtnAanO<R
z4n45ym_H>W2YrtI*+|-yB9cyx5!bQs_BtDtZiVg?KQjD;D|*t!>{sg^sxg7D>IsA4
zzRvOc0m|AJw)Ga4#D)(p`qV{%bwx*2NrT@~F>nU3`d|fr<+6@U|2%U}a0MbDu=G1K
zSt<~EKaReT6Z$>B&tz$1yEA5QdP#%yMcPWn1-jl5^Wt%qx%Cx0vNzAV!fBiMbBlxw
z#`SC#6yBALESZoA7W57b#H}H54q`4N*9`IpiqcS%0|{ZkzM(1PrEJgaveu}m)yZki
zPfw+kGOIR+O(#w0r6auMs3BhKChK$S`nFQL2A!z=>w-nuSZX=KpNSk)0UAI{KyC9x
z8X50(T3XPi^XYCXMAEh$&{e=<{U7paJ<W>m0_p4H;%C+`RM5I8#_B_QyV#!SwAT1q
zF|9~u4IXssfj_QeIO2Q5tsyl<nPr={ih{Y*+3mqKAk4ChItnw5RiW>6a3?k!mew}#
zBfBgfBPt~~)Ewh*zsrwS_N|z|ATn2$#xj3x)n3<_buc9{H&KX-v;%>Yvo~<d!rN9r
zx@i)vn)oIcb}%F)BS*AtPXcscfCK#XdR_AhXz)5L{0<c$2I@jqd8_ibaxdI%<6)(w
zbwBjg*E!yd9_1vZBX!xBySvckl*g{@CxX%qVVhUULmYE0za66FA4F{_#uvXbe==p~
z%%1MORt3_Ro)@2VI3|qgqIly(i!}bHCh1?Qf!5?FKbUXUMIH|Tfc-x{k^ja%{@)nz
z@7i2bqwl~*z5k7axlpyVUSmc4oYL-{%yW0z{{Ft4d?k^9rScm3*qn6Q-C=5cc*Gqh
zBB>zrkcXR(y|*yp>WI|sGV)m0gOO(VP=gu!U0scWS|bd3Mh^Vyw<BQRoMG{`z1Th`
z(<OxUhugEfZg5>sU+|4(QJqi!@R4WNE#Jk<TxcGNs!4CtwtVdmG9Z7pWdSr1d~vp?
zEBzYW%>3b<#3ddW@d*E;kO7xTY-U{a;+9c*z~kbjK2x#L*|DC_tEeZqjx49f|MaSl
zOu`d2i1Coy5}VZ(J?fJ5G64QHKjfVbinTL_J~{zXT1%$y&SOLKUWZe2m}A?XA}^sS
zD!rgty=F6a(a>%E697By(SlZCVrJFopqMsotsc4eQR-oJ3O2WzJJJocxPnb;N7)*8
zks1{Q#&~s80k#k<%P@|`mO9Uc_Q>y?=aSj`F$F+rtH6}8dGa;)or;R7wtn1tZYpO+
z3lwJ5S7Us8si#rmR;UV~wVDnzjDOntXV=NGQ6srK_4_(&{8_C#x1(@>CWGAM0kdCf
z-ihB5A!eezn<L=5J5%ERsa}1(FmXpUVr<wkf{d-?OSsIda96YVNJDJ(Gy(e_lRO8&
z)WWm^MKYglCFD;-y<=Vu_5r%>f{AkeR)F1rsXuDT0w82KS_XWc7@$C<$bs6q9v<rz
z<m|~memqk#;_Xp|7VbhWd=M#Pv&#O-X^_#05GmpuOWc*EP$_`|I)z4`s-vTJAmyPx
zB9AT^JM0nf0W*&)hk9Aarx#z2EB*-w?L!60mcx;?#2yrgQH@v<IML@r#4#BM(cF)P
zBr6z;p<QE)Utb`uNk&U<_Jx;aB8yPcX-U4of`*;&n2`z-+kjPYWh|;EDznXD5DkyX
zKIQdf1^yBJtuS)5#_M>S?dkM7#z(72O^ar8{}h~ide){v6AclyD67ZD0cq&c7{X66
z)91#Cb%!>gGEQ6t@s2KI8ug&V6w@Qe#aIWusS)7)ty*(qnEY6tJFbmx!Arvz>qid8
z-{(n_wZlp06o`(15JtzbB4M<OJd}YGAv6gKEAlfz7Memn`Q7Ac<fmCV3_A*<3U+Yo
zA3$*o3elh4dPNpNisyG!DZk*oZ(_QHlh?ItL`n>so9?LigMPHz*@z+iQ0mRY>#N`K
z3u}!wYRoD}lcm_dP<H3}$yU<w$9@dzkc-5~QyZ_txt&`20h^++C`-K6uHgsRpDeqW
zw}E|q)E9Pmy&sZ<;5~O3$H+0R1j$3vi0=h@6CNQAc1ic_$h$Fsu#{7yIT_r7J0>6X
z8}qvD3GjD?+hE;?#K&77H#0b1L<5mI)=@vB`-D_}nSi+gSlpADWb-4!SKP&C`u+sM
zE1^Z?Rxe8s<O0}_c%zahK{yfXVV@aMR74Eu9`nfNCjp4?t<pjHu1qAmtr0IC@tr=x
zj(D1A+$LT?354#&gkK}joR5SN#}Kw7uA<3-e;h*zZ<2V6cA6sS`2o6Z2IFVVuv=z%
zpJm&}GmJjloB|>&Z*0edqv*thfS@4Yo52zWB&H{2#S><Muk~ZUM_G&pfiwqq4t3dr
zH#ILl{`b>VDcQ^)kxn>mghr$)xX>_A?4<p){4gEQJvH^;p%L4|VU>;f*F;TtCN%v3
z36CXhd<E%yhyWZXP}I$c%Yl-^Q}=f+BHmYUT=|yTC(%GZihR<thw&L>lxys}?yoMv
zM^1*6HuGG^B;8@{VPIX@^u>MnaT2B5?Qxpy(_>GoC({*qxjdIWUd2WPbS_5BMZozu
zhl0Q=RUie{Z~#X7v4md5sSwXHP=etVp!_0J0-8vGM2zh<RUGAX{5*;YGqC4Np&jp)
z7v@jVx$&|sN(M8U%ygtF7x;eM-^Q&D^<zYLnj3RGa6OP_-5qS={ARfrYGo2mgfpBJ
zT9&S=fr2r(k7lx_bX6^M!&}EkOrtp{ydI!14){~p{-?4x98{jjc``c&Bm`dYWnkc4
zDvHOB6{oYJoHEciT%G`fGYCbq>GVmFJ>k^Jp)l!5DEOoC4wUVn(#QB`{3PF{YCXnI
zYnFAWPha+1re`{!#x&p>!@V4rhQ$zWfNUnqG4-0!WPm{a=@1$`g?d^MG<`N#kR8|}
z{gJ(+?LkxyEO1S|3_tN7!nV0zh=2@(D*DJJbfuQG8RX02VO~{lo_PhQ_i$^o^MD%B
z^PpO5%SY*Z{R6vG)UxtSX07giOY<O=?@HrbI*hbZJTI=}ZUy|&Oa}+;KDaA;=R%hJ
zWEVq4O5oMjk?0|#d@)-5po+|INNv!xekX<7UNbmpUQ)hGGtg@Jxr{c!Qtm7v53-CV
zwBi1r2sn%IsIyc2gK#^*gf&AIT8a3pr{FIQ=0$4d={*gN#A8X@K6lQLtWFL(zcBgL
z>7&go1|r*Y+kHTI%$vk1N)ttLgJ-j!T%<|Oek5|iy(t3^r$==}Pc7J!#!pB2mfi7B
z=o_Vot9@@iyZu_upVk4x&}l7*@0RIez^o3Xo4_iNY7|e09kHmNkwaO(shBm{np0Yv
zs~B5MYc8DDc_^I*bG;9e9akSo`x&iI4<9S(FO9r)S4r+H!atpW6Dii!C+52|`L;V}
z**z_&yEa(e-n>Vd`w`R(x3${k-IW{MB{+qls+t_DlKjDZU+x-#<QAC??rC4=rDc$A
z=HE0Ee41p$i(D+@Dg9w~KJ)Z;CYj)mu7F@H0HOk|j7k+>9vh#b;`U}fbr=X1@jKKI
zbz!a3W_4X|t_gIKjrw;7!=J~HWC4B#D6}3+(;#xae?=X-Z_QS?<W++{z)J|zN0Y<@
za-L;5N{8Ftx;cE&IdOZXA=**zITGNak$ZZ(y{=7PNl$wfx*)||bx0FEA~a+dLZz0_
zT<~kN55a^*weF7AcZs1xWDC1MrTCUldTLDJGl@3@;zd*K$hM20_)i=olGtT@%PXNA
z_<y6hO$|h0N#`8l_&(9mZS$}MNl?L!16q^rOK3~>GeHjHJ3%jI{M`9IlZ^_?6W4>N
zfC8DnP%*O9{4gXRxFV3$cl5HWQ>$!yyeiR5<;Y6mBz?r*5Nv~f_<sA4zhM2pD}fD7
z+2h6c=~v;q43ptM0x&@(8EpYm<8M+!=^wc3|3}Lms4QuZ`K{$XQ+9Br9XinYt)9-$
zSJKBUT0*=G%G$`)IuN1LkQ!Sggh}`E@TPVLI7DKu&Gc&G*zNV9<}qbSHE<*_`W!~$
zf5nd<#C@4<^&rOf#gF3Fii2@6ePZ*7A6=+iebjA2DDO6Ww|_q-qKz8%r=y7Qr14h+
zmE-{Mk`{-1#`?yz5F`FEoMm1^1j>U&RfPRXpxV(!K{T=Dd->UNt9;hG*P8?5SMU_U
zmj;{T*VA=v8vD4b+)QjYM3zEO_tsqM)*<%d{+S6w0b^smpz(`z<AsOYS~O(TQkKI1
zVeFlvYk{&g;n=oq+qP}n_6bjH+qRPv+c~jq+vcCT-Q&M~Yjjohe%=rJVXw93H$M$8
ztBtsz<pRg+pZ!%f`Ct?V>@jwe8i=b%D-c0*35i`I87^n4TQl(F&f1g_f4-mH6bbuP
z0LP@XGG|?gBk3(6^+1)cQms0sS8hZ}EV`vsrM^a-e<`@^lSx>L>omqqb)Wh-WM7Zh
ztNn^FhA)#Q+o+L)w#Ey_JvSwI5^JK?i)(zIPZC*Kk4^~}(P4yTVEdXaqyfo;21PU&
z=%#+fB6kL^nY@tA!7@Ju?N*dYwn;Ny{*U$Pa`9}!B$#s=`_lY@A<r-!sUE{9-LETC
z9RqX4Xf`g{)kN9+F7*)M&MVNVNB$6OQ4&~tfgQ$LAo2uC0k8tk&oMiSXm*7f%B6gf
zc93vjgyCn)`p1{wks8S)n5V7Nl79%}wn+-5?|pd6+!Ff&3gJvB;(paKH`@oWk~24@
zj+LmH;#jl!UtSF58%7m2P$b=+rf_sn4PZ!8<C=>qkrnoLBRZ+VWMdJw_E|zWTFti-
zsw+9$-ps{pt^L+{xnO3Zh(cXKBxAU8Unfe3JBFW!{KSaD4{0nMG^4_s6w7zW&!+~O
zA5B&)%7P}R1D&QRmfM}N52%D`O-1AD8%&`Ipt7KyPauxqj2;UgCYjA^>skv?@GI}X
zY6e326($2iX;c9&(^AlFuURrWX}MCn$@v;=?QS+FE?H*;Jt~-J>W!NwXF}6UXuAV9
zMU++LESD)#YQ>MT%r#nm{N{2qloF$&*n2`bgFIzcQII2(y~$nQ*wewWu~2PN(}1{&
zA#N?U9t<wtdz#0*zvaN?qec0R(wy_Px=K8FU^gXVAiT_LQuXcUBtchiiZw7k!Buk}
zz0uyhCOFWkAPst@4u(;;U<X&cv`AX`YC)n&^ov})4>*Phh(PW|2rE^(rg%6@Mtw9=
zzTr%&L{E*#5OCGBBIl9F^eY;sFVz(Q>#sWvvrIbo!|E!{C?1>*2?BZ9q5Q@vJCysr
z9=Uq71+sKAGWgvF*Q`ha<zG6cT)Bb;ELWvmcbVHD2Uv8Gi;YD~ag5?UDV%3lBm!kp
z#76tTN`%!*o4UX;4FgNHon%EBBTbuMi3TbdLLlfhc0BOnY%fmnw9r8)z$x@PF1>6)
zh(?uKu{3$E67r;6zj?vjWzuOKHl;At{IYD;;-CS;+DYItfYEIx<<Qh)F4HhT#0<iW
zbnZ|xxQ~e&UYjk2U9YQ}yy36fH&!3~#aMx!?&wrPS5AE*szoOq!6K(sux_Qcg3~OI
z8d)9gX^+>$fTvrd|I`n%R#&Qm(R;-8dsXdT5~N;$lH1qYu0QE%!)uS@Yyn%9g#wMY
zl##tEgOu3@$u&|RuR2Hs-d@OsIogB2!VE&q#mw>h)z3`{k><fog7FAuu7Y$`V4B~)
zn~9@+H)Td|vF{5VQ$=RV(#8Miu$;agD(3BZKiM)SuS;S_JZI{`U*fM+N;Pa+i&EQn
zyoX(bSs#5Dy9WKvdnY$P_gx+y*LA|MNl>J6Jv{w>z3y(lk5|GE9@xrlp+D)P{=!P)
zs|Tg>1vn`6?wwT;oLJ6p80PAS&bhZTQbiRrCag|r-KF3vXU}n&nZvUU4{3yr24_K7
zOpN9Z^NdlsYP%PPx>u1dG4Ob*k6#nB^$+e*`pn1`3I&%jwd85Xlrs~qIK~+yFgoMX
zKM~dB9q6TtO(NYozS<ueGHX0t;+JS|*3eZkr#s_l51*c!5iOXD{6AOc|L_BVj>AdD
z{s>{)e}u6AqK@x>(~j~AqH@a0GC$3l#;#63yrZFwjlJ=Ig7i%q+VcBiD84`D01<pC
zwbi=y3ZIh(34wXrA{zk^s#_G<3rVJ-r`CN&&HMBB?DTrbHdlQr!XRGrsmu4NA#XZa
zs=?#rgj4Yh9ba51N1ta8FF)o=6(w!fanqD^lM?95pYtm*F4I%?r{~+r3Tm-5bA8u@
z3%7@Ny|$6QIY|Ers>Qw~2wkn*R{o>IRxrI)%d8Qq<~pa|>eS7+f;xH53rap{Fj<Au
z_)y99R~Da~on2{RIl@CAT|$){YIdd)s%mmJX)|RuW)+=71++UyY3arCgrY;NsI%^k
z@b$c(ZnQ%dUaE;kz-Z$vW!E~i!nvs8F+z00`+_aR6D6bQA%&)-^fek+<d=E7Lg;0e
zcWoDL-*sb4C~2wpO^lQ|w|2)LPFOyHlWJW1fy&q%9J6K1)@4c~>x&)2smu85s*8qM
zV~q0WcLz@&_VzCPO_?AJR1=#D8cyH>Gt%TGj%1Dm({xLXIR@d<;y-fau4J}L3T6?9
zUfSrvbSVUFK5ETp;lZq&$zXiKnSI<6DhhJ0@x$OP38PWvjY(BbO|%kgZEk97Klyqj
z^>Djt5nUQu>E9ZPYbZ?1kcU5{N21zazG`)-;K!nj2$T4PK2&IV0iV*`<e8!Vm5uk9
z0F4@)$>dsrB&yB4(Kv;Qvj&!>di4lFX_eDa8i~2TV!Lp1gS=DBk5x?e<E+I-jP!-N
z!sA+6;d!Xusxz?eP_;j1#a-azvhu7kaH9i>0b?z!#00tIgDUOEszokOf4W{Vs$vOx
z3E&Wxri!1!YsMx~I|Tj;oPa*u>sHzdz&w*}b}u*^#wVX8U4r5_%)#BN*~QnzlktPy
zb5P##st~6lR<f|*YAgaPomi7HpaTFldu+^717YLE(qESr)s0b5ff34(ohfSO(G-pV
zYYFCJHA<82S{-~rI7IQ5vv0eQ&TEB1&Uru%*tY>_Yt{YhN~E6os#G=8ZDe!?Sx2yR
zuwlEMe6c=v0lhZq)JIitSdInvT+dA)-XhwLIazxB_W?D%Tvm(DIM`D6?RQy;6k$yb
zK!2UAooT9Sa0lj-&f#wT4|7(^2&Yc1Tl)v7snY=Ju$Q~=W$Mk#nK`H7%$Ocr9q5%C
zBFbT;@(EIZTAFCu+fPuS7}(G#h$m=FZHQqMeHYt@yBHsT2HOZAPfnz4iZUplAnM<c
zaezP^9e&*pWuW;&DYKLGKxx`>4xl*uut)>HWNw&LK=pRSKa~SV(uEp9H@wGK*FERj
zZ?wAFWU3&$WPGUO>msf%v)y@f<rf?zjvrrbo<=NqvL>~LC(QO|2l?H3s@&#p8p>_2
z^UhzPrXCWxvih?-E*0^4b|QAS(pi1-yI=KAh=bOnr!kDRDdmU}ycCygkW6Z398_)2
zMz`!Be5LFVYiv(3G>+2@09483Q6SL}U3F<eSA?R+XZU-CSmc$}2@=z}!!>h4Fr5e>
zzu`rNY_>EXWz{WGM?<!OZ}K9FAm#9ZN~UMR1{T&@>~Y9aIE1QnHT0GtcPbieN>4}a
ziUtJXgwc&Eui@O1>}*)8wYrhFLWkEdV>}`)j*u<wz&Mp~$%W`L<*)){!Br`dhcwST
z@k^pW#VYnpv%Gv-=Cd>cKLgM12F+oBYvi^(;JZgn&FxC{Lk=mKxP$z^n2$kdjgUQI
zMc@1Aw+>1++pj{N;oXtn&YeCOvhZ^4tLx!AC23|n2<J*;H>@kUcAGoO8oR;YN?YhZ
z5w1Lct^C0lYO@mO?95`XzY~cerB^w3pD13Uz8*mX6@Z(KhTwVxSz3X7xV1Vz5~*VE
zyTZ>@_a+>i*EK3|icwkH=jX4J4a3PK9hxfGcAa&j^)dDF57>@b3IcISirm&`@blsO
zg%L}?627v@CV1i&?m~W;8Qhw98jS>l;??og3H$!ixgEPZ>@+E6lq%Pvihp)0Xlb~o
z_AK>w>L8K2e;SRje_!qY=6qcc+oGPRnZNY0pxfTv=F^Go^Lme0pVm<C>;HW^FrvS;
zzg+9<XYKx?ZT)o=n>@Z&4TFWFYoxGw8ys<!^v$xX5?k+x@*#W0FY3Kh9YTY{XpWjK
z(wDgP`($>Z`<cPz1gL)+=*yvq10OJWTj$Rp)K|Ng7_K7lHLoFyzY1hOBBEgJ&)X-a
z6oOl!ahp#yv{HxF)VobDAizapb*Q8H>E_m~R||go4FYVOYQ8(A8D(7O^vkUefTZcC
z`1pT<DqGfYj)5OgMf3xz{=KI5AE4_09Zp57|Ft7#N9ekzhDwYiwKyP^fD0G@jc!UL
zLX4Tf6DAKfWLBAOm<XFtO{$+u)u0_&4RdsWmbzEzd5wB1pFD~2t|F16J8*C{9#_A+
zT)JF4SMJTuMAbQFdp)TD57(1h83q1}=Pr~<r!kfVNUs_OzA3S;gp<@mVM#y_TM*yZ
z@9x8t$tNTBD5_6>3_{l&$<CHE`uR<%rqY+Om(modQ`lXQSRYRxAI(o#J;)XwL`)94
zhewG0f~ueWl_vuxzj92<-PaGB%JkMReo4)AX3|puTS~&rv4vsRCok>eo#Q>aU<a=K
z#aQ#$es8xlg-rGCw00NTrPAIhR6J|^T|A+rTJ{%y=zZwwiRF(F5knj0&g+0f8{D)A
zJcbzus)<TqylDYMxIGIRvQMZ)jf!CQoub=Mj0+w2hRLI>a$Xq0Hf|l@xdp;k;MR(s
zvgE;ka~tUc@L(#1*73Pza3gQ~io$xrjZ%;!e8RMD!+%GMy3r_ft`n<G5JWm%d!jf!
zRDq%=bqDf93=Ef|mA($hBLxyT3il>-640E}K`0xx3=7Rz@+o`pt&W2ahA<5RE1tkC
zR@GHUSb=nioiXFMn1@Q*`e(NuA++Np<OswaUNf(PA#9ixq?*pAa;bcVRN+~k46uMU
z6+Z|Tl?n3_L9K*9+twp%WTPBQNj?j=RUZXT{ZZJe_Pw`;pU2ss_+x!B7_6WvhO`7m
z<%|HpLVS3}%7I0nZiMvi!sdrRJ}wsfm1Q_DxlrnFEr9vEHaKo;q)DBn->HV>?Ab<g
zUTyp0FfGnmDJan0lM;eO&}b!gInU{)IcdVE2Cm4tbr4E%|EemNCJiijvd$u!?t+N`
zQgU*Ceb?rxJs}N?w)3UUStatXiy*6pNDac{P8B;m1@BA$5|-vt@z9=A*DklbI1&DW
zug0MXT{a6P0AtbRQT4S?p}D9wsC`=z&PkvXLRyn~pW{BY4Z%ulhJ#LRm2y7Ce7s6&
z0~%<O$)wJBwU*W1PCXxi!Vz`|40d=vW7TnGvpC6DOi?HNHMT@N`BK=agU32MQ5Y;7
zE<Hb-#M$`(Za^<Ao4Gi+NQZ}ga76Vn50sv20=Ik<F0yECETWW)%wEDup`5^Jx4Iq;
zm+u+w0Sn5cDA13wHQ^*bNyoT>FLEOZNji4^L=);tzVMpY(JJ|ACh=>Kh0ZlP#|YI?
z{?GH340i_gTnua2vloRV_rlYYq$w<*Wy*<Rkbp53N9Z%yG$g3y<;?zW*~mz-Yw$^-
zuylCDTE5dOd$Xd(rbS1f>s2m)p>qk>Kwj9uJTr-)s7X5NV?L&B7Ay6{Na*Ojr0n!2
z7LnG(3PoLl@^Z{dtYGefmwq$54`#dyMcv7SN)B=Q#OwmC{>Ft8zM&kEcKs0fwTfId
zqAHBLAgq)fXOq^3&~yyeJMbHAIGUxcou11zlCbg<ZrGxAgCbdBj$Bk)o=c*JDKMI}
zXuQ?cOm^p=*56QLd!Q;etaoBxwn$K*-Sju2vu1N>@Y0MCdwIar=e$k8QegTrX310{
zmr+WC!vU!zKsTY*u!oK=#q>s?2U@FGf7diLmMS0e{w_W#sCnZVpn+>8h<0eK6lz>T
zyK)3|+<K4AOuZ10!ark~E8|tydYNx-4Y<YdG(oR@a%d&#{Mj~jo3Ej0)Q2nFEBSP*
zNHATZy92c+Z%BqmU(W8syBc^nHD!DII1Z=>XDJ*|*ZG}USy>s&uD;v@glZ8neg5hV
zBR};eJb7IM7wo#Se;xOXX?w#k(BJOb**Gk<<IF?#yAwHv=!69no#iE8^QXK4+@qeA
z%Me{t6uR-@NlBu514<Lr2uM`ja_BGkd&tI*TTnq;%H4QgTSM3&iUp4shWy@8x}v2C
zdBM%w!Ai5#9Mmo3H!8JI*@t~<>QC9-_J{jyi=AuwlMdUjhe(ApkM#(yx_<^q7t^8H
z_&<dF)(;{7?}g|8MSsc(%8LFk&!CB^(|<xp$;z^^YXUG`)3tTY=o*(Hu@%W$^%6<Z
zS|n%+{c49n{eyAk{W2{3lr#GJ@)C_+7R7Aj)*nBg3mz3R^u7FE8vI_PI~3^KOWp4Q
zwxD%jCBMwVV6Pp7H4vU*$h;IX^|u+d(##>J<S8Y>o#?rS2hRRcm9lJVFY}t{2*%?i
z-=T%(lg_y9vwd8NLR|l4Ib4<_g2;*fOWUDQZa}}+thaFO04&vls|d9<<1D$vRV!X?
zx*!d72(MaF%EIrWB51U~+Lr|Lg0x!M$qMOQAWQ<F5!>^DtKci8iqb4#;!DzI0yRf6
z)#ejrojFpR?MvZgLrNoc9SH3ZW*}q!?yb+H7tz606;h;)d5ezwQ9DICh$=gr+*Hv4
zi@iPNoRm~i<Z6n#KpKh*TuFoH$0mUK<oCxMpZKw0O)|&DBFATh?|D|J7S;9r5~tNe
zAH}LzBMj-K(u7Ba-et}H-S^Ghc7XGTR*4gQewxsXrsZn5PyvQL{GIqu;Mar}+IO18
zr#Na$-r|xBw>%l9z~rWok`xYcdBX37S3K$o({b0M=MGa35&4}ZdB}M7SUa-pKr0yV
zBNsqx3M&xUla;HL3734*RTMVr8N}D*^LJ-<lN$~!FbUZV++!G7i&M}sKviZL(<Qe=
z(fPlehqX(_Ud5``Ue`VyKnB%NMUvlF&a>r8%U&yqjN!YiWoy%ksZKOv0$1k}UqJtR
zV)+MJcQWg$D)`~y$Fcs?#PSaZg!4~f??1_d|Ah;vOLN_6zZLOE9-PMpPu*s++E_j|
zP$jP2tbVRoP1{Dp*>sPDDk4P0MAAzrV4bA$#ajxfP(YU>t;*(GM~bw`!Qmt5{;q4O
zG`wZ1RAm41@@6=?GXLOdSDabuM0vI`34O|x_{71h-*uO@G;&>~x$OJ>@_zX+>8&Ki
zo4pk(-ad8T#X7E2WrMKngsXq+Y-dV`EH3Tg(LBWc$&kY%C$2pFqMsyp$CdmsW`Jyc
zA2}A`%hp?oUZ~{zrjR{oajrW3vr&9b)PKe7I{AXBe;Sw<zm7BOQL}Ux5DwkR0Thn)
zJH`tg?Mz9me3sbs=hRsudc&wE|4g1Ncv(Wr-hHuS!MkHFSC^93LW8|Mckp~?@yv=Q
zGajyC?P*){$8gXd6QNE1vtgP*Z=KB%40|iffwz0Vw)Z)w@`o`HmU<Wc@pUo;olJE+
zdXBm_?-nzjTho%pD_#fHln%OFH*T+4j){(DTqL<hl(bC(sTDCPW9&}I=0#{O#WFV*
z506~F@%;9JHdpG@9Yfx1fbwH%pF{!XP4*B(LK$ltx(5~=TA4d1omEovl(WMZrzz&7
zMUO6Dvc$VS-xX%vsS!lnf65<SQY2@c&zQJ6tN&Pbnm8P8xw#yQg{`wMZcxZqKrj|^
zoci=kDl|J5w`ARqc8Ob8;Q{ffwXFa=ke7my?ypMk>7=QyD)|Z&k|Zf;HtWbW)NlvZ
zHq6$YCfEW<XN99%w*3p2GN+ClHeNPWU=x~>)y$OvCtWkPSm}wQH2{bfmZu~!%7Iv|
zN$>z!N$;yNMsmG6Q8P9t;b-yfhNJn%YeIWPuU;eVy5iRH^`ut!Xa)MGyv562!&K9s
z6q!@S-G?BwTqR8;m=mUqYUT@>4gn^-<cnxiXh}R-xtHX^`u)NtBw2Q{(Uc|_@sGGn
zPw2}4$V^tj2SvM;Nz?$J8TchlYMN@3^hgpA!SO=~;|IO#eS{;SQXSeZ;nZYr#ggV|
z>nc!C1I;6<Fi2c^yq9r;jBx>OBmt7(r%+%3Av(~@)FoA5Hvds6A{E}Q;(9gOfDoBZ
z8^WO=p{t>#k~fHCy8UpG4XQ45LGZr?#6KC`RWkL$Qk11rr1w~-G-1BuruA`@QN5Xe
zob=R&gLlXPHudsELq8ICa8e+TO%%EO(2!%DBpBK}{y-JEaHv%u9?wym_qEuJ*Y;dZ
z(>`*`6FZAEGTT2{FpY)v3i$nTOu~`Jx?%Wx1A3RM#UvU6xdiL+5;=-^=7NTQrO;X-
z8Vo{}j|6cGAnm|7pguZ&O8=^~uQ%3LnQC&?3e#C4rUgGeABYO>K-32EN+Chyy4${9
zFBWEB^D!^zfIqg96fjESUyg5^i2dXw<gB^Dvu%4F(JFmDcA*530kS$Hwte%e`#J9S
zT+=a`LkJBK+6%*eK_Ft<S<$Q~By@@GB$6sg3^+VI{rtRzQ6-r_>&ckd%pB0b2t4E=
zHphw34|OwZ49*vv(5Ff^?cOr}*Nf!rJ9h>@`>{jvX>oLiWLmKA`DR0cVytEGfk468
zf%j?(SGs8R-7vHJ^y2i@?dc=PGqXdMk`NEj31<!8#twJ?+bqkMZmJb67$$Ynux((P
zuAk~7ND9th;g&fePl=8yj;oxl*t)ias!o`6yR!=2ndZdpWR@v4>{3g+so;#zq7Y<t
zUFvRNdFr7V)MT2PPBeq)+C>||A+#VaFdltOwP5W=h2xehPvvX%x5VE1j>_5Lw*Z3N
z2PigT2!Af}0+#7z++X@v?zcyHzJl|(k2~+YU&n+h(+BT-Dpiyw*5mZwI2&D?^W;Nr
z&N{xEQ<EolA0Ggnsk~d>c#luq$-*lFv;gf7d6DxTJ%A%Zxxed$>uoPGz)drsKh;48
zhws-{@jqxBb3ao<|9YV1pg8labBEn%ss>fyTV7#cleXF&lR$g*k3*#{#6KYIv2oMN
zEA?#ZZ%>B$P0Y~4@Us*gcbZ~I**lUOCE+0dT}Dqfd|XZSHb_<W!ZB?s@hZLWIV%=@
z1?%DKIxUwMeWlGfX(s5fTmFek;282?>ha<4{KUOcF7zv!ph%3x`FmIZ7_CS57Yp=V
z<u$ULFtq9{P$KCt3u$P2aGAa*ZUz#)q!rp<>a@!pg`iIuZm-b-lqDR^8RT`$bYu@a
z;3a_jQ6MAdjl^+b3x5DMofAOr8)cAu=+;z`9^OS{Wjjk*@14`f1_Rc&Jz-7%gpZoW
zD!F5Z_+<~7zA*F(9gN&rRblD!;#hTq!Y!4iDE75u_vHzU(qI?(il5eeQ&uS_gaT^#
z<9hjddccyx1+M++NuZi{?MJ_uf9`^bDq8CTC%bNt*$vnQ=8Ah(tb4UeKM9p#1=mza
z|1SSnR@+QTCa-@zDfHd+R0y-3UgFi&+VFlEGARS=YB7dpgxC(}kz76_NNYl5aTB0Y
zxUtN&0A{qe7>{<@fskRtK&8a$X{b870?<NrsC6u+5E>@%)2wa<*I~P8vpwfc%;qX9
z={~sPhJwIlbhcA=Xz4zk5S-oN^Oaev$xGO;WWIDZM3I%5u0CLF5d&(afdvUSLrKyW
z#s_}_wEnKd*}PwBbv0bX7c@Emu)VzAPyrL4I;JqMj2>1!8Gz;3Fch+_51X6Q$^ABz
z-Qxxhn_i#voXDQ<w6KYcl~<LVykOpaCh=nsVUHGQr+#*4<!G{k@u>yDd59ZZK%L#b
zl0mVgOXAg++J(F!@1577v!rva=}%J1WE~jphfn>SiG&ehh2W!Aso5BQC(Obm&)b+;
zQJ(40W6pn2i%M?ecVgzccpbOx8DFzb4HzF#t1gFuwsodwxz$Is5R&5{cc3k)?(<(>
z)HH{}uw)a#xtK03z-;FWf2*gn?Kg$cGg3XlrCR@U)V0JjVwY%b#v)UHN%CBN#|+kk
z6bgl0V2Wo(cT3~NnTIMDE!&beEh+Toc%jFA)&=MRRRon&8Os!~UD8f08;_kK!LY~W
zR^}k^s;RlW`MTl4aj^V64{7|Y&KNYh-g0eE9*dtN=6-D+wVC0hT&{ZbBA=R?dd#oe
z{feF2B-Rz1{7U{we$XxkqUKO(ozau<`%r#v>}-fV>zOJ(qoz`;)bVD;VswCdD?gNf
zFqpqL>?5$eWgh=P60NE_&hp?`B!%VqX)BvL9~rX&oHCrN0F3|o)-Z-b$^i#W_JDOW
z)-H7aw2m<|cru>~R6jW&K3pA(ikl&sQ+=%k9sT^V9sfIjo_+C*XjEs=`GHye0C<n9
z9QU36f6jq5eN*=RKZb|>AH&1Hk1tXFNf~xCw6Qe#>B;_2P$XOJe?<%bBfbRB47@zy
zkHGIoaex6;t^6ER4XG9$%mxw74H89S%F^MwZy$WhRYfK4zNe%#o~=#yXCL>smC>mB
zSWx)}=nQ$^N6g5QTc^Y%B54?Y(sye#5&77qjSIP;s?;@-lEsINVo>?-1(a~tN#+bE
zQxQ5Po<a>395dBIOAvTZnee>>?+fIxtD{|66p^S|`2x9dw*3b|w$7z?9_eUxo!wy@
z?3~*yk4?1)cH-3OmcKMFEa8C;-BEjz-q^IqhMiF#FArsXmmlXmAGY0D!MU;6ZHfEK
zeIKBK>#yv7h&te3jcmF^bx{rzC-`%x{&#efUcKl|`G%1;jHe**a+JwUY(X8F4rnsh
zDSSq>rMK5E2^rV>&+zv6tS$?@!c6nE<2P$>*xaFS51jhqN<33Bx><a>FDp%-iTJYU
zebLo_jo+e&UFgRWa4JVp!t;yV@Pe+&0=F@3TajK<f@X^Zc|epmjQN3Zl?PPmREvMw
zh~=o{cnwW$dGFUC;*eg6vL<XvF6%LxBhH&yo+i4zdz-y-_Z}k>b<#yNj%u41NVFn7
zFY#8AqD@AunV&E+aj4uE3(RgdDB2J)c{-?0LP`<Pmai2=AU|G+VQNo;Y?@C6+&gZb
z!^IX|pwTG+`*q0+MDpX7r`j5EyIqH_^CRCVAM_rm;gT*$-@Ia(UDC^Ha(bB|paxnI
z*wk5yH;6v;X)_YyM`I20K>%LP{o&c>vgY?ZrBZuzx-q>_4h%wF+n$@PU>D~u&OJRr
zvS|UeZ_y8Vd(Gd&@_{lPcAsBNeiAiq;Q*xCuIM~bhKa-=JRsrvL2?szsZ%?wA;0j0
zyr2SM4Q7}bo(gC7H2l9}k?Olfs|D7yT4afncja8y(5w#D{<PJpSyrNm1Z{hD)Juos
z)?AEJJ__F|8v5d$Y={k2#D!Ul@7$6REg&X532zi4)Gl_-tT+;AH(>Mp@K*!bIbJy*
z<}A9uLq)NNeN8}XIT#k$_EXl8a+PaLTn)rxCD9vbnU~#z`bdtUs#>A}q>)nGt)46b
zFeQ`AL>JXcvx7`F(T7+YrJB9^&e=kZK(x##Gxp2mIM2Z@3ndju)J{4}N_3Nnf|cVO
zCmX?Kp!vIXCm<#4X`9K7JAora%8#s3?B)eEjKLsAXu!+lr1qo)=a@i~>wZspt!n$3
zFrEo|0m{z~IWV;1!OHTuIlzBhyQFn&U8M}%Q`+K&+Q{*nxtPFSFmub8w1u8&^72qJ
z3E=~sudLq=v(3!5W)jz3y=;g!6}ZWG=S+O2E()I$Z<qe1fx^u6k(fNWe6jL-B&{<(
zotko~;XJg>*5a9g4s}bMuw#j;N7(jIWGRHc?&tP%;DNQjLhC!GXEat`wMo`M582An
z*J;OX@Ny|Uz(?Sh)l!xyCImF;scX(a3#(v@DP@k|6GpmS;}XuD>=j<sogKyNK7-Xa
zw4ceg$u_Wg)v_)2|CJb-fc%|vH$1tcq9#j;L;)Vm9DKj=e!{y_8+bL}I|e18(IcBp
zPUG!|_u2tlX<E5Mg}g@L&uY4EpPD7;3T=$_d3AB|^|f{06Uke?WWJf%h!?7!R?*pD
zDx*E{^-pM-<^}xv>?gof`e$wP?{7&HCQE%02?s+bLtE$nbW7SQ_1R%D{sdoAi~R*9
zYCtGZv&tkO)L<=35~T@ss)$<F>|lBt!!sY)c6VEiBRDjR-R}H#9gR<|&hS)5LVsnz
z`kBq77WKIOsyxKY9|U;f=-AyyTje)-ckY$OFQ}bB!OJ5~t-y^vCGu*QTzxM(g`s0j
zEki@X(<-%wFj1!vo-qUMxZ$0(Xbr{g4KNF)tEKr{VMDpR0?Z(bwogL4;OyHVk5-Su
z+Kb<o^dYn2SH?73<fB`BHO4v>=0S%GMUg{M!a7iqZEWsOQ*|I2VHwG}SPLY`gQCGh
zf<?fMr##f3OAMr8CaasK691K$P3a+h6X0Eh2SIEk?R(<9K(cs#eX(uNPc>=dI~P;*
zg+bu)Q0A9zet+PW_@A$g9rz$yLd~1zFuH~F0h_IQwrGBMuQ9PXFV3DT5k`p@&R%-B
zJfl*OjaoSV>JDmh|1J_p6H}QA1t}TsEwO~CBh>y9MPvC@4oaJ0BBrgt_Tt}{m6NxO
zQp>fY$`82GCIJ>>fU7i|kUs~Q(-cpjA6!*;OS6&Bl%Y+Szf>lNnZ>~c)<@gQd&j0B
z=%#_LI{rszVoo)udk9_UK}6MJEoW=w2>bVaZ+wALnCc53&XQ}k%Qu^2H%^XcNOr8q
zZl6p>ov6suKQ$EYZG>6>{aFI~|1d^$|6YQpq@-_SZ)l?L?D7-hZ2sT>sDEM4@lnyW
zUt>V=d9H0;(=#aWcbmi05|FZ7$Y&IQ%vO;_W(t?&0p-3Er>uP2cE<(RI^p^`*c^Pv
z8|N@o>4;1e7?V?mSiZ3k;d>sMQW>;OiaH1Fz;sOT;@cmT=4O;Dg_=yoMOrD|#bs-K
zn5|?&ixHVz3Z?mgoEz~Q^5*v@SqMP*Z4%O%j3?s}kk#XK%^*Vv%J2#14pK!!!GN7p
z^Ac#c9-bYYkm&gx2gkKfsBG;C&yvkJcDm-lM{Nd}323i^JL9ldb<ISN<U?gC{j6+M
zb_FIVvB#0OHg8LHYS`FLHL%KWE1(+tzwFcMGEtQsHb;6H2oBm~RfTu3$^a@*HvM(*
zABDwWyF{MM)a#?FbyrIC>S{IGp?Huzh-N-wikCdpLrt_4Ky$sB#d77VMgK+yu+k`n
z4+!~kBFiWS##xiH8`SNHprB&TtO*PhJNSh^*A2Id%(CtwfYEPx{nS=F`#knN!>j{x
zsx(;#8VD<s0?YrzU;`k7)gBj^?QahBm+F;1<GdhtH6qzc%wD4cS1QKE3pCxIi^P+q
z^+kNXa0sKdVyIzs8}=D8?pZjZ%kPSFw7rigSFjIgkg`BP!vFb0^ILt+yCLOf&*R4L
z$*Y%NMp7VfIVn}G9!?@iQM+aq4#7q`2DD2-t^lH6l8M-4uVn6RL+qOTlYN8H_XKnD
z==t{L={z7VzRE4)_(w9WSL^OJ%l!>xN5$+tFUjQJme7MqXK5izm<&fiBORt27?PG>
z_)~_?gq*X-4nS@o8bX(;4pA&GI1b9s5{$nF*xU7|6_P>{iyg-ZD(f{P)neOtjB5Xh
zFgdg0K&1$#c>{&jDR7pc^>sWsUqhz8b1mL1+N$WU2a0T>MUR%2R<Hu5dvldd*A@qb
z)l64^nv}j<$B!-7g3r=l<=67F3pTExAzQK6P2d979r}L{ssFICA+AjLSp8hR#Xs_*
ze^0Oe!<Fl5XKZil;AHCjACHTxs;&Jz7s}U_z9Wdf8ptUak`M!xD`|j)CO0c?`#a08
znE4mIkr<m$C12j-70YGVt5PoCUsLx^7rs}vlPkw+cW*!`_vcylL$0p;7=|5NlGnSi
zS>6u4sv1$b4PX7h;P@K^{W}MUW$oHEb`=FiFnUzP4+_$)f4W$<&dX1{m!=#f(*fio
zvuBU{GYDiUWQ=!F?R;U?hoJNpfsRM&aUEDNYMaHD5KCvh&&hLRV7d<$jdV9`A{Ou3
z3K}6tbNd_-6=KWf4<zC9lL?RjEwU~XjGp`=cF&M7r<gvf9Sy-Ec!*;9`lreXatZcG
z)J)V<<L%aLd!Ga~2UtBYd)XwVhgV8SKgztoc-=b_1-ZCbUMRSYxMNsAo{`+DT|zy<
z+e7DI<QJJ7X2-Y!iF)NMVTapeth++NF(Zk44sA8fVsY!&4pfbdV6Tt^ox?(i`5(Gm
z3DqQq6o4JNn#$TQ!w%`I@%RF)h>AzZ6id_sLT7D~gfiMz1BdM0f&7;wj%`#fNOFei
z;<aW)4uFBRSlL9dq)OfD>iW$pD-xvAj%C>-_u95@yUZb9HEbTb>b2IhnbwoQuxv()
za^8{8V>$5#Bp>FmR5uU4ZOjk@EE0y6hg{)IYFzLtIUwG1+`upXTGqBPG3SX`mm}7h
z)kDgALJU~vJS<S)^L{`pCHd_UbKg2fd1Tw$Ela=f(c4p=@pnp*^GKlXw}lmb5`c7p
zbMV9>!>VHqO#YsbUYubHNm&j3tuphcj6}cox`k<Dgx36;OdLzSMSnzWUgtyHiKo3b
z@o<J)`jG;@y`gAZVsNlXyV80>30PM^sw6Sn)oUlm^#tC{6e=p{Gfs}x3uUNjq;ln1
zOA&jmRbyOyG4@I27u<b=7NeRTA347ltZCG%2f}d-IeKMghwJU*I+$$J=T^Bb_Ri(&
zYbd+@H2s!%A)Kz~{zZ=xNE&>8)08=bIIlI=jv;NA3%`+3G15zrlxIVoPXRPINOsCj
z6q$Y$w!RG0Z*FdZk>`5Jn}+%sqY)Ml<r`F#2KWQm+vNys|5%7&oOtmlME^H_((vm{
z0ZyAvV8n77wAY3)_~-uhK0=l1o4LwRf2KUST|izN;gipiQ<s)?(|vv+vrV^*DH(BG
zO>8dSLX<&-75o2rp22$DtGs_eXUGo$@h>WE{<l<6SVcx&{Qr_c_AlPQY&BbZEOCUd
z?j9qN9)X}~vT_>MCR#)pBo!-!xC%9ud{g_F^`n)pt1H2m=j>H(8ypELRi}&fj$gly
z(#_4BwbxX_)^SYN0z<!k1n6Lqw+91G-Dwjc(t#axI6b2{M$f^LhNkT@jESm<Dd}`K
z#ljyGwYx$vIAgyFWTA>_D~a$7e$$=EQ1j7dv2-WFMXw1PE-P5z=iE%<<CD$5TF`-f
z6h%{2pzIE(Saj0UsY={&zd0r0==ms1ds(}#y{ZCy^OjeB_Ai2;$Ju~dAj?T})x31>
z|LVD3aTnCw2QJg$@)#1!YA=8H<-ng1n;){cBM|u(4PHYI{0Wv~J0WO{nUcX;sbYJW
z`NA6rz<A0ALE~KFlfu%NWd<BVVKQeofCU2GL=ZF3;A^Hou;?vxp&}nx#2a?wZAZ6_
zg=l;RZv8rZb45QY3up%0B5^UWH~<sLV&m#24{Lb3AR%wJb{7!sauDm4#e5PEuIJz(
zCI>np-{Z8PLIpV)fjxJSJ@yh-_!>{$e$B`!A^L)9dU0=4<1}V+5?0WnQiys?$R{5&
zp-ljlDH#ZT_4ek^5G;x+T%k%*t+MlO6g>{l>yT46+(b7#?V7igYEsk7bR`+KX=*eJ
zBx$a8(W<dnFtV~(bnV2C4y|Su%|;WJN)YwG>Q60`V5kDj*-!$j2s@Cpk{RTdCJ&Iz
z<Fzbcs{gxCoIu7%D)S!rJA+NIuD+ibWWf#%*SA>YCz-7!K0jQGeDRBR5)X@x!W8P$
z*38zO6u0Y3Ce{zqXp6dZoT5Zq4e0^IyN?&wPHk@gaT>kId0gWvlsQekvWIf}j~1%d
zXUKc}Uz&rHxaVQ>2yeE7^KWb?Bb5z%`jJHqqM<5F4csqf%TP;n7l7RL3W;BDQm4G4
z@M>8!Wr28Z?GzA}{+$A+^}E&S&#ekdOi*oXx=eX40rJ~!{&$`<4F|74X*3~!bj2Be
zqHquV7UXT48)l|qNg>C@u1s2E-M%8p0E<E&1r}{B$m69%FR^in9q?b+RjKA#&^!y^
zPT0$>z?lv&%ar?*B7iZn8SMv$#oj%!@<gMpZY^43)>ep$G>WEGr$Qp-8^K=+`M(Ai
z#dv!<UUz4<hZ?3Z7V&XI#xPG1$@)Gy_D&_I;|qW4wfHI{jO2aXx_2vcQt5R3P50c_
z_L(<c9Uwk$y@>{2#DbqPr*u<uV&bb9b%sbA*XUh6>+(PwacI7DJYl3!;ke82yqJDP
zd^-**;_ZucW1Q$F30xpv(`48|L3S0T>hKm~%ap`6&W6T9Ywa{|aCc1scXprYj%Xk5
zu(+m-fV`=WRu>L!lBby2oEwU1Zlbjb8dsk%m3k-V>xo~%Ax69*|9Lg7WVD$T=q;=^
zAbw`i@LwW|=tV}N9I1sG@7+n>ObSlniIWeU`9~^nL=$zl*nY6q)sW-;a3P@W#cqE7
zmRgKZ@nGqEWkvVI$q}rG7oO1Rww~UVTSw7rkEGG&Tf<YE&6&hq9pzP;m@4S)Kkd~{
zOl5*wf37&lpS{|@zv3*JO!R+L(Er8vyBPiV%<?Y?)@n7ypOAC}-{)G4S@bZ7zlRG_
zw$AYot9tPq68<WwrOB(TRbG)@O<jOrKKx$j4FXQ8#Zo*~Bm2|L+uqDa%K6H}e5L`V
z_!b-ANQ^04qc7*N%lspsrM0>V?5F1uugQqXeY7@BUF<L=h0gmdZv)t?q_3oq$tNlZ
z>XgMq-gMH*9OcQpL5yB_@;}fN)A%7!MN+T-Tn$}FGgIHze{TG$4*iBMW44)kUbOyF
z2}ne|xWTDdL`rfP)~)DFsb(?4DW9u{DPauPRD*cu<5W_&{m35-^7~b0QrW8~FLLnU
zxHNLFdVn?e@-u)g>g7Fqz)J|fVAX)jI}4uNc=#yYqZS1WP@2@nxpHUtjo!`gTz)g&
zwM0h8QY4ivU51INfT17ikY<DGL<EC8m1$S*AqI5uD(;WTq1I8@yd~D=Rm(a)xBDLo
zTuu=RRe$={2wOs=(7`OT?h+)`#qk!qg5oLXF8^~Q@y?Ag9j8X(ph#jR+9pkB`agIS
z01Upx)mfjxv9qbmABd@d&I=jxxn}n#{$R5%d>^(PC)0&!r$hP>f0sDCJ`*Ng(o2i}
z6b9!79dphY(yKxMM#iB)a4KzZ629BYOFZ{Vs3H@jz)|Etj}$ljnW2M*lcn-LY<<JG
zSiyj7_1iV9+TCZm0<I?Dv`|Q0B80P3%E<d=-Z)z<O6wDr<TO$aReV&qs<2%Ok{}`C
zucI>=4m$oC^Llgq+$b0rB9y6s1#uLVkJq)DfP0kgRk_VI7=4_4>{%>*9!S33vDNdJ
zr@bC!$raPHpIW^;%sX`5d%Y>jA|J%X&nuz+nhHR*?54d6$=X$z1H;>bU7HbR?Iv5b
zTv~=np$SO}Lyr=szmdp9J2{jIE*c_#1?x*1lDylcUjZl>+-Xfs1^g<PZ+bK$??|pT
z10~ej3Tm4?4S)7`8B&f3ktqb_@7x%8{?#DB+}EjPjT-1eeJpgeeh~jM5fHQ;Wkg4p
z*j&#IP)~0ky`XX@nLmu9AS<ogXH5pt$|-C}vW*OHnF3#W74WlvoLjLI%mz$b$SU?|
zAx&IkoysxAYA7^${eYdyD%t;V>mFsWylqirKhdTIEx=lZrY{ykeoTmI&62vy@w|68
zJR_2(MPl$7RNEB1Up*}YUU#l~*23GPDEhHvGO)Erm&|*R>d-{Z4!7XigsSxoyLPS&
zp}E}iOq74Rt#GLvx=^EOqZ{w^n2Ni`D|Sx2j^$jUAMRzYWT)F=N+D2p^YuU*-Gqs|
zeWQ~fSz_&XF>&VxuD3hKTJYrZfyY%0ALIGTSE$(V4tu;fTq$Bu;DqB|=HZB+6C{M}
zPR9biCKcqJ>t3+pSk>3A7~H+^;QD^~Osxo@a}%ql7iONHXO3r{!}AB{D^KfrvT&6(
z>9@;ZuNV5}%rD^Au?)T2>g5Tk=#f!?kSG&zA`do+k5<xJc^Ox_*|;)n<hVjkUiPnt
zE(Zmh8&EnsrY)vPd+P2`3URCR?g?5&Vf96-(|=SRg+k7)PRIOa!GbHer72i5bF~CW
z-uwO???EigjIjroWIBcVlv-IiX*OT^&HnU9Q&-iz=8VTPUHjNw?-O!s-tV7M(>2L!
z*gbzLWEg(TBLBWdMo3a#-}y&;V*CGZ)BeTm7yQ%6zRrc@b6iW{<S&XtBIk_%lrIZQ
zQoar*u}2{1XkXs}VG-W!AsrqdvHJM==w&A1!?9{~Zz4JH%E9bxmKNJI9{i$Vk*q%&
zTKV3Fu-p=f{=Mg_c6P_YJ1hT}-!(53{c?#u8qQXE=sEL&PhAjKs%Fh~VJ>_jKO8A}
z%N6NPW-rzH=^_8w{PolDwzX3iiqMZ))ofj7Tw48n%*(5r$xdtHhSE71zUs#J>%;X{
zGDqU=9G8EKD^Z^B1HTW$o}Ahj@q$rrJaMs{MKx|cJZ?!flO5neNi!eor?hn$`4%ft
z@91sa{KYwT+f*f!bQe+2K3J1{{BNSV2Hpq<B~ljPTh-!O#GcfsZw9@6jvaokJvzLR
z#O<xf@K1%p0|ns=CRFOUtF~!hs}<GY;!ESLlH~Oo+5GXA3jfPt4TC13cC8P2yIV9%
z-}w6dkcuymoY8U`0?Py^1&7K>ptTF!@@;YCT4>4SPOjV-VTs?Kca3xYj<7C!ja?K}
z2CG>*wRGw|@t!0WrQrMkmH38&=_EYuh{j27dJXVY1p?|xlnroS#sQ)h9R-;|=MwC>
zI=1YNiWeKPAF6%{Roff@xAIbd=^|c_s-1%L`Eas;B~`bon%6fMa-DR-oT?kWs`*c~
zU?NF^b!A{oEr?~W;*0C{IbgS~ZU>o5@)2Tfg_CcUwr9}CrB=xRJ-d74p-xTpnuC*z
z0F=uknf1BYfK8sfOM|EtR)@IGo-JItRh9cKOw}d;bYgq?ECXOFPWsLX#27FMQ>E%Y
zIE(@%3Qq^kilWlP>($x#-J#*FgEM=Nr{^y%zQoNj&<H~+^e$hpqz9$=;a17;mnI}2
zK(t*d)RgPI0u$xrj$s>_Vj7|nD3I1H$fu@hewfN=CRHj41lcOl-$j3;$BK7&hS*IK
zf*NO5(BlY`Ww+aAqbq3D%OqOFOhH>i+HGA>5e#htYQDDb)`R*Zq}19Kv;%9%c!_sv
z>D3$4eCXKn$GI*_8>mypFQYa-wb|*=fQ(Gz>tnL(oA)zb_ZoSQ$O4(laQuvEb#>qR
zo7l+ZGe2*wkU#<Vu}q6r{ii$*sTetKq{yLRzsQeACCDYxi#0g-ZRpTcj!mf)S?@>>
zZJ3g$9n#v=lc^gmVO_3eC=|?-t))ywFFPU4D!Kid$C@EqFbIc!GTN+FJPS24hU83F
zmP0g*>8I(Gu;9hyrFI@ob*BqL*8IN}Vf#q2R4lw&e1~Xqpk)zY_NAcc@`6-P*COB@
zSu3iU)T(KIeo|UPbGt}z{%d%cX?eqNR|ON6Y~h_zX&L_(6EKfxd@{3~l)He*((6i+
zB0*;M7$2brR(>fU2N7P__)uslD8HPj%lpjqZD;oAS_KX3W3SQofV#416*9`6!m$U9
zyh%t#z8jCh<Wl3FG|Y*n)iU0(0LP#6)pCY&IS}7mT^JN>P!6o?^@NpWL=aVLQUE$Z
z!7Nldd-^;h<OmMpy<-mF8hS*eQ*l6YJZY2>Ru+YWUb8F<1bu5@L@Y<D3pnCf7Dd~e
zBAo%;E6(dNkpNVSZE<_i^18K0Q&jPEBW<!os3mcnq%efUmZFvj%J@z+mia14=5GAt
zw!SRVE92@7plqG2jca5?9ett@%%#D#858zs_|lu_n^9`>u_fn~l_)4xTY}$WjLrC9
zn=)B&(ocK8VxphmGt6<mTEWwOlQzqFe;N)8Ev-UEKY!1@*F0HPVA$Xv*-tu~&bQ(+
zj6JTYFc>~F@NS=(@vkBIvMM9Xrr2StlMUa}LotpOR`((Zp958N4GL{hXhF;WRYeVL
ztOOdyQVnw@-U}mvF4e?mI_(RaQU0?SyJFMTY$wrhzSXW<C9|M3;i;csgaW`!PYI-=
z0p_pFDMO}ZqTDXFJA#=!k0N?M93f#XA)YQls}o(AUy}5PwI>wRA;_<(1LqFco&g4u
z-4CR`=j-8}oDv;-@0G1Y?zp^#=knU+neY>!RDrb*YCTgdS)tOKQDynDg`R>A0MrWW
z1wo=cLr_#?(}j9bUb)${3Ma$`z)6AQ`~K|f7H+v8`{_HbgCZAkD8KsG=dbNeSpph<
zw_Uv0X6yF2$8j=!`q*wO>+FvKR<>_<SCN+Ft)pK4K-Y#obQ-4j+V9>8je*(FKHv|Y
zn?iZ{&gvZ9xa!yGnKBxo`;;T)_0EWF>(IB3%CLhahtdIt*PAD<k=w68J~sx1*_+?o
zSG8-F8nS$&_sDH7A2BxhT6J%Bf_T}O!P;dh<i|#F{wcGr*JigbpQlgb%jN<RDMMyj
zAg}Ko?$=Yke(tyOSCyb_e-H2E_}H%KXNo(m91pEORP^%Ca!-Dz%CC%N(k8BE|8;;h
zZy&d8!LY2mMYfgJ!Xxb?wh_DQuvT>S((9QW30QZr6?i$V2&Nmzh83x-kQtF9B$X7O
z6X@Jg6QP%YV2nE<1F~%I=t}1|*ei9vRg1v<t&*WS&imU`0MyZ4Gf3h6`S`eF(=Owy
zlEHQIh-cG88E2j-$xRG4zDe-opO&?q<yl)JKg-&SpXZ(8-?AG*a{sSY#mTCDG5^Ta
zepX)~L&rcIAeqBM0t+YHf=K|6gH_~+#_EXXX4+J9#}4^?t8Rd0WBw^G6LeL7tbEo(
zg%6g)@EQe?zcOU>dBXJ4>6}>V(M#fh&3m;I)xmN^mWoEWf%M2ZPvZvEAypVUbFQ08
zsvn^7qQ$pGA6I3G#R!a58v2zEfpIQGVST?V_iGhIKI7r1R`|Nibng4<t4efHFP~mF
ztV>!>W&}3w+Ls0Txbo4v&A<jKcK>Y-qzH722t3shJbemT+Wm+hE%O+X!;#|8?h%Z*
z9m)1#zmTOUPzUq)VGWn0G%9y_@*_dN94LwT5Ij>zAcqByy~Y6c4$GhzLf|qvjWA9~
zhYSWn?O-eq6o;wMBD^GMy;@Hu`wodNm>7x*383~>6kWDTz|cz+t^s<%ywQ4gm7|yL
zkk@BrL34r%)hWsJVb8<6yeZF<Ui7za(4~~PfemPL4M>?PAa7&})NrFihZa4(Jx;}4
z7yYMX?hA1+MSK%Xv#cuFiTYAi<p|cJvJfXUR~M<dLZPf67l-4xm7#>@iBizAQ>Aqo
zZRS)2&*KV@Xe+uD4ttD&&@k=Apr}B?=aH_PEFx7o5?rxs8ekD2Awqc#%<5kwaNiQ@
z1ub;rO~>E^M;!GMJ(~an0I3d{3SLkolirRg;geeST_9h%z-augra-AJd%!4ce_QIL
z#u+6}mx}q88!7;l(=^^gB;3CYp4})OILNJ%k1?n*Fu?s7whCoMn0*+=D`i`pG2Jy}
zv>5M(FAeBd#qBa#UGrHI>Th>5@yEq=n<cra{GZo1(`Jl?vJ9|C=a-qVLc?8~1e<|;
zjN$MHT9@$vzJpg5_yDz4O@n`<3jnUVyzCG9{!ln+-W&9pwND_2C}%qBz@I>kouJf~
zwyOe}k8%xuHZ_77Kfgr-`t}b*^D|P+Z|Qr?gzn<<5H>+nkUiRs_TKZj8KbqY+Kr4p
z8)At_hmc&OFmnIqpW!X@nMxe1!-dw@^{akiiCr3Zcu(QQVMIC3i+z;qI6Tkb(XMIU
z{TP|gs86Sx61!ps&;4OSOQ#FpdkmxDI!tP!zG#iW=jTk<cJ8u|ID?W52vOA1jGL~2
zF!$w##HEwt9Jx{N-XJ_tK4x@2W}X3>+d;56aEKD1d87796T*C=MR(7ty#=B<X+Na+
zsOA<dsNxc>vG)%KSKtyK>B^`;@6&t2ye*8>QbWGDN$fDgu@lH3NDtuJrn0CnmUnMl
zxPDFQmz7TXY8=C4@^wz&I$=eHwz^#K|IaNjjJBN9;m?W$1Li+vt;!24EBx$8{wrYh
zA4PJE`gZnq#{aEC`WJ{GTCLA+pY0#+Ik0u%ebGG<T^D#uw%_co+Q4>MT5|qbFc}5J
zZl+44<sO^0*Tj^X&BpXk2^z#xnd$8IA#W<_S@rV42d}KWFkd)KY;Dtc$7)~N(#OX<
z)3wKI7KGE3-5L(1gW8Q0MK2BZjEiKLCq!BlyfoIdolI-C17_3ki6b^ijAHy0v}0VU
zF4k1#+0^vW4yrw^1Kh>D*`t><Yo!A{IU%c2Tl>A7i)-cRw9ZJNEe~JGsmF)~N$t<$
zaBGHwkmvUV*qid9qgWO-Z@#TH7svwkN}KN29z1Fbj1n&`GGAO1SEYp`s}^?-4YB6D
z{ei?=4+AuiLkkIf+k4-*j@h9FdftH0z8n7^W8c^w2)AXKq+%x(+qP}nwr$(CZQHhO
z+qNpHX!7=a=(+toeee8;bN1S6FT}GVL}E~--Cx$o78+j`V)<}$MUUE%LIF2g%-xr`
zFxbL^v4Jl7E?_XEG<ogobW6A$JB(j0wC1l?P?_TwGG>QwXq0=m=U>J)t+}0he3taF
zUS9^MQH<IXyM-UgMwEy?RK_KnPTVRkyvhxg^wA$t7;e{eSQ6g0REQ2#QN;W?f?Dq*
z(nz)ekDS6WaI%1aUj`LFo6hkC0YhpG41D59D|uYpzcT;J=L<I?H_7T5OC*C}T3lOQ
zVyRKUT7x3MF&Z$a+(gw*VM!T#lB0#~wd^o?n9+%1qMmw&qm?u@dtPcMk?9l_Y-n34
zW&bOK#GLv76TvwS*Oo7ne-BrWUoy^RHF^o}I4Y#(Lt}ykaq}ALCm--A|5_Io-`yR$
zeemix(u@I7)0~Sn)ZW>zBsc7!^t?>}HIh`VR{{?|tkIX5dz&;DH;V=F4JM2yAGhE5
z`Hh1?7TF3N9N7!=dh)VVBLV!2!#>j6!VKvk$X_8P)zB;=%9|5yhlBmCo*;5EfAMaw
z5yeZh^!w}8S@g1Mi&9zKa#1|CxX2LOL#Bg{Kt2B840!gI55)9AxEag_jZLSskfwRn
zpR5cjBx8|wpB_XSLY1+f$)2aGB@4=U7T;GSY;_FE;Kxo?ZJcTy3_;diceh$IhxLP6
zbz_aI-bI_!ag@|Vo7U7+C<yPs;e&`eSQAqVoq6Ge%qX@^iXF(6;z_Yp77h0z!=bB<
z=Uc9p`bTm{bchmXQiBd)!Y49?5W$L$2Gg^*P`IP@3+WnYr>QnEo)EIJ5n#}Piwt+_
z+hQC$kPFkLW@e9DrA$rVFi}I-#EbOX52<cN9&oK^$_MiFGRu{5<LL}tQWW>+AtCeV
zx^0-&`d_y}#<5mIg^%sh3nF}hR*ZzZEhF>O)c0$noDsF9$b7$sSP``(DjkG4dtJ@^
zm1tLEPm`HpMH=iFSTe@J*q^tEUEQ*FrTz_$dwCVYfeC9)H$xH?Z5zC;w3Fq1ww--Q
z{;a0K`^Ti_f!p!%lVR1N+tfBZhc^CY%l*dE^`kG|m5c@~k@}2f_<j8F(dp?OmvQ9A
zo>To<K`&QF``gQ(7x&O6*YAW1bFq;5n@^mn%v;||4@o->6iigH&Q$kMFFLu;wG5h)
zv1#xYFX<dP8|1L_WUmuv=-ujqZAo9^4lr?}OR3n3hb;hYU|GI`&D;`181$b~PH;m5
zl$=p)bQ;YSGctl`(LaNsR%;g%=^H>4sxz9+WrC*x9qnMo!GDrF+q<-CS3gf0J8Z8e
zjURq!=QC6v<q=v)dC!;s@u%_)(*<w+T*;>p0RWi(E%*|Yl@Zakwl#9LGIspG8WR(9
ztN-|=POJWqEG$UgtF>)+b@((~o!2}#4NQKi9NB=Yuvbo+{(zu_@+~alOJWo?tXI9a
zS_ukQYc_%UXeXg~1!bPI+<)GcixbE^no|he`4{&$<&m_fOI9ZZh@EMs8B__>OVnvR
zo$O?E7pfAD4e0aLlFeHxn(NXj$g3yQzUixvhTqSxOz3rl5WG{8?R7{KXpneVNO12)
zKc9(rjElLI4wrKG6Y7y_gG)@k<RXC5Tx5ln+XusPUMnRNt0mIqY9^42+tt!<TuJ$W
zKfPpT4;Vg8D`G9J#5}k)w5CT{TMyTnB5YP0j_;93w^LlrHGTl6;kp~Hx9>civv`3N
zINc-F3(tY#-!B5Z-m68n;_dhJ{PWInqJ}<wsvZ;$_G25bp+A;{iFl<5k%wW!bMo|}
zcR^`t4Iz^%Wrl|`HN)N|7Si=(_d@p8RTK@peWk1zujvbuU-5XL>TxN=4NY?CiOQww
z$+!mU>JwH)`)H42TUAoYGy&%t$a0Z>dd1Qh(>9`!d;H0#7LAe7K_*8Uzr=cosSTSc
z)<Yh_zZ~LrbYw$pQ6}#*&#ibgVon~{y#Q$x7#0$iG|U5Ut*Y4*Zdw46jQ*%AL~?D2
zVpus+Ah=3^eJ4$Ds9z;9ErJ{RE<%~++S>(EdhwOl<wXvbDuszf$3Ep4nZ$S_NvEe^
ziG(|B?tr_os>9-oFO;qA!{_MXeGT6>R}lw#35^(Vp-bCp3(-07u_Fb!&h6#3;cb2T
zaA@}EOl{o8-XB5Rw-3q;TMtSRr6ahu|MpnowjGTecKd7M4&zsynAIHoD*YGDv3?mi
zBes6*JuqUbZH{}2Y_SwffY*WcAs=9Yn;48wH?}79mZWuZ_$)$F5-LHvBek4{MyrM6
zV~op1Drrn<iCr{`RwP*<SV*tW7Q81gX<PDJNSs#1XDrItY%{KsG|@J3ommyMnj#y5
z(mUPg(Pa`uf)D8dm+sHb75xw%G0@f$Iw@11Si0Yay|_sJ!O#Eze&+Z|1(Fgjtxd(j
zXdDEU*cQ6_NW*@0{x=qWctN-#inMH4dUVBO&?R~nP>2YReu4(>-%j|j;H^68CQ$ex
zVq*1-2|4M#*cbW@d=OAwLiHmsc_pivoO>7t(ru%*dSba)nlg(uVa$9<zHmtMC^d0W
z0MaYM1#6X#DQfX{#CgcwZdIeoX6wpH`vz__eHRM20<axQ$aFiQBh5Lct@;_}Aov<l
z4c9;U@dO<9rjdAzmN77_BVlLYkXn>cQ@7bL5NkcB8tM)Db;^}lOWZgs7K=%2O9NvC
z`f93F0<>tKTwb1x`!00$6*1^j53b;%_f|wKCArM!w}@Z%_BT0?XGsg|;aLYsH}T)^
zU6QD^ueZ52D&pBYPg81Ri`*AlaJHd|k9&b7csK@M#aDM_LAV=>3lQoabCXSw3j-i5
zdsiU5AIM^6kP`?LUe<Pl0%a^)TLvddft`w02-4X)M#?nIsG-^hQn5D{m*|SpXdX(k
z24%@#^$0h=&p&wcR#S%+{ZZVm{qtF71w$}RrpwQTOW&m##k~R+X8a_fA@$oa{FZq{
zie`KT?qvtxkW|096EJnOGa#cG9D|Ysl9*dBbOd`>Zz7nM7}cY&J0(HluQB**wR8@~
ztbq|-iE$PnX%%d${6{6$o@t^t_)Y)5RiHW~Ags!V6?;d7^)qI?z1=ju<Br^!{)+oG
zr8i^=3(EeT>~Oe1A!bsx7^)8r+(}GP?eP@c*fD9+r1P1EO?>bD7fbs0=if4R?pdR`
z&myi3R^1~mm4Y*`1b`19Fww;R%yo!g@~3$KxlE1nQ#xzsd2l@*3DVWV?=G)<Tueiw
zvRRab2x|Nhu9_9aMuuDay4Jp#u{OKYrB8=;4>VU?C;GP5D@Y#xdMj!D2WX5zy29sh
z<;eR@NtAv9uHC5a)0l}d3h~El=G!$5o$0UMfu+@Qfm)^D90ti^ylocgCuI&c6;QO@
zR>^;p!4A?_@cvFoTl(;ivl>{sb$CS8yw5G579zlqMxsv)fGm2vNdIXNO^jThHjAis
zIWOmVhb(Qo=i5>J!l2ss)wEY_%>46spNVTz-&A2y=`K)^I-BeJc|3Va+e5rVkm>y<
zQmMOMr*FNgS12o}m-7e~a)PI`+c|HTFq}5#PD$fF*1(DA@Eu{DvIK$3xy>{0soV(|
zw?0gEEULyE8*H6MK4O;!k>jzQG$RlYh35}O?`#S}^H`>6P55!TDkYW?Rm(RYHjvJL
z#*f58RmtdN6C;)LL1m_?shR%Ruh+Q#G#D_i>cM=s3mt&{*-Y)w>OR^W{RR53+ex&#
z#!oj90KhLC007E=J4uBF|7mtr6c_!Mmc0LEC+SvKx5XSs@VV8MUjqOnms_e2k8d^x
z;xMB{$UqcYugeYFmrA^HtC5-wGYR<k<F&l)n6L!7F8r!DE9I)J>h0XRQ!0)(^d9{b
z0F|NbivdO7)19eHdy*I%**rB1rqpZcV_P-qu&JeEtN<&f4H|i|=@%fm?A08r@hO=S
z)ub_c{0Gmxn`ct0+9i7U1#D-60ogopRp9HaZV;8Dm~LHxEZ10!0a`hOGWUbPGX<&a
zr*J&Ztuhrg9Z9E6h9TLO-~wI5TLZa1w~}ZDS>@5T@jdj-hz9smeAq_~IH4v%X+$H`
zbOEl3bt|e)?OcYGde37v9P;li@clP7yeABSn6n<LX342wPS%Dem{ISJ6weHg?@uHy
z)8=<kdSS$4jJc<_3bC*XuSyX$BQ8R57`h^QT<<*t51aADNKJ|(Q><-8!>loY;fSRg
zqYdSNjdFOy>-#Haw%B*)mcFXzCdbXaWsl@>ykbD}3|L4=uH6Ek-05n*ndMZ{M>zSP
zpmkTs)ADZBu?99WsZURFM@(K{zZ<8t1--r?QRZ6X@_{#33h%Y&tA0|YLOW<jqtI2c
zJIpfGfF%D1?cv$&vB`y9y?Y=n=Z4E>7knnu$j#DPr-M`83pVFd)mn8AKWwINLaqJh
zc)PGy<+^LnX30U<!?)|hqkVG+-roi(M-SA;nB~UV_2knDromTN%n|@W3F{M&#K+;n
zMq;^$*-*67g2$dI3bqLZ&}9Iebj8scwnisxTUyb*Tu~TNPW!fFiv|-=k(|vb9J#*&
z#H${5W<L>#(V16!&`xVrkeNb61o8XYos_*+j)s$pc6gz%;!T5RktYC(oND4g5|NKL
zhy07pgAMVh+KdR}K;e~Q&(@*%W2^N{+E$liJTxT!{++y=CXRg7f1oRk?CoanzJe3(
zT>10&C|DoJsVH7T#Js2Qr~4&Huwg_^0-R`=8}iVLr#Nzd_%7?1(WIay&Ihqroa#_(
zQAL0b#3~7uf;upTtVF1Q<dFAz4GYmfz2ezy?b?hl13!iVZB30<<XZOkV;P*7ao%E-
z+YLEelbrqZ+xeNxUSrU(k<29a&YVM^O18%)t5JC=Gi}4NpToF6%(}^Se`@zsWKl8`
z{XmKjPm!jpSdY9$QZD&yms+jFG66dAdJF;W%L)U~(ujB69;~y}rB*uCH~yy=o*H<S
z(MT3`M0D!nh#+or5(CRbS{`j6sf+_?Ks0jR@<bo?7KAMbc2rR^kX`{boXBKa*S6u)
z_-xTVH_w;NhZw_4VqTQL!c~Z=CL_I{L8Q-&JO%~0;%(pxtLho0$WmnVY6UXS9p_P|
zca99_wv28PtkLVISUwUO!C>_x%w^Bky}nF^#KK8BcukFqbWY5&Bvu(17<(xZ3d3YV
zRAKYB%rkkMRG^x*{aL|KiFJ;3IgtFVp9oGr^PqMzKtQ2A91+X~Ns&Y>;-moxDOKTE
z`#ZvL9<!^%9x&R)EAzHCX35xlegT0+-*Z950EZl(Cexn~{)}={uYM5$?f&qR9;R6#
z#TC}{ayoTeUk$QoC&y!nqp@_{udaG|f~yVi<f5gIwf-k3XcQw#YNwbx#(m{?7V<u=
zzd0_iOf1yU5j41*4P|`Qj3^b5dBdwKs~i5-19b+<<6v5CrgZ!M=oErD{8EB)C^ll$
zXLZJz`4s^b5l%AJ*DOW0(hiQp&%Q)f6O-_MS$z2TVEV>M4eBgY%@ImrHHG;h>IuAF
z=_jC<A%v@U;Ih3N<<e#8TmbvpP4c2B{mFlcl`*ePG&L_QC^a@ZNZMsj_>;+73)PO{
zo$uCiCR^Zve9B$~ciU~Q%auGVrb`|!CftQJsOE{BvHrA0CdJIx=@u{HL#afHT9GLT
z{qmam+eRKBj<SB{8l08xeqWDeeCa|$m>O}RQ$L3M2Q$Qc8O!NPY1!>5*dIJ1N`2{J
zU2A_mV~U%&*<+#_Qm_r%X{dJ&Ai$x!QM=OKD_clQX={JQ=x}{>+)9c<LQt^<yK!tY
z9jG#rNtz*0NyrY?q)bJCf@VGW!&ne-D*fyv;<GCIaw}+_HA}ulT^I!+tP^XDWTtXs
zgsB8z@Vt7W;0c`Pgs-F#&p@R<W}RtmIvLv-qXg0T=vf=G;s{)VQcsZc*f}sF*NT$_
zay3&A>F!l7(yJjg3KrBFldSRfTLpFOSr;Hf{v?Juu@swZDCdSY>GyAU(Tea_+zJTn
zT9Sk3<s-g|vU#4A>+6epBYE>X&fh-F4m>frJiIe!lg~d<<2zV1PM&RTdInO#Jxe2!
z?W%>zr2?4&I-5&OSQGbjK+YOT{Wv&QlfV3}WdrQa?6d7E36MhFSCd;#Rv5w$SEf6W
zdk(;RwB7zxYG3wUSQ2xuD#uDGS7I&$I?+MVZ!N2Ixnz2J%(KO3&v7MOCv1<UP+ez@
zI%1wYkBZ`8pqdcET{PoH_3HR~q%}ZoIcSa}c<FVpD4SR3(63JUcJp+9TxOcIS6f;{
z>49%WGbQj5)jz%kc<i{w;-p1!-vv&<n{%X|YqCPG6Haf3VJ}Z0j7+IyRkB;z)ZEz{
z8UMyOgv5a8y{!S=hMQ}#CCLwb(@Q%vz16uJ|B$`iM%;y_O6d$n@b0&GGD++lUe!gh
zr9o{bIr(cY%q{w{W8(a`wH=Xz(>{fb{r3}Y=e)h{WSV58mS5GC48ONekkXVqUR#((
zl-4u{6BfqcRi=<yqSMDWb=^Rsd`CNcT4fgCrx$zP-v!u(%xPMRar{-TN}e*uY!lH^
zKz%;%)dsZhx-oQgsGD-c`gp%<idkK?ZeO(7lgD!c2L264qb^eEdMnl*N^3cB7alxM
zbTu7d#NEN~_4w3{UbBqS=n09*wJ??t^3aAFe~u6`M*u=#UF(biYUXJD8@$TN0obKc
zwf5U8i$LXYUs2_{<D>?KvJo=!gzizto|A<ndorG&dM2>$(nwGa7}F0MeggD@_n+9#
zfO5G(#vVR%c$PBQz?+2S>(8sf&%@I3D?;vVD0}Wq*{kebKc3n1KxlX)d})K5B56WV
zIQ4;HfBDSQxuwACi%I_ZPDhy8u7u((mb}ilF5T~9E3T5ubF5OCS~TMxaUlY1tZs7a
z+NN7^Oh|4o&n&NxXNYrFao2PWTZaxV-tWot<F{eVMg64In7JXNkxPPIqI8@E=8hgw
zlDVg_8cg>{&Y1EC<0%*e1h5l_iWB$^;*0yy+^vz^xx|ImqOuM<r_=!*^K!YAPw>Aa
zGXnV!2D&S#a515WeZ`|I*hfUT7hw){`Z9~-)B-MAu$&y^47uM{;SLok!SpDo-B@+j
z4_wQ(vokH5*K?or4rxZ0jFOHgPiQs|WK79Zv<~;W|BWmE30`4Fra;jBG5>`BFyAcy
z7FWs%OY6Eim^&Hk8kpPa{^M-;aRC|Y|F;n4e^CfVEB=^(_~5;Ib?YT`@d!W_$}2Pw
z!xbv)jp!P(CAjh@-J@$6Tvxn<9&S5XLX@HrpRa9PTwP3UZ))a23|)~Q3?M7t7>um2
zX<ESuv2AjTc4$)8S2zN_;8^pzExQ6yG|i6X+QpJF$ZmokLHQ~29LSp29bNaQSt^aP
zh0zV~_$lPyf%Ho-l~z^^>s$GqW%0|gx|Tifs3rC?Hez*{dr1NiobCfSc`n>0GH$Q#
zE{y|j^;^UWopFdOTR~t$y7{0!e3?O`gkg(7t|^$n%*l1+qLI2lOa0}@x)Eh8K-L*F
zLcA>xaG?WJmr32l-p45mI*u06ClSvdqMqYJJVXpP{b)E3R0YKRpQQ_<6D>w%D$br3
zNMIgEoj`a`?+rI^vZc|8>L&)8kR_@F@`#f`NwDP{)E60a(i-W4+_Q+Ih8yXmTRELH
znM5-CNB2L$57b9#Tq`;o7qg$n9$sBRDfDBaE%SLw`=Az5v_*J+ebY3D9$U{tSOh;8
zXv{pe!O5qPo}X+ZW3i#<lhv8wGT?Wbs6#L6AxhCOMH+RB7vjRP8$xYkMQ<s?+K?vB
zvbH9kla8Io&jec*`pzp3Y;{Wf^o(}Z;9Emc6`9R*8S-C773cZ#b9YnBIn8>Rl*!_w
zHSH<qx-mlouxt$G;PRV;?GQL-M;k@^^@6a}JXg)Vm!xPx1O+-Nk8U|WK?fu@=3tc?
z$(&Ee&zCdWO(Ka#+9e0i8LD^+Dg_rgkCX1cC42Gr^5iJbFuzQ?d9h&yd}V@dT#b}w
z*w+%4ZT0lnViR>4{!bxSDsoJ6@;^c@l>el2{U`ZQPEuH1*V5SC)Y#@f$+^1KG;Il6
zk$p~U^|bRS%Uh^8h2^elV909X(B!EGA3*8l`1Ypc5IYGS1RScA|5=qn9g~?D9^#z-
z3_FfFe$NDVj7tryO>0CPMes)XrqQvy-P`}%*^i9x)o)Z3Xp>aFvT)@zgQV2z%V`@3
zJuWY{A7!CPKM7)B!zu&DV#1nXBp2~Tjn)Yebe!m1u;TOB3{bHI+UFqPP$X!nN8_6Y
zC=1^hR_Q<YFY2araZF+#-`Nd6ZY4&|bHu*pjTAUjbtYD=+IoiL7ryAk@CmwG%)Q{>
zX+PnzTVrWia31^dChe}noM~Tu`IMc%;V2BZZW(?`eB%}{v4$FU%j54=3lnOpdW)Np
zAS{GbaN{}e90cBT2C?}r8Uoyu9#Wo>^E%pojrz%qKOI~W5p-75)W778f83mZ-M{&~
z^sPN=xCmD07A7sWB9{LZ=Ady)5iO5^@++k@OxCqkvuaA!<(kc2sI+^T7M-}I*2RD#
zDQJQO7^C^ZaM74kiOGbox3>jnKlPzjcPB`+lV$G-HrKJZfkFRWMZUcJ><W4GDc3m~
z2D&YAvm{bH!0<+#l5Q)p6}-3+^UFB84YABSh8Jrche{-iBU6}afeG>66y+nVa1;L)
zWfRCcSM%Jlva`4m_M9~O8pxHf=epC8MCFKW6X-X;qv^!kCt^$<q7Atus_K3Tt4@*D
zX(sqiCb1=y4>GuGl0=6NnTXw++HG5i9<^%RJH=b2m}C2?8^1qOFG@8R3|#jj*bc}$
zh<Gns94uMGf=erldxl-%B6h41I8mKwl>{!wZUjSC>0pGyCMQ8d&EqmM`-85~2;vAt
zt^lJsHG|~=TWgG+KPG0g#(Tg};+6t8<jpcDhySaWV35d>3w5;-P;g}1DB0C4ERFvm
z6$(enIeM(a?WMqVSythRvmBRbH~C)9Joc+ivXC8!JGqaDA7dbkI5}ibA7})1lw?^{
z|7f;9X&i`RAQ*I_ARxSPK#L`EEoF~{&%k7olDseOM#2XH3%VZhE5=Gu0`k<HCixVj
zniT2`gQbcJ$LMb-fkqBY7R>1@_keb89ffTbiLf^z&ESJY?NXaEn#6jIf>{OAW)f=!
z7183WC}}fb3ZVFUl18P_>I0)Anst{oH_iw3);&e)Iwf5oAH%svIo%BOz2G`Qk1Vn~
zl#l?8fi6|DoyPzV<3j;@Hi{LMx6}}uqB+2J;kTv@!H^NfA-&p~7D#n5B9*ctrikTv
zm>Ljm<s@W4eZpp1$(lI@M(DRJJ=LTXmYixOzU!E{hABmv=s_DulO_xSK6OvqrWgEN
zey9e;pJb&(8o(uok|=(~X6dbh?aaYKaKFlhg}q4l7@4X_kBHzwtK0E?$nN`^3tyU2
zhCoDWF=UL1$}2E-)946BlZHHtK#>3ywb>>X#8iorIv{1TjQN4=R`;kI(sF7Gp1|_Q
zx2AUqfJC_tGgJ6?35Q7Hq4WzTGm~l<VwTJ)v!mr}+e15)G9jRMCNYa;>-GuyH^-P;
zq$}WBYM6NV8YN+syv8;HWiz;;I0)leJR4bw%0T+%jgLtYV{u`!JiAc8)>i%I$BT@d
zM<(~Lr>8z&ELmRp+w&Wy(j8e((rXJ|AJyf=9NplU^9QyP60v%$`?_^(II*6gE?9M8
z1^n?!w$YBD&f+Qys>eu6K7xD^nr$D?0urfbK6olnohHNlJI<C_5}L%^5ne7Ca-!W7
zO|&MR*so_>9P-)R6GH>9?-jzz!yyiNuHKlGixtcOIJ5pE){p%~CrA#N`+8R3<}Dhf
zg{l*}Q!Xty+A`wX&*&GYkxAdwUp(d|ox<Rtsl(kfPQPit-3CRm5o6FQ(_vOA@WJCQ
zgHu6=FRA6DdM;iQR!N~Lhdv3r9(NK}Cy>Q8H5&780>eS0nC`wWA6;T-75?D2vAL|J
z7_Bpb#~I1z0J@^+QFh(PIMUXA@Gkr<JvC6c5eoAf{lb{&v`LXBzloiVBZt&$EVkeH
z82Fm#ZO@fwWp1B!Kw?vK5DnU!KCfn2)7=79k#-YaB!#hkGDVZ@aqeBSRQ0X?j#xbt
zqj&gYb9W;sO}q&@uP>qs=JJFIs*uf`tBz{<ZjI1|)(nEDyjKu}bOOEWjHQzt`hCUG
zb%V>Pfa{}-^QC&**`Bvre<j=}<OTaStsm>7dA68roYCn_Ymu!yn3w;t@)5+Ges}N0
zV`%mFz6`JDVmGJtTw&BD^^MSjpz~a&`UwGnvRLCrCJt3)1k~51tj{e)s7Ctx#^;O6
z(*r^?#gcYd^NLALr)p3lm1sCcz5m;SZQxsDWc%v=`21`0HV3_vaeXEv`No6k@81It
zr)Ouk2Gy+Cl@HmGoLI+RmM0rb!*DkO(9v8yfEB90_j(luObi>*&I&x#6cFb2L!SER
zl(aeesr$4fr<nCngTJ9bOh_VZ%H`&dYmwCi%*Z8>xo_P*6=;o<5X~&<5v-NS*3fS1
z9srSvq;GFY;2y=F%N$5r;giXzEFo)$>-Y?}JcYcky-#*@b!=KU_19BFM`~!GawZpI
z_cv@6{@S0A%y7SB|0|U3uE*Y(_)&WG{LrNT-pBr5<`&bR5W$}YKSy)h{~rGT3xxeK
zxx^l@{FljPySpy}s;;tf>5>L<w1k@o(i6gyBZnXn?O<iC{F>@$*A;6ZfzM`BA{l;+
zF}L^LD+m2Ct~@9%G-=)l{PF&l2Y;6r)+eTAN`zJlv&INcBC@>!_-hp<t8t}Xv`3uI
zvY*2e1_~E|K94C6!JveC_byFig|HdK>_v4(DqIk#jHTBEq2?sA)D8m?=(asdIESuH
z6+Lkz><e(v;~d;uV4Pa(WFtIT$iy@xQ}7Qekk&@!2WN7xD^Yn>SWTl&nWCW!O<O+|
z#s_ML^UPT5p%$5D?BP;-c(d71`&^f!NXt+;k@wS}IGwkK4C>?M-!rFs5v!VFz)Xg?
zw;1y-GC*3TBj}|Prra90!E~{?wYK@$KcVqpj>hYxz>dFO#n(b4Q~Ejp49lg;WT2gT
zJY_tpU@1EEkgMqZjD+Y83l!ByDil@ixxta=Ru#9H={#wKl7DRhjS!d~-Gz?%tD5U$
zXzX3^Ldc(z%7CY?oW4V{4B+AK+VeM)Z9r9S?zoxRT61#|n5^kQZ8v;pZ8Ga!HvuQA
zGkV)^DUxP5Kqa8xa!H~{;%eHx!J%jFYzD<CXvK+suiigexvL<8V7P#8BV3^+V@0lD
zzo7LMQH<iMqI23%r_6zp4wJ{{gH2Wp)M+95+f<e_p)X5mETLV(v_m%>Gqki7rzq{w
z<_5BRVb11gJFI5U@u1TZ+qQ`*%Y3&OX;j{b65ov|=N`aHx=Z1V)`VjD$Z4=7MQSxV
zKIGpHx}ng3r*D(Cayc|*cixnRTJnNVRHdy*<VHPvfz5aHy=ExR+ojSBwk90tuN6}o
zfMM!av2e~fP7!W^cQC7dQR#k<M^HA7ulm-li6q=))Nf6q&J%^#fjaHaSirqt?9Zn5
zR~RV}&od9awMnh@+fS9ou7*h+l8pdk;EcaSH!Bv|yt=3|=t}sfj<X6Mag43&)?Q39
zY0(5Me=FttRrBj~0_q~F?O9@kFrs+~+RizqNHwC?I5<`;I{>59nP&9IjA$%(m^HX*
zfGqCzP(h@ZRn2*2YP4ZP^ZNAF=JrKLDf*FCXU)*fSXVUN>qR}X+F?QiuND0bZVySj
zN1FuHWEVYmUS}i)wRhqlMc-BKbJd2^D|X=008~&PgCRT~{ORxm<Q$@Eq^VZBX6P@E
z+CFPFAJ?*1f~N0bx3DG;ARlN9uv3R2G|G@B{o;DcZ$MABERtxe&!}}QEqzB7q}DOB
zur}d&et-Ymsr;&Tldyds<^H6AqiyEg#|aK)Yd!iO#$R67LW}z!c|sQaf7%xQS$F?S
z>E&o{YV-eO-~KOWmFAz`sm&j$*P*K3f*^G))o4uONO>Xpu!**`@jBr|`pJ>Mn3#YB
zA{F3<ijVg$&_@E*=}IJZ0D#M%>&@25+4dOp_pTHIp8dsn>AtmN=~uji*Q5S2Ws*pq
z(%`vI98<~blsAM?6q>f(!Ris)4cBr;N=8Y{&(5^b0fSuXiLsPmtEk}Jl2+G!HlwKT
zf(9~j!*N<C8b-r}Lo(*TXZYF{>&HRtQ&<;koCBlW@6WGmcHScDcq*%0Fx^|6n=i<o
z`@s*~_VY(E(~*wlOiG`$5pNxn<W`DCuk^6w^H12vrzX;mK<(D3f@^0pRem>i%-!kH
z)<sl1oF{PhMS(v>R~d<!7Ucx`#NQ6`oIFPak?uNWqE(D;F|J5`aj7E4lsOWHLlO^a
z)kFtx4)G&`62mlPGmEc~?t0QVb(nH6U{TYn55^Z6)+W`HL?=+=&jXOc@YGP*1B`x!
zRfrI=LJ56UkxTiDkNoOdQgQ=G-5r?ICx`P!W6@1osBAYbLIYwRR7VKdC2hc-NZ}E_
zh(8V{AT-)-VV(~yB!Xm=K8nEN^G{%u`wh&<V}+#fY6Q&z8tT(y0{M7BH6lvwzIP;g
zJgOmW4D`VX?-YQW2}E}msGGsPeG4z_pvQbTBocDA4Mj0GQL}5{`EdXj(~W>A^PE1z
z)T^c-O}Y*xbi7ypN5mPtjNuT26ar#D*rkMUuFzS7_%WP*(hDZGz?)b8+Qe;b&_AyY
zQv{VxC%=+sow6IoM-Un*PG5d{5^^am-5_b;nUIEm_jke}MVOJk)wHDXy+Xmn0MzhT
z^0q$WJ<)VtJ~oUo*Bg%OsvukutaZ)BQn<JQ5-l}TI}JP)Qh5Qt3x{!y=uRZc2l@1K
z9$EX9uN`a`D*-+V6ynIo{Q3fuOPvjfacmYkL99G${WB-0(D0HF;ZU`YO5|sg%mCW`
zs>EZjZ=H`)oDAA71d3P~4hfD4_!@D`5P2OYhl$;9<Gr&f>29uEa8&{^>mFuZ^-B?-
zu-qZ?`#YtE@1k35foxNbL`(USXkPXxPLh;&4g^-SJ7H)!#}PN@bO4RCTzR=|T5u()
ztajUb$Q+8Cu$Uj7Ay_lQE!2weK7NK(hu6!xzM?1}tN01g*q6jAS8I0TS|6REB1+hZ
zdKWA!woV7hPf}Dqe2HKiC}+(~8qG>w<ZK9uLSI_}r>pYU=*6l~{^XQ|a~F^Ti6*(*
z149Y)WtlYUP{{<vhaZ=KQp}W{5$-}WQ_l>^sXVsgVdVVuvKb(?vwE`U=msFJXK42X
zr(5@wRr#`{wLn-8gPEi?QpX~Ui-#xr)QNs7l`@4dvnEV4CLgo;Qjt+DNx}DDZ<#`V
z#9T7P1o%$O^iucDo=p>@c@fo1z+6u{20471LX7~Qv5tnbs=ICdaSgZ@>@qwX3<i%t
z7iofI0>)e|&B|o)x~{lbiPRDWm#f;7kP6PL%L-<hAgU%LbQ@uVrHQ0nWr*LEo2|;`
zAh_5S7m1tFI~2eDOQ4{15tA@MaLc`<?GcR`QFfwi10>@kLCjME%0u+`lqUV=y?8cN
zBBgrm60MydZtQJMoLaqyT_<SW+ee|G>o}C-2r(dR=&M8aiz?Qo37^fx&=ZdDNrX7Y
z8Iuzz4JC}Ie(|E^8yN97Dyft}fg4^DEmM%J-YaV^tzZ_NT-IxOrN$qp>8Kg2@0-wy
zLI%=!T<YZpEkAAC$Bk-qj0aT@7ZQ0}!Q90FzD0FmEcMb#%uTg%-GbGa3sOW<;!z+n
zDXJ|hcSt9U_zBR=*T^fLsnt{Q+%NvYeFb8R3aFc{WnN(RbaioXaPm>%&hg=5f4@FE
zbkEJr%55;Y96uj@!NMv4YQN}7)6RK$3vGO1-Qifs>8@S{MXECMz#rEb)#P0W7tKe+
znC8mAh`KhLbIC^pT5a9$^4#`0)@bnzJb!k>U~3<$5sF+xcsy=8;*7mF<OB{E;#|EU
z6|eH9Cw4heQiYS5eQ!=Pb!MN}CpiAnsf!DXbISBH_Ymd0n+|yUw3_IRA^F4f`l)NP
zm?ww}RAXzq%6}<|2JFQIVT+!r1>Cs)%OoAF^>I(zcI`AV(nO%h^d$E)>l)?4lg9S8
zXL@AScLo6t!#7{W^6vh6d>!G-Yp<xS*=7rQ19_!P$kUJ3E68c~%x|BOuF}m(Pg*HR
zpb(udvY0mcZ^%&Z0a(*($;N9*X#8;|4Sl{9mS-H<31X`fUWQkU(T&NkKgapNKbP`;
zm2LTLzVsLC5FR>s*vb%g*F_^Qbg98SoVzHR$gm!fXi@-a>?dObz?F@SEiVop9}f=<
zCET}P+Ep>1>4y|C{Tn3^-ibaj5|dxQ{u_z^6Oc0u`gimY8~`Bbr)Znx-;&DzMI--=
z)c-`kd8=*OV6y+XDOKSc;Vi)-tlSya*)GB3u5*OYG#QpA^gf8>wv&d}RT@K$H1EAW
za|qT^-x&M=CAWtSv}Lj@7E&cnqrBH8;$vT}95U%#oHJ{xJjmWWbI{4NjsgzRW$&d<
zRtF$#vdbA&G1qaVZ%rRNoiZ3kzKbWS${c@2C$XeuWTKU6=q9~R`~{^phkA#3`}~Kt
z<LW$aZ&uEu>l1zA2#njq`}W06>rqZ`<rir#D3`WOjgRKE?{mQD2e$Y+U~ksUTPGF?
zjGMNGEuL!eVWt4r+TnN0i8kr^vVliy){JR(py=p4|D<rbBjLWh`FH;&es7nV6qciL
z`lf`8?vjWx5?N_`?3PYDbyO$brg)quzjahoGL54$&)r0sC<jnDerMO+mz%u2gEo7y
zq`Y1HDTPndf_?Y-uE}`^$x6kOYoEhP#$+tZhTWUsRRxeZRW2FR!j)0Y*-2%%b&RoQ
z{=^}EE+43<ko+Fa!;FLu1fdJ!Db=jrrp7?+`k&0qdjOU<+DGGrnEQgccYH(1v%;u2
zXLy?g0|edp$LM*^+~!FrM2y3}<KWp9sMEsHuj9Hwvh9(yR;R=0-7_FoMX7Ew-UU!p
zj!(S%6)aX2)d7uISl_btq~@Fb2+at24+qX}X*U(Jyd?s!<f$y)-`e9qe(&?XNWl~B
zyrL=uDuO)EfJ4H-t;P?d4p-NNv_H+JbfsMFr4dEhANw*DKyPS{{#Ys^1rZMEj9aG$
zR{EDtzm;cCRL2d{V=#xSi%)i60J1!Tn^HF9=?eCx+14Hhtmv8CG<R!SU;~PhAGB1F
z1w=3kceRU~=tCH^d96ad+LZxi#FVqg-Nttt#>umhaRw=Z=+*4Z_@t_IIEA2CYXKo7
z*muR{H)cNoKB4`+lsa056%)s@n^d^QcuZCk?3VOj)U$Np)o5j$)%kFt#M@>1RCg0D
zSt!|hcPp%*3gs0i<{i5gXU4fie)%#3BB}I>iPB_`wYaU142w7e$8#KT5Ud7<>LGpV
z&C71WfoJ8IHwqT>2K%v|Th2)r8N-hN#lK`#{4zpt(kA!<G2et3jSVsu`BJ9*t-!ZY
zK#WrSJ0UotWpvDV=<3*sMSZKapWN9K6*zsSA%kKplz0xX6+k9lu_LfGQ?Sze!K>$0
zBYA*J_%aP_NM{|Oeup|AD=hI6a;GCKVAZUb9}xYW3`VOI6d{1qex}S>+6t=(oL5Qy
zX~S2gQ%%UJ>=>59#eyRmbwe%<%J|o0rG=zfC})8YImn}gl0h|O(=Q9v>1rWHYB;Hs
zN#R^j3CJr)#&sSPs^R-Rw>A?8*RliI3WwaqRF%AMR<xI(AjHO<&edT|%smwxPBkZP
zc)i@obTXVKe$4GRGQLL<3<w^6Um#<j6VqNVp$hC=qH{mrWjcrZ$I$t+&$rOm=c~oD
zLEjx;4&1x>H*`y3QPbQGN4l`F{f=(~duNtCTwbT#`<2p*LGwo|v6+aLUw~TPmer){
z_hd@=E5XqEL;b6-f8vVBfOJpK8)|QyS9Y8l#;-1&Qs$Th6oN%W^PQ&VnHQc&vP9KS
z90)If#Af61n<0qA0Jzi0EF@!-nwia-fXx{nwj>Ju{x<AX&y#XadC4Xsn>3lno)ly{
zQ?Y5*eiyxjlZOsxA~O~0t{lZUoB1)h*qK8EAyD*I-=v~EXi4JgwjjqcrM=MXbwl;}
zpmEEe0H)z+_^^S8luimWv~vS<j0YjW1Hu|`L*o1yp~!kr&X)kd%>K4bf8Rd|7YUHS
zD9HH*MhAu|%Q0k*&CEBeavQE-hwFvG8k%3bAEHW1F5$!}J#2GXT3)jV%bhr^=|F)~
zaEfu?uhb4v&1SI+3H97y<SEz;O<0NqleHOHiigN)&8erjm){AlsEm3D-_kj5z@EK@
zHNzQTRcP0ZxXH7uQDUjO?9&xNUBe1IO72&X_}os60WNPLfXJU@6)56&6x4^?w<nGC
z@f!d(ItpTv3AqMJ3kTYj=PV72a8>iG40vmI$@l~_cC)~;g{=lU|Ccsf2BoLJ*P(~5
zJ{;t0tt32Q+Y-Wj9+ajMTQOm@cSU>SZWb4PE!nC=uw+aOm{#`jlYO&_N3dnl+CF)w
zq)j0j_a8|`FIO{5TkZ@bJ`_--wH0@y3=hWOR`62uX<3_k!-u@=9_fX3aQwaux)b)3
zh$;TeQj!qUN`;%iWBf{jfq_$cDJ<XxQ>mpp-5NRwXBg5IgH@Xj^Q#AfPZsp(?lTNW
zVBMnMxu=#NV7qH3khh@P9-CI)OzHDENNd7a4^=e#@wo&#1iUf?)H)uQ6xL#1)KwE3
z2t&8r(PuuD`!-a0YiH@z$)lmJMxxf071AL5QEI&h2n#`b2pZ8e8Gu|DVT?F1Ow%zO
zZi|PenFZjEB3me!B8Ij0z!S5Ige|=Z99+Bkex2#Px?A~z@dc=W8vF)Lkfq=&XiB-o
z-OI<JVzUHz4t8Z{BW%9YbCk~jB5SVppbw(-e^GpTxyk~3JlCG`u+}wFlKi_g4QYFQ
zhfy*wvX8nut);z0m*f{qc5wed$P|@hqi||R8ohbbANI=H^ekFz4N5*HhA8>aBHGJ)
zJ4WWuc}`Je*a|4Z9=1VvMnpybeY-eb{cBXOrhl&E9$%On%L%new4a#iG_y86>_`r9
zF(L?*6x<$^({$P+y?E?pj|+Ja*Oa+)Kv|xd2XT1ag47a_z}h%>e&_XS-Z${#>?UH+
zbpPt%W5UFRo#Rn9M`Fa0TXW+2C-QvNR#HeyRaS)Ciry(F$H&9hh2!s;;qqA<;|3gg
zBE~zdHOud$kpNh=p1xNz9B&R=rI7sL)^jeFGZ8@qoqIx$S4E_cbGNa#?i%?eS)3nq
z{}}CAD0lN9N<!J|{+Fg0SbFwpGHDgdSqLU+HcrZbqHXYC;F5V;sy0DAgGsV(x!J!0
zYcc|iW*P6(;wWyr+A;al%b{WSHuV0qH=hNLbbm_x$*|42Gr;HlEnzw46Zc;sRGGSN
z-P+GxKKLh;ll<R8sDIR+Mz*^D5EK6iMFlJURPxaMB)qCdwS*2p0$CN~XrP1}7g8gF
zB=Hq<;~%CCRo4@4`Y-72)<dYPDO<?Acy*<_+h&a_m<Dm7WSRU*i|ri^;wn9qE@4$U
zs`&MM+!wu;od*?y(+$&=+A(1_N6fkeQEe5N*fWDV>6C#8gd1egFu?{*FQZQBnO-bU
zFOV84Q%Y;+t6Vn>KgwVH5p3EAX|cyMS$*jz2g@)%E1f^T@S+-Yf09Y_9qC^hJ&JGl
z$$YK1VIA&KamtoW^iy}!k+vJRWbte9y}@A%C|K%fK;B(C4oKC`4Z~m>!Adq}Fh^6;
zQHCzfuu@iVcM+U|QVAzOk`NZ@m+yVz9}Nzm3I;kXgk+F?JH$Mp`$8_jWCg~k8M>w%
z1K^ePh_}B8_>Fom*w$18N!7B~2v_G2Em)QYIg4uXtBQQ$(S#nT8292m<s!zqY4Ve`
zpi}J@St)Gwr`je#zoRC~^ea|MVD|CiC{^WFm)HooVeYRq9jm~tP7eBz%g+N`o%ADB
zKHBLp`-92#G1Y8%G{`Eek)rTY<q1s?Ygfjxe4<P**}Q2_gHJL~IOud|O?0GfqF4~R
zHal3_i(vFhVOV_g6pU5@J{t!e$C~&DwwJGTc5nQ;_G{}r*bY35$3O>#kfdy}k$q}g
zNs(A&5~OFgNq{}HcSWQQ(MB4b_Mb&{x*C6dkKKs`E)TZvAZz8r(5yC-+Xems^=(k=
zAz4hdr4%6P;6jf_g~j>%>GLO__Z4eHcP~?R5uGaf>%0_OwPtQagf0aUF;@?NKPB_m
z>_-k{$Tv7vwE{Y;{})sMS7+XFw5#);Hm0)Mvhtd7akj3>0pyY|DN(|o%zK6|q~3J}
zxnVY}U`il|Xn8_6huNtDJLpmTgAc1;3sxNAr{>Vj(-#wTy)mz2LoJY*x53V0%KKX8
zy-yyahx8S`?(r<{w^@sor(uw-sr-~G?Ef>KbE+25K=tPifb*jR`1emo_$SX+R9Hz@
zN?hPSJ{@Ig+fB9~^QJ2FMkEZI!v;u89}9h++wzE?1xSJ-9%*2KS!5@}`EjWB_dB+N
z164b}C%u$|$?Hxg>(Zx=a?sXlmI|&Oy00X-_=DFcvwHR7@F4I^B<<|vn{hI!eLVH%
zbE+G1spUuN@eydtRzMtPvFj2fv3}t)Y}<;&FGXb5T32M+$*XcTq@X@eeDy;LSXYbL
zV)|*M-vu5aq5>Lc`{?ZELn;rD7{sl8qq(&PTvNNC&1b&oD}>J~TBG~7MQNvzrOO1G
zhz%9)v1Dd8*)QtH<Vr&NEBkItBLGz9Re;TakkMq!%cKO`HAfymn561+G)wsn0~$+C
zmu7gQZfkk-X|H#bIc~Vgat?N&`)VK`q033?b<C_>7MMGvTq5Wc{bk3XG0dZM(R8f`
zea5-@bZwpaDJ<7EOBQqU{wXqjyhcGZdK!2*Rn_gH^C!QD(-t#S6YEw9uWKJPy$$CT
z*dvL_zU;0x<PBZ9&?hYDYP#4D`Jx${l;w-$6yesz?{hmx-rj%^5fXQf(*npkiwf(S
z`H*X9!U0kyJZQj65i?;B6H}T>fh4ca#wT&r&^iw7@?cU1P26nr18T)<*`(mY_zmD(
zdt~1@A_~x<@6bcd;x^b1G_y+9u{1lxavzOQ?rbrY7fRUUQ^bH{FUH_@Y}P=ilpJ4b
z`8*5zemzg+FxDej*&PPy{fS!i2e6JBxZcijnZ|;|guzM5#rFIxd(CbP2P+}+AB|zC
z?!wvzKN-JZ*B$u7<}DM^3hl-$o5&OYQqnj~D<aehqWi8#>nD84S~^)QoWPfbf{uTV
zZ4$*3ZTeg6HpK92)a@nXu8mAZ{p$gfd~bUHx$4|MA|xdm7cjsY_$mtmr@ieR$To+&
z`zW$DmQvuv!gs+yQ}fl$)6?_u{$((CkC{VuC{g7bk2fs4I++DwNR8_c1gL`-_LIM=
z8XGb+u89|SRuxC_406T`xQNfAHtMTQ)bINOt-Efe70=wgqr4g*@jKk8+fP@5*AfJ!
z2A3v*;~Ejw{$A~hCZs^}kXu>c@3%TRa_y-^<9NPS)1*bUih)sNT{P5=n2-__Ol8eZ
zR$uATpND(V!x+D?X`ab=?IzT`&CFO!?3nTa_pd__Fae@g7!m*=59>eG(eW#)%LwYK
z@{23||7JEUtIIoXwjub8*7lXbHFL!zG%<R&op2q#db#%4Q^y`NO(%j8;6tD$=mE|}
z{Jng?1}Y+paN+7MJ;6^9*Q@V*ec6PYi*23`ezh-D{?gge`8bpaiyThfoE)7+U4@HH
zh5PoXdU}z9&8f~>5ryl9jny<BIHcgk#89{N;mQ(-RhHjN#?4N!R%%{h@5P;&hOEZg
z8Dn)=R#K;Hd0<deuaKy2#*>w5PNBRkdg!FsWYb(9ncTfj7&UIGg2Hw}<(`_oMOlTy
zKgyL#MwYHQ2GhKpct4=dOtYT3f0%=F_sFVEB(;1v-wiIBt>4Oqwl><wjAm7K!>=@K
zoPifT7SuX_s@%zjc+2*E96mUq&-nXBDxUe=jXv+T@~SsEss-{qK~7rQB(AI|8>_|p
z^#1;$6R}UFp3ajv0N%r!(>*wpjhJ&d<YS?8hmY^Q6>oUBI~~sYJs-=TqaqE_NK3Uv
zS*S`~^YFoZ3Foz^{xzmn6ZzebHtRuC((<I+TwFJw{3@#&Ir)Cs8G89v4bS_VQE7q4
z{EyL-%0}|m+BLp<-bZ%CQbATq2wCBh@*Mj|f@9pTfMgv@`$v3^!$6091R}?W)$=zg
z9VNk@y2)K<l%mDvMVt~Y_IX_;sje3sOPQIX^z(EjG%YfX-$r~kCN`>p{Vy}qL?DH|
z<PWi2gtY-K#i;s*U0WL^W5*)g=4g${KEJOpz3`M_WtLhdoRiJlne_#C=B$kB7p5v0
zn}RxMq(&_FLEP$r_x3|VRGIYQ4GzQI2SwmmW7_N~G&)k68SOIL(2DsLL&&oxejlmC
zoVai#=CXDmHbLWv2aVsFTLOI+ceSSPciHQWe%U$Zjk^E-9ey;B18HPub^8(W+q}|%
zG!?^sfMq>TYb3vSnpa{<bvXtnLQjHe!Z`3prJ8oYB&$GqHN)e`WLemyl|Jz*%}`Nf
zo1*jG2`DDSN+U9@Lz*U6WzCpK>d}&Ozd0y<#2-AovB;PovN_IlZLByd742MgZdC@&
zH9C}+As3p_=bcBp%Hs(7>QtyHH*;jXbzL8_t8j$WK5iWS1`GwDF}@K1!8CY`W>0dk
zcL+w;$9}@DY=P0mEbN~ZIx?ITpId9M2-2Tcp@*myCE(L%b+>>hBJVFsa)4n4Kxt4o
z50BLt<QF_PSLZN2MkEXVu<@C0q5$a8$P^602?-Zb2)IrM@7<`8J_P{OuvF~K$<L;4
z!3O|pRf32t%xd1U_)|oCb{B|((eZcULzE`2HP^;QFUyLzykH&-y_!lB^-~Cb#XSn{
z$=CWaq)qar(NBv5CTwsV9}x!4QWbMz1~y3LS2sAFe2@{t<r$%sbcrutwtoj5(3fLh
zw>E*gI3J`EgGF^*8MQa}L<QFj1&bvzWj5qn9_5*ZHN^w6B6zOWLYIiK_IOQW=@lbs
z;I)}kMiK{qRDFbHk~9MJ{mU3e{WY{IIk_{s;=Dp6iU*k-ka=p3KJw{Td_=SIueHM=
z@%cIsF(7A>MuWctZvDgABZZuf1@%JtVV~}TeYS*E+scBf<*ul?D5`eLglg_UE}NQ|
zNe?KT2%M5KH2{X(Pz>sQE)Y94K`&kyluw7DGGSSa!FPdVBpzLRoeb9Z>5(;}SbL%a
zXjuM(bOqz26{-hIq}o>|z?M2S+SC)-j`l{ryMd60?UACBOx4WNm)IG)X$wdb$eajQ
zk_iqJ%u}MZ_vg-?txCQ1fapGrhJ4B_;5AosF9~9zz~?cseqt7aQzAjVhXwg0o5_*z
ztJNF?IC%gNvkKP8h0L~@iUKc5-2OLpW<8f-eM6KI08(8(JI!YURZNA{B5qp%b)xQ8
zaC_S%`j!dSdUgbK<LAzU<xzeojrb3rp!mQ|&(9%wEj9oMP3YH$93&`u*H?+->!Uu8
zPoWEBEJJGs39G*zh;P+^%e+PnNuHb&fPW9{yyZ=LLpVmik^K5CxD7x|COcI@jgu>+
z!q#A1k@YdpLy@k6Lwr6^`Cf7q(XP{swDSjnzA%VSR2Fir&^qi%9s3Lvl<o1CK>$26
zi)<A){vVR<0ZBd@yo!w2!!B+qWI1zSiv?FdlO!v8G@dL~v>h{vJ6Aa&cH44Z%RJNA
z87PNitM$KxIZ+qD#~s{Sf-G?*Q5A$XEE&6FH~y6D>*pSTTrz+-7pwD)oCr#*YaRty
zm<fuEc}&U$*HpwTVZab0JcJ3BAgYMl39Dr04f*%Tv{<DUBzXGItamVjl;v4%o?F|Y
zfFuiblYT1Yk71Mdomov(xWgOqvpI|KAEJ@S>N>wUuWhZcfNSiR&iZoLYMeO?4FNoh
z%FCgN=!pGX>PE=}1e5l>QToW!mpT@b%);7a$D5nkgHtoJmc-0gGWiDee*;}#y!;==
z-YL4acHP#EZQHhO+qP}nwnuE+wlR{7*tVUF_~c)^ly&CXrK~x3zwVb`Yps6ued|+y
zU2IT$dTpcHZAP?KJkGrMx@OFaO5balrzFL_b&-wVyVe~kpWqxlfS_<ZA*DQn6hPT0
z%iIIU!dyrHqDS7dK~`cJec=|~z~J&T-cb!U2uzMpt)#t%<FqDc6zfGW<sd%9>C-84
zf7L^Jt*WuU0AeGP(&3A8xL4oQdF>vCg;5X?9%pemuYpZ)hnG2^M9B~moHl?R^qJ)y
zIxQ?62+x7|jk7xmw4dLpK6}&~u7Vg%hF4MnIa~=kI9KxAZwY@@ufZ(Y8u7ZQrcdJ#
zNUWQ$Bv<y_qRg7_>)_$PdP0>X#15V_ak0G$jH`8NLT<-d`->4+tySB^qyu>jrP01u
zq-O@rcHn9vWb5+F1Y>R<Xr{nwve{qowN8&L>~b;^OR(?diNhJ`eLdv39&)efbggKU
z&)<Vv0<Yt6x>E^!n^}JRR~8|sN@d+u%gCx!&^xv5lL^@giQYyBZ#nr8Oqt19m7VW-
zC}EhPi@M5-I(*)>{SiOC9iJ}kDBS_KCohFZTCJCK{wZA8P!&14Dn8EK%v~k@=3e~6
z0)EGkc{`tbY~Az8<jbvsz;gg7hSbd)UR$5)Z+r^=2Pwa>{RVA%>r)$`LirG92S<8K
zHI(*_(W>kS47DEG7KtRJR5+zbow{sFH(^|mgkgLz2=a~gOB>|Z&bnBq>_;dnEv;Gx
z{fb!UK*y>Jsu(-G15Xyb%KW74{+P!DVL9~-(+P3$aegGoiMdoq4x#2DC5vA7S~Nwu
zBd-x#oe}O)MtE_0f+W+q&~|h}%A9v!4ISNy=&TW)h%ETTJqd}N*qt@kCchp%p5Hfp
zAK#y=&7xt-Uk9(S<U!9^e?KojFSq!Ze?4^3zpV6qyb%nS)VRlSkLhpsd}AxCai7g-
z_QLmC^glI6qL&AIV_h8a7AJY{H!a0Z1ehafq2@Vxp+)_b%DoLFhs_oc8>ept3~}Ei
z9|*alOV1GZpK_5!h++>Hb6x2(Az70^i%=~hD*lR;_%r_;o|SbmRi%ydd!cEyd(PF@
z0qi{J4EvK8051!{>U(ITZR5%<ZPM9n>&-U%fo+6wBczd|jKxeA;rm}|c>Wo4N!VXs
zQ2lr`&p(&Ve?R8>$D?t!^!krHi&W(SyA1}Io(t-T>m-<(WVe1eU88>4SlWOS5JxV8
zGQoy5jVxMEq#l;fH^sQDW(>DgStR_QUxlSH6k#dp<UZE?sWr{8FPg9WIVSx;UTYMN
z&H&tm{y;@e+M*T+JfQI&IbMIT9L*Y;E=`js8A!J>SKT_0p%K>NjB3%~L_Q2>v5WYs
zD%PP`7xA|@7z}^TQ10u^t#rjZM^?@8)RRwQt}A?)K_aOYxC+tYz2uVZ)`c%f1>xlU
zE|$VcY5%^h_I`u?ncZNC&@$i#Z~?S|T!Qm8T7he}C>Rt;bIUwL$(r!iG3lZPw)bum
z@qmP;D%r1L2YKq9G^mi%D4mgH+|a&3I_PFX{R6usJ`za`oQ-oGkBv0D3tFum1$M$^
zPc`2uh!Oj`#C_EHzHQk|1T0I_t1bw+wA%frA*xV&#e0PBg@u`^WY+J3xxU63=MI`U
zLaD}3gveife;Hut2{UjmuABSv>YGNKnlk;r8qti*GJ{pSl6K8_@btH0>i7pUJJ7q$
zG}HR$Gx5`rf7)?J?;i^*gHq)k>V?9e+0kf-6glfi<I9#np-a?ZmKZ^Rzdh!F>B9i~
zN1MA<!tIp0p$Z?~6jdSqrWgzN&TcNsmK4t*K1WT)b)1}He$ZvmN`gs;v4hWTEHIKj
zXl9$;MVrnvr&T~5jaS-APg;CGku+G7DjwL07k&ESKlafuxUq8`$Gq_cC7n;!EwI>2
zegOW@i<5WCis{UcQ;7M)uKM?u$3FvC6Vv~yGx$%IhpXC#-H+w*GjoM$g||kpNOqYU
zv0M2up@dc<k}+D9S>yp}=g_pJP$(vAzx`$v(5Gx)3POe8PMnT^WBOCr5DkZ`OdMw7
zk-a1$w7pdQ5*fMH@bD78QnzugbCTCKXHEhkR(jRL)Gj|PdQ6hKsa#c;bG=rZg^!P3
zvLOZOnfJ7*6q&<#_SDRr;-D5kgRN!BeinlJ``!x2Hr1A<H*_CVI2-+IME6mqF53Rw
zLr{NP_cNCI=mS*NJpPeu4<yT8d#`Fzx@Sri3CJdPGj+(nbCFN1YU9YJA(xjg8<htm
z>Fqiv##fR_e*IkfzTyoPL=hioPLQGSEd8OIP?w)Jdt15=!rY{7Z@fYST`RPBOh>|+
zrZa0tdLO!Hi4m^}mkQd93FVv?H#=;@&y7Rm*oX^`b!C}zZO}SPTDassTd*AmvSD=U
zj3dBZIMjtnS&!3CB^9uXOZ^N%AT0{6!pW5<72LvLQ3TB+g@XP-g_Jnclgq-GqKz(j
z6vwhi$fo$^mL)G<uGm{gJb!%n@1k1QBTg1G07uoP*JP>`0$Q$?(|uNmWI1ol@I?RW
zZNiPIB1bge?G7-3!fN9p_K@aPYO>jC{Q6=n+Dj(Yu+7GeY8{SHBzZiqI83&CCZcAU
z2eN?7RiH7G!8jy6)0ry_baXlR*?G|Q4LJ$#?T1)!g(6n_F}B!BAo_IZ^vM3Tn`m9F
zr9ZEi_|y`Jt_)JnO&DRBe#xM$2*8+PoQj$wO!qh!pu=1{tpHz-^$jqqGs0}3?ykS*
zZvoV@gZ{HL`m)>zJo23bS{fkyj|Kte41`@LMbCA~wnT2!QQG7m1`O4Xo0ocEqC)}F
z-c<tC0c*aJ$0dr^;2FzOlGDsji%48S$V0}LR%)+j5Q!<B)rD|*dAw5m5=B*U&Ej#k
zReA}Q_b&RzBneRH%9G^`IHnU<i>yRwAO*BY|Kr_ipiuVKn8n*8<o6C;9{NR^JW&A7
zX=j6XXo2LB-UgM7i5aqt5JkW@E2;b#mhv`gS%>ewKNQfX6W(ws29Deq_;fJ1*o{gY
z=PluT=~N+V>L@fx$X1Mn5=xjk68Jc`DNgwiA<Bdup-^=xmGNEq>fbOGU{J4d57lia
zapXV!Rly*Kjfa%SBC$#D3|$$!HHaxSVW`O%9P_d|76>8Gt8G@N0f9HJX;V7^u7R%^
zNfJKwpl3_&8K@41)t{p+&ODV-omn(g*fEz32614oGlwLIJxgQpNj<-fe@L+l20`bs
z&*JN9o}2k<Bb4Y<Ispe4=z18zgcQl(7@`SLu=iIi;m#K5(!g)>l~AyOrNfmpXLOy~
ztw-UiQESRQ0fczReA(HW_n)f1^c)t(`Ce#cdt9c2&NY9b+bi+K>bE8P$`5$F`&(K@
zSAm1k(^RI`gwlFq7i-$=%$M$Ub{tP#A3=>#+gB}~J}>!*^tdJii_5d_0$RW&>7j{P
zPbY{nD1gHwA-sFZjkj3Zl;_G(=pXZVmz>t*DBsrNPA#8ki=Gzl1Nr2S<-37q0js8^
zmADw5xlC||F=|FmR5=U+p}HaytAtrS)?&r+1ZYwaX@AjkAL$28?8Y1Z0v54QJ+K=T
zT0?qRUi4^FfyxXhb-e4==`gMkUC`vY7|Aj&Wx9yVZypDL<Ir=Dt{QAy&?d`bDLIn0
zVTphsHz&;t&=f_KJ+2ZbJU+l@?(4|+v~Vbr^jYNX_SNB`H_!Xh1(wyu$=NQ+-PY6n
zd^)~bddeF%<r9)ptKy{1{+xtjtjPDT4Jj>1Bju;CtdKf-E>LyGJpiYcs<<!K%g6y&
z)}IT2_qT@e9|Bousu`p+b`wAorH$4g{p*TJZG*Urq&*%7r!=62$-~Zv1;07o8Ld!=
zaTF2uF|gp{hRs`D=tdw#1KBRcGAv;qw8|u13?5SPBKrDufA7E%lex1)eBt)%DQl`U
zPVt=Cc}O;bn*LumbpDBb1|?~HA^k{~#2@MM?;8Y_1m#5ZjcrT~?OYxH`-}0v?8%!Z
z3)&YkAcWq0p%z_}a;AjTHixTfL6($@76t^=rYIk-Chwv)B-$q3->e`AWzmggc<$UD
z4;UA55XPe_T?-?1hlU&q-gld_Dy^|Oz?WAD)}sogk<%N{v~W;H$tIbJsvrRIhnTod
zA*xjhTFUhNQE{sC!t(N#Xkws@^1wEkbIa*96@;YL@cS$6zsAoPn2dzeYnS(w+L2sz
zXv9zJ3m5H*XKI>47Gk1B0jnl>-pa-IH}{6tp79|XlDVB@U-1l1D;URZ%j9=(BU0F<
z_C&P;QV3vNtl06TlY?9UmV!4&0h{l4V;Hq~>ZF<w9*+dduDCKZ84aS6hM=|KX@K+1
z_}!QG+*QK(AB;+Fcqoww^%dr)BJI+y(aN>i*JSpN*`a%0`CWO0K7Z(`*F_6$+IRIJ
z<Qnad6jVb9L7n1|;VQm#JT6xKqC%O6Y5#WSo{pe|HubOKx&@nLar!z^LhB_LEgULn
zc)I2H@RIMT95iy%(j|Qpw4h}*DQx(l&aiHDjPbdAK0^0h4Tcxgj*^<g^6>Q9khl3D
zP5o|c@S9`2ez6vZV%<Cmd<Mr3jMZo?T{;--4Q_+;Q=-Bo!tBr*u={Zg$e7M<x3o^f
z^U<uCP|g_GVh*jY5Frd}v6l6Mb_TU*U2oVdE%%ej_0bPKnwgU(_Aiv&`S20ZCJbMX
zRNiIb{_2*)e;I22bLw#W%&i%JPTa|VEKd8cgodDuxV)0S$$vg~zN)%)>px26r-Z~+
zAHWg#MXF0l+m2*+o{ky{Vzu%GGGka$hqTp{TjA}3yLITO=<;3&V>Ua3^JJKZIs@rm
zhar=1(C4qI(0CjF`%T->+R2Dj)^a5@dLL}lXO(~-c7Kd*s$OW4)BrHdl#Z2Mv{fdP
zq338uST$PYky3ga<Z|7^h!d|aGLXMRVv6ge0RbxVXi5)$1STqDZq8hRGq2sneMFk)
zJ24>L<rPw!r7lM8N&LphY2JiKFk;91_LJ)*9_q!Q-aQJJmAo|gssC2}A1McTZ`cJz
z^ZYm{1(0h$Ay<pwiq-Os;cFU~4gQ3$cR4_Vd)JQ7d!QVu9$~Pkh0cW&y$9U1JQuHw
z>anUbCuZH>_OJ_9!Dg+?g8-r^t{@o$76HH`bE>r~1+afj`_W)dCkX4)d$XharCvfr
zMg>IAl^|Kg$g;K4f(kR$eivrp^boEw;|>810Ay5WMDGdX46tzLISY#g*J;zQ^*#KW
zC|jL%6gvbn8KG@G3mPW&-3`mR*kXZYKyjIksAAKAMlA}8#<5tnVQHtiMIJd}8-=|J
zU+tzNk4sbICK_sdY$;W%Jp2_+RF^4e%MfP7L~EgmHy}}NrDDU9PS3`8iD8my2sO<B
zN<O5EB-5Qn0FQLbK!)xuVjlOlWAX;D*?V?Q+O8B0ZG&_9Rf@E!S}_5GlGHE3;1h#9
zRY`a`<BItGD?0my-siDzB+j}rB~7YpA_9F#fUKpiCY_PRJmEguld0;lG|$^`{qzD#
zeNae*_pB2do;>NTpE=y~aU0-TTo4ihIZ|d0ceD(e63>r`b`~spd%N+@=(RJ`@5@_w
z97CUE`eATTx$pb&cG3R>nvLTY=w|fE3rw1}uL<NPZyil33nJTJt+u~E3bXWuMsycb
z{+3Qu&?>R9{vNUbM*NS{fV=E|mmA0}m38?kqIk=U+kgxvJ!U;Vr1G-mIRqsqDkOAW
z4zMKyR!9g`0=G0H=O#2ro=&ECrtDbqs~3>$?{O`1IWS|^ouzAeAO#|;2^$5Cs^8&y
zHx3*k)B3_BuG`S8J!bLc^{Qvh-f~vbe*bcN_~)^VG4MgR{`nXv|1bbZ|Lv}U($78C
z&eZ)seFtonW#bqA&z?b=babbsdm=}_U5OG=1j;(q8PQdRQ?jM8!=(YY_F$d)WoZF~
z-HcE7i`n*J!yKt`JnH>DoLclxJ+Ef(DkYC>KR+B8qFtbL1@tvSI~CzD1*F$EEVOy}
z*N11z_MzkqMmJJrf^Fn&{!hMtvZ8^f@;K!_r>?*pv&TX)Zbx~QA8b;Qq7W_be2#zg
zl}Vay!=wjGByKdA1-luNG<#R+18V1XFA(a)AjcAV1uKTYk$`45Uai|9ax!qCngFIC
z4qdhjOSfcd?wnF~Y%YU30xNuuwjJtQkgtgwI<ywM24YRDzGU!b6_HqYh&HW$EV$Gt
zUctB~b~aE@NFl|Q%f!YUcNtL{PDEHb{hg=|EX6HVU22CkQDn%e(c?X(X7_@~H_GyR
z@htFd3!-MXKeQS7Z&Mp{1u0lO5BwW#XFVH>7`EE!JoOPARMb`ChntQ^&O6+EILDNm
zxJ#D;j~8>Ucs-etGZLC5GCI&`!JH5$%dfi#eYaryqf~DHt2ZJAOM<HPD#HhkFwx99
z%=h>xNKoEMMAWOzy*QZmIDJf+IY8%*Z65Q9vRUoXw9c~_4mG%I^QN^QddBrnbEWLB
z>=R0xm}htR=rjeGweAEYrX2%9;pk&fX{4;EAiBI`Yt^&xKB0sYlo+4eQu=O8ae&#*
z&`kGj3kzDN#*INi36Kv>1L3i%!BEKo)j$WNTBvbevH0Cjt}M{($*j1!sb8SQESjTL
zJYjrhuGSEhD2KtTZF^eHfY%m=sm`&!>^Zq|W#!+A#I|t@&a=&V#FaX<C);_2u9xip
z^B!Cf46OhCbBdXNhKT>Zne(6czmTVksk4f`w5jKRAL#!j&y)I7AdkiQ69Cj_w9?Nn
zBsol3s1Q$t*uz2rg0Lv=W?||IdvaabZu;pz{XDp7>iLjZ=RUg^h~Z`aI?l?N^`UW{
zTpg3SZ5B@c8cJx`JGgu`y9v=f_iiYAQE{?%UoURnS1Tq_F?udZ)=Hd9O_ss|rpYB+
zSTkxih}o7(JyfMCuaYjPo~9pewK3<#kvuv*B8?TH#%2dETHA7vyV>kTq2;>b-<<Cv
zvSoam&~L6xNyP>Y`02RnY2tDJ9^yHQYXf5Gn>=8eOMUxAP`B9^<$LjzyUFIyujI_F
z1M}0`<iwKGUD`fZtb);jn#Mth;Fvmpnz$^6-h3o>K3ND6hCT>syy3F&bonTub<89f
zNyBV7e#Qm!I{m=0?vY3Igtu3ZuzVkzuVM#M9$;=NnnmmQ^Y7s&xfjp8$(0;$k1vG9
z5Q;svYwSH>NpZFX)m)_tUS~Px+EaEdLTN443sxXY;pEu^#tBwRUGb;}ULJXGfN}We
z^5g?0$ri&qj+;=AG`9?yM&f#Wq;T=_LU?Q`4~c9^5)_27c|4}FBSPE|Zeu(0hitVV
zH!&{q6!yNe{qC{u0a<lBZ<7#O(f!@bn~gHXOuBH4V7>w+rajKP#@`JP?iZ~60CSy6
zlB>6;agvLWC^#CVJc@j~hUUg&53yi{)e*FV^2l21$Nk3*5ddsKeY?xyab&E_WkMS|
zH#8+)=)u``kuK;T)aAe83OWE=MnyL{bA4hz)uDoQ<1I|7Q1JAT6tx2^{MpO0v72)%
zqf!}QR7iG}fa*9(4S6?R0rprX{q&M_%44BhX6J_M_gtAr)oSAnV{$#)d#-ajNs#L{
zo@qoiNINMSdL|X^FXt}(>OH(=H{{+kEjcoCnkB$`s>ZoC0k9-|g!NZD!}!m{va#{9
z5*s2{1IwD^>ca~vgbszUf0u^6bFyd$`oQd59)CT@Q&($HEzeKERN@NS)vf0UC|EwK
zm2zlZ4b43{KYI0gpTf&+dGh-N5loB6`__ps;`?XLh);Eaqmk^!*pj$nK#L3u0JSOf
z$4PDTxoiDxw@P$?Y@VIKk*%zfMZ1SB>ONvR$yMB;p*O97)yJfdSaWy}#4TCQ^DXZB
z+P{`QT^PM`7Vf=aIeUM>!2RwCV!_-fU?I9ZaI1qeXK1-cp#Nkoq`+la59b*-xWsf@
z2AxzV!ty<1`4E-0w=q>bey_)6w@$A58#_Rfodc6eC|xC4<z|8^bo{{~4tfxPvwp<N
z=x1A%it4Wl1cX{+h?0U=jcd(;Pscw?{<w<o|11^k$+@6V*Hp85&)>}|);?K2E|4um
zFR@2d8X{o~uYHm=*RwdnmW2ma@U#<H^Pw%0<4sv@z_Gb#H2#isnZO{HrK}abhw#~+
z&ct@Tk1l-h%dAfHpcatbF!l-`>)l}&5w=JsuD^AMZxmO?T>fFMtc%nbSob=1(<H8z
zj-LCbj*h!84BQ|JpDKDJ-AwEoQnbwPi0Nu)gHJE8!@ZsbT@8Z-xZgO#;4x9Xq#LKR
z3Br@7Fl@(18N1iAH8R%)lyFN}B)g73`X=Caj}l2CjC~b)p^j7PqR?URBI7wkg3LVi
zH-``_Qt^=09(>|x(SSoE1|A-86?NTUMf1$KDylxgcml9-hI7fMgJZ+S)%w#-b1Pd`
z^r^Gr$=r-i;)_pg(qzNGGFJYP3q^ac<?26j!S&}w%kgjJ!v91DDM$+|v;RLrgF^p*
zXpq(afd)y?Mv7D{X|Q6f$&u#%IqDu=$>hG^6MB8o<qj*i%Ie*kzMk2>oY`XQG`MUP
z(vval(Fl#P9bCG$C?47>TI`x$F=gA(G*7_a#cFnsb^lW!P>w!>4N?&>nZJ14zZFWq
zQJXA_W*Re~T_JJ>9nxW^ps5|7g+DkGbRHL^#QE2KWuS~AklKppd_#}53DL!102kl&
z$aMO}?eE?En{zttf<?0U#2c$<uwmUekiV`<zs8|})}LA-=ajU4P%3iJx&cc96sfw9
zWG%tgC^f^KMq}I`U=ZaGFo<}9ny5?V&wl}fLY^Y=9zsT20d?IL{SyW3+j=dV9hI)u
zn((-KSfqwN2z7_rL_hwp`M5%XNj5ez*d8I(Ay`OO1xkXa=q$4&p<mO$7$TZO8sG8A
zENtOz!Nty*-P(Du2YGBiO!b^2xQR*pqLJ@2FF-n8Y)9)pMD-Y0-{&V^2S1dZv$j-y
z^3p1NkiIFRk)OZvf5hkH%>SVUxo0GZHqnGxGC-1{7n(M%mCpTo&u%EOlM}n924_#6
zxO_8X@`dNLJ=1AteB-`CLfckdUj;yOg|*Z+AQX*0hJ?;Er2+i}JwH<oEZum>DDZ<D
z$OqkdjI{r;%+<U(ZjmXj`n64J9}=q(Z_D~eTUt@y{wyX@2RfwGo~L`q<qA49E*Bl7
z{HE;TWaM(iv&-1Gz^rXT@cM0KA5odWLic*gJ(NUwS~m7D*)i&e5g$Kh{Kx-FAnWsQ
zhuP)@1eJUFjn+HF&Fa6DV*WF~X*!p5N&1QYj<EeFwICv@tnXxKXJT*r4=(6Gsf8<T
zTjzt;majPdz*c;<$<^)Dp5!b^9QW?HWUKR4?zDyN9By|W1W3th${<n+%N%|GJZFG}
zd=bu#;<L-}tc+475S;9llWu|6R+b8co!Vw8^84reF>Au!u3TQVN{Q*WJ4t?g$+wO3
z&UavZJln>3%bPCoY7%)3lshBkkR!J`$%Qc`Rn4mj(`U!3CFF&ZCaw(rbE1mesr9S=
z!L#j2P5%;!W67>TlcW(i%%(1dQS)N{hocQX%mwXzUHq4sGnG8PYsX!+m)VCm0Nv_5
zSS3zwfg_vnsAO!AB=U{wtyX_Fs@U&V*HqN0v2~GU+h1}GX1E!m)o5=N@n=ns?xv*{
zpJvZ{&)1(eT*yLSl+;Pxk}W*!C3Mx(`ep06)pWN@qb3!X+$-aESy_jYeu`&aAF$7+
zqPXu%6pW!Y_y;-fxvPg-eu#X5Qqsj+cN^oEfBym+3BCF2k*!l1(M$LtZ{ZH=rpLOS
zjs%Ggu={xCIiO?$Z!{I!1daVAU07^>4g!&Xj_3ef%XQk%|9;tG#cceW%*#7IwC0}>
zjxL`wLL<gA+JEAaB5T-WTA-X!t+LeE@k2?rw2LbF?b=YSPA@8|ziCsH95<W*MU28X
zyoF%xTPWI;YtD*uq?~bS**JDdkbL}L)HtU7y0+0KEzl?D`As&{OF=P$%Wz{pY|QV&
z@5gtH3)Fr!*UxmljVDmFC3H%fxE>uY`c9e%A)znwdjZfe+|aL1j{B5^{`P~L$!E3Y
zMS5a3;fWWW^ZmDu3Bk&jHATCA(Kj8#1GZJT{+@>UH{kBa6WUuS%FY|EudlQFd+_Cx
z7`@PyH0V}e_9nQ(QrTZTbKR`xifYc8uM>axTQRBrw6S59kvJK(i{_n(Vcvqi9o=aA
zH*?=_28R^yF?}8$Og5ZePE+TOWL@BOVh(#WKKxK@6}Yuc^A&zE5WYJe-3x5Z?9R@-
zUjOv%EvUQt$?D%to+Xv$Tq;%7^-2?=gLgK%$6hrJ5;^rO(3*9RcK+4(C4#`MT6qYp
zx|S8UeO}fk9ZG82n%I2H8nP&FW%9+tm>uI(oip=d4U3_*>)5H;xi?<Bp*kvNv32bo
zr2A^YFDwcQl3V57{?nv8F~H4{B%X9F<X69)9f>qCKSa$yEg70v?Z2dE@~k5oL$i^1
z%UpQNPWV=eX`Bvi5=o)xB9Sm_DVwF#eCC;t<L6esDDD<UQQ0bl&f`m{ltP9FRjhUB
ztlDm{Ga91u$5LFZq-F7MP07n>sFN+M<=wz_iW(lRmP~YCKoy^Sy8FaKYOy02$xVUK
zl@--8Do#sB2VWhL>GboXPol+EN$h7L|D4+RFoNY&IKvZx9<h2-K`Xbd?5kl^R5UZM
zV<UmiY^p@~)xXOL>#U<xgYY8JlUyN6;-v>`vUOGxavAM#IIB-kRk6mvK~>PPE`k&P
z2x~HB9}|mB#xw+X4<kl9(3i|D{;uhJo%_6Yfu(tESh6+~h7*^Z3y7o5RFz^9S@Ki2
zs+Bdy?>(6V)$=W|jW*Oj@w&YUW5|dX^;=iIo64|+L7!z#_I*LgYN&Q`KS+g&;atoO
zrYq~fV)iBEz3~OYC9^noe1~QkY=rR+Ew1~KyV*`A@j(OqmgxXAk?RD(>>VRzh8WXT
zMeNigt6Xb9_n^9JX@Ciyse)bve$;%Uo@E@P%gsaA8vUj#r6Ns(y=+M%-3e2>V}Mjx
z8$omts)#TJ<MjILkxoc56ZZ7nrp0#jaGppHF4kwYdM6~6V|h4@Cs^AFt9zh_!$0Wx
zi6>^#cUpw>W}qON*xDxs#V(E#gD6SNH6-LNm}*3^mLnbuz#{;pcQQ6OyEe5pX_o|E
z?JJh^b-@ErlaG0UAO;9_PfLu!#y3I^VW2t0*?SiRdFd$Zm=7+5Vk_!5qY30ohdl=T
zJC)}3Kq!qNX>ru#T9sC=B+|es4q>_c!c1S+`{g5X1fTtOH+6PHpxxGM3RFCZ3%iqg
z?bltaiKOr(b@p}F{N4T-_^-s*evDEH%m7CC*2^X2!|7=ArtS|E6O*aWUBGD8bJP<F
zFi0f$3Kp0*0`&FZfYdz`GRAvwx5`4o_O|$j<ADiuNie@%2YuXmNn&tN&8Us=9LG1f
zgw8Ywa1wIB#?wS3MYh}395i-)YA2C9*i&%Z5YLA|=~@&$i@42squId8eYU&|;{DaL
z1?{V~i#Mb$jG@}Xsf0hByAO645H}e-2!Fw7HZZ=5wS~Eu1d%(<1@yNebL5%_#*ANh
zD@bF@Hy}<Tz--`7$IY*awsVPWAk9fD>IF&_=7f}gLHVEs<a;hHg21T;X$&rt6P;8s
zDsfY>@)gd*o};%MD$#0#w1yr;wROJhCW@#2(z+mquX)Rp1>;sA=|BC>kHJNansE)j
z*3v@$(<lg!H?m9>xNrqKzSg3!Z^Hz?9l%nXq+olkAtQnYT?)IRXjR^EPV=T(_>j9@
z?K$qfjsYTg@-lWQJf`5Gw#yCjcd3gyTt#n6*Xs*(b9WbMp!)rgTf!7MoWclXBd{y?
zm%Dptz@^YL=`J#^my6R2Pb=%V^q+(C9HJ`bRCE5Wb39xlSmn#SvTa78&3rD8f{S-I
zR`sqJwF^_w;M%NiGIoOL3!9Eg-Med)Eai%8B0O<qWivUOlu$2SEW6;{^{B1n0{g(h
zxT%tGHeH3$r;Zb3x@Wtmh8r~kNB%A!(+SQm?-gY$Drp*Q`zb~8RXpul96j5Lby~fv
z#V?oIE&3rpDCNbi07*tGsM>Oj3^wEKQP$+tR>?myMMf3EJ^Sag8Ijad)|Hw4hmSSr
zH2wHiF=1S|x+|GN&{BclO$<a{TUS%~UeeN1CB`^idj>H-pbNOPNaTz6<`%K#7gew)
zO_%W{4!9CppQsM<sA_!{*WtC-rM4AftXd!T!U<^KT%1o1ym)Per!L(p(7NntJ01pD
zIsY-dI-<m9z(}CR`MfaUMpGxI{^E-@Uw4ch1V<T@J-wHeo$%vr?Lr)oHbNU=jWnwY
zjysNW2S;L{Nlw;K?C;7d&cTt%X>An5d=Psfs{m75diDM-Fok7j^u8iolNshFfnQwe
z5eF2=&^ql*5Ef6xoNTJ9l(hqvNQFpav0GJsHSl0<nl4$o3}Q=QOgN!3g0Z@pjkPf!
zmBjHPHkn9_{?=BXuJE%$C;k1w7@9(kF0@yakFB}~Qef0vC2NuCZL|SnS3wBeiWcmi
zgy)l#M$E+@IeI--P#%2l!kjRJi9(hfx!3^@XC3~VT^#F#0<dC<{LmXTzt)%S*amVI
z(x_0P@gi9aSB6m#30YrKw%6FPTH-`e7}a<Bq80xvaq0J#NJ`bS48Omhud(9SvtH}7
zboj8r%Dg?AQ|_FJAS%1+U^wd6mQ(KMC}i~Idg-eM@)`FYWYWD%6f*doBg4dQ)IpjX
zO-FCj20Ey}byOg_de>Gz9n+a8mo7#p8atQ`Kjp{!yEC_|Q`dJZEK$4o@CC^<>D*-`
zAXUtV*+bn=v-)iBF<crdCKE=NC{T7>;Jipv^p)+^#gFlNTyKPV^4{7lvIRH_+}O?G
zBTr8P2;2mx^sT{w`arnUH5Ul{qWd%Q4gOXK@%Rk;?H=XyP}l^+Qy$*>Jfo_<vtaO`
zYkfB^?oRpQ^LS((&H+tody?y|obu%{@qIn@bmoVG7j~kMb_$!_33fAfCj1Nk{k7e@
z3R8L1bsGC)%@}^R>y|cFiv_-r%fS&Do3Sv1Y>6W$b<B`KcBGbmS;%ljiNteoTpr}b
zMweWs+fqHFYItJP4YU_5+D9A)4d_0u)Ke+dG?#Rea=zAsBj$7e_~Xs~2ET7=e5cd`
z&LV}z71jqBXt|%huH<yf;<D6Wj@D5{=E5zYwEM6yH60(;t$)qB(svlb*<59n=j@OY
z#2xO-b}|+OGq;;>^8h*N_)sDjZ-N=?us7AU)$E){9x^#TCcl%T_w(#{6jm`Pb7O+a
zGGR(H2x$2W&8J}VCy?j@w(6>~4yB6AEp91pBzK}8eYz4S82T{`d}j05`k<WXn_{=J
z#-T=|u5Q>QtP2F4dBliU&Po|LzKXOBM19!qRmAz)0RP9;sP4`ELo`PulNPP>o)|<-
zFp0=rX0AwzTNm6*)l%K8Rd^x{!bRAFpU}wwn$XCXD;^R;#%+x7C7T)2QTQe{urD8B
zz}+#Z#j4=UvE8=D$WJ)orV{r<HFGE`YxNJr-=b$s?&U_>*!Kc4$bmo$YdJ71jiBa?
zzn90#k=Qj6xVo;faPeWRT<U(9QRxKyu0(jr5sxedPzfiFO1BBfZiDV8kAog_d~<&`
zc8)HsxVGeB`^&|d0?2C5zAGj~mHp>ZrB2(<P{+ssOtIi)X3;CWZ;`i~7o2?zAm;5Z
z=dcTqaO7qW_)di4lzJ3SXU2$F40sApwHVHqbT+bWJ@7`>tJ_~4jiUfiKAI{1YE4E^
zV77*yF#0jVY%>E{p>>wNAcmioO1ZM4_5OyQPRp_mp|~vUM2@z5<Y|tMgQcU`Li8S9
zf@*D&{%g*+Es9Do%ehZEqD~}3@v(8+mFJhvDV=i_OO4jC{w5VhE9;u%Ur@A(VC<8!
z31-$he!jMkX*YB<&#q&1*%nfm2lQ5BDDm<6HplOXz~UL>Zr?`XCO5o;OVFGg{2Ly=
z5tJQ_1^y)z@yya`l6chsqdL12Fv+_zH=9ZI``lc?uzA8%h<?pB$P$|0N<fWDKLma2
z)@bYcarEh;2U^XlNSjCwuhu8}dbx=Tx3h(fw1WtGiT}1$FY<G$LQN}!=jb)4F2j8w
zK77QvCc4)5Al$+$7v%Q0FS^)jkkdj!RRhW;b#|qjPeM9u8H{R+Nqot3(PZO<GuP2R
z<#iPbeD#la(;W27KK1bm|D{{|Vhj)7vuB%NS`=qgmEW?LDXTDzCdEo=uh@!DVMGA;
zo~Nl+sRQU=kgNKrw|SmAYhAYXiJy84L-IjR<qp5Xyw`xL;4z1mp>4Vm)K5xdjfHjo
zK&^=o%KG!_4sJO)0yI1wr_xp$oOu#E(FMGWZm~wU4PL@>2cFERDqYc>OP!@$uK<|<
zbD#bD6n|peOFZoPvJud{7Zvz{Dl^c@V>#nT25zel$Fy?0PFAJu+}JjP_9oV;Pa)tN
z?=l(p6>VlNIO3l%gLi$+&q4Zb7w_z-%^p&{jEd2c=*R|-fihpuk?^)^0mtStAkTnO
zxew=hXyZmqPM)01j&RfCp9M{d*<)?Ch21iR#A9G9wW|}v1<#|W2LZ5(L#nozX?Ld1
zQC!#<glOR+-`%-mLW0^s?(QPJYd;W~tBD3-E3FVVSbTi4D5u+WVeRS3+=Xl;UL-zb
zH;32V>HWRu_co-D7t+pj<UC@0x4>?{jg!}#;WLqsjB?k@^c@gAJ_T08>w5SLAl949
z;E4CIoQ;RAeF7=dzF#+bG4+@>bkmnqy!o$q-(CD7tS>;}pDZHEP%QYBSEZ7@F%$`d
z&3BVWlVw-C+^{l%p1=&{?b7^kj=`5enKLslS6}WfxSj&|-z-HOdF<COG8Um$7B;FY
zC7*9k7guiH``^fg$jY?(UCeboIOJ7cIZd-<r%~VkSIkO`dX+xx2a@QG`Jb9Dg_SfF
zROI#lK_!}c{4@E}x3n`c_4rQ)NR6iAPgoM^2bN6W1TPCUW{bWGY_|cMP}-||;3SDq
z);6syAl*D&MPnuTQ^UBj!!9gUXk4}hS_|Jmt2mTl-}`D-{<XQP6p^Q{m3niy^x8)*
zq_erbv#HB3)628y#hf%W8@j;tt=l?Xt}Xk5_qY&TA^o{XuXQefZg{c=i*KJoRlYsU
z)J2w;vDG1QJkRP#g>I`0Vr)(CyTP&ys!U&El{twLRh#!FhHhpEH39F^Fmqj3Yj3uY
zfpBkMN>|yscpq%*a^?F}>aan!dUp=vE{m%Nb&`IKntIO{N`BbnpGs=J*@!hEZY}kS
zwUhN}%AGK^(hL~-R1*rI-#eOjLq`H}WDS;-mfI~ZW4LjuM1Q}!zdbfLCB~^6K666W
z&U2MFb2Eb|(a~r598Z&l1j!!(kbUaATh(>_wbT8V+V9c`&?G+39_>;BjX-PF*?8~r
zEh}!A)^bgl^Q~8zyL#%hSG@f(J?HxcfsMQ?tg&z-dfHU)skWZ{ZpAOwZ)o^-Gmz;^
znz8-F;PUi$Z^iFGm6JTOrs$2c>8-~%sfY}}MLE@bELXlPT`7DW?T}?ldT7<DRIf#P
z>2MXoa-$My%xW0w*cktstJ1W|DdJBN=~3~0yAsoH4KsY5FG&W`ddHVn2gjF^Z@#SG
zW{0GoU-t(a{*OQGY4?@3WOM#^asE#%ezTJg&JK^iD?d=2ZMR>wei?crC;alS2M3Q@
z5s*QNqrmhkn46*o4>ce#`1~-I>3Y6{J7r~M%#lQlEnveaJZP{)k`mVB=%w?<lw|_N
zG_ZgiTm}~($Hy_PpcL!8Mhl^?M8I3f-8Cz#pjBv<45^UXTB7e*<dFA(s|^O@v-YJ9
zf6!-s8#<Nbl=2#c1)tx;PFbsFmDZ^IVLFbXb;m@`Ff;*;6?AUS@K1ym`NdhgqTMbj
zic?%kWeH@v5s=u4Qb~ts>L8|^ZV(BClXz)P!#(kWLtN<FEg5E0<Yy1Lzzw|#SW)>K
zf3E0|hlNR^3&AP?gh;d&M<G7Bp_^D?!b#WGv<CXB$0?@PgHW|xS{G!{6RC~lBz-nK
zeaO{=tq{Llv<HMXt;Pvz$9V5|i-mP?`Qa#ni)U;x&eSB03xjoR|6lim%lQgc2aZ_}
zA}#sxi*0IQM|<N(Uxr!lXUvjG@cytfP`fmV4p&6wzkk#MF=`JR8=Waeik!rzsRN*P
z*k%IQpz?Ns5&2^ABBcAr#CHj)pT^YA#Z_A_Nss8%rU;bH=j&{=Q$+~0-4*fr^QPit
z5V4Cet<cO5-9EOn5rG%Az^{ztcvz}YU|jYMlc+~cYoqG)W;Xh*Y3aIR1#6br92$o2
zTjC}$1wlz>#@JvCUZl)Hx>$5!(pG3Y53-rXEK)98Z?WRRl>cH>KD`njjw^IH>#o7J
zKW|8_ShP;3DZ!lP)Hd(?kn=J5GVy~Y4~bBWv+0Hz3Ww0>n1>L@^b0F-ZHv`6e7Xd(
z{Myi}DcDcV;HFAad9c;hJjH#w`(w&f*S>}3O2mdDCE==0v}Zh^+Ro@PdRD3=X#yt0
z(Yl_yJ_;?rM(jC3ie#o&@Wgqfu7b)+@nYgLejZpeq}~6F>KQPv5eXPjFCuw}1oTBz
z4{=eh%x#X1fS*xnb@QI@&<eW<(#b<U<5J1A5*jsMW2poMRS5d)4GEtmc7zcJh5r;1
zVML0kgi50DclQO2vqReOS1Nu<p<vf+6ah6YNC_25_hzorHgGZk<yrD?9AGj`8^*8E
zB)2DBKzJvi!u3ob(%mFVj|our^Wk1s)->c|j=0}FV&xc;aR9G~C%+0cE?ZF2HMQ=6
zSkW`^7-Q%H&0=1#GD1|5s?w#;$<_1d>5=Uv*G?;3&<2P`wn~}wStr|?X$^Re9sroj
z>~nkKo+ie@Tbp{52Z{J)P2>;H%!syaC0tUf&^<}u?<H^)CVNLb;A{<$*04#z0=o{2
z(=T!!Nw<_e0HkuC#whaQfR$&{;F0^OcjO_4#~raK{S(l0{(Ll{XKKvpiDPhcJ~)}O
z(_0{4=+Wfml%iSZusR}EnWuXtaW~u$s=u(ed0%BBpwfu56wWU;aHF|)t9PkpltTXj
z@wXXRa=O%(iKq_{Oo9(5CpSqs;h)P<jF&&XBWYahw;bLsHDpx9X(GH<)>fIgsd4m*
z9UisNj7~5W$EC)5H8B4ZuXubel{h)vnQDv7*>o|*0LftKIZx<T+J2~2S92ikdxEa}
zgv|VBO}+B27+-wok1F1TXi3`E;$WP(^jvsKmPSM{L}JzhN3y~^T=uY>-Z+HndKC@i
zSvvy!xF^|L(Py4?D33nSvLY2Z5Xm$?;=3-nL{RuEEiChEm~~4D!$PSd8K|X_x?03F
zv87uYF%V}PqQuH7u7wBNtV<9A?tvAr!gdCUf*g{q&+?uZ_rQ}_)UsnUrEU7f@(pIw
z@7X`@XSqrwj3~PN%N^Y>I0?zPkY~qhtJd6Y?SZ6iM(TtC^P%Hqy$!{hM&@b)rjZ3c
zIeJD2{Vhs-SWo*|Rq3I2g#}!U&~qpGzp7BxRR1*0)1YMnMlbLKoz<gmNtffk*}^e+
z)mDHoEN0{s1VX1A6AAwH{{Sd-N49gL!Gj~heH?I`I_;6-gLv5db-&vsA^<k$WYkwO
z)@`fnXz_&sM?%bEY^6ECQyBP+?XAwTBkkR|9r&pIs|}_)eUW3Vm?x`~U0#7nNmqaJ
zQ+}Nh26^i`^3!p9T1FAK&URubCIIiMlPSt*uxW{}RtK<K5Ff{pq>iTW_H;H|&TU=M
zee=LL0s@=6-fOe3uOnyEx3?$ho3rnOCj;`1DGxbY0<=dsHZ%lQZfB0ARiRW!Y==1s
z@gg37`?@DQqD;O=Wke0n(919-e!rU&4SdISObRJHgtvoa4S1YGw()R&<9E^BLxLOL
zQ@B1~KbW))TDm}3GSGcZ@ziDl1CSfBy;$F3QBu4;=Z8rw^Iy7Nj7U59*Y@__j=r3)
z`wLv0vAf?HM^xkZ+r961DE?nFsPjFx9gb;KYPoG34}vpCoDnY4@CL;a<wLh6lrFMR
zi_1QjziCwN(s)Xv#Vz;dAU*u;wc{9ZbwqtMO{l0kgxGx|=r6JQDZRpnVk2WnuqT8D
z!0{_F2t><d6SwUeN~X?64z1YEwmnLc=m_g}?WfKFgs38>;Hwa@z8A9Cv!>0mzmN@W
zw(ezpj%A~ayP+=5W9n(v34YL?(!d};06qW+fd87>f-a$&{V@52{v(s`pQ-Inv5U!n
ztGxeZ+c!tU_8*n^HKRXp;U@_+X6dyd+LeVBp<F_}*y7u|(dEZP5gFx?C>mIN`R4aI
z4MVBv<}COeRG1**q?hMub_(AzgYm8)k*ND{cJ(Ww!Sm6yhk0@W@CI)savoTVv3`Mm
z7umP0O{PvUg5~Q;u+#O?wzoI>#9u7hm8U1KL0V_8QOdQn65P(^CpckS=J)E$l|_F*
zYW#t&T4I_k=~rZ}sj02E<it!PR$olzUVm}Pmn-r?R0qzpl<LYu8?uL<x;lP9KfpE`
z|NW6x+IU`&q`8^}Ne<S%XkbiP^?;mudcVezdl!B9z4T@@4ZehN+1u3IvvjJTtL9c%
zP`3}{`r%l8Fx-V+<(W|#TuXlI=!U}V*EmV9q<Yk8Zx7zlRQ3Xw3rUalXrc#Texaq&
zwLqp_1{om*=2P`kn2hyEVDMzz+^s$QpvsfQ)Jj#H%41)-NGU-*Cg7xKnhg-#s)uww
zfROW{T{;tFiDuo8+WdR7H_gW<I1mqZ_cS+}Mwvo3<#wx!bN@7T4dR230MuhU0vCHH
z-=4VE8Du7ydKZBwCQM~UM|1tGcrCz)0eJXUM0M~IF+xsAq^t9HDxirOlR5^c>K%vH
zR@2BQZr|6_^izVfLmM|}5@_2zg{7h=QT4~w%FG7Rg?GQLasDdx-@zna`NQDKS`v*u
z#A8LQsS*k3TIyy+%vyI;ToBn8gVGN|Hdji2@LQez9ga5?`BxuA|1Mq859i06UZyY7
zxSPgs!VgBc@4I4+&x4_G2Z~I;k5`DSCBi|z-r^s=MzAizcV}7vW}@&P3J()D+cTj$
zm}LHxP=R73ATXKKwO#PC7$Fg#!9A8Rv^#(<&h}6Y%;)jv%grKCrV>ekTB#5bJz#<#
zHwi~s!JdEUQ=|DHs~9g729%|xV+<Vy_G~PBpB(=Skgo}E^y3R5sfGeO@>#A=j%@o5
z&H4*danzPpIrU}&PN$gl$OhmbK?;QD-r{*InQT@NuySLC3e^-+u<q}b6IZug5ttt^
zlhWU8g8<%gw@K9PgRIL~ELYcXO6E>BDULO;27PsZ06EgU-GZmS?Os3s=a&b>DR_t`
zLR^uSlN5p}=OXsm;-aG8^?9!E@Mi|buum5Fs<NTFXXi-PN&AOTdmgqXRLo}wb~y}i
zfx?o>{1N9uJYko4p!wi~i2J|;O|qF%)(>C@=EcEMo0B#Ux4B3=8Bdkegl@r8#8jc`
z6p(Q2VA6h7A?}0(66xV)z$4d@ko|O48!5v=fMjWq#PC1>`rte*EU4uL(?-$+V-kS6
zNw}EzAnP$A-JC6{M}Fg88u;1ewzJDvT3|@9T95(@lmf%idDBH_PMn(drw?nKL(Z*#
zWHShV*ms7+320sc7$ZrixI?bhA~Mn?6)pX7P;e8ioq6XjC$y!JF@RMWB6eVQkby65
z?tv1|z9v8>^7Y_r!OiKuv3836uHm3b5U{dkQQdN?x)Q>EqdPu-gN#?7N$x!((4`t?
zSSU3Fb<ir$hO-o*F$fUPyTFHCCioAJC^}|2Sxp?bLq9RjKHebeYLIR)Uvd>|YZk!R
zIhf$Js07BqUMM6I)|O8dba=0UaRHz&+cgvn3`%e{6j#=F9skx_%Y!UA6jtC-pBliZ
z)oc^22$3YdkUR<uL0?ic5OrUB2WSSY#EtJ_c0$$zk=Y0|v-W1psLdf+D5rU$=euGA
z@Z{rUI)_jVg4|eW9`SysS2BfCaoq-7x8}+rSI9Z+RaB0IRT`)vmb}dtX!L*7%*UFh
z@NwMnTNkLlD(AFK`fha!X|K^o60`D@d$!7Pog}HrFRU~o#_vMiHnggdlCmQ9gmzc_
zR!96TQb>twe<BR_X$E}9>p~!tEgLJv11)FA1$-=KOSqhOg!ev^FkQ))uN;dTVe$wW
z5b$T2b-YSCaZ-?9Y_hR*MkK&FOA$X)$)GboxLNmaT@g)6J~+H!KZPv{c}$TQ4Wxk1
z7#}eFpp;N@+OdfYzq#u8#6qzK;u;vA&=<_mGm)0BuFPxO#>9$+=VCD<691E-2!uk&
zHIdAQ-a)udITFCd25~ckxT%1;EcQ5<!1DYn*lN*=UxNWV!h)NhlIj)*77RhNf-M8&
zV8RN8wnMgEAcLhv{<d_XgPd4366&g-{2B{`(~1&btIp9HP*~t&VzoRpq&!DW45V`O
zlS`{!tsQ#R6G^U^A4Q<%nZg2#76`e<PGk;<vQze$p_0zL1PU#h^<pnwsH^pSECp^z
ziTs>ZPlVmCri!s^X5SiFiM-6*@$r0VNN7q<Gr)eW3cP~8hgcL;k(OZ=uQ#qvtGzQ|
z1&AKM)embjJP@KKoJpcZm=Eb);F+0pmhQ=Pr+8%FzoNwT<S#4Cn{~)l1%<*bZ;?TO
zt)SbaiVl|vWr$hw5dE0w>Sljv3})INfm@|si#CTKM0JEVg13N=7w7}U9=Gr5@ps&q
zc9RS~u2GWYnvR}!G;{`fK>a5xco_>!HnMz#E<nm>`FCjjJ;l>tgA|JWx<wb}wOf6e
zeWp(iEXH}V;m}i!mx~ns0^-Q`a#t%|dD*n^gNY*c<<OYN^g!e$d&uOiLXYfBAMc>w
zmGP^`Y@K=8FADGdeR_Ynq1);1{febiAbj?*V}adhgKZ`-4*x*ong)W`=mlWOq;*^p
zDfzQXXc7W9C`n!LDE$#bc3Xe9#F?_=zV*iz*%IXszzUX$g$e8{aq1r}l_T$9B#*J;
z)1m|dVhM>evE77B5SzLe8U_@}%wcziYB5@C%`J@XS|Dw~JSzwc0qQ})Q>YWG_xGhG
zyEg1F{Oz!H9-UWa^?`W9JvP!2CR?2M|7&F@^Wnp7@+Uol4*&lWbTzg6e+s&msPEYS
z(E9yW^aWk$B@;O%!(rbOu^g0aS@%~1kKm?~1%J#cSt8b?sH)GW_qbvcPU*Jr0)dT)
zv96oz-uF09{R<+=?Hf?~+BKj11hR=O;Z`&%cH67f6&m&+?g5S=bF#%I3Rl`F_)SN%
z980Gaj5+S{+~epmn@m#3cd5#58>j(0gSu*3`iIH5XJZ`20PdP>1-r`D%pP13o+-8D
zuJ@<?lct^Cp0~a1p6O7>=b$Y)^vfC*befe(uC%YW_TDT$Kbc?k2~T?I(90Cm?ouc+
zRAa5AJ8KVlUO#m6OFK?q9a;2;WSH3*<FGVGRR-dO_(sO9$0rx@%jeM{Eb=57X-E;T
z=&1mrMARbXj#SQ9QtOIQm{L1>2!7I;Y%}ZuA}GZeq`!}mk7=znRC_VMH97LBW1r@H
z-L?~`ORdRU_DP!thi=1*jFr)=P+&F78+ivtoa|(%m*QxfAm4?X9n26~Dy(e-A~dfI
zyK_~A+)6?+h?xo2*r><}s;v~@^wRiL=~7?x*|U%`e!#J-7iMkbH?-6&%Il=wUo=Lt
zM(Ehms}O)&Cr5JFXV0ieMaSrawW5T*nkQK}ygb4==Sm7$vt4gb>g5!#dQ&>}HEc9p
zKIweLDw8I}PI3O4C4ijtl+sghNUO$}=`IlMTz6{D*1S_bDaIRCb{tq?Vy{pxcw}oI
znQzt5lj8Qskr+L+tmlDMX|^$Z8Xvz+LPe-5+0E_C(Q?xhDeR5f)(q(%culP)dP(s@
zx|0?#V|nxc^hm1jNoh>E6D&r({W|awzB&#K8CpLroDfa4(PF@_7&GfW4~iPN6E2ax
z5Kkpg&N)pZY0R6^sXkNtRl=7Ldtw8=XBtSn@t(Q&?1DWzens_Z%lb^`Bgg=XM>LlQ
zCB^G*E4wV`<MzvS!V*vLxtI-TU&Vz6ty*Au*RNI<6s*k<j=R*oNcw|GXDz8KpN$Iy
z#HWS<k2JKp-PnASOzdM#0=P@oTdD8=BkY}`LyLm6+t{{k+qP}nwr$(Cot)U_iEZ1?
zNp8Bw9Y5|J-Tl0u*Iu=%>YEeG_}CnByJhc+jm()lS3XVtkPf-@Q-eXqC69ei=1ij`
zXoMvd6t(W&bThB0EM**fvLi97SP)RR$j}T9>52SPFoglIgRQLcA4tPF`rrK`sW90B
z4(?J|NUbIT+h!ZIEy907HlE6Z#(`9mwx6Juk;(M6whYoxyz&up7;upbRb?9iK;jbl
zO)kFqe6svc6#^XiO_7!BW{+LtxRLTm#?l^sC#J&Ft#Bfkjgdx!7!IUM85a^nFQ75P
z>jy&+HVA+=Ll?rL`b=!vw2Ko%l;)g>TZ&NwW(|a6W81)&Bs7#tXJTBvl)*IvB6m?#
z>^(YP62s?Q^29T3V(Nf^ql@+>=>>S?Q_C()pSu+daDurWisS8BA5>wiQ@BrFiy^c}
z=6G!^#6X!5CeV3l5A^b*6sUaZu?0^bxtJQ)`j|ah-9Fk+2<N^ELbXJ?{3RadJ~H4X
z=PazJ1+h=cb=2n;?BR~ZQbH^RP=>R=i3a0i!&(J74lrV{Pvn?6i<MRIE7(Rc6?&g?
zYfiWR^sf}`F+^iu%b#lSKkNYvqh||nj)3WQI@=uRDQj*-X6wyIXLfz9+jv2$7W>Tt
zW@`jsm7{7AfbzWvJMmj`MtE4Dy0j)Y9gun&Fud0tGCa`27Z}EF+r$<>6-%JWx4+7B
zFXCse1Z@4}u_wZ;d3UbcS-D0yJ?ms7Y2iTGxq}SFzl(N<5W+<mS!L|oqcMI58t<Zh
z-ofvf%|J<c-149}q;G9%2Y+8ZSbf;n<*tCGyZ#iXm*35HqhCiIxv%TqFQvXwW0pAP
z@ANVBGo*Ty;!?W%FvCJD&$Oy5egtTCX}#X9Ak^YL-NP;p)p$sgX8C8$#A#QpM#+(V
zZFWd=KrYIB&Wp$}-aHe~y^F6B=>7mv$xSio`fAOt*C(%&XJsvd`@CA9C$VW&oL>?N
z40MWkEPXa8%VIbqx(ghM76e6HWYVQy<~ms0JH5;R=%tm}FioLJGIe=cvi2G<>o*I5
z^uI0Xe{syHMIS3ud{cMr_uu;^j>5Tu;#{y@KA%DPd)d23kCh)krN>jNNUYW-cJ&zF
z*46d?d~E+p2Kjn!PKxLKjAgNSM$bhV2cGE8gG{9Zbw97v-(W7vB(AZ#lVZ%(PJdHf
z9$trs*%ognKErFtc0AS+aObJGe!K~5$_LJLR`soVMI`E+kl~Mg&<$tAUIl0&AIx5(
zD{I?=2R-HMPjtEFmgJvm>|k|JUt}lf(3Dsk5$dy7X16-F{@vX?IB>;pU1t*6+otW#
zn2#9Ox~dCuKKbl)@7VwMlfSbAn*Sdh002AF|KxW4&$y+sioBBOf8zB1bKc|RWbgDp
zwE#x2H=Q=ypL6vCCGoLtIpUf(-8$=5nOkJYt579{l`y;LaiT(KR!|0zN^GAmy=MXY
zvnkf)+ODOG5c)fI1HaOu*P8sa9~r)f%U;ySn(TgjKCJiNnO7mjzHJ@mrUKAIDdIHk
zMOUc3=Rg?erk=l(y?oDnR8T?Z_U!dif&sX&!3c8T@IzDO1zX^fW$?X@M4L7i%w$t&
zqDi{U@iDGUiwpu{_nn%giW-h$<o4!7Ok~mwH6^Jh)QZ;rmTTqhY`d_%j^>#*@{?$$
zs4<$K5}jtIoR69J`!@9kw31L`ViPDUKK6F?`$bKj7WZjhDU#gJQhJ^(F&ZX$yfH|X
zrrrv7|I`S{PeFjWH{|Ond}UjDoZmH$e)>d&EDE>Np1i-Dk!9#Eh7}V6Z1lefMTn3M
zl&lyQ%HK8*yjB7TPv0f9RZ@>(cN})`=gHDe={rxXS4|SNa8C>dH9KVoTb7-t?dS8D
z?N=RvUKV@$53dx0qz;=bHlmuvFcc4vV?uYS#WkcEKJ`lhQh@|ylK|^j&oVLi3s9>~
z3vjIC3j<gW81ny(GDjVh7<T!7z&Ubugt-}|)#>4J*Kt2-nup2g4VW7y1?C67P*eTw
zJ~L4z<?s;$-c<rpx}PV|a_znP5hct_IeR(|))~g~hiCH~t0^_fI`z@5CpAk2S-?+0
z4vEn&n?`^eh+~XF+QBMQYdxMB22A%7yM?-W%IVW5Y-D{SpVT8Okgo-#MqUYz-Ub$k
z$MKEb3jTo3K{KS)43EFGoPg5Jzq^?bH`^9y5fOz)$**~g1o#I0*y}-jS*F2Y<c+`#
zq;Ikf8yjFU)Y7=N$KP7!idd5+f5HG<hXWbKWTF6E2FO_(KC@UKxf&%#5GhDX`zNl^
zB+F3VQc|vd5?>_FQwFp_kU&e%2-ce2*_7(Nfb4|kAq6_aR<|QpcXHW1!iiWFljx|S
zAYH=-4<EWPX6ghKXp(i7lLE-S8)u{rHC-wyLf69{J>WF-iG-)!8fU15upyIb>Z2Xf
z0h-wSZ8yL*V&`Jym`yVb;3oT5<vKBpj5XvW%@|;W5r7wb8LF*<!)09LcIDbj;*A0i
zb%`ZV?mz`XOPPJ5NkUZsZOdLqu}Ix~+b<Lq0a=uQbEdDVv~;hcR^c{P00Kq$&4R*1
zie$tLDION@BVIJlA0ZD6eEN4IoJ3O#^R!XqpwI%KGQe$*`oa-Z#2isT2yD$5scC|<
zvSkuj!}n(jQR5xPo#J8b4X1Go-8b1{O-SbqveYp~6;OX1l?E24kK(U)HH~Sn=pcTe
zWk9eOJ;89J&R=;Gu<bJ0(WK(D)W4}*sxHFF*dnG)R)<uCo%AARH4}epvJlb=*a!}I
z$$+AmRiKj?5<mno2&yBbAu&S-a~Qk!fzfc<dB8V&Epm&QqbT-76boihRV*Y*hNWDL
zT29n%1!kdtMRLtekzyDMMrf)cnrI2XRuRS!b1EWj;mH(h#nQ%k@@l6BHiTD96nq&z
zkYRN?r&4WI*k-MD4Lck<=?y9kb?m<$fXkBYGO{uYq%0X7%Z}8@Nz5vZbe1|}`t8au
zGkG*Px2ml}rA*WI16L<NBO6eCjQ-Mmu$ttWR0J*O;X-XvP_h9nJ7^WHe_X07e`4vh
zP}5D<X+VRAxr$X)6-~ARw!>d@px_u<$zyOTJ-7^~k+JKjk*l4dYS>SxQ9Gz3*rbva
z%FGa0qBgu|??}MJHsX)Bk&NqFc2qH=9&s0_?uPUC#FZXoH?d|jJOa|7Lcx925LYtW
zj}N)W0!|GWTj|Mv|4>15ariO3_WSJv<BtEB)l5mG|3bC}N2Z_>*jvgSZtC_k!16_S
zBK$)zVsiv1D&CMRLWIe0QDKD@?5!|~L@a`3o!%hOADSD_eR{VL4l$hp`6?3n0A<q~
z^gNE)>gtdOg6Y0Lt%Sw9X_1WZRIz!4!}L#4fl%TuoUl|@tam-15Adj=-h+joAQY}z
z)PQhArn)|9ppy3@aN!4Lm4FCmcnL$%aRh#Pn#cMVPV>Q89wZmYskR{!YGyDVfyHLT
z*Z*|m#pb=I{cdI0kv!BC1Pjb0l-fgrZR-}?WC^FuPlCOYIuqGS;O`6iieM8nHiMp?
zd{5Etc;f}se<SlLsYkm=A~bIW$$}rIg;lThjeM51Scct;Yfe3Xj5u`6kg59#TX%gQ
z;=*i`Ud<qh-NUl$n!f`5Qig&dw$&C2X0N{5N6u&B!u1%;9f6h*F{W<*8@!rmL*Rgz
z4Df&XlT&#fKta#x0j!a<v!ue#1=_&0eg|yg+t}0JksGgDE{-xw-+$IXfnQMG>Q!c=
z_nI$|B+G&kl@`^no&=J04hhxTBrYH<{kiYPF;d)x^U@19R78RoQy!~DpKDEHTsJlg
zB2X<^DtEC4>>lJ$%v3S8NI3uEX0WKObSakFXLa`??U2s(xdFcGPwOb<32tF+`)0Qw
zfQ`KQ7(DVd`SJ=SCwjz^a!f>SZKWJqbwU3Rf>-(U#r4VL%M+jXUn%<nv-aD-71!H^
zPpD9J(WJu=dr`l{)-?Q#K?O})3N{Gb35ccm^-87ID@E0}cDUzkvtf(+?A8y`*N~%m
z;HgX<B@>r=Cr>huZYJb{ooZUR(#r+;@D^9_agEg?`<Ftl>G_tC)Is2ajeOPZq72kO
zqxf>~$lLWED+KTuUDmin%jY!Jq%_yxSRh<l0ur?YkQ&6E!=GN`iaM6<-bOVzvgSnI
z%&li@*`SxQ$xJH+S&%Q;A)LL-(yEkcD&cYoS6(vxrOe2=GFkt~Q~NmX-d<?3IA30!
zx=OLwySgNyG~T$v>uTjz8<*8-L5}BGDqPEdR`{h<$fuRpYJp&?rTayu3gAjqn)nRN
zz_GIY`LJs$luHVR_4B1XUG%FFFL)Q_3n*bnlB#*-<CA1Qa%{_D>`PY)f)XYjvwzlQ
z`KQox%sjoBzLFlNZ7{=l@|3dR#9lOU_r=`gDGhIxy9|uvghK6!O*Uc?{|t-hJjks4
zp>MF+zlOuWSwUn`ycs8{kJ1_ERb%@@I4hfTZvHmafy+6IDn%SVxH+C}7Z-(KzwqWP
za)?KpX-bi7p+Yas^&*HrH3T%ME$OHRJ%htf)A~M`JIB*xZz72D&raphI7(sY#DSpH
z6XHdz1$_h5^a0#dD6KK$<7V*jvn|k|Ro)tiq9D+%rHsw+Uf?iz<GByK>+)+G^O}JE
zjlXhteWd1>S&RMJ4O;l8UBrZ}#t+w9-`4*LR4MerSf*u*B&n1B5WUj@RC6qn&c?ln
z3Qh=S*)>Oyn5}`C0SS7ReMZ+?Ah6oi+3=2aFPoYoN;xTAt*L6FznTsLWa{D@&l&mZ
z0EJQZu1Z#TyPOy_*U-oMChBlI2}t*H)KMVi1s0<r+@D1WrrL=Xs#~v!nskP}HI8wI
zJ22>5x(O6V4I2DrmEB2XvTg}m$@|FCt0uU~+&-npRp8}{+qB+xEjY$f{)I|VnUWAt
zC^bPf`}nptDD9t8=T*@Mpln3yvz56=s!+`;=a4(a(P)RZ$BQ{Q79Et8MrRHoH!7Ty
zCQW-sqw=lF2XS0UC8(bSdVo_PMlF{kTe~w3YpQUCK3e%RaHFY2&WfR9))xeCCiC-X
zv!$|*0`*E2;KtRGjQ*aBuLCHP%ht{4lETfuD$no&HDW-k2&vB5n80gdugZ``cVFP_
z=Su`ZQyJw30CRBV9~&mT?Vi*jof63w-rwe_MEh5tL(R0rYo&pt8gt}o$Z2SQbWj~G
z>?VLmk~23rVXQB04RiO>{v4;1hE)XmlT5jHN4M0F_e9<uA{Z|P!iigEO(S?foir28
z=RhS5ZsiNh<l&|Dm}{9=22a*Zp;MQXnv1<o)x9B!Q=KJ|eo(v@na(Rw75G+cu#1~P
zcYD3*1KQ*Jbm(9uW6|EmJnUkTssdYC!+}|wEV|@JewRDa4CLY)hC%peOvj-g?x)1U
zpL-jlPm@)u8v??F8tHC&Ul|dpDx$~I!E#m4)oSi|12=+eOh^GoeoY<M%77po;@f!S
zdGHo{n#T4g-Lb%Ko_|)mdC!OfnAs*vz4M{@cE?;rJNMVP2(+xGSrrXo(0msC3k(<2
zOskZ-p}iKm#p_Ftx)zrI`unn9vr>DvCTZ9Ea(mjNlQb?{$04(ic^<nZFCUVEBEX0T
zOc?|sjim45)|ZzS`|fO|rIK{oje~k$^(+$TZ|yFMlQvk`Zz0{r(>H5i@>{bnDGOgV
zztw2%2y_IhQaNaEMfHldp$;*G;%x+>&;LXrY9K|*tQUCmejK0n<y{zPi=+DD_HGIN
z@x@1zrs2l=WGLi0ly6;K)F?xHh6W2njQ=p7)H_nP@~aX%UlO?#Cwe~q(-ge3mZYZ^
zvNxRFz4SP>A~Du~QG(>dC7f1JmXRSB!QA4`BY-+-trW#O=2H|=E|~lczBIk2arrbq
zL;6gMfH1#PialHLC~!w9sm$xB+m=_Oq8Zi6nh9=;^?=mdaM3SPbnmJBXykKpC=A%r
z<UonHX|I@#PVrHRdt^HPXuv)xEl_+Sn2f2Wgpy$P*9xTg#FqG{?HK_K0y7zB=?F9c
zYjr7|Gha^b^|=yu)gX$#@4la)0Hkc!E{CBjF=Ai2=h&tPc!4#NjGP|n`2nf?#IVg4
z{by##(FXwOfK8eo0Mm+w#>+BnzS?p91$#v#tMIk|v-Eokv3oI$4T5biL@lxAP$ZSt
z<gH-{pte*jUav6;Y*9;1Lz`upGp=uvRj+~xvyLN`jy8Gmrm(hF^}&_WKCjp#Zs;nK
zy?I)@<wd(jKaMW0HW%Ds40vvZg{30=X6ycxzSlHXq?h)L_I9qkywC6L{b^DEPFBrU
z>`_Qz)lT^mJhT{Arrkq;37x9pAaOj01aX+&sX$}b3JaoA%jow0kh|x8dmhr*y{Kr_
z5M!sGU1dd^l+x5LFa1N4YE2_T{`~^8D6EiBVOsORAR}+!So@G21hNPMMJJ9DvZMkE
z0F}JLQz0s@-4Jq6E8UcCj?d4>%ZqFNhjU*9<rRN9Gd?Rm*|kGbGEGrc>*xP~sQgEm
z)c7-ei1@cNz46<brv7hJ(SpiyjQT2?3Znn9SNXqQ*#8B2qE`LaJ0XV9b6bzmf<EDJ
zR3YFkfeY9)MMi}(k$MEc2TJWkX(#QZd9&~ft><Q*Dy7hbbE<$3YtQk0Jn??(Wr{?&
zWhPB#q$$fMA}qTcd7C;pC;VtqzQKx%e;GM!|G`05{b{76#{7v@`eCVxQT<t-fc9|q
z0ghela05?dGrjuVP8qZP*P_8!V{T2jC$2l{nM~2nno3nWV_!l$R%{b=>vFy~93U7&
z(Zk%HG^7v8gPohR!E_d_!<@jaGM+73pJ%#5(dk(gm~(d_TmO;$I&X=N5mw#POuJ)i
zso!&P#J6OF>>EUVO=rM)Fz@Y0%9K9O1L{q?$NlXkrC}X$Vn6@k$LhT{od!+Fme~Z=
znGihf+zhVyVyCUn-e_$FI@_-%NGPq#+TlWl3AlrvE@B)afSj{LT7(N>$8z#Fpt46@
zLWR_a%m&$<K#{kmm><7*#P<oV1=v=wv{J}!j*1`PL(G^46?8pdN(Gu*mxpostR?_V
zxB_)SuuEdiT7LgVO-@dPHu}Jye(W3xL~?PPRyVhR5c2zE6`4tQvreO+adNi~#w@dn
zTX1g-3D+CIdc3M=V0>pgZB%wV-?CPPC=1F&>J@@m?A$r*@U}Rjw-)YOR=Oo#n37*4
zu_%f4fmdwAi^P6^<p-kI8=4EX;u*jL(k1A7bv(gTO1bx4eHjb}YRTJHKG;EzSU6#}
zvWSQoh5%BAuZdg)m#Recez{a2ne0qW_r|M`&uneG)(s<66DotJv5C#r>A}u`R+wa1
zvhGP~X{n-y$#jq^Mm)r~j1iqvjF6*&7a^#ip(4w*s7U2v3y*d1z>$xi@mss>Fi~=e
zI&3}CBNPYAM6T*_3lQY2F<DR72-h=7rHOeG7Tw5Kv`>NBj9B}x_+4vc`fID$jcK+8
zGQ%8(H4m|!%JxNd+gE}Fc|6vgSpe$hXzRvZi!zGF0OTsNtB0vePSTWY%SqjFb*2pk
z3LD8%ET?>e?zW-Zgpi_S>6+7QHLiVc4gFH?-&mn^-KDODi#xGF?D2As<41HbqvAN#
z_{v6VS>LC(%(rbP&iFEDs+y!{o7jnY6eK||lP|O9h;Ipbfneb|1<~lv?oZ;*U4Y;Z
zvOssC!4~>173={f725zLnw?SO9?cmv{Er9T+%cHrkWr^<*TPEW&lb#rMbhnKkkMp9
zm$C(ueyTr&X1=zDR!>JE1Cov@Cu%>kRHu)i=5YyoM|S9NV6}ZhhaF)z2Excx?aq&k
zTDXzX&?2_ljB=}mX&pY}HZ;k#E}a2^`q^u!PGb|{#x|!+cV)2jF6Tmc92>UY`*hJ0
zdoN|zYbtF$i4v%36Xv8yvCPe7#R9`|d+sb!zNw<ApLN2%thYQ@mLTBaG9_Qge9>7<
zg_&rz9!<$ubYFG<+{uumouyy6=0YhQ0rEDH#4_2#JPl(DnHf5zl%13q+QM*-N4lt5
z-WIi@$~_AkR*gieo2bJCFu~iSnv=*dk%XCQO2Or0I>kcu(048yEgwR}g0~(@v>wP<
zbA_u^^WH87IPIC!s7s=ot;eVJ44D{ApOOr=R-E7|oVDN@w#V8v99c7Ql_<x{tLo;V
zgImyrG@-I;Irxv+?6V8=bqs&$_=JD><~I9eW!88y)*)8J#;YbJY3T!KZ((LEm`T&p
z)M2H%S5DG8RFCMwtJfQa>x*U%tpM}OAH^@0cAMi}aRWa4YTRW5rRZ!dA{E>8krt3U
zS|~wzjb8+~2{_s8-$TOKU0c#kS9iU*vR-~PeD!R|{=z;cg92ouo`Tz@rd#NR`P!PV
zc2_q5qnMqFUa`5nPKB2*Uk#1LBD}VXtazn!zMWscowC2(qH8@HM&kc+a&Yjh9?|QL
z8EkdTtZe8PdBRb38yW^->-<JL$cJ^t-V!5NFE+z336H)}Vb1Qt)$YRgA@(L%bZ>`h
zvA{{xY^xZtmsd4ZTd*I%vaKca8@z3hW44T1AePFeSN#3&<Y+cB2PGcYeOold|K@2f
zE<vPPV5zSSSQM7u9}j=AIoCDa+S$E){;T+Rf}82(et5gp;ugcCe$-tt9E<$_y@!f<
z<Qz_Z8GF&c2&Di19{Laa(f_~G`(NBcJ!-b`2W$x6H~Ng7QnWQ1dp9MYf14y4V%sD*
z1xU1A`3aLT4pthKH#M{TcN=jH_S?6scwI|TIhY@(qw~$jbxWOuZlJ^-Um5a!;vgc`
zs-NT5Sr@g=@!E|?*6{UnKv}`dA2V9_l61lJ_;^IYr%)qY<!F1NkZF#r4R&Du6tJZ^
zLGA!#PGTx#1~cPn%l*zzO_`)20&m-=MPlWMRT(W~FboX(Fp4YF!fr{X1SvX#o29tt
zqE5H->)vys{HD%Teg+<wb9yJ_%1Rm&P*sLzX40T@=+e>ba_(z`zL5t<T6TjxyHNf0
z>j$48aK2}^fP}j@)&Azbi~Ii2pVuiqXdm+=yq;2Y=+C5`+c5Se*p@?Qt!qgGw;A+T
zpyd#rKvUYZQuWNEVa@w73`l&}XyS$xX;$WGMibQ9eI%f5^|z&E9!m*{k=kJRK@8-0
zk5rg;SV+*)qSMI{BYjJQmJZG-dx@ypM*0fTEj`djkq=-*?K*2$Y#7bv*ki}74qi{u
z&>y+wNg4dxB~Tp17$#1?A(UFZx7m1K!yQ5!8WekoLz*Lfb}qpNArvybo}bIZ`l@O(
z1TlOr3Iy2_pfP3@!X1e2EO}T-m1Hl1B_d@GyU93Drp9ht?CI2Vq@r6^2i<*6zkp(H
z8ODYi8luZf{EM9fj)yJunA7E#fD4OJy@4R^oxlh8>Ec0f=`_T0g{wc_sIQ=@W*s{{
zi0j9U+tJ?$KNuX1{i@&t^y%DA#$d~p#XoxgX7xufcvaiZw*JNU4zed_<FSvTmw{eE
zC{_{EUFi;lbK9Um<!p2$MshPY-n%x}IAjwxP6&)5<dWRSJLt{t;ym#?tuEPxHJd*M
z5Y*ar#(@aAL`@ZP=hqna@s&}+pkE?^KQnlZ^QZ!)4yPvtK2_EPc)aA}VI`pe>(*|$
z;RLTe;3B*lZOS5_<Z)fFZ4fJeP-$P#Kk8_Xprw5*lHi#HQsbr;WY02^>%8SwP2sCE
zv%f0&g|UC@>czH<x0g<MXWQk<08W={Fc!$ILBEcygCxojnG7l@S(vY^2wzuSE#9l}
zh<M`H=%Y1*=O+o-p{`o|Ue|DE$bqxthtc~3Qa1_OE4N2tP`P|d)67umXl=0=9*NN4
z1PG?aA@pzBsfPXpv)6CW!aDPC{2CerQRc5B{BCR9ZKrPlxvH=vw#|l+ZBEoyk(-jS
zziCaA9YiM8{Y&NaT4Xw{So9v6*XM%Be2<j`H+MYB+|9jI@eogJ6|2zk7A%zNEywY=
zk)u{<YwEir!`kiZzZcu8Urqyp5tuFhzrnOY%V)Zwf3N=^ni^%UarfXaQCuAl0D$p-
zE@{n8?M$5vT}<`ujP32r{-?rrS##ZKQw+^_Ox=YPzEL*@CICdjibmDYa&1~7MXUse
z8#5i6D2oUQ$)G{Qtk-Y$+KwjWXi25&#89t9jNV;ej(zUM(+I;H8<89>+dF-Wp?hTO
z!-t+paX9rYr}n{y*I+DJKkQ1JbL2@S%iKoSoEj^Iwr6DQefim_jREGxH><YIm1r&7
zhrX$4t2b_Hnrl7BSaw0rulwX`nYmkkPhPWenT&3&x`_&mraepiDpkklJ-(0Q+w|?}
z3VbZ57vB#q4S%gVm1h?M`$5!!xl3=h?j)>nD?-Tyi`5EB%{D|yC%`|+?3G5pIU|s5
zR4l8J!}vQ}t;AWYQe9Oy0(t0eckePsu!2fXFg2nwxn>eoG;mR=**Ogzquyc(hv7`1
zmpt)+cBXFeQ%jqFX2r8n`7k_|0wg+_WLX<EdBH>CkG31R24L)Z=eRpLE_a6-?#nsV
zjvahKFR~MKi*inkYbR=yn+{u1De2U$1V`f8c8S0FaUNhyxNPSJ&k3;Q1ycAe+yXmH
zVJnhoYF#6ocXU1KAgC5bEwdcf&Vqo}2kKjp3MCa&>5rM8w<F;B3eA*v7(<-xN=7gU
zhb8bnZT=&6{6PS18hi7*Hk$6Xj+ZnhDoq$&g9Va$<BNunn1l#vR4xlJ%Q>goC(kU>
zd5=BUbqJy>s=0Pq8D$%nl9*PW(D+w0MMkWkRwVBDPp2?Wow6bf-$2#D>LUGp8(MyX
zhPnIwg?kcK3c*2s(fEW}S2qEt8+S<U+8D|Tq;*7!LC^LHyi|M!4rxqrWetAdW)2bG
zfY^j8Wnl=t<S!}`kprLL=@`rsVw&yhPB$U>RU1{v9Vq7ag0)e+ef1Q4pcO1r!K2ue
zEYg*N+H9%WIJ{!pj6(V{>^dM6B}(^hB=U<)G}k`HlUguf<F=Q91-_mLHqG3zrPR#F
z*y!u*+}ru`DHuB?fs3o82*A0boBIO<M%0l)snzPrV(<xv7E#^JF`hxe?%6{+(CF&v
zJmsn)zB3Y(pU+Sas~b`4j^KZkk`Nrf&<4(W0{#9&AoZ?~SUAtMlV;V2#IJl<J&LR8
zXP1C^xGZ&5t${6YNvk};&`u>k=|<HfF&CJ}x#Fx|d}Zb-8g&i5v`}-Qm@||9McbDs
zWUz%qPuXeWdj0Yh$_QO3Sv^RBo}D7uEVV^UuA#-+3YfimUj=D%WTo50)RPVvvlY}1
z0n)^rOWTl5L`Bv|7J)}&3D+7$cOXQvSdTFM<t0brk}U1j`S5;Cnu?4k<$B&+ZoerP
z$7VHD#zfUcA%}b>Wr|EXdq%Tl>~{P!99(MR!U~<=TD>u7Mwm};J}=|7&k0Xej9Gz*
zO@cjjfJ+jEiS(`Kr;uazEQg{*kSf9}X_r3W<W^Y(e`qdR$a^mLq!ofBn%OZG!;<{H
z92v#&<Kc-JcDtjiM~Bw;w5*=`Y4idOuYF=KDIb%MyjNS*cAii4o*m?)oKkHtkzVCX
z;SMqv-mz8wIsGnq8cNreX@{K(<AS*p5hb2vmFSXx8<j0}>;5IYNC>-bGf$){$@3&X
z<yHIk%5rb+%e%DNTxD?XUp8JaFGLBVhTaTHQ>Fabr)Jf5Q(sE*4QPZAQ_M0{G)xcc
z+kvU*7fy;$#cX7<RjLpsqHYlUVa5M&+Wh)u7Pzsg8GEAA`j~U#@9&8zYl2%oAXHTs
z<LkNob$ji{uRZ+*y)%t*9i!7TdbMy_`+9n`y3l$=`TJ4x0lN1H-;0@x+v{N*iWS-`
z=Xu&QI74)mM9mX$?DkQn=m_jYY3$p~1w+=QfqZ^m98LC@z^&6JV>z6MkM^bi#|Muh
z_rCB)8A}YSAR)s*-=13YbW_4Eo@&xX;!mO2o!%}P3Ta>^RWxrxwc)4YmNaib2`Jp6
z-vuVrp(W8$*nCRBJQC)WEv}M)_%&PBZ@&;j4c&n4a!@zy6&Eu-Zah13?YbJ+dda#T
z7;7xAB|&khehLf)ON`s(-V0XI6$_DW>E_z>J`ne`6cA+gE&MWCGXM)PdzS9GJ?i$>
z(N6#)mlx&UPoAa$*fUgH+l@X3FO5%Z<T8bU;$0N03S2-t#DYa3MJD}-`l-6+VrY5{
zqaIP|`2v0w0!@IylFMMpB{U5tQL@wiOdhDBopg9dbb_(!CV)ASFsf=ffKG-ic%B0Y
z*Ts|P>FxPqL0HR{;;VE#Z_*vNeSp)tdcOazPLkcT5tAV$<h38G1%B0%gwN`g6+QqW
zXq3{I9IgZ#34lThjpFT10e@Tf#U>&ijJ*6~P+F6SKB2bJP-ie#elRF*JSw`&J~V>o
zrk;P-V^!Aab#$AjsvW1=dWd;8Nwk|Ts(Uu+#clC+Jj5f*1`~rNZ6CY2ZdDO*UHQfj
zadQYV8jt=b7Oto+J9a&*OZvT{dLBI|5TjBA`KvjK7nbu-ar`)wqgMm(kLGermLK(D
zg=KhE;DOk-izThrfY+KjYIYl&HTuOQNu=?tg}sTDH@xjL9YRy55tr;nv6be!X0*gJ
zLw&Wc?z3E?Y2lHWkEx_rzFO0Hi|xPAs)dlcbG{0V8thffNmqJPKwl^2vT8H;DT#$t
z3T@{g$__Nc;6W<HP$$;Z{LzUXDC<HBuL#dxfy@D2lRvvqVt)mwBB%JQ9S6_30qvXe
zAC0mNoL6kEsgZSU64{9ggJtb<vx56Xf#r(d^=2%R9x^&#Wglul<Elg?g*BLfa4jj{
z?f$Mw^2#IFqW&x2P!CR<{0%xr*gX0GYWs$6HL_$SwRu(=J(NO4w$lFs^a=4|$f7O9
zA>rHT-CdH?E%~9JrNzJpC2+jTOw4UjIcP`l^IhvlFY0^d<loX_b6+mUf|NTOFD<bb
z_nf2vQ_Y=I1bY~Uff#v3d(k7atas2_{In1ul@w;`qo1II?(@%D#B=}DHjUmcg`j>H
zfLF=5%Oq&oDtE@-Dq5X&Ai=e7MB6mB3lu51Z7*LSzJk`>9;oDB?n!A9J1X@0YaAQ(
zeD6c*723z1uh~n8TMg`CqFcIptYbXYu%7B!K43l!X7$v|g9+Q0rS~!W&hxT5cD_C@
zzivmwmlqe}g3!HQIUvc7m2tcAjAh6C8$V4$7cHCHCd`j1PmHDa=W-D*_Q$5d33b~G
zE3=FXGaCn9eg3jw$y-zA!+THeZ=8;_hUcYb;LLy9Y8(Cj3r)WN7Z&#>zNo)>kdg$6
zH&O=riAIL3N0OZh_a@ZMB))k3aKPl~(cmm=U_5^#nZl*0kUh6u&LW8HMV8jiI}SIN
zCjwKJh8bpS-@_uFJkYW;@BF>jJbuU^$Pyn*-1w%G?$21DvAozm2hN8Yis+WpKgRWe
zMj?roTS*ky@|UIXeVo-C5#+fx;LV&6WOp9dt435V;+yb9d%2+m@mYt9_Y)HgFXgGU
zut#BYm?-}z3NW}Qx8ezw7@|$b+I@>@;i;_lo$=!|V<+zeaW)nbt2AcZcR!9_K`?GG
zQ5#5cgv`6E{d2@1GGWdon6megXdtSSy~zjhn5zs!MyK7Gn86ur594>&q9j5bPk!=x
zS>QQrVG)tlYw&1xjEwWyr?UAOhu+bUjTwd}F|&j07*<%>?SN53J8v6j+ugnk51zbW
zO1!W4k&J{A<`-|3@M8W0q9}$DeE@E8C9Jz#SR!aE@zg63v`CNzS7w~p;rJskx0AqP
z>;8M=IZTf@W`5e-R?*8d?j%d`QQ4Mh^v4Z5O1?E`tQEu5O2@n!$Yk5?dQnugRO%kw
zG>_!a2b{<`r&iuMUl%^L5f$1i=YvP{qP$|$Gdo2ac{b1kq+*hhn?r<CcWEq&J*8U_
zis={TVi?+iOmVxQf3Q|kksDKCfO4&%C&{7WHD}%BlNsc9);FRv)l|mmdKJg`n5~0&
z*Y14rcP5W`4bSt_E~S^$+{tqr9Vs{nR)MM-C7#r<{0}{<^kE`)Z+A~-^Xtw?EePq{
z7tX5^)#p)qTROlX1lO{~Q|LlMUs6T&^CN#0rO*1ehVUy*zoWqMGE}>co+M;f^~A|U
zi#MQ!zZcMOkH?U`9f8ub<}W47$8+ajS@T|wCwesXkcXLe7j=8*w+FNLr=2B+U@t$)
z`M)xwHp>nEjS9O5tM#YJOQP~=V?ABl2cWYBVd9=bVA3wZSL$AgeR=?R=1!1B*y4mX
zOA4E1ByYjw-SgPp9v;IhW4&fwpM=}f{@Jjr%O>|rZ=@tCpaPaz06P;aWJFnEWddZ%
zPYInCehgm}fVa_8=$&4^BUeBrUl0O%F4U{m$|_&akB{e}p`pm{`xg@W8~tkL`c^#h
zY^y)1X!^^k_y336;6M8RSP7|R@xMJ6RP6t0GhJRtO5e`Xgvs8>>VJA9rD|^4VRIt=
zDwq&<!c&2@drcZOJWK$4EzDXRNQRuyvdM!l%4p2AO3EhMYJC3X9hA~1<%}E=p4%mk
zbmmlXjp)?N&aOQxMSTUy+x5m^D5u{Xo3V9xWbS->yS(}g-rY(QK38k!Ie7V{-h7dw
z%Y~@dK1ehF>~y1WT@{*F54qE{4|{t!-qv|ix;)xw&#hbG4j(OduB+jT0NoST(Uv+e
z@u4f7S<T3CVh%LQnZ>Egp-$Sq7cFEei*0V4t^b*La%9V69Q`SCQB&zS0&Y&**f^lM
zYWsJL!2c&_kiV7Ymh!rt?>qD!CJ1*ft;hxq<>Rz(^Td7hyz;nCZ|yJVT0%h!9Y_6Y
zn)cZXP*-2STYS{O8Qneg%T+Ak86EF^Qj6!j5$UG*7{v2nr)Mh!^}T=v*FLxna@Sx`
z3$DmFX(X<8V5Kk}D)^t-i40zRfLMIdQrEaK<1zU#hizEl*B%JN#*1*D$bn~0_q&$&
zS1`HMwhPs%?$By3Vg8-zo8!(D%%$mio+osl500#9GkALT_`~$B^YpQ7bH2UPTl7=(
z)2GwGdv=X^xh6bcj#0Zx=hh143qO`FZ!CVk_;TdYy!40D%<<LIiIP@a+FI)BY1Pse
zpJtWyq-Z6k0coWTscR71W3vHWBz*R`Tk+)6`})Iq<XhRX*Rd_z)uuT=R??13Su0Xk
zu~H)+dr69V8`3DF&4@7a)RPqzQ?f?zV*!o2>QoxlQI$AUt3ngVJ>ipU1Eya54Zc(5
z6c~?q`bI5_pdgx7igx5jp`@~Jkv}ML^NsaNQ%T+MpCvD5C{}t=PE)C%C8~iNWG-@j
z6bn5eZq~s3m+EoMwdq7VAyi+09IWZk$BqJw=o^V@ChQY--Ms0c>jF<+x)sx1iJrvQ
z3o4*-#Ai+(AaH>{k~`THRKxpEOW6(w@~@-HNgua^O(zPY8?E>4+vr|nJ0)u8+;EDN
zxvNM?`-;3rvkY%{1Oy3>vk!y)ur9sm68Z)FC2#UalmfCn6Gq;HLMgp`JTMc@2-H(Z
zyE192cb0h1vZ$}^+o=oMHAQ3d<a(<;5e=eGt{@-R{V?)E2G*wFpfS-?T2Sybe1BTW
zN(moI7a*v_?fgpIs&*t<FMZdRXE1M$x`@#iF8kp=6=vZ)!781ls<j07ifYxDSc3FX
zz#rg=f_i8}eYTVhYSHJ_`txJI7`}=zUe`SY1t5I;$F6gR&%~53fp^cMxC#L_I$$!v
zSrfH?0egvWTP6%K0y%2qu|32JMJ!N)t43PW5bT;{t9<F&0fjGZ#%I?Brt=8(MC%v6
z3fG*Cx70^*#*TYsDzgJdROElb#rkVf7kbS^<b|%T0j}-G6Pl@wbv;UF8IK-olM9DM
z6#<MRnF5e4s`;1HLWw;rB~dX($Sn?Ig7b__saRM**6T#YrhaNvB#-A;M)m`+g-bHD
zT9OCUM-X@esz4dhtMH%X@2hJ>s#)F&w<xIB{dl;f;lUP4v$X6@X2cY2hF4a8soeBJ
zRYDB4^bBe4hdqjRn8v#KR;9%jUkRm=Zv=IMYZ|qnu8i;@2=#^P>*gb)ZvdfnLMOTI
zIa5f0cE^7Lrk~S_gh0t~(ICJlt@FIQ$7LUQOn;Pao`|UcEVhR%C^qlwEyr#`kkYK2
z{+KC#Y=3x(0bO)oJ!1QFr52`9@}Q0tSnkkbC7!d0eKhxnB#}ul0$^xN=ZF-69-i(d
zzr*fYep=dg&rbm3PeDLppvrcs{E01}3yj@@Q%fZ+x(Ev?7NzuU8SN|stbkx^!Zz)O
zL;n~3?HSGsi1!pCT<yAHaY?KRWpH-u@Cv3N5(8zEA<dD}+lI}Ve!B$e+qKrlARwA>
zrkuB^n6}Udo5km^H@G2!IR4O07CszWL^}_(Ad(F`1#18cPa}yp3zPNyJ}dygAjvt-
zsj9_E3T1jZ88+ied;XZ2a%Gs%PF@>kwAsqsGdCs-pDn7Y#27#ZGONLInd$n$GkC=o
z8&*XIw6vXeAnT^J0g2ANCD>vmGIZl%FLb1+Va<eUp*8)1N|;k2M>n~3%A1h#RYSA6
zpXjZU&`nEeRSL*Lz;#be1(G<(h+2i7389Ntl>k`dh!OfOa&^?DQ46gv9GT^5Ubt5i
zlb7JC;>`QX3`&77IuWg&2ky0iA9vV1A#J_+onPEFq1gPf|5Iz{XM0V=_SkHTo{yQ`
zf`Hu)37?T`&)fMD5PeS6aM?Z)&Mi!jcJ%%Q>!Z>=*a`*#hf7M^^Dr9)XA)?PTrYd7
zWPZ1Q=-!R+(Hewf7YIngA9Q;Jh4@mq6*gbeF#1!_l;w|)V-z6zm8&0`hdxRFayXC-
zZ-A<X_7IRz&=`QR%G9}Q(8md^IYAsUsCAn$+`zko<+YxafZeBBoTWJOU~(bw+HgO{
z(O#(Ad=oQI8Wj2P2Lm}Lr>qxPm+P+-0an$_bXBB%#%hq0YhGb~9~MK-F;xda7GhGq
z>jcAx&(Gh6h|0fjpgm{|1f%3><y#wp>BWOu6hhX24MZY6)ImpYw7^vsv90(LwK;*t
zuK~cy_4eV5z%-h4!o-g#BZ<0#y<i;(YAbI6b30%}6dnW`fxL#{&UgPLBw0{4^DCh(
z%dV!Iq_;y8*lsq$RFzMFmmx4rB*_q<pj6;aM#IV?9yyojc0uGVjlVE^&<wnzJ!b$Y
z*vMOl6_{GgggPvF785<H*^!W{^xF)U+K=hbSfKmaWsRKmvFqdESLkoO3um2=h^NFz
zqgr{idIOvJ8E)NOzT}$MYcHQ^9mnb5khf82t=E}!QfS@jd0&)pWBU2_D3iu(R>hg;
zzwur`I}x^Q%A3bRvTi>lJ6yH#bG4<Kf#U0qU{lqQ1H0M(X~>`}IH;fht6>#S_mTc@
z?w>zS?j5m;B?ukgy#m);`%RAcHx~4un-1!+7k(>iJlBZ<FecMgRWm1Q;>tTZ3E}AD
z%cXtuwq=Zy;p13X7BeSEa^W@-9Y6>*5Y#-{KX>%5BJ%ouBMRA;LU|Ijd6K~}rI~c<
z7>#HE2_b9>fX89JEylgZ2?ed~7{y@);qCZz+D9+8p<!s5p$d+_j&t<9=SO}XBJ*Mj
z2NQwbtI2u^qd|0r?;9GT>X3zN$fl9n!Yj#aKV0^ejX>EVh~?H`wpFX7k^|Z|nWrn}
zRH$`PO&l(xu9SNjHL1Gt#i#Z1$lv+d;q}Gqv$P7rQ?D1Ii+gVNR%-*)@$vOZSQq%+
zsO3juG|cx{$Mm`%CC+ZQS{Zki>2`p^?6?mrnCE>MV#I!r4B1Qw+w+UavDEZ_kcwMg
z%eRN?k5A{?IA<4#hQw~?9zkX0hclG!i(~fkhr53MVnK#NG|QI@_fwCLQ;SoN(f(d5
znQnY(qvYGN$Ne#t69zPXMX+i7g?8!oJDczj^<{3-X`%PDk`#mT-QxK12ZO{c{NFPw
zKBR5Er7C_t<?BHhH9qCkC`|!n2SSj!6J{B4OhqBn>h=AHU%vs2#`GtK-l28|sVkD5
z<&!8NzIq`dVriVO9+%(o%<L>%wk-d5z1(g}y}99>W=nCOOLdUNv#T2C3;+L)m;6V?
zTP<Di$LrSt;PPAb{`dM@AxU|CXMMB(O_caAhK#9dw)O`c2;X`7j2C`^RiSS38}QyO
zNG{ImBv7b-d#YWOjyd4&Ya59-DaZbOWIO6fP^w#!k|51ZGt>K-k+FwL7N3!!)AWSB
zzY)e2O}N}2=ruh74JO}RKbAe#jKJmZBQaHilngpjL)+6pYWFWc`rNl?)fGYTNzSNd
zLSbYIS)490B$_4c7DZrR`vCYxtiDFuJM4t~^=4(d{)ysJ`jq3~^$B@ABEnG?d74vf
zT;A+n<vs<Z#KC1c>j_jCjZBwmgsohW^odq?pE^JE>de58TD%NK?QPizoExbm>Q{T)
zDgo9wT>$*XxT2wkG9<Q^$_48ZV$8?va=k@R7?Y;OX-_)s$LTaaN-aE|m7@3hCx|L1
zE>Pdfa0Uz%`nm^`3swE1WX}}`23SndBaAJ16E&zouOu<qmeMMN9nV*;DFEFHRHe#*
zoG0h%s#ED)hH`-6d&J8%>na{rB5W!=G!2#5wob@WdfKywhBsv!a4KUzTzD5cFom2Z
z;&Q^%j3<K@qNv<w0$*CZMNWJi@-|;A-8ZQJ)8>XM_n8vK9jS{!-ZSh%Mx5NC4YO$D
zKZ=Rvy6suGgc$2#SxdmDmS^pbt3XAmdPfm{DF@eUbh=5yH8QGDIi0NNBrPc`rs;(}
zzNlw~LdQDp5!_|zkl3h`BbLUc5il+Akwwq&8w#U4%cV3gg7+$OQ*l2oq`NY4W?i-o
z5+Ad@Rhpg=(XKJh;j?y0kI3nfQf5Pa>+6*Soh@HtZK<6JLhTg~kMrG4*!R+!lCx5H
zod)L>U=}iN!m33!eS@F0w^mYYRb9m8u2exyCh(22m}(IVQqzEB({Y7sR?I%8|5qio
zoH!+0sg&Z;MUF_AA|p7!HfVV5=dEvVb7z23$1)&-^D)2_FeK6VTs|}ckmrE6bZden
ziF0}OFC$ZSKwFA2y2A#Vv~ApXShUI>^Uo;mjU#4#ewy<eUmowg@Anr9U!36e+D_}}
z>KM%r1gd}fs>s8MoD*6F9w`vLl$DKE*-_s$i1(O9(~xlM7{gr|=CKS1gv>UQTPT=e
zZDZoTAz4Yd(y)IVKAt&aV&^(_`GX(o%KV+cM&9;e3FBROBNgxGMvcH0eGA+@yd4*I
zkGR3cQ;xjiQhnM#A4hiW8Y8U+Lv4+mNKN=-bo>6F1@l;_SO=xEt9ezNA&<7f`rxcE
zmi`1kbXM9So|4xJLps^-I3eL<vBHbaIH5Ho+|Y)O&IhWSI55Pb4Gr8@+1CcxAG`av
z?woJGzPKW8<*VAQBRoERU0q$j-p+3z79%tcPPJ-G9<9eedw8RyPIH}rF^!h#CVK{v
zn(M0$h0GK8(h&6gF`)v{V1lYdXY>1-wH_<@06f`9UB>uWh+Pa1!$AT7_weYU<u|8b
zU6M>QptI2V>Wc+~6^I;2(<FJJi9?LJ6?j;HmTW!Ir`7G4ByizmLZu6yI1Hw1lH*Lj
z=AMq%&`&O$8@DdOe}?P~Zp<|{VXk<=TlT6LQ{7MV{{Q>W_8+VqzsVX2x!)a%aqwT2
z)PFnp{LkRre=Jcrn>tw<+Q_-u8kzo&skvCy-S`bL1i#%rqm*6&7uE!d)D0w(I1NZ7
zM)K_F$>i2G>+ah1R<~8~uh-mrc(1+UN$kA$Uy+o(dDvX39Oh>Zbe<eRhW{((=jGzt
zs|US~O=w~_MAeX7MtHR6SK9VY|9X9Z!e6kzz>y4cW=#8X0>MDb{hibEY#RKcQxS}B
zqE#goN`T6`P^PwwT!vuu`Gxj)pvfMXHedCA5VyNDE&^&E{#f4=1oM-f+=8pNFj!~R
z8kJddde*u@;n)XY!G*f=`d=1^bop#kt`6c$0|+q=sfuVie#Ee6S5kk*&Mm>VfYh%X
zKe!%YYM51nSb*X>WSk`0gK_~J55Ox$r0NM$UB+o^C3x2i>d^I6f>_rPi6S$+(8LTO
zOY8jGeBu{x=jOqJp3TI%GZ8TqQ~Q|*6^<e4q2jkO5wDcmU>|}D@NOar<svC?CB{62
z`Wh-;V5RLC(iR+3^+Yba#n!4EbOC$7u@?}&Ylh{Ddtq%(25^{D%z<8t8!IQ1+-j{x
zFl)l38P;^vMJGR^3{%`Qlm71VgadwM)aU&>`_56=bU(IzDnReXgmuG={Xr~Ob_T+{
zwhmp;)+WbUO^cZ-GCWILel_fkT8XJGI|s)^zTZ1^cnR3`!&o_nHf}kOaXk@jw~E@$
z-Gr*!`UNW0bEJA-MvY92WL(m6<3U!c=Aio6dw(}={3D*_ZLW3mj~*U@D!-VNBxg9W
z#DYGa&a`qRUlo5FAlq7z=_I=#9w%3&k{d>(>3c#f9hevZtK*Tvsqd9cTn)p=w?5IP
z)KmC-g|o<#{O>_!H*MYw*UsOlZU+M<4n4GQ@A6TX&|w;LmcxK7X>&oY=3YR2ezJ={
zQ@m5dQp;WvJUo*9e)K1H(db_bY`T7*Er#}96K2O8t`CO1Up2fc`jZI@B<$nl@rH(u
zEDae+O{jvw20D)|M<UaJXMwHob@t&BBT6hZn2FCS&@L=*KyBS#|6D;!@v#Zr*!HXm
zAsxEpJ}yT}=n>TbHMOoD^B){q;9T7vXPkj<K5Q6&#2Pa#T68~z_rDu8budb$NbD*%
zRN+YrxhHV?EbetJ{xM=>hx67yz`V9E#bjnnFZ;(g0pw7ozmS7((Et1B9_I<9p8Ou$
zI3xf7ivRZL{=YgROLM#b)rI>nKv$s}*7k>ONdIQ_1zYg#klJU9d$!xyt@|Cfbd7O0
z8@fdwCkjY6%&4QQBt|a3KfJ@>HD|rt0|62%_8m^9Gr|A0Enynl|4}me<Fnw8#l-f>
zAhAOeyMgiro~NdyF#%e>e7ozQm9}2o5QMG0Tv<!KekGqrzNpD0g>krBO*C^U^Wd#J
zIhgU)`Nhp@-?@p$*NObLd|wdF|Kt5g-B&cGqSiJP?mwN@3_oP<r}|9`kDEvH5ez?d
zek*sEq@S2_eiuHUqHoGjHl%9!&V`Qc{N6X3H)hC`5pNbf@3P=_dBD_e+D^fwC&{6h
zQUAGi4F5Xcji(;AUVHRZv_eH1QsegdrngQD(?#ATnZPah8#qqs99L=FH!an(fF|j@
z+TVFU5D^`4wM?ZGnH5c|yt61d_S)u~`Rj;isM^lleP7d<p<m-Va!lSx?F`bufgsYf
zF(EU*AKV+sy;!R-Vw&Cvss|yv(3=DZ&IDs&>Z5y}EBv*e7vi;c=Wt8#GyP`J__@Zr
zVBLukgzcLV6z}q&b=t9mOeUA2e+C7v)sy(9MJS^HB`jqKgLyC$8{VX(Vnn`=9Opp<
zo_tw8znD<okrc{$*OOA|>K#N~2?jzS1>J+5SRK>lYf@SxlODe^jeo@1jPc!Z#tA(k
z|4>Ui3u)#}A-OXt|I#@PXdVw8Qcy#(mOl}*FM|Cyw6)l^*oO%h<}|tlU6p-B?T3*Z
zWV4#*G_(ywf`L!ypu?BM`gBUmt+f$>L>FbhlLk<&xP0awOxI`r*=+MTn%1Tyfk48Q
zYKZV>5<_-_8s|Ah+h8Y18CXc-c@l^;ryB^9V$FwK)X?vcyo3}$Kc!CA&wwz5+cIWt
zoK0Ij3B$$YlG^3X{A@`Sj+Q2D&oScS!S8Kt7~u0oJJrsxCXhL8<ylUXx;X&o+p35}
z^D?DDMk~>-ajC!{2#H7t_YE84f<nk-zg&-#sd0}_C+EzH{NZbFKXxFBrtClou;sT1
zb#s`0)JN$A*x<C>gq)%eF--j`S4#!YX#tgnQ5p^h%e1DWbV5uEpD*F}w-caramEtK
zlv~Vl8X4F}&c{X|oula9*?q3urqiI~^C^W=#0~PDMl`68DOb5fk@u>~bA|M`jriyQ
z!Y!5??Hz}j4Y#7R0-8#sztq;QL`8#nJP^r|(0#3OBlI4;DKk<CQvMTxcOE4$ms%+G
zD>t%>Ja>Tol7rX?q!^JprZ`wKKNwKa(dyXMr#bn52>Zt7(AsUw*tTtB$F^<Twv!#(
zwr$(CZEMHgQRnThK7IREopZmfAMmVMW6U{lwL}lV95}qmOy<P^)K>fWiu~TFq~k}p
zu0zUYgn$s4<oX1WZkkniI$Vf)%K%MFk+*lL*O|r~Z|5A$+a|<ogkQ|0=@7cR^BFLv
z#f!h?@;b|hn|rtH|Gp@r?eqn?N;w8Be^{2}J(Yx5scpKW@P|VUuiI>fbyb&0cifQo
z4_~&Sh@vmj?*)Q2tHnu%0OSsT2+xsTCMTOa{^_D5RE4)7$uuu2F~f=YL#COn3myfO
zC-CRz1Jkp}56;cN@m3@J=g;w{eO3IU@w+7H8WRyny+Fw{@|B(>@GC8YJUrhUY9hcW
z97M2NM|wD266FhXz_jR7!^C%A?;+L#&dXW!!mrmRC8!HxkTnnK_8J=vB_Y#%^_G#G
zIUb1QCYcd^4B_%DiQl0Bg?R)Nc=pepN9Of=)FiK>AMLT|QY<QFmy`ajyPQ*ujzNwF
zuaQW%K04^-l}4_SOj#D^gX*fnaF0#;&DMu&yi4((g}QMMphzg`X5mi^OH1v=7$o^?
z!-<A3#DUsa^pt&$=gNB8hO#}AACr#7k4Rz?^@E(5u(<&g)u9F)-pAywEv5&)aEkex
z{er*BU18L5wy_+Q3f*LS%iCqSx}OrqX}3nL*M$t#FgEh4$r>1|XrbF<pS@PX`(V+z
zcKgEe^C6b<V+jC3<O4*1tr(?4g}c)zj;4Is=XTxfK4+al$%M})_C($je;H}A<$n*Q
zcRM*!67;jbuu-0`Q)%yu4#@Gw#1mX>hA$p30-<6VA=Y<d7HLkI!4b?}iZ>qOnn9))
z?}9B2fTI%xEyDT}u_+rMlx;05d<Ih_Hjl~&3z9&q`N(1P8HPXn7MqQ(HIhjySf2w4
zYT=B0xb+|@S3tDvk&Il_ild7YzFT?r&>)-!6$`*f#l%o5#TZRA#;F{!c`5NiHoTkW
zN3uj2priw)wp+TheYm~Dy^t<&L&-)5lv%I0P^>N55Pixoky7^(Cjp0CFfC)J%7#bB
zKSll$^ZSUeSR03B-O(&|Tx^6uPgiTCV;svbEz5NL1u~Ut>s(3US;O2uJbU7}Y7+AB
zhU8XXjNJZucW<uAgmeGJp3cPD<3}6Zg#m5}?A6RWr`h=MNueQqI?I?iQ^a3t5!7?i
z$#Lhs;If7uaNKDo&HmjY2H?HO&m1XjkHXGE<_eY?qqm8|jU{b1`!L`60zCrO!L4lB
z*!*#Qa&jHonYo#ZJK}Iywct0O-4u%`xA?jxW|FoDHh7xmSb>iIT`y^3pnWqVxEh1y
z_#Lh{ci<*)%T>hgx5BcU?}3~y51cMl-z?Y}m#e7JVHJI;6LEI#TV|gT7?bDkz9+%|
zlQys3Cc+_eIIqtx5prj0;;bWp8p1g1Tp<8~D*E^Cb7f=U!_}vI_oj27Ew84Ab=7y)
z<+iZ1xiiaG(mit}<@3Lt^Qf)cQeJ;3z^|X2bh`hDBmR+5oBR`&@lUm(g{|4Y(8Rx4
zax|;z{3xkWe#*+*HhTDnjn}GOn=?R3QWjW|f)Ufpe`!{WlC_iAB6Bt4V*I^)*<fVw
zwq8!<6{xvMo#l8T8`Lz3f`vX>*Gh}^%VlEKq03dUD$b2w7Chl$Z{?m`QH@wGFOAh<
zW9m-eCuWn(!Rdo7OFkA9oLAP~iIW;pBW1b)LB$$$;%-Xio<@I>$YKEFgGf)231N_D
zku;jnf(nm7#4QG0y*>1p%ofFpmzv5`R>tt^w_C32%*C)y8mrNM&@1rNAL4tp&KH)z
zEUQTv>8bFAoAIDid*(g?>i9--23?~z@Ivs*Axkvz{zjlbNmX|1h$|GHrp4MbtKuh+
zF{+-=Yr5`7^J-BPaUKH3dHOvGbCFP*B&@!dG8ME&0o5zd;_Q#wk(iLtdVBo|-m=kN
zP@{LRb)ysPKO6XVXf0|{j@HyHNbY<#Y0QswFr{uQ0)^5lid)~_AkL^fgm!dZ*DNT3
zPMXZz5xI@gBf4u}GKY&$m-c1y8%Kvnj7iDryI1A|5-V`EX`z@dsyJ(&wC<{Y(0Q<V
zZvp7IE1<{DtrAqA|4gqq3OJU8^*-ofsepCPVj2Gyyg^0KaaOE%a?7NuWYZJvlN3nX
zDlV-ff1xw%Q;=QPs?kk9{DxazSUK-E-Lt)P>rYxF=x$zZy{buh%S?}I$H8-q=s;=D
zyW`U6YA5|Kw2X_uqhv4cI;0#e#!w_ZOkx4tf^Mv~pxC(ZtRR&==vf9-RC)o{WvJ%M
zPZxiMSfs2Z43C<_ehFMA%OD4)a3i3HVK5+ivbIgzhDpk+j;cRigKNd{_0hJVPaWMm
z0!dRme^+F&3dxm-J*?|UCe;4~i+6j%zU#*3v=cm8V1W_!rA|;v4<Pp9b*2%_64Ijd
z25nRBhh>C}y(#st_vuuS>22<eJNsTFpoRa0g2Dnx$oTV_WhvrDVv1u|TSz5wL9~C{
z);UNFl4;7~<E1*i8gYANk*T>UKxbxVXexj%)nJ4sa_qYG>WPX~gJb&P!Gt2PiZf7x
z|J0*>@P*sjlx&9>{4S#<OMd*&A^a1zgIH|L8GJ{h!A^I!)xR5<l7a(Fx$}x!0~byf
z`Ce-BacKu1C8ONENJMXb_hXC5bo*?@?}L2~*eRA^3iPV}B3bTls|PI(*Oy+R)A{XB
zTJ75{(0XJ_RP09ov^xf~iT#H;=?c*~>rTerdodayN7-qOrU-xK+Ekzx-CLr*MV6+#
z;v%8NID$l8>vf7yY-|q%gBO>*eU%IC*9r6V!MJmd^h*bG#e5PKa!i8Cp&Q`-6s^FI
z{V}t1bMwj-J6JAU{QRROx*hf<4C)7ueZnq|G}!(BJOu#?*zq?s0KgmJ|I|GxCodwa
zq$I6pV_<D<XY{Y>@^83Gvxb(^7AKPLYOQ=dJZ5Rg_^|;#t8v9|Qm-;n{vW-WN5QWa
z)2iW?u7)Y&pA5iel3g>naa~2_zJ`wFmoLpP?TeuL*>aR|a9^LlPXYCrn~|6A@0Fw4
z#_2KmD*1oBo7hjMA12S%$L0q%#Mk3T(@{)2#_2n&1DgwguHLp^HbXO?k8WR?ysb4t
zPWS7RStN8^yY95-1WQw<MzI^(wxZF5XA#Oj{F`GdJ-2NJ2E}@Js`oi$gWt-aHY*mw
z7I|cgJfx2*cDPeql3lwzFFXFgFmLeaT-)Gr=+|A?prx=baH3sygjFwyEQfP>42s%q
z)dLF{rr8lNz<F1IX>Cm$b{vg<R8BRoJCGOV5xaY-VpqQG*4o+L(BEJl`YDQJEr%bG
zcO;3ZnA{jPQdjF1Np%J9zvaZ`@K_}ayUX>yZSKct6zd)p9*bm)9pcj0UPG*8zp2EN
zK!lz@`vyF=9Iy;ajZTA4(uCZzb`31_*bL|RT#chr4CEH3<-AQxn4Eg^+Z@DT^%lsz
zb0l@@?K3d7PIl(`5>;W0acyxyZ1XF&yt||j1V!*QIHMo?ci80uzbp7>6nbVlAUGRz
z(NQ&18Z+ICs9~2}k2%-x+wlY<YN+u7t%vdK)S3(u*`JBI)h<ni6xAoLTryIWb~E60
z*j6(w86M=63yKmSNWgtS-4Vink!0%n-*nc?orP_{V4`gM3r(oaU@yuc{Yee>>#T+O
zmZtd*Fwup6=x)JkNJII?Je=m6b$Wib!3zdh8@2BV?GqNr6V1pa1ljH=%)E~EhQqm#
z@dEi)Y5x|g*NgY8U8`}JISZzH^yJxC{-xMTxEk)P!E<H@Ou+!5qEhAJY~T9K^2009
zHKkua4di_}hsym_`OY*E7`QsS1e&cnhw<VV-W@$${E4LwkP!Oy=&xsQ=<M+6>}miF
z{Xz1GXUXLSRk%?_67pGVT(?RRa<hM-z1<y-Cgkqu(!B~%QI7}5TN6WD@b@0Jhei7;
z`HQN@=w5|ULz@opOWt~TleFXEr{Y9jzg^sC<Y-VvjTI-CIMy06904VJQ%^gP<(h<S
z3(TrQxYjzY3*hIN>z<t$!`^Y0IQ3M}rt+b5)vt`af%;7n?a)3G{nZ#kbWT>vrypL@
z#eHnZXrUfNZbx%5ZJ(HwK53}4Jq^&&Y_K(BNN9<xuc89XA#k(YR2I;Eq|(sTl}wCi
z5G=b@$D&s5rxH$-j$v+Q5>}<u;`&+^PSp5?$!#7E!_BXT$bqErMj`>|I>U93sIj(l
z(WOtkhR%UY)qwmbRLuN|D7sPFs4F=LnnZnb1Epf^@d$6_)11Kar<jnVyoOo0?8t=_
zxkbigKjs$WH!;AhECd~$M})0Hf4Y5}%4~v?VFtH5h=KHW5n-TPTrtXDEfXbj_5(}{
zeo27^$j5MXd9Z6$eX7QDUHUt539&zLl?0S^iwT#_mAUT1c3Pg0AorsP%w68!U?*Q8
zbvgGAUPg`unlH4lJ|I~dDgMEE$fQ6HxQ<HL_3=rtE9Pf5V;QKsSSA)M^st7=AsLIV
zNnj+x<@F5{Bu*MT>8SbX{fa4L`KYy)57L*$LQe-uCZtCGz+HuVd*ow7=0bTIE};{~
z{d$Q=`+Yj9f}I?VG7xcmT<s9QysndM*ai5cgrJDt_#BA&{jcdcJ@ijhGwNaoBnXsR
zyQJNc0|Gq~zj#`~08nK{&J=LKrTHW|-)c2^pxyCk{a->R<iWF=y>y?RMpw_s_QIyy
z0NN5ejTw;`m0-u=Ml6`Sg`HUO!b7m)bK<zmmMjz%rsAdcmT|uL%w*;-B3SPTD;Cbo
zlKGjaW{XA3waTT}eLb$DVG);Ip#mBcBOJx#^A3Fy>4uh9(Yy4EMN382UV*M8kl`?`
z&N<hqLq7E|Q0sB-u|nlZbp1LzfUxSiGXk-0kk&yRY$i8g6|pnv*4k&r)Tu3669&91
zV<DBp(w2z2W3?}EIg||R1SBNU{xt1jO(Uea2HV_%UP&*7+^0Fyw*3;#%nA1*Mw4uH
zPv`+wEsk2&9B+|N0PM1U=&4@sgFKQjJK`ACD`L>saynWcPd91~8jpy}XgWqtuA5Q5
z$xiaHaD!E&`MW4C)MD2XS*A=dNee1sR<h^w2L*D;pV=#)(+r_LJnaykM_}9~_}ayL
zK#YQh+EKUwdfmOgJj!`ap&6Bw<8CY)695n!C}2Y4Y&oU7RFB#2feE?363^od4fBx(
zp&MsI?K()K;z=nOfSbMDd7Hb5_;~URY#BLu*7{<r*bzCSY8!81qH=$si!}slO?(>k
zJ=+{UhCtq<)G8tn!MslmLMa0701PN%8}H<|m~egJaATr3$LP1|x#6Eb#@)`8dySPg
zkkw;^ZwM&EBg3;or`hpqKaRnZDx#wE+qV!y1~d~2Iqwkr<lx`C$RSAG6)Ha%19~iM
z4%9?L@HX(Q`~d-_l=F_H*lMD$El8rA&CF}g<ai+xvx<)xeLlr0ZS!mkSc%9cZ+3=K
z_U?`hQtXg?)mct)+$EcXEq@3N4Xvbc(8AVK{ZDsc5z!t~00U*KcoBIh2^4x_S|3`L
zUcp$}&?!1881bq&JN*cOIMPzGlx;<nGC#L2)E6=Bv*CHVwl&)Jr`Z_nu0A)po_i9t
z{0K8G#2R9qs4CdCb+z;{Io)csBZ0Yju{bcCeo}c$Y;5UR*|~&r9<)anV_q>fajXzd
z>r6nki@p~wQ9)xG@be-t(1;L<k)}?|xG2LAysrPz<?!n0!!F&-_m{g<w=+0N#b3Yd
z+hgb${oYdk2yvA2buSs6^1`m$w#)!1UGm>#lryLrNG8cNB!22-s%5_+<o7QQC6S0L
z(x9I~^TRl$A=&VUiY8S_=hdO3Y?EVcE!TK8An-U-2{&;Xgp|sRhRU>YUO54<r&`J*
z78%n1<ZclsDO-tTb=0h(Q#fbOaeLNB^t1Xxg|7^??PW^W>I0UQQqozZsyOW3Q#wPb
z1vr<N0bTW4hq-6o18bDEw4URW=$EeWNTw#>?PEln7iU%hh>@v5APQ%B+vP<Djs@!d
zLf2<dONu$mmX6uLAW;6pSr1EW2ai9uJhVP;DS>A1hCnfX+|W*crk`uq`~lp-;{^GK
z3EPL&`_&zvEd6$%x+92>ECH><9=EeZsF+*ZX-kLOyR-A;o4xz5tAn3@OK$An^B#Je
zvxd*gCG*+Qyx$=3t*U5CLApQ1+~L!q+@dvS8spf3pR1~zFl@STfN@^{3|MnwdiY+d
zo|yE~7Gzz|`E&iL1885dd^$0;EF0sMcfa?#3G;y8@_)<ipSR&Y-zm=O721w#hAQ}%
z8Fg$Bp4^;!ME}IAMa&9|>ZFHTQ@g5gp~wN0jOk|>hlVyJnRCzY;4KeUy>s)vxR_Ud
ztW7g$^HJ-l@#1BA3QXtYV;@3sV(GmHUzjOhCp`Q;@lRM_LpNcxOkFtoWlUa^2(kpT
z5yiiUMa-6cRr9p9tX>;ZcV$(!fU8d;lS>iPO^jnq7Q!AWpGjvZA%8MN%o+en(Opx)
z!3{Xcie91>l>u^Z4IVasy<(|^y^HQF(VOz|G2~~$Gn3t%vWI7104~EQI?|3jx;w*<
zw16dL$o8UZF*1$F5FEB<vqaX+O-Nw1H#gkCa{o4c_0l=n`}zFaeg1gH?&I}qFn7CZ
zlfu#Jk<Wkr)xt)}rUH~NnCIHuZumyNYPzu!U5zRQ6t>l6pI<jt=tS=hlNK*HS`2aN
z9gaO0+OI!+%@mGzVOhy3TVOT4CK+12C({!+w$J}}i0*uL>E*|9Oz`}WLq`X<7{BhX
zL&;(*VAVd6x~Yoin!HGUSC<4$Emc2{7u(Klx&iXrVAf2xoD-cnqxcPO;<E>i5c)6J
z{~zV=V1cy%MC=1h{A?2bvl;vUBydWI{o}}H_@6+2bfQe`1_MIK%@=Cn6(|BWZ-web
zib#RAFmW*?5zYi;x;sG)5?2Gc_s2UYVF5~Y#mP~WS&rLD^QWd||C&{Zb`(Lz=Pl;@
zo5ib1CP?HJpv79~`z}z<z6{=+V%{^>bF!p_rHNgTG4k*vi8w|eykfBjDFRuCu!#*X
zJ6A%g%=V6g)E&C}ngni$E#sMn$JwBcJsRBs>Z2#=EW8icjrZ!222ym(o%dC3>$oSX
zaAb$*FCMqvo<ePBykFl+SNNQtnYeboOnRV`E(l`qJ+2-4aa2Dc^qN$HM*hF#L-t6T
z<9`zGK&cYE!ok{*?28+TXQ@HT_cn)ExS#Mw&I6ikOeP+%{t`^xW*JIEugJV_z(DPR
z30QP=jH9wlP^#4lQ8blxBGOye!tSM`o5VB+C?}B277u4=y8B%R-VD-68;%TwV@%p?
zOP(6Jc}k^?PEJ#)d+RZ?t{xAM35hb`!Hv!y?w>JN>BQD|@=72LES%}3bs+x)G>&*O
zOggDAgQBUL&*LbtAIq0qceG1Tk!CqKi;dN4&6Nkr*&HaX0<WDxLHSyc)zUCcWQBX3
zmsm|Zx|VK4Q@2YZ%3ix;IZm2GHp_U5ZIL>q>guLxEnC1+!kqXfz0QqP)kFzFT8xkB
zsPq!s*El+=ng|#BV8Y0jCa(72$z=}iX)>Fi-ZD|$TiCd2BEJ8(H<wK@O(yxXwQ|4!
z0HFPko2&o*=8ViujI8v`?VSE!6wSY(meuMyPFNghK0nmbLr)qCc{8!i6*;z&fef+}
zM0-zqL@wzJEl+0g!lFESymr^=NdTBNoVnRUT(H%-_on^y`6l@1bnQbZ;yD6-HLEl7
z<?Z#iR-z$pymed<d-F&O{z$RR`ZS#C*;h75;uZ3{F*uYvzF37h8G`yvam_gY{!MiI
z)t8|Q_hlsN&aaGnyh8b2N@r{<?avc&O)Hw3d#U5(i#2D-?uSYuIVW2RIkdvPTD$rL
z8QVo?mbxq-Q#u=_-?dyaHp{HZh4CyCBil5=kqV)SL@M@8uDR<BU!`V|1!eTQIeafX
z_H7jCEQRuLPRn$4Z}D?5C#65%^Sy=uV<p?RgV|DN_a!WN)Hdx=BTJu|N{%|{zIIZA
z8rVS9$qY!3rg&!@Df*vrmGB4e8a(5fa=5nHb}5+Mv{I>^&S*ZZnGo>!a^-cFRc6~4
zYa|Yw`jE|rfFWt#u_*c=La&mAOpwbGtCDOLDN0B2ZM($75I)N`&k93rnQv<3$<6fQ
ziw67Ou=<>Qc&*^DOzb&lXUB@CUpnBm1*;_UC`|ss7(!6#FFwuk;{o*J&g#?;!liVK
z*P;p&=`>Q@d4pS3PSkiFR5FSc<<gijnCJI>epcPZdr`d3uj}V_cA8mwwGNJC6)*^O
ziW(VVOi$-bDhg){f&jyC5i2{gGcGyRh4<1kf5sCUlETZUb{;HD4)^W-Q45-Q$%$|R
zsXF;(+q`L*k|{2;<YQ4tl%{X_(w+hNjtbS$(ybfLQ?iRzQAeIgJ-mlwRV!7facoFE
zJ%-deCKmK>Y=b?faVQB*vH?|ONXNSh)wq~45IWz3_6O!Gb!5uowU(q{ZbdF-F1bTq
z5B_}EI2jc!8o5*MSH!m$g9%u@DbBZ#saGf*v`-eSlWe{K;<d_opP6=O6LBiv>i&w`
zgTl;IlM*+%!vm$PO;N%CcPeWY0Wu*Yn^}#Z9fx^+(n-nCZI?6(XJ9H~%O%#GxD_^*
zNG1#@hbOE#ICi+L0gUXS(>H%yQ7751L%34b@}<#o@@+!y5=G{bFiDLc?tw0YbTFbe
znR;S*i;mDJ<Sij5RJ5l#v${7To<B~X|MPdj#pYD0^&xjW)c5_+cnjP6j~n^tvr8)<
zreAvxrmyV_*dev~^kaoT4(H|zHkK}UW(FKz4gKL(TY(!#7MAz<%UuHMMsdO(NXw;R
zpa3>a6|}ADMX{Z>_@)DjVD$3R_yCJS5SuQ9k@uk8Izj|L%93DBh&aFuI=?o{bP@D=
zRZ_yESTNlUyyWe^jT-~r3%N5uTT1~1#blNd_u?DQ$gv`jxvRq*{1`sqexv;ex38Wa
zSnk*dAz*lH!bHhmMnko;T)&)Lr7Sl7C1VOKDo1#E6u)>ve@4DKEp_VD;HPrnMSfn#
zM`)<C&LcmSjJ>MsU>WRX=H_dXFKhDp(rlDO=e+b+UFLdx79|*2Bes)02zto2wG6!O
z%}}<w;Qigm>9nnf)GS)S#fdj2m3E3%I6V;glsNH?WV&8J?|k9Za+<&(EVLrWhkIB)
zvS8bZY@IfI^yoMPGy&d1fBA(h*uTeQAzC}HM@Xa!@)V0N_QA{Of`NNG)A~4d2?;l5
zRQRvpaRB#%<S)SIVRD1Z$(j|?N&0B9;WSnFa>g(je?cI1iSU%^32U_!29MLJ!kNxL
z1Qab4^XHcV&NN^jY8bV0NObf#@tReP;*`^&RJu+|A=KcB7*U1hWs-F$muBoy=7QQU
zZ~6uvfkAP<70TScQ0_K9Yp>oN+<}JP-CCX8mbtxs=ROO${stcoj<4!|mn`CKNBKEk
zxA1gaHowzzeZNV4*Pz>X^vrR3?;|uUCYOu%47c@C@Wvby0VYH4p}tWQuV6tf6lxMU
zvH{a=yZde=vfD8h!U%YfftF>>Tt*h0g!v+cIw(}U0g1HH^}!hVD9Lf$M(OnRYx(~z
zrjrC!iGI1Z%o9^qWLQ=E&Z(dB_x=@@C=gEfIV4^_0-tUsZb@;rlAp$_CIl{Y5r<h%
zy}k=av-gGRmEQV7dUr%0PX2ILHRa3jIW+YYDFh*J=mO)#94ET@q2Y9=jOnjo%lap4
z4`mY4P~3HZQ*0C$I&Nl(pngZQ#<%3!BDNzR8*z13kJah%C9D9|29UA-h^)WfsC1<8
zOt8=DE@+7@y*w-~(=Db!D8+24a(VuHH1+guun`0+)|eObEMkUAYh6Bt0F9uyjBd7G
zfya<p568*osumm;2((w9#-|jp?T5C2H0KZWGp|ByUf1in-4MizlrR(_Ar$5%1=|cV
zBZ!UgEV5hTviQV&L>#T?u$c@rG!52iXfwW~StdFjX5F<aswhqeo(mfLY+oItrnpey
zel!uunP-v;UF7v?2y@ZFHHBT->Tq>#AuAmSs=2-VIp+=gtdGD$w)p@xn1T$H;{t*w
zebS!}xgjgO-cFtW{XKu}cOJtNw}LMrX+izCkgn%~FiIi-K2tHZxp`E&KMk`-DkQ$;
z>Wg%J!~z&^Qa<Sh;&U7I8oVbJE~(RLd;1=MtPGg)vHk2m#|eB*x<Qzp2(Y-RK5I!F
zo;#O;TFt`|OHh4Z05!!$j0Abz+&ReinRZ~3MoY-Q4=#ewX2@f`ryJm3>OROnD~&tf
ze;Y%zUeih-_kBhzp%T%4Y6`L|%Ok3MGsr`z`~Cou?1m<7P;4)}(tL+zP`swV@b_JU
z=d0Qu^+f4|cNmC^e7VChmkZ{ZA2U+tKJz)xYvJl(M|M~RjFt6}ErruhKvz44%{}W{
zhMFw|12UFhh7tjV($QOe3`a{Bx7ML`a`W>puKtU(+Rw>?9AnV3C5N9E43A^QxPKRT
zpVJ-0)6aEC;!f%)c2@uVZ5{C7p1slGTFK6v4QIP^glV(7d4LQt07x8KVBf5Iam52S
zW9IhRcj^80Jf<E_)qNIsMs9XS?shd;%llw@Q}Nx-Ct1f_lcZci)Vco_Q8^Xf_Tj8j
z_#~;3Di(%Za_ocJR~kNcpr3dn{o3W2HwRHZ-!@$g%h_97dCxynEn=^UuI{JSCXaVn
z$uj#^gvhWxap}gT?$hn?ugM%00%(mtBTyNMHGy;;#Mi*aK$q8NhCYLLtKGTd*T${~
z?uR+;A0{XMROOV<|5C^NkJ@lcS}O}46aawZ=N#~#Ny0ypB}OJaqn~y@XOsVlB)F*R
zIBl?_{J^!g#hxG-LjSAlKdzL_L2Wu@AQ;ka8RVjCKvq^HwIrc)dc7|b_-h&y$Sv2W
z?WfvrN+m`kyrco6K54PJKqD!!iFJHy!lL%%dteiMIA?o4egG@!+>Y&t%|@@>dNhL;
zV;EhjRFV(see!048ksw$yTqILj|qr5X!ZLY$%j-66P#g4wtJk1E3Wx(qIZF3g10Y@
zjovUh^9P;mE|}V1KJQQ0@NF?c4muF4hvSE)cW)88uD7(`<(bNGNl|Pl9ljI=bBWFa
zDBp108(Fz?TiHzWZ;he{gb?JF=Z-u&Q@aEn%arj=sd;}GUHOW3#0Y5HgaLSr!}nEx
zFUD!j2fh;;C}?fLyNN=fmX@~r>7@0`VvCNl&Ne7VV3fhPC&uR%M3h@bh_L50V!jEU
zzQ!CV3nf)Rs3f0%-h`qc>SPZKU=mxGsL(9;q>n2`gvBD1;Zj`PT70>%VlzsQp`J}i
zRJ%i|vd?v<kfZh~ZB_wks<_upI7Ck*RQT^Rr%0R#ikuuR>Nj<>E|7v-rf}7T&n#lJ
z1OP;05}ojrc|@#$M0Fs?C(;u=mCfH;EzuS08~1;9il2%nIMRruqxxMS$Q?pzKc5*S
zlJ;9#c@ngl2brzYtpG~eT}c?lL1D}cVCLH*=h!X_wW`P{=p@I8WN}JD5@I2sJqlr5
zRnt^x+A0CouibHrz~Pt}NT@%1<F+_N9KJ%}U+YujR*?mgnFe_|-Rjtjnqpw74DGD3
zKt#B1&0f&jLP%4#hweSRURrmj*94+=MmUm`JDx*=x#9cXyt2NE95D*^n&(^Y6=2F1
z%2h3qp@qyb4me1ZhQeI6FeP6HwY3FV9HlRFxshn%A!CvvOs-J_v4t^UcIZy{|4qM^
zA2i>Mko-$%M*KBhEZ{;+t8A5I=9pU8`8!-qUWN{Dv?<AzayQW@pT$N~D<Aw4L@Cje
zu~!gSI6f0&sFGOJd;?`ms1TLNXQay(IdVH^k1`8P#17U_K{7XI3w|NrCUtz{#5XL{
z4_UT1$}$^CNNUEzSG`@WDS)DVmxFe751S6}MTwkfDBaGaayTM@xb>)RQt2k(!T5k>
zaio98UR%~K1l!|Q;&wWM+a_FRD-RBajhy?7P(PC^<u<JaMv<=|C`hk9A(%s4%RD;D
zhSGa;V#&Oe5HpLOXi6&+=0=&Q{OA7?%8`sog>^j&Cpc8-ClRYojWA{TsaE$|?(O#W
z&QliS_CYB<A1u?}IL2Mu*ao~1OuGQPSb2dAS+h)4R-&ShI^c|m#N!@LdWPu>$-FXH
zPbQ1gg=(kPEt;Y2+GBle`@0v!D!PT#?jRR`0xNXw6q*{(02X;0U#EJ!s&QCy$CE>!
z(J+%>&h}X$9Z*X3$c?np<LrIZX#R~JNujX~?~CKhX|6Z{Ow9F%#byiG0HMzvjSeFd
z_RxO|WlryN0dtuwaroYY<@0_uqdt5_R`eP<RO-&wp1JMv8?5OC?R6b3gjpTy6JFPw
zVMeC_wx*B~t)2)Rnp$|K>y^xuN$|~xr~SUO4v~;HW-mgwhZ=U*#S>tbbCkY3QO_6x
z?4f8=f~3PeT3EDl-j3&}EFws+h}RLbFp59zyjrho%-K3L86S%GC+`dL#6aGU`)o_U
zOg&*v-j&2Ai`)%D^+4N{Z)XQDc2xImd1KMkPwRCn#pe;pO<WAbEvVwZ&fI^zE9bAj
zAWeT}?gA_T0Ly<Q$s(%qdh${t8hWlj3U5=7pJr4eyPwa0P2Yc`^2q+NvTTU|lb2V&
zDoKu19M{z0YYvGdAs;CT2w0sVXI{VReq&wR+zFT8`<0_X&kE^(Mi-Cd#q%(=$;|Af
zQ$_(%gWO+8&3f&J57NJP>df)U+NQ?~L3?<m7%9K+K<Q*bzZPHn2X~VPvwfzWwpqV8
z{w>2nHK|fL<PUzm3AYY4txdwR=;_PhxHE4SIG`8x0|PB_e@6vEJEMgdH_BB}s2o%4
zs5IB8=F{lrFug0@#%SX#c{3a;9gyo$=@cayVm-rtMz)m-5u)f9nv_;|F%e%4ZpGHx
zDTaGF;VlfnYp2xsw!SYHwk-PKI6DMdI6LkeX5=Jylj3pI4yhcVRZKDNj{2RskImVp
zOlw~+USx8JqDej-8B{)pL93i+!%Yw$(-b(4!(`yZmJGVbbu%U*%ddC@T44$!$aBd#
z!Mzgbc)UXols2)WvQelS4>Fp)O=}FHkcD01u*~b%QS&9@<*jqG4+T?`lZGkfKQjc{
zNv!J04pDn~%>t@4loWQ0sZO&CPD1Ssa#5hv{!5Uh`1ikfpoXLiCVmkKs?$-E6V|tc
zyV0*{lz(*UGug^hN||6l867ZfldhM(Sdg&5D4srglt?-QMX~R9r(v^gPNSsJfSrxh
zFJS%&;NmzG0VKPNFbXNh89k$2V?(1ONRc7Z4~JM<T2>gU1Z9cO0X?|Sg8{YZ)4b$R
zowv$W<@KNjqzi|*o<VJ(Vx}OqBo3=uKw{@bW++gq<ea6mZ|c)Lp`)0U;mZf|EG`YX
zwiXl!5#$O>)g13T&bWH_2cIEJ4zkmT+>qqHuM!8%oPI~SecZglX$m7^N-r1BBFyrY
zMzIht(!Kn<5wG(S6r-V8EYm=ZuNJTm5MvC1*(a*5>>_2dTrroRRlllki-3Tg`{Jt;
zaVXTMRS2O^Rk;CVMg>3btwIU&XUPZxhE16(r-7%mednbO6SAm-56E(61}qZ4k@0;U
z|C8XlCxzp2_zt6qAJNJ6_<k=PD{g|+37HAqs_hNH_n`?zmg<B_WS^1J(Q$U7PMTxf
zvq}=_^W~an3{gSOy@t;MI)kQ!2CBHcQdNum4(TbQ54`v9ZYi<#Rr;v`$*TE8p)&bJ
zcef*En%`CL_hq5ltFz^2&#efyF6~JmOGNYgK~GU~sGaZWRZEGUZ!R{0>os*in8Ox_
z*<q$!6t<FLCEIRR1$0q>ebIiosAfydPrF*O_jM>it5-#mRa`<x{Wu+@8&C+u+EZd#
zO8Z(9mWf+!n8qc1htZN0zAao67^*TxO2!G3fBcpN9TM23ZsR0+92~$HI!KG~b*ir?
zLLVq-L(zaPZRuxc=l<)Y-)L3nDpMqtJQ5=$xQM1%>8*D7bs0W$I&^P`tJhUBiE@g0
zvThyU3uXP`u*G1JzoAS?;GH+G=0b;}!Q|nbPX!eUF1LRfh?|a<LHC8p@WJ;!>5eJ*
z=Eh*&xCPQ58{=F)bgc3l+wnla%h;1d0t^@UvA6vyw|YOidwDx(FMGW3)Y<Y^@K9f1
zd_(goUd|eycg`$&vPQ2~66r=V1T;a@`lU3nJga6eG7JI=v`$OCgVvF@Z0Q@bL3%xO
z0sG1b+7dOx_4mn2_?z3)!cK<kU!|I#w1Sg=N$KF6;r|%v%!v0B%!{6ZyYXO*BNRq}
z>EXQ%cL<4B%2kPk+I8(^HnJMMRDf``*diU`A-1vLNmbe2VMGipJj0>7wjVXkvto?E
ztsA+6Yy^B=_Y>+`1N%Wch!^hDzH;h+O_eDEQzeX8wo`4><?$HBKMidRcwadGSQ0no
zc3KuLWs4W@9GZ|bi?4yu4{ZN?Ipk)9&p_&rA@SyC`}v=Tx{!>Lo`JD3<3H2f!rsEf
z)>+TU#PR=aK>y89FILt0DT+k#IjwCw(@h{y;SE8vNyW0qsa`%<3ps|F)P>P3pmk-U
zj7!43S-pu%;7jQ9S&z)uPDl+s&GL$?O`gGg*M!K?o6mbkU|#VOFXf)CEfF<tNDyqd
zAdBKEb=|+$-^Z`de+eSGvP{V$yJkz2r&hR-JW6sJ9p_Xst6?>CGx+-pBW8ibB+56Q
ziuzJ}4i=8WYBJK=qOc&4)bGZ9lUKn>#!QSM=hah=x^***?DTOpbaK`ittCgPx=Ncu
zKVf3N>j>KG@1`8R$I}k6+pDeQ3HWDY05<1fxKqQu9-~Xpjba&_)<?N(=+t0{EoWPX
zZzT9#+os%C%njMNkn~T6c9YfMCf~tM&`c9`P`Wi${L$6Kkp&9=(&wgT!_7exo2+P}
zF*`fe{dhV0;`MUTX6EhoT}6-Yo2=fmq8<(qIqm_PXd8NF`2Iu>iCZh%hJnYl6ZEic
ziquc9B)895)GpjPhkscxbp}umm$FtlnzfC)%6_1G`<!TpVK^;932?Y$Q;HKMjAU8Y
z8B!X!adKi!)>1^O_3)&oI*sSa{ND4)?;Fz_fpb53lwEu?GsQ4AofjMH{7a_NbOIhH
zZBM1?Xk8#|9Lnq?Qj;zkK-xJPWmDGVR1a87h`B)sfM`8jm(j$c&6_w>x{cBSd!$m>
z7*gB33fAP7fyPrP3k%)KDP&QmC|{FDDCtEUeHasd8)pg6U_L>rI-_!aD+Ed)GU`;7
zaA11E8@h?%tX0y45Mrq$SCH}Ony4UY#LpVoaI<T!xU59g-<Ia(^Y85QDU^W1eehKK
zT=8PR5UdX1Rx+32SjYM(>92gn4%-0MAbtV9{jrJqvwQk^fW`9SQ|{W3WZUSK4f-G?
zte^2rh*Xqm(*nQ4>F&gk>-*DP8|4)SOJHFGdyk?Ab#l`*;ErGB$$?B(V7xQ&nKrWc
z{z}<?>3*KaA+f5hv8fvB`7C5i*tXXH7}Wl|w<=J8=z<Dq<hN0_NppRUvt2tehLcQO
z6sk9<D4ZR8mfRgotybOsVLmGu^f8#?K`D0WuS2xQcV@d$o;Dz#N=fX~QGrYwAO<bK
zL~zBFO!{Bq*CkB3js~?gd@??z4}%-0m-5gJSCgywydjQ5K(ReHDLiSX&m%Wgs34c_
zV9EHxv2Eu~kwv2F`{6T~rbCjKp`GayIz?Az_Be8QqriU~H~k(PUlSjHN`*Z(+M33}
z$fIK0Btzw5yPHoG-oMJKt)k&2!DByt<vUPwSq^RpOC6-QeL0P*{E%Zu7lZ8=>mH6)
zm5eR;)EUsH?cb5CB*$QNS%YmVckCa3$@ci<?j3h*V6;=<=;-PCdiwczJjHu6*^rwW
zJKrj`{unWFE&|T#`SdMl7$B*oSqa8rzV3-(%B9`^wg|1$%!kwWSh4kRMTg}$M}us+
zzkBYhC;B2W66Y{07<i-H!?hE)PYm%IY~tB~;}grM4t`<g4Bny!thrr~ce}@pEUi@4
zz-k`XiG@Mu`V!=F#i_8Xt<$5UUp{eKew#%!X=wj4quX#34%SNPm(aLc`)}sOEKkap
zz@M9A{m&$1`j61og30&?+6pPL=^0ws{i9wsF|hd;uKhPhARlENyA6i_tzN#+%`4b9
zTHv&4LNZanrbS4ali(&iWDjrE7i(Ee^6R}s;9uV8<{0fc-E#8I?vyMJ+Ct4LF;bsF
z<0UjquvOzb9lvrVUs_S0KF71=Uv8<OZQ}ZEK5bpi0Rai`3zNR!WjQN7Zi-o*KtKq>
z3pqZ)dCZ`KnmUp+cmdDcs_PJ&DX8f#SNnn>Y#*HvD0|z{fy)nFva}$em6rUA?eoTL
z9^aQKHgK6UEaj&2?1>8<?Cd+*JqTni9nb{22HU`%?|1=9RH_aNA-F1K3W}6a0|eS{
z)7;=qp<(rfE?v|L-$)%@+_k2UWtJ%hpT3J*pP618yEVTdg)=)$>S3+9yz*y@XDk~d
zYwr^8?(S=i%Knoydw^Oq_mPa8&slp8hl*8g497KN9<93L>?e5?{T9RVygGY_<U2iJ
zW_A!L%`ys5>|b9ws*8CDmbl1Z=^qt=1l&_c)&t+j5Do!Z>WgFNWZSB3RqU1f{sIh9
zDh5mJxK4Bwq%TRt)x|SRx)?gadFxGgY&M1Z?Zro~>Nnp%BUkF_e0(PR$qPEp8Nr7C
z*N%cLyM)^%5ph3`Tmr(#?kIW&<-xo;JaDv>h0sX_w`mL-I&uE&a@zRU7tr;!Y%q1T
z@1b#DRZH-~NT7y>;2$WMp)LE*0i`J>6c{~Z%N3^Mj_w6yA&;$q9N^lHKs6tD{X)yN
zMPP9gKyd#xS1OTl|6V3tjTeZt4YlID1PAjVTFsM~LL+^YQd2WZyb|{=P6X{{=Hs*h
z{cCz;e9oydO=1-)2D<vnSmIK^Z`A#!x)!G0kiim*uItl1%53;pmcf}&wKX4)n~~7v
zl#l;r_<JK#f$I5TaW%yMQ%Ldu71BzJ>j}xp$cw7T3jI&7y;#%A4x0__$NAU)<XeX_
z7VGN&8OIKUqh<la-eAC`1rix7FfEV9R=A&(RbN2&{B!3_J>n*57pWJS7cSgC_Q~?P
z7V^<s*A9E3uD-`V`nZ3P4$C!FV@rK$EX|Zlh0o2g<&zz{+P40>wGSkhQ)|t=;q^_|
zlQF&_>~4FxE!~{V%p~`v2`IZgy8k*YjeRH`t#xY*Z~O9gV}9q(<Qv(1<@@n}w7-LH
zOX-Cf4vXbVcBhX$8k{#>_b?T&)?D{YyX0GK`?z+viuOLr9;u>=+yMA^D_*yI6=gTd
z=8So3RWy$uNxmglEf>t)?jY%zxOT6Y(B`_7XOC;<@_J|Q?(k^yK@fghPE?sY($ZTO
zOWi~^1`K7@l)O5wUJ`e>e!%VCBEOZGy+X_$N3y*20T%WvyoEFyLGC}y@qq8<45>M(
zP<I%)GrZo-;!5|}%60pikCMO*P^aPsrE9aAw4A21rU)q<?xupqHME7tUGYV&l`$RF
zkANZK^B>*Pe%N+bJJ+Oon?9cK%SMZ()B4~(`Z33U${DL6%_Z${r(&^g+<Q<^nH<O~
ze>3o5W}R1k4Jy?h-QiQ@DDIc84=#T`Z67{eX@`v_-!(8mmu{(MxTu&*;?J_>7*l8a
z1p2?PpU52_N<IMh!;{DY8t9r<Btg?AYo%ob|J`8G*k<Q^7-sw3uew6rZSn+z(j@gJ
zV;4;2^i~idI$1m~64QF@B4Ib7{XUgm!P=5UeFczm3EkjEmG5<!pO>JL&(z%@Qj<-9
zCx4s*vUsOu%;8M~xoez~E52(?UCw<J_keE-4{ty6s2nEXIyq&bGDt>xr{UX%5n#EI
zPG%JezhW`JF0)EnD@~$tN}Zif$`QWANp_0+fIg~UEy>|S!_;P$-(Z(RG7xQ@O<C+R
zTk&fLz}z`S$M;X7ds{@o-F|?utQMjB6}FY0#%~?2gmPo_8rt?gf;I8N5RJqnK$TxL
zk71*50~~)D1#cN}g|`Ho3c$M6qR@+7E)i@)aYD!+@&ruS<iY0O5aa6{VQCQ&?++xG
z9j&m@e~YBg3dB;4N7F&Iv+imX!e#}SOTBhF@jD+Wli`Q$1$r83QFr5rgw~~=SHi80
z7axxIVV*89q(u>DjvKi@sQvaJlG4igD9KJn+wF|L!(#8yb#)#3+r%i3msX2<U}4$)
zd<0~-swsH9VJwr6bBepG?FLvpd+^&PXE=BG)Oo-P6EOxpi<|vL(!s3W@%vK!pfpVC
z#9Gq4Up%N&P_~J4ELurLq$X-zl|xHQ6=>$YnGtRjZ8Lia==x*ARx-d<2BxT&`XHxu
z@3fJP;GONB(*aS+gfF3Id@Ts}TNdxFLxV0>^F-jp4j@_y$%!m36>4U?p9$ZCs63w8
zhzAq;Emz)3R*rD5_sXFHZC}2nCd3SBJ|s4h2eCE{1$R}Wq41X40J|P7A0S50hXc&v
zl_@`AJ&*ycluzp<5pdr97o;qzzZ`H(+!g3T^bTws!u;ZS)Im+;xQ2o#olJjJ+GSN(
zpLMnM-Mwq=I;ZvCZT6rm57L?nUnHO?T&T{6mYIuIGLXBIIbPaQ9ad-eK!k~WEy5Ss
z?j)}_yg76Wd){tZ#C0AEj?~}5(IemHECP$SgY)vPpi5wvYo{b*NlF`;lK8z39f}HN
zkihUkI$NBAf&yt-)Y4S~5>GY>7Jqinm*}pQHedpb7fWMn{ZXb5QuXEJp`V;l%t+d*
zVo&yB?gpL*<KHB@YM_RRc95xIDim_qO0@yXpeZ1CVB7^0k;=w-d_t(G=C+sWg3rH>
zHvTB#!qlN@=RxKk^-rmS336T<rt+lh)ALlP%+#1z3Az<r)sOCBK)c#jTq9&{Xz;`a
zJ0xroja}s2Xbx@yaoyJmuHLvNgaaU0CMg@rpQOU7>`bUqP@{yXy6=vJK_M~k7s#&n
zUMbs_v$38J{SCw0=DSKV7E=_F`UJti0t}=oJs^g>O6=^SYNA^Ifg6@2<{|Yeyke}J
zs-uoWD*j(GS&+!i`%fW#Or|+UBPmy7;>JoMUP#Hk&@V1kl^qAp11?3ZLDwl^`4<X$
zJBWIXQq}cxKT5#bmLK<#V5E-31*S#_k$_(Cfn7+F%S0+HvCyvQ?Dx#}q4Bv<)tgTR
zKf80i^vCM4FK=7SczJj9(WhX8W2U*|z@Knqz^XD-K__J7!eUt2$o(rIR!8h5R~oy{
zXVhV1DN-Pd*p^_)*f-dank%Ub$8kBLr=YBIjYFJk;5u51P_TkMT}Swedy+@gbQ^xO
zbis0{YSjf+WuEV8f=3K{tkupXO39ivB~Mt%>0v=)_Z>9YQ{3ig5<K?-6DuGp8GsH`
zR9RE>*{7r>FRH4E-Q2?pQdn?fFsPQny><=ED1xkBf>KL0pNYXEoCTT=@JA_5*yM1}
zy{#0b+=qa`L2^v%z`ddHY5QUTh*%68F`J~XhCu}Gme}>Np<(ey9i;hPW}Ri}KAwo*
zK9O^@1JhF&_;duel1LXT-Gh)MIcVmHh&-Hf-J~qE<)+usJxUykI&vE&9{lhe;vSZ&
zXsn7W`Va;0{foPdt<4cph+k5(Sc%L9@yMb?q{yVq7s*qqD}M!AnE|{RFqg7^0bN{L
zFV8q^k&`<sxh}BnOH0^9z$H_K@mh^DJe_p=ddJRsmj$Qavs4r_bGL|*H26BBQcnh9
zgf3Q1s@(IZk6{xcgeN+6mxQbaw**DJlnH(@Y=!N@Ia6sT@M`b60y>O6WSId!gAflz
z8%4JfJMb={P=PC>S}Uo^d^RyW&!&K@)_@;pU*lSivt>Vi7uw#6i1n@xz4&uMWmd^z
ztD0;*{0>t6gKO?DAlU+gdwOPTZH(=D36A|P3430Su!Q$;^(mtDE@zNi&Psk7wqIgH
z^L_|G4n*N>BPkOcfE4N0!fJFsgRF)gB&9{#VAHDf(l|>0;`A0fnMvOmx*aU73F6(B
z=GWeyu869Co@o1uSHpEihJzZ<UJ}T9mfBrU$jYmu#<6}wng~ad(J8+KCg{5wMs}qR
z*9}vdZ=oJKwqh!KXWXAZ)99x(N3(^Zo0mPAp9w=sMM{d7!dlf~*xIE<3eQ&iY4zgM
zD6G0*bOv-oYom06JU>#{3bZaFf%HCzKTzN_FPsx8#5BmjvR)~0G%r+4-7;nm?ls_M
zpSjCB<NiBoD8A*+VHO`UMGfwXGkRUque8_%_eIrS)TEnS5W&60p=4$7*uwN-Zcd3w
zY4Y-7?W~0LtEf_KXyx$=((7y(#eZnkAYM%+cpS)8{UXD#Q?UzdP`x-~Ysu^kXNpO+
zc|dEN&oL-EkkUyrllHDE087T=f_4#ojq06@=~7$CWsYR@hg5Fl&^V~mWti<uuF!Z2
zVwKOu$s9%2|FUp*;P7kXZRdp5h21f>$@UGQ=~co^f`=*Ncl#wC)FD-t-Paz#+<rt$
zgamVa2#RNzb$`bmODkKJabMQ^#Cu^%<etjaA<xEIX=4|iveF+GAIlxmu$1hB=&&5B
zY}am}?RPos2|^n~wltRf$FSn?N*l$B*@cvezw%0AE$xs&so81*8Hw;<Ksyz43zl|U
zLQ7;2;$*Q~@hA3*^>Xik)Kd7YO_-i&iy$?fZ0ENVZ+<G6Cm9ZM&8WeAxRRALB0Xoa
z4S{ly&7pq5jw5LpE+Q4<VQB8^%0x|OWw{9<W)abQ&uJPS9zgyigIg$`F%yYZ20q$j
z=zg{(1lFd=%&~{6{5On6kVl)0N=}IZ8Cn5@7LaQ7B$IRjFDk4n#Ud?1+T{(d(9;VM
zSQ^vQZ(kL35X%mc&E%nnk@^^;p<lFo%&336(r9>SDF2G&4*(~b>#n^b3qiV@NP$2x
z0wN3;a)Qy69Z(BGS)|3Or4{oM{wiXz0g$Hj1H}dlEsDNN!JVvht-GdT%vRsb`YYtB
zXRj2w+R{x%K~7}XC`JUwHNIGkSDSM7neD;RoNZ~K_n3w*5`a-^M&&Pq4Td>y8kZ2z
z?hjkImvL3UD6}V8%F2Vw>77_petG@0=Jnai-qvTM!E4bk01{Da$mFoVe5QIKg3pg9
zMp{1A7CD%UR3Ex&I3m5Ys1ZkJoBpfM%$RF6%-_nBOinSTlO1d5Pn3Q!;U?zybS~ms
zq_fhQaGVkb!IG2p2hC>|GWOrePAlQ76fBz3L8ywR=A1D82JK355OV9I5U7khoB&pd
zWfqrigS8ToVuM9<tsn&w+u&Kam(}m0>u0?)yG;zHO|S--9t&8)`Ei!VK)6r-Q%~4|
zP<lQ-oHdVY*8*-0M@pL?54~~G4BaOmL}Pkamq#1w!3hwMh45`*Z*=JubZ!kkp509^
z)KBkZujbcJ?5`(pIHkzaU{I%UDJ5G(!Y61r(CNZ9G;AqHzY|$2zP-KM=knF|>icCb
z9}iGm%LeB|SH*Gc>FFssU(WZfo33k-)J;}#cYBxh9*KM4%G`YpoVy47jvIX!bvGlX
zC-g>Xsz=^mRYAm_0ts0DSb97KBER7#DHtIwwIa<lsyFh$HUS1wxyImpb2qIK3S!B;
zqgLoI+Gt<jvKFFyIH`{Io{VXH)9}cF422VloEe&dl^|c@8pJRa9ks8k^>x!mj_7Z`
zv2vGLv;8TJrbB0yT4>GZp4kk|kN+aG_~+z@2`qQ2^>gyW{AskI`Hy=MVI_f|JSS&8
z8x!ZBF#UgV#DB9C4*v0TZ*U^~__;Bje*D~~t=$Vg=9EaCBD6@ssB_d$7A6V)udHkF
zSN!L-H&It0=B=#@mLf>AtLe;UA2qDO2se^R!_;Z9d@@1qy;yu4k8+^4CQ5ImJbxEZ
zfcIWH^>*D(>1Qptb$RG5f22?_wtWV{?Wd^-@XqsUdMA;i%g&@AAH~kPET98(arsWm
zHv7h^F=vbYWk5M{^{Lob0hgt6iBF@$Uhd;R+ko*ut8%lci$>r5f)?<r#ZT<#sY&B|
zm~J{n_GeguJH}rIoVk5cOI*eEJg&)-f@P7p{2qK7JT#@Tm*<9bLm1bgW}S#_SWe9<
zXML#<o1&+>3Wkp)JWX+IF+FzC$6*0`O-wiwdtV@4N@Z6P=Q{RttkSA@)g?yYAkDSZ
zTZPZ_l5PKsuy^dPt<lm&W81cE+s=w@+qR9B72CFL+sTS;+c|mb-d4NLX>Hg3Fn_@q
zqtD(SlF<utQ54a}&J&IDl*A?|8R1?WLb8n#M!^*4;Gs`Ex_A2mQx75-bgRp&iUh=y
zlar42)afEEOD){<1p~G*#)Qq|{2e#wb^hS!qF@Z(vK>Q4tK|f}Mo~?rH9*<@NwU&b
zO_~T!wLC=q<b&=1yZAW4RtjMhh5eYLQ0g0~Pf+R^)m_IW)@`lJ|GxS1@CGuib~gAK
zuNPgN5H2qChhkus;@IYo5<>kbtyFb={&(^kTjqA$R&RTuH>b%u0ftW2j(T~dL>Vke
zd(wOaY(7~p@3V|6ATlo44h*S~uBQH9V$Ra&t-K;8r-qVoXiGDii?o1Ka+Xy;8z9Ra
z*;0DDO45zB+C3OoF#IV*cysUw4@G3?7TKaX&Rnw4%2LniWM5QuC#-`Ba|aqqCUL?E
zWh%GySey8^$%l7gi@lY3x}(k<<+FS(FmuP$+&tl9#(e$D7w@4zt@xVc;u;sz3Udlk
zE~NJo-_Z3Av9xw+o5nDT=((-VC{05_Ofgnv4uwx`#nsfPQ-yL#;vZ5>RSf-d1vvt{
zFCqX^c|v2ik;BbnN5=KSSn~jOHknEpCwYlsbVVejGV~5CPt<J>qz4kn6%R`n+7loT
z_9=bK>7SfRXc@&qh&+z8EYEQEJ$-@cvykJmHZgHVQ;-kfh-gHN)besJ9E4pXK9|Bj
zUhg~RUYXlP)cX0lO0oSGE)MkHS|mZ0vJC_k(X16u6c~DEh@YTC$7u(p9{W5?u5jd&
zNBm@y>!U@`r`OB|GI9;)ill;Ji*CMf9Bu`8l+q^~@ca1~5dwLIr8<(<&XflWmwy90
zIKO!^bSktzDCSr7=GEF*=pwvX2&)t<v9ogLFg}872zWYKRb0^e%tYy5XWB!WGb{P&
zk8iHspFHX#&0Wqg6JCNQ8?p8^f9HugN?T||R9v2X$wz68<vYUHTi$TOa^%dhZ_lN(
zWC(!pQWRTL!#QwRz;lU1iAmu+s%E-bns0u_SHlsX40XsNQ0ZW5G!p+Ub4@*@Q%3>1
zB_}jjn?ZeCLrO&i)E<wvfH0>uNz4Eu-gg&bYvg6;S)IGL=Fp%MChy<f+Wu6?P&Q;i
zl&~hH&4NLr85I|;(0tv#1|E-@wK&e>VE&egTM8cZZq|fgG-~BIBZwi_(Bo@f7{BJa
z4;$J~IeZuxX+nT6=F@1R=I!k6=;-k9c|OBWIK21uYYY`f8-@)qDGOzcSxbP$p*fv5
zfDdS9PFjFXOt3LmTdlwrLgg2X)9aQ1*Lz_0r!R(dBed~uO&Sy}EUkK>9Z9F>2H~?P
zPDpnZ{-xrY;7tO*k+_N&$W-D8@(IPx`^1vLCv#K*S?D&+lB|syDWH-;HjcJQ&I737
zsn@~Y(lWBoD2;wLxw>i7*e2^@T(qr5Y%99uehd6BGtEB(JVc(@)#3-#&i;?hhX2re
z|M+P1oIULSrIY(N^E*aW)^48-q3d1^rWu`llu8b&QS=O=7T2Ys-wHcfk$^lPnIcLn
z0!4yK_xl}=@^yXsN;W?<j@fRD=d3LmlW+#K;4iRDm>#guuwH@jkPJU#M*3!e&(b6h
zi8W1#LH}Tf3A&33r;XY!^A7c|-++OuGqs<FyG`%&RTp>RTg43?C}P3A^xB0ce;6@F
z(;=%S-W%t2clXIRieO<1PKBAUKar!2T6v|qR=`%9=!SkBAlV}B9LWP|r%p6I(p|Q8
zIA<QDiM~<%#s|{!cRlBT+arlY-+h4I*vdxou(?leNFl(Y@Atr&E+(hF*z`9nRuBrJ
zTt)mOaLP4<u_#DKVQ0uqU;V;KR+T1+rGyU!GS^ArDGHSaq(nv26&O~G{iHg;iVoHs
zOSEufYV(~=uuKkUgwP(~ro}#LQpt2X9)>ET4N;L!HlcZUkTrHo2G0Z387-dFkFcJt
z7x8Ch4?#BD3SV3<SSR%wH`nhw8W6>SBj+2FZg(ulg-xbOiF~EA)PqrtcM_D2W!(%I
zjI)fHp_5|VOiblfiDn@(!Wd<uc_bffxF*_U>qGJ$1?D{H<BsoB6~@<(1~a32Xkmm)
zaqJs9Bf8$&5;S%2H{xEzHQff+&6BX7m1pr75@ZlPc=9~jK@xIpX)`E*%0^pHjs+9K
z+ID4AgJHI|ye^Mb)L0+Xe#W9UiOvb3uWs8QP>%8l7Bjb%v}!zL=i8ZjoVIJK=rE=g
z=0KBXcfOXv)D~#B&>Dhr5DT(+nZG28X$B!yBud%F1D)|?$NL~v;ckvmO!aJYXp;(a
zxhQ0#N-?2afe>yN`DNZ=oIT5O+gkWVztlsH$@*}kbB{WVBYK0nP^`17kx#8#N5Z=L
zr(BG%pi>WF|I{8DxomCm2qVnkl61{&nQ57Ip42?-QK;rs9?F^gC5w6pl=T<m*(4mk
zgFt{!NvWXeM9)DZYv93+cec1$ZGj;69`SaTm5d%a@=n`S1+F{cOc+q8m)D{yL~!vk
z^mT3m<_x=kSy80I09^*Ac+lnKaqrki*Mf7PLw4I^)gLA7&D=hl*~xLFKP&|56@7G|
zRug96N;Zer<%&t`wl!CWU{KxtfqBNOGhIqoC4Pv5HBpow+?k!4=p0=k7ur4-Huj$D
z7dG#2F11aK;49Xf90{~-KI=p{Y{e+uV~a7rjsPP;DqN#B-N%cX*b52N>I3!bYB|a1
z3ZKuXx_c=g^f@9-gJr-<6u#&zc`|xv`|15gQX4ASp){CpR<FNrU+cbaGI()KUzm|a
zkyEK(V~SqxXH$i!Vm1f(XfMEEp^JY?Q&$FpOJ44cU?Hxfm*JZsOx__qU2m1pUm#<E
zw~T>NH(Q$v^nR<7cZ!tx$ZK4Jn2NU@C>L7$ZM$IL2AY%>fiH!}wh?MKsv7+!+vP|V
z19Z01WP{3MiuKu_82-c{m{=sx3t?>XZST>mS<!u_KbCB2w|m}jb8!zTliFs=W()m)
z*HJfkeXEEcnhyGBCH>!NI#J<Y(!UHG4Sv>96GtaK`=5}Z|EN?5QI@q^6Zo&%@S+q1
zL}bmfuw(*27e#8iW`?ps$h1d}t?`TMr-I<0vQ|bCsR&2G3GdFdXVc*pP1NX3)l_uh
zRC(W!=#Yj7!YSEq(Xip_CdB#2-Aor9%hphC`Zi=KO^T!dpf;*t??7!d7?WqSgsCw7
zU)YTlI=&EUr20D0mmuI*Q+gnGkmR%3T;r<uBvbj(j4vc4H9i3hidaQWj{qLOV#b8C
zGHtFMu}JNk=6rUPt0OeF=@Uj!s<Yp15~wD&o}cd{whnbr!t7OigB>oO#Z#xy6xyQ`
zIE^Ntws*QE0Ae%O>@4@H^*&+(+l&|H>ZUO&nX|d=YT-MiZq7glgnVadIn*i^a#vvX
zbUb+}<QJ@BXu`(roIGs8<-5xe6W!L>dA2RuoHBzQpo$A(@R;+NaFaZ71QxWxm7pUQ
zTLh762;kIvP30X(h!vJN#j!INwSy-{hH!l4_eL1Fds6Xljld+iAqP}{1YW4MHsi42
z33&d)@!}4OcPgheFa}6wkVd!R8C|YtchYtnVeY{nFI<Yc(i@*<`%>3h#8xpDNK+|x
zK=93-6uN)$`j;rr;ywIIR#dHBVyq0+%7h=v<}?zj(dIs9NR61OEC!VhckZWdCRjhc
zZHnYibn9tC7fbm^ab<Y=5HwO3S!vQiprO|&)(Qhr!a+;k^ZVS><1NCxL`vc5TCJne
zb#_GQ0n{ns*S+BtId9O?DnM)+azFdbV%O$cPXoh4MoGn2A=R2jamB)VE$}S&9ifVs
z$he|)W!0ll#2f6hLuUV0-i78u38E9Rb!!-!PmlbzO>$cE#fEY1(3$n212V}53(FK7
zAuio$#$y*g-m3e5xM{Xs5$lH^FYM%x)Scshy}|y=n<ytJE2<|dr>v;)Uq!_~g*hfh
z|9bWR4MY8Z<!kkZhoqHhTC~6*)tXBW^@rcgdI*s*4pte7e_@b)cdy9lGa;-_tNIW*
z`~ZQx$6Ho-j!6i2@l5F(ecmrNLZdl78@`(FBag=2ntWAmlhsQ{^l0mFEI!huMOh6L
zPNd`7(UGhL$yMw_Yuzj$-M-oKJ=#&a(O>>?CA&K`=o@IYE=<kZl1`I6p6T>>1r{O@
zAA=?|+WomTj$|>2UFgB5#lRnI(MN80UQD`uvIQ6><5d`amw#W`6Po-ge&sJYa(#OO
z4n;Yk1_7j)ZCj?dVD)qTBI=d|YVndvnFabSMuTq<^$~tnxXV3;6s}ahYpSGfI<6Bq
z*82i;RQ`HgvaCokv+78e@XYK1k4V!1Ey9z1@O^)KGOvOwSM>p?RSx#T6fyjhRc_gy
zs+R#!#b$2GYBn?JFN+BRFEAe+u-0En{}*5mG6}MK@dUP4{nGH9<(v&4L8=P#D-FsG
zvB$db{G~V>pj-RM7L{*jxeqik@(^+uQV>LtP5UYk)p+rlANZzlA`7xX#%$xgo|1uL
zRnZpXaW1uZVcS*woqM2e2@Xq#zKSjJdRHH1%OWCf^qJ(Msx@rFur6I>yDW(einYdw
z%3vUzxfIxPShsWqq#!q--@qK06?G+7H^yJwbp8w|uSE*HQ=4UJz^m!vqc!#W@B+Z=
zG9CH=OU1WJMTm946E$L-fMSaDAU!{sQTWj)GD_AHpOzgkAW~+RC(lqG8klpbx$@aa
zo0sTU{}Vyo{7X7@+Ka7w!@E0VP}m6EE+cBbe>s+ftZce|Mm?{)6KB2=7zzv#ly!Ti
z#hJtG5h@$W5_ih3*#0RYsLa(P$^M--q0;~}ojqQ8r}oI+{ggIsRNzZqynn(40Pr^z
z^8OymdBYKgBE8j}xjQ<M3cWl>bXYz1hxzSk+}pO;p}7`(!7TvW^jjw|s%3vIWXWRa
z{FuxH&RfXkAz+L4eiY@xqD-wBl}%HcwDBKMSa_UZML(l2x@UIKg?a4zwbwagpaG3W
z0^{WzniP|5iz?^y<ELEU24BaS6>-RZqN_ne-Te@cxPd-;+_~YXk&?rQ^J{9MVJdo-
z?IN@*JG*QCt)B!;sI3LiFT|*POdiWaaA=q;*(5d{3@AWpe0}{0xpT8*f+<YZ<_DDn
z<9=s}SAT+W`PsWD{PGz5S!8!bI3`Vh<>eHDI!bm5gtq}*!({MVqmWPssyc_KjbgyI
z{!)ZaUrQs4(piiJ!X&ew^ln`Fqq&2f0tGo@<^E5TfG<zrTDnrvCPgc!`?i(!>*vig
zKXbKHoto%V6%S{n3`jo>p26t^KY;)HP(Y^{QiebT063ukPY!57B@H>@ALWaIqqCl+
zo#B6idXhA4oYut>zW90!`>SLnaAki4&_1=eDr2$rbIGcXl6RbKU5QX2p?j4AFlfvO
zQ=3zM+rDY+@$p#;;95YY?Otz>r+D7m=~Cg>E9Iqf2TOnTrb9S7J`c|}KZ6{f*M&OX
z=Y7)O&DsNcHrs=SoW|nDHBn`^uXvlPPc}ZcCz*K6qqe9#<A2k?S1V2FZ`QLN64$`R
zy_p{5H9woop-pH;px4)S6l=Q`Gj=5j$k;{}yZ^$@rB(A$;<CZQhKGEw+1}ROfFk_P
z&8WYkCf!a|WnEsTk61MHfud)<;Ny5&Jo78{0>|Oo+^=yu#h=Cc@Ojc4B`>H@_>{SY
ztsE^A*O7g_=GW^<5*JUC<IC3B*zD<e*TBo8G(T1-+0Y)X!}sRp?KheU&)`X)(#S2y
z_o`LcA+SOsS)-6llVq`MuDuhO7sel#2j_lXOibgLpVWo-)|ZJG!{5`gyTYHg+uqdf
z?CEIjM%u%g^!D<id@QaS<G+~o2oJ4pS{RpNNIS(}t~XD>L%XxBsyb0#r<8t|2L9S#
z4hfoy(Wa7o`e9xw3f~IHw*afU9omzZtrL~yPg06OSl2>$oC4Wez~J|nBOyICops4n
z(uZA&ll5P_tpvD;cXdW4kUb3Ei&Xrse}g;C%N9-a&jmo41~Be%_A<W3l%ol45Zc)*
zMx$A%1{q1iMg}&qcKRqj!oh_C0{2LVXU0C|S}K>Q76+C3`-Ny$IhUy@UFn+{5P}_#
z{smhegppfmaRhyHbDor&iy#bin?H@I7jY$zl8b06r{;i@n8%t0!C!lAsaGghj1Sm}
zUT>mXku3V?R>HmqDGXQv%Yh<c5+~gw(}$hGs?k*kdlOYbETQd=h-5zDfg|lupHpfK
zqF8Gd<1Kg+(8}m`eFGKeWg^%MJ2eI)-~7!K*)Fy#L$0Dw4ccS&$HqlRDR3^gCdeAx
zv6Hka>Hz-i57-LGggfNyWbw6>J&-ao9-N1vEfH|77IVR{Gd6-L`KYML9Ct&2QJz0H
zXOq;}1pCVMObtQo3x!FGRaTlWJ9pNY$#s83uc!dw8ekED7ikLjY_cuhaKpYeVa?<&
zpkUfEprnB(_#EgL49G8~Qg6RroB3-#1s3oMH$p!ef_8%zW}uIjYkNNqj!>bPTO#%y
zs!chdEb(*V{mYE_JNdp0JWndRrmfs;h3MjK8o_r2c1Ck+Q{LIIXI;e3$RC0a+EM**
zmTlyM4mQ{wTFjX5>r=>g&`p#WY;J5z{>=>|6bGp|Kree|G8OaIc&;c4E2+UqtX2ku
zG3@Dy5em@I#74jY6n_O%ZPBabuw0rAZkLogh|Y`v-G^%Kw*LMtNF-thfqGNpn73;g
zA$9LELtS0oNmp<!Uibkl0i#{Li?}OR6zjkyaZr3M!O%3A_Yhw(N^bZ*18f{HiL(?A
z7&}lb_R!h971IQL)FWtMFzHm;ke_(E_jNj5*gGhDrviooJA^PNwBSNGQUgQ)+M&-A
zw4&Q5i1bByt?ATCIi&N=-UHI(02bx!W%XG850zl)bwAB_u@rg}J{75y{i|u~Q@4WF
zB&;NYKClK`En)<$d#Ze{mZJg5$g4UZs!Po;vlr{!I03f!0w|c|s@@9W>L=7GGkX*O
zx2*BX==~0f$UU}_V`|S~^iP<3A(hrZ*24uVOZ0$cN)6oB{I*?84PG$~3(ZSt?lw&=
zb*cxnB;0%GS?GK?DFjH6G>e%v!kFK~3=f}aYQ@!4Xga}*=6Zk}fr_hR-@$r~O4vL7
zh0}Jna$|?eD}ug7Q2yo4o3RaK4RYz;EvkpapP0F**B}5uPwC}D148y=0Q1i_;GXRz
zsLAJ`rnj)e21Pi9l#|WE5!Ka<EVlBL&?AjU4j{k^_9t^V$5B|J;zHcjz+F*$c>*}Q
zv&X$b+<{o&o!dD+t-NN_g-^7pBTuBt3LR&Rv4#jj%R?#1!&ZOdwFv@18h<IAqP$CB
zQxyZP3+!_LvAPM>1l`%)@2rYaL_E6{?1*1U-8o!#jw9+7Spw{VWtyY@RkWnvsBuF_
z1nP^|>3+R<HyzxPe>01~;+iU{ZgEmZxV~dZ??Oj#BJJLj1)tw14mf)f2}@BV9ih$7
zg3_o3W-y5UH(mt#*5TqdJUTuKkUH}ye0+e{BA`ed+R#6E&arp_zMaysU~d>W<>hwo
zZ11ULl04rBov|X6*g!6Z4dZ|@fl`c(W`u^hmW52hxSM8N971Anm>bH1C9URW>jjjp
zz;nTlVZ#A3QY8_u)XnFoEu$9ebwJ*&xMb=a=!TovW)VCTjhmr;-@JnzTBc0`3ldsn
z)KABL6D4Kio1{}57bVdwRv*YT%qnDGJH;NeELJKJp_W@=2<n0u@16K@OyO8)u*4H^
z8rEzuL>iQ&OI#TNm((#B4>W`L8+{;I8HDU*{or-dd&iskcfbeFAZ8DFFp?aKW_vDM
z^?s0CAc0tNjG`aX=Nkh=Jc2rd9VlfXd`RrvMG^#VwkMULn(S)AR`|{aqcgJUaCR~+
z5YTl*QboW}yLt>sU-)dDO9fys;ji~h2VOojQA{j4H6A3IYB7$mY)<hABd2PG?_}_=
zF7Qwx^1CP4lAc|w456xc<O3GKTn(e429uIJr$D?3O(n&k!BnJD8-KYwV6wmrqwNOy
zAT2Ji$5zw89yt&<t&m3UC=VJ>c1{qK23F5z&<5blARSr(P);4H4QGM#G)W<$-@d5~
z(2U*m#7{%Ba8b(DxX(<EC-(%vlrYmE9?}`(Zp6qac1W1?Zu$21<;x!Sd(a@uI>A)_
z+_^Z8#|Is_!qtTtx{QsgIZ%_^!HKT4^?(b)=)~-A2A33Fo*%TI-jd~DRG`Mm@OA53
zNWY?Cxt<5$b>^yF(vFCE#%|U<<SoxO*H*2Q4Tlh{$Z{oIxqDaHIBv@gD`msu)`EVU
z6U)Y!<Z=k;D=hE;cESIJj$<h#gxQ074{vfhNkhp=V>hK859YNA^a>BIoh4inO~F~P
zA7mcN`-VXYC(;mr9TM>TJ?t>kP7c*bi3c2xxlb~>KevJ0t0kNE)J_sW9=#trt>mdJ
zSbTwD_>B>b2M3<>qej8-KME#uA4nfB%8CsgQ{B<!fTj)`4O#3I><o>E{T+gzB1pzj
z3T0?L%0(Q=hC0a6Vnr}+PvXCW2OPZ%;-6ZF+*U>Ble*89eqj9K7+0eABiL<^M7Ax_
zEe!>t$4eZs1)htPJ47WBAi;^oU@Yf`XIhL^f;FaY(hRVBt0s)6v%GZGPyyJXuT?AB
zbq19af@&chg@}MM{1DIFd974@)VZlwCVUpJ5M?fX5q*8eBZxS3eL<8vS3J<dBZOy`
zam2#$62kLjimUx5xcVFuVuY!SLtqw)XPG=&)-Cizuf^^;3Q6tc{7Jl6o5<c_qYTR+
z6huT>M7(ij68+s6u~xi{%-}MKTd<WBRBjkTnl1`q9gcG_?EsH&{Y;BZlp9F+8=5b0
zAMNt3AAK6E7ZP5aFu`sP4?!PpA^*{iaCmK5fN*cTP7esKnnrOaiuVK1hEdh@B$8vd
zSOy_&-rDz9UN5j<xM(L(8)whEy%Xv8@x|T1YZXW5L=>Gvpv8n+tHfdIp9fVf)LX^=
zSc8-tmO)6N)|R`fcW-|^!j_{flzjN<XlanY()WoRqAM|(v5cE2;0us1yeXNTEM&kG
znmK@fJP63Fh;dkb2AFe75v=@Sb-oxt@C8OIr6c#gzOjgvVVj~oA4y-{aol~9Z?_(`
zRm+IW0=UV-W-GR@okxh=QtV5-eZu72Hb>+9@u!we=Y-Pq-S4R!Qiw{`Dcx1(Of&}E
zw0yHcC1eeb%^fh-Pd&v;nXrKb1CBFvt`H+G4X1)4cvgN)m{!qp#%kx{lfcT395Ep<
zk`477{uPY-g2(2(@H8Psf30PLBuC-E?0mDQCO+n@T@}bMGF2^$G8T<vC0}64Y}bY0
z=9~p313kxy@DK@tj&yq~nE&p695?iI_VAcp{3Z*mQ>Ntbcfsv@Z~FW8F51Sp9I~I7
zO7Qp0?3&&_n&LZGji9sh+uh-Dv*o5Fn*B_nSjip6b+O{3d$U~%+ZR3OF(!1x3m%^C
zNPNqIQ>Nuf0OBU*Ll<wKlu^afkDLX!OM(9O;4Ah+;qvGX>$=%H{Y}ty_v^!g8~HBB
z`;t%Fu@TgEq06kH<kCu4d)fc0WYhZQc#iD@*LFcQOHs-5ErTBtghDmcqO(UH$av)x
zBeQm1=^Q&acSrUR%l>q3nC}H$qIRiDQ{|~<`wI%_``(={&d-b2H+R`ZP`j|<LalZ`
zBd13&X<o?`3O)xD6||a~6V|HdExVYb!5-`*FYU&Xi*p<Q>{s!7k0}zwCz%Q?9B2Jw
z<W<UW^8`9zk&&2=uyGj~aRh%iG8dfo$E|>k`8==5bT5dnf&N$av9Pn1d6~=NQ_@EP
zD4SCu6Eu{tXzp9d78tYg$ZaXzO>)9H{{REiddflZ_pCL6+YLqMC@ZN?qoJzscjh73
zo=r}jTtc|y7o9<DCrjU{oUc#T`<3}Km*Pt2^W@Q;RqTaXxA&MY(8#{tabbdo1i%~?
zeH_nkVvj@m&d+1a9D)vFro*kM_Xngr2qWNMfbWQK^JP?^Ts%t0=auN*<NzK^1o4HY
zAQg1Q8h@X3pfP)=Nn<JYzi?t4(NAk0>rL5mjA<Mq{e^3~O>VF$ZT36UV8FUx3!{FA
z5?H&RW|b_^wUetuqre&Pr;w*DA57UhBD90=Awl5Uk3aQb+oTN0wU<v-wa^1{7iP-Y
z)`w=2ZNYqd1WsLHN+k4>YiNoZymIH&Ige|=3L7lyl$pbz6Ugc_r%TSos3rL|mCyeD
zWX5)Tk*`np1(p|I;2=rp$@UJD^t$^K2rzh_)Ba}3q&(s5cup^Y7A0B@oa}yJ=o(+-
zFn2u;$VUx(dRYY0dzTgUAgnork=pIcn`=jClyZLhh4XIp1`-SPu=3KTMG=~)^2*FM
zYLRMS2K;0AP_Y!#jp@Fr8mkx(L4xzL2XA-lyt&sGzz49?jl0XsK4#Ybx~R!{Sv$l;
zlb(Ir=kT%3@9qVtEo!#14z+LQX$^lf5;cL!{+w<A<=%q_xgWW0!!Id9SZL#ECH(d@
z^ON5`vW?<DNz=RZpi2fHjr~P`k%$B0gSHV2Z0_ow;P*KJp28ENo!})+w-E-$Z$({q
zDV=lQTa4HN)0M%B?Dv__sOR)S9>C1R|7HK(bIiW7P-7Ik>gDC-%O3MCj(!`xM4#|Y
zD1R3ssCK%|Bht58BPPuvsD!{r6U!Ok4Nb$9;1I{TKR?NKvh+|L(l5~>0$D#Nj=TCk
z;#zoV-x*><=8CDIitLC(0mTV7cxO#{z_1nkQO^za`d4Uxgdf>}Tu2PJNIrgM=J4;~
zWfMY*-TaEvy;*lc__}X<Ygb42tBG;o{p8B(J8{N9P2EVJ*B3_&`jHWF>s(D^Ny7z^
zEra?h5<-8oI*Q8B5{WmbV?BokPD$wF=Ht7bE#23{LKeccOvm|&(9!z-pC7dE`-2^J
zzJK~TEARUEv}X(3gNlvL1onphoOiibzQt4#U7o?<bw&C(`~px&y51NiU*=25pT9!m
zdiIt&7o`CLLC6q=5q!S$%k$5H4~YJBH`xRm+miAFO1Zy}=I7MNUvA-jk<+Sg>FBor
zb@}02YCp<~D|2zL9_Hm^`VMhgC)V1QyFFhWe?ktuzdIN<2c);|=W~qeTr<-72>gE`
zeuMqra0`^)vSRHIFWdD4>Qeo$pzc3CkfwTuE~cjc*+BmT<Np6%OM-Uv4tv}ZYA9=I
z;MItBEc^XlS1@CGFj56HHO(Jdw)*+pjgIuMV|Oj;YR2fh&sAH>n{s+$oqQY0DQ6F+
zUkpZu%<*~5!+GmClf{Z?la7^&1Um#0ctnURwd<LkN8&~0-JQprRZ5=$Rc9%whSSW}
z?VB(vHe4U!+~McchbyNJ)9_Djcz%WQ9kkMTKc^2GHS;7rq0|p@__wM@tb+dD>Z|#@
z^I2bc?Hkr}ZSg9nsvR8A4_o-Q^ce>%W-E6&KZBf1zV{WKjla;x|6X6HX|G@$%PLX4
zh}~XSe4=9L!Id>@yY>&*!`p_G-rs(QoQVa~o2rL4$*^c0Vx*G2PMTJBZ5~DC>b7`F
zbkT9?aG7$XyvOb)quK(5kdG^?0;0@6+NFl0!VpwZX3N$&A`+9T?F5GT{$(l62<-}c
z9onRvCci1GO!oH<^{oxPx9<7?fyUEfO;qr!4yvi7jk*f&YJQ3TfruB!&NYfG;k2Zz
z3~Km9ggu+PIgIcE;lDCUG-ARl<SDC63Rw{ki>Wbt{fplzG-&iYPIASp6>@iMpWs2-
z(a1xFA|yH9!e<jeE;Kfkp)Gf2f>5td7j>LEPeVK+-4WLZZ+lAhd~EZ0X3nrH^9vJ}
ztH=lA^Uh&(L_pS`e0~0pUZN&xLOs_lnzW7U3}+#Sr4mLU#S7OdfTXaS@wjUn4VN}K
zq9@d`j&)A7M$e^fl#-R)EW$a$)_oR{u1;=D3eA?6K(MMDT`p8`u?BH|yyhxwr4JpJ
z;j+E+?Ip>WK4DKvIBLCh%Bwf3fgq3vxrZuhgxYEtaBOo^wY<0wLTXiWQL+|Dfq{!R
zHIfz1(iUk0cex8V>DK)?uDD<!3uLM*qR_&xUn9C0w`18Us)k`D2fMcq!A(dkkdmnJ
z%}m1L8Wx#Kb;*TFn)kUk7|scn(&(D6ylNWZX_&C(IOUSC^wDNh%1Xg_+Q7<!CU=L9
zXb*3f^-9W<4j#8F$>{vQ&Wy!?s8j2jIGlyl=*0U6#RQ|E3OQ(#eu?|$LkJ5<=?wJh
zydtQB(_j+-_vzSD!77dm4_Eg~iTDXSQ@8kEqPP%wm1GoAdVTInW^2`n59LBSMnpVq
zQDtHUQ(rErx{qa+Srg6doNB#eq38=$%HF|l#Rcn#RCEl%ejD+05bu3GyPbfqoEV@#
zloBa3oqf}LHBJZQv_Le~Ah-M5lFYYN=A+mBWp6YR&oobkETX2?(-W`>0e{ZB?c;oM
zGprRrS}W<R7*{7yi8n%&u!`YzHN+J4=F!^ovvLiH@5*^k33_Yr*x^EF#pXgEOq^!C
zRb6;J`Ly))>Ph|jG6^YJNc5^;YdgLcFZd~wDY%c@ElUmRVsUO+{s?J&Z54{D8n^;G
zL^s}f0ZLm9tGzX)>Z`#gsHg?9DeZpDwL-j}JIoNfg-xBjmQ_(&b-&RDihqL_G`v8L
za04rd`i@kjR@kY6oXE&z;lqN5oMo;n;T-W5;;c;j-1+H{jI>Qw=zu>{*eP?wNNUZm
z68S{HQ$O5Fxmsyx*tBK0{xS|5ww+GDwK&5#@~r?)mOT8+|F4<&Po~pANMq~S&rCG<
zk3^Tey@~BV^$tIFbiJR3ho7IBouh@bxsB6*qtX9{=<-pOwp-^w=>8F|tVzSP%58u?
z#mfS_E7@698eump5tR5Ri=k;nC`*n<Jgr>Ah^{;80y@?XdiccUbt{vh?n%co;r3fQ
zbE6sR=IK@y!!ya^8!OCyFRLHk|4_ZJ9U>~6YihcMmQm9SQMYkJ!iu?zE}%IeU7<#N
zH(-fR=1nxc6S4tes;bWouZFA|kbw9}a*<r3txU>;ZF@LwO9VY=d(^6E$ft~52Tr+6
zsr19lS4NGgJR6gC=mo6WeM1X3hVFfSN`Tx2^XQj&UR?XnT|HYI=*K?azcPLND6-E0
z=DHE_0bR=L2PXAKDl!g@>#`@!z|nTl4G#s*%mf0)a;p}Gl+I8LqkvQ0OL4h&oem8V
zc6BiBqe{a|^h-#Lo8&r~)&eU2;1oi4+0KnP;IqXflV(3sl<=`M7u+ByYnafK;K79k
zLEmt4T^uNDdXPdNGQfToy_DUTE^GpP)fI0PcuX$)H%b_IRf97y`^&53Asxn@lBOUp
zO122NLn!y{U2AH<=@RxoSk@r(y~eK=-yL1VZLu0B5>(J8H3?a~sf3~gr8KWLYyf)-
z&7u!c2P04=QcXW+H?>=Ag@-k$Cm5jo?%kr+cqY0m6u~t$X4o3vYL_{!DlK%18!oQ>
zEwffpr|g=)y(pk|&fDM3!fl#^_4k~Pf-v?E;^iI$GPGL5uSYc6g9LbXe~nPc1s|&T
zzCPZG+c#UzApC;U&D7=L$rF8~X)lxlQ9Z46VAuN6TMV9z8cuVN?lNT|vOlQj6-hHc
zNK@Op+iO%lb$ag%B?vYNC1F`|><R4>?&%+-GC^_Sg&he2#8`TCQjfGSO89yDbl-St
zzOnlJr8WzoE4q{ceHD0qs})n{_e4U#DoLhk%n+tpdWL*Ap33tGVRLOP@`oDAQj-SZ
zqpt%-Y_AqmOhhNrm5M^rX`>|}o61I5myC#56fK%3y05r=+=S)u6r;Ufsj>|)r?vst
zM@%3gMZzsCqTlHa#!_y1IKAoYa-B-rCx(pOmjip-8A~I($9%QT9P4Kvu8!QXv{Z#@
z>k{b^)JY=i*H|{dHhn>K(q&LYX+V-2Ad9d8V?Eob@L4ZII=or{DV;H-W6MjRv}n6L
zr=*ZX`w*_j$Yd_i*swA}1;vTv#zmX;DHzAiRw}B)o@KnuGCkD$nS0zR5O7ivK%5uj
zE0dm$liP0FtBfHtvRzX-78I-jedg?q$%Dxl!|#o*2=)l1tiKWM5f22a=U7bT*aUrm
zfGxy@B&9=Y$th$W5W-dp+05XGmEc*j0urv95L7jUO{B%z>l4~#xwQ0I@dnJ>)1eu=
z^6g-{5#F5DYAd=!Z^;WsZ<HJ5M=mWl`1wfQ_%y1HC*GGyu5Z7N&{4ZQ--l1Z#pKvz
zz9G8Z2mid^4NZfrq10^pbrB=6-w%B{-d(<@A6S(Sm)l(JGW!Vlym>QzAafb@^{3}_
zrirss2J~=?iEJhS|40Fqdgsqd29<;~@9|1qBA*5sMBkyNUv|UXZ-A>9TG?6umO*Of
zlg|6n7?<z-P@|~TLHeGgE`fzu+fa;0;h3xFru!a@wN4dcA|s(P3uCZ?j9VS6X={q*
ziIY}K#c<<$vZoPu8}H*f**W}td~ka$C%vne9@tKJ#~26QG}V~WOvNww|C+7;=m5Dq
zP56=k0RU2d)HDBk!0|uTTt?O=29Ez<LDzo|)PJJ{v`Lt=T4z8Q-hNcW*%U@rzibTR
zv$p6hG-Y;ot(_Olj-=Wqf*ramRI2}YPC{l+w6QCZfBt-NE(zOej^?F6xujM8`<z+V
zX^~wdxSKu4dA<WCM@|r8uj&g9<L+=Pt5W0MhZzLl{)em)!fD;;xJ$BtP$9~_sii%n
zXZDX^rf*w3o>RAV<WhTSg`c5Jv42N4%bOAcX68Vw;bs2gT916Pw!dt*uO-#X?<9H7
zZ+t~a_$<&c6m4)XgRKsaY+=>A^g2g8*gx_ML*f+2z$Q^FO!@ANH0Mjjl-<5s%*~CT
zbEj2Atr=6M>~0O~Ug{$oE}78Bq?MVUAqfP~g_ZY^#=`>47(6T|bC-27l2Ww$ICUYj
zP42pV*nOEb`b^<!M*B-FfUBzj+z!$3#1MFxl$X0DYz{ttBu^miz!q*@bNPQDz-7-w
z@P2x%BH=EeBUWh)z5I;pu-4=X>(!4?XABlQVd?TUFUL+(1lGhFfCU|#BTJui79Q+5
zNcLMKD%Xq6<hi<u6&jhN3|^QJy#9yV`=4jeA<4lu`t#fs!TwXk%RkTF+RniECoR##
z-ub`c4Svem{`IH&Z{C5de+j2Z(c_VT%NB*D;wkE|r0EDUl=p(syn3~0b*<cBcemY^
zQ)dK<mJ{gjZ;z%j(tIeD$5*98c`kcvzZc9V<MPv#d9p}7wbWUeRinHu@CafDvVfaZ
z-^|@0p<`NGdWoG3dhby(am(FHyTUAQojI^Z1SeOi(Xfzh8GTG)u0*p(nM6;@ft-wt
zqwcyY)!NV)u-=773i;togXU%&{D5@K{hZgbn%{-MtVk7G=R^lMGq&Xd<<jswpHoW=
z9g<)^zh#bo0y@i=`a9ol3804m=(8AC(vy~guEH4P6)Izo2aBeWtCns6tU#O!@+D|h
z>5Ise5jl6pt~}|N0`NmoA{nHOhM;Og4d`&qDl2+-GC%=yl9|J-Xu%t%>#c4+p9)!t
zV(X>z9*KGHlKNy$bhJstkeO>k87X9x*EBrl(y`i8{(Y`Sxz{nhUafVLo**lPa&r%@
zxe1t(mgW%CL8;J>FuLxfnS*syS5hXWrtDU$n+@!*TpN4!FiBsEEs13w+S4qZAGL7-
zH0GrTva<|QJ{ZpwSk(b<tH%WO3Udkn81rHY*89BKjQh?%s{$qsWg&A7X%*8t%cSa0
zpFo<bGrf49h2KXsGDzv&5WqK|h1*BzSPSr()<TdMn@g;N9Q(kh!MB~`v3&=dS<yK_
zCz@`#SSweB>Mdcl!NbOj9$uh$xn(o3&W)@>o0#lJ&brxG>bOVMmVTEqs`525%+p(w
zvA`<lo*N~_2%pW>HInMhlQ`)kNHEEsAH0MN+-S?)jdpX{(OCdaEk{!IK2HXa3W`<@
zpc9hdN{9o2KIf8KjI2&OhU^zxtrV(ev<wbju$ZAO(U;pDO1|=a4&*3gz=((ATVyMc
zlKoX?AGk2Lcn#FT@;15F&(orrF*RJV%`bmyVwJK`{(i&Mk#M!6moQ)dKi1KIJ{yf8
z?)mtib+qZn`|`hw4dsQEe*L5(IoaFUI+^^VjBs}OkKas@>b6q>8-nkOUY(Oq1T!a6
zi&NGq>oMk@J-TVQ1E5=aH-q}9Ag!P>lI!QT8|W&S;k?W{61at*@B3wScOnt#f%I^K
zGZggu9N}P2*n~QhN~BPo`l*Q88Pr?JjEwxgOFjqg)~_+7scJ0h0A#vP(UU>!F?DK-
z>5X@FM%<cbhu@vfA@b;c^*(yLq;o7magUfd8-2x8rAIH<j1e~$yY#~BBp}`Upi>oz
zeN_}1dCI=DrBqecp>CbC_H+wTx;yq3)#Utt#Ga<%Hrv{QCK!3P7Jn*VfiL?97Y91_
z?W&@as&*(lLtO_g$R}1x^_-`%VY7An>~d^<1Et3c*{;ME>)5_UJF0iMQQ(t0-TFOt
z=!jSJGR+Q$Kq7LfH7I5=u^9>w0qX)fw468^dY8aGh@ecXqu1ERsEhdu)bUpt>I+mb
z!YW=jAO~uw?Oa90jPY!)EAV-^o&)YD#vuzFB;61>`}&_U32uV^E~PF|xZhbPX2$%5
z+_W1`!RB~27ae63t_bOh#QW&|#09M)jK*D)BQQ}elo3=c<W<+25T~0)(9}>s(GQLk
zBJb3vM0*dvpOv1tf@JxA;3XMic!>2`g@}M)Dau^(%xAgGK6u4Tzd9OXUZl*F@^kA@
z9btHjVFJ7_$fW{z#su*z)+6)RgC#k77s#Q@Y4T^SkWcz8VQG<H{)iuaCI;<LeqB*N
z$+@S>yp51!$06#>fN;;sTn4X^#pJ=qw-BFob94VWhq?QWjUrN|RvkVsln>dME%2f*
zPbjS%YCs>%HjQi}wFMis*FsU7tx+$kEFYtB4Q9@Zb)K3F>Qu?Q{1L;HH%uYMoqa6e
zlq>;b1b<;y-B=eYbmRtL$6QC|UnpwshB+W{K&_qgnv7ZkwsQ(&DOx-ldtRB0FTBVl
z*U=lH+6Uy@#G6SVeAS)qHfGShv~Yeo?7L}s?1?EA0F1p*p=Dcl*NJ%(qhP2=R2Vof
zWoR<8{_aET;|N@ZeV3eJ@Lmkm(Si^r87uIBz#$F6%r1sGx0Xh9UkgZKB9*pkYcJYM
zw#zxp(;q3^trWBnk1~Axw|`}A&>g_wq;WqoOTG4{!02&C?N3Fq7R6IQT1U+JLbJ3S
zGi=B0cFNkA+X;uhSDt*hoAhD#;@)1^7!1E9GFg~<RBFkl(%4u3Vc9;3Y>5LQ)OdT#
zC08_b^Eq`>gpK=eyw=S&wMvP(n_pES-yasT@J`;NM}4rw{O&{~XKKYWF%5C^p%}u;
zjV9zH<m49^cbLp}%Q<m&lMD~~6NUX&shUdXWSo86&nfZ&@0Wx`#&qLd2Qz7**LKA@
ze0w?g=ZKyRb&2^~7_LRkgh`-ma#g()6cDL~j#}*DBb0nrb6zIJ_QHM3LR;E>A)Ftx
zP`;_^0P^`la98Je<tW5l!eTb=)AksOs+NDCQ0ZGCkSfV=$knY1nts7wHvRpS;D|hp
zcMV%i=5f194LdQY375(*Lous5I3M>n)1;YGACNg$^y%*2x^z{2mud<2?zVNVUgxQl
z={aCku_zk*AG7bDQ+$ST8X5R!_US|Xr*%<DR`N%0>h^Peo9O*mNd9|W{5SWvjmq}V
z{SEUo_5?3<*Yc#>Hw`#0>H#DztpVqY!xsh~%YGSiEoTv9CTP=tfBvq|(!0!{{r$n0
zfM0f<G!^`!n>)!jFmS+!NYs_HO->)P0H|mBOz90|GDY1E@Npbep;C$~R2vWX7tQh9
zl?kW6a0Y&2#5o%Zu*afcoJ$zvFI3F);jhb&T#SVzHbA=E>f(D+??#tagVK~VRzTU*
zjE#QryN&?&oG}8sd@tScs-CZN0PmE-hNTY&UOm1}$^A1d<75vA(7;M6GwKo(fpExL
zZmt<h$xt*ijRXf(YDZ?De(ncdTL*$cXA$R--1XkcI2<B#9{p-(CjZlLB#zZAgj@*p
zw%9mUyk4GT{zPt@=8G6HTd7Ho$cQ}UbBK;L@YUQK7nP)R8fPzlT*fd)iIyri<56Y9
zO(IOGF;zh=V(A-<-Xj|YaB*3h6-XCH**r(B<Yoh+IWQCtI|QoJPfA_%t^~O&hTH=6
zMA3{Ro%-xaUotnuOh6;Na*<P@FQ}czWd?zQi3Fn+l-JPc(e^{g<wUQ#Ki`D!*fW(l
zg$JR3anU;{XLr5K>mS&J*kHz1V8rTYbtyCy6}0kgki2{3zBJ;Ds(II$>lo};)vTvB
z!c-`mc7=$kW4w%qB*WfV!ud1rR<4(e&Ai4ab!rmEJ~=Cx1C&qPaVW9XnRQtnLaHVz
zt8i74vfyfc2F0=$ORY=~Z&cRPwPZg}O7@j2g%Dk>WpuHJ@M-s3Xi4d?58$sTA?Z7M
z+1YSV9a3?VS(V68sLTsceG6EWGo?-3R5oF;3Pw3<-zwXp7uFXF6MQblGB~?48-y`u
zLZjc&gBZqHG+Z*`6eDfP2DGu$eH8Nlh6aAFX%usqCr+)x_)%8Ek*X%J2pAm~1g{rj
z%XVXel|fC4z;98#2gYu=f9<hc$9kUxR(NOboi4;ZY$mC*Im*WnBI$jbQzkIXJawAw
zGC7jx!_o`Q$r7uuE@Z1IDnBFICspRC!rwd_-zIiOUBm}s!{_YdylPUOfzBS=@QfDG
zc>v<!Cy@k<5$QnHVUSiVO`r`xbD3=}U9aq8t4G7h9{bIGEmRcUf0lt3ojj@R6iky1
z>`TJ4Y4P#Z9P#^Bhot_synbkgxH)`!nvvJD<@W>C4VCtsnRf<^oBoQT>Meu|aq$H}
zPESPTc3006f5v*RB{;-F^OYrXsEhImuI~z@=KGk%^lilh;8{;s9pZ}xdsG?(O|YVR
zQV`|=DN3ffrND-pA37nrNpH>&n1~owQ{c+~qZ{3rI+GB_a(Z}Tb4h{1%F5AIww`qE
zulqby3XymBUr|(Gn@)VSw%pb}p*na$L>J?X>~eFp|8J=9;5F)E`j5KZ?Pt<3{6`|h
z-oWu^!}_Oq$H~Oe^}mPBzqw0dRJMOwqY-?c^%(QvFSZm;n&)}#p^-YIy?%2D1Xnbc
zmnR{^584=tHv@;2e_gZ72@!bFwDb5gXXk8tGh-fVGO$U-M{%dh^T}g+L7>rdvZLuC
z*<^_}1m)z}|KxN7h%HFwftKVc1HmmjkhUW3JO)hf#280UauF{z-{SMlpieMBU<TzB
zMlJ{uY@FjHHJuV9wC6;hLaF=?kl(}jB4t;^J|zkHj0^Dlcyz3XDxsf1#pS2%ce!q2
z$gKV{zWEjhQ{;T<F3(V>9%q+p4R8}TsPUx-os!m(uYvO2ZA*8Oc73l4*tfvqs}4Nm
zQlF&H^L2vuN-Jiaq!TPRDv%w{T7+tL42vYWvG-%acviQL=MIK)lYXM3q@9?i$lmqv
zk^{PqerOa$yM57HmDGL5O?ifYZW?QauYK}Vv4m1^Cli6d-k<T_pJj-22e3teiVCEW
zqfADKChTKrA&5_8Hbfqs^1#$b&Mv081N|drD<Kb{VY)Gz$fHHHSw>{T13n{7r0kA1
zW|Id!VQ4$|gsFuL^OTG8tx4pFXcttsMI{MFa2emKF6IHhX^`R@S7|HVaov8L5K2^I
zEdfjCWjJM(W^@|KL~QDK`1`Pg2^B<oM+l=a*&ddSKxd@@k;V;Q-Di%N(EAIix{Gl>
zRiPtzgoJ5P%ehcLisP2S^&1QB`s)gBu8h$-P;E|YRuOGpW0bWF;h31EiIKI8Ark1)
zT{E}pg)lx;3t(<ZSXZHW>BN#>8O6$}@c4fHgk|ZSog0t=ORWH!_~hkV4nB6^O!Tqt
z-e;m5Plr9nFKtRQ*=#0GU6)8`V!om)$v*9%$+HIIJqA4cIoJ7AP;n$2OTz1yYFBCe
zb&^>-rJ@@9gkp=jmr0lH5MLf!GmAb;dt-vtjV}L6Ep_68h#U$(R>|5OtN{8xi`;hq
z`HN4woB<Owdi2zlPwLph0#)jFckAn=>jnicUGhxDPMo~eFrJGqgJTBA%VSCh{LYBJ
zAV%meOtRQ_P+gFupw-fBt(-ZIs_sfZl#lURG)mYWHGg&plKHqT4sYQS>V~^PiR#71
z{3`!B5R-525m%3a#ipVkJ5!OxH<pp^6UVYfwp6ttj}M3?eiJzV4wvHwy|m&Cd}XoN
zsRbI3-0^N>UKAZn8`Ate8Pzy_yq-jCyj14Ir9H#y_4DVO(bkG7cd0d)3-0Hj$!V$-
z-cX3q_W#hH|Fdn-H{f>J|9}%-2mk<t|LY7eakc;NkN)3m7%^(=wm%5J&#@ZJd<uwt
zQenqBXe5dMdAkm=h2fxJ01sxP$oht2zJQ`D=*7r2j7x!WQ->WJXXbk*bNiG_|LUbG
zcDPG=<Yd6KsA-jE2@iFvrWPW1Sp&RZ{;KZH0Ty0~-f?t<Fr1wMz1w?>6i#s9YGT_0
z_rQHuw1JlKSC&mql`eix@=q{6qdRefI%<S}#@Z^WWz>^f)kVpx<x{76H%&Gkrq^HS
zR6ni21ndD>$hJA~Gze%O7J6p#$>b5B%&Yf)O+BJvJX^l4-1<i;dzY5hi2ReQoTG1|
zKUW_uQQSKkKruVWo)}Q`-(vAg)dITKC}5vDi3Ch`I8z?15$50ddQ4MEHyUyWa$MCr
zGR7yo#eLbLDy1>I@{Z({T4Oph-fmc)6K`?dki;#ArwwPFKC4GX_ff3A8jZa=1{6~m
z!)gY!+mNYfwsD3`M|_28#ax+wS<@GyAW9~z>H(;|42@F3r}MlJMi>Ivk7egRC0;|?
zNvrkK`bR;P(ho1aMSIw!I~1E+9SbKpYJqtHZ{~wQy%vIU4O|H`#q>V`m=WlWE+Nz|
z6YsB9Rn`Y4OY8P)>(T3MmesCn`oWa#Z$distpz1%970BcP=O}qU)8s<nK7Dx(2O(s
zLD!W_bt15k_ZIsn(LC{DXFqLRz_ztdA$!FQuo*~D)D2lPPVCRCn03Fge*-*r&lsHt
zqh5J_cBa2I9;W6&nh%WHuq<&kBBwDN$XD_I@;7up2R0xNAV|n7Fq+w8DPcE`37pW}
zGzk3|YLD$=n$!Q4G*_+JJnCeljoYTE?;d(stR15qk-PNLSBH;q_5cVTyeUPl_!14L
zko-Cw4n<%d3shpCdeG;E%$G-5gkTW}=PP%zy+aB4S~@^LeX9Qf#%@Jy=vW*1P5-n0
zupo~%7Tg}i8jP}0u#=?I0TPQaN!F>AXP0RIaz(o0AS6f*`#_WwX)pnSf==Fru2zOD
zqT4Bj{*ki_E@bBGvKI*)96oV8c^Ej_h@zOD9NY7ZD$<^~z%wcG-;D_gOhzC&&`dyl
ziR-2Ze{3LT{Vp$qRS$-}p#i=PN=2G-l@(EyzjGCtHX_lZ?ESK3kjOXSu)68W%WBYf
z#kU<!t-VT*e<lFgU5Ab9VP6zYz?UY!i0Vc+k#F9&sZa{A&X#hl!6Ym<j74x>Bs0La
zy)Bm(0%686&t#}fFGou#uCt%#giB{Y>%$|j1)e?pw0=B-SNHAwet2yM0ww>AqCVl;
zIlrlb2pE3cR(=Z0yZK(IXw<<pVkG6dl&+q9kK=;`wrj|K`xS+ssVtw`@(R~1R#Ka}
zS%8fW>?%Glc!e{IkR9F7{sO;?NCrMm*!i7RUy2;q+J5<g|6m$9mJbp;2bnp-G;-UB
z{wK7<dnMKpo*RBS=jtUtz=+r}WFrYdfoCJ!nw%NlIR32gSN<+foDmdsgctbJYp&F&
zeH85^eh&@aF+*#<YUwAbz8x-`u@^b*nTXtexPsvX^x;J?P>sZCZ_HxIBeZFX=(c31
zJ=bBinoDp>o)IvoWQ?3mfX8#kNpbx6T-}nEn@EWqF>$UGB7{O@ZGQF@#`Ub$wP^-x
zZ_@^IaSZ{N@@#T$++*>q18iU7MrZ~{Gx<?JI~5hAv}i7A3_RjG*KfAv5J7BIi4<iC
zEWk<=K_?9xa1A9`%jh%m0m^z=(GLa}+@;eUhv@jldFGH6Py~V~J#wWlT<+j>+@}o!
zXhkWHekXB$Ft$--`2WM$J9cN*uG^xqZQHhOJE_>I*fyUe728I|tk`D7wrxAvc~?7a
z?LAj(YtHj&{DE=zOC1b6HL}6n;uUlnL8N0GhQUp(xL63A9Ap={Z*Af9KUHS^)?fIV
za>X~6CVdd*!WK|Xh=bWd*OYDyAF`qhZJjatZbLqzFmz7h|9q0*w;&OXnwqMgX9F^I
zt_s#hD7tljdo=_9d7K1gxzzc3pkZ~wyJQBPn-E#Rd-9A_;H|Ve<MGz+5@76lf9PA5
zJ1Xv_aJaraJw3f>uQ+@9^bRa<*5>b-J?@ULc;`&yNa>12<C_D8ooXRV14Y1k42z0i
zvBYE9+6;tH*X!lR&shjEe=Y{Ek$R?P<Y(QHW0{iF`DMVjD@o@R%Q@g7;}n#C$yz$A
zY)urfh&%jYg=E4dr%`&$&QJIAZg>Ijlr=I9X|5zn{Cx`z9dge-pkM4Fd;B77e0=W)
zYa#bOo}+#Ibixc@vcbKq!1k4c0q+g-U+*kgPzba>-@EpIJQv9SZ7KW5Fvrf!{lClE
z|I)+Ss*c-z-&Z>BXfaL(5%5-|0|{0K0?weSfEPH(N`w?3=&R|Q(8?0j@E*?ElhBIA
zoeLkCS=;}#RYVz{R|_#z8+ATou)5{aKjKWGLd6z}htO`zq-S}9Rf9J$%LH-1_pG<)
z3wrC?H?7c^z->xrS7;NhXTUT%ThZXfMsOFG-l2FU%p}GezyB)OVP=W}c_nuZQA6}2
zG#__q+^FI>6W+7nqjIidD=SXb9o^c&71&bQz{_fOy|j)*uH=(~e6C1Q)Xjg~h98F(
zIh~6v^8MAtWZd8<mEbt9+?X+Rv5nvp_(kl#zbR}tHfAB>hJ0QcXK|W0NFq9p55u)R
zqa-RsUB}i09YKc@@w<}Kc8Gn_1iNk_zSIKoP6-VykfRIA>O==gneCi1+8yx(r;9Nm
zEDbMj5@^0g5(i$AAvv?>?371E5)RmNb8>q+Oddqrnr=KAN~Sd|%NUYum_JqcDBoz*
zHtY8r>Z`8~pO;{cWG%6ZcM5_fE+}x=nAF8gy&vE1j|s!<=ka|1$B)?>`R3szqd#1s
z;t94`WqA)^m(U%=79uY|9wPE*Pc1bq2c}HgPd{HNIfw<W={VPhT^<h3V(N;^aA*|)
zVVNs7Zmz8DpVK@Y`EQf;U`>l5-M|>^*|Fqrm@>jRICw?J(*pT<z$oc+UqY-)+IhCk
zH$i!AXi*~91&ke7l0dP)LlZcAeM<3Jcz_`#%aE?Qha+ONn^Q~3mbm-0UJJx8nY}``
zjm(L-6Xv+0^z$plWi-Y;vInP!v&!g&p`|xRL^t%~>U#LADzCeo2utSfUhp2e-A&Ie
zS0CiwxC{DHtqAzWt*1W!N0;{V0S2D-ds6%T-KkOj+h1E%RPBE#?*Erw4WQN=^PS1t
z`9>>o0j{xDyC%cmphK21YdfDrB!cKIGK3voF%V+|Ikx4Fhid4)Mvp>LXTJHZxldD!
zX25z=BVn{N;&@>;ql-<g7?L`u?iKtk{dw#=OsnNU*{H2GtY>`^X4iZjI^mlH(6vLy
zKq_=}A_aGclGP&prf!3m1&FRJ>UJ`#CD+h~@C#;1?IZrN$)V&nxz?spZUpbkwo}s5
zi4KVzW8OG#pxYL6A!?|f?CwuSAGmW)=uNge`DJ&alV?s?uxpmFQFCk7l-8$S-0b#z
z19G))i`bSmu=QhQ33vm6_gS6%qT7n;d5x0jR{}0bPbltXgJ=Ad*^sQL|15X$qscqV
z#GW{d0maI>$ZRiC1`!IR><iml>U_|2;~ZMfW>qnPYT<dh53a4%WkCrj-;#<@e>_BQ
zEW-VeBm^ZBt+keNrfDD)g#!*E)R;EuG6eVyN$5a9PedO+5vJJ^n{W$Cps9s6CUX;C
z=lzQ?mW%<R&lDxw!lE@>PNZ#%5Uy~2e!!GFrdL#Y!+h}OC<yHAO0T{~vZSpo(LDRI
zGSxH;DK29?<b&iu?0u1>!e?#MU{H2A;y#7$GnD0<1VaR(C0?><q0}S3MwoTlhumCO
zRj5uuPm6B`gr6U~iZLgXB`-i%nw>*xk{JtJ@O@6Df4W#02BC5?A4$YFY@naB@4{IS
zEDy?9feW)Su2y;_QGRmRCfbyQu9fDUs(~8BKk~90j$>A{#<yGWw`y9E=a8ls<@)x9
zgU<xd)nhDXzc%&y({QZE><aX?&aMd|kFyqwcSQ)Lu~F>4g?=0--%*r?T26@r?uG=X
zIgcZUzb4t!R!Y=h8#h)fJ$^@Lt1seah41Y8u>lpHoc0eZlg@i|I-g1axH>y89TaPF
z&?C`;wK``WYzU2RZx3M?4@4IUYHzSz{vo8&s^?byHn=p;j(uSCmR^JX>F)$x=+(j5
zWc*v?z3^?{lBF2;GaV($bBh%OYWdw0y4**OrZ#pk@k>(5%C+kfrXKu>R+s8JLW#l;
zKSKN^uc8SzG$)B+fr8nEh2>b~hL{iFe=Rcrv{g|%NFX3NR3IRdfBP1t<c0sQWB313
zV~RC(V!uO*{hn&LGCTvr)kNLUEdLadw~3;V;b;p<B>D>f9$Pq&S7unLruh4vQf#vX
zpOB*mkC@$tm%H|qEqmZwhBCBi9z=<%IYDq3<?ENW5xc(i@o^dJORSL1OCMF6{iX(s
zY=;SG$R6)}Cb;ZMf^Ke{m(;rMC?wK2XmyTUeX^X)l{;EN72u^fXP-vpf-!kc1kzuT
zL(>>qmr)n0M417r|7g<|w8PXH+Ww(6;F%1SR<43Jw9mN`KdkH)c~#ywQX)czWUkv!
zt0EY#ZbbLj-+x`uC*a3!tJoarwPJ3v-1Y)zAcE)@B`oZ-Pi|xZMwe2Ij8th0j~B7z
zVuqv(NN(KfPWSW<5BcU2P7d%3;40gLuuRySq-iTVMuI9}9<vpp5p%8h?*7a?>OHqc
zfL_DdgFM!3^KP7VXBdO=Zjk<|$@jVnWjIe3-#>kj2f$EE;A=3ZJTV<3w|n0BG(^~@
zw0`|u5_4GY0YWKK@+RGp=SOsqoJ%NH27YTmc7->mswp`6W9`D}yC9!mEg{DK!Iv|7
z_hre6I%)0*__8<h|HTWqsh~nh=Wu;C>gwF0BXEy=7<)pGgW#GT+y?Lv6zoWeQT=LS
zR>$VVmaQOhLrLzHESnWP0VCxyW0@S84NRmW*zrY=cmK&GW<6YA-v?ynQT8W5CVOO~
zp#{*NuHZ0!`FoVUjTBkROPV9k@y_lvbC~{`#PNz5%O}F$9v3scz2tt;>KDfGR-Z`v
z9hXOFqwWF5OwV1B<MtFGEf~?>6o}lfdIoB;YMMyp{HgP?Dg`$faLHouob93|VD2~2
z-gSG-uN+AKP-LB=UYZ;&Uo8g7NePl%FzsRUNyTy&xj%Jjf3R8>-|>LYm8M4o#V=$W
zD&50f+QF1;_o0BLC>=S;O`6jpITD$@ypUp?DfSY9Q2^DAbc4+49r&aLeM7*Tzxhf2
zYCD8sZ~N*<THt$XlU%2TJ3pn_=ZHS5T8JOPAZ-=bh1_p6q}+};nW)i~L1E{pBuh+7
zIP7mpVTm#)H@wGryNq-kW$j^D4LPWy@a~{@O-%je&Fqn0g?kNj(Q~PS-CK}yn!AqV
zQ}HMa#GxwE#s_u8t&u!7XIQ7!&*J?Q-Ro9ORLPx~5(@oWj6zX`>=}W8JXAL3>{<|D
zorC?iC%x8bfo4uWko#6EHC$ISkQp~p&c)?gv%}<q<lEQwUGf$$T@1?&nMvbET~+u{
zgbh1j<g;5OWL(6w8p&v<C5<h5k+P+yA*8dfxd1e_JG(_eR}Shz_;5BSJ=h`odw4O$
zlKhI=Bp_MTiDw8BRo7NKyb4<h4QDQL5K=HyhxyUNB*a?Pa=(q^hZgl_9rdVHJ~pp@
zDfB&2<DqT}jTjt5i@H~qA=k%DOaKzZ9_pI(@I$D!!E*|QPIXY7WUa1%`w7l@)H5;m
zBPXT-zw1<&!Y@gV6Daq7rItsC4K5(-@GhPT=TTx6Qjp7cOo`wQ>o=(HJ>sY^+{JkZ
zZ;}{Ym&cMgYtJVhO3Dy7r$wm@EG9Sob+*w1ZYoqYQHQ21E|Y%7Xx6?uyt0F?koEdz
z;2pUZh-~7=5QHJbsHs~7A*Wn-8%Y;VK5$mWqnC=p?rZI^?EAV=1u6O=8XX}@c3RS~
z{cL1K9YI!2E}l(0%eXaq!(FuH3n>;q36Fz}cGN)MlH+$g%P~Udna7{-aB|?hkW=`}
zjbM82)hwTTU$I-uD`S9j```mFn($%M^$6KXXtl9;&LN@AAS3NZ{7Q_aTM{CXx}JsB
z#k(aR4GOYF4HID3HnuA71l2+3j19sp#h5N*C3K&nxxl)E$*N*RVl^9{kLd!ufFAp@
z4GtV(lYgBu_ozF3FBr<7+o#O~XL^GGke`kxWSvK16nyiNv~`8Rb|j_TvQAe1!)kZf
z&X|e*E}-L=Zl5V$#W9et#xTIMiJ8iAaR$aY8@fXiLtCYz(!_rhM)5v0eZgJ2uI4Bg
z88J&|L(R6M&xVW<F(d98>$N5RU@Navc}1(@$!N5zvcdzh*X^<c(!lT&zm$in7hML;
zafGTWc84uck92+4qg&rs*PZ~QLh)PN-t^*uXiu@XwQ7I=g7<TrzDrxdF`YCbI?iu-
z;<z69tz-FeF|#I{tH}PWfywCX+S}AWbbbwY(RpJab4cJ9#Z1eO$`)93b?FK;cFt~q
zE<P;i$!SC3Bosq4%jw^xUnRhDE^Qn=UJ?Ehu^P4$abVr^rArV}xt{t)-f`e>Gep+L
zSiGw63b6*9k&3zQQ5&R#4L)OZ9lf!GOZG#F&31qqbUv#G!VF8+O7>!TFjgB|TpmNi
zVD6=<7)M#`$e`bF2)aAzYStqkv{=*q20`15qVH<Y<uuJKDr{`$AG)dBw&-<K8^f_W
zSmcbg=)67B($mOn)27Oh;~T?J>TrqT%Opy3PL8p;!_H7s@AZ+~0~ay`G+Te!eV6G=
z(i@9C-JP9zvJ0*WCF5rmIY0l(hm($-GnY(03slqn&-|^=)hqd&?@E4!4g|#dZ!7tK
zvrG(rTH2ZZ|D~B|+B$!qKt8Jt@-4gL<U|tOR@0lfe?mDr{YB0)Zh3qKAU8psVvi>8
zBfXxr(~cVI|J7T|+=NegdRW;oKj@-WlNf0SH(!CrcgrOa+10=0TUbY%!?dd@p<Y_l
zJ<p9e-!7e|p;gV1Pp|6EgiZg}%{H-Nx_D=mtE|2Pua*iH>erft_>8tb)tgZ3UEkl`
zCm)cYy2&$aP>Z{g!<Q7Jb7#$YQmfK#TO?ZET4D)OeuN;sR>fKB|IFGf50W*xrA^K#
z=sfP>C8p=kkRH$8bWQZLM++Rk(?VBa#EE`;y2k@@Iz1vb6v_PJ;+{xXzAe(_#NL!6
zEHq*}MR@fWd)oU{6`K;iTZkb4Vk~zfmeVr*5?8<Fge^Dk#@pVP@dhJCdQg$}f948*
zzp(?w8$_>)JcnOEguQ)89!am`<v>^~cSXucZGApP`KTfJsA2I{&sV_$StDBJo2;7i
z>zvu($x@Bgov>!Pd=!w|3tPMr)ctaC+n&0SJ4>sY=6zd0<eM*@4cCAVY2l0+nlt4K
zN&r;@SPU&&8=b4}ODCn+jJkuakrypG=5^~%?0MzKQQkX|8<g&x0KOVc?XLrnAy(UC
z6E;h~_%4S<ow5pa%=4z$_Kl7=F8;b4>spTO6a3lT*{B-fv0cqo1-`Qkr=Cl~Wo2}>
z!XzT`$iXf@ytFJFWfNFdk<9_NGbCp+Jp%E6Lq5|*dRmK)@<$dr6QaWwfMg;9;(>V6
zVMUu}<ktJeSHh~09MbK~^yJuP1b#elLzXTubkoV|_iTmc8zm_AgkOHIyfAv*&-7^v
zwHbVe<c_X~?gaq(S!LQq5elk7fI`Sf<jw*D$z-*nCppPfR__8rL-bLu5_%TnrPZb#
z?&1g)euuR#7rbP2?$4ze11%Ri>O6lYcu(9A2|-F&pxF6*;)y2s9WpqhQlo=u#kAn-
zag6w?XS2Ndc6rU*X5Wx1ms6;WvXKi_iAnzJ54zw0(Yap^Qs~3Y^p)%I%$vuyc7E?2
zl~;tI1Y(?wJ=<}^S>nNu9j#-JJs7g_gD7jfC_}q;d!A{uHaTI8p(%JsIYaL+nI`kA
zq~vJi1eyzTCQ$t${lN4id%N(hyiq?LhlzgF1@g2U>&BubBF{L4TIS9o&I?}{?n(R@
zign%j;Kxl+?!N$z6uNYIOf0-qjT-7qotV{@Cj4h6#?@VKOzhK%=g2se*a06>=sTCz
zUl$`0f`vVJ8O4j|GxHl&sh42duTN?&4(`=g)BN4;%?snz@N*r~QO`n6MV=jqePiox
zpo!KI=Ee*Gz`C%l6}F4(vMoYWRPQY88IwRB@x&Agkk}Sa<hm6B*Vu#L;WcEP4{OuC
z2Bf5vNQN}Eh)p$NiM@F&@{e+JD;a)=);<o4h>bHIaixEGzf7luN8IfhbCun<ovRgm
z5zo<^%d56%LeHJb^e_Wla)K}avINpjEYw;y_HkI+$cBO66DjKDsEm$xw`$n6_D#PA
zF?`<|d6KXPfEY!cCV#*YV3vnK1jP~IG~S{Q@9XCDHgqF!odH<-B7St4WaoiE{W5DU
zItN?<gJ1+NJsyfMM+_y-#QB{gP$<v(6qn-M4<TAn9pEjSu4N!xTbC0-b)tm&$4ge#
z(+N)eHfjNo8JMa-r1h{P$O)e@d1k0@Q~|wJsFL3wvZxdfO0gv}zGLwdnDqomf{Ttf
zFQb&h9CQr*1{MJo9DuFH;s|><&fafrYj#*!&Tk!K`aRwlTBMedQcF>98yI$j1-nKc
zq5G@@xY_8o^?h%y+mqc}gm>FbNrRH37u(%FbSN7dYv*>~fZ?}n5<P*(!#8$+(N0W~
zuCZM)KmG#oXq*OFS32x^J&D4`f+BwkScZjhx+G{ntZzf|1K-ZeWWq`$37+H83PIh~
zsgVzpVZ@i4#4mu|f@zVpV&&a)8*Gh4%vw!`u>pmq=~G#HXGmfD5fJ<G_lHrK8tKIo
zBuQN-oE^3p0c9_T{CvH{S?JHP#>K}rt?`k!mb^3$t=4JIKQgI!y6s;ofzWnHy6W7!
zM~Og`O3;|SQ!!7?*l2Q~{$VfH+cvrSzZSsqb?E@Hf4&<*?VR`??PPD$^12d_fW&Gx
z8ELi8)og^!()b0X2G7^Dc3)u;6ipfj*+#)jyIhLVZ~9#@_5^!a(iq56jy0+U*11<x
zb{oe9$e9UmU+v2wdzOt5t9PTM9n2QCNEjo@j;H8dw@e-Do;2FbCDAWv?DgMXdYTKb
zpKzD_po)RZpQ;ttzm)_fc$qp>Q_MJ3j~kP&ItawO`(&^b$qg>bUS`#V7Phb%SebNA
zY(UNjr*b7ehM!DCyvjALZ|ZCB+s`ry8Fq3BHz+lA9n#4_Un>`K`2aO<vkXb0(5E2!
zq-snqU~wluQeT9Mbd3p<FK3OcF`T|4ny#-iiJsx%U_XjvB*()^*ob>`0?Ps-ar|XH
z12fT9eW2NcnR^(O+8t7YqYZ&!5A0#3=;IKeD^|5|?!9N2ew9Dis+IMsQ5ZgjYn>d!
zW%huW!dk=L-7PFwHClyzxvpru9*mvo0{B*8+y6S=b;`=he*Qm0{Xb_=^Dzou+3&sa
z`gas3<G*bM{t2LCH&7Ch6_a2w_?HR)e_6CueG5ZRC6Ii#44B(|1H;qe{EnL@#7RQd
z@{okm#Ku$`mSH!CHeH`UW&C~37Y_@eOMj@}AyqB4n@?tOvmVNpsSb6S29@ArJrO`g
z$rHZb#MaEMg|*i#)jY*^`oRj=bPhdrBIt^YR&7`$_66z0i_k>rI#V`+6m}-cXf8{o
z1|GD6R;$D*q@4;CbUM9F-;8^(M29h(TxY9EU#bFgwxNx!cF-@HCAr=tt6h?&N)#l!
z#+k17fFoN0oEydfR?J)<KQ?a1#*#%&7hHF>^h(h65D^Dn4FVvh=9Y$ezg-(-G~FMW
z@;iUo3i)B;f?I!%Esx>_Z+<b)e6g?CkLNR-ZV+8gh0eV=um~7cNc_2l^$I~Hpo?a3
zXnjg*R;hB>tMqIE*NG5gAV-OV`DyUx@bPjqg>2Hy2{s3A*=x3o^@m3$Q_^lhw#P-|
zc>a_`z@^Y@!wjnLMowDNGsZ9!6QmVP1-eTc3QI6r0vRq<5(w?Rey%{1m`KMfIm7`s
z{m6q^(PuIn%JlTw3v#+@u6c61LV|T)Oy=Afrrt+Xz}2xm5PycNk9d*2w_liwF9Y1U
zEy6IS<*TTQ4dyC~N(NFPcOodqEf9lbM+)ssk{KC@N!WnMxkRf9KQ9NM29*@5R<`)2
zwuRos5e#6T;)jX1%q<b~Fas-TYl%8FOMC7&>5Ma@T+IZnG*FHV&FF%Z*j+cmzym+l
z)yoIsZ`}AZ3TQ-kqhx}eQIQLkix?b>O$#L}H>y=E?0NG60ASW2^%OCggUn^7MEDW0
zf2?KKv)M9i?yMZIuUn`jJ9*cG_j^!qW!@;%uJ{atNGt1vmKV0*lGdF^?00nbN?d7N
z*4{EYQgL1M_c5mSDXrnHI@5D^RS!vU^7uGW+yNte5VY7*$CF>z|8=Z$t{X=(V?;YC
zwRRea#wp5+knL!lpO2F(9k3Ct0GaxMBW*qyHlq@$*Q{;LX}Vtx-$pM%@OF%3Dlh<K
zffS)<q;|+92cCHr4N$W$CxXPtl%v2#@hdFg2}MO!E%PkA!c*KF>A;aOa!AEuj2d3-
z3lp2Cd^BM`g0QafsS~PFroj^{lPg1Yw_FXL{L}kx$q{<AdHm~M-~dbp%YBk-1nLML
zn=rXnK)Mt??irmQ)}(=ZAOaHfIC>Y_q!9Prg|o}Ppsx@&7`P9odDNj<hw@xkFr5D4
z(*B8ZE_LO)`HkDeSI;h5*9@V$hDT6$w>vlJfa1BGC`OWr{nb65>)12ZGWhc<U)9{D
zw@*&fXwfJw$~35(bUIkS*oX@c>Gl+z&Eihg_ga+|#AAklwh?{~<}FcOB58SdcS<a&
zm-ZLKbfvD5tq3l%RJ1bb^sq1^-f%x&Y^sh1FC$TO=tnOX!TGvHV+l(Mig}mrb2<1l
zE&}*?7VQP&#pBOEzfN<-<2fqaTubzhkj<(`MBT|Z>$?9R%=(8UKLe?NCH;?vo%}x$
zMa9G=q!q*sRMmt<WepT1{?py7SlhsUuLarvsD!AA@uu&F0<uA<xfMv7VU0C|LO6lG
zO%a%Wj=8<QG(oMSOK~fmm^wb;T(|nIww7wr;q&un=-5=FKFi~scEka7cjxmFyGggM
zfBKfbprC-B?#JHC<#^H)Mo!J89bs<U!P{BI%b<L7?u94v@$$yU!^Pg-#GjAPj-+}&
z2A9svTbsrtg%~>irOEw!`D|OAGAnLPj}*aMc2ct;adi!x)C=Xu6{|hd$*P34&pYRZ
zB(tF^D~^@l+Djkij3Q0T%dSI%W4c5heheH!D{A7O##I`fRYV>`6=k8B`r<45B<~c_
zIV{gN_ZOe5*2si?hmZIf#Gcn27C$<C_fYF>x5SqYr}mfJCe}y<8vB}SW^!(fo~zw`
z?rmj>5+Mm0PEZGB+Ed|HoK8gwlDo=O)mJqY5UjI@V$)p<o+n}TxbtZ&i7qr&d+vUc
z(heJtRhAXV4-MNlyFbO=Ne(^ds;MVUsNAyZjgPI~CZf|ypZ`2_UPe+qhl<Uv^&7g>
zdW2r_Um0I5WHhj^aTre`+{9{mXlA{1Yt$V>|B<&pGi-sY)GpC37t=$uIAixY^Yuyf
z+sD+E`9)`VqI(o;v7J~nezwD^QI3j9g-^UWH9k!m1I(_Kn)_O4D2G8dvGc8DK#Sg=
zXy@8BQ(n>+)+l7YZ-n!h3N}_rd|j&icLc#a=~^`Q8$y*Y4B>^k2O&7c2UYSGoP9jY
z0|ZDvmH6p3avRXMMx6~4gUBqzp~Zd+8T3vf3J1M}Fry=SCP#r_31N*fvL&a%DT@QC
z!%}5n?1`H(?`%yhy$;C{ame^*V)!&9^<yzozzbnvWJ|Z;9k&0Q0pXCx`wheCOba&9
z*vxPpj4Kn7WDgZaxj{8y4Z-1);$6GW5W{Jk8o&X@rWaQErcY{z409oYQ^Tn_Wz3<o
ziYu9M9Ftc+wLobB_I$;$vya|~6sC|~M@9#$F;2ECu6Q%3xpmv4oXw|LhI>!Z+H%hg
z0Sgh3yiEX0X2ZCXp1-b7)Qk~hA6?qY)CL@XT{%>y(u&{BC)<|q?B^($TjwdR(}Bm%
z61WG?#&pNZHqQM6V?mq6NSH-UtlCw2SJ+Y!tu43@zVbzdOZYa>GShe>(9ZAiN-+2R
z!DmSGEC8BwmOYd#r2_@`<i)d4Jf|rIpiNynS)BTF@oFP5zPbBg+p_4)X2t|dD?mKi
zOh-M%hgAGPJ``mbzqH<UwWn?yfm#UKn1wvug7Tcn3EZt5=G&d_fdn=<5UP+(e-PjU
zthuLiuxOZs<w-P)iKPCCl-ZV)yW+9HuWSG22HiOZMy@V<+(l$6dwHMdn9<V;sKh6A
z%(qjnfKW?1D{uncQQ3YMC3$?Sk%qG7-KFoc2(qXmC&r=g7~+5%ZgqA+;h|uC@Jp0v
z`;tAJ@6fPSqn4{JL@dc+)?zyh|JbBdTy1`EDqW!?qV09r(Txmk4WZ&aGK|<$t=8B<
z25aMM|L}4SrcQ6K-NP>K<_j*I($QD#688xo&r1$W3^7?&n|StFK+&wm9g`w0$Ltd~
z6&`+l?{(g1K?e2~9m%er2RCcjuI)Sc4RL-OIHMV&96LQ0RHIX3kn^Ih^ve`V(L;qV
ziLCUV%2TLS7i-IbASK+%Gt07%u0jMggyyP&S=q$})zrEGeI8gJ_odv$<f#nlJ8aEf
zUS0`?U=3zmXj+sH<yTo?rcyHa+&ozo<~YwBnghcA^7>8jZ=1>n-jazH%yJOxV5V}`
zJxp3i;L}AY2E$nntQnu;P%LJ=Af;l3JO%!`rF<etX8;zQN}wDW3apbg!=tnzeoFA?
zi7jd7GVmxw8}cUP&&e?-akI>Le(kS;(7{58oY<Ihr%E95aG6%I7^VOsh22;>&Y4p$
zRC&1alC<q7#zIyvBjNc@HvB9Z(ZARG(GG(+&NsJk9OtM(<RaIO#63@M9wI#=@L?1b
z$TV``h9a*<d-?%V_`W+HRaG#h0h(a>kiHS``8^X0vX~h`AveOvO0YPBT{AUAmnhmT
zRZOzpK=V?9A|cgw5jZ&c<V@ip6R)K3NxA^)^tK56h;yu_;6Hq#xmQ?khDs3l(QFVH
zF~)C=@wm2b$b(d902<;zN?lBG6S+`twr}q|oGM?PGa4Sv&t~N~dI96Q(g(GHa`C&B
z8%yoR-7FplLN~+ZD<k%k`qOOl>>|k>wKa6szlx+Ybpp&Xz~o#wEWb9u>Vos$xGIx8
z69F#B?OuayVIK7X@s3h?Z2|gax^U`2iGN?zst|?zaKUH#bFq5~8avx)+<oK;6f%QS
z^fUQyauy-8VtotO2m_SOjffukObq^vcEV381W1}3jK`wB^%xF$LzX~+(%wpDVRx8l
z-@>`ZC?<Lx!y?*d)#W2p?MZsRn1VG(1p)C2E@}`ISQU3KDELtfpI2;fbt#3-vRnEs
zhLr)^kamK18Z}#kf7uVjU|L&MqhXMOs$vJKFUHi)h=L9GBDXE}AaB|l9>cM!Rskyl
zJ9#M>lE5W(Jt*rdlb-Cui5+Wz?h3u(5h4b2^2A-%7dj6etekja)c1;YedY)q7uYwC
z{RC8w<^^2hCp3ZSi8_H-+2T<-5cUVf!7DvW;DQHdQT?&PW|W>SWHJ-Ym10g^cx5-d
z6A5AskjsCm4#0~B^IDh<pygoGeT+V|mlwG;Y7Stlt+Hkkd1K!6RC)}1Gzma+TlA%E
z_ipnuJ%^z;Txz3cMrlRe65gdBR8p3b)raTAH*A(y<#9b<gs5T4JN!{Ib{uiK5@m$G
zn3v8dA`q?)xNC<mwOX)8(L;so)$D^nSHr~+pxJ>3I=<c+JiZ9ak{%q*-=-=(gQy3G
z*MRCMW-btd{2_aaN~gNh2V8Q`(bgICi6eAftUWUjiyd-0aXr=_5}8Lt1#7U+V+xlZ
zKoWtXJsn4{hZER4!(dW6{mPd{2oA}WFj)$sPeX}8-h%BDW-m1Y9zs6<8n;kY$4nGr
zkFC3ZSeW!S^&{vd=L9_%x9?GW`bz01(~kj9s-YwZ)lZQnhSKm-tmz~}8n1v(*h+H`
z&tSQ+jdLY5bZaf2*l8rw0u$TF;~R-1cXYyt550Xc=75D>bA~e$?rpQd-s`wcc!V1;
z5~2LvjwKXRa6;qs461v1*u3~CCyfxNM5`pd0QfGRSh_*$Q0j88?avS)7<(Qiju25?
z2Do+`zZSpOSBLR0SI0Z_Kd+rnQ23`$Fw_;`#ZsAU_FHr=58zoStiC=xJ)j+5kM1Np
zi$uQwrY=`~MEI+JM3<3(pQ0|x(p|W<yS*ycMsclg2@-mz`6mR`<U<Yoy<Z`sw5$%#
z91}$U=u57@)n+j?sQw(|!3WV|`+3^UNx_G2!^_flu+{H<<d!JHl~k?Yh<cDCT?VUU
z>ddkVis*GW6MoMn#<@{6QL0f{v(W43ffx1efcx@?qi)E?Ee~@Hr`}Hx?8-8tZv?AB
zthMm%V|@DCJG-wks*$#5yykAWq&>_&O7Hb2yB|DPcJ`#g@6R#tIU@10ALP64@JV1M
zOa4<*NQ4H@_l{JGf2i{BXTl;qZWlH_n!{eU{C$n*1%=I<+}=wP6BGAx6%@Wif>qHD
zH;=!B<aaTnb*!aa{DAwXK~Xe6iHK<os3q*wh-nAdt`$n><3&#lZb)_CkvRMUGWxqu
zLUEkX(8}v_o33FMIxscR$^Fa3z^fqja7hw-NF91Ogc+}EC`EF|b`Ln5+R_d5wgmK>
zcdBtgD^tcqL~AWb-g}UooSWRLn{owxSM8erTvMX6+Ug5<W+)2BuB_V1gq-F^4%L1A
zkA6MTBrGTBo5W-AEw`Zkw>yS^@_@emRhSG+%$)vje!&02Aox~VeCGkdeJd@5*Yy($
zj>tIAYY97nv?e!#UK08g!XBuV%vu)>Wkbn0$Nl|_Y)ag`c<+hB#S#feV+k)58z+Od
zRf#p50xnKv(ZJ3aPXf(W-g^L!OVfIo!DopM7YjLrh0WAqlOI(N?Bs1-l%Pskf62`i
zfK;(76R~h8Wlt31I3sw=lKE4U1Z>>hPblC)o`q@jIno1g^<d3xx%ZOcBgq94#(GQ7
zp*I$_x%1a04sfccpKv~3EI(lhW{h6fsH|=tOI^CPzg(9$6h`;}70kq2Aw9L@IPx#q
zrjWb)FuwXfULISNv+qsSXc6}PWiML4@QTk&otwALn=s4M<kn`QM?`f}qKDqz;5SmX
z+3;!G;eyNS5D37J@z%>Q3=a}fuucCmPeX)wVUWi(H-^}*0=KI&^|4E68JcnbHH$BC
zPB0v}GpnkiwoVQs{*9->g>hkulZ9H2DjtRU5cy|Kl4{16csoJuOs*eU*hTnS10ra%
z4-LxX+97F~RiX*~7u?-efhQD`anTwBpP`!#R(7r8kNe;g{M3DH4~pw7S>>N8W3v3$
z=6(F`$bA<T%*gweNnpKh5(3hLSsY@Zj*aztmoF%$>ZvHQKE>s5s!#R82e5?>(<P}d
z&%cYTU5gsbSvW!daIn|nf%>2*+!`*6>shZo`cf~N5dYOGFxPw3G~$&Xr(sTD<4~-}
z{!Pfd2BGH0^dy6e+yXLOijK)xAYJg`TMy{|al`-XC@A7=Y3-q4_X?^VU9vVHt7yi7
z!KNalwRvAIg>A^*Mgx%p$v^Cn_wEWcVNlA1o{*#G>%tc=`0r?XQGj4^G8VO_^ClK9
zh;jw`WFx8@vFFU#nm1UBaih^Q^)^V+g^)M+a}{xg*U#d=`cU$PP#TVHutCohGALI2
z+o*DWSqwEZQX4Z(a91LZ&gJ;&lR{@38>00udsF=NMQ5lqtq#{l0$(p5VK2LdHGW~a
zd2G=;lgIwx?zL9B`DKmh9Pvs405MIYoR6HL<zFPk95iQStE5R6q-k+CdPmQ8I3Rq-
z5HxPLJl1rUQ0<du)I#sW;upvA1MIdaqDI92)z|+O8Y1lx8<Wr4MOce(oVw1Z(xD}}
z#uhaB)71otCXveEWqG=J8F89e2jJZJ;mW~F5Nq@Vj?n0t(a8L#I=0q9{lp-;!?E|r
zzw(3BB$_XUzgLM<-_M-l-#+vI%5AhXxBE}?c$LPM{VvykX{lCyxrE|o^(<Yzhb0Q=
zFT@Lgk-b(0)G3&In}6Z2AkaT8ZAGC%ecX8XMqH#%ZTZ|qpTx?TM|~_q=je&>b>=d=
zCCcSi{#`(dF;LWKX|r1NHrjs#BGm@Mclv>Aq=+?Y(xFMA+=u0pLPLKl*CX~rL`z54
zGzGF9DYnQdz<(IltHCWy299`PjHeXcHWF?YpOb0C=`2*B49RL_dtxioLKiFWro>jJ
zNKfXm15&E!>&TlxKEKms1gUzr<m^EatLPFOb4Kso0Wr9jvFvfd8>hrswG-T4?QLs(
zeSVGNvv7Acbp3C_nR<h+WMs>kZA~oPSh-stNSNH=>`j3+r3JVh<+fE&DX|TLf)I7(
zL8~DaUEJ$J$a1KXPMH&-E_Uk?*0U_$@%$}P%UB+bM?|xfxlzUdFtRptzDl+-31!i5
zBO@T|kX~HpX3)-uJbZFXMWqOMAC!35HXkZ$G7Za`db`Zmnqzj;*Dg5Oo?@y-Zm?`T
z+pRaHTTmM?3;+$On3)(Ys@i&svx-zseighs%3uPFirv)7p-46YJ(pI5vQ<$cH6utk
zUU;fZ(PX^_bq5^%4i|_r;thvB3}w_qukB9sn4}E$xu^2pu~7`l)F7~j@^RAK=t2>*
ziG{S0+PF@WB~-N>Izpg5GGUVhR5_s5HQwmxra&8g`2z7Sz{K&U-{-O&K+Z`f#oa`l
zZd0+5z7Utk=**V6&p<W;abq(V0xT0~f{~z`HHOzoGmK~qwaS*t*=apoj`%6+^{aMs
zY3Sy&M;f}!*A$8?JuG>>m{$<Absg4~jk|-{GxeC>-6o@<q$1=6{zJ<iCVdu&sJk(j
zFypb-nzGoifrG?aG^OIXnwg>8957P59=&Wl&>F;F`BtU%2G={S02sC^@nzQ$tTcZ1
z=J8J>uQ|*H^FMOO%Uq>uDGF?MjiC4=iZv&LRVaV0eL%5l%yla|QTxDhmh@ZBU+6B*
zDp<j_@(dIiOV4fDZ}o#xTM$((k_7oabSS`-tM<jTNt^$mkN>4-bIEUc!K*Xe9<$;N
z3S5^F%Ufz2<AC)!P8`NFY2uzf`gi?toiv`)HbwB7MS9P{)mEPSoPh6WJOwYrj7i3Q
z7*lj2l%F4BS4{g>%L?4@JFu&)MC9-VB!N7cOo*9x&Y^^~bUU0N9diI3;g6XO1M8t`
zS63#ME$(L)f>=p|q13Go1=x3R`2=qDJH#=Vxz!7{&Tlj10CaLq%^j|cPWOJ@-_Mbe
zIEygoHw^qFXcNfy-%CT>=Q2VdzSC8~02y8{;2UY7U|X|5JuhkTgLm36dqv__8E`&X
zpWo0$gBHl8k@B!J#MCLGSEvBbB2O3o$VBW0Z;d62V#hy|Bk~ux5(rMEi<7NmpN@_<
z@9%gGUqWE3`<U{R;yRMG&SpFE@ryAZkpBu$=N<AmfNy|O{>~-*_p}EQ1p`}qQv+L9
zoA0lki@Ck6nUm*#LaSm8dFOAm>OA}5GNErc=18Q&9;PLNo@mBeO+sNda(T#-R10n~
zo}!xo*Z=u?k%HGHqA(6#7`s$s&~4{za28be7QHP_I6E_!R%d@wFgsXaCG)OfS4C^|
zh`fC}$Ck}VaOlsNv@Cw^Vq_M=C1?!bH5hU2d`i`j_>nrIkXzXU&xh|%gh+X&a=0#C
zg`jI*b8_#Q@)s-EplEFTHxkoyqtaqZvn;xOXp1unp@0F|^oo_1i@%A`mP5MS(K(G{
ze<56vQ>s>%AhvLI@?h|&$?I*1wSahcc6%<`t*AcPEO*}A%!^~fRnqvIw(BNH=5bFT
zAz><VaPt)U<&heq5kvW-a+JG=d0jPdZt~|>f79c$FQ4~F!jUJ7Ja(pi2zsrRngT{W
zQAHbCa?dm2D;-2f1Ed`on+94Gr^1hx#Jl?Semhb$If$y)UGt5XMqV(>z$S5E-V+W(
z+>_^ev^0wiqCK;{9%PHbr`r3Lir;XW8a99(^1MKJL^A4zITxfQja9Xgf;yEdXfV1O
zFvIKLHa35ki<{d6#Mpk5AW5N13G<A~zA%1-+6O1ziPlcCwOU8D0FgMme>;{<&kI<w
z5Zx%+0j>1eH|idb#L+(~;l`iApi&N@5Eu2K)xn8{^{1pp2b_}>H2Y(&m83`|88Vhq
zfWmN*86^bH^+&#SIkyWL?C>a0!_e9a*Hi;Zh*5&H8qfB|m;gr$&A{})ZCXZz$yNlv
zLjp6gD_0w*R3h<|1`9|TP$WVnx#8w^0YJ0{2>)v2GD`!BM&q(gd%~1iG!fbju1;Q9
z`TZyT*6%yLTt}Uauy2_93T%~ilKLC0blt3;CWM3&P{(nV*}BNzZCfA-qjtfH?iM@7
zSl%4N+D0@7E)LR)SM!}Y*I&@jY4HHZ#>ETKDAq1d9BDlo^K_vx<*Kko=YkEypoBUc
zB6KzmHT0DBw#9aIZo8QikxH8OC{~(1A?c`^zWvN|^qdJ^@jYwM@zF<&S}^`G6pVW-
zjR-6tu$4g;Ew=*8t&u(x*jCh0Gly-=oX1SXI{VY0woPbY8$nK4`|Bkx{X22UlSz28
zu{!)*5`EI>1a(4yJmMlLhfWvW^6i6B!z{DNMh95`xS<8*U)>T~8AY*v3ZX`3i0XG3
z!f*z-@)*N5{4?1NAPRgfiJG;=hB!6jBsM#yXxt}eE!vSL11lbIg`+lO%ciwz0~Bo%
z%rLAen1HWA3fo`4fer@&PyFc<B`asGhirFB&ZkzSG@a;d5JnOH$Upx;-|zXY^8)e7
z<r@6izj@25gUk|^sOCht^y=K4(5v|ZY=VbHPJPQ<rF%;qacynjNdNK{!eX%aOku%=
zq$`-le2FvtEQCQmeG63zr9YnDEqUB7v4guV$Nh5a=@n)e!jJ^5G?kV)EO?Aokk^!{
zc0$%?1)DW)fKvNX@;OJxDU%C@xRXlUH_DnEny%K`zzU%ui(&g!LzMwB?~Aao$@OEc
zrn&js^4IQ5dvLYVzCU}7Bi3WDe0Gi69`Eh{iPHY(x=YhIJ7@llcnIH!$M$bqGDRhE
zg@4>FHN;g^r4<zn6x8KK#8v(q^8S|-Z?cBYcY}uZ4~g5@fQObM#ImeuqY1@qmH`DE
ztU)E0CNT?1G5EVbOZD#_ZUq9kX^ex0IN!N<IXl|1qBFZ?62-1EoeO|RMGy5l@O(4k
z!4fU~*?e#X1UDcPDWX`C6uLxgLlWfO$UG8XP`dg-Y;9qZA*5I(J9*7tdGMl3KB!Hu
z!{UrGB%wGXe4?av7Ouu*FQxE}=*aqx(t5T=URj^nG)tS))fv!&b#dzAu!PI^ce!vO
zKhM{;;6%uy0ZcnMpM3S)sIx)jg*>sjy$zfvvF0Jiw5vi`+YJ8mBw*3hPQkqTVj;5;
znt5Fm0gC-Q{rw(%ouTAk#cXtdqAN`sqCF0|9!)#v{$;w}Q|zL&Db<h=TqUu@h~5OJ
z!8ttmXQV{`5L!9)rlQ1*X^09S*cUu{&Pt>P#*7{_Fvt8-A+M-b|CXI`I`N<*d!McD
zTgDSyJNw?J>JC}V523p~pOSP;$ex$LCe*72&D_3a*-=2C94t@lHdmzcm?Z!b3>(T$
z#rvp0FZ*qCGdf0#bZl(AcqfNvpAh-3M6O?ZIm7}bRGDAdJi|e|o?1p}-q6Y4Uj@WU
zGzWvbF~Z8HcT(JYYI2ZaRC|qkyIR%Z$B}Y`$FGcS9#dmzLSz&xJ3YzbUHnLyu-3(-
zG+MvJ9g2a!7`OFCDnGn5OI1?B#e?S8oQ-;k*g=&)V$xbunne!#?D&DK7&KyNE6XZI
zlu6AZ#9@+p4KC7n_U2CVU2Lnr9dEDuk8|7b(j-Y@>ZJNL>Gy-kq=u0BRg4|{O|D8g
znj`pjf(Swe4{ju=O8Rz(RGzGR@hNX8g(4svcfHU^?c!(smNEZ~;yip>d3P-xPG9y=
zHC*@GyW?y!2W<9#?@Q^Y5Eocbsk2c^vSx`=B7fEMs%s6&RUk#@pJLFkXw^$xc*Ex$
zu>*<0`3#N@!gGOhGa=2kCe@LtyPGc=j-lJoN8Egb-+i_UrgbjJwKiCX9=1vqP6-M3
zm+88z=OHjNhgsGzg7|@f8U$k_w*3j4*)Ic|JEq3|Hhdo)cDk^OgVClr%s8_JzX5HC
z8gWr1XLA!-(*I)D>lS|gBUsj>j)KCbD{ecJ@&#>w<q8iUc8wYy#?i0w<n9o(W8#k`
zhiIst@C9vs^}t>!nyISkOwh%8cnEk@W7sOzPGw!Ci=mdNbrfT*s&rarzIAIpB1_{}
z485Mk=Yup;pyVy|Gk^j)M)*xS1i^U_?dSG+VOMe)JyetUxhKdv<VCY)wd!oA>HEbi
ze_p(1(T<r=r_miJ(VDp?X1OQKDQ~ok2PgM!lZFljNmBF#>7_nm7IN^uh&-zTZmzIg
z3WvL80q7{tvWvEzG3KWCbswB=6fV+;Oo!R|$yI!TX6y@3tj1gpMO;^Yn3Bj$d1o_z
z`r0ZL>=*k=TxxBlR!yx&w!WKnBp%k@r%6In$HBT(wdmFPSiVH8cp_eLZ>jF-@k{Tw
zd(0_Q^SQylws9z?aY+i_a!1r}V59rDp!WZ@ah7&&-+8S6F<;tNRnLBv3C;JZrsb3k
z8VSB3@v#=1%upGV8lEc9(pN;mIGobt+qUCi>uMEvRemDTS1@LZ`|0OwX+)g#gvA5U
z$vHQPX^tIY`Kptr=_*r8m<oQzB1?+|(;5u;?P6+o(YQLnQAiIZgY1k3oX7%`WfT@V
zOKC}3`mo~3AvVNU-&3^_e~0=su>f^+C-{C`&srEz<byp{(qrS-$Iy;s5@WqbV@&GF
z7mC+M1sG_P-(0>M6XMBzxjDfYwIvumqgh6}hGykZRE~%}^5e14li>L1zR@Zo(WWc3
z9nl8aXq-~qc}QJMlVVba@_0EAHDF|En2Id}ztt+53lv=>xq9Hi(@50<Uf*3N*ep!K
zvV3Y^ioFD2NO8Q$H_eLncaH78XOmw>o)Ts)J8%1^5=IrL7EJfgQHn9aS}E2ws}*Vg
z;C^AvG4j;6r$zX{u?Vh(JTj)LWCX)#Pyd16F#L37E_muYKuXGvp=43@HtptaXRzJ|
zuUAlq%3y!U3{Vn604}XNlJE@S`<CjhYgOKLx}Bysb5rcZunSr2TT2)O!+SR$d(S%+
zl+6RtfA7FFv_FiB0b179#WS<%NO7$YpxCT(gdYPa`nwRMHyRpp-Y-AEW{UHUg4|R4
zc-Nsll&c71)D|b=mvJb&_CTsU>9zKjM(GQ;)l%RT))xt0f*ge%7G1k`nv$r(wnvja
zi^%lFED3taf2vg=m+uZ)={Kb8NjX5x7sNI;M!#_2WGj?x--<%WTuJIp9T$+6UI;%+
zCsmRA|Bn@@r<Z2~`1k)h^SvAS_tyL3-w7)JSWQdYS^mcjXz{nPG>Ifq*HaCZEko16
zpa<zeT&)xb?`Q#%P(amlgVj%~w3y6GWp~81kB72T&uh&iw0%&$*cyEU^iSPYx$r6Q
zv2%joi2mdvWK(zce^4ftOC4Y@&dUCp_Uyg6n-zt|zC*C_&NqpTFu8`YP+9Z*Js5Z4
zFo;PN=}{ajY8yj>FtzSja&Mva9*k2P1LKPJ9*mvw_+;1e!L9lX&1CCXsIw+s4-u7K
zQ5&j=?uDBb;c4kz(gDUK3?2IM5nQ#p5O61$h}lA&y{h-+mLsKi`&OnKutJk1_7e%C
z6Lo%FqKf5}Mcd~13tA$;cCMRje8!m1Alh7&SOYvqaWuY><ye>p3>vVCmKUEC1z<>}
z7OBnd<Wgva1aq?(mg_QWT%-Z~Kq>eoGB!)tqytwSFPr#FDet7Cv<!u&<}ZZWarWKC
zX@--Muyj?Ib5LA)y%1zs@!w4lK7>+Y(UB_NgH?S%L8A{I6Kg0xR@mYI=-}7XyN$wN
zraaZaUVsNn$OEy`v5J>s)0mjK2E6nknWst;kMAOrV>mhTsbf!#5o43jJKR`s&6rAs
zDiI48NOsaz?L`Kzn{b3R)qV_(N229)Soq#(uJN3QuF^4}GSal0(RD#^oBbA}-mI5i
zijgH#Lx*i0Ux$(hyH-(!lRoC~=#1E=xU2}Hc-`>IgX3pK$YUms0(k18cjIEbaM?T#
z!w~Lc#PNa)sYYEYq{0r_;3``JywibCX}pgSZT3Q^g*H3^sAPtKJVg*}X9D+B*gzm9
z*+f3M#FDcj9xVMb4k^b1J*Nu0niZD|jKV_9U79nb`(*6u-U!m*`G#}}8E2u9<{s`+
z;6@r-Bg|t2O_5DTTIGhc9`RiwA%beVXjnQI5Ax`gQv|c~gM=r0X)5rRXrQe){^nR5
z#>{UB3%*RDjY`bXQ%h#RQP?Qz)VpyDg6Kh1n7|*X>_YZpLFmw&t(g@MLk=)+aXAW-
z1yc+?4K-gGtUAUV1|WHw5_B2Wdx4sJ@3q;`j#$b3x`WaWs*&Q^<bKqtm@mERayw)1
z+-1O1PqqnxcdZ<XM;e{Eh#bT{>`<hm?Ava*|4qAxySw%cO0k_8{=Nl=zgE=Oa~q1W
z>3DEqBHp%Y_tw{Qng5rpF4&}RYgW(tia!(lwGyC@XDb+zWHJb!k8Zkf%}AnE!D0fA
zwSh%zA^<^niKfMPCv4~%^a8hIIU?L4&l8--QOZ4&Dp{5H__0Xy_6j3=mtK#}(js!N
ze!xW8gbk{U&2TAj@fRXjGHC|=FR8>Es&t0LOR(iJWVPRXdi$<}Pkc@kO6?IyGGE^-
zV!!Sy_Ai$E%C+?c0e5-)P7<4kxZy+%;dj`7Esh%-X<)S9+$eOS{{%GuWPCUq7@3%u
zIs8YUS<uq4$8AUUJE|dC57Q1MG0@I}Tw>miREPx{<}huyoW=lYl-07)*v}zficq@m
zcK<1L>Gb2QK|a?CEL=R^x!Z^JQ!^v0F4mg*R@Kk{!E$W*;oQgwlVsfVWGG8O8dHF=
zVR@vpe^zbh(E5tv48Mu9asBdUTGnjS1kON95dkq(<|s0H)NH)TJxNmL9Tc&<$FcBq
zF7+*JxMT&@<egK-Ts&LW&q$`MiasWA$<!Cxz)V8NtNEGD_w!&Ug|K*t+lQ5g@B{b~
zU7{O7>lA77dB*AQpT^Q>WP;w0Ys((}ozHf*86W-(k9&rReSw)GgZ4$id&H%o*R!_{
z)Ec&qWH(*XHDc-+b$;p{i(H4jx<eM<XiEIq8c_FNI5IOguD52_cNh03KLxyfa`@NX
zN#7g>XirXMbS@WJppm=c?QCzM{q<?bcXGGaWRi+2HO;KD=N{^j?99q1?CJfxJo$3?
zoviC?X2p3N=BVi}Lh3Lpgkn>=@P{dp^t68}2*=&XS#(7ik7U6bCc#psRfIIrYN<PD
zqEZ(|;zO@8?XbeD1eWU51*f)4@coocFH0Wd3UMRnqg9sf((q&m+>2=tHa4~lM3)8?
znd<c*>u*v~_+1kndN;4DqmG8xCF$qm_TCdkQD8`;h0dGQqK+n}=V+UN+ECk|KnH8K
z#9~gOjb$89s7>8V2Uv-@CIEx4k=56rQWUN~D+OAEIiQ22RuYi1{B!bc<y-Cw((Ect
z$3!u<sudn)1}|)@8^z5P#7V^HGy-EnZh*ea4pVOql>ku{tKpMKHxn;Mf=3Zd5`EF;
z*1BRvumHa!YSVKn6d^v<^Po;{hS0YjUZ6xwO9QPEFyD`GbBiDw%y;6t=OaZ1>WE+m
zWDe>ajs#wJE>F`#;V=+ti-YQt984$0{gV?vq;^usP6;+mXi{CKOIS+XLOf+ZhqL$p
zF!qj3qJ>eGX7Z+O+qP}nwr$(CZQC|)+Qv=W&YY}@nCb3{=&Jbz=hNBo?zPu?Rxn?{
z><z7VEl|R43@t_%Zg~ySIM`Venqb<rV}PDEVP1KTU;iyOlcwV*jEv?4qD?-<IyHqH
zbMy<F$OEA2h!b>D5W|CMK@l*qe_OvT{3~J7cq3`h$)`W=Fx9KUU_4WA^dAm(PJXCy
znKM^?`;?kH-UQ%=Kxr%r=J4UUD3~&c69VE0+!eCFW^s0W4hbju2+3&n+nBjQ;!+dE
zuneF9ZNVU5NJA*nNN+OMlR(CAQ*Uo)yECgZDbE1oU~dt_nv79@nz*ip*=RL$+{tNj
z9UtLBLvJ{V{vj06F7ZqPE;Tg-?RD;qOA7ddR1QGJk5GTYdLoZ{hYY_w!6_-J+D++%
z12uab@=_B!HlooB6o2^-(1ikpZmqO|{>WJm>@<M>&{+?>x9;)jL#1vITD-=mm^KZM
zA_S<@Idw^dwgdpm<g33*^WK2#Nswcv^YfQ$g>Ge557p9PIy+>vla8PeHT#tzg$0HS
zX!qAq0sy;)yE%3sy6p3}qmX`)OgaXJF39h2zAR#ueK-inmry9RJc&RW2?QI$Jo&$a
zl28<FK(ak_Quiw~C<)B~IZuCCS)x6<UT_I6#;CVlsW2wVXCjpY0#%;_8DATpqB|OB
z)B%75+q-*qM&%SF_N_oR0B)nni!GQ!nS{A4uPv>xamWXDLZVTXQ{(dHJ25aG#b$yJ
z<yYsd^IweBx$cj!wr&q^N+fNBx!Jh)JkLxlEX8_j<@?4j`?~^c?29-O7KB<^Laa7@
zY>s>leJ(C<liZ91#^8vI<t{g?6a>vk!R<?D&G0UoQKizS%jxBos<pK}Os!o-SV}VS
zvo6aU;aGZyZx}v5930{DZn>TXf~MQUb^&52s_YfVjAykXii3`fp)dWbPmvF~5+r38
zQ5iUTol63fg-6*tPX$vn>kWlI$N5ZmV{G;uy6<4|R<VlHBKu@=l&{&EetCC5Qp=$q
z5bR981#+&FvQ$Y{6kz=G{vOCE4=FFx$To<xdojlwi4S}(7Fz$bASkQ<nNRFoQWs$s
zaeAC{iEWf>U<t?w`e5K}2(?2;m*nc|>z+Hv{Kir2&BhXZLnBW}k6>hBkqnmzO+a0b
zYTPP3ofR<nN}_LFr%CTS6a#8|>W3g`m1jah?K%)DDgB404-~SK#^5(h^%2ga{JmF<
zALvG?LXx+j^B8fsq}ws<c(f_0B_NSS^YHG|9u1#xUJ@KBzJ>~kBuH|xsR&+TPEmyM
zrp^J1UWBDE<PZ-T#cDiZA7qXN6gvt8wCYiNOBi2z--&A12yr`C1f~TW)if1*%z(be
zNI$07Spz-767g<}7?ZKtq;x4YFRxq?uVlnT*C=-Yc^z~y{zOop&wwmTfGu6NAY{-3
zRSC1=cOz+VRF2cLFo59&1ul>x)h%En2q2hap`v#47oN49>2Yt%Ji>{>6O?X&e>Dov
zu6r6z=)_kJsqg!gj8h5MbHX0Ye%Z!B{%!*-%|MqC;2il6r)8kD0>|atM!<nZ_lx1%
z`ydl!FupcVI+Q<zn9|+(Jiy>5?$Yf%+B6e#pzGl0IQC8P_gSaTySN1?kZ$$agAM(`
z3H#;(V}XcUjb(y!I9zZmvQtR_Ww0%%ayn@!*{&F<zigCBlpQp?;G$`NC1g-g&0keR
zep(Y!!J&;TlbRy#r!t9A802eRdVx6l5iHUb+IhSnqknEth88>j!ZE=#LG1uquOa4L
z8`VWQk?hgO5`DzlCgp+7;AD2g)yc2KCmUTwzima%JpiGoQPNu~qPzjaGffc`<g<W5
zu7}js55t<@yd7MeejPfwuMCO?e+MnCeH1I$6$Oh#{HqSm3$H8?M645v?7~iVj7z{q
zZbLmh^szrAPf{qTLTq$`J1xlv2F&+1d*1@L0jTO-@mA!xc7F*Fl#xEhH)Ux9HO|~S
zS#V&h%V$?J<BaWvvBI7J?)ox0`3KC1^;p)zsu-JwQE!iLCcd*j&Mq&3=tVEapFGPi
zF5Y4p`xE9{7|_2ZaaR<4C59Fk(VgHsqXN-Bw<qB87m}o2h1d2R^?@azFx)+U9bH4N
zR8^D8A0UJJIf(e5o9jp2awIN7l0mFq6rO#>C3z&m;F5q9wX!(_oQn54#{NF`r;oF0
zdAK*F(H{6ns0_K$Vrv#DVK2oSH~VJLi09aDLMxGK78o`N7Pm!&rOYsv%@2U(Fzo(^
zF%sI}P`4N9cqUhVX6+Juya#-XO9EdE{KwbUur3T05n^M}L^X4ENL1MQ>0s^sVH8L8
zSXHlv!*sm&NeDk+hp$b6gZbO%bDZNpmeX*h=9I=~f-KK=Ka~-r-_ix)^Hrc3%e1N{
z?znd2c9S@{2W5VqN4!dDEI~M_&To3gPjH>We(GC3q--_CWfZs1)Z#rJTa}`>3yZW?
zJR;-cKOCjoJ|Fg{_MBk_keUFd3RkZ+_JQ>`y1>wp*AidBNa(zOhZcp47lj{3nH-FN
z`kbfNxneu+tX}`cfwTkZ5iDQ~I?bz@-LOZ+Z|1+uc-}*I&E5d|4x5-MRQRDWHJgj$
z`p(j-+c&Ji6j|BDie6RQfhlsmDee9pI!t@JjO*iOay6RNDbZbx&CAKo_Gahe_=-sV
zfdg>1_jp#%=sTo*u5`7s{|wd>Sk5{GhUySzLbPqXM(+0u?gfz*-x4pl)q6u(5@>g)
z&$Ry@S(@v2V-5+*%g|dQFTc6R3JDM#5*$zyG;0L42oTNp2UwvV5>E`^q>erkKC^XY
z>ha4QRoKq#1XAo6>}{+5%FD+8#OdnFZ~1<^yL0Wz3GTC#lYa8N+{FgtA+>6wus?fX
zsKWW*(Omx_z$@wvw736SpM-zY*0levR;A8D&!P9LQ(2gL{GaZp|BLkQqM~C*$o8LV
z)kZJ>2++DEm5mf3LS(Br2w|vl7MZa%+@Yx{_Y+v~_xsKT1AOE5*xgvi33i^>Nh?EQ
z!=|8v2XNHgP;!G^UYH)Mmx+t-7PtwIH%LVeeLF~Z>YObg4)Dfm2kI6TJm~5Z29=jC
zHC~g(DEeoymBOD2ePc`&E;U%)JKMhYAs!tscfEQfw8ke#mTl>k-958?y{^8zgr9WN
zq~%Ko9xYmQEwuBG51nx#nr>DW`x}*Icd(sqr2#3L2v)P*2!9$kNg!Rj_M?>hNls(P
z7b0WF)i4HdB^Hv}AZ1zg?O{z)Gu$)g74W0mz#*d+G4A2P&1N>d7H%%KZLV^69QOzo
z*GfOtw#?c*Rj5}hZokYzk0$Kb63r=Dd*gC_Ea$VjX7TC(mDz)u`+*f$ThD2I7q2<l
zfM*MwZ<UqD@C;8BN=bfJK`jKz6OS0eQ+k!d5+>^H1NkbP7tc87XyW7XgkOlvv3444
zdorg1rB%#`U`GQ=oLC}AlgzVqoOI8<<Z9;*NfrV7=P95r(1sA$9w&NM&V5$+_L(lU
zHub9UR=b6yr(*SSzhl)Tkt)rU8>)m&%58faOzzTwu02fwNhr(IF|vY*!XI2hTD!%>
zXtDg$LsXquRpX$r^`YdQP=Y~yo>^Jl7`kf`J_MqCj}_$~G-Jj|aD=&D?z_dOoo@1p
z`l@J~^_PB71pqhuIq?EkHR_!Ew8v)v7HmirGUj`bflmP_kuv!31*skQR0w1=Z?rmv
zDz69bf1nmFkV>>fvOi(>vIK#FZ01zr+C#D28c|_65URt+>#3EF!-^--NYOk%u&|q?
zU=&(Ua`LeUv_T}IX6Xy*X>;tS*pM;4OOc&DG-v9~p@B3VDQD#RPH3W>)3Yl2m3#DW
zA&7JeC#R^PtAX(n(mNz>FLHWJnPPT}AqtN3#GHZ3*J2j;^GX?|49F~x1&j^YEN<T4
z!$CRzw>m}m!&2y3KEA@)Qg7CrA$QzbjI4NH^)kL^J2`aHsd2Ma>#KaL(K6Cb&7NxR
zuguuKZ?6{a4^(sdJTCo3EPh5a`q*>S7xn;#cr~YiK`D-t*D1oJPSNr*k%BUYUs%D7
z+kvn&zT#kf&L04?q<i?>hNe6dMmAoS*3Yh#3Z#dhi_8fd-eVFQhQz^Zqz>uB4(r$&
znC%D_yjjv{>yOOAN=vtHdo`oIaZOl1khnEe-F91cK?D2tr)7OAyKCF|Jxt=9?;&-Q
z=Dpy#|J9OE<B>|h_B$WKfB9zry)O8xWeX{*{|ABLe|ARtDC@*6a>D;A+2{^>t>wi~
z;@tLbR4!8fk_9>}+fX0Bi4+MV@hg2Uny;5=oJCeIlAQy0@8fJHytbO(ZKx(8t<Hes
zBazXy%{$Ysmq%kP21|(B=I%45GFWX+10<|V70Wi(zU{Ty`xVH`mY5E+nQZ#gp`&va
z?H6Mfr(Ad@8H}}E*w~tZOj%Lp+_c&lJk_oC1*i-8V)aNTBK(<V#`y!)0YVTtdqb25
zXThsScg+^HoY)`}Q(SnSY_CWKwUxiB61bQTHCED@?7o<ko~t5g@)+yjhmt6>e=aYj
z5VQvgDGWM@?*^id4WV91W6ba<vA=(QWzK1sES!ZHBWL-Rt6hWeh#Nx&-3b(A17H!$
zlO48SX`CYPxJzb;3Vu;Ny1WG{5y%GPaBEC4C`kzzCVKH(ALHr?&^6Nu&qX}~PH9ms
z<-etv1|z`6<x8AHP1=tCt_Exa)Z~=vkBo0ESHM3=5(}!z*?2>OCy>N;+%Y^C!P3};
zMfrrxzO0aNZPO-nBz_=P0e;}V-k0ksjnXk@{71(uSq^RMzT`ED#z1evpCG*X?u$J*
zSF3ngk%O7F6Mowa_yH2xGfX*w$Idt-Thlqm7I#JJ)h?B%_{|>o3`NCvyr2wPQb~^$
zXCoM9@$toY5>K(09k|uVlAn_XuhANE3EVuI6+(+5V90UxpUudTMBNo+6dzY3#``-C
z@iGfyq<{1dcD==@K8yGXO_Pp_1i=?mA)zHQACR^;y7BAi%MYgQwtU=da(|#{)F%8W
z(c#@0RB-9{UB>4IB+<ls0{3bVDPxz!s#V-OvhJG$@q=s@m5f2^5!Gn!>?MV9Z>OI&
z9k0(0J?rY#{J724-ruLErz*D9y4|;c0F;_e?%BPa(;IT^X-+jOBr^RgJazR&R7S5y
zns^C;s)SP)%Ie_X&-DdT{XB?3doxG^;JToZDxA?nPcIYq6fy#SBd&4wp_VUih&t*m
z1Ub9#$D$()U?H2OD!F?-W>G-<i%p_FIA@f>|7dJu1X7l`h@$GO;r-)sGgiIQw%U~=
z4I3he$l{$h<vQDyE{rX9?Hc{?q2e6#1^z#kwD0Q=)3#s9UiG(%=fA(5|B?sg<)kHq
zH1tGN1*HG;H~s$s*=$iY`0dSw|C-TrSmT|h)h1c52fWw-$S`aE)6HJLRr6*%x3qph
z8G$J=^3=CWM8b7P$c7gR2#6iwHa6yVgZos=ngM^~n7WR#z4OV7VA!p_{nu>q?#uFi
z?5{P8uCJy_H<rTeM~n&X6N&Y@UM;fLZr1UdUQ3mkQ;QSK=EM5-`}*ggwb~5U)QM!Z
zHZ6^rd-mVmx`iWehJsZ?MGB3s()e7Qw`__e-Nd6ltQh_K&{qLem{f~2CLrpP!;+%J
z^`v5knPN80kf)NAl&S`?l4s>C!K$x>)5mXD-!xezf>SM>io%KXoy<(ClSrteq)$w$
zS%<}{?;U8|=$X(yaLB%scjnWovd^^mm$R{{JiR9p+z)p7Qpa92B{d;6pQ*SW-nJj|
z>sUX82gcOan;#e%wL?&D8|8ABwMzwZA0PIV?J4ltr%Ju7llj~|&g(cFSi=vS#8|Y&
zt|Mn(s$rO~_h*j^tA$uhu#mc!W(&$AmOUeY;v0nS9o6gzq?(JwoHUawbNFL}aKaH$
zG(9YcZ1c6>jCv{uKr@{3Bu@=P8<tT-U%q)j7&xdOsMMS#C22oUz#5Hy8k{1UqmI3x
z6cOXIwNwm#TqjYYO8Cc20<iNL)|4_Ud6OtgEB_eAJy5Xi!ZudDS$!zpRY$SfJoLFK
zOz>mIi!tjR%&TpINQ?0uPAjL3k{o&XfDZCiF&FVceVIhfr>rBGrxPg(_iCyh9|UgU
zhGyj~&=TVW3#=2n_CyMpQ2<D~>Y;N>j0pkv+%dUPS+y=0gS~<4L<g1uJ+TP~Ckgm*
z<1<(um-!z;$f3ixD7!ZlS~eL3i%Ou6mWrZPQ<~_LYQJUq(1AEBD_rMM9$_b|zg(@}
zgZIsfV2Fb8M=)R_gxk#aF||!{mLznCXVga+g(o_ne9t!zQAp&8kXMEl;H_B~_yBec
zfA&BP9ZMS^YlNlqWy0Y~$F<>81JVwl$<ge2){TOT{rarHrkH!@;1U9H?}){0WQ!-c
zwiRfHY)c*~;Uc$M?TXq_{BcYwF@KGy=|80M4`y?UCiab%QNcqxJdp!mrmGe7;PRYk
zH&47VV_Ho2=?;KW1XoF8b|r6)iLHyvOqHdS&&muz0>xo58?wg17`zP(PT3Y@x|ruP
z#jc&?f`7+Dow0+8Ryu~)Ms+9?50<zPi$AvTxv5njDIiv{MUnJy(3keZS7PFhwJ>(I
zbgl8{)VZi>%q*M>jX(w0yt8)-Kx;>z2I7oqNT=eWw167$fGy0vh;yeIu{#Sl<C-+|
ztCB?wkZtsDuNw?GGv@wM=Rh%dRekP-?LRr34Kb77@jjF0^XZz+L;MTK<KS&ua28dY
zP;q=ycjxZw(v#lx^AC%Y>1p%K@_PTiKPQ8%;U(VIctE3)V}l`Yp)J4y&<j=<gSxcD
zvo8V2Qr#n6(@F_J@Kh`?Pcw(t^<4z@Ws(lRmT|HMzBWd<rXMt!%-3|d0(LjCr?JG)
zHY)SMrE+8GgoLDFwW1ShLeRYtS#48?_$Oz(I8l&xb*uCz$^U_^_oDPspY5gB)sB|d
zwM%Egr;v2imTn_E>Ka?(dg_34t{ju@zv3hIH8AfBeurc@EC2x8|GeLbs4M^4jQ+!4
z<YeNkXJ=?>V)Vam5C4}%r$ueo4wK_QP2lHB;fVJ|=Mt->;{0knvdDz^Di6WgIz#Wx
z4Qj1z!5<fPrae%9P&37QxP`k~&5pC|j<M+SoO0-&IZ(Je0u)}fhS%cYR{ds*@S4n-
zaiYbXsJ68EzK9In0AaKm5@biYyUZJ<+7H208xXc4-WEN1F}*qHH?L#8{P5Oj+w`Ad
z(g@N?xqyJv@O880RV_h7k}{mFTFI3!?FVeb(|Kb@Uls?F8R92dO0ER5ude$$+&lcy
zc{omG#n_Ssm+}TUa&3J$&#OeYPh+f4`ysp}tLImYPG<|(y*aa>MfLWxX9}tQe4NOk
zob_{fnBA804b~br%AD4~#*#g}YuDrU5v3hN{@_(KY?F&E&&hui!5~fkn<iVZ-UK)g
zFNY1J5}2c+@rfw?n%MIV<svhk(tx@h3H)Vv%eT#do`ODJ4@-e%kAiXUSPW64O!EoV
zGDsQlYl=s54|QjY=W8o*Pp#-%G1XVlHiG1WP)GL*iNJabw1%KuiP~e80=Yk7#>Vnk
zHwW$gfl}o`D)$SS_p*=xm8_cDKrr88rLq7O7bATVWhza)2aw}fojY3b1BhT{^G>1b
zBfg|Rzos`2@N4TI$`=>WsNKPt>~<Ou%(Uc$q*`78hAmKmO^PRk5^WzO*FK^&plTlD
z$y?$mF$;bvg~7Ls(U`*mBT+5L1En1v)U>UX#WzxQ35*}+W)Z%zeWb^Bm9)D>QXp$@
zmI8i`V-ktZpXB60TOlZuG}1i<=pav4PG`c@64sgbj+DU^qmfi06?{|e|CCLd9hRbY
z6a#NH0nd1-R>q-I*ew^NgavEn6K;YgIi=vM5tIdFxYMV%@tjn1Qfkj%Y~OH3pVtCc
zFJYABi5fQ`pEQjRKo&~(vfM%oaIWUv?&>=02ZHLJ$3a-_>Uyp!Ak0Eg9)v1NtMNv6
zO#^$D#NCSzdmpmqj=D7h$vKE#^RDe@Qe&iJv<8w35uJrB15)8iHYJ2vK}&(zWnTE}
zRQJ9xCTWUM&8~~Q=E=c^4ln^vxe`GRaUjuncttd#sn(Rd|8MIewVxT`=n&O@JGQky
zx#Nl0$Ulo?WA?}<@G;S#LpFKQ(UEFa^NR7q(=xwixq;ej6q2Pot9Hw74-v5fsLXh-
zYhWAI+-vHcIFm<O^tOk~8~<5uTc@lJ7E^x=tivwJ#*2`Hx!$$QX~5)o;LDKJ?v#ty
z-kX0^WhlH#3q@#!Na5X<@z1I=Hri;fV`MTQ=Gd?m=nnZzB>F6>SCTQXFxSZLL8Tvn
zFoJW~B7@OTV&TnA50~}GOU=x&x}WzCJBIg{)u_7Oi4{>=MbPF&7F^ovO`Icmv{OOp
zBEc4x%p-rBeT67wK~!f}d_V}q<i;m5#3<e*dRFScIz;LqC~jk4s2TG+9hY03Dwx}H
zsBF*+N8fz>3@HU5sEmX^pC$$N?A%4?9g!hw&>R)s%D9HcVtgF3gae0fnfpjMR6H<X
zKL1z(E&rYm=2r<9+Wu48pQHom=E6Zt<xJa*Q&X#2uB<`mZqd-nI!bBlsJu5XyXLrn
zKXTY#^ZQ@V#{W=!1eg(qj(#_~fM3Oj;=i4UibBl)IR>pv{+G4<|1tx8R5opYjUGNX
zzeW$;X~;t<RfXg=@nC7hW@`LUosmewstk&B+01KIJ!`pMUKJjr=o~0G^ZY8=We%6l
z<CS&I@XbFaKA=$(WrE>Pk3&BF?muL$Liu?1xqb7>y)FtGPSJEXs8cE&R3ZL#$ra9(
z2)5NiNP)e#%V7#krA1&>mh6B$hbM6(INh@-$r1VU&;^a8!s4XmJp-7PqMq)0Q{-T~
zdHLNFyrEWB&p$y$&_pnx*nD<C){(O<p00eTN6tK2Hl|Y{@L8gubCwq+b^<urqrjQy
z_^jYaH4bqdT;<7Db8!0&3M#<KN=D_~8w+<co&j=+P7%!0wxlx_B4A1@%hx^5GF-TT
z(}ZNU39xvl?3$jWs$gVA8<xm%l&sp9ZGX#l!|(?@F1iQDYh0cNuJv_f^M@%tP_)uB
zER)Hm#t{V{$>C-PFm41qNg!~<RaYGFuq;g$IaMTTB+jZX><p?3*}LBVwAu^<iXo<p
zi5C=&wR4A}RY4nM5eARGi-#mbY{5g;A}r~l=O@64KhDXcv7EOKRU$FkcsnM8<3gyZ
zM5B44avPzD`w>z)O&Qnz>t|ua7gstN7^ftyklO&n6o?tq<M4c(yfXt9h2&R{z8#XW
zYh&P9xJ!Rm8m{Le${5v%ioZ&;m=FiMEOr2s_V@9zToKaa`9umxx7P%lTW_f&eP58C
zvd}O{lW8Qz>3ZGixy)tZOm1i*LOD4L;WiwQ5Wv07kgSqlCB}=uNReO-k)5!HJ?|~%
zin+xr<uGD4(VjH@a_K0ITo?a0=3mizlKb8Qb_X;;L{hgBA<vPOS^78tFDoi|c(ZmS
z>NfGOAu2Wmnyd*Mhwi*{&0CjlZ_4<)gM3#uN#r8AoCbZ$HgW>%zDpKemmhTs=Bn45
zges$Ev{i-}z9pH<aw#{$sx$e0O#}WR>tO1<_w+pz17)@sHyY50#jsBd=wzNTV22%W
zgaOO)s3EemM6}aNuWDOXg<D;*s*85J#=XW5eL&8*%r_4@Z-V2|84m7%A0QI#Z<Ox-
zaHqzWT9fb2sR&?_M+fqc>;*cTPVMzdQ=Z>CI73VA6R}M2#njZ)!-doa99CsR@e9Ak
zjKR?ro-hI_#R6u2uZ7NFCK8YbOMV%S7|gVa$PEmm0wYTWwj8{(+mgn$4&JLRziwX>
z1Z?BqB?&@Dc8YeT>5mFQG>_T)gC)tvlqNom;;~Z%N{J`~EE3QM6Z@KcGT15chxKOl
zWYEVS&@66&<w!R~nl{_2IU3@TOmv;s>w|;4JBOvdKVmC4be-8zxnt!KV1GCFTO}1f
zVgAoKQtD30!TswNOa7&8|M%tD|F3o1!hng<$l!nMDhg58aoQM1^jWPtz2{}G0EI^P
z!m-Pyv>xA3`PQ^|l-TY}!7K(eC9-ff6V+F&_}IKTO8^jv9!lch=K1n?hepeY4cs#%
z6<I3$xYpqV$Ho148QQ;6BZ=KC7%!K#B|Uq)eB9NO<N7I>K9$$3g4r)YuTtkAq4{fa
z+N_a<>D%Gwj=cjN<ZsMbhLeRBBO0_5MIEI=p1p7u)?!%4*NwTw&AZLLHIyP<Do>PU
zmccrch)=XoLCmwxUaWW_joXOPxRBuO%GmO1iuK5xr1~dIPaIt$LAoUgAtr4uW=UJ5
zBiy1|U#}#qJk><nxOhs2vIqb&>y%*QCT8YCjR;&i#brUBG?{>5U+j%~Xsg0mQY|je
z)>DNpD8!NJ+)WIP<}>>!_Ly*nq^Ch~LFU|8dRxZw6nAF9?n?He+2uJ^Nb$n@kYXuA
zkXlxW5XmMr*=){1b8I&`$U|9d_}t4tvKZm06&}t^lZege3{|ldxne>XGlNq-nwZdm
zY03~B9YS!FsSL50BFVH+hHybX5j>_f71bTD`l4|Le&Gkf<KS4rc`)^ErQrpt$lH{Z
zGxjMk&--2>tH08sk`$cB<>VBCCv8h<aw6E|v`tolXJrD~a>};<GD*_d=TtaxK4m6B
zaB)r1s%P^wqC@_!a(J$%^UM9i!d<6kE>COn$~5Mcnu#uRG_70|+?Xqk7!l?ps7jV3
zjH@)3&39`%Mm45~XsKd;Y~H?q*Ye{FcYC{r%kCvTDQ3fdZP#h~ELGksZfRZg+%w|5
zD`O!4z$yln31z0zBYY2f=ilT^pgfV;KdtQ<`3>+Sl$n36PlstrTGHhtSrc<^LfC0H
z?wPKEJiI%3MPpT)U2<)HFW)<Q+p<-ep$0$gqC&)ksauWauLoslPKy=UTRj)^r~3{h
z;&${T1_>!Q3+985C7d-)=wY|6n+p<Ve$Z}kd2}BiUwm&x2fqiczP|OiaIQ=<7EG9~
zybqD05yH>WlN1$D#B<~71t1P@94Wa-Pq1+4pgc|%4aL>7;84oZcEdmDLesJ(ay!eX
z2I?HPcHMf<FHaUth!-dGz5TMAA2o2ELDxQZY&k~5xFFDK_ZawyQ<!9X?K);&DLf(l
zb0M?f^r?f%<40l=?2I0oVB(ViM);!)?{1}~O`a$WU)d;od-G8U8$`zDsThcuRSgKH
zXJS;T12Ysjnp!*P3-xr~<@R;UybrW$4Fu>>k6J;!r`d?FhvuZm3vyM@Vq=4MgNguV
z2Bqd{%PTdbHP-Uh%+1WbsACVM(IhWUF{A269+(60W#gymNniBC5aZIt`;3r?<4ac7
z0%}3Eclk0L$Appbm|E0OZ-bnpqgsEU3=}G*)B2TMPyk9E&aBg%yklHmk8SqJy9gIZ
zo=dFt`)EHUI7iN)8XlkPp@rHm_=$6%r=07NO)tn=L0XHVWxsl}irjg3rpb4LMLer|
zH9wE*7hUL8$RpK>c1qz0RPc9=$_9C19cHfA(f*#SoOLysHZA`Xx<t?<YGLIKMi5ee
z)IKKRc2{`wo3nkNZDpi!#uZz8Vj}6VGnLM-2FeFpFsl&QMo+~cKSrd`E}XCLQ_y!F
z6qa#PGOuBe2uoC6tx37^w-Aw#R_C3Vdsg3W+XAF?=`bwHzRpo#e_*ijwyphhmapiq
zui_6J_?y=OgK)a}T)D5Q*ebC5i<0pB_|OnocfRJI0n*<<Zy*u5;FlBr`L}`+WA=~u
zSXN`2SeES)8S6m<Q5Kmiu1qYL_T@{5b_nGr@+lc>m#CCx9VZNERKvA^#tD~Fw9|jU
z{eylQun7Mi8Fh;+Veq)yXGEEP4n>!q)kD}B)*LKO9&I;@u`-}QgAa8awaIXYm{`65
zWSz+!>!_Djj!u?XJNMsc*FOXfL2uBp9_*AY*O7vTe?f#@R*0Wrb-eD6pq#U)(diY3
zv~0zC4nvDGH+Av>Q(alAD9<)A#zv9HJvZAw9abmCeK?mn&#5_i$+NmHg<pwC_!LF{
zi}dd3(Y}mpoIcArNva=*J1XE;YM&U7p<mx}oAz2?DCb*O`_DtRZeDOjt4RyKBh$B?
zACW&}fAvKC-s)DDwE7f(yt`_2;{(Wgc8tFl8m})Uf9RU;&?q^%`Tp(v_D^CMrH_P{
z0zL=vvCg`t%|}@kw$r8b&n}LA<;n&PIqhk8bqF3L0wc$?cbG4E6Tr?AsFC5r7;toQ
z22-x;N#Fir%sse_Bu04F4)<V7)wkAEsn(2!20%beJ?a@$d&oS=H2}9DS@$YH=tWZ1
z)YGy2I<$=-hbXfw=1Ta10;DM?ko1t{4C7XodQ|5e@pe?p+~EQv!5CWGwzJ_D)s@v%
zc?UP%qhV@OctJ$J*~UZ<EtBPw$RH~3aRdOM#~4jx`!&FB;T8O@fac-eFTRn`e!xlw
zNx#$BbIGXH>b!k-fBFlh&D8SnmTdJeBg0JZ?6=HQ4X-NIyLuAsQVnYqp<{FqxHKYK
zFwJx?nZapyZ=8?7`nJjUy?i3pwtBaKkxb@5dUvO4$?N+Xz7LPj_wT0mj_WSU@Y{ie
zm~t&!v;NBVY=ijU9jhZui530qm#mKvKK~#&&({L0)-#ja1xW)bhf^1UfYv#qKsnq+
z?!2bxLE?7X$O||L9JEI;WCY}GL#TtklO|_S(Xpy~<;H)|42w!)m4F`8d0y7@B*4kB
zOL^|oZ0~3j*nOcK)pL%i%<B2Z0EzAO_M=0fZT04Hq^&;`6^$6qlVhj|Wt}M$I4O_L
zr*{y4_jiB{!G8a5>9YUe@Rd*|B4>gE00jS5C=&m-tIqH7>KE(r|E0<PFF=nPHJM+a
z$A1K9>$Rx$%VLvc0&p?M_zya@fOX00lL|YS^NBYM)eun<8&|)ce1s$$9}LE@n8Bh7
z*oWAL*zC%q1V;qy6Tor(43nnlhVa`nxo_F8>A7VvI?Yr|zkkH8avQYYJ&sn7Ja`5d
zHNckJ@BAIEM*gbh4!0F%RE<TEn~njlE|6x_Ga6RHXa1(@hm>b(Mf1qq^rVA+x0sIJ
zj2Kgae&1w|<kSXzp7ejC#bgFMGVkt0PE+3cG<LJG0QiAYQ|A!h-h|e9cG3tFUNQ);
zt!JqUO<SP6?O#ziBF~#iHh538o2xMPtT6)JTk7TsJrS5Eqvw4%*ADVEHx3zBAm`!_
zI27Ag6@=TH9KP4L@#cAWpFgK>_`2P253(!RnM%lqSZk3zCk>n56oH0R`9ci>_`O}Z
zlnt*o>{!xbY;8ps5;e{>tV4AMMYuOixnt<TzVgM~h@tDk^fb~LngIP;+h#Qaa(cIU
zgT7r@?Ge#+8suAwLrep;p16?MD!D1Hv0b)W2g+IdtCqMLhi%zbDK_%mEpK;SY-AfP
z7``>siWECYZ}VNOKR896o8u6iP^;DQR0Rc>POd8kB?#7Az~f8Aj<#BSZ5Po2^ERe$
ztB|Q4)E%hCPp+dtaPK!v{?7`p`fs?8+k31Dp?{~i9r-P$V^A=yJanr%uWw=Pyn>0l
zZ9?@hRyjnRi*&oubh;nw81VSzI;M>-_XDD)kGOPoZ;_hSKK%yxMv;f%dl06yA6vpE
z0T4h5Kp8u*;y!R3TO^H>>%*}W?DW8eTac|M78T{KI~vp5N@hf)3+(tYOI0A`{mWIg
zi{!siG;@ZOEYhnN<Zy=rlV)d{<W(7EC`OD$l*?B=IORL1X$kQwI!gsabVQCYDP$PR
zvGuDBWv<o6B~##us=bby_F{a7EQlI^fu}@+${Cc=O=x4uRiEvm9|zX&F!^YhhADK#
zLppXzE{88L32RrpYp%1d9ez50uuZ5?(xuY&w=32R5d&TQB@Yog60HQtH<)J|OCP;Q
zK*3HyojeQVj|_R!5|HKna%q#h&<n9s{v-?9L)nT_Qb}s*AW9KEjFgsAY2(BTg2-xD
z-rh}L37QDjNtlx#m)*348yBbyFUG(xU%AAgtB^T8O-^*XqAyVnNYciv(T8uvdW!s@
zC%cCH9=1`EPkJVoi=)wEpq1uXatx44!H$)>&^B06tne?5;(I`p6r(HX!vzk^$w`&)
zOGQ<-b8&%M-fFHaHbY1++llp2!%mKb&d6-?OYQ2JH009T`<y^kHi;=6!8LHe*O<@u
zE%%G#ngpXtluIO5n<0Y>K=htIaf;;>#$xMKjYAf+>k7Ix@8L7p$u!?{!&=}v)K#>*
zrgU=ir|DITU#RGdn{a0TIH(d*fRm;^bj&GJ5F^)4w(BNim`b;GfXalmxh+C`JUDu@
zW%poik&%6>2;ra36@ae~S1G-NBWY5}gi%$h1lW;~DwsgpmQeMwf{;rJKcdiT7IvMw
zuH}cN&c7FQdMJEAZ`!oV=c8!nF4hEkbH1<}pBE#91By{L%j38Q3dVR1ojn>5Tn1^W
zlT?4>V#BT<xx3=zrw(QBxacySc8`0Eq4D|iR42!_p%!Fu2QO@kX4?E&WqVniKjE_t
z($9}<NsStAY+77gJZxH&>uaCZJ|uEx#cKM^%mhd`PA!m1X3=&DH<lUeuPLJ!q%AoI
zHALUeM}kX{)w)gzo$EEA%J`O}`trLpc&Ts_DglH2wLeg{WfXz!6DhRME<=<gnN={Y
z6-i8*6gvuVyhMU#6ay#g4^QQgJDk^N&w$ZjF;lJ}D$H!q3@xd$GK?4bM*O8lUrbC`
zww$Z(?&*}Ek?kB8M;2wRQM-ttrm(*Lm$@(S?UkthD{r+R{*RYYMGbjnIXz`@MG*mE
zJx3Q?Jv&>Y|1pRcqi&P5@!KD9tyfUWL_?q5QJmu|4$icd(ke}{1z?dW$2N!>hN$I8
zf+4v1`Ep%reE1-cm^A_5xxQ+ar*q^|ut@INgT(DKb9~50s^Hw^?bfEdRp+NAJIc44
zrMPXC67Flovp5mvMFQ)y!U>mX-qhnjzW~v<h^SKObRsdZ0<K_ZU*?pt^}uYRW~~6;
zqWL#{vq02zs&H;}xwd-eFPdA`8D->Jn<9xu1|;i}{n&<ee7e!Tb2rw2ZG2Dqu59M+
zjoQVXr>7TRj@)V;A!&-$2gbpI1>~th@tW>bvWusp#Ol>vobAi9#Pa=>wZjM3MNV89
zpP#M?%7&~IVr@>JBjo$)?%i3tbFOz+d<B#nE(HfkLr_%@&+L2itdkDqN#9Gf{g-Pu
zr3JwdpPXvj)Y-OYXS$d|NN6xsE5h`B&3J5eGa;x4^>4jz9k-%>2$~2f(si+FDvIb0
zNo^;Nn}R>WrX?^`U<xG)DVO9^KWddf%O^u`7Nf;_X>vwaBBg0t34>tA<yu|5#zZ4=
zIXL?frHNgM<kLVQJXTZb8Fv%r6<Nn6{<dry?ZNr$I4Cnd_)SvD0nu!fG<}VFf&-XT
z2Z^70<?>7IeF6v%!oawSZk}QH5t&V3lO&fbvP(3+ah8#Z54MQatz%V_G~TV@=8jDT
zA~gG<=n{h;#Ke-9!CKrcsDEbD4(RilbJdcfY>sIN{VCZib#3-E=#XU+chZl%p;6<B
zX?U7g{$s&30gryF3wcPBAn+VNOZdSwXL~Yzj|Uwh_;_lE5kX;=K~bw1FD#htkVP)w
zpk>Jp`7|>?r}ef?;zW5PbR8>o5I|dWrO<KH;n$P7WJro=F#<6!;55VIy#zq1{~z1_
z1;)ctxEFpAs_?y_P(gTTt0}_@<%zyQL_-cW$#h@mwFzUfG=UEZAfV*Sfs4P?LMGq<
zg5DH0EbA^-NY;G_(o!x!#PXOS4gp2bHJI>uBJN*>mq=2sL0ZawDjB=b4i3UDNc|oP
z%0WDR<WRG|va0&av=4fe5{7gx76c*f?uc)1;{>ak@FIC;GM=7&16}aW?*ibVpiphx
zAF=SrY(oCGrwV`gMT~<(GD{BtLgpl4_Mruwn1X|f+GEEAOfdq7KbFMOLRti@l=WJK
z|B!JKln)6KAa;Z}R<}cgL<IvMbUQ}KuQTFabtHHLcZ2oMxInsbljS_5+k4ppV-Nso
zO;CUWa@-cxvFlCCspwm?algsC6&@LXnR1x<#hTfXR!Kb|l~)$NVe_<@B=XC@i}$Uz
z<44bv{{H#Ol0+CT%f-`iviQc|rmP=<*^q20#3ejhpwBD#>&%vGcwWZWNLE!74h^EK
zXqC3Me?^Hkfra8;m(kuNa*7|tt_WfZ{?tP?Btou9C(zCl=R`rq>gob@EO8W5bBS_{
zskWXl7Jb^pS2;inXL7n@9qLTa-HdVrU_SS2`^%5JCr`k!i}K5$-?>3VPa)Q1&tnwT
zy6{UQd^wz)ip~Y3%Q@#F<+jJ<i>ZX#mIS~m<3ROlG!B7>qv6MR3Q)Ex?pFsYM9yfw
z@|cdJ!gF>cWH=j}vs|pu0<nl+-f~s~d-Cg0FD<H>jH&{P%TeTgvV0%fvI?B``?3TE
zPgKbq<wJXL!?OitcthbfezYyV!O`8i*}T@bdIw*`+jf*d<zXFE{n^PLsUYk9o|fM2
zT*7A3V=-Rn&%&E0;>#LZ>AQvdxxJJaOG*?W$-^wPZ~hy%1h$drKgYSNtsi@XSqJH<
zRR8l0RjH@6?iK|92_@q7Md|tYVQ5r!{LT~_n!3#TR6T6}+`x=%6aoRfpp<8T6)XTy
zN3o}ZEg0Up{Z9N1<9V4w3xkZB4}h>0c9t5tpf8V}wr@t-KEhcinq;SLcgrrE&lGE<
z3VNpWTJ3Y)ItYe0P^DK~X+~Y0N6$epU66LoQ4A?oB}nSSNGnizI}5)`p1hU@6RSLo
zI2WK;48a$Mv>X|i80u7rF|$x~pt3l_%wx>h!LWs$Q0YI(RD&BIf}FytibKxtcUzsu
zStGp7&#!7$a<hY~amW)pGK+7Gm%A)bWKsX7C>XJa01Xt<zk+m$?v65j-CkjnNXX5P
zE0->Z`Nuff5WpDh3ojAutqxb1-4b}$_DIM=cF6Rh<>&tLg4g>%g%DvcGg6i-s%rw<
z7;LGw-2P8csyZq1b2M^o<aDIH=-KlRi}I!NPu`I6;Aqn_VWg?htZWWmXOZWJtHX;e
z$JbLE%cH3dc8vEL$MeDa`}_IG(?ec4l1l9^h74VT14R7jGks`)Wds_v79@EE55t`_
z=^o{9Xl_Mvhos<fn>rX;UP#bvC&Lh7V8^%k9!S1$@MI0hH7XvGg1*z>F=&Jsb)M-b
zK9M;7o-KA6nGn#maIcS-MAI3~um_?hXMPPcK4r=ZM#o)0u>O#j7wZ;>+FIIwSP#R6
zjty;a|9sEjzardd=guo<^#{HFmqS%A@zwt1uei)74FJIM-)?X6A~Jf8CI-fOh8A{u
z@{Sg+2F@l@|MSsmncK=~v%O{aj!NFmmdL|+U6wU#ySfNN%FvJ{_KIqA`>!(>Ze%d^
z3UbB0fkw~bkMAr8fOufAvBpHtqNynxB6#)-mNGB3VO|3q)BgL|=fPvt(3;@%4XSM>
z?cs3W11XN{k#~ob{?ImY_)Tr%-u&NTvxf8A0|6h043La+JF|=2Et7}~Fb#MyTXmkk
z{mYYqCpp*RC$TKK9g%>(eP*88JHO4JOYfR{U5)ZRi|R@gq>b12B}#dxp3$JAcyDtK
z6a7gtgFP06j49IG0}Q5lb^Zz>83+~BtZa2+6VSlTFsoOrS|srY`J;VK^K<#6;P=9S
zp}_)_@Qq%3B)8nm{$)(7{#sjFem4BM<0eXYh}UY5tu;;1P3~ANKQFIGCs2jAmS9!A
zq8k}<x3adrW&9K=Qf5sv(&3Fe!;7`I8%||yL)7w-709IxO_!VPkO!+E$R67QV|v~?
zr9dfG$;cX%@nZ*^`W=-a7@s!b7Plw%=UBWwNVx-UD8d9(gYWl?k)!3O(@ci%G5q_%
zEwoQ!-EeZ5A))Z^Z4EeFld6#0kz_E1QLT@b;yGInCbs>LB=3y^9E)2y0zQ%{i_;yq
zS0n6KZ$7&pp!)1SZ9s_`wcb9`wC49BDgV|}<<@IH7j(aGxfsS?IEt#kt<bK(m&4Po
z{g1^oLSI-4NJE{@rn~p0eO>Gl3>p|wHM5!Yo2YTG*m!Qqpbzm^?aD)fzlaqfVe-PW
zINzwGl^mNhbF7_8ey)aJT@eOu3EW0vUF0rivbhCYl`>6hZ@I1#ey*ycP%ZLChh7zi
zZn&=Y)u!7WqB!oUl?ycgUS%ZRIfz(ESI7@Zv_JJS=HHuzSvF%SEYh5b@2=t_UFn-!
zx_LB^J9F#F5b>4IS=KRV#3MpkZBvkQjV6RG3aKErVRxrS+9G=F!c%rL`*cUgMGLOR
zN80Rvr_sh=>9%|>_4TQkYW`<Itj)i}EA^%h^D@mgxAUUdYl_ZvsM<`S)&Uk|1?w7(
zQPwajiuyyL{h_XPc)o4<riIwGce7WwJ=*SBYaekCmRKRrH|R^%rYrOZG&Ywbe^ws-
zY3Q$vHC<DweLHe1VSFi0RAfAQv<V><mGHY7Y)GbOT5y^S->YXHG=T5dQ?b<qQ1mI)
z+k%Y@Rwa{SG`LhJC}I08rw<e%lx^2ShcU^4lnS?SWs_8}L{LR*(AgRzivHdVQwF^I
zUT%<U4K<=TO|Zhs+EfoUM)2Ey(pD@7w)I;mc9JaMgtUi_xddv9<(l~UXnzSZI~(Ir
zlJpI{Zk4jB*Af)P?8@1Z?f{v^Y+S`(m$$KS*CL&A-WSs!srRzl^tT{}Y&6DntrSRz
zlRTsOH_8=f8n1_fxK<C>ciN+Kt_Izmo|`&*46OZ?o@*Iqj^ob8E5nXBaTtWa4I`v_
zY2-$rz)$2lG`=>~;f+*hg;LCoBu7ah!(I)1Bh<c&$cn`C+mqiI;a#%n&FbL(n?yWA
z^g2UI6^k4Z9Oh26U~);cmopZz*E_z2FWtcv@epms|4+MJ0e<_zeRBIBZ(bC+&=wG0
z<2S^?kGmHGf9>np>*5vK$-!|a7*{xr|5f`=^cYk^dwai`EhNZ^M2ORz_$8=()4Ml@
zF%vF88b88=AewOlAtPhL^qcOFG3FQ&+gVE4%bqm)eZ-yzBtRp&<rcm0WgMY)gRpdf
zociD5eyOOWc+IQH8pQ_XF7<_rt(ecqnW&?{^jc-=@DlPtFDsSH`;e^>yy3|u#@j$f
zHzL*POvs>9M_~eiQz@E%Invj0d>H&F%*2~AAV@#s`xwes7?Q>h=-t~Q%)$;6{Hg5<
zkRwq10P8aVw&d<du)>hy3kCK;2&7e@=csu{3U4^z!T~leZ40T;W!Qfk3EJhix^^P3
zRAetL{4DUxA2gIKA3S8VqzPPzc9dZ&6z*@#MWytM%rUVrO`Bh6{Jgh$4mcSTKHfF$
zPnm4p@qiJUJSbCk`R)Qor2VnX(|)r@?gPvK5CsLBGli1_(mO%0gL{C4(%fj=q1zD-
ze3HI89B>LFI@E&zDC9(e2Xx4L`o!JjGx2su29&J;6-5+O6rk*AZ6_z~RDnoa!UDZg
zrj-L(ibg09Roj5hjs9mGpo^bh7$j3X(=dzb7F`ym@U2@X%3M)t_{qVb<+|`CE7uM$
zG@U#?Jia!o)&p=B?doQVR>)f^kv=q+-w<=#hfC7n;PJ!8oKX*RWA5Qvw4y@MTjff0
zviMol2jgRNj_W^7Ozrzc1i=^cV+l;hG|=a0X>2nsusc_b*$P6MFeXvN&%%+68gqLw
z#>GXd`{>oEEtFmX1UY%)&8u(!Zv0!(4>L6B$QepoRRak#4OLXsK$N_1t+8cd{7ai^
zVMD9eD2wtQ+mMm-TMaptHY(sJB?ZaMH4)I_W07#ZbaVZ$B}7csr6%h9jf321a%HO7
zPz(>ZYN1>N*D31?o2?FOEwKKH&BBi?d4`lTo$)9lW`!HEYE=yDM-o{PON*^x0>b67
z&|*reTSvkCJV;xaJK8E3$6SR%c7$B~@cmsrO=CjAdK2!3O|&pLsNV{gJEA3b#FS-_
zUJRmQ3((ieHp)l*l{&>kkM70>F7S4~wHI7k1FD&*RLtmzBe|bo)Y9$qMid%AwU8Li
zx%VT8gSHL|B9IlZ^OnLjCM-7}?d#9EM<QzhA)yhmeMs2&H7ELeZ%D9w<2`MGqS2WT
zPKRv+tQ?T{gLBt3##DR7R#be)Vs~RDM|+7>M-ut3s28S@VP(KAH!AUs8G(|?=@VY$
z{>-2&UGF`P?$=+fbo8E`CD*<;k|awH%4nDZR4Y*r3=p;j7}KzkGzNhT|KY(y@eW#S
z-o|g%JuZrMaiIgEL|^~{1R+NJLjDfItd-4#7+nH*{K<lb9|JD6HW)D+UsAJ^-{j&A
zFM_5tjHFh<^DyIA;_2w|X=yoOdO^rEU^b=8oo#Sl+_o3kG@d_XrzD4JL<Ok>Ro1Dm
z`TG|UhfUCiOeA&KN%b*ALz_PvNH~+i8dUK*I*7a|H4UZS1Bo@|vvftr{&L!<pIn<B
zjCsqu$I;%K@QVxqzaLz%&v$MSz3Wr05$4Sw^7{x{8%)U)V?RMQCec80m=$n_dzmx1
z8uRs5!5(i!e|*$+94I<g|KK9;a??M#oaBtzI35@n86q7rb<H_lUu<#@0xZ9IKm>4L
z;w><g*2!K&v{E>X*`YJD7Bw*(#r5ZTkws$R?doxA*+au7NUsqg<<!x=;M^4!#!FT&
zoUpBM50mzCX|SYAQe(gZ>XfW;z<jzJve4Si#<e#abVpi4s>ECzYVkCW|4*eej&$x?
zC*akRCLdocew3-mhqw<(Mc}A*C<6Z<0df|misz$>6-v>i^JYL`^?kLSV(Xkc=)k-F
zZ?f8#{PAIQYzOf72}mPwY&F)5QfmgOe33L8a$fQVeBhLM9jd`W8fZ1{*gZcLkJjZi
znI@eoRF&mLzJZICTnbQXUq}T0sF;^}p72|CJc6JkGkWo<UQQZuwd5)3a7A#%Ql6-W
z1kp%2N)s`edw0$2sjOrMC62#5#y#)@jN5M_9Di^Vrh~#w{rR~~ol8Rh+!<pgv1eKE
zAkuaGTjih0r+0dwr&6gJ)|!S-ZZP5=SB>f?QV|dpm{r9zLunXEBy+^eE|AC+;%GtM
zp%#@=s6~@2o7`eXLE#4#AlDF|(x5LBsOtjwr%z%|Ow(9R=GF@iI^==$<II)VgdQha
zVKY639w~?qA{@pr6m$c>zMvgzZCtv#<{Tuzqz*akfIj*Qzj$~#e^R%*FI?RqxH($P
zeI|UZ{!>f2pB@VK29_Lh8;RufLXm#r^heYi&QMvQ&ao85S>O!$Vh`IEfY>IOsDeP8
zb}Wt(HRaipcpIH5r<%swmpUz;TmAfAsm9X=M>@6r40s=ei@+5>26Ry+s5LUNel)Q)
z=r{@vDBl3Xy)fq5I^L_=ihhWzS-1Ygi18W?C$9m4B7VpghZp&34;zE@-aUhnEdylE
zj+Dv+5Fm@J(6zCCDB@qWq0Y4aUr?;LPxlH<CEJ#<%$6s)WBJAx<sFh&1>QV>w|v27
z`qiX)l1eEQc)Wmdbt03LkgS>9=$z1X>X{oe7lrcZ6hpwkq_cy2APcw?2g$%n#&|}}
z6jb&ycg6Gs$zuL~^eWO-bAjn~9u;j`RQH>xsOvI4biV_<OuiJ0{T4*Q>sz9?fa}!K
zZqQA>anNtRd)XWNJTBtcFQL&Nk!-YBI9G<KFGxXJI4XU=dZO<|r3hD=OugmLu1SXR
z;=Ou*Juf~01a2O<R?ZCbiNGEX5(_kRl|C>Ipesl4CnXJ8XGo!g$;3eAj^gPhtMQuX
zkAzdO&k*cbdY^<H2)*u(2U1*JWE9U0O;gn4=!*nSJ?;CEbMJ~Umg{FzAZ;Hz9JQ9L
z=o$?r{Z*$j?f!NP%IIG6&dTKTeE;Hu=S;Gt^5o$?kIy5T-H*nFRY2_4OA9yx{@K^@
zryy{VKM`IyEa}V0rB{o%i>J2)#I<_=*gSZ%=x$TB6dtPFkBVSqw;+~KeW@S5phbuU
zo98I}NCx@}hxvmSWq6bY)|*>SggFna?iuKRdSCR;ZoK-$yl`sAZKu%AkvF^&RA!yq
zCF|<;Zq&qGr}Y2}>L8tOL7NNzAI9D(y0&&r*N$x)Gq!Epwr$(CZQJIIGh-(+wrwXn
ztLksNYOmI+zW-#5gWlUXddKrVy02Tg?j@k79_$gr+q^%tRa0ztzbOg+qg<!gE+6PK
zfmF!uJb{=B8&z9f8Q|FPiiZE0+@nuu(b5>IGWqWJxSqwnObB)T-fW#t$8w~FnyVkJ
z%&ENR>;N5st!yCuA5|S!!c<Yb*);N0+H(6LvpUp$<NX@LTd$#r8|@|b+Hl3r@UT(@
zuTHcYMO+wMnNqsB9`-nLg&y9wT{0t0W!RjN%X%$5PTPH40yr5Mjz5fO!H_(-2b0Of
zfa`SVzdCz)%hr5)!;>as7|%u6rjVhED^XP3Tw=5*P`9Jml}$ix=bLQzYcX$f1f%;2
zaa7BR>)j=NQ6o8A$SaA+9{(&CC?M?gko9mIkRBa75ven?6e*j_-g(J*yCCJ4L9xT_
zjIjHU(^*dDdYXis8Tw%f=To!6$cuZ%8p4!iNA<r@^)L<a>Bj!f-iqH*%9>kQ#0|(P
z&ZpXz$=?dPB8KAkT=G@v&2v!d!tKil=tdLmTvryUu|kKtk=uS{?#!RauDU&;V-Nhe
z@Gc=ESR;OdvsHz@&HbKL=w=rJ^LW1pls(xp0^_p}oz4mp@SF9xzkS&pZL^E@bJl&9
z1LymMA@AI*J#;}+SNWS0Re;OJ5K7nXuXq&{u4_mLjh};}{CE>$9u1u+VDi}6Z=$c8
zfir!w3~z3aZh@y*BpGZEojDhAR5vOKGLbGCM*G65dIu3;`SI}imLL(_#<#O}AR=FE
zbQU`6OJ=u3M&(^=+s438ZuM3cjTFbvMXr=rBBjr1w$*JI1KrCUq`8f*OCR=U7yMZu
zRnU&PL}KA5kb=Dlab(38h*lo*4^oB^5TjFkLn&Eu1J8k;srdK=d^|YVJ0MS_$r?io
zDECTc<Pc^;owAm~6<nk%nn!z8n`hokQB<ZCj9!;Z+^u(=FWhH!IUNhm$SJ=^m_-3X
zS&{7Fb%zU<Zslt#d{~z#HUwT0(JOYZH)K3DPM+uGqdYnT^M#@6^0VLr4@-zXu@#8M
zU13~i>|x}jvK-XxzW|FO)L@&Km#Pn{b0HXlymyzahK+GksR%1!e9EF>psfik&BB78
z<$=WUz#RKtAp*imKJGvp;t(J|;HePj2S0KV6K8%T)A6AQnl42&!MRoZ@p%x%tRPtz
z#>P5L)DL#}@V{OFEr|O3_IebOcx{UCF)5TEW{$FWydR+(^x=J8itYGr6*<(nHG+D(
zETayQYIm!*C!=af9rB-@Wa=;SAa>ud50n%FcvBO8Y#T}1xvc}Zwi8dM><=7;<3pBX
zbKnct^m=sf2G0S);YW!m`%_LXfiw%)T43!P%!smS{*55%(d_dA?MFWlr-Chr#kB#C
z_YChM0?+?_6EM`+nm-yM^~bs+Y=swB()Ga??k~U&hzlATg-Rte=%|bCFrxP*T5)!l
z=w0rlDu6<$7<RFm1vj~rabg+Auu{C@rGYLusUg<67JLrRTyiTVN9q|b=;#;Wm2S%E
z`0xhclz0gRct;miA$;-Y?3_tKt;<!uHxiAfi_5zN2yk834B-X;Npfy<{REQ9#l}V~
z-OG++d6a`vcBQ+T8znX^-9uGEc-pEhRr2{Vr59*kU{)(62k$^g1$OX=%l7KY+mYi(
zi#0Z_aH^mv`iMPI2_rK9ZAm<O4#s;uK_pKmp@1X+*PN-t2G7^<8ZQb9c@MPqqT!hc
z9VzlsB{@#nTWudYG(8<9g84M-R7$v@JXud&)i)&a=x*8ZN?LSIUOrXj^StN|Kn>fa
zZrH?OWY~bEgQva6qYL+&GZ@Jsfo?TH{tTlzd2B4aE<WzJxPe9!1SoQEYrmXRIVk;m
zHqe+6cl;fLa?uzO#R>P#O^LDh)Pfq_ojF8-w=gX1wi5O;fy7;%gDytx1$f_4DWEP7
zpNFA99hzYt5*Y1C@gzS~XrTY5D7V0NzN}e;p=Gsr{InSG@!r~8(FpT2a-6QfpG5t{
z2_X1MCSZ=~M(c!LK5lK=G@Zw~e&_vzFZo;!Wp8J*Rql%d(r#{}?|(y#?fL&oiu&Pi
zg8!_3{O?Qy5k<wH#-WX!tI2;j$N%HtFGNYkZk-<HX8{CZodi>p?9?B(v(-NV!^)qT
z)!L0;Hh_|;0Zi<UxWo4AlYCTW0anB32K@DfoR@cdxl{k5RajSAACp%&TEwE0wS8fx
z-L<4(XpQsg21pi32ZYuDjl_Z(_TJo;cuaMIee4L+h^ZPD3J7f_y5FoLfIT8rqg6d@
z%$p|$KaoBR8{@b1NSIasj>g1Zo@kJ$Mu&<zf5{S>r3TDzWWq{8TVBK5Y$M(rn^}_I
z*^N&NlZDoq(@EZVbeI!T!7@d`Ntznuvrt5NC(0yP!OPoNQhBn2BLsm&>{vyxAGY-Z
zBQ;Bco;>*}wHJ4V3}7k1K&x0G8{%@axHKnNR{_X%^E8iMDah@V`Lif4CCcm2JFP@f
zR?5Uc%6DV-M00PPrOm6im22-%o=+D9Db9&%^NxJe0Z7~6n0DD)b5$p2;HjaS8{LwZ
z4ORwEEek<)gIxypC^Rv5qt1|ggTqD-0hVAoMkqPRxgJY9*kWiR2(*pq4a2YzCtTXu
zcD~eId1fBjwObu8^?QWP8$bP*C53tkdbp9<)bi<$-*jo?m^#crpRQl<JS!ISZg<#5
zpR|&SzYAsXTnbU!eZ+*0;=v?*f@%_`3p^LhvB;{NzxH{}tSirZ64vMYQCC0jEV*C7
zUL#15iu?-f5m;*%N5Bvgkrnmy2}PogI<PGWK`F0yMN!Sa7*)~&1K@qn0`fuu`y|=w
z_r2`IzJX`u=LbYp55CX?TJG<md#b3$Qu^4gpK*A8bm0$4`yfXkb<fhSSh(qE_Y^d|
zfxJJ)CgGLw%Ly5o)BO+74q~<xIaQaB=8LU1`KLF_ssXI)a|Nc0Gl<EyYMUN3BKv>w
z|7#ihUz<+zdUu-GKQcF^AD3j3|Fu{Cv+3k$VEd1&PC2R*w&$!r9VsfXwyc8z1w7Es
z6Bn4j5t&%_#DlJy#wPOfLxxmIloG=(zk8XIjmZLn(A<pVv!64VgtnJU5%yYzHME5o
zeWOFtiLIzy7yvjI;j#vBe!uqdVSkX@+U)|dmd{DX%|g+so44j?*@QkJSiWW#-yb?t
zfPCaT>#~3j%r2JaRM9fwrVu5PU%uy?C7lZ0JwWKum<<F<d#vPkS9DSB_pIjnab@;O
z+;H*WSb1IV-1Ha934YOa!NtG3d$grbt1U2dH1Aw|_?H4hc5JR}Syxv}rA$<=1>G;7
zOi2{?cZZL~OW`P($`@?CAc+S>N0a!C-+vm5YsCCw@CgWNC9*m0OH&-=GoJ#8CJBdW
zrx7VhiubT>E#0AgN9y0xi)m~Zxx{V9a(XPR_qWC`P9p5*f-0a825={~v^YfL(L4hP
z5wM~F6KOrcu4)J$Iy3iF=5=@5(~&O{Dz9<C%U&~A95Y!r1p4*IlQ;@4U!Eywha3j5
z7lZ8iT!m9FF6nsAUxvC-9{W!WX)y`Qi&7DDgci|}B1D%Bc^V7_%g3VSqt}|&<>c4}
z?sEcaXYCb=i+?w#@$$eUK=!We>rP2)srg;2vExZ*cW^3dVT)T0u*T)VmH>qwqHXU}
zj2*|kQ-RImdp6mrWeRWY!uvbzCA>yP;R{%#6>8Z9hQ>%h<au+3#!KWI5n$bF*VVh+
z+nW1$rsdR4%(k8>d^FJ@Mo5JR*Y&YHhBKjz*aIg2@=H?D-j+SlI`Ud_pHz`kUAStZ
zdS5@w5i`m>C03W{3L12ZSB44(AcM>H$|AetoniH?s9ra=dO5Zh_GnUd5Y&M=Pr?~_
z{yi76z~=)gTZ&bZoi_4F?!5uHpW+6si!7=S9<Hlcn^&({khAuwE3g@ADEGxPRd`qm
z{^rxb%`iT732C;rKN*(*fmz~Q;Uu4{Edd6RA%85H*AVgB^+<TV&{5REE`2my0|9)C
zia`lrP=5K>{y@n)JcMW%Zcn(HToi~e_Dt@c$$8JQ#P5#q4rO>)JTex7cImc_wUFhj
zjtvwLF+Nbtq<k7H)@byoN3c&$^4w2%UQSWH5r$~93FYur`UPt2Y{s1ldFVU|7MMut
zNL{qvCLY8<JGiau`PX~Hx0`dxa4x0mnzdv++uGV%+Mf?U!&o87nR`c$pbi#40-Fqn
zeJLXy5Tnd5P;7Sfe4+R8cdbcf*%=Ph<&(g_2ixxDnuyuAhiS666CNNp)>wbXQ}>vq
zHt8!P^WV8fIlDC;o)%LQrDJmn#bR=tc{$->Y@(==a>o&IBZA6SA82J$9ptRdu%v3C
zM4Ix$Gq@!eiBBQB=ik>py*)bCFAJ}>C5$hQ8e2Lp&cY>s*9ex~jYR!BIJlIUedzlq
z^633g2pIp@$n!7nG&2)tdOf8dXC)Iy30qS;r+?bGj8WZo+G9oVUD0cB@`1#RjX!T*
zz~?Y!pO(pRjPEaA;AR*=Q|I~FwBbnpdfZI07U~<@5Mm^_^zGWdYNO&!<uti4B6atK
zzQ0WiZx~B+$DPPQGOcX&v<d0b(fanuf!KfB(kI)v85)1uot(m6v}L@^D{5WYP!ZL3
zSIT!$O!j%ot?dIY$?MqPEefzHK_Y8uw0XK+@V-TmGaA|9sz~gX1l>4QB)7WHDy|Q*
z4pzJUxj2k^UM|l}hVZoA=I&IHYqI5I;dZbBJb(X+Rlc$rHv`;R8|RJQf4%f%&=9F|
z>DH7zezy1dRKcm|zgdAF%v)Im<W5{x9aubCc%|%&OLezS8TqS2V5izfgdBLPKbzdc
z<R*#mS_J9AXO)rLl_zxwo31aCQr-2;5lJ?2I%wIM&h*3kUDrRkkb;lqw;czXak4k}
zL!01KA{p9Zw5^dPcKa35<BWL&Ey2<n1pS!zxERKw$PIlSge29G0vX6QkW66-Ium>f
zVJ(#q|5>#<P{u_i1{^+%*MEb5|7K2)2=QwB1FiZi!2G;IGz-RO*E}JLum~K94%99=
zw<w+)R2d0NdYBV9_D9c1xJ1lO9{v|++16GcrpytAyd#ce3?&gBmXHg?v$}`6$$aZm
zLB}tX2-d#?idBn95TH+JP>{Gx?nfRW=<D)4^;pG0f%xU}V22?~1|hN)fu|&Ms*gP4
z&I*nTa~pDQ53ta!`-&PXs{T-(*0P)36;?~HdGwh`_wIPwnv2YeEh>o+R&6R*UHLc3
z(U@3Nm$XgY7`1p7eYwVlddAgRmh6{Yf@q6}rYm%+3OJ-S{F3sjrHeoI%!NGDc_qdT
z4}!NcvVlOlsT{-kyF*dh=XEM$oR0PK8WpZ5P6T8{QbLS?WQo#ae)T5r(&d=~3P<Yw
zg6%MR#FK$1d_|6J;Kq>@`U*dI)G-ttcoNZZ2Doj|hCI?^vl4|GJ(N1Sh<J<9+WwQ^
z^#ONCJT2O}Ar!*g(fnQy$d{8?h_jd?Bz&&NLWL|~C^WGa#YfjZ4oZ;Gv`b00q#Y%M
zksZJ@;Ncv55l{giJC~AqU7nNJt2O4WRCrbUf<*bWiDqhJoK;(pBe{0EwSYMaXOmC%
z7^e%3mI>YUMPr?XbiQfRMQLtGYv)8|W;U#}gbhYb&ve8uip|QkIa6~KfO3FE1A+Gv
zW*m}C`BcbJWABibad>L~Yo-iiUT+8?dIJ=PY-lb{jV>1Mif{SIq|ty9awSbYvd+7c
zQ3XxWs?kH7FPs@Xi{jqh9#54}pSAs7@m{2hY9#m9M#rc1A7s}HT8Uw1%l;$d1DO`>
z{dC*4F&!&Le^4H6T~dweHN#O_E-9Fo1(!dUsz#;A34hUZ{epx}J2%k2ri($Qy?CoA
zI(=7Es?@KZCsDQSXVFo;U<HtUjc)zw!OFN=vO?a+ENZ;m)P?tLwe${Jc+o3HaQx80
zye&VBtuKgXCiIss##pl({fF&e4)nG5VD-54BTuwr{R2oV<sMH&j6x}t*=RU-%-rWR
zf_Sw%k#O5fq1T?k{$x6@V$tJ)XQsYztw?G0FKmb<e%}>u9S6*#Uu0kbix@0{X@2Vb
zI8zhARcZ-hnKEQ^+_Cu@a-ED2DU!*>8_K$ui}qotlmD`nXJdQ+^p*dv#xrl~g5+gm
zi4!=A-1yBTarpQ9zmmLvDR);z-Y7bMYMPIqQ2W38*C`6f3hSAe{a2RvKgf1#)O3Cj
zFDO1g*yP4Ak`SU2?9MP2*mzP=vpyFfuFcu9z*O=mXc12oi<NKR<HY0~b}CMNF9+ht
zZv5k1FWP%s8>^A67RAN7*NeCP^oG~Ri>D~<B_dvKAC0T-i~DyyfzC~Xl)U@)fs)(l
zA8&RNZ>k(dDqZMRji$EV7w)bfvIJW6E&h+7x18j6vz5i0ZklX*r+M9t4CZe)Z%vH_
zFWr`bTQw^TUaxm=p~&6gR)r0e-@8LeL}LBlgZ=uREsTxRQ4_N`m=miTvFL2~W1oWu
zwyypc57dDL0MPs|q{QAIyQ%wfc2#1hukTWhJ}UJQ+xXw7Q&|Uzz!-R*+|qPE=+2cg
zzC0ZVI}bWUGU+C+{C0KeS4Q&7nUvk<`_-^L0HfeoDvW(CvSq7NcOzUbK?Xp8ndGCn
zwr`q-=d`(<CBNxdo@ViK$kIC~+S?5cGLND|wU$LBvJeged)0bAO$&tVtzEGJ&qIX0
zqK#YHhg=#GJqe<m8>C6KTo|nLj)as8FTg+|VzLA<2q6q+0V`TgZ2nlGADsr5XdYw)
zh)};#G3r17vVvXkts#jGzu2QW2<DWDR4Zm*2<mQ_5(Mgr4FCj(IK7>`NFAp{g5?qg
zi0(lr?!rfO(LuR;+Bg{{e(<ypbevFkNBBEXV}ZZ-y!@`9lgPBHCDGK02nnDsr6X=t
zr^~n(LF`cjH7;)>(>rsH?+VNx1;0GlzoOLMvW0sD)^6}dC)2n{>yNrXp*43ku(@e1
z8_9LzJ^)m?sFhPI)3(YoVBm#fi;$&ar_qZ=J`ulHAv^4aUQ(7cRek@$6MMT7d69;O
z0;-lLg(usyR%`a!sQhTAjf=)GVTj%<VUHS)4Pfc4X9ff5`q09D9bdm5_*>%|Rxd)t
z^V?^8LbxkP5+h?5H0RSsMzn3!`O!>Vx@wt2Yjzek>YSP^rKYUc^w7MXPLYt8u8Q4~
zW0#mX@cB$|br<UiuXz=?SYLd2qY3!4p~IjT!w_7cW)V-v#B(|xyt0Uf*i3Al?U0m-
zEJihJx=V^&bj7@VRQwv<0)BI$=8UsJjf*m#uMq_IH(Gcnc33<uG|fPZNWaC|UD(s6
zCF8t`7`o_c_Up$^)krXxJdl9qd-@nscj{e)$mLDgMoz!({43P(<`Z=zkso~8R&k|6
zW(8Uim`>v+cX8>_gGxCNSQ>V)7<op;jJ+oqD)q`71)iQCo6>Mf9vP67K8qlNa~)xu
z3@w5lUAbpz{g=?2{zNlqKsgCE5F2*h(N~{U7Wk8Vj>FV)XT1zIDWX4jA>IV5Hb-Mg
z#4f0ccwTF4KwR%Gkc6v+<fE&lm5b8OIeIZkntWSoa|mZl&$=jdB(%Vlkd#sII)C7g
zIRXx1_ay>Hf<;@N*-$u*Oe&z}FJ~-d@<q`I;rQx7m_q{bSpeRLgv=U{NjcY2Ien$1
zXV&q#KLPVWg%Z_G+(|d<k)&wgY!fl|B#h(&Blj&Wp2>?g?uYeil6sfuaBuAReBPNe
zFV`yza{Fd&m_TR4G62l*w1J~CC#ij~?j@uVLmZ?$Q%Ul37`P%q$8}-caBG9u$ygo-
z+4p0bOU%I<PvkO-Lz?aaFr|>)>+qr8R4>Z_(xh+KVm|4C7u%vaYh*~#m1JREz?-y$
zH?(j^yJ*~a_vfd3u??prr_ivKb8|ab4IjD|6w>MoYg>I&o1e$82ZMI-(VPBuvNf98
z{Is;R(|(=qpHk7r`WHP-e)F>(a0sAb1@<vi6WMSN-n3q)tPG75p}7SdsM0jZUqPTb
zythi4++)~s`5PZiu<}njlgK<#0pe{8`Td70lC?hBGUhHdAUY0>50bey#?XtwuBV`^
z(AJ|hWERqm%sCs;W>F5yxVf5m#V3SK69~}!cSnHe7D9Pu%3pbf{;bKT(i!*Un%k%D
zbmf6&e*cC7OJyy$M*LwqZ2#O2^#7QI|9=oqM-w9xi+@Jz+bHYEt@9&z|JG|Lq=STl
zlW#c#7l!JmQ4k8WR_a$Wp3ZvF96jF3fjq6dzFK`P-<jIl%*x8Z{h0}6Af$1Wu3}1u
zwG|)~t-F6ki_)+<1tF;%?to+h74z%VTWT1B*|@oJ`({sH?Kx0`bSsrmpTX=3s;O&g
zJsggMz4~ibI^VoS!lj9JI;(d&bj;dYp9sV2rnJzFj@dsL@xCv6yx6~WK#wBD6fypu
z+BZfEvA51){TtM2y?WOZ^-E{%Y6W-yoE}ePzss0AtGA?U!N!@Y*^Ux^=Pb|yj$gx`
zqt&LNW$JX94R0|lXsx`2askNDZ;#W3Lfy>r)G~-b!oE^ch1SCz-0Vg!W_kPU(UX}o
z4DJD_U0B)VEWC!&Acrc02{fvrpe%$HFNTBhuAiI8vrAL>mm%&LHwNH#n5<33v^*nO
zXkkMbSTb!_0D>C&)*e{d&rt|6ZpHCwT2V}5z6stzj5v}s%cgfNV~~+|juwM^g3KWy
zJfs?f^ixPn>`Iltd+1P*aV<}wR0KYE9;|<_nP<Hf`E?y~rB8X2jdnoZa8z*~FX)1-
z3-39LQaiF>@X+ohGZ1FXU)lJ?BU@<iE`@qmvMBqvv$EM>o4N%5H5Jx4)2m+6FDc}K
zgdpkQ-DC7+Pv@0S*|m-pD(T%EiZ3k5OZC%~A6C)$PY}~@)I>e0h-KO{Ah@)Bk8hD8
z0h$wyd<N#)lIoa#YJDlhOv5hp&mqhM8|<FIF%b-rdy>u${Il+BxTkF&i~)P3nP7LL
zN-+`A>0fTm@Mo8{-X_rOnVUSK``2uc7RyVay(t_0ucxPFN%sp)aec~W4_XoXkQ<nv
z&?P|zmyR~p0E318;qdC=vxOc{XQYyiub7{3j1SxWa0TX?v%7l=T<(joKO{bxsPz|6
zMahu+3MEimC*i7OPZd<kL!Y{o2_DC&xnK1;F=@@X5{|-I0CCKiaRU}Own_#rHV~9b
z4@~lME!#MCO9@&XPAQ-B*L5rB`JYu_Yt-*k8NO9Se>N*I>_d$&hxq>Aq)aYb-K_lw
zjyZzyPoACs0_eIj{i_7lGjVs;GxX4tl@R{F1@Qlnp_QoHIIXcGeAVhTEW86{bTeN*
znAVDA1SEG&qzHnUmwhH9wnA7&534)+zdyDmevoRB7Eghbs;`O7T=8~k-WyN}3i4KC
z!qyouzHt9KSnpc#<L>G4(?83-T=F59SI-H0Z~pr9^=QxA@a3+<-rqmH(c8Wv*o_2d
zrd$?8V;F{Uj};uO=bjWR&lk$Z#l$S<qb_%kP>+U!?OGynV8Zr_P|h{uU&?_iSQC_}
zY?UV}Rl`1b5K7yzesFoScxVt!d|B3{#%atIk@*|7B5l=Bl)GU_NCc1WpGTdlJw$*C
zi$|!!y>|vs#SDkSn;Ig0yiK;y^?I3&@DejBkQ@r*X&AN4*ttgZcGwwb#jWbHnW66t
z1foQ*2V={-DffMb!CPb(HD~P0mE*i?z5SWw|Bf=PU3|<iJ@uLZfiO8S9Qq1E0Ceex
z#dc)iijiVTRcw0A2ha2zb*ypT@9kLAFUkhZjy!=+hL>lxkIsP-Yt=n6N8>>S`j>;j
zLhPmE@)Tl+A~)I3<*ZsnSeN5GglN77l5PF+W!>Km<xCwXDO=Az<P{p#S(p#5D5*tW
zWnhl{V3me7Cp&ipSAnn^J+7p}aJ~5s*+!SyCRJ=<xjWUHo=!$@B4>Hz=7G6$#o)M@
zTt!LKnwO(yE34&9ymeRI(+b1a>NoJ0)f>jZobx-~6Ki{FbKYX99QP(!Os81cL=lI(
zvo4B>7^O;)*+F6qIlkC^*6QUZP}>XmnJhX|DbjRqI!KEtLRl7x6o2)&fcP(Z7_av)
z6WqZDTJSOhc#Q{xl<=6AAkbg;?8fibF(AxfBKVlIF934Pk{Z3AF8Iken{@BAvSvTs
zIysr7^pIliWT~NfLVXEoqQ6l0bQjCq>O>c$!^R_mj|LTShSb5%&=WzfnX{Ly1KH=d
zwYx^NH?#v`G=tLUgS2=CBuG;QJHoEor%eq2Z~j(;c#$koQa+Q^`^1<s@r=B($<0|T
zqx1f?%|;mFRXo5sc0$*9?l|`^fG<$vG#EJs*LzrT?K+4(Gmsllz&Jo^j8aIv<3un(
zZe(1v8KC909!4sQa%y%d-h)J$2NaJXDVM;lD(;+f0?9GtmNZBCo(T9)4{Q&{0N)M5
z2WJeoEL18u(jMLkT59x{g2TO*N!N5nx}KU82eg0bTJ0sRlO8MAtWx-^HBOH5A=*<j
z6s!o9s}%V~5v82L?kV?5nLVOuZ|J$^JDDzIdZR~aR>!lTBspO=2TZ(_d^<>IZm3k$
zr4y?f8)L#5R~!vikNRC}mBQmb5NCzS;h65QmNBprgRz9Xj$*|Uo^X6n)f2?mQHE0`
zPlYEHMdImOTB4>1=)O(>6!Y^f4Vqn&BvVBSw;(s&?%tjS>!;GZ7l78bPoi2XUB$O#
zC|CR3MnP}^oo5u1nMwMPhSf%th)8-40hkSntL5<;|5EZmcgVQEUS)c1;lOrHrTJ|)
zd7^MHXhx}!VD;i7QGPCEB*cn^oScqDfPDxve;})@d@l&~|29FeWS}a#zpz7t4fjm$
z=F{OW!^fqF7IUP({l$k__krGdYRF6mLWO)8=@OJCsdZ~D$Hr~iT5V#J58*KYgo;bM
z%LE6o^scrBS6{?FK`@?5>JH>;f(HJ}Sd{3b-btXlZ7j_yL6orn-s-d65R38NZY+I2
zIt(vB`gXh|@c`AsCUIapSViZk18Vz57Cnf8QcDNt4uB5G$zt8L?mE?JGpxL))Y`3e
zirs3y6f`p<cqEu4LR`8jX&6TSuKI_Q3+q){v-+hq4FUoz#wN|iy$)sL91m(a>HMdJ
zcX;UU!?hC+-43sh+4^W`OD;Df_HpPS3ZVlmQnkj7xow&>cGKM6gf);J_&%K`(WMd@
zSfQ^=rpk7@Mn+Gz<)1wX7lMt1_PjX%A!)Exmv+YSxdJdm5Q|@NlU_DWy1D^1PI97>
zT}LpCsz9N!8O5q1TiC|qh10+yP0;f+#gTTuoT?{>yqN?0-FZojtpo3uke2U!)-Tc5
zZA;y@&D#9Fn+Og>t>Gd4)T!L>-`+MseLrk#w@*`t?_V*lkZysY(ZMP-p%0*eQ3j;3
z#nTJylgNsK8PJ5P-vMG%%K23U!Y`1V9|qM{N7Oc@{I7q7!17?|7$6#j%_mXBsWT8-
z`dHU1&9dvej?WWdiiYOvQ4c99)S7hzYzn;o2tqBqy@Jj#1fHZLnFY$@rMx3FN==96
zkn;!pYf{$6pVid5Hm?}p6`mD|;nkLpDDU?jYgiL}8Qu_zBR~F|AoE|H3r!(b3e2DU
z^y?p)WB);!H?}Y{ar$TO;tybc;XmyV1Ji6NFQEh>Fj5531w@upjk8#FDOVh@gs{ZE
z)YW`>R%F*q`!GZb?RZysk8|JWx~q&O|8!+9I0Gc@a1$TA9gdxQP^M~U(Y_3l$F}n0
z)?DmiZ*Pol?7xfS_}T(6zB5bePK`=9VvgMFJF?0RxZ_-C<n<?Fm&*|_wU<bWR|(Me
zI+{Mv4jz~?=8)_MBe+vas{TzLtf+RcaGCopG^fiului!YZ0(#*?Gn@HAPIXZ7!$14
z^!kd4lO;3Ur7uO3N+K6<sN8=`d5QG$+SavC91E?B*JE>j`9mLcKJi=bS&9GM^j<YG
zquAw)r?k!1d5JX_bO^s<8>6GO(I1w@C;m0VwCO>xLHwxyxc=J@H<gdWYTZ2bj9Oas
z*4>pMSN4zHQ<oD+BzBb~Y;#K?>G2EWh<Zu;QAvU5A4hC~P(k`Y>hcpr9S2gz0E(A>
zZ@;rMdTZ8hvA{xrh-VbzR^wPnp>Y-^!vHyiV;MBR1ds|MLBL-?dRyoVJc6{2VV#L^
z1%;8d?E<GZv1`a|jG~F4;8h&5L9Nu_l|FLLvfw#Ic#Fza&JY7C<%#Ns2aNMc)YhrH
z7MHjL{8-B^{DXfcj1MgZCl>iu)@pCU;}}%sTMkYH)=a*Zn_eUGO9-#!KGi{1*s<=7
zKS&<V)@X4#<k~b0inP8u2^h&s0>(^GT+XFg1ZXBZ^P{huHau7MxVB3wW0b{vva;B_
z+oQ?sQH9e8zlgfvc$d2XjTJj68EaeEeD)HeBL^sZk7WlC0?9LwkUYx9M)hYs9GEwB
zFl5ZwZeIpRp#?=7*T@?tVY&G*yYHsUUL?d5AxtGZV}<l(Xj85Nq!?Y@Sccf?&z7+x
zK?da@jw~k@TWW{p7YR?;ZzP;<AzN{6i$hR1Ujp}>5t59+85Q(LuQ2MOvAs#vR0z#a
zEvclhGO%Mq0~9tgLJ9_8S>Xmlncw#^3UA4?iFa+oid80A#IUPtYS3i?S=385(j|YN
zKChg+)V=<CD%N~DXZsuxqhqTwJUN@JCgcP7e-l(d%E6H9pZ}in537sef2|D_l?3$c
z|5H7sXJTvQ=<(l*!~Y>Ytx=Il`bkg!WhqY*7J_0FdNE4)<EsjjQZfJ(GG;p!f#hmr
zMI=Ql5$fXm*=l^xB4x{!#?ZL<xpn@0AXg%b`JPN92VRfy&0u1U8`oBX2!3TBMakfD
z>WP3>m4h<II$RG1Pw<FHj3*z6nz2{Q2+=7#m@_+`J265Rbx4^z9Nn)~fTU3ZA+%Oj
zo#JEUksNoDA`f@feD(6!BfJzO`O2CunCJw2{UnOc1NQKI7P0_H*Il&MBj0vlL8-j_
z>Ara!I`zF-TJpsmLw3Gu$@Jp|v3_8V_>>|U$Q$pJA_>DX{id-4_ad@-a>dQLX+ID+
zftVYL_YC3MVimgpWPm47)`*(c2sRDXoN5M9@n@Ek9V!i2t<R(smIs|cQCao^G?P|2
zRXlj!M(ZV%#S05*1~EsnpYt-|4L7YHS|lb1Ph^UZoYGR+vMy@Dd2OM7kIS`O`Z-wj
zx}Z-mE7P49R_jxgU*FmN$7|&_=1DV=98bMKsTp6~(1#!R_iT{8dT>T<uk>EOD~qph
zE)6f!k>9{NAP(4EUD>X1{a6T(9H63%Px-n9)?!qAc1T8!3uXWf!);u}@!E3iP8|-a
zae3e+WG-v8eT2`YUp9jF(Rz>vl}ITkpBuJ7R>_gNdUHpuF%*|^$}n^1QM<Y>MD6SC
zGA|7m-CV_pb$Lp)gguB}R48B}ISHC@G$`BY<P9Ub#7*Q9Dxl@CW%HBsCxp9(qM=|r
zVF5Z~R7KskXb5cah67`I|BynCK0}<$%RL%$T&(+r`(4fBgAG6zKiQ`^wo#8`wcA6>
zy2d_!MaBDYklNAjboSuo590z0cax(o)shF6R1hHCc1c?Z2#v;Z$KQl2#8uB@RM9y^
z5$Rq7tpqd@NMfadYRh5ZtQgUqz0a%Hg}dH0oqSRPhfmxrGep++f?~&1raYV8I&?cT
zw;$)sUvoAF@ec}Re|-7M&VK2L31d9|g;fT64HDR_8Ce5F+R!qAxKISdDw2W61Ix8l
z0$PYG5O+uAHX$S&`}6F1+<udGSzGEZy>f07YKzVK7Oed;x<C<qe4E(7weESrYSZ&A
ze5q~LsNGX-mgl!k&pKyfBb>_R{{8aua`WYIgMA2PAhBJ|o;x^x@_P)MzE-<7CPtr{
zr1}#O+NyJZiqP1V7U^vS5mZu{ey}9aT329{uGfOCm#}A7L{0vNQ(J=B<7mK!<ivEq
z52<*j_GY&T0J;{*+VCi<nPm-1cSuyA(Mix*J!@C~Kdd2cACj#iyCpuVtC<YdKxY=%
z+lg)+k0sv=w)ybl6yC>To5$XMO5X{haUH@z>BRAd|33Qt*RAe#0CFw%gIGXf|EGC`
zF{6dvzi#$_s&<DpwVc-fIQov(r8`!(5~IrK$xeIrELTPr6JRokI0DW#+zntQ3L%aX
z^a11>=j!EM<#GX(wI+t`qdWC>JU%!-Kdj8+k2+$5_+5Z*_Zl_L31NV&Kd)LcX9P<$
zcETn};LyyQ^J0s0N3`Bk9t|he`;%u{r$tyc(lyDz>spyV*|NmWt0a!hU2K8kqv29#
z)8G%dCx^Ddx#Ld*WQl&GZk5gn{k=S;MvnQ~8aB0X#~*=X)RHZeb>jVsvrp{oBZl=l
z(B<dCjVUw0U&hP{_M;tKCDx8Hjl;`sjel5i%NeWLFO7q4>$t$P;E3uCb(k+oG~u+U
zX_dbAJ%@S6B2hTTxSFC{n7L<{#23hOb24GLtfkvEDyFrEA!X2zIbu?G0J*DdNTQc5
z>M{pn>q(a@l0Z3&4Krq;hytr7r*tg=HEKXyZHO55%M;#I_s%&LxOH~HCONfaXnWuA
z{c<=!<s&!hjxlWC^Y}Q)g(sycEgEJ1NX6o>nYXQ*RYOUSMpJp3#J&~D_9CE4hrf<R
z<Ego~-j~&*Ni~wsWm7Yn9#TQt%nJ4DwQqcB>}xfT1_oLd(M;?L-`o&-eA*R;T(s<5
zSo;;$HfM-Z7N_ckVLA(@x+aSdo@k6YvV-NooT-Tc#}zbDcnkHJ8rrmeg9dBUA}#uC
zse%fZt>uVlf<!Rxsuj`c3Y-Rb{X#e~Lo*xY1LndIk0WBOHBBv@G-i%C-gG8EdnSdZ
zCz?cyMq!>SO3&4uH1$fXAzl_aXuPX`pwLD`AR%_j=+N(e2Adh=IlzYtpn39_w=vj#
zhj7dg<}0zeeqDjnQeevzf}a3_=j8kYIz8++iF%(J`-3yDg8)4+y9|!!-wR(X&P;K>
zu!f$`VRmo$P&Q9`nYzcrr|I)AMv1K+H@~35Yh-wL3>np@bSP<2H^S%#`hD2S8Xdqa
z{Omk^#%IwkBtYZ{d~_QKBXV^g=r1VAdAq=&WaJprwp^ky*>K-ELz5O7g~e)LdtBlx
z+`nBFZfo#c27ZHWw^SaLzqP9d^@=u6>;7U{a=Eap)9jo$`4D^S<K;|Md>$h)LPZVV
z+r?4-+Vw>-KuQ7_v*l1A^u37fsuS4w#v1DR`SO6(9?G+kH@mas{V^6~JQ@mw4$sA%
zgxqqNi9&YM%QjA|ElpsZKfo5II4*O&W$w4u$Bb)^1aKF>Qkw%N`RS-{wuGGL0J82%
zd_9%wuVYv4`&%}H0q;boHq0?d_7Uhm0dGlyEmqO=FBoU1UfTKjz0ZAV#*{waw{Oa7
z6NES$cT4A-&ZCJ<*wKPybxygTwc*Uc8XvHRqh<Q1=Dep<6~b1QLM9Nz;N#A+&;U(t
zo~mjIUJJtRNtEkCfHRE2xAYnYPi)zFjY03ydd%@>bvNH?3ensd3P|a~93`RyyZ({t
zDr<@s(xonC@(B{ZGtA8FR_`OC1N(V^ejfca76n{JGek&-b{|JI7G>d@9(g$@JuE=2
z#GoHlfq`>jp~9B30}k8iwk@akK`Ww%a8W=9@jQ=yX1;(9+j<%`GWJ$6S4s!L`4Ez6
z^Y%+1te3oxxWHG-gCXE6XepptU+1k*;a#6%$V*x?ok_v7-m?AJY5_gOB_Z`d=WSl#
z@d?i7HuI{v^$)KP;ZO-3miZhy?E6E=EZ$pSyPV!yIAg@m3;Z&A+_O=>HgAIJ@IC?`
zW)H*XN)IJ5B2bMFpjkF=hV(zr`4`ZkCEpC!GJ7%lX3^0T9)<;Ad~WG8R=ncdGD_&+
z4rbAVIv<7uQ+wIdOXxr}-vVXAddo{!98aJDBYXdDNA|M&|GZ{?5*37LXMYl9>uc|e
z^=61Dq{sbd9vyvIdcct9Vc0crVWYz)ZCYJ<Ap;HR8SVmgfa??d`sVj)dLZBy{@T?8
zX{*Pq9H%DL(+$D;%FoH<;ttmj17B@D6bSyz24A(E3WB)B4`_d{ez?h}trm&nnvqNc
zcab-1oC#t+xg!YTsN>H9Z=vt$Jrr0><o@%q*f6j!0CnRokKWYv^P8Yq?8kQmWtXr^
zfW!L&v^&vH?(qZE@RopEl6dfflZOI-Q@O>z=ehsbk<sdV#P?IfHzM2;tVfsmP9Sa`
z3*Z%o*xu*U9z~iLIfa2^{v4`_ppE}HQ#^PF0FmIBL&gfJ;60{UjqYeFgX52UL!}j~
zwUqF7nTZ0H+}_VetkD`Iu{R$=f#X@#)PXy3IvV}WgMb82#83(**!MQ%9@$gq63HNd
zgC99Mh@hc*=#3u3;1|k^t4f5e)=kH#{G<E+hbFf}jtbl??-O#D9qx-!4$NjhbL>j=
zGt4$F-3<{Xe%G&de-i>KjRMpXH6-mt-1Ro%YnZcyxK<TO2Xa#cVNk25KpT;s3W9#{
zl*XR&A%Bq-_WMv17Oo`%WV6w1yP@96wn8ZR({A=AN3n%tF$LnWWE&3ciC6M7z$&>c
zo_&_;BAF*s43Ja2tJq7~VX(H!DW7xDhn~Tddqb&}IBesT7Jq(}EXOQVIiZnMkz5~i
z;(=g5D^8nCWOZ<_RkQl{&_RQjCjC*Q2Vh8cTCKe0x+U6vspX3%L;m}@)}89?C4B+z
znJ-AQWv*R|#?U$^1Y9_{<uGz80q1ONltK@Rs%zjUMHASk{1@xA!+bGrQJuy{jPbZ+
z=fkvUwitGtLy0z^Rzz!WSTwi6<zq0}K5TP6li{g&5iaE;FvqP;3Nvo`vi=P67j>Ov
z4qm(>q#I}%$hI_S!fezm$^0^YIVCW5+_oU4LyuR%L|~9?FgqMNWM`Q5xH=9QI>}_H
zig#Ez>RIw)`T(Sni*t!Vr&)kAuyB${SfE?%4rc9ya!Ps2j@9f+No!zD_3J$x&<D0r
zTwI+$wSW_@j$^u*O`*c&=L>*xJ!zSTY=D1t2b+MdKQL*%*NY?;@x;q%p;tKU+bP%u
zN&2YtFA1fdHE_ENpQz|Ni1f@nma`q|BbAMr=_@G+S#NQQmJkcmu-bV02VgxgCm}~x
z>Uo0mJ|<f=dMM;j{gBqNT@|3)&kubDmVvG$vCukbqdAvYJZ(vHIN%5s@<0(3133L#
z66<t0pTrRNkVvYT2(+`U#~5U9jfigAV;GdW^%$WWp-$5<3`bVZ_hY&kLCU|M2T*pK
zQ{w8}nu8$I(&lOU#cryfY7an~t?DgI8bO(78+L)<x-r3wCk`ttw8jBM1c6nm_Ha6)
zoPjT`&KGRKM`&drRuWe9H!4S5ZiLC9_q#;FAUa0)WL=7S{Dm9fg23E=sZk6er;jw9
zaE|z=&=+`){ka0-P>7_`qr{EY=@)QtKBDq5zr+G}Ag^Nb8oR@Rf#PPSW5ZbzOVGhx
z{F|=HnD4|M8~r3l2T|R<+hXq~_}F<Hin1iWw8*Ku2s^ss`^-cGx>dB?O1(lFZ8ByB
z6a5#Z!i~m=@V-yH*hW3VZ1GK2)DzRH{GNu8EBCP8pGqTc>{|*n$<7+|IUZGiW<9YM
zsI_{U;EzHh+LKPUmCx@Ke^d~NAUEA)z~E?P2(K?;0SnI_2z*uI&vD1xsNXtU^vS|G
zSSI$leBK{t1)oGY9$2KrSQu79cDFB_T?#V`Xga8XC9E+04<BhNH<1JU{r74Yfq`zS
zMGFkDUGU!|HP2Ap&#3IGK0|+=sqgOT#U<@LQe6Lh%+rz-g(w$f74IPX%l)nJ-w=yr
z?Zpebg#}I3l-VHwrWS-uLr&c}Oi&nOhy=#s=*;o<*pcANb#(lFh5hixf;IDkRqXH8
zEf9jg>)^l2g%L*qlg-(u@9AoK`VggTs%rufZQK~*-qEgX=;aXW2+}$Y1=kM<FNVc)
z!=zM4f*jWJckjh7vT}$@Hs(`b@MPo)>k=5|$A3jH_l{;<Td<I<b($3XuQ$d9rioSm
zE;+(7zZy#6$cnQoD$Se;D+$Q3Op&49Y^0AU;#oZ1hjvyQeiC5{x<dV4dP#f2_>fI}
zYa%zWO@75o!j94{P$9g=uVBgkFDDeE6y}b(nVN_BJA&}6J|L9IlFl8BZdD<A=iVbS
zW_TLFa>&MI7+v3PxN#O&4m{M{f_p@!@Ev6#MgM+aK1_9~Pn`%|v;n!kW=(ye3~O6p
z-B~9?U4J7LLt%!|u-V#=zJpLkXQp1TnpJ<9S6(h-IWI<waE$oOPq^H;Q-%+417ODx
zt7E1a8HAzCVFQ@NvUnfrPEcN~O_75z&$~-A4KuqbV|Dhow%-lwGZ*HS7h9WcXfJcR
z`XDeFKJV-w&(D4)h)PNpbih0p;-I+ERr$cm=wTFN5#^y2Px?BSM`ls$^N9Dontiqt
zSV1BRXmu1HH<ni9Ns~6jGxWA2c@r?U8esNvcYwy}d{M{1Z23Z_8~hip!p>EyJ#4qJ
z!@a-W;4H1kaJc}e#wN%Rto`b@8GF376BHou71FmFUTg<^KVQzZxP1ujG`scbE$vu?
zq--XjJrD|wdrUQ68|P!j%+SSwd&B9G_6=uOlRlki*gu-|MC?|<bn)0ROSN{^9t3K5
zxFW7TR~g4QOy%g?O@wylx}=AdU7*P^KR^7T>t2t#Ji-U<io%9bw)YYwUk^CQ`CmHf
z#^rW&<w?7CuPgll6P}f3X*K!x!a?C);y(N7mx2lD5wJQJoo<c#d;@$bwJ!dGKIt~K
zr2!85+0`nqc|C#&D|b&g8s}sb!VoVl#pz;#U7Wp)Au{!aAkWn=Bp44e9W#cdbaal3
zHSIw($Xqc9WBx@HE)#0Nzmf85`<;Kia)Dlr8X<@eD*8w08IQD#Iw<j7)cQ#TOzpdl
zGprkvqJ?9Dj_)Gkt1XFKY2FS`lnnFwrga=j@6k-xM466o90m}&osK)5=o1UiANKxQ
zkjH*w>%O8j4Q3H7&t2TLPvDSA`5Sfrd<{G2Ac=M2^;fpQfi`aVqjoto4qTW(U4mj*
zZc|lodpxdyWHb0wBA&v{lG4^6X*5xOU58+B&<!@WRpiRk2sJD3o)yEv-DW^WVBK$G
zz<^QS@2FtMV9d(3i~|bEN~6f}16$<{h3+**UU4WbtPU9F+aPmwqwv6~7V=!u@E3hp
zxM>KVtjHCwa1Npr?LW~K$uo$nf~xzlRn{?o;OcT^lb_s6fMyuJ;#?)4g)03IOkt1Q
zQ-Kt9MHR5=CaAq4TC!yw(Tph_gacwU;_CeV%#&+V*yE|tS*JufTb5Xg0#e`!c2+-Y
z8-tR3r$v4^J%SWc%ev#A6vLMsCu@MH7khJ_V6g{jGnDBGX;dc_E(Iz_jsvoSHH)MU
zVilpZ7wN;ZN^)zxGNYxJlS@}n5!<tn9NOz~Zt}C7Sf<G+8~7_70dAtjn`+~h5I1&$
z@hz*o;#P$!Bk{-=G*q-O%x2o|BB+bm3q$fhM2}=ssEDyvQCW?b2h8ZtLj!{0YaWIt
zR|Eykz14fEokibu%Qj5av0CU@+!;VI)jtDL$i=0C0YX^s;g#zhtgk^_XHGs58@FIc
zKR`Cl0Ea?o^2x6(30ZOrmQIR?f>fj9GIDz5yAE?#3VsW>WDQo!WT0<s>*i3K&A(Y`
z?}klMxspjxN?~3p=SH0W>8yN+Pn`$KMZPT5{4pE_S(`T&Svql{iQ_8ks)vT%$l}k*
zS|)+4xCVg+>rhflctZNi^1P#K1qcP&8(~ob*I3_H`7EUu$kW$4%YD{&u8=7}l^URx
zS^uTqu$$FW-xk8C|0sAtFgF3fS=GL`C~TaOI>uP@?x5eN8KT+E@q55>`ZH<V#eY(3
zWp-WVNi%gzN6z(ZSybsDR$UL`fmJofN+4K%nUxVnAiMC@AG0bYb1sG7o5sGF+K;E`
zI<QN;pdN^p1}<&D4(bKm95aO5X7j*K{|*Dzo^ivC$Xm>Xs&M$U9t|b+;27n74q(~&
zFFhOR3V(`z*Z3I<VFZ@@5}ymMPYZ`xe;;)@wLYUB_sHDmF*5||;jK1enD6uLzFpn+
zZ=YwX9#PH<+RDU54o()YY9e~^ZH;JTOSB?bzN9djrWo=Y*>dGWpR5TJbk(_?t))J-
zo!g5B?u4(~TzY-Q<{_Y53SG2^sb4eh4Ty~g!BOQbi%{x>6e}o+>@a+}z^K_4B^Jy9
z&4i19U7_+_1$O8%DgB>REBi9^JzH#34PT#AS!ro$gsD+yocO6r3)mdTF`T3J+c=IN
z^f#kNiy+_swjA}ES~1`C(*U3P89x1kHcCQH@BfD}VvLH6(~mJ?&(F1Aj83&L?+C|J
z+-im*Qo}+dg(Y#dNCpo=E7Oe9w<i?&<>Lk@S)Ald%7&oMec|=)>amjkYvPI$Wf+!v
zByNHFom;EdoLd)|PVnBaLHd0DSLsrL*4>%N;-gFV@$4Y@7Wf*YqPqz*gbqL$#V3@>
zY$Ds{;oQ`{VaM7es|MI_a+-5_f{jeD7N<x1GHKn-1w^4<aC4`w#NeI%m3`;;`VXM%
z&x-zjJ52IRKt%!)C)Dc*tCtGs2y3t7EGE)fE)EQpX0otvKF+9xoLmjR3|rElCODTC
zZKJi;ZpiA+FGTf+eoJtm69P&E9IJLQy$m4UZN`vyZk6gOAASz0D6hq>05a`0;V8{t
z5(we3_S51d+-Ua7y^#zsHm-g}4>an=%;6$V2w3C(__apHGk_?+EX{mz(k=tR4-4p>
zOJnR#<tGIe0q?C<kw6{b$NTpzc#qQ~Pv_hWm_en*Ikrwrn$gQ1j7i`irY{idsVQ!w
z9}Fo4(9O@0^|D~ocDi8`b4i*~M}T}$-$Un%nlU7nM+~}EDc3d|gqq0HNj$nG%n9Z^
z3z)@CO#X7wiOZx7UW2r=p%w6R*5a~D>r0}a<wp{nRhzW~<uq4D99@s$T+XFw0x!v~
zDx+%54X)T3R}0H@rZUWG8Zi->)L+dTKo(69?v)qI2ERid&d}<}waJ}>esJXS$*`r3
z@t^iKn94|MMyE!~HbSO2M%y9%z&7$zS=tWs`E>q@cAlhlw2aG8XF?}FxH6ccxM9Rt
zzV$?!r8jXwFSzMG<edMdN!2nPwse+D0?TG_*d1F!4Y0CT79KX=o9J(r6lpvWyj<mq
zth-3ib_m28=6hIfBei9U+0ki|S5fNXbZB61v6Mcvfv%sUK&`~!SWx?g+A1##r6s@Y
zQ;WM4wrbj?&G!riAQo6AU;yVFai=>!v}t{0pR|2I<eS;F2RImM?gX+B?)M(Q@Ovb#
zisO@xwBZTYq4VXGyTJnbinfV{_e;=AEoh58n_6w=d=(#FE0A$&ta4?1aCFZ6VR!%J
zNNs1=UDnnFR*nJ#{HMd?X)g_`aSsY^<!l}SW5TYM=!-u@^;maJxOfUt>wd3;{bCyr
z%$<c0282z@K3PtpoeBM-Vz{qCY+>$Ae)VnZ-ikpJSR9zHgM%J8kfpTTsw<p1L%J|*
z>S-%x7MRlDzD0?Z#{Dq1HDGqXKK?%9g9R5iYP9tQ>tv)Cb~;^un4spXcTcw?3zqlq
z=ElOJ>1#SaQNaZLpM=7KKat^Ij(|o6*4BmwMppl~k^MiB;?@6iv3{kFpfzkY;JkRa
zKFk+T_RMu;gScMD+6Rg}qOoJFP*lNz=VA0(J2BB@!f~TUL`w?gdbj7;_a@QK5f!{Y
zD`n@_$(8Gk9WL;EY*UDEQfO#_`Cv{Des98mZs+c=zLTlfT7JyP;~j)H4^~vYHr}6=
zro?L9HU>2AB1F}g`r^r7L@KI_p;LU@Tbnav_XPTU<J6K9>h&v>=o$*eX$8uIOIqHH
z>)J!V3@XM`tKH^wJGP5lXa@k3G7REZfYA(a2MbYGE`UT2g8XxC%i_Po!3Px+IH<+P
z?}=+1({nk0#;y5+U4L34g%!fvzt1SFrWp^ll&wxo@Cz`SA^sL6I#9{?ne_N(9jzr9
zk0i{988#d{yQOcQx1zb^Q$uA*z4i~9c(QngDb)As=9?yzcBL6HY%i}TuE>JGQ>Qpd
zHphM!{pS2QKt9}b_hri3pd)o_6N470n{h|Of8@_IsQrWzrx`BNHzhH*l$XJ71Qk8w
zP6_crV~CQX`9F-EV|b=rwyk5^wr$(CZQH5Xwr$%L+pO45C8^j>PQKpf?A^PstNT0u
z-+%A3)|zw7Iqp#~snwsGqEj1>5l7V0tYG1kH7(2*(82>P)Gr0XDV=PVT0#nWTr#6d
z2xW%y9rs;GIH5A~Gic%7r^YD5CWA#(K_06W_OiZpQYA$zXL%Dx!-ty90nJLTL5Y;i
zbRr&<B>3yhiPgZ+(!v269CF|{ld~HbNb?>Sn5k8cGxCH==0$u=<3+5({2#^JqSIw_
z?2J+vH;`PHj0T-35sQQXn)-nNQG~tL9F7m-`&EET2#7C8vue*`)qXZ=%$hMD8k7K6
zd^MY2;j{5HE8iIsm!zrrWtPD)>W2ipuPCzFs9+BH6^Q7p+;TxU31W8O3rx=2Ku>c7
z!@#A&)cuV1^p6NX#&eMbYe-W`sf&Gpn&$|X`gru7<D1+DBogguFfk4r2lBTiG&IvS
zEMy5pV%eQ~uQ`b!L#?=#->8-xRk(`@x6Z)DMX&)kgue5$(Rhf}2n;kUrpTH#P!duJ
zWne`s+2|ET7K`Sd6U3_59?lT5{tTq}`^b)~jsVPx0_r)-ZJ@Ph4ux{VH~|{G3lFoE
zJXa>{&h@1N6pZ7{jcyZrK(*MR1?(z-=Yg9M69cL%palZ~3@};jcmjp3w|JOH<z7w<
z_r(%fSO^X6^`r9WomSk-3v5dm1E22wel=v%^UmC2qZ!=3dg)(4Lhe>Jvf~)Ixl%$I
zxj|N<-DO;=jY-v*;|d#yfzs|M374Em9xonO?!G+P%K!1=!=@PxIoj)oLH`>z#RA#$
z%(vuAwmUXPpx)-0gMz9;kk+hdHiAfG&Um=Eg!C(+tOS;?j?8gP7IkrJd(%?Gor8_+
zJB;+r*%Wzhnd#gvLD<>Tz6$>WhZCaK+gMh!Dp4z+q<%^}hAp{kdC#D2_#@|d^Fknp
zr*nI$Nr#+t`-=afA=b&TreG%$nkS9xE|@drd<Ic1PshZ-s_%{`Wm_e~z}`}YXVI<l
zhJt_OsEK*vKuw~*K@`3U`cW!@j3QW-mF_(IkC);F6<?4WWs|<-nse6WNkgRzc@sEF
zCoL*Nf}7O&pLq!zxblV+^dl@s!aa$zyiA0sUnIeA9i4SSqJ$O%7or)o7yWukO7?3M
zNhq)(I>!%%dOpGFV-mc{{sajbH06yiCn6N^8W|-X#gw9SL>XgafwmTAzfL5^3f^Wa
ztaJw}4Yz8yqDvRfeofn-U;6TVn`%OdW1kStftzWkle1F<lap8PqOevtE4Ekv=oU-K
z9<LPCU7jE7?kau5^uzU5%MO&AHXzPaJovHWz|S8ST(}I>FX?l0<+n8WA?7yEO*%o!
zQZPW=QaTZ>i@~iQon%QVgSyp{51x1Mx-2+0151$qbT->bvC^ypx@0+m>=qNYu78K1
zTMhMG+Ea_Oih!&saOuz1l?h;n`!`@808XnA3=@v`SmoxgqE6DqQoq<uW8ePfiLEIl
zmvqBEYHRQ=E&WO|aajWu3^m<{`y@{<i78`r9<@$UmoGNZ{v@gC1oDd1>cnnMx21lu
z-IFd4o5G{`1ZnWpMD_|)TJPk&O|W{b)b0oFzY-uJbVKlb_!wxaxIu;y6D#vtk$OxW
z*k&qz^qtkq(m8aYo}a#+HVQ3qqV{*i4fWwRUa)|=l5|s)B_`J-8)BOrU2IZ!G(T}4
zbCA~VNVH@)&qV4yi2K6u>B@^e3sQZ<(XrocCDo%sWxfe1vJ`~Lj~J{dUqob82VAd{
zuy-yxflB`571?80XGM2^$}>-b@1+ae6+6<VO`{&v)6v!C^>Tc8N8ga!F6hpiEj!n%
z;ukepEoY%Fi6X=fSi*!vu?c-t=3j?1iVRW{^Ks4?{?t$<EWSiO`?U-2yAS_CXq=}y
zzU-~7o0&fxWEdd>Iu$7*H|pU<o+u?p-r7<3gn<`8ho>TePDMZ($QjV9RxhzIKK<;*
zS6hq4BicX%1NXDU6gh{Fz5o7UBE8GQ)3bfeCiD}`v;6*ceq84VcPMp}+yy5amFzYB
z|LnK?g+7Q_(7rtRUcg@Zo<#rWJWCOY|MDL@IGX?6`<<g9ZNI^R&~v8_(~-vEkYa+q
zI%tPQAQ`jlZw>CIm0#wcU=h{HR1vPC^R#jWgO6ld*5AsDLdH33--D^-seTsN;9jyj
z3_4ZEFN@*zbz?|;{v!O*j0sF9)8Rn=73t%Lgzib|aaUjaJQ6(~iaHW%8ZWCh6Rm(<
zA)>>t^0T#MfprUMdqAlT?FgpY6__GC3f4i@AF>zPj#B~@hc>|XUHq_B+Va7*=cl%;
zdUU_N(vhk*#LvYRg%K5V(To&zkK1ZfK*@FTcD0ejmIWZ-z#_lTce7W+&llwE+~tG8
zoU)>v=@a`<!F7~hNxKC}m2Y|SAM#~f;fRc1rx+XJ`jvwpVtfnzh8~Ce6kQfY8xqOJ
z{*droz$U8~Bzix5VU#hyDcZO`daaxpe(5vh4qU~lX(e}3#PVP~*c`ZI_@ss8W#>-{
z3`}PqCa#^?+gtMJ&Lg#6e-QgprA_-%fvmQ#Yw8Ob9h^1w30>0U)nmKa)3T~yey>BJ
z94<>P5T2<BV9m9pXx&f+Re<VYZe<<&Ka`umX#j8tp7n646En@q6`Hl+Cs3$G7FAJT
zL%Fj~V060Y#sx|n&$b7O2Vf>zEA}1WwN*;FmH*%?YB_ynxJu-QR#+d<(_kS&VWoql
zbaDQ(mFwm!|LaCh4YggE(~NbBf7T3>Mxkg;QrN)|sS9yCHdM>_Vhs6ngn3PXSSF?<
z{^U7By@mnPAW@8g94f@-x_KQO)Zq^V>Yt@@Dg=W8xL;4>9@umOP(r%|NK?rjHBf07
zp&fQ014yvFKvwnNX=X5?8g5PfDTt0NVDcCt1w(X|3l!etT<ny$gx#)HP7~xo+E?H;
zgf07QtKZ+e8x%!1s`l2o;Wq#*oYu(EUx;D-#%BubCyYqMO6_~?c`|fhaMCO5Ifg#+
zQy5`tdU}(fM8rVKLfN+aWa`y;rZMz>-D&N$&b{sauFN_C$l4DvShF*V{_{-G?+~q|
z+Ou#gM&~q4My~t4RnJ2P6?01n`m@pPDFY(N6&B`r>)EeW)#@_}8+sQ_%^^2suy(-#
z+;H75+~Ou%*tNS8Fc0t1u5F40!U#$%!BK-GQyT01)vuHM73nk<MeF%bN7j2w4``ZF
z@mr~?HaO`OoW_1#>b8A<r+JXZfYP#Iu&@Xr@Tn#~40$7|Q}B9$<PCA+T&+I@Ou_K@
zjw&;Z8!1fmh=_P}(K_rb-OW_qLKyi1@eG+#)r|6{u32e|Kr6m5FlHllu5Lh<D_exK
zj5w}OXCXoO&Ggb6X$}1;e1%A_7+YYhfxU2BOtwxnp$p{3dFvAs9g&p*$RE|er251L
z$BUXTA2nzkcdX7`WuPRTY90ksMo^2qLeydPZoI^4w73r)6L7n<#RQ<iGZBH@N}AS=
z`(G)1<KZ-CwX1&;os8x2$RHR6+Qbuh${`PlIHcZ3bQxs2VHs|K*<UlBg!-VzlnNG%
ziR=cpA=s^)UkkDWwcWN9a;p*Xeut^To%*2oe(@r1n-n1c^BPEzpsUfv)A8&N)Fez%
z6}A(r2uW{7-YF2iuOch*tHK(aJm222pIz6i$a^1L#$5aC?MKp6qVY*4-eMLxk5?ch
zd&4wR>w3U|^70h@I#4LPnJg~h?eZ_j*}5CKnusanCfs(}7Lme@KqeAjsYPRKRuCa}
z0>K<&&n8|xCLhnoLNu?(lv(zBqP--44!IwW16Z^v_K4+#y%Hq~-3}q&&7Y@(NBbl1
zbIDMwxgsBTN;(r=Rm|UT3(kzqXbc4oWvJBbdgSE7=GX%vY1poaO7=PZ4p@>nnkZbP
zEaDZMCphK5^7B-Db9XwkzQAi(%p^7GZFZ8=yFJ&3EI4+@Jm>_tX)kaDMTrR=10Lxi
zd)b<<sui(^5KNflF$j3Zou&tZ;zCgVQ^uO~Vv$`ztJ?6*L(y%HGfX!L>kG6e29xVT
zJoakMpzJQ1tlo(!y1ECUY8<52yb9E~X|nJe&k#IYwMHry9=C7Of+)pu@?78t+Up{<
zRA~FV)e<J(rXosYdF+ZvbKdiQ3G~6SqeGvj_Z4$tHclwLD<N)7g^2I`gkKNESBu`N
zK&=Xs$JoM!RnG){%`@-#V*m2Y>2>db*SM`?o83uS>-pn-Uw-tU+<V1BefSKm$SykX
zLpqVQe#l+(?woEdV=APO%~}=lvc#g`R@^}-%RX=y`%iCOhpVo18+WUVhoS_|!oD`0
zmAmlKk0{f9Ds;z7NC>t-(2kP#6{6S|9Oj6me$7l-d-A&_5~cN%Rzc+u77kB5?XTjY
zQ>zBPl9ra2vvZra4b#0VwhTKqbG>7l!-Nz!ZC%7@PwTaRBJTh7l!E1uy{~?Qvsk{L
z)BpUG{#Ra_zPr8C|9H&*O)DIuvJtz^fZ+3_9<5a)(z@wJ{ZIf(l7EUuiLC&X@(2k!
zN?4nSu{Kls?nCY<AtX&tZ@_&#mCecgcuyiERLTfF0Pb)+%SH(8jvu_&gTQnSY^UOD
z!ETw`oE6{e)&nsZ00@$J#$lSNjC6##q+<dl0v5HD)aj+Buxq}XVJ1$dnzZHTxPt9>
zgbZZwDVD@z!hlGgN|_Q3x5kjWhi)P$ZZI1h{FXmo@4S48jIvyY=BfB)e^}DoOORz-
z_WTvBe}1aSB0PvM*@Bs8>vvkiwz0HMYJ$x?oZoUgWI|%HeuFtjj=9OkHH*S;Mni%=
z8s-l;J7yODn<Z3bH&PU_EV}@e3y$gCFy1hhpdu(CYdlo_V7>_;4GJyE2uy3&k0EH=
z38^a!jd{`_%U8o+nijayT8Kn+T?ve~#4<YM2lBK$r1=Cv5Dm*=qSKC2=I`&{;OSk5
zIYZ;8TvG*_aHXB-Xf~Tz_BF+ibG2DWbw&UoW{i=^dZg^loV*Z`=vY^pxCcGKQcgRv
zFcs|e8SvPI_BXY0&xY7Lo14G&a`?K6au;aNM%#G+WMkfEE0wC?kANHpOH!J!!kIy;
zB!6=;08|Lzu%cL4IgvN+9>q(aQ0t$zGe67}aypdFb2?Z~YN-&Mm!YIsG-ZCIowk9&
zGw&kettf$%v?tTp*k0RW|Bme?8_K|GR1*41t-YPoP`Si<bn5oJQIpqi3#J)9rFmgo
zzUIJ-1CKihgHHjs_O|if35Y@2!CYdPb)}hjW0FU@mI?%duPgMfG2zVKKM4LjTp~G<
z3m)<g)bo5U1?y=D1)wJiW8qNOok1n$`VB>tYXI)6;5Pq^Wr(hneM3+*wYkeAfm;--
z;5OC_4iua><Izs7fjX{9YrE1`z^6=<hCy{GCG9&l83k?OkpF8`<1Fcw0}EA@v3h5{
zAbvDqFZvHxXoFl*<DPP+^)2%Mu0mr%)0KU`Mdq7tIf>;zZdr?}Dd;Omi)#M0YHjE8
z{}!(Qt{@#&m5tjML+F00qqxuuU5XBfXbuY&H40A>CG=-#f+AmBwcV6luzdiB`QlTx
zy=%z8JVF75%XjnXditaKCT$Bf(xVcH?vozlD~~DNOUo9uGyhQ9s`Ms{+bZ?@>3Y_f
z8h$fs<#_Y9I|$t3c9-4}sMc-d+pbMGBGC<O4fF}+ewtHbekaN{ju8~6bWDW;1XhZ+
z&bfpd##Ise4AG>|8trqLOXmC>EP6%AzOGxes~m%HiTOSmMkTEa5rZnWR^6)^t?p;w
zbg9q9-@Wxyarf&4hxIcKI}iNMIWs0LY1oP>kFm89Bw6rS&uG-0?3d>(wL9)^hsRM}
zs7%=n7y<tE>XA(+8+vpI24z?Mn7cl9Odl?@Y4hrWKL>n2lsa^<JHnr2fc}!Q`G7%-
zYcPrCGC(&>BKPuvTx*$q(4Fr@IpZhU<(8F&{9obw&>6(3Kvd4bi5p-P{bY-^OoFKO
zs5Rw<65lzs*iu|w72_#P;_kBK%dX+i4BbP+3gp*<##I-PfrBxIECpwu>0Ge{0g|2-
z_?ja`O~<FnmDUs@<3YC$yHpV1;uR=^X#Jut$K82#N;+MR^=OX9*0$R^`ryaYhp#T7
z0!*)M8jX|u=fMm<+|dIB2)6Gn=}I?yu9fUc#D0Fp9b=K0vac#5iiwXpiAuC^R)Q>&
z;}qyjA^LNC`yp4>qD8JG6xXT5MKCBAx(g##4W`W1RlN2D`b#>cRmVp#Ju#)T#Z+8<
zTXe7uEd$_H1@IOe4urEI&du0!#CgthMx*0{)2l`*<0VjPBsPWL@lAL69K)?GnG&0!
zVWUw$Vg|2~T6nC;vA1-~t&OoA*I+ZQ%zTcLN+_dC*RmT<cMB1>QLt%a-T7TYpW2Q!
zjLBJW^>2IS8kfA=eQSmkHJCbwtD?|B2l@%8ZboJsDesf;eCb(7?uLJGzC4^k>013s
zO6i;!G_HGk*=tz&!eM{RZm<6>-vwxZGDm>MZW0_wPubs(1h^{P{HgN$*{;77Fs)_n
z&>3`zCy<-#eGbg`gap7E*<e;)QB;Qz1)h|aG*hbUu#ikzT$*Csm2QrsCo*LN%Qgh3
z4yTE9W&hc!cu?zXL~3E2Bggb~ZDs}}ss!q^D`f-WSOV{+{Kt{ch3~oBw`@G$LxpVY
zzC~8HaVtU9t1djx1fToyPr>JZy^?BUle0SCW{M!3zk4OW8%|qO7mNR&nNo|UwmmjG
zn(sG>Wj#zPka|?x0KX#^a03wuI1)!g?pss{$SfdnGY?%L6pwvex#H}aieHqdg=Ue6
z4(D09(xL3FGnE^A!!>_F)!p>XMZDcxs6719R{1;$`hd>{d;C$>Rr3a~UAt35r3UsC
zc}DFe0#vzFYM_m(SRyWlR&}O2!*Z6P>Vl&**c-_%bGPL8LWqXDCE{k%SiM1*+7ErG
zp<bo*oBFdmHX3S{_=h4SZd9y143<N&TLX_f+qvO1mRe;xVS6$E0{NPiqN8X_@tGP5
zr>%9oc!KEfO6bSijs2U+TSG~R4@DKtU%#{UCNtHgP}5%QIywWe6&^ev-%oFVb3iN^
zCrnCMrroLwkg+`#Ev<|=KhX=kC~qm8#R9Uu)rqG4O~$CmU($INJ(4}h+vh5avSp&%
z^DEdX&C@!7?MSe|PDAH1V9eh0TuF8%R5edO*Y9G<%B;*Zj?x1SxG--SjPRUXSRf_4
ziVdX$1Gx<$3O;AcYm!&hc-#w^M6EI|@%ZR^d`pu$bl=uR9|`Y-V<H~9sjMvoxIU@Z
z!*nmTM>OL)rFptfTv#fU+)P5Ai1|WyH)++LX1_|4Wc=9i`S|H_FC^Oon+ThMjKTXG
zFCSD6*jKj(bKWICIIqSf8G-TO#6h(0A~dqAfd-kgKRj6Z((YTwd)u#ZHtLnUJbP9X
zHE(|O7tj>-eE^8?&!9cI*Rg<+f2RDA8XGlV3gF{!<C{u-l84vN#m7Sr=DFhN?!08#
zQt&C~M2%#sbXhR#u;s8tRk;vjQvr6}8tYaNQd6<BSf-+tz77m;r1Kc3o@Uvsp!Atb
zWjPkZSdoDDW4BGgM51={$&X`TPMd6Bi4PaTTkJHCiLV(L7}J<uE=16BV2ydK`IT-4
z3$CC*?j7rM#>2E+kz-@{vyO8slDCe6*p~Fu0udg^h&@@=)Ba_vC4-+`*^01<q#H&I
zUH{m*(o;DS3T6z_0(t2%u;*N)wTQluA|B4ng^-Da;TEt5?30@6z}Tcl=WB-9Rt7b4
z*L5T^kUf%3X9*ym0RzWDz8|+=B0gp{@H0^BVp+@B(;RR>?iQ^MHfr1mWF%k<_}Dhz
zI<z3sf}~i?;wX7r4cuwSz~y2UFD7w9+h0Mb%elwUwjgM1Zy!ml78o+R3Z4%bY_5P+
z*#Zlg&ghT7Fvy&BeG|$?jvJo+`oLk@uYg?mV)0|rDu^$-<botr8uK$W-Ffax6G%do
zELeMw6wx*F<z_|>aDxfpAB@>vWakpq4s|9=fM}CSY~Vn-V>0Pe3>_lj3cZyvv_E0N
z4GpMjNEf;68K4nJiW~ePm)gjpAQ)Y97}DX>8ABIJV`ODd7djKc#8}o*XwWLAhfn+5
zI7T?ChA{A&B^A#9j24$squ6jsI<B4vgZNkdRQO?tTZ?YtV2=r)!lVc~tmKdccoHJ-
z6U8H&@Kieb+_~g(p5KONW(%B=U%-uOdt5pFXk391KtMFAef9Gyog(z%AtnV_yeF}=
z)$ysu#RC%$8zpRITQ04iMqw#KHi@s=DmNl#jN<l502J>b2Wl~00BA?v{1r76C!~f`
zB$PY>RFUoAF;H;bNF#x@wv9yOmz~d{?+;iUwguXbp@TJep3ymWm~_5AXj^fX5!w?$
z2A;?uYt9^yYQ;u3+Ku8G;DEOdXaXjca$uVn*=Epr)>b<R_aAOkzas~vs5z^mD<%-|
zq>0P)Zh$q0+v<c(Pl=0BXkKwV^UwY`J0S9BZNsRWm<Fa|1zOL}?x99S?Ln!%7&jMA
zf_x`n0@hD;(?Goh=E-2cq#&%%J^3H_S;z{~&^Bx@+(TVA@~*)z`xe|D<|o1&qwPo2
zh~qw9cC;6qid^7Ot^qD(rIgh`)jDL|U3xHgaVazAqN*#mA(=AR8%`u3rAj2L1<}sg
zBCSpf?_oH&dqY`u9>K_XOGu|fW%l3uw)po`-2RSk);^K2DSX*wAT;!9f<-`!W^7pl
zucm&ZO^TBvpKZriitqWrHtq+pbSpJzd;xOE-6%O7ux<TC1h9n`9w|&t2Cs&eXV>4l
zbR0T5n04S512;~fJ|AF(Z!+3{L8k{_x6yV!KOeSy-jFluCtth;QrLDX1v*Rkei`p|
zpiqegHXFM3>w)dzDso0qW)m5hlR7`4pUpCav_PD%#-qVeX#9o^JwGAPnaktU`eCa1
zf?}J+q5nER<%<?EnwBLpKg9Tj47RBkKStN`^OR9|Ci+O^%JY8f?Zfi%{lQYuuQSIl
zhjwAb9s~HT(g_}P1+)<8Dl35&8E82pHI_Ii0!V*iP(EH^`o?PW>hpI^kh^$Ymd8p|
zq4XH-kTQ@cGG&H;V9zmVB|%3_HFi_8+iH7euxqkq6Il%>&n@HKJo^yngRk&Ht-+d|
zA;(Li*bH!wc0d+@JAlOVAtNqoHQb%w+%`1`I*SPhGvVa+u)*67?UdQQTaP!1iEqx8
zSZ}mF-O2m9Y|!U|f-l_W{?Ackqu5_8?7}~^NIyr3)xuprM$zK9iuibG^6>L|O6=h+
z^fZZ=5i}q$rl8*YZ#U5j^+g{Iu*8n6ez5wiym@{-A8jlQj>^vlZw?CAG15Q!b#=a$
zQ8LcHmn4)%?X()W7UdrR&C5$vogkmXOy?dGIMXrd84_DoWp6~@BSCqIihDc<5x)ce
ziSbRUp=3UfoC^uR2nE86diNT!PNMx;gE}ykLg$_XLrxg<Nxg!Fm;I~+C?77(L~Qx#
zz^_eX&Uce+lLgZ&))#iw(X!LYl5811D|e>#@x$}w_Lj-DS2}aT%*)b~E(d=hhb{^`
zn9-W`<zIj$%w8=3q~E~KFDL*2+W*+8{KJd=7p}y?)yVqq<Md+G6u)6|2;U_PhYP)1
zJeOq@oJJa!gpwii@3q`>kjW$g<+AWB5-SqajW1tuDK`>n%2y+e(F1q)9e4Nn6{X>5
zAK8Rad;`Zf^S;%cygI*#++Sj*Eg$IcX$~wp?zCooq_=)*@a}#f@@cF}81GBs*3m0I
z*3d0py&*7H0W|q6@$3+bYGg_dQ8SCai_iKYBTPV3#Q;FOOC7#iH0oz-nT*epXhc;;
z!Pu%shB9s~Wg1B?Qs(^!R9fxv=;qDQo6I`rqrGsPxX{>;su<9;`kJfGudxbgwE2nW
zGu^rm!w8c#JU=2_D)4b_9R#~z4t>a^cD|Cm)XP&3;FlTlEwP7|=EuHwUUtHomdsjp
z?zx;<!0c#$m#`Y34pE>)SSSapcN212M|5U=xBxW;XGlS?kX10nr*aLebub*awFBzS
z<rpg}Q=m5ZW4X<jy8L2@fwZCl2~<Eu6qzn&6nBd3MaX7}C$^72qrmVw?<$;GB_hEZ
zS4xQ{hx^IIaT<e@A|)X9o9O_{fxf<(?n0xW;2z4ftS&$kw=yeLssppxnrXuD#T()@
zCR^*i%@jMYoVbvO6?9gPCV__T&z9`jL^5U-wO|^8TLlWGLT0g!tfF~ll31-Q_Z@n!
z>R4!Fh+gaO8Z*bJ18}YoowcnP>q9c=<5i5l;>wBrD{=?6z=OSyl?Hcbx_$PQd~Pzh
zINgRCi6f*I^IDAcpk&UEEIB>&PbcI#FqaTgrKF$~P9XaxAzO8LwM~jOtE{Bxd4_&b
zDZa*&DvqB?TjvI;G6uS~G0ci_P`Rdd`Pp-<GO+7^(#-z+xY)|%D$AIXuF;dwTO_fb
z8NX@y!?4N|4DHdC!~gS-mv+h5i1kJX6im;d)z&U|2P>;vx>}}|?F~cT0tLBUrh@gp
z9HgRU%#DL|+n|eFCIr5>Hhbqxr#`c}<j<+_Id!FFL4dZqhs1^#*>}ZPZ}Gg51?eAf
z19L08$Xr-Ht8Wf^cg?&C9<-jzoR8vSeCV4M?!G8{+hQozV{%u96_FI<&rPQ}SypfG
zP}rzES3y1bZtC1_Plm`h9I@qs_x+^SPpwyoG;DiG;EH?#JA*mnL?hjU8dE(Fyi&4R
zaa1SSC_m45xTV%ZN9FNevZ1L&$->5D<C^lCJM?RF2iEL+?J+vlj|3-=7Y9bq;PZAC
zW@mlnX-}oix^oAmsMR4i)!0<mWp>#n30%-&f+Z5WpJy_q1*1E0#fB~Uy~Km7`2rJ|
zd#rJGV#opHD+9Cf-_c4_M&Bpt5-@Z16q-X+^vvd`^?5ttiu)}PKwLZ4wdl4uAgIDv
zxrd0S&7b;>aB-d@6;sH{HRh$_o3AA-+Vp>tPAFMR-yQw2YTJ;_gl~_SpH+XzsVa??
zw7Q$B6HwHA{HMF<uU3i@P)UXETX3xYR!%7X<6R{3?M*jvb<h`)_&cS<RJq^oAB=wL
z@QXy0nk2VAIBhKg*=Sb(V-Pp4Z`Vk|szw#DC(;s)AOE^!QcdSCl$U2be4h;t+9BHz
zC4FJO&s-=*+EHrUtfhOvS^>}GV1j^NpqFxrA0X(Eo6HVJoSs6IdABcx*(pMO;>N1D
ztOH}L7Q*G=Tw}!@2jnB2{&(fMPHYNc9(!;4@&*gd*(goJPHeMZX3J;5;4O+WbS}Cv
z_fAp4d@y<r_yVDBL!CB2y}^(Q+;}BL>~6p+l0bN$6Raa^(i%-{l?Xhc8p_(Y@UgpE
zi6eo8U_zY*RGba8^GC)BgK>_J={-ef327$6;I@w7PerGLTb^EN1T~@WjFWwu0#`Zm
z2ATyYLS*HdWr=9ZT_3K}0Ibzd@iFs-8n*Fjx`tQEUzalEdGr}0yiP@<#~Q$#@pUs6
z5Zan62>U+{bZrEXBp;9r)C)o|;Jg_3qE$*Mqnn)QMA+t4xsMXXn=<V8{AlEAl3w;J
z(tW%%pcoyex3gqL9hh<8>g+;S^0Z?Zjt?j%VbHceL_`^4RXAtuVlqsAeW%(p<ok(E
zXEPN&r)&5%WBIiGVh?`32I*#d+0%F~$OGVMhtO^ZKMO}Kw0P)mszAJM8wmBMRkfRB
zC#?}$#jNByBpyL5aNVu<{Uk-1M8s(^#Z_X<D)!76U_{rshbe*Ww0W+6?(*+W9+IvO
z&%8EeSiNu?zuA$<-hqMR4JwK)F0|dktR#x~m+w&yyF!EVo1y3TO<4V#<cR;L;{7Wq
z;oqp>DQdR%SmFquzP(17Qn0NM2I?^?;KYV+$@xeE{zcCVmhBrswpVWQZ$??4uQTV}
z{+<ns&%&$S8RllWo*NrNq=F8edo=BV<JVpoAbW9|EN|4_kw2p!TI&<y2U_>8vG@c(
zCNT+D`tlvBWQMNccYr3BrJy^<v9E_0Ot`e8(F6f{p)k$q_U6<<(?(2mKXqK#fZs`q
zc^eOLEm+&0Ci5IHH&&wP%ZB4fHvqF=j*Ahk$C1O?Wd=)}Fv=0XZpU7QM~*zVG$f7T
z5rb_2f<;_i8p(DEbv9?kn~p5FAOnv=^CIqml*o;#lR>zkQwg&<N9ni>U#xS0Ufovc
zuX_QDrGS%MV<F(im!o}M<u-QMV+tYS@mG04(UMEAUM24Hza3l*lYLYgH(J0ih+s1P
z#tBe7$y{irSFb{FbH7OP^~Y8Lph`7oXje*si%>`zkb&oW&*bq&4**Xk>$02F6FN7U
z;iw+mDRelnt93G+WVPtWl1V{TF=>!H&5!${RUTt142Bb+FI$XLO^*%wY?3FDs9+{V
zP6?%|FG_D|%WaZ-S_F%^WeP`!8QIBPOG0p6b7$ET7A3~A(oEZ(R-r6LCND!apV!t}
zUR*GZu;G+%J<*f7wBu#lmoTG!qP0u~mBGLiNld#caa^zwVcSlK(QFhgR4w{xcBJd-
z6!(wnnX;I86bn-@Z!v8TO^vSQ#xaug8|~%<7O=(|_hu~!f_UvSw%uLT<BB`<17NN1
z99}r``r`JU6IQt=QOyp6S2DHBNOfM~t3<rk^aOmM66=07n8VG|IB!aq$e74E)5uA}
zX(Dz;C)k9jN*PV?>w*iB5s5j;t^v8GyRu@dqev-J*0k#FFVd`qV145F=EYc|ssL}J
ztB(J2!I;Sx{hUS@24X<R)o`HcpQ6BcGT(cWAeLhB>Jo<1>eYu4I5pUmuNA$&i`&lo
z483=rVSv{l$uJtv;#>$IKdNtUBP~btOt1y6EQwo{bAVpV(&u{xY8r#-%Kzf44KAB9
zMJxTOjuzGMl+f%s(?A}PnDz8H8$rKb&#XU(O6b|%8mk6(S?X}>$^yBEbad@vwXoaT
zN59ljzAW3$)^kp<hlJVh{Deg2&fXX8$oU&nabpOTQbnq#R8#ES-siYIuyw_hl{Ed~
z1x>|0HywA6WC<4FL(J*PID*8_(v#X^mVOgOt9S0!cA4lE)hgyi#qqp(1OhVhP_7Mv
zQuqt)2RT73%Q$E>$pDQAs5DZw0FXt}7h;ML3pO85G@1TR(ETQ_0{3xxz18b-(o1$z
z2_{uD+k5MztmwnrZv`CB?3n?`WrO5{VkO6_q5LNSNuu1HlQbjOl{A54+`ET6zmLL&
zUrLmW4h(bmtJ*lIvMA7$D|J5^g7-WaVd1zsVvZXL|12nC;%<|7MIT@1z8;<+9k)re
znb$h*4ng_lG88zL&buP_eS7OUbNF9)joq@qgpbF5P_gu!*3V5msKzB!$-#eNMZcY%
zTk^fW+G2t{Rjyh!Y-{|yeBkrzxYYG|l+V|4E?wH;X=QM6D>@Nm9#Z8d2L*O^5#YZA
z2^b|BDG-X1AX`$ZMQpr9Za%pcCVd7BvtuT)9N-=V?(BCdB^oRnw4Q?g5wM>-a!QVI
zF=8g6hJgxnq1<u{j~2Q=%vPRDhiA#tF-iqj(7`-m87vjtpjEB&f;5z4lJF4I64HL^
zrmv^RwG@3$(S4c9wM7*>Gx9sbFM8-%>g`{^QNEL_BR{_j1k&$`B=dhP5dP7uD67aT
ziT>XuA44ZY+yAZ={tdn+Mn%#7dp7C&RL9{8Ppyh>us~*OO<Y2wyG9`hSu=tR6-&4s
zh`R=t?AP0byxu%#X}|n(*?D#Oc0Q?O7OeA|X8M%@&Q4g!*XP_PmwbT&?wcs`<Bm!7
z^c6?Ta9XAp65nKU*j_9q)V&6%4`>jjm?%iqM@KCXi!Q|1CU<J&7YQa=a340Eg`z18
zoymCcvgmhRWt+-P|8%oWxD$4B{evwJ#L)rTTwF4*l_Fd5Ztg|OAKKYFIc@xSbUoQR
zDnTZwf7a7QH%&yHf1tnFd8|Nl7!mC)qc>!n08g%T(Bj?ZidGG`lLwZ}yxuU9o>TT>
zyKjq0r-V#wU`e$7(U1}~w?5>mn}~RT(hS8MyHpXb6Sh=DOMr3<5#h{~`gXB$3$Qdj
z%pe7c#;aOieceAE3=JkVa&Owm91&7BDliJQ*i`d8K%ZGY>Zn)3iWt?a3KwdzL_j&S
zDKm>3C}p5n$D-Kw&f9$8l?Q)_xR-LVHuU|8$H4?o=T&c&BYS(;_$R!WyWy=oZ9Oj4
zFFab*;=Pr}+_;0vNF%;Gy{8Gh`m5x5)DjtMcBfg<R7!d{1UPlSV3bz*Q~dbJ@0gwq
z?XnAe2Mi$wDWdPRELxZT)-rsqPviCJxe;>{{=>-@9_5qxe0c5BIW)~sEeAoOcfv#y
z6Wpqc&J!=6x+f7U1X;72>$mCT_y8LB$T}zBE3Xgv8KSrSh{PFQK~txSIcPye0UKx5
zAsOZtLrkMsj^QhaH#MRrYfD0u2h{BKUCAVm`5OSU#z5B&XR=Bb;%~B6tVh2;uYwvD
z4v=hz7<x${)2dSv_aRu3VE!}Q;Q$wANj?W;f0C@TMA04r4mlwUBQ14^0;c%nwdm0&
zGzvd!xs07mMXyWe#>KL=ueyAtYFq6oo3lr|Cc2!q7UnJb|DHW+!LB36epfBFumAwm
z|M8Ig_w3R6JA&iC568bPSvKsxci?<h)Tdheh#+x}m2B{}$o-Q%u#0MKHSB)zU^a`a
zZKj9>6eoK0`pzmeddmj1!Z#FWFf)gln|Uaoa6s6lDh;W#oco@E3SNzRuzjw3WoovJ
znNz9PigI6_WWVRlS9%KuMmptIhJU6|Bb^FiAEjyrVe-L>AJpT60d}i<CZ{$O$I_YD
z+5RBRi+a38%Tu{LVYrmM`{VnXG(+_C<Mk!{qCk^6pZzn1(`zifu!O-SGz=~BMSdpR
zPr~%G)xOyI>=AKulMUh-7U1wF-Dd&%w*2dXr5_7S;HeT`)lG6DQ(X2u=S>q5W#74W
zGZ8qszV0-yU*{Rhv$J#rn}d<gCs1gN!Q5j)-v*;0_^b{6E})D8XxEwl)&?7+2~9RZ
znI&C?nTTd%NVH1fwE`yx#<r`#6m0|#+`GJki*yJBQIZ_iMyW3lw!tRTfUfzo&$sn*
zcC*ubU)9v~w<KB4vwMe&=xLy52FZN=3iOHNdHz}alA+!38g!C%8!}b8^ff`ZJIVY#
zEk>iXZYg6_KcuQDL{y0OayzJNG*uf~g-OsjNQxp!jqC&!5Hq<>L?5?kwP0TcJ8}jc
zp_j;YwY};_@#=Q-jm0|j(<_EJp0#F5H;UV-BD`FE3!DWNQ!=bmIB-RsLoSC3#@lk-
zl8{zd(HnN9c9dv(yOUTts%g1GA5ab<Z%Kdt;3<zs8^WVc>Sx%36zbAw&Wg1R3pWUr
z0H&{2*sFp$`(Ds$b~4|#y6j4|D&~taGZ!qDuC~CTjKCJSYs@?$<GrpThAswa_9jxb
zJu6+MU;%P%6O}P<xLE=-<%*M5o56z98@RH0Ukib^S_Q(D3!dO<$`Fka`!u|y=1cS{
zr7bGalpAW+qw&gxo3#tmscf%&=zS6Qvu}P{sPKs)zdkYHYIZFTd`oWkp6RZ+0v)=<
zspfo>g!E|*Qh`!94sW_Mm7J(4)oSZVB@N-#-I>5qLuB928m{iWpLSZ>Xd!HHq%-Q<
z`>WZTC~I$PA8dFAH6eO!)z6WclB*@?tMkuiKF^;}mctF|j8KsH-#A^LYSqtE^{TTm
zbYsz$MYv_8)RkdOQ(pxrIH#TnA>Y*9Aa7L7guu$CC<DJWlM@9!Wq?X`Ikcju(@;L0
zJG6blYft3W4JYhrf$u1ZLgV(FU)Pt&kk-=8l(w4B^9i`n5#0GS7S<HM6>^`%(9te%
zd#go06&P41s|yWt+l^ZZ)&{uIGgsVsOP(-Rb46@h!2k_lmoDyA>Gb7V3){lOIFPff
z2ME;KgUfm;NL+5g^|3Nz;EHk?=Zazr=P|A)7*{XDpVyMO*j+q_zWQR2fz6q5KC9J`
zfSc3fF{#h3*e>~a?!)wb@tf8Vn`mkU)`sXne{yqvpysY@0Jr&!G%ubt>ZyxM*Ij4)
zLi^Cv4-Ypz4tYG&U>Mbm8R<5}fHUi2b#YNLyv`}-g6Fw<RyR8XR0Ql!Na?Nquv7AY
zYIC<aie2jmHnWaf-gJOHU(wO`;{5|RponlT>#jx^>Sg`)@#D{xcf6;GS_roX{^Y?G
z<A!SEkAsJ)F^Pj?L>89Z!xh=rxDN-eOr94|6LxBd6yss#LYQ?ptD4qr2w)g;arF!7
zcYB6Q@q;qSugL=zh)dT7CaVS)7az};oA=k-KSjMzwY;NZU&O@XTl2K6JLer5v&e4s
zEP_D4Gq|}i${~sp(^T+QqP%0`)$&e)^?RydcXC=Ia$O)Bs^8)IbV;rUnG`FAhN4aO
zz%7ayxl(q!PsO=|zH>l;uC#cc*x3Q^j8GTdIpSDOc7(flD|a+?u>^)ExQc$4><D%3
z;b`b{sjteTqtnyVU;MajYthtE;X`-Dy(pPf@?(v1(EY&w-&g)c)4<;B_mvL|2LQnJ
z|99mJt7!bg!sKG(%=o=^Vy18Vx2sz@>bh}Q>?l5Y`i`RCs{$q(t&({2x+IMmWaTsj
z1d3{^Ayd(Yn;s*?8%>?}D^Ge}X3rXIvXjWq2b%|8v%GBVAyR?6WJffogC-v6pn~_N
zt(hNqTXlA6`s$$@DJiABRQF~nq+8}qA0N$o4ZmBV#icb8acK7-yP#4JK&O89_Otf{
z1zX?rRV#2Zw5w{ZvRGq$FC{Ll88t%yJxd-o&>+LDRPMGjHa^j=1)l<xiP-IVRd0kP
zIVcW2RzNpQ#O$~|0n#-V-<^5pn}hR&q4mZ2Ol*eR#&U)$m+k=pcG6M!Ch+h}?|A}!
z@dudic`A(_N02L+e+oDM%!xCb{N;iKGMPO1c1A{%TGu=93j2r(oPe5W&eH})Q_H8k
zC7Ut&88u(*k06GoWJaLg7p>S}fL4KO2khRdnd?7sbcyhR!AcP`*2b`%<m}w_A#IL;
zXYrzfh|A+7%6c$TPa7s;!%4O8KS7)uox1n~R@b!gaC)M+It~K}k;UEm1_wr_-?1t<
z9TP6DB3zjQ)}9IJeBsEl4i(J9&*y1xx-aM9<6(cHo}YkWGtI!#U+8I2ntcoYZSU!|
zY5ur>?Hz)LLDNYAn_Uf;tRCvXa}U;_yJ@URtAUOkyY}OpAlR@6_>&}>bV5Ab!*?2b
z+$a}BBz{k7W#0}+Gkczw_&0Iu&z8cYdyl@!I73-+Y$+GiU`ZK2AwgP*GchQau%QD4
zGvQ4}xTl%M>^L&~JvUB#`mR1}Wutit22(|fn6BuhTBYbe0l9`PiT-fKIq%W*CJy=h
zTxK>cI(u?;LOZ-}>eqlMGELFiQ+CwST3)USJd_-geTc4D`4Kp2E3P+Cyb6f9h=_XO
z2Kh%(OHTWiiZePx=s;}Pz;&kj79~E7Rrj>iQV_YfWyIc3Swajk*F?xjyrKNVUG*rA
z;Hf?b5YcCq)nGlM^;YSt;I%dM8(N1lSC1u`GHHm*78Im=1Yhft(a=jCL01FO!&;b|
zye>!k@~JS#3NNd<oYjm~){`LZdq2X2m57SmJ+gS*)qk$R|9*EQg`@fTI6x=E7dL8>
zKUu1@bzoOO)2?Gi`Z|@#y;RHDSkxR}XGqrNLz?WK3a(@QUbz2r(S;<ib)s<4z}e;(
zw*rR5W&swLT5Yv7C(u28ou2wd5ZnGr?;wi-Oj4y186eXbMXM|$K9Bkln`=cO-Au|1
z15CxyDjOAAWwWRyyu~*S{Q58udk<OqV5zeEF#%!iPldUA=0s?H-`O_x0|&}JKLhQm
zmXlOn$u=CE%;Xw)ijjacB|fG(C*6ATtqO!ks->Y~#o|Ue{{f4u_qG;I7?toV2Zk(P
zEZHx;(mRV6Prd;9!JFf>!$>U(S2!Q>p=8Hs^|++rk}CE?@2J+>KI;CtN?7E^#Z}Lu
zY$OX&9VPt+tg41bb@ef7M8>9+5*9L5^1@pdb@a5xLLF(ux2)F3<PXon@2t-?j=~?r
z0DeZv0aAHjN2(E%J0>3X-5o#fTHBedkC5GLg#{M?a+}?Y?`Xs53l2u1DtF^PkMcO|
zhIYJ7EdfXaY9xD?N@IFYKU~)9Oh&)fn+VwE_!JMM4hLExYk^nT9o8J>tG7W#YRTz;
zkax~>bAL!DeLuy33k#R;<kiRW^6(nu&CvFKI9F3k8{bj#9oMg;^_6-LUW})@&ueM>
zB^T2%*rE(L^rii$wh>1KQH^ii+V>VtUqjY?_GL|PFDD0OrU;vrMrFfnEe@`0e$a<%
z%HGH{XvXQ559o2UFw$96E-LwCISX3A&NiwsGf}V%XpEnO0!Jy&iPy1;#1j0Vwpcc*
z(Aqf&yLu@ePv<&i1-4)_mh3{euW%wO;i!-C28TAXMJnH|b$d*2TK%vwkK}ImJaLS8
z+b<JD)lW#V6t2?A(AtG>SZa><kWr(OHS}HWikG)HOclRO!Td(<&O+4;VkukFy+Tif
zH1_+y*y87kRm#x5b$65R*7|R3@pAe<Or7liu3zv`(fw|wQGA~2eroCG7ZP3+Tb@xM
zeM4|d{2^riD4Ql??^CX3TnMby?YJTdoete1`RU|2Uvc*Mj;T(q3P<wvgq-erPOUn;
zzJj;>0f0>&y6rvC449tE_t~PxO-qvH4Zy~b%Pp-k-yI2$*(_|9IVx{QmC6hy@y?j}
zy+>jKQyU!JNF;Wmn9V|VR$G$xXlY(10^>?lgY}r%*2|1AzZ{WM!yFzygs1$|H_v&p
zAcgT^&-jx(7!GBgG=|Yc%Ff`bd?sx><;To>c>74WcJ$R`CQ|zJ=mG<b9{An(nZ+Xy
zK1~7mXV#V9UGHlTK1;;A_BQH-21$%Y+<`-L`czudS~Fwm5}($B6>!>(rl@T`A&gfS
zyjp-Pq7){~Gwx5<UpA{7Pl83`jEzQNYyClFDPVPAD-havmZn{aAH^0~2sQ;JfO00P
zpdS-JawQeTg(2GTsTB;<a7B)W43ta~$!@}lfo^S_D+3f^;*i;N3d5b8s_w<EsBZqv
zXlO)qhB3{ed>CB8Z~^{Uz!}VQ)*`ymX;s50zHos{99<%F66(tBUGHthpFrZel`@A)
znveRv<u7pqZhRWQ>v8orH%V3t*cRF3#z%0}j>P!pLn#X(Vov?xBWM0}Go0u$jR)Y<
zUauyai6rMQqo)fH(FzZUs&P7jBvv9Fk^FXe5WxzyiV}g;Zjc<0Po9MJH84#&Ja3$n
z?b`vJ-Q?v(erzl_?;>6aA%z>L@Gb<LjjnVqA)tzsQh80b;lLXtfH02+?QXI0u}f+Y
zjGNG#>};Vx&s_aw^Vyir^P$1Srt~71ma?Vzw!Qh%rr#IAQKTOAit}6RqtGr;&``M~
z20Vx+D1_U<KoIo=cO+Safau2&MT5{tajj2SysGw`Q&ircK6zWKX>?TucsvQuv-OY^
zP;w&SzBUMFuk$<^2Ta2A5LxL%tRgXo$jX)@lqpIceg>@edL+v9=#zdd;chdP0!S*f
z5i3EWv^HVjwqh+STf587tq<R;rMT9z`%>+k(`8qWiY+srGA|X4$A4+n_v@A1-v9vs
zQvY_~^_Sz^OyADc#^&$NT}sl<Un17%&WCz-2YULVz*~J-ZOxEHvsfVrB3DG&1PQns
z>iHC(@XM7K9AdsLeH0Pr<Cag))1aq?4e3yjkmgpO%Y7o$4e{j8vOU=%tB!DIwX5uj
zoZYZf=4@m&0#J{I@^XRD&o)@BtFwNo4H4ePislhykyYsqkD0t(>Y-zqtBdN|*B$xQ
zvSy6grZu9;vNXy2*WLI)W;}^KQ=tS<Z4%Qe5Hu;TU3EPSP)bP!&3gkHN?W!F1malt
zXYPD*GA+1gWJ+8i;_lH%)EroB)DJDkcMEACTanE)DJ$nuGPLbN8)XyGwb$m6Rj~b(
zmM=9VY89u^wQg{`l;~gLtYYE=daV(o-GhfbrQQincjDEQ@byCRvV)x1ui~_?5(eC-
zOpEhN;1GB#1$=kEPxoE<LiCHqtq(u#&*ZZm`Lt)6@@An4M_M^Kx)nj%2KTOC-8}AM
z$b;kWXelEhr?P!U6Ae%>_Pl`{sqQd#4P)`P;D|j6rF&F)!VIX;N}z>&SOn?u^ju@r
zKR^sDg*VbQ*wd)iPaW1Fo)wLR=j2Q`7PT^w4C_u;Z(@HTN?G>R?w|auB26QHrtWAd
zmSmGF6NTE!XzORJoX^eH1D#I|!j(Wu@)BKq?(8?{-67wSPt<6`#4!fb#f>Pm{lM_j
z1VhUE-%Wu4v{It^_s2!}mtguIn}ToqhO@h&!{2>byb05Ge;5!#o_r&VwqaFlg|sW8
z^aKh~S`sV-f;$adkA~>nOwY&oi@SVqA=YrGvtPW;cq(9tO^7&5;m6GLpoR4AzG@3t
zFZ=zd1Rrt_SiNSyd^)x@&Tp4G#-N0*#s5fwjxe&ZuFO<4FGi$~%>0rFg=71P;2?eF
zkaBcw5AUswawprmZC2F<&w%j=h|{&pp@dq<qCYm`0#&Jra>PPt!b$hAYsqopdAIbV
zZG4-*HF!$ar_qU?2T#1{*T=!h9_EIG_V7>9hN1OLdp*yoK=hFg5ayD4OK=>vO-HZ8
zY9AprN8T9(mV?LaV=09+G%(wnQs!+KWCL>`xO)&=p1^}4=+kRbRD1S=maxV0sRFgc
zKaoWVdfDT+MZ_v9gUPvK%rTFzB867A=JQNh^tVO<wZCQR5r>QK)KdGUk;7=q<HV7+
zS1w6qvq~j9cBG=W%F;5LH;55G^Vh57DtE{K$<O*1Rax=#p=kR1A0+#Jm;ZBXC$AtX
zr>rcaZ)0z0qHpACY2#vPr*CU-;%a01Kf${HR{5U%o{}SU-BF{R4uc_aN=D%+jryNK
zRY0jT(Ub|ufzi&R0Y{=d*H`skDW&F!=QN8uxtp7thjo2ZZVp=ylXV5TJ~5FKr}tTA
z%cLtPwQIZL<;qP<GSW742RY>HQj;4>(5gFm!#KL7=YMw7HEX#)IRJV9FDnk08zKl9
z9l*K@QJ)~hP2YvFWF1M$L3krn#^*X>{K=%YJ|ajKJAyFQK8L<iJP(QfOryI4*)krm
zT;_$r<?xBR8|TTOO{5_;QFPMqQf)rpF`a{V*3MT794ssXz?2ITJuF7pb;+VlJ`huc
zRMJ2PbhFLRry4@3=J1%rtj=^G!`-Deg`V~h8LRlkZ5FrP(W*HXaDEo&(Rkuvu&3S8
zRk>A`vuSm2QelI5AeHo>2dTJp5|u{kXW0R7%x~!EMCrKA@ZLG%ogmx2fEpNPjGSC<
z9T7G+G*F8oim76QnNw;M067Rvj=c)GS-2k%L<V@RUnRac;nY4HLpF%2Z#^h3pbCsd
z9Gb1S<Q&+#sK@kNr-vm(!f^qs3~7o>2XxP6BVRtv7>MI2)Ns_;zUI6EIXNx}L=|G4
zUnqO6Ls|{nVqH|F#`Y?L0U|`5jCxV=9E)>Zu~$H9E^n4T8ujK0)jP7_^=__I<FR{`
z+f5A}%59ILu&Q*Lhe;V{j3Iv)9e>IYz5cd}pEKz4Ji+4OMU!FD6z1vl<RdsHvJ!)s
zHQ)bmbW|2~Hd!^hXNs#wG8OGB!fJ4?Tk(w~kKUgZ4hZ3F+qBu>EG_K&g6Q5wJt#Hx
z6^MUBxF0yuO!HWd1HfyxcU4&j-9S_?R9*qv0sPXvUf+wI1Ak@!Q3VwrY;P33WZ(+E
z20ckBBC=54<q#?Fb^)}^lu-!9=-{sE7NiK}4@aclsg=aeha0BOsk)dpsQ)XH+AF4c
z4d#(G$S$_rB?Slc1^R02pR|#`4iFq95P|9U0c!tVa-;u`*Wf>9M#dJV#@70l&d#o;
z|09U}n^W_T68FEd@TBw!q+~3TrEDRQ6xv#Z0M|&Ya_1cRu33N2bi^Tiy<M(>Ws99g
zmFQm0OkKwMXqP9)Z$vLN!#Dk^i;v%7SI<+YIXJf@jdtV-kuDbkHUf^ere+INoD?)D
zt<^{qC~3r8DOPm=k;D5o-5`+$_kj~?UMj%>t2$W9Y<mgz9G?+j?`sp%cI{m~!(^)m
z^!Rfz*?ojDZ+u9_((DYFAc;qrvg9E)PAP1SNScKtUY*2&!A>AN-g87T3)vYm5!Fds
zzZwG6CD8ipkDRFqU@F6b_lf!^dP=%2Hckaq$imhd5_{yn{+y<@0h3*%v%sJqTi48Q
zSL|D?&BuBf0sdq2e;9iQ?!ek@OE^izw(W{-+qP}nwr$(C&5CUs6&qjP?$M|Fd}G{m
z?|;~PJ!@jkS<+N@ghN}HBw33b>EElSRjK-v5)=h@%PVco(OcxYC+>fVzSrlsVuRGw
zDs1eb_Ud*sH0deW>gARdoz>#brGriL_W*+{s^s~!|8MA{g-v!!m_qx$K65YD*GYu6
zV2&7{Ii1C*EV({*ZlM85bTJ$Bw#?WAK2F=RL~as^K6s%y1DTP=Gp{2x%h818sg~<4
zk95xyRbi-+_R5)SsA$!=*DbmzuMZ7GdRf7uL8khP+fr})&?s3GYACx8syIV%uu3w4
z$P$SZKp|J?Dl2-}E%;k{DY*j$`u4_#O35khhQQc`>g?@!W64bw762Co7^jAcjB^N*
zrn<%<_SK-9eD;bbHJTEG4%T8I6FLmgpmuq4v6@tU7rFRB1f)5p^nf}dZk9pP0(df{
zVKbkgD(n&;H4Q~$3!Sb<_oojYlW#EJnRV^;8M7mB`qojhVOrzi|MMLDW07j29Z~+L
zUrq)d0D$E`e$D?9cm5C4XJ%>iKVkWjRsY&za-x3n_zt5`RtpG;%|GijZ=@2=CAE|V
z3GwCXG;0tr8lu~V-d0^f=zqU)uRQ&Pw^(M-rekb8Z|a`B+_lWBCv;5}kI|TK_F@o^
z@5Xk%Zk_b6{L}%@v?tr-_)ezWJ1^%SBu~~E3GZ?2;6z6596p`qjWx8DOca+i9xh0K
zzgZDf{V}`QjS|~RCvR-*7Yz0V{*@$Ncpa?RK`dX@Bu}IJw=2g7XJ=bFbb&a(x153c
zTxveK#>m{-9yZNpdoY1w%k_&jJ{y~6);zf*6t=jdX>V-GlSA9|YA3heAugB<W~o@Y
z60yIyoz4lfL74Z=ka$~T>`ruSY*x~*9g%m)7~RSX_0j%T2WawL2c6b7daS<XFWADx
z_>B!q7Y^AtRjQ{ckGIda{tk4}vNFL+gHsB2%j;6%wED8~1l-n8El|a5W?eUl;m%$$
zS7Ohth7tr3L$ijfS)wG-rwot!X|jZ{ycN<lg0X*j>LE+UGDjtpdFN0KO)~#4butw;
zik@+R;)#l<-zrBD%LDzq^2D2`(MT=Al7$EfM1Vwa44i@rDm0}N6C4Ymne~6>ykW&u
z2I8ssNUC>vs_3$IhR2syooS=V!AX>|z_@U+nw$ngovwC`2Ka;HHnx7Lvk}W+sTfYI
z%xl1+U?hfVs#Pimzc8%-#5Ywq^`fN-0^y(^x(4k0ts#W-Xj<jKNXVWvlBZ3bA3D-W
zeLG4y{58>^-i;<4ZKTQ2Kp{lYNM`qZ$<B8a<UZRMFq(!;ht&JF5GT6H4)7>|KJ9ra
z7IXr1Y@7#|Y8Ho6K@LscXk3VMjq|0%55lMfAc9e1&wLx&;R%v09dZ!s#GM(HR}im`
zileBS%yKiwF^B*fEmF%~2o*4dIYTA+EJ0jYDcWB$jqI4k`C7bn;c?#6>98U3#8thF
z7%f}PtfsOt1}#E~46v>3{_Sx}&?{%)spvPWJ)ZLd4uhJ*U$?k_Z01}R9MC+r5Y>31
zpDQB$^aZGE=PRE6$dOOtQRIq}mo}pQfMC|{Wd?BDHaaBfhcb&$xm@ALG!d$#64Slv
z;SYfRL_)uosa4Fbitq|*uT6d+kUU`ZT#U6d4O*t&OTG$gV4*baQI<`$&s3luxo8%-
z;H@hR4r??E+$<$54t40h7i93LV-+q8ThrAqeA7L<u<<#nU~_!Fi)kE)gXxPAtu|@e
z+2K4E`zvQHE7f~vuobhSUXT93*DmtD-%1FwD`Jq$IxmSh+JAvV+H$bI&b<`pkZQun
z3dNSo0kl7P{WWUv&(UzDE>W`*hHQ5~hA~p+MaS4`Z1YpXj9YPyYWqwQz@DV_GQa^S
zkiufqnhZ;9*X|-Akmk4&b^A;oO7E=MTg?WLIGj83fC(s$mX6{dHV5BvZcvc<?!M>-
zawD*k>LZzb++&T046BzO9ZC6h;Jp0(?SlC4>SSdZ+|`4wTOBoxWnuVx_y_o3h#7SU
zu@1F;O|^u$&X8wd5<*t1l+_Gl{B_&6+<iI@IogG`c4ueUVFHY_tNutou?y89R~19n
zq>zuivT-dldxqFaCoK;6IF)E+M%>&6R~bFLMvx8uv4OXvdv0~5>qd0%3>XV|pL3}v
z<fcWH(&DK-s#e)0ZAjj6XjE7M672y7+mmJMU6#L<<gv!r4t4A(s@1WC3@I;z8cl0=
zRZG}v`B7cpHk5u(G@sZEa8`K8mn|lmk)^%6f%-n#UW@#?)<%zm3t)sVH|dWbi(7x5
zeNg<qT(Yfwc4aq#bvw0g9dN8nbTa^p4ZOjv&(a818!LEhD)`93o{BlW^3~S)z}lgn
z;B@@}BniH|>D0;D#Q_o=br^b{(Un9jC&|WsT+QM<3$kuLJEzue`keLfk@!{1T6!W{
z8sjSzbe5WGO%qp{_$0g54*g56ZeB~X_p1m3*8~%)p8VnMh$V(J$?W&y<!}h0;h?@!
znV>J6v*)$jLflI00bFY$7Ot>Kt2o1}opkT#!6Wap;e;OF=Nz)6Xd|e_6wusjB}UPG
zQys3~j(0XRuTKWacympQNVS7#Ee(zCJH$I`;Gz>p0cYVik)r75`VnR;Ts@?eTWv8!
zQ{U!$y={@g$A=Ks3VLtUiKJmZxTOB9&2V(JOX_K5jXl3Dcd~suu@|2H7p)N^IbVtb
zOaeteYhO(GoJdoj11gHPo@cXkL5rtk;ohSj7mnPAiL<prPnP?!+M<q>S{ZgiGN<Yq
z>&Z#xR0)=^v}?0^b|~WseT>cZvT&?0$uMom|C{pp&(^n<vTk_)!>SDY9AH!Z$9GbJ
zUq<MEV<r=GE8~A*;Qwmn`)QdwV1f5KsZ}dN>!YzcI)L>adxd7>VK(inhaPVy<O2*$
zF^jAgf+RN1eZT0G6qoT5e<!7BAIx4;KbI_K9O*d>FlDVv;|hryP8?ow&UbIwo)CcU
ztA!KcxaHu>wH%fN6jU3D1gjG;;+sR#y6Xx{8K=^R_KBzXdE)xSR0Y&EwJ>TL@bM0G
zDw3V!jyL;iPiDJG+sa#i)!pIMyX2iWd}AaQIoRo#{bhy)0oMlzR^cRnjeR^m4dR~h
zCU~@Az_BU!f=M*z(yTF=D?m9d9^<(TLJT3|vKt#pSqTn|=)`VW_nQQPSJ(CkM<)Tb
z;}uXbEMr17>^J{2)Te?zt2u)ri@!pT3KgnV!k%3(gT?PxMM<wmrO+1%bUDW%zYaK7
z-K$X6&7_eGG=AM4@1+P&y7cvKg-cjB?17!*nsVhX55*=nv<6;A?UJAg=Xg%xw4%R=
zT_kL7zGF+E6v4bZ9@$rRY2Y_xnJj;$+>cWsS3tA+5>@frX(C&w`>&i%x9CLf%`Z-Q
zAct4M0wpjgZmDHbOW^V-z8`;?aBlsi?VO<-yWeCfaa5|kkds+D7g^;EeM|vLO^K^-
z576gV80pX_-2JJ3OPgo2;JkUkBE;A#*uW?eR?gSdsuk2iJX~~sDGGUYh<5a<a<9k>
zOSh~B`IVRke1adCSfKM%k%}RnWJe2QsH=pbN(~=+pnY~pbAA8JV3-c$spuWXzBQ(O
zSG~UFtX>b+bKx|OVMW|6)qOYBxPTKuv?YMprH>P4l)YjbCPn?=_2sbN5(-IH_MRCp
z#V%u_ZDS~FG>L+?O0XU6c3xD>L}mO%pl(*8Ia%@Eq98)uMGf1))Z<kt&+_25oK*>t
z@EOO2!IFYFnLEGZBE5*zUxjiPTV>%!d%ns9xS;0K>0PFG`!<gVv>R^*U&usP&V7r*
z4Exu1%5U+{?}XDlB#Yfo<}P!xjBM)xz>~d)8zZ((nw92XI?5udY}YmETf5mO6`h%^
zGjKXr@0WPQPHoi-$joLnx?EEy=tkQqv>C+u;EC>t^elMtlOA~Q2Y`P*?;Au0v#S>b
z?37iJIRT{#j~ux?Us?>TDk=+qe7XHskB^TxPjAPpYWY+MJm}&Kp~Z8);fwu6A`xuJ
zbp3nbzxxHKs^~mr9cdIl8uO4}?!rtOID!h+0&qcS*8|Z$0e00_UL4up;)Vaxr55UT
z4-dsEDaAzXeNwUW@aP!FZvJS(Mm*j2o1Nss9MHWowFh1-Flgf7)_=~|@s&uc866ZC
zB*SQd?Lrlfr<I?s&(H1HfUja1W=&j|4z-%O0ydL}(=y_hV?Lq&omG2gey+m*k=hxc
z{=1f|e<)iAWBvb&BL53xRj|s243Q|j_upExcr?xdP!<K;1}a2&%6cKIAcA?G>UBnI
zSyRsv)AxXt_eb`n)OzW-fFN{_3R&fB4rS(C4@JhO^7w+D{m6}8lc=q!R9&hs-jj!>
z#)-*?w&d;NQXaQavWKw~G|3(a?W5$gO~0nME;XK-W6F^i*@{Z1GLl}F?#rwNG)v=>
zDHxsdX~z%bP@;i%ckgN4=!#o-mXkT5Nt=(`p$tNds!EYnBFj>rG1g=H&_HgW$M3&^
z4qlF?H^2)CXMY=)J{LZ2-FvjK%dn!`Z**F?&F(@L5PCa9VzGL*J<nc7GFawaUAues
z3M$=eg-LMkqYs;JfZ}I6>)O*vSJUp&p66|%tO20}vp9W3Y^T}Angb&2f<~Y)IrDDO
z(1MmdyA-camu1Yg18@ycwJK#C8pX-!&o9$pHE*?>^GWVndc-kgYIYCW<5e8|bzi#^
zyca?J6J{Kj)3UvipNK?B>ENwvW06CMe?#b0Rs)|LQjDlTXoFC96#=Iw^Q_X4q(T3-
z4*a$*C`R$z#uy`b=&t`l*XdKc_$`>kwKtZ*X{+3Nv@3L)y~^3+=APzeuDR52nq3)}
z<fO6X_N3!Zv}Ys_nay9&ussNGo0XEcEj;n&nZe!5Mg6kV3P;P>v_YK)1R;Z)!EiEG
z9B~P6T)+${G2;v(in6%R;_rk2WlL2U*LC?KX1$*sbw}Y8C!}bbb$6~@pal%6z?rz~
zGLX&J06h+M=yw|M6yz*!OQx#G<GZtR_zTCio)b1<7^<R<@Uy9bXh10;=)$;|r6R)X
z)tk07i)p+Y1u|lr;f6~~_Q1R?bC?U<u$y;&+W&d@j{Q#CfR^5LQAXiyfP#*~Zhfgj
zLO#$5Tg)<AxCiGV_%R|0#wX4&Vh31r9ICXV7NRb*s=2%;0ev?b-;Jai4ViJ?a6+`d
z)r^x(Ym${mcH-BMXCG>SyhW9caGAqJxhax3vS;O}!BT3L`N;J7qX}p+1~rR{p17+j
zL&h5l*_*Q4Vh*g|zYoW0H1r1ND?lOw$Rh+$!QL}eB@cGR3iyaA3z@jN>ch+nw%D9I
zf+2AyAb=eHEzM?y;W0w$Px56*mf8eFEqKPsxK@ZJMvT1{4u7fN0X&BAei$8Owa}1s
zg~F+Y`D0E)0d<%O3<{H68I?_JN&xHS&|_Pirz_0drraK(v88&r6wIuA7I@MduVK9e
zJdZkiMhW3jXxg}E7Fms02O<sZ?b12H@uLjrWiLitp21ofCZQ{(IO?zf>@Tdsg@L*(
zM2B*zP8IEV041+Dekaq3v_AClxlwsrz|i<<A=K;%ns@;~zf%>3yHHC5V)qZkXwjdW
z)O`bgHvC_rsdaW?Z-H8fzX|FUy0B5fK}xd(q3sey=jXo26Pq7Abm+}h!k8S(-pnMR
z#Y@XNcYRE$%9_%;oHcrW_>G~EUGy8Q^bqcv(k2$&`QODu`%g&^5Ct8B$Qn~7A5Z$t
zMwi~Cpo8y62PdVkc)mQ0F1Byo${Qp1a6jSciEyc^y(6${`}a}EcV<((WmLT|J@m`c
z>{m%-9lI|`ERo*P7dQOMFIj@~@<Q}&0eK6Q7I@<`4SQ?of-j8_gC?M#RCjgq9bV*d
z2KkuKcyr1OXFstfA|m)_na){0X@O#)#`&T}p|77-^%*do_|pnrB(n_Kp-h3)Ewtp8
zU4OT1(a<`#Y%+RfN=IyH?>?s7rLcC++Z-x)*Lweb{w7fTjpX^E@?szW0LcF1Vkf91
zB`f+r3EN0k*|6Cc`)2@?Pw_wt4MC)Dnb9)F!{18HHu%wD{FW^<M{9GHYF*lb9rXEB
zSp)q;tZwdpF6q2fu2?$ZMPWrTR0?gp9y-2Ts}{Cr!1dX{)OOKt->${ksa;bvx{(Vv
zY8kp}S;dN8lPY3!Yp0HL=+d}&wk9uM<4~QlV+WTC6rB)E>xeNM$YOcX!eC~}S7U|2
zHvq3aYgs)8fGUHjD<&HI#FrCWmRLIOloEwVuuEpGq*DTpXYD`o{vi=e-dUIl38aOM
zbUvhOI=Pm6i=>r>|H!9)@T*LUqixrz!xtO~Rfnu#fvp<=g>5CruhrLj24t8c;Z<YI
zv~mG;GL#QF&~}5?C$Cp=Cwrr{t9jyX-~phxD9BeEbfU6+C)3>h6Rttuy7kYTT^mwk
z?eZscSg6AG=(rtE2DQk7xMXNH4I6YZV-7L@`?2+yQC{Rgz9<sc)va_tctPD{g?~1z
zx^c(cj9K0YNDyTJAYE`BHAK#z?qC#wy~{=!`s%{p=BIK=IdD`)X=r>{qUX{OfjWQ3
zWjtY#`<+ZrNf$s?ol$O)p_<VA_p0aEr3zIVOo1+z*^&k;gf-Tl^@MQ{4_O~*y|CnY
zdyD>18}`PY^i6@x7wy*XRiIKMr<_N}+?S_x?Oqs`iBXwpb`rncWx0#jyG-HwhRG(q
zQ<SpX6iGTh<Y25C|7cF@#?9B!)8~kSf2d&KaNMM2gA?3iuDeSM-UEb+R5@1kbqP{?
z5csHJHm-3a43Sx4qKePcU^w*Qe+Po2YSmNJB0EAS6BG-_ufW{@u6nZG?50?hKcRxD
zPwWwprxXk|l$PywPp}`RwXBvGS@OQz&0`^)Y`P;jDe%9GsPVE}w;Fp@u{e;0w5=f1
zY4K@Q;a_MoElve<T`ckcxNVr{S?hT=uwpIrJarRF^Ti#wvTbGE0vFl)Lm(Rv7-iN@
zz=fi8r_dd{%c!gqal)ftm1w%K{>-nBm=M~3G)3DQC!WhMDvI78ibVm^3baz^IUW3x
ztJNej?{2K2VS`>H-&3T6&3t3hXVNfrFnr+kPv!Y28+)#`@_@5f8duC{6=wz`6Gj+u
zrPA4lFLc<`1rG#{S2=RC7F<og!{AlZC{he@j6R)Ai9i%@#q8^BH>VDFRKl>+7jfGb
z_do|z1n)=^5(kCoM8_g%$%C<U0{ugwkCV3pSJrgSaUm@nRDeZf_d+IB-<0z=s+$Kk
z?o`$%ma-o|27{z~zu)Z4+VWslLC1-OLsWCY4C^qZ^h9C#5kYNj-eBlo%t2RT5Vr;r
ztD_tauA5W%C1RZmY`|VhDxg4B7tKSBJ2p0zirYE2T?AXzDldh+0;!-H&iXqhT$lrK
zL_x=6>$5TC3UwEzxYu4NN>2Drb@1Tt&wox>g{OMs$2z8zKaVTMi6#bEdJQp^F^2ws
z<4H&AxN!6bb7CX^cPE4YD?{GQ*4fJFXG?T)aQ_$b{4dtTW;JO?ELOzs1J%4Hw8>#P
z1z2`B9OXF%>qZHLpAF%6uF@{_Sigly9{~E?$FuuZpO+muNojXDdfwdU+v7!u&(4}w
z*bY?n9i=<#yCKa`>G0h+TFdWyve2V&Y^uv_2oHu$gUiI7vp;1FHclLEgNkgI4|DuF
zF<`A6McOYYtdEjya~m8uIMoxnX6kndt4z+QQPtijpXZ}ncRtN(5Cq?b=T%k?)V%B2
zHQltd%Of(8mR=0bafRSJ@k`Ga_un~QM|L}3o1<UTSvKeKZW};<&v>C=Z$2R;%tPyu
zSZ;Xs>6=(Z>Nxo`b*jd7g`JFA88-yp+<Q9Q)i!x)Qd|YNP}eQj_Glb&nkuELk9yd|
zhHJ2BEwPF;QZ+y&K^@Jrjj)Yt0x}ZP12;1plKe)DDyZNbs!2Zc9m`qhAPupMPfdpq
zeshp9K2Vk%YR!I~g;fO|vA@D=6&A0J$q5a<2!gabve+`H!GJs&wM@eZ6YjgOYbBBy
zjmA-i38qARK$Oh4S=F;o;q0`^ljQ0Dx}5;!t*@~t&kj7<GB!+QZ$gSaYm??(PwcAH
zE7jv))HvxGWD}s2DSQ8}=idFC1KC#5$SIaJ?S2(!lJN^unm~Q#)TntyRJ7I1na#bN
z)|@8Q1wC?>VYkF)D>o|saC9x=t}QTwc8KZiy7f|D|0tLc@q9fa!uWRJeDCn^NSoo&
zm5oXH@>1iPt|c%EWd5k{$lakbX<ex^%CshE9AU?iOf-Y-{Ntt>cu6ks!S55!N0PkH
zPV;i#(?y8N38vI7!%V@teCq(D30=pM9~kIT2L;SqNKeX3o<ZasMuypABl&Xuenp)=
zFr6pWkW4dURa1%>Ohs9J9+r>pZ93RgqDE5yRX#6g#Lr!*<^bakx)cY$E+Hn*!I7H%
zB#p7#R4(e1>z4w2^+Emws8$hdG4>X{`Wufwf2!C=p57dZr_i^;0*pkFM}2tuk-sOQ
zx`jt(t6$*)ivC8IE8;@)zQB?}44>$nyKwm>WH>>5k<!FT4D+rD=mfd)zRC7{a`g2a
zWr_XjqOe&%Syo2EW&naGS+I(8%Tti!Ts|qi@k<)ST9GATF6GXY2!<Pp+twoj$u)!v
z%vBRo<UKy6d|mvQ4vS61lA;&7!CH*gV5LqJrmQ4s?NU9|1(u+8_y|j^YYklua(P^n
zO7V7?BSl<AgN-+t@l4uSf*G8XqmEzq@L~;eNf&ViAM&_-0#b-q*C%}f<;<RzKbd1p
zyPN@@BbKzETQTsbJ{-*sL!|B7!l{smAz4@=U-WbwH|W^Uj*gX<6pYOCgHri`HNv7&
zvBlg}@nk(2Y(9K=Siz$y5_;A?lnHsE1GwU$-C&QL@*<uqDAh<Q$|&h!+?-8p!$4me
zz)a}*K_my|txz%jL!nbU956`Gx8`cw72}L3BJ?5BWgwFpaQO*QhC)naDuLTzqDvs~
zAU?#90Nu?m{89R<CNtRK9L5tVf@TT$$ijKj*TFeHv<k>NbB>p>JCeb&P_Cn75zmZ>
z#XeTrEc}!UsA402H+O!)#00St=!)YRq)2lW+SL%$3On1gTBmRC4SfGpG@wQ}a3;NC
zzP-Ol_#Cv%P3MTN3qqQ!`*>s=21||Wv;Kq2H^bXkt3aHW=L23G0<<39K%0v1W+q@)
zX_QA^Tqw6AzOiIdLm*}giQuS`Y37icP=p{52aHbLmW7ltDV6|j?WdlE2H=YmMv)zs
z)tQbYRyArW19`?I0}D|v&;ATV)GQ4*@Hb+*eEU#(HxNQ0dk3Nc5Tym%O&oJ<p^u@M
zPS2V*8YGfUQJJkh5L-;qo!Pc<Ba8AML$YMDeX&FMtHm+p#f8yAFjGKb!Ep7&yu*(;
zbl@>J3|bB=jdZ+*$OtR^zq#Py7S?VmXBqaqOzsv?ITc#TqrkfvhVgeV;gcM2<Hq`K
z6<g|mr9JN4u5_eII4#LQ1rT(X>=lgqgA1t!oJ%(PTvO2N;zgZfLry~<D5$yqIG4lf
zzz4RGZ)8MaM&IlTskTxNie<%W$0mYZ<V5c!4qU*b=Xv!|pcbG(ZORg+T_X7^t|&he
z@DLO%M~Ag62Yb+?+LR(7!cf4Y=Y+3xvv?La#Vurju&!*g8T5hWly*~N)xZqeq5++f
zCmY3<3E&~~o>?Jj@OCuyG|KQ%!Q}k%<0xszE8+3}?$}SQ(;|eHn6`3uWp+a*LvMk#
zc3G&)u~Zh}#`C=AZ<;AkDK#`SWS5XOEX6jxIVIT&j5iUeZ@o?zp*D@jpO>(KW7>R*
zl3k!)fxE$A?-2zYzK*33<cVd#${p?o8{>-|x8O-_+*ncw+laL^tnGx`L9HAmX-dEK
zFx2?Fxc9Ko$9m;vvKQ)S7BA}UuFz6>w)D{8dSc@KeV~8)xKRkt>f&l=q6z$ZaddP<
z+pDAVNgCST>H6e5){(_bE&>)al_vn_)HewxoeW(qq*iv4A(TEoW7dK?@gm++INaED
z3*9aIRR^=eP>dWEX)%ez&0;wZY=(%OJ(&X`Ad(Pm<X`C_4M&G49z-N{NU7POz4_;_
zievgR*93TpLziW?I;(xruW%ql#h|)-JQ|v(_fMuzSu2aJC&HX|F?*><x#X1~<7MDm
z)_+Gcqbi2h??2`Qu%7@yhX06W{#h6P3Ewex`v=nKn%fu|yZv`7L$Q*kZ6+P^KliNX
zIvM2B>(bdx)X_-_i-g7mK%~sF@s`*(hk7QNq_5A7{!MYSF7t1G8IC=Z?fud;20=Co
z5eJlMvc4VQTOMB&`5wZql~FdTRFP*k04x<1W>L&FK;lGxo3GuhuAF7g1;aLhl>WLp
zU~9mdL#lGZ9$h^j%lwps)CNeac_Hz5PAFSqITKA{WCk)1FFko6T_o%HsspZYI0mGv
zh;ATDMRx1M409}3C@Ozv&zdL)uRhsFQ%L8{HHKryM@RU{SlLWKt#La5vQDxPs?x`3
zlw=?@8G(#px2l4H30bf*%*D(^NQh`#acNGz2p<H3c9AB*X$>F^;}@iU^Q@<PLobAn
z(+ftYL@q$FpAbp{Oa{U2s@I{v9e;cI?Vip+q(qMCw#TMGdQa-2VYtJgqp?3s9SH7f
zC_s9@Q{{K#O$A^%a<&2zv6DAaZ8J;Ih%eQe<YqHPR*$-#gvjht6VBuk9UA8;LeeV>
zHEh-ZDNvjNbk!%P0Vv9mWBv-sG89nkH>8NyhMRuEUnbdN9fTWHZ|CZsDF>QPVxdaO
zUu(O5GlJ3eNF)%Dmp}pG1iq-jA6EZ!wlNC0+-V+`lmaprTr@F(L#po`rER>_=&iS^
zM;Kg=Zi%1f2x6POET~zs(7;MqR3tQb)g~pqi*X--o0U;nAq`vY^wKo947B$L+TI$`
zMX|sMnf*&qF0Zp;3tQ4V&9Pni_F-dj!Rm1bN=ycl&hjG{6SlVKV!#RY?R3z21$b1K
z>et^d0)a7vSDgmprJL8g^S1%69)U%+ieThr=#pTWU?ssc2Uvd+a_~P_W2Tr`dl*E=
zP<l2sbT$pnDP0o%?Jzk@eU01jdcPqZkv+$PT1;b{EJ)i-HeF=QY`_e71&@*KMaa9b
zg{$Q$;W_)rqG8an+<HW-JgOy%(@)y&XM;IPgb1RQtaRYVb0Qq%pRDIioXVHm-*_;s
zTQ~GS`LQ6=qbR1!t_{=9VQ5XoA)~*5{{1(zya7_Z_)&xKe}1$7Cdpb^L|0l^`hP+j
zc>iSZVzR?`zpExSga(J1rwOf#LGS~$B;wQinW=>%F>HZcDH}eo+o0cFv|h60X09#l
zx+uRcRX$tvq)-@MTE=jBhKPTYm{`?)wD^SUE+fWLx3O2<K6-3h3|*L)F2!%*E}Q#n
zEdyf0mBBQS(HZEXf}2k>%TinHYTP5CS5_{nU}7+)Oh#QmhscFRAHM;=$dbTz@tIG7
zm^EZbnU0hH$VNyE)D_VAl@duK$XC+MTLm$9xLcr7H(w>OBmCi2uSe0E=MD1WL@tPo
z<Vl<TExVit2ip5MzoI2Uu73qJxn^noEgwzkEfFD4DtigPc;C%v3{8SpHQmAoFVe~9
zP}u9Pu!2$`i4G3MBA^}K#8ah?do|61J}F!?V9KUz8AGrDqWv{yP7IR4T4G9w{^BNR
z8Z<E*sad?{Z<$Z=%eYw5m|R<|PKis&x?cxDtek2GnQZkyXHGG2Zc)e;(u&C+Em)$x
z7!mt)5+i4QKz4D$)iL)##4Q(9A!gthH|RG#isoKk$DT-!^)nLamSeu{!Pm1hB3$Zy
zo2xio(sXq#{i(_39d1&@NJK`uma;G?R##V+e}yMYT0)2aDNXMzp#CP#v})t9llD&4
zGf(kt{aWYQ5L6Y!b*z5{Fim+wNqjt+PH=rd6Gjs(Y;WMN0XG#oL#!hDJXzOxB|p+Q
zhd^8fy`Un4_BbZ3yO_Ftxzu+4J>yL$#Z=B69*+^6PupKWm8*G@1y{nesim0f>@45}
zLWsKxh5X+5JwvEL#ePYImQ!`1x7+B&XAa^?1-sY$ZhT$kRg@;P2|(b1MElQCzvrz}
z<SQi*&q_-#>H<K^6AbCP+@I8u251EXUDG`3*xl{p!#f3jVsjw`Q?bRQ2hB8nO@izj
zuwylQPCRzzO68(BQe=($6;}-E4!CrvPLN(Id38p{3(=V7bCQlz_$<b_cbh^qC_i;U
zjyB`w1ZZYys&O%#UE<ejTjpNHkGoxb2D#7i**HCznS_E6sy%t{kDJqpWAb@rN}{4W
zvGOr<GrCdVbss~A@CuFSvul0!E{L23ksdbtlU#ffqW0K5VmMYV_ncZXVtc;T=vb7F
z#3QwB_5@28+}~#1zXm&xve*~SZKbFmC^IRgH>z}z>0BW|kNH!T+^7^Bz_~TXp)ZbS
zP$J$SF|Q9g;a_UR3DwFWpP1~{9c<_sG8ax;15(I)O4Ky|iV15f+okV2a|dJQ3rO%N
zVwozg8~tt`3<&fpzBNOaO?bJaD5Q`sW@soxH3Cd%$3kr#^02Ws=V{#-J)npDrXnhK
zz2Ydvc?)ysr2QbCpJ?y}{P$^M*vXiD`$Iv#|42apIWq5G9xNAQ2XmAE7UCzXX#ZHR
z;JtTr>07-a5Q2$STj8kr34dG2|HjW#z7NXM9(;4DS8ZWUdcXLK@wY*ahk{vt%wPsP
zmz^<Z?R}G2-YHiiesjL;xfoCQ(>8JV(DB>+matmG22Fx;r>IcbLr|u==_WWCIYo)8
ziy;HD^dSQHXxOpD;EkY_xFNZIqV(deXl=oaD;>r}UZ^%Xrjamyk-mL#+SvLvp>>|7
zCFyDO1e8VfasS|hQ+xEw^x#wdLUGVU2+hZ!FuPR1QH>#=4JD=Kwm6*cI}vK;)<of(
zz|Yr(86XD`pn?;H=fN~~q2GuHJ+{CsXX3t}#Z3K_&1`Zfc?{r$<~KB|&ewx7rrY2A
z!~@;bl#zimf#tkz7}@GZDOmA7M7awh(381>gb_ioc~{M$F;Ae0_(@}E)-h#F4|Fak
zy?K)SL~<^HMw+96h~|g+4#Z+ESfB8lfEp#qmH@|>H!4OF-8u+q6^Tfy4H07%%v3mG
zmx27FgWLRfPKKOk`Ic^ylt5Exx4UD7>+?UCG12XEUCioAm4^TY{T^i0X@Ilha6Dty
zIhu)@Bwbv3$n)X%g$I9@+&QH6ogo=V5G(_+Uyv<DMiKD{u)#h$!WI#!c4-(m@F_0|
z7P><&JyaUaeZQPJ3T(UgRF|(46lTAY8k5UVq+9<Cmx?NPBG5PpV@sZ-2&2N=tjf7-
zKnCM$J}8@>gB1kURyW%NRs{GUs1xk9Hko+;fdP)1ZfSFa$o;)0|Kr)}h(St@W8wKo
zwgD^J^+NHIb1SP{ccb>o0?pHoPifXPc?8HdWC9ltB=b^#1O)@<8bR<7rP1mlu`w2_
z`h}p#mavQ&sq`Q=i4vt_gmS|}%m-X4QPlS&kg2C!zZwCW!FZ*tWfZV6L8}okoY|?%
zl=%L(hTtlkgLNU#KeG`=J>A^s4fELh+#?l&F1s`F+DN8`x_fwkaQSFW?!Q*Ly~S&r
z{~*EfeeFtg{3ph_0Go%b@E6f>S$l1w2|B`RxyA>_9)f&y#Iq-SM~wx}oPN8vbYZ9~
zaTewBtZ6Trmg^TE)GhF=-Gz_|!3axJ2;nGk2P`Oop(nfwI(zoC2UtdfJtyH1|8wt9
z%dCTAvny<(lentytx~lq4*2sVV)(&;26>;JmFp8jBdzoG*)jA$IFTbC9~61-m~aAq
zCiLtf0BY9q#&FT|-k{#Y?F{_|#ZTceVv@8Lg&e+W^v+%|vGfFut6Y~CqQ$4&V1**^
zL*ONI_$1L`j400_$f)PF@#9h%rZCcHsYiW9jhdKM=mz2oTVTnbH5ywp=TbqD3)Tvs
zT#vyuwuq4I#D}k~Qx>?D;+QLzXR?cMuHI>e94ZxvRt6R~u0Z2CE4TLJ7jwGI*iu=2
z8Fu&CXjVi(+T`JPB*;8$Uqh|2H7l{!YOIfC^w@*(1*e<a1+EBO=^o*~Qrufxn_b?H
zu8!|4U09b~WXm6vhO*rQr6Ic59%+k;E_O^HfRU=e0C37tl{1M_WJ^*z1V%@wu6E+J
z6oabKsB?+GX9rq;;*Dhr{P*Um=^ezrqKspns_0Kv+)IGrR$wyJ`D*AWfN{r;*Pzg$
z(oQzSk`>wTVZdTP=c;6vG8luS-PhS{mmKAvJRfx6mK6UwKG$q*Td`DEBsNEBH%sQa
zpomgFUQ|tLj0DGif&KejCAwjQFaH5UYCrP&f1a!SiZb-NvH}vqf=d6BO)XeSGWO>r
zs^?ubss*iVwN9=)G)358tw}nWlw6<k3L<?7UUekq!*5=9#~$43DgP;m8P}I_hiG%T
zg7~n-pb49w;T-{yVKQ-!qWc|pI+b!9_SY#YO9p)#X!F-FB$N`kvfN~HP;_E2ZyJ=w
zS6Wdd*93&Ws}|}&GBjz0$virJkw{E{MT9GkliRm}i*2pj+P75Sch7p^^X2d1p8L~x
zx?Iya1B_w_g2@POta)_}O4D{D6FVA)yoR6<;$&@-KD8^z3nr|-{C#1NjHL_=((3+Y
z6M&}bIqx*8LR$GWklMw|N7_Ou#z;vUc9aje&fPA|SD=!;ZQB;6U5h%g8=LvFG#>6@
zC=M90CUe+67-BekE`V~Y;iF|V36jqsN6>lWu#~Bw>ZA>oo0(5QO50lKO~j!RgVLzs
z7Vd>z=zA~!<>p;7Few02&*^jlQQ+25nY<{$_VU}i8e-bf)zg(e0_uYLwl}0;DlHx(
zh>xscxEx4_XGrHpiFUd`)-v;uPRT$G_vDgj{*Y{J6Aemf$l%{CD9v(u)>C$tlJo*3
zRk85015}#U>DtUw-EiJXJi~i$ebK3h41NODZB676%2O_Ey4bYyDc|>BQA8-0<#ssV
zcXUDOS*1Z;^-}<<RHI%?{0~Qy2ksqie+p`MQiA>{doOxvs-y30M%9k87RE*^|Mux~
z#~l=?9H~hk%rkqiCj~b8^7n`Ch3YolPDn$0=_eu}lbmS@#FtT>y&tY@xvjwaUp{Y-
z2ZBdbq^Jsi7&PeBzX40jp=ENMQV7W)fxlXn1OG9bZ099%lDqmlf#-N>1|o~z(~S$7
zS&Fbn%aMrgy{<FU%VU-aV^CUJ-kY;=VZ-vjf1{9h<K%2ZYvS@7yBeHFlV_3qzk9|%
z9yYo`s+q1IueSvP007&6BnST2<$?^qw6Lzek&&*k&5xX*Yv8Wy<mU7*ir~NSvo)(}
z{-pFG|D^QpHlT6ZVUr1lQb)tE)vR<lU-dae9FNNpukVv4hKLQ@`+oKaN~Ad0FT+^+
zp+eK1yk-BzF7BM8H{22my2Z$S;Dy6@e=E6v4@ilmi$N1uvubVIpuP;WzWrsoP#Ft0
zLt5xsoocj<H$;e{^5X5IfOFFvbEF`W|I_JaTtldl*4^KKW#oYq1vK(9qabXK3*}SJ
zDu9ug!^0=RdA27-;W@_Pwp6x=Q)x%7!4&{ISxEfn<yIkr$%Y-lrF9MOcw#IW(cb>T
z#x(f0RUtnjIObyje8cO#0|R`Qfbp&WFlst9kezqg)%VLzGp_EWW!9U-*9sq2IIn{v
z>yK$G8!{L$Z|5t+kd6!7yqFkZwd<fB9hUZt=)$-q$(&h_3UV|loU+#`I|wG)ep={e
zf0QkfH85FX8xt3*WcXM^Ck_pIrg-zdYU;H~El5AM8GQUOE-H5oqgJ5QM~u{?8|fd=
z(L0@@PL@ov0yzh~lJ;Gddrtm|c#hKq$Qi9Wd^7QO%^&ha?P1-k$;d}sRd%{fI;h|q
zGJM!NOIRQC$lOf4tbtHbKjYfXMvo&9tZmg!BE$NaijX*-hj#QeO4ZUKbMUHCvSU_I
z%P5JjZC^mZ`dG@8hG$;>m(XfPTQ?<4;(@+d-Tf;?+KfozbEFU5DYJHy9^yQbNj)XQ
zcgNHI<iOH)+4o5ACG$pBl#0P5x3c)47cjz9oNd$XGM6*Z*f|1x9k7Du6&m1Cz8*f=
zd}j9ZK17aZPyknhJ1O~i!Dt>D)Nb+fCev4UNqvSn7eH);s0g1d$<%kpw0z1~KLgV0
zBrBJe097F}0N@!B7#@mF;=3+P{|Z*epN9^ofKV4(iu)1w-jB+*J8GmbAb0*2UglD5
z=cY3+bhomj5&pt5qKW1`uvz}yGV85B-!IjpdC0cS8i2FuVGkbE$ihb9lZS5MOVVlm
zC_#Z#rESIK+n5~#6A65FhN}MY)A$nt`#iL<c3R2k?dHr-tXNt!=hPBH4`|3j@JO7c
zO`h=tYR?3727tDTX+Uiw8W6g%J@v>mgwLKL0uLgRNwxLh1V`l*uw#7ahBXg5?0Ibn
z7y)%O3H&h`*e()QL-{ax_L9E|Qnu|CN^~rzrwH3}o+ciQ4SsnH3J?AiaBn~K_<No`
zvWL~nJN=|Rvd^5?OQ=Wt_OTNd3Y1Aq5Oc`#kAhgYyy6KFo@xB@9%CpyL~e}u-3)KK
z2e>Hb!k3+_L9s0ZfvEeMTtk@brzRiN!*z<to(3s<K%WUQOU?F`&4dcp&J-R-h8#X}
zxfSF^^9f?h#<Jac$`^h)w4Z;o%u@`X$7e*|1w{%7p*h>D+o!DxC=(oMDD6<t>S<2m
z6j2r}A-*F7YGdF8Qqu7h4{?rz>mMvvix|IsL2Vv=_zUz|;Ut8H{8mpKu~O|$9_}H3
zTcT)!nNEVZjcB+&lBBy^Zv;WF+1hO5*QX9Vq#r3=ilDu5K`0>9f^{3CamRRnL}ZBW
zdv5Khkm#=y(qxtBeal0i{?)lW&-?P>Qtd-!(@ME<+ga8}O0arVJgE*m=9{eZr3vh%
zQM@STi`J-0=D*7pQ2sW01AAh|fiWFk4ve_07_>ezvF>?**zv|;$G7FZuM3pJ<;&DQ
zOl%gn9NsNYK)GMoTV4ZOiHzU13tmMYFMpe4dUY@Q;lFH0ph<UZrKyd-t9pi}t=M|g
zrC(CNUP1sKc24Hdc!w<p$zP6-)`nQMkO|6gKX8Qy&<jdng~Kx18P!GQV^UCiSpeO{
zOR$fus=Ik}-7K0f-QwUkIExy<mzSpA{n*Bz4Gr|<h$4FS_dcywdV6%Bd8A4KC*a<h
zi1ccbCP`N15Gre(Kp9t@)S5weY&OB=VWm>af;;eIo9U#?-xwn1<g4)H`bZ!Afe}el
z&x|WCGeg$T5>sMgK^w3hf>Rgyih(f3+iEbKPBVVj%97SI#ZNcdDZ`1;Vc&hRr7^Jd
zU{9MwqI7ga=^Uhz_7IPx-nMI963J%1mj<3aURgbS4PsXXhtnli4&B|$oO~R1IX+eX
z7_H5I@zWizq`Tx2eQuI+2pYYGy++~s3CvYBdYUe%iM;TXvPbV9%<D>seInS-9?RR`
zf-AE2F0t!|a$fIS0N?MWm<8?=AY!2rMj4&<5*QmsX0eY4M+pcV_M}^dP5Sf=3#t53
zi~AAYLlX7IBDn+U1dxFu;tyz^b1_bzQTe5+w$dUO7Oq@2XudXQL5H*6SWAQPu7+w9
zGoCu-ZPs@FeS6e!eG2*WgUTO&g6t{&<7@f9Z|M!q?aYiF{`Efo7pnU|-XJVic<&Qc
z=y|kBJ0ngwZ!sLemO>^V?8&&KCU=H1?V42j=FK|;_1CwYJssjn34h3drYwRJhvPqX
zyo)So`-0_0J~FMTx+4Nw(k0Ks-X#|b?MVB{s(Zt4`MNvr_<|3$L+WlNt&3D@qQNZu
z>~0iQg@0;PDj=I8NKe<v=ao$iYP|5qKi;n%Y<SY4_<NfrI_jD$x>!pktwWDa<3zZZ
zst|7EUgHAZ7<9aHe2NaXs$z1gronu{_rJTLW7*aZj>IhuKCZ66JRF|gxe5<Zf%rXh
z)!aYj%Cj02I5>QiG84VieK`0N{FRdHb$z(NjV`?H?4bCr3O7caeY;;WV`44Mz_@+z
zM(;1y4sGbuw|l5g=lrrD=ah2<%3Ua%6!M#1<4}vAf@&`<MkeGYkh?Y(0V^y7+o2Pd
zWkT~P%Ce*3NY3nljAh!_H-2Le6b!7PJVBcyV!~N@Tp4K-fs&5Mh|!@tfk+fdC0Z$*
z*)f?p$|lq@M^PRQ$+Ygvb|f5|(IM}5%*-g-lsEW$Rastm*m28jG#&KBbYZsmrJqVJ
zE7NTk*VLcy@qtPfSB9>TyCHB(;8D>-6q!G%rl>5JgR*0Xc$9NYQuxMd!`ykP@ns5#
zl`k!Ob~9mB_!9;y*@ZMQv3Oo?HDLEQ-~OfZ;8W`=Yo%7eR7IOa2(@>f8xysgg7EK;
z+jAveeLuufc{67k!W+Per?qBc7lj+N+T~KV1taEpQe>ZWm}>xZ7<y8LC`yC5BuChX
z@1kWisu|K#WjK|>Y&@d^GIU8wrtloP&ybES&2{sw37DwUe~IM53XAbGqXcW1l`si&
z)jqE(f~F_nbXi`EpK3>W8Iu7L49m?P0!JDfe`rd<#hzq1@<x!>jP9nvo%MAW4dkfK
zQBq`p20HQ+J|ArHNt5R12D4FFvYp|yNAn@fuTlFTQo#@<TjpSr0)$nj(eBx?4R0>1
zfJMHzV)COlO2qe(raf(Mge=VIS2%VeG+LQEwGAAo_q9@@cpkh;X4H;4p{C?O^+WH(
zadWPZ;EB>fEjo+lE(rTn$rJAnZ@LX;U_O(yscxoM60??r!%NlqM6zdgF1`ZaP{z!s
z*UlEScxt9+v*5txr(vxd<HpbMmz13sT9V@_YRFIZT!%h$2xZRZ<ui-YHpK43WaJd4
zjBdR`{+nq<hRpI|xo+$E4BzP-5AA%dYyXPa#BAB#A6*-%8#C)Oa$d4cVOzHno&nTj
ztiqBctkbNRE^(muS42W9xhYCGUu!ag+R@}-cx8>+yR++c0{Trib<-aqU300f2t<YD
z(POI@C!ssi<Yip&=-|wWRBZ}6^4hQ61lwqieHIp}$KTb`EA!^@;riX`?&JidhFQ}#
z%ZL0|Hzy~j=lk{L$1@XTi5pzTjP2?48Xmf@6GnW^JwBQl<H4^SlL<<&Q~ehaQ#V@y
z6oX_|qUu&XOcb2@8|lv5DLt`=EfJ|o=>bSZ{vu7NT1d0^6Dfi-CVLe#cXi{4H~)oo
zGwPeLhDm&8qHF@3{7#pE;>_{KpPuXzm1Aosx@5~(@z$uRK9EEHO|2w?#jnq^GmmcE
zmRf(o3tX8@#!_qCL58Y7VfB9u;J^QWnurdJ$t(PiQz;ASe_~|k7ZOtV?`Gwc+Kw$z
zD}v97F1;A80S+?z3ea=h3-BsWF-qQg$dRR|ENHW&c$Dg4%ArQ-*W+i%W^!A@B{n2*
zn664EHtfmh^Az-FeM>Ps-ik!Z-?QU8JS2jelGfPNT%Iks^7luxMHWv=3KH$79w!Oo
zS{WPGJ8_s{em)zg=8MR&2B(SluhI36xGPOfyr|7GQM@dcN~vYa=c>rh0ewm8!H!P}
z-s_|BHBz&}kL{(`)Xa^}S0@@^?^<bj=HddV-un}MRZ3os*!#aNDkJabUis9u;0E~$
z)aCT+m;)!GE?_6uvL7G{?+ZIe{#>3d9oQd)VY#39IXEs|$YJs`#70vL>p^Joe<5HB
z#WDf;$-W^i^*p$)w_K{R8_phmmkje>RDLrCRqE76QH<Bd6YooPv+-s-q%3~s6jKAp
zh{0(po_AyXrC7Ez8lbn+VQ*EFOf}vGS0sxyRg`X&mq8<AdZ>T)B_E^nSU-j>$|b$O
zct6`3e0UNG3vDi_jFfS}rWadJEUHd)uErM6+e{*^q@eL=ki2VgQ{ZpvA8D;i@wWjy
zef1J4PDn1ThP@y_iFTX_vJmYTKd?;S4zjg~p+P#oTNyo@I@DkNeBnbp**m(Qde|Y3
z9Oy_m3IMS)dg+IHrE(@gOD4P_?hEWl&^O--(Hq9>6b<!28mG@2_>F=59_)JPRbC0n
zKBI+q2M8q`ty-*i@cbaNZCxMehIIy?Ey(jCh0&*?SMht9*qaNDrILfIqSiEUGeK+w
z@HP-;d@$z^W#V?vS$oKkirb*<DIF(;aa@y%@_OZl8{2!;WREX>g$@X<-nRg%>}4&J
zmUR@YhRQl41kmMJ?ByzNo*&o-%uzpTOTe9wbP%iuYG)n*Dw!)^m|g^bp5YstJ7_&B
zBRDPtLd!CDakdykpNgg*w#gViYNw4agZ9XIAFvwV&4Y_qcZXg*eRg?m7O+3^aGaKQ
zQy3;5_9=%LmvJxB=?-~#Srr8fvT0-=&@8Y;6*TS<eumOUM>%2DOHi_pN(tKSDPsx?
z5k0e#SnUnyBN&~D%41%dC@j|EiUvwpq!|3sLS0jUOB_8Z_F-uYe>MgdxpTT078TeL
z%eq)eX4@;*Mj<l|A&xYPT4GSNl;dQDUEdnOX{OF*p%vZ2Ay815ChU;tkSW^9bLux?
zix)$#?6F~*+S*kc*r(DU7#kJS^b2gUJ1&Q=0k$w|3<5%G`MO7K`ol;DUb3T@6$6gH
zlNO{>CI8SJ84T)n6*W;tOOr@<L$$fNy$@?UX?D}q<S8cL!72^%T~_>Y7>za*Ch?YL
zsh|YL^3#p)l&S>=bga<`XoOYSsFk9}8#*YlBMb7SA{W%d$X%y}6j<IE%(<%+Ez&Ta
zCLv;VCP#UVM}_D<;_B~Zk?&IZss+qL^KyF~uwb!=<xK8YZ>VA=(ZYT!Ok^$Xx^0?b
zccFq`b+2J-gbbcySWasDGS#Uad^Si|sq3$HLo}Z(^}BnJ$~Pq8L#>HnI%M%L2V#rT
z#NMd((1yl;2$DIu5#icbDeYxYn0T+<O4zX}4=xGh<F(LgYZk+8RxXa=r7_H}h>>oe
zeA4QWox{xt*szTxLsXOsemc|s7E%j9a1b)B;mjy-%Qy=+sM<EIr-s&$4?)J~{Z6Q@
zClUcm|A>DPtD!b%v<ZciQg&XfGv`7JUESS4*nhHd2#hbY{&aVWJ?^%Jvgr)J1L)0u
zFVu@X&|8SqGu3`FHZ$b>Yz$?|4eI?}Q|}$YYTyQ>M^=CzgSFl>Q)KYmX%or1RkC2y
zs_0$ofsf9DM+_&3ZOOe=)dnZG;;4lUI~<NcX{ndMHG)_(O8zGe)1P_UVs|En-o*RT
zkg#d6`oa5C6)j9i(JnihRU6v+cOA9PNZ_81h}r#K(QN3g-@a!D?9pWXhaebhfx?~x
zqGUTW8GI+_wXR&ku*==e>sQE^JNx^edT+KmFpY_lUERqMWG|$f2M<7;9{z6~gEw%K
zh?b(WH!{z75&Z4YjlRbHJq~XHPmy{fLk&}5S4PQ;wCD&jH&=*bO<Zfn1IZ((QnWFZ
ztndv*UkL&kQ9}l4jmCGl-oG!PTf2nwHuKvb@MgZMoI#E}>9a>xK9oaL4&Y0pdR^S_
z7XUCE-gmE~pCcC=owUyjy`P`_VV0VIvvjI|eIAuQ;}Q09kp0d2gyB4E00hQ)`}OWV
z(~xtG0>%?##Tc}6lML3XnS2eN9YR4phvEBCgYsbm;OAQpV{JFMcLsnai~t6!1&LC8
z0qVLmU~?`Z8OYI1OIIDE^6MC_AyUm=K6y9X%+hv|DN`qKKhXy9p~YTK*<xg{K-}Ef
zOE5#bO0ev6=Hz7K%4PA3)7)t5oa>6+_7lB&uw-9+-*682miPbSlYiK}rFAYnyB~a_
z{S(Vg_aE`ezlyeOY@Gy*O>7<h+pE-OmH)%yv7PE<;VWOF;?zws>y-{z^fmt)|D8hS
zpF$p)NeoGRG}*gDK*E_o!aC*GEq-!$oAp;~Y$iAi{56XXGg^=R^BD1NrF74>Kjln6
z4vO2bKJF4$W}r&ejJmYm<SwQOno`}kG!54|OLm~-KCrcnPqE@b5kcO&fydIp<<x>o
zWiYgfnU?1U7ak-CScz|}=$IZZ8c5g-ZbU3w{WdqXQq=bv38?pmOKLK#Uk#Z`m7<$>
z7ej`DUz^;aSpS?>wBO@vDtH4I7c4n`uJ3B^ICiCriW-M(-Zb~~G|BR5<;K0{J%Xjo
z`np5^;!oDXZ6&PR@D(N$cl2!7QrR9$(wQ@+=i3n^AJIdO3T9W@x6n2B|Hs%ncIVn{
z>$b6NYs9u~+qN@e+qOMo+qP}n$%yTpcb&2qb}4Jl^X>To_tSgptzE5F+-D|$5|{V=
zH~8%jdmcR+PcwTvVCGm4Q+U*bGsWXS$Y2e(Yes@mfvD;Okb_x8@j!?z?Y^wM(g=d6
z)Qest^98_G!s~O5#)Sc<h<3pznbzr(7Er;pxwUd`Y5b~&rfzW77=sCU?iv6rp-9Ne
z;tPv}g*9dy8YWYfrN)2UhLtD<B3m5#;RvZ3_YT$Xg&g90T15V+H&iY<B{D7!N!N25
zL&4XfC>9Bi#;1?|4vJtQu95@|uW;icablo~j$2=_Gg_I(wluy7V3-=_%w(@!KanmE
zLKijDhk{8GDg2XQI=R@7l_8ieX)fUyTqYrH<j4#Mr9|Oa$)E@z39!=qyHJU#wNhh8
znDy>&W{as(!rIG_J&^OT*@nwBds^am37`R9?r9JAMu08KKzCTt=sA6qb4(vyE*kX2
z1w{%eT`Jc>K<Y&F?B4(|ibH2bU0YE07NA$#s#%knl$zhc9t!SPZ(~~h&u9B%k2RI$
z-E4xkBh29yQm_x&T9X)3yx6&}#~?{5CSj(3N4j1~$pfBy${221wbCcR+E|~w=`tH0
zEDN-~D?1PA16H{;#u3z#80C`lPzRGrP+?1c1hxH6do>UmQ3dea^rL~XY>8YSt~@hw
zDEjaa?nupN8#oLgV;1X*TFLtxSy=hBDu5x_yBgjOUStNYp!Sk2<pp%(Q+$6{5i1<-
z*>nX3VsthYGte#h3&?wcMhn7K@SRrrb*j6}B8jQxSNc!g@ah8l)Teu#XrRJj10frk
zIW}6pV1LQ<J;$QGCPd&OVc`Qinqj=QDeIklc^vT|*LP!xI3CU6sxIrw;9#@M04gLc
z?bp`ae4f2W4x4y9vRcD!<JGW-sS|4aEM*H<$B&L;att^c!&i)$*?yg@un@xMvrBf%
zFneLd_%va+J^71Kz;w~mI1?2*=tmfM46FKwVvc2R#Y5v6qNmveM5(omLlRag)6@66
zHtls_gYRl2#myDyXcrl_cH2J~#yBmqaSr1}REl#9Nnt-}lcBW@mm&({xYW%p%7+~f
z#owHJ8^@#FgS(z}$WJ7ZlL(67umSBP6{DC=mkx81YNDS%zrX)L3>Ra4#YQi^j~w+*
z_J}zLte`Dmq-4H8|LbJ?he=bTe2D+~vyO#N3;@9JFHg3A@(@B2^5P<j|G!PhQ<_?i
z>*8oW*Lrg-?+6EX>lfaup%TL?7>PkxFtoj6FA_`Qun(f*nq{B{KA%1%9nJy}f89FE
zR7hORAKSc7)@6L8_WkO1R24y1ycWBznU=rrb|1mubKj9|X&%QT51#_q&;z+Sw6zNr
zb#Z3R6g@2uf*Cc>mk1HNbb}1jar3mv@=h+Ub&J1}E*B{k+q2ojc=Sl9(wmXr@=y?A
zEQ*SHh$5@IgbNL`n;g|yS(_a0oU!l{=wdCqxvO69l8z@*&AYwAkEKdDPJB-i*;gnN
zFjp9IPbgvBau!=1h{6IZVG7R{%s=RHr7;hDmE!S_{SWc?g+(>cbjM^I+S>anumbN>
z{%|S9AESZDT_dsQq8%Ij^>ysy&+Qq*4OTt*wD1XAVd9Hn>}r{CAX}HI3|MyKwc47A
z`kNTPEojct%q4!xfJcg}d3H~(G$9Vg9aTWW_Abk?E|pUNg^DffAXwPUp#O0w^mlqX
zymi3pP}lYeT>bQVX6~A2*_Q<5OS13-=j;1Idhs~aEl!2;j;jQK3i$=KG+A(ZT8h=y
zPw$a=Qp}|%L4hk{j;c)o!9zTboEx%=%BKc+x&K_f(a%HCp`gBdxyf1PNkfump;Dwm
z4QSn~ePOPN&C}zQ&*<dt@>2Wj$G`S@xug;uwjoVlBQx+emq9dt6nrUs5-!VSlFPwm
zZZ>pd*IDAcU8}u%A~Sv+nf9g6@taq~-NzTItDN^+7-H()bg1R2(+0Pirzyb;X*!?u
z8z8L&lU3>xp5CW`s9sG(_I#Z>l}}{_-O3_jYeuoE(%;13oocf@<E5M1X!Eh8Yi!qm
z6(bfSvx>OqQ(nW)D9AC{zK<#UxO-Y@4BdXbVGAp)aNJc4+SSE?nR22js&SSwhE^-K
z&kXmfMA2Nr`nHX*9%WHb<|LN037?D$kFK|`+<rmOC<Y%FPn<r+Rrt}teTkuPAYPKa
z4Un)y(C}<wcY?$YSoj55Y!41?3}DEpBO!iGUQiHq$RG89ICcE{kTMukvPHZaj-F-A
z)L%B1epqfv`;MJ3OJwxefrOQETIr_2AznoD)jbSLHSnY&;QT?;=edZGRLIg}?@wg#
zrQ|D>l^l*lHyRh51>|BdAv$#;c6!7t#bIRF_V8H;z&N2q@5MYw;wl7cgu8kvt>P<{
zARQQs4+YJN36lH5TH#KYD}i!}P0dcn<JE}kr)81r1{2ki#m0qqW2U9k!9dZr^}P1m
zVh7)@3bjhdSDH+wlpfhuDCyB^nI%&h*!huvlU{qGz_ZKhbI9jh$(os|(P+FpIn9e`
z;kdpT@Kv1HwLK^Hj%OfUl#Fv0WtNEuid}|z5`>B<G^=p95jpzeEQ=wWt_Z^3l0i4C
zuv4gBhn!N)3NBn%pE-RXad?99zIPq|cE~`-WSH12?cFHbUUJnwHw-zy7h;Gw(4g!f
z3JJ|{4z}Xu)4-`cd#6R69V<s1^c3QGy-sV{G|QgsA)3O>hg%n^m)AJ28Zgusn|1_B
zErBaa0xV`KnHb=A*SB(eRZGHG3y^!<8IaSesxnkvZ`SV$)mxVukh*@ZWs1(Tq#AOP
zBs=cNm4tbQ8F|(x>}U#%E3}biDs{S5pR$eh!%%ifF~#S75&HTnsDTXd77;`Nd|?Gx
zc!KOFGnS;^5ID;KpyE3|{9;zOZ{~k_oUX6H3gn`;1n_0R3S<K##eqFtgYVEl`0wL9
z=5e>;?S`*{AEOYhoMiimbg`RAwg|I_yT~s94S07jFQCDBvE4yM|6+&+=YZjA)fqXt
zx2}~5Y1SNZ%DPeuc|;a9{>k%iDT;`m+J4zP^G&B7#K*GQ5UK?XE=LSsOq$_r28<Ix
zY!bR77{WCT70FQyB>*kR&(2H5=(R4#Q6<eGnOB3J#P*-<5AKyThLCL35LafbMJk)A
z7)4qt$W>+<B1P074Fo#u=PK%;?(XE)<KoI$0jrGP`zq(J^^Zu$y=0+AMC6x2_rY=D
zb9eoW-5S}OEbvdN8<~8gjf0L4H9b7ExWr12%6p6PO=v-*$j44fT@h>D2zvMp-awHL
zGJ=CRZ@%}@#<x~VKE{%J5(%m;7&Bl&zqOXW7Xe!Tp??5#L>OA3G-!!qXF!%ht~Vn9
z8{=4BaU9zJH);(z(z?5VBgSnb#eo=b3MT+U^Du8M>bLKuhlyy&^pT<hN@e)+%f-R2
z!MSOSG*GZ0A3Y?kyx8mRRz{8T?!0@nnr5(9?;a_^*x@rV3T;G`%czJ)G7&x-1j}>{
z>3~a^gwuQGoSX4>eg)i!UY%G5NP}jJB8r4f|L7D1B~+5_@y@($^y%V$W?>mj1E*if
zbRAQhOW)rX2;)YoT=eN45pXR6XTe9a@Se?B_62Z8ByjemDyj>{&@cgndvex!`j<kQ
zz}UKqjq7b5qvS_!QmJ(<IMJCXs*qP}_O7SuE>GjRT^IJN&uMiwn1d<`Q3}~r?D?2t
zU8vpFV!B~n1^jf2T3s#z>yL0^$UGu2Mld41Voicm0&6;?;O{E$w4HCHANcda3DFT{
zzpF+AP)6~ij?xWQSQ0ImZTy8>w2X339+@=>ap12KD7M_>J81Jd?Is{&%!+I*(~+mS
zNy`qfw}N<67uYBmHq2D2oR1ihhALaB@QoGidTiLoZ0=QcEk^9vRSg{(T&#B>u3V;D
z1_8{};0)PUhq~(1ul%Afarb2c+GRJ#s*p^hv*wJp@-{E1#C@MKpW;dZ1zZ#vwHO63
z=Ln_dBEeFF*h{ge)>up;i6yY*HBt2+W0kou32?~zo=0L~8qScWYI23Xj@Sl^x&3VS
z>uYqn+M0b{hV0f-*?n;IYEGA?vITp$p&+<{jwAnNa+fXpF#wl?%I&G7SqD1pgjI%w
z?-M)bE#20hk*~+-x~_47j%RaPI?}>dGz;?x!Ctxi`}0z%6Ih0l_2!l^7qH62@^Ob3
zoh{tzvg7XV`4miwSho?~uS~<s(;=PEYJyVXd3Hp3Lb)?6so&=YHU|-JS}emYKDYKh
z%Lc(GvlYh}u#~AX@7~+EvLjKje9Y$?GHqw~0I)uHi!P6<Lyu?!DBhQHLtQX74>=6W
z#R~@Usi*gtxXaZRZ<$MqTvXSQKryvILT~<n{9w+kF*$l0XLFR|_g}_0XH2rYJiWQ)
zN0RrxUk7h`S;Q!X@D?AoXI9%&{`j1PVgpCW>zTKZiX>ZUF3if^QRFRCf6Vo1*n^%>
z`3i>gHiz{%F&cCBH#hkVDhWy$JbhFQ?1P6cPeXsQ2zsh;j@&rlmdUr9jn<wvqnj-0
zd(1cwZv_@Tt(+74+@KZwec+Zk=t_TP?T#cbh~FR2EjzY!+rK02F-s<>q#Td_wrZa_
zo8PU>u)P02?88`(_N2<6Y}npU9_C+@JpVIy>uBP{pr@!L@b6mJU20OcKXR+?do_fu
zNFC;w1W=FDVz7kO4%X!+ST344C4QyG!7A!<Vw08k3)he&<BPe))Jqci5T*fluY1@}
z1|>p5e51a8Y|fr<W>Vu1lh^tW&yNqope}cfs_UJ(cJoET3}%vp5%d=y*E_VPE)g4B
zg$b>PU$z1pTC-1Rjh&!2wv!l`MX<iXc8e5QjV4<R!(78N#!qSCOiGwJpA810enHwQ
zMCUr!!j@;Oa&5_!EGiw#GxtLdJUYmNzKIlack;7b$>ED>hnjyI1h|8KK{i*VJe6Z_
zo9YeS;(}s&L+gF=wNs1Yq7|&rklF-}QN4A$(O}cjUWUOpfR=?|Zqr**H7D9dB&O&x
zIVn>Cp9Pp`Wy`}w*E7r2c@q_Ko3{V{8$WmNG1VCTq1LJX#)?RxyFJd?%6zfgUl};j
z0H-_FzPz#^uM^X}FsT#MVo6LVs%@k18_||g2E(Pb+@7CyG?5gK;z8aA-`Rk1Gw1f%
znn9ae9O({D^ZbT8xJj7x@Rn3$Fdz``mD}&TI2<6TuN+x5OLXM7Iu*~mY0xNSiR!h#
z;@5cA>0+>mDzb<xq8up*oq4ec>VO6^OuRseP&78M^>J^_TIiq!N&_pCTr@7#I<IM`
zH!j*aH2Ro%@#k0MpV5HEkU^8VHo2Q0cnme_ohIdjSy|k@@+oP{<2iq^yJpcP9nCd^
zJeeIxw^B7|H9UJ?D`BS&oZp}pYryX&zd-H+YpdYmwzA~E)_(8Vo^?tvBt%U}OC?q0
zis9{|!IY)(>bQe=hCn30=ow3X-%(2ulY7$O{K`{GAs%7u>i-}}JWSdnM8ng<TxgY=
zpylt%?ss24I!sApo}PUKu+&k9JI$RHxXr$-7v^t|nWG1Ewe|N4?HH%PSt%|#%C*mI
z2%;_iwfPz$6+*)$j-6YbC2o|QvRMR8B;@dGVH7>&vR4ABuPxd&ESlI!1^Q@NWi{Vc
zDKax>=n_U;!&Lb((U>tg<O=CX_Sg+*G&@GO(ZI-Wg<(K#EbeKrMf*x4KutpgYwQ_%
z(6gi1r9io5;LDG9sQc1VN`1fG`bZbRVS&mhZ%sOsSC)+#ygaW755QRsB@QfkNQs|E
z!S4ZO7u;7LhY2<~wG+&9Wccyw(1P5_!O5B2PaXxhT1WyI!C9}#?Tyc0{1ruyJ9^K6
zO$HEiHY{#$kc++btM`{}SI%70B|WJ+qbE6WW1b;WQ=K#req5C*S7leOV6XDrr~`;B
zf=6oyW{z%p4jF5}3#4HP9?0O7bnu8?FUl-aI4BJ!OunHu6|k$XA_ATe>+U4DR~#vA
z+#4!jA9sO%kM<aBJ5b@ki<1nO=>9_-HizyMYdOJ|A?Mr*xI-98tc3(U<KTFpQV_C~
z3oSMK{w~IWwq;!^B^%1<WGg$a8$e^;ew*i7CU-<oABZ>8`Dve_9_-eHAHQXupN3y`
zBo<AZHn<ZFA}N_X?8Kft=6edXE1f-2MkzCp#}vw<S7I3a^wyeufNF*K)vZJSspZFm
zJ4=b)m02!g#rFzu5k@k0J19nGmZJd-5vN@MO`=3~X2sVEw~VC}PK)0xmT|;APASs|
zDDu1pcH@hIJ!S8TPcUmP3k%%CDG{C(N#rk*-&Wi?I5TI~-D$D$kCFLV@(p;gXP?$x
z1ja7&vO{^#p1$f7JhUk@6=!;hWP*4qE{lv2G+nR(8x<S7$6Xt+B;d47Z{T_o&u!7k
zA+WCS3oU}cLTWcIvz{yAn6+M(cEfQKR@50Uzt)BJG6ip8D+%5z9rUvb3P4sx2B$7n
z`_EB!+D56Txz+fo>ZfOdWBY-@joo-dBpt*<#o@_LELgp9W>$<eN2A7BMw)CYQ*KU$
z6vf_}<*QfMC%sy`d2!$Z_kVKVXQ%5M+UV{uh8<FylzVL?-~Z1th5#(<9nQ~cm-|mp
z@?T#HLUOXA|CfiZXX;?`UtQJzCHrCXV=&pLNAP;CQGe9sw*-FR#q&T3pMQW0M-o1j
z;3iC@j+X12{znJuYemK{aE9E}#l+Rn;7+YPzG@W0ec9*qg2l)hQA}4+B{_jJWm$k|
zyLTrpZctw_pm-cnVmFcxWP&3{py2RpTWYFG9w`B*jT(A2iP0YXco37WWR4ndB&rXc
zFtJk_@hyTsYK#kxcofX3MTyA9vfzkzoi7tlnWibIvG+b}yVi`FnRL_eZTE~7VXB|P
zxdUr@xI*E96PxxA{8p@P%ZjsaqNrhgVLk~=QrT+OAb04kId2Zl@LXfxh-#*nJQ!@D
zC7u5S%4QuPV+dyu&F^I1*4%M6NULx7j>dXXm}*E$uCM?}7y>y)bLyZHpGOw}%%->k
zQ`J{dFZ??@6;r0)7n-Ygz^Io9P>a|_Eor(f3Yps>5rL;!ljn=fY$&~M137PtPXIxH
zfoP?9B|feIlE<M+J8(eRCYI1M_Qv{jqm3+hb3fL>w=Mw_D-~a8mChiqP-hAUs_7JM
zB6pRM<S;Zs6Gury$P0dqS|J<lAOQuR^G5U^D&P7QXxAU;PI8BMw`7)9wSCbA3}}ZJ
zCCJ^-8$9)Ryo}Jhv2XMfF_8@r8QH>;)prAN5s;WDaqS@sj$i|<?_|M_P#+5*H$sgh
zN#ebjT0^#^WQp%qE@tx%$%nk!^2a6~c272VblZE14@}u@L9;wzv-GK(4@`jQ=EX+n
z+5`9SlXZ3&1NQJ=!=&D1U5{Nnt)If0YkM!h&xV5S*na$pI9r#HH_z<4!uKZknpdyE
zQp|@3`dxJ=&7yPG9QfaFT?9BPIE`*I)SIpyJ6Bg7UHG*GHY4Nds=f?$^wc)R%temk
z3~3!ez>dtNuDoW*@v|*(TQP;DU0h;8o$UcBT%Be3+l|0}MU<bkk|ue~qt>EEE(sR(
zkZ8*k;)^LElO_R4{F(0mcud4wL7JMi*}st!27)Sw58_A<5H)ZGy-k(NASqFYE$e8#
z;mEN!6F$?Mg56J@p5DFXecOSHcDPhzN|q6gT{7R@h>J}A`=9Wi*#=987J|l4a{u#Z
zzVWZ2Oh2{Qk8RH4_rDD$J1hRDKImN6Tm<;CkjEN@f}fSB$PbA#oa~TY_JC$Jg-`Tn
zby?^SVv(Hv70)wHuIC4_i2tmTi2W@<<PC=)`BZ<Ea#SX7R_uo2(;PK4iK<(P++}0{
z_^W2gR(6ga%nY6B9$v;T1m`%>PD*Mj(LVwTLdm>4OdHfG71YxR0d!G`>u4yVf{NA7
zJn~rJORG)XOKbeLNOXI&snKMuo)>I33Mm;G8~Et@uIbw|?BToBAJ)4W4s$Bqt5Y3c
zm3dqiKH3IiufPwSD=c&k7rNDO+K-CPm6Lq-jMv*&jMLSY(A-CCk@Xf>H9r&%e|d=H
zEd!q#ZRiu0;E3+M0Ho#t76_}tM>S9-1p-4d(2~tlr6H5Rula$w)psetyx!!`5ewII
zY5W}wnqG*sC<l(GKVzjy2LO3Z1=b{1!)0KVrH*Q|rbK+~yY^N_vq;G0fej_hnmvWk
zFSw+13d{5sP(??B^nEPkmX-TA00Du`gVE=_FrWA;lBKRW)DZ;I^(2C0=Jl(`9}H%l
z&yOx%qSC1qGFaakHHaBd?(%<|7;o5d;I8pQ;dgpH)!R`TsQr_Xe90LQG?gHWfFUlh
z6#4!TI-@Ipo9`7Oi)x=w=Q*pYG^`>Ed0Pw2pxbKhPT2s|BBHsx0BB>>W)La09i>eE
zG(jMehcBxjD^1gop*&5?L)wnaF(Hl#90GAMxLUahT<>Z_D8ftTh$8<~Sr{Z2P^Pg)
z94*@}mxM-dsF*}8?tlk=`rtRlvLl>3+ht)k@&=6mwak4$t^@o0e|ApP+eh#(e)jlY
z@&DbI`yad>JwuCsE4~WWu(8E%L;RZ7>(liQyc|zB0HTR|fnkrinl3d0tzXcdMfu6W
zXk=EVP>wa_3;B5EVkW%jrw+1f7wR~$)6GnB3w_ozwjuOTH;(I#c2u+&5$f(p<82*O
z(gRE2r=CX^+s0C<tlp5XOlvi)d7Ps)%}lj>Xm1E0<n!>N<855L7EpaH8tg6jpCs$H
z5Q+F6DOFXLcg9FD*-i}Do&^VsyzG2io?->DczV=m+N*X{rQRiNOU{S#GW)cDyRo^u
z`a04DeOM`&m}FbI8>qHBRO9po?Cm4fFe(Xvg!^*&ym;S<<}l~*c(982d_YA;j9+`a
zhRO1zcj+J9?BPgdCT~o~Ms`SX#+&cBz-_=vYqQ1`mE{og5V}8H7w{o8bZM<KwfDhD
z$=#rmisVtl)F;G0Jb9g5y2~Bs__<bIn|ngwd3rU$hT%hS*D_0R0Tjxj5Cv^VUDuSb
zUE}>Gb<K|A;!II}UssiV3r>-`L?=ykG%B);V^30}p@a@)`xu)nVrrUt7)4z|M>;$7
z$g4_eyNkd*cP8nIZ}+pNLNCu+pyebV3m7?BO^{MKVpK}bvXF2YZDWxVppt2DCD%KE
z_V!wqrM1%Ua%rNRh|aRPX&sk>=oec*UR0E7(o7a9_A>Z05^xB0nqi@V=|}#q2p}d;
z#D+Ru=7#@KZc{X_58|h1W*6%sM0n*+<xZqk8o=GGA;6hkljp6_$AlYuGv2=dNOhpi
zK*holcn3#@Dmz;?Mpo6bh7A1(b2*WqVko1!Y`osK%)czKtO9rK^cRI3XmlCrO_qSK
z974>3lN5JfoQk}G5>?uxwF`f1XJ<Tf&RFeF6cD(;8Ad?{vp{3uLi@x@u$DQRtQlo%
zdjPgUQhnRQC{zpMGV-7>C%XABisU+}(sKli%OaL0I!bZHl>C5Sl^Sb;?yw8hd)T~z
ze$w`!F)N@SL#qa%h<@tUei*n35tT%f8`0Fq>`FJ50gnxoKkPZ1iIXH*aFEzwo~76$
zBmXdHyTMLc3VQgUnZtyrSW87r79MbFdz`&L?w!ALU4QN7b%W`rf(~U6)iJYB0t@1@
zJt&)8^D8uyQ}V(r`AI=Y&@};ZD>t28ZZ;I`@W&jP4RF-4&Yz)<=bmWWCn<o@0!C40
zyOU3`kc^5~kwk>)3DGFRiIW4Bny%Nd_`}X?2@v~``!;C~$Sc&SUu07b7$`NdNsU6C
zVa=@Zl2R_&n2w+{pIW{Q1I#~A9$#EUu91`<;2`e)-PKpLPhUwHPtkATD5tUD7{IKU
z#A1xCHBa=DQo%qIx2dWd5#kW3)uxov1|9O*$f(NnnMFLkJzR+^Dpb2Z669d`m5M}~
zu-8HJjM4Ygqy*Y5Qxq_0AXlS3Jv)-$1c7yj%~Hff=_|hpro06y!u!gtXn(lVNN$qF
z!y5;8Aat*5R#ofX3`76^K<8wRp{@s#Gc?jHuNkV>4FQ%H))z9ht~Z3YKV@qxd<WEi
zb^}4`r#90LZ9R3l07ApVz0Rv7bcOd!iUX<f>`FwPD~QpCI(OiJz@MfY!lH3v18S_z
zV@b_3WQLyxlo2Lk-NAslEolyshOCwJ7te#TUoBD+mnje;ZU~<4MkvLIS5WBJR7Rzm
zyAI3gl{HH#3luu`n>qXwTK_wzDVm#*{+Ppo;}8cQ)b?Vlw)xQV=Pjd$v=DeE0}w;*
z{0QRPzmWy)ljlWQ0sGVr67sa4l=p#f*QWdwuB5AyM+HXkT+a}Yxgp;YnRL4U!#k=m
zI+@kZer}GwJZAieU;7z0IVUqv=^GYr3MgW)(5aZpjO_79wvB9PU2CaDHY3(WVgrMh
zZMZ^1Qo{*{XEBMxktg5hnNWZjwgp^v(}Z*h?!=XFc(8Y-txPs4lbG+2lC;8*6z>R_
zYzUy6!s@2e5WQ-pwS(-;8=^z;yX;cGSuMr~UY}DhaQb4l1Ab{?nU-M@qL>$j-#S4k
z5lwww;bw!iWhGBK3@KJXf#TE?uU`-m-Z)Oxp0YDP5~HFx#IzuM+H@$RS1P0IW?_d>
z7_2@~F%#}jdQ4g7LHoBTU5Nj-ryrbRThziziQkPd4}__e3C54$I&dCs0Y<1`wiHyV
zHqd#H5a&Qd7JF?azS#>bjgjYNCI)33Vs*Xgh2BtH;yIHy)JK1>?OILaj$){C1yA9f
zu<a!&JGQ@9$^xqG$%ip71_qi>*j04vv%+?oP-etOls5;|1J*7JGqvzJEtCqr-0aD4
z41VFC^0NWwHxtqQlZiwxFyu+k<B)_I<_*G-4Y1i9;>Ij6j>te~)$+m{{Fj7iMi1hb
zg){+C16DUxJB)eiRvxi^pShf4_$drVIQM}&tqv_Wdazvj<bo__T&8GZDfUciv;)?p
z&^@8OWcWQsxD`&~gKK*bG-AL3tFp{%3<+~9%@i#Yu5zixiyHwLtS=3#3??AJA58u!
zS8mW)bN1;ob#Bd9^}k^hOO=`}x3go7aH6WRCHbIU%}k2~b*qvYFxd#_T8c2v%qp~4
z4O;=G>idRo6+q07cCNA!$#HU9+39X&;_9n-`$QVT@Wl>3y+2Mxc`;ewImC@X^2Dqr
zN`5_wrP(vg*QvtP)kj{8Fbqd9M@kzWFffcdq&#DiKr>Dy=GPEOjDUKuwU`Qo%$}h9
z!YS@XoqB@FeAs}3OjS+<G8chsf$}~gSgQBX`p=e<Gk4or4yV8jwCjQ;@M~!cC8!Nv
zJb_<4fM$@cr`o+3rg+sfe->^B-p{f>o|i5?X$w1|m><K?QHEAezyRm+m}-Die;4Q|
z!|K5*r$bUPB`_fgnpafC2wrXPY=e<jFd%T*Qm2l}a|l}~>SU2!ZJ=`{txP6KpyQpH
zAC9<cb~AgGFq9}FfzNz@2>8++X?dV}+8U25HzGUS<K$8teQ&r~evB+_xV9YFRn0!6
z(!>m)OHTeeaE5cdJ|&l4dWuy3EAU$>`IH!GX~4%c-ujAGCNI(*rRFz+Yy=CI#B^X}
z84pFTgz+IV$85$M#UP}}QIa>eSiIk_{v+%55a=GLEMeTU4JyLWfxOjh1)r;H4(!of
zu8kYNYMC-Vq~Wvkg*FF*_ssU4d54C1)}Xi3mt>sihnw(RaMK9Cg;e=jb*8!dB{qsO
zgB-(sfB}@3;n<gJY~Rlfi+k5L$3JmfJ++Px;e5Uu&sW&r_ZE%sa9^Az#yF2rAKU#g
z?@yF>G-nOhM<wxpOV=3g9s-P7jE+*Y-t>U$cQ+6|QceiM!p4_(P7Cv-7lmu59|fu8
zMg^vN*P8BCxCOP_zKr{dwv|n=NY^Vg`uR(*{J9JyCP^q!?E6FWfX^|QWXi<vZJar!
zTxW^%*tqkzF$TVWyH1$mMH!(K)Osgtfu=EJZ#uF`=@jglaecyQMiDsc3U99>!uoc`
z^4L5VJMe4p(CGt{cywZ#Yic+S;Co_yR*F24`V7IMQ(2QMXGbt6IUPSA%hZ$Pa6t@U
zGc>LZU!?RD5t67}8QWN2qvY$(59R&A%_85=m@rjXnoKj=`?O=}>S%kf@*i&=0&b&m
zD`TY?+%&YCcH_*J#<$oDt>_3HIeR&W6(FSpGBjn8BTBI~%PN`0IbKv#p<6!$6nG|A
z9SBj+7ovg+gq8ek4spWsl;u#{U@wo4eVYW=Y0|EUhW-l?pNYQg&mkwi;@pS+&5<Px
zU{(Q~4FYSaK3VUk83f>;uYfcuLsnww1VpELTat(p$O`g&P}kYsl?!3-IY)Ep%O|SU
z)5UKuj=!Kp{nuW?md!#!Na(hUW6$I6>fqtHWd}c~m9-+;q-thndRlg7M)xC7>i{I3
zfAJ-oB{%-;u3Yq|#eB=(Slrk*Mqw)XK6%<k!>FU61;^L)5);JOx$kN4s-*q0z#w`b
zTWrdw$Ue6)fD<b%!rx=+A%b4%q!hkOm9d14hGHTNDgD<>_f}2?a}p6zjQZ^9*u%?}
zPj(fG&m^zdpBt?gR3M^Sk4L-p#^*>kM)cy*1H(5259|F0Tk0#q_4AEW(@|(@Tn_#B
zSMWbM7+BJI_OYM&#KMn-o#kKVV1$2O!Dc4EO&koIO!Vvw91LtsoJ<`4%hLD1G^B>q
zY;1psLtj^V43a$nB$+bn6&^Iv!iwuc`NRQ-vY$aII>6nu7gd+AM>{)A+vwuZ7S5b!
zF94A|IjLrNGn3sD&P0P9$x#W8SkHX0L2i7PGbxOTqz(=#Vx*c<WYO7UwmO{kVkOEo
z^$?dXSX&D-2bmjZc9bAIN*Y;c;e|QVCZ;wXDXZk_I)+jvS81@Twslu<K^?kw)mfKN
zZ&%0{lbn={6)EY`<hmjuoT}r6+=Frr%BFmHhg-6hkub}qqU~3*66Fmf&Z<Y}OKwm0
z^xfS7H=UnoZeyFH7}KP-UUty!ZMab-3v-peTv<9hUhS7V3bFmR1}~m3oG=6NHw4Zx
zAnTTfTo^+FJ(;CGED`vP+~&#h705p&aqK>w%~QYCMT%Co%O}E&S-b|3g9mAYFii$Z
z559B_*}z7}-qZ^PTGKkL2KA9>)oW-zbzaRES9wcQUXl84M=erLoL2H*L&8X%tOJq{
zv@#?A3cOZ(ObGiWqYqk%WF!F7Gu1-$uUt0BNZAE#)@ow^7XYQAQc&}7W+%jMFP)<O
zx}2KIw-1$5wx6oPRgpS6h%*paK~z0eFOuBENRFyu-aT(e*BujtL7RX;wldbpix11$
z^-F8Ll-U~vKqLmHcJ4yoHAP}?reuD7zT`T})t^klXqR%ZH@e?AYIp&2a)G@1MlD7p
zX?k=4E*v4dV*AI3P|>I=l{Gym)GWUX&)$}Md)G*IM&j6VrxgGcA0HOszl-x+c1%eV
zLHz_*SwJJS4+}84c?urP*#Ll`OP_JkuR>r+Jg%t_zaP1|EX%LJkJsyVl{e8?ak($r
zisjz-gy}+TTf~N$qSys_8W;<7TP3CJ1nI8CTFE2=lT;K6s+GT;Q8%o^9A0m4z=2lN
z7I{dWrmh*~!CpTBi=6+MKULbf0FU4v4qj*?gG>0OITqCy%8+d5Z+ggcgmwI<_z~}Q
zHsVAFs-w~8tMihOTnM#_<r}gKD#juY#?q#s9rt7N3d-&%K9-V586c^hhNHkv4C(O?
zHPCg0&{dY}*@M?kCIG22CH%;624*Xbw_tN2N4Bt|GDHZaWb%dwpyy)3I-Bweo*npV
zvF1sBQA2AZX@MK4XlrG=UJN#Zorc=?%kFef#2;Rx(m&;8^78AOu_?~+_FsnVQ1Jem
zDYZzGZG-bbVzGs{K<U=+RBrUE=u6G<u$5enYDk1%VRo`Kur*WFIc`La`0?e&Eph_}
zX?-=6`y(2kkimD}P<5BzLBg%evFZa6x%$)JQdzrtNMzqC{aJkJh|L{Tt3CO5Lx9QJ
zaj~qJPHC$1lPWgr=J!L4Sr<U1b--u|jewN&Gj_ZzP2;w8lRA)A#T5(&Y=!lD&Jz7J
z3TgNZGk$LAn}zgo#p@mZfwc~8YQ4|cq>qWh_FEwzDY8x(5Esp5+!k+1k1dmICF?)D
zX?=*_%(#Yl?s^W)6mi4|iRD)d@$Gu73;i!#Z7UuDrp%czS65_4Zw-9yz7GB1S0?;7
z$<uAlYeb?2Ba=YLgs)aT3aWUy@OWjTO?Q()*N+d&e?}-pmeeFv8Z;6Ub(o4p3Kj9f
zt_bAeDC=a29m73o&)OoDRdqKMZ0XZ`so3rVoRz2rTHC+FR$|Kz6<V?G!MaF>6C-EM
zLf$)R?zFMh6dOGpF=0yiGPWTabr3?GUEneIMRIyRn2a%VgX8PBxzgH)#~-IIPsVNz
z@LdJ9FTAW49gcR@F>-W+PHMu8dipkybg534PkT)Mmg==8v!YE7EYj}*r;uVKO$NI9
z78-Wy5Ux6;ID2BvJ49-Bx+y~DGy><(wBIy^)Bz|3Yxy5QSH~@pC~_ZH-7AY|kIMIq
zU#OpzGTWJsH@?)-?LetKLz-j3*4+9qmsS)k1^ZJ<bCvGi=VztENMg`ybEIytnVDry
zk(TPB0o$aQ9i=x=#^@g{m&rM4v){u1SAO!J?rEJwh!675)@n56zuR2>r+fNyRha(|
z=*j;=c39HX`e{R<{*WCAT<|S1%W+!x@m+9%o7Kc&*d6paMD7*+GxCUCPL}tga35Em
zakfJW$+aBV_$fgoLL94i+TxS8*_>rZ-(k&OIkI)UGm!4+do+_eH>j68JzMl;8b&on
zh8L?Q^u7Poyflb4S#mt%-FM&SB%MYiZyJHuop{jv(W-=MPRa9VKuc>ke>?h_Dw5At
z&Eu|TnZ+x2V2#-fDG>`6r{X%33%^YeI%}Lje^rGGZ!FEmm^6iQzXEXxleCY*HKFW5
zTR9*DSE36+7pkiv>NEx^%XOkw*c7f%ha~mfUuKLTJrcb#d6&M+Dr?VI7f<M-a9m;&
z7l~`0%okmLT>SmI|8S9o_|#C=m^;bRU4*SEq@LCsBh8d@3zp=S!ROol7M1%<;u$-a
zbYb48P02ZbKvoe`35oV0c_>43Pg^4ECf63JFLV?4_{BT4PqkeYg^n@Ty;Z-)U?pv|
z;*zH0P2wH#_?J)y5RJpQV+c{!UAhCR2~J9XO%AB4`QiBt2QeZS*@pW#kMu8<v}F$V
zrmBrj42#7_d4<Z=yplL0tl+?%w(<qB+cM4$f-!Tw68>e90S>OoIbm+<CWm0u^$T>K
z-_`T4V4x{?C33&pZ%!1`-=Fk#wNE&RFxapIZzG`x@X(`sgs<`A1MBz0abBrVuQ7yu
zGiwxG2B<m?nvWs^ax)3>jPI2zK+fLp22V%G>QB?0wramW*|lfT*kZr`lxRHDV1id%
zp0b)?h=po8fOvFIjTo?5E5V1*HKz|jN3-x~(*j#B4V1jE73fl+zu!DjbCcfFoC9~j
zf7q9`T};Hcby59!)dR)RD1Nz}^M!WAp`lw~R7IHuRu?n4@1|S1No!!6I1QKiFh(Qa
zX8#g}?7n|ZblJl+$TfJ=epFq6dB!_<*jVihLR=MvPiNU`-ZStQp}{zxtRfI<^YiHm
zf%Wi!>Jysi2m@EMmjv<96&6VMHTSoCjyE~vXqw3mba)g=g*WEGiA&`})b<3bmfHyp
z;^qU%VFs`ubyI(;ATGJRkBh?whr1rf0-0jv>~H!d=;rkh>emG^AJ6*N-(HUL^dfmh
zk#LiWR)lQiH;x^P9G|oq+sf>2>X;iQ&B(A+L$vOKFTJdPwti_B!`qM8)V=ld!_AZL
z*P;Eu+2fG@d66ZeviNxE-*w)Lx0D54pv{W*BHTDOn@{4xQYy_F^W}+Z+S~TXh<XaQ
zv5FYy8%5bun-UAh>cU$%%-xyt8b*=)BifdS?!6^1AF;{^d6c`|b7U)#Eh*HaC>Co9
zs5wZujAMGoxcw_2{SIPSEk~2z8iBX@0pBT-^Fbi!&1AnanzEe7d2vb!k*0l*A~qMj
z0hb->(d0UTV!DyOuMl}Vb=nIn$HCcZ=oXV_kAf_NSi%zpFw?!;Itp-Yr4;-@IV=Nd
zUekDOg`4wcfSwZgQ=erB8Abf=0RO6*@U}|{I$j+0xGhs?5qd#{W{g)A(xk%n(xB*T
zbt)<=VTmkOsRsfEE7VM>6muaf$KB!SS(T~tghfHZ{(|GQ0?}bKE}xUGC8>23tSP72
zG9Z-P3gOAqX=)TD$ciK2(5ve{{dn1X%*W>oMZs9LwwW#@2>6II#}jG}X+ppX18#?F
zPBH8{i`uB@mbWNO`twdHMYNh-VF$6h6QmsE3>s~?<_cigl2=blm|)nnPlK~cXu!j^
zn0*d`10sD<B~0O2FHZuHAk_(Nx|EWHgX9J6Gs=lfDVD^ExXZj*7ULvtaQZ}ZY^x;X
zyGL^jEEvp;#Y#A)@82il926$Rqkl)Pnl11nTQpScDo0H-Z!Uizq#-NQ+C&7?=5!1T
z&tH)gXeuMkt`Mb4Lr;#7RT%}jAtlGw%K&zTVf7pa6emGWR^tR!+k(Wc3$6wCvGPIz
zarEV8e945m)DjPe)6|-C%xvJi2d^6pLrr)ykkFQm4GD=1Se3uw7t$YFUJ`cw%0s?x
ztHYxpf8Lai4Vy!wax5N+)@J2KrixcMbTtPZV|AjNE!c;Q^7Y6IH8>Q&(zru)c_;6^
zQ9apC)Q{`M&^e4Ar-MsgH@<%Rz2Yxi!tt@;PLIS!78;{aW*;0Sjmq!_$O9oNUdK{o
zvSu?va?A{RX4!e%yw5G2L{|z#vlvnqK~P;F!B(FQwxE}1U27;cO=(hC`~V{2mWFE%
zg!oL_AH<#vhb-ekKu!!6j0YOQxU*i2J*1^ih=xW+2{gQ&MjVH!+XXi@HSp`9y#DNR
zJN)na6H^g|+Xclh|5(rDXdMk8mv*6=^Ze3WM6snbAHtyK2cE?lJ`3Q?@~o5~?Umw{
z;1tkdn9txQ+5itI1g81R?HR8+3pOlzvJIQSPNTHwfo}%0$s|Hba?%?H!*je}{>d7A
z#Q{sYA~tpgI|KSYJ(>fDt4=Dc=dfqt@<M*AWBLYAo*9;&wPP3xiGO-KXCc;E>BAZc
zUYK>wmHqv3o7TDA17Y>$DU3f?I!fx+PQg3@Yr#qhJS(%jFscSs?Ho2t6zZM^-BPS0
zX%Jl}ej<Q+5G473w>xz`Ob<-f6QCKctf*!#=#PolT6SjhCtvc^ZkM504%EIkvBDgR
z;0YmJs$+iFTC!WSo4LkX3`QST`Za@dNzvGd1De5Q3AxwhhezWokX#Zbz!AxS&f%mW
z3pm;8!V}HjveK&Uf_DnPXBS7#jm=GGV<uuT%*$XTV06Z}LXf;azLMV-;C6LO#qJms
zoj!WJneleO3`By6DF%DivDrC<;b4HAQc@ZZ!Ufr5ulIPcNCQywG)2O0tYi|EI@3kb
zUW73i88{73#Arqn$VC;bl)yiAv=rPt;ZefwdO;&Lqcg%UjL^X|y**cS&@H_Fm=omD
z-)603?TXpnbyhYcH-<q8Dk{M2e1?SmS1>(gL;Z`lkSFZKg=Y?g#_gVNr6Dp&+XBS<
zs{LE?G8Xi4+{X#*Y+!qhR9hi0v5rEV%ga-;)F_8sVqA?*xM7x{-~_yz?LS7_hc-Y5
zt_t?y3O$zn*90QSV0lYcW!_<?pOGHBp%Gj7Rx)JImbN}};yR$Y^1eCSag;tWoB(Zg
zY$k5kYRh1Y@s0qOeBH=l1FVQSpn12a@vrf_hr#(V@HMDX5X8gaOJ-isCmeMYTw=kv
zXq|6ec{y@Bv9sFSzCRxKo(4w51b^=iZk1Cd^>lK5XIe(2ygF)C1a+SGU8(l}K$zmu
zVshmdE|F&hj<ZMIf-m!G9I7)*ljTp<9zf828H4x)u8Z_8bYU^GBxkk4azyiYlYA%K
z3LJo+JA>sHwvNi<4Tz2D0WM6y!F{<Y1IPvolM<X<J(;qnN?50iw^}fDFLq%E>sML~
zXiRW}%om)aKaT$XeSLK|^oe9E+jvYr=3w%XX4TQqCW_M7iU02afPc!)3e>mlwV!rH
z{Lexn)4yz2$V&++vFSNlnEn0_zSuuM{u?>vf2lv4)MOIZMG?AYYSQZA{b?qB25(8H
zGbks=SxwN$!<|j!v;vuX*%L&IFlmN+cx%jv0kK(IHfOz@o;^R?JzwNcgX-Y1DH5c3
zakoLErg~!XFT@I#Ukk*Mo`q6AU`N2wJHMPlKg9Zx4eAUgD4SI%v>fLKoLFOr5sf~Y
z#t#}LiF@XPC!-~1B72M+w{~D^&u~Q#W)=v%aOC)=Ue?AiIJeI<?6(elKV5FY`3fG@
zQ<_HtZSO~3S9SqAd?$2bM>yG*tG2i98mQ0gleM}fht{3GjcvkO1el>l?uXo1y#d`y
zq<W|DURBp%$x1AX3=K%W-4=ovc8TQN6w1jenFjrNpv-!y3hr2D3K<M(-1C=_=Da({
z5&&DUn!h7uS6lHOFtx0W9jn(4ObaTQ_oT)i=b=Pe)QYANz;7rkgvX8Iiw})ss~1e*
zf`SDMLHu8)Ug@=?LK6Ym<{fnUgSe2Pf1NcX*`9I|B7R5|Qr?QLjkO})x*c74W(AXr
zkkVi%gGnvCL*f{0yo(=7Dwo-mYV_gKpf541)D<WeTImq|g~0?M;;)X9-aX=#>$AEX
z1BMKICwJ?_^@YnH>NN^d5)>(s41XctHM3^S8fyx6sV5RCq|MX_w%fHXav=B$*Fq8i
z7;+F}D;f=pjnTAMKnYW!R$2qqlIAwr#yoX;_q>%cizK*npNix1qk)!DMz#qvQ8}tp
z;VfA-C?<bQl+-4+gZJN1EYarM8-PB2gihbp8l=K?DuB>*Cl2Y#<%C4w8YLhFC|jIm
zI@~<TjYEDFiUWje#gwIdyS(U+6TIt+=S-}W$!r*Rq(Dw>GU&eN2NW+U+eV76=5-fK
z?bUzOM4HpNNmBxYGKjkoO~SX`+yk_7J_2>s1bY8_qKw_InU0#0!UQPU_q#GOTa7C$
zxy_^rDeqqLEx-Pow)eT(3m*HI_sOmVrc@Z*xIx%aJ%|)%4AqTDg1;xW?dfhj7Xj&;
zgiHH)B55~osOqZJoy|pmDrvYY-Fg)rv*J=WRt%<9MGq;oFmSrVI6pv1xD8Yq%Z3eh
zE^JQdGQVXYWBa3@XmDYYrG|!udbYi_AeEQ4*wtIyuT&_RH8W5bdVVYus)5ekQ{{uy
z3bWpl1_cD#e4*sUwT~ej=QkmgM}Dh^(HxS3=X%r?g+Fk))Jh5)s~a3yr0*#fb0;g<
z<2?t2V(?Pstz~Dq^%NxSR5%CYG_}R-@W7>OHe_I&=`J)hi9~GII`=kEI)5%l$%?2F
zuQIL_W9vMKUxzjhVw4($yz==7+q(Je6%=gR=o9vMcfQzvEam;5sv1*9-W{|uzg>fE
zr>~eH7D@izqOgDysaHn88mLw;7j)d}&?5z_m!l{ONmtDhR0*NNphw=csvKqz?oWls
z#fHw-;a=Ob^EE%>T9~2Sg!}cTO`~Ke?k7V|M+1AjxgmohkkZmG)Xu_9H<#cs>oZr(
zJ6m^pczoQQyLJmB1{YM|`98aRV|T=CwxCaC43KFLkb)=&zgNRWg)=fgA;F`#%A!KS
zb|=zN2MRv&Oue{5gUEgUnY|)Q{=MN2ADMM|B)a+bd(KKzWScnjN(o8UHKPc`Xb}lQ
zY$N^cG72tm$eaCWCnV7`W9gd@0IT4E)!|^z&G2tQM1UVW*<4iJm<&QlY+6$6mGQ~S
z)t?bEHt_pwRrQ8_e8S&lb&n=EG^TsNwOv2JS16?sFk+_8odWZIx_9)?$mLOUR$qvb
z+#YHSYy<gZ%dWbQ^Zos|simPKE-bCfA@{PLiPbwoC@EkRd_gKg9eVDd=5ex-Z{eYr
z0)X5!-+8O{y0|x*?Ytqi$3C?!-V^xte&H>SGs5Rdcy7?K3H&<hO=-s(E|OV8_jjmj
zn?*En?rx6!&$&&L$IJnZj3}`_W~dC;usIdXg~V+)nYl*c;ULfxY%A#duMe+|t*47`
z9&erMna}KdEHPiBh9tZf{QVyoHo*UEUQAQzbb|fFzG#2Y`u|$AtRy4x1E~DRh^i+f
zqx7GN{Qu?p@K)J~S^xi}d?rPxQAlapC{?5|Nc7tv;r@uGE-Z4TbsMe79UB|y+=mxR
zOHUYr`QG(gIx9*iNw!qkj4qkbIo-iWhrEW=-MKqrT7hI6Yu+%nfA)u=!a|+kifU7?
zMNW|UXw=|uxlLid;wUM+DD?}e@+xUUBrL#RF>2^%U5b;D$A6wNd*>&_U1wgPYKmPU
zHx5lwv(4XSQV!@t4UZoNOnNkQ7Z;D2Z`3!b>-^=ZmP|I1S71>xVv5lM38+POSmXe$
z+D^LZb0nJ6OyW>|(a1A!m77#$Plu;f5KolsBr;4+2Csm&^kk^=mX1N$i}ELoW49Sg
zqMTy7Sj7d!4YyXa7=w#Q_Lp!%)O(|LudV9(6xh-z8B)H0vz!OWC(#6Sziwpml3Dvu
zjlr}T3}En1iEoF)ob0gfEs=-v=5igVF0rnw$Kd2P_<?XqF|H;#`i%Q5#2(iHlHf@2
zgW}f^&6K55L(>)zvv))?$Now=v4vFbdRk&nXgR0F<#DM3IiYQLfXUey$x5a|kx5hB
z#<)u*=AU}*Rks}OTp&k;rPNT`;2871nCg<qS`I;<#egh3Jz!(Vey(Z16Ad{@Q=SpG
zd)sQlI0p0}n%quKlq0Z>KJptl1a0WwoUuKK84z>;;+s1Om?!k*q64Mz`ov)Kf@p#(
zriCPQ9GLj|=qJ#MWIO%<0Z7oi5rF-C9W{2@abpU|)u&Y=a*LX;1h>%OA&q2sctT5_
zC~b~{T0SuB%9~zYrj>x%y<-LJEYmVXf56a3B2%$wE}Idt`23~9CG6tVR45pVjUr%E
zd6?&tX|q7>1;;Lm_R88y7`HnMlrJ+@q5iebM=x+&9X$L+`H+YeiB=s54m!-xd4z6c
zw*fZ|ms8KXZ}lM9@h!@gQL@4WzUQEz)&to7JdTxv+xoIz=$*vHNIH?C^na-Ke_e!u
zee{|L6y+Ls#IVL*kbE#{a3^^AVtV{STDJo?HeaW_gn7Tkd<k2068?+RP)ogQr~v@D
zl+|>3mVHpzP)kOrStDV(p+E1r!<URHhA5488&NlOIuC`uL!^v47`|ifI5(1xI7R5y
zaNMCoYKAt7;aI7S9WJYA&*@%f-t6I~Im73>M$fviG&kyfwY&BBsAs#a)ANbJsj~-9
z6@z}G|DYDnp5~TnWdu$yfK@%#*RM&?2X7EhYaGDGJ_sb@U+8Lv7;y~c;q+3@;<Y4p
z%VV(v2~H7)jZBdhPcY<2L@DM37m=t<vfs$CfnfuZA<6`W;}meYD+^^xIB&=snPLxe
znZC5GU#h&ndo+zaVt%(tsM+S2+=U5u(T>;nec{jgZg9Y4{f=>1O+C!KHOTb@{6Ei{
zoTBX~&Yy}^^`~O}*D=%oKxq6^r~bQRCRy$Ok~0X}(YeHvT1CJsrGQ$)o3R|N<s1T!
zCH|1C9}^{FNesF8eop6+YuyzI=>gqu((Q1FwNWXHj&3D1REmjxmc+%`;@kR2MX8TU
zwZEqqx*X)%YDc~<^X1=M7n^@N?Hh|(mT?OY6ia?uyYVX)3D!W|mCi3BD^^#fMJ8$Z
zta-^#ebcnnkwd+qETz$~?2w@ML=7jpA^hz2ATmx(L@oSS4J@R6x&V9n?(p0M*S*(q
zKSbyVYH!>Vq`#o_PDO6V36qs2>_Qex#60T8+k5a!4S8)IOGXY2-lBB@3P^NJj!iTc
zlEK<S^mVpmKi^(QGhjJc9clZ$;juaSA{u{NmiT;n70PJiWOAUN;c>!dABgi1;|;tJ
zVo4VV-j)Ks%dX^&H10mWx;V;7{W=Ul)9fUKbO2y1cKFGCoJL>|pk)~w`t$$X9pjWC
zd&}}2ho16+z0-zveyOx3Z3@Yr4u?Lfnh^eK%}~W_5n9!-%X5r`?jfdKu7$U-qJS>f
zz_~eeGA$XTeeeT{_YD%M4cdiiOt&2Whp=-BvMkKDb=tOV+m*I$+qP}nwv9^Lwq03i
zTQ^Uih<ono8{Pf5W5<5kvDTVnjepE<fIHLNUmEBlOedDr@w^L{6hgKCF2vYiH2Lwd
zRMZmb2p!)>91|crLq7V&`yaJWQD@KU-TJO`*O+MybMp0gxp7?Otg)-voKFzgRi1IH
z3geNjMmTuQG4s;{%T#}Q^{_A0PTjFaVC6l+<njONi>}I}Us<Nza#A~OUXYVqt5+<T
zYmdWl@jv0(_xR*B=qhShN*b)woB-nT-)9sv>v}YzX3NhicatdmBx{Bm?g!beRs69C
z{r0TjETHHXX^V$prpoR?*;XWb1DRC@n(*U(TFfa!0t94BAH*vyK>U?~fek58P~;_o
z(ciyeuc*)KhXA-S18)ClHsU}@gP+iFS1y}q0y}^f0E{%b8u#^iHh53h6NrG-I=E&G
zX=9}8bB@knH$yLo3TT1Av{jk$mq`(*s)mE48>;84nS&nd32ZBY1*SaHZtx&pX&!OH
zR0aJig(EWN6Sg($gHFjYre0I!^6C@Wf3RXHoc-KiMf+Lw;Nzs{%d8wkw3L$qUdj|&
zTR3^mSrommLWV)+-PF`2#BSw>%39EPpJ{O%;zZ^Y$GfUPPVzA|^?~_C^#^=8Sha(T
zdl-Axu9~JTM;o9tq?YPIImP1-0`uXcWf9D6(zPZnjn1Iv{pS!p!cerHueMc5gybSp
z=(>TzLKU8<O2|d4_GbiAXft2*XfTXj(=$;&3pf7n=d>HRA_@)rEDkSL2Q~1$Es`c1
z!+bm%y9QjVv^hfR0OADyIwj{97NB~v`)t}NMEn)R>SW?ZO0(}iHfa)?CgRe(N;KSF
zPUKV*$TU?uM)1ytQKWrytZokC2~Lhw{@i%X-TavOy<2r4xVE7oO`P%7>F0ZJv%mF3
zs53~~YT~;t7n20Ju|;W0_pSJKhyAC@VX@tSXZBWy`(VO|dIUklETM9X9C%=2Vn;{K
zxwtc|c$pn@?dnZ1sgyKMc9~CsS@~^YyMyj`NU&cYOr%Ews9LmWQc}CS54^hld3px7
zw>f`=sV{&o(_AZ9U}W+C5DJ0{5yMe<JGJ9QqVR*%hc)$A6{%{CQKMZF+~%NrufkIJ
zD3Izj)L?UA&>K4J&wwgN*eU9&)2LSNSwfO2!C^1Z<(SwFYV~24o4)7-vx6`6(*_&P
zEZE;5#2&<ZW-63`DP{Nr6YVii=Aghj!F}p!YNgAquAV<~-F(x5NYd9*=UC;5)i+n+
z^fp~BEF^yalMD=sSdpp!*#Kbuc|8An`l=n1g`Uz6w_jR9N%=oLoqd%1V}HQ?-S5<*
zm!PUFG|HM4w4F$jO*%^`@`*J=kRCY(hg1#3n*j@T*Bl7>%9o^)rXM?99?Ua7HBKW}
z&_}Nje-`Z!jXY^qEz)ZaH8NrOV;_fC8Qq`;xl@bgIDynS^DXt1UMm^G5Mq+BDcgm{
zj6+s#D?=4E%><~%4p3Yd2&|hc+PNdd)qYN7b4sH7wJL<y5e|h{%d2U_20({_O%|-N
ze0AvYyow9p+0zoe)H<+v0SZ!F<|w@6$)Id06jp)j@6c;;lgr=oFvcDIShlzU>M$a1
z?5N<ML!C7}FGpo;Lf+MUD!!C@sV_A&W38HPaRj(ldBrT!r&8Cg8O>;@5q_g>^t-3Z
z6a^;<LuE_v7OpGZN~Q|`Vc`fIbJ)q98AW2tR`i;~b{&8P@Pn$x%{l%G@Y+R3<doYB
zz%Hsf?|}2y8k>hA))VhirtyH;zZ%@;@JB&Bknm;f0*?!nMAohZ2226_65JLnaI2Zg
z#MUhkT5KK27SL=6a?WG>i&dmQISFQC??@5Rcw!8<TXyRtJjqHcbyf?SokRKZ1hpF*
ztBPj9#C-|{WFE!ec_Ec3=(_EnhA1~S>2yIu6ho9gavF#z-M;hwHMkd<AEkrzvKDa=
z0TgAtEW557xl7nFa^K~GiRNsyz!Iv!0A)K1G%)O#GS$Ol5*_k;2m4i%17kP#s*hd<
zTodaPI3&nI=n@Ot-;Mg#jFv=s*_x4jMjh&Rs&btIXXeUeYynSk{z;HsEcosNuz!ke
z{(+Z#rfqP^E$YI6XzE%GdIb9KN~!Ubz8PoDWZ=;R0ejH5VF#|MQ}=GOhZVR*=HVuW
z%rZnABUSd$a>q<!8-vAKlp4&RAuh46ZNmo_*11i`@nr&JqZ<Z3b+aZW-(G2bLV-2v
z`%iKO=glB40SN#=ksAPj^WPe5|Bx%HB8n2C8hY{qiUKlvKa0zHrq%{#|C0&&7w<_e
zT3Sw<?Wn$^b$#vdE!>TUW^LS?ELE5qs%&RmiDHSJ<4Isdgb}bJm0fEJem=cU0D;BA
zlBZ<bVKFiQC%)hxlXOoZFD6APe$=C%@Ir*VUypz6qWs{>irn(h;yx|D2Z@%~4N)sy
zHWEgobjwu?(|YgMA1j(b+|$TAIhJkAg3O)XygLd)?r6prt1p}D+}2BB+cc~>EAFhD
zARe3GHe=OXoBPHBZKw}ztR|lA&^kF_x_qG5w3=}KvL$TMu{kt}18mW?LL{wdE(10S
zWUfdQXIhwTc~%9oMQqUp>YVrMx5-zK*S?l}uSnEG@uYw{khoC+PDqniI0dhl-5xox
zW&V^8qX_G!zialyxN%7?-YlaJ+;nZYvHz+DS6C?|Fnzo;m-z}obPeWt*2635=UV82
zIW(um+*;n<WKh*U)v|9jtnuUBuc}!CJWg)UruW5u)d%44b?+XdYDU+a367AWk6j4W
z(Hr%L6}>#V*XXR$NuayP1|0HAFFxV8kpqc9wl~K#BxD$#y#zdtlPW`U?NRA?spG@m
zr6Y6u#(?|7F)1%6*#u*;3;1figa6T*-ql$x?_e?x5bE@{S8Xra&{dX0oTl9)icc<1
z$vowT0G*%-#3SPkdfWDrHO{&#*x7$&qfGQYpdnV;?>7eiH%(sb(z;#w`CHUa(2p+5
zx9LsWoZM7rjwLupVyP_flXBSs?^}1ENhBZz@7q<;tCis8@Gq<*Ihzn@WL#jd{xj=K
z1py}_R3#1=_XVk2{p0wjJzIJ#-bvB8dibkonP%<XSdk-HiWVwpCy#PQ>bmG;XPX#@
zCzHt2O(V~|Vu{5C=-S0(8o?$6>8~8)Qm%zZK}b;f0X`SZ)A7cW2}F`xMiWVQP$oc$
zDI+<$XC~P|bK1b@2BQ%6$KQ^n(07=F=5yq>$DLtcb<A^huoo)X;_^6lgtyYrdS$vu
z7cec<uhj$EWoXfW+Nxd)N(oa-X4^KF9xJG_NU#zjv^>qZbXAdDAl_l}%%~o)b3>D4
zH*8GX7VwVXmsu|*wIEKy0#3SJ(D^MYNOmSTr;)Nv>g5z*jm2KAYrm-;orE>ik~J}6
zc7eyb`0!w|QtS!dqiY;7jV+3TE051oj&>`7T+g`3Pc8RV3`%tOvK}+Do6>#RpzB*-
z$;A5srwp-$SB#TS2&XGe%5gyk)s}@oa9F~*Xn;RO5^yKhF92~sv1a1x9<(Zv<(DS>
zDW9p1?!n(!gPfLlz$&}FCMPfN_6%!eFq+o@5ScJW$5li2ck0v0AsO{s%b4U^cEjs6
zH+3X%6S@>FcnLf$u9+L`A;HOi-neSsfnu-EQziy4BrC_#`~@Z1N5e~rVKMyoDq=1r
zGoD9J?U}5EX=9evSr9b%HiXUvBrTCreE9pxU^B)!JL9;W5&Tn|Ieb0c^-Et7yjKA~
zp?Yi>)#sm8eIQ$3TWj5ROfdHF4S4Tk3>B-)3cWi)EEt@R=-h*zDA~sZdMzKELBt|_
zTQ&oXnJ7%O3#i|~(xGT&zobuT274>KY1<qM<N8FTMKP>{qVFgS<HMc#8KcpikMsud
zf~@r><rK1$;hbW|TKd81XDV=Xkh%WC)Y4+mIb;*Nav@?k4_&|#QPAN3!S5|DLlE?r
z&ye^SfJX}E&(^w%EB`AV?5GZ3)<Txt<{S)SPz`{nosGcRYD}*wHoBF#z5<Ds;#8xm
zR53tZDx?P)&Wa`c!b6C7BZ^El5o9fRGSdvMf>g-F3ZcGsET#VYrTRH}%(*#qO&4HQ
z{WjOTfC`R{syNlH6o5mU@E74bIB$<LMneESARp<e&|+8t52{w=Z!MYF*b*YhcW@fa
zTI!`RD-_0c)1PJ%ZD<XQNCC$i3MDNg6R7X(i3G@_0g6Vol8_qk5CDF4a{Ja1GXU5=
zC^#Rcz8cjVx|z4YPsob4;)UY7u(mPLsQwS)EPjDn)*$>^&sbrQVFD=WUlvKZo}xN3
zk;q-YSPkpvn*tusH{s^p1&9Dzp+Q26Y}lKD>A=6l31t&Y`zUQf%Ik2uL?j-safte7
zV0KYZp6{nwCt|GL;QHn79M{JB_!pQWQt+>0@*G&9*NpKTdP1u!z+eY8>8=50dkNfL
z_rK~&7?g;-xXzncBTyzLIiv;twz1dwS=V_^w6+{Ly+OmoB)jwFN@y03OuS%yE-`Ba
z;P4Y}Um$(r40%9FQNSk4I&6vu&-YrWP0UXS09+><sS|p3PCl`%mEuG|Wm}Nixrmzv
z3OL@eU=ivFS|iM*(##1HpMh4jPL`L5(88QqA%l#ma=Sueoe?TsP`-SEpZ&$y^np~=
zSvT-b6s(o#m2QiGYY+m8?o}$6FM07_i6|r1)WRC7b+4juRoF)sp1m~--|ugho@!S>
z_ZG4zVLzs{mJR{stW{MR=h{u&t_d=WT)OSx<fz_jv?oC7N5we3b}cBOLnUz%9^}we
za=gnU#Lk;5#5(LUO?;5_&|c_gQ5~aD?lFR&ij;&4h7s6G_++_TrVLS?cg}9IC^lzm
z-p^L=zK#o99VCoh7PQT+Y`JQe9ugKoKo~SCLn`j~28U8I6ev;V=mSNTb-_7-WV;Sv
zPk56@!ZIc2#wE0FQOTPru!gmu$z>3JhzP<kcW6WmkXwfeO-MF@vF_XCuoAVd-E`_b
za3ARfSwD2jmz^oC9ov;fn#K}!3lHYcMI27XDP-NeR(*Y0#q`)8nhC2}9uyjgCW8xQ
z*u)a8($8ta=SC+z2~`O2@oux_*Wv5W9~&U+3!Iytui|~JaBFE<1BF`jmT*vlIk;qt
z9eGH>UM}@FSkh;B-<sG+UMy~Ews%cWxvm&u2k($$dTph+;@oJkpj7Y_6?r#Ft0|`<
zpM6Ax-IGYOC`Af3WBZ7@8cq>UrWH|Pol-8gDjD6EP8mYIlLtcTXx)QfuR;QaFL3sU
zKuQcf>54m|L4cr1Q!e!s*<nxc&L|%`=1fQ2UNF}p<S)i+yDen8aQMuN(&T8DWND#k
zAt2!dO47GbF^(l**0q>*G96h>{#$wt#@Fj>L*{Z+gn}wPa46SJ6qLSeYy?F);%&nz
zywsX4O9WRnPNa~-q%cW(dDt+bO=QWq8V(}RreoP(t6*F-8kx`USl_hF{;jS=1Y-@!
z*^fgZ_fvO_Y8?DTD9byj&*Xzk-t%WfVD6L*@^egN?(glZSZl>*UgWM{rMSfd1yp8F
zUU=U(=IhPYLv?gI>&1lzIhAisgro{Ab@J!BK1<@r><$Fq3`8Y-Yk7vq#Phl0t)ct6
zOXYZi`3abaQ3E!12r9aP*j`AK(pjhb{hz?Dafsj}Q^j1@K0m7VJqBy?p2htS3$E1f
z3qBrLGxA+?ZQUFXivU>K6KbXYR$AMYl{cFHsm7TuUjMHdI0so?esi+?L=8DULi3Vc
zE`rw)PT*#Ro7BhDKjx|n$(IMAExkZkwq0Lgr;dy++_^7bvqpb_ln3RXAJ*bIIDVPm
z8OegP(Pj{OQTq%RG+Ez`s4}!Th#*&|QU=%4dhLsira}IpD>4|F8CJ}60G1vPS>TAP
zwSLnbW}$_O6hk7CZPx{D!Ond|L#KxpY{HP9ckjiA^F8m_C*e&=l3>T-z%uD`Qfo<o
zn^34o0s%LK*Dh5ip;Fh^|3d|%D)K`rP{<JT<z|iIjlq*s6jqeM3f&Ro7we5BUnJCz
z`xDR5hnAB5kPij*7QT!*Krr6UznJ1?3pQzDj#n^pmnG-mSS14|a7emlX1>u&1gBV8
z000}2W!aK40Rb{zC1nEoEK|$~*Tcmfgy2%Zzl(oQ^L%xA{dwxn^3`$@dJjXllY&k-
z&wFUeLI*9XM}PmAX*NXWT{^rZm%<!LBF^V_%*_G>2``nzk<2)?AR7oLPSq3|qTG5c
z;LP(_7Tl@4W9H?gwu=4DlO-n><S{EgLInrPU<sBI4_QJsHB4ca2D#u$V(FP*-k_4_
zG8hAVtdy%=a6I_q|Kv*F#Se<+prs!kJr5r`-`y@6GGxz~l{ggYeKgwD(8dz{lEo7Z
zk_+Qi`{irTIhSy3<IfN2<L(CVi<@u|d~$^;T)IGo#JPukpGt{^3h)V&%7{lyJ$4Pl
z*Bb=CsN=Y7l~aDl{KMBd?D*?NX*ShaW)lA`?w8V5!`tP<6f7hSCJZhnvHAfrjRp!j
zQ}K@D@IqIJpn&7-$fV_o;3xYm!aAM+vg8-O?zeZ4<;AUf^<(2)`NT<isQca(l1%b(
z0>o~peU$vM3r~jA0z)9xR%f~-OZg(%r3xOD$(fota*bZ9(!;Y0;6N+PG@i*7oSU)`
zks3(G-g;DFLL28WZTfI-K?u{Kt&zksWJpd=d>W{hdnCjmD=g{wwKfQ4Ez!Eu)A38n
zM<b9`$z?tgjjcGQfHBw@89x%}N03i{{T4Kzx&wP=1|nxf2gI(92g%v~=&QXqU)PB+
zlb5G=w)9EJP=&}AGeFfina;22(5UzQ!7e_h$UB#GN+Glm=S<XqZ0gYDto}6nHb_=6
zHYy{g%jR_eW^0uBcM5RFudHb_W|CUoiE{%|X%tn(<}=1UxHkaY+Q`j3EKu7ST?sQX
z_H;t^;|0X|4JDR-X!D)?#lN$dj|$cosHne(>Zd9qnW>&oNa0niW`iEdlISCYVj0#N
z-#|s0{S>@{X(R^mD+<ix%DhNuMlC{Q6mnrNbn=MtM$*Mhp4NZZNSW3qH65yvmj00i
zj2F3DB<014af@V=>2i6dPU<V2^Ui;)D~-T7KgdFLIZ;6HRittXvshL|p*Q;2u~|Yu
zNK)1~^STXZ%kzohp%+-{;z|@Lps2@Myes)5SRQcZ%$edMtJ2R3YX3S7o0p~DwR&xK
zSExV&N>xm;mZmv_X5IfTRsNMrAT(p}`*YsiG^r)4s`PO~CWI%n#GfYeym5hpJD;yO
z_V~P{cPeP^#0$cK#tmv!8x<V#mljv0VFw(osI#g)4{ww(A(d)^;9~c-!<5VeUGcnY
zQ+~!Z14WoVODJ>E*#;ZCYqcfLoKlTUWCc`Zd-b18NsP><gUl_2`SLy4Tkq3g8Wjlo
z=DX^(pf!rzHOw~a#ov&s_w!-<kTspoLI%K?WZ^!5l5tS1Nx)m5?w>8-Ve?A3h4r%n
z>ft;O0$W_Z#tRK@Ic#qZ`mXE%CPJ<cwPU}`4-0`Hav=e`gQ)P&oV0uEYige8XLtfD
zMKZ*Q7a<XTFA15dBL{nVCOMvmnb)ai_(UQUpqxDHLOdHVz1X<xh2abjD>dK!oJ)m{
zK@hZq+=8UQR`+(aSPMJzd9V6;rmr$~Tm|VBVB{`v$nn^Wd<Sc+If8L8XO=16(u7(2
zl)5&V3O@i1iJ<ApPZT~V3DY!L;#W0n(%HoRF+%|?Ln|d-pa%^AiF$BWsJG3{g@A6>
zkgD(BHNXR}BvN36T@JIKkTM)%4yN(~x2;0p5?L*D2z{F1X$LNkF3+`}oLTLS`CB%)
zZr@WsyA5YEj8RTF2&tAR*Iz$=O}1EBP{f71VGyJ#c%FiuMM(kSLoW2U>@KwF(oThj
zh$%z94mENTDPIK!*1N)yAxWdo8BPryYV+M;*ESDy%|cP)bsO2^*he9ES<?KRfp9x+
zeiBVxUQPCe7Pk99BWz>ErB%iRtU{&(gxYy(mJ{o~3F8<KNBtLrL3b6?^*NDy#&5wn
zm&gtt=C{LPDxcDPYWNO=29L2rJXUoxMBQw8d}Oigzm~?y2Ssg;bPA~KE&zW==@l@9
zUZZD7@e(l`xi<8Z9jk{il*>${^ddc98ou{$4Jd{fsLVJ)xwC_94((s?N_izGUrQm@
zAwPr@T2&oxmeLe=b#4iY-$-7rYSMg8yAcIjd8fa*S6;whrG#qz7xfnIPm<_^FPTq9
zDp2ric~m-dZmy)}mJ_agJb>MQ7yfqk<B|VhUA3ophi{57uYlz)d^PMkzA9aGHrS8v
z#!qPRe%m;>6hUR*X6VzD=m)4a!)Kv$i<-B7V#!7uj4{kSwklSuqi8-%;V4(2c*a-7
zPQB<qx?OaBIDhXz2y$<eYp-zkak_6iUuAFOyTug+ykLxYm5}BWJ1Tx(<0U#xhAVcg
ze667NI278;z=mIvXLCYB5Nsl$KRpcDb{D9_=N;zUJyB@!mnWR6kKLI+rGLN(Kk<9m
z;NA;p^-9+_P=`RVIv^be^~LEaLg#Dc04)xi*XPKEg<mk57O3!?$^Rphdbz+}r`z4t
z<$Rg<?Q&@RIg#yQ^7_}dk@i<8a<97w*%$QxKC)}fG;1yXi3V(8{->6ie|TWVF82S)
z6LwM8aw_6N@;y;2pXnh{%9t8gzI0)#AX2}TcYp!rK;=`wI8yJ#=z>Ue_xo(6<A>&^
zr#nBd)2iu#eDNrU9)0aF(r^$;y+U@$#(YGx6;@)`-6@8zDoK0kXX<hMD6<#H`^&_c
zP~MU^NB(l|!4kWO8Ph!mU&6D^7M+8te4%spCNd|i@i^g0CI|*qrP*^_ee23P%jiVJ
zp@3l4URbuic|fZ+UPo}3<Z?!jAGpL}7j9;P+#>e-$&4HdOJ&K+eoX3DxE@l+7t?7?
z-a+KmJjE@(_pFRL295V@S@!^EgsMlRQeCYkM~j}#c`mQOtRg&Y-3E&tUo(Xv=V2I|
z;rC^_c|t)1|7IlG=~P@23(Q<YX?fwyN4Td1Ld|~lm!oaD(vtk4{eCU-TOv#|;^~hL
zrh@h;*7%$3Ij|7C_RCnN72RSUw-)Ct#1>=&GUg3fBYpw!=oaVlHkjicP;zBV3VMO0
zoHAnr1xobYAD}2WUSKrt5H)5YU9_hYgVn};sqMC3@?tiP>1pCae@IXa8?9QVi^Q3;
zh*{(2l*;vFkW&s+(m*zi1ql4;^?h!A4N|7lgs{xBRkQ2291+*?V|k$<R%D@ppn8yL
z<i=8%_3Y$fvZZ{MrQC1iHL|=CL!u+uk<a4HS%~Do$g$Hg&H&a7vWAmT<ucaNUNz^_
z$A))dbLx@(qH`Hk7I(pi*&A;mXe9jB0{CAh>eLQ<!v>Y5ro#Jqf28{o%1cX5DPY#3
zIUJHyqHPFK6pDuDq9HIK0hKX6V=%!mDeDziAr2l8$cFcSMgLwaeax51?ug(%rkpBW
z&&3`p<(H6$_JqSTP|RuP9w5dfn_w=sKy*)!k{1qn1x$!3AI9OA)}BFk&NL0Sw7iQF
zHOGs#B89s?bz@D4ao2u6h*(16oxvm9ATFeg)Ahc`wY1wIhbB(H1M%^9WEEj#b;YOn
zyE%n7Bpk&6@dcNpFM9|Q0S=LnA5!FE-sCw|I&P6LcMR#$NBhQn#9fSB3y3(cEpp{(
zs;87EkwC@6@L~`Nbq^wHtfAp-iU`X>DpE$q$Xk%dS3xU4WeIZHn;wVpmr@$&TYPZL
zPnG>-sHS3Q4Wo7q0SGOcJon%S!HB!Mb^}2$aGlc0K?qAgl-pr815rPagdKXQv<I>@
zMB%QHC5G3L<Cz&g>J~kFEWV8~f(52nOyN2h+G|4VWh|CM0_l>Kc!D7ToEBPP`SIng
z)ZCU9dK2$FAe>J$qMJzfQ6O=M-VPOpxn0MiL|4y0I8G#sPk~pAF`um7Q(H}hE?Wf`
z2v`&puX{q7TXyq=J`NtC3u_ca2IghrvHd7{Xkv~=3|aa-h6U!`d*<;6N_GA66a%}N
zVU2na)Yb~FFQ1J-(hM|7l+OkO3<zcaxX$m3*#-TcfC&VIKoE$Y>A7l%r%{%nn!~@S
zvC`D-G0+1z)O@c+B*BU#bd}y&5xdEvD9({}KW?d^O*F)UPqt4%V|&D2PS~nAhQBy=
zF5*krsgk+Tq(BCqPoK@EnKSjQen|Oo%xIp~u)^G2Ij9o=`N$E4w^Ow_PY1`QWnPVl
zuQ}fH-Y&JR*veyEYbN;cV`~L={QMJdXLp>sN`3Htzeu)A7tG*dG*;+qpsMQvO4Rlo
zxGI>U*QD^bMV*@)0nhjPN#QTNwGtuT_ZKI^4XRDxLBd3hdRj!A#Q?uSu>$4%VR(YZ
zxKvhD4s8QSi4}W+yQi?CuLOEaSi*MqDh~&XL4-Ky?x|v7rske#g490PO3*<QPls#p
zBdP5cwGn;S67{ac-LTqvt%9_!czSSoASEB3d32i5Tk3@?49fH|Y+rK^odj6w^JnUV
zUCDE|VCV%%RgMe-OwMGD8CMsL`p~g#ljVdZEfXUD=%L#{6pgHL@knZ--`-;Uv%M*-
z_HLIPkVKW59L6zw%hZ&wrQ?~z7VCIV=9tzi4E*1N`f3(;R)A?(z}K;~ljnh)_QoqX
zSYW-Ya6U%)(N$6%@0u%F)g*QrgH1BywQndo0izmLvfTmGM}Qm`mk)IJs`0dDCWN(+
z9S~GRu|P+GUDq58ch!|=Xi)p|?3eoZ%9);WLvY^oI6fqFz=YG-dIZ@xcfc6{->o_+
zRq0k$_UW}1%Gp*fJPRu%P9Px3Cxdik(eE^NXS0!CidVoIdmgH(Vk!J<sbfI#8HamS
zz^y7(0?jEwLCm0&lQ8-(^wrb6mj#nOlHxkY(pSld3U06;X<j}(%cXP#{PhvcER&>w
zY3JIj{37{y8%BA`N|y4c+DK5#jjIzvgL8x+<2^xSYYYIAsS>knVnjiNQ8w1ilU7Yl
z7o$?<Il%0jzV`EywXK_r&5Cx)t1^1_DulnTmB>*Deow2>qR(*KxglWkVqkN>C6<4u
zcE4|4zztLoIOunL+-M=JzdyIleay+Q1Z4&QGv3V@7;(@v52pG7$XtQ){6f0o$KO!>
z%fG!l;bG6dwv<)*dF<iziux#o51vSsrJYkYAqmd(Ayk?{qZS3KAYn88vSzA7dDuO<
z<G#&5`=X^WvT&AeLsuN}hkCC6T<}o@l$akvg^5AR^Ca@ETX7g(eK=UUMLM?{g?X3=
zN-jhSsBJ28#PwC#H2Ez1EVAAUDg<+;OcwachFRAYmOCxChuMw<-V{VwNqqU6(HvT8
zx%~umpX=_V7iskNY_MU!t~1s9`~Hs|NL*iiMGCU*>eU&TXbiMRG>KY#xIp=iIv^W5
zPuM1$;hajN&uuepOSrc94ZP6DArex3Ew{NA1pX9d_;280a%FZwo0AKIYiN&SJjvYg
zToqK}7!2$YAQ-N2<*bU-&?k<8tz}vo+I}r?9xMezhQ&M3X1M5O*<)>8q?)Go?UqY{
zkMqs8=jUfDCl9^V>2vm)`|0dM&($j_4~37Z&Xw2yr}^i<xBvhzb&&x-c*;$9005?c
zdk*-IUV9~FMG0B4|EA>WnYjO7J@hZ205xjY{{;p3yy_h&TtKCg^i}?~eY_wJNlM8D
z#7SU7EFx%nJJ34mY2_uAQ2D-j9n;-OV_fw#C=!XZettWZ#cnrZr`V!@F)bN642iG1
z^Muiv4I^ioblT3>l~KYac_Hm<b^m)=BYnmCCT*FumMP0L)#@V#$zo!X41REayO_@)
znlCDmU<NHQuS%J0WJqj)ggj>%^l40gdwaU-E4<f#o(*2v@QL?;K6=?Emy}GC%(34n
zg~kITs>I^+(I_gs)MFd};RPD%{F~uT3E!b{=+MS)0r&a3^m9JG;Zzc9e2@mxIyeb5
zoM>O|1eF*aN3^leRMQpCjcAY=n6JiAvlQ!TuQ1%mR&9Y((2RIUzpa8L=dFuf>vb9I
z&+RAZ)IMLePIFFy{Ao+Q^SYpB#VVoz^DfhdQia>s*;c>v{43!FEfWImo&idD`lMZe
zw80Wu8nc^KIuTVLMEluR2<r25MU^+)1(Q%eR8RPTyd@CvGcLe#*v`JsjcREF1WBLt
zR&4rcA~<z{h`&3m9aV5;0I1_4ZrkhL?_stCo!gU~lN=qBn9^>E?%8nd8+AI7dRpWe
z_9_Z>hbBc07!Fc&J=8r70`J^0Sab_4U`lX$0YokD4s8Wd7T!`lJm~IZp79l@_Obyc
z?1EH1reJ(K>gW!<Eosxk^Q+U-b2VXH)5fuojXzLj$i95tUqSC6QEMN2B;PULoo#TE
zv$o`F=(wZiDE(Y90?4+-q-oNrrIK1hDqLZkP`?qF9E{Dq=!{wd5}pOcsF+ngfcN11
ziy?)n(8V>}|Ke~e3?18&*<R7q|2nuMLIJuZ7wufU&1Z=OYSSF9KG>j7C$N`<?o5j1
zw@)(Iy;PCTF#sm#F$5K<ok14iN$dGjGzY421U+Lx3tXHX;G`%7D^E&SGLk@O4>VT<
zolO)zo9O*U#R{jCG3Uy+B?i|vKiZ*{J4)Vr@1YDCB1=*te=~CUDfYnv<zU!Dam+3-
zv!5lcW<bC;x1RDbA_ePI?dC2j>!zEtkTSA8gcXO+`-ktC)Z=*4yki4cBLP&&iYHAE
z3TGH*S{ZVyD*wD*Xd)oKfMt)0q_3pXqWB@$2C%u4YdYVWjD(l58tuh{o^q=Lf;USY
z!+h-Uew#BgW7+<1o>#b3$`;<uwB-JZ_MwDsw`1X77Eg!98?J77OwMOgrPeb;S*D2!
zUDF%C$yF#_D|P#Mj_ysTR6u{6o`j?!$v*#SpDp*|t_$*Q+a&?jyX2;zY7Q{GAvuq9
z7qP+T?ptU4K;U+t+UoN#IxiZvZ-#{tF0P+HlTId9)f^K{MqjGu5?v;M4TQN)Y&5lT
zYa;2KrWNsK2e^Z+@N3$h<!ZVV-i?*B#`z-9(L{il#Q>ASWu(Hs?Ph{p7bB_0XHUOg
zviO;}rZk-5`aY($IdtN;<<i`UN2_*X0n1_q6NCl{H2H6F*ucVA5Nn~lMQ`c;OnCP)
z;GO%oc=Bsed|y(1D`T8Lykxaj#;MaL;zPxfUsMOucVrb{V<I)7?6tPn-n}->8@Y=&
z<W3=J3M?~-)Tw3d73);*C{yIMA`y*&cX$1ntKC#L9>|t7jjWO#32L)tQ|hYGawsuw
z3})`OZfZ}mgn0?h$5F-7pi-1%h}G#pnXPEUZO?6PO_Tll_`(U+Qor4=?cLSQ<q8wY
zIq&WXjA;fzh+yzt%DO3^30gm_6-ZI4$d$8{8)pXJ_jd<>jG!cCJDpR4oQ|v%iR&Qf
zBZBB0f264%W>gE}Xz%r(wpBa0l0}dER(4;>-;UA(F;ybEB44VibNQ!vG(B2$ItoKf
z8ih9Rn-P+HICURZqsfcyS#BKDCJ8%Pf?FU^4h6XJVS!C&(YG6~p?-e9Wr-!Xxu#Kf
z;V+b19&V&rU0AvO9iD5?A7763nGCJ%ziuCI^O!wVu1e3;YNFU&pU&W{j&HC2UKwol
zda#>RS1r`I>byU^ygVGAGL}M9%_8DOB#ry;T0BBBP0}+*_r@#vLh_6{_uVjJg?*i^
z@rDEOP*n^Tp1uYY)+4;r?l@0Ve%A-|=kb+C*A1^o&;$o|1i}%EOWtxw@W>Gbh|0rR
z^Ry*s5$MP}Q4<~5`P=v5=Q%X8{B`phl!!aA0$Y^Z%Y;2cphvSLr|=4Y+w(TDv7CvG
zWy_Kw_ak;o*2Q~e7W2T#NzoZ)vF?S;kN#%}PRMOtwEPc``RJ!wmg3(IJ3-lhq+ARw
z{)YwoFGgIBik9651B&l+9mhs7B-KPo(o;PklF53gZ~@U}aZj~lBJeHR#h9yPLh0ud
zF1N*i@F*Sq-X!Plb50iXgv!7gg-9-pK4S+IMyK``cJp&WJ#M~BHsR`{EJm9%m~ZFt
zpDb<$-?R+nYMZd-$pF5UV}~Z3KF)aLavat+K?z{Vf#ZwAgQtll%Yn|}JFe`I=zb}}
z!)kGa&?BOlanFQ{QlsC93xdS$Du#WS*Du)XzG_)Z4m@VcTCBG%h6^V9$qu-m5@SrL
zEfH6Jb_sqim^g1sD`9hQ5N{ymU%=)mPtO7zI@7gwrjx@4^vxUm)Q9J;oXJLlC4RhM
zRr&xmr}2LHEnxi&O-A3un}@FGwu;7$Yog@>7=5GJlOV_lR`D1`jM~?oxg`}dkhwi4
z9;|N;(kuxuEvi_`IOrQ3VAmqmWGWkp09lS2g1-|}n!%54gG7wFPY~OL1hjs$h>*kU
zjHM^((cbz4P4ulN{aK0g<;JkhzL-w3UVxoF`;$>>c@dG3v!M5gc0Bc|#>Awp75)@M
zTOmm>%VCl&kHC^i)P#cDiF4K<Rf%`o6h*%vp-B-HTP4}wny(szP@H&z#LiL+zxL~5
zp4|2cx-IcVOVwPReul&0P5!~Dz`Q}?n>clcZ=^6UriAQ!Qa^kJ{9eGq?yx~$hW22$
zUDo2vpXVd>ItRmUybS_g8ye4KtwziNb!)2@?Z$(t7k1##ci9|T#_pugB__y0My=H{
z%v5APVF&UMfLufM3Y#;9+oMjRj?$1lZl}&tg0EY}ZG=i-(9n`!v6^Tyq?oaEX)3JW
z(xtb6eE_>vw{0}$ivdEP2|g`)IxNB24c9TB!JO%;=-2dgKc*Z~TUAck<ay`v#bFut
zNGa8B+Hm{d=l2uz&wlJW8wva%hU~!>RXxU521=Ug$bwb>0Ub_oU}~0fd<H@lC&b0k
zAZPRkh!j#!!LbQy^NvCElznLSe7DM*l*9=^gZTAirY<y0lRu0jTW$Q+tsZ3U(TJ`C
zrFb0!<p|n;CYk}s@4aWukEeJRyxCyU3;>oh6hg?#g)yo`l-n%<m;JRQjVx_!cb+^u
zw`;Y0pgSe)JWJ&2B8##%Z2mwaqNjd>{BMhHYZT>$>nFN-@pISG{o6a%_$Rt4YvSx=
zWMFUdzgji^MK;Ywsoxfh@gMQcQ&0pAh!jtAWD?0AMl0x$<2dEr2JrdFTIyxU)vjBY
zHB!n$^UjYPecp-2&rXT{r95_wTW#9wII<+nTf+d>kIQQlwH`kn@kTyiE0Ez|_yq9)
zT}#)3)E5JCvK%26Y-SA*Q?Hl-d|^dg*htppN`<F(F4I7P5d=R0p(7RSbv_rIFUEUQ
zow<<0gjl=&pg0JKFK83Ug^^4^b!EU{Z@Y%}09JVM{Psy-eaz->^@JV_LKv?2K_A~L
ztX0H0bcXdPGSJqQZik+=ZP;ySt!B{2o<opOY;-PuF36=@{rhDwk#C}pYPWyqjW`ao
zj}?O4E2j+OF)lUssTe|Ht>{o8MY3wGz9|wldyZYd<tKo3EA4_AP%$SUGz`3rg9xN(
z`Zo8s9AjoI4>r_4fV8rpku@NB=*hSu1*8SsOh~?D<f3~*n4!FA;RqWs8g*dx-I$$n
zTRZq`$n;G$p_`UJchFj+8dIyM?yt{<oF4PZ`ShXd?dNE0Lx)R@S{T)UF%RCZ?1)=l
zqD6h_Fl8jEb=PMM(Li-<$|GS=#!9^mC}6AbcAh*^NC{H2d2uZpl8@9osDNH=ep(>A
z&Vfu`=)JiW#~oO7Netwe;d$Kx#EV#dltrcmlcobP!bSs0JY10wLNi!vbao<VNoVLh
zWl4+p<S>sODyMUUzLlK3V#r?=4RY{)&%FemDnsY}dvj;ryr!#d;}v|-v`mFE;;I7$
zxuo;L*o%KEet}|%EF}54Ixm01#sB^a{aGyg?>%Kl6C)D~`~NsuY?Ni3HrWum@6|4f
z(Z`GAWw|a%YKkyLO|fN+C4?3-{uT%HmxPA`sRJZe`|aw4r)qPv1HC_;cZ2&{%3zA*
zS)v?stCP4{pvYX`#VBcYH&7_F;Ozu9Q}6@=L;{Z12lIN$&a6fqQ{^2ifb>$(X4ML}
zGtyd~WHxMdwCBo)N6E!Jm48aBfz|4|V&90&&|X09EkX2ryM8A0wrUnW5{viNuvOKa
zV%2WoyW<Gxk}TF`9qR#u!R<#X*n;F-nW=0DEr-`&e|h9SvrU(+TdPc^My+zghknk$
z1^?0UF>86J1l;SoBpGH5on@Dm;qMq*6%YHaW9lFfKmrxCC~51PLr10k+AO$t7<!cD
zc3K8F4ysHx{?!GUVK3i<r@%*c2*k2dXca?OA+@C0a)Kf_#6Q<3-v<R-`Z!@e?@uAM
z?8o(>UwLwg^L(BXlME*VgnLp0meSxKXSm8{jOJs!Gk;aDyycn6@psW!W)l7|91W(i
z3#<4VFYtCaZ<2`A50$l`N>&Pt+r3Zof^i9LXjGPUU_b!JV~bozLe4u`e9O^`4%%xT
zVSHYqWHTA(fwVg(+H;+E7EPj+7ax7Hn4<B%LA)0|X)jv$h)61_Q-UNM#AXahXA|pO
zLQyQ3ko}jSg`hRLZ~Wc^&CL{8Z`f%4%{YXDU9ee|nT10h?Vc7>uNjo@!76ziQ3fEb
zf&g^o-EvT8xriq1)rph5ittiVi?c!T#TXl@M{)kRY+B*~e6XMX<brGpE4O%)b(2Uh
zWPE?!;AFW+rXbVokM!;Jh{%lon<%zXq_TX=^VK9CA2oC0xp-`uGyV0YIJZ&yOS7fs
zS66S(*Ui)CW9RN*w$$77(JPMX%16+G(8BA6I=avTOT0s15Df0duNqM&%JGl1haidw
zs_$w+C#ZgZ`rU^<cA*0!8?GOlj^zSp0oe?l%F*+hMo|f?u?LBUvv*v+qi$YJpH5CV
zQ801E!&9Q*XIjXhd%PLLm~ly!NQx9zgvDOYR6@!rFYmNn#ofNxa}0gzv9Y;w^BzaP
z|2o*X&V;lg=EnbLV0za1d(Y^PnNfoApMw7X1x)|{U{(J@;kBr5D;=^S_^s+S2<ah_
z!ItEl3QaNsYg1(Wfe_jYAQx>&QU5jSNQz1K?c+we-hj)Evq(HRs=gDq`{mlAd8|}x
zIKoRBI9g`!b!#%PcI^Dsh4#dWTsO-UHT<J?Hz2a+HXtg?QqT&Y#3k!AH{LQUR@8-L
ziw0BGts;u=1~OBVwJbLVc3YKyJ`z<e{^MgL!muuYR}={*v{B2(%7cte%W+oOX`-0k
zCZ5bYZr`kZ9TYXQK_8Vm8dFTc*f>snWTZ?=?eOB|hb^NH0~p^pjbxO1U&e%pskCQf
zvSoJmA$5kvn$+o@$hi9pxszRwG@k9By#4mvW59}an^=XPcW<=9U@MN97twgE3ifk-
z`L^I0b`nuhu+ewWMtU9)&7i~5PDBj~*vr+W+ziB^+&Hm=X1I<sK$#K`gnMjr?nkeF
zPk`dZ%K~tc%jj#;R%Da10CxFA*|;dY^k&v?__UliyL^%yUpl3fnoSA|W<0@&-^67c
zcU}cq^Rm?4>cDV{Tu0?$YP-c7JB?6I?0vE&(-a&xb=1(ma)oBk%c>S#@>EZ`yX-iw
zr<A+>T=oCjKz7OnSuG9VbtulxH^wyw;k|pwbI-akPY3&f|EZNj<}#$0i=0gwUjBTz
zGT{2bu@NHLd$b1mT)pv#1LMTs5jBRO$zvc6N?O!Y(6M_^u@N<G8A=3b0^%VGLlLVm
zhgO7WSD{Bp5K|8%!hBUn(h#8@UedNPjNV%`q(7#cmJ3zUYyaT6-7Z9UPNXs<smB)u
zA;=lI2hC>*PptN>ZBPPB_Z~+yu$o4em@oqAO$Sc;*fGivTno~LQQa@-K&y|V#{8Rz
zlD^T5cOzTo%B3ChfM*TmGKZo!g0<#|RtNMsz(~GybLS&GcunI(owEmoxDFjChqBRl
zQ}ul>oQ~IxM+(_%4<q~e+quJZpkR;dHB&G*Zj}HUOWA;i*kz5eRpFp>gTl%>$M261
zA0Ll)#FVvqGIzH3?l5XiEGchJw~`-7K12vuYu$B`F-d(x1UWT1Z;7kL&u`!@+3L!g
zz?(TqltW^NA`;fs%rcf~xw%cr=WVPR{knPw{1!KR$B70|{6#P<GPFw86S3vu0|GGW
zM)j2+RQBlfhOe3@goELEB86=Q*38wxMi12$G57JdRo&O-XPnuy9gC)Yyj5xv`=Fe@
zF3wA<HC@Xsx0P9g=fEp$y)0KqV~SyAB6&6sio-+OqOoDr4ChC0sB8jJHQIW!MnZWn
z-|v^_P|3Sl3dAR2bsoV*6P3TTi3u~$X^V-pirUh(WFKWLl?&VH9gDHulz-z63Iz^p
zYIvnsM83x;$UU@3Ev&H%TLheVP!aF?iAQQ99RMW5Kpm+Zx(-e-!)XHBt0;qs#1rOn
zE{$BbXOg!1DV-WpRQJjtKt3TiFIe99qj(hSz;qOT`Gy7-pb6MoUl9C!T@<+Y<iG|D
z(w2}>wb9t*>x}48&X*q=NZ9HpaQXB5XQtq3L8K|#D%r!zbbx+nE<<=VL>TEJNY1og
z*jbJ1e$I;mR8I>NpXRrhH>kQW)fE9NhNZ&g7(LwP(8o4t_}K|@4568=W3M21@u&if
zPUzb8d5KebW<UCb$2VgaA|K&vl17!hYSVI=;$Bc^1&tm~aWY~8*`+kHX*H&z08&TN
zw}z}$IX4ix6S@qJU4n4!`Q}oo%knwRV2Pc){M?zG5Hb|!{J9Li=T8sKTinoHh4gQ%
zTm~}l80<P0gjG1p#;Mc+z+v=kxJRly(gh?jZmHvt3SyZ~HM<kavER}rF)X+6(uw${
zBlhz%QJumR8)$$S>#W-_uhF0#xRu*K={$)5c??HV;&8<+2o5ZdM^!orByyL8T1oDV
zM&l@i#h8$FE>JJ6G6(dF4FTE!)xb4fwLnibsEKQHx$2c%tlEZC{B~MgYn2P!2;1Rz
z;F+b?;qB+VBuMQkG^ddd6Z>X%^SHB^-`@Ge&7OVTp1PP_8FcoJes`<2+sn)FpHk9t
zMCQng_+9ufu<|=2x(pmpC(hnnUnXI<mcGx<e4pok0vf1O>{@>6t9?I@AKXTzD!j{<
z`O-z&DXa@wb{y&Bzq}Gz?c-J@K8XyQIg=8`%B7*Ye!bn%(iVTA!fdrrLf{d8-V{Tv
z-PBN9RX51bILjgJZnc01g`?=gl$--!74BJ%Z9<?CZ3$RfbXe6OiVg@Oa!ECvE+4rv
zQbI58ZV;rh^wL6q=LCS+GAcy0bi5uO9X&p};Ph1CQFrq~vUeklax`Qm)Ai*Q4mAGr
zPMq%GXIkBlY_0goKm2>yDkm=@tE42YCoQh$<ZR&lAD4b|RAlUa#^sM}g=qyJg|185
z2Kx0APuo$pfhlh_@PIx-iKf^v6iNV+Sa<RB2}}O*MjAf>9K*x1+3j|CVtH3f^)H+#
z>t7(6#_b@D?nRg;8y_fr+#T_{u?6T0We9hm*x}g22BDM7v@?_bLM!sTp=q`Q;1l?y
z8^a?IEqIJ?C%8RvWYITTj9_?^v#QAu?yW2da+lSrMAYJ>xjDD9Hu^gms?lC}#dRPN
zznEl_-R!XVzATyyK%abPFI$~pci7p(0A-u_WXybnPJbu4lYMNSg1`F7HohM_H)PJ3
zMb}6I>e(92;7(7lZLzERqi(GYJeGo|Bf}_<c<`%1U*V>+3eAK#DcbcRE2iTPO&IyB
zP~y(%i7R;V%NquH%W1@`kMGa3cn-R%zOm)hQe|j0d#Ph%-&XURIa7c%R;H8($ELZF
zddiRRL<KtLf(p$gLi4vU2CJ#+C)@!;oP~$V7nSg0g`j0?yyGfnwXlM^@bq|#s0nc;
zbFoP1JR37`F*)7QBbw*9{t8^UP!I8hA6k+WXjH(g5O_n(r#tZ3R_1ho=Bu%fxdRL@
zQiSV*WKS<CR8(qRA|J>`x?F!BYYmgj2S*YB4Co3L*ts#=2dAyq?+(xreBSMgz=5b`
zNj0{pq>8RuB;4W&ACRqPc=YiFHmS$JImRIHfI}TJe~1bHPI6P{7_F%nE?!j)z>`o=
z;4G(fTv_UX2Ia0mpn2uGAU%L^v|KfBF%uYII~(&&Y(5h8Do)H9Q>JE4gLOGxGvOqk
zyHgA{a=e$N0@aK!7zehJ*vOBKe$#1~F%jmE=t-@6egMjbrid;@8Qdt7VXiKAs^j3J
zOW4QOOL$_4y~=x<iw8Xy)6*AO;tK6pR|GzgqqE#af-!JZk&(2E4z~laAfNy98yi1u
zg-OFlXJ+qN;*E9uV8an;CFYNAD5wI)+{mI+;bn<IR3+jSDW?=tdhvR8!vmZAyRSQY
z-~*el<v`rw@cZk51Lx<X!SGsl#j~odBz&H&tu3$j@7EV0=Res!N=s}s)vrOR1kzY?
zb^)b)gc)gs{r!n!>opYN0+Ln|+?kd|(DQUHz=4)=dsHC1F6g_k<6_O21p_|T6%K*J
zsP%Bf*UrRJ_CnAKg{3uZMKS0J+|h6WNdeM$w2{u;J54hZh?F@yiyw(Wo!J&N0;tW$
z)g+5al?W@P<l~apR?k0!-L?(eE$_6UA?uv&<oCIe_M7Bz#O+8^?>{xx!8K%qu)+WU
zxRCrOV#<Hjm<n5%nK(I1*#2jiv<1`RXA|&|+ZXg~#&xK=P~EcWk|fs5+nn9fhSP|%
zQ(`e1oQM$8Dsc}f-^8ZuyZd^7kJe+;;<KM9AS}#H&pT~AJl+j^rjRiwPe%?i<LhPr
z>+SCA;A+ulqD@HCYqsOycSGX@ryWf&)8_VlS%H8P<%;&H1{Dk4yydA88sqdi^=?%1
z@Go#~hMdg_(C*2Xxum>bH#s`Do01=z-84p+yew%5dPuCg)4n<cUa>0AB=bI+Lk)fz
zFJY@s0yb-FM8Rd_M{>t!M~`mD_xRt6HNALg6ax{zGNPi%=U+OFIvb+bf%9mj_}^<K
zgRN?>iHUoT=}aOH%NnQ(>B_agr1cJ{TBuplLeMDHN?K@mXYF`tOrZt;UW;Ijhzy-Z
zOu1Joe?;<`7EM!Ht0)%IXQr~cClf*KAW<o9Gd2o*YM19B!0m6gt^%tOTBqw_JBkZs
zQ28<Y>^pOO8?faqpc9QBaM`#tZHJA|Jp&m>JUP@^q@U42*`4T+h*S=79V5cB)0ENo
zp+LI$9itt17GO!Uebxq`v8)^|&_y}NCHqE&KiNNg>z7SV0@7uF!)Kz9+W=D!4mkOj
z51!~(n$LktXf9X<X9%d#&P-?p{_Wp^Z%<42y}`qDe?CpTEYv)0@Igol>a2smFqG$U
z=imwMgb4%Juf%wzK>(A5Zw^xr-wf-hDEJHR58;QAFKU4=%w5VYqA52R;yYB6&&Qv1
z!|Q{A)fmuuXw8VfyPN&(;^_b`8}ZQLY|p8qy*0zTHEsJRc<U#`dX-Oek~|-yZf8D)
z?-8v!evb;xxtvI*P1*YADj5qYRaDu=7*Wi5+@e5wOdjj1$Weq<8!6Iy@IH;|us}T`
zzBZC&35Wu>1v*23Ujv302v8dqFlH`rc#oDJWh>E1=ZKQWD=|Q8I?ow7Mn(pZwRZwx
z4y5dad{3l|Sn`@pa6Y~y*B<EO7$<j+i+}_i&o!A35;RcbdDrw#i+?bkIlp@B?V9O`
zxEv5LF?>QkH+LO^l$z(vR1&6q--zCl!-B$f^XLO)`WU4)DMBvgggl)(z{HJ=5&)h-
zM*<_IEiwNU!CcUmbu83fW?vx6h57*FQh{I#&Y_%W(l7wRl|PsdaB@GCNkvsTNMG2L
zS`HGlf0j>Ir+`MWinzy6q?*$9KDaCslSN-J)<zC6TUdwH_}I~xpIzF9f2_~6QZ9g~
zo;WDbLKO2LTy{RYWWFD-i9uE2Zhs1R9TX3hLwJTCh)7_nVwse~Nd{XS*hGQkhNth~
z7}j#~4k$+X1jwH4;vr!ewC$}bLk=xyn1YC3n6jE2F`lal&egY2)?&mlAD9P~G+A;x
z(N2>@YAuO+A$fugT@!eUKl){ie}qTpJjP8|N=Y9TKG6PVXku<Cly#4FK&4E`TfA5y
z?KZJV?k{E3`fiynF0C-JW2<0c_x58XWr|AxQMsUm8>~Nv3n@*Ypo7N4a=L(2*<a5R
ze1AwGoV!xM6i3_tL)bfZi55j!mSNkrZQHhO+qP}nwr#wy{lc~#uOhQYS6Am4mH8L$
zhkfqZXRSG}8qS~k;-D`Ef$#Ui5T%)=lt5Q)SfOqxm5j+w$q^iSJ2i{-P!Vj@S<E<b
zOe1NObeVUzM|Mfc$0mrob|4%WGlQ_jj9P_8wN=Mq>U8dFQQszZmQSBb#?PgfZbgXq
z+$Y&#YFBnlX#A(#{w{0<oyZf;u?Wt`P@*VNdx$1!8;iE2^>X<N8^0So(1dBD0Af~(
zwKzQ3g2mP~15yrTAVmUfu+f&AnWk-Ktt6xUYI{+&$Q+_!{mHI?)kRlX6aI2@gQ@f<
z8|N|NAe1+mk0|R}N&Oj+sMbvfqqElvEsW%zv)iQDFe-7-GOB#tol>TH{NN_y0}Y;y
zMra61PIW8}+sd#I)vdj{o?l<DR<v5h=FsMQ-d)f}G>y81<FsoPoA7ZvCq0p>+BkOc
zWB>GH>m}u!YnYX2ea4epJ3yTHs4ZEY_`sVuk%xipT%cBcXQqHIctj@nQ{%RXN^-4o
z64@w+oI1UuAcz6g$WX%GJf(IFS}Pa2O_l-|y4T6skTuD|)U$bKpGgF3sNPX6Ru|bv
zwpgPvrho)QFzSb_*z7?|$ZmraK_wLibV=M43W}XqBO~5I%Ro(XSbWTA6}Lk-Taom_
zVupXvq8)ip4gg$XiFMKqa}4368^J;|rDIGcLBQNZA*li~%v4gYQI-Kl7{zBmWpO?t
zX4#Pj34@N{ESMt+*4Ky9IL}=WQCUSWCPqt9uJp6Oq#;{eFbsLoOzH8cOns#r^x;z_
zgq}91s*KiBuF?U7ldLwS`XL(cOEHXE_4MJy6yjeW?sETQWAk%}61zta*R!`KGq<+}
zGg3!SzsKJ~x^yYc%*fr(^||HJ<YVckc;_bA8*<2}rHVBmgwF*H8;5=?1-PlVo(0T1
zlwRDXegV5o#W!R(@bFiqaeCQ72-&`M=xAU6*Hq+rM0dgBDL5w}FVf1fbh8d*ANw6x
zh{?@!ZYHMDi{<~P5ZT(r4>j%=Gt2D3-TUdmUCy7U>zhO8#T|dc(lI8XPaEwMvw#4R
z@=u{wtDlpttkH<b4rI@a=qU-$81zWam=}cnHK#qW6o+FaSeCW|AL^_GbBSvomwp^U
zu|&b1K(|t+(-uON`}IYp);hY?=IZ+*^Xrs)z9$c|@T!SbcWQb{@#UvM@W=VJ+<QCU
zWHAOLWe!M|vFlv~74zq{Z)ot*vv1B+!Fv5OU<e@Sl#^zHfyPM{^WWDAT<p&*dG}JV
zG93S&LF2it4XYNmJ3<9e0l;Y`uWgh=r)|8vis}`;=R|{b`(kv*^^$?=(2U3_jq3cI
zW6t+P7bi+vNJK$K_$L40rY~x+Af2&G4CnF}O!xh~N+RjT4_V9ro-%E~huRL<St4Q-
z3((DwQCBb%t5_RDIBCKz0IyEm`?^%QTwpDk&78h#MJ!a06}pbKM1hVV!q&i_q_5K`
zzmo18+Sc)tSc8-7Ahr9`KW=-86QxOv^HyFGW=0j#e=TtDLhNTq?4n~gJ1BxofT##R
zRUTwUYC~7mrYnlfX5!q+FpsNKAwVHUm$9D*6YP5>Y`N55kjid=3^T&O^b1a@m~b2%
zz{Uc1;x@(uSI~wF)WIyR1XY2tk3Ue^Uzm6P*sKtZVWGHjs8Wk&VnP61D?9{8-VVgC
z2V>)4@Y|gv<SBHsgLUUDyn0?MY%{6=jgJ9j5J5saM=p$nC!d!$U&5;^w+P<Z>8GUy
z2^@~%{hYyh_O}fl<DVyX-k<S;S1#t8;E6Y|fz0Z%3tFB3T?24CG0}mC7aok9RsZZN
zcOfD1TjPEjg{NJQNz?3u3%8?yor~A+0}J_SewRdO3iG>&$xntzzas#fx=*iv(hcwD
z8W|B{$pj5JVW*I=H2ZokW##?2=!+ZRLot|l&AOGU9=wHFIIIUmy8daxAy5x4j+Yq4
z<|s;}qLxM>-Hu*zc?E~71~=AuLx&;*BJyrd?Vr%k5$Sa=gRk6n;~KC}S+EH;-n}NU
z6c_NN`bm2Nfd=L&dE>+(HbtIDwZ;QuWf?(%9Kz0M-{X9f1om4Dq7PP<3|-ku_!+F4
z2wpoq0$YWckG@<Cb$SlN$~7otM<571Y*(2_F1PdedD$u;zO;`cmlt1I(GNka*=^M#
zQyUtW8~SN}bCH^>Lt_uo$rZ5<#p1vnVtyOnn;W!*eD!PV=<fWM$%3tm?Al9YGVVty
zqv!_wr$tkD=D~ue=mqFEWC$M20F@XDUy}92uJHbL`YDc6Hl?#B&P}!_>|fzshRVV8
zhxDX|mYoxd7FAhg&ONo|Q<u+T$<CRAt#P3EuTzEOCagoTaCiZX>#!70CRIh)#d=8%
zM#OCRx_7Yra`w~5dW+4%ec03}CYmHih+eaU`K*XRt-{B?Eay@1_=~QCc4b3!HhjLl
zIe$+-@expx3Ee8TEcy8OI6e9J;Vq1r|D7<Me^^;W9;z2{AxnvQf}Y)dKvBES{nvuU
zzElVTHzT7UvH`YEJYk!*OF*<Z+#Lk~^cxK{L?d_dIz#-1XFx<}{%hwZAsURd82k3#
z^1cIxf|Qdb6s(!p)JUu@Y+3cjs7qf)TCs-ak(nMK8exG2Bfh)?9lTlZ0++JAUhk$|
z`!7vYj7h)0$y|?<PYgSEgrnCJ9WCn%`~Q0i{*R=hm<=_`6EOgQj@$nf-Vl`&my{Fz
z4;=9Sluzu{{RNarxcS}cFBn=GFA!RKw^6|#VwSU{T`7vD=_K`RRFaGaMU+LbLO3i0
zu*g_FY&qNc0t0Gsx1#b#3h2w{Pr1{<{_CiAF7?~apz$xRm*dZ+cJ+I{Ke+IDH`qMh
zm}AEM*TXC8m*0QO8UQ{&66?^fkLLN{r+UR!rkQn7Sn-=uV!y1RwiIK1>R@m7mZQeF
z7@)?yaB}u?Wm`Wk+b#59Xv5XI>awuOj!`tbBd}A-)L#Pc9^?4{PxX}QV%D{hs&1o9
zzpT@071f2MnSNn2+$#GE@2-KaYRJB?yN#&VI^6q*YszqA^iaJS|7MD|>$4;fd&qrG
zt2qR%ul!OKjoJ%uPBJ{1=L{E$L8T{%YO74VdGo}hAQgA7JH<dmWS43RxcmSkR5we1
zrpmhcbMY<CgRBq}521zEqamc2q6&OBdh#~A7JJFKoXH#FauoPp7yD6R9ZiG`spXEQ
zDAqqiLgdS(!cpkvjwQ+P9|N_a{j-~T)+&yhBaF|yZBO*!!JUydKbX>%%J+KSN2Bkv
zG5m7;^<(n&eR3=b{f*0nu$u~=tpdR$Mj{`!g;ztWpzo?T<KnSFbR!=&R#m;tfxGVt
zQa^H?T=#Q}++w}^fSUj^>8%9J0V2_*p}1=5cUct_t(Z#cwRMsm_*IA86DVa+UPYZ$
zvg!`qip{I8Vw)(b+b|vzpVVSP%;F;<<tX~F5v~0g7ik%tFY~IYO2Yl|d?egLX|+*r
zDOjG^l6X9Fpj^Iq4^FRy2frU5kDtHu0`*2#mNa{>)k}AqpGDJ7nZ~(ou6yZ1+t&3(
z*>k}8OM3O?TswNZ)VV)RmFmW^*gu6^8B^Q$C`^M!PjGwF`E*|d#|I7c_or(E;1QJZ
zzr-UPj&m~-#38tn#HG<yu{C;JLQiqej`jBTU_u_`)m=@sdbUks{Us}8hXu=Vazh^l
z?2tE{f{46{P9m7w4kh1li1bP$bCzK_@6&E`Ij@?-g#P%}>3iqMCDyEbW-#W(ZIhl)
zSL0`$&o&#)n~1Ra8+V<`{PqGwht610K^|(_3m9`&Q)SF7x#t>YQVN3Na6~t&s%;(>
zGIFw#=St&8_YDgVHYn2S@`3p=F!>gt1x8D?<A-Hc9zD9dWbdMIGadsd#LRfMYwc~~
z<~&F1iInl|JPb#>Sx=eR-(pk3DGoV3b6Xe9>>shVcz=#CfN^a-0^H-|xF~jsAN`uI
z5$w3QJ`2V$GQYEJ!vi+%d!xzSM)u%4yardrXcthUT9NvQ#5-!L!F8uS3hCV+#wVwq
zQ^wC{JoYT$VK#4x_+B#TMhPMRP+$M}S}Xchnf3~|6Htqve1&1XDwE4MpAc$I4ak6x
zbuq~cgGU+$FEks6o8p``va_~51b5~Lv#bK{!n#Ph^j-qOr{~Y!`t|WG(PL-RwwLX|
zJn>>*c%wbfjDMD0thtVr7rvfIoEBD|-!pf?&wSN*D)*jLg31GTHc{bU{&nv?EG*d=
zf2=+pUD<gUPOpBQnsaC0e8t3|cdW~2#&E~Ls60L7H>X)MHE1EZVq#eR?9QHIKxoIq
zFk=v6VAwu>KHqrQo%JtVXh449WHQ21^jHnp`MwkTd?B;BKX{xwWp9_MBvd=wg4%t&
zIyij4-tmwZ^W`nQbl4pP($%mL&@d^?pG`AA#jgvvZp5W5)UXwqSniIE6vMWZsj_JC
ztT8B(tB4W%%z=I7<X$CTAXg+`<Qw;bog4Ks_X!Pl#?7Ww#APH@Sb%xLLLRHQ3`~0W
z9WLoQevMsNqdF`u!6L*WQYAeECLzLp#$P4uchAW?;b_X2_&VH)=)<_hkoNbfD54wF
ze38#LT?{l3*4LI8Abk3AVMB1kIA3vA*TjvjudX*e81+1MS=U|Y;v1HHqx(Ku#+V-@
z9!fzDY^O)p`xVMxIpuO|bOO!$<k$AmJ=V;e!Gx7RS=RS|##~HaVKoQ+`sI{)oNDX&
z^YwTB>e0#b>(lJ&`+xX&mHW@v`};nA%vgW9XL_L^&6r(50%uUsuktN>y7_(noE$vv
zj6SC-xnmp0y7gE;S21Fqc(iG%UUen?fL#@FTd<-?v^qR=?O?RlW!KiNeU#&SAl|z8
z{zGrJx)yrGc~Ca5Rx?MVTrm>`^{Fqcrka=B!15To3`kr&Z+a-Si*jpj?ID2NyO06Y
zVT-L)GwZABhKeX_2a^LxnO19Ob)mT=*CG1uV&~coMx{zP^JY3kAsJ*;-D%}uY*~?2
zSKT8#vuO`DE)%7V(CRhi{9|gma8qawR-UiQF;iEG4~_HX2OkXH_0(2Hx@lv%=^9&I
z8hI;dXzoKb@s?<tLp*BYW2F^TuRdrI50-t7N2_W=Y(9uJW5moHZF@k&==%3G(^}gm
zn#nrAt|I^oZTsvpw=#g4)uBwaaVYarcV~zQis-40dJ8D6RP$A2yiz`j3Vb{f;u&ap
zGMX}eSjyfeN7jse7YmfcA&xvoB+L30U78N>jhcwKGLGPQeln`Yr`#UL-tvI9h>Zc?
zK^?9KK4}y4h>C|R2|U4@BchHmE?$Hkz}2h)em-g9Zaz3)TNhJ<>AuuT^2rGW4ig_u
zHzTyp%3unL4c>kmgV`5;IxDqptXvPo!6x+4O#qgILZ^Wy@YueP-e9DQY18haZhD_F
zs&LkTRNfHhyM-}z(@ftnK(&_|CX(c?F^24N9@JhriwD&-vIl+>=*tPEax8!@NMAYj
z6u2j8STXH0lv?iI$}k!5wN1X2Zl;*hvMtZxP$@uZt47z>VzJx?zPO4!LD+9kRc2UP
z<7`Q77OdsL*KB{?@-34M^XdF{w5n)xFNGEfTLev{L3_~A?6^CE&DjI}uLwO9Ph`KF
zsIe0$wP<c+bN4-dGtxTguyHV|3B~<9utW}d_oyM$_q^#IOB>i5P%2d1;R#ELQ3AC>
zHl~V$2@MNUrO9(@UE~}<#E<hg$fv!TF*iafsE=kiszpB#AqL`aTb|~wK#_>yq}X&$
zvvnL6wN^IORDTkf9*Dc(!&YAd*2OweZ553LZC3L1L?ko=+6{Mxc7z1GWw%gnt;~xi
zt7}M;264kxyevV?p=+d&fO<A&Jy)~yJK%XXzkpMNuALAQG%b_jEA#If?vz8B-v?n&
z^g8JE?jB=wuD}EUiM>UP2j*-M94<-(KLCghHltGp2MeJUdNq)zW=t(Ew;RDyG9cIN
za~Ng_4EYc^=!BtejlkvXmRH}HEI|A~pj|sf{3|Y5bo4K2P}RPjV!vcTA{TKjK!tj{
z@4C^m2;pfoD?-wX0DBvewhC#KF<LvmnJNR4AhpsZ-Vl|RW9pUTY?ejjYPscC?}V9(
z2!5|`+*UzXynrID+a`wiYVE`nE}s>FnbP&P@3seV#Vvx~K(VScP;nwa=`w`M&~3}y
z5>bMz=m?!Whccls9N(-8+;nvH2n}Kdf-I$rwxXUq$EX?V%mAij2SEf4r=TK%0!F#P
zYeY;BUckS#B9yOv3F|zqNu}9#oe&IV5xELPDKa*#+1Kw@2I#vWl8_9CFvvh751PFM
zEY~0}g5+?3DoJ^fEy4xbAUe2SX%EmHQW_@>(uAe>GGgO??N{Zc_5^nga*h%vI5;bA
zkd={0j#UD;2==>uvEL!$gyrY0QM}^)rN3Kh351J+SW;7AW(1*vjNxvUx)K1)hns7J
zR2ML0jjikI9vitTT62{UGb><l7oFvN1%$|Xkd^5)pD~04vLf^soCvdn&aB2AQMZ|Z
z@H^0LpCKAw!fuIPz6fPNh=EH7!ibrH&@K)@F4P@mG_Cx(n$N|^iDBCVfl#|uP#!JE
zHwLyhM#+4I^*{jg0CXS8avfeFH#N)|K5<0;1A-qIyi%eTf#kP<4dgSS65%k5kH+O0
zo0EMy)XT(&(Iv=hAn7>eX#_cmLU@`LI2l+0&<r#ekQDe%)i0#Qea^GBYBFkZvd;{S
z(lR0qMJYND&DG#1T4xLqPz9G6qv2o-<-nO&b)>KvE0u{@8DslOl7(X_<Q9}R5Dmeh
zu(uH__{9<IYBT8hOeEbs+0`aCI<6qtK@(^|Y4L}q7&1c$@YzlC@LPhNY5tr3nfC@c
z>zGvrJMKmxVp0Hi!m&gHXTa2YUj3b;thgmvoa>S^SquiVvXnTSbTLkPk$kV{kSeOH
zS-Czwa+!yv=I~<bn3O3V!=T}69d`YrkU-yyibZif@EaXt5QRjr+FXgl&~>0t&vpf(
zj17|lyO75jZ4+Q#&tZEM3l%#Lb_kQ>=geYaR|sm13|+?XE?Gqls9Rxu2nfR{7cn+r
zt(q>Q4ALS8a{3uS05+3@TFUI8hE($gJ<aloEfDImh=q_Kpr(@DAt}vZI2=$Sq+x&A
zDhKm#h7TJ=P7PcC0U_u4+28|9SYn4~qB!wF@)aUmum%3K6iX)8Kx+*VXGf6Bh%w+R
zT;&_uNY~#3mKHja83K=l#}{gcJ>X8LUc(2uTs)!Q_4Gh1+n-_ff{-h)Yyb@!yg(Sr
z)h$<854^C>(e9C8f~Sc^VxPKo1F-Y5gHD3s15}QckKMA$T>5JpA+yP?NvW~Qd%t;|
zx&+#4^dpccGd=f;dZQ9=BZ2XhjSFfb%I@~sjf);YAOjFUAD(;mo+;p=tsvpR7!U~f
zd613v@}NCbN;uM};;L%STC5ekfe_Tgw!UJB>pZwLxkCn*SG0W8g$VdmB6u(s;hym<
z#xN!i7($4HDwOh%kYX?$EJ>=RPib-8lF9%n=vlZM5@K+mlqZaCf)f0r6&c9#7f0La
zQd*ag;sD{E-ElXfx+`fz11*5lD3J1?bxxFMkw4Jg7ZTM`SmM0(2HHCEJ3*`7>mbTe
z3t_WvMhK#Kj>d$17r4SOj;3nweI}Jk*-}{%Ml*CJtD20DE<W*le<|>HvXQgvM(K+Z
zniZT*5L(KF4C};R7$=TDyZIl-d<AZ85>C`A;RReDN=b<Vq~QqHHK$jqx!AFG1nw)V
z0V*qAL=%_f9u$%<ca}@d{4T>gC698%V&(Njlbfd%{NvX$D;xlv{@z%ClPT2UP~@=E
zE-iK_uA{ICB`U+Iydwzrpg^zwR7Vc?aEPJQy56G%ZF5>qsJbNaoT5Qc$hAh#7A)Km
zexLLOKxP9S_9Dp)y?qPmM!X9(0KjAV;M39H0p;-G>Iw%*;6bbtvED;x5g?QzD8)M{
zK8-BUA1G!AT9O%25)m-0_Y+H--|%>WEw8K1XC+@*tki#5=@FWmm9(NpM^w<q`~>@@
zj4VJ3)t;jidn8MokYAN@nj1kU2%(e<2ex&i69*{9mx&b<-fyk%BA<}vjR-qwD8`DL
zB2^#Kte5faO-vjfL0pewT_<Sc_lvAUz%aV{@Hvl-*M=03)zJX(j`ERdV!6Qva4pY@
z2Qie%VPqIl)=cf$6!ad?m*&&~W%`<kfMT~kcabh-*oF8&z9?*|0bJ3zMj=o()RXKz
zErfKqUJ51LfxQhqHG#s=Pqgxq*P`G;as^<bx*NDZIV<KT(F`=asl}yz=>tqsCOZs(
zvUM{FVj^r4m}6@osL&$qgkk{KH%Log$-H4}xt|HQ$++J0<2*z@#UVROqCKS8Hm9En
zp)8Q%(g4ZN?DsG((Fo~h-Yt${#B)?yxJF#!7^;Dj;Fc9;3_=CY1xW8A$sBNm&I6|R
z-cX>#FOMvbLpJH`v_koMwAZH4<*hG;_JQz*Hc&OR$;k6mkHE4;Kn8p4VS-u<;<0!V
zP738&frQ3xNWQ5i)*+E2!qrwwkv}sk8;(5<Y7CZ+)Pjc5DKbh+h&pC}*+!|PyO;Cp
z=F#)(<oW67>FVp~ZZp~!$-{S?g&a}!4Wh197NZ5j7QxuM(`r%}hSE4qY{9gAz&X$W
zSi|@QQJ#jtQ@Nm!gZ~`j4g!LZqt9E_z=+VoL53;kH;5m#0p*fA_zvoBE%_NCOYwcp
z!*UOq?x9F&rN;q$`{&0?Ox>0<fQRLCtSL(v!GrN|l%uC%lCI^6ZvRc5q1cR3SDH1#
zV?JhHCIa`0BNXB9loCTd9TPTj4^d-vuWo`fK>{dXO)_boAqhYf*sug40@YFa5feH9
zl6p7UWB4O8D`0fIN3=vFHc;`nhuc$tbD)ll6kKpP;Jg^-ZtGpSHNveX_%%WrI13v{
zFYBnK7Yo4u=aK-N^ErkG{Wl_Ath`E3F?%?5R5ww?UmMj<^^Dm7W9}C=NICvZs@JTR
zJRWplgIu3G*@{~5Ck({QnanjV5O;5+EZ4moQ(G~TfGR2xI%nCs=8j_Z8<@~gfIUb+
zik@gHP~*?kyr;&2r_9<=)}*M%z;z3qlhBuXWa?mmOud@$4!Y_|NG91a48{z%fO*hU
zj*QNkHYD@DCzX4QQVrrPl9-n$_q{lCMp=aMRmeohg@l&7PLL$jWlt!RtDYlkd_ef+
z>;+_*H5s8%q@=FGN=DgSg+9Qvqhb6M^c&7QGHnzC<jJ^-4(cyJC*!u7lbYCY*=>EU
z!fBs=9@Wq~+>-nNQ*s(zX^sF=1Oxd9nTJ0{U0Na<W1T-f`1SiU)N&zN%E2@%Z4&D+
z^7wI_vK{OP=y?36-mMkT%esyA4sH51mE;I=;89P>gha@A(-`sLmYZXS>?Dvqnmu}r
zhRvHkfrGjHbRbo*J`k3^b0umC5^<s`8-mvOX@WpakTD_((Q6qBky4b4+6kD!e!3P%
z1a&2Jy(Ra35k77YTzAa#Fhc@}N=Oq;9E51)NNUf7o5=P`mOF<zX(W=WzEABr*%U!S
zY~%wLAnM+Z0iA3jdOJXiq85Zbl=`7A(nu^%r3Y4}S2ngShH7dW5Liy~^AP@zjiMgM
zZ~h>!1t@(VUJ8{Ps~9QgoEHF2B?sbs5dsSRqEUhMkLjX%Xbxb^xin=M8Cb6HUZh+C
zdfhhRI>`{S_;x3CnS=8Q1$delE(*PMA%6kKlSa>R1HsM-;3A1m)auR(&487Pl$PWB
z!8XcQ?x)pcsNXFXS&Pt{1?s+d%3DS(X^uEsG#nvXFQc#T(B+wkfM$K+X7OGhcAiR6
zHN6P-98w_VeqC1k=&DSx;x<vY$3h-RWuApoSR}nA28nkLfs7m1sjSCaoGDy}n1RYc
zf{{&{a0C?WE}N(2Mx~!oDh?GTq-}(L%TQ0$JL;LZVJ}gNs$(7GXHf^WqHSn0>nfm;
zQ@!F+P#6G3Kk*ziHsO6lvadmfQFLh-`>vy4La`l<OH6ewwXza1pfhF1aIe;ut*<~f
zO|x>WigEb)!D3-h@L6X)WQaa!R}Cz=GlhnvIie~80Z~tQ=(Q`TGMmNG254yrat2wM
zl@A@SkfVh#Bf?lpnIF<Zi$%F%xamfs8Y|K@U<e!>koa`%-42}g!7AXRi-u98p-j``
z5nn_sdjy6PO_8vH1#-#MyubldL3?)?6gejh=>#l7pbv<EyDi{H$sQ|@i-x;cWF7sH
zzWJuOFL>YzHvpf+Ao(MZB1XPCyz|EezQ#e9$C-$5As_+Tn1@au?ZgWwoqL#*)5p)!
z`^a1`+9>K?9tUBD^k64|B6r)>)H?FYFAG7GlHd<0^}+pwP5DA2Mc-7T@VZ5WtrF@J
z9!_K%AeN-Atxn64GrON5Q%`l8Bly0s4hB~dhj}<)YIg|%=A0s^Sd#{o*ww)_VU(l~
z<l<8upd*zLWW=>Nq1`Wl@y!u}rjLD|qcZlsc)m9Hd6GYa5}l&oi_+5E2R?-~`5gZ8
znA&a>5%3(V{AAjt>Yup<NxnI>mC=bckX{D5-&qGz;0+ha<9C|OMm*}km7m><XDJuD
zElYZW!z>6n2*Z*#+{xm`lS7oARGYrj5r8O|${esRnjqa2G()Q0Mu2wq3rUyF;y<Dg
zOwZH0+Ieq{S6LNu#yn2hrNWK~7FKqaO#>l1JlQ{GN&DN30YaSDnUHllCV%nWHo;P%
zsZ<q_Y_cd==n9Zbojqt=cMHAHUMXdD90BUh0yv!Z3BlB<I$~h@IU5m?UTn^`fzDbu
zxr902DJ0@cgL+*S6Gkq9Bgu^+h6C3gQAcrSFBUPa+LsV+VjbYg{77z^o-3%h8WnK`
zwh<CHKm#Z%o+22#1*n-!sh<ke&vuKiokt>0vHA$(x1GR2d<=Oh{1FEnDAo&;FoH1j
z4%vZv7=<JRRQF|JJ}B_;Z1Wk;8AsE(af)6@>8VmNpqgre)8i@8gqY9XL?Kq;L#U0g
z>y5O7ri8ioaMWa!L=Zc_7=a0=diPU~Vn3}Gb5DCFs-ZKL9kFu`0WH=Ex+Czzzf37{
zD!@p?q)Mi-Qt3CHC&8SaP;Ws;rInCrxWJ0mArrxHA~vDoMI&;hmaBcCif&3BCLmV=
zv!fb!t3sQ{y+qYbN#4-agW5GubyoVPqQG>7bHY+WSIXOO>FET3+zPVg2X@Y@f<T}w
z{vF={=K^+A|6?HSAp=C92@F|Mon*?LP2BV$;7llP>W&FQr2B~V7!#XODbV%`OU7Xn
z83H6Z?8kgf6hZ<64H!BrX=#0kJBs*+5FR&C3=TdaDC-#Du^z0gXD2{H0)Pe(P+hhz
z%DN`Q7su4RjxLK5oZE5LWgevILoa2|Xw^tJxKNBDKE#0*@PRha2R|vn6C6M&{vF5?
zbIjO~z{MUA0L>tT{rJb|JOZ`aNvY)irO+A_iQBj0d<cd#wq=F^mF?JOA8=6|d?8hO
zm`ts#P_u0{C7ual#d)~_K7ANwXuTW}SlkUJ2tM!wjI^fIfQ!;@AN06~`<9aB{F)6P
zO#Ol!4#l%Luv)O%u>nj4{N@1Q3l=*e0RP1!iL3K_z7#gYpwJ&^BGXvN%=|4*>GHC%
zaUzCj!lSl<|8@&u166)m67|v*Jt|^IsE&nVQC^8BL|iy0kW$!)1MVcm3iSnuJ;P+L
z=W|)SIm&H-f?E<zR%Cu@1(<1IiUBB^bGr9{iw+7N!C3j3K-1?4_0r%E&0hGQmXfe$
zp79X0h@2*En6vr-R>jW&$QtM>SYfw-HXfNH0^m+9H0U${jG`KRJg-;Kin}3IoP9B=
zBf7;Mr=NX=Z==C;NY^~Tg|8=Ias1s*l6}M3jG{yV7P|^BR(%@|%<Tqa-wqrn!*{Nb
zbU=grJy}VTJ;-(0;4eiwLJ~<z5n*+cW7X}(vNz=Le6v~Zu{JxWBVsP}%Ft8`>LMX1
zJhIP$3vp4tt=0GAS5~i-@n-nAnNk(`n{_8XeHXPF-(-of;6K7qN2t2ufT)ClIvM2P
zHF>MUN$UQ9Zi$Mf_9<^IfbRNOAiu@+gS-Rjj@oubwR{m$o$q9d7L--yZNchA=@Z4K
z9ndOnmt3Yvv`0~DjlCS1&Sa5sWlJqDvVfqC%I8sSl)xfp=`H#vRodf3DV!{ZWcnk%
z0-2H2Oz$f4j@n403_O$uf7lKHtN|=Co!i=P;05vmrw*0uObJNjNN7os<j+u|-n^qB
z>BJ+@#j0c>xQrlj0}V1mVwn+GWZHDJ0@PwM5jKYS&RnFJB9(68I!Tle0)A?p*{mf|
zGj<2ms??jytfD)lE9ca8-QY^|52L~0$^oOg_2-0%p)M}W7%h=qKdd)&cTdRd@i`2Q
zA0eQhs;=wZMSKZl_yB&xkV+>+D10MMEZo95m0H#?2^>YeDPsg2gAHWOO`jWM{O$2^
z$`AZ$Cgy9lSN!^a)F1a?em!|)!+ZVDa9ypJ$Xh1>(B@tbgvA6IhpWl_d!(oQ>$ktb
zy?>g3Ufg0gjhWB=Wc__>$aD$W97G-d!H8I|_2PtIui9@*vIYO%#lLe|-f4;MB`D4@
zV3kk-yW`bax|aVk`9B&KFUz{1hlpJiOq>r4df%hsb8umqYvROvB0A@C)O~MdOgZx9
zH~xG6H>6kWOdLGQ-#=rhNONhw$H+bokc>OFD>pP=$l=n!16ukc|KYzBUV**C6d-LU
zie7fF@Et~!@<*GJ*GWXV^VjIyuUxPBC{U)?U9Z1anscRoLeo4NT}8ds4?hY>qw?@W
z6i6LXoIzeM9ocuI8w=3~%a`(r<8)-wKc7*Xi5h{4>YtIIU^St`tuFUa-N#4KRED}X
zJ35Kt4mhNVdOCE>n%;Cv+Ao}{jzZmx!u5nndTT_rNhz4dOHAAt>I)v^e#R!hfm?zD
zySsWZe13e*X;{-d0g2-du)E+YN!8cD*M9yrP7;jvev*<cG{HyzkXKz7RDRPK#(xK_
zkSr1jG;RLR^X<bFBp>7zk6>X;VuGTNxAN$NvbH{!&hbH2{vRPc{DgP$%WcYg^=S&p
z6HW-L=Ns-!CCr*bP&e#^T>t{Ks{>>VI{~Y9=R2zp+s)F(L;2FyV<vn7ZVhWkg$y9N
z1q`Ad$AC8#vS4W6d^v^#8r>-Z+K^<Q+>Bk|j{U7+*brGh#Q>8qkSt#J`H*h|3H&`t
zC9uPNJ1Q58Y%I})WS`n+1|+h7kSrPSU%(p-Xhy_jFS1yODxW1h$R-gxGrg(~5(0?M
z@4w`=Y5e(r!|LM}(38F}_m<*M-KXHu+1uS+NZk8<`1pPNU4KrE>+fg6voGbPKj^*S
zyoZ;LkKa+-1ILJE$Mg?RbNd*9STX%&rF(e3J)+aGqLQMpki%1zLM7!$QF5ZW5A3<#
z*XhCd&2d%)*(X<;1?BHjDWRtuwXukPc%;2l2eC*~XD5d5&GCLP;z18)hc)ff21Ydw
zb6xUB_mX@*)g)=cSQ)#tB3b5iYQ|K#A$lW3rsT`j_2uXz%_Ia|!jNYO{^bW%6rk$j
zlpwHb&XR3OOK_ijh;-96q|ly8?i*3k@O7c&XhCi06m~;@nik6Zi?|wH*avhi&*^%6
zW?=Rw4WJL{w!R_gcg*SDDkUyLw4R=o50Q2%>WlXgQ9DiHIUUJN$t<n|4aSIiS!Vcb
z1TDy~OJS69XVtKj*54{!9L$q)_x8-*YXtV)zr{~bTqTdNDFb4obRPwzXeS1tgwAT5
zb5&v4gNz6On>rH57~^wSb!XR~^<T4^aK+E&)x6v_rzE*2i>KG2L4&5cl;Lpnk;ND)
zZ!(Fi#FrBU3e=9HBK_+pyz{woNF+3nB5X<5a8=?#f{*6Q({4`Np%6<vd%v#uWKJ`V
zR%f}9P?RD!X@CRVNa#zmQky{~2@uY%)Kn!?q=ut*SZ!mc`n|DqX+pfDp5vqhxmso|
zzZx!i?9C0yRW?Oncw^!6vxiamIDz6pfK@*kJLVpF{4zSYQLN=krxdYujzpl{EeRhM
z94lMXWe(L(PrkAw!B0MeaWbifk=T8^YE6|_dTCYd)eb);JEpqO5iLv>izZd4xj@7|
zS8uOpu(;#*e3QQ9Mp!AnM?WSo`$b>h=fl<C>EZu&@N#o<aB(OQe);=cdP?seZckTt
zGizTbNAC^fvrf>*Me>oOv_sP6v<0#xk4t8%n&LF^b!th1LL>Ujf_Lsq6KBZIs_>e}
zN4NMJ0e5r7$UXox%U()9_!w>eN#-radk~V{HY1}n5n>L#3I7yY?Y&O`PlrR|KBaNa
zs*thQEVeP2%&Jcc15f#swex`2E#DbGj~OS5c6SikogL>v_9bLAj+IXIgu4H1dI6rN
z&9^+b>XPR?<hAWj%K#JfpHvmFKNbGF({)u+&ne4Pq=E}D)LhC{4}sm8Q~qp;aVsH?
zAY{Mqu~o7i-<O0y-b#Mil}BMW(LRKu^9+ikabf7g>ql{%;nUGamie{xzOwN=^YHLN
z{MGlyu;7eJ$0JRV$HGAB?WAFWcjKt!C@`hziJl5zR_6M?b(i8=+3@Dj1@SL&<-HT^
z%&~U)82+ZZ@oB}Zj*jd7@M%Xz|7X5ifkxgr`<<WthW^Wq_vgC&?fv(wf1IGNRL{oo
z@rmBM+}nS~mudmvi|2P1s`rfK@VPyjL{QbWaCbe@yB=x4ur~BZpxoB;|8sJ_zdz+J
z{Tpm%d&bf4{r%DX?q0w91$_*>laQaC)u-;d3CM}n2*tiWc!6zjaFSSepod1ij_hlx
zc%l0ZLE67ap0b?~mV7RBsedtRet*x!TTL3%FZ~guWbLuT<E+nGlxPZr2}ru>p8*0J
zn$&_D>*9HjC$Y~zNnG0Q@m)s=z^&v<73LN|$!6Q#yxZ^f{Pfh4K&-VqGfaK+DD~2~
z-m>+8yXdsidhuU-P#!JG3<JN_{XJ*^0P6o1F!BG0#!c;vojm`K?*9LUE)lA>YyaEb
z_gm9<l+e#1YRzS_ZlGh`>)5nfZiJnp%_0v@vxu%1u_8fL|Gab;SBkoJ#dtu-=)&Li
zecegKr%DxF2+wK0!a6w|=ZH$nC!gF2n^Iv<4P{TTnxz2;d)i;Yb$FkKR=vL>Zib0j
zaka9Z>86-m@@bSQlSCP$CR{3-<=8InWhui@*;RI4n-hOqI1XGRKlhsS;(71U{QCR(
zGIh5m?UCzbJA=w2gMOzqK`oKWf_6|pHDl8Cg;GB+q{6wTPEZo6JNR<)&<^)!oFlWQ
zZ0gyCk-xgy9rJ=|zyvJI7;^E;KGD~s!#zPPk>FB@0IOBlKZKA&sG#16TnS2cRVWTX
z)^--Mn-sa)V2Ti6Uz2|*qb_20k;Qbf7LD=^{zwTseJAw{CKE(evyg;(zyW;N_p1NN
zxiPL07Fv^~L2B$Sm;J1a(N9-Z%Gl1Nwl>3pqgsoTLDzP{(Uwk(kRgPWd8E18RLY^C
zCJ{vqrOqG>lfqrq9=ax+K&P;`>eVx30eb>P!j#Z_j)%c`M9*k@6Qa`{Vj>^ayEJr0
znkIfT-?4cg)4yA?osz9N+(s3&JWjuj#*I!yHj6sZX`K>wa?kMt1G#V^tsLf`a3zA1
zmO?5R98e>8lz@gzMnzIE6;sC^|Mt0FbBw+V9;vke;#BQgVDqhQcqEek)HMRbclVYB
zHBAi}yRXJ6PILLXR1J2ZNrP>H(O9N(CRgvqHk@$ca?#7(PAz{73p=X#L8CLQkZwMT
zT%k{TWCD7wstmIV2Gta6bttdg$r^~ZX^Q?eQQ)X+TS<*L8TPuBE5jSMNMufWi6t2N
za$5nB`m1OHIgV4}$uf%Y3oPVXI|0{<b^>(ijf@s!$~H#Z=?DfGRLDMnIS{a#mZ|HX
zW{62<G->#*cS{JO;Qe@|^Ra8xplu~O3$8hKQ3KcVC?VX5Ke3w72RR1}1-RB{ygQ-x
ze0N+wZFrpoaVR*t;K^ob5~PuvWklXn{_BFO3|d4S?TV$GHw!hmTyU5VVUQ<M=^PHR
z`gqp{ZJ%Ldg3OjsC**j(x<WJpk~t?qN@>$V@t7$~`mOVN5#u;TV_#>+;;?b+b=0SZ
zT=?~QVz#tOt{d|#N|sv1PCmOq1Tb;@aLUx4johQMqKYgfF4QE$Y@R-eLd?Dh9E>LZ
zDWmZ=RV{VY>`e^c@;+x&#Y<`mb-gNCZug$eNzYVx{CREBite=n2SF=m$6*B6s#{fU
ziIt(ITSN4?EPFL1&obcAuOmv@WR)0hTB&^WREs-U|FjMPGk~4qZc5u6QVC=E$6p-c
zx7<)lqr}qdTvhtVt-k>>)Y!rDK!>%ud+nT;CCVILjUkqa;OfL?t{cQd-?H(S+;Wzm
z&Eh{Hts;SDMJ_Z7M^(|&(xis+JIOG^WR|_W*bxdsj@mi*xDK(=yWAt)zhzJSZQ6uv
zd0IX2Xb;B?q)z`9eS1Yco{8b3bCf2%!)|JM-nS9YvQo~&hi<k>Q;k5{x^_SA<9)IR
z!H`q5V$58BL(H)y;cI=-=jx7L(pPi(;Li0agwN?yTvvxcBl&scY~w0McV+o!&R7H?
zP_ALYZx3)%E-gNo7sA2kg13%Vub9nUk7Yjn#T%45z!+;bK@@HNbgo`Noep|qx(Pfm
zJpHiDszI+N?`QPq5(W>mPoR0Eb`HFxku-DI!9UPPH*M13t1a{Q(Gp(}QH@3W+#Z^7
z_|=D)d3?v&&CEJiuH;X!##sBP%okx6Z>k*`7=)%*`?)Fe4o~SXHdQ+MTCH`l3GMUm
zBLl(H2knoV;_peW+*p;rLiVD4F^lhsJmOQ9%MuU5CK)i17H(~e!Z8Yg5bZL<yNs*K
zqTE2CTe9VjJd)Vm!WUb`7Bcy$TQ%11Y#RbQzR%n^TT?&!F>v6(ec$EXQ1{|{<O^05
z=WjJRY!Q#*KEeP0qo)#!EML&S9`UPRZW!r*dr16p!;I}6JpZTMsjKRs-G6pusljeW
zHA$r0w4WMeVK^$?tp^f;w<r^m1tnWX)yPznnhyJKv8B`w3|>hhb3B>t|4yIPwS^+M
zmnMyxOO3}P6W%Pj+Fc%!?w49zyz!hV)Ul^-dvy`@m42STKD{rz_D!X`{IulIg%;?y
zOjegExL8}8_SDxgC#Mi^x5zzJLNoICf_p=%917bvI=Z>vk9R^RVg8I**}FRCnaAr=
z;PVxkr<ceUSWNujhVzq8g^xa2vgVfiVuqnlt5eIrw&U1|3?8tqD=wl&(B>ook|o7(
z?X|@+BSm19ux;8<rbN9oSuI17M-u);eSrnJvr^Y4-*FV_OHnn2w_UjgOW%OlIGmhL
z7-dn=oz(H%e_lO{oh9wy)ZxknhdnTnjlqvZQJEk>##(a)U0NkbVNx)h)JPJo%mI=H
zM6aI>bbFBabJWHt$Y~YhRjY~@aL)RqmJQp7FdG>2<RE{B&4-~IkSmS{OE5^3vbj{o
zh?st-X92H4-d-hOcd{NO+}i9dfKGep!B!MpN0mtVK-E(X(*LJu9ubjf5>G@8LJw#6
zs#!5R!z;DBONkM?acPUGK&(5LbtN$%UI$vtDm9Rym!=o%VOg1m1YJ|$+vVH##rK;*
zKD~P7$&o3_a^wt~4z`_08s!PDwIbD8RKfx@mM>&pEa!~T`UWiGkd}wl+JIyh$Q&Kn
zqZkc(`&X*Ht8qi*QpAC*QUo10ooLHt+ZCYCi0%fT=|3DTruQWIH2Jp3raCAZ#S0H}
zqtt>-wW>N|w*C3`*BY`K2h7oJkrgKleY>M5n2}9^@)gSCPmAfPlqSh>g`JLVZ<KAQ
zCX|-iW;^a668;h6yI@c^*rOjA$rboExVjIQhq?z%um~wiT<ZymVjR-_NF_Hf?q(!~
zCk9ok`L)&gk=#9k!);Yh5Dh47QCo2SiL;a_7J`eEBcPy4Ywu>q#2S01`af1EMK3`n
zo4Ib8lYcMWR*agw^hzJzJl=UUyY|%OLWeQ-?kMto_D(e54Kn%W%zO&7ny+@=u6R7R
zr=OQhWFLdE*(`lUf`YJJSSPMZ+9u*zJ922z&uXErEI2=2gIhOG#ThadJleCN89QcS
zw{-qT^IQDW`FdzexBj&u9st7V<xf*HGczmc*>nBlE+=m@H0jJ<PA~X01X%0}^M(au
z7M-Bn9$E(JoxEw#2NyW~q$vH2p-zfx$U-Z63kmSxx%&XUQuJ++Tk+bcO%ZN^mNf9s
zS=C&0XjgDoDwa+w^}rVlTp)C6+LU<^^N3y8@?u%C_+;l!LOYq`d>|-n#3!uQ2YSLA
zjnd}rrVy?FynKB*aFTB5vo+d#?R@LF@gy<bRBL?yg53WX9B)vd$0our?=1g+<eiBq
z3+kJj+L<~Tx|r%)oBod@=a+Z(|LSVDpjD&;YL|tlh)Qi*M5TbG)}?Y1B+Eu@8;HG|
zX#95_C4{$jvY8)G-e<gLeQlu#Z=_R3QIhVoNk)XxZr~~wq=t6rd4?f=e1KjD(yc0O
z_|t5YSGcszga)`vAFC)4%*w>Bby(?gVE%Bnr;xqnd+ojdo!URmyCnRBcJ9=xS(mgX
z1tvU@j^*rhXG(S|0OnLINwou2U79LR(n1$N`dpNoP;kF|304XH8+GGS80q5Kpvc0t
z&|~-ZpX>Q$uBh?09}7gtMmESLi*vBW8N}})K+^;;j<p4usQ$77dM_Bx(q)Qgl(Pn2
z8T`D4?f)(kv8r)r1TE}k@ra+=83Kh#wU8e({N|NgeJt&u{*t6`PBD7hgF|oT6XuCp
z{#kCZ4h)7LepeMn6Ga%?kc#ja!+bxv)<*8L*ob?XUiV+t!+pKZ^KR6#UphWqi$#D|
z&adT40dY^BG;v|i^aG*y9i1bdGSbj~Oa=~ZC|rEo8>$LghUbu2DD)i*5*?>HJsq)T
z?Gku-rw_YW3<{+G>oSmS2++U^i*t<GLTG^lMU@(iUuATt=Tx(G=ImTUP3juwprq0^
zjVnIB7u(wbm9+n?c{e$%Rp!wdkwg<zcOqk)S)~wHv&mk<!5=4q#I26Ba<k;&!<8F!
za|;o}8$-{0Xcu2lV!U#a!cOvEb+CGpnk)prC)~>KHHh)QJ>mXSg<)>$!tkFgGeZ|w
zC)59Z+WlWHLo;g9@xPa$zF#6lQgp9_$t@V=yvtg^Ap|yXTyJWNpf8d|WZU|m5-BCW
zuTMD3_tvCXKDrr0#F@kFce5~NKPnTc3FR>hFZkp^_xyxizGuI<^yw#~ne?D6rA9cM
z5OPf#53i(GBjz<V$wyOjc*M7Uwqcbhu?j;5ze|x>)O5K!z_{IkQK2eSR-Gu~Vh6U&
zzL4Ss1dln<q;$$)aZQFo*S|YNb?MKF?P(D!1Kp_-g|IL~lfGZ3D5HibF=TTN?&<}S
z;R7rF-u&Sl82s|Umj_gj?mByRTR))$_|BzQwOO{jddkLDey7uy*Idl)S{>3Ve$j)G
zqx|&iu|>MeMUHM+NWQ~$eCnri72o;|*1uI%5!!C6k^YZ;28>>j;`5UG>$c5;%!Rw-
zh0+ah;z5(EtNjU3s&?N3B3HEx)%@ie1u9hbjSGWY!4NR(taO=RBMTA@sO4Uf;gkYS
z%979eFxjzWnBKnrFhrR$Mf?*Ow5UR1O#t13MCkN+p4VB+99a8qsG@qZu~EfQC78M^
zI*u~$AYbKO>AlG_>K7@>GH6OAy0q4yL@&yT*3>ntT`jL#wobNO+qF1s<%O^y%I<p`
zCy^yov=)@e;us?dj79ys5UjATpAoWs1Pz&xrN5S^^2GRS#BECX04yj{b)0llI(7}L
zoWC|*izJ3xTh6#l3+=~di7Xo?GjE~*G*LTKwtU#N2zy@2xKTJ_!ysw0jHZo+Xwta+
zG*!?eD1()Wbj&MO2UsC2=z5dF4p0ltJ{xIuQM&~Yv1PDIrBtNl6ruFcT(F$B??{XM
zH*mivESbG=gD<N~2U`(4_l4Exu}m&G46^XUV_nbk-0J8KyuIJtm3lJO#E)biMOYtv
zup<Yl$yWy7-TFZbU)v|{*Gurg@l;CE1wjuC%kF5FVc{cmtMg_S24MD)hhgLWJyE%|
z?h^X(7kpcFq$}sYTv9SLjw#k-tThNCy@~7F)QmFA=@3Qk?23)7u2BBSpiJOII)R;`
ziw=p6RU?D&3p5VPA*Akkh_=o*H)k)hxBCUcep*DO{b*gA{Mc0d&nH_Hu_XgH+i3h(
z!6hHtD`QQE&~PB=pkO<a%!At;2AtvEwMV?4@2HEfblhh)dT(_(&yDH0r|_k8O$M(Y
zG(@J9QMr3lv%Nz1f9JqI?~}OM!KcwlZHWvNvSg_*1_`GK8sM;ibWE*gltA&GLCzNT
zFfVTY25=DXdZ4t_KI)i#*4_ZjnnO`H+rd<<#AL&<&3hf1>uiRhj@a@CRr@L=FzVTp
zI8LF8gd`n+$J+|+b4Vq^Rfk6jW5tF1kl%-cNu@#+Db~erJ=^-Upv!wBCSxcc&h6bB
zHa!>N)#NKp-LL0rJU!DjPTpa8Ns9^n|A(#pKYCsh6IDc9zoY2nmrTR_-;Sc+pKV)v
z6Mb7(8~tCTqNRhAy|JOq{~kvF7n+;v?`GzZ4d!<<Be=~#aN{HA1pLxa3bskp4V@qz
z#eut8F3@(Ym2Kmhl%w;q7N3%vfBjq-NqIs1eovhHDRvsOlOA+xtik7#%lOi<t;V&h
zR=bInI5~C}Q;jg6GliRp^{*jMHot9YMt@7|O4!YkA_ifNPL1OYB4U%u4j?htCS|%K
zxhrh-&qr#maPFd{URrgzN!~A#ZGubLmd>CETT#0@%n~=1F;6EXusgd2jGOjxj~(m@
zvYisHu1-n!?2o|e4clvb9-&EB+Zo5d9-kj5_tg3|eDj+v(%Ho3!3Eac&~j@rl~ZuM
zp)C%WkN(?%{_ADRgwC*={xbE1cGVq`bL{(1n#{UW`RsSAcU(^xpa~Dy$^pA5oSZPR
z454hOd8#NOGo|G?TC&rv;QU~WhU_xs!9En$4kewe5+#rg;Yb|OMTi@bIyjFrsatzb
zQZCC@wxG`8SrysKkkIkS$XoDuWV~HoxkZk*dq<_w>8aS+hP^jG9unh-eN(ld76GMW
zG$%u5V&xiARH<8H6YHRok)t6^;}N-wRU<qdN)iBPq42ogjza)tF!CxfY&*DyL$L=H
zNNh&8>cu^fpmo={+Eh6w(tpLLaA{x04YMto*0CLc_f~KLd^M*b6!WZ1c7o`Cox~t1
z#UPph&e!pzXJSrK7Kg7j;DKD!)ZBUSgAaMBRS+9J9ZM25H2LV!2$wfgN9eJfruWDc
zvq}LHTkfwb?~Hth3KkaziTGM#PwTBoYs2g0bLA<aPmMVgiX40oT(xbLe~}7tgYw2m
zhNJ%qUGA}lJrV1NL>dOQ7<g_7;>Ak$S5z>Hq5#f-?hg(L==s1b6Df}-6Nr34-$fsE
zbIUd10s8-JqfZ*=6PWsw^4712-Phc1^w+xiN$^<pMa!S>r|mV(GP>Y56nSJ%)wy+X
zw?l*@a_=kCcHUFDdGC|Mbmt~ReQxN@vCUnQe!Vw%<dNQ5E<uRYbmJ^Ms6CXw>1pbL
z!<4II6wiDL(I)O_y-sjoRgo5c2?7g41N_6J*yJjvH4w%~&f+@ttFy@_wDn*KawZ`f
z@fY1dc>WeztQ3CX@}(zhe)jsL+Fs>egyLdOoHn~_kWhnJQ_)(|eESQ^WF*To_pRK%
z6z5WS9P(<KXQOtRZVhJ9mI%0r{-Suxg<5-8nnnVRA%1A#0+dmgr?>hzr_UB6>*~z#
z(CTt$$%5tk#e((kAk?Sl&E#p9$oX!*O9^{B7`}sR&1G;%OT&->L9HtRvyYe2?DF`C
z4nf5o1enS143{6I<4w;cI@qOPp=@T%VSpAziEwL|X@P?(08CX<&-|b#!#f5quxp_e
z$XzS!IAL~jhM4wbX@e<K(7w5g6(UtyrA0>jAKO5mlUH!cEbGhKzQg~b?47zp;nt+l
z*mkmF+qSJ0+jg>I+qP}nwr$%sR+2AoUv!V&W9;7N{DFBlYt}QXo~oW5vCkMk@r)IH
z7t_@h#H4D4?l$#{)$jlPCqNeV)`kAV(wTnpCTadpm=YHM|3%cDlw@r8>3@QWRU_L&
zf}nsLi+C>Q#XW^-kU)h`C3%zyFhgCCx$3hNo>y*GC7`U=pa-8PA3SVLJT*rH>o!md
zi~u6$gnCyWzuaPgl#OoR;BmS5f7MM!)N2T#Ln(2UIi%iiMH{~0Hc-catO|KXEr?&<
z!7_PjP^<1y8^LtjA(|Td(<g#LRW<0uyO+t4X<@wDSzEfpuSl$axpDFm%~1v&d-y@l
zIzd(A%-mht+`R&<h_qRUvLUdfnIp(9H!PVnYkAJES+KP;r=sYOB(dhgqT#zBXd_Hu
z)z$I{!VV4LLJjFcpb*9Z*pIndrF9Cchph+PA?}k;kjHw>E?%!ju#ixKaIQK~-S*0y
zLrA>;mKPq!?m5Rw<xrwWvcN|#8$%u^mcEIX_N1X_#Tp(UeyY&YC#0SJbCymn79h#=
zYZ*4!;{d&T!Et@{19wuo0EcC*kX-QC7MHnSoq}=koq9!7O_0}ad;$ga6aq_TWb5~Y
zeUV<B5|k5x$o^#&byZ@{p0e@_mz}s<X8f3JtS=2?O1`2rCEs@1*LAsQ_pn-?Ult*S
z^G5=<Lq+{e{HLyyMKo=5-U(7;9C4_<V%C~h%~wcgVKY_Xl^f-htGFl2cLa@vQ4ZD=
zQjzy0L&|t^%k`yGt(z9z?uywLMqo;~tb-&8GYmh}tTDDC3+HT&D_-lc)H1WgG$x_G
z?bqczhn`EXS(v1Ri0`j(ryU~)!9i=8=D_-<D^UPuwg>%M9c1-~OCZgi^)Cr!3=sPC
z5UJr~qh_89Ey>!9=9~1JVMdK^0hyo2=IQd<dtg-<O>F3;%rC>cXQ%57zB|CUy-<|`
z=A>5Po(&cvQZhkOgotaLQEdYR)-ql0X&=jc+R%MST!aFNvWr7#w4BInZK{Ivw)_f^
zdkpFR6haV-oP{w#;pN6P`1xqCpCzzLV3-K;!2H!R607fBElnI5Jpo%qu0|+*hP00m
zCO6GYozh>jl{MT}YM_i?DQ+~jtc)S(YwiLE4!p)Yk*Dmri?T%Z;#MKSw3^!9eDz=E
zWOrGE$=M&0Fc0~kWE&9$1zkHQM_pqF2U~~#L=J*fwExMj^E|1+-wYuQD)0pKYL$Xv
z51Yr3$?BC2KOD;?S>MNzDJMqF`MBVclH}chn8mLpiOAea%hEn?ZzeHZNkTc|z=QuD
z$DANbP~QqnbDVDHEz$g)eCDhYj{gejQeRtr*nj)_fTsV>>+PN$T^xC*n@HiPDCuo%
zY2LX~qL!`<%>7<le(0eeod~H_;g+*7l+Pg2?x5gm`QBMO46dWpf474sIl+6drMqr^
zc(<Z`_!&vmX|CdxZH$Tb_1zB7umD96q={rFbwiu8Eh{=hS5R{2Co49BE$>|c!3g%G
z=T>^F>?ihCVT<><Fe+-|iIS=+MbtO~gt$N6*h{Oi4|#M<xdq!w6F$tL?(c{~L2kJ^
zg{lo_hK}OcZ(R$l3LH-_DU^6TKa>*{NmU2Q2*>!WK+!X_-)iGY)VO^MloQIlW7nse
zZ^tT?2#*46dt;p^9LuY~Uk0^_fe45w2^wQ3uHWlrH%^TyY^^fC`_crp1a~Kn4v3%%
zjaMJwi)SrtbhadE-YW1#Zj{w{A%9lKKiC|&JBnKaA+Gs*S^?_o^xhR9Ja~o#g9umh
z=n(0m$dDq<ndIf!)Js^~QkmGIQS-KldESq%COwIsOv#L4rG7|F;${eGoZ7BohRIUf
zsgJC_nHFEg{XDOMobo#3O+s~65`j#2LXbu&?!0ejd%G6UeeluXjFS)~RpHi%c~F(M
z%}p%ddPy?{(AJqxD5RGou|g~%BmT;EosHBwZIA}DXD4Vtfy|8}>phl4lf5H6b|Y4l
zKfR{IjF*+;37Z@FFb3dP^8zS5bcw|}1m{cgIIRlHa4#=;@Z?b>C4Gjio)~#TB0poL
zDx~7Or00lxp5uWL{IrO6W3%NqXoDfA7cs{jDC(^nN5<hm$J*3~6z|o7B7M<J$lj~X
zJN;j#oGo~<n3{x4u)$>R{L6;>Bx}busp>LIW<!F`NMsq5+svDW#X?>}X0Um;Ni_hq
z0ya#awe%3ImIiGjoTj}#$OD!p0?kWRAfYK-ayjd&s!!SCfmnRhu?WUIU_krPZKo@%
ztJ1a?Kza?dO|?k0bX>Hv{HeDVFc5vgnSFeOCMdxQAAQN)Dm}AStn?SS!7C?<(6-Om
zAGHo|5VJ9{n0as5CjYYIR-77N59BmYxQiXH*&>m8UM!Al3jRq1c9M}Lx<-V6hY;S0
ze=S+ug-dZo(o){Jf*mKJZao<Egq%3iWW{8on3~1xe3^G&<M5P|9~-<Z%B2_~33KeA
z2YRsdy_2|TC5gG?4FW4yyq(K5WZ}+D!AP5eyvw2jF+u=-q4w0o&81l8K4oPr^_$1j
zbE+gK)8cp`AYOxtd79qPUgey$e7OtckOPlbHplE*K{|4s_uCW1_GOcor$<iIhr5&B
z+43Svaf0$TqM@N7A)?`7r{E*!77Os?*3`785887zSCn}tn0zvj)iqLq4u=$O%2Ro_
zNvOFg`uP;W(S0x`-*i2w>mc&MWrIH#_VA{V$VYLY2|S8$;m19aD)`0Str3alM`>{)
zKwhp2$XUtaD(sHEb$npHowmI(3|Ov2JkcqEEB536Qw@^;perf4c;d9&$!EMsE-{}m
zpCGE}mt0_Q(PsAh*Ldu8$b99g9|<E5`9Fc?e|3E+Nyv!&(}MD!Kr>3sQtm(;?Ng^`
zpOz{LDG@GDHPS>KD{O^dMS`EbGT944`I7Oj^59-2Nuq>>&wH9?qYg)K=9VCA;^mY5
z1x?oh2lCFi%*au?A>u3w0ln|?)tEPXyHo85Y>|8XH09Z_RcY^g9UR}MZkl-QBA0}C
zL_kbBagf1lKVXkxDj_MqbyP6rbkc?fGTZb8zK<OtU%zl5x?JZX2q!im7hSCSy9HiN
z?-QIFSOD*<&w1W{vRcG}DObs~=E+Z)z|t_@OJH>lt)EY9PXUXY^C5d-q(L?QC-vJy
z5^sL{=rtP-y=k|Z(eAR|Zq~!oG1Y@_Jm*%g=i$a^ShVK3)FItTS)!vGvKn^;{^9OZ
zI`pl6%#w|}i+67!9$173ihx2;6+<M&^f@#0_{CpQSoBC#J&6N#&fws!e6ee+Q4h?8
zx6oe8fi&4fE&)<ve6jsEJ{D+hta-W67?3fV0N^weD(uG4%+vh{O_8>g$b<p{D~sc`
zvW;9UQ0Aa)8a(zx+~W*dPz#Y{298ADq*>nXdxhgzhQY;cv=Qc5P<T@r@UTP2WRVIQ
zfntS(7c45_po#I21t7E&HGgTtXudCk{_1UqU&*H*Iv!Z}l7RBxZ}H0^*`!3I)XB6z
z8gvPE5*0v85vR3RZZ^#C5XDO3he7z<RA;3jwykukZsn(MZk%1+-5nXS0lT``cPA&)
zzk3Y5)`q<9cZ|<gWsVP3Ww*tm9f=dSw#dGtGSREG#fw%pKT=F1{x}<}SH>~~pe05$
zIs=;9|3r5reg>H&%X6@0$)3HZUti0XEG*#PUeET}mOOmJl^(UQzpB%OehC)LosEs1
zjhVi4bMg|*;>hol&zFu!bEzQ|ixiGGmPizPidZeov$rQ|v6R*km&^ENCZ~X>Fj8(k
z2D#3j%S1R37)P>Z$-604gdg5d3TbZX;BK~WjV+FsQXh)iSr#$cyAAiMJg{pYKzOrE
zMV8Zm7S>xSt|~AIx{^8;x6-1m)0Cl?X&ED~;QHFeTzjt#c|@W*bvsxiUvJ-F6%<M&
z?68~=X>Y8T#^o1P6g~iDR8vx^S5x|^&AE^?ID~!|N8&<-K7)T?5{DBltdSKP_hl#q
zO0PH={${ncsL)zHWTDEd0I3-75w#xzT`H?@j+6!OD;1=#3(zwL;K_ABuwXXauB9Ii
z@#Ptb=yxA2Zz=wGlaYt(^!miHpx@XGFj0;o*=;27UCI4}ScdV5Y_G`o<>_?)R)Waj
zTv9Zk!zH<8Z*8qgIuETZi=|jN&W6OMPmD!Sl9&jK$*``BYyeK1bFAu(DkP=?2Pa;n
z5~i6%5s>{^obR^s8G{WbqRHN_qw<TN-UoZe#_dI(bbxsEmD5)M2y7@gL?%v%n`_m;
zbx*bH%S9;|7vMs2E0=}Zp4U&i08#9-=CuHno^*jYOR-`Ta<wf!4lj;Zj6g6e2vQ2d
zI2?DlIM|8CLqv%SxKHZKBaT!{Lt_)`sT`JX(JI**mN`F&A%Qg2g;$X=ynJcyWF81b
zjjA62+308MPS4>CI#n!#M&V?_)Ft7(PWziKo=xTIU5nzD>Twuf&Q~=mueLrj*gbEZ
z@@KieSUU5Zr69>T;cA%EggnWCQeHx&xcj(PS!AgVCmgfbbA+#BQ3T80ZT1=~NzYce
z!Ev+PaL;<r!RZDqe!BS3k0=F<-uJyuGtKObGZrX;ehhk-d1DLKe4#c)uBETrPqT^R
zz7EIcOW6g)2e>oaA*U3?v=~dTAD*5MI}WjyR=+Qn7W#T8QP5Zm=}#d(`yzP(tY&L)
zs7=MksQ}FJ78w6BhS$SP#MwZgAE{nH6l^n&@4Vis7?`wW#w9>XOxFw99c|Wr{OyUm
zdk({xo!d6=JciM7vDm!H$d|Imo$j8Bf^P0@LuceIrq|sGkEmRCdn>AJ`%`a?-6z(p
z89!h2DFU8!8vwy!r(TR}*h97xVkP!#!P@82A#dxM)^&O39@wGE2D<eic}&_CAMI<o
z!&FlP5I-ZS!=QyUohg@tDND2r6Z<*?ch$A>7gP|`(@SNlyU)71g!e57-|bU4rKwX-
zPnS6k&U~vzVCTEVFHY|ALBEV?bK#z^amm+`lc%rYt^ml4_nb@LF2l&}`%D&YQ!Z}5
zm-3-Sx3FYN-KC{xS0*3#%sD<<QaQH1X@_XpJ%x4aJBQyw#>eZxo#0JYcv{fHYcndV
z+BHsvLU^Y)TA<}JvC$Xy%a!4o{F;FTq~2P$T6Zql)JR10n}rvH<z1TZTxnSh$LKDR
zYqK-uCgQ@(NFPVb^7T8*+EhF&_(^pGQlL$)=!oZ0G1nJN4cd8{NeeqIC~Ty+m*tNt
z7O%v~5>R}fB7We2e5%V(@N*wv)*c}>)htzGtGP={p92pEug^BLgGtkDq;A@rK0dF3
zF?gSxf8ZS<{ULcUKA}UN^6jLoFJozaQ(`9d&JcmOI^XhBi3w&y*#fD{XRDH9lWR&x
zLcme?08I#ZE`XT45Av{kDY4;4*!y5kI;^KtQjnq;y6mZL?Ir~&F_S>}NYQ2AgBSw2
zo@(#oNe?PA)a`_p(m;ViI&c1L8652T_}~l9hmEbxw{2$Q;#93%=z~@ZS?k0|W*3ad
z?9EpxbR&5~LX-WgEcB6aNz42*W_kRKS)~8xC&z!uLN>-O|4kPDjTRK7vJp+lhT!$0
zn#c<87iyfUPNKj%DGnorgaSmAu5O&IF??0rwXsU03$|J#m(-!(YWxt`p~YMM=iK0$
zDuKaSS3G;G-|_Y(w9d!-`ZGP;pDHVuvWf9#k(7oFC$wTya*f&&-W9KhU;IM38sr5D
zZ0r%uRUPZEf~XK~V{Q<aR!XO|soWU5K8&}#Mj}DNEL+mzbP}89-~}3dD|(#IddRFh
z3#H}vu&?({zxk3*rgP%+NFR<ZNkrdmjpMUNW7Dri!|JL(F*LXv;D5~%VNMQ8hFn>V
zt$vSkHvY+92B~Ru%<B3Lw1O$0*cz(g|G)}?M?Kz3kx1S<J}ybt<Z}9lz$67nVb%gq
zPkT^V!)-|FDXM!91&4JU*_pO#QP7`Wz~gzf$7_{H^lCj;LjQ<U=O%7t4U(RN`+4kp
z58|V429F#_6ay|XMBZ<_28bMdr;tS(<K&5hSvrRdd3G3GvgVYF>7Bn(LiE?#r;py>
z-ecl~DgEn1pKKA57-LbSbP*WgEl~$os4<Ipl~fC{5Qqsk+HU6^EYoHT5+{kv3G8Xt
zLxjvpAqgt)d2-wEd<dy93wp;Xy*6Mn-J&BBBg&XM!&y`;gI|7!YHS#C+WfzQv<#w_
z!gkwIl6`p%dLbsubS(%Pg&l42p_SD`_*H~eF$R`K+gDn%!m=>W9%FF3LC}F)X*nW(
z<LUbE-Os1pKyC?Km5Oh!FmFftwXEYb!(_{Hnd=%}aW$!sw8(>Mrlq%9>BZS)sV2@)
zh-r(y$AUAdR3(ZgLCd~N;TTVD*K^^~WS=O$a;I`DCXYB7jTA&x%(DR3+060$Nb<^V
z+7hzMQ#4g9$&d+gKgtIGhJwGkJ525LM<HMO%tF$mxucDjnPJ$>txCslTFK{P6=S<?
zMAQXh7sYEhB0{dQJ#&d`0viH0G%W<dcK5=^{2(=)EH0@Rmw8ZESGmk`FS#`c#7Z6&
zR?H|pdI^(AnfJA<@HLWp9A^<g#$oZ`2gs|(`6Jq)!-HF{wP;P*DrU0v6V0;Cca)oU
zlaUngg|uT5-L{BNO6s2Rt)R7_BXkPS^0)W<YSnVq0=dh_(PHii1uOOrA~^30Iv&x5
zp}!>lsjhuR;8zq`V>J5GBRRA@lo3UKgR;)zX@&zQ@Q6QM&M?|X9f_Ptmm!I;rgC%-
zcX&Ru7{3hm>s+AVUAnfnK03Cq==co{g5_M}rFX}$!m+{n(1+V;VeEvb&U^#fBCVyG
z=zjwRjVQp1lQtg$=2f=jiVV9%9dtOO?+$^eJ>YcVF{`O(+P6{KM_UI~+R>X)PqM(V
z%N~$*2Y}4$F+(i6JMFMIP1=drAeuAcMi-AkU}Z4%5h?{A3{YnBEWW9oZ59{>y(E3O
z{%KgVYM<gut*)!cc%PIRDA0U$l89OAg2?`a{-2Lm=^uTF6S_ta<Oh?8|6_B3qRc-N
zjDxYhk?wz)cmESMSu1P*v=yUxz0|Z?6e)*lh&NOa7J)#HT16xS7>KL737QPkZ%?l_
zG=mHJc-=IG_{H)DZN?mY*iUDDD3nBQnfjOH=yAG6VnpDL#LSK78nb+xqPXl4C2pz#
z+J|t<Ls-74Fst7^II_l!Fc{wIloQt|0P<)<8C!2t_z*X5OuwJP=&hvOst(-2R2RJi
ze2qMD&W$&9GvC7h=GKTjnYgohZ*HzoDV+l1TLx9Yq1rN2v|BN;T1_a2kIz3vEb+td
zHO?Pf$I#Y0bOn~6ZMEMY@=MYrSxQEtqVnv#mr%-=kH${EnI%Fk0D`iHt4+pwPLpPI
zxQTL%u4jhv$ZPompM@}Zo`+h-;7PV4uzP1td#p<*=|1|9`h47W>El!+sb=)wkLuNh
z%38-x;J5LmB8?Qtkc}V5h-;Snl}%Hy>hgB3U!)B@%e*$Z5F7_E6*wo2a7WFzM@d{&
zrgi~dG|;TdrGI$rtGO<f!XSwA?0-U_0VleXAHr+p&|S1#H@;?1+YR7C4tg5(z18TB
z1<(~CSKJS&DE?SCKHm()OQPFk7K~-3oV?Dys>ExrST-n8<x0Ed2gZ8&>5O7JQI}SI
zpO~E>$r+Z$CzLUw-M7PTd)FVqi0&fpJYzf_<dGXn2m3ui>+oxwmUFu{P3d+7^gBdO
z_n;SK##{~@`L&g|Gsw)1@J#TM={lFWzSrF)f9h+>DEf#?OC(!pSULO~ZM_{@Ta$U-
zk)`Q=|NC6Bh&mLq>+fzz<I3>}hY0NMH5Evo*WN^9<Ln*P_`T;0JlgVR_>2!j9#WP8
zk(xAlgzv?C=QKS`6LBOR_QLNC%QE(I>coLYyr7_Osw)JD59R0@hORkY)KCK9Lecyu
z#8F4wXnuSrqKnL66U!O7KKdu}VEoH;_oBJ5+dw%g0biC*#8svd$x9r&;2u!A&@|y0
z?obd%2^4N3v>p32#WS)d+Weyh1E?MF1TuvyTW1_20T=6#OzD{O^BmYu$6pvzx_v{|
z09f+1OV(#i2Zdxl$OIbHDw=yLyocvA%VnMH;d=C8rjau4DZgD0NxPUx@<9u>9d9XP
zn|En0&B|s*D##BbITEWyVVadPtwzp88{Qra{yuHQ*TvDoi`p=Ox3ICb;Mv;pdOd5;
z+!CRVAgBKN%n`?ip-eG1+@R;Dq$Tg`7sPLJ`3jab^2cMzgdPVxyPih4-}R?r?5+Ub
zX<7%EX}2H_U>^Jxs<|4AG9*PPDVF%Gk)TD=zatT&Ww;2@m{yCX<>Y@wj~U%4mL4fK
z#~hv8tgek2C`l5}UrjZ`v`JfTJU@|1b){X>uyeEV#MWLl)r{=G>4bMRiOS*Sdz~;|
z_X8BbASeI;01yEGU`-!?C6&#Oz+;B^pG2Pj;y?1rf>I*ty8j<&P?VbWA1pS6uWH@8
z1aCn2A-XKb^+fsrocMVJJpj{lIb8b^Cdudp<$25n-5u?-ZNQQ@1okb9r^|+p8K@pP
z<<ZrTs@*-7Nm1S5$j{H`^OupK&#RNW0Yk!Po>DqtjnLz8#OAhJ;!EY2CKY#t?a{w&
z;P<4|J*pQmzsj&?ey<xQQSdA~yI-KiSBxZDc5`v^>W1X#Cs}ug_0rbMPzTKH(@PM7
zmU;N!>;wEx22m*=OsuTLHF+4as5gM|j+a0%&GYq>6fuzYeDgnfY!UKQ<wB&@z;@0~
zg6Z&~&z&LS<%+7pzQPzCY&Nt^*Y14O`|EVqY9~h_NcO!Xnc;hUjhB{FU!9>Uajq1B
z-U$xKXi6Xz=_x4;(U)xL8E0^8ki;!O9Z%L#R6x;7nZ`nQdg%JGc2EYz*^<DaWi`)9
z5IwxWmEZVa&xkW1;@DXbb&+Y`=Q8mQliG-XE3EP`ZiN*6v>GsH;rz+o^J(eXBC4`@
ztQpfs^*!oh0Z-9fQc)lAm^M;lYkn6=g7esk_cyqVl8}2#Itz?ndfo+>ugiNk?fmsx
zjs)HH{DKxcdG2w+Q-aG4eti&e&h5k-qvkp}VaS~^hoN~JsugFkGDNR(8YsgYP@_--
zBTfw%?TWtsi$x;`DT1J)IfyVGB~)7P?e6+&%2u^E0fF&g1t_m7(x|tJ{#wKuFy=2A
z@^JcB+`e;r?}3`~h7n=aVcp*qo}8%sqcI67^wR<U<ZSpa=iU&nRN-rAao~oJvqX|{
z8<J*f-VjQ2E;62TpsyRq3dmAoUvxU5+VW4R1zQfp;n~r4PZXK?K_OU0enQnyz&&;?
z@m|2e2xhdty7UK&Z=GQVtH20ut379hRgwESMvi_RpvT{?C`#<xxPFFm#{Rc@xV0uh
zvaT>?4!Zh1NquN9UTwNn`mDO}QYgJdjJ^Hr!vS`)IdNQ=hFtiTWVhid{DsSXON2;R
zABwg7#;YupV<|j>IluwCKs3&3bFD@w;u#0!`r|Oa)r@jWQ#j|-CtbWqRKmB0&f!s}
z1vSLDzb?)a8C@3Jg8jwMa9X0zfc4fOyHdb@Q(pRaMZh6HMApq}fuS;(Cb*b$)b<&T
z^0Hln31B<7M<HZ#x@e-qXqZ8|aw(XCVi%MiojRG6JK{hkC(?@FYuPz-_5NlkL~j93
zXBfzjj@GP_-(0{s*@oN{-;{qb`lZ`!#rx(Ph=D3D>r|WKe8E~EPZb5vrRvtNAiVmQ
z-SFPMghOz8HdT4JDd7BL)HO9kWcycEBrMY<*PYW|Le$H~ER3Zv_EM(1{piSStTh~Q
zP}KFN5#qCeO<?H><PjeNn8Yd>gguoaCuGuM!1z3K@@n4{zCs~5PCI)j+c|1VvvzPo
zxNyl*|Dd?9tlX(&8u6tF&CpL!zG9q8$KOfZWI<lu5E?j(u|I8tf(=fT=DGPO?ZvmU
zp>(&N_UCSy)dSfdhbLJLzvB)h#I4aJB2hZ(gLWtwY1~kWoqtDqaYmUjNNvtVCZr>o
z5b)dc(@vBVFpP9Y(et_Gp*9AI5Mi9ROPWx;f5#>7k4$><=wxAkBpLh!ymf*|qC!Vh
zR~fJ|H?S|Wb{}z4Ge^`(0CD9L>;|)!P!5b;ZFUF<>jmUP%@F7l%%iNn-cGCLY*5_Q
z2j;zQc|=uHP>DI5aKFD#u!b&<>B#mwbav}b?_QX>%NZS>P1vHJf)dgiF8swjvc(??
zoJ2knx8Dy)gse(3iN^0ZGPYPEwVjy)EDpGHkSN8?vOh_oEeFU*S*Nvj1EM=I)k%TC
z=S@`2y%j^xln={aA0>GIbL8fJtB5i3(6Xs6G@ohQB$b0~B^Mqk$;l5YP`uH?;UdHN
zLiNO)c~3I&Tf0M+dN9ga3kR=qOQz&?h!c0ftUaBH6(?~3foax|Y+f)z1QHeXFd5p`
z<zZ;R;r?uf#n6S4$Ly`K$?lKSXGI3epT(Ue3n=I+v-$z@2F)Pu)?uCas-K?R0B>iA
z62@M<X~#El!JX!!kkuZ4IGXM;*d50Y0C>s)T&`AP!y3lU)O_D@HI#tl>vfBetdTn%
zrKq+|v1`Bb#T0T<&R+3w&C&<vtj#FX3Wh^VQDZFaAo6Mr8^#r?QI?j`<>mFo&W_H_
zo0reOHvnEmIkcbI6Wq~X%hzU)buR)YYd-(`QL|^4(zg5|&|OgfspID#*37{8&wFO4
z|K~pze^se${Ik^Hb)qWWMXm>0jqK6lH41y%e!g64_)A5L*(|^}k32$K9Yvfn`uAmz
zi)j9lRD(6bqTI3_ttniLiKFsqYF&lWeJglEpUmj$Ws3gd1>d2Aww>i37Xrmh3X&G3
zAGM{m!7QX*DbEiVg;K>@BM!eNT~KEZ#|UttL|4a@YF!MPteTRInCX9h-+IK7Q@-A<
z)!889p>Y3%gUHep1Axgqr6vs#Du{uiO<(5=p0ndk--<3yIM7-5yBX@vPop)&qeC2I
zA&(dd60Mx~U7&mGACZEuaVWXGS645&H&zV3;}+$MDY_dt87|szWPrCte}MeUi9y$Y
z8pInp*xnX|dx~vE5ja>e4>o<uu}4`U4;xOX=+6}t>9@-<KwogE=#@ql#f(KktmDrN
zR)AcfI`V?ptI>wi|Mpj(VoT^~70y|FU<Zt?f#Lj^btw9fNf$LOQ2Jrjy?C2IIc(gh
zL|>Pq!!XB8{nycKwbTeiT3qv_))dQ~(A*X<gE~5u3>Igj@%i28YN>2>w}U^97tOJF
z8CCT?>*t;c1*eW5+3PI|{c8l^mp4|F5W7Tp#JRcLM3Vr?Y_Z<!F;q9aC(LJjzutaf
z6c2tjTq9aC-4O>$4s1P4sxSL$T(cLKlfX0Iy^7u3VR;i^*ZO@C#ilG&tAAiS5rSOL
z%XM9>n-wUamUf>J1MW9fVeLFbP(mdY_l^ej7GTa5AH5#38sBvVI9**Kzj#)=-BoI+
zv}V|{-iRvdvxTcLdfx{6HUUrJA!YM&Jqd<WysDk+ql1!A`FXd`&39){%__GC=<>PK
zDjuROKzq@=xP;j@VE{aFz|%KL0Q`%s*h)-HVO@k9$3mTs=Q5M$d%v@XwY!v%W1^Cw
zZAGMsyHKV5^WnO{xIOdzF(>C?&VXo2Ev3Cmax-qGgK{hEfGc6{k|6EWHqdE*|2!a~
z+fUpd^F;H4%u(+*$7)MMhhGP)yBt9y3xcR;W-E~7wL}_p`im3A__F>Iz=<6bMt=e`
z<sDTX?z=X|kskXze(O`loof#Z48vwuG_u3Evn&rg)(1+sVi&E(dc5gcF(q8LGj-4!
zit>{G$YXGQyZavrJoFqw4MGngI1ep*)tjAg8LeKbq(32_@cDaYAYX9HWk?in1l*Ug
z(^)1FT98o>ne+TjU4Qz6EaQ;gHEZ3QD%5BskopS-izFu+rj?#rjh(?cpoB0Y3n&Z^
zq<rFlPGS<SUizHChf_kNe%g&r?KnF!Vt7A2CsyUre-$K`1$?RBfa8M|zdDG_VVH=1
zQv?MFoGD-fgkqm%CDa79HO_NOyqjQ9ZSE0=Gsc`D8`BA?;0a_z(%h^<wF9^mT6F*9
zuZG|A%x_TV1W{9ZK}Ahy-D&-F$xwvN>@nf%=Hhh`gE;pmt`Hbw#RTsWL-lP`(!v&p
zqiSy$s+R#8PvYFCaH_68EG#^^Z#{jqR7~ABMsqxQIV!e{SD%4_cvJp`{U1R4$1xiD
z2PMGj$BGsDqiz1*JG}qY{+gKE80k8?+5L}g{ogo6la%^wHrRiP45`4jB5+zA)`j5B
z4SMaDwDZEP)qYx&fHd-{n;9u$l{WS2zPp)zN|+^}8aY=N&0bB8r#jm#9Q#(4NnG#X
zju$dg>n@D!btRQIJ4Qq!eRYyv&-%^Dw2B7ET&2)Psc2Ez2k-*xI(hw#f8G~HDaPSl
zy0ZIr8W62>QF6<RJJIvf^j$JRcCIk?+u|vRLI+>(ZT7#be~PR)>FN`98WzFYRF?bZ
zPGT2I*fXl)k2uvQF*Q|zWQpMWplt3X)ySIwuK^vyLaICw)QFX%hVJDbAu11sC7O)6
zK{~oOr3u9)xnplY3PnseLbZ|^;a|X;r>J((yvX0*Z7_Fs2H6q_S|t&jNBw@bj>V>B
z8SPO;2~$&kHw!`zTrA*Mq7!RwR-3%0O!i>=@4+KvV2mB1qTQp2IkM#RN=|SFLyc3p
z_vIi~vy6X1t@i$9l@UnJZM?TDvQb71GD&Q&e#*}L5U67%%0<8sMM3}chuhMsBrV|0
z$VqU-Nr<Wd@)iIH{(Bi#MFJ<OdM8mp-K+{>+vCmJ!oNTalUR@T8zC}hO!d5^K8F;n
z;~4)0iWNvBf|%1wJ{mx0<<Mp=fsf(%^EQ;|vrD-xL8DKn{T%cqRHQ}>o3D);eb~)!
zel}3+Ly$vejcpB{`&~qAt#beA$^uTe<jgvgM-zbu<jcLq+&2ks=PR;mM`i_-1pE!B
zA-YG#HkpF9@hNUEdP(B~FOkGpWwZ*SqF)F5d2aX$ON;suTs3u;r}>j8a;BZ=tZKu(
zU6HC-&#|Lw*D4Y}DA)(nQ7*(m5({%c5cd6BIHJ-+9w)%=Y#f<AFbeT+h@4(Ej_a6w
z?f__`hffb!_BrNnToq(5rOF)4GyL%UZEa7(nxb<q;hV%&pV}I`#XUWC1#V618<nx0
z?@G*!v*Wo@>!aPzx3{;Amy;V_fG~Hz@v(Z8WKkdVwgB^pEoN4Kis-X&S~WFDs>y&{
zp4f5hq+sM2mi&G#_&m5AJ^o>~tb+`F5W5mh>>9C5MllC{wc4kBkUJ*yDCqk&mZn2W
zbU#R-v!5-f`J!#ty4_qo4q{=42XS-8h!b^~tf}*5d?mk)fl-+YWr>f$y2pBl>N@m;
zJMW&D_8~;`2AmMCgX-u~hmQ3a%Wcl*e{pxEaUHZF{Ve4-!T!f`QXxfoT?LWf$|8zN
z|7-64H+OnS)%wpq>wnGNe?EaQqf?x#nYu_P5%!xW5pz>FwRjnZ(Q=o?tBFHyZ#t-;
z4I;;$G?|cVNv<{;W~!4rq)8&TtlbhH^?ssbF*4u=)*NvEzM%w06dit`WmZ+PoOnw-
z`1}-*F-pc?D-b6s6S3A0m4kasq*`inloOAP7*{%&QxSSw4p^h}a#GxC)=nE+1;rnu
z@V|1WP51vE#rTVFlz9vpqM2lGF1`M{Zft#n_d4moFT<iU3Y{eWxCZ9*gYkK|jhQpR
zv}^i|xEHpj-ha9%6I>r-61@PtH7rXROmJNa-?9*M@!RWT@e|ZWJoEw$MAvj;EoB$e
z=Ib~FZ4e^GDI&&<aSg*mS*{fWriZ$uhecc;`E#H%4efBgOcr0+0r-M>J=MKMZmc?@
z(=OimB4{GAROByCuT)|glT0&+`ct7BME{;Avu0#*g48`*IzmxdIMD>GFr&cznwFG1
zSog#w;I-`pqZhr(2}AbYRXD3yHtB4NA2)Ev5gBDppgd0XQ%t=wTppW*fv+91rGO5g
z!pRp}+X8q+^gMmNm>6c-9WR<$k`}Rbszd>KCi#SdLKrG2Ll+t3C$vVW!muvQGGfv%
zOiGTO;2<UeTBEpV=S_#Gn;1EWH>2>_%GL<ZywU=eYtE8d+NK5-*yXz}$VcO8s%{8)
z2clSa5`@)H>%JFnXhs?x2=qd(>=8LFslj3dvi=us+#NzHD#p^WyG(j5A-}8xSG-TB
zSyyT@#qy0>_<rBL<Y>v*bFDR<LJE-^kKg|ArlZ;>YpT*R+0Y|e$uoO)uMG~*vm{e8
z!DUDlD0Qmqdvdw@VA0`PqzF<vP6w6G>14wR2P*0y(#IXB;pI+2YL~*)LUGHAZCY7V
z4jlU04l-|}i5}eZl?K3EsZoK{y^n$Xa)HvXRCTqz13f*$=GU!j;89V~`tn?-`NuAV
z#b5raGBsZ32oHL9%sIU)eHhSf&0>FFssX|+4DXq7iJX=rK^liyP)FL9x!ZK!j<~gG
z%wph*+E1Y_CviPjvgvp!<0>|(x&5*YlgAEHGx9l{(+)I<=M}y`bj_7X6^U#1RRqRV
zAOb;)9Hhz?;x=#DO!Pd6L}3oya@t41$E8x<v*uSCOk+3OOE&`<LwO&_x05$|UHH4i
zH#n#fv3Byf&iu}K{g(XPda`7yr!>v_TKW#GA|H0;|D5yLo-W0v&+DvIKKI)o@+26}
zj8Hnlf6ky2VYIt;&V3RK3jtR5<7lb;!X3h9*?h*4pHH_5KHGG)*>S|kjV_>Xt8WZ1
z4+X<(h;olIfez<ryge&jkkDRG$L4rAQOmNa%>}&XF?aWpciq^BZ7cfA>6l4wYrF1?
zxe(H#g(8?j6qv&vLu8B4tA{O%`D<tRJyw0`wQS9HPm|^O{$5>Kio{T7&AA0!x4I50
zd03Q{?FroC872kNKH4GZf=n)CVeP^5@dFRKFmW7C!>Sq0`|_FBYcM89dm($j6gSu~
z)%*!Ph6cu=Ls?uBW0!}M3=sH_O{=$klqIzRwuD)=o$FeBaO0{!7>)NWI3M!{zzpRG
z7W=NYbs2;mO5eE-bSK%H<s_374XFxOrwmbG(I_It9cL#PR_tQ9<S!5D$US<WCN7zS
zIr`MVzPold%9T<|L^XPYqz*1D2}JckD@$t=UKh@f&+aRqvc{xsN2s*un1ZgRjzsru
z?M%&Qy8lh3Xq>NZMt){PhabV0;{OzU|DjSpgQ2dFjN*UmD*py_oqk-kKSb)sRjc->
z6Hn+gk88(%I1dm#V+PCatj7iZkF9omUzrfpdv&U(M_u8|Y~2Hr(7ug}i>u-OWI9>U
zvpR{IZ{F&a9c^EqQTJDqZVYb9qu*-{yzH1t290t%<T#>WbV@Q^!`p&GJ&M2gLa~`a
z+3B?Nxa*D<dKKQ{3wuATyHD~PVOK4KmVMCEXnL-6YU=pBhgSRFi`4I%JBP+p?kduU
zHTYFp+OaZ(tUF?#u-I@73!z_U$`Z@712{-K@Mg+Xf_t=J`czP^=RYmu9worO^0g3R
z2>l_)Ns^d{Z<xB{Yfb2kU>oDP&}+;!D4ERNaeyp{<Y)Swx#OH5*rk!6^1y=CG#%4x
z)8?DGx9eqn=2#C)7?su0O%5I6odRiCW))`PxpV8HOAaO6EbkeTR^p11s@ZW2xe^Gx
z&RI@<342^oG~En_36`19z<O}LCGy!4Ldn@{lY0A5Jog@k0sI3>6~)B9mdchm(Lg}Z
zPEy<P(`S`0?hE9_LTUYixLiS_qU}|jcYELlY7A<!8jofcXLG;U`5bh)eziQU0jMD=
zBYVN}G|qt!BFhOT0fACk8x?d(qDMD@r7eYUC2u=4VZh_v%%yJPGCc~)W)*4tB)^)<
zj79Qn+Sm4=XF2W$|9)AR#3}&FEb7B14Gd3!>bz_HMNWcq-BiQC+<W*;-&()uiJw8;
zS^&`|A=llEsAZdIx9bjWm(*~Di8@DShhNx$bGpl*EK6WlBb1faPb8ZU*?yJ)JqckK
zp^=0j5!CkuGKeqM4`~9Iz;2`&U};26Tp@3C%#k=l?hLuz-7Eu-BwU*Z2mH09C1(>!
zEf{JH+`X<T8qBy{yD->iDotD=&Ebsc4zR#?M*FZZOnM4ui<H%;Q^z3Tl|rMVbCg%-
z<uCQyBSc?7RL54oohsC&1dE#WZ-#CbWH>3QW_@q-S<p_$2fYnly+42?8)qjYZH*w*
z!f@^ZFhwVrnmm%Qz973>1L07c<sdWW*r0Pk=7~qQF+7RPn=botDN#IEh5F&V>8-~W
zGte`gVV+v0o7B${UV8Qf9)?2YjCfVURQ?{M4Rj~0#bhP5pKIiTCTW#yb>)cx()WB_
z(uzElznY}9f&0wgc({GWI^Z+n&7*E}AXj;){qZJC8PHA^<ZUJ3>7gyv9NJ40D5ZwD
zz~#3qcMdqYP_-jfXCg2^nKF4Fjz4>1rp`9%Yx1=5ptn<$tsorIdE`n86IPP`EJJD%
z-x`127P@q4j@kg#V@Go9P%mquE>j%tzf2%kAGt~ooc*-bpKWcFeo&<s^9-j;&k*t%
zuC%Yv-c}gq*CZTSbi2B3tm6Xto;28>U~D^Z6vYH&^iACzn|(djr+U7%BN-TVsFt)i
z<;t<K`FOuNKHSADuJ7$9G<=s6&e8|3b3zz|QqaBnmjvC9U&Tw6wD;PAEJhXw4i2aX
zlj6;R_IR#<cXwbTbghb48KHt~!x8#`v22!iqnAT>)<8q^S%%ffZ+m1G&dizWy)(U}
zn)o>j_Z%x0pBXV{(~N{H-B>${EB6D++8SuEW8}f?w!!5+w5+Ure0tA*A7cLO=})^<
zfAE4inPqt3n)>ZvfB#EU_7Ut$XY|j|x%(pzQU2dZDXVMaWUXu9=4kvse`x;(DwC8o
zZTHzxykBbA&v{`kP5O(r=FCzE=g^wsQsoib6>=!a7zPy$#k!fN{=V}}2lY=*(3ayz
z&s=q^cF`)!jym<3@%p*mSxbz{{3YDlBRN_InWeLskX31YQlQ8hFkNMWW}EZ+`v?p3
z-51>yf8zR?Dhx?*`zs~Qjw2wAGL2a@QUMd~&*t8IwiAYtWV&J3&e`ovj(_c)Pndb|
zuic1}CC=`U@e#*ATQmt9GLNlM%Xi?5#V-iV4YE?e&3dpH@?5!gOqL!~b<oUtdzcc|
z4G&hEQfbd`!8as3cai&nyzA(ByNZHHSGfjyXH)@qAFDpqv?cto@{pHVxRQN9yU%KF
zjF9}4&<S)`H%H9GY>Ph^;~YSdQAJ~wA_~WwzG^zYU`>|12wd>0B*23GuOTDf$Q>U6
zwmIaeEMy)f?F-GH$KKpUa!xS--02#lpdPy!L>6qbVrADwi-t{JYlBzQI(LoyxaKTs
zJit5m3pS)69O(C8EsJRfyWtrJI2j3St`l2s7bVACEaD6!z?w={z%~yv+}Ka->-Ux^
zixO<_4S$W8+F-3QIkeJJ@?g{M4ywHUX8e;$7AqFa%Pym|p*1kD0qZ?*6zrhyKa8+?
zjM+M%^f<a+u;LiO0|<JW_(ZQM^^u$dx0w>fWlwI6H@jT^HQ-<s9%1b`^Don=Ok@RE
z%K*OqH_#>;EWqEQ4UMADx*o86<H8NdZztBu;RTuz>-p!>2eoF08XTpaLY4liW#z?_
zpbFxhM(9y7S}J<9-9j}EJE+|CSqW)JuBDoS@-gT+j2K{cFS9)HvIz&#7Jqyg<6=13
z_2*ojCZ<&}<n^JCo}*aPy%=2`XHU)iy9%(#Oe&R|_XY96(LydwZ7-b>dtE||2rP`p
z1k7)2lI9bMpr39BqQ)E`Bb4h&jaa0Pb{*K^^;j+#9w%@Ebq#lqjl3!yJG?!&g<s$`
z1#OhoEfXj5d4>;W7VZwAUju4~E0`rzZcCS39MPz;^A|}2LGxE%L4bdmq<R~=F2thF
z+@3#~3LTGj@RZ@N(_k={cJxBu^qDR`@?RWR3pD=(+a5+2+-@lcjDT<HLdhBrYxH}?
zRg0<uMgdbcHMX%Z1`6Gdg|H;4%v~|cCeL;;jhj;^{Rt4`aN0)Kv9yRQ?_Zz)%Yvn>
zjOzR?Az1WMz-qd<2LbJY@MY04ok{Wy^grC_A2B%o0BYjypBw*UJR$r)Z@eoDJ;#5O
zqJLwAi&EKe_z6Yu8d24Y4_Rkoq?uS?9%E0BLtQ%(PEv|btIJ_WXhoWf2LSeM|LcX`
zIl5S6j%Njr-eLN3xugq~gm7<M#C$|KBcM?Z6+3KXKW#KtzY5SII5yLhrvXLXR?skq
zhb-va^UOE*>wUki2fGoKsxJ*RoiWWwup0h-@4~7Z;xiWET}M1S334`Mc%mxcZhlYT
z?SdE^{EP7Zgh@~oeK#mC601VWMhX`4XQ>A5G`buW6)Eg+a!6`TAt{+YtY6ql*k8-t
zEUj16?({eD<l%O4QW3~_mdW(8pud>;g)6r7nDR<TaMXTNfHa1Oc8Fop_$|5&0o7~(
zXciG1D%JR?#N}`}b-}OXFpy7S3i(wAn>h=T!cyP3P?@AMLk%GHG6hm`;G)^VByt^<
zAr12+MZR}$WaUJ83RkQhc;4rWlp(h7A)@ZWKhiE3vL2|xTj&sncJ#UPdPoe;tEgBo
zU~2a$6i)rajbnk>n8T^5Qp1zRlYfF1V)M-JRmwOON80}W_OI(o=TbsJ-x=Qf=-_lm
z3M9e;qHC)Cz<nYa5oauzwM)`hT}B&qxxHHemp&#*FAQf*{rmP^+RQ)@B)*gdvsj9~
z>4<`PY1Y@sQY}nIAs8|mw<mY8zSzChI9pMG?SvzlJm6F#drlq>^nK^ySST0$l-8s{
zEd^cNl-?<vpdR{gf1?9&Nge%*b)~6-gtuBx>Q5117%${lz15EV>yQ$Nw0iDa-sab(
z`F6pEl3u@-ssjnlz@h5Xb(W*sl^<1<9|}|nyjbO|!NK-dFi*RuXQ_P1SHOwe0Irv(
zI2hseIA!bzID>ffkc>n*#VIEXMpmu4Hr1*<`6hYZVxh%FF}dOf+X%*^$O+DyIY1WK
zJZwKnZzq9aiMH_ds9YSE9E}4PC^~1u!GzPYxq+-^MS=Heb<SF6(@Mr(UZ1y#>nXkI
zD(%-;V07_bX6#QD#27V{&H>A+8qIe<Lw9=*?sGJ=TKr(^<|D7pwPD8xT~ylllNRtV
z*>w!(6FQ{ks#=<vGZ*f3-kAU<isX0cWBi#wwRtA>Q@$3)>X#tptCSAk438Hl@lDrm
zSJ=NNJ4AxR<*Sx;vNSl4A1`bHUt1yP7R(vZw2clDg#}2q!K}DAdv1`KetCcxv%kb^
z2^G2B=d1X*NpdR?Z4v9=AzQ$qc38r1s_pZ-%j1u&<cjKTT=pS*N!pRrx%6#5RXl#v
zkLBU=ga6}Vv(YUzZlGnKCzztBh%NrY$grHxW-E}4l84-0E{Cu12rXGR$XBq0et3I!
z?$~ml>VeOmzt~tmZr<A~Vx0-DhUD1(_W75TgD#Z!1IHf$4i^7EiEtt+^1326hPFn=
z5;o@laT%veU0V^m1JP@xMm{ct8je~IS(TSwS??f_5{S09Wxunvkx4_Pt$`^a4y^NK
z<-}1ceQpx2xyF|A<)|OONn@)-E+=_sQJHoyBT3~gu9Np;BnSbW&+FCG{`2{GYv`oq
z<@>MJc?l24d$U#J_Is-GlZmaRO9veEMCJICvANd!#|WpYY>Do6h5~9Ij1N0q`K4*k
zeirWfZBGg7-;}}N?_SnJUYa;)<0elpY8FktQ8z!U^5ryz4O%ppoN8O%P3>(+0w2@y
zO0&At!g42bYx`Whi??$WAFOSa?$zk6%R0ulYu%v2Z@D3R*5<f2y2kB98_Isoi9eNi
zCxYFzGnxXD*<1}TbrZ{MTT=JzP0n)7MJ(_|)5gsTQJ#MMH+MGgkm~UX-^R-3Tdoxp
zpR$T*$lDIfKD|L#8}wQx1v0CQXN&V0l=`IhWg+J+K&k$(-`Kr*&^w4dXARw`i-ll5
z#HD%oJKCFFU0r|eeBA!f41P-fVfY}tE>~Tac`~~d7)x?f8x!O^_oqHHDPyG3W})^`
z<P}#w_Ll(YnLK)Xow2+5%{Dy_+P`2$JYP6!5X5v2##btmcT{h&JYR)EYal=fcReSf
z6r51Sz45)0t@P1zIX3XgcQcm7cR5?;aH1E&ZQ;0OR$;HbF8X|O@3kcU8vURXHZ;6v
zvgEKU&}v2-WBmOB*l^^%mp}p4Hrq&G%T!oPt3hSmv|K;VXe<*{DTSci2bif|Ro7XX
z?R;|YFh-kJZ<E!ca(draRajSFnW<#3g*Lqi0TAsY5+Swi=jf=(39ck7OW`9E_0f_H
zB;9k>xrV6Sd8|ld)=Z@g2$CmGtv|qC0QCUPT`bPJ-Xs&2L!m9}W1nd*Gd4=W){mEl
z^i@y86f&`Kb&#6mVyt2YnqeJ9B${zRaY9BOqv-6%dS`%5VkKi10e5m3W$!32yhNT6
zY6=?)B&=p7*_NxZmx=pL5x8UO2Bw9wzJ9GBMXAx_&DJYwOtmihYhTC42NA7?3|~kG
z!W9u|1f#Dij`08t;!K~$)TH|4{s}LDrS*!k1gh2V93{-q;kl8~&Z3Gn5#<@LNkNqE
zsv2B^ox8myvmEdzBXJT^`uKQGO^Bs!Ral(T=+|?BzG0Bln4hCO-ULyYuI~6<n2U)u
z)Dp@swT<u~y>DfGOs8$DLFF9@7p_fzB0}f=z2&muIXA2B6Fl)~(cf@j&w?GRQ6R3~
zK$3h{S;xK970pKMai1a`T7>3KB37fJT2>&|Tt}WmYWU&H%2BvCTzq{%F^=z0uywtv
zg0Xz@E)jj#56IUbwLW9cX(+#u+uyoGhSsr$Owo$zZG^7*)tjQ8i6vQ3;8bX{Wrpvj
zjKH+Qxbc6%OP^6rls~oSheocM(%MQ=7d=LFm$Gv<Ail@4H;8^>ruL!T8iVB`8SYK@
z5#t}J_{tH-v~g3hwN7ZHF@`kQ*%w97Iui^n?eB2@u_Dty(8D23s=ewz|886aCKq%p
z3)2FoFl-VUQkl!Hr0IVW0hS7O(CdqF+#)7rDCHp76*!>7^@=GsbF&7RPY@7^V`u^k
z#YnMU<C+4DWRnq(4X1mN;P;>Vb?P4a0Mmt2i$EELh73yhtcTl#Q(%!w1vaE|dAz&e
zn|22pmTMn=bp}}sk$x`VVL*_q^*Tpbn<c&)J(jRc;r4kanLoG^%Jw`{f`l9z)t5!|
z)kL~Xhq2tZ;j4l-ovjKaPRFCu>&&~nXqOI#!e@^W(r2-<gr4P)+9=>AUMf~)<azrW
zCiB*(xHXIhd&~(Mby=IxdZ91JS}?zzbc1j^ZeBBBSbF3ygCFl%qgOez0vHnTTx|WA
zuP@M<ssx^^MdTm7k3F5cjnvWu+`Ec4vG?kc>%_&;(K4qanv{H@W8nrI16t?x70oPX
zsrK7Ih%=x+zrT7V-qXzr9*`&cOkscV=A+Kyham*vaq>TEKpPdM9P$lKOR<489Q0eS
z1q(3kvf%$wI~*U6at1cILx0>_Q#Q!sTJooNy-WHSB!BfY=k`HUH251l>m>CHR3Kzd
zc#lyl8Q1JJVgyqJobRnBlFF#>t?Akke?_ccU$Qhp!VUY8!!pBlQ<WL^#pD@pHBvyq
zvq{)(=sm)C!Q~Bqqz{P-Pktar`L2*v1xA)zG~=Rn49F~SMhAI#qt-q;VpexCofM=Y
zQLJWU?rhOE5^3kkIA0!o0H!*fMY_7%B08JwT%MV(<j8ymFaID0TpOvO@A(MwiI3Lv
z{bIDXj**c<$*1Xg-ChlJ?DgAHNjFodMQLX@PLEB=KWd8;lch)K19I8>-lynuaPb<?
zR4WequV&MZSNRe*E2_p|`|%t7q(f;M3#wlYGJjn??ptf{2*LhFGM^@z2T)<O)PiTr
z$`qgyP`NowSVXU*gk)%0=hs-5P9#nIR5*n>3)lJp1W-dwzVH#!llEfq6vvOh-_StA
z8SbdqQ`81dKva0pAC~MC+#r#jD!N(}bbTH=g3SDY%Rx(;8JPcNfoJMHaoSPScVqp~
zEf1WhtDv1WLVpqcLyTLw0B|;Ri-J^`y*PKFG30RNcgwP<c_1!AkyPr~2Y4z46(vdE
zwnnBJfMf(>=}8l@ycbZvrUNf33CI6q>>Qf|3%9f#+qToOZQHhO+fK)}*|BZgw#|;6
zH)p2aQPnv!ANC*EwXvQX*NQ^wl8zUAmT9T%bSJNH^z-r|QT!|xogeT|wKSO-+ANGY
zQ~Y%!3(r{OG*{tLpBv~CZ13xi2=iUM+_tqP<)!Do`J!2PvBT)e9vP5RSaDyou&0r)
zj*j(0klw&WFn)vFq~wgPi$-68QDfF(xe%G?dwoWbVVpBlJl&-jn~{z3Q0GU*6=RK+
zfW0@7T3%milSXr`bXY2A`7Lfg*E<HI5xh&LC1=i%xFi^hwIxg+uB<F-%}sAeN8?UF
zJpyZbYmV}(O8k97n7G(UpDZ~X0J`dqu(KU=h=n^C8PThI*l~qiDQXWxkDAP1!s%}6
zJ;yP;Ej1X6&h<3-<(8d6bkIup(pgd5onq0d>!5D|$5~di>P+QZoj<qb5w|NQgtV|l
zA*cN(7N3UDS6E!)tbl977yH1Y<vzBovg5ekLvJltV1e*k7eS;8Hs~FOV5W8}^5bgg
zb7aHnbzyC3B(lQ{&*nW<qlOo&9l8SI&@PcX9?mUtw$q+@aYe=R<uDF0Hr+EbLP?OX
zkJaa>(BzFX$5%Jf6`l*;n{KWAXUP4_;#QEir1u9=m|#DJ$ipN}*=No&0fx4DfF?J5
z2u>-VGOf5obJR(P=OJD~GuzRalUgW2Vt`S>W2b*(Ybb=fqrC%h|6G`Fxk0U?bn6E=
z;Qiw4_1e<21N|3m!PW>*RkoXZa8Llp6BuT5OJ@vTW~i3aitr{KT^^*Rad}+J#^rvL
zt(y^Z95$!%qx=L3I^;Vs>o1>Ha0nNI)Sc4Ooe;ttFK5E-Kph2nN_urVP`=7V|DOcN
znV#A)ePZ>zu`W%7!aHkSJ7EMd>$CH_tD(m&5ftfW%giW@@xVniniUp<enNh#6U+D1
zprF#yQjZt23y&pkoEIMOJ-qv5E%e||HjRrxzyBeOeH(+LTmK*|QGN_ul7D$j{s%1A
z#{NGJ%Kt<X^HJXT2e|U5F&5QKS8E7tUCi6)55im^zUB|1yiRsV0_=c#xtJ<*wzAUZ
z7(b3|dOVrVVRjkCgow;28#gR;TWUv3$mEBgU5~e_w}6wj{w+e0(XhLU<3xDCiZgNx
z)Ns_l(<MM6i<vA9370gIr(nU3foJin)lv)W=F1Y78dz`_`9Q(aF!%>jLY4d^bWMVs
zX`n5{qEh<HucWJF#%c9)S#T0q8oGQ)+g=SMx%Imks*dg9%lD+}1N6`h#lc%>?$75n
z*!`4amrnJ^@QG}TD-`M}NI<4ixMH8RFj=ufg95vQrcI0aFG$#A@o3SPyfT5Kq|WI6
z>!p5c3kf&G`KpwDI2EQ38}oAg*&u^h2#cUs5bHvit7%?(9xk=>a!nN!C4DICONEPV
zo1F;))YK(lGAs#&Nj<M7hn9|Lc)rr@Y1rz`gg?=TP`aU4hu7pwiSvK(VAfCFwL`~E
zK~ol2jiS3)lU0tXJO$|^{u;eLPiqmuxmkG_KMD0Ehg((_D3Q2NMx-jp62YPg22YJ<
zQFNvuwbDv=>5GK3L3x}wxy_dxS3JI(w!PGm8q?M{7>@`KT<Fugd*H(K^e($<thu3r
z;8hmCn504}6(SQR11~U#$SCCL2SFWyqisB>8}ASf>$^wQI~N&<SD-jY>?*-}pK}7-
z^slPq1VGzl3s+22a@L{%eha6qT?|i9WigHu2WOoX8CP>yhK4&L<d>jH({OVkdr|6>
zCbndC`0fhgD)oy?p)wVdLd#ebcJ(N0B_dTZJvQyk+;5igQN_fK_^K?_xUm1`Egs?=
ziJv>f|4+f^AGxAn9_~-YpQjiA=6}l-{UDxxKnZ#_CeG$|#{b&`ovf-8yUzY^HKX%x
z{vqQM9Si(+B@$CGmpJk$|LVn31#y_atgG=?{AV>gPFEm|ddW|q@q^D7n@%&2C*y~L
z-n7OUetB!B7wX|1?_y-1Mzm}eI&UM{4<TdV!7Cf7H5&`rN}71>vG<baM~;%{hsG34
zv2G}Qx%;#|Gso}~V~P-OLT8ngP7*6%uG7h>9`Ptb-fP&&3l(jTjD@)GJ|CRATQfJO
zJUutxu!ZP)x>W@u-2)!QJUnH8!mM{rhIWffm0)=P7F}+;KbbIMFL;%;NKUXJTf}jQ
z*v+<L)7haXhAkQMA{z>`t&mj^wn>^=78VifiLWnm-b3a5P4cviug2}Riz?=7>RXHS
z(n#r0h9<CFu;<OsB)*caW)&-L=~LUNYkZiu#MzKi>?lv-D)VVXs-A|D#6>Nef-g%>
zGR5?SDjnurFBa33`WZ5qU*G8UDn%QX$TTG}i6)OL{vwe;P&oMleMLV~(5qq1bRdMz
zH<j_A9`~xsGIke+NtCW4cr*kMr!Tx=WD%FsWBa4l;e#bo(@3R4FwBipeel8cua&%J
z+x`hRgC<b##Yma~0AQC@KeMVZ+LeWWAHxn>xByPWHy@p1>A~O~Bfx{~67;+!%W826
zg`gj;ly2)s>OsTp$k~G7n=9w9&#I{+#niz&lmCOXIUkC(jcPupDG6KI)%*Q`LKnC1
z%Rfy3%WlD75>`tWy)7xFYHAu*?!?Tf{5U@NKmpXZO@$0VY$xcTVM9aU1?fa|Jtc5m
zjLRG)#j@H`CPkA?>`ZqUJii9@?Wo~^WFG<p4+`XjpgznA+M@1IHfd0@^-WvJbn+>h
z!x_yO9AKaudYn}XUbkNMN*K$Yi#{M6JdA@PtErJ}fhOU1j6t?qkD6pUp?p%rx+i0D
zq?^9pH1E#8qphP-9HClfTOPBDN>5`VjFY&-%qu(sp{bnU*xK1FQ$iFprfNtJ+?ebj
zTU8iFwAF&iB8X&RatZJL0BV9HRQ}M0_E#F?4_OPOP32nly|G6b2LRWhB>h>;p)HM5
zFP$c2+n>t64hbB-eh319ZW>ngNyXHUy4RHWlnf})9#GZ#hAp3?aYBE}mha3^eZ&;o
zRv%*&pWB*#4FtFSvX_T?jLiL6CBQ9enV*t*L4Gj+&|;1fyAGqju(UQ-Vg#^jwo|fD
zO1apJD%Maq=gpbWo)78%F$qT2yW7W9V6fzFHO`1|BBNm0N!DoyAU?8P`F+H)HR_?R
z9R;{4vVB0}Wq`3)dQyb4aB)4s_b!w&V46)cTw(VQOD)3}n-2JkYzij%Q&&&Z!J(=>
zFL6_;l5B1(>YD9sgAx^Bv($t}Fa7f#(dVy}rW2l2gWB$e1j@d);S~q?UVqw8mM7#M
z3N{-igTKo?9rCV7D)G3=IxCn{`Y#hCLUb-0Y2G(f^afCx9-!*sP|`08n!7RS?I<ES
z@O8^&?)iA4g^Rz2h#3fQPT%WU8D|jCTtgWW=F^nk@~ac$k!)@Nj=-!})<-7{ocD$t
zcnjw3S<r(s&~Ti2y@jEIQ%b2SWE&f=1J6T;6Q7ddT1vQ8>u5Q=x;i>K-koo^=&pwz
zseJ0lr`+WMNg{y6=7)i>I5hTMweR#GO38ceV>lzOwQ{z=CLh8)zOU6BFV(pSK5Q-+
z$Tr@s{)0<}vx=`wiKu#3{@jg<#aQnI;S^jJ-pqKd#C5p63_=`0-~Ep<JThc02WyVf
zQ(R`2&}wZ!1(rHt)3;ZBz(f7-<38=3+&FL&PF}K6Te_l|6D2W4w;hh7KBJa&U%>zQ
z+5U%4KcUbEr1+CzX#SDc{<SkFFCz2r_0azsV)!R|eX@#%)4nKzZ?4{4lLrHB)QW_S
zWp=GHU`hk!L>@sWDqop1^KubMw52J?uO40=PIi#NWU@5g?(S||A1dL=)fSMT7dX=c
zv&cGdtMe%IlpD>N?#%~{M=4Lgw@chkLE5K;=tHcI874INot;R2u=MkF7Zeo`t8?Bq
z(QvHd^I+c6$~{^u+SjHz5<PINT>FgxE-JfT&UUbIH@#nS%NG*UVs~iYQMXYpA&d<v
z+s>DoUyGX5J~MCkLm4tvvT5Ip<$HY1FA$|r$GkFKHQBr1^;l=Z_G{yA=uhyuluuV{
z2Ol`MB9W2nvXhYjIVbYJbIfMUvU|xgu<im|5BhBVoeBDT80P&wNDOm&0#J&NIVd%|
zlH(A5Qx9klU>}ovG-`?8xUjnMY#71#?t3JqF!al#q){brqou(nAeP0TKT(p|J{!EA
zYw{>&=(TR68t16RHVf6O%-J=r2;f6Z(E$~+3J&|C^t+%u8PK@HteD(9BjYHUhOpF~
z*yDcDk;^7uV=s@9Bel)Ls@q%oV6|M#K3(_Sl|XOkWDwGGfoBs8{vjHJo)Up0EHPXF
z_cGTO>qSk1GD0JV$P*8OK#m_K@0%nWZ6Q!a9n5N%yANTX4cJEe^OiSG4tUoP=I8V3
z&4*P>x@ICk0xBIkGJpv<pFLp&s;O)b)g%zZAbCcfK8W&1*xIo?6Eg^Bhvi6KQXJM`
zoq3TJJ!IdqSDHD5OElfLQo*uZ&JMvzTm+>kxWqY5jHP!qbL$E^?|h#!iO_Ol7O<BX
zH3#zdp%l+(`62&e^kSMqtg{Laky9wxd`s%`{SsZ*9QgF2TM`>ZHN#e^4h!F=Dp&<$
z?71olc^wqsbnTHYYCxTl<a6%_TLbZ{j0))R)w;siRhpWju?tKNQM8##6vmR=c6$;^
zoR#GEq#a{af4l|kCzY7|B`+p|ybAMGh7_Slz68er+*yajwfhE>v=a9Lvz<_&Ev7+P
zrlM;ZR=HfL!5k3Yr3`#|Sm5=CW)3rM8cdLaRGZI{m^(No>sj%}Pi;w}Xste^$y;M`
zcVyM0u5%$j?JN62V9U0_BJc^jLKfsf7FLUeA%FTOq!7H|I47E9A)WMV1O>PN3PB}&
zrHo=p|BdRm`_cvQU)!gB_E0PG;<yvfWm6YL_e9kuHxo2P-Nj*hD@}cCmgA_~Z-Mno
z;EyMDEwm_HyXjR1H8-$@w)ghh@0V_4Ys!eKL%ZLh9q;coY<zy*?@fj}UOL(o<!#YY
z*$`!5^s-9o7~r7Lnr>~wX+&Jy1$KZgg_BcdoSkwORe@B*ABz~i=ZGD8A`&YW&~3A(
z7v_(@<54MYdHMyBbEm+|#M?M9YWFzH;;^H@2n!s3%Y$!9GZZ*t%sf9hUY4=kQ=1z{
zT%!vNX<KNf*YkootFkmv&b7<;Y;D`JW(wR}U_-pRYQ1l=y1*c17o*-3C^r1hV^dHy
zJdMCl-qnige;YPMg!IG|<y7SVPn$-nu-0rhhM#=84QJmCJ0h&tL})YEfjY^{<i%L2
zxx{rTqekPIS;h=FicE^zzI|uXLk{DTtkGc+G%}7Zxn2pA2?_C4vqFG5Io`R6jGY<Y
zoxObgn6&Ob%zrh+nek}Sp6@iYjjGrv<iZ>Vg0@Y1q6YJqWUklMid*#<=F}LoCq}Mk
z>~jD}xet5uV+l0v8Q8{$Tj358T;`49y;2)6*yY@;_hL(v2CWepO66v(xBKxX6A3(w
z5zi#Wjad^mv^uoBOABR1+}Aq5r<x+lVUa&d<YvdwF->1&sQ=x~cNPE62@wQM4;SfA
z=<LQUg`IRN3C=jmY@}%6M*bZI8aWyNtB`w4!zZ^hA3u_0G{8b6zzVBDxJYEsF`im#
zRC)UQP@r0JAj>yXdq;XiN$}K97)e-U^sEfzR8l02`?Mys7MQU(=jbZ=7ETcKBcNBs
zB^d7y^{StoCA5ps)&;K&C3&uxTaS+3vTZWhR(r>!as2rPUVKi|4NJ_*X;&Mb+_ipN
zy<dY1?-z61w={eu@Jr-0aNN+ZA{yUE#dfLEi|$z~Bv;;aolPImguBuREVmNkP3xa_
zKp~U}U8g)e%uKv4Slo(y4|XfsVIfMs9iYmoMJ7N(Zg_2G;`z4KY;r&aHukl1LB(|!
zn3mZeE2C>})(HmTLGh{P&yxYmNKF~@c=9@Fckv+9i44s__x1J?mzqJh?ZNXvNA!Ya
zQ1ogmBzxZtg0hoqpi^6TW`?g~-U{F^)xu}#&Wn;%$}h~cR$L_wF7laNzyq^F+5DDi
zwglx1#Tq2uZ65d2;CV^YnE}j)pG6l~Tq9KtWTO>RZmET5Lsu`yw%$C1zAT`3lAvnL
zdJg5l06csllgz>dNZmpO*iUC|lWMj>r1?6f4gszut=&}w_R1EOdIP{~v0#{H9J>b0
zdl#mL%k&q)qa-I7T#T4pjr_2-eOKm2`5{Gsr7?}tIkl-w@ff2j86na4N;YN#Z!B~n
ziZ8{L>WV3VK^($B0E3PL?^#NrvdHtVq4nhbN^KCrP@+}*jOxKj30DgpsA^e@1a0fU
zGXN}bH??MJ&Z3M&Y|ylXFf8;paH!;4EZ~%a-3aCooc;>wyC#OK5UPrQg;OO3nkAgt
zCe_=K07K5fclB|XN{tY{k<Ng(Lf<L_P|y`<=fy#e33Q<O!5Gu-y{7=r5fvp9*nr!0
z|H34NFfVa9C~I}&a1-}{g*j8;Rq>FBaGzk7OE2V8OQ}{)!4)d%4c`+rWYnm}<7*=l
zuBNFIJY|p)1Vq*sS*Ma~VrHWPAe2(c6;3lJ#`+UJG^wA|)C1R}?drKx9Z-S_flXV4
zOz9|)p3N*=pabCwue>3%SHSnShw@_TrKCkIDI1Gm*Mmcb>1L<w_L4r!K83yOvq9JL
zI}s=4bqF6j5AC8a(5EXhBAm7=Gf_L*oQ$!Khd0v|3VRxR&`f~6jTQtJhFDOAydV_N
z6BgPt^8sj|_>%>|%;E0U5`92csUN!3fQ1sW_tnhmGF(p}d9r51oIbwX;r?JlPAsNC
zje(F9L^8%FA>d&Edd~z0Ac~66$$9v?x-n%+7Ai1nqqhDYUG9H9O_-Y>`rB%j0t6(%
zv=hh^Ym5+3?ed%cAx$Sp#X~{i`LkLo+BAyk)76Hh7j<KavLu8G?B{A21W|c3CUh{X
z^-*kyJ0R#b_a_=oLuvU%dHPN;zvd*TnJ4Hn@%Q9w#}-T_CVSK<zc4jSbcnXlbjX79
zEdE2RCq!ZqrXLCt{W_6cq3a1kK0`wx<F1tnKkpb}gP`dlKyU}NF!1sU0T>g6ooJXi
zRNjd4nu(_uLs+xQ2~-O5O!snqxL~0XfV`4_qS}J)Q$RBq2f1#Pl*S1tdLd2U@)W0)
zUKPm6URn_oCPjO~ML8;r#xz1f6TEz$1OCfJJ<{y+<I2~D5tPWq(Svo5T(inS+8h#q
z%HWa7Vp$YXo9azo!axG7>tuY-#QN#&Zf|SEv?edhj^Bs-`PxUYnQ>eYNskhYeHx51
zWC&jGH_PELstO~eJpMHGH>G;`8e<+#_jxw#em;2Ekqb@i+R)?S#HlM(2)g&Dw-Z-}
ztXS#;Fwb>Y+B!ZTYs~JAtVZa0VQHbB>p^F(ySm@2n0hYyLJxWIPIvZBO#E_7@Ryxd
zE?DxF82!-JrR@Qn^tgS{QN6mgcKor<@^N?If)lm1HEytLsTHbX#Ngp!sjg2dt1Fw2
z5bZB`YD=UyknMXgByMLujuu@NG^^>p;9uOylD|C$WdbK^8An&@HMi3MKvl5w2s)y!
zUGDUMbzY*4tsTyv>(Vw#bI)h-s8hVSxk+A@^@#K>bLv)TdR<}ukOKWbuyMGp5V@dQ
zu6H-e_u6AwD%z%%jJ<roi?U@(jOav-RAmKILf%;sj4BK`sgp9Rs=91T$L*YLu{cDT
z0D$zQIbw@}*IUXG0rg)Xbda?K%@Kby@T&qFwzDVlI(D|2a;8-dI)a|niWB_>SS-xs
zPf!hka?juznNx@q@KQC-(;}z3%L4tGpG0!Ya(h{vPJ;z0T(rQZSICTv5ZU$Sav&7v
zbu4Hg+v{Q7E5(Pb?L-VuP1Lpd7mdZI1ItiD1y^u?NV<K>iq*FmI<w-FOer?v8WNeJ
z*bs9d>Gj6Chb4>0zrniWLGPfCAkUG7!UY!a#5MkQpp6aVS0WZI+fX;aW{WYp6QrF9
zJjr%pb(LUaipbG7ig9Zk7vnDx&H~^dH!7aj$|!R@oi8+K_JoO?b|TFF`X#zA*#g%O
zu@y18CND$ZEMd1Bg0zZ)8lRx6zr+g+p-gK8ETVL}Qt64yLlq(_+5)y=vJ8xa6q6L4
zO@~wH-#{wA)Zp|x0dwm?-6t`$8<Cn_r*81L%(|z^AkaGMrxtw?VKq(P4ayi3IhdRn
zt-BWUL9g73CI8*5ESM21n5}j?viPC6{7h}y!!a_(kr4M(*5>>nw&@bBY~r#B5!_J{
zoHs>23)@WE+<h{_w3y()VFvjt9Y_)JNrurix}1iZG)s(CD{e1CVx2Y0=mmuGln(qd
z7Ws{d=j*2LBi2ZoD4x;Tyt}H&)t^{$kV3ee15T41y<G{GUkmn^G|2)<OJA!k31GU<
zN%|&@SjHX9+46mhqMoPJk`x?&*-*0ubhK{T0$KtqD^DlUai|&#GwA6b@0)#3mS_s4
za+Se%C`lLb7h?P>y;kwbS_CY;a2HQqMYdZ4*|`rwS|@9l^vvGLFs(39?C>z!$y6qp
zAf!J4rJFnio@Yu^G0NLnph`{i+4$4w@-zDH@!3O|6GS<Cf>{-vutZWAP&Q!Uqq*x#
zU_P`-o~bT{dK7Iqfe>+y>L8qkC5-DBh7uO`kzJ)enM&g<)YDNOOqvmSQMCR5p6s3A
zOJB&l-<Z7kyH5K3rqW>#0dRb?fP^K2)xi%iame>4s~?!m`Z>EJ48AbbFSaXxRWzlN
z*%j&*glwLt1G#CLVs-P0jTD?5D=7J8+7;NMMLWC)@T7xE*3ge;i-`I=!Tm+$@k26Z
zE5LW*2Y9ms3q`3TrPUT>q&9f<q-AuVxK0&P^7?AUc4zADm%|bb8n~O_S!~7Jo?DRL
zjxNuAnVUElN!iMa?&P`naP&bGL=fzY&3wdOGR@K_w_oL6Te^AX!^@^p37fk<Zf8Dv
zUO$Q&WEb+A>8r0yIonIJH}!OqKV0}w%c$}^DFf4gkBCP(=<gWI;87p!sZ!Tq4fFt=
zUb8vr-U3ZGquVsQDisw|Xc1{t%==_}Y4y(;xX(E~^FW}!^C-n(W^H(JL9dO6v`R>=
zE)^;)WEyW8uW*hZCv91&G>3<?l3nT0DO{?FhNl3srs+!^WfuC<?m0SWxgB3c_{@;3
zgC5HAH?<Jy3dDCT?8~69XmwR=UF^nKU4M9RXRCFSeJmqVhDqjrUJs8XN_6PZGgQE)
zs@hA4_1wY8Pibldwv~c-c8E_Ua)d#@&cigj(dd)g#Ckq4q%@Nxnrk=EpDtKktc?DS
zoaEh8Z{*03a<!qU!WZ~Zsr>^!w`pzjKorqu3vkI6RQ0!zICBLF;pP1DqNbr`q=B1f
z#Q|$cgSN!gVJ6ok^(K1kHMb#cZ^G!^RFuD26}X!&S7hCBO3v*212Iy57S)N-h^DNq
zWlfaW)0L&`*Wvjh_u|lr1COW6IPi1TYh$(8Lk4DT8;hovk%79_yU#<F!~MdD^Uv4D
zHZg(=7cX+{bpQA{^X?VwI%!Z>d&j#2*YE8rCJuVEIbFTl(bJom-2)iku8VL~=GWr}
zpc!cI3<?xwL5sV<oYux&AWF3`093Cg3*;3O95^APmNPuMUp=^AAZM~~B53s5uw5fM
zQ9n2{JBJ{P{yhR@3P|Vq0Syc^;0d&8YhG?|F}7h-DWOg@ooM3OsD<(v5wx=%h$}-&
zqNBVO9FWeDNBK4`UiHdFcT;KiWJ=iabpBCc&-eiZ{+lmEMApZDu>}61Er~tQZ-o40
zK+S%t#{U|KsQ9y=&B?;d_CMT!f1)c@sqDnA|L96PJ%&l#C`9!3V@--)0z^0x@*MoE
zWzKTu8t_le%`59VLZf;+m`1)h?UE`gIh|Y$Ogr8?EfXX2gM!}D3d6u@u{pm4gXhez
zoE4q@dtA*Qp8#}p0qmsoG@MVE=I*`gqDtZsZdK7KD-46dl??Z^mm6fk&f)~yZ|%!B
z_CxrRRsl_*PVy<;v5n-*8gFTDv|ZU*^vu+qL1u4$C8D8y%5dJ?1z_EB3C@09LG?Oh
zeWUi5tZx_fgy!X6I3Pt2oH?@SOwviWtg|%0c}K(*Ixz}_y95SbE(r00G!zHpk3x$w
z29KW+?KvxGb|vEN(Q(VCWn>2`b4Q479o-z5&u+mkKNH}#A|-F1W03{tj@*6?gy{jL
zdG2)*YFL4oC3BoD48$K1juLf4uB6FwL{TB6K6Da26qlv5M!)dYx(u#{PW35qVNs84
zt_l$xhnC!yJ@m%yT>%*5a6x&kMHi>yk~5XL*Gr$QFRT>=2od~&OY9?ABu%2$4;lm+
z4hTmuc<P0~s$W(o_agVX@bQAsG9qO1YTSZxOM|?tPS#DN0TMW<l?p{LGT`o}jGII<
zYLdG*I^n6CwDC9vfvye-6oDCZhA#D7pF8n>Yn?uLZ<0FFUquArh%i-qXwJdAv05&y
zDeRNc0{1%iC@CkY4#(<S3u)^wf^0JzvdPS(j0_HAM^sDAhkXpIJ}E@hjnJl&#OrZ2
zAZ{5gR-?d8j620e`yTHA+>E3A!Y-pTsK2+ozlaQ*`#Q|4WKCD~<_Wwfg(0i3+r#<7
znCg}(KwpW=($Z)T2X;-ZNFq}2ld9I0T2s{+$S<!Fs!|03sv>owKt>jcCY~CWnz|W0
z=FiCr-s2SLsYYIlMvpoe`nV_Z&Y14$wIl@LD0EWwazlThgTFNfD%23>s9C%S_hbIz
zP)2Ty`HR!mU+WE5s@Gi|jFEY#?~>rzdhz_e)$z4!wu^}VFyCO6y8Q8beBjSrSsksv
zLW;mBI8N~C?6u{}RAYf37*-FZVPlhGDbyMR2+g+l0!g<8IKWIvpf=v<YK{)SFJXKO
zCvjj86*Ui^!1$p_iAnygJ436uQejyy5Y8G|2PKx+=>f2!T87L>q6c$;=}h`KrEB56
zsvYGrin!$2@5aUV`Oo!>tLOK;*FxwYj@bxP*AH6e(L?p3jFRpP>^}wMfB1gZk_?yl
zKeZ0NA5QweUhVSZU<*o1$O=oyiv3^O$HnUZz7_mL&*2o$6g(!OaTRZU(LWKZ3UCC@
z+DttM<_9TY%UBk#to{AWm5@L^=9p0c2t_7#=j-FPll{(-h)9@=ELw=27L7L?yg9Y(
zwlH=%Vf^Gmv+4`rB2bB8C3#0(P(lh_?EZsT!fJ0#b<xpoxRK$g8I(cw#66Z|Fj)Sj
zaO!lQY+B;8?VdA!yOVOiuiPv`;~?46{;ICFZwg{QT<ao=y46Q&tw>8m+nlE!aR+hz
zOV3OW9^r(DSsO}+)a#WylaH26N^qBrwx2l`V{<$TvTC6s8X|!(XOX&31Ue1xmt5w2
z?~pkF4In-Oxv%7!tmvm4h%QO2to{{Cl+7g%tu**@RU|F`b4AY{5%W%mE-JyZB-tQ<
zuOjfb3g`%@6*+~k3fWuCZ?8xrnkE?xUjdJfbuI)>fxAZVZT||Jz?NRRY3<37W37Ot
z97*cWX;aFIrmrV!fG?4Q>pY7=UY-q{#~f>PtK^Sgl9%eR9il9__^Z|rw5*2FGQr_y
zpSrO7C9Lac#$qg`d{Y%P_fN55uhvJT9ZglqqM%Lid@3;aCY_yn(s*i#ub06~UOssg
z1;0J!`2k7o-LyKGKx~xpGPD`;hy?MOrkNQa2fPaN6Zh!6A?TQ=6u?cz0(nGL&H%YV
z6n+Sw9|MBO%v%nJ3*hhheOjkaBm{{V@N7c6Sf+9dX8^&>zl*g{gcWO3jst7ncKyy4
zugilmOPH<U^1dg^1VeP<B?r@o-I1M#1@Z0?gu6F(cNjypH-z_f@U*CeYvU|rmhx@=
z4O#2D!Iu*ZQ)wlZy{sxTa7Ny%%q>Zl!*p`6a*83KJjp_9PkvdP|F$qMauh)MtwigP
z#+b?-jH|%YDi$;1d}3tlQc7Wsp#Y;$i#r;!vOI8TRe@X>d%rj=``5S*Cs}?&C|iFM
zaTfQ9W)6mC4uzZT%-23tZbnR8*M-%;TE2}UsJ6O*t~+TXqaE4SOGH=)xa<aDiz>rJ
zI^J?v$hwOoOuL2FO;kH-+KU>wH>Q5OrIQmE+UIuEe3cC5KoQqPHs&+xcf1$$!ElhC
zITZn<zKVauF>;D2tC3`)^cZ>!7nHAItv*?RRVM~lj>w-Wuq*nGhY0y#I<0B9sM79e
z6*u=la*ocbhUyXBlh8yJc$SS=d<UpA42MyS{n8ygvn@n~=T6puO%H%)-q{EJiCIPJ
zFD5TY&KbrsYKQhn{LGS-hS#^VzZ2#xu8qR7aOel`L#ue;C-{!>x3JHUWXx=iVK^vg
zFdn}qT%eplM$OaIoqwB+IN35s_06dd`6$M*X%->e-=w9Y9X$0@CgN`sr%MYn_>Z5t
znu2K9-g3}NaGY*GT^xCAi@{q(@|<gl_oRilTP@<D#%rhE1F*s1n7aaZnD|0zP+a4A
zWN3+Qa>T`6h-)C(LSqPuiwwE0j$$sY$I={b|58W}Z5=5jD_S>rf@`*g-g=>+#Okb~
z!5#3GufmS}dv3uH)FZl3`nTR{@6YofJb$@nR9;X{A82TiPJp4YG)37o%=@%mnvH|R
zZqPmQ6KW2vU;uV+@ELbw;r3RKD{<{Dyzyx{(;FmE55-d$D=HCq%7&U43;b+tqjdd=
zozbQ^BaJVc363((Cf1TffzD3a1qC@yvr?a0oK!eAWE!w@C3dxwwFXNgc0iT=7Vvz7
zl<2_)e_iO4o?YJp(50@DL{-DYTZM>%ZvcL*0kh6DWV#{t6YoRV(p<}!Ba0q4TlU{E
zJ*UiXo|xt|D(!a%JJr>N{GIaSmruX8tbQ4LTy6LdUJLO-#-We$ZPDiHMxEM?<JY<S
z_t%4a!@I|gh&ZoJ0MwmdVB30n-wv-|Z^v?3-<6Js3KA{D(T<7Yo8kt+T8sU>v$guI
z7@e(mId^f8QY>xZ5s!t7ac{&ORE+Lw+TLNxurrKdxIC>iQ`1N-(!<<Mo9OkEtvRV&
z+JI#cYYqc6&L~*ab7Rr@?rU_7t@!O$vJ1|Rd_M(4`O(Hn)ba>+B$%DUW^J1OMS{@Z
z4C!C)E=@Z(LHpkZKxNHpUsEcGVsU9YoQ-WTPC{Sc|NSpCIng-E@nc~&;sXGX|H~ZJ
zk0J0sv6KHKOO>s$<+Lu2<d@rHXn8YK1o68;<=x&uCj?UV4?-SHcL%qEAlBq1lmr`7
z{lM4b%GQ0KIK+t8dz?t&b<Wqd-b9a@$?)opSG@6xH}4y(fi>f{ceeKqH&g=$L<3y|
zubbGL^I;j(UmRWH5n4Gsm!N!)gkvIwYwCo$H9R(ps+_?RaX2FRn<RFgA`=%FcnzJ9
z9hW8r!<ASRza9@|6X5_)X1VY`igy$YhWDlHV74UDGnp`ttf>|US*LO%b<gwl?(3J5
zF6Iz?*~3IgI@*a^{T9W-nt0_{5A2I=ze&&qo0_Dai9YW^yI99;$)EvKQz;WcYjZdC
zN{)plA$$0&FLd08pHJh(nO+|NWrILC0noluc9ujejWx{Se%&em9vlUV8V_bI=kB-5
zLBZrB38_5K(&eP+-25U`EEHm`?w&!PSaKf1_zt7~fw+R;rzDd%PVfA7uI&k6i+P@+
zNUqM2On>BMq=j}$NmtwTu>nF)i%1%ENU2vtRLBjUbI9bCJVj@pUa~g*KvhIny;0{x
z>s683NTH^V<WI0zIFZ3_lH_X5^R4DQBdS?zx75RL<=vsfOA**DJ8$>F8G~I~bynA+
zkI%C0%=XRU^S0VXM?J5wjXvYLeo|9DFEcoEWXP`3Vhfx1+!`Xgv(4N><qz9bf&5sc
z2%eXhS)^l)c80S#bfNGedJdkYmk*LsD}MQ=mB?3WBF!J$GnoLdGF^7=zw&0%{SNDq
zn2K#^=Xq>*#S=BofB&3PcXl2MHI4eN`u2YNI1S64iV%S9mRZ(A%iTA2Bz{zB=bFF9
zi5Ma#yk!Gv72S!+JgR}F!H16j>zqse6$<8`;s+@nqK&duZ4Npe&o&}HQJHI;ot=XI
zv7z`^MnsY|nVktk>g&7iWs`vKsh#GntWnkh9e2@$3d*73?}9N)cP{P9!cbP7!d_dl
zzu-aveFoX)F$cH<yW@N34}Y4>18#pxm%r+qF*)u5)6FLy@X9}yJ&KI(uSNzB-FRAB
z37TADpk0Vdak-Lr9Z$bSPOd0t^ue}&%^qtSiQsP{k(Bm4@kBKK1biBKgzg#pGQy~N
zape?&Z6~EWtHnwOw<6@S-}_nqPAalOrECDHN2289?yn@fPbAGRO`%O-?y>gK)fJRv
zNkYv6C)92>X2=WvHNpA~`S@;!<$7Lhhp8ZYisdArFr?}YfAONXL7p#hrUQ#Od!sKk
zNRxljuy9g6@ll}dEG*-EFf<>t=!?NO`nTecXHP;CTJN^-4qP0@NDVyyK2E2sfT{#5
z{z57j4h<~yrn)D9E9T4zQOp25S-|bU6_ni8=bgkiWfB)|5M$Znpn_(An1Bk%!#h=x
zAj8-<6L&%f$khPt!3A1u>*H1Ew*x6*BNGUZ^rXdgVPdHCIh1jmxssp7ap>niBN#C#
z#q0E#3rlrMTYCqq{Hbp0f1frvAH|%vIhM>n3lvNy5gGkqKD#`;x3~YpG7Q5=Lm|sP
zndyT@*o;b`{W9;bRnXZef=@-Hpa6QF4DOujjuN5Qbs|J0n7JA^fPq#%ll#0&%!@lu
zEP_vyS4y5$=UF`_Oe1G$T2(s=MHy1x{}{_XbTp8{3WS8IQsqSbGW8mxK}*0QlUeWq
z4N){gm2V$q@s&ibv7BM0?h4b0P&B8TXsVc=AkcsPb8{yK_5X^a#7$f}kInQ+#R5k^
zsvbfy51`Jo&cy-c1r8z#01+VWfI;H7;e-p|-@wDl--i-c^^-tY8#vhZ(eT-l1KWk!
zWB$=I@-)=Dl!vASd!sgmy`Km7hDuMlxH}wFCQsyFa^;-+?NDumTRl*@8j}6st#+2}
zN9^A)TpH|dVV>aDV{rq{vw_sn0$6EuptG2~_USsWVG%PwT!d=neX<X0o(Dw8e5`vb
z+K3nI;Ly#HbvDjvpe+>!*mHqlu~nI&Rx4{YN>0cQE5<krKVnL;n$0EY!PyIEM^`$6
ztxF13lGV4Y;M}OjOBoZBI8PQZop?C=-9ViFd!}s_)4Nt?7)eOZpVwCZ!4znMoLDl>
zhYj0jdlLPAYRkE8J<7CUsHaQn3>7!FM|xO~ESF#hI>k7hqz1#%>&{qu7nAN<^x$#d
zmkHDF4d_at#H(mvbsSeX=hs&$UC_%#qFXFdiE7Bx6@0SoMx^U{o<uIHfbxeAFc>i}
zOIP;TqT9S}j~|HNai#DDj?!&ebh5JcM;ulUsDll^I@5G%2vdX$`-4IibQ)aq?-t5%
z9Y8EV(KN(ocAq&d#9N}%-T0Mi)uK{rdR*kpN@qZ5wwy*QyQVz+C|Gk3+oEuP-u6al
zr_i~n-@`b?^|v3V8X3j@s5V+rmO%3*8pys~R?4+I{ho);=>iV|mNC5a4ona<tF$tI
zM3fM4ITZHAC@IeY#B{CZEH4F;K()}cnU{)+D=D_=)FAe2$$G;Pk2S&zw!SgiaeDDv
zA+xZ1p~r!IGsnQS%1X^LOydj*3E=P;i6Bc`gxu!TP}(qR$gH|GcjQiT=TbnX(xXxl
z$IMyqwVk-gtVlI!ng`hX)i=zIk<ujD+0m4k=m>>`6_#VY20@Z!(LNfb8&qt>sNGAw
z183LA$<GIt_espKAp<nn;n->BXLaOG*UxUL?{VUrbNjaSsuh6K4TSH(*Y{ECR-byB
zlvkm$7z*5(-&4K!8JT7#76~;*pw=%mGmJB#$wGlXDoNrv^uum{%d-t1ALb4=S<tck
z0q%l*g)KoL@>?&nyKD!tbzA{RW`Wcebwt<(VgrSHM$=Vm25vgiQe!L{fkvAc^KQy$
z(}A*7Cpy15Y*gsX%bk$=z@4h!*lP(}%9ugFz?LrEAQZj*Wh>LyRh`2fCDg)V&rwZ#
zTVAz9;BDQSTZw;t@}XC_Hefu2)!_rclZv)Kta;=}TBj4k$<Xlv+dF`N8l99K$0=B*
z2)jB{l7-Ef+5;Dy45n;si_Wn@+BK-Ig%pTQTwo$?`ljlnA=Crv8aO#2UXOh%Mr{^E
z29*0ZVfAKJPWKzVAiT$^SvY%B<O$0s?}8asvruc>O^n9>Ms&4bzZ0h|B`I_Tt9~EE
zuecR#HoAR%0;7e7d~&0qC&guwODlIyrx~1qE!vyT`gQKx!<uogaLuxB)jF-*$V4(2
z*vB7&=&@&AFZJ!m(0|~HYbLfPfSvJHvpFqHywxk*>bML7@oxWUe~^(p$jrNOulw-j
z`}{DOTE(zcy>qa83431Y=??MpEmZCJBMeBBNT(tJ%2_VZJ?}r4U%X8m1O`zG`hc-{
zWy**OTAd$UJ!+yWXsh>^iu+>-@e4>N&5zE?S3HJ!7odaweMzuC%i#}LDCDv#E%N0G
zp-~nL86Y20ik7A{@&}f)vF#OsM8g?|=l5U@QF|q7_&9(cIpjhjKWU}#&+>G(lKF4%
z=j+#3kKM0k4)Ub~u8I5UHHOtpp_r}DXOz&J@BdO>{f7$bX)vq<`_qD##sUDK|Cgib
zzhTjpl;spf^n{ev|C>hgPxR0(4I4XbHl(j<J%J+pX-4g}>pf5N3y3%$ODp9jm@$fd
zIiRMAWOogkmcwe3&-YAB$DPKc%e)~_K%)4p=X5jEq}a9?%=gxKqV8k(gB`LcpRbiA
z_=%wfYhI0Q9v@v(N4Gxs=>p}5%1N)2-|=_*aRKAXb6yrE4o%e37SNb<HiQLq`D7E~
z83iM8=ERBX+fx~~tb!&60d(_!gad@1e~ITn6E_<;x}g?PGTBL|)wjXP(=|AH?SsA%
zru-&f$fL?qc;8Ou(*1?`{=`ojgQ!5HqKYDE=JJ9*1K;q&X%A%hiXJa$j3VusYn!Z;
zq0@^WlB&nI6}9*4z3t3pGNaQR3d+S8@rym2StHE+<IW=*Smtub0~{1F@N8~$>chqR
zv5B_MKYVB8cT2-3wn6u@Z{hvC;rPVlfD6DhNr;3$-;%p)U<22-PFJd~D1gHTtt|45
zd&jLwYL?sM=LP@-`oJ4W$%lIq(eweQJJIpl_!lAjgCTwA`=iqvXJ(`)?5Zf^Gefw6
ztc+IB@r>mT`p}@lbKrw0do3_15r%JOP&L6p2R{d&@k(%7P0KCe&Rh~K>LOre4vOZf
z4TKFLv0;FJNuK3&F1L0du}kGp2XfO#Fq`}Q)2zNVbBB+2YX%R)Yh9emL(vqGsL&=(
z(J}t-MkehBVvD|;auS$%<6g72#;X}c-|)O-^Ewwxr#<CXAN`{K4A`c)J}?q!*v(lt
zDF-iU%S?6uGT@tLhICPHG#m}xJ=-Kk0XRJ=^edDEWNc*g<cnmWFKKzb(h!)3e}a8>
zN$0G<A?&II1TVnx26u7@NY!m{QhQfGUUaB;mj5t;qQ=N(Hq%RnMb5c3Yzy6PlKbd2
zvfsqs)82wJl$<}k*1@y78Q={25POlV6gjADqtFRGZNc_v{wL-e2oiL62#J_kp5ty*
zGKk?=aX71vnKO}Z-;(@KjjXU{dY(ti3OCVN{t4t&PMg%bMyeY*4~N^K<xfK}{}4<r
zM@TU=d~lQ&e}W`I2m(jk8_DlM@9Ps7WR1)1FdwpI|D)tBk}&5#i)I1dCus_Jc<x$i
z=Uu0;5D@DwUP5Gr(1z4~jNze_Pq;+x;9oWC@?lsV58;J?fp9MUA~;kqIpQ0-^&i$P
z3J49^Kve-cuzKDqf^kDRa12`t+GUD&kZ#d1;}HQyf0<0Jn@`gCdm#?@Du$z)B~d|3
zbpg-psFPPDftaLs6!`RjiGK=!CmxIpyBec4!76oRJ-(O*7`+;|=)n<5{`vBBaSZx2
zwRLS#1m@~|gfY?ri9oG`rNu*P;Ot1MJ16{w4`uSEF5Q;1Uyo@*aH4T&PJ&<p<p-!D
z2m-ARLz2q@81-wkLFCrTx+2pG0g+I^`sw0E+F<UUFoj#ENcDhuV8mfBkMQCdUBqJY
z^aBT665vPi1wiIGR&S?{({&ZVt%#t2jPwv0KN$jMC6ANEM*!d?kw|{HFJfh~@ya0Y
ztI56+@kV8aa9x)W^8IyC8IyeHAxakok?fErPQ{|enT#ipC0l-4xfaVVLiCQ3hIoGz
z8HRg!`>doh@X{oIDXn9V2n!PGl(Y)p9BiFa@ltdc2i0yUYo0%eyRki6G~KVyWuog?
z_!Rb{W9Sl(P8e)p-36nK*|U@nDUTqt-CH4~tPP9UifxJG5SV}H8wfBu)!KQIbkSAS
z>Qg5qXx}y4WOPGN|KMz+<2~7OfwizX<KU2N%Cz`X1P%16L|+19a6O>&aSTPPesve3
z0Ee)y3xUPlp`Hg~h^fG)e3BaeHZ->cevm?8Wf+~uL1Jf%XfLkVRaGSwwX+h)*XG2S
z!hR4?*|i0w<;3C@?QIz7cXG*TlNHA;0GkjlE!$S$V`u0O*0~&c22?$ZjOdCaijPc|
zth-sT2C0cEFZOI<;saLsdho5@g3gU@<dD9Fk`Kq=fI2*2Zn1>LMS#M$f)<Tl(Z+=L
zwxpu@!+i{{XkMR$fCJ7{z((@=+<IZpW?&7XF@(jp<mmT6wY1izCn4AYf3belurexc
zc=O9IdA7te6Z33^5{Y?EBv;SLSXnf_5lt+W>LUjtnG>PX7b=TK25r&?IJ+Qpl4O<?
z!G$=>+_6ZPU2_UaQ5l^W>?rh;aab`hNr?izTU_WWzbPvZIIdRV`e}jA?n0G@;hXO2
zC3_lmG5Q1=riCcw)PUF^B~Bwa67^Q}lZZHE;rDR)aO3OY*}_M_H$#rE;CHSrDpL<t
zpv-z(9wS!KTitxLH%vK11x0}~q<&8B4b}3BZ?26AB(o>N3tH|#$ysT(>VzfO$TUQ6
zhDv+YM@R7Th14y$1-tKzG46-WlAV3&FY3u+rD*EqMVl--3>Z7o{E4xgd$-`dn*5%d
zs3p3AL`Zx&bf)1FHXiry6Mbb|H%_dKq#{F`Gm)Y56|cp+*TdO%;0MX1025SGUbdha
z$8;JrC10LSEZwe=^+axesjAtn%fBAJ-xD=*Q39YhurfJ2Iy#@XS8i%6I}1;mh`d;z
zdYGu*+Jd=kXu~k4?oK2>CJs}*2Vtp<3JFu?HDe@CuriLK+tAGIZIIs!V2bfq)H}ze
zVH(xT0pb+x@4#zPJ>qn92+N0s-$>ykj|Dd#?r^P&=cw0E!Tzr~uYg(XGB-EB;3Fki
zlC*TN^iiqEc|bGiKDPn83jFPDBZyk~bak&?JMzEj{PS5aq{N)gt}tvPY$66mMt%~O
z|8?y6hc6TBLlOt{W4^Baj2{2mm-*>qnf>&!80Z<9^%z*`|HFg*C$d;_@{Zj;J<Q0?
zy_&ik9etf3m;Pm=jA4{bvU=Ey!+egsIq*~&vr1yj#^>WnQVOhS%t2LskE`_w^7Ai5
zKteXc!T?y^=Qg>~&jstT#YtQCsq`(|MaiHAb63-tg-xc$br#1H3n3#kr!rHCaW!jG
zJr3|Ik3b<;p`6HR1D}aHsds9f7uf~}6?fVV+#s=*hc%Zu$Mxb0mpRr}=S;8_k%M`L
z)>~zz{^l*_<hj1Oc&F3iC`vHJIrcn@-tSs~1ZzA8e8+5%`2J61lB7~cFP{Uo8xwZd
zk>Fl8ymtjO`c^c^$l|DT0rQX+VesrL9s47h+r0Jz%9{04%O+@aK)pf5zU=o?ncTfg
zdPtL;!gV<_ycOF>_G*!cFRe&po6L=5AJ8gAsAGr6aLw5FG;jD(<ij^j**GhExj3t|
zpR4!hI(0iFoqhgvuseh!yN-M|p;0MkSuI7CdC}L;U8JNx4~t_=E@sHjFlG22@&<+W
z7Ns=aeIkRW_dFGtXwJM9EsW9_tX+Db0CR-J(+RX_NoK)juk0s^^cjj@i+zh!NFJI9
ze)SHh=yMuLobm<WliI;hPHSqkq~{(%D&Gi&lkcSYKxkO<tDM{#^}&;g=kO^R&0<k9
zmR+76g{yn8ury|3p_hS0uNZuUid3%TrJp6P1=s}L)R{TZ>L(o(3}C~BvGj0`x1K75
zI8KYA*sVi4ErcT4Q}SV#hqOWySw=fm@MFaFxNYD{dvcK3X#kC_1L8!tyA)dT!t9RO
z94Un)<caSr^~R*M$8yE~<^BLo`|#HtU_kj0#*GOzLRoWmNK;gk%3zR02mol3W0&^}
z;5LpLZnfl*QK->DKm@x7wck#~`a{LI_UBz%NH-P^VGjU}#i-rkm2z%q6;qQKw76u#
z34*$x6p0}Uk~8u)k8tGi#pfb?DK_ya3D~&sI^acNrKm?y0v+`mKhfaj>!d6n-Q`rK
zjOROleDt(I{brIXnt1zFqWfSFVu`wS&hVB_^gpxcNRPC8Tt6>b`Hu<uuPLCyKPd+#
ziT{)N>7)D;bP$K}&F$$w@9K>JYfgTfHH!Ba^%6%>4d$`PRTVNE%}Pi&=hhha)0;U2
zpJ;NEi>v!w`}$aePaX?)A5}1Yu1)ug4S7kK)Jt4CxPaU;2H8S?t=TU5>&=2oL*xyj
zf$}REPT(A-ADauHEHS0J8RGaBz9i<&dThe<J*g6ja2LLKp<o)Jq(o3gIf^Mkf!9bW
z6Xbfk7_SpE8TK1x*UxSo<Kg-az2n9#4ol`5YJ4d=&qJ#ck8NgW@4C9ahc{kKX?<&!
zp*7^J^XjqY=ZE!)MmDi^Zqc)DJLrW6K9Iv<cn&ZzuA|RjqhrcHy<BES-##3o8x~*!
zlzL$IIY5v^d|gr*C3;03=o7OqgVrQBOlwYR00z#D^>rssnlh}*kEm{pGNo!37(#nk
z8)b{yufptm_$p9g0+<ZxR|c&ueMODZkTwsqekom-7_k>Jznv$`6uSLg%BAGAi#6M~
z*RLm%|8VAtGk~BhL1ec-7<hK|ga7galrq$#lJeF&uUjrt5*4epR%+FbKh5dWC_BRd
zs@6_coIp;IrcX1XZ<NrQl_i@3iwdR-*ttr6nC44`b9@cmq&%O6TA2Bew>>8Uw#g#v
zi{%ND))1wl6~t=`k~h=i4U!MqOYf&XH))N0p6P)7;L+n7>GZ59*;WnUy(3o<SUIvq
zS&w#S*y65Pf&D$%hF-~UmA<iPyt=p}JC2j__pWu&6YIuRm$s(Q<JN;cQvZU2ol0=o
zJeS{fACbl_tEcq=JK=MO)fr=**}MBbPpfzvm`&0pg9y?7FS0qdoqY!|>Il6anO5K9
zJ<pv=>@HhX)ao^|$?=jN*Y~0kb&DKb$I^kG7hy_CySmFbu6Ks?FMK|k>z)^zV4B=c
z5{-dG7F|608Xa5en)6O_{S#maS8?;5ew-D`BjhpZMNVj=9wL-zNU*QJLKiOv7=WE=
z87iKTK;@7k#AqtFfG_ceN1ekT$>d3k6#W`)+ypHcG=aI+OsY9b<5w?Buv!Q4%M~V_
z5{BkGql+o|j6=vuVVvfXWhpUh<JlFb7w+D?xrI;rV#7JZGLx-W#N#>|FNL>p%d#IJ
z|J@iWUAqIj{HY~J!2tj;|I5?&zx@VnO&krJP4w&y91VW@$tI5fD}%C0?f;YME=k~%
zxf!cSY)WNNr%spEtBA@HHq*Hs+yO-vNqPbDP#-TkpcRX*)Md#Q-ULb@F843j8X}iE
z1c#!!q&yIM0*_7yqUz3?dQK89dL4Tpoa3A(n*P3?;Bj{?5+{-$%~fse<&>KMr`j|6
z^AGPX>r*BO-%eQNn0OFqT$Bmaf3|8@wcOJf-71cfQyIYltJqseyP}rrat@*rUSSGD
zG&6ODMzUYE>4czhJTuW&)HH?6^I*_@J~td0!=Njyeipl&`}5v9AeN<JZ{F)m;hrpT
zttFvnh=tSmUJyy>H|5Z@Y=rP>&U}uY4|p~P0Y30Ozw<r&oj<=rgB_lo{o$Mm?f3t>
zP72R=LIl-71Dmr+wcec8ZE~LD;StWqKjj&^Pnb|Afqh<BbFELWal2o-!(?!7moc3x
z3>NG_w8l~orynB(PXx;tK{%AWCiL%8H36gyn2!t3;)N0IAB#Boe~i5Yn;^`xty#8h
z+g6utb=kJ<>auOywr$($vTaX&cV^C<yXV>a-2af7kr8XfyCBlP413RH2hG^=q-#PZ
z)wD&M7dHcNtFUy2&lC&l#s!kyN1dgh4vOj!985UK(Z%t)8=*q+{V1jpwjMFC;jzj?
z2yn=HkGo_b)hQ|oFCLabAZzXfs~Kk#CRT;$VKI(L0TTAt$O{|#w&8Y_;V<eCK+Yg)
z013bT0EpU+6Oj}}R>~vY{S^l%Fl5Y9b_9kDK4t^Uqq+=h=20|PgS|_}musDk1HT7>
zj1mNwq>9i@W{(&`XfoI(Kp?CaJ^tMflbcOUEBN7GM-QgPN^6bcb}Zux5u#+Ib|g<e
zKwHZt&t0TnB>6~qh{UeiS>z@<dMlDI8HPO^@LT^4Bp*45$890N$8~h}chE!t?XhVe
z$!LD;OIpVt0SQqSZl?|F)JF_Yt$FRxMCrh3OVnTY0*p>4j5RO03P^j&hRdx=hrC0X
zv9s6y(t1~}lm^b6GlRTM;IcXL?2;FtfCr^64;78f)#=2C17%HO<~H(iWD++g9S4P-
zx4CD`bOFYQ$PKBSiKYZGiC+x+5L<|6b+5z$J#8u|af1gf8Spr_i<I)M<?#Io{L@HD
z#%KJb`-!^evvv_tms#xtFupPH{RUe^dt;AQcO5-XDHT~g+moj%_Cp@!wc#UVr;J?_
zL6yQX7BHN+K~=&-_N0h0v`L57WK8iL3v8kRsRSyUqt~^>$!_6|o!jTK`6RXLG7<5!
z*0x6-b8d{p%9CsbTNb|stTjU?oU}=bQP}v)yKy7$hh%*ihL{G3tmU^QonxKR`&9H<
zo5sO7k~lg_Ldiiqx{+hR?KLEt<H?)ko~$kW8!QaIC1q}WOUq>E(AB$byKq0b-rFPo
z`iPYnjN}dn$PKhV*`aTr1xtB;r)Cr-%-Ja8zjS8bh*lcupz=7#e3r)tjRx|3sd9Nw
z4&cw!y_{OoOsDupquo<_^nJ6N@<6D&_BuZGWHo%B*Ljn^dN8d`y0B-Ea%@~SG)Vjk
zHAs?&>an^?-$x<bMMYi$Rd?PIPg0k5r)({r2w1o4QLb^lQgT`i%P_w_$nx;bvwPdK
zIkN-xfSrN}FwVo&?vOV$D>JLH5C@9Gtl0~<j4E>p62l_OrE2uE%-ThyA6PR9xT(Bm
zn-@80TKKehMqQSb=E22RE~7IpQi>MAGNMr~DkjUG6-kE3B;GP}o!2cW0C(?Zhe9~9
z1syC+iBqd^IW-~5l#N`S__GQcKsnWBj=4H*!k}TL8cA!H{6NZwAk<Z2R*;f0=WrGx
zhGVytF-|eJ35yZ6FlO;-&+O~lWoVTjUf`1QVVQYIulua~c@n&c`eoObhrg`xIYbOy
z5P#*h-v@DA35$ubswXz*%EDA16nYZ^CmN8I5a>7~q(UnYqSIZ<-hJW$fUkVYBpf)q
z`L{Yh5RB=Ib1#V0f+z_+4Z>)!Vp&$!0>24-UWt@q(jaiR)&t5l8|@zQ%Ofp|%rRh0
zOtp?*AfmQ%m<HBQr1&2y;nUff9f#ZFHJjY&r?Ro5^2k3_!c5_U`TGA3CH!Zu+jU42
z{tx|q@Q40R_a7_EKkimj<Nv3$SQ@+kSBLd)rn=5Qw9`Ef1n(79Cu5yI4mhKmPyO;D
zOiIZbU=-pmme~}#>$$jw?xdW7pKm<z)=bQV+?eWTyvGlx$$UvvsCx_11y20;w<%!=
z6_0KWhyKn+?)OnK*gjAv$0F^8Pc@!mHf528yh9qkS@g;0ry39*#1TK~y2W`^Z46{R
z^JGx2#GUa$-iTPQTy#e89Y8(A$;%*4%v~9LUU_)?_T6n6leV^{DT7-(K`)a<M<B-w
zJ6_$9|EL{Z+1A4or$;Wg#+=<HgpWCIpStfo5AUC8H>I9@$5*XRB2Dn6RFRu#nTpln
zwDtrLJz}K4&mQ6_X7(vwmz_6w26KIu&YR&SI>R2&R!?Bj%O+*py|OE9RTmCFof!G3
zol88CmgSx1lk$m34U>k;8^tADMx2<11LGJ}RKu!RewQs3Nc&-7+XN%nq0IBJB?nh1
zX<G;@c#1KYY#k}2KPA->nJ`UW*_Dx^RS}6P`G2Wr<{{8M=oBgIU^3nD6$eZ@3KAqK
zOb;zz{pnY>MR5ayb5tK{lMc<1RAyMTi4M&m1ir}mdrpK|`M%K0l|RPNLX7oLvlF*g
zMkS{mEu1GzX*siO2lSOE<^)BXrzb!qgFOtmW=M%!M%)E!b`!^cKk)u+%jZ9lx?ZoS
zf*O`op6l)8ltvYR6I-B=!ZdooE?QS!X-Ilw5wVUjvRUWkY>6V28(WOoN^(1@Pn9^7
z^EzM!re26zWk$z`BofS&bbO{4yIOWly~W|P&(=pwD;!rZ(HLnjyOf;@TlcI)ljty$
z)v|@C)fmLPm*63My0a^wvHe>vw8xdnRIQ3Jgl|p*#B4*}{BM+Lw!Tjawu>jJ?TZju
zH6vO|sdW}TAFrvI198ZaFGpPyMyyn-<T?e|<RoUpGP<GOO971p&a5-Pi0eb-y~vko
zexuMsYF%;})YU^YH9h!fc7at4j1?=<;`SOd0w1Lv8ery9jr*^dMHwJZl4)EHD_n>v
zQqSRNxvc%2<y%u?IIltU{ql37;*wLbEPr^EBvP(P?3u<-Am|<@>)Bsu31!&bCk~z5
z6rWR#3&X;H-1(()AC3)gfA<$T^9t|^p;NgEou}Rhtwd%LkQK5vxJ?zy##YXcmIzFW
zGO_QPyH%4t!&h*AvS#yS_LTk+U?w9Bh1U{FrMhh=Hrx3$txAHMIbFrG%y=Fdkm>M2
z&(CJL!VG|j0`L#Y@nU4?@FeEVCnc*uMOus6S#1`YIy~BiOWCJJ^C_pj0FP-2;-Tng
zjo07Quf61?V!)hqm$FLgAc0Cni#3WH1A_hIDV?OFEseb`%DJ70p%bH^bL)y!Lyn9!
zvkXl*oeR%z&YJDJJt(Fn=L5Q-!*Ax2O?yK*cWLnI%-Z$7uM?`NjMubzMWelM)7^Om
z&-<cj={Ezawb!^f9tDi0>Qcf2!xEgLa`h(<6?-|Rd&ZQh?-&$Ch}n^cY#qY=Gn~uj
zHh;|xaArYO`IYfHxZV<}Bj746BeW_F8pSOpIy^iu!=RN>bHt3Ob#EnU#7lx-jD=^P
zc&fPN1uHG{O<Wl(Pch6>b2zETTs~z~a3ZUz==JiS=Q40=MX~hZshrnw=?22pCC8JV
zGzs<lUqBO?blLqyKZ^jKNdHGNn5@808o8Z=xs8*qvD^RjU}mXZ+wQX=eOCAQp8!TR
z+;FX-@HCn)|Jmo@+{fXJiq}Es=*=Zv-%}=2jt}3@Z|(Wqj*X`sncm**Ze;X@*_rHg
zXI}r|x#gcY(z!i_4F$X_pnSf4zQ!=WIjUflZAy2#tnIE_Dd5q#YPvQd1u6M^Z{iw!
z#VSdeI0bz}cX)HYBFW*$+arlw&?^>+Btg0qN##}2PV4CBraae$oQvf;Rge6B0wn98
zSsHJSu7$T)dTc2i2LY&;RBuxvG7JKX7U@fQdMJ5@85o(qbOT~OxcIjGHPxn%zbatH
z1rFxk!pmKQ*4LQi8|r!kT5~Mscbf$9{Ftf9G&}fek_dx80x!33?nN_~wGc}@!7)*R
zsyg`>D+k@b3&OBSMVfx~F-hYwZ6OjtOPBEG6A$~ACB|#`7qs<iIaTHZ->v0P7LW1#
za-3k`5w;dg&)Z}&H)``pwnLv@Wu=xkrKF!8U8<Y2p1&93P;gO_vj?d)gQB`XD2|Pe
z?rZ3?`WWnoYyU%Zn>Z(|+KGMIoj*4x7SwHe_`Lf*D~)+UQyiSxNqmWDnY|8%NB6~b
z*J`0V`j5&qX2-o9LkgeQDL8HK+gbWe61t*#dv7#P4g!VQcLzkTPrUJyZ;A`p=j$|1
zS*m3`no<G7v09`%_lSx(x&g%8gs4uR-k+{c{D)(2RWg8Us_u0da$>ojg5s>HM3{t1
zyj&A1Nd9Xk!8bd{iP*y-q{aP%;iiLtAYPcjsPwkuVx^Oy0f@yQn?0K-yXP~s+`j~Z
zS<OLilB!RfD<~IBfMzsRtC4wW%@1x^h)cwz0DoG2Vq5m3SdRDvKF&^|Y>`mlNqjE*
zjRC)1j039f;I!D;J4;GQ#N0`x2nbV2yxp0hS7y1`BPG{Xt#~QSkn?FbyCxS`u{kz>
zv{KG;T30@HQ(Rm9$&+--)+Y-oNVQ00Sy5dzk)>Na7WW*+2{Ll5P{!H#B|g7673n-Q
z#Tby+eGy_T*RHKPnX}Jd_W;`zlwGP%sVN;8wp7!?l2js~=GRe0_NtN!m?pyWd4=x&
z+NF^ld&Y3V7zf^ChgFNqH@7?1yK=FN<>#%7oBi#l>u0YJ^z?+%L%yHLL+Bv{;i0<&
ztN5N=!@;RN&dz1|Q^x{tfQ>T6ITD;`;Mwcx6L>H}b>Uu6)lhz$_pdf76ZxSvZwFXP
z{|yn*i;z@k*Rjf{=rGl8pkp{~gPnR`eD<bojrwk)P_;5LYFUO=8z*Yv85QF)8QLhZ
zB?wF!iYB9mSxYr(kU)^=Gp5=q6)7sm#AQYKyR(oC;$I(QC;Due+dJ?k@CnC8^vpgH
zDyCxtwL4KyuJM;}&`UepR-~-Rga<@!5*I-mB-66k*m+Ng81hb4VX+ini%n0i&OGQg
zw7I?;LNWOO3c7<)x@s!(M??{X6o^6S&RC5u?^sEa3Xo^Kc;Q0|Pj1NXgLm?#_@8l+
z$(BK7szj9_4Ccl#(gi*UkFd;*U@mSEK+Y?7bn@s)8M`c`Wg-Et%>3Xqj7CE|Z}t54
zjvL_;*IPIuBUjZ$6X)9=kg1EnG*l?HEizk&W`M?hh-se_UC#+uId>*whE9Z0_NK14
z-h#73rQHxyw?sXlmVvY)XI?R4iC)-N7n_3(BXjiK1M*w)gDY)dUIz%4-J<@9m{4qS
zq8U~bpBfylPd5ANNY{*b)CmDer!OWkA8O$x?~~JySTInV#mPsW4UM5EU}GkR$7%d)
zklbSmd%JpK56L`ik#e8G_!ye!i7-{63uZJ!>9&<EfWn16{V#PvSm5Ur>4|1=y(R?Z
zDnlkUq*wa^;i6!H+EiHig1>&Zd!Jag0f3qm<ZQIbvyL=70(X|6IKsR#$N<Rl=3HQ@
zD<P+A++WSf*X7B>-+g<1Gk8XS<H>#dCEc1iBwPSP7)q3TcZ5``oUs?Jl#g*2H{*)s
z=5kv$KEHU1{{+Q#M?B-N4TLkKa8Gp3)<-<?BTCZt%jAFy8iM{}L;9UF#U#<c3FDye
zU)JPNLyBYVQWACWZuJWmP|55r=(s4S5XkKMh?jkrDZJSyn=GNd>beEVAv+hGm#wj!
z{Edfk!^K*wPLtW^OMl~4jFlN4k`;p==|H)>d#bRY7c!FN4@_N<T*};r$rjF60<P-(
zvZ#FYvOoRjlOOS7cs_9gv`9>kf?Olk^0?_`RbvO;z~#zc{7G0oK0`3?bJc>*OK06c
z+pV(}`xYm50$-u-Z$z3rEM6Yj=)9rCd$9ATxo>}Gr0Z|ErRCrlD_)rFGm`=AN!@p&
z^GqE@aJ5`00b<b|(WlYWE52o~u1m6SBNl@I38tw0=aBKs-Q9=XiT#%=TR8=m#lzuI
z<EvbNV|0A_X}-@T-vL>vym+I2yvQ$fr$ksP>4n8^@X{Nxc0I;HHGLf~LRp3#s&eX4
zQpwpS8WjBqXS3Ukx4-NqJj2~5P>xr@i<$l?uV3A<L1x_=LQ*42Gs+sOY4{ldQR_fS
zZP~xhzHvq-WRzyax95$xafZgsezEUn02Z6UF+1qE@8&{|6I!)77Iks|(yUqOddso)
zSf`ok&uUnY(YaCq^(OI^rAGh!7sEEDvqX&M5BQSgr-S;>;LD%6+)s4Ye|-V|jVk5*
zTPEfQeA)H>1HMF8tMl8E<Z0{>N6Gh31d?2p^b{n+3)LKnwlXz;JO3pMR8@XSIp)>r
ze!qQC#^hgD0@T(T@_1o6xoXh1;)Vyv6N83$^@rNn;R>-8ZFU$<iXr4W)zj5_T4y=K
zx_SI3KUwj(91S9-Snx6vD}sosI8mL(Hg5pG6N@r9hXPH9ZU79#i#i<PS|8n>O-^-V
z%c7xM9vh}6QcFt0;*?bNPW2^tCMMz#<p+RwWf`HcvFs18c?aj^_pRd0u`OUTK5n+S
zEmB+1u3CKtU>TQp2nULDV^&J|Cs7S+<ByYGoIHzhmpOB_J>EoURWyqP%7T1@k1W#c
zFuGz+e@iasobw#ZHcyG=3!7B7AyOO`uxw8$3s$ri6}x{0*p|513!vM&&EHvY34kir
z<U>)A>`furI^cNI?1|pHS^hhWlGCq1pB*&#ZTJ#IE3;xAsgS}UV}N~m%rc(!2?rKk
zR#o^x-^T8ng<|B}nR0cU0h%$kNYX-?RBn%m>Ckx)S3#L^&rQ|MJEX7>PwIEz41{jD
zG}~tS)3XVOk=0G5sHBqqfdM0?HqX>eU$d^QS!WY<AWh4D+JVZapgN-uX-aXSfB+QS
zbybu>-Z)Ne=1WaW#K9M60cT2#z`ruOZp@JYI?}MDw*J@hzl;vL0}7NNUYJM57jB!`
zOGs8Y`_<p_MXne<0{`lo;^Df<o-=qr8`CP*r;nV|1oIwATSH2U--+OzJ-J1KUP;vb
zLrlYonK^b`{LYN4E3sc;zIqOY(k(Y<psC?`|8M!Z|Fr#zxbB7fKXOmr&$a>ce{B2z
zm!0b$W!2Hyz{1$jN!R9Qru<*$_}}#YNh%64Kbf09nMN2}UA-3cwXW@wUG?HL=#Q}+
zt7I2t+#+O*gH`OZ)~0^GJ9P=QkbzxKprez=X|^Wa_N_C<f}`H!W)9#HW3D-|e0=b}
zQ7)6h?W-R{2FS(_X<Pox=Qa%@j#bdblGL1j8Ouo6FTPq4HrnWz<7x|f+oOuRRkt*d
zUI2lBQ%L;qiFmQ$N{oH}4`q9HU243+4Y3GrGYx7ekO6U%>cveMI1C{v(R0W3YgfH8
zrmh}!la2Nat(*_O#J$W5TXj01?bcvTaNJ8-r3zbecPw$=)G{m5SZ$T~HYo2UNp+SQ
zU1%RYq_#25X=prl$kcO^8;lRz)a@OAE!K5E?XV{CR2vTW!Y4hw<tI_77W5RsWaj>C
z3Qi{OYU2GK_^a=P;aMw*NhwzgqEkwNVF7n&`pT4~0NCclr=N4jG4y*UryrFjxq{IO
z!wS_fOia8*=}l#TG(mE7CG=0+fxb}}DS0U#K?zikwND}HL?-c6dOAn4XZ*Mz2{~Kg
zXdLwb)WsV=nZT%(sbj%?(nTB7JDo}i%3M*cf1oiKCiKLk#=R!vwATef!)B|E61D6_
zxU17hRB&u8pQ8Y3vb*-dCwn!X6Vge%S%7H@)_Zi0lKeu2KT=t`^y4dmy&+U_RD+>b
z6j;_i=U4yW+^;f@8&$bJARp-?IUhIWku7$|itP!ZLS@y8J;ei+HTZ&s;3!LH-ISY4
zRGH2-*Smx-6{9OX%MPtU#)b7MqZ1m<agn@L%Zcu({v{?gRgw-%S5N2-qJdzkj-J}V
zXMT+7-RX||U^?y~Q!MH**?xI79P-!xMA6RbUv_h?Edw45%(W$0&04!nV#r#I21dXv
zjcv|ZZ%xIs&-zU8DS?w>V`6w~7hQ6nx3s+P0)NFBiV7V>%>ob>jDAJ3iCH!5DJ>FO
zJi-u9xnd6aG&rgb!jbitYP)y^7_`l)%w~1p91k7Yx>%)Er4v>1_Dc!k(&9QYq(J!A
zK`qk-J2i9&w{Dw4{#wO|SX+@2u9mMKtveiB?S8b1u)*^2a)_I$7&^VbWUSY`Sl56z
zZTHdwZ`kRnf=C<xD1D)0y|H(Deg*dV*t0qD=#P<XcbzO`C{tPw2tz<v1;zpj7IL>w
zxyl?_{oUCGO(WZ8SrknmiT+S|s}1V4@(i$C&%cIqi^MK(CMrE%H4joj|2xr;CdaYQ
z9F2L^F`<1_Ig&~+Qi`5Em?(AKbu{iTJ+x!oQA1e|gm<Zx1{#zQsTTGSdk`{DH3{o#
z{bH(?FDA^>dzb3x*j?c|>^O5kIUGIfO#k-Iv%UUk&;Kq^SzH=|E&UWij31GT{6D@Y
zKitKC^0@V_{_73-H?>e(N!xav;s0jl;(;k+ugj(vM-wTaS;r~zLuM_OjB}vxQLe`E
z4Zl2hxDeDzh?6|=j2v%zW|pX^M)E9;R(Ph$=_(GJ&>y~wQf>Fr4*HrSas(cxslX*o
zEQ$s=4?`crKHc0|cdI3<k70PlO0skdVw|HTHBE_MSSiYxNl}4+A_jb`*OXm>WjBCo
zsczmb6y(NZ-;9q}^;0=mVRbhR)O?=q%sZ$UO(-{~>bhaTc*3J;MVYSMa2Gd_K^k2Z
z1TAN%B*;l9V`;EpTf6iw`NaVaWG#;S3;HcPI095f+hHg<L@fKwb}V<O{iLma47gec
z2<?^j=0k@tZ#Rp!h&qIjKxd4T)e<StvU`QV!PbFoAVUPVDP@_=u~JZI5)+3L09U|C
zh1T-55uEmMH^=<Mv~KZndkF=RQ<XKxI3c)~<fu#ma?cIuv|~{@X)QjWIf*cPuCXZn
zbr%Y<yqGj+^PRdsz$qG{Dk7)^Ivu7)d`F54$MW=t@_+zeD$Soew#V3X(5S38=M5u<
zi}zy5;54zk%qUL~zmYWtSWt?)9u=cdUC$yDf44-*gpwP$9#>=2cxbocyEas6r__PT
zz6%xwT`~<3Y4@N#x^YbJ0V_!fV-^P_UiFste<WhTJh`Q#vud@X_+whmB%`060zG_Z
zuYq!{>2z%t$@U{tjKLn%Q4_x1W;tJ%268si(L4$_4Bb_Yc7LnI;cekXZZ5;&U0ro=
z@@{VVM%$~;decncB#V9v?&_UsSHT|INj6Xd^$Pl-P1&AtLdN@F(KpRigvTG!VWitY
zgX!O%skyOA18g^j;PMR$$e*i6E{n2>w+QN;m*(7dv&2*TX-@-<#qEz0a7^jp`b%@7
z8HJ3|k;YNZn4ES>@3xvWu?s6pVAW~8+x!7*EwEXdZhEq3S-*ZByLC)7Yru6*otqO=
z?9gV06hhpt`<Gh-Xp~y-@ME|jg8!eer6NCxK)-*`68|T8Kvk+Tjz2MDUHhtf>k)_c
zM!&M2X1UUDL((nI#PK9#&lA9j2oYf+>;Pu#-_GCB2uRai=J7n@`GMfyZ=Wvjgp3`B
zc~KM(j=ely%_mo1?zi^0uJ=R4YQB=m?c3zBnHi}vZ?4W1c=7QzRofu$YQK~*^Im^x
zIL0(FVK-OHpe3^U`0nrNb9HD+qeb3cCyhB}N%`ngn|H31+?8RW5qBz*J<#*!KbB;S
zoFC?Va6mJV0NboTod)BFXp0O>^T`$)`c#ff!uz;GCc=DSO(!UG@=eRRS&w?8jWnb|
zdZ(ToTPA+iRU$;=8_orAJyEKlnEPmX$NeH`aI#%l`Q9_*Uc+jV+nTd{Av<H=AA0n1
zXvv%`j--WdlZ%IFO4wZEq9Eo$SA)<gmFa8pici0awV`Di3pi|BFC}2vz<&@Lely3i
zqYpTCUW)%S34h0VQvvP9Oq9DW1(d*BTLFD%I=C{OZ2eSCN8w$d@0nk@`z3idDM7+;
ztceQc5;|WHr>WHu|0BaN=do^KK^?kJ^h9UDLW6Z8bpM%X9SB6!y#zvYnYvZ66IebX
zcGv-uz|*>NXFiy?;%VIymeL1-c?``HQUFm#YL$@BPs~zl6d}0NLIi0}fW(bJ-UVaK
z&L)VD8gHa%l7o}d;d}(S=BSTJ5%xz!Co@eFg<4n(AV&n4z%YB;0>`?tr1Z+siBqBx
zfeJZQ=MLxa;|iX+O6f#``|@KUcVc8`lW%sU+lwB1sMW^^Gdpu2#RdH`25XiLB7o&n
z6w(q5wlrtU%Y~)i#Hg*BPp`CzDNGbOvjM<$JQX8<C~36)l|*+<{J0v0Lh(V7XAgJv
z0o`Yqf1t6*#jw{vQv^v=AD9{Wa18qy!h<-hEZg5fwo~M$VyrzJx}bl{6fx&!K*W?1
z)UKHa3xia<e#@IDSx0Q^Eny|XtI?Dilk$8|`R(QI$*0q)u=|MzKr!x&&#OH(gLxMJ
z&IJtYz3Dc5I;KGZ3;hkhl29yh43M#gGiH7^TkS6&_1uEK|N3E1ybEm2{ie^r)ykbk
zJErX4*8Yd5fIaEjuI0G9wh64p`5<vtv+mx>*r<c4(!qf?iv^MZY1QVv{0#e3-iZa7
z)_N5DO^DYBZN1MQdH6??%0rVqi2{|2sHbEAX|8Ml!VxoD*5Iv3Dn8j>1cy$11sbhQ
z`U6&po}m)@+oas1NEz+W5dIoFAu~Z;57rhwr6nCPiop2F<{AiTF60AA^zR?-hG|fz
zrkiaOs<ZbEmC*9|{<ynZP06`^85U9%lkr1*l)7e$0!sFXiE1)3RfKVzsbYofD3;k1
zfTPB2H%iAeX70SLR2i-E^-{RObtMbkfHB%tfp*hBLUFnR_rykppEzV)X1RePpZ?8H
zQWQv_zK_v0rwYW}X;m&&2yBq%ETO`vMpQ+ikHBL;0>aRj$yE1=uC!r+<qLj8G_uh<
z_LN0l=;?CryzQEpbV+fmE4l4S{I((###YRekZ}a1VC5KCIn1Kn#^$dnKAS4))#$%a
zZg5}MrQY5W4mJ&yS7sYapJI!z(#HTnxY@xAMpQHt)++c)9_N*7z4-V<)Vjj=j~sC#
zoVlGf;!ULmViO%?u0&n%>OIy2kx)$tA|yjc)SCz<DI_tRVZuX*z1{x5h^EI(1z<zD
z7)0l>6v52JAA=&<5-<WyK+PPyV_Ua53Z$#+G5ps-im-dABH$#Z5D@441;mBT>-_S^
z44~-;k>f=b7dTL$VA3&Y-|K{E$l@@a^o_g74~a|}Br~EmpFJJy`FLLjR)KAtz`Beh
z|9B}jixxMR_IM<aZ8UlC2BHcPcbdsaXgEaHy2P%_CEup%Zqu1m&SlNampxW5WhJmL
zoq$||jhVCm9VqtJNF=iSPI-NI5lj1ab4%~C{r;sq#$?O>D%ePW7X>eN95A;%e!jLf
z;B|M~LTb1|!54zbd-H5+YI?n$ll6^)Y8gCJIkcC&!}*RLc5jRebv_$F7k9yld*c;t
z)=r)_@Tr-!+dxyCRZi-J;N&qBbF%9?HGB;wG>vcdv-M$eV`vVeI$Gj2ZG=kkp{G%l
zMDTQtEgCRK5DQbZy;TZnS&tTHL%y<qYOrZCzp-vi!othZRK5@>;)qYA5-9(gBPZ9g
zaasF1j-%1SDPt;&%@-^};hYIp&sF=ck}@Ui+6U!NZ+ZMv**N~=U-170Cg}?NmSxnH
z6H*dU(*3QZ_=8sYug~GXX)vplWnzBN++EK#6qk5F)XTl1<AiA<2BEA1gnz8a<}>9x
zw*Jaq*i`TZ8~b>dV-3_Y|LRDw>sMZ?(dkmP_O+22TRoP%bAXvR)ul94=iTCJTG=q~
z#<5jxkZE5#%CPG0#0EITD^l**Kd133WSLdC3P`&0&)}m`J@?9H2D?r|bEY8OOjWTs
zKFf3FE+b1-Tp!rz@=T-?TEGEEU|AYP5+0)UG6RFTaSc;6Zm25qQ4WJwdFxv#LMhsV
z5JdLkm;BtR#^_?b{T?cV=s?fh&R>Ll^Gu(qfAwJ2rR_OZt-;^2`%4We>K4|!P1O~$
zkzoR45^_pDcH@^SL%=bvU~joZ{EYOKBvv_egj`!MB3JYjN2EB~{`Q#DfU_N=J~4rm
zgPi&sJ75U$tRCL!?CHp;52Te&w~#o+5%yN1dOYJVcVlqlE!ciZUXD>rU>d*u!|L>f
z8ZowE4CFvwJ|nU`TrKE4C1ZPEG@51xn3EZlxjubUBhG2I2Fj?=IFhL_Btz&FNR4Is
zy(bqrIrg?zBJW^gc)H!U!5s$~U0<McGPfoFLs{xUH%D(5Q~Jezt!j*-?;&l+6Wa84
zd~yvar)NcWRs0kA$h!QZWbFHx@o~MAV-D@^_30k(ly9xGnR;!jt08|j9Ry((b}s~s
zOC9*3(H(JHcTg>~GkHNM6ai6(VC0dc<s7TNq>_f6j8A&MqX>EhNB<t#RQ;vSn>EeF
z=VlJKoSUa_iWmyHK6+y=9^6VFujDKkC1k_OSr|I2POP3La!2-#y*bo^NVmZSHV+s^
zVN=9++@N}=<CQv0xE6zH#iI~g&%5Ek>SUu>#Zyv<T*2JQe#zVmdak?b3)<8@Xl2!_
z7!>@%Uur{bpoR9}NH~sBqfEai-#n0RXN8DdDJ>u0Ao(1{*@C|v)i>IFfNl(cSU$qA
z+&b=KUP15mzf1i;h>Xrp4WJhqoAxxsIVf~R4&Vxe2-sy+{;osegj{hYi4+cbCDYxb
zw5Kxn5h<0Kl|<OByFzaks3kpDy*qRK1Im9!l!)Admop9C!jU-4;7X_VH~rTH>*`*C
zI@q79>Gg9p|1&55pAV<}{~=-`N@>Gpogcw_rv{^lK92}Yu?*fCDXdT>KoU?NDU7^P
z9o|i|;rt3zvZuRYm@TDHF^8eUk@I*mt&7%aeAPOb`?9a}o5zI4C!2<BXYW;Tw;6Vd
zPnQOUE(R_c46!<w!C?TmUv3j{#*wx)L8EV;8j;uPH&0s3aDq`R1K4#TQkxv2jg#N_
zdS^fe(fHL#IUW3UjJ=jkqqJrYrugABp*Ef(gb)N&UkQiq5KC$I;Mjl@LmKQb@vsSI
zzr=>hK*3QkS}Twix()a<yYmgMnrWxqHh~p0B~xs&djw_Yg`PA{f)Rx5@5JIz;xQ|b
zJjyx#07(Lf%dq@Ly}6*s_l#|ACzix;$B0A(u$9tG&}UK5u0kaXyLc_hIe(OI`lQri
z>)43}ie>(f0MQmglqLe)7b1Uw1gYnOlHFQZ$qwmqWe)MC{u8~HTN>G?{GKWj<3%i+
z*0}Wz(TQQ5q)jkicL~bOD*3$K*D(5)dE@mC;^IOY)n62?_KGi=*y-1j*x{ODp5ovb
zV5ef2_L*$~2+1nBl!|>Upg!{{?Fg<DPcEEFFdldqg=Rr<^o#sd7;KU>qkvsQET_6Y
zW^q))1mqBE>t_UeEZICVVmF)kyr7ITH<x+H;zYs47gFf%4P}e>)~8MS&+Pg>uKHhn
zx5H+@8W6V9Yu`=8=O#RAilvW&xv(4Yf-T(Y4r#wHfuBgC^Z2BPBR>P2kzYB)P4-Ve
zP<!M*Hn(0hHP8!5qH6^VrQ*gGlYWrY-G^w&^YTP8aY}h(ODg9gU8SA?pA6ZPB>^=t
z%)@w2b<7S)oUK<bH8s^8T``AjD{06DzPWa@&qjPg72D*(3$c3o;b>FEN)8mDJpPM|
z6^&Sm+Jrm0ea0M}r9ku=h`m~#YWLc!)wLuvFOe7r;vb-BMF4^|5n6YDpKAe)56eZB
z1!j#NBlZPoq3B&AyCq$NB?tP1xFrorrz@X=C5uSt*OpRhh@z5yVd)-e>GL^rZCtXI
zZ$F4<D4XUil(`9~X&&#2w4?t2Iy?saqy)nsYn2x!008}etc5>ZvHx;c{Wu2x+l=+!
z%tx}+H*7Y<k-V>KPNwt#$70PnI~r1DtN@z}BtR(Y2{{`wQWz=fDV?S3IIZTxzkFm-
zGuX8|)21Rw>pQATWR)pb${>SUb*T9|6B{yS3<+&a<*1WNCuf#^r=Lc7DDHqG$u;rZ
z^4wWxQ)j5s^G2Jxw#fP6j{qz9$}BcNGL0u%csEh`GTE<s&%ZVId-7?*!bP2{Ic(Cn
z(^dS6-%&dy&nr|VV#4IRH_W;|<EQDKzQRXK2tv3c&jPVWq;fY_Oj5(vr9rmk>Br7G
zxKpe2Xi11^pwBr}7p0pmE1I@`9eYEJgpmfSC^z)MfD0`2-8xQNXF-fL?W_Opo?9Om
zsqv(xWhL#?0G&xD-Q@W~f4;xwBdAUq?;&Vm$<YZpqMT{O=L>oh(X@_V;KELPSQnFI
z?T*0FHPdOCTl8e)I(UA_gRa{4o4>*gX<240L~NH5d$GEXl-7LfbL;{Cy_zlXdRD3H
z4Ur5ou@5B+LEaKQVKbeR=-aG|2p;VtZ(a=am(gqFB<kREz^z$LI>+XRg68_1gKvX(
zn1thl5BJUUVa$OeE0VPb%z`h-Ny%nSf^X0ou>DOP>lwQlkOwRp)W3kGQAWa=#q^@f
zb<X6b{2CK*Sa`QW1s*(>ql9!;dQ=3zKeXj_cf-+^gL{0c(^Je9n<-sICFq##cQsjj
zz&rj|(Rg0Cf5y1-FU2h~FKLArt!+(crD%4l@JnQ4Okpz<V`$&f#e@@=zh&Fz8Aq}d
zDRf0|f#~|Ck>t_2WIOrzd*9uOGxuIbcT!xKVM9~zS(Ce;`u8AsRz(zdK!B=tGJy?-
zAb(EKJaIhYVe3)m@>qD)?D4BcA(^T~bf^o?vj)^x!?OK`6;g*14M<zajjSsM4(o{n
zL60+RJ(CjK=mU~&GSs%Sa(N)q09uvzd<b|PC6a}Y*g?;hV`?DcbfBA7hYK0|7hJs#
zN)Zv&UTA$l_#&q~$TRb!Se`;mXs~e#f)~H6*Q`R}(knUY2sU5bj0O49v)&~+_2V=t
zf+8Gq>Pk2!c#^0`qyy#BxYF0w7W&ExOwpA1Q+f%K9DPxAxvEzv>Vtj;i+ZRRLL(Hw
za0>NjKGN>ImBk-K=sG`ll~OnsZxaerQ#sG^ih*oNOW|&?56{zA<L^CM$Qwh;@n`Rv
z$jbq*Cj}d*a(L1zMZ&u<;NYozBLw+q^t=_x=m3=<`M}`$s|n#MgRXfg0(oOh;3=BV
zBC=9<t*uMEo#VJerIIUVJ<4=ih8>+E6s*1x9?G%8`c1090hmPVa;859z}HZTQZzF8
zy>KMv#Ftn@l$0v{VM5{TWp%yx?@XR<>2J$OJBb7Ut!i${XTo_{Yf5>{Mdw;0F@Bqh
zeyxh@7AA$jCPo*LU_|qnolo}O2}gl|R8McS4q^(`tFr5`YpT<}*PzmJ((cPf#yG7I
zrz+iK{0jV>M<Z$%D5wCkSsKQ%cul^eK}wYUy6=?>iRbUju^Ya$-*jO&FU(N<#>bBQ
zl!&awR@DK)<B~;moi_OaTWvz6j|U`3kJ!~yX}{0m;JNCoZI(BuQ`gK<LqMJ&4nYeM
zZRAJe#q2kQAZ=i1+~40{>4l2PR?3~?(OxaJ55!8<61)5)_pq@94T~<k6IK=_?FQ~U
zyTv5$uDzDTCKoxcu<`OGMa;Gd=naTX)FBE@M0nD=DByo9_jw51n=XaYxKWNqM82Tu
zhek>G*(WGRCpOK#^d)b^OK$N4`pEdlvm;2y3)y0Si$x&`VAv0hTE{}*JN<It7sUzl
zs8{am>Lr%^V-E7=WogtcWj`mpS86v+k<%oSo*qdi{R-yzf}OeMHzYoS4YPFBL2hax
z1)yd8HH?&i!iZQJt|hDCT6W<KLvV913PuWoq{EL-SYv?_Ta^<;3QKrIsyp5|3P5L!
zIFn%#ZDZxSE^r`F%u(~o#XMvYRcN;vw=r!qhi}I~nNpK|XdJ*bTvJ<(8%5<E_@xRv
zA685#vJrmcWuF_=92SqwEXh-YOsb*DA8V?Go@C$?W2C5Z`x3GotuW=rlDUjE9)_yt
z?YL7|e3+Z@SsCLJ0x4LOIf~oE;S^&V&hzYseXe@eLC3%l#Js;G;W_wPLk-^Id}ojy
zQ&KxYKwJ){_4n0JLN-<or>h>D&0$QES5?wheRCiffNT$hFdal)Pw+x45>oFvdP8(v
zDm1u)$c~@|ym#ZS7GPnD>Djqor>s3wVSO1Sz3&ppJM`C_P~~C7Q;dF^PMoo)`DwuH
zR_TH|PZu$D=ta=u*IJ5Z0?$Tx9R{wZba^*Vd;6$y957EAlo_2wIsy(;9t7hwn0u$?
zYOSC2S%57{sZX!_4>C#6E_pTXYu+p#!nH-XgB;zXz>qIsQ>B1s%?)xp-#%pqR9=ik
z=pZqvL!l+kF@$4on6XsT0UwvC7;%=?`~G%6<yHF2h53_7CsXUawj5R6KMpIZA59>a
zX242($Gw}I>38-As_nJ1daBrz4GaA9@XS*w2Zfk-Hn>O=7lLrYz*<T<E!p{;Ey0rK
z`~CG)WIreBaf+wT<)?+hnvrIOBx~j39HtVFn!%>x8rsi+8K&6KfI<TYPNzhVFL2sM
z+i-HVSE{GZiH>3w_A5rWhQhwqDKk}|4&LneJS+9QjN$iB_Gbe1>s!|VY&F4%99XEh
z^_o_>@7v}}HL<kw>HfC<5cqmCb`j%~+LR`b(G}>Q+;}dNM2jfve4y*f+W=#59s$EP
zS=Mi?r^YX-EMEm@={z~meh2R>zt{;NL$18Q82w<0a{lW|bQ}KS?I5)M3u_t+6&6wZ
z8W!5Eq+omJY?_4rCvS*UziT5)8zP-$X#20cuG`MX12^78#_66;=;;zuo*sO(@gKbT
zO6i>QjvTUxk@wdXx^QjUmXRcfX3iH%#K5V2J@E{>)TV@Pjj^rIftA;T{Sq<$nZgd~
znq`c?Ap^Uw8@q=+ZWEPsyhcaZisZK8UQx6Y3G62vj_rDfIGzSi{qNIC;8b;;zQHzZ
zl_Z0Q)RWsR80`VJ47C$A#ea8r%&2?&3Efh{Po8nu{dxiSa@5`>{+<K}a$w2=^>qz$
zu?n{mYl-PgER1crHDj#cPNHB62dNb^McIfjb2>!un0ho#-!FD|w65B;WWUD%%@|cg
z+)W4F4`?1|q*jnqINXx|?;00OMv7d^kH*FSqjCM`xrUIEw4B(_B;y|j%8zu;plfAo
zs%zk`YyLk6MJi3$Y%m~n-czGp=DGYGcLxx_4+C6LKn5<iR+9wGfzi;AvLaC=D5JPq
zaituK!BK4Ff;_mmxSAAiDU!tKn2IGwXTbix!ORfu`|!aPy)WvKoy)FqOsZz@XcGTR
z+#v>yLsnX~8lI{dDDG%3S*<Yqi-5wai3;aP+|dl7+T>n@0~RyjS#a1riD0u7sfh8F
zp;?D5KSNEzaKnMa(=&A&vKq8Etxj_PPhSr&tq5u1XJfP7QLD%u{-fxJD3#UuGUxc$
z%0RWN4~M!e`kWK5p%qM?I4N085;7>(L<Ew@F3DMdxO}@5iypJrZ=+>Ly^_YMR#1Iu
zkwO0_2Ek$(N^Ktogi<FDaGn5&iEHH6FE4M-KM01@iGkGD_1AS2LQ$IJ>BI=Z9Cn(A
zdZ<<iFJxlR>C}%P%8;Od0^<GXorJsC%5B{8e9J=gkD){S>edd31ISlzA!))txV{#z
z$2WP4M`<n$qN>+vRyn2LSAC0uw0Ahof@JSrjD)&kRZArM(FCY76!6x+G?RTES~L4*
z>~Btf!}V-+@=QaptV>EY*b01FFGG0!7(}eit%K?NXYW{M5$*bU07Q=4(ZI46J&)E5
z5pY7Fz43<yI813;!>q5%`LJd;P6LrFUA;=(QrquQiOD7QtVuOpEy?-gTeZYf7r@bi
z0kz!Fw_oeljJnlmOP=8o)$_-*(9BJC?>_dhC{RQ4gH(Dbm>8<9idohe$e@$qEcL>`
z9+}AoF+)?k4bD`@K%9yDvI%W#a*yG5oO@lp;q{8BC`OITwA|uY8P}koaJvW9G}yf=
z!<o>vhTW8U_D?Vj=me~3Z1WKo$SUu1^`VN9ebL@LbtB7J6i5$}&@##qrOf{(J55*8
zPNnSDR$JD*Q@Tr*3^bdpUhWz<kBZ3-x7J_4|9=<dA9KlmUf(d_&%*u(1^@u*e{6bw
z3n~3?wy1wI?VD1Qa@=S}+rC%T^I(q`i=!=hl-?L*4)15Na3+lsFS(TzipvcQCQ<`v
zEZ;cw?KuYU`UAgq>h#-I8tC{ni~NyoKW@L1XO<v6_VA&ndf$!NH)DPw6a{`m?PlKv
zUEJfjiZc?l=*XP$Ib3zBxy0gKILL^b^?9DFlme-HXI?4nUL}iJ1G#xx>J8hwFF(B2
zk%1DP3N;+JOsS8tqG&}7HOc6mMZPU}V=;c2t9q(*npUda6#2aJsK}Qhod{;$;EFSI
zHKZwz8$B;5(cN{Fnu(N|3ME1vgF?~^v5*NGL}q~bwigDA^;!z1Jk~R2Vrf0YGg|0t
zV4h)&SaSOYh9-8*xpX+hv$fAon1zgGD&{~g1R?U{tfZ>rfjvg^+y2rfh1&PLjn`dD
zM@F;@C8ww36|dU%&2|Ob^~fgHcQ3X_e04gw>aA`D0puW|<Myb+cm(AAY5_#Kzz9<X
z^EFc1_OUjtZ6oB6eqyO+Lg9W<*G==e;hIjt=^U=><Kb=Z(c-A8C7Vy1e)D-F>by!-
zYKC@-Nr6=b5WbBH%I;=Ro#ms>-Awh6K&}YV#SH?a3@Tdd1DdcaF|QjaS6ylO*^zrI
z6`@0m-tmY=*>wk~O*uf<R8t#9*D!ZTZKZY>o2WF@aH$szOQsh$uF9r7nC%b6l+Ri<
zFTqx<7N~|Gv8Q;&A#5aIvzA@w7C3cRL2~1s#QEt!dyjW_Zlj3Sxesspu=*39l<k_c
zCX`rVnwP3-aHX;Mkat|o#c7breY=d=dOXXiBoo>vth;Phd{)>Tuvrpr6sJMQyo6m<
zVPiY9r4EEfLbFN$OIdI;c4qkT&`Yo824%(%9;8#rtl!br>}~Ktv_w~JrK%mU^8`KC
z<+J{U-T_F)7@GT;Yni%arNPHswqRgIJr7<-5?pBU0y~M~{ts1n+}HM_Nyh7X$SLr|
zCbQHZ5{ln&kTftLq69+YTWMCjlcQVDt}V5;v+{m32ahi<7cbx*Y;?>?0hxb{82nQU
zN0GI*g}_$%@;*ZMNG4n%p%WU2%|=B)tn{bY$gcVQI84K@MPhOPGDu9XqN{tEP(pBk
zK&i>AfC!kF3-=k28Ovr7h;#yA`xKfPPZG_-#n{yq7~z{;H-b3lHftcruZeUQek4ZY
znx-2-l!^xgLZm}d<#B>x!QdemR3_p=K^e^A_5TikJ{ugP<dA~J3QPNQawqK=z|`AU
z`-i@RM7#%M!ZD0Dnc0^Eh}MijMq;>u8_*+!Qs@yFBm<c4CWg|3L^X?$S(w%?H%mk_
z0@}_x$v>y+5TX*w5%5;gj{KfxABY>v^|0kgLI^fH_nED^=<PRwOfC_UBj8hy=RyzB
z_C60lf`dKC#pT1vAtl;KJS@>;dEdfQE|#zm5X@!T{Ecbf^Zhed<_!?<2@W0d=peoW
z>@$OW0Wd7vZvmy7AW0y1kXU>SFaJz9ls#Hj{6WO|a2!_HLcW=4!;yl<p0h^P(c+1O
zq}LMK^DtSSjC4Q0{cdp>v*Ce&w%`MvdJ;c};JvVeS}_kt8deq>%Ur5*-i!0s*}xs%
zmcj79N)yC#0`UvJP|ho46-|}}+g+!pZ_n+XkY6CyA_Ho=pN<hO0xzH%via{(268N%
zF_k0>GGNFZ7r=3{Tr!CFB)jBRI10Hy3%KL-FT>>hwHwSICYA)iUrSkivhY1rNq(J)
zBePSHxV47C+!l>!-?}?oAML@FXW#EZN<cQg&wS9(NSZwiPUbR4jc7soY0PbdaU&9p
zR?cK>lQHhuqSFApW|kSE2lp6!OPBIWDQfsHu+T)tU{4FX7%;{VAidRkmEYOS`b0|@
zn;OThUq$AJ9e5bg1ML^sD3(J0Ms_N4x>{~UKprH0O>oYA1Z3pBDZMuG^RjwZTuksn
zRDg5XZp8MzNEZUawzTPh7Yj)to*L~VL{($8Z}H8f>CogoVVsTlXlbYb9+l(95;0~}
z)de@^?WsLEduKtquU`SGpHz94hIyJ&grRUc@YjqyT)PY5_OET+F6ve>TE~a&l#c#I
zjHvlmgy@O}7hV8xZ{X7Lfzjj6V!HZ1107>=T=dbLl^h{|A(I6pe{0rI(v+yHf6^HS
zf<zHo>z6HOq@KRk%VtKM^I0W>*!j#tE~<M<ONx(%0THFmA)o}X8s`LPRbi#cq7xvK
zQ>abU!u_2Y9qQs=NVoF}a<hc&Bb`a-IQr<GzKCX9un_q9ZVD4^kDOL)TweiryPKU6
zFNoK`w2H>iS;qAa8i0G4^b2VtLAZ%*XTCqr5Z19IYdd}Sn_272pPu^xl8~30r;Nmo
zz{!$l?+Pe<*;jivEye?41EUc1y4bBg$d}|@VxhGy$<yGE<I8HNNTY9$+oRbE1{HBT
zgx@V&*Kn(My<_Tk9Cqy7l<s|VJbx@5DO|(p8D*Aus0pt0g~Q~JddXKZrF(4qOAja9
z%2atbYw+0|@p(Vsnu19M>b(aLwXi4r;$f34Zu;BP2Sc`?h1(h%3ombkU6^D9tTB|3
zO$3c5NWqVv$j*9hLP^M|YV;>$2PJTae}O!P8=QZp-6T&BH|RHk2_#%ZtO-;UJm&*E
z+F#Svu(AO4@~B8bAU4wO-+*kWU2vQ?h0j=tjj1!6MaS`blfsa^pM^+PDHR5Ipip|e
z6iH+F)irV@3#~7&9+N{~>o;2HK9TTeshh-+`qi2Lx`dVet$5)3qhc)ms2J4$@qZyN
zCG?wJ*T~q=!QIa3f6^4Alof2TIRBSvwTT`<fq?Td|6GAYP?bjsD3nzB9tE=|<#A}0
zdINjBrw8+zE>;Ww4QxNn_UQcx`$cO#vTi2mV2zcA>>1Lq!gk@|i87%dcLD%E_miX&
zavo$fYYP}$($g1uzEj*<D$RS>F95z8DbL|9FpZZkxxy)#=|@yVY#%3yWY}@50Y7ZG
zY56pWjDd>Nb-o(3wNu`HB6#ig(D0VRyWMEue)>Byva4%HS_sY4nnAluHE`4w8fV#k
zztto6*+X*b#G`3#GBJd0kwrI}(`S#!ZI{r*%@Zj21*h&pv=P#Q2+IbhtePU*bwdDX
zsCSRypjfI%NFvLfKel1y;&IDwpG57~lqgzhfE7a%5ESqm!jqE#%-+p~J$&%o3b+|&
z9ILu-f**Ns<jZ|-LdG9E?L>anLbVg`W(gzE)Cz#un2h;sdEL*#j9;FRYzQP6a(!6P
z<JkC=CR||W7l){Mm#QYMeI@#7>y?g+GTAbVV$P7URlx41g*E*6g#{f!>>*mx(e}QU
z%%wz7{IBj50j|pI!zs<KPnkPI=4b*Iwo^yG4!J*panpwQ;Ja#yKK!0Al2b{Tz^<bz
z7J-v$4}(K+Z?la*OW$Uq8Q*+JWLO$;PH>u(G4EpOq9(_Wl?hV=9)LUK_uv`}nk&no
zc!h#A;4Ahfx{!oj;2#{3ewoy`hs2L(CQ&9X*mg)tv`7-m=OtM%a*RdyV$Uo?TLUY)
zEIX>aS`fMmF0I3M+r|$(S&Kn&@`V84nx~Qak1AkVaHW}>#1!Gpbu;owH3+_b3pym~
zwiDi#@KZy~kXLhr?b&cOv+*Pcm_URf@qW+|Tdm7cp0F2(+gw%$Yj`0e9c8e}%+D64
zv1}{b@mWpr+5Bf>EOp~CSy%4P=JCBo*>sp0G22wXuKGF|^H`d)F}RatQz}LtFV6X}
zhl`uJxtgefHeo{8@oj=ve1Yn;_O4CRr}YmndJ1O>`+;4$;gJg)ih<xQPm4UmT+*ri
zdKyNHnNBWCts-*I$xq~Ov=d&cH^AK*Q7>K@xmxeygMcnGsZo@_P>|s9ix6F6B<+Yv
zaApG$+xpB9MlG6V>{NkHYmbD9=e^iu(9Gwvt6GwTN~L$_Dy&7Q3Gna#5TOw!el6(P
zap1g7?TGHQZ{=2FvT(nNte!Jg2`Ksf>t+REUN~0Y&!XkQ&!XjjPF)g|kkd8Mwf-Ml
z>mfC5$BkB0@8cT&rM2k9rSbZb4e*iM$P2TTv(@Ag#ralqQQ)}TP*#Z_XIyxF!*|y)
zP_Fpec9!hBJZH1{9?<i)V-MV2wW0({*93@M^xEZt36=<Y!z-0G>R9Yt0;0=zr~7SZ
z_@(L-Fm)iK7qJ=<d%v27Y1w4eEC-iz`cOHAu(`Uzv5HEYUVY>}7otgx$F1G39?eNK
zg~2Zzw6(NyVRLDp#$=1cte$3~Y$}bg+`NZyRrZC$r4Js@h1NM=MJCM7sN4k??z4nA
z+hrlPPq&tKKQDWNMt5xp#U&|5!QHfzGl$o)uo03Sw^yI`*3O(QTGRUtwBxTo=K7Y}
zSSHN3Sjj=PX_BH=X%YiBG3+Pv`BSa1{c4o1G`q<S;r|z7@7P{zw{7c&BOI}9+qP}n
zwr$(Cos8JFZQFJ-PTqOW*=z50U2D$$5Bi7pv|d{+rQ8LR5P`}<*_MIi3U0@T)_UDS
zN14qpKu{u(0bElZ@*vCYW_wD){3B5RWGWOAL&z8Ij^V8HTRes923AC#$vkS+!n~Rc
zJ<05~rzOPoM?auqg^@}CL}Odl7wpIniF)2AKzCpCYsb$tf-HsZU}L<`WDA|i0H(+{
zmz-wiLn>BG8&}AXV)HA^<2-iPI@y#^P8bhF1BoZiSur@Ys<coD4=hwrH#x6RXlE9K
zB1(=VL{cAfG!J68V+0S`#H8cu#IQ-`kfWJiKAEKWq)B*C1Q)QEH}s|+z0DG+R4cs9
zWD9blhEts*0cPnL4TaBadh-KW4#TE&t5Sw)U~L+AzswJ`D~@~TLtE$M<L`!05L*^Y
znSMS0#Jls+jjzn_vy`_BE$ps-wJ5*kqOf=7vA|sMVi&$pGf@1AQwB_2Y&}R|1N0}v
zRY4%2NrYv9gY}G>q@r`NZfg><5|7mH*U6!{VIRIQ-^rV$U$1Ap#!3?wNgVSHZ=1*(
zRn-_Oa2uqe)9Mq@36VP4$5HcWrk_NWmWNq`39gXIQ4q*xi#8idBg(fpQqNYDa}z!p
z_cx<gyu8te6l=6D<`&T)uge*4?t)+XM`}cnzNT3yW0{l|vF|FdTU;Dvh6WPMH3O?E
z30mNSH7$tW0Kv+S-lcNGl1z{4hnS>Jtgd)KZ2aC6X;<5j!C=mxA0US}wI3!I1wi#l
zwBPD%#KDj7n<*Dc4&W+p?2VGZizQrUCMXCrtUGTwIOc!UhV$~l0tpXTE_c!B*D(U+
zuup?xQ?Qm^QGTcrb%Gsik*xDV&5vw9Y?kYH-me6trV%M*2_1Fpz5dY67*{hWI^j$?
z-mla;DWD$tIJ+PCqW)lO`{px#;|#n$^5eXW*Uo{bh}Yq=M7~U$g9~gkQyBgoTko0p
zBR6+lR%iHRY;J0^dJ`xIp@Q;z9f8^>pgoL4m<V)-arAezW?*r0+HC(tbDk_!rFoO$
zn-6YxCC&@@5<KHN!*<#(UzQNHC)pQ8*i?<CFw-HK{zL<oTF0I=%~2O)CQ2}fg!}|v
zJ~MIh`tIMxrU(QWyi2*I7;3)J(@u7dF%fzk!hW#Y5)D(~<hKj(dCiQ%{dg*5y)5;v
zPm7vYsiOuX7U+hr1;_ps_+=kEQwWEgC;SW!-4<5QD!pvZ`lRK6a7?JddG4{B1R{C+
z+~b@l=JPn=>&B4P5gc90531~3-dxjA94?O=2AjUZfP|V37l{wbi)zgKDgCb1p4@%v
zRl;mF#Z2=ENx+i?PR)D2M%rgy@AMAF?l*n^=H_+3LhGM&4ziv*;tSeN_Wo!%>fy2V
zv7@;A7b#1qUN;`+`#|e=LktIp8vuBKpG)aHPtI2QUf}HZsI<vTTf{+B!M5P8ZSj<s
zZb6w5P<71yCuRtqpP_f{byl>u*qlAA!MarEidwdLiQa}<nXJFyY+e3uVYB`EiU%WE
z>1Ps9;!|nMryqlU{#Z~ukx9VsZfc?=q-zX@HzC#dq08I_65fb7+(#<TdLS2DZXrZN
z3ps!YU}loZdeU->K#>~{B!Q9haeha*=x2;2plxXoxmzP+*JLvR3EEUxSH;WoLGXdH
zzoex8?6GA$&63&Xa51luJ%55_gKI1od~P~IBA!F6eC}S9$rBM3p9i|A(&$b}MCQhb
zM1S?a!Hn4zTIOF`6^U%6uCn_~5OG4CGQ54g1a`5P?nKM-JoW469;K>MeXFivcE(^7
zr?rHDJh!cO-Yp3^Sq0~By(rI5c0|JRhN^=B{T1V8(bCLX!>(AM>qodWn*mxTI6!if
z-fAC6ct)=n8g><wQB+0d5>08<9MS<%ty_m@u+g;Q7QHTGRVUnmW1DH#c4zNbYhLI>
z$6P(_R?CIwy^%dp*|acoFYj@=9|dn`(U|MXh6A>6A6T-g&)VVj%W~UhAMw+qs#&`;
zi>l3UiEbs@lG1_WC{<4;%dMV|olK+_EouR%k@Qt8kG5XYnZCifHs#f&=0{a-TBvc%
zjv6_@l^GuKHAGq&PT;Ke!SClS=PzUmpz~*bY3!@>tTX#MJbiD95*FuMGDdLobQHKw
zRm;_R4$!luGq~hmYBj&ax)M~3z*;Gm4=6#39B=<f6mU)Gj1t~x=ttiJ!6>w_)&{`W
zxhjBDa-Dy=bnxg%WASGhZC{<z1hLfST#ku4Vrl1@sH&bko11g#zz+Tkf<fNJe(xC*
zfLl0;($;}H+!X!&-x6%k5ZZsweqxs*KS;EH4=hwvl+tzl39uQM+y18~K$oig4}t;O
zXQdX;hIR_yd0|5z*rp4pi)I6KG=t#m_o*V@hD22*HE04B>tCNDDo&RSmkW+d{4i?y
zL(zLgao_FJr23ik-81%0tuJ~LtNJvWYP$)wbNryxx%o$3O0Qr=u|@>~`&|Zp&%A@1
zM-A~*z);#m^-52BU&apYAHRGbtOBunI%MlCW`5Pw%q^;MYHQOHLokdVqQW~)OK1`F
z_6pf2AwJsYJg>q4bSQ^t&bYGdVL<n<o7#Ul-91^;w;J&w&cUKLmOrFRd$eY!iK`m#
zEPpuzc$ogUr_^UFH6DSq+l-u(2wI`!5iO{b0m>Qljb<?-qil<5erNwaCrqo-NStRV
zUNX<RIOMNjuC9!U_oleVa<gI1;{og<to|Jk@UBuU0Zz*{kgN?6*h?Ago4)C!=eN)Y
z4g`r}0NCl&&gYAmbHdroAW$Ty(ZJZn*DI-^zP~*d8z@-@Gb;i0Ed;^{T9ofn4r~Fg
zb;ZXeabZ?Flwcp!OKlZ}r)$*>ETueR8>AArCIOQb?{L2hUWUj3?w{?9fnWpb&rFb4
zU0r~NZl5t%aTM%FJtGM%fI5nIE>~Jnu4w+i$CAe#CJOULjDuKj-()-A<YegCuFT!8
zEQWbUwUf8E5$!@i_Vf`osjsGZyOIt@%1t3#DyT)|aT>QP{wszTeEA?k#R)1-P=L5!
z5qpP8gU=VTyRa%xwqL`>B?%^~9X?pDJB3aerT%u&)>&;=lg1I}q(HRN;g1k{Zcl4-
zU1@9{RkQ}=TAAt=oL7Z7t(tnC3Gj}y7ZtYX)-$<5D0zUI;n{^kFwDx0^K|P4h&syt
zTZgED=nZbU)nb!ty(ES#lH&2HmNfh!rEv=xy=ri5JPk{mThwlg39e)c@x$Y00KeX8
zdNTPj-VooB!BpawPY-H3YJoAM_Axn0STYJS{uisagA-P@J))M(?Sq!;Gvcywm#~P}
zAlRV?;0^kKK^ce(2D}B0JzCeD*7Fd}SgS^1Tk;%exY&Zu^n3ey#xbO0NRa-idqijS
zJB!BFmGGKf;F@C+VL<wLvg?pLgsk5;!||x5DHwA_WWK9zS-0HgM8K@&!iZnNrLnxg
zn+EOk6B*pHWT8uxOs(477uWIV&g)(7-W#b}h_r!!X*p5FeW$9#C-SRn@B5h#bpvW4
z67J!wrd$ShV5ewwONV^daP)E9u;o?@qMCNN4nnmpk`(L8lXBDu7Y`!PGs^g1TKv;w
zf7ZcW^*K`fF!%e}>H3Get(LdnpYF_GEIL??JuW%C3hkNW*>=L9dcoDK>#z?8^jgxW
zY+JIlVm@1CukLp2(3bgx3WhiWU4w|{az4c1YgJC<Dc>THnCUD2vHaSW4;M!EtUvgA
z?BUoaOkDTQcjwylJ=0%PYbSH=OzWQZ+#OxHvOa%3Mpm1)FQc?fVR)iM3Kw7tA9B4^
zEo8Pau1e1;f82Vj;5Bw(Sqp$rj{3oC?;H%t5I(cBo0apk$r!)gyM!4_{9O5OxA1^k
zSBi7P$R<~@)wleKW7zY5h-KZ{k}~NpJ1Rv)r{EZLvTP^pG5uIWtehw&QnltBZ8$qr
z!&jT(jJ^Vkjnkv8kJVV>L4gC01dcX_yxG~x%E-Ytf5bAM)V+_XUg3>vdf#vj)01Mp
zK>ts{MuNh4X69$1qWJUR`u8#Re=Sn}<29PCto;-J{a18vofM58u-T$gMx7``+I5Y=
z54_`?3m*}4Kc=40xA$=8WgXu?y@J*|^76y}n*D?$S7HkMt#Rd-gEyDM5nrm7I%SJ!
z1y{1>gd=IA$1Cyxq|6!|N@8hJ+@@0Tf*q`6)Jy~WA{dz9guo%*(6pRllla<$LEE?q
zIzIZzE+mWqy*&c7C*KyNgvTxl5Xvw%@;r(4`w3HKjcMhSRU4jB;F|Qxi2Ro8rW1%g
z6)|k0TAm$BRAByjFaOPs0Fe?-BYX{;#%&5C2neY~&@+n3xP4(O@I{%yB3&lmsYM%m
zI2M132%*dLXidL<kadURz=g%#e#9SPVc<-byuJe*t7G&&l(?r{6IpZEe%51UxmiRo
zis}&TlZu*fuNG&zFH71KU2pXvt^)eG&V@Y=0Q^`&p|#m$LP&jWAp!ok0~p7<jrT2Y
z?x<dNZT>B3St~vprw)d+#fr<W2%CHbHYI_hdB!RO%ElB%@X*RtTtN@H_w2z!RGoOt
zN#!B{SbrSoSZmKX$Adwg!$o@{5qk2){1=(&fb{}Uy`3!q^ET6Woa)}kdi0lGWY$G<
z#fO!$n{2*Mw(lk1$Rm>9+e;&6MR`^Grc`q*LOT-WGyakuLT>)Mhyf#<NVHgkMXRd?
zNP+fPkM>Mhq_<!mIX&~ej?k8sJa7R_9IqEAeYP8C9^J)JznepHAE8XMkCCn&2tA!=
zIlk&Y8NZ-i(H6hHNH7^gHBCF6HM>4ATR2Jvwk&Bq`ud18p?|uLZO@#5UC{#8<QK!9
zg32!B3n=Z7z0@WAOB&S}U2(j1E#RMjrO~PBsF)?AY3wWDMbOpQwI(POl<LQxGu#qq
zL4A|Jw2*HT8>!?jWDjeby+UBpj@T{hG+1V5ySfE3va(8a6!r09wL~og%VD)uVG#fI
zM4IQ<w}ZrVnlTp>R>aitZL51e2eouRYQL>D7gy8Kk~rmx(ZOtsU$y6!N42_h0oT>R
zZjoW#S%G?`PxqDmdsCTSOfGf2mJs)LdSB%lvSkl@TzLDY=(-v5v!Xe9x|~?~jjvcV
z945H8d!R?x`j-vu8>mJ0di+!mH_c7eERgm91XMc|1j-U8XEYBx{Xnq1zw!uKP;rwd
zq@g=NhV9c1;&WCSAg5`hts+lHE@H67nbs(d_oNt#=pYvIsDR?+l-P(Bsco@UX|x=u
zOORnv_-r`5{-4zhs`~n=aTBXr#GauU$U0dX$XF4KIAs>)m0*uAPi`WVe>h91PxeC3
zWIWO}*@*x1Cg=TsQ+N3eVDs~TE{eFH%?!i8-M;<{9UvtuE2%7}Yo_mLrfX#G@Si5I
zVl{nR!WQ_if4X3FF9T(oYsF@ncz}5{ry=IlLy83*b3rUp?;CWeTZmNui7%RnjVBaq
zVIqM8S-P@ixj!6FU3yztlMjwaRNf10>-wUD-+jcM@Xm-F+}Y~lnk3&ZRWa3&y5`bI
zReR3WG*@IHuLlo=*6`S*>5jhKtI#T`g0b5;Gp0uob+JMzmgNasUpcOf7sDh|f3XaY
zwS3$S7_q?%jQ6CKlyxXfNJ4>aub9$0Em_o`sj3>)VLqnzJwCjubaSR`kBw*CKc@cO
z0|Cvc*0;&Pi`}(ra1`pM?3a{9X};q}Np`r$9_Tk6C|UBl!4!ok_`5Mfv+cXAF7oL@
z*XEAJBNck!iO-{rGjJnOQIhm=Gm4wTNj<RcQ`*3ww&qT~LZY-bWW?cvrS)WVaXFsU
zp7b!4LfDkfdBoz4-|cbL*$9PBk&UZ(+ge=1+R)fg&(DH!VlTSKL?ar&Q&uwjmbXFx
z)}SOUO6vLOMYz&jY5zxtRI<EXFO`Dm<slmFN(d9MmYRWy@9D6%RCS&s4exku>ha~(
zr#M^P>UnCgz!LI1I4eYYwq_6N)XzMJY#RHKOVIm)?S6i@$5`{C*oLe#S>EA-0`)xZ
zm*3N_c7?LyHSPrIyMqK@mq%*1rRGI|RkEU=EGK&>(R%M&JA*JW<Pw}y^Bh)>@nYb}
zlIy^n-usn4ohO>to?0_(4e1Lid&JeiM&H)c${f=$96!6?!DM^bX#ZOAV>QjKN@{@e
zuc+qT_4xp-U<wKtvslyl>A&SrAS3w`q<`jrQ_bS5?lbe}Rd==o>(jt#%GY#I6ZoPi
zii6v;I700ML(^Pd?aI?s0Z(;OF_Yzz;el(nDL9vY+$Yi?HBDC1yAw75pXNys##6u7
z^dl?zZyiU<6(=1*DEty};v7nh_558>k>RtDAEHQ77_@lidYX*+Can&b`>kpk=T8z|
zABsb;6x1qi6fdd<m%ZbQ9Zi(ZS{7|Y<#l<K{flo2eVbt_4I8cqHVAg%V9>H_XH+Lt
zorB3zxvW(jenqA}8z$S*Xo31f@7HS*x)3W6#W8*d*yc$dUcjReSAO;%m}wsQxj(mu
zHVVY5o{`@&gPKEOULwjvIH7wE8h{5X+~#DubMa)ahT^0SfQ%_i;F>W(rxMZv`i;#j
zpl4Jw{;>Bk_iz0nPU$=qFLUq*0JhFk>zymL<*LFLcJvj{c1c{PN^%)8zy2(KiZb1T
zz?0K|j~WhcOe1G_#7ik~_TGCqFk+48=?a`*2-*0Ko^QPhrL07mjgP9jV;LPPZ7h?h
z66@4AU$ZMHiT4P-0~rzcY-)X|;_(_<^bb|r??Mx2@_!ZXNw|-ss2oLvsHPW4SYYm<
zjFbjh&jO)Y)0LP~`EOE72JrO#7HZrr7X{{QXr--n7d!6roa4R8H53GpwTyMwINM)C
z+(oOm%&u5(YL%so2_Ih&^cD;2kAdIuNAQ5sJUVCu&A_k>Gbe*qH?ew;x7gTegHbQv
z9@R8RwX#><M^a^*FCbO0enpNHUB@})7D40pS;E!X*0tBMSaFUWc4v8WI;(M+v@^~<
zkh&>1I81rsC?9IxGE%@?Z*Cjyq%_)#Xzag*Oo{eJP0lDR-q>bIyz3Th-gt@cK!ScV
zQ9tpRW6D7^F;@oP?7K1SY(DBh#3+<pFO;RZhXl4h!41|%i1(t90D)BP?%(Se>hBcl
z_c-nPRofuN0F`$Ma~|09U7a1B#H6Da@9G|#Z_JOX-HSGiB1BG~8>5t7Iff^H58(+P
zTJ);iM3i#(<wF+l&qSMef1couEy`8&C#r9sj6T^K^kv6IakV4eKj$LadYniF#_|av
z86R8vY(!271{6(ZTck;8CS%`>T4uU1W30<%SD0nS4Vo<Q$+qW)ogu~|mL1DL;5Y`)
zTfULwxUq$`-?v!B0}5*<iV)cRgdm<aV8d$6`Wr)H{}iHf*5KuRo(cs3-4UQKeLg6f
z?*>CN2Pn^1No`Qg6nvzJNqs4zRT}~JRC;q=XMspX82e(Zs>tDHf{-%J8es}%9?_Qk
zb5IwE#zsXdev!UnIFo@o&3F;m-ZpR>fjp$-ob+PX9laEM%R`Q2968r$3K3c^gs6vL
zjFuUCYAJB++HeoZwS7Sui@`F$F1(fuD6To-^1Ab{<6m2&DIa+2l($D|Y3!)!Tw&SG
zZ?iEB(D8$$dcO$UlqT~W#WtvmunGcgS@9use)_~qk`AB9x5T9Y7C*Hf?X4Ny&p`i9
z9O+>o0TA+B_}M>Tq0$VeJC7lQe?nD{z!(kHvoSMsy<aY(e)|Lf7P1Z)&__Ow(*C^&
z)wIPtn0npYIJjMzQC!#Ah-Q>kj>Da%_3?`R`z54HvqAp8OO^W34h)t(5(i2b>(o0T
zY9(Y7JQk@XosU@{wvxmV(R%?#*ONf{cpGZ;I$*9lZrdCfVx_j$ODm<&$TGw6rEr?!
zN^Qn=3`GrJOOWD41j|IfUz7(J<|Kpw{LF;04Sh`-Sj~6)9Nhl4JJ}hj2(knNPzRa+
z<jeaH0qg4#mdX1fXL>*VPm*X4<V42vO6;uH9qxa<9RBHNAqs=_4f*jy_Wb@&TbO@j
z8bezfn;(SG|C#~*r(}z&rsFyr($5x#ZNYoBPEhR6#+hI$gJ4*T@j2+P#OuTGcx%9Q
zv@yc5{L9CY8}@|XBt_XJvTE~fJ}2WJ3MWxrJK#CG14gf|gR4_+?Ts9sa5Yem**~?x
zD!7p5*>ZcCrs-r`3SQ-Bkk-O_L6YtIPxuQP*2PA{*^7`>cFGVUsxlP%u<eN-V@@ei
zh{L<6<qZYnppVYvNlin_6wbDcy`<$>SXUi+hBYl(1;UTgD>k|jb`;Sr91Fs1X9<fN
z)48JLO{S>7Em5VFSvr5)+Me8E&Nx0uKl=^MIN;7c0G%twIVQ<L-dRIX_ri+odIp|a
zCq*3}tQl}+HwJpl`A>ph2Z6#k2NeOez%wV=Ex_Ui(wrj0<y@BR@NojvI1rilVm|^T
z;2o9dVumw`@Ts5^CQ&}im5)bsPRv6pt4BrFy#i2L>nXQEn%{MyMp+rm`@c^J$ngM_
zb|nW@)Gcr52fHVw`!#tXLC$kyNX!^5lGQ1WH$iXQa~A=9BZ>f5oLI=7rAr_uDAvjW
zrN>K&=BDHpn6X5S<Pr)MICH1V*cg18<(YABirn4$%o;*9Ix62bJ&7Imn~0PUkmenH
zFX`Uh3Nr9<LUvVd)i{;|WBNF)a@b%6k(Mv#EwupX{RX&o09YjlxCH`ezeK;06+4;J
zMv$k;^?!Q1a^MK}g{(3>bJ80jE*Tx~2*5gp!cWHbYWZz}lV3uNFEJ88Sogh#=QZD_
z!B!DT==(x`Sha|TL;>Ad`VP&tY>sF(yxzM3C`Pa+Rsmw%HGl5lfI7m>@>tP>m}Hv&
z{F;xYlM;-?Zkf;rB{<c`=yWt>*ZcvVlFiG^zRKB%I1@(t6-Lw32YWV%GOZX~FLu|+
z2QN}p8Gtz{pZxKt-4_UVL`+MER42^!rm?!6UN&qxj3AKGSv3%X?WZRN#g#BvJw4?3
z$pep$X@1Gqyhzb9=&_(1Wm3&V%;#txSYKq^zXD32QPmW0^QXA6SNE6&yrbA&?26zd
zW<Ul7RCw}*zDli<9_#fVAm+GWUA>vR3{NSL^w4&T2E=%r1iN}12cb_BUQ*36W^PZZ
z4}w`9<xVDf;PU(CoS;2@Go9x?0}$t#dg3kmMva3mjaXLj_oW~X!iSc)c4^cb!d+ot
z-iQU}49<?gA9Aa=z&xONNYId!qb0Y3bu_FOqnP=anjNg#_zo&~%tyb|v9Kgl*eH!a
zYg5MvjL-7Oh_RWj9+96ugIl<vOFE0kQIW4&;H<2EyQ=A$7E!OgjRv?IyL7fS!2ZME
zh#y?#dl&8=%_3J^8k<w3x9(^=!efd0mUcVz=S0!UP15yYX6O}lUi1>(rz40+blp!H
z1w($?S~{*_VrYfZ3x#gp&w&D_KBLF^;?nk-5(%w7BYXbf??PLr1TRQ?L#A|~K(P{@
z{M)Tv#l2wGvZ3|1+gI$!n*kT3I-NWilRo`AZo@jy2hYu5f|xI)()WudE+Jf<aPH56
zIbOK#%Wev!OC$CTY121>rfh~R>l{NZ`vr&$NVO?S4OfhFRL0?|zgHTVPlY%W_Ht-G
zlX{DxQJn(7Lr?KpF56wBzjv0Tjg`wi%5X*?W$g)=zOK!@5rpZY63Gqid)7>8zfYlI
zKnl+;eR#fa?fJdiH!<6`*<Qb%o-}!TF@#J-{zjsM4?upg{`@*2XPHKn<A7#dehI@(
z|D>laX4GS%j)+?jRHwHJ60arx+H2<{Qrag%tIYhFS|S(QyCGRKtFBc=yG@6HqB9D)
zi85lNG*k}fMz)1*xoh<<X;1MxHzetVvbDPE8t91r@&mXoiYl$uNbG_}`<lj^ni`i5
z?b`2yg#{CDWVad%UJuL`>QA+4ijn`ln*JY8?_+>;Y{-xKefDSN{_j0E|9bTqni(5f
z>Kf|*udDulaP~(3Z;&S)z5T+fiy~(v@~MX3;eZ5m)w0R<G=r9Pgc}f3K3_G066EVe
zT|(hEPwXc+xF;+t5QZ(}_eKB<yPkuqGZz!Fumr+)uXt=u`97d+{?%0S{(J|AB9PZ`
zMZt7z+Ux>DKb0L^I3rPjy_n@fDn#Id*@X=(7rgMI?n{!Q&e{}UwQ8E*P}?56&!vRN
zCuA@`_z(xKOonEua4$u&y&@H`=x1JG0ZF?b#A&}lf7UO`7RW})xvb_jmm9IJu$0On
zBp;AOWcJ6S^yNItsDOzW)0AmN@~i1n4mvmTlMpJpr^X{>&V{B_n&6JT3{7%@>MF*p
zs(Qj+QqgYrVY*gz8Ws6a?QA=ZNfvEh5E5pFq`(!R?Odi@#D<PNLKVu17B>kcOZA16
zcC7i5G;oo@BaS*6t*tz$k?(>QU@c<1ExVFUAZ8Mwv|gm_ABhQE)`+SSYYnPtfGW`f
zisq;W{%f6#BbBc;z*POHoPt5y*|%^`?!Jm|6<_taZmZao5K7w!!ki)=!7t(sy0?e%
z7Qvq_0xxZlahPO)qly@#tsKY8^`e6NoU0aBfU26B?oAS(R;q^jeH@-MYw8B|pmrxE
zDwv}-YO@4pTN|dP<M9<>0!d$ll{AKwj`bZC5{#e!8FM2LZ$fX6RZT5VSkXY>XV#9(
zWYWk-z!=NMGYUm${M;8_aGSdZ+`IsC>8xOs>aJVwjGl~hz^5xs%*!lxbth><kk;ZB
z`$1Q{P86@i6aZwcKSa!B+E&Js9MEM9!!uc`poZiji0{QCQTl$b1GpM#oNL+GzJGoB
z>{$9>aa%Wk4dnPRiqblFSRKxY%VGTQopb*jb^M7c^01$yzW8(0|9$7&Kl};<D{~to
za~o4#TbuuM*n^e&{>jOA-Ka*bOCk`59L@?##`zVXgkuDWFJ%=NbMIPTYFoOZ2>g?i
zpJfp`pZmjTyY0z%@Uea@u!&0cpeY8nGb}*W(6>;rNU~z`U^K=2iK$k*_shZ*0vQk)
zEw^v^l*rst@5&0ah;kZKoM`C}@1AMwnN^N71O9FoO9eE$K&)i+i}8qiI+C}~e27jH
z6KeekvZ>Ypoi_%xZ*Ouz>V#}oR}%-Xq1$*Yx%I=$fmLJLWNM=Nx*5ooKBmOLpeixY
znrand8d}_Lyuj}cAnaz^Q!X-dq2PJ27!lZ3q`n$VS_dT?T~-q{Fdf^dqBPh0QQd*~
zs<Hr5HGGg*_rqIWLnv|T=tC<7)YRVSDBgTQDnpo=)=>S}tJ6Rxb}PCFl1IGY1Av1Z
zie-g(XNb~2eP5?@b*Vg3rC(*j4BVaZ#^%VWC-72ch2j$mfA??nZ|JgpfFzH13^L`a
zXR$jNCguN#PST?`Enpd4MZ^<^GOC*@xc8rExYHN5Hwmhsd{x#p*!b3^Si{jjYn+;M
zqZ}L!5Cq=@o(-^hPH2RNhP2En<0c8r1V&;1jChuOCu(8J6l|ey8%42X!~H5LfPdl8
zrjBDH$5Lx0@kN@qIlIWguiLk-r?g+51r1N5WQiwA=v<#owG#OA`Z=~2`PKUgP~6n=
zL|d%aWt;XF4DR|4xd7gw^0~PBgrU1F5qGpn0AgAAh+m}Q3LLF4ZhAEyf_EePGhVs)
z*D7e5m>~5_%gy36qfq>BfG;D8Vn~bBU~a?{m+_=Y3+*$a^P}A{u>_CS6BjD&I<dqJ
z)+xg*{?;$7UAc&Vl!{etIKePytB5MdDL)scQpCOfHz5@*sOG}pXN2GRL4p4JoBf~T
z{{LR=|5x=N+P3E+KTrr=dTCq?0)hVO#ZVU1@FFt)eE|^hVy^rlom-aYnl){~*B9<T
z&G=)|y05p_UfJxX!#k3hkaygQ3|9+IuZBc}Ui4Zd=@L4rwdZw8w%YHvK{V#1j@jdR
zKN+EsomM`!dr{fQ)U!)_dL3~79*e{u5c278%D7vuE<3H~8i43J$UD|mmbdn<M5;~c
z#K+v@bqY;_@=0y&H7@OgJ>vV#+`bKuj~B*F3Ga%-cD}Q5LS8ky%3kc*%OIOv=QX(z
z!|atbJD$11=jwi_q5!7G1d-iQ@cHnc<C6RvB^@g;?mis_sGi|p>zXeTVZ-#}7ReVx
zAr;jOZHjD@u&<S6b>_*cI&}-j6&{q;@?@Gv6}>H`^C`+PRSRiVlU-j)_8$3h;<;UO
z?(S<nt2)n|fi-Ta78*%k{H))r&l^Bb&18nrhsbhu)8#~Xj2HU@8<}ShMhs!{l1IzS
z$T^q=EHa^jnZS_A?li3#zmzEAsumb-5EQ(9cLOUE<oaCY-DAuG7Uy_$EL(|RDb|U|
z)iw}i(;XoD{JTP;nWF9_<d2jkJh2&+9Qpbwv9p{)4e2`GQIDL0*U1GvriL-j2;w#@
zYt5p;>?CEZ0cs;%b}JL5kQ<Tg0r?v+<jAwBkSq+q5XcYTBuHwRn?0j1<6~GjKO&;!
zU|06_@ga$zD9_9tfGsS0qKFJszPI()y^35yzbdUkksM6;>Ub@S7m}nlGdX&;<-s53
z79PAL{z8+^=$2tLZ@$RV2P>Y20ebt*UHwjCE}MulFrTY(_w^2-eLmugzB6u22}yGF
zTO<)b;<{qYuFN1^w<4gj8?sPu@nu7bi_A}R!R2C0b~z9(EdrZCh)f3p0<h6nmBQZD
zc7Nt>L!UaCh=!an+v(kaX<J(WcRX7=d{1TuJ0IdOu)ngq#e!VJ3Kd>t6tWq>lhE+f
z84iRp`z_>Pq+_gbbPsGwpRpZVN;og9Zpo?uu||SmWDK+)sr(VM|67|aF_A+-o3dV1
z@PStbFtCmjsnQ?9b9DkZyVJuh&}e?O85)<}aLgC2hb(-44Ld5hc6`2F0}3`0_o=G=
zaB#MVD9~S3_fQQ_hf+_(+^$0WK55)Hzhuf9Fr+#8p57CMV5T?OV6`9tUT2i3Z?O_t
zZGrz7EOx^9NCN7T02`W_F>oXOVsia)AZZT^Bnn|7PG8l2Eg7O22-&~C0@Aq>aLCp^
zN$jR_zi2Buz`_`ZlDGc!`3;8%1A&A;B+NzHPq!A9x@qH<8Q+>*-r9@J3oBPmBzW7%
zKT4t8uNxi<&*Kqr>U^$~r}1Nkf_UbO7YpJ?LE3Mn)Hu!?7YuLMCT{tp_wY#jlIE|;
zlSl`HYO8~s_K!8|6Nt)gR%5j)mm-jynFz(~r&|_$n&<E~G62RnO(MJDw5Q9X3A3u+
zIll}0gIwUy<6fp8%0|@<qCUIUK`?_+!qGiQ;hy>=pW^&(UoVuSPlZVoQ2j2CU*Bb~
z84+@JsbJW6DZRyBoyFVaN{=yT*N_Hrw^Vf<K}#|@_pIOPmNBK<jnigaZltuI!8!_U
zD-<~t^xk!`-J<x|v34-w<@NWLXfT@^mgatU<LT+?sO91tcQCFwC3e~Y)=bSmw9GGr
zj|~B=mU*1A<$x8Gehy;0%Z=~eD}vgB`|t@q`(fbE@xFSg=%Ya;nUzj`UPc)yfvo*g
zN*ROQA40`OCNteE|I4DgIXAuCi?_)Qgrl$!!np+_FV+kikr82Y%GBFY;7sPCH3?pT
zJF1}hzwXXWJ2#$Fl}0n|Q_9wkON(<80`VjExk~(>{|!ZM{K-E9@T1{g{Fvgo{;e$Y
z586jiTuw|_L03>o?O(0AhURu=#tynh`cD5fvHuUtnIH0&Ee8F+5asJoLT3mbr}@$Z
z!bvP*NV5V3$3c_Vz3mJ+)w}|)FW5Jtf^zdE3a}tUIsXVVn2z!aG=swa3^xOZ=Noci
zdskNMXj3(zXAX6*-J5y3CKXh(G>&IS<XBrBr7yQI3XnSJPP^h{2NIK9Vu=GO4o%y*
zN5IuSc77ky20pCm)5nEvaJMSyQlVITSrSasXE@ub;`U>zFGUV)Z;VSaBExS79;E5M
zr#>Eldu8d<jBTaT$NXpmO_#i|CxK2(no%W)_$Z(_l|P6Ss0%%Y+EG7Y+$wv#d?I5m
zjb&Ia!Nt1*g_VL~PjjzMPsnUOsu5~WrftA#c2)MWhF8uQ{%YlAzX%15+J?Mh&?ahT
z8+J(*u8PTK3n1N5Af8b)N53@jA1ClGUFecd-Wn4k*vS~dB3P_)vU=i{3aCW^H7z>V
z(1Vmk7wTsy!x=gghKY53Kqz^vFAr{R0AZYQIXeeI8%0I+6(l4Fm|zaC7UjNhP)JjQ
z6=PTEG=-a;SEqn<ht2(ET8y_HU5S`IDkUz1KbgW7L*}+Yxp4>>!}8U25^e8p%{#4s
z<p96rAJg>YgQ+zxaRr&h>0UB$>kAhR4v468d-#@Z3kz_j^xuSPpXjZ3Tp?(3I!pw2
zrxy0!`s7xSVTel{2<g)yh|3=6H=Oc0!)s@D_K7mP&lX;cS$}zL!7SI@_v;K@B%ECj
zZ+x*ABbn7JR+cO|dT^#t7ap&ZxkV+vql?VMIacv)BPShmf*Gpk@^c>(|A_tyJiDa9
z_U_UFr_Xb+T`IY~{jU0(uTjimZbHse{3G=8FW2|E6_`gk#}x>A#<Cm6C=bVyuRxKE
zv_GKmuc*$3huUWJvTlLw#sFCzb+6Otc*tkU-DUd0qNngA%!J`W5dY@vaqs{!r^5((
zwU`~3gfSVgC;j}83sx38nDeV<4LY8buY*p0kWm|w+^9-_H1N`K(`}FK+O}zt%-9JD
zx-3yWdCcHR=(l|`PNIj>`2_l}{pUY#g)D!oxtgE1g89z?MfGpLy8oY}PN(Z^ZuDP;
zod3hS*!%xOYQ3mN&7+1Pj0%@8rr^OF6pPjHHzOvKTGoSgR{w+4y4`VIW`hW7<jTw5
zNYDOb>ZLih`CtQO^hO+1h}(Vg)!Fu%P&2DllyZVG?LQrt&)_x2XaZNY>q`YRBhQ9Q
z@f86#GjK+gGnfOG+d3+dNeFEeEO61#L%gd)U$m-mj|KDL#6aF?o@Lk09hl7?F);CH
zlTc)jAl(nf#$C;3oa=r&cazJUVbQ*$W9xo1a$v?FNwRSJ)tXIX#)NVGt3yUmkHD5{
zOHCwz+{~q#x`L$SY9H04#CT}K5cKfgucf2U1zdsu6%C{}^*0=GiV(w(V;iFk$)e(>
zi+haeE_~|Hm-|J>0M|CU;+Jq~!!M-t#{Rs1tkxg*EyDmKh<S901)bQS@lU&nCHC8x
zAyWSWnVXX;+dg?}S*9c<lL~}hok{T!tKaI2KGLA#4AieTWLa#1lXgxn!i`u0u#^G?
zg)X*ClmoKWCiTT~ks)<=I2(bCT9Cq$SDvK(<)Xz4Lf-H=$#@#c=6TV(aT*^(??an#
z8BkB2Yhe)1LEs+E{G=my3EBb+*1)xl1882U0(W47%wHquG{eF%nxXJA*RhNgL&2Dr
zcm#HidYmQC*s?3X?>!^Tkh-fBOI1#Mz5DN+SYk<FcMxYVCn{9Dl+jv$jQi}RJu|yT
z?8R3x2LL7#EE!npiekl{bQF?dTK*wnO4ZA0i7Y?~*|S7~k^|)?U^;N)+Ta}1?(-x$
zPM!dc=6mT&(d$(rGe}yAi;^IlCTi&OOw@lJl^saLmN0E1ezgsm!84HX(Lf)_RH8>8
z%$c_Y1tCcd`=EWyzBe{T<T=zt??YLh=5Jjy2qqy9E4^Fx^sHHVT#ZzdE>-kYp0zkW
zLOy80Y;hPZyZ!enX?4vgg_j?LKpr9h0NKC&CjMc8yBIr|oBUUq;Q#Qi6RoD5xZjN6
zy;3W8#G_>rN%u#5OUb5R1{uypP#dMhPue)QB#1ijdOd+~Y#>25_d4Zsh>t?n(5igN
z`~C53xsy_Qe6^zx=}fab!z+uC<)hWxCtk()1b^ft@DX-K2D`B_#&=?Xl;#$5XaC|6
zbq~~aTP3`<%4*V@w{}@}V<?6Go3=QyQ-T;bQ^Dfo{-emQ@PN=uVg2EG6p&{+>RI6<
zcpBOl7%J4OBXjcmrPGJ^^@|twZ&zUIyoXzKPfkn6lgacBn{5@={h7hk4q0}9<Xvd_
zXPjyVf!J9q6)KqP3nP|~`3u8#<@N3~+CJ^WmDL}&b?W6x8oR&_fW(ArTR)7uGqg!=
zhoe?r2_JhDOB4rNg3Crw!%}HINe>%_nA+V&AvZQTb03b1!?2DlB$ONmL-ZU!d2;X5
z8r)V+CW%wwLc6L50A*9;(wk0)Ta0L8QNWQPw7m`njA)S6OgDuyVFw{We6kt_kDX5^
zEzB7SO6;#i_*nRzC)Mn#``ai$>5;f;(Z(VRV6P|hHY|D;Y(*VGxQtAMEd=*ycyBBb
zGX%A|*gL<a{-RNHCz{<!zY>-~<ok8PA?%iUO=4Xm@JEg+u0JJV_`m12fb@**EC}wg
zrjgTAQ5@BX!<}d<9kvbSR)WP^c8)WLK4w16|Kv=y$f;5qLeVWhWu-3XwcV<g_yq?h
z9ksEu(>2bHQ?Bnz0p>uxdLPFXA3{|HAr0im?E?K6i@aVP$>B#v*ErHrRvV$Ic2Pl8
z-Et%WXGFllK<v>c5!maHf<gi&S3$`!wi}}Yy!1=@&Yhype1haiFk)^S$jlY-6)F-p
z;dJo_d&H;WOveLE+vs&~E9Vad6*Y_N3gXgo`Y21b;#calT$=|v7%!CZhk=;|A_fZW
z2dk+qj<P5J!0Q^dc04y)79+ZVM^0OZ_c7)>OrB%iwxdwIZ&54L$+2r8VmSm;5ZMHV
zQEFn4(l_TJDXSm1ewUy{y@GW9Voye?yi^F71xIt;$4f6O1};-OTi>_ZCwpBpK?fI;
z<Dh9;JppVHNfkOF`-KUlIz|$ZTM}{W_bDnN7Z<`1RD;w>(ecZ2u|vQG#;(9c%rZI{
zsU!#w$<r7=5#Z6YIMXBYcd?)rl<+v1SS)445smvGLG1eaYYP<Lto$inT<ZsYdpeq>
z@qQpC;91o?1U>**qlbX7!*D?{GZ7Ftv^YL409=_5p0!+yYZFOIe;bWuU|B;m5grMj
zG_DcSo0L*pt@p-6p__b31Af368nJbgPL<2URD>KKdr3f#bebAQlHny>ex$!*shsnw
zJwdpwbK@2~Ge2ZB<ZlV2CqHfV8;l_f$|r$e?|lG&GsNgZ{|5CYkrQFXzqqvS;*=0$
zp=I?6x<2f<#wNAA@5V;PI>u-NmNLj)=FKeBr|N!rrvq2wj_FZ2hT$16MsWy8BHy-S
zBC6|XMqH2d%f&cb6a-E_xZLS8?{Li=XKp!~sdQ!O3inJqP|Kr|kalbxr%)#$!DhSZ
z=I1w$436!G46R|TwzePVUE?QI1Umhuvo>B{xc6WU#pw*WCXu5Wz(UeEq+Ax9L;H<P
zna7f^KQ!6F5%HDYhv(Ooby2Y@n5-@3oDUYdHCn?HM5=gXuGx9X68{FotFH-{_iT>`
z<tRM>KwW6`$f>b_(4U7w#hN$t&Pxss=#11U4g&6^=xoQgG0mW8E)fai2=0MsN)Ag*
zOa-1O6{GPbKgM^{z7h~)IMo%VRZIkYiIGl6xSXWYH<4@B^GOlGF!F0<LIr=;G<1Mr
zfUx(om<}RC`8f=AHT(fymXA>?UykC#kd6X2QUlT&y;NwDRv}6$vXiu~9V0|}bA>3M
z(u%ptdNrPsiCtOeh^=j@KUT39I?#0_14_p$o<qze&DN5$g~)RiG-By{n+j8+i8Tkq
zpaN?S0bOfF78TXPWp!u_dFd?E$V6881gR`NYAhNfC(Qs>y2Zvu)Deh}I*-6!?-vlE
zHq>fLsE|Yj^JPzi>ZCPkN&Z5I9i-mqIgl;3oUl0++#F#=Z4C$Wa6b+O_`B3kN9NR*
z*BqmiIu;4bX#<^RI2i*nll>zUPt0pAKGkXg;+w~xbETc{O=|Kq^7V=e(#pj9-F(|)
z0<@V!sGyK$FghG8dpOH$cj#EZ2Fmdcl}(n1t<tH8zbxuL0`V8xQUTAL-zl&29leiw
z0(pOvmi1E3xBH|7;!9a?l#SYRyy~cSp|eukRoq4(&keFx1m@Dcu{z6-s7D^Ae#N?%
z2nXKW;AG;J=JHqt`fsRii^Z6L<g0jgCI3bzuk7zgr3g}1Lq*<_umh`OOZHVF==%#f
zm|kVl=d}4vc@V!OOkFo<7}h4%y-Q=HiWAh`eV&h*Eq^j@B>@bh7lGPbI4Rx_rH<x#
zy;F3NsX7sO<uy$@ag|X|$p-_dEk%&C4D8bE^WLfM_38{J&T_O?F);UVgM;Jq`P>oO
z!YfCqnW|vhBKd7J^;bXbC=rs)GJi%I?+J5r_f>?$Tz53PSfWUzKDZlS@RtRY`|BXs
z>wRYHEoK_vo2g=aub~+p8a{VA(CeY9#Q*^CDb!+e?|g3q{=}R}qhBLr7Elc-oXnQa
z*t`RMW^MC>N0DP*p&sNRT@*1BJYT$9@6D<AnNNEUZ?;U~t8HC;edtHs3C}P+$2-Bu
z$5lts{Uz=HIc$sN5jrVA0RY_K{wJHVviScER%S_E+jfHk;U^J_*8sZ$vsu&ybt#zf
zOKjtDna>8{5E#{)!7RMFEnb+KeCY1`otu$}cul24ThF!L(|=n7fjujh(bQxWHhC)e
zwQiomm(-TVw+CV0oFiU#VeLjWR@atS_LhzEDMWYgW=&&-GV|e}-+YQ!DQ8AXo%v~U
zWjaaHC!KZaS`uEh+sqVY<EuE-mb2W^5~^AvWj0*ewxbEkvyAVBCc8HKkB#qM-^65!
zn?-|%3VTP*xr^sPQ|3{HN~cx%MT=l<*0Z$y1LL#lx+hB9Qq69v&dMJxS|pSw?e@>_
zi&wJ!<L#9ViBwqF6~s4@1d{orCKssWGnP8o9UGe)oDx`pQQmY0$_%Xu$4KjK)Y52n
zb?sfru4<;~ls>C9v{vB#9awLO(oj%%@*DhpbBb7C84=p$!-JPERr`f7?v1O&kv(qe
zlAk(y!u7Q@`mtbPLAFRq5{9rzmGQ9yG@9){WQzzfsdqhfctIvCwkY~@>q*<6+9P03
z60k*5Tu!(nf0G4a?+<xh&ud0CJau|b{Qe?q!?5jzwm<HaSFtn;IlNVss@wW|=gh(O
zbWkfAmqfl6Z>^xa>uusWe8VPf8P4)6TYhQauD;M(ubu4Vavz(%guSxy?b>Tj6b9O4
z|5Y}1zWtaDRj6jp?H6+H)P>iW>OXn*mb4xLLoS?g_yTsl5Ti`fY7h*sZ-tH{PR_{o
zUc)#ls5??<#!$H%Id!AQiRPU61+_?LpJ)w+`-@Ut6QR3>i^ftKUF-A(RR$(ixNC5G
zS&cLir<~2F+vC-Vx63nYdt2@ykfL;ab0XOJK79O)DS07$5X`(&>s*0Td9=bl`AI{7
z)Esqwt%RlcxuKarPiC1C+k!!yFseJ9vKAl2{9rkv;ZtaQ1i6_;wex;zIK6$j7+S=G
z{$69^!V!<vQDe#D@#JpEjbH#!3@p4V)sfm!(_%C@Mzc*`Q-9gQT!NW4kCi7=LnXN1
zb-rMO+dpFOcC)OX=4i9KAIPku7oi*k95kc`?^7sD@{=SHMS2YS=xDh8L?x&|uFlIX
za9RGq53er#R`ZkM)V6HDIO5*pI<8oxHhv&fUi{JlW=z$pxZk}9=3AxzEZ7AjNK{g}
z)-X9Uc}xX~lx?^jtJ2{O2!amM!?}Hh5>z|MQ8RqBo&aw<1SoS8I1_hF=YWeE&-I{j
zGr{Q-9DZ-%Xn3)5l_+-juy?D*lnb5>U~kN|Kvn?`V_OOmL?V2n&nvs#Zr^zCN{CJ(
zPQy=w1{*J&4L+F&PiY)+(4j;B47v|Nhpf5CM^3aT&KMjpvth;<i!qO)hz=diMWE*S
zh!#B3L8Hw55vu`@sn?N9v(pZum+Wyu`M15U-*CaI4EVA4IR+FY9w!ccO`N42Oy!n-
z7J_Xo!blNwR@}q<t%8u}fCvy3xr|SET%zR#6DZCo*+P2|8d_4!36inA<U@hv-qQ|7
zKgMLMf*M9Xgg2V;tU%9rgZhlVD->_(#jt$bu_gjCSeVg-j2&=O6;i0dbXFg^AFvwK
zG@$MpLnx~dU9<3Jj4FbGW>TVZ#Ay}T<!~;<oB>lFDrKA_ri0P}`mUgU=$<c}SGw`3
z9v(Q!d=>cXd$M&z7E<XncWi(Hp)AK0@j&dfN$g)uS(!oJ82lfAU?;us*YIOZLgD=K
zyVU+)PMzK{M8Lj5=B^d`9l5%RViIm#CiZRmcWZW;M$}+T9+j%<QXf{}^wWh6FtI?F
zHWB}tB*WvVa|R*_0?6@5Imc1sYB)c*%kE#~3BD8;1cpt^1Dj3W`m_TgB#+G7Y=?RK
zB7X2fL|6>X3><{_x`W06X!oecR|uczc;<1m!R{fL85MNt73`|BN8__OfD?d`IluMB
zzJ;Vv?+GJTLEH9@&)ze#CcPp~xRg@!A#AhekL(CA7*i{fBI%#}q2?+PH(wi|k(YjC
z(K4)08leTu3b-`U$#(Sz&nUu2%~`2^MS4j>?tH>O((0tWG-0cwWY=50M(e`Q(1&xS
zo@$v6oafTn{I)|ux~Hm5HINllgU4hIW@_sCl!1sIx`(4#erYP_#N>n6p(V}13Psy!
z0I4pfl-b;la_;G(teAlzF@2%fMVQujk3J(;O&-fROZ@b%kkEgumO=DVHjRmt8of~C
z4gO&I?W)X;$i(S^J9d|swVbDO<yVaILO35zM)Sv^jw5~Sia($T4#MgQi5R`e;zvvN
z;G=?{7aAoAY%LO%L=bt9JE5AzEUS=)9hvlLi*HrKH5N1~bt@LG`ap4u5hQ>_(G5RA
zqQ7K87l&Pf*FH8qx2xF^q@yN|tT)vs${mC$A9EN8&RQKnSDZ(}RPU1AT3djhE}pr^
zdCi5e6yb+MeVizTsPSKPrK65H`>1Kz=3I?kidJV5xH9;dUPD3Ps*||IL|_7h%79gC
zMV_r!wH-fkp(RAjuFr@}%n|`A4ZYQo{SB%#gCxB-t+|L^&L{P=9ouLIp$)`j)Run`
z2&QPV*V2@-*l&As#Bieo<jby>z-xVtd1OA^yk?QJh~(ANBJTcUOrReiVpDWJQ<cgb
zlLt<WejJmQf%SZcwVl1a$<008t)=_T(((TI^lUJHqY3#{AmOqOE0+ETwyIEbI=_0c
z$ZcMxUnUY!R4H3%Wn7-fqmiU7Be6f6{ql2Yby(2aU_A|W6EEER2Q2U1=GE?#we@w^
z#;g~eBz<Zo={%7<%455t;nqs17KZ?PKrL@mZEsgLR#g2PURAlw86-oAEvJNFTk97d
zt`<^EC~b@9&C6<qYae$UEZ7U4VGPMH2?51=Yj$mrQ_R#7h#Hl3c*H!83ss;hDPueX
zN~=7najJI!+FkN<XoGf8MA&PkVJ?%gWEzV7{#7TKKNzlF1xE%pqGXBfHHE1erb%(s
zs=~E}>Ot=G%!-I9N<dX2A(D_;24qVDfw*Y&KlW#2!tCLK3x2~V_V#@XX6_qouRg!*
zoP{w|Q_(IWRPU!4aQ(DI?BS0>6apw<lcMZ<GySWvKifFc0glHQc7dq}@m*V9I$BdF
z*a`etoUCv{;<N?t`HpMjP6MzRb?zg{5Lfos=UM&K8iNkD+el!4_vb20k^a=kL$6?F
z`@-8`+>?PyI>qN5sMRCT!o(&rL??pd>H}ul%*Ks$2S_Ogn~^T_VL>>E!|ZWO6_|Nv
z)j%enDM2tHMrNV9(5#1N>LFO5Xj2ZZBSr0WR2<y(p?@KO-p@|8&+V#^$?6AZsR3GJ
zy|1%d&!l!SuE(=Xk^U`m2GX!HX?==8oV&(`oGHZbU2t@Sm$5jpZfmsSSIz(M41C7<
z)8v5YV(BTZ2xv06xA}1eb0U8yhUoN!R*w)t6TLHyLM`L++6V|&X87G7Js(0q`Z`Ro
zJqRz3r@8!Shf=XpI`Z*T!t(WaZ13Xi>+AV<c8-_1v||OTiUl{5q*Ccj`B_R{Hc)jl
zVciUaexqW5R0h}NMK#x!mRCo&3Csl_N?7WSSyHcn&u0%(fQUv(vOP>slW_XiwZ@2j
z)#Jc{TYxasHi}eeKzC&MDlRniM|B-Ae!X{$#^oNIXwhC5qt$F)E)u-08SmD%cSr8`
z^OJm-Z1XxtyIev~xA({ORITmKS8zD7@bk2KdwFUqG=(q0+4y}9i<^6Gyccc8WXEuj
zq5>V7Dd#F#KPh`bs;K=Qe6-+>)xf8OH3R|rHGbN@p*XV=*PIZV#cl^@7a5^MUW3_*
z7rL;!ytQzrxq<k~f~+bltm@hG*v7E&VkpAU|HIfhMOXH%+dj5YNyWC4ik*sW+jhma
zZQHggwr$(C?)snB?!E2o*3RDNX}!&tHOH7^^so2+o6cBh%wO%|)m?NxoR*Pg%a|1Z
zXxTtLPcG4)HgDWFQm%nD@I_QtjQCd&Oor|#-X6e2g9nIcbN*W)@E>P^oxah3`Dg$?
z0P=*8BBQR8o1L*P<9~A1G^uXe0&r*E$GY}vx_iCyRxX=D8CZ6TRq#h^!AS@w2?C0V
zlfo#!;vM!rA3KN-w{6zw%zS(5ul{mvZMxtmv?R&=^yo<BzU(u*p)|2dhciK!RaB-k
zd11`>a7%D9wb33`Z-IYTsY~4Zn)yO&e};Fuwmi8d$o9lNuOc5I`C08wKb?m)4xPVH
z#C<G#y^GSSjS=J|0v%h#a6U$<T|eZ!-ghu=#w~6Guo4GR3G0-gR6CPOTHaF|x;0)D
zh$kUrTigq4Ycx?9!x#W4^k+`%hFWyvte_tp4kP|N<C?ZpfqYr>-?B)&b@4yjvnT&>
zKjvspFr$2kG5&5iHsY*T>Q(US7&#`}qP~Tcty?e1Vd_5){`z}5`}UQ%&qseVx{D3$
zhEL8mzdpKo={m5osenh~?de&#9r44+nNrM`#*SFvhI<$-Z5F)McQsTgqlk$c2p7yX
ztxp0gsmg_s2-93qFY;I3vR+F2lp;k_z$+R1eXpDHp@f~Ffbm1$O`k}l*8(C+Kr^V8
zom7Hm7pPEqBwF;IrJQimxFE`<pn9x1C{|wZWmu&g`rqCLp1NpSst}$wc3O&;bQuLr
z?vQ*493?_0MpbtFr`!#cEp5fxSy$GdojyKXZ!_e9tYs`A<RvpZ$e0LRRiC7C_7@>e
zbH7Vk%rG-tl78G9x#1sKhD`shd&x&!VX~o=FUFY_YH(Q|D2yVXoZ_^;i7SrGalZ29
z`pvZ&qvvbN7@SV|+nT17hQy#u1S+Z_cFwI*`CGx)#{vgV*+{^2tCkW%dsCrAo<P6&
zUW;$$oY-S$yP1*6D@tl<1pEaaKQRIPVw)>+md$lGNSXeO|AX?Umizl*IhO}GhNdN(
zJNUg;ga-kElcsGSP#D#K;gto=w^aC+c=$^P(}PAxuUVg|V9;_e<H_>WDMeBV<eS!-
z1WXcP5$uK55|S-ypi&^CB<{fEY?7{kSlj*y<MAFZT+hx$9GS89L|qH4x<r2*wA{iH
zeOVII;FFSwxvcUUSN?%I7TzrLg%m+)3dAAw5UAo)*;!feZ}fI2t)$5Q@MEgYIRByk
z*^=2N-+KqAm_FZ*g_|E-dkYfv#H?9NT1Y8k{I!I?<+%m&s!Ts@7+1g#c~&=<!ES!r
zc4}I6P)C0H#Tr_}htG=Slp`joG-9kw1az&?arB>HI`0}6jM;y4SH@+yEEi1o>+@X@
zXb7mE{MJm%8FI-fA%3xB_`o4A5$sls%$mUt%cRePE!AlLA*it)jNo-IiJt|wnsY9W
zSzgBBwc`0_<$_h~k4qilQ#;B)!~-t%g5w@g`}DGAJABRlsZ(>T&5=C@z2>L(q&QB$
zUTWme_E*Ox$HZNANBKBg4?{+a!K}<*s>^@FlDB<AZg@6~A51ciO}Jl~x;}4iqwBD>
zC<=Z^LUzfNIIf;M`9NCCV}272F9wFq`Vgb*%MpK`)c-u-kb>6Jr>bJ17Dr)M0{QkI
zRyd#21@}O{)ANUQf0f*Sk)#HB$+wh+nA2XMJ4zPwlR6wJ5+$ToaBcUxq1r2o6`-RK
zLoEp7pG3$S8YJ@4oBZ)A1~BfpCJtmw*0-}_QYrtanQ^<MXI~QwnbhP|U0qgHMMOlD
zzef}=oZO?*t4`<4FQRtfW0vQ7`j^NBgnb2v3}Ddj1Q@Z<{o7sj|1o_28T0=y=;KMs
z0OG0yk{5v53@E@WA~P@IeIOGH)TmO1fl4Un79PLCw5{nn@4!d;@-mHjZH;YyhN1l3
zz{PAj#nG^_tnqu+%TH>f&-Lb4SpLEKgZUe&IyXGvHjZXfy~}+^GN>;1@<tPn{o56^
zNjEvZf4dc2rMfY$y42V5@Mcxu3f)D4+Jirqb|}F-*+d?!rf9DS1Indc#MpYZ-x(Lf
zi<8qDO!fGL^BqWQaUsPnimzxNth)AnImf}gK3WMO9r)W2YjW%LnbBpM(6p+kmE>@+
z<NcM7Y}GDV=J?bINBACuzVzA&u@X72=x8GElV^NOqA45)ohy44t8Ic5CKd+o3PjdR
zPvRoPyS3l@gUO$N_8S8E7r~AyL9*r<#ULq|m^dt~L`FE4wfPUU*<yZS!uGo1CCKy0
z<0)*o<+P@BNf1&!p{(>~Bcgt+25q5g_#NhoGZf-oX?_*vekvz3y`b_gXinQ=j<7(f
zii!kEE6--eUIgvj?%yK)k|%$c_jaQnu5wCPnh9i1$Ng(`C&ccbwi$L_>{;5$V6>2H
z75UAAZtY{p?@89nTn;FlIFG|bDp&dNzKsZovPfWR$r>ZnS^Wj8VJPgQ4$ZIh(uWu}
ziqy|O9~m<sS-jMUR{Ya)f3?Hs6A58~Sn|oKFNM-*mf^-KB{izhNrIIKeHXWo1|j5D
zR(hVM3SL^bMU4#E6y(vm7aAl_;F}u0uwwE+NYE{x4lZ93b)qg3FqY5|%mx&zQ?~2c
zAW9N=_qQN`K<tY3a?8aG0c^d;TS)ZXH-R&)`$o&yn3d|MvW-*mU=RgXD8dDX=M1YI
zHs5xqj_H%+4Z?=dME5sWeGt&<bWzSdfdEC~S!ZwkC73q^tAEsqQIgLqTXa@#SyKqY
z?&j&}=rf~*t>s$Z+aS7ZmM@kI6OfuVG{j6Koe=a7`U%W%Zn713@KCF$SOZ48Rn|4O
ziR>hJqwI03%m$%mhKRn-ni<O|2F4^!H%j?3QTJz8U_V_&lWFj__1ikC83b`jmy-;%
zAalqZPHCrljsll#pT>_BKzdb@5JOR<`@Aw|=)sZKVOL#8?AkJE2wUGSQ_E1cO_{em
z4uw@s(!acJbD5R>@7iT-0X9hlVATo$R_(thZ~fQVhY4^Ta&Y|5oOR{d=>IBOP}REp
z+Y<^8s!V;!8Ube2F5HjuJ5~7@+6~8auey$S{b#bbSIs`yNO{s4WT1nWm**4@`P8t)
zaiAv+$0T`envXctDlbjL=!2ZRAxCGxjcjkqwoI{JR#{pFe7DtjHtQ*?rg318W?pKg
zBSKwuYrRTzh3$k)u{;OyZwknkoq!u4mqjB^km4lg9tn$D{wiF7J7<p-UJ_Y57gewQ
zW8{z9`%e!~y^U66qxaXl-PkYIo5ei(`P~`}nVfj5Hcjj23a5Eh7EB1?<|L;I3L+z9
z;<TSou+;~(p+e&qYoIcazEG+>(~=E7r4mBc^NNO$>galwL#<81v_c8UH4FCqJa#Aw
zeas;V$W!)*F0^|hXI2X=%+_!%Nh)n}^aJBRg7myS%pQ||$|dbz!?8>Up=!uOvsE>p
z7d4z%IJL{pRD1QW%@Dh6sMQSTYy#2k0Zo-EthpsexZbzwOm|uh+`<0E3MWA0Nb*lo
zd(wZ!Aj{g(QWKG$x-T_e%9S^7(k(hjl8A#0K>qm!$|P(E;A{!aVE5KiiFx?fW`VHi
z+$zFu%jYXtASQ|G(?ql~fb1T)1?-=i?0Fo3^40L_4{{J^Tl&25qnXjPXtfcVfoIm&
zo2t5mJFgK4ETGK=ah6^7*gp|n@1FHN=Yings?(QL#dR2cx32drzrM|4zX{F258D{)
zg9Nc^qh!o~?TLWa57jvu+Q~Dk7_M->=B>C_=HQ~kxM7Ik>*E5(Tf0FWLh~#y=Ik9a
z>fGKUKg!}$MQSlMR%JW++A+>FF}j5P81WuGMNa$T^HnCW@p>_EaBX;1;(fZcM1o?a
ztF@qqH8|xT5v_<z;*g+cCU;=<Z^}6ohQ~^a-n&1Z%q@qCaBR9#-7VXq2nGu#V%Do?
z$&I|V+w-+`TfNn6hFe2BDsJ(G;z*$<menOjIHyYXkQ8Q_Ez)dq{!~nNUqh>(ommY?
zp6a>#@OiOy<$Qqff>8dIR&Nfjn)Puw($ncsz+U(@9Cq~q0n0Vf>1I7p3EmHj|GM;o
zkRI$1LeP%_=Xoo={$hd&%zcVw%^si{i9vRo%$5!EJ>`1X`7-1nfWF^ria2M`2*q1W
zSdhvY>=1h5DN^`ok!Dq2m{G9Uq#uQ-|B^~OvqgrZa;jy_7dc!qPifJu8^=n&Uu(K?
z7AoPAIB7g)A^HXJ|Cjqexk!lJq;N98au)=+@&0|I3V{3dzxXseD@og~vm<rgtHQNo
zbl4e}fIro~0%a<RftNNDa=;#-&Fro0sgS|P*H?VK;l|f%L3WUb_3vh|+2XnR%=p*6
zW3{#V4Sslxt?chf@0x==G^sT~gcvUpu<hDfBGKp72Fmtih^TH5+L00r;58f%j=OLv
zQRrffE2kwz_TnojOH(6VJpcpX=uQRkZ+?IF2wyP6BBM3JZ!euc1TX3@eIO(X9GSY;
z?hC(6&*w&+1*bnOHF(iiEwX4aOv6O>^9->yk|j7tv0uk)c5mtSxP6_At8kEIR(?G*
zLP@t(i`06?`0`P6vuikF1Q4Q!_WIGPp61is-`{#s@VqfWnCCT7^q5l>Qf}sO-xU`*
zSk3HH$r8xV;qFpPCdNSdb0IWWS?v7q)-&BzD!7xw-485dVbQpp@fAd)KpDZw-EA)E
z9`0h*rl~zGb@@UfsXL(&8!kQJhc$^)n{mg9L=m9s;xh{hk3O*ug~O7`@6qh@N0qOH
zi@)%H)%awfD5|TQAYd=jv}zvh0G{6o%pGbXLgy-uF_RH#&lZ_62v~1O_OdO^5dcw^
z@0TlSKzN28Z>}?xQ13i=4LopYQsTl#T99X2DHU6$9|ZZzKBhN+?TAbCb=lIZ!{Rv2
zEpj07(sf1(3Pv(Mvljd8Ngf}PNyXQaO}XPK)5m)#8vSW4X6rX=g+9m%<-XslB){}Q
zM;qRP+ujl@CF9Y0H-CemwW3R@b#GWJElVV|r4vXok9OqNW<=AyP7%ZVS`#ny)l#WN
zAF<riv&~$-<E3ZDD*B*`nEVhq1MZh`K$f=YPK~gXYmJ45k#Z+HzGxZ8<D<#^REU@r
z*Rj@nylVAydVg^wtCmn|+L<)_t#_!m)vke^(bH+3djm;>W;QG51u|tU+!9vWDDk5H
z89XyUi}|_}!h74#4(z%}d*OEcxd%PJGQz023MUKvcxWq3+*XbxGq(ubHhhBo@vwI?
zLWADaZ`9h3OgWu>awwJ;qrQpdj}lK8w$a$jasYm1hScN;`M&Jr&Y2ber7Y99D!rd(
zz72q@d+kr!={7}w!v6O)m~7z@^$%UW6d*q^{KtdxZ*x;)N2mWSV?9U}0N-Or@;U~r
zM|%5M&XmEYybP?7LF*{#te!vNlZyP3je}LcVTg=}-yc1K6OFj+YcC@P$F-(1Ir=>*
zt*Hi5q(&byhgA831>t;nxwp@X9K6d@OpF@&@;;k}nUZw6bUw?YCQgZK;`>`zB{dev
zZr8AuUsHLbuJMZt%8(v1SjBZp!s)EbA{}4LG?G58d}*z@yQ20(Q@l5Lw<o@e_XoNM
zpzyx1cn6F2<1xUy?&$?^W-nqiIiE7(6)}CVqe7f2o10HsKZ;np_z;DWnSHQDS-R>u
zi}oMDPQNR%c}R!wSy6M{EsIzqGbAWSjf96^PNZ%{tKlY^__q*B*b-*@t(^FN7$lb=
zxSXC#$QxVML^+V$5>n2OM>;eqaD)_;2T7s1NtWqY#MC=uXn!MtM!O#*x+tY+o5$6w
z(q~uGBftAvFUr*MX!R5IbL9#f!_Mk?dX+^m;m5L2CMD?ri-F7lV4RSjOA7M+JzDY#
zlsMw%RbFJxYCPCYBJ7S$wIeifZd0=_QXSFOfB@5q6+?)#Ax{+k^_87O7|+-Wc#SiM
zUr3S>tX=vs&OrOz7Ipurwl0J>Jg=x}7z+qwtkYPBZ-^0s5paRdWjfr4Pk=>#A)fJ^
zF$HQon>YV`)G%aUUp2|7STQJF8ho$qc?Y6Tj!6fQogJ`XZom!BnNHq_4u;jnZ^e2!
zu0cx=`QkDYRQ4&tPS%OAW#yvCX|{n!C2;QwrG@B*B&CtUdfWP_z-w?NEnn_~5@~FK
zw1C)ZYLN*>t9{2AjJ({B1mf1e2Nnn~P9xwlx=!*KdFpHF{@=#%M2itY<u6OkiT=+4
z9F1t6<1lKuPVlxGY*HCKs_@4zti;%Q+<L)UCg<Gnr16|0p{SBMO?AI`4Xnru`^%wN
zcb6BTYwaR9eWF6vj}006E(eB<^ev&Jg>Y}*2trn_2Mn1qd1Qtj?$565*}Y13w|A-E
z*SF)XovDKuqS(oM7EF+*a*%(J{A`Mxtc!Q6>MILc;7|a)3kH7REOQ(+#n!wfiGOni
z<}Bol`<pk~teT<F)=pzR7|ysIh-%C;?c9e&Z1lGgh=lr0o?2PC*Udoja80Mqk?x00
zgURgXp&gT(4%IhKG~Vadx`3@GpW%W@UVM+ijZgX-li*R1b0w-}oBcw02y1>NT57Ho
z3lfy!a?Rt~ugTI^3nFzJQ1m$A@#%s5{-Byddw$fc)%0_qP`Wk>;VdI1hCGZm_t|?b
zLLoY#B9*nJXacP0rik6{;lON}0RO!{jr?k`-B0iw@2VYa?<}o9puUIOVFZub=*<F+
zX=oA-p+B9jgyJ;|cv+r>P>sOYq?#7m?hCRRB#Hn^qcaA9B3jPrbH#n^>g9t4Y*Jm%
z9L;R92qU3!)2@&JD5f9@hE_{l2(_hW+rSdKf&}omDj7>Hym{cp9;T%xuL4SK$xd`x
z1jhz#l78@>3D>Na7{8uzPLKYI9XZQI<emW{FP3{8;tMpe&J7AnOhw#^!~B_~lrRgk
z0i+d1uL<N;Rmdiuk7&;`q$HjC717~Ot|1b%gGV%EgYvYEC4w`dx<B`Des_&$3X<5-
z!`dS8B{uQIKQDH9h%j(KRZ*<Bc_IH~!|s}C6Fub$1c4l~nbE!i45QZmeoH{xH+ddJ
zH-L<qx1Sy6$|YVS&Iy8Od$dvVMdWGqNRO@!!-eVx*7_Bjqkfk843F|jePhN9*G1oX
zzN{+UNq&XnH|szyeJ}SI@*rwSfM>XwmoD#moH~Fl@$6z?pq*@jn$5y*h&`kNT+&ad
zy(xVi)Y`Fua#&LSV1POV`EX}sTca7&D5$Uw>U!H!@iQCY@|vj2Ocw1Fe|_;F|5N)^
z0o~kV#JGM_EM*Em>ls43a$9tM_4DBLCXwr-WU`lWxzSgx0ff$J&{Gy$z~b;0z!Lk;
zI?s3yDH%Oke@;VU%k>NrZ7qptXpqIHpPJ%BR;=!Nm0R^u+B+?ON&{bT0=JQQ@h^Z*
zRju+z+B^mGp<=w3F3*o{{BhSREZX^!$MKT4OzvLqtcNcvZl^RbTrV=aD48!YjYumM
z&9oe!(OAUwixmrY<IP@-6_+NxMY`6Bt^H?oiIBw-&KuG0(VxF__nad*^J4{SY0pLP
zp6=~BHSd$U-d>utvin){WHH`H5!`T_g-?5Y|NYx0N}Hw?5Ad9i!TqP}<Ub;iqOrb}
zxDCLOX=iJstON}N`aigAi&U-uk<!1WbnQoYClIvAFKfL|Hh{#>tcSRVYZDB58NeEy
znp<ZIMHK#Y>2`A|)E^FD!&FkprL`{~w|SI$(^%6D41*Yd{UBTJMhL?6&gPwzKZ}#k
zgPg1hVM+l;?DkO-v2gA02A+gyqK(62YM~COH^F!OVsFcs5_Kfp!8T^nK7<0T|Fv}v
zyOH?07p_Bznw!<q&u1e#pA*thvi`ok!wswJ9;?2epzRKRtgmVy+f%`pbZcSE5K<Y7
zFg1PKhT%99aMk5m!CE3{mwrm$FM3B;A$)23Qup3(-wT~SPueYJTro3-PMu$XN}84^
z`}31Y6YT4oq`()RBPaNNebvmJuRR0GUU!EvBf2t40CA2`jAEf2DC!{|fF>D(BV6g~
zVz1qXglP^y$8rLL=ioAT=m<9DEF#DB3XazB@9(BMWVjZjm<eqlTliTD6oIRxlZK9T
zq+vYUlC_rrhr(o@PfzpoTK0W_0du%o;ln+jMYmYvAFuH_IVn&)27)WA+CvX)0|9n~
zPE%z$eXkOfU)TBbW<z_?{Ato{0w-7{=Cg|w-JnuavdX1T)wm2@SsY$MO@(Y9Y^S0U
z=#+RG<#WE{dYjKUqH;b;uQ@=m)~kYOQ4bzuv7>ol0hn%E5>rm2<1rG|wQVSX?I4oS
zUhL%1H8Pupt9JY(QT=!(W$7Rep@db6ihKv*mg7nEx7aZWSD0{<R{ni0X(L0h>m(tm
z#bcwgh9Y{cGZk3jsi?SJA-jS0>>4wV!cT`5bol&+Kz7H6_8uXS@DD#Y654nSt<&qX
z80yenn6_S_*bIS&E7|Pg{C-QB=1poM%3N8r5gH{0SXMnFgCOz@LY6aLOiell!hZA<
z>Y>PeW{dnFEZhvIErZ&er#q8eRwp{#S<woN+v-_!zl{scjhX_YHwKtG+uKKmV*T$W
z#acW>lc}`jvBJ^I*n}Q>2W^XsW|miR>ui>EWeQI2H*E_&C0Tim><uD%A+zKh$dIup
zNgSCLiF}cOEZ8k7ofmLTX}qERiY1F>s*R`)7n<bF0aoP<@Gh<kfm1O{Ejcmn!biPs
z{rm^z&bLnJ)ly<ZVuuW6OBT2;Y3oQx+8he5?OB$pqFrRFLzs6D^lbQRd=u0cPabc~
zDP41Pc;&;$5XtDsDP&c9y>oR!bkf6-nRnx&?jO-;s9PdOmd|FcqvQsZN!3~veWRN^
zs(%8~D!H?jxbsgLyy5t*4ay(=)hf4F-P15=%u??ucH@PqiKF)NxNQDre<i!JY&E?8
z`b-#;@7!W6`Str6*Gp^Sct1HM*4@|~BitDUR7LMxuoH(sE-%}M$+d>hD19c0e9u>;
zzLtaj+(%2=zq8Sa8pOhyTF7lAJE=L@@NGTOdoBl_o04^uVzFIQQ9)E>7(((?2><9w
z7oNfsZ&gd_t?e_~Et<M#c{Y303$2>;&0#+h-aK+$m!;&|VC{B9008}f#pQ!doyBkx
zT%me1kvppO*No>~%Sq`_&~=wQRD0!!r?)D)Zyb5weP;1YJY%8~5~Wk8KcQiHR;A_e
zV7%4FOXgf4lE!tWQY{QU4YsAb;AD!J(1$<jC)A2Lb`gw(d^jD$-YgI{h1zdmZ+n<z
zoHllBMs)LF^U93!etXpk)zrMg@iGK=b#ZfhJ=#26e?|^8$u61t3RCwz4>y^a&2o~i
zomlDZhvR97KT<kRC19P<HFl6{-}*gsithAsQ_0FrT)8`|QYhU~I{y1_sAIcQx-fHp
zJm2rrKLk~(b4UTm<)sdkBDj7{t8{yhg1X8J(WPb4aYF^`yGFbl^S0EYc@Br>7iM#A
zEaFi{1g+sn65qRf1|6GE=ik&1Rhrr)IT7tK-pEVoHNG+G=mY<<>w8Q>W`zT8G%;vE
zKrH|EMkAmo!>B7Rqa-W}NcjN}l)C0NPOL2dY5&hs(*zK3(7c~(YTN1MibyVs5IZOp
z#N@+&6N1z$WD_xC4ppSxjy&<7)@(akO-C`BukjZ4rtDvP9&=&bQKo1L@(yNNhd6mZ
zI}46%TJU<NO)V#cjNTbfPf8Lp-QP}AudU5Iiad*)fK)<CX)$;S58q=D>!zQZmgu=~
zKU*fe&M%MN+3>t>xc%)~)aHhq-Llv%ZD}{<Nk?pD#8g0xueXvsS8QY;LKd;pmjCOX
zO^>HKk52f&7AGuTcle-k#68d1X2OY$u!npB+=q~X@MrqVlkvf;y4s9{d6QRsyWxvZ
zAGB-dlsbLHN*2+M+O8_UV!2HPME)ha$=;j!L+>R|!?kM<L%Wi64P29DHlEp0`_k=T
z{}dD~;qSJQ>M<0UAjNYBp!k5U8jEb5JCNjaNNsteC5nZS<+mH2pPa)7!5YTZQ@d=_
z!s03dnPyGD`?x{M%Y7qU&k54?{O!Gwb9W|hbx8yV;d!d1jEnG(pTHA@yO7mzzvhk}
zWkwUDZ8Ih!FM@R|@Ntl>m5|c}?RlWk)I{yOJ^2HYqV?H{H``6Ue@{{#8?_g-hZ0pk
zR*RMT`r5fd&LGhK2=x!<B1lEvV`VIXOh(Hb!=-7M_4NmCZ89X9Eo=$GWhY}|Cux2H
zr&8Wu3x<WtiHo-Z`;v9Bdj)CcHScMI=FmyZhLvs-6YfJ>gF}5V*dh4-af_qFQb+{5
z9b6Kzw7%r#JCFqOp|`cWqe=B=DJ#=F3NUPb)<R~FyX9ft>jCB8)lW84=a|onvw@i>
z`G&};!xjYmtyU(to|p>if@ipf$b+GgMf}Euu<!>Wl|ZAt99kvN+d?g3X_UI_;==7~
zCx|DR_>|-Kzkg4dD-YL;HKSE&$73VQ!Sg>Jf1L#rRRQd5*5`Aar-{N?w=T!SEf#1@
zx*z4Ad)9~_mBuf)<MAyp*Elm4x$rCwPM+sfP*`h5#2Ur?=g1j4H?f#`eVIu7X2S@n
z<@_v78rwsQQdp+IK&D{w_qKxA6T@#$@+8nFP@pk;2oNjigTd5Qdso}zo*HiCJZMgh
z3XLv>g}c8nHoBT&Squ421#79FbkolC8XV_g4*HBj(h$<Hu86(rcNw{S1AY!^Sh<-H
z?4!6Fk=KyqtyziG`@$4B1arUdfe*`onQ#Y%(KZBIVbS)BGhVRyc4~zoX(~(M*2?j4
zQLF8*XV`Lm+p<zc7_HaC!v)5+rpJK8cyJ`Ivnl1;onQ%<exTH=$?D-`n>bA~?@&NH
z3sK|(k6G=;?66a;GhmbK!E$r<#w+!G^e>2D4lY2ey<K5}C;n*-J~M)r3r@mJ9nI4g
z3KR&+KxOxkoqAjM^^OxopbRtul-m0tPyV_TNDEeLV3G9|tY*0pXdv3`sqw=29AjUk
z1XbaYkk(e^#|ILmBE)5%C*sKSio<|rt`2(L2tq{CVTWI!PNVjVZ>OK+NJMYgF9}J?
zvcRGp9^3}kAQsPC!VrV%5K@@3!fF{J!FTPMMnG{G*qba`GDrY2z2U7bi`9!nwlY+W
zFiH=wV}1EN0kepQapO=&*Aa{mVK8ydAn`UmHcigj8C@b9EsHjl9&xDm)|fi&c4;6_
z+$f@3`E-8^h!2Pis*pMDoe_Kp$RK?gs@}nb_%+jDgeqe)8n(kZH)1v>fX=TMFP38N
zogFK$RH|As4y#}JBs4QpF(aWA<u+DKpyd8SN1e16m&b$JZ^|t@gN_xTl=sqMS*^|h
zv$si|T)YBZ$>$|?tAgIQH>%B0X0V!#Ds?(F<5p(7-unS)8_I?}hl5^7YghHlcd$b#
z7P)~#T0bKD^LTLDuaIygRy*;k|85{f|9Gj2rF1A!N>8j`13J)tpPZ|ri`HlFF<7S{
z{D{v_hU(6yNeh*>DU&Qyx1?|#^Hs|EXxy$rpFC|lHT#M9_N|%Vk0YON)zK7`Ovm3=
zu^5Q}+21RD+5fqB>&D^rQcrfEb3{)1RF~Ji4fp*9#K%k2v^XhB`rTjIN-aeb_slg?
zK&mt21brxu%l_1t7U~+jfU%m~p`oH7w(;W#kQMvrb-BUy<sAoE8yH>sZPqbBwk1Q-
z`L-08h1?#mryl5-99Cs)+pozFKN4k`W5>-W0Q)$IMl)IbobYNP_?ey@1fr;kxtHi0
z2O<Oqq6d-x6FcF&yQU^)c)#ac*pguJYi+ab$s5iffsEbSCmcrTU(2V&d9ALp0cv^(
zV0iZLQ??4?a>CNT8Ce;0|J!}%e@NLTDR0NDu>**2x{POC{DXG|N#%;RDdF{}tSHz>
z`W5RXN%nBJS%#v`pu?Y!Y=1z&N~v&VjhM1ukKX^<<4I&8-^DtnM-ilPiw4r{3qO3Y
zzp-5Oo?dHK23qoUC;oKq#C;`0OR`(W>F!55SU9RJLvs|YP)vFFl}10uP73CY8a_(3
zZ&xE(U6}+*ETLoc=^1HDZ9J%Q3#TRn-^tf>#!yw+;hpt3g<Q7yLn)?b^7>3J&iT7X
zMzF0yo$Gk`^i0-un&FzNsyJ8Ns@`4BaNRtPkmT%yUH~jJzG8jPZ*mHLjdhn?OVj|r
zz$v^&^_H8^`ez_G%mj`^NlS2Yn_kLTk4`HN#ciAAF28DZrB?T0pbW+_6~hQ^Yo<_z
zYj0JNCPLbZ1CExhVBfOGFS7H1=@NvTdPcb<0ZPh#q$ebp0`OoikAVas`Q6>jEA|x>
zN4<i{w$F9L5456+7WG8#s=xjHpq~7Nd7MubyMNx1Y}3=(?e3T|9zhbZFniTbvR{|b
zDhm+Ya))L>W!lHQBq<+ta*0F@XwV*jED@3(kI!bKK@A0pw0DFZh7bMJN~E>BcY;_$
zrfDH86`gO3?EEEeYfK?_bw)Tu)QSzNnK~!GX3Z%;l<^P>6by*_C8KYp@GQX9b;`Og
z<^73eN}%y>{rBUhmOUERG1umD#fLW|yqjLzMcdXEvC?Ah9(N>o9pVwcQarnM5N%2i
zlNS)$3yXc~Uzs$zXixzK-(9~?i^SnYuM$n07g}XEb{>GeZ{DNF&f-@z64yQ8CEeIt
zA{XHG&_2wmgCAD#-~<d&8!(b{^vUkgb&3<}6a8n`q*<4fCOR`L<P0K8?7m&JvUx;J
zo@ZkKnP>t|ppO+?P?yS>O3jca9?LC|t#Y+t2M1OwGB{HiyeanL`-64QR~&NL+H_Qu
zl6wIhX?+%)DDUofsH};ZsB^*N@sz9A@Mxmc2?eR|pQ$RRgXc`%Z-0r5%EtqG-Eb_p
zaJIZKqj~*w%Q?2r%{c>tW_<`5QkCeIho1C_NNGNSVI^^TFI<CDP5pOWfTA?YCMuT8
z3C>k#ZhKv%_qen?To;wql)9rwXxAWJ9EnLFzYzD0?JU(41<>7@FT&~P7R;z#Hs>rw
z`yYGkaQweLHA-0`O6223W(F#&;qKRcVX2ptTZL!u76|p*9E(1=F)yCqz3<h}EgNtb
z0AvN6&kb~@)^z3Qf9<z$Tp%hBfd&H7C;3l`$8Ug{(AwC^?0+*?YtqmJ%+-E)10p~s
zcuNS}GMnH}`eg92g(4ON&f)CZR=O55DAtamKYkS^F1(*V<81vNjn8VF&&O0d*lqJX
zmiV)U&O~~!ncUzcc&v(F64<G$MeEYJLFf3zoxf{Y#U8^uUmp6GwbQd<Vl_JEY(G5(
zwPPt)vzobib~YWsvT!s8eUQnR)N<}mHL)%&tD9n{HfLd9SMXbV+w6?t>p+s)wdMk3
zgjid`X}k}$hQ!Mv*(KHW%FJX`F&+_yaYS>I(M-^<F6(|vjEoPM;uV|z`ybZBObXwl
z&#fyglXMCIV0ElAr9-tj<!L#Jx<m!YPr1URG6crv7pCs-##CCUyzX%B(elK3SoIsN
z^9$}ptIn=K+Qd8ix0l^79-fGO``8h!6qZ#c;b|+Yu+Bm<&tM;<Hxl7BxK)7(n3wC=
z$^@R@jfVKP`#<o)!105<h6U(hAGs#NK$}Dwt=D>YW4W_fn+_jh{{SyBjT|piM}{Nd
z!Zb2*`wjarb`+Tg1e+xUcqxPgzVSsDj>Tn{ATS%Ig=x4iL5J>o=ju#0zmm@(BO>Sm
zB=Ady@#N$bOjEU}lSfat`xpFs%RgM-A92}(d>-&l4$-OR=#}On^ysUGS+qfXN35LX
zx4cJ!<Q2o56`4gGmo>$Wc>7wEyw+KRNIxtG63cxW#6LSiy&GC)-_}PYz3o*yNGZG1
zVq%`}MLURURS%5Gm2~b4)Hw2Y5lgqT_~NALnFm*9_XFEWvu}h_(Bta=4nZ8Q!4gW#
zoU8`96duTrShm|N#GI|GRw7)y$Q0V=o(#Iq<fI&Fxm5hj+%4wYAYMkG=!!o@p1m^5
zvFpHPe;9cdnx;N$pd=oafD8BA)@M$5h4?{);jd{^a-VUIH}0=M9?@2U^H-%~%QYX;
zeR%CD*KD}=`YxYq?O3=2*JE}%;kqOuBV@H?c=a<gc9^zg8RJ)iq{bDjOi*#;nS!#o
zI;9LXyh>G3K4~n51TQqLk<4K_SrXkL!Y^V2RU^;g`}m~VvSB9`jkQE<o6Z5y8yD@v
zFv2=dRS$Q>`3nR4W8p@%-JfV51BtOote52a;F@7liT(kF;K#vxS0Dtfh2ZOU{g&kD
z4CA}UQ+8Nv*A@YU(rBhdvxt8+#lYU9DBY>4G3Qh>Z3a*yZz7f2UMd7%?4CLcX=E*#
zYv?C>Tsew==u0Zx>p6YBUPUKsUH(SEDg-MG^JLDS){L_{Z5UxH3_#{W1@QE~fSUbt
zh}e!;7n3T!?+RJkVWjQ&^wo!wio?%Ac78zA^60SJO|j7wqF~Dr6sUA6FPGve@sr0j
z_E|d)fKe0eYoQ7pC*@KHXD5}C1u6(lGj@$VAKZi@w;0QorYz_{2cm+I99pUv8(;8s
zdJcTSiuw5uZVgLe{6@mZS~RqaOcm_uMKt3)X-CblKAq4}O@k&T2AjMNkJqCbhyEsO
zBuwPkXi!1dP_`*c=DI0Vt7+SF0|CZP)3?zQVnAX@@?a?>hl=`+)7Te|JM?I!5cIr;
z#w1477aR~ng-<<$U7iuF)bm%)rKKfNf~jV}L82_ID}}~QB7%iw1kZEs^VGXYEnxMv
zN|eAqZDUc(Un84kY_nF1?x=PZdT6mJ>)-E#%GYK}lXF%Ncq~t%WK|$U(yK`Oh1>#k
z1?60w1RDEC>OlU;s5v*6kQb5WqY=Ja_3t5=OB)X7M^&775do1zsg*i<Ws{%J$d68>
zj-ve|&dPIICIjcchFHDvvK4i-AI^kVZBq#Fi9E|o1d~7*(6Ht6D!9wwvI80<Xw%DP
zgDQ)Ium_kveZ4+7lmLLxLG#`Y{?;FcoBFzE5=<}#cZ})g`kG5B$4j2Z%^J`!ct=<Z
zU&cmp6m&Q%71!uA91-SR5CPE9r|O-+`Rc7TB$nB;$RpleBC$wH3Se|8fJ6<%7*74<
zXy!<g$d2poigX4;S4e-f9^J4}YE6mV*}?CidW=`vXM?XtGJzhnrzfXi{Dbv)5Q;s4
za7Fy<<86K5Y3&@=d9^S0CHv7G&M@d3Vg>6$Z28^{!$SYqEEE~dK)joI$ij1k+JMIF
zxL|_*L)!jmwdwXQWdNb)tZF`#)In8=uycuN{D9dzZRRZtsT|EqboIcJG0!xy>r<mM
z2$-peizZo=ztMU!hC)BNX}Wa*US^0jgql%EvETg96^JfDNI*1rT(w=fwG0*EiHlXt
z*$)3|FkQQWOYZUtPgY?G@b8ZkRgDiQ8$TRab5j$%{?m6orj%O*-;Fm|g9;A9d|Q1_
zil0&*d}T-L=i~g9*a3l{2`n19m+=ho2xXG2?46Cbr-W7N?nnk$3bHUFhBHFx@?7Zw
zo?{;Gmz6vYfL@~$DD9u6^<Fy(B8Js5@n&K*UT5;RZ>^^+J8lERSBnMx<NC*qIh(0A
zkeh3Rgn66b`^T*t@YE0GJfZuS*x%@39-px_S0Xd*>$8g*i){0H70`Rxz;vUz{{1`y
z4wk~c9BLNXRk)fCuJEBq=AcdkA-i5B{SmWUrwR~GTC0)5)&*0Kj_oB0!zoQ96dlb;
z@pvHHs;3d}RHr8uUh(TQ?Z<@(di_%sdR4H5nUJV~Z{q66a9|t(tOkXk3|>wM=5??&
zCW!OH(}<35*A*Sp^Mk$23ZN|SOuJXB)g-Lp+Dcj0y#xdsosjzLhD7~gxyK0Gu}-cv
zmDf{8Z9vZmcu*QHg~6IoZ6Kmz1oG01rUdy{AaM*g5%EDx&s~5xxSU;_VUeHbpqmZI
z@eT@a{+8>BF^86Ng%LIk4&LTIDiRL49k&RnH!FiQ1ez_FO$i`|h-pNkB_ykKAdL#>
zm%o~)>}uECKsCq)L}+kyqE9x1uH$D-Rrmf_8?x_m)}12}k3ZuZNchZ#Cr<=gYT7ln
zr*1-!;<N+=?D=$-frH82E<-H)N8y`948MoaUzPxw!H1zxL;VN^HXDAyPcCMq{EUUz
zuXF>>jwIh_`(?%Uob#7^!iJ9<#eq1Yi^<m9c3bMpxPA`*tFZ7iUKKsHn1zMqW&?E2
z;;rYGsw_8nwhPfNhe|S)Y}=&4G+~3LlW#;fd!H`B>nVnM8iYSC<QPg_mWWa2oh>xI
z)W<GP2K0QZ5HCAkv=GRobhQN8O%|MPTqvw&|EbL%<}CVR-o&O#CI4%Wmmf{#7Y(KP
zm0-tK<MlJ$IXQfMd@-Bf^^D0DjyBVoTwFuz4k_A1k>bkn|H}8itO-0`1ms5K0mhAA
z|5oPwuTmu;1*v}|P6k~AHvs3)!Cc?!|LL6n!@aKxFz4E1NBX+bWn6m)QBG;@SWB>p
zA(BsD2XLg&SI*ujnZkrT;l+)(z`s7DFOfzx*AuGoHBx`_-A`0(uG7FnwMAjV+vxFr
z?IPVxr=0V3hH>4qN@;tX2au=ju>1`S1{nO62eZ$)>Hcy(r~D{-F+o&Ib^EK$ET36^
z0`4L1RqmR;p*Uy(g;J*rJae{mpN;_!67e<R&)m+04#NxL9ViG*BfkgKw#TRniE<QH
zvul)=dpPfTTboG-?YHf^H|*A<muf;2$MkoN_=W&0FPgkOjb{9>OJaWz{hlO9&1Yr^
z6b6RBe)I77YZO~nO{Q%$EXI$<Z_^N2?cDTX6*<~~2%bG8wd$dS>#e<-tu}ppy0tN_
zLDpffiInm>&n^u2C$XfI8OALAs$#xO)?ABOuDq$c`9=AzwKA8&_KtVX9xF5pO=G3&
z*=6crk;(n`l#D@&_NOg%nT^wai}q9(8J8MFCCcW>M6e{mkpv(!YdTjD7ok8rfm9fS
zX#s=y5SVu_7GHBHE#MRa$8A%EV7E%}RFW{0_Fa*+pzzdazp%g|63IzXF(Kk@g+o#9
zRkh(1{vtx+d$lB_bsXxfLYO5u!QNQoY-B78H2B?lcD%+wOObrrlUv%DvKg&NWnx0B
z>jpStc@mj<)3O4a1Co^V;y-GWkP!Jix3Pwb3?yCniz|uD3!-945nzT=W05_K#3RxE
zN((+qshDUS<UMIc#^(+XGdvcyZ+&87#PJ<@X2aFLK09V)O$lboPJ3)4O}GEZS(g9u
z9pZB)R5$P79tZf5sSZhhR(4-yY2`nSu<-gyNmq!N<3X;d9jvJ7VZ%<YyRy#7F<nCa
zXahWNZLe{`HUHv!e?^Uk{ov=8ieIHOqk{oGS%AA2+GJr_Qh>S|LD3&h>v^a}^ACv&
zjoLHq0hEHVQht=7TY0ysZ7bFZiZ70$ht5xFiAfbf1$LUbVW3C3wfF?Xlu+NW-qW%M
zH4fLP80S4}Ka%(XD#pUjLulr|GPo+w7TCDp=R(fqvSrN`0=ync-U4FU5Lz`>vQfk$
zpHOpw$Qw0Sjr%*WQH~c?icr-JZ>Lkc_T2AfLZ@06xQJ{@oxkjDdFv%2n`Qcu&XpV0
z1F#z!!q0m#buy?)3%RF+4F|T=3|;!~BieCtzB_ASaJ)ogdW_z2vDbN1G&m2GN{aS-
zT${C!n6M#oTFWf19etd_wsDt#jYx$m;RKbei`_{J&Z1USa5t;s`8SQ;{tCZ!)0bka
z&zrt`WaeTSVAA~__dFzZT7P)#3lymwdF+O1-^*4fXfIjN`9+)gI_AYhP-Z{VIK$~_
zRogX`Dtn#rBdy2XKo4EI?@!V-r{b~y@H9kQHW6G<i12qoXXUKX?ahHq_h%Q8QM?Ic
zFI$|y>@u4!?_SOJWW3JKo)(?y4S@nKbfhDCksyK|&hX9|D2i6F^_#(umB@X(xeBJ?
zoeLChq5&0f9@-B%Oz#s!pzJxEZQhXmHFBys>bT)b&j^wiimkn={IF@gVP&IO*hmn8
z>pG_@3M@sIX#|so+%$o7Y4R!0Q+~n(b2=od9hCJySs4`)-HvF*GzwG+x;22l_RZWE
zdehkO$s`^}<pIXfg{4j&n@_Dc-T!Y8_@|i8*s-ot4p2;o`5#NHW#xor{z0S)*x3Q9
ztS$f3-sz<%`A`4j-*?qW2g=|2;&T93PS|fs^Ee8EP^Ck(v`s(f^GCI(3zRRfq1wEM
zysf4EG~2%+&r6DV3)W%nt^TJw>tbcAo-EpQ<g%dGRrY*&kl32Um9Z_M2qt)0TKy%r
zaE;VE9rm_0ge7Cx5x|0%?p9RX{&e^y4X+NJN-){kFca1fsV*><x2uXfbSy?N?0nyb
z)+O(^P`7T4ICMkzA-7g<Y&@s}CDU3Bgv$}d{0z~ImCn(%w9-2MhznxcoX;8y-HmEp
zsBho$U?*6pBg!Z2iUlG^ZH4ZN{=2_{onyg0#~@HLVB369fejM{3aU1{u9SIGMed=u
z;jSp5DnnsP3kWjv(N}UwW6Wjw?FJ;I1~Th_$QY7ZQddU%VAU2g!>b}yVPQ&3OAkAL
zX_Xg<XpAec0N=$&t|VKrw~mM56lv<=vc6>emEsZO*})Qe0nb7)Z>)1Cg~Z+c62Y$@
zyX%0hC25$eq-~SF6D76MtpP(**b+3QEhKUp2~$0I8t+={ES3`vLlgEK7gTX-*cbXa
z1*oLHO{qbYfFHf~UrmHtPD#0TUrtfICXDln^29p{VTTOR5QJk4@N23S14aIU$;hGx
zb@O|}PX1(x4tXCH%%jy`hAO)$%5)QMC(feufeswZSqfw@z7YC`Lo|nG^VlHj&nsa#
zk3+;P(ZL#Um6~Kj@}F+SBfUX9b0)ko9|r&CA7uz2%Bds0Vh^WnBa(BKWNf4jG5Bwv
zmwz%w&+Qr4BKwMcQcqhr>*J|CQaUFrRsN;o1$UPF9trTu9s-o!e?Q^;zpt&ijiZx;
zv$e4e0PySlAA1#pl(c1uMUgynbZ7VQ5QrK!ZtcQR5TMz~Z^QJ)gT*MqXIz^vvue2-
z(h#w?Yh))c-2G1EbQsPqPphlX&ZetqgI=`iX!zzP2d@nYiyLky4eUR2qY&v>t@`?z
z-jKccyd{Poa0rK~|5%}Uz$9bYRIVe>1>;4$XPjCwszV7}Ka?LV$~{~BVSBw}==z`<
zIk){l+B$J9ojneLuh82x%ds$Ue7OJS=Jq;2yzwE<QAl#JlIX%B@cBt!eUz|zY2;2k
zKr*A^zE`{`L#@8drLk%Thz`P`ITcK<C1`(!ge{$l_=iU$6XGVsjCTW*dM!@faxS5i
z8m;dYK$lupa?o+q3Q1oEs5HjOjOSL}f^VwO$n~vaHVU9xpX7}2dU;Wbm9E@NGEkqF
zMpZXuqsr7Ji`nx_i@7v!9>S4Jn`iu<ipQ;5txeFY$_*ntml%leyo(cu1h$DuNdptV
zR&{<rr!1o?#v0jrHd6|jP<+sui|<cf^~LBg${B-EPv$&!VwAuk3^r<P=RP;$BCqCv
zPlkjjglJSF&!y>DD;F(fn*+KEZB9}_e;pfYCoyKs(iw`4I1;Ic7{t0zBTiR?^opFy
z9WnIozW2+JVkQ`0D=|(Ua$&lj{ebrV;@oagtA81q0uiukfWoe**KjITZEQf!Fs$E-
z_6uV3%@+iV<Yru`BHWR`O$JAdDK&<4#zF)$^Wv2QKf|SlN&vdkVJ)@nnsd%7ByLjt
z<uLohW5pS6iTCg7722mS&tikQaH)hf-E^S>veRhK7x(O$x;{7?jXQ%TZu!U9crm`k
z@Ae%cY6yfsD`~(sKedOEdki?Ok=Iq;Cr>!UtMx8~#A`lcrTM4HkU)86O6z!`!6gw{
z4x{`kt$*l)8!$~RTSWiH%k@cnC+G4Rc_Yuj>G@Kt!`;OQ088z`fb4Hdjj_ExVtW`K
ze8i1D%@lGvGX5F0o{!?TNws@Ms)&iblcqv<p1Fh=zXqJA*4K`HHM}3HW=fk}X(Uzg
zE~v}SK(e^$B7Gu!M#!eHtc@W=)$U|bD(tsVovR!F_}pTU=#cIG@lc+5GFF6LI^RW6
z;7=296fyXc_(EBG`zod1hO%W{zgnBr_2Rlb4hy117Cvr3aA(2U0U+UiUaEvrXOfmI
zE9U}`MSOVs(<L;Yjm80kMQIJMi8=#v>X6Gi{A+IRJLb{v$E<BPO)5P}ALe)99`bot
zytDc+cn@KaqTsVUp6espDo~LTu?Qf4LKuq;Dp8sxR*S2ez)Yv59)7*SNEq~|2$;Z9
zL<U48%{vsGkD}wS7xNxjJ5eYbjNXrqJ=v{j+k2@5&AjEv$TY88>jQ7Sx7XTu&2@2{
z9#fRhEF6bPx+;GBi(_2p6i<f~P=hak{hzAv|Djnq{%?6!P3qRR*loxFTb)2FJ`r}f
zRmq^27!GJOu@)SAvOcwNfR4VLM)iP6(*|AJ(rNhDGcPlVi>f85nZ5N@Y(rcBZYMYM
zeeCn!`ZT2LWewxwyQ{N%rBFn+2J({6`MKo7gt2-JF1F;xcC2a$b)9)h{6LAWO<gnR
zs;c{<wUb^4V@rINDjl&adYAadHZ4qSC1chs3f=JsRNlsD9`CM<O};H|7{YJ8G2>Yy
z4V@K<lqvKQIc9a;J=8y(Th9+}oZl?(6tV}|J_V+h_4_Wd1NGcL*|{{Tm1$*1tdc3M
z+Bh%1LtE&F9BhaE;190(Q<D*3hcg@R9&XR}hauerb<JdN=ubE>uUel&>UlCa+pa2w
z7)}Qu|0qIedb~=G3Kl;EbUrB!BzkA^>hNuBOxv2c7~lsN7^+)tFBBzsSG~K&VqY$^
zW{kY9v4{C2Z7h|SJJDLKC;l8)4Z3TqVynr_)ZNb6+K@C&*>02#kEA6n?4oSSfVv(0
zxw6Rx)`arxjGd`fu0YqgK|vt9TPWp5>RBa`a^Aj_W~CNG8-c62mQ7$QkqWNaViA(n
zvBbMe)y2}LE&<f0vWux~*~Y3~Y`+%0NoZ`bYlo%@5`mAz*Q~FJUGv_to3<9Qyo44s
z;KC`pl{pnit4?W9bZ)SGpQ$vSp_SZ>Po7$pr5e%K+B6j?K?o7N;t$5n;h;gx8?=cx
zPv$GcnpA1QRIMi}k@vSo{iyg4-e2wKI|6ORTk*i?@>_%+H5NRww}r{tKxu{yKLxcC
zW1UiErd?s~5d;|!@O$+LuYisA+qBJOrq?uIp>SlIH5^4Eg6w4tQ=<kd7}N@o!+hwT
z5N2c=ZcpB<(T?@Xf^eEf0*MhO1W1-hQ-UFDknL5eF`y#B@+2m(IHf^12u+~YqCfqe
zqT5oGd|EX0MWf;zo%ttQUTs~tupiYhrqAJwR|chlUYiICJ4?-!Oyy`9u-z5Da262c
z!wJ1w7Me?pROA|vv5q+OC;df%E&#{AJJC_swu1bgt&*jc%Jm5P8miARs{qI}A0c(B
z_E3a$fSP^*ouWmQ?l`yv+!TieeSi=<g82=9o1RuW5F}kS$yf4UxU9o$52>xzYVVz`
z5ZJd<hj?!>gjs0ghS?_da-x%#UqXJM2kD0zROB&BTdJa{Zb`fhBemVNPuOGV=p)YP
z9;k~E)j1d)n9nP)nCxYg_I~z2Nf>QRL9kFX%*q91ay5yoJ3wXjmuVvg>#348=L+Z`
zgOjO5T*Gtc`3pN}frKpT8UsEIy~9i;*Gj<Dn!qRhFGU;+u=-<k*5RWB?`_BsKC`xS
zYS^F1B{<J#22j1c1M36pAA=utO;BRf9aN+~QEcT5-N52`0?rbG<U|{LC3caXD#8WC
zbc&TbVBevFY$G<6#8kBDoUHx1J0|xI$=90r8V#1ccRrkL<6_@8%?IvndYTGEUoA_G
zXoVpWD57*Q1d&KFVHiii%NlM!*Hy%=B|nNSu_5}hJ*CuS6|y1g@+{(h^T9nO;HFI}
zE56J~$_;|A*P1q-q?68v2Z<~=;X6V?917B-OGtO#Fh_S*?#j$S(iJnjbw>!CGjAD=
zSpE2|h;l!SqP*~|@hggC0X<0-dBc6Y%D)1rp=>EtInk~ZE0T|8Wo4y+kjEiZsB1YR
z++pP|h5>~i7{(|wk%0Vf(0UugD}$0|6F&8WxC6IsxPhp4Jae>&##z$d?K%j9*<f;t
zM2Z*CQ)5h<q@xLkMyBM1kM1>8jI~7>y#nlZh-{AS9Og6&L$?5#2CSHUNzentPD#a<
z6|a}knIjaq-|<acl5=q8CVhKnGd2;CKkKb}FgqP~2SGMfuZ2F##RS|S@FhU+vr$Rq
zCX5xx+4<5{_&<!j19ztXwxu1L6<ZbCPQ|uu8&7Q8wrxA9*tU&|?MgcT)9*OD-yY-a
z-QVFi)_t$J=DcP*$vEL@1zZ?MTqc7xcmJ|1G8?xEc0h7}=&Fx9PkkKX$3##%$py1C
zi^i@}AGISd;pNdobfX0*dJmNFXnMx621r7|eQLgii7KRSqeu;OqW!e(`{%4?H$&dh
zW6YXgB;-$7LDwmy$s^5BFl3ljyM6bghHQq~?VcY1B~VJ?gUG4^#h8RSgdbE=@H^_n
zMnd@wGN@#UwV6zG&#S1VAifTIA{XTZ4ox0qdKZVTWCy!jgh7t>mFz0DR)ET4x%+TB
zR+(TNCE_{D*q4y`)T}J&!t4+}aSL9;W36`)tKR(<iOmcoBzoDuUf2w|#G%h>TLnTX
zoFi7jXL&t|mhQF8bNuA9KYtpl`oS`>gG+~JAjaWu*ibM|Ko=56PVgjv>op;;+l#tW
zJjZA+y%E^2hMxHuwW%#Zm?eIbl~;bsUp*2hKfb%GA4!okJH~JzYyHM>L2e}RdlHWJ
z-si5MB1GI8l(tIJup1UWBSCnX2^MFn8!*U5{l&whGjnxSvf_ka$ESOsL@c7VAC6{B
z84PFW428Tg`;#)oh;h=(I$xmvt>k?!v7-8@T97AWK2s34hrGJnH@MLmo!-j)(WdtE
z^Y8I*tF=fGs{GrYfEu6S-d2v0oyy5uzxX&kNK+>nFcS@}mFV2iKOYkV*&p{yml)VW
zUq|m#y8#}%0nmg!eAf%s5x*i-XqxEWgWjJ<x}D$nPZbEXnysMEUwz$zPyOa~$j;ov
zT!gn+W`ue$KjP+E)p|5T^Y<VR5m*P5npAR~q`33abuJ&sGVpSdxFS0<S^8=C5g2zn
zs43Qw;eDSA13OOfVkDSeXegljkg`ko@Za}bZ9blN*L-;Rw>idn(J9^@;v!zG2`sv+
z0k4-RHGlMK_;z+=gT?J)-_)ARBU})b)JR)B1X8Vq*>r2?QtT_CYneG1kadW?^Cyg6
z2=Oe@L_g+LJ6Bopt`K?5=N~uNdMqg<Z-G6>5Kqa~eK5AQVRhyc>3HAXWSY(IdUJBS
zUl(>xB~px!-uFPiPQ#{1&bRN3KzN~r^yHXoMW@ZwVT+yEJA1NuWhD?8ao`&SN^vJ5
zpYJZzKb6Ga5(`&S_{d51sf^rNWCjyRbZYu(isSw&-n~AUMM(7F<fd)6nM3$U{CHD4
z5IcF;=oNkz#1wRVxChY59hJU*d_H(NK1pG*E_mULxxSRLA`(ST-?hQL3*8JS6r@g*
z*h!>i!%97v`P=LiKv_T^Bo8Dv>8s61d$7Vec&upshVa0#`|=$DP}SNJm<ev`0%9>o
zQmcPIUVNSpOwHsTKNxFXS~hBWz8+s(Ts&qr-sir|b5;UgU)-p#t=?VFdez`P?BFvz
zf{A_d;AQ#DV|e;LmT8<Nq7uyrgcvOTi<>l5NZ|%1O53|0GKSm?(vf_3I<3GVKBK7i
zAsj+YHe65Kv!NJJMq)`gZjGUveq*kADeR#^BGbygvd}qVu|G7;#;R-*!bLKQwM6Ai
z7At?7IKQ#5aOuJw{^e?Jc)nz@>V*9_t?F+{p4RER$-z)B@W14nfAYgBlVF#)-}24Z
zx9jQO;{rq!6~9$)fS!$k<G-|<{~_ODqx9beWb?4%;r_yB`7&`x&6-klgqh0wL6aUo
z?2J6Cw;Z%T`5K=B#4~WV+3&YA*$0FQorv&ZChxGS(0hf5`hTuz6?rG8r&`(TMcY0V
zy+gJE5C8t#6t~350AU`*hQ6Mmye4Ee3~1G~o2Nhn=_%7pv5B#-#i^>MCEr9xbqZ0I
zu`lQHSfV2E?d7M#%@Ux$C6P{*Xj&6JU-G;ztZy8r^OVZ7`o06U3==jc*izY8+#o;{
zvvHP@s~O2tOgv)31*PsAohoZQDRHxz0&lUq6HBFg-AcF_9DB^$WJ4NGn3R&+mTR=k
z*QP-N#jCl<R~w9O&$$HC%`GswoN>hF25pQOgZrZ28l`<=_z76b*chCNd7dQvsk1zF
zgI~9B9VedT%YG$+f4^vGRM?&uyRv$!HYQSDN`l#H!g^#4yaP5--8(reoq!fnAN->k
z_L37W=6djorB%b;`Sb17ih59yU92z%Heln=!_~11*E<Z|G3$<c#&8|u8@*(Jh!psa
zIS}l&?mjlnPxCoAgJH=#8N=z!iMa<^Ik+RBzENJ?*ZxYzYwJ?2oUc(vq$YH5G~1<!
zmEf<RY=@5V>!fi@2`Ea+50g0q%%fEh-g!}x%yf1!{UdA4Lvu{p#e0;7m0APJ?G46@
z`J_W?Q|V@dlxV`yf7#LjIv6j#>UmT5#;55ooB;t9j#rK;wBhXk|Mw?;!sDU&y$KPL
z{m1twq$e-;?KJ;?aocojYB_DRq4|u|{<bEtbT=k-SeMQ8U^Vi*9PEs_tUqjVFApIm
zf~FOz1GCV0ef*0+hx${2eWcMn%mj&p<Ai&sUEz~c4ch3JoN$uYuIq_jEoNs2F3;x9
z<|CwLQlQ?w;9s%9VlVVS^>X5P4P_YK7q9GA_iko2CTh9RrLu00>~M`bBV{P$5A0H6
zs*C-7;i^0LI`Z;<>XL%2GUL2{YVkfrcw@GNbefaC#9M@=R1;wmsMQvWE_W2Y1k_3k
zU8ri2y9{c%QvbGSS3``A>v>Z5Wicwcz=fB~#j4tOCfJmawGbVY+aKZsb}j_mdn+ms
zhbkqn;%Gc{!ph^;o5$g^Ci%xNlZ7;U3lxd&$r+)|_BA1g>^k=i&zD!9`K}8_QC|Y4
z4w|F^x#il%nx)smo9TetB0g_i#T$wc1XA9Q54W#}-?1aX6?e-!SiY)E8pkJdf<cT%
z-YWquGM=}A^zodlN#=QK=lkf+$P4WdQ+<C6L$>_GRGiKr^=jYru6&`5m*N}A>NW0@
z%Pd9fx>M6=iP{8c4j})+CUHEJb${(2-)}9b`FzalYNUOobzR%|IIy=}d_@wB98F+z
zaNjL#_%$A134w#{(&$4=^C)kk^Rt!i@xHkF5!;<U>U{E!W(m={Wk2HJb_~#GMy_Yx
zJUoKwIFXg}5x|+a=jEv}-UHrR7QGgt9;h5`n@;sfbi;q++~3n)<onubnCME)sh~D}
z&_MtrIeWH-Cxvnjhk<6THBzv=wE?fUQC<}iXd$YmryNNC<jD~R|5cLy`#dAUdMbU&
zba!#vG;R3dnc;|oec0N_XiM%(-n7mP5o}(`x;pj???qlOrraPi4lNnyP4}0DwVKDw
zc?ziOqYLc$8~;6-+ohisIl?1Fvks0`V0wScejR+6$N1Y(h3l)^{cLZ0uh9k10fyP9
za;lMe<$ePd7(LjLW_)sn*s^pDlUG#bz6Rihb7b~tx!6=xh6@HC@q{O4K8dW`k@#g)
zCM@za-=W%MSP(Eg!{ordHk8iTaegdVB~pxRP)jK+`I?hjfzs8*Afy?&fM~-eH>8Z_
zgl|!8h!ro$tRXvD_<J59k>tbnr>g;QuV+X1Q92cQ5xkF_GFiW8Kz!X%sTP0Y6es_D
zLWgILu*o1fakJX^q_$=!7z8tov8)=jadi!zk5e8Ui&M+*Xl<@ST0so6G`!BF3RFHL
z)JvBa@WB^Iuy!4@g$Tu1^y8+O5(HdsWtV{ob77mcF<m5#(Q6`;tVVH{JR~TE0G>J(
zne<M4%{dY%@e^77c|xi#FUEzIo2Dq^5{w+ccuo7d5VXL_2d5<CTJ4WCdDfH@5OSqw
zT)_PT1LI~R4n71T8cu}0*yw#UvokE$gF~#%fZw>pR%;pt8DA5BSz8>yzZdNgc}Urb
zl}Xy25okuECd`WJ{Kf}K%cB-}VsKNpwzO_()jH1Sb}-#_1x}yn6{$U(&>dQBH1u0e
zyksmOA<6U#OSEFi4QB~{o*ae<T4%*}0GlZW0y{?ne*>b5)d1<UhOW{pREH;>rXjmF
znTmyaKi{+rHPYa+b3QY&UZ{t1SLkZPU!;nWCyP*Vizu<PjeFbP`%)hAmAMgYgvLY-
z+w-WAVsvgtJc$D#L_Z!$ARgA_sh(FnE{`I)qgQIDm?YoY(?4bzcltrETNKhQq%aKz
zv~9uu+6!z>{2tTz5jJUce@%M;_xl&MaX6A0a=48>!JgB@-PP%PubdW#BmrNG-<^pL
z4J8qafh=bsqag+A5sO@~$ybI4?Yh7!l(FWK%BP>y`#2J|E&;c$T>uoP!!`RsC35q*
zjT|g%6jRI*gW;~fS2bRDv!=--F*v`G#?25=(|(VYB<Up62=QFYAMm5G;heoP4bQ!f
z2=dAy6-87U;*@>tsw@dG3K2*Q)LHr3EXu4|O@xJvm!HnI+KOSw@tkm4S-=rh^F80h
z?PMXLmUXsoYnCww^LXau(cK5EmSKsE8B2CLUVPvQFY+Pi+z<csWJi`z3h25j$Wgat
zbDk9xmHdkV^&4`3GrQfnpN!=m<%68!)+6F*u&MD}A@?&1L@LF|%VbN%Rkr<J7busE
zUQinb9_Jwpu(YwGh9()5rF2_Xn9C-SJy%c$e;QdZpWM7(Pk#M<?4I*iE^Wrl7(*_`
z&t!7@YJof+{w>$a$2bsLH;fZ(?E*M!+4}pO`nQtr`jNoyim&if>}dihiq$B|;=;__
zvCVTKH&2bT5zp6ktYcPJTYWcXzGMd~g#_9ZniR={4Sfiv$$t_%5aEkhw*V~JH)6im
z1&x`S+E7|bbk7{qIJ6n66ZVHxn$~nUly!M7BZ^A@JITl}6HMFv=b_zT+kK*ykMNua
z)7@V|Ap<?Q&uW*2pX-({wvdsLP!(o1kJ&5;YcX90Ocw4m*34p^K;b*)B)?hS{Aj5j
z$s-MUY34sA{GKIY;Hqs{QZiMO=f#r?3E#*Ndul~Vc5|tyg3>F7Q7q>H5?JQx>}<CD
znH4wbbu~RDB-JHC;sKes$<atbw<Zg?2Q}<b_FQQ^6568aY!?oDd$3z|ROxGlQg1sJ
zirB@UYGVN<WM<Lf(RgjMRw!-MGRct&zS!uelA1BE6hc3W6>S9F8KdN5n01apip!cf
z+}oRF_3Nphz;1@p-31IY1<zVGMOIBN3&h!uumbGY+hRrWb&pyW?(a0BbAXec5_O*u
z)m*!`t23Lqx<bK-Qsg|Qs^}Sg=^hT6eb~U)W;ls|G=jxwXL);{J-%-7Cfvrc#SwIJ
z1GU~7@SHjW%{osUi^^*2HpT`gwNio@>Ha~99y*R)7Y6OuMlg|N1{cOGlU_I-{J}%h
z?=1x10Hvgc6JJ68F;e-taDewU@_M<T5?deA=V{Ub3uRH-2tFT4Zv`vlUgS#`A&7?0
z6kN>=lOQtfxX&jq<!?$NI#zOU-Tv#{;^=*0`I!DawP9)6$NK9Ryn3h8!fexw+T;0r
z3oG0E-|*i)?3v!7012sW#0s&4#Y>)Y?}OtWCtHtJMKd#cQdG<mr&9j3F_5=*<9(`<
znHWALnt1cSAXIKrRGB6j!k3wlYVlnaHZvAs##Y1_M~<1JTs%)G*d-|RteVN;BXlM~
z{man^QV)ogr(a+PXA!wOPghu-ypfUax)p`7)wY>CIpM3mcl4Apd>T5;x6+XpEw-MJ
z=D~r{y*l2NvFkcek^b2ixX&L~hsp@EgP%{k_pK%5%`K_Vh&%Xpe7=8}UBW$KIdhUe
z9{z^LlD}Njm%wbD5DUc|BC?^}+{4_#V!Ou+5&ZExjy2b0e30Mqp*D(FAka1m_YB@6
zEqX%!RWOvhIh-q>_rk7XaFLaX;CC#R*e%9X+zMVlDwADYCOua=Y>3P(8<NOh=<huu
zGK6%@@C-30-qGDI+|avkD^pqFS0?;JVOCdut^mCOEHANP^0CzQ+O$#QJBA@GhIZik
zG|6oyW~L~sMCJ8s<W%+(@n3(h{~W)SqgiMXzqcp1@9l}~-x`Si0na*Fc>G7unvJ4N
z>^j4LwH~%$lu7zkFA7bF!myl)N`gwRN@l4NVTDx=#$4PgKCQU^P&}>Zj^_PtZoa>r
zJyQ$|g}HY`khtMRC7uc}qt?3x1<dIt1ViJ-caXDm0Gb<Tfoq)C=rrsaC{XsZl|?Qk
zgMw`pG_>TRr@F^61S@j#%<$1P*I;)%r(=6J=d(9`=L2U~7_^G#OmV6cGiT;7;S!j~
zK~!F1rQ%?o%mmK`gyj!E1ntqK2x%pMvP3IGCG!a!M8IHMH*q>mqGP77G}Ad6z6jv#
zp2ZNT7);apMx=JRoa#(IZ0}?!)T|W(d+Sq+ks>BMrl<I8H)`9v@;Rl<h9=rO{M38J
zuqpQZdqnIWVYJgZO$gsAX94mn;3Yh@*(APZLW>Vp2x{M&R=7)@Z02Iu@Zw;#*ATzZ
zx>MHG&N|l-)?LG~kf)B-j();0&C|)w<v_QZy_4nbsSVArc%w0XBx2WxEmP*o>|Sm*
z{Z*-*@r@iE%)d|)2j542CC&vLU9rhrx6XK99o>tZ=1h4ku%H+7ObSMH>tqY43&#_P
z`!a8A=5Lr=VgQxJ9-$T3hl;+G4rH+Hy5?~OKZitx$FaYW{;90MHKm#T^v%<x*y?~s
z35RB|1bY9CSu?Y=ilmh26`sV@kQd^hQcalVyE_+ew(Pe3Qx4n6pJG$4hdq_W#lQHl
zV*CHcvh>e$%L%%m2mL-;dq4pJ(f`}$rX(XFBckW(XaO+!_G<_!vHvHxh4VL(6Px@0
zLvj`s#2xCQm8TK|Yc!uGAk`OH<`6epsqbVon|L-J?d)KArpC_p_`8};b26J<(2Jf#
zc~gST*zFp4<uasf&s-&@u1nJE;(ukAfWAPb)9D32@_+3h{&v?g>1hDz3TcvquA6fi
z`J1o$_EG01ZANKyqnnam;Rq~bBm5`pEHgJ9=OF^wC#g6Tc5vFb#SgLLPA3eGFHHcW
z-(Z^eI;1LkU(5Az2KbgvqI6>Iz_P{dB|2;x?S{v77Z!LEvobn)6BcT-+^;TX@kW${
zdm-%BJ=wr?ZF~#*<VE!XGZQZU6w0_t<|iW&VJIkZ6gh7i+|(|Ti=+V)9GsZgDE=hd
zqH&*V!=_>k#j9p`mg9sx5cxj1i-8&^q7`rrlc+>g+#YuW@h-A`XSEBa_)ET#Kgika
zu#}D?xUAc3=IZqJ9BiaYz<?Ifq9}E-74Z*4!U1bxmd$q1?fQ<rl<Oc2bgTRb(ai~+
z25h-rQdi&{!oUP+Xxr|WqrNd438ZG_hzd3J&IvF7xp>M`#Y=+`Uzl-vyxRsMnM2pb
zgAOEB?S00C$}EIDR{vq3abcw<J?5Ia-gu`)lmXST*d+=myYO7j5RRAbe7A%-_J|3`
zK@KK?&bi+Yf7&{b(7Ka}eHY4<_EWp&mzc12a+$fEqL5Qmf3WsNFbL&Q1BxBdZ^l^C
z03ch-Rj(2g8L!yXy2Ulx=BO2hW;%m(gI@)c7uzq>D#l)%dd3at4}lO-e3SIEQkRGj
z2BGkl-Z3!s<;|0WX4XdNEzAqtO04Ii96VLkJh?0+RcxT_=*)usLwvnD-9jWYPcbE!
zk%ZGfHQ1gB#$hZ>=-3(tx&0^=Y`q2C9lGlg*d$I+$$U)uaW%6X03f!84}c^csmZC}
z6AdEA<p8nD-u!`;7@zpbP7;C-{%k(Fr^7#1Z=vrBOJ1=D0@%5qF+b<>>}tKl@I~Fw
zyM>uKH^~;)wYfSf0_I}NCX64Oy!@^YUX|`3-Kgul{_K*`xg?u#{BT@$=2*2aKegoP
zVUPehaPQE!=95mDNUgr1@7J{9_SK2*U?9km&Xra744_ZnyqGD}+}YnFqQe+zL<e-Z
zdFf8~_-HY*Et%RKwcOZydV9a$KD`~I%sRLK7Ne6nxiNqACBA2<@yf6MHnCxtNkAi{
z^h3X64>O5Tr#8W&c?^f-x1cG1fZ=g@t$_7(o&ocm!(7LDucG1Fb&<3G*zjpWwFyqh
z!X?la7RkVt0q+=nTtA2op3x0)R6iJ$x8TbpL$sLhSokw;NQqn9>ZmhBy#~VfdT+4T
z?U4Kax1+{$3TJ1*Wh0jJuc%n<4L556uxYZ{|Lu*<AJ}M|`bGe}A^`z${M%XcU*1?*
zf$w?qzw`gbCT{;YWMw6U|I^SZR=c(%=KS&Zs<(jUd5@5r=$Gv?fZHHWJfwXhf(Y4I
zmOD4jLVBHhi_NT4X!g(Nv!{tGC=uAypSS`Rn@;V=v!%-YgZb&;mo#e5-aLh`3I4Dh
zU(PS*@z@11w37A7rF%e2PK@oZ?o#&Us~X=8JteZX$9FuV+aZ?5Waw{>zXyVy_8iR~
z1lN{kVgLH|QbJLBB9lsa7Th|vrZU+9WN)~|oejYCS9>;;fbTpRbwztYjSkg;x5E>h
zXLeU8t4+UFUti_&(>@A`)Fa;&yGIT_%%6ezx2GiqZm7NHY`7kXGdWR=F1|MRJQVJC
zqn(SMEj${nvHlzb7n4qJ1`kZ%!bDJLF0YQBZBxja?THm+;|6Umu5^{i^(>}P;B|@H
z*l%K&TjIT3;Mmm5)92ok?ax7>ny&R9fyN4}XkkJtTT?c?cYP`vWmyIK7A4}m6N)&j
z*GSWm>@AjZL~4h7lw%KGTX=g~vHc$9<~8Wnp!gBDCz%tuzOTue@%6!KmD-$3F<>=3
zPc&7LsdTWbtVxs@4}xY)zkOKWg-ir)bT7S&aTz&!oT^l{#-5PrTE@zEn>-W)c-h54
zhv1dR<BryOh_Q_u#OyCSU{^hVVhG%(W@L0vPdDDQSHr}pLc%AlL=~#}BlC8j&Rzx}
zgINFY9agls&DAJN9)S==K~RZNz*yDRi&<Ic855i-XKfwN`~_Lp&v}%J4&2{X)a2#*
zUOuIU$<^&;aajjP3RXw@oxLW64M>|rD$udkUXVtE=z4~^Q5Mo7#6h@7){RA<PKidV
zf6QSN1%h@av|uJ&pJ8f-bA%u!tbq~5U<B@xtYMl<<2VVd9&iu=&r|9!7keXP#^J!k
zwg4L!<qQl<W#gNtTG5a-3HD%Sv%f=^z07ab`+G^^(Jfc!+Vw;y(6@uJzE^Sjj4&LH
zBP|frV~{5fC)`e-#?#YZ0#N0(BG6?Fdjp0W00)vy$DdjjaIc>i>5H$<LI4)t`w`x5
zcE?T+eBq2S52AN=SwaN^97PCCG5QmxiZhnTtfUTHE7$~09haj#x*RVy$m945MG4<d
zdijMrGxkwIFH&i1Ze_17b#-#XWGo%6ZIa$(c&Xx8K_i2?I`x={Cw@|7Zksx|WMzjJ
zj!aC+lmC~lDTXr*%p*nPV@y}c!_i&1#Ys~&4_e2fz!hEUU8f<t6ao~(>5pka2+o}1
zM26&YsJjd%ie^?M6k(Q~J()rU;&?yr=(X_+N4(a2Cqhs{(d@inRisk#BUAh04?ox6
z;LG55ndc+8YP+KacX0W#W&r>wZge=9LO(5YZhOQfMe+=1T~zEn@s3Z&UlMi-wFy0Z
zUY}ZT2#dc))D-UUll$5f<61?~LQ@Kf5snF#ZZrYN!ds$k-FpTtK0=i=jXvE=ZmXc{
zJ(R)X>~lp|eo1{Nf}vYU8^Q|a*o0?;F_Bp$V*L2tK(N6c2_aI*j52Z_w>9T<AZa;3
z5AAo|X=W+7vpj5*tLipKOlYo1jp%js0AM}HE#ij^B7_D8T9f55$gL41n_S?gzqICg
zJ=-7{?-M3{Q_i7@8iNj$e_M8bYt2~N(+J3{1ZtY>6e^O_w0#3Zz~M?$k&1|6Y-i;v
z#8HF&7d!k)%Yf4=i{P>*#2?nU){eCq4QB_W1{eCj)Yq$)XwWz2@jte|9Dg02^|+#!
zM>ESUO!F<GWb?5QQRO^ygrt<j0(?X=I_#pdORSAvOLNx)&SrYq<zPY)<7blM?C?R(
zXV##-1CllrgT;rELvpCNI5#d{W+pJ1v{IIDf|?0rd4qQM7a|Yhb#(9?-910W8`gYH
zZ<eE<I~#rf`nxo-9k1qIdQX`hCw=%l3b}Q+d<m5;DPtny_r!=j%zWOQTQz?XjEE>C
zW~675rD$p#9Jb9R7LD*{;M@_<Gow47yj)8AYPfAAA;j8`b=9`1&+)fww=C>_u`l7_
z9PO|DC4l<&;dAQy1J3l)CK+I@54vkST`pY$PJ?@=<mUVQ-Ui09kp`~xd1P0(&2-M`
zZQwWtu09my*wyYQrsgs`-|Y@IdcO_?!f;r)LVM6o?>;{69_~K&YaM9X1CM3Mgao(h
zP8E7#+MRPAOY;~BZdiuph@VkM{D}s4>`(Y3lz-F?3&y9Ep_R6J9B@x2Jxr;Jzi^RZ
z*oY14j?YIKM1`)rzz*-XMx{W2;A4%8TH-VZudbU37&b<E<1kxnRTx;fc`{?lKq&WC
zdiH5M9b^{|kMXhs4e|sPf7!dVXjXGIAG%g~@<^FYpK)-xQ^2Bs{R7bXKf8(l`BleR
zVV;fs{(MFt|EIggKbzryrAn+!{?$(WKjcZG)usNS^Y(nxdDo?Ii)6dL>AaZ`_6?#|
zi_M@LlyToQ(4--q^dyOK-RG5SIEk@4lC?wqFw~RBDRyS%o+K`l3n@Cc^+1QO5x@FB
zRbPg|o$jw<7d3erCOi)7tIM*6n^I%&dP7qtw1XK-{<C*k@`_Nlx(xyJHgQh<9c?u-
z&8fQK@>1nsUIFDbxO^I;O~78kk)#Jy;5a!%M=^oQztJQDbw6l-tbp-&;>+Qi4PY7F
zC{z@cDFU~4ppLKaud8oQUEd@tBdq6X$CXGqfj<w_9+VQ;mp{cCex<p5@+3r?XN{)5
zk35FY;@6?H15}>YE1j)KS1J<#Hcirq4NmdqCfz>sL%R?3xMgSx05R@;V{%?r6-ZD0
zEA<+lHH}<LOQM_Jo?JvCAm@f~w{E===senEw)FhT*K8N;=O{jqgIz#jE76C0b>QvF
zo*PiA*boxpL3qZdFZ_4NYwy5|1B-dt?mk!0Nt+6m4x>#ySrht55N%FXgBB(o2u;!A
zFoYYpr{>yj2~Y7t^<`)AE9KJ_&jsn^rS59W{q<c7<f;aizn_qn1e7{kRm5cMNs`(g
z8-4w#cI^>eq3H+*<qM*;Fdp#52eS;>b)-bThDGj=v*#>)#pb5&A6Bd{Y!M`qy(#ga
zY4%%VLawb&@b|%U=-LQ=_=`~P9(ParwWI;JTHO?Q2BB}kRx|q<<5*EWQI<KKn}8_~
zfN@rh$h7&{`Ea>crfHNZUA#YH-#u-bXir2DjSptS#5xCdwbUiHjGk)`j5uB&R0rx1
z@m92`ZZ$q3VEt0S=?~%NK-A`{z%)BZk_!a|s<ZJbw5!N9>RB(`6J4Ny^a!cu=6C@i
zHvm(D(FZ$Peh*A!QdQFd4OJ=cR=B*LV^p9NTG)a?qUGns+*1ffa-GiamntYRqGX62
zbnYKybzN=y;M~$Rq^p0tXZIM1=)nZThMjcKETZ6<NQB3cko9E3A{efLn^p1hi~VBc
zZ6IXHlfYV2OtI4y47Dbd6lbvZQ<{HZ4op!UxrdicKhHJ41Y@fvKRQrW^C>`RUH}|L
za0e7C(G=ER)0BRLhmwNqT(RPNA76sCs(Oiy3t5tnMp_ySbr5?b;0JhM^tDC@3WUWY
zEyqbaszYx-&<k;nL=f4JI+B5#LgG;iALl8`s!7nz(|JPe;*0FURgCk9FJ=r%X5wio
zdr_($E)$`E%xNO);>8zwvz^c-`O^bS67K&*;}#<1AVj)}qHsJlpSF=l1rkeuhjye^
zYuJT&51zVBqfaQrzZWG{x<!6&`GIpY_JA<S-QEYt$lI|kv)c$>r{iWnkCkrS0c2`f
zW+mY%qTQXapN?Z>-A}kI{kefS(wLehP}wuqSZtVEAk(5C)-T^PB*JqhN|Scju>fEu
z#!NrN*9$C?XRV{q!y)Wt$Hpz^gtwjI??7?!!^%--;Byd)TTmx-<J5u)pC!Ur@f&E}
zmnX@D-MEAqci<UfyovP12wDKx`!M&Y0y(=tta*Eb<_MY3(1}wd7m+pq&xb9Gz`Zc9
z1-7*Hh6|_Iw?tsSHGvsiymtNwv(F-+he$HEd?Uc&DbaJcVhL#Ej;Skjx-bLmsQJJy
zL|3&60$QwHzv5Za5pM$b%*yN^`o!x6t`X14U2KH;?Us7lv|Q_88pjPw%5r!&%4aUQ
z$8OMZ26ZAMF?aX0Zx+72pae<LO;op*!mY@P5l*t=cQh<J<1;bux3D>u@TiCY63meR
z5ldithXwYo=T`8LI2&+qqnYiUoti&kHvk6TjF>$$-v?oF0#UCwk++WVQKVC%ZY)za
zWK8<w_mB+!VG{)`<aB5Gc-DF^OOW?Iu71{-fI$3v*_4(vtai7_Fi^4vb_os~xV&E(
zGMG49`>tn0CkQcLbF>;GnF5{`NAv>cq7NJPY`N081K`E@wCIWkC?pu-7``G~^N4Z_
zvv_1L5<HpF`hn3|5DK*$=i3+E?rA)Ha-n*?Q&^s}N7JJwSG%p5+t)eL%{PT}e3L#$
zj?$UetPI7Cqi9)=rUzo{;$$y>qg|+zheg$`DEg_}@}>}PcOj_)%yeGY^Zg@&(JFWn
z!F57V6y8$AcQ}I&sgUzkB_tM+S>@H>?x8&;1L7AS|FA}fAO_xA%a?AQjptP;YhD0F
zQh6ckv%91vY_`vTI(T<)*>>LUK<n6~tOy))4bM$&RkV>{CXUyC0sTu1{l`kODIPKx
z`yHpi{5Cby{@ac5A5^G}@c%nILu1S7o1WvlqL*($03$6)*Bu+mHU&r8WD+At_Op8e
zg~Zwbz?veKLe$>-=|YP2K@`fe^5h?`)>-*?J9q2391hyO_n3yKaG@_1nW(T<Es{Pp
z5`N`eB(0PjO|ajUyh&P}a=J1p>O5F{UYkCp9<Ik^Ur%?*A1=boy$a*Fj%aEgfXp=Y
zQBavC@;!a?GZ%TlMfgaG4IC1A<NgGOVmqZQk{BQ~RZxb<a1!tydp(rh$M3w3o_j6s
zdmXy+-Ek2#a}q3N6KsEUuLcd<-(~1dXh#N_eYdtvir~)kIA@_AnWSAt+WN3(>r9O}
z37$&DgE`<kdeAB57;AWqw_5mm1B=PFsZ|ceh_eKHJ_^C)4~9PA_%g(9xdz!5L*Xo~
zQvz%R4{t3(8m_^Z##pLvemD)pYtomuqF>70u;m6Qa<T+nt{KfAd02#DK-%<|WKk))
zCxlb%5k;H)P;lBNixOFBt6vauY;`JwU59<}Zj}kIR*1#+oRtR%o;H520Wtzk4U}^#
zAq(4Q^XTLNl}aUjJbYMhh>jMyW%^S|l(TGBb+x?1gzc7*DKm`4n-r=ul4CNiJHFk=
zVW%u6b)xGRttg`>0le-W&3lt~e}EmCX^$CzYRtffq6!*OF#I26R=D|iHu~9JyBv?o
zZ<W)>t8SoGI(Is~H0jSDGHUw#%<I@2mnwe4haOPn#1{}SAW=2uEkSd``Gg=&A<tR{
zr2~suyNSNHKKOKE)g*t(DWu{12y*0Z^+a!bw?a~<7QWticsVoY$UwJiIKAy{>Us(w
zJITi@h%#5-@t;I2BrCI^B10;D+XD;}hrI?+rkdg;a-;f$Q{>Uj5^B~`lu}HXkmMhU
zWbRF90v43RX?c`@*ii3j^O!Y$%+snFJ_5-JbG9v!J6CQ0ndf(i6Ybn>H@@B;_W`|A
zE2?uW)Am0k>ngj&=2$8w;wU==btG814wTk`QRa_Cl853`n`KzMQNJ<9j@D<09}t;e
z4FtL$c-5T)*Wo)A#XZBU1mN%$I=!@-`2WKCv{#hU-nR`xy?;-FOe1RJRbiS0wT0)*
zYYrq;Csk3wdD3^H{SDJDWgc(99CB()8^D?k43aZL4j|u8tHb0GMu_sC^?u`k0fSs&
zf?VuAWSNP|21`T0*J52h{=Nllfb!4`O(4l5DB@E9znMe?PZ~BH?k2{yk29!_W-%3u
z#EmdyTHnfZoya%GX;(s06R4D_5zYPZ@SH+pFc@4-2~VRv*q1DM(K;1`-hW_!5i;+g
z47hP%dTC0N5xbvh#ED`zF2lC(5+h?2<%KpXvrM;F(}?p_GWX7%p13XTJ6w2iWbDqC
zhI+M{LV*h&MhL>d7NwtJ4dh6WJbg696*P)W-aP{Y0W!_IBnxEQQCC4ig)sHUAtOmB
zu%$o`JB<*y_4{hYa@~(Bsr(gspK8XBmn&C%Y*(%x&u^Ooa`K5_`>4h9!ayKnCo7F_
zSaQo}1PLJ@9`{U-@4OoEWuHp4#;9j8o`N;PUf8e#`DH%zYd#~s#8q8-S%Bd@EOKDu
zb?O3^Xn<$Iap5YJ7W=`MS|2+jRo6(3@vJMq(@)?tF&pPt(m!5)**!ofhP2DLkNvxe
z3Rm^aa0O4iq>=}^E>Nbv9m{uNn553^05d9dagUbG(x`C9hloQS{R2NN#0J62s_W~!
zDlHkaCqu{d5lP!trC{%2k~|bKvt}*OXnLt#bF<UARULBfEnpuf9paLemg&I=Vku4Y
z;?=yCVq_!E64=$c30qd|QQel%(0!TRnl(_b|7{^+4=JGCLLV;b1TE!{0e9~>l~grY
z`0^}<6oL|X4GPcCFpMdl?N$^Z4kr|;A}y!`G@znYYg73wdwfChpfw?L7DfZMP84uB
z7^$MYLUa~=LgZmox<}}i1D_=|L<Jsj%n(l}a%z{k?chtP6Wnr6a_Pf_`6nv5(>qxE
zRyz!pgJaA7>?A38<AlXBn`{N3%j?n7WWU4ToW6>5bJ|HDp1}Ut_ejVg(KlR6IZ(`Y
zUJ~!YJ2-kXOWR1GfP)S!qey#i;NjLdMZjJ#7(-p}fW*Ou1t<`EZ>K7f)&02@+70Uv
z9>5A_-DLKuewBPrG~+9<UT#<3Yv{tFtJfKMF1==W3H%gsw^cR3ZX(%ifgqf=X!9p_
z>{<9}-!Mf0LZCS`cZ2Us8xQtepD`bav7_#WTCYp~GEK9(xQV6(39xhR%{`|4z@yIJ
zqigvB?lilXN9^Uhd`Vy=47crO44OMQI5M-p%%N_Ge5k8jMWz{-H=)6%$9NAM;HYR9
z)i~2NS2ZKKe4vgvg0@Lv%NaedM;Fg4H}|3KC2_rqcLZ+X`GL5^)eU@j{B$)6goP`!
zu$ERxL&9J@eWFu|vobG&Le{b7km2;W2a$AbPUKGa380|33sN);s7O#g1UIM(;Qe_l
z=rqtTM9s3H3;Oc!ip=^gcKL(dYM3&KxArXAu@SD(aJoDon}u=E^^-D?f}l+B;d)lt
zrgn02uAMqNe@6uMDoz*2v$%e}S#^ikYwSR_lYRYP2GSZ``rU}{o7BuVGV9-;K>vv{
z**iO#|F<gqKbS|ORTchs&t@$LfPO5G!a@EpUkZ++ycOI2^0!OKQF$IIl_7a#hWOA}
z@3resQf?de3rZ&UuFmVu>nq2FH0`iV#W648$gz`hq}Ilx)RIOM!Osbny#cD{VpaN>
zY4KyuF|Jb8%gM%lEh!Nzm!Fi>#Wj$j=OaURKD=760==hPl^xo1%@)cwHqJduWV9n~
z{hn{lu^#)rHi`CBIG87;y?8k3Wa~G#jdQP=58FK_C~1$cURgEQs*Uec*6m1!N>tbd
zIf`>j=?f(#NDB$D&j3$6+2KPtAL|il3&@KaD=X?3!ssHR#s%^5+xyEGc<y+vuT3p?
zRRb#fk=||<!II*k0WaB(-38V77Uj%7E>Z}j0(Y3z3UsaHbi974h7O+!K?KiBNgwKJ
z*7Owol3xe*B};N0DJoIaKy-;&5@r^aaUB7^KS{C^HNx#?2`N`Z{EI9xaztQ4s2C7s
zNE^k2Jm!{(a)~?*@ren9$h@{Ob+`$Ht@Q-(e_=vaHLs6gaKB1+=g{mX+~US3cN%ee
z095crprQPR<@{lOvL-uLc<>TRAV$}1O0NhIH5;=9`c^_D`{^qeDSX3m$U5hz{V%dx
z(0G6>Jc?*<(en5Qx81_{@T5HHDw+UsvNasV*Osm{*}@D(`skK9I71cogyhN)t3|L`
zLZ+iy2;hbsGFI{^h!lw`L!_K%z^cbYcvs*AL7dd2TzJv7Slv~^5a04)c18OjIh3L0
zO2)XSN%7TB%Rny<6zG7)wE828+M*9+@mUq{DJHPZ5s1;`Da|dgocQt@r@vMA2-qfw
zp<FUw8D2fPPUSvg&O*V9k%#k|4LS>$xSP7ycXJ&211CqTsdOuH;~tdjL7oq1e=#j!
zCA2J-mONv*c_?2%q*1w)!S>7qY@;59F!lWf+$73&{h1m3a-w8<2o4cKTByKysR^$n
z_LO1Yd)slljXW<fEy%&{IiTMM6a?G$-0Xx1JH)(0HX8ZH#s2)f)PhP@V&bLu=JH2M
z4sCglVUmj{H-*zNAyYE|?Q&4NA<W`zDE>3+ETp1C>8|_M0@O5Jz`;o#s0J^psQ0AG
zTe(aXf3EsUCe^QmH+7rZ9Tc-`KPF#wuKijhIQ<1pTAZtb7!WIMyRSk>Hu*=F@ZxAE
zVhjLTA=HwVPjf*4oywyMyHF7rqqZ<LU@71$dyGhPTo}W%jZ&W<t2!u`G81bR{Q0bj
zEU@+WE=SgaNsm4_P0vUzHZ)SM@zJ#1gU5Qdu>6<x9Iw8ic2J3~p>NHK)BfAt5d~f`
zMyR;!#QVt7MXVeS(UtUlgtszRM^{@LM`stN&g<HaXPe!WT38@iHnoh^9QUs85F$<W
z>?dss5$=q0h%XaTSEbVt`M_>Ij2fUn^txcLb0O(;4&bwR%MmO-r<6DB+U+r>e1I9g
zgQID9hPSNxfXsVy#iB(%5CEFxQ|&2tzqSRa&v|04FR^02;yu^wzT|Q8SqiwHZy)yI
z__cHWZ1Isx$$Giq?&gH=P*l93LKBc#<+P9Uul?p9NiTkY{0I7X4MHC|5D??P-EaOC
z8MgrF89BP!1ML2L==~4M-je3lx3c%c_e4+NqI)&?oUJp``_u%st$qXZWZnM~Fh?Gk
zVxFm$z8Im53;H~=1NTdKOi!Y=om)FsF&umP<Jfb!_k@b{@EP9h4;tPxA0kxxCj4;Y
znmJJs1MHY99(E4g$iS<hQ=@p2cKBn!QM<90kG;N%{kDaoM1;4kGEb^;))-T4Y1&?F
z{~)NT5|9|Ijk2uXg2Xf_52?6RowT`WP(spJQpv~eUPTi0XFhegsoqFp=bF7J)ZffF
z3DuG;U24K|=ci$Z<*lyJRz%67P@0w-gZJwo7>iTrbWPH(m&=vld@A-1Az&<<47W*$
z`&au93sF5_faqv5U(rcXtJ>UhCH!deZNX*Da3lP%<t*6oXge&Tio0S4v!+dUes~jC
z5Z_5ID9KvgKAK2^ScCGD;~yr}*~*4rX<O2vuJ?P!(&D`|K+;qy^(I)qXJE~Mw>8bF
zQKU+X*tWuH3TY;kLDUx@RiRWYHSMd%iT5&?gqjS3^G#%@La;h$S<?#XQZv3(zFR)M
zL+Ln0bd_LIf2Pl8l~|IOYxa?6_1l0`Kk3X%DfvhJcJ{1TN?Ez4bQ=mO9-z39$(H?-
zV3BVjr5*tG5Eni;1{T|DVmfH$noxQf!|KaXdj1f9IckPr2;yKe_R1aS;8!grE=O{X
z*fr}mpz>Vt-qJt4r-I!a{Ek8`5sd$#&^cE?3Kwsm58)s{ko1fA1SE&uTZ!<{H@RTf
zB6WID)wl|1+<x|4jC#JS>3G}T;nGRab}0t*9uE~keyg4rrY4y3(j?=GO<UKH^hguc
zI^CfHW`a+S8vyQiE7mf#S5K;sMv?55eTN2$rk!Mgz!3@rVA5=|=>K`AVL6MaYs$t?
zL?4NJ35_2&ZfPOqWGj$gcn-k`rCqJJe*O1(`C%7XfDK<AVtF0HYxpPy!~AIXybH*x
zDoHC?Jc2OyxKZjDih2`hPscAFgR->*>=*{I6@!oy>s{b(=DCqGA|^H9Mv9?4BbXef
z-;qJR|1gJ2`2u<2$qD`r*!N+8Rdnl_#SA<M11a$=i`<ZuqeAZ|P92t;epRuU{-bCz
zmi=!dQGrWu|6htx2k1EVORh+6sH>QN(LRwv>@xkWcr>EOx<B_#-yUuGG$xOg;536K
z$9W(j=jQy)OVlI!sD@!?VCZ4u)N$ZUu;HPq`W%2#M2eV@h(IQ<+*4(ZK|-dPk>Kp3
z7{>(yZ?aW?%cezlZzB^E)ZpxA#T|7!Ny}%b3uQI?xPpWwQato%z5K%UMFxh`;;YJu
z5Ep+Y7MTya?}a?Fm~bP@==SlQ!-+;`AL!iZLyhAJhV_QQm_*Qef(ID|4djS4K+s(-
zkRo=xsU^vLM~D*#`XgQDiCqM$(2J7yd9$F;_7w}96v4W3{Dqu%fS4N?--Fpgr9H|y
z@Y<vQ7`Xbuz_4S$GXs8{)%PLicYEip29_K33*lEbf6!3D`Xf{^eX|<K#82P8`dEi^
zlfh-KxT{<60M%yo6!b-GggPhjc&sD=3I<eb2_jr6pbrJ7h2bB(N}Y`zy)?y3o{Q)1
z;m)Lvb#Ot>=JFsvf1EQEIZ-q#%R$Qq?2-o(G&QozY0`FCR}`v>vNMw{c%~yU^sek#
zX}QGIT#CSMpwWIROVMyx!4X*fL2V4YE!}ggOM5EqcKCwa2PAs#pDNI;2s&=it1$A^
zxveMA-K>6bU3ug4MPD?gOFz%v36|Mwe|B2Gn$eG>5O{qMYSq;JLG0<mHJZj(`n+lI
z=>D?>uNNax^wjXN_4rmeHuXz4W+<z8w#?Vl;Mz@h)txOdW*ZTksH7e7d0@_q!v|}+
z4oCDVrMOO~`a}*CFIpmlHXkPnI_(!(*SIJh3HMGzpah0GZ!o#AcEceKQLaOOU|{HM
zfbEtviNXdclE1E4b-PUjI6{nlRARf!n|0xQF~I@<fsT#5`maajOE<@s=b2KfN(8)}
zSW%9y0olLyRqHYE-rmE72M@N;e|@Xl1f{pKK!eU$MdcmxAVfr8@X2jlU?66%ooWHx
zRKzOpv5i!?ANuu2`og3l!@|HrSTQ{;(`5{|8lrn8fsAO&;>{WmvQ9=7(r9gaf%?nB
zgt_BMXq4U1!xEw^KA%=%T%UJzcw8vQi0WdilsKQQKGDsV>|sq1^(KmU0jrHqco~_g
zu%SU#P5U61t6M82K8w~9=<dQhd&1a41!cW{vZ+u0BXB3R29qF$dtfDtEmyY#p334>
z01!zdD_kEmOD!}pnO%hyT?s*u8JbIZl%!Q)i3Z+2qrAYCP*}e(Zgh5+^@|V?c|d!6
zRW=+5^YZUB>q(7UQ`KO2d5>}bzsiLnm+oaIfx=5*E%U|;3E;AZ4t_3R7Z7lk;9`#u
z_VyJ1eMp8{0Y*i)F9}XqWM+?}DSp$*c(3SPe3Qhypa#tB9SxUGTVP$90v`4SQe0`W
z7)mD#1fB!&ps~uVJ{erD^(B8oX_2}*09A0VrX7dS)YUR<5XGwIZBSX{FXl#?C^9Y@
z=VRP{JRW&fO=%%s2IL`xzx?mr!><&|9J?)q4PT%}jli}#fQU0Qe*2r|&;PJD11R+q
z1t>Xk!`oxLS*{{m>KGtzMwurws~k^|`qWzKo@7GaAfTTN*t=$hl-Q;_6n)TT?;%t<
zD&G+A|1zM)b;GCqy_<lE&B$Q7jPel!tXb61AjNG!3dA3<btzjES_wnIA1gG+Rz&4J
zs1wDE7gc+nfF_N7MQNK)J;<ZkVShY4{+r47P~y*m0p8YIOJzK>;H;gsLz8NF<cvy!
z?0A8_HA%iHQ`tzC{vPnAsF&WAL}3=x-2AojERbNtv%`d@jZ8ODau{0p$FT6>6Dtr6
zHWxLM|A32sr3yoz;`$ml3`s=MrXhm=O!#?dDsEwsH*d})By&ak_k`=WmG`OH3QbC^
zZ${Z!5?1k^KlOrk>Curq8J}5wc2lfU-RzIFV<g1iMpbpczO;nVVFezI%7j~`4cp3)
zx7P^_o}YWdYKkGx)l_A}pjM|3a!zJ#Jjw-%n4tdPi0>e6i9NQxxahqRCOWVW398n>
zv!mab{>iZ5dccO)EHL`e#jF_{R^nyuOg<IW<mS5N4E@WMo<%qdQh}l!Tn4ad_PNwQ
zLYCi6+Tw5{{Ds7%!Yy+bg|&HXegc=T4!o~l#91VHwR$O}!QPvV@Z0h&(Ea*2#g@pB
z9~;u1!P?^7fQlo0g0A;tQ-;}^1-?zXCMYPwJY=IOyR*9`v|n(AG@1~3`tF-JHG)aA
z8`4CD+J992)?y1Za;;5a)hsZ%cP2l>5e8C9ohZ}Q;neX^@2RXzOBW>6QGuJPd=+Ja
z2TS^ro)?VePnt;uGBiXEBNV`}1jBO34_gryNa61t_7O55h+<vTpxIhcxx$qH=@@!h
z`qWEzyc&t^+$T{Yq2E!z$frLp^Y+m-fX}ZkdgFEoQu4gl7VOdvbQFYX3e!BoC5~Ms
zXs!4TH9BHPec;?t;g2Qx3LCKKx(f-orPgwui;p`x$n>Pd_qM?ttdyju{|S>~SWR6h
z-PB%2J|)t9&Zu^iT)mjh@wkHqwuT+$krw7u3zYz#S6_q(j-pD_)>Kw7Hq=#CP}%<C
zsr{@(XI<+)CoV37B?Dd1CI0)EF=b7p33-<8!ut(l7GFpnF0I3KfLZ>{;0VBXCKR|v
z5Cw7XFQrCXTGG~W3-1eMeu)`U8u<DbAl>^Q`ivQ)u!`wM_bFLkabX|!7XU)lMhPoX
z8;1eK)KUUczN4wvugP@Bf&*u6$C8QU=+UT$*M&EIocL$ORA#YkH`Yg4#TWHw81-ui
z2sgReshp%_%#Q}S0OXbIr5GD@VHWjwoW!vHsl%&tz{?*O+0p3nXMI>4AzvTQ$IRx@
z8{|PiW`rkc8f{H>-D~c?h73{b-F_b(t0=L5!p?BKJS{j(x~GWN%MH2j4Y@e-LnW2X
zl>j-26-mv{!Qzn2OTznEZa*viAvE$|IU%KfA_1D%rcRC^2}pXe8j^*3@Pw>TtQq$b
z7eV=#8Ywl#^f!>=h3C<X?LN=PQ?{+=ZwMuo5sx^}Q#kZuu0}0uo<Yb|rg#4rvuY)&
zS%Ko)Y2N&8|NZy4N@FIA|FZpZ$U9oN7ywM9Ox*PhE&lToqOv2m!SGK_fy26P9t<VG
zP|%uCAk_vfSQI{Ev2?s1Z$ExL<+ACpcZU<6c0==WWMMg!YHZ8<**lj$6}FI*2%|Xf
z1MI5C7De!de|jO)z$Hbqy-0U6%rr*|udjyRfS4H4%eAlOcMk~Z>t_KH4IHijR2N^M
z;0E}k{xa4L1vZ7{P}kzP&7yH*r$k0Hli+T%a#cmU-}5@uk@gaX6iR9;resgiDqXsO
zUF=oh`5c%>d$?}VQw}kMAtU=@dvc4{wBu<#Pe5@BuE*nEryelI@$P|n7Ju!Fl0Jyy
zYc|~_QDhvP_w8lj9>w1*>3nk3NT`py5lPGZ=hLp}^_JLV`Cg^x73`;%J3Wh2QTG{*
zAgak1v-Im<{=R<h&z8R84SRs3?N~C`pv_dnMvR<Ppj~ToubuM!-y)u`h8i4)4+B)?
z*~*A<R(c6+_AnEPFHP0HJp_XzH<R#=XJCjr)<%M2c}syU^Qo{HC``A-b-Pj(H*$n+
zKstoyl=6`4n0OK0AuR3i(3smyrK*01g6?DHXbBAd3^vvFqSW~2y1gU)6EZSDNBxY{
zPC+6T2S~YEO_n{pn}O`1skbgma#x8}k5{F~Rl~aDYBCc#)LrUxWDE|vMqMb;)jf@X
zOa0ll7F17ocJZbP%_f`DUFaS{^Uz?I?Wkb^<Yf^e<P9(?$=)*c<b-6fEnhIYYJFgg
zA^JhVjbq%(BG8bS6OaG^mYWgNU6JaFTbw&e%BZ3`K^g>?yAJAVLS752v=k)>Iao&6
ziWB<?e;r+!U@C8N^2T}^DYSNUBQ%jG@6I6t`5$Ypw})5!=(&>myZi?R4nBNb_!zlu
zLCgbapX>%}xbh`E1w!qmp2g)M``}L*A^$+ioHQMnn4iN5dn<6@1syKiEl^8bV32!z
zm2|gD25<}utTZ<~$p}jH;^$gK)I6)?WKoEqgAe`62~=eI!OUC4u9$d&44NmW5V8a%
znIWT(RjuL&|BJDAU=jsb)-Bt%ZQHhO+qP}nwr$(oZQJhNyKPLLH!%+rG55}YsHm#^
zGFPqzhR$iE^E^&n?T|yHm%u+)Ze|OzmkX_n-bb?^Un^Fq?)YaKTjAebWqTJ9()|^i
zcc!i6d;eSC^FO(OSxCUye-w!ezguJ}|I1uJSwfJBmF@qRF{Ji?d4JvXuZJ8DTVT6(
zMgo$#A_3PJY053~fwYQf?MM}+m7cx&{mdyY4|M_vws=I!COY#tnU_WDh{ouQ28#jz
zi0O~VfVLM4!k_;PlO(VH^vn_4h3e}}$B_Shxwr_w+{h^l<)8a(BE7q-@oFP+SZETM
z7CZbZhnIur!-mvqA+gwy@WIJZn-dE{qpi2NAlZiiLPXOVpk-%_Ns3)u9J9<#+aJHS
z!;=9T+jq|ll|+Q(Q16_Gk&Ki5^KpmJZeo^Q;(EI_ymHUo1KsW4_AK>LyMq@(#f;V_
zC3XwP?g=0Bsm`MzA>u}Gm2-oVnV2mjf-t5t+|A<D*lNSeB~X;RI98ln(U$Ur(a}#n
zrD%8~2<kWv{7BLR_B>2nAJ<5if?mYa^3I}=@*`UKzUjlc+@-gNWu<yx5BqeqQ4iTl
zq&lvAC|Lo!02klGwVahjAL3>4WLZJ+V=YwMH5gsUhI<%WxXODHTX^{W1HIy2Lw~ey
z#h6J??#?_W=9xE<pdA@CI8r4+L=gjk4IObphK5zV9tE;0iq@rU<Hh&Q=Ko5>KBSS}
z__9L?f&I*=V7vfQ!5YFNY0^gdWN>EE$|Ir_Jx})0mrW)Pe9p6F*i8WI0P)1vZdL4w
zH$7ijr5lKw2RsXAPTr7&regRolx78<OLv%bsD*JRVo8NMb{i{zKjH0^@=Q0^OsIWx
zLDAk36*kZeaUT-?3dK4Nvsd=o)htYJBms>Q_ofywc?VOIN>&W7PsV;^@Wy~UXP4IQ
z;0RcLp1BmACiT+gn^Dut2IJtypZlDHTq+H-$JvdDd163ggbcKn_3wj0S<MHGxTbVF
zO{&I8N&<7NkcMgrB<R4Jam0ki_?}*JInD$NL#Z!3m7rlkB{Q6gyCMoj@f*odw8?yo
zO1CQ|O6B6~jA@e87=hA9BF_L3$t3;E?;K{qS2qN0@To!tM##ZK?6gu&p%JZf;6<^C
zUJ&+(=);oAhpNBEsJbafp~TrU?h{K0o1J8@K|7PGbG6pMhWh?iz2SLZQv-7dsy?Lk
zj7rSHuBVa=5-<4KcVf?}!IQHwX}jUHQpTjRbrA9&5|*;?Y>}Rs2bDqix}&hE`pR=b
zBE>Way9X;fHL=B7Vm9+xE<UlaLUn&aqV0QIkN=qB;(^?2S}37XNVQS#n4e<W2{Vdg
zU)n`btD5Brw@qgnPWG{sLZp&tlN`xv64ttvKI{)L$|dLPBW-Mo@W}krrILF?pbieH
zm||o4+a>QTRhs;c?W>e+=uuUFyIWT(`Zqdku^qJ{t!0hEwL|=QWREd;?m)U!oDQ-^
zGZ?QRgU*!`m{%Qn(sWWqW)uwP((s7(rBa`7J&1FO8fGIU+5|J+_qHQ0r<gInreWp=
z@5SQbKcFqg<@)krqn;l9Kl@w1N>R8fH7(t3edI>833n^q&Y{8ZrvTWhJRt2n6jyqR
z?D0Wzk>Z+zdSbM$$flw`s8t@Lx!a1_&KJ{t23AoC&YM9<3KxlgC5W=y>h8@~-J@%h
z*I;SxF+1Q6u>=;MKp7?!xm}2m&b1QYsg?!{B&1JXOz;MN{*b})<l^{nWti1)uHH5*
z&}6q?@!ucGr(1?RVGAq*&T})%Y1R+;(UUVbNsZL0|5)QpqiN5NkIx@X9Kci<-CqY0
zL6q<36g^eeH7tdnatDGyU}!=Ry{;ParV#iQ8pNV#kW5?Ev67sAG46YI|66tws85AZ
zY%G-#4TC>p8Uogt5C}gZMD91su`tI>NV`vtN{6l<u*)wiQ%>wVLNMW}v9-%AxjM1t
zgX`?v3{~@lt=2ijNYyz60wkTIA)~9Orw?~`zkjihf3<y!*+)vJ>*EXYwpj|$eGt&o
z-@yN87)()i#vS}i{<ZwJzW!_HyCsu}zObzFfBs+kzZ*nN4Q>CsEI3w0*M5@$#rLJY
z!-$??0U(z}7Q0qNb6E@ugwzE|eu6{pka9hdU+V3p8!oWTn*3&_5C3f2*(W($>?CAc
zCFc}bV-}5&@Q`b77Jb8we0f!4<^r!yfOCrjnvYL?(aDlnlVYI9c-0b4Xh=6hsPHjw
z6WXXvldPI%3L;QmsA=;Ar>yE=F~e)*nXJN&k+dZArRJ-fB5+QE$4C4FQ#*YA)Y<By
zL6pKuD{C+w`elwGyL`b4mvlN_<Ow{N0{GG26*NSIqYBWJx(<HGfNvac&;nKsP^{1)
zNwbi|B-#Se4qi*+Z{<hu{^+?0ZV~wvR3Y7y$EoPx-TlZFG2GKg>m8(O%RoKJ{`DAZ
z?4sI4QqJT4Md<$DyS~x0c?-P=^K(P@Ib{W1t}fxvV6~<YT=V6^8203RUr*v5VY%Ta
z<E{|>=GO)3*Ln4s1ujd2!)`~Vu@1pGmY6L8LDAUNJ_9pDh-MCHh{$roEIVntb{*@|
z4}Gw9;fV6Q!3d=`cc-pm?jnx9y8WaJV`JZn>d80K!>w<>M7ka*blv%Ci%vNyo_Wu)
za0+emi&Ok4c$C~3=e!SE35Wh>nlMQQxH0qq&!)|ig|FePgifnCt(4TztGm~&l_!sT
z)KBePY;~=#G2Vd8=F~;908L%tOKg~uZHKQBXBT=j7=Dst7pAi=-yvopUn#*oaBp2h
zdjtTRlwe-oAQiORgGgI<g=L&q=A+mr=(**-O3>7pVZrq((Z38_AYzWvZfQo0qxYv0
zx66MM#G{HmJN^ir8;NnoDs&2TkId$($pC+o9a@^&8u!JEg%1;+e?tc@o}4c;U%G&#
z?yR-@8D=ye|GzNTP&u=Cyx)VK_}k<CueE6Zqwx5jHOGH<&|B3M;}6+>>y3Jho!)_{
zCU^DLuIG+a4LaKeC4mO-OFqIQnTRceUoG0np8FW2O#pADl4>53H_yY&i|^5GXG<kQ
zzH`cjcLtole24`9`O5Z1F3f8{INt3?15{gY8Gp%5Ml^GEYui)js+L;RKLSxxWe`gx
z0c8B<sfvQyy97<}I0uX7NI<>6uZ(Y8`ZM@R=C^~YR4Q;^khk}qT-o&F(uDi9Y*iH$
z2LovqJ@j^t>dz0{n_Q+HoZ-t0WC9#1>(-&$6L=Is$OTM#_Aq4yP8Sx%G~PgcZ`3q~
zwDUGXyI(Gv4>^6a{`JpNqIRb`X==Ds&bk3|zS%gd4bJ>|gEL(`XJ=i#%&FY{G31cj
zCh6sJMZS`0#iJhI9C@<zGpiSDaCZcSHR%WRJOU@h)KRgnT*ulS_ziaMz8K&Mg!^qU
zctNPC=FYf>nEFMFnQAsQwJ-wDS^P0+_WVewCVcJ`z>RlGJ~m9hK9U1Q@dcDXC9clV
z05~7JYNAk9rXDL@1*f{lAZja0Nl5)loRV@JaU`|qlLP>G*aGK}Q7TnVc&^|C<0Ut&
zrP8!_b~XUQLYi?s>n6IIWzd_!t6DmVWrKq#`A=;_$ytswNhP$Yx>On{Dv6m&1jiOh
z`woP|A+;SdH(tTw4lPilJW=o5SG;!18bKjyr9Uhm31_^=Epz6VjGt@o5Q0E&&o_j)
zZJrT1Na+5bw|~ije4;);@DRy@mv&!t&7M5~XYr7`WWq!TA!qNKoBK$jjpcm=TMd=q
z^G0Z;??Y<juUqFPTZ86V9Bl-VxcJ&4p2hVYVWmTLtN$)YD6WSuj62^<+JfX@VXU!r
z;criHw}EV#zq4cx@QDM{FvHKMa%0R>mm%TqjPtQdJ}>ayE-c+lZ>&v7!$CT1#_BlS
zq0c$U)Rsc%^oO;sjZn|XohD!$DZ@<*QF%3n^$6EeJ@QpYLA;8liQfMXIt{HI97mpX
zUIr=m{;Faj8OwJkg~}D+iDwRXq`8AAI`A1(-EEXS`SR|FEYuFqq!a;K4b}w3kn7>a
zokmR(Xwa%*!&GDJb6i=uS;_D*nOEFot+rzBK^|$rEU2ysr8S8uVeBT<xR2$iKJ^pu
z`YR=Yh9{lKC}^}+?)~JKnTM;|cqO#UlZ!V#JsH2B+QkXQ+ITp6CxLxDUcSd6Y{l|V
zPMm~*ZGVop!bYZOk4`PM9cscsXL7a(vAv2=ea8~ZX++UCxXdUnY0qyDv&n8{+u?6*
zsJmF;7ru^VneZ_gmq7FC1hYW9O9@lO2r-$C8J&}hCkOtlv?MyCxDuU54jYwCdZfst
zL$X-!s>LalvXIHuQ{!z`Xb=qD|2l~uZf^Yg|FQo_y|3EZT`{-I;(zhjL{kJ*1-*j*
zpARmF)Tr|N?{w)A8UO&>e_3Vy4<7M9D59x{i>aNnrM;cLnT?_Of4j1~RO46H!G-oK
z>oDB;V(Kkw$=&GQ?A;QSvMfVR1rsq?_7fsw9N9t;Z&RN7e&-#RB!CQ5^Deali@P~`
zxX*FMd*Dq*B-}HeEyBL!mZu|}^Vj*YZah8pDttKc_pm^#_i0B^wC``4$cRMFTP6A2
zxmAJAq*H^`zS@Msn`PC0c>Wt9E*_1QO8wT?Y!w$W{=#<rm_%ilvTvUgri0mtM97@;
zH?|m&+2)_!?O{B5AUc8&<yW@EFiAW|Zz`tE>f{Rd_T6(WKK!*8(GsgI_&zk$`M-bY
zKV!6=5;N`f(8BVfC&f1(7Cut;#C|i#g)*&$a{GHUW5b!;+91u9XZ-Vf@+WPcpR!RA
zZpTMQx~e(@Mp-CZT7lL!+~?I!PXEA$E7>zWjq?*U|FD)<^T5K6DBveiFQ%$shbbYD
zB^*UyLE71~G0D2ItPz}x1pG}V#_;c4w_aTy$tlVi8p8VKHZU(e4r}V#<kO&Vv4!?&
zR1c<&T!%1jO^rIP;*lB7h(t-tD8z0nmX-@y<-}=b*La(++}a3J+}UN7?=+GmCb6M(
zUSeq#AIPeeK;p@&PMJzkt~?i`iYqHDq|PL9q9)LN#?ol33jk$QH<)vO8$<o#_WA7z
zp6}Ftd>S9~(D?1Z*wkSmhAS|1m{yt&9Z=`AAa+@f)z@CyaXbgZ*#cMq3j*i5OtwHk
zhfpJAYJJ8(!R9(o#i=&36v<ex>kt^8uWR5?=gExE(UWhN+0z6rHYo7_v)gyAp6AhA
zKtj={AyCjzscBuPqs(f86#!_$8$-w4td_{*w;TnB3BKc`iIfEkC6O_OTQJJKKYvZb
zS7v{`0BgRlOFhJzLL=b8Wu+z#MuqboG|JD1hj|RhWOorWFHBhEi5+|eiPnV#zMAA@
z@c5=TKi&zR6|j?&jac+8YnVof3}Fg90H8p`a?9icO_um-i8IX;QJ7HB!8osD;GG3N
z8{~zzJs(|m`*py0Xd0rx4jOxlD}EqOwpP5X4l|qs3_p;=NLaFJ@R>txWD9ARxxi3Z
zFC~T6mjq*@(89heDY}i4nrdINgnCiy5R3}J>OSGU=+_-9CJ(PZlXrIe=FtD`1-Czq
zDS*NEF=xx~3dU=N{$AIY*_r&@b#_2fJrsX2J$M(kzhBDb>-@Hvr+(sKE^l?<*yoYa
zZKuWQTFUHgQvzI3@}p-{-9$6?e`FFMkILQ-<4A$po;ATTe2gUl;_Hp12p8fAv89ap
zn+{m~5ztr~i#|dEy5l^T4><1Oln34*5e1-ylRtBDQG-hyxx5HI<|0tLOTzbugpvue
z4Y;LnP4IL3g5KSVSR*owxIU@}mDf}L@AsC2&p$Ll@=yaF7_xAh0u!*0;LHb>4e7uB
zu)$3DuPb-@+v9Hot6^bv4e}6905QYs-D?f%BI)%Tq%de0A#!#`)%6HrkpS_~gq0ya
z!y-(Iiw@Jims_SIz~`e0cUdU1d(tmjG3&Pj4YI4-IK81>23y}dw9@W&nUUgs*~WNa
zD82*Hdmc?!$mCHVSc6Cz5T*q9VZlaB0#yX*K$JjFoePB1G>sleg-Kd<FrmGoC<Wz7
zO#NR=b1_&I1(O3Rr%-lfnJxI$4Qj-&-T@H;#4gMlpcdOZeZlt6w>vk8pmfS-bK=E-
zT7BVEhe#e6vZWir2yH^e!jnjng^S@q7KlgC7^Ro0?cmr37#a9b+9QP~sA+sd_zLXZ
z&=bXrF4)pp_d#MsS`C!FIo}w5A7^V<#%h3hRz(jCe+$=)J$e9cD@z9v#a}J7azXua
zNP`N^Dc8p9a9$ZEq^P$0>ICDcyVn9zS{RWSq326~^uZ;k1>e<ic>LU1K32<pNLIx+
zpAi{V5=d5MU#HT4>jALQb6c0mAPe^HF+}u@F(A#Xp+@X6h8Jlt&{BxMuoMkzJRt5J
zH`U;+s>tPuzyB>mHiMg*0X`e9k~^z_ewZP2G<|8M;k^y95?mNcBq*c&YX~q1cT>oJ
z1%T1#)eX&i*7DBY*DO00a}>?f3HzigEQ9T8P=>%@MwsYdhRCGz_GJe?<kJCVFO`w2
zSdrS+fN1W%he>e8AIqE|irPgZmtV+87=2o*C!(l$v%D`2zhl=^jDk{TQUsqFxiBZf
z)pn4Sw2h2EBH6W@g_Sux6x4g=rg#nj%^--ucYOEA)ry)8D5|5vg`TOf(J+gVF->A+
zbP5dlK;rq`<#-q2S+%Mau?Fz9-92v=<@vs9FW*FFHfteMcIvKzvo`3QFXyk@3O2I*
zTG@UaPZG8Yd02rTVRs7*Jjb|%Whg!gh8fhKh6Gcn@1e$s-#;$(wr90nFCHPwUR2*2
zfvgD3)YTUO2`|@3C3-}V8$hRU8BjXuT*U@56BBIHp|t&?Y1J}T-zQt62K`Uv=zqqR
z(&>($xcp(b(eQQb1j>3lP7pjTpb$jPk5>e`FZLem;nU#9lhZ3-Zk@#@6wJ6uR~rlU
z>+QcgLj1oC^Nm&{3nI~AB?wD_s{R2u<{biN#B4js9n%sc3Yp#2g1yp?IhGPqrroxK
z$@x>Wf4cz!e~O;AK^i~~-jcNq)`<iOKzf?#KddanTKkkQD_TL^$P2zsjp&yS<XVMj
z$`ae3zXxi6F%+2A38<1Zw9-3o9U}ySIbmQYU+~x0{VwP4|IBTpUwN<Ma8`X^h@T<D
zG@u#YPWay^TK|*h+F<O9;Qi*g=f7(y3IEHV#{Z9&imjULe~8WAUt+Thz1-oZrTZLc
zgDfB$OB>h{XN1#69*j1Yh7GBbw6bGYzu%r>qp`<ZN~YJ7`QbFU$4;ki+4X?Ow61PL
z%n5c2p~|(^wz}GNp9ahP!hJw$_0790-#44Ol`(F2!5mjcEcznpkxZl>`8md6I<0py
z?z#Hk%XIjPQ7Ouok&Rj_=TiCZ6-rC;{b|G(ll~4L9bO*Vw0Ei5qh})tvc#5ix-nCt
zRI)R{NH4j%0!^k?c60snnBAzr2~KMz5bExVP*HXnQzlvvByChPu@&&Sixbsb21ZIp
zXgQ2TM_b_n9;KQ$RqG6O*~%rHr}kDP+E_$@?dgl`aSqLR?!(+A2tYa~Dp;C99>tSN
zlQ|G2pp@fYLrD<C7z9bjsyPqr7+-n8h+4F(2|aj2J}6{zO<kr;tcnuYS=i~5f<&1F
zoo{fpjySK{r}8jHTlhN!kM}9Z<1~0ZxuC-G90N+8oVod%#mYHBme8Pv*P5Mll$_<2
z0yRHb2%#vp3TTjvPV4ScSmhy+(DLR<8N<9w$P~_yr~+$vK|2GZHXP+<v<P);mCH5k
zxrKqMK3-*e0e8F(3Pr-XW0idrp>XMefO+NvCziBmdQsY}0P;tjYXYIjn7l`IU{_J0
zwwG&lh^KkgrNiopbyS|o@M0ggy^)DauC&nUCzPtWLj0uUVlmS`T%|VQ4!k)HNQB*V
zQM-bqiv%JkrZh3FZo^I0=99#Gfg4#`WlY97n7?g^O!MwkkdS%?fQu^wVI<jla-MSd
z{WPaZ1@8NY>MBDaebODH-C)jfw1KLjkGkAjs@cEL-j*bZJ<!Fqzyos^7^(bmM?l5p
zsTImef#P{HQcD|HF_jM&4@U%;hkWBGt65kr@pULjPT*z~y!F<T9S9>D(Rt*yVVi(y
zCW#=9Wly`3{jMR61Ag61f2H;q)lHzhAG>bTqRQAZCP#Tu>+Yv%{zBUX66SN1rR}~&
z0lT}L5f!UMwlS;_o~{HTsS%p{m#rFP7~bT~S<McVTSpb%@V2O=;zrAgBsSD5^M*aQ
z3w+(0J8V0!8Rg45Cc$R~ei<&D6z)hl*XF~nFdEa^se$YS%Y0&!xyGk7J(m?GpFR9b
zs*1UM6aHNTZM!X(1%jpdsr!HfF%_Pwc52w;i;4NQszHhoJCG!zEBlA?`e}O0*M;oL
zmquYywU#I7iBM57jtifCSoKT)^s6fwm!atJ20v=5+}i79kx-xaBagG0pDbVRj$u^q
zE%o;j&Uy#SsN{BzB5SS|gEIj0;%MZe6(70g?iHoVZuy{zqI$7@z3rHfy-}}XVE<3r
z+=aUu(cVvl^vtsBxwsB4d?OoeRbi074}c@<KD4CVqLPo~7@s;vkPUV%m?85mg*>du
zx{mL>HH`_Kk>wc#GQtY}4{(a3n8`5z5D16h2!1#@<oRm4Kb!&%JJQ0|&#yfl^t#%n
z5|tjkIr&%rxxL+fIo_SEk+%d{KkwR1OW@Pd)9?9q`1~;Hsz~!>AJ5$F@4#a=X<|#C
zH7c58T#GY8JWd3DL7!#hb0;5UhQ`Uj7qf_hhgE%u5Oex00q+^KFSxIjWy7zv)QF%;
zFWGZ^Q)U^%mSz_+Z5|3H+CdXuaC(7lRN5iCZc<<_Chib5jJULS<nGm<F6TelBVPxe
z&y>k7g&!;-CZ#g69awSg+_)uwuW&f}ao?OZ%o!_<b#)0&t!ZMXzN7!I67N3%;V<#|
z;Qkvk5kvoX0HM6FvVy*`sgsMoi@m<3$^Xom{y&I<T(v#t|B*B4H#++U!VnhbUdbrO
zVG`u!Xd6+u*=3Q(C;m2UlB_2SAM5|s*}#A}rL)10ShVu@+4t){P_Au1@YRY=c_YB#
z`_5&@6>AQO7$R3APjWkOB=G!F$@wu~o;cg&(?SvNATx^@N+^(9$GG<XV)|Lo)Q0xR
zm1$UYJD3UvohdY}KtbLVwSP)>2Afp=NY%<H>ptShnJXfA;`xxHPD{}h)H@f(Oxm$9
zd%E)qY$@70JV8lE8wx;wr)%CvsP!?m9Sy4g`2Bc%AnRm0-Gv*pDf`zdwE6pS>y9q}
zOq?;1EJylgG3-Rxd%+erq{jqtL>_t~@Ll`*qjtY^f*D@(zdDOhL1mg5c4{sI=(il3
z!`kN#q;2n{OzF)JUaYh@Ppt#-%H!;vI9@JFRGk#aj5qr4A5f)>?4K>yaHB3?oTK~W
zB%2QJk(@b|@Q==dzE`OWpQ!33zCi(0pKngT@5YZk7@&bK-P$~B*&2inOfn=;!G$)M
z7T#hiXfs^mhvEh_icZec6|gAP_QW!f=|b*1ktzfi^HtgdNbBarY**-8djn`&t|_p>
z#aD+5q6d|>yQhKuS{F^20J_njispv#aMQ$Y|2jUke*Or*)t#3~_558)rMT8phHG`2
z-$0MN31EFLW-Q*$rB@jVc48X4k5}bgSNEzpW1Hs}Nm6Fm-L6E96nG?)hc?t(<Gn0b
zol^97ymn;)5TDgD<t~DY8@xF24#rE_wOjYWwY^FCYmo`|a;AgWO8#izI#s3w8K)eI
zi8(l4cQk{$A_l3qSW`k*)Roef@lmgYb{@bMe*si@qUCr=a5zFm6Do^J1JX7WwBo(v
zg1s~M^=gSXlzwnL8Ba%<f2*&c5{eBHg_>NFV7(3c8p5emrR?-?W^!J%SYPs000lJ9
za!hJuU@mJn<+iKP`~C+p)QvcGh^+NbV>C>qHIqk{)V35c9d(>_NlVd^pcHjh|H8k#
zX>+MDhXLI_ZTBV_(=ZHpknklBd71_pC{x%tkF>y@6OIo|s)b3!aP--Y@rbkIJx>xa
z@T=P(x2ghIfN0!hse;*KPciDSIs?T!K~dDC%Wu*Wl({FBLb0poEH50q{GxSX6W}DY
zy9rAZMg+D8iX&V~XZ1l_Iy*~K!~o>czFIULo7p=7%i|A*91-QY>_^SU=~}z5c|4cf
zY-mB_z-~54&VQs8KxA@%oPXF;ysj&FT#L10B+``bM%I_pPVYmZ*@#ibdp-(eD~~R&
zJ@I&a;&|<A9&`!St)ch!o_|da<M9GF8He`e6j=i`^N&CQhL&qx47wOZ*3M204Co!y
zdN|<7leg_?h=1R$<B3dCA+=my3;SMw)xsXDq;g}klQ^tF?}TcmWCEWvB6gN1^KO4k
zqFhw#380k5D~RW*7NE71I7na)Jen>`qFErv{4m}W@-cPMVs^dPB|9l3;Yv=IiA=4n
zot@pCn}7M}C;9O@IyLsxIoa6a?zZedwNz?a|Nb{o;(u<pZkIpYZodK65;6b)#eey&
z6cW=nwfi5~z<+nKjcWWqs1!k4_-5!)%f>uvwl#rcFRjKYh$9z)JSgb`8oK7P1XbO~
z)eElVWYQ7ZPMED{lIWes%Z~dV?nBukrm?*fWmCG3<M&lgV>JGr_Qfv$#7@MKW?JQj
z>MXyx(+|y3NqZWZ<wv$nN%iqcdoTUt5__t0SIcLJK8jbj65E+0X1#WM+Dr6R_Q^>S
z<9937Qqe3){<&1zDq6YZHpgtahW|3v(FXvS$ET^^T>giF%7q8vG@`s?*^#T|N>>V|
zytCo!gA51bXQ6R1^8Wrg9H=sQy-V!A=flgfOU5wb4J7Ww_bFs3-5Sc$=1K80NA@XG
zHT0WFy;sVGqj*>5TfDBP-fDJSCh_jY&j$BBX%3d!%Lr~lwC|z_{hfzv?<?hem7z{J
z{LZV9s_$f88OiQ!dh^zFcK7rZsIhxzQ;$L<qS^RL8P%~^+N@Lhw6AVy)l@0woo(G>
zj(w=8NBk=cV>HuIW=o}F<R6WuBW7LWL6xEuAA{24PUn@E^75@4x17Igw>=lj`CBMH
z9ASPe;zQJfjd^?{O9zP#IH}el$!S+f{qJeyQ+I>bdDl5OVfBqoharO*x<pHANx9;N
zDH2eVweJ+2^%W&<+c#9HQAGoD>E`vpjp_A8tUjT&VoX6wri%pYt*e;&mczBoBaywk
zF`nSGiuWRm8<-CF5?YOkHpR^MV@g0kEb7QTp8xjX`>^H0b*TXeYGVPXM&TBu!a63F
zr8ETAgU5{UgGS@{txiY)!xaw018Pf<#ragTxn?xoPwsC%bBK$!HZ;-w@LOE*WCb-G
zDvWgRsL<8Cq>rN|bZMjDU`!~Pl0?@1dH=eF4ko~8!YSt&CJQW3<~4AET0nJ#k*aJj
zlMjbMjex_TbYv)al@Hpen}>%0*vf{eUNqJrY;1n(te9Rli|a(@Z^*$6ZcAY<D;Z>i
z9~%`-)m4MY-};YKZFZjaCbrSxIPMz(iDoK!k#m?yJ)<TH)^_c}^58s-UO#`I+Hsli
zG8|oQdFq_7fxAXpP(V635i_s%4>!)^hu5a66$;@Bm<*an@xKC*5l~#)9R{Vxj-+D6
zuQpFP+ljjlKpU<i0FvRCZgl1Zp;QkP3&$jYQxu6!#z-2HkVmy!Yz;rN;_%)O5AR<U
z2Eb#2;;IIS6wu!6`%w7C1NV%T%kd!SBj!0tp<EW<8i2(>pz_ETH>4_=NpwCJKuJGQ
z^E?2QJR7Fn1BYyPH&{V;!^R}CwAix;DAbh7dvTZ&yP0&kf<CuH@kKN3W2#c7{|UfP
z6}tK7>qYT|=0}uWaYHcZ%S=o}S9@`vIY%=%)WGZn5l6%NSrwy)-Pnj{@ae#{5*o@P
z^toac{*a1WND9z?a&M00YoQ;V5~csw>+C2ce({`<`;U!$10}oQSZ|lT0uB^xc!SRl
zrOTfA{yVz!(9+U0?Pr8N<ryqH#=8Sh(P56m)IjuFSQp|Pi(bm+oes}bhR<~>K7pMt
zdU&8Zg`=`1H8vE=&>PjdRXu;!Z6$OOc~=NZwpfXHtPK`qo`GG#lu?SleHoHO6p1uC
z@+-G(S8X`eaueZI-n3j1im=(|={n^+v0B1f0mp|AXO+mvNt;qyUf*iCkSUfdtJS<D
zRkUQOvDY)#9th%JbDpSM8kZaBy>he80Xh{WWvaetHmI8|^pBEnwyLC4*SA|tKs&M~
z|C*s%u;9M1Cz1}-efe{H?aPqzIjjqMCp3uJq8yxsB8U^fW^4xko(QbXK-viLoFKJ*
zMWV&<x%MW3AAxv(<U#-KalTMuXpZ~2eT=I!OQ>g4VOP;<n>h~%Ed>TQ5q%@Hx*sjH
z&)bc*;I_Umh*y@C;y8VIsz$~p)NYO!94RAbcnG6&S4sQQQt7K=8m`{<EAA`UhCcH#
z_VR_@JHQFvT&B;61MudBg-MF__8rQB(=Ixu`reriopctD+uS-$Z}fw?&w$TA=-+yb
z7BvW<w={{q6z=nS8k{|TM_Pf5U}S_LP%>Lk>oNIVebU9ZnzzyK18f15IvBwg83sxO
z(tA0%3VppKiiXFVUC47XwoPBElY6x})W?xD%%E^VWxeP%LgfUj;cht<u4mJ`^p@i{
zuz%hBUjDib`g8YtvFkIn4Ok_o@%Erjv28E-WHV&!!O9MBKaLiqd0R(cb#oe@p>Fz9
zc~wRt-09RxPQzD>)R8^x+3n5&&!+ER?PnjPNT<gELe^mr5!YAjiSTJmK7X4+DZ|mR
zdyA(%aPs$S=`|mviC^#cE!*Yj?rrbseLp_n8Z+zOz-+sIUXMnjlbh2!6cShIs5j}*
z)xX9r^dD*X>2>QY&0OH5bd<uT?F|V&oOf@gN||C}WR4=XH!6gbGKlz~@_$B!1$!ri
zoADU26d1Ee7J4x7O~6;y^aLGlLg$EPP7&akkZeYvoxfKghlfRu<rCqc(I@UMuAJEP
zY0Pd#m)60`n08bjfa$TjGaLk<>h{?7c#i*g#I|bYhw+v(!uh|HZ7pZFxLwQtpH&M@
z2_=#{9smG{{eM@r{AcZn=>Pq&OWIkw{CAK04zIO6c6-y_8?}dTpfaVnBFVVqg9FTZ
zT+-!gWAOTnrK1C3jao`8d9|*qyQ%nD!Oz!h@Nv?1YHf=p)OLXdF&#ehuhNlYxKHbZ
znNW{bg#~-+;mDnsPz--hUT*xKKZb8cj@}o~<g%?im~AMP>WW1!y3~`!D@AnlOcj>7
zB&%Y6XR+OfC2KU*32U!p6UC?>%X6z$+=}gAjh*9oURgD0RS)6LN!&@=!2vAj0h@bC
zTe8aE3tSX<vV%$q-b-g@ILqugpo9*#LO20?-f@_909pCSC0SHj*07#6lePPF$=|cV
zm>hk@GHX1a%=F&=#C0pk)5%zChx63ZMc3;q?d?x~{br3yau|ql@I4xQxh-_Y>m(p+
zP9+#SP6$bqS~X;Y@N(DFvoS{#Dsq_shkP(pbwxy4GF85aDcfV80kB^IUM)av(FV<A
zooC9_p=6sJtMwlh&d74dFX2(;yx_h+<xlC`Uxj8=80Pz|`i<SUUEoLf>|`D|KJeup
z*E4sWc={vY&-BT`fIqyMl@VPKAJB=;eKR}yXuU+c_2CEb+);fUJ3Wlxz~}{ElS{!~
zSr<LuVE*mQMjt)j-MRE}Q<svwIsTi9@6~%7fhUv4ci$!uKRm98j#{`e+kLgn>#`9B
z$YCFIRw6RNxiilh;IQ8~b1%W1dH=wjdG_E>J^KF5HU1n|@`JN^I4i_^&d(2=aOu5Q
zd%$vlVEa4{6FPE`un8ZEg8W=t`?2(sRrBn?;KS!lgs;<Src4s)t4o$i{f_(lbM|}q
zbM}RVdFoAY=+mjHO<Jc`5=Dk4{N$QAcI8oeX4I>wrCkuaHeb@m?I+WN90!*P{oOvE
ztocxy06Dc;n#pyD>v)g(a@5J*++FO~8(2HH-SG}EQR~{D04HG%W$_m~vmZYrek0JV
z69}qpX6l?>mH{$^eghcsET-*rOnjt?a6<^XYoMOJ=YVHpU6X6V^ObFCF%>kX`b;F{
zHF_tT)fbkTD|ts7fq`k$P1o6#mYqBQa2qip5hV0Jn{Q<62UYade!f~*=KR~AT-5*K
zf=uT>Ci$V}(c$xL&hVBWIgZQo)p}>i>V*B^Zx-=*MvFD~vfefW$XhU+Mmb+?Ee^-s
zd=c*-4aG1b8Of)i3Tn7q@_BB&WPRnpUWUL%K)?+nYlf@CZtUv+1K{xSs5G8_Has~x
z`4b~oe;iy9`^w?zEcP3OZbEN41~lW^0{6A}I|E)F*k0LZGR-twyOVU<=<`77cHs&N
z+gV;%(NsP2+IWn|V)Ag;g@$gqJ@hfUUtjqO|66bT2(#PkE~~{t8h_ez$JiyJ{EKfZ
z$ML)wBy@$h7w%3C-<rK;>lj?-b9qPD|9<inapF5Yq!(b=P8kFL;N{}^Zut3a<>N><
zvLe*V$wPpc8goq4sW+jrQ-QLkKFSl7TH}OST@;lhlY)KgPj&0__}a9GW`6Brszbq$
zYoOJPFkh{dUv1{^q-`KjRRr{2-oezNHC-WfFEbnMvymYpvLSQG(Wy5{v9({p6ZT~0
zRGH=p2y2=-4%srXRiY&UGu4<6wke*6GsK1)Swf}C^>4abRB7ssE823<DY1SjGlvRu
zxQ4-)1)K{(XMZ0RM3r)lR1O6a799y*XIQn$V3aAH)FVhTb(;b{T@wyu@?Hwf3UVaG
zK4@@71k$IOPDVL3qA0#MOuvY~$^+sL9fab}!!d&9ene%t?P0PoOH};3*{c)mXSBtl
z+{}o|U`Pz>p<1WP#TF*=2mpfAQY_6{wQAPB0zrrHpleS6>}~Iz<@Uw%iHF_5K;*1H
z7k99$O4tt)Gi&@RrN)?qm`hWp1tgO83<3~>Dhr&~bQWSEDklopuWj&?y>0Ea_?v`#
zQpb!+%@h+g+b+IO%&|32DYG_Rxj>UIeF?UqX5b{EV;$Ul+|sZt6A0X2Z7OGfr35U8
zO2;-e-IPi8qG6y7@)(_~Y5;LybzW+{YOYaBm6eq_1LqsI2PlBx!jh5bT5O-{4^;=@
ztPLcRr&g8z8b<Vhp=ms)3!ObWWWq0E`tL#&WWX3;ejD!R&pixWI9VUd$lB*oO=t})
z54FHH+FR8C^GS2HTT)jTy7YDsj9W&<Bu#|0%-REIqgfIzVcKDvL<6wjl5pT(_69OL
z?g4Knh^7k)o_t1xKX`JDzX}A@BwkG_qUJoPP6T)CIReXZq{!eb0P>Jt{nM)&q%K(^
z8q|5Bbz>~Z6j1G;A-?$?aCGo~1jMOMp;U>%DLJ~~$@B#<LGVD(aA>y_i3fYt<E%RX
zF9sy#H}_uHIIVQ}lZNP|&`6^a6seGi4nscqLl6NJ(L8$AsM>4WLcuaw!JfH<TnjA}
zxPci(ty3aBiV{txdiFmxu{eM*K{U`p1mU>Sft(aAvAsw|3t-)mfOSe0R=NeWV6UVb
zG=hS(XNpO6&?ck_kejpvvsBS#6t3KG>Ta46Euv0Vb;V0f?Bnp>Nx(lVL`BV!SV3$-
zSg#@rgi$bfJqx~o>%$lHrka3cii}Gz2K!ec`9yEu<4e+469qZhl}vO=l!!?M9Q_?w
zx<M!eVK;+m<!`k1k)}9;0Zb~Az2s?EPmHTuGUc7S#+r2sw80Tb9uZHOrYIJf^jr7F
zDh@-*FYC&`yNLGgf>#39K@%jVKrbcMUueP)KwaoTBuPZdWM!72+%RXdU>KyOP6N1~
zKiL2^!=sjQ+_nuBN(w|03PwUvUyM$LDXXJ^Ot>7%O~Y?;ZiO&*4eh{msG4<c?wg20
zQcF<<wKy22_X}5?m?DtewCjWb$w9hkdsa&y!l0ODp%WOZd5D!}RGj6f{Ft2<V9yCM
z;275%B6Ow~ge4FV%@oDNjim`jP|wNQtf*A}OgPpJ1snj7Uz)Y0B7B>G`9PENi`Lz0
zN^zK_s>REEs_kpgbR4#;(RetFK*{i@vD&KaIu$5bEP7sA?5q$4b-y#zHlsX783S=}
z$0fii!rb1)7Aw7NBJ{0IV`;BPd%I<??ZCN%I0_lT8OqsChAd$%W--#0cc2mf%PH*(
z=-;m+()6YEKrXeO-X#xb7*^~(C}Fx}j%|aV_ruUA=jDVj6imT`b1WXX?^m3a3YaCD
zsuPrQ!(pBgy2F+Ez^w_*F_cm84TE+~KDJKN-6^XcRHxb-SZna9>090a*aD!zG%hA5
z5iPd>J9Im&45s6R+F;09PmSNiI8&Tp%cWZn7A=~<BNE(s<O9MiJ$vy~V3$M9B_-*n
zNH$Fp3+;(z3%s>Y_iZf>J~fzDv{-CB?cU6uLdk!rMA}RWOSTxru)_cl(G$t8yz0j0
zqh%S)qQt);SHc&UUu~soSpAa@hIt9^FxHgS2@QI!-E`7JXdR1zMO*VEwcG+UZLHgf
zFMgP9WGK=hv$D^9N0kGzKFk%i2{4iQmG}}14h2rBk8YrE?ZsMDvXhpRZgQGH8{_IG
zT3eZ$fmM;nit{7XO{LYb#VqB?a{J)(skOL(VArw?_e>fHFM;5Bg(WK)h9k#apDv6M
z6BIcgR7K7)^t1z(b2kAf*u};vL!*(G=sDGx_6Le{74Mvmz<&uax}^RaQ<Tw<m#ZJE
zA2Xhhr8E~i{+|`77E#9L2vw|~X(h>D=)i=rC71v&m>wyFNI{gL^g9xSegU`uFgrxx
z{SW)=M%!jl>6_#~W*%S+EW~XZw_|ONG|=}hEj<9y2%njl_AP_JkSuId@L*j+5M#-}
z;$u`ejb6K2xz9MzOt&!B;!S1PRA@Yb9Hj#8cW}_jnR?l6CTAy(J#;>L4n#e*HvfFx
zJMcF{+1!SO3Hpx_AkGkU7~v28s&t)oALWzt$N6RE#Ln*NeHjR|PoFzC>CjUG3@bD|
z1LMe^E9RZ0dI8F!GF(3yP4kNU0!(w8SWzRcPQV!F+pK#7ozYC2-ua{!wngQ!%{wBZ
zLFSWy&fX?09eay+yvU|ik~bM?1mhn@*Q|vj^RFJzOz=greI#Woi4_jig{Y*RVx5P9
zie<EZIV-3#Bbt0<uFL(Y+1qn)%(47_sCq=`JFXVzkED2kHHHCL_-45N%R_4nc@>!U
zpN`mjvHV!~VK!%q!=0X%q~R|+h2X8we8c|t2V9)p9A68f$ueN*>R@K*E*E_zsES{s
zf{5BM+{{vBI(chrfHnyK4EK1OL0gkx<b;JU3|~WsX7>M*uW9O0%rQduECvVW2#v#+
zf0$UpzT|K0K_3OCFaW5x5%HT)t&SD=l>Gq7YhZgngf!lJ7t#vhN$IKh@$8ry?u%*I
zH_ZwR<FbZ^^@*~i(6-_^y%nuUAOU`aJV&%6>{ztgRevKn)e%Db`5BsL#mLE%{iD;1
zzg%9QyqL5szJPscy2Qh#cQKamKyn9Yi%P32s0P>5^TojJX9g=qwtrN7tl!7k@XpaY
z16`+_cI-{{PIG=fW)ZToQrEzjMgAZ^E$syX6HDgbkw}J*P+~I>XpmRL&|O&%Ou2B7
zsIsOvQLwlg=z$w1R70UT0&SFhHDsx@w+9+p5CqD2p7-8P#@&HVvyR?x2QTBu5I5UB
zgUBtl+aHBmj=`AQAq#&>-0%P&+Qa>ETiVDyl`Q*8KoKZ_9OcEX09FZ&LY@bQYH`<T
z-8+eB{0=q5PT(QH@S;29#a3nULT!V8NhKex4%13}8I^m9aw&4)9p0i~X?2bLi~TQy
zK@7<MVw#;*MK(W2paz|YxF<|)pJz68{+Z?ZR0RcEu$^TmVytO_RZn!@YVaogXbe31
z>WbO0e(rU5h7{*LUw=wRXm6L3VMH-(=jrW|V@rxx5wgX$cs@~{*O5ZiW>zu%P^g_$
zGXy2bh+`V{c84c2cv^sk<Zhg4QbJ|ULi;B6D|}%^9)I>^{HQr!EM41fJ(e%xn2P)-
zQHC25|6m|ndZ!FbVB~2hqi=c8cmMfa$*g-0E$kt7)&hhxMws7*hSNf`hL&WRD$Xsp
zm3PP}f{o$2B$p0r+%ALN**k&_;`@_s9V>Agi=}Bmhg}PP8%mdX$dYU;_En$Vr+J1W
z(DVY1$KI9NEqY3!;>=omUw=!tj~=BMILR%(ugPEa`W)rUZn)1d!(SZ=*U4GNdE3r-
zjfeqq$|_1&2sny&1EV?ksXMp-FWU>yh!AgiV>el2WO`wu8}0CsaI6a-vny_5)Be_~
zmWQ?Uqm7RzE1y600H37cbZe|qmIL0$X53NzztjoReo<x6PmWdg`r9~Nya9bAhrf`p
z%KTv9@;UXj?axDhnaMC7cM#<c5;%9|E)>>L=CEZs*#Oy!rE8B!Tlhr4qhOL{f=c0u
z<>bAPV0?(s)*p`v3F?c9M4U>q$uxALk7*}XBn*`y(9}sn4S4r{s0=oGO2q<|*HHpW
zqjP{73ZCGDOQAt$jJj0jzb*obra=*7)&R!vHI>n^ysl<dZj;fWtB^gvs<(0;TA-qg
z{XiY?+6NvuK6ii?jG-5S=vn*le%llTMNe~2o@>gBAiD`fd;`1qa_~O?+GgjY{zlL-
zDQ9MMJZOTmPC3+04i>m_=1GW)VeLYHCd*IfEMifP3-36c20WW7WG+u+?7#aO%4e&d
z4_QEo9&~?Q+_qJsKKWVy1p{@u-h~bs`MLjEUMV+Y)b+pob`e-$t&rLM;)k0+14E#N
z0nmb~h0>vM;-NdLyLrQdy&uJ+s_$i!H?OD9u}-s$TSA}Wu-1N^LfP(W*-z3Ij$2JO
zFfoD#{%zSW90IV7&dI~GQ0%W4vj(@F*y&u}T<X$T*&AWo<>9OL!&}Ac==j^Dok5wL
zr4K9VgvOBY0G2!Dr9|70sNwareQyMqQWt!Ifjek}#x~^R>Fa%=I)t~bu{yu6tkvG^
z4n9*iWR~WCT2f>t3_m0HshdBea%!wP<m8IroV|iwR{~4<#DU`B0oixdms_@?)E}8z
z*nrA*v20;**%z~fr^?+$AqV(`i#I$xKkBB}SY$MXw_(=85XX)|jxyj|`F;TG`RS5l
zG}S}~sDq3CEj==hnIMD6#%V<lU>2X9g~JEL=pimA2hs2}L1N+LS2ibC-A8X%CI<H_
zw7MDiv|&qrGtUa`$e2rfE^jzznd7%?0>Js9pFm>IB(Y<X)M1W1fIGC~V1(bp&9}<R
z`5vtSx@vaYj0HKR1Z*Qq<<S)>f9<xM3pH0PR(Y1uK-<i7Mkc*zp)>v+PL-;=Ln@Kt
zK%7C8kWqu39DebV(9a{yR{?0P37#4fFhM5aDQFp3WSn0tbvOnZx@gZmI$FDSsE_h#
zi>rj1&}rlRqU^xdeK{#T1X=5TLu?0h_Ss3{C0S;P;@8~kX4Hd#N$s9#84fe2KnS6<
zk?f<BQ2?GeR^dlHRQ}@`t7NgHc&ijBANR`r2MkOoBl$2aw%!RBcGm&#0F6j0J;LX!
z_+jGH!npnh3cR+vt-{hl+oT@k-nCUry{HXG))&wk8W#s_|EICw5+WIqxRWh3h)nNU
zB!M)&+cS#nXC4J`{rZxt@-vOzg>jonzuW~KLdG~)z0F79g^&@gL4_AHEZapV-F}Y^
zOP}m+@}N6^K!CHqgA0jFA5DxTWhbP_uy+wVyb_T!>;=(z`_#Z$@hy1}=U(%z=ne*A
zD^Vp^0>6$gM>bA;yq-M0xO(#SXyd$xJQ+Iyl{YHQ2y?Hr6Q-FHl0K(fQ08T(*#%h-
z)JpHDhFmHLV-A$m@v0lgnr68Yu5En^2P<VAjPSENTL97s7$!n)QQeoAqKjt{kC}ZE
zK)E>o(Y<_JyI_3fZVPV;f(ZN*z48v84x5Yf*ezMJc8-q4Dr`COl#6@Y0WK#HHlBBp
z&yE}M0%&zYRi>Ri6qG#N#nD~FU1vGUhD|jCQ{#9dMWeUqonX!7#GpA!aIdOOF*>oR
z+n^9hY7Q_VOun>l!Dw5C&SEOvl3h{-8NQ5I4`>sR*%xq-z8zt^DgQmD3td^L*g6gF
z8%^Q6rOeh>Sym8)#I~xgSY;b5Xas3h#~=Ak9xgLF{?ZDTM(+-i=JM*gmVM11E>_pe
z5LEiq0<GOI>6k`&r1z<&zCAH%Q<;Pt&`*1O%uuomcGs`Q^s3SA^nTX$LsRVYjRsr2
z|LT>J%UB{~SZ7$)3$yH+xHv(U^Zo60=c9SyB+;1PkSep!b_LvZ#{Js9b><{wt`Jm}
zeOgzZQyX}u!hU&%>jFo@`m`w88P_nQTKm94%a+)vk9~`aEjNCJ-Ih1Y(}bRN<ZU(z
zJ2O>TRAAd84S|-c=Sj*n8tzA_ls2BWU_jIr?vg4NY4&iGhbAZ-3ir{kNo!;#*^hR{
zt{@s$;0&r3=I2x=+I>iBxbBv*X{<6#B{<!Li#+Pm#>(GAeAG7M5?a+YyQBvS*=^e*
zF*T1oyx};pxKb!F1AS<4QPBohTAWtd3eBNJnq5Wjn4(i0jr1M|8VDNnkNz#1c!lyF
zuBK-Y^XkwDNvM;n3pffto;3pT&JGJqfs6_Fmfg<2Sk7<!vZSTGKc6Jymgh?d(7mYv
zA)01x@ajH>-`zjGJG9K5CuAISd=};f%mJMllSs%X1nv<WV|w)9ZL@{}9cxBQP}!40
z<0RwN?s`T>dpqIZS$Jm@d<0$d_8M?dBmptDY9-W(%LA;qdTCH~IFYh6qE%hgj&mkW
zV@y|612QX8SXI7+NXynJxn}GOtYn*4H3!j8Upv8w2J1qBEopk9W!`0p3j|avl-?lM
zMmRfHA8pYpVT2f1pMX_9&?5&x;_Jb8%5}tMGk8Jp44i#LW{5KSgf)x(s4(GdhuhFI
z6D?2rH|yKiDFb&SepTQ^SY$7NVfs9|YP9J#zFXhO&por!M_--U!7gxLDPqwK5CfV@
z3VOeAW=9khgkb4?ja2}R?u;y-G<Kn3iaCxBj`dV!K<Y`8Rc(Y(zAf=QQkI8Ur0q3d
zFtCd9m>{z{C*^nl9n@37yvFmLoZcD?2d6;aL&UhwIDOCMftjq8{B7ll(|!}x?IfXq
z_*&y3RLzwIvH@D|M7bc)Z2Ev|^Y*b}GryuL88be#6s1XsY9ga820DKh4h(o}1ydk;
zfXyUW1q6YDVxm%?lN!2`whXJHtX7KTa%Z)eH#MZCTkf?G9Jf?<X9aCy0ah7ZK;isr
zZs<zMrtOY(LLHh0xvi;Bm$o$8QCnBvdmQA9v<(FVMTVnp<iMFez>Q@R*-98JUV;rN
zBlXloAJ3i>?aD;6bqc|*B2#N=O2Y}}O?OoUZeSnbY`K?m6<WQcK{g`ebRvKbm~~WD
zgGfS0aMTdPD0LCgIg9Ny<8Vsd?z0IK9VUBdCQh2Bm}6pkD;m$+#SJO=%dHgH8*vXd
zp~#_YU=##?m4go@0wRXtZh1^sxmshSMA^RFdAj+ZyF*M1%uT+1yLziJXml%^uOhPO
zN_D3pgv3i$uf<hBEM3{Nc28-oBv+JR;B0zZ{Xb17%$ioy#mk0VJ{ch+4I1VJSLTvB
zq9xA4p>?2S*7xtIF{+4zg2q<?$?Xj>QTYQW=uVeeBtM9Q6%<9Wo@FEp@{OP)gd6qo
zETnh$TOhA=!M@6s!i?$wQG1?%v!h(>4s=~$X1%=>@dA&RT9#insJvUy++J_zJFhzv
zNHxNcyY=GfyyV~|*k(2i-I(QQZEHQ8fkk+VhwTLnkO!fDZ`Nt@74qYJB^>ffKD6>b
zZ}ArXGl*PrYY+Z#;2+>WA4(nY^oPp0#})*<P48R9;P)i`dg-&=qV&hL?{=p>izDCQ
z*K}j%moGT@>rzg2CpX;rc(#BDYHw#hQ|kBp!MhFZd*0jJ=e!rZH@<t`tKPfVLPrhk
z+y7wkU&6q950dxv>@vwZ4>W@~bH2A@N#I;}x<$fxNSo#K1h4ddInJ*}le+I`Gat4h
z*a7j4Kiezj8H~3W6#o}v@4zJ3x~1!;ZQHhO+eW2r+qUgW+p4r}+cqkVldEq;_dX}0
z_rCvO#+c(9FP_r%Jm&a`<(x8RRZp&fT)e%a72ylnEVr-9GlB)2&I#UE_QvvPGx%3X
zU$+;tR_zDrB)jZS`~;JI>x|dJfrp^982TQMj{!iXofY`sDP(LTh_Xt{-~Fc<12VA|
z;N2v=onaPHFOM)6A+BFgr^YUc!j!LW6JLHtU*BX!d#p!0daQ7|y<Cs}Ili=Yzus|7
z?oeha*>IA7H(7ZTZ%S?S4ugLl%qqhlp;yM1kLFQhEGJ`0WzUO>W~rD8xpAmf9Im-F
zS*24@wXgc`s~iR_8ER6^W|^CI95~3Vb(@rZ>M>H`(yn_t-njlbLC}|r^KyZyg!giV
z-s`dL;h2&>KVivadHZw3z6|G5SK+HhlL?fi=_b<SqokcklfA~d4Bvzw;c}#5VJ$?T
zCXs@osttbGxDhQCWb0(Pe_zTG15hrDUfh`rwbLANIFP|3LZyG+IiLXVmmJgw5d6A(
zx2u0^eCvGsxx2Rey6bMw#DUw17Y$~2IB+NysvGPcRlzFNC4wBS%7qGe47EWp?Vi|%
z&HpF=dUwyTMVwi)wV*^pYJXu-?bnkGJgjimJrEuL@Ge%bWH$=GG$>4Qq4(Q)$bOH@
zWb)KYH5J)d71U)r6k?HoJ?>`UvVc5UhCu_j91ZWnYud$ZSD*d&U0+h^4!;+k>_LWS
zqg&jcP3F%$pYO-9zJt%b+(J8mh!y8;L=_Q|(*6D)`M|#%h;CI{Kyq6QCy7vfZ8edu
ztm9m4r|~6gDMm1rvr_zI2iD`lUZbmj=zZ?>=x7Z@RSA(V`Kn6;T1maz6O`>^x-duF
zYO62z6fCvdMANXWJkQ^mVyOrSv2REt3zQdsOzY`L^yFwlR|V67bzBE#+xav&US`NC
z0K9o)(P%7t8!6Zzto9IqhX>=Wyc)YwkG`d6N~&Oo#Ucu58?H-utr}{r@I0r2^`lWY
zC5yj@wfnLnCzJW*(XvsEX6UOfp@Ey$mC@{a;1#+mOYPJ8JB+e0frqc76Jh^SVXKO3
z$1U!%6@NHQ9Ub2nabF32XlAQYbMkYyjkGKtTA|K9{HTuq5?(|a_rRv8R^wjv@j{Dr
z__3I$Chy4l13yEiK&MHoe3ayGa4W<M!Mx|v85E5BS?niR2ofAl#tH~Al~Uw92~nfL
zME|tU$<VtVU-ZtGJ?WrD_j=vnHu%Ke-k1JM@--Zc;Y}0{K5l&aXUYLEg@)E6Ab9dU
z@TB&pLe(RT&fh8$J?|3f=qVUVzx}%B-0QX#&?4Wlm8T)XCen5Y^eQant_j;msM~Qv
z@*s(s0<-*y1WL`67sEMAVx)&Ah)HKQKF~QHCU(~<X2wj2*hgoZUu98L`Z=Pi)#K=K
zcw5`sPtEm9Gf@}fJjV&cg*|1dlqKX{kt-=L{QskF{}YCgBTYRR{OOzGq6Glp{<p5R
z|B78ItH>*f>N)*{FI`O>ElfT1j12WmU2Kj1TkHN`>u-0QHrSASNAv<L@C_|=)@)C>
z7MACts~4Jcm9L@?H%aBOB7;eEC<2B3Q<r+WI{^HU^F>J6Z4%KFdg)yGX}Y&UUfIw9
z3GG@Zp>0nOwr-S#_&yHaN{{wmE%<b$N>U3D^5)&o$P0AdDkqL_p`~Bm>U2sI^sqO2
z)A5<;r4CY~uRcq<RiuYm)l!Ti9HCplnnSdY{j`RO4!;U)N~{#51NoXtXicywRvIET
z#1+IQG)b&)CRmZ4h`i+;5IIvFWhhwfDV5PUifDt{t34^|Gp#T)dHiOD$wF}ombA#D
zINWI7sF7nASvQ%8b{dbkDkRV9y`AjqNHqWlX|07uY4vQwRKqxF8H@*}4O}AHY}U>*
z>Lk@?Iz>A{8Yt5n0Y|;X0i7!J><@7Mb}{I9e3b^;qv7M{ZPVhR1<%@f9EMr+o>qrz
zl9;&vjjYgH4x4j@IXFjX^slCjL+Qf!1B0cr+xD`^5)J3`m+R$-h4sSR-XYc<)~PTM
zF3e+df$y7U0z2*WwhcEXzlm#M0WXt2SKFYIYc5&KJ1?#p^6!kRc$EAx^D1`HY;K(^
zrlKP3LM%0n=E=izS&Oq?DO4cWAI_+gj<KFJ`S1A$Fy~dJ)%;X?WN%vWdZmH^^Ai@>
zf>Wj$hK;n=nhAk-FqF&d{@hvgK43GZN{JlP?kH}HvETYlPN~$`c?Lcc&SqR=)=t=9
z%Gn{J^b=A@H?Y=ba3x1cLs4%kW(G?WNtRfrH_{VXVrm6TW>Ml(XSgQEn7>jmk8ozP
zx0jGmZMvO2HPN}15}#wmb}Mq_xSYtRe7T4ivW#y8r&o)=Qn{Z<nXBCGuY<RMvslSr
z;)_qZ>Dn53ru;T8Yh|38GR-diB`@_ZAJJWas`<Fx3bVK8T%YeNv~;}zYq5r)s`<1#
zE#>Uoj~K3<Yx5~M2g;|R!qo7%dB(}OaVj=kgf25Oj~_HDX`;=a7SPO&icG_st;;ri
zSc}{UpGlIO-Cc?X=T{(E?TWZ)XR_6-TxhnnUaQjUmK4Q-?y|=l+&GS(0lu^8$R5Jn
zX5i)Hs^3Q%dU1AR0*fpsE?1ybs?I)XF}O;k;@>xf9A!X1w#jww%nOf<Mn`mt8sc#i
z%-nU&?~4wz!a<#9me5GrirSDp+fg5e;QEIP6&AfL%1*UNv?{|f6t(38@Uqn`A>I4E
zQSo}|c<0b1`;BRS1Hk_2sWxKkCSeq*HQuE!Y#cTRPR0i_>iXi66>tKQ1>?D5VIT%i
zRV7&AxfjxRiW7HHfOZqarBo>9tT;gQ06=xf90Y;^_13o!+9oC1vW`j9qPB)&`aKt2
zCmJw@hf+Y~&mo%3lS0Ok*?a6s7)&<3pl_*42>^DLw9nmzVGDg4N{Doi3ofmXdHlL@
zu4Sjc;7*jHhU$4MY;}B||2LhMAIiU|14RTG3{31Xb3cAWxK8b&i||&cq<f|aM8+0>
znFT4wKk(Io=$CtMp!5~aV+f5Pb%Q(6&>}CmGeNu(q~IX&56v`sxZ0+g1!Adss(E*s
zA*e7zl!^c|I;MCM!uAC^szRW@rl&vj+iijYXP%-}o4QhVQ9+ehFHFW&n?-D}lDr&S
z!xDJ;YVjLzMJs7vpasT+03-&-f+#E%law<@qrRi(3VI==6}cB52%e9oo~_b`7qd&z
zct}G<yJeRD#cNO7B8Cbh%?@@@AUVVr`&r+xyk7pVzB*@ELZoH6zgrR6ESc9Xk>5MS
zlvgA12wsUfzAoZA-v-4V$0WmJO70<CQRFFwQ?N!-A}k@WZ;b6p&Vgd>1hZfRGa%$r
z4oq3=oxSGU60ypaNZjwD6TwUp05~+dw<47&Y~>`CcC*K3LZu5s*@{zhbynj{)d^2Z
zvjdiz01(0y6ne6U3>HmfOI1B)Hbw^&5ANuC^HQS-NwxAprd7P18B^Iqo>iPHZn_)7
z`ioHi#g>!)<n?$!QKMW&3hWVnyj>g)Xg?c!Q(o(iU+lmktZB|YNB%@<Alev{FQX?V
zO90frRQI&jOkigBQ5R?v091hM<1+iOAVP;k;5yN9<MEZB&;gXbjRtz(&~G|>&R*CG
z2-p5Z*-o@nCZ~oH!FKS!nM+8fHBWhV+t~D-<>)nPkX(>=TwG*5weKwUBg)r9LMjnY
zd_XL3oJ?1|ouX5r?OxhX5ZnKBHJSya8iU*0@HHWr0&bGt$C}c2li9n&$Z=m<7g(15
zG5&ceIJsO8=_XUBHz>0Fe&?pk4w}r+4KPT$>2`AvyH0SSD}M$;xvCbTA?jo1M=V(#
zmQL+T0~ti`z-aLp5~gSuJ4!Q`pIHDUbn|!{y*3fxK;+K9qRNPACg%wx3#SfmUlKG+
zB6g$c{g6CAC=S|_s&URja~J|l=GR~#iu!7$2UOmzqrq+W`=)*gK!;uTvTh>HMbXt&
z&2YULyM&|U*%eg+{ev1ris2Ed*`zUfI(3Tmg-$(LI&*Up_sH+o_`G0UJ{${UQ229e
zg2=y0oO9x{gR<2M3=#1iZ-knQ3OG6l77nF_#Qi?jU2jX5JKM6p6B%{jq2EXkqFs^J
zl|6&ZH@<%-f){dEu6o!2hVr@W6c)+vB4D_ZL0&+f5nx7dzh0A*R}#1AVO#Z4oFnhc
z>1~U}Ikgs*pN!RY-kQw5?mk|8bPqnFU2E*1yH3*4=Ip1m7TYq>H&fbXCUM4H<Ef|{
zl1-r{lfU7c#`pca%7~8$hlkv;M*aMHdn>)^?&*F_Ac8zhyg|C-Kc@CftEiSZ3@5^#
zQ52ZxTs#_sP9({2$P?9QDOT*A<aMthWD$M@((_G{{V-+t{a7dwfB>Hvk$+4a3e6dh
z>-AT&sxF~_5#WsSUem)S^=y=7m$gHK(q{m8;Q*NOjeeHJD_sU3ec|VxM<gqt+8gll
zO0`520viFuwMK<Hkyl&u^!`cl{$Wp&IF*vnKK_AWvjoSjbH6N)`ilHNi_<@Le|CR>
z?0?Fke15`AbpLj7`o|WiAT6q?XKeES%k-b3_R~|rf$){9$Jk1qW4;8sp7bP~Ml{E^
zE;<4P^k@C2roy4uEduuybo}!zs~$POQ{~TnK?Lu^B=b!4hzEr#mMA>+^t?94lkcD+
z$~Vr;h~H4{Lo&Ii_Ii7K|90;klXvLb7$#v_Z@zPs4#_S24$wrJ6m$ob>+ZtJo;lBz
zd?AD{I@6f$ctN2QUCfxaw=SEy?k3WFuE;$IR>xB58hxAG<;K#=!*OXUJEG2u(|maG
zAtecQ$(|Oc%wo9T>*iZp_QXVYMB*?WF+@8s0@7B3F>S9Ck5A^~NaL3|hG-*dPy7k0
zu^gEi1>_^0My&mD;vb3r`_?}oP0y>8cY5ed#dGC>WGstX%$}CH@O~JWvU5EgP+o8}
zPzm_lWlpV-AlXb4y;K^v>%d2dU@~LK36S29d}ucK+(NDaV=TYPQL3Ox7pitstrmiP
zL(w$C>0bF=L+OJA(>{va=vK2RboM~OQ(jqF=yGDv=qB38YGI*F#spOXg>~WgaY7Qt
zyP;8OIV}6S-1_f7kYLhN96h9b3^E{K<_s;=QCrI*5!<%>N1xJ3;-rymWsZe{yPSW`
zxMeI#lx4M=ggCk*F+{iWN_dPkw(}nqYDSmVr6Hd9D4iSfU;nAD(cgDkq>6L3(MJ$f
z8mgQYTn{&I6OCQ1H7Qpu2W|Yw@9Y+pOgos~Y~IU2tL{fIi&hNo-_1;fMB^{BW$3*&
z&L0o0WfXt|x6a@z`g0@h$b0z{kWO-cV#4g7+1?FV>?lK3JA|>Cs$M{{^%++!=(6Fy
zA5pm{MbdWCXxwzLOJPjlo~q|0MQk8);3VFFqSi1R<KGb#Dj^bdkmUe!$#h}IR!@~u
zrlxJ#-ruBHE5-W$p`*axlDXF$ci2_r&y}Ia6$pNiE#LvBSH8!Qy=CCqXr%uocftaH
zYY&JPMs=$w*OEPA(CxVv+{GH(^}4_cjeG8mb^tvWq>NnORL?oWYTSI=b|#g3zBtEV
z#I7o5;N!MlWp$ycNz|kUI)s3~ai1aGVVUjK6T@WjEsU~oGa<;(utJe0jaa~1AVO*2
z-r+xl$pJUd3*fjbI!zzM`J0_aBU{e{VlTXTqEh<W_WZGl@B0oh5B((5^$TLGa!w_#
zTH06`BQu`;cBGpiWgI_D*eThbB{po~O#jy|qnaeK{;V#h$l$ZvS6>w$65uHl;||Mr
zT3Xtk`#u;9536$%T!|$q@{!Q=UvxPfVLJv~(Ybu5d1Aj`E_QG$?J&`CE9IZ^Xb#>H
z)?Nl4H6Fij?~J*Ju2@TtaEER_&#YNI{u(V`g42?XD6YtufBf!KgIe$k21knmX`N#G
za>bA@yt^p+zIvyL%vEV$GHh?KU$OOj^<L@z-0uOfoT*pydl(d&Sxfo--WkR|6^sKT
z6Yu})0VM#OsBccdNuy*bM}_#%02-_5rJU)*c?rZ_74F^e0z8|Ur-7PAgUk``gLaS9
z$8V2SHMw2inbq2U*y9kYP$>UGg!aQ{YPNGzY-#E$0qm3fasi`)wJ=+(Oa-HIs6Par
z5N8ZcRZmkp^IgrVagC)?az({+4T`UtD(-k3t-U7-`9tFMU;4!UnT-;Bz2MkC3HxgJ
z{{%-C71mRbmy}b{Gcf+oDNl8qe=w0h{XO*y?}<f&7V8<lr^S;bI8%(py#Vd)GNl8f
z4G@+#V+n@}*DE{Yi7~KbMW4M<&6Q^A@Ap+7j7bg%-a3p(di|$w()<u_T|>q^7*psZ
zvD^y0LyAgX`}+};%6hZVhV~v~pzK*C0+FCoOURYg^DLFT#fRY9@ub()XQx3E9$QKG
zXRch`Su{*TWipMM4Acy)W05@dx{TQar8)`&#j|zEP)sGa<VX8}N``7MJshNv5-13z
zVj?i17KMV5<IwSQZelStLYy7=G31SXG!VP+bmoa8Ff|CG<~ceHST%nr_WA{Q*U3>}
z)5lFXycC#fhajg_z^QP1M4r-q!)->Rb-ni3i%rce@Vn6%kom35JJr>Y#1i8NS)j}l
zw(0IPuw^$~|AHYx-1E4pv(<}yx`-%WdcR}9b5rX9QF!=X?e`yD;I;q!yTSPJp-y#X
zYR~=W9mwprg$q6OvbB@A=U~!~oAJuaLGGDwsP^lz@yv%))&@oSCq`TI@6?{R#%*VY
z4EW(fGEHD#76PjPO=)||;4JEST8@ijDo4MDV1?sHl!a8#c7gKqP=*6a`EV&V*am-%
z<DUa7N}cv1twtR*8v=r4Bajq}rG2uwI}v0YbV)OpK8Xm7$Il%sOjF{wtp<0-0cx<M
zc`m}iCxx0z{T$yp&%}>dlj%n|X(hfmy@Wv|<i|lC!D{4^>I;TLL^$(&fhw$AF@@KU
z?B!e=SBfyt0#|QRh+a^@thUQ`IY0;-P>uC_mF++_`K^e`hLfPf0Jsfx)krQehu~C=
zkE&NIV#qX!DGzxdx!0i_L#^4gABDMbQnCG0Bu`6KlZGqaf843ukdC1zpMAZqi6Wl}
zY_Pa}>(5ee#W*Gz%2^R~Mxs2=lR;m~Xs(y$a4@&bZ<MuNxYl!MMhZEkm4j&9c5V0R
zRbb>NF@Heb#?X#iEI+)CA?0%|;lf9Oyr~O0x4Vk^dLM>A*l^X;o<rqUS;MBVJ5JIv
z+RUu-e{27|{b0V~l|Q^-4KO?*!LB|U65mP@YPL|z5wpgn>b&Apmn}^unPi^$XJ{r~
zEZ6?nRMSB&2j740x!jqW7I3raN3iuhsCSu?t0<`#PzPQmQXHy#0g%Ptg9!5(!-T4%
z(xt2&A8uK+-a=&I+C>gM`HL{I%hnFi8pyvtbeutawc~C7HRGdUl001h#oTIBnm(4|
zFTL^3RVq=r&UT6YKAD_&E_~4Na$o83iG|zbIyWcn_Aq@FImIkwrRG*vJ6(L8jx{ru
z)*LZ!JR8g3KDCr-<r*#pAG8G76r?~Qeok#aLthzx?P$rJOE)^tWG0x7S7SWqI%!5#
zFU1lV-y&5-H5=CVif5}w_vX`vH$5!K(D~ak3DcsoA*guV{I%9mu<q}+mgZ<qzJ~LO
z9hL9(jykp6#glT&EYA?0Zqcd;6J7H`tM}ZEET4Qh5k+6UHEBv~*WIBnSKFr-9tdw!
z<;%c$?*@C?&Gg-cPhW_UH)G~hD1+jBw^*M`?28of2??ak6&S2C4n?}O^o+3FohTHz
zE}bF2pmgwH#O@$n_kCoooUp%F2KtBbLb?@NI;z@OA~^@BpHeF7r8RPbJ&}EGHRmr~
zn(&cZh~!<4C>TK#Ahzg$JPOeHAL37(>8InkdB(;ZhLa6SoFh9l>M|#ovx!Uzzm87T
z%EfFCdZ-ewP8%=!7tY>zQN+<}91DBj_y4_`7KR<qTl{pFTK}x4{~?L`gY0wCvvsky
z{_g|c{}QoJQJ(p!jz{T!uXQ&>PbZ+naa{!{r(P>l$*iDE;vih{t?nXqHRh)Mym`J1
z?QN@06RF>M?$+zFs5ZV7BTP$Uz~@Ja_Q^|~`611^z@o?FC4$5K%HkiGI=A>mS79-P
z;XN<5m?P5GLW^~C;azQ0VtXc`aR4mR8D{9Bx7}wJ-qQ+N%3XQ1)(ZGkQ${v%X2?o=
za^sPm8!#}-c|b_P;~42ogv5f8oPxP2n&?$3ECAfs;AdwEujJL2BjO=vuJeY69C<JP
zWGdKBC9(7}kjP5aEeyXd;QV`z)os?^Xm+k<@O<tReU$Y2o@4w}6nYYjf(aCaJs8Ah
z3RJ3&Y^tDO1-1`r$i?_e3Z;#c<U(_zt27`#`>F-XdGyOfVxKE6s|Ku#Gc3l%pT5(=
ziiaF#*GAi_FQ_EM>k4&DLb^p_&wYbH`n3jrjMt`RfauGUI#JIJFuFKGf&+;^7qON_
z&iEM$m$Ie|L85W4wXme*!C{%Tvj+Zl9i3_3RZgF;4F`qtOm<($Vza<_FiINJ;tsyx
zarhZ*c%{j9)KRkvFU{$NHJ5i-=DSuNc)Uo5hqjdeMm<{A+RNUv5=bXTtT3u_?g(82
zQ9yF2wgQtT`!j~9w~ZL$gc$?*mI=;X<F~lDCxpA$5Ch}v^yq4y8^qr`2)Toiq_6!k
zO|V;IZmLZ}Q2~R-!zHnmqHj@sY(v(N;#t<XryCaq$o7#_#NX|%xbElm1e`MX+UfD8
z3zCerP^Ue(2N5nXa>^g|0*kbGtCw0Kvv0K?-8(mpUw(O-tyAw3Ubq=hvOd^dD7yN7
z{||jq^|g=p;0K9N@^hl5`nRvFf9R9{lmZ$XI2-(@k2yqDHg1FMze;=9!fMcCv#$!m
zOpSUSwub!;>1pf&cxlZe8#G3X#^I^2Yj2{vugFeKR*3NN&9*x+eW_%}S4(y79}(H2
zYN?0$YFq8(-ddBr_(0#de)-Jh&X2=;4WM7O^Smsoc#i-1v<2N3Mr*nqHwVwCx8Kji
zPvM)_w9oZ|lsXuWKrV@+_Smw{OLFPQ=v3B1Axyb7mMYJoHU&5N?H#LaR;Yvl?k8Ub
zkKxkwpy0{<y4sI7Y|-52>y&LgQ_uviMS${&ck)FXNOwbxq}55<4!G}{_GVXU+^)@k
zv$6qe^sd9jnfTLgjzp!aL%@*{0#u=6sZiPwPhQSTIUxvgG8J(hX&Gr1L&l45e-f>r
z0RoO^aK$MkXu+V95y)=e)_X#}=m?i`&-nmr0P?QW4o1@kh7Kq9h06c|b4}1EWtYN3
zJf!IW6^Ra7ue)S`RG%3FaSL;tJnte56k~Nep=9Zk+pOK2qEsdmQ6FN<R1?KIj<J%d
zGt&uyBm-u{#n0JBe2Z%g%CD3!RVtOw216<qUp<xYUZCUTHH|wQeGV;bkf4E5S?XO@
z@uH25-v{)4_WUhjl_{+$E)!tyCoOH+6s%lTLzNx&c6-Gruka_phFPAh?YJD}e2Y;K
z3kwh%rpD^T#+(IHBz)J+D1(`N%{(s)irT!ib(7q;APfA>f0^3f2nWqQlS*ihb$VjH
zK08m*f-tbTY>qdAq{o3P;#mth*24xavX-{<w#6RVF}>5a1M-48;tNX6uQa`oX*<2Z
z?hmAW&Q~isd7+%JH>{Ar)cPb<QhiOgdAjfTR;7d(>kiX4S*4^CXH{e7uyPcV_-uL8
zPzX}<e1<+~CScYddoU4$(GS%yQt-WBro}Raz8sfo?`d0LUpj;ImBIBFzs^a|{;VX%
zL|lsdFk8AW&jdEvK5UODGu<DP#tNDo8gpXcCq;!4tgB(K6eItzHG<DAA98>;bG!LI
z_ygf*Ml3<2IM$fZ_<t(i^MpP`c9Gfcvr?Bj#eFr&-><Hl@5U59Rk#e60GoS<(-h|L
zA6b2=VYR)(5=p==VZ<Hz#Ny_{_U@0KUR_$h4kmKziz(^VaGl`!{oFr_Tb$fp)-rpF
zZtEcU*q8UxdtJ8>m;2ztx_MVz;!=9W;cu$Dl%?kwQKrx~S4!*x+*Vm{EroV|b0}d?
zm_ohF`XV<JB`h@6>}!qIY$9pJrUsZcaJqZjn0p$LakN=#Org}KRmwI5x>h?d7eS3g
zas`{#?9$w71Z=*~e{yB1s-iaAxf@?PEN5pldx*62qdFxjg3Nq@{?8xrAC*h$TFZ+5
z=TKuo@}CNh|53TrnE$^?!esH^gXDjawYs!y{-HX4P5)3Ged>b-WtE!Ru1tX2S~{#2
zU0^mS*X4m|=NM}nib%^zzMk2Im5~0X%HE)%ql5@gbBE2qjJ(oH6ASrr+oS2u9lcCM
z$J^b|`N86~b;G<g9!DTq{GKk?%&9`><-S;3>6mG>uv(FLe?wadI@Qv!e8~}=QzfV=
zbToLf(I)QQap++IFIGcQ1E5P0g1V3rQmS!9@B(AUh{Vl{_=Q2I<tavtSAtkd6G0(A
zIpUKWjFm%o(Ei%pscmzNEp*B+f;7yjuvLU9p>UUF7XSR>>f9ExHKHQ&ScO+12=SX`
z%X%bfrf;h>pdR)&leX=#+XNx67hfsS91CK?r#+ff!3^Zp2O|iPC*D_7`b>-w#$#pq
zS$!y91IGz(X8a<CkQ2nBa6d6t=@{_V$faPwQ)uJ$Dz@brCJ2_S4c$tTk^lH@@HmFX
zlv)t#-o*p_M#xIGr91_9keYOqVAfWgf{D^hc_)$BRMpevFf9w~7vx1&tHCV!>B)zC
zF+FbD^z(?#0`n^}o{R2^U{71#^9AY7*Lkd~fd%iwY?`{{S?_j@j(c+_-rzMKyz_Fv
zx^qiL)k!67I1%3;^b^itjADM2tx}}fIpIn20{BN;zG8g4T@qWu7ZrSW(frYotP^b!
z6^?Y?+mn~E{i@$Wai`w!o%Ub7mAeb~zV&UQn2@qbFCgCziJ=B`qy$W*XWcdU?o4!X
zLX`DU2G|%!NeY`9_2^0#ap_mAX(A+ueqgd@AxdK|bd2x_&ryGQqS8ZIbFdU0u$ZcV
z%>}0V5E<e0`!Nk9D=vQd_c|&&!~kKcW}fLNCe`Dg4zUh{l}VaZ-f7Mm;aMdFm}%h<
z>I3@#Fy77#maynJ58AuS(bZ(@(1RIdjwIAOjzk@_Stmi7u*=E>6OH=YhQ|+?PKDE{
zi8;$OqR`=`4fB5os|*X*qZ7W+JRrb?J|vrjcizU0Pf|m##`lXKLB6{i3AsjTO{(_Z
z25tbOZ6F6mO`7-Tg>QjkBjY(1r}MyC)Y$J#s5uwi3Z5!^#L~bhV*)Y)^5WaUuxzS5
zq5g%PT*$;{uAaqP;nBw#$vQfX6ar%GY{`UllK7>vtJZ5~<^NYNV5=6Muv$ps7oVY(
zsz^bV&?x}f5+sbL7@$PKJ&iOe$y?oZZcMjLpo*|>80RwXenCLxZWkk7f*Nx89mu|`
zAfD1`Es2h}#5-7LuMY`f8rGE{kVuwO5vL-V4-W#Oy!DfiGq!BT+y!Z#s+PuT)lzOs
zb^m){F-Sb{9nNRmw=H&uWu2Ls8K=#<l%*mlx6ks%x`A|?gW;eor$An>wa2|T=;f>3
zW}(kD>%>~!_t`#ZMJpEER!*Y;&KH9!X)HG!%yn&=&Ll?^>Fk4+V<)^8&;1Ka#V=jA
z4NM-y<9uSi5`_>2-%%8ulJzCHj37^cBufZo8Yhfsptr7jvwZy5Vwt0GTfzpM>E6KD
zN&w8H%TYuze>Qba3O-Z~z$Y8nVo{d3r%}0ZGzFU|s8)GEr91=%*h8w_W=cSCmRz}@
zv&)4S-}(^f+`a>HB{VnQ6`2Uj0Oe#yZCMQ(LZx(8Awg^g*I!Fej^u8Ak~C%mRd<%G
z+Hzjifpmw2lB9qBI`5`uy1*8hs!g2zwQk0cH*M87L~E?`$keZ$ja`!VHiNcUohQb*
zb?aW6PU~TB_E%}@(8euaOaU#HNDj@NX<QpuzGu(FFDf_-wEZqM%AQ7Rq#azN|7__~
zQJ6OzT{{Ifw@8m}C61J#W~4`$gxs7&Z#-JQ9SDiAKG4z$hDWGOYV2uxlk80a6^Gb_
zCT>0jrQOQooN4b+7)s8Mu@nmz&T2S0GjCCdyBPk%%|8pFp-6u|%VV_wSX%SBL>Y0*
zg<r78z{Lbvyj}#NoNw;-doLi2pCQJ6W78V?$xKw0ZW!mea%syG8b0Jcq26ISwKu;l
zCk90pu1J9fp`Ru@wJQX^!qs>m24OZB006U1d%85_$?DG=&$k#k-s3bCBrLJF{}UBP
zYHs*V)bs=dNS!<p8R3d59v+3V@u$W8^;=$Ae!8zQlvXArUoy!H5PI8RU@|an66pTO
z=-C;CvujkZ-A{Sh!;e0B!C2!#&mhdDnMfRsa%wsu_Sfqj1jhkZ_916_fZj~&@kC5D
z#Y9A|>A!&a@Sb(Q07s{x8cG0!)RlM)v#A@^bs||TB}Qp9O}yeUnPx&9U@S5jXtJCm
zC}*#Lq6(sdZG=vwj`Yu=y+ai-8X{+&J#z)BdDhJ~IR@1OW+1WvnJZILx^SkY@**_6
ze#sCFgt#stg)cJsqzn_GbdJSj|Ed7bASO=T6X^kn9q>7ww}c;x2Nf4ryYDit8&RKl
z@o+@orr<RakR>mPQq^bx=v|5c)N74`{T$3VBk}T$S0AyoE0<ExaI6+ey;BDQCh8?H
zy$?9RFep{3!Wxj0Vz(ziSwxw;qP*zNjUZ+|K{6+J&;XR<=t^^theN3XAm<r1xpb&`
zHDa_jzg^)lkzC%*i+&ebj4}NrTE;o2dOWjv$0oyQXz@)$mVGMmP1ACDnlcq+*Wv3o
zxd8}G)Gg;w2%Q8JDdy+J18nrXub8(R8^3%bQW-r+C*_$^wTqmKN#&poW`!&QKwOYx
zJ;!82WLP*+mQ9DJBy|ZjmI&#HA%cL9Npsrd5v}NNO*^YE-BhgIBwS(QzsCAocn037
z8Z;QMnM%3nM(NsK@0Y@+Sg0St)6g5u3cy;zv;1_#B2N@8wmu*8ftXl;BE;W!aNb)`
zC{W@{{2V*UG<B5^jOZ7Mcw>M>s_CD^r)|JcVuOC+omw?8v^`+a8S8f(zTD!FwQGD9
zLfr7F+ZEpyxi+?silogrQPh!Tt@byXom%>V#)nc_1jU$t(8>QWfY7b#xObzqD9(lG
z;59kjG0P%Uw>qIA)QoNQU}Xr6n%YC^eBPU@Z}>TdjikK5b<zkEuWl#(kZbGaJ26Ak
zQTj@RARiK9m*`6BJr%-a441XQugC$!!$zFpH#5G%FyJUbt#ku`9^}#3TYEj|t<vq=
z31qJ`e<#b^nU3H@q#cBO;uA@Z(Np*L-%nPu8?@fI_vEZGwPu-6Jo-lC04PKff4h4m
z<so%ORJ+u_)?Pio=4%gzc;WQc7uJhDL#o)J&oO%vYwj+#{iaaiZJwPkGK-#IJ+_jo
zy^Xe>qQ~?U_GKraX^%E{<X$$hkqN-Kmwar=U(#HC1)gLEZ+~DnpO!?DNm0BD3ZK<~
z1pmqnt(1BdEsv0#6nSQ?XE?A7qF)TDlCGp_`r{Ug`^o^~MBVX<U{3+we8&~?*S-!U
zXx()|_04A4A<Q3(`X{UUpKn`vuoWH*9mmEG!5XXjv%ze`+0E=duX);>G@N?YYdjmc
z^;6Sp=xnfQzn~Ud1Z8O-Ww#n_tz)I{iCOVaxZN^X(W1-KU6yEN&6*Yru5*1EL|`su
zzJ>Cgnr)S&)3#pRh)GzYG*Q~mcvFTk?K-wn?h0n)8#Uve@>=y66<I>-H?8Ku$nAQ1
zXe4zkJ^%f9=5Gm>nZG0%8W3E#n5c9^zuobY0rX6}1Ho22-MMsH;vpjBA9j#g8O^UF
zGWd=dC;|0%3EYKn8<0hThOFP}x4Y)}976nJ!clzVotj!jy@4g5X4Jd75{<4!tTN(g
z@h4-A0v%Yl0#l<H9J5E71n@X1p(kt;-c+v>n>XYG)X6~Ao2Xz(BN(^So#fCK9);5~
zJ0HkmmzS3(em<coRN?Ea=dsJiFAU-vHkCm+&iwe7#{Yj*f+NZI0IMIB;OK|B{_hbx
zg35A?ddezFl5*mD)+V-Q&gTEUnEx;5Dj&7E*nPGi#E$w8-mTv}HDj$pmDMD{U)C+b
z)Iela>OEM-Fnj}{w1pYQZ^sE2Tq6An8fv<WeB>n8>ng5T4)Z--GJ)^*^~Gv%l_QtG
z>R`!{?YmR1@;+6Mj^uqhFr}s|e!}piVFN9iJGB9~IqBLr2a0@s!nZi5Vr56o?`wKT
zZ}@J!T&JCQM@@7;neNg8{_gp8pEGwT`Yul;;ZT+8RUxgRj;#l|#T~<#xKlaAE6C;M
z9-F=PlOIDK;M!ePqnX-xJV^$__u)y+)8&$N_}k=tuo7iiY%eFX2{~B)^co`NJb0@`
zkln7NAoq&pV$w!oPqZ?5XHm6~C;W*FEahF?uoF>Ny=_JDOiaDz)gD^(H7?ZAFLM9P
z@u@SD_Bgtl$>L}YS?92w&tCC%>=wviu)dheAthncqC3Hx9!gcM-JS`z=@Z|2?nI0T
zFP<)`^Vgy0#dknK(kjxITxe|}T<;o=84N-o*gOi+N%2#hNN_L3eKg8I?`}Hf#L|Yv
zxI@+%m3)GtIs5M)e^7AvdR>>?lG>goss!JC5Qpn3s3AbBWv%0$$47X#x2*A5I9a6|
z&>?z)dgA@v-5<5z_Q2gl<FdG?E>zOQ$Ve{<5e<{5xjqp<?@%u9b8e^#iWhV)&V3<8
zFYX@JKQ8MVV~Rhh1>L8_-g;2P)p7n@B)g_4w<`4q&pJ!`*ZG)4?NW*+x6>A0U)U&O
zYOQ=dcYs4+k920|)qEqhHmKYJvZ3x6ta7U=8`Uh<Ohsjg<7=z7OoIay@nsUyi+#d^
zW@Y|8z<e8_9HB$c@WC27o-1h}VC&Qs`^OSEw-w?XpKw+?Q&({L#lt176nJx`^QHYo
z<k%Xfl_Up&EMHbvi0BKdO_u9*?->kWWo$!HEP_Qz92K|gF9Z6OQ@`}N;?ad4Lm(EP
zwym~b1SLIlVJyl(uH<xKVk}aa<hw&R1JND9)4C<-V)}%BD{Gd54FZe=hRIi}U(~zD
z9y@$Al{Dj7tm8C9sRl1tWZ$roVYhi6fD;EC0-2%ScgDdq$Anb+Q(gWgF(NO8e*rQ~
z2XI3B(sG55cBOwPjFUThGRt6+*vLpUwyfy&$R!(0P320s-;pvv@-M}$o95PouPh%>
zuE1{flm}R#k6L5F0__iz31H+D*BmLEi=Oo1PXkLDQ!iL@IKlN5GT(3F9RBJ$fkmQj
zPBX5*&ah{t<7K@3)eUtHM%9I%Jz|>H_)7JLLn|(mWlEXp_l`w7QhBPp+FO_gntcSF
z9al#d@m>_=?&{*QXZGz*cjCcL{UV1pufJ<FOa42bGK#^#rkQ*>!~R6lk%@l&)pK-#
zfP$(b@5XZnZ#UJ_18ZBZ*VnNp!6GsZ#oDR|S_1~>yvE32^vw<r1%YvswDb1`Byu2q
z1?aun@rJmbZ({o-X`z|ps`ZBzj*xafHWxxk<689$lK1`J_6Y9XSw5~?I!1!C27mcw
z*ltB`I4Y=^`Dlntbi(>R(cK}GfN2Mg52PKeQcI4zxE{jY>(d)3SpK8;Ccbyrj9SHG
z0p--p;BHseml<M$SRy{(Nc3o4*utYkxsK*M#xA|LLghv0yAL1E_YaeyRg|zS#g554
z_~&Q*ZNE0Zmnrm;4AdF1Z&{w<l!+$6rQy}HL?jx${_o?VJW+Y7zF+1-sFYKY(7~O)
zLtafUbRgXq@EqSY)H?C8+a$N-4=V}P<0ejo{%FqIM+&&DDM9@Tr1AcU2>QQj*tZS-
zYEA_P<DEek>f?#WRH><hDU=f-+feyM5Fm4$rf{mSk92el>@h&Byaljzba0)}T^hx=
z`^a5=GnV7L|3A`ivE^Pv#*gm6`yV@g|HT&b1C%oPPZK>xP4~wY^Iy<3Zt80DC7>&*
zhuH#&WHD_P7=rx5Gi0U+;BDE<QGA7`m7C_ATScMfTLDA8Jg@7!zl?DqG7ug*%$b{g
zWzWP!ByXIWGTq{KQNfhm2GDeE?E!IxnHi#e>0DU>+7$Ru9h2@b-*vdN)}*NH7dVfZ
zRH^=^^@gT-9#3po@}@zUgty%24yMRpxS9+FF3W~lzuT|(QP7X0!;Dr|;h#==cDdMY
z)OXGcsh3Zv;aqx~quTrxT4$lA)PbTR>)G0dJ?#V@{MPzk(xM?jDye*8O+U}{ned~<
zgC|$2y7Q?es>5N^fHt{HG50O<n==zNpa!;KHKvBfXLwzpKF)-wmdf`H?8<~~mrr)2
zod*F&STJB*k?Hz?yB%P)b4>_}#w}8>MiX-osz$_DZ+9y=i_uQ`T@)5=lVFs*A4T<l
zmrkF$a9nc1^&^j+anIOXyMSf9F<QtPz|z=c5=o20A2Henkl1by?AbaO<VPM)GAsor
zu?S@@s7U|xi^Sm>#ast0_UaSPo2~-1Atr-|V$?HTL~3Uc+jjuwUNb@-FR{gDESLYq
z<QsKVk^mJE-50i?qjjY;l`JbbG|Der<H^3c<LM_}mc~62mc3Vk$IDp{9O4=BaY3cZ
zK;+39cS{gMC`E1w6{>bTjPYM(kU;cmqDZDeDGkM4obRU1N%l%^P=A7T+h#FA8^KUM
zG*GvfiNtW@lc+)T^TSXuoMH>l>qFE;c?!2UZL>T>90)R9F#qDh?VH)YU9xbKq}+^k
znr`z_gKUEyVYsY^w?W3qCs>8DC{VUFH_eEXqMWHRTutkrW8`VUbg3s*3m?4d?jqMA
z;Sn<#nA=3xWNl~>B~0mKO6#z9x9U7lFn_FkHewR__Jh0jSr3L4kL_CM9L3=20q7R>
z0WYq_<72+c#4NU`dtjy(o%q}>#$w(zKP%yKeq?vNT-vtnG6`E<W{u9p^S88dN+z33
zTc|71SWDc4EXe3@aO+mK0bHRa2}aqy3tkqgvl$S4xgZD`w!3yDRPbd`FG8^-JXob7
zN8f*GTjz7IDtLgn!U~p#es;aA&1{IBQRoDksflu;(>Mw(#?~E0>dm>?>cuY}&pWXf
zEL(C%iZN~6>(>QfvOOJeL0@zPCPyHwvwZM(Nr->)dj5vk+qf*W@l2e^;U*Lx)}Y!a
z-<m(Cmp~D;<G@B{y3B6w%~RjXI&dH}Y^I)EbMHSN(N)fa{mpsj>}KFzph0uTD5FlI
z2iExN{&u{jg#UqbVN_;1o+7p*o2cJ!#ADyaX}@B9;1)NBFTY(9)br~&_|c?Z*}Iv|
ze#h3YtIKZ32lQlMX*?p)uW?miCbL;YJs58rUAa|Y00puPRvN*5)QD$&T3%FXn+8<~
ztt5XBtS31@uO<_~Zr+gnvQt%aD*RhG!LbSb39k`|U18TI$akQ;@rCwJiZ~sk6o?z`
zXmO7-W$2HK{8ta21;?q8pO`|dg$1e*sSfr~+HzJgvtiJEZ4Bk3aAotBZC0@|Yq3^y
zf2NwIxRcHO<W5;V>*2rTDgIe%L-dSRm439><DVHw`)>uSe_d*AP2B#|{7X@hwaXGf
z=(?%JC`Q*|<&Z1JTVGAQm`8~S1SLt7UpCd8R5M1u65srIpGLY|EvQ&Tp13`p%3^Pv
z<W@ywvg4>Wji>Vy3#N&3ZlN9Lk+W+}yy5S)=;d?s#;ImKvG>UQX_Y`N{4wM;Cr#o{
z)+^LYHo7392lsLlYF<#mu~!_-r@KnUWQR-v_2k@lg|Yt$BqyyHOY<v$GXy52eL;tR
zwjjRi!-N#w6g+P&(>S{O6W!=+EXx4+<3pPVNC}Je0M)aT^M__o;|^uO6S9`24~77i
zQ|m-aRNv#gQ~c}K5L6K{BkJ!*vpxG{BiGAc=Nd*48Q*pd@9#O^K>}EAO?)`rqb_xS
z>%!i^)bC-^vbVnSNT4?iAZ+2k*V-Rz1i#lY-|M$9QgcL~*`SJ<aw6x6#f+tA--Amk
z^Go$e(Ic(YzDMS|^Us}kS=CoJ61Y=9KeCOeOG_ttuBG(^cM#f=FPx55H05yia^V~-
zo;s9`Ao+|`8!~egMWBh2aWDzHVy>Orrmffh?t!s`NOi+svN$`x<lrim=c=KadV3!i
z7atEF)^`w6t=zpF${&QV*603Y|NNSmg|l}A^O#RyKsI(wo@aH0zWa!M*vIvmuQ_<=
z(-ATVpF1M}JsDxI7^i#DjF0fNeIT@9J{s*v0@Jo80#bVa8Wa^~SXZ6w439kw3{00Y
zd@7V3_<$=!E>D%2)V^vm8X^qik7uhw>P6Jc{!<S`w-oKuvg&H`<jlEeCv1S8SjCgw
zXDkEGCpgB(`V%#s*=!8|e<YHBK3sE@(t+`x`f76&006Ro`{Dkhv>G`({zuC|vxc<Y
zW((T(gE~TYlxg(Xs$@XNs4Of=%>vx6Cs3SIKov~nZ!v2UB~nWHlAi7poJ7xP+)`a<
z0}UdN?VVS57Jio&<I7U5h<nr?kLL|kqnnj1FHD`r!$*?L5`_B+<8o-*`x4poPR=7$
zjYPQG#k4jIm86!+l4lohm6k|&0(*Mw3svte*xI6E<&s5H^yjBW_9oA7cN31m1}+;a
zZV)CcUM;#NS!qzOh_JRMGL8-V4NCIBmSOnvb>Hqa@6DRl=(}%o;;e3!587<zZFaMK
z3st>dH4f(r6;!{vKZo>k<Y;L0v%MDehw=PObs|oD_L|Tm@`NJ}(rsInq;^$ndj}VH
zcOygJy+B<@vq{r*QsXT$rPv(Z(Q?_Yw=jvweHH;`zY+o?W^gva#!h!pAZFHb*2XnF
zwiR_26qDyB0IEpBxE{EETjx%U%ReJ}$%i8%<Y|Db@L7-;IM#_=tHrF!#$Cn6%044e
z<gKppZ{NSkyWrymd}JWUrA%&R8u)}8YHcnkYdVhze#0^XiP}cx)wZOyUc|XwOif9U
z(4)yKNdCfMXxi;hc1os6w~yqyBWd0rD?;}`&~v^F=~g9kr{MKNklWZ+K6yp$s03u|
zJdcScDw|ma@T&o}gTwJrBBgIuW?~6D%Fjog*OZ5Q#FH~Wm4$E^5+r>F^hT|bDV4A(
z?{xm-Ul?L}>6^j&A}6V9F&1<bDEtme>jl8o9!_WE?F71h>#vqbLWYFP)MYNvC+D#D
zif1459l|*nRHsgf=xL6!h(%`06phr-H!P-=??Fom-UO66ihMi2p%wtol`l7oxX9E&
z5~2>%r2a>dV5JvtY4Ty5tEM}$B?uN*->z2nOfnqK4Q;#v=RAxR%u;vMcR%0|xB0=)
z`D}F-KDP&=86fc1f!?$lS|2aa1b=x&{cx5j>o1lxfAjYjt^FV<JshBtD(A+1UseRU
z2+k>F(c++h@eK~Zl>~D*?-Mg+1WO~vU5gu5^*W!z(I~kvx2T@#I3b!SLb81o@IbWJ
zBn60!z#z~W?&xjh6!<yjcvyXBb2w4_u@~$v1&Sv0IEh*O#<2e{2i(Ru)mlJFxZN18
zw5D}IVe``*HOL@cQ)*YBEb>Ky-GumgF5_&KIS4%ep9uYA2((=Dq}g^4Egi=dg5Pl9
z?!piiKfokR(6t)LBSB`a$PIlh`vx^!%5Yj1Y?qKQoB-ZTkul@wZ-1UAxeDgmsWcde
zUb0aTRHraCPi3kV9ESYAYhVa~X8`((Ep}31<v$+h?%EVgAwd|f;&GIFTcmpwwncoS
z!82#F%b^2<AM11xpW{LHB|6PIA#;fxGyq30qs@XWEeXNo$rq`5*=$*SZ@NGDqdo8-
zghzCk_m0c5qHX7Xf<UhQqgQN%w=&|!o<Y%{fcUh=4u?gym`%!5b5}hp%_RDR(MAo}
zw3(}=t<nwbuWz@NyqXrL2JAOG5q_l9n_`viq%|jy<%zamkXrx=H80@i7ZN?EEerw<
zN-n2dE|SaO{UhhGEK{qr;u#brbp^*sLcT$!GRre~7kXqPzhO9Wl2nUr$5OMpI9~d!
zo?1JnNuFjLpJjg>*+SivC{0NEip!BK0;jg{$qyg_lbc|yI~Hw_9S9zsuWVi)(p?l<
z8w)gCk3{$P5KCE8x}oOdbTX<^Pz1Dxp1VDZ*&-*^=>W8*T!<LvrobVJMk2#P_u!EF
z=ZOb7hwjEgTb4My`l$?Obc3_A^IdO|UC!u|`+ODc;<(@tuM(`fB8!u{C)Ot{O6B>f
z!{suVC7-8AL_nqRi#h%I4KFO8JUibQJh9gH?Usrx;A&LirAuPGNfuD(G7DFbHaxg;
zWkSxiay7O^PMKbz!NTeLfIQ$?n&Au1fa=2Z7So2WZ__wX-@<<?=S)s@YZY;jc>ii4
z<3opnL=id&xH%_g62R4Zu#jYqNdlB2F)maCKL$4!`^L4t2Bf9R$&p22H9*NthR!7L
zuQ4bJYkDD_2FD#?x6YH=Ev_Kcc8jPs&w?oy&go&Wn*Sm&*p-$79vv(%u0I<VMfsSs
zLMJCBfn|HJsrxh8rBKFGrX9?vN%})}o91#CjN)5G8$3i1V!^&*Jr^9j$wd8Lx?Tb<
z!R!+IyXaOGwyPgM3<zhr!QR)CA=`{F9-J}Kc|hjt_j4(e6d?H2;KaAbBkmtO>&8+Z
zL4_Mz%nGLs{qSH}8a8m`&NBdmLYIIPFAf`<x`xr|cpdjsIZFuN_IoplTGvhqyYmQ}
zZ(c$3TsaU&EYaDYmjGS7rtW65RuW`f2+W*u!aWd^0j`RMh~gapbEjW`Ji=iME!rGe
z@(vn|P2VH}fyBUFNRv8FbACm14YeJakMxdG{XA69W#mrFip#TG>G|*+SuMVTle;<Z
z)yvDv>+$yaI`4U;Yy(_hv#os<H}eC(y>;^`qm@zqz)k)@1Lf%np&aB@_~G%E!w@AM
z%SyQ~&koXlbSr+4;PPlzaeQ092LK|JgU~>cY`p;xSOA7;VL&SPgn9s_kl;!JqxGT%
zXo1JNfv0Asv*^~+*V@`U%I)L^v%k=RwJZRbW(p7(1nBlu3!i>uH8y_w_DJ!2R99`}
z6mxP9)mI2_=;+g#;IHca-<yI^ZTn5x&wAVO^Thwpo-9ETk)OM*nEZd*Z>!b%Z2t?S
zMjifC=djzH#rrtR1!gUNhUH={+z>T2mQTvHFGdEM*g%c)e#0%S7+VAa3dNEpQJArp
zmBAj@J*6r%YBR3sD4doQ<{y9N-JG?#74mTOSs|Zg$351w5qp-;d6U!<fh(%!`tegL
zVUzI?%egXMp<$APLL<q-UeaJH#f#4Q+K4L2h-t!9poOX?VM}Ks5;w8Ll_?%P`z$o9
znPAVwRE%jDj#+e2qI;x+l?3}Nw1>WbPxc`IO_^Mz@2VfnQ<hUt3z65CHL)+DCvc5Z
zfgik&pNU?%v~uOiu00uaRI<Y&D)>SR0r`2uTp+YAmRPAF$w4KTQL>^$I@?$>WbcE-
z$dcpwwLLiR?u#36vb@lL(i$dGTWf&9OVipv_w^D<sBY(Rm2t{SbrpY<CS;l1gQ9|b
zWhQtfpEJ%w>WAj1MC8$ht8VwYtkVVkTa!c2?zobaFe`cCtn7@h#+(ku<grRK*GU#$
zN*O+si1u%SW<Hg}Wr@OxBneM}z_t=<<}qgDDU1Kq^<gSTmI-MI&px6617SIr!hpO^
zWAu75;1$LtAbERu9w9wO@}aZdeh;99^{MJi{nRW`m=4)VJqJX1daRPk<tpuk^Whoy
z^#L~}jDBt`7EMSZs%+cQ8-%v(On9%5kv_R*!kY9MnW|`NJg@VKJ*SX<!;xz}2E6{a
z7;5`21;=s{n7+B(-YUp6VUCk!;!Cl8IDN~xz^Mo-EH80*W#Bf?G&{_1>C2--Uv@pP
zx{t5DLa%kYlkYaTwi9#Q$v2lEItia#bJq7iQEUbb9{CJj&z{eu**q}%zh|Qur+(`4
zcFi^Z!mtF;l|bDRi5X?Igon7iif)dAAL1bumePB3-6M?ntYh738e^i$_u^cC=p9Qs
zmaHMZpPldS7<~DcI|`u!r=!P_wPmlNz~0K#xx!_VG-PV&7Mv<h*%TC8^oNY!UP)%R
zT{hs51$lw`2t9Fp%qkbv#W_Mx<@+5j73q+6BkS^@qgoQ*qqa4F%GPB*hzrO9#kY#q
z#GDBk#Fy>_TXg>ltDLfI&8WsLdGqmVy$-AhX^bh4hg|tTjJ;!*rR&zLn|4;(wry3~
zwr$(CZQHhOR@z3TZJ(UGowoNrtF?E{^JV;laX-CZ5j{ek;!rU#!Eiok<;a4qzSDAD
zeeOX*fPWs_&4`o3%-IV2wm{!{`bz%8R0pUYbZf|_IuFPJRcud2q4q|<ZY@Oe&AMR~
zOkR}M@`SByxg^XGnbqnTe3nQI<o!=`$dZ!1mf3Wo1oM^=<BZJ5u;7@`&=p~yR+uqp
zuT_EBUN7+SOS?sIqEjF|S)8apofc(q6vL|DOomz{4>|T~dnkk-erW146jqJp!CU`x
z!?GA2anuJe@#&Dz$dh^@S>w_hLzeHWr{I{>Q8B7)d9kl|+v~}TDzL8QBb^yUHu6tV
zEDZSo?A*$1T;bIXhyyL3H!)>Hp;F~T)tgZ5?8^*S&pF^9JZ1jasvxS_f~>%V!6p9&
z-~p8TO@mSc=P9OsBbZh}9=+T_Q@)=r=g0@YNhC^w981~-gWu38@^bfo`mABf5%sAb
zTFXR04a~<4k~A_iWe4|Oy>MT2i-3!BLzJgxR~W=D83tL}qM;?f{zJoJK(aft_<0MB
ze%`|W-X$q5#PV-XV6)23KZk!l&$<ljp8hDseF<kawZaAj8-(&@el<0+$>K1#+4V#l
z6qBEiY%YiiDJ{=}t=@SvZrt~;nYN_u63S9z$^&Mb!D~0H#D^}Mmi?D)*FHec3!YhG
zHup>3n2M8kkE*ogH#MT6KBs(}Zzu5BH~|_#_^y6TWeN%yoj77;;(CeWV-6(K2zz(>
zti75tDM5X*S|Wsz7+Muc;)X-7v{%iEfHubSH`PWALXb;02!(8fQ3kp;L)8<6Nt*#y
z2<)$(_GV~ozQfpB>qIQDt?1Q0fw2fzIIVY?%dDC=oG=!ro#8yJ{YE@(r8V{eG__L*
zlUUr3JG<rIg>Gl5+>f$uXR6$fx;GC+ZXdZPr@f-G-?pca+j(R!@(&;+JpGV7{K7v4
zGIK~>qO!08Yt9FD92!zrDv7UEzi}sYiZl3&;L4RXr5A!k={nG!Hc9#NH{LOpHv=ZD
zGS*t)mdxJtu5=M<=7!EMXZ`)9SE&m1N2BsJ!5DTJ4a3*ndg)Rf0L}xA!ODh9-FD%M
z0z_cwDN@Zg^PB5MgCH*$jp*}bVWc8xjS8D=vu_VMwQ6un_bxn~fmKy?=xfmf6%C&Q
z4gug5d`3;MNHYoP*yuZRWi)ZEW46|~`&Ro4^{AV<36(58_&iij+T;bwct)XAoUTp)
zmthzWW{z6vIQsn*)MfMZQo?~5R8G0SVlI<@dp$KBdsr5vYs!FrFU*DTMeZ^1k#j~`
zm8k2KC<LitQEK0XLHX;mNMfuT+K)wIlcawPBFTvwqx2KWAiEXa9w83Dbg7W<@i&eo
zNj9b<8RiUAs8dO-1^B8@T!D6x%hgbplv5}uBfGH=Z(1zxSRW|@HhJ_WpHILBCRS`^
z^eB?kE~yxUL7$vS6w9vvad)-bG_=zQ(a(Uwozns)l}``L2IIa6vPCMXpUh1w>t-!Y
z-D~X}tuLJ>`dGw<Hz{OwFr$8IF&s#q2fVe<VY8WHiLA0SpyoyRTX|EB;n!o)YREW3
zNfn-87i^~>G-XNKMk6%P<7mi0l;4b{Un&-71?OxCox(QQNUMjP#k+U;Qsp^EaouA=
zyks@VeAWrn2BG>KiQ$DMb3J&pK_tRtq%2TjN5~l6th)4>TQ(-KrRsdiL*-km^Tnnl
z@YODnSCaswxpFHig{qH*kAx!^CU@Pgzho_Xzqaza@50y_vXm7!yn^7w>+EaJ-*e_1
zQ)%-EixNVgMLYMY?5>o5jf<Lio{2(0l#I(vIVDiLaGLeVxhiJEK7AYAt|hZ4Q@JBg
zMn7d$z?|Yh4nn;N2n=nK=5vRVaR;$eM;-%1Qoyrg3=(h4KZwDL9D`@)H4r%Q(dTFg
zyCh>3z+^KBDu^LW{kYH<%Oyi1<3UG{Rum>LWTz-uP4j5TI&coJ#lePW&WRD+XbcfN
zT_z=Jv#$4i>-;zA1X+v*F-0vi<InN&`)7}~7kyLmcFwWsOr&QMQYVs4fR=DN$$y&c
zvFQel>wcIe?~fSI^Iy@=|JH2&m($+ZMBmx!$8m3NYV7EwYxD0tjsGyr_5YV)roxke
zDNuy6@)rzQS1ItNDIEo+JnGq6x>SGq-Cc88VhJp%$Pf3M98dpDcebB$r&0BxK<>+-
z<2RC1Y9G!m8Qw9emDpR9gRsveJjOB0)k#ykVB`SS098{cuG{#`aY*VNSyHCv35;O2
zMTo_J;IEv6C)OJxJ1Hr_V2T`WB)TUJv1=;u+}dg!YbYa}wsRwRMo!IgrclS7238CD
zRK>aKZY9{uQPiAJe{X`10J6iz%x}Q72wS@QWWkb-6InHt6C~@VDgZP)l>kngy6H9d
zRWAuRgkoG2Qvt=vqj<m+pbeKsrXjzHWpz>WyBWrfG{#g$Wx|vcsb<9diM(Z834v%u
zoiEkLD*_Ev($aq#;EF~2a}Vi-6O#-4?Mpd-qmF+k&2xUuNKZN5nBBCFy*rPx8BEFy
zC>>dc-xk0U(3<A#7vjIsM`C%%3UhpR$QhnZMsX<<j=;Asv-N;q1_I@%;1*hUP(12^
zgGDQ;z#AY`AAv;{Oy}OmT27;2yBpFWmyX<oq6z1+u6jb1)Y4PY1SzSB2Ndur{fd^o
zz#g*4p3TVG!wbo+;iXBjsoQf2Q}gFfp!65}W`2C;Aa9H+Sa8V-sTcKIQc>io7sj%L
zc5X|{@q;L41H~UkOus6xCRyIIxoaW%jG2`C!-a)_`uLh(B7cJeH*~JA{<f_22JWU9
z{+&9xCdY>9rfRB3fEh2jkJHnSL7lE?*;0e*SXElAgvorjHzLoJqlX$0hVFvs)V7e-
zVPEW6=t-{}jVA&6LRO1cMTY3EmKaa&`-=*ikWy$2Q8H&a3ONO-gM;1;sy59mBXUa|
zozK&_j)mZ5l^t)XdycAgB=$bgKGAdT^8D_-=u=8)eP@%nV0|10)k<@YMcrlC3-JHl
zd*=Dq9z9_J05(Vf0LcF9-{c=cYNG4t_^*g``o}-M*@o~{qubxX*J$~&>~ggZ7mn0t
z-x6*gW4-!YE1*Qpj-;kogQ|k?=&@zxd)qXmNT_-x^+6%;k%Xf=ZqPl~RK!R5oLXGx
zNWvs^|KnwlS$sQ7XNr+$(l|L?YrCAsry&hP@d~nodE$w!^)}j<N%L&V7Frflxm?p4
z+I-2Xr)8pTrK!^*_12P!7{#_}SmAWJ12kFVwqM+dNzz%loLPgx77cod+vgZ}(K5?W
zD!)=a-aX`Y;IMl7p#pIy{3otj0}h48iAbSat70O;SaZFAHkrJl$%@IC6Gg|Dv$w75
zcef1Ut>?D__Nj()UMDZz1F>)SCG6LHCJ33*2xBN-3EMT@cEpy<YoVvM(Lt)3(%BiS
z$~?r1fosp`=2ZiWn|Q?1=l+Iuq`5PX8tO)!=J{AMXwXi_OT2q1m;OGT&HV_D4Kozf
z_!JQbtM|yY!R3wdAu<sJCs+F`xr^d^9eCoJSi<yhza&^DE{)fPa_sT~gDiW7;qn=e
zsMDO;@~?DNtByRhs#(Fo(OZo1tL&T0hquGChr7QI``o92uFR;>4c3Yn`i>~vn$*eD
z&a4P*?)o5KV)f(_m6$&56OqiaFQ*mp&e5aMHkDBnT7B-}P@lt!no3a6ja2}N39Z-E
z67IDdCZcNDvkeQMk>Uxvx_}B{WyKRgH9=LJF62Y&6=LHR1uQ~TcA9MKXG*CC%B$SB
zvamr3801E~b#)P8Y2obJAO+ieay;Uy=2S`b4mzl$su=Qn2gS`6>Y5r2Nnuiz@5Z}w
z2&qo{1!nNM#C(*K2}bH}>f+*Za>@L}7coK(3UN4R%ZK!W{l{a=XT?pR2pVM7{l7Wr
zr(Na}4neShhD8Wc_#6boi$gjgXY?C1BAcu+Co~1UiSJn?`J2YPxpJ{&!J44|RtV4s
zfCv$xQa$QrucBxYP8-X2_fb*npcqqJbhsphSJ8h-Z9`tmOShX0vNkX_+guR0hjTM#
zjUI;r{{-%or3#dk2V}Eja23!eD$gKJL5|bzy0r?0kymv^6TL->luu>vhYjvgsW-%8
zZZuKs3)RO<6n<KmiYOp&35ttr?d6ear2}#tH)q%e>)h<w#{8`nFJTj1eOO13W_|H-
zOzL@BwB<Sr+bWTJu5gW~NqQb@RZ!=c`%9@lQBk&mh&fSU7BEpE#fp(g5$R5p*{s%t
z(iw~a^%shtSUZ)yDH6$U^7Mg4RNGZl{b1Hqqjfpmuq^@?ch}w#j(=Zyyml}&E&rrA
zFZCv>r2(=rL;$eI$K}d0SSxNIPk8KH=kAvvXHgz5ERhX%L)6XMyZq)zC{ega#w4n^
zK~0=;f`Yi#_w7wP*NN&O6zC1)_=n|0(G89&TA-P1wQ_M)^mCd{z@aL!SWb{J*3qB^
zH27#i`#qoR@6*;es_-gfJc2DkBOcwaB)Qztum*+BsBd!XkPfKWdbrv(W?B=loaQ}w
zl*5lui-()M8kJaKD6V^ZF(ax}Mhbt156Y<GKo;dVVtS@K@vL_A$Y8Khsv%^BvI|B8
zR1q>8KuBFjI{|R$)-}`DZZ#ULtT+MAUkN#Z)@{I}=N%`_o9!TnaxTS6$xhf9S$scG
z?_)ZC33&&VCHNCkBILx1C08k-#)2Q4WMNZMWaEJHK8@m1VyvYK19CyNH2SVZ{pdCn
zzLN__y#598*js;BOrqr;CtH@X(WK9g(a6p3&j_G4Ius}Xw$m>Ng+K1CGlEe=P0p~Y
zCe&kE4}8S*8<LX=!EM}9P`bdL)>VEKgndL(kw6wx1;Qt?Lkyvi!K4MKQ0=PY-PD>h
z12L2>+@uj8nkG@jafgIwo-)3(8Ndx3)tT}~8j2bRn(G64p_r6ViyT(=q8c#+V{%V3
zdBrA>N^ACfL7tQ~geJ0n-CBfm$w_}!)S`$nEd96q#`Q7U;Gy<X6bzuMZ-%FlrL~S1
z5bgMQ;2!|2)3UUM*ZbC3<q}_n7RN(_Eoo=M9J4mddRuoP=O&@{>rQ3G<_p9(NR%yB
zEeUHZlTo2_8$8pJnf?;99zG#cQ)^9zbtIJwu-b6i{U%z9V*(DppWqp2r^l6pfJZt!
zQrraG#GsF1R9Pyh4weC=EYAWx92pA+I(jM1j9goK_<M!~4Gq7qkL`yKvwJ$DOnVLe
z0Ji8ZwlQ~{ir^uMs|<o+&U~^?QCKjrea@oa9WZS9uwhi#8NmoPp0i#OW$X&(0>CCp
z=a~6UORj(3`6iAIN}4P=tUrFt35lWkK%ZOTSp$3Ly}tpr-xEnzlzXWh{)S1pQG_87
zyk1O!5{j3&PYV)&qgWy)SiXcEzdA+I8aWWH#XJfq**>CAdQ83m1doO$veW=s`lt@6
zjYa~)Kg?&=Wm%R%_QmkBIn*E6F4u+=FitlW!pdeXEG`QdXU2tAO%t9b$8)5MdC(SO
zNwFZ3`TMREFP2v;M|!+|&)=^5GqdsB&u}TQXv;G&3O9~}yD_D8!hAv>e7jS@@tWuG
zJfdH2hYm>;!%Wev(<Jl_VA`F;oJzTPx`R~bb1jK%CPs}X``nAS#HT+R2?lCAXBE_&
zH<(;Gm<pL?x7HX|?>2QX@R;`l<<EY4aOcq}f;8rn>+onS-f**R;?U93E7t@g3a;G5
z)>f&0vNwD!5X#*#!caDc^7N*bJ~J-dm^vT}awH40vE!hL0f;E%s3Hj<pNnSLLu1-Z
zZ&sUcABn6sszH$C?O8JW_vwWd^;bH?+fS*lmkR?Us(Z&85*Jy6hl!w@u-}1Wv!K(7
zsfRPmfi;uWTy#2(MK5oa99%FC&iqzyR+KG^ytcSm_PWh6ddQFiJP@}dz)e_8j#rx-
zS2UtYRb_6n8ft4h*)h;kFrI>uvn9JG1Y$}eOXV-kSb5>yG)sO+2n~@K4a!q~&vIv;
z)KeU3b4)0UeQF_0iu46kWA@sWY_#^~<~98ha+XII`}LEN`s1HQN3@j%JrF$4emfy+
z>KL8yz*1>O5*k;OtcK1f{rk*l#K!qjf0`-oY1vRr?q5;(B16ln_AS$fWAkJ%X5?Lv
z=T4}>FLrnR9~ByAre<tX4WwzOTMr@^k<V;wsqdkQfq(p20@R3Z5x<=i2(jFV96nv&
zwRKjJlF)%#i#Ro=JkCJi9j!X=CBvYe$BA45`9M3n-rS#7$yo$x94vg-c#EVDRj-rr
znjr?uIi!HSdJKa)jo=qLhR~fwH*05`qSqPZ9Yls{0tK1xvce66c2>;FP{r|z-eX{@
z9U}1you=KfGg?nT1XA%8Hzsgf5H5v62Kubgrz4ayEKxdKTN6ImVYKiar(tjK)&FdL
z8)<BOo1eL4#456N_FoThqU)tpj4;9rGk}RG5am={zW}LL9>qvn`~K$1-1h3onxQSl
zBm90nLSw*pT|<7xe=OASrD|qYJ;e#epUd1TXGx8uJHj&hEyL>9lr!6!4508SoK-Tp
zKeH#O`=a&Zy>B5avE6|VK!{o*r^^&i9sRRZaj$U!<~biUmRI%JCc(Lc^YM*3R!ie=
z@H@`>ut%>g%~b{i@(+<S8ZSY=9J+9YJ<`G43>>f5_h(FPot~{~mwI7I$H}j)P^?K9
zUW}n!XtNCo>nH#WdnQR?P-p~|Km|KfjO+Hs4skfwV5-}xs-jE+p2Cnm5_DYa_m-V(
zVe4tFSI7s-skee;{WPBZM|l=kNt4})C@mexv)2j686CGv?pofMn6QY76&joy=OZ4d
z)|@l8m&Mkb{Slkk$XDC2w_I}%U{$>;k=#f^G{!{&>c{SL%yG3$sOT;A6`6oktfd9s
z4-c{XrrE&q1-7wnNCBV^_&;#JhK6Hv<Edoi1mtmh8_zYm`D#4t-krnA^IUTUY1fJl
z*uXxe-(L#ZRC_8ET0?w3h7*l?-eY}%%IN^e0)Bnd>@pJ{#4n`QqkQ&V&NTHH>KqqW
zU7>#i2yLm9F(Dg4eSviyvIys(zTBJb@75|o<apcU$dhcjsqt(Ke6n_ay9nE|ct0D+
zE7<G=MKh$p@VsZ{Zflc`n=g4Ml!(K^3IByUlLyj)?0rZ?|J6{B6*udaWRQPYlzmp>
zzmj~;lOv{Bcty%q#vNfI_F){(CLDR%0f`ihVBtq{QH~~F(s67fmy0rTlGNMO_CzyM
za<&b7w{J?7BeO2VGn-eMH~2R~3L3$JQ(D@F3`E<R#=$8P0DP=!3w-TX2u4Kc%dzME
z5~(gPlWTnE9@aA+YpS_5huVB&&^VAbn=ByV?|C`Y;3i1(kGSPF>;33b@gUf>@8A16
zyO;<jll4k|T{!jDUPWbjRT#{6G(LP(TDjnQZJTf?v~nJzsYjd?c%6fX{S|&p)<2dS
z{e>kx6r<U<1h#sL4%S@&E22d)BJsd~UL~e13~Y)!|I5cQ->DWJ&aLeL?TXKGKhY-L
zJfjS-gjA=1QOaNYmd{sV)~kiBq;!vB)=BOUjjv3eE!}w$M6U>dglQ?+!u@&q_k|zl
z94m7nO_X(n`+1Ks^8@VdMOfzz+WULulEuESsaZkhhIgy!&LqS5WkZqpY-LmPc<=v}
zGw{!W@Lm+K7~)UPK;jPq!T+zjo#FrKb^RZXf}NG*Z5QZ&Fm5e-za*9QDQgh{X_}IN
zpG0wa2E<(HnEmF+?rQvH)!~j~s?k=+Zn4FT>yG#HmZ`6q_3&zFpfkSJf*4X?%e-4{
zWJqSr`G6!s5{s)XLv>15N67S@=0F;R9b~-|KTgsvzra=7Esg7Z*jHBOCEF>hrg2oi
zrE$;|CFFJKFKC2<x38=>it+s|i_F@2SVQ+}ZZl=hD-Sv8N)r3~Z)=D~_T0fhrvm~+
zunY=aQz<jyVzfRUrMtYSDn5)=@0h)(txIVT!CJK904%d?Z@IDM4Uq!YzkYZkVyG6l
zet~WxMIwg^5>=-X)j?PM8wd7QgZ+|=4*>Qu@^}nS^<=nR3wuBUG&}<<3LkfVg?z=_
zbj?*^DHq_R#USP(_)a?MM3W892*<oo2obk>tl-!w1AheObSV*$SGEy#juEKU_#W$c
z*igoHy7<k*Ooo9Qe$^o5J0b?(XP3$Iq?8kdKO2Bo{G4f&Jkn3@Z~mbRgCykIr1({v
z?90F-9jv%tbTOOWub#u|JW4B%tWT9?duUh!CqP2LOVYUqpbAA6jIOqH1Fx@to&*`&
zj*OnNrU>!~y1hq73W4IWf0tHFgSR1lA<_VDiUn1i`NvL9Lqt|b22ri1F{%FX{Y(TU
zOtDH;{kJDmZ*QMkR_y|va7t-s5&hjm?Tvg$C6FeHv2NKJL!e&{%Iq=y{Cyw$d?dsQ
zlqyN?8}f!zcf_;soi_*iVHVFTXto$wI+XmIfL*mDt&jX)_nBHM!p`r>-(<`jwH0$q
z6x(`2!RIHO9UcngGOh1hXOk;g^{Xx2ildx;(@T#u)t_2T&QD~&DeH#1)k1UBEMU1N
z9_t3rcX4OG$Quw}q~cDcNw(_7ML~FQ`=bJCONLbMA@ppy%-rBcz!*8URj~b+!@$rQ
zV1;n;I#j4)QZb^D&j8&A(%?@jRvB;hzM!&#_IM?*;^YpD5=rQXyDqcPX>IH(E<(UT
zt^wf6yl@20uTdixPLZW+b&R&`8J4L_I0`tK-*Sxp$@KUSj-mn8N8kwt0Pq6;uN*~2
z*T9C+z})6vl@nEI+k^iV=mCGKf7xgMTjOEY1eUnGlV!IVn2Vy0EHK3^vsws>5XJUs
z<r!9dydgnP5t%0)*))X7c6(|T4?2<Y$(~HuW89Q2cQk5iM#a**S)~L1bhi%6PJ^=Q
zKtb1-QDSb}RwI<_wOOZx@iye99JR01Lp@2NbI_uh!lJuNP6w_R{;#Q*;e-}@4*Dmt
zWMx!K^z|fN<LjqGgHhCXo>PKy`Qb`Q-1_>3S9NG7f{b1c8{nhfhym{_v**W@?69Be
zdPQ{#g{(`#Vd>0+@8t>ps%sf+R{~S|qESAo^-Uxxrw3~pzxixg(tN+bMmXmE_n}C3
zrSG*^oEhWhW5AVpB>r@5_>dhCp2s5sC_+#nUX2wb_=uNiTl|w!z)e;zV(#`+{$H)@
z=W(Zx6gw_J`~$A^1t4zvwr8I_qDo&Zx@*+L_t0^#Wy&cX-W0#a%}Zi5OUs4{@h{>A
z35UkL))fPx7FgZN%k;&c?n6~LB+jGdbOntXY*B_S9WEx!5WF1Kuu6J=HsrdRyQQ}^
z@eQIx@2izI|071Wqx+jS?LLNh_4{u(@H8<h<#2qwG3MXaTQO4eGfFjO*t)8j(bVdT
zUVVU5%IOCa4lijyU)=%AZ0eXDri0B=Ma@8aH{&JFsl%WtHi#MB0iana#^w@;LhBWX
z>Ct{cXJ<v_^eP;W#1u~L$+HXE0OU#V$RE!#ZZK9sl6p8{0l<99Mud=Z{fn0@S?I&?
zW{|zB7xtVue6o|?l4!rkib0~x6Z=YPAG(jwh5i=8lX%G#yZHT%9Acknmx(P%(M3{c
z$8!_|(}sX!I?^KDxP@9_=i558b2Y>H45NBhrd&=3;i}uz5LkvRt}pRKZvtgj`UO5N
z(w)M|Kmobb1dIliE{Dlj^zLdTJ6WB_Bj~e&P6d4J);8)`l7!WVtxgn&w@2f{{tkbF
zBJ6!xMY55EIDj!r<8FLv<indole&PC{qRPxzxw{R8QvQ&pzlum&}a)o=wI;-GNL9d
zZ!3}5x&=g{#erEze@X}uZ5oYm7k}+axpu1sWu2)8o+K>G&Tm{kPXquA?+2ByS%gC=
z;;FXbHS;Pd(ja(CxKmo%x?+h#j*${{>`DP?zZ@UJQ^?e3=#cahdG<`;^nufW<)biq
z9{D+>i%7^9vdiO*(=cdvniv$Se#l4~+rmQsw8ohp3K9ajK;M#1<lRGu(t&f@%zw#f
z-=}jIt}uTXhWBFD#R6pcdmp~NyTqIYNFvi<Q3+nUWF(i}J_FUsZyk&^K1)`wOfZD@
zSXV_w-Sj*KQ|m>~vZ~zh6>?S&7N1|K-<Puxc=^nf-xZ$L!ipeS#UxYJBe##pt~asR
zh&UTd2}xSAnSZ69TcfgW)bI9?11S7C>-ydrh<*s30H#=yFgLYzQ$ls6`AuV`xu#)i
zboqK01LJevXF=hN0c8sg3v~k!lfONAtf#z%3&_i~fmx%l99c8$jg(`6I9RE`!BO~6
z&?A%J=(N``8?F1@OGj9Zi=s7==En!b=>&|F(>aF>s;Qc5jgtsHY$D+8FY$ZlNQofL
z5HNcWIpYcz_pZRfzXXlwyxg=VAAd4W58T{8k|1fmn*F~5r1W=-Lqq%LR?V?2vY^EB
zJ%iLg@A~JLBU*Rg0I-xB5;FvNJBv~Su3?qsjU-Ag=r^($HVeiYpQV}h)?85MFBo8~
zw+yAO8b-9YaZ%>97ODz39L|z`#yDR^?$$pcRF@`|tmTvQ73eU_PV6y5z{Sh}V@{hc
zx(gEGM`goR@T^=%0$Wp^{HqZ?9AF2W^Yz~(txMmwNkvOHT0L<+10fIPQel<6_fSHg
zqLM}lnJqoEUl0!$&TkFs*Ckr-0=n_u3xVrX4;XsWX^*3%85&NkZZd$pgF>0@K2Yb`
zCfANE7(LN_G3iuhs%%Uj$LBPWb}}Zf{yyuXCd&G9)4P~P94lD6#^`EmX=Q0^YkggC
zjbr<|-!AVy7r#PZWBVw!<MdD1##Mn*sPzEY93}o)RU&zbjAEzC4w$SlCV&>rZ_W|w
zPyC9zrz;t-Ji>_T^A(l+#AK<HcPkxA#S0Tm<P<z2y_@waj5hO+`$b=fj~EoV5`}i3
zQj*BUoiW1g(^x{OPpPa#aZdTLgBT59cbP?XLHCcC=7auy3n$&q1IKyH5VJRPlrF2K
z!144S=TCq_oYR#*-?k%!e@g|H6;zb_DN?X8axk{n{r}<ruU50RC1m?2{gR<TS0E{_
zs9R+zSx`b@U2q==bpGi#LE|~>70px5C2W3g4^xY)`Zi+rq8CK}w!81&^ffPXr-{|j
z;@wkN?oFRFCf1JJm}8Z)#jsjOl4Z0y&xSZoT<JI8scTc;KTJeJ!X(FkslFK522eHB
z8U6%&I85>Y=9I8GHc&_<RocjXfd%(oVF+j1oyOvuiHN^wKsEYTDTODRRsJ%3d(~&o
z`Bf6t@2WuJo(^?#CO~d^PnEq|(0H+@y+E6FE$Z#UhThK+oRMb(KAwQZPUpsyGWz8N
zc6>+^$mUbz;O9PGjCiR#%kIr9cCN0(jT4Jo;?2%WN4^@#BP+eH(-mV%voI)-)&2Sq
zj){ZN^&^+R770PMtH}DnU3vHx<&7?O#pjrWpy-BgW%1s3A&*Y0m~ouF@h5l1bR%CE
zUii|!`)m;j_+H9hlLg*d(R=7wwIH*E?E!>XgLF|vH}s)wI)CzjtpT4)rSC@j%}Z28
zYeKbLMt9aMc0+RpjgG^U18^6{x?y@kdO{R-o$u@NG{p^Q>?dX^ulmU;Mex^5pvd9F
z-vDt6_M>an0tfz8jYIuH5h<)tGU}SbdErc$?WA+k)QES{a~ViR+36DiKt<0Q84MlW
zs~a8bA2=~hM<i?)95wnYT+DC%zA5}@B}gDuGCdJ6f94Q>eh6J`X~zOI^~_IMcOlco
z9^!)^L0{FILdYEgW6(y2=#hJ(91l&#*U`cEAeYT1z61rkS&6-2zQ8&Q{x^S>6CqmA
zIICNtq72A3V5{PH^QRh7RM-577vU}UqQ$7@Z30Am0%a6U1mSiN19@#?5%V%M#U=Vu
z&>+9EZB1>f^A>cQIGlB#ZOg!tb}D8MnjV_dmh-1+ER<~Cwk#A(ox}<D0MVX%jF_7F
z1yJh{Q#B&LgBg&@NzM?Vuwu&~Skd9afzz@j1f7t`zLxbzILR#$J(L{mi4iE<Npq-f
zUx?DYcn;pg+b_~?J{LHG=ojOYDq^jCFDI0?Tez#^pYCOmBiGq;`Qrs-tGL#~_NJ;5
z^v*@&99G6Yriep&K+($99V1Vkk);|z7Pfv08-tw*=^IS8dfWXHLF8Ub1NMf;B3{od
z?!MesL8Gt1&oc43B8X9|!_%}rQq^~tO%<QgVHriW;_n(yK?hH#roWoMCHhmu39F_j
zxOcShqqT97)(ilYvBdG^4xgHRpNcfe-qef9MjVdZ?Xud)Jw`1Yozm>n4IN?xE5~b`
zbp~H-NKu2asaZV@?Z~!lM^VDtf1NPjmSnWmLH!vVwL!S2&p=R!W4Lf>(KIUcQf!7Y
zFb=M&A1L`|&x}4`lw54SM2^+0L8pt*BCTJYFHrHAO%cwIhQ1hGFpb$v6(D6l8l2aQ
zP!?hKq~U037ohn=IJU?%#T7Rhyk`=~zo}@GB&gdx_~pVa@I;7bOt15f-cI?l&m_S;
zKCRd;fFrufOkcn%FKFa`9i^fpWQxM(v}&tHb2~6T2Q|ELHg7^yPL(o)a$P%M6C3e?
zm&3ws21fLkqIBF#gCbt8Gw-$diCIzn*^KTc{qvQxCHR=M1*MjwOF7-*QDB$FzqF~q
zZNQ`2F{-S9M5;~&JM{XTV3iQ!Td^Q;NjvgR?vEH=54an631`gjkv*be<X46ZfQ=j0
zj-Y0^;Fqt@?aJAhNS}C{_y$xT6-te!2}0&r`D7&ue&rYW8_d0+Ih}sL5|HX``#Qz(
zVyGi=^VxYeH9F%4D{>yD6B5#}>S(6|?|`K`&nVg`p;Et4gp(IEt+Sa1ur_v77E!UR
z=5)Ljdp2rFv)7Q##x@QpR|9|&4YfZI%Bo;+RnL7E5s^0bqT+LEj!4E$;Stn{;SbWs
z&sfw{l)Jw{4@sQCN4nzLov>;ZIeAOW_6;RjC<YRo@X3$|X{9m;t=6vxFYP!DtX8F`
zO6=Y)LS3$bdSA;B^*1+9+ofD%4(NZa$~75ZYK^86?re4%#IrF44R3N5k$QgkUus{T
zewux_GroKtz+i}@VG-q~{Q4&={}$2r6L}l^rr3uQXJGZjx6Z{*v!l2~`4N?hod6IT
z=}_<fLXkcxoX^m_%tDQ&AcR}19|NalKaghgZI{Ufx;t7<gkf*0b}W5ra9-;rdy=V~
z80Z&`tVBUfnZI2%nv%SbM!;TO8;6JVV83^+j_5)9QZc`B`OqyXT5%|KfFG9>mVCBw
zjph#ue&LOdVU<<o|4TVCr{19~a}9@=Fkk=uAM2hh9yj^gkGsVG2d(_OUD#3A(bmw?
z`2Rqb{~_QZS*hO!lL5Z_ol4|1zeoZ#K@g56TnNG<4kA)*o|5d)4fcG*O{Ikm>#N7`
znsyeOQhDF+(%p8uD}5~!(Q(8EYW$umEf$w7YD;>dS(6L7c3zi{9Yej<v@PffZVS(D
z?VelPXd#N>r6_7vnN~lnn0e;(D{`Qyt(eSzM0oSfzQIH6dT-LaWE-pE<AZB>&idX-
zYC~~kbO;Up3o=@!hAqPuI1k01cYNfZtWxP?-<4S|a4K)(Xkgtjq|ds<o<44W<$Ubf
zSV3!db%{x871G$f;=ewDF3)SuVjlMsVyVpL)W)UAS^I<aEfbSz3CDh@`y7l2g-sr{
zQ!U04ggsSVg>Dkp6%9h?#=q#44Hs2hY{4k9q}k#rmf`ZhAc&-$EM+R8S3u(r)iTLx
z1RPXc?eo2$*3~HPTjG#9V`FX=dnwU|c3=mWtQBu>RwFkK*~LyR1Qz0O@`Q?TTu>05
zWHFk&4i=}Sje}Ip+Ejet+We#E5gks0l#4~NhCmxti8HmF&HONdKz$=sCK5DdP<{D?
z-LHiFpe~PbA+GGm)K^w(YKiA2cJD<=(aI?uxK(2~>A0odPxWDFSLuw$j?(~PoAVHd
z^{o)m<*R|riCoTjAbwrFW9F-9j5@Kbs{%2~90!&arcREZnRA5Z7OpAYJoJ*j<3+;)
zc+7g9MTzteu7VPCu=!?8?{lKZEh_-ag-xuplUJA7cev@u_;OdFV;Q!$T4=hp;lhBW
zt^`)r!fPbYf0?eqprZOp-dQQd6Q7U4S2$t-{7RV@e@6{Bm6&}F5E^0$zvBek;^wE*
z%4zmD{Xy(ZDs>0%W<)GuuXSVf-gnw#2~T}-&z%ZXHbKOb-U#WMF)93V`7iq%ppH;<
z&r&Rsi0LK^w?;YAe9q7+>T^*6%1x!rZT(DFYgTG*x*fKkKH4kd@2`@xHt(<{JInFN
zKBWf@VH1u2*E#7wTvGkg@Rt53`&1tN-&l!}v7@fF?a%N3W+ndvo;*^QcEn;s>^@M<
zbEt0;o<nSQQP7!GMoisSPA2RSN^W&fM_~s}h%*5I>q|57`RuWoLZhItPr`Pw^bQ-v
z&YSyudpsXGw7PU4m_ePHoJuZkk?&}3AwYI5Zb+uQ3YaOdf7*IhYni9yjbAzDl?fVi
zZll8aqKY-rGJh3zFSLT0r#ajqV=A|z#nI`j+o>r`tWe{$-LE(#QOsh@)NU53H}-OT
zJ$-WUpc#_#ozp>)y&x7nuVz$KnQ5*Hm?^GT5Z6q0%mP2ZSe2XDNQTxR*R3tsQl@vI
zI1Zk~H8NSYqc7URYEJG?Dv{IKpM~#MF>W-%S3bQ^C<@z$VjZY+_IY!6xPNuHt9=WN
z&qC&#=CWku2%&O3#yyO6ivv%*9nObenMti6ZvkcuzNe^z@+<FCqoth8o1A>MzQDV3
zV(nc>Vc=jd8pM%HAmUCdlYB)Z*#1(UfmPrGG$iSasZ$nmn@jRo)%1*X%=&|*<3uiq
zh^d6o^*lja?;UucjbdD5xIfU7o+m-G63obYR$D)!f&#!i*6iw@e2R=lCuQSIH4Io>
z?ERV78rq-)m-N#+kXli<JJ2<ogiNA)6yh!C6WLZUfvfYl#nGzZ3FnEWh&;arREY}R
z7JWP_x-i2b)#Q$K59HpD5TzOxwkej5r5mN2(QcLV$mE(|ye=2BFM&{{?+S>~OsfE8
z2akp{lLF31<jM)*p<3;T!h+}i`g&t4WXo#wOuYt=u$pKj-%u4{w#<hL^U}RY5L-6k
z!_%Lc+@dsjDLFR>BEKB7pQV)SjacUwROVI0Rz-{7--D%|NK}@h8pYkF=-HTi1rU~p
z!%>-4OhQ=MRq8vh&xbX4B6VzJ7yHLQRqoMp*11$84z6C2;ax_-0l?m-Pw4lhyqXeO
zU-%)@Z%XpH!$1NDS-?*($i)j&c8_{SRc-k;SPXBFMaSS<`SUCvTZ#RH$YE;DkCe2>
z$E<R9J74mhTm;45^ddaEuT-)1`aRd1ri~`a+4sWs(@YSP033e&IT{u=#&rcnwJ$XJ
zv`nbCTI~_#g`9OQQY(RI7>y^oi}gTm@+DPZQi(?R=erB3-`EBqZ6K?f=07uTG#lhs
zNSSluK6hDNVp}?`LMzdM1Xuxk01f4|;gB~aU9E2o%q%VBomD1EmhyGQkwn}QsZCCm
z#+&2~p9<=$|7DC7g+EF;)D5a+5s?AG81xzAbD3BfzTnORg>$>eq<dS3EU04ZU5&yQ
zce+{Qml#EfvX-IRs$#_HWbyz{DY9>clGJyd(u2&aNq(FkxU)C{tQl0ax2((4%0Zbq
zSw&X%DfSvi5f49WBV7z87Z#uDVG1K3@rac!;1LaqPoE|L#xf@p^i;K{3y?@3q3yAC
zPF2>l0t0zFGr6~e6P_vyTt*53Q#FjseyTxmWT&CdxlqQ<Kx?_YY($$(u3Qn>{9_j(
z?4g%tp>*W>f>3Jg&36$x4MTm;xe;@M!?z!A#=5vFO%+}K-{u?6T_G(5&o3@iXgfzB
zw$?*I8VP5bhba3X{>7n%E>!ox){!fl31`i)OL5r|`9Ev?Xpx0=&1(@hR=of$7Fgxy
zL(%8MXQ&2jJYlUI(Y}0|#c2@v%X;MC;o2K~ztkWM;l~|oW91O$%7CP;z|X@cRJdvr
zft^thzm=t{J9w^C{7xhc_q1P!B1(kXGLFrS@*=lm@@`-?R?hGjSZGdJceMCW1qCC<
zXPqeUn#HUw%HgY(%%MV!T91FhK};Ob$+2oL>$h!TRm7b-GjB~__jg2JD!f&wgo@&v
zEZ-M{v02;vrt7uN{Td146t_jP@jEx-vs!&MAHtsVgqAJVAdJX%$?CC=TX?j%Gy6r0
z@qq+chLYG+Di(+!$Kn1CjCK`gG)LAvN=eM*a+aR3^sO<#8wb@WKHZH6MC&mkD<fj%
z-uIi{W*nQDqD^Et0Q>WOdgCu+&>cC86D*&iw!JvoUw))J;-QB26Wu>E@AZYte`yJj
zGT;$;r84^LQBNeSM5bW5iES3uA(ZTOgPn$VEcu-==%V1twV;E+uadhR!QN;0XTkh_
zH+A|kD&{llz0k&350Yvsol$G#(@!cB?>V2I*^=<D461=|wSbdAk8&o!Z$*Z4PM#We
zaR#*Z>~^6_3wwwb<MY|1^c`D-+C2Lfxj1-te9s+}w_j#Llh2pkmqp~1;W>POJ|>DS
z0)ZNc=JqgwMkKjs#<_#FBf0Z*XHS`N6F48LBVZk4`q=tGX%ID+3cQk3;>HZwG4vDM
zk?pn@r8Xf!&_)Y~IHW3Xc?V;sP1iK7lU5ki0m_-(&OHAvDcO*z>cSaAX<Wj>&vWeW
zzRQMh_;UQ6Scn(11G57ox@AjF5UT>LGc#M_cy#}yeeFrg7&D2cvhMebDE3g=z-l~j
zIbeex#5;d?JCEfi+yhR=bF>MnlL#a>t}W;;y7}9<CDWIaZpG=HN%zP-^23TT{#doK
z9A5Rh-m{Tj-`URNMIXO*`=IJCLbb##Q_8EAP;7Ph?ZbjBTk7}AaW%YQ>$XRQ5(nq+
z-@h?&a=VU5SG}CS4!3x;lV>X192Q$=<RjUd2mm7TKGCiYRY@08no#YQo`XjO;&sM>
z-)=iS_FSD*K~eB0HC1FYj@u4VL(HC&GYIO59or@d#no$dS6D5eiymxnQGAzX;A6_b
ziCUbTIdZiAkWSYjYaQuRvJu1wk75Jh`Oj01IJ-T+J(@IPEPt!&oqXImuitmX{FvR0
zZ~e~*Dhpoz18|Mv5gIoB2&FhbLkZ)56-s}qUH&P(`o}45Y-6ZvVx@2Te`b^aVXBW-
z*0w!oh4Egg#lO-?_zBnfwK2G?iO+W5k*993dK&T@BVuZ39eX_P(CzEF@FTvc`noO@
zj72#9I4*SYSiv;PdnVr0wJzryml2hA{`iK4Cr?s7+)4K)u-kvzqPF@1HD?x36(bHu
z1M8w0@NPC;DfA0f&6IMFGVm#j%3a&G!00ELYe$SEf>O|JmW0wW5+efNw<u9U-CZut
zU+LF~opg|j3wwa=_lU_GQ($7s8u{+{Zdibp?e>T*&&iwLO)9<m(4<-CW);T9-;;El
zcHnMsQQenV!9q7cFiFCY345|;%$P|FRWZOMFbkq=LD0^S@po!iwD@?ks~e2Wab(gK
zL=HP>=NP9sKPP;eWT{M4bUXOB6GgSRCv-o`s;0~YtjSp@B3Gvd%Z{#$wj!kzBuq&+
z1z#dR5Cj!Cp>K-qE+Ho!*2L@5*eTaYL9}A*o7hpki$7Uv=#(+GG@%WJa}HKqGUOJg
z4%+V0@FbPN#Gw}*=twZX0LQvh)eo_nwu|N_(RPxvBI*Ps<lReJizte&1y&ZYWTp9C
z=yp`E{h(mI)&Gv;6*uE<DF4>skk(ENKodsdbLzL^^`mXy6D?}dVC@UCOuJ75Gr}4f
z_vHiaM_~!=$(!92t>q?uLhzietWX$0+m3<uT8~*NOXGQ;d_eGZ*%uBr_5UU4mM&@g
zb;q}f2b{MF=D(0z`N(BTN@*xICoDL>D!Jr<T`LrOWlaTqvq$qZ*MV;Rg!A`<*x8tS
zLTjbEe)Q0ICw#`4s9Zm%>iP{M@5_II2no6G&eHnMaWPp$8}6w1PY-3aL)cAuWr*!I
zK8%hTWq7Kn>nC9joH!Tcf=~>}g8(u0H`9YV@bKOfiOwM2{gPx_6rBm8KmU3aF&^IE
zXn;3TA7KdZHpv!Z82ugz)~IUSAajY*&ycqKW`Bd1>n=Xz<?85Y>f~*Pb?TK3*O=^R
z)3wJV-O0rXLv=j~>G8+cD!laLlg%1eGBku2W!4)ttAZ7`*N2UidQbw!yEv}4@2jg&
z&9~P%Xe8E$8RGGX7XL5k;6Qg__h?u>8N$d<P-uqJROWbje-(w<&O=dk<5lT7`23R?
zz5VE1k5SnoaknKDZ1)A$>=uynDCD}-U|$Z9l$ptOx+eh#lAD5{-y(SaEs!VK2cKMW
z^GNd)mC;Qav;)qF0=A9Js>qay58D&kOVy6+*D(?)T&nB2CXF36fnVvcO&n7lT#Y%R
zah-;@CoBY%qyHJSo-Pf}8u0TxJp3^5|6V<!z%L`DYvAtm?+eR6Z4H>B@ZHa~<ZG!U
z0f5*P;8?Xm>ihWm_`q1^vSp{VCY%@@WS{yezPV>Pka(5_c9_#jOO?-O%D3&T3H5(S
z95{l8UpA8Jy}I1iuViqw(dHd5>BSbh0&tPb<{V=6+Ee}lBzXGJ*88YatDdiAFu2t=
zl?4c)r(-rdD)W*W9T9met`CA96PT4kMI#E0(|j~RzuQ2~?ajUpts*U>g7QzqmS5qf
zRGu1i=h%)`uDLXPv|!rmfdsDX>9L3PzM>2`KYs&*T+2%~^Cr4y)R4VeHK)^{tu$~u
z<^9_3Pemx^38*Vw&m6exPzq38g3M|aL7T;Y)<{>NB%&7#2l+_rR|D3tq(&zQaONBG
z3a^_$)6GBp)pT1YxVQ^X!s4yeV^k(hKB3|jJp-sr>>Vh)iy1&#U4)o(O(~U^^y$h+
zLvJa*Nj@(w1}U6lJhQt-z;Y;oL<!kXusN%`?yf-Isd=rD$%WY03}W>t*w?P@>XK0e
z=Nhs`z+VyJVaiW6VgASkNJcS*tF?NaEGKqfEr-@~F+ltBz(QFWPmkSN!C8;B#JD;{
z8L+siPfVvTD>yImY-1uVWo?bkBC$0JPde*S^Kb;r(<@#-f~8Nn@_?u%78Cv{6xDk(
zq_I2^$JLdWFVBV_^&~VTtP|~$hmE~R#gYmVJ(3S#d4{w&BBWl1Peb8RdDA%$8cBc|
z>l%vagi=kM90?`1n}ZM6ObF-h%;$y=Jy3hF!?otlb$9xgL$?p_;Pu|=(}Wj-MeR}#
zVrT#qA^B<m0OnCIc7g@7^$IN{MyQaLsgqof>Gstu<9Gw;lXaNqV>3Uy-82wd;{agU
zu49!f=A(D{L0VJyB>gfF)gGXR2DW=Ix_!S*tIX0+(^16SJea0MH56wyRYYe<L$;JY
zr#3ZeT2%f;ti&@`KNSd3lvZ)JeZZ*w$6cW7yFvfcajL1Dg!_B8{@fcK##h{d_H<@m
zIVhRMx8R2U*J6;flbM<HUD__b==#Mqx@IO7ziS`_2+bVnuWyyI4A~oa-5yKe9cM;A
zG^E`=tkHRkxbm^k_Y)*96t#CFcL$kb_8;n~Uhbe-SPfsg6@|$jyh6qqMM15c@rTrD
zyL7h4kyMRRc$=7NVR>j8f5T2zA$fb{%COg$8@KVvmXxXGgpK1fMO5WY@DaU~Ai(rL
zfu3<ScTv<&QcyV>007H>9RUQT761AE)9Wf28=Bjh8{0UE+nCt?>lDzfw&Qrvg78mS
zxVY{Nu4v1Gd8stc^cdqoU8xvmc<QqE+$=G10VyCDK(*r6+Z7PLuy|3G6Q_4ON8mg3
z&XrH+EL^b^<ST)py@zaRVJ@)12rr!~mdTY0bjnQvlfFQG%3H{OXkcUVTJl9mR!%R*
za5n5TTR=IAZ0BON+CY*ziSU}SXkqwW^d)EWn&u_wl&i2lsGCK#D|+4XoLi{P1Y$Fl
zbSfs&6VfYcuRQ6tI;~{N?_tss@C2pt3A=tL;F~*R&P=*N5`qUfEn@d%#y5Zof%6Ym
ziU)kGfl^~;OkbU8pAV<~_XwS5qtS_&V*2K5OM2HwHi33}o^UP}*;*9v?BB&PRW2KC
z`GrRhJ}g+G{7o7nk#=uVwY7le)PcTVr&qO9Rm|-B8mdz6w|1DIfBJ!9n&Uq6@sOo+
zeVu^d{git1OWNL|KzgTC@Bj2ecZ-xe_BB!6YKc|O9lD3GQ6G3ML@R`&ufhH4XI6_M
z-Rlh~C2z7zHn&o%etLP<!`{nh#!!q_d0>RgP?WmIAlCexLvtn!W^F=bJ)n?oP@A)K
zDtWcFGA5UGB>mm@0y88UVqNMvdE;x^@u$UhZf4^8L{oQ@XT(eKTgK2?mlt&MmM}|n
z&q_ipiJ_xL$e<0msaCtT%%DU;V1fM)#o^f^_?(C`Bm@Keyap+DL+(5c8%8wEGYI(R
zLKvJFc>Y?<j;C;}o6u3mflD;S+e_Yy9iITO55a7a0#wjlHrt_7pglWWDesKRoB^};
zHa1R74jTV1M+?UXw%6~J%-EDXs-?MG>Ng5CC!O-h*b7(`)9a}%1PZ@ecc9sRv|4F5
zsP6#=MVzrS#6!L#LoJ&V)&p^o2q=%kB?EJYO8{d&;20e9zy_&RAw7Rk>k|}mnY$M~
zUO0sC(NNWs0|IAmap9l#zDQ&tlvqc~ihY!rb^v}d#-?06JU{->&oq_`chFDmr1~>}
z^IO1gAkWM+BGA5PMMoaLSxJEYjEc%zwi4naOSGWqFiSJsn(~^2AoK1T2Tvxz(&oCj
zlKTixo!)iR7415u4;(shJOaHWjP<I-8L+M!m!f-@?sqXB(ikcf!+rdch*ic>jq!cP
zMLHlHOdGyav5PP#b}AJ<llE0PKP;$8`eJiLXl8~_#`MM4ut~<zgk4$!KTZYmz>NMJ
z{{Z3qXZG5v<1_*3<5Ryc;E3!c-+}__IiZU?^j?d$sC&hgZxwssF3G3|X8@%_Ns9SE
zbZ}+|J<yo?{=eiqVzbi`-AuNTn2?`AgQy9iBG!(<($}z^%yo=;-xi=*?a`YVKgOI8
zp8|s;8;eC;ybAyujxv;U%v7MS`I;@!kuv(~%oV)8+=%AvraO?YkJVO*qAx6@orRZ6
zec#3BJtT)P=u9^K)w$oqG_^mWN5XdpPXwterzD$vUz#>2MPS`jP#2>^iGfF85D4_E
z0Q{@KLxa-c-vqk5!JPutD_CL3P<iChBbYa($5}|CP;qlE+;yWc;7&%iroa>Xu3+-~
z<~Xr@(4vOc)5%w0joazJh#pG6uOX}<+c4`lG;zS^RSXdl;Cn~8V|5*$ctC54FD$i^
zINH|c&^_O?C!x&YQyJY&PP;HKbf+81)jFEtFp^V}DT`fBXY!6Sjpc}7)q-YuLA?5^
zZwONFswu@AOZ9d$R4^gwQMr&+5lzrz=m!&|Zgl;fTQMA`D>-z8<;xCWbRK;gH&)_J
zuTxOkgvjg23Bs_khp}39n+_Ttv|=ect8>PyNNLx<n$f1oFeJBssmP%U=Bh1q%*3#*
z0D2qT$h8deMRebRXN!FZ1%k>`lH-YSgmN|yy7UGVxACsHN?{Fc$i;I;x&Vap{4Cu`
zU{(5&z+{)wgQ57kuu0%)zFYAJR;bh?cl0XDMtI3xM;}OePw69X#`Hmh&Yu39RbY6@
zNF+Yb&A=FjHuA6@Ha<sX8<x9JU)U6G;K^V#^k}7Ws!Da2K5(t00d=)nSV6YeBs^ZT
zvt!BRU0g98BPyjt0C;p9Qyc0TVBf+YBOPwQ^7ydon|d}?bg5Y}oi7Dzyq^H>eo7nM
z{sW&C@y*a}*TF1kPdd#TK2Vm;DsYFMG8!Orsl!QMj2T}1HXRoz9yPU>gHyG^Vf2bn
zzl?z31iW7ls-9KZTWg-b!&a!Lk9|fR!*Xznzm_~~+jm;Qwl99YzaDBFSG+%~ckGgc
z49~iHlkI75BRFBSa&<PN;aCZ{kZn3d3&B<P!kwkXUPv0=!BeA#-A_Pyza1>u>B>z0
zMA42rh=_%*!k)C0gT`PE-&%b&K;-&H0063AA@3N4__(@0r`q;*c78W%ADQ-@O&$f!
zB!93;!r&;=cLOkS1|(?Z1(ZOe7eb|B5dJ@my<>1}4Vx|;+qP}nwr$%^c6Myrwr$(o
zv8^53$;mVI)y$l!Z{GKG)mqh6t7`pN-F@|q3mG>-kVQ#9-+xYB?XfNLH%R#2+kl<E
z!#w(i0I{95TX1g>d9<`(YdGPw-?AFv^jMLGGsf|Cyn9~Q+d%ur0>BT*ZE&~Rjm<2O
zqx~+Ji<wO+$w11K3Yq)0$+ku^nSc<?#!{c3mzQpxxG(y?;7Yc3*)!F>qXf*Nc8PH+
zA^+2|J+#{cfdmo&AO{Nofc{_p_5Y_*Tv$cp|H&;dTSMC!ixbV~T0eiHD=jG+c6)r$
z1gFB=5ZMYhlSz)vr$D3?z_z1UPZIWc=bBUeFZA5*6jw4;+|1`)HZk83S9pQEbblh=
zueL9)sDi!cTbGa8y~&5C*HIQXGG5bP;>zb!XKcl&c2-A1j_MeU(+RkAU2G}x&N(DX
zv|4Fr%j@Mw<<h}ieX-xZ5z|6tXEI#B1myC@BGWylwMj@#!uQq?Ima8w#-pc(P^!7)
zz`uj{<XS<+hgfxW(vs7t(sA-Lp->x{M;3zF{?Ia;IU`QCM`>0iGjo}8iJK}>YZp7*
z-Q95HM3E^D`6N=wMT*o>=P56joERm$rvkSnOkAEk6nPG8k6t|{K@g_cB|?9To;+|G
z*?$n)Mv402-)&QBTc+1Nd-mS106uCc*^>D+qM6XP8(#a$K40l84@8s(17NQY00%o0
z@N_o+UX|;5@fzJWhorPjUbF}lW(+-F7HEDLCq#5`RT+{a#zjipJ5m(X?p`K4HhXy8
z+fbL_Q^bMr*$>>QF{{;u*Q^X^uEt6cM`?O|`$k?<W8fgM5Dd`bX63W7rjEgZ3FFa`
zkj>-N3G)Ylg~f1Y&)VdR9+@p14W;nXgJPpsiDFm`pu{x`mZCX$&l}D%gKN7L>gqT>
zhH8TAfFTu<Wwdcq(}=ID@|&4xi%h*Zrs|vb8|O@nk(^9&yQn(B9M{_m0(8Wy1d|x>
z-}(ZHMZyepYBo48261E!P%FucW>mK!!<fBS3GgZHJT!N$Zj7n~0R;~iAVI|dk7GCR
z7+wl7j4ZUtVX{LLB})<ptE0L0q<UGzcPTu@LLKgpYnD;IleA2{W!duMbohg|A%ca-
zotK6h^Fjnk03vxuqXk)Va;Q0pGVWp11j?`6ebtjJA#?&4251CPdRHG_DPojz*0zX@
zo1-Q%JK4mX>jr~g);BfPZ!1G4wh|x=C!&nRK&k>S;2#)PfV$X62~|S!dRT<i%}$Xv
zVNIuO_&Xj1$$;)o2YU*SJ%E(!=c-9T)m%)K15>gcvhDcHtB^*+aAJZrySh223WYaz
z5K^KnYa=X@F(`oI-XFlc15_3!A6n^wux~gj<a!Q*#IpXdDCuBCFZJW`9^ygMlu{y%
z8CwY(iL+bI<=de+z7uW&<mCW;1<l>8%3la~0GyQ`oi>LPboohDgeNKw0Cx)Li+#}<
z_kaK!g;FAg&jIDzNreXu%Gz%%?PhyvrdWN*%!mv@LxORfF2=zSCbb9rp!EwxenJ9k
zmqqNj`a4_EczlT{Jg?QG6{@J^WQp(BpOdsq99oa`)J#ZEH*KN?4=pIQ=eJ%Q+eCwb
z6Y0nT+KuD5$-+b*=GA{>M<-uyPmWsJ`M)moo~)i)Ab$BItuh$%q^mfEMY7Zc#otGp
z_YGA&>Xjj~q<9CbGUY-82ZJMkIDCjzi_Sr5&?xXgNHM8Uxj_u5T3lT2D%ad4NyDQx
z0-+Mo5iAeY0NB75|3$_!z!VyD)-EDta&{9}A!c0(V-}SG+;^;ktq2Fu4cLEFqM&kF
zjM*RilL21b3v`-y_+vA(I^hhG_u3_V5g$tkQKn0)$S_seVad=&VYXvGkO%QAv_xS5
z*PJkj^^TYt%Ek*u3mDBw8rhGEgi6#nN%8ziCl2xuF@6z1it`Tnbe{G!t2oS;sLhYb
zkFZ-vVAXxfJl?y8+*!i*3_epDc#R0vkWKY0y5eD(@TtysaZy;JwUgr79~TTT!;cWq
z&J|iBbir@t#?wy%YLZ0R4=<=rX>}LvNep<g+)7X;%s!RT1`A7uC%TM|cF$$_4)G~@
zJ<9gc1;uI|-)*h8zHB0c=N#X3`lWIzB1-Vu{Err=H1H}YqpEE|UYam#bHu=7sRLFE
z9p(a30zrrw!;3+LqxQ6R7}^V;L8Hnj|2doG*{vAk4XtgDb3Vq*8>z@{p3G1ddO3H>
z))u>rb%-MhsBBz$84uKk=c>3}jY6N_l$h{&bAkK(H~8RW!*dK~(<j<GGdYZSTi}um
z=v2gnk4@u*binUC2GW@TM`_(6$YKe`Y=QyKdW4Xc%pbpKR=qSRmeb4vn?FQACrcyd
zuEI=W24qBiZ*^LjZ0tab(~4Q*DJ;A>##S%zz282sqjI}&QLmrudd91jM4A3(KRFH{
zwj>xW+!-=Qe&5=ZpR9#iJHfDnLWZCuo$pA9s)J->BYp_`SJIWm;(-{72-;Jh!|o?)
zfB}F@(XsH}xFYszEw~+D+96H7a@dI2+e}=gd3~vG!!4P720<5}&Y?EcldhYm(HzL8
zyMB;f!We<_!5Ap}GeQ=jVlRwvlbU@P_J}pn(<xzRyvDAy%e^jH*8omHZ!lb1M#g^*
z>7xs`053yIe5h3(zP4i&E@?L{dl7aGDo(+D<SomroivX>;or{Yl_Bq}xgmbxz~dW)
zX2aQ+4&ooY&tIN;dc9wsz0aZBoM|avK*E+Hu&h=Zq-nf;B4X_#;z<+0nE<yMblcVb
znm24pVrSX2pK>q8f*>~o5w}rN7hR5KI6EQ;ELDJ`n>mF%o;L{X0Sxo$^`4XShFLg^
zv*UMN=81CdJ@*qV#y0uZr(riDbu}#fv!sNH<<md#t5f@v<BrAq>*=AdM}Nl`TTaVI
zhX3pZcPaUrMWf8XU_T<mnmSu2*&cbypLQQZ&t%9+P;@#;;|8~aGqpUo9V!tN8T(0~
z2)3XV%;u$kAO(JNP72W7Ew`fjx_y0P++nQdnmks~#kcvW0_i+)a%Q*56K|XK*U4UV
zqk9bW>~_AsJ{*p`A!W$XVpACd0uzs2&YPudX|b@rSmMcODf(Xx?Qa63H7vow>l)f(
zC%|ti%+}b0)YADA`dLMn%KPZ}$YSHq$Vhne&&X|XtC0j}n+IQmS<{tZZ7btW82oqn
zF@rT^3;@)aW><RSe1`yZDoEhAq_{Wgo%Cy<y-qlqeEJSQq>ZH6=&{*f=|mR8M5SND
z+ft<J^*6DIC`cwCkYQ+E#~i!`Mh@f&M|kiF04#Z(AxGDwYUpGmm#8};jR8>5k;{UM
zsWV4U2d}SQ-B%$ysvYYzGrY5&H-()pni2frzaya0KmXe*<{xgzXK<Zs@sIad>`y^P
z^Dm1rc?D59Wn~$CV|zO@OY?t65OMuUTKI8d^ggN8D1tY~R~kP1&9hky=3Tyl;b1%H
z20xZ4D6KM7DN{j$y7FU0CN1ffRRjj4P2|qW&D}WlK4B)*MV~ZPW6Ac$gJ#r&F{@U2
zM%GNW0-w6bi@niP(0ce-Lxnm`ZCWQX{k}e)SDoL*M)`d+I#l_-=3Spr74#FXUSyh0
z*-;Pi)YG-UTZA#v{Nb@~!ML_L!%r_}-I3q_eBS@)$FD3Ht7h&3*APmNPeEH$sBfx@
z*{=NAn`_Ive|>AM=Tj(Ca!)(~f3S4v)Sw}M+;~Fs@HUE-%%7tB%NCCUCBi$7ERn9z
zx1%9p@lbd`doONN`Rans4zx?D6joVJv;bi#0FR7iJeMcoiRGOs+o=c<C#PIz+4NM1
zUY=a6Y*2dryrHNXh%1@Y=pxHCrwCX=mkN0T_zc__m)=K=Y&u%TRMU&<u#m`D@`$s6
zoE%AR@sV;t&rZ6|Vfi5}v#|`u{6ylrOZ2z@)QJ$}9rc|`u?#AlaKOn&-kWW;;-y|F
zP_i3k>HR!-nemh3n72h?!{iu(WIqPQYK=H{x+!+oz)qm+Si^l8q0$i2a=Dq1(HwMF
zyIYRt=_aFoZ2qq6Z9`MxA*N#q4+PjxA;Ko%rE)dLc}#>?EUW@%;iUj5k3I?#o(3YP
zwAw9%W3|0x$tY5QaDxG5IhU^>;PJy^Q}J9!=b{~>z?q8T0CebIOSmwGQCa^SDs5N<
z1c25~#jGT2*|VwS(8}Q1je8inuy<ptBn+0dG({`k%gelro9hsOJt<PrNc_n-PcAgU
zm$!m9%~(yU8gDFEcZGE?1eeX#<85~{5V0r>6yxO20Q!|j-LOW5MCa;HOFa!JDrWqY
zxT;ho7RhkdKtl5xvM7d=J*$uJF|#ZIO=(SU^0bOUk{`Pq|3=q-ok{~XBDDrMvP>Cm
zo=eu~$c@eehW@7Zw>nXdSn+z$YG&?A3sVI0$m)9$*TLXY=fFZ=J=rz?T<4;bO+g0E
zzJ7U3+fgP#NCXjv-T^zuU&`X6T5Kr|r7FQMU%XQyuX=7ZFH_8oRD_-Lv0Ch%Qk703
z2zN=Ha%BJ%)bcWL>kMDfxRZmW2vMGPN2UNBEYO&#vg?(U1xdW7cH{~YrF4^{T@+qR
zq&B-d_(jVS-{><AM~yHNSH23kT!#G*!mLa{zGnvD<n7y}lh}7miM|Kg6bc#C`aKZc
z@j3Og96pV|%pkL1%41?z<!zeS!jewd8La))=RCgN{xfv7J%;>s>(>p27rSQl$>jTe
z|HFff-JLu*S_k-LWFl|-QT9Y_;<-uRq08Pyt?XYo)w=F4$j?h}$KEXO4sB>h>&n0d
zc+ouf!2WCd9oU-hqDSO|pM-FD<^VBQ3I}?_5J7HfxSJ*wy>{^&K%)xfO-ljg%&K&~
zQ5e(4q2mz_TXww%<bq$?3vzfKd<_+jx_1ab`VNK_6#|MWJdefx)ce^3lIu9OU}&LR
zVzAOSwQy-vj@nZ!*_#0ojLp|w)woJ~axilC=Vcg8dSDMV5czk$y1JLo??vyW0KnfB
z;q6xE5)pOOp;M+%fZzWO3jZ;$e+l_?q5Xlvv;U`<a5H@)LuXSqmj498|79DUt+rwJ
zqbmHpq7L&1{nwr=oy2|I7KlT``jDS7XvzZHDjkee0c{HkWt>Xa*ZWM|1F58c0X9g;
zFy>4ab1JcZbB9zyWk%y)l#;?w7D>C2HKTTlv?KJB8^nEdp5WrR7;G1PE8t=~tQs7a
zY?p#$oFFPwb;nNVRDSu!QSU5r$Pc9G8_iZ7P3l<a{Lsh8Ud<P2=@bxVigSwFeZuS=
zbN$^x!lvy=G}Z3~x{Xwp-t1`nlLMQ#4B=Y%kj@zj=$hkDZ>%dTU06dsXy}*O7MSr<
ztK*g#on)+ZKxOQ*G~+t90nVDa@l!k1KnIJ;y!~zZwO7m_w_O$ylg<Y;Dp)D*I^7K`
z<g}W$MhJ{^X?a_5`N1)9w-&NYp*(OJ9t9D7hkUi`__d-&96^gZqvAA}FDc<dSa^zC
zrVMC2PqoxjWGW$b<fhln9&c$uMyT@1UU$w@oOps6PEU!JyVG7dG56Pfv!qh=lSs>!
zG`T#Jh&zod16rNSts6r@_c+R8C=72I_!vpaq~?7BP#*)!m)Mk4yKAJrLSv_0j?GwC
zHhD(~dynxr_)}AY0@=XezS2Q5WytY~`pkJoG*ZZ{c)-V~an=om>H1-%Iw7M$&KSAC
z^vd6VHMx8<WcOO<566XH_>J446TTR|JhEQiLk~`CHO(RJ=6O?<2Cvu0{>r-^hQ^Z-
za$wpyN|v`R=LcgRE_344NN+Mtya2X3`sJdZ<T_khnIQx=+YI;q4y{!02P{080qiIU
zexc~O>OKyZhQx5N*QeRYaYa4Gc`3AX;~u|D`WQ$$&@t`<+*-%;de~zz!bH#<SEc8B
zZmlt7oJ(FL$ikRG=YZcB#H`+{+*dVpN)cm!FMtSU^;GVx`=i=`+w@(v+vlsF=cz57
zA7S@;xw6oB?Lnl#6fA_ruPvItjmmiZ{u)qgP3T#B;y6rEq|-k-h!3!T{k(@I_XauC
z8^{L=!flRkxf3&&x7&EWo{2YX*z4Ib85mPnf>0^f21{#{@q0M0_L1W$j)l~Qt&(al
zNX#GVQp+l9<I$~nXEPe<xVR7z?R`Kt68mfg{l1W6UCW*0jzptl&ktK(fhHnW!;XSR
z4y2Wi!U{zYzVs;MFqrMCo5zE$yLg3hc`h@tfAEDcSje44EAz|e(Y|r?WbNh3Cx@i9
zV+*6c0yir=E6baQo3k5$N;#x<nkTofaNakbDuzo1-Z+#&XfJCX6q?zt-Sc*etYBz`
z=5ADH(_?W1f+;OeJXC!Cwu~RdV;PraEGG#bI{Re>xQAL1$2X~~IJ{&Bm{v)Z6#kE#
zpivZtKUE?0C`fmoR8b-X>JBA_B~y=VsVCI!)ZZC{GO4%$RNUs|qTF_qyLPvl=G4*A
z^G7cXUsjlAP25oK(fH9ix9F}Ct(0u(um9#J@DCup{WaWL`vD{ssDDR#|7S;LY;Wt}
zWa|8H7h}Ocfb>(D{R2oH^m6g*lIRp@x}$!V5ZHh{ASsQjJeW-)nmThuDMkAw`n}8~
zN75Mur_xfeCr&fz!aJ-TG6|g-jdy5h2c8)u3!Xic4?T>VS}!2MdsB`EekTmkCtY3U
zG5)S4v^v%=jG|v%8hpo^IV3lk3c)tgaKc*-rqwtozcy;cU&5tinw@moWmK{Fa#k*6
z8%VuT{$d3=36x@!PFPzcqjC>R`|3!xG^+dJoo|=Ex+L?~G#>3c1#GKk^#Li9V#Hih
zy+=B}F<`m{i-*_kTEXdx<)bpRFNn4MkgbHRIV}R!(bhgoR7q>awivetzZ=y$4qZy0
zbt5i4d#I@>79nDadDxOne^E_M`Y>U>jsGT5&chB}Ne7w4J*DdV!;jdZQz|ixrEEp2
zpKlS}-}RDen<<7JYSF`wR`M*{qE?oD4H+tJA;7hrr8{7yi5g(6)KTS<CpRXL7D5_9
zFl(M9-H#mtCo~};8=&lH+yv=aerF=Fcm9z3I0i5AYPs#nChre+G$IrX)3y>)fct$6
z7HtATA#7`eTBU15yc%K-GCuMEZTlocgyACAExmUOv5JfuLP?!|E_MS7UDAXEYNR*+
z8=Th+dGOmhxWCPIECt@X%GQIB3WhA@0yT^Zj(HsIVClXrQ{>E;_D5CfFS5p0W&MFi
z0j7PfmO=u)s4AIG*HIGxV~bda8j-%Ts$0M~g(I@KubB+sl^<=1owfW(_%7)_q~Rn7
zw6sQPD-oAUa&)fBm81V>D9>;N5`<<bi}vfZ$q6GH1az0B1vSQ&^ts9i!u(f)A)AH|
zX;p{eZCB95>F-kj+d+Fpeu}RqHuF;taU!nI<W@eHi;zvR{Vk5C-yL}J_<!DsNj$z4
zA`8S=2^t0}MX!T}%SG19cv0{xsBelDLaH1JcDF<KBeIqef)f+X*uZrJdipE6EAi1d
zjV|ZAK|VxKaTGsLHxmh4816VEuY~kFTxHL3@@ca!Q~C!Y4J1sKDh8}amnc4zocTfJ
zLg4Hj7NLsChuwWj!g7<I_cy}PlNyCmq!c{{6oJsX6KH5o=r`w5hBI(~Ev~~$>}lV&
z7xA-e=d%kkdSvjF++&EHJaoUit(~Xe#}*%m?L~CmEQlD=J3d+hI;v^a2xM$?v1H7U
z$ZO%AL}~{Ch;jxXRp&eCLA_A+H%9M=5|17<pv;fVPGhu&T*jlbux}JBYItC8_uvvB
zQb@LlsAS>bVT+1pku*uI$X9}X@aFKwCv9^$JkvP|`XJ_vKC1`jbPO-ph@mZdx;oGx
z56uo@iZlTU@X%RxXxX}L+ImY|KQo7)SVA3W_Q)ix-PkUkVwvg5mIc?C^YCu}9=m&V
zdc=A9!X@V-aI1=n+~E~z{lxxopJLSI<Ew4x#aj-Gw$qDVU4rA=+5EUYyPv*9=T~>X
zpFj1DSHNhkSvFZTM!Aom)6j67oQ`xK!KCXfI4a!%8A)6*joU+hIK2^u`S9Zh-qmca
zGq2soo#R9jH&fbUhWgO%$F}G7F$Przy^OE?eVj&YMsNXqBVp=)Kr(;pU82b*i|)DJ
zp0`xpuTm@!Gu-kB9rLkwz=*v(!}@e?;J|_Nc5AMqpSeY_i8;ji*1REox7AtTI{y7%
zMw|aMwxhXT4gch4mHdF`zvdYJ2Z_k}hhgYsXlJ5tYwBWQZ}Oj2-T$J0h*ndy-(W-V
zIjQAvp?BNmvIM`#cZTICU&e4S8FYerpv)uH+80X%k{m`3`F!3|Ou8hotLFhh8s^@9
z-g3wPY-a;C&ZX{;gpZrSLmF9be3(o`{u+1E<+%*5m0=91)6&z?T^2H51KJKmmOA9C
z5^6n4<9^SfQ(xmThVhB#QkNw(Fk<+_=_<=Px`fipi>=vL3<cIcUnBkb5NC6hs=pi2
z1LHed2E9YK#GQ9RxO=$_vEN3T@<}>=wS2#1)+2+N*?)OR;{;WM*1jpZ*QXBT7CqBF
zq;wPg>(tT`$7cr<S|xlf(C$gwP?NH$F6$|FuO+yf@~|ek1E$=|r~PigYV(ms;L4ix
zN$A%$?tVrW(3Qrpt>dm*AJ^w!gIVoWD6S@q!4Jb`9ecC0V`LMdps6#bM3dDr1xpI(
zd#v;JCmAd6ozREA){<L=bYM}=`A3(QjNJSp=2yGWauL7{wxUtz{)^R163O0~1rsbG
zr<x>eX10|-(%yFBhW3PRU5fPYWZYE0u8QDZmZ)!t2W*4wtFB^v<_Gp(WQK0z^Z<oP
zPU$a3FN4rZ%uT@Q)W!%6`%+~7Y@Cs=s%XT!Ol^SqTP_XcCqNCCz`7vh@55oDV@W=0
zpx+QPOh^Pr^<nZrGCv+NdXK<NoGRrph}b<r)b!;H|Cy97b`LuXS_d)f%k(3#uM)MJ
zNylmY<%}>p5JMzZqo~s<X1RycQdT(%B_6!5OlU;~kZ5oZkBTRG#@HY{UKX3+mmngk
zYcJR@FEH%5zDZ8Mo^87v>z+Bvx(@f!f(C(!;}lKil(j*Ag84B>@C6!*p~FcSVaO6(
z=hAHJMvMdliy`OGo2v$<zOf9=j>ED(p1_iLu=v41f)`IsQe7U}P2Tl36`6}N$4ijC
zym*;uWksGbfH3f_t%QD}@D<IC`f$yeZlQ(!C!pVR*`wiHMF=Y#%J-6BQ7j_|@NbeC
zOBd{!2Sba%*@H2O!tePD;P}8g$`~_;kTKQGphX;DuB!eJaN&^e!ftR1mP$x*d~UTZ
zY>l_JzT2H{hGjW}ub=}Rt#c69q=DA8ea3OR9V2t%Ag<rX75##}9*Qu4`m56F;q{*v
z?LIFKAyy3wC)<*n<z>4q^=aFCdaV9BO-&_&x5gt4*j<4Ss2E-*I>{sZ=X%E`C2(K`
zLluphG8_Si8-LI2dOGBni4pklmA>V`qR^!ag9axJz_T8gQM#caFR$zNE!4$(+7o(2
zljp{qw??z{fr!y+Is#RoU^1eUJ*u6zFrBUg={Ss2Lm;^INP#Iw_$?M4V0<w)GEv+Q
zU&+}6PQ`FP#dH0E?J?azLy=D8aDTtB9)Tp$Q5{k)3KhVZ2-|I7Wg2+uj(>=JYKk|4
z$m^R(kDw*yo#}@zAkvTtr7A&taocrk*Ywn$=wGu(ZRJC2XsY4yZEtRNeS6&Rv9D%r
zIa6DI73s@0g6(PBEW<$RD*FYp>h(TxO8h2t{^$=9zz(w3-%P4_2LaadMrZF4#@g$&
z98j1)B(PfcY*7Ik+G#K2ofkMLC0S`dEfSYBib*3B2TZFzX-hwN>KN9C-f~bX8UCP?
zYy{cQV2&PE2^OJG-5{HybDH5zQ1jI9lwVm19W=!8{f>^Nt?f)Z4>Q(z?an~D^gLMe
z{l5`aeQjO|^`|%9MgDi?sDiYxGP}N;sgtFd=f6c#4MpdTHpCw!?c3y4nK(7k=c+EP
zo@H(*B*}0li6z<5$>BkOOt+8-0QXZ{Jd3?<g^nvAc`u<4Ck2SyvhV$L%h$I`Bps)3
zPgt8Z;(KM1O$gP$R#TU!pZI&}Lo!fmeng*}<x`X7x=)UX7JRsbUkg%ef?t$6;JH!M
zQ(w{8@y4akQ}vUsjL83&iZ(+g+*-MEqJ6*ME2X2-(I-$;*K@x2S0DaR=bIIY+WGia
zt$bu`;Lf+(YizzpD%JUx#9V3Vl2?6Jg!>G3rP#h(3&OQaa)0VeKa0=MNNcdS+o11W
zg|hRB;1_->etJ~BPg>1YN@M7w4I@9869Y`1<<S>TOMP2+O|4y!+rSAGK!Qu<Kqds=
zrLnjNH4Fv)l-itn8)-5g`kB;)Q}(gT1f}Ke%JOQ^MF_+9{u}rhNg;;pzS4>6@(z)Q
zE(})a^|)Gw^d^$fAee0hVLBw_X#s>k)SKKXt#5M11T{ezZt|_9ZSp~^YLxG;^LS;(
z_jFRKWet;tK7Q`D=H)H>u*a`xogI=k!Pb!BkJ~SwERxohtO^88QW@EriGtv0baBLL
z6l^vrhp0NOjHod=Iq*~DxD}_W1GaJTMNFv5uBE@Cj|Kew>*3X`reUrkS7twXgpjHB
zAV9Lc^NO~^ku)wPpL!V3&nP`j5C*eiq>4bd1jJpm1`BsY@v3AUZPu2i<vdIFbowd|
zFgsyN<5KFg41+<OWS4EmPxcE(7YFLMbvm1}>Sagm^~E$1d~^jZWU4d4->M^IttAvw
zGyQW_fAsDV&80fJ3hFqP5r7pyi>31Hh@gc8eDtZMlnBHimB_G{sPVRg@0*0ef$gD4
zZ(GY30m+%9dYB*~vASjD!d4Ti#0?z$HJS)D!lfJ}r{plR=2EU4{JPZvo3P|#PfczP
z6c#uQ)-iI)D>ln$BFPrrNg^q*t_738NXrqjXIYJ*bEvGNaS_$mC`hqspd_>CbNG1V
zu5z!??jK!xdN9d@%t~4sC@Dy81OinPkcY&?RTkRnssyj2=_mxbFP#k|WY$0|-3+=5
zO=t*qD^Zh|i-7j^l39&4CZbd;7^=`2zT9AUxoqQ02h!~G2u?>a&w{ECsxWYtTtJ-1
zI2iN5p>=RRrI7~Ui9j`61^8}G{d%9|P&XKlnyahsoi4-Tg2rBq<|+MGrF0P{O9}cb
z$;MuLv<8F@#!hw<s9no{92o3uY~vI}(3?8S&jX%%DaVW%{SPc8;u*<h{i6EX5@)IM
zg^W#seKRVWJ=h&}KX}QX39Di(^2A2`1$MEZB@l1KbzQj-Tzk}&cCE?4l1iDg`NDox
zE({8f*)Ac46d`z{azgMuq8DbC*Q*utwIKp+v#Cy`_k-3*N~X2Q_Iqz3`+LGiB9r>7
zD#7@XT7EH~U({WKG`rNu=PFCeA|NYN<_IIUprZYb3|?NX*HA&EXdr-d<r4O%I|-6N
zI>M+yQmS=L1sJjpZO^P{>6Y~yb3@ay>N2DgaOqSKUmPN))Xzm+CgD3Il>{3)Z5vRu
z`|Q+~yvpOQzCe)CfCj8C?X9&35@0N#Z=_ci)D6o(heTly+OUQX?<#|?dkh&IR{>1a
z9LR1iojY(IHk&|%oS|j(=Ncd;=B>fs!{gdVysDKJ4|*$llb_!Doii2FppjjACo{2L
zv=3z`WUumMIdghS$1b|k9%v05-sO=avyFoksw+2}WmyZ8;DWSm^<?Rar)wX<X*G*$
zWP8?1pET?hv1jZ*LMMqbIEEP#sQwoa)uil@WCH(^vfxN7d;J0#W`<=XtU~a*xfIzY
zjeo$hol>r$o>?{?_kqwe^Uz2wxFlQZ)GNymxC0lH8ddeIEr9FxWSm3m>L&7R!!k%f
z3D#Z-Gt{3%&jG`*rKB8UihE$?sQO*cM_IM(o8i0#=q4pDm{IU|s;TZS){!QY9Q8r(
zXt_Cl_w6PP(<O#{K+m_wZhEuzfaa(@9}dR}iwl7C){t~vhEpKh;>2$|H;f)zAOZ<-
zfA)OseGNg4b{$66GU9S#LyiYBJcRD^k!zBY@)JKgYvb;q9)S5qbA`y-rde2_EoS)+
zz}A&FN~JICPkn>5vGUx!bdXW32UaJTNaI`1p<rUwiW&HGJZ-jjKF~Qccp8hzBrxtF
zDw7a^L2HR_0=5QTfzc_?A)8imm*9H|&uhiHtQ!1O=i80LulR|(!+z|b1;!T<jJ5N@
zQ4PfPZ^h-gh3Z7TL?W+ea(NoIZ8(rcYzK;%ko~DRQ_Os)m_!+iOEYBFsLYYiN0;`Z
z%p8w}-P*xSy5)^g`AUP`OLs>S$ra^xO<XVI?;#39!MO*mKgCTM6$N|q>2iM4>2HPc
zl%EC&rO7EUtt+8Bymkq0Gx03dqX^L9&%|<w;}LoCmj_X+LJsOwU3T-JOkj*WGlYN@
zENBUmg%YA6floms3IqW9Xfq&yaLEtLg^sM*5#yg$@g%hb+(4VWmA|X5(ctw{8|8CX
z%4n3Yt9@p=J$yZ1ze=A|`M<M8IeYkr0$IOD4#~-2S7AEBAdNKt0FtLnP`(d@_pX#z
zlyM3Hs!B*%=R-(8L<S=94@L9C+|IpQVRe~55xFhL)mMWR{N-jx*%gW{7LumI@}Z26
zw;<LcC;`pL2T}@JV1sIL;qT0xQD0~Y<r<@w5ybCa$|Q4PPl^E#Xn$^gKN%jjYsDVj
znH?G7(+^@sXN+;Yn%oa@ieuw@#s9Cu<DWSgy1b>g`i~xD;ztic_b+#pqDo5o4o;SK
zKWZ^2Cwr%VKMPZ}wf|9teD(AiCHVll0FozHgdvc~)LcrU(9D#ZXrireU|+HEy4Ah|
zx%vDyy9V8;U$_Hxb30Bq&q>$hTjDamP!8wu1wS9wXEeTb>#U4cu?rosFeZMPZ`fF=
z#Sk6Y7W(<Q0)aQBpj*tooK1T<CzDYc-$beu+;I-btdvz%lc6xvow&FzGWq)RwaKtC
zO#Iy&&E-HS?Y|zU3Yq`n&k|vS_y8l0hXog+J{L&Z>>J}k_D|k%ILQ-2ZN4SukHYwP
zSa`2<4$eJrX_u|3Nt}KwjteA|fX1P?MobnVMR?MKByR>%cUq}1KVxq}Vk#h2H8hlW
zx~s6NZgJg?bFl0PNYG}WXc}h(FWqxWS-KDN?lSc#+X5!!5gO>l<Bid8fCgd%39LK<
zj{>*`U9Oo%t6J||=cZs;j|*#@)Qt1~!os5b<hKZbnrM4DsS*_NAR_*Yf<{-KrNHi_
z=(b5+jv)6ZnbzhfN9awpjR~m6=>|=9MmO*Hr0?=xhLv4pIKN)x^^Hcd_D(Wkh?L(5
zxp_skSYD9F$Z^+Bs?k$>^22UjMAm-8Am6zwb6bsxd6UPl0K|poxtSaLFh$O`#DSjr
z;#x@cq4*r3kJ`cG`t7LQm?oW<EQ1}nXczdfAr4Ne>x2{PC%Nqi9y5cHq_I@z7!i=i
znAtu^%50V*ex88lk7)wSYhfPlPXGol?Nbuk?P?(0Gy!{Ljin00bY6A56YeitU~44q
zwNPs*!8EB>(w20}qPP^VKh4~EC@8f#03uVLb5$+sO_DLvOG65;7DcDXZqV(~wY@eg
zH_t|oq;mSY;{+q;od$EBg+N=xwLI(Mi!3pQ^-}Cn)k4l-y>OOR>Wu&k02f*b(b>&U
zK-@P5-XdCdHFhoI_`Z6~EsKwV@uFwDpTon$8_($1K7kB{pE>%NpUFkR!S1AvID-Kw
zt06z@)S`BNBe_0m%2Pp7#_oyw<VNwbb!rTdgUp%RX$KgGLS7sW*(f)|U<tdw%FKmZ
z%L!vb_<w)$u&uJy>jqB|Kx9j1GGc<%YkUlJ?Xikf8=_V$VX~*K>>;R91uLi64>0vO
z#RHOOmfX0~v*b!0pT8NFOVXMc6Ki4|&)`%Gi*I6n|BrYxbj_q7@E@s12GYNibNv%}
z;;e6GX=D1IUBmyfRcqGJmdEBq`NtkN^S7h|#GF(mDs;SG2%C}=0;Du`bx;<j{K(``
z&N|+ok9XeDob<G~mM$CBa^!cNUT4=?>1-yq9O#^!zUko;MB~(hv%=p~CWLPSJ5p8d
zzR7zVP%A$4gRLiQ6hGYSo{F_)F|K;&kx8YpFov6&4PcI-^IH=T=yGjjbA9`g*2dc(
zhZo(7qB12wbF3o`Z5+Zq0{nf|f@D{{(UbX)g$H09fX_9r<=@Lpm!HF@5O7BHo&N0O
z?f!w)-M42_rTeV*YmXy%8lhLUZv@GKRlCxWMKl4G=WA%6yBmOe=!s$mR|-UyXQqg+
z)M?uL2E@3JEk*Qu-<+3n8a{G3!PfMK$gS{&YfD=%ZhSf0Lzv5#{)jb969JRK;z==v
zq&hVVfI1p+GXb+;?Nrc|r+$*qILje4tOhQ{O0#ylRIUQhg$kq;8UUlxXMP%KOUaT$
z@yUO~U0^Xf_eK3XT%jqnL~v*=wuN%ugna=h-Lp6ph=r#IP_WBW5cc^j_RWa}O;LRc
zSX-#1ZL=f<D|e}oRt5V=sHrlE3H5HDkP-}t-cngXG>ehQ<6*x4i24zkHp5oc2+43L
zoo8tz&-@C{SCmE!ivLhDCO{nAg?sCZ2F`w!R@1zrZWQ8i&8*@Z>Fw6??>z;ys{cir
zvMyzRbd)}GfxuL#Zm;0q6pxh8yoks!_5t6O26+-zKa)OMIqt%CN4ls$7TiK4fQduA
zRyPxDl|~WHL@c63ZG{bBC2T}aF?!>G9oFo^sc>5;{4hHgsRdaxhZaJ|I?A+bNNL?3
zt<)H;Ek+Bi>+g91c#lWGF0`(JHz8c)+9P&J*5YhUYzidk?1|=$2e+G{1r1baKq#kK
zNz1aAX$ep(J;7szH=5Ji)$=<mwr47TW5gr##<k&f5pgFQyac{{%tQ6XNn2ug`WR*H
zCRA-0%;^VSVZ&&U!=W2i168hfY?UWKS0Dg$l}V4J4hfR~YN{1zzrb^{Js4qkY2v~S
z=u(C4{bjcWP~&0jSZ=dnA(|75FgJYuyEUt$-uHy#*}kDBq7A61s=#P4&`C(chQV|E
zvjDtZg36+Z$i{n}ij+cF;{&xl8%@k_wFhA@?cCaSuilcx0WX3aI$AT5_)=-%<RMm~
zakj<4^iw>2PdVccz?&m$T9}in7fnusywgO<?017rpAqNS#V`Bu{~Q7OlYIUzq(lP7
zAH>KlxrWj)?W$Uo*JLb}iTV@-OXfRvjZ$UDEuQ$*b7w_IB4Q6I74P759lW#Q_90}e
zvrRbJtNMpWGh{hrBY5n!aR@Rfx`;wzQVOdO7OQF1!#|uYC`_%q)<FM88B~L?TyFz?
zGL7^iDBnf2OB?z#@6b%M8U)TlTx#v}<LyQsfvO*9IG#)FAr7Z{j%=7{+@O%UD&Ji2
zf%=PtV(IoS9Lgeim<C?cA567NfO7Vah3KF6<}p7Q$|uy5W?N&<H>cZIH=(^QJAjMB
zw8ab-6w8yOrC%slcCi=+I(~oYIbthYA$?IA%`~ZCOMI5A*WTt{50CicK73U|)k-3P
ztc4w=SZvfJYYtnbx<p;s^;9JY2bOHhXZDVLn9lm=0i!4q7%*UVcPSJ;(H<L@TYlSJ
z?D-aI!}o+SSmnz%!-1N+F_55h$;QBJx~~YPpUWLA+DqVR79<uiC1r3QfApcq3oRr;
z_(Z?p0Y4LciY2*oY1iEbSM~zDR_iTE{$|hE+1cvbK~MZOae-gcXggcBvZfv>)=1ET
z%<C|E4+l&3Jg$ke8^B{A>);k@MogDuNpdyx453XLUYA0G_Z}EE3B+!)d<2@IPJ2HW
zB*DT4uhj~Q%JmE^wr9Z--M59x;I?khYbbH6{+p>1GegdEBF5d8n<qT_{T9dOqN;U<
z0sOo7^_h&K_4oDN*MW^WY;B-2u|TXpno(7w2eRGDvigRa28OjZ(3sw*8{%5%NzW#v
zwI-D#Dl=Qvu^~;HY<PB7i>4O2bNZp7-d?-R2LbHgHED`5-p$lcDxrE0y95FyIK_Ro
z>(_Y*I<iJe<HSa^?B{Mn`~iD>k2l>Na2Dc#8xk);|Jb%ucaLFFoG(^1#FtSmZ+tHy
z5kXKiJQTz=CO(_b_Ka<xZfxHVmeJB;I(9KSXYlKo*jV@-+}w}7LiXXH%xN+Q>xbSZ
zFntw`-y{3R=!!kWV9@S{ZO979=@6pYk@8@<XwgALI>B4r%E)dvs(|{AMYS&>Xarhw
zY49zzD7U<b#f6gDKTIj-<gl9tLc-=KEg)XZhXF@PTuMQAi*!ru4HIwHj{c=`K4^RE
zDT*nT_OgNd#ocpc!KrNO%d`1;uWr1>Z%yVoGf$P?QEPs%c5PJQiRdDy3;zGRPEMKp
zCPw)g&<Xx%D*v@f+K;V*xRSi8!vBkBX!nn%VxtY!XS9}Mt7kQah<io`pRL8rrZ#Iy
zB%UQ<YpYA-$LJ}HPSQbeu3`Pm_nH&HBaxE4Gn<WhoT4r3+`Y%S?_5VTN_R9s{Mx|n
z-g9d8#qQIQ(^sdeb)ZT#&3RhcFo+J!q3u!Iy0JYqT=$&f%f5S_>N3Kp`~CBdO)D&=
zj{#8!pDrP(Zc*Oo^Olc4POn<O1ROn}duLL?(z;gQ`Yp(o`~35STdHLXHbF#MkP?}g
zxmC4KyN$kaP9hn#P7zCpmc!28-yBh-fI;i>tT$PsB)~Up4#jm_P2cQ(*s8$@=8LM4
zfsz<doeEu3k>rF3XM}jO+-^{l8;qRLinZz0^W*0JgPddVX0#MPCfhfCLTg~(Ed0e2
zgI?XitTl4MUh1`4ex_7UQeH}Iu7609*t=3SJ#lGE8CJz>29LEyuAcqO?auM(1ydGN
zz}+984g|O@yZRc>C%AErrx$4$4CR{}7uO|sY)XKP_?-Ro3jEzL4KDc`^PX#+i*(Vi
zwz9Ffy7+{f)g|)w`>#Uw^!GBcn}VD;<!f3`;nFH?jrz+6>Uj6#cwXE$iuJDp(osb$
zE^3Do@TF)OEPo=tMenBt57*W#8a%RlOygb&<VhGA8iIKLV=wvMW`G#qX*opG63{Z(
zFp~K8ctQ?Xvf~lF0a_VMJ<2HrJcSuCE0^dif0~;tDv-MiF*72dM-mpwAI&=@E~+HR
zb9*NRQhdaehV65EBS5O;8=5f~x&g}J4+qS^Ty{#551gEedO^SfDJW7~a!UVC4Vrud
z0wOnq{)e8^U&y|4YLf7ERDPzGZ!gI52!%UV9^c>a_Aks`{(aSqVq$1O%IMw4c%cGj
zC=%COM=OiiHgH)ij;KI)%}>bgNb$C^Fq?HMh78ImmJx)T)Dbx}SzhEdJG4B3V$w-?
zhKpU+_Pd_?o?stqH6RZAQP8{eD-Qk&nI}TdEA)t%;M;NeZSrr54QP-#BrFs*r4GMH
zo6!_8CkXnDsn*P?l6f#;_sAskC<ZaS)wc<+09Z{cmy(h(gy6)a-EmMr5uah6p))70
zI|4$YwgB$xp1DOX{T((7Cg<{O`|;EnxvH11%t{;be!@yw+}9i!C!4(z;yb;5iDr9&
zkOw2!c!?ri-MbpvS6NDnl3&Y<mkOt0gaXIs^X5}PX$wzKffJTz#54gvB;pdP1(43p
z6M(R@v-P;y<#TYxa>q3`e8>l2qZ!9A!<dn+!M}(0heXIRVp>?y?kFM7acY;7jPIR3
zP0Y`SiIv*Nr0v8(>)Am>%10j(p2teWxSHD}b-zdBb?^v9^zJXyeIQ2B7*t58B2q;O
zIUtqT*H+OIV`IHHZg2{MhD=VKO@<4qXp;PD*b9C$Ml*)9POPUoLLSZV@$4Q|k|8Ld
za`uDgTn6(D;}n&KDu6Tl(K%XjTtdaDhPcdk2n>^k)#A*vkJ4US`LjXDzq6U*H3QP_
zyNu2a!K!k`$H5Ab)Nv8tflq>+4dPu#xNUlOmBbF=4L*$q*mKMA?mo+BprMPCiA-9E
zR{aD_9_T~xHW`X4a5hyoJmtxG+d?tvEteZqsq2v)$2sF9x78VU#X}Oi{7uy$lX$<Z
zxxkEpYg!}Nc+X?0S{4D;XU|Uo+};H=vYxZL<e`jf_`Na|69}uRlC)3Radq<%J{d$j
zM?;ewL$Nk-0vSw#WIJ3U8g$aR4s8iM8fyFgwqtFFQl=cWx<Wi5A3jY^5IRpX{akc9
zym-*oE3&x2HqGy`HO)`VpQ+Me+vl8|8eY7j!67QwVk^f~NOlq$B#`{$Tt}!fBF7dD
z72q8J>qm4#HBAvXXCH7utPSq6`xa7OS|X;lMUKnRB+$!{C7h;=<j%41V9C)oQjv1p
z<t_wJUWU?RiHod|X)y|{zY_-T%P{hV0>RP^m4BiNL&(-FgJ}~5t*0U5l*TJp>gFuK
z;x}xxvlCqlQ37r5R0Kdj+Eh(dtZDlEoW|W0<bZ>D=oUORa|&*ji){9(_<|1nJ=%N8
zw+L<L25($*E1IuFb!>LOL!WeT$V(>YV~FBuPduJKb$D&c3k1~DAWy+Ff9hh89xAL;
z!iL1tpn2;xt_77+`w#(C<$W0M*1p_`80}(<f?VnXb)P)Tv5WyvrO#?&s`~V0nWy27
zX8kPjrUUR08>mmE6nqh)pqSsp(J*YTgLIip*eH6e#db71P#yqzq-<JHUGPe$_<M(v
zM$w3#rU+M^*p8uqW%erLS^g8_UM1I)x%`ZixpxKWdrm6`A1{^p<$e0Wv1`B+^>!=f
zLNl_Qcc5OF>OHL>C|=eBMqB?^)g!!U6>%j_BWaV``s>d9>!hSxzuiQMwDE5hUmFDO
zyU$B`@4Ct?A91<e4L>vUyYqrel}A`Ro{-Els~HD0_(wkWh>~kSnOYHzPpiAyyKY^V
zz;`3Qbl%lk$7#XVk;1a(C(DmwzQ>8NA1eXr_7?d^v-RQZ_4Urz{Yj_0+Y|7St2s2<
z)_VWRNcZcVeSY6Ym5W@yy19rRwgK7jJIB0w_+nCB3WM+kY_P})b1GpF`jXx$B7Q4X
zB&1eQ@}`$S{ukgodT&M2qSYCMJe7l~ZXD8vP!Bj!yRe3M@jH<_8Wh<*PfR@^SUlIt
z(m5tgSDK_B)@-zSr6a2rTE!v-Rl<<8pygT+8Gj&Pbo6*6{_L!K=hmDrA1+llue<w9
zH~!#i5o9-TjU%4%_y6Fji9F(F#sAFb!hSRa|EBIxQ_xrV$I!{x*5Ti^_)BV&b{kv>
zTldspmj!O|tCCPZC<2C~-p2aZ8aqXsrP42jBC;DvGET+&^BGrZc1&{J)*UX?*<&U>
z^iFa-El!@Y@Rqg8>>DfyWQYAZv$lWhH_6hOo}#R?Svni~oQRVh40>p3pkhr2;2+pN
z(lVpmTZk`Xatk{^R7Me|QDD0wzaoVABc-$uEss_$`vFl2h^}LziHNj*5h}8%@sSI`
z=s%PpZFThVI3f^h+kUN3nlSuNcU}$Pm#)<GdGPTT>BJ)V2l3$M*MFR|J~?A`J}r$d
z|C|tH*`sG}8Fdqxq&AF<q3dD>n6=Ce^s(N6&>T055?zYML2k-rnJedI2!b9(x~rPz
zc#Bw?VOYhl7tUW0u(n#t8I4DI80RxoRrg@>inr)T5LT#Xr6(9mPoefFc4xQcD%bsC
zU%ecfID;?)N?Vo)$&{js#4e_lQb$IIMLS;dYV+%EqFf{_-R#}-HMEnnO^Pv?A0<nB
z6+z-Vy|wa=-6vqcZD$K9TJ($SO9&Eu@@&Op->S<fbMCB*IgJqvZYpWa?E(1}vNTi2
zoeDIL9lIFMBM?e$IQS-c%CBjk^GF9F4a6y0tCF8Qgcn~NKh5_di%)#hcn&>iLCGc-
z(b`Z0cJLRA(bjW-*h=w$(NqJ=JN;pOP~s!-#6$FWQ_F^U$E)dF!X2SafJASHSZ>lg
z#L%k$CeU73eHK9-E0DFOkwK@x@&nK^Y0+WR_H0Z!MVk^IQ{+vx5U6xkVwIWQxqbnk
zo0AiLim`ZWWn$Yn#O1L`bRDeIegoAzm$r9l_$~7((z79Urn87Nlc0yPAPiGEz7IJ;
zAqO?%^A)3GQBQY*9g9DVzS;e|fS5H!PTJLbE$xKLR6Zh^7SnkXs$(7R@UEmM7++kL
zm-#9MoJ}V`X>m2uR&<cSZ;eR@xgm=M=A;w<IRF>@I%Fa8ij(h`!2mA%>;2=gUFXZm
zWK10ATiGjNvxBqi<JaBs-#1<k-@hf>7O%*u=u=RcQZ$fL4KOWq{e5WGh4?)6q_H=d
zG0|FKX~|2~hz(32!0s;<9WPcKKy8Vj9WHlN^>;-&IXIzNpZJVN&n?&)QOfM*;x?$U
zI)*9`c4~*)@Yt?9>51CwK5aOEoEYKN3;~wX<AY<eUPr8Y=(}cDX%`EO%bO>>F=As!
z56a%qO-UXNb&jK`aSIoZ)Ajuo4ae#KtJ(O6UxgyC4~YW^0MP$){4XX=CYDaLHulDb
zHqLaW9)`9KKVv;p8&wrZ0O0?HRizr&FEzw~5OV!HA~#2C6~&(Vfh3}iz(eB}FSDH6
zCV^72;%bBYj4tdaPW1JDIu&yi(Vl!}&Xo9cG-MdrWaN1qO#>z-@s>$57yNFF8vQ*#
zToXwTJ!14gnwe^79^F$DXgEMp?Rr;q=El1uAFO3=&`7yIi-bU#5{F+=E@)I7#4$*R
zPKqwzNsKL2xD&WCbhZI8fLB>9vZ$S^jESnoSMi;^Dt)tLWWGF{mPYaUtqI!fscD0N
ztz*O1w#Kw}#0Rz>&d~R}^t~#N0P3V{%Awel$fen@rO=>s^B^2qR`d_(HJc-@yxn`r
zS;tt9psYHkvhMWL9H7^qmBRI{%?|k0ouvYwttL=wBPP{N9dqUnY}uXX>Hm28KUB7#
z*FP(f|9JENoiP6YS0aWE4$k!d@wES$q1s57X}Eeo0|0`Y{vh>#oc`<c{O68-m^O(e
zH~;{n$^ZcP|Kg56NfZALxu<nJoj1mkzkB&bYuQy(tSq$>Vlxy;R4Kxr7z(KilBQJH
zih=w~!Vn=DEas5R8+U&1EP)HmIkq%}R+z~E{qFHOx$Zu`ZJ0{p%1I~LSWyq0%vVZ&
zt@J6h_u;|*KL5&*lT|%g;E}Z|+?$?Q)gl*N_V}`ZQYLlP<N2$aJ$vtU8H)4m?fRP;
zFFKivmnyZS&dsMlKGvWJ`SE0-ke!)XKj$Nu?|8VW3hm9z<F)mEubPKO-F0-KYi_~Y
zF2cm{aGa?gEr)E$_;hs%3_nz?*|U6Wa_Mlq>PT8qi2L<pSmkxGTO(=Bs;8kQ-7`fV
zH36h_qrP*G6sC+i6G!fDoh_H_epJ}z>SQv?+P_vC`p4l@#IF=LGpN)72foB(3cB!K
z2Jf455`XXXi%5T=A?-N!vL|w>Yo?dvKG{>*G?>TxweGpwdn%!M>8hReF%Wc}#Q7V7
zjeU~p6{slqU}kc_%K8r$ABR?Y??C61GRMjFCPQ6;lV<4gUZk$9kH6h~>nRJlWcJKJ
zxvbPV8=CT<<MFG5w;OjyJGQPqr7Ju0Kr$CCIyBF;X)=8RRc@`T7Ur%~<*Q{nmi3-?
zsDTD3%_#`DJWct#m&!Q{;LKD5PHX1WXPAKhtIEblJp-&~1Jv8!WLB>F4ysA5Tv(cz
z(rM`ijTzY;`~8e%_&=^X12K=kUgB2F^0Q4SU6qeStHUo1#}4ODL96h;F2!v{AN*Rs
zz<AsO9>(_kQpkcy`}M2|<n?IcH%!!J7)-=qOM%}99*M#q47`Jfx|d2M{HvKog@IL5
z^9aeD3v=(i#E7AaHw`$LqidaW7?~G9IFycg7Co!|>}}zKmXDG$#*o^Ab4ZrGy|2lR
z!-2L~6JWwXMj@=JtY0|5Yw8#YvpQa>Nb?j4L}T$0VXJaT^<jAH`UVBgiUf+&6!?!I
zFD;gN0tlk@3wxX9T_JT+O&luZsO2l2^8F=kV7X-~qJEX(P=XeYGxnDPaZE&KKR))w
z`c*?2$YXJsLm^iRi66DJ5l6%h^;<V3>LQ3NU~#SM73C&d*@+)?o*<#YthY<a>iY)h
z(o8^MGsZjajf13PbWT_TLucX5`z>Sag=F@7RN4Eq;YNjeIlRAqIeECU^Ep<4jVz$g
zz+7Hj=QPE9U1#}mKc7P6P@l%&8+Ax`j%z`Jw?ghkAt)1JJ$*w`j?qvxi!2#7XI4%k
z`zh8jRukj(pPfYu>WEwBxf}T2_FZ|#a2ss^+m!RjUyc-+Bvzv+$H7D5&D^UDMtbnt
z%*AgDBBdn18kyL702C<wAHvRQOB4mbv1Qw~ty8vb+qP}nwr$(CZQI7&*Xf7uzsO2<
zlI&LipUBlIp45=BAWpM<9&4i^W7!>o#UUS9E0GaZat<sY5{ozQ!w3oyd>pmHAMs1n
zdhw1H@<}VFl*7h?$<_PTEBgs&p0g(ote%lZGE-1my#&g`jMGyoMS{Cbk5R3b>e-}b
z-GIpwbkzrddXDP|Phiip{`Co|UUk~@2_pLQrWwBxkpb853~EA1F50Td5dULPFS3zM
zT1-<2TW|#Z<7$vj5pr5o2rWR%DKuQ3V4SuiK)hpg_riHXEsf=)2AI#4i<+t^x%>kH
zs+9Z30Ic`A6~}LO$W{=MTvC@oDUcf=#T>?w50eH>Y3UN<1(TH}VKts_Z@5fiA0`6z
za!9&ZTX3~A_*2F$k2bHyEw!}sg8=Y@(h%OH@I{6NCIKen{2u%MtB0&<|HN^Ad1uZb
zH_G)H-VdooG*hs^T)dyu>H1!rz7Hk1DDPGt_w}Q&HHKk)`Z1mc%&=$W0P13?brln>
zZb`hx^RfQMUD&PB`f1o_R!**iu}g=RewpQoBmrhICJO;z<?&Mc>i+h9z`!=$_^#ch
zxq2p+&F>u!QfbfY=s2$i0@PvFcK0<%4s=W`VT;P6gh>%y;1n;;yDZ;ktMoq-95J~O
zTZG=R0nfcbFLp>rczM_T@n{7xNHD8bfT>nZx~WRn!v#30a3Vn<JiCPI02LI^Mq8Aa
zvp$A%af77XY=j56IOt)G!*;uSVAj{$79^2-C46P?BL)ePdD9I)t-weBBa#hg<~PRd
zVnCCQ22SWlNzT>=(H$nXGO^`6NL*I1;i>w$K$b@9u{hyupqK^7_>Tz<x1AKfDOp7;
zNTxGFSWUjPhXxwe{!!>?BlW_R3aWSc(u+#Qn}}aft;V^VG+f=cOyn)R&VZ1CdD061
z7}FCd6j!0=zGFyC6&Py5U8tOhbxerRw^*!WUi92Mf)1BVu1z*re=bIgGyfrGEE{k`
zR2Vd}{*GY?OZQM_K*s$cc*Gf3g*oojR^Iiktvj5@r<Zrxy-K&cuP-mVdek|8P2xJ3
z%UYHZK-uQu2-)mbi1a}TSBcUKl)-0`t$<<)=Vt^u@J4VyuncPXoGqcHp*;Q%k=)qs
z&_B3|$w4ig`U_#<Yyv7|M)Y+w_4p;?+p$dq?L3yYP&5_U9xHlDK-Ce+J<ha3CpaeA
zaZ?VkUW~NDKvJlem-YRCKlX18KRjJnJ8+EBPV<*xg%#>><oyqzpAb@zQk0*>IcTQz
z<EKy;^L*kQUCxKhs95s{YiRQq4B`a6q-mRqM3#S2_bU_#KeHT53SP0Dgb2=e<JPUK
zOa7+oCGfT%qd@j9*q>TBC@0m*d8gK)12r022T+)kW8YH3!K%@LtyA1y_k>n7Rdiq1
zG&b-k4#9;S?DYvES(9DzdM$zp)UoPmm*G-cN&-Q}4dUj9tGR2D+pO9L!QQWyF>t2b
z31QvAoHDG4D8f#}j*a~Zww&|8_cSLy2(S%c=Zn!}=nM+4;gv%JqKAqPwGljs85NJx
zrzsDC7$ej9t(=KRjtjJ*sWeSlK@yp>liQ$i9sv#(P^*~BWsd_unK5R;PxFp3ei+wp
z!ZMbMNu5mvk(t+hAHO^XfKk_gD|>Hu3w<!lcEr(+5c^L7R^<~h04)$s0CTP%^!5Y|
z9+y>Dq(kg|sPKRgnW`MjaS)kL$>J+7C|>=9qds1)J|2+2^>}+jeQkVs&BUq>oC4IE
z_~A%JN73i1oMOmDKPyNu*$!h^Y-)4ky@4o5zsTy6-U_VG$YqrAbx2iWVs=+Ai`TeI
zV6W#>ynY*H^x$JZzWCj!cM)0-Q!EI?8cc4#UAq}17fCtfu3)1L0JFMe70{Krk0*_k
z<h09eC(h)@M*C<y5yJ_kz=7&(%K6}yVQn&MPaTfCq!x~R-lcYPb^TG8OpzWC4;u?x
zPfbUSp2L2^h4;jw8Lu}#=ilys`#WFo_<uLom+x;U)$?bhj!5QIy8r0f5obMcL48P{
zXA^31hlWWAvI{yK!YE0$<TVp%ni)wiE6zh6ADAQfEFWHwb_wpUfI2C*s}l+i9T=G`
zrKu1YvTh+%<r<^KtO}Sd!Bxx}c5Olz^dOaAd;nc(7yGH)oyx=jFWd-O+S5GYvge`1
zIg-(C#0c>sLP;RYC8S*>$SG3M8-idyK#CX`lT{CgcIFRxv6NUa<^wP4cloRJ|4H+g
zk?2>ud0}<^TjtMR;a5SZ!3`60k(e_1E!XI7tA}v%M?#GG7L@v=o<V151rRP@G(8<*
zyh-+EN#cNaxGNc`$DK&Qur@bQAE#^pEICc7#->u=M1p-H%BgE4lM`XSJzlaYBgGrA
zrJi*pLM&pY!8L@}CdfTmq72T?*DZXZ7*iPR53X^`f@xz;i#Nyy4A(p<)h#NgQ(I|l
zmLZRIl*{p?2W#bI!NWQJ*(tkguA$Zk*@|M&)4s?Asb4W*;KhzHeoH6d7nKE>8QDOY
z6CGd^xdG%B^2bL78!h3dfq@|p#Cq(4L$5xQfsM{Gi+N$)W|Hlk_(fDU5#*k8gb?*%
zv3{xcwpHgI^t*;aixjF)nQ-jNCbycV+g3Of5`|qA+9pB3RUhAWuc3Z5<cMqkH&~3)
zq0!IniQw*byAPJfv5aPoNTWp(mmWq0Met7==oX<7Rg~{$gWYl9fG#$^0}(4O2${(O
z*CE1~GDR|A^8_g9Kd1?@E~vT~cthvb3fgCxPZFQ@88B>Np0VH25G9M7IeyAC_zr~H
zS|fsM3+R-gt7@5GO8rZ*^zixI^1Te%ER;f3&;VwF6_<QVTbS|^nI@(!_4shpQIn4t
z`bIkdJ(O35nMa>W9;J(=dgL`7lQtS7%)KQWMzxY6ij5>-pS~bhi~oHAXoXUNCIf0&
zUgc1heX`jfdqVL<8p(Ui$mUa#aG{!HR4*xn0;jni*bL;MQ5TiN8oQHU32{t^HLuu1
zI|4)=wMQu4Pm(F2IcQ#5O@vBfW-@+|B-XU!*)+6F*xCxzRy<)%f6@`Gk#Zo=85z-K
zst7e6`JaI^fyHn>N+z*&mN(!d0zWcPf~x;!wV*r|#;simm_@Exm~z4W{5QsLdnEF)
zwI4$}z_YiH>-Y8N<<j|6Pd<E}D7w(k#pkP|{TSq5X`}Pu@&&VmjlWcGKwra55|FR)
zHd379Q4eWn+GJNLHuFT#@>~ls0wbM%+N|hfnR6~br?MxeB^ZRrM|vR*eq~s(q}efr
zV7wgmn-*-DxH&YKGO{idG{8LWv{PSExBp@rJg?5g;dNi$J@;+Z3nuaGr!4>x*Y#cf
zmH)YYF&7thTC5uRr~y!ywUstb?B=K)%77uvi1wmpVm-OT_I8AxxFq$p7R7h}eJ>VU
z_X4Y8T<~zH4`5|r-tjhO`XhS6i9GrN()A)Y6gr9-8$}i4qo^`#Lcwyai_}dw&6!6g
z+iEdZejmLk0gwIwX$~^Kz&b`XlXLUu&@Z5!cwA||2KJri`OLuX*Il^{IM{J`_&%oK
zfncud#u!*=N;4yMus-3dQcMS~YOs%`(6d#^>Btun_7;hr|53WYW(bx^F3)gO>@rr9
zbn;}BrJQVBt(+epch^$U)4|Hl`I5Oi7g(Hcx__jRY7W@5qP-!dt3w?DM1VO-igOCL
zO3CpQqfppY|256$@->`4oJdu~gI{=z!TTgI_O@!vrekYjR7(9+ckqpV92%)$aDzZ}
z`MkbVBvm1b#?DL+f%-n>vP_CO^PX_RQqd7|TA*!$G6?{<a<Slc=?2C7ywKnZY(T7e
zkcC<^+g5w<Y8KaBC#JAcBb)3$AqdD_XDV~9gU$0>Kc_`EWv`SVPxjOTeX*hu=*-Xl
z5mY!dG9^VPx&jKhR-<NF4FyNs)z}%zwnGNZxF~%fFqZ0k30Z1H-fAPB+U!t4{w0+}
zg&d3K%}KImLmUiLJq$0Q(41clV{)09Z4h+Ue9hRuKgf25D%!X_WJ>xuJ`mAPtKdQ#
zT0PDLD3VCmvEL=&U_iN=n}Z_xj6hqmaG1`ua}`In;mUa_%5A3+QXC&24adQT#!aES
zYmYQ_OnL51b+Y>RL2QZxZ1iI(cH9nX8ZZ#>^~MAH(UB14$?)6B^^h$${I?Tk?AIym
zw-iFCX(YZAdU8N07z#p_&XzE1_#iHq`=EPTYUI=SEPOG(0RBS(3<d_-y&YdpF899!
zFDAKeC}9ly!K7Argw((Q5AK?yR3W0O$vzX&9BIZy&h;%X@Ij;tyX1ipkl6QO1(xGD
zE(-(-FAVnK5!0q%NzeQ#!S0=K<8`jhDMC7Uq8Uy(wWs1my6PwlH14f102r4tE6(XK
zW`>3VPz{15gdr6SArl>Ti=uf8p-E+XFc3K_D$)TAZvA|A&)>(}fVIvi11`sX=@h+^
zz3AmNu*3cIKd$AA@^i6vL*T3vAL_EIR?fmjN=+~FpFvg3^TXx*^5{*qd5)r>5=@R2
zFm-`Zd#l1R?)51XGj`Mm4)mY!UBYr2`Iw2669VNI@0+Bd!lmkL<an*iwZdUKa|Qy6
z>Ap!?VRiU|<D+MYL05=U)qk5zVJ4zpsN)S@Wmeb1nFm|<VyFjkpM7C`RB?Qlf5_jA
zL~7(=ZVgW5UrPmFgn&@qva%M5YpLtEPe6+A&oD#B;aHR0IOwwsWI(3v4+plO4s6zj
zDTa|OU4;~&u;d-_(yz`cgz>ONr*R@04RN%)16J5j1_w6n>_J;0HXznk34F7bKiTzZ
z2y5%E)+J4Ng+Y$j+rm4f7z7mp#>sKnENByc&I9BYCzYM3mpSx-^2$=EgwWdI_lJnT
zu*;|3EWOw|KE3$=NweIg9FiD`t%04LoAc*i+ww64F~of2`s_$TnCenT`|@f0`mk7B
zrGb1S+>;UIuTBL835SHiQ21%-BTi~Xc7^ysK~e+ZgW)TN-nj)O$vhogz1n|{iHmD*
z?;o9>(vjb4bR3JOfT2e5Ci_gAM#gcC41Gg>6{2-|s&S5=i3$QOS_R32Xm}0f;&<u4
zMtZ<H7rDZ%T?t{qCH0Tl*e8tD`RJQk^SV7m*@3gX3!n~_y?7|LPL;_3hm`ab8k;&~
zjS2uho-E%M_8v}*Fd|pV(-=d)AFoc5WXGCDhj>-$ow70`3guHTAX!Ku`qsyVUF3l#
zQqyoVa0d_;0NevdYTT1m=Nm!iCr4_4d-t2I3kb<q4ZP;u61uU7-d-p8J&yVk?3olw
zn^752(Y6}#v4fUhO;tK{LiSP4xqWUD1H|=mbi(=7Wdg`VEsWZaHQI2)6Hxz3T$5w-
zB62BNp_zexMdZ&%yF`^yUNI_7A10yrfct>0^Vp{zQ;imDicS|C6FgF?G4XqE`(mTA
zBP0uU*{C}6dH+iomslBJnj+M$;1cPvN5CPgfv=jCe>6H8H!&y!T?ReGACpK_QW$Xy
zgWqMJ($z$CYA&*ugae_X+YycgM=)yg;$bU0$6%$Ms177I6Z&hbxR8eGjnoiI0&r=G
zXM&$@Mi*?T7fQ{KpQs<$k1=Qlz)%GE`D8tu3r<k{3IL48fkPkHAVLkM!KsZn?0rfz
z%eeM;=}qWXfSAH2%VwG&73ES{iDaTtNtI`S9u??NJCx|?kfUNbszS>VFI5UNtrWu9
zT@LT<rk4V2Q>3S>etf$=s10~KL>h$SqTIU*A{NdA;F}}d7|B#ssR-1K6KS<1gysD^
z%Pj<2arFgKvJ>CUAOk8$F>7`vz;za*Fl)haK)EKZK2~?-<VNHYKYS9_wij3R9c!zy
zD!+k}u)QG;araW9VevVUZDZ;)&4MZ@q_~0$R8jr<nZ!#wNhH>lO-Atb#e@rZNf~p7
zZ3bgw^8}*eB_i`Z;{J$yvIxrM*t|>T!3v7R*Gc6ayj7$;h)s4TSB|24-pwBEo;gM+
zOj=AIuBq>sIHW32R#gq`MNBhqp<Ou4&1;J3WS3m*)EU3G^a9xx4K=4sh-cW!k~xpC
zt7Pis^p}ZTi92si<n80xOhfQeWLS1Ohn&G?qbY+{I~leF{`J+uy2O_>M#t0f=V>6o
zb_yB&b~cQh^Rk|hX(QUajpq%;vPw1-(%Mc35<c>ArY#RS5Mt^9(=eJ7D_sL$gg=DO
z*kAtq3jFE(^`!D8dKr5EV#gPPhxFT$w*8)KF6G3Rzx)&Na)>*f)FxQa)|LW6n@CD0
zzYca`GnZrVmxTc7S1}sFcHZPW1@*a?gNyZh!oNN7d*us!aVWJJGJ>()Or}!^=|?qt
zXT}}XOO9P~;rzyhu4_S3IQZw-fs?wJm5|yjxNrGX5?QEFgWY5pcCUCr_K5mV7===S
z-G$ViE;Q}Fkb*p_WXoXexcy=s`TU)0)oh!;NzOh0tW@+5?vCe{wUeu?Wy8mQ&pOz5
zb`%G^hIRkLxmf{rXrW^r+Jd0!U!1<j{uQ01Zka;Fr!E_oxiumzv2+x%2=60nqCrsk
z)7;uyo3Xp=(XP%{@Gky<haE=aEJx@%KbO*)`5q&kFo;(!B2lam*g61>CJ%T)gxsQ=
zvsErlD1na6VM>AiLScA-0qx{U#E<zZv7LULSwv1ic6I-xihcS_8iBiq>$u4oPc3bd
z9Te^%HxD(Ux5RnwO@pif$grK~r?tJh8g-M1-SGT^_wFjDWLNeMSdJfa_vg{U0sLCp
zP}>jG_lIAgZvyz=(x-@hwv1{}dzDTTqAuO)`}G|~MiU%b>297}3f`WLhez0Le>>Xw
zxQCCVo;7w1Cp&8X^GmC1L$Mdi3HIiwCZIq%tq#${9@Y4m@u;tu-B*P81D_KA(A~54
zUO`>h?p!Mq7kuHn-io;8M@T4?6!)q*+1~!%#r@N{WFD+t1J!}GJ==2I5Z^ZZnA@`|
z7Hr*Y8=FF_Mu(W*$tQOJi5~5VlgV?sRCA4r4(#7EE%lcr^GQ+^0qh2qP3Kc><pQDD
zxj50HfA74Lt<3Wfsn5UZ2@%IWg+nQ0esomV42W$hOpa=%1gfUky@-fM>SMtlkX?r1
z9P;kQsR#4%J`yBvV3CpEU?B+rV-xUv$=e6AB?<E$jpitsi6DwH=R6<s-xUCDCsL`*
zE}#n?zcyYdwOX+=yl?vt#@-Mi0Kow%|BzpbC@8B-vG?2kr<Ip?TW2!vX+pM3laAz(
zhMVMa5fYheWKj|I=m;DlzqjM7wrnAof4fBBy&*<fJ*a2hd1y=Xb@`cW_j+e0i5)Bm
zgFXca6GH&Q(=Kp-LiWvpPnU0B2C&q8t0)IEYgv<zEz2GQIK63dxshGoXb<DGPvP-k
zKYTN3{yQ=M1b+P?VaT``RDE=wp0O3k1+xDHkBnG}sSI~A&g4S<q0?}#^_O*WQW)9`
zx&0P1Oldm&mkvAaalsUpP&8hgl#4i29`3LSyF3)q0W%OwCMAhWx^<8zR3evEf>ci#
zE12BU3>yc{-R1B9y`5aH>75~RF^)K5H_Q?oM}0GYOTEIqy^;WqWQf)pow0~3jFzH%
zEEh!9=2LvrK~0q>N2p@7ThSbeSm49oJ-?7sIiG+e?hcs#vL%reT)eFAN;Q_f>b}0d
z&oT-p;#_GOwOUK85L#WC4ms=5y)78G__C73OPGZe4?G4sxo{zW{}3pKyKtC=v|v*m
zbJ^~@DC-p_%2+r2okCIoSyE}=#Q?h2;mY3e1!+QfG-ATAp+^dz;BieT0nGvm)18Xs
z-YmKlRC+UkPK0F0%1lN8iS$EF%mmVH#?<Y3zwLzG?Ok8xKu=p;{Oss5D76RW2ix?H
zH#iy??px{BQc=zcM29Cx(a&<^!8tetQ!awSv%nMJ7o7e#Qfzhs8q04;Zo&8IK#1m8
z3G-HhHvX7eGLl#+?SolRrksz@OQv(Tj)-H~OHL~-y;eZk7?%oH>;ORM0Qk2kpgv4!
z&d)xA^{gL*i76(8x|nxS?fn??x9W~}x;L4K$W=<Fbw2iFCRiQwGXzr$V?o+Rhw}$U
zHGYSjz;kNrP#8v!5QsDgeaL~qPyx)JB5W4g>VG=S1i37;55R4-ij&(DsuRy1sdEh-
zFGz_{B{K7gp+{B4$_=CsAEI9#o-c&g2Skd*GIwS(fHW^`9=PzQeCTKB2iXti6dOBa
z$LG$lNh%zO5*sGO(~hA>jd~mW{5+zN*)9jOzrZH4$8@z90+g<+rXsDJ=lAq<bN&SH
zCYh5m<s#B?8`Q(|of7&Jmn`f$4PF2g&<qTPX`^>km$_{S4vm)NEm7UqJsuFp0NFsr
zG@;&sc={dbazkzL4z--|iwTGJ#NZf}+`^~9_7sSRhixBD;nXdT+bxDEB$}Tc)s>$x
z=!(VX>%ho~ts4{8JDKOZ8%4yYxarsi&VG4luDT}W_5OPE^yIYHLGLb-`qiD{^KABF
zDC-8KB)|9v`v1qD*cKYpWdG%>c-Q~{g#SzYDI`E=Z~cD-pgkHoc1P`~K4*0V+hJt<
zhZ2olpq%LsgGVpUL8gfWvxT@cXwagCHmr^1gca;ypGRJFd?b?&i#Jkvh7!joKiqHH
zr$$9mqr9~x6muUh&r{hA8_wIx-^uhbi7pzH7VVWeEK&;Mz009{ERDJ}weEy5N>VBi
z<Q_)Pli@Kp#<ab<d)st$=+Qo(`=qk>N6-H`4{Sd=Wqpm7WJ9Da+ll+_0CJ+f*xcEx
zoyn}do~@QDV|!kFW=q$E$QtRDX=>q+U#NU1P0WYQ>&eJ?zN~@MA2n++Mk-J0>rYXT
zcW%XOK{C%daMdHCvaiD25=E(9+QOd9D2OC9Dx~B`5AGC0<K#aSPM8cwFF(z*;s!1<
zlf&=dEPB(obar?2cD0yYdQ!W%`p`vKV<{(rY>UblAzIL5Hd`#>kWu6lG1bRO<+$|E
zro@+tYL%(d=_*|bEkjs0X+EF%35=_PuA1T&#xJ6u=$&}QNNCsx$+b7>I-WcfKbMNB
zB=eQ9DC)P}#>P5?H7A}N@$&teNc|TS+2pE;D2DI`YF4B-_h()X&ZgW99cQCnU>jcw
z#Jt~L-}17y`crX9$hXYw-;j{o7$RWM<D&-Nz$N!?+jp0XnT&Ng#Ut)xHP!i0Oem)&
ztkEAmZE`#b0&$LFzUx>g`w_=#P;}S=5WI2N9he?oLi)Wei=9H)?-a@jdkmt-l(US6
z_AI2SH^iep4<qF_8A5rlH4{Y$Derz7On#{%SGp>>eB+XKKc_9L;MNiKgBZ(I%SF@G
z!WO7ZD*jtdrd5@ZYnulEbXSAdSmcDi=wD(#;t0)WqZ`R}0bPSAS2=a4k{dOSSL$-g
zw}=iOh`eEKJoAi9?P6o;J7a_>@g@{t2=#<I6J?12y-zd;XetmqbEP!Ul_z3bEmW)9
zwJusI+RCa!)titicV4IILd?nASP4omk#lu-XKvNW>RKDR-uC-J*DnDB0!wgu;*?iT
zh03C6vPJ(i0Ay%ft_L0pzuJ#N%Bi|>Qyh!TmJs7MQEM2J&vphGx1bg5wLL|AV+D$+
z61+*35?~53y7-}pl{<dEtRKprqT<UJ1dc({fZ{n`jN|2s2j(w~;4qTsV3k|JLEm{g
zV1!ZNU`3m1Rn5ohJNJLIrF&`3@xI?`5iIT?m15r}I?2Dj4TTeg97`&xK_skbA!7v)
zr_!x_=HMW)0(qZtT9YLI8}5Q~g3xX$O3iop4O-A*2aXvmLnaco57nlS5+M><3CfD)
zh<~AiGgAB<sF<JON{=CW+i;)?NuU?#V{=la0m(jdjUn1{m7ilxSr73phE?EGrPN;!
z^5x|{$b8<WLSdo3FJb*`JZjQ?4i8S`G<rp*(m(O(SvgGrS|&Fu!~>Tf@p>@^fF$R^
zBakVm;qfQ!?W-+Mh6DQ0#TtFPHra%U-w<=@<LF)h{$z=%&x%xAhf8^Fh_PFXFV-eY
zTW*AlMJzr3Z_)}Hx|XDqgR_Z8`}m6&B*b`Hfp^SExqe%5Ie5lltw>Be<=GWQ1iPtL
zw^9W=T!umdT5R!B4nMc|D<?U>8YJ6x*k~KYLf|qWkS{_q#Y+VnDmElpqgBOTB%dDu
zM{b9$QTf>AS{ulOaKhY~27$L(rd||Jy(p|*RJ{^J2fpbBmR>~nDKxKB@Qx=5Nuqny
z-%#_P=qA66uHCoabl@5O?C&R9|C#ARbpN{Ks;~&;oSB=Nk*~jD_hD-Pyhq{w_ga6S
zU(o!!1-`6d+<C#!Am2O1)Br_)naguSxjI5*@J2#eCoFluTkEP5l8(|!cUW@kZK|{^
zK<_yUbF(%H$ox3)uyyB~AdN%yqXd^$l&1*S1D29M%e@1NFwS;ehsG|+<L#OW*l#uU
zCNx2bfibY^59V2aO%mf5ekBu}RP+ZvOE}DWg!(|(Dz2q%@IeGTz+~#abx=>P?6a(2
zi5B}&82(HU(NOkvJoL{wXp*eaE@08%G1{p%Z~8^!7|7d3Rs6z6l=EnqH(GY^N3DfS
z5f?}clX5f&r@CIPc^N9>ak9?Gn|!3hE47BMYSM6IQz^Ys4#+va>{>=z6vPir;Ajv@
zKa>wUQZjH6F@-uvEC0~D8Hg$`bmmd|SZ@GbT{KH0c#OWGF&3_CeYEWv;AN}((Yh3<
zO*8SO7_qaUNMp}(NEtDcEQzmT|3`v6FqpMghfru)jzM#Y^R77&_dj3TZ>h-&a0PBx
zrR(p!CHgisr|5<zVd<xZLmngU-Pd;xkSUgqg^8gf=jTT+-RDKw&#?6}S?=^EZ_g*<
zzDgdk&pH&1j)z{|4P;^0xQ08|xdLJCoX#>MC)pJ}Z<<nX*1oR3Z*PvQ-6Xrxl%OXy
z%FPEXl7ww8O+MHqvF0(+QUhEEG368$c+>?mQK!ta<Z)b1a|qdv;MG!xeJJ<$oAdAX
zC>ALiw&giRC7s2~bHB+H8|!*mR#xTx)ib#{k%VbD>A*xHusuEZcvYWGC9vX7ikf@;
zcgpodKO&l=Gc)u(vyY=4HXp0cag#x&TZ755SW)D0pS=m*5p2%tJo>?dA160Q;b-gL
zD2<SbdlS4c4_4%>0Kz<mB>p^~;lVL4Q9S*A`qOISOpY|Ei!jNk4TSwot~A6_5_VWb
ziK9zJ%&S;E_ekrzjv0YG##VyRTopA_AFA+M!M9QJcXS&a!&!^ow(NS4$_XZeJ<+s+
zHv{uD7QPXXoi5DaqQPd=vLWkhG}LSAhA)i`29jk+!66YbaMO#`;Dr|~Mpr$yoixRz
zv41S$PbA9PQKf{beZ^4{^AsgoS7DR#($?;Z!`g;@{CJL??&Xk_)OzZhbB_fh*o*jh
z>d=W6>XbZScr1uzNrk{d2MKzYilfvr8hn&RSN5QhEy8n$Kk{Ix+s!Y8cdjFIaj8B=
zM}P7!Zs=n=dNe1B@>v+ssDx?MI>F@GQ}(B5o&8a174(tp9;4#&ukTvBOCsY$qlTQ<
z{|>XZK3)tRUcRnRKc7h0kdz`60;{QjL`bf%Vg`Z`7~kxP0iqb;^(=YexJ&wcZ)<%*
z@R0{)Xiw20QeE_hHL9eYth<?tp!EQiR4Z#M4D>j+#4yR1{Yu4cN8p5r1t?(S0yUio
zP<wk6jhH$Qf3ecXCFuz?nDieKfZv<FLk67hcmJA<dC!)rMqrK9@F8d`u(R_SQHXvb
zX#;&j>CW=%x!)ho!;U1#ZCstcUTz=l`1X|e>|8}_R%7+Db8>QYvvdAN-jbi`v$cx;
zL=rMu%>%%KZJ=82%z?4+#S1+i(RI`+{b9p}ua>q=kSgyZ@E4{OwAnfFoPJf>bZ(Ux
zygxrsZq7af-$Riw2*0joD2OHRF+TV2&_Pq#xKiZ;)zX-aPr9=*5YWP@6p}@Gnt59g
z#1Hn%TbyEi{%&{vd&L=xk8aWEf%e)J;TpASs~|(cWKe(oA0r2Y112D@sQ-yi{{LNo
zI@ws*{NMFxE)BaQ(agISYN#Ig20)D+SKGQV41CG4b=$3a&Iw~P;3DBvnpn!jp+Xv~
z1wP-tsz{aOYe=RIU-Kws+&!NwdYK&Rm$Z<79|gU<U+fB#v{5B1;GUnaM=N6yx-KFb
z&RO;5pI0w4H_w)p%O4Uu>ysUi%6WP7wMs8<Pf0-`v{_4g=S4M*u1n63$y@IesPHM?
z);7=g##@HH31O!XTb?Iw|D858|7KOwp0(1QT-<3a&{%(EaigW=qL-wUMKODe@3E9>
zop+m`h^S0ezGJS9H(hWRL;ap{Ha)+aKxgsna=F3ZzuE6BT^&62Q1Udtc2GuDpWkL-
z{n`$0&8l|H+!;iT9Tik+LDNUpj!V01(MDokv#yxln_6%i$5?a??yr>IC!cIJTi_?6
zL$*IwT0~7I^=P!n+*GIb<@!_=Hl4kNiS60+wAWQRGP{5MBy^u|rd$C`cr0|%$zz8v
zF;>g&)@1k0*=%6`4OVxK_*mpwS5&PqA)=|T18}wJZk13<%KVk-(O9mjfMHzn73-nL
z&}BZO*2Jpv`u*H~d9AgGoF<H0Z^53xjBK_(WUU4kU%tyI%v`xvl$G1$*^%S(>B-&#
zA?E-q++wOK$GIZgft_G*_qwaAsuAc-Jl3v~&Go=dZ+Sw_1voVMtyeGQe&dFl`4hE0
z^>@BQLKw!F30hTV+ip31Jz8c2&GM+5awA!9ub<c*J+P;zO-(!>-d?^gt<1D2=Ap5s
zqvfnjk><Ah|4CkT`v{)KzNnNjD_JzK5!05M7AF8>xl)`Ot()X91Bm-Q!0vFANNGW{
zwAH_91VvcMs4b&<5Aw;nK?5r{;CcfD)mv28o-HutU%)tzw2nh$#X&}t{8Lfj*_Yf_
z8S=AXzn^FZ-8X8iwsq156`Qa8m2L+mtO11lLG=d6(X_O)Oz9M{S)qUytwW%X+hf<f
zvT0C!j1Vsal<vGKaBoZ@d!Uh*j^`S|sg?y-UQ|;dPAr8MyE*|Id7n)1uM_nKOg{Lm
z53B=iAQL4>kp{QdUCS}qRQ>1wpllY+g-Om$Qb&!QFLMCGy4IP#<Qjt2$N-lQ<jrr6
zg>W^v;XQ2ZX8#8!z{(5&myfPs;2Ib|#`1(GMcEhWug77CY;9i!Ce1;BngBf_69nip
zI0rDJE|-ffPpa=w0%nXr1vid3PXn}(Q417ut;(PBuN_SOih!Btz=(UiC(ugF<Xs4Z
z<Xa8#Ph@vu9`fnqNviyXp=!+_m7U*X=4C9g7d&#bZYYI-RhnZsD9$Y3#KD%6dG(9{
zo|C%9BI2&Qo$*imfs+IQAnLh7EBP9N6;dksa+<iZwr>vDUyLyI9@mOA-Ei3-YrCuW
zr!MNk&%0_swYJfAg-l$Eq!`7|KgaR7VYKR=>`S{HE+C3tXa^ueL$EoYy315p3mu=9
z5%Ghe#PdQDb7P7ehx{1HAR3muTD3_X&j9wJLL9PXspH^ATtlDG*1n;<?6FUTY9X*g
zBLz3|?*kIor*bWdNXuV?fuliax*O-LhL8pvLpH+jj2tAg+JC-Cuo{7mAei)lsP;fp
z{UQ!a@E9eS23I>Of8f-5rBy$5GG>%OJnJL-*cn>r0mM5SYAj|xIsgzyHz<+4i6qf^
z5>IiQSBL}(tAnmHB$9@kX^8rV_h`5`^qMH!7P2y3jyE>EnAjf6B?!i;zLIO>c0_m?
z^P*1i6JGYB#47Fh8qUNuGM0_tFZVjW_ZPBp=<K_rFv;*e%tS19gOc0OR>ZaY=qu-N
z$RY1^Ts|y69<(A3I>a4`KNJAMi1up^wLJ@ohm#ISK=^I?3*ot{jV-cYlvuL;{d^qq
zW8Xsqpl7~mKs7pNAZ#VWMOKiW<tvzeK7gQ#W*ooXS|P0igi;5vU%dQ!-i?+PV`WC1
z?O$(TGL$+oFJK&Kqm42oBIno-z%)xg48OplBJdQ0$B<9zh!V-P7bXZKNE0){)p2A#
z%_-MA-juaKT*CPDnP=<6p-fwU%A{CkfGXmWC*4WN78zSPDA=I=LZ@yD2K@2|m64ke
zb`%sSuKKILFA5xa05A-9TreXMH&1m1hJba!88y=K@2`tODnWDP2|=7fP!Rw#!%I9g
z7K|6LBZwwVopYpEtvCtmZ0PX0k0fo>fjv07pyuTe=^Pn7F>x=#9Y~2ve9NpFsgttt
z9(C$5y&%el{{bgpn^uW~27YBomx4Wvj~rPdW(YO6DngOUzwe4h$CNE@6A%SZrHIz?
zgq$qjE$=CXf&vr=(or{nxbz)T`=Wl%A+3hv=E=MhCp0<xN&FFSXo7gJz{pg79ako=
z_dhMqhPf~U%TU5D;YeOp6~fl+FaHqb?iVUh!GCYMlD!73@tUp_<|0QZRIocVZ#Z61
z*RJ*lswjF)L&wJy;MW3Uz*JDnn`o|Um=L~&ZVnuh6}X0@s7O8zsU!x(^bGf?6KeEY
z7Z(N1Az?#$@=W#me*2;0wBaBxWwZw%lZF1N1Q?|<$l>+(=}Am1A?0t-#hIX#tG&Ja
zAt^j)k59-nRp-Fk5Vd2p<M;ivq-ea3(irA;&PtZ^-iUG)Q<?6{tD&@C&=giwp3Xk{
z{o53zUpRQOr~`gS_qo1Yw&zjA<_QnL7@c8QgApT0{{Y?tD|JEp02fCr0@K_<Dg)Gt
z{o0X!m40@Dh<);p<A#PcuIZ)#>`g>`tv-)74t%9A<ZVsh?_A=gouD4n{}4d2(~>Gy
zz4ZKw%=RnZUI4?eZk>ze2~7re57_o#(Yzt4$@unm`POf9>vC=6?O$I9T$C|)yX8O$
zlsY;4;fu$uXLo^F0D~=q#i`+8(NJr+*ttJ%39?KGj+Crk!jhhl`_G=4zuVl}{UnX4
z2u}njPP%fSBna_(D%6Zga8x2rKT8`{oIe52NogK<L4!-i5^1<HPqS!iULC&YHQZW9
zmg9}{*~|z<g1h<+iTjWUw}G?3M1A?(f#2gn-jy!{Y0|Z)<S7hQmip?opwYAwdI-jl
z_tuZ5R^`Q37MAqCwN8=H$6ZwjaU4(_cf?5u9o1EOIyoSAR?*B85~-5m995Mo2!f#i
z+>_VU0q3UkEfaFbM4s(&z6;n6F^lCv%dXkC8vv7mR?%@qA+}JEIbo^Dg^ZQ*^&5!O
z_mvT<VX3wO6e1BB=EJF7ftLYb&O#=ccZ4ys$T!d_XU4%J+dT#puL8WqlP&X-7=o>(
zttkHkG5^*iWsAU2(reo3$m!Zm+L{>T&fOb3H{P|)!B0{=m_#HNP_eW?oZ*vz*n8nC
zTqR7Cac|0onRLQ*{}IRvGdpM#++#z%DAekU0jjIdItD^1PF5T<DzINN8<ekXVYF$`
z(Y9iFUR@HIC<C!&Hx_6m&eIF>f0`izZK)7QQ(Z!x?>JaKgE`mNGWdBMEg{IJ9q7XC
zN0Cc`!36ZR6VLN~`!`xO(Ea;Q=)^sAjNsInWJRDmsaFhZ)}sMxUbhipIu4WxEY7!-
zI+mE@gsGCKMBY$>?zscGKq8QcYC7@-;#~EK7jD$EW*mbr>f#_!(^)GKSbO(+_&y$l
zEdg#KvRYziJtakPZ4>A6e_8SqIpRF^Rp*<_E*73JD#bAYze|w{z#ucoUX`C>B_OB^
zq$rJ-PLC$^qAp7!0vQO<(gc20#$prfqD00+(T`;oH<H!FF!5D4C}!iDbyF>)Q2Osq
zl640~XCyYS6Lix~dEPL@QQQ+Lm8z;pF70ANvIQ2>(ts)JM=#T?O6PTk49?M4^xeEI
zTqGPR)2kDWm6R=ug|4F+BSeX85n-^wGbZmHB<jV2dm&<$bOWS8dHjRKN$O5+Wj*C3
zq3Pd?gqj56U#OxJ$%q&z8cc+uOpN1nOC&^~wb0D3Mk54OjgZs9rs+3R9|D|_g+5sq
zL)|37C2W()r$A=m(d#%z<A8Cb>j$YvRF=!T8W?yaYsTDMTkI}Zn?ewUO-UR4z>^20
z2ZD@9TA{UXuc-2-X6?#^uQ?@ne*WNx37tDEoVUlwW^np+3cU0r8$L1J%9U)h%(oN*
zBw0}f1_UX*=fR$HzNdvS6I?5&?3GdbcGMAKx+I{OBl#kzIF$v7O37G3Qh!EWc|zt~
z(4Y<&xY=;7wDarc%94HF*!jxim96EIkrOyzCbI{v2!!d^&y9yL+x~!~^quLvK9t5$
z6O0w#jc`V?(9h8Mow97n-cSvA7!g$4i50#lyQ2r3xke<4;StN2+SzzH>G2tV>)qxH
znLjBauhX7NzSFp%S=S=gfbsTV4$-a}z)X&;+^m`4gsGwAKWlNBQW^g{?mj<y-cJMa
z*X}~>#(9vM_VfK^$CYS#OW!T5Nd>bOrsM-+z>5ozbwH+W!0yMZbLwHmlUfW8TtyE^
z-atKbeGy;s2L4VM6k@<u6eWQtcOht8n=K{84v(fT)Q3Gzi|ohwd=p(*!HJN_;<(n!
zjBK<}R9S!#(d-z;(q@?jfK!6OeCgF=C_{)}GL9NVglo^534Q^F8p62-@BdYw+DvEV
z-gM?%9P%hlkR8of6w5Tls=ytRZl=pHDP$W`AoInPVOlVFAXpN&ivf#yUNuMVORQS4
zFQ@!eHO+jFiDp_5Vwn&IhXKz>6xqXnaN-;lt}Bcn<t)QjKfF8AC^`P``eejzP<^rd
zzsf4QOk-%@T95`wNvS@(eQ~jF$GpM7qKNTgTa#L)PdPlfH|q+Iy6!+B@BKQcXrYKi
zAv5!a5#K-eCyPNNW{a@(FSJOPk}JWLQw@tsvB)?^@AFkvoFw{JN7TKsO#ls8OvDS3
zrB(PE4M~E8S5^K-fw!-wu}?IZkYbPKtSGyaP#f!%C!9!Py*}1=O@VS9fT7~l-NR2_
z2B}Mwu2FoJx3ceGutR(k_sYieMFva>%PsQ<BH(=&KN$}n-F7e{Cy2=bJEJn-CUu%~
zeZsnJ{42dHR7_Vr)%z6JJ6nfg>QZFQsP@xa+FV7m&zL#g3P5uA?ua5DBGfrCn-~vv
zR?`U*dBpBm=eY3|VNx%u4THpkGcIq7KXtGF+DYwCxo$K$ndOJ03IG$K&$1kh;eqR5
zQQ!(HfDn>`B&bOU5$-}-OEk$L03`Y6!YE3j71j!TiqD%}01o%ISL#^GLn!s37^0_f
z_tbGMOLqQ@=N40of}=cJ&y;)diV1l|3DgQN?r{8@HN6?o7&B5R7S<vwDbbOry+<`5
z#FhqV#gzLZ(?)sE;#@0k={BIPu)&Goma#r>m1=;tCX${}tif9ehCVy%a_=7v==9Cm
z8h02j30SOaI*-}FpOdv6w#%RS8(4g0=qq~NJdYP_qwzVR%P3M^DX?i18V}(ptrTDc
z@)^m6nta7#hb&_k#r~^THg`Hawt4b#E10Wj0LnBwQZYH$dl-H)w;<hW*bN48f&i78
zX)Z4S={mBvU^bV%tH)P;6YLWG3eruFOQZ{GiyT*6@!C`=sigBHH&JO;)odUG_f9}T
zLP@jiQOFF)?8+uXp=QDOU=SDa!YnX|ONuS$o&l)h3H$S8eqEo%^tN;hRj{ITe_zMX
zxMMMh(W49L1{PdewuR29f<5MYgvWpqjo~Q_{w(4dd3LA|;cs{n*4fQwq$&MWg38qq
zZ9W}WlQ60-zp@3fa&qEz_b7in86gJTu;hL%SI23eHC>i-_M>YT>4=Gp$%w;mKpbW$
zEHHJ0K!GsL-P+EWU{pzcIX>M#{@OkKSn`k@71A%PFY1)E9XY9cLi6mqfUv;~RJhkf
zdQ}#lk*7#$w*r50i;r_^_Nmx;XU}SC4lB2F9qh``e&i5ARbqtd4(BJjRFwxb|5QN3
zD%j%U)T|E`3U!A{%6}1lnw3>jv9l#h&<n`MtG27yC0*=vydpmS44vIYj?XRlMlSEs
zl&R|vYkn)Ja^1ixa+xU}d=(GemRzx$A#4vZj~V4&>l`=RZ3PnV9T9*SIQ>TYa2`kA
zC7*t0SOkt^ez(O|wZJJ}n8CGt@`V#lox(yw)ih<E#>;Q{wFTJ?HReP1hY6_&d<m}7
zuUU>^QIKq5$Qnm(!bERkp?|);rLWN`Fc+-JWxOP1JsG$ei)Pk=@d=I`Kv|C2;5hNF
z{ZtyIz&OXj@+5(l^gcgCy7d%;_@uHC(r}-}EBg5`*<<~*`CmjFiacy|wjsANaA&Md
zNt~dVMYyRpq(b649V}^OxBL6FH`Oj~{Fvh<$<%7wY%<kZB2G)@f<by(bEc$;hjbUr
zJ2zr&z25|T7^uM_t_e(vLs80PC4e<vunD0DqOrPbEd(Wbm}h;TR4^>>1on4H->*<r
zDpUqG_!iFq{&M7Y^>mPr_ZFMFbG7wG=_!qMV1tU(TJpw&YEX*Z{B^s7ha(=-R{pAo
zBcO<Jr(@zp5P(lt6k6s$w*9UDuwZb$WCr-5`>>;VN$Q0%(4lbf7Wkuk{e_EZpr7ci
zkxJgG4>GR%kri8Rd=@qEv=yaZ0&j+`#zG!}LvmEnnV7zlH!F!*Rgt1|{+@a1unY*K
zYshFk_oZn=P4C~*OJAyW6y5y&K1<SCpkb{ho@#sD8xbH|Uosmx*GX!ms|OuJV@rVa
z{7PMM8r$$CPb$P|@a_TH?hvk>CB#W%9s0RM5GgPrk)f_4bRyfrR%fR}JL{3eDENv7
z3bN;ki^HuA)My(?jgke191c4YEu<kcR&J>sFeux!DT=tEO1L`#mI!Dx*0ZBFE-<iH
zTNrAkFJ~Ar7uJc+JRKM7R4O~6HK60n%8p=osw?xX=SN>mSSfXv=AS|=reXY|qnA2*
zl~10&1TN)pWlh2FCzIG8Kzn=JtlVQRSp;#{R%%G`z9{SQP&2@bGzH~Ue+A&=Tn1EH
znx4N}YxG(oFw5{;S5~4HPa$WTQ9DY|XlE3YB*kSeFDTAO!k_3aOXOWYanO7=;4z-+
z4%Q(*jguW~&eIb3bY=K<wtpt&=eq~G>8(X#`WR;EU$)9?k8&QdMlvN&DMY6AFw>U8
zj@*viyd^YW;K7X|#k2m|fz7^VId}nl9G<?ebydCb`2t;OvSqcpt2=+5?{v9=i`~KX
z71(y~d2FqscxBi4E2$T70dv`hVQ2R?5eUmE_q@v+>;Kxjh8w=naTXlcJ>&Iy6GQJ^
z$Nlrr<g)<^R`O}u;x%h6z(QdxV^E)mC<1p3&F1gUEpVNjPeQ86PvX_qk*+OEVh|Md
zk*ofXE0Ygt2IWz}mqpWAYd>nUTf2H;kDS|m%xw!Cb6=p9vNSV|*ZKP&hHm@0$mJmn
z0Duzd|8D5oTNydA|6fGGjOL!*mMD_%UZ3HDS2^&w<ni!-AOg&IYhrtgiICzJG+fwF
zq_zgP63G;43Dh~h-`@0XqLhT}wk|#$e1!Pz?Cjl#DJy;?H`?KlVwF3=*w9u2!ibUa
z?u3!Y-_gml-Q6(}y;^0WNJh0v$w|@fB*olnCyPYx1l8P<>EH9zf2UfWJgA3<H1y7<
z(w=nmv+4UC?`I<$4~k_YAARp;Dd=%`+jk^IO2<FvuWwZg!#&eim;GBLNl_##8JZSv
zrShZuHB|VUF=4CoSFQ?*7f6B28YjBO96gqJg^pV9aw-*v#ewZqE_SQriY4$fLJD+)
zX9D;6O<^QUOc6UxkdRwpesL%5UxmpgZz6;eHo9|aMHeT>pT4d>Y-on9%Q3Np^Ohxz
z7^{=SHqopFJJG?JoT@idSCXPsNmAC5E$L?~imMs3@5;DeD{raeah_hVQXXmfL887E
zZV~oUtdI~?9jYdURW;M-sfQKZn(&`x(gr?@elLN34`qN>tn>{ICZ93mZZx#qS3+=W
zN&ht-Pc<d(lmz_)suQh^HLzduPoS{+`+oFmTsR3whjlY;8&)GQKHUt9e{1FuEdY3P
zjYVuqRB}wRNMug5qhQl(SVjV?^<nDe+2OCJ^uz&Cv&M1ho(d1g2c(jeTMo;H!xfd}
zFW!5ksWb#Fo1E|*_{}Vq8gHJX=L*v4auNRZ5qr)~NDw3ih))m=xN>eun!NR;iCTF$
zy&j!MeY>-D;LetwJxkO+Do&}ZQAx<S`^U}H<?f?CoW()}$%gBt7VC2kRnQZzt%{nh
zGSzrK5Kc`%0s(PJNV5}j4Y~YVD~+wIn5iMmN~*BOS<p`YkQ5|S3LsY*wRLIKUlp0+
zbU42l4IczudhJ~c#=njmCXF(wh_?NP9q2ini>Er~5f2u0_Aueh!oeYgO-00cDpKot
zLA?sGlzkA=${9qcM>ms>uQvO6_hrwS{F+NTa3%>$lH=Qn9W|B;ayPhOQr|H7D;kJ;
z!fpEq^$gm7_%um#gBmp|*KPCcMQzY6=d4jrq1y7qMG{iI3de-7Vu?!Q5o>aE^~Z0T
zzDnMPMdKbr!ybJW0sSTX{?vJT$1=V_M)>1nl$S@<nHI6Xqnf}oE@k7r$p0nQW;U+E
zQ>5KECDbsoQLQ^&htCa<ZM2+YPHjnm9~;AR5NEj%(x-$Y440|fQBW1}dEoF+FN`j3
zDWwvX#-z4Q;eRXnZIP8+hy7)wzmmick}lq2*|5ifx{Bhq4AU9;_b6aC%vJKcSmvuv
z_=GxC<5PK`QCVG7DQX#LDK4t4rqbUK??sWo=9w-O$e!Fw>D6i(&af3AUPj|~<=|x6
z=9m)mY6@7vzQ+2;?x+*YZ-U#vPr1_JnJZw<&IyAX1v@soeN34g{gy$NUNC8+r+b;G
z4D+X>j2+v;si~-(j)Ugtz7X&9oxdt6>>>SfM@WqO&+9xswwTbV;06Z(8Fv9;r_?1^
zDHJV0lSj2M1|{SrvQo^@b*Fwq;1(p-^VnSir(I8T3=2cef|=dJZ8z!r>G=7kqe`TK
zwQf#F6JAR7)hGVdhRCuta=89ohmxn!TXKG4jK`Js97=gUO-REgibRmm7!%}=md$#P
zqr$jD5s_o(`6=GrBhn?0=fXVAAq0M%f-)7tmmJh%4^Kl2qUB|Y=8c5lA=#Tm<G(BT
ztoG>!MJ+9gtHN<9fR#<<@;clMSgUN+P8<SjI2c*H=6L845_)_tEIb@}yTlQBRsW`Z
zvB0W$3;3c>1_#8&v_xY>53D4nUP6U2xh}`x%RA`wB4A8TF3bqr``p$Sgu&bG&fw!-
zoS6W&eF>M;Z_T9D`s74N)t>r)jEcwdGSJ|lR0L$p;<dw0aPFk&E@&M2Dwm+wSt6T7
z2dO4r=I~&Zl;Hp~2rAh`$f4pHtBjQPqYL9OOz_tZPFh_$39vqKODkCC3Ns3#T|Gf-
z!4DC=tZ-)9*&S{Hq!F6oZ9&QUN*#Qy@}!nrlGz^cWi*6#A=>P}4DMf_J6X9jeBDM?
zX!u~?clInLm2Msm5rKGCdnklN$J`YV(T($=kwN6sI+($uU{yR*0aqm6d*c;l7Fcs$
zMCTYjbb?3^fc%^nt~rfcPLsA{kZlhUqrD?;USz3`{zu8FW{dCIB5^WHX!<^czM}By
zLyz%cI>T&WXz32K{#;DT`+&kaq!x<*DivhX{FzwREP4kVKwh~mbFCEPab*~SiD~eh
zB_1g*fK_p?NBn0fyTc>UZ9<{<pP(wjrW^M7;hWIvqIOOjW)+ji5Ul3S)c6gl`*qI-
zE9+Z}RwqAU08O%dxXKp*)o9S=lxKu^{t6ca=Z!!+_2F=&eLJHPcj%zNGoVcWT9sL*
zKcI`DIDjSScYhxO*w10KZ+8mL24m7bBUc4IES9oS`)17V*Ge~d_pZ>f7&ZUSS#NB_
z!z3CfI0Ts1--s7pi23@vvSQ3XTVE<F$uS!`%J;ADzRKa~dt?O~qCdWcFQSxI&$bRo
zv*uHu@{jF5c(or7zb7KmqZ0-XZ7zac{vToI&?QQsblI|P+qP}vmTlX%ZQHhO+qQ4n
zuIk%8>DAv_{oW*hKu$7GoQS>G&^Ru2c{PsBoz7UgBxP@09Z@Id4-g=B&7UdY4mg+e
z|4?JWF5*yG_e8@_Q8o~Kobz&4s-aC!3SqAWm5d8>XvKd_D3DAM&2_Lq5XN21jhrt%
ztH+L}CDFe&Euh{_J<knogf|lVxlM^3Rn^fN(hZsG^F^fO1oaB}=AHY5e`{^70>TxV
zQy(R6Hk3{vZ!>O+%+gjdi?k@CY<DbpHFvmJ0jtZDv1=|Ed#L!6s5q+Oe)KB^!zpir
za4U&h5P%1pWr0+R+YdbM8&Fk!(TsqsS64tM<6}H=vqOo&ENdzeHL%5<9MFOIwjz%?
z*%&O!VIP=kR-@uqZtIyia^S*?RIYKAycL_esuAY4ZjJA$b!Y7)zP38xgH0tRDeL(I
zD}`#<A<Iy$1-T|?BOx@k6p+(!7dTzvY|yR=z)om8&EZGCXFl|>PxbU+;O^<>;1JW5
zeEUfCVdgTgq&~;Mtz@o8#>Dl<%<GQlNY^GbDqtnIwpPqQhPNyC$53`YO~Oj<7b9w+
z^w7hPICRdS5!Nm1;K<X-$L{qe<i5@xS-g!`<spp4Vo*tDAfNprCJb-K2DdJ96V4S;
z%sl3cUbD3DjGz8&qYEuFS}umz{d?nD*t3NEIk}Ff^2?CV&PYOkq(Zv)HJp*I08@H6
z#m;EB>36#=^Ypyn_sf!Iku99f9wFKA7c14m<HF2f^dxwN6m`qwD8kC{Ye_5~BmlGW
zHxrUU!XhZ^fUra^N{KJ?4;T1D+g{m~%jj+XY+^p%uAbUHA`S);>t%*it<10v=w5yY
zRt95#aQe$O+5Y8)S|2SWodDJxztr{18rlggt~|>*(x1lXt%t_ZCbh7>>n>U&PfpkU
zMHOcsKOZJX+&YB>Yx8pDz|BYQ%JcSS%ah77isy?xO>l0?r|aN1VBk)AVp3#+w6s0i
zJB0Y~E}g3eH>mx=*9eped-wSE4()_tfnkdf4Ugz)EHL!jZ*}UM;dHO<1Ay+{U=)5!
z>39o;YZooa9meg(mgW)O7y=1P0hq`^3WS|AFziFUgZxL8x(&@r!ruH8pJXcscMLfV
z-5SwfwEL9GGycuadW0R`NBwR1;-1+2HDSPxtqV<}UUw*6NUc+BbTSrRC6k{S^uK-~
zMq>l`P<d$t_<Hzt<ESOLf?5v_mP2mJ)Ar0hkpxZN)u0C#w1>Y#(F}cn&RNnWm=pa|
z+YYKys~`>|ZDg|(nzFhpvp8akx0Z03W(I<Q?v1GI(GLc@MmVBi*g(wqBnW`~)6c5}
zawStbHi}Z`QQWFfl2wgK>nZ@b9_O6lfScuVlasxsEgSX_jxhrX*1bM3+4{a`?mXy#
zcR#E%#EcZWKSdH-LA_V*D#M6Tj}oNoq{oW!^t+qpc1OYjxtCRnaHtPI%q?hwSxl3-
zSW`IE!eVK^7D{W|`*yLEJVNC%PhDQ!Q`F|+pNZ{v?+O72fd21Jye<^%>oYXz402cH
z3RY`s)R`r5DC;5zf!(Y@(V22BiQUZP^HI?3NAfO7Yc>AOn>S}iw)c%14z9?wxCs#W
zJg<6+Ta@S-9^eQID9!Cvk8CZEZ;nD9MJs>Sgj60Oc#OOb%+90rz->3}-A^BzvwC4G
z<$ON0{wA0WgEIg+#p)$Bi$v(|5hWVQ5LH3qn%qN#zRwA|&uby=L0Xqx$<cgSH}IZC
z^cU?S5R1r6Qxu@bLK6p8JYcXmLrxq)oP%X1*|wHm{ODqw*xKuW>L{3OuYb|oEZV<3
z|H4EC_4IoxEo-Lq)=`6>9$$Bpmp%vQ+oVP69gnq=`u-ml5EumIAJGcp|M0Em?q=Yr
z{y78a5C8y(|HC@A(?8*@p2h#wHU58e0U>Huc3WIX-?MsxPg86HSL^?du(0}5Q*@1#
z$io*wBS#JcQ_ZumHBdyTY6CuxUSUKxBC~d7p@Rv-hBBDV@IDeRgB$3zC===Q<oZIQ
zF)gO^s19iHMB&xw;StMlOPG66H4-bWhor0in81%kEySH1DK&><WbORbHXSW?^LD*t
z-D&Wfv(?hdICcAVkWQ&_X*iNUXzM#YXxdvYvAOwai7qVS(5q55H6)jBJkwJBY4**q
z$o_PxX68DG;$*XQIx|4wq0iMti<2JJZEZB5nuEqQnxSnqLAw+o`;tYQ_3Lrn@;`xy
zXb{ERYK(_jx6jeCj%48#h?}fFFt$+QOHeIezMH#CnaVRvD|^tU+=4VR8PGd92poF1
z=|IM$*Y8vp%v3;Xogq#caaO~O{S73SvSzZWj_g?B8i}Z<Nn&E$KF>L>%h)Yr+88gz
zw_p34Ud&1#Q{3mIQ5+`S8$`891+!PhVv^CC-Mo@G*&651$3=tqLyx6?&xbZSiCZ@`
zyN*0?Fptnqt3M1kd+63hc<CXy01kaa!FD%&%%o~XT9sZ-Q?~B~Q@M{A!SiB_)j$5m
zqWLF3?~<VLFBG{DL<(ZmoZ%mfDd=uf%VZB26}v)?JC_1CZL>x)U|<+yc`(<O4))+`
zS9VGw=gjdIilxn6Y=1E@43lsy6%?vRt4Gzraf9FS?w&?1x<nC`?n4lE0J7Se7P3SF
z{1S^m^|J)=g_DIa386bRiX8CbAKXf?ieJ_HWr7m~Zb1kpgKlU(=N9jpnB7`nC0;e1
z@&xgef;RKZVGpp$BO+R*o{DQP@g${(UtIBS7{t`XvnNZ{i((hlRUi)-VUdLTzc+ss
z!fs$Te;*xVERHUG0xt1;V}?$rerh$<IIj(cBAM!Z$t*UHEb)wD{s^=A*Gi>@o}EyM
z()J@GxFa(Fg$Md};jolKQyF<gYVX$y9lFV~+;sS;{$|RLHRhKYRPQ&3+A#70Iwc5#
zeMla3scWf;zx@sW^G~>mJ*&&4awc-31q_ma<)aLn;Rb~Z#E?u-{!N&jg{Gzx&_LEc
z|4PQ|YMdZHvA67VJHd@1cYV@hT8S;T>C}q7Q#>JFZ2t_+G@a~`OSC_)Q?g`u(>$n?
zfLnf#;K@L{8!0p_fu}YgM|S1%0-tQX7#%un58sLFr%L3@yK-|&FTbbPe<~b{P`cZS
zJzCD+TsS$5J$i9gaf9|1YQ*4vsk#*~**2~tx0NI3rhffVRWtGx8YjMEzdqEb&u|WY
zU_6f>H`a5xkdHon8uWR2aPH}eyQ??nfCeMp^j^#jGnz9|yp{LNeek7iMBU1NuiAFx
zTe)Oc8`%6q3D54$1vU7o&+u1H>|0~~0(5D=lldH${868w10Qzi;<%UjGM0P5n&ZmI
zj|Df@E9l0@ZZ~TNtjK;oXU??AmjNpdJZQniZ80k}$pYiWGw0J{|9U{F#-hQ&mp(yx
zSBe^HN^e<i_fFDp8(+p#7#_t2N&I5arEG{F8&gkN{5LT~6JMd6LB^kNAAhXFx5pki
z(#jI_85tSf5>&O?xbjuxCCBx1d2kb-WuMEKmEXsR>&54ULQS-3r|T)IR!`v>0Cu+)
zyST3K`biQ`t$^J0zSI|?5hMeu!OaM4d7j{+WTH#D{+HvO!SAL@o2If<m^sm@E`b16
zSkC!wlm(pD7&=Do;j9k!m^bEYXS9c_!q4qjq?uVE>o)I0<MD);b=Ed_R1&Ek0RY*%
z1-NlAhDG^^ZN8$>XlZ|s`8gmY*KC*dQbYWeBwIT3aj>qNo4ICUoOeY>T_|>xLXKj@
zY~(j)xdMK2`r)25y3zuhd9-18HTLtqtk$;=+qs;k<=hO-SBEACR}n)LgYSLm2{VtL
z{=n%Nq+7c^`?m(As_guA;SqEbKI+t3s9;q%Mou`L?7_3&9#ZgFP}-n;S^&xyEo_^O
z$HuvbtfpcZ-BH#Wom2K81j*JmTp9)eoINda@dT7vOQ%#Bs2#O#8FJ0{in9gLTu*Y1
zfJ&ZW9^wa5wKPw{@2}Ie8;r@i>Mdys+!Jb!%^hG81@dKMf4DBJ#gAgn!SpLqT7HCf
zN){|{N*X9ZMd<?7dDE?)&$Q1ew<vjR9uDW_KEC%ucC(nlcp3Zxu@QV*itb~FmxJ2`
zzU@rjn|=WH)2kw%yZ6U^_uB_}rgr|LZ~>dvl-D_S4PIu-Wlh|hdC6Om=8xKFs=Rd9
z%CbTk21D*e;KAJD1(_v(IR<_QL)&zCNoxUNP3)W5=GQSOzs^4LK^WaYK@j$tzix^#
z3*{j<Lu$ukR%w$mWMMJ(w`9cH0qZ<OzS^)<X7@haqf_eAQ$56>2@0MWJqSW2f|Lw&
zRb%E5A}I86>+0$0>0isfy|!<5FD>+}s=u=-uSGpAT~D#~ane&i|3ls5Zn(S+_74jA
z@eepj@}EA#dPde3CbrK1ZH(Ehbzw)`;rKh-7l;5fEM{DD;$(VgCXjm4HoA#7^nfRb
z1fk4M>QY)~<GQ7K_w%+a*tkJEvo!+rPE@hM6FFkIQU~{4Lt{wz)4D)~H&r%qBm>bD
zz9@3m!jt&;J_KI}?__~JS^00?_4s}Ed;j$8;mePHcv?x}Vk_fGYgfAsvUbRCR~yU5
zMO*iq<trwdds&{EHMp!dSy*YqJ^k6RV`1}fESy@oyMD&}>0{6rQ@iV&QY9n(RbMlo
zT;0mFT7o|=8zr?Sn?mobf|^1sq1K{JS^-Da->RZ$^5FXN5O=mwWb;$n_MJQ5TxL`e
zolvQ{HFg2gMsQRdn1jBu%6?@0jrlm(3y}wmHcYh^#l>ogh@K(kIHAXFS4E}TlK6$%
zyW*LE4z10&d48VNaI36C-Y@pW&@%buVUQQX2%Xe^EuzwyfBN$%R8nEHgm025BH2R$
z{kHqDs(IEBi_S32Mta#@&cZ_Cf<(EOX_rVEt@_@&mRPaKJX#w`;x($~QW&3|N-860
zkF!0$5okkIMe+)?p=@H%+`K2ZpIN-h9(6xamJ=$PP`0Ied4{~DpcYeMa8y;y<kAJ0
zvMN)>9Wr_@TD_$CZe;OyhG@l(E5#$pr6dEyyG<jAr#O+Xi~i1aLC1l=vo7fmnMqrP
zUlZSK96!B`4r#&`NI1)$dE2AxeeBxU0{*4R5k?;7E43ckNa1QODuF`_+-^%^i{*)N
zL6pi=r|r<KY~i;t8Lx}A{0zri$2m`SFnrnd^nklNRB63@)X$^j?M6)O0p%MfoZqJ)
zbvui6h#L))-Oc<ATimwoKG6y^@T+M<WwKexhkCMP#S+QdD1JyJ`qXFx$lJ}Xh$z}_
z<_o3NWK1oIUx}m_Ua{JgRNW?UrDZ<$v!9MgNK$oNHH~8C2T{o*s{&b4`w64=j{-)#
zhU8NXFDtB6sky5&V@puxC94`$T*Y-ij%&Ewg9_oL&BaDw<I3A*a%#t3kkxbmi{;d_
z=b4G}FEM?$ySR&Hb&abl*_|s}-oMR=zFj{bq(he?;Yad-4a~$$W0Oi|bD$xDH7;<W
zqFx)HJ(2~n%}-+y9f36|Gtn7#RW`DTHQRZK-8H6xjhj0Ctt~6}8Z}ucQ?UR!)_!db
zbWy4SK1dAW3|`aYiytYHpp)LYl1L+keo;7KV^}Q;DQ_mnilxIG%|TgK7a$=>E>_kM
z7TE~2Eq(fctq=|SF;}H>)Nf}8MAmT-SeOY50KbWWY_kA#rKtvR6oOBEFaci?5HxD6
zJ9|(sO_@Hv9oj+~J`Ub)wD|@_%Kng+QCYNlEe|k$0aUZa0tCWb#R=(T7Eqd?StOd=
zh9K=do%BF)=qt98*hG~=i!N^(2^u>DwXoiC5q3eHe!&`J-DO{M8hwffiNKi^4au?e
z3U#-!1t1GRv4pgMo~2_mv$8V63ZG+=;W`dp31ON&WCjFpPh06V$CS$Fcum^$q28YF
zeVIYzt5ZNO2Zm>fXbXLmtHZIiH8V)^dzP$TPY=5`qAOKH8vuY2Rk$JCW(xW6iXHwO
zJUFX}H_T34jd>#|W!wW2Gln;_`nA_NJ2MjJgQ=*OlabjezHk)7S}RTL+taTLUA*av
zDDOeOR}UBo(6~<pq<lt-RMprrk|+MZEVM6?sDZLy_0R>a{o?BcGLk?5W{k-bQ02=M
z=qW$A>(Q@<9VWgEpU2b<&Lx>BC*t}3_vQ$f`jbC@gH`W^SG-ow&|M4Z!!1n|B>`HA
zzXUx0x^CE829Jh^C^A1Z`<Lw6OL-4HUh9HLq8HpC2b90@N-8xhlZ^I+xVG)DeoP&E
z_0x&$6yfUiprel4EGQ#dAHtPR12joBv$W&k^=TFg4K$>JDJZe4u@o(A>JFSuc+=(i
zd1p+UIX*nR=HZ*k*F9R*Z3qP8Wy8BL@O8sMUbVAyU(`=HxyQu<mB$;)k_~v*7LZ@c
z4;U^Va04oKZk>~0Dsy;wE;POXMGrSuP$9e}n=B=Qc$KHq<^%mDA?IzVG$3;9_7|wP
zw)m?&j|5YMSZuhA7f7VQD4pz;6L$;(n=2`x_ID-ni3AG%5=LDie|=n=c!64Ez(F`o
z%EyiTA0S8BGi^)9PB9$a^NOM01_HnvmJKz-stqP}GZ!oY#2;iQ%b8l>4;7hLP^e8&
zuZ6{HFOWR#38k>5>$W(b-|y88uf#4s9!An}SR~9g(lOngN4=t{(TE#^i0{zhbc9uA
z7yVOlkiwp_CIXUvQjnVG28l(qen@OsK>zH7>+89X!TN5n3qT{%#{$n4e@GHW+iiPA
zebf#YmrQ;3PJMkV#3!Q3>hWSW=+b*xgtd+np)K?u6N>`(Zen|`i^cZJNSbA?Zf2HC
z5nVe+E0EuZ;~JSOjRUU)U_#T5KxqoSn^JW2JpONhy)^VR0Bdr2=H`GTJS9o-`osb+
z`trFy2O4+N(Z*@}*ruID&J)?T2>uHL^|do75=3uUSjv*Ya=>(;A5}yRkGj-h)MAMy
z>ymVkI*G&&+GLzdW3P}H<*0z<vgpbO$7p;vkSW^GU=Gn9;%H)s@Sa=jvM3g~*kFo)
zyI|M~ftdN&dB=*I!<r0{Uf|et@P*9`Z@?tCZ}XP6C-!}Yszt)Et7Pg(07Z_S3=CI)
zekNCuO(Db+<rz2<j68VsCjz7qZ2Xf<nq&f`8pk;%{o!G!xdBXi2%AAO(Q4W5IQfh_
zs3(hHTFC~j3^*k~7{RG*Fhct2p$}6Mg4QJK3-wuxj{p&VP}jWV5iZV$Yiqc(Fx0t@
zt;CPPg$S+bp@DZNvs!6_Yb@^Qw*;Fs%n%;Zz3}2*cEfC|qYH?nVw5~lP==JCgLQkm
zx8-ydl`dG=VyS;7!_&}#DUkYw5lP)cY0<#dJYnk;^hhBnNIs)oUEWI<!3yw)>|T<=
z_9L+oz*G5``-2Gc2!$L0$S8#K5v5QIN@!F>4UH_0hTtT~+rU-4r8W)6%jCEaam+e1
zX%B!Vuv(AHoXgC+`pMcGM5je;pTId75w*`y=GHw$i1J~=Pu%mIeuaMK5fMfhumsU$
z!sH&&35&nbEdmm(g_owN7N|Eu$z)X19{Tc|l6U=vS`%{2L8uO=COR$~i{L(e+_*J4
z3#M30)Bfy6j~#7o$tT@E9lt%gKU_S{TyN}LkK8|fJ>0xGdNbzC&c@xEHg$E$A1zH?
zT+dj$dV4xDCXJCVbuC3DWewzMogKcNE}gueyl-rrTtAsQGI92_cXZ>%kuM$1xv`U*
zCC#<5n~kB@FTNeW7;}Al^ZYn_^Ytd9A4Ortzghqw$A}TXeUS=)=pC=+c_U{FRcxSs
zG!DU?uV8@`!jvs}dL!kDBxu2@F6Ax1C2ji!Y*lfz9zWe2$vJO+>^K<Ci(#6b0!Qh?
zdgT`h#_u7C9^=iJf|rGPlWMf3CkR|H>1P&GG0MnB1K7-#QUEf1)}}dXpx)MFG?P2e
zj5{e(4<@Bz6$+_S(JbSzytj3`&q>YzbyrFJE<<&~l(5G@y#)b26y9?KWkZY6_({*p
zP=ZUG-&6t|GG&9#07^~3%4&i{O0WZQP<IlqBc9iC5Mgu(i<h=ur3E;Y$PV7M6-z)O
zse~|!i>6fH_ll?pNkCytF&Y>X&u;ds4(!k;W$NT%eHklb{zJ}lmx1F5?X3cW$f}c+
z)~nnC)HwK0Q1%Y{2Jk{HQXDuGDii3IGz~coafrZBbz>OxM=^maCQ;4%K8~%KWj?fx
zotaI!V>D4_q70$3iu2KM0Zg&^y@z!2|D1|IZDU6F+6H*+nakEIkO`g=2Hq?3RGIrD
zC<K74Tv-lSB;+W*ui}E&(*j!d`v*1b=Om@If`a+~>_~ToV+#C*j|WvxlZP6zyX6d&
zGNu<2msUl<baqQ<5?mABkOy>#ngejbrvzj{@p|B2u1oqUNcDXQ!wx!zmqk1E4Rs`U
zI?N2To>#ab32LACL;PWpzh5&0<PatMGcO$fSpfM_ktbI+NB*@f`=y{1e^lVHi2~mT
z-^87RCU+4`%lB6f`JG3u48AX|=L#0QV^?73U}f*Q6EK8?aR?T>8+U?JoM|}71)5QU
zFsPgw(yMyFOqzRe`7}KEuJ0ey0L&!-^~DLgg<}!7n-#^ls}J`<M?~kMzE7xI3%Qys
z+vrm)5)syOU-TLF`<~(SY)M(jAB<8-)ia+ZQu+3=FoIfdUp3${%TR<{e#l)LoN&lz
z<wB})Ww7F(6|vtDAMzm(WCj^0G-+2yds@`oAs7-Eipob#>u6hJ*`_4UDvUWm{RBhq
zYE+Wq9Pp91;~GSmBUI>9%Q6?WJ^B&tIOlr$WSdYrcO@yJ0TPm<T%zDtc8KF3S;0F~
zW(MgyOuH^B(?DPG`D{#AqApM3`f=5!I$3C1bOknN(Ub!SG_Z;MZ>>H!24FF!;+LPV
zhrrFUe-H)kU@UI7*tQ5A8Z<)B4t1rL8yO;oJ_%($`?_r7?lPN5i=y4S^cj%T%|2Cz
zteP?hy(Q_01iI0&Gh7s`%Y`=kY$NA=BcY{ZYQB%G8xaD+i&BFMVIVk0Qi{1Vg@9TG
zYCU^4j#InP{&N8yoz`jKPUtrXyCMe?SyVGNbeEo?YYrB!m%&QTyV$<OISzYvQMBSb
zSP3yTGQ$TBYj=m?ynlvX7feOry!8-=GH_4Lx<1^9@qEvc2M&T!Th!t4MVPH{oC-rJ
zLe*r<#c-r|s20SR5adK$ss&;JRpKkZ_qEHYFWuFLeCHo2oTBA{RjQP%WV*P-bc9su
zYZ{)SIx1-fcF;qG@r$WG-tB@#=QdG)24sv~U|{V;9SEx+KvY&%K<i<o?<^_HDEIb5
z4)h%%QD6VL*Jq58j89j<L``jgQ+p;kd;0E61BApDxKlMm`{J$Cm;o^Rp<6E5u7hsT
zF8=K`z3rrCuS_Na(jt)PQ5e;b1k1mM6PJr3SQC%=M#R%?pko7nYn=J5je*X*a(|Dr
z3i@sbjvL>Vm!~YX2T6NS=S44OBIKrKP+NZoWKf#>ck@BlAh9qThXi2&pp{bR@#`q4
zYEb}~<XpcPi?=Lvq$85U8@M!b#msb0!dx(53hUhme>H>q<OBE0@Ss|SbwI`6>d$#|
zo$=*4`)xOA+Iy(VA+pcL3{dc4t&}v&EA#P7;e03uB(|I3<kBVDE}*QwIH&<$00(4N
zmtiwZkC=~a`JziOrTP>=6gpOjHCK9JU=Qa9Q2WJiSZRBPVfD9BNmC6^%ps?^l<~XX
zH7l(!JN1tC$?F^ExF5o~Mu6`gT8DBOd;(Ko57k!xUJLD=U~o$13g%es$c149NXhOj
zN`H_LXtaip&5AO|h>tBN`Q_!OX%+qf$lsm7ccXSkP#+?|Xll>m;n|ic<)=MedZ+hd
z8paKalJXURA8?6aOT>{i-%u8f1>mJNY<F6+)LMmrn1U6{(#f288wy5Sj>cew69eu5
zbS(BkdI0b-X)*`+t86zSkwS8=JweP+dF8}|q5ZEA@%6EZ%W5hD8LhcAF8Y;Cwej#}
zKM<6O3!9BAi-3=hXYcoHe=-oqbe_tePu<{2m;7l{>0F)(MN%9)Mr@S%_(M4<s3ep2
zK_K7%T8&721|-~j8F;jBtj~!eJrG~~B6G?*o^EPifUIoj8&F^^b-4kN=Ft*~a1e7D
zx=ApBDd}q2ffIfz%#_276q!tq3r%gbII;|{XzWFQNC<mOMB^Hzof4}9ImG6RGX}!Z
zK3@Qa*$if-*7ek%-YsBIWvA;GgdCuBkqe9VrY{JW(_dL(DfU$}0mrEB#_CtzRox{1
z4y>Mblb|Uf5d!o%to<~y-B{B0dD|$7cfQ~`Y$!uS?H(u`oAi4@e35G1PQh=loUgZY
zVjf28mzq}lL$6<?1*<3N-XioF^ICF(IfE0N*IPy<G9_#*%7N)D&se6|QDsC=>hP3P
zXdW{4)^0Mf4kA;EK(-MI+%yE&6%(>WSlun*a)Uwq!cbboQ;w1-#Z4up79<ON1b`4i
z+;WG7E<RPG?$UPRImu*#wDqs#cy3rS@J0arhE_q9#dBj|Nzv-Wsk%o4+qk*>&6gfg
zcOwxZ|Ik?|v9~2hxacmphnQZHcoO55M=7Gw5F23Ast$4GgK46&M(o+(T3=uExdguT
zlX&|@rcFKrl#;+2=<FjbS4~{v2cwCqY;AoQ3~-h4H^FLF1=q@#I|Yb+<#)qv+euWv
zv<XO|-<8D}>2Et{Uae)D8o9b~445DjfoM!30@Ae;fi7c^5wpegoYsE9%(ueki6G_F
zb`G!%R#est4iH%|%w;PSn&|i@d0)r9ny;*|I*@vPS#@;|Lg?Al^QYV_yY09hH&VFl
zz)u%u8jm*HM~?)*%%rh$)Dv`eIw?C@X5~OtwrgojAc*EqxNG;_e|T>smJ=v42BB$S
zwzo9!_oyCFfSWAj8L_*QJ@*)yQ6ISKwV~YCm)Nw3S6(njU@&Z3*9dNNIsXU#xWa9&
zE>fANKW}NFzM-UX!NFJtJ&CV0-e`t&R|?{qE;i+5MS880>mM?y&NgDQj=DB~&~-TL
zFOdNsJjnLF&`}?{E|k_5+ls&jBpNGvDM>gF6~R(?<bS5zbhL*W@AOP=dOVsUC9|)V
zJK&Q;cd6p|d_Kx&<VZ#iof1I!H$kV{xldmSyj84Vb{BtUKhQ7a$CxGCQL$4}UmZoG
z90BfxL{UkPXo4|kN4d$b$v{{A_ZRH#HS7rBhUFw^@8xU9((%1U0XBabpLXVM^!7>(
zW82DtDjjJH#9{j|u1eDu!cIqUOB%F>8@Ow!kU*9$CrLpRkATo0pAF2GDpu>-bRk^p
z4{_-SaxxUJ2zN5H)CmC7JJHD*RNt!yG17nzA_$39l+Oa=1*8T!=fy7I<WS)?!SF|6
zr>8IyoP;>7sc&!dk0Cg>E}48AbWdrdV?RP1-2Rq{4Q=6Bd|iux4>Wz>Y@DG^VejDG
z6WFe3%T)7bFHUxE$A=r3OWb3T9x}nhPJR*hu~>6RAJ1&qs?zr$1Ngg`z@#&1-)kHA
zG1>-TV?_Q@oF>)1>8$s{1NBQ9_%tp^^)t7js-xG)$ou=nJ0ZnZh7f3M2;na9;Eu)_
z2#M7erPmG3fom+u549zbQlQxU)%nSmFn>uE@c`^+HRM=wu2~#P!8Q0Owh?T?#Y)VB
zH2UwW;Y{f3{-yIzv`)W8fY;EVRT4+nF)7)!zcbFu4ZkEuVDoPrNia`?0JDmfkpXeS
zG1TqdYw?T@K5zdi_4^eNru=GHzOgoF9Da)*<zSlb8Jr2ZIw3jyoP6!qyYGwVnpo|9
zF*WQ}tN>DOZl2f+J`L?NjkI~Ds9vUbIcQ5k4KtK|d<Y$t@6ZsVCI~{}`>cIP*9J9h
z!#<3^9Uh%N#!K|Dlba~ZoipF?=!CbYpB-x91sEoHRwtbwfO&+NI*bgaogW8o^l<d>
z+D<9~5oi}--x?a%9}+kdW`!o)Ve&6JZh?)}7EnJFb;E2<##(_3zxwC|pn<>{lJAkQ
z;e@)R8dz5nP0C$ZC|4i2&$5#I<QY`!mD`ZGnfpAJ{vHX$&Uk26*qa4vGPM2b16$jZ
zfv0DLB7s`IBmdM6KA6D5Z3$?6B)p8?N!Q`|6>Qg^yZs+qC`)rbAJ!Tn^CmZQ7UA>g
zv3WGCRY6=<PyCA3x0D++N96MS`IN^sE-3wRFscG#ak2Nw7z}NtFC$a{P5)a)4LXvB
zDYI9%dLPlL>xzcFcb(lq5>q|>kW#&U5@@CnIt2ged3^UiR%}VF)|g@glEvSVsUK=H
zSLi-G{DJ0!z8=+`V3J&gET86w)TtMGBkS4Ux>&0XSz?I5*YC&_`PO3qhe8~hsl<l(
zm}7Au^#pmuI9O{C>)}91zr5PNHyJv3W#R7l%u7qWD?2LC+GRA7!cG%-nN`nSEo_b3
z6~RE52CA!Z@Kp&N*`$`K2sRGZOwJ`|nYgq}8gv8LlW4HC$WKRBK9%!|vKz_m?ahFx
zEtzgL2iBmlY_nn+{^^Tr0**<$HHx-!IwW?#18@dEpCW1D!sUSi_@Ep8$ZR=<6t^cX
z^9AX>M1<9^DG>cjm4)=U%g#ooJmZat=7MUb0dgMWB{1F-`5~P@AJ5W>=Fep1=!OMo
z_sz-&=~at#>e{@5a1fd7l_NaQ%@r2Fl5{x<9AER8#WTz!^GMUo%XtzL%oce)q#wK+
zFob;@Rrerarpt7cwUau`qLC7eANqi1xl>K4BaE(s<2l`##W4BAxRpgaWe5&7gXt?I
z1??ryv6~1k<rR;;#<W!=EzWAzU-={&BNy$Cl^;!8>_sw%0%V*6rp@CmvQuT6?aea>
zA!zjx_K=6tLHALNYWxoXinEL(An8+Km&hD!lDb?bh+vP@h-m{WgUX6nBSdPqXukt^
z;o(dM$HVU|)Cy&S)eVy*$XZ1;$`z!HP>i>zX2b4>ggR!N0nQ=Kz{}`lDrTGSMDgu?
zM}^rJK*yKEa7DcN8xmXGm+`9KDLQyQfm@%%bFHe6BzrKDOGXW(kj0x`YmrsJYFa%$
zqEQd(hD*0KugXPT40!6L=$1n7iy2DW_Vr2a6jH2;0>+<PZ;}Cb5Dns^_O-KC^oz=|
z#ZxMT1Ta-txX$hJvk{z14b`K>F%=1SCR`)=qj&!#D}NWvnzDmxl^Qzf!Q4W$s5!+@
zi0-saXgnwSj`>8vrVpMc8V($jN|s{w^*L)Ap&n{vu;>&+?M)OXo^4C{mfG+RvOM}F
zEsa^*CUz49q-2ZhI_xDAz6z|l<DxkshHEIGedz8p3WUyII07-ua)esADH)grvmu|g
zF$&3KmWSYO)CLbaqOyk>3@@WJQIV^i?;7T323M;PeQ0S~?T%Zu6ueusr}TqvnAs<Z
zzSpM{zOjou()rxL=OUPzXd9!M0^m89QCfSM8c&p+J}VPH%6SxMon|&N8s~=t7`SID
z*a2_^fzPq|XzV}$uiL=&{Smg)L#Pnrc?AKZgH!O{AzJ|)c=4D@)knN?V$5hTG-NS{
z7)Rt8)tnP|vpQ8Y<Q>Kcs?ST9Num-@>yv_C6YfTPpK#nR;6x5jUI5s&U{>RUM(%(O
zB)_?ZR`G;7aLW89dZ(zacD~h%$Bbtu;7w#0cIKw{D2$X|%RGJZ<R|pGqn)Q3!GMnr
zU%7E7(mv}X9p7RCq~G~zQRD=Cdt^?|=%00eZBAUiVB);5Ucl>m+;UWMdT^}6RpFDg
zy`uzs?(&Hb^M5|Q>OSu{{55}WZAFC+RH{}!oL4@+Vmw;*C@&uH`#ZUFUG1eKig~vc
zN_(P#$ENch8UTdARwD{T{RXvvNp2#9nswYm8|S+SkQA635RHv2l7iRSKgIdMy9WmH
zl-$vA#&Zqi{mViskJU?$^n&-3aywsh(tO9duv;Zbr{*==QAI+n7@+|#T$(y|Y_UV_
zutzL6m%TFC;zq4|(vvJ$cdL_r|KC-gVK>7140r&59U1@tqW{n_{_i^pMyCJPFwSV&
z{6jAy{`}kYvF2w1#IZ}<qP=PD0FYaCLua8E>t5>;)<S6(*}9r6q?(+-I*+?$7XDLc
zY<E+G|3R8S;mE<9on{vL)7jX8pjX#2Id}YhY)d8b%;;ox_8>C*<H-99oSRxY@3@sd
z$kOF{^Hug4w((_3H@p&3<9wm*Kv_rkbtrw`Ruz@hLRUHEcUSbIywM3szoD7I#FO<<
zw0jR%vU$!SxCU#-g;6G+F{?C$s06pRZqp<_YFO{HTYe?Ec1?YKP4r#(TDsV_80fHO
z+tqx)xF+`_zSu{9-Z#-w_$wt$t2bI!H#@ZSzQw<w1a=xZSk6%5^Za;dm9DLcVAsJQ
zJH<m%z|L>>hIGm@*ZODHWjawNVzVkFHKSscR#BpZ9n7&(ePX-1*{ajyL+SNunyP!=
zb*^=`q;iQcTiMSat`fUKCF8LJx8sPxnb*Rm5Vu0P2@HSdK1Ab!dnN+<w8@-yA$Cvx
zY%Pwx37#GPRmfZYayHb&lpWhp7&XMlmDkPwVSFRTb{Z_MMfY##YKL{TvfOm<`@$S&
zDd3_`jY`m*NY$T~rFVA$nH776=&2DoE?6h!kaEke%9T+`CDRc$_7kby%TbfcMPd*3
zz6_?Gt`6^YwvZP5u^I_@nwjhoKm(#$V*_l9v_;jJhLR*$k{xpuBn_A(2Bx*UqwR&y
zM@=KK7#GT-L5^`@=|YKCThh+Wfc`%=QKt1$hAP=C5qcng0l;NYflpfE$Jl&f7_2}`
z3LUHIu|pg;!8x*cXY8+gu0nn`1^n+|@b$kj(GC*f8a7hr{?jm9<*1bX3%?Fb?63sI
z0(Uo5IT<Abj3e~LgoX{|CH$8Z=iLJr6zV;c)K?Hp&b@{URFpf-=tbSAty%$BPB9UQ
z-N@F)^U05;%30*y5)W)L*ple4AiSH-4ag46l!DG@vIP|BhDFj0<Yr6U9nH^T&m2-b
z%Hh0<antH?LB=fhG+N|g*lU=4zQ9xK>ek`~3FS+Gm7p9(j=s@P?k<8^5?q>of1Ccb
zI%a#ka;Hk19$zn?T^HYBoU-HTp_C&wG92P&V`;**Mi_#4Ls`|UEsk9EqLa%es<%|r
zlx~9Z#vZ&nd|9SDk_0a#@qN-j^GWnl^I+11z5wJ*?E@07dIoYIds_7{#1;~j6d&q5
z@q2vOWq!WBluI=}s>MsASNjg7+F2nM+Rf$quhpbX1G%z+G(Ip&oVxx0P7OHs=`U6p
z=b#Lxi14DOp@g?zUO1=_M{CJ@29EG3UBZ|3L&%-{e;o7(6O=8$ch}tMnckYhkzUi7
zIQCP3mp-<ULjPgfn5!SQ=ON1t_X1vo<E;MLtXf-Tb3QbNIMuQ9?axy}4g&i6n6{Z5
zE!sdzK?GDJLn!^8H}uR)Kb-8-htC5e>49L$+EgB@C1OdoavV7=2AoSEP|f#w@aKH7
zk@5a?;*6Zt&2E|XR|@z(XsN{Sv&*vy+J6VwHeE72Y`H!WD1>jP`dM#27Z2dU+Esjq
z0N#zZKmpn-IVktnYuuzm{VCBMh<AOkb;Q*W%$zmy#QU%ZNe%ReUKoN3<~bHNEF~5<
zAg-52!xT>T3e&&D0{Lt57|lYed|xdAaMl{!P+#(>5X$D3jG2>SQEj+Z38)|cy~Cyz
z#W%c}I^3h_UW-okxh@oLXKP#b@ZrEk2y%}U58+O-A6Rb(4xibwImEYcKs+442BBtP
zNeQIt4hex1icd?%0U(5Qj%YYBwQdCA{xKiq{K7nL6mcY1A0`g^Id9bD!e>eM1mHUF
z1|Z4RwrwfS)<IZQeG>Rbu0pgC|5hH8vdMqDwvklJc(Bmfs*BbU%qTqofj^afili{I
zm&b)WZn@);ycEiew=B4aHR9P23_H0&NJL^BO6Hy1g;6*;Ffj&k+v`zXF9(K*VLqTX
zS82(C*6O&admWbzPxFgP?tthVwTmLAY!f@1J}1^8kUbxvr;4ElAY{9}Qh~cJa}c5F
z1^J}_itMeP1^XdwPBi+PN-un(_nEY!-p#&xTo>jCSF`>qh0=%K-T5JA^MC=QY#FvX
zb1A#-r@yT1_JXriJaqSn4JVJ?sgb#$QmV>x8_i|0S_(vi-0LbJ=mEe@IbV=F7FrN-
zHgIGM=72<aVu6q62c}Yff9n^ynq8;zji!0d1^l`vuN&Y}33B)sV6~4T;MN_|Ahjo1
zG{k`(DA|T>v@B*)qZ%P79a@G}BDP|P={mgLAfH$GexL<*wtt}3;6PaJ4$)s5q&2;U
zlffbIM6E-))c=}^JA)QCALE%5g^%S<TxYEnPeAa795R6@F?ma2uZ@E-pZ}pQz6-hQ
zNwIlqo3FipLhoIMMvc|^sS=i>hfE|e1O!yMGJr=Z{$EZB>ly0q<xHUnI6ivzpt3NJ
z0<;D9M)x#h>F))dita(X!DoC%%ki?$CFlcmG}`8?u0?aE1D%ff_ebWax}^2)%;qbd
zlYTzaRAteKEQ*MTMcYl?rdUgNgU=^}{HTL>7iE;kDf~F6#Pz54k{)C(|IY7_JjWSS
zVog9=$o__QhlMDepv#1M;{9#8ivn;IYgf4n^fiYPo#Rg_yI2Z8<`@}Zk3z{<JQr2|
zk%7JO$C96+)1Poad+c2Q2re@^NnVyp{(-$oR8hxwdZ~qc6(+Xdc{gi1ehsL0cXQho
z9d0wWQUz9*Tdu7h@)qKj$T{^kaWa`Tt!1t7$x_a|VKRluIthc9*4pZ#r|EnADod4H
zl0Vl_o39+Pcb*7hA7bWJRcz3!_&Qer#n9>01arqT$g<b5>Y07LT^(7YCKPII#&9tc
z3bW%ykTUm@zY+zd6*m7Cex+46y?wDQT^Hz#m~kgsd`fF8rrWF$pbWw2)KBcj%47-@
zV9~)*E7XGBC$8ssM<v^Bg*WyXS}J|%c{EdAVW@Jx!e&XduGWO4r8XUZc8;rQ(OQEV
z^RG`o)sZuQybMe`g6X}IIm+K4MMOd+5OEBU$lrTKB94z|Z3lw1lHe3aPPSyi{zB$z
z2kZw@W2wVbJ;N?bNdxWEHG3|46~MpY7JAo%U<}B}`lyj`F6-4^z7C=@WMjjLR+8ln
zS17zmNQ)o|ItRq`pkV@&9d-U8$&edu1Cviy1IJ1b(Bs(9R`9jieJ4q-pzR1hB+18c
zShks?-bm}IUR7CJaq|}R&rjVtTl9jj;0ooa9$)49Tp!#o#v=<0hGXJlu>&xP2A=lP
zx^b-;Sp7#zKM)`}S_(&vUSr)*O2kG_on^ofMk0H;3LT7H+Q#AF_jx=S&s*D%SDNyS
zP=^2u*xeYPy2g(6N3CaDvw-lhn1Yg`iQW#~lIgi_tGS0FfvlA6K2(6(E1?ZJf2*bE
z8~f;i)3DlaAc2kg?tmk8G8S!I-o&=pGZTKo0g2fk460rL1C8WgxbOxt?h~f-U~;`Q
zKCkXXw3$|z%_6<ur;SBfF<KS1Mc-2RoA^hHB+>oZIiGj`77qR?5&=I~Mxdlyw)x!I
z<rYmI;v^2OaHRZCVxA&Meun)nPJ81s<~|Di<lvZNm&UnfwX-DBhNsBCQ?4buy(19)
z<CrnFHuSip&)47Os;~2?qbVaC)9UrX)&V#z38XFMY7lSl^t`t&h8y_0d)V|UJSR7j
zY0~gRg2O!e_wt)la()bk_bUpaxUYR+iLYlkgtTURm-|?8(3DW^`R9H~&kjnF{tFyx
zN&;Bvv*SZ2KPIsRaBE!4*PEVe%JNzwiNG*(^4`aW6#IXSr*{BG1?pwsfBtdw6O7vC
ze^H{h^X=*7iP}R5nLe)TCW@k*@=%bjMz$(3H(-QXi*Q%V^?s1b??x6j)TMW=_lzUY
zIjTnkb=B;Q(4qJD8+Vxd8+W~+M-gqX?YNfiZ3TZMXTnnYUVPNUYeqcuKu9JMEK;k+
z;_PNNb*Yg3^XVa#yM&M4#+|AV5P>O|2Vs^s^hV`%+1i>A&aIj*NaxSmeIl?p5J3mi
z72-Y|SxCjPAsYe&(&I^C6JjsJEaleJ;&HB7^6qjxGI<*<uJbvT)1cbeP_EQ3lS$tQ
zkx!IpX-$)_TDnpTeV8=0nwC4;VEPSIU`d6}ZDcv^dW;c(B+!di!U0zGns67Ke__yr
z6>wVl#UD875Uf>SFWQb`cwc`?`hxJb>%Qa$H=TRg+5@c{!-F8tQk=-d+ojJpci*1W
zt|rhS6kAhuf?-%u#oCF^s;HjLk24oEF2uE@Z(o~vt#Z=$a$y<x(tcI}ulM~f2*h^h
zS0|>10SJ@oy1#IH*s(|SB0}$bTmt1k^h=j*wSU7Vj7Kj(up^A|I5mG~Py0tKGiwv2
z7$KE(nWck_&RRV}ACGD+5?G82NR1s(>OB&4S0ic}6CIf>pRwV)t-PmeOUad+vUzm#
z^13;DNEV4yJ-0hg{u-z&liwjEC9XzhGi+0`oDg0!-K_>^8I63usp^%E!0Kr2{+gam
zNvAt@sDK9I{#F{PVpF_YdxN<u<Z$Gmf#bdiBy(j<*V);2YRByhIRIW2GR#!G%O#}?
z2O$W40t80~;-gcXVV{=nHDgHj>JZwI=0Jzq1CmFdpc4AQm|X4yF;bF$Hs|MY5<<V2
zct5eE0J40x{~JP_L*`-KAbJe9mm6G~bmcM&2X8McCQxKcFWXY5TyJVrp8&jsBV-6V
zzLT31zbF8mS)7dk(@^EKdp}(pP_=j;9=~Ukm-`(FQo{jVOoeF`atAgzk&3N>$0H7)
z(Nwcm0)_!)kFTTxfP!C(ZToOISXPL8|1--KpG+>caDL7p31E{K4C-WrrJ=H`c6&-7
z6MeNdd@3$HjZN%ar9M1F-<*f0c^(%qUIgn4AKeDW7XZ>6#Ze4BZ?+evx%aTwK8b~g
z-DN>ZjfeSO-c4PEw)1T7e@nX!^+j&n6%D;%Q{4>w$z%8;D5%TLE19PLzLoXYeK&kU
zkB5+Lh(&2wVU$$DNbT+1a_EKi^adqB!aARB{aIeFEIa=_F@3ldn!GWMa^TC0;ZJzm
z+PF}bvps_s+WzPleFeQ<yA0cqk7M8SeFdCsSgB>JatZqT`Sf)B^>ih_t(`v^*s0XC
z$%L0@9e}5(Fb-*WLQHG_fXGqeYe?d1#S|`XbK5$EM~U*2#B-R{z;M5EuRfW#Ux|p>
zkL@$9U-48XqZZv}m_Mm$C-i(`0Rokrb{#kX-wfw)C`zW(+0&7`J6FaS9afc%6RV4D
z%qRyyagTLwvBQ$$_4@Jr`1r_?y}G_ywdOl>NigQVV-3~oIiaupKXnTmqkp%BkN^Pu
znErF<H?p%ewJ`f{q5nkdU+8CR{TKQNF45YV1uA74uYuOs8TUzS$-6R0*k`TV)+u2$
z3vI5)3#p_eyQ6+ydFe?+Hzu3W*X_9RakPlw;pZ-$;5g4xCW1NiGBis~yH-qyWlN;3
zqDE9xYN*gu%VcdQ@7)-zi&R{R?8@*>g^EkHPpsZ!x`XZ?|2@0AzID;w8&#j>9=2Ll
zIn-(&gti!dE!q0K+k5@Gd%I8%9g6e{@})YK8(X-NViH(oa0@fTFU3w%#}3#s!}nD;
z#MXe9jz==KOcPV9A{0!>9{*5vEY2+gL};ppNVR~v@*SPOf9I8@A?yA*JXc<m?VVIw
zF|W|W$_H)!S3+28XZLu&-uRI<+B^{1xk~O!tEdDh8AO)ER1RWo1IZ!tGID5o(9Sqf
zR<+hfkLW~Q%(n_4X#6CbVYLDOQEIeqlU|R}kSvqP8qbho|0%1Fsl=wvdo%?eis}~W
z{XNyAmugvgID@>_NW+BLHb+s040JToS1ARm0%~J`N_+hBKU|ENMdE}#iXgMacGY)+
zCTl~gEN9cV*U~wwkYTS>r7Vv%*-6FpmX(#o7LU?6VU>A&(r0~+WU($;(*8F!O4qpP
zT+I;JP%kT%sZ-WsNfM~r=vQc@wD&gzza$>ZAaAUkNktLOg7dPGR$xvrzHyH&${5Gb
z*|xtGFs^uXq=h!(8_I7*;?!WAgOT4L^9nxB!g1BQ*+pW9MG{rr#v62`A=BYIX`!5`
z3HU&}f^!*8J%B8&7kBq`VC(vx0wL3N#Hrr}eq^H6Y%V{MQ*DuR3C$iV)MCRzJ5)=O
zvl1Fc8_mK{h+FD4`F07FA`0AzAXjPDRD}u-oRe%W-5s>#IL_9UcQ5;bP+ngi&ta|=
zJJ>vt>$TL;pX&s8tPk|*vz%(S$dK&XqLT$=TOKskKOWIw3Wy{AdeeIek7^nrxyNDP
z4+t@L8}IPyW)d~X%>gl3^q^s9BRms0j=V~(4+1*GpCzhUg93v3a^F2h@U;d_fRgdD
z%I%*^$41N1O8PRhAz<RI;8L3c5>_ptFeZIKtl7EXVy-`RBv(Jnl_r0xGk5{v#p(S)
z?)~M$Y^vfpBM{o6vq@sN5f+TbM6kWJ9x%AiwpJ~rZ8zN5s6LjEYd|Q>o^h}?5)skp
zh)IC1OeAh;Yg+XTy@pf%4fOuFVkLV-h<)E((j$-PUKefpb{)Xq?p{v_-V;O69MgN*
z#OwFA?xoA{ipq-AX)0=uekb53Xmhs45k2%}dp1jGa<AH~wrVM9H(<1eLB6HX%QlG3
zcq0M+8_H8L{+9u3zrH0j`{n7B_89r@y>vam;C}be#v-dyN{LBCEsBTw3MA&$X_o9;
z+6s$S$n^_lgYQDWiq8uTT4HBM3l8xZF_H|*<=kEl8&wcAWwpO-TS#G=S|9C9=x<l3
zd%Ov!311`1w{(@X%#%P12;@*+<}Xc8lwaU-zU5Q>a`n^~{;@IK)b`GtEo0H1wjPfR
zzAq7k)A!I=7-dn`g<zo_c2me6B`F#{N)SlMVDO0GP*8}R4czP-dKlp|M9-4)8}<dX
z5E?^CFrmDsK9Hv$NGOo<z2IKrNCc{wC=t}{Xz?EgPoe1Kyqea&IKgmx{fP7x+$_M(
zj&y`18w?~L3uKUXhT{OrR1~dHK#Ig&=>&g$=g?XVQYb*kMmAIqnIfI9onwSA>LjCo
zveNFU?(HIcp>?CS_`3?eaJPUYve?o+4h|{ia$x@`j9n3U8rv0H35sUrw6a!ien<oy
z+P{l~1Z#`7GFrxnSj5ir!P+=y28O!s35eZ5C^T(kR#8459uWn~E{XRVovZuBXo8^-
z0kb8MmrZ=IWIP4~Rw{+`?FEDY{vn;uy!=Lx?oh@qB5xXf<u)O^h^wN-d#lO3A1^2Z
zh<5X&55T^iF|RKi(yIjKm{nT2VR-_z0d0O!e!tN}kJD-z3|RipK)LFGXg#C(pmT3o
z_`xh+6xn$skOK~1v<A{xdHeZ4Ed0rNLd(`_RpuN6mNi)6Vko`{t?;+FMufqk&9iCd
zeOPzV@Zn{STzw(s?O)v0l=NOr{PWh@5Cs%Tn;Zx?e{@J9Ahlq!@F;oW_My3p&yUvS
zOu$v64xT<HW4lHibun@a-`8MM{6id);<#Xr#JQdzT0jnf&4L*4sj><I;WdE|S&hdH
z*9(sJLlFQUm*GV2ii@D)PTcOxHcpHv7CaBsfc^$dfa<sKZX?O#{>lF5(DX=B8<frC
zo>oz1PA1+WiUI3~@rY~$hz{c@nlC7%NEyH7uEV~~qK2|K!1K4sBPpA}Pqf={5_0Zg
z-}BgZ@ULJHaj|q9;4Ggfv?+fk7^K?GsLLQSDFn<Hf_EpYY8MqcldH2{PKa?|?YW*?
zZ|c>5Y1+cCwKE&CZ8?LU{S5mOxOxxpo`Ls{#@19FPKessQzEF`b_LvUsg6f87N#}|
z-oGa5Q|-N{%U_t)KAvcT90RXa<>l^0zV}RyaYrUxCfXg&AMTRWPPuqN6LXP`nCBJ}
zzTeP8wNesRY-thCmr9AS2FD&>BG$Ob<iQ?tgsXjlHwDFPQ%@|B)lpv!9mHzr@4tC-
zaT-`>(oxJB4uF#}JN|>bYBm1->0w82yudZ6A_2-}rh@sm-Wjl1EZQ)O0_?VH#{lS!
z>VGkIPTiS6OSg_~+qUz@>e#kzTOHfBZQD*dwr$(#)8FO3+57y3wMNyLqiWVOHOgKR
z4-agbS<J}#(c#v3d_qkgL#U-yhtS@Fsqe5)%fbg|v)$q!dTR&ubOs~C+cld<?f)1X
z45c@idnG_uJI6NOBjn>~bO4{J<PNuj!!^6;W)CT}GAhR-cD(!psiI6{6nsNSpa(Dd
z<)tH<yrgt{FSzEI<2yaaAPfI4x<;^+RPQ1uV5FmRTbS~l2Po^SRIba6e{}RgpeMut
zp1<i)aMn1YM?2N}DGIbE2PBY%67*9F#07T(VivkazMt;Di!b5#eVA5UrH?J}QW$6K
zYER>$&X-egXI}g-E^4#7sJk5;x9@Lq2vtuvTtHAs5GoS7GPi&et?V{3KaG1X0@j{N
zNLY?8wVB)FrRxCn8ruOAhQsN<Qw=iciCa%&N(CXwMA#yxXB%$2$W%zXvxZ+J+4=3F
zaU61gxseqd^#OSH7gX3|cGTdFx1+tt=hxD8dchBeDj_aB`dUvnZ$aDp!SRJL=sH>G
zgz@NG^esJ%m1^pNetDqypjB?*IVHzU1-qx>z*li7cx=u!MZ%@P`^|$}+stsZs*kxc
zl5UDJfJ00buFg9GO;Q>-G@0#V?!OFVwXN-i8!?;YxfCf<m_jXBS>|%{bKN^0s%dW8
z=}rbal5nImoN1o|8py9q-SIC$dAbIix4P4vc4K|C9KYkEn%2WU$MPtyz)Fw}75;>l
zHRtjE$gUd`Rc{M!-LC}*PcMJTjRQD<V~m4!#@-IGP9D#Oak2$UOgnXe9whL*$kv&3
zwCk<+Jyt1-)277&rf_Yi{z4#^&lZ$Gkzsjr<B;)W^P3x!4Eq{*3KL|~$mH&9x#Zt5
zzV_)tt@}Pf9to5GYl>KdUL;INV--_CMDeZEmZaW?BsM|;7Afj(z&4gTYZ}*AqwLUg
zoyQC5!p0%}sVnRR|MGkrGMBBK3~~Y?6}Das!G&}qm=8ZMKe?nt!YtQFlW0>!`rYV7
zcDEdb@=A*<Ndzwr(T`+o0!x19ToIE+9!0u7D~A;12gqtPzMXMycq4(U-J2><=cxYp
zTW@~<%-WYf=KGuR?UnQ<Tc_c>t-na%1If-4-oO?H91z=oMb_0KApp9mN7!E@;eY`;
z3Qb&wT5k+TiBg(jv&n=XZ|dekcTrkhwvqJEf4q?_=gF!aKr#QUX0-u;^Fnrky@$WM
ze;A;EU>vP+rs1dC-D?8e2kjUpgoZ5!D@O8}fTE*(;Li}{F93~N+{Z3~5%NtU@|_cH
zUj1T4E69E$<a2;;_sRlS_&p@ZxirAmOWxjI*gIQCbZpgkwY^nUqLh6|wys_ehgew#
zp=*XZE*j!U+r2-Zj^Cy(bh~%<G_^lM?h}_erFB_SS@d8nt&umgX5Vkwh+fvi0gHka
zYj?0I@#>HpK@{QjGa~Dt)9jM`palf7bs$|{*yBAR$v8rxuct~N{#mf}V5CJUq(s-S
zx!zm+BD7bTZa?$^RU%}Vc7V74tKkVKc&iUK^uKgpfI#jZ30(r=)R*W6KGF_L{3#BZ
zYORROg0zl`6Gr%{7}eNDGdX)+R}nwE2ZkL|*?tO0!C>jXB#1B_cL;Q8l-Yuf$&ecj
ztn8$o*REcHG)6MRNw|6vmWU}~&1)s~IFJ+zBT0El0<C3Hgav#TMHH5^<Xut7Jm(tS
zGP{@6^RUmX_3lj$2*%`mWiBdH<J^RnKmS0D8qGTGVa}>B5kG7}8xQ+xz{@1{&#lnn
zIt(3N32WVZF4soT_!=RLE!}dPHMVFu>hHx-4RSi$8+HS#wF5A7HdL@TW4JF#XI`LL
z!QnC>n6KvU`q5D?WVIcazKL7DyoA1M9nx^_guqC-ALh>RQWIwdaoBoi!rfyOY|p85
zQQmXXP?qVn#s^u;Ahrmj1*)X{^1sR_9(&(i(@4p<*WQ`MAj0DoH>+;z?9EOeF8vn_
zX?wq(0Toj+0JVGx-oM=4JSSmTwnKc_)hJjbf5-73P_D>tQNX&*M}H7!1?k<QTjS^S
z1XjwFeT8TMX`~;x)zJ^{5`ghY;B^t^NZqrGy!dBItJVR^@<;^1d&k*R0pCb8IIsc1
zYAxe0|GEN&G=a>{asHH^8jjh}*3Q}%v2w7WzSv<V0v-~EyX21&=vXkShjlM~Cr6LB
z=8ejfQe|_nJs^?endXNKt?3-1!R-_??Sc%Mx5~9hYkP8qfzVsU0&~U1u-LQmGfpV-
zcNttp?|EXfNd}dNGkAtyyuw0z@e`ze-p60Ly55+OwpPlxWr8klqTk+u9qna(#(fhx
zZ3Mwe@>&iJ=ZpGCf{eBwmx4dBf&$2M)AY>Q$jkw~DBOoZo@A#6M?aPq3vWNN671XT
z6obZkq44u4zbESv);r8*nJpX+lm=mJC@7~!KW*?1k+A~yW*zZ9+Ze}0G%qQKnBF3k
z91Q`zJ;Vvnr&COKZ4%SH5>uMn9Z|S|4|Nl!`xS_ltfXyk3nm}l>z>1UEF9%O?GGX5
zs>I6;jHBh^#Ns#iP<Jly{t3VP$U~bd@Do{Q#He~5*iS)Pdh^dJ=gE@P<r(hHqnX2U
z|KhbldO_l@6%*8UW37GM{xY1|VcD?c!HI{YAz!Nc2C)rOm%*Op(QQ!baiI3g*RFPK
z1J-6qzDP+#SkRm|<PH}hWO|(sNb`Gd<VWS2X5rQp-kgEsI`dE0)8|><S$#DQS6jlO
z6FRIy&us#3j%bcmJ%Le9i{hEMtxqXp#FDoB7)unqRud?ii3JcX-V>5*1^gK*Pr9jR
z;fkQRo14o*JPq>Oq5ktIA`cmhn51my|5CmDLNn?B%fxN^%u{4td_%ChL%bmsYZMbp
z#z~n!YFuQ<x>=VLwEj%1jQB)P$`!WM-c35w&;Uh4Hc83}ZLc0jMIX`L5}^Uc*T0=x
z2r=NvHiAoqCFBV*ifDP7#m;MKm3+{?2(pS&YFpVV6nJ;L4dC&oJT3)58s-fJ*%u^^
zw;B7h5PakEjKBocll4>jGa4M}#g(Us&|9bMi)y^F!|+CTP8nbl`lsJMZ(*$kstSM-
z<=1kZzC)?H+gc@Y1Xl>8m~tWe(C|^}jFtIn@FvsyF!3tFbK>41ufu{Ma1U0$=`}*B
zmh>S;uRfQziBMmsVbsN~yn8K1EA{{zc4Vn<9|PQBe^Bc~f(+=>XZDQ7+CI29C@Osw
z<}Jj0YzYwQh}kUNR|#Hq9Z<*7$vp<f8c|fZ95k0Jx?Dt~I42PNk)K3TS>2^g%lV(u
zMzdE=nliF?{@ez)7kqx$%k9X;9!+c3_}}X*hwKhUPj!9f5!Cv7{0&blslta=$nEuh
zy~$d1r}QV|-G3bNwLM$uZ?+|p(&(mD8i&j_I1VZ$fPLAqe?a@A-BopC6F@vPN6Tvf
zx$6QdZjVas4<hT44c&<Z_64}=EAAv2KVY;d?zE2N!ifbL#cn!+bztfq+|1XFIzIV8
z(Q(0m(OO)g9yF)p1iDf(1x;}RZQNv&H60rpo1LAF_&bYUsz>;kZQK@TvS<U_9qX3c
z8uNzvpO%!cmz|DoC?FtU%zuHP|HYDGYW%+@Q_~u@_L~5d|Fff9`L3Z!Y?tb~Y!b2W
z0d{KVyRjT!N&t8uTBWvjri!#uj_^-oyZ`4#!KZX@mtRGUp-W&L$}rE(*dJS%33+Q@
zu<|3RgH$IacA?OpoLBH$*49+xSe(f)T4%`g>*&pp8B->nnYF2aJ$>lq6<E~N|9bqo
zI+i*${j2|F5gAgm;>6PV;m6zw&uFVm=wS`h!PLR9q!q?lLeiq7I%RiQ!2Z;!&9++W
z?S&gM+X55U@}m|uHfUr`Tds8ZdF0N@D*C$RJ8pCDF#F=p{cWaeGSM}-W2|r2*lu6a
zRJX5*DXnZ_dGdyz<HekbU_X}BbwAyL<W75yPs7@!S7k&nl&>2ebty@=F)4%YR7$Q{
zQl&L}U$kSPI}WLey$KL1<(4G5NZ~+-rn4=G+7K$Gwtz)g4eGSkzU=K55-eMkUXN$6
zLDqQAx0*H}GOSFkUCPkJvJv(1%N{IDQs$a;R$ie<8Y=agbJDP#+F+nnt!)*EEK=1?
zE34D9<;coiTyHe5I<CS51jUpN4Xbg2m1-H5m?~4`g)RDbr$N#Mwlss3QT3VK_+GZ@
zUGCz#(KCI{3+H@6BbKgMV*}F;2X7H$%f^?bYSr#LeqEDWgBAvC-uBz)37hI%BE4W;
z(L-0*V245DLZ2-R3be-KD%a(c@<DiN_k#wVyT;W!&<0TOgoW*IC%IV4|1=1DG#Ku{
z7-f5^FOxvX$z`qUb5~J*JvZ&d8g{z4E}OV2TUKn@;o19RPqx|b^xc3z&ELNvEqHi3
z_bA8`AiBZmqVbsH<(ps*eEZBGC1*H&Y|E464r}w|;W`CQl8=BV5LqzL)vHh7X#yL>
z!D6Hu@<8w0s|*V&057WCRI6x~N*i#&s~%;T8;6MM*2jL+#wI4wKJN(~_jC3K(g+3~
zaReH{hF~r0#=G!7;|UMqKzpb=K*&wT*IsFDz!U^ptFR+h!FQ|ykOjdqLS&VY?H-v8
zumFRIruh^V!-<VLsz-A%6VCBq3pl?7^BlvMUV>di)>=}IZRqGgPSrAQCiD$XHq@HO
zz2oVWhf{5&piqoF{6;}?VlBC`Wy+i$F0T!^6N5J8`*dS!Z%cil?e5BGk4&rS#VHv-
zydA$0Z(@XGzq%^w`2bh~%CDizO*McsWmTIZ)``Y&gb-z(=~KENTufHPE8G*c)`?R9
z+R{tJn09*w7!^tFZk%$p55Gdh-QOgM0ucXGmalDf0|uMgsro%Nwd6)(R`8x*iofL4
zO8*Q!z8SFz-hqLS7=d48P@l(HPcD3bwA)^e%P^je?=Z8Q)&UbEx&?+rZ^(iNcMAr<
zC8ugwD-Fu9#N?}5zx>Le{gS7L7{M)!V5dsdDIEXZS#u?8>!fVIc~n+Ro7ilNuc&bk
z<==4QjBNmIjk`v}ho=l3^pj467!KO#+I$F98L_B6L5Afc%hQxXlNxvQ`f?ztZJS`P
zJ+<cNU>{Y7P{;rd!)Yq)AaY;=R#Im@#xp0efoT_2{<u(%&vW2oEUp=F_m9<<;x{M6
zy^chqMkjX$jmJ|+KCiO3F_YEp829TY{WJf8VvwR{qGm!K>b0g63CNDFp=%nLjYSxc
z*_G^r<6P1t712!SfUHwHy35zHBRzZmJR>}NFCh&mxMMOMjH->91b~~U*QqFL8|BIz
z_d_L=X_B1^br$!?SXpnn2%LPTY<q-h6T<ECoUKKhZAGJKw$V54`7M~S!wK>P+X&7w
zH&A&u@%~CU|3=HCc0+&Oe(dFy$|M??(!(>BR4$H!N<KBOx~>*>{|k1l<`vN?f~som
zQ6Ecu#^a_yV9F#Om-_u)@OmSw-Rwp3a)}9lY8jD_ek8IQOww-cgBjA{2m_f@=BSUv
zl`gERean=m69BE?Wzq9=DLap&cg~bDN35!*dDfi~T`Sb{TD1TD{`TSL<Sx+Nk=f74
zehR!?x^bo6=;GzY((nCmk(O74`_NA528w+svFz+O%kw$5@T7pOY1T?9?gAHgxFEsO
zYj6Q(?oS&a6U5ykG%zoJ6;}mxR|330PFh*q+xGJg%ER3c6<f_Sip=)tQn<mf-E)^C
z5}ho7j@Rs6ih#)fWQISDg|PR9Ck*@hR)|nw{`K$Ie)<NXMAdIn4fz-($$9H(kwVL{
zCf(8)WxH_g{tVr$4L-@>+M>o}dyw^F&smX2hRX*YMxJQG@b6T}5Rx3c{qrG{1=(Ga
zVDG6IK6L#bC$=J?$%#@Xf6gmevUu}I%-l;B(c^i2PlbeE-}=ggpjsKrOCVGoK#ajc
zWec!CrQ-m_jv?#sTXurO-|&%)#KOm;?{Xn)4Re_a(@0P&4ZvHjGd_@&ZlkO?Z^(B#
zm5`=RlR95oT2E9}?3fc7lf7=Qe4Oq@6@B*kEWRF%FAsTGt8yXnjOV-WXNzx{AWR+j
zfBD;SCuWNnzlePZb@lPSHmGmoANtO7zuf$|2nZIs{*n{;Kb`JbIZY7M+j4daWH@&%
zz2q0OHg_feuw5eeN*P3H>rOmE>&@4|>@=Re#2T*-C4;#*^#_XmFlh)B5n)@pKlO7}
zm)X=Y`FJ(Iw+e_QP4)nvarG?aN$#pO<o4mLayUyS2K8TvSLP;NdL#Lx@rJ$bm|Bjl
zKaec)LJpTEe^tk}b`Kwii6o!#s3i1^78moEHFc3)aqzC-)G3Q&RWp=v3hM+atm)ts
z$1<x==S0S(_}jR{+f(S<jph0Epc+|B*_x(SY4v)3e_T&-*2(WM8xAvDC~0;=B?gu1
zX}U~00eQ8Tz{~9v`ilb>%-k)Q0N~+lVWe8Q6XHMRd%-`5>ArwVB>fuTt@;=-CDdn^
zcmpr&UC2dTgM8v~MZwnO+=Rs9`-4PGX5hw<M_(Q3pev$EjmU<01QwJCgQ~OHdv|{0
zS-r*8V(Ye>!wu|LiS?bT0>tfA>zs2{Sb;uv|5Fp4Nr7HB{3G&NqyBdypQ*8fp_8HQ
z{}M(y8oKre5*WU9`ihxpU=edUPvz=4lBCFkPhwI)LS`H_%P{C}z%9(Gdg|ER3qNms
zZI#is!e(Mwm{$+a{{qstE`6qDC)ZYE(9X#T5edYjC&(~E)*fK_ah&|AbLigGEK<@k
z940LoTqakQrUrKj(EjxOJ8gge&TiPmO_H{?9WCnQ|2(~(9uYJ1{Hy<?be=-p`en!V
zdF%3og(!P2mrXORPLqU_yW}(`zOl!o$Mas)i8s1yLYkB&g=X)lSbb<)TCGiH+K|+W
z!r|3+7rUgy9~rVFc_@<=lEM<>4sIIK&E1yc5scR}zUo2xtYtazFH#J<3wJuK>GOQ?
z+vLyMqL^lG`gJPWeq%Gs@yt?1+7_DXj%gRK$?6M&7o{FK%>DA!-IKWv6=hp@C9v_L
zu;mza0!Zkv)<aG6)28(}0XlW3g>y!EN@8jk{J}hzDyY-o^Bbz1o&B9~Ue=Z|xS|G7
zDB{T>0XXlWM4_bVWVhXL7O3cy%tMb8F8`<NxPb2WH7p_d`&4t}EX1_KpmyO^{IyE$
zuM94XYJKP9e0goOC8wqblKBjxfwaNNSpjtduqYB)bWa)<u?dk*AL5vTZZoP3+tMSf
zLP}?l0&ePUhodILcd@Htf%@RVnqRihnXrEec#69x^}4XwPyUvpD2B!>6XoKNrPjeT
zk;7?*A&Dl8sxL)yDPhuv(%Nnbd3vG!<asEL=yl99-O9wx(k?189As0|tl|<r2y0c4
z*2c1L#!xq*=?OK?rnzcm08--3umb1{|E5UxC`un|DgHuI^$=pzM2Q)5wUFJ;_1&m+
zw&J+#irKMts}0fZrJg_R)e6K3K$=?u@G6Oakwu-IH?So8j!$gIH;*=faomNPNvN8E
zfj9e%Sf(O_Nv>*jhR9%C4ko`JyuZJ952=^P#U@~lCpYYhmMRsJ<dK#KctgLce8|}$
zEKRN1tL5J9x);|Ohw%G_a%0{^f8scKU57Vg3x}Q(v2d3h5Ro|*0l74)*S306w6%ve
zrnZ!t(}!I3hKNn!Qc?D+ioo9tD(&PighF01dh7)?<~kf99&1U~hR$trY^MA6=Rwym
zl)(_eXaa|9L^&9ugt2Kt`mY)+RWz)i-pZMfdn%4wYfy-ZZ5B{}esxbY>Qyg>KrziD
zk=)wbbJR_NG}VmxgAdrq3SDDD#S>|dvu6^xtq<Iv<=9i9G~-Ev2tcloG@LT_%&J2+
zUIY+~5gqgQ(eiZ}+7XqM$Iz3$Hs{n;kg2BP(3<vpM~BKhlq?i_z(d2T<`ZZt4S9PK
z9HsCB^v1iHpy3qaNvPp$<VuU~eSYe(;4#}?4@aIXnX`H25-?B8aL>YcmQV6tIPUEN
zcCV@Rx5uUURv1iF#RJuFh_-K?mPH;tawZZ8)JSpnNq#22b<;}09DYb=RSNrSKV#^Q
zcy85|fIhUYi%(A1A}@sGB4U|@Npz?4s<&bKO*7h2mM_6BDrwLQg#$O3mp!0L$|zv%
z;2<UZAWCrdHYXTjR=FkaY>&0m=0{yElrsU-Y9U8p)^t{zx%h^c-tJ!E{SW43u5M6$
zJIgp(O(dgojV$mhAcS)AN5wgda*KKGCav4|!!8==iYk+?1#T{omVdS)A1{ZqDMnYc
zrqb_L!4UhLlu&v0af6e{USMUw9M^QIA$Mea%BQZCFzCF@U=Z1yZa4AUC_I4$-X#d_
z%!2N>g=-fd<#YHCe8Esu<c65j;eEAu?8!TBt&nCJl_CyGej!gl%nJI6#v#`i($RS<
zd>^ce`~dpi!UB`LrO{U5!&Lt65}s~LIIaF9&-*ZkSLRfB4VX8S>3!RkdHOgZtU{5L
zsQsnpGZ|0{h~+6TilF-T;qhT74jB~kzoE)9lk6BxuPALC?@y&|E|udYZ-vGA<2Il}
zz7N+E7H|z)XK{XrGXm`YW){WZ#b_aUw_Z~4VYc|PsCpGV`PE3$*h0<J(#DS|ozT5R
zn4DCG+$&UBgYP?k^TtvObX&c>8hsD@(S`5ZMfi_FG61(*E?>01l{Yq4biZ8@M)$(t
zzj(M~-^VumGv_q>y?`1Dq^dS(tTm2Ul#68k4`-Gxf8$|)pY<HY;a#6cS@EwyKXb01
zdENnh^MiRa7NroT;$B1Y3JlvG9;TLW9-^HF;(9AOc1IiP-n;Y=&_cnh{BGrKRR3&y
z-1*}i#3ZO$K99OD$6|?zOhqiV0^PMz_u2IlLaWNKO<W_2^gp_TK=I;S*#zrNd5yso
zt+1Bvn?J|i%V`RONkNLtGx-?-!u~QWMRqTH#rbq$qNcR=W&apGe5E105|TgvwG<=e
z_eht=@&@XiW#m~yB(PJW{qlD4N5YpY-8FyR{rMSQn>(rt(Xz+u`*^!w99bTln$6{^
z<jBG}*=2F`QQ)S#T4RLVi@@$Nc!$e#JcIa1_ECWLf#6BW%-msTGuc;M<MxjX6fnfy
z+m(%QrFCJ{AoZ#J5F+y@LpdsMo;524W8N=FD2y#1Xmb!PfF3k-Jn@o6d=<HJEV4q-
zR>n{WSw;ryp&Qx(NpzCf812~7^M9+~z4dMY<5R8{2zKWm26*ANO@I6Xl00Ag3-q6A
zppm^jI}j8I2>subgy_FaNbH<V9sj2kP*t?w<UsN}tpm6)Zi^&0V{!CLz^%n*LOa_G
zIn9HM5L!gEwo4R?DY-u0dW$PXZWS^y^=XvG?)tuNyPtNcrA2S62BzH_uzSm3E317$
zsw-d(<N(<U`W(lofB>q4o51bC(FOsY@!+Bc9+WD?5b0l*Ejve=GizUJZNi$`@`irW
z?aD8+UoVv?t~}pYge8GN)gcEl;gp@uyM$b_>H>(+H;X<E(;QtkJw`U_5d?TJ+iW^1
zdv8tk<7p0e3S0~+Dr0#n{U0#DZ(7A@%mXaiFX(1o6biwP=<y>^m6`LT2xktV5pR74
zSf%g7s~Hm{LRnUOg_G~)NI||r5f>sLyuh(Hk<{f=M9kk61xe|ADT~$`hRM>J4YU;v
z^h_kkrIusaAdACm7%Kpm^&obWSR{y8jP#2&NjTv3`OUcfla32b3@mQBNcy>^c;=C}
zFN_M2ptn|>V(?;uQC5q0oqioAl7NZMP+$GRw$b=JN$-XsXrIK|2SX9B@Z&?`rUln-
z%poY7B=qAW5_&j<L)F27vry48KXbxLpV_F>0i^TYrm<-jQSs^^DS<ih1<W$E0~ui~
zmu_K1$taZ1)_*ZL0@&KY_;&(CkVsIK;Ai~vm!q1u<=IR_Sx=5IQ03AK;M&o-v9S#%
zsGWfzpBx0uZa*2LKEJF2O={0r<p~?n=@zaTKI7@lx|Z@r)6Oq`#?)=xI;=^_3rnK<
zmsIgm4kQ1Vg*d^LS=c{KypT08v$Lq3r84@B`e^oCa{ALh=>Oa)ggaLT3!}N9)~&w_
zGXwWRhEr3xEZ&}D*s8dNrf#=G6hzlvLfBK#IjcZRX)h#y7n_LSnuC3GrkoHGKD3Kz
z6~%>e<_A-KccN2TuqnZz8c`}tnK#SpUZOI0%D1syuAQz1m=u{JY4HSe0=^SraFk&k
zi)-)LyHT{OIpsI6_Gj@w)Y=%u2xuX1|D9&k?(BAd;*T3!H(Ta18X7<K6*@3o>XgLD
z8iZOKNn_I4gw*B!PHPm@E|SX;KJ*;$4(9F-Y;$>|farZ^2liONXZsqd6C)e9Fb=)P
z(1)F0$OHP8Z)rI)6dCzOVI~35l)SY>Pv~pFqxc?$mYA|hsC_^?$XL!1Dp%4nKk9w_
zgmOKJrMIU&)#B;s<<F6m%wG7Fb?DmejDIOXv$~|b(AYon2LGS6ZK7!0*@F)R<fsb-
zMEGB7+t}9mf0cF%ueCGoSi<h9x(qcTotk1YmB7IrmfBn5a3fhG6gR&<!w8N6<gi$j
z?$%8pn)1*6>Z~UnM)MU}Z6nm5n?EkEPhH-3r>e?WkEbE-BfZ}qU;A6>>y1r}SLb07
zy050HFLC?tN2hUV>Pb-%%#>l%ldHPw`0Gg`=?*48ZccAT`&G;HyXQr9=GTXnY4#!V
zeXhs4^n|y*+B1a5u+@vz&m}9Ab?CM3|13>iJ7uKz*M;4Wx&j^{V-NJ1$1rL)N0*%h
zaM`SDy?~)-XELPR&6Qan>`)I|{O0$e#@5HihZgM*CKmgRk{qA*H;138<@YfCnVCBD
zZOy)C?0haA=+M^QooB(2l8|i}fi}jAQ2z0uug&TTZ+-jfozGcc4*?X<<<u5Ge!fvI
zHs<JRoxXa}_0Wn3wGaH=gxlKNsgkxg`PHrxrx}}l^E|t*8;r9W5nEU3p`qKh+REg8
z{<=yhwU@Rkh#&q?#s0cGaEH)dsIs+Y0*J}p><%U^#!2cwZqJ7XCg*Cv!0YHjYMJe=
zjQD|vQpakc{hcoixZ?`(1<A!#u3c8#_Q!R(C!JT{6W2eNx111mS)E>Z(Ld)cxrSXg
zzvJvrO*cn|zyhD)tdRm{b}@P{auC{G``T;1dg^R?^iHDn-q7*xN9*-F8ylbOe+=eb
z_#RT05#JA;Os7=&f7w&o`~AEu=h+1mO=XZY(9ub^`uyFj)}i<Ld<`D(-d#a9P1fGs
znepLKfN%{m)_sG3!}e^`9weR}T$i8PXc3BPUf$x2thzKajSw-k+xO;F<{0A(Z4~~j
z)S$c=X*-81N6lAYxtkD374-@4gm9VtTcbD~K(-b$@N~zS+cKRv`v+aL5G3sOc{;5-
zg~bVSW9Jp9I^=Jdv8f>_g5J}t?ca6~QJ}wI>qF~YC-77nCeffsTyLP}c)#i|1y{u!
zt#x(hj!w4`5Q%$U)%-fz+R6^*HGWC-BGV_{ZhL(o3S83vj1cGib=M%$7;1W)IDZ~l
zo*p?CH@3sjqbmSUYWxL-aVLMw!{ZqtwXx&h(`KI#@BLEP#;UH(%-E&&=df0kpq^=(
zDep#$T^?Xj)Uv=X<m`rELJZ<6c_#yvzXGcG`!>^c(_3GgX}#uh3PNB%Z{`ISQsRSv
zpXu9{RbCI2M7AfO&cfQK!5n$2#NAbMcRveI72v;7zt>|eEx0~yCab-tT@Th%VvVx}
zK41$Z`U&p?)YH;@!HeY_5^bW$k*!PW6nUigP>W+`e1wXO!DMUM*7ZOzM}AK|-@SjI
z;ym}l7eA@DM4P~??e^4rWdNnmhcSXFh}}!Lvu7Lde#RCrRa>SxI{nd7H6BIMIrwKN
zspt`BiDoWv3-%2G;A`VGd#b<*^x(^Cyphz<Zz-z$`CBs<l}W~Uic6N0iWznl7~(e%
zvs4oukN(vIvMbOfY2j(<ZzuyAnK5xhH<psR59`r0?clS{BGM4(Z7=W>45;|{R1dVL
zem*}4i<hhSQ*;SrmOAWs87h7vUBM<e@nLf!g>f5D6;Gf?_)5|{b>3pUxbu%24x>dz
z1DZ#gM!vk03F7R9>-G1EIQ#wG#ml@pyV$F4C--*uho3@Cb#Nsl88brysrq16rqsJD
zAdJUmHTbgifi`T}j6p+z;=6chYq*H_+d_-cE{c8KR8=LS$@VW#+zL|o=|wiQB+Flv
zA*PZ^A*ga;L#cuw{F1{#Y3BLIrY;AsSCT==)!o(+i0{WKpk2bZ!~sAW#qx`VDirmS
z!$6Ri`~@5H-)KNOFb%=x)r$SfV&~wny74xF<_!>%wye?QPfVc#{cM`I{RjN*F@JU3
z_=Hn$f&*dTy1`x-R(=8+Y`UU}lLSZ8l|TNyBNb&>Ia+Kr&A1JWaYk?AT(X?Jj3oyv
zY$Qip(O7kqSnG5lrSZ>XS)cC%CJ<U+4ZMcju_Q!HPcW7<i>H0s-Xw|pq0gQiKpCw!
zX~<vg_-P!<Jp3UX1lHzzt~u}5U%uZA&8CRT1Bxh2_e7hmmdaR3@pI{fMI*j23%2Em
z$V^30YrC<(JwXEQkyfy<)%SiqgS9O3F$`3I2;ic_6CYJ}L712~B&$b&^anN1+4FtS
zd2pQ6)Xfu*n?c|g?l)@%0Tp?H6z@nZ#7yo^5HGxix4NCdBVeM6yUz9opo%?k%h=|d
zK`(*#bb|@BsTLK&@OUw1c{!54$dj1@2_+)_e*f?bjK(K2M#Em1vGs&xmUz}iY7C5z
zfQsOaD@rz_i$3Sv!+8@gzXB8Is`wf)Xo2S~jhWK%jXMz;mU1`Ha1c)82J1+Rr*&{d
zJF(M!J|oV?Tj&&jF;twv5M)q~4?$YhT!Eo;b%FxILly{h69F8-ho@Tqf({te2&W^!
zM)ASiSt?<1;07gjL-dYBW!7$^5C8RS!EDiH$4}YS5s>AvOl4_Uqx*E<&+~_)KPcCW
zC6?_km(qy8+Z6g6M7f^K0p;O473Zx9Hw2%U#s(^H1~Q(kM8K`^>4Ss<#VIpQ_a0S4
zDeB2$zGBQI6{^`fL((VUj3B-a4{!Snn}WCWiYgMEnd#jVQ7uA;ceM0yqE(S!mGDB}
zK;>Tj$5pN*<R>ROlk}Abpo)QIx}2ZB!3Oj$Y_^^FU~&UJn_~90p$MhLECFE(W9JqU
zimVTEGsF~eN_>XN$Os=0Gef#x*u4q8zxUY)CRI=qT#=pvwA+*MUYq2A&Brx}c_tXY
zOpuNsXEiTqFc4s>-#XyuX2Ft5@HH`}+hyfY?t+dN34m*-i@%=#9ocvIg#yG1%>=4|
zl*i_vk$yJpnd_;9CEa6<qBx@&P)k8I^*$a^)~&U$8mxKZ%;T%lYL@cbFVX}Oq$W`$
zs!Sz$o1#Mqk0~gC01;eIaLS0!I4*!9mHmMeZykRWu^zyTXOM56JZ6u)k{v@-+W5%M
zY_*lw{mWr39WfG(T?5A1wx;f@XGld<Fji3dJw;9NXflA7cf8wpltP&@c8K>Lm`!HM
zSczc$7~WAHNgWi&y|<R7q$-fylA1VDrXLL!n3Lqsn_RT~(C9dOY;Ka$k+M`bKb#CP
zTqtX%>g6EjJ9YghJX4ElfcZOC*)(T0v6c9~Dz~ePmgqdgK9!VAZy(yWto^yxkU=O6
zj_2Dgj02<^dWX7&TJB*VqoqL@=1?%siR`ea5+hrCHc<VVdg86xF*Lxc)=e_^?q3Id
z88<zyWTj$mZn|>LN5kT@G*my*UFbDg0XX9bj)7kwVXT=!=m;QjBakn%jSz89e4@kO
zBJ+9WyR;#*EDqotpqzAqo9C9A))2?q46GZH^V!gsyT$cy<%!EmHsd5iPtmi~z0zt_
z8&M#8AcSiSM2yvpB58s^OHx4*YHd4bGm2(Jr&_}QNk{fPMv3O*n_-FXqVZ%#P$8aH
zM|@_}!TSkp1yR1^ag(^Jk}%ehHMVxx^Fm@-J;5%&I{-Gvo-fS@(Iq11vjD5=aEi3f
zZ5jk{4R^-)1~3M~$5k}JuzrG%lCp8GQ=2Q*;Ndurc5AT5${t}P)0f<Ro@w4&swB$c
zGsu~a`y1X%^d;aMg}}(-`bijB3g&DbgtX@r5(ActH$Vdh=|Im}d{BRw9d8E`iRDs{
znSNt}j`9MPHBvwtJluHrQ<k_;<u+6me?;5pATSSSM68C=!2M+B$X`8v-}bgC-}$&*
z!MbgC*2OU$cz<8J1MK4V$-NGIAdUM2$MRo5+eTv2gLK9O<*7%RPW^j2dmg{(LAia0
z({gWrkDTPYhtW{iUS$5hh8c<uR0rw+#@G@?!4AnG_H6k3@rl`V4%eUIVZTe5iwE)|
z-q$ZM`|2J`R$eg~>q39KlMx>>JVKboPJI@eyrI*?C#cUQ%zh#&#ki7YfWgSwEC{t)
z57wM8nZTQi^8l|OS(!VEWG)(nnwSQJyryy#7~PT=L<7Ovje5oIGaktB6w7m~#quMf
zCJny!GmIm!rXivgt`p=kCV?(#OD4KtK<c1Qf~vYQns|tx!)tLGJfGlxK{br;v4Tio
zk&t9nO#+uV*(uogkBSM8AXtgGpT14hl*>3nZpsBgo+N!Br~6vvW7v4<B<O{9VkoHS
z*!6w-r-ek*p3ifv`$wP$i<^}SL}ny6N_)QXL%-dd4XDZNxg5d?%>D4D0ge~FCGt1_
z7!_n{oZZ2iCdK}aoE%+cJ1!~`WnstCD)Jlt2!n)Ax*`Zh?oexgGa3)>du9U_dq(~z
zmMP~6chJK*$_sm@zpepAb4jI~i#aQpaN2KXC#vSQ%9wW3t?-zL1N6D|Y1)c>%YOb&
zJJgt^G1GlAWUL_hObiqd`;#Z8f59DlVY$Zh=0vKpF~EncF`ocNV3+;yitg9qcBINh
z>%jAGT(D(h2KQKw9l|~LKMH|4Dyj^%-6ru;99e>Ht@hAy?gKAE$t!KOH#F4RO*}jo
z?n*8ALPo{pYZT)RcM;+Me2js{-!fj@5W`YceP})a_&a%o-99dy{2T*gjs`9+-kwn|
zBj9QZJrpV<#tFfo{8<OyfAHS=_Rw4z0BtyPMkd}brQm>K+61zCl+t81geOpUZlFG*
zcKlWX6@n1S-Im44<-9j)hcdoCpP|9S5*J90$(l~~?C@Dn=D0^CR}5Pn36`^8m8?rr
z$Gpu)c#G@r&*PK68rudaA!vejFWk#1C<CV%ND%@`CLl7*o4|V?ngYq5=Qrz>2lwR<
zAIHFtoFh|MrUn5>`20@+UQ#oZG6;jhqDw34Hw~mQx(kx9u*M`j-C&=~e6Nn>z>8KW
z(wn*DJuC4$@`=P6b|q)5vLN%oNj~vT>){Q{u971Zmv(`IC6$?B2t}8P)+iklsWdHK
zKqQPpWAwbH(N&W&%G<RGCK3TZ$%Jm%;#HJ0k?TfN+%tnGev;uzg3<;XF25vAe6@eu
z^4*n^aYXgXUWk(O!BU1b57rBpe(Pi1#k6Z|7KM)cb-i=(TnRIg1^8sAxabr@A(4XI
zE~#{408N&+Q)5j0VHQ22AR}kvz$SMD#8<0>9_PbhQ))_i=@HEB)R?EUfcNC49f{Cp
zkLxBHNcL34MEjhjpF5eOXSpaXB$9%S!M_AvyglyQU_<x7+e$R0$D0xN$|MSdjvpx$
zBb#3-{Qjk6z>G!|_ALsT2s5u$RtsF5Jpk19xi&{2PLK#K2AJv`^SydLdK)>ue^))p
zbSx_n8ifYt4^1%*khFNfGlYKUhzDl2mZ)#MT)CqGcf(qAaoC9ckSg0t-n6at?N|8b
zN&_)OAu8`{Bc0-u6lqfEOo{gYhtlSFnCmM@N@SIj)J>;X3U-p7elKLeV#Zc94YIOZ
z=6Ed$tvVXFj#3ZW0BQx_xwD;&oE0h<8psFlXTX^h{Z0N$XC9<Jrfh6H_$>Mc2yW?B
zMstaNJO3yn`aPj<hx@}D+F1u}OKxa-v%5S&mAs8ENeR40<`FG^s8`ikjI-(8j4OXV
z_vno6z!xS|2yNB(=*Wp*=?hUp0KUbHV|Vz^iP!}HgbjtK`+|Z+{6kJmqmG$%Bf_@E
z(sY&}+kKEx<Sx4^7BYC-roUPk^m?3^j@6S*yw-q2Sq+(m8jB`6Tia8O4e$KI-VKv+
z;tG6Fc2gA+&kIM?fuYojmGGq8mrG?yCwgyR?K!FzgDYlIHnv=%UPk7EUUMV`mmlEo
zzLx1*VJ>GDpL!65<;(>9(v6t1jGq}@=w_?b_t|iy#cvWlN0<r412^+`laj*WX|8J#
z(daZ#9VH{B$z%{y)JlusV;vtiSL3QZV}n>kpYY>KdCY|ql|3)kP!~EU^XZ{1-BTjq
z1+X6WZo|5mof8sw1f!K+bK%(A(A+z^)t#EOrA}!%?1>A$V7ri>Zh$c^boYU@6llCX
zLM?c@6p}xbmRR?Ev2?B`xh48`s(Gwkk_TGE?vTzlNQauNu1)bP!^senZ~WoXFISk*
zi)gYgz#pha0jyQ%gzyhv%g;#rxMD^RBrZ5#z0~)bo0N}?W4?iP`0PA~^?c2WWyD;L
z7D%v+-NwgKV{tl;o3aWS=MydEH>UK(Jiyp6cdK29#=yqexUMV(2e2Ebhr3!PCYa5i
z*`a1rWg`0KMkb*1e>bYSYOYb3^c?T-g#2vuXGLb)GsQZBz!2`94aZK(En3Wj0$j!D
zEg>IAcNbXo?OyJ_yj*Q#tM>k14nOy1PH3H#z`?Ix-$=^O8C<e;e!-bKLx!qpsWW%7
zcScmQXcbh0bcpNn?Cx9DYt3B;&v|`(pls%Ozt3iQXb5x&{dv2d-A5kl+++I_e)7W@
zH(B(5Vcha2YF!cXc4z;7(b<=6$=vYJ;=E+GmPKIc+ic$Y=W5i+d}H#wSB4hkcd>wU
z_e6q4^8aR9N4NG6EW%2hLjN7CbRL6cyfAb8CoSx79*W{457G$w!C<VtA=qR0N~=>3
z)PFb(^8~swubYWFFlqG4CwCJ(^?Z`73f4*Xno-9!f>~|VVN&g&ipl@nipD<y26cj|
zxF)qc=$QdNkhzLXrFauln`E=DGayguV)4>7)6nw}-oQWK&Mft+2sZv|+@y`bot&7O
z6XLPX<<v1v=5BA2)ce<Yj5rRqp2yL^Q7<Wds-F8+3b&+_rb1XEY<yQW>cVFnFWFpr
z(!liCQN>#aFUc$ZxwO-E0tVKO+aJA;MeCp3UDx7*BQ4SzRD1S^$0uQ9j=?sp#RLa;
zN6wXb`zh5I1c9-Dr@=yIR0U)Y%1X`CWdagR?Y~!I7?`B<;k^P!B^6i`cyQb=v2`GZ
zFpbsW8KrhF)Ovfp-CU<#`W!uk7<}%}lNGce9s<)Za=w4}MuM$xVcpp*aq#l3Q}Nu5
z*1RBBgd2H1-OxSon}u||XY~Ru;$e`dSJG2j>~!z=Dr1!x5fQ>-vgoA%jL?o+J^~+t
znkNQVFwrq5vC)p0G=O0J>-jh193tyyA^h}muw@8D*>Cif?JiaD`V>A7z}cY@Fq|=;
z6;lAz=c$=&CBZkty?*&U)%oe{S?~v`t&kEvR6?b1DR|+T?c0H7W+bW7J$YYD6+eDe
z+ZBa2_Eo&gLc+adlB$OI*i~a_{Kh$29jD|6)t19XQf*5y)QlhSeW**klNexvskZ(m
z9gQp?fB2V@7kq9~<xc5|!3%%k8Z_+*q^VidNz&<?HYZZjt}UH30=k+x&Yjhf93H<?
zHP0s;0)(x->iY#Y3T@|aP$}|ML@s4q={y((ZGpP@l7`IPC8y<vrBZ!TEJYr3$wUyh
z5#PvlJ4^Z!If}Yfn28*&e6h;$udO+1MN}(91~v+OS<VX^^L1PX_n0l$L<ls76%24n
zZtK7OBPVL0u(wa4mP*a4vS`9`a91|R_!u(Qgd9mN3$RXDMDT*)m}YG3!qIGFU6#N#
zWm*1X+`cWLjpnfpdyx5s?sWUaZGQ_H-TdhH_|{`_P9*#g26sOYn2H9~R;qEUMkMvM
z6FXG!M5(i;KdEsB#?)jY=bNt}*e1Gysvzl@!AIxz{Oc{$I*r`|hk{Wn&4*@Y!33V*
z#5S*4gflVV8L~kWgK*5j!iE0%;RWt=d*?rUG8vd8I}OfZ@=oy+JJNq!RYd-Rew{PJ
z*Jm!zTeanL(`4<+_6+(t1uc|yZAKg$f3wKV%TwtEJ6KjGBX;w<1O0bRD3C38Mfh_4
z{j<}CRRg>&QSA0$!bJHf6uowTf(Ojqg*MjMGgMT{zs|Kwj-V{!L1@Pfs+t?Zzi7T6
zm^RF}BsiLetdRXNmV)J0vAEOWCbe-RHcQiE#)AQG+$i>u@4S&uaJily@6((sfzPc0
z*?v~|Xr_w^sd@K3{H=o^MvSEsL?eD%0cx&c4{ZDviuoJdCt`1@i2Ltt6t1_IXQ<us
z-pt2eJc6DB1qx*J)p>eRx=QspNoLr>IFlXzRD?x>?Nn5dfPp7Yu+U?e^iQq9mTFzC
zLTxfZB?`GRU%poImgMtXs$v|5B)c*4Ct~apLm$W~Ki1Z()|1ob(5&ivTfZqtODvk`
zgLlJL(vDlKw!w`;9r|^>OZ?7>vNXclSbGLJh8_K_FB|{Pc29Amw=jVdgnyH>mRG#<
zTO#Dg1o@)TG=x5oGWaHp=0U{|S|Bw)T*=d@K**w)BOyXda3wPVr~}lS&=qjMtFvUD
zC+Cx$dsF=LXOf^_Z6d?!hK@11ARq-MSPI(HWaLx!3%0<v=;0P*{nBVN1rW8QY3s;!
zu9#R%Xt2g%0%buXk<AszQDU06D)XwPOZ!xl?_0)!w2on>a_#A~s3@p?3AKK6&40z5
zO=CeQ{;-5UjwN%GE^GA(9!FOUHlW9e^og{T<QHsbT|kx^C+nXyu?{s!Ys#!C+B=a+
zUAzq~d#fn!Yq{?1A@ePP8do39(0$KgZaerRYg*QYaiO(obViE5ex+^aeCrz@3)re^
z@LOR}+v$|mFgkAT_E?{_y$^mve%^$Z#|>L(Ys0LRR@9lLFCQscO%t%vj9ov`Uhax=
z(^`HVlYStvA$eK7)!azJm5jg4m0xU<?@U*T{moED6#114koo{}CUk9pW>~XLzc<$P
zBaj6-3n-9Vjbhf9c#wTV+3PrOe0}|4Y+TV>1o7Tq>Blxu{2S=cl`of&+8bn^1Q%oe
zl9t}Kra{yJn)|~KCKwU1P3iUfG-9kipfz~R#Y%`*I33Ip6S+^bYJ4%S6X;*M5=37=
z$&AgJ^zNFRza}O569x^%6HbYF@qs6pFm#5@XcZ`^3YxN@@V^g6E)bVzavLFntleXe
zP(4WPvl;Nrg8S-PgSy8m5S0V|am)veNozhR?lqi$W3ZJanC6n@d+X1RgTY*V(^5Tx
zoHpI-8E3<XfH?UhAY@J7cY-%jqm>0Cx0GcfQCx#D@jm~${io)L-|!)cQLd*Ei`z;(
zVBHBH**A?BUi`Z)J2p@xa{HS?4vaQRQ;OyxjO}>I^{2~zFmB`*QhN$s_Z<7OgzN;i
zYVi#0*X_~Q^@w=jSKO0s=&V3)Nf6pqb=c3(ja!DgeMC9F0cH^KecR6s1awc;op5-P
z+qF1xWInj~Dj7ODCKG7kHw>Id0&f^F`Ue1Rp7u_}4D;w!fAN^u`y#csQtGuBr%;DF
z>RD!I?7gE|EbsS+FWY(e#Ok!p%Bb5zl0cDE>kHx=wYpp#>UA=e8ujQ;8C+d*`R2^F
zRPUY}G^AJkMW^7iVo2Td9%IQPN4mzOKYsq`dkQnwq|6TfVN5;Y%uYR;G5+&E31tQJ
zmrw9rvtbPg4$@u#{c+ROagH8O5T*MxiEy`+9kuf!azyRV`{A?KQ_21<@b>nzpQJ6=
z*P)-=x{EK|Al16({c=y3LbELaRSR@daR}~IVs`$hOb3QZ1w6JX^UCvkEZb<t7b=1l
z3*j?%eBC-L_$x7VfMiyeg5?aHL@EQVv632Wi5M^Xxxqkd`x-=;-_u~7Hd--uQMB*F
zbz-E1WXou@eS~K3pmR=mVnlgjB0Lj572lG|_B5lBktSqOKs8WSB61B$t_~UHw;ARS
zlQxz793%S?W<cUf_)%r-WuqBqwoISD!-bk%Br~5IHe%hw6|^GxU)k+dAG|e3VzQa&
z*3`DqT79Jq;qt|2cnaVoSTSVujsgkjX9=|*O_tsu!wTzUKPQL7Fo=<Z1$%goXEnPh
z;?u6EiRt6#S<QMp8al~3xwn`Yt<7TL459CINE0TS?E_DilIO6dmsh>(o&}~nQLfOp
z+N7Vg1j|ouS%avaUy_IlxzGepto18!Sx`1i-t`k?@6WY!wm}}20y9W6`zW5H`x7!l
zV(6Cjt?P|$dVdhZ9>C*6qSu#aS268(w|~1@s>RuQww+yHs@L`U-+wIsxF=sOWT@MU
z)ZX0VyunY|jO9<)ItrWD@r4iap_A;Su_`=yxW|JG@@p0xh_9VoU9)=Lug~O?ugcjw
z7nGsYp}x(s&h|Bkp06$#+LAowP2x0yl-!p-uo`-t&xhMAO5HNb%?ilPsP1&+KsT+@
z?L2@&)N<Y;V*2)7An5h_czCQy4+f<1o|f!2w4J4)yHZcD^t}83=T_Lz)giL$-#yH}
zAP^Asf7uFqurqPFvFiW-fm{A*8|O`qq`t$t{<E|V=SU+SN5aaIh-xZ*S67?7qbKGZ
zIS3MBXn4^|AXD+(EkgfKAc^?Iq@8Kc4QSDWhOV_&28c}(bfbE@YMIDsvC|T|R&IBO
z&vwOkIa9(MIVt6%Z)vR76&k*@wxU;5Vt)PH@4L4PW2GbMrbNag`#bHQ2Puk;R5MEy
zRjUetw0ev`sk}Dk=(XgAT`@FO;Jb1shwD#2hF<Qp!#V<1RV<oxrX4E}2>BVa_D8jB
z8PqXuEQ%c}mRgKACYln<Ywh(UKbFtCJl9ek3UXyAK>aDeWE%M{?MYUk7A)JS2Znti
z;Egu&s7r2H`(A*(2@~v^d^o`*(D^fVphkK)BxK@AYow4eBY8QM#?*`nSHb$y1VU2j
zXXv?Mdx^4Mr04Xwj*YVc!U%9BAcJjzB6+w#RHM%1RdvI01suvYH6C6q4OV+wsc^dA
zIDWiF*Y0ZMgC4%F^&<+UII-le0m*SRo98bEV6Nj+nnbxHqV8&T@kYmfRS|c~cfHwq
z9SfO0?9p<qu=bo?)ohFwQ7%-OyVYJeAO*@EDsF~SRagAEh?}#P^Xb~z>o)rms~5=q
ziQN@GTDSl#|3Wz{P>*#eE@kc<dhqdyPLDu+i4~)OAXk{K?jXdEroa$(0*#wdI@zF^
zAsn$mf2j|3eBvE(s*!l`_>~a)b0{cI@+J_X;a$FnFlB$tW(PAod~~I)c{HsJVzT}R
z3hbc+L0khF&T<cP-itK1vMz1aTGpJ`+4rNW9x^7s`y(ry_-x=R8`cz{t?{@1CT&y2
z;lRwdgH(GAhBH*GSMl#l`8O^Ccq9U1K0#2Rvrej2uxL^U5M~Y_7^L~8ip?QUU$LzK
zR3j-6T{Unj6aaq5TAK$ywbJ$&E0`)t>hpvuNKT~^vEQ)Q+d$BH`j4a`eK%BBTF4q#
zjCQG)W$yNTlY%~lb&gNsNUaIG$|ZFJz2HE8Y?V2QN3kT-Ac3TNwWdU}!>#U(+a^5|
z#FhTUyJN%M@2F`6*TPgF-wkj)_UVoeoax#!#HRTxcdqwqLnj`{9^SvVX*tGqJVR2p
z#Kl=4a@5O$!*Hgvm#^<bXD`<lFC3Ye&2Wuak@`eTGH(40K*?gFnnfz0ai=0Y!SD=6
z>`vLy8nJ7n<M=s+Hqu#X9!X`tydnG8CwvwYu_y(d#P4~`0!tbMdr<2W`{_fr^Ag|o
zV^`G==jRSb|2X(QGkr2)7ixC)dU1AU$cOStTH%N<pb-c{s%N0q2d=8?;e>Ykbki`|
z>m4yV^?+nOVWFXCiWB8cB>g|a&S^aqXi2w8R&3iVwr$%sS8Ut1ZQHhO+qRvY^ttQ4
z*!vmgH}zN57?vrx3({cw5a9qWKF3IYAI!r34;}orA0`5k8cctLVmE>TY4#hR<8cE>
zXS*J8lGQM?iuAb0^7m=D*@3RXP{5=tusGpaJ-VWh^jIbdZi(e{*IQW#YZc5Yr=Pjm
zX?;7Z)skgP%~;HT3*VkZa^RNffbGRFE%>4Oyl|v9;^80wL)7D5(B%*76AP00kXxsS
zyVY$7tXrkOO6QHyUs>s|o6(J{pSIkH)U;!1JUj?A+PB3t)_%&IUHy+<XabXD8?AHS
zFQo&xqWn2n_@~MWp;13B!1$2@P~PsJQ|6|n$vx2J>@?yOAWJW0=;4ezEiYS>KvK{Q
zr{{M*m;b$!-l!Z_tmty1`6YE&RWp`izQ8LoD$HV~Q&39)YNDsPO0m)!_N?5|^f`@h
z=FFpW3a0&Gd+Rij>?Eoj-^C_M=_i(r?Wn17Q?+-LA8f0UDoF#D_pJ9Y4!j(`nSyo?
z05~a?uTg?N2;tPO#q5wFrCkJI=@~aahkqw4xGV=<eR%d@wYXlf!7g{<kF!ZjP=L$m
zKq0B{gi>ED$SMT~NR3^nv7SIm^gtcS{XKY2#E`BL<Cx2x$vCWv#;hMuibVu^{R^P)
zmh?{l-gi5w33jVhOb=EDLIa_kX+u{;J>Ut(A)QNZaS4$IUz2vRDWyDC=0{G+Z<Ebc
z=IZMgmlWyR3PlLPgm!Sq6VzE@K+g-8*eKeo%j*}&4}|ZKKOV!n-{O!D{6eQ^YubeF
zlfblD=pcP572Dt`M4Az(w~yU<YA|*hBrF&Mcs}M=)Eu1MC$5N@?QnyKX5x0>N6#3P
zCv5>7=|jp*$qi`<T?rEwH?3b<h9s|=T#qdY-0j-ijKFr($%|-j@5+1++Pr1oyR1)k
zBbivu9<=1+zQq2;n2DU_8>Hu8l%P_vt@D&3eHgV|*g)qZS2{AGng|D<T|Q9R?v<Gu
zxYol7Dq+nQ$uS<)BVYS&TTrOLJ!nw1fY$-Z&2h-2qAZZG(TgV0C1;}l8*XT)nK{xG
z@z2R0X#{%ymrj>Ck0lQ;BiE_it@J(fA%>m0UBa&tazbd9H4)h4C1e8CIHjsN`9?V%
z`rM==q~YP|G-1?zh|pkh?pS*_3QI_xevP)L*^ht789-@J;KE+m(?C+@hE0rR!(y1q
zDVbeZJ?*dG(0`bSSKb|b|AA-${4j0VJu~)py4eJBb2#pM$-zQ__W<aD%fch~U6<KG
z4A$~BHL9Gsf<}h{GnI=o@hO>e5Gq4OWcMOSm<uiVh$NYp&mb&XeqhVbi|%t{TPfr>
z+F6%a=~B`CD<6ZkP~9dv*pgpMSnq%ZLt^tqyJL?e)Af}BJw2XE?%#@%2s0J0J9-^9
zj9L%|zMJ=FN;=$8(<<8I_`u1C74it*1+uW%qYCTkWin7QPDWs{KQn|T!Y#n<2JjsA
zko*1<54MVJy!xSl63HddxaqN)oJ!j&NbaU08Y(Q8s|&|CivelP8fb{04J{OO#Gpty
zv-nuN2aP10uBCh@lu!fiTMhQfCnJhMAr%d7-8ZSSjo_m)XA(|EXm{lLBd@M_iQNiD
zOuWCps;l&xMiI6wlOf*x4cKx)S<fISm&%TXJ-OYd-=PQ|%rjXm2*0XrJ$gD|5nCe!
zW&+#^p|*Q<g<T@~iYDWaC<gvc?wujMv(Kvk1j$s<46y!arMs>Db7J%f5R<SGa@KKX
zBoa{a0zLfL?GLD1GE7($4D>9v2C{|G@|=B0UMK4pPVw7#fhaV50LfunF{b1hAaEbW
zyBL~>xh|#jKqnO{UZ6cHEL0fXS!0`yZGW7fx6KvE9DhmuW}FJC<FhztaJyLi5>qor
zAK=sTq|Vo)lXwUPENEk$QY1g!Fb?W^8*ptEs|>$Nhs|7V&s1Um^u?nIa_1!5U1JDB
zD%ulC5sJVB82~~ST_n*j(ij+HS6%aM7@8NWEG{12%ps&vl<zGTXS*%RuG)){KXv3}
z@5uGh6bl*i<PU<@H7}wDyK31>Iob&lX+I@qVjF$0w5GJF6?NQlf~U%{lFI*)T0oW6
z$$_(M6f@PyYY%TDq{nwTFZw%~cJS{fc=qB=@W$WtX~nqhs>ic!?ZuhpLZ9&Ys83?y
z<NFN`t?R+2=f-P=llT2ixyR>wixD6D5(;sxrZZ|e@f@H(6pxpy^P~HQ?zz||?uc`6
ztw9^_yJ(Q$7=GX(M<5yu&l@zw;THGTG6VGTxq~e<)&ci=Eod!)?iexCDpkc%Vo97m
zm)RHGh*FZ`h3Cwnl;gO}Zv%=znY_<_1a({s992vY2)t~Fj%w&q#IaYqBtQx&Bq9g8
z8|DgcCG+?2?jk6tRmGt5>xD+3u~;{v0^^ni|E{v_HvbjmgIu;(4pjE0(QM9^3EjXa
z*B)NbaZ)+`ctRjL9{BaVSC)Z&0wRqD6LF2f_M;IhO{@$x)oN&v`<x7uQeYFE*3fAf
zkPi9)7+GO4NQm|yttmt3XN-DZU$Sfd`|#thNK(S~Gc`1{Ag5yUfr)!A2dRttjVj;p
zg-1APmF;Tj1B^S=jy@B@mFU$T&@_LBP($91vGQu1?M%84z2lq;{2GH67%pH22o~1l
z3%x9r&~5|wG|g#mJY`0@-1)VxEEDmGLB7kWZOohmea3p!T<woo+=r%Ibye0XH(3GS
ztsL7{v+Z`L+e)4;7Dk;zpEKKZt-;v=REaPG=rn{KbZwN24t;TjG=5a{rCw~6U?tns
znP;_16aOIVyLflh@zz2kg(74~dYsUl01uqF4j`lexGNb0z5`Q77?&aVF1A9rAHEK`
zXMB_=Xn>HTl7}8z|6jaKtJmQg?rnmwwB@75T;|__rFzsx6k=1;w|3XVfq+<v8+?P;
z0wiG=Tv3+(JR_u1KE)uogJ`*RxT<JOqHCy-EzZDDCt!GHz9b)*#_+$ZH~P<&<ufP`
zVve@_b>%2YdmBwGgvbj~%mmcSfb{xl=X#!q$sE4D0iqZ!wXht~Gxlyr0oePpoA*V3
z?0D)*OH25|<cOrcMw4w$RWJ3+rxq{8-Zo%KI3uP|C!_4z7f`b9$i89vmJst{Wm2Na
z*%S9QXVY^3Iga<pea(h;9BrvM)cRWpt6Y>27UXGK;1YzZpXu^9D^z6P!$OFgAm2oU
zUAGZDmHow|u3PhqZRZzU$@9JhRNqBV!j*azZTN)7#`|!>pP56O#U%p}P30;7#@>P6
zF5Y-(W!dlycv`~`*Bvs!Zj?N#y_0=j>wkmAB;825Ya;}h%lw5?j7+<Yz-F>jY}9h1
zxjBq#(5J`WT9OX_nNUcaSwc=^^4*CeeF`!U(j%|N`D4NoTt9iq?#Q*r;R&QAb!WWS
zY>Z^NhAEAK+(X5GR`Rb6_=ixooCEA++Jc?vy3%x;;48{HU`f0Vh*XUg1(Y!2+nIUC
zgE`UYuoEj44($R<J;Y}?>;Ur--5~qJTyEohf}ZUZG5>P!!4)}M<ZletI#OlJz<p%a
zxR!h$RsMG%2c4qcWjHh!F5C;mGVGkAqSbYxgO6n~CJvR>N$-321}YtZ2LabCH7hC)
z4!D9+p_}2n6_xDV%uf=X@F-lV1f?d}>kqAH5*X^+<4ZSVp1j)27pv1gpa7Y(T_+{~
zzg7afZ7e}B5P_HVC!n(ikW(EA>sYzEv%YoX#D}4B7<v}x`ND8+E~EG!x|Zn){c>0@
zeTFGEyq>TCC9FSSlTe0U*?ygSXPRh&>Kin%It(V&STB*WGF1>Lzx|QuyWQ8?&U<^A
z27A8K33eA`FH}F<erp51D@)tJ%>K50P<0W(hv|-Ce7AHfz&1G+L;CB6nvn5Ebt%kk
zJHWbAF8;nTD*b68?f77|tsbKiJVM`DOSy4W6-*TEBaKn`H7$R0B6}9yCaa~cPdF_M
zE;Xj0<`ALD6g)h6Z;sq}cD10Jw^uiS3T5!r!DVk(F`tMu&ZT8$s<>3gnEifNYHOs?
zgp_0<22z`L=WN7Yp=coAGvPbZE3nuTpzhRPrd$yvuNZb?OCftbjA9ONW<S!%knov&
z7p+>O)!G3gUX}k6%g#|*|AfEtqz76SyaE{XZ7)?O4W{}A*PAdWDNAnr>F>aerziZ}
zd<d-3NpXUt{1`<8EA;npsU*Nr2Az_fLLpT%B6t;}K{rrkflbqR0#K7vj)Nz@;i}D0
z7z|VJpi=KL0G2`YxX4B;-A^VqBYK`E=#S2G_m$VmNB0NlD?3r%=U<9vmK4cF;2OQ<
zm&vx10GX?$xNgxs*R{PGv^&+@kg9GGY!97>iqC+Y??Mi}Dg1!x!Jqg+T3){<U*Y`*
z97h8zzH&SfCRh*K?XJ`A^X`9bt=$G1&=tKgn^r7ei$TZ6|J+e-7!#dpSv^?0UA^7{
zcK;=mxBEZX@~kR`x;%s1p+_@wv*Tz_OJbGV8GV(Z4wDyWn>Jr(4vxW$Q}F=N@Su?H
z%#`STA3Wm@ms^u`n82XEynH5P2H4<5X{h-hJM6!Y+n~w>z4Qjt5m|JzMBH9;s|lF<
zA5G6-KY-`;L9x3QRoyBF$wTDl$^|++s<Z6Y>RqC>zx$)JsAaA(UbkV67SulJ3ctyN
z%0=IImB>iN1=Q1a3|ET$p&Ow$b5rhwx!jM@!>2XJC+nKyK-NA|qj1dU>HDSAG2=`b
zryxw8jUPJk451ZNSpW4==nkR6X-52BQRRholdcdi3a2oFMe&9AUEywWx-n;*qGrcJ
zCk7JcL{O_5AHtSU$ARcM5I|$K)bEU$Lf#$nG;e1K9h}gwIQB&!r1nAK_Kpk(HR)>j
zwVkJMf8u5LutnLO=PB6}z;$i?WdzC_0LDaN^FvH-3BoqSqi*0oP|g5@MMrKZEH-Bq
z;?X$@vRZk3@K?nOoM8rD^?Hy|oJi)9&p~dDSzVH+Nd4`}ZX9x`vTn7;F<35wKe>Ss
z5_VqHqf*tH<zc^g>h9|FbaFdKN{q5*yUg#e=eX+C##N&i6MS)n)=puA0<$*>B?80!
z#ECZeD~s8%WT#oZ=ZKoNWWsr0U84n&=z#ZC1ikEd)q;md8$5MD#@O;mgg1Juhp<J|
zmLok}5HgnH9#s&`7M*mFucf*zaG6nRb)-!Sj4Sj^nRO*xXA7_Vj;d!k*3_5C0DL}o
z1@GLB)kVl37PJIsP28J$UeH5^FI!zx9sxYCV3Nu%Ll?ryMR=a0E{BPHMKSd9UYiPi
z!GrlV*iD5o83aP?BnMuq=lAC{b}9?dDqPyJZZA6iQnbBUJ5d63Nq5z2H+WN<vV?cl
zauwy(q8QJMAZUB;S4R8nT<mvE5fM_i*URePM&aU+V&}6})e~cHi)xqo0pLBl0<y|{
z<yDb`xWTplg_tPou25}WX=Q{5`$4U#eHzB9z?4NT-2u_2*%WTi$$tt~^=_o;NoyZk
z=4A)~;=`AYaHOQPl_v}Us1Jx-D8<IOj4$N0jPN+>h3gtVv`=fvP}p)B)Ek>9+F{96
z4)$S!4lCQG5gD_^#Mb#{tB2y{O|6AdAc=;op1Mw%&j;w}mgrtO{u8B%mih%N&Ueoy
zc$0pkX)1-ngAjbkG5p1SIn$Jm30L|13|%b{UK!Tgovv3PKJlx`WrKr2Q#@UUVD7U!
zpjvTGSLMe<tFBdy#EdfilRtuBDQFO9!_@1#$=V;ENpPub>dGCJoFF%CinegRf6}l8
z+x7efjAy>o#+11_!UL$1?xnz;tPB@Vo-QbOlJN8X3oej-m-*3tf(SH`=+@`6ht-Ho
zhkH%&@tAXkx;{~5^EG{NW{5!INQCXZ5Suh#vLZ~nxyS(PGED6k_-c6gUK9SgRQ|bi
z;`Zmw)XwbU@W3%4H!ldLiyiLY9&v103kC<~4Lp6_ozCM+`Nrp5q2b8$fOy^WqOjod
zFVmrzjiU3c!i5nj*X=Ty7ka4dZ$$ji6>Zo!yXpY~OYodng3VOYqq(syU8ht00)dfr
zBt`=AC}*ZbjSk%=n>c043!0bgENR@mg~v+Y>f2+f=IFJRKQmqR-%pf)j*L>Su$d19
zjG~P;a0xaoJR#m9pS-g+N*sSCRW3?`Ekv0?LE(n@N9Mc|9>l~s#0VgR0j`%GN}_Vm
z)KE`W*0y}ODGsk`1!Sm;f?}$^sGr)qElTn6e64S<B`Qj?2-c(p5(zZeE;B|>VO~If
zk5Z<Lp{tnS<Q~HK#P&&!-$hR|eJ^LB-pVgjC!_CCKU7?W`*(80q^utqnn5%v4sQoG
zS$MANgHDZ%Qb@1aG3B&f(`oPKap?uQg0i#9YWsBuPg!Ny*#B?M&u34+DYi>+FL~FI
zvq@kT;_5Su1>Hq%e8}!F)hN%RFfIqp_@0V-2BElZ5Z4?-we5$Bs3r4Wgv5xPP2MKo
z(vCQ~ujqa0PHrj7PVA%mJraHsI>Le;2a$FABPPt^BdHO%=H-238YCQ;BXaci8v#*Q
z1PRq%{DBdnDC+|!fi>NRgS|Io_tcbfem{~<YRSn7=TG_2u**x&O!3eA8Goo<-Iiv9
zM#}yE<>gaEM8kv4*bmf*vklbsM^QA^2y-fijII5#7wxVuR)Ss#Itxk3w}FEi!GY|3
zAY_WS-bo|r(alh_V{wY-o`t`9QUM)1aW+FiEK>PnnC?IgpHxFBF!lpRx9))tD8tyu
z0>)~;LlEtxZ{?40nh3CysibcnC?+N~D9QW%y*>9SIf(n4@Yy>&_q&{r?+SvSMndyg
z5wX_)nFlpO)bV)yr9()d{AZrKy@S4!qvd}a8>>>YirN3AW?k#buP=x%AkGG^fI77Z
zy%?FST>zq@Uqz{W^bvt};>2rRGDS7=ewSN<38ZJOEielVikD|os3zg1v`Hq!)^$|v
z=7A;5ndH<--D!!+g}fO6w<X6dh7^qMUl?&{MxsS>Z<3USCWT+`?Jb{gHtgV9UuYr}
zz4T<{Me0-k-Mfz0O0hBiq=G#HbM26+$C><`@$r5<@p(^>JqWweDSnd}w#E*X!m~--
zL>@qk8++>83S}FGEpv9sBikvO@uOI@19DEh>%y`cvPiuN7q><6AfG{QQxDuL=yA=A
zF`2k?>|eE~lp*lNU%PU}7U(rpgBVQ$=O^W}UhZ{Q`*VUFo9hr2q~(B|atF#psPO34
zD9%vU(lI=Dzlc8cx<d>Oii0gi?JNhJU8hcB2!m|te}DzZnRmKQHr75l=t+8Q2CCpE
zA&kGGKxU{jTqcP&HVe(r2sb?DlzfRl#%K1JW0HsR&ps+0Jh4!NgnpMy<`IE~DnnLc
z)%0hRsk?H0+Yos&*K%pB3YH4lB3ty`(|_dL;F2kCUms?vx6Dt7wnZE_D3MMID~M<6
z5K1(oR4(`{0<(z(nyvdNeS4)=;`p#OiM(LdfaXJ(M}83U;*BDnf2p<NqaL@+*R4Al
z@C}Qo?wFyN;+-T}odw;kGx6SPUQ+nXK+;AG*n$lyTmZUQh2btoYai)1>}~@YOU3aV
zks|>rH`A}Ej8v>N9u5yu<gcGN&Oo9;_oZijXBj?%K(JfP&9;r(2Wk7`6UJ&Op@19w
z?~SDKGKB79<zOEVx6?I>#uFb<)mF7>f64K1#=QB{&2f=6(~r`z&ecB!wbJ#rbHrbD
zkeYnOKB%dFXt#{o2eo{-c6h&VwpzXzUTy*nA@6~AKE4mxKI<R?lgQ4Itk~X0VYjtr
zQZ0&6qt0>^J=!<;NLfRADU2F}Gr9tjSrYkG*zkhO|4U_%iBk)e?TK3fx2#qXf?a_?
z5;=MynOXb&A0x%73o%f1Ze#IX{<Z>npjxZnF#fEkG?R*dl3Dt4C8b)^0m89xI6z+f
zlU?(2>(9;H$r{p{Zfv?lY~^^7QguFo;Vz35nX{T<Wv+p3qA*H|0TqmBKCq!f2hDgy
zT%{I(qYe@gqzXL7gYFybA4@c>os>SBHdTR+Q+$5pCBJj&PrVgiUTL`Hi}9B4<FF4P
zCJH?Nd+>8wrEk&F<q!U*9k}ubZ@I0Pfb%Xqr5?zjpt%k|9W;0TE;K$HnA9}y9MCV+
z*#sHDpe(7t4DWd1JgXXP?dp6YS7*)2V&Y(ELLDQr+C6${h&hQr!_^3D4j}r7P#w5y
zLB$hPAQA1XFuln=yMO#F11q%g6ac9uw;<67&Z}TGwCDv!Z^5WhGp&}tB9wwNjVqa)
zBm@20r&Kd}%qR|{>(&|<gw*8^v2h<xcg5~U7YjAlSC;A+6T{nzGn>I3&tte?r3Q>m
zANHOHdtqFq41)ITHVN{ZG#{k!Q3{6@4TZH!09n6+)YoBBPwLJH#%+D~v`ACay8Hu>
z<x9sa?Fc;xBN?zE_e$8IZ_)uaPOJaS;XHCu+v~vS@BQ2l<#4@=lm{qmi<fiWW-hj^
z!h|<PsznR}tOuo<`R=ls_TLbl#jQE3&;M1~jw6aBmHa_^HZ7T{U1QL=qWBiSh*wx3
zd!mro9xJPV*p^-@>KiLM8<_b%Kpa2qsQsY)hssL7gGzUtZmSVMA@dN(_;&v&Bw$su
zznJSZSLWOSbd2*y)?f1Pf^gb&+kt4BLnDub^UQ;T<JCS<08xySbE;mCEI^hDO0F_!
z>J&Xx0obN{3fu2!e*x`eJeW><Kwn*Cc^O&TnuSV$;`rc>tk8^wvc621t=p+vNxyYM
z<O)Z+J34LObbxxjrX*3|{6T(6%M>)6V{}c7ke_2o#IkhfIrL5k>iJF8v|$0@6I-6X
z_Ss~3{>pN}J>bEjw$IMFMGHF}Xk70j^Vckr1&ST`07h3!OEOKeiO^{!Te7D`p{Z(k
zafzwsbg@*i3`uWxZ~356!%DZ9RF%1K6Ahwbi3TL=P8rz%xJ~0Wa;$L*Bba;8<fGjg
zp5!QDhmPe|unZh1Iu|T%2y6%sO(1{Q7FeJDY%zD6!=EY|CL6t_qN^8CEdkyN5j<Mn
zFC^83FB`t~b;dpDGIo{5y<OCxHVkSKT+c+T$!j(pL#V0-u2Plad}?KzHWsj=S+NZV
zSgUz-Fb*}`2&}79g9oY=TtIY?l{P}QkDhUzn#GO!k^B-E9dl(iiIeJ2L>>;<Ctp2u
z&+pYQ-+&5E=#Sb3EZD)=hrE#x9G=UTkUqW8MzUAi*<l#N)i#Xg_JQLm+a+Vmo}|9y
zXsRRAJ82Tz9a>nyqJulA82iX2NE_LZxS*SXQ!{$w%QKcuvai05_L@E<oXGG!k-_Wh
z(kHeoudEo}uSTOwdU3e4O-try<EejLOM{RFnNoJuj)+;tV|cE%{_@o=;=xwS;4vZ&
z3UYL45=OMgo4>Y&NEr9D5#a-Qe4*zgt5R=Ue_kzSfNm1@%h$e7{XpeDsgHlKIQz`-
zt0ieFV4SF92Yi_Z`*hg;?6Xy&6lbysnXn1ZGcW;<Ox};AP<We+Nr&ouMWJpf6`PK7
zuD1h_UhP}vS>=0APu@K?txBx%mJU`<)mvPcnq3js<bU|9*L(o~ceeq<EX(aIC;&hN
zEC2w(f9N)Fu(i<tuMo~C6)T5d_WyUaZr<Jm@j_y3%k#QfD!m?Jbs)T0!hFXEzNNlW
z<e?Zt;P?ARk}+K)>p~jKYJH=-^UIpa3x^^-!HUE5J|hSCwSa(BvmSz%<jBAbf5txz
zF-jwWv`Djl;+4s+W0k^w>t>UYguXA^O)RAO_d*7mDDjNOr!fqR_#Vxi?P<4k<{zgR
zf%!DCHY3SvRV8b<6jV>aJ>Kf~q)3cEqG>Xp0!$|4nc{5BsJ6)y>O4UK-$k|~UsdQK
zE(3oh?_%WUYa~F}J|Ds@=qaOmaRlrs3|wisuLBRBOIbZHx8T6tG9Rj1m=q?6gDDp%
z_J?f+!8X%FjeQk~;s;VZ)5F2H9PGB<`J=TKW3;KHvYx4;QmNwk=tZ2TgMy(7kLJ^n
zG;#-xP14u29GJv+ui0V%>Y0_QjN_yQO*E*<3rJ?_mGI%IRVM9)6n5O5Z!-OrbSP_O
zY4`Zmx(kgFAuy}~>C>@5A=LZ}ZZ&HztNvm9C4w&W6Ez^gCk#~^t&DdzM_ID<@sl?j
zC1>k*ynG46z(x!%g=Q4#OILEXpbyp~RxrCAvl?{74@!4z;bpC@0<w*96#JxLdvy)9
zuG%BwQR;j1T7U_Ai##f;+Lk+_BS2_1q37;yw#DGnXWxrT((;|K?c`D~;iKIrT<6Nu
z%x)KzJuE($i*DYw_%j4#w+#wv+6O~d5<aJj@?Dt}4S3>h-K<+G-xlqf<=ppEBrsrK
z{21T%T3>cTO1)f~?&nmgY{2${fdP6zkFy=^ZzmQoH<i+1d&_2>tQ@NIBKgF|!D+3c
z|E+Wp0>QcI%e5MeS<idas&=Rs0~!L!500*25m2IT-WFVsNGXE@Gt2I>6>ip743A4C
zLQ*(GX!p_<DK87&*?F97(F$vm9dF6<X9O^<-eJE9Wj-*Cs=ucoj2)npRHp~575d(0
zuPI5@r#3tnAD^Hu-e<KQ_%`yW232@$SGt^Rus`B&rAlQlA?@Lc8~e85zr2G$C7M#Q
zlJdis-glOZ!=I`T34%fHM5=IMLMlm0bI9n{+oX7P;7SA26>JF!>+oRluattb;WJyB
zA<1ZC08MW3m@|z+@=z|lohHdx^nZQs|FYJl=yh`&8?@S`0Jx@1v>Y(l+3jy7a2`{#
z`A|+kU5P67%4`Y$W`;^k8zxFlwt}6~`JzCK`8o!a-_ZL4g!rnF8&i@fh`J|}KrY&L
zI}T>no7P?7?yc-vufmNi(d?ZsuvVFG^B@X%bt&??_?BFk;f`St$o8Du^w{{KN)_>}
z1vbJFxt4VEj)}s!YnPk%wDwiFa|e8?I*whHR97f*f$Od@NWSpp%oZs1!H^H)dJsY@
zFwOjS4J7(ku1?W!pFivDJXu#?TX$FXIQ#Qcs&`JJ?H>=c&q3n$Tf;-Y^Or0^q3YYB
zHZ4uOF?O7GrBA%L-FUs=353XAY?N%*KDam0pI6#3yS@BX<XyeL+z<a^H*aKQ)}Tfu
zJhSSa&VP2fBdT6}*q`dSwjAY%iolk3ToSB7;sUO+zAx<N?nyt35hQ{OEkto_0OMr8
zD!;jNzgzjV#C#@k116ak^mh4vd%kl+zrS?rUvqcbFe8FP!%2(WxTztzG9l-@o5<)J
z5Pq3jnMmE~@&;E+E!??G`F@9x($cvpUi=UxQk6q(nmNQ=1s8@Kiuk;QwuPKXbc{5_
zAc7aW2`0~dg?19q5Du?KuKUM61C;Sq7#Ou+&49q~&gxh)EjO`YW*tR502wxPMv_AV
zvS=ms%#2$7iY;T^&!3=?tY>E|wV{Cfx0+hXI<WIlp@K;p$aFts#GPLAdvH4Pg4i5#
zpbjuw?gj_87E*MNmWM2pM?NA<b9>6Yu?aAPOCu3J0{?m{R!?&P4%)EeZE?pM*)f^O
z<aSHI0c-~ez*k@_+yIPy!I7Yj94C?m9t%bgypY7%r9x2sC0tvm2%e%g<_A9qbC^bs
zUK|@JI3Bz0?N9KLi5?#TOY2$_J+v<$4;#oIbWdXB(fkKgW9M<Nm0qr8rWu81{womv
ziYw54JMaSuA5U2^yixyzv1i2(Z#Il4Yim4yO{L~J!Zc0yZBwT0Y}V;*_P8#v`=}8w
zj>U7%<|}-#OiTbU{Ib7XdZ*yS3|;mP;<`e)EWYGm<K}2t^8y;4`J%0A4_Fo>P7<UP
zC6d0^8~AqgwhLH3QLe!R4!@G7VCexAD9k&SP7taXtCp}{9K!J96RIbVD_eko3|-1%
ze$&*^Fth7_P?7aP_)}F=lOqcYPwv_;`|7G3?9|hl?!4y?9a3AdXh+GPVE_B7WG;w|
zNBBiCb%Xq86qCKawb6h3czY>n+icK5d#=>r2Xi;_9W-j!g-pT3Hu7WP>xOoq4ADV{
zPpxX;OvD}*f4y+7NuXK|WarB*#<_64|H`}IS3o8%{f`IM)WH8%M7k$B42f_QuiGb_
zWy4)iSM6YL3`887b*qsi2!+a5T2xn3kCDO-w#aW%wpN1eY!p~;`jXs<Bw-U;X@F;~
zF2HL`PT<w_=lJW|r4K4M;9yH^M<-+~8NJb|PX@V?rHa^rC7oX_w?r#A9Z)&ld@u2g
zMHvbvvnwjoVDt4e>r~nywOR<aORy7SYAB$X8DVnJaVH`dm8WJd7jYLHnR~Z{6c6X8
zkGxRL&3$|fS#IJ*?vK7EH;G!r0NpZ7Br3K8&F@7OX?58iRdgg<%u28DEVziE+z9dE
zKK_VYOWY`_&tvw8u!D6rN#%%Jg;H)E2CcqyBqTqsi{Fl!8s>tRYmii6CDcd3DylX9
z>D{b(f?{gx=V#xZ_dXY(iYm{<0~H^|cPOUT{K3LG!rc%E6=gbc+7#_w=Sck9MR3up
znf~P(!~g9V53lPv!CYcqzy(JO0DSg1sPE|lC342d$pPq)K3uW)`3!clHWsqbSGIZ@
zz<$bm96DG@o>e~aRjQ!w7UiSbtR>kah~X*PszuZlsh=H5Ag!@W6NFH(JWPOAlmt>S
zgN{AjQ20_R=LKdGwckL~3NW~$ZZEQZUGS=ig@TA=jbk1&1OXM~R?Cmdk_)4ETV@S$
zKCSLEao!>uS~%NL0PN3Cv<La8&)4Cn*W>I3O`ofHk4YUILCK1B`odkTO`R%7C86U3
zjKJFQ>z|SiTRRso?~Qi0t|t*~ut_SBq6X$yf}-faFbd|NDR?~PPwzbBFcWQNUQn4t
zU0iINUt_VAON^Yes^fmZjlh0~qUCggwJGIJ>HPE!InN*X?kC8eVlB=d2esRFB}6<x
z%UDW{Ltg~=&&iG`KN|AW(Ask9c}IK3Y|?|TcV`QswEO+44Cgg^*)x2VJuNHVr;m;;
z8c4iUv5d~0t}`%P`Mu_&-imA%nNOhqz18|*@XFPI0RWaD0RV{q!>iQL-jc!A!q9>B
zzwNg!73p6*Jbc%KDs+9yGdw#)J4~|}G+TA8MI{bavY%D$>L2Pk7OXI2F^Xuv@7L+s
z#gv2Qma8Hr;pxtof5-GMMbqdVI}q900|%z4jLGSr#hx-()LQ+k;Mc&mYM<OP-W?zp
zQc3OO;H&7`yWg(tAk_?FL3Z|k6}hZ3T*np;JmaJghjFhR$rGF2;Bl|hfd!v$2DXl5
z4v%hmdlJnHqyZybpRXJ`p)=a;O`MDTqb7s)gG^_#tPv>IIkr?W>37>f-`Qn`C&mnz
z(|8%0*TZnd#GK^eMMrXigqw3ENt^cF26QL^*ZK0I^t6ei=S`pdJy17gknxiis<P8o
zA&H^QJm(VRDn4!J#&MYCPH>4O+-vA5JbQy2(OXdC>w@~Q`F_a|R6CGlfki(B(`&g*
z=Wj4hIEWTzeaVEv;QfYAmxUDKDqIuVfoNp_d!)M{pAZ5?97q^ACe*tjoZ(P6WO5`d
zo#R^`?S1-FRj;pkZNXGj<q+-zr&Pj^v(NKazHEOb<LwHX28?NvYPCt6JU$c0GoFVu
zdkBZk14~kVc&)cccqb?mNizX0sj*k7CX4XoEhR7Lz*yDUs99Z=4I<uXNH!%pNUWXn
zt<d;*U8wa*-?n$B9{dkhV3AR2YT%lDw;F9mnlmz5$n6@jQzXi*T!20P1r`!4QX*$W
z-G5FY^j|7o6MJhH92qO|33)|J16M@*lWPENms086zHLQI2^3lJyPtVNA&;sjx9KG|
zsXi94(-(tVXX6Pl6YohqgzJIyW<d(w!aX6Qu&g4fFmD?2ww-L$i1S75-n}oMv7+;9
zJv_GA<-bmtHm44o3io&tb3A$pNWFy7gWCW(>R=0n_T(cLnQr)^j!>JA-X||Rsd&&(
zi<FtbjI7CO$_@Of|1Be&P$gtU(E)AMYv$nLKNz3+Dj4V<7{Grw=`zZn-u+JH;y$mJ
zViKAHTwQSL#-&yy0FBWIwkfL(M{;iKZ=?Ykoz0;CJl57ET{&<jcl`JZ_o-8mI-J3F
zIS+p~?H{`Fs@NKx9TeEI91*K535-QmWL0b0=0#3F_#4qg$=p$MM8m0^37^oS$11?T
zum839;2Q6xd$weV=))nCS3gEZ+k?}g)%EFlKR}GbtnpOh-S*zRAgel1_{3|aY4-Ai
zGk5OC6$PV)!tt}uR0Z^~N|rL<l2?4SH@dv=k9fY4*+&;yFq&R{oOW62xOf>jzHse!
z)sXrAv<RxInh1#7$O_1)sHm98sJMvXn>=1k7H9a4z;uPr^_1GOSV~FN*W+o_)F1=j
z_q{wR6fF&j6v+24IS}p-N)E7`5ny#XV*s)pK|pw2Y5A5XHN$U&?$X2O5%fPJz$<#k
z_AvDYBjNpw7A?#rF?|XL+DSOGA`eE0s=r3h$Ms633}h#qj<%q>GC3E`PPEK;VL(5=
zcpw!q%zp328)%>y)01#dF^Q5@x}E>?nPwZq$RmIQ0H7iN&*)|wTVrbnhyR|=Yy6LG
z74i2w&Hu>51c+#pY1Q0iWsZMwXdQ42W2ezb1`GA;TGcTU7gcbEKK%bq3)<+e*6pnj
zp~O)P*pn>A?=p%8qBpZVBNk*Av=&uy1(otz7POIl+=8(~k-{T;@(8KJcDeo}<83}E
z@172yR4v)~!v!~AEaH_DK)u9Ig7g$x<D*Nl&w>}}batN$-w4^0wq|Rh@7__4%6Jk^
zSOB%p@R_u1%8O>6;&u(PhL3{DlcG86y34<--&#uxS|uYh<_lTtBsF9)qAMpoU(Z-`
zu3j`#N}PYEM0Nw)sXqOH0%&ST4n{6QN-jP+h{8S>Rm9@brH{tj;+6~sq`a18PK}c)
ziYPK^j{B(-Q%f6JTocb4>{T{LqZsx9#NwCEI+i{J`R&~p>T8wFv{Fs*uUPhX&;Ajr
z3<%1Twa`p8luDhAH%?LyU?fSF)EA0M7_|*O_Ly5KkrZR)8?%eWlg2LYfy@G$W5706
z5gVvr%5S(PCNZ^FTKTl7YZp#3$xr8Zds&FvcA5iQDjr`=CQ6DJqEXC%jWr>aQ4K2T
zgT;nc#S0}0L`KC2#=?QSA7;LZpHdd6veo#yUd7$kAEW7Lif0P38&e&)nHG1%_oHEN
z-@-Qc;IX_~**f2=#!(zRN|mfaZbXvC;QqYck?@UjRXu>7s;EN|4iQ%r>e?&cX5XQw
zl)GsQ5)Y*&t<!?^Y{w;zv=tl9--j_!n)WFMTr+kb6M<T?y196Gc@S4-qv>G*7k=u5
zw-!0*{1m3hv6H5tTmbB`BRVJt20W0g_TeGoVOrts>}>07YKM=}y7GK?tLolrok_(l
zqi4~mF(W^sJPJRcfK_23wByf_&TW9RQ>&ieijhI+0aT%-gUO&65I|gMjBVa&(MgbC
zUKf*C)sFQw>*k+X^&GZXWo{Bc@2a3?B#V^d0tC7Hts^sx2+=P*aMYR=I}EYtN!}vK
zrkw~O*qSFWHQp{mwE<Dwp06IDgS6|5^{Y@UG1l{+p`ZD_m4_#>827D9Lnkg|rh5I@
zI)N3vGIaNRY?PY(r7jPQPD(K=2z<Pz*ZoMz8r44*J_ACms{gB@!PLtIhc&L@!Y&q}
zJ}@FRWt7!X?bo}J7~H7a9~q55G9O<sYLR3FN!EKX|Hr0|CB<O_5vZ3>)RtfjQ-iL`
z>DqrGKX#t}E-UZIRMd!FLX3mcUsAoJJh;nk63m#N%fVL37VZ)V?yqhbF-sp*81MD^
z>1>=DDA;bxwG^M>XY*CdAQ?yF0%ej-bf<`~lR&jzhmJ@#913duCC9KTXVzb`OXJaK
zxiId8tiJfXGcLbhV#$}oZJk{xYa~W!gqEb_vJDpwd~PG&UeDUt50iiKHKDzY@3GVJ
zLrXOoJWzpddh8#Yl;D98xuuAs=ud33_yZ*7h)(nbm9<kN>|cC7m_V;(cs-y#B|Kn_
z``jg8Q^2E^)oz5$pkLJjGV}u=c3c=Xe@Z5vu()F-Gc-^be;_tV){{5!73|*;d$kVY
z>;xd-ugsKPM(CVJ?g3U>MYTKseL&d0(oTn6=5h3X*Er*Js;Ddt(&`r6#3dSC$w1k`
zctkg#UXpgPt{KA>?8X4t{C9ByBZ|8CR$(DVW_r5b3W*Mc-WzQ)VK05fg1xFRwRqGS
z_;h@TWgA#R9zGF6S1doibAH*^bwowr4ES1;*%st-6XmR=s3pM;TQYHffq#d)*aFq#
z&Fdp4mE$G>1Mrx#<eBaRcwk1U<m6ItvUKw@)I(EmB@Sj01jyUva~6zT=(y4Ghkn6>
zDG_5^dSp}}|L8nsgJh0QnUlP~S`UnA&0EO4MA*97kXxiR7DJx3{y_4AyLLj8veCsO
z9|`mEyvAGFmq9&`dI?Di)JK9_ldd+W2o7bM)RSj=vPV{zg$x|_>fg77xG7bjw^^^g
z5H_s)kR;@&%#?j)$Gz$Ey}1g;d%wDIy-mEtN&xDwUL_bgh`l6zd*pi8FH0X`(g9G{
z-Yd-PQbqF$S`k>^&9c?e<h>|r9*@5vXS`_EwhSbD^L0E!tk>a-e{auBS$mk>@JL(&
z2m~pLnD+t`1>&jefTXay!~E%=VKa;83B1b4Bh8h}3qst_$!X2h3Y9!N<ayK6=aNHj
zvZbDR&c69^4NN9Uiq=s+@6m}G>Ql~67%u^8p(xDqB=yB3c!42Z4}oqS$nBdOrVHg$
zrT-!=U+-)WDZ?iW7ZZ+4#$dm+e&;={$r<2A0_XmV95uwRGaiYvQ9pT(4K@pceNyit
zZEkvQ$UMyPr}7h8Ey}N<qasD|{<7%y2FWC}8|U93kbc6c*j<JBn{Fz|?{n)U$0pLh
z`EL*;T5pbWtL%47^RAPrrkAsymEuAX@a6?>cg$FzV%k=T`(=*#1+vH3*_8r*Vx-QQ
zk8Px5!O=&!dz>Wf`@Rf&#<;|j!wbBB`{?+hN`dP8P23h*CX3@2D`8#*_2_d^sEp2f
zepzAD1@!09Np-?OdP^=<3~D0D1!MH)=WXJk;0!$P*c{w%3>GC&cq$YIkJ}BqxDqJG
z4(_H=$>wN|V3X^@SttXNFRu3yZG_joeuRq!s@vC8QeCHrAAG%6^VmZQjiN}D?#D09
zIy&+0Tc|~Ho{ZKnUYhvW2qaGA7AvZ2%cqpXbscqXi4r9qi_p1e>%;6Y$g7!ZE0d%9
zeih^H6jh*xy+;qhWI;i%tthEyuKNp34*QC?Py6?XDe66hbkr?<6?1PC4H+vzb@RHE
zH_M;mehbc{t$A3`|Lf|3aN9%NOn^!np7$FZ(pRsqvX=%=L4T97gmnemU-y!9s}DGM
zG-jHvB(GL(DwAk0P7>~hILEGc_%=9~LTXdW`V0Jzg!}~#gnO(qYnf(`z4K2YiQ~jP
zhd`)jcMscUieVD+Wqu?#G60wt&-(*B-q$Jbk>PH@Nx>jWWHl1?Ol1sIwpo}-`xm1Y
z(nnkJCq{MHmzLx=^olL3W7XzsJopj$ig0Hb@ny~)0<!KOL%&uRlKu@;^R`&f00NeX
z8Ch94|8T@qd5GzKX~^=D<V5+~DB{{Hwd%9^Rux6sAnG`d+aO>GSz4KOm(6p=B;pp|
zSbwiMTPgine`zxI0?Bbz>=x~JoRq8JZZ?UaS()G!u=2!wn6o`U8q5%myqMNaG0hB|
z4dodIVll3MXE<Kn$S;`8)y*l;yY>TxL)#krJ&h$)Gc!AnfrIf6Kh-Ul?70wa?8{yF
z+Rudp_lszstJc0gR5tqLJu~=z&)II>FHyU#f2rK3XqSxcML!=b+XS^`QaKqOkIyic
zH&*WpZw#D8lp9B8YMWW?2WbsBjAdY$JwXf;malt({v%gM^ddH>t3gC%-rcLrjE{;V
z1KJ5CB|AZ8k<K)1AMj|IUaL*JUvLP2L^@D2VPpsV8}v^sxsO?1psm$jBYsxcxRO-7
za=m!(a{X>9Q^U?K*|Lg1Q>D-H6uc7~$oY?t+(q;!ZB_(|<HPgf!|N6j=jS8F7N&(w
zB6%Wf1MucZyboUpZW~x{50URi&|e{3-4U618BubkFmY$n-TG$?duEQ7j8<rF%*G@G
z-FBec)plIwy5U~4BZG6ew}Vh=v?1R|#6AJQUHQOv{YLD)+??(}w+l;ve4wXf0TvSU
z&d&Jp^dW2rdJfWVoF_8@pQ(1apx9=BrW-&_M3He|u){s9lVo~Dk9LEsN;;4}*t+an
zZV(4a_)F)C>04nuMf3y###-H(gC^Vl3PzkVAizItad>8w2Wg$f7eui})#bFlM7UrK
z+zA|^9JN|GL|8lKmV?p<|7CXZ<qBubz5-OmxT~e3D{{^V>u0e-SPsrCYI|t}S^K-k
zg5p^^gFYI{k4U{RM8-t_niSECyyesf1HGSJgTm@UK6k|cJ-8qse?%WrWPeb)h9&PE
zzNrr>F3%XJNV;Zqtj`#L&jFt!u@mVKND+qZa<6VjAwT)h+=$)I$Kxxv#1;;tssVxt
z+P#|HsSj9{6>v;gNHztub!N<pLusTOJl-ApFhQZzOAf}c_$#2Dn6rR!YqA{Dw_}}N
z*KyRql4%ztV0z&woEILGzFD`8abm%`oJS+PF)T!I7X&vxH_ts&z@-^z{0D!2!A+ny
zCZP#qC}s<k!(?i@!(ZLEWkdN<RT@`>c_*2t3;Wd;+R{%m&N1Vejj0hhmQMM^^6ib!
z^cj1eG(0B5BM4HmBr1mK=<)UvX3o}FA}$`g$29iLaK2^_MPj7KCg~wk?^w=18;x==
z$q^<EyQs(0tIU+iM3ajY;Zf+nx0+Xk35&atzkO}Te5qPhS^#m^3erUC@A_{YpX@Et
zZ8#ocK}bIZu(IGXuC#AXJ=HNODP6fOdMd@V(qKbvL&mOT3sS)Ie41nZ4Fh<_W5b%d
zaMY7hp$qu_K)~i*T+-!54y34|5I|(gvo7X3!Qt>J7^@qvj4_FU(IihRP%X((#l*Zw
zv6}cTS*?h2>B#Q6ZdZWtbt1V*Gpw~OGiW*BrqPw`UV8U`tf6Ws(HZhIZS(P-fGpRD
zYXtr6ky?j5K<Uxc5014swIr&l`}_awbBI_^x}v8L5OsDU_7GZX;HGbbgYte$!dunA
zUZGQ<8Y|>3_lZea`kX;Yc}h}>RuHM%>*1!Z5kVCG=1>t#7?QqBurLj+wN(Rmnu;m~
zMcn6SM<J~=$q}agjjadCV^eOL@p)m^@`3+4QapI^Zi2b6ZmhUaY?PT6bgWFv9pv*?
zT;Fc(b0JszUI4+SKfF3jpS~q2n?$yAYDi^Yu4FY!ztA$gYuBt5-8<Y`NmeKrDbP>z
z+iKvzNCOh^5_;mo5@ncsTvn~k+*4M+*?K9Ce8hl^(nR|GTI2MlLt@%$`iFFnxIVvK
zzg}i!NBt+v4Ie%C2G7RE#_rC>ZvO<m1Y;i3{1gtC^vGzKFP-ei0aUswQNa)?kHJK?
z<6As@H*5NgekHQy#_R+J?O?+OzIIjGHEh=k`jwIJAjX+hpiP@Gp%L#Q5QDHgPXrR}
zf}@Wv3l8R4+c$|jo}iJjt{hZ!j44}wzJCfD!6PDuuCGK##lqI>vZ=1c+-z5^T=0K3
zNthkqa7}jDM)&noJ5;BX*e3jd{_oH*E~J|`^fxrD`3(&T|3heKY;9s@ZT#O7!zvXk
zoBiKf_O&j(#@V8Z`NGwCBc3}*7|^+hC?LYKbwzo()IR(UD5nYM?B@qo53oQ@x%)gp
zdF%9n$-itj`Ywrofsc?P4V0;{*CT;+b;tgFAc^t+_=G`yR-~ABU!HKYxTH)Th-ARq
zy5dlfG*SQ;NMqo4UY(GIy<7=nT3FFGyj^ioZ>r{RnXVeNmBOFmc#|?<+*hn6taPrr
zpYxnNnPh?^T)QJp6a|t&0ycav1leG;1gq3RMS^!>`Wy3#mu2D-RUC&Tt=S+69e&yk
z$Y<EI*B`P@LnFH^Yx7_#+e=X<iVUKokALe`#t?{UN*BYzW=L@<j!|5U@*1p#*Y<Km
zwXpjf>m#fVdHOo;_7O%s`~FzXfGI$?5We_MuGSxclS!NR(A-BrI2&>UMF8#bO@JZ`
z`G(A;kSZOSlvbHBa`skCb@FQLbOh-&5}@U%Xu&q<BE*sL##mY3Qxn6scz?$j5|eYk
zl<vmYM6|Q^d|zx8ZBb^Qb!p1iGgeMyBsPiI(U6NCsc^``Ep;8Ig>bAC7WE7SZBMO(
zU$O&xIYXdvH5fcXPi!WPEW)hGY01O)ye3<#CDvU9l}>RKMKhBf7Y#}QiW8Oekfr5q
zwB+absGkdMTA#{=+ii57AP5Gm>-1^tyQ@*QOnOsnkTHiCUDl1JTBKHa>gobR1&tjH
z0iDC?SVco2kf(!u>|RMuXD{JA4#0A*GG-l{6|OR*ox6&R@tjwACT-YKC5w2SWh&cV
zhxhs^wN`W%VCe`U47cOZ+RG%c<j7rAc2J~!u0Je44Q+XIb_ca2R6k~uy)}13IyL>s
zjG}U}vVSQU5PrJ5uJ-*weYD?e*_L;}G6Uz(BBIDLcr?qo7v=He@U}T41?R4i9b=bn
zJZjz@!9+@>DY^N@rVpg6u)_--t{kA+yOzHktfc&M2;^&r^|KsCBTbt9Gi?AVlNlfA
zo~V!>JoUKhr#8N_v?-=$NLUgpN-Ao#_XUyIf(}d>RfXip@CFxXnVy{(v^zTdefbq+
z7RlQj6JLq9P0%DB%t0cV<e2~j#2<A!))=d2hRVI>)PShmb?@3%Lbk6>r2EhE6*{l)
zB9jYW%(C<tQKoRTnS`}nvg)lq1Q*H^3G3ZK!nqkFY_jko(;<N$v=5qhKddp2`(e#3
z6zq~rRlb8%<Y$$Kc26}uw5>r<1yz~;=2O@dL!@efDQJ~xjh>V5OZM#P9$L7l*JS`!
z>p(JT-S-=oTr1WHjsRhX*EwrE%u9rpoNqzN<^=<`3|^}J4jV~My9$vzC;i=tlZu*a
z%&a^#aR$K7z#oAoeYpeW8b{zindDFrOSO9GWmO$#q+G%^@+BHZ`lij$MLr-U&JT(J
z-W(ACxJFmrLEvVWHCWgqY#<KSw6Q6P%4}6ZINHi%WxW~yMy~Yu;(HO$Er*ZB<$x6f
zRbl#)u!fS&5aC7^jG*;pCo~99bX-O5l&@$}I(wnhHj#&w-rw)-TQ-CVAmWrRBz=w<
z1`$yHDL!9aN?Qni|DS{r0a$=R4IKagRTuz(=s%os4!RD;_Rhxk|Lv4p($aLmVt4i)
zso^^_E~1jwtapjG>#WYFX;z-2&gYs|q8I||;I9|;+UOSBSMm0ohB3_*_h9Kr3gL<z
zx)#9$06TflT6j2Vmq>bl7*2mw+nKDUO*BWVvdXqB&^>$mJbxNk(wc~BFI$cx|9pL`
zVQq1Fm}pZd!7E=+w#x8XEWyL}i#g|&<?UQw?fib#eQc;smpS0Iw~8NJ&hlnx+ax=Z
zQFtoCT1;7!q${L-sPs&XaJhdWealcXHqqtCDzg8h5?9sC0g{i^_B3%_RXBz=HcS$8
za1k`N)fpDlR8zm1TwL4NrM!gv{<;6%b3;>o^jxrI{t5>M=kgp`A-!R~P<h0##VY)s
z#Xi3!KL6EFcwolT<R^$Nt3=a4@!EE3xdC&j)|PTr?-Cfk{AJF$z|LXPu<nSJ^)E`g
zy?pI`gKcNJFo_Gi=FW>0Upoaw<$#w?bnh^9rWk~MViWOFGRs7Knfe^^+xly3I=M_5
ztrny$scNFU&i3y`{h*|>igi74r`7n?sf@mP4;uocRy1#a@dUI)#Fzx_QLDf2f#=_N
zx;ACjw3LT-oAdG}jc<<SXLS=<v=P#udIv-Kq&H{BmlLG6IcBeozF}4MgBb)Cz5D2u
zbq*)<E5ar>lTDZfmkeR+oL}i`cj%%iKSzT{N1gUgBGd+xG7@iH(3rjS&oCT|@<txE
z>C0d5%q5PB15G9l^tbyGR$kim>alozk5Wn*p?dfKN7y;7X98_mH2h=Rwr$(CZQHi(
ziYlqtwr$(CSxLISzU#g?=PCAHYtA(WD0<A#QPwH2PH9KIe9_N>#fpIKV{3eXmk;h=
zT~Q2*{V*Sru*$ttr?<`CAewr4McGa|6b`mX2MG7ZP!gM14W`G2vc`?z@y2*h&{B{3
zD~-WIz+`x(p?$k{Y^{R$YX9c>2ovT%8h4heSQ*&ha>F<;Nq&C*@oKBX?$K&SL<G;D
z=woblCQb89%qEs5ineT8uctprB`~}cb>AV>Y^Ac}k+>}q^HJu<6$?pZ!1cDDMK=u<
zU~)l~3*j#n4#hFxbD99_Q4XcW%AQ3to0K=H-J_0I@!=!4sGa)C<OvxesLx^_MyIE_
z_Swgn_w}#i?ZM;gIAsJJoDO-%AhDpF>1giOFgl*PeQ&rNpeTaR<5RhGTh>YS%07s`
zO*5z$jF+8@iXo0h3Z3NJWxt#>8wukJ4Hp?0U;}@s!$sD?3^$E)cy#q;S!=7ui>#Ya
znd?s2Pz+lA9rccDo7|FNC1{SI#X)}4a?3{E_9kiXt?V$n^e2#?c?g$M5QLdf1Pw|)
z=Xrb}u8q7J^{0Vlh_%^+tCy2SVycC~RtW+$*ekgjo5q&5acGMG2!TFD^o?OM>Fq+O
z70)pMCuj)UTeiBsvq?l>7{bN=RlFC}-+vgo42jtMi^(+lO8M4ixdt^rj@RqWwN73$
z<G)VYhY;Zq3S)%fJ15G9<iY+f)3NB!;^*x&wuBCEeM%WEMCVs>e^(`ZO@G$r71Z&`
z6X@CxnM_%}2gv@?#1j`JMyLh2ETY_z2xm#p!E6&qg5pJsu-z!!xNrrte+)5S34cF%
z)QIRKpRU&CzI7;=SNq+z2PYcm;$-I^4^o%?!Tj(Dfoon^Vabw{ba1R@F$9Ic={`1<
zVE#yBp{;^>to~%f{O*#FGxk1Lekt(YJKes5pg0LF7ue$cDTe}feqv~-dx8gFUr|pe
ziyXnJu&xjd@(w|y{YIPNbE{}5ZBA}Sr??WkKFuY}Vqxsxd1#&*91Ef<ycT<p@96m2
z+YCgm{c|cFn;Sh8E+z)B*;LtwzWhHk(8e8O@`RDJEN{u&y!o^7iFf$Jzyr2ex<KU!
zo~?@;=nw*?1YtvO3Fj}2i3E@YyC!E<MgoX@3ikv{*tu%(G^BVVyRzuP?G&U^RYcwb
z8<I_suyIZZ*0cD!sswiZ)6X6ZyA<G^Hlq@=Y9Ye&98k6(&$WRCTE!{D?{jzAWE-;F
z$oimT%jXb9YuYsY2ljvg$Jb+j_TIV1&sl?727CMyg6?~OQ-^cZ;r{*nsAEvEtz}Wj
zZ;4bRd0p^c7Eao_Op|%|7WRI#AZXg_5nioR7j0CEJM=y6W-GH}Qf`7Mp!|M`+vY16
zEE>!RTA^-tSamEflGv~7vn>RpB?R;+926Ko*5yX^{>?jdMywU7iT7T0DpIZLrGoad
z8Wp}>GIi}->Qd8ea~W4@KY@HArsHd{@=ExnXIB~_aQI;(Q&50&^`;5TBoac%iHb3J
z-Vqi!C+?_X<Q_he7-BD8aZ$RxJnt9w01c;w_B-QsJZG5q5xDiMc>zviuT)Jg^qie%
z`wnZVm{0WSZcs?1UMwj!qLmmw2zWs=UJfK;hNJLl_cLfb#6aqsWFi_~saLS+B(2M(
zF^7u!aZ8yuEZF|L(E<k|j7Q($u6H!eQ9bvMGpdtqEJ|Go=TFgj&v0EJY(}Ho+tPqC
z^d?ZJp>7vrv|gA|b#h}dT*xtG`3+2NB*i~_R26(GLZ)IS>Z!Vy*_oH1U~P6qfsg!}
z_=x+3RxgNsv#`F2Ekcjn3hLY@CS!zDnsNcPFPsxS@JP>P1Zn+8H%da=UerFo$hcFR
z%ShR3WdMl;qLYA`?;#BTC|fim)QQS1yf-VseW*Tef6vUyC@apd0^f+MAOH(;Z{1ef
z*vUNroC*tze@+}kFBj;B(I8+jabSJj6K??XEsj(tTK(>|3eBY&s;408tT}U@=L`j=
zx)<H(xGk$nzKM4L`;MYY$aT860$MeLtUV6Ya9q6U+puVUKhNK=;DBTvzf)!bJ`*Fo
zno>>}3fKn%R_{gYS4Z&{No~`vX9B*o2+XiFW~P6TzcDE7r@T+JlG$bCbDzOFBbFzY
z1PzKANj6&T<7f;iO5iwDc;_Jd@!lP99tHTPX^|<OXNM&RXx9F};-%S0I$~bFU1xnX
z7o}49WAxFo4q!B?QELj-fn1kSzG{kQe>9SFKlumfUI_Aa3K4kucL9?8v@tF`^c1}|
zQhh3J59$dS&4+NvzW$)(OwuyG7lvN23&T`#7wsP!S^Qz}HYzq;#i|K;;9U5C*Db;H
z4o4{~v-JT*O#qGvF6{PlXd^=5kBn@9CZLi$9CmN{z)A?C-wu(ryb{cpU}H!I0Jo-^
zTr%VchJkqHouLz9RAHiMkZS=)W%QTtr?q%&rV$(s1)uC2%rQm`Ug>)LHv1}S1Jq}+
z4f45^$7C+Y0g%ao1VeNiwF4ZxT@3`5e})H}>o9J;g!u*k3;J!^1MIOh2Izqt#AJvE
z`{@zNVAPXi8@j-*h=p+TFE3bgF;A>Uga@y*Tqv(3UL4j!Dq=P{EU+qpJbrPF-YIqm
zZicb!J{e6Ly2|L4Bt#@SSJsj{X1A=zlw|A}&9e+A#I~pt*lKDgW#SCTZ~Zz3Wkt^k
z!+h*Sd{uc@Hm&s#=Lh2SFYh>hVfgyIn<(cw1X<1*uZ_k`($NWs^WXW@Tj&^>U{yGX
zSeaE~)K8oTpobIi+azI@M6S^4I42ESSx0^oz~>`9ff=;c7+$V%TK&!<2byoeF55sJ
zj-es$c#qob+VP5S<cKm=J{pJ?avVrORX*`NqfezD=)}}pjONxylNn>>MF5X9>g?+$
zP_Xko<@#`<#ku>?Q=nTR{U6Sa=(i~a<cY@f=a{7HBDKfM2qVxvh%N>d*o61IF|to?
z;x>l25MhXWc+Xymqvzwx&3Qvy2xpnZXM}KNK4d=Qy5^BoJ9|ot6-~N%8d>XZgz&(Q
zF~*qUyRWP71daTGG-o8pLWhRHDtJyN$37@5@A0uh@OeGRs-}b(IB2|Y5<!w0Am88_
z<=B=EI=+y8)=(3=421nU#!!N!ks~Wn)W_LHgiyu5naE-mu&k6qbUNssV+_f#RYB&K
z8AllNd0W^E(Hsm_mou;X(o6MRT0L?*VnUdZ`D-Q>QuSsd-l;#$kOBE%y}RB&%!p3S
zbRJBJ*wi}n$5OuU>4&B6l!lyJU~m}6ib(X*`w6pLO8bVmD_XwK<`wd-`cH${kYqL`
z|J-bah>}(*)f|{IsD7&{C3b#FgYznptI0rqDX^&)3YO|#XTtwD5o?OV5*=~pe@!wd
zoOR&<{W9HPR)u;)#K%Kl-0=P&w<A*nnT+&LeS?pY1O?!G?nKCd8zr`L9GqgKqT7Z@
zLYLX3$g0f^Q9g&hez!qyJi^oTDN&LkNGd)&g<VF(VGN23AI(@)QxluuHPrc3ReTmq
zN7>$IG9ICZHpE}tS%t$qHAv<Zv5?ib@HFAn@$&|=B?Y0@fSWREN;w#69&5l~?qbj{
z<9?P_TCh^9xmqr)#MDeUt~JVj5~`Z;%$5p#mL^@y0SwA5#7AbcKM($i#gVa<y4(!S
zK-xeOhp)JdDYG2=AHLgyC$=TwM}4_??qlXi3x#<~zeUAcg^LeUp(g`y5T_`kONF`H
z)G||mMCCl#<<yK_^;M}fdmGJlJRldBaOP?&#2KUEr>;?N3dA75p?3jJ`=~aFtS9DF
z`@GESvF5U}axGyoJ5KC>Q?WAU?o2Y~80X@@7b28%1zyDJ%|7DyjHELpY9Pfz5uAwN
zzhVlylw5*l!krCXG`w)g01@X)uHn^wS%i~K4uXWb@riKQA-qAMAZD1P(91?~<DFDm
zSM7CT7I3O~DPHgo1K?|Ou-j4jhDD#+h(O2Anod%f80|)uf%^<bib@foxv99yIC)6K
zvwHw6cgO`cT#3H)R#`*Sd$Ai0LZv4*yDTVImG@W7UpbQKcvS$bCi^O(g48u<-ets9
znsPOPzYw{QxzfJun((6!Y<YbZ4s{cE-HIlxIRZ<1E8|K%009Dm@}Xql7TlP2?3ngC
zv!>761}TD#bMFabS>npfKBW3f2LWVw{ex^O+Luh0lFVWxoo{vhj+*SiID2+qFeoH*
z$0`QUS@+A^Pq{E`&&VpssQ$YxRvQYEJQeAKGneJlJsqe0SuC^~OKsr`5ONE!_#zK}
zTaPuOP0cpEfvH6BjCdw%1QX&zAwR*Pr0_c#M_L6ic7gO|mVpdQ1xn2UwL*#~IvVlJ
zU^P?_PND}?hp}~N?I?1Qn5d{Is|x%oAKf^HI;q28aUZY55rkYA2v*!e1rma9TS>BP
z>T8sjJ^Co_U&5|HA&0Has%QN&YGVCB?9aP|fNo)x!=wH^JhmcqqpyYwmng;nkM$o3
zn*AGE+2BeFNj|~tGk8iprA$C&NYGVyS_EO4h?i+u-*Kfi$NZ*UONwVSVJJJ$CMFp9
zvX;F_Tap_zFWc~rN;MN9e4_Y-jE?jTrWn4k1QXr@{#;Yu=*=1M;dSl-f?<=a%#yFu
z^%8lhhhV7eWuTfi%u6v*e8{_Z%7*#Cw$j_;DFR5mkN#Pem92d~>_Ca-&-(jhMTB^5
zw^_(s6hdB%2*?=6&z=u|ICwBi7?1_Z2HFlXEWEhbndn^dX+a7SAxILjbR`gVu9B20
zM@4&_sxbE_prq}`_2ovv;oD1!j4|B@|4^QtG_X4?@^?L?Bg{^q8WyeY^%5N81>(KC
zyH;p{+9wWHE@6`AK@#WT5jtinWxGs_5i)zP0scRl15sOb(Of<Y0Yn?uZa;8?cZ<xN
zjABZr#hNHoI6^QfeL;vu!4^&gOvH0ufgHbbturqaB1cG8JWR>&10Gbu16%#vh1E}*
z?(>cgzn>4cda<ELw&xkU4q}NhL%~};g7{wmk^^hAHWX`+uYfKzXg){9%ObprgJwf<
zF8lNi95SBd3dfy=Jz};Sg9XZ`Ib@F@AB{6PBtDN85_~B}bmW0=*;JVdXF^_yWEb~<
z=W|MUqhE?rnXRefqSu9?kL+iidd5QAww)g|Y-siyqH&;N&~8(B>#-Yr^&&H$*^XQy
zgSEFyN$zl7&Xi<FJyUy}duW){a;_4|$jNN*FxP7|lypFMjoQ$=8p&B98Q8Q<IyDfk
zo;y&Od-!bZgB4=pmRjP4SVfgLU1o7juoFg%9`$)Ph|X{Vl)jO`2znUg1{#TIcF|)^
zBi&Qde(uwVA`}ccnUgN;v+FROlJ@1!FO?<Yy|_9CR~55X-n>@kS1T%m>fn&wL=QDN
z7vNp1Nkb`GGGT*D*|{ZSWJc225EQmN)ly~lV?`>amvCu4B@rRO;#{pGsWv!3CD5&c
zE(tskRyy@#;n!O|>3VEM_CiWH62ZR82j`D!G}yEVT)RpQW6)hJ8b9>>`JLiQQ3<ye
z9H%gyrQ$}KbIp^YX4>)<5dBtk+TZaCVE8*T1|{j)xQr8PeT~0GF6FS;62vee&<+i_
zKHGlvex&yk=j#j&k^7>6wi?u&q5wDVxbVgwh$01aUVcT;zxss*2>&LHBs|OApr}JY
zTn8{Mga4w|UsNG`2@M@iG{|41jotMms6|jP++7l_tG*WPq^Y4-5QJo!Fgd}!n+C-S
zF8@Oj62lp+)^=foxT=&5B|SYa7D)_O8)6{GUZW7KF#ujHPDnj9@#<jcNTZ3qX*Iq6
zS_rgy&8a$Qd+}oL<kFdGFm;;I$`SJ!^S)|xkzp|RPd|CO88L~qb7whI=DXa=pI}wY
z9W2UH^KfN2CGu$bbiMu;9%5<j(xpjeA)xs#A(<R$s0hgYtbG7gO{ik0lfrwr{SRME
zR8Kl&_MdIP<o84X_5C>nc06C<GUYptpEVI`|3*l3qKNaFsR+J-w#HndMzMs}B~Pv1
z;;B3W%qz1aEoZ2Gk5?d&EII*(Ib&Q|#)bzoEK`3Sa!P6Df!LVY-+f38hL-@2B2<pr
z8s|oPvVc;vwkynlS?eo^g1(pKwDp1C9`Gu?P>pi{`u_LM2x{N6XLDo^#*6jk?Km5%
zo-WTf)}`+~1TZx>d&1&54i65M_gpj0?%5_-KU8CVICeLV;zu{2s&bhsx#A5tVB+}p
zrRQ(kiMzZNKUhZ$B%-5WuxwAZoP0ff>ALw5rXyhS_*$YYejxVpkQVvY+Fks;!osQd
zS+f~?2YdP%eEOOF)n~T1ly+lSUdi&jgZ`HL&tbAFqeIYu5m{Xd^fCi0mhsi9<Xngp
z00g>;Fyc!JqVPyf;wA)HcOPfq*6*0Bk!M0VJv+MG74-*P-!Sf8CEgImTvYOjsz5l4
zgBd2r0eh-VqCP4u+Q%$r`%s1zvlopEmqAM5JGYlgat%<hAN`Mpd%cS2-+xQydv4vo
zL81eh7^|fkfZw?X>+y0h2+0TPVtZ+*u3dCx?w7v5UdxF>?qo9e=&s5MIgnI8gZ)Dd
zkG>KlknahealwBxMid?JJ{u067m|sP$s>gqQ<H0F<rdlgwY6Lu^kKKE;<JW0><eVH
z(fcC19;eSKz|K&6$BfS$w6^{^N2MFTrV64Q{QQNKiBvu}eLV>7$Aj<tjK0J|DKF;f
zG>0O4^tCFy&tbomVeXnJBjYHj{H{+$mydO}f9X#2c(bh&H&Lp}>1BvyxV>s>2{=I9
zGY5lk)dJC?(_XBRlbwFwc>eovVA&d{w?}z1mB%O!Bu$ZLA@V*MFgj?RqJB&O$sEJ8
zx%3O&FWSRT4^y@x1TcQEM@Z#u0>(Nyzgf+JeEM+|JHTj>QqPit41%N_|JUOfRYrH~
zJ~XGM+UqE(lbO}X2x<n^NE@VO=+Qlmx@zB{V#fT4#dq{95z-0pw2e+0H9Xn|2ZcFa
zT@sIWo^FT|Gl-EHD$VnHXLoeII!jrGkN?{<Sf{6a=J#Xt+ObWarRqE+{W01`<CBp)
z`?})AQDW%`cUjFuyNq=H_$bF#Fv}T)I1z8E_Ck=FY98UMk`gEe*dtd@bKwr1tHX>9
zJrggLP_6|gzX?G>X3^cxH6a<qkg*RUzqmE_{^=Y#=|5KCP^@&2TDyNj7Ar6us*Jc@
zFQ}{ycY>A=ML#dhBM23_oZh+78u(fJy0nMNR>2-Surw<sg;fg5U*%^q40`c=xi_!r
zbi@Qh|JQ)dwzfb-OaIEHo7Ga3Hj0CgYHyS=rcH1a*VTrAt|!u7-5CP=+W@nhk?VB*
z^t#0UI`*LiTXYY^0F30VFYkc&_eoIB^NJnz)aLvyug8<+@tnha$Q4HiVaF#N?Hnxx
zaiHF|%%Ik;Q4DQAhp0SDl9~pvDsoxrny?h0!o)`szeo-Q(>>r5k6v{?QX3s)Nkqrt
zT`j{JY6E#C4)8HGbHvhnydGf@N=1Z`g+uG-6+ax=)EfF(dixU${Amj_;7b5I<W}!c
z8=<8J0WKmWxj(hMp*Gv)>fafgbqJz>Py;f*Ki~iFa>~rQ4QS<GYC)p}1cd(|QVZAr
z>bc(j=egb-`(MxXaZCwKwD()R{;*OW?WE1Jb^`OU>8mppIwY*r5Mg)>u&4`-!1o7R
z9}t)+mz18K9(6N1AT#Ucm%j(XPg6^ja)5R=CD#ha>1u{_nmobTr>oi1?^yLqR)e$0
z3f&E2y4H>+_C+73^z1HP*HTZ$VSm1Whs){f?IY`=rA-cZJLl5|maiAN^BKdvz19iT
zO_pbkx5mhaBiY%-soaBrk;D64OWu}uUcFqaZw!NbPvkVD00FvdSFHAu*gr6b6D-p|
z@)ny5oc@m*_#c~C0_pa4jsK3~tav^<qb9Ag?_##(U2;andt&62Ci1QPOJP6-JDqhq
zc0K3R&1NmFdJd}et6&;uz%GfdaDh^_*J@nnRq@~8l3)d{)?M+qA{Y;Padb#kG=>`V
zJI3VtCy9g)o3*@hdoT<7J0uB;7FZAMvG9ICe|(%Df`9zpqrd&Wv-1t`^F5*INVd>c
z-Bh@{ywik;S*Z5yZeahZeNSIv#{b;ah;4k=-kHU$y!{!+u!8^HZ|7}=FqJhE_O?4K
zoPhKrg{hZYTkH&Vs;FAS3Y9mE8u8agpV#*q+giQ7%g{KYsmFUT)2dTk-)YQeyIw``
zlaN{_)#Pu2h*o&JV<7oAvztA%t?;ZEdrAGuAnOD(E~CM!<8P`yIf+S;l5rHUwgQE~
zO<SWqD!N6^gF@e|8AIh%hrv-bQN-Ufz*b%azuBOTQqxq7>He+036D7I;-i`4n7=~-
zkpC#>F(>6hBEN!WACrGo8r$W~KQO?zQ`1dvp5KpOzAP@Cth3{O+=J!+C7NCwm`_e)
zSsXGo69tkeApDc%#h5ii!%Mu+_hza`&tqbaR+3fv11OfcoZt;!d<X!$U1*kH?Pu{j
z?S21vI2$deiD3owby53!aJ9d=x_Jb+`4lgGEz~InUT9SdzFsVyOU@E!jD%$S-}*cE
z)M_o-<PL7=i`g7SLT1TI$agkJEqYlSPU{AE2NdQL^m2!f*IfWtSKLDDY^<4+_zARc
z5?s1~(_C^+Jj2R^!K-g_3A(&KrU9(Y+&dq5N)4l-bFjc#n+jU4M6xmS)_n`5RjM4p
zP6mEt`u=fF_9F!|9=$19`)IMjdbRu2T?~~m$>pOfX{k|}S2Y6|!;rjD%d<dX;We{D
z$7;LKVdaCm&@BrL`Uv{)X#9B1FObD$sR{2pK*&H~HnwnWi>k%#iV2FUn6V22G0I{k
zF`$edhp4t9`N3pm^qsF-xu9Brv*H8i@%&IV{v{{_!CmN+Jhh6MYrhd3nWw)=!bXBl
zYO=e}ZL+1bg;VfBUm|<oN-$gN{X5m1jP~w=)F#OAVEnbck%6X@u(oc3_JA1CEw3n5
zfWOTexqOe^D)ccKjfPCwkbd1RXfxsp0^O4YAq7Hu>;X6(I5$z}+ClgybC;{4T_+45
zZ0i=r1iD&C`oWl~`A3|g0{@V~B0){g6cU|7YMRsSfg+A6U|SjqIj#I1@>M*pQ#3v?
zoJ2lIK;9xD6cJL5hh!M`jKYI<Cn0t6%Z-c}r&ufsr>MB#nb+F}vK+t&WAYArV5xn`
zq?2}eQu6TvKrclJX$pVi!_6eQz>|-2lkhjv%>;o)seakn!hG`(xgkzC!-?v2jr0>8
zsdrk(nQj-R$+}1Q(;)6tG*w2zYPYD7J`vp9-a3AL#_)8rkx}(p2kDFGyfex5^P|ew
z_F2!V4+Z!W*eQF`KG{~D9%HYvLRi9$G=KDvP4gw4rU*)1Dg;}R5b5{FL{x8+(;b$q
z)}^7eSj!Vjpo1;0@u4FWgoCGxX0=Z<clO_Q>C_j4_-uOtpa^m?NOi#knrOHPxWN{2
zL3%+|xIk%0*4B-yYAdT`SGBrvi`6#skYLJy&HHZe%XWL-53y=$YbYQBq>R?%aQgQm
z0nh&`N}|E74)R_=@tQi^iEij=j1A5v-5xTK66^kfXEhMBkq<7zqy5ovn5dKj>i$^*
z-pjo<`hqVcef2AIgkA*Q9GxCr0iI4iet!Os@(TQez4`upI1q@}9nG*x#YRq>)68)h
zoz_7JJP{&<LD^X8>M61ND4duLoxp*F@$Gf?<G7=nr!8299@_g>Rj`;=y2bpJzzr|&
zdwcWgoEU%EGG;Ohx@OW}KoVBO{t4dD>Kk6-ty{=$!UBVYAb`-A$fQbsvX7XLh*9?>
z8Kze$gOb!ziM9oSfjsQy_<^{Y3=fyGk6Ku#+`%fw0M^j65p{%+|J(_PSlt#QG4=fX
z0)9UiPiJqaL!hGic=^2nZmzHhpRm|0{10FZ(u5#j&W`v7rAT*IAlpsH(!hITmS3sW
zgN7&3GsI=0{W+W7If!S|kG_|^$kpSN`xdQz*(u`^ngUvT^<INWl(|eSg{L@wC<tZ{
z;voXBqHwTuogT*5*x6wcuzQ@Fp-h!*E;&_O^&$+b7;sMHY@;Z*^}9h|=(HS-fV}}T
zZac&zev{fmTEB%wpO<mvVgjKvqcyXBhdZR0X9+{j=QrncmBJ`s7f9!2DPD|Ne>9TG
zXahYO%g)GLWFhgZ!8pbNo$CyFrEov_8+6YhMkYa2ug<7O@!ff2<UwYpo;azK@l2-F
zimvTjsr)@XpD9RFFVq2rC@u#7kUPr@;@`$k9Q-g-EHNG_ak?^u;n&wUC?J|Bd<~bN
zkvET}X8_gegaq|*Rpx5b5usF2bX{8w^OCeX79<r#d7+YBL+#=kh7N8=Nyr?)TA~-_
zMWUJ$L4>PQJfEGJs)TJ~YRk~kNjg!xBeKjxyURXpM9#`J&NLh~17~&z5+s|4orb^V
z4|L>^1E)o;#^&e>g0kAej2QXL!j3b?NY*gNW3CzYSA(1}Kr)$$3pBfPG8%Xl0MzG+
zLlgHXc28|egeg%Fw2=q5-hbl~?|uMLGULOi0Ig(&F25l$(21JIQrP7SXq=cRkJM}1
zCIsbNG<E6r=s$H&o4x)n!;@mIJCi#~tvtYdVss3C?IDxG6hF0#sJ<?SGPQK|Flnjb
z*?xHuHsV4B>*y-sv*~AQL3X?n%dkFUEQSr%<Jdd%7~@lJQJ0~b-5D+wTXM=jeGeEW
z%E9CvjoHk3)e!Lec8#Cu^bdHxU*LJTvRqLlN+T#D9v09&n|Uq?#wzAT+?zummnh7b
z{&tLln2AOG<&CM;cumc-a9%IrcBKI^7`S2|ivNj%C<oh@3|Id5d+35b+tvoBt4JNO
zyD}4^<x(b<hOK;=-^}wU&%K4(_^|wh<@h6J-Mfr&Xw`A&;yS1Eaa?rQ@6DCJed#pc
z|HIeM%LM@yC<=Q0*cPa!hm{W{XtxPguaS#Bz{5*Vro1)R7+;Mu#&^u@DX<;$&Y-`l
zFzppecc6ke0#T}IZ1^Po&k^@~E}_FbOO*Pbzffz?`QLcw+I3VV%MB~?475&^a#VfT
z$uMp(#(KY_a)&oLVt-QgKp80brUWc+I@RLQwLWK?WLD5+E5f7H;g1vSw&suoN@_s5
zD1XTvrl&{<2%;0vfh(3t6rRzod-7$O5g!Of?^WsM;0I-Z8pUU0bzf3M`}Ye{ODSus
z<QCxj%b!XUi*uXZQV06kBBRs2rs%R4adx0!CUY8VkU<N3WX09hteyiK=?8AYoai|5
z32R)+sgl}{QBtfVzArXXPa{h)PHIPU*pS8baI9HDfEy_;5<8@Yj5`W({th0)C{IJb
znqY5dI<hCQ-jl~XbZw-RKJb>!bTLI07fVGDCcs^Otg(eWQ%P7)IWE=_hgp7T?Y=h>
zki0Glx()73^f|B%x$9}W?}Xjq?5UWILNJNQrU<<=LQm<!ZpuD;PyrMizg~`hePeSB
z*B}x`v2Y-rW((n%2p8>=k&W1+3$Z8+q@V04!5|;uVbo*{Bw5Hm+XC+s;|{Uh#~4kw
zmqbO0hBj~V4E=mdl0xTL%on9q&|VK9(yT~H8le_)agBKmXiG1*2mP~cGZc>gSwc3Y
zEc!s%S{Xg8PE5Mh;hy(OH%5-4HgQ4){Dzet1f$d<6^znSi35-&oe^hgc8~U8Lg*E@
zRMK;mkOLRvCv09s!M*{B@Cplov{OiWVSjzE9*FlEEpqRv&7`v&X78SLucxExr~M(E
zWh9fEVMW(^9Okc#;uQXx>IP&=hAiq;OL1Pu!YZp~$QQx-;i+KCr`8EoFdgDa^i7Z|
zP@#9INE{<bwP%BMlRgY!a)T6zx-pYz7)Vr$RzGN6p8;<<7AfX2xVo_>xQglkoCaRS
zS9R55HkTpJTh7GmudQcHuyvactRwa{vJ-U`v72mGyqQ@F=yPyO@dGQ>H$460B(MN6
z-SsDm72RQg{+q^0WnbBgSWQl?(0{L;sU>C*f=wPr>dp4_PkqC4#9p2Vy<=!$x&{sy
z?mH6^%EX9n6>jCN<YE8?ly{;{ZXyu06V7+q)EiJaufd%cf0Uwiq~b2Y-Us%Zqj5dj
zy4(KKbJ{J}^q&v?*Do^@_qbqcC6_Y1z}FgJY1#q1pIx25{W~?=tl}W?MzNyjCzhr)
zJ)8~_`o>>=VfZdGxC2$nOFk_#YJRD|7-X3p*=0Z&Z0ql+GCNM@G1cFg&jdEh!<v=g
zo$xI+eWWh{)u=tFxlC5xgj^9ZE^N47{K386U;$r{-xG(k5^XX6E{1We$3PK+onYK+
zd;MrjPli6JH;TfIXl9u}#4>-$gqvtbUjAzD=~BR?Lvc5X#XXAFwh2k4dcvv;RH~9q
zJ}}H+3przfe4|3?lN0l6+O*O@m7}DFmE62mG4)`-QcXqL{pHE7yiejz^MH}(FD9_&
zO8X%B$08{MrUU)BveZEdFfb#AZ~aXFz+HVK_Fb{uODO^zX!Ju|i{#EY!Lijjh9K8#
z{F?QF;T2aJqBIav7m*Z^O)u_m|AFZhRTq=g3+aQYL(*ec&z4!Eb2;WyZzgnjpfyT}
zIEv10qbVH5f2x_H4tX4~^`evT>=@s%$w0E#^vGwZUCaQM(1h~B83ha4yYAB-Fyh~8
zy4Kh;5xf~p=zlF|wxdElJb0A144sp7Cu#O!9UhC6TJDz=_(>KOi=*RPo<mqSeI2sh
zmxNB@pu>|z$8>G!96SVfAPj!#wix-ELB{d<9xv4^94-{qgl9w!#{0^hp>*ot1o|#c
zE!L8@S0#hqiT27L(B-;^2K6%L%nucIcwi;@3Ef=(E*(BM-n{U$<0{4#vG%L%$Yv=n
z5D7xB`5>Faj=?TE`ullaQ?JMf9is|`(CqAPsU#o2=!J)fU2Y802$03aR6%Fd=QEh{
zmHspJSK*Z7R<Z26d>noVz3Ha)3xErg<LqgSh(xGjhBSi4SEIW<Ejmh+lE~of8KO6`
zwdgF{ZA=a_0_$Q9C+IdLiB~PcS4my=C{C!F!>xDSnBlr*hZ+yjb<(z0L!>A>B_d5n
zc<r2a+n3}jNaN9-15fxAz6fko6xpehGt?K^5I@$o-~;Y$PUA(nv(@|=!fU$q7`nlt
zU#dk%&4F=_ed?d7d;8j{RlSjb?X2!?ZMgKWJgA-9)={dx@TAF{-L=kgg^uZ}?<7ND
z-n3Q3Eu75WQFtK9@Vkc>1?a<)kD^ReDrYGLTAPo@rSR&U)Ec7zaH*b`x1<7N^zjeE
z1Pz~nrpRvGa6#CKeu5T-$K9iYmM+09Y7Nb<07y6r`S<$=zoU0FpTo&4#11Nc$Y%r<
z(-iC@7DFA~b4)6bp2W-jgX}?Q<RQo{%d0MgRK{edd1V%^2{)GnKf`l`Ur`tuZNq(E
z_Ly4$2JWnXF%<}}-e!<eei1|Ssft$xYOm%O`#s;tOyf>J+1idXh4B)cz&aEL#3O)|
zrEaCGi4_QmsD{MbzIb?|<MD4=wNwp&x{Z&Qyi5r`42IG_2FiU%){RoTprrZiq-r|?
z?(eIhR};_NW?2`EvB}kngjfMr9O&mkElfSzS-Gq{v+1Z%5Ar)ikU*vh&H=6ny}>E4
z8$eDB9blt_OcunrMzxOm1ww7+3(W|P&v2M3z+RV#&XAzUHm-o%FBJ*eCXFFu7~fV^
zc8_L0H4O+vk7OE~v4boYU}(x`1PA%ta72_Cl*o6e@rTN;YqwCdRL&{YD6Xr2D%*`+
zBWB91x~-<RmE#F@>!BKXZ5!bDjz{jS(7Z1ttA_yio_F2c30sq&Z&|!rlx|@zapK_6
zB3v46#eS0#fH=l8x@ddGLy%h@pSWz!%B(R62cc5n3vcZWA#nsvtEn2<b7@AV3+xB7
zqy|XrB73}H#a(-Y*anjR8R+XY?Hm#2E0mq(nVNQ4?{tdBhC3Y$Ce)d~Fb|R>`g18J
zhA02r2|&vDL_teK)SIEkEHTE~nd9_&{yQvbaN>x}bj8mk=+kw>&II0}ZEv94ORf`Y
zMycYxQRHp)+}F4}7s@54_zw@HNnT}s?M}=3*3K>bJM^DYlXG*`lSurHSX1)Bn(c*6
zT8>37MAcqGC~#e3F8oR;;O_8hE_#R|fUCFX(-Z0+`%F|(^G*NIEIw=e3IOv}CavYs
z?dRg-;RVWngi7+(2&8-k`EQYWJ#s)&QwL%53U(#!-2h+wyn#0{$T@Q=yEpXl$>H~E
z7no3eXZ!O^0p%MQIC}U{xm8%$;&E)^bdy>dF5BJ{J>Po$A}PhvAOGrEk-7rXGNSX5
zN;9WQXlbYS8h`l{j`dfdN{NF&iH*2#^i<vF?x3KgJSm(Eqg@`UsQ`9htY_#7;*r^l
z|L6YwKB3lP)<EEAe{_{W;e_IT9_DfI@+jhTo>nUUguxtm51751^DZpDVOv-!S!e2+
zghy|wWAU6DjOAs3HOHz#IUogYO)-K?$?xlCuY^-Y(|wOk;qJHi^KxS$IoS!Kp#N{}
zxC`fP!g-&g@Fg<vI=H_#nQC6z2Bvr251HJ~a<du~iw!?u<UB^?I%EtY-w*!IFo262
z=-KPgS-ZBDswJJCipydv=)Pd}RDQH$y6jde%scPmg_-?2Yxqr^*^8Co9()OG;f!kZ
z19G67cWBzTT4Y8ED1#556OFHRTY<&Z0PAcr5y4+hhD2Y$o&j}X#j{e+Pe6mHw|z^}
z%B>f`xkbR{gSgX@@3zyB045k63;Q~5byeTp#aF+E3iYar^>ef$@gBQox!qqq%Q25h
zAU$Qh3fpz<{kS{^`PMz72VheW(GiOf9WDe(O8dk!i_urtj=W@#t}4TJHo(x?Za}hx
zpu~MdrFeO2i2~Ry&hPZ05)1jcq4j8-W&slNqxwa9Hg}wBJcdgZjUvSD2qRy@3aeQS
zJ~9^QyK`CJAi@d|^L6t+%-JgRuOW*yIe<SzUB~#Jy}-BIcKdkqg)k$ptoM9rI|>5?
zYAOK~1YTO5ru~5qEpYU|DQ~8|xLv<g*NrChI`2;1E0favi}-7v>Bt9@>0BbjI>n|0
z>)N02tbdo{;zoaR5FX{jLHdQ{UEHJ?@t^nkKFDQ41f|%|6^Q(~Q7+#smxt)vc!v4@
zLKM@Ba6!xr=%2g_+=jTSZN@HT)ib}wFo5+`9~hYp)<<AvqIoju0=A=n?fv?TvU7Ec
zBSiDjjPm4ZXfq|HUiU(UeUB+qWtb&_J;n8{lmmZviu@pAj<yD41y^c={}2ME`b*nH
zIo>Dh-1{V8y$USsMa4Woq4$iVm*FhoN0b``BEhbn6X!DDrK>=iz3sH-C*UmSrIwOa
zVq}?@uf3;tkTkU#U8a5Q87IAvt*>F2e;hT6sP}Gxb!rlUaO{h%hZV+Xbd&=aZ-%lN
zLPQo0DBV9PC?LHw9J)64@pfqG9>v;zDv1qC6R-N7Lv=4O8QP|{DRGPbM#r)RJfqwd
zM&)6|;|+)S6~iM!!(%$Z>+ZU(6qnh)%w0fnqi90SKyGq3Z1~bWle>yX1okTyBx|y$
zJ^#Ei@91w(y|xi_WLpBWJUhn{I?lL5eUm*!5{sJcv9^3dmVLHY*eaFKjKHr$4)Gz9
zeVp(nXMCyB=42P+WECG?vx8wBG1B`QC6UGiO1&QYr|*l5OBp$irX$5Kv1-;Xq0!WI
z4b4CE_EHbfno`NgA;OJD5R2<+S?i{iawm7fz0Lj7tD^j<<hFWl3*kHq8njkWWUEXL
z!IfhURB5OaMm19V`4MjfiPc|uC!yoVCHy~}?P^2@aT^dU);?D|3IykK|AdRZj!M_d
z9MzC=I78dD`8EC@jtOd!&n*R2*W>f^l_4p`hZ?>FqSo#nVI{sqKLAwnmqyuu0Vw!E
z7G43<iv%lJMiB5y-Xz*g1ENC>Zv==RLV|CjfGR5L0eOn^PBk|K-ZKeWlD&H44nCPE
zsmp=3Dk2&~T{RDl(ZKlLJOvuRu8y{@EM0d_QYpMY{l6dSsDl(I8+1Dt2M4FkSze+D
z6$2x9PZjSl879@l^T?Py<$pl`?;Tt28i_2_KOAc<B@ht7e@IKr?Efo}wHn*TVYB6h
zCjh+ubDv!BiZ|O;ZywwcxAr-EL@3vuCLA~;-7+VJ6uSs@blCqd-{~EZbjzat9st-j
zDk9?at0+MKJheVQL;3fgzwUQdLz%S5JBQ{erw!C<11Qbf6UiAJHL65%fxrCQ^S0zh
zRYq!d&eLdP$2qT?aiEhXWnNB~J9m`LD<^x;D)pFeq|kh8n57b5;Bx2vnvq8wmFTyM
z1M)f)oVIeHNDT5jPlG;vkJ_B7Wf0yXJv+w)9wgfDmw4~*9d15Tagx+-h(5H>&h{%m
zr&NAbgt2~iTfEHp&0MrA8IUnt_>xZsT9NTumFF(U-1XcIjT-}loI>|^&DBaQ?ti`A
z81c57T^UieKBu1XVu(RAPcnC(l$U|kvgS*v%C~E&F&}pvmAfKTu~%r`Q7BRC;qXto
zK8yhabEr{?-OORz_Y3L*fr3DgiXqk;1uF5^GN+YMZ{Deu=c`gL^7j&N@6B@$f4!J~
z@*#mET1B>`(Vlip1>u%co0_!jS1>c@9HKL#CY4qwJCfgl0R6)9U33Ih_#&);l7gCg
zwD<ypoZXM9FrDcZV|Lf5C_1oo0a-(V8F#U|Yb5CRPBFU@&w?(Qkn7eyM+QGfH+fqt
z!xB+etB;=gfCPg%Kr_2Q4_s885zA9!%1)=y<h`>-AZ~5IQE?=U8NQ6g(aVUsdNdI9
zZ>LX^R}CV}ipD|?ynDf0b?Fn+j7@EFe7><~%zNlWcnvv^M7Y@v_-5_!%hY!!K^Xu}
zZo5y~-+Q`aCWrQNrap>`ozvVMXk^CyzW;*vS6;h#+Fr*NfeLI00<LBP?$-8&93i+1
z)r|%*0CBO#-$cQu!=D${$dV*|{B$%zUuQWpn4)2<Hh0KRI89<YfG3HX3U0QFOH2|0
zYRJkh#x_Szfd9r~IVQ$40X)ry-Nym~fq8*g)cNX$p3(7q6IAE&iC*qtjpcpKQ6+f*
zV81dal=-w=0>}DJOJ?$1_X*niEt^1Mvdd-FaC!i{;UUK;;n)Cut3b|>7B*m(EP00y
zUu_Y}z`NjwHBa%oF`1@)?hLU>Om3w-rbsQSA9&_!yGmqTY_66Uyt}7$59a>fX|PXn
z6gd#1tHyfQ>@?XWU8&wsThcz=<`B4{F75P!RsLhJQ&z-E^bRm<mxUkYrx|+v(bEoF
zz|HTN01ZTt{!+^O!pjd8Nq2V2H{`zZwe^+d&hv=z(;ORr9<MgA%dk)o)yY%Q;E<v>
zYSI9;3>v%N`<=&B(V{`B#!k!(Gm*v;49e23_^F7%ZtzqVL@-*=8C$yF^<_+XJ`$Wq
zHm+i~b$b>NJVnz+zQ1X}tFB{ySBRO<0>Xgs=yi|T?jXIYQVp>Hoc()-in)n7Ot;hT
z%KXLjM3uv5cHj#G@yb8>iN(A!W-iVxM%Rsu#QT>8icR1Sx)M+Be{=W-PBq7zasVS}
zkTcQCDH&$@Kl1yc#UGF?>TpF)yh;-@Qm}>Sd(mNPaf9znL*>oEPtdu^P(<7k`o($<
zPqes)uYyzQn1M8^KeAJS5vn2mXdMS!Rlo`3$ODE!_@#JeIO0z}7kmrq!hbsIN{9;1
ze#!`u5B1UR)89hMs(8CkiZ*P-&0+1cxu=rE8BZ16&kZd$#04vu%l<Y*WEv9GxyV4=
z*=KasHE4%TOf-frfb*8EVZPny^s!q|Q97%DM}USrX#InW!)cWR*5pzH*VUOYoh>?{
zBXF%zh$F(d9A#rLYeq&>)MJOZ@q~Xf8!9)Hx7!wW3FiX?iyuRwJ!%&9{ZZTWG^S;M
z_mf@G0KzNsGNgB3uJ@5<regHw*O&qHm|LGzhPr>rxIxBXI*3^&W|qgYF`+G_x(V^Z
zHRxOC-+`eL`M)f{9SK{~KBd!^OVzhuygW|FIq<<lcem0@JQiI<1YgRMCdh4ad11=g
zae)5nq^v&=TmgdR3X%+MA8G+py?v8sv1Z;cz|dAa6Y?dKS;xQBf`+veFziei;%b~$
zpY@>cX%GNmMpjZ$ZdnE*Q_<jM6T{&)DT-;=UMi7GSIq>XL?cDT>Q|I#y&Y{O8DybT
zb`C|tvmvA_H^q8D7e!Pns>X1}lVK%w{YQ-zXF-%orfn+6{j%fTYpi=Z`D4CIlnUH2
zql{cbqESk}eQQ`Six(uJH0C%QWW#FrZVI>5Ts0+zpiH8bhj4xdBy;zR?I;|72)<56
zG_#gDN-U|&_Xgph6;_EFN)H1yd?y?Qm7lO#X%e4cegdRgCznZl9%;H{A8gySvXkdu
zaj!0ZeI(B;eht3g6@g_)(7e66DSQyZmnI1KC3nMxI=iJp9RsyL2qtQTVnS}$JB}f?
ztCt7Qpc`lFFaH~JH|&8&b&w2G&wQVXvbYf61e#lt5#q*Kb}jhO=`C$=amBSq;Js3}
zOi{&H9BU?!xZ2)|98g>CY+5zAikKhi-MFZl&`=-ZO3ih-XdtfO<aLx7>&=}U0lB3S
zp;Tg^$TkGr9yjqay2le)Lc+v~@uH~^ilF9E0ijlg8)zw^W&X4-ZnAa#P&%H{`qJbE
zYRa@BmlD5Mjw9zT_dOdHmS$brow^^5EupZG5-GHthzllg71cEIM%#1l1+OY#2Zr$6
zSgsk>Fc<5IWkEjd4$@h~BqLVV8j>3){H7ZDbknk@qhSE(l+Fx9OeP;eP;yV94?&r5
zfubT^usOiQ3v@0vnhFkgedsb3mY$;v`vDi*@`mKV)?OvSE6g9zBc{c_5yoberIHqt
z^mTLS_)!a!KXEO2Q9pMHlGOaj=OS2hQ;dYO;$@ac4Q)u~iJlq&W17p2<iJ0!Jn+sM
zX=1dtd`j@7&9C&VM7pw^QqosT=<-LY0et9iQt;wWsu7FU{u3~4+uk2aD9hU_Xr^YU
zC+V`5W_c@!F%WLxS<;Gib=I1J3t0+Zv6$TkX(3;G9pJ`?P<JmSy1dNW2n(S;Q{et6
z-#3umk@dM0KNNO@Ak@<dTBs9$Poz_>&D3ANy7yTO;l3)d1Os|HbG8IxYu+7wUyWQ5
z*oLZ0zcIJ^S;K9x7v0>%4E0odfDX_o6X&;3Jc@3kC<>XWKYWivK_}5dt;#g(kzPTy
zQH~cdnBm0;IVu+YB|+^yv5*zDHb)|t#Ztn2nfWpo6V(hGj`F-C0ND`*eWaC4w=m)3
z00k(nsx*G0iVS{hiIf<Ui2i1<>rjkk82Z<+ClT4V4LVl68&P`eraEX5pli5!<n9%q
zlDQnXh<wS<+lc(C+=~hFY=F+OvR~Apz14J#Seq3mExI7;BTLO20>%8_XD<2~pK)3%
z25*?y11OM(n_WVc0r)Ul^cXw-&4lZW%D`%hl&`>IBd{`qKF)hgtjxx8?k-q}#Rzr`
z$fgXKg#KW?rX-@87&}u8yKtPczKSqwC!7Loe!A41C>mpA+uxP7m-9_>=o^3a@$o<+
z%IVhiGCLML7=uWI&&wA2!A@`$sZACLRyN>0q@l~&EL{0E_z7Bu+g=@POtIu`Bm?%F
z3_3QSUTrVWz+Sqe+k7<BmHiofYK>p?*Vc>~cbck=6y#-f_pEQRbc#ID#t+CQHU>Oz
z5&?k$tXi<b$+trXy{{;a%Z(g=P6b{J$rfM)EQj^1?{ug5o-)0qkh(quHZ$!Bdg7v-
zG!gN3u?-Rc_j{b`_`x2S&lpJfDWmHTgahjhJRsJci4fMR@`BzJrIH_J&MR;TJ=%T2
zzlVYP+|LqX$B3LUH;D>jm>7fW@)YNS?B0Ylzle9FU~VrT(M=L(UznD81gwI7<zIn`
zt+^}PCOOJqcFXU;j&_*!;r)aa&p>^NX<%s1*sWfGeI!%UcTv-KRGbmUlDf|?i{h}V
z4~c0Y+0Bi0frW+%2#NpXe!IRPpsodI0rsbvy0}J?ao!1BA0e-7>^2XaC=T*YiAsEC
z9w%&u>Rf)#cfNKTKc{=PclmQr8!SAE6R!O}z<=Q!xA7Z3jqWXO!^I;8l+=**6ou^=
zl{$tBlD+9DmeuCqW%kzIf?^`H-h5%HN3XgvZT?F;8$d;{iTY0gQPhqD7PS?6BsZn+
za{N&|nw^x{Qi%=(CIeI`3#=tvt==_7E=a*;yZoApYQM@coc`!Ny}0!${Na1>Jyf!F
z!ZKjx5eo!CD5wudSPjMMxK)`m63!VeJ~^4&=Den!(811q{N<^I+{opcaZl$HBltrD
zqUJUafQpoCeQbfmhEf@ow0lfX%(;tn6ZMUaDFNmSKZ%bNct}}HX-v_eIHkbo->Bv9
z%@42NEokQw3Ad~eF6QFNsBauysl(~i&@#7ojWk(iL>w`?p7<FV`SzCFla=fsXP<Xd
zYTrd}muK1D22t+4+7J*S4gd^XO~bV0C<Q27+Y?VpQ~u>cx=Kg;E(%xZS3i-c*TZES
zl=S%&hnmqRXe2QB1O|SIq;&A8o!ZTfK-)rCIlbw)hD#@F&!YClR3IRKHPE~y-`?)8
zb=v7c9Ud?U_Uq^o)Gj3eu=-GyC5d1EdQreh9UR}z_`Lr_K=52{+(>18=i%YvI?v0?
z?J0F%oo&38{%VyaToE#;RDxyI?1u~A?bI?P2#8MI<0F^1Qn7*v!51;lxHHyyAi&*2
zi13@~1$u2?dwa)e<iI|IyJ^rzV}%Ps4MQn&6uETdgk@dKPwD^*tY!B<5X!V48Jxd%
zJ(Ade;SlF^2#VyW9CT9~w%?(vv^LwpC#YS$>~V?ip~o0?pRGSE?yY)=_2*7qLi=R+
zzY`{o6#Fmqf0UFV^#6=kHgd6Nax`*w`LD2)G)=pIcxB}883Ums85Ke|I<4emLMXyb
z=M|6glo&nRm?F(NWV=UV8U7?|Yr}xQ(}}6H?d#y|f;KtW{JE<Z;T?RaR79;jGs+S4
zMG8zrvL`b^X~~NStlIS6@WTegyUJ>)S|nY6J3M{0XEH)#9il;JOQvql-b&Z~Bzoc;
z_^&+O+dgZ0qkUCUeLheFK3uQ`IAUB$n140$wbF={%w#-(pkI#W#2rPSEc;K(bOHu+
znlEdjwDo_VI$AZ?x=FLtV_;9yOR8aSPII}t!JL#Q4+uC8TG3HG!~q2C(4)8=!78^|
z<1$iC-xsaF+XzjY5AiVOf3MwY{Zb~PDlRwN>`Ig-ZBiyixsY6rr^>F&#V&E>gv3=L
ztDtVbns4`-V%C~t`;&G=6&m%BUtt<mM5PjIKVj@Z5`|<a9fZh#&Zf<84NjEaI*g#N
zjL-u){Mr;xNTgucQG|&L_)|ys$A|vDaW$EZXoNKo@&_s@JPz6x{T;Zt0^v66kB8->
z_E8n@1_UY|Q%}F%6S7B%?_h;&_iD22Lm$c6W9px67KQukTtJKl8$ehR9HNeyZB_>|
zFO~$%f8}#NEh3ie4%|`5#u|+=9y|dRF&K^)Eg2PpEE-o~0!9o05g#5uB#w(V6Rwtc
zl2P^~5?`;Mf2%H{%;bt)P29i;G^h(`w~wn91X<_2$;$aLKD&5BpOH*hQv2vOb$Ipj
zDLz$LmCRbh)^b(MF45i&Ns?8an%4JI&?w$cOdn;S-A5+u?X+zBf^^7NX#82psoXDC
z+I_A9ml~)muP2NWNbHEJO~cxzs-0FUnwd?sWR*eLU$HZ0<4k?KDb5}RtS%plH?_r>
zSb{OV6l8mv`GfOYgI8<*omIc;q|xgy?fLPcFZHeorB~i)m>eV=Sj#^!Ux}v66mRv|
zffE`-`B9X7CfjWEYKwSwK4Iz|u)pVc%xc#RN5`SSCAal0=R77+mghd)6q;U$MKmwZ
zMG8kzs4UKI!EZMKnjBwSqF;}ML?;x%1rANOF``a?8E@ENRjPjehp=<%4g^}WZERI+
z+qP}nwr$(CZQHiZik(z!-SoIm-4EydiM>CqIiXz_NL|oz%><+e*FpljRg_k72WjEd
z?G5b|4+v=*)D`K!1<^2XWoJng)sV(o2X!KQ3r}HWAU=;sl)ANs#Hr(rIjqgESG3F(
z7F_@<v<w=P!m#S+--<%tgo5<o{_e62gGtX@i^K)h;9%BEgxdx*ldq;5*tegYqVBU~
zC}h+^%h7X0oMXF@u5}6%7X%ldeCuc^Z|UG5EOixZ#%sZg@0(MvMuJo>CjxPe=VH;M
zm(0kfGss)2NkpUmOgw8^fOyk@J|<!hjYzlVF^A>@6Z8xymyt?@m&ke+$}aWKYt*<Z
zE|vN}s{?&3?SfL)ab{`w61$|(XER<nay#e%7fa60Bf;1R#>jYCWJ8S#97P6O<pB`|
ziIR9)j=>xrLFAk(joy8E7wr6@D|McmM9bHd#yJDp30^D1!jjiQ;)H-2*BrEDSN4(z
z#_Fd6F~%w(l8^;&iEhE}FrA39xuo@3cCk5ulS<Ttbm0yUHi<7xJv9dtNKsY-=X}aU
zko;IXx5-=7alKr)N(CzjI=IiIJ^b;GMMFwQ@p=twtmOha4@kw$Z$9KO-}=ssJ*Dc@
z=9xo#!DmB<<Da#e0Id}fQ8{Dd%-?O%whujxo0Suz;9gl$q?J^7p{bY$r06374MX3d
zE@=C%?R))Nhy&D74ITfUiF1yv5w!-PW6`t^J?UiGG)8H&e#-V$;~I1DTbXs*_N&!V
z7643UC-^SRJB8_Tm)-T#;@f@th0Ry_x&%KJ2afpB^IYpAr2uM}WWggYVp5XqlUyY5
zJ3N_BC+5sjC9O7Qn1thy;a@A}LXZ<@LoRL6>HRC`?uSx0oTRRpMBGq%aTxM?r?SMq
z2dPBANW!nZu4W9V3SWi3u!0;F+*oeiBhaVFZA9U_f>bAy7c~_nNQ<;_q1eh8VQznM
z5m~+9f3p|n0<Utj8OO3|REzte@11AU#Fy{S?YVvCZxSm7AW~{w9qFO=FLS^hckevj
z>D^)$;qiCO#S}OGM9hr0+y`3ZX4}>fQ+|+9DpQ7M;1rc#gDAh|08PWKbOBpSM)SS0
zsQQZy8O&_0<P?o7mKC#H&$aY5AU(JTxA>2t%+~O01y`ECiL3dR+&$H@*ODo9KYHMH
z%`@m8h@y-Hlr-}_olf<R2j;EDGwQ42a(H$+FIcG!Z*+m)F$X^##%#fw8G3XnW9vms
zfIbuC%N||2?9hPk@tuk6zQ`PPplHDy)l0|>Oq<22bP4}{(11JpUDppeCWsuSOqUtc
zQ{c+;Fo6k{jA=J77QFZJ5oZ_rJ&8VdG#72m;D}@2oHaW1(49RSEa@B{Q-p~P9h8X<
zMsPQ*X5W1^PN1S;4Sui}Pd0R69BbBl?Pc)XnKc@R4;S=M;B0QN-)YAIJLWwA4fent
znJX4g)EB|)4?dg`A2#fO!EC=BwyUVT9eef7<A=}bqa>i1&dwRZih;6ityn4_E<Cp$
zE#6;=qzZOps%cm2R+l!~j-0|rkeC;6UBiz>*j(Mg9~oROo;J2Kk0<U}o<7{@$ahRo
zU_Tvy5KsL(N-iSa=!cWSAebZ-_bqD$jMAidm(Vn9wMNUlDJsXzx*0_sw#|!d*Ok^a
z9Y`bT)B}SoAQeE7H8FH{eRaZn05mxx2$*0{aW@A#eJ1ulVnfi|iC5EBAk>)IE_<}g
z`H7e*t@3O@u>S%Bi?RTPv8;Dx@on^sL6eJk>(+c?5}+X0j*3hMG@(9C2Z2^NIvNTZ
zJPKX(_O>m)3zu5ENIeed7Rt)Nr}M~k?oByIG~4L1%`bIQeBkGUChm#j)Smlxij*Kq
zGQZ~GAUf)9pw47-H1gD%>?_P(`uZEu;@!yIzp%jjmUg2UrFL5uuI8t&qmq%xwSAvv
zbmq>UN_OU-_;}(n(*TwG*2<SjxtS*FDTkE*hF|Y?l=brOE7Aqf*%<efC)gy<0V?dZ
zlK!=t_;~^UYqdAf_Wt4a+92@mYC9Ge2ftQzI@h4%V0TC-xAsMKU1${%QwMT0fHI<;
zFP=nvIQJs8qgn8jGdZ!`R(oVTc3)%RPzK$3UGI6tvZAlHhmk8Ptu`V{XEo~yN;U+G
zFIVujDAh2)3JG%m{fKFUF~;nv&YRfROU>GtG*(tO_wcc+Dvv#~uO4{~w@DL!3f^`D
zqDdkZ`&dE!NNrilJI@9rlIsvuJl7w64F4s0B|wbutHS1(Wv&c~&k#H5*$hGH2FNVd
zi-J0dEn-DDK`7j6C6)bV3ebSAprXL<4LpYA>xpYbM+F4OaLQYWaA8N>x?x!y@<yaf
zb@+N0LREp3=f^~tbSdHD(zQc&w<%i|(DnO#eShC<!q}jiycTOZEov!hQ~J1q`^xQq
zI{EqEMW^;r>vs9CJ_i)yKjZoA4V;|Z{;NPIMn%hRixt`Tw2qw|s2bF8M7E0%3mdq%
z;E(B8?zOc<7|(CPxsV{9QtZ7k|MOQ!G4+@j{wYc#_s09w*Ewq{J$@^Ap&j&P=Po`z
z+p;IB05D<tevsZCUU4K|K8Ids;8gA<>6|+oY0+vb8?r_zE{5wUPq!<fp84kUGB$zp
zsFb^H(l4{>P+@7=8Q<Efs9ilRPJ6u!MQ-DdiJ|v{89|%$-AX~XFBLo2JyxeP<xkjk
z(P_?2%2LpNHy?Cal)a<eIHAG3RT}S>I}_!B(KaSbq|G$G8o!(ceOUGgKdeHCIeIQb
z`~}REd2;ricE00e3nW1GfTaGezm?$`6H>h*qZ4(Yskq%?C<@}#wmn5Z$#9P=EzfGn
zkl;Avfs(TYPUUN?L5X&~Q-lHKVPGl#U8$>fQ-8^kz%9>W5uym2MQ3Vc7O@a;Z>;_~
z^?>`Wm5~HX=T;VcWxx2ZAY)<M{Olwh4NR+&9R<v!7TBK>%vs9A@)A`!B(ojUz-ebw
zafpoDeu%onj#{vEof^#8fW9xJ)Cvq^>6x$Gpl2+Y+x$eEcSN4!jn|Y)v-m_vr%q*Q
zfPUX4-5%FeX9HBVO+(a^@r@8|of$6t5#?+;2Mx*bV3i~4HL}PK6*0aK>53!-Ls-4X
zLJ#E&(M}t9?mpS5Zq2OHww*O3csjnVa5=XLIhW(I^VY__?z+Uq+ax_c0J#tSR&D*u
zn%af24=PrA9fy6YzDN>3;yIZtZPh!<%~BUO@=`Jg7*}EFfU{4JE;x9QA_eS<T2HVR
z{ht6ImcnE?qqUtSY!D$-lr4N=FePTe$M87X<sj`JD?5pzQ%m&FxScy^W^bdFz#Dse
z9H0*$k!1lpdtPgkmyemT)wR2WOTRh4-=ah>shJY!$1Ccj(8U2+kDL2xi08}O2kG<q
z+9By@V>g;_Vb8{P>yuB&&Vda2?%S5-;$mj!K|j@}<L&i!-1ghtRTjFCFN1exkj@QS
z@STy5yjK=Rn=NZ*)TQZZqh=G*lQAz&zw#(l1gtYeqIeO|c?sE6RbVLEqO`SklnA%r
z^cQ~|o}qUx7P=g@*W=@@2DIzbpYlx%J$?ol%-kM=?x1ws%C;p2Llq>o>8qfK{TMy~
zC$`0qhD{<Q3_4y?@XzRv0ekSrx1)4XJzsYoe1Z2;qr5nZQx|M%h}L)e+Fca0CE4iF
z`%6{TjxAbp2t=`_o<~j<V=O*{#)TsWO6ceRu~+B8f#BBvB052!|MP0|*X#4&$aTMb
zPPxPX&*wat3TRFae13L@pll&IpiF7C)Ua4McXmW-yGs~OxR$59j_bqNlGyp%m<JbZ
zPnw%{n$fnsMrm}#i^km*x^YWkK)nL0J?PF6GCC=^>GR_I#F#~=nuKCh#HA87nQjPB
z#HEa0&nM=V)<J$Tp!biwDrS*{I<f2qeu5D~#mEo8<zUBEvpylD+?@iBvW$?kaueuV
zLZwA8gl&l9l++Fua|r?m7s}RJ$!yy-b^akipPN{3)_|;{V}>BfxcGRVK;yTu9C<M2
zHM-(J3jh{Z(YU7!(yUTOCyF*osK($ohrmcCedK4h-@2rp&0!#Z*6o3W&AY>|Auk|F
zX$VP0F%;!wXAZRkO+Ewqc`57)aB+Ub>470<x9DFcOu_mMphT;vvN&7-^OHylyMuH~
z3q(??WQ>!0npWE?ZkY?XO^|0NrAS-5E3HE-?$@7)dcSR-6MzI&0Ja!7r%89VyCPN)
z_d_JOZ<3qbsgFyhql;>h@r?we!SVBYBve5FbNC_2>enmBlj%-aLT{fp#Fh%Q`$_K=
zZ2FGswgamMh;r92R2FYzMzy!k4)SyekXWR<32UoNx}r8AO*dTP8O3b>W42r*c*gu!
z^Fn<@_PqBV-Ox!z+$aqinSY*B#Hh+{!Mr-Se#|(Mijdxws0iM%>Cu_>#7EeIoM^|5
zkED)|2`!r0x#tA}OGS`gN04NBZc{09<iJlLbMx2l`p4JThk-qE;)%m3qtds5Mwjt<
zchl-_<ieI2AE9n6Aa|=uVVuXlLe2x!D&YDgoHp6h#<Ed-XPO-rRJiI97m{z0*WtB|
zvT?RT?hIpMt`OhI$65U80#UDBm!cJFDJKoa3cYAzd><S9){?~r5GxuPiF~hfZEUx_
z^b6)nKF=_wRut*}jB}!olVdfXJQj)#vrvqa_(z;9w<($csAJ;;Dsd}vsTok3z-<^`
z*)SJf;CXBBoB?IiFs}Fr2#K*1`k9bz=k^<~C%!`-KMaZ-%cw&2wE)9t<lh0!=1FQt
z#Rh8L-ny*KO*;_#3ktm>4M49YUH?%f1>=1n(u0aIOw{7JXm0p1i<}-jm(O>0^=E3~
z$RTPX-g6A((s59P_Y}JJ;vBh0_VgZBNZ^Gm@?YYnFeHyl);CsfP3egTbrta*SniMR
zrRHLD1b|t0M`T{IejjiBm%|_37>(#(j)J`%z4quynC9gu+QLMftNQSam@h<kR_xxG
z6u9Bz(;q--#(^jxu5D3_@)QO~o%VtF1E_jJfX9qO7GL1KViJ#a$?3bxUeIdAu$4YZ
zM08m-r_s_!6bGfg(i1jJuRME@(r%uXp<lu892(u!#3A0CutU$9W0qF?`O8Nd+t(!>
zKct=5uppJ1*3jsQWEL(=6i{lhzCK0tyqztYj7j7XzL|_j^7^>ozTVr8A1ZCG&Le=X
zGBC+**GMSJi23dtb<~UU-ZOrpiUwMuTE%T1fHCnp1giOBWy^8mJA(*&bgJS%F%W68
zL*rIS{PAc@=L^=z6~~>|uYf13gn{kN&23$sYu7H_aTmGs>y)()D0a^d8t67PMd_Em
z|6L4WMq;Acf&&1w|Js876RX(K#N5Ei{J*`0F=__?BMSQZ9ls%iW&*S}QrN<uv0C9f
zY)3^|V-KIB{LlPt@i#b_L@BXx*Vo5JTtdE~y8sf7k#RKr8zVM-Y-mV9z*}3LSp4T|
z9H`FTvmm;{IPVl+RrINGJwBy35w_wGY(vW4V+pL%$b!Ow(MpU4n{j-vy4p#6Ska%O
zrMS}3-Sx?gRQP#dUiIlpyi|rgRY8Oz{(fj{;s8Z9law|v*;4!4+L({5zCF7e*IlG~
z``z6?>>T)V=s`KS7#Qq)cm|qu=Bf3?wDq0JRc3WJyQHX*`u)3m%gWYM-c-P-=8}yp
ze9f`D&dv>g8|hTVilZa#`MTV2e5dd8%clDmtd4$u9c!#q1wifQ`v{ftw+5n-F=bh|
zvS+bHbA>nsZBjg6Cf4DlWJxBzq|%C?{<bLo-a$&N0(-*6YBHbZc}+~huNCta--}3K
zj%1(N%()EqTh+6NRIJoknWoG}q=g6h0F)+Od2|X6C?@BMn44Tnc=!j-5&v2<k+RLu
zQ-QfTE1DR!1lmIY4thNXJ^^XAY?&130E_ZTb0`egmiTX&F)ia@UqSGm__{Xns5ovb
z1gY*QvVoraj26c7nl;7n1h>yFiKr^;0KU%_^J)m&s%Us~^Gw3cW<_MA(p~#VCv4{`
z0k17j%@(G_5SUYPOcPd_tF<QRcjH{=VKY0Tkov$4ia!38wf<cM(Lj#>Sf{$wwBKl;
zHh??{aG*2+RO=I^K&)fJda#Wc&9Fd%@8|j;-WBpK;@ivmOon+51@S)+xG!0trM;)L
z^Q-;4si#i^!ilSvrce<;d(Ihc6nj*ty)8`PcLt7|w$_>ql|NmZnGI#493#q66C$x-
zxpBg=Sx0oDd_z}X$A>e;YzpD&O#T&4rT(fn#v)drhrr+2=7+$O{0<z^Ohb}@A%Xk;
zMrvqgHEw1tpm}rnNM<m#dD-`0JhU*5X&|QAnCjvZmu;n+qNNH3G=p1}JQG1nfb>aQ
z7B~Chauy1}atbKyXK<NLfu3$~u5g{TZ_lt8k?{iwW76h%QiYKdv(j<Yxw_j&c?X`0
zE5g)?RZ&@xWRRdzbNKcZZt=;EQQpb(Y3k-`XlqI3{EJpi6&TCSHG%hGf}fN6r}hm7
z;UnhxCJRq3uKxWCvp^um1ZXzV+(1Q&ITz8Pe3|*VVu{c71xDf$zY)w*%~JBiIY&xD
z-9`%?qmD9e&GS5GB!h5N4QgPPB6Zh@K_jLF>eZ0;fTVJyUh8-JkDRoY7P)YD@Rg84
z;*97`fq(=7eWZ%a&}3j{{a7Rgj&X~q?3a;ugYe$2TzrGPe(@au@ve7Z_6A05rALKF
zcHhveF=U%G$7K&{ds`<#tfNe+7zObHZMnwCiObfCBvj(-HuLUnEQNdWW^Y0M6w8k8
z4(z<9Q0sA)S4!l2Mcibj?y4qj3wQzUM$BrCuAL|8Y<CVrPbbNhzrHTa!hc2543|z|
zpqmkEHEYrFCyt&Hou`X2FEXQ5LYHp^>qcfpb;L~6f#)^jIR-Y!NZ9_guE3)2PMKV!
zD*c9DmO9IUDuTgsm|m0tb6=xv*_fPxW>se04eQUl#4myj{Y!70naBvbh7AEiO(>=^
zGhLu<Tpjqjf?B^@iW~RQQOoKS45pqG!>7{z28vpv&#^|v!2yF^Un>c^+gLF_3BLrl
zzCzjPe+fWP^v!&apT6Aq#vd}r!v-cB8POa$MW6X*?#>>-u(5}>e#^;45X-2c?IcO8
zm2gBcD009{h&iC2^)=rTyIc6y>s)BqD25r4NX_YLk8g1oh^Y`6WcdnPV%Iz|)pG)5
zGgptirP>)Vd^dp(6~JLVFm}-%IEO(#5Dm{v_!$5u>^4l^igQFjO9!u2koKRTU~Xf2
zC}Jg|XTCL|XAeF`T=(%;*JFOzS1Xlkn~>$z?#8hvwHmZkrK2{a%NfZ!`Sr^#$W3M-
z-g$|!P?)|%u4;>)j&OZOa$%jr?9*tS5?+s&d?QN?OaB{2;+;5Knl~A`+i0hY;^rwT
zYZ_aKBb*W2u8g1@O{@43UcN;Y3JbrLYM*$s#Wps%@|v2z!Zp1yl4Oc5A4X}4%8_;>
zcB^#f+wxdpfOc@XG7T}9Yb=#TDwDguFPQ-L`1Nmt;Hg!5U%b(GecXH+IJ{W6zNB;9
z9XO~RNO-nKa|k(9mo>ub6o^&Z>|X!mO^zeU4ga}0cLtcMdXo;PfY-XW3!`BLD~W2Q
zF6Y_ZOTmwL*)m9!`*~u1LqV9@kk<W6izc}3%IWFo%ZahCXAVpUO|7A`*vZAFv+d`b
z{&RYg;A0o-zOW7U_SN<9V)XgO*0=pQ^w86!@Ij{q(*W1#1=-4b3rL3t;n)=i*(r0A
z<@Z2IDfhb1=5feY<{t5Gy|rGz^d^#RSTuc90q}UFDsL6iR$7eiEzwJ~+h1s{CSc&?
zX@(H=O>B3ngkZSJw9{G}y~EVQT?AzG1Kn?dC3wh}or41xMp&ew-o_ziHruIoVY9yS
zM`~W;6aIhy<czM_%KspL+Zl}i{F6KBIa}EL*F{>1`mYz56Vd0i4*z};Sv>o>wH<zk
znLiQC#($eMd?~E3U0oj0#(^k8Gcoeeug@&Bn40UKO@NO%k<^hr@9cE;{@7ntLGS98
z%D<C!r+zw+`#(6+RmTn4b9S=0wkM5iwgx&?or+T4j5~_Yv$Q#uV>u5udUiJ_Yfc2T
zvNm;GH(5*`4wxc25qM~2V=cDtO?__-%{paM_*R!gVShX0|JJEeZB&)aPBlY28er~J
zu=aT^U+$=-o%TSrR7VF%U#=cnX|{E>H=PeXvR%vd<=}q4%G50`CApe5q^A5E3(+yK
z_B3|$fUTm;(;fJBJ8wWweY3H6*W|+ZVIED|*$B$3JxP06bAw-N(+hDge;V~_Y^KT9
zlURC=v2{V~R(7o5B3FqOpu`HIb5zM{Or03e1*1x_?`#ohYCGPe@U~cz)&<w7l;!-|
z6*#Oie3=Sqs)1p_IM(kx8tQ7qpu7g{F^eMLVqbX!Rh^&Gt--3I)Tqd>*T&@J8!TCw
zgr~ij4J$?a)gLs28n272ZmrKwr9iS2_bWaWbMZO?j-M0pO8@=`9qU445!K;KDcsD^
z=H0$N!=7oC6k(#E*N438LZqYVPe+XUTAQ+RaCtEb9moCvt9UdV2Ryja^EK1%s0Xtc
zi$?gTu(`r*n@hVJ#@AB)O3^W7u#!#m5*)Dz6gFOpLM(}^iA7ER`elY=-WyagLJ>WA
zb-1oXoJptm5-dTa;Jut4pv<6uiKW%fPc?8h@n&|Z0rxfcpo?E3xAFGCKF_St<Eq$+
zcR(7bmY8oXnouiTg&*`Y>sE-YK-(*TIOLJg+ko`?(};aR&;lt+_crgTS0LWwoVZQl
zzJhg00%gev3gU?A1sFn4ATI$V8~!>%+SEJ>!pih>4p83O3cC_A(jILBS@56jtmq|P
z8l_W;hCuzaFAKMLn&pa<yd#1(*|l+F;9$5$?+uNY70x%;z02UVPO2&!zFRIE!n<oe
zS#K7kkmpKOH$#hxRe~$+Olm5m0yP`hhv!}&<*Im7^EkTdz=<!@GB5l{kTk=N?Lxu~
zI71{VLkD6lZgP@`Yl5jWH0RLBL-phnHsItIBdD|l8dh=n=RlRRrKEZ`>@ioCoztS%
z=8%@4O)@uPqO)I=rB-|3K&>xt(Y?z*zP@r5MO@6(X(J0U+M-<hPXc)9ZwS=HGc&A%
ziy0HZ#cAd=T&;3yqN@=bWXfMP%g30JP%=XS)Syc%DFm2?4gZ1|)3#V+Wl&CX#2^&A
z>tm1G1C*=?ht0aG1{M;xmB0c$#lfJ#<h92#EBuiZKqX3JJil8LvvBE#$)+GjTY|XM
z6mRdnwZ<CwPoVl!Sy(IDh_WGveh9pSB7DgFUBk86jaW-rF(20lP;NT|>3YhdJHCe#
z)-0DkI2Ovg&5I#Eb3lX)d}F!8=o^$q*FJ0OlOJ(X#*3N6#Q82A@u6W&I4;P^_m>|O
zF6dHDE349(O}>6myrd<yM9T}SOLXudDWk2V&?N-xJxz9qaE&m&QgRMnu9EwV$ddR7
zMkCiY{<ZUyOJI5UICAMsDa#`)0Ja(#l}$hY{;fO$>16+ahvkn8T_JWd+_|u<EwJoM
zqh#>S;TvhtZ-Zo{LXhv#Fr96xgn@l*z>j1EC^mtbO80mLNsxMoNej(_{?xD9>sUKs
zCgRH7G*Ti*<G$xdD8L_0w(>w5tNN$J!i7<6Xc|V^uZ-f}V?1PomTM9Ru;IfqbinWS
z@?wQ7R;t!$+=qfV5Q)DJt?ibthZF>vHk7f~y4s5wWe^!U?>7o8LYd*Y*eY&w8!ZIP
z0^Jq`jaOk~rz1OSxPc+;&1_S&i&=|rNYC0-i3Lb|L1YYbjJptntX`VacJa~o#m$TB
zW(tOifrUyl4lCISw&QVi6;}2nLy{LG<t2y#(~|a2d8Ax$rb~148^Q>F@`UFxxrT2P
zVVgT2x1p~@5ri-Y{JHJW8A+D4I-_z9GD1p`T*;thB@eD)-^rH-mWP|tls1iwOeg-8
z>?}?rn!E!>#?Q5b0VF{V2Y3)Q;f5vdh2^$0v}Cr=32#0krI;Gl9zJI+wGS{&-<!Am
zVl}b{4+W0|?Z-kXS6o4(2NuG#DcnK4c?bq2-e5O!5OuJr8JEbmO?$go#2s$ri6nCD
zNE?r?CY*7*$h``@iaX(6qJ2$u8mxOthKwhL&vBlJx1d#cZEL}7@oL>W^JwQ%Fz;l6
zb&SoDK7eF<aU$a`4B8SoXkYJd?b&kJ8Ir77X4vQGoeuLM36@lXrqxh2%##I)2Etx$
zb|r9=WsObEt+?2o^)ohLzDmP1;`HNQ#|T=b_<Zdv4b}BTsB68PT_ZJ~`wegeZ;bw&
zWWbK~=1!<7QPe@KP#&_V|8bb3As<Pco?S-JRgfxkDR$=zsl`7d950th9_6l<5u>40
z^~I)gy^ye5P^zFvj#NHnm^eBQ>#C;7ZC7UoYvk;T^NS&ps?~<M%DHE4ecqEt1YvSc
z*5QSb9q2vw1bK528zOBd0CN-DpYT{_GY9Pm^rUILidqsJf={*=3J^sl6e$!ucg`(v
z_@=oPl(*VP))ZVZ9OX_e6Pzq%*SI1o2p&s2iK7;l&mk);Jd#8^lw|%3X0wx2q5tn{
z=-gH~j+VU~Q=HS9raf4}tD@%Vj*)Z*c-tUB{f`HB(>aR_?v#sIi=K65-fkosgWaXH
z`l(bVuu5t=ct*T`=i(dq0w8HPGwsI?0eUcTVn@!XOc^Nw#nHjU8Oj|;rA7-aUImGF
z166L@r|l*7O`)UY)ifmcpGs*>skiHIQ>)6bDr)&DWlL*_&*{fR2C)LcoP4j$8TC|z
zZLTkC!BCo&Ivilg?IS}d^t9?~dJ;mC>rm1WXk^*RYYZ1gTeaa3Qk59Xw%pqz=P`%W
zE_Qw7F%_)Q3nu5YOJAsvE8I{?xB_{v+o`33rEP$_HjT2Z-gE)FwJ4tp#`_~jd2@q+
zsuU<XTLyBu&lAh*gDo>la-!(-P>O`!$qR^MO`dayv$=`fe}uk*=syuwxDGTE&WPjD
z*q?b_XtKNGlSdwcyoWm14!QkG>52o6nMC~Yg`1oa^Um97QOZ3JHt#Db+<h6lkvK$g
z=ury%-#iwOhu>3MT{kald41dv4i+CROjDfWe1E$={65FB+WhW!6l#OrX1~KYPdLy(
z31jL1<+8ea)V-BMMed{{=A;&=mR$a&E{MoGBIw~3hlZd3JbH;}`g1r=*l~DaM#-L>
zs*MNB<z+l7A)3f9LVV103*jU@X`Slq<m2(=;+t}wCq_kgK08u0hb$y*P;BB))*<4@
z&H;##PI5rsWb1+Wl1<EY_OFSfNL?QY`TypA0yqo8Kz}RAlV4IA!GFm8I6Ik{IRCei
zP|NQ{*8jMpe@8-(Qi%Afi96SYr=Fnfy1TUj#H@sFTO&Guem7(d2_h-Q+307#1M<Yg
zvo^!6uBou~(((OiCcC*aArdA*-lJ?2wnqbZKGNYc6t-ruQ^Oex!}U(Y<4E7!IWx6a
zx&jLVcZ*G>iM6nE>I~xGZMdrq^xnt&bjw;+ZJw1%{GUJ+T%~VI_lgi|zZNRS(neMl
zo9#K7D_*9bH|!<J2w0}i^9;M9$hsX*6s6ZMWriBP;>m48Os}3?#aih$59FnV`Py?^
z2U9dEQ^yyr5oZdhzhiz1$Q>gp(qnnNycQX}PRsIlyH>R`b@c@;Ux(}%JhG+_6ORG$
z9<vs}fHKFPGn3J!)y2@VRx?bU$x!?hOv6bEL9dp>X`Tyd$rgoFxsfIQ*M%SsaX;7#
zZEQDo2U3<t|0u%fQeNSCgi1c7$#tt^l<og8<gd)CbS9RZkmqPr5pm9ifSot;+elfs
zBFmzffw6!I3{zEJ!`j!W+ukV<DeEoPRM*Vd<I2rjj7$-CH1%iiYCHF%OE5xerAGiQ
z?-3J%{P1&9nR^u^sAjjliKJr-f@{;d7#(>t1MizmC;|Tw9Z9S$5hUR+rS>3;9Iy;y
zv>sW~rBMt|6q`*${j)5(g(Ibb{M)jHh-Qz3H!<@a%<&Q||ICz5WDAnEb9YAAZj$i@
zNc8MO5w_V4WReM4E`(PeSOSb1_6}b^&mkTy3c%qx_{mF{beb`Zs9LR-m0XqN|FOf1
zHinEa^L(%w`AAk#Ay5n@*C|+3J;gPzZoQ5$$h@D--mG$0v4$_+y>m3V=cTzKOOfh~
z-)J2IKr|zeEN!K6%|S!eieeCsX?$A|1@Q~vIcuhM6sQLj`j&2!dQXJDjhH_Yfdszj
zxEgS`3kplo8V4FuDQW*r)D7ouW`|}z50tKPy%NIcEd@=Q5*?R~aaEys!(J4}tq7X8
z;~jzt9n(uXBSXMP5fdPhEu~FPj<l4f7g99{6wy0nXs%e<^Z%|_*HmNGV%jyW80OO-
zvuV-$H5ys$n&Ddkq(uT!`b%;C8IY@Kg0BZ7nc)8;(rfIbAE?RS&@gW1j5>Q;zL<@S
z>R)bsCkn0K*gAzaP0t@e-G*HKRu!5CsfboHXWm8uKLBtm#i8<u5fKp2$AO#de+<uk
znjOz<QY;E*G@^W%BjOZ5(Lt^q&{shDOjl|^FS2h1fK>wU>o}$M4xhgyTEA3Xfw8;-
zqiRUJ{0DI-1_Zwz8Euu}2J)PVIy6f)^F@~37@;E^CXlcyIRJSpSYkZM;u_iyJYPf*
zVNGDuPpC~%A*-D*fC71hk4zpD)^7qGUD-0-F7<~RghX9;{lt+A05lT)-n<~+UHGxe
zjv>=2QQ#!-4I{m$Tn)K?!5Y*Ni$h0<y<mo50{>|H<VNJok{AJiL>cSvQ1t}&R(^G;
zmE_^2{8}^;<9ZU7P&a^K{-5%z%-G!k=Tg8eRer320U<*qM4QyVAoim`ZQ{VI9q$w5
zjD?hH`MF7Z<_U9DUK~`-#0IW8{3daRF7d=%B&A*Tpxn&o`Q2LG5@>-)dB{2zNmkM`
z)iI{XK@6)p%NyH^GFjBpd|D*K74y8t;Xh1rHxoPu=X!-Vbw7V5|30}L((;?_>Nv0I
zgvA@MoyF6Vys1J{TZi%hmx4;YL9RbTIEQ7_G(s&0LyHdKY{h%Mqr;>vVej9Ds%2L(
z;ZR;$qnc<g%R|=Be$;d=vg{O$qrz&nOrT?OAsT|mEa`;ynf+yoDm{yuy;-e9LU(=`
ztbJ==Y~N5iLW)-hx`cRuyu{JYkVn`?WLGRAk57U^w=%Venk#&ixXV80CWY;(jUf*X
zIC$OF=l_NQ2BqlWBJGgf@00@ovJEy(VHo-x9%=%^{;95BgRX^$*TsJW;~Mc<lI&^c
zL9{=g;KL92V7Rga=Nl!@+a~MD0}b~HI6ri?w?I2j^I`+tfqS<Flq5|-#e{GLrn2%G
zoX_d7Yr_guy$$aaJ5$I`cDo8;^^v~%ck50TKSmAz8^7j3r@`~;$IhoP6_X%R1rmQw
zQi633kEdh_Cft*P6%ff5?gA!m^tWsN9CM7}*+QlEv88x;-Jd#gc(>>CO<$rL8k@L%
zw#{Z%y5oLh&IN9xVH2EKM9ha(3Z#Mi&{SgONwC-oIjye9Vl@{k*JKc{WsFK~s=Xy=
z116Jo4XBsB(F=WPQdRkeA}`WH#V+NU=7j~n%7!w{AG7se{>J?{8w_EyEm-gxf=Wmr
zq7A}drA|cAh0n7*76YE&lFvRmgJ0v*-ZF<Jla{%ybe-yQv)iJPAjcBZPsdrPAat>}
z_Q%q&PCv|2vu6MlrHtBazW}B84n#K<dt=mH(%fe0o(ioTM8QcRosl&e)BQoEDC=NQ
z`MI#1d*scGjM@R+t%W>T0K)73neWJ%gOm?O!Co0dc?!JBMh|!FyAwT%!qT<=$;9b_
zy>_@5`Ru~+<f_q%fyCJ7Lh(JoL9m=;An2*IyPGcYq9KeuqICeb_OQ8yisf|6pVSoU
zT3eQRZ$5=e-Fku|HKZ%_lOOVMv(X>N+l3QxD@QxKV<V)2)O}oci|v9rnHP9Z*NkWQ
zu#Cw+Yfe773Es<%469DSKGi;zDX=-az>Ptj3N3!G0Ms*RPJTI{)9f}g1L%MFX6bRx
z!wIWzCQ^fA31=IE-i6S(%mIo5+oS4dS)9~tL#{msI8q0<59#shI{~%KoakwT->Df!
zvy2K)`P#qwft$d%I;m@g+oIAk1CeL38yPd=?3OB>zXs=hyL~z(>3N_Nyu*U~jSxd}
z`cWA&=lJ+!d%tss1rk)%AXaV9v#qV&c-ht3{neVrd}mX-XA4K*3^q@K;ynI6KKcW1
z{yuI~GfsUcE`Vg7;M)DygHNkn>=7HS?*Xf?%YWgh%H?!*7GqCg5z*EkNDomHh++UO
zFoojAyfST{WSz9H9yW2{*;4A$*qCHTM)WYuSo$k7wM8-k#;Rzz(DeZonG0B-71!6p
zBZ9mBY@f>QWOD1zv8m4R`q9#6{LlY6K1f!?bZq)PJ`nu9eE(1NmA#db6Wf2QuR>IQ
zFWy-Ze(NiTGhS*y#N!ehAmj)@F$GSeSR3{4dVO>-$wHe}#EOJu9N@3Jt|D?R*{)eV
zYK5_`)7(?te^xs5u6?N8?ST`w90t|jnOj=yVH-CN?^86)vZ;&L&!Xp3#+*`O6h`oF
zov4$WjsWm(->d##Z}x7zs3ttGQ+$#w%cX%D_n+4c8DT;@?ReRepi&x8BUBFcUS7&r
z72CTV^s}KzWV$-;%9wV+W(BH>kny0sZsT}K%(-!<Q47w4>xMMX<pgUgBPxI`3mx^U
z>$DzFc7O#0vh$(%zy_zZn_W4capPk>e<6VJZUs0M1jay&m;_;y;lf7mQ~aTd_WYKc
zV3iH>?a)p5Axc2CqO@sA0_`ExD>K<G0QX1?>AHb1k;Dreb;1dW`&rc%#Oi06JFKF^
zasQ38Wyd!OQhO+MDs@f}9I9@6uj`FTS1&_7CMM8$Jm0o1)&$&-N=G!5tis_*5pO*=
zoil%1aGE=hpH}l!;)J%;pJ467Q%A-*JCLkEwfBuZTf+u^F~o%xzF|ZRfMtUPz4b4i
zMH08dJsgxmxH?9p6`R=LA4poXy{LCjbl|;@bvzH+!u~A|^Ig_YyH=ks!z<AHUN3(%
z-Re~2$~THma|$C^FyY42s<u96j}$t0#|FU%s{Y2YCz=l%2ZhYNK5G&tmU$LAnysR$
zv60sSy6WOLl1f<a!9B}=<K-T74lYB0D0-AlmC*>?N1xFbuicX}(&3}N47(mP$I5OH
ztkTmNLne9hS$RL4AO5%xLn<zThbHPNNkMKM%y~Y<4V5Unm{ltZygdflNJ@7tI^u(!
zL18YbH+PAo33@x}ZU_q)l6U?$?{(e%jbRZi({8OSYciUE-+&DEa1VNbRY28&@Cbv|
zL?Bp_)SaA)AfZ<$8DFS-1eZVNuZwIPxCouIJOdEw2_%NpE0E%@3gxY3Q9b8!j56;2
z?ZS7P$QL@-<PeBNw+cm3*07qDW<$16EPS;7lZPHuPmX_;I$xv^^Z6_WdgVnv2spIf
zoRS`oqoO2*n)#J?liOHh_anXwCuP@}uN+Q2xJ|MMw=x>~{1ulVb~kta67P*G^LecG
zgBzPPVe}KvqX2kOc_M4-Thj`>VwnwbH=pRQOR1|_9nX!{;)O&gdlI#<M2<_F*cQ<H
zv0TC~w>aXB9L5roVMz5VfI3PBse<RKtVKCqNDeL4<4kOa9BRqV=pK^Zzajsx9x$GS
zZ>sYKD<5{)rp{NP;7!T<>-&OeWTPRQDzn1FsD2N}v!bKnAetHAZnCNq`Pxz55c<wZ
z@-LKu6H!x8Th>cjSV}f2B+S?^2jNb~cG5}@lT58Fs7Hi5r)OF$&reJK&l(qznicq3
zT3XsKN?MJr*QHcl&4M#DW5JgZ7OQP_RFqyg@WgpwP+Q%A)fYC}B-SO|pBo(4?zF&~
zuf^&`hu+%_6R`UXjI#HE3)CuRq0%BtygTtV8D~X`f+Ge<kNSxC6#_TDe+XuR0cREK
znI3m!f>@>#RNuvDUWLGd*Cb{wuXC3`&Fa+h<NUy|Ye%%8hR{Y8?K&qaUaZ+wg#*9!
zVYI>T|CmIl7HUpUumAukRsZwe;#VSSVe0YUp2K17UoJPh+jp#9z(g9c(ngl?jl}_m
zMkx|YW3i+otHmh}EQtUrR-`fHV(j~+7cBsUd~%Xc+fvR(3k_6Skdx2sfWcqXH_`Am
zE)+Z6NrxX&!~@-wiD&$|Bb$_B372>k+L@*n$|~cm>O)BjHmh$B?u^;6-<`$oQOIPo
zEZxyDR<0w#_rv|nhHS~m2;bS9fL~Uz<N^Fkad=hEHgSojnuiB{T+?>+6W^iu1BdL=
zr-4TD+u9J~`Qo#O3W*oVU0Cfw&yHJ<(j}c#O&VuM6V{xljpnLJ=k^i2M&=mS%^w+C
zKV2ZulZ?rKiP96pvkH1q%o=1XjpO?-13Wd#tqNHr)CRaDZW_9j?(xd~Dlg1iBvk1*
zW?`#IKHBWA=#;nlCmMf(+zpB8WEnrA$>SY7(6}LDjd4*-5>=iRbWl4~7e86$Tym5z
z9N+F&?8M+xJyLNs<^23iaFtDJsMudwDO^^t@nxw>S0-y`r^WS1apEj%Qn6B08*(5f
zTP??<FD=`oS9&B#zO2ClL<fg~mT9V9_KjNNl9U(cZliQ+tEj<J8vTOx$U>weZ~w$R
zi~4@Ojoe7-q)cq$>fZ3X`7rF$?RI|ePhV1I!kZ4A8?s|SH>_8THXm{B-W*yFt!9v4
zZ<QI3=61P|HiM|2Z()y4<?X@8FY0POAR9*Br+Mg1sIPMNDj`b$8mzpGd_GVL;p5Ka
zGVDrFlKo<x2s29iGcJ*PXPThMlQ__&btiew{OE-S-ImToZ66%*)b>|t!~#CL<j5%E
z#Rckv3XIWqo6?*6JH*MZ-Y|17ciy0hV@1z~d_%wpmxw<K7qABBd2HIGn)^BKH;}R)
zg-J742jB@X6xXVLfCMf2))c8kfD_*6QP<U!C2}=5X?OD{wZ}7gZXcXHpks@I^Cr}o
z^n0jL<W}~0A|-i=Ehq&Zoc1u^6Cd$cOA2e^;1I&Bp+Q&ayB!7uwT~I6s3Kw$$m^?d
zABFzfPI=1#vsz-US&THwIlZF7uWM$1zUirVbBK<?jr{>a2FqJOv}Wdp%-}!V{4-0l
z0!OJ&Q%StAJ7&?iuQFa{S)W7PRn(w}W*Jl3kx&I(y)>O>-ezywP&=g<uyGzV+G9WL
z!M=Eg%wCOB4j^BNvOW*C%s#Oy+3oHD_tW$FwT5=Taqa#Zk?Q_0iUGn$(ECU|)@m?_
zy4JFuKR*|@+}SHsF5rL>JOSq2oR1&qvrWReTk?%s6u_`#mBHO8!=Ku*q^WF=n-z<F
z2XLaApcV%R=~<}O#q5e7*8!gXa-0T1!J5Sp$IS7VDa%x)3q4JPYS~?1MbmCtu~^g#
zpN~S3Bptx#PyO^5U_J{9H#k;M$d!^dq^gNyJj81hc3_?0H3`QV6obA9ATz*^T6lxE
zngC`9e83#TjWkqBP~xecv5x=OB6{(@HcZ>MnK9VrB2<q?P62r_r4&A`UJ$o4nFNRl
zwuUiID%gD66x-`lLei)Kvauj%h*((><$9}tl;E_4DL6MC;^eM&Z@|rZL4#|I^tjja
z{Tt|8oha_AS-9wXH<TD|6JZT#k-8i*c?Db!@+~+Vq$P~03Yv&+;YY+$7dEqd+uHE4
zknU6%yHzVJI}la8W5A|Lqw<eVkX7SW7Rj*>Vv@y?mO*#loiiHG`A{CTb`1j>7OwLg
z7_9DENDR+36pemKt2Hph!SoeB7)>x#B0w#Ay*pkSq-G~iD3;B_5mU5Y)8)Wiov+s&
zxAtmKyPz-zjZt2ruPurP_R)i9n4>u3^T9OlW0XI%N=5-iKT*Ixh^NCSP7pD3BQt_g
z^Js)u<3<siN~T)?EN69B7^T7m?E!h{d?1~hAzDDmJ;3)v(f9lnByqEohd))FW(D-E
z%ILEO>rLufybIZ(G(w^ft5O4c<sM_r{RINb-q|wtf^_g_sPPyMU_`wXSbSmb-YmYp
zV8GDEpA#rU*uo&Z7;g}tE8&t3Fdp=~4aoWnZ>6w&;@{;EguOzanhZBG@keJ6-Yi+p
zBER~M*JxNximf4mVT0ze0iMG?e`cch&?9~b14WZR!tJ`TlijLkUjGKh^4}-+vHVXF
z^eE|-T$5tVbXO!KZHZBRhe<BMHEP{FHiY;c^YT~ttwn5RT4d!V>0twji;<o%6FBQ+
ztX%r_T*W?)Y}F*1I@*lvXGs;DL#=WFNv!suxz1rh-NPa2=lu<i+#ugm@QbRS^J|Mv
zAj&vEhG!B@dn2~d%dy;}@yLd#q8R`@{THkv-$_q~xZNQp{hb7aRJ2<UzV0ft_l})H
zA{G}2xK5lbugb);h{1wZ^e4@~Ewmd(d3x2UDog=Ds2bgd#mC4AZ&{0PX~YCCEOUJ1
zm?;QAIX_WVhzGI>*eeP2f%{>CCn^uC?mN)yD*}*W1d5^}&kfOB-b62*b4YJ_K&f9r
z0>j=ODVF}4;Y-{skP6JXQ~N4zbaErFjC5poft(pJW9j;ZJ~C%MF$neW@0}r_NUFNi
zPnnr@z0O19h35JBfnKRrueRS|=S@ki>jwcUrdUtvQ`4&iq9qei;`{q$V&QK&=^dB&
zgWk>Iidt^#WP*<^@$<+ls{qXb!pv=CeBUq8(VYcjfx5GWFuSBn+_PMA#%MrhsxJdP
zfhFaOg9t}^+GOVdVhGDHw`aagXrA7D)cJmcP6YS)eqNJ#iW}KOr<BHX2ZjLFyu{y2
z&)L(%W#kU%=j|B$5ew%-kmZmw{`ydWEEMy+HghqcwQW(yXLkezL(P>yfW>s&8~4W&
zR@|{7m`4Q6XPg~+#mYC=Dm&9xcFjxn2!#^~x>M%z&>+p?n&bf^Y2R)Fyy4#<-;3)N
z-O$trh**1zYIQitNF(?|hc##CRIZBtL}?(X-8s?U1+$&PYsyyuc?tk9h~FGi-bg@p
z-6VoeL0mc<uoPEfoCtcTIjzeRI{jRKrWFj{Bc)QzP^>1iLc7ojrxR;nX@)v?CwURs
z?ItVoN7NP-AaH`Yp-IAmywpH*ddn56#H`q3xSic69G<*b7r#v>S`5vy3smW;WT{f3
z)lwG$8Yvszy%qyK`x)c?#jy@wAHk6rE`XAUESYd~;ZvQy^~8WmT)=ruGZr3ewvVmM
zxBBQ=?qqcb20@^ermOLK41K%Bc#hvS?U^}zR0HN>?T_a}K|7E9IKvR-*G~64aLcq(
zF|K(+9m?GD+m6TFuOyV;^LK>pdRPv0%c3MSIrEzQ)l8-bH=Mn?@66met@tA+^-peM
zW|s&sI4Z;}DU}se$k9t6rEWq{OBi!bJROIIXSXgfx`-j8J`hj)m9cA`1|RB!;edVO
zsTLBuxJ4mRh|b$hIk(;o67^ajS9MgNf=rhHi1<x?FMl86%oDm6DirSfj5lzpZq`16
zWE%%HMB3J%%A6Z1#Pux{&0xgGo82G!mPf)=csM@xZ5}_;nkdpU1k_NxVE_mCy9>Bi
zN!mbLLcihAb{}(!6vwO|ONcfqle<bIkK1K>C0%}ZJQI+J(Fn7}MGOl5FJQ!GnOyxa
z*a5%4F%|c<jX-^2g>gmQcs^Lj;ZPZ-BL|#{br4!lsj+@?5*7OSK#6|6|1p3H=rg5g
znPAWaNX4RYTz|R!BUs^@WBqG$@V14;++gIx)z~RoEVVspvUR~GMpO6=pm3o+C@k9x
zEou<<!|@df!5Uezc=-k7@O+VhGbqqRt>J9Q_|g(dF>m_oBC0U+!MXBCf9I}lwt)p;
z9<WjQfeqOR47aKYuAP4fGTlVIzKwETckh+~V)Sc~n6$i}k#vn$DHPE!)6_OyqNE)o
zUvHTekN^Rp+2DN&t<G04{%`Bct)_gqLZh7Q2AKvvT#|skosJ3s-!boZ=9Lk%pmxUq
zgL9QKnr(@nhsy$#o$^Lnh5{{&NjyQWOL8Pr(I4M%2n(=&5YMe;Md8a~Gz8JTdK{QL
zI^mrf0mB}8zAz@$c&#S4eMp3l`tZP7Z(9VZ-5@6;>DvJ(HY90^jlnFcaLYZri{RRM
zdv|b~F}KDs<jy+m1hqpBH1uA9E&Sb^fwb6}d8ECnAnIOdUQ$q8uxw1(zBn0e((m4$
zEGaVrTNk4bfs)8cB=q{Fqo@VUNq;3qLABAxC2%&9jeH>1G>vAo4-7v7x}*BE=*v2Z
z%;6G1M)RCe>)&VkPztJ=F6qN@hLp9STdKa;)i~^m5tb0Zba4~T6~WB`J`B3L2zz0L
zQinMG@}UVi9Oa}ECDlcut>Sndwjo5a&cJ0zLsB7%&g#obX;0m;M@Zhr7$a3OwUkwm
z8W?cEof<bG&4M2OkL4w^J7yAb1yqe7S2{>RAsINElK{szJljy#nJ}($3rKL9$A)SO
zxp|uQIu6B|5>B@St&8p3RfXn|I`UrY>?({qV4Wv#?qv{wofLK85k^Uw49V4C&Xk&Y
zpN=5H=pOw25{EZYMRlfs9q^CcqD4MCSJNDU{Lyh*`>?WtQoH~7y@<)dGE3W9GyzCE
z-nb<^*{!Y^JAZrZ#Gzyca(7^|9aTAg^;4^CUf$HeL={tJujrCXq4^>?$gB2(7Da>1
zVHa0-^5T62*8MOaxI7;S+yia9Vq`$th%?+@5|<VwW9Za|jZs9S;P}jc9mybDZ)7A#
zyW7B97ZVkMKyYMs&5CXat{?^OmDjHtd33P(-j0;Jj&K1N`SIEzYoH}}2t0Mi(OLwb
zf+F1(`^pEcwf*h~h}RY6RjKLHjuf$*3aWSSQJ0k#YIIvPoFW;!DR;S6<ww&JtE1Y@
zJz>P;0q2C9Hbx7BZhws@N_y6YKHNuY@QMpVB!<WLnj3MvWCDS5S@_8AB}Y^!^_?~9
zkc7!6P_Y9A=NlAPfGr!X5^mSb7qJ>R(aYvJ&#jyZN(NDh+>8QHaEM^n-SO<MNWjv4
zYlOQ+{7?Q>Sn#SCP21?AQRp9T4<@OWx(U=1E@FzRRR9Wet-~V&v3MyZawfF-59@$z
z(f7r&l^t-N{7at#$-xlOR-BS4fqG<E6GvKI<YE;Xm-+{kk8f@$L84r@DTD}X<RA?T
zd?Xx$)*ypvDBkTN%{=;6Kc(by@Loa7?vAI_#5oVkYa2xGVm76^-xC2@eqt*Nau)1~
zsL58U-Q|>lM9TjrWJ+b|J%RFy@5UbhPOLf81NHCgaf_IDL`Jz2)O6?coToENRDE!~
zd~P$W2TWiiQIgtsP1S!7W(8xYSt%O-#dyu1$>uWgPtRhC#DXL!2ND>K^pVqK7(KL`
zepRtM_-Lj|XNyw5el*94;0MPCEg>5~T}_BVq_Yw`WRZ}806;wyXQ*h4h2CqZq9#*g
zn5Mav4l|Hzd&%s;N#TzF`t!EE8(}+t6||hmzwekwg#&yWR_D*XKnfAb{Ci>8R5-DL
zpmf4)*2GW)OhFv5?p^`rRRp;gWXvt3Ba8C#Xz0BV4TJNG&IA!nJuP6^sE*bbOtquq
zp(^d$Df4~3!xoe}nt;rEpZco)9GJ^?vuP&-$PuXCA5lA>vy&aA>lX_D8?@0EfqM3O
zBG~Q}K-ZI5MNoCR?p|hpPa?|D>{c(hj6OggGu*C_2K9tW_YY!yNSwU;^H9kEFyOG^
zai>K7C9}lL#OZhP`>_gAJYf~=h1q{^lwBa<)n7GPFp;tXcOE0|IsUM_PaBC#$5{f*
zS}=8CLEnUl3uPkAxkgd8PQaTxaF)VQ==t0v3t$gj!vyfaqWJ?Sx%w;Q)if+Pkg2!r
z$Mk)8{L)~i+hiU!4C<CyW9ibxYfxa!1XChWg57ycZL72(_TU*be=!J~_xo7|#+@^P
zeUY@tJk4m=4F;QwiAzmDN7fgD4_quA14CyrJX|d3NGj@*3M1D+{CE2n^_s`;D%FBV
z6h5&3pzQOE4+D}8{vP-6Kj~*&GbhNb4zyEPfg8jPI9oF-3(#1^Mrn1&o=n)3Vk{kJ
z$b`Mu|JZV8(1rd##?GldlxSPiv2EM7ZQHhO+g!12+qUgw#aOY;PCtEh&c)tc7gc|t
zYSx_Nd&fJ1J33I~;t7+qQM<?iY`1ot+{vpRdc5*&AhbaeS??tNR=}u9K>BGjG7U05
z1eUG|NzB&FL4yK3h7W9gU%@|&Z28v#PMo8N+z%aH0i@;p+mezKBo<pa2_Ja90s>-8
zz0Td3+;cWe4Ub=kHi&Y^!PEne+lw3R$JH<`E)Ti#yGDvs848EMqkrq|Z@#vd5fW=j
z$v<^A>b#4)T#08tW_EZ)Q<FTS;7O1VJ%9oJw0tjTK!6S|I2Nw1SQMspfa^&#{E4S}
zsO3w2j*6LC|LSu=4rob6-byWB#qvO7fR(YRL#AUN1}N)QTfK=8ket5DG~*w9^tG%7
z#kI3AtA2<Dgpm_O_A=fBY(Wt*sf}F_3XL=z3$j~H94@CdLtaJ9Uja~DhLCNE^Omr4
zH_CONVFz5Ot_K>Lpy;4N^?>$x+&uCY>_^lg>DNM3h1j(B@fp<Rrz6Lgflf?Q8`*Rw
z`X{bjxMAbTohx4iI9ziIWgVNb<{54BQ`O@prrt0FS97_{^);o~tRs_pQ#j(pk+&<>
zL>eZth2gp^+yAB(+^Cge*HjiNoDB+<CVr0_1CP!<Q0VBiTIL6T6}&M%AA?)#$^CXl
zaD^SMCmOu*?<}ajAsc=-_9J>r)8zRy278|jTU1X46R*8!ETsdy+G_sWjH$f^YszH+
zi48h6AA6?<6_()9Qo8xvdLS+!l@UycH0+VU!5Sk1wW!9O@nIV$JvI&_K<0aOK%W`)
zCl7qA&E>q_`*C@JOg%yM_3Y}{f<wbEf-h^y)4gGAd_WIP#&RCq6~k<c#{^KVt5Xu9
z#nN*dKMt$Z>m~>X9Jms*tA4kkk-p?-DKz2e&ZOZJ#_YL)A4|^_Bd}pTm}&mV6*?)S
zS=p&zV$5k-!N=?H<?D^<odtKcu-3NW92zUY<EO=iSF)Q~9rbdw7W=2m4NT81CtZ)j
zGUxFTYOMIsC;sTV;`Ya+6(<gRR9|cjIr)qM%ayTUpGhR3bS*+k5sfZ~@8Ztw>jD&G
zgt&{*{AbgwKTpxWS7S%6j^GK(O_<Jb`?Gc3f%b#`nmMfddYKP%FSW0J?#QhnTZi7h
z5ZfjbO7Ecnq>?9nEvz1H@~kn4<<Y<>D0UHq94~rFeZl3<?+t&!rZHQ*$eQW#bTWQf
zG)DKqHtSJ)ix#Zp-W>s3yN)^(G^aN88M&ZH77KFE*Pr8Bfmj)#MY4|CCzJift;}l!
z!oP!N(^Gf9T%51$Y+wE$=h%YjG+r!E{xH`V#P9&SZ`rg;l1I52QF+xjo9(7gly%pY
zMqKfS3u5B%ue?64I_`Yi4TM@(*hB3UoCD^zNHYUpTJRYW5_G$G9d$D=t0Y!LHURzD
zja(GZ@hX|dd)!VeYXfh&i^7&zPutm|F=I|^t|&e^z8n}tCmPKPuh8nXXqfT+{ghyy
z7yi)SMfg8V2Yv`+*Z~;~SXEysc71Y3JAnO4x}<XI=UkS*pvHmt!Yl4)6d!Ei=_IZL
z>V*k!eyZvog-y(rdsv;vM}zq5G7c_x<?@NPdEU-!X;OzU46Zx=m7Jh@zSG255jc_L
zb{u-s)>}~A!O9>F`-|gSD7{8}rGdXulIElRg2Dd!@s;6f8MI_C;_G+GzqYjY>L)Dr
zp*LB7Mi2Nbg5%+Y_9AB9QlZAd9i`}Afg0(R?q?lGX#{ULKY6h&C0lmNFL;7_&hOiD
zj2~JR47=$8#wT%qYEFP%`+r~Vhz1x+z>o3%;JD(R75j*!=MA2|mvX9LvaP@~6{5Q@
zW9q~()lK_G5Divml`GA+XD>8;!P;c50igsrj6b&^z0%jaNbSk=K1Jt_SdPc`^N~}2
z!D<(Uqe+Zirv-p!>&}Z#tEW$3zD$p5%F#F4=1KB-@}BFIU(_IvH#!)3oo=<y*uBYX
zu5m^-&f%6H_-qa>qWrDnhNSlWoSWY2KvoU@8<rm&2*iPSu%k0GBzi!(L{n)`E4SMY
z3-HMA;vv0~*NKzzYxvyl?rBW_WQ<rcKM`G>`bFex+n-GWX)96GP5$v?-?baPQkl5|
z8#}Fr>;`=7R@g61Sa7_4mZ`JLTJNrdm;g=?+A!#($6}0ap!du$k>3aIKe@6*kCt*U
zr^^sqWgp-nxzT#%pp*AZe7bSvOcRK)m1*mVs}b5Yo%FPwU~P1>`B_akhB)E|-S{|h
zWA8CFT?BsKt?B!V!)L7>Yh}3msJ|LfJ+F^QTq<An@|)H!T$;7_kMP5h6Z?tY`BQgf
z?lcDyc>Pn?;AB;TX0a`zIv)X~&gWWhl*N{#AS`bHNjD-M?7NxHYUpw6ceE$0Z#vw*
zyY}g3KmBfqV<zc)k>9YBytd1(K1UH{rtraNUow=9dZ1#RZxuQ{jsqGi$g*>?=f6!Q
z%x21NaP1C!hyrQlYUFIgl=eDdd)mOrPi=pD59C!EFguW{G?45l9OAy0Tdn$g8ORP<
z6!7_Ifj9H{u4Z2uZ)7^g24*r2W1a*NZ6q~PRrt@<Ht118aQxy!*+IS8Z7_@EzAA_r
z-@dJy1qt-8d$1k`&YKuL<^Urr$8Yf4gv%%8YUMp^Fq**JM+=9#sm&{${Nts3#Y4oJ
ze3GoATY9zQ>2e%*EnD%{i7_!9#6K^0X@K?VBp2xd25eZ>nxtGxijB%ENN$;W<Mm`+
zs-v_z+if&?!oX6gdD)*^ud?cOJ=f>+!}TLewUnp6TTAUM!7*$Ft*Rbnzju?HYj_lj
zXtQyfB+eP<hg&volgHV8edRdP=SHRQb24D;ZwDXl!W3Q#0t~dv<6|Me$9)9+)`Z$I
zZC9(5*Z&OI@m#b#f%JySxjb>rsrs7A63q!nE-oiC;GCIG0T6RH>f~P>_0R0`6&vUD
z>XGhf2VqieB8Ei{(%O?|@@CP_c!m}))xs<Q3b*o*deNc7V`JF=<#sqdVPtsAW$vYF
zFHvA)ezT8k`uQ(`O=t{0TKsHyp7L(vm*d)fF;6y~B#ALki)%)46@F8aBpYK{;ie+!
zAft`&1m$L6V4#80!jT_EN~=27FiJJA2z?q_xv}X_E&Gs^)vjqA8JARNG`Y7FNnS$&
zk#bG7LNyeN5(q0yAQ41I)hAeY)F6U(9r$J&Pc&ta<N{&RtTC*Tv9BFp;2jxsKx0b3
z`yOhFNk!`Hq(r^y9SYQ^`N0AWM_PZ}yd%vPY>!--i7bkK+^FFZXcNw@P2s6?F*<q@
zC|clafbg6Y$X{BpycmZCXBprFXF?WUD)UTC$5{^TqR2Q4$=Nd+jNMqGPSd0-$8a$U
z^)J7lCDoq?)_Q~vktn2)Fkk{Rs))A$@M5)kkp2+RuDc)|rCR<XQhhTCjS2Nt@b7=2
z-?u^2Yni0pjX6an6Pa*qc%v0D!i2q4bp;_c6)-9F0(mG39d8sHOzO2P&cD^SG&iWx
zM2?<0#w7An9ucX)osJl`2hyq5Gub+K4xG--#+Izh??)3E`Mjc!#2R&ubF`1@hyT_2
zR37H<it#ISxdQ#qJcYA^sp)_9xu~k>#xF4-_`K9<+<`2zx)TfopXa!!Q<b~uR9Oph
z5#s$dNy5<KUYC=8dy2t*xu9(5;r_jzZOy3(?X*)@w7oiixKIb(r%_`m>fwu5HYMB2
z;&g4d#WEA)_ovdz-i$c4q3#%3aj|b$OOCkj4h?y%G~M0#m*}&^Fv(PLSGC-7<Ew1N
zmDt(nsp+<Rp@*ohxluP|6;akXlfPMX<#NrVS8TpXhAUNbrMdvSqHec<GlOukAZYWF
z$hDP&+G3M*tE9NpZbLOR@24rnsY!^}Uv$lN0S+i{sZu2rn;fICW2sj1Hz}HK-3L3D
z3@bWQx6f_`S~;GX<!b~cw7X2jZ|;hK>`w`b5TMIoAf5tADyPCMhxq)Wo7R(NEn`Y5
zUnW^dV2_j5E_f>dB4gf{n3WKu_yD>*g}F;uQ<$Eg8D@h+VweDWpcNIn;FK^K%Dt7r
zOk<ai+RerkHz_z-Frla^*id?q3a)r5i-HmrNSKrYRb+qbt5g=D)iMl@08s_3e=xS+
zL9`rcy>UTKA_OfGwJVx+tb5aUGmth6g?voUyusb9fK6dugIx4p0iF(%$)oKp>+&@N
zKq|Og%DrW~B*?TNyC1d%gs62}lCJwd8lMN|gnXv>I4zkx0_VkY@nKgvp9Hl@l@}jB
zfN+4Psi&eD@$De0@joygCABdoJhd^TcW6(0YdeNdYZg9;eXcKHKF9do*cO@;o1x9V
z$)#qkUM=O>2E3xMSgfW_&Mh*NQOC@9^?&6Ojdo>=wP5^+mgB56c?L#UWzr3)$2W)D
z>C@=+b4_#lYC<wLZSIwpz&%|Z9hf~`o*#r6=5cH09X`dOO?~qu+b<N?JeguS|I+u)
zGI+ae2mMt@^{8Qr*ip?8XAvG9MCuMts&HP<Wd$FNyf?>rF|i9-`*G!EYxV@bwVAHL
zyF<OVEmL+faJ}TlF^P#q>~ZZCBi%s0jWmS3vSmx<rznqk?Y-5-f`_p?ua{hkeu6!4
z+6Y~~51*dw+NkdjwKdjs;5pYi;tOH1ebGs2KM216*JudeW$B9U-_MQgR~ta^9}sZ|
zYt#Q4+0Ur&{$GO0@1MToxE@lz<E9-&6anjAu^#rcBn&mS8jP@@bn}QB5o=<jb-usP
zjf7O8F7fsd-m^(0*G~M+buV|HrOUv2meTD3=wJEk(iqmf5xCg`%e0hfL2QedzYgR9
zv)Dz>hBYeI4qED8E0;rGLp)tG7+t-Ku?nkd#_hdCy2j6IPb;33m1du9{>fG)vak<l
z+iPu0qCCqr+)h-e)h47Ub)r0$9Gc*Et3xBkOfEbSoI}uO#cJJA<Q+CrhMjW<(b9PQ
zMwfT0mMY5?wrNVRb3@<-tN)L63h2%;V~^f?JG>g=HI6Si?GMmdV^tRoFRmX;XeI8~
z<{s||D(Tm@B91`@)rM+A6&eV`uF!@K$pl?Il_G>avu{S4)Kn_Fg~~50+Gzm4K_)wo
z6^p%v=93_|I&~Ue&#nywN6?yD1F~{K@fVM@ks&HQr!KXTVU&VyMeNX#gn`NdtiY0j
zn{*UUL?MDIv+8W-uK*7P6P+7W6y9i7xR1RBM_Y>ba}q6?_~Kpd;*7ih0E97pNPbZS
zo5F<wibz+$ua2pu#JNE5w2PvkRrgTULYoFWSJ`~>ibnif+ij;5h#xvRQ(J)Im|qxL
z%JLU#eX??}nz=e*(|?peX*Y??z-Cvy&b(@Y*ak2u8u2sAZgumIg1{f1LzUj0lytlv
zp%J|TRKSIcsyC7;gKs~^iBbm5?vF1!ub=eTfhZo4GJ{ptkF)5eyI<88fPLCB$ZpNR
z1){<42<h0xA29t|H{5!XB~>VKkm_5;D&Ka^5bWo@(&vv^N$vAiDh2@-?ow*sv%6vo
z4RZf<W}%WP`Dq=aegDMHWNJ)hlcGvD5KSg<1kcG-VH$0I*moJwGCJQ}37hXN+2<u|
z{}_R;MecFzVXUWwP7?KQE$d~iRR=0xqPh1tP8XZ<0KN~x7QE$30V{4vx@;GN{m@mY
zbM=e*oTdIliCY(2@Tkad&k;%xUxrrO%&1FnP~vn0(B}dMeGZ<vQ2Lr<xKjUV{@TzF
zjNvqHBo1EUxgZpMwPF_fit^ezC`11pc?4PN>?M&Uv`(YblYzUA92w9G4Q0n_fJNby
z{^$UtCmhSc0N23U1CM&};tlyRiyiGXs43!1-g;8DbVR9R!#f&KR9SZ5mqi3II^)pi
z8C>k62xFDk1eq7CnRv@lgfpRP5ABYd8E>)|oZh+IG+j0DxP42D?G@q`WcHx4t1ts3
zY6pYR&`Btt<pezzu=okk%G6cMgOI;3<c?W7q)P!LNW04V;h~`o^L*U=Y^cNZWf&pD
zpDj|~OG*y~6s;VkKE7ywr#M>``}Pfw9Y}&RH$fu3&&qo_s<l$WzlGP;1`U8j)lG%B
zz_RA%pHeH4trOH2lcFAD>Ov?)5Ft3<|LNXd^}<x+ov{PW)o(NaQ}1EZQSZw8@@oMZ
zO+3tfiLrb+JF(}<I+A)7W9nbDD-|PWC>0wd$S%g{F@YtB5ZcUOunKMyO#6WxK-22K
zUZ=RLH0q-V3LyRk`x@@KvuqIo7f%^Oy%Xr5cluim;ife}#QQV;U`M&t6jFRn3tJ=4
zKzdaR&y5?47js)i>n#NZ<1nm5bMmuEfT(5lsBHaWL7r*b?zoHTqvgF95<ti|_OLI%
zgcANh<85H$)`Avwy~N-b*0iCq!^@WE{IS`Wufdpo2;206*7tO7k9UHP)^@YQ&*WB=
zm6LF>I572ZPCuv5=ldYVz6{)jcgl=`{T;a$jKNa30`~hQ-Qa=dG$<4lPPpj~hc}5c
zEQ)rE3ag%OK_OJ$K`NYF@fPGCyU#rBvd_N>9L`|R&4-V;SE0i=F@%!l#O%`o{3=E9
zWr3eyFTDvy9I~P6mrS!Z_9br}*8|P<y!<~Rnp13-f#VQxh%`CYm&YR`Ze6$|)3ME(
z`XSutjB$!*=acf=I8_JO|FZ?1t>LXp8VCTO=ofA!{tthJUzE$)(%$aBv0S#w19n>s
zFg+L45xHyzu8T(N1s2fF6$_Z-2L!Vv6mEZP$yUv@gG9!rcH^CnmMx$`3JCc4?h@wQ
z#nOcSs!~i*Yw&(Xg>vM(O0_vaj#j1;u&$eJAdPyjTsPa2+`Z{!^i(gprkV)x>{yL*
ztH-~3-@SWyYZ}^K`@@T49uN-mh~OU34I}D@Mc|CR<Q~{GNUm;?=t4HsBnJzz$J$8m
z8UL#XSuF6~UNEl-p7te+h@PE36POgbW>Ft-=c5<|6N441o@-9bOZ5KrPsA^PP-9YD
zc)cI66YNs_lnXgD3jTq^L8@?r$Gf~?{n1=sak?q>0Y7;-D{MmJr!$3`0d7tXVW`0@
z%Xj~GpUXYYt-6#fz#Pc-XlKCg@JH=zc7T$-8O}HK>Q<u0iTdi!c@&rVJ}9PAzUhZx
zZf?b4v5zgzB$J*qul5l2<uloaPndxCV8yvHs>wY<2hD$%CfDw8S{v*O43<8j>~5f`
z|07t>o%Q2)4&%TSr%)WZIcy?sE9nFDh?r52cfCb(2|GUR;?oqF=XVFHQNheYrLU+1
zZ{8ez-9L5yes%^rL)#~O8VEeD%4SzYo_ch)-u?kF+)dzAnQj$O_6b-Q+X=J+NMT>8
z0d#*)!~k@C;sEq*LE`v%tNZQffgo;G;=Mi~*t@W=GGi;!EuaE*71-%OVg{5%-J~R(
zWi*<xi|6`4%M2P1X2uZiGVUpr5+@VY9a!i!G?K_;TTzq0Gd8O)z9?pRmR)%{R%U|Y
zzp>Wthb9_s<o_~2zOBIjBl(4|+i?H$duncK_y4tl(X^Gn;6nPo);D}YmiQyAy|*L!
zOF?@9>grXdHgSn}Q6G`nW${X8$0Fx1e%*01w<4F(hNpcsN(f-Zk3GCk$9%A=BO2?c
zDT(O%v3KJ#w*JxlR<3>J3n$l%P;wf0Ao3d|*C?MT<G;QhTe_e$HZP+}%UGQV$jjOM
z0)CEfTKX!HxgY2|Ra7O-8;hJ4p~_NsRxS47>HNAdVrj5<E?`9;8T5lW^r3|Q5HySC
zNaBgJ+7v1tPtn*)BhoA<qD!L;Cl`kxs^~tt^}Z)boLneu9v||fIhKZumm7&*c=U1N
z^=t3#Gya`h#rxz@zNliNXiK`yrmVo+QTAm}T6Zpq_KARZpj7%dBfP;8(VPGaL*iB{
zI`pVw`IZ0HLi^eHvX{!)Lz(W3MUTpBxdZ0VlZKcG_Vo!zZ_H$tD#ZbU$Gr0K)IfdI
z1u`>&NC@)}wSuaanDtmvUBA44U>}$TJb`lz3$A?|aREg_aura|1#{*0RC*t%Z-n$5
z)bM;Il@P)Y{CaLB5Kb;;Zo_1II%QQmulP(Lz2mad;^4-a2S?8R-HHhZ?%n>;{npj#
zwISD@R@gA{>}xFaX3q6>Kl(gawkiS;82dO4jhd(B^5fs>Ji_^yvnn3>`9d@Q{_u^c
zwSw_^Tb+=CY3clon%C2t!?92reAqXeP!R4e3ol_(Ge{=bG#v{B>cq}nq$Www(HL|!
z$JRX{(~=Zi4id1)Dw=QkP&PoNTIq<E5xR&R5+0O2Q+`vzC=tj{Ld8AB87aUpBp*Ff
z6Sjm~p;=SF(LY&;=5gD=b!u2JIB5+MMzKsI2#U_Rl9+-rj?=`{M3RAs<L3R6spV8m
zu}3;8k`w&{27@8d<cQ=Ze>U?ogRqO1McSW|^eU+$`-Pc8mMofp;y{@%Hroua$uXv?
zG?BuOR?HxmMTj}YWlD#5{TOkL4D@wu(+F!^CafR{ps+qM9mv5m2K@H;5@9(Cqv&@6
zASD8usi+mqM~<b_Rk-}D3Wmsf1yv-H$h4mt8;M+kRq~HFDmKhXgzt=PvkOmVy-<!S
z`yt{;Oyohh%<J+5Qw41aU^KH&B1K>dY2aQ}j84Be-v{W$-HRp=1Q!jD0S*Wi=hFAc
zeuyCp(wn>0iP=+V)XQVKv(-!}p<_gJf#43e*aZ5v++&HKS9w4WY#(f)uReiH8@wwQ
zuh5q2mUZ}$DJX(=OTz%wN>NFgCWyd=QA={mw3T72YtfF^KF3x+!Br4*lY|D591uO7
z-+yGG6t3JxP+}UCP0?CRo2ML6=b=p&>A)spR>wUIjDchGGSEec6b+`aE((ef0R#ep
z1!@KxsU(s!ApBQd{k<)+_>7qI`s<YlMp^PhB9las3Q*NIAw}-8J!ge}_#=&0*r?4A
zq<r8vxN>%?83%+e6Q#vs5^F7W050@Yjf&DJn>|3L1V8y^3AW`MsYZT)i|GA;y#8S7
z8@-7Z=+uk5^0j&=T?^hgNYfwSg3=|?d&YWrph(&BLP}E&)rPMwF!WEKMD9U0!<74A
zlqsyM45Z$Rw#PRESEa%lIn8gJ4M6W5hE~YMi9H+^6@A-de~(cy;>qP#_yuryrXdo~
z#}r;CndwMR>1#L9Uao|j>arCIp_SYt-d^e6Be@b&-%ftbj+)!3DvM5yjNY~~bwSig
zHWX+cs!tCU*}Wi?0Hb9wSWuTB${%?a2#AG*PT>D*U#KHbXS5JHK}GXs1F|E_)3&oX
z;^iJWr2Lk;OTtnWqt0}H@qh;`fmap<ga9?fM)a!E0&@66E&|bkZOw&H$?S<nGmRcv
z=>)92eF*GTQia(QiVO$muU~e)5gQjpcxpq+!)1qPL?6Nc1U8J7u;R1{r`@C%pasf1
z*q}H6uN<9@Z^EPn(ZA?{{Q&+7LPU0%Ba0YCtDadF7)yghi?I(YsJ$Lr`s{=c9>a|x
z695c>)V;@O+TmZfLck<WG>6NZ>K(}hn;q7`_bMo<+djR669k#HNNI+RG}T0Xq{o4`
zkpEQ(h*Q=O%uW8NlQs`aUso=l1{R9k+P0N>H+<X$NR~LSkR?x`eyF1vyc7P{v=;nv
z9Pzn_mtl*zObTPmCT`=Oh2mhtZO7JAo7b;<zxR1=j`i}?p)P28f^&*?6$hjR?c;3$
z=o-`*@Q_6}4*<^;Ut4nnb*dK(keVzMBvKi0lrU(M>(R<;RW`!ile@x3N8`^3*h>?Z
z?si<z=A=%Zt~rMVeVQeTFe;$=W}*80ibyaWv=NT@8LA=Irj0K!JqBNE>M*Nm;fp)S
z8+@?ewZ^%;L6!s%+q>LQd$^NC1XV8h!qTuflnt8bRP*4qB%|ap$^1KRoD51}4SDTt
zbq%!l^y6qD3|lscP@n)j=(FDcF{=y~(U!s_Q;#tV^`5dcF#`N%fa1em0n!(aP`HR=
z**m~kQy|O1-#1Vl7BT?*+HS(|w%2Y+4&(4I<p`(U@l~F^hdr>!(1|MhDd<?Z?<+Ke
z2Z{@4-e|Op!4gD>c^%U8X2`$a`&P(q_!eY*F!1b8@-iR2sF;x-zjthFm!P(kt{pnS
zE8m`x9%{#;Ql0tR%g%!0i+$f^1g#|Ua6%$k3!peuISWEO-9N{C570?X=Pb`3hQ@B{
zB(YZM{4H6EJLp@YQYa!UlV>1s8W{a^Kr2QYn^2fUmPl!s?F<%la-t|BZ`wva^(BCT
zUmxq5J2B4%<tSQX#zT6n&RX;a(W|cqcduXt{l#QbM%Zc=sBDaO@&f>t@sgh9ij|i;
z&UhFdV#C_3>E!yjjQBN_-9wDs+#}%7Lh>VHQr_xYV}NI}dny22<->rpq3pS@K@a|{
zkX<eC-5jLjgQ`6i;?Y9Hiu;;~we5E}sAC%0MH6(+hx{o2Yg23<uEKk+o@-ke@F4cJ
za~e)B9=aTSI+~Nxkw1c~^MSw}k0pKeS;d>D@a9Ql5!wu-7Wg(AvySg1lzQsReG!|5
z%P!Xd#@E$T=Y`dUgiYJNw)d%g)gJT-S!(W0RMnh^(HXZ<#~FBEg<s#BA-ZGoe&?Gt
zEnAmXI_&-TO}OZb`q6TR7p{r+ay)jwq{Ya#6~Nzv&RlkdV#U7$<6SEFH^B#aD%e&5
zHF0<%eT1dk0)@THTw7eupbvvzN8yxlMq#eD$C=+xnnrU3efMDnHrpoNmzroQ@G~^0
zohNn<0AGT>mv3LMV@L1z=Yb8*DRogE4aH{P81H@8jIro;|JoIn>tU(W>l~gjgs`~=
zU^C^5Qwi`^XR<gzpbd7@L>qk<QqoC#gXy_b>zlA0zJ*nJP^r&p1&qap0wGh-KMz1z
zAy8!k8v1WI&!zdNhMf9=^!x>pg1DwzzlYCG-hEuyaXTFQn?Jf&t`F6*NxL|8Q%!5-
zdwo3p{NSpEfmLaG(|Pr)@dg@YkULi(suI7@|K~v|ry*2l=~qAAivFMV!%ohI|Lu@8
zqoHk&-G%t;A17E0Ckv=vm%}>3hy&QzIDu#|#jR0hp@<6FEFr<G8^21l77g(CF%LW1
z@tGL#ti-SG`NKSvVc(mvAzw0q`O%z0#J~S=<~pch3d(;l<uZA56quGWQQRVB-_BfW
zv0A$O?{}0<DwCU|om52)E!pP*4x9XXAKh$xYa<2uPpNdtTIuGUsM8mNyd6Ft`PA*;
z@^uEg)I$qZF&Z~!ZZc5pUg2hQR-RUH{FbQDX3|o8PL{shR@PFVF9bX0I0Y2xX3I>H
znXu2|^<;@{-Hzy#Gv#1O62DISGT0^58h6r~C~ljXcE+~o$3@EGm1`GhP(!(T=w$EY
zkbfp=PuZ1G1-q1Vty6pa!h3dc+SJB@n;WzFr5m+yv4@!(cfkXOsipDXtMs8p;JJ_!
zYRHSnp6cxB{n4wE<xf48$>mf-09tWOJ8IQXB<Z3OH?$C{Snd91Mv81~a`Jkq4KdqT
zEJJ+fl<^d0vFM<(vlJ9?B$8|`)WjmV{abL;9cXgMOeOP`f?-{AovEJcbP8#Q@P6^s
zt(pqx#XzdpS(QZXjFsD_SFeokW8-9PZ<i$X$*yU??E1|Lp^l+;$356LxcTpi0OD8g
zb_Ka>4-qb7XdYVf*Fcd5z}P*-S6uhiFcpA&<UPPw<QVYw;Z!DN>*KG16gq44%OZ(>
zvuQZH)9xKdgiK4Wu|2v4bh0$g(4vdZ9w+TY330xGTe@y&Ko%UF%+;!0(-SO$nf}3Y
z4g%1cVsRbM3#Se=SHvss!%0Gc>P7^YCb(P@=iqSl!AbZVO@>8m(tEOlQzHi|A|qP>
zQdD|?0e}H)T%HAZ4FEvlY@tSJIw<S*aVAZmox;BUftn4X>rm_Q)oLYb1`vo5Z0^1e
z*+ocTk9^7P2+_EA%W(rk?4|^N6)zIIk)E-9P&hyhh}ZyRymweCBZm(UOU`T3{18@w
zg>E48K}SZx)szjxm>S@<C@T1>mCVLJpfrIpwmQV<pX?8eB8az4#Tg<M<MrKt)ez((
zj1&QI8TR6Ed%}cWY;PFYjD58wXLkZb``1*-#y)Qh$V|&$KuZ|VB?3*PAn*b%4zfYC
zD1}eamROFX_0yJE_Lq*+?AInf*>Y|Xq+sq;X%y<@cVxgCz9PMi6}Z2*)$4gVFzmXn
zVXJ;3{6nwr)q_z4aYW5mechY(>~@^l1$`|{2zsNP6}SgzVIM`nS!inUM`3!94v~r0
z7H<8Kxb)ZYg=GC9jz0^uC-6H(e;<AL^#)6Q?(n?^%8Jdlqha%Za<&tf<}HzBQ!AXH
zV_Fie9|K>Khd$N%|1Rl`Qf$TJ0TWnIqz1BZzjF&rcXdSUIVb8UqXC^kd%=hR_QQID
z9&(pksQeS=wSEPBP;zJL;>=>ZM5HlB1`s8GL2@HQ(0XwhW=lpVo{m}pB)Z}aq|O82
zPK^~~f(lCv;BKm!&l0~M3r5&iD~c92#@v8^{7X;^T5}~7zR5IN&fUN>$nwbCT`V*X
zUL#gkrI^`LOD-NJ6h;m~UP1-#8-zRGVGqn$MvywtVM=;qS`Tss3+h5Z$_HlL31m#q
ziNeXDr6?YASAU4<*^7N8U1XliA(R5X1xEou6mVrUrpQZIV3*pkQecT8GFOow)GyJ0
zh91$BZb=&(g^_u!Rx*H<0Ke=--dDW#(ODD<-^`GQnCnDb2X2~d*KO*q$Q|6A774T$
z@mRB(6C}PZZtcCcYN*fe^*E1TqTt@>O35m9CE4*A7z@vHcAf2lg(nqHuCpQs730~-
zsbCy5Enu$~43A1sv3lOess$ij@E5R~&A!{6DX;_kgippWzYG_NTxB$6h$V2gYE|>}
zk*XsVwO@SH#8Pv%3McT;N`^^-Qjy{!5=FW)l_`Ekmm!`eU#a8XRQd5;*(R)jm8QKN
zy%J#^F51XAK&Xw|C?sY4dUGFLTYw*jFwzBZX&SPC+M`sT*Ej}$e^>P0l&x%8gU0+P
zeTVGR`aWkT1a#u_VX030iFWlT`+1}-x@zNCIV#*9D`yVibPnf3^H{#el>X^rNOKg$
zVn~N8D-x+lk5HJ2<y^}&rNQj#)h6|x@eOXm|A;wzR?(Uos@h{}>V-vtsC#P@gmhyh
z4E6}`pg-cka2O&-weOPPyLtFdQzd=7B2X^+WP#4JNRkEI<s?^!1JNAet%!xiplEv<
zoz~C#;MIz|NQdHt*stzr=S736Q{2G-qCQx9-iYd6+He{-Cj}|4F|7~kl@G|aPK+<o
z03v*NxHw{?gR4K;l=O(N^zts=eT?|^=PtRAEWXkWOg3q^m-J!kXeM1h^IpJGyaGbp
zByg|ci;;!og131pRf^98Ym1yq@RelGJ6*31>k`w2IaYjgB2!>_R*|nI$zQGxT|Iew
z&h6I#tT>CXSpazas0kAkilPVPzxW8i{^|;RE$L>1{qaQRVw^&?ACs5#C|a?e%ty)X
z6NEWVwq|r66n@JsfHC23<eqKe9Ys(lp}65QeoNYS=2L(0k{mocaQRSZWR>m%FB0Wf
zXS-CQ$iee3rO+wfrH5i2UC1A!9c~V@>&>{45j5|l7rh1U;?ejE&<}mLH)Ig0&zsP`
zH5f%k^eK)f8~aN=zq>OC>ny-{?+Ldc+w~NYe>%UpGUHJ#ovVTHZeqz=GCyxNP`)#H
zT!Cs6I{T>a%BjA(^jHG-v{^Sx&=LrFQ`Ku|J>^Fv>|q^ZwCQh@M@K>@lzYteV3*kV
z@yx-8)AR9~_UIpCs+J8dKQA929~Up5`#`7<SPpL4y4OOcSJfza>-t6@vTUF{8pq&c
zY02XFoavNF0uF)9meI;RE+nWQs0^ulb;Et?eDd$@WrtN@N1poF8`nsGA!1NLvE`xa
zi0ZXJGJg<B=3f!Hvti<ffD)2O%Izm`N;hw(<0pC4$9t<b<pmWaaXG9mbS&p~dbe+0
z4g*>mD%kA5a@+QC4r{hhSpd!d@cwTb)c_`>ZXO{3K&thBjv75!894vjW~qhO(s^sO
zW%s78eaJ83k%~F7iA7a+MuF+jA(z%uhSRmwvj`ASK?DSdhRz@(=lj*YwF@vmO(s*0
zj3}Th$G7L}qjom={ew)tk=d8mn^paM$i2*eMgCEBr+K7PB8hEH)6mVdaZNJCQu(jC
zsB2wUD@C;14H&(DN3Um(4oym@kJ`=sWct03KHty=-7-IY9`DA{@%6#a>0F`K+Kd{1
zUf<i?#aq>n&Yb<R=ynVE4$slYZ7feuW-K4hPkZ@eC&dHR#))6YH*pfXsM2J-tP$I@
zXWKii{8rbVqM=M0`+gD^YZp<pxCs6fyiVOt3)VO7xfI^XRxw3z<aK9hy>g4>l34)c
zhh++ApPOz|RqR(NeavT$-TfmV->Pa`iue}S#pG;z0d+virv|XrgV`EN%C?IVTI5%A
zC7{;5`<6@T6aP|U0r|Ii61cd0V~pNKamP#iYtmlEgtivFM>455vcKcl>jIjEM65#)
zADVk4V}Kn$%0zul)~Ejc){iUe1w7e1CZ9|ejv)5p*osW+(g#Ka{mczU`zCPv3_k}3
zpgSzZp49ipTy^`L?1w*It{=f?X!MhM$XLG<L&^eJKbC^3tG-GHS!HweyH9VoSCfZt
zS9^!rxm%Jp+lpn+Hc>n}fNRgyWb3?;4j1fjVEwlWy;crcir(>WU7>VqQ!?t-`Q#ad
z-4#e$<z`>^^_SQ=_gzGBHD~d&l9QMeNdg$;3W!`Vz56qCO}14?^|)eFcp>&rbD{Fq
zx|BUX4b5UxCPfQP6)K+H6FB%zUl+*nXdI)ed*Mlo!SFV#$B$-GX-G0k&7GS=pk5G=
zUXE(7n^1!8_(i#=+)dZJ(7rSEI~u?@LERJB<z6e_b0~V?4_1CbUnqYR+pZNgS&CPz
zO}U}~X(uzJjcXS6=MBrNn@Ajy5TLJFS{Xo0_AD^?dO<NU%_-E6a;mqNF{2##EdON$
zDfJiJI3ds})My(A;{o?J2?3=Gpnz}$*L()uwuOPgK0QeDCTl;FD))+ndA(v+bdY<P
z{5@3-vkGMZ=%#W#-8F1n>CuC#(fv&yZcK!kC(UN8m`wky!)s@)_G=Re8v_)GeD0kY
zfL5b(;fvH7b&{I^_L`^lqDdNXCH8RKW&8GRYt_5rK$&Ys8zR%F%Nhln6%kCva|k{p
z2>XP0p^|Mt3*aGS#b(GTW%w=h+i$ZDJrbW7@ICB3)p!$3IW@>jXGPn%LcT*KjU^La
zNfaybZg5qlHoO07@E|#xQ9S<TQ3IvcJF$*dulAK{Y8^6y*glh-2vw-_J$*JH$U?HZ
z?5cIX+3@8KCM`o>ih>i`AQcQz<QPt=M=P@U9Bt&d1b?nYoey2av;?lkbbw3xKw~5A
z(v_R*Qc#Ev<JxwBZ?jHs2;&BCx$JLoSH_VWU}=Oaj47`A@xE*WlPCa$F2T#*+(8Ts
z5_sks@H7lknjj(hg;l_}sU-=J@Y-DflmgQrp={R|e{ib`vBX2%JF{f*{sbaU4WPNJ
z5<n1Ecu%>X)aL9vy+k^*pJ|o|M1_=ArkA*SrHW0^w`NUO^Z?bwG^tKdD`~yf^8ya3
z`vfu@8HDLH5Y5HG&_S4>K2W2I$K8hRqlgv(M16d{W~3@WlF(=GlFJibO`{PA_JTm9
z&@ZJJUT%;d9m~n+6H8>eqXfA%lSWbFV)~AwB5!e-SBeG7l%{vuDT!@_O8h#B(|)&G
zcjx^0^V!Yu%gEC(W!^<5@J~tsiefM!>>_$42d$3?l0~Ke<=#3bhQ8=T7V;=?tfm`@
zqT*`+qcR#L7ISrWQmeHPMvg_R!-lxQk~*<}5fge=tV@lMAIvnWA_5DXKCDU`x5k{A
z5|t>mi*~vXg_`j<!5;?Bd}pDd1&+(s_QrIENHHj?8U`^<L9+SU$NP<=u42iMq)6-7
zoK-vcKfqI^*e#&TwIC~l%U;lA6j3<ox)9is4Smxp^bdcH{JyVOwJ^}7Zsq>UID@vT
zLQt`-DzbT1zy|o`K}!<ki?}E5gwz0HVsf$Zqj^(jt7L<gcmOSxRn`6G!w34v4WIVC
z`u)$3mDNk&BwX`RLAefE7YUE<*a<fu#UK?#-bskhW#qD;tE5m!b6f+@gRCP_{2s~a
zCPfJa_!#kddrcGRsL1!gi_kbrQ4Z^6D_{mDiGYC1iYl7lfD^zXN?#b*QzYa~g@KS4
zX7Tudt|_ix08N1nP$864lv;Gnh(O^_&TVu$+j&wv+a9S|Rmaw`%#58e>RbbFkqf+&
zgOaAkX8J2De$qwci2dY`Frs(FS`hsK+yq~!p2QZj7!6Zne_YkmzP|kM1_9)WKv-o0
zk!GQIQy`Gky~9NeiGd|FiGy=x<@fy$C0+|@K_gy+-A#Z|@8pOwaWDH`?f|LIMmP;%
zm|qS{0j8i_<aTTpXx6X^?j00=7hTdSQpL2wwG~0Z+CG&()YRio)gicnR@6KH4)EWE
zH9BfVYvZS!pC~=!7}?0@p8icb$H9&;l$mD|QI6sqpZwat=JS2oN;noFiU#X-brIiu
zT;TA1urN>`r4G9gqj(+hkb41?pA*mMFD8tzr?IBtt}Ot8uAR&BY8GZL=4SWnfw{#M
zQL2ToNI8p{br@iaqzrua<cp#S%NAo8FtzXt!>Cx==<@a@hB*Va#}5pcsS(`ezjN4G
z<yyrdce(t#1-z>lo@sHI|0-F$z{gR9`R|J2RlbkGzBcYdE+<TUd6e!SI&4#yRl}Fd
zbFx)12c4y`xvmxCv|+6;wV6E7j+`i4fkpqpg~);}?WvFR0yeW;99AStr6k}3?7v}L
z59;+J>>aKhR~EDHH#iL-2@r$QLA5=)zEWTc^iQNzQkU%kWDVXTRKF9*2Wn*_JoIN0
zO%oWTi9dBA;njpg0ukk~N#@1MKSFv$59o?gY!Dp}XwQJ)AyfA4aG%vJ6z?y-!U#s3
zlL>qi#U7yDRFAZ?a-gd-`)A@3UbF<;X(VuZB(Hk;rawahqHM?lwN31lZczTp?r^X*
z?zCpP7VxopFeovM`nezL)W!$-(6i3D_Y=rvF&<-mu9RdyM21H@*q)G3&=%7LC=Vta
zh@VIswFA;dQ@A+@(H4WnNDHlkerjJ39ve@xEW7}0TEfb0R4B4a)DLO8_aKenqT*r=
zMFVh85)d5xVK)<x>!~2eJ;bhNjQkMns~%kSedEV~{12=>e4)dcYt;TVr5_9(!x`50
zuiko^j?>{_-)TgX{T~mo?ues;T+e4^i|yDyd3&M2a@0`!9zn2SFC2q(yyxIr&;+1e
z@U#K`1c;If(>aq=pN_Q-(*1;&;9tBXxE#p=LS`5j5Owgj5I6~f05np@6wTo2R&V<X
zP7(Y99OiVVzWM8eWeyTUgHcy~BI=^=0$}@G`JWSwpnwpw8h-||Lb#7!hYfebck*I1
zfavCcH{pv_jVX+fBBgQXhXEBgvJ{m>hbVidLpk57=CW8O*(p_kPXHtlx{UK{;ikV7
zsug+xB-f#tkxbI&G{UAk-JA>JyA=jR#u>rDHS<AkdO`|bOnQ3k&ea-OZx`0;&<wB_
zqm4~~^KAwCafC?)9`<DWMovjWS4c%TqK8K}P-ML0$kQU1KFQ3%vk5OiC@o3BS2`6v
zLydedsRRG2Y%4VH(xqLxkp?9cqf2S+ImR@DTA?Sb49Wa?b}o-xp)N^DWSMbaMHZ}%
z5I-wwK$}9h!hmUGY}1n<w5RAQ)|Mh!35F2FNEKovfhpv`GZOH_RAYja_Ic!Ighrr*
zI+XdUddu1xiT^!nUg^y2ZqL@GB`omQ2c;rqx+;z^u$r&PO5|YhogYtl9I|P;)iTnj
z?g?_Ua8mTl%jd^}A%c6ZU?dlE9CQbT5XtD(TIz?$U6dQa;Bb%#Q$O(zX8Qh&bn-(U
z;}JK=2)XZ>OQ~px*1jt;g1!S<`4}*Btxq)+*T~SD9sS#fl`4-Myc-DUHw^Hf(B2!@
z-vdSs`^yih9{roj5(>h{wVFO_)9#Wr7CMJBw>Zs`oAv8<iqCnKYDv_=E|!DzbwY7u
zoUQ(g55A1$z1UrEKa`*svjXOID&$nq##nZTB2+bTz*F&%t#`tY1pb6%Y`jYsIYPAJ
zWD%zr;uB-#%FjG?4frTj3I|H-#R^yw<$&h%0nrx0K{mS#B>dGDbCWunB2-?EQO=##
znNOAYeJy2eIMtfl>vj9G_VvPMduzOx&_;4{ard553c#(Ib4n)aIb`2EPDFI<IZm*#
z4z$|O)W;hZOggJ(H^TPuK-GXZ&(iL<f2M}q9iXiJiU{z@3GG=)#7rX@d1`8=1|BIm
zis{l!l!Ji|iCxqTWnVAXK|O(i2sjOk%8WqXd*GS_tBB6%|0VrALf#TV#o@gHIinru
z|BkaD0=Qu>W1-WTOv|7kO@RY;R70GLcZirGd7LezNi`%;s)?RMmz~Dkm-B!xINoLt
z<J^j$>@!+*Rck4$OE0D&4-bxpvI#D>2mD~l;hQe%@048^W5KoJxJP{el5~rq@a9y9
z4H{1b75HJFAibx_4X{OVYR4t2E*b`@5TlQ>ZGbn`2uBr+qqX@3QdyJ^?x>vlVNwCE
z2b^v0;qyCJ(+edTog=IC__)6u5XE)P3b^71qOKh@ew4y<8)V;sf+ljKK_Y7A9a6!v
zAcuso$>ubaqjAUy22|>ysk66{{?W;WpY1CIdZVtV9ZRL-ofJ8dVCAB|h)OS-8R!65
zdHFbO(W@f}f|6}TshCJ0t5h4g(%c7(`=IuHq$eJpCP8<5;Gz@Pn=5g4fx%%xaagZE
ztp?;E#=anMD3SIf0BbJTo+&QI(JH@QR#D91VQv`Y@C)?q(DDsIux}*7kQT2k5pn&o
zB^IaCu?3T_F|qR3sm1E|ZA2&#4SbUwz(W{as(%!hwnDJQtk&{?@4CCk$NY0T<uQnn
zrh;QSo8%H)yE7hcBhSidM#4}ZKB5ZyK8h-Cma%D>HNk5mArgYRR7)c^yO+I<xU9g5
z@_<xvHL=Wc4Dt&AVH^f%IC@}3fuxXP<R)G5$=-gsq}h{0_@O-(;|z37;gAuLJXl<b
zAMzOuMw*l;#rw)Srw0KIA<P13Po8I!(qNYTn+%%*9U|t)$mYx8K<1&cCWe+gf|M)N
z0bRv>&y+xLq|%^YJyf}rP}&F;n?<t6Ey}-TOgGJSyRJ||fcs!~Ylo`3W|S1Q0L_&Z
zs4H<qD$z%)Og;uFco&WfCcRv6BK||`OCC&hnjO!K7l>IQW;(Q$Icx!Bx=}z|P{KuY
z>fm2Ve##+#qz=5GYi7ilPlAU6;({7Pt}H(2FlHxjbfhKL9B(Qmt#eufsHGlvzA{|L
zkH|}auN^&>lL0`xVEUB!c=cg_y?5d2=>NEV2fCi88h!><{US1AJLRMSM$x8}&T*Nd
z3}Y1^xFN=jkXoStPMkAFcX!Op)HvMTgiTPx7?ZU;L+IUlQ(4`G^ipkcho`F4UNJ$c
zWi_?buk}tvp+!n+c!+&ePer|-`$N*W+-Vid8>*p`>(+g?*ONH!8gan1Mq%JBh?$1c
zTH;-7Od|Z5FwCZ|UIbe##=JEgy8p>!nqMhQloQ}JltMn4wh|?*aZ901{A)l`1ysa+
zkT@``Jjq`J3K31QkckEuYxLtGjGrT00__fbs$>Yf4Pk<^U1JznxB2wqU13i-T3Ztp
z9*NW)V*0zkks=5etn5RQZ(S8|!Gz5;n1x@L%lCDS?NWo;EoKGzj*tM)%B8Y*i5P(h
z>hR2+xi8{ZY^$u7P4V5pO6|4Ka)EyuU%hpGUAfsD`?H}6ull9&2Clg?4@0)Qjd=X`
zs{S!@N8LRDOPkF?A_9C2QN(y&WokEd7PpqtD^RtEB)6PK5Kf#?)n#jtIV?0AVsyxS
zHP6uu6%Uc0>215OvvY=?0|yW9b@sAfZV&x+4OcZ999(_2#Cb)jeQ1Q4@DsXN%K)X(
zcW`j>0|=IzK}#SR)fTgJSS4lO;M7lZ5>x1u7@`00^$nuv8RxaLSa>`#5lKWXLJHiZ
z#EFh&tVtFE8*<(Lj7$&~{`0KI=eC|ECu$@sO$9=j2mT`O)04>`EFgow%bxz*4KS<{
zdPuqVKt7r0-xI}ljCJk(M`0u8q{yV}gkK=O2SHz20wJs@b8x~Cv)@P8?CaGjrlyvD
zpRXt4HB_=#Tn01oJRjG09$z(NupK^I+ok(nY5=d1Gni!P#=TWTy(V}}DH4Ch61=?p
z6XL+hx@Iy`7dO|}ZQ4^q-g;?kAPw!`oE=59tiE3Fa5q?S?05~pL1LU`zSRQb#iK&N
zOB6h)=9$Bth6J^*3f}IV;0G(u$jM#w#TXo%EE6og_l>1K5NeO-R_lN#Rr{ipa+C(k
z^V&w!VI}LqBcmy2azLRO$PO^JQ>!5b4838|auUEtCEeo!@E>ai;db$4WjX}$rrSxA
zr{12gJ8)_tN!Yi^X~b6HmFj0#@pQ_rM??5!efJma?5OOp5ObJiXl+2rGg;LDtTDE3
zU6)}OXch;<q$xn4c*>^H337AK6<9QXDs}!|Gt1UZVnno*<$A&kd~uUr24gf=19g=F
z5kNd(s$bFNs<qlma#HGm0ho7^l)?MOmisMyMuYk8h3W!R^!Izb`#pTm`w3-FW+mpT
zBs{ikzfOKW$DkYKc+(WLQ4Y5f3!uD0e#YH7B@hYY>3El0--UT|wmF&$DFVfQ$Q6eM
z6y30g%yR)qpzfa-!9T0FhSViM{p$n~ilT*|q?*CY!O1dtl;ASL`=J_f?NNq|`GOQA
zFXf&CM(!J%s%umgxDAg$wIr?<flZ;LgCuPo5QD&=JlW#VNXD>gpSHsAO~+4~1kR%C
z${c_AkcZ;Ck|nIPA<{X(7(0BPygWb59KQ~9en5=6R)5N~n4pD0XTuQMO2pxoI~1=p
z*)dXe)~^T=<q^_=44qCGCnx!NUE^G{BTEZDpNXH56=-26)-jS&?}4Jf8tvF;K^o91
zAYkXG{Dq|Q<jT;6p;_y5`z1p01^ib4W<iXQ$t~?_?f$i85_;NXh>6<F6sU&miId^t
zh<gs2V8O)K0Yka6wi-L7!GSHV;z5Jb6Vtds;&)_Evs-Z-Ig`R5FJlbuq3B9IDI=YM
z1zW5Bb>CYjNa~QW@>gCZXv1zw4)KEAVnUyzeJ%c^sx5)bFtZrIZ*|-cooEw%)Oo6r
zi28$JKijG7fz)C;<w`tZ?v}^n76_&0`H>E+v&+-Rwi#Ynf1<MGUMt}F`~V|C{T(^M
zjZl^EO7VAy8AYXI(9k0(s4MmFzYRwFLA&)7m`cbTN2KH+0JVU@#lM)TkRyto_D*DJ
z0n}Qk9ZYPDXhTzCVRvI#q5>oz6FMLmAWPtGv{rxl_1nKeINE;VF60HUDK7`hNjhnP
z%v;ROS(U1eq8<@Y!a*Vt;T0ktHhdfDNVMIcQwFbdMvwN*Y%Fh{$Z66rAFNZWvb}zZ
zNG0RMX{wwI+0p&mbON0lda~$0B(Z`IWa}oXbrXl2j&Rv8LAQ08TB1hxa`me_BjOld
zY_up*>g=2q7E*2+Lu2qV<DFTZ$1T+I83AI}991IQ#M-VduCfv0BFihTbw1Y~=U?pX
zlA6G}%5B*PLm`C-`~(AnkfGfJ2ZFS*Jeu^Etjn8#C>x3(|4@FY!J)A%6LbCTqcQE<
z8`*y2;6MY&lGG=q6e2g4X*dCPi{fb3ub26OgT28{xBGPV6R+q4E;|}$_k_lbml>O~
zT-CwLwlUxN#3rFikbaET{0qG#e49$?YPNl{20f0smVHejVOru@<E^UT$jl{Mnb`Y0
zP$o}7KOkD9^ZH;y%D?v>8k2YCI3`d)3@KGTt}ufvxK10mZ7oIbm5fxA+DUpZ`8Ff}
zbRxYdkt~t4%#qYWkwWEi$!(b;*An&&><QOm$iIMtuQ@Qzn0SnV;aykuIW8$nx<^j?
z4gU{g=MXGf(52aTZQHhO+qP}KYumPM+qP}nwr{_R=pIxJ{_4Srj5u+I8F6;z-rriI
z<xp^-og<3T1>3Kr`81Q2ZB{{Bw6;?9^O&3BjtKf(YsFT{nA^v0lgLqjWt5BtM>0$G
zldRgXu~;?)NBx91N1_M9(8plwqL8#4_*-VxS2Kehxs4XQ(bos>I->7)NYeVq#6?d8
zu%K%*-`+FZ%BF%Dd7E5WFG`Cl{?RSu!q{tg;CR@3rPbbPzwVoq?54XcE=F9I<qNrZ
z>s*23gnte=`dRZTlpV{?#F$6-ADILx(1Y4OkMfuy^huv~k7uUfCDPj(77_)XHj%C+
zgrm$`Jp`N%+D5{oaunGYA6*;OYV~GPTcmOd(Mek|Q#I}@^?D0FX^UEAuyG`M6tJAj
z%j*f%$Y=GFPyJE!x2FYwR@)UdC2yJatX1s0sY%;dUL~w9;BIBy%Fx~(Ns}yt2bDk*
z4w%f6a&~4j5Dlz>qQ(;Snu1(xGFKwMuUH0$f=)!CA^a%_)RhI$C*HHU5<p~g#J#TW
zR&;rOWx=i;a$9xj_wJ^gfJVhiSu>BWm{8jq9LD!isMjdqtj}&I--mvV3GuOCh9FNV
zFhTaKnL|~%m1Ehp7n9juQbtMkDSqpU56jZ``twzE7zkE{aLJ)e7iEKo0gNH_rb9aa
zeoAiXT5AM(vCC98!&V~Ef99O&C8zj)WTKgOB%pVRTgn$1%OS254#Tiiesnv5n=T#9
zl{q*&yh-ah7R)g3$CoM197aUWZM`2%U<Xgz5j{Dyg~LYc=uzE9K(uW_Ou6nxD;u6)
zV5lPcWTohQ#@N+|(;I(Qj+mNy&D)EncCX)^prXKMy#F9V-tOYG(Lm1M1OK*X^{Q)M
z=H&+FOiaE%KkiehB?<pP_mL(ZU?U|RJ)MYAof$<&^`5p&rdb6<7QJm$n&WgxoANeT
z^e*+wfd^r`vMDYho+x<H&w9GAWak?S!>(6s-p*Rn?|Mi@9#6yZdA+WZDHL(QX_t<I
zcH2XXu0eH>E4^E`r(IU1q=BA<)J2e9B=&)Nbx8^lX13H+lv$Go>&Q9Q)?YMlg{rOZ
zpR|nIojJ?bkOVYN$={T=Fc!IDBr3Nm2tgi0!nv4;H7mc&VHfocsL<9+JrSqjW%~c^
zQIjA=rh_nIpEprmads5~OF<N&e0w0BC?T#7kNq}Ji;KE+)~+TNQ3zNsCJu@~_ixtr
z+wq~^b5yGiHVUUv@Ks_(mX{<iDJ}ElDSB50hB8Vdlj*28Ir+vCD<H)7odz0a=mKt;
zNB%ceF(?R6+iCz7$8y@DkqfA_vrFtZHnu~9@N>}T*V$wT|9A9q8@u>;#J`7U!AkRS
zSnOhc<vYgd^rPln3r{s3g}hr5MkI+xaqINO|4?I#s_5D|EHg+Gs(zx`78fys2xBHZ
zVM>eTSxC1$%=#>%%wwCEG@1l>kfc@vx3$T>kwu41E1KC}5jN&yIhv6WP<u5RstZN<
zd}&!0LGj!jnJ+9gui1pIatN6Mou<SFu|uKXGhIDEkMz}GxdCo*Fot4X)V&Z0ev}jB
z!b7jkQJae(i|#ZkT6kdZIGhr6w_2cB7*BB}fwbF;mCB!>4qKO-tP(6KyH9m%(6Hz4
zB@x+3bd{G+o19Fr0uU}3#xbCqlK`1Ov6|>atA+8}nFP%KtE8l4d~?|pOPr+xSO;iF
zc@d)DrS}yLh=rkJGh#Tqy(&5(z5+d#KYt<g3y*V>)=-v_Fs9MLL<o`8+qE31{?I3+
z{}Rh0CmIiZa;R`OdS^cv>DxQ?O}F8?a8ytlbl(t9Usv=TC+tB{P2cWq3~f9Vfw0I)
z#GccQvfeE;vYe$QKf2E9JyRX<szv~VF)?tI_~*McPTgW4Yaf_}a!fdR1tYj-(0)A$
zr!==sKYU|$d#Gl&KcELFE2`^0Pejay0UY`%v61&MOi|09pTbQfh&ZX)=B9s)6REu}
z-;jXX;AS<xr;VxTS~Fab$#@i8iZqNQfj>-G=1*(SR3$~cUM59Sy6sQCZg{8GT^tyB
z67Jio8*ORcWkrc70BY$(jCJ=4Fu*_wm4Wy_Vdv}WdS<Ou#ZhSweGEM#cBTBK2NBXg
zk+XdPont}4NTgfBObRQf40`J^UqwP0R>dmb0qq&(FQMq^Wyhg08AXrg=K*tqib{69
z!as;B!q{0WuINE(@nb<ob8~AAFM42Ox9kuA;_HcdSNlqC42LSZ<Teow#f73tvT*oP
z9YXtX0ib$g^nRf5&#QMF%g1-3sdP2)q9;nqg@hIJ-W4462WGm(!?14IH`GGoL9QDH
zDB}^EGJ8vU0nuSOM=9YB9)@?{4o^>>_;2@#<>vjk7VkG5v&8lJZy)U8?cE|xAt2K8
zSf)gZ1^S=LN%FM}Lh$(d_(C6Uzl7Ds-g_5Rdpi#ZR_pCF>l>Wf?h=iGsY-eHEu`?x
z*oyt=@r9QlDm@$J_7Ds%TJRa#VR+aSev2p^#hSF#2o%ndx+i%2>PJrH*_{~2u4AP=
z*Hl=}idxXgdk*qUAT3Az%}I^^o(-AO6$x0aZKxdopbDZGDeEeyHG@=wg^fLg-4hl}
z6c>;!xDD)lNmjytP@wEA+C!?rogD*KK)^*=vQ4Jw=nFiw04MBTUSP-MZYJ!^qAUO@
z@_cq}f8gI=!Qw2a@wZNXIxU|rrYHRbZAbH8|AE5~xnF1<*6JdfW$GfpTEmc?^1%m<
ziDjR^fOMac-tBYkCAW*+03r&L4v#m{q>4{=4yiv<kC>fIh}-%lOuo7`i4?pU-IqTJ
zj~haPzp)Qq^F%?sORJ>jT}|q-t3_JX#<kTE@L0CVV=O~-*3;BaI;W`40Z6gM(VNSJ
z*MQQd+Km-8_6TAlw5ENekx1pYe|tr6nnvN}7P~{;RE~K-<O?%xk#{30OoosLCCfsg
zz!WPY-q_kMMnYRt9@}%ewRgy$A29g;)beu7)8!V2e_!&}{wa8pny;N|bHz@nzXi=s
zu#L|}o!rc1>!lB#-yU=b4(k=->FHS4oyFY=zp^tt&6NBe)+}9Ag5M3ntYNy$HB|>n
zNf;Y7FV<Vtdl^)zeBlg?x?MPj3`~`MFqw<2XoY4$BBj}c7pXH2VB=Uu;Rx-<;?C8B
z8khG<ss_oFmTMat&_&mYv*5o^$rGk9y$N{0gF~m%au%^*(n_6O=p;oG-!DeoERfE?
z&vJkKNM(ye<J&fzuxqu8_>`&4&B@8(b@%Xi;b~8ODXY!QAgoW@$~Rom(70e@?>l4T
zz`zzCr1QU~6hgx^QKYdnBY#ikCA6T%la1*g_$t0Bvk<)5(<hPQXxx&(bc~4vzP)m0
zuuc~;#dqEO=|wEE$2PfT9!}S#tvOkpY$u^@-$cIOM9#Y^&StmpcVe^YWIEOJ{eF96
zZ<grnX#dR^^`bdVv)!<fXhx!F+y4C@Sch{11Krtw8FNhN{|tuzm(u$Gn3J_pz5TD0
z`S(n3z*#A<RMyaYeYF(KT6rd@_(7kf8uB3hKMR>dyl`^SRmUA(uPd<$#dQxc^RTDu
z>&<rjtz|aD3vDVP*J12oD1{M~1_sp|!>AzUJ~0|fE}4-oR&z-%ont4PL=X2&PC{o;
z{djYYiHQxvLE@z!gQ2fXP3&KdrNZ8CMYb3^6#^=Si8d7|D+{eOl`VvY92nor?>FzY
zZ**PVVLS@@2*L21D<3nvxf>_d^rr0#Zdw&m5p7z!gMx2U;pF!;xGRILgk?#Ugi7kK
znheK$?EaRbu3S>K$IjBz&UGTA+4d{&{c>6<LF@MBU!fa)IOa!m{MT$<sX@9rdD)b%
zf1_Yzg_NT_{$2HkB<>V6-*`_mJq6kI8i$rwZCjp)vY*A(CKV}?A=Y4Dw&6A=<@7QX
z`@olyojV-rDpQ<AMAD)R@RYJFs;1tr--t}2JqH?&L+6*GK!41nAxH6=_KR8Z+cYhe
zAWNNwhXqID260!V_&tTGiht?beK5%&d_UOn$dq_<c6~h3czMZ)Y)vj0l!tG%;&HQZ
zVm=r^=dTNPTof!jdnR1G{jWbZHsaI1avycz6X`ld3Rv7*v{lR3R|x!di{C}tyNr^G
zD`pf<gS8cZ{7FhHP}FA7iWcUwO9r0$lTCCKD7QHuDMl^h?q@gWpzCKZx4`!dT3I`)
za0mtdXw&Sw>b;cIKsnZ_5-x0`x-_kd=g$Abo-r$wxo%TKCOf`Yivq?W5`+DUX%l)M
zc{;nh|4@aFJ_3}wj2|g72fJSLJsapf6B!YPfww&E7W7h*DT`#yOXxgEvm-PFtC<g9
zwtS0sQ^7=TmrWxO<P(*)-sX=!iE#Sxe{}Tb#NzG#5~;2Czwe*f_u<0lR_t?h1Wy<2
z3aPFHd~h8`(g4gLjsY!9l7BOgwk}C9-7OO2kc`kMe*G&KPT|Jy&4TgSUcfWO4E}<K
z@!=&9$x=(#?0)EwMg&+HF1(~)j37sTtRd2XllpM*o1<%Yl`pM^Kt>d9aY`pG6C^>*
zDf_kUu!98-0Q9_&EI}1u5^Az0-_k4C6QwTjTRfcBBX;2mz{4<WQIrbjTg$UqR14aO
zR|rc)&4CFRjU+}If?o<0@^?v6xYwgrz(XYoAye7pRW!(naODT0SAXoV&R6OR_kCi)
zS;T{Y1ZE^fJ0k;VAOl{`x$CTc6K_s761?k$Jr#HAn9V9hJ>Z3SUnXuKCSpDOp#gzZ
zs&=kVA=ur)fb=Sa$WNjkLo@IpjoDCAK2oDy86byQxNgxt8vxZr`{$`*4xCe#90j8A
zFoBnnQattU8_oMmFPLtX#b1YRLpW`OcP~@3kab*!7!8U^ucBo!N4wgWx)Pt`i?LsT
zh^|}Ee68h>AVQEn595S8=*GXafIT}5xSan*fY<sQhO9=y24X?l*P$I`v6<h9%41F`
ze>P3Smj}~i9LQfNVy+e^e{CnJ2<wq6V{9IUHzAg4!lmA4Ac>q%{^&CVCAqYkb_Z9k
z`1bKfJJm6;taH=%;T+Wi<FPiHk&b6Lr53nejr;x8qA;62*4+HoTO&?|-tJN)8uwXE
zI+kEB@u+>;S;^SvM2JvC9I#9cZQs&m6I1bCzq-%bjlxYMUPnSGpr)Q5$(iD2Z$!R5
z3R(3N@cj}_p<im9UkJn&K^;dJ?99J$aX%RDqK=3p{lK<Y&NOO!QGKE+uhQ%H-Sp+j
z#K-mXKD{1G$1Ym)IOg9arCe-ishL`jj713PIFB#mhh7)-Tbo0B2`MJg7YBwqZ)n@}
z2A|Q5N(35^6A%R<_o@*2KxtkM+x=eVAi$}f(_neS5Gc8R4xX>lxLx_sTTswF@=!FT
zx$1}6AAjMfF#gsFpRp2gFmKEq{van`S0?WvDYBd3Q>0mBnL81r5Rj2VAcgk7&EB4l
z4eQpR_W;aurp}1gvWB>UTgkz`D8<o6zyHG_vW>a5P4X|$JMzz1`JZqk#%6#2S7Bwc
zx|JLe2kQ5~H1EBMfMkWgt!5)N4#nI#DJFOrJ=11}PIML}*}Y45i?+z#?rr<33lCs*
z`uCsmP;b1^)1C_@4PrsB4a?-LvEe5dQsIXBXYq~d179+tbdvjXan+I~4abN3G`!p#
zANyW2y!Y2{xtpJ>qa;?ZJYO@ScFAQ|?+!>b)fkhKY85ORq{jJ{mg<M&*5U1M#~$Q^
zhXQhETN}>!R5ash;V&O|hMkM1tglSEQ#9Mxq219Rw)<YK@2gr>QnlsC-tsTI`6Wji
z#q3JyPq7v2hi|jp=gE#T#`212UqwnQnH|r&BC1B8^<8yUJ3ca!3R}wVU&G9Db;0aj
zoy>&;y`Fg$jr6XUSmz#w_7qZ#tzUx%MrS#3OJtF@a|3c8yZHkVAAhm$M{D<I`d;6x
zU78@btq`O5OVU^?r6X0qDnz$sH#TlgjjG~=7K+KGvml)Wk>Os|KP1=zl1|o)$)buq
z6k5eCaah@xlFOPE-0`^VRm{zjB9UpyFmbzAjbx6Zjo?U90Zz!`K#&z^?F(xVk1i!U
zf`QbMiZnJ5lPh$@h&d3+wh@q2j2dVLQb%`lR?9`sb=&G3z4l$X!iEz!XeuxuG!xb!
zm!_`)027QM4)G>O<TL>xf|}LuB9_=i*+VPjT!aW+mOlNLBSxjxSHtV!cWMfrO|D)Q
zVWn~)^2vDi2A0|5@REXCNbP5S4lyu;7yHp3R-NidhT~-zS)iY5h<)pq1Q!J4dY@!3
ztFKv5YhQEYJvt0m6k1>xF}iuW-Bj4YM<tXQ3j<+_2&0JY9{w4~M_A*8a(c$aO5a8J
z!&L~(N$kWR-4#Ih(a+Xr%49&xsgGQB#>>{ML!^nF*Z3OD{9hQEoQNE8U6ArZ3T<OW
z<C1<Y!+?iph-YY2`oQDrZgGhLPx#`4H~;=uqxdSpYw<Q$_#Y|kLBrdJ))3Ve^+pnW
zQ4DsryI#4X!Dl9caUd14NCvkljA7mo%bA(yRrap%Xvwygi5r1_yra;tl~oZk#f(rt
zUaRoJB;%~>eH{Y4XoT8`*a9XDhC)_z;wlnu(C@f=J#7XwdrCxk{HQ*QOuPFcaQvZU
z69(c3M@s^0K67YWbmZUqgaA$Rov@7>@oIwUR0m)0?l1HSuZ>z?Lg^^Tl#Roy?}jI?
z0ix{x4yP|(f+vaYE<eKlv79GN1WNJHXR!5BAreaQfz~j4kK-80#fAYy-?V#$&gojk
zFtqVV_%OyW2P%38YsWfBgDo>{x*8~kcrqUCRQ9GV<`wA1KY&sV0plwn8OoJ$Ac9Xd
z1nDFpz)tQCd^)tp-_L_i9EppewY^(2sIij}2|%etoUNJitZ;HMpvaqaXM%5JLT4U9
z=Bnl4y9Yqo#;ID&`T{PzZ^=XHYwmwv9|87xyxv68kvT!5Jhm;q+6{bz%k7*fZ;X|-
z*}k^~uN)x3)@h%Z1c#DOHfUQXY!Mb(7pd%~08pWm7D(xfH-)X>>LXg-JNRt$MRdWW
zYa)d4+V{pFha@$UWGW~()+^8b-ZM<%VGffUW@3n%ies3C6~0iskeeE)x(!=d?o;$m
zK^Q^pLQD}^4!A8HC8-z?tbwq`q9w@mm#Eyt*;3IQq$^1mob3=Q17m5!vOox&u3F3&
zf*^yJo81^E3WHveBtU2un`>V1x1j#=fIs=$5$%Gc>t`_Gj0hh{#TUrVF+3l-?M*<A
zba(^b1YO?>*yCcx=5l`Ge{8KJDS^Jv3iUbD)3j3BG1{JPDY}b)`)fQVw2fJTY&gEF
zR4PZhLE#(j>9^+v!br8kbZz$yQ~}V{MKjT%jAcdehQq?#WTf->g}|YHQ)ybs^g2Xe
z{r)H?Fiz41=JGr#F#itq8>mf{OX4av4h-i`L?w&Y@Hc~256`YWtaiuMcESIqqEVsv
z-lAD^%0>JLc><d))%C-H3GgpY01gW-Pb6PwboK<nJkU85QRzVJUZSC-8Z{j@*5<~q
z9o}}NgeH~Q(c+dw&ibCoIKKUu147#>WWlW8E*ruP3rTGWn1!agPC69C4<Z>utUC^x
z==7!-t_%$O+E<d<r5^4=M{Q|f;)vet;|PCwbYi=!<~}MFB`pP)U4v~`I>^W~#eCK1
zY&e|Df)sKvJ<Jbv7&0a{96y+TnfUZ#E3e9mv3)|^Lk;xr>gn!5U~SnXhLXlEk`feu
z8{6%(E1n@32n3HxHD#?1gdId!pTV_vU&#@0%>3!5P@(N#lyQacNhXTPkU6xr;Amv4
zPEg&T-MFsxcBTq`gL&^^8)%ojS(Wy3!Hkz^xh#cb^Dszt15q~D+6~}<o~sGH8q-Dd
z(IP&z+B?SkD`^doH?ZWKM(PTp8?@gatcE^g`kS@0vpYqfZ6JJMS>zL9#t@<Ta8f5@
zIUD@M6H&yV7SnhntvEPiSNPFxn!eTep63j#tt&T*u7wkoFJ;Eoj^R$SD$~BuJeVV{
zj3voGOykO?--PqGa)*teLhDKB-KX3tEg--bV%<vcg?ZnkwCdYU<ZyZqOSA;xx4j<2
zdCeT69m!h|O~e_99zRW|BF{s%>!Dbdy=C5^1~btS{~g}h{b*sj^mEaItM`K##gTw6
z#495d)nhc>PN<LS!wIocpuSWyG~EmYOYdz2PmB1rjSXC=k)KisOL!X=b)f)hMx`}(
zRx~D!g`<rr+$8{Uw+bK2<K`5rUwdwrJ}%3;6nxAd#@SyYeIQUMF3#0Gs?M&rfgM{#
z32iBSl$(@fDa9DsWs9-p`0UPr1801Fd0G5|lb6sMlWzs|+{U+gwc=-b;@lA-+kO#`
zBNE$T!0$j*eFm6&?ca3C5}aDqE7Nyi#X3sOzaEu{TInT1sX&c7=ds7YGc+kCCCPV;
zrdpKzDm8rvDH;IZru?Y+@n0vGuh;l4NN3~s8y6ogpuEL6Glb<p!12Gn#lM?r6L{)n
z2sB^aPSD9XP+fXOV7)(s>YbIJO)ab1jH>=sA$({0fwiqky{eq}(qM<7{HgV|@lGCk
zaQvRO@y?wk-+A!7qN0j3^Rz_z+iJOir>DX(l|cQ-W6<yWWIj1k05Q%qa9Qgw%Ls|*
zR-tmn+YSND@Ten*c)Hta^_TAt_c!~QZkLBUux6qZMnY?9?8v}K5`s<&B^Q*<+~KkX
zMyLWTp4j9_b=&j83g^(@b`Ks}^v4%BKbwPJm(PXpY9jB7>C-JKrK6*xhl_`avD`~R
z(XT4^c+%zEKgegiN5}%N{8&|9eNE8}aj-`tLw)J?V!uiZ<^qBjy7}8hw=_Qc039ap
z)#h(j#dbh*(1C$oA0HemB)&!YKBO$%$4x40lXr;Zrzlh<6$1|sB5xsnB->N9rclz`
zKj~(^hGqW4(4y6VCc~Or+SZpHO{cdz*Djr7i=>nl(_F2m*{?(!D;g6>9$QNXzW+VW
ztI#*afB3KTR5ba|JQ*Vkd-H$jqyH_XGR$N3_h6)9_nC_Hlf;DvzW2bb6?=6!O-HFe
zmT~6frrmjxME_4VN*ED@=lg4Er<rI*DgG&`bE{%K|Ke@VO%ATbn{&2I;n^xkZ0YD#
zkLPM^fkcDuU6;NMD<(|(+fa!_z3d@Pq?*#RN(M3sRU>uvo|xV(9<ErR0<w;tsZ|eU
z#8ZTho@9{P{I9lN3mUhM-Zz~N>ceg2*QbcLUQy{ogLI_P^~3O+eSt4~b6icN-9=^>
zp}MTveL|#M02MMIFBOFCN8!%m-o5*sJ)X!cRE@(d>AIuDfmx+mPAUl1`>P{T=@o$R
zvT`svR7%xEl*xP2sTZb&>ncZXziTA~8W5MYe1k-nq0tO0NNz)$K0{tgNAPbw1)Y13
zv?@2Hf1z9VOrvwo5Q$kcbhcy=*a5EfofW8c15=y0WRJ1rtHM(n&|iLIrJ=twDP4WN
zI5ya6lpgBES_TJ(jk;#;<H`Gxu~pi}AYvlO^nO4Mtwq}OM>TtiGC4_qCiL7l1bxH(
zo{ifz5^kvvZ=GNmlh%QcfN&#;wVcsCb&2y@0%R2Va|-u}Z-Shv&RGFX{1F$75mWy_
zG%YGKKqzv@_z+1JmWmD2NB*5r)fj)H#4W`ibAyu19?onM)_6-f{?f}N7W<oc=(qpR
z3J(4Tug~rX0o<qSpy{W<s0+U`PN+M5-ZDUmoI1_CjWX_ql8TjwQ2Ge1+@y|*qs)X3
zI3%J(0Ei|(UMGD5C6Vr%Ta-y*rV-8=4^%(_#+OA}$pKW1Pg^%joem_y4+xt%C2!Qn
zWC^xahffBq$<}I(b4t(9Hyu~n58c-fzn<}w2~IK20YF2aRf3{+Oi0^bb}XFM>mqKD
z!Vr50lzVX#j2TnF2ahsU&cObn%nsj<JB6K4BhO053gP(OBJLN)h^)STr{1*mi$KC2
z74v`s@3a4o&cm~rbP4k|L3Rg)3lxQnH{TRAt)DO=p}F@2vg;#La%4Jxhj{WMWq0Sc
z>FWUiOX@DD$-~amwNUO2U^#e%g_fjc-9>@2TC`>jx*~NE&R?`{m1WC5g4wdS>+Hlx
z96*ySxTGEbsC*`(t}ZFRDQ9s)vstuANl(&v=FaZHbCcD;7K0Qq+lV+gx0LVoz^1@!
zQ6Oz`SX%<M;<-(6yGwK}OY<w^#1);S0vk;TPJje^V<86~RRdw%R}jRHbgC3`$R{Wt
z5QNw}K%B1+sUUJP4Ng0nNvxtl97~2iq+G?@)`OgCzQ?+AtOh@Knn^;68#cp(astc3
z+kAy9Qm@ibh8&aXfX^VLo8ym8`7z$k9!(B-k*_O8V}yI&I9TVCX2KyXHbhAJi#`Y_
z*T{C{j4jur;;uCW&WatCvtAln+IiDh#_#mSc!-ML+=w#D+&tB%94Li?Dmixjx6Z4d
zp(vGbRUikXPj+b#vV_0P5XKVOJ)TjLJN?dCA|yUeLsuRiv5qk?fSN)*eh6tR{ahoi
z)UhP0mw;BDX)A}6X~9O~gIpMKSV0j#32XtsuVgFAei$?h%B`oz>ms{ZtaZB*ll_!1
z(txJ$p#)<OfJgWk<pEg<HVDr7$Ht$O5XtXN9%%A9!&P|d7ng38Vuo^W@2#Rl`)r&(
zL7bI5>@MCoCRke}o`C&$_fjf?8kVvOSx=6rP!ydqQEMQ)pnk%2d}2AjPHY%{>G-y`
zPS;-pc)UkxS=;$I-SjUxlA=ER+7LJ(D0MmiA~FJmNLQ#MM;>%6h&%ytuW)oOfIo#*
zFDz*Xn|~HzO8oEmm{5<5f(%5E&%>Y!)SA^K=FRs%W6s^D<eVk!<ud^|<S|cJyrDyy
zV-{B<x0b4jhFE5d2n%q#R(@t6ZXV^aLrh4SBu5(%%96BlIzQ>bZoQ*S93-$ff_8ZC
z3+zu9cer5wSPD86p|US46Mpf-0YwE>PN7!df+BvFR5WUY|0@@|`hbUF#e`!SGYSO)
z&3q!E27{qV*GIi@#om?H+^kkGgy01qTORt5YS=`4!MAH4p`{uvho(Xh5oWN#VUfP&
zfm)QLp1)QQ4k|l$s6bwwcv~|99wf4nv=s$>Q3~V=Epo9}`=3%cgYpOo<Z4BE$dg=K
z=aCi_PQL}bf~Tj#vXsPt8&M~;zfy&U(Zu-0T|Hm5^N&iuKaY>s$?Y!G;pNULVN2@9
z?&VOZ=i|WI{wt;8u)@==18&ZBA0rMJtr@A2_-Nldb-%@YU(U^eaJrb4gJG(nZl@oP
z&dc?G@xj^Jez_5a%`_m-6){^`i9a}H*NdvqBq+ZXf<QbVio|e@?gUaDR|eU><+gW2
zXVn5?$Z`*((C+Is0}`#_9akY}!I9Ej#Umqt<FN@|oI(d<`JQlZa6`X4f4(0F$t2DW
z;l6%e_u-F<gCQ*|NK`eYp4RKjp3Ee4$!Uv9B3W|#E~d$cxZi3Ci3H0NKwxB~$4!EL
z3APM)_KENT@0B|_%rO(_ATS4uwrCrpH6>7RTym4O*;)OMvE-pa{lZd4ivE`EiQlDE
zaaCtPw!=d=0Le#?V0*(gpF<k@C=9*7$d`skMIRREl0`NZqJ9<B6zN7?Ec6vfr+?(_
zY0Gj_((k%`MOR1{3u4R)ijX#-is+D?_kUnlP-uig%~MrkgQJi~TAlN65C>S-AEfR0
zDW^X47=E|?UE;8m=-S4lS}Y1VQzACvC-ao+2>;$8Dw;cO?K6E3cgzoWOq67WxxL<d
zq`~)W6+ek|^-yMzpX?|c32JPL(;?9WUdk^GQzU;W=K=&cc{>V-HgFJ#CW(KoBH<An
zEMtulqz)e0()l&L`^0HzJz6wwgk~y}qDZ)ub|jOe7#CF@v@#BX^Tme&*Zf47L&(iF
zSbunI57xQFm`6s1!H;LFmoctP&6iW$iHfqQ57RSnAK_S;A-o()3CxdNE-16`^p-#y
zklNXQ=4u2=BEK|IKO-`#lt$_qta&FMX{Slxhz=kK2_q4~j9_e|F4qcoSM;icBp;;F
zOH8{D>d-IfP>GjE_8mb+D9=aI37q_svrZap4xG^kFHljH8U@1YB~Pa>l+!BGpm_>G
zoC#cs+D;DOv6~~RBSC%hYI`T7ElyC1F?g0bV&$!28v;a+avWfcBGWjHe!;Q)<R72{
z8+_M2&DuVaYnrdl6xE$nPJ>`qCr@cI+C=;5Om^gKA8Tvt9Log67goMoY+`GGBqr2t
zyMRKC+b6#!<PA35ToIKz?v(N1s{eqf+83NP$!JuVsy`wV0U?ev%Ww&S7^d99+svrW
z)S+B4&yz`6z^F|%{5$Mp|94YOHq@#BM;1O)7G45RzXoo|^X(4@f$W01&fYHh1qLYs
z0O*apJqVBD>c27-bOPTDS-C;pHLvJgwbbQrCK5thT1Dg^7VUjvBx`!2X}6revN~AI
z>|Pd5#q|QTj54)a!bQ}^DIqbU$diFnD*H2zLTo$!ghKr>*5VIO0{C6v6T|zJB+jhX
z^GWw*$NDHz4Sad=%E+Grk{SPk3-mhOlmy1x5$u#3Q#@3S#+9s$NxK$_JTmoqJmGol
zz$$<hKv}<`ssr;$Yoniv(cO|gJGd1^eGOXa3Smv6HU7Hd`LxbD#fS#03ebrW5~lLG
zt#<AihFMVc=z(NVvjM$6KXa?o6cCzccQNWC=SZLhYCY8_Ap*lFIYO*)iy{ae-%L(~
z`Pm0_8CHxMlDpudR2{FSO9Jrm#qjO!{6|C22s)9dS(bGe$q8i(42SZ&9Xl~nWr`B+
z(9c|ZhGA{RH8FKiM4E2)HY4QPjdQj}GbT7jib;`O5H+mC9fz{al64RY6J9c1VbGK<
z%EvbpXT~c7I~A652x3F<HO&>GJ!iVHOkvd*yf(=NxO*EKf-2V@@}|SS1}uPe=b#p_
zfMdx$D4I$t+J>Ye$9^$>9#Tn8hFX4Ii)(+XT_FV%ArNVn_Kn5cxZmHkb#z5k)mF(j
zFrv)skra#$!DuS?;NOb2na{m%_8$NY`e1lREkHM}O|Yz4>pP(dPXVIXnVXBs7oCd1
z?aAR7$DjP9D?7T%Bqlf<vrQB2s#@csmsvZJJm0FUP8|CcYfULO`Vkj3D%=fJxS)rw
zx80kiWSzZae}E;klDdq6<fpPE-*y6kM)mAF6L6qC^kDx{g_q>j7$Ieu1yK@q(7g9I
zx-a2E18W+(KB}f_d2jCkSgKrrpJnE-2w4PAPg<aUv#~+S{Db#;k$CR1cYwc<NRe(B
zw$NqCLOhW`+J*p3uQ6}#=ptt1x*O%+*SMHQvVlj>X?fbtLkYQe7DQt{zBBv8yNc;f
z?0jIMgSa?Fx9TjyBjHWa4F$>V0wxzDHPKj+JwVyR(2LDlXW<G@|1fk7=d7J;oW6zO
zh|6(taB_-D<ITWQL}X&narXJZ(<bWgbIGY{%dA1_bz^fit+R9P1je&6=vN~)7tD~!
zNgcdDYz8KcXsap9NHzcQ{8;*j!sPocAQ0`s!`4$uv%Br!S>FoOFS+;J`mr}PXn*??
zm`Tjj&d&Q;?0xS~uy8qPtdhh%qWXz4KR?G4<MZh94BX&6vpGySGJ{DY0ju9u^JE9E
zo7%ff_Kms15)c-v<>fQJL`>k}f2$>}n^*fM0qv0@tqr5Rd5)_L?RU+!A7L`;qx+Jb
z&cYi<0<*)ba2IU$+X}^}QV#BQu=axukDl?VTt;cEddq4+PHWXtNg;9qtRY=4moH0R
zy5znNU;A$ko+zb@(%fT|Dv$!l1y{ZC=xO=VOrS;*jOlWST6Ud@iW2qNJ$QRL*~UY7
z4-IKcps=g4)&i?4H<bvTWq5Gv)~i2d43w%^2O(-314}lkp;ltcz<Vz%;rqB*Ldk&v
zNZDD-5^tD3Y<6z8P!(>~T{;c@32F3jqS1701_76!9TNikvA$$Sd{sj|e3PMOWet0~
z=AE>Czf#>OYm9K-C~H*GCSUy8Pd^Veh<cAnGEf}3L>FcB26+LCNw17olZeJ@h+qZH
zx`5LP_?u?*pM%h*MoC%){m0Bu+#3ATqEYSaX_EQd^gz9^Xv+$va`c9dgL}lE+77ur
z**!z@ILh5%y;UrE%FzM=y+h>I@$-1Oa~&f~^9Kv6g6B35{Q);n!8l}+mV5a$mO=|5
zii2!-ut<NG+YZ+VNI*xb<2`t3f-YW;NXq8N%9aCJ_2vkMp;*GM`v8ai*#5_BD3?-Q
z{C&n(ydBFy8a!ZolmI_1RNy6Sx;+G5#y9CODM0|YvawKc>Oa(iy8Jr0;9bEPPy7ZH
zuM55Bp7_qsQpwv}J$;JZ7!M~cFh(1oO@KQRsD1`fXl=cT%(6A`=RdL=;Ma3C?4vU>
zg(RJ09kvoc<ornf+)unb+&r(p_pvvVcHen}+lR~pDvU1fbEiOY%WNpe-UK>uPWa2*
zm7HKN+<{oWjydh{ohRu4^|RcMfXvfOK>D}tru^4@v+&lr?k5=vf;UAN0bg=vX#qcQ
zW@*Nsv(xlo=C>H6I;fclqD1};1WBZ&WT$8}<l0j2*c}fxo0$Lr4(ARa>EAkZ{ODsJ
z0O(a<U%c=IBu3RTv!KuMRRSm)qrRAByvr=I@XY+r<+MId2A^ETDl?}G*SE-Ofz3nL
zw@GU4)v-6U{w(UF9nH6(;DxsyN!A1IVUleTc~5V+%KGxZBR;KsT)aH%qt_}x<0k5t
zmhRfU0e{g~I`jZu;pUQPuZk~0*d(;}`Yqr~Vp3ofc1hYmcIa`wo|47D&OY~GK&{{I
zn!p$B;&#Dq=j;^yPELG4=O%?FUi&bIoYg%u^do7RMP^<z2*djI2==o5V!`~15>@?T
zJcIY;J7N2OXd@=*tRud4h?50$Fs!WJ2<9<al9+*>JGGglAKg@2$RekiJ#7|^*w#5`
zHxixGQGGVsw0Kp_1g%6T%swizH3f3+W*^;PT${zZw3d;+4<y3IjdM_rlZTcab2j8B
zPb~s$((grGNG15h&(5E&-p&To=MbLXbUj{Y=>j|ZnUJ=JTg>4m_)w4L9pDkQ3Zm;G
zC{;EtHjPA*Bdi^8^3MH<GB}M@9GATddfW~!-_C@&6Uuvm)vIy6QU+mRx~~+v?-~^=
zy>es0Dm;&mDhAZBU!s5F8ZE@$M2H&Q!wE5Y*s-QeB0w&WYeHC7@KDQIx2grU0k;EQ
zQ?OaObX?r>vbk;fGxxRqln$xNSh_h*7BfJv=QCmdJ)l?fS+Lj(St0#}TynRy7&{9&
zrA+3Qa!>`jv4x>r+#ZkAl~Zd{_Aw(aG*!T9dTO1JS^$@e3pEQZ0Zo5fHg2{Hf9Vmg
z)lYL3akjSV7nu63IN%!`+E4#TGJN@o-~YX(6|cXc0V|W#zp~;|zHIq>l!9#Fo}H{G
z(rs{m8r&-KI`3M{cD{*ucfUv3f7D+ZHYd1bJft0QAsvKTsOuI>i2b1}V*c-9+1~Ar
zQt+_9FwDNAjKcvbWJHAB$PJ;b;?92WY~Y}8IXDzb3<DKS*W}6ts#VCKu6~nli&X?&
zKprDHW`BR6GKzH8oR$QcsmHLuu&6ypzUqw<(zq}jN{R#)twj<rOI^}|9fF)hn*==M
z%Q;|Jx=k7W>MasP>K_didYSn~^}l-PvWF!nxZ5=w?$bW0xYGg7{y<j{rL-ny8|Fzo
z^-IM!(iqVl1YKMb9<EcLatWhki)mbRn0axe0`FwSa0?lTK4<tkR-|p%QXO<?(~i1t
zATR+EhG+&7I`V3Ycy4hGRFr<9W*yZuv)Dv7!KLr8(8)cSZuG-<kMM|tl@NSLXtqWe
zxdN7Yopg*9pd0V!?{qn&(-P!CADF)E7S176sQT<~@0|YZ{@!CQM;Y*X9y#VGmGvAI
zqbhQdNraKg--Y-1XctMi$Bens;dkw2*;o|^cu`BL@edN!Jo@o!NUFRp&0y3M=6#mX
zY}T_Y&}x&bkW~hq&7gw<Ht5QB>#BD!nVu|N8M3-(eXO|vGE5SJS`)TOS`?iLn}2MQ
zbo@ISu-Gw=)!41yai9fo%+aNB&}A3PfR34yVWH<lameM>z(8aEt=KKF*#Gwfc4)WG
zKN(o-CXqtBn-Fzh@>E)1HG9Vcjv(1kwQO!2^<4s|Lssx~WGMnpvR$nAj)v<)<i~<O
z^X8})D!m$2%Q36ehyWCW;UznwDS~-yP1^FQWnj!#(7Nm24g~*}_wW4v<01tx7gk4i
z^QAx-To;jA+^>3qs|a15x52<ki9+0~sf&lXGBB*Ir-9$vJLKirgxe{kf-uI1Adsy%
z3QK)9C3SU7N0I2^85CS>e`|xixyE5wUZ>2UH~dWI#sV$UA;|ZT;FA1{%K0S}qdyym
z>$FXB5um#+2<ig7+6PuW=au(5(D@WKMsrf0O!6#@1wnTV2cri@BO`|NM#7Pzrpirs
z42S>k1xA~H_C_DCi=dl!h&DH<(9IB(v*lBGD3zOQ&9xu%2lwZEGg%i}NBykP;>-Lq
zo3(TYnvXx0z_ib-Pm)f!_g?fjZl=fbaonvy3tpp>r<cc5qc?tkOpj>yQR=N$4>vD#
zFCn23s>P%aM@{ueFeVnvThvJi-fr%mjHl&fY-NrD*Bv<%+e8}~t4%}*$yR0~PTLfJ
z3y>PhB)0ZMIj$mir)(FNP;6sV>vDL*N+*vYeD|E}X;wr(20<U1+g){9?0n8G*Aow&
zW*v};&iCdZ&u;IT=gucQ`n4V0W#I>2&OJ^ELbe}COkw3tBU_A<=7`p#HQarGy|ZaK
zdrszjJ+P6xc%n;<D!~k3P0V(^Y;R@k&E>BvS}Zcwa;RzPg|L`|dak>qPd*QQh_kSB
z3wN5pj}t#j!}o;G5YzJ+cM;zG)S)IaizsfpXxY?bgstr`MZ6R0fg2Wzi7Z$oi^4~~
z=ikqIPNVvCVqA5KnHPqbE<>;(+V1GK3Bu1~DbCf?y7<sF#MGTKq2F@2Z0+$v&Q%NU
z{U^=Tj^q&$jDZ+--k#9;6n(dp9L!KM^8O*W;>OwL#DCf{3aKzi{l}aD^f^=Sz1VV!
zL<DbUFIG7H$3}*W3~MKeaw1*LUKPJuk(@Zm%H58+wMO4de!ncY;947Xyg2s<qi-sV
zZ{AB-F*pV0E^1v;3qWzW7`R$ZXuil@z%pL6^M1O}f7;1w{im<HCzWqjk<UoZ!%ST)
zx^F)9ds1EI=G}Kb#M`e)G-5p5US1g9U0yK-IxV}uANBr;g+yK~UvF744XSam?k{rO
z)j)8WV|U<8UMe3D0FW<3;lC8wn%n^0f99txDSfy24aA3OT>SKU5`lJcT+lx=Y%0P)
z;>ELsIR?#%%(NORbP2QXKE!Flg$(=1a2o5`uP{PtTjRYllIUT;x_`dQYIEpm8f19)
zM}SJ$%?=T#8p$V}@9#@<cXoC-7pAhQbAO5TeG(j<P>&glmEg(t5`IDdd;i4FvHy_z
zpEsiVpTvvsKX@Zd93B5UIsR|$6CFhvy90Xo?oYKSj{qSd{m$>O4auYe9b(9^r#c>$
z5sWZb964jI;;+vbA<5=$6H>dJ({46b78Jp)Wb#M?>Jd35f;kR6?5se7kJY6<77lsk
zJU)WQ)M3ZuSw{j~+j7y%ZhzaF;9k+UZ-^iEX|l`pi+@vz;PFbq0%~UhnsLrHO$h>t
z!QHH&)F3|UsN0RukB*_xG=5ba;G4>4ZUcQO+Q+d%SfE`JHb*1+fU_h6gVzq(p5_6p
zoY?&LR#8^msPN**8>^zY`1Eap7R}oLHk%DYuc|lk=Z%2Za=uXAi~g^>picD^+>{3}
zC>Ran5-$xZQ=~Lw2Wp-lW?xMijf?R=liSkZ=sMqB?PD9dtdfh9qfeaEQ9DmQQ6K9q
z^%ZQ=b|2|N=i@ISg_k}p_dm{+8m$u{=O~Fzf?WPpF111!<Gmoy<8;FKWjH9&1FHMJ
zGo$@>pWIU^dtu(qXGZsy4!bpR8i2cHh=vXcTpBgHD~)=+xxs1j-u519A#ZQP@8meT
zEx2^<joi6|6Z3k?03$Nw<L|&D*f*T8Zt8_%uOT3x?5h#Ubqyn^qkm+fPu`$B>fKiW
zW<MbMpjhM`_U`-Mz=g><=Gw^jI{)#wTCjzNPswSp5M-><xng1nGNdx`F{m+g@qm3r
z)F+v9WlAEwAa!Py4wW;7?L8Ko#AaqD@K0Jzz?)}51HXN8o%)H7TmlcL@)qNh@)=+6
zos^M=!2bI_L`%eo`GETK2M7N@_woKq3gPTz{l9I*Yz-T`O?Jee89jk3?>1ojt&VM4
z+rTBi#5S2ZW`=_+-N;TMeyOJEN@@!cig38k!`pNM3Wb=(%}tPoWOB!y)Aao}Z;c|s
zE<LN{n4{;TN9C}G%pF!|(pcklYQ{wIE~(_|h>4}kXlu*FbdOEk4Bzga^l7?N!K@tQ
z;+g8{k%y-tC5%YltQ_oWXVsYB;aJjCsYHukRc7Ze%jt-n1Cm6fPji6U$%2is^{2<%
z)5Xo*(p5aV+R`7R@+uH8mFj_jm1S4}%@5dMQv=7}tg{MRJ<9Jn2@F&`CzF)T9jW3(
zKsg_oQ;B98tKXE1A1xDH&E^FYvm;xY#rC1y3SF@GJQ;-*MBh<3N~?kQW*^B+nYxCC
z_cG<=<!W@QL@SGhozL#|Bn;I6s@c-V#?8s~?c?cYcvmZ&b_LR5)4~U3Qp!{)8mvks
z4YY=*mMB3G0r~O`<o03O#M+>V)&*7*4P_SCW=UAB9=0h&gr^*8GT))V@@LVIF$6=^
zbZkx{P2{kO<P<EM^Ie0c)lk(MRuAb1EGnCFq(<hA3CxSMuBUrZPw_9vFOv#Ol2n!Y
zco7mC7#fx2j_Cnv2gD$KTXW+3Bs6C!*64LK1e?3t#*tB-o!B}+z9H@Jo?+D@kMfMF
z7>=g}p)igE`DK}7R8aYo))8fT2JV1sUREPtWcQY9j4Bxz0#2ZR>A0adU1*EE=MM9R
zq^?@y@HrKDJWnGCJ#ksF?DK=liu2Du`z}%)ojgMBxa=Aq*h<k29%`~5PwIX4|E8IQ
z;f}%Nw~$e;9lFMBECpur6LWm)fptpEnor<L$r{JKXwA@C6W^6(ZTWs4+&#S6@T4k{
zPCvADLHxMTabgJci4CBcWJNV2q{ktEJQpCzdJ?brt0}A5IBVgE#9&;-d#x8^CUY67
z19hyGV(6@u6+}nLxQR!^+}LXAWCR)Fk=?7MW0rj5q5aF@-+Dns+kwmVQ68kk+~%oM
zJ1`|@jD^e#Qe{TwZJ>_iO;M98;tUS@SjROfsb;}-Bgd~E<aujgRw#8;HwL<-R~3lW
z3WApBluye6@;DB!i!d!DeuWVk6yYI1n2YI}Kx#nHCRE9)W`(JArIB;91lvN*xK-)%
zuF;(=X0Bj{OqH0pEyRLU$&2(Og)fmA`{kvAna=;t<V$vw^Xp0U>TuOXjRymg1^I3i
z53%eG^Mj)(fd4)n+<&_~u_VPT0<ms16LQ42B-ec3vnzSnFH?00ei=U72GC}19rN84
zY;z<fOdRGEglLyF@e_vBaq+ZwX2iyrw&IOgFD)iU%AMl*;jW5Q#}-Q}2_30`l2^)O
zSQ-P{5vSKPx%IOEJj@$oNWu@WOtv^y<F*A*Guv04Ozl~UEEkvczzk!bxi~X^JG=0G
zGJkvcy1X9aV%@IFfB7WhcJVj~Uau>fxj5;m8f4lx8D-n(#M=<n$9HQg5RQ=WHaIU$
z<$0WQ)<o&@83I*%;y+g%3h=?VV%4-Xv!vVSZF40V2V7=$o@1*{M2MaAfe<e9msf>0
z=Z7N#$|c|$A-D?lS~Ucj=eoi{XNhsXd1wzpo|X7@#XTdK9w7Uqq~{;+efO1(e|ZSA
z+98erTH2z!e~hDVbj|r%b9g$Q_hRP(reii7owSBT;I?>(;dZP^A|FM4x(+2&2;?dv
zbx#E3;aH$P0QzfL_)#|G3dI{0IR_hY@i&|62V&>fFb-0L`vC4GGs(knWOjv7i^xb8
z&gYe>)&xF8gM$$U=v9EZ$<cr#Y#w>qLaiP^-n$Zxv9POmZ6ZnY?2(pQZRWX|LUEFG
zS<mPa0~o2)D>a}|zOU$%ke_H{;W+C@RT3C(DtpMI)Tm1Y5RTa&Ppx&jLX3E~#ULMq
z_)~B$Zs*aY&(`W17Pa9xk`Ost{BiIdXL_1z_)~c?uWniXcVpH*WjO8x<XKf}T5|IP
zeK&AFsIvJxX4R%pQwm^M1nZtNu4gCCtK08(Jt67f%ejsVw%bf?Mn%8xx~XBNJ*2W3
zpIHlFXe(tn<pmqtMO}8`j7%g27)Uv4-tCMQI;Q;os7%kLfNJRGg<RwENQ;~twjTYt
zO;LgBLWEp+yO$@vh1Qx``3ZQ#m^3io*m{XgyK2H`9u3T+4KrYc<I*v_#zmUj_S9UB
z%<<*i`X@Es3ms<H+3adxUK`LD85-`q&KbYd>~u}majth;HCAq4_4ZO~TlZ>ZqDDgh
z#&5Hts}CqEc+B9oq1S>(WHoV#KBHm42JE-S{~Qu1V<91fPAr|Udnd&_v9tSW=D{{X
z87hvVT=k?9;O}M`S)&DO5_3lt1}LGga6-ulOMKm^<Y`!)H9k6^esY`d;dI;9Pc!M(
zc!XDR`CfUKjL6u$F$}aR=VF73NS&n>C|b3rIRO{^@IMPng-bZtnn9-$Mky2_27G;d
zrxysO(`a1lTu`iHxSRy`DpTiJvHnxInUJ{{jf!iq=ObooJSGigIGI8ec)*{7;Ky;r
z89GuiA{XCOwwfAeG}ngxql?4o>*MWVvry-zC78&r@kW<Fdv*P-5kTjeyr-}JZ$xYO
zbP-}5Y|vXIePSSD;V1y*><;^(rUEEK+mux|@$HA3`k>TDi0dx~1I09PHdodcca0#I
zhdf3R6BV9xV>}R!(!W+_@EcY#CE>$36B20MImw+Jj}E3%1H>*vB4TgGc1Qp}&Fh1i
ztu@5?fA%<jGSHN_&a`xgE`t|}FVAG<Y)Kc_(}wfu<oJ4>yN*(GL+!-6ZZ=mIG+#|v
zb34heB9RW};7kkXkHW(*UmjXQr=-O>je=(d;9c1;K9J*rZUmT%{gDQB^58;fq6o+5
zXCh-9V$UN-HJjj2T7X>ZE%+f!F!(i4-7zT}%>>{<l)UtX8Wgho*+0CZ9^U}Syo){w
z6tQHk9n9SA2E%;j2A8U{fWdECW?eU`#Cz&VL_*2AFX)r2ImQnYduWbuW=3<?k2yS!
zZ_NlmigJJ7AK)cv(d~u7Y}nN~weDCt3RmUIURsc>rbEcMx0oyrts7r<Dxh88zR-OS
z(a=X5JAFI_L%UP`L1K64&rEd)BYbA0_zf~g=jXHiz@OSSiHj+8V|T)CabS|6QMb{p
zWS~HEqL|W&jynEQy~GuiYb&8K-$|m|D|IB=yd~7j*Q7%P*1UUN4Tw6mH*WUi@P)oS
z;x@JV;XYY^V}T-Y1&-!(Tg8bhZ;Jz1g57}`N8I$~8##l-NST_mJDm48&@L-yiW1Bo
z`Zq-qw{;EvVK$i_iQXv)uUNf5NRL2^521BB>_C|Y(L7GGkb~N9K0}w8b-^$=22pz9
zH0E1gtJWgO6|8s>z2Urg{&I)J)a(xP!Z*ST<2wav-vvAPz3We9yWNTQ*<p#*+cql5
zzMqoS|E4P@O!Z3l%F&sJiRPbuMx=wul7A@9{hD}LWq1*In-=)c;G9mC^h5qd_rnp~
z^0?ZvVbRfo>r&gAY}CaqfqQ+p6k=ciZO7>m{MwLt>`>jfSIp{Ld*}Ix7u{bC@wQ$w
z<@tM^<h>e=8?-LAz!{bZsTbV|FYx?*@I~-A;lh4ISA6EW+x00C_V~TXpJGYJl}p~~
zHK5&Vjq1H4Ef)sGMxVg<Gwr;%R6N%uH)G4^w&)g^m4k19pV<lZGF*^Uk9i9rxU{z6
zx;GR44*BsH#rOMZe^7VdA_}7<iV=DPU(qUC#^b7O(ibxPcLVPKFm_JenTB1qj^Efe
zDz4bJZQHhO+qP}nNyV(#ww+ylvd8E?__|M?e{er*%(dp6m(|yyF}p6Uo2tT-`E=ZH
zXP#G?(yxn8(eNr1=NIQ-UpTDss-#ye7VN@#oaYj1Eir;YlGre|yDy@n-8gBApkOn$
zrn<H?0=ny9cIrtR6V(gs)tps6ydDpp_X;+;43&|-d6P*ArMf8SUCsfT%T#!Ek0=<S
zr~a6+6bXHY*RlzvyvYE;V_t<~tGA$?*P%W6$vTms_1>fFG*R(vXxu;V5uLuhqUbox
zgOQ?USL&0Cx2TXB8yQ+4F2Ohs?2>9}W{VeZOL07(cKYG$nWuY^Ge8loHK87>E;{Q6
zYIXPo1Yx}Xp&~7wM>E~`p0KM=WJP(c+vGAd-!T7OR*YMr;!6U6fVPqUGws9p|3drt
z|E%0KT}?ul4QuMo|6=88nlZa@b8V@@dgYU@A5$e&ivNAs<@0qDQ%u}q#(8e$9ex+s
z!t49E?lRI-X+_*$)|}YqkQTjRB!VX2gX+$W+bvobQrXbvD4VX-Vf`1>%b6K-BC4ge
zDT#JELae2|>neD?I=`RLOj*8l>s>OnxPX&xatmAi`<u5prthSJwSK9D(XnVhNitC{
z{;BfgwwL9xUF%nhm+yC@+ryWKo74AJlzUQ9Oyg3c)&{QypSWCS9rRIWm7U^YNaEc>
z6`xNxGx|Z~DvlPjNfK{OW(ez+OPh2?3M;g8zzfvn>fcXK*4*tFJ95Fz8Wk{X$F9HP
zO2wZPX^h7Z{!`EKQlKy)7k^Zjb<x}p+$6EqCN(!kp(X=B8~0WvSB)DQMX_$?%2^+w
zLRtC4P%f4cYb;kgZN^D_$-QY{u3A_cgWo<yCwOoYb?GF*4~0D6iL$i*X<^BX?rpWl
zWpK<ErIvUVm2>R{5`e8uR-#Wl%-Wh}fRaZL-(uV9L!BO37u;Rqs<w_QfzylQ+P>>l
zJdv25#wMS46vlcL+%I2fh7uW&Bmmq58mA!Po!gui4pcNV51~$2GKlbi3e~FAKgDTN
zIXV`P>HQh+4wu>n$#u1QT7&>JKu#}E^cJkhO(JX^5Z=Vr6?|*!Ka%?O$eX2YmMmVD
zQwDe7b>Ed@5=69C(vQb^{|L!Y$q;me|E<{K;|;Nl<;@wijOFKVEEG>PR|-=q)m@He
zGksAbh_Wz(IhxdUDZ?sc`qd~3VsI<cRiU5w$DBZ&Xrx=?GeEWU^SWj|4oTR)*VZwP
zqdPw(GaXP_n}Ee>9cIH$zk-qih`0jt@)rTL!?YyJWB{32A>pLON4$!q{w`Lc>qUdw
zNA#F)OnnW6B~ngB&(IZ$Pzle%!(mN5ILS`rHQ!GUZ_ZiJi1(<as?O#ON!;WaC(>R@
zpfIMc9~;oL75dlaNpe`uJPeFASyy6ixWVAT)!`l9;Q;3j!x9+4RigddDoVMU!2vR+
zI;uUhsU#=-FcwS76(;zKBBx;qO@p){)KUi}pGzl|LIUK;YN*Zu<!jArpKjQp+S<&F
zfjIe_Qw{VLc*r;fQoTOf|Ch;;ykR1Jm|B|k93`3uBi{50{g(r4rWt)^kH^nHQ7|1=
z%xd5UVXGMD_4s*r`>XB;$WGD{VMiw>Pt5<W6~RusXD!N$A*Hk~i-zl$70J!wCr-FV
zo-AlopqER8ZP*fvX6FRHg0QAvX4#UzP@(7O4|xVO$pDcoXc#*r?mJU|!Ol0r*Nk7j
z>a1TcN3iPb<Y6aBj0P0)#-a*3wkRX1;$f#|QUC9yM0!Z^hGMHr+@hjO3(KLeb$)ov
z<g;=Io*$lVw66t{T91)A<&xn(<{a4eIG9AFf5;1zqxr(S&L!WSN#K-%Gqis}Wup<Z
zXlW+^8&qq3gF@eXmyyFBBYP1s{{l&b5A-2^Zqj61>I6L%yH7@4iH47<pM4_n`x5r0
z1tnuF!E(EawwUH>89ais;4S|l;XJc*PZOQ<{G7f?4DO(<qcJUPh%$M49;CWTRZZjy
zW$4<FVwYskR%_!rTRPd4Qj*x-eSSRbBd06QJw|kxfJ*pCuTAHe5v-?is6A_($UE_T
zUzB9zck?cCNA}nbN*i!V*e682J@MNgsm%gNW)mpsIWjYY)GN+(>uyq-Ns|a%B90g)
z32P7bswex4vGtfs!C>M|C%011J+?S>W-Jc#=<g-@h&{#35c}l=L|xj5`MXcy;nBja
z_-uVIb@xgwsHxFI2knYw#l7e>CnVeoDQAyRW%GJ{Sa|lvCE9VAt8ogIa^hxxOnkBa
z9wVgpaBl3z(|G?R87N0;7fOrbw4=$w`f4`m%aA{Ot|wy~UDo)=tW-6=qw4`Yt)q0X
zIv9feDDQ45Jy>$D;!HU)e)wA^x2zxicKd<W_wV1UIUljsKhqzNU(3_4@4RDWcE~_~
z>x$eKaYlEeCdW`q#=UOi57xT;<95=Wi8Vuh9dLl!o&FAevF3EiUK9eqFsq@KM#;q?
zXqNoC)ZMu2cQ?$U&XyNhnD-!s-}ymw%k+xFCAz;Xx181EHgUW6;IvAbO`<##7%Tq!
z&s2!_HQ%nf>jfPSeZ}|il)pzPZNTJ?m*@6Fm$+x_$kd0n9~zm#1r$SU#-34~JRo*f
z8=DrWH{7){^K|t%Wc_(O#zj<X(^B_jdA0ZXx5-RyCXdH&VA(5*Xx{>-w522oJsP{O
zb<I*gxP`L_0ryWm@QN01)aEH}TQKxI=6=tO2E`DyyD&muBut+tH_)p-&f2a+uBbwF
z_ME<ZrIOzQW!N#uBzCMsvFKGZij6SLrbklrQ9EA2P(vh*0h$R4?&*FLJ*i-U1R;hD
zCQ!XB4@k>%uOo(B-nDC&z@NGPm8!D6tTG3Jpq8Cv?$4w2ufG2gAiY!dEOP(XHDLL#
zYv9*^*g*dq(e?(81~&iO>Mum~#%cdw+dyrf;R){mZ2TrmPey4lmf&VGC2*ugR+j9E
z=o(0snG~-SyjYo^x0?yphW7fgRIqRLOOMY-ahLX3^cHF0n4JNK4>V>J+^oj{6Xu{0
zJ2)G<Dr&p~=>y}DswKGgh&`et>h%eS@T)<GX4pe~!$-qR2qRet=Wg(qFCRV`@ie(#
zdx5f-j`1y`^|vlS&Q~$*IYpyFpH8WOKE-tBD0zYXY)sX=B8=&$FF*TCeD?7RmH73S
z?01+vpaN{X{k>+=n!IL!fTcZ*Fx%$%;>x?l*g8ubG+~A@GID4k9JAV19XUTLlh{Fk
z)Wksaq@NlCMWSnwuH7>T)ItP;MJKujrs6lEX{_Ep062sG(Qj$pYoKg){*XA)ixPGX
zY`!8pe8^`rRzHgA#fY08IH#+V7&d4m#G?IIKMo?*LPK~4OpLqJ?^jwh`()ODX@n*>
zwjEzU&y(E432z{5n3b;aBc*Kw8oa^n1Kofl`mTmaaf2dW`nC|S|7=QlK4NlV3LP<z
z3Z=m_tw<!l#F*jiRI}^{dT~t=R-_3I>N5PA1IhNzQioc{J$ouxLK%NG$*e4brjmeS
zb+?6+2j!63#IOupR*>c7ygA_>-JlHSZw_=Al>+$wEe_XO6&bI#$e7xns$gFPi&}o}
zm`>PBn4E<7Xp!*l@Gqnev(&*i#RG8*FL?YoeO)IFt3FbVO&XQt)M0X4#T<FDjMDm{
zC3r~;%nGT)pWO<LYTy=sb)LX_h`pCLU8BUrFKC%qOXNwZ55`6b=Zw){xecfzEsXHH
z)pDDm^6n59DCLM>nd=nYxK>97TsZ6JWjN+nYco}y1y1K~2iUnYE}KEnz!DLn2hg(>
zI1<uV@l8?gYqaT+axExOM@*oSt%cPs=z9R|l7w<)r@$tzJ?qTGWXd^#wYbyk+1c41
z-b*Po9m~HT)E}C^&5RD=v-{yi5>iUxeN;_0M2wy}1MtkuqPrOIoOz{oY0_$eEy$lm
z|IqMpwIZbyUx*<0QKbKr(?Xy^bwJ`1^q-z4)z1wv)nnR~PKCwoBfj*W$-R?22ji1E
zRf;}oa5q_zFa$2Np~bbgLx(l=OEHQL2qy1p29JwIpYOg{uDZV*+~l+jD6xOa7$%A_
z^-l<}bPOW)@rHn&n7tfmu}#%W=SM8DD!J&n!7SK{$+Af=K0yq;*Zz$tg)cTE`5`8+
z5-RjkAD1+`=#}J%?degOS+H1<VzOW(c&zW};C$K|t>Y=_sKBa9<l}Ht*;Vrtr)M#(
zI6O&&g=;IsF;v2PPx&T}JsJx+b_kT*MdypxLJrwZFpiJXTyeKSHKc>Sv_9$3Nl@Lv
zBaBVV-xC>9Ivf5y;U-WpI&RQ5gQFcw3kPx|9LW7JV<Lt@E06RBlU8Bnn2YZm5R=%E
zc<ugJ;n7*s3fxO@9)(inZh#e>TKF@y>^6l7dv?R?o=vy4_v9ROGhkB>wH2s`kcv=O
z+jtFH=7FtR2b6S9l9?HMyS&dkV}ah2S^M<BBJul_r^}fud3qb##dfX94KtuLG$dlH
zi@4F>bkS2aL;z?}q}|Y(VU$Vze0$^D*gs|idtY$RZ;zFaJ1o6sg@E;8jG!%g+S!-t
zkf`DI`u*MW_4@tFOHJ0Yk6ydKbIxy{38J(_hS?QQy1^ZXQ(r$QP4RADxH}$+HwsC-
zq8zamji@FyUo6S)bCm51sUM)TKXiX+%Whn7uDeRPFZD~lL9wGvgNkEfvB!-fJZ_I9
zo+!r!j|i76XGkpp{XwH17WCFhGz~nI*b=6LT8C010bN6~dV2b5dHK#A_f73v93!mi
z{7=dlgQRt;Y&oui#b3VvF1(D*8xZ;b39n<s|9sCeHvd2U)N|DT-E&wG|LdOPtcTn0
zx?YXfI>Vw*E^79>0hHQ{GSuLo_}V8<$P^!Wswe0>p*SD0?S#7s6Db`(*m9cXaa->i
z{1x3JRU)o?w|r?kpq_|ch{{25mvz(bmn@sgjiHIALYB>#36pc%v()&=rv*A6w*1bk
zDH=UZUK+o?9u06(dY<xTlr&M5_Irwxyphg$$Qn7W`xwztXHM}lRXL;7lXay^!k%%~
z%F~dkF0ZTd8?A^Y7;0j5F7|c3H+pc#`_>KVvm4w&W?;pDy%bST@vLh;q$=2%im1J>
zaYX0ChO|YWe=_y>sn@Q<^b$`wYM5{ugo#T@fpRMyQp`1!cKhpKWpy<TH0^c_Wv6!_
zz>)C)AwGI7Re~p`t=-?gCY38C<u}&TV<rx0vnDcXQCe_JBPP`8hrB|u{X<aCn77-X
zoHa;}o2zA<Gh2u@(!QrSMwS5eP>N&-OlHkAfiPLJz5n&HI**}8+)K-SF-hgBLV1C+
z8{L->KLC|Fo>Sg98r7!Ffw`ipVb<~2qiCSQ6R-nK-RHU0zF%ibEP?9rn^Bf<Uv<#e
z43;CF$gLG&nqwz-1R{&mKJ+P3Y~)^<TcS@NiMU=&_bE4uGZ+0GVq~#6yZ$9F5&0R>
zK{9yhZscCa!qFB|Lzr^%7p?-=@wm1)er~fv&D|kvfS+5jK>l6vNdS`(K1*AePr#Y9
z!UC^D5k*M~XZ_`7ql`=nsXZ)LnfFG()UZ?fBZ-AnUc(VNMiQTpFUmCgFKTc!ZD`h)
zD1=8^6F7RHn7du$dm8&>u^$L!VWiGZe~0=Cv|chVfXPvOAJ9<Db{~H<bjUcMHBu=Z
zNDVM@x;%1(_D0NTb&iLzYn`f)u8XCAuZ+MMA(Efxv8bX=5Ttv`;l0ac;9xyoj%jX3
zDUn)S+L=HAQ<Q)NFa1(4awaDu@$p8a!k+UF5d{jsKT4R0W2h&oVDJ~YcBN9~&GV*3
z2u_Y$^%B`bIVHJ>#j?P=*u@uYbj=sUzGSTcU;=x`g`v^|JNt8@$cd6}9urTA{_}`Q
zDWPezlkbaZ?PNxgU{OT3=*CDVW$`MUmjc}-laeA;S35#!#ans`Wgn{sTDBaoRZ=i2
zPjjf`3PacdQAj1zFggq~0)TWu?9pMbcRX3}9Cvif2aS{Xg~K<fh~t!V)76Cg*o@%e
z!z795n$?nHKa+p8td9G;?QOQ{>m(8q-VxtD?;=@Q+Zvc}KhrT{Y{T-|RT*ejE$JYt
zeaX*iksB4dt_P!wjT{Ewi_e>es}pCNe~`=}FxTiMW;GgLxd=4|zw31O?X3*QAwP*=
zb>&!_R%PuR@?v>=F!W$Hak*DOZ{pUDV9gbw32F-uC|YljU}=jL38O2c`$IC*iNNBH
z@){Y?*+Qs4OtkgF-F2BiCIuz|q|WeGqO8(i?`W~#m;R93eNlnhSP8n)lxGpHMHs#u
zsmVLtuqc3Sq)4XWI*V6*Cs#8?WET-rU0~x)6N1Q4@8?+>=h<E=Tm2wx<yr~&JV)UB
zK=krcRP_qe*5`eR@j`FcGmK;Sw|l<5TghTRYG};*m9bOjP_3`tI2tUOmqLg4med$@
zIF;IM%qEqU!eCEV=S`n(TKr=-mZ6pM@7RG+qERaB>_266%=unspwtI@b{rpCZ7F!&
zgkSS!jQg1iD=u<FAXMCDs}a3uCDz{B*$=p-#LkW-+isgwlO4^=v1f*{fvW!kqOSQa
zF9#S<!+EZub!z<<?>$L+76O77YBtejuXJf5CCxWQtQ|X4oy_^20L1staA`~3+Up8w
zO$CkLgm1j&IpLz~LWGxY&y6}Dauc#DU+I%9he--zXC8c{oV71e{)b%1*h?u;yF>0C
z{i`Hr!Y|WCb!z#eT=lMy+3Q{Pys${aUCOAmuP{oY!$_*&J^rbzv^VGvxjxI6yfE%t
zaXAk7@!MV+Drux`);xFi!8FIpdUY6PATzVP4SerrIm^2Pivm|1ZDj-1JY`AQL2cnc
zHjkUxi%+|+I^nIUZ5Vw{<9eIL>r2MK2aS=p@XvA7%M@BpPoB-~#9RHEurE)yZnbT$
z*F+#6cdeu&A80=IPr<i!<|IAV)~2r)Y|r@|3=M+&-2>afs#<#SsKFnb`&FO#zfI|<
z+@(p|YJWe&;=dH1gVQyC5>D60lMsF$g>IH)o7Hds+BBP9x-R^&2~u0484A64`U;!A
z|8hf!*2&seuk<-5w4u|Bt<~*)pJXZsIP7Kan_9cmIHK?P%a9i^`)@YCK`?6azE%9F
zj=WL;7^reyvD%yBm+M~r(e;93=xFJeedtrj5r_g{S1S**K*$6lh*j79fJ`OjM_Lce
z>yduPqqmgcli<QKxkSX5Y#coqqS3gkH<eNu8B#$(jbA)r1UvduxzyI%(a|A<4Y7an
zg*H&Wq&;O!A&#-Tc(9VzA51p<PswG6K7H!)&+tR@Z$Oj&2g&tcW{dyRcur9susvW!
z?0KMu@RIb8N%|cr(qIqEUQy4oJ1m+l6jTV1#MauB|0SjPe15|vq|}OhSrW#M%Hi$(
za6G-qp#|fxnqO_VXYs8Lxwl>KwlIZW+wW4MiZ%x?-qWNzQX1kMj>N-mM-3~GfhTPB
z1ZDp4-mGbdjze@^wo(8kFuUvPDVQ74cT=VYXUX<KPLmQ)vtSO%cC$w7yBYb)bX?Nl
zoV#l7I!Rcb*$V*iL(K|18F@Ep@I>A(8TfpKrP^p+SORr|6^cx4Qt-k`Xo5q@*WyuL
z;E!;gx||oQ7Kym?H`k}@Y1Hwrd9nc#jfSI|eVxH(W}we5pyrn*CpWAbjtK5(3Wn^P
z7ZkBJh!+ZH(L0bLEP!zgn?qK3=ffI_ecA_8@!zdi)Dpo$LXjVh0V_WDFMF9SAvxY|
z&2|YN)_v#HQ_w=fn&~XB2G+#Fk=uPrAMQf_N(2}2E_NV9*h>do#b_K-{{)FPg8xl*
zfstVM^?U@0IBG7|i#?>%Sfv_R*uae{ZDdi2q(V0Lg7sz2L~M}(W9-t?2I=~`y~aGg
zR3M6#c-&+@to3$Oc+L;^HCyV#+ei_VK%KO3g94PWXf(jQ_C|#FMn48dNsKT$CL*`y
zRIu|@RGex(4x@%C%RwK9@g@DilM)UTuTi9?P9=aPE=haWC(Lk1lsu2{Kb$klu-crI
z6%&}|HxdlmlqxZ)xZ`F{#4f4cmd%m>WbxCci)z?Y@)7mSZTTbvI}`vZdK*qTS{_dL
zGXZ&`(dtRbTJgd&pU-C$7c+#%Wi*9{m(7<nt;i*GzeP_j$$f4cb3M}OE)7RVg2U)M
zqk#`yMz|6vW^#$=C_KHXr5G#t?mP+khi-#JZmQ7#&9MpDkYlT0?~~S+&MeP><4FKs
z>P0nVXAuyxeB#r&x8rlvgz`CL`SsrY`h60Gh_LdcdzA^PXKUN5>(kNkm3iJpY{8aA
zTHW&%pc3qXfg^=#AiL~+3<I3YkiS#5qE#6wDWKsJ$|w;52l?&}hSB{-3GnUA2I^ji
z*Zf<?O56~8HJt=}YZgMwLMA6y^Xub@zgA)#i-hEspBJmA&>8H7C4{v2XurUH9X0+X
z@QPbtITEMhQgNzDgoJW!_;j%C;$mozeqtt5y|0URyJN;fI&<wDE3NXp@b!OGHsa+Y
zy9t8<0lofXoBt;x-@nSn|HH8(L}lZ@9<<Mi8tn4~1n$WS?Rt$-zeIEmFgbj6zKA?3
zIL$nIS7JG7g?rEK*bA)42J}K99TW%l%uzPeLDssl;O3#EY1$*ZM>=$ag39r)93=Qj
z$vW``AI5_9bG2R{1uji3rNPT&@}^QvO%1BLYOYX8U3?6=iQh>3uEv%s9BR>Lu1ll%
zQGB*yW*t=LcX@l}*m71n<<JI&5>##;Pf92E56fqcPX}Y}5_g3Z&D?MJG-Ck3)R{`@
z=9x2I9H$Z^eob|wy!`A_k%S744&{P|7XnQapf)V`rfg!%@%fQkiyQhbyGp4qIkWLF
z9U#8tXN3I+z%PVU*f#Bwxu}W(UW59kQ=_DT+GW%pt;%&zWCWHK&nnDue2ownLMs@v
zdpz1rJcht-UMI;JPduEoj8+a#lZZ{u7Abl3`cr@K5z0b@9#dzq$JmZ%H#omcwQN<R
z$sNY5HB>#{x5Zo{h@4G*z~$?%0(GL$*o?K>uduhwp5n6D2K`se;j)PKSx4fs%W};v
zq~7d!DDT2&$~*rLC1cBKsbg{F()D?39<7Yl)q_$C@v;j%teT}wb>y<Aj*a*S5ku09
zLXK9%_-O&e7|R3rO#u*kN<cZR(ZV#`EDC-K$5No(55zD|3pCMChBP%k;G3GxWrU@H
zTsT#NP6(B3q5}P4XsnV_Z8DOA#t48bq00Q_EjLrFM}N=LUGQek;nDpgWz)Fr;s@)(
z!yK~8!Z_CK-gJI{g9^hKiAI0{wHv0%q$-ekpangGFmx!aXDr&+R-`uyi^=oLtj`Ly
z!vz!*P~#AQ*vIn=)DYEHEH6++pL;x?`l3@jCsaMWwH|LM&~QHuUvd#2QSIGo=m1R3
z5r47%tnDF95@_|WF~7WLuvrNvBXuaYP?K$C@>?RfMvE#sY~>5dyeS@J9vflLg6@=H
zmnu(j0lYnEZ3IySS}3u*Fi1P0P$wd@k`)vPn9$(#lv)K$2MAu{8Yawqst$$hN0bXf
zyw(|>l~qvhj>sk`khv7+l@BVxs3urmv<;~m&ie8W0`d*~!mZ6?k$x<f41K|Q)*(Mu
zBIEC$ri1o@6zRTf-+A;|rAv;P;U*lTF%GKcm-2r-z)u{FeHs3>O-uoZ<dYCyuU172
z5UD%vn!O0qsP<dwA&WCIrAnE9l0pz4<_oU3P5ij??fGz#Mn`dQ5AHAzZSNi%vwgmw
zG{U)*ZmPErb8Bg7X=na@_#kB6aTASY<yJmx6y=gePau@|QNj%;5O8T4tS+t8iJfvl
zq((8E%t3p@AVoeRJgq+w@%SFYgy~8P6t4%jLotQbPXj!jXjIa{%7LSo)LVXk)H861
zM<bEY?~Hj!%*R3!TfP9M&D<8pj3wufrHzoN7P+IV$aeoozVK7N^t$HF%(iV@(MuYc
zUmkb+IN^U_9{2tpl@?!jzxyBmCnbkiKsyQ$kObF%?g_Lra<c#5R=hP@Hg=osE&sI*
zIFz#1XN(By5?Q^)uJ75d1+KgD?7q@z4jD*bXX>68Zz?n%<M;dIu`3q0$hMxN)!Zng
zxX&JXc*i{s(@~;&8XC>K7vIVLa;#8Rdd=}Iv%8pFR@GZ;b)r^FpE(yX>)gKRYCX#=
ztZ?4xm~^4L`xvofYjcaL3Q;^EpPpISRx88)4hEN7=9`h*wy|#E`oj47`<SEKF*#ZE
z(A#Fisn|by*3?$Rlu|oXq_z46V85T}jSj=lvQ3h!&Jxq!oHDZV^Sit}q2+zodC%^7
z_Yr25&4vBCKEKQMF19@<CL;5>+>re7^rMl>8g;|=!@bF5l@Dlat>M0uZcE^!oB5ab
zuZ;n1H|uSHEuEb}F1^@XvHaZQYJxLUv9`WDoBt4tH^a2762r#l<IAi}Wcct<>lk#2
z>w@s@8=jw8DWM_QOR|5x=(M1LZHGstiCw{I3$By-V#NNNspFX3Or3};0)lN7k9!c<
zN)Nu?d|^#!BoOLaQx#P1=F?@>y?oDQu5!ca_3i$6H=7hNR$8koTD0Q_o4NGd3p%P+
z`?S^XU%^?*LScM!Wn@t`6AZlQmNhoXt0Dj6OC2Pqk5Gk?-X0{B2fI<@kW!lW2D4PU
z-cJ<9cfV>|wna-&_;=#Z?2gat_q<yTH3*7d7R7o}g*H^}o&&&&`AEOzPyl~=eYBu+
z&*xr-TvTfCU{Ao=Ua=JqUGS^g0CcXzT882EOuvxG0Nx^)03rxkj1;(zS$rda%ujZr
zn|(^!@4RF^A<B|GI}sH7t=tm^|5u`BCI&&CIp^>9)5%+WZFvL;+%oH_oA0j~yFc@N
zCl4Ia;C^2RNBjHV=hu7Z&!QD!F<&ISKfBL{4sPW(HmNC3>zDG}rA{(eF017WgAvva
zNcvI)&CeBkZDH86+vlbwGBr9DR-1#Vo#L!q?LTLNexKKJ1n?))@n8r#%o{ZoQgG+Z
zmg_aEw~vBFGBpXra4Yu{vrj5zFzS95Eb0msouWxRR?Z8==!Dp+#IrhH7iOL2G`6`t
z&$~s;+-)<S+9TtvpIEPYng43zAB<g&cr|R8>#y9=hpFaRt~l+gmboWCQiXf?SF+={
z1&XZ={MJ^jF2r%7X{pQ-tUt5VvXb~S@uJq7Rnu02rnEJSi!5`^cHi^(>q{U)apL(r
zYp*-zHy}(QsCXGeFuK2K=>A0qp`U*G33i)XIfpGvt_xpb!%^Wd3_-th$(@8Cf6)~r
z@B9UUh3i`<we#oiV)R+I*u`%Ker%^PQS8)Agc%R~MW>546Qo>qx`ECSKM{dG%_3ta
zVX|Hy(z8{Y2o&~UUFvH9NG3!?hMLp5<!O(sTHZRM!&aGde&anM@B8d@CzNTSM=SN0
z^pBM!bHbLTHDNAgA3WC3V6=mhp~P~oR8YwHru=~pKmS7xLn*dleHMkcR$$d1JuBz#
zOK2vFt!lN=dMl>nuiWEGt;1&7SuYD;ApHhefz>Wjf{sZGOR(@JG1=9c2NSM}f}SUE
z_EbN*&>GLTZ`fWysZjLdkn0nmM2QVlg=mxj1Ugf0uazE1w?bc5H(=tCENbAeOo~4n
zHe2T8W3;+kl53rQE@3BqgwrDZ1k$@(r_)0gNjUd}9tH=!uUs@VE6fB2#5tsa32VR~
z>kBN@obQh1y4!>B(Op^k+jRR_IU;|)=C-4Y{1b$2Djl;oP;Jk<->Y_Mn~h?t^DN#i
zP85)IJ^?`wz_q9-T=7@}n}ij{V<hPTp+RwDvt~q$&?=AM4~92v!=2)gz=jBNY-c{@
zZ)Ag@Lex=sDuE+DL@Np;rFL@VU9_m3DaAGfiLscp;<*plBUXepRpE>qV9c=&uJ7m+
z&{I^QGj|b+kJ#+Q<~hv=oRBN)4F>@W9iatP;F=|6Y|_8|RYBvd3kHfDlU~x+xgs^N
zaNvPYEaBZf3Nk4w4d{%g6eVygH<l=@yurRrO<w~|vz|dFbT6P#iD4)Yfec;WXOzRT
zYR;IEWcDoXOU4G_xsMGxEKe9}z@IjJ9edCS+@ABNnFA=(73CNOV6erJNb(5H8y?j1
z>23>IDl;EZG)OcPUBg-q&U`sH>rtQ|xEk<NGS`3lFQ9S2h&{l-6cs%ZS>+c8Sk)*7
zboO+@=d`F7ZwLmC$redOFJFKn(o*m!N2I764i@465j_tm8O_I~Y*W7;O+H7;O}q@i
z^A&H)r^vl<;;zUez`r&(_%td&K##h3L0F9v%H9|1-oYs|<cPTrkg`l<_;+6x+6>i-
zcq<Mrq9^;dv!?z`4MOv+c87!CsfS2GI3aI-!u{!A_e%bY=qHS<qFaysiw-*Y>mLk+
z8$zP+IP(GFmEaP=wmq?j=|B)FPck@U!PIKG^ul%QW@iku0V1WYNZC|)KYAM?!kGBi
zZ2-kbfFZ$$V5zolpae=^Gd0KR>GG`HYY}0QvhVKIv~air@NqVn?KBL&ot4{Rtl|QF
zg%H<ct3Mq#B1E56v&G}YJ>w1=1qNoicS?2IAUP8c(C>)CIWYDNda%EGTLLl?@aa`P
zaA*eDUV##YG=_?is17=ng1Cjy=q)C~6>T2c(CV>@e5|PGRin2Vy^SyNh@rySnB~R7
zICQd;Zv?+}ImJ^tOMU*ffeOj|UW3)!Pk^L5iVLQlUc$GJI5t^Bj)^WH#g~pJ)%*>f
zDp)M1pFy9@FSF04SR4@+jLkBdp4bM$a2HM}m5l-4k4!^9n$jq-<ClDzRv^io3?$w>
z<4<t+fyy~4ib*FaR`^mFLM)y<jfK2{iXE7}QV3tInhM>*jJps9f&&{eKd9;BGZ=-B
zi<fJdup@NdI#h{LBx5nqUiq6LeNe<OC4w|_wTa(OM$7t<>D_5gybD}&&J{;hql%17
z99<GhA@dJy{dv?kSma>ML2y4RUSt2;n^v77rEn0G6@k)rQ<)>F;>T9)emSHpoYn0!
zsTO>WI>H~+(G6))O6Srg3Z$10=pgB82B3GDMKws)Q+;nVcA7f~O!{-OBo-ozZ0A8X
zkga~@XX_1*XubaZ%DN?|@Je|hA;tNUJwB7<KQzf8$56_F3s&-o#G$d;EpXjn7-*$e
zt~Q{qVPz@dWFoX>kxcbiIorCC{S|tqM40LFD3p%0$vLCE@`U>Zk|{D@tuUS(V38Ku
z;zOcSRDx%0;99eRsuoD{VU?g?l1q%O4JLiMBrowNMi4t8@8F6auZ%1@q!liOuN5lB
z(%{wTjns}49q^HJVTr6}am+zBXp~wENs%>FJIX&fO|b*9h8}6N(fP7Velvz8WLtKS
zSNY6!xZ9{f@F(KW`9J*et1yY)qe4nh;-{8_D=OMU7o{^8x9;Y89H#1#up;}j=@F>3
z2#<aWZ=-`D((tU?W6-c{v%Yag;9t6<g1AU%!tP2xE8qys$D%$lIFYmCfVaTyxMn$L
zT17+e^Rai&ad&0Yr#IRLB}6vt4}@(}_EI!Q;WJzE?l7NQe@wAs^`;y9VmTyuv2JQ8
zoAaQTiod-^L%*_|?DzDocp0K8VHC!jHKB`r0JCU6r4~BFJ2=865B((_NMMO(ztPHh
z$QnpI(z!~phstVuCBn$zD8_F{{jfFVZ~frIeSub*&KH-g&eaihxuqt9vD$xyMFfGh
z>F3F-trqD5V?UM*v}X&t|MBI95h&sw2q%1X0*RMHYcXQ5Pmd=bC|HPYQVGL{B8QBp
z@n`oT4sB!<)_t+Yl1>T*3Jb~5g|-x^#ex`8mVGcFzQePmP3)Ve{-_p)cJcuywSnP?
zrM~R#gr+=^g`j{kR?c&0SgIy1SO7PN`i1meLd$BSR5WA%QL?8!8ooMQr;2zQpfb*o
zi>=le8qA-S_k3nWnVd}{*aa>)pUg)8JZ*Mmi6+NRV}f}c0@pW0D>pmpho&F+$!?E*
z>}NcYzMnBX<`5YaQq8i)Ammh~P>ABCe+zz3`bR_lo@kz^Vi7z2%psN1QgQ)v32=`M
zqv_A25J?PXHFCGhz^o!MFryCuy&^Ja@6D)sfMmOkHCjau*o)sRVSSBTs2LFc5n)YD
zZvwa3RYQbb*`@59R@H}Zy!ewNUL<b`{=7sL0(bll`<YZ7CgHf~Dn#qm)%0ZO0C$*d
zHS8$3NHY&>TTNP1F*0j*6MKIhn+`;&xGf_21TBFgXihe_`%xmsDF!Zo>DPMLl3Mzj
z{BnZ6Dex)i7ppb<sI;*9khB-^NgtFi6qmW78N!hQubO#rY;JP8UMWnZ6jR0`rw4j%
zw4q81$q=9O3Vta*gDK|?k)<YEe?9j+{BpT`7?1F|2Z<0|AJ{M~IxKhJ8W11)0oWU^
zXu_Mnn1k4e)0=HyPehM0_}6W#uM;ExDkKe?mtBC*A2ljqhRMAH94s~P$sY7enig$+
z55t5@0B=@~b_V3kafEPT#)8JRmY+hBH^;1AmBP&t2mrPm>0Sb68URok_fe`*vY7(9
ze4GJwyIa(m)2?4-nN(+Zno*sgdgt37^FX7WvQr_f46#sp^-Q*U=WEU0?DTIka`KgE
zEQ~%YAPtIXtRiTVZFlE=Z`S+Hqv7Nc)d`a#`90Ts^$Z?>??laZvC%*qrxk8lD6W`h
z2A?x$^*NBU&E+jzJ}j`JiJ)QCEgnE4LX1IP2!qxl-71%*0`?<C%{c9T;DUbs7zw%H
zg`OPpcXn3<Hq;;nPxIy17U?$yGD~=G9W}s!(=35@T|69PGtPEn7h&x!G;12s$^`!D
z#U3Q3oI3vDSS9OD2$t^{2q{D_=;YN!Z7@S}&bNfGa|}(IS4HAGKm$VMj~<b=Utxk+
zDM{*^&$x-=FQC$6IyJZyk4vF<s-O)2i;q0o+f0Pco^_&7O&RDZhI3G5Ml!Y06%kD_
zIj<3-6D(!xn?XB)$}i+|=4P^9S7jwBRH+k6ONjyNXcM0R+m=fm5&V`N15U1y20`+i
zeJmX5{wW`GT}hMllstx-5<E=yBD67@df-(UI8b=Jz}vC$f$~YI-<Fl7Z@)@ZPZPtW
zxDr*59)-L8!cAl4*uvqJ-1*LPC#d)I?4*|)UIL9&le3B(LzDy5LUv=2@xbfVN5@=o
zK_W`=uH$w?EpHg`q+~W6!C|&5saZcLLk5fMTOUyxb=5%T7($7IWHVV<(L0l~9N1?%
zi2Uda=rBR9yY;L2L+~NN0lf_=?6DTwI2#(f8a^>68KvE1LA>_VmHe_;E8@4Y-Eagz
zLMc-w{TS?|-e^by4&%x8wMvTfA*?PGF^EqFsGv%8*+*ZMb<YI%lGt#5V<0h=7+snn
zAHa&;38RGCjd4v0H;SMX#IAw*5F4bC{wVtM7iyo)8mvBL@V9e0<!;o}0>pieR=2@N
zL=Q<W>f`w$v_UqpUjG70b}K4P%o1|nF+g~yO7%*(p7es!)giPquiJ;Cgzu2OhgdK?
z^t_JFC}m>I``k<L3*OHfb$KsxLpDK1CC#4?ATfC4a4qqpfd~86y+QQf@RiD=8^~RA
z&JzFFRuS=Ps>yXz6}{NRhs0*p%w#seXj)q+?(Xeh9!?+j9sWEOhOI}imAKt*17Sp#
zX}UMkM76N#1h=(WusbPVBQ>+3_^hkY0Ndb|hlIW(5;Z?AFRymMR_HI`Lh15U@-vKM
zoOZr82jZ<}3yZdT@zq9Rh{-sO0JP)M8d7-AUJ?;Z!fM5sr6jv&$BuJQRPd}mia0jq
z!xdrsFPyc`Lf-h~_ebD=Z?CsYhkJNK;E?CAmhMW(f@=0zh;>S&P@RwV`m~nef!}x^
z{B)fcA@5NhO_?2Gnpn9Sxe~k<^k<mCPq~Vkaz3DU3D2Dj-tsTnDH+-n#m!{%?up+G
zob}qCNa7_E_}>D7A@Vw4@?E@1Z1|QdA?yioFUK4&%?70itH%+&T2x)`?W>+NG8Ia_
z#7WOz*5GMBUe8loEZBqKdR_QC>_gzMiYXVbRCtjjEgs*1e>b=kzlN<vpY?qTpVx5&
z$0!)z=>QyS8In>-jP8oSOx+u@sPCt5%_$$OP3K;p0pC~Lg~*rngK4|yBn!}>h@6QM
zr?J)fxt)*=bMGcHi<05(8^7UQzLe3QQ{H7OFoe}(=kDRqJ`Lg*_a<uu_i46(&?=XJ
z1j-&qC7RzAJ9nxDd6Z~@uhI4x=d-tY<q22|QV<n_@=V@J8Tz-F%FksEPClwCb=r^Q
zWs=$TLI+Kma!0bP;jtI{mpnXwxQvbS*$i=MY^TeB8KikBr7@3$2Am8O@`0*MW2O{v
z{V}0AgDJcfyCbs*>-5Gx?czK?(<X4wFG)(iB|{qk$*Dz^9cJ=LeA*kCSp++>mu(6Z
z=nNh;LvW9EO8D-@QOSWbO%w3G<SbI}Z3KZ4enq|BICkDQO8@A?plCmD56k;|&);mZ
zgKs<~n2mWv>vJyod(Yne198V<4+ueQz3n|8SKsG!e0=^~wytzFT6UaYcSB)CZUlU|
zUlIF?ulKb!kXf8X!YfTBTL%FADPLwQY4}<l;K6~$F4~e9eAV*T6yE*;HpaW@J?)E~
zOkUQ|+eQ-7O)%vNKCJ#qbh;4spsT}ln+fbj5b$?WQ%H4lP%g<zJk7KB^Zk2M2P~<-
zrDI-mB|{gI`hm_U70abctK_EwJneHQCnp`*Pu&))H*Z-lgJa%{Hq?Q<Fyp~L1pnP4
zl!h-;TK}(lpb6qXZv?F^{&#Z7h>DEe20d)gg&HDH3;#v+Q2kImnE9eUOgyPTwiNwk
z{&;hZN-LOzZK@yNq@Kh^HHGV63C5>aabCsy@zdZ2g;?&6kddtyN+U^51U7j(ZIgA$
zJPdgE4F1SXHFTXDBs+{L749gkE&|J-5~oU6+$MsTp)A}Kte@&OK@4z)_GhMl_WU1=
z3kLI(-!ie!q@69jf?1Yj#qA!$Ll;fLoV`lvb7pFTL(I9=W>wSH9s1TuQUDv=e48VB
z;5woqWSW<?^1?+WgXWOfR2L8tp07qzvH;O{C>rm=m`8Pfas(rU1*{Q-eCmZP;(OQv
zevFk<uq`#e$6X)JnMI^FiL@@RCvVDUjzCsI=C#~o?B@<t4*RHG1X1YPr2^Fu2S6ip
zGSkF?Q}7%8M0Q_y4>myLSjY@9>HQ%lTNe8<wmSASe0l*}&Cnc0KnS{`6&zHPIeN7I
zAT^<-*xncmfJ+x4q<9=$&EuRYNz}oqC^P}nO-A5Iz_<7_f|xtiHqb4^bGl^oQ@njK
z??;mLQ@Q>&<xaZ+0Ts+Wk&ar777sxC(BEW$=PDU7;`x<wzd%uaL5zTm<!V4HWU~<3
zLG)#kp?}8U!5e&KWlx)TUGMi;8==5;Zal+tnZRDbA_@Viqq9;;Db*Pz=|Ja#Wq8%@
zen}8C;n<=x+v~eQ&pLmsZ<6Zu`nvbbWIgU8fnbh1Yhdz3hl+nq1#PYa=B7N)sgGAZ
zU*J<Yl`bWKKr2#L-dxIn7i1Z`%ZN#*xjUi)R=<pfs%%!_gDGsu!oprc4CDvHoO}N-
zqwkvrg7b9oX3ee%AwW{#mWz^(vWbg%h20Zj!J8$GafhmzwU~mo2hU|k$`Tq3#Wcf{
zh2V4(^TCLD`SMZz<tMyu8Z>G)w}N!kEB~Yph5Y_McH>WpuPMp|KtR8>fPnD-!#&=}
z;D6hUk7#>2ZHy=U`0<V;JF29fn@hGfP1MRM;)%?&qVRZo{<_<;so>WaCk6qAKv0n0
z3hVQo)`tM=$y!p$sdBXec{n{gI~%L>vTvnDE}2OsliWVbntu|mU|+CvL91EGn6F}%
zQ&T7%Bf+a#)xZ{W(LAgj`fAJCsC!xTDxsB)YMH2_;#$Qhb8xQxzSw`fS}?wN$UDoU
zE6qkrNzijhm|YCXEz6iFO7V&OSxSj;fc9vn_s}-IFJh(}X)4flU80ae`4LbNb5R-~
zG{OFBJIxtkne^v!)8tt>vz*Ft+RtM)O(gY{x$eC2uA*Pfp+PfkgsLXGR!NMp7c1_$
zPrA^i<j(J^$Yee_rSzu_VcJT^B^6$Z(yCbd;ODSlBI%kWlb8zQ-YLbMZw1`??~2#0
zb?bP|Oj4otSzXe_KTPdri`<t%VWp(gjezwer+(MOu}Wusv5?k{$vl|NLt*H0>rG<w
z(rw;FqzsK&<&zUC07XS^t7Ek!;L4XFjm;LMDRSY@SFVUlck^b2;zM)vzS-35Dt0k?
z`t}iTH=(FY?r{_|8>h@~j_J!fe638+e~?clP_0K)$o<NRb5!A02D>S+u;#H-M@PQi
zEMK4W?SC-DdS>rnX7OdJNdZCwznARcg4`9(SVtbF&I;+mbHM{q^Fu|>F;$4+PrH~3
z{(gIeCn@F9((QA@T89Gz>vWKr49bEU>>V9}E=@5F6?1(f-621AK3nWa9p)(h$pR-$
zl^BW72&xdFWhqduNr1!n6y*v_13QC?cImxQk||bVPBEQ@;q4mm6<K7O=T@@S9GcKr
zo|Yk;c}5e+WB51CCrQn;q!wDy(kgPNRdVycR&^SFrwr&Hd{3Jic*ROx5V_U0vW5Cu
zMvw*l0<7Q8p+QT+%#Ok0IT_4)=C3iZOc8vhYDttTH8QZU4F5V$ZgB7;GA-0igQ~hn
zMTP(N?eU(DpTOT^c#)gp2h5oxX9iS8&#S4<<M(oL;_v9{#o5w6eUW_nyj*RT{hllB
z3;b<Cb$BLZ>;lE56kv<NnJZ5v5N=6cxNtU}r!L!94{FRby;=woPL_@n0<D1^P=5@Q
z-Yuq`5TBtyF-?fqL^I8a|HkyT-Y;t=CY<u9%K1^WSpMEs#94AM`U~P|-pA;iDt5)T
z--Rits6xVLP$N7|0b=MkY)&+VgyOa%=A3^?flbYGLh+43SH|*--VZzWg<PB4YEhVz
zi5v6?#3SkWFFT_FuAomTDNcoPw`?rq%vS%*P_L15)e7fYiKJtSFMCd^dU^i+Xo+#+
zHALP~&^fpah-tMwUIC{$ziH@i;IY2omH8%MmLbDX*lO{`-QT=`kH;iA^?9%jNq{0c
zk(s#f`#S(1;VH<?)*g?Ao{$P<<m#=5uZ!ocI8OX(AX9=3(-3zi1XqEX0g_E!a<7<|
zxvoKjWNbGKEyszd2BgQAoF<Ob3Z)2uqmitok@xW>RrOGTK~u?Uq8UUvRI6aWRM}ja
zuve(CMtIh(F%2sjr<<vUS*%+bw6|UjKiBS`G_T-DUw{a8JeG%VcCV%RQ`qFvKZ9W%
zdorj=VU}Y5e2v*FHYfx+R$~YzWXzJl$G*6T1dLhE)GHcis+1g2BIlb3CjvcxwOM;{
z{c2CP$j$1$P-zH0X`wZcuUgXBGBYP+Zzgz<;Vx0-457`zJTxNDcU)1A+ts6?X6LL_
zrlDyU_j-EA@gPg65W>^H#Af{L<6`1N$3Em?C;~2e%`hh{lW%LTYz<dM;^~PO7DG9N
z9~SipUL5niW&6Pq{?=aCw}S?&!<jeapU=5A4W@|U0gP=`{^VS{$${<8i4U(*vElFU
zi3Atq52!ac0Vr7t1N@hirFo@-EW0)W<md?C&6tvB0o*7^>{s)Z{?}{B;dJw<k&qDY
z!rs4J)FZy(V`?sGF;y(weVGYK;ky3d02(mDRqf>u3W0r;3w1@VwD_ACH#InwT-lcK
zFHWXnPL>{sZfC*6-IPX6%lUve)WB^M%*-{(D|k{c%9s_8tXEd&zk0skk8GX!=8L*!
z<5rWh!n{rx2v5A#$eeZ9h2^Oz@7Y?GL)d?N6cpp>PnKJ)aj6oslNvCS(h}Y_u0bv~
z0QV$=8tTqZ$zE8)Fh^}cCdU_!(oeS8t*)k}>Gf*s?d<%N@iuFTXQf=se@%0Jz0&)N
z&l41lH&V*zBL<e+rZMOL0<XIL5z2z0(-0TNH$e9UKD@=ZcAEj7JBSN%urL)vI>BWg
z5ai~$4;On|;jPSk>ZG_>A?gHI=;-SkbZRO;XJx++BvAgWdH<y(TY%i9j`<hterI%a
z(D4j16;#=s)Ha=WHx!U6DU&2Gy)xOjexPiZN(sgc)xNzeK1Fx`<qd#YMJm`+b6=y^
zY;pP!Q;SO@^Ids9902a>$&BsOsGCDBI_4o~U4z5`nQFA4%+L_-hcgg}Y1nCUxfdYf
zZn6xB2U^cRv6PI>jN+j2;e>kLJ~T-%F$bDB2_kq0+8KI40H8J{N`Oj*gNpp+F<<mn
zK)O<BrQ!#IodJJ5g0XTwa~|4s9VQ*8hiC!^=5+wYpHrR1#v}tz3Sxlm@FP9FggvSR
zA=M0ABK6jFY$6(=I{XT;;GL5I<^snSKZ5WHP^Aaivk(B3*v3z5j5>OHfTmLIkswo*
zH!okW@VV05jYn!1uSCuMkphE7<w&{0JLjXDpME$*Q?odC<z8k=P~TT|XNva%{Y5f{
z)C0nhk$|wUj=0N$2;kai%KANllekM9=1`c9yVw7##0dg)=}6{iqNVRtXVCuvn**U+
zY~5H(@IwC%PZT5mKu5PoHQqd^G($VCR1Mk1BLTiog>}EX8|&1hL11187OY$YRm9M3
zw+@b3LzJ%K33!_rYuIa;_7qoG!zakvtvyl4%s#QNDTFG&8RWZ~5D}o8JW|OuhZ8;c
z4ecm!4GPb%HLz~(Pfk&XgDkCalV4J`FJ$i^+3hX)PzIJwWDh+4-lVAFEM60}2xIJ@
z6c<ZVV`3W5VL$pgZFnog3>QDXFD@q_McN--Q4iubaBa072}BfGX=Xo85f};x2>(lV
zk2nqv=-@BGI2Z&a>4JG`U})6byk5E%d>O8}3Xhy-1baO_+P}WW^|>2GAf+Wra&~xs
zADWPpyJA17oFI~~6&}(;z28hi*-RqYUB~rUj?7>ZNwFMqe~cyhDs$7(#LSj9M|Gv=
z9HIyub59paCgEoGCjMgy7cl8BIyS&}iKo3A6^G*@a^d}UJKW9lxp#^igFjBjo(<!O
zrj1EEY42vzwHq>G9w8FU>;Wm&*9~Gbk;_v|QVP!@d^^A<)jzYcCiCD5$blcxLVa~Z
zXKiKQOqDOzp2`xkcN{lAq73JA4k$J6%wI;DVh8h0Su;Xyg$(>!&g3pL6xD<;{3eSt
zxhp9EqIT775cxsQZ~#i&$*%!+715Bi8vV+Nx;D8YTtWhF-oa!G%tR_8hDEN*IXeY+
zjei7o_XJNrIHJ03$JK<_Heb<yh2s=a4MWl&Ffhpkv<5VDKQ2-)^)p?Z7dk;EOUuPw
zT&-tkBW1b@@@?P6xji0y{k3Q3CMb8uN>PASK*cVi>6j1RN{D*fsR!($sAwqD2z2gQ
zt6Wf|hIe?%5`n-HA_cw+^(C~Hp9ei7N>S}`Lyg2C<oPCV)j-g9G$uksrMk0U(svTb
zl^GJNkxll*r<f{nZvd$vh=is`Yp$+X6T0iwDx$)!QKn+N$X?+m2N*G*ta^Kbs#A<R
zAO?q@z?euBs+qO0+ZO#%I)XCFvr%wb0tLOoOZJ~)rtGZV?LR}V29YLOWN4eP9AM`7
zgB3a-fP+hBq>RWlu1ahpYY8=b_E-Ks?N}z2GD1T<r)7xz9sV<~Ah%ml@~KFXup#ZB
zsZe`Y4|#Q$&tRsJ(>Gf;x5w*euZ{2XT5pWa%#R|qqxZLbUqGX2WrF?%6@&iBckujN
z8YzOFoSavv0D69Y*CuqZ$j($9<TkQo=QR2rt-hZy!yE!EKgiz=X1PBXvh21>MfG%F
z0Y`uSFoYJcQE;)tA;vSK`irzYl~yoVTz9YSURN`*x4JrBhHMc~g8vCC5rQZ)`Z(QX
z+aVgp8JCg)NCa&Kivb#UV+B$tkD7lP68fJDcuKboeygT!z@zRTji&^TL#DU31Pn?I
zRES9IJ+ar*n4iiz0%`^Irn^gtif`_3CGULK@RGBMrJ!vMKpUWn@bNwyo7{4^dlm7Y
zKBJWlBSMwdcel|v0s{#443fIg5Z58UZ`Mlg2aL6|W5vEfg*%SxaVV!5bVc6;JvoC$
z`HaBW>;E5L=hP+&&}`?iZQHhO+qP}nwr$(CvB$RUJ)X%<ZjzIed^i0E>Up}VSFd{4
z?9JEeDWWBhJ*z&!0Fp*>@0UCSY{VKTwmwt_NGJS6Jfe=w6Vwj;A4V|V+AgzjqiT1J
zfz#|EPj3>vU0~wDJH29F8RKT*z!kbHh>BQj2sFY7099ZsI5?0`qH8#%5y8wel*Hs3
zvRH#cxE50mIFPf5S0jfYE(F%f3%rq?L+FJ`IxB%i_jGjQZGpLGID1muT1S(U*qPby
z$`C#4*8%44Ts^oKifTb<nzRv34<rz=mgi_?9G^`%SKvk0IRWkANGCijS21Y8f@#NB
z%dek*rFSWD8^Z`@XC3t@M0r2&>1RG?%zc_WMe}u_(3n`Yvz1D(?#3a#4G|w~Y+}Z0
z0e!UGE==?Hm_VBtF>gZE{BTc3n4(}XrRDlMeBNpYDCW6a+*8&gmOkIdApjV3ns1$+
zd#PO<+ZKIIafg7Aa{h^oKrCI2W-{nwiEj=Q(uX<>0@EWX{}zZl;$Y*G5~>L#py}rk
z!WgEEJJ{~Ht5tL^+!A(I*s}~4uH~Xv<f4;1D9LwbXW;}~4M@<ZMvJ&3j}ie`vbgW}
z>=o2?jHpXC6rVg<jlW;+6+9=E-)BtLR`hxI$JGqWTez7mzc?H3M&uIzSbDZv<dTB_
ztw32v%HYg3k2zHOS~xzgnu8Yl<lhX?nPQ(CE-``tGJpur){;)!L7!Pg#JkjvfnalS
z3qqUfno_$sV35?_Jy`QW5mc2@_$d5K|C?}$>}71Z5xpZPULYnTYT+p`B(NwuL7tya
z5reYq{1*pN7TX!b#82hJ&c!*hyP`$ZKGn^j<D>b-Qo|A=5xu+(U2#AP9Ay+{NC#pC
z!H(=8JOJrP+5y~Q^a*T<0^}g5R;>O63wFX!&a--<;cw19wN#zQXMG9kLHJ=(8xf*V
z7H=|zd}upU>(f9eJPj|8YD%>mS)Fp0W5S6O`leJdYI$0L?<68ZeC|b~8>j?9Y3f{{
z*&pTAD%ap-BH28UPs8L>sT?mVH!YL%!{@(;@W~Isd3thocxCxz$=%)xAILPkN6u{N
zf3T(_G%O_vLw!N*=-#?J#M#g#12};(djbW-DIcd!@wNjt8LIw(*)aG}{t36O=CVy>
zb%xm`9ZWEU!}5j^mTMui3dhu&dr4<ST^YWq10~iNFZ8SPh<;ba>Ez(G#*I!WwF$Bi
zNYZY%pfqeS^Ir-sanC8(wy6jz@EW30X581a8bLjNw$heT<J5Dzbm3?dz$rpcDN{h1
z`_sxxjHjv>4kz2T8)hcPQ)5-Suthe9P(@JxhdoiHo+pq$yhFRgLA(6`?eh<RGFJQ$
zQ$}BAPMHg;b6Zvz3JVijbxI7VEs0tUj3zEP4vYXjK^phF4`iI+7YyGfAv)h7h`d=M
zjvoit>w~H_S;btJd+>#9!$hyA4XQ7Bw5_?*3dr|TYke^1FjDaMQ=`5{cTJv%{I$a!
zR0pY46~u>R6FshAa!P{G?=`?4_Y4X04=%1QuBNMfGaRprqfNL*)UU~}nWjS73M{RG
z$;H_->d2tWDg{#WEsWuMPY3UAGO233RVZ2)nh3xd5PPNdfI&UY{-}rgJeIoTua=tR
z^g|!>kySv4yN1b)I<$8$CU{vou2QN<HPDrDhc36Rh+IEA>ls!ah@bfznxz5w{-KLC
z)evCGl$72}fV3@cic?8FiMo}IlyKRgLIJb9p2t!JRC2um$Y1%;b>7&SIW3UCp&4|{
zAuIlK*#|E$Bg}1>cQOq$a<2IQgsI8<@`HHsDQbs?QgVS0bU8S9oj{Rt93<rx`$<{A
zMj&T)1<P-+<PM5R6*bH0YHl113t_P^cH20RIVEkT@)|8iQET6@svXVnYf-%0T}Ipx
z)3AbEg)!E`z>Zr~4mzha9&eKDHh8CS;+c6rP*afYze%Cp(8QD4rlr^q3{>b=iTZ%$
z65BN2r>vtw#&ONp!))eU4sbT^inM~eQEpA`y27`;(3lT9dO%z`;A%O<X**+rq*1oF
z<S*`CEicF;;kFCsvLg(_3gm<0qEHAa(A6E=MbMDy5ZAV&CZ#3{d&i^L=F?iRs41sJ
zcCm1TqoaI)nd!KXRCrVwyT;NQ(<n8I{wEz0p*Xxe$7g{_w$XRLom|u|YWe#XP&hiP
z&%tGNJpu7(^M$krMysYs3Vz}9KxPzlOci-Im4n-e;4%AK!V*DVL008rIo+<zAEB;A
z8VWJ<rC^+_siOD^dV+2f#HD+v6eS*!tzWyP#4f?$e4AlhH;|G92*X9fZzPs#)^)qO
z*cuLV6$}xvNk)7qXkDl(hGd+AB&o%A(cE`ZcrwBdY_DqD*q!0g+e^^V;~rG|#VAu^
zMBP_Jvz11_$f)8c1{q4m)PG1CqxXlBA(-mJsS7xoGEpJOP$E!BWMK;11L9I}(xV|#
z{xs)J+2QP^LUO>6Q8C99ejRdaqg?>~9iIYih$x>%Fafls-S&(SVGbWqYV32lAgB}<
zZoo5pDkS8j|4RY$OjV1KTa98$p<AW9IEM9f4}-k<$VGmDCv#poVblxjN&>-0+6cRw
zyZyFr+;!Hb9nH>UyUz?fj`>9DDN@h}p=*%+dY`C{e?}8aOJ6>!U{|bB?qkNyB-S-A
z8&1uIKEb+2W&a1x>7NmckjDy{LNSbSxvjOE;+CcHgB3YAtI;`_3&K;~8`R;Zf%od&
zg0~$_urw+?fN4b;aXzzX#3Y3t{3YbYuh#GT>HOBr>uIAJ_AIBmsg%PH^c2{1>|d1K
zlxKtIT%L$8lc2l2z^|!xWyb!axJ3l<hk<+WB(-`r(_vK~ZU{#MjEuHMttDbo6g5hv
zh`pR>bp_<T5Q>P~O4mfCMG;+)Hn@SsJ46>3?b$4zg42D$Xkt$hvgnVrww<J#+$H2F
zJJyXvG=CQt0bU>i&Nc9h7X{TZ8}X~4Es-djZA+?st(;)u?gBO8)j5-9Xrw(00ufKJ
z9Aetpmx~mox$G<{v{AWKbA;4$|D?&1-9BxnIgc6VigSWH-ZH}!uKV3B?j7S^bu#ec
z?#Cvwtr%Tmq2EDLfr#7jA{(l@-B<>G;RjgWb$qgYK6%3?m)0NGT^)bVjy@v{q*;Db
zhZ2r4ahv57xWZaHU364^NvqF4T+}<O{egq~p_4ZxoW8gk%c<*Hm1tp+KbD~)RHN^-
z=+0`POCBkg;F04KH52crDx(@i?)u^d>=MDn!&9vrp=l~w)aP~mb?lX*TFTzySl?e6
zR?+4WyWT5MiGIvJz|<v+It*JG1L9%~oi?JJ5NXh4l=^qlx<g=j`PH6bpG1&YC_=w&
z22olYc&-gGkgJc;ds{^bgBZ0Kaz9L6KVGbz<4(@Yqu1h6bugK#tQm2wu7){Z7KKvo
zoxt!ND;pi+vzvo7b;mjO)|+Z5%#k)x8bN9PluRLHk{%s+rO41n6+bIHoz!62uyl^g
zlo$t#4BO#3fl&2!5#m!t8X(T5%2087-7_gpwD7hewEB(bfIa48T)TSa3e43;JXjPz
zpX*8Te$f0u&Y}iQ%YDRY2qdz=BCFQNF;y|h;_GnrI*aETUzE+1og|ox0J!%U!rlrc
zJs_3@F)hj)#|`*upPDPd$?o8G<J~oF(B<UAAE>=5uJP>CUN;xwr7b!Ki*G9lDR!=l
zMdv{E4AA&K_8EZ`xCjNSVE*<t^Ge2-?3bB0&H?MLV~0g-x1hiG=gs%Yu0-yY`^|uN
zdx*66@vndJ@jVI}bt0@#`K=RgHGJlCe&TD!uA+$Qi(DweH!o$Hs4?0VW`NE(<1LFP
z!zYP)ew;#_6|S1EF3ys#=8I?b>BQO5qtE(j^OxrNZRP01ei`3cuy%A}>FCRf&n78;
zzt^Tu*1s;^Tt7ZK-X7%p`QP1MKgM5+@l){ja(31R5WWFw6tWb86_WyHYv-tZ9`2fQ
z3>E28_%L_*Hl4)2J88077w_&jD9%2kzG`&M_IxR`LtV|aw*l#$<E+2vkN4-RL{o@m
z{pSQCY&6Px`THU3LdWSy#e_X|{ldUK*tb5N%fiQfXj<UHLn1J+tI--;d4E9h+QTbu
z4$y@!2^dejI6;^GHbIs}nJEt<T9rSsMD?33Oic|ragj7Vp?GV~>NH6G(F2>j>L^b4
zD;_3M%yxh`Z@~@E06WAS4ndgRw4*&SZ+H#g`z~<*{R$froPzgCM-<dpmg@ox<9Ppp
zP`b7xoN$X!C6d-4{T8XAX@X9PCf;(&!sjuB75FnLh1;KwJl25g9>RN`dy{lKYBWl2
z?bs78vL|0SZ>X~ifQaVrB+}v`%CXw3?{6RM<fgB=?6*Sk(|VUHIAoBwnu@*iZJZuD
z+x^N^BUJWu+4y8Ws$M)ztK0qflVgcJN>OFP+J3Uu<T02X(sq&ACJ0S&>V$Z5u_uY@
zDSTs%WE$@|rQZ8Rh5-cf?QZ$dYVl_z)`*vnhpVp}oQMk52BXg;^Sc5}&-G{#88F!l
zg{_9tJA_g=@CS_dgpIA5DZsy{#57Sk(Hpw}tyi)oDwzgJxS3it%QMXA7`SH}zz4#2
zTjhjtF&{U$mt$^mqp=m&k#EhOP@~4GFK&ZYd!yKIC%-)ge8Btcrp?!_wdff#SG9gP
zPS2VfWNOxReWAcMTo>QHd=Eje>+V%}0<h;<?iKfH(QR**=<f@(+3m#|zpX{~=53$s
zW8J<tZ@6jRwaanj4sBcm(m-xV_vH8Rj?4ARZfJ>DBM|5|<C~C*RM5*b8f<C-oUgtp
zW?PdDM7`?*p>GDzbS|Y+Zh5^*(4cCW0ot)#VRSC4D%(sJi!tl9;-I=Ui09om9C&C>
z()zg7R6HF^ePu;RfW#e_+Yo+XU^B@{ma}kyJLuWt##`!IH|rYQ<G8%hdemuMxwYpX
zKNblE<&aTmk^Ze9`;%dCHW2aDxi~Au+s_Xr>^VIizqDEuf_R0DcIpJw8dB)CbQYY#
zHx1A918{YUZ$bAA)O;kNbvHg&qXVVE4)7oM$O@F5mFM-&KmDg8Ys_TK0*wrk!+r40
zf+e9qfd(L9AR0SDt&ye>)-C8y1ET7usQh+f|0Y@7PQXe7r00Dc=>7pfw#>133<e8U
za8X$9rdE#_E*<O$qqkzi^_Qok6f0BPQktE-awk!nj#MHPD>>HrVOO`h2Vkpbz<`!I
zM!GQpsFHBIkNPZ({+S~{_Y}k%(F$G^?#0_JDB6&6kRfD(!BW7q=Rrbv@r&_ij?M=K
zir^1HC&q=ECVjUHGJ3`Y1Oq60SLC$r0eWeN!>ijR3>&=QAUK7Qh|GlYdpj@hSuKiZ
zx`OUcqZ@IGh-o<SXZ|My8=@*g^BXf4ZY!KYBc?7s^%|X7+0ef@HPrylwej7~N4lEN
z^F|bZS5g0kayQ?-j}QzN#z=_iSci1COisHr*0?5XPX#9v6jiVzen4FaU7|cB8PV=x
zG!6joRBX0%!Sufh3<c$L0rPez#^6{|PX>9lzY}#Cmz(cfCp5}iFEiq+#(BZ8g}EiZ
zwXuz6@i|(8s7qK&(i?lt`f4|%Lz?l858RI`xYqj|$2wIno)cG@I+##AWU0M{Vj1)I
znDL7d-eWQ*)m<b>1$yL)1|XPUqs`QrAP6x6uaKLvIM5}r)Il1B5(l|YY^k~|n)aU}
zD?uELBLW9axc@k4N2EL5Q21*W%T$~H;3e!Vv^=eVri&q+L$brFC5{~d-PMWwb&gKr
zA+j1Pj)!-TM~;@L%xmqy8Mc#}KGbLtmMc}c5*ql8osD<7t!RHg*hEc0y6&@SRM3i|
zOsxjMbfv*e-zalMe&-_aqErIRpzcgtX)a?UmGHE0D_nOA*H4qq7gK*t{zmONPUL3&
zh_@BdCOP%xj^@p$@H`OVF<-4(-S&oL5p(CdU=}S!-KXL|O!u4P#Foo1xu=03KYEJ^
z0t!sN5eie(Zh&2c6O0-V7&5D?Z6&V<=54masETX&+XCVo@308xJXd1?HxOQvZZO1`
zN73hCSigAvIV4Q5n%1hcB9L@knns2UyX95AjCy$ZhFKHXci0mB9XN{lch98h0^G&I
zzGvNRkQL(&YkJMzeQ91FZ(tx`ppnbp-^uCm@AqW)USexg0WQdd$(a}|N2JC>>?pDO
zdf}qGO={vtHA`4-SSg$55L`7j;gLFwHlD<AaB<=4UQ`%Ukdvk6`@c2j4lRsUGfJ&N
zG>8;N6Oe7+*Fj(&ezrXsVqMws<m|sG_v|zG4Z&|SSe1^Tr7+vtt1n$29zH!AHeq;C
zo-@92rntkVy;Bu%)OJ=c{r}swB9*Tob*s)*7Jv=_u*L`Q@24IIz}~^s&e_?9mXVH;
zj=_{(NmNioR+LUuPFzw>R8<8M0C+pOR6|d?Lc`Sq8UPUF{NLLB|2lgA?XYc)rTz50
zqdLDE8e=AHr|)<-Qqn<<%V`@YuSX=Kfub>p9ZL|&BvOU96#4hhduC!LHF<aIuL>xN
z6V2yv*3Wx3GT!n1_&h!AP#gbD^4H&Q*_*brwtK7Z?e(+o(fnG!zjij3xq&CMcl#=L
zcQJ!s#nM8lXVfwF?cHU!F}GdnXm9=71t&;uANO6e(dypAlkMD6xBG{JwN?J?++gh^
z_UbOHi!<A4DXV$-yLoEb%Lr~X=xgevT4D<Is&YD)&D^eum3>y{RC{x8XSX#ppLY7x
z_6$sSf!|g&P^#k$r_@F#v*FonpX=^=>u~$lbQ**A@IBSd?^V=v$sX<czS6=m=XGX2
zl5oR2p{1OvtInCDS??WRjR_GpnUg<`J~P-l*8=Mtbkrpbj3i(8LIiEiwD%9UO=SFI
zW6Pv&KecIk(D;uWb@5YY^_N5(4HNenzDuRu)l1YtiK7`5o%+nG+4&|6KJ@v#Fn9F5
zdUf?ZO`a=7HI!Tx3s(Zs--Cf6g|5*qJ2ywd9ADy4nkju=yDN9p-*c~x0LZuQqv;Zj
zpj1Y7d46Vz(t4tVQ{af4%TKuEqMT9v3zRQD--qI<?P0cS>5lHs?$Et|S0{^GTSfK<
zgTK0dinoJBy??uhybFOerkzCZw2WibP5snNbrp02&jTXu73s5~x{EX5PoHg`)ML;J
zqSmu_din(|Yp)FaMB3>tXP=wf_viRDJiGdb37FLGi3oOAfPe;H=#`CTWDGrbPq=bn
zYOJySwL7&=h33-P%UJW5ulQz7E^*v?-2K5+qcH0YF`vyP#lMaoIycDsu7Tk7dZl}R
zT*~*9+Zm*ro~@Uk<@4R!Y4^xCbz)zy=Sw{ZJO-lZLL#M*3w_5xvNae71{hqI*=)u0
zq@99&c93n#+jfE5qK_$0W+QHRD#F|m{;4H|V58Kw$wG^<`3_AKI1mVIcqwnX<eg!u
zKmMx8ac^r;ixwV{1zLD^15o8DC<Lr-;O65%O$riRN^o5DqSHS}m@pPcmq3`|5`l(;
zM~IfMXb|jw$Y+9M@aOhbHFG-Arv4L5KRP}b$w=ATFk1KCbPaJwAWpQmy>^EaV$o%s
zm&AA$?6F3f4`Yv2C#DE>muxh*Nil`CMeYEH48qz*6q@>q6XfPoPJ=}61P8wkpB`S_
zF`8WaMIn$@yPmO^q)srJr}^&*6yd7@sXYa$*+4BKbEF>R9>+4xR7oz(0mI&A*E9D#
znAn(zpRixI7z99MBM!;Zy{)8?Zsu#MEu!8Q5MY7`?SWNT#2TbvzwJjA0rJoWURSw+
zEv25PGaP7MxJ|P`XF@6&C6THPF7&a46iU?4)Z!NyKAE6^QNtW;jtmS|yh6n4es8^v
zuJApxnfA(<W2~%&l{V6<B(QorzCV!{!Be7Nz9dzo9{Vv;B^=5NQN8aoCvy_}hKpvT
zonRo3wRL_G@&FBYoGz8WWL!61Wn?W{nt)W9g){jDWLc{%oJ7!#&&+%scosq+?~!qd
z`ipr~i_1V)J?F00@g1=Z3?pQtCv5Q505MGtM5K8P&lx1)#?XgAI3pDAUlZ*p@)&N1
z9ikK7^YF>Pw&EA%1j)yL=r9Sv(D<{(Z;cP_33TtMmx!x^B{}VPh=-1Ts>hC)J>owF
zgB^YJcG;uJzk0k_BNzCy^s}qPJBky$9Z)^o{EN?lcwcRAMb2<)Yr{R%5IFIwIfPZO
zL<>g>+Bvs+zyTvr9xbKG3rk-mloUvT1oET(CZ<{FX$7p-TIvjGn@ZvPU=gET{N25A
zWy1NQ*~-ks=h%C&9C3@?AO~DD@ioa&hjI)9Fn>q&6oUK@<6I{Bx?NZBATAaphc<^s
zbY|aQf1XaZvR~Qr{n>x*cKzNxA1-!wZp!Ch5!v#;7~;}QKqb*AVFwNnRtZ!~oT7}<
z_$)5`P16mqA4!;yq&1iceTNcRcufE`3j%P1q6RF*fIV8aJ4@ds3DNw88>#n2MB0li
zeLc7gtRUeB?S%1+{bLuAI_NpgB18*cpt<HEgHj$LPsxus?tJ0H;?GWFV7tgDdM*-U
zCnysA-$h7Rz`d0`=oZZOHv_q$-f0H`;@%jstQC?kjd1M54UH{#|6=2JgfID=+>P|A
z|HA~<Z;b@XW*%w^FhqQ#)F#!~#Fvy?z_KxVUe)L%KN@0PYX%T5z(1Ce(yTx*^)CKn
zNhyYzPf!SaaK^|IInV|#Cg+GkRdRH-%l2;&JptqmQmzOfr3muW=#t9e0PiDFc)@D1
zuB&29t-=xvU3l6p|LiBdoy8qq#U-;yg8!>_bz^lHa=A2tHA4HmRE{z`ZV~X?3k2ga
zN3jj>#1y?iI%Z=1Y~w|+p8|*~B@@M*nyq8+lSwBElqn&v{EV7|p(72oLNUxbXSUMx
zDM1UF%Sy!-sL@8bd-@vwKkAVr2&Lk(p*9iq0$@x$E_&tL3wY=i);4;`^%pj9bm3=$
z*xUx&eE6-QIz%s9`r}w?j<*2~Ou-Pm!aWg54Pu<JJi%p9L72XxorWAn5N+%_rBwcF
z-i|2i9jSBZC;TJK(ub4(yYn@_1+U~{tM5vtO#Ecg@E{Cz0Fa4xP-5#oDG0O_3XDJp
zfzK#R8({4+sv&6`09#(Mr36LzqA+m(k?|Nj3FAl$@gW9L)%r0Dq&Nuxt>ReQiy{mr
z++h**s2wCPbnR*kHv!l=he{~)>=Of^#{tj8y#c9%%z%u8SY1q!6NjcUf(;nm$uzDG
zO6Lm(omy&q+^rSKK<a>E(tM|wbhyl+l0o>2%MAf!oRBQ;AY!Ip1hw-~yo45aq%1KG
z2fOBgm&)ZWz&7QMHG=_kvj0XzcPHUU5QIdm5=m(&j^?=$bT5iDD;f$e%Bj`VrwU3y
zWl>@bAtR*=HrYwk6pLuy(hzl#zIkES*{DbZTj4Z@s5sI9@E@p5^s{%}&JDNy&-lKQ
zj4B7`0X+8%tJ>G|Zb4CZviaAXrs6kNtA4pk?3Y{OwSm4&SOkX58UurW%Hl%V!`+5-
zR0W~bgga2Lp*K>YXlOjEdc`Gbv4$?b@vY+icyIr`*?zoWbTjLxhTWFhhAh#(P<XZE
zOFQIM>w7Ud#gHzuhX=W?ph+VR!ZnVY@0=1$ok&M~2`hBSk7$-Tti{3j>6}qm)z`!b
z$<-69gb=oP?TFemP63C0r=YJGixxoF>fsQuf*VTWV`c)Flq`aDr}CySj=fUDvIT2A
zzNKP7P0Al*#0R!v6(jvD1jO-$#9L~rR4&%YJo}K0_Elk>m@iFk<ZFCGVAd%XFmRc4
zTE7{wMkV6XkX*&$Ys>*$CNO9MmrbB-E2ZU~ffqCtC!4@APAQm81$qE*d~T4JE4w6y
z(3SB&THnn{d~T(vSamq;@!_n_RoLV>0Vqd?Oo3daDqMNR&KK>B$cYdby^j4FNpwaN
z4Y+9?LB=jqNJR*MkA&7s29mmADz2(0Q86xP&V2>O@;$>Y*k_V@Gp`K`?Dq;i6QC}~
zet5zA8qT#W24sSEX;QqM852Rb)T&gYj@nFdc;2@q8zJL@SV?Qtp)o_}0dHCi9b~u3
zwy97SVu}g0qVyw_btZ5mSqh<ICtF>XU7$>WOg;gVKK6Sd6jE%WGFH+DqjSY5992k^
zBa>$nZPezJ(+Lt{w(t&3*#$7~CNxPN^P(&3Le_<eDGH~}FC|9gdSM`}3#t4ELfX#C
zS;c}%Fd>OpeWiG8(SDoE$y0Th^Nv4)5@}p>v>hkf{c&Ye5*`-&i9tP{XnMJ#-7qzY
z&j^YX_QMDife$j3b^yvbEMmh3;t~m#5fPP2MQfA?gZtk{1vu!<nj2q=P}*q8mwL%c
z4%Y%fM@RG$u*Z(TpCpXm5%p;FUkrZc3AMrSykShjS%x*#-Go~OiW`#D8Qd;y#!?_|
zaof%um8j=&kiNaEPkP~oIOx5tn!xVNq$CpaXOJyB%t_STb&2OQoPTUqQlU+JF}kRa
zW0>ijq0>1I%Lg9R&yMbnXSN?DbQDBQCUB}4&vYnpGm%apCF7VAohFW$Zj(FZiztfG
zesl!h=@6&@<skW;)dRrUq@AY)$=vGWKbg)rbXZXMqQ%JhYJA$*%0?0*0Z-c-+4gm|
z+8063djy=pV040=ut6L9ZhOM4=M=*ZvYfp+ponPY<>h09pdV5s)cYzw;;Kk)w`0b7
zJZzWMbFUbZLn5XO<~{h1nlSgg(_xADmVk_`-2MbX7|kBhr--9!LQV4<X$+y5$#VXJ
zG*7RzZ93?6RwUdXqwy)bF@2N}kZU@zJRq0G&gKc<N{&I)9-VbxIg_C%Rrz%hBp^e5
zo_)483ghImcK7>sbbozGv+)`ugb#~KH!)W^m4@Yx+!aHKJC*ojK1Y8v#ka%v>wQ1o
zUiOPNDRo;+@Lx7w^%X56(V!XuS;!P7e1pQRf*ud0c(@@R>JRM)t>jC^m7`os#O~Hj
zo=(A5a6v)I5O#OYp+MJksNzCHNqv{U^XmSIClbvPb0kZ}nQX|$o-fK!>PW;=u~wHO
zFEU|O4CCv4CKGN3)VEwn(^|%{ww>h-t({JMS(70P@V+D;AZ>nSf6d3It3S!};ibin
zUUv<=Ywm~mQb<iU9Pb4`N%LY32?R#qk6cS?$Pye+wS+`WNz>FcSp+z$dt`u|7jBgW
zg1G4_)*K-W<alE~L2L!apjkcX;=bG$TnuXvqzusA|GqhC#V~C6UbHqd-MQ+iX^zLK
zT8dFdXy&WAD`Oa}6g(?oN<dN<--c>FRNNzn`pOCMsSDX&Ud^K~fsD4`t-9Sh<Ag~A
zr4ZtR?u5smky|Vqsm<N7NZDq+@ykZz0egt1N5A4_jo`S=9&5}np^ca27=tmz#fDCL
zi5OWQE6Li|yNas9PJbEzIJ?uWZrcHZqMzj!_+VO1!Zcviesw^@FL;WOeDM4Nwx{t;
zzMzxOk-cJ&LY!fdGgJRJKl^p{&L)){eMDyT%LKBJqTsYmy7Kq=8fU4lV=A0nB*l^m
zuC;*(Pb6ACX9acdK5S?DU*5r29|>#bi1x638h%|1@3yW8_fg}S1o(v=Qh@n?c?Evz
zlVHxwvinB@5uNCWe5>yn*k@<Q>+kmeR@ak2n%6+xFl@|SR>~ZeFB@e@gBvWCO6;s=
z3{Vb2B$&u7LoGsI(IX{Ss0t3|RIjN%l?=<gvbxhYgj=kgZXw-M#$}T7FLpG#=4s8X
z_Ge@Pvwh?X;_Lb=ta27>c`>UkM91&_dx;>^`^i4~KTH!`vMX~!-?h`8;a5(e=1sU5
za?J8MS~!X--s=NX{KhvS_|eH%-EzR-#Q#hNTh8HRd!o=LU-2(p#ZD7CM>Yc5G(`-z
zNmf+XqC*UhDonvu5>_S{A!u~on-MRsddC1JVT&u+Y@$ncUK8bsfkYw}R{e`z5UtOV
zF5-eGfy5(v+x+(#+L|zXZSWdqx$q;)qp#+K5w%bPc!GC=x^z7i2NSWyqARm_5Rkdw
zvezc?SVZVALiQDf<h7=d{Ku++9~Ll=P-$0Xy9Qm8J4uKgXlce}%4+7+g>wWC95+G{
zUMPdG_x8G20I!LHGn`w$#}dlBqW>2T(FhoQk>~k5E|`~;k3_)X(vj`RYu(zD^qg#Y
z#3<6_KyzOdc`ur<5k^fO97Gxe;0g7>eoy|4^2`l(ixZy~vqY#yq2)wGH!J@J`YIbR
zkSSzmqfPtIN3D^J3QC+16f)IE8lVmbg)4GxXZL$Wy~4k+`yLJ$c{68PQjw}dJaS0h
zWiTK8Vf5o#l{zLzLX=BQivh}HBQe8bNp*ohR5F}LKk@*9UO*hU9oo%-+#n4{Tc@31
zZCVFsDvwi^6q`y~v2J}*?lom#8(p=mBnR5E<-e{N<&IFBNL6sgEOM^ETdLVs?7T<r
z@IEU;L>UO!MD-BR{5>cP`0ta1ZdVA5heYByn90vVxKHM2Oz^nUmOH{62u*Qp!-$3F
zv_i^GoN!yi(wZuy)^<uR!0yX`xYl)pX`t*(&MH|<0}&WyU6ykpT^wOAwjoN?$d4Wx
zm+6>9$)cfq1=9f8MGi`jZJGt6XSeT_m}`CH$6@?eZMZGF1A`fIjP&iK1;jKqj2f7*
zHZ!XG=%_k0H5j}b*%Qf7ThvfK$a_L!uV6MAh5;=s(ieu4yqH4WLIUvLZkqfO0FLL)
zG_gjVyl_~pGmz9BTVhAVFu1fW{|<{fB%gifh4XVC2cQYzVTxDjl)#HEpX@!jP@-j<
z!xad&M+rgm=w27GyT~QAtg!-K;fLc`&sO<O76bI=s#qt__2&$rR^SXDNq1qsewOaY
zH-p)Ng4He2@GUDU-N2FcI%eBOsirm3j(mQ#6@;Q{brpkZaSRSXSQH7E6gOCzrpYIR
zppY_M?v1Ag8|We+zcWunfkO6c0h$&DqlMe|k@ufUY_3%jI}l;d?fBw$Cn0k5uC<1~
zpKIXP7&Gw8C+l-4%G4Ncm%s4redOrHMN}MsHYXEly6fC#=P9g~Sw`W{f_v+5Uckrx
z&J-pD4nbEgddcd|x9ykoD82x*!i3A1eEoYYNr0}6$7(~0H6SEa%RGf>3Hl;vL<Vq4
zKzKkF6w7os8}Ys-QIPo{BJN-mc@l^t<dT$ikZ>0v@m6e{mV=GMIE&GT(&t%UoPgNa
zRlKglmPLgTh;s;T&6TR7nXnAjWG#E{<k@AGnZ=xRNuaTlU{9sc$aPzEcucuFEd8mU
zw`55blWuNN1@;l+eVu5+kC47+zBvzS9BufdXO6zUJ*9%ib>DH7S}b*J$dCtsGK^+%
zK?#qx;;DMzax4&`WXHYkULfL<O9+sdI<5uB<!)c1-E5gAO-At9tM59gP8kp?oV6TK
z=H}%BDo322%W`YGJpV@~>qy9PD(oglfdhkzYpaMD=1EmMkDDUhi8|Zs&n?WOZVIr}
z;|Ue-D;E6u^Mir)=%lsA6*{yxJ40SBKQ8KR$9h@Zvk%AdFBV!(sX&N6&7puUDv6)o
zxPm!5CT66vR8|eQQW342&Snkv{rc}c0g&G5DY%|G+<XI{7P(5(vrckor}@O}Oyu_c
zC#F%h81!Xt>!fd3+C(%aj|ieBNUYL1z5|JMtWAI;KcDMHm+<ga3HBK{I(IYk(4j!`
z8kB&`)zQJvH13Ti`DmV9BnQ9$i~Xq$tMX7%%V!)G(c?Hc%IEmddDxXxEBDN}E;!YD
zlU=*K{r&4Nqp+9|2DU$G?i%uzEcLW*v%X3TH7*>aA77SFah6pTx#k>J7#<{IFjp%3
z77%6N=vN23gsVL1>)>dAX<SEy9p0s{vT|Vu^dJ&{ldjW#t@!Q|(I=k`_FVKwx^d0y
zBq=1`I_kg8pXI4QNfn}ccF&(IjlhYIdS^4;;V~UT<%}rOrvz&_Sv-{)p`)LoLKq|x
zdDIC3c(Vt;&K?cA*`g@yg0Zi&8K1II=)`df--<A~OPdX*8W-;pyiHFWu=Bl3Nn-9c
zyrLrIfdyO{x|#0396gu}CH-&wuB&3UttX=#6S1VpUS=P+vmc$1pn&l7zz}yA^wKGY
zkyj8V)CKxC@*q-;?;yZlDS!RkeornhcfNhmvPCPGIL2xNA*eVb-XwgB8=OR{$$frp
z(0(aYb^JbFrGi%>{pL<q5f>k(-Z%yB-<zeunKxcjPoyNE9LYJ6QCljrRx*&W>4Rr6
zH)L)o>>u#_Dw4uWLh29rtn2-Y#L*^)OB>jb30^_})j$S)do7{=x98L4^Y3>z{O~vX
z5BI9v+GXp#<dt%p?2*K7_C=N$PY$l;kImm7g}Tl^@3EWODR6X<45#r!#Ke<o-BQP^
zh;DzBP)>ZOw0In?<B83IWDFVVx#!4UU6jn&>f9C|j{+n0!G?SK`cq%v#r>T|t{7c)
zu=d#^Y~T;zXaTiyDqTTPCj22@XV>hH!CyW8Z&lxyzcA7o5&$3r1pol!zpMIk@+zXr
zbn23F|4Gp=)wr|Ynn3)<`9TE+t}Nw_oZF~G?3e)0y*>t+NHd^x1jaE?IF{PXI&SKg
zp0r!|?X@?Pl$6WSfoDY!A#(p0U6aXfkGe2x;>TJHpRAqr>n7@6oIO3c6H|6Hh%;Yj
zj@bMAppUXp`(a*NOQmu_sm!;~SzOwvLZ)Yr;>u^OPR<GI|I;ZQt#y_eUGZD~yKkYQ
zlw`VTt(?SuycTu6+g@BUBauG0#dX3O=XBF^XwK4=ISYQ|NIyguo9foiT0F9#cJdC&
z^L!CqS*hZ|rOFl`dFx?l1?4eek>Di8obN$;=bd7cVAnK(N?S`wM5N`d-x-~peB*{q
z-n9Ghfx#v><kvVOy`i4Ojf~^Og{r4$*n|akcDbOhGoz|_vhIHlbpc-<jNQmMt9r;W
zMgnb)DPM0l9^`MBP)hgED1j0G<{1PD3n{3|rH&RUN2NMvW~>Dq7pf$n0qFst1sB`4
zS<fj^jzL+JZ{goy^e*;ZJBI?BqYQf362a*gk(^-%)_hgph*W@;Gc|(hc;jV*R^H5w
z*;_&$QY}4yPMoxPrSmI&FoA^*s{zLc12<ZaOuvgI9aBm9MDFCOig|U?l3mL<`|ww*
ze3hg5Sw*v1@C}@L9f-kHyZak}kxL?nOEz`yf{9ss?c2~&8nzhcQ3o!B$t2UuxYfyH
z^uWX_bGb8}$<H!V#jcD-#|%(R)vkq=)LlR%d&ElY9~atR0M-ZZ@4}LKId7nm<>R)E
zYp2yWh_|bE2}Su<HGFZu{)D*~Z>yPU@*%L)i0f{yyZ-O4ilhclrryr}^vO9IwjTTf
zN!gbhG(A7e>DSFK>demjR`b#?Z-SX8gi#xt>s+qcA13gD8^_{B52g5h*h_%-kgCn8
zgS=d^dH7In8D6q;xs$HmKNu||SE5OL*GiK=80-9yR@u`AJlPWC;YIMAzPgmGYm`&|
z)~sE?sJ9PVro2knE**Me+xlrqEUc^s0=>c1?+##^h0+BE$QsTqO=WcgNY29A#`p%<
zSIiGFWuR26(`;l?W`-VARPxc}O<t{kzggBUfbm%amh>XHbg_@#78Yz_3mB2}-g$r^
zX)_0GbklmSJ7|)?SMmlK!G~vI>(g>3t@%)J60Z_9iQ+c79LOkyzXBKoW}PZ&^4pa2
z&~bx8C9LDZw%VJlD)C7t{Py;3a;6*8+N=%IvYaZ_TSv8S8{^sY1&VVImY`C<WS@)$
zJ%qEaN-~vLL=WT1^QAZh-Sp6-wvi{=3goD!{Ue)s?vi3Uql87%6r~yWi$t4y0<$cm
zZ|IQP$=b(glG$;x*}<0H3YHmJ!Z2bDG<+uW2c}3mh9tQGL(aE4a1E>BRYBMz*g&5`
zFR&Aj10a-A3*|8qJh|z#tbweJ>&RX3%5o3p-YQRqSM|p!Td@lPVKQ@e($Ss>Qe_-P
zw#z;mf~rUAjV+Q>*c}R;ybaqPdY+%x-qP70vWE?kqrvM$cXvG2iKlSY9W$XXqz>3&
z$gV&m%r}kcxz?H3FF|o3mw7beNp6$Go#muwg>jqtA+@8AA!Ul3+Z;KF7_JrQ1RFgn
zfG^KAMh_@ocuUdyxs@rFDF-+-kBrlsv>q%&eL7TY>!>b7TqKPIy{XmU``SpuDCFoj
zFmgdtmj|f6f-V<Ljq<YyFgVND86<l)LmNB@LFW8Ou0$_Y#yDrO0<@8<KwDfw@-`hz
zGnppi-Aw6zI@m|~b3}ul{S4syFY<<Lm99EHA+BTM-%zwDRSsI|_;*D!*s)Wyr84k?
zn)Vtz2PojGIre)k5V~YK#uWlg(~iqTIQA2}4#zF}moG&VvgXaRm6hNbqt^x!N^x-6
zgOVLlA_sI*Yph9Dd=DdaDf{j5Q96|0l`?YAP_Brw>yn*HJv>AUoqr+Z{`M%5s%IzR
zlIQf0&>of*vUoZ;@qRLSD=ta2!(hKtjN(L`IaJ}zO*4Q4xAbJeN)zp=hh~6P+uB@T
zmWV?m@Y0(TcgO9xS|3SlIDk(ulmd{z!G17kUZkK40vFW^AmZ_!uftI>$k0We1n_{4
z@p?B&Qk=WYk`v|-E6*&rF#O7jye+&OToH?O9BT|cJ5uBp+YfMFCbH0z&^?tlAd68E
zomz;<vw*BwJj+<A2+>+GtP`C_YdGK@SA-OZWG*S@THGd~PsA<pw#`(7ew?uA5l(v{
zT00YUd3Uc~U`dpD&MtwFw{{iJZCLs*z+6AIe>GxzJa*&8(tnc~fniI;x@z)22Jm9!
z9wsRA#mR@w8i!JOxAkL=+`VjcKlPyi7ZJV-IO5<#KO-XobYqMNKx2XePqkVu9Cbf=
zA2*KnuNK6B_HpD5Pai;Af`QO?kxrCU1;t4QExrYg<uiM-#p1J3Qid(2e7iMF@M?50
zZaX@0KqcI}B9d;+&Fj$HOb1gy*6@O<Ts9(+f;TVRD$xjQ!T93ZHTbY|_wsYcju-2D
zKR-Av`-~WLfAM6r>05eynsUMGgJj4zS8v^?+RGF%0sBvJI>`+QAJj#++=!K5{^10}
ziWbnK8eP#Tqfo^&f>tiRegZrA<6^6#?|C~paYSY|^#*>4pLv*PrWDIJk9Eo&1I+pb
z@UU!s#YOSSyW#K@u24*1;Beu5AT^=;i_ij6bFPYMH<)SkFav`x(<W2*&3H~yTZ<|h
zTC8YEOZ0hEt{9&#m<L6`lY&*wD~Zq;^|uWZLEs2zu0)|`ZB6Pj%U@J*{XVW#FeEZ0
zz|_bvI08I8oW32Ppb-q%>K>CVPe(5nTz@Qi@I+ML)rkk~44fXTAe((*cOzH{^+->E
zj>g@5Yky^ieo}$i`9`EpB@Cij9IwEqM@WFNVUQ{fCjb#?S<*4fR`PYW_e`&Q6_)92
zBZHq6J=`~iQCHBFVg6<eyY83|G5^atGBr<%lLsbG{q;3d$~ipkLI5_Tpv%QS|Izrv
zl?k(dzkgV$0=xHv9pdoO&dEFSEB90TIm+I$;AW0xfMM#?EbKRNlH$ro#ScTu@U?5{
z<~y|At=o`(62^Fx6m75He+k1D&u?Jm7ApSd35mO<Wq_e$_m#s?+`|GA*;g98a*$iS
zfo05MaTKu=sY~I#P2a6ON)-;UQ^BtqMWX)Y=gI;oCqHYF{&XupNh9S&Gj)_jS!&D~
z`X+#w0-t~|Imw^DvID`Riq@L?WcSMpL;M%?zgjZ5qO3y=|3w)bBLV<m{{MzI1yLoL
z|1`bDs{iw2a3KBM>JPG_P3#UTcE5t@1o%NT^=<)WvspC3LT#gK{R=UWD49mD{&{_!
zNoYC|p;e=}R3i$X=V5-DQQ-CI(5zs$-=#sjRO)q4402N2NxakR+20d4#%2#m-}724
zf&0amC>1c@i-lEm&u!E$UAb++5a;7}_}G8)&rzrIM76SaW2{;4D!(o0BSD5-T_ua_
zR+riWGhfMb8PL=?xfTLlORmZ-XU<4ff~O7rhr>2rk@L>ju2@$BL=7k?L-kADs0fy}
z%9UBeq2y!`VqZ`7fv%N)>mWm=P`f`+XaAG;WwoudKC$H*0Il{3JXf3loVHJ#f2~x5
z>0#eyt5Y#%!)6o2Yl7X&SD|(%DO!G+c1dotsL01EXG<A{_|Wy%hB03%cGGi2fg><P
z`~Y@URK;!U)%I$#GqB|yx<dVih3Y%%CEO;aqb(2zhgU`rZlkl-3FxCQ2^JW?7bB|=
z$SGpqu*CsQ?m95|_6A)W+qN-z*wkgff^NltyRIf46i1gc9-$l)NQiSye`nOjKBn|y
zj^NYN4O_jWChY;+K3xeTaIf>YfIekCa4%D@>R*BYtpRs!p3(9B{X-}Y^z1Itld(Xw
z4>(@sug2eBr<dQ6-op&&*jgt44YU!X@^?8o7V0jWgz+Rs2-OkKYct4ipgv!yTsXSr
zBZ&j$(jPzdHg|_E1vv(Lk<k;16CG=59U2Z-W8fW`Y^~+Mf4VBD*-J0#tn?=qJX=A8
zVbrzwA370>A%JsDd>JoOV}E%cUU3r}Yk)ndgXT0HVv~D|04fP(bhA8rx*w=%C&QK^
zOoNXvGr`3jU)eaPOEY#dU@x?b^>2T?5+QpyEmD(_!(}8~0YWQC81`)C086k@nfu0-
zMms~#3=|NVEumOnK>Rh-M(@L%QwkL#=||P4uK0M-oaTh}hL|7$Q36lwxT8=yz47Ji
z=Ha+Jl0t%t=7-%K|DJjEfrY?sVbE(?VT~YWB7@p0Tnh(hZQYf{Ul)AW5=DyFO&717
zLaQEOq&CLeI=x=3u)@VAj{8F>Fujvm%q5vPpRV5g`FJIKXVNrw@Sw#*l*B^#0^fi#
zL&W2V&@^L^o!}ZbIrc-(Rl`6YqEoG!oV`A+N|Q`wIV5EDdp-6r>7%2qD}B2?wNE|?
zE0b0v=a{i_tz|%jI@>y;uter#j}E<x%iGf*T$VC!{(Q_}%fLaKRJ4>G5o@XKh_{x|
zuFw0ev+VXe{9QjD$Q)<pnm&t?J<o>s#N_ixvRHeSxXRXTuB;jw>ydQaYZ?1LI`>ox
z?c|OhrTb3O1e=iN$gNOA^0&o!44qb@1gs$z0)fjd$abCdJo_Wn)!J>meDUJeMx79c
ziX4tqRcEd*cm9PJ?PYf8R;LTyxCaKOJi%eRKfNE|U1%#@>NAqZ2%8MnqMI2HnJF}<
zrQbNDt_9HYoH;8su{D=MnC0@0vB+?vuy>qvb8g}IDPH7BjMk-&H5=V<Mvy&xn%a-z
zHYshX=&40ntj%<lHb&92Vb0N1ki+UB2Z02-G+@jfo=6#T0`%bJ8^HC7x-^-LSHECX
zO&?;vb4Oz}s3i{RSPk}tAebcG`hOfno2b4qKVG;x=o&j9<hQk*m?ibR26*0Ef^|+K
zRms}H!Ao7hisM>Ulp%P^3FV6ya;=i>OBxi)lbEkeu=DCz;x=)i0;89FTucBushDdg
zH0cV2(WVC9$!{&OkMmi4TGBzYAz5-2IlsD$Be`YDxahFdCWQgqVe&0Gq2E-j`Z$yQ
z)$RNC{u1UIRy~=A9h`Gln+#b|%s+Y35&voS%F7ZGCx~A(6;gmNJ!&%MS65Q=oDxp`
zWMXOlYHZ15Mk$4|ND;+b3(bKIx_ZZYsKErjxZ^Q%2~ULpT-#nB!m^YFEK)|1yzIsu
zF0Q$iEO7%e;JQ53gh=Ma`ltiB80J7t$8<IG(sg9UJT_`H-SH!;ys92$O!N;y8=KZz
z%K-wq^SmEVRduB*oU0*L(@nD~mWEtEVX?c09D|kfAGIEzDq-N{CP5emc)Mi$;I-x<
z=2HfFn)!X|%q?bX8ovf})URP^6!Ji<Zv3IG3#aLXdxeSoK~hM&7lO)>US=~gpiD?x
z6ng^(Kek7GWZ_Qeex2QU`E;}y$2U0+WWGtL7o#+vqIgsAQ(u-{o7vEexWvurVWFQ!
zf>$?_gIBb%@aJeFMErdqmIZ1qO9qHY&C$Ak26>E7to{S6TmAM?&dh&3?0Aia90REt
z8)!Lkr$|wD#F$pQF}6GqljtE&!$D{3>?-)^C>2KK2DXcn)X*TAp|s-LhZT)q>yU?y
zwFm29G@IHy5i8&`b;Ly{pjE<Fk#BN!99GNzHhpgj;YL^D7)=wEDquqX42fdp_ckpf
z!L}DYrHbjoyq;&CLmyc@>I<cwOp@NNw83UItO<R`g9Dwp)HPb8Ev`r<(+&f*IBnJE
zCcujlZkBB78E2ijMiAP6G9C^43;thw_DxmDIQ_r4lIee<%m1Ti8{6BNS(?)s+uQ!9
zo}H^|YhNse@Dt-dilRAG-aPq!;-gq4;fm`d`T_{*<Zh{|iNR)8k5RKj8uxj{-5sDW
z;UaqlA8GFP*VF9m#8LedaGQ2A*Z|Nmk^j#NDv1a}TOlW4B2t7#j*_5}A`{Cah(_kH
zPH0j2l4yWu;|_C|9B9lgY&pVVE!dLrD0>fdvr-A@5!p-=j1T7YAbC!Mcv1$E2q3M6
zjFTJ^#Zw4_=pKOS3gUB#ay{@1JK2D*;t<)UupR`3XKJDZWjJ^iB7r>P22=qjpMCSJ
zManpcn@R~(?^vbcAw{?mDG^K@icAcAvbt%7koLOsG-S=#cytn>j!>t8iz<{B0YI=s
z#a1PPwx6qG<JQd#Q2wB&8Jdl+;!anEzDb!;GA`A9W&^K7R3?$JVyc0%jRf6?04Q19
z3G#xzsx@8|4YeDKzH#zuDa@fdc*&p#i8E$Ai(JDxdY(0R;R!wPr~8!`PnA&_GA46w
z4+?Xx3S*>NE}4mH-P(j&r?Tu8Q&b9q;YP75E6#BwlpZLAEOH363_qc-1k{kTa7#J3
z@JYZRE02q$kSP3beWI<rcfoYBDV}Y^yziff%8=2-Yp&f*v<cbuq@{ky-Bs6TQXBe%
z`U707_>fvCIV);X8Nc2eFJ}G*uaB88#k)N>+Oy`H?m6;lNbjz*Zs)7hx%Py*y|rL(
z@*H2?uDL@!e_&t*ca<^5Row6_66qRl`}JPZ(MsPcNc6fZSW|WY{_*0|Ep3cd^S?KP
zmVPj@9U=GV(}D4J=Rqgi6ggmGy#rm1!+Gr2SB3Wem-O58Y5e)1X;o6d5M?jg20?rh
zjLaN<B+r?`esHGPeB6(h<E`5Vz2<@r_%62N-O%~Cdm2yr-0n_fb^GN~s{8Rq)N8@N
z8y5qUHa|LxG?jlHd9Z36My|$!Y-%Wt;hDXVxO01OqMN;tTr)IW$>#JNxH6@<OdyYy
zaKn(>LQDsY#oC1cdGdgK>c*>w_AMKg+b5MntlUQ;h&vlBL!d?sMUU(3ib|x=*eO!D
zQj=_~-ME^4;6aV{7n94qR@5^@M@osJ4!t)(LjrC<4*uE5n*^OzN|@A8#n0V>X<kof
z!kx|b`dIjc>U&rAEjBM|EXcXbX3Vr&?u_`_7=O{HJW7HuK28@x^Uxf$iNW+xpQNHL
zN@N4`{7Wm0^du8=j#@XLWz4nW+6#sa3d+7%bK*!jU!?TGaBuh<&fi`sgoP<hipQ`d
zt+zFdEoHH+iE3YCU-Yz=#<HZYgpGX@R!xm{^ZG<24U2<gN%Sa5(J}}Tncf_S!NUms
z8DWMwZlWAh=xKzRtzBW|qP|DlhozRcyAf1jUFILr4KN<dhdFL@>#)T{ttaZwM!CqD
z71d|N^zxb2-fZ89xiG3)!CEBYa8}j1L+I*!J<wf#{*T=0|7qk_uuSIM1q1+a`gaRq
z|Mypep@V~)si(aYou{qMf4YNWlkKC684$+yJ}JRC3r`eo<tfAW9gTW>hupd=I_%L%
zVjE$rBS{)*a9(%lYZq+WyKRCEjQpNV@+Q|;B~*1-`ar!p?!S!rW=@%>iEQLS&0!6z
z$gxU5d~eTq)5|?`-tJYGGMc08xC2p6Y!qy)MKUv|agj<|YG4=4lZ=)Yx^OrzhUMK+
z^wb#sft_COWW)CB5{9@NT%-P?{KOp_;!N^P4gU|mt|3SeAlbHU+qR8q+qP{R)3$Bf
zwr!i!wyodS{Ts1|I%gd+qO$Udg!bBQ@bZOA161rDX>#C@YzBxsb}RH~`^Aoaj6cju
zq9#F9hBMcPf-g6i{2U)6TDFqC<4WqeW&cqwZ78y@XQaQ6=^AUC9r<FrWZu&ywR*MH
zf}x#oV!51h8;GI)!v>o#&_>?pWArGMaU@4Jnn=_Iw#BL7gvWDdf4p#%cZZmeb>Akg
zq2EKrXw;lVjudt7Wr9E}r&f!|a;`uK6q4hMmm}|rXx)Et(@htIN3L~WpfFB-PWA1^
zyb+8y{((WHsDlg&ZZ91=+ejc?dE*h&ya)EC;CGQiB-=R51W6YtjTc3&so;Hy&iO4G
zaAP461n&@NZbPTx@KZ#py+>=HxI%X<Bb5AUvVw=MHRzz4cJGXVT&`6p*wL(eqxue`
zV~?M7O82`$tw;pjA#5QnHuwhq&qr(0&Ul&}004mL_u&3_%g~uwI2$-SJ6agJIGZ^A
zucldCkdmNP6rY%qqNzAskfW}ySdg2cry8S|Tv}ZS2)8;zEmG;@0Qk@9eIq_7a=(?;
zeh>bCR~HbHl9f}F77-Q`kr9zqR{CG{VMqI6`v@Qa`g)ZZ0Kd6K)EH7Mi31R$&YrKn
zu8k!{<+np|8Lzt)z{4>MXOJ47dk*i|J!KYPD&0b~$lXcDtYnekDcR?zol(z!U<d!-
z(_ZoY2<bQu1W+IX0f6@3_Y@KrkQEd8pV#a9)kYkMCVc1U&94m;JP#;-COD93;Mikn
zF}semc&C^p2-p%fjioFxj;pQ}8Bg=KfAG5fT;x=olTr4XGy>Yj%UFk3)zqYx=2Y1F
z6^lwKMUA4LA6nZ#`Eq<q%C!8vEUTRx=SQ~RSz1;!GX`^=;y=D96-O%jvYe*|8a>TO
zFYkZ%yZ!WGpWAg>s*@a<YCPGZmz?UH3n!N_IH_sqXsDGHE%^$>{_`t!v50J6fXC}^
zDAzmXF1(ahfqqagYOj^vKhwAnQTE;~vg~Fc)vaFA^ipY)Tn{L2TbQxQZ;biGRjWvr
zk+w6DtaUr97d%vfzECO1udV5}s8Zov_ur6!<&$(#pxj8(F;vjooVa{m)>5NYPS8+N
z7T{(|XD6*LU`bkROqa;B;>Y-xqT0B#8j?&my^!35N`tPJW4ja!7m<Xzvf19BYSyuF
zHTl6!o*TmJD0p+)Sy-s^cAF}tqjE0%(LCPZ$8$1U^ki1y%gLk4Z@8%Ax0B)$UuTfY
z)y|wOshwT?OMR_eHh)CJx?s6H@&=2<II@9CoF&i^__DL5A92Tb?H47iBj`0E*2Kkq
zF1cMEc#B}2pP-j9G-E?_Fx2$4u{<SpC*C#^+n+y=w~ZdH2!>OnCQnEy$!cdJkJi?C
z+NxrAVI}&Tyc@WuX|@j5`^HsiPAMgI%lDI(YrD0Sl>EN?qr3U@R(m*;fVsoXK0Bp!
z%@uZyg>ojU(`j9Jvqh!(Q!TqZb8GzaXdT9z!o`jX8h@z}O0g+PwWe38ZN^q#^GtY|
zRGTWr15JJ2L=Az~e?WrE4<mOP%H4=4am=?LhG@n9OJ$GHKxO$;mhL@n8px<<ya)3`
zk3>N^P{XIIT~^!(nxcY9gNL`hBcvxyL&(M|Z;;L@MP_Q2l`(KG4Kh$>bUD3%qyqX2
zJCk?U+MF+yDx$lUxKGf3%oZbd9$6-IIs-lFpGRw^&{gM$(ITm(h+pZG$T9l<9J@Py
z+7#jhCYJhKG#sj>de*EvE_&ikQ_+`8sVO_9V)LB(RkHS*KpZcSl2uDBs;R-nC~;*1
z?^TF=0~jm;#I@e3&#yWe^E>}rLdX>H&al!VP_Z2WmK{)fuQk&*)$2@e<7XvNsV?+V
zEmF5M8&mbXbSNpVg86&9)HhAtM%d^^w)ux%Ay4DuF)CL^TVPJ%-?*NYUU*;n{EjR$
zK+8-;aOFuPxYUhc&!Mm^<xP=om5xW~L>$HqYfj90F&Rf>Qc^-8AZQ)rl%-l9@&uqO
z%`*lYu+Nrt%KCtO)Ic9+U!kQSVu+(lc=GL{T{GzuWwUoS4TSyB20YBkRTn{CArX*L
zI1MBGKd_$#$nqKN6X|j5nRfXlPK1#8<RhZ^@!4s+23dQX49yK9BP|1SY|twr2($j+
z3TS_)hQ3zcgZS}3LNjvKO$$d`%8cil5B7rZLnvXAr7IA;OsGKB1=b<#+!Vxpcspnc
zBmuzjL{9nR`t@{2LA{eShS1N?a3w4+T&3{XIF1sEsp3bcOX+ZRD2-Wt))fl$8Bj~*
zi#bT8O#IIKK>Tq=!g-<f%sL5wfoQs}adEx<f@rGq3QFTd0hzRYIW)TRX$N`4WnXE2
zjQoXL@S;b%-JVkEN%qx@H<a3(U#+{{8+zn6-*fzHuZ&iyD{e*+CvMTcIk$d7gmH1M
zdR3tdQ@br-K`6c8z|u`@aa#pNok4$92NR(TZ(8s)NIy8&FEwK5xf<fDOId3@qIG$K
z;w+(i%B8kAiNI_Gk5$DH#wf0&0p^LE+3)HYE$6Ye-neaor9musq_=1OP*FQ8s4^4M
z(<2Vvf~ou(r*1`4g$#r&Hq8pHq9>i3vOL#5tv~OZr$gA0SXw3L164GV<_AfW^&J(B
zRaz2(mcUep;b<SkdtLI$s8qfaHy(8bMS>O(ASvNkC#5?T1B`YVpjeZT-QpIJ9a>3Y
z9A;BnAbQ{jmEV9|Ve@a}40FfR3(iV$2XIk1o!+P1^PrZiWb&QG&$`wy`-G4Oy0@+=
zGL+JnGyqh0u!?M}lm`b@EbcIH0=yP50Y01sSbRkbVfHF4*I1JO)LScm*{l#Kd|h^n
zDj0ycM6Y^=_pO;Q^*$yi(7hqn{f_=y1d|-jct|2K=^?AJ)Qu#ft|541sEo#3%7g&s
zVF{_26ZnUuc2dT~jQP4nXW79bOM%PSB}f#Un@DU_DSh)(C=Zr^h6ZY?P}|OpVi4F7
z`P2{~w?v)^tD{ia0YAK=i=@n6L&h6uQ4xw-{U9mUJ<f_oo42vr0c@8S7Lc}oP!~gX
zZd<V;B_GE3``dv&IF@?jQnPFy-&KdJy2ecvVW1iR4C0@ztM~MhdDX=x1UDw75_{{^
z*vN-(35@^xtb&&<K)_ko0F^%tOjs3Mt2l#JOGh|oUZuBSmI6r96eJG@RUvBnHwZI}
z`G8o*^^F%@G~^6)@+LgmPvW3RvjT84?_aH%LYxS|`SB4{N;~hQ*sm|NOY6Mo;^R;i
z^-WkKYpCLN2onXIP6O^@w+NRJEcNni>FZ^mn8R&a_?Mi%4P=ObfEXHkMXwTej*`qc
zUHyZTION|ebwO;uL=BT|!TpBy5*Vt*$la4h=NbDbjI$67cOBg)yV?-^C=qAk_C%4+
zunCuY;I&>=^pCRxX$`7i#?Qd2ij}Q{;lrqDOC9W8yH}8yAuw+%-rFbulJRrXCcNvb
zcKXA;&;vO@Heepx4^1?RmRFL0CW|w6o0=jS3^Y+GZ(1N{)PMzjTugm(%hR>UB1}Cg
zW5OPRi2E(U;PYj;ikshIZ>74cv|JyQ{wvr@7fuiS#ibsJlOm4bSs-2LN!%!V@gA35
zEXGjzHX$NS;AtL_Dj@^(r<V~o!}U0=3Ck_22?C-fT<;84R5&)iyGZzUVI<pVM(Q-N
zg1`mQIYyLX5HvzY@Mmp?Zh{-s>AA092is$}1$O-MC3+a!3uE9Z4$EdGGfabso{l~3
zy+kwNF8Lc5k*bBmkey;7^nH(Cfc(7}H@H|zI0*u&PO6+eLhUYJZZ!O#hF4M9d7^MB
zB5Eir<?3t5#~W?OACf|ij2gFyW^XRL-@~#nr_8JFVlW`~K@-)Im3BEx71q!f%NrxK
zXp21v2B!c_4R%=pJ-wTLbSUNw9u<bX6S;UJjgs3$^Cq<^3EQ1t&i7tpN^OuDEwcV$
zaNxL3vMH{IAGOLWwF9sYAv?kq)&WQfo^qtO#_Ozg`aH$IpH|S_az0f7DjUd@L^vE0
zSIKfd_R<jlN+YK#05lzpi8iA_=qp;laMCDD*2$3SdsK}x8S-OCpmBfENaW|GfofQT
z>S*HW;=&abfN(P9$A%#T2o0S8|0EVkfN~bOynN@Ys1)B!;0yj$4W0l7;jtG#^O;T2
z22m1xzKFy5@mI}gYMo!5FGh`2Hlvr$Z54{=vA89MzHWyLs#r|mOc$f<!=7LOx?^#>
z*^qiXKM8Y=I!z4DV1!SGk)#3?kk;)#MCgZ}YNtS6-8c_#{n**+<@L1ru&!T>t9CrL
zf!2Gv#i+sMS+=md#W1w*039>`qM9M1P>MApyzFY86eO8v8HzgX1GFp*<dGu_I|z<$
z=?P)HCT-nA2h0<ETFph(KSAM)m~{Yhg3OhP1x&Q7Ug7=R#-@>lh5v4Cu&fuQ<^-wt
z6M7Et*JAX~V+LuO@RyX$th)hV`w|(pj-y>y>Gxm&T6y7tkBctJmsmH`zt7E7u=+S2
z0f)}b_2QX;SriC1w){BIr<Tom4p>98J1q;Iu!8T{r0XzPGkIl!P8B6P`p3_`jLcIu
z{x+mm^`)TUTr5*~Ca2n+3z_|i(zt(5QfN3Mm&$<Kz-z(sMLqNniS6ZN`6$w85SB^<
zEYovL!^Gf;q|EdQZ0X6KImFPeuGnE~oZF;@>`z7F4P2m-xCX%SW`*&Pv<A$Md(E$t
zrW6RmLrF%7iPu)XG~O5CEx(p(qp3<rWQHH-Oukp9*@-=M6v3?)SAee(qP9ySQ8X|n
zG?qg9nJucL<E>dLA|!(2!jUsR5oWHN=3-xl>5>LZ)Mn$waMMCa0)IfDQVUB8XNIr%
zMkLG-LUYuonYv?CC%15{p=C)9`(B8o3i#OxjtiXa9T;p|ms*2!ngm-+%_rx5+fu0K
zu&b-F@Q6Z;v7eSLrb)f3*=0CfOh)0VICX54!kVnXPo#CvjLIUaBhBF9_cSn1Scw8H
zXEn+b3uEKjopMm-+@T*k<GjhH3~qAk04Y%OrHgN*PiIooW#w&x(%J7e;czs4BzQ9i
zuT;xWU5IX3`Uq|S*gnSw16^sxD2_1)!*B@|gvyBk89J-<&j`}N9YAhnUMlW%)*VII
zm=tnHEc)?aaz59VtgR%1s+_8pQr8z~m?mqw)fK^A4Y!kz>ybVo!9P3xEz-FX)^0)`
zQpwf^`MYe0oqb(hhWZPEcRG45)~lXNry(J~x>c<($~H-j(bwF<<ILS*w?@@}B>v#>
z>8ASV?KG25i{D3p5r&MUP-}Gr5U|L9w}~K*o`_+3qAz*mc)2nX*La|;L{XAlu^HHK
z7n&!-1#M2ItBh7nS3QKcdUJqPn9~qOfYmO57)f3>MrY9?*qMBGTRn)REm%vF)+Q=R
zzrU=FM`Y6O#mRnKAB5Cdl0RV17mUO+jx<P$*sW(7EVjunYOn(NfFl-^#_an&2z%^U
z(w3BPI~=%2E0J6dax+!>F>wLyfl0#*736p>H2!9_hcHuAtTQ5O6!+(^&~=0bCI?Z$
zKRvAMig*s%H?sV>OH%5H#8^TiWLW4pt7rOGTrUnL<CU+1JZ0Gs2LV^yO1{3w5sUEj
z6G-MeO1SWKI4#vQ%H0IM@^Zb4^O9gJx6ao`sx7)+vMk*de_LKil|=tH-y}_f#+gT+
zO6D}ARw`2|lp;A-j6F$m--l~|td!+bEb!3<l^pv%-;wn+QpzeL_MxI1e)Tu|aQ!6c
zLxx=IYS`@`ftdN1F7u)Bb*)+$i!JDFIfDDY&*V88M|vT1>y))^Z@W^l7e1)O`G6F~
z!ha!dwb^v{?)v3NEV0VbOB{Q2*=8Nec02+?@#jp*N?WGV3~~t!isG~auFB2nj`P8I
zD2pr<c&oa=H`eI~sCYC0&F^0v%Wvdx!Y?18kuAt0+@ZD0c{z421N<6omNGnq;OC{h
ze6+RZ9Jo`L%cGla-Rwmgv7_G!D~CIdx+j~fJrK(}rUN)QkP3J46Q`c;B5$9IZ_D%h
zAon}g2H#Ni>lsF&@Mr9f&rQ_YtL&aYHbEj2f4`qX6Yuok;S9*CxY(Cq*@nUbse0T5
z-Oji6-m{)SoNA5dX5dk4PGLvLPfon4Lb;L^rzj`#OmW1hUtJ;7sX;dpj+KPb&w+G4
zc%7fG`?2zC_%%;8-0p2y?2VP{IhV0VhH^s&Hwy>X#9G7b-EWW0-Q;ky;STD169!My
z+Np^_$(nO$rlU1+G7<#@MJK)QoL_Bk@BX>Q-W1sb%CnR2J{!@~ckCe-rHr4|Kxh2&
zbDpFLL#N=T#mwHzMz}r}tRt)hn(Y;d%~UhMbLjHQ7)qm1C=;Gehco+^Deq%Yni+M=
z!X}n!0T#Hm1WgX3Z|Bt>2Ra`j_bXk8kY?(;%0U(n25IM0A1Fo-*44}kC-*CPpUw~5
z-JN`x4GpXt)DC73HusOF&7D6aBhZ4JQiZI7+wuV=j%6qUlV%?g@jDh&BJsZ;isP9y
zEMLz&k!*u}wM!sCmIgI+NcOMG%#>SraDhx{j4AM^2zQEHE6-5;iI(_+L;w1JL|o=F
zDEw1!))+YU#|K)NaRR?`LJZ~v_LK7qaFQ!cOmssJd`YaFKQwk`?dj(2#kuz|dAPeh
zxp=N@S?A;RI))S&o3U1&5jK8=Ry1M`Ff9-l?=?o8#WRb~gIIWI8(mPr7A#;p{pVoG
zBVofFCW~dr^s=Q`m4Zbv&~-!VWi4_SC{mu{@jf*(kd?Lmg`*H*CfT~hlIj-*r!c}$
z)XhE&%VPgFW2@)0ASi)@A2<K2Ha1>Z*X&@z@@_RPks?Soo@tf*3DZmIo02h&exEX1
z^*SF1d3F>It2Tq~Z~)Z*+KAjjB0%VTkxWhgV@(5i0H4^RJp@lbL*}LIn<|W@<~=r6
zIrpoN3Lc!lY8W?!oHKGTjh)PNrs%ltk`&W=R5xwIE2Z0?Sib(8C*wzRZBb~=tqo1|
z<P;EVJt*nD2HU&$&Xn<N@{d>>9>1Es)6i%1S@?c_xcIu^?p0LP^TY79<ws)tTpOP*
zWEZpZ!^znSkt2uH8QHW*4(Cp?K3dlmil%NB3d()=%ZLMjb_Jb>4CRphT%p4*cQA?(
zIS{bh0OfQxW@=(UBt2|^P~~iY^Y-D+IGs3ROFw0?c}ABzeeHlcBF_oYISLW&5}Mp(
zc4&E-q*>lErS4w;{NO3g2f$f3RW2R!Yj7^th_2*nmK|x=EkXM-;erLtvJ;TMS1Lpm
z*g$pa>ECV=dpvqDa}KL_^G;0T>UVe1%Gnuu8I0TU$dx%{R2AItAZnt^zi!%JBPuFJ
zkDmDJ_|P25x=ek@*E;VFQQ`D6z^La%C*g(;b-GZB6ZpL<%^?w$797FhYhmXIK}hQ-
z_nyaj#j||0fwmhp!q0z7VHjUv84wZ!S9m&$YX16n4C!t<-MR~^YSP#soNrviQ#&{Y
zGw;hxZ89A?HdFD})MQ-6-n;EwM$MG6f~rGW3BkbH^_2(ki=nF>OILa)XE$aUju!YK
z&{<&bu2p<Y!;6=BMgy<w$<DpwCt7{KGWCkQsJqzkN(GT2;z;M;Zdr$=Bxdu*l)GN#
zvVk8ziAo!F5g36VO1W8TAoBXjtF=FUA@nFJRx$WXnV|DfBGSg@(c6<cr?tWDa~8$b
z+w|M4WhlsloN|h*o@q6y45242`qTFP`odJ>!;4u{<>da^+vw!U8_{%5x+>Dki4~&b
zxUqqC`Bn$S9U3xDL<qv(C8Iq`eTsfnB0{Dx({^_3Vu<(~8|<{i0qgP!a51G`VPZe1
zLZaKr4SDGad%auO0fN@!p`bux#}?5$Sr++F^M|vMoKFYN4KF<wfZ=uOf?AM69ZcVW
z9+dn%v>Olz3kxivFL`u&Ip=v31kxX7*4^;9fEhRHEyW+zO#F@`ilvgft5Z|);aaW1
z*TLJqVe`lRgJzh&-1yRTp{-_xi}L3e0m;QCoyGR<PTYhOGWUZhBBJoKB9nTD0U{hT
zR#wE^8Vyx)gvqx$ri2;+v$$QMRGZ{M3g+0n1_QT1o6zMVL<9nhu*jco@fSgU6y3)^
zf-G8K{Ksb(V${O3unja@Sr5~1B&C2)Oe`AFZntL}nt3<-@JMrXMH%U)m!{ZB9uhxN
z@0s-~`biR|&H`#ihpu@y3A@^<Q^1Z;&2Y%7sdPEcv&`%w7BPy3z{uOkwR~)TGIQ;T
zZTn`2L?#q#k8bM9NS@{Sl(icIVr#}QK1}<*<2DY`-#DmoA)6F-P6xyhus0Sg<`!`2
z8F;hNksc?pl>?w|wXV{BJMe*e+bG`GAGcY%d^?Z@JbJgvjta%xu&EoQZZX!)*xxfm
zSuBxdHq3|+(gS@o(xL(+wL7_bu;l%9ziaHq2dg#0Q`3|9){{cW*HN99#=i9da%7Z^
z@t^t^vuzt=jSPxc?KkSGG##}faDe!wD*0Db2tg#FtcW~siW@2#V11Hl$UX!H|3EX-
zpH$t8o)@87m)v*SpI@<n+zAFifU>gk%hhIbB~=!X{^(5GEMCv=Y*zy<u~*%f6NYb)
z{c?Dk#Jw0y1gs7J)LQ9D<aT>0-9v9?Kbhh{kc|Hwc+A+;VJoz9VP42zxm!|olrldP
zj~&o>wN`{}-2Fy+!R{HgW!^nN$7|(xe%<=g<3pyT({zx*W5|ylNUX|T1n3dl5uLMq
z@j1tg%0_J`k`aKYvuAPtwEM%Z*i*9a9<MBdg@Bz#1*0;>wlv~6#1{HHa++H|#+^<{
z?cla+$8Qx9XaQ1tYIB+$J*7z();0et(K$`lSfZl5y|~iEi!f2@U;2sZ|BX1&2z`8s
zGQDe3)~$18f!7XgU?b$c>{JcK`{3WZpG!ZP-@Ei1H9tL>PcU~s>~+Fm3K$;uaK-?u
z8`@6)kyX=VLwT*L@H>9sZ=~lGKI8+r1}Yzu^8gL4tZ@@XuaHRbQM53NrBu*!{}ecC
z%LclXOd#!r@bGA^;68jU@^W)iE40#reNOiWv*pZ))2(}ZnT;6Dt3St4dVsh5b4S2Y
zQny->$X44pBnha)!#T>QaWR^33Xy9l2}iXu&`LONjMeABMqFQ&|D8DVunqpPileOc
zdhha+C^bW9YQd9+HhxlR{RjP2NbV`5DCbhLC-u`Ndv~yVgX+3~9R0nEahx18eV*ku
zT694XTLhU+*aZ5;^kPq0C$1E{^h&71X1#R$+vuCsUO91Wx2%i+esp8Fp9`|`%eZc1
z_x5f6Mp2gA-^R;U!8~uF6bTnMQX%p+(i5P0@>kjkqg>JnT3_}i{TG}8Nqcjz-{e4Q
zWgF-0It6AcIx2eF?6MWQJwqr2Razv`Bri<Z)tQU;cA7wF6z<r_GMLWwRLdm)H4`BR
zEM%&oJ|95E=)urYN{A~x!;xtwVUlQlD3Jdf^tB>;WJWVtU?r!qm5&vk{{jYNi)N|e
z-ghgN6eKFn4?)n+BC9VnX^jY1yrdc|hIG#<TV`|}VIqho)bI;7KF9)9O328vVzHH*
zyVLHXx;q8Jz+!lj_G&*Br@N3*uVMOMOuee4SS?2B_<mRJcCFxp5OpzS2z?To+~Qnj
zDfp5?bYR+dQx<#F7cU8^g0q1H3iUK3qQ7BSh>^j?eE?O4P-~+mZlB8*8XI^Q-3qy)
zRinWhU;3C>25-JE@0T>U4H*oPwa6Iyb?3IR4{(NRmes$blSH}HP`1|o?8RVQxC-Q?
zBsH8zc;q5F4vjMVT3YSs#VA0z3Vfy(=LQ8A`9;>XT(qM>q}r6KuAxXkoP~_Nfpz-n
z!9}C+vn`ZWg&F;c+s~Q1ekXy8f6vhIz@J5E{kq3EDpWT7mBd=Kh`ymNPhA9<TkQqS
zk-<#-f0!D4LO$`>a^Li8rAI2TCkF;?G%>V33hTvDJqEk7y4iEJa4E?UG(|D@mB~#4
zq;>sg%>xrc*3~_W)@`plF^=%z8z-Cm>~d-O=WXjvLvsa}P1LMo+vUWs8|t!XM<`RU
z3DaE~7uT9wdH8uhP`<=@!9KF#Fx9S}eQ7z@?AXWItnixQ;o&nJ+Y^?`S~bP~2|ZLo
z{g~+vF{rUkSIWetAnVSZYVJG8h7KH@8w7|~a)vzkIJSPAFVA#ljE8?4zbs#z$wvQp
zH+LHO^|*gHc0AN&EO?f`oqNjB9LYP)nNnCZI8R$|nVvm`&}VqEPX)K2tk{a<h<~->
zW#R=H|Ev{M7T$5W6kcZ<8kPyWjaPMAz|o;GZ@jv9sAGlU_X(gT46{(b4>R<=KPFL)
zkL`hRR|Xx3CqO4aGmVBKP;ZZ=&o#TUiBl~gZ%Fn0<H3hp=y@pi7$f?)RHF8HF!TcN
zM+E!VxDpOi@Wx^0NYLuWD@o}@{a1waMWeT!0NZyz+Axq!4$X(KeMwy~GRVUkazH4j
z(Q2b_Y$Hn3>yf#c8)ObK0hAV+tH1@}I+EfV{hlzsU1PR!T_pSY%ine2kgK=S?k1v$
zT!xgIJopa^+Ixq6=D{*nZ}_6z*-)O<CCyUuuWj{`0-WS=h<^kZGj__;naI!4q+4fq
zSCw7w5m;cR#IIG;OZEkS<<`f?akLbdS?PA}b4E5>;HKA$4#y(xNb5N_AX*eBu(CQG
z3fibC&P{l+^JE~zu}}Q2#6N<AZjIOlun^}ZqRWZrOgFpf;ieAqR>1xKm+hmqy=H85
zd&PfZ*zPMNNU~Z<2t;9sU_zS~P0g<(grMD5`RmG_bq6|g7!`Bo6fwqK1+(A6GId!>
z^T!y?Sc1h%*l;P5PVu6|mK`M3_v1}?o1!JD<K{Sh5%yuBy-^SVym6=O57PEb@vMjt
z{qC~{U@F&hUE-1$p)%;hp$bwUTS0Br``i>$oDQ6FrH?)(MA~amFf2F<*~vI&lm=ci
zPVZHtb32B{bTLWU&=yD`4`V8-kem~yZ_MM(W~6$=^(7Q!Uwb*np+TV=!V4T^Ail6s
znh=>w-+IYS;{X~dDX{S^6;ezTT5qMw;f#Zk#<kyXStfSlZ;k(|eCc+1T5|}zNo@Uf
z$&PciRL-||j8RTPgz4E@tficCkV73RgbwHC-S09!nVHqcpEN4L_$myvyW!a%TU~6r
z>8kBO<|@HdmQrT{1nSrD&r`{~Gy7AM(+d(celD^oBw2)?9V3+&8ze($6O8)hParG=
z?C--Tu5H-Pa#2(1OjlUJkx=Iipg#z)95k%^U>@MfSg!8cL>gm#xU(OQ-vlbDb>Ag9
z0(!Q7p4vPPcfp7yNC0t>JA~t;2O@GtZgMaD=9foQWQe0)1du067p>E_=P<p8w4VCH
z+rw^`$Dc6vRb1Wb!iQIqY8E5PS2bEseb;(YzNphN7yhh`MiC+5%GVQI3ZmG!O{Lk%
zoP{;ztXWvoiOr*vC<(G8+Z)nKA`__#Yz5WuxS1#~iKggzU#1B6C0&A^LKkO$Kp(Dk
zJdL}pEVwx3Eg2Tr#49Gs9qsWt?@XNAE~<qSM#5JWIvpj<<2!j_&_10%=9wr3nuOb8
zf7IhwBs<#fxA8&RGKqhCZhUT}Ozne&a32Hnm0Qroi`#16<CkdxUtejCo%S>0mJAMF
zpJ{w7_S55J9|H6S9|lrW0n8P3f4QD`|LjGP1Nu_1A#gh2+Hy_3XMNH9*&kN{wXBjX
z;y(e$f*4F09;{4Wx`6r-@FZX%=tNZws#f!gD{a(GiO59qG-RPDMvoi&h6*G<9sYPc
z%q5P6h-7Sbs<}kvpsyaNF?&XtHuM|gS88n9asC@~KS@o9&On3I2?JJXcZllW&#a38
z_Z#Wiq@|a>K0s^_Ps;@af&IXEKuF82_PRk7-}w$s(|xZ15)aUoy&~3Y3LcCL+9#xs
z&%m=Poh+PZl7$Dz3Psnn7W}!WkjyKEtvdHt%fq)}O#y9A9MG1DczP}wZ@M0>3Zf^z
zvCvtRl>3j*K_hljh@Ti0PPKoj5Mv!F=t%8W#s02)gfJ}6XEfr#8kc|d>-9ovLRVNi
zkj1;bcAM7szmwz@o?Nrvba8!ql4wegkwLq>elvXn46eD&?dX!05H+SQD35c4m>_F0
zv*8=Uc6=7pWqrQ1Q>w8NGJ7#;<?WEUwE0?ICz{^~XM@H2Mz7T)*CZ!913!gY;DnVT
zI9LI|a4L)R@lf_C0j0AHgi|nfLd<6SSK!EtEyNT_LrqeIayKSZXmE!#sxRE8o^vX+
z8sU%RyTJ5^SRF|3SkcoC|9S*cr9&L~Z)^tHv?Zl$&|aD&$F)9eWvY*){sF*gDN!sI
zWNt}+hD<n_NbcEd)0^Gg3r}7!dhLj9hHIhi3liY%CALG+S7lUj9eN{Sr<+%x;~+co
zkiT^gcqgLsq%{m-H1XZl&z8sOE~3LLv!!2e;!KwlA!brle@chM!$jhs^xMFc;%UO)
zl29{Fi+Do1ULJAWiW^?)xs9FpWQp3w1%X7w!e`X^pP>za%XhGMiqZmGC&gKWQ!_t4
z%qr4YKY<Vgku{Nq@<-RF90hD#+D2bzV$hkINW9dx;i*iVspX}>OWA8xz+i+&W`O*|
z4CJ#)N-xpbQ&u4PI~budbd!J$=!sm(zTy<r`*40ZIKG_=qy;Q-?4uwQqk$`c(gNqH
zKG`aG=ZB6DULR1U+!>G&kz9lV*rpeOqtQddfTfs)ZjG6*VEE<`GWNWTlb`H55RQ?L
zNV8Q}3L<$bByKS`L~gsLMpu!(PTW+m>7N*L^Ah3({fVW79Mt)<8G>c;1^9>FukjZN
zxTmj$Q<^3*9_R>axpk!N-9lfoyL2p`qG*hH7(RH@>O{M{bil6$i0Oiui;~S(&}5#x
zR%40Hm5S^@(G$f6C7Jo&0v0F`0Ax+w*(-ul00*leR!?OXP`21Jt_>)``XpsKE%B_M
z&D;WpxHyv!Gl&)AxU&NjjoLqHEl6GkL0eotDFN30ooXxvJ}nM=4L1--ucdHF;YC7`
z$tQuD5%<@g`I%l`Uc4Cc=R$x8AD&;zAOMLF+AkcWg2hi$Ucme<g3ql_jG*&=q&q<7
z_}bS%Y9Kg#GlS-LAIhX{x%@tBZ48v_Wizxd&Cn>)KmB?T+k+h=4t%+MZ49Gkl=-ly
zf>x_H-(3n}rw^gQrgHg0AOhSUdir8{unK~iC<ry4S}&*$sN#(|`4efcCpHkG`11H!
zHR6|r>#WJWKdbZhu=l#<=iAgP_3oYM8{2z|{dRDB_}chmdXv~h@w5Fji@0{~+LM))
zEfrV!zNBHb+B1~<3g_1y^=;|%=K87f&BL){_tRi5Qnn=xepzCKJ|S86j!0&C!(p&P
zrx|GikYO*n`NBA1G434irfV`dp24n)OHb2M0>nv+(rK`zza`37Y0NP}&0n8kV=lTn
zrNZdlv!H>3n6#Tw8*P{Qmynyqn=$IogVc>VgTZ<q&&XwaRhOtA0lR%#1SqTgO(v+0
zJg{*8$V{3{b({KDe|$H>AjYA`jpeUTH=rsnq?&bAN=M2R|B%f}T2ujdPnCT&bs7}E
zkZ-bQt5mYxK+|XLp_mpE3L#o5dC*zpm1J&an!C3{opt|NCOQ*@ule4nrK`;b!FOU)
z%hQ+)GzO15Al)@<I#6bo$1K^yS&_Yy0c0ZG^vcEgVV~pbMF;elwUi)fFwVRnl4xUB
zEnK(m3j4OS3fG*!wr)RIuL$}2FF1-s+ry1+<MygGPNA^F^x7kij6aj?8ZCQiQnRqG
z6uzv;$<N99M4PzXC!x$L)VCb)SIJ3;+BjuS{ulx2+OC_1MiHSn#zHo*u_?0U(_2?I
z*QvrCLyE;h4qI+`{UA{30}zsksRkoSzVa3T_}m8r_RoL^uv#!{=d6diH%f}YO6iyD
zS$UDcRD3A&OsT-^D59bauSxr@CXw8Ahy+os<$lHC9>#81RNbGzo=ZuI>hPds%%s|Y
z#KzHc=~zxv_h9#v;P!|nU2GETYRSx{**d2jqffHpkrz<nVW{>VYPo)csgR{^Sz~!b
zBeLW;EBD80r|VHs230=8NM1h2Gz*kmxiZwiy5eF3=lyEvB&I2uq}dehNNr^UJ_SV8
zF(rq{j_7Fn<e1XA7l>feOPU^nekY<whQEw^K8~!JG7~Sexx2@!9)m54jNRTbul+hk
zj;tO%sj+WctO-IQa1E9`phgY=x8Q03FVz89>nPSNbey!5j0e%P^VuwTQJpTNJ1km}
zMAm*gwFO5&L9}p12J=gk89I^;rYbp$UF%lQ<~zM5f$fL#wa)IuJY3UW1EZ9Dh3BkQ
z3P|mR45qL^Yui(hvd?{uiUd*uDN;5>Trd1VvoN0GdTWSCRF!8wqy$i(ckmZoPsvI8
zG^+mLF3Y<i4u7WrzWK;-?W5QJK15p1-gk1%`*M6Nd49cbZ=O8vve)ijl6*`buw|Xf
z5LQ$YEnH&cKGt=Tn0e|S$zhDj2^MT805owYwXqJ?X0*2=q<fAmu_ANO{Y!e3{El@*
z6^2#T3_*8Qr6TkkLN^w+Y#BG}8K(J0hE>#PVh)-K%&Y7Q^?9Gk8(dI;_!G0OAwgzI
zdn;?TV?_(c$tf&uE`JIEbACE-$=4ISwaJyafLB>+goQ&~-_ErnO50(7yB}gHX$^!K
zAf}VQY*HoyioU@4z(Cc>9hY_+)zK@~$`UxU#60d&myp}IbG8aRh#aij7$D0WVcpIX
z)Z;r*YX;FcRa+a83826)ROWcBCV_Kilc=y`nbRtuJCMX7z^+4aPN)uh$CgnC&FNBr
ztW)Fzh|F>2k>z{n?PGCixmQ2}v*fQ$QYo%BOV}{CtUMA?s*{9gV7k%T&msrEHaf@i
zGx@wd^E|`$eKWVRSJ6=lj=3at<v({m3|t07y>8oO)m6=CrLc!2MlGltRK|w0h9`kL
z`o|~-7Bwi0XOtNJIqShr0$Fp~e>_B0uAUAy`;>r4#Pv*C2NSrW=;WlPswnZ3e&Noa
zcqm{0rcJwT5<O!o-R+P_ij{aY3gls}4Ui3A%ogO3KIHbMY~W=?G9<00MQ+373}o)I
zQy_{Cd97A7dGR|rss28m@EWJ1?9SW`dQ^WrgLBjjPbpdfkcCe67`jvB%?;WB_usyt
zS9UmhQp<d@k}t5fXm<g<vR=|{Xr<}V{SN$=6}r>2`d^NcrtEP{phv8m>29L|j+OF~
zD7+M|!rYWtVIo4M?4-S0lv6W4G~|Q>hWTGp-hk{_-?siI^ZP?1x)Q0<y-!OMerG-s
z=RR^tTR1)=fu~W(lppS-+MAZvU7Oxy<nBMCNNX=pgAi|8U~hQ?tvp)W)Z4Sobv}S&
z8rl>rES<UPAOURtrfgo`B>}+2!w+9Tk~K$*LcMblh+JN=VRysQ#K~(&HpD6hEcoS=
z?xTL-CUgF6{nhj*;$tOo&DP&)9K7YUf3IC#hz|VYeki)NJ`p=z4o3E-ND*C<V&$5F
z^Ro*d;qVKTP7yB1!h$2yYg0mmjXAgEMG27HkSHZN|Ha4aiR)u8TZ6TU4AK+F*kFgf
zRkk82ffcW=m^AV)g9X4+!G_h*P)i}{(o6j5B)gcJDu{i8(dZwsqzfy%DtHljVL6v~
zcI&Jj41B(8w@IvZ^1RT9f2zGvwa8Xgh<XW9LzM#m{VMCrTCFn!c$v3$5P&D}$P61+
z2oi6|GvcUA2ADW8rF9&o4^ah;IOgiea&ikeVqB);DNAzF2OG#<p{2%!r<HR^8laPL
zgfwZ+LbW+%$r^7Ar@0UvrpgcxB|mmK-D<?Ilg$>1;|h^|1Tv|Vl79Itw>4Z$IssSI
zDp^ZY6k>>tH}>%7mX$UcD)Gl-fp!c_X;>U-*E=J^lVCZt+=2?3x0l^lbyphxeIW=#
zfHRTnuR?%UQtrd5H$y8Ymm-xSRd;m1Z|o&HgbTPqS7(+`!SM=!mX+qyY8>UX!U%gQ
z^dWnh>$S>3kx0q%tAYG8!WT%d%wrY9h)lMw#=3kOZ71C3e{zeCnVs>YmF)u4*q0tb
z;a1gt2>wwirD&bVS@V6_YuMuO1NcA|1pd*;{a*gQq=1|<dKwPNRF$C=+8%^*&=Jy&
z0;zTF>OjxuG-(F0)R(nKGY6He_8Ic=Nrdz@|2eYTxV88h909udn2}1wBQ+hju^zEP
zPi9+IqyI|wNSLvGYE|r}WT)^7s!h=tJX*-Uxhim^;2oz!F@<|}8XY$WqGA_@vDYp8
zN^n?yF|)n>&&4V2&kx^e1xz$!LjBuPU%^(=HH)80(}AVKF8k5&PlZ%xv$#X6WmjgC
z;ZH<#OLM}A?574&CCX48`+yaWavD|TkY<>4<HLmmb>1r6*UH~K=klQ(s2MlflWtFx
zAJkSAoTYqhBS%opFZl=QtgU=OnpS5Kw6t6L1^YB18rZ3+J9;!F>*O4YKgRA5Iwdfd
z-@1=P5Yo5&7%-w0X`ph1aG0Id>4m>US5Mg%J^%igdTha4G)8R*PlN^q4KYrxbvri`
zOHOywDjUf}OqQ(Y_4RR$my_eW_D`NDs-X@u0=x0UwA;}zPbY3BWtCQdw>v}lMXTon
zxKmfG1<AU6o_xpxtJbawa;6+$EPSS&(nJ?o>8?AyxkNu9HTz=Mzr~7Z_oPvj)DRwR
zA%g#CGwo8u0mKNnziuKqT~w_5FoLXS54;coeBJJ@vSx|QflhD&Qr2&Tdi6X6-NP%T
zUl%q+eY9`W8lwNiG%--M6#Ql1gJQEv;?6GfJ7CR>Cfi~d%Kb>so4Ltr$}N(dz(js|
zkq5vwS;OW#<JKvEY+X{$7;4X;?r0K3EvGAeYOv~quKUX*lLMt=(z%R0(;cHWrI}Lf
zp0|2&97TC2c8eax9EgG0DE^5Guy0^N#RFV&tyhFFm~m&fZrl*2$Y{&}AEOKhYjxJz
zfKf0*uo|J%++PDEuK$gzBtpnCvyH{eZ^ix+yMY>(J&{r^Y8`h98v75jO2WaJI{|!3
zh^m#I+{FPArS;iVWoKt^N0-Yr=MS8zdorS`9e@_uoHrO{r$d0AuLa(XTMtWb3+Gu;
zH)5t$fS!39qbaWDWdN=N(hugbpz0ilYvCuYZJx3pcrD5l*8Iv@E&5!Gl9R(-d9`rH
zN?1AB2LvkrSsl@Fj3isx8BO;tgO%J@bDCFoiphP!FngdqvTo`-MDuA`F+aKfJrs=>
zfAg$=+CQ7UHn*e28~tM1Ka6`r@Fq*NKolTptmo@cSX<4Uu)rDcPmLiw426FXu6YCV
z_DY|Z3zz8OKIgNdU&bfdYj>VMENCSfA-~|6lM-~bc8<{-HJNhc1XMjaGt?E?E!11H
zB7=$+btRq`BUrTnpF*Fg#=F<cMmb0n?YBA}=--S!yBBTnubN*97h;dYg~3>RZg6n2
z@md0z9m-W3O2|BqqF*En0=*V6BNobkM-D)D5HO{qpF@(j{Tb=MTUI%}u{|%fv%`4k
z7~#pN3s~~~Sf+bC9ZV68@QZw7lJS7Z=ZZ6JrYr7oj(wj*vqSI^P*ceyf%?l1&dBEi
znBqUL?M#$L0CpM98$WMaA8pGu7PzMwA1fxVv$Jq9{Lofyi8*Ui#awnf5E5}X?H(R;
z-~esi5~1f`(P}hiFX$;?C_raNqz#U8va@G-tndQ%_BmPJ_jPgI0eoHo3NvUhiV__F
z#XdGanu$2Ed)ch5+-Ta4V=&2YECAa*3FQGLc}PYvnD^LGDvp4@D;vSLT~J5A@m+&)
zO@5rboZP97IhG4UhJL0RiRMI}+5L=DnMPMA1oeNlp6Yy-`1ttWj9D=0=2^waU4^Xf
zWGpW7@2X2jkxm&*{rCe}P$b`tkr|s;=@D=Dr#@(<0O%PXNbtR!Y9;V=DvCwINp$#)
zu|INJyiKV|j^R8*DjAWaK7-r$8biR^Q7+kSCV7fB83-G(eI{NMBpgf``W{7Xm_>R#
zhA*2xz?v2Mk2#&LE#AKD#`&80#eL}_0G~Rh65u}t2KisZw1PCM{ghqlv~CXfLQ+1{
zq-PD-f}ijI#%#1PKEv}Zj8jN@u%z_eW-zxtB#}@K35TK4_@K7HsKp)LqNHGQ0%cf}
zDGOdNn5<=8Z9oXAk)15Pe!S={P%6=usv;-}m}Du2o>mdrAFYZFFW~}tY5^lr91;fx
z0Pmlg3314C5*4Y_f?w?qo+#weNBL)Ge8OD$dmCyL+s|q&JJ8{qrg#tCPjf@Ua(5}}
z&823a`P$id#H*8-KCDXAM%{dUz=h6W$N!Z7+Y^Yw!d}c-(WsfPC8Ebb^T$i9`R6xQ
z<yS-R8S}!kx+*Oy=Lg2Gd*jM6X}d5_LXe#f@i0p?bpA0x<~fAv8vtMByJB-4kE2vy
zGMCJ+H3uJG(=-a{Jj`JlO_3-Aw>CH?XzD+7*Vwsr$6ZxDJ&HI#3U<AUXa(L(lKF%^
zCQMy38BI}2<Z2B%+TL*RkP0VtB4dtsO1^~1fx-N@2(i=cOtd&qjF_f#U1$2jM)L~F
zsNxUd08*1UD{~}<T;Kr;4?N;++F85Q0-4-N*(Q5Q^$%gGA3NFejrbJJ#KYpu>Ka7Q
z+3xj1XtVH-y`kKDXFp)W>xBF&%=K`iTy<)v-OloBEW4fF9e%Cuui33%7c^A#GKZax
zi~xv$(1#WA`Ydx$@NmLw)?!OqoN2>Pl|&;yO@+vEgoW%zwdL+9X=;Y9R45Z|-&h-p
zbE(Zw0OvPXksJ=2-!g>!%VPhXz=@QXUZmpPvPdtfj9&3DOY)_AjqtE$2*w6XDH{hn
zouqc$cnK15QDAk&@!ky3#qim<h1<<$soWKFB}lSmJ3koKA-a@Y)%8pD+i;oIh3#`n
zeWkFx_{@4UjdQmO`}>(_^tT(=kYCCAE}MHk+qJIEulmd19g<yKNPx0D0<(iq*c@A~
zQaw+C_9Qg>dS@T9+_QB0%STbQQ+m_tIe;c~=a`kNYL=#BS`-kQ(H_YjM}Av0!_mnt
znK+18n*2cuT<y*!QC0zZoz^8t{?)R6h?P(qXNNkHklB_$hXEP=Y#xM0V*S!kt;~+$
zUAdOgdq3&E1c;GSVMtau)}9(EqR?+_AFm%F^Bsz4lx|H{ZAH7-FwShGjvrmXFaft#
z&vo3N3v={sVL*lR8C<z>K#8T4-W8FEdBa*JVq5Vw1MRI2sCZAM^A9d1QW$^F=N9xH
z7YcS4L4NCw%`Io|IM3?iue*IFAuFVUVQqj;g^zdvFat%P9>?K4CQcHJsepPER!%KC
zda4SCb#aR`Ys1#}(N+}_OZ7#+F6Aw(aTZ;X&Mt~<WkIUvGWW5^tTONfm{w%6D8BbP
z(u`YmNbl6`#5!baa0pZ4BqdOwWP0z9$*{~HHc6i!sq7*q%Rl}*4LffI24-)Ty^G<!
z|MHXWQ;v>bzj4i4qqGKb+tWidNy|%koT5Uv-739Wj<E1Hjgl=B?oK1>JzjnFJ-!1S
zE>f*unV3#jC~0{Oocb~Y=x!9o-(aj0qDXh3#%tf|6G|fx1|!-SUX+63^pDv?hL3K}
z%z-~tUb(7VsdY(8d-<7_B3q9$ioeDchlF6?+^x!r44{<OemwkSp8<w0rmvw%o!!XX
zzm$V2{4D;$dXwrt->NA8ojK5QkRc!(Hnh>va6a5IB7N7TPPTG49ng-rMeu@S7F$)W
z&-)nYocz&TmhtYH8wIO$bqAa&I=}skF||YYm*)idz=|ijTLy4wpr^{Q?V}+7+8^WZ
zE$=APNT&C6Nz<-H0F^G}hBbm?W|7HN&-%KK>lGVO1l3EL6wh4tnkc6{Xs45Pa!2&r
zjG4>1kj`S@ie$pWwi^AexMb-PhEzf>;2-uW2(`ReBqd9L^wA*Xio<EMvCl)w!K;yf
z8LWh~vx-|W`(-t^xSn80N~z*Pydfz^Ur}26G(4Sl@x=NI!ldF3{n{%j-97kGkToZ6
zqjScscv#^h`pbR$mf-6;YDn0JNB4nACNEru*6+WxzlX&`rw<;0KO|ngr>V%53vc?!
zC8OzZ>|^u>A6#vZ4M|y7FiE2eDV|L+&w8NeyOqwrP$_u!6a_FNW#e1ksU)M<u9d@G
zEU784uPmPWpIx4*Eu38;-*EV~TJ0J2&Fe%-RKQ3y3=~%U_L!}%_vgrwOWCYGBbO|;
z&?Zgbh716boTGxNXqh(XP-ZREc&r>K_{Kvv%X$OYIi{04tPfxyQOFV=X9UKZQMf1y
zQ_Ns4VgIszRPhG1YroHvz1J=u*H3*0=SFSkL#j6DX2Uo*B^~~i;$Q~`s-6x*m=35*
zO+eeFKi8<@)sjl=o``*rqZZR8b4^nC(H7MsSs19SI?+AsbANLrF~P*tfNYn#fhL#g
zm-x!VjfQFRsR_${gp~Y<oLTfr$_Jb(#8)@Fx)!3aq{ZCDS68_E9Uvej-qLzpHs<pT
zWhHxj?4{bZ77Y!;R))4f(F)DjD^(vujxh~H7BsYVnLB~|M&7nbk60^S^DOy@ubSF2
zcL<izv1w}AZMCbZHM(g4WHr5Drp?<TuCezMB*?*W>h)_BGc33~bbY!NyW0a$mhtbQ
zSrT)17R8@Qp}Hz=NoIOX8n<^;6V{V>0yWE|#Ll-GJ9?@aF||3|dTN^Brr0yHX2V_x
zH!P+A=5Ba_9@^HQEVNdD)a6V*RwXLTPfXsTwZ}eR7pf>DQb=~{)B}MyZUrx6lHuZp
znSO*CBjsyjp1&$_o8b$oMO6m=8ms=BAzxmZBP4{lK*ypOHWN`mzc2R%xwc(koc8yp
zkcj+>W4nH<jm_co-EPZR_0k{5V+Tv`9MYT?^=M|WA#Nk9XFr`Bw^!jhJ}0=8FA(3`
z)cet@Z4hyF21v|Izw$njC?)Xv*Y@RfQta2X$`{W8_kEhveNP|Ls0XAZbh3FTG5X`;
zyy2VkgVa;x(&6Qs0=u8}<LZ4Y<>>n8=(X9q`}0Zr`P$}k?3cUf)wri@D>F?i`qTQ5
zVKoV^_xBFs)7!r5A<uFiXo(?R4sD_^D6Okit`*r^v->TW>JbVd+^+xmP0nkV&jnsK
z=7sMqa6;td$lUMhH{xRB6YX$4IQA}{AC+~}_G|Jxb;Gyx&Cd8oj(*y*{L^sR$?TT}
zQ}~s=y4idrhi`cng|EK6QL1FD%JYcx3MW@UNG}VU_2-U%coD;A;eCOJ1B~Y1-eN5^
z`F`o5q#c|rcVFLdu8)OlkNxpz#R>eK&F5cbl&YxxCK+_sWU1yS7Zsy2l(yHK;hqZ|
z9G9d7mG-}!pxKX9DN+WFzVfTfgPv?`mLZn}9cv2$#*86u4s1VJI#A<{elzsu@J=BU
z!;J_Q=)C~1>GmGH)>yCoby9z8C^vGgtvCeI)sV!$&s{dFWpQ{w82=7043?~DSYpp`
z-GcMswD?IR<INIUAo?gw3b@x8fVn6Jnls*<U~z*-aDU)8Iup(7R)5NFM~*`!$gnNZ
zfOMixQ5I(xxQecaL9bomdh>m|k}%@EX+%1E&g7*)H+y8qEbws7zN;Mou`(kzVhjBh
zNP>MG2O`WUa#{1PySYjmXiC5WXpTHizf8bt-k5yD%i3#g+XUwXpICmSE%BUx;sAxv
z?WvmVy#g9kyUo27|IN&Rc<S%@+2QR>E;6y3<@yY7dC+l8OVAKpg|f&NE6ZiL{wses
z2-@?RCgZi}ZJ*BiE@I^SWrV}dW~8-tf5wwuFe)wc)@LocL=d6`ZNUvSg~PR<-_~-u
zz$RM81Ax2aDg*?{8rwRT+k}?`O(et_fDWZ`&#8{cAN87xU;CCD{hjUhDaD10YGjT+
z5-?_9rASj@|5oHn*pEdWMJ2An^`xqn4M;R07~b%-l8D%ltmF*%v;Foe=AfbsWC8I_
zjN=h2(skwt2voKL^h5Xs_>Btph2bcdoc>m{=PbHFf6`x`cGwBrAtHN3;5|(e_<sOF
zK)%1+;$`R5^>1S`eAKYN$g%-*Z53902nfjU>N^_&gJLc$?3n<NEy<h{@)&So^+1q`
zSLCy(#L45YX_7uza)7*tz)Gp*!<{>4JTSSY+3<-o)dttSu2Yrrm`s!m99k3n<MqpH
zw4pI$$TX`g1u(Iwu@*ixB(VAogIC}<%ZABOb~Q`U*5{%?fvOH97U1NXfYwLILUy^t
zk7R!rCZW<19Yd71x+nGXa`+KA_)$I|!A=mM$6hfglA|KyG65fYBl+uN+SlJW>Yc2x
zN$Mp4Aj++J!pr(LDF|jp#V@T@nvWOTbZ0Uiuxo^kp(iL#!OD?{OE%6jA7Ld!U2@2d
z3&v-DbLjS`!*880e>!U)o;3H#Cg~%pO2&O1COV2*HTi8CBP1F2>->fm?bj4H2qxn=
zrP)dLG8l}(`qHH?dYUqU3rF=~m|$dqk>LzzYo7L}Y=L1?p6|TeUJ5g>d*RA8Rr_q1
z-s;L$n&3-|<p1zq45x)v*?#ldR%P9bZC#+wdR1PB@ELg|EsUiR(5CN3tO{NJMHdG6
z=9W$j??)s^mkcZ)<yHl59FV-8x?4DV;X1!n<<`?mc6AU<)JJK*THZxB$wSwqKFrJ&
z@boXa?k?vuk|AUE-YvcfRas_tGh14(3!cvm-wr3s6xSy%TNfJ^Bih`)d$}88TA5`E
ziXhlh01vw{>iZHz>z@C5+U{ycy68xkI`S7Z^iMig;C7%GNhucqoWQwJYIz1uPELCW
zBqE-4kH8=BaZDO5{xB`$thXm8;5(mg^X&NG`15-N&f4IoJU(aa<Tp{5&rcH4)Q>;6
z?f0v_jswnStE>YqU#?HdyVvVM*H~n7%A8j{4lXWs0f|dO^D6m1T}UVU`K(FC$sy7a
zVMoiAf%S2;)>XFfOu}wgy%QN*D*++Fnpj<XGNxZ}r_~MPy{?iX)3TP5WWRn(!;_q}
zjygJ;fPX>Y@|3g^XSXa3|586`wofBAl(D7dFkjrGZ_Bumgd4G!A(7kb3UO(^lZmHW
z8Hbd(@l|I$`uu6f9Q#~R0?iH6UN&6U1Fq(+t|}o#F?B?y-6xCTILT=`9N|`)@P9vE
z@*Nm3il8qNB{NnZJsig{;B(rpT~MBL!elx`Kv79)j0n9CclYcTo|f6I-JJGp>={=U
z^8j2hT~d`}&gxz_d<Cjr<dd?C9nuweZM5oMp0c9jS`qe8W_YI1#C(jvFI#zKHoTC}
zWhyxzBKzB%2Ph=K&~=P0SuYmR`POby?0&Yb{{_|J2lW3rE&AWO|AM_)lV$w37|6zk
zW!M}l-{{AQu!LjTg@#2)1ueVpv0m`R(TTe$-&@7UzVN+INSmHnqFrB&D3K}>vh{Ns
z&7aZk@$4)t3cTj(gRUm1qqb@~jVsici&5~PX1){`+$6o1k&MF-j(B8{O7)}s;f~b9
zi+L3UfXQimT~29z%G&Ynm{}B#)9S)aFE`F<eRubzoU8ioix-lgwRU5O`wKm!O}u}$
z_u0_@c!!5&IMQddY+}(=&Z*vC7}{XkyX=z2J)B($>GCFHxHZ`mro|xRQz5^R9nCyO
zO+%DNWB?+A8JJK#Z|uaD%!z7K(rGA4^pxrYq{AaG97BXQQ4Ayiw)A?C(hROP0@IEj
zuoY+hI-dyArUcfAmLd+wuA1nISmT*uu3`?o_wL8}K;}sqwq?B+lNVLzHQK4;gZ;IF
zx<XoBog^;qfz`J03(qfO-Bq4&gv9pFa_?<3%7W7omHxB+m5GKDie=$dZW{OUaVoUf
z3dUdv)zaa8<V3_e2r2huw}Ub)+B#rC24kBazGs)uB%3zu)@0}H>-vkN+1PEoXgtt3
zlGF8MK=JOJzTMugzuRuuO~7A;gE*@Q%u^5rhH2rp9@QvVOu8hF1xAJ6Wz{z{fp;WM
zRIn9xF_YR#`@XLyS(D&m)twD5Oo)=$ik`bZe}>)P)(4hjm0o2JNxLvRi{Cb)hbv9-
zV^(ZBsw64RkhBJ_ga@H4dkE|s9d8(%C5}JAP&vxS0sKJ&;Z@Fn(wf`{QgUac<p3=^
zKX`ThVzI2UpcLq2_fQcTX(g9*CQWq#k<T!TXpuqMGX$2Z3AdQ&DfaHLx+6jErDOYj
z!r%y<oD1(Ze8{j(g&P-vSdxjB<QBKRL_FyGiRMTueWX?#oSG1ZJ#85}tf9+jrP6+s
zYKNi<Lc^4ffZB{Y_t<$jJv;s^zFu75w1Z{l)P0OHK%HhSiAZVaFS!%V7ZwpciwNVh
zU(*Bq>WzTT_#ZnjcAD!tgrd0%YIlQ^=b7!zL6{|(%z(a8?>^HLjNjAj!&~Fbg;6Kg
zzoe32CRL^CU(LtYYW&d-k~}Op;OP?HGQCxsk*p@$Pe#7U4d+5y+H3~Ug6Jp}k)`@w
zrM~LQu^%iHBu8B^2st=BuG0BX8t0GVt(y7<2CQ-(Hm6BQ)JP*CE(zN-xaV+4s%EPy
zGId;wS1;TZzC96JwYN5mYJWN(yK*i1gq2&sEMGAF!<qsAavqATI@A54z#mLe?$(42
zcki-4iZxWbNR^iemA48WnMAtPpDjdSu&H$^`ObN<D;`NX*Eq+qfC+3Uv`cWgPVW~A
zg-a%T!gUVR@QyJg(wIOk7|M!i#IQ$E@Z~{cl$DEVR!lF`aa1vf1umc3P}?;QXc--M
zKX-BI?4*qF3gALx;8dJ0_5WU)=bv%Xwh}g4zME>BWwcB^D?u;CuGqbU;5v7aORgvc
za{#In_vg&Q4@_=EYWsU66WvH%YlGKCGaCh&98IJn<om>&)$j45GBLf6-^dqrmJMRJ
zi5?$;R$5E=^?S+v4g5XAc?zeskPafmbHhB^Pq@>8H~8gU<He5jB&Z^Kcd;VRGcl#U
z{NVTe-Mbe%Kg7wIvNMtKpybGW?ZCK;cc=S@dRaeZ8qKA>85&}Dy}F9a%ndS45xh^l
z29|DT^X$W0rpb%+GZe#=f|v0?H9;}v&C!jv^K!es`=o>57Q9%b3sy!bD+E>s)g*Z@
z=(HI>huv>Mdu2foEG%I*nB_*uEo>@w*G1pWR?rJt^N(G+Y-5^Jiw*RsfGP_)P=(xx
zv4}V#Bfm7iNRtg8vxyc2sY**}o!buDGj-<ge2JSb`(L`)eDhh><scj90f^<IpVN_{
z_do)3=0qBoo3SE5e`HgZ-51IirvklNf?M^9*Ubb+bFE9w?$o@(mxtq4*&{N~U(!;N
z+FIvl64%veuJ3O44A=CWfxQ96H-xeZ<5XTmIHojD7YQ_?mib9tZ&>;z+=tAk?I}2F
z=3Namwb6%ydDl{X%AaM%^-zjS(;qX5nFt8v7eF~I1I}t}sDCDKTsV#SBU`yrF;u&V
z_jG<e>UdcM))MYVJ>jSf#=niSQMg&cEQB}_LalE+OU&X1ueVvd;|mgHR#{33V^_sY
zxRcQk<$3tSp0f+8g!>786uJzj1*1(7j~{^@W=IP<hx!-uE!%DwD1Qh`$CP6NkN`5u
zM~!UrIH{g3lBRN{Vh{*g@MJ`u^gMD3DcDkl+kU&Vs~k$Ekv%~Wkv_jd63M)=Mqu)&
zOvUeH1i)r`u&Lx8Ey>mJ)GSPn)>e)c6KQ_z9$R~lI6^TS>Iq!}9X}+ADraO|)U*EX
zC}z4s9wXUI8E3Nglidmc=1GliES}2^-JIb#mJ7Q&?3GQ&h-}6A9FcRDXXRUIWa>ax
z`WeK}!WE>sn*J?mh<52R!7FsCM>k+G3XX})xt=YoL1vXKk+18)PfJji*kf->x!MXV
ze!WgW*Q#P<F%;Hpck0q3vb8ketmVc6LyOgC3RTFQp@kDWfB3|i$bMs~EvNEC*bR&t
z#0zA@*q$QaIa6-V1yxX*o~4)8%-BL{OmHs`4ot!B&!$6pg62o<ki3jB@jI#vi9NFU
zjwwvbE%q=(jZ49+bjWMNpl~kZ(6HJr2S3@p%I|<}423r~g+dR))=YL@%bT|<)G$G1
z?}cQ>YhYd;(+(KRGd3^ldygq{Ms&CJt#f{Iq(MfjsHO><`cejeNdSLPs8cttiwX5b
zs9g0scN_s;L{iXBjhUBPwonzVvDYFE>B_WyFXlt&Ae+Kz&Gi(v>?oTw)Av~yL}Xj*
z@@`q`Kwo048et^N-q)KkS%TzA<eHymFesXJVcU(%b?BgEK|^+>i?}i|at+H&svL_=
zs98}~iKUTwd>5jTS)c)#yOa$UzEN{dcoA%Vqvok!ICY{3$rjtL%ync~J5}XcApxGF
zfY4*3ds?Ynkq6G6m{ZDGYt5mFB1Q?_Fj8OVJ?CLCEe0o^c|i$*rvfh9J#C(U=^mb(
zoGK_GFDn@KmE9e&1)ONLta@;+iAZ}7ArdY&=LzAMeoRJ5eF8J<e8k{Gh3N(UK>aCG
z<U%Q(C7VC=dt3NC`JpU_@>yPXwIf|YbZ%`ez3^!-iyD3Ei&WFo#0??Ldk*B7;5o`a
zS3R$Ou+1Z_Vi^ci_Md1eX)g6`sKwHlXEiZ5n`yofSiJD)>`Ie}?U7M>9|?ZaX$GFu
z$OUS35|T|lbK86tAPeo29dI{pHcQQLl%{NKMzS7wzO>49)CV9n*>2YqNtq8Dx3q^;
zu6vDRTeTSV4o8ER8%n$UXLi-p7Mrw#KC??X1J_6L^40bm&PPq?k2hQ1Dv8f)n#G2#
zUsG~?IlGhgxu{dNW(%g3xNA%)T-*||4<lIMw%U5L?O?XIRbAvuUGwlG(k&9NQJ}u(
zM2^wsvQiv1n?KGW)$JhHo8`CJQMHRs&g*Kfh~z`Y|888T_~*xrWLo2zH0JqDHg5E?
zACpaiBW}evVO`YOZp7HZ7h?=$a5a$QpeRSMR2U~v(_qYK>?zi73&FAKIyD}`Ey3w`
z)cn;!OR@n518HOe^Id7PpNvK$-6Be82k=7kx|90t?X8+Hs<<frQ<rsG+(I9I&Mg>9
zRCiful~emK^jEkQ;+)C&XBH+AIAC;tJc>FX<=>+88&L(_zWD6q3b|zULaQ?J5*m?h
zl-F%|G9;$XrV`U&7qW4OPDjED==ISiO7O?EgeJq{-Zni4zUpSPsz803Q#mDFh%d=d
z`hYc5;eGmc{H=qWMIcc}#*d&>A{CoYN{2yf;v1Eg;doDUp5WQ!lw!K?fdA*e;d*tJ
z0?rWdXuU>X*)%D7C8r;pwvQHBpeiY)MzoL99GF*Km67g<*INng+*6oFQAii!+()g~
zu*hWopq?vSncZ%2tIT*C=0pBDrOtdCvm@z@YsQ+<D5ZlXpHX$o<g(uf=2sFT(5+iM
zt^`z4a#lzm{i2K~KkTx+bll}dWl>e5RO7yI^1m>{w9T@ciLoKvqLj?iau*lO+h*^5
zWOC}`0!7K|dieZr;dW!<vHomWT(ZS$WJZkLRaywYG#KvA;jT{WyhMVu6o-x!LHOg#
z8ENcHCnD*Z9vZdaZwO^`>Ixp{4K>?0jl_(nm=wL_G@JIpqM3Y{7QKo7BL>}J$SvJs
z7ItPL6R|b;&#UCO7i6~IC%fA_uWgP_fsO|xRc(iY#Dav^VfG#$B(1$x!te$-U;Iiw
zIygU4fOy704Jnkh*o;ERMIjPg?=-!j*|G)BjO50JE7!_Q`Stv6wN(tyr?R_J;zxQ~
zVM1lO#@YCRf~CsBAvk%g^x?dJO~&U7>%5)^>AFF-UjRt|Zc7P|b(G?e!dn8N;7lvM
zx~Gtx_Fh$n4j!Hi;dbRqpBb&K*xphHAdR*S2Ul2dTmthwvzkSC5bFb1y>^S6Xe4`c
zzKa%$9~&>8X>(JVrfkff2MaI>(}2}hMf>VD4-+JBSv~0}@oD8R|2m(hzk_$LAa$p_
zzSlqxsY>;xZXn(2HrKD~yF1%&3?9ECj~I6YjQRFB;utlCDBGjsz!`=8S@ipJkK`^s
z9C2@l+&dPVj^*7G22)Pm(L@vt%8DoEfLXNtNWdmk;wZ%dFm`}l^SZ$pD<QQU*?`s3
z&j5;;<tiJDyKiF=K`fP(=!Zy<vkfwx&L?r<kApxt9|d6_8$Z*W=A(3)hm5iir=%NE
zc*DBAy!auxNJsb?5S4-MB%}s`^~zcaoL17B^{1kR#xcSgm;V~yR|;dw>ZslUhH;uS
zweuu@0#OfCkmM_x{pL*7$Sw$G_F{$(zStr1qnaa5W216<K7_TRix?$NG4n;0tw9QQ
zE1<R1GB6gzR9PoQ+NOxngq07S<<*C6sBGxb`=4;gKF{+(k^D4G$Jg0-)p2^Yj!Gdq
zPY}|7|A7imM>}fqY`B*2-~oByY@`=V{28)TWX9Fcy{Zf9`DDH-une=C?6D(eTISL@
zi;r0H$*U7#XmrZ%%iN1tRuZDzi9IhhgY~f)<2K~i?BJJ&3;@p%2-S4+so;i3_+hA!
zx~g%WEc(?oDXMx+g<~xZsly|5LneG2w+FKh>U3Hu7mWj;HiqXW;e8HSN-wP3Lxzf!
zEBZXN(0CbFDPBDibw$%UIsuMFk$Os5B8(4S4BUqr81Wp$CwNvtEl4p0+X}{Ko>qzu
zczr}$87HUXrKu_Ou9pqP{~len+I4!Vy&{Cve4p@82J;|y6iOi+auF<Orj3WG+Rv7!
ziWg$lJi-M)+H1<LfPoZQHye(ftn4sn{VO~J=~>>7i}AhWxUFcoQ7zJ-b7k`+e9BU8
z%nLur0pfKpG(C4=3YkfA8uFmRa^&O1Bj&u5L0}1qBt+IfLYlr_CrwSImP!VoQa}Wx
zWZPHsPPG;RJS)-=GoQ%=f)y-9{gX?L8xgfB*h)s2G1$$!t)mX^V?zk1LJjQf=&rQL
zc9^Rr6H25kNnPoux_ye7*MY?)Ip^}%VN4_``J&}4ob2u@ohuzRx8YUD7A|sRYT#E3
zH=qFnXjDAv$Tqatw+6dKoalrKcz*Tdz@HA|ehSXUV)jF5K|QC&-1tyqUOHVpeem+R
zd(SILt}Ij<UiIjv+XMMI?WO4i80eKc@jKggWbIC{V-{R2d#(M07H@iN9-H{i@lMiV
zY<L-PRQOS{v%PEJ!)RxWy#>DdmQY)v91}+>m>xyheB(Qe{-1WJyr=aYS&b$+igLZ$
zQKl~S@);K!D<$a|d!d&Jw#vyL1!B!{o`1k8ezW!zD;mZL1L;sS4^NN9BYsm{M^0$D
zCOgLm&&4{0XEX$M@spZtNS=KG{5r1C;wZ9H_#I~XpBIBc(!ohypaVkcq+fhi*+C6u
zt`y}ZNVGI6$~(}1!8T;iX)sVCziT*~PR3r4+WLF5>%|M5E(@g%%HeKZ0T_j9Nk6NF
zuTDdK3LDTU)3hScE<~Q9C6on1f2{r=DR#25n=2h37s2synf$hs9HrC9@saE+Fyl5$
zuj7)J7~Tu1YBNceDyT1|L+{DQeynij`&QvvBkxB1hF4*d>iW735At(U77c*Kvms?X
zHXu<qXtg&YXuK9Y<7ZZvDE7h0T2+Qn3-sNQTO8w!XQGirL|;{mfUi-iEpj=P#*?Ok
zo3rV_qK7GP#09^XnrkbVyZUoA%f*2^FRfatl__&?yAIu|AS*Phelg7Ma-W$%Tg%N=
zpruw!+PG!a+frOal@%;niUOEZFJR2^P~|2UuEm>OEjMbu1bw#p9EUQOpW`ReGEQ8N
zX2-jgaNTX6pTsyEg7oHwqG8Pq>|>MTnmfNb(BUFu5E;{2DOq)Cb;N1Sj<TjRZbzwV
zJ)2g*NZNEtqR?v8PK8C{ewo`6doU_hREwm~%WWnPlS9JI=xb|%VmNsv3}al!rczAT
z+4|%Rg)0G-&9~N^D>0N)B|@n)JyOo)8-(A<oTCv@3iEz&g+?WhFt@LHKR96({`jF5
z&E(`ZA$F1WnC6I+g!$qeYC+UA*)KZgrKGN^?h;H?VI5k!z4?3!qhA)kOx~mP?o|(p
zS1&I6bQq_3KyO6Uzf&W`U2`c%UMSElMQkJ*wS2x;Ku@6`Y{dm-NZI-{|KpDpO40V4
z;MrKM6uB%sJ54SSWQWv{G8$6uXv&~V+s{!kk*I#Ius0dHkecfLwAbvkk?XnB?cH~|
zO`cgp<cP1D8J?sLfVEb6*q^;(Wy`D7&a59JGK?-ca2n-Xn0GH!KZGlrU0)1R<?%)X
zsjYsg`lZs+V_MK{1fGKKZ}@a=@a$nYHBYj!0lGIQ$a)*<62tEU6X#snfv41L;?+;o
zlv7OH3w+K3NQnyxF&quesct?r2G~r>0I-c=JvMdL25C&T0#eTh4l@#K3Ox{#?;aaO
zWbDkXiBJJikiqnqo)nrFv7$<?*Ip?srI%$CD@dhYI;slWF}R$kOk=9?fl)e$KpEl9
zoOe5rgrIp&pNTLs8Wnzm<9J~>E6&xsw|1@`u4lD(+`Y=~c6;OJ^w%Kk(_aF<niOo2
zClC!6&lh}W?w#g-dmF)WsN%}#TM!oD3S#(^@<a^O4hd|`GxhfTYyPhdk}G)szxKvm
zy7Fjh{#73y20Wzvn%?lQIq6I<{}nzxJrrUO^AAe-#lIT*YHXoUlKgS=QHeq6*1hSx
zVpD1ojJ}K4T)}N-7g5uec9aE=hOpMfer_)RmnzK7au@hUC{c+Kv=TF2hM6t_4=r}E
z%Fx_1L*uI%7>cJC%V1sYo5LxErz{VEPw}yd<Qwy}M=PsPH5<Qj!1b*%=0jtY;nf&&
zn$KLgkcgNgZkP*F6kM@`c<f8=*`}vy%00vxa*kq7e7{zVQmNc(fH|B;CF$U#kQKY#
z`zHkiWqbAR<&Ih4bEZ8PEkL+qsm<rqT1*jRU{J=A<`bJUUV<rG?|nhd_WjCj2CwsK
zhjSU@BA8NI+$~b?61%rbKO*n*Zq|hMNV$eNbixf(b&N_dM@8@Sk~#KD4g>JSglg55
zDROk!(o5JOV=mWaj}a~;sp#o-G@a{O7MA6|X->AlL4~nZ4lrDPV0rq#U&&eTgdj2d
z=CQzxA0S5RVDBEBbbnx0vx_Ah=Xrdr{`F!sqx<7ugJhNBP-Baq3FKhoKcUu{P&z7y
zK+MFn@^y<<d4!AErH7U47Lyg1jRps#dDdpl*>rNUC%#T$^2Cdj#^7Em1<6BYq>d>D
zUMnbv@eYb~LI%}**1w7d-Iv&tannoHBgU|6Ad)&@+LHN1H(|uWHF{BM`2c=Ze7S9z
zLrT28VUSBcUQ2jpHUTO3i5ci+k~{6Ylp&`QD-CET*0Vrf$yatrE$C&DK&2+Q=77oK
zgX8n=QS+BZ(#D|;WOe?Y#XS&adwDlBlB2l7Uf<@8&&YyH-6BbHE)dQfrRB9MiyZio
zZ!8-J?6+2Ub-JYDN+8)2Nu~FSEfUMe0!WVpR$Weebm`%(E#b;oFljx4Sc3XR!pn!e
z)0uj@?!zQU5!@h~8Jq9Mw~-aa3{CMVKoZl{oJ4BfYnu$_qX`c&gbSilPb+-UO4JVp
zNfOi{HCJ@fw0a9b1eI}xLHKC&K9;-|X^h_Gald=*8b%sM#14#nDL(EisKYE5-tTvf
zZpcHer4bZtwN^dBI9{WQWQlNHB`AX}D$IuSfIUlaRLo-VQpq1{0S_(=fYHy#U|JRs
z22QQ`MD%n|^UF&?@sy6nG+mM7Fv0-A5`eiH0o9>}?gvDLyze`%rAP0ickAvXuy!WK
z+G+lWu_W%LQ)c%av!xU1`q0KAu1|dm{ks6!tD-t$P@>>l>pkjYlx|r>_Y%-8!=yut
ze_!8Y!s29<_ooHiOC;fi22L8TdQQYt6t|OWz*dByAyO>WaIks;3o8RC6H9;aS_r0$
zQTv=AY~722KyXi9@kRv@ZOB98l5Rj1NWFHi8KSmN>G6ZBd$PFd@+)8sVVY~M-3{{P
zM%F?o%`GV{Qgeo*vXZ{|JvvK7NLu6B_%_bjNyzbWyM?o1nk$pT@j>exG%e|vl=tLw
zHonfsHQ~`V@A5e)UT^Z7sI92h@-Zp$DI7Ps)B~x!FgeY}<MMuZL(Qk6NHaA~%>809
za3y`^%|qub8#M5%Rc@nQC&i@=l$;jB`}DfFsn$u-t@1YrHqItC4K+=6w_m<x{~~Ri
z=limG;xZ<BK_H3Ni(BMgeBF#t{dJeQ<Yje~m{oUD!KBCnTnDN+ozg}N1V#)yQs)i4
z)NyA5XO`ayr6owB_flIUbot@plq=&aS%|M(B){#xP5w&#lK_kO-M%OUgN)M4X)&Le
ziuxr7m%G-Vw_V3*b2g%Ejt9&O5M>+~J=zAaB+3)aB<E#AIME=R**e^$$ub@r?%<Y3
z7qIKStdL{-qLO33ylcGNCB^4{n8hp&oXu`Q<(cA=70C@hE2pvS>}cH$<J%FiDEHA-
zZ*D}|gL))6jyfogmoai-=^7W$K6=R94b=$Ks%g^KS~x};#M|Umih_y+RX?h|gngJ=
z>A*3U&B?Oqv$E=$rk<FzH=1`5>^e1N@J>Z<5$*zK&eC&h-Yd3nM4E9%aVESq5kS`b
z)s?q@3b~SYL&R!zMCZ<Op9U0Cb;7XXHgR@Q0>bY75cOX5V~&wLvn5Jb7nw9E?7n~5
zh%z=!%h3Q(=ivDBVY|Ek1+|=n7@3+GF<hP+-Q54u-f}CAhQiPwRdb4Qe5x(C#nOJP
zK;+CdR-J}0&_`z536h8Tg~Qp@eeNU%CfRRS=$Qs<l1*V<ufnA`^<z>@pi`{SX$OT4
z0r<E{h+*>E0?JEI7a|^cd0jPA?m|wb+=%I5z{v9`$yx#4awwCHzimV^!SN^-P9meR
z43ujnU-2SN<WPoFx~0cukU>w05{_963P4XLM*>>fD1Yld4q9L@Oy%26&Ah1c;|d2C
z;Bl%aq+H~U`P?3~uUBr##kz4N2_nvA<lQGNS;$z-eNE@~0P=Tt?1@pO@vI=N1BxN(
z-kZ%q(ett(6$M~tt&%H|^CFYN&Ws!N$hXmUnr=(iT;3Nzs>Db+9cUpGZGlmZ5_z>#
zYcy7E^)N}$Pvxbw63Iym#Ndvtz5=aFW0hCb!p-M$SswJ9Q7%(nST$Me8W}Yjjj2Yb
zzhhx&SM0t<ju+k0?AWJOc!lLU&PUT?0M(EVhiT7)q=SO!T=Ts{+Whzr=dQLTd{uw3
z6MSbY!nG@vmO)TjGGxP0cep3E?0d&x0fSGUFXxG5jtFltCk%=2ADVu0_x5%7^~)eq
z1Wt-n@#&NwourqdQy>Pcz9M;u^p)}Kl6E`rPJf$o=>}71NPZ63S9Dw??N)`v974#!
zZ%u<7m-EX@q0{B7Ufd!&lbR}Wru>P_qbNm<ESpO_0vThEf~-czz`>0ozcV*hjqI1{
zVqCha)D|1Jp>-Tee>doir!l%dVsE*~QjukwPJK~*^_JVhacv@0T#jgmtb2n@7b`Lg
zm{-42MppB$L+(GEeDEHKwk9qlHwy!{v7+vYCOCFOwlZ-@3}eqhgqG0h(X2`?E1Bz6
zn7S<)VqT^$fvG08CGj3z+E_|6XoZ?)ABfki<bW_2CuL?JVDKXB-V7eInXA!0J#3eH
zpkLHW=+Y9FuIl8esD=w@1rI8apkhumqd|27b(WH4MQaP;HOVVjyhHK;nIPRqZ&XXU
zuH1Lubz6MFwUq4r`~OaQ$O-}TV!e?VrT!^lP=5*<FR@XzoDC`k_?$%=h*uA&WLk%M
zTMS2v+Dj|mXPX@^b<I5T`Gt{ud5F^>#o<+9{UH;mYv#%|@+V%>9+LyG=Qd(qc89u;
zrV+5S=E(H!J7|_B+$JZQuh6AP!ucLBhoLnf)4<uli*s)C=1ld<YR*m@F}d{i3V4~u
z5*k_4ii}_K!MB*w7kf>e-Nk*PvcHw<ku#(91?sz&AL!K2p@+|$TJn2#?_u%p|Brt1
zSCRr{(w<S9bpAL0Gdm+mzi575)O&bOzg&-(VN7rH{QT@-@7sAhhLOZj^~IeQ0hksV
z2qhV;<GiuCL2gfB;)*cxUt0p6Vy;iWwmSbTWWFfL;oD47#FouvnQ!>UN_&=s4IY&!
z^Gcl43XHjl7`2<8isyb9>6H9^P$yoxN1#q;nZ&j<5hSEWZuTU3aga$Kz?NZ#ECZV~
zlroMzTedof1N5N?u)<d$ly!r|sGGX1nGVZ$IU7RasY1#*-QdG}Q-s)qH_XPYFN-&x
zmMwA#4ztU&f1gxPGQ8`iH{y03sW-+9qKExg!bSn@r)%D&Zn(ur+pAgV!xdzP0Wq6M
zA-NPaGmk3?{`yL<0?7OGpd1y+>7275XpKJP^zX*R{{0c+d$>MnyC2llLGs(X<gfE#
zMNMrg^;TvDpkjGNi*pIjwhBFgH$5cKYSmL2g-ONl<DtI5^%Xb8ueZsQ$Y0ci@Yjj1
zBtKQPkGYwl*=Ru@*%He%nS39h5M!Tj1+a6emTUd0I<G`k^qeLkH>@BADp8#%2d;N7
zaiv=1<U>7QX2Pn8+}4|OWKL8AP?0E8r+9@60Oc|@+q5O>_XZ1!4eTB}I29U@zgMI@
z-=`zOHFthbM>fgJV&<W$&?~oKFKoen^4rcX?ZI(n4+5INbq|_*2aDXl=J>1@6RV`+
zkMW#EQ5R^fmrMTPMGKAMwO6T7`@+n%^I0<0_;-yp4P))mSa+7jdgPZ|yLB4WU*2wT
zSkhU6+#MFhq<Tq)2>ZDD=<=<|Nk66RjkrCTBITz+-Ipka0Oyx@Gx;;N1;RzF>FE>F
zTF1qRzSYwQfK_F)E!0aiGjBlBIpu&Agl>*BNVVzw##O6gF)4d8@1bZe;vTiip-?)E
z(vk4-c{G%<SD0tjKGLNk>aK{r*Kp|-J<8HczVA@|wJ7OcP4>uwub<|3vtlti`l`P3
z=Iz_HMnOB&zC=vBUR>0*prvJ0v4YeeO}fB&YX2&qg-Qzs9#%(W6;p$Mc`+<qj~HJw
zRt5<&vu`!atB~qP(jkVUm>pSL)eounD^5{Q&<a-S1^E8NQ7Yh$GKmxXxe0}kgdFlE
z(hwtA@1wk5w0$e0n)SZ3!_woARuLV6HTk-drYPVd>egkrP$V!{N$l2JgiV8DyaG0{
zY`JijBf8Rv_owMS;Sug_)n&7|pX0r}#wPGoDfL`9+pkE4dnu1V_Zz9S%cNbFg7%$;
z@mbLWmsRIB2gSLwibV<<=?4bl8Qwo;OVhD=w;oRnCH>7R`?+mJ^iZuCQxr^SRqQR5
zRPv_n>?pgqHItKZG)**9IW#77B;GxCUoGs=#a+n;bzKVh4y*&cVbSw)3sKkm@)F6F
zSENU}0wJvye8`IR^Rl!djYmh{Y#7V}F^}84%p{>izjmQuW%3>{d#c-Xg&C_2>3;p*
z<ksrWI-<LRB*uS9huLizZLJl1=H2%CJp*%2k6Y!^lvS9IC6aQ5E#)Q6qWf7M)qowd
zIqfqEhhlD61GMsw*b96`KYT+kdtX-eAUQeMZ>+m`&9$@U_N`vLa_F;i#URSqwu}eV
z_?{*EYr(*sl5WQN3d@uhYWES#6kKz-A@abSi+MlJZaczfch0PjmKp%4<KlOc6R+?q
z6ggK8x`2)mMSuZxYJ~_oJc?|_>>)xlse$lhTJ2)+M8@|@K%Cpn5$Ag8oviIfc<#zn
zt&KZzwyl8`b~S~K1AJ3SUZdaU6U6$Y2B0V4N}JD6xS>neNAb)_sW+{9Z844WI5%aw
zw&=WHgc=em54r6cli<@kPwUi^WD|5yTZ>k9x)vl76zh}}>vxuf>xy-Y`|yPZRbca`
z!^@KI;*0z)-U=306QG?rw{3&Uo1&Om#JX78S+qM#%&wK*$50M<jf@V2rh<H}9OSCk
zF;394vm2s&4+zaQr%<fCvvgE2{IfGl5$Vt+3y7(uJ-59Z_FVON@@%b4e#gm@sHY}X
zAbzdW5f-Pq0+D&g>0={rWMeU^3x?v6!$v$9#4BRNlZvS0`bcyL?%uvmD$u^kFrA6F
zmM=y-G|jg9w2u!su?%;gz<Qe&=X%iJQ0cNWB2>outPFT_@wUZ~?7ld~T%RyfS>8?%
zOy<_c!9;llFJE+ULUVCHv0PVY##_uJ2{<5w)E6vmm@9)$IQqn8LS|mLqL2)JOIk|V
z|H5d(1**X>#Vtdy=q?i$OwKJv%jS%YaxDzg%I=toqHRtdywAvWRr`U1Wp*_$gF__^
z@-=qQf0ss~xWoOFRXi@mjB4;x+QwYme$|QCUK{;iG8;J0m-P3Wo$ioBVbLjoCc5xl
zOprO&%FfD7M6G5+g~&uE^DK~=D{XEh8d+@<L`=p(K|#y_`>c7syiJS(DQG3^9nick
zt}{~YCuxHD(EV8P8{@k+nA)%dL-mM$QC#QQQ_fZOtxU2X8B9DSRrjv8#K-}uaKlpo
zz9o=v=uuEC@0bL4)STwgX_EA^1=vX1QiM5j&qx{xPrS4g&jlI`IPEA6T3nbKzl5Tu
zQDGyim!NRewUlRqq@|omz19Q?71R|wn40CyPwes&u^Rq;N92_H-W(2T;>#6IjqTm-
zwP{GJ&x80Lem!l&VX$x>7Ak$)kCtMZ!4oRp5hIFY7qZ<9lIU6(1*Qfydqpv1hp-fR
zlSpLsbuP9Fr7sojW_=hk@ht5AeH@Wo4n{6F_vDD=VleWd0M=6?k}HFe)eHKG5y_=s
z<kCKQ`+B{izhb9I#c5gON-Vrw*famf4TxL!L)R;j?{z`%CvCa%|KIo7_o~9{xw2TG
zy<NXibsxAJUaZ3vBpSX&&$0mS^&quvD04vxfhY3%VrVrMGiZ{_FG1E&Bnnxtq#ZWr
z2=-iPUAXL^qAlI8LpI^?UQo^RX?m%2N)<5eQr_yaPf1)xk(&s9E7G7apw^d@gH{{1
zWApe|a7`T?xA&91U(Ing5=?Np=$vd+&@nbWo5shcb{Z%0tG;L%aKhAfrMhUv&$M=*
zRY2|w6mJy~_GbOg5J%)g2H>L5`W_b~NeOC9J&y-uy!`{ckCB%4KhXQA&Nh9qOR}=|
zfL~Iz(3Q@~r}-sSU_EsQ{C~nPNn7X<Up9oUBnYN`q2EAonF$#cacf-;o9O`<u`k>>
zIXP_~1A(h;aRuob%b6aHC!_;d+q`1T;a%a@l3PN=F(Cc)xmB-X03GI{l-eie<O<P6
z-jJD5EVT{~+Q;Yhqh{y4eOCY4{?*)$56pZ-f`n>3(BAguxOfIW+uXbAtm^#RQYm`?
zbK=ahbhK)L0&s8j0=2ogP3vnrj=k`$BskeG?WzkZ{z1hScHSVY71<g=JFaGiqe(sO
zQ5_i}IJ9aq3a8}qSQ_OMGvsS_-@a2IjZUz%WzUC7K3cONhSsn1ORb92thEHbRQYY@
z<B}_-YDHn6vTrDy7Lm)USG8Pr+eKU5q3&sbxko`2_NPa$6FflN_B4Ahzpu+zZeFoV
z&-_IZ<uLd9N-^(}#=z}+6s`b{SY0w!fk641ERTl!L$>)Gzp~dim&-6&ca%fQFcF?W
z!F$T8!mB+iByo65+1PG&ZDZpd@m31E5<w!nfE2VGr?jB9GYMNq!G+L(R`tFwbfBv|
z5jqHMWRp2TPCH-gXRVj@&X?v^Bb=EkDG}MmUIlO*ZB=VZ(<0)@2(H$UE)lW=l^K^i
z&HE#!h(V}kT1@VjSgI}0Mk>-76r2Q7-k-%(>oGDpm<Sin`E6<EOFNU4@iDT$L+5qm
zya{7Ow(UnF6tpL;@JLdhl-J2ly4!ove>q6%vthZ@-A$A|GM@Dn7t~t1_itdRXU@`3
z2wQ|vK|5==P6f{mB)51n7A`4=!c=hM%+@0Gz?vS<;K8`XuUV+5YN}6wZKVRLx{#{a
zS#-2ToYh#W&Zpzr!ebJGQ7uwA`3%??_t12-z_qX$(*%c3>Us#bHI$XNyQg%yZT&qg
zeA=yIRlxvb;j7N%qBdl1UL{^wB;tD_2VeE-W%3IHhCx>SZq;y*er*1?+(0_C+4EWQ
zYUj=Nn-~4T%ibz`Yb|F0!%AiatNz`y_J3ZXg+Am!T6%Q78(_f$5Tsjd*m9mjY4(;S
zUPn$_Or+JVV5$@VUHVU(+sAFww~yGS!tyIZxT2wz53&BLqwFcfxI4oTluLfw-L<^!
z0PIWqz~Nz@Hs%slLfx_E*^!apO6mx6GqX+tE)x3opwldcCQ60H+0o6b#0b6dueUWE
zwqn9GV(ik}(D=s&q6*+<Vy0p^dX1dBAeCyWDc8cKa3dL{+=-A>62d`}jRS3Biu8Fi
zAvkI2a;{nP3XTgyDd{ed9?SFP4Erp*%lfE>We1r@(MUGFg^3ZAD-wl<H<@{I{N>mY
zf+}`>dYq-xI`St+5KvKIj5GRBKRUZbDy<F3Lar;}W=*<WhI%C)A9T(&SX&JfFS_I*
zjx>EuHm5{-!W3%lLyz`$u2N80q40F_za&2mN%(!G6F4qzl1<^^Xcg1RRxMfGM^t={
z3M#W}pP>qokKo*DXC3CKL=l}<$Df?EI;WWE2`IZlxK>Za*{9a)cdvKjvRR$kG-aSc
z3|h_l-OryUT`4NrWwB9qK|Rt%Wh!J)AVO6msoXt1IXFJ2FXuxrz%;gkFed>&X05-3
zOx|p%rYprtq|JnBEEy<rU%fR{c`q*Kr6m;BM3x~W=+AItaI8!wVyyZ%v!bxh{I*vN
zisY!^K-XgF#dy+B3))n4M3Y@Q`EP2*(_|Y%1l{S$&+W6fl}vzwZOLZ4Q%gwIpuP3{
z)sEPZpT9IaU+668+cvy<GSat;auzNR##5B)ALX6T{C%#R>0yK5Eea_saY2&o%4@}h
zh%wFfPjpvdK-qLO*A0zgVO*+v2#9(=Ft`l{0So-3y-AX9Hq7eS|ESP8>A!xN9OmQs
zor;P8ET-$26k=NWX-<b=?`Uh?>^G0jZr(ydCR*_@?B2%GM62Zc(%i8*f6{zcrdoyG
z_s(~9s-=-VxDa0K*7^C@FBy`8vYE1+4joxJ%_I@XxZlgO@(LwNhsow41aA>0OWrqN
z$@(TaZl4@Gea5<V>qL{=Ic=V`=tU7YfG)J1<*C+P@0%*#`qIex%jM+&g>;QB^bv$=
zT9bwGHPRDNOOEzm)ntu$qE_=EJupcE?KsNgLmW%?)s6AsMf_?kvtSDB#&yGxM`xYp
zfB8-!zG{X+ek`2$w8t2(u=LiD2G{)QmtCu{d2}G@++Ui!`ImORW4$8_b%S;%n@AfA
z3uR@&Xi<(2>hZ~F9f^G|h%iNDRB8lb6u{qR0syUOa-2^LMUHQlLiM;XB~RXnh}Dv2
zwQFoBAe2B^pfVFuI{sek8ocL!b$_UG&|9ZVaokyhrm~5<GY~4@(%EM>xw#XJGi9MM
zc4|owem8oh#%BCy{yGGk*OeXpR>lF-;Np;MB=K@GH9mE+8{Oqy{zVtI;^x+SQ_chH
zk)%R<soup5lI8jfYiiBH8b?g;q}e`oSq!^Wth)BEsL}?9vRY(?jsx)&B-HB`KKlG=
zM?c|d<mQHH&lw3GtlLZPsoVjuI&P<Qn{yP&V}CWaBe@#7GaUwJKJ(UkWPzO!!}L-r
zGaa0MX`k^l|9sXw?KTfl7X&^Og_>l6M|-A4!NN1l-0B%vR%U~l1*q@1P<hj|J1@A?
zdY?pW1RNLT)0@mVr$dyXM<yj0-x#$LSgIF)rfFoER@&gC8D#BAMO=@1Rm<Y;lX)>j
z0&F8`10p#i3H?AZ*zj`mrC*MarO*Z80C&RkDdZ!|gLB6bJ~iWVoD9-?i$F;FgBe;l
z^s^C1&8)#F-0|2P)oI)FoEpnYRL&WHgFqocktqaIgaaO|a#tzLR5u1=tZb;=z^?tI
zr&U?4L^N0XVjf0G_UQF+@<MQ~oR3B@mlWX|m1~Vc;%i2Q$=9*ed(#}&epF&t`V|c@
zFhZt@{9HSro|%j9?*Zo3Qz673;~6b{FNB*(TREpG5H*u}lYE%bKPMmge;ea$_9J(C
zkJkDyol_TAjkG@<b_d1ncvwi{k2$5x(^o0E?mtB0h&i)JIir8>pGMeJE!yTuQ%{=p
zGO1HL+-3a1Zt#a!;KDLo9%;MkqoF7K&_qOegKRiU(OmFdghS-($;I>Lq?1Z!O{|r}
zOF%QZq0_bYUaB5)Eo46|itG8LOKn6>9@d2mNWCcn<<cgPqjP?8)|SqOe?wxfd-197
z*g;0Oma+1da|I-pbAhqV$NAspS#q#%V$KT%KXFavY7<lV;CWmhO$(A&P$ay@tUu|J
z46R1IyyDCG`6*m7@YUhJXtu$#$QKp%LbWXJ0z}0&t+d7|Pr+NxeZ(ERW;pv9^1PWu
zHR5sg`~Vyp-J;K90m16U$?+#Hw7RZ+`{57E^=ZA{lH({LM_3nJaMzk4E2Mj=GHGjw
zJ^D;o{n$GY2J=|=m|cM6P~R?jRUWl447Qa03Z$jeK{UnEvgNCUdSr|&WnnG^mh57{
zx*`ChY|E0KS42+gsM1m$9ReR=EJFAedO%{!qpEAjU>-ZC{n=Dpky5`tI*h@lG*`-!
zbPngOA{o6)(!WXt_ooRA@52L-t#On*pk66D%*O}&-=+BYTV(v>e8M#?WVzB?_38pI
z>(O0>d+YoM=)z;8>u`8*Pc3#cgKVSWAP5ipz<7mq&v4*y6mlEEk^8Cj`sM5G_nc)t
z&HJ+o@lH+o>9Q$;1@_vi#;8qcO=$m-<eNx9x7uGX^*WQX3YCqo#PG>R=i9+~dv9m=
z?MBW2@orbDr}=j$$A`aexc^amuGy)N>{MnssG#AXgv)GNe}{l2l#;I{^#vM9D}YWH
zdAvBY)|jxZJ@%)t)-G3%z-`!oTGz)T1Xwvd$S7AavYe`dTST@lzXFwEv_y&WBgBN-
zoL03&@F4ebWTA_`&t>8n;1uVs#uwRpdj}?Jgt+G-7X`q(ido~kGAf<OVBb8zl~)e^
zU;!}fSYgfoT><Y!Ts&X2lqVr*#HWrSHPsMyBLad*_@4nYLGG;tcJe}~$C~4XE7IY?
zX6Z41C7Z7@L#&+u6?yFznH&>~ZRserzpIBAhW3c;imlj+Tm;twkFnK0JC95=xx$3c
z+p4&P;v5>pF*R^z?Lgl^JTl-bk=Z)d_f%|I;K0W-b2A{5T`W;4d(`(P7keDBkW|hy
zM|Szxa5#sn9{43CZz1(|@7uxQeiviyw!SnEj<r9=bi$VdcXh=fTAro%dPD=z%FXc$
z<Ic&)5pyQqGJ79o_9)VHxyD-|=3{<g#48dgwydP(Qe7yO_1@mg-4up3okl~}RcK?Y
zYhWU|h`5{NrV|KI%<#dn4)<(CRUe*eaFB{ZH~q}OF`;g#X#8mf8e`w8wggr)XGvC8
z4cUc~ZCX>Z1^yumXGOzR#M~9bVPxB6lEP*8W+qHCG4Jo=n$WUZfPpNE%2EJa(Z^=%
ziy$%hU8Em{iUm^5DpILMqAj+i?+HA?0+CaG0civumr%QKp7k@E(~9dcTb*mURws^x
zjUVTV1B1og-~R%31;ocw_2z~MQ)l}3a$&RwGND;nnyfq`h75idSY75>8CUBgr6?)e
zhuy&j)zY1*$CaHRndpADSA)Z%4}kbIPu~kObj*AG$h7d_m8Fu+LZ@F0E~YsACw^H@
zJu93dOMH}q;1)&De6xaBFpuSGt-$BI();ATm<w+%s<opqDvLvHYq=5L3F@z9PSC4j
zXzI!%YmZ>Y1|vVZtP^c$Ni~`R7VYdC4tJ0kzMyJGSq0>wT&1&c6IDl6HN7`EpXnY|
zIxe>wNhg~n(R=l^x{)~SzpTZX$V0*j%@c;}!jInEg_N=!i+LFp?-E93t%0U$818|X
z=UJwL+gUXe(Imv)-V_lUR{x=+Z^YY0O^8zRN7>L=P<PCz2-vI0YFNG0EA=W(Q3$z$
zVdIBinG0PlM2~lHmTonwq=hf_c2y6aMp|@9r8SX;>0HzXuKp3j(HMlp89Byg#Wh{l
z22+Hjk3CZP;C`jj8m!!qwb)30hO>f%ydHg_TU|L_QCWbH$-sUB5bQ6`m^%=J?+n*S
zbZu0Of08IwT~caZJldnD9MYv&!L43HIjbgXC7pUu3(+W3sS3<-kH`<tZ+gtV;U~%+
zk~Akzc8xNGmo{@L)t)z*dU22m&Y4uWXgQE26d6yE4>%oH_2NddXMk2lH}@AcPLz{n
zyetDCRKn;+WkU1Jt1PdxEod)avK#lRC}%LuYDqRqkuq#$b3u1_>i=|ANDj&3Wf^PS
zqF!r0i7kQ7up6i90<8MW*E)bdY4sFF4-fk3bP(*$$f0cG5x)ly$zG__9=wIvBZBWH
zjrY=(xlhA_fqp+{`G}6t<{53oFX@alFK{4`T5M$`&yl0>pub6U%{25#dV|1zm{(_h
zSrU%bEqsT}DxIYeM{&;b3%dujJw5DCH8laAVxO)})k>&U@_`hDMrr^2NSc2!D46f^
zfsl#eWl(<-MN3E|SHUw;(Q?ZW0#IsNkb>H3(h{j7P7@0R+yYIyjBK-zUf>#5ns5_b
zYV;!F2*FLC4Vb&X)nr>gl@~jwie7~Sr@F@d&<OSKRQ%bm<@@*0BpGA_`;6OT0DUc~
z(?ZJ!A>hYs@wA@m6_7<`5|?R)P{N}@M4hUx0KK$fxd7w(#vI?Q@S9aQ+$<xD?K&?x
zP@&W``;rk?ST~ZPYvsz(!D)vxqDDPj{cu^&`3@}KSJoZBd$Bte^h0NqPG|gNv(wht
zyr*=;PYGI!gSq3uw8+=vzd9A{7d=_Od$C(f4h~OW?2<ZjlTV8=ryAwP_#ff~Ya4FI
zyIF843n<LE)1NS~emY@~VAZqBR8{nL{>jKt0Ay4MZfa4F@f2isQB6nbP$!E`S#=9l
z+Y0q!$KI?XF1$Uf(jBRL5daPCtQrJu3|u%`u}&RxzP&b!3ot?q3kJLfDD0NBwKz6X
zL;!UU-CwuM&ZpEl@liyaN>Y%eN@LG61FOWv|7rWE3qpc!FE6_LU*f#)Xy9(?RO=q5
zN^lhw@PsxKRg;qHnw9*b_4n{20&;m!`i}Q>bLCDP5$P~mWbfJEo>iZLj~{icz9Xt$
zolAq_aw7o~#_lL7*GuZp75@2DAAnC2dpJpM6>I}*Mu&D?a_CsEAR}H06T|#7JW^EO
zsiv+(RScjw#%od8@6I?$y6iymZY4(|-W11h!<lD-;Ta0UL3@gGGDs9mH>c^^?9c9M
z$<CH%muVZ~-itd`G4Fwk5tyO5i+O~6dg;>Fl<OxfV0(PU&~rCFXlev9E|i+NlzYN<
zt)L_{fb^~OPz<k7l+qifFRp}3mxmFMsoTipi}teO4`UaY@|+>#u)K=*@InaRtPKq&
z=|OfsSmoO|R=6U_xgv-dP7n|UxfCM_CP?L_-{I(6Z^Up97X3Q1JT`ku&N@xmL34bt
zPrFeu0t;%hk6`kUZ}2HL83OKr#&a*aW15KFaW1a!=+nV2zVYgtW13B!K|@HPr@rZ#
z3|^z~oWuZ4IMmzQ;GBkyhV520>-)ULUEh^1v@F4rXSrWoj&nUBQNtV+cyz_=Y<QKC
zB`=-h6rx?}Q4Q7A1ro_>Y}&6FMez|ql*7XWD*_x(l$9cxs#WJ!b8fuXG+4k)O<N5`
zr{oF97PJ*Bhho{uQaw$?Jl4PReG(T`)DnlW?fpG?r;x?9JD@9E(#B>zS%GOL+zIBb
zKi}&lY;ZD7)k>e9i6xGYoC#rtBu~|8E2jbb$|#0X;<lIOokK06m|3}XaQulc08(C<
z!n+oIj;ACHy7+07>f%B4>Mw%yxXqZ&1SgL169@yDeus2<e3xgpjfc|1u01_$XPEr9
z^J*zSY>(|JaSU5D{bw>Fid#9*09Zh$zfk;sI_iXMB3-dKFHlI@K)65#`XP0Q43Y;E
z)_xB?x=wz3yPU8_cIm!wgRi2g8n90llO*^V5SI1nbOCM_2o2DH28bL^GhV|Z9Ty}T
z%r&;VmXD~Clpp1f3eW4wMba^zSEcJYr^&c3JzwZ3onFsNU|Yw%Y|6CwEhHW$9p-{9
zYY2iibf23WC6qT@$U}TtfAQ)~ObfZv+*iQ5mw*ZLDH!``O5<Mz^3>RtT=8HyuJZ>N
z1DK?o1kDWfz)~S#Q>nlcsjo2@fKaD!+=M0}OKoW#J7s*SQIX{m!7~VYWj2RDz&19x
z<r13B{*_qwl~FFyE9ez>U+IicE;yTSb(K9mQX9_hu2K{Vanyrv0y-O0T1%xgeCjfD
zYVPZGskvBYO=aZ^VO#(J_F@6r#u*IZX2nKth-GS8hAj&Rslzl|b5W7bl%1J3FCHWu
z<mD-cb{zSoUSh4vs2NrFPGJYcG?$N_Mw{7BsDzF}gQI-<9dnB#^xD&&7gBFoXIl1*
z>m|#%^$V09OjLm&hz5_m;H$iVHU8Cw&TJfC>6l#Q)HZlkNVHz2H|f~Ia;Ik}9a4`@
z<Pso#{^0oRpc!f)KUHSzu9F#(xy;@<O<WFTYmtk=Nesn!Ih^alabUjUypX$=?`a74
z8T}g9MNb*F>=IW~HduyM%H07YQFr1AjMDinXvg@c2-V0$LbNB%`~u$fa+<2&L|<fN
zEe3f=MV*%N*UTB2F4x(u_;7UzvFhKohSHQQ<afw}myd{jgD$H?z`j$KmP$zmhp{QW
z9xRHAi(lT-3>Rg^xaCKg8E3J4(Q1t~gx~O@#n7up5*z>_;mELlvS-RbChZj7;U!t6
zb=_B$;*r{}P!x0HrO_>!lZ`7^voAMYF>U<1g5v`6Qwa~Q2>e7GY&1jI&+nCO5ED<=
z5(23p_DwZB3th^Js6)%0L+)jR>OJz^TWrPdGCg_S7JIdBi?zq)e3}Knp#pD!if7KU
zyP0PHi2qQX!ve%eas#AVJTLkIvb*pxG;Ft=Z2T+VgVH0$y3ALLCn;17FjeAHEv#|_
zIpcR+WT3@mnc^GP%9T`hdX97@vBoV*EY0j0)D@CzzkQZO6q;th1aIg}xieYaH)Cc+
ztVpw~!b=sdAlFbh!@VhKHzr-(u&~o?g<8i5W6n^?%S(VS_2B`0guXD^M?u%Fq`*m}
zKK8D@XMPDa7#HBc56vz1d~Zm~7Th*I$2$$WtvDwm(AaqrzL0Ru$8ss;;VI=c+B-N;
zI_GBx$DiYKTA44!h%Ps!@ta_6hA9R`Z-Aq%atIlr(?k8+RnT!&=B%Q&wI^C$S*U40
zJ3vhrn5Wovyv1NBa~#!*)iV+E>Zy;0bG#R$6@zXTh6XBfN784)%k0$!d(+}NTTFLa
zQhJK<R5O|X5aK>Q!a^svMwOFxUf6u?cbd;R*)ZM?>;P$>*^kfEeUPpGwWt$9QS7pT
zX7n;=-YwN`)#eD3bXF}Xs31(MCOyhap7?6QvP>uMUY9JX)FLyF`(--qL8}x(rG=b@
z&6&?%b3B{nxD$R)hbb2<#5m69#i&TWjirR43&j=<9<{`1A0;iiDb!@9LwgBVoI>_E
zci!h49ouqWHA#iNsz4J0)q~^n_UHDQ%J$7MvVy>k1WJ3%rB&X*#?MOU8T+KP1*uiT
zMjAJ)$GJ1=iKl|yB1#>o^n(@d9cfNwmXk~}#)2+FdtK0k-|oJ7_>SY!7FscUk7j;8
z@-p9z#SfCrz2k2Ax9QgEisSN%xb8R~4R@}@iT4tpR2>CH$Jsb$A`)R))5erGiD7^M
z)j;MdT&ZRRvIrDP@ft}c&Z4qru&#_sm?r!loc??#<eaL5vWGbxgFaucaT)P|qKnP1
z(>!wvE%|v45(JtQ5CfH@<fNl5=KTq*oq>Fbtx1VGa}9J}@hXu!mcQ}XHc>{bhZrV<
z)2&*`m3E7W8H@bmoTIENlS0LNtr8)2SK~u_Em_!WWOZ4&f>pt0VH{PyKhUq4qEi~e
zS@mv(cYAS^fwL59<HjQ3{DCZbVjb<7=i)<f(aRj|lP-F`?T094fqXND6Ekj*R4v-O
zy?j8z#OD6&Q>(@n@I}H<W+a+;W<^q_V{`Gdc2Y8SO7^E!6SoPf7Q?J1D;PjIJe*%%
zA@&@XnPd^i%1Mju#Lgt^(>k;|TV`0iuiV~AmZCTx{UFp^8c4y_P=ki&Y7-7*WuD3+
zF6ip-5{6J}g)%MS5ngetoRiT}Z1}c#WRx;Vb-v6^4c0nEJ^`zG{@w<<pt2j#*~-~-
zmB7W8b-x*4I~xzmXyZrab`V&yk`Mf2_6Y&SF8mKnzZsR!6K{~upv6Fo;UH>N%1TIx
ziS9?YH<vpJZH6XS+e5m=eB2MnQscplyQcR6K)C?eqJs}ik!ozKr-$C`VibHK@Y?5P
zQ~=|<XG37DqBxYRN^Av+-UoNiN-umKyzswsT;PP{JH(U6dCtyHlOu6s9?}_goG~)b
ze0|v&%Rh}EtucAF+3CT93ISq(QtTlZ)=U2T;APYC)tq(RMJ&)xq;Gm4l*uCJ6a4x5
z<uwF=(Kn_>^&a_q7f5wgWnEy_UE|CTx0X5%v|DD5Y=e(p1@!{%g)JEH!B{BL_*`gr
zUBc`KNYHK-1DWw8TP6-CC415jSeL56nu{<=j&2XEtC}*bbf?ChaeUI{cMP%%24X)<
zzn!hV731qKy7}UZZ^wz8;~$1<6LO$*XRp|N?4piHhjjv<?}u8lrkSrep|enw2S`|4
zL3~T#gnLao!PjXGz5&N8W>xNIZB_T3KIkn90u&pQ>o!&DapP0psj?T<;99*y_nf*L
zTsj~ui^{cn@w4UbRL+}jaoyUnzO{Oft7~Kxp)|Y5->mZmNi<QT0~Rb0VkpIHR+ciL
z%A)-&+j2vn-jJHxy{O?@)k!DgvkO73Hf5eh<1ZT9L7vp2i1^~^kGjCf5P>tS+Q+X$
z(ctTJl;#e7ShcMeQ!c?1^{IJyxYulb?RHw7pY#PSb(6;Evq8ZWw?+jZK$Frk8Q|v%
z-ZKqEXPab2;NM3l`|WP0eY{_N+akd_kH=$5u|`}=R<RK-BoFU1mlDb!C>)uZU$U?D
zH%xj66Fg+vRZ8i(bscJ}g`%Ekv3Xu~L@3?uz0loBiDj*-Agx55jCp(HO92B|mKax*
z)PxYY1xHz0TFT70&~qW~a&_&{%UE@NFyC?I1$-4Q;5_;5b<!jQFTQ`_X6&4uT0J`0
z;M4ioi?(QC_JgHTHktsgm}A`?)Q*=uCF{=`W9v%61o9r`Y7zb1s#MzzLgK7Rdm{Oe
z95ZW&wz}-Z;Zgwm+08H)_ruTW4CM(A(*dJnT1@13IZY>5_a=2{&mOm0($ME=LD%?7
z@54iJtev%Stg6nkaCtc8zf90v%eO^wBe$@0oXo1W9pinjNG}KE)mY*kZtI2r;^1h7
z^dGi;3QzyVG`$r5LgSmW5XUG5jcA>ksgKCY8fKMJG{W+bE=9Bo@2KItS?7p`W<pE#
zP6y(tzOZ^sHC*+KceytwsXYHoD!glCetA<=4LLz{$L6<}j96TFH`kFt$u%P%-3^X}
zsJ_(8vg!`lk4t!m8iwOyd_RH{ZnNFmS_soBNoFtd`4&uzv{c^Lsx(D~K%(Lj!gw8K
zFNDLWwK1rZRxx020>!+=B|RirQu@2pWxdZL)R=LFv10zXy1iokK4n7^NuQ_x{=ai6
z@pa3!v{JU!A6TwO>Ox0q&}yU)CmpO-d&Fc=RD&-V13pC6dZ^^9Avqofdn`dZD%<%f
z)AHbqg!+A}B2bHEg+u}vaziQ(vg1fp#&m?>VHp`j@ZeZhOH?+Ir*g$scx;CBj{X0_
zG_6!y)=yJZ(9w!R8y6Of{&*U3M$HPtj4e%;?K_2x>GVn+7by8ONw>LS#Z1-z2X8dF
zV8`|I>`F9^$L2H&)IB({uhva07jfnsn8jk<m6FcOg3pW`@oRb+`m%Hiw*~(auU5Yb
zT#p!{ELWE+tVwHP|L?wfMM82W8Dp{#dfJ!7+GmibB<J_@>$LnM**q*Rk213P4#xd|
zglG$O6e{ltipiSGA+mGLGqij?=(YcZJA&1<=tf|zz&-uuj&z|QT6E-G_83^TDAC_7
z6&4rbuLUXGW%6}SR=_a3niYyFy`Cpu@@$rl{{4SL8Lud2wH4q_f2Rm}we#ZL(-g;(
zy}x#g-tW7!JE=2c;q7cTyB7$4wHAqj-KA{?_X4ZlEyfvG<Z97J{BSqBOTct8Z20vg
zY3*a#^`Z2L#qLT~FJfzPp=h6aY{?etUloge)d-nX&d~%#6PL@2a{x@qr)dg@|HD`R
zdYSTe^(`+J`9qM^|C7`EuQUxWgK2n`{PrsO>wLUq8fq#$8!$%)=SRFzs}%=L+Air#
z<`1-sK3t9wQ0f+Y@H)GfGMLOyGK^5t?sj+{>(BuKxGJ=N@bz2k%RzFKmL%TjC?95%
zd@vs+t)h_}&IXO|SN)?6w!ORSK)8iBt!5B*K=c%;-KEmN-B!JBp^E2%a>U|EUbn)U
z5IGrH+{R-j?^1W-+-mTZ;aXm*=(cncM`VDU(azlL@Ql<C)7}HKx8^v~Y`KkOEj}_$
zHW6m0F1jL`i>?ZVME7l;;=1usRl@2FTkE1ij4P9?3e*xQk2>Q+>3O(+q5wDMeI60+
zn72>Bt7%*acd7B^YwF+sU(-BkW`kk+FdQYG>7943OhwN=JlTl!(=IStM@4N`tkf(r
z_?Cdg>c0(U>LV8FV}>4+Ld4>qBxMB0i8kDlVj0W-mmc)~t@?smrS;YG@+F;)igEr&
z<}q!?H9+$&`g4zbG?KayBgT|v)WOLx^+iYMBO-k?q#yE>uhQg${CDT$AH|ih98@nO
z5{S64Z@TK)EDPvP`A7){0N`Z&PZ{it`GhxF1sau0LQ`By?Yla{x`7l*WA)Zqa4l#f
zdfjXp?eV17th|*j!mV_f{Pu=4k7?yrYI=;aNA~7G=|jxvwiuUZX-WcY*2`j@zG5Q<
z(z%-q>Fg^)d&0peR!1;HOe<V@hOudnvuv0gk&>AP)JLHBSSd$wEG0!%TC3P#AJWU=
z$Nm*+M9oKyVtT3M7}0H?eCUnjua9Y8f8**a>1LC3YW_4t*J1(kdi&|#dD9JoI!7nJ
z>`(Jv2t!X&P&00vWj?~nr7lRg<APaizB&K%r^9cZFMm2~AD%S#lUCa2s!xNg4)`Z&
zwMmoTrbRwTy#G2Uv7Y>z3ggWnIZkPI;EKD1%-&b9sd=P(O8*4?R#6I9v)SbR^XD0B
ztc^VFPcduHF)7b?UT!bRt#vP4xu&WhLc`bO<G2aNErR|+45-Cb*?!~BhjlM@`U3VA
zM1Y3($pG3|opugtLDnaTsf;h{+b=9YR!py{$@zHT3%a2?$R&2;MzUFEv@Fg4%r8AX
z`{&&^Z+5nf_A&UX^-zfKSrfH1$3Ze1BpD}^b*A<Bkxgh<zc?bzfl^e9!Z-{hG#`!b
zD|zG&pA~4INJw{eQwyY4m(q?{=))qEs9xCMPYR@DK`vb&kfQm7OWJa9PA8~KCfk7K
zadiTrDJ4s~vUnBQKo7Cq<+_F09m0{T62F?`8BNq*3;Liewd&6*C8AtV+FsOOzIgRw
zOGouJ%O)XS#;Q|P)kIN8wj#7XN?khxiw4VSXLbxZ{<KuLqOlqT$1Ap&lO~EYnQ=MJ
zBAPm8qAJ-v5c>W4<*V(rR<?5<aoqCcwA*QZYMvc*q1&{(QZ!`m+vj8xnS<<0ke@XV
z54U3CMJ~Hi8Z!i@lUt~ZM6;rc9+T;Nz?Ci{EwiF_O?pA%7~0`UC;6qZ_(8I>-FVw*
z@c+IDIG-{O^V$t0H6m8@qb8Y&ECu5rlf;|_XF=Q3kB*n}3_W-$ZNLYR3BF@G2d;x*
z{|NS6kt#sXxo%eNw@4Odsz()M?#6uL;UjrPBK4x2N3u!}RZA8fge%YJAe_-G`E6&1
zbj%(O=?mKe2Cu!)!|Hp7ZohYe$MnrU$eHwvsr{u`T>bb!r#mo?h3bdE95e6hNEq5Q
zbCjz_<2VS5$OEOko+N_$VR!==?2DrlMsJkL$TVGD_VCS%T2jIPwDwxwK{)YeDQwAn
zR4rAiJYpKBG!IpHHg;22i<wFz$LRn(fXyN8=|L*G^w(@Wrg6j22S>Nx&#bPo;5K6p
zXZ!-!lAgKQd%LM`Z*LoUdD)m=&4-P&-<V%Nr<?6L|EzjjUvhzf$NOR0;=!UD%yl)1
z6{pD6yr;eKg^M2p!>lDe736bRj0g7Y=5jwDu$^5sSai6nqEzu?`7Lb#!-)X>7lb%A
z^h1uY1@+FU)fNhIK5RSMUf_~y6`i|Ud2Gjb86P&<IU`TitVBC2WkMFvaSvOR%S)~L
z)niKYN`n&50%_i#tx(2EO&VTYLM3X?W<yRBlBYi0>KBd7zW8_vGCtw1yWo_CL59+(
zg5h|Q=VZ6O`}*zLsMBKphp<r@{UH<X#TiQYRyp1|3p+aIRzxlG237ab>vfkZ%Nz@4
zX*#9W5Rk+i6L^w{ewq%!d-!3(|NVF=K=?H@e=P`89!_VLPKFYkwTdO2q!I@kycB#N
zsa`;E73M9VOADyxz^jjf*l3cAmmwWM6RWwvmr`+P0+E;5V>8@L@5MZ|w6CtVGL#SL
zkm{^rYdUM_Jh6Qt=)>px;x=ep%|^rjH6Q$C_w9?<-^-8~A5G`WA7u2yqOWA+ej`lC
zn9uv18M?N@PJz1*`kA3SROXvwL;-@iCr)^g1L*&%O<csV@P{jAti0@c;j-(~UA|2_
z?H;$?uERKE^ib8_=n2nhd7VqyJfnh44t`Rfm+C2v-5QH2zZsd@@NTVVG|pyv*cGa7
z@lW$V{-_uABk)|Q9Y~+BrB`awI3yaF&0=k0Ssc80@nYRERI)c_Euyuhc?iKZ-T<bm
z(@R=Mod|!iFuG0wzKs2h(=w+9@x8?<e1zcOfqq4-fdk%DGx4WjZ^2C_MZHaFPD|1D
z)xo5aS?LA8YyYHS|MZgIc3+z#$@h<$RrtxaP*ntdA3fZ@d%I2l_vzE8L#L>*2X?~s
ztZzdaus(l$(v_;2JJJkV*?zgbZPXKD2+yHx%;sbE=Sfo_2xNd^h5X%M)COU!cKiyF
z@o8zap&l@?fym1w-)U7BYp5<ZW{)<2mU2U-y`eQF=YNM=Xt0QptMOjsrMYdy#1A%8
zWe%jJ?Yo_A`M*O_G^&HtiAhVh1-alvb>!7Jh%5u`NnHS&2&VB>eS$M6dRh&u+AV2}
zk)7jA9Dr<9hL@HKAsCXCd8nkUJui&qJP~9p^qf0at427%6Hlm5A=9BpAO={>HFwp{
z$HV+uV>UIZX_}1EyL>bs(ZpV`a_tpc1MKcMxMzA9>7)Pkk&`GzAGz)pV@)fp<JA8!
zM~24x#gn?EWg8xo6*^?^7qJf^BkVJtcIv|~$q)I(51N{qnqNBn>Id%l56LgezpEUK
zjE84_w+X6KVjdIZ05Wkp(`eeYo(c<Zyp>W7>sV)Lq69}tRxoNaiki9;pJDE7jT(QZ
z1uW)BKeU=zfVwVjpc?1@C|@IfP&s(^tA7puW;<-*-(K>U*>3}BlOZMZz*V}Gz_(K9
z1(}!9o%wD_=1JBv1o=ZjEZk%l3<!ntU5<CUgWcR&O{Ft?-#&Fm*{FLtEyQk#KVZgk
z&hxuq7OaRgxFi*De68_2-}bGuUr*0Z@Cpz<>f=kd?s<Ac6LkWj*8v$Vi@tQwW!Kht
zUqj~S6U_s0XK>+z#jAK{XQiXu@d~x4bhfH!2~E8jPn|DKP#0EBB#qV4;)===YMHts
zx5`ck?%m}Sc@3e<DcZn(+R)-ZOR8K|zk=5hMFAcE6wxDSPU*bN9#9#7jF8O>%A+)r
zXq}w*(%DVO7S0eF4!07!bFA+oz-jU#YUN#~bG;STC(AoJYW{*ViBi^D&iJr>{Q3M#
zgz%qD=VRub{|}t->M1a$oRrGw969x_B*~6XvDba@VJPbqj5MI2q{W&uRKD7-Rf?JP
z?pc!1@ZNh9_5H^N@RwKH3dX$1FL58XEWf1TtsH^SZ(-H7y9;yog69sRJR6po`VEbe
zJj&s+o*W*ukI!ZLRNns6f3SVL0QiQynP%%ri#Z*k{h8JDpJ;naDc#XrN%T-)nycC)
zl*0oV1hB}L?~;|<QDy`^v-1*Ec@<&F6@Qj1P$6IRXuq{vwXe033f3CMo5^H7Z=dU(
zAe0|WIUe)dM(HAJ8L6)_!z6l%7=Hg*l}JL<pOmU&=7VkjbQ&BSN<hWTkI(Ukn(UQ2
zr<&=`U=qHB>3$Mkn~*SLS{Qd}Ws4?k7P}b}^Vuz4lvXk4R$wgx?z5WfTFM*Giqear
zFm)Sy5aH1cW`5s%yfSC>Ow=pVg4ts&F56j!>^mlBUr9+?jItniq$Z4RZIft>s=O+M
zwe8k@bi;eApjfT9<N+gdnHe2j@Y0JJ8A(iCL21X+zM(dc(o#sR`_qh6)+Y4V+YsGz
z&SzCAwRnz2RrIi$unu}Ei#SaySDA5*s1Qprn~p2mBKKjNi89Bob3QX3;PH%=kURQ4
zWduD5(_{K&<Sd~+ce2aNY)JR+IQdZe-ybio>Z5svvo~!FvL7F6zSBBC{qJe-V5B_w
zr)PBFNiS!Y3tIl^q+<=Art@L)d5WX?0e?66?~m~8%;sgqq0^RtCwR4`?g0{II4?{q
zAJl}wn{G#vy!Y?_>7V{X9ef_Ybzi^yukZPF61J!%r>(=IZ-@VR|3BA~v;DK?@xBfG
z&&$trI-T|lpO{TjM@ZehVQE~SRHgBjJx))**UP4t&*~+q<1`PD*VVLS{(bZ8$bL-!
zcicWXwzt*9EHYBQD7rG4kwNr_AW*rH^2NLDJ8$NXop-M*L;4|lLy~;{((DNJ`R7lY
zyZ>#pCBX7vH7q1g|M{ODx=Y;YN!zd<GTsUa9T<B0>{E-b_g62$e9eW)#`B3Pl3YSZ
z9NKfJaPY(+dz_jvwepnN={xtsn~ab2hY3Dtl=i{LY>*9avtHw3TG`7u8SwHtkW%;y
z5j0SO{p8h~?N_!F+kjb}Wuz}phiQeJU&eNRn#42{Q5&ycKHA1Hh|*5YL_7}dsKKjV
z(OE%eU?b0F7wi><8}xY<u>dkvHW;Zd_3iCO(&8{d#UOQ{z__T7CxW?pNGW0m9(+-0
z%)P3VEUWZ-wh$ioREO{~P5kSZbvg#NYgZK9pw%b2noq!guk7-m8n2)3?!MF+(tp2t
zUDH2b?e5f!N?U?<buPz^D}pp4Nncpl*PgL0e07Q+#w4(tV_K1aLcKb6(oC+i+wIP&
z-JRXH-I>$1di6pt%|VyLrqv!Kxp~>|CodZ>!=)ygu1*VQS(la}%<I9*MtVc)CYzx`
z?Ax3${^yWn2|V_8H|>%Rpy#ur#r&)adDdrk`3Z@mF7=^{>dwYz<69uvbYg=otGX`D
zaUFRERZG!2adM7PW^ih`;eK%mq8yOV4Isr6iSlfqb!kmL7E!&iW$cpNQH`k<MoHRk
zsg6^=H<FM95Gh8b^N46)bcNN{q7h5Kc=h^`U(f~$zxXHr`t0P}X?L96c6;~6#h;F{
z&8-#nButB-|J`JQo)xV~6ZBGQA>=L#T0+LnO6A2cyUU%dXW@KoxqMk4yNr=<W`BEy
zyizMg7hL<Wq;rTZjP1?KXrCCRCL7|u1MT3jSIe%U2E7dR7xYQyu*idO%(_L{xUw_{
z3AL!SW9MXY0ZJqMYPWHvWdO%gi<hAx(2XTN6aT(X@4Z^1B!R%bP8v1|n}teH{j`Ro
z%KJ2`@|9~5JI$?EmDJhwBJhnyWHr~@m=i;(L-A;;Q!mhMpLRM{Uh6@%4rT%Uj^7*S
zw3q>ct#_FLFzsoj5w%8Kvt$JWq4+w`d{ncyC>Q7lVJILN$XXg~jidc)tv{4#srVL6
zSl(w(E=0o?<d`SR2^F3GpG`%Z0aDXJoM#$sr7i(}*v&~XVmqtbpWV^n!k@|{P|rO8
zWT=4^<FR=xSI=3s7VpgJMSWLk7_0d4&|oX|v%S-*VCZP|{Y9|<c=#e91BHTCrCKx+
zX_IP-37*p9XAlM6Ry}1uMd7@00c{B?5(=~~TbyNFW`;Q_cw0%SrfFQlqcSoQFSfbG
z?$x69wmM#$FLE=L;sttY-3m5d!lCututLutzDFNUP~BxkJ2f~w=#k`WO1p-XOeQ-0
zc+LN6^zSN~<%;E8emCa@!O*?Q2Pk~V3oiGKo;a=48*0f^90Tqe(Zn-RLawqq;6En~
z1NR(h-4~jyySM=^i-#d^@r%Ms__{&VfckhbADZXcu|A;?JaBU!V!?jkMwm1=sgSO^
z$TLX^x8AzdIwcW$3vZ|#vMEjCBo}4rqNpfg2+t1l9_*j@;ac?29x322c6WBxiXReK
zGZxy>8zZb{4u+J|y>>^O4ySux_do3}x`3qpF`3wmXuwcss<yDj!;Oe%R9k7o^)Rz~
zBXN;yY0EuA5i>1Ma>@Ob4so;gx`d_(=<v--n&ZO2Xuh`A&W2!0>n;Nr@S+~pI(r;r
z1XJW!m)@mQiTTB(g@F^gW}22nz{;?eRhlW=9P+}Hp+z!y`Z>ewgg#w+kxE_X3L{?C
zN3O~?0+seV=^W}`PgptEUizEQCGxHpsXaB!FETbGu5t-?VU4)>Gz~i~g;CMl5R9SH
zKb2QvUG}&xf%1vwbgK@tn^gC<oiS_Rq~bqEh^wZ+041S=_v;p>MP=UB<RmO9ewg9Y
z&R1WhX{M7E_hczY(iM}|%lgs&D*@yI;8uqN1l6l^P#Kegzo4sDNp{)iMXDX6j0y!r
zq9*QeZQ)0}`E%<iE;kEnUIjrzoR3n+SkGU{acd=!!U+o3_Q6l?{nbPd`q?I{sHbP2
zgjUxvG4gqUt*h;zgxuy3P6q>_&qOCHfvHeqj0TDte!Fkq@*7-U(I@X3$!AvP7^1>b
zfadlGYiWjXT^U<mcufe;^1aJ953ZGVhi8f(VyS|Ef>d&CU9P(cn`?~m!a3)vYIqt>
zDr%v@k%l}j*LqXLMFgbEdBI>Rh*He}=bCKd&k0ZXk4bnIj=p*9I{$LiY;iTR$^?6H
zM4m>ws%TTbc>5CTX)9n#N|3u@Mc%2=R%y5o(#n~qK#`bnKzZz^<r04BbeLOJik-&p
z+8E9Ql}QC}fc$XFVz8oq0hCrz7w8nt$B<S!(Et@LYNgf$#4nxaA80^7xP;R$W3;2x
z;MDws2inx)F$jRiY43rds=S3L@H57P72>XO-QiAa)q%5YkaLuRmmJTw@CSo2yriHt
zH5c~eP`{Kzbh<0s$Da?5+aVJXU@sXS)>iaX#YxCW<5oEpL)y8nWO|5*xwr^Jin_+N
zBjCAMU$B?!36pM(yCvAA)%t>Ym?m+0wvkg_vfFJk$UbHl>=*nohABUo$nTR1HI5;D
zU!FRnPgyESt4O(E;L}?cY^hWC@)vEZH;4`H1TpMifj}Y^`LTj^y#)fqtiL;oF)yf*
zmiFNVF5zL^RR*<(8{JF$*L?BNjl;5v3}3p>ISodSi9oy@W6WY{r?J!6t`D-CKSyvq
zlp|nXd8^!@nE|*Jg>7P{gyp@Q$?t@=(c-N66ORr&2<sNX6cQ3EmzlYpRT9@sh}T%B
z=T(&uVIyG@apNaIEe38DZ_`D4+$v*wUuH=kg1VHW06jFDOW8*i!|NJ4^oKR!ifd>(
zTdEgwj`rGn!43-I#*OIUv18-ciql=Bs0Yj#?FD)d78XA+9_RiChEpxJHCo8t;^gA)
z4^i+iF8aKF71e}zcp<&ewRnx!I+nauowI*TtKZmzt7op{x_J!iprzip$S387#2Yk#
zjY%E?=LEnReM?i7bD*$@%pfUz%kCJdFsq85b|=Y3y=<V2tijNx8(MU}bu)V+Tq{gD
zxKL@99gKm(NAQ4=-94U<=nVADCCJ|g-h<%Fjfxs;)PPz1FyY*!zKuC<<IC3(GNDdf
zPi~>5TG+qO2bT<^1n3b+{V79_9y@v%^$nuwM(-4R;#Sp%del$3RBwGG)-P(!1v}m3
zu4Y^Lt*HlH1tX_S^6$vNSgS%g!4Fztx>fM5Zi?#epKWeA(iQNfD~+3QDsgn($d(Vm
z_a{$cWTZW1COKKOkC2V-pNlA?)iQyQhYObhD`8^zf!0*B_rXWyuBKUZZ_epGL(TYD
zOuT@)i_I66#Iw37>k+YnJzE;Cs?+N3GYxZ9WgWd!0#%q_I<_E@uj4igO`oQqXMv5s
z;8F^x741!2^sm9SWR;fzc7nT(GpUhayx)4}Y+#5qDE@?R47LegzJBx`TRubKe66Z8
z<P$;mDyztTaa2ZXgXF{nHDV>Upkr3)9YmFvks3OGS;YjcLfH%g#IPIhGCT8QA4=rR
zH`?75oBXNn*rnZ6*+v*YS!_Uc>fm6tm!fFb)S&R$(qFPGm+U*9rvL=Hsi1|H+Gnqr
z`dj0|k4bZ8P9w2Ptq`G?l&q%Y8F;6<m%{5*`K;`UX*L<Aeai^|QV#trdSwBkY-vd$
z(5GKpot<v$OS|<|C{o0IwTRQ-l|t+M4|;)WU_qXm%3*5hV~Vr(I%cD%|DcZ0*|FMH
z)$9vXVI?a-T33!b)TvPxdobGx5_MLgM&qiknkpeQfn4=e*^qS~2C8U1c9P6(CCUTa
z8<Y-43Y!rX_0%^{KwYgIq;>hR!w+an)v@r~IVt=<&yx?c-)}$m%LY937pUW#4d&}W
z5taV;i^=^`lqGVcWV#vHgS@tr>a9t8J%G#73csvoJXW&LLgBZCKojOBg4}hZ7B}6q
z{P)7k<Yq3^OsDr;vNG7EkGn=7PuI91|Mh3X0(g7W#LdUu42b8f+}uJsqgqf4Xp+lJ
zz@d6BDiQlwzf(k-`~FtMHop^&rxHYAMqH~QqJhCh69JCCXA)OuA4gL51}JzJvK@~4
z*~fV)b*jt~Q*Y`GFqDveI#0<3Nd!Ba;^!B~SpZ@1QCLc8!X9nJKd~>W7Gh$i!=jWT
zE$EW;f9jSxXzT~Dr{i|x%ten<Y^qYv7Wlp~cx_c4R9K53T14oH`02{M_Pp#GZPDuW
zUWu6wl!4n<$!|NmOPFc6-j9x&sKk|#Vw#P6PzR^aJhPw12+5!P^A1+y6<<QiNwdXd
zfV9&sXJgE<Fb*!!BX7iqAr&3)m|F0B2{BAv3|lE$#{1GWAqEvfu?UZ(Tm|ely)R=o
zAjgE&D2@pGrSsC(m{T9n0>m_3o4fyQcRN&ak{sbmtyevdnNVZH?gyw_b!4`Ou2R5b
zr*_*+QPMzgZR)hcM6gee3GHT@fvIiKm)-sL-nY;6zno3O`!fW}X<jbolD|2~dh^Rm
zqc63zQ|5lNJC)auE(tafHO%fX#ie{vCRID8c81v${rdn>rT_RiFB^Gp6f)tTMB=tv
z-+ue{v0}r<+_6)C`FiKw`-G8JoYZ!U>0`ks2O4&O*wMNbB2=>_3QK7Rrl1t`92s(-
zTdY;5(^(mnos%~H-a$L7z;_+Gz=%fY@3)<|Mm<zHba)es0;Dcm-4%7Su^O^Kc|sGn
zv;A&0YfxS&G@zEW#buA64W}<<Nwbfw0LUlvLWUsCeyD#}OIjFo(qUgoSwqmGv6k;l
zV@}RbmP!S_Xisbha-V7^ADp+q*hEwK+smbCdjc;AliftzCLCO?aL6fI;iq&ypd)*4
zvMed4Y2Pa-Kw234MHGlvWs)s;g9YLZo_jb!ZB4E?JQWhPduy<g5gS*VsA>l29(Dx_
zoP26eYr<a%&KEz6R*0|9cVRBHE>her5}SeZ1%y_{m#WLhgm0<<_zJI}bOD=-T~^Wm
zJ<RX&f4iPMAIyejV=}m?Y}x-`V|by?E-FFN)*4NSA3UN>l4hj%%(FXW4$Sz!i$4t>
z#wDu1aG3b$J4^CncWMi-^3>5Gt+aBfc^(q`w8Ngi@Ipvlo<k-oy!q9em9!>HG5nLU
zRbS^sTZrS>m&AfOW+#qIgMQA6sntFCnhx@GoL<u+e4w2<250eLk)h=Q3I~@<OQi(X
z&o13aPa30S<3=DN^X_wSlvd^QN#|Tmf~qXs4TT%VgDExrbw12dB=kc%8bI-iM(Fm^
zREmp@(jm?O(zZUeUc7npE+G{)HO^e6BL?7e>Z(=9C5&$hdhsodA+IHSd&kLn*1sAT
z&})&FvOKH8AQcREkef8;v~hEo0n_y3Rob6T$Bl6|Tg<?%?w>c&&V8_j|4|t^%!*o)
z>6TBf8hxl@b&?t+>sO}^tU{)gleyGh)|q9meAXY7@G#99{ng0ll}*jKsQ5|uqANMo
zWJoT^|II+GFp~LPsJH4d`H+`@R-ZK*jqWfTKNBEBz+*o;yckQhcii1OJUHGzIR5;e
zy>rnA-Fyr_J2293(mY=&xIkXB@^@QoOqZ1}1zfLXG-acuOs$~73cDbYzz&}l+|8l%
zCu{qt#v?^v3cq=)m>!08De0e-!WGnwu!)L(E=lZ%C#|ntq#IfXr4^QvTv&2ATs=0)
zCD3<3;7Ry#c{XIgk~U1HRs3Cq^W6+A8nvJ!48e%04Y=tu5<*m|3jYA?ercf(IQ;Q~
zll7-HaVt&%jDJ!85ujcg5gi_SNnw~dd^4q88qin0WN+TTzAA=)RGMF@$^~LS(&~PD
zP1n@~s@%>Zp|y}$x6TgLn~2;YHNl;fwiHMoqulaQW;I@;Tp))fV^?qmh0giOS(~xc
z#;Owwr5C%Qkj~c>38l#%tkC2GG7mmNExv2?uPQ<W7p0O52Vf#C>WW%WwN*K@_$?bN
zbuW&h5o>@Gs=a%JuORN$o!5)V?!f#I7m9=y+e-(QLgWj%45K?kid)8E!bIYPEZ=^n
zC1EUGhy+07l@?8tO0HJ2Po1LyWgI|4Aw<->SGV5D!G3Z#%`O72WFZQ@C#D`>@At)A
z8CKa&pBp4?33??iX>|E9co}>y$WjyNsN=f@Ga_nsDC!3o67%gWkR|&L+{<CW@)?=V
zM^=94IPVw3l=L!Os;EwxA>;F5{^FhIyDxTGWwy0?yx9kjU?88Q)A-w4BcH4sK`Y6N
z94Tg?Gs?EOEL{{N@;$n}z4KE07&x=PE7>Qav{zuDBjWoEjmR&OAJXyt4+)tkDYJrk
zGS&c2gVEf~DgJ?65c;R1X_8G4&y^%dueK5meG4BDb5h8Q4LhBVdimv?gz$G+`+@h2
zrabv=m+b03CVJZ$Lk!}>to>E?=5#EEV;pr!j<cBzqc<&X%Stp_)3@Iz=|T}J9Ep4;
z1dK7kUMT$cK+P!4DLBjS9(I1%x^I&q@^*W@qlXsful3XB*Y=`j!%n)IBi15jMfP`?
zb=M<#PgA1(qEmA*pR%&SxO)~hfFh_(C@xj%%7tknO=uB+NZ382L3~LI@eC$fvRfDw
zrKD%+)b6kd!YFrN?b->fL`YU{fIwVEdm;I4=QX|Vrm_RLMnJ@cEj+rcJg_PnYL3Os
znzB!2Nn;A0l_fvlTk$LdQI~u`EWX8s8FPVjF<)C;eM1o~sNZPbG*!T&IeGE+^~?1u
zpZt7q{9<<rbrWK{46>ntDFRZEKLx|d%u$yn`-g`QLOfPZf0+H09@*ZpvN+pStF3~G
zW9aX!J1tY=nZS*WA`amr_248`i+H=f^LjP2UoBxkWZkUsFDYOXAFlA9kAq@58_}V6
zTW4`7+l_aPx8pDtNRoHvt>2C>tqm=wuo05Y5S~+t8B%$=2-$5~`YQb+XSz_43XyyL
zZl(mvhPm?CDWlf8K>ZErl#Je(O^0*`BJ`4%BTpd&YEYN6WZ+qh2#<;ZTTfFi3A1J!
zos$IQL=uVdGxxml;2@^(&u=YGFap7_BH8#eS=n)RNn^QL3!SupcwGyjbOB@OTJXEh
zzJzJ`Fbc**IhptFT-I7y_&p$$3XB|P&OSp!SVN=nGvDz)XL<QY^5GW$`FPWx^c(YW
zev@bLQl+zsCW<#qtvH@5R;HA`7Zy)Ve+ii{YC_riuWCX~$pt|Y$0I?vI~_5PzgnX+
zk-!xvJ?m193R6}nnyb(Sf9qol#gWzibXbzD>>GZ@05rHm2lo=4!;i=^D>*b<G@|5w
zHKz(AyA8{yeT()f8zMq1sJnP=L|ZKtR-FvfWYT@2(QfgyX(EVG9%{O;KBKNx)@U`s
z6+aTImCo>^WJ9qW;4nRuaGD7tzWwl*?Zj^2_fEjd@~|KHolQ>L>;5{2MR}Mqm*|Jz
z@vo1A{CeIPT>rQ*13I-%^s5PHyhzW>Zok(MZIu75u-$&m3qW9`C?x@%AXF?IL_mw0
zxG-Hs3J?YN`6>Oo#%IxIv786qJ7D~mhq;nXS5>y7{aw@d4OQkq$T&6W0scm~dM3q0
zQGoofd3i<uG=Bz*)pUBvrHW$T4;+dCWMEjZ3XM25rxiufC?*Fafv7U4l7Gaw3M3XP
z#ju|QJH}i@N<BI3n1WWsK%jBvk?f(YtGpoM*sO$8cp%yv$vubSDPLW&G=Su)&Ic@N
z`lNKu=iF8gZVtn|_N7Q|&?1=jyT~~EAGJh0*Yn^xO^8t*GMoeoaj7a$45I+MfzH&=
z&9h_nc2xkaQSAtm1Ci!lI*OKq!Sl<@`zR#5$WUskm(JHz^)I$&QKJd<i_#&~t$Qs=
zib+|Y8AYn(K;fhLZd&%A)BoS4zmvcG=pZ8d%KoiCk#=cr(~)A^D})KO33KEUa_g*=
z(DjR2P)aCuYe}60?2&3JM1dIV>=w?N(4H&0X#zI|-4w9JY<QpN8J9)TT;|K`@omK&
z3^C3%G6YqC9Kn!p$AL0!=xO1WxLHQBwfDQ7^JeR7_v90um;RKaQ)POQNf}KVbtr%1
zA45-iHgolPu7m}xKmF;k%j^N&?P$NtASyZ-JpHnx{Vam&EDidG1FuqpCJF*eNPg44
zm3WY(Z1XURwhcd+$ZTm#-##dSZ~8$GW~5GrFDfJ}nXILCz_+&M1~8sia8qJ(=ziLO
zuCU<(uaTU3$~V2mM&}Po<NoyE65db-3_EZ*s3xOyEM)F#NJvtJZgGa#aUKM{Ypu{m
z0tth{cLT-sRM&Xm9P8=WeiO94SOt1-K3sN2GdpWkLbIZMjicI6u(w1#^4lg-+SOaZ
zh0oYsSLvo=MuoD5aV(?-LtKiB+8ho1jJvJuHS;l7a$1B^%4+I+Raq$m#p>#9KE!z*
zp~gkhNB!j~DG|A7?>oC)c$_jACkHdH;}#K&4+~Fb;OYkhsnkptpft(4R0Qzl`2#mT
z=M%C9#b(0JE>p1tS@mqD<UPC)oA@R3N6g145>4~J#WiwDC0*oN129BLv@=%8I6kNW
z=2E_t2neT6#r>HTmvW;Tc_Zgk#D<Ey_s2Ba;@a;L`C$x`XNLt3Tl4s@v$a}_v6$#K
zTRKVNJ&{Gl`IUQ&k5%}_4FsUkDkKlM;Pl1-&<(*1+yTOiuc^K;2$B1Y;E}Y%u3Oqz
zgCZhIGB|8`l?raU(C;|Q031f;ieGb2>&wsBis6*YnAF1{d;>9i0htE>v}OiXo&5}s
zK5Zi+4DrCP>@8c0pK_)>-6LfpWe)xiH~DN{ew3^{n#sm={^Q~rS#tFs+2B0q6g!$F
zvrXIqaxw&z!F+Td3jXKEn*x<8hZ#;b-<GSPm+djh5@lB5M2$sK(s-{0XAHbF0(gUw
z?7@o>o>MvrR2gM*GOl*X2uEe>NPx#AOB|v`w%Dx^ORBFHyt-B*3`Cyb5g15P%22K!
zeh>Tbqs@o>8!dlAeNok{j1m#e-d43t>h55;Y<C2;HR*S!8Bd2KAylt%7Ov*O8ubbU
zFl0j3>>8$6Q13)+DscIE>xQ5ZTnd!6D)wHb!ZZy&6Millv=%^Nk`*{-YQmFJ3d}1~
ziz|vNggQL23`zw}g4MR^KN=oMlm81S*#_ASt-`2FirqNM3yui-uvcgiQ!yWS&hIOh
z<w%H2@tEPBGzEmI+WGVjktK<Bf`4H&f7CHx?g?eZV6Q0ho+`d3o_5GXy6oD`)B2}o
z=iKev0vhvC3dAiPuHQf2?ldlPKdDF1+wUdcyMl;U%Q+Q~lOdTkU0*zC?)o;hKOaYq
zPpPxRzb*Q-cx&zZ`w2>EG7}LOo9_vLtDD_<KyL}e|IkC4+sxM_GZF^=BLR%&vkJ%J
z%-do37)hC2!11)A+56=Dm-FuaUM<nqH~-fyja^s!Sxf#_GE=C=+}po&_nYU<ns8+O
z)I9vw*1v^#SsQ7c9DkB;A0B9ha?1>z%MrrF-E{D~sI3th1!#~0f71W~b@w08IV#4Y
zZ=}g=v_f^R#RBQFkdrIK$0u5##^1vCh!cb<EWuQ<d#&WCSsxw$A#?QlO$b?XpRo)0
z#aju)V8B1<(88u<QVei63A?0wO~U=iL2;WFS`(QWad30oj7`c+={Dp<XLorSXpAZ?
z0Jl;qY4E(%%F_eOsIinm24iBh63>r|SFZNDWW!ksA6&>1z<6<d2l&ca?4rb7)$=hL
z=#H~2jM?$7_X`9R`j#?~2R?xjrph<^7>OJ=&kz8O8u#v%oJT?NXMnuHna=2k2&HKv
zQzPrVd4q!zw5_x<B3x)+{e)tq0uSK~rI|KI+G*+g$f{!s?&UBfH3%D^`j&*jNQ#qf
zSR=`eyukga{QZWQWQZ=XzE{acM;L$`54|2lMSVR%l#9?T_zfLPps=0WWJB1#Hw4zi
z311PNoGRr&->v8|Uq|V+)@kZfN87rk7rZ@%Uz#Y*B4N)=^6t5O80VOj;gCdI)X6AO
z@x{ZK&SUZq-c}dX4Nlue4?<l2AMqMX)WLq>jQq+uY<Vg<yCXuLy2GgsBeE~HI3jl)
zJaC94!QPoqVD|HFuPC4rby3le(T!mihNvm$#_;q0HR4({ww^?Zqyg4CV;R7-$|Ca{
z8VbZ0df>P%eNx_-gCy+qA3V8>c~}G9hW)C!$D}fLctr$<-l<rqOqgwTj@1YOn`F>N
zN0VW>o||%EGqZXxGb=*Q<s;rZ4q7=FH4i>rU?IihRgDWQ3Uemo{2wuM6R6}M%;rLI
z<v)0xK5=P9E)X=k(%LDkC{2Ou2ZCpKAqz67tc3;NRCUo#M&(x7%?jQUBO8CQ`*vG1
zr4G(J0;~FmiwkkMdjG2jE`s&!AJ-D#3WqiNvlC9wx3dG*0mTOv=p_93|3i9w4xHso
z3#AHfpfoba;sz>xYUQ)*V$lmafzD|nKvcU>(y=jOfG%c263Buk+IRapY9R!*T@w_;
zER!5zp%1JOvXX==`jWuvHy5TU=3$JQ75`uA@7{p*xuMYk#$EP3IWUcSW<mBWXZeQn
zET~gtb+~_B5R^JUvQWcxdTG>O&!CGv(|xIkVx&PA!kc}S4JTGzOl#<HAD^L*&m<R(
z&%N307P4a(I0kSzC&5GSW=LxOx49~hW&=l<fzq6O8~+Pw5#wUR6_kh9R~V9TWzX|6
z5O^6pMYrEF8;)TSYzNIan?^!X+IEG7z_k*!QO>`dwVV3~`ylb?+9He6Y;H9`Dtz_%
zox;{*j%;1FRSoJaZ!#op)em$!kj-p<NAm}^&(6By|Lua5CKFX0WAGh6sKx3F<~@%}
zu`|g9iLjAc@`8%;N#T?R=^t5qOK&q|D!j7Ota`Ylm1m_Yk^DeJA*07CfW4x|<xzbH
z2S07(n=D(Hp%_X$ypGyXSxF5qZ6Yy$`Cu}eM(b9qEbis1U+DGAKhWOrZ?Nc?BDRLI
zz@BY>48+LZfl$jg=U?Y^wsyC-UkfAU{1X0R`uAHgziV8w%gD+rb?_?16lLoQh+{!)
zRrZ}Ubjwke*v<)h2A>_ZR&i`<;(eCmiu7F)43}5h5F2e=l2_33R;oeHtjq<9$7GC!
z9gVU<9_bxM4v*cdU(vqwJi}Eum_J7fy;+U{sKP=omQ0IN;Pu4Z0mK{JGU~(0rZ>tM
z8iwBboIz(lzbdAaOzSkTJY-3{3MOqja#fYn^bA+l7Go3+#Nxs`sTvx&a7U+HNGVhC
z`+$DoAux`m%T^56l^{t3y<)m7y^k55ruL*6^BRu-N8H;28Xr`mO(gc`tk<&d`*}Iz
z!U331bb=kL4|{XYvYT`?;jA>oWMlbF7qIS(s!OWsk<vjeyQN}})KlD1daXo0sVBLk
z#A(XZE~x)@vfu8WwGZ3PPP@DJ?bE0BnUYaiwG;5}VgpDnM+M}0)&xT;V<h6jfx2Ys
z2Z23ZvXg~NroMQ24cJkV4}{ptI(nSbIXQx+bX!?Io9#ocwexq*HZN6eanf~?AD*gJ
zN2$e|=5m@&$fiz?G{)PxAJ5XeWHY@^nL0Y=%PE+#;>BAO=9539qNe<<R5X3kl0tZc
zT@3VzhFWx~D<?Vyl%4A-5BB+Q3)tGfC7dSz3g^&kd&!ToF^fI@m8j7UDoZ;3X|7c^
z#o<v&5T^dW+<EcR3Jp^KQDH~@HCzMMkkC>*uCHaaOO1rzn-@t~6jX-?`%X%i!+7>6
zqgaG_q}F51Tv-h={xQsZm4No%!O0V_E2Hb3(M8-`KC(L1)Tq5(m2DK#x+krcF0$0p
zL^%Q{k|mUhDS1+Bk)^`k3WxBZMq#VYFlEQVXUlKUNU)LLTa6(4h1a)WVO`9p{pIec
zeq|N{l8>}w>*=U0WS}WtafuBvtRwbl3nC)jv=aZ97aZswF}es;z2z&NI-{wil7u5C
z?sQr#Q)Ej|zbm%M1-=$4pRMQ6K0CU3x%hy7YSm|o<R+?0lpJ)LHTEa9PQOXh8yD#)
zAKo`M*1ajr?#U!2t%qs44#vj27`d5B^WjIjp47LRYSAn%a#e6M^~v<2&goSsbTtE_
z+QUJi=7lMH1!pTl=vlF8mf{heS?CAX!9i`&%Q1J`bmoKRaZ@hyQW06<nN8)Q)jB||
z$(faDz&8_BnnnXXkZ)y9$x@ZJ7b~A09f(T8x(P6ci;4N8RZ`V-Y>=~tzm;F(|LQ<&
zwdtlf|Mj%pl_~7f6n1$E|FV7e?$z#_f2vq28-lmoNZ2cFCw)Utl*lJGP%HhcnQ5so
z=*0mf@+w1IaxRFGJ24SSFQ0)YGPpwKV_&^^RYI{Erihd{yHgjyC7-EC-^U)>YQ&}-
z05}{)f>8jRL|o%}Sd_6cZB@TRRa3Suv3VD{rOGHC87cNXt4$eba~5X>`$yWH%%>CT
zfLqwmXJA;-)~BbImTt2whqUz5ehn3ew*tAf7cbBg5Dp(dr=WfH3#h8<v;n5=h+$1C
zZiw#4q%iOG<lZJ+9Cr0*oCd9^C7R}E)URhX4^Wwphl9A_{bUd+`<~{Eopa^5V4ALx
zR4)NH%a9w9I#{ATL@p|~NUCIImhc!I1D;JJYOI;jV4C)4cXXrmw*JoNyXo{&+MqwI
zh?wvPMJ)n`xA_CTWfKD6hg!mr%^xNiGQp@h=tEpVi{{q8M0<aZ+VD@U7GrC1Mv`a!
z-ZL-hqp0G19MQnlv=WJmsk@1=^63V7Y!_~^Gbz}>#zJWT>u1zCc4~3zU1WOOc271r
zD#e?Un!3#4^)lS$chCBkm06Zhh#y1UGlNj|Yhj+Y8lsszu%)z!{o)qpk616zjr^V_
zO)!x=HiOb(X(pUPMzrM@4irb0Ua~8~m8Poi$VCR%_!&0wL`^iHbZE{x7iS8FyAdTz
zxVFdG-T0JiD;LYcK>&0>i@&c=9nHlYBXQP0_dVO{mdP{UuFrTIi6F2=Ts_r#9=LCk
zVNVOh0Y$Xn1$@~~FG8tx8gJ8*T7pn1%^}9Wc~&kD$?yUqomm@a79o$!csaYxs1uGs
zuHGM7W=6W9kq6mYrCh(&m)9a8DanCxT`j>INGtlA;$r=1mYtI;r&wl}HSuujS@U3-
z?lEt%oDJ5q8H&NUuhOz2M;RCY%6Rs@%205fg-x;*<i4ds2C)NCx7*mZLuE1u4yidw
zqWHY4MIwSU&<iq}7GB)yEor~zTXE^v(Ag9(IlO1$ozaM6acW9bWs^FzEup{;<U?z*
zGQD46jh?a}nGlAtE}YPVp?80RGJ~Eh9Mhv_%gcIwpK-vIddRGOwf!c>@LMvRl9r35
zW>u>=<%8$IG;wXAmurAD)YDcNn9(r{F_(YKKt-EjtVpNb=^UVpu|;-j7C5-CY{QF8
zi<NN=jhLsi;y4K6=pYD*1zuW)@rI;21(7fJr0S8#D^<_kv2PWfgn@|qJ7dS4dHWt1
zu3m`2_SHQe2e>L+q-OAz0<vbTGQZiyjS(myk6&wxmzo0TV+b*TYATXYepD+qO1g|P
zl&_dm=xHW*IpH!YqOr8UuC$<1oCz3_gC4ZLw$BZ-S7v^Q#E(}s3<D8k@V;9Hq3l-n
zwXg?<;g1n<b?9?|`nzR@Je+?}B=wV&f(hKkl6j+-w+5B`zjUWbaz!;EbpfD>&81|@
zQWskieWYHnWywn^m@nycriEaxKF*;AG^j5{33`jh{Q3cyvI-}>(o_XiR&Wk2r4f<`
z6*WRVCEl9w6E<55C&oG5QG`I!oba@MA80nc>JpcvI_aFN*DRt>Sm4-wlEhm*%-~f^
z>e4S8CL@R6M4iRS83D=XaPVUXV%wdX?+%!e`%Sl(7hQQ)(|1nWM_q;<ulRx6)|#|T
zui9&$*<*$|UhBUjLo{b=v+BInO~!CpV10byc(YwF{3?XUH7L%%mV+Rfe<9->&+qf)
z)FEpd8Az3eqWmR(%Ld7(DlE-%8TlR8;3J96>r@LlYcm4OjmKk;86yK{0gW|W&zM1}
z<2y?G!3B(eg{r<Hn>cGp7jn(SMqKAs8+h?)J1YEPTx%iB)xTh}YCkco?%#gkiNa-Z
zTewtU;?*cAw9=5F2=klFOBF<PcUsjk`Q=^X#ZICHd*kdZY2^u{)ift#W&^)A-2wMq
zcwP~Vl|)w|U60bfaYF;-9s*x1DmfR0v9DF~lf}#>b`|-eZ*E)^#h-fVbYlxpdQNWH
z-1t-Uq1-F-dEGv*xw^-(Yx(v+`cr&U0o0B}ugEp~o^ywCB=pe0;Oh^AkRmKVB+ErM
zSS;9w;fa1-EYyUvMvy6ltQGL*vgi92m!%ZBR%c(hC<T!xNWNKmZ+4vagKy<2tEl2&
z<4hmuhqX{NlbwqiVkBc52{xYD1lxnv$<@OVXy@HbR;=<>YTA$WS*Qf!yHV=F@qjJ0
zi1i;Zf1;jjE!jBje0^WX|9m<4{ADBf2*ZT4#Z!H=g0VN`84#gmGF;|gF^{d?=R8jy
zwnbiQwNM`r_L9)G>FzioICdkex?HQLimfE=QqDkL;e1myh0z54=qRy|%uW<iYLQVI
zRRJHz_lN}+wxSJY7>1Db>d85FIbKZy&sjz<8nGXaE3D<EmH@$}%GmPo1AILWD`5B_
zDOt3}c4<8_yizd<`D~SXo=&H#3|%cOcs`D*rRs_*yEJo^2FmNg!J-^#=Q4aOSlCN5
z7dS<wv^;#(`|VH7Z-?g^m4I8Vs~=fz?cqV^e2X_P%^SO5HkyZr@Bd>8%m4j<%<!KL
z-h(b~AU5I@E9%=uv)y^W^xXSDrC5>of4V;FG~fT}to8E!$Ikf~-E-$(HY(*6jU-@%
zJwOwZ3rz=294-Om^2GC0SvHp&6>}A%*DG^ejPFNa&WuxOPriD#SR}mkEQ2tF>=3@9
zp;73RZLQiNf2MtVDS=q1$Eus{(>RKoabB&hJQG_7#Iq6M$tW$alg%{Z$6dZX+|W@d
z=ay7FcBUlUQkNK8lpCUi?;4+CEC3hJXm-ACB)uG=8~(KU?flE~r|sjGd{~PcXxfLY
ztnp{^xjoIfs3NR#5U^R#jM7(B0Svi}(k%6+^%CIJQnZz2#jf%J2?0G&Fpzl$Sd16r
zy4I2y1pN$$^*Ijgu;>qwL(gZ_R6mth+Cp?})ZN4;DW8zYDiveIVfsSUU)gt!E#1-Z
z_tAoi-<~JNxi{qvrDKa|eu^p6-*OKj&MPpa)ZH%qBE6g=0*T_YJG*Zqs^NAA>8Ly<
zKJ^jbVLq!Fk#uOJMfcBen5WcI2r=1*k2WW#3tnKo)*W+rog;&ZhIu_iIkpH<3^A3C
z!0u_D9>AwXbjgon`uSW4soq4OSmuHdR2lXVN9yTz^x<1tAxGUWY?{Ka_2#5Us^eUK
zjz70D1|0I1m61NZvoZZ_*`BhYYTyK9)g)A_gaH|!Xu9rFNn-WFutjo_lDxtTl$+r_
zi&W}79kmVV4*qI2kJ^Wa2Tl3Hr^P?V&(_^zODO<lT8GAgV%59565_6W_R7kAeN(cS
zVRkWNrQujvz4gFE<p#xVexZk2eCX=ZjWEIZb^;?V`J3=fpvBBXgZUpk+5V2dZ3Q6F
zuuKj~3F%+iuzmu^{SRQe|AE6bZW}IHwc?YShMbb)LW-6n-&e1aP}@s@tK4f`1>+gZ
z`R~aTU_V%YVVa-Qv_60F_T}?eJ8?-g2FR=#Wk`;(DDkqFg+&D?>6p2)=wPueH}djS
zbZu;^CnaDUwzRy3f|fbP-f`{`ThM71C7Cw7aE+t^E_i;1*=5>~>Qb$(q4;w?ezE)f
z^~+?2$yXO6a-a<fN<S!z{`Ky9XvctyFL2gi>+H}9M+J%Q&a-Ozn|cGLS{F3JEyHzI
zF$W!3DgHYPIMW(U8C8ddovK&O3gwHY$%tI=tYu3=;53suM7;5!RWPPP!3|sNWsUR}
zdB-%nDXv!lHd98D0V1%r`X{~b3Vh}T(#N_qY|Ri{5*YWO?CCStnc}3l&&HkvVJCwa
zXlyZ!U~kbRDJpKc-jMn*Bq^^e;l-|CxuZfvl2>KLh-?WsX`fN3lHKgf#*2xTL`z$h
z^%rSQebPIb(T%GlgZyG<dL|-1`Z}^PhFqwJJpiPTq{#-q`?i=42OCQ-xK;NvjMjB)
z!FVdE-c_@?XFsAAc;oLQItflB3oOUtJu^A-mF_kecEvbV4YlQ7LhXZp;FSL`JQf^l
z2MQ_P&!Lc#H2~3a3Lox57GNa_uabGXe=2&My4YaVj*DuhAH7KPQ~lZCC?TP|Ma`S&
zE21qMA2Okg$C~gpg*%sx2Eiq(^vi}4(ubcf<$P8?^(aOFIJzr0!UKj>JVw!f<%Ad>
z;$vR41p;u}1*N7B8kt~7D0Jq)i1v#khS2dxf^Ihf!_hhVO1D_3SFCPjeopy$+|&;}
zir5#h#p8S|ZqcG3QtXP^34=>cZ*ob3w8CYT)&-BW2naH@SNwoB9qUPa@M^blj22OV
z=MuV#-paRv)AK}mnD!2(Qb67XO}?bjFsDx{DU8V`JgXD<;<seC1T4a1tL?X~Up3ql
zO>k#uEfgXexl4F=X+Q^|BkSG*Ws$Lx#}X*^cKahR*Y!Axp9;MR#~GEoO(5K%QeDMq
z$>u#%l^~WF0rh2?NGI-dBwyqVzSj#Y#EbGU#D#n`4lUv#IxPCDwHbm8$|sTOJT4mm
zj!30ZuR_G{Iws{du2R6-#W8hxE1IxTI;l7%Ry<jnLF0(!S@_bZl~UD<P|HYz{T#qU
z*wAsS({z##hDIVk%0|2@Yc~nms9wswLe*I*jYPL?9S%uYD1qdp=$DhHd$r}*SV&!?
z?8Eyg`)q{icH(g^hx7dCfToJ^p7XMzTrjDkGPJeMp+p_Dnunj)QYc7K4Jp4DJoxIn
zl8+H0$fhW)R8_}ji$N7r+SDz^GKuRsTf=dzh9BTwO4O-y@cCHnY#Ijheff$y!LS${
z-ih#{=Mb~;yVO9qSgLIIxL`o;2kAs0Ma>6F2_m933Oid}*kBW!9PC%L7+0%Qn=eCv
zg0H!<vHV(oWfzHZn+th!AbkWe1vgrK=~D+*E)(@3bh7kew`Bi}XTeoC|02pi|I8l{
z*Etfeq##FJ1b3NIES?2N@Y|#rhnJorO&);{x2|M<b!oA_pkMJ%<PFhRPlzos4u3jL
z?^g)7UOq;gc|u0Zm^NZM<m)@*m#L!yWXG4ZQha?n#x5>7V|katrOHYk--LCm2znY2
zNk}Dzvu)w0+vd!{m+ZWVxH_Z}1|u3I>A^AKd4`(HmX^4l>VjdA7P9zn+w47x2E$CM
zhPPD@9lM5uG+OyytyIa@4m;cgFfw$8ab2hVVtzTKSJHa*@?q-UgH$Rj#h?#a_6y6z
zH?M7lj8IxNy;C9R?N+O%P>g|qVxsiNh-&?Uixj{;ZmJ$q@;l9{0jHpD<Vjz#<Qwan
zNrjO3x4L8W0d}w9ky-_b%_VG<rD1`yF@&=<5sU|b%i$9a;vavc)zF2fbBLbl*bz)Z
zoDwA6-T$&GPQ$PcQE)ce_|O6s*hL#mxw^5{c%V(6WG-T<(-_Z4Ev{{|U>NJW(dK~3
z3ByXHb6gKI-3XHBfra74#jIC<AZT3$oQA~vX(m^0(rP{{{jLf=RAVGbEoqVGJWgK)
ztclFB;a2dUqVf$=lpr>iT#A^m7AJ{pR2;}UD#LV&BY3H1jX=1}=bYVXvJ%H`5fQRH
zdAR*8s-ys6p|q6YiE9&cD{4B{=Im1|dHM3)uEp-+8bxfQxoN<4&(mRX87(oEjv9@a
z7?W!()|CFJho!Y#IX_4XKhM_voY!^Xfu#BXLa5;ZO{<T$#a8^hHc(&K^Wi7<hRQ37
z>EiFh1L=xBRllXa=(j2vDsSU&t6zujo1yU#E?eku_zCWz@Uw+ey}1w=l(~3c=T~eP
z^#4KUbi~)BI%z+hNXkjBRH4nbRCkW^&Y+V;AV_`(Jl2ZdG>tbxk%$SbP9C}RH_I(X
zJ;^$&LhzWgR~$7JUx_QCoVqLOYh$^ly(<28t_=Q@mSZaj-f$ij{Z6cIPsC<Ji2ZbH
zI%!_xbse=nRuwz1AK+coHmdv+)>mf9uJ)7TG~yx%!HSSi7!j;TR?v4Tp38uvEe9My
zq*3F-KN{uy2L-eWRI-4vsO41_Vwmw&d%?727uJ%sv%d34-va?pu<aHwc0$oN&~kp5
zKE?vDu@nq}bR1IYEyUrO!jVlYOpEo=AbO!NN9&SCNGoHrHkI0MDo#q0`)e(MP7e3O
z#QNi8g2o>=Uff%T0rPOb-VcngFyk@U?$G5lBh_6(Ixmh%<H^*aRTs~;{nDe4E!Ze!
z$r0vna@{X?c9#oySbcRy-Yz@LbXoyjf5KsnPbp96tK??4u??hs1to7t2qvoi5*jyR
zzdvXq_u6hWmBLWSt~+J=0oe%%Em&I@f5tJHf0nzr;QnVkB3eY@JVt~M1tYC!<zV))
z!TmlQH8INf+Fcq#_ZUw{wB)H<Z$+HCxipDLG>B*ydy7DE)}i=<rZ;tV*Uj{q(kro1
z;d|YgGo@zetO&{0jKU<ryD`oFw&ChYh<X4PyyktnL-llcTE0}#^}`Zjju~cr?g_jK
znF^eDtSjBeo_~?FamZj6k`scHnAR$|M3OuX)i{oPWz|IXy)sZ-1QXn;!7|g4ozVnN
zV9YJJc9^w^!;={0dr=Hg<WNRv4$Co&^v5ZIx$Ee0xGW=&%9`#oLx8=^PLG~V_I_DD
z@xfSh)4s;)&8tp(jt`qLy_+C)cfqFNQ=y-1Id)_9w$@iiSmH{BFr&pJYm2ihK!~A%
zbH6#MV>^mRG>(99*X}0l8XeOvL;P)1Kx(BiGFf4Vu&Xc!WN{rui_2OJY3m~^=!1#o
z;-@r)oF8UahGjU;ia_X@&ngtxR&&Ogxdtx0tInA`oQC-Kaj6GhujqEtJ*KFQsLYCW
zW_=l@k{w@k{}g3h`b8uo9ekb#odS*q;olO0K`8;;7O`tf_*K-U_35zrIaamUG1)x-
zcGlK2?zHA$W4TE!XTwIOTimG~u(Jc%TZQ~a%<)n^Nn>R^H@Abig%^T`73jf($8Nl4
zf;c^0@5CrJen9WiyjI~})1}j^BlC_`y^jv^##sZ#W?H6g5o8va!Z&(LRlaOQ>DqcT
z1M8qLl@+4?itAV2n<O`S3$Ko(Cd7#l!Eq#693JcN3tG!|#p^uwmK(IzG>71_Zl84z
zjz68~9tb*+sRM6xAF|xI59wDK3N>4R+jf$!vowaqX0t)H_D7bSGdW8UD(w~*C$zmN
z^_gR9LYyOG@uhqZNCvGAGNz?xhe`^UCnU+1TRNu)HFyH_-7eqIq4{k1*vrtdxbNsB
zwHAE@7_pGT(C5(vMY^NDQ4Wo;w}!fZ7IjaWT!;e6_;M)C@m95M^#YF34+}Ia#VpPx
zb??o49*Z9q!<|TbrmM&RC6wzdD>_v+c68d-03YeIl0+9Kw}vk!kCgn_%T79rNlIEY
z;v6Jx$%j9RBD?>1l>^RnokDcPg^(aR*%}bAPqG0l20{Q=v(d0SDEj3_q92vXm-8c_
zUA$Cj?539TJ7nfx25I)a9Wf!cp#$IWOf7Lu!RG<T27OI(XCujGeYneT9p<x8(X^^J
zN|oJ68)+B^5z9@v02d=(CM<24uC?-Vr~ncznweQvm<>M;UoTqTR+NA=u*c3$mEaxV
z@6b^_BLROP`LOdbt=T-TJWw^-`PqL_#k4la_`m-ak^XUEFc!n%MqT|7YGbYy#AZ>&
zaN?D|kMmf?OF63~8G<x$S$;woS@E|)A)xj9Y;DF`B`D|bhWZL3$n7rb3LCSh7S_T?
zR$!Q^)hYt0qT5#DT@MGkHaLtW4b-WDD3rA!9w{q?g?B%VCyK$+u0FPh!+ZjJvNfMV
z32A%g>V@SiEqR_<sS$FcJeyrGu~F9V*LQZA%V>S<M#_6yFq2h>T%w+wCOQXLA}aKP
zFRc)VXldT9V7W#Yu45R5_ld4UlEEW>2OjWuJht>fr=9pIra$;3$L^{!AJO0>_hCtO
zPz~CfG98J;Pz|VE{vU2K7D_yH%N>CX3e}&WK(6!XKuNn`9v<IvULHL*SywwegF?LG
z^m991Y1rb$@fUKnR-(o6*BGQ67umB>580p==SDbb3!2pTx?m>5`Q;_6xzUR-SZ!!O
ztCw`?TtSh$xL>rOS)B-B!Xqe#%WA}ee&(1_My$k1$nh-4zP_`pQhQ>Rq8m4<sD3iz
z=UTN$b*-ue654SX=L%o8DB7FjES+u{E5u?o2_%27R-VFv`+H=Lpb$Ta0`@;%;xwa6
zHr^u~<=TDoj`Q$Btk}Y<cx;q`;7Z*Oh7O;U*NO$BJNY+SgxP;htZW;;TVgV?!oAW=
z#H+w8ABh$<tr99!C>M^a2?^!<5apr1*Uwrnfm5&XKVIy&JN5Q{yWZMsg-<0l!9S}$
zFWCzA<v&F)^$|pGG=3A3%3T_6*QTP2nW+8@$i46UN%h;+@6hEw%CFPpD`|JBB%-Hf
zp0uY0sxr~eJua^EG-(x6L|-w61xAtN#m?&;VQ<Ts^;>G-fZNn-GBeK%BFa);xy+Un
zG`!fqtUxhW)-L}q#c=lT|Mzk7dHC=D&p+~O(rzz@1^w|6*Z-_cL3!|Fja4$hh0e)x
zIGq+i^*^?mE36Y`EpP?G%W6AUz}MYS>mu+}NJdK|(0jyN6zg5HeJb)gx^mss$?6~k
zpB@`gqLV9l<?znX`a&BFP4Ey$FuJ52KO8^kz`Om~ohNWctSeR9DyB9`XND{ZvXA{x
zOJqScp{y4WS$t*#e4-@L+rKibywUcegOVH?YK=PwlJ+P}|8fC}YNTvaYs?E86}XzM
zIG%1NM_NRKn_KI??Lu={{0S(BwC9^!Q7_>5*Q(bk7tn<N=qWwoh(V`)-c`EBPW$Yq
z_8B0Z-PT_C=|lflUqzJ`jUlkEKl!!Iv(Jye_en2jVz%|~{c_SdXZ-47t5J(M3te3=
zy=1MXrR7QRS>SE;tR6a$G#ZU(YA-aF9#xtcJUWhGba4axYHp=Qp94;?EB}(Vp257>
z_3xwSF6gKZpRHPd1Aa+NNL5tjj%5lBdgF1GF;XOgD>$msxP(YHrEAZEbmfjc(=29^
zQHIK|uuMr7KI|ZSr#T0O(M!qk4#cH6AA>#X62Z2CoW^trG=~!8F{#gZraY+&wV8zU
z6EzK~>wks=p$8@|=qQ+{fPz^uhqh|*8Y%})=YDvDRJCahp}^5SFu`d~a=djlB@?iq
zyPrNE7jsXyy2_`+Nl^@iJG6@3_ZZRIT&ul<&&S`61d&D0ynb0n7H{XYdDgml=V@H1
z>th0s)v(@p^YzQx>zAR<ynOOvm!^16d8X(BhW`ihoo|<HmJG>Kvebfn=H@sq4O?xd
zV3RNl4TuCO*DMhbH!uNa^QT&g1o0jzArK{&M}g{?tc3Q-G>b@sMUBQysYY3E+#St_
z-BDpG%0fOw%{|{QcI&(~b;g(oH|#)Kk22&Rtekl^D0to@k70I~3&9*`Ie<1v$ndj1
z{lDFAN%vEu??cp&hK+vBSb!A?ru0O-39YtayVc!0IPRXFcUvb%r{;PixxOy-l(kN3
zTPnrjyy=b!lUSXiT0Dm}J2o20q1MN<OFAjjdyDBijVA1l0h6gQnVaPkYv=ZkyGJL-
z=W@du=rfLgMsF2=43f54J}}XUx>97dHsbwcxipY0w5V82-S%sjFY??3RxnI#Oe(gb
zXtyLWanMJ1n2-rZ))cqR?EM-q#mO0^cc^R%sf06_Ub0Pvgj;i@byCKIj1V&H-Gfll
zh48`i6Ri-yPn4Dr$ckY|p;K3dGyU2-1GA)*Eq%moVpK#w@%%rt8%m9rXL^9y1+YY}
z5tV)gFj&<<%lK#IO)CPf+qK9nu1Pi~O+17SW47DBoVL#nj@rlP&BLmv!2Ba9&M7El
zX`PMwcxeRW>>TkE*`=ixlS;_;yf=QVrK-A;nC6)}j!YWFige2L?AN<GX4$0#3@U(=
zpT3I7h-w#e42>p$f2_fdYMs!dPICHf?+|QuzwRBL?1>e1cJNd4ysaN`_Fjm1=tWR2
z#aJX{qV9-i(=t^i)dBu;|JPINk4Y(ZxVlf-{qWVpH8`-;y1V@2c+BH9M<kx8742i6
zjAYLG-NF%eW(hTjFI_h3%Vh|P*;AXm&5Ge*E7>@1pLbf#)AojSwE|xbWMGlCBx#j$
z<`_U?=)fo~YVD*Q3Q0DMzndNP?Qd?um)MAG2`@bSjBC0*lPV)TavhX1`-!%HojIR|
zPEQD5h`?esnL1nx4h>VBLEoXkJ@;$a=Nfy^UaU!**StSutPSGqRqkiZTyLzT!3`en
zQx$0AfRx};pmdI{z<Ff+YCPB4Tf~Q%V{K?{JQ9JC{zxIo+25CyyXFm=sPfEd?Vl~v
z+8bF0lf_$AQJwJfbF|b_A_7xtn5aWg?)>LC`EB<lO2{X>+dJDq?c`t&3;_(ovMiua
zPe}(F2rD}ity>u0wu6wx*J!6Z?XZT?%KDGa&B=B1*oTn*PV-fL81%^j4_dDj)1toT
z7s<2oil+LRXz4qz<w_^px3=<;i-kwLj1&!E=e3aQxPbG$B^lv4XE-3|Qwzj%G7A@(
zvf{!d1Q=}t%z!il-maXv-`oTW6SX**1vaVtgO1=m68QDJM)awr<|EM5Y_@)C*Rfdj
z?Kdy2;9BL5tkLdFM|9d?b=@Z)(#zq;{uL?p`FzB#r>LN%l-BVUU%q&uX+V6jTxU~S
zkD_$OwG|b*JZ5f*u~V{CxSVJe?H~zYLZ+fobl6|XCV1Hr^sksPeVGjCycm&;{!(D2
zK9EGA|9+fi1El%Wb@1bZdwUr6_K5cOtK?JGtL*Kj5P3`TFX@!GASM|@pvDj{u{<wG
z4PhU?&HDDc`itF{uWZ(jm<lX88I~pV;^QnECP&%TERAP4%7xZM)Avc6uasv+@AvW<
zgSJX19L1K#?~+Y3yy$zn01Ma8h3caeEMd)<$;n&=ttUVGA6HUhIjO{0RySTuE_*`~
zD4o36J%$d30<!31Nis5`(qOyKyoww~xZ$GN>Aj=h&zi^k-ARG$!S}-RmL{a0&1adS
zFu=-~PK&vLMU>YW<t>@>Ptvl-%2NX()u>;?0;Ow;wNcP>%Rth4baDe<4Chklj*Gj`
zQoZK*Fc#DNG9L%5s=EaD4o<`a1l&)gu4huGPs3VVoKMphnAk67z8J)^h2xaC!-kwt
zN?kZT`{$i^FW*Uo{(|;P;4Kr<sjK3awG@Xi(3Ns|8Am-?o`Qh*KJ@ozvI+MOjz8=9
zsw}w2eVP*_hm%3yDcnfl+H)2yv#XNlj;>j{)Xi->G<P?TG>|x7unNh!Z9d~h<;;`i
z&9U@;6j=I2bZV@UZ&*OCL)D)N*FVu}(kf<^A<oy4ZNxHMQ#5#L@j2UNo}WUp0ml91
z6~FDrzwmo7I85HHQDLGipsANeYAwa==|8xM!0`qiY|gymeXb5MQV)k&qp@zZsuacc
zB(DLOt0bOYBA_0b6XuX`qs~remuEXLIt2FU(z=!Uj*NtU%$ugN9XgQ~#M96^X9DXx
zz<Z#%*%7!uyUR_u$2X(VCvHiy_q@z1gOvxcEWBr;ueM~h<4q@5a%ssytcD}#oK5SY
zES?$6)bHyk+l5nH`FP5x%ZzM3u22o?1tXj1GFT${-`00tzlo^b{6cv7;?=9QiX0SS
zUR3e)fcPod%o|ywmV8jtnLlh?{YVlsO<K*)c^9<B728ttZW)=VXd4!0(?l^hQ69)c
zSzJ|j#$o$&v-PVw(z~sb<KuSgJjU^hf-DZ}fDzTH)u5PHQ&8Zc9tdfLdLcDBL^VD$
zB>p$D#fS7yar8{_>_7@cPKL!jOTJLYFc0d-vYPvlZoZ*>Z5vY8faJDR)1zH5tyGX3
zJ(i|*;e7p~?`d_FFz(0;5RFvhg@VV_dz>bt8=hq2i9OP3#5PVtJp0so_2%VkR0|X9
z-k-3LJ%_P%S)~3^0q@2<6A}&E`Il2NW2G|6t&-i}t8yCA-Etoqv?g?fXY;Wz+L&@j
z(`fgnCWd4ROcW**Y)WbBHqB>7Tag;0{S|G&LN`OMMUdGtux>P%`1qD2HKMRq|5U#m
zteLP>J@HH^6%sPE0)kF>%si^$UMZPdZItU^3FoC06+&Ox`9YeQ-QV$;Z#XBH1#>=D
zZ^5iE_fLqy(rz6yVHME!5ja4={pm#}OpEMLEVKr;vjFG?Y^(X$j%VG3y}eOnkYrj`
zox!edQ6n@`try7(R%Ql;a%?A;A{euU8C$44(@0K(ZJuS$fE_;)2>3k+_S}iW);e`U
zLJ)3o&@D}i>r6Tk%33F#)341|<c|^A@0jSY;l&;uAfL*E|E3r;D(Xy7CUj}Poqu}!
zG%SoC;<K!-)_Qe5kf;(n@!culo;$(3FPuz{)W6`wg-*A5czE)2_uFx&`KfK<{H%T4
z{(N$N&^$jlQH~W^U@VT3l_Wh<^ho5U%)AmY1}xOz){ElN*XULXwKAd^UsWh)D;!ub
zvke7T9TmGFRdWcN=)RasE7!o$-x?P%JZxMX&(@-iS`TMhf-(7!T~9xb$tomWhr}>x
ztB5MWY^)`r*zD>`44;fzf~$>lCsx!N3aGJf>=6xsg`n$LwP!{E%iUpTT`p`d(~^(1
zCV{Ml-1M}!=Yh>43K3V|od)_5EzD%yrQOX^KfGI;S~IZsM%tvj&v9sNkcnu@LOrVL
zl+YIIv*Wy4`ddI2kxwML8l;^~bC_%8_CShBQlp3C$F&-zZsu0Z2q*?XOdTHT13qFP
zM&L(Ij_yK$0`h3lG+ICEY2FWL$JS8?a&@Qc$#iFOsc7aATfWSUN*_o$D)uOR_{%n2
z+I&?>OG02GSLH=^YXc9Y@%p4(F_JjNcCp<?E}3kYf1Se*c$nToSO4%k{`GN?U(XwZ
z>q?cSI_it${aIau+hv4KUaXa?gqdud53(DY^pV~5`fP4w{(XJ4S|Ii*NhbCBFz<ob
zvIsduhX;H62WMUZ4X?qL<T|=>p^%mPR5KDBHz9Rna@ki5#pG3w==|hD2iIDh!@EHb
zZq$;9;xpNJJ};-w>GRhwH&o_@T*LC7w&h5~_Nob}g@T|HkkCn-{jap*qx<9=YU5PF
z(;@5AiCTr*bNlWsm!4xfC>Nw@a+4QBBQcWq|ML3XcJj9IuCcSLTySFxXo=NB>YcTU
z$QzP0G`0l?-ve}0HLWD5^pVu&S7e`-*I@t|Q$Zf>?<(RqBzr0i6!%&PN-V!lg?}~I
z#UukQDSZWhsqy*isj%1$oXHh^Pn^`%R{E71;<scGj#0Rq`U55#<$Yq7xtZ4RRNl*o
z=?H^rp0epu&P4ZSw%&ozB0tqYiH+Wzqul>8*v)JC?%?0LmBL?z4mRi_DC!<5rLd`i
zfm^Rc@zpUO=eubsKwtXrF8#X-Up3hm{ZLx9FYKv`BM4jin66t~%OuHW2#rM;{WJ+s
zL{vYyvYvjPXB?6Gfc%H@<K^}Ewn5i+#XlV>(=i_=-H~}zoY?$SI4SIJRhn8n;^I4>
zISsJ*YY={}Ulo06C!0oeTXU@&3@v}6wrx7TXLVh5_#i1#ahhqb9H*S#(BOYAiUBE;
z)UOYN+tKar$9#M-O-c0{C<=5XQ6CEcafFuH@WQxH;u(l?&5Zo9GHB^V*pSI)Dygp!
z0&vSt^MT%|?=dw@LP<mCA}sL3s$)qv+F&5M%)NU`)SIg$UvX+(+-11+lU7p?kU9d#
z^-l+<osjgZd6M(eq&<KAsA)b<2D4$g(^W)!mwMYRE=be-TUS{#Hn+rza;8uGLt^_z
ztYONUQ*{cA0)z#$57dny0wQCNxIkZpl!Jf5{v{6{GS+`k^BPjT&1N%BW>xAIoR5TA
zBE|sta!m-<H1vnjT$M(KBO;lG7Bn2|1$Ha^DYK|XLEI@&!!yu599S92#hhWeXeQIa
z*x(f)n@34}C3GFQb+sP!C}kowbg|4L^B9br%2St)1L0Y$lywR*fqeiv*2)V|z<{YK
z5vJP~u*eOEbTu1HcewVr5~SIA@#d`sY0iosJpI|_Wi}k8<1trm>f;3X1(tK%W<2}j
zzb5~|C8mVuus3~2gp4Jwf1+_rokqG7Q7EVIp6RyCj2IJ%ZsHI3{AG3#;ghJW^|>yi
z3QR|$0Q=?OI>F22wqTF#Hq+PlPdfT_b$eMbl0S^cvtn<l>SbQl3k!CLQo|fM9P6OP
zoM&C2k?0f#!rRD@2$w3C72pcGHXeq1jPhB~4yFV9lG@nW-cD#*rU7qKS^PKueT)A!
z%O>nflk(vJW7U5gm6zQsk`URnfe*UFY^=9)%rU<JDc8cB5#L71Ui_u)`fkgwja5C;
zD9AXbs|DuEV;_pyD6i(TL2)}~10<k~_Q9M^jY5H@i-`YKAEi0$NV$CJ-tDFHL0P$g
zp{VROUNv4eeux-Pe>)i7r^!hp`EWD61gQ7pC7N0vm%R>g*&#LYDmgB05)9t&JVn%1
zy(Csqfks%D4KJosDmq>8+xwB@a7Glaef8?qR$|qMmDR3Cl3v0yq2hb=Ryb`cosjjN
znkQ!<=)0(l&-eIb*aP;W{v$49puw~Q^D#3Fe}`uzI7Orh`smrBV<fmc9$cB<!^&JI
z95NR;NVGJpj=-&RlXCpi@eaI~xlBhKld7r8${Ssn52QPD8Ubxq)7TpDuH)zz7n@Qa
zek=LWJ^)H%E16l~+2I$`5*!}NUMx#1RN)NVX++Dv{pPKotkbj@7RhJC?vfAuj|Tta
zV{<^8aXxCazEo7t-uzN6@(TG2c<qlm-9VJ=dY2S=g=bX=S1oYEc6(&9TO<y*WkiLM
zk7W?5Igy-Z>`)d$FUXabEL1CE5Za8!{Oa9~jro9XOw!FuGB2mlkv||eRR8gDUN-XH
z$j_}@dyM}7Hb!!OnGQR`MU5S@cXX=%VpbBlE3D7rd#V`c0Mc-TA{9)CbG3BN&kl}1
zYszSL=bmVB@{~sV%npVKH_nAhhWe(3@j4D>CFqbgu96ly-)C82uQ4VR#dxyHVYsl|
z3s){gzvHZkg__(&P_Xlv2_Lr7Oe4F=)*?Vpnct61J2-2gM?=n8=-NQ5n4*Y`N;pyw
zkw6(z(kJzT^~i)oI-i==IR%(9DvClcrduB#u<|{S`79ICDJ-U|VrXhosJE%EE_QM~
z`@fE#nWsuT9-XUnl241|!|&sg|6H{lnd<E-yEEqy8Z*Dnl*VKuIHJRHm1lDr#B|#8
zS@fU;{PxjSJ_c)b-q%l9kfC}a{t;yluSKv{n{djbvGLR+L2*5-Q~2Optx%TxhUQ~z
zOihuAwn(SeN1@NLIRd3t5LZl6#LHM~C*_(z!GOUM+K1dZQbD@HlqOAv)}DTS<l*}G
zou1f!ll+xVPkeoxnvNo781kis+L0?#tMAk@>?<Iws%H1L{%V^vyXC&sk}CX7YGKp4
z*O2~smU<DDwix!+M9LL@o9f8JdNFnImxIHIbF-Im*&P^7w3SqXRKXDLutZA4><We^
zJb_azRRh)cc&V~dZ~GyaC=v-JgmhEqm{RXUZ<t>O7DXW#;s?ACkSK`(|KTDs#Vt&e
zLK;Q#q2zykoZ(*;-7ltTWh{sIqA!9ekg7`?8<-3HDo%UVrvJ06W&%SV@UcX&yBIR_
zO+FoFx7c0|SU87&F7`=lDkwA`XKzdIla08tSpD}28Bt4RUH^L8{MyzOnk?{0)%QJh
zCQ2OW@~;<5S3ZWVsMI%;7SzpMi@+oUGMg5Os@>PQvWC)w`>~UmQtMSQLIH3(K`&6(
zVA_>B9x%eJDYA)@=DeJd;zsK~O+Q}IZ804$Y5uX7{+FZE)1-6WJUhq9iDJ0c=;;+1
z6O-gL%_d}FO!!|Pp#b*EK?QUg5%9|h>+CwR6dT3Ylgj+9)3#CttuM{v&+YEsx6h8s
z^{Y)K8*dHvS*T!h07*@J4U6?%BfkcE@yx2zvIhb-Q6QaRQav%*f{<mBzNj)5@0Co`
z3T_2JP5O-B4K&hbr6lQ&oDOrYDXSP`(io)~cEd5P%mObON$6aY63TlztWXSMhxUDA
z6&CnGv3(W9c23XiyrTUyf!KZ<tH7-2TjBr+*`3`Gw)#Hyf;wjnvZ0YOer1cNyfexA
zP`ISxv0C!6?fdq%Z_U%Q<ezt5zj+t;LAX#e;ik)NdzUY|<@9FS5NGyaNB^Za2D@-e
z#jd{~jkDYOx!XECKJR{MlYQ3Rt3`;#Mx%jWbbju3&VD-U(mz8@!}OA@u4xKfUOJdx
zdSa%5HMQ>K+rDfHJ~Cy78Z?)X<T*zv=VM?!q{%@sC#h67qrk*8IvmvxG!{<O7l+&k
zw69aGgva{?m-{fim-65o9j}D?owzA_^}Y56DALJtM=W8rQ?N(&f<5rLgetj+S`Q(S
zSw1y47U%5Iq>}g)^ojaY#|C#JD+2$&o2B=SzURYMOZ7f*H;^5g&&#CKzhd|NVqFME
zesFFD!ZstiGojR4x_UinvP}tdvOBYSx2#rO;3B6Uera~TbibYMH_zM2=4kL@x6455
zapTIl{jC*uOvTR+cJnw^gL2x)fB}0{qi=f%LSyfJZ1NfE1LpfMLvdBB)tU9D$RyFQ
zkiY{1FOU{GoD7Sc?-WN}&`k#0pEq;o<j`2~Z&Szw8;8o>-ncs^;YQ~ss*TN(&Rt1r
zEJ%q^Nd_&g2edM!DW!sy;<8I)5VG5w+Q6$QV&~a-K6(})-FwH~L4JdYqJGd{G)<y5
z7vnm8x8EiaZ?BSsTi-DOTwhi9s_L0&WtQN*Q5F|7Rn9i3X8>I~8>^Jx165caAPvmU
zNxx_4f5{LFL^rs^B9eKEa`{4bT9{9C-R*VulUby1E?%UE1!-iovr!H$OTK3J(B0hB
zXFxdT#qA~%?OtO*KseH*eg3pN>W+#*H=RzIduhV?FbdSI@X&vm(@G`3(%E%&_-?|?
zkirii5pqYg^h2cKa<;0dCvg-iP>Sk0Imnnr8dIhe>T5kLF6p7i0;5v)5E0hpPH7<g
zO!+K9xyUqrSJ{y5-k(WYI!6J%fyrGqDrtvaGDdZ+sxB5X3yzCf2<@uVO;pNyKLz;1
zvwK9JbVc<aG85*1vd~`h{QT@-?;8m!L#zc8Jl;Q1kudhPoc~I?6#WF~zT{|6TrUy_
zq)*j%z>Y2fys@K3lcn{}@wOc+=Nw~}R3GmM#aRlvR`;@c0@iKll}gHGP*SeontV$K
z=YB~^q0!uOidRQe5hRjkcUGrJLQI_aRgCi4%m@xr*nrZR5K&W!%5wo=gz~%OTsA`{
z2bv6n=NAC?EjnkYq|~Pg!u|q9Mj{!{n=yoZcWV_bVhxuatev}fWTGqxjb1Lzs=8HW
zmnm0u+}viM#hqzhmUbQGMxWB%?YHlCyt{ubvgBksi-7G6rWO;BgFSKLC^(&>ZPDe>
zco$p1IZ@<!zDc4s7FBxwN<%#yZsO%rE10A9QAuSGkt*n13eIQKEUro<=4_x`*P$KG
zXMZGrO|vm>+*;C}=GUa{Can|_pHAzfSV%F}sP;lpDCPkeWm8lRM$G%YOM=V+Z4)7S
zimiS1?Mrao5(ZmM2bKp{vceX)Hd$`<mZn^+I09>FT7c9FvZ#H_2t_%($k`fs)C*1s
zmgqjBxy+=IPdJ)5rQ3un8!54Y89X%HmDAwU?HE3~gn<oNIom$5B+E~l?NbRO$_>ui
z=WP)xW0|*EgO6~dlwnwEVL&OS9~Pim5hX_XoSzL5HDF0_$;B+h(<{$E>wIZ;_YXd|
z$r3oEo9Fz?vt$#hk*aJ+_++bW>332KU0TsR7>vG`(FHozd^2oWVTFd0hqQnPdO3}P
zqR$4sXZX1W!nn*v>CQdihcO;{d^5OY&~6<aGBsQ#O!{x3$ppKNdW9Fbsq?*&0;@(0
z=aO8mkgAZ?@9Kl>#`gY!@qASHJ2sy{7-CTbWewR9)c<!;mFU=hM&4EEnvlAOXVB1%
z+7xhS=SaJiI2Md~Y2)tg>+b89Jjc$J5rJ!D0mPBZ_f^s(t+;<x3lJ)$9-)S+t<0{b
zoO70%x=|OBI*C8HHbL6@RFd+dh92f<fvV&xi5^(-p>L=bgM~=T(FR$|e0gx?8uecY
z^#N1^U0pYbn&ol>_;u7NMA(OEJ}NbJZ6<Z13?ehWC&Q#Blf}3;z<Gy?T)fRB)0q=%
z0!3Wl46zQ`H6B)#6L#lQHhp6Dms}zlm>bLU#_dU?B;^@x@RpP<*d=|9{XFNMV=ta0
z%XH8NI7>~oM2**FqrT6U@TaqrqwdcqXZzi5_xJ=B4VPr=Zg<~x-*)%D9USg&xKUQ+
zogtgZj?zTV){tplVq<43)|5pZsMw0;?Og~?E!9k-&86E4SHC_hrCxCBa5)*)tmB9n
zO6O@|uB&u9z?w)YM&01zvk&p8d9a<pCOQS$^G45`A!;@6Q1O{=>Xv}TkJ5XsR>xP$
zAZHZLcvh(%{Q%q%(aTINh`N_z9YXKs_xDq&M{Va<Z4Ip~9w!+xDoPSg1PU`2<6lm>
z`s$5fDtHFj3z&MrXRFJVxvk|1^9&o=<lv{q8#SMRwwqB3&N)R~Qn|F0B!CwZX;!a*
z7S(_~kk1w(oT`8;p^4|@$3)e(YPsAs)070X97(Q4N~3*acO3gH=To<Pja6L16F<8H
zmNrLClMuX)nuS858PW33mpOAXTA!YkTEYS>V~ZqRu6940leLKZ;F(x8k`|iH+`WO&
zS=~TC_wLl?Ss#-It@kZNu251Kg`~_@8kgLPQvgL9az4wI7te18H10zw$hJ8{JVWfi
z&l!@4&##K<B=aM^XQy8P299a1a9QX&$yq2v;Sm;tt9oLWQYZ!qwg9`G4}k<jCC*hG
z#!|c{j6SN;$BJkKb%Q+M4tu##Yk5zIyR(!xx0m~px;W!Z%1?(M1ae~EC<~Qva?9Q?
znI{U2b?-e`uh0Q)OgDs1%jKBOZ<aozUdF|h6tZER#<Y8$T4^L-ao(xqjKcTY%i>d~
zz#wVHHDL1>@KqQkNH{y-!y-(J@1T{>N2lhFxg3gxG$@qz85p%ZGMh~yGNofQ`J+3N
zBWQ7RuF*(MS|ODZrsOam^^|Mu#O}H{nOuw7ZO||*g&y_2Qz7iqisdvPG;<qpEyLYs
z0C^lWckt6BCY>u}7=D=0-zENBz>i`0|7Do>Dj4~_gOfPdfec9;D*Dt-U-@koRUw&=
z{nIj#HDJeaI;*H%`J+(%X1mk9ou-p6T~AhHh(4N+qYo=6dOv~E@Y$!<ix=-+dSU^I
zG}Ow(oro4Dj}-7j7nUmcM4*l(2D2DsLkDAfbL)L{tLj<_Z-sIP0O-glXYn;1em*(V
zC&Oe$UtLP0;(Fo?1TBpaev@oAO>P`8tMf%p+Ka{^=+)Fq_ba*mj>prP6kfoOy1o1E
z$=+Y_DtkrAPwRE2Wbz9RvVgUWJiY9J*6WqC)XGS=FPL<)>Mx7O=ifwa>y){JG#c8Y
zE?W^yPWw(0nyg<0NZ5@_r$~2MM2Uz#MOET2HTLT+c>3w5!_P?K@0_0l>12_`RblI7
zQxFn#^)UB118pRIL#1B`qDVdLTdr_6XUsdU<Dx$smIc&CMsH=BiXk5EgS}P)H@N(u
zthO{Lx^Oj>jR_+Or}MG${<-^!rDuy;G0M$ZQ6!uApnGz9zGclxbv(&pVw;<tjw~Df
z4b@kl&DkD5)tU=3nm7u=)EJVYklkiFlH>ia+y!e(t4xK-ps7DRJb_mgR7#b8YXZy^
zisL8?C8qAHgMii%a1KVvI+i7=_em7id*uMrS*w0}+3!2a`>LPw5BwYYq91=_oiN+C
zuP#{Xw?3kaq?QmpQkNoQI>3TG?k{$&3zqw14O=3sMgn^|{r@iB-sq#*07H_r^@tan
zr;+y1)|x)TJEZ9uQj?oOSeBYtU3xOr#$>AMc(jzMxdZ77@lEpz9ydEjN$cd(C(VSb
zE)@yxTJrOkgR{falM^BJZ=HTS*pDo6)7$h!py6s8)@d%79GGh1ft!M?mbq=OcSaXW
zJDB-zg>{#+GD`)il+TNPIf-I=S+^(~SEd#TJW)5DXI*_Ar}K;CLw13bEV_d4Dgcm>
z$zDl1BBgTfTnbebm6Y-k03xouS1(_y@M(JFNN|+~kD3;fDN|@fnx)()j3rPNiq%SK
z=%m#-jfnVJ0SP8=(-Xz$HPk_Mmv{&(yu~~b1MiK#X5kI0J4de=I6)FxR4X<V0A35>
zc~Z#ZB7{6Hfy;Q8oX{5C-QIo^-ywD!dh<&w+VH1jPx2Q9Mi4R>kv3Fva(cInG7;>l
zeF5~)w76S5q-ll12}<nZPf3Ov@@$1^g0-}6zlZxkwF<0n!2~<<tv!nY<mu~|3uk7P
zPh>egZsnw9VbU%zX*)}k#-se=aUR%$SEPPgwhgn=0ddZGreb|C4N%}QFf&Z%Yr)&5
ziGyfml$xGFKeDuBuX)1NNM5{r6P2XU9mA=HqtSdUCykfDJ?Qa1suHy@4uqtGT0gvL
z<MroihU{wC=yML)#fCXnv%1chQpq&nWDHdkgyGt1I9(!X5qZ`#d8z`QB3%}+uURqV
z9R#A&f`vdd%<`UQ>rQ;&1yC}$>&-Yr2!b|dR!b^f;*&g<Kx}np3_w+x8L8MQhLhBH
z5WEacfrhl+)L*`P=WI<YX`fr+hLPKw0fXXP^f*&Fi&+ZZiyC6!S%a<8eVM#$>;|T?
zE#=h2Lgh?5Yd!fo2We12I_h2W;hO&OamxQ_^s*moiIB&CNvAXBbDRvWKF(+0!lK)d
z<a{x`Y|O8JG)<s-Vobr)dMGbnZNG67H#ir}w6bd@ik1nJ``EWHTIl6kQBH}dU`~k>
zQCV>n9qQj!q<AI0*~C#zF0R}3KCbnVTx6Q#%Czn=3feqlM&4%eh6^vqQE__0;g<!<
zi=16jD|=FDm`Qm6Jkvxj<ri}54lnT;l_AL<9B!rD&$-g?Rtf?wAib?xVHwI5%9}kn
z;uN7{=iVYEAiYF-w2dJ^-Ao`weu{BXnJ3|0@27F~f_P2~J9G4Osc||ZLtoloN;*}+
zNd_+Ub8u3hN31a(W8hlSi^>HE4r4@fpzu|qq#0+M6vE3W-BtU}`y55g1tFw`vj<NA
zZHUeEn5F(dtM>fQsy+X+YR^+%`#-Dp{LiXA|L3aOvzp99UC1h;+q-7=+>=r`zMQiY
zDkx+>wf^)caUHCsi6vQk$uV+C=Ev$GnTq+crm3q05x9cn?Yu%HxKjItZ5CIg0c2wq
zxoaFGEc5|%?9(aVxsn^Zt*WosLs8iqrCMdmcn!ufvTH3-b%%`j?2pW8BzCs{lM!JY
zd~P#8h&Uf<r2p|R_-ak|7Oj9kM0=cO!)b^2GwRpplr-O2<QfgDhb{A!E-ZL2JoN&F
z78z$NVe?MAy$>QY3y95TllRY`-`?Ifu5+&V*SMZO$DhyXH-qQDmlOV@n~g6U^pD8V
zj%v}|+H!47wjOt0??%F%<Xacs<DU=CzjW~!iSt&s^Q9?Y|0PK_@F_|@Zd4xH|I+U6
zcRH&c#6$FToxZL={O|*BwTJ2J2OsVtC+VSwoBLm)2URUAKp~!wKoikl@BlDij5BJT
zg1izk_4_?Xn4V`=1XigKIfIgj{U&O#0)Dk2X(A6%yi7PHlV=*?!%}*!i?0Wr=4y<(
zA6o$j;ec3_T@G?tt5PXyA}^g5B;4poL@sNj6zO-Rl)b8u&d?qY<%Jm`z;Z!H5=vN;
z<o(1P!YH`|MVESUDeTbEuWHHS&dxY}yOEOu0t56pjO*vyFWx1aCyk`p&-4B$`-7&t
zk$j$KQ))q;{%fOt+DJNCevu(DZUZ{ao=nF7o4r3>Z{*0bMA6@=r|@ES7r-b0oMKWa
zq!T2Fh(L-{6O52lx;khF;3QoH+>vmA45;h8&3%S`fqJpK*B;Ew9UvIWs=Cv6vb!>a
z0NmW%+=e}@z1D>vjL(ZP{2mv;@UFH$d(IL(8UkKD#TQ0x>NcoFv=U@%TaDTw@&j69
zA+txDnTbj4c*UhWp`Yb_c|l?Ri@rm4CguERQu>V~0i>`&^ESax9siU9HCY+T-ZST1
z=$+wk0isVr4q6Pt)vL|2?r%_ouCoX!zd)+GQYuXUE$)l;(2roXn?{ht*{PL;5@wk=
z_+BSR$Fx)_0`-n@kvGsnTJ&j)l-!lK(Jd`t5M{}z2z7Dg+3X}<*Bjg!Z;y=xr`oGW
zPU*7F&lka^c)W%()TeXy-ecyiQZ8!7Iw7nkZLoqIaL!+(rrRh&qI!>;2=|&-w~YXb
z000c#%a)ua?6?&<5DR+;^f9B*L_6Cu^YNIE%DJO!UWIm4uJ1FN4#}qac57Q^e@?Ey
z_bP4cV?#Dz&yB}v?20&gQjCphid`PWCUDrx<H$%GM;Hr{2aH}xTr0e|`~r0R@svRR
zRvt{qz$~uL&qNDAaFG=#5Wo5Id#k=GY2_nRYvxjaX=8$ixPuz|#^InrK04{LoB{-q
zIK(|3TQ7NKv7o(8LY^{<!rWjrzHgJTp}@iBY#&=jmLQxv>LKUlYMW-(3xLMK&75e>
zmI6SYO}1z^xLGKhz+=zB2(G;Jg(SzEl)DQcAdZ?DDp3GUK(fEh>MedXk-sNSAeB&f
zK;DFTEQjEgw1C~v%70ULS_`R?NSi5un&C`v3g#sT2J?y5*J9eY!brbh=oxS%_nG1V
zn{rlq7d8f(%dBoF&g5q%3EEYTnYk~jLyK+90@KbU>`Kd4NTmMVib$f6m<+9&*VFR4
zS<Nwz3CtI47-}?605T(+n)O9Wp*evq>-q0vL~KlRcvH*N3?`|pCIybc3ulV!VMJYO
z=GRT@#Vo-XK5%i%Y><vd01N?mMcsg#Oip|E{V)BCPUq6sDsu&q0n$cRwxLh09&@Oc
zEk_)t?wqG?BM3v52vnrB#vXOuQ~n)Ru{wY5fwizwkiL!}Ux1dwbT(W}?s;u_yV@Ph
z+-J9+7#1<0QnrBt^OH(g__}Vl#m7N!^omUmPFKlwxBe+XrS+B-&=_i1%imABy(=ep
z>PlnuATMbvD!9k$vbMCLH?(lJupE&~33(C9)o;y}LitUd4-jfDsKsVzUt7SANbaPj
zUS2j2ULCyl6q`Qr<EoxTzolGz<x*%m7f{>aig4B2bjh6;dj~JJzlybF<THi|D$5R3
zC(36G<#Z>vksLk4eC@w@8Px-}5*jU&VAEeokL*MG{kBQc+5=4D;trZ)w)+Vt*%*7F
z1;W`{8bXM^&P{}ek2$*3$RHgyQ3spTRE7BncQmbTl2xyrR<k})sRSW-ywod>)ZtrP
zm!5Fts^CfGQs>ZrrUgX}9Me?H@3XYZ>3Y<?inJP$vn6;g%XY9mQHnxHNwozRQdGc1
z>HetSX<y8^Sm4J5B?a=yj~6b{?>=*%7#5Bt?qaDpk5sY(5$VD~0eCt4ZZ>eDDS3!x
zUzp%ZA=PBV3YRDOS<I`))j6y#7b3RgRYb>~OFNI`;bBl7Ihbj~9v=_B6T^z8r46!!
zfFlcq-_8z?BSh9lN9i1RW1+2<wdVS>E1fX{ltE%xrbn40gn97(iL=h~z6q<Y@Og%E
zYhiluiK={<kDdM!OCbfM@NM3#KeAlN3iD|ACDY1@Hm)#oTm=NdY;TZtn{pYLZ-DD5
zhHS>K^u&?wGXYXiz$MkBA3aUIk-pwCR|9-w(dcsNMn31criHmWHV&)iW21vtufDbT
z-#UU8yvIYDf1z@L69z@0x)exCO2G4zipHK%+M3p0z?`o~tfgb%Fgm{Va`gzcIMMmS
zHRVhpAvN`i){#H7_eLBRT6HdS&NjDFZEcEga!`5{^-ixY_#WNU!wdiFlF4H1JRldF
zS39ut@#Ng4{o02YhezF$?$s|rk?*S9jyvZ*<jMSx=qMhfS+g^s7xw4@GV}+?NJ^8H
zKjmeh;;WT!Mr4}1En^Y`I1YoI^ST4(P*lcgH4iz>9ItW&2gIQ-oBQ8BUrT+rKKz8e
z_po=?+H-7YC|OlyY{x$6lZTR<bL5MmmGeZe4qk0<ENow)(s<m0(5Yh@*!7Y*L5KZS
zd{1-r9K~KEk%0RN&e`!Sd4NRpCN41aCFC`bc(N~~R@%aAr@|xh9lB`zJES)5_YH~?
zcJcYa^8<T5|ABsrDZ+DY&{$*d6<Ajaz~_R5k_~6Q1v@VrcynxZ)XyW^>taOW<oxHL
zt0!{iU_DLRxg(s12Qp<BCDRNf+T9YXLat`KZV{MI_!xXR-Vx@S0~BhoVhKp$3oqKE
z#Z|9vx#aU92{@2FW?L2a)TlyqKd`C7A)<Ye#VpV={bUkP9a;#po7Z;3L>A${77B=v
zQ*zyCt9dQWY+bgWH&2gWY$=YIVF(60*Tc{%Ta$83zu8nHn9C74o6nMiRjR70NIHi*
zgsKLyIPD0>u+hXpYnKn}z1D6(=kt(w-#hWO++lSSKqGHpM<|iBO()%v!ja(13oVY!
zO3x)=1Yj^EYooUEY9n=?1@ca|rTfqLl4mQYw6DlpkWJ@@TyQRB`Wh|F8swVn(@|Z$
zzm>05#w`4e4~Stl+xu}<^R6DhoT~Arml+_m2zFp1V~&ovmPTvqY@u0@R}-58MHgnA
zhoHh;tw*?3R>-Eup7%T1$YZm?`7Y9ctZ)Zb^jc;dbXHr&iHf??GFQm{ovu7vDtsdj
zU=QQjFkx~tiTcPsGs<0<M{?#`EU6ng22j|}f)tKc6KFHRgyp0@yTj`B18nS8ML`o)
zSyp93s4X(3(FLlLJ*S#ZH7+;QP0^O6YW_-|B++@{J)L4250karRgc;S18*M;L5ulf
z#Xb;XDKMl&f8C4j_gXK!ri0~m*OHYVjT3r-Nj5+<WL7;EpC252yS>U!wCQ}Y3^nqj
z`0XIIOz9f7qcuE!pE8<{pkvJ^nb72r<uhGIH(WfdrzR$;r~(HXS<br;EK^y(P-5~i
z;xV5%Y<YXZ9k59k>5SiyXU2D3E^(d%D}G6%hC0QQ<Q_aQk^@;|CK(g?R;S$_&Eo6%
zR(XAEv^nScF%SW>h9To7Ebz^0h7&Ql%Raq{Yk7tfLG7-d*cz@GNXT3346QgG`Yk52
z(BN`(i51`=-m>U5H}lb!>r_}p4a!@oEdBOZ6w&|Yk;;I7mpCnzd<l1<fhiA(I=CgE
zo4OXpfvF;pf$hz8*o)b{yb1Bd6+aqaLv%n5jXTZf5{3>8dfT%$MXMaWe15YikG4yu
zH`S2a{j&QS|FtVhOLabOUdoBHUHa_-&W!s#`|-;?`f=yyi@n|b=grIZezSel{)(%1
zOIO)_{HCvyA518WFz2`~Ft0!lIxZZZsm(N*UpMFDqDiJ4ZFkM^L7Th3?(Y58ntz!~
zAXbTTglAsOJ0%zgDBhtlVG)fIN6Vn$4mx-ljadaLe0^{B(3Mi|QjUYdmUqtF)A6|B
zj_U3)?*Y80)8tG8*`voCo{&b7e36tKVennm-9d*91(~HlzRqUdXc3Q_oIRchVOt?7
z6EST3R1`+vCU_N{g78y(v3yv0B2Ph)SU4@JE4-u;?R~p1|Jav7^dt#p8*K-Ri?f;T
z++x<od>N1D%ckJ?-RTPnb4}$VmeER!aVwk8Tf@Bd`*eq+Pdj9t^Orl!iE@{=Zs(J+
z1^6V%3$TjoG}Ed*0$MrP5135;ldv4_#{cPfj-j^fFdb)CSJj<_ttHh(!i*A<LpEPZ
z;$HkD!1{{?Cs#<b{<1KxCp1RWm;v=EqpLV1Cd~J0A*KN>RHjgf6wcjjk%-GGU9diw
za)rsjIXwly_H0&gRYr;`TZA7<x-?9P2zEPu3d!kl|G9FL@%}@PxDGVS>8o2ZT1V<0
zRkF8i#VTJV+oDqF2I$_>&Y=g6&t^+g+~cBhVIY8cN`0v4Ob5gNr)sZaZ?g?xvpqMu
zIcKv;)ELEdlK;_Vi?Tg^k<1LiZ$NV~;vj25#2SYx^3I58BJuBeu)JfXKcZH7L^p-b
zPSWg71QWCLnrmXQ3oxvZE>}%iy&geE`su%>$qlNo-rmOJoJ;(YH6{6)?+JnJWCt`w
z)Np0#$3sMa#r9i!BqYOOb8jC<fGj;%EoOT{9cNTYgsh6A4<Iy-9>OK(9N06U#xPDM
z;fGt@Ui1ephjC06-k8oC8s`D+B%vxnARqeq!tqpJ{Tw9LD_>v(mUOlDR-=^D`0uo2
z%RlxauN&U9NY&y_Np=gWqlxOYM}Jh=6GUz0C#hB8Y35FXE&O<|H5!k%xUGd_o)=7Q
zzdsx$!!aX?M7Slpmk39t{+A2bI4thR-pe*l<QjTIuq`wRBmW7olIRP{P<M_`PWtZ;
z{|Bardf*bG<|m_m+)0tygL=xj<NkD}0vyg}6Fq6-qNdh1No(O3Xwg8~B@xt6)=A&m
zc&RzNkfKbDVhMN`DqRK5QF0AFcnNl;Yhb!wp*_-v;h#F2zc%-R0vm-Wlr!o2(OJOL
zn=B?xtND3gs32c;>1`km`g8V6!oiSzB5S1ev(UgtKYSlO-wi38$ok-DsY@H`b2<?>
zl(Q>?)F;%*_fHRh25A;8Aa-OJNNCC&x8SLB4v3pS(fQHe`uX7ZeVPxnh8zXapAnjM
zVv#scl_r=4iS(}>xKt8<_L{NY)0_p+Y}I<*boaJY&uLU8gIb6c?Aq4DYX>IJt;8=x
z$~ZdiojccUDszW(kBT{(^ZA0~kPmJwa|oBJ?khJZWG8S_T}G+w`aXIB`U5a7)zQAF
z@L#f-qB~%0RmNJ`b=vE8P`mPZpCQ5*hsVGbso81DfL>YLRVpYwoh`SKH?z#92+^Gq
z`YVu1$!Kji>1WMJIvNQwmV<{)HIU_U(2sH1SnA+A9L#$JzT+%v7E4!ykrmTjtmQ>>
z|J#?}Zm$aqJxXc*%VHki#nE~CKsNqmqWU>)uE^IgE=|?0N8Y-KO(Qys6&u;5=T7IK
zPJtGXh$4>Y)6oJphs7XzEZZZN#Z@xA&GK=6v!p}6+q?R$5&bQm##tHW{*ae+`i9KU
zsst|(Wx=qi@RX~i7fG2-D}lxI#5Q25IofQ5$VnP3Xc-U70ib+lWh#?U9}OE6tY0P|
zplN8OEUrK|W)^#AvZv%koW!$Ycv}v+i3-vLwd=)V0I>7a;MctVQgS<!CKA6iw|r|f
zbxsk`dMH$-dQFi5jiNUUI1Ws$G(q$ZQKmGYtt+?Z>A2^j@@A)5yHiaL_u_e8+@>@e
z?&8T}CN}HZT8^&L$o(PFQ)TrE@_VskxEB7i;2nh8^M8Km*Osini9odTRiEq$_?L(T
z0-a*{{wyzXO#pCg)D7kgcrAMolH_(oamp7PgIEcZi>7R=bP6~*=n0-yIhFp5hwv&;
z&5)q(-xg!PKmH1${}LWJ^~K-vfvRMxi~AtravYdbe%5cI3gKHgx4_`SxRBO#Xm&<H
zj{9_|*wdVC3tGk?%V#KnpgnH=VYTKc2*SDT!&V^=N&lLTRj<UD@&^k(+VSSwy-R0m
zO$CD^H;~a+^Mf-y3<3Cx6KPWkEv*MoZE{kldkF3b%=**gm(O>;&|kC(-RCp6xYjNQ
zG~HaxuV0%^5$s3<ox$dlj_NT)4^SI=|DR^Zbqu+j`SrWSD4(FB=carp%2)`M%_u4Q
zI>#F@D^fnSMHCx18v`LJB~&h)?Q9M@Vj#YB-04{xPrW-Ove7KC+M_kdX4Irk@A<12
zuZQ$FO2Syu>2oZ^vqT#Rwq;!HVOe4w!D23apcwDO*Z{<;VoOC-b3!HoQM`hR-;k!r
z$Y>I3nH&y5SNq)8uwKGgrX-Hniq4J{JgON;gvM2X$J0^aS!&W}_abSm(kzRk&$QVg
zi4wiN*MGgEpOM$iKCh%q0+z;b62&XbW&B=^L(%WBEy%{uX(_kH-nX}}_-b(kU8y7O
zpCF!*dPmp1C$a;r$GjzbXcNEGS<3sTBtaqjcQ-8d_Mh6=>@l*yixnGA7wsVP0aLgL
z>Z~<=X$hoIof?2nw-DPN^7&jl%O+ypK7@BvL7HJm@brCx|6o5P_$u|0_W^Hr*!}J2
zse{{y$epY-`fMz9r4qgH<fS3FK6<40*7hwVPu7C>H5ST*1<LGQ`rSC6+pr=K?Lq%S
z69}Y~hTa0kVqr|RR3@&=rM%ZwdPVUBA#ml*wUrR^p|3T6DjpH2Y#voQir!}W(Ys;M
zf+KbfZscUN_+f+fQ)<3*>A;kFL<roe4s+yv_oTyYdtle|%yyxEfX8;KaDdSqtp8S@
z<R>nhi9V21n#?PH3pgYMd=rQ*9e-rI!}r}~F)VX8D`FLz;!h6xyyp!cA8G90y^n{@
zz0jsQJ$_LY9v!7O2%mZkhTB!=LXlPMINHuNT6Amf+*X5*p?Y$}Y&Cy^t=s%biN~6b
zEzKtQPlA6Bz6gGe=ubS;cy041#v5+6qPDGBX@jME`Vc+tT^+W66pmB|(-^mhbotRl
za%*Q*>d&xgo~PJ?GHa+=1DJ%+__Dh=O_L$7wyi90e);lc3ya7Y%<;Ep{y=bk&bZR(
zvi*Wz_vvwaKfJrE`w6=sxdn};Y0I<W3kjz=vh>k#f2&cc0p!r7iO5(->fPhcp-*XO
z+@36oY04Xz$R5uP0BfA6#!Q2&U4G-5nc8?~Eu~#O-<ObtxeS|$ypuIDgc5}Mq)Fmr
zngWRnPHKP=UQn|Q9%DGkTb0<E8t+=$m<FW6t+noRxT6G&zzA>5@-NG>-UO$z7)twk
zf7eA5jKf72a!BOz<JCuj4PPQPR`#X?M;WNZIXN}A`FIl4fp$K0I#HcvMA4@YGqPkP
z7~U+@<EAS+3k>g5hTCQPd1>P}TCzxpco<_B3KHzB@L&UqrlVU#Qmb@9c5?Ty8QRDj
z?P5f;jbB!)gqx~5K^}l&fy4JHGj_@4N!1EPldI4ZJ{63;&>)6;Ax>d&;utC+E}S?D
z#?I$uKR9FxHUlz$@SAd<SmG81h?0s!6k}`}U>*UkeXwNz_Y6K@;gz{@b@a9KZ+`yy
z=U`J9jN|N1d<7KVAs{)=XG;eMT4!HjOs)KmHciY|yyQj%!VC_P<J~lw{F=FL*6{|q
zGf_Bkg0VK31bi*_UqVGL#=9`0f?A*6&K%-OO!|$n8uZ)SC`_ztm0yRKho_!vdB7vA
zcH2r&$aEIe=%Rk)!&E$oAo>85AT4m?GF;&}4(Xt<qpRo*`ODnY>P?Nm%zo)fe=|i7
zyLhtGPe(kwBY|`B6%ZJxm5T0!Z4S#~#V!nl$*MQx;Wzc^rwnlc$9X+rYxHyXFuI6G
zC$tAehwV;CUZt@!{Gxpz&7URY<frkiCk7CXwxXmHWo-lQr4bW_++u%16}{U{5W2$u
zUXmSK*P>4RJ77lhcDo&hZpS;tjyH}@7NdLetlv)f&vz(x`qCQy@k2uf_BI($C0W0A
zYdW@qTo~2A-X!yXBTM2psZA|PtlM>tQgA%Qh~AB8gq%kQ?_cB5VamVnUi6~9*SpQ|
zuy3#hx4-{<r@8;)<xcb9HT~-a`Byl#-9{WFQ%hnVJi7x&M<F9gPS;g5)<<*|_57mk
z2y|V{j}F9w^}J*7#Z=X9^q4Of<FM1i{v#iD-J?@C|FG<CVQ<Y+BNb$0Iio(_G}gZY
zGpA~Z<y#~Gr04zQOD!nu01X=h+hXgcE6HEbNvXE7D}N7lMao#snsIV+?43ggIK9Oi
zRm@@TZDj5n^hK#l)V*4iC~d8}rRa7w@@WI|w}c)Za^*#mHP*WO?@RtMpBe0SYLLW5
zsuG0V?QP3h7jUmhbcm<9MAg(IM1aX{dr}1(P((#dEyb4Boq4FR{ZgEfY%giqvL~sJ
z{R-UM=LN!E(l7UdT*rWUKj1mDDd})^4BBDy%@4f8PgyCK7`7ZU2<c}ne(C|rftE;s
z_i5;p&?KP=oiFJ*YUcZVp@S%DW=i{&g7V53Ddn++FD`ruZUBs~;U~*U2S{WIv053j
zWPGo+K+zI7qO&kw+MXM}wAQ-X8}D)=8Zoj$DBg~^z<<bs4e(pwSTRO~2}%SAAg;cr
z+{|H_kWbdSZNb!LmW+a}dO)td;u~i*EC*drZd!Vxv~Gp2Kw7(D>w($LXGkm+_}ged
z8>Q-(!3_HA<M@xI1p^t?)1<$G(3>tv#!@+;GH0GuS^ez1f84pa?6eQBI>$h~4f3%(
z$rwr`I`~fKzA&~*VUw1d$W@idUhFg&ZJPKRe?`|Oz(X-rBx4p;Xb*j~Fi=Bv0^=bb
z|JP(b{Efkp8rr059{^uy2HFiigoJ7?$izy=6qdz`vciP@)Ui_%KImVZpLE;5(0Cnp
z`fNKeQd)SlQf9VXI71@~vDupfe4Wo1{x%gr3J}|UGa&;TtrQe2Ng<_7_bg`sM2#5o
z%~q)Hwjrsvz||tb2PqqaG^Us)E0E_i#`ld^Ar3|a-B4nH<XLbl4`<Nyl&F!0mJ>&r
zxG2`K+2L3%NmIE5q;V-qYX|t#37j&n**$OYpvE0frU(Yfz)`)O)9z_UpHg|?v6E&c
z#1I1=*i&?km)k?^pC7`omLo+IeeAS<>?1LNIP+g^iR6}`1;mWYL6ymeb1_n?A`J<q
zqYfpah{FKo`))sNs*YK|7)(HrDY`rfssznHqz!;4wAk3J0$SfTi_)2w<2=7}S>DBT
zMK<ig$YX^;BJ>?t8B7Hc^%S6vG)lr^tUUWF62sz{6-Oi(uQ^ERoTm?AjZA7q&m}FG
zRoJK<8*(YgY%Win+!V~Q*?cotNAkKN)q)^MSq+FeO2`lCDjSg_S!KXK(kO-ZWQ9lD
z{8-v7XTsz7y_^6HjYb}!5$(11TL-P@8;_{Kj<qO0lcko`th_~r{$;rwSW-1?$t$bB
zu%+%zUn?u-G#Dm|A%xUGq(hPRi7+0&RUjL`<t0*B>+wt|KmqWpZ|~@zG_3Rzr*W$8
zPQ;g5X3N7Ugh~7X7N~4@E+8hcuh1aX;6#~fMQfzv*(~N=U_di#0WU#^%s7j%M$+t#
z(_{s&5-AtNbr#w%mbP@R;%$Qdq><pfBrGaMwxm48&DxZO!4)<}7a{kq710)_X6ct(
zn+_dW!lpl=9rq~}GfQDkE2~t^(=Dq^jTqA_v5B$dDNI5@6guqSsqneTjW>1lf($g8
zQLJYWrWC?JhaQCqYPaMab0|bz@KT1eFmsU2IE7fC96Q#<E#fh>>yJ&rVyi7!Mh*;I
z32~|#WY@HA1ON;T)TPoBMD3t&7XWo#_{b#-es7`3YxmWrePWP-N~$k2BIHc-)Km?Y
zs$mKOO?Zu5#jKA~O8A(A(@MNK5|Vvv)-sVGn1Q942zpB#RKU<+<M8CxmyFXw4lThN
zO3k2z_7eb&M?$}yW($>vbhU#q*{1V=7IQ#G-or+BybVSvjxN%a0<dH}$vKlSjz;_B
zwhr-M#l8S5X7s=ASViq_uE1YAWt>feowvc(kTGSKk7K|gd3P2@<tO5{G=V|x!7Nkb
zrBbhmtY%c3=Tl8(XUR>C;kY0Ik$|I|wgSF4+gC#Gsk3~ugjF(uzeeG%*sgrO3(2Y*
zU8%@&I{~PSp<hbfs(Thmv=fa)HVz#XA$v?PM1;0&Q}+{0%RI@1SZ~6!@E+T@jbI?y
zTju~jkKm?PtULD&vjXZf>jR>(CO_rKZ?IwuI$(mMvhy;TBORHT3H2C(y{-cYm){`a
zCPvDq@pW|i@Bh2RI2-IWX?9CK?EElWUTAbLSl|Ig_y&t9(*<BDatVyEVVElTl(leu
z#c)7#FTXO6MzTO`6dgfU_UO}x;7zFYq@{(N%wt?DHEe)jCS5T!o$BtAg*}tOOSSDF
z+oF7q4J{ervn}~TPNU*u+!_=6PLtN=Hj8|s`h+d8J6pH=mxpJiS)@58mF}gtGnKMp
z#FH|?d5zNn+sR{=J|81lqZ^xOL7MQP9o3$~LS&N}9{mON1rg^8mrAOn_k@Y_UW%<7
z&YSd3a~<%CdEv6Q%pr^|(@wi>+y8i#IXWB(5%EA5b5|RKQ$?-j)OfAO3b0X^gw7?c
z(E~wOKC^iK@GidbF0#29@*eS=p);%ry>!O@Q;A;9)hIFJtKToB64g&Zal3;_)}4zF
z$YI;t^yYR<|2Gc`;S}ENn$x>uuw@?c<qCXoC$EGKK&^v?V1X?f@nn1rp+HMtfI9|o
z+J^RYj=O95O<@J`U?#LdsQGtR#aozh<r1J8;pS6I=X4Pi`*CUx_zJm?Ql5K0inJtA
z5t{b}_-=u!Y2A9VO5xir*6&h5TEDSwm(mRs``=?Wg6xEB%5&wB2A3+h73aF~F*ZQ(
zX)b1isblJ`q^Lzt6<>~A-G^b}tIWN4P(v*lMk?BjL9KFP=e{CHLN5v9{4kS>D6c!}
zUB9~9ji5l0)7l=xJlSYd9BFFYe0Q~IwRDMN7My;}0~k14Z66PNADQw*yNAdmFYF~=
z)A*KNf$o0fvlZ0{9!qo<x6QdYKh8Fz>qdFZmGHpB>0hE^ARFIus`S0Q#c5=Cl*lNs
zdbK=(8#O_DET#$pEl16*Kgw;z?c_^4PtipYTGq{uk&$^}-z)S;aO^XXNs>*%YZ0%i
z`A0%l*Ft679fynG1Y``^WaLST?A;d@Zj{*<4x;1Lz|IeXh?xk5Y<thpo+UQ&(JhBU
zwSoK<Bl(;6TUcY2p=iR2WgfmlT}JYrsDIXAi4Ib|*~%zLY|&-Qge_8-0dsteAfN+W
za6G-3E1n$+M+S!7IBT(r<`aa?Y2!G&=!zmu9xZOha-eY)Emt3-R&XI(?L1`&rv|9?
zl``M`Hr6DoMr+8!Vry%hea@m+zy{J5MoMaw_zWR)hinHUBv^t#|2`iBc|$k)KeqV{
zo4W_$$H0Dd>q;un2i2~Ce4}G=k<)q<)lYl<tJCceJAlCy@W2k6!dtM>rMYKY&JtQ`
zp{NF^(KQrh(!>Q`07dV-VR7?<)R`20;N1Jqo;_2-dVQ0n`dWIJ8_vscVvdGqI97?O
zrarBNu^vRuN@9(+QCddQT<uEkj^1v!c5kp5G*G61SvyZUndg!S7>vDtqt&q>Xz+)=
zqu_YT$j5r8#lEFS>K1Ay6hN&xeB=|HA0pYN@pV&NYR<@-3^eNw`ySpU%VtoU<~!^Y
z3^?We-XU;;5&NE-M&vTdXE$*M32O}lS}fK<N;vK$;5#ekE62Uv8_PB7M}sly%OwDH
z8*<O6nSx&q(!5WfyB}*;OA&whB|J9!mHCfB&v->(2FO!rrX&>)1~E<kh156%%1rjK
z>TL!xVtyZ8X~n@Y!f*@EW&SqRE?4quX1Y7XhP;%=pe3u1zsu@JeYUYM2Dd&|lm5ZM
zG`VfXu;-&3{o3Lyw>I4vBoJJC6Ba^_^BhD#PMS8O|KI0dA)Po_s*I!FR<lWR6`xXm
zY#{(6tU1V+F_H7uD7{a)?v@&YOKSumMn)Zk$&9K|VPN9QC7`EBnhtosEf1ipg3IF8
zbew5*9p|I=P}~RvUM04`j4~D@@^^@M_kn?}5Cjh>RI6$Ap>%N4`NHwG@#<%~H5WmN
z$$sqtV{?;?3xGhz|AhtRy9cNke#8Cv@%a57XF$j~0#Z0!;(^m6FkOT|tdM|rU-V{+
zi^R5sq^5xRo6LeWG)pv1;BfH3w<k2phCvWS1kAEL+JDa6#l`k_9^|XFvC_T}_>>!v
zKoLj4ang0##~;PBmdPirNPw@v@ji*6Qv?*=%tLM~RqRo{x5%Q?6mc#tV}-9V$Y(&c
zrPRMLSnQ~W?=Jpj{6EyV5Nv%w&x@@dWW~0H^g3;=2^V@F>dtiU<?d|Hjy=)m{*QN$
zeP#9_QY&CU;k0vHZ^rq6k6SjOePQjdAO8J+mw7&;w*&qo!5{Bvn<?f)F3N0;k{{Nw
zM^(EK@Bv(2^2R=iXLrT~Kp#!>X@8#Er(BSn%w27Sl`80BlPn&mGQOf<DqKOmtMkha
zBT%{0=PRz}VpzUPP7~gL9E~9>ZR9Q=8yoMSOPhNiBnXe;p|SMXd@q;`pDkwAP8N)!
zu5<f^Es2l4(<bli`~^ObPL2;Rg5R}TcA%bLb>67Ji$v5s9_`cFRi_6-hOz#I*yG-%
zA_M$EIF6nio>-0z2%@>uM^#nKbn0GpP7Qaw4*1Mz2Bd`~ALN0d$e&~$@ff1+{D70g
z-~vb3VS)->ZkQurCWvYNtyi7?>Un$g>3yFbF%vBdF7cpG$jRmpz!w_+Kw1~}g>g#m
zntm%+<IJhhC(svTog5Knt8AHSXDeBX)9V3w98@vRKAkjC^Nj*`M!Sby@=ZF(u!aQa
zP>uiO^GC&<n0Uz-hr0-#PQQiaC$uCM8}ylX$aj2^SL*g}D{bXiMm$ut2S=FTj^b+o
zuiVl@J2aJU7G$f!lagE&^P{QWhqYfhk))hF88vy!1|ZTCxk{2+Nr)L>><X<}R{qb9
z7Z@1^a>GZ)Eck^?3A0}qCYULzR;sm}Rtf71P1TYuBT*t>bK;8sa5`Bw)mlo-b$Rp6
zH-AAVj(VNL%l60q=fjgvo&Nb5`8ubESM87A{N>8{OL?}fJW_zHFxTG}8Iv@9^Ouzu
zA?P<ob-AIEHbgn{MgZLOl(3<``HQ5<Ta})^?_Tz<e1HEx(p&T|s4tPE;WvK~Xvs_n
z+r01&y7e{9fAg18`<o{n*E<GLLNPp&c&<LC!bVHwAj0EiQSf10bMaZp!?VP+6V7?0
z8K-b#d=+kqwGVm2#o=XiIfXBEo+Jo2q{XCI14*m`m)KYzYkWDpIr`&wL&gpPYXa5E
z@io4zX+p?==wW=-*2>{1p3bZF+^sbGigmtH6{^%$4$NyvsJPT^t~D~*ETiWzDHSaM
zT$xZ|^YOggqV2HUtka2>mo?Crh@RBlTclBYs^(_hoZ=9JBZFn8!(`2@DyJV!b5-3Q
zni#TkONEMiOfF9`DIEo6Jvd>6+9FHo@%q|W&1BY4exBtuYn+n}bO$T1scTxprD|*K
z!@ho2+x8%}5M|{0rF6G^D|&G4iF-mfy(Ix7H9RhGBF`9<KvS!_8v}JTlC6L4&M}4=
z%bINADz2_@01O5SL4A7jJNsbqi^*c1Mw%Z!{CsFiLA8IWF-YFr(4d|_C{(A3#4CZk
zr?cRmYsr-YiyHl7RKhG~80Mc&1BZ<XXyre-xl<Za_RIcsTc?4dkgrNT_L%uffYSV9
zBzko78F{dfn2kGdZL;7qfqTuW@)TJUnnwW!!l1+&mUfqk_5^;+(e*+OI<DtkWEPus
z0Xy-HHIPkHe9Y=<LG9FvfLx#_@8e^pC|rJiKJSvaNXN@f0m$$bNq@*HWt1LGPMOSO
z{?lrie1(oXt-?9{<SVS~X8@qBQ`B+=bW%mG&2kI8nYuREZsjzwajn^Yt}r-9R`E}p
zS8g~GCR_@qCBPZ5*UGqAfAH~}^Ys&6?5_O7QVAeONXYU@r;Lkt5m9xpL1x4XUUqF=
zHhlVYN6!@aos48jSPznmbXlc<X)*jn<#RwTVdu-`tpaJCSkmO2(igA97a9i#Ls0d>
zXS@VPdsmm8Lvks9a=3B>o6^}Jt!M<5dSNJ}Fl>q*O5oHxt=4np?$lw>`KH}rwgz_!
za71h|hqz~5HqILk>XU;BF&z#}TAr_m_tNLgZJ+O4e-ca#YO_-8qB#S5*-rCPiC$o{
zRruI^7B!sS4fsW<=rGxzAdD%-XgaSIk?=6x+O&dG3X0Mv4xeteP7%A|w+7ll3QY}~
z5fN4oTD}n$B@Lx1;TbIc;q36e^1spRcoTKn{STMtpDz0DiiB_JTy85t*Dq=INJN+p
zeKTPSvjEiO<WRn0e~f>8AXOxDCV;Vhg07<uT%32$t_s{%a@6*be4;L^gc|EsoMzG+
zv4o5r*mK>u=%z37;n6eSO*dys5Qw$Xc^CIDABBec?X;!#j+B^Iw^?ynjq$R3@g{B!
zTEo`Jp@lgS&9|c61Z0|tZKdv{5Qs64+~xcB-s{)Tqy5%?)T&-4hu(t#Cr2s0@pzdy
z43B0Lo>(#*xzfm9ROZtygy?!{i3DZ|@T42kZdn*LuxdY?UU<$*3BhDe6`4aCqktBJ
zeod=sGX10P2-`JN3eSDQfIKAcS@(`p-A;v`*Q7o)<O>viP3z#x>z6pjgn`^KHP^%z
z2#e%dtt(ytc;qD9mE=C~Oksvfo)xebcCkvO^tvzL!G|79<)dzcJTK;Y5b1zxB?StQ
z*y<kya&4Am;qypmw-GyFbMo94%(TWxfm;jCAhkh$a+dn)sft;{i1L{`(rCj=OpXKp
zY3-=B&^)%7<fmSzkB4iHZzj_Xri$ftwOVY;(@g3d)u-P%?ww0;U5TJ2MqLD%<hh`v
zjek5fUPw<1#bhM&t*9xOig8eg<)DsJ12qq@r@-5HP?YP0Gwn1d=v@!MRlRhL&Nl+z
zJ8iOQU0Kf?CG<3U5tC3;^=Tk8{b341AA_CPYSs4!Mqkd4j~NsBCJ^W>r%5q&T!N46
z$C;&Wk_;%T7N{VVzgS_`A@yB|2aDcj<G7likhYMdxVZf5^B3P*RpQBF{zvq;ILXrC
zog0cD%UO5Z=?0~m<}%p75qJdN3OfF1P6AgO4wi16lnv}{gLTcYvUqZ1DQo<+F!A=v
zRRYMwTa$Y=f;xqA_q9h#HKR9zel0e`5_CAMPNSA?^N~XdtwrLkkviF;7H+VkZ~0h{
zt0t=e8l0(u^sL5G5`(UU++iGyVr4ou1dq=8A3A64BNxOo8;ixZ1py<y-f>~mpa2F<
z0B7TGAm}FY#x!M1X8zpM2J2D;<lIBznU^q}5J*iJkg7yd#0AS)qBq}E^;yjbfK|)9
zt$<=kO&9DAC4Myqoz`!ZP<h+9AicEnB)t)kL+(1}kqN3-U|&>T6^)mk=I)M?qetil
zK`BnDG~J@a<z>rSqM8;N8e;d}v7IukEt20!ISfb9X5!g49dO7Vho6^slr5=k2h>eY
zGIA&e!TVy{!~5*Xd}zK#N2}prAUV55=#hL`k0$b*4hsGQo2~wAvh3UMw(FdJ;Ck6;
z(D0M=*>JEOeIK=2t>8eCN&s9>Gj#P^cQI}-`0krEUm=BB|7ZTb5e5C=Kd8~|(p4Jw
zri;@;&=3fT1JKZyG6L?fe8JI1Izc)55dAZCKkVAhGv0VO=tgd*(hkvc57;TEUhrfL
zdc;aaNsxt+|2!k-Vz`)u@PJbOM6tKrUI0pMmD?B&RNaiNXua{^I~@dDQ8S2$B=@pR
zhlA!1^j)Q)pu?4#i#?SUc!*&|R)%o9+=`Ow0qM@E*<D60&GTvbZad$6-ER7?C*7kG
zPrdHSVznXEfTiA0p+Syw=x*;MPUxqAia1MFW9^y&^2{$4ut;#z=I(PAqWQY~m*{6!
zXl%-yzd<3`1#Qb(Rqq{b?HX&Xi^OU@1h+&#w@^L%e16*zd*m2h|NOEw9bIqRBCXsb
zdh_P{sMq-)pJ?fHqW|Sy26YGZ>wo#nue-nfB`i=ozqsn2pB-BGjh7G%{)B$I_ta0D
z&CuU=2qBz7aM(qc&Pr(M$NyKTB;?&@4pMYZ%ey?lOHwJoAn=uJ03UQRBWxh8oq2r2
zxZrl@@~Zp3i=!vHIP6|-l_D>qfT2^&6*8g7Y`k=wB?Ts%J{I5yI_q528{m{;<vp{y
zeJoaom1{=HxJbm;FlH;H`2T?<h1MhCFtwl@ic6~j5;GPmu|6p>YA<gd(yUhS13uA*
zj#t9d!X;Q0tjw(xC;=Fuy7g;0n&ms|+QKtEK<IPZbp=8yw7I+|vP&QiT;)L0&B-;&
zc<snF?T!Q|7AA+CyzQ9J<fs-mf8e^jkk{iYxfQ$Rh!3OrVi0MN!{QlAi)1m%o2OVz
zS(Yg6w=`;o;#s$M<xpiMBp=z699#+`PE-BVf+H?MMCW*)Tj_szk3hQ%4LPD#L%gtY
z;gUuAxKMgteb}`gMwM0qWZwe7thX<Jxwty-pPaXU>>r)E0M5FYO|bK;t8fjIo~ioq
zhDyC=UsGL2-NKjPCzfwH*z3q0EXJO)q=S|0FP*1mks4*UF^J?K@y<LdF+_8NmQH>z
z0bF;a8_}7$vdI@FH@59U-qt9&=j{-8z$j_2E&gv8?*v4Z)*hTt{g!QS>DC%O3VMCs
z^xl$hx14+l@Sl=yr9Om&n$%B=5$N5|VMsot1=G4~PR4;m(k!4FHzdu@qL}S4{R22r
zcU;%2jHdRuocxeiX3j2O(NLJYXN?GaHm0O6g-Wy%$v^d?Sa>zUW)npX<S%RDsoB(c
z#t0iS?=5o>*z4tJ(3uKJcAw7jj2E<V6gUS)CTMS+Tgc6BFcVgG-k5E9*zNiapFSca
z!auPfk0$_^?7eF#clO*S`@~7wXV<7gRDqG>lM}b83F%kuWRb<S=yH+49lhC#-cIrP
zyP1Aal6|rzUz;SObTJX?`kFw}_x5onv_fm7FzlaKvE&dJ2QSS9p*e%I#GyIpEzRg?
zL-^4e)+NgsTw$2vE!|ugkPdK9xC6THpE>R<HYF;A+YR%#nCw^k#lDww)OiD)Gs_Uo
zt_j9><jbu!6=DpONkE`yF$kmaJ%ehF0Tv{k-`vw;j^MI}CiiuLkip}0dKTHd(g54q
z=#*XLoIIs3EYp8`5Ig_AndQui!@QGOjxo?T<TejxOy$y0f56*omWMtI$jP$Y^}Et9
za;?s3Zx4FU$i*xq9P|XR{?!?Za{`_gmEX45ylNYbsxMUs&KC!*nH)0ppQ2?Ers`Qp
zBLoBks|-6bBepnT`rDf2t9;6mYbj-#7)MtDyHqPl>AJa75%*=XX`%E)%1|@Cd)1GN
zY_B!k*qgOINV&M*tF|)n1M?HCR)|Og12a_{CTxy(#bYu^CG^jg0qzx4GNM6=jSoAB
z>1g$mGPV_5kyQZF@Nm&AVx*|N)sY=>HJjnZOAT$5eL4XLg9Wu`$=_?jfFK}D7cT?8
zrb*ixt%+JmOVLsCkHT3c8y7Mx7@Z2^^rO_p>nj^p6*AWqGVBFD>0zOzP*yDBg;4`M
z#oTz@gumqQ<Yeo+z*bl*W*n*d4fKLn^v*;_eI96sd`_q2(R^4;=OR1PTVUDC-+uzO
z&t(kCcUn=mVMFwT$=dt}N&}=+BIBdW+a%7c9^IN5_K(&dV4jgb!X#=l*tI~v4Dh-o
zr*CNmNvZGc?)vTB{6Nt*v~Zy-ug*qxl177B4i1Ei%d-z(V_8#w0J|yv&gHbWz|y&K
zXj!b8(OKA}7)s?L6N->$2l(%cc;;N-kbVRLSQoPdNt?m}af2Hx=D4_}P549i!+9Xq
zw*AC<5day4SEs<3sDlLS5W*iY4!Al-SIy7gwqEWxP;Bxc01^Fkc(L=-)k*I=u0&z=
zI)3J$5K;M$Jc09VvPhU_iia`k(SOhXST_OXg0Gw)f&biTTXt1A%AR~ey%C47*#t_4
z`~8A8LHLIH@45Y300}`g8+nak(INSZ5*aQ<c;Q99-=FlQB%?2px4@7pr4UxGT=75m
zC+mKJ7{KOV+-&%TU=Gkme2q9wf0%QW42$E@pWpnspK}j27?_M!FVQoO!>?hak_&iB
zlTsK@s;UG&St6YMSY!n=7Mt`IZx_z(X!no0XZ?$-e*66N!iTsVvn4wzU|IOaoekQJ
zX+B<(QAWpt<!>|uC$UCH=VD+8Ng|jLXu|IDTBK@8$4Ib1LCDiAyTErbme=`8QM1HE
zr2tb$imN5Vu?x;AT1j-Iw^}V8{*d80@VPrbubqLqzu@8VHZx=V8sVRyEfjMiooV}1
zClV3QTs>O-Jww%$<6<c$dQC5=Me1&P(v4X@ohBhV!p7ICy)CGX-K}tX2Zx#eL5)YD
zKT7Xw_TxJBAVqKqhKhVm%e>}Y75$KQ+*&{Z!fw`gE|s(pjFAR5OGEx&z5AU{9fcu)
z1YGt~h7mRV-;Y3@jD$qSgr-0ZW6+3dmEYI4LlF-v*Q!p#I@fsm5_~P<swKldFjzdk
z{v2^1`+JS_W=8%JhCKw@YE1jqVa&uu=Gb8WYe&3PU|rf@N6F1BNdlf{A2|<VEAE(}
z6CP_IJe<Pis{-U!#(_~7SYAfmB;8H4-1+~V4_^2uA1$WA6dO6L5TrkfM3%VB0^SaA
z)^b<y2P)9E|Ev2AlV@e`j$(F;6PO1c8&N4#zq#I@w1zD^o4#h>52}|L`iXZ|a(u8?
zY#WL%D5`P;`>Rmn{q`n`stH@z5w!KJ`LtLJqVPYzeji@&+nOtA(v+`I*nx3?+K>A2
zZ1%|YSf@{4Pe0n!2JNg*w?RMJ)JB@!Kk^Ov=ufv!KYF5v^RMaQd}AZf{_B&qKibrY
z`_W@f4JZD2{Ci%|$G;hG{aHR&m^q(Fe5_LAwF>M+;K_Pqslo8!eSQD`oS01;Odug1
zB!eDIEVD+5fTfztb3AOrr8|ZBtVeJoWRX-WX2y9P&b|f9Q(`cPjah^eAaAvZB=#-=
z6t8MPXU?y`)l}}0nS~7g1p!mVw<QMSq&B>~0C|E2<^`|QAf2l_!^%;~+_)NBNvjb}
zfBnrbe%Y9P$AfovU7rK7G5<fOzwZ7P{R{tN5C5Q@Pyf8rcg%Z6a4BE$L&U%Tfq#!b
z?tY`@c0;Cc(_*yp!`1EN&AL5Am-XYTdc(K66dzxS`1Z-=Lce=#rI2~{RZY<E9&17u
z^oI4k>Fd%WT=OHm?EUp$(Wm?P+Ry_I-D@+~qZ1W?`n9j@>u);9geQWn)gTxtL_vXp
zy7n-17Tzi`)w(yJOll4%66D;>Wb@H_H3hh?sWKVrf$~>nF4niTnl3CZ@{KaZrm`)S
znF2krYVQ*_dD=hjeh%%jy84PJl%rShouDFoHj=E988a`^>75QAvk#2$EitXKz-|1m
zv}st)NFlW&+T_80aY>KZJ3Kn+9M_^1!gx+Pcp=<!m^gH+y<l|{sl3M`cyCAYL937t
z-W7|il+)61nazZfD5#4aBLYv3VUg5aBn{<XmT~aZ;?zSh<KUp+C%I1(ESyG^v~F6B
za!ISLA&vCo9(}&az5@c_vmN`QH4Nf-8CT8KMvKW*Jr!mm)l$#7s@~u?tQaBr%=T61
zD(YQbcF#T(K|v2t57I_4Uyj)vHh+`M<<5uBWnokYsNMYaW9R4S_|xgdZ|nlQ3Ql#H
z9NI$Q`>_%~#*y!cGCYKF-me54)OavZ0j0dk@;8lt&5)3g-?h+%gkL$NTAokEV-YIX
zehKbYa-p9130h%@Uf&l^a1S4EapTX$MKMwspPv#2HKq=As=RH*k%$q%0sTUDKNDZ2
zV@C-)4ISYg$9m@?2%2mR;!$UZr=8<|`_tuTW0Pr0Jgg|)geKG?^N}>pXa#Yw?_8eI
z1;nDrUZm{R8Yx24`#G4a5HYb`lm8>GT>Jd&bLX<xJwM|h*=48K>l|<T)u*$s``yQ1
zjxM{$Ay^GD<XVv=Bb|BpXMYTtDUF`}2WKAIdvuEIZvMJ&o$-@qUDSss&vY>Zog&0C
z^XNKWTW9t3I+TzTU_X_GXJrBsV7Sd;vtu_n>mHZFiy;7C3}?m=op+Bzt^;F=uqT$*
z`H_7O>f1pC0y{A0CjNn^^4`a~@UYCrK~{YW^6eno=O3*9R<6CRplIFK^hNn<U#y_e
zK`%|D;~ch2D<m{d+_&_(HT!3WLytv^krh5F?9vx5X&X`pJvO^tS>NMx_$z+G>@<&m
zJ<Mr@f(9z;d?lP;sg9E#NkyHl+6h5Q3upssEm6FNW41wFYs{8d9#)=<nPX%`T=wZ|
zqEwXBi=T<QGTc$#w!iij$=)JKJK9v&Rzx~<qQyqJw6wmacy-(59z)u6Z)^*4iqQaS
z_b4I*Ey}j<m;=>3lra)RK%;<8WPod+Q3#0Q&|+gEQy8~a!<Y=(?}Jf(#=0P^j#W2%
z`96&+yT!J2d^PVWjC5f`5(Uee!bhW<|E6x#wQ((^MfjkIGb``0gbK<=?79Y%8u(&d
z27@r^lI_~6z~-Lf@u&Vr_Bbhj+mH<};+@i?htvViAWnu{f~7~H|CFv)bF}VZ3a-A{
z{g8gP?s{D9+!E<%pfJj1T_LW)vMW*uqhhxV$M*h_t7I+7XEw}uDWgM>6=09l0Yc=F
z-k|N8S}ot%wNT*#;N|uH1thrK;<}&W|N2w99LtOAv%S(0KbC7l)ZRWFQ3Ke)%7*`!
z{&X?WR@~+uLHneC!Q4APg77B10$)uR_`PS!4IxyRrq&F=91)NoY?2Eu1tTu8;Ze?c
z4X<-6D((Y!xynPcfZla((PTs6dTt;;T-<sY>QTv7{n`24RgGU>cWV&?o`{mu{{dJ)
zZpDa!5?Fv{N(T(^vN;$k)wu8-0MKE2%O*;B%_1c^SZY=h{i|=6bY2qA1L%ra<S{hi
zQoX(B5U?BJ*kgonn#p|%w=FoUm8P@r!dgE`Yg(P?V^F#*Hf*@DmLAb(_2v22{N!fs
zPs%TO%>P??&(&)G=o_VUX1*8Uns!xKgRKAHw31S;|0@0t9^pFUHM2zX8RoS!Kd!}>
zMP^6JL4@y6S_nfsOfwUY!*8S|NA4a+OcLwJYcl4(S&ZSl&-+eeQyCT62rluGRLa5%
zTt1vk<#O;u70fx9A(K-2(C-fPCFrKhSE!s!t|4#+Qghha-NAn98o?cc#;slZNb~QE
zIFo8smNX0Ir&u|x*8moh4Txp2Gz$kCVD%~iEAl@lblLtv^gbCx`@6fZoPi3NgF>o(
z28(MZv)7#nwb)Khut*Vr;GPCjfkq+?3J4C?0oUM+ktF*apvLG3RU7kp^mdSB@217D
zm5dfEo6puiB|r{u;eEqRKJL6f{B&|<>Y690@6fF`a_sE7wo3RriHbPj<(4+|=CXIV
zg(V5oR6rkk^#btZxgO3<_VPkN;U?Rv$D?xC>Fw>m=Aov4?!R~`I1W$PF^P*i$qr_U
zroEx9)u=iF{f8ngZVCX>+~`+X+Jr9Ux}?S22ko?bhC-EQ?r0cU$ys2>j`lyjwhrR(
zcN=8TTPAb$fJD~AIHuvt@3YiHuUJv9!0KZtG%7z}sq;Gl6k)GL|IdUMEhM^DA(8hT
zq=KjgRQ?DDLGea}GZ@V;^0<vC!NQiZES3kjXFIEKp*lqTuG48TcF<-Jk}w1WANQvM
zEFiB0nWH$As(y@79iyg<+tK6>t<WDTF>OqVx1f}j-xR>V4|oK`bg~HEY!P6xrT1Lv
z9#5VopL*mvC5L2fBZ*8tfPRDAtl`GT`UoqA7S#^wI+>_+R;A%`3QJp)w3vw7w#Crh
znJ4m?=fiyLY9dUfdYDLlO+@=X($M6NrPUdb;g`rH&f*)@dKdVBb&D2g4eO*x9rKXh
zp7!E&$kkyhJyFr8Au@VdXh`+AQNF8A8Tgks!gwM9XRUS|isE2Az(Nxh<~*fQ-2|{a
z;d&|;manq0&0STL6>hG;pIy9|8NjS!Mseq{RI>8+E47uZNh2XgF09frd9AW~WCE-`
z81DSRFvh{~nucnMgW;v$msJZ<gh-XL8t)Zu8iJqj8Mpvqz{iBv4r@MzdF}!0&X9CM
zRVBR&3@E+s_UBF$w`%Tx`+Rqu-uHTbBB%~XtuVs-x+@srNScY{S}0UzNfDuZw=Ba~
z^y=W%_6FqxIVKs!b3JAN6dza|KV<w~U-xH_lB*HY(v#BP<>1x9>+R^*tN5N?^*M-m
zMxsIU69Bcxv*cm6Y(yXO90y3xw%w~Fo`ijYs+Ue(J~BeJ@!<^HY07E(Ooil8NT(~o
zy+dl_eqYyLX&{~-JU_74^B?G^#=zE`(E(+hMZuWFSYqoslfugwKd<3Q*rMT=b!%cv
zj<sg*<Ds&1XcZ?b`7-&3njCU2@(;Jw#mScH2W$3bwG(wV{pd8G#M5o@WS;RQ&sH|3
z!gWfT*}7~$Z=N2%P)Z=dPFru7pN%&ydZ+uX-O^3f(p7JZesIv*<=uR*{KM^lCRHfR
z**_fSlR@ga>4v%`aObfJydJpy;PvP+gJ<nV^1I(i?&zA`7b_ddAqTMF;YWYngI?<k
ze-@+u8}tcY*ASt&WAHYOqoZ*`lR3!-V6~c6*U$5VgKxLR$|U!PW}OVuS4>2V@u!Ry
zk0_wC`fq~W4ixFkE21j}TNtzvRf<v1A*&w`HglPm%vxb)ax?~+%8U;hpN9o<u}EjU
zReF7AuiHTO|8g9ivK_HTAwekQ*KCc)Vi`tcCoD><!Xpfty3TjM?7qf-?b3g}-i_)!
zCtu36+%En002Azf&wl)JkAB?w`C@N(|9SJWz29sfwZG!3-O^QdA4{*eae_J)7Zh+_
z1tqgulB|AExt@nsH!Z+s08T)$zxbfd-CuY2enW|mBw1CWNeVF3(&tR7c&{!t$J}v=
z5)?~i#zYmOSIUaMzAsX1WLZbp1HU8gV|)dR%-0*46WcxJ$-;uWv<0S~O?0jCf!&|^
z>BgyO(tS))GBO5>8z|kdVyMhKr1fdH9CE=m;)nVa<gz!1IZM9}Z&5|O9cVLp{mJ<)
zY?x*dUndM5C>D>qL~D15)b9|#V~2Q7ChoGlLvUrTn(;OqTFlGH2v5MOl&N!JTvnO1
z_uY%0^9UBaH2E{m<v*cgBy7gf=k~w+3;Ogz?<;I(Khe;V3HB80CPKjaQ@wl+6`DD<
z+C12AemFh+vE%Nd#vLPLKAe3LhgM@?LbvLg!tt%HhB~vSy<d8)8H(+Ff%<rm?*#!h
zJ!hogd&}Gy#!$c?(L3<d2DRF*Op**ycy%NGg+?*tfn+ztI~sza3z4PVhw<El@UP9-
z`8red*3XZWuGxDYoe$^yE^Lf{Vp!P7(BVu3C-gsv9iJZl+&?|;_qzYu5$o=+={5bz
z<=Zh60<4k{b+bNmD&dY%qM#u78)Pmm^MyV&-Wg9Mt}-?k`Ka^L;brHaXzwt`Oy%i~
zdR7?*aHS9pNNibs8%JhHD~k3wycVOZ&9i3pBGw&Eg#<+mIxixnX*G<BCc_xG<hcIk
z;>TdjZ3-X4dIP*UzRT|)eI+;kmE7W$?5(^Kb>hP~TWsWn81!>`FTHN3PyhbB-v^V{
z#o_UB_w0in<0b;2zdbxTah8i#LpzZZJ=y}O78jUIl9<Clwk42Z+Dx-1{j51jM@SKv
zHP%#XOx^O_v2>NJt+j4(0Pu%3Wuk+0UId2n3-TCVerso1X;b{pi8l-J+=$~i^lE-t
z%;UQ_I!_;BFcpgCMAYVxt!@T1=ehwT$}E~jbQUYjuM2(9ImmNpBo9aTQcK*W2>|=r
z0II!V$`b>x^eP$NX8Ab3S<+PK_O5<wM1PB?apu5grz(IM*4h62ZR=pq+iX&7bkXaP
z8z!k(Y_o+cmNxeyHMj(?AS6)7X>1+A(G0TUC8x%3L@+H@q%rM6H=Flu<uO#k<%VH!
zz^VBD<nRNy^2p`@5T$o@1$JxUd2Sde)32N|f2+CW;EPN~O`mn;-{75lk`LcTh+Kno
zZXoun+M(i*sa!UPk6BL4)5uCmD`#~5Kz|nvuUi!}xK^0WOgG~^lZzD(Qce)wZH!r*
zdQwDr#s@xaB16zu!$JYN)1i!LIWvD{Ly07f6}QQ35MGEcL^fFMzK?oxIjl@3qcRTY
z6HRtV>UgJYBxYV77M1&qn9H0Ld=Mb=qidVWgH)-`(;G*7#bmineL*Y+?ra|8ke88m
z)izp^3&=6}cl%6T0P{*P^P119PN~X{5+<(HPpeW3@#bB*8E$dyZsBoe^t1OTAJ)!x
z2iFhgZ}rs${;_cyft;1O(Y46%Ug)2tiI5B^=*8t@3$O9`n)Cu?#~&a21tgb^Hol>c
z<?yzr^m=Y-Fpi_2a@6;AX(t&+?R+*xvW80okkB+|_YsUo;1p^grLqK=Odqb(fmZZ}
zi6Z?%uJqqKd}-m;Y${%R7#58rE^5I^C4koVtw$scjyQ07KH6Z&c^Z_DmrgaDbfBvf
z<TO1Hj?(a^<*=yU*=bzyWEABBjAx}QPgb9Yr${lOg(5n1tT*7fXAwUW4Fc^(p{K6*
zn`L|@;qldqsI)Xr&jClg`kC{qVAulq&tzc(4(%X6ZyX}AdOk4IurX%{j;WbED`F=J
zi)9mH>|CatQ>uDM<iKPI!``i2spy{DcocztHKa<G`1MAve@mM2D#SLfVQ9mY3Ga)l
z=;(KxSMlbvlf`gR3~I=w`@mqqEKdvymp$|@Nv1NDeaze9*S?S$dt#i;|5P;k+S{8q
zVs9Q!XWriY_3Y@4v6qKF12*ZId=N=FEK}5|L^5sSiKx+Ei%}J}@Vd3?1JYYepz$^v
zB(uDTZfRH&FaYE3bK&7vfUXiAswM6XftnZ$HAP}#iAudvE^1zuuV9s{%zvjOw6+=3
zO3U)7{(o#o`G8lo2yD@wk_eenVDC2^?o5C}-f?4#3%0Qk^$KN)fB#!}<?jzKqxxVR
zXLs9z*{Xy{b(aJ4d>X#`&e{1X1R8(5JbKZ;xa@ugG30G*!ZM0@W^vMKO18>E`O*bp
zBBK{f#Z6QF6PYJUvRLtDK8>%V(|`Zpl}#rpZ#!gve_57=r%KGAm+#xr!Rvi1wK`Jg
z$|br7oW`|iqHGBQR*bohw4|BgX2Q~7J|R$?^Em>!qJ<^p7IcCn#@L(>i=B_>KV6;g
zaHsoWrx8w)^1a2312lon`DZ}^iC=Bk$o=e-Q8+7kcb{kk>e%cr56_OzPenB^YDUku
zMQ|5WM@ShphAMmp9A+>IXs7fneif?`$+@GKup>^B(;r=WmaVxlzz_L#owelW+uM}`
zDg={CuE*`-Y^$vFvD{qrL-agiX5;APb57Gcsgvyz&#3}ZFwe8(W}M#eY3e2i*$vR6
z)Lp>>uX`=cLOwbKng?L0nMoS2jIhR7BSl!qpZia@Eme(~gC4MGkNu&P`mSwY>xx_E
zF_q5_gq5wNfh<*3WETePbIFQQa#Vl*S|7#U1ttRxyjTO0@k9VK44iI<dae3A!33%d
zh0dTLm~2}-9cdFo7qfU8+hdss?tS_ZY@zM86v!di?<n**yy?ztlrO>Y$TWlJcd036
zk>x69CNw}6rnMceB#Y+->4srG9;@yg{eRirHf(F}nH~e>W?9tvaJ&QZqT`4hDmv<g
zUM`<Z7MWqC3m7{5o`&Pxv48O!!XZ6oB0JYkn0%n7t`<Y+V!R#A`5*88NT(?DYQ+l?
zZ59QDfB%270s>p;D55N)zwYhsJ+}^D%;@mZ4Vbm5ZfC$LOJ_?Z3-k-&pHn2Z>}s11
zgd;L(o4mif%nOZuC}%<o5p=;){3~=|unY1jK2cv81y#3=aJuPL<>TXmcI??j+wTaE
z2GY#t9p|E4Bb?}h;Za|9JXTR46Z~kD&;v|JJPL@JjqF~eVg!suhM6{(vN*c_gv0wD
z`c5t-xxxk6!*fxO#iBqeEPAU*-FKP(CL<>Tg?x=@Q+T_H*O->s-bOdY#us%Vuf%y_
zjB}ltfN7z^1XUbA-GtG+sF4Dw?u{L);w-E2aBWrQrIVd~u36Gla=ha+ri{s>Pgn0>
z_k<%*&ltd-(|qiB<jD*;*nhn%DG-U%(j6Xh2BTn8U_dDc50R%-3oAUJHw=WtTzq0%
z)j3BCPBexpOPbRVK#o%2Tk@D~dFWNLsulCwGQc*tTmv>V)@dfyvMhqsVooE&nm{r{
z)Yxc7J^*ews+N=w;sVfLnZbD$h&-7tWj>dL)`Q5YB`hHWHo$^5pOk|qS|H^lw9#6S
zjdY^7DPOqA1lSGOLMqfk?ygZi2s+TwItvaghx)<lxyc0h1Aq}iR@;@k!ArQcS_+4m
z1`3lWRh@pt2v-T80F5vn`!)nmVgfgANXXci5Z9V#w-#?>U(v(&WLg7rpTE{{8+pSm
zf#LST!t!q4m0WvVaVh03wJ%S^9N;%0c4#c2H??c&GwD$&H6-yfK1**|Xp|<dd#kgA
zi!KbJ$DiEicb?00&J@c!)qUQd`(S~$vZn7i&+isfa=RcFW<h^fs>zI?0H=A`z|z$a
z;0{XfC65;~ySCxEbxZ4A9kzcgiIt~Czu=SnX`#L2WK6~+4XF);pRB_tl8&FX+(P7H
zu*?to(>ql017|)4i>$ZW48`dW>3e#?AM-JCx^G9VTmIL(>ldYB?8}6KTe=ryN_gSr
z;(13C8P?SofVx+;*w$~6-sm%PE8K&G=@y}MCe2OV)>sm0EOXwg$*R`3Waun-sWz(i
zQMVs?*J4dnCIE*yFiVsMIS+nEmX$c&EBkkNg$m#XB`s0&3mr+dmWs(g+M(*bD=nds
zsF~4J>C43|M$9VGnwtt#Z3I*oie|y1{!?L<q2Dh+MYH$H9KGkEVVNz)<EH5%;gr7-
z{%-2pDDR8UqlmUXqOn{idY{DDtNnk}tXc-MqfH9|q!Y9cv7pEmpsZJUK6aV2=gr;S
zS3vQs{zsqlZ#m7f*&Jqe>5(I0OwvcV9>)g5<M68aG3W`ueCgDW7TO724mAjTkM{QV
zx4-)C|F`t@|L;j(!@QI-#-(h+Er*{{a@cTVfc+fLfOc2+MH*)t^)u%!dVT%_gb?j3
zi_6oBgpG$2LU&uXRW46@U<$)aG1&ongP%C~?vD_~3sb+?07ViE!t*%5`QcZMB|Rmb
zQSwHSX!@8cwgBe9JOSF@pqJdiz?Si%7PEwFnIbvm__ojDZ24@BeTE359;$l3z^zeN
zMt1W;)J!*8%RiO*(zEEi-MaubV#vmyeBv267%Q%!aOzR^IjCAcj39z0Z_=M)`!8PZ
zO3F)1j?Ava_hoVq?4Lp8vdWU9)g)SysI{;&3Bo*>E2~8!dRAI&c52B^afj#+|Ck_?
zi1KMnOF0^h^FiTayvPr$NLyrnfq|g~C(ikE5u-xav|xcNg*5?`DhEsm<a#WZG8suK
zka0H0oJrwK-DT%fuOl~8l=@`U=lGfgfM<zgq0tAXpP`dML!jJYJuELSW4|)!&V*fN
zl#cx*0}%LvA5Rb4qM^*O^X)M4EauZaG{GZ*zZD3*>d9Jq6K~~w+~~)GaD{;zsxyw$
z_{ua#KV7x?->DG1_hstznWcpvuPhYNTOwM5f4$`oTJD2)ol!FWDH*h`XFr7DBiVb|
zk#n3h8pRaVZO*A}@hEKlDf_^Ke#umbem&SV?CwEmA6R+tU~yCUlYhX-rOeKH38-<g
z3LmTH==J9Ll!uO%)<8B<PO8~a#8euJTu<D_S1QpoWIuEM+c|yE+<o!<fcqbQ^4vyS
z{`>umJm|$#Ud+`m7acDP%w<t$zsTTmxwzb=bb}Wz{@cBFTd7m|V{g-6>1%aO$92TJ
z_gspk*yCBXJH1Qfj!YKN@U6AJd18?^r6+y5t4j{kUN<bJVRph~<;-VtQH<n^mRKoI
zWjdpmC>uB**4QMI&5@pNh9b6uz8q927Ui0@gMKl)XTBx2So9c+UBN<Ch)hiy4fyJP
zIYXAbVdb8AtWr9Ld}qdd$*b!&t(DX9lX)fUGnds$`W{fre6{xtUmWE**4%+RizTt(
zb>3Ii_eAB`@yC=90Kh79NxtF?@GP{i6}}!;>ElX|wwCeXQM4H&C7?%ek|)#as%#)z
zFTu+&G8nGxo86h2i8lZk2pr@c`G+r}<kicH@GtiEqi0}Me8#!N20uDJ<Yd4TrkVEW
zu+!@g2gAOqn+TvHoh#86x`9NCGqDX)G=P`yf(>38<%yfFIOMQb$rnB9o-0-@lcv#X
zcjvqnooA}0r^d~AQQRh)cJ>Crs8oZAQACR(EIHyvuoY_Zk8@M8%3-tXCuK%qE9eXW
z1GXbe87cPV5>X`At8;*_DD~R~>*Q{7mr<fzQ!YSg5iaCvz9x>L*bVB27r-ss8j8Tt
zNUpM_*^w4(Q9F>^c_r`=*_ZXjB17=1e|CO;a*Qu|CpSC$%GM@ZXllTF44r9n$xYjr
z|8nwPNE*&h@K&T{vT)z?2jVW(*}xDk68P>em&qWBvDjy=WHM&wfUJ|YJ5|&ayhmn+
zk^Ey5BSXi%!S=Y|%G#4U_9yiKp8T!>B-}~eUXO~!+x~H!PU7Z8ewWX(W%DvG;=t9g
zwIe9QH5kKE;f^9c-$c->an;u=^_UtCu}V_$;$r4zRk0#IU+jEe*@$VkA=63It(Dz)
zQ%%GbBsKD^To(}t2UHoxOXj@VmS&5_hTW8*AQvZOaN$_6obL}zcq5gDFb<?0AmXeG
z{rvix_AnL<PD&WQ5^(P5q<aR4v<Is%eWIJ(m1aD;PYo5F^Ol&g%4XT8@&!@ls6`_R
z71!36SnB>;8b7wq0^t)$D7n1^Im8m{bz#BuOabVzD&kpY7_A$gkoTPdI|~*f=VSmK
zprdrCG>4FzY&KO>S8i4QNkdWzI-eNFBI>^2j<Dw-ALt=o0%p!Zo6<7|MJ_IoHA{ry
z!%SRurE)9|MS*mW8Ol+_%^!lB=!OpZOZ-h<X0Aa!F?=xvSn>~M4TC^@H-vV}LQ={J
z&sKnzehUqiL33%OP-=iHOTFL%C>>19Wf4~_K$;QhdGMXEbFhLFMk3eflML>984B)y
z!}m6*VI1g|2NBPWEA%~s)naV#(CfRAStYYvkT;?d$bdavryj9q%JeFA85g#cCC?g<
z9dI2tu^Re<iKh)nTB@6<VG$NJkN<1Ak9a5^qT4*n7c4o5Q#IHEbh3-99kNnr{kJ4c
zZ+K_0<6)ijq1(HpWM~U}&cl{yj*4roJh%oUFyP@JU<?bC&k_Smg<6b3n%lV<r)l=#
zCnJA##}T6s^qobI9Y_8&ig6l!Ypfy%>x^sR5OCW#r#i@{o}khIaFA8>yd@vp7EG&A
zQ#z6_fa@PF1!EgXGac%{9@Jp3D^_r6Kh`cSmCKeZOLPJ0L8@U~MTAG5`CmTK_@30O
zz@1v8#cg>34QR`-PKZJ;9z*EV)J5Y{u@(BDyRTmVxx$j88Q6>4aR#lvdgtQ(iP6y<
z0t^^^OviJYHc|c4QIFn2FQHjSrrctbWbx82@Y~oaK=oPlc@dM3x%eVKXhhvHe2`Lp
zn~$};891R#LlTQ>OC~a~l0Q*IjUgRzO|W&(T?`#fKHQRhr|xLMHVK<pyywv)vvtLk
zLM6eNpnQs*5{Z~=KSUFI5-8I8ETE;tECvc;p=eI#QlV#z91Qur)T~dOp4WAr&pGB3
zDUsdMpNIn`fJ_R>+#C12h6!l5fE@w4#Bsdj%qC7MC&77s)p;Y2A)BqsHHZe}vgG9h
zZX!jHHj21X&DRHsJX4otK>5L(My(Mv*|5ek!vRy_Tz^T|A~dVm7SMN}s$A|@Xsd=e
z8$@c3ddD!{x`!{H+ts6VcGsFD%VhSB)=i##X%&kBq+8cjM~7gf=P!Ite8jy!R-ckq
z?_%OS%20BJ>-r^`5z8m1-7D#c%N)6hGD&eh6=9Ptz(=ng0zu5zpiD@bmOE;pd!<is
z0A0odnI1o**W9lW@JA`sP9)hLxLnf4@JAY*Ec!rmIisWLE&tilKi}Olxa)_F`nx!V
z7~4?}CIy9gzJx^xDHwmkC6u0@IvkqVGMx~?5#p%e8sQWZXo}C|+X=_#iujNmwCMAd
z_3by+F2YkLLr|g9g$c)50A2&C0+qS0JcWxTW1E$F$~g1Ki=s^33KgV6_zcOc#IjB|
zNK!m;fC}w!?5K=Po|&vKrZ*zs2$X{{i~~*bsQlFR?EnMH5KShGf=hwRPS1}!a48Ny
zU7h#a9}l}{mEsv*=)Ak}`I_9OK|zucafGA!;8F_g?>Jxv#;o$fITeQ^fwnWC@vb#Y
zCcmmau=>Qxki%9fZJ$iV&yftiT^vn7QznQ%u|BhWB^p<1y3VqIUt;)p!Q0_e`XR4$
zBV^Z@<vAO|Dpvd?6ohd_yd_Jt!wFFb!2A_)_EMu602`w;iQX2I**nk#PRJk&L6?s#
z%}-XPey|_iOtcbB7;jiz5|QLLiZ%-cC*5MQM2lT4iM&8*0D}kzP7NM+6W|UvhF4LV
zXeY@Vh2c2tl(z3GUKUx1b2vIPB1K!P>H`A<NvBjVA1`p-o51XL*E{_HzjGw<%&_H2
zhN{dKN^Z?d0Jbvy!iUi~m2J6uPeXVdozZzsrWS_bZ6^PIM<+t7bNuNC-PWJv7{<%H
zxTNFgTf-Cxel|`RKkMdEX5_11e7zY>bqOLfGlUpDZ`6@?Up%mZ<va`>F-3Ug88dh>
z`;P+$DyljincK|!vNegFZ4wA@%ixRQ!K%MntG)$5i(QnCWVcf!=aw0=S1z0E^&mL1
zR@|9Jg)abiJnI54)BKUvl6Tve=e_gySN&e6*XwtW`$wNXXav(&!5w+gi2)}O_-(dl
zWLSX_f>VGaIu70r<)e4k_EBs2<p&pl5FF%U%7W*Y(O(Z<x%A-Lm)AXP()xqW@`N_~
znX_wD-I-y?SOP*H+c|l!^bkeEerorn7vDbLX~#G}Vvjj)xOt(joe~TP*@AZMQ9$w|
zW>!Hy?~p7l!G?0(mX_!?!b^N2O|Jt<!I#%B4L|?`mX8)ibTHhy@_imSr-C9;VhZvC
z7Zx7m%vUnUT`B^`RT7+kj(()~M>bi88XS6^cl75wymBeTfPMJGW1-ZS0o??0o_o=8
zGKBBCzrNJ$Wm+jUd--Qe&0dA2X6x3pB9~~v2TWeF(0iTB&z;NYefO-}`)EoFQa`x+
zQtU;Xw3!*KlDrd9^!&QIS2(uZxX>vlzvMlHbBH594-l@9si7q`r7kk$LYvlJF^i0q
zx=R-1Uf?rsO;<bQ0>t`;v?ZnD6JX-Ki%t9|E$^>c(m_%1C;^7V;YSpI?i>QCxKv>-
zj$i%UKj|LzEVk{cD_sgN9t&(?5QE~##jCa>x(xMnv?BFik;meQgA2bI^&3w(S1|5w
zANrX@K3YR#i*~WZ(USaJGIKd!M)&)K5X^i5jb5&^_L1C)T7%ehrl~MZBwr-NA+-%+
z)WcegmUPlKgv1~)9i5$co6lrUFo+E&o*Ijy(qNHsCjp>|cB4~PKZxx>r4?X(dsp?Z
zPpM>Y^9l_roN6I{QUlncJ{-7Q_z|GFJztpU01C_K8(?x4)DcY}WDd5+OpdWwe#jHE
z^UJ>}y@1#Xo-pD8sR(-S8gfAk6Pjkn-#Th|SlPLN9|dOU?Bo{<VcjA)A`hRq<i1i~
zrLy_GMtFd?GP>v|%+-rd`>JH;%X=y;dZ5|KBp!P#vV{;+%>qcv9IMuC(D3>XUVBjA
zo)~N>ThP7P7;zm*jwLK5%*l{@{VAT!1=lSEI*CV#3+-=S7TrwLalr15SayGq<_u<?
zGFsP^OOLwe{55@r^5-!Ji4=Gf?3zWu4UeBUqR#pIh$Av;;A%~dVVA<FfUYmZkH})o
zh8)9XEKE>J?IyDNpswYOcDH)vACq)4@<cAiOeajKLPLZYs8FzYZ4Yg_$M&9^%N6&A
z7eok})0=s9D{18+p258=G~B6x4tc4f3<3p*xggz9ZznkE<|w)UitrKc|GC|4chsE1
z>NLtyeD_oLjJ_+D1y-vgu$OkbXT2*jIa@!`FZhd~B+dCHu`r@f6yjU5w*F&&TX4J_
zli|xU)}eg|mwI_43!?d@wQT*-8jZ(3E=gZvoZL4Jb<e&uB0&lKVZl4<{qOmVqwOM+
zp?(lOp@aMD;iSo1d%|`;OUb~BKGPWn`kCnMz5eSR*$MOtp9~y%23h7%P|i=l{<O-9
zR+NH?%d$81qfhVq^z-p>x>VwH_engjZ~F|B=YFiWKOSE7wl@Z{IIk;EaN)k;a#UkI
z$M_>9hm1W+#~!~)I1ACS)6QxCW|lwnnV&ZVG*)vPfcbh*BrWpv4-fSyj8$E{8sth<
zcwylj@L-~TMgOV~9IZU?DyTcMBE_$59~W`hTz4|#Ofi&7`%pj=Pq+7pHKb9Rjbj0_
z@XBe%s}NWhowEOtu4xF$cB8L+&G7DKn)+8PA3tQB_t%0?586gGGQX{3tjC2C1%Jh@
z1n<oSPQk%&eAaW7RE|L&8D#mPB#PPY)?k_u8BwQ9T!}1@X`WwuK*NSbv>yE_lSWS6
zF?L*yrtmo2CSP{QQU-UJ&20_oDPV%3gyzwf=$n*V<*Qyp`|_8ID?Xk94F3PR^@ja`
ztcR2zEbJG%xy2Y!P1sNQY_{|^4$vItF5tqim?xq(OD89%oUZHJJGd{fadKDwOTT)$
zH5m>hYjL?aaL9wEY!17GvGHDKjB^@m8XYD?OY-{v$Wk&&ag=p7T@X%fK`-Iq6Ct*m
z#Bo-xf2UlrG~k8IP{{zZbVege=EJ9Z2tchxMWv@SBrMZTYuyWa+E-%oh@6D3K1en?
z3u3(dit+D^QyuF?#t|?+BWV`|>XH`DW&8O*(1^&dc))YP!PRi{he9sxv&p1&`*oW^
zetq2>ESqrO96-49;h4*6pKhUh9f8*4efOjzg}6vH<hjB`wRku5n03?k5~u&+r~kQy
z+8<|QOSA2x_JzZL{9|_-!JeBjh}05<cXC#J&H8(yN!Q&*^dk$1US2-k=EW?ZGrUsq
z3s^P`NDRU+?9_ajTR}9o=*+}NEdn4vmUz6CvdkT+F&{$>@oZ38B&r8Wvz$AsQxv}E
zqLB3!dz%=?97uHBDiU+6qavPzaB#e66HwW>Q7RE9LB0B5qr~gfEmfb{GH_rpo%>C#
zOy+;!F^x^mgc-;qIAwXWf+@=v%luLb6kWF#Bx>sZ;Ar8EwM}sz`_0{#FJ5hb?a0iP
z-wjMvFFbdIMAE=#wEt>v{|N_*AsbEDM)_1DCE^QWUqHpHv6waK5B#K{V_@hO`6*fj
zMLR%6Zzu9si(bk2-RzIn?V?G~O?EU=AnSQ05Te@hyYrTCu>^P>wiw#)kGLb}^uL_o
zRJavcAZsgO%UmqKWH<E9*|Lba^5!A|ha{*1-Y)UYJ5KVJ>ZVUUjEfc2SCrfXSrbVi
zlToF>KZiC8LKGSts08nfk}_7TwuNMAp(oR_yqqhrW|S5?_Iw;4|Lw!Yg%!7RAsbS;
z{Jl@BJu(FvtVSOF7%#5L^orh&?&M$ZX7TM}+{%)9N$61FQ$n=D8KMOc(2)N<>6~`X
zuFl^hdBc@B!Dp(vq-!x3ESnc>3G6>fk}HEi2J?++Ff&K(q7y<>ZW22)YA&F%gsQV(
zxusFkRBj7L4kM5;RbtYJobCbj4$Fz_BeIB`dZ}Bi7A5PpTraHIacq9cwFQKvz-j9c
z`c;FFLQGlcEy7tWCllcRhpW{IxZ|6DvLSQ>yJZkg*>q`G;7gbEsn%u|*W-ItiPFV7
zN(7CT!Z9no>E98@J~S4nT9+v7Hyi=zhXh)sXp4!k%&xX1ZAgCHt7a;<oF^cu&#m$&
zI!Uv|7vKfs<sb=yOB_5CH)#Gqram_Izx*}2V9dcXU(C4NnBEMhDm2Dn>q+FLfMQ1x
zb2r14e26JvK=8^Tg3`2koN?GY|8&{z;6g-^i()YmWSJ?WF`#5nAXmL|U-#s#Z~ij5
zqral&6lW~@v$OR-7woe(i~rfQf6n|rC;xNno4*W4f9mIT`u%?^cl<kYj%mrZBBA8G
z-j4pw2|AJa_5M3JC4cd~`=9i`+~R+G|3B&TaYi?+wz>1)-qY9L`~~rS!<n$VXyd^7
z4y}<<sN`Zckkp8OBMqdNc?Pk6ry4FCtG@x!E9VVbT$9ImaJbCHf{B9Z3~LxHA5NC)
zIi+*mJW^hY18A4JOhU5qR&X!Q3h@2E<|LJxi)?8)50jb4!T=Y6EC_YlrS=#56Yn+V
zv$Hc(FmBkDvrpK2RaHezjI<)hL9KXr3p;qj2Z3znlU~X}1PcWfOLHJUX|0bEC8I*#
ziNR*G^d^NT752#!=Ea%-)yMPjsCk(B;<21_8quiPWavKp`~Rk`=_nqgS+g@>n_+-I
z61Er~QzaEXE_yA%o)+_T$Tq>X%~8YA>KIGhZj|0U64Z%P6U>SSumspd=;iR|juU1D
znMH34{0+k(d!PX-*#_7;4?ChMQIsqb&1))z-Utt9g0`*1N#hUBXQFnRXu%i6JTb|X
zZeNQ%RH_rT)T)li_0*WGi>b(VLOGX?7?Bf9O^96q<t~9&ZlR=|6_#;ZRy!)!aX)*H
z83WJ|+cPDIhe1UBF(=m_b<ZUoz}t6-r*BynOV?yTQxzyZhBY`$u^I4d@&KURSI={G
zZ$dfEM~6(3YfH(wAabNEYnxIn!tmgbox-t`Da~&-2!u<WW~ph@=`iYPC_jQmQykS<
z1|ouTwqmvXJ{7anpoxU4X`$zhG?nc~iKKE=&E?vvl||YW_Yo7zLlO;jEn?k|KQ00Q
zNimG4&Q!~qhrM>U>$%;EkZlD$Zi0zK@!)DI$w9mou<LBu66Rt#gapPwXypS$xc-*s
z)9CH*^xyBU^SedSx|xiyOKgNw@t$n!(bLR25duDaPL2;R=r-@$`};3mZoi3oXJ&_x
zml0rcCTtyT(H4*MZ>yoiKW9?o#$=$mT*ANBAw(>j4zYB+W!Mb)37?_d;Ou(%dVl|v
zelp0vY^|`;?!Wr>^>=PZSCp2**0tekixLh?=FuzT0f2dSPM$u#7H$}bS7bmws*A;B
zC?znYfeyaB*xmia*L2+_4XwQ@e`-lXENR9A;Fbo?q=jAo6Yk<>nB0hQxLbIke%9#z
z>yKUlj1&aV`~8BM6%AmhI|2VX$j;*Qt~Tsjeb6eW5T~eH64!lmj(9!`PJHhGCSPdz
zt2LX>TWq&bGvDt8cx1f|6A`4ep5+d)B}=)Ot&STwb>83$I3u%#Eif@X%aBSdn96iB
zw_k<7A){>@owHCh^>7zI%2vifYLxMl*j+7Tc~9*hTysU6cwfjA`iAkSNhtRkwtJ`=
z!BJse!4{En1e9r@J6*Dw9B||fGXC>GG|w@?Gj6=n1v&&c<^yxMQEEqxp#TTuYKSD8
zA6A~|;L+Q9HXLl5wl!EN*M6_eLFbnpK7pS#I9>2;`#ZZ1cz4%T2Y1(MDu@QtXTnjS
zJq~a4ebM}3IRDc8Va<@&|CzqowqQl&d8++=vLV_PSARk8$`dG)i8viGheCLU%Te+4
zyD`~}XtbD2mVOp!ghoK~^8VAA=jd<=1jnD(ihgWGy@|wvkhqtBy#pGu^@WbWFIB5g
zg{NxIU%hxe9L6<U3MeX2_qls?8sTfY@oePobqd3iCiDlkyXj^V`QY7+e9+3qKL9hd
z7~U?XoV!?87btt)$oZWo=ZD9T$apU&n@N81!VKu>)#K#i0UC|Ik55U42%52Cw#q@=
z8fMqFcQUt^9Uz|KC+D(;((A*B&&WIhgAvn9*@!6AyBx*xLeHjWrg<JPgN)6kVDm`<
zYC6>DtWN`6J>(_Dg~BInRvwnD9Xu2(IJ#j9@KJ6Uf=4e6_nIbG8Z_gYD^|G0RMC$d
z-{Y0VGxTdp3CN>pIQOD`bx9WCSW(x|@CHHRb&`xQz4=9wFX4zSxzOpXdn_h48M_e*
z%0j#l6Ib`9bXwfe<d?tS75q2DW;fv{+TqDsxK|CX88zmF^3heUowB=P2O=t3d2p-&
zryduKy(^dE%rYm9ujy6SZNg{(aocKDxNr{nC^e-u_QplGi}6T+PU4MdwVXr`jMhgn
z@v-2ThGM)U{#~6D+=Q7%u3Ah@JAH2DxO)?s_6wW9(u%rIp`oi~lDdVN-kH$6ES=LB
zk2%N5MN+}STu(I2{<2o(d4G%t+9tGgr_M(`7BicV)K}DsXackF_BsE23(kVWQs{5_
zXLc`}0IM6wqjNnjlSx;*=VQhJ&J5T1;jkeUKzZT|IHigu_ACq7rW}P2P{)O2-(6>Q
zs3Ap#A+)?aw%NW;*FNTMA3xsA4%-Vts@3g{i)kRn!*Ar!K8Ar-@slr{GIAq&cz9^V
z$+VTSOf?(}MY`7L)7rMT^le2Vv%pcNkyrSAIgEal%YM_`PCNyXk7h{CyrSN6GRP(U
zS<p&uw^F=x*tvibO>5Jp5e`R>HvgZPfq3J%9ML;Y;Ya9`nP#0toJ#|MxEo|R{)40N
z4?O!LkNeT;mfIh@C+=dpj=3e6*GbJ;ocCFqBNgJRuR+RcCw$<|b;EC~h6@gF7<Tk3
z&nI-(AJeqB1BUO*yWx`DtyYq3-0as8n;H&P%TGM?9h55xJJz4hx<9)i5)b}3zD1q-
zTlupkf4;lEp6s`Z6tRlJRZ2a9_AG<dRAY6N3>G&C{w=;Vk=f9@bN@YuZ$WmOg(!tJ
zVa!=twJcnznws4n5X)!KbXp*i#`}Z37nE=NLTMQvv!xvwByOOJTJO&<PY<v9XPv8F
z`|zUUN-;RCU}+KkQMcRceQ1Bp`+H=})Y*zfFcd5s0>E{AQFy4^hvDq@PIk5FVnBWM
z``SNnPkT?$0OX(vitGz=y;b3Oln-UEZ^|5fG&z})HEFbG8~Rbni39LND~0!Ga+G<0
z*%_qte?`F`f`!hjb-7?<|B}_rKD9sg8J7~2K89q>ZrY?n_17;i>C)aWJrsL{SK*|@
ztg{+P*-biU=bf{w)u?n;W}yOvb+?)(3B9VgnD+zXq{qJP!@Bs2pY%ma#x_ocba;@{
zx+WgI{pLGYZrZRk;9L{-7LP!d!LbhtaY!;+c@tXYlsWY=81<TRlS}`;NEU0LCe@^<
z^;2Gg8Z&{ZAJ8eTi!QZF?hzZ7`r=U0_Qv7{E3JMX9h$AR_FFH~2)q<|101pL(P!Nc
zo!(V%gY|JSO9V_bTdwc&hHKA6yOJh3b7GB4bs^=w_bHD10I7nUiP=+<;PvJ++mkNq
zz&U*5OVU^C^5q5s;LU_h+r+m6wv0%uU$}Nlt1R-?y3g(D-Vi4NqeqVXWWp&C{d$)E
zo{bQs{LgWndY$&C%kI@LZ!ChVdHf=o|2~=SFkRhPVqme@v23y|(!O)g*QK<e=zE($
zzdpK*<Iz0aPIT(Bj1hC+c}7tV{KCmmBf<wP3SRwmBIVIVJdROa^N^3PIU_cV@t7f2
z`{C^HJ-5|q_b<-7XIBLh4A}YdnU~W^Sm~awH+?Uutd-2{-tK>oI34F$?>V^1(mTz)
zZ}<5bFPi)N&o|Oag}RT$4#PEzZ-R{|3@}ZK8y{HW(A99T{T07OI7@zyxK`zYm4@k^
zt!sE~qx@TL)ES~yD`WY#cr~UKKA*5B59$akGBag=%H=TTFUucV#Kiobjo@ng4{J9{
zTh9iI>jp!!`iu{3FyibP_f&om^w;I611dmM6!oD+<X#fS0MJrQQb!eE*A7SDe;@5~
zCXVZY!jJdBt@06g?3zAMP2Fp0VugUPoK2BPjlt$jBa>I#6rgXvO&ERm%40y3ZomJT
zcH!>%84t#R|I1FqtCQZIeTp8}!U5+V?>ZSajX0=It8YW?+_?!NMS;f<D3%98vaYkb
zWrj4dWD2e7H|+0%;R!+`_5D5ir&E2a@9(?Xni@@j8m~TxTGlkvpb>U)Rcvq?<cAgG
zntth`?V5m-9lJ);#ok$Xu2^tibDdx(8Z2ECzhWW&wtmsL$g(r?3#E_LZu^g=int~r
zIha|sCN)>nEz)bW3fwDPYl<#qVkSA9sxzb5v@He4V996land4R^`>Bj0U<SaCCf#g
zyAtm*?9j?eZBB#5HcN|J5Z0-W!6zJfO45{#ia8)`Z_z{DkY|Z%<_y)^A$w@K<6&4>
z>@F<_fDA*x3aPRb(H1TrZTW40$)QR|bJ?;GVt}Gde)Y)Uxju-tmN#7Z{0~^nOa(a_
zh-Flz!q;Yy*ScB6GjhlRo#Cz1n2xXCqn}#QW&X!<c$aP=lut*@yHT;<n%=Z-MsaI8
z-b|uYA!6vM+($PkSUD7}bH~kU9r#Cx<JtWUYt!gd_5nfVlBBy7*l3U_lRTivbpZ*W
z5i!TGV+2!7^#x@B5uv-4>Y_nn>UNlTrVi#$2S$>poP$H32=w}?W4#nI6}(S4U)0R0
zE#}v+Yc3eFYTSgDx~TIiXhRiiW!DrSDdgf52(^*phW%X;&_c(W6QjQ4RvpBF+D>Q*
zG%@$_+>W;zcuRU*tC(73KAOXL<C#VrK&+57fqCNnN$olN=@^0#YYG>_Ue=mfo&Yp(
zd{zrAL$^l`<C?*ewIHVu31H9fpuml!iDob{KyhwI((zeTPg_Z=!342fJDiL3Uc5^4
z9*_@bV<u$1(qP+~YD9a#-1~l-^+y?bNLgO9XiLD|CUBvD#G2KO8XLUNDhWLy*XGhT
zJDUsVDSZYWHk&v4g-&(GW_NmhD`RPi+}Ohm`{OLY4hL%Nd=YJJ)N0@tv&=M0;Pi9E
z;q&o``QM&VlZ?9pQ3C+_V(doBIym)5F#j4J)F2nU*y`y~X&S)`>4?i#l($Lx2B8_j
zUY1x=hATgIok*EIRj4$=9vP%!!fbWuAV%()2wHpZUO4V}J5;-XYfv5%Pa6R`uhQMo
zBo=SOfe4tlqj2YrrcR|m8ns=Pen1yax<~jQK(P<6x<}m;a@_vJ&|Ka6yofFeJr?;5
z4Q+4L<dxVzEWf>JL<8csnFMM$w-~;CGhYyG3%L30*r5fSI}mqL1QR_T&vP;mZkZP1
ziesC&fsIM$?C|KM(?35s=Hcmmy0|#Myz(g%H+J3Lx*y7H$ym5*77cQ|TxG!2HfD(p
zgUu7=mE^M>RW@(JY&&PIfgcC;r^aA|gr1_>gmxNtWt^Z2nw$NzLl?JhnXn_7`;}qE
zL!mZ#6deoFPK7*vf229Aqt<OBKr22N5c#fb&Uo$-uFj7JGXM@Hzl8@oyy)8IiCvMN
z0XpIN_58u{<rz%}#ts!*v}fLE{*ViGY`yblRLqy-B)~!lR7))|)vn<~XCYN)?qNJ*
z5KsNetgi$sZ9UuE<GKIT<ZxF7+m=XoI{UTaI&v}1Qv^6LYB>Q{Qe9&=(D3<m+B&M}
zb&^&(pRN_FP!$Vg_F$8mh)o>E1EU3*ttUH6X_Yur-$(-6n`D{=22gvJjz-`MUg}g1
z@(PBl<jfRDI#q`Zk=9RV9}mxtPddl__GR~~+dibF`|}kIKe?mMzob@8K~_m0SOyJQ
z(m>Lz-~DjLm?Uke6&;r1)6y1S;6}0U29IpbTPtqz;0GOlV_e;1_Hp&!0}>x+9HfOO
zN7|h99^nzVLfJD!T{HYak-&bdV_gdgaBHcGBF2Nr3r~;oROchf8Lm%7KR5KKf6TXo
zy{*g^{zHXR`%bJoYS#1wn_e)23|1P>zXYu2T$?GaIbtrcU*x|-7@&g}3Y^S<=GA`d
z8744?bOg(JF*PvcnkyYv{A^_!RemIzU@}=;O)1@Ci5qaY=3h{W%5QPJT+>(}Fot?|
z#k9?37Y{YxM$E|U7;UXwH5?Anc48TrpyTUx%z|ld3ttJh*4|9o_Fx&FG{#76wt!4e
z5Bg_{vC{kCdp9-=rOmQxf4?Gt??~KT986i<af~CSW(R~{VGCuwx5$OqCboq~wT~8U
zs`*$-P<Vg??GB{I(6(S7)82`z3%6nx)>cJaNWyCttGb!r)>I>MkdKzNC`fay^)eNW
zQdR@e;2h(>M(IpoiK?qv^yhhB$jEWXF#l@V>&T;CoXuHe{LyUbDWCly1(%06=3EBv
zjzF}<g%*~?8CkkXO%F#6H(Cs>!yLZhI@%bFPg2mQ-%XKW*^=hAK)R7m7vq4St!}fv
z;18KDVO!D=_Htw1flxc-T%n30qH`533TaS}RMEXw<}oyfi&adNCrGH`Zx|7y(<iJ?
ztmcB$(&hD0Rc35r<|)Qox6wEgQ3Z#(!B7`0MJ%2~xgsW5HaY_<w-ARooq<-p<!rhU
zcJ8qRYc-c73GbcD&f&310D*9^3{i_mv{x|y9ySUxNCwmf^VLNk^9MxNHC-jPKTvVf
z6pTg3kVaz#MtxoyO{uZ*$;9K2VpAch7%bSpUQK3600E9lg<<xVY(51OQv<8{gH6f%
zL~5|HLYmynZJsl$n_~V_FJs}6@BDVS#Lp~2#F%r_(zsVN{~VDL7EWn|nveWzN%JX1
zowNdlozu?M$MfTY$HD%H>O8?Eez0T;0Xg~_VZPaVVq8Qj7Q^Vo*ky&CdUCep4wJb=
z6T1-r=cOG#=%qz;bOyq1GS)7BC5!9oH^q?5iZxZ_O&2&_dc83r!nK+!-j5wnNFH#O
zs4mVB0;5y*2G#gFB3tj%sSb;6=*xh|(+Q1?(*R}fP!u&)Y`KDcU!zSMGbk-4vhmAS
zmg*TOK^|;n?)<isOBxZzFBdJgr`Gi%a;t+dcFF6-(jz{o>~5sn@;YR-iOoSA@<ZpW
zb9s2u{nyU%Rri$of!eMRg?O!rSr-0Ajs3>Rpf)|ZqrSDKYznb3y^F?RXw37J*i{Di
zQaD2l?4DJGWjsMWS3P+37eBAy2QZ}PnVS2k&E`nsTq!1#c-f-cm?X>-o>XY9@p(v#
zAi1Fp20DRLp<=IZTkO!ODa;noFBlr5y1S-SJmCc%>*}*tZop*b2Ct?Q;3M=IFXgJ8
zHs^ZyBbQM0km6}#usRt5qjshPM|ws(jmvwjCMnI~sK4iQB+^GkV@>x2(4e)X^zA6`
z`)r!#enD6dUq9@<&;~i{mgdgFN_xV6f!kMm&RqJf=<#=;RhQR`v3S0iz)o$%u(HCe
zi^p|6*Kj#Yd^!q}M`H1u)tkDxaDKtysZI|bX8*F&`*eD7g@5v2XPpn{SKUK=U<AI-
z{cUJh3NBH$WcMluxe#uMm%VN-)zj-Wgf>k6K1t`>-vv~q((i`7la)IKb<`#o6M&7}
zJ8@CS5^p(<uH7%Y_|N<I?@vN&l|O!u|D4z|nfTYr#~ai#qxe2nh7TqpochB#)N>xV
zwY<^|hmrqNuVy2xg0oiGKSs0<7uAT0WMhKA9cY2YyL|#{t&fcPJ&C`h6WWWyMx?%p
zi3&w9wz{lWxrGtXkdPBS`ZM?|JDf6(zlhlmVvqVZB1#35*yeIj%Een?LmAUIomSKV
z<<fjBdOM=c0RMa!XXDmQe*eQpw&-edZzZFP4?kt;7sT(HuXJlU%9pg=F0(B9z&t_G
z+Z+Dh!Mi_bj{m`BNZU`|H;%U8SkCh0mYEISs<MQGq`l1100)5-KD&7MKuMXWvoz=H
zN9vZ~EvgE2D*k82H5?|$#5uB{{H=6fE3Oe6xqMA40@J!=<whgX<iMd#=4{ngLN1No
z=@!qotpfiN!YO%f_t?T;B|X@5?jMe=V$&DGs}Wi;@#`wEW2w9?ANk;q2E}NLZ3L}X
z;$s<WAI_h880#P2D<g=^=p0-Ryct}NsaFcP9vBdSqvooBEVpTDs=nmo2xa>Cx~V}<
zFn;n}Z2Gx~m%@vM_0>>{t)1U051m-B$S@W2#lV^CNz70hPGz9uUi1Y|fG(EquM4!=
zi6k!4WF~xG;up2#=Gz-zoX+=hf2B8?4C0`=vp|_tO4SNOJG}ayCD^{A?`erTjXjr9
z;kNZ`9Bt9&S?Mv<FN>rwnh+P~6GXoROv+V3mKjC4Upz10XX)zs-0V~y8c>kLEPUu#
zei8MQsGW)wo3Elo+E%3*A~Z^GNYb+0$APT=l#|6C$FP_-=XrCaCxn_W_Img@34bj_
zeQviY3<_KwG>cM@5p)X-sf5B(G9~m+Ar*3$HQhwlB_a`xP4jDA&4ccDGjXut_g-GQ
zeNVMeoGY{i^INXy>u<K)M)vf~)_|q6w>5xzdi;2DpSvtS^7ROFVP7(OKl4rlql9x<
z&Mcga7?mx+KK=D(JOOKD`u<fyj4k^&rxMQ3I=zqQSK$1TM2t-=t?_mdPQe41a7e(}
zbqmNX$Tg^wIt}K_scyGH$seN^c%HFA9!JxZ90O-7!N0)?yxj`Jq3iqTySHL(q$($P
zlUL*m)^}K9F1LviC+gwm+;ilm5dtDxXE8xQP9xKJAIeBg<{$YAv-Ex~^Ras^Ivp_w
zw;GPMJe<q3L=?FyA;zub3%~!Z%E7xPRL9kKiny5P$T_N)n$bVGyn~+lW}FX<23VWs
zgDZ)eB4eo9rkIe-@*=;1OakIN^u^YY46<TNl}-{X{N+&AQTM!I7+nogX2Kx~mO8Kx
z$&Q3Ww|8~e{;|i+l1I?wRxO-7O1_xjr*6}Tq?N;BS~8Rt+J7I8(I}bQZFR{>$C&{5
z%T}pw!SOp85CcD~70L<49rb6p_A7w!x%gOC>SopUV9Ps*&G21(&=o-j7vVLtaKU}5
z$J^v%qEv{wWa2TlQk^*Rd}+F)hB<%*WnjblU|X$%%EV)HQyN2(Xgv04F&$aS8f+=Q
zvzn(|c&)RezP;6oernBH^A_%7;bG*6n5Bw6Bw&}oRy|%?`L&c}v#P9Cas?F)qu_wT
zVvJ`<>Z+y>m~myb<h~eBQEyyxcEigbnrg9VB1g$GaT5YWABWYuscLw_$PYKSN{J;e
zsw_=07g1ce*yKP2<;bdB>5JmR1T~Rm^eiIy-~+S4d>m^Mn7%K@>B#xDM@hlwG;e*1
z{=;n8^k(q(MZe4kqunxN@kEVEx}An|IJfa)?BoW^L>T>45{<6woKG%m*fFV#Y}ZEr
zh9D8Dt`@V6fxmU<{9}6~cGF;2;2CFUgWN*4JDtb%{pjT5Veex!7v@MTi+$1A*>)#K
z7^vOSh={S=l`PYBJFq!RoBShhx>b@|&c917Xj~2{78;V2pa){?wka)D#vJC4-+g$o
zYiO#Qw4#b=B+hhB1#|y2_JUx(MxDxUGd9v55h)QP1-6t2GsErR-}sykw{IK1c!#ck
zMno0Q<t{p&j#0~EFldqXVtLs?PJx#a)@fZz!;zsCzC0&LJU8@=4pb<mlS#}50;AeL
z@4p$;+Ni!g)9dD-^#|lZkjdec4ySW^hg>O81m5P>vuAx;rL*Lk_RZ31k!HggPY4UA
znZ^R2Id)Pg<87gQtmFZ_?_XSY&#rdxulC1I`$vPGh2m~*=%i<%PnHW%DV`Q=<Oox!
zNOUTPJDyyvJ4>A1Pj|$pEyg?IXXm_SiqGOR`*<PuQ~PPqk|!oC!W?zD5t8k)P`_PA
z#;`FuBHws_7|}-r>$i@3=Y8<TmB*GJQnGhb=4;U3>3ev}0RUhngyU~E!K>*|50A6x
z4<u%%!k;I`&D@6UpB`-)QQr3Di65&svNO|XT!x_qHrVq^pQlB!NM?PEj>Wx8-=p;O
z6ML2`mu55r)_s*TzkblxW#{wxkDX(_DCA(PD^_gfM`R7CmdP=<UaoZ&Sz~_MFw|nI
zt*RrSGzGL}S<eJMZunMBIJOMGQ3FFzMJZW}j#t@;9_8@R5bo7UuYY-da&ko0AuC=g
z(XdtlS>%_Ai|ONlh*!gUWX}bL4GI{vutf;Xk*!wV42B~*x^-ph30UMzZvMg5e8jVq
zb19zOR`Mi*cBQW0?<uvQZjCO$4G_uwftKa;X%^q+BjI55p=-Y0-k4z@9qiF`i1iKG
z)R&ub7uo(Zy*;7FcJiJx-6@B+c{<cEwv><<m83#xgT%qQFnJ?d8<xF{6)Yi89aS3F
zfDYr^=mot|npy*r#$aq?Q%jFFUer749D9I_gydiz?N|^uP|2W2^RBIKrh#gO%Fc)S
zePu>W8}LsI_E9oqW6Z~YeCyF<^xfJo#CH4V$!Pn#DE!aPv$Cbj2lum`auWf}j9O^$
zXT@#2SKl^DwDK=?<KW+>bnJ|iZ2b=ff5yL~Mbuylo9ZtOAf>FJl}C82|C?ho$DJPY
zKtMT*jT=PrlpjIB>8PZ`w=7a7Nm*C;rJ!Un)B`1miXjsR05ROKg3N{EXqZ2?zG4>>
zVzUc)U+QDu^)ZMP8A5Z6tjx*}>q>$Z2V{Kebh&#t3lb82Zz85#4<^n^n|B4xtH1E)
z*u?Rj>KWHttyUxYXELR~(;sBR!LY9!v+mnQME}~h$yq<k=PtD>EXHb2%VAzbHMB&R
z)FcjE13VdjwpJAxytEl(r5;CLy|Kyz216m{>E21h*w3W(i_WR=wiT*b6HnOgU};H_
z11XvMP+t<$5icZ=N}lEj7tL-E`d07ZeIS88O(uQjG&TfuA+_?{fii|tUaGiUcNsJQ
zXF!<08IXx}wEDQc%GR#*xGr7Rkz++e!Fzn5BWNnywUin-9BxpD0Q-&hVDU^B*(@1*
zD4745t59N7aKlmB)(uj@z+$jIZdEC0gBk_B{g7X;TE{%{|Ld%K+~}P(PR{->u9rz9
zeh|_B9`HgM1uF8oa-)7S9MB8DzD~bvw&xUn7oE3z7m?QJl&!jaSWH9Hf}>Vu#+#*6
zimm%7f56GhG2sF0baI?Z<1&JT6WH&{U4jnrNhxp*Y1?`ra%ur8#nhQlspOQMl)<}*
z>eqg9N)t#(kv;aIt3{w}5xBBJr}Z?Uk(w|JC(s6dv_7xGTfrxOVRavWjMD*UcxH+R
zK%dBncmfn-y3*8&(*b6FL%Q1ZR~*;y(1<|xPzV#GkRW2_uK!6Y#2PC>dVYStTe2+h
z;RTtw|HCSfTOjPA9^G+=dg+9o<EL~?OO%EpdRu&Xct`(-YPZ(n?gu43*{^g)j2v)&
zEKqU*Cl#z*QYlG&sr1u1MT~eh-A<`9p+(=?Gw%>X;>KtWD+vYR@QD5%pq$D#l~b<x
z4*J7}p}d<7UhLRiKPVdQk5Gu&9e}oCT$$ynR<pg|&orZ=-aL-ypaSLpy`Q~{i(%__
zI&9JQ^n=kP{EfE186D$?<2j3_{2uc^-VO6H`5<ZBqJ!WE{p}{<Pfk_TN|m8Ca}h*<
z2bVQjf(b6Z&~-5UO^0iYVC+(`LmcoY|G&k4<EV&Rw|dyqsWzRZ_c%Rwri%goS1Ts9
z?3Gs^a=GeGu#Ezpw32hIPLMC=btMIb#6)WP2)gR=WA3q}iPK54G2zz3#Rv&wd-kPV
ze8CY1Jl}kyr~5ZdhEV#?YpqGfe_lTKf9$__>HgT;-S^+T2B8T5@eS?YO|l(=)}BA#
zecgKf;*S4#@#5uf>&2e_@#@v<*7KM8$Lp8-t^Hm5WB)~K@8#XP<_=ze+j`-ed$rfv
zdu7diOD!B&3(sG+zO@^@KG<*V?X7R_+vlx=eb?NJ*0=V@>)lta=g(bpuUiMN+#h?b
zgIzQyL%7=P!SmPqt(W#_yDz_OJ^xn!c>e9n)`9);a_>2wQ~x;lwzdCyT`#G*-PWt;
zuDRE(S9Z~hz1`M<ee-hn+t%w>uDKVj7yFMichGvZ@0xqndg(@B_j&83y@glw=62o7
z+JD}9y{n|nhp0#Kb7;-DzN8oJpX>$w@og}!{*Qh7!`|5|>ej*j#&LZ~z4+Fe-GA}A
zwQv1<aj@%OIDU4p>;9mhy}a9GC1|kgytm)%oc^p7c#f#x2wZZYAY{sgw*&ln`|j?R
z_V9Stil=eLMbE5Gyn(CWGGXc!roFSh>5LhNU52@$YmcHu{GeRj<7=vHOI~RuDEAUG
zv4l5e`b`cI3FWS9Pa(O!Qd<aKI0u*MUHE539`f;_n;f0j?2&m>T8vkcmiG@8)@r-1
zi#KnkkD@>7X{iwFVKxs63b)rpmPQLPvy#wmTp0!go<1LNB?>hsgV8VU%;fa95O0nP
zQ#P4Jo$NN&Y_#J-<Qi$u!OjPZ!_mlTkwT`m3|YY>;-7kfaFv5$cXOE(J6RsxAvcB!
zlo<`={4rUwHKq9ONXOeA(}Ro+ED%m1txshjj7#TLS*o>cN|<3C0j#zE@$|4Ah=I6P
zBt#?PPVyrJJ~Wb}+@fNjPLc^j*8|I91UoDq!zFzCS^n`Z%kLA_m07QgXH=IJ#dQPo
zNGVC-N)YUGab(Nt>+x)m&Sg}TXSZ0fE@OqVXtx8t8Y9QFl(poyKXt86APf;ynDX7k
zH7JSIJxj?eik*w~Oe|8|7^7Z5!v?097^X;!!PU`T$5UCcN~bEhRt@tNj#)zGD4eok
z%$&1$5Rs#`l#)Ek6SMRmSVQc)Gt-%FhZaGO$N5b($iMh&5#?LMk)#W#QJo>BT!-cp
z%MO++sYmz+#5_v1i^zls9Vg==+4ifNyE0qQ-FAj}(D67fMXnz!yw)<!iyzy)zmgLa
z&uMxM77U$`^5xbFS{4rjpBHmjJK(OO<!w!|*C^3XywD~t@k}PuyJ0~;as=d$?|#CJ
zs>yTCuG39w#a(}dwO=a{bj?gAi+w}TdA6cD5<xoR`m`M1S!AZrm7@MANoONv1eNBg
z)6{&~94_ls9;eAo9$nD^LPmD<b~KlNVbh42CN~r&ShG|^9$Sg+8W=Z_=R*1l8*+KJ
zM|FgUY;yF6gY6O-V*o9~=?KgcFJ@`P_V=$`I$h-1FuI+ytIP9?U;1aA&T;1$y*yC!
zoCBekO2H_|u&I>n`R$FZ{B$1Gzt^j_+4E>c=g={L{2%<skt?#&3?yxr)1^8A@)Ctr
z6z4wz3yX;+q`92M<x@7|uyI<?XnwO`ZGs>PMjzYN=hI#z2)z_b+B7E);l|lu7B+KT
z5zr~%u}pSAUQ{TW`^bp?L@xkH9@;ZZhk?edHm_(is3jD_vrN^n#4&e#a#FNBB~%<B
zAL1fN1_)gsmrr%CI;YVydK=$I|12MzU3ETmF8k@+;;=%7Aws5!ua^w55I`BMqHtxl
zIpP+mu!O*Bjxj1nd&?`UUPF+aQGg?ZCzo`nIzNMcqW}5uvVYj?zduv6Qi^$<a3yBq
zSj7ke#Q_|e$ogq`9q(N91xj>mFoi^-wNxSe81<?*XF1b&@#*s7yw`#Kt2NyG@zv$0
z-j#kh&r2aV<8_c?-zn3$05t)5JxyAQW$Cdt`lW~I>UHIqtlQ@dGnDDJz(KFCNoq<Y
z&U6neqBqhtO~c6+!h4qgS;by&1$4z}Mjc6Y2dy;BiO7(M!<9G#_8c;TVI4qf+Z~?D
z?v%_+=#F6EJZr71yAe<<rUA0Vt^kXli$>W>By5av^zrEHuol9bTJ>rSF;satdmsz3
zI!Tq@&T03wQ(+aTpsTbCeH}cSN|K}Gdr@}^>tqo?%1eFKva+S{RONFUDu1K$09W5-
z*uFLm?@2lz1(plXa%Dx49YQ!F?NtSl$aU%(Yu*R^(Fs=%8)2j*9yA}l>OX9n*p>*w
z9VDh6gyQX%EVaRAPS_7jmwI6~*DNvcRpx%00v?**Nr+7ClC@JX;NvKSRRY#DKNXmT
z`8S$FYsf83!+H&=jm<3AjgTkCQ<}&8r05)Dq3k_;)|HegkVJDh!OC`8O_kN^m$x?6
zUiUiP)ivqT3fRK4M5To%&0?4(7{Ek#($g9O9^o=_hKW;5pdOeONY-9mp6CeB%Hs5p
z0Oe3$;DQ-474Y)t&DFz*st=`tiAPx=VfxA*k6TTI20%#~l{e$_J`bn6g|y+U>L>Qz
z_%SC1upon5Ez%uV$*YWJH(7vj_7F+l0l;z2NmvA=o$V;9lXUh0NLx4JO^a=;rH^t3
zl44=eC#(m<@&~vbw|Po2nv!XYU&L$5Lm{kW@L2iB?Ti%H)F;{<d><QyZ^=At@1AkA
zL02nH0GM26(0Q7yyQge5ybTY7UBPVeMqH^*g8eIXSX@#wcRBfF*7SRT#7EWy@3AHT
zi^m2pw%>SJ@<JYk#d;rNRT@^KA4={C8Q}Y%s8Xx>2g`m6WRLDP)|PT@7J)?18@mMM
z7`^_{Fa0i5&Mtll={q$|&aheIrPx~Op+L6gGC$*p-Vdy~#HE|?KJ$eG;sZW;4``I5
zh7jIm){i#=l~#15WhNZ)G|$K39UcBxV?&JUH?{=Mg;aaVENjy=4E<flg4GieATIIp
zKHHYSq>3#u;Z|RZplM4q2s~tkqvr^CT*Az@P2Lh5*OXAXprveng;yI6C7#pq5?-?Q
z*RGFl1FXywL7O699GGqnmnjOG9Q&9hO+zt-6D~YM)=Y4?{_HN07m>p*=ezJ9yioAk
z56^z#5&7I_Kj!@EW9RY>9!fSoL)0jnq&#^5j~2>qF1ZCorTQ)&WQri;EGVsr5rw3&
zdzwtbO<2b(D`BuLr#>d=UZBYo*VM$ZJ;)1u$=d_%$hGEutr5|G<9|4VNB_L9ZAW1h
zWe6fLcTf2GU4d;atXQwgoww}%B7Lf2TV+Lb-k{6mzAjAZJZ8Ijtx2z3DW00NKh0~(
za|oZ$J}JTLY0IfK`9o_Xp!h9oyE4(7$;UGgxa1|kZKu8X3${aRi=p+|D5b$##KA*J
z#ppQCn!0zu;0ml+;Fij-kL<E^9O3aG|MR0@tKaO(C%yCj#o^V*H#_7|?jXh6vd~j`
zVq-@z$;8S)mqKk$^wuInN{aNDZ|$C|F2p3oc0)tWbuDk)Zg{{muuWkE5ydD1Ovk;A
zv<Li<!<>;vgQeFuC@Fy->W;G*z$TU?Q<0R18K<NZ{ucdLI?T6Z#$i@&*;6S+hHf6|
zEa;jn0iHE_3)#QZOiWv~0={uC9p{xidQ)t?QZ<&5*vx0+{%~S7px{TTcgPFy`-k2}
zn&3i(M7z}pW$CPDRXAmNzcaLM5HSj$*^iNu<>;<%!iTm^!9Iw|s>yw27Pv6RbBBf%
zUr;9xy?$sPMXrS1I?KW1Sj=jRXUpr=jX`?@nh$PqAZCT&rZp@XjBzl6fORJ{YT5@2
z;v`=bzDLtSlL%5~S;nwgy&aSl^r6KG$33ksd+osS63A@^%JVzegA0dw1}snU7!+>H
z<qKLYgY;%0C24{1o2@@K`3o)s2?&iCI)g9On$pCF&bSgbtGy~W?K~u<5|lO^=+~-X
zo58rc3TaS>4HFuWWwfQ6&z4KLnh`Ji3*K?H4xOy~+rs5J3mTK5iYap8XxW`E?O<&!
z<v^bwA!DeNI$8yxtm$y}lp!p#t2u@OUx9=AJW#24N;3BT?0}b8{?e-fva>;(eI6RK
zYOkIio}8SwJICQ7byB8jVa2nm6ICtCDkR0nkx@5#l{3)6-{jcn)8DPz=r%!yZoM_1
zW)M7OO;{7z+(MLkOLNSifn#n*eCSd5zz-RZlR6qTj`Y^7hUzd|2IY)OP6G-%b(<&3
zWGQzLn_8EX{MIl`YL{kBi6n<5vIy*>)St~^y$t(@v@>x8t9nqON_zVdr-s4x2=JkL
zmEo)NIXe2ldB}N1Jl<7bHKQ%sR>tF4>*{b84YzFj3kag6TvT|<crM9Hkqz7#40+Vn
zao@@ovpjpeC3dno5bvV%)=JsCb2zc4Of9rl-KhNGDY!3dNr2F~5LC);yK22%D*Kwk
zkhlIyM%C_CZB!nn_Z(?gYlcfvQd{dXO(eF+uA45J>sgW*(d`(yAZMek@fv)8+L$I{
z!m;P(r&pAWUHSQnYqaiq3-~HmP#Ey$JjyJe&Qjwz;vLnxXy5^VMP00JlW8KWwCT4o
zFxtsNabOSk5`xW6QF*y%{dQC#%s^AE)7xQpb9?1gu`;jc{pFw^qa;=yv=#L<oR4fM
z7Qb~X2twl(ag$sggpxhZ^Kn90OO9Fe$(3CfrZW@SZV_F?GGMW^WR!`nkEvFAN{K-+
zUrd>B7v%zOpjbds%BJyKV^>bT%xAIHVk)(s)XxX=^EjdY*-7!(wk>)9u?YZkHi|Z>
z(B{|hK2~^X4~B;?l9soArs;9U47c6})@L`uqS6#X7`~zEJ+AI8ip&zaOP0)N64ntg
z`GEsxWMpJ=`?Tx1(OtVII^eGvP-O0^aF){{<o+I=LH)QdUvnngBBw4W$Rp)0l0yq*
z3=y0oR<V)5o!-g+v}7lV84TY`4p+|SEjSFBk07dWo<#@yP2_te<W@8^I&d8quEvC0
zU|$14=ky*?)B*toX)lfHY-!S``@7A9-T%(N-P?c7?aEJd-0gQSntLzgXZtT+20x=0
zLc7{Sq8v2-&hoWB73<tRf3eF1Z!H!lc=?=LNwWKt4gvOd1<p|&AD4zm;+e(V;?aFf
zCc{mFor~{=u(eWO$eq7q&RE|wjV!sIX{YvgpTCw~>HJv7{$@D9_Q&&XyQ5g}AP2|+
z68gb}nE>|Fx;iQV&iRO|=MfF{8|bVVurxA==TigbTbA<4Xm(9WtPS}VirUPX{~UV1
z3I@^OA*UbB7<Q03UeEDb8ard^@Lz507-JG0=)8u@s8brWfY;1_1p+~wVALpqi-_?d
zTnI`ASNSGfgFzGSSwoR|7#?rT?sO)ns+gJiTH^8J&`v;rE`fiG^s?K8Xh_3jFL8Oy
zwH%zgohywzN1yazIO-uENSTbwjtEC`;b)76(MKs$;b>3Q)Wd)xk{%BkI;G4@IH1AN
zK<?cH;q{UAL<{Z(Aw}oy(nlm5-LefukOtB&xkS*45X5>ck#qb*0Zd(*IuQzTHe&a8
ziAhKm?Hx`}f-LwL$LkbGg5hF@1P3hRP!st7Q7k6fa`9{W+cWtA{i|VtX?ZRwYggmM
zW7SY)Vcw`gu;>v!T%LcrcoW=4?(ocC^e-E3ZOJwp3myt7D`t1cRFJ%JVYgN?Ck|Ez
zaSeHgkR4>J(osTys1VyuR38LnCHBbDfa~%`e#`evb3q+8PH1Mh#E=)_-+p*spKibL
z5BA~xv@cKN9VVBPAorZ!n4Xz<cuYF|v-rE6QJ!6*M3G<ysWe;VA>tH}!<~g-C_Mnz
zv6J(TPg5`E10|v9)Z)v_k24{g(?1M!+Nd{^yqH(}z$v+qdvx7+2tf_EaY_x}<dcK}
zsICX!ta%;Z>1%d;Gdwc<(I|&%t$F1YHWSD8P41Sb{|&<q0UemMaFS$qF}?RedPmND
z^!8f+^)C4`ZBEF&YAv#~Nv?mAL6zQ36vx-a!Q9g7EIePukp4d;fWp7~<KdV-)5Eaz
zMLK8=-Rx>hTNq_qimISVH;{~b=F7BhP)-@lay>sRo)}DN_wIz=fJ<Bh$h5tX3tq-{
zdtSiq_F=Q7j(L<x;dlu=wb?^8FrfMLaDlna&yKDP7KiNRGM5~GxgbsG*6eEpk!9Wa
z1KDVHka_JkD#f?l3KX*E#$+B#Xgtdwo?^nq(=|U{U4^()Lyf??6G2K}ZQuOqr=J=s
zaxOX`mCcQr6kRoL?34X`6DheYz9yl}zR)lbxkePmxX0P4x#MUA{mE)E_MJ{j4<)6K
zg|>$Fc<vo}!P)#el5CJmq0D5ZZT<J=^WEa-pMN&Op&TC_d|O2LOpbR^Csa}@sSI}#
zn>ZS#Kop2<j8BBJrTK81YTbs4A#xj%h2>Bl!Uv1Y7Zj`Sz*p;jQAE#oWh)eA1F<3s
zwwX7k+$2(<^{|2}57Z`Vvf0(DwaYH#;EfIqRT&JXRLaeM8^^wAII2{NLdsAMW^d~9
zN9673v?)PpoLxgE(IAtpD1`2_CU|jc(NPOEMsH2mY>>5Xe`qQD&Glj?18oRixn2M4
z)2X0$H?1H=qIpJ!XE<&QSIjyw$ufvOYDffBKMsIdjfED*3sS1f5iRO#m8mof&*I*$
zq(JS<^yYTHaVj7~0=LQb?%53gr{ZY3c6gJKI0Viesl*XcZZgct>YF>@?1c}OfGza0
z|Nijm@Psj|^E_97Rm@cyXFj}m_s5S<x<`HB;f+H2du@V0!?)YtsauS3eEB?l)p$E{
z8K=O5&ISgbG<VkNU3HEn0ZyNsUk1NuwOT8`KkfE<-LnsR!Ff-9z`@MtbV2lO!wrMM
zu`6xh!2rZ?PXsguo@e8oc{n<!!8mkI`6>?>GJxVk^x`$T^76nm8QGK^ByeVe_plw}
z3BAf18xuA89iYvZXAoDz(9|}~`D4aB<DkQ)#Vl~4E{x8k;TtAuU>-w-(!}G2G49R!
zxX#j1*VpNAv*t8%!6us81i&m}>1~{GuI`x5ql!qj7l73}C3A&y1Q0cDM52@CBj;Sr
zg6NRi;nvaMDuj(x_t}I7@W7LJUgkO`<C61Rvm|)Wwf5QfP%DhiVn8;}KYc%0o`0gz
z`M!HqbKC4=7wqWoclhVwyEP}e)*K*WYuEw-Oe9>BT^g>(Rb}6rtn6((yqmB!UbM1g
z{)5Mes=iURZYLm@QW8Or$1i0?{i%^>4x26u3<FqG{{t^XRqfQ&0?~A!PrGs#1Y9d*
z^_T{Ei2$i2|6~rP>1qbV)WSYn!PRd?fv?Gk(oh3+%V~_3FZ*=XhB(1iuv+wG;C{6C
z*5}T)a7VqNhlI+0u*4~@eZw@(acHw<x|nEgsb2+<JIvJbAT?a=Oj#+mdwOxwIqi_2
z`{CsL=<vjyoxEzq2VoPcex2u#N@F}429!>MzdY7TozAufU9kQA-gg^*#com37|>IE
z=byp=98Wz%5y;)PPYy3TrALSZNmu#2f7y9&PZlJ%<jHOyd9rfT?z!lx{;JV-`g6^V
z(CGG~&6FP8wM2ieYYD&dvbmA|T6_QopwMfl<w3?*z_iQihe%l!<<N<=6FxrE=ScOO
z{I^=rJk{k5$h{EW4)l8~6KVa_*OW1n?i9Y|v=luOs*P0Q;ld0X2V`LqeL=k0L6yU9
zFnJG_u-GvCz#KH)alV6R0%B-EB2|y0;0V`}Mh@@^sXvpZqi%H0$gcc`9A#!6%mLh$
z7A;vLnO)tSa_^j4MN<n7iSWe)h}}4dl%dYYCw<hRQQn_=Jjo66!j(Lhd$>!MQUqzn
zLBU0May9f9h9F>^-YV1}H0H!spGj!k=bRs{b%TvOO7H8aPD`dr@@~E|;;i_0jh?4w
z%9|!_IQQf}49vlaG~=Hs;rVqmn|%L0Ts21MGj7x5bWJ01o@9PiPlIFVVTPg6rc>(z
zBd~8cck;#nq?o<xh8Xp;sg_MRW~5=REaN}FDqaebqrMsgeF5@I_JG-LIcI6(Bh?EW
z6q1&eAW7^G+?%gY6MsoklBrP)AAhd%qg?gCmY|kLsENaY6`HqU9aVT=^><4pF;8VJ
z_?h`OeJjzZkp1(Q_A;f017**2otp?85kQfnXNf9wN1M)&Oc3M%a|<!rPUzW}0eE7d
z@`0vfh6p_Cu}uM`b5$}Hq!=z{uErr6yA%qo`-dcv%1I&NQ;}37^MtsMDj&-Vd`Js@
zFyC=~AF)*dDzQ|B0}BSY6zU9N3)2IFEuVb(C88PZ;h4*z>50dCMZ<i};M^3(fM$M>
z$si*(%||Y{S$%YwMe$8yYuBE^#b(2xyCqU|R?)>OZ)0X>)824j?~86Wk<?!leWuk{
z6qoMxp#J)b;%3NI`!zEY|9;37!hZKd)n$g-)|-qelsLx2sr=NE4CmeB0Bj;j_vq8v
zk7wsUoo#fM<tUM<4(X+NF34`|>$%EqDiFYYgo>h+U*yt4I+D_9cUi#vTCOpRg?s~v
z1mC1I*FDx0RiK$?1tLOSTkggf7NqKhb9r#$lhsoJn^Jq+N$Q`H-wr3!&D-A@6A=LB
zrPv&C(_96uJN$dCm4XLH=^xg+GWOt$z<WKpF^5mEhJ9(S1(3{0EwQ)wpM_N(x3tkG
z<9k<B%f#aaY#z(8U_ProDMMvzuf(9v{k7ihgjE`TJ7OOQV;a^gw;*W|+Yu#5A}@r7
z6VP?swntaf;4%ZQIP;&m+AN)Kvz=rkU}iC3NXV^gOh_KeUF%=aY&xIS(bBe^R=HD;
zE5jsRt%zWT9TQ^c!4+yZIxlS{f+&h6ICKTISSEE?<Gsn_RouRHb0Y-X1+QHQd!IVW
zLQJ{VW>yl6sZ&tixjN|u8hwS2%@j#c6{s<QS#kpyES^cv0#Wr+!4KZkr0{r6QJB`|
zgfC--2u9(n4OhTQ$I@-X@A*C(tB|ZAICCXeiFe8hSMFgN0pAZWsh+3J>o=Jqqg{r2
z4@FQ|lDH{Jgc2;oq2Lvk*W?-rsd|viX;REx-5is#p$x?iN{7$H^Cg~&3C|$&+DM)Q
zxm5=p-m<*LTGH}Ic#k#08;YLlDWet?2YA>{5ds7btYsFV_2SVM^N(sk9I8hJde`mf
z-~MgoZ)R?F2M1sBPo>}d^FObC!2GU}9Up}n_=TSbH!}fLdQZd1q>-g&g_DQ4C@YSX
zYcU^{{k~InqY^Wv?m1-@$gs4PtfNVM=hn1o!b*VCUzTQ3DN@qFg*WNF13*jtMgejW
z*O-KE%pu)c6TOz72#$VA3pTz{uWMbml73$7w{A6IBY8ghmu-7ZFAmN_=@K~Jt1LZ&
z<N2|f0@#NSbB8J(8V@K9?T)*zcG2#xl`PnUfNoU~N;(1)C3vj1wgs~#Q7f#dhG1#c
zqY|52h$hM-*!!h-c6i$9Z&3r~!4Q2Ol}iau8xJ$*km-Q7!7Ov!C1Jz;t%e@AqBaht
zQ&&<aX}M}Qo^cRP0p>G5{5t2t3K^Xb*f`Q)HhzUlupWd>&(1F%s|z)Mp<}bQ0!xyg
zszD)Z&FE?bA?2#JwDvD78Eb{v6iD&u8y5IdV9_bGn)@!8X&zVYr`~th6^2PO?L%j-
z!$+6?-^L^BU|hML-3g8iIaX|)DT{d^yy3}Y9<vbxfL91)3#;3$9Gq37SHMbbaa?Fn
zqy!)A_n?+_Zl&{#ZUMgv<oA5^UGKyKftm{`6`*tXJ|8$4CCP!Yk7M9~%}?p8rb-m_
zO!zky))qJpAy15Bfk_MA>^Q`PcRFCdP_LrH@GchKs2BFxw#6^$X1bkRbQ}Ifg&R4h
z7eEz;9IWsHa-PN&g64C+h006O0gM2=42NKw@;S|ragyDDg9ryN``=|w0X_5NDZs+o
z2wdja#6xp9y<f#f0YtiD3AV+VW_<>EqhI}A*uCL1yT1SkS%-rex(gQaiavp*BIA0E
zg62{&H;o_6Q91JGx4iR^Lq$f-8#tR2p~zw~dKd)UL260aX_|C1I|VE<^0odiuFqKB
zTdT5WMqeG&Hfu~pV=?@5t$T5P#Mnh$4VR@+DHX=yRS{a2L#Z@MEd)u1y?D=o-)oVE
zBAqYFq)H3}9279zGB2CX`-uxPaIG@Cr7~Oj*ZLEVNeShAl_Xr65`g`TAwGiHe~8%+
zXsvnWG@bYQ3}&;zF|(**Te}EN5!4<dI?HdM+<g}EPJ`fzMez6(r{6cppWQgQkKLjl
z0nM;LMB8ZSA-IX*rKLZe7CZPaq+ALG_+&W`ei7_$cj<I$`~`wqw`?Ewc@N)YY7Y)S
zT4lRbk7A$K$)2=m7`N)B>zf#5+;i`{X#E%a+tFL@)YhhKE?bN2e}1}ZUv*DAqJE=w
zrM$%W+Yg<y&gJ1r_g_25E5C9XT`M^Pbm~ozB{WPow}i{X;u)@*A8I97a1trOeNZp`
zM-r0X@DanpaVJk61!YZnJqvoB%g^*b7nhy)oy*QyyHhb6?qzuyH&76^Q)&4r2L#|s
z3WBFtAY{*Drm-!-$cr@Bbfw^^C((x6WXza(#<Yo&PIUU;qTYvgRPRYQK5#^-&524*
z94xn4d&j64x(ryM7tr}K9p^KML_lMvU|su&7N3@jkRx_$2v8Bdr#F#I7gOy~T}7z4
zL`;*uv-~c}c1B4|EBK!K;Y4)KEVuN&d)d1(AsbV*SntEJEW3Gdf%`_rtEJ*30>!pt
z!)a+KS)cPW<0NF-gjrDI64Vf>?*osP4^n}|tY&QIT>l_pF1q-MxP(D{0{baEI0EKi
zldn~dFHalm8!1_jCSUMWV8jEFqvq#BQA!Sg1n5nzVWt5WedFK&Ho~WS_&79Ts=)sY
z1C)3&l$<CnQy7o-Ca^?-;~St0=TBJh8XfnXiz@eRbwLNM-4O2tzV<^9>&U`#hFL(i
ztV}+wz!>E&ciKmdsD0E%3{yw8Y-Xx?My;Q7xX5{bP-Y14s>``h27-auV3+UP2m3Ey
zH=?aWl*<gwHR=clIPWuNHrA=N?Wi3##|jV}hJ*=o5--h7>zOuIow@-r(x~1=hzGjK
zYe;H$Ti>=`slUk1hqo66TQLeq%!EieQ7SbBS@S4v9iE(Qg%7OrbewX`#-SmX{_-VL
zCeTEoJ^4HNZm39HJ+HjZl^(*<8F96i7RlS9!5Pis>-n1d3;dXS;eF)mRG4MBqI3ON
z$c5oEq@vsa2b}IFwYG?Q>KO3zuMy%g_GDdyjp#8bRN1uQvLUnh_z;^e)m#zVu%2F<
zakb6fw3&piB&Z6@-IV8)=~T{UY4XlxKgpz{fA+bo)7Aa0`^8N%-$f-Le;0fv2^Pyx
zA|D~2X4ko${ahzGoR_p=9xr@y9h3*{OVGmFlD~@3wqp(rpZwxXL9FEv?nhN>9=?ZI
znQU-M?h8*Mmpd@Dnq96Tu8`#m%UMx5*tK#UbB*r+VB!hc5A+Ir?m@V(*=wtp!}ewO
zHmGSTaT2yxdXHgreb<31@7F5>;@+4vgB=@0jPyUnBM-<i3v)>L3={Jm7D}m{)ERQ(
z<JhaKs}mDum)F>Qfmz9I%=7+@S6qQX>>JEc8afZ|h(`_dS*}6}kabHX<O>XHlRZpW
z3eyJ+-0`3OFSxo5Ikg(B?e>3Jr_#Vychxp6VH@O?F<lHGDu(jM`HY&^)ghBcGN#Z=
z(Sy`Yn$-oPjcR)%>#qD`eRD`Zh$CDIY-q7R1_HTSi9rHrPeZX`@Yq@_?o=ytCBtfj
zO6$hI#5}zL)JS8$$dVQg>nv`i9@U76$2*%*L!y$C=QC5(GI3Tb`U(D(sS0m#P-ClP
zT9tCD$^-27Y^GuX$O1#;_<op9lPR~ZC8TZTiUD9ow+hc9CM5n=(<m?mJ!^1iDu!gE
zf!7r>@>lF!!G{8~o#TqKSIgfRarvu0IWGP7`Po(H?8@23tak6Iii6Noc=Yr2p@f=8
z=i(|H{hY`vfpVOTFz?bMPsE<-zhA8qBa|MtOiBJ@l9AhT8(l&=6l;)7#&7;Y|9Pu+
z+dGyFP56u1q{L7Ti%l`i(?xNs2NL(hKF+81sgq)`WU0PM#r3~&v?yXwVZo~Gg3-A1
zVq#R^lnmbM#aN#X?yG(;?<5$FS5?uW$5$DzbnJb!-~Y~g(liNz_S9?70~Btn0$$MO
zgJ?BorRN#rMrxQjHMeRxzS<9ce+gIWLB+^Gsc}bua$enawfstoAqEOUjLyjWu@of(
z{(>&#QFD*e$JJ*wNvSGCY2nntM?N2K;RjFq=okgD&?--4^a}cMC5+JsUVF+pH!UGz
zSVZN4|7&OSd&U{k2ppZ^KnzLFC5SX&5WpYFEVrf2<L?)@+nX41heHZKw$QMKr%Ubn
zv!{|!z(9J&C_fFu3&3o+pO!jGuLL`X2lTPq!QB)`qD0-!a2CN!rQ?=UyeL*0b^DrM
z6Sv711zri5kV|%M_&CFQl-Nj=?#FAJ5>y1kRt4<g0|hZy`j!2_H6FI{G<0DyVX7)L
zsb%k_=rYHPosm^0<925_jGjm=R>KJhj)IHRJr|cqjACuQDH--^Su5U)&5%Zbc?v(T
zVxnf_z9e+~*H#*-Ob|kG)e2Kd?iJ}_9k@J70Ghj`iX4STFjfK@>S1j|r&WOrw`G#*
zCy5(;ctxTdfr%`(X-MrZYQ-)A=&U>P@b{t5X1or(4%qpgKje;5K^v5)I8u4n-arWN
zE0oU$|KyqmMV<^2=SHl7m1>G&7GlWs<bLFemO08=6Up4H<*?7{MXt(%QwOEi(QlKJ
zj+}+L5KTxArDb>8(iW_UFb5~DX=e+AsWluVP-pgVVb5qF6{0PVj3S$lh+2v*g^zwr
zmiWZIF6WB1JC|48;}C6Bfl_`=YHMZQgwxdnSOUk&;KhE+vtmql_{(THtes0MI%}%>
z+I1OuS(My{*y*^cuT^JXlZMTlu3$l9>lwKBT3!tFDX)dB6qA%T738g}(Y;zrkju3`
z?8ZZ!=iCdM6f#OhVyUKUHIswbkQv@CgrRe;qTRvGSh&{Rhf(@kg<^9R-@TC#Z(0ag
zDRhzPb6uUcTn}y4+0tud$cCW8;ytRg2ELM@1>0e*NehO<vWyz?q3Ey>PAP;$Q0M0s
z8AJC6E71Y<2K{bRLi6Aj23skNBwHG+wjotHsB>CrA%LZE$L+eX@4$AebtfpZQV`El
zKMrEP@T=@U<n+1I@=$UzAvoSbCmw5SRvyN{60#CdQ<z+#_HOLsWDbl$Yizpk@}tZ{
zBcE~0avX^d&C<qL4KQ@)K7_PP=5NfM$J%l9&EA|XopWxnJ~f|;#lRC9hZUAIjr5Me
zM+WeY-U@K!hnnSNb=Sdn0Y6Uwh~n5Omr#~5Cv{pB`D~<nIq%ERbmr+}UPq}13l5o#
z2DM23CHJOfpOR7JyRhn_>n`P+|Bue2T9aHOng`7ciGZ2|_V`8FK4iiIx8I=7Odm<F
ztx4IFc#q}sR%aB~>;|Fyk7b7S_(8T;q-)JjQOQsr5jc(~DGmQ=iU@P`cJ%w?9hst|
zSw4rRX6eZ)D_M`x4`-jEkBgaW@NcxGGf~A6IsG(E=h55W^V=+24&Gt#X0bRRo8*M;
zP_%4~FJt8CTnRYJp%umva2mK{!ed6l!{c`m55ffZ<ux@c+$cl$S1WN`@y^#C^B6ul
zag%u2x6~6q9DUX~{H1@~y%d<A!rlxK24LH$Y3WuE^AI2$T@}nCkCnv8n)hC7j><D6
zJQTDm%9w7DQ5PD9!dvC1Q8V6H8GdMlol@23Lm7eKTp)%dKwc^B;%z{h=97#8gN{Vq
zVbKB=_>v9bSk^U!8>@~NCfGCaCRl8J+lc#k5|wIzL4}JW8ZvF_v1w%<@7Jo#P_1<4
znPeIw6MjyY?@*yVb!U_wbg-;a5YaedZQdaup`>L29&^nzN-?v6%B68ut6P+co9viW
zZ6gWwt6?1~0D9_0fhg-s)R$4>m@(!dl*DSd3t_{Fu;qD)-0(}lzmn18zq#4ez|DpR
zq=VvFF^qxNC*}>K)rzRn!!oUjs<{}p(BJM?z29%;Yw&iYJTlr<UtVxdSztvyGPG=i
zN`BN(7*eeb%<p5j4xhDhXR}M$XU}YUe9e8Unez21#`nzEiF~W@LtFAxRtWxL!QmB6
zR5*Y0pcY~l6t|ckKM=hu$06FpHEc)=oluBg@>YV}FCG+})JPEnbF~3+VU!EfKc1;u
zgT)PGMS4kyp)p}dp;?kDLP4m@%DL47qA@TlEvZOQvKiZ0z?yu1^fwdMEfw<%L=^uE
zC7jk!L2xd?rte^#XgmiJ7W14-Vj?mlXPgP>d?42nlY(V#g&cTFE404tPT)nBevz7Z
zmlNq;M?0hBe&^T4Z>r!(f2G63N`vRYae*h44M^dHN#-dUR9Uhi{g^KStJ2=o8LT9{
z@AM@#b8&h0;dom~k?c{BJC(NR#pAJjIs*H!P1z#ap-0%6EwY{DX4IVKC}!bj2>wjw
z!{ATnaLVVZfobQ7-YVjd5Np+>Du`LYNT*L5GRgu+%BQyH-zGK$PFIr?6Ex`baus8Z
zoz`7Fk=lA5mW_&<fx77@ytMFb>I*bZR7L*d%W`>I`F*mas0WinZng6n&7Pk&XkyGk
z7Nq<tg1ng^A+JH6YXSYbIvMwfAk_PbV^mmTbK%X~+l?j+8RWsl8Lca#NN^QH3Tarj
zH5L)G0Rb9x#{bGVA>ZSB7;1EQfkF-?ff;d&U;jcLc&nj*SN<&YZ|%#pl!|yTZbgkE
zqZ8#;h4B`aoRBrDKjtdgaG^Z-C;_+TgZNoUJ}_?CykQtl&S|z|_*1YjBSjMflgCal
zzsNq;Zfj^c9a=*yt%^8ZQe(J)S*%UOww7|y{iJZ$JX((fzUL5gRgDf=gqZd*YD`X1
z3xtYVj^WFy(v65&1Qk4)$k96UlEY;lzsvq_R;_)Oy*nN+!&qT}2!O_eyb*enxWgMv
z^n8kfIAyr=v<sCIdb<Y=cQU?q2_rsOINzW<ghbVtGTz`=C4fp9x{#HE0g+J`LMTO<
zSKJ6_I+ZW4qD~wh#2_8sIbE%YuU<?hf<l<X{C?RVQmYLym^IDxVJEsyyipfOd2FRQ
z`O>`ODzYY9AM}js<+0U7ZLp<=;OG*S2NO7MhY@n2bmaSyC2B}DQG%;ZMz;G52el3r
z!}{^s59Y0Md^#3iT4cazOPORaucg9JK$<bUvXx+27`b+HHvrVwth!Y1K++R#0jl2Q
zG){%`qoO!lnv0CaF@%>wi9&!^8LK1>SfGkQO>$}|dHtF?0Z&iioJ|L&VQ12T-?Q=q
ze?{H=^;&)mdJ0LzRX-KzSE!I@B>9YM<GoygtEI`vdkWV(`o}P(GWcFh5-xr*C?OO|
zkkV<V{Z#u0wxL_ge1r2dnpFQoU~=-4+r-oLg+Hmn!L;7p)!Mt@G62M7R93J+^y1?L
zVT)0DfH?8qQ0cabGL+(EDfzN45CX3y)sd$Te(LnDlz5<Skw{M1kl%~GaN^NR)<c5o
zmL^=NC<Eif7j7l<(#mG9JxD5+_u6D!B<#Oznly^p<w?d!TM>bX@<EYv*fSV52P*KG
z#+4jrE9!(7B%1dJqIVRCm^+9r-`KNy3rK~dqQdvg-!qk|o7b`x>5#>x_go}w4QT|~
zmkWPw<Oq3XgU$T)Ra6%#;cXWi6G~d_BnB~YtQ=~ZtfN6-@W0dwf~&^`xt1+GybiCf
zE@?acaAw&zi+*Xf@GQw^IAbj?grfM)RdoKIpV{c}<2l(}wEc$6p?2k5xlVnej%;$S
zVdU>M9YdYX$4ns1?xRJ!V=3%ZkkFebw$v3@v<L>Kii>12R!y$x@|e5V#I%|L@Yr`<
zy5n;8uDj+RmHHeE-sjF`_x&%tb*XdZo;w(qH(^f-ofX4`X`jP!U<M=8ZVIcfxI9s+
zB`gH2<e?f`(%Z|;<sJDpZ5eRghUi7=o5G0quwS4;g<k8xX*U^S4JwZ}T$jib>C;)4
z9=UgTBD!@RJ`vJ0ITv3$vSH$X1lnM7w>ROE4Li#;uT)}tJNnc;Iqvs9o^+2SloDVI
zR)2!Try+ZI4hFI~94>Zo05d#<sEeM2%rC1CQc^n4O0Fmu<t_7Egio01CPqOm7^clu
zHah4yHcFd&%UKi?C#Ggs8*>R>3DYG7`ylTn4>{B1h%>-#BT(|jUVFBuhQWNC!1@*I
znOO$8WK6T{*1_6v{-x$*O&yX)aGDNo`^!a#eKAbLQQ|6+Mo#a54GY{m`O+V<<c79m
z&(Dwbrc|rLn;Lq^n=h|%WeT))6q29#ZIA&x`3i0SR~Pmc2z7Xo5TKE+r(w~W`*@J%
z_3e^t<+Y|oAz~$dCY<Emo%0}zuhxm4^*)&O%-@7>{>=BK#K){Nee*eEIH-{3VvtB^
zLo(DNA<kt@Q-LYcOKX>SFVs*+w;NVvHPlA798*)V6@~n$qeKD-NPtQ}&eCD2<~li~
zCpxW;?a8j<oSNj`VIjKGuE*k?;TtWjtRko!94)2|J}Me|t~3<=++danzrQRp{yR`V
z;B+k_2Zol!oNF10h?6VS*;ghoser{15j;Cr!QPYOfVfHPyXGbpZae=(bw@Z(SAIIj
zdsnhfe8wrg#-(b)U<YE$P4dcOW2h6SMXz%a{=Fef_91>Uq3q46K+4<!Fq~atg+-Er
z2r~V!Dt)Y*tD{PVY=XXhx+2r9H()_OABbC(?vGp*cqweDr+ZN<q|<<|K2Iy^!UK00
zSsh<5E>o&*(DTH~^e_doQN!&D9BY<LrPUAEJW&JM>303;r{}%j@t>$X?R*WVm4Fg;
z_u;p0wp(Zviwdh_H-=)ToQpBsr(BQGz>!7SYq#AwId6x9ca@HoaLeSTJR2n7@FZ~A
z?Nee-%iQ<GUoNa~wVM8r_krzH3*%M}>&Jk8<#eIE!NMqfTSLnhBti(TVNVxSV?6sC
zAZNIQVuqU9iHIwps-ro-MbwnHL6O-8;L>dnBj#@PIX`RO=QPATW9gk)y!3O0rXoi^
zW&aSmZdP=5+3;Hk6KIu!_G?p?_Y<>(Fsp+W4qI-8;SD~WMW;FKX?+G)a8-fkzQ`ie
zuMvRmGcdb%bxsF+I{E_d)-l0o8HqkfF;>`{;7J)#rH9}AcHwq6t-OOkNVep-v__ew
z_W0_gw*xB>n|*Ohlc@-B6L<y9BEE*ICX#26OaT}{$Kw+MV)I4D#$rQ3Cj1mQk>E=y
z&_c!1xwz0+Y)n7Ny=gpNLxm(UL0F+SR36PCW8lxSM<hI`p`%$IkA`5$Q9)1D<U<5Q
z(0;BB{bfU>LRH0zfy{zxqIs|`Kg9uMfLZczBjANALg-?(hG&@EQMX$DWuR?_E%%aq
zqMMj2v3c#6_MTwd^#BlMV@XCD7O9+aEk{ZEl~PwLheF@sJEX^^=gA=m)4Ejnfmeqv
zcl>FgH*=#=;vh?t4p()c@j61!OO6YUi{^%#!s%b1TcyohLs`j}cxcE-J~HV$ZPe#Q
zwkt>(GX+Bbw0Cvb{t?HLl#JR@5waYvb%Z^P(&9eWI$S5&Dq`CTHHWV5x@}b}r2&ri
z$Z;eN5?9w$a@o1pn%XM)?8<zyCdjbiMO`L-*10Hez*1Qb9fjJQo1$9yxhx2`Vy3Xb
z<Q~ed7-#FEHhvRHwK6fVI|I=<HvX!PMWLn~8=$@=gu;YiJJH<MpR?^wli5uo%)D&E
z@Mw8bNEa~_KXXPN#;qeag+F8VrU10KayuY_z~iiXzZN$a$n0q5aYOQMRnjJrf9pwt
zF`(JZA-HveYsK~@%t7$BS(1E8W38c22g7p~J^vWlpgP%;4f4dc9h(v}k~0HS%6NBX
z1>ooBGeXT4JT3dcWV*C&l|N1VL0>tBTrH!tG-1mn8<r7M4+22Zr-SmU;Ff%u_Q`OY
zdQurHKT%~((T$gAlWxa#!@+T_)lEk3-3Yj<0MjC$M*fG)7=C(wc4cH(=CjCMgWf>7
zE!3E^&-&mtXI~_kzva$u7RCF578h&{O6!YaF(7+PYOgf1kA$^rRUnjw@v7?Ha?P8{
zJYNh=VMu>ilg$d$^qYDj)aeMjT&G{&0IT7fz=-ZP{J7QW<K_?4p>3&{kp0gc0-J7Q
zV!a+c6GoOQ621<UCq8&7eW#}MJWyiDMp3vs(%Y>EmGV-l6GS0wNyT%QTxR5t+F34f
zvmQ^xvebDXq$SsSwngpw6X+TmiXW5NAi=W;H%8PGatsM|ES$GS1|s7slxg1CpO^33
z(f+GFrw8>p!N%H~$B=w^Tk!wh&)&rat>5XeMT_AF6FmM~a(z9cJ@#-spU@8U_V<|o
z@ot!p7n4C6x02D~hsGvQ>}8^LNqC>{5C4bJtvC&Yh;s}M-WF%Y1G;BXmXvXOdhBNg
zo-flRYHp2DOi#p5I6RA=|1nMnyo1k-2o|%9HJ$(Uq<hplJ~@d-%PgL#PtE?Ow5@Uo
zUlFNs^TO*+3QaF=ybzAzzb`~GE1ws#9pr3lIP1Ue4{WiuQ=m*}0$t@9qz{`tS}<^p
zyzDb4hSkE0zW+Wti0agG^n9Buq~x;~^4V+hS`3abON;_k!(7tDAaU__i@R_KFf0xl
z_9vAb*TeVNL$0V?tDq(#{k|B+$X!*R>+g$vo_Y|iaSJYnC@UZ5`Lq?)dsC!TZ+uK{
zUlpfIlGMNMzj*2DBVO$7vnum%4ZXxfs`+4?f&Q(Ce%;&Me~w{wBF?{gf|RFNQ0Q6j
zX4K5^&Kq?b4uPBD$elb0Thp1s$flsKlV(-%U3p{HiI8iSRAB=!%DphT80uUut8w{&
z$<s;oNTnltd&6<A<R92)R45Wd?Stu#3D%5V0Yev#|HiTU1`O!MEx9B<{9t7cWu;Nz
z3;E^Nf@%L1<ChkE7<-Wn`hZ5C{`O}Ds{k^IB5FAnVnyr0rTQRju{e@Z+rA7nQMp&#
zc-VFcPtVeZY4m_~xEpG~z?Q0BD+ZOO#5F`fzljG$>36nPRgDCgH0JZW*3@@FJN7*B
zVEkHKixS#<P^s}?;P|s#OTQ|2kbK-TI>nz^tXVpbYz1Oa%kNz1n=MPxtkvgSh*<sV
zi{xmtJTIo6!=DFlrV+d<d3R5#t%ZxLc!;M@MTAT%C7gw_2L%Y(K}P={CS7Z2E7059
z;CIhB+)~D+^P1u$0!n3+V^gz=ZYh;iW!A0cr){NB<ao7`MhYa@Rt$~Am37{byoD}J
z--&CcxilW|7>cIizS~dq)pvy{j?F5h8kV?>D+vHZ<(e?=nF~5^Bw9q+LLaNuY6WA;
zOOyQtmTL`P5B<2MBt7-y3vxe-Y6@SE1?kA_Sr+TxaKj?UqhMs=ZKTK;K@4zH6Yxq}
z!=S!3R=!@J)6f-fbDgJO`J<9Zb@(AQw)VsR-xsOr5|$cS4Ay@5*zd>1ZF)W5d-RLV
z*FE;RUgb8rqND+=I<%H5U+2o$Cg~QdC*;*iG+VQv4AXy#k)`BVaAM(DM;2XPa2SXt
zWb|*7e~aEmGx|SrVf-yPt{|n2Sf7*VU-*}{PizN$!jt~|^Uv~_^%-qijp)}w<F{zC
z9l+UKd`lOm9hAO-(xr`PIRCO;mMqpD$FyuPwW7gq&PF3=c7fcq+K|!YKg%=&h5xQU
zqg<Vh(p}Rr$plG4HpUE*TK<Vj|Br`fA3D7Nc0Ec91(A%(963x&r&UfY)9cuLLqb7!
z%upBQJOcJ{83c^AA?JQ@1XLuJ9IXv4(+7Hb8bS{5^HK44&^K_1fEDdCK{Lz!u-(zl
zw@_FwVAK-K-PR~HzrzKyGHXFC-8LSF-`GB{NRn6$Pm_CNMPTeRz^q{tS<DJr04`0C
zxQZ(0&hv)smJwY(oJ{3%mQ%ywNgradhadXzG<}JkqkM&IZKK@JR<ZqJcL)2aYXo-)
z8n<@sBi)KQR>#&A=Xr{toK}265rh0=1NP*v@c6Dh|C1~817X#}sAg$z`I{x>7|`$H
zdE&hoTs{EM*2t$Hdp1;yFDp8DQOKM3)Z@}XiR?fSCyeKKfX~8&qR;{b`;WjL{h{m(
zT;`ai+uh_^G(3<BN?t^QbVKSuijD2D_^NFS8M_D?N^4~Rst@9AOf9<1w7wLP!EvIK
zP_~*hKwpXAp<Ih?nS&clZR>)*)prop{ot210yL<YW^^MOZ}3K2Kk)&rfS{5-$c}lL
zAq~5-g{!q#oSfWbN!SK39*2rVG|-p5L;9fMUk#ToWVu*u48WD3_17qf9QV#8b^xua
z8%9UdtCP2;+OeF8_KGqtd#eTugS`3|hgToB^}XMY`)IQMl&WD#9bNNhA_EWzHo>Uv
zet<OiP=0QdGSW5|f(*lkp#SW|1UTl)`#|9eGPp2A=th-d5nHT;!5eY~y)sil;gAn)
z1Gi<+naFr7ZVdY^HE~kvmh+U8a#*HQb$e%Bxq<<)lzgd_L#Rm(lEbffXX)HxQ8tA`
z7`;TS$Mni>IH`wMQDTYxGjBzQ-e(AD8O-Nn@eZD7$cT*nxf>die~}m77tZzKfs8FW
zYRaG9rsL{oF^=oF`f0YH$yxo7s~S==jb$L}Uc)tJed9*8um+Jktzl7>Q8FNq)@0PV
zji=v5UFih20ARlL94~HTN$fbnw1`tbb1Q`=!|FQq5e_zuN&-_-IKli+GGl1-xwCzB
zoDN1~v?ww<qawErO2xbEd`J->S4T!pecMhgRPFXac{rA<*4@BAFi6-F?1QcH#gg5_
zZ$dfSK(n5gPLRPxl*DClOL)#YpRpQQ9sSc&8^=nw@#YX^;4-#hJQcuv`Xn0kNK|J<
z7egrC6lYhx#gj49`$U5JA|f!l?Q@8#4qzr*YNmws1hl|LG?)(9ssy~}0VMpO_JU|>
zTk*bHnW8<kR5@ZFPEnO7GYG#{m!~^H7J;_bi&H0i<mqL&z&@WbLQx3V(;-h-LC1{N
z>P@jTA~B&+K3w<^nXw||51H&*2r#$!zqFHI$)NE;+0fmxEUhp;D?PJ7D)SalNVN~-
zW_JnMdv%q+45WjnGbYL3E(5x6LNLOHT~W#eowOR68Huv^w3FGqoqt6WpHF)w`8+=P
zLe}-C+u%w7N<g*0thvy3hfSSfGu6-lLs2;wnfsaR*s~wg@^gFU&`TN6_-P5PacBtY
z(FI+7+&1*Itj1GR@$i&eGR|9;-qv1~h2<Vce;aK9W-eAulf@#(4r7AvU=&FiN_U++
zm>IzL2rJE^8_wO$OcIclB%)hTOGI0^!xoF3EM^(|fy_>1H@B^@k`Ypv0eh<6?y~ax
zoZTrL#ztKcIwK6)3Dq2z?ry%ASTxEu<?nj>It4k!SH7Pm$x-jPiSrRiWM!v$YNjEq
zj7ib^c(@1p++>0<yu+m6L_0m~oxV{_7GeR8o|d&`>_HKOUXVZb7(WSPdh`ZmNxD%o
zSV-wa@OxjB;dO&~@agr9X|HfiI6}ZOZ2gF)_=pU$IUuy)DoQiD%R5>wIW1@jNUTLb
zwa?GqtK(vg@n;Otljo|7m?GKqax^(PWkI>MBGWW=AdtrThWbn{TsS%TdS41Ax618q
zX*j^G#e9<U>YGE}8&t_I%3r+$TEByvtjI)%f*g>)N|O&J@q_541$Yj9ZZl`y;$p}i
z3zrnm7U7N2=W@jAVaB7F?9+2|=a-u5=3!b*Y#U#kxHhqzm_g*6+Y0K!wWPG6Fm4Mk
z8@`HrRwig-P@)#?N;@aVhZj-#*neV?WKd`{psADrpkIQsOC%hNVg+9ohG@J-<GSbl
z%gg>@yWP3C5*}67wh<V5QC7J#<deTeuwF{N!0oJ-WHmF!6`HeUWixl#5<%V+xx%S4
zp=EMhO#Pn@&#tOHHlx_Ott0mcxK9mHr*z1v8Fvy^w8~bGE*p5Il09a@-+Z?033<UJ
zF7Axbr&T@Yq)`SjvOc0AE+sVQB@2b!-G5nzYdSTVkOj-ZJm>1x>*2!IS|i{nk~V6%
zHlLPMaZD)Dn#b6?W&>%PHRzVLC?>G4@D9*9{3SX)enC4FIlDaHp-t)ZHP=mXaTyAy
z_KryB%P|iQ|8qi@?Y*My0NLo>=i$rA7UOZ#7BMK|Zsati5gz4z*+%;!EYioS;7b2{
za(WDVF<1u3!8R!5@<~d=$uclku#K;BI<@QV&z&Z2-rU`N^{u(#f6K{!q@m4L_wu#R
zbmyOGOqcIIkIwRYJkvq=Oaa9d=AHG|PN1`HuiX~2o#D)ucInY8<_l<U-rPvsku&;{
zMqTX?R2Zo`j2fU&)i?=X%mHz=M?ProzJ9T{{m9E-`<%b~=e(n94tAqnGF^F2D-A}$
zTj?oh3sEI~@@aAI(|R7@XpxwxV*&7}$48%8l`2=B_Qmr9so@Add2UXp{CD@-Lb49-
zFA%%JwW?kL$o}{=Ei8{H6{CE%`mwi_?dj|sq>+pFd~4>UKPDbPUg<$!Hf{v|>Cc_w
zpkK`HXV9u+aU|W=V<+QWC7#vny2_t<`JOyWnD_&TGD(JDmF%f%6SnSymZnrnj^Gn=
zlG0}w4bq|hE%{OTYVR9?_C#fiW4a7EW2LfK1GEkXWo82x-)5S@*WT++zy)n|7_m7j
z&l1(+!pG-y0hS(ZZQlMnXTZwVBvf!LfkE~l1c^@aWO`jCBI1)Eco`=Dz^<n{CYVog
zq1x-oXh;6x1Fl;8St}Uk^9;b9XI!h@;74cd&vL%e4_&*YQ@^Bt$9B9M9ZqMZCEW(9
zB$-Xf<_HwQxYIw5(@EUC$nWx5wrpPJMI6*Dm@|DePN*-mmToz}KqJMqd?Ke1{dF(8
z-)lLg)i;8&*GQYdCx^KwMpWx_k`@At=Ts_+LYzDoFG|}8R%RfiR+2B8#HvigO);7)
zfL5t>gqh)Iu)P^baJi7N{#n9}_!FN4WHCa%V%B3QDq5gk#ExMIjB<#D&QaQ-F7&Mn
zeRAPwA}MIaL6ae-f}g!VIsDK+JMSNzbkB~vXCFKv*i!R9&?uslHXhxZio+=9N|{VT
z;ta4`wWG@CVk0WM;TxbIrSao!d<7upXl%f9rgc7Mt8hU|-5AEuIR)|3`%mWFy1^$n
zq%>f|-6<(&s3fHopAIF^j|QV=(-T-@DV2WG2-B+k16lf<0JY~J_xvG7#fNw{rDqIE
zot$9;C1*@yI|~^GoOAMxe;sv?8SG!g%^!lBj9dhQ|3<c7ogz6QF$KW$HpYJ5<UF3c
zT7fW{yqOE<gXZYf(ggS*wnE>GqX`V63wzP<EI&#CgKTMm%&!&7eJ4I8msemUgsjg7
zS7H=861op*{~NxyK~bz!p)46!`REE=yR+T;oh`-A_HFb&8I*Rm@PtA|Gc^5lOPJox
z`CtNgbOLSCFyt`if-dO`v%t!7hA%2~>f(%^9=1!vsv@?W%A7H<PRD^u{KS}bD%6fG
z?ixl=NI)A6OB=Gj4c(PB*(p0qp|wBCg%Ja`X;LgBsi#<^#<g!_H;6~B6C8Wu=P0F)
zd5dj@rq%AN*Oq7bx&!lQhKlueoPlhr-nn>xVhQ>~u0#Krj^{VjoBF4t9=(Ph7r=au
z7odV(+68`1kPAUi6MbI9WUVc}$PXG(cZ`$#(HU~%XUHve{6%z}3^76W*Gm8@$psTq
z7RhS;B&<LAj;Y;;^Y9c@f?jr<_!u`Wui({=SfE+TZuBKbj=Wc6G+e<Pk2%uHKAp;N
zq#EOc5zq<<kwT6f<RA4cdQbwn;!U)-t%-htfPlW+a3|Dh(c+;ucAMVZLWOgR+5U$M
zlPP`jOe-4pw{;9;86$tndz8tXU}xF&No-`>Lf|&<ewKhnI9lD832n%6BP9L85I@9I
zCP`q9XqwP>n?jpMS_h)Gae?ZH!m#wQ)R<T$n`is+F>U#Yg`I+WIBlf)gRWrHL$>G%
zZL#y*@vY7h#E?AguR%RZH!=kd7cQly5R*XBvM&`krQXg}uYGvY>0fp}^*W}1EJ&vQ
z(WehUIEXHoUT}!q6qo!t-@pEzqj>b1^<0mOaXdk>1^x9dp2dI9(ot(PqUo9?^B*>=
z0JG$?m|LL>BwOn~t)C2g>l=<Oa#fxSvCqxyS6L&?y(^(slL^S)ciV?o9hwmZq)M=C
z_FhM=R&?-OEaAOZ{MUiag?~+w`{*Q1U^c$}gZ^la-!0?YJTD0}eac3;*aw!EN=6>*
zG?xH1dq%unB#tG*%OTB@snmzM<)bMmMi<d%8m}<ekz7^%jmrOtcL3{5>b@FsdWa9C
zyaLhyR1K9Q_i5;bCq^|(wH(ZxNk*4zkZ3MS;+alfjlP>9CaO1%RYqY-^C#IrLVt*3
zXQC1%mD!xAtMXqh#*)9V3JPie_$=5^=A7NcRDpEf1!7&W+$5CO2-A0$$7hB8P~FQ(
zoQ@AiBY2a+VJWEdTTMNQBwzeOTC_)`rEwi+ckd7tz%<8n+EiF170Gzjy-u&!Zy&Zl
zc3_)BdFt})@I)%}#dbGbzvPtSall6Ndp_9I$jSNnkDo4hb;HaskuSrmjB*|m$qT5m
zHs7)Sc$?c{xR8Uc=^RMb=J};9P#h<QoL6Uh691mhl-Mv#!CH>T%AM1I)<cevg)iZy
zwWuYxepT8GG%66bQ8=|7e8~8lZ~*vcxABN=Dm}R{8NK<g!rF2Y3m*?6Sj}r@hU2t@
zYu~mh*&x>EBI&@QrK=gHvv?HW)2=$Jb;dR!j@ic}PcdhMVee%VXSZ#AY<MmvnEQ50
zb&m^mX<?ztHtG!e#DzBSq!zv@M{6`BjBKLbWx?9?2O2xr=mBF_H^IL@6gdO`ZHDug
z23q1ag~Pnc0d>EB(3cPm>?Qj|Plw<O`$j@j{+n`Jt5>XRO266I)WJ$qYkQ^NJlYhE
z^Zj1w3i)JRQ}WHDP0?%Jmq>*~wFgUtxo4H19IX9`y|;^)wkYx?PKRxHA@r}eQ~BuK
zoL=T6;WKZ&gMO*R1bUV@`ff})Y!0X=7HNey5@=JhhLD?sk0-xTuqiXL`78A$*W(4K
zHX4@Kmsa}20jiqF#AJp(YtT$gvy{n(6Mu*;6*5ph$20OM@5wZyN1c$XI(bKi^DIqf
z&B;9Gr_~igu732ZQOM-8o9M6md;7nwrHXGvkD4_`x&vbR`Iq@VIk&F#-4{!#9<78b
zx$mJ>(+KmAjw^wq`m!i-`kG84-Kf*PdMwPk)~mVpUd;_%^KEoUqZWEKzjn?4X)5eU
zRoCArI-d<VsS%MM?2zp-%4dB#H?m?!V0+5i|5NvjwvRfK)b)$`2)0Shmsu{eEcy`t
zL0jtE@eTg>-3%G?{J~jYYo8(U&u~r6yk2<*bWu_PD*V@GEhh8`hvqf*xxrGQ$<7x!
zIY0Z*KRx`}!a*Y@%(zzWPldDTTc8ISF2*6~^w;;}93<n>Pf0p~H7Wo54rXcVQ<gS+
z^Tm9AL&kRNxbs8fo4*{6X_NesjymeqTOe)k-f?%?7Z!OQW`|`Lsi1}am$j4@Qbs;?
zh&5MD8qA{_rreBo;2OuK7C?nazukZ+`LHBqohfVHBA_@}W^^$1_(aiBat&)boZ)Wq
zfJLL-i$0vuG&;-*^zv;?f4qxn!48*Xb+?jr^|NbV`^dlcMDk02TZ~KZ9afa(mx?%p
zfnk)&xzIYWk_o>;<COW`MOs_}N#8M_dJZIqP!_hU^bgt$>WHnw#b=cTE)$V9T&Yh!
z3s<-`DUHb9R`OyrglUY*@`Bba>;^q#igNdRE_T0vM{{hrm@R3-v{33!8xuf1zvLNL
zxTlkMWZzAza<h^1MvcDDt0Ai&;uIECtx90T%-YCgIO?I=b836@nLHJ^aaaM?tmYXi
z=SB6x;BjtCbfHgin5$ii>KB*MU-u4n{l@Xw4h(l^RK$JS_NCO+t~g7{={lkFV0asb
zZ$eQfJN@AVAA=*Kd)A}1+wYuST>a92e|h-fv~zaV^Up1!rWU4E18c{OtM*Ylx?hY@
zE~RuO>mqX!z=?xp7Z(1!bl_a&D=Rl)05X-D9VF#C2v=~S<IDWC+|NqkYQyCQe4)i^
zRG?LgE6@iL+7i@gLM`S?3u6pdX<8nVbjHa-4VG6*XBm!E2p&FZ-L#@w6A9uHcA-$i
zspcblHAB$Wwi||jFF!|_OAyl%0VBuQ8af|O*QORq+OS~XWr`e=Wv1;1NZHXtY}MNz
z53hRLTjFdm#dIEI6OWVY1fjsg(LESH^>Hqff_4(J7cOQwi`YbmH?;hgQT_Pv^5RhG
zP16~`NMw7tpPyjEMUr4?VN&;-Q@{|@WDM#Y;I$jkr{3ZFhA==x@eSE*44shFnV#?m
zyDxY5o4b2W`mYxUuKeu(-?mp5qo&7v`QqDkV2A&N?e@?gk;Zd~0i5P@A+^)qxP!Q8
zI3cnu0G5KL64P(WB}>C(HSHGZoU<DneI>Ypa|V6NorGjnc%9nau4PX-_+eVwJZ&vA
znQL_)y8rSyJbW+CQW?Y-Hi&|Oe29*g*-i5l83XtmlfmR&JRYSt={z1|3>SAlNNMuQ
zQ~VH=JV8piJV@$y9QYh?lPfnYkHN-B@Yca^!xv+MjRL1xltE=<sXWWe?I(wLW9Rn&
z!Om$6dLmpQ0Dt_ceyz2ghTe7>vDtqbFIP-vwd%2wcVgz?^8^7=&C_etu(9S7#II<(
zc5y#rb)(ZvDjay@Pe)BUk(>B;laA%RH79cPHXFz9SQB`ND9#K(*~gPZYqw|E_qMb+
zg4k-coWM(v24S+$S@L(U-SbpOO0*k?y$-Da;WdluFgK3*-@+^>a$xN2^0T)ucTV0%
zB1p%C%*ODI;<-^Xzivw1zr{y1?G8geO9YcSNZ8!EvEaTS)-F%pTc}LMm11MoQ{bx7
zL1VK+0#V{*z=`1svRoKdspqvOkK_u@bl?eGrJqjkKuGead(Kvz**^07+)C$Ul$tzB
z_z6I?;+-@1Aj>ZRo>43YI*I7DUc^ZDT@}e)elN|uozD5Mcf~RzyYh?pM7aDc871T4
zZH|pOOYS$Cg<VIHRn3k1v}nap1Nna@d>@O<vo*n@Q{z}Dt7MsnR^OYbmx#)xC`Db*
z;+u){@CRZ8hvj8Fa>Lt2c2}v9QY@~V0^QFc5|^)W#|P+ZkSWW|w6JaFsc@ZnvT}m2
zLBl8>Ya{SQSzN8E!06P_`=a?nanSrB1&IWT^rlm#Xtk0AGyIuIguP4Y0{`5ET>y>c
ztY{EHA*XXOk-2AJAb%m76)eohldU?|54Tuxj&*ir>SKARSfiq<GKNPy`Zx~XOqKyx
zq?8O!#LKYEl=W7MoJ3gH_2Exp$)0ef!xyaB3Q>Xe2FQh!De*$;2qj}$ByYqFV{6sz
z=t|`Nhoe9sv$D7)-=2Z;_3v323OJi>&r_;(6fE~*WPPf{D1`PZO{PGBKxdL|QYlHG
zLr;pXtE7Jg%2rrW7@4n-N(^IF@6jw`5NVGV8pL#TCn<{J9sOTxlojzfjU`X{v^#nH
zv2TPIeSiE(PO1z`Vu5Z{__8cYJR8-dZM{5420U#gt>A;OXknk<#*0=&zHY!_<1AM`
zZY=*C=ru^dT~p09va$qRUYjM8noEMI2?@$A_b^~&qor-IjBe&!C;81-;ZqNZ=~AYg
zEKys)Jw?schxh_Q=6e%*E|loKF%cOC6ipO-MOQPR1+yE4smi+(`vG#4oCrKO|Bln*
zhEAj@u9hPYL<2dUi|KWke4Ni8+xwz#v|f73PYN?(4Rl2|V!8k^<zs(RVqn7)OKx#R
zd(%&g=q)Y!cjSxZ61jVFX7PTd6<z`4mG)8Kb%Pxd?zaD(S6C9m22&lg4un&7yto57
zkdzFlT}9VMj}yQ4N*a;fo%27nDg7<K&7zNFEF^`i6$`lFEuw^6zDB-Xph##}IKg;w
z{!^691EggDD13AvwMN6BH!~z408(;k1>4aymp}%q<p|_9zvLi*|JNAFyXY<d^{?-4
zSaP0U<>p-iE^!F{lB%@!^5!S%)Lu&<<))L%JLK%%0=6!Hu}09{`DE^;dOH3#Hoh#5
zKGTvM;tjsN*MGgEd5Rx8LunIZfI)hslq$fwB=S0t($V~jep}z(mfR=J0$PA-%(4N2
zsl*E!8-@c1#3B~Q2C3bFd4Y3Pp<yX8KdD_>$jQW7jgm||sm2z2ajW|WJzCTw+lO}0
zlpj$ANZ+RTsv1q-_#Tg?M~uaBUFB88)tPc`D+Z@DRt<rNs*zYIpALS@R=-y2=Q)Bx
zw0CXDq-%Cw<BLeUvrH~j8R_|_mMlIL><vS3-jP9l_w>UtO(-Xfj=ER<-qmII>;vm@
zlPAwUk~dXg?c-3Zh($U)BSRlRkNX6c!)1|18?s0=J!WxnizO^r!f}3+4sA)_J`88K
zcS74RT@1)1@V4kxPBvB%{g|f39j5=6cg_NO3T2^TqhQU=Q7*$Emc^H5aq#W#7v~zH
zI3;?Y%x)G1{qQaS-Lk*m^;G5S@I&)c?@(6VhP%T9qah~adZvc5TkZ&D(2ME!e(Hbh
zoSd9PC9vNXQ9#281|=RV1s<VwETCq^`eGj0s}qJ6Rl^3BcIW`T@PXQF^?!uX@9<N0
zggA4M5093MNAon5NnvF3V*tY~_P|ODQ>#))vwJ5r4O=dFpbaNcU<Ns~<s@Dj3w`W$
z)?#l{3*(8IB!J79mkWp_nq0V?mf&$=5!lM+Em2@h5|@`PK;J{S{2dpO_uV`)kIg64
zi6iXH4AKv_m7>M{AVnvwsCbCJJ9}em*Y^4}y}=kSCG64M)7{-XJH;0;loWI5z+*);
zsH8<e*rqP~C!MnoS0DSQ-QMZpRr{k_>>R6~i$=9}?P-KRvMn{iclXC5%$r)oyvtds
zZrlYHg<1Y9Dr6CZQB)(Ot;=bjtz(+%y;jtYCv@O$MQ=xO_HHmw+5TU#$GrboL3+Qz
z`&Bk|T^c-tY4?SHu7}rhDhBgJ#I9!|o-|?pe(c-^{hZC3Klo(6+ewe33yIxPFQ>zI
zU^877n-k#!AJrRD3;TPBOd+hdSK*3f#p)Tu>#)04%(vqlc%nO65j~XQ+$nzPt^2&C
zpT8TVISxfRa>!X>kfu5;Ys*^T9kKUVCW|#}FZh`yMHor%zK`~HTdh`qKk`YQgJ<#`
zQzks*OiRqgP3AqxwHt|w&$$8)rMjX$DMV%_6CJ8@ma0ACG3Lb5q6F;VZmMbvqNw71
z7xurc+c(kHc+?ywTY<RDR?44f)&{td@u)vcf?wdX6rY9MR?MQ7PMgzF9Gxrh>yg{e
zzs!SJzIzW*eR$nsF7<=mgKyoril{v;Mp&l}a66FaMF;YSbU}v&=(!&Q2l3HvqC+R=
z?H~KczntNJWn<SbMhUnBmi^H(<NbZ)c?3m<8>izkp#4?C1F7-n>LZ6J$VN-d)+|X!
z90{SnTZR4oZt#0iXnJAAA{lP5NG6MU^2Jwou0)T^xR=|9ekQ(+k0$>Ybgasx(k>CG
zaCsPVh_!;5X{36Sw&&X{Cwt0R73u(rX!|w#ou*Q4%{<bku-HGs<<I7QXh?}K$C7fr
z9kQdMPg(j!X(HOL79gq(Uw>P32D6etbEQn4kBc4pwpHA^SzzkIML>OJvj*IYOgmLa
zdaBkusktI{-h?G}7&^w+=?nsn1D}=@X^~<D9NoK(rzv^WZ-F7hzuv_IiKCUWdw=@v
zIgzMUG94O=8CN>R@LOhHvkGUp5`pR#=k%k_;xQ-+;@f3BxQ)q!g+5Ek5p1CT<&IYM
zmw&j=J=z(6Vn+Q(`Yc`4I8#hEAG?WHHVIQE_$f_61mI!0xf!_rGM<0`;r?&#_Mv@j
z<K6LymkSperlbAgp%o|7R+>~FhCX%AaoD+ty4kR`w&$By&CPHKL@!niM%x)zh^!y+
zITO9T8Sp>C7hJ*5mkKE)Y9*hDv*2QvPU5%{40i?&Ubq&gAaSM&dC@eb3!^&OnaQZB
zb_}CM+<|R|Yw26+=>V}^0Wn-xnE)gxqg+RU;L*DC=9qyui7U(jFKw5_?#Qf|51@0w
z1z4lhyF^jtTRRWg0B=R>8t}}au=406LynEi2C|xXa5Q4+MGYB(Vw#4k**lL}S68AM
zT%}>Y^)iqaq|J_xbYT(rQ?WPfS5Yq>|AC!~{^#8vTrDr?*6PIAUrq2><&AeH1E9Q1
z4qnGYqZ$-CP+p%3s$p<I=ssH7%gU9Fya{6o$OekGv=18SdP8f*)9wtEb5HK4aalEz
zSO9)$WQ>f=Oc8jTd*-^;!tgp`@7jO?v>YKKJ2Wz-SV5`lK^BehvDPdPiS`r>K|!rK
zyuXHudEso6fd{=1pi=q(fLvo%nkg1kD*(xYf*PeMcq)Zg5>O0D$c2}|BBB93c<`yd
zl0?WJ3dnMik1Eh}E(mP?Fr0sJp9ru^4r|^v@p25#ACT%l(x*Q)r_a*6oX!y%r>E#5
zR>>k9^Lk8^c1~_Ihw{}3;y2})U(^UHDg*-Ca01Hn)1^6hvYX?fxu^16OA*Mx5g|0R
zJOx|?=c^VV2A@%oZmy<5jgP`Zgnlz|1ROl;7<%t6a+yrlP{~%B5O|f%Ibh%=jDi7s
zYU;VSVWA>>5s+fhhfr}1`-SZafqUq@!i@}=99SvqvV`gC$9jM&bG?l`uby~C#LM|o
zLYtZq<`eFTlq_6l+QQPIMq>Z8sW0If*ZK9qyf;xB&eZylpiU%l4-;W)uMNl&zN-mr
ztad}w5#Q9T2r-=v7Zbs5mlTk-ltT-P(I@b`Ncq@R|NO@mY&i&xYsAW^l8gD`+RBy}
z9P4wtr;(^g14etnQA`24CX%`1WvK5ad>0Pw%IskL+C@{C))w&h%xa1=M5U9VMT<$%
ze;A~BUtlVACmzE_zuiwM;L3MfeaVfe1CRGIDQIer<LGU2H+wgmUr$yL)cVpAGWCWH
z{%gJ`e|eir<44Zq;%sVGbJ_KK&Xj281k|NBfCH{8_y;UOO{AF=-K(j!lD>@cAydM_
zsHvYNDYs4UgubMcK%}%YG{PB9wPB#WXvWfgY6Z6eM$tee?sO}09_Va{mrQ=Zz8skc
z%>3(8%&JRhB!_Z*=1vS^6vo1%eQaNA!bxFewUWKiv15azh|)sl7uy(c|BTs(8V$ry
zw5)m->t(S`7OknJ;rp0B$oVezGrvnShtjcxg_RJ>$<$02GtE(L=wBM_#q!c;VX5F_
zG{As{e>&^_+<fi4n=~7a7u<M>-!nCftA3O(N0AiTu<jmt5d6P`cYn}9`NvnJI33Y%
z@35~=(&yA#AF;E&{yBL(m|2_#WJr}mGD)+whgn+89~kl_^Qfk0@a^IzC~yk&yAYj{
ziv?f%u|=*F0)BK>OE8I}oOH>Qj_X#a_2lC8=&$c#|Kji%BsZ2*k;f4zOkW9tLX)3n
znKZMmdt5Hc<!@HTZve9K#+T@nIdGEDNnpSIG`@~b|NVc<1{5Ya|CUao4()XXV~bk|
z!4>a@WGybr8`33W6HR45X4<qkL--i;8el01rKMP|6((J>;WD5E3p1`omy-H9Et173
z4+6(bVCYPAd4J{K+0HB6?(zT}U5RI+=Mq*+RqVhD$Y~T$qF-pcyNTW&^8fC=J8Sno
z^;&;B`&+Ahe)>bWEFS5t@JkFNHeC|0eNzsJTfeapk^hCgLlj>{cB}M+6<sa)aMLSy
z=lUD1ueGy?8W5hoRXR3i@}@=bL$voYx;wJ=8Ajt$V3>JQ(&4Hlhpx&^(plQ_ZJ5&2
zjmH^hy$@{%ERqh+S<y)PX3mZU5wB)A1(3jhV7%ehalW`2)9pL0sDt%6M~)>)_@D3M
zY}~rZ@1G!q;Ft&wBbCOPdZ-!~#iFy!fq>s2hCJ*STx<VpA4!1U>QCdi!1TKe{4Caw
zI5)!D{)~1)GMnJS8~p;l9?oZDKc{E>S-bzCbJhRpvU>&gjQ9Os_g_0veXBQ5rtptG
z0xgiy7!<esuXkB8&!=hp729k;LtTy!u{BX9Zw_NySF^>-=MrhPX;N*0<1e5wFAP?S
zOxY~+A=&FBmh6X%;RwIdEP=0HFvX|)v5w;`$mB>sX~A5e;B!&*iaLkl7@qeu6#U4;
za4+RNV^Il?B54dk8d?-e0C5Rr5$kkAX^I2?-=NC@S%mo;YZCuk@pyV0H;2RK43Uj3
zWA0)1C^N|h@yIMhSVDO^R08eRr#V^E%joTd|M%S}zZo$7!>~oJ#iDhVAIEpBGrI{X
z5PG|7Iq5WI+mLe0swZTV){#lF@{zeoC^CrR3gS1QA5_SPTUO_D6(>`m9q5*5Onyw3
z9qX1g&88=rh;84T+S--aiPUnZSv+FtY({i4!4D%=nS(0l6rZbIPv*1eB%VykBp>5{
z-d!h2>wYmG(AN5gI}SS8EtgZ3R!H}-sVl^ntweRuel(&JfIfHveY|LX`q@{k!neD~
z$IJLGzxO(RBN4n0A<sUxqPQ(G2m3CA#9ufdo>$yf<^@fM#sVZ)z%IWw?0A6aNP|My
z?eGi?O>k?1Ow}Ww;V|{1c%?5uA?TE-93&bH6~otA$Cc|5M@k%*p(4br?ts&&c^IX@
z#KajT9V~HWaeW38nwSoG-|jWwBi0yo++pQTCR&e($Me8TI=$Fzyc#D(qJr2S2jkOu
zqaw!t3Hnl{x8;jl`v3B=nh0LCmwJUN7e0Jl422%9m($Tn<NI2Mxk!?U<&s$$Fi2pr
z<6Xv!gT3(oRolPsw{cwCqVV6zQ*@BEHb4acCCYXjTK3`%k{F4XO;VP<a<Y*I&>-6c
zx?waRidkpv$2u?Yz1UY{%sH#7K@gO4_Q`K8iv-ct)zx*Gmodj6t#b;FK?RB!5KG~+
zmF=h&4N%DOmhwVP(~*ZnSB9*ysGXFTzI|fQ>Q$&|fEf(h^|3*9($Hp(KGltfHxSh&
zk4+{d`2zn}x4>YCqpdctp2cc}bqiF6GE4%jo}+y1R%HjS{WMjmCC0wK)D&PK$6);u
zXB=CLIbqeA`|FUllLg+QhiU;8Kb;D`&+|#jAKAkxc7)Y9p)?bU68W6&K>V0#;k?@2
z^~a46(6!a&vCt&y@;Mq-mc9*W265K!GKmX@bVGO=8|ce2sodTGia3$0TJx@=x8!!t
zZr8i^g5YRQSQi$J6uYnFbpq^fBYXi(N@sNe#?g}3-BF27uY<YCqCPI-zQK*l()+$p
zCHJ*hecc!8zTSp!XdCXZ6|BhC<G0hs<g3Eq97kkqfLiOBU&Y9!BU<ZyJ2<c_y>8b&
zw6Dia=ogI_MpvI6tfpE0!}rNrM=aU^bd}@1Z%;WRM~HJVBQIDv)PV?(C<9h8_~T;#
z^k~O#-qn3EbOu>LyJI+{N@3}yi$MJPLh#v)m=448wz!XIlNeU$@kYRyku;YDUI$D}
zXF({^z_xwAholQozW-~ZfOGJ{twHc8T1<(4R3*np(*84vMn3ZxFxG2G>wPrDrkli5
zs+H_vRjmEEu^O0kg;EKN?71+1DzCYb#CofA?yU7H`7vK)#LBvV_U7gFGP`s8LA_FW
zC2hVMQqrRF<9Uc&>`!3cCWp@5>FjsZWk*&v-9!2B99C_CQl1Als+;1W%pc-ubiKti
zgX#pt-3K}NXhtAdiPRS%J7*uC9H0Ay*+n{WE?$}qZ`?uuYVLm9gDmVV&cx!MaaE^5
zf`jan5Vcdk=ivyr?$A*Dtwh@K5z6{or7n5#FnN#dg{Ocb5!cSatza4{YcxW<>HW4H
z+@wdo%hFrKcUIynaxJh4x6967mxRxsb(6~!WH_iNn984i;h(yde!f?fx9Z9&^q)78
zv;hu9Qt{$M3X&ieN8vFh>ce)9!T4bV>TtxFbYzuTcIF<C5k+L+C)o%-hHeSXDb`CA
zYRU@wd|-9UhD(+oy%5s0_%4+nIA>$QPZc#ykmT?|nsy?-=q4X&I-#-`OV-`6Phf6S
z7}XvucB^$j&%&9Zm4EDmj)0~pDHTe|RPDhcTK4|>=(fb6Nt)-ErIM_J|4+?3)b@qD
z*mLZ3rQD+)GMBkUi%_52T<=k+ctGELKOi`bLL@x0=Oqmd^3Kw#uNeqJtp>dEmA4a;
z*&4{PT6%-49y+egQBMz#%*MX?LPQCU)K9nEhkwb_5EYi8lJ{dH>IcrP;=Hg#i#OMJ
zg(SNf5r|)+JS(e<2rmay_%XX8XRdD7jJ}RSCzOkvE#JigLftKmj%3)|&0m(`5~EdR
z@{pkoS|LGT$iGJ|LeVAw(~(yiJvV%RqBf{*=vK^kVyWF^OT_BM8PUksa=wVEeX>Gg
zFc^!clEgtuKCPzP(|lIF>{c6HY%V!ks|%Gq@bXOV2^!AgX$V`*@sFgRv5L{IP<!I#
zSc*r}VV(*$t|;2%{k)aHsF92^UqC0y6O%Ht&id|LJ`EZ=##!`)^aZ@lQK??9-{Q>=
zEx|&E=uVtm5-!UKc;q%&DYC@ps{QPq`qz!fDY8mx)aIEf=;R)u3!Yh+BN}he-$Dq%
zoGMJ%U4hO}-9&5-(AdWU-zyhu)>;D3=F6~%7V@frrO=&>7YHi8!jE12xHp*RZtt(z
z5I;s^L)s%xTu=@m(1<=rDzy@ZcC{oC@^aJ2htim`Re|P7^&<Su(z#FaULw6DvG=w4
z9Jx$>i%WqXAtU%AK@9I8#Oz$6>mKRXTg4+*yQLvkDW<;mE*ykAKbvi;Fyat0ryiEd
zwpE>oWvVGz2Hh}`YG{VE0aDO$X3icbXSINUtdL!nXIEEr4O6L*u=@0G6kagYjj7i8
zjnl+3tUlbx9ozxnY~M;NZNz4lWcwof9Q1cpxo+owb-sH39kDUS+5R>0hI~s|;op;H
zC7XZwR#zu7liowt_#6kkovdN<YTe``Wy|EQ<?I==63|a+1*RW1`bf`21hJc2b#iiF
zA+7@^m-j9%1pC$JJz7HZO@eK}TQO!vs=)9b0>l2BfwD$we>4m+V_l-v<7Xpf|F_46
z<?bU<lJUPwh#dVg$7_(g{~r_C0l&+w^EoRGj(V^6KfJ#}3g&h1Lb5RKeE915U%pX~
zJCY8~g<<W*^PR7rT+6ftYV2h!Dk3F}k2vmHEl~Yq-5Lc}NZg8gWc(Jzgz1Ib_c<V6
zSX9F0=S<yk?##vBkLTEYeUb#r(AYer9N~%9Ry4T01p1NNP%gJmj@=O#hcUW#ChA<V
z8SeApK%l!zBk`-Kpa!c{3n~1eoJTP+T<NL)@^LNCj(u_P)cCmR;>)FlvY38WJ3$zt
z4-`sY0lls}l3I7)A@fe7J1<6BHEd`lHS0&F`p2w?;%NR2O};*U-y?+P-`<|Nk*ag$
zKe%V^JwO=*cXw)g)hnDO_HkpOcvT<eB!Z*7w3@+>&I~W_7)}LA*G<W&9?oE+&S0l}
zD$u>;hdnZ2>PR-;UDfKNB7~8D>$}l)hBj+yF%yn(V<V$r3NC&ipqHt=WmO#Z?Z)A5
z<2#&XLVe-0G5msM92w`<aC@Y5YcstvHo6mlQkt#<tv`6?X~4_*yffz*wzisL_|CIy
zP7XjdnZxrw@M_R14nnaUT%o!?A|(-3QMWN4fr2|$>6)0{4ig|zU+^BiR`<Uac2a3q
z5`DmYbX}y0C2=F18J-gvSbHz9p32{)#yW@yt<;zLJf9*W;i2i5bITU4#wKJ&5IY=-
zbltt2?fQ)G_*pa_EOih#723f=s1v13qcGh3_98r2_17bj#+K-Z->YPfz~*S~NEsSY
zRi)|dnGtYrtOI1e3vzMdnCgQr3qH%r_-;HkG;lK*3hYJ}RI~HBiQK?ECbwqP(dVcE
zI5pjtn1Qc}cAAgfacyuZ#FkPD)u={Wtq7FlSD2s3{tJs2uzGy4tbrt(k&v0S)-xf-
zz@)d?{jx~@(^){*$*Y@x;@`b=F{<bYt*c526~0mzbDI$!C{!nq=*^PePrZKcr>ojN
zqtyaoN?0U4D9MTJ3qn5J9@?TVb*}*Iw&=GnL`_7;TVN(?Ad;)<ehP7VA+6+#lrm7I
zM#w%BkVE|eY-7Wjof-TVKx1wT<{c-pt1|~@cD5iVr1+kYU8>ycEYOXJj3Hl8?#y&C
zs5akZi%TV8Zwc>QUMSU5um;?m;z10^4(fKL{o`?R3DK0(L+;y_t*PP`6gTUf#m*0I
zz4|<4B*T(UVZ$<+MS6Fe+UseH<JnW)<k#7rYKMbw{qGj5j;ba+6fY%3q8{si?yg^W
zJ`#!yLB|9kNFar|H5B$!B+lG9vsea5X$ux}(5W^>^TgSn#Wv~?m)Bd-k+z1~_QS*-
z6QA1#ScVT2)nc?()7ffgXur*W;ZzhlSJ+I*TqOSnn9Ih^=YksU@CYi)1~Cy4fAGSm
zR#cQtDgaW~(Hg5<xB@sxwI(1iK?Jr}pVw4OTMAw@+ifwI(Szc(N3~wE;jJdN;lU^(
zvvYWHC2aieC_Zo}(2cX=y2()nXk*Er-@BDt78-y)ld(LWQVtV<OxI3tl2dR7z3mC3
z6CxaOg{v;QAiw6G=dWG;4ytC87hfeU?4eu9PTRQ-FFG$?{6%wWH;ct=cYE92*zKZS
zWZ%a~aAc$9_WvHGgL0d`U$xDRs_M?F?)5*nYM}v7NM(#v$LE)(Ql9~6_U81%iL*cf
z#YO@|(W1$w$k~x$@I#IFK5$J@yV%>mV2i<V@W($J$)z{Vg<knSiI_%$7K`j5It_TX
z;ye}ol%#id=+WK1pU&SOA0A&pe|No6|J!$hhzE*&f3ZU!B!t;RSWXrKgS?`b>{lhs
zq?bp%OJ0gESRs)wdwcGw`$R_VSOVsn3IWo1r+;v9_O5r@f7ko@P4Cn;{*?@ufa)YA
zVor4nW~IP6qXN85UXMbZqWw?FpauVlU5%LYVZ50r4OMRO8l(CV89^KRd<tM%mb_Zz
z(>)rt3&LWBHg6MfjWzTu)`j!<fPRHK2!0mUL_u(hYo(^OGQg?0=^TfUo;i2(l2x9g
zjI}d}V^kKK=tt+;dUM+Ie@gk)EX!y@x>30%J94Riz=ZXxeIb0Hz0&XsErHEDve@YJ
z(V`m4%;{&-d?9HvIg{{)emwlspZw<kwYB(HHzB9@%D|Ak`h~yl4buB*S>l}ZRuxk^
z;9)MkJer$VOQ{?BwBzZ|o>=biHOkq2pGsFA#E<^{@V%Sw2q@M_5Y{Q&BTU411I3xs
z<0Ih2DBxF1OY<A+=5x(3IDwe^l;mq=a-O09$5~Q$<z&1^b(UdT8wIHh8zS(uoX%vl
zoe3`~?2NTC4~4laN`Gj$&;xw<Ja`nNnqrMdWF8w3ue&<Qqbk|@H?;-!ssNpsTlbW_
ziKpzkr7cl<En0RyFgjsy!(dp5V4$<YCH}C?N89e7YhOORR-O_Je2e9E9--E2CsI7F
z<8)GGKFz?Ph#y<xfL`gzk{IqQ{n6msr>I9uPR?*Dd4UpmBG_Cy;(S5hIpkicrz6U#
z*AoJhbjv)+rZgT@+*lJ>XiU9DbU>inQ3{lVw^FejwU<}@&|CrN_ibv;xWBO_|3_=>
zWmiP6og;ZiB>{pTtJRJL_C=|g)fzBqBSGOU#nqRhafyHmwXI`a3~#sja=0q-*XPB+
z4P=MFqlpT>)H2BWT4X<SzH#m|@xBdaCue~KEW`$$YlvRAmyJd!AQX)b!U7FD<=A8F
ztXk<RxhtigdJ?XGc>W=pU7%@q_I2`2*Y6+imh(mO)_LYxF<83!`0DmXe%YfWWl?p&
ze<Cnzj}}Q92hJ7Bl8;>&^3@=lUpJCh1ANvU>j!SD&D6ksQ1BPhf27gYW5P>6+VuAI
zLhfwym#CecYToewl;QJ1qa7-x<!@b5UpaKxM`Mk46`4W{70vG1+eJ5s2+wAz#HrLm
zPpgQU((Ob{^fiPnRXt&=3go1VvC29woAx_Qpd#L_R&bDQPZ@D^xldktoc~a?jF?h2
z<FJ~SL3CMB1DXXPF)?oOH?8dXJMOg$N;^SmwOy;T?_c17hgxu86az*-rSXVT3Ik+%
z<D%#5E&`#V|LS-AUgw3R>F<K$<o480Yc7<W&zik@Jr$D@`JNu0oxTPIen${E>u`tm
zmE_lD78MNYHjbz>|D&9=Z3Cm`1<()g-|k<&#WN@dng_-*BnQ$+bpkhvrl7A%5bkql
zA`5~R<EWr&^US%%ggv3kLhX1Wo)wS98)vtHaO0ETqm)QOu!;<|+stK0;-oi5fV6mG
zjry&^|3UFB+7rYasXw<aEG;QytD=>5)O3<g0HYD^m_1qz7w<W1MM7}q<B@s?heyYU
z8;<d-QfO^peK@;xIm)%7s8Vu6F^yOsD_I|7M<WJ4n=dZi@6x`ri9QI9VhmJQK0IV>
z$vH9zj4?-}p2y+-rnOGP^%6Jh)5d3s=AV&aq{R<A)TGvwc1yi4DK?JIP!r-*!fNol
zv7TNuDMb3Yin*Vh8=McFcVBF&#Iyzj5#Mkd`Sm=VGECiMEmCC))Y=W7Qw<<xEmWU+
z>KvwW501~88d_vwz9>JaS4<Udc~lKYE7DNyRE;oj0G=}5J*?~S;(gfry}usGR1>S>
zLw;wksRkj9lP<A}{2j^b2sDWv4^=&aq(Rh7*u3OHImiZt{y%lb{U@lc)vi%V6va@<
zh=QW-lff41U$Efn(c7AC!&65QCj@9EnFgTZa-Xd6OeA5_Yh=&Y<lBuNm22LzB1Sdi
z$y#7xb{L)Um0&eUC)W_jy_r_<IK19B;^YFIC_Rbynuw(Hap#rR=>F6NKq)Hlii3Vj
zh~Sa~m0+@cyX!G9B&c<olV9*lvgWkW*y!n5fB*8tQ*i$4R#$ghK*AcYCvc!zdlYU6
zM>JK|le(LCqoniV(d0@LRn~A0itpV1(od_QSE7cs?yROPICjO-5;;NZS|c3H(FVi{
zh1E!cZpM0wY?yJ=TIRd1WzUo2ym#Vx3F9ypYKYVVBf+JH+=SU6@NY@GqSH0pSr&Ql
z{~iz1zbajOuDADlmD?JZ#Wm<mZs#?t_)sjq5G-@o`5_-wDes+h4x773JEX9?26?eF
zF!PhTQe;zTONfXyEY4{22E$X6&pnfSo*j8bfNuMDLsonpgAdNjKu7hpgj!ir40;>}
z^PE`!7DyBliw!%*v0+lGoz4$;?wDq=nlf?>?wLj<3RyC!JAGKXrgks3)q@1AGfJ@u
z$T`u9=_j@%Ehc{%WcOuZYGw(d-e#FHHh?b)%IW3KpTGID^a42T`4bFd@f;u>%8@gC
zUS*^7eh*1(GMo)-6uQprT&axtudHZiqyLuj7*f&e->2oMpM9Pst$CH=1K5_*n{vRo
z=)-CfHyiXA_Y}HS+WA3clG);a742F3*Z(#jy@hL(0#$e;5yztJ%uumcQ5A`5^hN*y
zzoJ(A@i*iq=2k1%4!Al}!1P7xU4C}o>JI-Nh!q$-Pst#h7TzO}0s~9uYO;JSm2JDm
z!}(p}cIxXKyY@pdCAqqBk-7Ej+!;<=RHe%gUHN=(m_G1vQ;_$M_yz(f6k!lXb2l>`
zz!??w4auOoZh<hLX8NF5M1(sLJkl<vyLXpEaLjno4?w`<CeGp7%QSNWPqDhm$BURz
zy-2?QKJY3(7P3f_ro_&hcD~SNQ#~ZszhEN}1t#~^CgD=i>x2-BB$wGpFl0bqCka#o
zEb{W)2pcx_?2-xuS`MqZF=1LuOgiBB>{J3Q1glAWg-K3RdJ%6d_zqsN^2Rv?UAH*0
zj=+lyouCC8QCr%ORga+?a%k0h_Wk#aG5pv+d)HRh6tl!^cA6t(NxleN8Z%zh;AR`?
zB39K?c&<p80y`VGS&?c&+`*7Mxbyu?AB)sl7gzoLbL67-uiSw4kM^(j+vc#@+)>UV
zNbw8<hoaqCb2+>KZV}_Fg_w2~VOH)4d-C`aftT!7Gn#}<>Rqy1qmq)eg-1rP=%5sk
zugbb2(IVOcHsS=sRBhS*7>S%`9Ulmg-F=SyaZpi;OHWoq213}s!!$|g7Jt(eN?o`s
zI0p|!y)e+g*CVcs!6h<DY?me;v>AZ_eW=BCajLa(tUs(Kf7^Na_x^vO<u<PR@0bB`
zE+yze{>Z*x>qrPj=zR&4Vnin{M$&h<|DbmwGk~?o0rp}6D|GVu;xr&$YM4htWa6iB
zyLm89n_*&J{Hc+BW*V%4_`KHRxWj7u2><^!#$vh$Drp5OgPIO5JSU!|9bYZo5D%rH
zaQ%5#=?p;{2b87WQk<}0%Xvp^wK>2_s+(Gab)_q@XVw3u+Ns}47_tQZdmg7L*RfK2
zW6YfkpcX(Hy;Uz%lH|H*LF(6NHoo{K;!p80bS=4hvD5ZcPr4~aHA`bDYF5i;^C?NE
zJyh~MC@=&e$s$&pA;3e4hA~^iD;qnvV}-erE6LY~JvYx$D=$#i7vld9ZmrK}DE}mY
z{9QX|W0+0zD${o*O{$%g)d8hyeoA8Fdg&I6dzdUV3~b{3zV5hw0WQI9;K(B-Mp%M;
zqqBNo<O$B!{XWX)#?|n*zq+Z~IZ5Zve#LGxpXZWOb)UMC7<Nbg(>*jdn=I?@XT-=O
z-YKgQjb3zh_$+tTkyl)x>_N{vHz@>mS_iEyR=IHUn1IKmIOY;gcYB_es#W*XL5W-@
z5Nle)7rTqDEs5cFtFrst8gpH*|A9dk&UU#2`zGao<Fc;F;gi0CrtH?A6j2bjAI~#Z
z?s{^Hb<@kzNuh;Hf_}wd!SmRfH|U&?%LOi*m3Bj0A4RT_;5t?`=+EoBQ)Sr2S!!zK
zjP{Vq6jDZYTpOmPX=MSDAkvVes$^h|4!31OMAM-1jP};^L)49GE6pm2+Tdv<kt46>
zXf%y#5Y}=CqSF^hertS*6WZg6<r9~cS0mR37(GSErNE8+S^8ZR9BixorUeW{Ihwm+
zj5SgJeSsrIfg%meFVnuPYM$smiq9+17&@yEEQX7J?zwk3Ty(4KhrhEKi{WT0Zs{i1
z_Vjj?ja7Qm(>Sqgj#6!&x->-Gv`_KzM4d-Gi$-gW<ePH84_k0A!lJ7j^SemB?Qv-;
zTI8Q7z6b+nniflXch`C&4Dd7mULMV&u7e1F9o3&hDCVo=GMfP-{Jc&%wT7NJW>j9S
zsTAx`>Y<Is*KIhdSRGf*bE(&>B2{sQYzl)!Nka<CMz)OzaU;BWC{d-dnsv5jqpOQ+
z&os3ek(Worv{E2Ojuew{6B{G~Z2}AI_K$I9mAc+YpsmQjKAEc$TXFTXS)a^Gr*%9u
z*FmI>2d8G=37hkB9_XcqH)ZZq7B@aTFGbmjW$+no3i>I=b+JU<?t-pXh;5)3uW6RK
znYY69x88OM+JBmtB)PyfbIMrS!TuhH>W_eJ8jt6hTgQ_HICozClJbW=sz43$l<9iE
zu|9y>N*21ZG$gl1^*&#}-+$9TzP$X<yXYUj?H#`JReV~Kf-4HozDu;sEGo8RV2}uE
zNYl<01tsZi?|zt5%@gdNi8u?eiGix(q2i(~lmd%|uYmwxY~L<Jp+#Msxa66%2oGm{
zRszplWC(nKPt<2YtyB7pooiER9T(~)MI^nbWd{4N?)Gc^n~l|H&H_oR#k~P7DJOXK
z^LfwXdAiYOdF4y%^>$uYwy}Tub3?_lfLsDu65w%O@hDX|o8nK?;-30HwhoQ&c0o~e
zHdJ*zRWH!^`ACYK4PgwdbEU!isE(1SLLQ{lK*rEVO<I7S)Oqkdgcl&6BiM|E9Vi7^
z$Y}}~rU|C4&{d}~F2#SSR6kT(*@8%Z*VFqyYz5w|yx7sYex*Jsw`<;kZn8HKy>1>c
zMJ;e_2HQ^nMw~DqO49hT&lh@j^|p7>2tiWG51K%v46g1oerVcO-e#U5s){lRMHKEu
zjIvbqG=d+DJF}Ce=Lw$x)wiIAn$NJ5*QCqdG-c0<<j0fCwtL(Wj(DW)g_;D&{E0>^
zQmFv6p;D?EA1<JKD0_6ro$3-X8K>0^>ml9HrHi=AIFlP7EZ>qCy-l*5QUqpgYLlzA
zbW%PaEYjF6^Cs|Oe($4BsnWRtwj(~Cg2>npEg1xTV(@7zx6cY=kW}5Ejt$9bjDrFq
z2)0eNs9yTU+=3;yKI0WTqY4s*U`c~ZLTP8>kBoUuQxBO8iime<VcLYXg}5;=bE22R
z9_wjnZ^6a|o21MRT-gqr`tW86=LaOZl3iEpx3#Rq*w&gHJ;tSM@3?6MXcY{j9LMD_
z+wxYIG?f=TMKw_($}m8|6qyms`{RYPx2WziU-5is6@IW8QNE9v*dd{XghbkrO`hT#
zLTM#hXXZ|09tu2=Q&yO5o-iOUSnQA78(@?F%tp<m`gNJk1?M4Ds(E2?is^FV{w)^Q
z<<t$o4y-0OHKrLLZ4$k$VykMGQ%ZPst#u2KsOZE4rh!y%gIA$7*;X9eamH%;w--Bq
z-zef|x<88=*D;JoayApvVtG7nP!g;rF@$1o_4OM_fjyYr{<&XG-F)m0yP{hi*W;aL
zi)xt8fTWZIV=F$1vRabSy26_qmS)wmTDM~XtBZM7-7FX2R_@=;#euYq0@A6s8aEUk
z;>))mu8z(=p7uXpXyjNaiy?4LvSMfIIx~7D8dXobAP;hMd8TtyfaxcfPt3FfDM#6L
zug4~kmA{%bBb0`Uj<osXefa47<tS~)3!#G-=O>=U(P}A}U+&^lF8wK(Sy}1t8N`rE
zvmMkKVM<4F6_pU`$L4)hu{~C`<KHZBD@A32mU+G`lmX92BkUHRvdM!R)F%!z%WVrb
z)FMCu30b?RH10d|@BsvX$vNnKCVbJ?vTOJ1$(h<{lD<oTCiJ?G(y2TA5~Y@ZHTq?`
zH+6Qs^Gb-se{`zw<2czSgyJC%TOUm+2F3g%q8fX~DwR&n(M<qRK(4=D;n%MHx|e2)
z?$w9RVYyg1_oRE&`=OrddrWfevUGQItFKDFviqFwzuW)oaq>2wm-owCD(c;)zvO$)
zFPqQ0?!Vo1*!^YZZ*XKjh15qnpLL382bVu)Y_Sl<Qa3Y6dWF5=QEm?%pI6DRp3n1g
z-@yMH)(JKc4BGzru`pIN5iK}5JL>iKKU_gP=IY{SUkIoniz=?DwX??vUpx)ST%uX`
zmc-KlQ}5#9?4tj1|Mbc=zJHXoq#8RSDJ5IrL~IuKc$ElNREdc@i$YH%7PTnLTM=mX
zeDl$A4P7I2Hq!|jFIw>?;8pZvR+<=m9@YFZ5+s-rpv{5Y(buCsygmJQ;oPDp6yK4}
zQ6CN#<LDD>vaAsa{1WKe_9F4LY=zN_wvoaZ;q6YuL*IA^az_NMKz6O!rIxQ+5~wWs
zgUbnB)TEyLFoL!;R+j9&@m!GyuHWy|rQ3(<%Lf5o_EIpXfqpWb=nyaw{*QU~Ym>wM
zkI&9ESL#hh(G?khdQ#HkD%?x&dy+!%EqOOjvni&({NB~y_fCd4=iSR3=}5P>SI8Uh
z@cO1@u#-uIC-^PmIF-_0KavQZPttsl8pf6HE7Gf+<+@15Z~;b>`%}1GYUWA<x7mGe
z0^v27U6L+8)Bk?TyN*g1qv9b|ZxSL9#?&JHD?LdpK|mfKfw`t)y*`9tVs(C~{yEDg
zx9)Yls+N1h%q_%n8na=Zq`#CV(L*7#)d;E`UV<-sAOR#XRf1e4O+g=@Ml8=2+GgG&
z<rbuW*XyfDG0q$t<Cu>ro#v3cE##rG7x*xZrXlz?x^Cj@$s!gRY`Z8*3%5G^EUbr5
zg=akhxpA_oezX<<U?ZvpblSG9`+AGOgze?$j6o8%=h{hPN9g$tJm?*}xfJGR?f^~;
zx0Q=+a8;jw(q4Q4HYqoGZpo5^8Ku##2!;_TM8cjigfHjb)^4K7Hl`%o3@Vm{m5`=y
z6!u#DzJ$%&O^z25To8N*LtO6gQhMHppj3@YGPq&)l_#50GZGQOdCqDSvyjXeV=Pdr
zwfJBozlLVnTsZ$1MEeQAr~7*?rFt*u5R;{1z$Oq7!x<#|Hj?^EjT_<`MqI+ZJEP}5
z&nzm)oQoT7H`rQuEf?+kaZ^G9j;V~HN8K7%mQ?omYcUd1deOw-RRk3UI(^m4zB9N7
z&(aX^O_R&3{lj<tv)3(Nb9V68-r?0&DEz@7M*`edBP4eeWIRJiLS`jp7lHZ4@OJeq
zHQyy!PMJ&h5^qvkN{hnis3OvY2<U<wK^;^=5fj(ZEeR-D?m39sSoAZDjQV{ZQ>p-3
zh8c)mw=kogW*I@c#2ZAZjcBB;M+}~ZmlGZ#5;*{<8?VdFNWRm6FtZWPKBq&Rp^M>7
zyS8Tt4M()@YIlqJ1H;c^9zI7HW^88f%NzaU@ZxHx7CRxZQQ_URb=XG1V;~k?L_sH<
z@HSkSXu9I06<q^N>8M#31;56*CTK+=m&5E@9pyZh<DPAW4Tdo$<hyeZ5|PWrfmnb;
zBg|?`?u0oxpzfpK6P$%*%NVjTcMRyeUpTh!&(7X`IM;XN*5({byycAH0rRQZ94z<`
zU&)WXi{sZnQy(MLJ^6yr%tT5+&jP7PbS`WUV7-a8pk(-zfCDoNbLhHc8GcGIglyzi
zPGD&VAa?Lv*DCno$)`j|CoO8zd0`h95|5OvgQe1L3OXxM`VkFlDpI_R82aOPa1TT~
z2f4N_K|3&_(IPc(s)D(Zl_<<kFpXDg+p*+%*av9_O5Eq58uk&}@lqD|zJx)wf0l-m
zStk##f0HY@D@p=rQ3+jN{dCe@&m!gKAKPxkGK;#Vi8j)&7F15DO_5mZL@6xA<n#D`
zzGCieL6a;zWqok#v&`RU<qPaL!D>kp*(G;!xN~MQ@@8gXly3f2%6rd4E)#~t6Vw!u
z$B+G2nM5oSrp3Wx=$@Xj3hZ$IT>D@<p$b50McOc(33F$@If6#;M_PMn#w#unYQ`gP
zvuws_fG~A?Bi>`F;}TjcXVQv&Pyb}38A1fT2sMwuK6R7J5L{fS_DT&A8<lFU7UQOx
z^cuCb>}s?!dEti3+3X<_dGr|36SGE03f8o#jc$m<QLEfd+G40xM3UA-SaAl$^A$j-
zXiu4EjKH|mE3^ip4N^m@=oh4&prBVnA>u~07R*#QE_^4H0+f}PgU%0-5z!0_Be}i_
zPbLh%zI%B;`Gj!#e6KgkCLgmwcU*(uA|}3^^dVE=fmufTthIyun;X{W-K6zV6Irq?
zY3EP-2n3VJ5HCrTO@;K*_<Rf<k<RDoy$!d_HNORpDyxG<bDIMJLVls3OM=e9IT56}
z#R65{2+r7;idDminG`&<vG5>93<6HK`_D`4)E;eCMJQsWhSH<lA}$xb*OGg0V=Rt(
z2Or)f*<#q;2!=$|%4&t;WO#F4Iqzc9)WZf|DC}j~rMwL&FAILzgyB}!eE4Isn;i8n
zBH9l>$+pL{P$Vgt&(Rah1N{teIEfyTNk>c#&l;NxuSJpk&(ohmKykkq0lcsx6^)Pf
zM%Bx1My`VKP3I<^4wm!lnmUDqHpm^*nWiwzvXzA>{G&7X#LVp)8tZg9hwi;{Ro&g)
zIcL~?0)XT8mMP}pn28w)ZB9(fYMb}$>pdTj56LT3(6zyz38)@jqbkDQ9g&N+GfHa_
zKa)QOtps4h%lJ?rHFsT5A3{$UOT2`1xtySqGN+|v_6=2NosAX13aefL#m1_bNJh^@
zHm*LuWYT${HU^V&&=3%N9n>-O_PrI+jtth2FBIVQH2T8aBRPw<y}Av}zRH_YDazQh
z&jx>0xklA&0o{<@=d2p0^W?ATupCryrC*i!p!<t`-~&T7$rd+UT7a44J0pb#(1G-c
zKiTlSMK0MxxoJ>@()!0#&jdw{9G_nG-t;c|i?V-kss({Q$mK6#A-(%Mr*DL$lpbW)
zDS&<J>l#-SW*H89o8>4!O<q;*x4lI=Uo5*rXWGxZSrihZ=%2n&H`Y4i9@bkUzAw@c
zMxt1Ibh`is0*lbRInMJ1r8za$<at<-%DUsjUZoII$}=%cSLI5ORp)=SnGjeYLoYmH
zX6&=Ha1vzJj8>uM03?asc6@r&dwqNg0o2~<;TbiR7eZym8hwL^JW*wxiN@+Dl97!g
z)zwc`VV`{wWRhNiJF+-832b2P{@AljiyddxxB@V+Cli@as+C`pEiEtG0!YNr7<QP)
zi^d*FNo`wZy_xF1a_t29Ch3uGM!UcN{qN5APmd4VN$;e0@dp1~{O<c7e)s<DO`o6q
z{&)NDdly&jWdHre@9Z!9==Z-nyf}7$aR2pxz$d@|9g{F^FrxWCxSxOjyN~-9r|!kH
z6a2vc+Mo3=zyICo+12r3ubsGm<-hg~`NQvjcYON#tev?3`lj*8?|;X$y`3B#yzzhF
zN52pLc^arxC>dHP6uzuh2F9}WF$!vsxmQudHaOp1JJF{T{%Y4$VFuz^0j%N69YH7K
zYtQVRvEC98kP-0B&c0Fv4g5~L5<mLVyuJY&V1G~dph@q?-szS8es;m5<M;89{_c0b
zt9?yBj=pF^ZeuAwaq#Mw;*S?6QkcfeH!p;fbhL&HZs-jb8lGM;sFn)VcV_!&LoRC|
zz}JYHXmm|iSZGuQ$D>zy#e^)9A~c5IE^Iqph@Pw-G$_Y!J~-cW|KiPMJDNCiAE+|H
zO3iSP?96v456ZBQjmgnhNmT6SZ83x&l8^KTCWuzOO7Y2Fl@BZ6$RDK=Fr6^}&`IZT
zp9nJa+x-k&vDrSe+hO%$$84V`ddh_S;1`rrA<3e(s7&doOof6~!CkM*LPD(?sZXa8
z?ea`bqG2QeQ3;u6()nMP<s$f$J`iY|V;aR|8)t`?=Z)kC`GHQY`%a^-D1pCUp6?&_
zB2c52(v})CSr+x1R^HoTzpeC7y2eUWm9IkT;LfV+N|ZK}eYTut@#P*)tzoi-ShCzW
z?j?RKQOvZS=N2}@mZASpy?M$AxF{Sbv{r?OG>RQx={oja?2u1j$|UM>tF0LZvp>Zi
zjycz^86vf}LlCgmbx3T6#a`gTUq!>JDS-sJ>)LV#M!P~tZ+MftR17b*K)75+OHC+i
z@Ed}S2|XtFMIC)s_e4c?>rQJcDA1fcMaSKfXVc{L@}0kMSS}XHhdFBUURC&I@AJKL
zBOjEQ!_e62K6iGLqN9z9aW^><sz40Nc-$G>cW`i+V1(R<N|#b9s>vSmUA{yP+!UMi
z?`jl&B1cSI)-Ms{r9>&?5(OyDJfg~DFnpg?tAtiopFtSLssMp=rtMISQ6Iyoc1*Xs
ztvGa|5VX_QR7VwZ0{@*pj{4ge0N3XqU1R6_N3g!OwDy>zs-Ry24t?oB1jzF<QScGp
zB~>VK&ZUpWXCQqXsr+#5ZF!i-Z@6tzC;xl2Hge@0Lp|h8_8I)1gfuP1I^?ooRE~$6
zF^=d9u8J450s(kAxaT=wX<0F6eU^sK2fy3LEyNBD@hE&oa?=8_721BIr<27o^QPY7
z^6CP%0Q=t0KC8VONL0fgywOctNj1&F77d&$Hi^hp@FI)qC`t>A@<w?1i`R!cJ72%_
zIU!*JCeLid$f*toGDD;b!Skg<)M0nk-Zp37+<XE(yqoW%$3d~%XZP44pEBRH<NRos
zm`#tBA`UxZ!chc~AAYzx#OGF}%{pZP4b)$@q=?-cRo|<R#C!b8g#>nrkNfH97wR4v
ziB?)fJqQZRQ8JAAESdE6l$y9_Z=?VMVT&t(2l7Jr*W9pa+=XA30pc>->_mC`uhZU}
z{`rT4cfFtch`PnJp9^JxtLpq><|@aEJ?0r!TZs_Y=y|D6czV`fy^rJ!G+e2WG62$_
z2&DPU{ctCb!w5cKpCXA|>Tt{7yd%pfPw6J)0u!=G@||HV6hTeEkY=h`E469}&$*g^
z%6X0o`%GkYK4c(T_e4sUNRsPBfo;k~vP()7iBID%Rnk&MmAn4mmc`#GEfQhcnWU(H
zaUQ<7k<LU5=1^@ooza~l%t_WX5@uild7$j8MukV7nj>5D5Zo3D+`OA3Ga8h_WMh#+
zm9?%O!dP(@_=<oB^}NAluyT4{&o_ZOV6`)x71cIs(RmhWAI_y#!q=LO?m=WR^fknQ
zbw@x#Q&*~C>%GP>mFDKlZ@zkBU%v=7Z_xCKE8eW&?Ju8+cp7D}g9kkPOe>ds5pR~L
zd2`3mWjS8l;rZW$C@5r9O%u<J!{q`9X|;O<9(pPQ-W!0Rq(>=5sT8k8Y&MoJ{t81u
z_9CK@FyB<$#M>7@o4VcLsWluO0z}ToQO|DD5nPyfM(*^&FZ#lHDx?!)C%6L%fUNR)
z7ft&G)lNOXbP#(dZ1t#jAs$c1?+Hdc%-C%Ngq96eO<+NhXK}4fw?>g*#}*G;DqI-;
zUr$v$m(OR4vF%L7To6K%Bz-ELi_S5eT1z(Ka179}CXIC5t@+fukjShZa&2yj&!isE
zZLrUToKM258f4S$RBRHfpt}-q6zBlwi<PZbtn$%Hp?r+*b#2HCv0^UOo6<m}HsjZ?
zO+GJ=Th?f5Bw5Qx&~s3_7j_N9{~A&W0?G@OskIJi(&|$_mjZl^Cy%5Ob`s2<l*M~~
z--j{<%tlrAGRM`s%l`cZ%YyzKBP^1Df+@T*hUy2L1o?~W=p3?Cg(YnRa!zJ+IKg<@
z^-e#W^e*<VdPj2HtI>eiGpYt{SXRCp+@Cn+E}>>WDr*MgN#Bs)jCtM9j*mPXj4YXa
zh(M9SJwzPe0D7~aca_bRY)YHxE<P{X+KAr@6kT@je1XsEs7F@-lI|_Sj{kTz@fD0B
zJVgpPL|>-qkZ@5>Iw|r`13`1*zjG6}X)&9q&G=gXm78|7wCS~&KU-@!I;(1U9e1LQ
zM8^$4nsBIMrYPZd5j~>Lb3(z0gUO(fRxH}S^2!;td@sj@v4QnN<9mXN0XQnc^jIZr
z>MxE->b0CuLK8)J<X}~YN?gf&7x}2~zE*j(kMZGTHOfA8e;Q~`Ride7mHfGC{w)3g
zg4BIg#FjY(I<kN}4p|Vw8w5vZfKM-~vmx$xaCy|J7WdA&JvsVX8MVnK%6vWKmg*d%
z&7`HrQM2=+`4o44ZfE~uHNYBZrkbSJCziQcyCDGg5pR*K0|`rxMoMm&E|k!q^7}6L
zS#KLGB9l(*P-bO0@%A7(=7lfol{CDSKCIPxucOCqCwjh{$*A{XmYJ<QVS7z)38lhn
zLud`L&`N;jLbQU&+Dx8h;!GOsWCZR$AoGxUCMUN*dsWxoB6SA%z0ndaoqn@fmd-;o
z!<SUGHDan(Ck`eGz<MBX2(zZ+OdjGU*|evgE2_W}yLA~k%jh!WVVI+nvht+k0;JPG
zqnTBdn=yV*Tgnui5ZEoeU<(}JS71xFl=BNmDl;gha{S|jU@#_B26$F(2}eqK01shE
z1^9z<R|6YG$tWaP6JkM~b)#`ngSm&C5Q9;`RVzH4G}b=y>K48&`^iMemk{2H-$2p}
zvj;U%s(6O?n*l9u!H_g*$ldtWhV_7!;N`oM{wr)JKeUw5z-_Wy(j_&hk=^NE?!WE{
z$}q2L(1hr2kz<@ziz<#R+@#7Fhx(!g>|*zIk&!ZEhtH<`&-$L!N~`$obYulPafQY4
zczp*Kb(GJ-s{O%s?B8lM=As2FVHuq@EXmBXs8S|c!XZnrg4o8WcAa^UVe`ra9z|&@
zZNqsm5+rDe%Hx);ia8;p!y8t~szB%<lLfT$h{2Zf{wtD{?z<>{F^p8#*dJF!&?TJL
zyXwdM=UP5w@cJi#iq&eB@$vDc2MRV%dsj`FUnS63`6uj=h|w&fq9Y+bSNM$8v~VKl
zV-npi+&IFyf-C9Ht(Kiwp?qCRi;#DCvGXm}CN2)YqWfn$68<Fu4ks6(sd{sNN*b4M
z4&U{DzTAI*)!0hBITR*@kQ;^EO)WqQI0?eq?y(WZA33kZ{|XG5g@ug9-=|`9RRDQl
zUK&YyL(>XsV=_o+fQx7)NGr|i+PN6_F{@*Q6t0beA7`E8-0W-?Bpqp}euf9xH-^!x
z)Mo|3Aps5p_a_Zpj!;LRoWojrH9!C{+bdMi8(9=izga1Z0tM|*m(tzHx@hi|%?E%|
z#8l{vvQL}lCAO^W(+q;Q>7;vOtD7k_F<zU)?jQeni`}l7n5vK`hSlY%YFpXoSt>+#
zCLpN=e@W}|@GSYd`@H*gOj>6)k}`LRDedkjck^h@n|w0KXUTa9ox4}_vRv%Bho9ls
zTAu0DYCo>C#S1TP<|FPGz5iMN%Zei>I40ZuWm|OP%x~kJL)F)Ek9Ei~>tcw(wOk<V
zVjCNozELrUx8&`^I5Hx{kH#1%o0{4Z(33-%w9oK`UTr=~1OID8Sh+(chzLYPbI5%{
zp=H)>&%tRDvpHRf$SpQogp6YBo)!V_B>xV+l*Q(hk0<P$rl0faa;mp+j>tc=h_1r*
zl2SEpR(vDX)KL!LYiYlQ3PE4NgF|-be|;T9M1)Xe1`GjIKQqt4l1r>I`6_vLpwY$2
zvSRhDknp*e`r`S{SKJ_7XO@$E>)|N49#Y08*Px^f0;ahQL#-jTl=ULflF*zZi!K^w
z;8!z{thjw+=lNIPHoim*R?%YK9oL2IDXd_?yIEs=3=ErScuZrGyXKo>yC<8y|MmMH
z60apU<)0pWmy+48&uhM`e~K=-$ZGA!m&~)(_94w1eye?X?8zR!Bq<k9E6n`>{T50(
zxOncJ(ED*S<HgtiuBNfPNLFU8G@(3nfBttR%OW}J(OaBAbTl_>h*SO9ne!T>_mpYn
zO_BUHoqx)+<kc^~@P|EjcvjcT``U(w%^P-EhlW`&jzi3Qp8W#7(-8wpYJ_sy8{*Gz
zQp66_Ab|=38U+&0Rin|OuSF;}G~0?GI(E&tfTeqNuI9!c#o%m=ND~`ao1KS0!rNTA
zNTasKERt&}Fc7dQq`bvjaqC?Bvs|dXEGN1jt3@OQDQRb|HL-)WPL*Lyf15an@h)Uk
z>TiJ5$x!^8wY|O)Ne^MYkFw#!5*lWork=}8@V)LVVX126c7`m9mku~j7orkb7>e1`
z2{DQY{+P)pf@s+fRFsX?i(YYz;C2cj!93Qonx?Y{Q!Kp0QiBNj9C;VCsB_Shqt#9h
z`ly~eJLZ>988X0oas6u$y4vtZOK{5EP*fpiGIE|*rbr4mr5i}{HsX>w+37uPqFBW`
zH8Mdg;MsJB>un<va-6nz>HVhH{&9uZL#P(a|5idv&HGL%Z8rkSqUp>z`3gcVO}~5)
zoFRw>9dgs@s@K0f{?DE}@~6{#ZM+p!PEeD8q9zWw?KPy&U?xbyEE)onfx9ckj~7IQ
zu(L4g)8v<h#-TYKHPsQ7S{Me}$Nb!z`HaFyJ-ppd|0EGdZP3D!auN3)ioz<5M>4!0
zA{VVwri%(;dn&7_u{;g~dm~6O<%8uS&e?kKXxsPE2MX!xSV&S`XNymHJajvb4+W3>
zhFb?aeUnbcKBmI~lCA&S=d?_^q?(7)2{kR8Vb=D6C1xmaFt@cupA`#ju_*itUOp`v
zSvh{|wubZ#3L};Tq81=Q^ZPd(Ftv=t+zWB4A|y=Wju{&R%p!MWsAnY4EYdS|?S@Ch
z302ERa8RZWuw4aY6a|5x@Js?@(Rd~@Ab_?b`d~eu+=5$TZ=)a>v{$Ue5-i~y>DHE#
zxOnxpwn;W<vF_>FX-_hy3xxEhIza+MsOK^)JcnR&S-A5b`yJ*`Gg0njHG;9XN|ErI
zF$rori+M_WNisM0$y(J5A?E1)c+Ns^aS9W}G$XoOgsN}I?;xHPLU6cZoJl!iy}ZR>
zIntIIzG1@))E4Tupd}W)gYUPSTpEmMWSBr(N+CjFtZ1UW#xfjjsegEU{uXSl%9{<H
zE%|ojjRkYUWPhM*aJVCKLWf^R-L>4wiSU5o4zOU3sbRqH<D*MwQR+uEohXk>4xQF_
zEj_o^m157%9`AjPltI=uAq<sKHnFtQsM(*9?C@FKcp^Fr;h`lUCd;dte`-D?{H){H
zvs!CYi-_L)?4b$`vZi0jbDJyi4%P7t15SO=*9RQAGxsl=tt5=X<7T+{%<4-Unb^2a
z2?WzwHph^q+(oRQ7ej@&ctcHAdvBFjhw%k9Qe<h5?hyq*cS+JzjHW1x>bGU_d93vV
zcbq~aNSwpmW7ihtOiKqjB{_mRKa>iQrSMEb@$H7~+MQhar+kD|w@nh$q0u*Smll#Z
z*9hnFj}^iL5FnRke4K7_Z?`iNF<T-1!w;8NXD9vR9}`*q^6CEjkNZDg_7C^pzwe_G
zN8cInb)JV(^0GEngP}%D16t}8gf0pHk*o;#1Xi>v&G3xaMOZ?J1k6LM#V#3{4y-!v
zL2y>1hRZ@@_eRC<#u2_*y$N^0Mu9aSvcPVAcHX~wf7!n{d;k6b!B*#o?CQZ%<1WXJ
zV!l^9q9wx-HZvMj?)8R|GbJ5qKtn-QrV*MVyDs6}o1^4Wt}6l@QCxzPS)xIb*{@xo
zkx*W>(KqB0zUeQ3TO1@UWgF^tyZx(^^Zt>WBnMl{o1uK2&AftN>b7SQw9%uFR!UJ8
z9WG%xBe;jh;+Sn&;6dcHo<9q3?FL66hLg2nIbkEP_&^)#Gp(VD44P^72-bH*d0po>
zACEN&00h1cZ_3#`jq|ex+K;I6gsfJ;Al>9+NQnhuujAv(a8xNv6h_fvm|p1A*UW90
zq(YNsoQ6ru{j_bqEAb0kGM^@SB`z^?`XZ`i-wN3T6g()OI}s6)W>er)eIj4l6Oxf+
z*q>))-;tC{H#wU`qyi!flUKS&J)#oo_uyLWlC7e<Y(=<s*~;O?`-&vLlS!~lT;Ds+
z!M_I8b{_CrL`+O9Cf<%|mSCe=?{$YWLuSK^=)o2(RP?yBe|mXb^Q|#}DuN=NSFiU8
zM4ienm~z={IiHnAB_%bTDrsi11TSSIwBJPf#E@WdNU?^z?uuv4vZ}Zcx+th9W%_J-
z_w{wI@p8Fv-e~g19fTEX&adT%J-23+3A!$KLp-s`Uh<R<;OC<BfCou#+V|jed&dr}
z(2E5#)FMA3LC_l{WRt-pEpB})2_qEDf$DQeRjj0!?K_31!C;o^;N<*L;9W8;RczJ!
zE~9b@D^5(A8ZobLQf53hb#S0nzAElP1ED}RdUl=FwJe*~(n|xD)~%iGV!zpl;WbB<
z?~=kk)vZV~@()JK^)z~%ZgO&Y+_Nv|3sG(|6J9R?%_+C{T@U*q)e=zA(3rysNYB`9
zkCHSWmBGWpa^GELMHJ1GcwB{cJ9=Xg{b&5D6(rtZVIkj7i~lta0#zcnOEds2B+=Me
zq?&Y#&{~sE(;~YVdAea=I3Ofj2%p_0)i&xDy2D+i(MT<94x!8Mq)^{#baY_F6J&Js
zymzANZh6_aloBl-4X4y)Ql`tw)2pt*nah`*ov>LfP&(QaiO@cF#b(^;u(JV-u7LEx
zJw<hcd;;A$xYuIV_9ZZcTzb%h(D0;KkoYbI>leO|%sU_=*DYBE=fq}#7PJaDtw+K5
z{xM`07$AhPH$-c|&5nt)F>-zoR6i%ca(6&4IJMf-GB8)H+1O!z;L$Wvt#YzT->>X@
z1eexJ2XWa+@9OQ@k+0Q2F){`b^=d}KMqrBpuGXQDRKS@rC9DsXM@l6G;+n>d+#zTs
zLGBUt6YD9K&{kq;FQruX#Zz8;<I(2~`jy=AHUu~20FM)sWb~b+adO*`<YW}bz7_?t
zIiv<IZp9ids2wRuxXNu}i>4T>6Qj#nTkHk*FksBnV4j+$1nX}f5RwuQh9Py<06}39
z?7W-w+{xW=TkTE5`o_$&T-tD^B>vW|N~wqDFQdt%L1LQ?qg6{aVF7W4_r)6R7p)9&
z(QzA_=vGKV!ZVXbS1-{Ewj`X&f)W~7<e6@|R+<tMv`6+5DQ=9P`(v`4cN0b<9`>l6
zG+p~m3-nvCwKgrDAOdeEYn_*~)7Rc4pJ$34<+4E#Q4$TR3<DG=jXqqYL5+u4!@1}s
zHK;q%(D<%5k0Y{K<1wv4O<JdDy#GuD)*GjKx5ifFsH>y~&qQ5$&Sa45R<c&rLfH%F
znY<gRUyplavx&A;jP~+~r-<(spprJ#LKZczT~|U4E#(CwQD?1?u*GV5zk-b`@3RW8
zyCDnnxOhPdm1uQ87<RK|qp{E2=(moALQ!c)xRGV_t|Z)q3nGs5HLuf+$WJHlwF;yr
zd%q>IVAtEezB9iKHXc5w4Z{BUal^Tnk?hI(2l8F3y-)+FyZ^~VaTmAsN1UVf^Q25i
z@z4G7toAEtL{?hj87i^icKnfYTZB&#5twJI9kF6O{q^JV>C2r5-$Aiz=m~#yJ+Tm7
z+zxlns43MYrwBx=^vi1tXPZ0R=7vV}qoO$XN`dZN=K|jDMk&4rDoScVRGJF$@#HFU
zY}*o}!etP#2r=j1uRiNDBt&MvVKv~*`*c>2Ga4@^Qbd+P(1iXRX*i{m5je;yE+Yt<
zr-O*VXb<*^J9VN3juv37>efnbki4@Z8tz8*9~{zW%{ZXsJ{2n7XH7rDYb#k6vf&8%
znq;X4KYm^RJk&HGb>%zN1FJ##RJn~jP0y1wJBvy6q8WMn9=WbTr>2)e3h;D2hk&Lj
z4U&74ttdudyM_NOM^#p=Vf$!Z)x&-G>U}2UNkW5)H*du<nQ=X=0tCV0KhJsRN#c0|
zG^s(M=|JVgRl##ei3NOkcynS*^b*Z*(yWT0*-f=oj9krx7(S!rL-zWKmM6p-1zQO=
zrL|JCkm3zz)B;Ld%)v8bIuLHxb(T)s0*-~GV5JTd4$Yd$uvU=L>rsB4y0%{=`?GmX
zk22^a_b1NA5L=Hw3OP2-W|1O8Pfjj>JnR}lTqX6ki5AhmKRbNaNBu%vv{KZvwD4}M
zaK2ST2G_avkbr{rf_#6=?x@Hso7!+K6JG%`oKLdPi~2m**DC{H%df<j-3oADPFmk5
z5<&?8z^%5hTxz&TTvS;RVJ+5Us8K9-c)v=4c7ivRO_Kcuf^TyDtCYX&rPK8DL+TDp
zz_%y+hsMnUHwV!Gvo+^g$l_4s!}3k5c{PlI;0gsxh3}jk={11<b>&=J8{t}cjGtiy
ze*`czohGmF+sD0yJ1uIVEw`rT1*mM->O2tWTcbwb@@&Av)bH`OTYpBN3m$h6!3$p!
zA501BDh(xFBGbe;f!5Evjn&+`P#C6Hxxw1CfeRnWyjewq*8l)+<arMUSb?ODtf_X;
z;$`8R@k$uQS=6rCYE#7~Zi=dmva0{<(pfyi+iE#=14_~eDWDmMOw<|&Jg$bbFuznx
z>sDPPxAVbQ9com!1$m;j4o}}m$j;4I!+^NwI)a?Hn?iq04(4ffgZ1;uZF{5gZttjf
z(mTC6-tV4Wys1rUHw9GaaR2<gfB5$7?6PMSawx9ZHQIAd2lD@-T3xijER$D38$G>V
zPuTEa${rBs{jOxl_|*Wv-R^;ZYLUW!9X(J&g^`ZaMGGRZc|n_3WBOFLpsB*VhQiOK
zBmTJk>8GEX;-PDZ3f94_%9f+DV}N!4<)ZB1`)2hcM4%>wYhfWr)N?mSSvFx;>%x~3
zH13CZKSq_O1Jl%|#g51=r=eu>KxH)f=a7FQcMc<#_<L-tC`jkJlv*iOdsHRB8<o7Y
zo5&Xs74s<xtA~kfxWGq{Ul*V<GdoM7(_BzMJ86!05#-rdMu7$|buvPK@$7P8Q&E@d
zySR~M!IyDTNWxGfMEBN(*6Qo=>b_nu6_i0MFI6;=yxraWb(!NVY9bMZR{ZyxEYS<^
zX91;-jaG|F=b*a@lZRf>v?<)~83<tA?T0MqajzMz&#Sb#!Z5Mn9<NpR`fosr{2lfv
zl8B=lqbKs^wnuM8LSt-M;>+XHH}8AMkAAr9`4oj~;X5A-$5?~%-&s5aRuJPC?7@^7
z8bcbX!((w&XII`85mf?EM}!-VfbXn}r4H^*s=X~?MbQ<KE=xpOXQQ_SA|y_yLpF;C
z3D{P}IT=eVzT664Mbk_eVm)Y^#Y*)ujCv~QoL8atwuKa>q5E>_`K;U~bX_ji4zZku
zwy_fzKb)7F-YudpCe&r-Qpc^kzB4p;lit~D#JJp|&AHR-f@}wnO7njzNb#bHerJk5
zHAXFc2scoe^V`lsw-kO2zK=Zu74PL(6lpu|+la=xUFExES<n}i&)U9smMzL;0U~3G
z>I)(rl)mn1->5Ecy+W&G8AcX}KuaLhI%+IOzo1sd#ko7S`unFp<9QnBhkn6?d(-8j
zoEpW7kK<=EW}8+@SPu8wAwDgKv`#)>3TIw4nUU0naJEW0Bt*h3Gv^cGv4o@8wlH?~
z>f*!YRsZnp<b40i6NgRgG5sBO#l-h-yY>M3<ycGz)j*QoUDa*qCi@{4Xcvkb6?N#S
z_j>=s`>VK?Ul8jehpV0N<1R`&@iW(37K&nn9IF#=7N1HgkV(*-TN9;xJh{8dA;OH}
zw?sX}W+6{!F>Hlvx{_^%){H&|Yso*?vtAo9I9>`2C+KWq{8HXMs&vm65%i`rKAFUx
ze+r?)ieWmTG4r{v)osnr&+bryHNGl29wTE5;RFF}l4Si8D$G?<wKU4F-5$N=3)AYe
zNAs_kHL5Bv<75Y_Y===wY;y?{BkBzN;Rk)j7Q^+BB1`29?~f1qmp@->x=#mW5fGEI
zb)td+U+Bi!qPC{&a7jHgu%+f%oy_Up=pCyE1CR6c=S$bdcZ{IO&no948>ia;LH|H<
zErL{1(X{#8&3yq7w>f0~zIB44#{>+Uol%wYj9VKU8r|sMYP3S!uYDvL*%~Q6i_S_$
zOx(E|Aw!cEk@=nvEBs0Kup_3&WJ2`gwv@+ubKpkg@S5V?I=`LuWm9p{t-MQpU(Ckj
zP}ZlPfzr6M5LO>P=^QpU4I^UP6$o)h!S`gP^rG(!?u?|nAP7mTX&hTqP<T*!0i4nR
zJSqXBwDydXSAfYjn5qNKz$YX4&*!5R$2f#H5GsFSH$euSP8YKd2vaNaX_~EuUEAC+
z8FmrVwqHwj`RFLW5vndS!8c-R0eZ>S)1YF#@pVQq9$-N+srZqmeWRQD4KPlzb6=tq
zmDPD9$(cDcs;y-HFUuvMvJ^|9$o<`$WN=C&uik+NY(sLqo1R5vY2Bt+pWyB&Kvgxu
z<quRPE$SfL9C~I7tT95Y5a#fdUDre#we>3^8GaRtlcFpjb(`stO+y5;;+#)JXh$Nq
z?c@D#zB0qBbf&>uw-6BVyM>=Ucc1K4ZZ6dXHmWL{4km(}UShsSjh?uk-o4z}03o=H
zW2*PHi{GAq_$g`8Rd;{h_9%wmC}S*iO+{JUPu)@Q1^2xyCy+=?u7|_gEf2Dr0yiA+
z-#uC@L(T&mk9Bd{uR@&GHMH|>@;V#T;<O?Ppo<OI2?=j<dIN$<%=ZlwhtAZy16i^;
zSb&r3){z;rsu#tO=(Ka3&_I7UpN#uZZ3?0Qk8CW10&b^Uaq1u9=sGy%LP|op)F4)m
z_@bB%MO^NZkKN=AIE-GU*Y2OaoblCSSc^7_oRBAhWTz-F1V6)_;?6XNsngn$je@50
z59!~EzbF6We<Xt+27fF59-qN!Eyb-x9I6ZJZZ*n3q0O1#Ij}gBa_FvPY-6%XGn$yy
zLeF2M&K{m73}x7f!mUuOHg~RANP+9eS&(k-ERlGl&4c<a!r}8sq(h=lraj}D_1^9a
zn#xdzF_{JRCv<J96)j*KQ6z$5Mr9-`JfzH*5S>0XA7PsW=6ls!wWFmQSrkE2TJj0|
zmnW+<5R#-$I2OCRTH1#v!QH=T5(x+7#j-#k?>c!k!|!`@{k=AcB4Rai%?Y8MkZ;}#
z7X}IzvvCy_+jiY52T)Gm&4d6EE5KDQ2Q9R1@*I!2iKFuylgpn)J}$oHsZn+r6Yy4p
zmSKc%Dk<;lZ>425prUB>7ck0+0qaiKI)FpxBt8U#!?yd+b9~o#mzE(Dhr7u>>%p4%
zVzaG*dZJgH%OF(u1Zfhuwv5HX$+uI=<^ixe44UuQ(DSB`ho<^=MH|+0n-FmkR3D9x
z$Lp2}E~0khU@*5XX#kDucq-hu855>>4YcSP?D5%NTP!K=fo8y72Bz<3g&~pPiQ9Hx
zJZL<nowBZF7O@2031gkx@Ipm8*$QDpk+mrBWz!jjyH;Sa*vFQhiNLCSy=N}Gk%YdA
zucpW%Vedoep8!~G<tb-+RxZfgFi}k+7CE|A>5~&GEw`#mvnHjXgv!pS5xwFOHI>iP
z1@jW;CD2K}wn1|mE1Seo`U%ws=`fp*T*s1EqqKVYa&K5VFK;rb<p!(>ulMFCc@;^0
zO`Hjxk~C%;;$qv13;m&6uhgm{YcsnZX{B7v_?7UxjDIZs@j&RBWlOFb6&N0T@l+sO
zWgIPKWvc*iWW0=4PBU2ZgeKvpL(B7uE7Rv;@8atC_3`2URZsDlR?sstRdq;Edb)Ij
zn`3<(?pH}G>pIWo$IRJG?f}|~%8KiVeali1Ik;g$X^|j$h%o8?`}b!b`}@u(HTt%|
zmEh~WEU*#RVzN@iJ&+1wGC8k@e<X!ols?`WrxfHKt0$XcLsGLQou|BuHN*q55Y8=*
zpsKvDC<aK*WAX%FTXb-t%<SYy^iV-^AY5w<O;sMYy0%(KuMD)ZRF|q17{<vZ0WIKA
zkXs0Ftk%?YgvqR(6V6nO9}o9jvPMhEXN=0>#{CQj!f-K<c+`SiD**-&<D&u0Z>py2
z$|dG9o4#a|AnIq$U@ei|BB=1D0h(jS&WimSfs1`>w8jUX@05CBuo8oBt*1Wooi<~p
zj32wHMA>wu4VBQCA}G2P@LrJNs1Au-RuR{(0{8~^MnV&j>{;GId;=-KY73;bDwp$N
z7D0&B{`2)H)Ld8o&dq`LR~l8>)_>tac5i<0@ykl{I_#vEcvPM4vRH&7eFg9NA~6p%
z#zE6L0y~jW(S?kjsZ`n#Y7&v8TrlTNlV&kwN2@_?)dS`w!UDQanxGcO-#XSNJRs|=
zYIk~$985=QxAnBz#L#B?R@{AhZZ8bTMKu+D1N-maoLwAWy*;TngKz4N@z{8)X~gDO
zfese}RlaUMo}Tqzp?vfQ(;96jCMxRwbbQp?hdddI1=}(3dgX<;6C4)gw`TaDerg=3
zFLq_Mp5u9X9bi3lNwB6SnQ%U<pF<26q+u+Gjlu`#0Ng)OvKh9(CWBc`A$eIzPNd7v
zoJTZhy!9MqN;uw;j5lM`h5KD=ZI3;5G6su-mM;SFi`Adz2o(rnHRtTETd2+fmNH2?
z2FM%(B(7Uc0siKvsvT)yB8(>yJWs54+WS~zRHMLC&3aHfJ90Cdq_Oq+IDz!}AVJvq
zc$D42K+_d9V9Z}YL>%eLpJ(1}<F3(k-SVaM(MzxwE4s<L7on5je<W|6RXpqY=(_kt
zY^72C(|XagUG6b~MmQF?t=9;7{ZDR-5Vp-G*+SV?+zS{EYLp2Cg!))yY+gjUHP!-a
zxX+HLm<Avm`^#!B>etc1gcl_BTV(f{XA7-DbB8c^udL)id6K1}*^M*IGsXpcn_67$
zdw_vv!wZ8}QBGbi_2!J*;ij{N(oUq6oH<X<*C<AYh7XZ`{WaM~S$e9KQ%s3+hbSe0
zAu?dTcs;UptvQ$>wcL`b9+@DUQ3DU$co207<Uz<uDP}_kVLpmA#zl#_iUL$YeV5<U
zCpa#KT~9)^Qs`{7n7}bmmc-N!G9W|Nh@}S~SW8_;IBUS`U1Yldb$zL(X3w+vSU{Da
z8K2Z_Mz?`dS<4r{b3hR^fNbvax)EE$B;u<@GcL0%jJW%HwGFkem#V<b2zyD&_;I=E
z^}jvueE2C@EQ_qOobA$1To%e}$|K($Id9LIn$ZIs*fs1MGL&9CuoyXCuAJPbx8<jJ
zZV5YgEe#{87|>XHP^Kt*BC;{t+&gv6kArjcl;lIxc*YkXY?8n_!mlsIgG*=g7h(HB
ziCy+&Ms9_8+=@u+sDwa^6F<%qWtWK+=+%Rjly`CC#l=>6jU}S6HR)hL3(_h*?h>A0
z4j}4FC(Q!DaTVi;f9?;8l}y8$#=6@wB@!<(T_q>!@a!`A2^;ptsqpY&mAObxF~a<1
zvqxM@#RlBBV5@m)47U#5B5JvXat)8-4nV`eb2mnYar%9$c+vUw+35M!|8Vy?*}r_Z
z<4oPe{r*I_H{Jy8SW(&wMH8qVi;mudQ#+avZcUGtLp4#Kn6SYdaQ!6&32Mtok?Zf*
znGy9IT=4_9K{28&4MPPEp`wyT%fa!R(+?+}fK{5<@Z`!WYsHRAe3d`oaI_w*Fr&7j
z0Ol<D{`=(lrh5h3&+SzJn5Uyr-<=HoXLX|4(mbHr7d+g>4C>Td;T|&qUs!4|eK1s=
zWaTOpkhrB~O$_v*!jeCe7|M+Uv|>Wx%YGk^A4O{#B;~-bLc-HZB8**!p1Hy?Ev8W@
zp};7=#)8%3NK_g%hG&-F%02Z8dl_i=(Oxmo9hV-dM=2TYvYu?k$tJng(7lDRwHcR^
z^2#Hfr^-Qbo15dGqz1vE({TfVoLGc-7^Y3NkUO*G071~`kJaop9d6YB`M`__^#+y&
z%^=SkPE0+EH9HsSfC$2TDxni1Hd_LGH*}RuhWm&*+6ZC-t1ai%wT0I7HOKeRw_KL9
zb^^Y1&)y0CsL!*QC5XzSq*L8k-+j4awe=1TkB$$6EFnW^IJRLC`-A!<g>#v_o2S_n
zsbBfMtH1A^3~#!Zr^nr+kO#gDAqOMKbQbzj6p^Zhu^+}o@|kBEiTV0*i9}ywm;n0A
zPm&3a<8}K-vf`?e&<J)~Uo5d2qmdUHMae}vk5EJ{35}v#_8or)mRK<_`<GY!%a47O
zA@qJaeA_>ez225x8B--m{!ge)xI_>cmqO9ZEjFCq6G4~xtexOFrHxo}#2Gim##eoX
zy%|`Ayh5a%OqukIC8oz4VBzu%vG4d%hf(tNb7x<A&QDzfoR}RgTc&BCV8q98KUn8<
z9;4gzF;!*RaDVvvxj9%*-cCSR>V*$9-8&=a;%6P{GI@P`ewmzqI7nW6`_11vFaEw2
zPo8*8488tH@ATBDK-H0gB2x$g+jX3jovA+CBGuScGDQf%NW0}*;*&!_mBpSq{cJgU
z$1Tnu)jAw@>qo|WSA@k^8)9fq!iS~LL3#ZBtgLd@@w>M{JwDy+AB=v;0PAKSrN-@|
zyeQ!GyIt$MAgxqmLJTqR2i>F-F9ngr(<}n9%d!ajma{v3U>`^u_oW*PT=>D%^fb77
zhc&g6(8KQLxf@Cs!R(wC$|VsEunwek-^}jjO2?bHb?1eLf@_G<M!`*9#>#I(u@jH{
z+N{%ah6eDjl+*UGOYH^iw<2~XI=)67&QN=`MYyiF6r<U=m8^1oKU^q$978@3MQV#i
zLzQ+%VV+62%Ua}i%^H`au}$_^ZAGk8xA}Ybu*Jh9tu0~AV}@;0C3GcF2pm_6+B#>d
zNPG79O?$5`_pb21hJ(Jl(N;5BKYRhHIaT#nraMr5lq*QgY^=&qCkJjaFpU@Q14$Z}
zvkBX(rY-C-!53l(l_W_As|vEZPk9j?^`(P}bhuwvlaZr|Wk8;A=}R2yc(N$S5H9`N
zRIj)6VJ3h^O8o^OeBdrzyRCG7-`d)>{Eb8}#LFT$d0F5{#F@Qi4(>JF!3YEG+QjOp
zH5g1&Sjv(+Q`*tkN+(+DxflX;;-w<k8b=CKXzZolWlLQ>eVPz&5ghAA&)c|@>f}GP
zl0C<7%a5&4AkdaU^;)?V0qdvfNP=F|Sp3@pz_j7vDqZ$2FOSboS3wqLdAhIcc>YH4
zY$NzKBVh(cd}9zq!gawx^pH{^cyN=bwN;}jTH+>xH??@JzRi0YU`(E`w9xH#u}rr#
zl5OEW6D$=oHe%cm>7!9VineAU%a@Yj%k7-`Lh3H%$hnIQj`dK5br}*ro3&`V_f!99
z|7t%@6;=V8Qe{R>&$Oo}P>+R$T4MCpOqrIL##_2!j>L2pp6O32x)$s9J}!Li7DzY%
z=c3~skr|Qxj6nOGN?CvSKIXDnM+QZ8fH?KIQlO(j9XUtH^QR?FicyI+b9v1xUv48E
zyydM+e^LCM{us!9NS|mqACod>GMekL8Xl`1N5LZ9@UTbuc${aQw{8JU@zyZ|8{qYC
z&`ZpmQFioJ`V@whV=`x@d!P&e{pj1?;k*8M|McvNiV*$ti?Els4k`YakA1k<E!ylq
z82dPXbFKzGLP$_qL#(Ue0r%@dec60P)jc&NQDbz|;IwMEd4ZozYTDcg7QD)5a)X8<
z?Hd7N;I9!PAIrjs61A`|p>R-Xc(i~|pER20!6GAMa=d&>Mciw-YYf9JHr*;E7H?H@
zzJEbevli6SkdGet;Qt7q4Fz3pB+pdRP>o(ObZ^Ac8BG7YnhJHc@hC)uMELU8-*{~s
zPm3&&#1IGNcYLsjp&HGZ$X;KHq2(Dg83BzMeN^++o6XWeyUy!vcw)_nQ`EjRxQ{#8
zLD3EQ3|pZv-9GCRE6h~0P*JMaK%ct`rG&;bBoR|o;q6^sUGz@hT)l08wKo$&ZV<zg
zf6&HfR*tsp>0YxYORcK#Y`#F7v<35B8B08qs4u5B2DQ@fDx%7Ci@X8ZNapz)1`KEw
zS-yy_gEEHe<;=ZQ1m^Rh1-m={nRfp9yz`g8w^`>3M6lek&xvLD5+<1_+zf_IMy2Sp
zB&WutmHJ&-c!RG)h4s<W2Q+QyJNCLf2}V0W0b>Ro7T*%b5%()*RVS=f&({g4$RI^q
zh#pRI1N3mPMPyaMK$D&S&U8u)8aYaKJGM#vMmWD;@Hxg>y=lbyz!}nvwc)a)bGWZX
z#~JN&HG6%0;ze+ZLw-TOt49PU&4dI?J3b&<`v$G!2nS6z$I3%}!?HzvrL(tV$PA}e
zy*Z-m{S*w{T7sJ>&NrH*WhF!b)e=mrCW%&S)B6cgFP=bj3L$`CD6Xz9jt@Ru^>l1=
zpp1qQKm*VN+gBq#knjMqtWkW6NN$~kC}6-B%klVWSlq^bnFf2Tgf6FTF!6cqGYP!o
z=XAl}RAA&<RbMR_cdu0tx=Z5%zc(lxQe%I-r!3vnovGzDGDE0_*CmNdKfR2ET>bdm
zD>_T-$JFN(d0e;Bgs~6-ub4?o0bN>eW*HAri!{as=gsM!>EU&>Kp(c|LxaAn>0%Ak
zt}wrMP2L-If>&qB(b+CEuqpdV3JFijz&v;WC>pF(YLCUKvtNvo#7#8wLBnSn?H@xO
zeBr^KaxaCPcoQ3t69sbb<N(L!J901KZ>gC;>Uu<_HTKq3%n5tn=NJdOwPCi#tm=Qv
z#|7&QbeOr@+aDFOCBw_o4}3bw2X0ID3pcHEPX&?Mi_3lIBO!^QHv!O#PFygiq!j^x
zDQ(kswezey^vd1uQ10|DD+;nWyt;M2?%ga0U7+>{)kx_ny@;oC&(>I$=W`65rsq*9
zU6~@H_q~=yE<9b%Kp*W!^@el|@1l@*-H}wNq4SOfNsI=O<TVJquehUItJdU;<ol$&
zZ70v&zvLJogm+6xB5Mb!z%nwgUoFmVQzw4RE?kdwJSeGj&tX1QW$Y@V6|HSuFP&jq
zEHdNp#E`g_m80AZSmE4L_m~TjRN@Vg8LY9JYH_2fLoHHK>{Y=UA0;EUr|=R`sF0a@
zz*fsQ;)}Ie5m1Tlo?f&mdUK>IXY~kv&6UC#$Q-6b=p>qHDt3q(YVzTwS9a{cvK0@i
zoqWTOzkab(`xF5w_wmlx-$WnRHbC@)g<<kdY->_KTzyAK=%YTP(r`xHw?+s(DBS;P
z0$~^oXNx!Rb!{1OqkqYsLv`$S;jH6h?#zCIj!+qBcm7xB+vjXmr*U39QO$XgNuZ87
zF7iMZZe&FWYIeKm4!6V(QRB8;B8KDc2nf&@$9;KJ0!lEaEQqK;0X|_KZ1@JnVEGL{
zau^^fdz@zozJiZ*A(Deq{=*Rrmsl*@+FU6C0*SO}?rDAwU^koumSMM(Yqd70N|p$B
z?`r9nUP>>N^+CGHveL;vk7h94;|BFXp37ZRNRmiucj&`Ra%$wBszWrq;g&{mH=`Dd
z2*l7QQQNA?=F(t#>VQd$SsEpiG`g$Kh)OI+rdo}KJBV_-FP-cku4Y~$UGil?S43?&
zxx7=9({zYyB7R7g`}>U7y!?dygpdKFGx3%!7ift>$C?xldHGvkb)VOmY~>)&H@e<$
z%R+~tC_A4&e-2=DkGZ+4@fbL7;&mN-@CfEdY>?-%4T2JYJOk$nR{kyqd4fGAJ6GUW
zThCT!)Yvp0otkwXf4DEY!)Cg&E-^)*JD9AaxtpERi@zkFcHGz)Q?dovCZ@ynqPr7F
ziVM@lR&H0#r})%=c*8+OYMxnLz#2mvb8=UNsnikjs$x;>QljO7GNT(;^fV{sur3sy
z6<Y4B3o#6GWQ(DUR|%)m<g#~_oW1r5lfV^KQMkkJKtyblN^f(?vrvadj~(0^btf&E
zbmxK2A@{4@RtT%r#7cMNntFoHBYw<Ma8Cqe*2JI9TrpZZ!3|vPa+z@ozVgiNu15l~
zz>EqWy>`^ztUYCnUt4**rgsds#T3C=Z$^7)op4(`h&4xy>FYcL_EqftRp%)}2L%pT
z(*W_6?1CK$Itamwply$1S(Dk~*$97y0E$3$zud9wBTK>EiM%ySo-jWg9Jk163$c^P
zc@zJDulK>U6~hj)<rzg%oVk2@d?bg}XcQLP`*fj<gTl4v-KKEwA77e|j5>Rxtjgy~
zS682Sf=i2{iMBl2LSkf;N<4UM(b{CGc{p6kGHe<FlNtvWAU@dW;NIDR;@_O2H0*MA
zIMB4$4oGt<@O@^RBokA+G|bFX*?GtrsL!7?uP4sToVb@*-8OYIz|XY6Ya+q=RMM#M
z^XXwLF??BN&{Vj*+CO;T>pQ0j*igI@VNa88y2fqq+vS<BTaM?#=B^f_0j<w^>=k4H
zpbN-%>H4N-c`6KCIDqH(I54&}#bu5ZZ$8Z-S1g!Td|$YPatj*qb=CBv)<;w<W7T}^
zHX4-tHvLeyZN5g!26hZA!Lfcj9Om|yS(eSipZ%s;gKoP|CELfx!LDaEnDxSBUx>2z
zEDC5l5ky@!tV!15FKyfP;9g)anA~?!4ZgNxd1Y00yngk*I<bbT;p)7@EdTW2hJj&I
zJ~M#6Kc@yfjk;Sl-K(`XQ{s5}Ss|K%dtLntPok)^L=ECaxe#T@7k}9iMh?t5BiLpo
z3+Ak8Z@uh3rwyLn*A}gn*m0vH1-#o+Zh%?T1B>-=BgVRXFth#@Y0DcPLf6RTht|4q
z--1;zw@<PH6<M2n5zVF4G1vPDt_xWWD@VAYa$E4Yb4@MAN=i2@ij-!m<ly5^(WcI1
z!`Ny;4y8PXRU;Y>kY@hveE;fgH~A}0ZX}J%JlaK9nv6u%cb<1%KL2+epKMNWI9!uk
zRI_^}y#VWMC#<GE>RqZx>sQp85JCpq@x-6&Mtyc2MYtpcAO82w^M5y(f`A-A$8+>`
zv}WJ#zj(4PqekX)nKaO1a{1=45o*m4Z%9F4k|xfbn8dIvzd5|D)v$C!RgG&(kwbT7
znB{W58s6U@_IIF+wmPH2)QY`g+@fBXhQ6Ws)M!~sgWyZlow-tzvctpS%hjTsRng4@
zd#T(^_5yFLE+TYibZ5V`8Hq<c*>^(Ikc4k&9gw|MZAe7M?q_<Uk4kU<Q6U_r-g3&R
z7u4AY5ow9+k8<4KyWM-fknE#wseTjFp0xC~Ku#Mt)*oj)a7vl+nA@MSt#Fj7RGlfc
zk(Wq#kJ#C}GLl$8`GM6dN7+Oj^*asOqb35!;$n5YG%|=m3xmrSVwZBgMip0Gur3&g
zEV_X|CX_gUj_(*>7)dWB8L{SNJ>iQ-<>k%MPTt>lcG<a*O1=YQSW{XSx1eUTIrA*H
zI&J8Pxy66sW&2`YN_ROzxNa!|jJlYo9wH|-Csv)W3mm-&Jpe<TWId!hE-YZ0Bua2#
zk%UIndc$YQK;H96=NK8ay(VHCsujhEaTdb7xD$EUQQK>cs$oFq%{vNR<uAkCA26-k
zY{K-p9ai6dsiK`PPEKCv)Tva)52+aQ^j1_SGfnX*1BBX-k^XCl7&-e=ES1(81aowA
zeF}?<isS@p$xZBJHz5OKq_zHf|M-3X_%#gF^B!ctdly%J)l!uAE{keQg+@x^>he@>
ztYo)Vd{}&QH8K?bW>`<y$T!4Y3)yAZ8kHnQOva`{8=9+8Ch=i{&AO%q1Jpf17HTZa
zC|jxAZXjuGintU~f=U>d<?vu%(Ow>89?urcRs+OE3B47`R=GpsTsUDm5gX{PG)$bu
z>x$sP1_O8M<C@;O8m8{ZieV34dWV0}fu<kly@j}^YWxXJ{P9uSJYlUyo@Y&=Q!mDD
z5y(s^=r+yWe=Xt&tPUFHc-`cg(ac727f%&Do*f^F!RdA{sYD()V}G1OkFZD%4-UPS
zdOaKhDtaF^HT%<uX1<mH7mJf9ckc5wsE_hTeHpp`UhdrZNDRz@4(=+Yzk+2%$z2Wu
z{8@KOCDjlDO>ZHqhMTvKRe#+_GqkUso#G3)xh`1<FqSQ#&UYNb-BLJ6RZ}-ycUnt^
zKI^dE0o3T$aWNEzFaIXkqCSY|<`M_a8~6}osGkm21_wkVOMd3-4!uTS*PFU(yTBN8
z#zq|FvK__vn5!6oq=ek|I(cYFj=BnBk+o`j#f^nJ1i^1<j!Q_iRu(RUE=s>GY3tm%
z3a`C88~Z@9up7CnP>rD2o+xr2ZD)E=`Vage>6a$%hFxB)h;|ae(NG0E@r6Ac{FQ7w
z%FP&BV{LMbqtw__z_0n>5|)YPO&dBB8s4l}V;x82-%nXL&X#B+ckYac?eQ#%2{6#+
zjf`Cl7@AJyBH-g!jTPOi3(^anzw7-R9rjO}T7enjK{<)=IkZd`Qs1Ev9#mnirm^HM
z=oI=Y^rzt0dF0+(W>mNggrPwnt4`A(>dr#26?iFRm(wZ8?8<6Qa8`WEoj1a)EnheN
zSW#5xNeQq6UHJfYd2);fZbWWa{p4&W?peK)diks#GIbM8tt)9B;LL6yD{*$+e4)gG
zKEnEKa(>XO6(&knP9k;Fc&86!X5|`6v^b0PZCv@k`p_Rd%~SvqZQOL@_yNqy2HtTa
zF><Wj>UZM^reH1y_esR$D0LP;pZ6s1PSZkFoW$4CIVggyY!WmJREbUTPH^9_Wm^4r
z8X>JI4kKWoF10)A7-|Fbgu{S+Lc5}LD{Qy^Gaxu>RnyvW%`}bE+c=CThHt2vDefgQ
zT?56)mkNO}d`V)Z7DFHrfQnXo89Zm{ro?F<pI%<=zklE5*TRlE0**LPCfA}B?c}1o
zPd=8VTWPQ6<^A4}VX5lgZGY3MJ4}BFIdfr?*N}}8_v_O#Y-5ImX^xo3DvEM8N?KoW
zZ+tl_nW~znCU1~eUL-Uvf(B!RlC+|?o3gwmF{vAGm}JCD3GaPWD=mViQE$Ur%ho+Z
zWLt$NsVQ3N2-rh`TcoDdR#DF;<R`KT)P(}cX;er7aIacqWHvcrkHAiFk?D_|n6G6z
z60+=#uFAO0Zqj;WMeUI(TWE{uU^x`+1!{@L(Ozeq(_P{de$0!PJ7&;&Qom|T-;qKl
z!>Laq6qyfR!ZOal+eEMvTZ%ntZq#A)%nKv#8dM>K{>`2W@Q@s7@mW^l9Y{gwQ0o-{
zTrM?U!v+jRYR1z?wQwq*rfn-ueO2*RiHvMurDPTuvLMl_g(?6eyW917`@V0Wwe>sw
zUh=ose_y%g`mt-0$FCU;u6Zxb#z*aMzUDf<X7!Ra*T{U)t^v>U;Htl!{5>*8;}^fe
z#YbBp@aeQ;B!oioyw|PNHwx<2zMLHO4nDlWIvUS&MgsFHVv9Q-bA5%#WD4Acp9;1`
z(JO9mdcIZ^S&{jrP#0kj2$Omh^GQ4?I;>NC%QJ&LH9L~lB17p(6xLf-5A4`DClHMq
z;mli}KTmKY66J_HZX4Xg-WzhE{mASx)TtutE$k=3kEpmbq9NR^J@@Kt{jq=e^F?^2
z{m-92Z$)gCl}bk}YCBkM7T^*s#TOvTIx<7(Hb(i;wt;Awd|i1Zkvy(=*TnJR^#{Y-
zXUjD3(ozu5!~G%;WQ)-;6Ref^nAy_oB16&@HsWjdwzxD<yraaI#(+acC}~JXGl~pL
zQjVbUnO4ZH%+WhZ{=;`-=(3=(6=8pgvKAH0IcffC+a8~G|NK~pRQTl1=5!{)gN+cc
ze5%LQnm^66$NwgFmVa>*>w+5%fv_r6L+hay)Y(D|MoMuWp=6BM7*|L=FiaYb7z3>@
ziS0Az2{KTDKOCkrslOm+8jKVqJlbJu5E-L6thHCb&U2&P@Wnm6qG2WebH8c9DKb2>
zvf4=ucMZ>?S@}pm31dB6KAmRv{f*W<o;_l87dFv}P^YnaLcpE@AJjTNz3RQ`U1+4N
zclzO^cd>uf6Sw*7;IF;ItK|3y>XxsMdl%H~zEwy9Z)8T5b?fyU^ucel`zii?HNKIb
z_VOwfC%-$$Rshp$Yt~qchbr59dzrR9Vw7}aRS!isQl^q<r)daNuEYE$w8$eQ6<-e{
z1||Z(CDl)wK9&Tm8riExj3M6{E=}i)ZH4Begfg2??v*CZ@KI`NN##P5)NM`A|1Rk(
zU*h5O4jv~)^ZM8(r7$o7^)m-~H%8(xn_$mW(W+Z#U`-T!LsX#Hx)wJH#LG5-Pq@mU
z@#47)EmrKU;E7>)MI&kP=Wwd!FJ8nh{55H%w<$lsS1b2T;?3U(K85!I+yh@=D}A5B
zkQ`8@*0l#-1quQhA^t|+C8li|`runscoQ9y!0$fF6)wKYqZdvqn|y+diA{Z+zxV2j
z#drGt`{YI2@;TgW37kb<PAXq!xdy4Mc%CjKoX0OlA*<l9+qn@!@qrx=*Sm??_Qr<j
zlB>Qfrlg48AZ5q59_s>XSrc7vR*t1g1{Qf?_YhGSx_$6-w=THKF6N`UNs?CL7LKyd
zo(W3dgh2lvqN5_IJ!inEM^#fV<j3_D9VuQ=tPo^Zc@UX?04em{h-10P&__;xs7-Ra
zUOrp;EK=y9I)lGq^lh_MF^xU}Sh8h282v%zJQ)xiQ^A{klN$(3SZhph9DU)9#e&F^
zA74f&4sJ^mI_Jw-BqMH=YX<!j>TkyB48j-HeQ9V~ptC+(jWeuaR&K*gHM@g0CNoTB
z<UPifk8W;;JG}Zj8ZoaM5jxQe915d~pQI%s1o>FAzG6HC&IGM__{@s6ZPzWtM!PpY
zLeKf^>}J8f30yTIzn4aY3tqTWXuF9a7KYc*J2p^5!5~VcCAoET)knh7g(4p*mKVJ>
z(O@|Wef43}4VI8sHvKjMFi`NmrGh6KY9Xdu_`Z~GX)KVuEu*Ky_`&nfC%#N90g<Pg
za|Tq6QXF%Ia^FEJ>Dsma$sI8SVB}a&s__cT-m4VzErg!gnOfA*r1^B3jX+|c3QvJh
zqX<<+4L(gHj$I0zRC1;|@A~0pAX|~gjcJ)opY<kQNjY;h3pbmO37B{`DHqi<Y$%e|
zsM34$X;#)!ZK(>Yv_%#*8sbhEVlYZ8MvQv&_uv)bp=~Nhu`jsR2%xExUOar!9F|?n
z9eUsgqn^kwI(M|3#us_8i@T$ZZy<HlG41_y6$(baV8?NWsToeqikf;v>ma5Mo2J^8
zu%Z1S%0Edg-h-B}-SZ3MHasVk6}U^30k;w*t7|aJprq?Qu8v|t(b*i-_wx>GnK&<Q
z0Oq1#qv`u$0iE`T3lEdp7j@i}P>QNbeT_Q4zCtxpcb9Cq%>R51EpxpDnW-{C0g6Pb
zVe?mNy^j~(8cgdTP61RtNWnbFJy4)Qbq6J6;8DFRwF)qVwW=y))3homXSFE}Uer8c
z$(!5jp<0}V6oU>y5$$ETQ^3>v^SI+2<!it>P&b5rcQ6Q0=l#`t)v`FEKd2*<d$Z_B
zg@W!<i*oA=hSsg{(Tr6bS331Yl@n1~kp*2=&m>9gLl27(ieWSkcrz1}y355F8_9Tj
z7(&SEYO5AuZ$)RKSJ2b|5-pL-tFw#VN-3Fq+ij#<%5F@os2Gup8}S_L+c>BD=~@5q
z?f&tp;&0YS#bA!zX4%Z6D?;`<iv31Q%2L{rr<Z~A+89K0#~YC{o~fnaM&f?0@~;n6
zdvaGHhAK*XRD*@<BYI`*-FPgFs=%Ceo6U8|0xY4qPsrPc>IoEPhiL$0MWtrV3*9C3
zRS*5~x;LIz9?PuIJRL}ha!KD^w<9ye5D^cr>n3mAj`3+F!LOZ_Q#bH_>Q*4&L_H?z
zW3fv(jipvfrR(v98^9G5CcC|E(hC!_M@=-ixn>QE(;e>D>n6lpsZaAL1Gw^s)ij{3
z7ObB-lYkIg>x4quE;ZCarZP$HAu6S>*D=<&R9j?-S59aIYyBb9*J4_c1zf`ym+w6%
zE^DW7zCDy~7vfbeWu4iQ1*$)fL|~b9ruKkTee;9D1kb`8(5R_)9-k`)FqqMwAhwB*
zQommAO4=1GwC*-f#SGm|I(~nXgGm6u3m-EGf38h}+A)<2G`(Y^p>HdbX>PW$LUZg(
z<pZDxM<R`vkRKA?3<)|`H||)+UBD)>Irji1_Eh41p+y6wsM<&BKX6Q)x#nB{0t*T-
zSY<>dtbytEIQ6+egwCC(aY0!K3_L(PD9{0}!87MgAAs8T*=ig*Zben<NZcz34QX$+
zAoGDx%H@*&;5n~<m)##jz9z1R`+$*IEDN#l6=OhmLUNC*?!Cr`T(_-B*K@DCIr1d+
z<!EHo^v*`{K_3MI)R?+f;6^vmHi-fE@v=J~0u~RC1EC|MHQzq^5GYwjnJ`ToSUDM0
z>9$*9x-tyw5k(;_Wntnw@IG*&={+i*haR~h9gx=eek$^ygl+EZT?|Ddskb{#r{w}u
zp~gw0TbHErSx+C(W#c?`R;`Vrd-bF8x~k2mU445P-wIu1x+$6=4}i?!{RoMPyvB4M
zW%5$f__mYYpBO$8rATA{=AD%Q!Zn`lR*{96F3#p?o%qtP&=RF2xK+SB)F6=85F@Zi
zyWCCQ<oe|xNFwMFwSX6%tyfoI<R2`jEYKeqHkIGC!KeZE-8gvGVUitz8a$q^wM2Qm
zN-Zoh$ck*7^GtQU8&yOG<LLH7tV`J^cDamVl{Y@T!PeR_CO<4>y!;Sfhtc5X>U?4~
z{#6b112NbbD8!Hy%To~RMpuEbx8t8D|2n$+hprLL4x=H-qVX^mY=I1l7Q#*DABs75
zB}ww1&GkdMG^T-wFMGl3^cC48t@A)wX`!ZLeEXH&G;D5bZ&K+^wrY#-0c_QO-yNsU
zXJg9>5#f%soP`5$g)+j9Q8BU@*pHx3jp~kzs1dFwlUy#}-53Gz)LK!DZF_J}Zqx2i
z{nAn9XF^@@EQ;43Uc5K!l74<}@!U{4E(`#*%Spq?Yt<=9buz{E(ece0#nyUKVv30_
z<?4&5#qe#7A4STVh%c6foiFLgdpv^xd1KH^T~oK4#7q#YfK}WdJjrvB7?Wq$<OYVo
z0(0KG5}Bl!4R`8X+tuNekp$<u-_6uI_A-ejLCTa2oJSj!+8f~@6T*M3?ngIujN^Om
zdOuJ$BNVuazcDJ;1^t7BV@?)<YFkV+OqNoL9^7#VJGC6gJfoFhrfV=Q?al&h0}@$!
zWR}qxVIo(RGF5XNCD4JWp}3cKScPX2jjOam$<@uhe}${>uFA5hx&GjscDpKrICjK{
zxfwrAC|mPNuMZ^X)ci9H@-)3CF0Zye>Th2-wY@mm##(7zl?G<y6d<98v7Z#l8&+RV
z@ag6~fP8)eVnrQJEm#uRTJ-Z;id8ZpcPUPg+|<?7VMt>@cWusj>tcOerNFG8gn&g?
z+()^;W%snEDNN4NuV;jcwX?N8JaBW-<!8=CM(*fY*syD>oG7&bf)_N9^BvdB=M}DN
zaTV2$MBtmeGiyiWfei4jkJCYO(|fd4cV-A?JftA2QjR|jrGXHoKXR9V`&((ZbGR?8
zIBdUm8`mq?ryFJuFqz`0wq<0r)qW_gdYtH6&u**j&s88<>yNC|X`X2Xw19nlsgjCI
zN~xe=m?WGMKQw#e6U<nArtHG(^CMyf@l^rU--54dRI^t0Me<a4L!F>rAb89B+RSu%
z8d`ZMziA;i*P?nOv`XFk#2MV@NcM+|&z&E{Ec?UvvI>6epS=s+H|y=i)^3DW(_tgG
zm4MQsidG+-bQ7TSL;YQ;(H2uv%iYZgpwnUTwJ6%Ymc*;=<<?gO(Q6c|u>?VlDi=0D
zgc{k6V#3@uM&binUP_=?xZuyMoj4XGVo+q(1;KBu&cM(v3*~s0fQ$<-jWafml5+1M
zB3Ecr?b*-E&Y^n;*9rccyqc9m{I*vh|5r}Ci@P7(3YoybN2>Y>Fpd;WAje^E1$G}0
zQlD0k)ksJdL(nG%(pTy{s|AML{afR;mt)6$ANHQ6X1bxGO?Ru#Wn{)HXNK<!<-}pa
zuSr~du`C1U@^Fd-RdO~OQD&1^xkast!C&AHXL?tf$&63WZt^h`vl}t(d#|Wq1%|+P
z`LpB3LjlvdX`ytZK6$%P_m)9aAgA-~2|6?-`gmalp{*^8LV9u%{}<Kc1{X2YN<J9!
zzz+y2#(qDQ9Ux4?H(5CzyO~hVXIb*<8o%vj%kFTeTV#tL;>CvZm#k9$C==c*ulZUA
zfU0K`iXF9x$&Ewz{_O1Chw~8cJwAPX=68-bTD78??Cc4`d_oNFw@AN!CDobVd<Djl
z<l=D06IFy7pj}^_6UMgb#<l6W>7KYDy;Yv=fq!c>QijVoc&KYN!rSWxLs?jzkZ$p`
z3C#y6b%Bg1&I_EMH{~61#jq}A=Yl$to)sapjF+Xzv;`s+iu{}{tD8Q0(`t}`3mFn2
zE^2I{ztPN6KBL)WS$UZv0Ztex9P^M$0!_O8SvK!TiLsA;3~xQ&c~;Kk)>}%TL97Wa
zBmbQ_dDkfICtvk8hHyEFh+m?>=BPzC_w$MNTXl`$Gt|Nc2Jnc6-bURL{<3)yM5s^F
zfkwg;it~8?7GLjB?vHWsqU6>hHU5A05e@<9nVhr6tz^3m$vFeoNt|+&k9>5h8&#7%
zSyUHA{Ua%lddxDg<2?{ww!K^tiV)Zc6{fXxbW4=!L_kKqD@~kT8WGorBL57qzIbrn
zJ&H;R{iFGDQNBp==Egk#QCS$1f^ML<Kn<cb;F)W52+Y9Mr`XusYfUhBoFQM{#tzgl
zr5lLVhKv>F=5l5eY;otjT(u-I*^JN(Lxq|fVak*G9BH|pUD+txAi0N6HS$B-^uBcW
z6#KaNR8Fk^Lev12RkU|;)!+Z{(@LGUaPWQjX(g=hOoYP!Eu7+1sCT1-B3H7$+E;98
zBaq;%D5jOgv9CoRWXsW0P1G)74h#Ch!XAX|Rv|RN%I;7x(O5eMjc#&aVAOT!CQP6-
z2Y&S0z1at0+nRX0B_no&O<42Wg&^UR324WuB!sgxk>DBAVApC`)B`0nma5Q%^{+K(
z0YdyCb$_oKA^yI2nECETwe3C|&hf+!IF*b}M0lXkmNkBIl#DZ<D1<ix%|!Yz3WBj=
zqIr<{+_w)D#D1#A!wdaW4US=~$)R+A^J+%?VLF&7x?d=|S^#@+=OTqga@0F?yVq+j
zSE286Uww9Pc@#5YnE&D>cNuh3hHudVW0ADC#i4*CG!5=a)CBbbfT2m?`b<$bq5oXy
z4()8UOg0W}FvL0ZZle$jL@=|12{g?Gz^l&;qLxnt3@X2I6e$oL`M-R<h5$_YaXnKv
z*ssN+LLR}rBR}dV>HIc1EI)gqTb#%&H2iG-nnAf3cgqS*S&-%mb9Gs`eeA}0il1q(
znOSb6iYH)rvZS~!EO(L+q=Y>Yju82=5fBE;oG5HBLKcx<(XtEu68V->Sc_&R3Vj3v
zDEevZYr08WaYlmYjHMhU;BH<9V~`4B^TKB6m(CC!1qs9ZBe$*sWgXGZT2^RXrAmBl
zc+&c?C}0SHZ^;;@)w<EsyZPPOV%0hjzASt7%kCR5zWFv#`x(QCkHw()Cy1tb!c_O&
zp`4HYfxX=DL%xN$zT4+yRKY8yo4!KL>ZOvcal8eIIM>PK*G>?k`qm8(+)Pfb-#~7#
zlB3t8VinV@2;sBfqoiS;ny33Gy;|lSWGl$Tg~X&1t-1-gyK*6Mv>?g9?+@<#i_eQz
zF>NP}!_!7PIXO@W`~Kyj`-~6K5N%2P|MRWyEEc5<z8JO|BN$Vx=141_lJQN0Dof0_
z$;8X{sfQ7h>I&c{9l5Q^eTY0TCY0;&mpuya7Cp;{tJmKm-Z+2cK`a*Bf)o((rd#VD
zgWdosUcKPurm*{}&P<fpv@L+SD-KSa!45aF0K)7(6mprS7BLN{dbyt{IDQOHppq`G
z@lrtrcanm3-D$fq71k@57g4>8iqooOC0!H=c&SY(4IP}EUkXJw&O(gvr7>oc7*I(!
z%JJe3OT)4wzDoazR+4-0fGw2F2=m!g!h&rSQH`vcO(O)d&`_UqPE04)vn-6d3S62&
zS)-R%kDxm&#!_BStq5mbJ*ncRsZmHFY)?m&5$z7;dS@OuGeu``C)szq%-m~esCI(5
z(3SE7x?A6RP<BUdz>Bo}*+{z*CG#>g5}rqSg&7JG;vQ+nIZ~#ul>d{|mzAn(-&vvR
z1XwFm-cTkmySS7(R?UNiG>B-9KQ6lI4oB^qY~+&^<%4>akgDqL8}-d^?$(CpwauEJ
zlt#g1d)^97sRWi+p55<|(gzJCN^t$j!Y;TV%w)R%*xMDbl$%a9GQx-QJeWy-mD4Je
zmrfxQ(W#X$e$dTf_3sqGA?0d~llX>MFrQdLguspGu01pMkF*{AHmXvhwUf?uRuCYd
zSRJaIkt!N{VwE&I=z)12TP6#@|CuOZyY`tRcjC{uxwK;RxlL$c2qf3O@SVs&ZjZ80
z+e>-$wi@_DcRCR9Q(CE>{M}p_8y_!~jG@Mp*{&!O=-L6<_3)LWx1Kh%`YyaAvtm=F
z)XQ{+xjA8pb+B~m+oIqko5W9*^B$H3qa5znd6jN?AR>KI0n++dd)VVqg934LJ_yR(
z0-a?2Jtz-|_p8^W$;UL^^Fq5|oHde#w`rReBaaXo+>6ho0+V(yr+(A7K0Lv0NMRnT
zyAT!9=4JsVz2x~f&qWr)OIWbb<2!S^aX9=U#A@#Q;t9Byk3={T$R*jfH_OVfqaK^Y
zuu_C2rVg(~MPpsCC>|ZedK1$a&_BS?aHk4$f>8k|%!YG!zx%a`3)Tcq2YM9Y6bCFx
zIGbj<mSQrtnp-?gJ&DW1<Ks5sWKsj|ejt?B*(hIWc4kKUU{%A|vg5Oc0x_1ds5DV|
zqxOZ09ef8XRPI$s%GV5};Z0duJ!r#u75Oxs2n&^&Gpg8RxG-$#fg2tU{4$sF&?gLJ
zKYD-yeo7~C@r=O&m7xF=x+-3DZ@h-9#R~c78aULHFi-keE@M=>5*Lv(J1B>e))0Gg
zJ+so>HPU34(Kg|`#Ko;zv5Su+s-dTGEj@9bot|AiLzh_zXvJ<T+GxVGGP!SjN#Qp}
z;(-ocp$L>(e5F}ED9&ScH`DmavJ#mC;ODhri=X(oT|@_H`z|>F>*SJ$`;qpB*DVl-
zFSugTz>mF)pOfBC=RHUUpI+_14;s5`f==8#R^v?4P#kRP#x(|MfS^+v!96q&q+p3_
zaKkGa8DI66gpb6XTanCG<(XPn>tR#3xXK~&<rc9D;u4SF3;T+e?EM%1Z698|Z(sC&
zJbTwW`fsKPM>~0pKa3eOweZ%TaBU-bl>~$@T&)w!>vv!Y4BeIv|Bj;=hl~xipraOK
zPFBh%WwytDiH~$$NBSB}>ueeZa>_4@th1aY;|vEh*51qKov)t%`=cSMvJfKhi{r~f
zec#IRQi)GsR{QWP{C}Sra?UqnAm2pd7QZ1)^hEh^w>^=$!npcUMv;mDZ7r3;6Kr}W
z|FfuAp(_<am1o=;gpCZM#cWsdOPXC`iqZM0K}k?cb9kb)OkU((!;Y#m)P13+##87|
z4vF#_s;S^}9!QjH)W#~n;uWA+yy(=GNA?UtC1w|6J)=ibY{{#M{IJKoURHE(7dPE1
z`yqY-I`SPA_ol_HR%y3BV`2P-qD2l+RC-0vWJIxqe3&mF$Z>3uXqM*4-z^C34)H98
zP{<u0#>P!=Hwy)Dft58<nKn2q60FinLmy(6O`kj)fUXV|ID;@F{W%JwkZZq6L)yz!
zydq(s2z6aYbIf)A3eTg4_EvysxJk$L0|8P%#jG!!tpWfK*s*BS4x0#!_NWKz2tY-(
zZu7KtEeEL2j|4Gk=9vM)IWQiySROzu102~bD$UrlOxNh4qln8uxm{|d>kw}lAwVTc
z$9?zRzPP!9QeTu46Vnpls$e3CQe5|J;H;WapoM@SH}+-n4m|(U^fpgkRrp{J_3Ygu
zTh7ZOFT1mca1KRJk?$V{qKbg-Dngj#K@n#e&N`Fnj7Vfl&D?rwN)=ACqE9h*C4yw*
zMRQ1N=anN+hj;8Rr?bSZZnc9_Q8b|dl>wuk9;N+xktO>@1+)28>VDZn<;U=T;MP=@
zJsh00%D(x^&PF#>U4hJ{_Lo5}4qc>*#O$|c)&UUAY-gE7Rnj|q?SqXNGIxjxBu95n
z4=bm=WJxje&}8X-^^H0JU`~*|MA2q$n1hNsQ={yvM%s?gDxr5&WW=160{S$jUw~e#
ztXTw)TFgagUSB!Yxpib<ro(IHvwP&lz1)c$?LsFzzpc6+bm()fIGJFUX<?rZ7dxjq
zyvc1LD3@GpTjCPb+K2|)le!p-nx<4ra&FYi(xP%8N@;{BG~N>+8!7_+0BDQ($ydnf
zITRHs!=!sZhc(N9dZ4R7p1Dh^TF2}@lE4X8!6KA&0AWeq(r8AI2!&WGzHeEkUaH+Q
zx$cL#qgnF6yXn83oAmB8Kq8)b?oZ1pAwOrWxEKD(z4G0JLWnlgpI&l#TI?;IA?p4w
z9d_@RN$dENdxX>Mm+NehF5$J>vioqYnFGx_E=147f=rUR?wiPrqV?PtGt#Aw+<_hy
zW1xUND9`z_uLzZ?F*>?Hkhu^Ib!U~|W{VXnp@s7jS{hCQu(&d=A@4qM0{Rdnf*;QE
z-RcUDD|ZJqDNMp?-95F=&;Ft^2`?&=6qd`noYP823+oBM4l4qgcWG|b5(BAZX<KcJ
z9`W<cOGdG+JNnG?`?lw6*6L#|_0TY_Nci&E<6P=uaqsspvM%MrT8d7+0qTV#d|T<J
zahEke`N^-6Wogh5)2+3(s{+?$nK(ClX63{JtJ02pVS|!ohYJiO?N4WzR-q^~UpT+`
zR|ubw6a*&mVqukj&dO73Ri~S>M(%c;k>&Ol(eobJ{HswGiDXA)p=e7Qf<S5F0<<`@
zT4HpA6{B)uh)niRdRK4Hj$(P4AS`HLS2?CZeq4?~aapB(1T;fL2cKv$PQZer_1EwB
z-(2=DkKd3kB9h0|%Ik+LsRn=5VqO~eXbCseihlh1$?Pt#+v?*2B0T6#0QAjSeSNoo
z>-GG^?LzR(Pze_WhCBt*Cui?O;icDB2dgzYp8b!V5u>uNN%yFiTGrZE6kcm3gyZh?
z%mNa-8=o>}hqc6i>^O^&n|n7R6z7bCo#lhj5@<U;KI%_LU-zq<^hJnPvye7KtC>Ee
zSrmyDDiGL*nY@ycb<M}14OjWwM(HV!1PQm!N&yMolf!*bm#n%c!?}+|w`I~rQw?-d
z&TvXulqD8*^`O{J?`2Sa8N@j3@PO;APJ`ekXFjqz%eX&M#U!l+`YK7hAy^iac+4j0
zO5%=44cOG^He7c>PY<jy(muiZ9WKPFw(2A$?!aXcrwYrP^T;JNkL|}Dd{xWZBIOz>
zm+`I!^GKTGMHS%}aOD84lCo1p$LIV#Gh`)(Aa&j%<dZssb_5POmSf<a0!z=$|JK5n
z=a}m!g|PRQ0MKu0c-Q9`^J!dO*U*yP9~!Ee;pgT1tSDgd9;8VBtjivp&$CGmJ&gJN
zI)WU`dirJ(LmB0jJTp>7s_LhyAv?sJv1IzkVyWS)b*@tX*mp24PtW@J3T)G@xI81L
zb<nCwin}{i9t-*5Qfe@zPx`lrwP^@Zm<Va3TRljF$Y^uJ)u>)8%d$-W&!(w+mls05
zRM{Tj&)7&!dSm?3O&TOXB-!Bw1xh$3?mqe4W?)MopiIt!(5etD-qwc9Pd(>ydikQi
zNUwL?S`zo#1YI-};tbzw0jZC&YB<klFd(9|i@Km|oO>`{&VXrV3>zRvi<JXzXG(@&
zTGmoAVS~`E9drEM`FKNSiPA+9B77!}DQz>;W1eyvY(Cm3Tos!-f%LN2)qNw&;S!1!
z1A}cW(QsA2v{$tAvR}<V&AY=bpG)ORkQQP&##(INF85crlgHHMy3e;w3$`vU_mr}i
zy%P)ZuL~Mop1<2atn_G+c*1H5H45m=q=tHKN!1!)$qS%WCi54Uqf1+-y{pT^{qtVm
z-S@c9T!YNakal2?l$RI{Snr$F>^2=X>xqiCuUL&{hCWo+?Qu#J2Q;lR5{t|k-m)}v
z0$zbBV8iYVJ5MKR^2)ibcjaWf=Qh8k^X`zeEz)kj_<>28%s}Q*HQL5F{qcG4<mkmW
z&skY*dl3YG3&}KF0N&EjESYqJ+a!G;)_ikgw0+-~Dnu}#DC<yVo)5qsAJ_raGpl)0
zwQ{s4M(*LDNgI!kT##=MX0%$#oz-+4Ys>`clqw$s=^Eiu|LS2{#**hga}9_dwJLrE
zAIu7|>YS|BOvf2BtJiuXXSG*S*YE|#o#bMC^hu_(2fJu_ghwe3Qx8xN-BxBAfZ0|K
z_yPIihS^91LGJg)Pws!+M(jUn^!Y{i?8Ens4@E9wPss~qsNGrle5YZz4wME0Wg@G6
zVkCpQ;K@iBX4=Lv;na*R(wLN!^U;&X#^2KSW`X$Np9kqF)<ghI7}1{^E+k;hfAzCJ
zmNJfeFCjjiZ`@O~;MUjGOYu@jWT91G5{^y<i7|r=2@DC5geNig&INZ9j|eY`LOV}_
zMIl1JqWQS&(`<W?my(a$4KyKhD_&qYfRSS524L<vg4kdIGtR)UD}6Xo^fs_{4PXXz
z@gc<)rT7Se7>QL2{*w$ibka!GFJV}q_>~(<8}(@LX<i8sKWPqJFK?R?PeDL&u>$&z
zyDHHGNzvJ>o8j$;%C-V8XC7S2FV?U+daLmRx05iw>WS<_Xd%v^n^!RwKH7O2a%SFJ
zJ9-<ALnE-Tpn$mcUe7#MaJtJV8KbxkFc-Ra*Zj3foppnWCO`e9`_+!S#czJl=y4v9
z_FJ$+Ln$60=yeK2)`~V*sEIT7j-$wsCvG+R#e0~IndnkCaM!%@0XUfu^;{$pe?-Z`
zjhyIN8G7aaOtiY1=k<iT!P2JbFXg=E{wFa#yVq%nvTb;}i5t@iaax~e`s~7bqR567
z0E12n4`cW;1cRU@cvvVDLyO~(nrP#{3_iJ+a?-yzIy-&;vjyPOxl((&@7TSQhKJKN
zb~QWDTtpFAn)t?>wS>$!zQsJW1ciJlgC@gKwdY>U1*o#EtTv56dvH|H8^B=*=*`A%
zkaG!~8e%9lLXz-oks~1^9)&|!7}n&tLj=u?0{l6}!qE02s`99KGPV0ed1VRy;kG_g
zClmyv8Me-Gh$NQFDK7C`H&R*;B$)^r5R1Dq+KoItfDg&K&Yrc3|FyFvY~%EOO%f%h
zqjfVtHv@Co@ao;C)CF>{D##?Tzg6umL|qT&?1OPy$3~>(MlsVO-hyvhV+&zUZko&o
z%j<Fec^AAG&KCmwMm;L=o)m+-5_uFHhZukcT@nbib9r1dmskDEi~iyJ)2sg5-uw4w
z{eyNwvJX!UEa-widx8d=bng03JDrH0ujb2Xl<?C_Y*x;z`t%~?E0_|{&;a>h82rb1
zs`B&Ykg%<h#tAeR7_+_2BdX<fUfGon{-683)5HGZ+38i!J)!Wu`Z<8*VQRuYM^-Gf
zW<=*O0-&s*?gvtepm1g}FOv)MRIiAj+$iN1fIvEGlE@fjQL~c&Tt9dIO!5}=N1V5q
zq+n6w$&gj#z8J`*QrR*p*leUvoM`xCCgk0c)3A>5RPb~5#ZHW&TI8c#*z|=wZYgPp
z8tr#2%=C1L3ZP!UP$yyL4pD|gl&nc|ggG~W*;2Zxz$M{n_hcKZ+#a&&*|3v-vchak
zvTB&lFli({N~+!(2*9WHUhe$XLw~K!?d@vw_tSYOWcO}PELHYXR?N%E<Pqci*lOTw
zk%b5~^T65{Af48&@(kGYU~tgJk>$NU3CbdNEdX^(X~Hed*2&?;``1ZpCA2a{de8zn
z)uTG~hgw8F$QE}nYe9ebQg(R!_?5fl`CpQKXSToi%U}KiVFP;~WFmu&;Y_P*XU}z0
z*|>~I5f<1opQw}JzBJFq9_y95XTIzvJ$LU(HN0^xdAlJf2>;_Bf6T{jdW;b)eSO}C
za@2P6M-0Qb*_1HiDpgn%MVRNmq{)7<D2x0TcS;VES8i+K@Ao@<gZz42mSo?lp+Pzf
zJ&!E0&~Z28FRf59rSf4&ZCx)t*?)7GHoaNNoWd6d25Gyxb=^ODYdS`Ll~;m^@;3Ok
z#ANlo$B;JtQ|nh!W&r*;T6+E(jfqw)jj;Mnk2+Y>m}fh}ULYlpTUG$^S}TA%NTJSH
zYSFi-R6lA$6e46YhDY=;0~%K2wDK8P=c}x1rd2l%!e2B;L`!3qe4p$*`!)Gf@?uNs
zJ?MJT$%jmyyT`9os;KasI5?M!xG-RymDhUl&2v7Zvy#gKrM6aT@3kpx7;Gbmzqj?B
z*JX+H(D)(>wy()3+t7~Q_SD{@OA7eB5IDKD#Mr1Zsexz=bZnDt_x~aw1L3Y?CWbs|
zHxt|7oSQF9vNbBKsuPr%Y-9yau{Qs7cHX}{K7I4P=iXTV!)4FPCrxnEn)r>EOI;Ag
zx<1>2LZ%tZA>6?Chg8zFGv#J_WG)uu2$pOSg+Yy7?+=^e#XOf{5*W<zossJ$JF_|1
z>>b0-ZM0om&UY#$nxr%s`dkg<Q;cania$k1K4Vb9mQbi+Z1Q6-w*Z+tLh~7m-@kZw
zf$Wky?{`ow>#S|8|8d_fX}3(;&S>o;I=0oeG8Lvye2h{`NmO-^ITVJ8EMsykE<r<E
zX~e1^fxBJL+(k|K(-*|L4RkJ0a}XY>lW}%@)Q(f0H<WFpq`S>SreYb|d%_9LA|NAk
za?Tsw_1Fgr;-JL5i<F?%)G21R?~KB}Th-<&(8Hoza$PRGWj}VC;IHk`boRpi=hqkQ
z{MYG>TMRdY%I6!ZP)ZSI_n@$w@Mw`XwMIXa5`C~gM<Ib)b-j7CF+X>FZ|VRI0^~=r
zG!k+WMn)N#03pwPyd;DH>|AnAw|dW-0au4KJcYiDgL`k?KN#tFWNULGfJ(-;&%}=v
zQk+k}@z_edJm0@K6dsR_DTbMIM@^ltKO96H!|+KWHuQThwh>%XS=;W5uvU=eS!u0>
zq+Rli3lM(>3xWJJzr&2Q9num%{9o7o@2Lyh2{*N85Glq>w1%wAw^lpqA(iI%FDUM6
ztdz#IOb@Pi@;Bme|K9&EI*p7P{I~1TdfjgFl!$`7?jE6VS9<8pC7Vrdk6;NPJS+M$
z0+}=ww%}=a%|uVO=`$<#Mvu~|+ZK}()&M83MpOQ<mru&;d`ODLbos+~&YLRkJ#UiR
zSRZWk?tiu2Gd?HP@08bym)f^MH`C~_#uFsUWBZku;)kn}^$951qPk8qCUuK24h&^A
zgI|N=Ka+a0w#J3;JjTazyRo2&t!TF+%j!|72M@|nu?W*UsOy3+;u^cv)j?r!2^q9N
z@dQkRNH5UJBHl!1*^SjF-hePScu7U{c&T`u6BP4?X=3p_d+pK;=ZqvF6mG6kV9w%F
z+t%x#T`%2<<Q_jG=AtT993u57U<1vN*EtGcbdJv7?_a$>yEys2@qab`t!2M${a=kn
z{Os06Ll||A4hgCI-YpclM~l4VA<F@D5R)>fnHXz<{ovmIJk<AyT)SYwy;C7jUTnZd
zRHR@;6-$N1TWZNTDA%I0CtcU3455t?&=b4y-e(R^XplQ8C$_b{T$CL%*0mU0`wy4T
zd8y;>P0~^h)adErhYu+NFK5tziQb^w2pr=;7^SzTw=bq+1S|0627j|JJ?htzqT%@b
zGC4jz-ah^@;(c;Q&vKFps@pHgu#>Dk8%}Ui9`!Cm&8TSTRl5THiRd_mkBy8FbBU9B
zX?S8=-4+Z=8qWbBcm3e};gkR0|Fep2s8&>I7!(94*{O5ak;x5@)jHk3JlTrFDOR`1
zuo$L|gakyskc<ArU6Qn>lPzDmASptYCLv+WNX81MawzMBl+`@vjy5q_I`E|j6z17G
z1r`a6KWym>39cNnb``0N<I~Hl{rB&?A7Ae9X`iCsfUh1|^7NFdm;K?SSRi@0Z@@M8
zpZh5S<ZdT_2|o(K(4xrdkXA{j0N7vh_0rC|r3S6pjwEHVq8ACuxNo)1R3636>i$`8
z&Vs~zf0RXI5K6M;RiFj%g&`YecI}LUg%xy;$umd{LMY3!GC6)LtUG~~L?Kwuw;mzD
zYBSWxo7eT}M@8a9w1fnA2ryoc7EX&@O)0%_6CkY?kz`F{;@mhxem9J~oG*9wb$>XY
zEq1y}ZL{ME=$D1^#K9^;HbZD$27QRNi1>iEF5la>3%seNY`<=Lg?s9AzZ9LX>bC#t
z>gV&`5B&=3(KUJ0do3HE?t`p{CuszqS|~@KPLPc<2v!qy=Y2|sfxk{Z?W_Rq{43v$
zl12bn{E_=LcBq37Z~D0W>mPT#*#z>~bb^4Wv*5HP62(;U<}@b=U*b#ifD*uFws3!)
zZ;UHrZE$aL7HOq*rd}R-6l;xMlx`PFdd}TSKTXO{$t&lY>`lw=w7Tuimp{Zw1eR{s
zarTvEKuy}x;<Og9!e>VjT(Jtt6uZPUC3#*RsXCXKnLZ$)6iDub9D0dGt$gK{to3>&
zkh&|E+Wqe3YJ+=+o9~8QFf2gNoFsID43mWW)G4>jcRt*2uIhePiki4r9j*brzKC&^
zY;?8Axjo*Qdlouuabr~kdX6|=l|7P*AUcxap(GiD=oTS#e+c<dm>uLG(!w>PW(zg3
zmL>x<V>q2faX_CX^tAQ{5Q+LL?<<MUD+6Doi`qNF;Naz%>a&d5GkNXLq@A!hxI0G4
z0aYXggxhUGaSf?%MBM%n5Vnbg(>5|WQDC@cIo0c_j+{4?^yazq%iP?5g<re&>)v@f
zUvy7<SAM~qL{Tkn^LUjlXO2oz|Abq^7U3&25Y3*97%c-%H?LxeU-`!Vsv}v8C+cmG
z(j6}5la}4qc?O4Xdx!7(XQ$4{xJ}Vd9{PR8*;`xf-_pkG*AE&g-QJ=uZ=)PLyHLq*
zA_PbDh-SVSic?lo^&9$dbbJZ5_mzIQJO8#v>7A}?rLY1N5cw&-Ta28Jf2U?u<Uzyx
z5-$`13NKsAH1k8QC<#TG4hf|-f-s&bsM)Y>dCQ-tCoE+7;>x7zUx5rH7ZGbsd8y|=
z5de$U%6s~<eCi84+&W<$ftqr|n`LopZ06bMJD*T3ht5W_HW_QZ$tE*jM#R9Y1`|H1
z<grkpJ=*EF7rp%>&UC7DhrU;8X*2kGeDqiY&RA8FI;l`K9j<}%2HHZN4s(0F3`!Cq
zQ@EK|X(99w&ebVLStC^agkqDHluFBsvMd1t6*dWFuQXIWwmx@@N#)jvMC%(WETH)_
z7*ZHEWZ3*}?3<FxZhxuhLbJBt@{5rmj~<qquC+&?UEr?U4PvVOle43qE`<L1{>9bt
z{`>yNi{q;vb{j_9@hwHGl!nEtmclF-ETE_Umm2K|PO$kX5a%j%sJqgo{lmlF`IY<m
zM_4cHQUBn>>({-D#BItd!<1KgtoS~DS!aN^0G!5?!Xo~!fF)zA>V8>Mtpg>nF$FTg
zP*hfo_GPUI*zgaV3N8%&vXb$sk;nPdwJp(!H3=r2PR;?)y+qwOAKFmr;?B)99VXdg
zxW+kduj<7dK;Sd^n6Zp)frD~zC%^11@@nENpjwKzUXgLZ)Mbe5Nr)e+8?5!q!Y9EP
zuxsouH6D$sM*S>al)?@x?`Fyt<u`hye2jkC$K8CHfqI0saQtuei<x~bS-Z$h4!`FW
zDieJ6MAa3!y~?gu%af_zHrT9;D^n?sX-(*}P#9iAi`K_OSR9Al<Yehy%5_?-_Z@2j
zKb`^N`1Gpxrgx#`GDy^|eC)Fl97MUJ*6=A$uN%E0yG}{pOYvrB{wY`m+W<~CZUxH1
zt2q2$0$=*Vs8_W?W2z&eG0<6_cUkZrT4zbVinfxgMrTyOQ;7ik9MMn8r{ZX4z|`pC
zv_1Hd3WWDnA*Fh{YSTY$OCEq{43)pYo9e#c7K;472d!h|t%qsHl$&acCW3NW%s~-S
zR%`jA))rr_WH%pH17SKFHZPQF4q`02`ARiHA<vQG(XGBOZu`k5V`EKlo8X*51-7?J
z1Y<h2!ucGb<zwZy%IC{88D{+rHP}(jyJoKzvE0<|LluBQ@HiC2x!Nk<w{6?b{8L>W
zzQ6`a0YKnUj2g;O(K4#Gx^4m<7SQL7Rl0{(YQK<NPyd-Ea#Sw&@csUUJC=JVLFiJ>
zU_r7ycnP!wlu@uiwxD~{R{9E!(nuuNZMBHxsz}Zv$a-5PsBaOu-O8M~wGZLr!Y$)W
zvFdyc4*Qs!$7C9cQ75AwWFp<>1_dP(S~^T4u$(Da+5*>-l<;5FBQ2G%JS}J=;ugCl
zh6Q-}5MN(l#p_^3Z*wzhxZ{r{NbcYH@at8pv%zCgwSCjdi>iNVtguQB&rV+p?d2dZ
zb!QEqjb{ROG+i$#BGFgvIkOUcH;ci@NXWlFe%~|VF9{If50;h+`0KbRK<*QPaJ7Jw
z*dwiAc`6cIi-k6HxQgYpPr`|YSZNkD&_ADkIO)GXJA8Mk4S&3m)DRfKB^)`t$#E;;
zYwY;2e=Whs1ylJ2B2Cfw66-Fn+QN$|Xi3CBJ1m&yQnUO}?{hXE0t-OA9klv1If~0j
zy}6t|$nr%<KRu|h7uezZA8O5=N(PerIk|FHWJ+NK%Og@d%0~X`w%`*gp=q`C$=U%o
zpidQKDmqT(1<DYVSM2i?L+jQ;rxVwW<8XnG!@Pi<my!=oea$eaX|AtP+*~Wrz?}p+
z?G5>CK5uoq-8QVyi~fhxcc*6`Py3fw`&Ye<86(W4hTX0~&TS+CT9(|(-Tzk=mJafB
z>vHUN1{B`HkBJxz(^5o_?p4t_{|z1&=`3#QaLsTcl<9K+oIDQivU_hKNfa!%Wst?P
z-K@n4D^pQRq=!<)2)+GZGdJ(v-8(z=`fZuKy1n_ueXv)Js;={4D)*_g8M?Rgn$?i2
z8)y=1Ufck;5q`_xT1~=<P*YQ2`k5reI8nbn7tDw}f2dyx-$ISq!*9x)6j=wQ8}SBL
zbcfZ(SDKCg45P*-0nPzksIagyQ<jebE-L1(WI#8$oBJyP`=<<lvqk+dpSwd(d<kdK
zxc|D%00a{g?AQ4BYiY1A;B2=E_c4$D?R@|0ZHSSJMk#e<f^Q=2eF2_V`ZX=9ZP<1E
z4-#~gJ6_ZT9aZK`Suqehnu&Inp0W~G#^|6ZRML&;BvNT)fl~2;8n{~tPQrVn3!$}#
zo<~eA_fc|k^tE3G6ocgc4JWM-RV(l9Snyij+Tsauh-eg?t!jfH%wxdgSEVM0O(8DA
zo3{;b<Xy&CPNL4dx)DO}tL)6^!!T_785}LC09SC99R44|e3p6RD=>oO828V_7XY(q
zrJ^)J1~MmxecBG%h`P^t3^gsA*Iwxjre|bS8WD#Nrz=jD_OEWbs%!YvJ|ZRt4LGft
zqs=DU3)MvuPp&MR^F2$BCUnUIeFW=@iQp)lu|5LgfsCp1taE;LdHj<R-EVy-VhdWc
z!AnlFpRU{=XO=%6A~L0(p@=BW^J?Z^!>f~v!@YChBf5uYCqF!L7W~njDbM8zfl@d;
zIP|9P(hKV)$3H>|HJ=A_(Va%`Q|ItyfB*d--NH5BBdhwu!O*I1M6~fiTM|LUcZ=08
zYx{>5R%B70Px9#YkLdt72C;}Nm<<|g9-!3eL_tV*)5sq-b?5fOKB&J%+Ns}5y@0-d
zl3xu-GC~B%QpqqHo`;}8#=tp6u?9n##2G7!{n<VlE`=_pY8wxq8RME%2+{hRY)YUk
zOW=)5JW9h;bJ|Gi#QY@yT5b((E*2RU9o8VL7Bh-It-tR3b3_!?qbYot$-S`L6Yk<Z
zbX@6ctb6}q_N-!Degj6uXRf=?lk<aKB(rK|kpNpM#gQI?5e;w90wcGbEO3=qu%=&h
zzmDQQZkdwnS(!dW=~dqVYCx60li=vP$?4fuZx_q=##1t`=p}pi!H0$=aN!H0Q9BKu
zUuMo=UR6x&V)#Gt;H(U$>=oW(3Ju}3k+$x$g;9s3N$1l}(vXfeA^-rY)4r{xzH4fo
z%Lpxkq263K<*OAM&ii)TaA($t5ST=yKm#dZt-!!k9DLa(O$e<LYnT(C&pR{ccsDkg
zrWaW#G(|Spqd285I}$!^xv4@8WX<lA5KCn=^aThfA-Cm)F>9?8LJJ6VnlG4y=k}3B
z^y)zzCfw)C%pd#lM5BeLMS1o4ERAsoRCZCkuKOB%!z}{Yw*s;XGf1o)Y`5g{GjAtL
zn!fi<Wya90a@~`9-G*9FjPS3?z2O|zU`Mpnk8bLyWbD4YQ>r8-fQkWMH)aJI<{AB=
zF55v**%MSvJ=AuJeyy9VH{o!OpUuwvxRho>Q+Fat;(|u2nZDwuMC>Wt)$Eqmq5b!7
z&MxZR@=IFns!faKa?MtTX%JP~K0b?A=Z2p<->wvB(#vdejW=tH+!?C33M|nmySnk7
zzciB7hS{b78!wY5yb7UGjTzC#`Ni>%&heGD+}9dWNjf5?la#xekC(a*FN;u;V$~j(
zzPwgi(wo_BmZCK2)|@*_uk)d)OA8>a)Gv68+aIUWj4dLV(%D9=QAm%9<QU+OEODYv
zD|TrOuNA64b#UtXegj+W&~9TP6M5UyWlgB$;i1@=pm?BDxhXvS=Bvhv_1JPJ@;r4f
z?0T6O0q5j)JVT?;)BCOh(#z$r>Xx6ukh{G7;qUV0xc!yZLmFic)5vWiuiasT{q5Db
z+`CEd%5Jr|>pBax<JLVUN6{SxerpY(QRY+Oy4dnNpFe;0!A~llS<pt$%*RiBTO!;B
z4i1lw4<kM@#8F!We&&VPaPA#!`6wqCn+C%X0QsB|?kEfr(-B{<l>0cNjgZ=fTNgt&
z1^f$g_OY`7lXvqpg8}(Ue(&n<dnd!2^X_F1Pp9f0g|V=nA6)J{fBt;??D9y=^#7O5
ziVmDrP<Sb-Xy?UKX$eHM;YnS`<CBi<s?tiuXldm^lr0-QCChufmHkkKK|d-TE9Aa<
z{F+nB<;7E+q>u2?8iQ)&X4+)jxgNTy+B&#Aas!!s)&2ZfSnZJtV_#tWGIiJN{KY-)
zy;c}M(TSu{4a={2e@h~NP<eMLI)In$H;@c870E^Jc5G+DwUduv>%JV`lz_Xh3tNJm
zf(YFdg`YW-E~<eMZPnKP$7S-LH%Mz<Kazh<G>+XJZrao20c7$BT$WlQ2JN<>uj|Um
z(bpRfFgGXu_=kiftFR*_{38-}&M@e^2cI!HA%U07q{F;|l%JkUB`l?CD;wNo>s`Lx
z4{n3LZ=$&8`R8xG>P+)l^;Ku+$6zhS{y0du$i+XNT-qM}h(^ex^J`}iCK%?|R}bdb
zL4I9CadkvcDH3&j;T-pG#I&kvZlT*m{}35Q5*ow0mZ(@A#c+A}Rd+|iO2tfZpqGbV
zcavn@5G1b{?%f;TcM&_AVhdhTItj6v>K56JHvW~flSBcxeb!snQgjhJj6`d!`$mfp
zvItgoEB0o6t58;~sA!SSx-=GK&k=osr|bFH#UhCEn{HhUV42fCF_}DP6klHLAHEAl
zlOp)|Y5(kXjSH2TPT@t9)Gny2dl5ahkg4kd&yj++?8nOUf~f>g&@hWx%Q?PG#!HvY
zqEqteC_8MO6jttBMeVe4oMH+m@9G<phV&g(R$}FAOUGFCn*L7JG(rwVyDwL_vaYnp
z&sv|`NxqeQpWIute-Qy4jnhtIYC{ng--mNu1~R@>Lp-4zDxiLOniDCgK|YL;&NkgH
zwgOX}RuOx$nQOOLy;(@4HqIiqP8v}>sIJBND5wQ)zOf8rDq8;BEnSrnZo~yC4X+A~
z*<=wyBX-kxL9lZ5q?KyE$9rNTzm%CBd-hR;O&(VANoYx;X~>=F>kBy<M1G2g7lJ5m
zlFlu}q&Zc!|K|}z)VJ(RixwJW>@0jeojcQ0Hl%OG;K(EbT-9-c5n@A443QKsHGl1%
z)*@QpS=1dtnP>tTp{J<Ww*#VMQVLDq5}FS~ATvCm-dpkrymCls!1u#*ZH_OLb9eIQ
zx@L7Y*u)pE)I~DSxvXd!=<MM$l>_dK(!TB8yP}G5VO93W#kh?2FFvTC`m0ciAA>KV
zO-xC&tB49b0&sdjf+wj{XI?Duja*b2z(phAV2x<};8YT)i8I5OApn^KnvV_U9u}9+
z`k5j%#Z;6F+5@Qg5Q@IKw3;V1PW+@KK``e1!Kuisv#wp?CU{_ykayL<TV>u>hqw2p
zfBxaX`KtYc4{t*7i^YNwlX(qf!?z=;OI4AQ#z;@B(;hp~Lp<1q!L~{EPd#R5nUFC>
zcGzz@$)7f9oVO?+?5X@&*L7g6=9!AXdC9qYjF2CV;>jDrtU-$|_57d$v*sqNB#vuj
z=*WIyQgqsu4_e}c&I_54dIv7Jkc&Gzyy{&g612G7H0t8}M0xWR@u9^;*Y3D1Cm@yw
z9!kXR#E_B6d#^`Vv^g1Y^}i&Q+166M|LzMUArKD;rMFy(i&if%etI6OEo-*h?e@L4
zwSv6Npq8S`S{1%o8q6O~?&Dg(XDE>d;^dhxp-eqDuRwkDxCDNp5R*e;n-4%in`>h!
z?h^^0E5OW+`1S_(ADe|8dirWzN8Qr)v`>UMu;B9_|Hzz|mUL#h+u1v3J4xrGuL13R
ztZveg>wo8?o>!f8PNl<-I3qf4=e%}v{G+;MosbE%>+LV`S?NA5=n<1|dCm{=0<K=O
zDKohD<`697FS<K_GE00z?%GNk;RJd9)83EgA-4BtvwIgRw0K8$48efO4b;@ouV-$<
zoVamU+BiE0g2U<#1jc#xZ!>6HLf`Fn&j9>5ABD7u0L^xwt%EWgR+2YVjQr7aN!jtI
z$n0j79QH1*taboLaB%<3ToM9*eM6N>QDfKbTh2vOaTXmWr#tqN!lHXJf`mx6ByPJ@
z1%${0fb18gt%r-xogWO2jT`CY7neX+DZhk2wzatVE>lTqci3rpX63$tul>y$`+I0D
z>=DXHB&~%!C(~}$P0iifYI5s^9qZ?kZO&x}0SQqR68Sa`GA;(P1}}n0cvAq0G%}XQ
z=ead!GPI>7IutKUC&<#fAFKcHMw^yzyL*{%(h|NA_Cse3+lzJ^$po1K5yzs(uTQGY
z80U3bDbLQ(Qzi#a2vscR>JhuUUW;PZ9I$4x+e+xbpid|%$>pd9sBe_d7xyw9@J8uv
zh>7BN%n<ksK7v3f2Q0iES>2F4-U>9%>eYPmS&3*QrjYtdndF(9A4xifsjNjqBcQS>
z=St~<Xt{5wwe6=yUW}d7g-IuSt)IsFj?J_Uvd>JT3M`%7P)KM=blc><ZIaZu>1FTo
z^7!o3zh;@$I4rnU!^Bm}2hN;u#^drnz8Rf;H_pGLe0ZmV0+E}3+<00L5Hk^_t?xor
zf7@!VLSD)lJ@aPuP>mVeU|R}^NLeWK5n3HzzaYxn#8vTbN8y7>CzZ(?dM1+X2{?>U
zK&fsHER?wZDZJP(uA5hVW$+T^J0lej(QQ*@;@#hRr+6b_kfn8BQtOlY&Zn2KfXY(a
z*`fPBj}Xrm5nx2l$eV~;BnGCCW|1I$lwbGL$+e~eA9@TCRz6s|6nx)cT1jD*<urXZ
zOSWO$-9K4O43bE0RJ&Y!%I9SPgSzX?)`e8M!r98D5ZmiB2tp=QAN%XV;UEQcjk9w%
z&Uk-kr>`5hTf_a<+y7ZVXsxh3YK5&c`<h{9HBm6$+$>J@fUAF2Lh(0?1k(**<>tWg
z{?}ryT5?!zUU3ODuZp)5iJr6mVD5FM&fgvX6cfhyPzmZ0E@9+Q3sN~@k9%LsDnO~)
zHGJF3V}_>P<VazZ`luFxvyO``{uKP_ymz#JdWF1=x%x)XE#5=ylyR8Fh|5Me?1pv(
zDaZs>swO2QmR1zEwlpn`e~ch-EY^@>^dI+2eZHndVr!Hf{^?J0O>mF@niknVlfU9*
zd-cmNdkDsMt9->Q+K|LLaoxTPytC`R`F6ka!XsgX%p{T>&qSzi8Z+|!7Ju*(DZk{?
zw^A<Z2hN}fgIbXKU%A0P{TCh_O#0yg{)8X=%lE~6MJQ|7Fd&kuNZy`*_-TEna^DzN
z0#|IDUjdN@_NX8F%c8o;$2H^t?6!2AG3wmCdD=c-OV#DpQ$JeaeI8YPsb0WwQb9}8
zujK}@h`gX72Z?6Pyf|G%m5?MYrKl&z6_S#=BVf&vo#?!G(l8`1Ig<$yV;?GsgWkEr
zF0)v&Tz=HM=qTvAyQvV<=B@BX^hfU1-h};Ctu1{K*dh9#FfCa0e`hD@K$%`f#L>g5
z8jm}J`;N1HI*f#?{dDX`Np28P-!l5GTEg7YKkMn|xdXO>Z5e`50C1R1=q5Ch0LXyG
z(Hq97IZRs3Uw3YmuS8(~v(3pUDOZg!tQZRZ2b>bX-CoIPxyO~vh&P4J2K8w$SOM;9
z2AC?xkQxwsRRZf+17h%U@XSUbi)ZC2$umtd;1vfE%j-!w5DtPO|Fs_7C*E|D!KIQb
zQE6FCUiKv*A%08x(87v|OEd-K0p?rXP0I#>47CvZ`KWKA#X%H9h^?U8Y=)Pe;>c38
ztQZ1(G-9?A@oF)WHBB?ElMZjp*);m3x&y(g_D!$*Y`=FN;+2-j+pwkUB2vbw{`p1k
zwL7B;-F5p8*jM$Kk+loMtE{3@n<M8fjFPv2U2d#~!7zuCGTUbxQg2fUFb4Hr_CZ&;
zl@&E?@%e0Sxjfi^5BF`-g3^6%1!k_xasoc1U>lMCa;qKPJ-5{qb7VaF90~wb{2zcy
zsJr8SrX0@Ia!@Vu#d4vT=;)i(#^q{E;ub29TXDAiTTAW2qvMOMZFhtWwV+BvEC1Hg
zmw0t{zO_AYYoyajNaZ5QD$K&+M97e>#KA*lt$K2MS<SamdOtx6n|dnQU<K>YEpE_o
z#%wV^S<dR*W1#<bnuB-YyqwLPky7B7y&_u-%Fho1yQ^~rK%G~T5BMQz&8xIcb+UFc
zAAa2iIq24gS-wAtWH6ki4>!DCg%iQd7M~a0nj~g~>0LE4aXt!b8Tpx1xo&d|oj%X$
z+4;rU)tQM^i7^$n#YEVJ7Ms9FV7<xdYYDVePoXtbT<+m0rYeDPBw(ByCk=;C;!{<H
z4;OEz<D5LVy?pN`r0~OcbPV0}!iO6=?@Ml1dLIpeO#K!FL50sdRZ&<4#!BOZdsfcr
zl2k-&C{>k{O0KBl)~{KN?p~hS@HZ&?n`?J0@pI^W)8%}a)drLft?QAdfSn0J!gSHk
z_OXUyC7sRe4|-1zCk;k<glBQ%)U4z+&Hb|WQX_b2E0x6<5$(80QnVOQv^&519~Uus
zrEY+3S8RG2cpf`4Dsc9N#ZyRSwv56pHEr-;%7G7uIy<qbCQ^Oik54(#bFj5)!Sa=M
zrO9+zH2%3Wd`7VdMQU@tS!ddcWO0R-(a@1_OS`aI<k9)2Ey(;S3v31kbro8Nl}Uym
zs&A3k!S!R_A#gO7Qm{;iu4Tkq!RlcWj_fkR8yas$8`9=~RJ0%a&*2j5_0_m6yEi|e
zBd>HlZOccSwqtFyR#*ao9+owUh2$(!ye%nY>^$cI@67*Q<#Ca6NV&yxdrnKs<i$vB
zQ}>=Gv;cyQvLyjHm@@7-$V>z2sZvdj+Z^y5uekGML2X=L0aa+v48XE`5xDZ(v#=E&
zu9}7C7Ud9~ul0@8j)#ruIc(=7J6bNvKm!{sOF9Ws%_1hazEwiuZZ>R^7$n3rzy5~O
z3&2%CR>3`fEQ_!!hdk-5#8@<qq}3G0x0n>p_QiLm;N)<}M>jdi=5E?X*mi96^Qlls
zf-Bk5on-m=tlO^Q%Pi4_p*%<@i<|-7!)<&9$Ui>+tNrG|rE<r&%WGf<UQPMy-oP&J
z=2=aJ#6S}(WRwq+#hN7EqsyEX-CO4x(f#)_EjX|xVd0Lbn%*MaqQN~r?>fUuP+jHH
zJ9m@P4TMSg(N?r7QI^G-uaOyVO`5zvhNe~TeE(wq3OM|?`xpOm&mS@af%?20x3EcW
zCEtIaeEY8iM0C@riTUuDIecPPx)Z462^4v9{~~m_y)GuDR+2ls(6u-i#J!&T<d+0!
zgzo;+w^0iR$8SzQoUHJV|4ZSjcq@v6sOJxYsJjViuSM}#1KWB>3yfQ!rHWNhh*;Ul
z4G_l_2=ifMP!r3=!~Z?sj8Juq;{tic^iTIsdVP1e;o!2mZzjIX_`sPU+!vK;UC3zy
z*OnFHpJzA)XfXw{I%V<Nh{djL=Auqc!v+f9my5X>VLu*U9v{5#N$j~Dv}_LFo*f@*
zA%|ReWJ@x-`iMHD_gC&^JQWKzp)ra4V&Lm)RwDDD>3|rFZ6q^RzdB+l>HXXN%eVe-
zQbjp8UOg{+h`bxv`?C3$)&8?4xR6YVzQ{oV^$6GSPQ(JmM4Wk%2dA|)F3qC~GUEH>
zvyMDN>pwGLCz9o|sYgG4iRk!Gr`aMtm``B-Iy*B^;Fuq(Q@;kfeQH3k9a--FZ`ak|
zBO#ux;CedG^Yy%}7K3bl4e!%ApYD`{9743JkA#@qMy@XJAiIx1{4(07R&a(Yggc+{
z*0>)GU*&c1@PMc4(%1UF4d?GVSF5pMrxP2l#zim0Ltn<Oi1F@lz}-UZzDO>6R~xbs
zha!#RM=6rGK=zJMD;9uYaD2-K4|cQEYA7DwqMfV>akrDr#ZN2usMXhs?4hOHiMhkk
zZbrol^cNu-Jz>qXX-P@*0woNrFoxr?YLlo5Ja&GAMQo|bm_?{SMw#3$;H<8;IWrn%
zfVBo5A+{N^pw58RwVEjeJoAJOu}}ry1_IaukLV_^Gw1uVazpC-`L<|VX*^pcHJ6hK
zE5l&q<Wo2J$4&Y}NqT2kSw<dlYn7v%z{*|RJhiv~!zkB>DJ0uJmAB5!!Armz`k_f@
zgxiJrQ}{-;E{a=I01r)25W(u-C8N3^nXP7`N7-kDa$;ctEpe5ILGUnP`2w;xQvT}t
zwZN>259H%N?5q;2#t9KPyY{TQaurGrbjuu7)(e!l!#54qQboB8w;amkJe{P@9!^Jh
z<z&2v5gewBjICW2@eUY<dp=1zMG4E5GUiQ1Eousr5!8Rk7n;d!P6(0D|NKKQ(auY-
zTQiqBba<A3Y`8%{=tT^??xn;XY=)UN1{dF`s(k~d`2X#8y#IStrOhuORUtsKB4?a{
z+N)V9;*jp-$9zD1T?|!I6l0-ARZnEo9{RE0ySN}~q<_)-@$6miXnW_SUaZNQP;XCp
zSj|3Y_+NPSyflxGj6}qUl0<mGp)K=f^aamr45V1ZS+&?^-CN<D7RfZQ5WiuAX))7A
zn7-;fN=N86W}l_*u$?g9;#OAY==7|AeAL_T3LR#f&8mHaIbmoSv_^Jx1~bS)kAQ5*
zlDXSnmlUNI3HLDfV_eWgp&qykGo#c?)u`Sr!BGm%U#Tm`TerTn6$8{-&MfA+EX<M5
zMq7sBkW2j#P261Q$e?ue8<G+b%8bX4PcMXQDy21IW+|<yCZM)Nl*kzt!v!t0NCr-W
zh{E9ln7U?(W+HEjd@zVLzns!;9lfdhT_+~W;6#7XTeA^a{XD&+27uy?oWCN$V=)N~
z62HL+xw<3Es=H)`6z~fJ|C<;z=pdXQ^e%T|yj^lyDiBYvQyUz_65XfltN^+Bx7Nk}
z>HFgYiFy88>%4dIe#_1hqdVLbj1Lu>5eQs_HV}nDf5jv=VlC{v*Uny2=+d{(Uw->d
zC`k)+Zj6;ynpYAdLkrcaV3VZDSN`gH?+kVDru5Yxuu7r1-9LPP3^D2-dlv+Cwc;&X
zxZp<-)h{o(>|MC8hf91ZyBrl;T3cu9-#F9#9!rAfw35cGm3qn3qfB%iw^r`3YgV2e
zge4HV_%>E#E?@~VG-W9u);m}<AM@^EU2BvS(#<BSc?}9LF&u`#w$0JPO?@DxoAe`u
zmv~mzgtGiQnTi)B$5Slsu4U&&!6U8LvhKiaAM{w6qZ>f!!J||oaC@k=xY7Mu&O`m#
znrF&JkF!LyjbXt*5JJ*%MxnBz4#|&wnsvQwcbytF<j?eslc%IErgE-qdJ6QT-uYb#
z)Q}!zkX^e)47I=4WI0A?UETMY7C?FbbyD6<?tMeyUDsGIBt@bQhP)j8o;r?$U);;D
zM0JWkdH~R7KENhy*CJSO2qq!Qu3qR0J(?$`$KI+_oUCySnbdaTtDE$00dJhVbA$;M
zHIM#@?lI+letx)G@blMfJWh_5gE>^lUghp^-<y@I$HJRXx;D>7?np=FJ7O9z&mp(D
zoZKO3i_XuPO2Mb2{L?pI`4=M}^eF)(sk7Nl+VxZWZCYUITx4#(58<l3?b^?KH+RZV
zAyMx2<OJ1Hp$Q--Ckn%8wW`~Eh7t!6BkLTA__r0l$o+YNFevK)nHI~J2#7~&RLQHQ
z^Bl(cVtE}?Uz}(()$7=~p*+5H+xgWt|M{OEdZ&jy17B-M9P5t%>E0-kTOx1wk?({Z
z-q39JfSTJ5Y{hQRD`3n1wVZ!)i#K^y;gh{ZcLdgtN2=Ce41Lx5&H!cWJK%z=m91N4
z6e;L|%a+hSfm1NFlzT(9qPxk5!cFDH67Dvk<_KtdCSFSd@~WVdq%d&`<k22P>RLpK
z%EId_udO3Y6C)4@q&sWZ;6vK52|!BYW^s_+(Ka%J9xWl#iM^Czq=~P#WKLKTaepAa
zt(Q;I0tCZ&MAsO;S{`ngat}j&mT4>NZL8$8*E_mQ&iAhl-vavUIj9&TwFcPxKR~U1
z$w^q16G^7A_(dKG1zGFDJ(|{7l`?o+PB6dRA{^IQ@}+R*KmOxCw*2Xi9gc^)X6qLS
zeE4&@B{1`dSdzw^j)`*Fj@?9`x_`cQcGPUr4vrP$0IcqmZ&o)czdG(#-_@xoN#rKu
zfsmb8gAMax<TYoX-Haf?j#!$cl<){w#qZdB6u;%m7x_hi(<d-4hxh(eEHXxD0X=Xl
zf66d@TLMI@Nx~ET<7@XvyZ8I7C;)Uk;Od=}0~qh_EXY#EPTR_YnHMIXB7(BD8Z0hW
zs2!JSHtTb9)a-&M^eb1y{+@p1Rfj<sDGl-U5QensmsIjaVH@gH!>>BC+&w#>O)TFi
zNQzk9pb*f1clZ@RT*>jGN%TjN54E*iN~;lFx(ghj5?4%_K5?#~moEzupvB@QcSiC1
zGMkMvB+TT4u6(e!KRPWxEvMbXw}HxN@wv|!z2Q)!vw@x*OQ$?MZnR`R#6z}jfv<al
z{O~ZaYgsY9n>tN5Kby9um6H(uGZ8Tb>C3^!-w0)#a)azMk(#F;-oLl_L!%p1$!hSs
zxZM>725n3<IpW3`e7jd(Q7PY0Ch17UV<h2?z=^>fUUEf^qu%TN5AUybGc?=SX!0WC
zQ1YNRKxxE$W=8Wa#n6*i$*(ezjBG<Kyf{)2(Qo91bH4MD;!EN<Hc{208XP@=VU8!B
zWXW_3t+3XIv9T8jA;FgGFYT3C@<a0L=JNUk!fxmed5FotiG52b@sW!A2YGdfaKuj}
z$C>Gwx{cqq$rWDkugz6Z`TDDC7dF+Uuko~56qmG@=!O=lM0Ct_3`TN?ubT#FF&wA?
zTZqC=g%5%3j$e1l2UY~ZV2zr(*7=36x}Ry*1=ArH(54g*@_wQ4=E>EajtZ{s;f-J2
zC?n#K@C@sWGDL$gEK&oF$CV01;Bu|k&!2zxRe%3)ZjRaQy-jC@!{|FaY*Wb@w8SEa
z>B$zGVNYq|&8m4Y`jpP{mpfgzapGIT<0RNn9;RV)nYpuHs9U}6sCP)m!>&6qfoe+&
zi7S1WfDs^hH!m^UlUKJm+vdx?`}C$PSq5AW>Q>9^Yav?M5<cZAotvTSymNYLcsgZz
z2=&u|H#m>;CU{0_131@mI~!%71)hRtcQc<AU^~Aq(~;^1EvMYHm9zmxQ2BKS(LT)N
z`S2!(Ehn+9r*>$;%h6(5+?934YOwO(_;3?-x*~aJ4uyyVN%Kmyh4(NZT%Nv_xW6s3
z601E;_E$-Dti488MCDB0`5YvXyUB4fMmowZm+t169K96FDgH4ZyYs+{LAkD+p7k$(
zzI=c7ri~wujxTzrSAIqoG)EC)jWC5-zjU6nbFh~qAup?eB|V!lAuqzrSVY)Z!{+WL
zFP=w(`#?<8uCfa}$)kX^tUvs&X|f!>e{U}s@4+n-w=Z{5-$XMe4(UG04dD|fy8N5Q
zI6*XGs1yt=8=G@U@?NX^>7bk#;B4aaB@l%0ecP1~kF*Q6ICx^&XVeS#nMP~ZJ_VCh
z^gC;B=~KJUs_>a#|I=z)M&`d>eA9lp^WWW3aC$d9#AOCRp(w6W9U=d0NkTgfu}N>c
zJ$yMHd($PPc*SnA_XgOf__h?1Hw|x8w7}HXl&+G_95)qvnvSRq3t2k9%B0$fca4_F
zJ(FdEhi+q{rwQa3PkP-Kmsf@+8|9VTn)0cT`Pwe4OsG>IfhbBIivr5ga5E1~xoM3Z
zL##LrK<K#8-F9EYK%m5HKbEiLvoScR1gtFP#<2c$slHdx9kX!gNa?nevxGJI!U+^g
zSab0{Eg<$^vuXQt_1_^Zs1ux0BcH1;oW{($2I5JixZNhnf-N_2AmcQ7rnzy;{_R~>
z{E{ap`8@{o)h&M8oANhJ!}`FUD2c62eQO>-^3hl_41Qs&KRG`4R4;!mZ;Irq95}1>
z)h`SDyN6S;$R;mpdSfU4d}UOE$~=)a6KUJq;031+q}0;6TXCcL=LR0vbKxDYL!3a@
zVUz0c;(eun(&2p4x6Lh<y(?@r9{OS%nyJnWUS{+C$>Nmpe)qQbmnibj7x(Y7`-r!h
z6BmH<sC*E$m+sb2MHEw`=DD3LN7oT>%j%Y<?w|tXgQ?Eaix+sOD9kPfu!Fg0S$a*)
z)JnhWvW3j2S#_C?gnu>a_=_jx7Vd6xR%FWDAv~!65bJlvCw-NVe%O7bo%o^I6g3~;
zzXTkMOnc&K<yA3#Xx*lZFp2~+T;HZitIEKeq7!#mI)AF#3YFRmmin8j$=n=R%m+#p
z8GjV?91Q%%SiWK|{4+GG<ljX?Lbgnl;p2&9AB%|l{1bA1tPTaQX|fbRcuu-d_H75~
z;awU@(r6X3>+7$}98_N!GP=qSEB!z?<KXfrdD(p-U74YhJ5{)DX@%$kCn_5zZuQvf
zN*dZIIAC|t-frjYo88^rMpLWN-OKjHl5QHz^O2%Kq6>8l%cA4{&>08zn+@CBk;);%
zPPlr1`J#pg$NN=JTA|@;0G4Ct4&$V{&lZpG3&IL;ba|#awX9d~j2Rc{jL(k`-9PW#
zKO#|5^R;cx>B3nZE@%8TYpbbSN916f^`+GhB_F?0TJEwE|M9pG*9ex_Arhr6*Dr%W
zdPxjD#mhN&QB{v*0>(Y$mmDS+*)*NsLaV*Kg1;AA&^Zu19@V55>klQwtTm?cL^je;
z@lz%}PE;`oF@o=p4|}JVJs%5{VqO0psSP(=D3{B<QA11XMldPVGFsqhBRVAQN|sJ_
zb?A=X!RLFny}J|7xOx<{no?50oqw|%)jVd{#(B~my?5eX&C+L2gIzMq%9*`ZrE~bF
zhQ|5_XIF3gweDGC{r%IUzSX`uGtmEm@&fS&=PzB9<>WU15>xjLZG%ZIXgpQN*GG?c
z-TCV#)<34yUP=%eaJ$|8{XHhL25L23R>wOrv=p^0xhZu$|G|LBeA>iX{fGP4#yPgO
zhV{AdkJ!;(pxVey2Mzfy3tuH=uFEu+J-*Fa)XdF>Vi9G}BqmPEO`dCvzIUq|Ss1=l
z)eo_7{W)(Lw=ryWNCR12sT4-YcyO)yig4|h8r&9hE;It;tK&ynXmu-RoVN8vuqZWX
zisfVy$K&Fyu`OT)t`{%!D%N3vEV(Le_@_p6*O#AZ!MBtjXF3$FC8pIR54HdP{n^KU
zkAX>{42A7&aHoYacRgqm*S<cxI5<8E7lW?Y<f)X67>{NVP<y`3C`^F;3zq8FY1_Qo
zs`)=gKSoK8d`e1Bg0u9!<=52oU8oGJ*rEz|V>ZmxYgvPcO<n8<Vr^l7Y_*dRbH&k5
z7HE2ao@*0v5fL_{k44%_31*f9T5_W#noGp%G4r<^+={+mCI=nz8XKi8SPzV>TD=I^
z@-V7z9z1X<9ZXfHM&cm!F8xeNVQ~NDYi<IixH&aR6_aWl$b9#Z2v+CuHS7i(lF5P~
zB!KV~`CBWMHyY8Juy<LIK0rj=$T>~(2nUn2W<C({sw7uK(hwk`tTKKwk_XkqNEem?
zMQ1cu=6j?yQFw~k%^cMY-dsGqFzg>cVKZ4_djr92=2nBq36Zc#T5Lr43yNf+)Nube
zma@spZ~2Fe%JEb}vA-lgn}A9!$S>#fY1`h9<e$3#b)ApfH;d`yzk|&{Fm5Uo6N`Hh
zd9`|4IfOJCt*s*}7zDQPe(Us>#!nT_Ct&^}NYp%2`K+6KwtASkO$O+XK$O1OO2JVO
zC^!PTEv8kD7AigtnNXCOVr-nTrF!Q2Nhl%kX~5FbfVa-byvfq;gSxffM@0!59#0?^
z%Bb>CtqviZ*w#AO?SJ(yZ**6dxRsgxSf!lv60lq?IFZn%u&JR$MJHvz9R;D>NY`1p
zA2~dLjmNpi(<`5IsvUNWI-58%3z`l)FLzY;*&1*c8`B@D(%pXJA!gE=#6y#h$EPoa
zOW*x;dgZ!+va(wyAG}2-r1t_~nr1<SU|vo&K2zw9jxOj=2!iigcBLXV+@fZ+k$q}o
zwJpZL%_fyB^!Y)^QJTTghoa0;uILSCt`PCmUzB}b(yD_H`E9iM=-0c(>d%_&i2#}0
zCbI}_P~Tbb5dFh_HrLu}KUmEw%pFh>gib)wF|s~WeX>?aDXCA5y$`cXT8g=4!mSZl
zZEab)sFo0Q6L5cqbFyO<wzfHGh(kq*ecd|H?GFy75jR;9?;h?~>fqm-|7_-rn|YEc
zuQs@bJ<ljF#@(p=e1DA!`&zB^YA|RfJQWk&86zRH+LoiYy>zzn&0;az-QK>tyOSl~
zEhgLld*q(oouk`&(`~8J!0xTUuVvvo6!N3y%iu32*;+5&i|RvakL;1NG58EIB`k`=
zKmDmA$Ab}d=m{ce(j@T7p-?BN7O$;sT0y=Xrt?WzCHqr|D5aBnK7N!Ooc1qzhaUtw
zE7gC~l9JMtcM5;(pPXS!;yx$Zc6y9!bek7Pp#s$!s+SoHtpRMXr{i(n)Wl48o>D|+
zCaD7(c-vM2`z3Peevu!&jftAL*>2<N)uM`^gQ_|Pq4*<)wdZrc^rTay&&uXfl}~DZ
z7<4$y$qX8CFS*k@*J3iC*NTWUYA3xhjeN42D~)>8h`mZ*DYEWPN_QoT{!i0#)OS;N
zD`w#GJ*4%@i=;V~!RQOtZOgECiLfXcE-~JggQM;_+?+ob4xx5nXEeL`=+P#O96-Zc
zjiNN{jp{jC^iZ%~fyl`RBn0vy89W}f@UKP~K-8&5sx01cs&S`kC<a+K*v5+#k(h|R
zQwGd97{ULebr2(q)Jb(y$>@Z=y9EVH{ZL-12^uCKyg8Jv)Mmm;3mQq(d+WKu5`aQu
zw!6x)n~nO5>8$VGRNGU9;RCWA#UG4rqSG__R^P7?1$#tS_`j`Yb<!YjNlHq(T^$Tj
zFdEm;Jh!&2L`Imeq=>n0Mk!VVu+fsi2XcLY+F1h;!+XP=;uh`+LMnYz!53j}I@goV
zhz<=2h(-uE8$VIR-Vm1op-3}u*SZ&x#&e6&QcEqw6F*G$NdIN98q)F}o@-(LTQXI;
z07lM$B!tj?D^o?~ddyL(O7*h=NM=)emS=AIKjXfwwa_OJjX2rAd<PO)1}HvUz2yh(
z@T~IvFrRuqo%1Uiai{a+{MQ`Sz2;L`&7>Jh(H7;`r*U;p)9O}h(PL%7FXzAr1J%Ss
zH$yMD!2gj0@D41Iw`%!G;Px2g?*IE0Bvgj~;@wxIZqh=MM$=J$k`<vtNGIO@xj!m%
zcOdVIC=+5FuQ7TpEeqe+>!AGC#Htdqo|=ftKO^=%h+Q7#K)C1~^cb@Iud`)q?I+Kg
z|LXW3si`?1bwpJ}W!26_RxQA;FnMpX0idG7mOOrdx@2Z7gaJ)yN;KpzQTo^Uf$frI
zO2J~zu)6({&7lT~AT67ftGW|)IayZCs2D?bC#<rS!_Cgs6};NYDOznwnA->@YxGOL
z6QfEG{RbT(X*yoCt`+VCh^L@O{(84B>ZRI@U9TjG=oGHB&n?=IY=6?w4;z>olgyq~
zZ9#9U(+}_wHwx;`#Vl>5VOI)eoz`OpY;8KmPaHj^hQnuRwXg}wy&DtUyEMx=h$Ytr
z!g1~C8IHv`;v7VDG?pzeb0RG4*5(7Csqc({jZTSb)dg}*w5|^OC6m_lRk+CkY-9t*
zjNYOwS101SnFy<Rf9{57zo=&9fCs4{_X&V#I^IzPpNDC0IkO8|Pn{80bp);H(lv_G
z3N78;vQIPYaQ)KlZd)Q?TGF~0`(8%9NM5Dxm%VgRb%*zZY~IbHCBB@_e6Z_&IlRT#
z{;IqvM3ON0NF=FPWm^$nN_v-^9UmD}e!vol8XOsLB+N*9a<HUZVih)(l{`r_-6|o>
zWAQBNPjk4G6OL{Wa;xsENqL>LaFQ~jj^Er|KE2xd!twbs*hdYAE{WNd<b(SJvlu7r
z*~Qh@-}FBoyW{xc@T<Q2`Q+$pHR>Mw+D`xQ;84FByruQuKI&ca+m~<m$=g~ZQD`Wk
zSWk=yQHWLpKvKxqRb0c3b~2i$<3%UW7URxhQg!6YPW)V*=g-NRxiJwji}*D4bz*}0
z!CI+I+whjTzvF@3vOM2EIzm;7!kRdjfXEm<s8ilpMexQ5Q&@eVxeawex1&u_(1JO`
zE*p?FXU;0UN!5I8lJCHXK_6-^^barI_qo+}J)@`2q~LrpiU+2;2(7~eT(odxt!)^%
z3mK%b8l0kEc5?py`0)6OR6^X2ko-ZV<4RwI5m<&q?tuYWDw%?(L&e6RB|y=2seymw
zXn8U<!)mxFg=c2CcNV$vc_w(Pp5u3N5l;2>q(acD3|eD3EZZU655pY+9CPV0qBUpE
zEf<(^8iRcywdk#j*N4f@S1<qEPR@qFZm}-yTiZ|ApVpb{{1nBN)xEm|%ole^_-8to
zo|z=OWl!DCjhy7f-aWh|ACQ(~G#zzr%AtQWs~bZv*})gxuZ=O4^=D>|BMx3Il7mU+
zo_&B21CFG0!QiFqksFw&mrUD@m=L=2tWpihY@`-yv`ebj{BU`gzOPST-6aA^m_jqe
z?*ZDC9>#6IoBZsC;<}x*Xgpg$8z{A%Q%RswXtBOepQQ6!XM29$ihT&9=El8^m`9mC
z)J~ZyhjTV`FGC?m0(h4`eacgrMFQxS=JGK&{JV%FTXi3u9abXyfnk;~@TZq*T*fl1
z>dk7s%OX*3^PBwIy{N7BW1aSKspp@czihkzybxAs`}O(%7vp%bENs<(%4!PFIwV4+
zPN`)>IX?qs(leHy@%x(UBw>W`xo>MOOmKCW7Y|ds-oVzJEMrbO1}g0=K?l%{%tahB
zXiqDAze@4{{ZI3;_XpSNM@L)O#s0^5^Ys-W>D(QM3_?XG7&8cJx+t!0a33+Gz-d3~
zT?9rAns)4bEJEiATVNkbTK36<kzgA<wOi@*psXZBQw82plQSjM3>}I-su^4((loFI
z(M=U13PnV!;W?k<|J@5JhD@o6TW4v!)SaXsGpwsuFYoa09!`909r<l{S>&CYbUIkh
zSL&1{OIK}=%Ko(K4$_4%xh#BF4Wj2JT#5ksbwKT?#DH1q3(0y2^hhJKH<2Vu;BbiZ
zTb330EF~eDFB72;-LkY!v-{Cq#OxMB<*gg{@^JdyZ;1t-f*uH$v3Y4oN?>A2kj(`V
zBY~{0U`m?-Zb<{&N(u!xB&tm|*^zzFWXL$cA?1mEcuu-SzBma_;78!UBEEYa38AtV
zJ`~Ae>J3Sia(w#wOzwkX&Y*D=)T^2c@{37pQa!}Rn!8D;1&eO*gS4puH-zdpFM?l6
zvUoG3Kdx&L*Oi3LD_zo#6)rfQW?)3Kg$EeQoR%AMXIhrmmWdUqRb`)2#G-j7`n2m^
zmd{6MtZhC~$^Dn&h}6~<RlJmSxyB?%d>JALLecP_Zd<^f!H;l9U7@@!4+{j<0Zuf_
zZi-}gwFp4c_0{P#%sg|Vl=-7v;ab`;=83=y9?t^zH^jBv`=O~3Yp5hF<rNV!Z6Z>9
zVwN)1Xk#Oj`V9G6V;Avf&jfFFZC(Tp3|Yh&d)&l;3#AI{l09JtuBo*aCQKJ)R&cv<
zZ+@2+MY4ae|Gu}Myvou+>W+y$#CD)RRD<BJdUscIW`i-e#CLK=6?CT$Z!|q9{DD%0
z^E%5$IQykXCuv1gLd!X4CxGjyO^0%#p*%ab?oZ@?Q3<&LJ~@sE{}4j(Znj%YlvWgp
zW3>_7OvmzP+*>0fYEQGkWSq`%<`f{OkBGhWuCQf*A+jBFx~T+>D+al_;d0^&Enwzr
z<nmzvJ88LvAe{Nt3^;{Q&*Ir*X^I2Lr`H%#{l?0jF%0BA8$Hg!z}?du^163>00?d&
zyP#K0u&FNPZFFv=aifhh<xPF+R=$w!6iJa$l{93}RWTEHj5n|gy3^iH)c}3w17%Xc
z!5x?-L(Vmqlg1d1;sRj#i%)CHM(J*1g=1)%pT)&wLXFQ7qT+sSU6}&LuqW>(J~!$2
zVI3`Xxe(in`;jl=zSSnny4~44V})~t&@sf4k`{}yo^7e-QYX>XdT^>Kw7{9;9G4)B
z>He;+pj|jkM^;?QGOq}Sd-&sJC%yA2la3O`j5I<ir6W876>=PI3S^@mR#N>d0Bp;h
zShCr@F!DB;anGu$VL8j?CR00jup3o5zPc6qvW}@j?#q3_<X|}Hqzw^7vGrhZZ@%P}
z`}*$gTLiPJ%JZ$-y~j&rz)W3hV|ogNN5iE$@-Qa_>Fm4};aXV3xuGxcMb|AHzz3|P
z(?1qM$J}{7FH|l9=scavi_a#>DupN*yb036J~U~$yh>5kp)s9&J6+S3^q@np)MaWB
zX#2Q1^?~fli`qluR^bC)gTmgOy;L4jcw~2R#X`s|XGX}U)qYu4i;$xZ2AClQn6I8>
z<At0?&O0lkt0|vJc~_r%i#o0=7ZZyR+}vm-1%EBoh1^yGPouthH~;CtHin;M4e8vQ
z%XIHQ?|<8WF=+VCu$#6<S|aiaCs)t(Y*J5JgzZV~&*@0ZEVsTWu{+P!kW^W$zjg>K
z@Jj*@tTzKUt=j%6xNPlH7`dwvsF>a&-}w|l{G5R}MII|M0hQ33tXCS)^Ix-ZRsB?G
z>3Vv?-Q;@dZOJ=%KPl2Z=>KlVGf6NMr`l_r8#r%>{MQ$4QMyHX?K?E?X9X(vjcRX%
zvap@pJ@!t@8}v>;ob)dCuX;xtna|b>9Yt4*imI;^Gf<uGXoj)So}OOy-Z;<psUWW5
z1Z~*c%w(P%5v2pAZ4sc=?G5N=DPYj0H_fKQnYVBMkA^ma7cB)B^UT>CH&$_Bk!D!$
zVpdtos|h>YwL9G~&D+VpLdbCG9zFYK=5x+}{&y14u^>Ys4onD`TiXtW%)~UEyWQ}(
zsYe8>xll1kfg1uwa|W-ZNSM@ABj~4TQKVHlY#;-t#>)M**ixZN(R_U|`d7;$edfhE
z@yUVvnj4D&{@F{@n}2qH8F%rXCN(o$;z-kK`{j-sOvVPJvEAe!McGfQX*22kfS)_~
z*}n&rfF>Wi$s6j7Tqm!t<%hlL?7DOPsq6lc7=%Io;PdL+Ox#KLtK@i#d<GL25z9q2
zOlMgg3&k1g3!pc;^Yh6LSRVhZu8S_aD&R~z#&Ye>f@?YI1V^lHGwP`+!SMu5jm&>%
zAIVON#g5=vrJJ_#?c52NLkn4A450-r<Ydu?Sk^`l*JB0c+@yyt=OfaC1epi6+fm6<
z;%Lm|>>5U>8Z;_1?*aY6|It;>)GT&g@?iE(y!L}_ft%m)Q(N2rhfN#tB&C!YpD+p{
z({Big8Kh&sAiRWE%Y3ZO`Jmfi0s7T5S+3MrKs{u+@_pF_+B~vWMeQCXNX22A{P@yd
zZ?`7$@abhAu&2emJM7k6bFk6WMX;r2vC@i`vewnAWOBPhgoqM0uy}f2x*_!*&f$I(
z_ubU-Lsh>TJ?uTpjf|(*2P>mV>WRCg{Xo<z<EF@;_(2&NXWCHU@d9*-32HZV^(qyr
z{Sm0CQKF>?BT_q<rlCDWc$Id0nF9MG&yS%sCXtfTr<Ywp>3QqbdvLXHZI=@YvrTyZ
zXgtU0F#<Rx2ltxKGBMDDRDOUmM-|N*-VG_?m9P~vRVzS&sJcSh(^zrhg{c~0(zuA!
z2-y^V?q40B^!OEJ;uVRXn2ERcRZa9tV;Ab|ML8Xd<8W`|3-C=b3x%?UT=-XYM(&!y
zE&7N!zE$bM%8_gMV?{+UQkK=yN$UAiS9Nl)_zgY&H|Ld)fHL9)&gag=PL;nsUubkn
zN(Hn~8&n?*z5cwv|Mp|j`q}kjUkn=^;!*Op93~&ZQr4-_9!u;c4Q_Wrozj)2BN;&C
zVZ=|TryOz}?2(Y+$;FMwt((hPCUr1V=hov2kR8OLjfeY}SDhC--#%=j9&m&(`}96}
zdp|+l*sEXo>)x=K=UuR?xfS~<?Jlbo#G#K{$(|7LnaC=<(jbRto0!iD&qK_{@*sC~
zk-hH^4|<gfdJY_N5tJh(x9ElwU@6^CWm_QR029*LjJ}SQL16lu1XuY}`KG4O$Sdwb
zhDm8G1S52H6X$V4tkdgcF0}C+u?N+22)e+9;qqIacO4&q6lHR+s}tRi37{hS3jjLQ
z*13;w<E5-Cv5}+aky?N|y8M=zU%H$7X{P6gz?PCL95+gU#_g`Ig3T50-XW2MEqe_<
z+o_QnjWJBkj^s{SqXs7-iHcNpIOj>@Kz)<>ysuM35AL~YWBMM2m$h*>)frE_5i~w?
zt-pvE#>7Rx!EwRj5x(EBZf-2(%XdtgAjy^kQeH@4SFQ<!9Da`!@)J$|j-omRf;as4
z-|k-~r)O8mL9ch3yy=~)H~aeRLW}4+lCrXrf6SLkxuSe@J!~85C&@J1xY%3VUyRt*
zKlB!Nfo0Kg8&r-I$)fyaX|cn%sXHdi<duB5cbmH7$Qg=}?=umyPna;-s6OmPGIxtu
zN-Ni>06c<vIsmJ=@p{It|AS+3Bw>Y-A|A}_w1T?TI_YpS5+D}9HmPd1QS0{V5RE4m
zGJ0^+(262^RP&n<Yy-X24!6wflk5trmLWLRe@Z8JDQb!A#y}-5luS}6d}#mCcwMED
zuS$`@l_Nv;gNAMh^GxG);t6fGLL_Y<bWks>Xuw#NB+L8d?@tSUSv^MbCqw}dtdRXs
zpshePvpfbjNWIrxl*RoNA=y_&IVeZ>dyKT)*W7K7ic3xA(LM2X{)rSPNj9A=?u|S(
zHQ}ZpTOe~m?svVeB`u63-9c*>98;;eb$@w|^=G=XiRBD=z3de#xd}t2L`LO_1Ne&`
zTCj?q6H@Rx3LkUx+cS<+w7OZT%%R95O5i2kR6%Lg9;4-S8kF+ja?i7I9~EEO=b7k|
zisYM=^?B@qE_yZAe5f*_8i4yPrT&^w*5#*CPvuySu`jOZ)me7<r#~et1&`u@YlTJO
z{;yAaER>6%W;y78oC$XAUi_=V{p!YAe%%{p?%U<GHuzUJL5nmwJNRpV@p-XRxT8D}
zX42BQv&w6&(e)~o?z?)dSlN9lJP$HY+fZ?3`qdfvayT&`heGq9A~DVhJC}wUqjJ$u
zCsq!m_!IS2bRrU)plk(ka8p{c=P3ujcy5qP1W`oPMV_IMjn93%cX*|?*&PVplX^24
z7IiOj*R!~F&xxyTS|*(?Qyx|5oE;x&WvI`NFw+#5={y#Ps4o)wDj3}5Y+I#<bj`Gl
zebIDBrCs{3@6XQOeK_wA?)z@zPb00yHD)+omQ@#o`a8F*@!}r8&bR@tp)!{G2#1ja
z#F!lm7>MKITxlh?mKC78PXtP(#U`Nzzst6`&60}v9#{tQ-@6q`gT{&=$o!#}tDDJ<
z7dtP%YHU;t=eFYpY0^)g^~u^E=~4<#FqNHD849ei*QlRyjonZ2@2l~R{Ir)>so)K}
zgK(f6qrUX$t<`@7e+lrsm;Gw~iPFg8J`RBS&zZbh%<mPm=k+Y&zEr>I)bV9~3izoq
zt=T->mw>1}F_T({`<1{Q0jWdS8i&w2C7|Th%c=bI1t_$m+7k*EVVWWS*m3LnmMJ<7
z%j#6Aw&&Te|F7?R<qlPjej}hJ8p<omJe-i@#INHwjcsk+3aZ-f_^`NI8jeW|P)GV-
zs6`#!{I{<r-Lz;qZI9k^#xkKZ5i?+rNhF3zuKL7HTFg)Y->+ANvT*;|mLA01M9x1P
zpvuv85T)G`KEddz*H*xK?Vl6G{|*q+P3w#eVnZRx1c~`j#6H*buZ}-y?UQu8U~;i8
zS@4CGHmKD_u6w9KbHJ&mq7uR7t%IU<%fGR4vgxwikz;~reQMDlSyj&3kVkt+6#5(P
zG46}?<J!>^kgg}}8TZ%2tBd#j*Y7`EzWt3&*X499Jx|3(i%a$|ug)%dogYSSAGnFC
zFRQpnQtoO(*SrF}#4VL-H4uS71k&Lm31qo(ixJQJvWP`m9?fKE)a*AD{~AET1h{w<
zxm_g?RdZH2t7TTF!wQTp@mjd%dq-LN#Hg!SqJ@~N8I%m~`&7i2g}BjOQiTw!MjC~@
z2wLLt-A&s8k!DT*xMQ^1o??R-X4{Hq-r)+E-#XKI>XsH#mhh>nwnsIt>(3)POaZGx
zrUV6}7*j*FZSq}A+X~nu<UEX;4LAq6WytJ`Rt`9&1&~M65%;O?r@~cd6)L^}@|A+U
zez0uBJXV}lRCvUHd8Ytn6hs!+6Nx)VjDj`gN|x0I+|-(zwtZbCDvSa32!Gp{pgu?4
z(q-VbdN|6?iyZDI0<Hlh$!cfS%VaVCAM<emvLdOR)ZJPz{BrYy<Eumj-QAuF!rHkx
z=o|$?NOiR#*YlJydbm%~o>>HVm(Xmtx{(yh`s~<~HW$s|a@Lu+zfTPJy}}v?Iv`<V
z3s^vFI2z8lU0K!wnxh%-b~i?syn{?>SrIA&(xv15YH65(h*nflFec#uVM72D|F6TX
zM{n*-lVWjQP8G?e{t^5bXK}bwlI*Cghb23oN3(49Y9+KOdaiEhq3WRGL!m@;93t4+
zXhofTZKLx{0?~Lx6}#t7bGm=h>r3p?PU#J-MTOh#hI)b{J`OEEU#_4zcp*RuQCZuG
zwK7QK7!$WAO*~7KWEcH6;fMHua>Np25-mO}tkGA7a^t(@Pbe)C{!rcaH3BYvy%2(9
z4;6k+rf;6w!~@`{@|tde3JpOQMRysBm+=kE19uZ?yZ2MTBvoC};DQhWr$2ZFYN0tT
za;mc3a5J~vS`1id5c7>m%M(BeN44X!oQ$?TrcmLUD~yhUp9H$_^XJc9_wSaO1;X4V
zn{6F^2qL4=BxWZjN-P4j)Xjo`)q`CTcKNBSMe?^I#}Gner}QkE5^kKA<+Ki+!>5dD
zjn_TSmk1#AuGC|Q<HWw?C^~r%xSO(OV&*K0c8v)|?qfVYKrt||ZEAtB$}5aNHtd5M
z-Bm6#i_J0`8|0zlBq6&ErV_gY@!p#BP^|z^K(D_w73<N_(&dTs-UDUUgaM;)kg}06
zJnwwhH|NP;(|d%cu4j8i^^5bDy1&e7q$51#xD_r`Sk=pHr2}^iJ{|4DUaE<wn!pSV
z&YOIsv5{ldOUOk4@%bQRHe$vF`I3P~vBOX<kw~H}3PFed5K3L+7<)RpyuVzO5G{9h
zv67X)-29-nC@Js|Gs5dkNS&)7k`!<~aUQ5byRh!>S_<d$0y1g(+i>2ghE@yeyynk9
zZg+ON&mVr$nSsuCspfDsEWhpyhZ{}>K|L<w8aUZ47}z=d@e+|A)hDM1Ue5+a%$WmJ
z#75*nkEMtn1lDVrJKnY?yo6NdEg%}e>_YkLe*G!;h<@h4>u0_gx=VImc8;=P2X)GI
zV%4+r-YMLCm1FLoemFUBJ4JwM$Uj}dh-h9!7vn>Wd|r49OoFbP_bY?k@%(Tz8-k6R
z@eX#E$9r!utK@X#?wMALdoCyed21m3#%txVs#@#dGy>j1*}J{Xs3uqJdr3qHNhw=V
z#nUg?i2+`oYiXFo|4N_;=U|9;+rqXpk2}heD7X||?<#f=tBGuK!fDF7;|_g68Tk<Y
z8O`0HaacMhKiPJ7btcE08_xUDqT5b3`=H!aF=zsI^)ziVM1q6ujO)`?h{&zCZq7C2
z0B!igF^u&WjFU`7mQ4mBju<z(n;fDH_3CA>oxDB&@Kf^QMSBA)Zrgb-!`mrJyj~6D
zr@eGI=}yvO(!DM}`F-w#8R6Kcsk&3+8F{kHw(WJDla*f=cmNNGGQ54L^nfkz?0`U$
zA_6Fa#<$WR#TZwvnJ?08y2v~Z${VnqsOGLFdZkfrb8=0)SJa;T+LQDU-Z8d6vIu`c
zM^@Ae)-2%f)b^G92s-56>)ZX)H@!>tOa%|@TT`+5bZ2re{up7LpP%u&^0uDYb6GoG
z-IG?@I6OQ5`QrG^+bc2sR&Mm5@aF35=q%DRD}4#X$?@UE+2z^mD-2as2>d0lN$#P!
zzi`%ItaQhYifODED;8t^95b2?NAYjt>-e{8H|65rKjpQ?1_d>2yZoP<4c+0&U(zlN
zg{WSB9O^l~-X7N)bAH_R^|UPFOW=i2CD(rdyz{m=iTcqT&DL7-+Pd}uN^H_m<vy5J
z+yDIMKgkj>mj8CAsR+GTBP>{xk3~-sU-dun^Pu)S7$aLb=>lcL;L!NDE_jc0N0dGt
zkl#hh#%-k#b^KRo&VG(FoH+hL_Nm!6J2>YvWa-ol`lvcv!PL~6{uWscAkH<~veVbj
zTb)C4b|_q0nj>bKi{>hyqDya=BgD~+oj{nuLcNcr$B17ct{R~}b$2Q^f0gjWp7bhu
zj&tEGcSrjphRO5DFoCc)jtP6F)m>Sn!w&aXyh%B_LB?#P;Wc#lDrGKV<p;-aoMq!)
zcCI{Mo38wE-Ai_R6&})=!fj_jJLBeaJ2}2M{wew9t3keKCvKehH);6jjXR`1fBQ{a
z@gDmSoNrS#XVaZgdvJJma_-{_e={r0?eW`x=PSW5W77wFUwThHFwdQ0+s4KFp7VRT
z)kLr?$#VYZ`{M)1V)K}ZL0de?`Bwwu`uef0jlD(?uH)=I=Ut&fXJ%y|*tPIkNW5}#
z@@w#Zs}N8aXbqBuo6HpY+tD0C(lc~T!@sYp8~(62$gjs`xmZndxi%YRE-c}VM9Nl~
zZBc}JW0-1<?mYXoVSQU)Y2b5$&WAHd7q4F__jzns(3g($8g8@uMl>)Dx2Y1p@mm_Y
zI6m(sCr2;7dG6lcbmacs@}<eb7xx8?bkd~dUi?<v85tkjNE#Mx{({!d-|t_&KD#)v
z;t`MaV#s8qc%j&k`+`PKvgsibdHtW<|6)#l?~+V2RKAhxPRM7N_=`;PwXOFo2)q#f
zE9W$GCeA&~`pYf{zg&#*Ht^g<@57}tN{%kt@WgMSA`eUSsU^R!x*`XsEFV-8EL1gb
zyg2whcVM|ec$*??G(f>nP%DkzyibDj*Im{7G3-91?G}y$Vl<u@B6*Y;On7m)v(5cc
zo7s4|n<OA_)(4u<8L^(|u+%5O#v-9LzD2~-EAL+!D)P}6H$mBN1w$*_k?zUcSMM*s
zpcTv>x8^_JZ@c|z5tTZnq=<XE0oI}RMT;Ql3h2^{<O}q;27p3JS69zb8&Zl9c!x#4
z1Q#Db11J+49@Y|@r2LTkL|T9n!c)8e^XJk}w8P%EHlHB~ioOO~@1OrniOJ52JY-u}
z^qSmRT4m;|TjW$i?^puaXH}S<X80kmrUrD<xhWAeHK3r8JefQ-@=8cbqO}+L>Nj3v
z{85Y~sLH&XBA;F~Bq!-yWKf2E^74IO@a{c44g(#@==P%|H^x67efDI)*n_L6x=4k0
zDWG6hs4%ceGAOEO4lUYcU$7a8(H60SZGJGh$joY?o+^B?SiR11{m3{k);ZpmA)>0p
z%l>deQ3Ovl?=>wo(dZ`cSIKiTKJKv|s%RPLq5!bE3}^G`4ylcUyt*l8$*XL@ANH!*
z{k3y<JZa4TA5cpJ1QY-O00;m|pHNB>8uSX;VE_OjX8`~h02}~saAj_Db8Ia!E-@}J
zWiLZ-Zf0p`b#i4@R0#kB+>@nPUQ4K0b$AN^0R-p+000E&0{{S=TYGogHkSX}{uCI+
zvzAhclHDYmI^#BuEvGtl?5yQ<Iw#5KP$VR=<|_m#Sxvp4eSh}?AgPDl%;q#9gvZ5w
zKLGT}-$b`iS$7=7T^Y|sDzk9+iRe7-h$!*p5qG?z-{?I}(q$G*XSq1+9lQ`XGbyf8
z84rgS;(eC<F1=iw6!|R4lp{{UP+ZeoC9b8C*<AY0?h^pH2s{}p>5C%vWhU|(kWdea
zCUrK<#74^z;$KN2B6lg`Bo~E}0F%!GB_=^Ag}n1*nu{P7UJ|8Y;KrU5iy)sdYy-u>
z@Z4A=<J`q$7t_-vAfZhY8P>(%w0}A5+dh>P8G!kL%Clfx<UxYvnQ(I~o8@_`j=J5&
zV&NnpK&jA4vT0YZ=^9#`SssPEyHB17a4((&(;}0i(<w<dJLH*^z(-GTc^~CvL7MOG
zX7WoBV9|5upy%{n?Sgzk=y<tqp9Alsqc^USu^Y*H-!PTl(b0JkdjwF4FN^NcS^xax
z!^Mqo$LcVXp}^lmw7d0n?_KZ?lcU=dEi)8M#NNNJL=3_F`fk{0i+w%$ZJ3Pr#qp1{
zV2U=TgE<Q13@(Q^Cl?oD0*(bSP%bnc&hBos6nlkor}DV*fj&ny=6sBk&Of{$oyqJ+
z;W*A`@e!1bL%H7DIlH^Nqi<-w7v?)L-(U0>@Men++JABjJ=FC%pJmeZmHnw^ZYF*E
z>yI!P|4ILJ{3X~Lcp8qYBHi#+q8oBbYm}F#_<aBJ1?}5OGdT(Fj?V_y{L^TMA7sZ@
z@1b793p+wuN|=2-p3mo>xl1d-@%iAQ|5+reOF9ikXCIFyp*vNdKgA8^@KwspJYt)&
z%LM;%eV?^=8q8(9rd6cnZLydI-V8PZ8y!nQd=Ty=ml;5<{&C}_Xq?s|sHY7EqOgUV
z3os1=hAEdO10~!51JdCfl58nlr7c%$x5Kz=cIla>O*&Ke45UA97%~PH{UG+j!e>Mt
z-Z8*9d|Mm7W!$z)+JdFsjojEa{lx1UIc>nYA%w>glF*xpxf>QzBonLRH&^e8{CDoH
zB-U&IXr9T5TZH+M_O)T+xnYY*uT(>nwEAxD5?@{5R)9{h%=#BEp0tH0vpkpto|^+5
z7o5M9OXX~AI+%zc-^UEHaWHN!D=~l*c`1IV3%qfn#aB+*fTy*I{i+q&=B5v`s?z*A
zs~CU$KHUUWG41_z|9tRU7Yt}wZO;;=I>t1t{+vMV6<i*81A0tno{;$AxkJU_A&F(2
zE62cb)1ch%DrP);&JWJZwm5L$Y{}OjIMfv4EaBi|_Jm~8G|6&O)D6so7^XCFJ+Q!+
zz=I^^vlu7ZL`o#B$mcRs&}@xX>94dRKe(@j;|VWYrXUoG>@T1=o4kB0V~L1i_v@&9
z30RRttoD`Bk9bPV(#EMb+4Kf5b~jwOOJ(u#1)?GV<V6;X%MbAOfu_;ovH`;q5U6;+
zB#Tl5O?Nr(5xU7KZ6Uet)rI)zC)nUKBI}aq^3a_Fd-4OBOMT?MnARYt=(1Ik5%e$6
zAW4ELvI|dpLDBTJdJ>F=*|kB`FE(kujgy6#;V%#YT|wTm=<2AmvmIGIXfP&6wwS>J
z4JS0u7)T1q@}D&@<01%Q2#E^V^#{neAb%eQ0Ji#a3%J!k@F2*1h&etx3^!DX?NJsx
zGGG%UJ2IXIu{5$otXz{Nr4g=DGQ#>yPeL4hK;V?2LC&%ETza#P6`s*thyBe4-t5@m
zFe#hRK?=XEvj1MF6@@j}B94E9=8<NDeHjwR&J?*3j0$GsyD|cQPu>rd6$zydD<atj
zjVIASCY3RNQO`McE`nR6ThxVoiwuqS=T(*wP(FDFH$V=CBu*NxdA0jwXUEPW8Ch>1
zCalX~Z&t*eJcy(iFW0hgUPahYUQ_YaL{Bk1y?I~r5hgoZNcXk_AKlSe+NN0gJWtR(
zVdhjhgjF;`##ok?uJDR11JA?Fh?K<PvdRLkPoIggONE62P6Qw$t1Xz48zjqm*`onA
z0@5?BlS`_23aGZ$2y`A=jj%dDIO%+UD2BuS;e(6Y%u9Ei%s2f&1UevRptz6y_Yu~$
zVN%s1O=5&$y?>eQ3S-C=dJ`x?6+YZ>iVP>8MWUH0qzi#hNkis6Z&QlQ8OA>lM}8FF
z>5t7N&Bls3pArR>FlI?HozWVkTDf&8lxsm~whsuh7jSu5$1GY0ESk``&FG<YJ_8tG
z5CukMQFI1b5)*6K!2u(kws?5~yWNy}B;6QRHz~pvdnJ@Y(<$kaE8-#=1Bum)*U;MD
z07T_dxHMj<O<y=t{?=R@ei`TPhygkKEkSWwF#lX_pRAQwp(vwDkcU7oJSy3UfkY9g
zk8kBBe~_nWH{Uc#5$MR}T~0(2(PZk<D{`%h8VD=J1|%yjsu<daj9h!Z2S6C~HXy+l
z=t%3hEfO3FjD#1H71?m&Eh&2}vk~i8HaYG(w~p&D&@$!WQ-sPeOdV5KP@;V^7Xc=&
zHwz?!0~1F4cf^Mnjx{d`y^yiGK=OB|H40{itT7mGNzhlw;xxD-jSm$h!y~6{Qt=ui
zHwB4|k76Cty{XKRUL#6O5|+c1qL9kR<ls^8LmiYYXFNCFl1a`Jga8u{wDQ1zvmdq2
z9f@WT203~8B~mk@C6aOr!)E0CliMN{bfh2^(qM7UK`l^LVM~rx>bgZISZy{Lfou$b
zI4pvJ<6=6c=%_0Ih-Z^LZ5wQ*UtsJYLTA8d{Wl-pj)o`aeUw+Hzi{G^FH_l3?u0GL
zyVa^l()Ma&xz<FQ0GZ23Q53{3^T5~MMh`LH9i0_(6;;FmIATU8<$(#OggZMDiYBb?
zm`SuH1(-LNql=5H%eOm><4ofs_QM2}(?9!c$ZSI0ag6^QGFQZ^(do}8*Su=qgS*-1
z5|;{bXw5z<h<(;JnmD+;sR7BnXY`lBoF`$JEQrZuCrToe7I_ktj)nt!S!^?F-<>@l
zoebac#tKy$#FuBTi2UbOYDR`T{Q2Zy+eEm=gW61F$gn*GY~+37V${Dp8=PD+=65e&
z5TWnR4qo)O0Rl!c@-euv@8R<oyZ~EKbBuENmV6I|NlBhUr!VzP604pc9NJaX{FYTG
z{UI-*??)N`>C4Z|<VTkg4}&;}ib$aFph#q$6+*5qP2jfeX(6j=dDe&UjW~`t5yIMX
zat45wy6nBAf<BeH|Kak(uzzM!D<wvwWKm?INjpMW3kujs8j&Qmgg28g2Zztprk*$Q
z<s5nxjd<>{Xmrl%ARD{Z_z>vN-uKT=E^h{>#>wd*+)1Smj|)%EaY$(g%znjHw>t45
zZ(D<eNfcr9u_P1^HWK?N%{ul(HYZqJItaA;aB%L}pwX@Ylg`uu&qGovn_aaj2g~FX
zFqx%r7E{g{ggG8%)b)W$4HO6Eik=1YpK;<7;4#uEg!R}9s3>BSsqqBftPYB^Yv#P9
zgAlA&NJR4B4=#d{pkaIK`RxdtYm!jXP{HB6S!r*?wNpZwp9?P!4h9}ajhHxNSO}Oi
zcOE1~#-TE<%daAgLO9BZ&gl<#RWhc@<$P_GX6>J9khG^F5soEkbX63J6D3|e>x{Yl
zGufsN%K%AL4@%p*@Gx(h$we*L5~0x5B%Dj_jmkV04C1hX2+0+y8`c1knn9ik>ID<v
zB?_35HZ6`yQ<*FXCR<{U723v@UPGn!+;-d%jk?S$mUjM$)Q?v1KaJG||AelrcPVHj
z>pPgUJ{ASw1wbJb<q096HdfDEKUu8z!jZz8ulI7e;}m)WjLfnmt2+6l_=bE7i;T6G
zl)x~YxVY&v_*j5KS;=gw!a_HmQoy^pI=gC`*x#W=ts_APZ6FP@jFdUin<Kvnrj$+v
z6C||8<+aRN?W7D`#)m4tnPF8OOXK$ZqcULtf1owqtRs=)*Lpp`?65DWbrx|(5u1xr
z(xTcB5mC5P*+C2f1>}KpBv>)s$i%1t7SbG2M9tO;MB-d0a_QXB&Lztxe|M|%!Z(*p
z`RF$~=o}5NK3t#nh0MJg7~T|#NGF+05UgS722?DismV{@4aLdu@_^N!T{<&<!>O;y
z{eKLGREw}D+|Ub(x$B)!aI+3Ni+nVf*_J6*cTsVMekUNu29CqGZEQjY^8kalOx@td
z`W(bj>lc7$wXwfGF^Jjha`HBvG~wgd4qI6VQNyE{(c%0OBy3`B>6@eYVx93Ncy2B`
zHcW{MU>`APj3f{&_2>*hTdA?9oXeSr?m9v`>7Zdph=J0DA+Z~P*v525*NHe+?$jVE
zYXLf{0~~=Wm7tnQ;XO0e0bL8xY#oG0rC}Y59^-z(`K;J`Gd!y*T3@=RtcwsG_+GT(
z!8oNy$8HVIDWRu)_0(p(`QpgLQMg+^TLVa%GUtomPO8D{<5H;%QzDv4AjlunmVCyE
z_!mqjQXlX*oGB47d6&YN6dyOh;Lb+xuZDx)MmIlS_fO8~h$8exS$Pjc=L!=f5dol}
zq{*Zt7|)!$3Qo>&cvVRSRV(Jq%wq+L1AYF4RUx3|w6WfjYZ0LjH7JLr@|N+s?)NWm
zt`R$`eV;$DuijPPjYf9o3h|$I5#sC8Ic}7kT*ITjFJA_dbl(qzwE|rZa)pUqOrdQL
zM<R$NU{|hn%e|vZ5GWE~bTnRx>W_v>O4Fc2lJY8}Ve%aYfYrMAI~HHrSPUS#5^nVF
z4tfVY`g74}+tFTqw6{9Sw=Z_I*ZZOO(v04NPGZpC?Pkr^E8SsE3~D`;V89b9)5nEU
zwxC?9Zrb9>fA)vqkTgbm!zNu{5s&qq)HUBaxLa;pIV_|}T7+C`8Uo7q34F){j|~`2
zt(T^E9Srg}x>16K0z`(|LA9J+RgCLMz0yc>vSsnqlP#7!q}XctK!75&q!L{-g|0~H
zR6D0f6grk8Bohky^cyg|8PZp{ItI%#sOT|2gWLjux5<*oVpzurNCM2D<~FUzLGwQr
z$%j~<h3Yd>leoeoNQ!A7PWSskrk!Kv(Ov5?(v2LAraJ~^1#}v1{3Urd_j;{X>lLM-
zJjdK5D8bjZLM`DY?-<xP^dAJ)a2f=pGNr!)<|i!WWBW3ri3QZtG&r|KgKjaqdY+Sp
z1Ydi6hGm#LlJT4^|5)ssE7#G*)#=H_==AFHeDHR3Hn`r$x;;JptA2k1`1iG~&6a>~
zr!g1TXKDJig`H{<Le#6OTaS*&1a+oESigqC%;^Qr@#~Z8x4!}iC5osWQqldlhSKB*
zA+4YGy6tLu%eWbu-I<7n)72Z&t+|s%4I1Aet{8T1On9}sQ^Y8$m1xp5a}{(<*FL<4
z0niS9ASoCk)X_~P)Crj(&o~l$ulcHP@Aa$Qn!j9IVF6<L-x@S*w$-O4zTNsU5Lppx
z7!5OQK$J^&?ss>0O5P9^8hCTBBKqja2$7z0(bW5v_(_xa`s<_f?!^&%&>hAKb#ju?
z>j3>ify+88Y?Nv#W%!b)c9GOV=HaRr`-CKL$4ZXm+_ZA;wkzq<ZhQU9U%#GSUk!&)
z+IQ~<7kyH@ZJ6>qfRU+FM*7PCzTD+8UTj@iZGQUTj@~!I_bO;_J`66-&L1Izt!qSb
z{x;yX`Q;{Cy}&~ouFNH~{-$j=R*~uNq!|)N(YP*kfy+9Cw<FPLi{FusHydbGB8Dg9
zM@)7l?YtswvfB0*C1^M5I<#fN8qCugpi{lNT6nrPyA)EjsFK_2+NysQ#6ynQfZHyi
zEktdfsQtvfkRhz>YiW~J2KoOsO9OfLz6uMa3jq2bE9WaduQ>bF)KZnJO+PJe6fwPi
zpiS0BM_Bd13^fab@u)Tr(7$Oa$}@Vqv^ICw<QJn_FlsW*c7Re9wx^A#yKnB7?c*@}
zojbGrR!e8CU$U+Vwa%~o>*3()(z)sXcH=y?2fxiv!|z(6OKB~oLtn)fM(rKE688_n
zyZrF(P5;_?+U(sCtS;-zgYcNO$9o4gfWx0J25&|N+(?5HPaDmT|89K#uGM%5;8saI
z2Knc~@aF3JUl#OJfc_T9R&WfOA;Y&&p!f?p({oe``F{acI8cZq6gN=u5@h85o@Dp!
za%mL6KJHt*`*F2%C8PgEX43rF>-+$YeR8<<$w9jdT-Oj?hi!Vd@9==SKeinkKOOeP
zGAUGPh%4DvEGk_kU#u&v$En}I_z^ljnNyv*nDl%hzd$VF&p+3o>;B!H+CY7qYT4HP
z^zdrBY08cjkEV21j8Zt4oY`5Mt|j>G^;fM3RgI?(!J!?%MZWZFDtfC!&zhSSUdtw+
z|5Yyr_eNNCuXETkzkAr1*OOR!RSnAae|<OHxBa?gKu`U7gs>-6`usgirgY86b-t<}
z!I#&`<%NZ->UR(|&TNlZj@Uoir++m=_SYiM7C5EXd?e15;954`@aJ1ty`9}<(AqUI
z*h-WVkhPbUn;v)FzS(EC^y}&}3hK1*xKRr@)r;NL{xnNaF@uQJZm93Z)UCPa%8W^n
zs&ZxZW|*G9c4@40==8dn(8U_k^*Etkh#dY-W_%-f+^bb@$N=aW0)X}I&foBni&;q*
z#v^;;bnr@RkUo7B_ATYgrSeZA&k9+4rlqS_-5zCb4764Wxj)tikT*#xLOGY=%HwSN
zPO)5qL8a4<hCU!A(*)u4(GLvSSlu+`Z!T5dFvT(dPLhxZCdD6rG$>(tVz16A0zJC5
zD)-jDG8xnV)1s{FjQm3a9Qn`m=Q(3GbM-He2WOG%(N|w@Q)@BH!W2kRJ59pn!S_90
zI1b%gd1zt#hAREZG_cHjra!!ZUU%`r3H?h~ANm`~FbsG^p}OY28Qp&{S_uQzdyHe|
zp~g?~xNkl){UfQETrMi;e3thOv?%EP12w{#t9TuR&f6j$*;R6$GC3+fV7g^QpS$P1
zAMAJjJ!47^m!x)=kNh!Dz4g?8+s476o)j^(#8dn&0=tbDX&vByRmP*9k${(L43;tf
zy!FimgHB<8q1;g1TnzaH>x>$FIfsmp&oy7?A)Oz7Su~+~-wXUY;D1KubJ$}0dF_|;
ze4gW%qu8Wx4wAzqKLIY^qE*ix>zAbFm7zng=;hM92jc%dV=C`b)n0kV$$mYg_n~yB
zdW2LVPC9#E^#=EQU47^Y8-=~WWo4LhD`iRtbc%0wg&U?bcP#BIA59ITpkoXY6wPFJ
z;)YWwg=M;{+_-8-Rg*bwe!yj56<ylYyPzTUF4APvS}}%7r|s`Fs3D+L-?WXYTYYf7
z72PmRRv^=^U%G7VtZrh;;k+`_@({dkxTZPH+>#w+Ql_Qcs+p9{JggS3yq_*@$g5h1
zQPr*>qg}z4-iX|PI(qSJM0dIehcC;aX^HOI7L~=?<LnYC@}KnJn!Yky>2)We{XI=8
zS<IxH<zwkq9&@&6cAW28KiS{fh5cW9U)t72k|g{YennZ98_CvT@bv7w(AbtiwAsPH
z19;rMfNKh=1X}A_l`v*N^V{FJ@~X;`1nr(@w|6zuMykq;jEu~TjEsy!xG9V{o7p-1
zRek-F`Pwp%t*J-0`DEs!o($q|6I#TBSdZ+mbz#0HdKQejnz)81tKUiYTeYhPYLw^(
z#s(8&&FZVJJ8m;ClwY0JtAG2q|EGVFxs&>p(3~^BCK@;9;_{s=QS~pYv&8MxSF3Vj
zmJw~5`fJsh(rn+CnsLdbZThWz8q`lSUCsDjUswZT*zz^3@hWf3`~XB!wF%0Dl(D#a
z&bIF6yE28BXO?JAB0dgwP%0s_t}rhymzS6BmX}7?$yLc_XB8=p`ZCYU0>7=YmjE6C
zP_qhcJTogk^m0e&#2Q^#p*w5GY?{^1IF5U;Ad}2nkqzjUOD2Wt9p2;tgBM33V<yo}
zd=~OS>1gZ6;3m@d#jrCVeb|Yqye?N}x+WkE(jAOOG*Jp=I+-Jb#1n?O?KU4~_e)Dy
zOqzwkSX#=kQVZOyau#>>mGyBkZ#iIT8C*T(Qe4c}4b9TLowS(R%!ZJ8%|XaRTw-Vo
zbOU+JBHblEvPe1259XG8wIIA#YVj=IduAVAvKtmMyWtEY$tg#SWr2=3Oee1#FVy|v
zBwojNqo_N^b8MfbGICJ^%&$<kN-AVlhc*!7YxEL9OTP$h53T~X9yfAV9D-!iirN-?
zQLB|`bV{NR7ATN|M{rJMT)mn(hmyYJ)nEQxfK&340zmsiaBl4o<_!+D^+pe<w*V1T
z)pe<+ilAtuO3*H@-+*YNUWg1Mf(@3ig(+2vr6o1L&+YwC7oiHKajYTlSV~u*p9ZKH
zcvX8@2};{#l>Ap~FG;xO@2kqD6pf|n`SJUPl0|;B=|yJ`koVQ!kiO9oz(Nwl(+AWM
z6dT$m5{+L4VTBm*`z~48A00Q)M|JzS@nZYEJsA|szk_ogUGDtwLr^kLf#g$C&zUDz
z)AEKpQF=B$Ig}!cJw>iuq@LpM<`z5&Uf|#NwZH&eV?!KvLeRFnsI$6(LqJWn|I07G
ztOuX)A_Ff*l^fmR@n5TCSH%`7<=Ss1Lbe>u&{RpBtSN$J2bGV4#4%XCF2k(GJ6yBo
zyFFb~v-RkZX#T$0I68UPY@8fxiUS3kzno|QApe@F#;0L>`_gTBHf~`rc{{bi=95_O
zZXX|zy(An{VLZ?)MY*X2qNO40T^=qr!XPU!DP+z=S)P2FIT3l<&vk1h2fT5t6rh7)
z){mBE=RsnQ0$v<M_O=%?{ayrF=5q2oQ$e4ot$v}$tT{9XU1KlUx$d#OAW;#eL9!2L
zFHdU7K5hHDpwwk%2C$^>>9kU-sUx@U3<L1gz)d<a<>;(!?+f}BugWK85m}r3G?)rF
z--ON9B)Q2{LN$bHMx^Mk!){xvbTq%X8iMc++^1o=GLtcsXn`?!0f^keeg$>&@(}lW
zM*?S`$o&_qj;SUY)V)QKAGhx@8lxvMEoMN8tCUJ?nKDi$6*|ErcvagjV}<0Z+nI2E
z3`(JYXf1dT9Yw?dgx;_U98WV@2?F-EEZMl_De^b#A>%M*US^FfcjY_~Rr~e8!BDE<
zt%tYU?LU6MEe#)8NP<XK&?-KqsFN#ZHt#k^v4}hpv=yL8m*lg2f;(z|_?6wI$en>~
z=}hekS*aJq@wzh{7HXpJOK#yHH^BfO1u0Cg$&ePU&4z>9zP9M(igJMvqGU*#`X4AV
z58q8aMcb_4r{JZsHG_u7VT<g6>Ba)bo}TfoSF%|uXYNWu;3ew)bo2DwQ$V?v%r3?%
ziP>e6+hlfuA#M+D5i+9dUg#bb`C2h`??dD2-qWxl4w{;i$-y`#V+*mweg-o~`O$=G
zTChoKO0nR+lqF*fW=Nw^4B@rRMD=E4d5LccX?R;`=g}P`Xm?LR6Rf*KRvz<4NiJ&x
zH0{Qq9|^+14RzQFP+LIWYr`Jx?HF+jaEuX{!V!8DkFlvXu+hDEvO)mb!<zxMubta)
zR*!&{E0qKqiN<J!AE2X5ZF$MM`=p3c&`s>;Qi8YMpEu8+m+QS&skmCM$I#CuSfxo&
z|6GN6TgU&<K$F}FNAYmf6CWWKM#yFw+qa`mEhC!a_y(q#_#vtuq0PH2C0fCFl9R^X
zRNwFxTC7V6{#oDP0(cxTui%GzA<8rTPJXM`xG(B=_``mo4pL45^$^2rsr?rz2*er;
z?`5subA@uXRC`e_*2|eQ_g&@*&i0$(7<EI%wT;YcY~o4$4b@n9$>&pr-BJCi=X}o}
zV7gDptn*H_goX{pyKq{p!v=2a;j#$lBd$J0&nmkshPWPAv;9#YR2ApH&30y*B09`K
zrZFB1>Yo*_U7YUo)tGt6<&%O|)G95glsYrF%6y>eV+mgjyg)3EDPD5gD;M%ft3J4?
z&o7lftFmvb-qYFtF%<NS3J=G3B_M;g$wzH0K(%~&Si?iTe+cv})VP;e<V01#W2pHw
z*u$M*$bq%cCEyDj))wgkshaFAVC=8o(1XX$ho=Fl9Zv9w!xCL5>h^G|;hEw1c&`p8
z@ENuBm9i7#ruLxu_b-@!zj^k}ok7lR(_==W9b*g*XPUdG?&;%aM+(xTcA<Q{44oe{
zf#>bLtJBA!n-M<e@0pHm+hg#VkC(wuPuBc~7Ne~CJaF>HziAQxb_)*s(h^=IkZU?R
zQx1%=6*^jVTQQVyjI_|7)86aUHEmghWSKYh&muf3kpzY7bo1YJh5l|!;QOu8-;;?r
zS0LX9IntiZL}`gUo$&O`7Ub|C1BPCs`{eI8)v8r?I<6|GV>RIbVAdUZHCvtZ%~mD<
z@tW1u+1hgKo?G7>&s_+w{_<z3>$yeSgtw&U*TvDMG20efI%fJdPGINnnBp`9N5>6#
zsFjj<H16XWIq72PY6@0`mxk;tSEE`OC5!AjbsRz!JT4J^cQTYXKO}6xIhg8QjM4o*
zg_Or!G^ayqxO^6-zM(v=zBt#A)c8m^<WlXqa3XrUl(w?v`OAJS+d5#dC+uwS;p6cM
z`E85CC3(=mN0fwU$`qn4Q`k*HRi>0`jwUhUZqKA>)XhZ`-f0|D)!0-wx2Ce>^;fo{
zL+1goZI1mwD3CO<Aowo}M|niwVUZC2n-53)Ugp7)Vl&~f?Zq6-xX@hO1lD})1l~gU
zX>04;5pWE$i>viQE-+<loeRn`#xAaU;rOB(=YsPallyziRWhI~%lg1u@wB&h&Xw@$
z3?6*yRcusHcUs#lhP6WA>(Cg($m_aC()81SUkC>a4vu$L1Ac<)Whru`UJrZi;CR@J
z#&}Qclp-9+m6slimekUpqK>A(h)EfA2MXAsj~|d9(MF~-HGb{s6U$4*nN+alj70P$
z6tJ$Hd5@Qnv);=^-mD^Ocg~b?5#LUaKHsC*I{Zp%7Q{<WRkSCY%U4+Eih)2$|68lo
z3^77f^Ck6X<hB%5JLh++m9=TP-ntr>uHtW~*DcpC<1Y8Yx>cxc65T_M0B<j`>?yQ6
zsMrHN?D4I3sIDr-eNY;9I-==@2kSvGEQ<qYNflwwG1}Wi+s|!Ije9tB0>mCwffRkH
zd3IHP*3Pc)fY@#?q38-@j;t?1UfZMuz~Cz4s)Y5fqOUP*XRyt+<8k*ZY1T{Iba76B
z!N@iO!wmtIy2I<FcUz%)Hx#<RM}aQkA69K29G>hR>>sO8G&;~atN5wjV2Hu=FS}8#
zye!*v`j$g{t!O-h%uA3pL$-a8k?|GcHC9t4r>@>Q<!4O0YngP#>cp!8i&S6V*@eh=
zO6I|H`~)A30yw}}CT<uM@;F%!Y!GJy%Nz|I=n)|dqVKzuQNv4-m!!pQ6V+Wxk$)Y~
zf!&=e==q!rQ2RgQTr*93^w?#4(q}t6uWcVhr*UyuBhE!?`O@e6v!smdoq2PmPISUy
zF`R~Z(Nw>&Ol8nkG<D6|&pslvzp1|8wR*P|4JeLa7md3k@@-@r2-zzt8Cwpz*rEYl
z5*R2=4?6*(QVFni+;^x+>bUB&E#>kJTlN5^xh~c4abvv7kh|MD8x8Y{0B}0C0(&&!
zs-bI;C+Y-I3DQNh)$!ZOkVI^h^*8n0l=iJFLQ_l;6K@s=@lEIgkgIHjEEnaW#EU3p
zZqTKyYQiqBVru{sjp;5NinrMGCb94G?K=8S-vPA2GasZChE*npvvsiDECg=?dQ^Q~
zDhKN(Ab~m1;#;0RbZsw6(~?{=J@M2Cfon{Iw=TYP*l}s4m0*EW+1*j)=*<g&|MiZS
z3!42yDaI2{_)W1=!0&I7MT)z#Y&J-Zlg7KfW<gs)P{0_cF0mx3Y!O0SDH#c3q10D$
zk__p0h%xMMVSlUWRyM5O00*96&@i=BES&ask54p83$zCt1;<WMflKH;(iGVGB*vhW
z6CK)MUgPf@$L}9P4{-}MA)|DxgGW({o6o`ZY49#;eW4&z&i?bp=>_nMe*N>-?d7NL
z;MH2G%A%O`NEd>IaC>>v9l++fO2A!o)9gU(1HAh$I)#M=9j2qhfhyqXv+C*^0I9CN
zL~}3d->Ea_&#4y6dmz0k1&Mvw*O%PcSL)V0`(~u1X7@4Qh-aU>3OZj2<42SS*IcN3
z5KZDWt^5%y80G-3F4bxs{+q$u#rQFYy<0VtoT_fk#8hQL{cg5B%M=Du#eLd82%Gyq
z@9sBgzgK}uGH+p8ed&&r)n?gJk13&>SpKK?jT4wDXpT;CUzYe03WNBJgu*h;@X5G-
zdRC39|2VIohK=ffoYzJ9xYPX>T#tgSfC6bkgKc(RM?Nf|3LG$+k7fiG7rr>m2pBlv
zRsoDS^_tXD<l9d&lR`*)+PKiz<z~Y!sGW4(qQ-A&Lrco^5>F58@JOPKeufTp%WO>s
z&z0E&pChQyG&{EGqgZByv({0mQ6}o~VJ~-n5gLFZq2a-TI_R4uJTyE<Fx;1OsEp^~
zK67?jc;_|Dgcm*p)P*$&E7f;qb*BB%Q9+Ee<?NvvVBvS_jTu1UF_{UgENjPBx|Uvi
z8MRcTy97^dbiU+3i*TYEPgLZiV1*5+SC(nzv|-syP(E_Eff5%gzu^<P2mo!p9n4mO
zi`nolCLB^JYk(4Mj=YbyeJUdxZDbYs%2E0f3hW6-L@36$(PZeOc4sceCoQup6(=U<
zf<jJ8n!d4Zo34|JMJR>Ju9e}FXXc14C5&t!hKCg9G33N^n;68BC-mm)U=`L>>8(Qg
zF64r&{vAxFQ_CLFz~BG_*6weCKi^n39Vi9Q?u0CoI`J51u_}Prsg~n!ATFq|w_+!l
z^Qs093Qph@MM&g2+yDOa;i1nLFa5FNsOW*9s4;KWS%SFl!<4+Ch%vdSjQWMZiwc7J
zI!v(gvKl!#{22&gLJ{4kn|TFPxSM|l$^BXFtaw)9fI%M`|9)_ER(2lk?&G8TdxI@V
z9yYe~u-M2TigC!tlZU{l6>5=O;N?-pOW@_%@jY;fV04rfCuG^mR5diaGO1&fd+6{c
zz|gznE-AQhUDGy-r(QB_q!1XjAozIP3_k6iybrb-M@{XpM!KSp1K5jO5xNp_=yVir
z-!=AsK5QQCp=%k3D8NX#QFo9~zEy3dOmY4(gsdGc3_FNii~5LAR;DsVOLpE+Jl%c%
z1<rK^tW>ZTC%VL4M1xBKwrrr;xG_{~{-@d_U2i6%t+f<eEx}Yl-`Y|zE%t+@G`LpF
zs?QNl2nN?bYV5=0MHp6nRSKT@)-gwVEfr=CI>RVnu*Q5AP&g}=oEcS?YDi*?)Kak4
zel$+?y>aB}JC@RYkH%Kt2mMt2{STh{SW4F)^ljR;+<`sXQe>l_pLX}RkDA9TQ-_lF
zNWh9~!<?P564=v-G@iI9bkkPIM70vFu#8rFc0p`XDNwo1EjWg`A-@MPUKCRz9*_}I
z;ZF@qXjywC{z}`BYs|7}s0hXZE66KBPyUYRGEaWQ-$GL3v7NWbL@E<3$pqmt`Qgbe
zco;+zPE!(-*TMFXgZE0#(STA3kytwnlF>COp5cqcCyz$ta@7t>S25mMQ@U9YGs}i4
zD47p;TFVTdJ3*q1Wk@gBrymQC?zOR!dWjiWP%TdR{g_S(j7pyngNg}WQ4c1y)Yx+w
z-uV4*&J{0awUnnwnfO@a=&13l82OiqQ~*=qsBa+(E;vEp9H$<^sT?(AtSq|o!p3n<
z3DLILyiZwN3aQ<~77pobV>}R2dIvZt<5pG2bIIRrHdn3kkLp$28wG2xe^~uH3#irp
zU|4O@HdpVvN(MEEq+_tkp=_NqcD|z1ES5dYK2>{O?RQ5>J*9Y#l0Ivat?Q!T2~?`~
zOHlki8n>=C%cM_%V`3k(^w8~ycuTeeEYO|6aS>+@S0`ufbpF3|KQ{}6&svar?%pUN
z`dIAM8mWT)FkUSN<IjJpv%*k0=P)r*!-YON^3-<5Nj+8WI4@NS5cGKD+&wy>qRQpk
zHMxJ#tkvYdN`{IB01PMlDcQo(y%iiHZiZt_GD&g-l_zhdNb-j;o20Z1$bdS**KT}M
z3*HZJ&{d4jB?U25PsHVfLNfm&9uJk?kie>SwfvM^hL!n@PDR_*VaofpU`zLsEo!L&
z%U=&;D*@6fcU1w%6aIu-#_Iz4*56=K_GpmwR7yC!!<DsKkbr|2%%4OdN(zd(D1jQ+
ziQ0=y_zsHI#|J!XJ_A6W&z7*OcoAPu@}l#+7BveiSwzROWKATeFr6v(cDDAlkB#<e
z^RgNw1(zqS=ii$AD}0}_oSNAd9>d>1xWTOMX?{%)8rB6@dWYF8&~;b(u`EN{Le<sq
zvU}}=?1x9hcY&1F3o0Zn{od)jy>m&CmQoL@!lEHm9a;!Ry0GawX$N!=Ke7q468f?Y
z7iJ|kLC7%f7$$AjH{iPS0>+J8X&Vc=p(~pz9*vGwQ_=3WT~epCy2x<>%=IAp8g<F6
z*SR6qngDkCvnN<dV*8d0cB>>;W)S93z`6;`097t<(qS!`TOt$XR0o`B&<Thb>$q+p
zjG+r0=Jc=ta1QKoOxf34R}o7{5f;=bD1UQTWpoAADET6xM@%wmiWjFMCJ?ix)HrsY
zEe3=w0L?CACrNcBI8Dy4;&hH-NvDYStSK<bEeKxys_l-S$~UXy-f5{BPMV+M6dd;A
z<9I1NOLcNpwg$AbgGx+#%8#6aa}x{VhD?AzCF3StEOhTZb+0|7<E&kqhQ-}tiB+fe
z*Yu#^hwig~9bQ{wLb1xk3DC-~#z~#qU5xdAHt=hFDg}$+io_=Kdy2wmX$$LVdb%&C
z8ACF`y*$Gn@aPa}T|KP<NvMscrkFHhnUk~;L6sVzJ3;4qyn&}sAV@bd;EFKG7U~;N
z0FZps%>3Z+!Q5sBv(fiorGn6%!a;hyf(uU6*pxtB3>_6TC)GK&1E6z&2`A8>6DPnt
z4?1y#f+TdnF=(-jz6^}1gOzQJf@eNX!jr!9R1&nU8dM^ID-z;`mC3D8%Gzq+N%qMM
zvv=ITNY-{XH56hqkT%K8N%FBXY6Yj@sLN+vPtBPw0^9*F@M(H0&UPSw%yaG@wtwAk
zeAwMGH)QF-ktRa97eoB<syDq|EY{lbN#o>!jq%lQb|+4UG@GU`4D7>MwWCr|Rw-Rq
zbQy0Vqpx%ad~sH#T)06Yr!g|<S*(FgG-}1_d9cLnM}Rr$M}b9FJA<JCrPF)jc|fHF
z)aN+#ULW>jfuoKENo^4<DG(o<3wCg>De|D^1_-o?i#)Ffeba$Ctw;vAJV2Q-bPc3T
zNIJv5odO;^E2gf;_G<R%0SSiv?xfnm1b`}eUQoSc)G=q&p^#VZU6bXfIul+JeT|cp
z+Kux*soOEwH)sb>tzYC3?%_tbSxYH;QqQ#p$k=PDSL2qg9I`F27Fe2xyIWaB#2v<v
z=(e3hSkCpP9c{vfd;IHhn1Uwl_|{l|nz8}8YmKhE?GWCC$+$&#7S0V+^>wO*b5-F9
z0VifFTJbb6HOWr*?B+%Fva{B&wd(c2znx(a+9~Cn;$?R+sQ&nuKWp>s0hyu3Mwx)a
z5A8e;F$zS8p8p(hX@OCBw~u+5!^6hWN%-mD2zF>kOip26XH4qljYZ+_HeRiT$H&dJ
zg4}y5!w>5)o^FI2cwi4c9PFRW#=Y7f4kiyk-2(jM0+4@vIOv~u*7|cG<4n=i$R37+
z{PmJ=4zRO(Xaq3>*sS$cjfAfO8>GrzUYG@hdXjvDVYRjYo+9w1uA;`~Hz-NV3-cPJ
zoaPI_lXT__z=M)?$12UPF>d|IR6y&GEF-at%%d!(qerarn(McJTo{&QqIY0v_7^3S
z+1$@App6Ti{RIQWY&DKgOzw7-rW}}lmQZ9Av^XJjUi(~HL~*h(ILSm`$OXU}`Lhdn
zR)x{tKm|8`Z%xLv4qk>x*CO%=ppCe~JQ)SOmSm@;)3?rKk2-Qvc-snK!~}o>e~brY
zVMSgYb5P$pIhv0?Y%<An!TF4kuG2c;j(nRW(h<fN<On!CC3Lw2M@DP~iiD@};JzK7
zFO1nQCkqf(V+JkQn9VF-`Z|K=_we7KTdo2hIjbf0`lVJJ;C?b^ng8u@!EvXi<}r<T
z#|uIOL6M>P=k3kNWikE!x4M12nkQ)}vuqDM-%7S#qkyEms_oONvBH~b=raiM>HY4}
z-r>Q)o-9wtQrqEHm>k3H>?K+uRO|EB>(6MCFmv_CEf;Xy8c|^De-Qhh1HQR+81C;L
zpZtf~Rq|RHMQsd#Kaa(yi_L5Qu(7>&u=Us3O-tB(r|m*vF6e{3U#Xf6Tkg5yRx5o;
z-tDB!N8B4hWBY5JD|Zt&d;KMV#oKetP5vg}W`JE%tY(h(I6>Dcv_%sLm{@CErGpDf
zu@XrXFQw@4SyRpw#a3%XIL|iZuzDn2MscWgxO>>d$ny-OT2-lv@Cr7#S0X#drW=si
z+nVE=5&VP@UI(t`eFtp-vHz*O&y>oSF6=NtIp*6k3eWz1>CJlWdHL+3bk@dXWAHEk
zbHOj}jmCnyEu`hVT@rf0pzw)xg1q1Sy#F!S(#X6bJg!G7yf6O66E_Wx1wx18RF`~8
zsoc5^F5^Kg<`t@fBEQTBU`u?6B+_Q|x^-%e<i1iJW(VCfr#tm}Gk8@lTbdf4odv2(
zELOl|ivUP2fUwPLieqVWPX}Al(9u9ws}65&^@d4IlSN6~IlX0@q7}0yR?1p3^3;$M
zp>Hjv?@VTc!3<nzK!Sn?S---0VK{nler-<ZtPL9mVXrsE;L0y;D-km0`x=db>x7-b
zbV*%%1B*dx&rLuZ!wb@7@We7CK_M5dK>?mBYvt^_`17B7(~9-W`tfRQTHY+Zth}tO
zsu-B9;q_p`>Oj{sBN_F&lM+Y=FX|QR@HE6jk)?)#+Am(v1UcUQ<>c3J=iuW}_-^;)
z-u)Tw9qj*ne*(K1JUsbyfX`$)<q~9bHAsKZT7(SHSDL>Z9>9tEZw-{z!kzsU7Z{U#
zb9IUBt)&v23il9^RAEI>i{h=TXk4(X;%Q;)ed9=~E==y_B_#N2<z?AL#U;;UpaRS}
zP(!P)4@4Mehzr^syA@n2bUD=g7PTg#F9G59!LvZ^NNB{}9msmK(lN>meT_O~T$=Br
z))%oJqwA=P81w4|Iwni09e<S@q;lS}ML30HvUccpZVR-HY>5$#*n<YF6&%ImJ_dX1
zl7;yN?lx_S1&V%|QW`Bv@P2YQ{*vh3fO5h2`}l%bVJ&MmhT?bW^z7`ca9*yTofTK>
zmvU3@btz73KYbx-IoX_2M10uY4;zQOn}u4g3o@FBtGy5&&@I;{tbTH_Drrang{(3g
zC!5d6%PQBUd7h3&wPLP_QekyiNy))HN5I<HWw?2CbZ``8qVt$E0=8)6UOy_1k6Ri}
zWhl8qiW2pJ>cEs<QY?^K21bZHFkl`S6fuPhOs+{B^$FK>kQv92j3DUErsNs=I*23W
zqD)2M$60b;ER$Q7_);tUWS>^;%|w!lX3$K9+4ydVs-On`i-Eid{Gu+m0|ffI(vSPS
zIQpVHqXGQ>gttu%-yLsPGXaIPjVGG|_Tq1G3oU8W-stv~dnUiHwx&xxuxpX)4_(uF
zK6e?*Im~)FrKaDeuJ(iUQrtZCuTQ5Ua0h?;cUkj1&bUeU&W*jj;KRZ8?#}L3gF`r+
z9I#(X_mWtp@;RaCNAH@!_Q8HL*f~1*5WH_5HG_kF@8yD|8pvD&=@;avqC{iYLy3$r
zox?xQyMA{7;yEz9KRsW?OrpVyU=_c?-<L+(wFTW7J`HID3Tyy{{|Pqm_iOU4s*eA@
zkuFp!_9L9{-BtQ`txOCU#jnEISq+&jLn*s8OR6mX<%x|ao_Yp;k-G@3=uTo|(od|t
zkvUgTou3qee5N6uaY0#oG8|Tiy>|6W3@6N9+JYl}<E%cZ?E-+YCtpPpOypaF_#oz>
zX2&9ey<@)lln)LY4NR&upX^irW1I#XJB_`coBKZ(Qc)SqOy3X-mm4zrVdI}cw}a7F
z=$^8og7Q0t{B&(e?`!y&FEb^MJ5{Fi@e)me&H<8-qcaSNTf-|Yf}nrF*1`VH?#~~O
znjx8PhvaXtyT5ZVRk_W@I-FL5G@=&-Vh-#QQ!B%;>fF^~h#m`JSgvr!Ta}~$O5@op
z1S0g1>0?IHlla?Yef>l{>D1{FedSxQNuU8hYGq?+DiuG;J@I2%?~8Ga2EJe8$xw%<
zN3V&R@=%m1fwiS4)Jg@P>EkI5p^DOm&#k()tv`7(SowQz;uYlqKsoXT0mqIp2!6q!
zAsLvAH!4)1*)`}vNi|RSVd)CGNvy%+lGQ_79q^R>M~_doLC6XUG{UEftmo_8=ZYff
zYiiIj&JrVMeD2(O>ER(CmPN;h3O{~;q`FSy%|nFWy<<c#QUt{a@;bq~6mT$v_XyT0
z@STTw_8_a?xq}TuUF`gp@kW?5;5gi!2aWa9;CM2W9@9=Ic^{SYEBi6s#F9)zB~h}S
zoRDh?EX*&$j8vV((0GP(1!E2&6*$tW4ac;&*U|dSx5n!zR5*m}Te!KrRLXj|)CyHN
zCS_fgYK7Vas$*21z~|DW-Umj>>1$hM#E=f|aQ>LyaQH>}Hj`1O7)ZADthuG^J!C7Y
zB^w>NI6p-_>8^9|;9CdsJ63@JICsU$-##3#a4;Fh67z9bnKy#3(YQ-7i^*J-JOQE}
zdu&#8CDPrgV?Al6BV2Ow-ivNf3s%-w;9rSbrZ!@(qL*@hcQNdT3gya^lK$jR0$VFd
zR?-7A7#P?lnE?002q=0StYfW@tQDM8?8~i}5*%&EEdWr_UC=)I?0Z7tN^sR)^xCwE
z5Z*JUu9`r4%XUlYh%l(NDS7c^M|jU0j)a!c@K!rHEg6pM2S&ze=^K|Pdg^*A5o#)e
zR<Jd^?x8U;M*`qTSnC)aE8yT@^wr-*6&TF4opn$&#g#Bg&UBsvcDm084Q+t~4KjNu
z`?7`xX5`P!$V#VB8Y8ZO8l4(tt=AG=!Q^z(YTI;(maHAA1-F8o4bw0)#{d|8z4}y#
z)78q3ir<4yvLHSpREgd|t&K-uXhV1)uKMJ$Ft%dm`diSoLFD1<nZ|?)Yy8ygF+H-1
zqz}Dp^4_+@STnTM*QYPfQ{oPRvWxSawToxu7p{{QVmicRpwjBOeaVJSDj-jFTLEPV
zQ)1F&d@FXB1kHwQol~&r0F$k^ZQHhO+s4_pZQHhO+qP|+XWO{vpSm^kF!PeiQ&%dL
z>ZDgzukQ)%uhpoc-c4n%I$^2IAasW{ViKRjXcy+QN&my%ba@q!_E~Sn%5B>O#{&=g
zm;=3-G3XXJ<N}h=_3P1jshP{D@2fQj7$fVYM<wr(<gw3CYxO%QNo>PkRK3mj-Do4k
zUB}HSFKYH`hfc4Gqt2ef($ETO5A7PvCe@_!n_6V6N2j=|m9-#@*!n&^HpSvU1Im9R
z{kX^9aqzu)HVY?1J<Nl-TCL@`&KhQ0+=7(0W;D*ulvgfC;KJYKv&~&&VG2ygK)8r{
zcQ1*xHs_vux4>ZwKCl$70U4#uwE{KvB7$Ii`H=^H06`QYd8()P@D(<UqsJ~cDa{=K
zs9@NE75eZ1{5=RSVgFnKXER7x@zKJ`k1~KVa0}yy9~g5uGOFnOG+>khUh0ZTcR2~#
zvcJ0WU+1#K#gcMg>Y{=cT%x?Fy-vq?L9nfdXpWo7vs~uoe}p?RZShU(745oYYqV5Z
zB?iA*RSPr5)qzjm)H8!vu$kZDvIivw0QI@K1s+3zs!Elrv=Y{S5IWv9Tn!X&LC?Rs
zjMY9dVGO4^8<K}T%dx;o?ZjG#ncsz9g(q21m#y6ngVj$ue#$1NuSzHW`%`QpH&<h{
z%W<hJ>KPbOvxK4P>>==K!9Mh&<4aRHIj^MpPk76R$|oa;9z8m5b*ADu_rBG6uVdUT
zSam40hmmDs*IKD0`RPejrKSBK)Hh~=oLOeSbAttxQ<grmsE^uI#bf1BkrH4lL(u<x
zr}60R`ll5Sa+f!4eqWq5H8njxK0H2baCTFz=0H_yV>VytkUouS%YHd(c}M!q2CWT9
z=RM%@cLN(XNZlPr7`+zrb$om{e^=HuRyEeWb;>)P7ohCR%AL}feadJJA&L_sOC3ko
zsxD=W%l=zuWX|$F(O1^4G~uHwV0RcP>Ir;&nke;&V`<`o75vGb_TLqme>b+F6X-h?
zo=CfR*tENBEPI*$L+F&bMN9KE?;E3kwExN}i;su<<-Po7uQRBfwex+H^nmT&8PU3A
zZuQnb@^RM^Sv`dV?Jcb;)$<MZmpq-k>=Qm7X>IZ+vD<Y;vI1xYjj~LROykc~%)_<A
zm7m?~4t{j08q4d3$jm=e6~5{Q>npsN2B+p6vDGEO&v&?Iw@b5^`vW*}WjW3%B5O&;
zTP*W)T2j%dkh98A6jprXO5X}5CsxAWGi5IDlAu1;xLDV=tTA{&X=?pme9J%Ev8`^e
z*j{6r5f`A+GH`<_nizYiDUM+e@@m<Xk2#W)mr*0}xiL)?DL<eTeRepkZ9{*<JBm<0
zzq$Xt8e3i+KD+X3pIrL*7q@1F<M$lrfZ_W!Q6l>IC;8c5v&3VP{tB6wRH0NyS?yu2
z6`lGX4Y>`dG&lS<y1ez=wK|XV@!$T<BnZW2<vStjEg#SSD(yth#uJWvPt;9hEhaoA
zpG!a)zL44**{o+&mCc1o+|I*A{rmSj5h$$X%xLpk?kr#|j%x@oIG;Bfd0FSVNb-tG
zVL2OD1_wU5>X55^BEIfY&?e)zhJTFdVmco-7y8`tWI80zajusKa79-dbav2yPAT=C
zDz0#1+Y~!@x;Q8Tm;qX(MuBRXCzatOP~0+`dTzj-zlOIjjFE23vR!3jaA4x|bfHXl
zxuad&?P_yyTO%G1J)+f@jUv=6$lOrR5QS-ekJSw>mS+CXJGaekdKJ+WmQ)RR*h2cC
zAsUr+xWDA&ZXu!(nf`_h14jBI(I~X`6S-hG>gqz{B9^BOdw(h^KxuG>WGN5e<7PIe
zQpo76<m34(i2`ibXa>-439qzXP)r>-VyN%#j>iyKE6ipm+x*%|Hiw{Vi?bP|1|!TH
zD=6G`Qw27eG4`;xRS%vqXA-Y)wJdYCTt^V!CV5Rcdd$+v2H+&!WNjcM*I!LF$`36{
zmRFh$Ph)|LDic;o^-m9hbdu#S;&P?tn)tsM03WW%0w~^OLo%eCwwcl9%m&77j?EF7
znjxCU^EYSNR9Ut$6=tRuCmD0x0=vA<5F0Hd;LHJ>&zsj-U}vjyP3?1uqR;acvx<9Y
zh0*`MksT;WaEsqS<NmR+(Lc(E>FxUdIa*5dq)G=mp3%z^Zwr-w37a!mlYTH*8ci30
zCqigG%krRRf^q_TW+;@&x-V84nU@H0*i%JIWK4TdqQo~|fGASPfP5uKDaZ>?q--*1
z+9~BmSVbG+faH1?ar@Vj^Q3Gr6`o)kCof*YaJ59Q!R3CE2S4Ma@vScT6IBXFUlPLg
zeAJ;BCHMoJogOXe<?t@Dbv+ysr!#qfA0>@uvd0u7Y;nDt6~Qv#iDWG|h#>~U`e^-Q
zdu{FtivRquRXZaGXMCi@Wh>Qp7?EAVIZ~_fS0Aabj;J3}n;i|=B{U?J^g0P=m%%xz
zaqi)GT`xfLGoP{M@jA{<R!(fRoaK1j3zyM%C=k42KD-g!H3KS#zbMk9akKAX!tmc-
zEGx#G<|%}LohE12rtwx#C7$JSDHE9H@;H6Oy?7-5k|}t>F9jX4xk$!PkdJlCReVlk
z5?Raw_|zRp+&c-Qd|K<||9;AitC2g(P5g=Xt#LbTzplCBWj-=X=*-%vTsm29v}@kj
zL@XJF(lRtmPrpi-f#AriU^_1ZB##<Hp^(Btgav@f3VKOue|3Sw@0iMh-4(s%;+QEG
zNS`A;T_%Q)^zdxR*aCNx-TC=wMHnd`jJd8FyPMhIVNSES96epmA%$3{<2xP9s`S_r
zNduHpLc-bu|I3lmEl--{RR7L()^fsMdfn0jjLA7L^bl$>s&5%|<vZXAKg}2*o49Ld
zi=bbu{Rs4AZ-m5UpRCh)U_5h>0v_2sO<|F|(%Ik=UgJIrmz<~$Vtm`&KetVF4IKXH
zj*)#PTlK|Cn)dk{m72_Emfleq8L`ECRJs2|ube`p=e+VmYrCk!nI3(V?ix%XS<9$L
zWJ;oher^L#Q9+k`cEmB8Y#?mu?EWkjBhq)w$Yi7zSk#}GUV7j-FU#<TQK?s0OrOBz
zoo=x73v+4KvZUtd?dzK07pJvIotU&v?pm^0pDP;QnM$4mYvvMT*{O{t4{61;07>NH
ztWo_FKWD+|Vy0C_AE-jNA6Dl*)_LZK3@nks`i+nO#?Pl8ReRuv>?+_m_AHRpS#t_M
z0yj|HL=w%gcnQ-1cho)3`UC_cG&9c6VMV~ywbsArL{Q6zMqe7wuxbxKFZS==rk&cs
z3S|jW4HnhXAU{8uNI}tDPTo<)Wo(!{1iPh;Rvt7{SRPmsCh|`WU*0DqMNcVEbnV0b
zH2o-;);w|$ks#DkVq`EK6-tOFr(_YR#usU?Nm2?V7#t$)k<Ya8O2T!JqnIZYRv{yo
zg)x(Vxv2roE&%bFrrg(`{Wi84+k9|&(cAup_PmJ|7ItOXknV#lcf%g}?1^qiQe<mS
zM=<ctQ*=tRyQz!&#6{wa;12b7qC~kR^zZ@<Gk6d?6v24!S|jSgSBD$UIn~NN^@{4r
zbyBL{Q-EAaXp^m4TDPAArVb~EVnLE{7)CSfdJS9kp5~Y^h4d&x8ucpE?QrABs*Hqi
znntmldNf2_1Li5}X#rs#R%(RJtX2^&MO$ZDiDc%w$D!xQF-&jjb3~9z)?A+mTNTdZ
zh#2uUD0%Kn<u*i`)$WHhzuCHIwor0b<Pcw#tD1XafvP(M17bu#6hq>V9OV{|D0cWT
zZuZ!D8dh@|jHRK3XVLsPjh`@Sl7LPWl~jEy_GQz@CW0s7YS!^Cu~M=&B_jt)6a1Mq
zrrDdx=_o`|mkv41047@kZ@uRo7FZdyLkIo^w;ucDZqqxWW%l~Lxg;hD(|?F7YdZ~5
zc4ExrbyPH&%YVDCD?jF@sQ}NH{5GYb$MZiK8Pt#he)rV>N&DgPp)%ml0q9b+2ds*m
z6?Q0FvT->AoDz@^0@ly(d9&Ic!U0;No$T$to-R=m+<=OV&HbATCD&gch`}<i+>D=Z
zy?FVsD@$<mlJPfD4tVnAU}yRQg7gdym-60}1KS3&6L39h1(a|i%>CoC9JJi*rhI3V
zz7e!jg4=$LgfjwvXV=oT#Uv_zW`1+osfIZTt@L!6H)>;fBgG@R0D>_Gv;7M4+_`@O
zgwbe_>yee%U6BEe$jzL{&V)-Zvx!29n%xJHrLHn<8@h#}ioplpNE!XIfHG-I9Dh&O
zzYAfm7GWBk0aZXBPo1#8qk9;8^vkWN0#9^KrWD|Z8%dAdLU+W+rHU_nVb@9Mj448S
z>fKQg$Q=)k{zsWc5E(!Kas2+oNvblGKCHh%CXtXxpO<D}>+}3W8}qRi^$JxJ@4B)$
zG+t%wD3uha!4lbDYjTE###+TWn`;SswLzH)oiil63P*H@qKw=F%Nxt>z<U92*Ir{i
z759j_y&%Z|UA{aCld~{2jZ%DbU@S@MfK}LBJgJ=R5`EG=9C?RCOF%KvB7dF)E;|sZ
z+QujY*A^hT@gziC@k-j+LLGn+L4GHj$|R__%A4|`QgR~o@P70``Rkn(iyXt``}*eA
zftbT<Y9mEI!YJ?kfUH-2<q4Z^oL*I*9k+M}s?8KsE~su6&*LQ(T2aR!S%2Yc&AG`R
zmU28xFrs|FwDOR0NOU<_aFsKbo681RQzzfD%E5X0O;zbLLo84LbT661h-#8XYfHZn
zIZ|X={QS2QPp&gZdp-BSd&GdB(Y7v`kq}hV1`=V8nhdKZ);fEO!+Wk--vtO!DN{kG
zIu|lQTm)6j4h(U}r7WUcZK^LmymaEPs7MuZ9Qok}bB+`p2p$J!YbXvLa|;(>o+SPK
zyn)(pP@BToZ4GeUH-`U>PPmhoW!=<uv4dL8blQ`>yFJpR9Z&o@S@==(L=_Y-OiuSj
zp^Z`v<Re2f>{M1r3sthF^W{jN^TtMuZ(Ycl^D&^bo$VjQ*{JzWJaVKKmG8kU+_AQl
zl3`bw4mjoBM^mXViwwn4p<$k=AB&EuQt^W<7EoQ@=Rf$FXi*ttEqCO)6}@zn(|RC&
zi5##0*ls6=ctWe@my=ZT4J*np+m|;Kn`63wuz4jbDot2DS+by3j5;R?!bfhR;Och0
zCEhC5NU8Xf5VbmR`&KrmE00GD6E^VtyO0m)F?Mi;eFm2@PNlKzc}e)A)vyC`$=OnD
zi!eEFR$Lhgp+{L-t_M$qS*B`Y+=n^FwsSvE^ApLoBwK#;vgmfK!qQf`Un61udTES7
zv|Bt~^__ySj)r>ffg#5}23Av}MotUei>cX4>zf-^U)BK%B_vsTR1Uei%0Ocf0J_S{
z@+t$AeLLHP;Nlh)`<p}(Hr%p**xYiVv<MJhzuI3L+wpF1dZAq$bRCzk{siY9&gcn6
zXQhKxJ0X=Op=`QfhlPzD40QR)uf&KIfy_<O-NW<W+FlKYz7<{Bax1?PI~)GiRW{Rk
z!{%UkPbB-c#YrwPHxFFbRV2>P+D){lP<HI_z-4`EUnJgeY&C`UnIBVr*p5+I7;H`?
zRylYZPGUKVPLL?0EkSxA^veuy6!L#W{iIWV7<`K301&3rZQ7Yd4L)eFn%tZ;WRC0)
zy<Fz$RW5=B`C{Xnjo%sA&54Kl)}@KQ0f5so4}A#l<>RuozQVOGqcB&ISiXkVT%&Ax
z?)m>x%fR5N*E5P}?t^>v)%JS66AQEV|FdOzW@n&z#q_bQF)iW3iRc}+&^#3d)tuhn
z4<t-M9sq1aBCi+eII_POcwAwc;p&bp0HCqh$WV_gt}YDRGm@U{>{z9~??~N|sq5#<
z8<3%!5`^gc;31$F1WL6RrLG}9G{OW$j^eGZ@oX~t!<y);J56#rv1h4Z)paar3NVRf
z$*ggvI8J6AR*<ap9@edvvhi<CjRZL+Y)Rwuo+ZhA+^euYrw3|Y@cd04R-6@at}RYb
zq9kNy^ch_Xs^=~4QcXgTA9<b|4SMiOFK#j}UL>bP6e_&W2g#SSu|H0-Q$|r<3Mf_i
zA#-OD>AQv{<ucDO@|YS%BX|@X%`gIK4^gIMAy>z6;?I~IP_(jPXk1|;gI4ejq>a?$
z$B<(v7M!x7>%c1*M23|ZkEokeIC^2SPVcdeQs#{i)+C6spt%@xv9)B=Ec6CxgDfQ%
z&?d5u$1$~>8f!?e)z{FJ$%&F}JA%~D)~~Y-TdVeJbLb~I=}^Id5k_>T0B(NLC}<h{
zt41|2S-z!3C|%|}4K|$62*v;^gP%IHPb!=<2mdw(0;`CyBJJFqb^a2VGEg6Rqe8;0
zvm6x3BsbA0G#VvJD*z1!B6Vu2ez#|g;cRd^k{mb7xOM}?LV$BdEwGgbs7GNqfJQSV
z1+c<!Weo2FfefbE*`8Z|hC4kWPR3-6&=h@>xVCS+t=d3a2oQY1crqAtAxoy4vk#ET
z$+t^=1{cmRsd`D~UpTQKt@SWke58D2?&tP<<}!r@`%!9!zcV8OEX6|of|33kz_h}x
z<}$^VmLpX;Uc%Ty^o%Ta0qy+c31ZWKL1Zb5<dOg^E77az-<B<c+dUs#5;TdHFED&+
zquUruyackfDc2?)1VhYrTyeZz3UPmEw<CE$deZYvmuK>(cgJ@d6R&6Zc>c7SvkjJW
z1xT1907-FZY<F}*F-7xhNba@p$g++vclewSXeETC|3`7FloN~pK{MvZ0ekoydHQ>d
zF(N>u2hTr&B}=g$lnCkTvV28&N_LmXUFI)Ke{jOFPPDobFer=dS}G&sq>EC)*}ZyW
za4=_Zsy;)Q$%hz_JYYq=u9<Uy;*-O9T3%^p1+7)#Wo!qv@)>1>rvm!FalKGb8nc>E
zH6m{qAPf=T_1bw#(hutCO#;vq3<{tG6p`HWxFdUjP_vA%G)_4_rNA<eDu2(ePo;lL
zLT(&ATUd0PZedS|8imsPMO)GK-n8?W2(24Z>O@~RY&w;CDP&^cyF?`u7^a8T8?@Cu
zIs!OejCWs7ajPa?VN}y#s6mv)%t}l=lrq-S$lD`^_R+cMsX$_)ilPIG%y}uCXPXF@
z{>MRbp5S|gdvYRlEgWUMrf_O9Oj%TUe-X%M4h?f`TDu|Kn?AW>MV><$75u!?K5m5y
zkcbU91$p~^ANPo$!^mN=*gk2MQx6^p%vA!-Mu}MWPk~T60(J9aN~W|1t5mWK(P<ya
zFwmG)0x;!C*-->dt33k<o318%0LYy}`$q(g@uJFOQoARn3jCj0DjVf4&$~#97^ie?
zwxq9(c;@*E54x{lBZt9hYSf1Q9DOcQ=_8)MMs$}Mp-MH;h$if&)kp|gbox!;A3%Qp
zIv2&xtt%I!O)CV0AQ_7Yb6_SG3lya&WPqqlXGDE{0A@ypaD&K7Hc>0MLO3|Ju|Q#m
z*gMHRd|p3Ig&?vc=II?gS2m;@g-Y8maI8a!ekGXTfw6`xQ^&2dDJ*bWy7U01H`#=}
zjxU@)PHfe%$$qD{?ddK}T8=1k05H7RSBrw$cbdA|FX(i%MLOyk>SIYKn@Q>fNdd&l
zAlkl=TL?Y-DI&~9wH!ofok}eoQ{0GpY<yvB6$t4PWc`vLww<_9XsI#de!H_O$TV)7
zT`KpwI3=M{@O-t+7E)ZHioThN!s-Gxn`u93xm0<Qv1Vh0G(23a#+?!ZC>$Ni^qBSn
zQWp{f7?AV2Vi2Vl4}m<<2`m?x7?8LcGK$!9IbCHU^ri23garS*MMo4$Wr&lP!6LEE
zZfTSjW$Yf*)65C!gj!9$J)83+T1*^CKC5n4>^&bAypM!uFO9C!$pQQf2DxOjkx5uf
zM{IA{3P8=3x}3?)i;0VHZr{oAc?QqwM+1x9t`@~Tc6SsCS39$(YVIQAoMm1;*9wZV
zT2?3IqA50!dNN?vt@}85yaLQ;8I;Nf1SbhKAQMu{I=>%uz&5}6M@ZR7*@4G~U!8=j
zPB&&usG27kI9ZB76YI0JC3cBt2%DCnT-cs(5yOmoT5;C{e=R)Wi|_})zX4I4cm*U`
z>Cle|Jb0nyO<|xCr49kIG1Qy#hYg4>kj+bXlZ(-<j0q$$gf>)I&I&R|JrpueoSec5
zu$6=du-uHqXf=E`JoVVB?R=*|LUPuGM{~jk_xi7Xpb7`UFG-0&w5CuDMCOD|0XAle
zj7u(8`yi@X?zuLDH58;ainPFC;0JmyC<AgU^qXYMw^lXerG{d$ckh7`>11bbX|kjX
z#MF(2Jx6GeK6E%*966$+b!*YVk@IqxB7j(Dx5&nIh>m+rZ?Bx5K??l=gXNPye?ApC
zMK3Atfi|m0Fnv)E*^axEr-~%p#6sO2Lt5+trlxp6rk9zecA!J&TQY9CMlnIryp^ES
zqBW;a%s;~^h4omG!#0sR(%y99*E2z{9$ctIiB^r+QO0Q|%#AR60~b56zCxl-3VOrR
zx8on_uQJ%IPmwd^_<A;J-yq#87#f$%C&C$t)nnU41*b}~-;T4}l%Mkpg+n`3W*i2_
zZfbta7Xi;u)_2G>`uDqWVHFAlVu=fE2nZbdyN6)n`}lvJb<g~93AjWRTy(B??nS_?
zGl!5T6!#98v8mk}8dpn}uHBaVf|h;CHQvUs)wfQ+0un(qW*6s?_)@0cWiM5yUpu#U
zBsaew_hlH$FqQV_-j3(BBa4kqd|hlCLH$b>$)!Y$s3NX&*svmUuD^Gp%O61D%?zM|
z2q^AaDj)>A?_gZ{ynb$3^+Fr+u#RF61%ztq)7HK8%Ad&CH++iW<$N4;I@4FFBDvHl
zH#R30_9S461pM%I^mXPev_3M0&2pF7G)HAmFhC_i3u_8HQP#OE8~p($w*zr(*%Rl(
zboTWLzuj^YMYSYj&<K5X=j*J1m=A}Zg~eisl%mzCi+S-5JHyA(;Scme;$PIwTL@u=
zll?Y#{_BPtJ>bXvK}7(FIo-5NkxI336o-b02JN`ORiyqffr;qm6xkAQOlrC-gV)TU
zyv?dQro{0gcrSNA+Vy5w9bPmJnXcL{q=|GJ*9`!M6V3KuRG}1OgPah$z8eAtYSiNm
z(F+;hmDZ9gbH}39ZC5kPo^%Ou8JkAgnz7ty$kw72+iLOph);%JA-eS@#8RCErTy{I
zqdRrw#()t96L^f4nXR=|5V&xbbi{H-9%Y+ZR5(m>X||xmdq(|N*ASI=-b5{DsDghh
zoD$B`WVk&13|uKC31_t<u32ljF=b^Zx2FG~zg(YBVlB&jr0PuThqyZY><m-utqiVA
zY1#n2Y?@)c>ceP;k<R*>4rQ^HJR!Q^9|6>tb6&iR{A$sX?{b(c4mf(vk!#XG0k0M&
zm=WBxhwPHDhbuUuGSUyWqyj1z)UJ0b03OiTi(=0X(5SQ3lM|Ur;TF5gqRMY1n5$Tf
z9`;I5xk(3L_yNmtDIOx<l%4ZeWyGlQVgCs_Y*iZKin(V2&rV#3S7l~UWK};CNC||m
zM79^khmLWvVmKpj8|0yWnZK+87?gi}z6#g{wq}sRq<nP6Nv1p8y(`s8cmvlma77eG
z%w+aFts%jR-i9jY!=o4x9HF&C%owC==1dGyTw1UR0+MPcFR$u=byhKID`Ntiy&d>*
zU9M4ZixQ=mZo7jS$3pT`*aST;$*K!d<?*FXOT0EDi?X~KKC4Bf^@*QNiQyK?fSEpB
z_=S)My<13}N5UqrqPuWD!T4!*L*6-z<~hmDbu!4<#w1`^7;Ou9+{O`Gie&r_O(v&l
zV|Jx{jvzjO`pLS)widR7eZUN0qrQ<qw&<t49|_UFPSQpBep&Y}Zv2og=E2O&(j{&I
z(;zx<Z>Ya=tGC;UfNxUXh}khXfmM9n+r;r;a0IsOR!wf^y>sNwyeJ|d4LQY#OZ47~
z1T%N+$C4&ycQ~&S8nI;xaws7{OzrwGR$zFrQxH{FzqO;XNop#4k9J%klBrVO_kU~Q
z?j|eI-A#?``d-qPu02vNY#0)GJ`kG}in6P>C6?Sj7WagQO5AT0@&RW(kOh5=ALt-x
z$7r={U~3>RAonK-Xj}Uh5)9RJsbovU!Y{~+@6L61RU@_6f9<j3<Vu=ax<i2?8K=(6
zE$=lP<qg)FEpo0*&pm9V2KpRHb(CXW9FsAv;ZYolz~yE||3jk4JvNB%YhO1sy*vP*
zK$>;4v$s|E`#zT)AV7i}?~M_(bKn?$Q7hqG&_aM}G0D%muI2P&QNL8Ozv3v?NO$X@
zSF?eRzX2Qa<lUa7Lv9bC`Dd|~J<+j7Vvb!&-T?71Mvp<}a+3@)q}7Fw>JaF2ZYIt0
zY{On{7u~a9)v_VW5njXxavBUJR+Ua9#0eeJeBw|of-WTdT_!EV#asCcse2t{!O5Pp
zg9^3lWFNF@&ceG7q%O$s6Piu<#`q)DM*tzKl#iE?bGtx}y}W@b?T_!P9Phi`d<9E(
z)4<Pwq*D%&sbPKE6|_bL0firqbDwILy@UZaOD6}cnxzY0WOev%RJEPj)U=jFUJ)!r
zS_~cdjSy2LjtxTjGRGilXAr#(a4LQs$?8Gu5g&xh6O_h8QXnn8{x*htuHz|#?7BBe
z4O%JgyQCoJC2=`Ji6wm@T=xpOozRWMLYyuA;W5?i240(Sm=@g?hkr3cX(TA@akauu
zO%CeaUvQ%(QTRw1uD3t9xv0&w#68r@A|@jIRBC6IZ`Z79;8@FG_pse(r+J<aw7Hpt
zTzc@cAiQ5iZH9OcNPNh#F-I_obaF@R1IRfo$wT|e&O;KAZ<gK5EAt6IN-0F1R&t`I
zQl^c`ks7Vt6=fi`U`jT7l%M1Jul80xK2`96o0nqyBK-<>m30Rg0Me_e@GCZqW4<b+
zYiojwkO5?i_LoF5s=ic=L!-`ElvL2H(**uB$m!4iLBt0B<BBXDl^UuStwGC|6iTFA
zHk7%AE~{aO21my}HEPmF(&mV$uKMGvYjNTZRUcYy#O7)8>T^C3R5x5I+vvAN{}$k%
z?`TIMm0ZKl3nc4f`Xq3G=%c{RM>%B8yiuD(fuZJtR_sm#=04?I6jL&eRz@nV*B)X`
zIj+_JWhojlqgP`ioxw@sw79Fq{%mlJl(Fg_LfNhIN={xtf7ozw-Zhf+1Zj=D^v-@l
zBJQlJLhiRg(gbO+giT3<YSb9C{j>Fks73w8Hvs#fnh}5a@&Y&{LcbixQLYD#MD(49
zok)uGjWCDz7R}9s_a&k$IDf+)nb{8=Uj~smT}He;u7?2l>k`>=@-HL}{ot1P>N#iU
zomUzDlKsW}1oS9hho6_*eV?(Vv_(WepBc9S)>XzK3ALzBNs3U8;g!rbJg0kjNZG>5
zstv}G3W*w+6(pT5a%F1vi+pC2$NH3%j;r9QClBViY*`8!&9L-5xLVyIw?~oTbyx>Y
zO6d_bR~dU4n{F_-o)h3jD(!DKK|h!Ock%Oi&fu$FWh|SZm7^P{(+YFFz=x_)X6OIe
z#w)$yp%+T~a{u}2Af7YhsQXjODR<aZXk7eG(y{>v6FFB|WktcrJ0!4lE&kVuhs5qH
z>}~fHunl0=U{(s#fWn;4ixLAJXi&k^+ZweY1@wxW7F7IXziejh;|$cyT`ifXruLAu
z91A$Oi3p=MpDq@6EbYrEzb+eh(Cp$q{C>gMI2)i!2((<?pPzwYfZbf#rLXc6Ep-YN
zH;@oHuc%%LMjh(1aWvBAP((w++}{t|m0HV1Sp0KPO73cPB$$^k6}|m>4}T;dZ;cyt
z+-H5YhV~2|Y~Y_WNL__Ny;bv6BdHwd2A007d|eo^6bXaV+{b53<Dp4OY=^Nxiwp~7
z0rdKM4SBkWuj3F}-l52U2egh*F<ZEcg9T5tY94X?+}>E;7982x+B||4G}6UAzCf?K
zCNzZcZ4(zBy!_bA3B6e(`Gv+R&6b{;8z(>GA-@vG5{YS+n03)*5KoYB3$FhU34yeU
zxWPWXa7~JfP}3YZ%T_>ZNU|=WGCLp<7#9-`R-xZbD@icT)JV}iZAxYNl|H{Ehg^M2
z0TOBjy3656f+%7{#M4~9pI@i1tEX>WgO5CWKh?Rjr6a>f@sqN^jhbF$1qzs%jC0&L
zx+pBNRO@k5A_zzKvsO)PA^&V@Fso<I0Ycs%5u@BPiU;u3_5{cH><|6JYQTM^4kED#
z^PGsYXpj_s#W)jJMjf(Wn5&BHuw+ciof%SZKoO#Lz6=t3f2)zAh;<hd6l-pwBsiN^
z%g>MUloIJI;#i$D%t{2#PX<U-hTN4%jq@DiQq~`-Im@=R`2t9>h@S3lQ6&H@YfkCm
z%`G4G?TsBcdAPyv(Xi6?c8KieqA7KA{PJ4l>xN0RGE2}@MEea$JnTC#L@o2D#DdJ4
zOQboC?m^?Rt+rK?9XkWw%hlNON?QsS$q5Ft4E^Qkb^}^AFQbIkm1~MjjGC7adOEKt
z@4^<v*Uov#RjQ~l+)Vv`E+aeY^mZU}DVN9u;dyQLoBcl9%gT^Wn2b?bEVSce4*Czo
zDK`Nx+NR$NBuo^r09U>hHn&SlON$6!qv)Q+i;WG<`)iwnZk;gtDhxCDJ!m-UkQA+Z
zZP*{{eC~_Hg^B54JP82-DUPoiYt|H7ao8nx$A&J^9<ZX-K7Q%j_eDR8iP6*4dc_pl
zD`s67T96g1#q|b=O3gl-)fzlYtircqm($QjHx1a~WOl(*gL=B)c&ot*?r6u93af%W
zn{c*=;$-A4MkbsxudnzN;5T}^YEc-+xUhY-V0Bnv4xZxNRKVccelKQ5!w*i(#2)gB
ztcGlGEOpGWwEH&1&W=J@Ziedc!K<TPSpE$WTK%yQ6r9?)wIqzz5aB0eC%c1GIoE3q
zno;+)c1fdQtz_w8NaB^(WwM+WsS}XRjX%>=$%c`|X~k%@RBFr{^Kl|vx&q)n&7thr
zt5gxahZ*n|ZI~!Dl5llRIpBt*zsULbT(r+*uV&&SpP$um5@$`#X8z(7C9Bs$9QQD`
zoB>r24QD6K5Nw_zzHfx(pMTtm7rSUb3pEQ0{m}R<-?dd`0kJfgmk$GkBL&SujXo#u
z_kcuJM>+JEF6Ef?U61X|q>`8caJug12BR`~F(iWZ?GSV{>f_xvzTEUiqI)z)C-INE
zY79Ky)d1;wPS_^t&c5NKm)woYS4&o+Q(u2qum0Bm*-$kMME8c*t#?u<AKk)w{r9wT
z!8$g$yO?9?Q%iVgsuDb)m;|T<YSpNzNlU0cR~NW$Ul|$$N%e>h4<`M~a7oZ+kWjjw
z7mr$TKq^(cg4(3GjNP!y-r?RZ$*q4S89?V|R7E5;x{@0{a<|A|$zHKe7}uJW3uC_Y
zs+bxq?=><^A~R#<w4Zlh)l|wjDb`&9^5HB!bzW%pP<LP3=H#$MYjimC2@yeil;P*j
z<eb;u%A>^K%OOT9#y$^9dYvhf?;4x&vOVu@a9ZS{TJ;DxsUe3Jq!4c3AbFtm6^&OB
z%B-jp$CR?5IYXGDN*j$xR|2CgIn%!uC}-kqciN{5rbl#ut5q81uN?#+8=}9@|BOrT
zDqO3lXt~3tgFNOW0C42%yh7~aQeF`e588(^j3ud?N6zeBM6z{br10Wy?=R9DKK(Ad
zJb;p#Bd*&p_tQ))YN92>drQus#^Iso%tF9IdO9W*+G+Ju_J&w)KR8(OTsT#e%n@K~
zmZZiSu_@mjwj0MAF3x3fn<wbhBI)^O$~G0H`^<jN$(B@%FFc|+b?OweqlzAMlHT+O
z8jBOm(w?4R?Uy?^;LKkle#B%&qC5pc&Xg6Succr4N!)x7aceN?J75r$1nBp8{CU)T
zIQ;q3&grFCTC<sswVSh7De9a4^az<N%|A7;oEyxdsk-$2aVAvpWcvN&bZ~wBHS)co
zS@YGcb64jnRsi-jpQI|4P}F|dVJXqpp~Usw?fBE({ouu}!o}^Y_>&vsuEwAB_mM#z
z#CFt#{KQRU75!jhKridF>vthri(R_bCp6Rb>}tS(MXc)?)vB>(UP-U*Z=qvVnwqn<
z8O&}lyGS(C=#LJicBIFbx(E_wpxN&){QsaLWd5Nd4tf&Oz5bCSF1Y{zQ2#e7!bH!`
ziO&4LI1zjQHz#6+``c-Yt+DT_uAj25CHZnmZgEv|Ns(l8RW#K((VBe8l>-G*l1I51
z4{&qU>a%Z;4j>Ugl=OC{hy9TyLKG-!#IRw{f0Lg2nDj!t%jdd|J=@vu>)z$DdC5l@
z4O@zg8*BEAm?@^nPbn?w&mg<vv{o@Xh;b+|Muwu;5%^^b0OBFmI~^?MvjmbS3z?2E
z@;IH+&}b!4^{RHTcPvt)%L_>~ha`q5kM|LC;{&kNdD6ci^EX0=q8qxqocWUDg){5`
zodQJ(9deR|L~ej<fH&K?@_kT3(8h&&yO=Yz&Cx;<Fzeho_iK9OTX6<HGPp4Z>{++#
z?j2umZ)?$du+cy@l)5cP1#Q~0mV+&T{;iZrXg|=XKMB-T?DeLtCi15*swbcUZ2ZL`
zrsl80>=HauyOh^9&o^QRl`S56P(nB1IfiE1^`H5;YPg3Vm>%04**r=ENq%I}pH;jE
zh<ER~iQswf()!@tz}N_i$@ZsSPc^gd0vnqM?jt@MoQ&iPQuQ%>H-+g#WS@j(_md75
z)JFhJ{_Cw>&`6=b)K8H5LP|I46Ms|CS)RUBLCeY6DM$tUy9#c5@M|Sy)LBZ~yKIw#
zvsuU44C{kok&Z+m8jBq6G8uBK)sDM0$2bGTsYeXz*fIuhXT@LK4d>8<4vOJ+Jb$M<
z>&u!B+zGiLVvN>rELWjOzT6JSk_S+7@l_EekiLX`rY?R`53%8^;n~w%9&Xw^v?*bw
zK<rC*y=`aEUhMh)EOVH2%lXy-&=$WSy#MJb-Sj2HB$_L0p<)oX7hTk`0f?dxC7x=%
zw_w2;QtlD#ba9m9;vj|<h>MlKUTY#fh_qi~qC*LdVC&-V2r!TfqEYs|Z`vFo0II^O
z|L4(*zhv)vwEN?6wpXtwobLenoB6lNCj{3ecHWgCV%7l^Js_L=9t$Q|-K$a>h-4|(
zF+bVjd*Y3#q%qU74!gF}5jrFnu6j$;jwfA*+Qcwf`X0PO<gsCgOIA$q4mbH3AR2_K
zU-CNmPcv@-CVoE%gf616d$%~NWrCG~t3DVxq&u+7-2!-2#5Vw%@)$6*FwiA|kWTtM
zRjGn%u}T^AWH`wR+w{8J@zYAEH|t)yCo5Z<3QNsY0A=e2PvKRaLvU>ma(&4y?+F<>
zT02dEgbS1y&A{DoF9ZHywg_V<)G*nW4!HY4I{^bs3Z5WI9b%HP8(j9|*dwn&h2bPJ
z0|!fV;xkyUJ4|f8OLR@Uj{Z#$a@!G!^^j6#7X_43?B(C&uCTvIJ}vr$kvMsNxm#^{
zw`5ImPCIz{G5)z0cB@@zwL(|tdb;vp;PpilCVZ-&Cw}|Nh`m3XZb#vw)No$6h4>)8
z-{5@W*UWSuwj6xitR@O<7FKAmr40Cjtm)e`@bM91$hd4ixChVP43zmvvRF(D3hOVK
zkg`8-MJV4fE{xS#=kzrr&Kv+o)_U4K_x9eLji;l|B><;S=1WSks3g~>*5PZJj@$r`
zMoqj;A>tK~L7tND5Sg?ag|PMmS|g(7Z`03!Im<hjUhyBB-q7=GbL9J7{VrH|tIp74
z=D}kOo?sS0w`H@4BQy!I-a-b|OwMkPyK8TTaQ^Volm;<a!FU326%C_}h@~iF%Rc2R
z8a;~IgTM8=3}U>ae8FI0Ll`uF?NMNxM>b#f|E4Wb219f*J)uDhs~7`wg-w_<G@s7t
z&m{D4=!^HFa~cmft`x)g$C<ZbHuFXq#D>)u-gHzW!IH`_$vi(dksR&m_2PH%D4=i&
z#8*+E+*F=)Y<tqx{iFq7QPbW2#=3F-TE-G#1TJ~b)bNL;_$B02yj@ItzzN?Ie;f<A
z9St9w=nC5}L;d)n_4Lh>$B1LuP3qX3ezBTS@7VPaeItI1OoKp~C6}y7LIf0ty*Dqw
z>=w_o4^44{w3O&dy3bGV><DU0bhOE6qY_((x3nQXRoWHV8PZqFLlgBu@#2Rb?OroW
z;y>+H?QY}gM&G>8ICEvtS{5{w^zUuX9$?cjEgM4@$1nBr-s)<<xcpVl=_c3342d9`
ztwf+k9^aWr|3F9`LjYk7SVC|eJ0>bc$#Zjf+8^SIuFe-#dD9iCNb(|Cd4IlmQq7G_
zBF4|B+A`9NBCyD1Zwvd^T4eI1SR)czSMwy(`CdE~aXfnn-W4`#;%LAG#EQ+hjvCMT
zqQaZy^5+7VdC<>!Qd!NC9a?<W+Mt#yT`?0(WTuqf(~SM&)9o+vL0mHob5qoU>OsIE
z)1{3RO{+ZloP5loEvhOByG9pbjg4lR){VfTJ22)Zd5uF<TfxWRvrF*byyGlLT()5i
zxGz7b_f`}};-!et+bPUBVXEXDj!EfA{AVMBP(0(W47kh@Vo8Nyp@Z$0I2^rl(S`qL
zR<(_DM7GHR9EUt1##bjQknlxw)F0Li-2xVsGuwW#+6xYuOasfL!}9^<;fxy!&YvX|
zqp+FalllkP*zZ6Nq0ZCxTcv9>hji#O0@@I~K^E7mtd10d*YA`|j9MFV`zV&PAQ&W0
z=U{Ay2!%OM3}e}=8V%^|d!jxkiF@}AIZiVTID4RTq-&eC>+DC49|bUCX@k&vBg|k#
z4FEw%4`}Q-wf_nPB=N1yTZ>9!CVuM<H#!o>A1r|nKsCl@`_sG@^VW;?%oR!6&5PVy
z!HN-=9sm;OOU7gkGm`9p(7-Z;ONueTZQGp~6<16|7ti+3DxbNOQBV0*WL`uB6p(ky
zFQ8PZ`26Jh4}<^ks(PuYkXU>-ydy$@HMwV2CCz>bk5op6*cG69Aq>$^aX5DGjW5FI
zxYI)&)q^Ufu&~AB5etIc!Ktwv4WB@wvEvpjz{_28_e+>XA-E-$CYMzg7~H=@M$4<^
zr}8!K&L656D8rN$v*TiQ*4UATYa_9Bz$^Vu>GL(L2{t<eafcUv8i$pb#@Cp4h2#|M
z+SRNcq?+=vm>qr^!gGU`T|u{H*`RC`bq6iqOpJOU6hb7v3&B1JP=863LlM0ciifs1
zvsRFiZ(c){BY^1dv{$1VALeTgn`&MaK%mLCuUx&-V(OSR(r)edc)3Qa@oYh?z4H*^
z1XAvHGcf>a2na{tTfe)nj@-d%oCT)DO9ZQO^nCee54=IN?zDa*{F|4!AJ+<aQ05f`
zvH?8_k95qd)qT;k3<ZEm-XolMBk?r<))6w);(hK0tp3a=<Ymcx#+Ux>wIUdH+nZ>p
zd<rw_4fzLc8lT&m%o|G&!Xt2;Vmt8MZL_P%SPy(U*^%E_k^|RvWVqN}a?5ML)li-h
zfw(CqbmBmTYLZzs&$9cp3y(6zs1~5wW@1yKm?oRk3vyu1%qEa&HC1lh3MgXA%za2W
zd6CmQTPuR7pBeR3+!rQI^k*G;`6;{2Fjg7uyv>pmAEewIo;QSk`!GZ<mjs>T8kdf5
zF}ElZuUy%qs+aKu#0+lTyJYBd_N~JAAAk|9w}r%*)&k*{9T54+qQ9O-i743l8*{U8
zw+ci@S9`tic2qT6g@5(?a;WUF_6@7Gq$`tU_yD`^wzUgsXytOT8nU2fit$7VwZI!@
zJcYNN-Uj5i!C)VtZ`e-|_#qySo!n)o2d{;I(HRhQNxzeF<>Vc1xJ%$0)jBO9JuE(N
zL+nBQTM=-6OQ;`h7>&(<B{H1vD#R$TW`uMj5=;oejzCCpiyjZyIg{vb^dv4ebT1wb
zVsrqF>NPh3NzoX7wk(E`zV6!<4Wxw1Q%Utv;kLL~uz6ung2b*9ieay^&J<1`p#}E@
zDmWG3$T;=H>NSbS1f1HDRc&$-%A;^LHo1)+dEz52&)ckAaAC~%WeiVlDwNcjDK9KR
zcood|-fg<PB{uXvn5*p`-H<+g{iA9pCbyewZm~@6^`MxCyr<miHXSkn=oSL#w&}mr
z2-q~}pTV}TYS6E)$y870$zBxV!`jgbQ89U~jA|O&|1{TfWcZZH%acjcrk_kWnd1cU
zO=Q2A9=2WCzEYG=RLdb1l#kQwJe5rSmWdDa_z~1tYLNj3%!ECd7{7K|yjqjyx~a_{
zY@T=YUJ*!1SLIJZj=t;6{}l}>mIR-Nj^@21YYGgk+#|R9D*{k%D}l8r6zl6>=B|V)
zX5f^SqZZ%*+0C;@e|vrNtW$>kN3tyuODV+{@b6j!aQAEBU9g!aNM(c?l78{<nkW$w
z4GFQ;xEqrdg+ob%l4ZJxLLE;R9wg9Wqx}$`#<%aK#MG4Xh8iY-Jl5d0p|>P6HhCcE
zacm`NRQNh1qau7@DN)4uWfYgE$-ZE`Pkf0IT)=ySBOH;fR2J0vlFn+>KLhsTy(joB
zP$!K8HF@CM72-`hcEmA6>A*OXVBCSC>z{;izBm03?wO^>W^~~)r^SGF#rrP7&bvV*
z2it9evOA*7d{{@YIN$cj@LYv*c&TJ(uykm^1owTMgii*~VP_HJhXim<k4D|YQKQ>n
zLRym3h6BT4GhER>!lL!@C!y}$dN{-thO{=iW;3@}P7*PknNTf!oCRRZK1)2`KiSnd
z>S{710?^mwNR<b5WQ2+MYApk0{48^wXNQgoFt+v=QHk63A@cJP7#Jt89+Z~AN&t}|
ziG+V?P|_stoc+@50eeARxvj$24K{8|2@Q2fxeURv4_^=mP~sAdaj&l|rOy<JyNW@8
zh@fR<Ow;5bFu32gNBFHKS6BfY%7}JMMyOFI@;!l;j(WC54P@+fvHe2G&>p1wn+Nwv
zlV5XX)P&Jt^<M#EhRXyAG-o|yK*`r<8Bl2&46jk9`t1;i00v8%m#OFpM8on$bbuWM
z;t{B+1o-zPjgd80o7UjgRUrcV$;&Mf?Lk7oXOf3gH!Hy!^@EmWEO1y<Y+&fshgEbY
zf#!%b$>Qm8$5#y&!X@m*4Uup8)`Lj0tqoM&yDkl;<nDac32x&7o75zugNvsy<<V9<
z1gi5PqeU7<N~Wgp(*q{%;9T*a5R^yP>PXjCMkRHS@=GaMC@j(GLE!G8H1-QXJmb%+
zjUrVWG3wrR{VT}`Ib@G3+Pg#Xal_CRLy0j<v=h#z%F!@Ol500enDLdB;-dRI9bz?-
z1*t)}7hjH+=8DOB_j-uUTpqw_uHo04YaPQ5MQ;gq2QDX@!j4{fCTGv$#L!g%-s={Q
z9Xa^WU(<@oC2|ZivmqO#aAOZ3?MC;(z)G(uE~sDWJAoIGBn)0rpQGlKt!h_I@WR8n
zj5h8P5nvu>e$J%bDfTCzsYn@ZV_&Om|9%xa2erhZZJaVnZm4Ft`W_sb+HO2b{uZ^Q
z<A?rZmz*bQt2ut|-%U$pY_gs56%HqhbAYG#J`()vW5r+3J5{!s!Dryn?m=!HV?_jp
zQ=M%$5y}7dlt$SIA~PZc7woxmWYLhlIA)?)EGadrf~HGb6j8lZU7dh<aJGN5Qv~3k
zyf=2Sorsd8&y^0sH;R;r3K8DY%BRYtrSNpAuF7m!U9@Mcg_$t8Wme6M-;=|qW)Ud5
zvtLfXcgM3Q%3WB)e^OJaSrl2R9UgjfLKuNdyRTq}rGABrRAndCa3g*S3ZxolrBE1j
zy9LgpJZUi2rX5t49r}ZiNto{T`Q$lJbD@JH`3&G-PrD#@McNhVq(P{W-n8*?F=llY
zOWeAZ&h{~F1zZ#EXlWONT%XJULB`@o6kwu-oy~PTiCBK2ID@&uFXSYhvh@`}4)$!r
zq*1y1@r#gGQQEpLQV*qyjYbx?iIMNeq&-$NK*5IYZR}WZD0+}p*t#}g`*d1YIvUsZ
zV{k1!WpyAJw4mQPcDc3>B%dk~kBOsKhmLtzv))f5OOb>txB-?F4s#}NoM1{i4HX3f
zP@j>UG<*-ezZRh}svB8`dG1$foHSNbg;P0_hk&1eq876(_4K+m4@(hHEzbUa9E-zW
zz!oJg0>a%RTQ46%!4D~eNbyAXst8-PEOYdC5)4P##NVeq-_Mw<*!7x8njd+1ecO)$
zN4YZMz>>c|xD=`*P!-~f5W6yFNAtswmyZwy<m}D<VTG`%(FS=G91o)?t<h*Q%8)xx
zvQP@xTA|w#C*S3?@nMD!vrxx&&fs2e*}YTFK$-XN{GtHb`Wbsm>a4xL4lo2>%HG2v
zt!={ytmpt;h#+I5O){i-&h_5AggAO=FEH>-GC(ft3rFB1;Z9rJ-Y?|Gl@nD+76Vgf
zE;6@;)|HOpdZ(7NNLKG{4h?$9AMF-K%hx{-P_YG)s^CrM)%{vCMd#MvG=r>TDcA2D
zDO*)JsifDv^Vg+{PN|+dWOhb!QVBbFI*2KsfiOEfHv5?3=qxi3E=D=z(83#wGUgA)
znV6E}XVz14^}-|WJ$QPN?J<|}LVvNhrrk{!C!2R%%hGi9WBJn0-9bf6v>mX-3%W}G
zQ;1Pz%5N_LZdk2NLH$R5G-<)!LG@=VrB`uhX+eLSMt);aphJP521wZS*9*(KZziml
z)Nhh2q7zH|En`NnXJhwgu;(+es#m}MUL5T9U$7CCk2`~xa1Xc4=l!OpR^SMb>1(ys
zs^EPX+3;we=hbA=&BIoC*5SV{9YwDjpsz%~fhk0g1;T5wCfGthkhJb)IAs@9W0?jO
zHb})f6}1X4|ImCYjsE&9ovW3|HaQuurE<8N#u7xST!XcQ9yRyk&DeEuBnw&lTJOK8
zJ5wQ?K6wkyV*lbkpqzbC?`zNR#L*M%PS<mrHv4er945_~&O=oK>41*}dhk8_Iy@|F
zCl@q5Z)}1<M$MAZ0hm_5odgT(szD2KbjXRI8-?F|?dm6-8p)-$c^<Wo(F1vl@hp--
zQIlyZQBo4f>ph&PAUY+^hImAT4=8otL4t^={<VvT?~fS82!M@s(eagOcg$@1z?n${
z&y@>c5R?HDktOa=oWy~^A%n|OP}MCl6E2Zgli*V0d-X3LY*o1@hwmUmyXQ+h%+Ius
zMP=_7=s!v()IaDgz<)t+|Lf%cACUjIlBp)EO#k1!TkHSLyZs+o^gjgMEz(UOTOa^{
zV$gpS-T%ATzk(K~9<)aPV7hen*8g4l|3K-MBq_>oF(8cPWyw28f5$VR2@87V8({;H
z5vp2SdSqNGltf7LD3Lejm?GY|?Tx?!b49MJRn+)&e18A^>(puIpQ^P`5uZE-ilSp8
zhc5S6sCG!kI={8W?Y*|O<p-}$8CD0HR<r=nTk!=R2b-NtHj@IkPco&yj$)4CII|K+
z9<U_3C@`#JnJYkvT-(nRXnZBU&nnm^>--I{@AYSpr&90~Olk(vNU6Ypj0x_`Y#JI^
zNGN+QN=Ag~Q~@$c%T?L}(}9FAFB2k(Sccw`<e*csxq4va;{D|Oi?8%iiI4_ylY)^p
zX1qa1(72w4wRB!QSxpu7*j(U>W_$%!cWr)EIzH3mlmm_p7M6s~r>mBTG^BgMXDnmw
zjuR0|o?iXg7?BcoY(F51(G7h&ox12o$Rvr4%!9ST0UMytjxZ)@>^UK#6cJA!8j%@M
zeALzfk7!b>oaRh9R-<eQ5ZnAP1PNLucl)7p15Tc9u2%<Uwni<bF#grR*~Qi2eIbk+
z{H`d?S|W9-cW2shq=*CbI+A4HX5C7P%Mc8&=OumDU`PH<`Zf{u2lr^r46tbTEz@EZ
z*3H|_8hs#EzMR$uWgJAd(^zjUlTplGs7>4&CmxT}{!`8jlxK-v(!KhFAF!;btsc{0
zMcXe6xG@d}EfF{}`B~ETz#VNk@MH;1V?R!FB=GJJu?Q%d=Uf|pd{8{jKkUU}75`~a
z*pt1J^>=8)#!^Q!9b0B$aof!NbwvRzHy>Ai4DcnZ?Zs7TVC${!|D)_3gLI3sZNbDz
z+qP}nwr$(CZQJ%q+qP{x^Q3V)yZYYluJ<ac?u*#pkNxM16>HDA#vE&6@Hi!Xi{6{y
zWGl@<HnUyiHS3yDd(%IAX};1*24Qs4CcT;;fBwTO{y!;b!af*FaZmt&CIkQgihpg$
z|D_JC=j3eQ=<H%oYh-6bYhnBE47x_mMs8Ca{`=}XvO>gU4n*m7Nop93jX__hUTO1p
zKBP!&6R8(_XR2Pl{Qa(-tIa4~I@PrfvG`Sn$BB=ro0tcbtYG@-H2!1|GacgCKr-oD
z7S3_aE3ltT(*;hoxG=^zz8+He8w^Ykx_W&-n~11ty>~qF1UzMIP_`o}fx9x*JYY5U
zfWJWE16Kzjd0!K+dc05{E<ULnF|I_gV#5+W-;!3#lgME5FAhdf3XE0j$e>I&>di-;
z(R-9(%XKh{Q;$Jr7VjeCOi&N}h<dDtX;2O|W)g#$MX>SMyznykMCMulqkUbiMPpY6
zmXJbv+PTphW4X<#_hNFrRbmoGTXPjzq40A?n0U5AhH*=sGdNF7$X!g2+bR2L*a6J9
zK$B>WwO?#UDDWpHVE*1@1_@BX(4lYFN|UTSBWt~9J_4xQIc;iAy9&s?4s6nRiP@{V
zZf*BfgPA7x_<9kMtTbIrt;lPb%KcKE?|XxYf>KdFwi^quAe;F)JNK=T&fPR(QGhEc
z;o_pA{%8D?x)oYivBeqWoT}ET#KWfX(;<wXx}^||)Nja9?PUJs*r}T{1Mf3urQwhM
z2)f4igWxx-%-T}nGV!P6AcdSk#1Rb~4~T{|?~=r!jatF{V+C6&I9aJzRDq$@05YUk
zqQ84~99)|VfxLc!3`UOY`x0}j+Ki@agqnF?ltYX5_9|g)c4&CTXr`nWqBFoq@_Cl9
z#d~Lr=JNM4zMrQt0t?ERSm)&6QRYSAmm-jy+qRIcmz_Xt1W72vby3Z-&8oDWigY1H
zOyD7&-+pB#uN(k}et{0oOD~ciWAV@9z=g&7G2lU=zggWMZ!MC|v}5~1o}e}r;ZEt8
z8G7#cV`f;1(_d%r8>x^os!b#d1Ex-(TfU7{5DiBf!)$>#2;`Q;I#A0XWcOcDs65L<
z@kYYZFtUfb?ZWL&&JtL%lSCI6Iz-VAy~k%aIu76`B@vNml2XfYpzeWI#KItrjtKB*
zX$Sb3ZrESE!cqfcJ`&PlNUyqV5flpZ6{yz_RN%v`GLQCai3imnv9EKm_}orxsE|EE
zxxoF&s2kj$2P=kT{sj62=Rn6BL_0*>O=p_5Mv6rk&er_41vYI<Y6`K*&brtU?@pJa
z_rB023DPV{xAlE?mS0X?2kA8V%%%CIL*7`nB5@oPowa3@Y+%dwM2W&Rl|JolMhpGf
z0LMjOhS2>s51*_5S0cC~TSjT}+JQAVQR#vU&ej1Q*)h{-wRPzi`V{I);vS>0>StI=
z^wX5a@<iK08pv>?Fb@I5Q1nHr%xpkN^wE|*4-!$ipRyQ?4Kt<z0c|}zX(_{?@O7_(
zF|z@l^4GhThJK}crSIj#{=3#2$=)8Eu?km$du?OES01H;1qaq%pBv0(7DmtU+9*m3
zM+op{21nW5@|V>-Wb+DStm_vQe$6in8aI$|=^100flbC{Myq4rQg`sEAb7SEamUnn
z_|dF%CAgvsc17WYWWB`nsCz%98|a2cP|ryw5u&R~oz@YRw%V%ZiXsy{IFZL?oPdN8
z`pej=zu3RZ9{qs(9%t-;@-M7pkYcTRBm6u3fD0tfRv==fFytsa#|lw}-6DNlXm*n~
zOR&=_S1RdXRI`nxCmY1xXmG*nzZwEAmBc;(=-i}Cnl%ktL%Y%c;KhD(2e$6zdT~V|
zeHatR<+SnG58emXP!{Z9+r@DiwM&odsHS$&fv!|Z>Sf_smO%eD;T*bx&Cm4LNK{M}
z%kS~>`;F+=c5qRVUURSAzV^%S@z43X*2J9+hicL&jrMf1y)el+VNskhmtqNCH<m~*
zi<b2Cwy`<*>s+_0v-?F$M=jC(7Inu9u13FS#u%-WON={>mkaD-BbSU6ZgY=%95=KB
zN50%|(_wDJMYs6FjI3h_Im||$&6qqS7qjOIx=1~`F_mORaHklOEabO9vH2U^IrA*9
z5wwTbF3)#zuh(;sOM27;_Vr+?&@MaEC@C?uu&FNy`M45ci}hJutMBK9$Ay?O?05H_
zRfbj1kF7NvA)s0%7OhDymxoD*n|!w$z?j(nHP|uLw18NBy3}6G(QEH2vmJHN)jRIX
zrJI^>-V%(TsTL<C$3d#FI@i;D{~UA8`FFP50RsROf&l;!{cEUlb~LbcvNmuwaq_Tn
z`VUc;i?V^!hA8}3tzJWaB~2+SW2p=#5*um01CLQ3kvS&Yj5+K%e_Hm<*-ye^<NJ1-
z3lLPU1}<9m<@tKEwezYwpni!mn;t>Y0nDkgtrbj%LywYm5+)m)ZFhjZj6Pe50aK^H
zIdRv*GG8fEn{wM9_7q;LIyBv~^2U7S?m7M_vP9WDQ-Ff8vd=o<?gA3%qoD<8<pRbZ
zOG8i~6~8z@QK^`LW0Bq@8>n0Ed<y_6e!_4D1A!t0gsJ^dx1pL{k&s^&T7X{Q)jLA^
z)ixmZ@}dz7Ms)r?E44(hG1}rs){I%&unowNo|?_HR&LO~L7kZxHJ`;!oCT^X-CpIV
zP#ENednm3(KZi0@6AgNsArgE#qJV!0QIzdVZm{aeX$c3;NIw*{+#h``LbSq)8nPVO
zt=IeBOQDyktu6AP_yyv!>6$-WK#5^78nQB;J7^pc$$0KMw7Yz>nH1&OdOZPZd#QHC
zPjX;A*}xfHY;|y+<f6^v*+G#pw*U#UlNv?QvW=+g_sDmOQWYh(^ZWdn^`B9CT(O|?
z(_%St6jm|Uwq*u2Us{io^j6D3FA}I#ok-Cp45Z*7T~wrTg_7#bKw#7Q4rmbatCsm?
z{TiBe_Q3P{?X)7<-4dQ5%qb@Ukc<Z8BjkhcGk6%cCWeNh67uo<#+;ojmFlP>;^}+N
zlnKCM{?Uwl72i|7+&`7Pj$&2)iP@7NNKDki=#FuC$yOdJXt<LqT(Hdc6sF1?VDhq6
z5Ein?5)Bpazcusr_XsNplUC?@dwgCtKMqeME(yL0CVwPQk2xud3nPxDHK&IhEk{qZ
zl1?Del+m%R%F+rkf19jcq^Jr&{uzjsLrGh(W-$<dzR{rWQ7AKKN#ou40?rZ0qL`Q3
zl$1Fgf<228W(9U!=UB@DvhaDfPwt~NvfQ}w5lH5@a@o{Pz<{~vD{V6kMglp_c|BnA
z_9xvzm3p->TbRKwKXmKtsBf0YaX5wd#(I5v%>sMXZ)FVqE2g9IAdQV~Phd4h@oHx)
zQgcn?n4PpYNV|ON;%-m;e$V=hhqrkHpO5a>^xcN}+(r94c7pjk1_Rvgs~+;MHHFVQ
zUk-fxzykXf%;t7ns$JO3HAKJUn`j`*#{GJ|$#2JTLMo>&3M0lVE$9?;rW+FD7oJ?N
zYwS0v*k4?{Zn>T>?OvEmyr6A4vwj!uE75Mg!?StHa<zUd*ek{Od5Rk;)GqSdqlz9`
z4IZq{mP;L@&A(vM6UYs(N;s_yToG9=YrA?$hpcvmZXj!AE$vWMtxUZtn*-c{$L1eY
z26X*9RRZ5Vtw9`l+l!KawHdY)`5Jh>|9^EY|2Kgf`fZpP`9t7beh3`pzdlU<-?-P@
z#o5@-&Gvr~_~s}p*k#ef`^x$aqm&RPXl@)?Tr7d5vO^#aA}?0>2*Re1V6lJ;wX|IL
z?FwWvGw1w<8E<^O`Sf|ofqU;Z$`6r`ZqHY9Njc&}IcrN6aap>>VS^e-S*k-P4z!}V
zO$oIm!JoV}nPQUv6fiGu7T14U6D?jqnPt=+*KQ{E=vZz5$c8km#UB?q?W5YeKwxY@
zU8jI7R<v>dOlYp^$9t-^${kmZbj%NnKOvEhm`-PU*{I%8F7BGClwyAY<|K&j&cS)f
z{#|1^-GphisPDeyij#$4njJWR$vFPR#npvObHCCkE)R~tth$U@yLYsDR_G&2&WI+N
z%m}J8+A!BK%?&D6pg@Cpub4gtA(BDIbnmZl(I4z-z`uP4I{<R8FDnEoMcdR>%L+jZ
zZhogwZ;~gG^1H_!qt2M*pwiaL)s+5nR$}ZXJAmQdE}B5y*1X^R6QT$P%hq4c36{2Q
zFUuzi+yTP_E&XYH2?ET{+Lc~IIQJ_BeNgFeBu^hIX8)2P*=APbC{sfp-OFY5B5Yth
zGSj{2NG4~!3c{<MdKeRH#p<RBVS9%v+iR)BiT*2L{f|!!Cb};#uuig~3I#eD+F`MV
zd(;=ZT1A)NN|iKi(NCI^P7hYT0zRY(t(Yp;)p@g+P)t=pRFgMCW~GHP(rGhqqX6ee
ztA>BnXdi5Es5>JO_JmW9^VZq`Y#aJu8YhlkscxFq*Q<{i;^s3xb2#aZH*gbFRF9oP
zL`TFU6E+loF-I;%%roRLr_0;6w!&sq?2o$m5Ndy(G3P!H$5X2%?|ppPHRDVyA1Ktd
z)(4)Mn>L*0(=2T#HCLGzEgYl$hhCbUk*sYF{M2;bAon}WKSQTEvqdV$4|GcWKqtw+
zw{{EH{}IDeF|gZYh5y3-8yU4H2tisU!)rqeIpuUD>QCg6xYaxc6qG_96)p%#Y_dx6
zx$BmUtfd7>eNDPnYQEFm=_SSsD<?}(O&)j1@v5yfE&+j8Zp<MSVH!9n7@2I^TpYAN
zUhyWVNDo4pQoRt5%G|A%4+UAV7fB)G(E*$Q%(2H<%S<r|S_^o`f=nDVt8B!N&97oS
zX>kIe&<C%qSXdD_5v&R+*)U=)$%4*$b4yW%2*W5m6XNX-^c=*VF?A}@=6}!i${9#d
zn%wl$(Kdi9>h&8MP1ip|=WU*kIu5GF1nD+(%P4XTAXS3-&j5U`0Nf>$%rJ1~K^!f*
zUeF$lRXieWv!Gu<oyq!KNVd3+noR;uuh<z%SJ1jWLxkb&RA!qU&1u^Sdn`(Dl?A$V
z_xKiP*!<qnuPG*=$?ndd6i#Y}%dIU_d#4Q;Fc@D!#S<H4ZWwp%R~`Yw*@%0~RFx!S
zty8^jcl*@Ts^eX6;(61mUq@YzkQu8orS;=?*R}qWJHLBl`7b6c_mVZD>-Xq9y=&YG
z*G~%E18T|CD6W7_r3%MomVuo$I>tH{DitGZOje-@Lpwy7y4h;@cFdWt-O~9o5yTDG
zCvzgD+83{@zz}Zez1KE_Bi})kFf(8E!g3dt%apOlCMW&30%Ka$O8i9Ak5-xBFDb*{
z=QRhHXJSg9rFL{O-+E1dg3i4?j$`aPaop1;bV@?By4crO>^`@BNjqNVvD^SySvQ6~
zX7M_6wY>mgNB+i*$#K(v3`G^v15MsW;9M*UAU7|2xZ{2O()H;la=d>$rc1MjoR{I&
zo({|a=AfdmFCai;nVsv0s{PbxS{wk_04HVdf=hxgPZo5=JU-=FFCejmvHYV7nQfCn
zi#dFLSr4pbSyY&Em7CfL3N&mX!(xe957t=9uQ<(WgCj#sZce1QE#QA6JP_{8F_k*b
z_|OMcOGb{wrW+r<S!KKmNp}1*O>)J7s&B<VquMneQX%bx)gCLE>~#fGlp?yrDzs&o
zx9HQ}&qtkKB)KqSzvJ+&Fr^6UaASpGL_~yj3ENwTN}0!LB+2B{ZjGb=8N1;cH=O4c
z>Yx1*FvBBL<mXOO>gR{^ul>@**381zgx1d9`QP2RIJrW*#=yBgK|Mp?LpwFcIK!Mk
z#{O}6c!_{>a)G^vYg`ten39T+o0giLl4^zle{gekfq-#brihZ85to?}4L5fL1o-E*
z5mf?_9Q~|I3=jZ->|d|#zY)^K*}~fCe*lj@u?kXy^zi<9n|cmV3AXhv2Sx>fXUnLP
z8zg`@;6kP+KqNFa*OP00FN{mw7-Kq#A2*$M`k*Ri*@`6IF)a;6EJ9;J8e<f){8SSA
zzXJ;{Yp~$@Y;A9OKTV}PiF|u}qgH<;=vHv9PAwR}^tIe{`!2j4lvyAf#gveVEg-uJ
zp+?oDYeT3|J_q4djN=`;YaDcosL|jLMTh&6Q$yTMf1P22ko>(K%^CU>I7Tx%dISIN
z`p~h9y&Yt@!5nB%eqDSbgo?>;i7ZM^`9(?@1JQ=cxyTm3^Kn?WAt!vVY`o9*&ztB?
z6*SuPvw?R%p$754-oziW;!I;<Yh>+WZ1Rsy{CD5kMNz@(=c?E@*Kb&bX$UvAYm`O<
zwA6thzC$N5wO=(dVYa!P(jyVuE&A(4qG3E}64%<<ZP%ycmMaA9uIBIx1A4KmSs$ey
zRA;Lk*Ap42&A70t&D*go63=5f1qhRxYDwNH0MxT2PX=DsKhfT=TMi(Oyufa2mi0{O
zPLZ+3AB&?&-e8(Ul^HzfE{7s6juw!rTqt=oy!x@~%GL|Nfr_>KUfDv*hMo{Z$Cp?F
z=VaJN*w&3L?d{z*Er~sp16pJ@yo_o>Rz2M#be;IkNES>+TqSA&{eBOAP?_FTpB3kn
zX7aP23ZOu_(|%YWs9&*(l#pol0N6%W(H(|G{?mjU{=g>Tt~h(W=L5my7{B`jwf~c~
z;KF)S13%3dX~%<X1CZN{GvBi0Q*6C`)@<xU){`mc&{z>2Wf0AXs@DARsn_4(VF`=p
zRhLXcF!E}HBPYJKhK?jnfm`C+f+ejb7TjT9PC~rv^O8WC+$r#tN$Mr6THUPkiIVC$
zOD=Emz_fE6Z(&o%xB0DSqGhvb0uluFD49mb+tp4xfX#tHr`Jp8EH6zDx5p9d*WZ75
z)xXX{;QsFhA@q|iurPCRG;p@CvvvAENJs!^cw$!lp!+v5008rU{9k%{8bbpo6B=g|
z8~cCI<sav@HT`#ncdViH1Ng|kEq)*cw&sjWve`o!o3+D=%!837It+DK^#$<8ku4$N
ziTIKcNrZoWx+06k$6fuOO+*9k;&<EQPX%$GAke?)fo>nsy8%Ebl|*5C>k1u1C?78L
z!Ow25kLl3zYQM9C)av@v_VWeX#ET$d$T>V%v0?WZV^od%&hXt?v4_kvjK!rtKQd&M
zFA+r?#P=`_W>B%0)?HF}O~d+`?tW>*D;oW>MF@YqvH)3A94sl8Fc=h2MkbEFkP(+$
zI|~-c88Q&IXNp3AHPDPD(5j7M9<Rlz6)|l9SG31Br-|@Eu!@~04>AHzt?#0$v?ow6
zLXDlLr$YdF*aw2#GPJPLgS4=Q7*!JEi554J5sabR&uAVpH^9V7uyQ7IV9(9Q<0_P5
zw`q`TzS<nnEIJ~b-fvb9W|y%kB8*;OjwrY62}J^0Zd>P=*)$tBjUqP<+>WUudY@e(
zEXBl%;_lAM#^nkV<;f!{juf%~CJw)UXE`LeEEjelH|$m*HS>^eCDSS>FI`*%qwOY~
zD;30$c&KiGAKNXIRZJm@HkIV(r_m)PFSQs5%>t0`W*udeNXX9^dYNZ2WD4--5eKoO
zJxOB*Wtd^|L(P)l!lp-6q$7v@?fVM*DP8cZ3+P8HJm<KO)Cw>k^sm#?jSRpAwMel4
z?Ln|`6!Ng%&7$#rJ+Kw~-=~AP$yQtlKqQ99+eUCQ`nxeo1(h@m9zKIhGpzeP4lLKU
z17l>$@s)DvO8cKixQ{`0@kz7`b`%<`BEosnVp631G@7VSGnyBlInE9txMZxZUtj}K
z_X4LHIIa#{h_*?Qp;wXiB?M|)qm#Z5YeDlW^v`#3!1R*0z^ghJF97nAbG4H1A|7g6
z8g8N!W%Jv@;2%C;e?Ga!4?a^rZ;RwP`;hqe&cu^LCBjZ$9_>2GnVm5=si&N-zTnT2
zWZ$wzL$OUfGV2_XQdUubHOV<&2Kt0c<kklS*CswY3KvvQ7F7mT48kXWBsryZGb8Pf
zC;C!A?5}Y+o)0L;HzGyZ3n4<pL8$XP8xV3RFDiwJ>!iYU+t4a<+}38eU@j%jv=ZWE
z0yW0pS3lm=q?evi{k?4m7%4{3lX7j^KJrUBz2a~8chCera&U(41?X|{3><~i(D{74
za6Iu=L4UI*n40x5^!jyu(&y=g<ef3-cz?P--3;16lgpU+u{J%*kHwp2g7L&>vA7Ms
zTv(S5iZbvNN{$Q_y?$P0ot1iGKS}(dNoJx+y)eD}L$Hm2W?Ln4@9ikvC9`Zk5sTKR
z4NLAVd|h*7-^|?~*tG0KpdNhH@9W3NQ$`akAsP3U#aI&eWULhO$ZUe>rc}>>Hul~`
zJwK2GYqK<F<z}9|5@lN@O7@5G8iaI(F)My$j$l(yNScf+bAIszBg)oJtW4UpY<w{)
zM+UczMikxds3+StPWJ53akFEYlh6w0&c&TPxe0S+{SG5h69#Xvyd89T!ZexIYhWWu
zml00bu%V7fJL5Z200cBQvBBtKtdTao>#fL&FNYnmZyvJIR}+yl2AO5KSe#lu@htZ_
z2jl~tKTM_{LD{*9!@?|YrIQ3iWWTXVYLmKA^2{<(Iv&a}L1rU^SPs%{Mw!O!et>aA
zT;>ZPybN_jS|FqWrA1|2oB2GVLWALVG=pLbLug6OGZ4wf%DMGYZN7)O;FPj5d`gU9
z{r%gpgzWfSahXRZRXB}IO)-e<f@RkGgX-jFVh7|}5A=%^)kq^r#o09R4Ii!EiJ}}c
z7vBAvxK06&Lm5Jj0@-yuK`{lYLuNNsD)G+u((1Jx&79Jr?E`U3Bql{6;tu!j<0}bT
zwEFsfu>D9^-2g<XM#73Qw_0R~9wwvW9~nW}n&yjY5EPJ~k@Xv-B;Y4&NU#r^bpVPf
z?@;vlQcK8E1G<3A_KXwBLubb$saq&csO3yozs)f`R(?V8O2xLGSbywHhFt@n!^%Rf
zXi-`p%_MMdG9|i!uZ;$e*NTc+5J+C&k~-zq49k7$g~{VHm9eR_+h=`1&(U@cN(jix
zdA6)7v|`}ZxL?iEx^#}y%&hjx09x2O4bL%dbi{GXiFGshX`Lv{elTXZDqiomVBckk
z$>!nNJ=3g4i=kTaZWX9AVRMl`w^npz&*A8-cFHp}F;q|7Gj@n(uPFy3eVIsAq>4x-
zbs0l6-VPwcx0*FjC8QehSsU*o(P05E>(yXpXKa!5tiKotc?1`+Kcb4AQ=91@lL&Bs
zyB>XN*|v}#6RY#SVLTPte@;g$WZ9^MZDuz9EndV`V=Nhk@$#fhI@(Vz=^X70J<`2p
zWv@3<DO>ILyk)C7e|K7ZigVbr9xczna2w>kO+N`Yxivexa(SL|ef)W>qq1HcuB^pI
zXErRP=$zgsGNhlK^Yk~*6;bC#TZjX_q$UgaFY0A7b6O~ht70?LZ>E?Oa*x<~Ahrg1
zIBxzX9<)2k)H(Y$a`0KTH~M>(5gaGPQH{(nHI@w*!viYgS+z}wb*4%oVUUbCD^Crz
z?e2!0Uk&{E-B2hz&Z6X479=D8Lgo*;kY)Gq8`@FhcQ5Fi#O3r^6v(ma?4?u$r#Hvv
z|8mh4i3(wQ_(T0CaRC4r{$pSuA*(E+C@UbXMEl>7h{?Z;3a(XU><(GsyC2n{=Y+ca
zZPqO0pseXCl+ei|fv#;Dz%&aDSCA><m63tp?tO&D^&*;O=B77bq>qGHIqY_(xM$8r
z)&+N$b?3K4k879(yghq@U!_+>o)Qie!6<(#D1)JtC;O&!jwtSP|4n5SwYfcuf(Q5`
z8|@BpkCwGBrg##qps_TQNQGz)P##SzV0cccvNTfdA;(07LMRf3L`yzTjdM)7*nV*9
z=u`I^U-VPSy>PNbpBbCXg)$<{wJN$Blr^TKnl>@wtiI9Q6#0@et$lr*Gl8Lfa-L@^
z7viaKz@R1R1tuR1Y^nzMhk{8ljp8#olZHJS4RSs;MFC+5-CRZ?%~Cun6CzR+s|l@9
zjZtd=<y*WGn^4Gk+>ly0YwT}V@T<^!AByJE#*vW?RN4easIo^|MLa8$nbR~2WZe@K
z*r+~xVi_()3Dmfqvo@g@c`qZ1nr>tbNeFq9N>zM$JYCGSPkFs_^Ek&Uj^7g8a36zl
z+vaCyXrw)1wX@3oclUz?2EAi`hky2dSPA&;RPo~lWon5$T#8*nJN_CizTxU`g4Bww
z5VvF5FuV}_YP>`!(fOa2VAep}{xnAJ{*JU#)q*B$9VWIT0KzoTjj@9GjTT6=DonVh
z-S6yq{V@O8$4wbY$cpJOn2kT|8~#dy%`qEuS1)=etyn=28ZKmS+^>cD3yT08HcKgX
z!(CK2@GpV{_&97MN{omYcJTWvmjER_krlt%!cpsM)T(d|BaPM?#O`6!ua5UY_9OLt
zCZg+PI+i8aSJvlc6>8jU**-k=hx4%w)jZVyN+X>eokX1L`)(%Sv?RBYMl^|28VUr%
zg;(2<fGsG`ab~kPPHRz>P)6qR*am}1;)JOt2+8ufu0$}fHJ~GCo_kyR>YA~$oVa2U
zPGs7DW;PAdD27a3g5(vCykVPfwQua{REYD4+sa!H+bCI+J7ZoeT4ihX-$RCicruoV
z4!7@N+ZY9%nc-|9&&DzLesO;Zj;;_15Oto`)r$3#jT|}{mbWQ??uS1ad3EO^a0y=+
zEjwoR1S;WGtvX2>atcy8V0JT<1!>v$S-39A9XR`7%6gB#vtQ@x^_^>-SJXLL^LTp6
z@_1aVzMds}Ud+Era6FlNJBMQOrR2V&^N75&$!^};cVoaM?cCFQa9q7~aPB#~s+|^R
zzmE(aeb&xY{Q1*-Z|?!JA=c3a^kt_P(DUT}dfzoVsGyp5Z;t_YYtH@0!n;Fa8N=c;
zndp)cx96|>>p3H??r=pn=d6X!$e;;#SKYn6@?qK05+Cka49gB%<Ib)7E7(8t*=k2<
zF9v)7fXZ+H0NVd}n*0!2BS#B+TAQC_obwOU_;*Li5%-tVhIk_%-xo>~BSjH*II)_`
z6C@soQ9O<-!z;jP5wzI2Ai7SlFfl@w)aUo}Di7X*xHx+DRd<coP7IAjhnMF+9#KwC
zLME=?KxQR$X#^48j-9Ss80U4?cI;P(yG3cYbYT<o2%mC2D&u@Uqf}K!a5qbk94xB|
zes-X`#(ct<6}*(Ym5>CNbEK!SR;!nTDK^WOr&hC(*t<~UX&;*1HrZ@-okWH^p>{x<
zBzLzk+N-k2{5*tTF8rziJZ`v@Lyj_L7PDht1JB}ZjnlKSZelk%<^qKwGCOcw#y6dL
zLX4W5`%_!;K)sne8_=vr(|Q0`(^ac}0cE`KG;aoHj1$EIu^;q93-=JrsZ2GCbaS-Z
zR>k*x#MLoU&G+cO3cM7OXMWAV{xE6*haygeJ?>AYp?~?ANhV)TX0}`H_c>b^OWx%8
z+_yY0-0%JfpVX!6w>jpNYhztD2Sf9R;jfCxoLJzfKTioTI@ld(ETAnrV@h%t^6$T=
z(*Ncl{}JR9do{{H*hx#W?E^2xG~{-qmL$cK_){N}L{GEdcb)WgRDk@92;w@R?9om@
z!W?YBKSfk}aC<0m-dTH@bW4U^`3HZWPGFmXw{R9P=VhW3k*0NS;JS0_y0iMCQWb%%
zq#c#0*cmmhFp+zO9sir%=>ba8=^{hQ>mpbw|D^L$d__V~L$OI%oqIdU7Mgafk`jq3
z$JVUH<RG}WHNtFA8-%TqnQxQ0<0aylPVI8c*l9QKuoz@410w?^5{lj62#l4LI^qz4
z34BThJc$#a6+pSYJ$K;^aezGaB+{Fxr1^9T$BWgas~s+B9Qq350f$$0*Oy8LZ~W!9
zxH>`1@tp<+QW=QJ9)La<vMd%&wDeNePZcj4H}KfS&CJVHUlhLrlw#1Yx^)d(O35JV
zz5ZA4z%AL@9eD-ilM~unIA4&*1>iI@RUuu!Bf$^OxDrq05Ba<0JCXKryp>>vA2q>9
zdMof>Czz*r3z|gC6{gE`Q|1dZ_gF`x%8Kv#B~gFk+uQd4rIx;Q0{IjUo}FhE;BDQ~
z1m4sPx($Z7c2DgTrHcfOWWq20(}!+0<82Gpg4U1H7gP{PIzAPqmy4I+#rF!0devbq
z;OQo!*)dS+7d{bFW~9*^I8FJ`A5mr6c2DhzpbnKXLr(9y`5U!Z8cYvsH`)c1Z-s*S
z6L9Tb*iT|u%R{hZqa`ZIdIAh=mG6Va!JdM!m6cKG=?kB#Q=rG2f(T8CvL*vYZf3Nk
z>O|i>Sp~gTQz7d;LbF17X}@fz{LNwG)`hPE9ua;6e$miXG9Hy9l>*o5jXL9T3>K0-
zbKMl3(+!sdt<$sAf7Jq}Zvm1!5cNxcWN4;u=P026Gv<l}m<lo8vq;PpT?VxUL%6jC
zL*^dUqzaN3OO8;;?bYp~vk96sI+j6;_<l7kGCP52)S_{e0UgU(!Oaf#I`;p0=U|Ls
z`Giie-FJ+zm11f^8HpdF^_w|LWFz_;po9n>_w=xP0e!_)RQR<!JMmYW%A=HSO{h2A
zJGhD;i!i~nyIZ&R3IHqCd`l*@sD%L?zS$;QM{fxt$<OC1VAr(%SR2G*n3(*Oi@ZKT
z0SH}NfY4>xCU)i{XcClIhfpwXYHubMmtpooFNX7LN8a{Hjd`YUy2kgm%gKR<zI3{O
zxLzTaiA~*uQg6lgXo^j#6&i|H3^Y|c{~LuG<&j+m16K2ThQBn=7-4Ntqcz7O?h(vd
zHCBAl<;%<Qa&Y4{H+?6%iw)H5s~`ZO@NgO%T-*i-W2y#^b6%9p8sde=O=t>*n5!Nh
zkAQl{O#H(+<d9AB_$4#YO$a_<DnL9eK49{s?hDzA8l*@jN4GTM#9)otd-Xb7hU47g
z_WfZ>eA55KrYo<aRd;8@Bm9<gP{Hr60v$;da(_rvaQi?_7MrA=`qq&&!#{@qdL(>+
zp=clQN|}*h_|;rGCax$H77fyHKFjwd8YyD4kLA9lNiU_vVc2#9l28Fj+B!-s(bDBA
zhDe1@#s!6<veU?c=ENJ$u@8Y{^uQ(3@((R1&mq7TG*ycm*p4{8Bg>f{bY|KtSu5mc
zXP@>6uoVoaT2a~9@mxW3hIl-nvmcHCFU!-Z(-=3t5!H0|T(G>`GmKJgMt5WP`XNLc
zd@z{EJg>zHppAs3QvI(ODU(|57*ZTE5I{b-1-E0!<yN*jQgKW|4=AEHZNbj8sU-AM
zh>HES-$~KoT|C6j27jUjoQ!`PJU?y7Fqpt8Ar?u1)mAc-Bv9N6(8+>RlrEgZh)vtN
zy$d-}@qv}#fWL>ywmN5K6FwC!${n!sAc=tSaTAr`GA22lRtLI}N7o!zFJ?tnK+l)n
zcJ2>lf<6yGqrFdrn3$|30>Ha1SPDvo+;x)w+KtNZykcG^tM<16HjJ17a8jp^s>ZKi
zxwTgP4qX1#h=xcr1ujL7Wtf3$05!;2kI*A1=%fV5I4C!$Smo!je!Fb<t|t0}fwE_n
zT@6HI$pi>31`Zp-P}TL04gx*U7WCx+OFxAj?YNjh5wO2GaW5Abg*pkJ#2)u7Q&eQI
zLU=^gr(srb<vY5t8LKx;npn<+iU-0r#a}At?*IlD?XLwduK8DBnqsTf`UqlWLsvxX
z#;j)HQt6Xn9LzELnokiL(x|}Mk>^oT8s(fk!R_P|0osNr8TZbQFoA|uxkudH%aOum
zt3%GW*O5=r4C;!$Q|!A)XeY+>5=3K>kX1MkLKQajGj@BC!t=upX&@@eFen}2+Sa^*
zP(h2VCIa$v{gub=V`4M+<&%s~IFf)MQC9#rvNGbq)LYO%N}(WHY!1vdnr9k;!SO8s
z&{V;Hb?GrA3)$6Pb_{SF&l{Nf^Ri2cm(WWuh2t5ICZYnrX$5#wQX)lF9@kQh%kk(%
zs<`qg49^*ioh+CR6K0#xSRgN=#uOEA2VD?RqfQI-@>TA374jkFKNuK*wJ^K1Q3++a
znDS@MANMr+)7lN6Iy(uV?QcSM;TD50&b_6@%xmc=Xx4xx0C7(mCj9kig+Sn|XpV8h
zCkgv*GkBEoZ~6t@h3_*qoW-q7LKCa<u2(@lDQqMcV98kcOA)ukzt}@0^03`%XWlzR
z9MI+=InLzWE&O%8Bvb%K_ZnS~J6VMrGj-m1Q=1tP%61{+K7pp)vFVF`co-H2VeC>X
z?s7^-YRinFF^&TirnSA&*cCq+?NAJ^@1V_q56l_$eKWsJ*d}O)bBDFu(FD4~kuU%w
zUwoT)ZIApsQBd=D_-&gjzbXCvK3u7>`d(`vh5ocMoW{CxoX*(Pi}gtw!J#R7Ykd#5
zdc4!@824S;o^F5cK3**=Da3V31OdFZusGtShpe#{g1a_|8wJDAfFSkJ!}9}bM#15H
zM8WQPo9|CEbUhaTfQF7{l?$+HL?3iOrHFn3rY;K@4ZgFP21?84-rTGEnPDJSh7=P}
zUZ@qwo@YT6^uFU>(gm>N((C&!m0OGkMXe##9!QqicXt>)gH^|Zbi}Ul^D?&LpbQJ~
z3YhTI<BUFg;qNC~q&ohd{fQQA`#xwA<0z8aOmJ6^x2&0Mv{o1GI--j(>6Y&#)avZ6
zYQ#pB&8M%~As5~vV~6!hDlvNyKC!~eN41+0E2rI6G&`mm$|vF6^A+1^e!X(!97qHy
zN^<qpULgU*4xPY8z@4*3I_MB|IC|Qt3k&~6AgI9y4`|7Ld+Pmn)!ObLi>*O;>q=H6
z76&lOKknf3=gl3fHbK`wQ!@2+_DTd+;eP|ouK_WuPbBN)q!?qALMA(L=?F>~?SfMx
zAON5g)x~+ySZc9yqy$dkktz;QZ1X3>C{*bkDRtkLcE^@l(<X~g6vr>Ia5i^H*dhQ6
z`m^sFYQoy606E^~ZF5=XieK^=7WnW61PicpCn2=zf^WtftPMv|-kzuLVZHmoIb<mi
z$cu|}+W$JyN`x!p3%6%A!WcFa2inoN0RUkVVaGNg!M1w1^}Ea{L7&0Xowc#Y>|pRH
zZbM$RbjG<zxDd<(eFb!zIzRq`3Zyo-5B$T<w|>%{K~?-gRv7uKWa2SoT<IYp{8P3I
zV#OBL<QjgN1od7?g=`G9T$cHETAM&e!-X(tEw6PqqM2s;`rs;UD=dC)u{Z>GNxW{y
z3n}4oOT8OIsLDS|LeW@8#Ds~D^0IRw$h~#f3S*k~vHU&QOoMXg-YRED+IH!;=R;V`
z!Nh4a6e5RIW0oJ0nW2h)ZC)h(-4}RwXZ&gHvj4$8Iyxer8Leo*#jJ+Lpk9+bABxAV
zRLIQ<+gMldaT4R_u)ND*@;U{WXQB8qrLaz2y<sw69@H9^pkTeO387@Pl|?p%WERTL
zfzQ>wOHVyRhFr~)X&wH6N0V~z?^1C)o#6b-5j&<Nv>1C_rRc({N;}h1A9nQgFmc{X
z54Y;`>QH?-Hpvwq$*#>@z5CN6EL)x694+;}p_-6wXWL4BdcWRjJ__u)lOfaUrt2}e
zpAUvYrXr`0P<2BlA;dhAR<@qBkQ)SQuo^lVaxxr>UTBpR*Er;Ak7{Muy)-n#E_((C
z=evlU9$(Q6WY40@Lq1{^ZpHsNwBl6gLVI7%orm&EUK;FP8Qy@RwUBt|p=0YN^3Vhe
zpj~<70kRFy_F70r;$B6XZ_vFmN*U`qBrW&XlY0+Z;%p?o2;a6i7kn0iHF@<;9fSl)
z*#|tcS&)Pf*Xy*d$R5iV%Sp%Hl&#F=BTr4MASra!Pm+>zJ~U|v25^SbHiV1_p^E~N
zm+X9mEG&a+QyO|egh1<U<_mE`u*-vBE_5V3oMJHU8~}w|MoaZRwp5vc*)4BS0Lt*!
z6)i_@3Ygo9jT5`WH$GZ4-Hl-tB}knk!O;T&d<9dwE@oQ3P~p37W2Vq=uz6s<?EH!h
z^YkPHGdyGQ@pXL$St(GdI4P#}zD5Wsw8gF-M~XOq`ao%$a)~KNyp&N}2IRC6R)D07
zXQ$E>?`c(}nhQ_O)Ghly)d>xw0EI~}1G0MQHCpP)T}9K-xJ6MHNnU79qM#eAr#dmU
zRieV!Gw8kvG|qkdZp}A9SrJX#jXl@s<~yOyq!y>w0*vOdk+<h9IuX{|Hd%C)x22Ey
z2*-}r`#fA*rZMx%GVhdcu&PKf;61{_?yHZZL|e&_`>(0ifgB=vw-#O_gW0$B?Xazh
zY<cZof{y!_gXGUjCzE(b*kNVdaH|9>u@*^LM@Oa4af5S!wf+sFviiVC7%7?LKL0R$
z&AOozbX2c?Uxyb4G7R=&v4;EX-D^(AE&EO-UqyuChT!s>{BPyLYsLB6N{NEVP-+Jh
z*Y{h6<@Q64{Xp?iICC4^M&6{YtgKf6pj?n}YdS<auOYBgwm-*Nz#UVm<<F-maEJ9y
zfW#^`<=8(H)uapb<@tQ#3o{?51SUeFcE<sD_of17vccIt>OZ-Q$`~u&aERCc;x*|u
zptd}DVAipZzn!Oe+%9wDi3-U!QCNO~z5#<VM7RO>nEomR7K;SZaPCSSUUeQ%v>o)4
zW*NHFxV<lqiBOFqoooXBgL4H>MKO5fThUNZL}lP*kK!!?mAG*TE>3_!5hZmj;80pL
zpEFJjW0VB!wu6uLTYK{lu|@F&>_Px-xNHY#cr)`buq_!~9yf2~FfcfnqQNNcP)yv&
z_#~vZHf!CQ$Y0B$PNdT<;{`}O00bisRWk`Zu9=wcvv5eR1lcv7x;XE~1&w7qLaLn5
zsUjqztv#<yx{L!ztxc|tceCEWV%>}F8G1C!h4<HnC02Zg-ZRV~ix25pGEgL|#CrpF
zi5CFfY9elKd2pV$4(Ror;vPY85TH$Qb^VP`Lt@Z4D9FKep!l8FQeulxxIe|Gk)NvW
zIoU5@G(vB6WKNmcz%7L@#5xtVcL0FIXw81u39fm6-ic;1z8ga!LcjKekJZve$~kaf
z>MGb)b|>6aW_!{&heR4yx&n7?xCJ9jGI8dnqM+DW1~G-ra|l+_U=(W_TeaG^UibC9
zRdynrpD3L07Rm3twJ|ZL1uk_ws#8mi#AnsX!^?`*>Dk|%LzDuS)-o6NqL-KdIGhIm
zRYi+}!j|@&85~o8$NxM!_U3jCz*tNB$Q-6Ed&Tv;4i10Ze>iNclzbQr(z6uJt%S5@
z_~Pj@^&+Sn%fpZRr3mvNxhSigy~uHS)_2B27gO!4*fAr#a4HzAC2g(+l3u+{l+Mi}
zd+$9LmJ9D%x9P1yrnVXcRkU*H_JLN>o{$6fk<C;lX1ea#UB8Wz8}2Fl#WthQU{`}g
zoQ6FyQplAtQsDpPauK4T5T&Z%5Ytb<8JS(u4IJXt@`?+DL;-C8Ezz2dL%}+35-!fp
zpfp}&*kUZ)ulW$nm=+nCnCyo@<Kb9mOi1PdfT-NU4^W#n;woWDz_Gs4=Z{|wTHp>d
zP^3`AT@A;Jel3ajSDE$#xaa}U*P>W1%2}&S9Hb;U<aDqly5GE9NRF&-{>1J0<L*&=
z#GDT7-i76?E3DQR)hq>0i~AlI_NVFh^lvOR!CP>i>fZ~bLE((RmlQo1cc2&M_1HMM
zl_q{1;D=AzMiKrkhCV|4IOa-tv9nY*Gnc;W{nF<p!w3gs;p&;AjeXpORQnf%7dh<7
z9iv22Rwq@ilc)2WzAyy%9o-GK8LEwL?>EIWv`Kbkv~hSdi=Fk1i&FYuGlm&l!Zhn|
zGfzBPUU^SgV;j!zJzw|4bm9ncOV@NvcXK2)#HkinH)7KsmsGbjh1wK$G*w!Hs*O?G
zvLL(_;P{4}-<A<&(H0k3brB&p2N9<CIpN*Lc|0u|^bsCTUnM>4!QvCLcUn}a6jDKN
zLTix3_p|jWU%M7c#7gm#AMFYW#vF?N4U3+L5MqX4d8Zd26Ue5MsnSf7Lou-DlG(Tm
zZz_9LQRGfb(!=1pd($kasSRj#nhQ{Nn!ckJR9k;*TB1MQ%Bkn&15>ck+53#@c+wjP
zpf{YS^V`TDsL5!b<6c-peRdz-A{OV!pVzZ-Mx<z|X0uDr(>R=54tc~_#uuiA{(3s#
zn2ODl(0PjsEgsMZsy;)#I|WnqTB&hAMy2nL0*>)qQI{@m-1|~rr7q-h+Y`>35TbrJ
zag0@5H@&wfliRMtau?-%`wv(^`1J}z?mS~3@MZxIuPBo_iZEbV0H-3GPlk6KmdrX8
z3-`Tma!wVha&<uV(jD?HTgR2-T{)f{`gkiEXrY2RWeOeI+%r#3P&af15u+A;^&dA6
zpW-e=I<#C#xuS$&qzAu&rK#gqeWa%cr>113zk)?X6MglUr0hGw2{=HDNQ@We?o5YQ
z%q{T3Ojr)OO$W^TH?%^094VNt5|0=#V23FTQ-q=`dzw(eL@YnhLt;~L7JTHrHfVvr
z4dj520P{>EBLmILH9CjNd^#`tX!u)o?#INbef5VIbm?0sp;2oR(cNt!Ylj|%U~?y+
z5d!SWXvJH_J0hU(vsf*-OT{inW`1Z;y8CKVl=k)dCJPC^J1!zI7tazN&y9OCTkvVV
zUKbl`9!yHg%{_Q0bc!c8E=QG(6W@cDBysjPLeX&m58M|E5p>=i(d(Ub;S;Qne<87w
zUWFy+0U#@G0yDFIlnE$38j`(QRfO17H>48VMz?~w9_K%(`5dpxmdt*s;+;#0zRqN&
z`f8PL+sWi|<5Pb=QQpyv<&%qXb-6ZUzHG6_(#7p_;GXoCZ8Ds8&YQR;N>Oc8Ux7jj
zV!I|ttMNii#&(a_`S57K%Octu(VxMEQzpQoeQ)H<D;2%U0DdM;K68u(c{1_3iXMfm
zHFyVgy4?Eer_rw0a1mbrwYj~>-CzxTb$X==wjWg;Sqo{+Ob^CP@&rwk7H5(;6gDzM
z+VYp7`5A!xb-TU2*}2Ijq5jK#47qnL^~UJditpyxx9WM{Rs}hC9*?GH=;|-=b~KzH
z)UzJ%t&8jPe9ze#&QM3swBpNX(~WMPzze=};3!YD*0#9A5%adU{9Qo8(+*3VI&0C5
zkt-7rSclNIG(P<W2Q>Wwy*oPzB}lFDEr_qe%vGsSEY*fMUOj%7z7X~<5vr&zk!iBg
z`pVoi@9M|vfvnP--1vcRPAq76K$ko_I=Bzg9tM|JCrA)o+u)BFQfKka$49IV&XT3C
z*(Y2f3Lj~I-JGj4;g+TbVnrX6e7?gK1{?n{AiuWzbz|}ruax_1o;p2G6bU0YnP|*l
z&S(1jLYK@UIUAbpiJY|Rp@yQ!Q%@wk`Eq?_SJT!5d7c`%5s)Q6OP~UgU5d4>^aNGR
zPWfL*FDyQ19seDEvf_S9z`s7?uzaeSsBbGW=2@0~K(n>H1lc$4itPj1ala~z6OQ~Z
zvetk!;KK%*`mK09NaYbU+dmlkzIib#hu>NyPNUX|-5-drdbXfiRfR_ZFQ=}tF{@I<
zd<>@g?Lzu76I9GJ?9Dr>cGY~)Yvo{2<M(SU$jJ^}=jyn%06po$dR84yoj)Gi;sI(o
z!s7Sck%Q?<``68V8B5H8J>MYg@mZkgqrs`4Jc{@j$}Q9#E754<dpLOBo!$zEg>7sJ
zKV|KHN9Lzmt;Sv!Z9<HU7juefofEz?hL94@?fkhCHzL7E&wA|t48EC6cU*y<n;qZF
zl7v}wq!&x~x-8Zey2{J9y!Xb00r`WJnb9NaxDRfJ;>(*6TR=4$d?<uK5C1nJ-`n&q
z(+iVKnWez$chbJOd1ON~WwbG9641uQ5t($4Geo2+`P1#Xdo4h4ejGv8A9r;lV<K|>
zP?5m>#OQIFLRMa(M-TdpDtZP&K9Em-X@g*4L>a95Ev4T^mE{DY$lxWD={Cf8BqB1<
z#M4%6D`7od8t@N;ji9vbkzMU6Y0Jtmw?&L0{u(&g4dzPi#z4i}fcU@ZGkM*V5Qodk
z5Kj>ajAJrSWow8)xImM24j7oTN>M+cr5AyAIHgOoHwN-h%0h?xD`<c;gB|UCxb!c~
zEoYR>&I#cn9ryydnbZcaIu8#A(t@psaCr~ISQdd#qmG1mTB7tK43L9vkaEIi2Zpvg
z{R$2h)xv8*X7##iJ_EkU>FcofL_M?uYtf5Pd7$d)%kay6=#^I46GPpJEb3H#XUGhh
zC%bm6>OE0dXxzC@4=bD~DcDk3zjzf@A|Riboi^;77o?T<Bc;F9JT=l#JVP074^6_8
zJe^X!pSD;l<Cp?HIg%7t+TkqsWjLOAmR<$ZCt)XHM$FZY57m(W0SjzPIT##npon+D
zucrr<$4C2|x+1H8Kahu>gaUvlCyZ%+{4z!0R)}?j!t$`UU#q=-dhWc2oY*sv)Jyse
z7^Aye!*sx*0;^(l*d83cF(4stLGU#6r~C%QN<ZpjI`ee>h}&-(c+QbCC%gw4tWuj1
z_?M<dh8nHQ;$l7ou``$5=L){T^y;=69h_INn9VTMy?yWV;i0#o3++5R3xBGn5#v+u
zAWv7`DV{7(r&R6!pCr-JF{&=T4Vtag5?|O5rnXxJIx5<`U#%3`9|%WxIA`MmndLBF
zAl7iY)(fe3jxGtpI8{+&-8cf?gu4s9OOu!8xOaRHJDrKTr1<(TO?89w4xcX00nPf3
zv3f5MrRm`gX#-UoVRC$Re;@80mhgCORarBQC}xR`yN<XrWNeH>pha$C46G<vp@m%S
zAb14NM~{`QUC;(@ch;;~P7$CM3sm4y`xPoog}Tnt>-Wb2ThvjO=mhBbV7kQe32eQI
z^VP&q2-#BIJ$ZZes8sPrD&8^W^)R4Xf}bqQR^HBiSo_oWlr<=zx`>}Zms#4`rEc0$
zN?EwEWw+VZRLPgwL8ybvz>y!JQv`5Mp^=TcAj|EX6xE9s8TuasWtdf01!NfduzF(3
zqJk5ZQEKS~<^pYEsPyaEbC6b0%bk-d>Tl>{nwJo5Jg|yv7>d{}m6?S4I#U4m-J>jp
zTWf3H*l`jVqVM%-FT$Y|NWyIv%)!jrb7x1!#WC%Sg)2=`8(gy|)mcG9BbDw8DqJ|P
z#zaYWI()t9nL=mEpAv#Z)cSbOncpkDdH2$j;g(KK+69}nAcZiBV3Gd}PVjxr?SLV*
zGf}FE0uqu+%=ptJ!XM>TwN(#37n>F_|C$68q%sp^nGCWq?Ts0H0kiAOafxr>ATd@g
z*dDv+@>+GP(*~7mG<knY=lt#c!UWEccgv~onbI`imo#|!Qs27ib6?uJdU>S}Q0j`_
z^E6v8RM1%&<(-J{R3?YEPFXDp2Qw45%2l@;^~ldOIZfmuU%`|$`YUpkd(C6nlyc8(
zZtKIxFOQ2~8g%oWv=KVkK`s4kzFCL5Bh7_e$#@%8qxH$F1BFu6{AO3OrlWf!nBrhO
znJU2(>C=|A#Pk>PramXZduvb)5i`2?tvNkkFl~tPZk^=Q;3Yp?;0kQ1fdH1rN95&K
zXG#lmH3wsSD$dN7_>HbXTSN`FCL7-GK*1XRvtKhUV~iQ+Qqm-kLz;A{?uLlR+?!ni
z_LC?!qV+ULRwM6hj+5dwh8ZrGH2|nY8md$El?=Cq{q`%`^9LI&ecZA}DhW(QR@C|G
zK7BeRUpcaB<=&c(DTehT#7DBk)IBAc<e^gY{XLbIe<$UQ$oy^PzVGxGuJrdH`WE{0
zjeu~WUvoTfu|a^o#df^Z0`3q$<B|ixD9pWX1Rzg*eDx{7C*M1Z@lTQz?_h<skj~D2
z!-(Lwu?MRdS8DzEuG=>J*~84evC=lM&I}Jn&U!~_Z^dfD+;zRWOYj^!`j-h~WRfA$
z0aG7<58w`0ajizma)ofats-l6%i!?My2RPZkD!Ef<kd;^MNR5?z!k0}$8Fvd$qZjd
zQ0o(TM&unagqacS`*7_L<o%<?qaIH)5)7$`|7UX<4~r_t8dG=-1<-pQoT*bxX}JzB
z$BGefkip;or7%Gm*l%zI6##%=69C|6K0CmFwI<Lo&@#}{o6!AtHPe69Rl8Z({&e&?
z(byPRnV4EwoBYS>glldqr$g4nylK6Ff)w>X8VfT=mY0&TWWM7_x9={Aq;Xm#l$n9l
zBgo_N$vnDRADeYpbU@x?jZ95m%`VlB8o%b?m^-kx-R+$gH@1jRZ)kGf0ZA6g3DOu~
zz=D{_M=M8B-)J5N|1ZAIsaX^**0S5SZQHhO+qP}nwr!kk+qP|6_v?PV)z#}Ctd}H}
z${eGN7wTYUm+<SBDEfAXWcs{(ny|L?WxYwFMM8qO^A~n<9M96k&PljgoB~4_5>}ZX
zD*gB(a^04q*&Vb$WRwg5B?W-2it|Tg=2St!3eFUY;J#iKfPw;0AQMQ!oHW7Zl*~ox
zlnO#h;g=^a2}(n+H|d@v7Ai@i7%MBu!bKbz<i5z^a*v0JY}EO!okFwirg4W(<(*K4
z;Q2d{<@U$nI^6OU3=sBiJWupKv85i}j{&oMH)i&t>E+k{&X4ff-RRF@`ST&$o$Vv8
zy{$g!oXqizynw^<Y03X*qft^l_4obkFQl!DlaoGcuK0dr*<<T2!gqMT+7in(iU~P+
zb%`X3Nzw=C6K_$nd7<n5pphW1lsFRYWSLZ(3s{>Aakp=UB?ShG#AyQ{)JeSEVVw=~
z2c_#EWV<8sPEVMz&<=@51J#$L)XtDI#xGM<=~%9%MWXW`nT-25u{m4e1`(v>65%fj
z%c^{0bfkilNE|#I``|TT4gZWA?EEOvb2*=u2uCc4!TGEu)X{H*f%M|+45UFi7ye)z
zA2GMa65VFK7+Q>ilCa2o6+&i4Llx~zh9SX!61sid+Un;2a%-l4KJYq~Es}Mg($9Ip
zzY7nR`t>q`<vd&u$ZGx`ZaNj_V8qq6_+CE)7bl^+064&JSPK4r_vzBWS>6z8u3m~2
zMtnhrxIX@FUL0uu#?bNS;JwM>Z3I9H9sgzMD+5A01oN_5@5eB@8$U{59ko4=NjLpj
zQ~{}w6s#6NNVAnPJf>P;9GDqj*F>LO{=-s4@U%1V@ae*p?<eky5V<=Xx)7~T0yr0f
zMZ($*FlJEX87j-dCrQ3C>bunUJIBvigNw{ip0Y5y4S@2vTnACfX+C3wjr%ND9|B4v
zlDQ=H%aKH|z@lyPNQ^DMXtB6=hR|b3fEYNBv^D-Z+Epb@mu)$eKYtc*^8O>ZSgOEf
z%@e_SY=KVgvgj;5BP*;)CySq!>$t-@ntmzQN3b+se#Od_VrhRSB-KalqME14-4W6s
zV(t7abYHl_hw&aedJ2v{3O+FXJ6lOQxsS2l(xZzsHefWM_L|oroaieJ*2lWvlRcA3
zNhMNfLTNS@EMsRWiOg0cT*gAl2~V2EI8p?s9(Q**HcZLGL_SoJCLCj`9xLJkw#dk+
zU5XyK-@mr`rXr^-bGp`FfR*g7f6Bfh`t7cBfvu{4ti#e<Le0|P&mZzl+u!8Vuvp3d
zSgOaAZC*IHWbFttr=8axQ~wi;qQ-5;9;<v*4lhSHzWBhF#aremrilu2IgUl<a$eHp
zh9jWB#8G7t(J3wlwh)90)r3k!5vp^_0i#|e<BXGlSfB^d#GEi=DJ95q0QB{-NRGdE
z8!pNb6`JVDpOL6WCEu^(LzIZuu7$v{$O1zM1T3Q=+MR~Ar`Ug3Vh@2a!zdQ2!TVR3
zE$AZhjbJG-m0=JeI|LJr0?BDJG*$f&vU?C=n-oTHUT%^Yl#aqdSMP<MkS%;CDU%#f
zQiwmsQthCajcOVYX&|(417~#U+C?5cFAS&r_~qN|z0J+}?!iX#U*22u+Kkz}9SD5N
z9mLu5aRS;SOG}1ZjJUDLVC}#fDrEf!w@B}s#D8D~Qk+b!RJ@Uf@g|`?b=x|GCD<_O
z4H<3kbhuHF&YqP;wTVm^Bb%V}ftRVcfQ7+oV|qpbd}w?g!|AT<c(kwBaHYGc68^pi
z9|XiD8}>UFn}#BjY(Yno9}bPOkvm|`PW_N8cQt`5L+n%|P#b-+Zizy}qy-6e(ycs+
zlV2JXs|AHYz!0vL2Gz^hAtFaW3N>J7TT#x%mQu2jAy||stWeGHKqtUDzym^NTJ$jC
zMbP=uRPj+^Bb44!EsNxmMHfqF*M)M;m@1zPYZk-#x-mcQ1cRM=o`d>f8POlEM4E>^
zIIP1^EzwP_-~uW>sa`HdtU6aRPLl(rCx8>R*1&cwX=s@XJ=tNw9|GK%DL9s(2??`T
zr^N)TfMf*vpEIg;7^mz4m%J#e{>ui6atLcq?O*^DoSV%;#fUoDjh2n<e>Q7^o&eYc
zwT4%K6NXk`6C^q)S(t<g7&b3wFCeLPo?F;34EOb8*pSdRHt*|`)Yvl4N{%czj2W2~
z2Nt;)GqT{gmoj&@^URW&_XAG2Y04W;F`3e;<Fmu}=i#QfxQzSZth%$tk%Hpn=3sa;
zn9XCxiXE=Dt&Dxan#$GRavnD`&gywz)o~;WBa!Al`l9K4zL;P#gQb6X8=Dw$HWrXC
zSuh2B>_Qdl6{v4Z{XLTDO)3pZ>009H_~GlU#ZwG#hR}B9xyca5vI%quxNo!dVf@@`
zdkKn%4`q>KMT>r@izNZBT7fUu8sQLRi;5xbFn1e`SRgB8cM}_qpey|(Q1&}a8@uvU
z(KGGFqx&!*hf70_Blp<cj6y}+BR@!LaL7nX?W9dnei5ewB<5-Ke=v0Fi=#cMt(N~8
zA>3Ho3c#`rWQD^$=M^i-*Ej}Fii2XQKBH?}8k_69ewcj~(UgJooafgLbb495=g%-A
z6;qG6&(+U^vTKTARzDQLvz|(Co(wbhd8Q!q;N|I~o=-7La-wvg7n%H_A}J}Cc<|L4
zxaVNpw0VeSDD>wm55M~n8mUDXDIoV`StVhsNK&a5MTs~Rz=NH~t^4kB-(WoVGdeDG
zZv7t|Z}jnAz=EfK^KShKUS2J-CQ-feT&8uWVKA#wY<j;NX~q{jL+%D9UaBB5A2yQF
zi)G`7EQE{|3A(El$<V<>2=z@{YH)-zB_O*1sM6dCPsG)aFmCm=SCO!Vt?4$feJhS8
zuZspU6hpfsE5{mTB$o^8(o|G&iPEjb;l9zPh~iMH2V-EV(SmT7llm4ph%H7Eo(^7r
zTd#I@yCy)^hzJ}W>wO~%@Ib_L$PsN0of0mCkEfa%{z+?;nzDG7Wm6A#Hs;TBYIdXy
zQ&fWH#G*X*2>wNc^ZNkL9F&Hek9DimAU-IaQV6Eq%cn#*82D^+f4>|0>~fE}K2fx=
z*(^+tM#vZ7HI_D-AUYMc9QA_*!V`)GH!5rc56uvb6*PSoEz?zy!xB*WvwTL46q$c5
zXNwNw5wXNznNF!(5Q+VOEi@g!0v20Xq$$~=Mv5>(-`q5Dj99H_b2(}S=9|&-Wz=KD
z{9G=q>#HY8{Ok!v8BJ76563%t<^P#9npN$RCxW+u*hvjm<kv`f%icNq)b#{(8mg<$
zp^>t^1wP3&_uRzXdq@;7Y=9cT{Eo{a=mOij6+g7~!2T)neS!bL^A|im#sZzGLM%wS
z@Nui9oHA=@BV#4Z`X|pu=KLpKhY;ZbOEm2bx86z{Ar&jRhMMoxPW{z>YcR7u(SC^n
zT(xZ{KPfu@Y<D7LQl%=%KQt<ING!f-!{1(27wU^jwc+e;A_Gr;P=U44Wo6c`-2@^Y
z4+)t%JOP{<p4oQeVYfOxEWji%=<SPUUZzxcWhw>~5w4FmOZf;KaDg;Zeg%o_{iZ!G
z*d0JL{mrpT8}EN&Ul5>9q+kgyb?0<#+1&=7Zt|R16;1xuwN`OJ-{GR~9RD_8=?i76
z&G=BzmOsi(6i<%%Xiyg%i}VLa{-{1U^Si7Cdo6kw6q<x83nZeq_dZxo6FkR~4+Mmj
z#zsZW<m4qpPZwVNx^Q98S=cT3^e+UqhH6?^W}nSjOFj)Yx15aCf<Vr%t*7RE-Nlpf
zmK`M9?8Z5Kut1bq_wkm6%pKbR{>Yk__Y>Pi5}%#k+S*#Y{J94^?B~W3VcfzLzDwv8
zd15IO^E(HPhD?2|&KS{T0cM6LQMyzZ%gAL<K|B}}wD)mvb#?Q4P<PBI{l}Lo&PT7D
z;2Fggl&rTUe6k)ujvtc#Lj1kvTHKE#1Ko`NW=0#Ew$+Ua!jIpBx;bnF)3)D5H}?4e
zXHFUqW@o2MG<}c;+HmzRUue0xcVn&D7?W9>-5r$4`1kNu0Ksdb;iS4xsX&6M-Xl}x
zDNv>G0KGggoORNqMrpqgHUdJf_d8&m;vD|t)S91V<Q2<zu9U3c4^!oRzS}~q*5E?a
z<>~oYU+^`5-S9?Z9>3Hgb<k}_O(kKcl?8|OJ2F*mHSa;wY}!sxE%{LFJZ}ODDaf)l
zm3P<$Uf-pcg^u8kbC{H|rJldV&zeMAw};+Jb%^b4#)GTZ)V>w_i0%96Akgn$j%{Zg
zvjaRJ2~a34=PppX8Z_#Ayx?T2S_ho74D;o|AT&Q#&{XQ)Mpc_U?*PSk(T?2~YqW!w
zI}%tCgH7LiqwBhBDqKF)I`z1}a+F*WF1O?kr>Q3$_jM?_?KZYfNqvYf>(1J9I;Ur}
z?%Je07!J^#2am~`mZwfZaUAr&wTmtgB(HaG@ILNuyU8~m_k1V>9yD_GWwcC<^U}gI
z;ZvAaD@i;-d1i(H?Wl5l2g(EyWyL>%^&JE^t;n$+FKk@$zS=<O&FGlJ*#V6lr?htV
zX;o22(c!>NSkK_%%kLWv93l-Yciu~OywSt|;Id+M;pLI!9sSZI`hm6OCiLR7@k-9<
z0pWZNzlZ^8-#V`1In}rOjhC}_aTSCRA|7PGv6-0fXc^OJ%u-?Et$@)Y%Jm`O+OG+u
zw}dId0Q7EBVs6GfO`>3iMJ5IwR=Pu);g!mvl|Xo5v5?{|{cEM3{TCZ~ah&sVfRI;w
zdi9%0>hAxPAO`vj&t3(GW8;d$q*<xPm2hA3`F}Qd@mhZx9!!KPe?_jfPV!o^${MoD
z&dfBHX!brTxgK7xjgPuR!EreRb6RpHldnp}nN&J;j#J|1A%6Z|wY%IsjqbFB+&Iou
zAjeOKAa{LIx}H`qBuL!~49-5TK{Ys@7<P<u!g{PkPe}!9^fo&$`^bw&dqKYmLblP~
zuYJ&MOVa=aJAx8Z|D&p-gNx1#l^Yx<;b(Nn#%*eg&@YL{Jv`#P3^Wg;?^~CXcAFZ?
z`$%2GLm><iwB4)=@c)CbA3Eo|wyF>>bj-80L^Ua+Q>20@pRVN6psLxB-&hXB&QtUb
z2rtk4ZDF+7Abd;N?joG#QiOz^#xy~c-ivL-G?LhOxcZ7H!K4s-(6FG>e%`DGnao?W
zBED_Hg_(U5poDh_7Q)7z?|<#z49F@b7UwYZF*L`(S-j9qoJF)Bd1<{#uJ0pzI*&`5
zoht%Z(SRk=Z#eT%Y@eY+k@vMrl1A`zx+_OHY%lWZl?jKoxuEGu+h=~P4%VYw$dNu)
z&^4Fsc3*h0-`rVL(g<h<XG=r`{9e6nxdjHZ(R0RxMqx-r1YTB|1(se^Q6@1Ol9s}<
z6)fP`ahmj^DU{tR?ZDhplN-jeaUE|6B@`wUu7toEMyf#D`oXnF#4a1VMsD}P{NB@C
zA617)Cq+KlZh3S1TnX@^NwwZ%x<frF?<g>i582`OlW$um%I5e!vANMOvQ5~bGF$oR
zV6DY+(pJpH$8}a9s(llgASpI%TfXCo&JOZ`5ayPwNu3;(;o^|{Fj0sLl0pOBr09K}
zU#U3*aQ65nhY9~dBQMQSG;Wz&p<;((Za_O{Pbg(iO~=C(%-UPKMuSmj)}-{ukzf4C
zPjOk)bn%}Qr$^oVx&2wQpHRlLJvNkr&IBA<jnGW+oH^2^zWMe-G(~xPN5IS`VlXG#
z!i|_MOeVM@2yl5r^p7{>Bd~X`-5p`15Q4$910$}KwznpipH}YX9JWJ>>qXMY!Sx1F
zCXu+@vWGTW^Qd;!m4esCqh<p$##d|t48(Vmp&B(hQAlasKZ&u>YBbq6HkIHD^Uwq+
zvto08a-lv^7kl?&&r*$I3KrA$I6EbaL2AolDvkige0ujoa!elfwLpF(Cf&jav}vBw
z0*Pl6atJ&SLIHyx9-8Bk8UKk1i+GMZcv#*@pv_~qYwbV={}edNeTWR<lAq-l?5{<|
zO}Vu&_agO9UYV|+vnK?>3RW|~u0X;2Re#^Oct5pC<W`!;{0S?3XOg}ZYjnI7<BUF_
zO?JGEcKj16b0}_L96hcjny^E|=~m9ee54*3tY*zWlWp}SoS*=#b_rH7(W44D{wGSR
z=S~<(lrgvW8}ue?vy;g5Fg5_~{13L{rI?91OoGg;=<(w?x;eq4{!GA_;6di|Dp6e;
z`7{Z<>d-FrZ}y0m@3W1O=wAuBsa1A|p<bO|@aEQWw)=S$<_jANmH=&E?u_wb5Y3QW
zzF#P0oB#ZuCyUfy@k50IO`qo*i4{m*x$aiK$2RxUE~059D;pRRRo_(&hcwUW&!-QO
zQuzn2=1dvx%Hy*Ljwr>xvbYUI(=z7(Lw6lyvAf&!dF0aJx4WO#u3__*7&sVgKo>&d
z<0zT4r#;vFmmM8M4$(c1YcgXnq@Z()|9MNhsd^jZWoR7Cg!b4W9>tygtrCEo4!VOw
zoo4ZykrG({Q{m9x32w^SX!N!9{(41OGM1;CiLnYw(0L6Hs%p*J{zvMC*ZZWG_0jp`
z<yjIDVQm(b2ywYM+sl5pv0rwX)9S%qb!Cq0{UXqC>aiBhA6w(_$KS><fhLr<pxEIM
z0M-74DrbES%VE?d7w~Fb4hN|BOrwJ~=+`iVoELlQSi?iB7r(CVYdEm<G2-L*%joE@
zwwfFJtJ!i_=$kuJug;WJb!TVUh*}WVYF0bNMK_wIZIbY1$3N4;&|sTt0Uy$+KH+sY
zTvO&ooRU{_f^w)0Qsc;L@dP=S{HBN{=b_q|>1}SfsiV>7)p*WsqA~iDE=+(D7jYve
z<=vQ(C{FaZb%X@sF}rt%yUD8&p$QvpvS!bJw$3E4N_3iiMBU%PZaOXhUJ9j0gXv<q
zS%}TApLiPUPhxyap*dlcpA?O~wMnV7^bF#@W9UsRTM!Vxe`AO~-&|Y?h#z#5pw!dV
z)jB)>`@DMjjtg~XCl2(S$_7IzO7Ijnk5Nxtag~vathg$q6-QNf=y+bb(bXLM-ou@G
z?e4qr2EKjyBL8bAi`Kn7V(t3z6hDFL_Tks!mOTBQo0f4`Wl59{g)V6nePc06={H^g
z2X7Zc#id_zJ`aD*ArOB%3;zPRi@rwNx)_>1!BJaG{tT8i*i5VnxZ6nFH=gAscDeq+
z8uSoln73?40R`DY=K(@>(qPYOD^hj*A_8u!Cs!=er5AG^;USrPvn8;g3fQ+8;P;R)
z=e@i{bAvT95gX${CCtvZTxR~h|0^p!3gO@Tyvc#-H?+Qli{-VVT~acI;m_i#-*C#T
zTo0|00`z2=x#J+f>FZswx0iS_E->Od5>Gin5fD?PMHJ(JZ_4%~CH|>><10w0#z`Ot
z6I&~G#IeT#T1Ng&1${jRIS~V&1F!&tr-3-3Pz1&O@vzFC)Irw@#YKV>W;%Puv!I}1
zqS?ij{gp&(H(ebE07f1iK}s-r9HQ)u8amGdQLba^-T}?QT3tpJl$PqAWyOXTizC!T
zP*^OJ8`mdMl6v?3GvpmA>ZGOfSmdY1gJ}1QiPFSHR4!vHrp-lMA%;BT28KC-6Y?4n
zQns&W=GwBi)QLUI8Z#CmW3cpemT_=Ja>I=>8grN7YghsyU96rm1fBq^F}q>8?fPjI
z2RxX|l4wHf!&TYe|AG(MBk+4l^8c3%Rs{TiA@Kg!%AAqmziqkY|AFBB|3M+wxZeJo
zVvl#H%GU?aHb&C#s_n5?EEvey)v$aGPZn9q=$3#hUaHiX$-_U_?9E+3fP(>qa!%@g
zk^q+OZf0(~+(gvWBHl%aYwhdGNDcEFV|VdtY7)dnd7{G6?|@Gn?hzN>v|YI2EKR=g
zA}lt|5m)hewF$_l{VI!5yvTQsi;u!ct{9%C-f4R$R#g7Suj5D7OXr)ryL7BJ^(V=|
zj|Xmli1FDb$D`rmAbO2w46_rP?Zi)ymwdg~XqsO;#oMHttQ&r6Jv=|TINzdBD@I2#
zI?V~hz1H^Zt@wMje`Ql|K7rp)`Nt1vo^AqdFEcD0KBfke6!N!tJj9$j^zDo+lvkpj
zQ-!v5WR|o<1xPm)T6C+CYF&g{-ee4ZID{mSqjQJ`T24=C4B^Dcc-m~`vf-Ne03BN&
zmQJ}nI~|r(86^r(`**OE-&S+7(g&hoj5a8)Q)ZjZtvTz8bMXTGMsq}1kT_z7F5?xV
zR4b#R56>w9>q%BOMcecGs#QWL+Kv#57)a5g%Wm)XdUSpK<koz{yQydHJzE_g%<SS}
z8xI!u_Txny&ti!?{w`k>r5fB@8(yh8b86JC?6gckB+&3;EY|)e0_t$*X0ZrNkPH!H
z2{rNfBOo8PK`v$U_`86B<ufE9`KiB&<&VPdT*=KSj^^HJp2S(~u3%b<{S*6U;T<wE
z$kv|F6gMJm0kgBx-UCm#eK*pztUqee5U6>IzGJO#yD%R{&wfnqX9{1Qt$rdG>BA$D
zr$P%HMzk_%wzNrC8>>P)vQw8(2h0DVoB^+=tA9;f1FQE|vFN8>#7fnE($;lsN=LNX
z#%fl&8Ib=J^w;pxtLgb`Uc>8mPnEq_!T;-8-5!e7`KAI>K<O~~05?S%|6v(YX6em^
z>-cqou<r>*VxvYVESum!1P~wrRo;<5hFf*FNR$*fq9vNe*QXXgxhio|U3KRGLcLd5
zF~b-eq>Z;X=8#fRAFEXA)T-lqF{fXR-1&cY9*I3A*9(535ZHde$?AJ{f+#5IgUjHz
z+CRoXw{Pr0wmty>3%8GI$F@3t3b~P5x+|x;d~bful2mk*$<4+|w}2&$sy}{eR=_?v
zEGG&P+ly^j49OGYId8@Rr~#z_hw(~Q=i}(A#ZNjJU0B=UX>hXwr*Q#qBy_>DA*_bI
zd5mtC>SFw5+ZaR4?fe^*8?LZbar<Kjp>eQU0q`(U4^oCpM}I_%8U$M38VpMmmi<EA
ziyQb^l#uFyqXb|S3`rPb`Es^@G4K?*FQN6M9+^Sm&p(Jy5f5<rW9ILa(_x1@AF7-b
zxjduFJY@y(+}uO|x_=Gp6MTZ-w}GHp1a$cYhVA{<hk61M!Fsp2AA@c8!?%A~n7P)e
zLDU^8A-N{=fH+#I4NQuET4Y7Lqh6ZRyX>ja@1T$$f(RqvyZ^ha?8SVL4D8_O;Ncb#
zI1Ek%22NqP+OHo3JwNCs_|q*f+}P;pmu~~#T6`Izmh}qvev&pI=U|J}UwU;!^ou<L
zHn`pFYo7Eher$3;=i>lD9CRP9=<Vw0=opuSlE}FF`I>G8rsFH<>!pu`xE=W*P2fx%
zuI&jYRcvTYQux=}j$o@T1WazPe<Em^OhVhHtwh93S#>A1*6FOB5nUu7Dt{!hulz4~
zD3Tc<1<yYr-yX4kbYkXv`y_V<M^Xs>z~~oA<9gO=Z<O--&IK*BS&><2ti`oSkJx&z
zEaydITvi4X(#R{@z}*~gA0{>(F<gs^`cz#yGUG3fYG<l>)FE{C#8^|%$&!XpfnAIm
zJdj=|cHrhMp;|z|puOlPk{AXr6vG5&j*B2W<06{I|6Gkr>cY5y_p5-(vRGO;eh;X>
z{dmXkbeyGSYataeJCSIV!pOU;IP&xEEcJ<rGF75bi+aU6HcXMek78|VMG2EWR}BmO
zU61=)y#pj)5A|wA>g6AxHNGm=$j}m#j~21{2zz;}*hhtj;`Ro?N%K=QJ3W;Hy?j-<
z{KPA>&zG-;1gIZBv|a3BNIk(R?&J563EPfcf{xb)A}&VAJf))CtG_~*$KCo&<00sO
z$LlPyx#RtS0*9B5FDFM!lLz&&$)8jUcSb%!I{Y7(^l8EdSu4T!i)_vbA*S=WWEuqF
zUE8h2aIjlCI*h|B@%V!O7A4TI$Va?9Q=m0hA{ifyX^kh9gsEe(xyG@1jf_lzUzC;*
zBFG{{ZzoV7Sy+n_NDyzkV3efmWpTcuO#72k5au6&9B}qJ<Sj@HnCCVDtPeid5?n+-
zYg~Rr-^YS}j~~Y3ZzhbG-rMctP#6p&dsW53Deeu@_eJ3-!&@{q2>RorP>9@Uf*PqF
zc!hfKHa1qX*p8=vV*&E4v(4aa4-C|0oI_x0lJ*+{Rauj%WUV9&vejuo1g%GHStYA&
zXVo&%RVJ-ca@v!p;LSvFX%tCWu|d6MODjH5-pkD22OzXMhN>LBw5su{9orvi*|9g2
zE5US}osFO{#$mlRtrL_!c_O5j>wN2C?W1p8H7vx%sGoOCUfKop8Wq`$=6WX*-La*&
zgbVePde#4PAq}j}POXR?En9S3VnlHK`+m|Ye%z$MjNLTFUHrJ2nW?S4QSNqL=NM$i
zFi+9fPx-IF5EpClP#?7j1NW*&t!xY*I!7Vj1rBNw%YbAl3FpWpdYsr;(7~Rj$TX5<
zaGPOXlNsf4I1V{-y@`vKA8@m@eB3)0A>q^AS(e>(_O?f$h)$0Lfk_+pu*%}c^{=T}
zjY>vQxdpdn!^4)OwWclQ{HM`d6LJ0rUj&|5a^#4>KIXKjZRW_|s&7R)Wtq9lasqv<
z$~S9lDUj?4xpX{(=_c}b^PqJEq7&q(_N`u<C+}OYa`0s^7RCkxO@E#+?)Z|F(%^#$
zPW%NX%(UzussiuIS}iP!+cNR_HAmBp5Zr$RG0EvXFcFSjly~=`2qi;!YB<2+S!n4E
zI_dftv<W9506@SLxC9I$cw%Ti54N87&x-rMfGlab!y{S_43*Y195`7oX&WxJY8a_~
zw5&@a50Iu)Ci(;vY2$T5X5#$_VXKWJ5uL}8H%x@{w;dJ)XDMRZkijh~bP+6up;F0u
zoSG=cZBXGQpbi#DA$|xOl-+ST;lEzfb}vZYsvwvM4jBP8HevttEM^9ul`O@|JhduQ
z;5kJO0;r%-NW7o*Jm7(qfEzB)5rgEqB^uycAwGz0z#n7Z?JnF?LrG;@n*TTnFGM1_
zL#wa^Wq_nokPRL<VICPn577oYQV-ubH2`(*acBS=xC-1Mr8dpULCtA4y83K=>;lh^
z#Xv-C+T+?mvQQBk%<7Ift7UMGyb+;15oD0S-9m>#KGIt<`DVUiG-wjE?rTl~F@P7D
zf#xY6q#W!G9Ae3V1r4p--`kZ=^2u&~Y;Vb4J8QwEdc?Ca7PNb<#I>kO>6TQl^4U|A
z^rlDy-&9u_Q)hQKRUqYGM=h(Kr7V2ojY*0|3EfgGED&vxh93rRN$)Zf!@G2w!oa&t
zGDd79hnqKYBK>d-SW-`i(Qs&&0V@&2Ex?S&dX}X{>eIwRG^7+o0)exKifB~KcER>i
z^3>N<6hEjYaFz`FUIOES>fanH!^nLf;2E571sHE?s5CGmyb4+4VnY_%mZe6uXmazC
zGsu=<ED478zybzkK#&p8?@*=iKC`y-lBU1P3JBhzfehnH>e!9qQv2ctn)0U*9Cfg2
z6ewclpkRjM+Znwh<JuS(x{$;SR#&^W2~Z>$8D<L1QK7J4&2%*JtTulEa3w4tB8f4K
zAee_F4I%Jp_+(*RK2;~+3B3br@`L02_Af5Y!no*c>Sxy*KR466x5Am2=+PU*ZKu!;
zl=-VZ0(lM(qaJ{sL5><73}Q4B<AvQhKxzJ*qhbu-bkV`|=&xg=j{;a%LVbzWG`F|m
zjzam1hTBjb2zYoY3rd1oTn)g5NrB}pBIj)bBa>J`t%U>v_lJWp^Ccv53Q!AcTt-SP
zq!aFjc8hAVo@O`b`w0=wE=tEg33QthX0HSx5J3DP)DhrWT+2eB!Fs`0V^)Z4F7JR^
ze7QJKEu4-Oo}hSnUYEstNNzH~q0c<06bKC^v_@El5^N?YL`VF~cI&Vp^a&@^F~Zk=
z7Ow%0Xg8!K4l5#&jZ_6#-UgKb&Mo+C=r`2kRe()`<3RloMDWsr3IE8e-7%ZuTdwCr
zJqP`fut>#gsIA~I^yd*Zq(J5aJ~PBG??~7Aw_{1_M5K~)OBBPCF-)&`H@gp~)&^Yz
zHsV^4C%a%^0L6R_X)Y&9^35GWVbvf?R#FJbg#a5To#Gb*ik@MYm~N%bY3XPN4Ct)r
z?eDi=1UM+RL{xhL%?il_bskuCvk-OX19q2tfv0KE7_MtN1^v-Bc6(wj6BX&xtI=PK
zUW~>YX0vw9Qb|mjcn2r9M-3F&v9zp}2Kh4feeAaWrfAyyWjx{{&0Zp2@tP{K&-q^e
zx;5xudiqmD^1vIuU*4M69>u8H;ZvV*;GFOvp5v+L+x36u!bv2>gfB~Vi(Qmz=$Tt5
zW=&HBz8U%iN=PL!4MC}gp!R6N3a-o$@OAzY8rZQX@SC4#-Oaf<Rr>qG+C&Zk_Zfv8
zeC}oM?LuE$Dateawwm|gNwu6@5&9FNLeWn9<KGSd6d0q%LEHkGbEXqA9n_G^_ruSI
z@P{?^ulC_1BvzeB+8?&Z?}k7fja1%Y7w8N)wELsKAj_g9-j5YLIolj5xWW)ib$y%j
z!NC!NlT@co2C$wiT!V)Nxl7UzD#b3iF`x+PXE#<?j%{Jyzo~0}BBOB2N=xuR1m2gQ
z7lYQHi~(X1(LkUV(RKa^1PC2sF7t#uNS$SfV(G+e5Qyw-{raAE-ZoFsiUI@;D1>MD
zjj=PH;%&J9DyP2(36~{?TU?y`hW9Ni371L~&IJ$iK5(aH2xZkkis3Mua%X&fXP9(k
zi=3ByW||zj<C!HKU~)3#-GTH0%J@&qqThFt(~jwo=A*+`QoT-CH<s)_aaA(>gzfY|
z#cA^-0LN5#Y8-$pNKm26;xe4vEcPtc&Hp*)D?7JRbNEM!3NYNrZe=R~mdJkf4<VRr
zBi&6~MuyKY1onIPe!RhSES0r8>M+jEsv`H3H<v{!BptXs;*IrXVxHYA+c4v@o8u8f
zYv#Cw@nG3fa%$`vGWRm6*7Zpktt)XoF;F!pj6#?qt|QT&PWRKk4Dex4RdI&7Ft=EU
z#For{m0GU8?q!j7d=g~6c&1p9Ix0VMM3-+PgCHDUgw~G>8d6o{{d-?bxwvvxE>@ij
zWwAOx1I3$Hg{}RnOrgTXKHO^f^a1UqDrNWYqIzt1n<>zRuhU?<=zP9TgGKUis?+Ty
z8?h=Dl9B`>gR%o;w!Mtt!t{qiXHkN_X}gKUi>C|bPl!EOsG^2vw-i~m?iw~+n_iG4
zl~RpD3<D*IxaJ(FLtBP2+Nebnc#yG)jP8u_1TYdm_JNo@ExCD@jWRDmgk}XKgz!z)
zbc9f+++RFmLoeT2*Iu)a3F#S06Ci*Wi(*#RK*Dwdfxuf}Q|@7{`Ua<RnDKaQ>6j4m
z;R^uC8A+>;B*U;lX~~v%p%NG`HrcRTHu1%M6xNJRF%=nr8ca;2-CCY#ylx&SBb<O1
zTLxBanghcp6WRpTy+dxvcj4|G$|E?qN$9L<jFd(Q+9W5SBb2CI@)puL{Umfq>i~ch
z1SpFmQDY1x>e`aXqYZq<cK?mR95c4y5nF3a40OP@i%hn3G@}nul7Piq9P%~&0>Pk^
zu-G0p{y1dB2M-}8vTj=|s>6@=x{C#MSA)zu8e;Oa!CBwp<(6?oof<>Q2Jkt2*BwAj
z0K?6{x*xGuborS-#Qu?Dih@~91cfNTn+N0Bm=iMdH>BzBaXzVspt#`X#JBNnPESa*
z3PB2g7g96gMzRHs0P8X|qgg+g+O3I$SL-<&t8S>k3@4aOOm@kT%AE&Ik&=c1Ps*Xz
zX6ZM&5-E9=XNd+Fw#M2VFa6IRSI;7)w9NUoV)lkzq4py5xDQZ(FwCwMutKKnz2yf^
zXZuqTfr>QjrHU>yA2%E4))u=q;??sWCQ>kJ`&|m;!w?b$rzE%&K)f$6Fd%$6VaK+G
zd{zCcx3UU3xdrA3c%toHh!^DSyI_CWemuwOGQbLq{5XD-6p(O@VLmOo>5L>McikE-
z>$q-o1|df9nG;ZKz}whGvevkhV<Hj`+1S6jQLd%;96BDW-lqg)@J&q%Cy{ksf~%%z
z9M(hd2yNi-P=AmSx0|^A2yRA)G{ZBvNO`Gzy}O$C>^}(IT1pNkRmmu<qHH~1Ci6rh
z6&4|eZMfK=T{dIU2Prn$t|LYDFQiXC>!an@itG_hvvmHF{kekezkFICac3<khG7a)
z<K`-R>oA4n5b>u<(k}*0QzpSW18@sz3@@w<&z1ri^l-A)^&EzF!V(zhEB5dU)-m(W
zL^@4JsXeLhfim~IlV#*D5B%UZ>H)2vU(>nf$KZv6+A!+}VXXS>C>Q#i$$x`a;vHg~
zEJRzGsFsihnWz>t{y}+IY?#UHb$r0SwpLYpOzj4!w+gn3R55{VEII3j>RUh%oLK?L
zgsRcZt$wZo0$ciq1a~r=pJ^2PMag3vc}ZA)NLK3z)fI}lplA-^Ri-q$p+3G2`U9&Z
zZ^(055{ZvKp*e=?ezLe7g5z^|qf~Yqo9o6@M=L0P(wHM-%%DX%zBDX*Y8ux%wqktd
zl~K-%as?kR`;ovM2-mb%S=jGj9if%22+UGae%-tCzuXH#{=i@z5%x7}K@=w+sQ(JL
z++2hgU>avsOiemAoSTse=llW0%db`soK}w=ZOQr-eDS(veP^Qt>v6P8>s6oJ%FQXc
zd*j<fLo>&^CHYH&e_{QMd^@MI?jx|*acIi#xrKfDbou9>`Da|*x1QH8tJmAbB|WKG
zrWk<!)5mM_)8L7<5~b0C9_M`uZsP@xyj08u{;Xfb6PQXJ@jQtF-+Tk`!u*flZN8?2
zp0s+ccP^O^*~({CDx@}vnL=6U93oW2`}@LMbb^=qamENC$N+!qefBQeUY>WHTsEGo
zuzpB;kwiSa--Ht7$$NmtpCqj!3zE|M=wl`QR2l7_<2RjN!Wr^sLj89ZimJy1y`m!i
zEO-(r=Rm!duKBa?l;YZg@C&Mw4i%{`m6udz3Dr&?3`;oOkN>LwDRuX({?~_+t5L^F
zp8U~p*!F~a0dO7i^$p!f;J19$Ao>ll*%El`5PUV-Q7jSp+3|I^PJ@23915sBbSVG%
z*Be(Ip4YOX=@bzBOwgx(9F$W2amk!ZQ22qQSSq4FFZss_*G6r~9(L;@{Ymt1s8r!Y
znWGjrU5-9p*+$-rw}XI*9U35??7(n7_m$(AeYyYJfAiYxd-?Z{a7VWI2@)ljV0cnA
z10G3l=Vw$dBnwCi!{%sy9y;lb){&@T_1~Vrjg*8+8?1|^MdU6_|LVY=y+-T^Pi*~f
zdyn;<9Jb`E|K10Ruf#0ZtX7i#gG|#=CZPZl+xk1!8Dl(-8XAx_ED~{Gtoi8IhP|q5
z`!Xz&M8J)S{d#UjxXNYS|9zjR(PB7KFo-n7YCuffq{@)QhaoA#Zh7PAuI@4AkSV0C
z2wTiBycRJQVotj>466tV!0@ZKe_+OdMpI@XxXd=!Pf%XDxB6X1;iC4-oGy9t5OMg3
z<s><W%tE_%z*9yYAgtc%T4;suV)LqE_jVYv3*ZAjO<f<J)jE6?B=jAv$IDgqQe!<3
z;*1;X6T}$Bjr2l^Fdz;_VmNMCu?(NIpH%FjCuUx>adu##A<^X~P6g`R&pHY*g6XW6
zV|RQ+d8mJ>ysRKxBg)I&b$bssd-ppJ5JT9iB?L={mk9J%VRVAnMW-;q)-iU>ReilS
zK1kGg5XXcDf}pUBY7xG3;L@Tz7}5AUUza>{b)pJUe{XHq-8R!*`FJ`4P#`N57Lj)X
zGI7}}TE%W^+8osglyC6-=luXN+b^2`l-jL>;KFR_1oJa-^U-2d<AAX|PYEL6!#UBj
zF51S2dI)_obnTRYHzS9q_1NvklynAog|?HHZ|uk*76kU1?M^LywF0`yBp5G3&Fh#y
zNTG;7Z-pC*6cbQ?QaqXRF_j0+!-K0Y1pQkMsR@VUfQNTRIIN8WAP<|ca(E%e{pp2b
zI7zU>_hhq5=Mk|gkHqB8A+I?LXp1iF&t3Z6j~ZN{wC{{%9Osq-+z~;BJ0N(#)2GoV
z;3r96$>;#tF#>&qCA=JoPdZ)vgmvfff8aw0Kgzxnl@VggoeTsy0!9qh-*DjJdFCaG
zN+7%H5fq3l+cT_RWd?eLO{M_LP$}~JSZ!VoX3GHPX$Br+vWdI&jT*W)4`Lxa&<7;t
zg<;tIqTC{EGNWdIdsMtQ?tSbT@aF044dl;#bG+snXm`h54UEf~gbLM82NdQxB5^eE
zNi)H4`j_E7O85vjAH=Cqj+H%Qcu=PZ`qLjT7FODo-{(?x11&};e}L*jjd~j?nUXXK
zE=DlPlh7SyS|+zRxHe5p^MfnEjuv2OS&=@qOnN9x8c5aM_D&H0DB4Y^ozb#uPJ$fQ
zF7|99YZ(S`K!8(&?Bgj;LXoIIAZTIf$nae_DrkflIper-779Y?Ud>C4EbtG|07*7R
z1st<5`e)1UN0w|LgTktq4qssGN=I#m=H2zO72_aa6_UF9uYX%boKY6x%=AkR@t}Aa
zuwHZ}`5?F>N_1a6C44}BZnvzIk>nI~CF&f-(2oW>1jcAM4G~01ZOLNYR%Q)OfdQ{3
z(}+<M%B-<KLzu$v3=`%Osv4vJ?f(3tk+Pex4V$6F;m0W?aU3^LRaA)2D=w;&?qEyc
z=tDw7sk`a83t$uhlG$*iv$IIQ!yFG{xUfo!f+NLNp@4;)6PdUZk`u;J1}Qobz;a@u
z5*-olif2-}iDcw49B`#fAkB&CwgSrEkE5MebbbX9cPr1ro{=78b|GUoBSp|%Yjcn>
z$Qvu(u7)6tFzH%Xb23aK6;aErQz*N37e9)>YkMx);rpcv{dfE(I;R=@VQMU_&e9JO
zOH@125LloN{-x(n!5%Vh?D8%~Pjj`|^*qf-719qgnCD6)wpWx5(`l_~X69-TcMx(h
z-d#E}3$o~@T%DcET${=C52C}!EBz;eba9FnhvdJWD_CIR+`?!n?urax;5s=9(5r{O
zrtHXA^bvIeqizjUjtepWI1=!UDLlfh<Wa)094lk1XL1T=xeu#pv*t1TF@QZWgEskj
zT1pa-t1A*ioEp5a4JcH_Tm`S87K14$ng!%jx>IxoqN<nZ6dlS&D`S!bup!O<yu(N3
zkFUn-tOby^<4Y%HkU!_epZs=}LtE*AttotZ)y#&k7n>13<;<j*A?=i8ul)q&h`6HY
zur>*rqR>1E22;<|mzXg3KD7}VJv!}*kp0`T>pWEw4h5JTBkWG~!*c!~^Aq?ZZ5|17
za*^Ut6ww2XTtmJ=hM0?89PGp%?p1X|oMulIgue?)V$`EFEE)woa@8lO@`VkmY*3cA
ztszq5u?CQ{Y19bx33C*x(^%bc<doXEsSakiC3tzc!zP<Ujq>U4$Q^uo(0^;`VaO-O
zus{v%Cv`Z_!Hyq%WA50NYSBHbC`a=g84p`-@6}tBLl(ICJ|nJz3SE{A6aDAsj?+wY
z;yr)>mW}z>{knJ%)VqsaY;PFm(qw!5HA-5SOyLiSZi0KnO~0O59gR~%h$iAFl+@T(
zIPZ<dE^d&5V;5Ohlm^!}gLT!Dc1RMgT4779+Gi-CE0s*jYg$h*aSb~(qtSb=ot(Ng
znqvFlVlo%M=K7}0NpN}55N;jKz$=ZedsoyRLyYu7cd+LcKdqDAI5pY5YN_^_tT&tr
zXz{fAYSYDb4Y-*_us=ZDqt|H7399Qfu%o>zRD)z%$h`CfW=z8%op{d!ca3b!C;-%y
zh`n3L2YF@y$CEdoE%Fya)|v*40>R|dh665KFr;6AciJAJ;|$)IiN#$TL0uN*R;iaa
zHzve5^9vZXyThp*cjtXp6yqHNJ@_U-+-;lhb0#DoA$KvS#9=;ZO4pU^a%G6?wgG>e
zAwk<F_B6Y6OgVQr@229WJ=~*aKsUc>r=>N(F*ut<=Br+VRWpTXv<eUlGLZC9(zWmj
zai7lenc7+YS!IA=2Dth{Snt)T1fJ;H*=9kNs(JnH2o(xZ4>vMBi0^Elfo#=FjKwo#
z$1sSm^KJw)w)Sypuyai*i8eKilhM9SqU;M7aYPW#%Q39L{W!^+^7?_|+#@kK^-AUy
zZkVak2jqyj-9TmYW6xNY#$KnCi!7o9IVN-o)yDa8>b1eOieOKK;X5(ZdFApM76m5@
z60W%t1J_a1*1IqGXEU)&j;Q&#N>yj#=4QXmWD4V3u(!@76nr!LS@)deja(IN@PZ2Z
z;K0AAZy)S%;F!Jn1)bc0%m1KWt0PoJx3fKYDQPAV1LtZeMHigDSzuD8p4-i8uYtIJ
z&Jpw)+gaewe^8To6p%$B+_L~-+5l*AnbCF(M_-9At$-mrH8m+d_1LJ;pKvr<7>da*
z<Y=VcWD;d0NB%O)1cgI_^&be@SB!PqtiBCbIbjR6qO5I|Nd(9Gu^j>*kv0^f$~H-v
zDI6WWs)0C8!+s{5mkoILe>vY!UaeI|Z4_m`Vz8*)?G7IulH-f5RuBpQu#=3$7W3PC
zWR{a-H_a(a$T$R-GZyhCm#IsD&#4WyEaXZJ3FlQvC9!KOvf|Z7{^c{m7Bit2bSSUk
z<ySr<^B1?17tJoGhMu0C-_>nq@{Prm#zyXp<G2~tii>H78)0O!Xl$G;k54DphQ6L3
zcQX)%9-wzmfIe96x_XiE*0{-7Fo#l4HzzHAzNw3J%^dg4HRND3J8@l{$~z;7{{&O8
z#4_3v(*Kn5z8?BB?=vUh#p=7b=OxzdN|p$a>{7Pz7g%RIg2}*t8K7q9Fls(=HWw-g
z5Wkg5f%4t+ab<j;Y|Pa^#0W9DzM5}>=$Gp8KyZ8TkBvi5o``<D&Va5Bv^xUdW%SGT
z7+^lxxxKgM4z=&WK1@GpsSS7ZK=ZJ6J>?&YMh}<C>&$-*!T{4QP=60f%+d2zoeG4u
z)LCim@vgmeM7NSARA0FX8!kiF&3Q^ob;W=n^C@l^=>o3a)9_pJ#JS#;eMMZ$i1p%e
zgBuufM+9nA*7_a|n8gdFAYV@+(7np28V%0+<||a?vTN14UYxH`P$mjP4}{Qg7c|)H
z>ki!MV($#U?t@Xqy+`_d?csSpA!#k%LH>RV5bIdt<t}4458fI+ZoHE5Tg=l3hz2{g
z*o0E^dIBE?X(8x6q`A>v-{oVcY4NZL)h*!9_Qns(>LHX<!9(YJx`U|fQZG}{b`<$|
z4^P(|Uud^BZfzbS$a67IjxH^m^=yY&Giw68l{McqIygg>xxaG6-8dvn5q#_;PBQEq
zZk*>3)QOy3J|O_0pYYuZ(wvI(w>#|p%mJq?@2o5RB%xPvOXo-(mo6D+xE7ghk`$}P
z_{2&)iK>#uJeD4I=aIXdo4mf*y#QSlxD%1$R|0y1*kQsv-r=$plPuO>27`T$O7xCK
zLKf~%<W(UaiX}3Bh~4|okR9kh6<b2AP?f!auT>1IU>dmWW2kBq0_8aDBw!C|?U8m&
zP=>|$w)c`=4jr+Kr;+8jSL6X@3HU?8cQAluUBC=^$Qz=XCrnC-KkG;?iICwN$Tweg
zERa1|I4ujP>j(GA){S(xuBhYBG=|)8P)@tnv`k+!I0?axLT$N(;J1XGoCCZN4MrN2
zrLpLgFHpFiU6?`1H;xd-emzih_ifN&(fa}4byE3B*#3Cx>>1}k#GpOA=Yt4&y`sSZ
z$>EAAHm*^)mXMt2Ndna(7$C&L3(i_SdnVkO!|)04ixO{iE?1Mz+FQYqJrR;9p;a#f
zx63`9jOrYs-2K5F9F14_>PfM3fO3)quqk<}Kos69B@U0d@pZrj!b<pq{!o(UCR@VO
zwWa7Re0s2=ViY?u%;_Kk-r+<fXe|PeDBQ<r7cPT(p>;G3aOxNw9!0NrglS`%brTRC
zR?#Ay$If4Y*Grn&2Uw}{X>~Hn8E!wOE#Y+WX?|cYGys!QFrkyTUc4i6eRZtyrp7&}
zU=f4Z4jV2t1jE2<j&dMDA?XhhbD$`n^QOcZk%at0Pg7#06Qf&I|G89<pQ9X}%spfZ
zBF&PRZ;PS0h+{i7{<a#9sj|~crnhh1%bo|iIc?pL%ZJH@Jowy$gSa49aQJeUgk|J|
zz}`m6wG>B8gWHA{BU(d48K))@g7F)Ipk}-zs$1#%uA!118Yd54RjEq=6_4Mz8xH$0
z*dR0^bBZ4!Dx}U)u0qUzQKttrBNIWs_9YpO$wPZI&jl7r#v5D+{_1%r;vleOx>R<d
z{Sx-l6%FMwZ#NPff=~sX#Fyn&ZwSjo$E8xim}KT9W1>*ozlprFe#|rj4NWY>_x5Xm
zEp(>ZUg>P`scHrklAZ<$o<fgpqSCmi7!i!*CC2JVt(AeC%2hkU{AoqGsoft15sa>z
z5|7h*D|NWQj04xEXDI8EbaNWcc>!gA%-&o~sim?*@0yr(k4{ke>`i}IH+eaEumIf1
zfC@^%Wwdw@IDtY#-fp*G_!z~9ESxo`+J`GB3q!v<AqO!fP!{X(Tb?=b0Qd*IMc4pX
z0O>?mN7tkSrR7O3!9{i=uPeDS01LN{6@i=|Ue8$8>WIcfy8TOCUXK{nl~Dw+Dqs~}
z6V>`E^Af>Q#zW+N`7K$Fy1AFlt$-p@&i&8QjIbNxR{dQi76trf;qfY38?&P+$(?s%
z3$B(FacBa*QHY=ZL|BLaax*1smWS7xx)bM~-{ynoI*;9}#TuaM9EU2Jto|l@QN|il
zKrph6jrQ|!1;zKRa|p*wYAPo6DB@qWJ%hi613y+|N)s8k6xK8!X?5vPcf#ZPDMN3!
z8B@TY^gdhOx^~kn+)`{hER+KjWr^7kA1tamAMrrP!#fTp^MU>P4D`e7_l)AoE6N)&
zDB7mi22qSH5PO$-&%ZK8YK8Z}dfDQq#9eiZW3vQic~Du+SDMamm?PL1*P+}}7e$8q
zF|?<|odl@SUeWNLB?s7wnaaJ-+DZ&Mguk|h>T{C2Sm4W}f=6ATXj(2x1Do!q#BIxC
zY<2D*1$7ExrK~pNRUnrJx&G&53rYvcrw}1_d;d%A5n#)~94EkqB@4Xm8{cSjIsy;+
zaOwnKtRq80Env?N!EQG4S-Ac%L;Tt|hR><)_eSoidZ@KgXc2g+dGlPctK+6qNbPwu
zZ;DuUdX5iQUvXJLuWmYg&C=bo-S)#vgA-Z7;vQWC`zLEWv?E(9wN$n4F>EpBnYl+W
zovp|5HaHsGD9t1MLbi5qadeUPxQjuQGviU<@7^%7ofr&C6(4L}A_VFJd3n%%_o?B=
z*nzV{!bk_D8<9brat3)?Kb$0N^g{QsSue_{q&S<7KLC$7GKl$R8$#tcD8OsE0VE{M
z9c5&+ch9U;%VN1*V4wM*_FTma6AbIpdem_TBeKIz6@ZY7@%rV6RDH(%<2aV8dG8@W
zbHMOEP>u8g6Y|+6jDQwwaIE{l90c;81g>osqEjsVQe#rtUonLF<04xe3QIwP&f)ew
zO}78s%f4Uk0p-Yhe@EVhj+Lk;ef)U`5xzkdwyw0od%I;{k*RGN+tJYz+~+Icth4L%
zHDopv5f0=wQj7?tm6FKL7;Y#PUL6c3rN7#%c-N*c@Z|8{hFxy%YP^2?rajbHTMunm
z33~C_ry~9@><-1b{y_GG5YA3xxp!WPpDIS@QvwX=mCWNawAo?%Tay&+n3{s5htJ9S
z+r-`=&B$66Wm{NQR>L<Iwr=R$BVB{Na`3krs~=LwXH45{6p~8Jsm3@H(grl?YQ2gx
zsr2{iO?#j5#ns0Vc=PRelkr@}fL<q`_4?6#@XGJ@i+|Hs4+91<5Z}q7$m@ULUV()i
z;9$BB^6o9i;Urwnf##FMvb7pa>Cuk7#2z}{G;BS?+E2?n!xv=Oo3rA~CPfxJIY*yU
zCr5GYq0cGe^_bKvd{deg>A{ky1<xW2n4h4%4fyam8MQ!N+-rY^c>)O8|6%MLnnc@z
zbz8P=+qP}&vTfV8ZQHh8wad0`+i!PX<KE7>jT!R?WJG=$xz-$`L;Nt^XNCg{G^kxa
z6QCI?sCTXWE=EprPay?jc@bCf@7CeTq~8ja*>#a=OKE5}^dF|XY;dl5Vo_)8Salp^
zsv;i|<pr=38lymK4E9LZY>ZY?_RQ*t{&dDQJu~TGRK-w7@V3Z;C`L3ym<lU5X$Kx;
zr%{8yMF*coP-K6&30W$yWmPM5a^Xt9b~RfpdCyKNS`-9)A2n;L_A<-z7Cn(+tqemp
z0CZicq%8-iOhq7m&oS~P?ynLQrj=sz)y7pChA1_PPW`e0rGiH5lzXV4hd<yZ)D)HY
zlRi}7xhYq)_t~v{&CT&&nfQ+|_}_Rk1jz^Fwk9JR7I5BkhS*2DCU(JJjQ8N++~8h%
zfm?s@z@Fei<NY)iPu+f2a^RRht<f@Ay4+js|NV?@cq+I;nwa&Op+RE=*_noF-ZEZN
z!>32SIz*#tm2LLg*P8&by~wi|w5d_0%Uy}vwl=wP^YYTVY^|b4Fz9)0QleRhamt4G
zydN9+^6hQ-APw8@{0)x1%R7r~_s}rUVR^@IcOMta7>Kk~nbYEdf737S@KWjv)#&w7
zkO69^O(0UV-uRMhx2U)cb9gSDn-|gES^udvdVu(e>AI3$Q(VduM;y4+;ji=HHamS5
zs1t^9hcQ7TBcl<cJ_bEbo}WS^koXpUl+R@EVTy^%l*HXg2(7ZF<IK1D0}DO#3)_sa
ztiR=Uo}F1-ydG$ad27D5N>4i1#1oiEi+13Df2#Uf?5)XX*=JCGgrE?FKBQILyFv+k
zw(fB&YScAL#Rx!?yX$-R1%l)n<x`H2f3<3$(T_3!;gGej#v@vaKQX0$Ty!zOx9ypI
zq>sIt^L>4~sl{-Cc>JWhSrGT<&p;h$W!9J6%G%Y&Hw365h6tW%g~APqsTRW<4_ZcB
zwG_%dpG?JB9FRGM=`ZZn8B^gDD-XY$7v4$*W=HoD`5&@6`QgVu)*^u6pcqFya^umn
zi}NnN*Q3iW?vVw_i{a#qh00WMh2VEacT6&Nxyf?9Wmb_={ak$Bvgu&*hK$90uGL52
zq1rsX1<itWr{MWHA&X}|BLXsC{qzJU47E9XTni+)O4^@m_M#K6XtKdSgOYa!^0EBY
z42VCEP(NJ;q4-Zhy7`0S{n`M6g*8CmHtd$ihpzAK8+?`XFn?l8Hc}RwT&q+)+#*#r
zHkLQWEo%O(P_+akh`8@sdMRv<?pg2;pdxY`%d;g-@IUGq<yF4&c+ik^Jer-u&z*^#
zj<$j4Ds^rvgX!Nx18&{<x~dOX2Cf>x<oau1en+$&7CKJSM5Xu!q_~$Qx3Rxr#R`fd
z6GLgZ-hKGsM0el7Vsz?{qBKFL{FBkWr422BF@sXev?^}=<t1q2tUJ^MJ<5xFFY|t~
zO9@#6ltt@WyAN5g>48elJyeh}LtA*T{XSs4R3Q&9^v&vmD-9YkMM4^(&5`gCu)HX2
zM?%wRq10&jL|cD~nw#BYx|U&I?(Kg0TI(J5M6Hd1$|eivF1V1*Px316OhM6g-KV@$
zsjxypn8}a@RkO_cqc617I);p@8PO?=-pad+oiXG50#2d8U%muop(uKercfZ-7`ubJ
zO6}eaSSi;%%|DjtqqV~=L5`L&7zuU6WIyR^T!Q2U*yyBuoy-<>0o*iPO=kO4*^+jv
zYt(iw>uchgmBl;W`V_F%MB?W950|`6Xm(E8i%{CS#KmQ_LhoaJmn16-PqdN%GDC6%
zAe~*~u$Cc_eV}OLM1v(pK-G+LX--Q)%J`BTRc6S>znNtVx4bzdLfH&}3KZT${MGOU
zBWFv}9*P<c%5KhZ9*;Oj9|E(#4}jV@Sl$|Y$t^|5pYQCsvgb0<y%bu^M#M%~k=H0e
zlIwloYl;DezSF^;D278mEEsJ2Mr(fk5R0&nFFMY)mgWIBvKuSXz!j)hkIE!TewM6F
zhJidBU|30n!DL#`$PN<}Kcr5f?7s5KP&~OOKJ4Gy3vmFTwY4%LUVfMEKTsQ(u`DKh
zy$}Yi>wwf5%$vv@_Xs6#X43b!v8@7VgA{B1U@KV(^C45b?;t+O_7eoh#YbIE){Q8t
zPl3_m&!TuPaxkEf@7|n6HsJmN2R@`VaPI<|sw^|PFT;YZbU7BAU+Z{AYT5%!p&<YA
zjlbE$_9yhy4=6<}K_tC@P6-a9T9YPxjH$<S_4bsF<ozewW_zsbrdJo4_eOkb)53Ru
zM|X~&U)|yTCS-^a1wR5#i#xm$ElS*+1!NFCn0V|tl}&FBD~LI<))LZOb=cQQzfQxq
zck~)mc|aG#;aK*sZW`}<+M-z(|Ci0F-qjud)W-Vn^w!SL^wzJ-ru)zN?DyubjFl52
z@}?7JL><p_yCuGSX1$M>9-mE`*0tJ21f>Po@?275bdWG*qF>`*Tp}EKgo8MU-IZya
z3C|nBB{5&JBIo($soX7w3WIrasYAlS!nCy-DiT)~QK<Lhb*u~X<P*tjduI7ATgy11
z)e7uzWxWplWVT?;@IxU2j@gmqpNgC@s_{`O{#VNT)#yl|e~T?CP@EIWk@G@DT}hTD
zoNbj5;kgM~yzHHn#a^-3>}|2&Px7o$c)yMLnu!*cjtnPy9Uf7A)%+6#1avEsM$+0Z
zeWbATzQR_yS%=`YV-zkLvwDRKQ|cr~N-4mr0N4C9)>=Pu!pXl1)c9=|)!u)~GSeMg
zlh)uW$vkl4M`^cUtvegfQ{~MpHYZ{Nskc~aM=KX*M|x>jXN4Bzy*`eE_4-=cuP$H9
zB7QnoUd5x~b8)zAd6c?IQ`QkSGaKMdZ(T%86ErU~lQ`OPCat)yhDXFXKJd07A6~r;
zE!kx@QK0T)GVaAT3(-4;aZcEr{LDzt8~o?LAZ43d??&jF=?};coMl_+8&M)pz%%h>
z8OOdPvK}>xYW1pMzqP4D`(++98B;c>;3||44d?WXwbTdM?Nmai90P69e?s7q*SNf*
zu3)!GJC`Z~=pq(p8dzM2hlts#;k~9l?h-WW^alLuQ)1;YO;LBR=7mdAPtOWAEJsgK
z#-?45rxlwrV<P())%YtLkJ}@x9cs6Jj0QsEcW21ePR9>7?mzk2`IIdo&b9eA+o#V>
zKN4&(p2y@5u-R!7@;e2y7EG`LkgHXEHf@*mh+LiLOJ%luEi%Y{{31-xy>egAQlPwF
zf?s(2c7ti*KR0*R4s-C~++H4A8MfQThRN`Dk6iEWC#g&P%&Fu&EONtGUd=CbEVp8o
zx9*ojxvq@~X1*fHd!LYwoWzYK9r*K5<mcx}EToVgCKSJfZX++_2D8vH+7&o?qxxsC
zV!}u%g*j7GN5bwsQd7B~8fk6~6}>5y;83)eS`xyShptUGD9JN7k<D*HOC?Otr8dOU
zQt;$yh<sG}d~~?0vb(!lYH`!FC~iQoRVKI;Ld-Jm7%uOV-cF{^vy^hZC$)LL^5mJp
zGcxQ-F+SZ3cb&Q2Q2wCcmA(wst%I!+`E&_b+MA$QQN1rQ<md0QAA13XjeE2CnNGdM
zXfb{8`MN1cvELmzG4qH$Mw4cHLC28d4LBaX*YVpAS?s;{T&hg|sWZ~b>n!VwipCk?
zlVtzLIm7=q1Q9iw#bHigs|*S?T^OOmqJ`w<(!#;;R^s>l<X@wnfE+u3voU`hMTm8)
z*3vzu&1E*>9r1t2xrpRz=svmgJY(dYNcA=g1^k4q*tN{7V~FIJNlq=m;a*z?wO!hu
zIcn#N&X;?J3ssVvF3$lR$U;#R`)j0<{c<Z19w#M<eZSR=PY7o|cFUYQJ1jU9uVnVq
z$>7Qnb<5)XO6;C7yiK$~5pJ#$FWgNz6EEb_+<ll_l6XeDCQ^1zvNrZxi*dOJt`=Ap
zIMkPd)1s$QgMciD-xpS;6H*!q);}x5gWRki^fV)iG6Ut{L>HYKk|&2oK)gzh!y9wJ
z(~-9BY2;hmNdf*LrB2S<9#mD=jU8F~SWVxTlaCa0ACwf~EbhI~Ncws(E<l?ZgQEvB
z{^W5-NO!nlS~A>7uuUL6&23yx)uv$J`x-!x<kmrM&j0LEM}Ei)sA*@CD0$xP<RCC~
z&>Xlum<$ptIRhGqnQ?1T>z<H?+~s8$EQqv8r#fF6J;&?!kHG8i0zU@?H?_8~ZPieo
zeZn)ya?&&sH5Hl4oshlNq)8<G=>;J0IN33T)#Ov@Dsy1!+tF3kLuWlx5^sEXygVLt
z)D2zXsy@>mSA|25$v(qrNYySUVLmgt;Iil-E6l`?`iPxQoK@3bCCPdeY*9m8%$EL0
zqo{~mn|vyg)ExsGf-{lIAiw;nAfhw=^kWLvR9Vk^I$iOB`wlD!^WHpuw1FP$JaC&Z
z^1xTdOlcZ`4P+ZZf!Q343Aeba3m9!;o#RlC1*1)gTT8g^SN{2%yLM7ykyULOW`9j~
z@Dd&NC5Zb`={~v;-O!-ixd6poMsIN1grQ6C^Q%<LqGj3p6rUK0@}t0va7^Tg$lV6J
z_(Wvs)}t^<(WjT6O`r)BPtc;=__iRi9&%Qx1aT{cpsi%7WE{J%I7YPGLGZkBwMC+A
zNV<Adn}#GN{u@xzD^j7l=Ia9I_4D>F!eQv$W@eO23aA@X4`W4PwRbNRW#oKHvM*Vl
zJIndD>JncZE(M;T02&CS>+Sfbz);JVz+7=%vf6+1o=67k?u#+ZrPuLWP5^SKYjbl}
zR@MO~OwLvUOlOs*pJ$xLH4tcak1oZ;QkNbrtH^n#l^I9;@Ns^6ZiHtiB;#ihD4UL8
z{LoB9l*(>rHt4&Bp-f;OF@zH&Hfb=|1S+A}B9aEI^c|21BV1OyUr2LO?Qn16xU{@u
z4eq5rrOX`VqTZW^N!A8@lyH~g&XzXS2r;|kL4byE@~d_I`Y$fZ66GN0dNs?A1AmB{
zBcPadlZnSP8fng|xbhfFp~{NM&>XZ7Ff}h#?L7vSB1%}dvq|hCbYX#7IC{(3Vc}sa
zy2c^JaNrFZ*{MGxSSGg3GlZwtJtdj_3Qq!iTcurtVK??Km>$kVtNau;^M&?8krnbL
zCL<F|eF~BCJ@HCM;vc$&R|f}&!25V~=rHoQJ8!^(ivis}#0Z&hg7#zvB;DkdE<f3L
zHhYM9stf~wp|6Ah*tay7ROPNRH0AebR&u#Pm~qIO)yME$341{4m)&G{VAbW26b^s}
z$>St_Bv~xG@LkY^{b0f5CZelk#9S*^_re{jsLL9mU$%F5GE(&_JNAtEXJARMgmcJ2
zt`d-LmCi&RK6E`6@<guHi*t2)gi#olaNN0lII>=YUCg`yiARAF)=ms+m$Q+tA!Syh
zTNi0gp2PHV+=P;o5Q=VfC3QlRxVM|s<fjA2hmvB^T_z)coUVfa8+RgCcYWKe&8r!3
z8l^fxFVp(wJ#OW*s#q&k%I%SCp<~XW3cK4lB`bE{@FJzCe&UypH(W1fI8I-ibD$mC
z!x~kMEZ_TYz_~hfS3cP52j9xxnic^X`pWNog}J!3&v9_6(9vh~>u`dVux?+cb4#K1
zg?3ubwO(KpGH?ibK5Z!;!hFENd4wNOIOk|vet;e;7zV;MOib6^%XjZUqXN0=FKg%h
z1F9=6gP}ECA#`_xa=NYkkDmDuKyMswx;{uFGJV25e56dacRERRM4*eKZNm8>OXF$N
zqVGy?WxKEFO|pAfKP~W`qTQC5tF>khwei9B^v@y}+z+(TTMsG>iAqn;-+ST5r<%&b
z##2B~Ul<U%4ovHo%~gXXFuqnqqAPo^1KUS*Lno6~7zix}O*EIC1=ezHVibq-4(fNX
zRT{c<$y`FZ>72SEJ?E#Qo5B0tUEddh!`&=AyXxyp^F#2MNvzPQ18@1LF?vh`$|Uw(
zzOE=B4G(vtA<uwzop}g04>+}$IjmCo%o`Q|weN41p0yF$a^O#_r9y^)tysXUGKHCV
z(QN*;o!KKEDf|+VW<A!4I`&&L0uHQ^)qM#}xauLT5Hy5^0twCY?V)mSw>yPJVob;w
zheWNp`ieqF_)<|KI{~yK9fnABaqYj=X`Zw6{%)yX7qU$*D}0~t#bWQoXsJWPeH3fA
zTJ)PKC-+rcGEUALU#e2a1iHS2magh*^PKV_Z1ld==M~-@EHxjBMZRA*hk>FVrVq{t
zNnowSL)}H0??H{W)E>bCkJDi<k{ui7synq>M0c#GG&1-j7WbI$L)l$#8SzNnEdWP6
zyp*@4it1MOlXM|*J*Eu%cnUKL?Xef+w9T*1Dv^aC(XMnb0j|zth3u=&Qw-RrJ*hlq
zy?#Z=Ap?Vq<z;I*lJcp%0V}b$Co<%s(MEpX?Lt)Pvo!Yu0`8S9)F!z#DizjSCpl7Q
zPeRm{EgftD60ns1r!1As@DnIdo!yFlkZQYaYN3w^d9axo+ALV?w-b_0+R-Y6=`YF+
z$J-%-!CD8gqa)O)2DEruZz|fWSe$PvjxKVhl62pwzLQ0%^=4oR^G-hTt3<4PdoL-#
z^Hiu+npMhZ5bjd${>xm{_-d17%R}VPs!b2xewWQF6n@nz>@|m`MLS$ga&lI67x?g#
zntxBS(?S{Sx2$usm*Xz_mZ~}LfEMX-Z3U1xY#ouP797Bc+$3d-hd!}dnl^~$0$FZw
zQsh(5SX&l>NEIr2XslXYcjTga2X}*|-~d$H8@!dRaQP_PHl9~hFJ&K}s$HXlG(O!`
zxp_-B{9}ZhZ>h}kD|A(?>d*+qXG^jYQ;KH2vyqscSXJu&x$Tvey$v)|VHYgjw8s!7
z*<kqNwh*Rj`a4*1Dl}wbnm>o2xp%9VOFd$Rhd}Ukmq@~)_M3j6$l3B37+MiQgpb17
z64af&xS`471;zNf`->2-4us#IFx-H{mOZP!kXq^FrO3e5H>hkzMA)YnOtC=3CSYWJ
ze7WpLo}`O^<?n~CTM^HF7@fJD!{+u49zlPpGccW}65IV>&FI!QaZY`)?y`SmJn=p+
z>o9vGl*V0;z7dTurV5I5YXQZ1r9`bi?#J*`I$pw))i&jZ-4bqmNs?6@<vS~L8~=zY
z)hj4rMtl0JUy;NoEn>{{Z`be%whSCs-V{T|l;^Z+%_Rxjh?D7ok~cF2yt+b9?eQ?X
zR$y`o-==PFCZpo0`^?B8cIHV=;&+B>OhT5(ZK4d!c2R2<?crbHr^@T~=~X@9U;X-}
z`3?jum-t1_eM|8BonaN{A!|~6gS37wlPv1$$u|DVB~|zCeiX_uWoPNpHYTs4w~_g@
z{EbvM*1qY(GCr@PmwWqnbHX&*<pck3zO88Tqo4#J000#b008xW@@-ieXpJq+?Ct;a
zwZ2Wfp4A`&%E;~~C0z<5sF4A@5d#hf)j_%HN+7&Z@Y>Es{THRA^Te8)9!;alx(C<R
zm!q7cSG^cTdZ!D)IyjJ$I7M^vmZUOVHdvPxmQ8mJ;z8QFC1{L(?SdFwQ0}QT14Znf
z#ST`DCX0=NiN-?cHHzDql4?vLpl!hc)VE2S(i#~@vn>h;du#?R7qrnC_#SF&2w`;I
zUKMWkuu4oQw<ad-W&pnru&D_@56_m8-5_8$yx)7FzqAM67MkdqAk{$Y3l!mF`LIv0
zC4LRLhn(IbOI$mZ|M2^h3!^;qEfSZ`=;Jt&M9KGpgh{%{f_W_t7Qs1gJS%eHqDfrp
z!$YN2!idF6z?}f-?izG>iU~i-IDgy&1;YJ!HZ-^&Cbp=H(|5%wscfP%=cO~Nd9WT<
zi)akeEDrX04!7{`kp3OU7r_6tBuh6A%t(L$0F0shE7*S)i<5!Y*~Gx+KWlZZW@ER>
zhVYZCCrE**4{uQ4jVT%hQ*TuEoVr$XO@P@dm@gtlMwAF7Il>nC^O{4_Cy}bgZBbvl
z{Wd@*4<C25?R2#L!#BupNP=Qgr#R*OM235NeOshDNF3=+3XDgVsa{LcC=xb>g+dXd
zJXOqy*cuH%l75%Y=H<mtLx5i18kW!LQ0T$nG&eGPW<(~Lbz9^ZROdtj<+IDFO&Am&
zYziA89DFN*f@<$tjag88KPFQTTATV8yn?Jz7of2M+hH~t1xd;Z&Jhk52lJSpA<CXa
z_GszRBJY7ejENr7jdPq%+`P@xwrjD|C(7Pyu0!*M{<CKpfFZ5u^SJ)EcM%(|Zd-TP
z2F?xvPWWQr7E&Epn+W3Sb0!*61^EoZ7AB1_wxw}m#?TZ>XyPmUNLO}5#;PRGayn6i
zVKMiF#n|d)-*Jki%{D(p9p}gGNJfu!YcxYT+I}uCOwUqQ4>C?#)d>#Z^3O|p;zAAr
zt>XBM=w{?7rbO+wT-~<KOFs7njBTe6gPB3YY|EBdDOjyDc#fPMi}{O~Tu(3a@>!z3
z#ba^RflDe(*K5)4R@KjSzm1FdjZ5FFYgXF9doNTwOYOh{wSJ_LqJqCd5tQc%0v2d5
zjlaKUrXoB1Jt)NiQ^vuU5^9!*RRse0ZC9F#f(Uv!3`lN;;o8!mPm-<><;majB7V4k
zE|%5pRIkOa68>`Z(QUkFXetpT4Y*v24A%~cjL~<8J=-Q8#4aby>h}X<-xbsbB9^U$
z!MLQTcMU4`lhY0U0h_hAXJ*Krlp1UwDD?f;BL$8bzn!w|>|Fi9sY#v*Q1P1T9ez;`
zg+MJFb0Umb)U?!dyMZSGG`a1olhq#}@S~X{anZw|Q6THsClWrtWez6&G!O6-!-8Vk
z>5{2ra<f<?Q$~$h!z>qQr@#Nmqzv0R3os`o#Ji7=xkv7urGwCHHk|#J(vY6II#9u=
z1UxKbq{dJ(A&)@<uSeYtSlRe_%Fb`YYmu?a>VlTP)t$5mssVv`?7md`%=!7)EVdjJ
z5Y+vW-2;vUPegxx_N|jJpc!eg6>B^=q01Q=4<q#qg_L-y?NhDWog6@adX5-or{z=I
zu-IMGw5-D>3V%%^x=jRDM=?Wz1Z&l}>EowQE%WkbcO^rb9FK)~fymQgt}(Ey3Mv^#
z>N12Wiqt^^3{*i!;?D7qkeIriv0E<!QkKY>7#VP>^y|ln=d;}rrJ-rmC)+r5c*7T@
zE{AX+lchkqr%!I9VqITu;j+|n_RBrqFaJ1hcHz2i+>Pd)(92C3y)2C#?-^OG<;L-)
z=%(4VwBEst^!wN0WQfSO2m8OhhJY)~;1_B8Fsgj<Ter614vtPmPo8H6*=DAF@Ao`D
z2TCL8Wt>M1tI1uL1*0Dg?pY8J6bEQQzaw#<%ODN-{B>*#JxhJ#DQrqX3t#xi>goGm
zy$XZ6Z?NxQuw?z~SO2GAF*mTVa{13@m6K#(waI`G+V`pk(GUQu*cqb;RTNY_u4<RT
zyOnHXEljb(iIzZ0JkDZt)wk+!r6NZ;?Yb-XdbaF!aMNLA3OiE>jgp;DW<M}oN|r$<
zUBl4n9_8D1+GVexn#g(fsPlY$X2&@>$B@Z1!*qq%VQj@sf^q5$+QEjPOtk3_$#GPj
zTH7OM3e6Q~HcujU1f7J0Siq#=B*32wx_W+0BQ>OC0~vPF?7~Oa{Td4mSLM0APHH8R
zi2h4sAOO@<pC+NZe`gM;hM~U&CR@gmGka*l6_LjA1ad_$4f<Mph1ZcOf^Wx@RbTR_
z`U-*QPe9kQ>0tmW#<;bljj8}7E(FtSd{2p2p=jky`Iti$Z~0;S6!WoQt3DXVcAN%$
zjf(6`NSHA<@hk07UeRP&{1NZ6P@KiUN<gDf6&kh{?~d&BGEwG&d=k7QmZt{_y9fEb
z+0pIb%h#1YVlY)dgt$}D<j%!w&@yJhNfz*ycIou%0@(oJ$NLf8lQctmxpvxM!dCsi
z)C+Oc2P1C$qpSw5>5jEHLKLyfzk<x`^^I?Xy9h*PQuLkNcX@XCfbEmERqTvKdp>9R
zc5(#wKl7}2Pnl#B0sx?&2mpZcKl9AU&c?>h_CJyOBbu9un`}rvt7-&|qou7ZP1yXN
z6G_9^+{a<lsz`S41BWV#BqT(_fG`4@susz1@@~NS{ZSM#*CdrBkrMfJrz}|gS9I&d
zuJ3WuFZd}BX4QLKV|hi0RWN3CA~SisUWnLqhpc^}WpQh6G!aSB%q_;2_tf%IL#a|t
zvSf+TBQlR7DA^_r1`f3z*|zI}PUEWDj<{(&xDC&#I`J^n3Qk22@I1$$X_Qlmlsr;Z
z#lDS-AF+_*Qtl(G)ymemyAGyQ(+<8F4$~SizfvO$m48KnJkxWgO^Di2HBB8Ng4$Tn
zj!jtfqEu9wN|b8rFual=hxYJoq3%d#9%;phL~Fz>kop}B^aqj1PYnx<VyGm%r_fUV
zDxJuxJy?Q-(rw7yh{5n9L`Y^pb{NiPj1M<<*XH>}NkwapV(s{F_l=Il%|V500qv_d
z!ukRE9!a4R<a5H8U6G}rNDnM_#7nn0Wxl4db5}X`!6!@hIy@Fuc)?&1B@J_82r!lH
zn12b3avI0uAdr%fUc@$__0i=CSPy3wT|=k4fF}SSGRr}76kAvgSx%?}7h~DJ#~tBI
zH(Ql>47ge|nSHUB`Qd|Hb#hjf%cy#BG##4N1dH693x;EJzy@E7@290f0Kf2!5n8%!
zCr^bD!=X%g=#gAfa3`xr1eo~Hu>~oNXJadg#}*sho$xuXj^zkvmrWpJi~|l(C$ks=
zz7V}b*Yvv#Ga`g8SWfyIfjR({EQtcNE1!dq1&x8Jzjh8|rm!)9rf2*ULeYV)A*jnm
z8{R82#+nBd0FFn?X`(E4S2r6UG6Go&9h-*@0jbL5_qs%IYWN4_l%ZDwEP-)~eXwAj
zT@yhSmWstH4XmeMfvCa5(Y0RfO3{r#MQ+0+S3>=hnJQRB1_HAVplLZUfV4SoO>toq
zaJI8sg991x^x7UwlW3wq%pxbz+wFW``Y^aX?Edx`sLfiT>&uAD_Z84gWrDTx+oB0T
zjlo;-siDZo%c$Y;OjjjuMw<8V>X8sMi5sgM%_g~rW-sP?{_eO$`VNWrU;iYR51A>T
zAQ<(T-O57{%LRij)nU!g9R$POazl>?tjrtp5nIlLM>f@Fn&!ZDz}o+CQCR%Foh>(Q
z{cd257VK-<XTa$VYBagbs*@?VV^`Moj6wq2?1|fI?of6L*$V#6Ydq~^cJlKoA$xtz
zQ!d?DuNP(g>r9NDyN57acE?6UZwqG%>km}=l;2ZhE6{JznT>EaQt^<%!YP-qsBw<U
zJxr4|$seFe(Jo4R7WG*!x+Q43?9-(4#ST;sJZ*a8X&L{vWGojxo^K!@q>BCNCjBRO
zro3(Jo<)<197GF(JR1vqiwR?c8KDY$OLWp&FAmGx&!1>+t&xmA68>)#|11GL%;S*@
ztvZWjNCY9l`3zU9-K!^hJvt&%wdrhDhGpqWT;Wz>?#Z5=x^w(usf^i8GA}nvVe#ZV
zkBpeH(t-)Ydw|w(P`}dEec;~blEU1rL|1HsR|(Y{;^c0(#@F5X56;ShS-ip7;Cqxw
znj0I*W9;Aaag`=I$J<Qo$nqW|K#xV{;bn6!D^fmNw=zrp`?A0QN|2Kj?Nswu4Bt5L
z$WY+aB5P+X2tBr6@}`*`ufsTT3kDvu&{7o<MY*bQ#}1@Mw;`2PMegFdNJDR>BI|!x
ze@GEPb(1X8x%Ed46$Tmp^w+eqU+Mav$8kKz?#T;05Z}OcGc6A~cS0R_0Q#3a;lClE
z-X(`F*qtCS)_f3wc>vpZTZNQ>=3O}s^yUqaFdr6KjY%q)rUoiEg52E^63;Q$wLdq8
z;<7iA!HK)@RN*AA7^USkFbtr5aRyMwJP1mzi?H!?meW$bbdEd$90XHrp#TJgc^eI^
zVp|^K?xsib0&@7+>pi~Ir!BF6r91D1;!-it$M$6tl}?9N8i^n>o@r3IoT2^T-kwl@
z!^QLG4?kd}&M1QjyjbtLt}Pf?i0;{oPxi4n3+}VBMOg1*fWxRBM7{oL+tUyIuK5aB
zKIOU<gn{+?_U4)Qil@{IBBAPo(gzm|?Rd^&_>mOw+gE^GJ&D~i01Ii1$eo_9ta#LI
zFx6%Un%tJ&pbj!A-UFluOn^L<bBzp!<~?CQQi89l4Q0>3g7!-aY3IP`c@=`Wef%@k
z%nZQ5sE~Q?g3geFg=gbCua(Yk<XfMrsqBB78&)Ynw~GLV&g6oDtqxgS%wjsZmUI+E
zws_Xq3WY(TiC2Q>0YlMW{QV-zFcNe$KVFY(2QW9pmDHB`yLOo2X2yt?_;>051TE6u
z$4c0fLW0)2VwPOy*$iknkF}j3Bo(RA(pf3{eedB$oSn}xP9V4->oS7el8Hju=>yzs
z6484`_W#?ltZC`)9+}*O^Q7SmD}wq3&{6BoSZb4|tf;T@qP5ycDs=kQ+{KFTwPf~<
zMdc7YHMi`FKDy~s+%MVX&)f4fw2E!*uEN)j+8oYm)@7gaB0eQpf>`cAD&m$ZkCQ71
z7={DtE(P2qa-Y)ZY`KUA(dbAzv#ZuwR1S8DvA1w<?M8?u1>ZnsTPbhltG&ug;_%^|
zVc_wTsri{*e*W(METy=8KJ>;EZ9LNlB2Zr!P(T(jSO_0tFx?&QrF^L5e>b#Q0z=Da
z)+u<I+njtCw5S?TMK+fh`+?N7V&%K^#Pe9FIqer=>ro-{qD~e4wwr`)cj=Jo%^}r?
zCLhTDWm7j{5&&2QICq+PA2TA-etdH9+*Sy*y3SF?_Tc!;ddI!3-Vs3P)XwM`9H%$P
z*xs;m$;GyPMT7pz0?9bhC;zbkqU#F%Ro!p&V%2x3_gA;N{~HL?!pO<hpxai;V6SGE
z+mkd#j+dHUkrVzI>cp}_9kY7YIm=c3Eb}1@2Hi+Z@zB{&1ikP81)um}<AZ4N`vfF}
zJ!vz?RF6*Y=l*>-yW8`9I*H#GMsMnWJvW)Iv2CY61Oy9OAZ7&SP0yL37h`9@`7+wt
zvvg0^7SMyIb0hBezb5PqSmj<IY5)L-DgXe6|D2v&Y%SbrW&f{UqN{&iqD`^Hycj*k
zP<O<AqydTbtCC?QL(M`PohPn8JI2&f<`5W(;er5BfT9j2H+CJrj(%62r~ig3e<IYe
zjvh_5buzO~uMft>I>7cOqpPcUr&D0ucR<pj|1T%P7^?_FduRP8C-OiZWOs_|b~d$O
zaZ6+<d94uDls+slLHI(RMp_8B^$T%u6v3)UinjOw02an5Abc#cm*n#$DaFmeg&iq!
zKm-L-Rp<tS>M0XN!JsHYK>+$~4F>?Gw&DOqVbc&aL?$oTfx?TTLd@Wg5iEN?69#O^
zh4L4X1VuLVu9?G&l8Q7@WPJpRn6@3?g6}b(=_Vk6FWwj1|BKHL@kGk`0dDcT@O5+N
z&Ir~Xr^JslTf?S-#kD(+D{DVZr5!tuHurYg1rr^`oz2xJHom|XR;rVEC!GEl5#9>n
z+ERpcA8x;B7?Ss1GSh!c>^!*G9wuB^{i3*6TA$4!5fn0q@)$zEIaNWFBD2Jp&*4v^
zTzT;X;W|ksC|*ZNYp^l|zl?b~9Qr*bqBW3cT)M#$l4%Gq*b_$fu*O-bJ}DR)pw<_c
zQ3X-*oO5b$u-u_Dpmt;Obwb4>pmJ2Z5<^iQR~vycRz#CkP5nVoGe3lMQc@E$5_tl<
zlLb(6JB2LIzeO5pYML~ZVuHMAMSk&#_dypjlMypH1R6!rX`C2Kfq|5mBn#>r=rt9W
zC2cbhfQR$ZRG>1QSR=1=HU`Ss0K(ssGB16=e;nLRsi@kd{K4M#MxrF?3R<4XK!VJn
zx$8i$NF;JL!d2uO{xX(v*bxPYxuIyl{2`8WW3<77nN$U9dr1y~y<$on!aPbYE;dc+
zPLK!<wi{A&NDyE2kJn&Yb*VCJbrrQxqNj4!;t#8*+$2i6k>}~QAu6T%d}O-6dx`$Y
z`=0P-i&{EGO7`@4=Geu?h?a_y5XI>BFlcXt1^N(`^isFD=pb{&MixNiqcgmD97FIO
zaS3O#QE$ZdrF=ue$CAHYS4aMfpzsWPPiw>YB{`@_F&bxa-p(8Q6p0`T#;w*qpZ?|2
zhNpOX2lUd_lxi)YVOjMM>C;>1?6lH)0%?Hr*N)l?5VUF|XcWic>EmTGfCiB85x{ha
zr)6jKd&-bO%~1<wXO5sgz62;S4SwJ^Dz+uwmr~U!hg;Faqu$Pm@4D1BOi_8~QxS|d
zvz0xz1?=r5XC4DO;svKgldeEEY6aHtqTF-;bXhFyBb7TO!8Jne4&ql3t^LPJU{)mM
zDEa}2;Y~-bCq<KpU3^kJ_9S1%!7OeY7RE_^Vof^z*^2<laxS5iA1xKkVCWi#+QAR3
z(OF1G@lE@%WB=?%Nq=t1x+U$frXO!!d8KOwdfx(#g@q&Bkt^j*6;HOeV*x8pmNi~K
zo=twgAQl!J0|6J))K<&V(1Cr}B0W%!7st}j>*RO4FJD8qf3gM?nI~;t2^zjPX{5gA
z4KY~s_$ZFj$p97lwCHH3oN0~b`1v@mFP|_;c<G+Mg6r-su8LV^Q430A`kp?3_Y}b6
zv*Kp++<qS${b?7l`2IPpG7lnP<zRPmb9%9)7KWnSPU}2H(cV*2E@481YXrQ#xY~QK
zep~R6*>tc-p<!J@^ms8B`zN|DD>UF-VO7s{oZ1a5t2EXC1Z?#TIA|nF<)SMt=2Rtr
z68%A;@zg}v@xQJYCRVCQh=mvCHj*dqo(`T(P)Q$0gO4;5nx<pFQb#0lK+<8+E_Av%
zd(KoIpnnQNwf2QkBC39lvwUB>Rb3kMHA#Up_Bk9%Gp5GA7ppFjGMM0;koo0Mq5Oqv
zab_0`Sg=xrQMnlR;Zt$TbrF7w-BiX+k#**HRnZ9Om65LwV{lpdCLZpMz{$8h5hi}3
zktarI9{$eOK=cd0y_V7Yosdq%T(fPY81v16691~AsU&J><|J0{gBA9k>pXpIU+zF=
z7e^)4a``@IqP}HYEo#$6sO10YuZhp^5K9UI`x<ITqb`|Uf*2>bqOL2JJ3cSrvyuou
zR%?|WKyhhzd}qVLg?S3+3|Fb~&z>mGl_G<Q-^XH;qX%2vZfe?3>W;$~8bJi1(0ezg
z?v!_u$U^$z^<DzA;vcuMaE`*0QS@mfU!+LO-q3^xb-|m2yQ*4@DsT*lDGh&7<&G)z
zZ`n2wB8SToD96K56Cf;jaafH7{(~ih8Qj*=Tht%iAS~w@WYs@bjj83@aOi74s%)&2
zUMaMYF|jio*e;jOj*WmfA!ybBZoI*q+U#NXZ=l{D?g$csEc^~UO%kD!Np8P(#%gOg
z2-FTOTKD$@Jg%j9_DI2=Q>5BJY9-|4IoJ{-iPi^OFk0VE=OVmCTsy+`=AKDE^zf=e
z6$S)frj}T-6y3YWfY#RlW>!0p%eJ3V(tXK}9{`~?@Wcm~JJT;M`?Jdu*^s^00s><q
zUGC%T;}ODb9>#KHSSgkEmZsJdHLwSh60JdCPyi3=XUT({Yb@@w$4f6sWak+HIB#&c
z0Y$V5IVCqvPAQVxS^3PNwa(RDgCLR~W26&h?KnC30#Ov``FG2p5N2btftAr6H};)7
z((M$4StEp+>_C6iUyHzWgEL@Jahk|`^QgGqH>g1i4YVow<gFn|?uBaoPKnH6{$foI
zxs;Yp*RZu8x(*W=%YWbC^dV(Mx>jU*VrcMXLSe*HBWP^EB%cKc<H8Uu+ey8V+?wEF
z1O9A(pP=++f8T0(m>OHRdBRCDmMTz1cYvav^u3meMM!_><{LqJw_rAO0%{rxNtHIH
zQ*<=|KhQ}Mu$+>$OHH)D(Ndz?FsuEuI>o5a0xA|tr1>iSNPv6G2ujEXLb5V6eI{_}
zlooA`?krS4Yr%`cq<;i;j`{IH7wO7m)KqER{%%nxV5&T+9eExM=IbuVQdSbnot<gq
zhKQ?;_ldNS^n$CN8K)e0pr)2-)Rb7iQ{W#ifnG2s&Ze4iSd|B&|1JCGp*QuAb`HH%
zu^%~w*ZEBs<)*aN#>)APP3f}Qx-k_T^b;#2V=Y(D;Dw>j`0uJeW^WAhV-(;%Ktk&v
zeLhul_i%#i_8U&hOB_kN*~C%-sV%XLbf|1N&|Zf(R_B>AQl8s5qkrIU0O@HG#8;Lz
zpQLz3zLucyL~om=hj8Z*FM)dmz|?fdP|kYag>GL+d0rT1)wX#gtraHN$vc6OLvE6-
zundbFUEF19&tFiXy3U{-(bsM>OuM?-S&(Xh#*HLrto-Eq(Y@`<)iVCdCxGMjkZf0w
zdv+{?FjlCL<~4d1q{qA4^6B=X_dZ3cP6>=wqbcS$9m1k5vPNMmWCwSLX^u#<fF%7;
zLd`v*tUdF!hCtx`@=y3rtA3*T2y*Wj8kL5=))<+1V!E0ynqijc!=Gb)2A*D?J}%x%
zT*R85Ju*ZiVQaENHRT2jY=N<Q;Ve)QX)E^jT7OTU6`!F;>E5<&#l7ftK<gWtZR?4r
z4j01>^=pC33>}?Vk(miA_HlVO^J~CJv~#<uEbO;U^AjU9d`8*eB{)&Aj5tb(tu2wX
zz{f7-A}R9q@?^U=y+Y!m;vuH`cjWl5^$&Na#kF6Ko1><d<{7!*MrW`<?+>V|II47v
zDj3-M*P`+oXADn%kaASXW&<Akp)Ku_Rzx!;-6$&kkx44&JqLU2t12DBi+|1t#`Z05
zK@e4FNBsO=jqZ5$5~s^BVcCvRl{&xD*J%c1ROaoUO1T^o@#{jP^6j(OrzyEW@4<xl
zBbr2v?;B8iO@eF=Lbq>$*8}fsNT{+vdyZqMv(-u}2j-NQRs4xzRFeBxpzer#Xl;^s
znAkn!T)4MD$Sqchn#UX}P9;JLpz2E6<>%1rvn0Ii(Ii9c)Hd6CYm^H$+cybN!GwH_
z4~#hbjv-st%*I7a2fp^jL_ce6ZSJtf0PLrIet`vg;yK2ITpB{%gTrGkG2iY=SHYCC
zIU6$VDq1?Qy9prNZhRm@4^RX_0RQH(V^X-;;<8x$(mQk?W_KSf?sUn!_Ao}EMjU=n
z_&CzVSnG8oT2KwdoE;)&Z40*Zbt7!0I#Cv2*CcZ}O(phR+<;Aa957`aAjqY?%1wSS
zA*0olbJRX{l!v>o?szW5epn5En0FqImYam4qAt67sewI^0(LN6`;Dj*!a?Kebuo1K
zt$W6HF?7D7>H97oFZasMASa6X-Ip0J(Y9b%KQ>&ZzxSoil#8LO2*S60?@qn_gqZ%B
zwI69?Jp+4<aZ!GtkAI*wpctd>Bc~A9Cw9Fd30e~fQHjv5XwsO-HundAvSDPA)W674
z*as2bnKOWJhX1{wZb6R)&XeuGkz^Ut7E=jpH^}-#)1)hec@Qe7t_Uhnq<|q}fW7@9
zf%1r{ULY(F6n;yKuu?t%;aLX}a>8pw<_Kiebsnf4XDX+-C)_@84Z1c;T2x?=KB@o2
zAgSpFMGP4TGz006;D@VH+a+#OfQXdA{wZ@37*fOm3{cF20Cy%phZLRg?*ZTXfFnD9
z90x+5QZ-ncvk&C`0SVy&cQ*@-cv!zjaI7ve`m%=;JMTS*z0-O<fc-KH-@u-QMBEHY
z$hrQ-SX-N?Th8ptFW1?jQ(ZO2m<cri5pWbJtqWmXZb}SN_ii?gS8782;GFL?u~ax}
z6s-oLXAO^RBQi}e8lu>S#0zw*Huu*O%h(i_>DV?#EK9(BJZ0-&J|I7L*)LKYpk7E@
zPb}0pf&f%zpAVdEG%+hU?ki(_<Kj?x+k(&T*Bbj~a6^jwG`#!MrZ80uEs56U^yehG
zF*yZQAA`gDACNH;>ivvsTE!M>`e#;GNU^mwY&`AnN7!uU@G}Q9u47P5wBRqsrU4IB
z1h$;COg9(zIGOR-ADO%1VUXv6-&D#`PyUzC9{iE-9P2?L+krA;&n%Z<mp~gzHN=PF
z*Nbgzj^tB!QXtXM81s(5s1Y-k*rXQZO$roxPil2u!1W{zO#i-Y!I^}p#}8T2uEJ>`
zVF}>ADJYP_Nssgt)1k<ouo@!6^lm9avco&1w56b_v$U(rTk41t)fG&m8jY*oK5`jh
zzWJ+3TUTAve*ei_nfk|9D|u>{i)g>&@B1)D{#0;j3bW4jJEA2`^$A15p1GizvTuy@
zminAHF;CZG&zB1~9nfDc#J!<%HwGIqWv9;vq8Do6H~JL64S~ag{cFsRgdV74)hw@>
zyUw`l1~Ml|IwuGi4$PAI?No0NbR9MD;HEGopFPnlnTvlf4^H;pL5#!@Ofk=i;66J6
zOq}-{r%_Ts){qORN7>g~UqHeJQ-DyYoCJL7i#AK<d#aZlw(@Nkni2wzVHGj(svzYx
zOh)^YJ$nQF#P$Gqu;Q53jN|y2-R!<N+PwL)CcjBP^=dVLOgw2d56X7Lp8@peukSc3
zN%A^CE&(?rFKc{QStda1gi2>P;k{optU>_=0fF*BuYAc0G!=S8$!T#cuKaSo=ZuzV
zdi+r*{@vRivs=E%&dLBCWloi;%!@IHX+EBd4}6^}0Pa~A!iccUJY$nE6BBySk&l>-
zFbF3PZrodSWYoPGJz(I&q~>E9uA`$Q9bMhH<ZZRvHu0*RJopieYfMJdtIcMS+qFGd
z$S}HIf34kjPP$N43>lvSK#G4n)ey&DMXogjx$(5y$03I`#NOz!9McneE&W^_z-XrC
zOOGbKX18%a<4G4~kVA0WHnf;#O&$+5c*${Szd&@YiXJV3Bp<;#W+dIP$;z)73c3z-
z^MFC@A{ibATwn08V>4y<Y4Zd-=3JY(^lVV98y31L<%^%aP5Kw7*Fa^D3|&zsHG0Cu
zE+z#Hhs4<gy&btM9#g>0XJrmsrUJoeuTRQ%Z#0?yZ~O-{>!ve-+s0X{9L3$^!(L78
z{j+!WXC8aLLJ9Nzu$|*7Bbtdr%q2l0t_r}bxK!bc;qg8*^>>9>@*YuY!W!=0vNx65
z6qig^(Qt^!FmKk9{;Ou*ZvcQAbz>7w(whBsSBu2PT@gaLFK%!<TtDELirK9{Bz<Gd
z$J3>6?J`Pz%d^CtPz|qS0RWQ*PUJv*OwU7@)3NJKitbN8D*;<zMezFP^IOSMBMu86
zuCzrq9Nh(!@!RP}JW#ngJ!Ut?SRO~aeLtSqBo1QiLVI_WfG-f;sp{P{6@<)$eiA~W
zO6)i_i?Lv)M%Kg0h^)%;*2q!>C=2_ZpO1Mz&7iRgo23xgQKUpiPW$WAu=SB1yW}g)
zt;l{!xzE=f1(_=93@mC9HxMX6v&5I^7WqI|VC)@t@9myO;8BRyi3g9=OvGz#jXLiK
zBhaWK^{=2+a|DqdkCCss(=|D9z9Xk$whWKuNY$NlNim$y9Eb69eTYh^Q@3C}2Co-T
zj^Ve*hnmOO6>=3YS}i}xE$=R-Zv(EAsd_^;vCWQaP$+F=YF<ZdBf2%H{26f19Q%`z
z@=!V_XCb_ZCaCjxUzGq8fl`!GZ>)-gyQ5;q{`+<z9XI;6!PLB8i}Dh_VY*8`1kQE*
z`4-EROy!Ek^>PX8gVa=8{_B5WLb@Y&Yc;ft_-a46rk2}#@T$n%SBcMGe5!d%c4R7f
z#H!6FcH07&pkAT9g09Vw!ABy1ITa~0e@>E<D?Q^HzNgvOdwVAV9E7XKkh)_O+Schl
z<u~X{PEaDLyOi=jDqoT#e!PVbz&EYlH4qZf4xb&`D{7;B8q8EsEk<U_A<wdI3uueE
zDXt2FWE*mO!{BmT|DEPAILoJ>a53thB`I)&5lNrG^5t0mXi;ff(qF14F!n|}v8tNG
ziK8k3TkhUgNTy{TWk_<Z{7q>x1g8d)f?1Lz%lTB0h0IPZsbnLm1eQN}!erO2OBBwj
zaL}SN+^i~ECtp7$5tdH;1z+w&7r%>!2HZC0kT);knL)>GSYM6qhn{Xm$?~Z`b!qiX
zm%CucdKwNsVofo4uX*{O*UVEk<yBLb)Tw-CgKsDXxdfA^lD%vu)pYnCNWGEYo5WUv
zuE2S!m^*C(lU=zF6K9LAd~K6nE#!-vE;dTzr5X<o%6;aPJ$#*>t3r9st3p<p{LR^8
z=Z?u*e9p8-Mk7kRUzQ`vpjt{~DT0rSrqx@Nwd2n}@M~nRYZ9jDdC5kKi_v=``-`Yw
zDq-7&zcUt>KP@weD{C(f{o+m7u!Q_650<ZSJSm;K?axCS*2RNXevQ61C6jf!^$S+z
z*bmh}8sl*jpGw{GeVx4PNv-5n(=M$yd)3rf13c7lVZ2a1vT^RHW<FJ7VY~U_Mg46v
z@V-h$&lc04o+Gt(19m$IpIfwVvPn|Bm{mR-1z%RsdEXIXV{oJ2E8s>s$9$&)?lR9C
zb~0bmmwBp}qZ3MMRu2U&il+@jgK8vsTh5oziHRd@z%$K@>)uK~$Wm>sb{aWRUxFH=
z`1w)K^BzfwC`!^sVb0^prAgtxhA=(y$Y1la&a7W!bR%A2a1Dol56h%_4OkzLLvOu2
zphC|3gq)-oIYGZO#E~!DKSA`8Seo$hA>ZL~9x)|jel?+g9-ssFus5Tf2z-x}dD0=L
z3eZ4!ir$7|yglxR;$(hKD&A0;e~OygF@6Umi-#?wnP^<KBX5a+NFRcJ-*0(;e)2pM
z@J<`isd<0+KzlXEUGBHezTLNP@$}#oa|aOVb_<Q&{OZ1=P?Ed*DIW^w&Ao70H+HO8
zx^*59Wi-A>gTEk67CsV_46n25Wj7At&ULcm!#DtABRr5ZC#k$g0IZVG8XV?b!&+YB
z`)fTd9Nb+zm^cDui{-$)huc8ncDi(RiJT>PUWavK1;5V~ivk1+9ruXYvckt&_w+r!
zjQ58O!#+ixY~cEc6z*_+OZZ2x<`I)|8iOFI^h4-Q_djF7Akb=nc;0qjYFj%Za3K9+
z{X#Iht>WmJ!7TZ=xHu3J>+3;DQu<ex4H%HUvfUkcb{b?MNPfRRWU(wvtxrRaUF&9A
zq^&DRTXr;SQlFZoCE6uxX>$qCDz%lH0*01ku7|d-U%)Mk7+DuS*-F)5VHu0D4ByY0
znibXN5H&03EBboSzrJb@mDF5s*vVP-t%;g)>MGT$6aa3({k{|p6o)~L6{#r5Sb|8t
zsUfV)xCnR!R#Nbz3m%%3mv_Vl(%e|zx=_D9b!4%FPl5BlP-2qFpS<jJnMVWJz-JRB
z6F^S7V*3VP>Y+Rcnn9QAwV^ZO(GCz2yMYoo*wvuV2R}eAhOU&WK5W9rT>WKR7@%hY
zN^zr=lMt`guPM)@bIu&JF*kXPA@nOXOSY!Y5Ev4VoELE00@!KOYVH6<VH_DDpo3=5
zKvtGs8D4Yr{ML8-^rQdDi>uk`J`^MQgT&@8-#>ySq*z?P8_NFe*EQX`m#k@xMv5`2
zWf~2bapa3~zqRVzr@~tsr71b3ySjbiH*wy34{AFHCHhyxus~NVIj@wHX(#5Wb1J6m
zb-kXQ!engo!Hm)Vve!Lf^)<Em&?db4Ww?4}yugwq6^YQ|Dy#!_M!$G68CT>}pd&{G
z4_}K6vw{w{j0BP5XwTc@4%9c-ZFTe|Q&8*7Ix<(RUQj6+<Se~#Gc=D*9M*~k4y3z2
z183gauWBo#nZrYQr+3WNhAdyGl@E~)nnNom&e{#Tvo+_W0Y>v4J84}UH|Yd<yaGfj
z0QN)#TS!@&A^f$rb7BS+gf|w-ZfyaNB9J&#gehvu0nD;rf7)0)i|XyUY}K+EX#JG0
zuxYuGa-I~k%jNY6%N0SXDnYF_<4}{XB%9NF&wZ*VZ{P~g&v;rS0o>lyg&@Ewa+rq{
z?n!52<YTp2j3m88Ep!AOu;#!XxrU2|L|NqNp>vNCl_xAiC%51+ck51Cw_dP3sD_fi
z1Kfq_yZFmctXGfB`1D*aI1JnObGDx&7w-LzYo|0OobXDCFciyfxl@^N?0g6tx+1ID
zYphJT@&6b*r}j#?piRe4cGR(L+qRRAZQDu5w$-uiWXHB`+ji2)yw}XpcQP|4Ypp*}
zbycl;>VBwqGaL1>SBw&d=mQ1FrwDwRaQ{Swk&Y;0Cj*fTv=k9fll?*>*>s^u`{ht(
zp$pVYQ={U>EwLg7z7BG)2x8%d-wv>W>o5PY6@y3TL;EawdKCMpn6J!yB5J}N9YY4a
zvioZN*5XOQxj8dfy%S0&5ADu8_MSSOJrIetXy%kz&qTh8f^slt4Z10UCtspDc^_oH
z0&ueGb>fW&q>C3ISVh-w;|yt$=p|Br-L=CsIKh&7;{%^He>!85WG_+dwwXCG&&_%B
zyz!aM=SqTz7LZ0MDA{F_;vZov0tDAUhNJ>dNKNajux$@jb*H*+jM{)V(lPmlBsc>m
zHDONc2`3y}8&6tkODDHU+u5E31%G)DtI4@Y(om~`!M)vlwgW$d{ayh@Ft34Rwkrgc
z16B3%lvHo7JSB#NE`rwnhTR=q8GBwW-b3RJk7ZiiHVhFRn|?igN!9bU^D=&5CF)U4
z7SiIGrCw}dKOM=go;aj{zh?U-nUj3FdO^q+y;|~^L$d<27^r<DTkxZgs>EZv$BXEc
zThJP2RqzKiCN@r`@a+Rnt8|a7)xRdQNHi8v!6t}ps;3*HP~@#%_xJR-J*1Y!vftM(
zxcE^x@oB!wHVxG9;C7dXiGQPsslbUCJ2@f!N*%eJO!^vcUi@5x6tR8=;in2TwCiha
z4F6f!CC8^~C6-bgUu@%46!wI+I7eOqiijX0kY%;CM=!uQ0jx;zG|PqBSu9ZoZFn;w
ziLfXSK<M^*i^xPG_>90Wh#(sS^Ht_)?Jp-tq;dN_U7e$8_2=q{*S2&W8<@0^bJbRj
zu394$G)B~&qbT&*kY!~1q1=3cjUyQVEHNtT)RufnvHn1~eMvdN2PwM!%^g@<reHGo
z%<L6`{8pzv+}JLG7L{n{eq4PAe4-w*8~BZo{K7yrtalceBvy!&PUzjZMN@%(hi*mi
zUurJ^_g5g2d*>#j#|C}5104PL$FTsLQs+Ch3@nZTqhYtHGZJp9b*i`VDR<Exd<SW0
zq8s}4(=v?(7_MeP(OU;ERlP@?kp^=XR1;eqZ0dhvm;4Xteh~Lsyk}bvo6(hXhPMmv
zJL%;ez==UmfUh*AG|n>BBK-YM7>NHx1#i(3D#c$yBAF=;MZq-=bRH5v?KFrWc47ru
z!K(5(XS$2<(u$HBgaef^m3rroK2m&J-SSx`p3;eI9s}~{d_K3Q_@~MW6THjUo83+z
zRoQHZ`O2LrZiuOP6Tm&)K9A5JTLcIxS#IV~iEu;7_dQS(R8k5)sBJba4?ttZYCp%K
zjtJygJ5A%Sv@w6+WSygzQ&I(!`nbaAqh80GQo7V$d4x)GWeJ>7(M%|%Or2ObQzzIx
zYrx88$zW~dI_JZSPG;@l2WC%EP}PC)OX8)~AEa6YCP0uO>8yDxBKODRx$ZzoIg=w8
z*J`B%xKiujw{A^n+UwWug-$T!<ey!DnGb<%GFY}ptA%7pJJnUeR&5AM<VNjpCiWHf
zPBHKvpNmhYux06rz|+<95D$SV)uqOO1oo}D*(n*){@}(E(_c@pGhHW9ZjQ$#AhuY7
z*Q@4aXWP{MeGlnv7;H(aG%Ibv8;3vpmj<VA${vVqFawno7L*{Gk%7>nXE|jD_GFj%
za?ftFK8X`3!VSEjHNX3Z4?Qq(6H-ZkJt?}RYvPviBygbXhmtc`-!BVBo&*1Q3bpNn
z{KHIG+OX^ZFR67dMOD$yi3|0CSU~Rny$aP2y!z9_A4E`S&y1wKaJRyge^bBf%2U{D
zc3sr?iyz*^_?i9GcE(+Moji}F2`dc-i-kKKN-pqHj3KDC-jqJsOjO6j!#D&j{`24%
zdf%VWi{gdozjQK3?SSQ-nluTiC9XmOr0-t+@{CJ;!^ul({_Nrn)I;se7GKU_`g)=-
zKEq-zmR;Ow+rnM)0Ksj=qA&ZksXC9w9kN|ccW+Sq&Gp|_kb9nex7R&R4j;di$<sNX
zH^}baBbXJ-hz%!hZ3%YoOJ8&3BOfmEBqt6*s_RE=;*BDFEraAnew9bEgH3CW*c_|S
z?bQR6LthM1UssJ_N^8zmhKQOjHkW_+(WIL!b$)u+z7o6)>Xw(Is7ej8BekNp#62zZ
zramTzc7ObD@7{ZtU_wVys>i^dV9tA^UJoYg1#v<XbF#9%4*A5O4?|sxr<^9NRH!SY
zGFv5=3n~qptaKLHrn|m#bE^m~85dh=;xTNA6;w7U;U++ezpahusm--$ka4>!q_en5
zL&%}GE9z-3%*Cah-}SiDlbYu|7mue7_vQ;@jsJ7)>LOS)EX<(pC~p((5#3b)?Ee0H
zlQ03(l*armp~$!s9;?8Gr@;sp2h3ayVdB{IURgF<S$=L8o=0)YJe^D>jBjPQoH+cC
z={EK#`^OSPAgdr~)TDQBOcv^RFns4`N7bPysfDl_szhFl|F_oV*>E3xu1B?=-W`k1
zvmxO~mro^WbU7y3NK2H~0t3GfghQpmvlHZ6KRQm|hfY%t;V1m$Dr)K2=z=l?sRPSI
zJnt8mYD;T(Y+2^!=A7ezCjC?c#!3plxd#z*OH}M)o_dqhM>1S)x&O}3dw=D@{;BzO
z2OVDRks*@JNWM~waqnw*!-F3)?D`qFLA8}2p+6p_MgE`}r0YmrGHa9enLavn$1`21
z!O`lQ0D9hK!~_BuK@JMpK5<sRl~8zj;Jh=Df+XDf9u9M!<$E0MuM?rN<fbMuc?%|`
zLEXx1OPz)4rwZPl{icvs2P0Q{-LzJwmS*txlE=!pZzGBc6H!*V{Q7-rKAIjNvCHm-
zLyW-EKE6BrV6^1uTZnQ$!{Yw5r99P$XBXb8uRkyjIQmaAXQo-$WA}Sr?5EiDsp_5%
zDg0<LH|bFn11ZEmRZ(@T#^>7?L*4r+%b6p)&?CvWY)ccST|V(}@MNFE*xso~Acdk^
zI9R(&-`eb$p~H7Ln)7IY0sHX3PALS3Vg_R&!t>xtM_*@kJ<!Bm&v4ATZ0n!m;o;k(
z*f0uJx{Gs-Fn7Oc0qIYZC!4l~@1y1p%+s$<$YLN^$}&~fO!KYg6p>m)ecbo+SmF!_
zKKBJYcz%A8D9VDVyjDTE@!TFDsc2WD%1EmC6xX-6`G7!_Le)h%;N+3TV;i2Lm9^i_
zf1eIXMCl)~ukr+>$nv{dC%kI9q;6%${8)Y5S>dKVT7^gHnv-g^(sx3!*y3c;mfC8H
zB>PJ3A-uN=tupfbJLGWygdVeYiYr1BYOCA+@i~V~>08O~yo~NC;nW@)XT*+3iHNDc
zxduALAJ1ixN*1+u7^;N*F@_gY`#A=|FK`^GRt;Kwxq2H#K<js%Cf}$H{WaSQwi`ss
zauSOq_|o7uH_OO`2{BlX*Bq5DPxM`d_2MN?)~GGGa#^IBLQFW(#gqQYbl$sJ)vUgQ
zPLk{#1)?i<vNJw)VL-g_IW3~)*wa0oFfg;742yW~>wT(vmq^Yo#Lw)Ve~%P}5AU>u
zEgiltD`shT|1?u}!sw!Z4r5as+i_50k~6Y1Mz2V5bMn)bI9fOyFtf%>L}wBVqWQp(
zKnd99pfeIc?k|2N|NE}q%s}iS-Kd6ioMndQ5t$QB0kdU=)@ZfDdk4$7)1z_w1qB6;
zOB5jnEP1g!;Qs?-cksM?^7*k{?^J*z0QsIoWb1=Jr_qw#QRJo?_2k5F@6H3Aa^zX`
z0>t$*J5X%KJ2&A7(p1M#DU}AAS4DPdr_hpO3C*OfqdeYuW*56wQ)&mettyFI;p8;o
z%=O8O1V16A2Gs^de>+ZKV$JOm^9T-<2IvYpN${IoR5xf<lrDoCg35RaP1UTRNVP@B
z1<=MfspqaWJYBM+w*uy!Hw;F1{TK*}I~VG>bb~rdg={SU_C`J25%dfuxH;qa7q>Fd
zH8ksQ%DKWzggyW$@VK`0*vVbu_y984`rr3=RHb!6%5Fzm-olXzi5j9Zbm`B!&b@Pg
zwrzKhc{Gm=6#Oq_d5x7=K9$so$Wif!s&tX5K3{ja<9c)O^KA5*p#wXMgvvzE4rr6!
zLm6!*uL>(?06I!vT|;H`0`fB1qRs!}mWVDIbfzsOIyHN8qPGGfZfAX*{I?sTUgmqL
zs6M#iZ7jJ&3>6<VwTvz0q4M)#CKGLr_$~6xxIT>x8p{OkBau*M-$I%6LPns<B8AF8
zt-bwZ;`f*ucG^uV=5=D-IR)e9>8UV^@m&eYSs!xgF=2&z_DD~5q*<<ng_TemYgr|?
z$W_<AGol{LL9JkwrFn{8=vd_!kIy>E&$$#`MmO#1<~DkZRy~+=AC){t2<hK_0iiGB
zCo!X3ph;m!VlRI={qaBN2_+L*MY=7$qnfN&8+C20|0B_Rku9wWwWZ-Jq1OD-uXu|{
z9C)@Or5rHm{0v7o@d3X4o@RBPsxnHQf~}I4u5*c13jyJN8I)nJKb)*Fct!eR`uz8`
zyc6iaBJ?w+Q%C-bslf<_y!!L%o!DzWMFa?pR8^|AmdR#brTbNKNb^r+MnR(7hEh3v
zwiU_UqXQ{)8H#;)Dj!#h)tKuTl-0RjUMyuYaCk0o5{$z%odpJ;y9}|UpmI|PlBiK^
zBq0UtofHmo`{o1>L69e|mILF!8?EE{1j<DqnuMBko`=CKb%Y!TC<D~a@7)EHb92Hd
z-mL2bY6dy9L;aLs?icOq9g4ayQTf5J`XzFV)=|R--ltW!w34SrP06|am{oMD1!OsS
zio<qjs?=ckw*E6Na1|{KLSQ37;^~Lsf++^}g)8aVI?X2i=L1YKs%zzB<Mxd~TE*nv
zIIJ@Qh{fw-k=Jp2J4Fe#^q@eGs<XKF9-tL-P%b0N8%**pl(sbEAGara4!KQl=aMAo
zcM!z9l^N#ir!U*H6CW|KZW2BADi|f|f^pQx*QGyx-Jm!oxBdQxs{Tj7@Hr{&U=%W#
zkIc9%4lC_2#Ts-eJMBEb*05ttw7&8!5ZzQw)$)3@x_!OMjqU7`<I;ledevC9B#3IB
z4^RKgeDEH;haTvi1)sw#Jg2xS(GNhAy|q4*jBY=Fr!>fD`xcL+)lHy6P_&OqvkGwV
zhZF%`QIH)hbWLP=wd8+NtO7r_U>IlXuJp(j^rDwrX3NAPCZ3C<6*ANq#Xj_HsZOOr
z&4O~cl4Pyyegiwdp|@7zpkc!<UEs6|F`whJ|BPt^570$t=dX~Eb1%fZ(N?DJ+=aSt
zgaf&Fh$O$jrSId}9B=aT`X+~-tgD%4xbfL=ze`MbY(?HCG2*a$mxo0d@s<5G_{D)R
zgQTb1tk^8xuJ$zXV{h3>F<1pEvq`MF&G*?$<Ck<<QLCpto*ojDVtfiGqm-6OhE*{8
zC5Wn2^wP8cxs;2OQg4sTaS>lq3xHQnPeocT-6o@1pRc<G-==l$r<;Y%o)w|==<$?Q
z1)nWq)!`srxw!CX6~$qXZjp<d^lpc*wN~c(!#I^FXgY?;U<y1r$5r@hn-E*xXI`2L
z@b6<c&d`Pa#$H!ZUq|gcXij}(o4#~2hXH+~3Dn{z7DXnIZMv2VYs73E(!)&jNv5DS
zYi@k=Ft0N3){Q2Po0^3HQ+2akAg&mq!)TV^(F&@h4iDookcA1VEI4yV%A75{ze2*<
z3v&e$^+#7GQ{|k~!hGDYrSRm$n;Vh0RewSM&rPNMo-KP_A`lRE7Z4D#|EJbgMO;`+
zUi`NjEC~2ka*3wCY`LbJCp-u!#2GjU$p1d3_-q_DrIPaEdkZDU2Hc5gFQ@*CDOO+{
zAsTobzGm(?o^xQWcq?6;G)K7n2uje`Yn4Xwe`Uhe7T!$=QR$fZZ#TE@PHo9n&0<dZ
zlFKCwh4s)5I(g=t+$wDi&Qf)=(#y~qXUuNjJIbiq_v1Ezo`!@~Tc#Ps2ycXa!Qn=Q
zcZH3c#gd)TZA$KDX<U+P15+wB7-|XwDwg$v%y7rjBb)5yQd^|TZA{~GEQ5-LqfqUF
z$hl?3HtGrU?3Cs<J!l3Ck3LO+R*jn3!~|DJT`H}7Hp7A@1%G5=Q_$$b=GO=oaTTPJ
z!|lR>#CFy%#qknO$ex<$4{>zr_hLvxxy$v!Ms7d<_ofaAkkq{ZZXH31KTBFB*#ia1
z7=2;0<CJ^i+8JW>Sy2Jgh)S%=w*Z0W+hq#LIP4#MWJM!-knKPjOs2@Ciltw??Dawx
z>u@Kx+<YNAnng=m`_@It%%Z5wfwbGk1YnCP^*0`q=$<w{S0FF_wo6^oO&^;XLb{f_
zuC$!8$v5n#gK$*P>r#gNi{6knTKi0Gr(yz1Na2oyY|0FaZQ~I|krnc(;LI|dEz`m?
zCZ^}bq@;15$N@1n$VF=>W?7)uj)}pV@xKpov=QO^gcv29_;3J;EFFO;M9)kti^J0}
zC;qYUBp``PU}@+^NP+X2O#!%Vu#4jh2kPtZg!#GFpht-#h}}6Qk1`th!9){x0@PC4
zXL6~j-4(7x)AuBcoVBCjsvV-0@z!Eudv0kJJky9Z(##<_nJ^t|1=0w6ocIJnE)h*2
z<@G9%baRqSQ0;NFlP0Ph^6mP8Sct@rD?vwOX83)fV6u+}eC_yZal^<lxPAJ_5G)k5
z&nK(r>@wZvI8|_C_2vI<Qnq!7fFI!~k$Ad1o!p&WJdk52&SQxm#E&3GG50c)K*F>;
zrmx7>ciYDEly;C;E3y=6!Ko?=ET^VH5?$7M{;@(K?6R*8gy=>iH=M3C<;O7%nnu(l
z0!b<XO2ockI?TpN1fE<MvK_iK%15xW=An19sLx<Me}4jOd0sX=8jIs0%)OD6IL@t%
zY!X|A5&xSXwvp!-?&Lp9;W*pQ9o3g#BW?_BM^9cRWA3yz#gI5)%5T?O$Ntv7Z6n6w
zDnQRn3C<V{s+PlNIx)J4rmf@Kb<^tb5lJB@5eEeJ-6EjGf_2fjBK36s%15$*eKiL?
zui5j4_=2IsoU>-5MH+*sw^ssnqUT+N9$<`?wSlV#-)7D;XKJ)a;Di1Cmj)WjJPy7j
z837Q(r@H+!G|mL)c=x*tVsdeuDG9!@YCgIoScG|D`Rqsi!F3t4Tfv@ATLA;7UZ=mX
znRUlFBmo-~lUA?qQ>Q%xBl10D0IkslMs?JxWsu7~fcy=x*R}yk#)jO#@-P3m{<Jfo
zpQpb(GN(p!g7}K}$233rc$QZ{BEX*zaiovP&2mEO28=~aW4deu9VwQV1s@?DOg`AM
zty_NT*7gk<JJ7q*9WMk26t(4-JXRKh%&}Qu^%og)B^^lQl%=s`!JK{MOApN~RdevI
zpM35#<zqSb;9FY(n<)%_ld0o@-^O5=T{MoM_lBN!V~8thW;@mbYmxRf7%T_g!=A}0
ze<9Yg5#-4cD%9r}B$nfnS_WH?nh689r6l>K$RzKE9UM+CH0V+}x^XMSp8UmVg&u!<
zju3$rE3(rmWfPFzmq3{0+(?e8DN<ewZPy3F&IrPE4ms)0HNoF$5==^t{=ou?8DFeT
zRH%zuem(QP16*F!WP=ZWWe0%<L0t9X-y=X+=*AX!a<S9sb4o8vM9a15E(HOd32poE
zLI*@DgNItTAR$7bb%qy3mU9XoAINwkeYdc%v79hdO<h5p#SyvVO*Rvna^MM0VNIzz
zd|WJwp3euDXVJ+r_E5y0`tvgKuyA$Y{DMP9E2R?7ju`|)r2pJMzl18w;9e2Ve?S6N
zkV%&b)_0Y*PS?Z(EA8Xqe*f>W|J@LV?c;iy4F*?6)okOq1}_3(%r4ZaOMZil4eF23
zV}txf4(mH!u+@xO=UIa+V=Jr>bWw}We~lbwt4wB5Nq2g4wWcPD2~)Z-^znB63uH>D
z9o#|>=f}!k3`I;~um~5J-b2bA;w(Q-Nfs&*Fd+<vo3^i(_c#JHE=F+%)YwL`nJin>
za04c03#+VN1Rkv|6qf-1WM3_*JkXQ6?Kd~rP=ps(Rj9BWm8C0=(w<jZlHPhLWQGQf
zP9qkw{}}bi26hEV=`s_3Qf@T4cqQyJ#R)>t`V4Sp{WnD`r{;ge6kW-oBB-il3hcN;
z#r`QGt?M%ayhuuwdJ$2f+>-=B{*s`uI`ifrVcTHIBzOQ^a!pbIa>a+p3=)GN3UZbN
zqP7@qYR_<#{;P11cEITQ@|kl);sVjrsEXaZI@EY$M=711I7iA7-Y!+RXd`>_fmsIP
zh`r9Ck~hrQ>+I`k0u>Q_^T#>##{-Hng5HwPA&2g!x+rqPX;)oM6+GTk#`bo<7zHGA
z75(X2jvkG9>s30GzLyJ?cd`3zpR}_xBC~YzC-h(_pb&H6fesQLQ5AAYg&>%lHKZQ~
zF<aPHdwBD4J_u+50~c!9X&@gHU4=f>QQg<B?w0U8NScAdQ++-Bs17k|cU^m9TwtWX
zbTXoL)00W5nzYilD6H;U<yWTB^}08#I?P0hxD~gEDw4ae1bu`Y(?p+;jsZ3pGg#Zm
z(sxxOpkr-hD|sq`P&6D1qwa*LHlpKsZmT*Bc%Vd%p8qhW!nm5Uee3GT$jLL%{}M4^
zirTP()75aj$B>P=BP6>HJ|DtKY`<?rvL@hM_cm;}7A@>p%5aKw*iy&5_)}`pYw$CA
z_4Ke>wO-X^V^-zh>mp$bs#5OGFZI1V4`?b{4cB-ghyIy9;9o@o^Yx6#wCWb0^T`Wv
zI#b#pk0fTnDK@ox_yXOIjdj^OrEvitF^w*F_%f9HSp<|jBAX<bB4{9U`1SY`fW4_x
ziHwlG^~t{fgaZJX{m++8v>5}>os&PIsVSjYJ9c0Hu8)_WuYiM9>-(<m-ol)m_Bwo7
z5RZ`}aE^n91wBSk4NOM!=nYuuwbt5cNRx7@x$QJa6En8_yqH1Yc}62=x*R(qVM}GF
zc#7}c&OdAnf7vpXbHlMvj#nROpSsxad?k%r4TraI^p1}=lcUd{d@(Hc#Ix7&cTl*~
z3TfroIJvvj<PVrk&(G8vWx0eZYr2>Tr}8@8))cT-xgz2Mn9u}s>ywKlQ6Y(C0h6K$
zczJT+wA4;5G+u;v^SW!oK_CNU>hNH!e-#gM6jFKvw+4-zdjlnk!GysRUAf~$aZaO0
z>o%*Vc5+JX>xJ$SL%^tqCga-p-tXrTd|kc{NzcK2Jdq2%VA9Sn2ZMz>*AK8=;6hRZ
z7kJWVh;KrGc|UK9tvIwXANPCQt-m3LL^uot)7FXx&z}vt)bBr3e%}M)^=Trizl|Fc
z;8rBNoPp-cMa+swejh%PC&8A!E(o`LNmDd_U0eG2{Oa~V*2B@~-yO7sb=S8<3EciZ
zUS8i)4+ngc1dJ693Ny2_NI%wAp=3OhDu~X)YR47P|DLn>r|fpeZHuy46#Z=G2wZh=
zyQGO-lsKIPI{OQ!uAr&Y5rhlo*YKo@f_YjLSa5e+T?Io{OKPow<P`-MXoG3|;fACb
zzyx*;4yYzxz3L9sv|DwZ@T!L=b8gMS{pmv6Ur!t2^Pj;0ETes0U$4fUxqj}_6Sgg?
z0_&s^3@Nz<7U?yQf!tAihMZ#Yq>;5)&+uJORkIrUW}6T)sy@W&nuL@wQI@y{Z?o)a
z0g)#yY-BL#aZ8;6-otcu3?HK1UbiKMlI()<w{4I0RN_L@x=}y2->DRl#mg>qW&ytK
z3mB2Eo*%2lSmdq`H~vhp1xEt|VgUU)?dM!sLaVmX;=#Ca>DP}(%(ipW4ar*C?emV>
z1uyVm_YDfgg!$kcA22|K<0xg{@O%%Oj`s+CfOH>tj@`x5u{nF@+s1;5T{?TqHcdWU
z*&v*UB;^3;92JNf>7jEyt=p6viG|QfMzBoxp^DRmX_XdUx7B2Nu4cGiY#1#L{@?P<
z8hV%K^}2>Z;7y&M?W5ObxA@<%9@%ORTn$dk5Abua_SIB1bC4!RPtkl5PRQ63Jc~GO
z8AGvtsdx`vR*k&nrZQ_tFYI`-Wxo%(KkMh(Jp3Sg2LC}^xIh=W>feW#w-Tjf%{Fqz
zAeUc^PN?RRYy*kdET>K5!8hwi7e<cKWv8;QD)MWR!uBDi0#-9d3RuSYzU!?TcvXt-
zd(C}>dg~JXVwv_YjX*2vB}SmdJLU&AP-I?DeO9U|KVP?pRT$X?aQgE~cIv}>n`I}#
zufodwX7QkrU$+-H@_EV?7syX&7a_Gtp-0F;9!om$rrn+evxD@J7V0=>46V|_@&<=3
zNzF3t`xG<k5?3$v!clI$xJOt@00yJ&6wsYNS+SD4e_ppO9T<mtBUgz5yv%L-GOzp|
z;;ybmBmt;<X@Xgt_LI<qE#*$Dx$t5{nFV5YnXU%*OBgFf(i<~>LS1%QZXGvn^ZYFV
zhQ+qcHg$WNWR#<5cz=}S6Z^%a@%k5<q*E3V?p(|2KNk!JMur@kq7X%V>KARM)~!Cp
zPHgm;D;zdQbLKFJJ(!BB_L4m2P~?<0pe9LoYrtjVV}X8YveVZrU5E#!K4p99<%BsQ
z^{Xii!?xiCnscwzHr@VpY_9-r0}*e&vN(ZCR?XpmSuUrI(m#5;5sk8TBTKOiColS)
z=R1OGAO`9#_CsPy;gQftFQkK(Fn{P!&B)teqaBmZ%<)3^31DC6Q6qNCZDxb;g0aKg
zR)EbpsIELkb|-O`8|0hEh{&3J`5b8iX*XxlSYLgrB1>v$pJ=$83u7fV>-B--=shTX
zw}bmhSFo3>*t^eJe`b;xFUD`?&)@eM7x|ytR}sI&uP6V0ww<`tv!h8p{WO(ve%?0T
ze}8W;n49kcjVCne0m2)fv!BQU(ARwdENIwobo3nt-Y&?XZzI@!9lLq`e2bI8ktMye
z`?rH<ux2NhOU+8<sa}Z8Tf$xPIp+4@`sf|<YelQg#}k`Nhjr$V<=AUhN)R<Tjr}tJ
zI8j5S%156M*UY!{g$Xb?x5{-;hEPr7#cWfB3X-KWTYzNRB<pleq!bZ!A7?Ij{$BT)
zv&Map!0v%iEG};lgLgw@T~j}@Tf@UnwSlmb^uMk~#_fG6X?3nX>;_|y80&9Qa7Mn;
zW)wX`GEurt|Auy7>b6tA$*0O7%dZ_jj?{XdwJQ_aT4&>=&$7}wZt0=D3pf27{wgLi
zT&RvzsOQS|$R13>hy}a98BJrR**$bG1}eK=|J9|~uCHC)PHjGqrpDs*80&%X2191t
zNEq2Z;-g>a8i)Oz+7z4gC&C^8PG_FPljj;?)8Ch-eLzGL(bgL&QCq($Q}#=9Zeb_W
zdfpUHQHlLy<Z0Gbc_M18c%6^LpU*sA43KGEq2TPSgS~#CS4!^bsJe?SRa9)oJ-~r0
z+P!L1jh#F_N*f@=El0;6f^b)qn0q_sVf2<Pa+%=i5w$LDIocCUaZv`G>O#Wn8AXAv
z`@JSA4o_;q@}7V2QQ3dAWAvIcq)&l8DR$2XQR(rSKdGq{)o`(BO3?vz?{j~k4R+W-
zhOuRwSmG7c>6?G}xdmX`_+de%4GhIY?(1z(E-dp$<1MKWIxMy*9BwOrLOd22bG^J?
zLd!+C3pV5{@EQa*4DoBzFyx2oNh*$pl+Q{%RO{As0EK!AtOlK3l{AS~FbKa>{@w5x
z{cACMl~curCQe~|M1GHqWPMOE3>uyXS{RU8LkGETjw(CUG5ELh__F?iWl$I1QskVS
z)t5IY^uH^sJG&VlX0*VheCivk`OhMCee?2s(zj(P=`Hum?~mIXDz~GMuP1@H+C9<V
zK6+y+_coS3eXGG|wHR3T28DXJZSzDy;EFaAWn(`dNvTIDm<&D_*74xLU8ROR&!cSF
z1lUgOc^j1Yx_BMUetkcEJva*fg{VR_L0~R|lZ*HJ<?{TvPunx-tqJq;Njtr%q!Pj4
z8GvzL&{K}LW550kftGx~2PPWsCexXc6r0?!CZQ%s{(Ru*Fd0aRIU4i16Eq>(rZ_fu
zO5s8g<*ph7MwUCG4aR;2M(IA#pq6p5JFwc|XG+q5ulM?7Q$J$JJQ7IfhzN(r71lKX
zIH-G9b1p(=L_0TK?Iz$sQ`)g*<;o?SKj^QB-Q$tpG+`#5fr7@kt#@KKD;v%j8%mw#
z8{B#MEdbPV^yYWQ&h@0J2Z4!O36%d$D1Eui@J6k(j8hE-br?~`|J^f65PK=3Ts3J!
zoY>LDBhbmkm)GO4m<?cjXZ$>Bt;3|nxzwvDrV(1tLvC~$$HW~Yw%2LQi}T%v;SL2o
zZu;V2j+V}Rp6phLp{OFrVS@VANjJ5TJ@V=db#Y+vZAF0ydfWCN8M~9Pekln&h)SeX
z#R&8-Tb{uk-o*v@K;eJoQ&sZe`tbhW<kxIbkZ5(zyZ^RCd%Op7AqGf1p}=67A27{x
zQYsR>#0KXtP8jIBf;Cm7fh_(U)W*YXiI+o!>xH1;r2>D+k_Y%z5+b+<^&HvsH1(OJ
z%v5D{`@#dT8sdrr)hL|Z7XE@?(k{TsCe906l35SUO2YjiF(H;Fy!Ui1zLk>I&Vs{b
z*81jaJ-(5z_=GPZ@nSN6wI8Q6wnC?KKQeMb7W(}4(<9lWK!@XHduxuq)RgyvWGJ?F
zCTo#&&c>f7(tonvF(dc0CfFbe{3Z5%4#gmDY2iza-N{BvKf+9ZP%SNnIw&Ol#E+VY
zz&qP+vx>1^$tYr6_z#RsD=Z8I@sWDI#hRVSmBN61{YY+XOfq)@)pZuqJmMGob+~7b
z6zmk*#|%T<j6XldE=m2({m2JCsau&=iG!RGlk8?6Udmg<7A(O$#xGHr*QLw!<mlw8
zK^qYPCqjLZ!iQ=%5KEekp%y{BKiLSQlU9~>h8suO|Moblm%4+2no+Ntnr$tsX*qL8
zLuBif){WC;?!?B&XqxC&Ej8b3&$SN}wSRs~W|+R8!RnZ8wP<=nhkYne(l!XE7rh`R
z!cgLR2H}-(j_An;5SbMuF!XlK;}va_j5D>J6pU=b@f0epxZ>4bE?jG6e-<Ck1Cr^<
z_=s{HyNJBNErpggx<bW-vw|(JA}G|A{hu~Ig$)5(00-lG@8Gf;F8DnVgY3Hwv}6!d
zJ!gTgY`I+No6jrs;;JcWsmi^hG2J2FH8S#-iJ0?r#Ta*Ljk$7_tQb;Pmkz^CA!w#f
zM*=+Ja`Oae_gi^w@xgcTZc*3fMOQ__aC3-zrX1PpaW2ZhY|zBzQhv=uBsQtBtCwGz
zPG8;dQkHu1KBd3^wQM)b?1tVuQAqA{8O7@72qpZNZxl#wOuEpWSC+Q{e{KPI*9Ry|
z{NLg@)s>2AjOZV~^OXOiQJ#!K)i}uBNzLXu<A0wwC4Ok>r=cHuqQNyHyXr%bLhW^a
zHWj>e233Rmt5YD_p2kpY)Ojo<VvMgsL5~-AeoJ!4iHr?9J;mYLK`1}V)Q;Sa!9Am7
zFx2BG%#;pUD1CN<`2)^LwKEqPkg=dotv3kCz@kkAg7D*SOwvl=D5UtYNoVAuo8Ls^
zJ3v`Lci!$t9Y<W>t%?KAlgA;PcoT7Yv4bC-t-!R?nR?V&!1xHY`D$zt7`v-|0Yj?+
z&`Fe3R|_x7dq{El`4)ebn;+QCMzfOcUlHpmR$^^~0{*K&Vc)0=CB>Z{KGnBkL6ysO
zJ|IOmZ*u4&RW1uS&ZvhWtnihK3AijKv~^&GRPMq%{dn6ucz6XeUqmDbYo89$6*#EN
zibu1#JV8=yH?BM62lXKgzY+01=k=A+cLZ~L__=v_`7}P6S4#7~WclAu^94+bCB+HX
z{SpY%6B7Vm)HC$JCtN-~@i~k?Zlrng&#ldS7ta$MdZ%#EoVut8BJ#82e#-Q4$VN?_
z-FE)26poq}W!DalHOmtJIb2`8f3Uiz_zjJJs7^G7Dq55Yd=jln^K{S8m85|GE`7Ns
z-<B48VmgGeYhV2xZYI6uTZQ9%bJU3PUSlFDXpVY&$GMELr!@>AUISa0hTbgS*d$Sn
z-{OLm$QS~_I6RUK-Z=DoaJce^;YQnglOyO(uQw<kkOam*ryESLpuZ734<@hrGzZaG
zL1FtGlm?e2`nkzFyS=`wRBBuHOx_@dWRd>(W$unZ0Wh$j9w3KW%j^@z(NeKSzB7eY
zgp>ND!0rt2Ls@uG1KWY)DJeztlqRL(qVVC7mG5U5&wU>(md?@*W~bXR=|X$Dy5dmj
z^91zn{8P^8sMy*0Cd(v4!sb=(l?~@N9+e=$ksDL#ki$AfNjYQWr}Guf6;X1ux_E1I
zxTV%52=-d<BHYAJaMh@UTweWAoBYqG&nVNKq$IP$yimnfz5}jDF1=6Cy+W5KBN;7;
z+DND7*Y6uxHJ)&<;kW)S1Z96TlWZjyQB+K4n-+fdsJU4~|C8b+&jE+wIjTI6oLFlC
z5Km28U|^Z~_JB@M=MD*zmIEpAm$hU&z3;nhrwx%zkZXRYMTB}zSntp`st$sH<l556
zI;^pd>2YPl^TuK3cN`up$S9%I9G8Af&u-)`oL==|)GP^8v@JyWob+7!0m?7E9paZX
zbrx9T_UHpc`>}O>DLgjomF>#ykaLofNeDV71?ZW11~YYAe1|NeK+VHQuhbyTUGr=@
zS}1`bXC23k!3yQ>vj7o!JAqCpyVcyRKjnv@FVr0;%P&Z0t@v&}PK24QvaxcOnpZe^
z5R$nqAPL>nN40DXhUrZ<o`<lVkqflOMbR2+?rPNn3gCV02Ln;J^Psa$(NYSQ*B*PY
z1U<PO$czHNZGW{AoUu(GrkM+Uw<D2Of7hZEQxFy~TIQZk#nY3SrIJ4Rlvaw7AkA)H
zX$eY-#dX{mS41#Ip=eSZxrDAt+ws0(y6BUorT>KxD00zZbCv7hvsAEp`i;<h2VRfq
z?xg9!=nx@Z2dO0V<q*qlm_~9ppt8vZS$!J4+?{|p6Ky{Rv&xn5=hG5~PhnI~|6lrd
zFMb~6znI%v?s<5L^!&}p>6OPZOotX->=|b@Tv*<m8QN%VW;xk?{Z3w`%+oI<nt}*b
zszILHQAhqnj{A?%Rfis(o_C}5>)RFPu3kRD@?vP3aqRRjBps@c*z*;K)kJTAum-X>
z3_o3Bzhn~Fxw^{TZXJQ-@wrWBbD<ILc2j~8C$M<Uvs1xxcnxatfWpznw6m(}oL13(
zgowh#%FX419)U)@;a<Ts=1?N;*FprAk_g{(5mxmE;a~o!)j?1gwT=iw%1_EyCI@BG
zrY*^ZKWH&E6LPZ2EkR3{E_;n_0WDl08;5=Q#Y<;m(8B6^G*y!tV4*y0WH*6x-bNm&
zPvV6ox(}ndu?0`b_g<{%qUy+>x-5Om#D}8w@H|o|?ZgD-QeFy%AONR&iV)P493N8=
zo}~IiI#jR{ck#8;kG@}7#qCEVIY4lLdC~T7G*#K7AR;6DVrW%;BI{%zur(;-cE3Xz
z2KZ4QPwpKaGINJ&0|5MK@BIw!>6n<b^hkV!S&Xj~7)g;S4`mJc_eWMY8PgwWmXtPg
z&$@cm$bPL*z;Y@eLR+{yFB6FIZp0GLQL6YLSNn^=GQ=o7357yL-uCH;^IZf-TEA^X
z(p%R2o;_QqF|3nF7e4MYH@D7$grz-_<<us_$W0wdoum`LjMhqVfg6!yU9Fk8sG%V|
zH>edmld|2$s7P#>NDt;}u(aEuvwD?mgJt)kxN|uP#m9XHnM@39-^(`wo0}7di)gG%
zlN~!(RLaCOc|5?!;6kW;Gy~z3TMO8c5=z<P&a{dZO$w!4aF3{}0LBm{<S0M!Yefu$
zyFXOhCWsG_m0YNRjeG^YLE+VsG`63Aam3b#N(rYt`D5gRE$Mmp*N_T%Qxg<gB{h<<
zvGp_NTSCj2P0((Fq&1BfN2bVF(gse5g+WIjTcxKLTmr<*xs2=33fiPI$L%87;>~i1
z#}pjZ9~LFC)E!dtYz<DaDd+_jd)5UJI=)8NUoHO{gfGj{8!#gE9kHbeaiJ)FNa?3S
zzGzP0m=B8+`hC|ZSdQi*=qSQ4=6~m$dsg=x3BqbHq6@0J6m26RZc+zOx<E)qQk0vX
zfU^20CVz9cXTlChMwiD_ZLapJdq71LRVE1P$iWG75wpdD#}?t6_(QJtbr(0BfPwxL
zBq4KHWfgsxMIKUJ7-IMoruF>`TQlkU=*lM!lKh4_yO6ZoU9*gAGS&#UDJ)ke*EX*h
zP&z+KbuWhvxm^d!y1V?s3MljvW7%k)&6kv>{A!<N&6I*PHt6`w?26(|UN7dE#SaGg
zG~j`1r^&g$eh5ZqfZ%o7xP_wp?Gn&)5L~rl?A%nth@JG-{IZSxQ|D}s)aJ8d*K6Iz
zf9|<qq=B`TRw-bsKuBZ<_FcBXQCHLYdb4N4)8o={2_r1CAuId2<Qxhydd;NNa-oA#
z#5CVyF=?1W7z%7)S+&8g2TV{wm<B!_yO@1iLH%H=fg5@U#ptjH?EZMLQ;{U+3W0IC
zfkiqWhIQU(`6iwkg<M|C#Rw7=5{`%&h}9Vl2bd0osjQl#Mfpo-@^K}GiUt}Z=4jrl
zY_R1q#+rEtN7HIh2_LzW0LG2|J}e!V7@(cul-2DzsK&p@Br~oTDl{*5rU8C9b0%^{
ze94Y()uYDq@*P0`)nNJs(i=PsHc5@UGpu3nqOO-%w7_yK7zW}%nfE_u<xfnw3Twh-
z!xAdMrD?^}ikD@c*h>m4)vSIb+oVT)73yNa&TxF~g&{QLO~D($Xj&8;DrAYC^wwgY
z?qD+Xl0&GTDywn+HC|%XrAA{v=Wk;#Nf#)A>PR&1>KHNw=xd4z@875X@!ydDQ@P*_
zLj!h;2?Ek!`v1e>{XfbD22(Q^D+~Mon}A_h@6us&tmS8>*Eqi$vk{&?*1p$nzx$42
z$1cDYbw~?cd<BNe+EiXNktV#EPIv34`;=MHnM}6T!P+%BBYQNH_4MncE9?(_OGnjk
zA@yfVHE)Bh_Iyq8nN5qDGqG!Xk_|P6xQ1!^=#T08ZdMJIHf(UkheC8?g^iZG^S$8u
z>!)Ai)uQJ~?Hf%CRi#Y10vf*YI)@F3^G=m@VwLxLL`h|SW?JJ+$M4N2kE+t!@<jWO
z)(|IcY8PTdD0=zJ->UTG<J!yC+jWp}OSRDo>~89^?I1KAVHPNj`VsP*bRUhZ+mSJ$
z9qBc#O_mw^5(kB5rAF;c2?0N`XW5gL>nB<-(R$KMtY1D$Milz&&nnx`HCoLW|0K}e
zFkVD=rr`5SK>Q+q7ijc#d6A35ZUvWo0r#&kuh`HwQ)x6r&gDGh;p>bxk|_F}9;Usa
z8s`QJ;mu7}ZN-|NY$?N{SP9JZu2_)q-ei~Lp(jmdFl|W8>)}u99Xs&~bq!Lcy|<UV
zfIDi1t4W=2-EmaVGL5`ivS*Wv&HUF;Q;H#hZR8yAV{0<Vg(BdyJnOZ`BEPO@y0$Cr
z#Z78V#V11|kJafuvtE>N)j^^iEv&L`8_Lf9gI9z=;4+5c3R=Pzwa!&fV@$VFG_Lmj
zD1ikCih^QM%ctpC1>(S88$FuNtIM=DHIx@1)tZ4;A{O$cyh-_mp#tEV&v|JB#O3*Q
z+QqE@c5L*YkZwjHXth{1t5exN6r|vqZ=4G5<_6>Kj2`GsDYFLSFC56d9@G36J!VxL
z_*3c?UYEeKy%7()hLzK&zbKS`^4m_~24?CyhNRJ<w)pqjlk7^T1Y@;);q*R-Vg*gX
zS}IxZf+gt$nk;jqM)UB?11@jSjv}q}taJs92MA|Vt+diCO@qYdAV#V~jdl(2rg1|>
z5_*Y%oN9I!YKIw%TEZJtMfP1UB9I6F9WQ=SdZF=>9D14(;XrT-i%2c7nPVJeV#Yne
zccM)G<}+=uE-&uM!cdm%N{$vVUBdFs?3W#sUPT|naExIn1!#}&J(m>hQ3%qZw{HZ)
zoq;L|_UL=i<HLjlST#NfVm`Z@Xmw&K>-+t~PXj^yf9|Yk4!d6n{`$S2&(ockxHvZ_
z%cGox0^7*=0gBD1@LK9^+y!K;lKChc#RZoNo9s1SlVt`w-9HZ}+tX##Ec&mLCEjB*
zQ&%tew;)r6oQ-Oedew~Ea6(#xup0CiR+KlU(6~jsLGSY&_B%h{_sh?6T|M89|8D-f
zy<RV_Z|mx;^lk-v{2p&E=o#gf;n#dO%192|9Yq7e6+VsXZlfzXaZvU;%%aXE(9QoA
zUaPHxrw<u&At$$jAlVygH8T8?38<W`G>|GXl!pgQ6HhI2(hK=0Yh5P+>Z{-yX6>u^
z)#`+9NVJ75;r%eI&;3{fU2AOv{#w@eH3sx^fvO0zXn~A)l-pvY&>7B)nEruwMX@%6
znuAd*IUJxHs9O&}segVE)ST9d%n+v1?gMEQl}-Ra!m!^&gZ$g-zp@D}9sos(*}l7P
zLccXy`}-HjsyT%Nf`gNRwlzmzI&5CVh+|pm#!fzTPm7}ZMk!F1y2ohNx#>EM{yJE#
zA~$W#2=YU#)M$@07R4M@?%yV%nHG?D8+4ryUGAA~Ptd=(h)Y|Zx4pS3`|b0D)3K$$
z;U}>+XfH7nR#&0(7WX{d?M#~QM~zH#Jw-y>(78|C7gQzG*Y^aHJZ)(Yv}2hyTOdOP
zTy0OkrId_zfJ(7DJD81GYMbvtPjL+eZF}#iWg()kS)u^q&6$IyOY<};i?JIEI<AM7
z_&PGcTG0`9`2Mb<^UPLfrv7@4oAS}e02Pp-%qSI#pxd)#K5c_UHj&LL%S2=PPvicu
z*8(Gkgy~SjoU#*ZTa|-Gnsg9Ir^VIFwjd9{h8O%R34GDhmsr@-KW!g-j1EzPpl66l
zkx*ey05^rM!Z}0AE?QAihoXkfttS>T2f|(Ru<()L8SI%80mc~IdDF6GEPktE;A=g(
z5>U&#AekbEBE+JELk1$4kC;U43uj+9sau{F@lS2N%j4vOFQVW>^a^oQgjW%5A~?p!
zgvRB7=!$~;ZOZ8A%AWZek7t3kUY+oN?xV{|l&l&T$U2EpQr{@62$syA#$~e$)Ge}z
zp7P513&jV6ccCA+Z-cySTeqA27&wK?fs409twl*ei0--)R#1*++eikLVQI?m>*u2d
z@-{I3-&9sm_DOesn@V)vU9q5L|Cq%<8UEvN_0nUNuueeF|AkQ+@k8M^=4IUtwWo9P
z50B6Dg>GM7Z&&xn^NDYeqQHNTr^(Ow-W<gNE$HBXPzr+QqH|>2;dvkFrJ!ZcPV5LX
z^;lW(YtgmA>Su9gS0zMkK}nvoV;h{HY{y-oT$BZ7P8#`2J|Pq+Fb#5u*PvCUTZ3Yt
zt}8N1gE?o+&Lk}o%%I4e0uWugS0hm&r^-YG)zmJUGO!jeIBORJh*PLqmUp;`1dfhI
zr@V&I<l$#ieKT7RI2iw+;sCCxg^r;TxXpe3XZk1R&?D8O1O)z2UocPEy0>&32~)Lt
z32zGjZpp?Z@}@}{mlyebg6Ar6n^S>)_RuI}QGK(IwQ#6O<PzwCFAAb&Wb@+6Z;-PW
z*5S3eV?piMTyv7@MCP4+fyiS9Jm=kYR)@IJ)vHoe-R3&ZBfN-wwA3r4$i!Q`M-Z{$
zemTqntXm)Lk}SEKL2ja@HTy2sXY6B^;-4LMwrueT@ulJs)v?TgdItZg#&ax*QgxYm
zWQ6w|oo$ZV@a4^zLU`Ax`E!vM<Vb$3r>HYd(j*;74wm)J@@+wb;Ki5wi`zxMyn((q
z#(lnFw>sX-KbxSou2iJB<3_%wE7OKf0=4^nSbHBJr~o;n*SnX-DxnBMXc{~LP}LWq
zaS2MvYKcHaQPBlYw&$gqzKxsU-&nJ+&dO(cdSO+2l)&@{_#avUo~zAyWmCke{6O}~
z0oa;HAFDr+W9F>0j?SOAp5D90jG)SBk^?5ZM(ZI+sJ7rVriK$b3_L~S9H+}Tt~j02
zGb8Tif^Ac!@vS=0YVEbT=X|BOG?qD#HT>zN4b;waPoqk;>|dld24vNL_y+sNIVF${
z!!r4yDe*{UOvSbQ-^fS>U0M|bDnj6=Ad=jr-E(7o4Krq$A-#mBncqZE3}W#2aL>Tu
z?mTp}0F{hO_+1O;zYgzsRdiF#dT(fhj_*JqPH{BC=XD$BQoosfa(QjU{GO6#1yKn6
zj9sO~N4EA#2(1h^_zx&=pX>NbUYJd$7Q1aMEP0?A*d7O^2Ty_N4Xnu1gq&02L2+%7
zZs#IQF)cjBq<$_w+$*b&rAC)*N{Bl6A(O<d#S!p(tf0u$V1MEV$v)hP4NMG-$XtQx
zvyYgl;HAD{DTByf@aw<Gz2`jVM+%wKK>HxdnYCWdYGx$^4d#Qw1BjUjZG`(kZ5xt0
z>xyD=HeNUuy2{#z6&F7iWq5pG`(rtIkWQ0IMDIA$4^7wTnv8yktj{B@@uO7PHYJon
z54|d<M$?MC4zgpUVXnLAeR9o=uGTaBYzZ(aCP2+MWCEc{JLxw};9DS~vmX{xAbBs{
z6a|#g6<1EBny(L4B?3hS(cH(;H%bGb^CUe(4Am#XD}x%0eU?pgS6EDvIW_Oz!~(VE
ztdgahM3Vi5B&kk-_n1t=ovqOCgJhr|xjz^8_14xLpzSsAg?;l<^S`3L3n9{JwfsU|
zUZ<(VtC;9}sHyaLnh_cTDN8`0kuXk4R7SE~zmD2+33oODGhKc5eC{XR*zWFw=og0H
z<Q85rc>{=6HC`v!I0=@hL<L>*Xjq0Dh^G?+V?DB-+_%%*4ry#?I-`8Y-NkenvYd=x
z>Ij%e*hqy!JUEmkw$6V3&x5b(Ek!Z`Vh0Bb?j!oxrV!LKH;)*G&yIae^5Y0Lm`fzK
zZ6Q6=7^Iz0hGPj00(Hpgf{1YNSsk?KA|)9I9C8iA7R+u9-`i?OUJUlI$-#N@1=`n@
z%v4k6i<OB01vO?Rgz!6}6sex1a1*D+IX!CmFlz{VXbVDx$RW+@*2UYL?NlnfY4*h;
zD}x}bmoxqxyA$-)QM4P9ido7{JY>a!tgZmbkmgN0yyY%1lJz;R>|e_$K1@;a*RYZI
zlpc-;j1q-hiX2!b)<I0F>7t?i+FWPCsMzgN40fjY@#_t11-nqLAzlVE)t}jQFjEOq
zTib_}aC}-q@iLvVD){tlhPLzxUU!&+JG5M-xb5>xmqWj}s?PG!m4(%YOLT&Tx%?KG
zu&=HY`*?s4HruvFxHk!cgEKw);O|G()t<>$hm<#otXzcKWvy%K2vPH2!tG-0V50*{
zV6wYcNe|Sav7N`<lG~mcWY{8IMN0dI=>Gw3Mc2J)bZ}H&=(9pdot&`CFiPx;m`H@4
zjj)jN!NNOnXtyI!IG6<uL%i^oo$z`At#U{6cJ-0>hs&Wp5E;*0Qv=vNgqE??f>=jP
zGjR8QO6crYf>M%H_;hw7$Bc=~X~xC(7I@SM|NSro=gMEEQU`VtyhQBMBKZ0@*!F%|
zt?_LH`xk1cR@5yt;?Lu{P>~gdA_7Yc!SM3x9k2KpWKCH}Hfq_z=j8dJ!#i5`vSkYg
zmbJ^=N%b<RGpqInvYPs_BTTn`4Wi2EmPM-cYeP9O4rl6Y4r%%)6EA*ywD~f_22&Ni
zyqvl`P(Pp6PnxFLI`R7PVT*(2vQ)+5W((8-s`$-znD0l?m}0v55;x@rU>~#aKmNnI
z6mcqMa!0)4alZb%8_*X?KE|E?9U|@=QajX(-h?oftA2Hi+31eIAoI*I$7uOBd4L|i
zKx%bz>Jp>~AB79@_4!M%MtWKA3m-87s2M_jh<#q0@s2{p{p~wqy9>sukau~Ed?>|?
zP?C_{U=rd;SdJ&WQACtXl*GgH_wWb2%dTiq!NI17KeSLPK0cELBIaM0RNqHIOW7*k
zLECe5JW901`SIbWXvhA^*yZ=w;oQQD82L`GFv{<Y7T&C4N7h#vWn)Hwlzf}j%Ku{Q
zoq|M(f^5;YZQHhO+qP}@Y1@6;wr$(CZJf6Cdgk%Q+&lMuR7LHdjL5YkcI8g2CFy4}
zRu^@L+%t@bLdqr2SPF)l%l$-ohFnyeYfP>D{=sij`T_EB4q{O9&FQRM@&jom8h_xs
z@K~;L$KGO>D9s7kniEwHUQB26QWhK>Bfq_14#==-lEsjD{Xo)^&5;lI@X)KoFmwb^
zk7ZAGd!Js;sWhmqClzJ-D;7=OR1hBi?}p(hfpzkXt{8#cVMwJ>1Tnk&EZh^=Kgpb$
zS<3pMa~~EH>R>ZgWmLrlSFdX;1BP@3%6PpBAM1v8b8Jylr)fu~Fj2Z^(?ZD)Q{5~h
zQaX>XjQ7b>M)@-g^ugx_(%wJV-Ihr>zLKR;-OxPHT6!CHprU<nlCa|rx@mB>p&G@G
z!0*_^1WTs|HON|sv60D4Eyp<a@pK5a+r*7!J6R|z&7hWBloXIJ6nD$IsUO!s>)E>+
zZ-x^>GNjtHv5!N`F-%dKcIBdfH(h`(7TdIGkgn0(xzW@keVwtlP^PkbRSeX{%=m5K
z{t$ht{L$G*v%PQ5BuBSjZo|9lc>w|Xw-qZUoSk*653VE2tftQNJC>RJHV8Y`Eq`N6
zNX0abB2RUyt1ReaQ4l&e^gtV1kj3Q$ojW@C{yK6WfmzvUR&i(EV~Ajv;}F^zf-LsF
z1!ec+1EonwnafCODMa2YSXvH1UFD{KNI|oug5B5rB*y<1EUMc_e*Y+sjo}Gd!8bHn
z|C@vizlQJY`e5-RswQ1pJ=9^(M>2Y~DNDFckQ6~Q*1ZH7GAs<}mbMuaKB*a9Vh=eC
zNVZ<MpZ~{afg)^-BbM9SjK7Atg0u|9Wz<^I;b;yJ)>sCuqrdm0B4;k0?H_kYceYVa
zKwnUeQo6KAv;)YpU9GsLB@Q74Due6fD=26W=_QrZHL-Fl`j3dd!k#wKTuARpUz`?A
z0chK>)P|$~TU~vt@%1Sl&6AzQQUc0bepc=w&_F+wL#lg*b+wG9^kQ71uZW;vJFV1T
z77y@vq;OG%N>jbR!zGua<5Yw;UUjt{JV#WJ?c*Gy2VAm%!rXM_YGB!c2P9dOuqha!
zlhfR^m8K3$#JYg2BEnP;WJ8QB94_k8f`D5~49|GTrX>Xr;_gm^qWgGKN|4T5*?TMx
zFJO$M<L=0(+$%xOzgcVL$kvvi6Ym;8c-d?GMDJAuT#E1rLJLL%c&zYHN&i2>!Ft&)
zEEqv{$$MeBbz*ZkFoG3{HeA)2N{Gvko_|w0=%%C?_Azi#Wu^m?R}2uM0$Y0JS@Gi{
z<iQrramgi7_>h7Fr163+37SR*vOkl`hdz~&e5STn(>FsI6KUHhm?HMZ-1&Q{`NO5K
zgeN_DL<BBqKGVVnZF}(cD`{U0;Wk5BRPt=J1cqdTZjC2^2C22nn;9r5anaU!_f!Q>
zo6@X*&?Xnk4!yNWi0^?op#KFHoiQ*lfx#9ZTKj=9DS-#}8s88CzkdS+io)gqVMcfo
zNvFbkJBBWF+GKR4<*A4NixjvWrV13v7NG&+f}|wRi_kp6q+=05E;{F+2tW)~KoUZ{
ze8jU2)<oLCs1JiFCU#x;x5gJ^@+A*-pg>9-b{K8vf+srUS=Kv|vawmYb&I`FrY><T
zJ&y9OqS9w%At#M4P>5Qa4CE2O>{c8COl5!>Wh+IqiT-ygUfq1EUP0h|Jb}n+)Vm<~
z;UX6Cfp`=uR+b&j>pr$9Nz7R^jfZGO>VVQ?KlDUta=dk6Kw?au3r8K16c`gm7@V7k
zf-#hM9yz(Q(5mQg>|uz2FNIOzQ(_wUS}r=k5YKxTKlznfuQFH>2Lv|46XXP5$!L!7
z{0szvr0gO^#FWaf^BvqjQox8}T89k~ncr3HuzCV>nE6}|0e7Rh-26m)qYWXsvuV+y
zF*zI|8N-Ej{#l334M!7K<^Zn}G%Hz=4>=6?2>BW}{*GW|$;n+KkwTO`2$!SwY%ub;
zLb3Rh+6g#l`BgLF5e7UTng8fd0CC5Z9p7Xf{9<<9;&zd5n6g0?jT`GaHN8t+pTn@$
zUlh~o3?o7FsqevJ$#FPveR0CB)H*GX=2-@vA?d*P!g#+a0&p2pZ_Vzqm6&!8gWg8W
z16uT|l8}iuS*oq)KCe1%>spoKZ7URzng`pD4rPIUO+vEFieBJS=rexyR`6?7K7>x*
zdgSd{?nr*m?b70H>hA&*<xP5Fln=EbMjUr8k;y+f-z|Bmz1?lU<QE6PM`W+@kN3q!
zp!b3)ysMZW9{tjlAPByp!C~(Jy}d<*{z@_iMM>b<fO#y2p)i>4pZ)yK*qm%aiRPwz
zggE=~IO0Qm{(V@a;%!8PM>!W!Fnq$r$ZnEGAPp)WaVlTH`mqS~ryvg=;-|`T3P9r5
z>FFf*7-#eI7FYJL!38$W=XoR#GLVLFsj-1sY(dk<LFOS5Ko%^{N-BJv6<8i82V&#!
zB^g@-1*$Kfs-{)L9JkkIAByJ{mOV!5?>2eTNh9pqjd$YOzCH79`8b7FfudmNJ-6@R
z<QwAp53tT#j{!RPt#C-WS;#T9_ajvpdP}!Hi`FO;Y+Ypm5zEzCJ0CZ61A=>Y9(6Ur
zBA}Jf{GkKtoE{%ln3r^CiF6vEud((j!{2Dd71zr?g`8HLQe7Q71MY+NiJ-z!_+UZ1
z`#E!?x}lU+Yg4So8r1mM3t=Ev-(m(*3QnuHF{sPw@&J*3hv&qMLVQL-nWPc?$$4lC
zWVKjK<JG>nw1@Qkk+;%^*by^MjV2T18rKKCmSej_!gyZJ``kagmSD>6$5p_%A)*K9
zI8&usU!~A}e&gbTxdic!bsf)TV*LTv)+uvOFT-N}_APRji9ADJ<=Ieu@Io*tMJBH0
z;=_hE^YmmH`{R>!4=~I`{S@;ef(yhIcUVkA4@S2{V_IuOPmai$nR!J+#J>}yc!UYm
zBj3&>Tz>pQ<_ch~xob<sf6=uCDq;`PHq{2bB9^i-dTO0sFQVSkMbHgK&~=qAQmY#C
zJ|M!h!Lwj*xQn^o0+8unA{X)8{0l(5R$D#%E^3OkSi!S(V#LJ%ei?9l<;oa1m6Y6A
zi0-cJv{YQ0*aqxq(|wD~H2MSok2M8Td9IrHUv0n9U(wkAy$<QGXsoTF^Z#ClR8>*d
zdP@MN`$L@vM+j?eT2F|MGysX>XiiTF$pXT3C1rKs5R-Y~swDaQ#VX70777N<3x6S#
znFkpQoerfC`-(l5_)<bJA2G3%lI*x{kljuxd5tm)B1T)@QZ?I9I%ZPHV3^Qs*N6l?
zh3B-Jax$EkbRXjgir)*(fq@O&LJn{RKg6u+iI55j^MhR`K1j*R3*GH#3d>PxkqR2e
zt7RumG7n{=!R_W*Wz5L!0dr#d53n_Sdf9#~Hc!3DsqCJj^Q2?_PLN(W<jMMGl5VDq
z;*gDuwVY)S8|-jTxK}C3q(R+u%5K1x0@0a~&|~#Dj;u^A>wWS;j*#Lul2+<qRvH&(
zEFt8XZNbp7U{<T*MnX;G0eAPbEabrFFCiw+BdNS~%;kz2_Xd$$Ekw$Vs%mzxG^E{K
zd7$c-ORt~btDp0iscuf*$TjZwRFV>o*QSuaD`jkP>;7b*(xK~9fNNk9lMU~C=A{?p
zdDrGRq{*Uz^KUIBbXuMdaI^}v7sNm22hm@B`S|n#|9{-`?Tq#E1^@s6px=F`_^%VN
zbS_SYZkEop#!jY&E~d0jrZ%RA&ZczE7XMul$u(9UI#2*%_~wIBkIV*7i7PB@m<fb+
z>`aO98`HU*WsCOxH9eK+Oc#%N%6<nsZttkUQDu4!;{--2Acvib<?kG=Q(*gcxNdyW
zB}t5ElgX4@S4;WP`3|B~IZG1iGs9Fm;Hqe44#!NswH1b!ZX@$PYzL33?j0CMi_szY
z{_4bv=BOh^xZs!QMRlRX5Oiv0l3x=;8h)gzk)ak3l?<m>?7Zka`Q_}*E|l<tR0I0|
zhzV2kzR&3|CRV?gp#4`&1XWce<du~F9|Uy&>m0CbysTZ208GdW=P<Y6zqy4n3PM#7
z%VIil1A|~@vIpU$EOzs=j>P~KUB6tLUUJ~RB+D8O2>oS(MJgzsB*FZ^WtKvgz%O>@
z^`Xopv+BCe&O5`ZnmfvV7f5}{4YX0cD-Qj!5bg#F$<_$>ey?PqCkII#5dXnvI~U$5
zXm3++o7J(ShPs!r<PV|~k{y=LwfT+?c^`#<gla|5n_&`FDm%sMdPZEwEage7@=LtG
z2b=hmn|XPX-u$KNIU{`E1muS)#)`6!+Lt(E?M1Qg!8|N+5ie=aH<I{Xw?=nJp?YM6
z>iqu!8`LjQ001(%3R3_1@qfKg|0`@R_VzZ;^#6(4-tY9Z&3{Gh|J{ZEFgLtxwUqR0
zZvOYd|6iFia<#NEp|i9zv;Th#|4+uUD_2y<=xLP{BxC8NrX^@*!e^zYWL4{qmHq(y
zJ^JiwntHrQ94dHRO4I_~<O2QTh+#O*XxK86)%6AS1|?0C>kh;r1*HbjAICBYPfQH7
zqfIT<c4@8&ERd2ib2L(tvyyT(5)^c#RUktvBU|GfV<sS3Ln{NC#uUgFu>6@LFkiK>
zX{c{;m}Guv)A`cj*>3y)Xg>XiuXD|Xwcii`0HPQG00jRlUyb#hOf3wZEq>ko@0?xM
zuvOlaK>D`v6D9Vk@2V$VtL*Gp3kU{gyQGR#5MXmh)ex63md4g}G84nV_wfI4eTg<%
zuNqg|mfn5~qMdf(UtFZ0ee^K@$cLV0m=zm;C4^J)!8SQ8k3R?Mh^nr}?K{`MCvncc
zv;oh8>w<;Ko&`#`bgbPZX#y61bD>LetTMb=u2kQ?aew)SQLq2=qMV?smov~l<&T&j
zIw&;Su7ZbCLa7rU7zmvo+=ZOb+8iWNDoMdaN<`5hAu-1qza$eN9Tbb|vVqsP`v64N
zkJF$doDVW^#-Yd{r384uhoTHC31-NbULqME0%R5ui@8~#5zR10(7Ox>1x~@2O^n2s
zL|~i^7b`bICqKdX7agg;K*TbA3yo`BQCBEWk#@za!mEcrbGi$MJx}H0*y#!zclY0L
z)DsCQd2Zn#A&!(FA^_@yNd@<76d33km6k4GCMqcsZ@P2??HCb60mPDzQzkJ<2gOH$
zz^REIQ9%E{z$S!=&5ewy{D_S@dBQKPBQDJ8mo28p6$um#1%(e9zQ0DvTlRAdNopCx
zA<6A94@8S)4b}uSbZ{*4Gk#tk{;_ynJi2{{#2juj^-<GA4-P-2+v+y&d>p!}TS^x&
zmVHp6Ow}dUgYH5*Cu#W03ukCfV+vcw!Am^?@_j+LF1V$K9M^nT>(x?><2S*Mdwf^>
zv2JbvGr$qyg)A6_;O2~^0npRG+B*Ec8{Gk4`u#ucm%`Y1Edcz%!VM642PQ@Pw35%B
zbg(F9`{7HPB0eE%t(#Vv>rW9pF<QYJdE?V?m<2fhb|k7hhvgQwfJ7=*R>QSXg5Up0
zl+u=^6sxy>!3d}!>pkrLW43a4WyNkvrLP9^FHEE$En(_+`Hyz;_BMdiAgB?I#bk5e
zIVZU7waytSbb~zBkQo9(@BCU1Y!I_QFhcg4*12P=?61fV=unF{xPFF|6tfR@Fg>c`
zCQ1YufS=b?yz&u1BSPoofsFHj#v8T_w0GPIr^s*I)MgXg9xMk`<h_w&6t{Hq{cZem
zmg14MpbbDc(-b>L{~)NDkrO_E!o0fc=k{r=8W+nao~;W}_C${za=xPVa~-o8#0Fd}
z%ci5Q`|duZe~c5q?z}fv!(h@02g2o%XpgX~P=(PX9L7|ni0$*ixkW@VDG<jPo@KJZ
zx$qi@$e<20h2BwIejJ^*AClO*0@Qjzc`cr_zGzQk9tJD%(UUh)l0G*{ocn~oj;}IN
zZQ!kxdGm~RjZSTZUwRHm-Jn)!7t~CcS{WybAqFsXLcl}8dciK;t?H__2xLTDGK70Y
zT&H9Tg@%iYR!K2yBpyf*L3nAfv}1<R3R5mD{sQXIhBAeD8~7#Jz+6Z(Wg9KD(L(PG
zWKE1RrQM!mY=KH*ZIu+*I+aV6fUQE)PGk*Fb`QT6OJrNrkTz80tb>mo4i+XwRqo&I
z8P(U+ue(xPQLmdfr)$j%zg~n1Ssg!0A9f%v6?sfEln7U|MP^d+cHSs>(c(_?bn3$U
z_X6!5f~S@T>f42?Q=;Rmndtka?Q}3_F)<olh^nH4zf&hJ%Nbr9Q|=`ii3{4maW6$R
zu}qPmp@&)Nmb$H_9BEb?7f9y2S{o(*$b_#5WWM?5xo?~%M#VZCgK{kvMYzt-d8GP?
zV-LN$_T81$L7ZKe!T8d#mXNrSiG^op5ltdP^t{AytIxt5@*H6#K+(oOp7fovkv~cK
z2N|hGk0=qe6T9n(3%a{J+;1eocV>4FyFNCY(^pBhU~mRoqLwyfWDyZ-;G8~E$dlBJ
zi?ND}ld^X2;W!#pK+0U$YD=rMz`FSzhV`FI!b>q{7Sg1JPi$DvW=BeX%)=I!*b}~S
z+SX=9$GFlA&@atV5{_|Eg_$G=2aEs%!GqyPyq+DX7(y9hXIsKIGoY*$<{N~02eOHg
zkfagfQrFan2o1okn@M`y0ky<1bejD&=fl&>f}PoUn(!6jq?5A=j4@cJp}z()R+?2n
z46S{X3l-Pf^(gE2#Uv-POc8UWtrxV>mz5~7W=fQ9<vL2mZqmGFLuPG~%OgJocW-U9
zZe0Fn>Q7o}=&(}H%rWql^Wo*-R!8D>^>X&Gn&ckD?9hF)@p+-$i)e?V7`4q3Jv(v_
zk?rtrw=N-Qv@!}lRh@kFc8v@R=aYehtBcDr1tVtR{$kBSrQ5h2HOUqga}j7wixVcU
z$6YPYqyw_t#f8?fU2YzhgC>NIVc&l+X)4J_a}Y@bmaoJrFqLbw2<XGZ6ZRZn6&T)t
zJUQ;Qf~-t|>^375zH4<IaLOp)OGb>z19(6O#h8#6BU-~NA}p2o08<)uBF~gTST`Vy
z083d$b6Db(c#KP>Lx_?MxmFo8N7;t+gb|D<8j%EM4je)VbLt{F0?!A9Y<6s`xFB$o
zbC(uaQYYjfSiu>x#mIs;HJNF>BjXFFa(7}(jPstFqW8G9rdFHQe~Vr^3xGl!Gri%X
zv61KOY(k-v!^K)mfPL}-$lqZ!R&yZVZ<fWUudP`<$bO3P-DY-n$Ni(Hm#wNe&V6Sr
zV@+jvOb5TbUx2Oih%SCR%#gMrknY_EUzH9s(5U1>Mj(b!Bpe>@_l~ky-;EylE%BZt
zU~Hih=hWGw%Kc5UcJyNEYo`?yS#fXwHRUl7y*%IDA(9R>GD(WKF;PKPYlvRtycJ!C
zyJv{3f~k!3yix5IQitnImR@y^hjFuCAwR<!Whlxm=I|BXDCE+2cQGketrho8{C47X
znJwMzSm5)^X<Xr=$4&awvZ`G*osl+*d)ime{aSL+uude)wQ`;P&AQ<*w_{`d#`q{P
zF*|8z^R&W0vR|@(h&&b?C>89@fB9v;>gBegm1UAC=$BeA56fyuE*%lnYj{?Wv#w+F
zDWcvHY4{rJDVYbTc1hb3dfe+ih2hfR`Dprc0!707{{BXI2jD5x=mGXku94zU`J>C`
zXfsJO_ujj&@wQ8#`F3NdDHY})pnLqo)-C71Yb6y0*+!wKXdxM%3Ef}^HP5kWs5Qv$
z-~ixnIoKjwVZVCK5BR?hNzwmnTxDu!ZfR%we+8wx|9^r~bL&R+E)W2K3^)J);{UZl
zQ+;C#OB;PtCnq}N|BTiC!}$LsFzr^iwcn6H_@1f7DAvy_5RmIg+R&lKbU>mWIk9o>
zK6BB+^bY9GVBOXYE2#MSGFv6%fE`l#8!PX@Gs}F_c=>&a))lJQvkuv!L)qr@@x033
z3q$80WFgwWtAH0uCnNezFN>lPqIE3v+&94l!6G0eK#B^_a!r_U;-o3mUPOt)Qw*dM
zLq@GHs0~d|H5?@ezsE;!fP3@j6bed`HBO5W5;{dOPamm6v5$k~%`2%sjU1&#rW(dm
zR5^i!G0dmNNF`R$w{cPBHIEfG{W98yzUhT29UW+0iR`bzgHS!r9gtD6BXu#`y>4&s
zww*WU2!ZL!<Zy$2;JYeE_g^jZvK{;8cQW7{{Pi2FZ+l}%$9yLZB{|V52KI;S`krr*
zkTYAR_y_~+Cpe>?AQRLF(!Uv&xTPovV<;n0l)1`d_+@KQB`C*ry7N>}z~FMd2JdW?
z8S&sBy3@%IHsFCHNQaC0_r*R%Tj5%ejFIZm<eC8~{;5=^p7u}qWEJ;wtFf#4ItqzZ
z8e-9(LZv{V&oPGqxFCK2#Qrv68DFT{2KqF8xki{msUCcSuq;p%rdd|LPP`9d*P{JN
zv7T94g`LlNm7v>#r{z`#+W9xllXE#`@Ew2amJ_MeXc*}SDIB`6nOcaT?f7E@H-9^}
z2r{(Cdw&96Zks`0Ki<#8i(O?a_zNi<xOLmgc=dcP+5Xhv&O+K-*D1}xbk!5XP{3Hv
zb(djAvlU<|@aF(ST@w%yQ)BS=^GRh=>g-}AS?+y$n(wZ1TpTz{nhhG`h;7LHR_=zr
zt+j&G6U{6PJdK&U;;y_-;0Kr?gf7FsG9D9*=0NRFI(D^oYi2B$8!B_3tXLtuxrdw-
znR?hE8)ZokVe-%68gN#n-bn&)`h`cy@vGx?z}+IU8@I0NL-Jtf=Bp2pm>;o9-GTPx
z#)c;eaEO@h$&s@SwsMEkWpurbyc5{$9ma}9O5*;wPANMpG4Q~iWjHPGEpR-JHy^h(
z_O0+0GlhvxH3-e28zPg#xB}KKH`y!i3j51&SEVPn3GE|qr!!NYo(20POo4<voNCk{
zr*N_oI+SQ+F|H#7hT>C|Czz`sx?hetZ4>?*L<$)-PMJPDQbw-I;1n?kr>DAfY$4ht
z8F#Y(?2E7?C&c8=XLYe2-h_DmbDAirnMLc&GoWT&4!`4(!#aex=0A1Cz{E;}OmKD@
zC}ld~!S)&-0sI;5GF4~w^h{Z2GW&iy4%1t}V+!pXPxq+Ux~nr2@3AsuhjAA@4H>uE
z#J4;4jXTcR>D`FRe^@bN85&Q*nX`Oj=-?_+xip6xft4Dj`xxK2<WZ>|i^G=CBhvIV
zDOdTJM4RV3K$LNnoc*U)S<ez%x+1)1RK;FFe8_0^Umo{vI!D`P`Mt`a9}={f_rXTJ
zIImbM{AF3x_9;8q<0Uyqh3Zbbl~p=%`XcZBNf2R;lKDSg@@S)67`^+aIYaM%LCRQv
zV4u72p}v7}6>G!)fmN+zik8cKnrQl^9fv_X4@oIY$-7=2FP}%RK5crr$hN)CFR%vb
zbZjr@A^_=SPWC34duV_Ahq~lOozqlw@g!UY9eS5ayT??jV|@7kkGJ)E0=f%pQ~-bu
zEdT(b|L$OPFf_5TH@5!o&&6vVYxl*m#N7w#j3XFp(w0LII`px=oFT?N=b)s+;B-UG
z74ejf7BJ0)3&c@(1OE>-Rd?y?R9XUW&d!(jDFp3`nu;2Ce)t#nHNMM_elC}js5IOc
zuQ=|}?n3e_v;K9{zV6FQXgAb%e+O!_Qpv8{!Lms?-PD+R!J!eJgMHf8&OZ>2x*TXP
zM0Slsjh<shurbtn^=N!sfB$rfrPjar4Wyi8c=}Bxh7;#_?2Fi(v}N6KM}ads^O(I&
z_PNT;9@rcYK?~8%OOT|TGx}p?0@wg~)QPFw0uw^657+Ty=)x~Gj>!x4nQ<%Pa4nL!
z`B>mHF^{-KaljRvhJ{rwS6m9?7mQuM?|&+=a3yb_(;XB;?}c%5d&io$M@+BJD%x=S
zx!*CpP`Gq)@-5;?HHF>R9(y<XP=gwTToOE2?mF84^XNL+wpI8VI8uCyntQy$(lONd
zGCJP`!tTlp*f77khbr>%WyI8#+xhHh9Ie2UuaTRjr~B~VT<6>}FLj(s%{yK*hki&2
zdM1ib$+WTn(@KBOd(eB)e5r-;D6*Gde~1le*fkaiYDNjr2RppnKek}<dU>{CFr(M6
z+tICksd{PprF+1D(CuG%`<Or9H1ub}=*Ei$0~rDUF`1;&bDVWEdyVOorT9@TjSdE_
zNIrY|9pjn2n^so<<<BQKglJgre%x}su$1_F1j2_xD!3QM*y>)6*$f_081TcyW2#=_
zyRV(QcD{#|Kdrs!I86!R_v7Sp=a(BGEb^V$*jXyC@pFO8@dJ^yByM##0MbgLUhj+N
z`GXcz8%U05UkM8DnHeAt2yxiDC434JPf5-XX5NIzd4@6|vX{YF=7Gr@pEE?^H>L4&
zf4zKbl$RN$@B~aq+{x<m_&5&Y$+|WeCd2!;FKO|zRp?BqX!*5B>cW;Va(b=4XlAWv
zN!MV5Zmh=jlDoxGX)X@oamQ_IEdvrir>)15x(RtS3iaZef!n_TTh|LgxI0z}E%G}K
zgazrI1Cm!E#{qR*IfP;EU4`D5z@!nqYEIiAjB(!%9%3kO_Z87Zj)ex<V;4!GeY7$D
z;q&3n!>D}=hTLSXI*X_GN+qHx&^Niia;T9a-gqkBx88GVSU4I7!R&C(T@gd6o<OWb
zB%|XGk{@XFA*ZACcmyyE5?-8M<0VJ>G|SN8;{4mu_1?+!vF8Q`ah1iqJ5bZN5pi~+
zD1o9_Rm@e86nL+W?E7FPJA%pc3#baWs>rZ-lhD$~M~<<$?fXAP_=HqIP4tH;(l{19
z5oT+{P#gYhUajGp&*n_1@INRp2X78bm%b=#@{4Uuhh!L%v7tNq5<keuKzt%~$f2;;
z+A^<fm&#ySVP<t2)Ml58!8<&nj9{K0(ri*G$_UTa|L*3Z``H-g`YzF56*1gXOU!59
z620%}G9{%WNuq5WQ1AO-I8hOlXydn#p*uyz(C<0XP{=TKSmTsO8_A*nf$=O|L1ba5
zhNRT*AtX;rl@m&=YbeGP)YkzS#vv?JlfdM2Bh=+j2`XqaS&FT(dRUMms@W6_4Af-q
zXB>nMupG|?p2B!A>5lfrA}Oi|p0qEr=C>(B_2JwILXr+*VdhX=UU>Vmb!Ca@0feaV
zSf8h?ggWitY|ZksP<<Mz&w5tp_CfnaMsGv)8KHk?UkCEIuRFI~zTtj$6eD6WvT$9)
zs}O%?SVB^nHzCzYNW|`AUFhZsdG%vZk?xN_{z^wNs*BBqkM4!jo_U?5{PMJM9!r6X
zIG*K^<Zv0l*dZ6M;Q)FhST9q#VKCLjN`lhEhWVH*9ST~a-x{EZlEAw{vjB|dhAaiS
zh4%IoDdCw6xcdGm51sVbQ+rN`iIX!8+DtE>rDGt>Z-!`Lsemn1DzlS^#s9(6FV2bD
zC{CqcJKG)>6}`E2tO+tfP-O(YJsK)3)%9_2KyCJc>!Zk~LBByMOgiMc%Xnk{6*^Nk
zpfi!BM3*cx0nX(|{~9OYjo5es8x2Dwm3uvKv@-_DjBqS00^BXZVa-L$>Wi6`vB7tA
zU+EX>8}dpJjqhyRcFeYf=&$WeqED`<>{sH+^*m;wWitQe7GWIAHQ1wNAhyQrtL=j3
z|6|d<-E_&?+ig2@74}OZ0cH<gn7Op_VGpLj*^AX29hqt_OkuI7n|~-~Mp#@%!Dqnc
z$ygA+`1k=P23<xL{=~u!us*)6x{^HEv&w-LFfT=Z#9*=465n_}oUo8i^8{$-Bo_4N
za^D|@Nh~%8CI6evL!Ke2@UT=iF9(;p>~OSMVbtHVAP)~0or(F$4K!$TE!7nyLj~xm
zBdm}>kwf5zV~LN2Obj7?wA}01-I4FmtZg>5cD-^D`}y+Rg9WGCZzeP+YAQYcFg0F9
zc<RB*<5AoH^ZNo!T#^>p3vf`JJ5VuwAjISg;ncCO8y6#A+~^=!M_!FbcVxyFYYh++
zyCS+6UaZaz_-Co9I{t3WEB>A)1HEBjh|O3T%l<%g28TE4H>v*>uYM|CaTSW7fV1fO
zO-JH3sj7m8ajSU(MJaaPijU_%RgiZ?9z=!@+&32%VDb2QCwU&j8+ULjPTmpV9YzLK
z_9JnZHwc{TEN@*0i)V_&7CifOjjTV*sYI0@{Nve1(=*O`l4I&zS#d{BQ=fxxPTx~k
z4nsYq6;LCuF)VH(gJnk;ZKTryML^qH&<`Q&kq?y5zV=INBMws!&P>C~5MN3L%a+=f
z>=vnoc47*~B;UMbpw$iZm}J?+6qI6QiI0bxpBE00nIo}kZCkhFOWi}=0wzDg$h}9K
z!0ySCUQ!IS`I4kz3U}9c7r0@#?Z)Op=wQvYFI2NDWP{DB7$|Ra;#4cJo}tAbd4DDT
zwEkn5T+QL*@~PX@8}^QS%#uwbirRUEqTq-t>k}sqt?wwA7Nv6{`B%ZmTUlamR~|o}
z#hylb6&eC;y~&1c>@TUy@81TjHQZTo_THtdVs<tX$@SxLS&lGU%C--ph>N4bagln|
zRTC+Ed^g>CMp_wuT}HMt1S7xTdYjjX|7R*k01^r`^ZB93Oe=5go@4iZO#x>-v036H
zFI+hm!DKu<X@f_WG%S8iMQvP4O7XZ9d9-k!6V#Lfl+mjXKSSLw4?qKPU`%!$T@THF
z5Z{-gIiRKYZ%c1Pi+<iUd&$?8hjuTh2(0a0!)qt!uSg~u!c)^1(DlgIh(%rdE>b~8
zi;w2#cGmNWpLDp_hF^eN`)*hp8+1Qpfef1Wk&R3%%f5C_V9s9AU0B>+6H&q03TUxt
z=OaRc-|(O&Xp#OC!h(i3`47sYW=SxZS^-H_&1anqB%yS&LLjMB(E<@^`RV;25@}$x
zFqMh*>6_#jGQFme4ULSY6#^LdR(zLpL>Jm<*p9fc+*c_znc&%|Ul$w!rfcVR2MBO>
zKBZ8Vd82B$<j+Z~4%$@QUR}jb8=qkAM9Pe<Hmq#Cp=}>8R#q(dDuZ7)Mh_nBjJ6;S
zR@JZ;C`hP>V|?NpZ>Hyvj`NZ+u7oI&y7XRHo88BRf_@s|o^w=0Vii)~+xfI5^rhWU
zbN(MDru$*IqhZeUQs=Uz<aq2*JAQ62S9*a;S0w~U6*FY!EOo0QEl9ln%D|Dr^Pd3}
zy=4huL?fhrHsrD-OYMXr7=1zj9FtE5K%1)6^Vz74obh9oI5kVt_QoS=YK_)1%TrP=
zfqteeZOXr&P2nwUn?N>Re@kQfBe@Jk$p6+Q(4I;0Nez+b$O|RPSoo;j6JH0ts~2{!
z!?Wz(tmcSV(<0p@v1RTSfOBl-q7#64oKIfKiyc2N!3+D7BGhR!yA0t)(@dor87YWq
z&qbMtFcLfT`Y5U>%7vc$)IUeBWs)P_9+M5Jz}W{ts@i)y&ky6gF9Wd~N~-zM$;}I0
z6QdBH^g%Z|irlch3dGdIt*eLnI2g>y=bL;!<zgL4LPGQMb0~oAo}W2uHPxT+dCpkR
zOgL+q)yz>_OY1MVgM(8bS5_!5)yr6dhRna`F^sja^yOA;YiN7L`}zg=($TTu`1&JI
zd&iT!#(%m0HtEB0Ptb#&q=-FY=5@4*vqWQwOXNzyanUDdsz(l$WjL<*vZ02Z<Rmh>
z#ShAccW0nyCa0N6=@KQ<O)t5X>N3u1H?2w$)ce#1smj}^37R})&V8^I`iDyZ_Qc-K
zuOg-FXsL-cEA<THDkiA@xzzw#<~DqfIgknH{y@Lv9h1(u9x>3SMNAY2Ry>P!fd>`$
zjA$&_x&7H)#$Jaa_~WW~fUyv<w&1da)OyHxRB#vu_u_CXzv&h*Jfy|IZ1kmW-o*Xy
zei;+y+o>|@2c>!H<><|xN|fy{;ZM=}#*cbS4dljv+Z&UE&?u9x`?OgbQ+4O^DoL1q
zaXq81k7;b#H2hCpbiDTTcy*@i2?CxLYrgLXk6N?jyi*#?c2Qm#V~H)alkDA+%x_B~
zg>w=VaGJ2i0qo9l^hG5)&T)o*W`ZMnm%sjVrym+Q+z<Wf@fK5N+DNrz>H?MJ&orr9
z=E;2VU4n>q<SGjSlpXd|L8L(YuxU#HWm7I$W8f@r@QjW4Vq$hCCbo|3xUq7c3Ubpe
z0e@}s^=>k9BUVbeM)`0`(095CrTyPc?dRF|-8H00%Jus)!1P+69?a4{C&RZa?V5<v
zDUBoH<J0QpcQ_P3n}Fu+33;903V&K2^yp;+p+!=rNo~G8Ia*J8Bs1@KG$<jw(C&fa
zQP>{`xS97Z<0}-ljcoXL^wPtA5L4i;7K=iK&Eflo?7d#6f1fWdja6<gh7Arjncm4w
z&(CG&J9s{YCo)&TyyF=uvwUZowZQ^a0m2Xbt(umDvp1H2^&yV^Z)!5H{oQ$+bGE0H
zUlu0~M|XiO7?q-BNGH!^GOD>&##@`x_iI=N6W1xp(GkZ#Sx5J2eEw$ek+?;?m#xUD
z-VYx2n(^0U(SO^Pm~x*>FpZmB5BSnA>SxQ5lD7a?Hz%EsYVw;Lh@ZdiRGOK}Br7oG
zTWXPhc&!y2$q@ml1V=5Xs!aEUMmmV4d+kqdiB~NyE8%rIc)S*p^*?u`y9y-@LQn4X
zZ0SENf|b2yY?aYYe+<x0v7%Vy6AWn@#K}q6?v0P!s?5?dOdH<g`W}z9JG3Gs(ZsRW
zH-_T+Ktfa*dxaTS&DwYa1w~C&dPicAU?xgBR+%kekL9MVw|D{`6kMwh5wv!rW1x0&
zaP5y^_3ig!^j052YuRtbsxLjczbBJqyXG&wc7`sscFtUR?F(E-w3p{Dt>rRO;*wHI
z{g3Y!t`rW(%oY1+%|k=7INsk6iW`)Z+KaCx!!@o&2$MO~iwfM?UIbvythd+cQWrQ&
zGrrh{jg2Li&{x%iKYNkz2)R28=4&{bdYlSe)R?t6>zfT|uWC)En27bZNS=6%HJ|uX
zc}Uav#Q9;{DajM1F#0tz3_$8eFwA2-K<Y{`zRWPbPB8i-vF|X#P%)?#B6Ur*6`|_H
zWFl!TWf|C1W7cL@AdH0tBc~ny&!yyQ_-JTF!scyDezJjVTC(?RhJj5PRy$xF;)q$`
zul`r&e=eWu5aXUI0_J<t+Z;nf;0{CfJ7UDwZMcBRgj+d?z>c2E52G#IR#5mi<0#N(
zwjMtB33#Sz+{VZgIO((aw#%`yw<ddrt20qE<*3cL`)*l~qKzjPL+?T194y23`MkB#
z99?|vXH3d9Eo7JpH;RZ$6qB>KEOgXF^GiL5ta*BHN-s^P&4g2ZAea55<;0&Cgx?ER
z&v*P}yWbV-byn1qsLsdGD{!zL4loKIk*shS3FN$6OpS%@7UglTQnKZYJg-ekfkHS$
z!Z$I!7?Q0iY27hw-}p@8VyQC~>tlnZVRLv=8k9rAg2zzt0V=tz&4xb8d-r@bA0GL@
z;_f=rygd@NIMJ5kJSbM~Ff>}bfp9G?n09CA@%$n?2&*ZZF~5{~j4MIYjN;DEjQj>A
zDR~8;JafJR%T!k<S5<ijnF-gp!RgsDhS!Seup=H0D@JEy;rHPUYOZW@#%i}*H&Ifj
z%H!D8K?5%L7|n8ZM|mI|xSq?~V!+J}2<eQnp@*g<#0!U_(E0vIba((_=M;xP9CGEh
zb(&H0BrrSwyH&zxMgw;S%9Ts;YKevN$iJLDi|2ErRPrfW>~$N!)SFwXz9OJKPRW7-
zqs8X=SEYZ;@wsOR1{M4++ys_!i&*MNfkUk=h;7#xR*q|#qO_4(dRt~1OzY9a-CK8j
z{<Mh|QX$>+zVSs5iGgLC)0b2LNFnc@Y(<y?pO&(QNY1Ph#HG$*l@q&2P@S{96<JT*
zDV0jm=O5p7E>H~$hLbp+XDw<Ik^<s8sx6r)ku|Mud#tGu`1~3PBG?M1MJ7f<p7;_p
z-Eh(OtZG~Z-=GcOhB;m}mf`|SNXzxd;T#EN7gdSwO0s-sLq(G(d{EDI6`)wWzbT58
zrpdlbePC3EFRWkyEgQM@#H2gw{DL{Ka1-);K+uT$=zs}#6NN0;X<*X)Rt-<FB;MKy
z+8(wb&k#~#Xb#E;k=UpsL_tr;<1$TGU?WC7Y>PWsf2C0PQt>5@g5gh)LLCvBy+B|q
z+@s;REIf~YO4~gdrsoT)B=hw{Euoex#XCu+Q5zEY$a&jS@+kGpaCJnfx^Sc^3m2O@
zRpwPVci06SnOQ3s>a6*zBu-gU0b0>S+xt?1XV}a5bW!568*cDuwt)N-Cg7jtNNrCt
z)r50P#Sk+TEr{><=GY_4VX@6{g}Cz&srD;^ie0%<XK&~qh|<V4&s<qt<SIWHByMM;
z1h|@WH3=Tu2zEeJqdJpHclSpqPVNia?I)oGZI(ebF~dpt5KIPuQE88S?wnbXbTEm*
zX0}tMh-biw&WL2QKgbO!=WQOUAO_3xP$7G6>7`nt0#MgQvpp&n+`WL6O6&0bN*h=6
zy(+%&6@2f0s?zxU9DPn~r{7@hE^;4M^zjPa9Wjvh;EzPbnw-ghZibl$EZ6wuQzlur
z1<oCH21m4~Rit)N3Ws!Q+7B092j|6JdX~2V({PJ}1vUH#*~r(z&CS%|N^EgeY`l`{
zwC56elJW>y^g!36!w3!{u9bg>bRo`Ln!!M*==&1beXneLq{Hn{DYw5VT1ahd!eH@L
zc7&v3*js7YQ(C{x$i1BH?;;y7*dxn&^g^voq1v|C3-6J(2f9@*ruW!8q|oXM92Ze#
z52%XYKgyTvy|2@yM>D4KOxDBv``W+N=T2}dTfe9(cwJj7ULXFmhYRJm#R}p-d$=5u
zj*E?v007bq0RVnOSO9wmQ#)s88(Ky>Mmh#l`v1FNW~y&u=<I1{{NHDBw|Q*sH#ru5
zv$$(0XX`bYL*1RjMvHWN9CnA=qmWle8+wQkk)op;6Nv=l)9)LfFPZyMB2vjT+;Sg#
z^I>dgVT0-WU5*kLb<N^hMd-nmW8InLM^B2UxwU(_`eVykiBa+IN#pT4V*R-;8S(#^
z(!mvd1UhoWN7e|*jIkEas9oUz5D&0AlrKh?2&H%P5hYPr@a&0TecI^(UNXUheV|fI
z3~R&jNlY-6hmxkY)24Ldklt65Lm?e~nPAcKPdC1k6TR8fnU8>C1eltAk+#U#05$>e
zY7kIA1tdakIL@BLlX`s6!6zZ=IPJ1T{#`RU0-xa{a`*c^kU$>p!olC%+`t3v5yo~0
z5p-}LWy67TgFl$;1HSI>>^QrN;cz+oUa(Zb2hH#5v%lmFDk$5ZE8L&#JZ10k@umIr
zykxz{au4D)Fv{Vu8^}&njy>JnX5T9zI7xhQV~F1nY#y}R+SOUw*o7Y?;yqex1XAg}
zDLXG#+xzjys2L(9$HO$Rve5vAAx{@=#vgRI1zTppRF9WNxbkB8*d*TUMwHjTobyhJ
zG)n4qQ8eji$9!xrLdqdoT}Hc*=Zf)O-WxH!Lfmk8{4<r>TL3S1d^PbJiBNYOnB)<A
zmbwVA;5?Qc?2ll*$axv(^RLf^G|Sb3OX?OaJTvI%ZFOHG@-2Ze*+bZL9~;wCSQ_Q1
zM|OuY+Z%;UpScciYFm+jsS(~u^!+ye@!;)>3(x=6^{&@Qpz9&V2^^YafGGf}D+7Vu
z#+21LW6^$BW~tH0pL{|lLKs9LSFE#o6u$v4<b&DdVH0TY$*ckd{2gi10e;5<$P9$1
zuggyM<hL}?R*vV%-}4r70Cg9Dd2REj6@*G^v<sW+BYy4og*?aM!)~AjS^Ie@cJ-6e
zqJ^8^Aufi$`6HoCyX$(u_OW@|6hVlI4F|OYWqX^jlG|@9#h)0Lj714zKZn?0OrqIc
z8CS$A`^_X3FGw#uDrbSG=QJW=2^g$9jKWj@p>GvH1uD%?i4Su!^&DwT`?b~$9E6n7
zh7es~%m>XwZuYGW!P#bd2T2a4=yU^jC(I$q*$OBY+xMbIAmLISE`4@G`)X#!gCPje
zC~rp@afU>^KJcs#vdqD^rYu53zLwD$E9^Tn1te?b!i#e<B?&|w{jk3IF=B!-Z-V(o
z5_aivBbe)NM_#^Aju8xi&XTU(7``9|haL{!KT+npMy+ZG?b?u_uEbfhK@I%#`3|Pw
zPb_ZhB!U<F5O0Ve{GhncTR~}WKznwVyWdInmQs;Hr+|`ZBX|pTD2dAa`fZ*ySyEC%
z)hsYOnJQ5qZ`1%~N&Gh*@STh}H)iVm-z_`*l|C715$UC8)eNhFp%M5Yu6zeg0L6?z
zTUT=#zwKUSy11`p5a(r@X#apsG-n@)#lt+ofipYuMl5iPL6bbrc0Rwg3qZrb*w;G;
z;8kR}__!gshyanveDA=>_}<sqI}R6~B-K%7Kw!fLV^UHA7O0e%38SzPO|f*a4yYW^
z0QF^;zpGoq8}A5&M;U=LPub7*cag{sq49Os_j1OLT(u?A9m71fPR`S)RGENBlg4){
z?sl~?K0e;?011;5*@!5jhW^<EPmLlZK*!AONY6j@86XNDRMp?q6-Q}8dJWEsfo8gI
zRUu@PE{N0W%Sz(0;--EmS;tgl$zwLXO#;$V+JzQOaokdrS7Qybayf8jf+E#XhLkcm
z>e<{$niW+xlko9H>-pKHRpos$<-Zb-i_3PR2v;n8+EPscS78mB0VxnIQK>=Jg(qJu
z$a1YTtp^oC(+FCK6zD7b(+rN*Kl^T+)Rw^MW-)=|XhV#5VpBck_6Nf)*FGc5_nt3>
zuAFUG@P^sU?QhYaZia6*y0GN9mC*h$ABEV!>vQ;5m`d4+pV`o|)BA!mDF}}nDtLEy
zHs1;5T?E9kr>aC!%3kY~$_VSFRGsR5B4BO#Dojt*3GfG#wQf0bd{CU)5>%JE%4VA2
zuImM~@oj{t=n?}0QBfqI-4gGYf#yp`Y8qsqRF>=zb8UD@HkeVcN&~cTs*`Wa<vb`O
zr%?ngJ;uh-V5L;dwu_U|!aF`gTLDZ!R>c(46vx<%u3bF9X0;{BVdqHoh7)v%$+B7U
zH`rR^P|B)sE%24f8hAa&Lh_)`U*0R+C6XNw)G&)Pw2K%Og;G3i(PbmR2$#2GqKceE
zuGcEy+N_!vL>91Y?K0(JWO*xl9Z!{W{a9j613!KZVCdRYD#*jouzxj%j7qWK!4J}w
z20&|%7bvX4nQpi*O&GYEUu#=vzGJKVEgVd{FX2MJl#77~aSjry7$qjpKJJ(bXdE1f
zAYcIRjNtfognQxV2~QN2*JS*8PKp&6iFPf*v1OaD24dnTXDt7ej<3dMRwS!9&>*98
z?`<y75tv*l##>v0YXVMkMX(q17TrvFg|i<UhZ_(@tzH;(l{ZmqGh@6nqEcTDJ&i2M
zS}ZM6BiqYI?YEnNB!N{QU^Nbb<OkEh57S8Sw9)Rh$7^iWEU}2P;HRjNEGv<D*+-Mo
zxFEc(g0rUw%{=<Hl!6Q(Rpp<c-J*7XFuQ`F_=+4Br)s2Ooqn{|H`!&w?Yxkyrycb4
za#^b#IDI)l_Dn*T=ug}|$%UeK^H(6Q8;+#_iP1czvaRu^v6}QZN$O3gN5@yjO<OUU
z<-qpj_k{p>vtRXypS%2O=-G9UCw-q;W&89Yqt6|)Q&%{K!$wNc;F!VM+uY<M!2-|A
z)S4A<S8ZzIQAE#V(VaBPTY`n~RDLhMffj-;N|yi__;2RF3aNvj#m(&+xME>*PAZ!V
zn#NiVt3x~NkUArmxSgh&(b9C(*iq6%Xq>tI=)QP)n7Wb|&VWhum|J*}^Im=)H1+D*
ziv{bruO<bW8E!)M>ws0WcOj46&k>UsNJyx?Rf$K^%<yEyFG!ioa@FOvPhuv3-eo}5
z|8fv=o&(wubBT;m(3`VD^Em|#v+-T7Odo$MY4c_BoQ{CbvsSLk=HRw%%i`8j#p$*i
zh=Rnqjci6br{X=`*=6S&qAJY1%DdlaM>NmOjKXbww<!1c!5_>A>`6*&iaM;l`TS!r
zuo2os4v7`oN6qybRt-kk7oiFEq<rJ_P;s-6&q2V^)hNvs+kOz7J%D}^8h4WGMqnSf
zN7bwc|Erceui6QhBP1dygHHI#w4`!dHj&Uku(*0&#ZagwWl32!vby)_w8kIyS93!4
zrfT<N(2L#b_FEJ{P3DhVh$PP<#SHa?FW`9dM5vw%I)VV)h?(A1UwoBFo%x)G0dZy-
z&>}<)CCuo=BgiI{DxB-W-_=|Eq?rxmKu$fRKmEm7GtCnSL1T?BRRr~U-TnDZtI^=s
zUmjCgk|y;9c(F!Xm}A*7OD_s-NK2e_nvME*T_tB}{CQ+;WA>BbtCp63>vd_qO^Gz#
zNuMTwn)%;@OIYk*F@45k|1h%dd8n#}ko*HCbrS)d*T`v(I0d>lAcLP*3acwLF5oMv
zv*1V>jXfxz$cA;4#(aN;CNRMcCxJU($`0`00OJ($xglHR6x2yvE5}`I+IZHM3PVu+
z4%RhuY(;GD9h1ymm!==*Vt%6tJ7F?O4>)nKc*gR1d)qWZU7Ws~jP^!v%*i33x#~gH
z(Gdn&C$dQDqN>}nOcYkyIDD9&KEWbwtIb!GvQR^jmXen=Sg3Ys^h-xDtM9?HGQIKC
zCY7tVFC3zI+}gBD$&2g+-0oK$Z@;`K6hcpH4u=g;##nSSlk>Vbzw|vKb4jtPhueY@
zWxib)V`W|J8Qq{weIx^hcjKiGKgayXZAdawAEL4x>VjjjSSv@tPRr3l>9)vtr_KeJ
zlEe@yvN3WH0d$|YRoBMH{{wO^?=JKGd}q%Zy9)hu-1K#M5Zsh^uHl(FjVebnwOTLO
zmiBLE!Fb+->b)OirGof)5gz?enFltw4>CtAq*qZwNGQ#7hwfL=cjU@TG4<&H5<jr6
z+RXq@z~hBmr;DaA{2ek$z2&dol<yieAptDl>h}@-P?ep)#eiuZb15MM3iBzOC!wj2
zOXJKqdz)ZW27OU%**~p=^F19?<^h>>1^6yGu*~%6rS6bx&wiEnLp82Helon*=3ME&
zoU8f3Nb>L}y!ojDj>5<M$YS7rdl0tw@43AwFGbL5NtiJaL~kF4*<6zE@zJ4qqBM4H
z%wARxuT2e>W3Ol(LzI?0ljq7bs<m3>7ndsU5Lz1<`t~R5D_MTLKoYv=CO>A}9l(D3
z3AsV_%az(MJT3C4d6FKx2tmAfyN$eOhU8V)Yb7E_BcFI=vK0R=b~g3bFo8ATlqDcv
zIfE(J03?A7kJE*1@#5*gNacwZAt6(82IZ>&)m~%F7l+Pn$;h5rG=WZ3rTz#wYnW2v
zD_Gp<(5niYA<_3OH%o$lD|}Hf4>#8^HR~gfka+@g={fjU;D`8FIh+<&t!2=W)jGhH
zxS>@4@izLX^!6rYE)Rr=QzqfnL1zMFbd2DvOc}u#2qudz>|$Vuw;_TIW;d)v6Y;u8
z*w!9&Le>?)sCT5tPY$-;ChBvi$l||a!ix`Jj|BE}W)H9#h{bX1SHJufYvMairFZ<`
zf&F?d3^*o(FgCixX3D%eNN;wiLMdsVm*r~zoF+wZY7qGs)};mPhad^3+)(7%VC{je
z;58j4Z)wX6+480}D3x)qr_Tx8T>ES*u*@BrbhBVBbo3q^_5t&Lt6Zy=V4u0!Er=3H
zvM@28?ZktqulGHl=|bap*psgUj-4es0xPJ5`FFjT_>kng?Uy)BKxAy}pXlQtefc$S
zeGv)0JVgb*>)(Ik;TPvkR*lg98-IJq&2*H^4mtx&;6Q!}V`V7Aercw=pQ~Ug0AUO3
zvBTg=fsby;)L;?<Qs4vCQN6pi2Hiy-Z?KZ_(?(-jT}my?*)bxVA{1SMb!@D{o~y-|
zrARl=`tVUx6SQ7`g>u-Gx2axBW+3RnOkPs44!)5K1!+Jyy_`b`x*uqz!zkdcH`r4?
z*3#4u^I6aJi#tzNhM$&?pZ>Z!ec9b-lCg81Rqh^dQ)&<fy2MH64e?Ua{5h^wU={8f
zEOJ9e?coA}6YI>6+r9H5x(}^`^T+Y@D1?bfVxM9ojl?Yxn3(D0y^Q-N&&FygF0kYn
z=M_rQbA1$aj>JMoZLS{Ya7V6f+hWUN>PY%{T~kmpphMF6cBp8RHb7T@`@3wr&XfYv
zreBr;{eLj_PT`qGUAJaz+o;&q8{4*Bv2EL`*tU&|ZL?zAPC9?%>b?J~_qY4tIbCPZ
zTyu>%#yvfn88V@|!xI+zk<J-jsaCE)0z)ZD_L6c{c@lx(jLS#e2kIP`VbdBd4qK7N
zuI(gu>5YAoVLQ@7X}~Mn2+|3ULZ?#a!ZOpT8!2P24kz&N-J#$_KC!_cBfENt?f%8<
zk3B!csC`h62W~;XspZ8kxsgTsp~ZiFmPG6sJG)i+J&z>y4UGniE4`f2>0Pw0O1fDw
zzsP^L0ln3!lfR3BDt6Hl^n|$qmK_^C1@#UE0^mymao}GwY-1Baz}v5+cIiGF>uid4
z7Or)w*19k-=;V!5$&eqrClG4#YTv#4hRYVKwLI$1zkfp*Lm>|v|6$N8qu1hBB;%w-
z8>AVLkUsoA)P^&i>*Z9j{mzGA@mOHr<V5iccUY4pf!bKs^mAV$OsxdUIl&4-BnUKY
zsFYmU@8J@n!mUQESi)jK1=hKFU3(68O@dA~1G3Kk1vXuuuZr9R`{fcM8!?LBdk|5q
z#IM*qyn4h9%hm&>ggK@KIwPlSP8Bp!jQp+go=UB@*g19Fq*GsHI2>XF_z_ChWobY!
ztdr=@)2mP0Y}N+2*eR0OgoBtAE7n@$^NK07ZpMDOwv(BKrE?f+?-RgB=T+a#MARkR
zmxpqRlZj*T$SjOD4K!(1$&wIES+q@FBd2yDKM8N9GFX*QT#GjMn^8n2L>w!Q6Q8cB
z3EogqMtCjIN?+dWjt739C43?SlHA}5zJQXOU@LvS+jF>lm}(l6>y^>@2&n@pTdeCZ
zs&KmpU0>u9H(dmeDZo+E`)^sgKeCiObSO<*#ah&LbZ_99HIQBOzNLOzD(13g`6m*-
zz7ove6H%q16;QtYg(B5CcO<q}f49|!lzh3=CD7Zw7N-Sj4DX<Opw*9^>{WFtCd>Qm
zrH`n48db~rI+P`i;|xCvLb9^mygtJFhg<H9|Nefa1U*|s`d0Qqv~$ZH*jQV+aW(GC
zBx5!u+m|Ij`u^m2b=|XW!MtAJ$^()8{vQI&{}rPf@gJ;z{0T1`LjnPj{qNPQ|I?rS
ze<fM}7yj&&WJSAmMx>GLSG3Y6aB7HR?amf2m_9ni1%HsOWeOTuxLb^iQCF$Crt2Oj
z6s^TXHDMuxci->(&l%V6GH~&oaqq$xW;VvQHqK9HM;^`~k8y)U7N*QsM%6paD0t2g
z$>Mol`vy26SaYcK-)9MAyl4$td~xZsv;jh-G68D|V-;lP8)HF$o4f_kwp8${0(dBk
zyxGaKv}7xdn`mIKNKIRR*ziN@8Fx}62rJuprLI5aqI(kl-i*i);#fI$RcHv-CR9gW
z^w7UexJym*73g-?DZdo3=o8eDuqTR#58fKK^=nsnBiPKdAB(h}Xv*|c7o?}C2X1^T
zml*J&$ekS98^2wOh^eE4$xvlPA-X+Qlh@S$rYm*xfa25SWJ-q*LhP}kNS9R4Q%hkH
zjlwTS{o!YfkCUlJ=Lm(?D6Og~7!<6dXkw6O4DlV?ZkAFq!BwE0*T|()rG0EPsd3c`
zSH-&nZ?Oe7-iwxy5TCx_v!{X<2H4_*)Y$hu(QC~I3Rq;Bg|uvATt!d;LtX)YSl}}!
z+=Q^fgdVKJ0`*BkU73jdW^ZLr*k$68%2_4L7^7S}Dr?<piOROK6N0@Z>~lfuU{KA3
z1&tCKY<bnKD;zJYu?Yz*oF8=L8yHu-Tnm<hP+gCzIqOojWdLlooH<h{^Ek2O>Ur>a
z5WMIK0E*EEA@(g~>ug{(x6-AKJ@nm=D?lOCA7#+><^HZCb{7aUU@d6}Jo5$Z*Ls<+
zWX9IFBBamtjd8hz(Kq9-3lm=FpYu!D?cP@J&#$dwD=^#~J%nzmKMaLE*nXUE9#1_m
z=Cvjvlku0vxFBYnc6`{_0?5CTgF7E~vOBirb&mKfN=oyex6)Aozii$4v#$&J{bZ8z
z629&bd^iSI>bcnFO9|&=$`kl#5bZU(g{DSYTfWBoHkd7+>ifpy-$>hX;;8rroKNI8
zanD}<x!kB(Zr{S6>e{2q_=2T<O>e6Y!}6|v?|g3cI6lt&H$^xJELd9eXTNa|G!PKQ
zfBL8Fesp4IQzz&DAE^gb*&kgP>4yjamlcIx_C;AY#QqOW0k4?xECqCe3oS}0k8IsY
zog6$d(hBYM8eb`qjzn$274vZnXS(b8XbK5W$8`sV{MWX0izHk0zn;(irSshrcv@wc
z`>Z?0tiEovT#Kqc8fWUFv!GPdI!1693>C#!i6lM{>?-UiDs|R?Knj&W+g_7H<Oi8L
zZ8FzvzFu*~-ai)su<#)T5aOjWeHo@`C#h*iI9OpC*7woK1j?&S*;+R+B_I*dkoEIm
zNzf(7UZ5d_<O@G=PgH)WPe6$XF*2Q@lynO<E2;)VfVpz2Wp-s{pF!)!BluIE$}*-S
z3uP39D)*;~9g7U1GXV5lfKmTV9sZNMz#mPkH`I|jLd;IhYog~fRcdX9MWNoLy$7WK
z8L2ebu8dhiJ5ixmsH9%M$y-#AN2xtY#%kO!b-n^t8zIYA@cj;qYB6D(O(M|DD?XX>
zVy0=F;|wT$Vi>AE3U+wEO5o^kvRv9p=`~LNcvt}PKc16$2?M-z7n7NeVT88ZZF$fe
z%&1oo@_TK5Rya)Sn9lmpSKioPS)zSB{cxlZ(adtPzRu4`GM?vwBe9=d&*X%j!Yg2#
z`A!)fH{JFG593dA^I^8=7tYD#8ADHuI`k!d?<dRJo{Zwa()>DNCsHP}&2Pu3Is+>R
zJJ;ueW5n0=9qACQil3Klv%JvGxtmY(1Nt+F;<ew=C4J7=J~#XTQ+VeM6ofKi%)qd<
zi}HKculgJ*&>S{Z4_67@WEHo6&PUrBC0HZX+Ne5t2RyIfhtS%YE}9#L%My*JvS>e<
zW`>H1Rq8zx>CE}~UF=z|r;M&W1D)KxJs245ArOvxoY4J757XGodmJ%wZbESBsxz5*
zQp*gB8rc~<?rbFnZQ<G!%!q8qsuwGDvov-U@uMd-iZqgl&1XEc$LJ%<jdC6CKK@e}
zZo77Cm#zGnj&6+ntM<&mw=WX8=IrU0Ll?k#(ORzhHLbU4arbNWL7VWvb-C@8evBWQ
znUwu!j-6DWpQCz)GP74;(no-xD(m+^nJ@GyW~fW(xoOnKvj?kfZl8tdjE>6&fbX=X
z`=!`>g{KaM{&K;5AG?R-@3qiM%_je%l=c+=cx`cNLG=!k=MDV-Y{~y4U=~OCGudJM
z`TnCN|NoxlnEuD8(!HWT5a!5^1iu*)4I3X>eH$|a7hiLk1OsSF<|O!k%d;~ReT*6X
z&=WR(3desKBmKAZ{{QL{P7<{H!AXQ%e??Z`Dj@C@Gj-c5;9ZhKg)Swr;p(u5q9wGk
zmNR`lH`MhOBsOJ*a>V&;!}%X?R0ill7?KA1Ob%G(QiM_Ne&RCQb`l7+F`9qgB!Z2E
zW4rMM<MELFv54I>pP5c&<wmEzW$%I4*4@_36|L;xlnr9!t7k|ePEP?p2A!#qDhl9K
za`??$<_@<_(nu8Jm=Rh;lA?Uds<{j77JBRfjsQ$XTL(L+R1fG%Jb?cGmEA`jXF=en
zf#7Om#uD_0L`vfW|BgRS%V9#z%d>n_R+lBE8!``~oc)C7aQ?wXaiwsT%<7y}B+DTo
zpAjiF`1G6xT~bLcQZzwjYx>X}B3l$+?{Iv-vIBpX6F{Q%hrEcu4VeBViOu>PvG>J;
zFw@BFu-1DKV*v|ZPko0QwV`P6%byI+X()#~2|PjdD|hzD_RxzRY43Gl8V}&>g+ume
zX3?Ga{y*R^{;P|k3#(Yoh5!P3`-yY>=Zu@7y~Y2&+Bc`^+ikET^=^Msg+C0@>u_7t
z1KTWvL{@WZnT#bJ6s<8LHOOx0m`Em-wdu`W_i&%p;)^?S(=q_dcM)F4j_l8UuF&0O
zzy;c4-Y#jyM?GKrdEP&L?3wLVVKWIIZM4XdE8bvc!WNJk;fpxLQRax#s)R=j8Da3&
ziy{h)&c9~8GHJ&T>eq#b!wgIFC$PiJG(?zX6A&W`3b9|sz620SPR5fg^N>qlG4=OM
zYEnWykMXPq6S#eHk!aH|qvRMek8VCnGNRJUxEgx438TT;mjs`#3$R(Ur49+A0NeB#
zBj0NNatC@tb^t%C{_!p#etx-jUV`rk<9T%xX+0_z`yR>J(XkWAT(@fZU;__0FCwD9
zx7x~Vih!96d1JJL7_n@OEpf!rMtbIp?|BRg-v+dO#ZIo&{54`qWWNeTRyY9p2#KG;
zg3i%sifKcdq}X7a=!!oZG}9;Y-Uay+KJnNo0po2a{_ALXhp^+Ub`JzwEQJn?LC?YO
zimdLAp<d%Auk}j>+0@~raCZsOEP8q?UYUx2Kp~#Sr3hQ3nRek9s8iXxgx^qVJf^gf
zoB^(NHV%0Rb{!=!)id^V>58)PtRDGS7fBeZsr?4ubwQrjzqMS;@<<z;%f;sI)8j3f
zRm-7%bZ>h8_1I!;5`YR`2wZZ67%>jo*srgB`MU&f8|0UFEe+yh9pzWMJS_zLa)fU7
z<ofl~#72_6M!PLQu<>c}FSv{nzmiZ-{ki!4-(<Lx=^95{J^7G?XH3G{`NB!->!XxV
z=$hTkq5En+lxU3(jq?WzR*o6#`L%^fpOa=vQ*G?Ir_vU@0xYbhvjc*k&bp2G07iK6
zIk=?;*eOsC&_R_@gIrg2cy(2c+SpRW*g%UEU>ecK3XCG48o{u$JcSw<c@^~-k~1P}
zwe5*f9fexgV~z2=2R8hkszAtfH5Zqi+5D1|BMD2sq#n3gwk7)tJZN`vA7uMlc-6Bs
zm3q^7>H(p{F6rp<8b2$aPHTF53o>uD-G;q%2$WwT%K?*$r!hv`3ioF#lg@2w;OU^E
zj18{)Y@79~NEd5<V6N5J16AaLdX>4-7>n27eXyYP7W%#2OTiUrXwVu=f&^<dlJFDR
z4~KGdrIz{lK`jsaV~;3mko5%QvCJ<v6`GbupeY<$6so{_O|T){-`u;%6W+x3&=88K
zs%$03Rg875f3k&H2=0?)vB2f=w949$A;S;?$c+0)ixm~wc0$#55nN5S0*jV?)x#tV
zzF_P$E=JmBz}<Mi5VaQzO7<JvQ%dqEurN+W<s3xM6iqn?@rILrVV8+)4uPy=Fq<jr
zHWUG+4~0`&>Ws%zMJH>3DQ@+YVo3lb+go-H5FQ~j^qAJBOC=;kBz45HUSUrfyxp7t
z*h(2klJU9%;-~Rvr1DU!38u4cAj|h8$h}{e4?qT{qEH0+iOBaUCOgm-f;v_m8G1CL
z?4!O|vgR^iRiUxJahSO-Pfd)p<T5fEGza+blUU^X8N)?vEQP8{TPzLBV1<clZl=Q-
zt7QL}Lo6cLK(YB1^}|;W<U5!!wjnMBG3?v|U3L%=WML~}#(@O4Zau*0{c?P-b-s^`
zO+kj+h0`rJwV=WX*F_;`akm@gN%QD~%YmT5>fg<%SB_qhy>|uV8!xppg{kg$6S>O>
zH5lGBRKgk|02sR>0gSglRM_r>a9<vjy4XqonKVh$UqG_teV8(Z!#b;BMdkMPgcqO-
zMdk-`G1>!N96K3!ap=Of3VZx-eQG@(95wo_Y|4e4ger65CB<AE#+K#-{Uw78)6fpx
zszBExkD)IgDrcm0qve`p)H2d{<?)V%urzU68f!cKs~K!pZ2Maqj>4^*e$P)tJ6_%M
zG?WY85i^@)d?Jni-ldkG*2Tv6St5tJ*F}Ln5bdppy!)c3^1mtF=j8y1JK&!QS^9iG
z@T3tMtRDU3?0?EYrNGq>AZ~*9e2BS^HXn-?#ZR|n7KFO680SU#VSo3RiSWlshxE}K
z7#JxW3w1j|LoarvS-3S#V6Ji?cXna<ferv6^6lK>(dPs`n|(Qii!(U;)22RJJW*&z
zeVOv7E-&>TOS>mV@vz4(7)M;mPSVEqfTG!ZUHK2x=WZOIO{djtRCc0)?=ZR-`hGXt
zeq>)CsJP?3p~Hz=I<wYW$|E{)b%M#oP5Lhd%!HLY3U;dJyrIu;L_LClvBfc39-Phj
zgU!uF1&af+mk);jxnrtQ<%U#;0|HtV_}|=o|Ib_JKl@)UwXN(n+E6}o^!rK#3`=cM
z%s52r*XVZuwpLa9Xc1m+n4-j^C^k+c(t!jHJ{up;+yh}E-PT-+>%MJbbE|td_MAK{
z-Z8NVPou!6US9x%dr=X&*v?XhoxiCj4S5IirB{!S;oeYPe&y&1dU$kQL_DOtBgE<&
z#H8x1MSXP5h`><wVv_~75;iEE?C=sreVhg1O*gweXq$F~D0gv~NyY8tHJAyUMd7G)
z8WO)J^Mifs%LtK=P$snB5Lk4h649eD@O1hmkS3fXIAUaw*abKBNzgt7BoWwgo*?(n
z13WQ29e~W)VGI3b_rpCD_=$c8KVtmYdH>?$SF2SDBfcSpPUmAz#)%Y@tYr^~HaQD?
znA=^4Ya0Y+4DkPRIe9j*=OtduX2ER26B|VA(*C^=zq)9sjFX1!vOEZrcFk?TkvU~C
zx?wh}-BDy~QlMu5KT8|Pyf+eX9m0BGKRXW+3POZsZaf4`R$`T83KzIP0iEvXG|Wi~
zWzb=zs;`N`l+KOm<36r45n&_ci%62`5f;VI90!6lXtpkFkwLOHBm=IBK|gsHSnQ*v
zhZKy?c2cbmd>EiO5j9x>LZk7XKmjmWz&^=^OJ~CAVH)m^0$x*(dr}Vev2+LWFJUo9
z!qa-^{4nXY5eQ``461K0GG9azp9SITU?gAehZ_xGREzAhzRS3%%zZa=IctMLY)<x*
zjmH%V53axV0tPwtj9HBqgR`76T0tq2S~9j3L9u2uMRPx2Hu$jRBoNrRY*gYpYA~-v
zT1^Rwie9aT<i$XQ8)3ODQm3P}kZ!J}8U)qv5NWO{;2gS^XoUZ|?`z|vfP@q(XcVXB
zF97K$z-yaC;Qr{OQ2~~vpO$x;f|UV<qK)arWqC{bI~IWMGnOHQ8ta40!^cpga^%Vd
z1nrd6as$2QR}MURW5iKm4GU)n7%DO1Fmb{J3EWvqbW{38nTZYidt>pCQJVDlW#2rx
zusBgx8?CVQIpuu%cTq|hGN;WQ+i5n4=6YVRXSk|%muC4#q8RKzapkhRd#nNeufHGQ
zsC`Q=b~}#h5K^rh6)Dlce|<>govY%-!~_ObBj8xcSeN?**{8#<+wMWr$*(uGiPO$U
z5|~_g&dEU+{8&0JzT3NdPTwJ7TPnIdW+x<ernJU`ZSHh<_W&|qwstE9M``!*=RP{6
zoxRS<Q}upcvXbvQy0=ZCiCLrV;~$3F$0)uJ6^;HzNdk7dLWPZ<&Z*usHv}H(kzlNm
zpd1t~Ep8P3OYeHEJW{<ME7gSLZO+0DMqYV4)oe&qoN`kN0Szhjzkn@CHHb38F<z?2
z?12ZiMA`(>2=VFL5V%8OHSb&(y~2K<#QY10@v^Id+#kCNAa#g;7eSfQze1K$`r=ok
zmE<)xW=t^BV&&rU(ZrU|vn~w}yptVD_EZGdwkEG3Qu-VPna?ze0<og*0MbLz-|-qi
zhG@1SA0?WXM>1=};pbeW+-^6klhi%+-6eO37Kh`En6QTB5>kK#{Ox*sg!;;Im8UjF
z48K700<toDy~eGq6XzbRkgCp%a4VDjbcdYJ+{^ws{U5L%%Jt9bw+KI{|J$|y0K1K?
zybapVzFYAc?p(yb#=J&3_8fFiZJTUyrvPL6r}|Fl+Sc<O@Id~pY#{qexI^{@xsCh8
zzxee1wNm$8{(24hs?W^CTkuUr-#GOhoOk5sO`Uo?HKti}B@a&4SjwQZ8wolQ1LQc8
zB0NfHVjYA;Q}#>3cBKJc46Njrj4e|gyx3|hR8o|M8*c18JP)wlVcg)7J=zMN#@p$k
zS?`xrEccq<!4<9k#Iq0*FFlVqA~LunmQR1T7>Nx#1WgT<12RYRzB$ncDz+O-)iOGy
zOAh~c*6@b;<?%-z&{SM40U|C(U0hh~#L$TF$XFfrL)OD_GE0|@;GY@-Yff2Zo12w%
zf)F6Gwc}pYT#ZTn*}OX=Nel{1>9=krzn9(59T*+sd!1r#<iE=E7++*I5&s<J_v$#O
zGFe$WC~D!XECcv2w<2K6|Lx!q+|g{nAxIQ5W{kAupQ}|^86u`^B>O-7@n~(r=|p!k
zU2M*?Gwtx-Yw$W;KLF}>-<REjkll=3KWADQyR2JuFAp!%Z1&79r9S0VYNk&0#y;2-
zx>#emNpnPJT`*Dee!IDDp_Ss_N(G}FP&eNc63B!!0@e%{)&*K`*j(%!R2OfBSj-fU
zVrFsfV3<(n^gydup%Grq*M`xkxreaxA{0k0bmP6c0=lCMIsJQzi<x>H<f*$eF&Ork
zH-36fW#BbVLufw2tg4h-YY|g?jfDh1s8<9Wa#P5bJTwBbm9p_NW;5vw&tgSeUBIqw
z6G@|?*MYYjT!}Ggi7?I(?xtXuWa*Z^W<IV%he|TF5`TFol8D3-&DbhAhKvKICxB66
z#XXsAETlwv$8O-bcc!Nsffq;GEOvk#Qr*(Cn6yTe1@9W=D#0X9eu#3cs0FNSI9{=H
zKQ3ii3;cN3PMYGfXn*2z(0Jy0piohiX&qEh*TDRII-juyZ(5Tf(N0xMInErcP68^t
zCM9-Sefyh}PhPA#sYFZ{d*Buc%yVFFN5=_7^4eI`Bl})guBFuaXx&+io*!=5|93P)
z%)Q@F;WykyTE{$T%ZrVp3G;T0%erS#W_*F4t}{@yIvuE0LfBn@(BMWGrJgEJdj!>@
z$~s-Y*&8soXTp+CBzW9LeDlMx8=+JDOWAt~d#EM8;U!;g)u`Fwu82SLM2d@41a}fd
z11$)uBha)UciZq$q2o#fuS~WDnQm>5cEfXGplSF*6G-r}>$;x!mNJ~tbIdZS1=mFu
zTX-w^`_iXz<?2|N2AZMa9@$`5kJOHG3PQe3rsv%ZCmQ&WjyT0*(ks&gL2$~k3>%B*
z!;ogS6~N`#5QKfTD4kiU+nCl(QF#=nX<~Ml6tg_CS`D`auG{11m~-c2eM`QDa95Af
z25<^c_ER+K{~-HWwmMFV0BUbnqC_6x;EhYQR_xO7kQ|&FePS(-o38Xvz`an(PVz)K
zYN}TRM6emTM#F>-%81H^j-`lt=(1G=*`jh2Tl~y_!9Rn;OcRKwa@C(GmbpbJE30P{
zu78HMrT^pZY-Nh^!`_Hy(&E{K1&%+2G9+MZBs!b2dfKB9pSH+;O<5kE1a-M9Q|jt?
z2GRT!I56Ha=iBjh3+Q{PU24rxl=!XnV9qPuKC_Ex%eALe+(bA<ek9k;jY08mte1tA
zQH)~4mz7e-?O%p^l*M<XsF@6wBhKNN^J*Pm?Rjb)8mlm>QRr0*nn;rzmi8;L#^%-Y
zeU^S-NX?h~k9N7V;?Ia(LzR|%*Qf-ugO>^GKhcxfp0B|7MUB^Vczf<sysOM$dOVm6
zHnhA6-UwBVym+Ej?7D^UhU`O-2^4xD`R)Q2>%R>!4JcsG645V&Z7u3xG)P^^_N1h{
z2#xv)M~HvbZ;SP6FGTdg3agAnheH>?&p!Dk8WDtbxd25rS$i&Mrk^AEuC-MQUWjl{
z_8pgneSAigGU@-@J0Z10yUFjjhMZUOXg|oyK7tZJ<3LG&qUSnV0|z!jRHOx;2rChv
z7G^lRS8Pf&U))_j38yp^vH2NymH)mBhM_~dODRzSTaEJUlC2$L-8aD)@$0P-*!TUn
zGLAaPQRNgOe3P|<=VHYqT4HiFoP5T!e=(b<#@2r4J~m25%^ObNNye;xA7V8RXBbJ<
z?*bKMk^5W}Jz2An&X%%P6e1`zwm#`GShS!tL@=J4t)#}m43&VhufPP|gb>4+fY|tQ
zB}tafS<jL}odgO?5}Mdtu97aS;V(LtZSWUUxV}1!*|}6?h&gm`D<6HR?m=^3J3n73
zI_WV&i-m$mE;3`sfvMdNG>$OGxP49#_fmt&%Ca(O9Cp)inCscM0d|Wv<o+4K$t6a$
zOP-jn2D3r{NnsOVJLUNjQWxpiO-zVV>utf^^^YmSH<^?_@7awfwA_Ivox@s{L}3wi
ztd_nr8P3ZtI^2gNjCMb|t(XB#W5LT4`}Uj|!8)AsTe5Uu)nP3eAA+K|u9I||TS_Kv
z#Gsv7K~+?0jD;tQ2A&2}4JQ~Gj!fPwI(q;v4eFE32iu9?t*SE=n-0x3Q(wgc>}a_9
z0q}U-efGhNg?x%n%I=T_ErVLMna{<41Fx9neF<@s0s--4{eNOo|6j-ce-Wwv^Lyoj
z$I5AgGjaQq21#})cz&#5KRtUZ#_m|E<xm4%(^Yc%pya4T0}WbJN0~GZk!C&p<N4ec
zh_pAXh;z-Z6fpv>05?YLFYcn`b@=0|DViPXw?j&O<HEwie&YfMe|;FbnHv-0@jY~>
ze1V@Mhw%W9wx}e)V1USg1x#Wsx|GM`=pPUgaZSYa9pfRvgm4@M?ZPbB9&)379SMbN
z2k5YGjAM&y3vD#>pHjSA6B>R~Y5tvPKSz%&CVms!rdZHzXx(Xc-<DqoC@~^?0OBZ&
zbkHRHGy*$h^p5}*=rt2>u8e7MOWK$_usRRl46?6ZGapbps7EGHt>X=xK3<LuYt|6R
z7sRqbg2_BNP<g2BKLV~cB;)77$q6^VbI|7g1^>e2ePQ33nK9+<fVh*45wAm%O_u1?
zj8P9ef%6CBzT^oQg&qu1HUts@-y5-=SnB)KegvxL-WUpk?by{-fc$*~Z+D~F{qCGw
z6+!|4tXFtOpS@3ai#5Q52DIYM9eHn`+?j(AS$Ck$$AcvY4?p`M_I5E;(<7Nk-d@5^
z)BSXWCVn{O9?tCQg+Th1MLx^l^edy32nGR4;|XBucD=?dg(QzKfP62w_mUBYJ-R@G
z2px)GaO%I=3l{&2-!SR~RsJ2$eG~=3C;?pi$brKi<qFzjSd)X0;WW>#-~`$bGi&G-
z<Um58zbJU%EQ@O<mXH%RUj0Q`3B)r101<f_EMNC$GijcCab-yiY98hWQ7!V3K)4HT
zi7I0G0^<R0DJ%Yy{eCMY$=$j?_mg)2ZxWH;i2uy!(fQa-AAvlBLlNg#Y`Y93;T=%Z
za@r5aACHXP0D2*b917s~0ii6QmB7`Q`TS(!Z73hsO0wLiY$}utT_7-J<8}ziE}s~%
z!3B_Ffs{+vo%Zea12X*NZ141*@nj_n-z>d1g2=+HH-G%uBnuGJwqo_+$cfd6bDP2a
z{hFV9nGRC)erh>G${`)-D3wdlZdE%INa=0jo69Rsl-RA|TkknR-*{t%IUAtUc+TUj
zm?w#}^T8V*?ULhw1mLNCi+oU+t%c3@iQ2DP;Wz5!gBUGF1><Rt7C7NIty*altjBZg
zbZAEjeKG?&+>Pp81a9diUZ5YoE+Mql%s8Adg-!i6bChc&J$*subAxS|K{cDBj34gi
zFrC$L)fiRo^Ln#Q6tzZC6tP$_)&^34vrRA6w|rIVx=F#xo7Q#gPm`RT_bTvCGz4c8
z0ve04#R-+AlcpK6pc}+0;n+<YX?zucxjkfrOWcE=`^@acz&P36oyiB~-%QswJLyus
z6IstV!>AXdhxp>*qD){0>!sZeTX%vGJ_gyaqOBQ74772t=A+i&$-&Tbhu5=*hBK3Q
zKzBB1@7b(O<uCnYlzF>2KCtKq7m$B4rD2!A5Rw9a?{Yu(ixT0uoUy6jq^mYFYL4Og
z>GOTAwu(Y9X!Q1i^ENlP?TEi$d<Y;2%+us!S4$K*6ISoT?b+7eY1F;hx`J15AuJej
zY~LrwfQR{!k;HWvs%<`lxgGtGs{Buelb|1KfJWSWJa*xk_(_g=BjjXgek_i7G=jyw
zEBZ;XAjk&gW(ZOcoBsHp<br#Oe>p7=Y1BTb^(;Lhtc6Ubq~}38{y+x9I`iHsI8W1O
zS*^u5eY{=W8pB%o)k)9^GAXrewzw^{MF8^6TS?P6wvsC&Oo{tE<}OO;3?r^k2vFk)
zTba-Jd|Kxhidx|fesnz)v+03VXklur`qRgB4<X-XS|`ex@C-xfy&}uO;}%@cW;78I
z9lsiQ@+YL%f=#GjTY5~WI=fiY{%NP{OC!e1>q*}iBjFTLs2|o;O;~E-?-xSXUVQ|L
zq^R9PuXoEAMr+OQks5%21M7Np<=kUac+g6Y1eEW4_Gi$ipwPW|_MB1%;BH3lww04(
ze1*u#aaLCeWLPf>T(8kN1RE3fLv)W+8@xOL6nl!>>x&W8)%R)zigHG}S~C{Sgy$e4
zzKWs}R%mpKV)Psvi-sn;f8Xzx^vnpJ7-Yb7PT$7Fe+F-AI2GPG?O2c2I$G^yObyzt
zYkyJGF%-GEV63P#?`FcHVnWG*zM0}M;WirKgee>&o=X@Z)BLotSPHxP0BQKteqJb!
zI1|7%90Xbp9F)unhd&1k#eLa$8a5{K>Gk${a-S3aO`jSyz>L*OBQEu0haGi8;eC(4
z8b+QfSgdsp#u31-!jK|!G>g^@k^a+3w2ttiCJ%^q;4Rq(rv7Ed<n2ibJlYZjVjbk8
z&Y?ft?buTRSw-Cy#OcX!Zpq~SzBv4u>7@z@D`@v<!i1}E(6@YeYUEsHKG@AhD1uCK
z&3`q%=vlT&k<Zr`$fV&xF{!jj9A~4(V?w{03s;R`nFd2IFY}j3r^UXtC34^14xe_#
zdHQ(<A)9UFbr7UV$EJ6O1~TW!0gp`cxJ%UDHygojB(;S|?!p+}c2NH%AlC*s`+bq(
zuA8n3)LDW*uv5lV6d<)+;VwgPQb)Hg7f-yFFD=?BN49`XBZzTJFGeR;jTAM(XhYC<
zL<};%MJw-L5bs2Lz3UwRoMv1eAC#Xu?f)S_&8$#imU-Bh0-BFxG}#hwcvnmt1ahW8
z-+#80qMt={Tu_F9qw42Niq!zC1>;z(M<L}R)T8&ai{>&`ZRpIU-wIWmV=hq1x{L}F
zP)Y&cKHa)ifvnnUvyisfF$AGv<i(_~d{iHSGUJLF?}Fwx8k1e<(6Q&xuS>E2kH!@f
zLOWh2$LKR_{4C7Z6Asz7j`{Ko@Fs=bfysi)61?&5P%c(B71|K+2XqP>3#{3h=v}rU
zA;er{Y~N))tk4J;Qkt^R%$obqLBJ9UV;9>Sk-WibM7H2zbdrg_#7rQvIriNe*>&wZ
zT)_w*QR!RX{19XJc19Czz>yP)t~#px)6kK_XNA{{5!R6-O{Ln$8F`%hyQ&&ADoa<U
zT67h%?vG1X^ZjWEEET9bQ;#wij@vR&0R6Cp5ikExO=#6_1&fs7nT3OZo4`#*MnYz|
zR(R$T#uS|fJL_Zr5%7kOHK-UPwwEtu)MOMpF{mtb8))dNph<CB9-@m1r~jP4mad35
zbAtQchB0ko9-;DKhqJ#BiC3aVtvXCZBAQ2`JQH!4xmA~5As2n*qXf2*a1#}1^S>LS
zlOVH1I^y<+NIUF<$MCebKgqcO!MQyyj1h@YUwBw;0kJ2H**cqKk_w<9HKpJbs#(79
z-^K<AH(8s&r3UeTK$-E#GZK76ZU8{716=JKBIE?!;QC~lzpw2AxPMmOk*CGg4>Q9A
znu9+4Jf0LH^78TA?CH6n5h(>$DwY=nS5{Ad%>tu>&!?aoV=4@y3S^vtyS;e!b;lYM
zBI;pe<6cyfd{nyo`y3z=*HKOg8wk{isuKh(CLiyLhQnu0rr(3@q1j5>2aAs2jgjq(
zql4D@7SLb{=2_sKo<|3GLjqsc37ABpKG&y1qD`?7#$^HiX$@5bm04I-<dKA*)G1Nb
z5%=r_lFLJJ6hI50ftlh8$iDs1z}s^A%|W}I8Z3V+?<G4j?5Iz(j5kVhJwc_o_d9^`
ztvVX^hU0{V^h^|!qoKgF+Yg{q+2ip1j+X`=mxu(+k|x#|aC6QZmEbq$&v%akhx^Ci
z!G4=E6J;xJf>|XI$B$cUxS)?WSMefzTEopNFRq2JH$in;CDno+Gc_MC686L<mP*rt
zJ<Ng5qaK#_FkBe^Jvxw6a7t-TzOQ_0)la{!#WZO;d{_Xe`Md!{fm$At(BOtq*hvB7
zm<xfu`y7{)P@tA&{r<aTl&Rm|l)$Y!Dkg;}iAFoWvFe@SkE6M78yR{N-_Cjbvx3Ci
zMZneO0*GN^heVL|p$LEYezdQlSr7?Cf#<E1<(Y#sH~LK+9j@Gx$x&iFotZS&AR6}&
z7bFnyzDLTakY=@t2Xf^z^eV7CCNHDKx#4K!kRS+9cTs!_30Z+_E85e#O_!nwLV`RO
zLWT*N2qzh2S9C=uN|rFN*nP%({^C-U1v=aW<Py*n*~w`{<AS`?##17+cpZU2Qi-F^
zHD&RxnuzQxB#`8cO<c|z$d?C!LBwIIvzy#ap~LW+N^=?ePlp56Lakhkx=AiIR{|hd
zFiJCY9bzTA?{>N2{wcRP#8qnyq#@CiI&MzF0Qw(1IfuaP0ve{oECUE$tRiiLL?O_L
znuO5R9jmDRSZ;ttvXK!Aq`@8OLXWHP!2{c~0?HhC715*i(Lp>Ieci%a!$BdhS!E#k
zEH^>T4Ngi~(cR&^n-4*Uwk*3dL?%U@xMn5-ly%2*RFd;M<etLgp4ogDL)bbeLqPut
z#y|~2h&CzGemjzrFIQRD@GL{LM)A}_tw5qz(ru(p<v)b;b0njzCd5Q4RI&3qtV)>z
z@seR+p|@3wrqjag0e`3<WRAPGDw*)X$USw<(OIu86%r8GJT%`!NP|5E=shSAU*L>}
zRhW=Ke~I<(*a~7vr!b~60xknU{f+R9-Yw9Ba%X_kgSgigItS$$s}^u`*y%oQHR*zy
zD{cM+$S>gB(?`6FVq3z1+{6$B&F&FF?gQLPnt9c_%|Gngq_Vo$E<57MT^@-V4KF@6
z`q8E8PgCZO{27mH=Io7TPnY%}PxCzlu@r>ANg{Ch<HwA4cT}Ri`KU2`$l^dJ8!x>u
zIBP8DDki=@8hZ=nM}Fzx1BpYMP&`+*8Q>}U=wrm9$9|eA4!O7#7T&3mmkck3EzlTy
z#E&oANSijNSd-*=<W`}hO=+Ow#kPV(fOw*&xzEFd(>FuIjc5lvc)`o|zTNXmoCFGT
zBY1Agby=dE1y|PFwhGp{!Rnme6I&Oem5=`8e!gZnwzJk;uJ6E~nlNUPQ&a8Zi-;B?
zc3g=0I~g0r*U-^VVtX0>V`C+kE)wM$3Kt^>7%W7!;%Mpx&!NaAN5{7s(w%JzdQ#n0
zBNYFLjOg$Oft?7ZqacVK9!v~3xouK!#Ck}7w6<#5*~tr36(t1<YwQhmMbQwH<Z^<3
zfhQy{kZBFl*F=L_b%l?^hR-8!3J>I>8``yPac-!KAqkRWMw4Xhj#Fi+<4A&9lLySM
zBIN^t2@-r)!MA|8cL4)IWC9B`;r@v)yd-)QJvbqbp(W0{V0Rl@szuwtP0QDPMM}Qi
z$CapEkt=h$gi`~3UYMk}V?%09X0bKy7DIA%{b=OV3h8Aw(*vJ{sGNp}A_z&AGP#?-
zJ&OnkibQeXP{kNyyb7BXN{qFQT-5huQbd+Y_#%<b?t}N^qh=s#b+cPUFTKM+?f4Z*
zcOtZsaFch&l^516d0Ek>?@5ktx6~DmQj+m16~}2HrtY?g^2)rMm9yk+A93E;WBL-u
zE*oMM5zMK&0q0U>L`W0ho`m~k{Y_3cl#9gv$!8C1J7Hty5BY8d@M_BbTX4K2n`=dB
z?QR>PIm~!Dj}><B0(wQtE(ua|w`T5`!t@J+s1L}n$B9<^R{fsar8d1lR0UWyOcXYx
zHF!v$S;o5JGG3K#IlS)GpV@pD-7`F}Z_d->7bA1JSybiMU96e9NtwO7v_vDLvLo@*
z1kujX*m|i-dnNsuoxU+S9UOtd;1iHh;zoW}_P9|pZ)qhZB9F|(gEmfDf#AOsRVkxU
z7#IB+P`DIkPqy0r`PG=6EXO~h-4{*8$kcX3(S{$W^>3fm2Yf}z3ld8lLyFcOYMtIN
zW@kQ$90;-7SsYo7)GG^79L=7P9tPglhlZFl;nY0^9aQ7aG~#H5PMAZ%4cZyeMnrn-
zmbLq9*ylsk)I$N;JY5)ye-KDQU4<h0{{oYF0mD?J+{>QK!k@LxW?P1XIpG5Dt`<E0
z6nI&%!<Q(k44~R=VIp;68H8&SL>aG<Mla9yV&IT3Yr-7FqBnSnNXRe;DZH7(i~QYL
zgC>E%j9XxEeb-k-!iiBab@1+8{hn?ihFX;;krI5_5}Rq3s!jkJbM+CAg|RjU6}LS=
zR6}UB9w*~_{FkbqDIed8j~a!}_`j$gp6=<y<&~we0$RoS*};UG`dCxVW?33OL9pG!
zdQqs(i<I%K@2GA=yETi}7zV>3W@pQ%!dC(*jYfoQ2<`^RmOA8Yh&AiZ)`D_#5+y@g
zfa=icB6<P#CL?+_`~4mIVhTo~Sdn*An2k%4qHq!acARW0KAXzWfG}4XZbC^=2t{_m
z->ub@c`c+gVaE%?7u)gJ=IK`I!Z9dw@HI^NSkSLYP<Y>T3JtOn-+ZX>P>|Eme;`FL
zcjsvDjA*6A<St>&44vr(xzRpa0VQB;9px%)rAH?Eb1IvmL*VDwz+gVGkP|)?>FM^n
zV{=DG>1`pZBCr~kwEBlBn8PugV6s`>N|hW|4vL6&uFZOi+itwN*ffCq=-PeJo{!6^
z)3vz2m}2e0gk)njZ|(^UnhkP<s+OSohxjnietNMJG*}Im^tqKqWst!G!X#<+D%Dag
zl<zRhcvnwr&us#^PkA99;f>{yO49vhfBrs!iem_%#A4E%Oov>7kF}1Og=Gy_m{^eQ
zG^mM`YrI89;R1++FuI>*x8UaLPOwrAVilyA+BZHLBtCs+KIx%Ya1z{D52`rx^XsI0
zIw_A`Gutgay0jk<MH}TR;hMWHjJhH`7w3~pW{+fpbSwq0GzX07GCmE%(rf$5>mElS
zvQmKV7^ajh75C()?k6d4YL9<wx|vCQv@XL}8r)nTn`-Jzbm`%%M5pQxFWd_2hsdya
zaSG<YEahy%*NUlY(d{sek3O7*_@jDS;j83USU4L);RV6eLs&Q~c|Qm4fYrM1oSz3t
zaf_QoA=N6q_M)_s;`I00I!Nm_!UAGzS2=3*?1WS}d>*npfH`vXVhF3MW<;KQ`#GYK
zA<?xIXjuCXiULh&hG7as=JH?}^*OSTNXN6$oj+eG8uuD8NTtkJS&hoz=Md?_lU*&s
z2jfG{?Ph}2Ug}N3=Y`>UKeogU^w$;9&Mb`*2W+7HEXB>KTO(BcmP6laFU#1x4EE><
z(k9uo1%f~AY*t;~^GO&+HlV)V<)De2lu<#j=;l6gUF2|ZKB_St6cx~oi;&CJWReNX
z)kTwG%hmawJmaJSgt=mm?gH<yxv3$?b(@yJEprNr1q!l6jCJ#F5KU<!Y`xgFI&Ry}
zz4majEOl@(Jt9M;*9dNZb>XE<WQrW=!m>J5r~dv1hR{jEWck8P<_8AWF8ib%e6?j9
z`P|-=cSl#!ncs#kFBpU=dPxuCtz(v|>>oEQ465Eb2zY?@h~zMz5ZT4j#1zZ3#hrUA
zs7VoC$`Z{n{Mv7$pUvPzV(Y13`b^2uE(`B$!+i63bToPvjeH0G;?Z#u-?<YdxncWa
zPK@q%tH9-Qt=5QIT4#RZ7;iffvY+X_j<*vK<M|o`@ZQilzd83?b-CFbw3Z#Ms-Y|$
zPN(Ko>OEelv9?E7B&Zi;M*fKxx?wgidl+d71R!vvM#NC07}ecg%qG?X7p=HfB33jn
zo!t-jTe!@}{`BpSo|g-QiwZ)^Sbi0ltFE8FVyQVpv9{Jx-UwwnQt_czSAvUI@+|Lh
zWmihv5FZV6N{^jeLDX1u7D!K^U6YV{;!l3h_);!~Xz4_gi4M8!f3HOPC8?pAEfnDE
z-zqCydW!6y4$o|&Hv(lQvSZ>qe15*QhK#1+l)#?a3J!U7gpqcZv@87ZCLZ_6hxkl9
z9BwatIdkJ`tVMvf%?$Vm#2Oih1o^B^w6JWVY-t@(<R8z+Upih7uC_ja-R-p-mN#L$
zahh)wr)b~)#T?d`$7#wGbdKynHdic>!kacKRmy+L(tc7k5GWonh0o7}tT%P4%2FDH
zMg;iYSHn2eP427{hB>`^vNMa6@L(sA+`08<wABN_<ho`dM2?PhuBqNu0@-OVuMRv~
z&T^D>14oQ#d&xI+@_aveG5gu=+B9~wPQJgzVAksFg*L1IM8W>Ps>N(Onr~YSG}UgG
z-QrM{1nRf)f0Rvv^Yi||WXavB{yip*<y1MT>oJ_wneOmJip8JEotIIQ9qxgz1hAhL
zrB6MKgEJ%hT?PAI7NyS|*5-G`_nEtRFHEa2_kCMkYh<pECit1=orP!j<F3Xbwe1-u
zmV;gl*^k+nPMBUWz3lx64$7UIcKj}_1l1!v)>)<;n0`QBVwRG0<(*4s;)LC$zWkJ@
z4yFQL2b56m=R|MU4e={13+Ac8^j-^GZSL{VmczV2*zN%%J3>_g4hI`em@&>46{j0)
z)flUPzDRuTXf9XhMCRIOfIu3H18m$umzCn|w<t)=ACft;dn$r+xTI^Pvkx-j&k)y9
zV6S7vlD^{$4{VOF5b$7W{ccveEUEW_Kt=4|aN?KHL}uvPlVhG|BhOhk6g}MF(db#`
zXV$&6%i)T0POj(VnlLZb)UWxpS5ElI_AMf?#r92amgF##BDxA&`YjD9#&l=k>IGDw
z%3zvq1X#A(+WZZu>>HvOGL9dkI(D4MV%@9(Ikfu=c{g8}a6lRdz`}jBn1vQElqO<4
z492|VW}z0HnGU3}?E5#eIh+CIUa#+`MpqqMBDnJ#-9{Y3GRDQy?zR4eBM6179uOO^
zKANXm+bu<6J^_W2l*Ls3Not)Q=-<jRNreYM_{QGO1g(y>_)cc1M<Li+0e`QGv=fZ`
zG%Fp^;s5A~aT!1N^afBBMfaUH6e&<ZL803hb5Kx*;|K^W?UcE-khEtbv#mE6!DdpG
zZ;qugAE<+X!~2?pCp&xcG8Yg3Q*&*745Sf=ZMyT<^!%q~83p+&O*tYeT}>wWTc8`x
z(=?+fk|-60xl2OwI(k3&ZbOEx8~)0{9b^Rg(kic6c-3Gebu%M3Cyph@Y7S+6kka-s
zZbjm>EEz88R{*Tw&+b@0jNob<J#HO%(G3w=WJO<^pY5hlJ-C$Hzd(Jr%|C)LfRLuu
zKAb+~n{sZpFR^$sz^1+uc0(yQaTyE(z>b!HyU-UkA--wkdUK(gt?`wUbAzmlEVG^<
z|F(!~hLCuz(J-dFPXqnTyf5_X{kCPveGt-T#Eqf2J4ga`5wC_%r~zS}N++)Isdx1B
z8+|+;sN;CLD*;3;ansvuHGAjJnAJ}fn*acxIN!vO#2l;(l`3hdq#dyt58NNC-A^In
z?8ZSEKG~Kwjb8LR6N$Xx9va&Tz>ZiXf?Q9!b1^(7;!w*Av#h}w2F}{7g%Tb2?e7_(
zH9G<jRSkC*>(;?}PhAm2p}`(`aQfagMuqUd?6fT?fg@2UK}8H9qNu8@&`*g5uj{6t
zfH7~~x0f+{x>nfG-Q(JvD*Zd}W6e)@3WXOm#jwnMxIF{vRQ~w>krL;{cepcP`A5rS
z-;i<}m5Ni)RV1;2J|p0A!6N><D2i_P*i%+CMl}MuXq`QLmPX^pbReH~aBgfW^X@*L
zQ~KUd4}dq2n@9*}_&mkeKll!`Bgky1vGNS?HXIkeMspr4C2{c(>EWcX&Ueaep&dGz
z2ckbL!NN`OUR?>%>mb*KPiS8PSv@T}M9VJQ>|9ZMu-fg0@{t;FMv=s(>VH|Vgb+;|
zD>Dmfy;Zu+vtYP7+vllNV~e@uOUBa`yicQ>=5R1sz~>b}Dz2<Z<I^$RITKm>Lt_cc
zg&07V(b?u^21#YM%or(Rc_JHCmRbxIS<;Q&HBL&Nuolw9Ax)0|ta1MaR2oRL=832;
zOhbpJkbc$^K`o4}iUg(85GyRwGC<r(hQ{_Z(@j{5K52g37W82H5T(k_-V@snVQR(g
zAR1u<_bp3E2!6ynO0*fiDY->In;EckoH7tl{X%umn>ca8vIN?n*$Rk6ZY`>XKQiWo
zBB-A}pi_LE`0e+px8&DR-dY1sD>i<MV?<ZCe;@5NcZ`3egNiq09tfEI6<5noDLUu$
zDv^(Xf*EV9Q9n?A35z5bt?&T1cWSTD6_bz(C})=gU+3h@6hIMyDu70&`N?K4d#AuK
zFQ@a4auyrqQftH^HIOpj47Mcyd%tUt2rYzI;BWhdMINiW6X-B&YgQ8&1H`5Mf>Eb5
zWR4MShA>UuG%kxRSq!E{TBul|WtrCNz&@IGEYmVVMRwZCgTK3=Nh+r|Sgq#$iZGKY
zRAJ3dA40lDO(QYib!;#DvYM3yQMhVGe;kZ>oWpdk7SB>~b>JZW!ik3>_rB_{bnw!p
zAT+%n2GzzYpB#SsQjqZgWLLzuirT?PAUUgcl*C7rX|uP$v3$L>O5vT;`~dIo4FQ`=
zl=P{^Yro3aV)scs6}yYN-q=Tcn1lHHrj#S&YW^Ghi*QnG!CHt791{Hvz@iTf@y%xZ
z7wDhc*>E{7KOvHmFoW6MA?-sVx$Hilj>+%H$v{!_iYZzje2^-5LnnEvMii}~s-d^+
zB0q}LhgS^A4idi+A7XalMaoDNcw0$CDmhv)b%A1Zu`}7Exl5#^EZBSv2!Y5aOI2xF
zy)!Izq%gVAptryBz%=sdC_%9uD$W|t$PzgxlqIxq>(60I!=YV|!eI)uWHt<u(~K>z
z;M<*oxsWcn)cEBpnluMUo%&&MZcKL1y@94fjSIvdkxA}!tp}dZ+hTf~KPn@)GCiPJ
zff=6lRfKHKDe;I;eSeQiIW1Jnxh<&#5$SY(Sx&e(RkgkMaq9MO&3W|_8~qj2@(Zko
zBbt$p!N#aS#q)Mb9U1v=AJ0{gn{)M{{_R87dNN0i4OWqm%z!qTG$P>I*#+KouwLo-
zU*WRM(H#Sl8E}6`MR*TFXRVv|;vV#Vha#7KazHV};{~AC7itI|D59B%CUtUaQ6ZgC
z2~;(!dlFTHlJ01rDQH)!aSqfCPMIrm)8hZxLem>QJKQ_!_)_%rOpTiAIp6#T9N<h@
zIApN3!KW%d7Kzlrk2~W&lM`STQX*3b9)j|YvhE0eM3vQk{q1No4yfwx!ccK9EzV#B
z&J3*fzL#uOMWSEPkKt;>o`~`PjC<rWVKYHzgv?iV$QhZWriSyfoA>eG(VMp`zX!iY
zM{{I~!ePvI07Fi6PDF(nKGes!snFJ*gUF>Ud_69v-N2t5@qaPw)a9?jKbu?AlkuLl
z9s5MWn{k^B9U&*K6hf*p&PNBasLKDu$>JwwE(Mm^5srlpn{m`>GktCpv%rPs4Z+bd
zvd+i3T9w&f1XN)xKbo3<ai5x6X3FQjI7X1BHS0>71pfo8_dp$RMcGH*h|-kLY<R+P
z$7)js9yGgK69kaxgK3S-SS=_6o2N_QzpR;*Td=pjepLX}9Fk@hsiEY8>f`B6b$HEH
zmuarqQT5sFYR1yun|xiJo#@H;1}w(jDE+Rj#nB~mD;1~i;uCEI#EA<DpxtMsSFq;F
z{pG$C<h;cv>W)-tW4$OpBH0?EVy@cU1F+HBxWL@#YQMWB1-KvxLu9cP@R$AV0M7@!
z9$kcRsMhj$ECz>R9r&%mNZ#u}xaw!j51!?=(u4hyvOw~~=&n-6P{Q;VkDK#yv;8+k
z_VTkFbQO{nJFHe1U8p&HSKP$v!pk*uQ2zbQOx2`}A_=CQ@0_{O*HTMbL907LV<~vy
zZ6c63Od>VQM2sK#Sudg*M=)^r=MMeo?Rws875e`NW$zed3$UbXw{3g3yLa36ZkxMp
z+qP}nwr$(CZTt4%ei3uNJLk;&s967MMMbQYne}Gn`}ppEE}n)(RQoj7!rkHRcAZ2h
zgvfXxbiOs*n{9i6kCpAG*Z=*vr#*_S<o!()kd}#_#19!q61+#G4%?Rl!7$!b&uxtW
zPlPK2S|OB8p0r>II0({}P;bp@IL1G*P>=4p_M!e}dOxpHqq~&W8*uy^{$=fT&?!#I
zqwtw-@GV1Zy$yB<KqnyM{#{P??=OAH&<naq+{hVZMi<xiZ+ycIY0~}z#=k`5l)Dgu
z@>luqy@YPin5f6W2&KD%p2Hb!`&JAf5y@a2!>_Acr&d;+c9Ne5p7~T6)N5e;hl;;P
zNtnVH@d^Ebf(F|)RS>MML|`IDlY-Zp_4czm%D~dr8qv#uo>*3@*Q}=MhLAWjR>UYk
zkZe^ldl(4+hWN`t;H+l~C&_xm++}grIx$@m0u)^r?U+M>KD3DoMeK>8?XH72MQyPC
zJX6D90i+^a#ATi%quhksoDHQ-V9zA{6OuirD(cZLMduf=BIZvZjD|>wRbN~@TB8kY
z=?Fd_U95K_R$WwgSz_?yJD#aiMw(e$%X@@a!=`unfCBWX*Q+>S)1Ge%`r-Ql6Nrtm
zp<^yVL{aV1&Zsd$p^7-uNhKp@BquRl_R0OQLoX@*eo-gz_z9FUDA$q9R(eL6Nxpx7
z<j4|dN@G|4=Mxre=M&svus`h;^)pTO^xxkk{l7`j*#G^^_zyk)KX}mpHu(83dC*7M
zSs%f$007Gj001=qd{aa1|D;S&yRflnvoO)vSo|{z-=Vsz^EwOCclrlPNS+0Wa-N{-
zZJAxdz<E)6S6ifZ#)TEDxB*^_P&y%|UtJ;2=LM&~f3t_hyw&>>tqhWHuTIo2BOgHf
zZ@kk=m5ut&91(vBq}i3_>-c`UwSlcwLIVFTQ>R`1=ngg6JHou)(NRS9sDAr1;sc#T
zs=gG=gP!M637no0i7^uoG0h+MxQr;SV6ccb1Jo8KQn9E|+BQ*WZ0xw2Sr&*_c8%D=
zMgsnn7}We8QdO6T3GQs9HYbw=1X_IQmI#k&C>-&s4uf7-37WWIeNf^CWatoT{AiXQ
zNG~FSW5<Wj-TG|ltWp-VDm|SeH>yx>_e2*0nCQ^No*JPzL5q!ZO-)Tq0`i^|>wsHT
znTS&{%?P2o2S?l!GVLAsl@G?JxB#$$tr-8F&6xd}Z58xg5?2EuIUJtJ(7Tk0em`Gb
z7vc{Cn`7!f&Y<G%6@SonQ9BE4gIg%am7`>N<iBcx&~tC@j`x*mzr1etL-X_p3i<Zj
zdNBc^HK|P`N5Lkjr7n9twtdO(m0;!udio1zb{YG~4}&Ud_h~h<vyiRxh`H*MDvUjT
zQvzip`@m?f<>2h40^j@4o80D_@_YJl?;mkCY4AGGK)_CQ0O&XXA^8^q2^hzooK=aq
z3m*_U7NzE%PqtcX0%42<)C981JUtq<i03H@)S+2Rt6^@^7O*nAS>DBxk3q_HzHgx4
zZ`>QF?2SP`1;u~y#CA){@4k?#bTzKr%_DW#H?m&D%49P<c?h3aKCQj?R7F#dYmKkC
zGG0m*Td!Mh-CkFxbEot@?upHBEUOo^K2-)tV@*cSJYha$U&6L`z{1S(WyD-*$j7o!
zrH*0rpY-zXZr}}JAmll76HN_2;xqJ6d{GeSxEpBWfw<vEjD#;&b41D*teJGZFE{vZ
zXMlJW9r?28hL{2eU1oH=p@B&`?Epva2GE3<6FX!|0vo*VyzH#!qX+X&L}~N9U#*t+
zAIGCPUX1G7)14s<JCQ~|2i*{bI)ld#xBEYJ1)WDuneI_RMCw!4J{0ZQzI;5&@JiyP
z0T;a44kGC(goq(l^rr;aGx!`Ig!vJ+16u|6w)6ig6km!T@?X(p1<88x4~Ex5*ahB)
z=YhTH-8GofL)F;HkBoLJHyt!K0_O$)uut}eTSxZIBcrCTBRcA>mdpRMbDl1o9svnL
zKn(26XEQS@<xNeXD>9O#52euX?7M#6qb_08cQ$k|o4;z&RE=%yW%8b;VZt~ZMzwz5
zX^@XSN}9)vn|Z46vIv{(iynwThP+whaZNQd!QCm&z0_#vQktvFkyB7r*{|ZxNA2PV
zuW6r`c>GsAIhMsTi{<S+s1}NFyw!v`>zau}n*@;iqs$Y^fF&jqT#+%#Z$_IPeHq3L
zubPT}r1KO1sGMKg5W$Se@@YBP^HzBw@SM`2_w}c`98MFbaOd={kLoVR0J3Ah&G?>e
zwFpwJT}0_KtpUN18j<;nfV3`g1@FkLd6p{&-dSKy51Pzy{ipIi(h62_jJz!;J$16G
zq68$bq0=u{x*JUBcPol5-9>odBAPH`l*{!5{2!sX$9!0qW>T+Wtyto=BLxZUGQbas
z<&`n8`a)?)9+OwGGmH4sgjCY`ZVSv60GIp82}ocVH<Ei4PV4%qFrorjg9~4}BJ<fW
z>LUTAebGogGz-+loF)I2@E#p{k(9&twTcN`OoCv<83yTbGby<^-g*%+^HQftuH{pW
zKQyRQ2YxSlWIH{ZT`p|!I5X++Hzky4+R#dt67L!F0^Ll?D8lyK=E_b&fP*I;PmX37
zn;b+*y$A}t4H|+HkPxcFmV7aC(cxGNE#$-O_A=5@bs=bmjM(0Z#FFd$J+BltHrrdP
zm54MX6~sV@2LL58qM%();M5Ja>B9sOD&&aQ^v?$HUV88Xzu`RXK*gk%Vcg?oVFh-q
zio36-cl+NcJ=lnHB1{FBJkUWnL(~6g7O5CzPe2&nSEwQlH5g#erm#-r4AJ?Cs|GU2
z4B-??NJsLRQ5BaVs!k=3Qi_fD)dd<(_4(8ZsYG$TR;6>L6-#A?t&%$}of4S<TavR{
z`B5LWCg?DdsR+R+=brl(FOM5)voWnXyaFl=K%j<#=U0m`?BJUN_~DfJwSi8sB}at-
ziG!dy&Or+89P6`#%8b$%8Q?vd?bIv#z?Wr67x}?Xr6PwlhX!1<DUB+-(r-F)E@HBz
zq|OPcZtCTfI{rO+^m8}&oTi^R)1Y;;I&|fKBXjHsVb{Euxo|lxi`y<VH{alKX=(PH
zJ?609{lIy=zVyaP<p&r_Yaa5+qrb)h*zke_&-rj7RuSh~wD?kEstA*}77^SE1eHC&
z?FL0(2NGCvmQeh#_Ul6j8@%-E&jv$r^d&rgz!K$R0#_%9ecS{>!o2+jg0uqDK3?G(
z!vZhTdbFtxjlalsa&tO1*`B#8%52?>E_FM2>B8zVYQ*d;tt3%emgejYO?Q-52s$=7
z2eh7>4y*>)#%?oZ#Hb1W9M6a~vm$<CfeGZnb2biZ%6#iwj47;gWEKzU%CUZ|i~uRO
z!8RHJ_Mte_2E(0v;p2p>7)>I`<ifu&du@&-v6mPh>DXbyzn^MOg0|Y5kH-&c1nH|F
z>Hht;r*=;y{h>Okp=MCH^}&F>L{*Q}%JsJUN-^fums+pkEl%E#T=y!Q>Ejyt$F}~0
zP8v$^!{M)l!+M?{R~$!|yMpg-kiM1}@@>elm==uSkH7C>YBU}<*CmAXNI*JVxRzj0
zbcDVbE%5+@k772hL<PW~n%q(FOW#BDksCaw$t1k;V(=YuH}$zc3W-`_R!W{ZBS3CN
zkjP;RiWL^lg0q+-eF5>etzmiGr)m3LHI`~b{2n^Ef-uQ&PC8&B{o8TW%{;Vbf7bW=
z24tXQ^m*{YW8!iV3JD>vamFL<t@1k3@)A@P>&+=b3;5tk1HTkGyVC3D?-VOX4HBW>
zctSq2<yjV!ym>Iui+g<HwO9G7Z`JYfoKM{6c9fA|Aplab^~H6m2N-~zg3Fo+%4=uG
zo=2~8!do2rP~*^`lQyVYp{`BklCxTunPuwtXPi80Kxx8t)x3od?Yodn5SB!1bx<em
zvs(zd5%NlF215S~iH@SPEfs-&TQO_BRvi<u9vjo?p=KZdwek&-ry52SHU(uf=Ff!g
z$ds@SXbDN+zv0Ojm&zI##DbvZmxuX4@{ECN-Px;!k<ikWA?t@W_kzs|$l$K+rK&=;
zRt)q`cgy?;yV~L#)Z`zhG&ijc4@KIEoqG~f{={;YB5;@r*6H(zPzANqoVuZD+#|B-
zWjB#ya7_vb!__~nk$>nR;s0r{*^i5%R9NBfNu$zW-f}{ZQ0Q#0sLA)>P`Z4kYf!l&
zq*F8;=*F7^K-FWdmivlBV0j?OBF=W>Y}+cb7okst|4`f2ca$coP)chqv7>C(pJn6K
zc~Vk3(K*!%!LqxxXqk|wSsL%7gmf;7*p+gJ+attRn`Es}=itr@lt{!{TPaYKovk3^
zp1laT&sMT~c3lvouv)IEl_I8{8du1hvP%!lz{R%$=qK2scO~D^7Fr}!y8ggOXGSiY
zw*E-Tad3U9`hzVS_w?!)CAUk|*vjsZg@Uu?IKz(Ra*36wM!jGv`;}C%g05|Q<?AUx
zqKMDGMJW-+FEJ02j+XmcoQ@uRULrGu&1RGDZ*nrUp<lrWl&#VnY%L^$Ow^=y54M(2
zK#W7}*r;5xgZmSfjRib~&4&(xSLhpQ%owpN^*zuv(47>%vrTJhwin$i90b<m5QiI|
zpOhF4omw@I#@wNNDVr;)kibzrc8faZ?x16<eblKs8?<7z74qR)e|w<By0+s2fIqP{
zV~vgTsZ2%vcx-Y-JFoneXUiAfSmC-DSCnO|Q#t?e_+^3<RUU}tMNN61HbF7CS!tv3
zqtv^ey2)kPa=1ICk+1nxaaWWsVGu={bxT>bU3uUm{oUoWF}u1PF>rW$#{mbs?!j>^
z2DscPT4cP6&~%B_YSjKpjB@a9_EgerK70pS$F~Tm-a6P>9lfyTqRI65zBYDV!~Ja5
z>UxjLOAu(Lc1HA+tdC(b2UHN%$9ZEltnENQ?+DlGHVW0Sr#pa-FJ{e9PGl66?$aL3
zFc4uqC|Gl@uM*>NYOIkZ+*<~x;P;WUiw#~D1xX3iq1RNy>-sA1&=ncWV1CT0Bx~da
z>H6kt|2E$tg0dz=hx`??DK~|z)UXVoVug6e&g<DpLSZpzCtazy`!b~j;HSj0;w<y7
z#$i%0q{wpHEOxhi88?H!f3b;MYe8`xlqf!^|HTtmB2up1NE?$Vv9k)w*Xj_(;I;JF
zjba6$2HT_Juf5}6KkgZI$@KE6skxmIo$u(Gdr^KkYR_hed+Qvl3oh~$#Fh37uiMDL
z_w<Y+g7&8KvtOAOw!fsq$DDrnJ%{=0_LKjOw8Ldr?d#ZA`l}mw1^cxdp(yY>XlBG(
z_{K_rJNkhd)$Jzq*2}O}jrX3lD{abcets$4d49f`^YYX*T1(BV+_cHv*rB!hTrT37
zJOd*Ohc`e!+NIcC`y2kh&f>3CjJzlQkSK~p0RSlf7uUUiao4-l@U&lNnfqRULkZbq
ztNW#zbddaV!BJZNmNs#Sr2WIbqnXSH6cg2xjHTjNlfNU*{#@1cA?A~-V|;vAYi+|7
zBJ>^9dv3M{7zu`7(ISoK9)^Dwbm`ZN1&Iu{Ko|@k_$4F1bp7Pkeq%eZB@N<^8-8<k
zM$#^s2j3^P>Y5~-C+M`|icrJ4!e7TK5OyH!k~#Dz=V8uSh&*t(ZUz}r0+!IXZBWgn
zwiKJCnKR;(a%?4mRt2MwDjsO009m^(_7?={QB{b-QSd}$k?qd?464OZF>+pIsR<Sh
zyy`&#4wk(M9<2|O$8eC~`C)kPV0n4?M_NQ3NQi5fB=YvCJg?ss<o<7m^a4{VnWrbC
zdQ~z%NKs6OJcEwnw~NzO2hvj}6Q-QcRqhYKRBuwRw6GX<XeT^3XeUfiXfNE&8fzCE
zve{-ZN|{yiIuMvm{la3n-_}^Jn38MBmMo!0d&0z)M}}M@sIlkd%kc2r0e$J-nq8is
z{jb~AcTRDxKxr;sY)1IGtAfOS)O;Ii3p^3e$~uM#Bt23<Ok9AhK%)f+#3NYjUb(Lq
zt)qm}`SjUiol~A-h$k9=1_KMeqXb!yDaZ1Ci2yWGf&ewi#9b0spt0_gf^1KJd}aaY
zhL91YumDj!S|IM^S$)AmWC=x)5UCoNKInYhBhVN4!vYk0(u-|4oHU!Z*-vnM3w%Z*
zBv?>2jNC8~`XjF)p9+^RdGx+eyu(W&6o`2rN#H+hA*8so>;$g{cQ|u^#!#7-lF5Rj
zZ|-*50W}rdYB({OW(9FFBo4^yN$5pu%o=Lhfc>NTbY_k67_Vx8b0VLk;hZvspkk2Z
z@96RS;C(@C1pYMfkFmq!K6Ub90Se4W?jng|K}e38iGb;|B0XwmW&x!!8B1&I3-%H~
z`~n1vJHwftm4DCdo`{9X!To?bi9{?r`bsFyAtZf85k9nn;(=BagpqXFo2)6F*uyZ|
z1Y_lc1DAu<2hs7-VTLq;XaV@lsf#6OXz=lOB*lGF`*g^slX3x?Bb<~T_3yLMF_<w1
zdeWKP9#)-HkmU*&4kWg*D#Y=Lh|dM+HN)M#gCT30{6JLA;0z^f0nms9;x&pco!5Wq
z9Ul7w#EZ!Bpqk(^!UWS@enKBC;Q-p>9MXX2jvt1dYm8wVtr-p~hj8BzNle<s30P(Y
z)(6~pgRhyvP#lE*TRt4sK@jK|rVLt?4S%sTTU-KbCq@7oDF6Wfxv+Uzq*5<p7Y-nq
z0IcUKM~ct@4ImfOY&_Brpd&LU^@$^xm+N~3OornE6`rV)9)v^J$WL!58ek?pa4BUT
zA|w*|DohS63>X6Y3y%Co2c`=@Q&LQMN1_~LWbmj(9&M-&<M<8)26z-0l^*N0D%wPv
zY=Ia+fB~y;p?rV?U<DP=2P7m2ACDF&s?o(4<}{6In7@+7H8cZLq2roQ3b}_19{t2h
zAOjZM0j$^Ek|7jB$N*fw#sta>z<Y-s8W1!qS{Y(k>2WWFT+aaPC43L%f|?Henh7gi
z)9EQt>RBx_)0y}B^W*;g()nBB`)m4W>-YM@$ALw?^I8ZayQ$~<-eS(?#s>&GFY7&R
z<`mvX^<F<-(Qggu^!4IM!H>At9w&P*50GRI+ZnFF-8?GLAIB7tTT|eDn0B}K&+}i~
zP3ba^)E14PxItbg#g&uyth^r&RqtJ$tDtF-BFV?w-5%U8>o<3kgW9xPa9P=n0p}Uq
zmyglw6OJ48#UkMA#n>1+gQ5jG=!9Z?_mPtw`#Z1E)n86dE9d&<-Np<;Fg9p^cBE$3
z-gh|T=nVyPKDH2RE{g8!i*Am3Fz-UPJwM>AFuEk(@Inx}+82g04R)D7?2ed{5l<i;
znH)d@ig%qWjVk<BXAbF|J!}l1QC5b~pj`8XaKpFrBa`0n23^9>)#p#Zy!(7E@AkOF
z9nzhy)2-jQ!%en+df!aS^UDQ)=V)m;Ot)m=UkDsn)zksO`%Rhq$wxNMk61Qs_a~ko
zTpAlTOe>DJt(=Z0rO}2qI<1(qubI}P=Vf8=tj`Gs$_P+EtCRZfiT9lgcb4R1dU453
zHg^`<?)jBJsUi8A@2rw*=!^Zb&>HPIp*ss>$LZVduSRf^L9~0|GfGx%m>61Tm7{OY
zz*6Ek5o5A)vk8*xYeBalKo%VQj>L0U049T(RToPfjwA#{@f_r&{W6|`2gCP^;o<Q`
zd>KGB>W+rfCPTgkN(kYZ<$+y){T)#2mm-wct8cJ@5H7!PuO#vb;c+;K7@nkHYBGvB
zx-%^|KSk|ref;F5RsZy_N&>mlt&v&?;zt>jh|7->W~I}$=s3`<a00^t?uEXp8TAzt
zH<F&xxq{_M!eDM~ONXEym1PT90soc}OyXldX*XgSz#p|I@Df-}7a&L#g=xc>)3y0E
zhY>2BS*1&u35u6rK^<Ad2M+E_1tmTa!4_*Nev7{@{Y#?EB|Ly0h304((f~g>7QWP{
z`u97LWGT}*l3q9KglfN8UtkPF&<(s0kxtxPrUMWp6=}Q&2qa~JM6@+|@gp5(Kh=<2
zuQzFlN-qqEm24}JE~IJzN3y}suxHN(To7X-ncgObf|JmLoiMS36B!$!Y<8&y7j--g
zKS_u5jwW28eKGKeIQs|(xbh{87{56k9CIqKT1qAJ6kXR}+ba4X8%xWqjEN7M?&v@e
z4`(79_6tm+3(Lx5lk`j`7M7H^c8OqV`{vcrb(1Ll6qg7yFgFR^`5#ZN;{G!#1qQTv
z!sJp+<iuKC$-AkgTB>;t*a{sujl5%Oc2F!FpA9!z%9qReV2kp<E*z*eMzdSj6wy?4
zzY-S@d|qw?jfJ%WgEFwQ-V@>V44cK#^1EonveszdS#WY9^{dcdpb)G2+ZhBLbQ(uB
zz8?SLt~)G6js)Uxyi87!5~wzMjgMJVw&?kpV-lHJm(3q+#j0tJNbGdL6ZZ*aZ{fbD
z2ye6cVH?eHIGC*4*tuLiCl)OL;Ky`Gg{E%Bt_mivDjNJzrveNfk%UI_@f<VV@#po0
ze@-b25*)CQE`(7;9S79@rUEJPI=bsricj*wLioL^5&$%YOkbdsClh(<*T`a8Xv7$%
z`Qn_OS!*3!+`yHF78{rb;JDY|i2RDT&fmEkz<+iIL{WHaqyGoAA+P#;cxN?O5$-x?
zBjtfNj6m^=upx!aC2_*qtB;@eIKRq&LR@1*>h(3!(-By{MbY^bm!=qnU3()muEEri
zfOxZZ{F-p*Afhsw&G&h+wm9hKRBd0iF0-u<<ohF5m<qYOrYN2C{qu+gKNaN-+96fC
zU8n0C;I19bQ*G2Od62#UGsk*lO!!)N2Ie4+d@ef`q5xm5@i26*?&&}fqkQX6p7a*j
zIe>m6b+$M+T7r8WU_cLzI57g*gSlOWG0RLlm(Thieg2x0pqgqY`!Oq<_NsJM--@7$
zK_l`Z;U#H?AG2q4g0-i*;4_p$A+m$vtik%tEwSaBPFJnE^=1ZS)Uw&01->^uhyA2K
z@qgqB395p7ri;;7rz^C{Y__ZB?8cZS=WzGt(<<zAm0HQu8i7_Xe^(sC@YG!`6&Q0E
zn#3D4F)#GIv}o!rhTsO?*XrcQc++!u@^F?i=qPnaTc945;LuUr$1%|)hQeWFooTGl
zw2?7vp1G}&F&s^g1(-K}_|o>zm7GZa2AG>11jMLONwSX@-HTG1817Sf2~Ec`Y#kBg
zhrySXQd_3jAb&(fZt)bQtZGRH?q>k+hy+*4=q#y~Cr(_wtg;O0u$Kcr{GGgP%uc&~
z0OZ<~?#;P+sYItPeeow!f;_1uxFuOcjqfs#?8T>Et+ad%g5P;v0^;llK;Ep!RR>=m
zr4+Qq!jzepJPjG7!hLwKQ^VcxgjL5Vr&;@9WUwSs__gDaengFCm3xFp7Ef_x7=5Lz
zD((U={gk)>T8v45#MILv@By*x)GU?%BVTup&Qfn!%gJ^e21kGtbi8U4JfEETw$`i8
z4MUF^e777-jz8P3iR(lky}vSE6vp2<iC<9?)z+XcR-#1{H^z>?e568ms7)C>+)S?q
zrGzypKd?y{rg)*ofllH!&5d^On4`R3*oiJFUa)?>cw1r-jCTQ8ClL^46knURT->9P
zAE6qn$`PSqh2p^QxLI7rsqkQXfEhG-Qy5j_kO}_5Vds5o^>uLZhVw4yr@!G@TeUJq
ziQT@nrdoFhuDyb%sQV56)S;}x7)@fsMjJ0~9*b|SQ=D$OsAb%E>(}YuftO)PcyPcy
zu@Ms|H=Uv-Gx=++xJ9t(;=UofsZ)vIOMOGZ6cb!n<}wokxQ(G)j+KexgD)w(NI66}
z7qlIFNSNer)#jd7g}g=nJB=aifqdBCSGqzU$X1u`%D1X1xbqE&TW_*<E!`lK(<aQN
zwJ8pC2WuzwV*K##`A3TCoSK>WT1e<Iud*)zO=81jbkyKRX#*k47_vb4CF8)xK(SaQ
z*(*7UI%!jB!k5Q3fjwY!?eu2F`kcOizZONKE0QIbl8n<54_ZNHYDedeki6sfd5fWP
zjiRM{R+{7;*rXB`i3C*-CPyesEp=rST|9w`XG-h^Q-YLUbSO=~Di%kBv0z-}$SH>8
zIcOjtTZ^k9U4ppGQ@_aLN)S{rg~FKkm<vYb(D+9v48sOGi%jPJR3YW3mB%KcHM+=6
zrEZ{*n0b#DSD<-RIt^~fDAy;t*UNV|FUKwp1{97IoHwVvHI-~z{oYx^BMZ6yyI5)7
zyk4H**yIHpb?*qzQ2+b+_N3@A3O1x#Ygd)#=*tBYCl8jP<;Xg|a}ze~RV`irJq=4}
zV-zOBM4@du?uxqH1k1T;yIk{@UO*0!&+C(7CYykYwVDH!5+EZ@EY&s7=y8g=E|}9}
zMpUxc=j1Zckk6BD4jVbKvY^qOJ{z!T$x1$4QpVbndea^k{n~Z2&7J6s?CeVDO^aG8
zO};g?smDLI1&B8im}8zwl?i%v=Mvk|3s8oHQf7{n$V(+7pE}A!UOlQfWuEwsLD|Kn
zPT3lv1R2JG19e)a%-_r9XciSR)A<*dE(5A<1et&Xyg|-R@Vx36F5bk8z}3!E4|8UF
zWZkV`^Y<L5$AAG}Fz_i~4jI?>p-Td@G19b1#d=~Uvh;bg!M#7vSD8Q05n|3(-47El
z#Vubma_Qx5ax`vojR>THfF(iCgHbWqKAr@8Za&GCAKs7enIEOdD<zb&7ui{!x6~ut
zwfN*wxWz1cNTY-C399sw?=l<J^7q_2cv6^xQSdscLfQD0g1-daXg#CT<I~4wv~vG_
z@6O(t*~@(RGVSzsm&<3F9Q!G_ACm<Ap=vbzgPXD!kd)Rty?+`Z!8IwF$8eI8b7BR}
zQC}gr2Gua1f0fcc6sV;b50bp(U#5}GxUCzF+z-8TyFT|nBjSg|;@3_CIV_azs1I}6
zK%Y=l3H;qw<4?$&Q>|+p?6-wU#+7tQ73U{Db22X@(X|MLB1EopZXolkRp#Cw=r1Sd
zPa{u6AyAh2GFj8A$GpFnEK3OFhe&vg{cy1dy@JC|KlL|Zio&K<15V0M64D|9p>5p>
zFqz6KAW~1!$|!ho5ov#pS;Em>PvKdz#1ST}St=Op6(K)5<4BT|yikxCx1eVvMB}E&
z-sTIT8E^I%nb!U9qiJe$f^CeJ6`&R_UCjQKZhQHcLh(Yc7!gwh?s8kaj?&12nzYex
zASK13sn#ZfP=*D~S^qP=EaY$IV9m0ry}!c(Wcml2A7j-v1kG#f6v_(vq230JjLr=1
z-7?tkQh?J};I|}U)_@-0Hz(67Z@;1opUrwDIO(1Z1`TQZW5zd=s$o;KmKlry_HZXt
zm#40~=`D<!gu}Et-=Q*5uWi7!@2~@>(`sI{Ej_eRg}>vIo`aeFIYk!wwZ3I2TNa_h
z&^$Nwy1UB;yR2+&KCo5gSM|EBn@*M+*w|RqFSfBB11#MElHBXLwJ7J-(2_*Gub<2t
z$#vvsMUBi0OlrNgd3spPJ(xBgZv`J^Xs5!P{U)NLAJi4sj@;!k0=;m@r<dMUOmrhy
zY*^F`IADR`3~ENk|2PqlbPfC9J?1~JZ`=$VOXHtt0_>`kJ<rW3IJ%(V>y(i3puKc_
z*?alR+^l~N@gMLpe%e9p3;iHpGZ2Py1Fbz|wI@=LBN@e}A4-kAi93k^w&8QOpnV*O
zZGNP?-ot1~8Uu==>swVm%voeln$A%0;JIpl+3B0a^Uz0lqMf}$q(Ow}vF5h**ZdbE
z-iJew!g(8DkJJD+lkbMx@BgZNwPp*P;{JGcll(0F|6chr)c$uzmw)BjeFNbPcXx9n
z87VV0G7&06O))pVb0By`Y7h7ip547vZ&V>ae%%s3?>PRs?emY3%>MwLk*FS@CyX+@
z{fSa+q~$PHazULsimb;e@2`h7amD3GKSKe@qBtL6UU;`@kCiem+%rHSamv$e|LM%w
zb=nK7V(JukYgOIT()sx@9~^oM`oRs(y5Dz?qcZ*gk4HfV-6&(o1H>riV}=htW>1st
z$|NANmW&*%alqv#AgJNzc1&8@lv9mfZPs7j3$a5_y@Qa!R{#~3Va{vz>$oNo8ScY<
zgb}pXhmPAo3@0R}pZ@Rroa<$g6A~EE92shkt<TY_SbHD1r7DNLMR*0*U0qUfprEx}
z1|=phDur}xG6MPJW#ZUf`|XPhSCo7O!F0SFh4VfX*79M*(^*W;Ys)frGOkK1Ppf<K
zH~k0!xgr!NO$!Xl)6uD-Fz?4`A&w#BL2d-2Be*Xce+&FT)bZLpK?oZ@24w}h`quz~
z=g}RxeqoExe%7*50vp5^?s~Ei2BCL2??RS*YzE&Q{_vYasa|q-+r&XTq8{q<Et*Jk
zASk_YK;58nI1L^~?n|>XYzs2<R!gZEEReo#5=!gW6CD{1sD`TYjq-I`IQiC@aBsrK
zIwjvsp-wB~-sws!lp;=_J(h@DIEg7j=RnE))%j#^wQ*74%deqER43lVPZjbNG{S}c
zUw&R?Sj-FgF*XV;wHh)tb`MWW0duf!r`ExCHdn3PxG?W_bPmfU?9;mT>jc&CQJsYT
zb*O^a`D#Qs>nxR1l8494v|RRyJvv%HBW{Ox-FLe8$y8L?95avfr14H}R@D~Pvtrnn
z58St_YY!c8Z+|!=b3dU|y)W{(1w4&X9hQW>&5CiCGisR|y}j|HsUMCd9*ow&h&~H5
zwb~ekyDHnyzFISjj?9LNqIpcu+vr~l{hubTUWN{ue6!Xt9QZSsb1zNJ*G^{E?DpfW
zH5FK4@)LL~uWFob6^uAgXp4vKkP3tVl-Q3U<*0@YwWXpbf1mnc56YxA*5LltG~1js
zLExpHrmWvMl%Gb_CYsQy!mT5w{2o?J8<1I@uwUJ1$b=<9*UJvit}DEBeLBm^wQ__q
zcMjCWc32?xQX>hUua_Er;&@vk{tD}2stn^n?=HG6;G9}$z@wQt-lIKT%6}vBr14VI
zLN1aSt4f{fl(6)!eOQ@znkc=m${@W}5FWM0-g`Y<;7BxMGQEtvqS>NLYiQ~<{X}oY
z7#co8f8VCHzJELZ^<QJl@CNdL>JK4j6y$$H^Z4hC9ED!1H9mySdsHGj-;gx|`EpWj
zL=~)Z2*Pv;=_S4B+a{ysHO*mux$n;Uru`gJ#WE5DC#S7+R_md!LjW4xs<C{u_l>@X
zqoe!c^YT;ll_Q9BBtw+S9scs{6qOVu7UeY;I!Y)A+#bFVut($~JVf@YL{V8R$=tZ#
zW;J9?LhhhM=r~TH{k7mXB@}EoM52bd3@0uYG%yBvd_Bh?63_wyd2ogVEs_Xky7xgH
z`KO{tH2jxT#Rk%+hqH3Cy@o6X<vLSKi0+Y?N~U@efwgKE6qG2t%r@sXt&N30N=sW6
zw-7gmf{Xa|C)$DYrAsR}O2QR9nAd)fTfJd3*_*kQkMiGMJQ6dj(e%yQQm>alHFrZm
z(%HO*=AJ{uxQuabtYL?p-#~zYg<hj~xPEQ|n&!IH;wAPMZ6-VTx2YGD3KY6qXEHeP
zaf66Vc7Hxw{~m5VBoy*s5;)otFkoqdJzF&C=yv4JTB<fgs$vX1`$Ok&65LKS{^6t>
zu$4zkwCx5w6`<B-`_(tT17t|SV2rj=d)<o#(E_R4rCKwx$eN@c+Y^se+8zcyINwZ>
z`4ZcX=k1=XG5RfjeQyFM9v#pSqr_lqP6z00MxEZ0YtmwIVX+6w&gapISuHrgI7aIB
zf%s02EhFs4waPUECS2}<S)t;s0&31;C8<l3>cm<|U{v<*$5Et(>*;^l*IO6f5JLJP
zt<({5?f0064sx7zy0{p8@^u{{G=E-gTLag03;*=O>b52dwa)#XoKsV%GBx5qsLEcM
z1FwAce2(W>&HG<}xmiWVnM6Msk>zI*|Ff+4|9Lb2tIX&F@V%pxjj+6ffWXPj)7`>W
zOx)N){2xpUP5e~of5?yN-yn1JKYyG0AA{)sDO~EG5;Z#iu3PPiB6uECiXVUy291lh
zuZgh`VeS)?NAYVov8q+7MQ-kFr8F&W!ubooK3B3xwSa)-#U_z$C^?=jl%7fK*MTJO
z6s^kNsaE7Z9*)yy^RTLS_mLaTjHh70d7g|vXrr0g*x?q-FZPNdVWa?n0vDxt=*r>x
z!X!=qAw>ztM@Nj$Y1WBLgrqR4wZI);<mgdI>(8L!FTk=Jgo%o3_4_S@QDaRo&SV3q
z%Q1~4Ei|Ij>!{(QjscA%4|po5;81juMGcGMg)t2@aowgx_poG6F-ejqq+vQr)_U}N
zNFrx#U{KBYtZY_=3hfcaT$ZA=*ltM$l-Yv)QDqw0!8$=aQouKd^{%Svg|-AJ?Ht8O
zl1_}-j8PSB^>|ux%q__Wie&l$Rkk*Ou1Ievfj@0N1Q5(F@-goK8SE4~9(uIV2ndb7
zUI}Fve}y%HHk>YS?VuX7K#^D?CW4}3I)TFI43;5YoqB+RrUfD%hw;10VPM|v!_j>7
zY=&;28P-skuq=s?IIz%Sz^BQ18MX%-#tqoU9oO3AhV})8OdqO~hehusK1XB*cpj+A
zt~Y|W6&KvfFfF`B&EpC8Id`riHBha-?VRH#LzlLsB5d8(dg(&1w18=miz=djHV1nn
zHj2?MXCEdTC^?64K*#*?nb!t*Tf(RN+M26kncCFZA5PU%$y_$e2644)yt+}J->TXB
z8a8AfR_y%Vdcd-Mz(f}yD#Z)H=v!xiW9MtucJyY;G}dYcHx~T5v@I;C&Jx0Kj4e1m
zX22c`33VQA*U$WJBFXr8E$13I8-5XPM8En^NB0}p;pUzx0Od*=bnEj+7wZZw+kxuD
z0X8jCJ+b~B)0?}MG4eTln>QO#v;&v(&B8BB{tMNq;5$Ek*(E!$g_g+UO#*q&pn6|8
z*){qOKxT7<2+!}v2RF~DEp^Lz=k)0-i*u88uX6{_YJKvQufBvmMD$C=nqNomy_+X^
z)2WE2@7&M6Y+lbabQn$+NTfzC=_%vJaRs}KGXc{BkPEgq2oGN{G1DuwD5Hb*qUb=F
zhoL+b1E9!=*=fj5X3~7&htBK7Hh7)L0wf*+Aer@+i3pzX2eMm^YT?s?TSEi)96xW!
zZV|eDj~)T56GaG~VH;R*J;huVYoz3{Vx@Q|FXicn%uEO4WpeF^iHa(!)_l74D<q>Z
z=La-wmi&0)#taL?9G>JYPX1O(tFLf2>NJX2<vT8@JD%6U$yaoCi^eR==&ZoXb@DJX
zfG03A-kq8QS`<=N^%IHNN~iJewWZcDKLsT~_5ix`!neNk2wFG~NCH1yL=>%{@UAAo
z=X<o!gV$xmJ*+e|RYg;FU24;-H<P1l*Ei}BRhukNtjqTq-cnF4A$tgZ@}@gf3VCzY
zQALMz5_FMv=Bdke4z2wo?2cblq<`!u9zi1ft9t$aVp{%b8jnoYv_E4(2)cen<s5}I
zARj0=&LHh%Q1QVgQdm96XT<^+w2`nFV%eq3{Cci3_yf^|KViVo^jP7fT&=ZwS&pT_
zPpf4af8!YIYwP}gnLO2ai~A7>;7md|ZLgCt;2mxXcEq7RAhrf%-wHzNi;^NLbVp-E
z4MVKYzN;u$n$pXW779}5PdEO7xNtZbuD2tU4|;=By-U3!fMQ%D9T*W$-G_3tEAR8d
zj#>`W2T^ppZiWdqtJp(2fkxqiSOmcUOBkYE2LKMv=Fym#dm|8~*o)IHQX=B?Jm-?B
z)1aDSB=%A_)rav4;wNbrPNiPxeEHM;HXT&?lSZR%d$%@~>m(;_9@|N6>(c($yc|w;
znammd)!Glm&k?P^JVX%5U?n}dGVSy7S1fVmBGQ~GQdJ!%L>{#yI{yQOJmx8N3M3!h
zM2(ikYq-ygCUH9P1OsBP5kVLQ3S8_<=%xCkP1u9}S5X9t$T&4Ip=d3Ss@X%@)t{<3
zf0Cc@)Xz?{i4!!?0I|<)Z(-ku@oR|&@H#lQ#D(}bB;fJ<qFv@#H`WnR90ZLU`i=Fa
zykNZzO*)7sL(Ome6NZykwA+IYQ#6BJl&yUm(qFfRI1_i6VFBlNa{JG7J&q5Dxn?j=
zT+(N{3B4Y;QipM@KhVuf(=kxd9q~r#O>MnF40G)c7(e>6d!sqFD79?Xw8w&3hv5>2
z>0Qrtf_LcQqJms3z5|_wV;FQZyyJF3;Z@@RcPez0hj7kU6UTQ2(vIxuZK8=|;Jteu
zW)YAw@8)K#72_zd*B8v?WsbK{g*%rhmWPI5*XY#u9I4HgE5-RFW4rOgEbbh#BNng9
zBE#;h(fig3>xYLI94m}%>6v1)sbikl)`C{4_o}R=2}^}_Ud@KQZsqx?%h!%$`E5ad
zMj4UsnVBk6-Lt3u(kaa4Zl!rUTH9&o)Gp(=rIU<YwS$EXLT+wL6Nj#1NNyo>2b$A)
z2Bik!V|X4$_n+-g!>YuzZ$kdK@ibe^+k(5b=?&tf%YM^^WYLr#&Ne|jYg)Ozd0n1h
zA39O-<~eAQb^a~t4>?8VVd^AsZueF+R=R5gx>{eL$N(pi%%Y&AaM$Gbo~4gsmYtb9
zR$PKFVw|lsT0M_3n%3XG_++oe{5^N{`l?zKy;+t6nHf=_zmrBM1FZZ48}BZ3$8mt{
zdBF<v43+g5urCp7hpU+LiC$ZFst+pW#_(p7rtmxAGw86t)l`)QmmKz-@mkTK%A}Ba
zG@A}LUm><NPmTuaig80E>3)K8qwB(Pm<cNCI_YZVW?ZW|zfdVltfTMTsiA>FOrq7S
z{qG$|(Uyx{GEXsjzCu+yZ!Y(?Q|VkdD`vFjk@<qWo%mvPs7Q*%a_VT|HqJcDpr)z%
zNgS{rc!vMjW4Qz?$Dw9j@gV{I>7H|tT2s}&)9VP%4vBcHL`uPU>b1$R<29K+58>BL
zB~|;L=8->7T5}xDxrazSt%24R7E;-^j9sa8Q>TXj&b;e*xqpHT*$~-7R$DYmqz4m&
zsbja3gQ_`l8#)GSrti3gH{0F<%`kn$9Uf=FaO>d7(N)6p3fWu!@jDaT=^dVX!>QCU
zv=`Osuf=Sm@5`>?Fz<g1laaQG76d;vBh}CPr?SR>j*QU!tFjTo#^LtX`RPYdp%s-J
z9hI4i`oE$Ive*&OzZZ@F?@1Wk|GsL~HPW>({$I?(7&aMu|C>Za{j>fFl<_~dHPrt1
z&wqI^9{>?nkzdXTM9e(&)bwQB|4|7CCjbBFZl`kXeKkLsClL++fZ|^r>Oa5zUvt7b
zl`XB;L=nEGsxe5kbMpA4+r%xa5;cYk{^DR`9v7TBs99b(u7s~PE=iD=y=_}NS@wWn
zjVN(+32tS&9;H4{-bjIO`B080?!hy{qF--+e?2wN4swbb!Q{n-o-+A_#(mc)`q$4e
zmX-ms2?5s1mEaqpD#%b_<Hz(uxs3hTNvniJ{GOps$?Ni~V&^gknRWyAskQ^OZv!G=
zrlK&id5BPsx%UHnPpXp#MvobDRkfjz2a~8WM(gl3<&&r2+cFR9Lm3=T^zDNuGVKN0
ze(Wo4<|#iAAW$2ktbF+tun&EMDq(SBtQ<e<w`tL!0Y~yIDbvGW?63KY#c~B><ffJL
zQZtXa1`!~)=V@}QJqL9nAmO6p_q&Xq<(bml^J^plD*;robg%FWK(PWpQ|`8h!k?)a
z6Ik&8>vJ$>n=wX4k{We64N_%FWj{~}ythmDWei42QT^T1pIE3CXwW3^3sZUUPopoD
z66KGRDm%JqE#J7eBFDZR-TMNE*&ZF!z&g5d#7qVn{D4+Qs!EUX^%{I{_&zxpYujBB
z*jL7}3I@9%@<cxqzOJAwP$f{-PesgyxgBW5svXi`%u5#KK9Bo2$?v_ejvC2rj1{=K
z){J{A*Uf(6Kq18}b9u-V`gxP4!5#`cwE|fMIpmLFqWSsA>Je~_+q3-)8>wa@dDeZE
zjLiU<VSqE(+{u%%C|z7HB9EqcEI&Ez^`I@xHxw$u^S+Cky464zQ)zUN6&|4&T`ds$
z;~(%UQ~<0Pb^ex{jW8VDRHk7gMV>s&RIFvkN-*_ceu8u@Ln~Q>faHDAF1;tBTm4td
z|F0yixIlTLD5Sfd05T2=*YR&=Sa-kQcKe>2c7kkoBY#C6vjQ9APKoA48j;APL(XNo
zTyCXhYrzspf72REc4DZdE4=F_SfWw)3F|Ke-_SsKIe2Mg$*wsfUo1M!vo>mI9P4-p
z4MqKOQ68#+b;#nEwhb}hbjUtk;vfzkVGeTJ#8tuBH;Es?0=+<4sJTML>2LLbT>Ej!
zh%c=|hIo}z(59AxYzmW}>AKyUfgVvhkouX)INdZr(v?n6V1nB{L96hQ+^b+VFIP(_
zRK#*pc*Js9hbF_Kue8}%sC1Udzz^B@i+^MR*FbLICO~`!haYwB7Vm_0CJm6bHt4|+
zMSa1IqOen}&oplaUx=q#yub4ndRej>+=p6xp~H?_iAn#iqGIopf5bi~4W7*yd%JP5
zxj{9A#c{(MKhyfCb#?8xjm&>svAGe_32i%avS#Ez6=+4U2bCOFfVBK3f}wc@y$IBV
z$=e6oc0=rH^cyYC$biv(f-&Fx$}KYuXFAt?1rF<MQ7F1QTb3To#tq?q%G63$Sg!Hx
zDQ2L`mwH$WIhFbj&fDRJ%sQ@dZm70VBKYO;SqpjOl$VI<PrI{g0ml=O(b(=KS@>GO
z1Wzy=_COp)r=Y!pg!utA0a0|}!r12zSm4tMNb-pO57|Ku{f&gG3(1iAy-m+REXG#>
z1uYG{U<=7I^QH;+0RLihr>gyBx;H*bN3D#vyVj1v>$gcy<9B>}!LAEioBERZ5VP|5
zJreHMKR^>to1Bj;exk81;Qt^Z|IfIW_YUDzOG>heVxv^jl4D|0rGLdIC8j4Nl**K5
zDkBf&Wp4zPV^We*;^E>0M~O~lN+%>HCMB1I7{Nh2xHA1LA0Hlk$;lXhx0cl95dWe;
zz4(Q7aDf#`ifNvX1>Yn?s|q+4_HU_60_@!G5z;Bp%=yv&`N1Bx36zqb8Hp-j8y^%D
zeHlQR7d=JoLi*vs{t4327rO*NE-^JZLm@2=$~GoDyciojA}Hn`q>?Smo&xEgRs!7*
zGx&d%ApZFcB~jBlUHs>U@<}N?8j1V5QdInl>=boS!cU;5??JRx4N+y{X$O>ALZkf5
z`<hCYl^aZ6BI$C|b!#=%b(yM~)CTmg93IKGAymZqxwChtD&{r81jY*q@_HpSwyKA2
zEl~YmRf2NR6jwN3FbW8j!2?DKH1dK*4LnA<S`f2XI>@s?$t|m1MOrNfU-Wv=9(}of
z9u7Zplm*mz4vKx$0xsj8uAvIW9?*fot_jy4AUAkbop49|so<U{-)#XQOcY%Qm)Y-+
zTq11x<=T*D65i#qyrhz(8*#BOMM^DvS_1jB@dS$U^us$FHY%u!+_F0%0_SlwHK#)=
zhQ?`n5B5~5bT}6;Q7f&CZv-WT#WEjUWJzHt_j?D6y6bO!d73etGL<{|O+Ml%1moD1
zT5-zD`~W~d4c*R_J2J3A#(412L_Hul%=0o68-xqWrfNw#p-0MZ4N6o(UOxl5z{gYh
z!72{1q`N_g+AxW%y%YHsqN6mBg$AkTq&WN>=Xi-8SQ?dWJgYlJdp=W*BgevRWG<w5
zAesv3mmow*Vy?wVKbeE2TL3v;fN|~k%BfF{8^P+?j*vL%PR=XE>q(w3sM5h-AdT%S
zhXT^AvN219OMkNbzZO{xs?=$A%S`{)XX%HQ*p)TO@yD8SB-b-;nsTJe99l@1UbY0t
zf9!GKd8IN3BH;#TN!pN`&TfT(@#2EfDxTxjv?sE3sD6DSEL_Q}J3l+@r{!LP!_Ry(
z{4M9_z&8>-Asbeozx)LF{E9Z&ZX?r$|GYwV!?zUqW)$SiLYAMu4c0A)Byf}Ho5nV?
z`o$d{=N*bJ-%$~DsbX~Uq9x*uk$cMRiX#^J@QA;;UAleB>hE9zM$nisiL2HAwS`&U
zJ$-5<TDdu-J#=QN-<$IpkHMrf!!o6%urAnMEkZIqgyDb!>**GL`C+P?QU2MTiZ!%~
z;qUZOO&X+iPju-F=OUFm+yxlLa}y%5%(H5?K680IIW(M`;n+OvL*$@8gpS1x26F=J
znp1TCwq!1HT`N1I8l9FT#FBr>7?D-w=&)Zfd%+FHHM?2)YuwYzQM#d<fZtvS9JIkR
z_~dFUig?-E>8;iI>E(^5)#8`x=I}qfw*SO}X6{G-5jQme07(CbCEY)VNnCQ7{|r?p
z{Toc;c_2|ksA)c9$|A!cns7XdwCSMspdpnhIGB(iTt98$PIox-t^2wY9RM;Whq(Ck
zY5eSfAhrke>fKl3>e8xKb16FcS<I$!Waa+TKYPWYchzMyfAk<BlkB#;HMv$Ri+Ydv
zvQ7)54jL!D4m#`ZAn9Gx$5%%hI9lZQvnt*zmu@N;DN3^nG_BRR@A@T;{;&Ov&6a1X
zFvcH{#I8X&zTrLoL4^113xhuYK*x&_CYaTMtrNNdG!RX%D1H`ptxHlX-Adr@xH||a
zuMIIEC+-t?{wSZO#6B0GiC2t~7~Ob1e$XqVJ!3}mNS)!Eo%QwARTVZcoGF&m{(+f{
z<XZfR1Ny2IME`SB)02}g&UZXGWDYMlT{G(`lF07lwI4fz!Bj^4Y#}42w$=l<`Zj$F
zlHf+i2oY~e|H}xpeRjRF=@GcC^X*Ve0?2HlD|Ivg<gaQ|^uwlS7YESu6yybN*3M|I
zcj_!+RG(8%s2BHTE=J=3{siyU_Cql!;sSM~#^)*3>t7MI=x>R;CqA{n_ha@$PqE@X
zd9#PKQ^CE125fljpSQC<oo<s`@HE2y3XZKpI-E#JAK$L&pI@Bsj?jPgWk5{27df5W
zipeZ<8V!10cS=~(;NEQlH(SL(0u0tW^)Uv(^5b_+dXRei6FQH@2L3!nwd0TdcE3;S
zJi&8#ZjLOCKi6p;u=b3Z!gmOSnM?)v4H3-<qHew4lZ>88=j1t@*}j{IET{@?-3Y%N
zwemK-1PmbtVdf{A3IlNj2SfUn+<c^!5SVB_GR!4G^c(~Yr%cewf6-Fk!vOo`W~BlO
zk%u&hD!Z;>(bc}PMG=?@v7Z6A&5^&g$~Wh=&M--En_n8|9Dn=U4*8VUca-wtb^EJ4
zhdy$6w`Hmu3|$`~?>?GM%$Hq+aR-N!tbhNv7H!Tct89eYyY|y}R38z)xdgd|PUM!(
z9t<yAu|Fc`%V-A)O|t-Aqben=*Zyq>=vulzvty{Tw9UE^FCEq_%W>3n=IQV~;1zI%
zDVByW7jSId8o5Raj~S>X3jp;43~lzKmo4c_U<fS_Z)Xks@4w)No^o-H9&n@%c4rYo
zQ?nufj2D~&_AD`1em**sGWsz@bUU++?t`ngc&;U!ztzT>fVuAwREzjPQh^y(k$88p
z*8{x)^eoADc3pbydgIRm43iv8bU2<l)h#BA@mrg1kefKik8y(@92tTp>MAZsHYQu*
zwZ?xORG}}BzAk-e!{#IfkkZGml0802&+cUnEyLe&4k)^;#fX~BaRUrAxPeO03!wEQ
zR{D4PTjzgebz^G)Nc$CWIl^UqZ{8YZ=~-tIHyk$v6pQBi$EQ^01f}@vI6LR}$be$!
zE18RHgd1jjJ)r04jz&OvSHFH@IjIzbHtW%H-BoCW9y(ocmI8#|TO8tDaE3s&!sOY2
z@^{3v%XKwe4se*;UQ+dD^Ap?Wzl57{;(r?b$!?9E7RHZC8#=qAfb~t_%I-8;fAD;_
zximqs!>Q(!OF9}i%rKzqL=;Mhl*!gT@(zi}-;JdyREIxQ)cnd2+Ii=i3kC|AJv=pK
z=LvFw5TqE0+^O5aQ^*2jhPDF0o-qZI#{7;0WDTiN*CT_BkRl}YG#<AVMvnrT?Jf0#
zgpWMGRmU^5?-sJ_hAP8>;8X7NA50vibMEw-x7&K-?pLV^@$&SAgVqm8k+lh=h0(JH
zD~tTD%va%Qhpdb80Rk`?OOw*LjVSp6Js*H2ih9_0S2T_d7J=6CJ3+n`-Pi2|6-!*z
zYJPxmbb}r0y(5{gQC-ECjzdLBgWnAbuwQKe5a-Q&ZyoHHTz_m}OPjOAl3MCO-7*eg
z@bz%;=;=j91?(J}qWvGr&Y?XQF50rOd6GA_ZQD7qZJQ^yZQHhO+qP{x_v=<QZavl7
ze_%J(-gC_{b}72L7-Ze0q8MJ(FX$-)gv-MSDnQ%y84!6QN-K5s1^|)2Mqeq{KioOE
zmaCFS_9_DMTTAR}<{UeH(Lm3F+vlrU&6+^SAyD>xz@w9iV6Wh-TGwozL?x}o#r=qD
zBX~r8wuZUZ1s#O1`hJ5}7zBG<*Mo)>bUJXg^nw^d#xMVF4VN~2GJ2W>jFH$z$6Z1>
zXK)OuM(6vi6kGIkz2_7-_S22YGRXx>U<3^Ufx~<zwvZOI$JYJ-an%5I_bJH~T>D=q
zggL7ZGg}i_->n1B@Ous_jJXtfr8^ZC>otB;^}o2tymi9x_kmC&gb5<4yue`z&g1;k
z7`j!*xu-&U@?l}UWLg7s!Vbhu_sRHk+Y8%6xxymIhZ;egI}tqyRp|S1l>+oVN9=+r
zkQCFuzhO|2cOBQPUas;YSbgM`XCTqhg_L8qfm)M?;okBI8dIw@l%XIx^pVO_#x@DE
zOMb}%&yU-cfBQrG&0)^_oZNV>UQ6O~Yxm01d<e;K@i|Ak_s{pn8tips?;qupk2{+F
zGiLnMjRA5MpMs8fT{?#0v@kYE`ra6udyGw}mXoKym%UKM)CnJwpCCT%4|V^k!?BQi
zu)!MLVp-v<+cjqJ1!FA}Xp&;aD)`07aa+SVGJAM(-Sm=Yewc3sLxy~}Q7XlS6eeB+
za4ZQH0*CPyLZC}mudKaTkU;29cp3h~kG%LA7WQK~>();ADo6Jg!`Kz|RBB5{7h#D$
zQ=IvM1V00SFk#~$&HnP95BXyYr~PR&0MZ_Cq{%QGN811c4?Ida7IW}HUNr(3b8zwD
z=5%GsaxHw0QU1|c(0G|Z)lAfY$+Dk_*0$W6vj-!CZ`r0C<HM0^Sw6E}_!30g583T|
z5bEl}44VEVQj0nrZf*(6m!Mpjo2ZyXzWMv7&0lW%82zo3ruV;X+G(oFWgRCU?0zjr
zJx4|QR7U(PSNF*=j;?fv`miYz0iAThL2qPdUna1lMs0K}9sX{6`#9_f(en_nwP{;H
zye>!fjpwqq{3G-uSj+}{(JZDzBss8P>CdYiVn>Wv;AYrFr8Sg(&Oqmmyn-e>G%uxW
z85tBIIa|x%8L9V2hL9af<LgB}&k5-ci7`d_ZjDgy-^-uZ;3SaHBtH-4eBVccAUM>$
z0E~23p*L)LUc$OThu`W&es0GZdWh~qMFUd(ICe*lhf)y#)akSy5yw=7;S|QYH1Z)p
zT|d&D;Dys<qV(Dker}^i-m<v>oFk8?<brf47_rWTm_0_IQ<69(E{;IdnGg}gtFMP(
z9F!kh^Aq((4)CrjooKC23JF7@&EPde=rUMdmO&hQ&a6^I>x)dor|ro~tytq{)Ebzi
zmVy46ZgGV0Xen=<Rp9u2JSW9I<vNi`3QYA{!hc^N(5fY46-LRx666!22VND#F-Z4$
zh{ukUA;LRE!T|75shd=RYbLQ!%+-TEa-EJGl5UdDC!~rB1&$yD?!GGHmKDY%gD9}U
zlYwk@cZf<&{{?J=(OFoYO&SVd^I47%lRp+fy-xr1c~6=$fS_09T17Oe!)fwg(6>6t
zW+@lZoEwT)<`?-0q$L3HMfuP)sF=P@R;EWPynBP#PH91GrgPlq@ZxS&YPuipUhW<w
zL?a$?*y0*U$6bGZG3Yc(xro$6;wptGq(q3D%2`62q?$fzX$-0`2P*QSTOO9oil}gp
znR7zkYvWsz5v-`9Q50+h(U6hzyOFiZA@0+T0z-}sQrH}n9hx=ynN4=05>(AZD>R#x
zQYxP|0}|}6C<RzUM`vq-)`lB52p;D3`q_C_UAt)@uj;3gP(s}5<?n0YSGdPc1;g$0
z!j=V6zWj`Hs#<LpbgwfAc!nWAb1jU}koAI-)}~0=<bqzy1~u>dqD3&|laL86$IVCo
z&XcM8eKYO13c@AjU06t(J*~A1HY+OzI6qkkti~{rF$T7#CdOKuiHn%>e*rnY)rTXz
zt<N>E+4NaTR^(RT_Ql<oGk~C3b!kM@Qc@0R)yoVlWEfrMhK_K%Y^qLGa=l)ZO03-l
zdQ)rs0lKVP7uygW7kWz(hki8-bJ)_LXf^`S$T<9M7=sO@GTcRgI^<#`CU8+0jBO~Q
zKBwW>La*`GHjg`^V?|U*dt-s~ZfdS{*LhfrdjxdpPM>ncUaIx|P5qSpH+yKoH9J@n
z&BD~rS+>ON1i74t+icv-@O*iYu$;ywS$GcF3|`E<h2ArF=WBJrf_N1(kh_9XB)plD
ztr-*2bckGqJ|e}_lA505ny5?b#p4i4kG&4;;8DPCGc<Yd1nMX70{Y8Em=}Sk>r#!Q
zdTS&Hw8AXv0HMDuCcpp>`eBxcazRarEil0|p|#U$-lt%<VYOeyratGkZZKkgDS@0o
z)Mi5>dWifciKRkjAX!8DuxyJ_g|a0{=EHj)g3m^ny^^h@ENIIJsIaThA+%upTF=~5
z^`rZPI}YaFICxiUj%mSHLUZmreVh3qj<?;=_p}mzY55*B2@+aXFu0M%IXqbvY{lov
zJV>Ft(5WQ<^1Wvix<3JulX3@?l-$hFXiwe1GKbP&A4?Mjz*cashb{uOm(ks=<1%eT
z_7!E1Er<S#vHFUF%A3-m2!Kh^mzCaCDpXag^qq*9kiEE2>0MGu$m!Tlx^TXcK{7m-
zc9KLRt%VY8BYoMR6GO?79&F!XRP~Q7<XeW|<?f?{r+Kc@K!PqpL*2E~u}%heSSsBh
z@b1SF45pdTRY-dO@kA>2&3TnC^Yh9`vRbSt{vfj$wbdlOiA{R^8O~$J<w$&Gl}L59
z4DbOAMgWbWI`ug~U?$Y8RY$Y|&r7IU1~dpJcMbv6-cQ<kaARm7;Z>!bm+g72aaJ8h
z4xO;M9lj*N$U**Nbts?tFn@V`|Ll2nP}0K|HV41zYLYxgD`X`@`d-uk-cK+s7>%;Q
zsbs2}`-%T0O5?(@Y%Y1&ZGPNUTKjxX00r}jc?E2Hm8hgRAbo{yn;@0)VT6K;WhryA
zwH@RAP}fdum!O{Fu{}|tgeFC*@-_}(iHv0)KgyxTO81GtKgo|+i`yDmIhf?Z0r6+r
z4ivtuEXcVjL#6IZdn^wF!Jy2Mj1WvwQw=415+N-ZEM2q+fu-RK$V$}o0-W5@DPz{L
zN;3IMYi%y-{MIIAI7Hx(0mF^KRAUuH)tL>XVQ8i)3}d0wO&hyL>8r2<bHQ-<lZ%cs
zy2vOMfA8Gf7}I;WJIt@m1$9WNk@9QJ@2Y0-zZIu$7-k`agBC#`AOZjg7NxxRw0Wnd
ze!dr^{ZSE`lRU&=5rf%pEwH}X>6wld>zN5V2*ywqBhVp!mJ}{hKIK?E2li||7&vUs
z)0tD$HH(C;9UuR)w2j6wSz<kO{civ1Gah}@*Q8@FKrE|U;`xprWO1~>>BKgg{4w%~
zT&5$0b9;rh?bKnARj^P`C^Fv_Bvz6Hewhg;P?8KR$R5BwBN}V)Rqxhq@t!y)14jZ&
zP2dPnUI|hUD@l-O*RO~XSW<;)goeh14!VgrI!pHX3$ie|+Ivq@BA&feG7*s99npMF
zC_Mgrz)5E5o}ed4`KZkCUF?+s<3oNhCn8yc8q{8aevL&=&9!^Z0M|=ER({4qY!B4)
z&Jyx~*32!jy~|^UDKO@KhZzP(Qw&mYuRm(!m;&-#%UKfdo^0d#nXAH5Fdoz<;A8#E
znEBN~>m$yJ)oF^e#$ptjrQT@jbYUro*0r?OD=SsiQO`)+9Gt7~Ebw;6_PnX)LKva-
zec{+fs<2@w=ldA!AgnluSm6wP=4=DN{iar@$SIk(Wix5?T^2^x?9Z3Rjvj&EHbMj5
z&qupK9oOTn{;X=gvgB=aLxc2eZJx^jj42?@9Bjz|xs4>2G#C}irzI)JdgzDFeH150
zO`WZ4;(V4J>&$m3uLC<%!KxOHG*6k5w&qu_bucchiQ82kIe7n5*t5cxybYMr0@{qg
zw3NbwU{5w<*F~GGQ1sVDSsO8n(|7XhZ0GaK)fm{ex<?VhWk+mGg%@dyIyxjHSV|xW
zT2ktDWUI94O=lrB!Ky^5ZQcNTsCdxdPsCycjku|40H1G4&*mZ<M3kN~psx&DTJm~!
zv<if@M_PL=X*GtDqCqfW*|l?f)Vz+4T6FQC9c!&#4Y1^U$g^2rR)zOaFd<!2o~$B(
zU8PymM5ju8f;kvu<f{?P<}<+99f!~mj1?n_OUd|-;U2&@L{}}omelItbQ`rFgyVY}
zWk@D<e+gMhB$qJjPBhSS!jGYwwIrv~65a0CrL0rKQC)@nxy4UPj2XXhg_{*=ETq@4
z{~TAIm^Goy8;3R^EBp=;a4&u@c91%b+0&vDzH0a4O5wHP!PYt^eR7ogy!3`BkWWq_
zS8=dt5D8c)LII)w?62(E@?|a<V-vGVjbHg_>vn$-iv7=)UE(HwB94aMG&cpHB^DbA
zxQ$N(ywl=&?~)3pI5-r+3sc(B8f+<mk~yMt?yxqX{uir6;^w`IR_O;dJ^+OqBM?)1
z3E+sN@K&lK(j0>YLZKF`5!n-iH?Hky7RR8@DOw<vPh8x^X?#KLf1SAlGBl(cb~ZQm
z5|tP8>V_{hf326wo7huF*2j+K_$=x_xe%Mv)6_|dZVC(2taI}i({shv%N_qKD=sH~
z!K<Y-bV~BDORB5#Hf<UA+l;*ZUSH>0+OflfWgMb<TWgTk15v^9*fg>se8?P@S@89p
znja5x;C}BH5daF!!=B&QT9BhCzi+UvpVm07_!;{1k3m&Gj8=xPA1D(#@T|WYz?0Pm
z@v3KQVN=kww$=@3KLwOXSTw-1)j5!RtyC22;SrSNkIO|@)8T$u*X%*?whryJOSfwb
z{P5>O$(L~_h&tg`X(?RNO#RtF#FrhY%bwGgD9)dDUvN>eUOrc+N+8|~`yFl{oGzZo
z3InI*^Mq#c2lG@pHmr}C5`F{0XkO+0wyYr~<A3iy*yNfB-|bQeFWLg3M_UQNe3lZm
zCR&>|#iZr8M|t*FidnUKE~e4lcHM|(ncR{ue^B&36x~m51zg_?RE_RGzzVAvlIY>e
z+gnm3&K!+1uj@-Z&#I>0!~kvfqu44fF3Tqx+b4GFLsWuE(j-$8hjh#zk`**V2nhFS
zO)q~4B<wvtr83A1WORqn3p9NEw;!KK>?JYPdX#0I>>UVqz)3UkhAJ-?4m41X)=}!?
z<Z*h3t>mmyxx_zIV@9atZMx3NEz=0Q>kC16vTV8p${omp^`9+D463G(?UWj({;*F~
z=rr2|ZRnnbzI>5GcxO7dCR5t$b&dCxTs3-f(H9f9RZNwi$8i~f6_bE^6}rtDqV6mX
zLNVkX?nCsD0D}d7xarh^Tk`Q`$;*Y)64^#C_cE$fJd{|g^kcg3%b7$Y-vjJgt$b=V
zRd~^Pv<-`^EcHyXC!r8Pa}D|9Y;H}VdoLzPb2|0X)A;JU{#Z`KO~=?@&S4RTn4Oje
zGJ7HD<nQ{j`yoBJE&X}C1Qjt`D=Stg)<I)ucPmb=#!cD5QugWYIUX;?7p=Zs7Zm?d
z`R0G(`FEvbRXm`R*E|nGqSrL`a3xPKc52-15&@a7oSgT86;$HW;Ch?=xVZD==H*~|
zUm!^nEW))||BopR4dpJs`ksq1`1-KkI>q?jnR>PZIuwaw_%NkL5~?0&1!k<h4k-6t
z&|uL0;hV$$ITYW?I4lELadG+pXjpMGxIT{qo<4N}we5jPJ|LX@;^|nx+x@2<wNov#
zTc9aJYB8RPmy8njb;({4r*y87w!m=7<HGe^ZZpS}{r2AeIbwM8uZf9dk5O{@bDa^4
zh$fEi%4+kW`&)F7)SqW_IOr8~9%r)D)6>Jqa<6i*=#9N1^N4KWzEy777*U=s$QjXY
zfAWOx@e2$IR)oIVQP$fC%;uhL_`h`)pViNMu@#_gEv$!nznU`76I>=Yte-aOjI07_
z=;uca{<Rnw$EKB?D?6bo^?M9`(yU<C6AX8{(LnH&VC(9A?t!UW7f>b)L%vnqigvnv
z?Qa)=Y)dS`BX4dAgk~EK2H7ZE?9_0m5$7;BMh$74h-j^+E%8RBimt@P|M*S94oxp9
zGts8YddL-LaNIM*o=LK=_^BE-lT<SI<Q+>i()Ylh1XXZ}CD_ZqzQF(I0`}#KwEN0`
z)d6wH|Br~^e+~4elNIC+1dv8|KPkyR0!C2p`X5PN<?D#*Q5Pay&(dWqT3zUiH~({n
zn0?)_Yr&w^IM$AWj!%7^wlX(P&haeop?dJ>m|T%2*zZ{C^?8dJBrOa%(_)x?p+A#i
zv`4v-IWZhy;1mP)<OLhmu+GNhF(ThtkXihApv@r~0>W1b%_&Y5D0#T%flGKo+gk&I
zq{hHia4;Ex2_q@zish7`X@GNQ7t`Fs<qZ0bmHVWmq3^rF-lRP!UgUFXP+{PUY4lg}
z%r<J;@1b+d{=%lkVP+mDI84p<B~sBRFagx2PYmnlI9~`vsvfV3+hr|NuFvALMk(wp
zHyB~-&yj3p4mX^_9E{Yx9V>A`xio}czcKXl7pNaMu4F&X*3Dt{dN<W`{A(`BkxDS7
zjMtF<jAmr_D-fQ&)b2sa3y%c~!j<0sacmIBTw^aB#3+7aKkeLK3+0qln9XP0xhS2+
zrFav7hsgw^S>l7JA}Kk<srdu`EUHRyNOfEa;hF0<s1>c{Z5fNRn!ElU6mLj2i}f<p
zV99!07k0<UuKB5Qt3Cg#?Q;JVxf@~7QDhbE;W~uNld*ic1Fi4zY3O-4sxqI=NlQ}X
z?bD8?5)cS!nC_wh1i@b*d>HCsv6AQOc`Kx~ctllPL6mXy&yBhQKc+^8sUGrW53fh?
z@@nv0_F8wCC8@d_RBk*AvZ>IbP2N#EUH5F5e#j^bN<+wDMqn^c3Bv@Wsxe92!aL`0
zN0LYlZM$};Bw5E9wF>GpZH^0<`%dBq^PSm$4kS;rO*@@pEl_R?G*55yCrIA9$9HKP
zX9SwQMvb-s+Dwy+S$|S#CVJBWB`xLRySgKNP>*^->OpZVg@2?k#!%HJpAS}-2U4DP
zwrOqL?9NcoZi+LK?L($X6KRx%9jf>;W+EPi_fFLB*NI8RPv>9ljoxy@TkN#L^K1xZ
zK0+okTA-9xWB*s-#?m8n(wz|qNM_^zrDy+dOZR_I)TVeW{%wji>^@VEY-!S$&;1cy
z*Qf;)M-UN)o9K!v);}kp!jOcJ<Ol*m2;c%PzhACzFo6Oi#aFcGD<q|7q;nS+M{#&~
z`3y&^u03XZnze(g*3G+o7p=3t$4aPYLhxM467jI#Z+;)#$22qTk3agMt=8GFi3R#b
zc=mok+2w$c4=yzR-GFTwV~-y3!2(!X&J0zotH%73H=vDPZ$hf0%}&|~H^Ff3gQ%(X
zVJA<b_@~>^nI;YXxn8fQ>`!reHVps>Q_V>d+V>e;(XbfS{PuU43j*jl65^gaY-||j
z3tIZN-~6VV0_IvxGv^$Ecg)1X>?;|b0uW0}V`F2<>Bf-2UcxWw<-q64QBRElH8vPN
z9!^i}Rt68?i~P=zr_+VKj8^+3yZ66=lub<LjW{`$rqQJ%n_{3I?M9lgLCz;HBS%-I
z;**TqqkG2B|4N*1_&o{PDz632HEm64CQfMnMVHu2GeuhswrsasqfRMB=GW0;rQx|k
z#i+0-YLpJ;W7kvM!HehpO32~EJ-b*fEkm%crH5wQpuyh2s=|0=H{kIzOms-kJ3C2+
zaEXFyb)G;}fmqY&1N-jv7&Jx<;!^|RI{F$+xyzf4Y&fS}IhahVO~IHC+w*tr6aE;{
zR<$EPw7>$%5z+t<v2x|qwXo%$V>i0_un>LcI|DBXeX!2AV}|wvn6|+mw+QM?`-TDy
z?EIq5EJkvW!DyV;4G*Wr>H3X(2Y|l325QC{PO15RLH@x`n5e$R3e3ch<8kgoag5ds
zsi*CyO{E<QF=d(gk<hHU?(hJ6>W9q6%hxgSs4Ja;;Se|Baa<1W$(_oy96(fE`q}Up
zBg};ZLMp_>oNyufyDoao4<%eV^iRpn?9y$fdh@FE!?Ev(v&W5{T){gCUG#B@5c)j`
zp4ie6Ml<HNj(nJwKRhBwsIrZ!moX7MUO${`ot4Dl{G}WVW!DBscR_c^oOB4E1Fh1J
zglMo+L4~#suM!TtK*c_*9>${S0cZgk&`?R_1aKJv!3OJsI&I`P47t7OoihWPwqED)
zJ5CQT-a<3L@Q%pSa?M*DmRHYKFPq3lG`wvB#G9cdPfEfc^@sDDgFj`Piw6Lx?4}5f
z@!j)#wtr;jEd#^>U4~Hh+&CaG{OOK$oWOqm@a?Iyw^+Xm&9h2*;4AF?!!ukIEx{-l
zW1>;@rX%Yc0mYDFop;-;haq-a`XGB?ATXejYbz20=e?-#g(3o#-03cm>_w)-GPbyC
z1QcLEZ-E$df7_RE=Gmq$l@}p5N@-D<10z(ZDcD*SP(#QZcA`f&^ec8{njB&**Zcld
zm_-{_RPRLdox41Z+eq2<d@2woo{#7AT2<6D$6kMZZ~n2KOB{9S!QJF0QVW9jcv#y(
zqfE<lbgY=BilJ(0^{gHj>9vuuU1u-g>c+S5u(GG`rGlwA1`ksxb<St|wTJ-fj5gHN
zvwX}gfvRf;X-;s(lGF5%%A_D!HeHdP6=###oB1Qal&-LJe(x+Xi{h3O`Y6q(y8p3t
zN0a>-H=!)ab&_0INDu_Y9IAgPaFkvPmx~L_H^dO8omv%uPmSI=!Zng{c*bU;w?}~K
zHg+QbI#zhMepp6^88+{IaeZ#a`<G7-72&_}pCp&wFh*2av?Ih~LkvhG@%BT-x<&^T
z;SVTRZpa}*;A}G-9TD<JoVyBf3WGRw?uDW%)U_3HRbyfz3OL#Wt6+bKw(hIfYroKL
z_MpQuZiA643fWXKp<tyt-xbhwpTLM3AI||dluqv95s+6wT<~oBPcXk4@iGX9mkJ4X
z^Y~~>XdopR8#K5maQyV;-+GwIDty4_&(tohBEjvn>JV9i9ERlIk*E|!WsFrH%=1Dp
z|7$EV>8NMFzd;fS`z4G5r9I@kt~%YdGIpVH{?;_!)A<~%mjhvb1vaw;mrF9lEHEcn
z6JWe`DY5`9>87`^=;*-fIAK_y6)pAfP@;rp+kd4w;Gy(<h_A!`gV2%s;5ca95VBHl
z;yM>w>4|W#;B<qaCG6a&8U9e)9@1U1BE0Htaa1;kLr1>Avi6)RfNlU<PPPO!NJuP_
zqHR&QP;gmh4MUU=u(TC)vA_P12&e0&1!OuSEctvChU&;rJmqP&{kuTk{ApYX*T6Z+
zWZ8^;=rP8}tM)^pMdh~wzOEXj5nj`WCVX;UCWGtRP)sZ@Nj-UoaW%eYUC^b)7pt{P
z{lEr_&i=v<Vw2l<=@PWzIdJPc&QJYH&NS?E8jAlGk4!v;Fi~WJXxPqqi^pIllVpj>
z+RcN!<O0TD3e2N%BoWoUAcef>Ko>4e<$RX`xIGMP?(R&iO0u4w8C!mMF6R~OW`3EH
zL*C~|Uu3XC3cO!pWj!e-s3H7D`$8H2N@y=|I--{3Zj5+aeM(v*dx3VpDP8rwd(N9?
zhOBu+`DXG#Jh)v)_NMZNrtNeC=2etqJit#R_!+-G^=o`Q{D>A6FseWGp?~h!btj2n
zFw|;$z}CMlORFeW*p8-qH>l%jOifj~)Q>=A3E6;IHmNW;#I2q@v2*b<Oji<7YUOg`
z!O$&&ArEFJ2l0p(h6AUd^_owUL&8ERf(3GQi!w|9LiPYkgU7x>oI@c@aGCKkrFwT#
z*J=z=Pch2EA}VMoYloSF1o<qa=g~0o*|?u-(wSfznn0G$rF^APaI_O%!i2S4V=G&Z
zJ3GHmIfoh`9>WEHx41r2GRQ;I1=Enu1^l5K9a7U~q6=r|0T0)YqZ=6a*xwnX-DX6^
zv=?Sd0iuX|)Pi;~x$>$YvI2|I#G<`;6opu_awJ?jCBUJ(HHTqG@g=d1b9QiKqOt8t
z&YI1D+!0k#w-l{&pgw3<-ZkVFWGnHBnmOIr<NSH70PnYtl^6c~yxYWODF#Df+z5)r
zk%!TyAw2{caw_nHHk|M3B_rU6)@FV0Eq=v}Xq{XfE8Ut93nx?Pkx%Rp+{>tg1HQ_V
z^s~D8j|fVXAxuG|SQNB^ItT3M9xzLrRLWU#eihh~coR|qW-T6dyp9<BT@oZX+z_b_
z@42)-<8|?wq&9=r0}?ZiLx;V?Q$o-fNpC3uC}+>j-RMFD!Y5_8#40%WIYJCv8^z3A
zo?~*5J-y>Pl&FGf4>toc{MOrcAWagw9OnWD)`sXv*^Ei&?!4zVw1_fXCS`%4sritK
zRRI7PAr${s46NcmUt!!8q>Cyw(5<<eE4zo>r|9K1kX=fko~tL;Ca{k#7y?9;C%uLW
zx?e9X2)blu6d8B_F2G-oC19m9dzQP;cMBrNVHJGu_rFs?0Ql|GalOB_RsYGY0sKp^
zcyDkX)wRwwO{Ne@H!XWAuXO-@BYSOhx~vA{zhnfA=Y~hlr9bev__Z;K5%=1IAoXq|
z=)rLxtoLVz&cx+ey#FC7ry${KLb;$MCs>>dDLF}As2pPW(>zTGcYV~bo*QFZM(;u+
zV|*eeJR&Um4W)u;uwVYlR>&?f!dMVf<t|{mUnZvH0D<UB(nCX{nbFc{xlwAv7WSgb
zT_V%6SyAEkW20@8E<Zw-L<Ti+m1UYVyI6qP#u1ky>xm6nXbVDU7hmZOsvaGiudZ<t
zEnCDQceAy+KYFA>A8TX;!HR<9NsyP{T;_IUBfnsTj@m}tUrk?(p~~q;vRcf+5?QD(
z2AGnJVW058lv$cp`p2mZuHsP1Lf$lsl!(Zth~IK!@4uI`-5pg3O?#XBnQ_I9k_i!O
zAu@{LBdsZj>$ycI9`j&eHS3}KA_}J6wd#^f@raN&4qs(Orz~=kin*j=0Y-9Z9Z%r2
zht1pU^U1N0Ov~lf^)X1I`9!V-`ujI2S^Gfr()xOAYA(NTO=HB6_fA*Rvtm{WUJVbc
zt?^a{g@|GS0j@@Jgf3w$&AdIM7!h>%4E<sTUs^8-ov3wK1e3|;<G@AB4AJLD^+NA&
zwPTqeIr4u5AIG;em!5_apF0ht7La1D9olyNJOwjQb%^<2Y<kNAJhQevexTpXM&+Bx
z&iv!<lNH?xf&Yd&_h!4wWoYNBX|6S}oxkBNfjsZ|9$jHC-j?Fy5aEa+PUADi=Lt!8
z`-$cevI<M^VfNSl(c=>q{T0xqW0o>xP{=}1eni{7E2KY+WeI#S&YZx3`>1HHt{XPb
z9lwRn#-zc%eY+#B>cUN3VZ2#L$wY$raSQJ#*UYN-NP-VU3P7g}s6l;Ll6r2-1S}S;
zMvMAuH}K?|wDCb9dJES0BoHBH?z2Fz#V&V<Dta7x{yQtCA||$AqV1oM07NK7rvb6&
zL=Ln_h*>XNuXYZq;iz^^PD_U@w0uBIFa84w<tBcoE6}ck_IdyxCqK_$#&A0+dsuGB
zr+HasFJ^XK6%)*Au^7)}cAT$Bzw*D3IXhofIU*Iri`fEdI_4F$6OS5ykc0)p()B#3
z?{E9<WJ#;H(MN2M-eYk(3>P7!ASQ2GJ-Q9FdTpIO<K|5;&?f9CNM2T0-X9PtSv9X%
zxhE~@=fm%wuQpBkv(feImqB$mTlMiwB$J_Z^%{OReXLAFCti%oG4_FRlE;$D+Lr!+
zsj`41M)hr2fm0mIFwqZHDjxSa9TFN%cdSi^XhM-r88hPbVSB9Kc5?w-&H^6%BW1__
z#*G(D?tNX-3Tj-LlyGiP^csIo-JokAnU<;=uFsy6J*(%7({FL1eg=Pv!)ss~+i>jw
z%T9JOcZ6T@T(<iJpgwN0o7U&9yRQtnm?CcX)5pCUQy8CMJ^~^L&i%*$B}Et(*aR9%
zq(eOi6~R}!iNs_hiKYaI-Ffm{V}D?#6b-3PwN%mY71=sf_FV&G1NTdTb&alDA<~_g
zHDu|<6=1Sdx|KP<KzX``+BsKd=G)!9NQqRrJ8~nv=|qa;(?lsATv6G8SK;yYY{QWV
z^oluB91RF7fMFDW-X5f;!Xm|E;%SbFNcysA>dJv&PaN)SJiYic4s1cS@-fGuWtLI-
z>q9#7k}4>4fb@OjxY?Ga=gFj6rIr8g%h8q=!{XUYuj&gX;1^_4j-T1v_%1Nw@rZ&S
z-Yb6a%3RUwpdaK79!trj4l#YK<z$^dP|C9w!o8gW5C-lIW$a9y8Yzv2JarYq6lej;
zlqHrH$$_U+i=&^?yWxBVTv0ww&D4_uKQF6%X%QmhyE_~H7S|d2kUOt)5<wRP*;84+
zaltg`Fav=Y{i|U8mXSj98n=CfHEGF)eK(qHF{L=dOK*xk!?aj`=-s<aSI}#;H6GHd
z^Ja4O9!wjKkS9}ycPLka)0cxC3F&L+P!k|;v?5P&GP-FB3pIm9lKzzS5pkKIDNqR4
zi#kcBuIB%T6Zxz0+{0v?y6RgrbhRLvwzgQdOhLOyP=A@yk(hUtrBF*#9|IGwR2j7{
zcweHUv!lJ{JdDUlYPj_hn%$X0wli--qu+3fWjdSj9`dVQY~==!WVz`e&(^I~R6-L0
z`|lnhsI;>4TrCz3X$>;k(Dn0M9{R6v+nwx5I0>@z_7XX()cVy;Zt<udTKNmO9CbdX
zSbXq65hX!tL!-{Z-*n)5auP;N=)N`I){r+{XYXtO)#-D)aFIklyf7Jny9J?Cj(8J5
ziECr~6>)1=Dt!0&&ghOH+km;_Yy@96t^S+a4$Ea8-!7G-@Pc<b{+8TT=N2=rQFqU?
ziipW4-p|a?<%3Z#8eu)%YfHoLp`z(6b8fNmU16u$B8Q5J-!pclyE_?~U+$bXvpt)1
zfUSWUXf97JTJ=|!=#(D4l;-bUmH=HFqJu{+ZLocz_vMa|qP(en?@=X8B4qw8-zjV)
z$5w>*tW#NX5JGi4Qc2>d723hJBF8>PlJDW1sQ5xeSB{#@WuCe@rrirw$qRqwU%k^m
zIdL4@`^?GT@2IN>wssG2(5}{SvyJoQdp4p&PDD39BWmvOEkwPcom_7MdYp?zr4#qS
zh5)-!L*2f+epW&_%Yz;}2ymUR!TGoYBKoHnF8}ycUsycuZ{+GtRiw6muxkuT=*Xvr
zqH{I^gYGq=5-KPC2s-m!6y@xRs$DKnRTb#2`_y>-dd7&~rcWP`Pr0prU819xK%gZL
z6ma+wBB34kmNC>y08zFIvdMo|ggIKE*?(lYv^W`C?GqwyFAjvx)FQSu$ug`zM0Eln
z{t=om*pQioELuol0@)lA23Z$2f-eoLcb?0ZY^d9nYn$ac=!wME6p>TIYED8ge9VG|
zzbG=CQ$N}_6rv(olj2o!%x5QyL&%5=8kNkEFslKT@Zn58*1V*^$UnJ>i8lM@6#gXl
zOi~^b_l%)6;<qLZ2K8j4V{2KFQUhZ%bfH3|M&-(iUiNxSN%P2Qtb6jCKX=-=SLHsY
zQ`-jq=YFC!#-kTQN3oaN9vZ5H$;hnbeM|X=?^du_2529K8m=5tcwF!=k6XWv_0YtR
zy(W^_Xx02I^x-XodHeFKyvYmvj__+LxbhoCWK0}Qi3d6$3PEMRK+l|Acw%}6JSU5Q
zFe-p63j0#cCzXxE)Y1Rvi0FSx*gW-Fe}}uEh*`5)Z6wf)#CNez`KWzJeqn!HfB!bd
z6TSF*hh(2WTn?jX>?``MQLi+P{G>KqrpzpnVHs+|8S1sMI?Q~AHKEd!Yb%_H*TG!s
zvD}Th^}K#h^V@;Sq7z$%4YcIRs`^AFZtp!c^7hCEY<3Xpe0Nf5hW+mcIDz6zko2RQ
z6c&Zyu8?^%oAS1PAQ`zqe6odDn|Vf_3B?zDL_H{Lhf<V33%Go)@IDH$NjepBhF_?K
zO$dir5`S+?;{hrWkTVu*D8?XHsp%BZcc&}`H6p8l((`*KTwy73ZkV&SfYS$jqju?f
z+!fL@i4gt-FYh)u!&JzWt-e=Gh07FH>5p)j!NAP|4g&Gx{GxTDpU=JmI*MN&p{F5i
zi%=njr$}~zer_?JXt|*`!&^GjMUpBO&xmWsJUH~GsNqO-4kmasUAc32p=#ya#E7wR
zK?H-eN9O4F<i)y~aYywfIU*(hQ_5?A`GrgZWX{zY42LAS*;%RE3STz{+8mbf%K9H`
zJ5qstBk63U)aIZy#OeCc9LmBS(TTNtdOLCAH>ls`R^)d`GD;}!4Y-=Bp*)LJbkN04
z?i+d<>S$M-9g;G*E%p(<JRZ~bM^$C9Tmm7nJhyu1izo9So=RjcNdU4DKU*7?M!5|+
z$B|Bj3=Z~bb0E83>b{V~=pM_<k5c^{h~PoP1ob~shz9Pbu8?{anPieSv#xSeU6Jsq
zqr%d9eWE5l_@v6g`dX#{qtsSSIn|RD1$sA`<gL^DPG;`v$R8Z26B@ZwGrQTH>|U#r
zn*st#49J?()y9wmbnsPSUi&kyhXN{y<#kL9{o~sg6jWQr=&5VJ>PPi7SF@88S;WQ1
z%2zG+J3y0LaWwN2!$81z#2b|hbw(daz010QEchd4T~jtmi;#zGQY_4@v<&=G=6w58
z+!$w0eppn?#JL*mlDqqHX+%m|?AAGb2Fwr+Dfu8j`Etg<6tP`k$rb80Wicmi7#yi5
zGJ~aSM3S;S2*6v!Ki}A5?l$P{D20IP!7Y-4mPfw-<7EE1oJ$-OM6Ex!YlDwULKV#%
z*uYGcLNWLila#z1m7#FTM5n(VU4l}#3zm#TId<xD-mbL_PT544_Ao!KR+A4W2_;4_
z8b~Jg!r@B;nW?F38(OZRnJ5vxUy|3rjEPXLOjG)y(R<W%X5QfVq<Bl4O$~lkcL&mA
z@2h9PH?BorvS8F7<X8H^4rZO{*VObI+pYDn)vmYFm-$!gr~2{tX1Aan)FzV@7TT<K
z?loOwm;AABMt0ZC_SIXVQ0?ra2d#w;R;ySC@S@;R@-b0+ky`vgD%QB2>OtD`WF_(0
zP^6QvISVSD%M}m$(nD8C)=sW&P}iqSg}W>@DHx!BQ{z423qr>d<YCRYxn;Wax8!lq
z#6NUQ{};=^jt!xI(>lpe`$z3PI{Agy{HwEr{Mv??^TpF=crDVIg4dmxyK_9So2ieK
zGBaF+vfv1G-7k-Y*a}H^k8phCqqnrOBDUftCo%<noM0_2BZse|^OEmtyIv%OjpF+|
zTzVBLT^Uc9@C=%}`&K)O!;lC1zPhh@sc&xsUY|iWVQp+$zWTWtM>i|LX%WRRfXI>D
z?E8^@wCWdR$<kD4ExAOC3R1(n0;-#UF|0CK0GtdQx*Ds{MP=i;#v(W4#eX*F4yBr9
zitD~&h~qM4k|yz&w|pmpHeZ(3FdZ(xpsXSF;3<1}$%a^6k{WEaFtLTp+w8kl+wHmu
z^0ZJ`es{sT*`!DFS^!<%^jP@RETAkci=d%E_@98ZnreCwwF$*Yj!HRtT{`S``O9{~
z@6dE_9=D^5+L9%&8&~JX`r#Vm{c8kB+^3y*x8NxFnhqS--bieG09yW-2|wxa4jU(g
zQ8^f~R1`USRjROjEk@d>4|*L2JD*X{a_0R-h!u!h%3C;alj%CR9iR7!9)osIx5<tU
zO|R+3p_{Kr#~Ye7Z<ni}@?UX6e`#{WX8YZD=a)4vgA$VL42h_~!Tw^7n8ImS751&N
zn4@cms0xBVI~Jgg^jyA6HZ9spq9CmIj27F@_LFJbgv~aOCOtjrWZsu8HU*sbLE&yQ
z{t0xd?1!iP-^0UXQG#PA79p5w2chC;2tQxH{AezDJ1VYsi;btjxMi-(xIEM!UmC-$
zi%+FzrK8)q6}>c=?ru+J7<?=6U(8U@;ZOyPBTzYiPN0tE={ulvG$9k1g;G8-%Zpb~
z7*qy9AfWJW)dwGk<7kRNFx{s5fFWrTrx=|xIs0WVWv+LkqM2zgdYVVmvCsiK7rt_N
ziIOI+Uy>JFXMXo$<h@_jtNW;}F#rK=ov}cDwO{~F)F$$`9~FWI)z_za@rAHDnd!Gx
z|ElMBrc&1O=F7Y;g}Gcmt7#`d*cydS?b&O-vU9_)I=IR9U3!0A?#MNH^II$a258yn
z-E3gJr`W8Fuiv}4xnp}-R(7S_i=NT=db}b=f>@myi}6k_&K4i7=QzRJL9B?%4>Iu~
zAHdrFRTT63N2V&y=OJU?;l%P*i(O5$MaB*0I<pPoFNMGTA5+;a_(!u<V*tBr!%Ah_
zbYjcSmsBI#T&)RwkNWLO{}&zb;!9M6G7}>dqCl!w)D`BPwn9|+Z~r3<y9qRA<e@K@
zj<#(L_C41fc{RSXBA+&ly7a>%aP0SjUz-bjFLEMk!0W4NQe5}V3s-bHDR<Tm%iL?n
zS;L}BYvs*XOl^R?5`~(eJgBfqKm5E&x@{L)zWp3?#S-J$J;Kr)OS&WlLq&!RI@YW4
zxL5kbf4U90g&0Q3&4Pb8n$@+?+bdK2M60^Ulz242KbJ<rJnv!9*RCwfzPg@k&^O!%
zyr9s+X-$#zg)$ogPBzFX#1cA|TYs9MDCgeSMG=1m52+QCR!Bwr9prz-UO&ZJobx#f
zB$5OYv%04?E!es>y)1zXm>0>N3YEy`6j`ngKplpp<03ioL(f;*Z%6~MTl;7f=k*of
zy5XiAe8^`q)!lYc&zFN*3a~AyeSVYfvHojmIdRkOZk7O-Kd2)-gWB%Ke*RVv{nd#j
zD4s5MLHN&0w)8A31B0D2p|qGqAXvMdNH*Y^7blEOqFpbpAG2mEU<G&8djlVxs2ClO
z|F@;#z=;{U63I!A)_53AQ*R{!){e?D9b1dm4p8&!FGAOS=U5LbQuFRCwYyS_+~tJs
zOj^5k(VKo}f&-B<71dcvl3<9QM#{cZGll5y-M_fA{+I#>GTU7Q*Kj=160|k>Ie)T2
zP&(gW7fa26N8N(Rru|!#v_fs1H1&}<3HPR}jh;y3PEHN6jMU)NG}Sxx)Q4B4Bbfx$
zbC}y_xIQx{@6|b>i59?*wV_4w-OnxeR!JA9m^)l1OmjspN+YHp^~@dKh|we5I+@~w
zU283hx7&);LKUG6cz|g&l4ehhO2tQ)RG-s#82^Kbsmy{MV-zQGX@=zhxy$$PPi(k*
zyW1(G!eH_f>8kkmHO(L&f)ak$useD~0=}IFSgB)q0jK1dS!IC5Pj^F=CUGXUwv4BQ
zaOOpj+q9y$Og8lr?Q480Ft=H21Q;2QHCb$^YMNB}yL@nI!S`LU@(v3Tq6x67Yj#Pz
zTqPdX+D6~Ymw8S@CXxDgKJk@gvY{_DY%8)+qUOW`B1TL5!?}@oZ}-@ur0&+dtHbjA
zgL!=0lJ>Oq@*zMGZW!t*Jonu@&+bUV@Cw4mNTj%vnjnbw3v4S3iL+M;<-Dwa=5#c3
zoa+~y#drN1#A+%JSXSwDwj%ZKrs}EF(oGgof48vPxrHXvRX`Ufqn<ZiJKycc_RiUt
z@e&?af8vA``Vr_esEsihcQul{a0j%0<b)>;nW7x!o*cN^CYb%(?Xnp#2cIb6q2%&}
zaG=63rkp`gj(1g!Pd)XeURf@yq`tgXp2Y{#ntTke_*<;(tO1bPG&#~}0OySY!UJgH
zsDkAeg{(nKdd`M+9UESj5X#tz4pL`6nb<oWhN>fw82Je)9_ImNa-0vG1?A^y_hJ4~
z3(Hb2`c37dEho2o<a;4)D?);^oP+9}*!9nPoxFmu+q?k_Tf<mQ<-bxfVWFvsG8x_q
zic_6i*=tDjiW}4U7WOR~hrzC)hTl%?aP`=r%Ey_^7fdlPEDNc9GT^-J;2l@lQq9{v
zZc;@LhVp>abDEQ`(`n_4pDP+o%@iA#&2l?Z=)u{*Tfiqs=zzBG1&@GeC#+38!rET7
zRU-^d$Y_!Z!(t3MM7hB@L3e=sEr3Q{*8fR*4vPbGhM&)NH|BBt%`w5CJQTf#w7i;8
zZRKY&m4Vly^HHZl#AAXSVNLES`k(r;b#F|wHywLUJGvYEs}wc_^`}q6J0W9cW|<yD
z`z@)h3+(K)KnK%>Dfd^0@~v0)Mu%wm{$V*YO=`tyY&ymZ!AP<bao$oLmZA<pY-%I7
z8R?_;p2*Xaz%gQ6*EZ3f{+d)l&xwY)%rpCM!(CKC6yBX3!BrRAhG5_ffKC;`WWD6E
zeZQCkl$0!;$NR*w101sh$1N@)+M-Q|nN-AqhjdxBP)k|^tZlE|5p_9R5Hvx&Ba^G#
z{yTxtxdAWLvSE*MBK&gS3Q}vs3J54Lde(ZpO1=f1o;L}+N;*g@8N33)IzVTCsdf8(
zRP?v1^mB)5pvBKFA5O2etlznEC6bR97kK-WyNpv-2-NgA^t;jE5zr}w>=kAjSs5=@
z2?YU+<-r^3_Tj0Ep}Z{??P1;zSBoJ+VIDLbGy9Tjb=qCYv558Lx*X(S<56F5aZ6<>
z)h1UPehn%8l>7O+&>l9OOIbha9b}%NymeL8wlkD{T>U+lc(ADHV5rsW#c?a>x0!5;
zP;+;5zyT~qXErize8IGh_H^!*GH#1^7qC~7#IUyy>{nW}=10>J@f8J<exQ;)SFvCE
zzKS6_KS!p|jW7`F*H8-0G@yNsT}&??H53*eFbD2p{I~laIbsk5-GN>2$FnQT&a~W!
zMv85)KR+z<AJ10u(UiQB9R|z4|8`LShQa(cfmk@C%qs0J0s;uIr4_<d<Xyq}c>*4k
zff3J+WeP<kbNGa3Y1sxqxB%{`%8+rO3&qxpm-4Ou@_*jO<Ns7S$%?Xw)ZWokAQB{F
z@Qt`ILC)k$zO6=QNc?hS*D99tQgGPA%OuFIk)qZk1(hmq{;R{uFc3@_y={5O>epCV
z**FJ9Rf;rf4mn7)DoVAiVfApdFfJc^5z!>|1|3EW(%#be(8iGBC5a~qba$-yNBP71
zNfIw>E^AQu&l>{a>1p}E_8F66tIq(ItvvvdrpHuo{%TrX--z|wO+rz-$k5orT1TDa
zQ#4!|(U%3Q&e(6cBi?DPH~U}uTEyT_&xLcb>)m#H;&H(tr=%$8fE$AvW0Hp3z5GSu
zKGERaV*rpaWwO+i?H(4EDn&L9$q?w17w)o5YTikq64S8ur^#vhsFgN=c+@HL1+aE;
zSG9}n6w9Z-90%lH3RufrK`OXaKCoM?Qe|s`)Pan~`6s>vF);=xvWs9azFTqoZr^qa
z2#Z~FsPNlH45m^wbgW0Ug?wgob2A@40&{|OVCk#F;7!doq9}{Miugm~GeP5F_8Z}h
z5KXcNcy@pkNL^bf(Jga}^$WYr-h^ySuHTd(vq<YaQmQqgiiMKoVo4SQ#wYFNQ{6f=
z5)t|_fN~kKyCX%7COZ7C3X8>fOzylQOH7e1sx}`c-AdkpvmT&q2HvOl&WY8J)cl~M
ze{uSx-pMhF^K@l4`gajU$hvI^C%Z^fc}pE08nBJ6i-X@f%cm^Axet+jr%RGG^<S~C
zYi`XWX<NxtYr;fSPXT1(6IVI88(-dJE>ZCIuY_t<r~aCrnZ$x#HQRc_ejBGx(|4UM
zeI#OcUlK<{)|58`St4_Rj?f;PV@TFF4KkcG_F$nnNy6H2#Jz8oN71MOT0^ehgz5sf
zOPvD0nCqlhb~N21C$2k4+zpgL==LtG;SWTmrO+{729t3YjzMxSh#i_5_(BKfCZ6pb
zDSC;z6|<5qrD95qm&Rx3=qNrOdYV<97ZlZ2U_poG#<2-aJ!}Rmg~JlLx_3}YY%zR&
z31JS5&T(C}x6Y)SORsVP&JtY$#DC<yxn$_m{dh??;G#df%g9baYlbfokaG2srNcvW
zvmTeYux2)si=GA^hpOp&V|$ng<5f*HUWbK7HmpFv%7iOC96!_jHxn&er<v+6yF37q
z9R0lnHiA;28Q=4q9Kk$S5apx!$Gklv9+M2_SWd^bNns~@3j}~Jw8k=;6(+}tDy8}Q
zLAbnKiFJ^Qo}MCz00Sj-#9oC*iL4vQ$55mrWDJdrzi~i@hJB&sT>6w+x_0O(+C}-;
z7c7ySs9&vU!o`2dUSOp~jr;nsh&+@+fCMx1)RAZLp`11HdES7Ly3)s)(7jAA1>=3N
zuio8Ud2pl5gRDsR@<CuxJui;HNeoI@XQj~Xe|8*n5@UtN;5={&NJJ+PTZ+d~6j<&g
zaH@N*F0c2_Z9jptCKL+_fi#B#p&<A2#(XPARH^n+pzu+WA;mkehk)Pd#=A^K<RCf3
z&oDWO!SUq-hFSDmTgY;3B1z$r%aoWiAVYiN*j;^_16t*0w^-X7FQ&h>1=H;XB4JC3
zrLLh1e8;AkGHO+{?{|)&ja&0Y!@wK_Fh82g#7xK01cDqS>B=}knm%l3^_(4L7yh4r
zjKS*a>KsMBaKy5`?t))>_muRFtLJW^3wfta^N2%#FsS-rinEHm^YzvQ>jT9S_ordJ
zXDin@>qE=>%tEIDL_nzOfk1w0kU78Yt1yQ^Yl=%^vGk{{8V{piAF*-NK0WHEi(kwt
zkN!!H?{Ge5(AkxxbS?`sSQe9I0$NvD0wi1Oso)V7pQMZaK995*?YtPn?7(>bU1B*g
zY}R}DoSu3E71t`xXWQA%Q2t=X+d%RIb*?kbHT4@tJo0sSYuD+5mg#{aSWUIhxRjFj
zHr4m&mDU!_<(I*0XRYL97&Z4p%eRpRw{VZ8zSZ1Nxf?#i8*WcI8;V+_6FpjBJlSF!
z800F(d{7H*?-eUh)xteQVt10L)qISGc$vW)nNWe6ivlYGn}gOC;CHnzP%ZckINl+Y
zefL$lYVj6TNz`H9HZ%^!_z)14-DL)p5?=Q;^`uCy=G0bsn}Lpz`fc>hKsWNKfrjzk
zcHDExM?c0HeKyuEcQLyLtO>5zHbi5N`}HDFG|OkGdK<NIpp!>sj>*zAGWE6b1`LT`
z2W%B-X=EeZ4ru6T5^B$=G){4E?4%puZUI-$5CwJZf6AhXu=d<fC1?<?CyE(=vjp<2
z<3n|Wr5FTs+X$&mS=y3mL)4p?9jDMa9kZ=sZqOtlR@QKcW>#3mC>+`lK0xT1LtP8o
z%B`PGlq~Y#Dc!LwR3vj0)!wi1z}G|1%g}7fe)rsATCp7dItAGYj601EP~-TP6Y`Xk
z8m?87)UhfjD$u`9)LKrbl?RwSSP3&^m-<D&xGG1hO;Al_R#6g4ne|OFC%4Irq<L2B
z%};e;R|Ng7J3+SfFA;FZ`fT*djwL6Eh}Fr-H5X+Zr8{d#P}ax}jc+7N`yGY*)Ub>t
zfM;99yN|d6BqU#Wv7B{pu5`!e#ttb_bUV>zxr#X=VLT=7@*u*$<nviyRI){ocfVes
zBI-VpX*2NuO&gAXK<~Om9LGE<`{sI|?jLC8zHII!4=hCNkPvCP)y~Qm+!v4ITptTK
zW`b>uLbFoW=<-UILr;`u$V|heI<YpI6p?aK!olQUMA1BY8<pfx-zC|VyOG&KMIWkb
zT?0?zVHzY>z}rwV1F+uPc*UdD3{jgQeTQ(*-?6LTS8%;)1^KLoeTwP#W5kh<a2^S&
zU7im>AP={aaMgFaot5UK;Wvj2Hgw`5E)+_v@BOoYX7gq>l;U-@-;v|BZIs=@=2`AC
zH4iJ}Z-PQ3OKF^ALtZfAw~w-G@gE_k787UnB(k2eaUjmr5LL!(p%i!*#v8-MZS;>o
z%BdcFu&=tHptZcJK_d={Xe-GSjU*;o1KMffqs8&D8S@3ipx&22f@s{WW?ZzdT`v3&
zW#<$nShS?+v~AmVW~FW0wr#W0wyjFrwry70HYWSdnpu6PZ{J??aQ5Rq4<}aqJI;>y
zKMXzmRDRzg^Ah5evcNqatiC;7GZ$Uc$=rH|TFs8(_B_j8qM3;Ey6Qg;i(=EOghC!y
z0ODIRWm$dco_T;!l{^=-ylYq$g&)szV+IqPN0$K4tdeG4!_ce=QLAjSu4YPB9>AB0
z`w#Lre(}aiO(u{W-<`8hi?<gGZ(tDg4V_hAJdSh$4O5LFM%RN2h*nP4ac!L2VsWFM
zY#}f%os36kR;PzY-AE%%z+Cs%nkU7r$SM!NKk5rK-4WvOC^x2|gDQ1oU6<Z7T5CP!
z+~S>T*0QOk8#?%jlTZA>zqs{wj3+X-L?(_G-y4gDWBADLn)llUPL*(-=&79=hX>&M
zJYwvca?GP~XPy!+co`xg#>fgz8dn)|9$BE3vaUj#(Kq|3p4nsDjJ@q?={dX~cXh3y
zdRliyT!31sk0fojKtdow3?bHxE5%W-0f?=yA(eJP|GxSsdnODltY&V;_~>DtOUNFU
zo+#tpbKSq94w)V_$gs>Vm}iq-&Qcue2JVg_3nq@n#iC^%8g?s+D-zEvL^doW8o)=S
zL~)AwkP5xE$?REFOf_pJKy1+XBz?B*RUD4*F}j>jHDuxt^K^v9t)Y*(ci~m)MTls{
zAh$;D`o`5HF5yT`#?I~8rkk~-p|4y+rEn^2)PMAO5#L*A1_N@fZPAbwMVBvbTbXlm
z(YTOc6a03!lz=_lr}9HP`E4eoQXtS1x-J+xyk^Q|@tU0m771Gf6k3zz_UlTR!fF(D
ziDkLY*o9R+r*3J4mvk7e1U;_O4P&BSxM;(_v-fYv{wdl7PBnoWG5eu9_q<`PLm4HY
zGW;X}php;d$po7LbDq9++AWQY{0ty1idAbfFnXQRsKgus?{=q|R;35UI%jU!xWN34
zDw$j)sp9jM)XW7myaC9BA1dx*8Vp)FEIOa$)8s9)Ns7cgbQnjDzmA*<78lU@6wq;O
z_fB0GBbP$0_*9jMnk7WL8taU<ddH}WieEilvynj)n%nO;j;>^3b_>c~TbHi%Jw6n=
ztj%b?s)x!0PQ5dyqX`1R33L;ezc|?j&mdf|zaBiGeDZ=TCKOtBcsV^_7rudat#`$$
zj~I4+=764@ML}4%G&prjo<N=bnO;SDxL(CuGWL=N4!tGa4Z-7j+D}f8pdPl$6T*)0
z6DMA~1g`-gGNjl$rUhu>@GRWee~pS-I=<5M5g}x1Uyi}Ej~#+tIdua)H?MhDwNI%6
z_$=A-N;Hr@6h&J7$!i~$VGHFp^ennYQqlxqMT@w^dy46e#rUYN_0~T=IN5gxfbE-O
z$u&WxO}ts_*(p6<^OfN983KfF@45;h`navO=6mN8<l{8Db!#4QzH?{{Rh%6|9NzC`
zw4nbD)eqKx4VNu5eFifH$M^K6$W=6`w3IG7Yvh2xgcevsvAJ?9x+gV6G|S=39&x!T
zje2ui4zOJl!ZdA{yi3)|@7&$o$}fmz2qdjZ*UN&avfYX8oS506K}AAAWK*IIp$5p|
z2`pSFuc4>}G{35bP9iUz*3P<M&8g=*f6IQ>4}sXfXkL!q;<Cxb`|Dkv*fP?m3>p!}
z^Ln-xsboopTBxO#nUgeltMh~wr$FHajhk_V7qr7QBQzn!QUU>Ls1p1T?+n?S61}gv
zJUk3$=QYcfX(=n~Z$zf%(ppM$hYk}OSh#P?8V}WM@MQ*7qLF}_HTxcxVn&Hj(@SjH
z#jy^r)NwNaPxx*{dWYLpVY6UCi$)*#vXa&%a+&;9t;Vd(YSB<NWfrpx&0a8~YR=3B
zBeSpKDAIsM9~u<+#%Hj>6HflBk$bmg5GGZNL=C1METce?3WI~U`U9j(rgrM-yNQhh
z>u$LV&+b|bIa@dZClph}xjs6nzalk+p`@==Ugz3Ljjnm3sw2Ny+#?B)z1x<0M_G0x
zg)rXuSv&w2pT4L&k0EK6V;$Y2_bN-dz!F|f_6=?X$xtjOX{>03B3`awHo%mB|C)T~
z>4jyzM8koZd?0222RW70!@yLf`)w(F(33+CGZD};_<hMUUPY^hpeJN?V0$+r@t3ZB
z&R4c?Ms(@x(h1f+{-WQaW{*S*<94T?x91`km>OV1?Q~|2p%ff=6)pfh#B<qlv4RAu
zEV)}V*-UJz3hZL5ZDn`i_xnGr(*Cuj@4o?2xSH4++d1kPo0!@<{eL+7)@q9IQ~g-`
zqG<vEF#Y#NZ2z>oxto!rhrP3%xt*OA-M^i<s`?or`8%BaGeXjS0WU<k$ST1W-qg{A
z1Dm|3sTQ8GI=!5-Ns?i#Mc^+0T#%;x)N<X?KDSFc_V-mklHl#}+)Z!lZxD}5-t@hp
z#`@_W#cMg)ZTxP&U!UwQe9UJh3~To8<+c+a=*-p1HPxmbr!mU(GE2C0_Gi-^O1$X@
z5CDXKq`279nZqj@29qixdW$}i&vpmw4u<TWVw2t|YnHU>RZ`R{T*3B~na>voOGML;
z>nN#Am|3TfMJ!#|*eneyF#*vTfQ<hzC&yC3(p$NAsS{DW_}d}XPV{+vd#*muXzQi|
z(AHH`U6xf_!<|bNQ){zVR`mP0d3UPQ#5i&UIh`u#%Eo%k)!`hQt4=Aof4bXUzw9Ec
z=p0IXx5<y3*{&+#4nAOfC$1#FeOc<ETJVHidbI!(VkT&!+t=5TfuNy{W*%_{Fq2G3
z&s<`dvs1aWDMzN`&e+F$(A^=O*wt5PqqR*{#B8XAr?0~NmK#9^!V9t44PZ_lC!eD#
zjbQSt4|kxNnJ2aWRkHv!OB*dKJwKFen;vaul5^O^HJG@1F?(`*5vO-n5stU9s4BHa
zX)THp_RW6h@|N23fq8I#AZ&8noEG4pbxevA4DV}k+-xa)I^FnE&;SwwJVRzZKu(-V
zs6*!Q%S{I@vXdei0jF>Beo!{JS*KX45K5_Ev^J5?3utj3RZ1eK<h9>a2_cuJu62|U
zMVp;{$t`f>bPmcBZj8!3`W{5LTBlf2sQ$PANB{)EApxhb#*3J@Bp?!y`P0Sx={iQA
z?_cGOHcFoG?V3Ws4H1@G^Im~OEO{Y+&m=y~H6PeY_FZBEtUv9#RSDkOGXlenW}A!@
zD!PO{$L&nTOBQh*!o48TF|ouWINFuxKSPIF-*39Ge2;YWOOLO+PfFji**lwC+nbM9
z;Or}T8)`xCUt&wI8r?oEHJ&T@v36GoqStTaE>5vlp1Ie2Tbr;;Q`v7E7~4Cryx!fV
zGw5eu3;JbrV5vTj`S3TM_`5ZbSiw;=5(USeP#FbM=V^qbt0J>l?n9<~3q_O1(O-Zn
z{1fty_e|<+On62tT717PC?xNtvege1WS!G8CX=upp?(3%*)tLtmE^T7TqlWA8$AA2
zmTSZG#fxu~wnDKO%v3l7J5bMtW(I@XU0`GYSOxI|F3o;b93X#@1a*ByW`^yh`i0^g
z40Ms%+t+TX3``pp)FXLsT#v;ta~~XqQ3X_2A0lew^ajb`X4dMBegq-9CQ*yn>5<b%
zO&RA<g4=1!q&RUfR?uPqRStC10ECXm_{4u8AbLWqUnELEZgV<%CP$RyFK`kuX$-{D
zAXkJ+_Qng}N{EmjO?F-O`;4gX#*IT~e0a)<9W-KZ4v0!5ypz6BMtniG!<;k{XOlwR
zW;Pu~+-=ZRB{&TBNmxt1gbIE{LVni01HvQ$tZ<Gy#T-B<2Qb&>NeVWlf1*KMnmZ@G
z#5JO$c7H)Nu-&8DKgya(hbN~Gnvqb-l-_#gtVdGXuA>twC?atCF-UX&I7JuE?)^9@
zvhUZ)r`*fbtBIX`@h)=ZqnP3)zNed8*ZI4EUl}K#_gP}WvtMV|IlROixLQkU(AS6$
zl4l-b78+^lq;79&>jJ5%W)#cry<jS7L@nVv9Gfk7P^_Txjd!!)oY+|c3(&V@+%xAA
z{{a?vCh*&@ydYqF$o*PnJ<BPnAu3Z3SMvr5NC-@pbV0vCKp2s9gu!AW>`U%bUic-w
zzR*<6YW{`0Z1-nxMcP><!ija!w9OkFc!0Mlft}7Wf$BvD-Nvs6BN(t*SA{r%<sv*>
zpcqfhGs7cgv1>QkXGpZK*AXA?sgcO-Y|rnJXR#kc^3xkR@>0K(3Of>CV}cbAHn>$A
zfy)p#1Zn7%Lc655s0X<-vS!0eoFLpvzzcH;Al$im&R@u&okTaaQ=5oz(R{|#oC27D
z%m~461By$3B;zrAXJoiLf;p1^5MzMy46mm2up_<LuF@oE)(H!AXu3kH#xtDX68jSN
zcL)P><ohIMIXf6^!N8Af+;2|}LlAAh|Alqm@j__lJ*8|PQ7sA^DdYd+Qws%VCvjVe
z*XQtS)21IBe~gGWaG!%4R<v!6*n%vi4aG^ID309#YsmNBHENflOo+n0k?{^`8)ey3
z3G((51FaVw<x{+UxA(rJmw)OO!Cf2}4C=3~nS4nl7(f_#CI}#{)voTjv)PG7+y&qb
zC!n`!-lyzALFA%&7$fm0(`Y^ic0Q*u*3LR)ks9*jY1n;7uI;rQ@7CrImeS%{Yi?@k
z_y!a@PT~71<*HQ^Z5VgztKqRz(mH15W)JKH|6Skh`VGEoW8*#7_Fc%`=C5t#b-9xJ
z0zea)m)6bs&eql@kM;w9HLoCnyZc+eS86K0=kZSEz%$oQM>{SIxZgE!=gxh+E=SDF
z_LT%Cf9ILQp*Toa7jk@r602i$NNB5s_0M=gk?Ku2C_ae|YtMkR+KuTHa3)muI_4s{
z7H&K#Gcv3PMkjb3YpGb2v^;1d=S9D2JkSe@lHWVkQ&!xZ0B+%lxO~L3$yO7lFd=7=
zG|J);bp19h$*%$dFG0Z)<zuva>E9f|!U>735jF&3@{px8A`ca2fMsggjCg-6@?_zh
zl*i|eh!3JcigtsJthE%11xgXXQ5@7^(SR4NJR0S&g7xx#-;;?G8LpRd`+2tl_1t~1
zXD^!$+&5%P&GgZH$fRPUO|W;Q?pPj2Xh2rL*9@4V0<L@Q6{E`oIa!ZmY{y*BJayJr
z*nG#p>mrnuA@#Q>0qU#J-lZruHIkv}DPX7)HHRqE6E+L->ZEE&Ny`^Za}1OuQiRoQ
zAT<&+fPxq%J7l?}*It~6AR;)H1<A<q1#lLbvM*hSc3n?7n(**FOsK7VJH;a1VFt&5
z7kWC1;%9$`d6b>_nR$I%UeD1_P_uvf*FbggagDu8YxMgOUd~KJ+<`p~OzO+ffaQ_7
zu#x>Fk>KK8<`U*N0SI5_#0v6+tZB#qbV0oN0g_$=*rkJrDP^PDntD&({&D_G%LwRZ
z&9CZMP=tp@Ksbxs0j#||qD2a?pkQJgJmL)?<$e+!NHmV{zM|kVhA;r!dj2GTGFhR(
zeMu^y{hb7Upgr>6beh}+Aj2pKWe$jAB!o#sW5G74O2PVhmE;>}K7at2SO6LMW11|c
z@clrw-uA=O^sP`^03*=ecmezr^}ivup2tMAZ`%lhDeBUaJ#_YoZ+JO%PDo8Bdc#<F
z246s7Y(g3Zt>ivL`v7j%)TKP3c*PykV`Eu01L0UzgyE!MQsA_NiJL?nLq7ETS&m`i
z+WIP5Ha-IX#;_KEZSaV=+sVWFBPIos;75Y@F$40_?2<6&R74YaNP4!BIX+V{F>E!T
zpkSTH$>s53Tm(8lkO4peT?cz}cB-O>BcSC2kk^8oPvMPBm5-Gm=(uv64c+*YR12ps
zt(8Pmh{HVSm`l_(bmmMeryt)V*f!J@sR1Qw`1;3bM?5PYGQ0G-tEkl0{!ZY}10C~A
zL#l@;i6V*&GCr&gW&w1<q3SOf2rXNVgfV6y4um0j=K|^jmz6+#vivPO3XM{pLBAFO
zFchyh@FZYb8L2F{H2_M$638NMd3$qx@Op4?@OeC;Mh|Mm<L}HIU+m{!Or-D`#gvJ3
zZW6N}7yc)|b%?xbwXT-}F9xO#@=sca{9(}-kT_)5$r%tVs|PQUb71$Z`!gDlWK8F{
z{2wxAbWmT4UQ#l;f)Qm8%^@mq#qsm}r$OZc$rQdv0i&fZ_Ep5FME+MvveI^bsTXRu
zi_~m&rCLs1N&7LnI2>>UoH`Tz%@Hi<auqIq2xmYI?{S;Jn3+5XBR=3@Q#wjlJfsQ`
zVhuUJCr{&RmXcr-5#BQI`F$Ix)qDzCe(&N3SVj;=bdOheUS@tjwETrc(O~YXW!-3I
zVS>V8O|AxHX(b+Zt#tfO)R!o+X@&T2TKD<zv^AE~B(jZXDp|6GDHRGUaq_%AK#V)c
zuW#Wi#3~$l=x0N>pDy31`cwmjsso)-*+oqD2BvDLUJJabgniFJgj7E5)yZ~DR7=W<
zyukDM<6~!pdl(4UvOh#?91PGnL9)+0!0~x6bW9z9Yew23Xu)U%W0-=5zbMV@WLw2B
zM$EzdtH98q$dg6u$YfAWD;)coA79^g#eVC!h*XtN`PvQj75~aWN+Ni&Cz$}Z;0;-c
z4y9<p4SkQ3RFXIXh~Z?}je@m5hj5F`BGFKDPNF6dt##ljl|>X^GJpt?%w9Dc&uKRv
zd2TKN{=#o-2093`T)+POLZdvhe-EeCX=?w5On7emWa3Q6rOz!NP<q6t`g^0OnxKk^
z#xrAP7mv+MHczsA0g`@jcAKV&j?;n^OfxfDC4m!Ri&=#M-rH^eY@98EPe8R4!2$|5
znEz!38Mi(MYWN%LH~j<>#Lv`QTkGH5hhKjdQN~&8I^3_>^4@;~(KRkh#2|~WC+8Sy
zA)z(n!l=<;3{x4<Q=klmUgs|$3#kkd1~Zu>q~NRr{Z2&aPkG(sM8*OqmP7j!Q!@OV
z3OK6GCo~Rr8!#=c%Z0D$u+J|eeur;<4hg_j`TdK&@|)*r`z*Jm*yn6}xzKN~uys4V
zt8&pOg`Qwqq$6Eya&Na>aO2otketvo!@v=R^J>(=nG-9T7tLh72<+hp%)wwyot)`p
z1h+x&(d?MCEMSt}ySF<tkvfRxK$tkYS2$$AdP&Y;zCtIGmJ&Fbc;lNn!a*T`q)?D+
z3@wh}40Q3Qtaw@fa^|==1qk`iH%og6QK-g&0?nBIZ#I4bD%K8p04$Ril{V|vBymyT
zq+VdadHWpdXja4IGo+@(y$<)FJca<F#hCz#0L^dX3nonbUMjncjK%g}idaOYo-|W_
z(hg;yGW@lFU=He0ms<k*y>0oAoygupmI>Yf`--Kai%3}~h)?+*_IHGhbnJ3O$w2%A
zUVCRN0t9ODd$9xV0zAai=jxUd2w@#P(D))rYm>$1CbFboSGd5ZRNpHabYYahw`_6@
zyrLngix7f%u50XyM)WMTGHAUn#dPOtC}35_cWQ|M4XEx9uTX6o*hy(A=h`;vhNuiv
z$)YXk=A3@`K*FaS_LHNuO22~A>F$}AU!hj`kDMs@R`mh;XocQV<%vl7<>8Ej1La*%
zIg-i7A{1u@nhlM+rv3tz8v)lDwrJfE69t$JC{;m(aBowfDIRSSV%VX<_G}4WuiFZh
zyC#3*#R*4m@Z0FJP!SS=xY~#r+_%&2H@8<HwtCG!|C*AC(=aOL=gsdk3>cB?+uTD*
z8mX>BQtksvP+(@VnkW~M*yH@;5$dl8#Yaqxi49i^k+zY!w=3rGA?pJ5YNa>N92>j{
z%&9*NjZexC_tZ+SPv);>gd)XUE$}Bt`u?}p-W0m}lUA%nXE#1Hax8ZDYyeN2(agcX
z3a}n*VII8K`^jtRQ#e#1!uH;Q$gg6syL6Hfse<^<zd8X^>-0_#0x{B>2-(dIpE_A(
z9ufA#2ryt_arrV>j`%$N-Yh`frYBtBN=m5tlmH2#mobv#CKzF;s3&J6JNXG9Cj_i(
zK~o(v`8F#NTRe~~?4ag%m4p}dz|oE@@2v<`L*y{lg~Isad<_e0d!wph`gb5;IdJ|$
zv%L%cx!3e?-!%I;eRo8(x2_aOvVs`|cGTY3_vDm)EVrKE9iEe-l*C2~SSd7JMrHCf
zg=fu;wU}-N!j|~aZ)>yLu!%d_pc)6&I2SCXjJ#3Cbt2O#*=jrTae!E^)lygRA8x$&
z^W4F44o`58*T;L>si<AR9cJid$_Umg_6c@!9hPZ8wmUi9R#v2{h$e9;Rw%qnefBXx
zn(h>k=(ki^yV4=E5uplQ53e_RmIYN%%nRk=iAD0Kj2g{9uH0qx529Kv9{X!+)v+}K
z8-H9HiYxEL5<jVmBh_dKxYN2DcPmw{)XX<=$%(4d<Fc2WVtn`s_CA=d0RtfjdB`Nt
zG(-}mY5r0u8zEFwzm-vcb_MK?DI3+;TNC=^he_(|r&3N^)FatLK`>eiT|te;5YMoX
z%qyQ1Y2a$uVKZ2)@~*@Vi|Jder<|;U<#8IlgN)Dt{tcDNI=@wx*aLUa4Xd5N)<i;8
z*uQ7VhgmAbVp(lp?$%K~O_@R#3PHjFkIJNtUByu(U2%2{RAeQjMw1L_L&(v@v8V)b
zsW$h5X-0vmzL%^>*4$Tcf$YZGD3F28h(=R$!3{0ig;cxyOmVw6a!SAl2R-0+d!&qZ
z3U8{;m<x{)VbrKQ?|yB-Z*xME%_xPCFH)B)mNrH}g`6uHpG1-gkSvN-E&8RB?rvQM
zC{iB7g0f+j)Gx=9Wy_>1XCg~q8c+X#nxkM&CjZl1c*aUqvFiKUS37A>!jYocNY7eh
zjUj4}`ityh>d=H4YU=ORga1&sgK81988#Hs!6#A*y<X$)9rHe_MT%?5o;)^K{1Ph1
zMZlFCQSpX(XAFPRub2Y^5CIj2r~$0^d`pPVg-7DJ^05R~MR(+2<I-@2t()eF25Ja+
zE1=zo-Wi2xG6*2FZ^qClZrO8ji1xt=w91cQ5;@B&@%XDZ1O%6)I>#LhENkF^ypOEI
zYi||c&M%Be!c(q_Q}I1Qd*4&gAW3r@_-a94sbXgVg4y^o*I{iKmyg*_i#L-TN*ofF
zA+>%GjpO&>=;(M9>Zwvi2hisZMe6J3&PqR<rM5@@$WjCT-j!|l8$1ml;a+E<1QV6D
zws7ft7P|;H^E`=4RWW2TfFyAAI=4Cq(j3U9BJ_1u-LNFwpg!z<E5k>Y3EXLsVZ;*k
z_t}SIB2zkt0Ra|DN!$YvyF3Cge$?X;)bJv@jQRr!#9`)xUwb$<V~G+8X^!^O{EfDM
z)qGGh!JJ0tt6s>sK}1&#go#sgTr6`40Ec->l3w<4sAt6N#GyVdpRBvbuiDzMRz<d~
zq^qUG;c9EosLN1Xt3eJ{*C?h2dD%533;30mQJnM#B71Ig1ZN6$+0_yx%CQvV-9}0x
zZLD=_aTMlC5${9Ginbup41DnLCK&c7f$j06A({N&O-$nrcj|+t>QAHQ!M2R02r-kN
zH%q<-O<N=!QS-4X4rNM-IE-q6!gsr#kSys3i3Q@vxSfKe4qVWjL%9)lzYd6LCja)q
z;nV_K=&NT9*NHR!{UC^`QBJI<tyM8NMUpkR83skd)0ogGF>5|1acH>(BN^@_OE{?I
z(O&?EuKs<eOJfvpXAQM?poCz$7lr>}Y61N+dzt+bh|n>b{JOwv)xkncG(O%LqxL1w
zp-Jc7x@fj)B`wHlXk?PGY<mQrG<w#~ov_L3CtOHRm^~mg)mydO8b3_1sEXaLPV4r&
zA4@LS2wIa4pJ+_tWW=Lyg|$<XJ#>7I8+(f=A_gK*%B>SAtN$(uEFJ4`I#hY<+!5p=
zs*`ieACcsbLqK0|TX^;|cjOiGmf2iQ+gv&{@1@?k69{na%hd1P?I*^;$71;8g97XT
zD2JUJ_=(Oeb8(GTzTVi5GcN3J8~&=>RJ-A5+_lX3)nxFVSN;SxW;^yeqt7*sv^bvB
zbd{&D#n#BOb6i92{MC%zgI_@1OQ}+kQ8n`d*8b(d(><XZ1?&m~9S-f@a<i!ACA(Yi
zo3ox&4*Nzms2cK0O4bCHP&yx$oIWyFi?C<C4hTVe!}oy9@X!K_oP*H6?xK#4)*JpX
zC%Lv`7g*$^hT<Dn2%1w?`I#+?rLIqXRWX;bM8c_p70|^ZmF#fYqQ?=jI}pWUzIhmp
zGS|+)Tt^HI7zdEuI-YLifIc~v@5oiZpGVLAA>aUyf>B4~6nDpi8}j_@cdH+`A-5KU
zRcuEUHwwrix<LWXn5%`ymWKI!`Ybv-;~o%5ym?Jmp;!7k^JTfi0wc;AHFE+?bV}wN
z*oa-sE3Ll>@NAt9Qvr&MOIlnb!58z;t=&Ru3Q<qKg4iu+#>iV)Wf>A>39`l|9{|)1
zq`$oP?gtVp;b<y(-)G&Lj5q%q9zpJ&if>nEs7$362v^7iKjcaSv!fU9-A{<qz%IRF
zFpb$vWICaH!XA#3<Y%?^`x^OHckdZ0V@>em!(-F|MXmjgEGfTNABSb|9dSHC^XPYJ
zMz7h0J!8X=EAsJ*oo57bD-FTPM`l?P2%r_Wb0TIm9IApbN7Oo#)EgtXqWK^HA+z2y
zE3ZFzwUfvA_H2)+$L@0)e`c`3XTaC`A}8FqI25922d%S>&(+Mh%=_w}l8x1Ii&fub
z?9lBzy~ssYwt3|btDk#9Uviu?bFPTmT3A~iPg)Rqnuuq1x(^O(FKnz=I}bp0XM1Yq
zL(^)tdOS6-r?0Piav1Fv!eyXcD}HDQdfV*;>FA|)diRG@Ru`$Sneg{Nw}f3+NQEul
zw^XonmkW0J{XL>#J9PA!%bg@lKZ~Fx8@-o;JsYi8$c44$6PDKf1_pLQz~xT1O*k`S
z>qCI97mcD~TzAjjWXtB;l!$3mI_buZf{S~)kR;5bcSJBMdk}IIMuZ|LQVo&1UPZsO
zzwLKLnL^It7vA8q7oodC3*Y6PNwfErfiNk~an0d797gQZ^otsd;^_(QzLEyc7WCkX
z@6m3i-}f=@isK28a{B}BIE)`>c!4uuU%<uS8<&T~)&0x~p49T-khcCv0B-fzyOFVN
z06O0@@f*}5PlyXDApSy)lr`{mR64YNb;WxhS9>~!S{GCnyWqT;_U2^Uyi^m{vBQ9_
z%4ABl<&kLF>fwYbdVWa^CXx<{diXVaI-5oN7g#8*?GIH0@Aofy+I3H0G+B6liW+u!
zddufZ=XaS_Yuvn5TS6ep79S@x>@a>JJT!G1VHVWw64{gM0{M=sv9l$nGp>=4*jmYm
zN-)2aVa{%|z%J<Xf+vUVMgX;pC`Tu#UbgVMZ&a)nXMLt3S-Hr8+H!FkInt1Qa226f
z`B#wbN;JhGjzc{bPLJ<*^OuMTi5OoUiL2v@aUg!>#*tim=SWGef%`rJ&CMvQ+bQ}Q
z+N7O%_}UxPU6aoIkGMQpXaZFpaAua6lF?b!B~4#v8r>2+f`#vFPQ{V4p2cs<Zst>P
zcGY2WkF$?FLb#Q}kHaE*7u~Vml~0<*m*VPxrg$MUf21$91hy~7K~K3<xBa!<^O@At
zbHSr_FD69IA!TCUn7+6QI4(*&rsOmDnOS#|HpEzc^A|>K+{6vg*hMNfNBBp~v^ASE
z@x|4I%IV*O65hb6zOXb*Ao+$AO*M%Oe?yZ+tZ#R9Kc1-n?C8mWN&v~*2SHkE6ppB=
z#Iu8t(VNL?p><cge<cgZynk@@*kabeE?}~JDjFzxM76M!c}pxo3(_a&5b1rx@X`8b
zCo}X-W`w>YqPJm<<;-SQR%;6<)xm!=Yig^79`oek5~N^6r{*!Zn(ve!GC5EPg-r$a
zs@ilt7OFeyr~kbnn|rpLOTGWFd5H$u2~5~Ijr8Jwz=nK?jQl+wE9S@j3a#d}FlHdl
z)m^g2eFH4*y!O`YM~Z&Gs?CAijQ5&;u-Yi*WFmD23^EfKd!)#u-NqK-2DnNyiMZ+!
zD^}-#0&9i`G{?l}4&3O~h)HP_<(}8k(}*T_pi;Fn<PqPmuzSV>`>iW@KqbL>$KXQH
zBh(^l(B8G?eSoh+fW$1*(8OD;tz;URbD&&|I(PntKVsQ6fE5sBoY_eAmzsu5qXm`d
z4eI<covz>utmK@!N<4Vv>AGywO9a>_?N3=z3hzrAo%Ji%&DPNhsem=@miw&}_*Zr+
zRrkO)m4K_+T2H8}-MBzcLO1rP<YG}ZuyHoUcx+YQ7#v#psoD|D=@KspWwEZlQ}Hb1
z)}Nxxvkt#Wv&$84-o1)%@PGEcwDp1~Q28PIq5Sw?QvCO~vL?1>7PcmOt|ms#c8+v5
z297GqkO06tiN)%=Qf2Bc?$7{$ASXXuynie@@qM=a3<$zA2h>l!RbV8V3X96gf`;aj
z5Q~tsJR-6TgG8&NY>gj2u#~9#y94IS9d@odBO%HP`D)UA0jQ!>>TAz?wEU^cj2UV$
zFDcdOe>tOFu}ToZaANy0v@pRqWb>8IW2)>4^{MGFtS$0MFd&t!s$uN`Uvt!?=$7?u
z!I%tC%-Ui7Eq+qkoa=n?rkWIk^8mm2s^m~_k}^O3U18m$SwZ-5A|;H{{?Hgg;v`T!
zy}Y9xP3U761<ue7?{gsXm)=q`-)(}!U%hS_Q*?)wCc2oQF`Ij*NevNbS3<tx#2p}4
z$!gTCz~;7A6xLmuK3}LQ(=HNcB7ufkvHM^GKP=)vVw6`zNnOZ(=qPdj{Zn#@>^Gq&
zBlgDw7F*;aZ5n2>WwQ&d`#4lmYBtw50xbC5?)TO6mYj{M$`pE7bWix&hSa4e*-+I>
z&YFAZfBtMR70*7{KTt-hpNHVzd^SC!|1e+tpTNKV0A?cqatPU2xmoIQn7NwDMX3Rk
z{|EVt^79G^0Lff=NoOKoPe3pLfCv}>0M!5bQbiE~VHuHs1jgpS4vb{g4aW^O1fLbP
zivv<ev4X#@32eSfHlzxobvz{(jj;%AN%DyR(Ef@K&pgn&G`}p&#=$2@(7b+mJuww*
zWXNRDof5T)Z!_q07Q%Oy<nCyHaAM6RSHa8vN8jBVrcS5d_XZ02wRzLw-hOt2p97jN
z!G|jqyZM!~XhZN<WAvJ|c`@}{)@&)+^Kz8AY6^;-hvUWCC5N2;t7nex7X6iK<VGf<
zOfEjoXD^3^Tm+L=ilt39l;_Bxh=ER?KIJiPYIA6C!})O77({`}5ZyvWmTlI!hoFd3
z3OJQ|$gl%1p~;<jh~h?TRQ^bc99Bw2`$2@vtf`Q}#LWohU#q$%WpLLd$7K#&I2K*n
z1?GxuShQ*nEUUz189Ma6_p4N9#hfP?fSXFuxsY=Bm?<)Ai-FK=s&ZRx8y=-2IG5U+
z=53%E#hPqK@PLXDAdG_xX0~6)${bqZUWVaI`Ki}+{)0b6?Q{j0R}wDBY=0j9-F!G#
z?nai{BY*2{fblEpXkxn0rY|cUwy(wFmrrX!FX6`GhyY>`<-8yp@n51SG^4QqqQ9?L
zXMy44)(TOEk&UJvPL#qj(9NZw2XCRP5Dx@_9UVv-$W{cj(wac4Xyvc7?hsc;UO)dD
zem$o9)334vAl;9DAsqv(zb6cP!P>Z#19?}Cu4J78nPaOEew(EdCxAa}S!i2#QL>t&
z28Fxqmf)Gq1S?gQB6$_bW!9KvG^%R(e&`MGOvtX0W_*ipcYDZnmlHR^I&CL_HP09%
zFUy#_U}6K@ikeAMm8r&oWpMu1)6W3J$zIZs&Y+-gvXH8naw~zU(x}gr^3LYSp&nth
zo_iTo=&0bRz2`%*@R?o(4c7pDLT;D5_JKJ$^Yw6+O4d+<L#KYywMldAGQiInIwAui
zRxBVo{&I;s*?Xb$LXl<h>6f4^hPOI>O&v=8<<Z3mf$@5<45Ld`Jh3+oGfs8RAptTm
zB-5Tjo7!;gSuo3#EC?8`9PO*b6}<|{eQZY2asEk7+hox#bJA!2@mV2b`^+y@_W44Z
z9k+TRVrQ#%&+;0sTcPL?W4oYCOX;M8asl!)RHlpL)!Na~r3VX#|GJ(!m$RZfu=DAg
z>l`fcXQNT_7Xad7X@1p~6nl%6H{%E`j<}f?@yGdT#w_?L4$(Y@#Sl-liR?w5e3jH~
z-<oNIO^3UgI}{wJ9E}Hn6i;Zn8IGM$+2`TwD>VKLIP$S0@M|&`?^<X@)E9bm&>LY)
zL)s`2TWeK+lHw5oGSC&kkb1k2)0*K+-UF(puDl$rF{o(P7Id`tF4hHA<GsKeTn?qq
zMi*t(c%e1r2RsOs=iW5~B2FRmnf_M(PxrG(R8ge+rU&q|ze@Q2IDDDROQ5xpV4*OV
zk=infXOP9(o6UvtYXw)w@%WV?kY(H~;8q^><%TD<WYg^o$3@dl1pGd_V$rMy8~L2u
z<s&G-I>eB&R+OS^It!2hipCQxv<dIoO}PgA&BLr~oOXhZ;MSn)W4qKDz>0F$mF-kq
zftpZljUmmGyP^kOT~MC8)1;64vMA3(ig?Y-gAj&zp)8{%5p0OQk3{xkPKk4nD0}|M
zayH~!*u*mv^7}qk{j7lZmdg0*V5AOCSHFf8{oBJ%f}74)O`R0S)>F5Gu@?5NZV9>L
zq4l=0w{&_q$dhqzpRO8~@)HTP;;_}L-KK*yu1C-p;1cHgCg$A(<~!y|3T67kcEO4r
z==^3qdyT<nduf?LET~}Zv0c-JpCcZ4JPl$R4{^EkKzgG~DPxMJs>Om6K|c5n=XXsA
z{UP)@#Jjvy5XH%L=tlDS!ljz#*8I}t)S2(?`+y~#UG~w!^2goj`i{Mm!#!ed%6)9Z
zp<z>6=}3zM1Mz~g6=fa}a_1p#1cSZ<^qg0K1lVYcI#(Pg)<IYib)ABCi6yqNO|;TF
z`*|z7)G7OFmuL1I|G~pDTX7VVZ-lpL8&`rfdM}Ehc{8b<@$0zTYI+>=ZpdV4ugVtP
z$V{eN7MvlV6mTB54jWUZ6Vuy&I(z(wo`}d*BZGkcoI8G6(6Iljo(RdwDl19|s{9xf
ziv3?z(fO~(jcC;k+rR%%6_~qukl&Y=Pj|KNNv1($y{^b4w&*@Z<#j`vL>dY8g*`jW
z#A9o^Kz|TP0)+9VvnFO+o^vgH<W`<@mt);}KDxW}!zv#iFQ*c@yJ9bLb9hxF?Ov3Z
zUWF#em~pjTLoyT%eOokfV@FH?WT!8ginhi>tIxZr2P{X5IeN4X3>Ei0*OID>ZNyb5
zV96a>XGg6C;cM-SkVe7u5;h(}Qqff&1K>A9SL^5xm~=yxx$FQ$`j8pSIo%ZQ133R`
zW{Fl!giJFx{3!$Q)91eTf;v@pQkz_1l~Oq1_H`@a(Em&RoN289O+cTrw3QM%n<ydO
zHN*3j=ZxZQt?tFxXrgrRI@d&NQ%iH-yyDt4kLx8{Qbjg=I+(EUYP*8MiNyjnyKb^^
zEKTtG$V+|cbgoDzRZu$Xa1)gpgk!rtSb}$gF|W&!u3vu|jOtThLRx)<+X$UcW<8<K
z&CaeLPg%OH{j?(xLDx)Ez&~H137%geR25o4+1w_K=mi+XlP3P*Hlu<4x|F=(8)Qh%
zR2<i}T>MUj{nm`OZI8EtZS>qIlfQsU-cCmuL#C{>mozV48TgGVvBak?oZNCmpp)4y
zo5c)6lD9G2yhkykvqu*MR#x1cA2y;e8oI&pRA^eCV#K&zz(a40i-S*Dq7Nvkl?Ywx
zrXup<-BU!(C#_v6(o3Q&ezhz8Zs^=f8!HB>Bpda3hope`XIaC!<nbDb`Z2Z9X<Z?g
z((z1tdS9!N_9I{mBq<~HVek(|O))E29@jMWMurl9`4Ld+;o<6pmbq&P6tn)^+j3JD
zB|Fs$#lT$hkzNv-uPDr6h+!H;hM}W)O$23nbF{>8AhUD;6PEH^f6D5rs3I2<?I!eS
zFIo06^qCQ@(yrmYChrO%oP^TD)71U_{$-{?9xK9eCr{B0`i7vIkA>j4l+B3(o3ZD?
z<Y}I5&K@t-;f=(#6&^A-akM2v_QXJg#oihy$D2|@6vwN)a40f{c3d*+z8NEeXtX_o
zR;emyJiCF6IGQUY_Q~!Nk^{$H8{<^O%k9<M(Za&ihjjwPHs6|5f$g}(y_G12TXo6R
zA`~$$UtSJ4<VoZSHm+Z@oP_aU4`Z)iX39?C00qmy@94hWp`Af&=6J;Bkk16(!rnZZ
z=zxNl1>43D>ent;zF39C=LFS&Q--n1c)6>iT3I2pPJ9HUvXDn5d4;*6)7Wnt!$v9@
z1;mLXCVz!C&TdAgb{RKHJ#<S|1=S=(4TmPm#W@mssksgqoplZBdIBdVZ~brJeX_$d
z{Vb>?l9_2e8ew@YG-f22>lRybrC-AFn6SPsEy7b2gV#~`C;AD0H3JN-A~u~~aZTq4
z2JhT+$NKtOg7C0~6rYa9VkPnj2TmRvPj$4+yrCHyWz#A(Ho7Bj;qeBo!pYI?eadSr
z+tTfoJU5U33Nth5i!e>vc1<s2ol4Z?&cc=5F=4=DF<@UfCcTS@9NTQH5J08EoQNDK
z@D>zOTsYrFM4x#!BAy+a6&c|uU<N5W$1yk>IA6a~sHR_~jX~DiKe{_T?zLoozgH0S
zC6cyQ+xLxUbGh6y=ke}^rfDoT*u!4PPc%QP0!UNq0k!j{wxMrnf^SU3u@p8d3D`iq
zd#L6N$>+)pV4RMGqJ~;`FMeBN8A1}TRQT)kb!&3-VV|;1q@mu&epPk<gHryl8+nob
zYhtze|7qKOIpFfr`6&*mLH?!9`_Eo3_SP1*R<!OMY;^Y4|F<su7l}GV=~`}s0pWA=
z1GNP~gfgj!Ab7T3*2tf%s6x5XI)frIYtUvAXX74z9j>m&$5k9WQU4uf=e5htZ6>vf
zJr093F{>7&feS%h(GFU+Rb8sSjOF6_U998%vr8yV6@w1MG;s`JIALdBaG-7uHI*vV
zNOEr;5k=cD<Pew6$ZmoPRw5w1pA<vY5b`Y@!lyHEl=Ktr#LdXRW|Kd9xwjRpur_%P
zRe^yV1y~nV-JAdhN*7uZftrCPyc+9LwRnjF0XWCXxNo$7Xq{@U0hmp5;6AZo?!Y=x
zX;Yk96{(nXEShX{o|M4GB6(S`OD5sa5z~pwUy<d=F`nBo!8N6Ip7pUa4?ajwo?M~R
zheyh^A@l07<){Ohgc5`_K1iSbF<3$6Vb9xn9+<DSWi4#gk8@apa7FNbunSVLX-9@9
z+z*4ON~^L^C^G`|QR$k}>JR?Kdo^px(Vs4u*13Lj4F6rCN9}8d^c-Dn8LzMRr};g>
z%2Y&AXA~Sg-#72Ao>Q9#YeuzA=vzsnF@!0KamMJ6$hsywrpaootbySEgXPFnK&2$5
zO^T_iDg}NpFAM%{*uePDiwozyZRq1r)ae(R5$OK<*!bKjpa|dUAg{aK*6cXL#c=N^
zRbP7UPo|iDKh$$Jlw;=+G;cH(AQ^1}Nv@i*7uwv&V;JQWI_3UrT$b<+O=H1{veRRI
zE`lzxTBm~<;k0D>$$Nbt+IUeYdLnSKBpUStW1)~ozbNapwS);KC{Z@wtrhZJ)7hRk
zb1Vy0eOtHQ>SC|rK*x8lbs0=O8KrCXf3A;31(Po#e<HRK_Fo<?exlaE{vTocpTGqF
zB4U$MuI=vFemEY-H5^U!P(GX#7q3mF=VX!tp&1EK?v14xB@`sGW0w1)u96B%-#%`#
zqXXiribWCo_s7<L*WSlh<)EbuD5s*s@KUg!_xI0y4>Ml)2HnQHB{b<%IIW5Mc4+1p
z#-5Z#XTAPTX-Ikc<0y%8G#7cqcZY+3QYg@bQi5ax*R6YPkeV#+%F^7HZU9#zVAOuV
z;j?j+qP`DIst7|_fL?Iw6@;<`2$e}AzDNw}Bc2vn=(bSg0lEI_=J@3A96Vcb)E@%O
z(adJtjpWQ;TqVL}b6ObGw0}iPi~>4A^pIN?IaT!9w;nyW5Z%Fw-Ni=3Y~frY|2n65
z4mo(P)W-;+4M7I=ZDlj(Y`QnRKDq+|ba6($yTHxXG^{RA_Qs-4oY->aOp4ufTfR=^
z%-Cnct4u87X%`+EE!~YcbGHEUs?aif`JU?z99Imvik-mtR%nLCL{<o1<4l%%L0M8V
z;bp|pVTiE)Su#J^UK1_cc2l$;W=Aj}kRD7og;a{T$>>^V7gh_wnX(xnREka@K0d$r
z@uLwB-|wLCtEo7gtpitzkf{-!sxy+)9^_3foh{&Qkyr-(Yp6plkPq;{o63;mbLfNu
zi2PQBas%VtiM;72Pd1n9-BylV{QK8Kg#%S!%yXxqBNXNPk~M80^k>C*OOT!E%%^Xg
zTW-x~G|*uU#%1ce<ljTMqEUE!F?9?gM|&;|*{$?r*(|Sf3_IiAhPb{N$*{T;8oxE%
zN*G~*f?v@ZlJA^wyAp$G`o0;SgXFYtTg|#O>q*9(iI5lrA&;6fzoqg0XC31V74h<B
z>!pUm!3>GW3ebw7vqVqvOsqLHXCx>O4Cd9J)f<!ofv3GCw6;d12J%(vOv(0VE41zj
z)fu~x3?y;|Y9B~<XS;K~iL5R;xC=e(Js`;=kzY``S30odz!tn-1ixo4?e4v0Cdnnq
zXP^~xDBl`Z8%$3g&D}xhml>t{IqGR<pf!3`#sgJHe|gD<EZR`V9#Wd9f_PYl(av-@
zmQL$C@;r1lFR|K873zb#lb#xvrBhw8vm(atiVS6y=7X0^sRypf;m}bP*}X|_8_3YM
zA|<>_Kn%dOa%fc>Sw}Krg?K9m7pE5?{XWGDqnT5Nnmp8F7WbhE3GcNFx7w9Z8F9{a
z40FdAt_v?9aW;OlAjxA2vRTD0S`|(l@hiTRJpgH1kvh@2z;euf;-35jHS@bt4Ro7*
zho+;Y;H94(?|Zr`T7jOJ<R8*%RL9np+~-qcxJ3CB@|d8<3R<;s6L%`iEKt95lXt4Z
z&KKz+W0NG6#AXF8&&GynkYEidJHr-d;<JWI_th_Jiej~jIHV7*q8j3{gZfKcKvK8M
zIwXzEqy^h5|3|#w`*_rn!Ly&0FVDw_U})7y={Ft@*nHG|Nt{On237xhlQj(yk5c!9
z_)-sHyU(!oo(;5ld%eeL5_P8M77N;jyt^I55L;Cjdyz}}(zaIp`Wo2QU%TI)=_%X3
znrI;p+-?t+m#&?hsbTAD=gncLdf)$0`2YPYPWq>G`Uc~qP5e>iW(WWPtbeKS|67&+
z)6mSnNN?H6I(F*}D52M{sA89}d34T8jggm7bIw98kdlEVmKE|DIKS15#F~}HeLt;%
zXc_+m=z{uX9eclIrRuhT>R|jfBt7L`v3K!!JzQ8iJgz}Fh7btgj(~_NehDfM^(}WI
zOa}KECTIkM5>%$hWxR(Ot%s0_r=H9^z?7Wj!cfH(*s#s9q04dM_V-fgC(-~!$C3<5
zDRipP7sUkXE>bto!%?iGz>sl|s4e2u8(>d^C6VFyEtZ`&5#FZzhi07SVv02i2K<ZS
zuEk3-X?~WeqOmBpxTJqoO1!aYqKR&?Mc1xP+q3^559K~M>zS%>n+%tJ1=_UwS+nXM
z#w>~WVdQVe7XeIx1q0D@mD9MAswvrV5yS00IX#b6(~U^s!3~W$*p|L^LByzYJ#TEH
zSZEJ^cMl@@-}3o%NUZfOSCjcG*X170Y@uN?5GI^0*}@l34$qTDE;z}gH{ddTBz*n+
zBz*l>gOhsGkRt6Fnn`bi$iOQRs@D0qqi`1JnfvY1ov495if)gxfn)RarF!b9Vmtrg
zHIc)zfcJq|;xH=4v1MhE@BKzJ=ca~FoI`?#_m!BS;vy_uaFt)YS4V0bQ9dKFf?Wt}
z`RkcPtT#k_-O!u83X=d&9<UUA_B*sDf_r0GfRIF)hOj23tC;zkW|wqWFHiP0fiKPk
zd(dPrn@{RSh@V<vWpfZ!q?&`bZ6myda2CUo$+_Bt*i7NR?K4!xaix4#7+?n3NlelQ
z)vh?u*a$uN)rW;>Y4L7!vT)Yo9}2q<5=&$qWtyq#ZRU%4pI>E3{fZ&4<mnaJ9=^zV
zQy4un+iKyGBwrJ}dFa<(90Uj#O<j7Ka|N+hw)H!kOX}BXZSnQlr+)t|<8m8tCDuPO
z&WZ@|6XZAmcJ?N=PEOXejC7223?}qHGVW|`ZenfE%=GUAeM@c6E|UZ0JEv#g;&cA7
z-C2h1v?xbb3<%R)mOq##vZUOxk8+tpSU<(}2YcNRK(fl8vEb7#B<X*=bN}9zn;Y%p
z@-vjZG*l2LoVk~W-;Z5u$TtoQWQBFxLjp=KL4*LHeq1+Wj%4<^z3rB+I4ln1CdV*^
zPZ1PL7_%2^_wikWF#<{KySg(!d7Vh`eZPAg!a{9y^A1)DlfbI4UK-3Ve65(pi#n$v
zt}pR-4}fLljQWd<zz@cJSkW_;83`a7x`km4;maS>UQ-K8#9oYGW|T9Q?)lRmUR^WC
zf}VTUlv>@gx^k*>3HDjvpkHguP4P(#pAGSF%g!NVKaIy>_}#W7l#8t`m#seTu*#n~
zSABajZN|W`BQKz^Er(T?U<%Z1kMn7BcT8LRar%T4ZWPOw#~5oA6V7&O8`B;-I^4SG
z9LVk5u7Df42hYQpBzkY@1@+@1JDwx&JgDZ^o^3nh9NH){Oigl0TX|ckZX7;NMx1$u
zdTu3}`@4G;TYD&Ahv<@%r5{rxB2&b$Ti9^<Q+mrOwDIP2V|kxgLnqkv4nBX*FPy03
zmizRhw9q30t1H%Di~KQGu_3)ObgXe^?V%;tkUdtQ$%{{UJ6Zx*f&j;~B)OScIoL2c
z*n7I{1?tQT_Ovy5H_e@%7ZyT;t@mfsK436A*Zq!&erS)S^fqc?`dp=aqcT(d{d>I<
z$hpSp#g(vReb{SQ*5ruYGq#>Ry9oP8bU3H5OS*QPtC-9)I=J~G<Pp<{a56aHi1EM7
z1>zk0>m5)?zt~y3cy`($9d<d!jL0%|5`5sl>ez}ARM@yk;cCjhwo61*U{DQT`|V#D
zwTxfB9tao5u#OR}Vv5YO$OP~Z*QSZx4J7U3SPgfR2BpJ;FV?_UUt}dm5U1-Ar`sR(
z?v`dkF2Zib$-EW5iO4z&J&x4!3krhd>n#K;E=@$fX99Do&6K9mST_b~&`bPEP11dp
zXuYr#8)<!-5iOh`Nit=LLZ63+JxLf*Un{^!wASls(YKI~4Ojf#Qf9(V=qwk+{Y~D@
z4>9d;<3I$#>(-a{lG~b<RdY*fjfv%&=bwsS9X?^Jd)SVOgES~s;%UNXn+yaZPDM<<
z7y91_W#tx{1iNXhgqBLm*t_Cwh`XT=wSb`q&zNzf%`@tpNc<cklq)vQ+2{w^`-;t8
z!@Gjtj@uVZhS?KJy->`<(}AcDHxBJj)Fj{1X6h#_*7k~j_>%;Cj*eLsOh3NqkrxUz
zCZ$?tETmNnf#u=2u`1O&Q-ei^jRRu&Zi^wggcHmq6FSt@N_TNZa>ptv#AY93%@JXD
zy6ey6e^TiVE{;T+y8Z~p{?ZVI136;cHa6&=PF`~cI|Q_1Y#45~y?Oo|6Qzq0trM3w
z37eno0ZZ|^yim%(8W*+*2v>-&>;zL}I+Yck`YVn_RgX<E1@7Y62pFk-Fn(0KpSPg_
zu7=)07<}hmm6PFj89P40g~YQ2w_DKC^Z&2~%bOR#<bLkV-r)ZSp*H$=m2;Dtjne`L
z!dH%7T@kQZSlnVsk|2DVG~~);G5tajxV8aPMAcwH%wfYp3FzC7omz?#7wrnR>1e9U
za>q<}&4FztAnj`6sS4RqJeZ%8(|Pz$B{;ybZ=ZB$%!1YLK-P1^FGRl*KdB7v=>S7s
zl(!p9ouhM88^j;XiUKHy0#7I>_=D@~9UP*z|Gm~2DANLbqi|HKuNEf`+qNHENSv=v
zW(fDev|A1q&rg7EL8FdjuMUO#lQoP4fKvRkEJOQYh8Cy;`}s&LdP9S{zV^!W?vf^%
zg`q>{)6<SL#TRG%E#@N|WtS#w-P*KWNrv;3H{;hjwJ2O{II_j*4N<Pyu&@omWJk@2
z_VSrM_&7GV9rxbd%Ib685}&<%Rzk#LcLiSeAM9)09-6P&*#7)@&lv@g=ci#Fxa?u|
zAFvG`@G+3N1#X^$8IlNOh2i+>Mf@+y-YH76Ht80vO51i;+NiW`+qP}nww;x>ZQHhO
zXP)ftf9yWp`}@1czFQaX`>dP!%!oB(Mg(Dk_(G_batd3BijpxIHiW7^qdldb-DYT7
zBqSLh3)^5=L=YnK$U%fD3cIgF0!Xi)5+++_RNI;f=|nx4PJ7c9yKi7xw(IBQ5oV|F
zD55WRFDl0j8cfalU=zspRU<r6ryZ+3R2F2Fmak!qD(WWBUG8fF!wwNw#C5JD(+n)Y
znKne^Z+M$RELhj2NH@Y_VxD^3eDh_8L&LJd6^27g3r@4c811Ca6|hIxsLd>xw`w_k
zQ;ZtI{$gbt7dEU*r9vtr#gqsPOh#9F)VqRb{rZeWN@)PpFrZu;D$Braud8dSR|Lg*
zwF;y;N$)l)ej5Rp!b27jiFDJnTNP^C^Xg%ic7}1#J(92qmPqwMMKN&!@lisFyOjuI
z%Ys%Q^<R_Lqj*%d6L3W$hrk@rP62ec`_T7wP{t0vE5`OPkaf*P?E<P`$o434#A3ko
zW4B0sy@iE7n35J%GAXjf$ovyOQjEG6hxgzRyn5;oEJpDW!$>UAen5`n{CbLUj<Pf@
zY&92U?d`$$R%M#9bOIrA>!)U^XodqxIj2nOVTFB5UUnGCz!m3}xNi%Pv+J=$A>20|
zrrj_Etd@|eNwnRZ|2Ve?-MnM5%8wXVLWgIORK=0$C(Y2U!ke-4#Tzep8*OGkTIHcD
z?8jRAsTN{y#UMr)#mJuliKFd{E|+974j5qoe^`q7HKIys1fXAIyEQMYyCaBKy|gW1
zBJvwOw4^&epppI52+3^FP-tk#kH)~sP_AlT^TwkR6+b~{9O<L_tfqy8e8w~=G?R7N
z`ND48G%XjhfofW-Wb;*WP|Du29k=KrIQ<h8l{sK7Xu)Pq=c>|&m`#S)P4IA=&UKzi
zrXds%LpZGHq}8c+e0x`SR{*WY3^s*PF#bX*uRQd#=fM~1F69ancnIuECemwxXm1&L
zzZdb^$vX5CFG+xp&{k~%1Y(&y#__>)aK$y#Q}a#Pk*F2Ey_1H3v8m<{l?Cp(rf$&y
z(_k7R<M8WgJG-J2AR84$#9Eyi#Ti#eE=Og7=8$6zv4hHeFKs>`fmvT^yj!4{J(W6g
zv6t(KRm<(~MDY=SH?ze(QEyj5CO^8wn_|prx1gd#93UJDFN(v`UN!kt!5>v8ylp2d
zhsIBvToO|evuT7>pmu|ulpd{veQ}TFb*fIfwm*>QNu|^d_2k+fup=Icy&t5<E3SfA
z(LI(|Dm7k%I=Z;odNp0IOXyMqI6_X|oe+XRlhoS+`_Io727^ei5Vu716{(9*h}B!d
zc*>Q5$eAwZS=^qi=5ebu%OwJ@roqs>lI8`kYI=I%eq0e<WPY73Bnv_~x7@ju8Rq3j
z$kVwG4fXZxWXJn&1}}a7-d|}GMqK)_ohmfs!lmfq!gOP3+cr4R(0!i9pKT>U*`8yK
z&8A};o?5!?_ItkRzNAn+iHpK*h{IZa(_Y+}(o?sjNfrK4%%CdZQOu$W=&AHr3;Zha
zS<AGWg6dfj@^kcQ)=yjQS{#x~jnwG~n~W>JliDd*v)YPiY+yyQ;<y3&2J*HZPaW9R
ziJ(!_CJWV|7>@>G*HUSlGRycUXZW$INR{7-s?1cL8_Hr`vls9Z%}0H6=fDG1WpwjW
zTOv&rdK5{-YoGJpr^&j?Hgl!C7jFiRw9#XffAsSRk$vQlM1V8zO3|1D7FV}5+Fgm>
z&oAJAO|lsUWn;m<y*qc`rMO>znPmS{;nikh_%9-FqQZ>T8WWNyN|&F!LbsEF*dvE@
zq+X6-S}*{w+&o!zt{SkKo}LrZNSp#C^H`^+auOqpR<*7hUZMRJD@S|#?g%VPX+@}#
zhL8l8&O`(c$ur+c#m<v?aItMhMDdM5l=TwSmI-n47{z<fpQ>`3XUmJlQ5C-}2w(0-
zpm1*bv2j2OaJHX?6k4>Vs-fnp^!^*ZA;)|!(|(^^Gq?y5-inNs$0*_lHkRna&5TXY
zQIJ8Z^0XJU$;~o}C>f)EJJ8N&nU7kARkAXn3!}0kMKP64IY3vIyHaPT9|H#ux3xp%
zrO+XX>ui0>4SNvBAo8H~4fd;9f-^>S_z+Aw6?miT!q_CMSApf4L~sxa7Y-LFY9~m*
zbXxDBWhOjA*>$92UYK5=wdvCSqyxMo6Teal{vZ!9f3IHng3Wm8N!F(C%EZP06cABJ
zsc<4Un+jefH;Z%S%8tb3#U@a5XxS)Dy(%`TZ}$Y%3x|gyn{Cj9-E8mb1as&0PWff9
z+?0m-#}nEyp({E!Cov8W6o7O(Xye9c=g7}%t1*O0gU!P$>&P`ML_d-r2*jws`R?aw
zbNeXwMF3n2su@w#w0bK7)KBycURlte+7h!q*))FUDN@qG&o?fC6-JwzLf6CDz30%H
zH#Mb%OQUq)WAZ&$h0Lk>{`J52V;2_bXsnDx(U?b~X*IOEX(ihcEzXdcl!EKfToc`{
zwNmrIjYqbTefn_7)31wP>`B3o>W+rbu8&Nk!GyF|sRLSYf-W$yDIfuG8efMg{;*KX
zCeNj_<~$fZ&ZC@e{77&RxdMq<`nm}5gP{_)VF>R_3U04Td=wfX-S%hV;Gi^{G;j?H
zIoQg^1xLsAxPW;&IYtscC3Wi=M(=$K_9!z2x3~GI+W3i{S?evZhPj=3FaONNq_dOf
z$Gt+(+JNvnc=a}z{t@kTAL5!b_2{LLMeB0zQ{0|}Nj;V^#{Qru`Pn%C-Y4g$mB4Cp
z>H<)KHP!n`#Rb-IY|+Z!Cey}79^hx**ak0mkNU57tjlYfDd1bLQT+ax{f~D{-`djB
z+UmdDF-v*%zv(t!T3!QWct5GcO>m1!REu)W(x&OdAQG7pVN&;b+S#1;A?q>Dtha1+
zC@Nmz$hbbKj}8yv1tyP8dJF^Xppnhs8Fu&-VbiK0AdNph-<pg+=A3D%;HW7Q;zc3!
zE4*}#bhj;X>%n#LfHYkFd?^_IETshV#wW;S<uauB$FrJMgZ|QU2FAv<IQNaT0=wpC
zC0zj&G3-GnL|3-~6sLx}=IR>-NRBC~MaUR|((SX9HNR4P#6XYFK}mv7fp2%iBYJ)6
zR-?ey^1zYg`U*!sU<f@}SD8Sav=elI9!IFCZlphwtzWU=69h&h;44&~i9)<E2ZvM-
z^Vv?!4}u!pb6|O8`(k>AF(<}qF;fI6BeirzHPS@`srWF>BC7E6aPeSROV6IMaB`nr
zwNegN)}4K>nh62SmNI6+(3W<W{x(@QDS$I3rA;?(^Iki6!c-9Cd6BPp*3PQ*Tpi=B
zrLvxk-^N?rgL2LH;_l%gj&4sDVS;8V&B@1mEjb@|8;=-%mfLulh$r!ehcJJv?cXR0
zm)a-POYJdB##CxdkNzRbDe%p?QA^fOTPDoZUJ8?M%%OW_+@VLLKC(lGyF-R!ebkY^
zF3%B+@gf?xDmm?W76mG<$zG=w20>~Xy$V^jJf|pn7*z}t4{sI1JVOZraw68KT)^gY
zuW<SFgUvj<x4Spw%F^nodC=pO!xxHr+HjIUh;S3>L^vMVj^pauLn4I^W1O`YPbE^P
z1<r?J#2`6E^`%EO@j&1!fr!fdR=|=!Tk^DCi)OZg2~M0c2P89lEZe9f86wDI)d-b+
zdUarFH3GZG?HzUri;Y8wCcy5RFW6uH4c`#j6X@XIF~t8nhWv#e@t;*fQ{Dd>K|B?D
z{^sZ44A-VhbgX8EFl6V^5s-})Yz+qXGpLyaA>C!jAzU>|{<d_4?Lp64U&++^S7Iul
zj{d&eY<J~1zlJoZs8c0V7+gR^vm!$8E@V=tP%?*|yK!;iz?PQUahli}v|-HF?m;d4
z+D{CQuFy6=BlSo?=mhccuUfZ#>o*qz8FnBduf(d#Rb*`1{u2E4h6Ke=yNNtV0CC-B
zm8+{Rv&w(QGW*<MQ;ie{=v~=-gNLNhN+(CFXuAy7b=mAp$sQH<y=dK7WxRUbA{Km$
zUw6py;pKMj;eC$l(7`;m9A#2nwo%I@KwSq%*ZeAyeXMrEh@TN=JELH=vKA-)!YJ2#
zON0+$!)?xuwA&;;UIzAVZOf{2qv)op%^*X611+p8cO>Y(@8g#`C63UOx5JTa+(FEI
zFUklZNs;5(&cM;x7=x4+?X%b(d>++T88S+R`3%Uz2ik{8eV!1ASqTL(ehY<>D+AB(
zY~BXRP|Rs@9jAjF(4JaFMYMUxpgQstaWbL_6oh>qU%0gt80jM65o{+$B~sX<qwjUq
zthrg-?tIE}$r3`$+SB7N3wupbu0AUjJHay!wl&tGU~w@-Y#b5-bR&qiT7*k3SlE%<
z2RZRItzm?3HIn^4_ebcVd@84kV<V8$LLnS^QJgm+s%A;l7sPn*@$^179m^z_v+)jT
zdX-f)Lu5rHgl6~hq!~zt-3tv+T}1=Cd~O{YFy1(aNr`c=LMNjFRjyGQg_TX2aUhAq
zZYVpYLj#^UF2^l&v}6eIfh0O?D~32~51B@|2(ch&p<?2;!EtPRU2{PtRHKwI=N<$r
z&h;emnteHcqH}<txC`pCTQ7f5%o)3T9+>(*v_09vmp?}@#+-Rlx_Qf*&|KYDB-tsZ
zH+edSdvPwCOmM7iVY^JJ+)7<TU4sv!XN@pANGJU?cL-m1X-URt>VP)`*4WufY5VFh
z47pSs;9SVUur9fAYR1&5m$8kS>4VRB?xA~+noPjyVwaodBQLqBTk?jpyZ!rgu767Y
zt&b~9rr#l?^gD#0{bib_Z)x*i0!N_yjMW@1lIN82dLgfwiRd0!Od|v0T*`ETX^s<L
zP7NrtEegMxaARGi-kWn}W&zcnFIWB2)4ILglr0;ZpK95H#lS#BD5yzFX$O49m{HlY
zr=brPZkKy}|32rs0u&ds1ZA@FwctoLC9}<9nix5DkE&*0F9HK)iqWYrax61nAw|~j
zT-Bcyq$vRQcyi8g5tegTpdYjV&(!KFb5vlaISWvR5(A70?MB@=_KRrS0Cp`_W>SKa
zI(?D{_3nvU1jPXRqcT`UESnax;O6Yd^_A39G?mGy{L*7exhg#kvK|W<)UlO57zK)h
z46g=EYZgqg0)T2uu?kOhQNPbR1QJ!3vY26njKih1@yC1uuI~flj;j~$vod))t@4V3
zS~h$#oVrF%V0VhMj1z~Fmu}{>L6vrxI`3eCfHZd&h5R!8b$eyqiC5@Gyi*JGcNeM*
zdw$@$yWllT=@g7qW0D%tTO_0mvPkk@HGw{Z1C87(Q3ydcIaL3eYr464qrKSK|3M5!
z0(gF%X4XE0F!%>hI5qPs)!jglhnDA%8_ezy?&%`e-*+hY%mK5N@%+}dm0dmb@_xM{
zl$Zp)R{m<`?pDprXd~xV2C;ktQO5LolayKld@Ma0H5~Z4PxA-z0JT=mXs4v%2omC8
zpk)az>4@6Q^!w5>xA(=`a_>)3Ej)kgWRLC{P#}*iU;;4<#?*F)v&Vvcrfp|x*0g2%
z^_{m7K-AANmKTsqbFLxI;*Q?>;$rXE$Dfz{=lMuy;{zwN9AL@PuXo|g7A((Se(iaq
z6MmExVPmH&`qAqSCB>V#|C;^4KysWHe8aZ++oFQ~m(aC0G`2Ie(zX0A_$^e_{hJQ<
z@vVcg7!iXoi?Wl=nNDfgn?j(A_4RkO`JQPC)f}kIH%1ULLl?e3s*gCC@xeCt;L?ZH
zztz7zUX*@-xdkG10FSvbv;}2^6)Xh7Pc8XT=>xleY;0h^yMmz71)56z-s1LW_UkJ4
z_0!GOqc%Vd5(W5ufu}1(guKLX-nbg#FbI$)ioq8fsNiGfLwEr1a9^Z|t|o=LO+|x8
zWIo*N$0rvcOBWAU69CWwZc^!E2zSjOjWz-RK~bdVubHcW_H)FC28mbS@9+g9)}{g)
zdU3^of$M4LA!|R7r#eQIXgN<NBERiN-ZYgGd2(>ardh+OodnNl!Pr2p^6P!6Mr(~&
zyb^_`|3|Klf-h*BaD`Ir0b%p0igA)U^(2+^k}ZyF+w}?JX7I@!r78h|7?DG;5q=Rc
zU9t!XJeo@Ekp?M-8rb6Ca-f1sHKkk{S$yHRX?GqYP@n>bU@)m3^M+NEVX}CYJx4~z
z^Ip~G*5=VBce2xzuQu->rQCrpV6cwnDw)>w=L#$V5(5F*pky)|UkNylq_i~tfo`mf
z1UXnUm}(=?z>ck$os5Amu<CR`RnEq&x)x}8Wghb=z;%{Ca*al5IyvrGpta|PQUfVG
zwdENJoPY>Y4HI3+wKqY+56pm=d9ZCPPsE)gbKe0lm$+ji#yDx2^@<QkF+a4^)vYuc
zRiMnx1H^<us{OzS_Muh&*0BJZ?-E9j%2fouWVQLkQz8E9{K<O5rOcy=6NUjfYpb@O
zBPm(OEMI4IZ}XDw@@uy7RP=b425mxfA|#FsS%cpAi=oku056TIBgU?&eM?d+J9{xn
zWsQCD-O5OIo%Gy`b^P7Vc}1OR^XhC0Yp@P?EjbjGHbU?I!}WlR7yZK#%}`(bP5Izb
zFbMa@F&8FF){{l`PevV|d@<Xoi$G5EL{qF_jY<9cg5I*?pDUObxDu4m`&gFb)7AY}
zz^^~cm#)gwu=wFJN#IA0N5@<@>#Jl+Sr{jXCs)@WhW3>0y*+k3xHm5}wBv~&H8L-9
zxIXbC*pxGidUygpCv?2KzG#E8o{i+H6DUoA9g2~QTgWEbr>5J^ZwK7lhSJ*Wd95*0
z#Y09I1?z*$ng?XMdd8ic1dTutqsVxbDIvvQ7y<K_fze^mH?XzOjvVZmK52debA+vT
zaLLs!eQ{-C6VisL3TeKzi=Zk<5a6z1;F6uULnh54=KZM>NozBVd&G?D;2!{fS~~F~
zL1l{%x>GyVR8@aFC&(0<(;$f3FO*F%kJkGo;zP>9tb&&r>E`K8pZeUXShQo|CahJ1
z^~~7$K=gBt88!ao<=P@VAd(HYeQ{p@{_UJytfEo@Ae^ci?jZ8hrJ$;uno=7@KNPT7
z|96$QL7jHzE*x_<m*r@QYRTxIFsmGKrf1){L__wW;%Ux9))$#+_s>o2h%6QL;YbiB
zyCLQ4#pW$Wz%@M^<7sc7D(llm-&zC-S!nr*0{YUoaAsfcRJ#jsc;4k|jBH7Z-^~Qo
z_pdjTz5$s>*Uj#DwsvhqM3L%^#;(wEoy-T;F*YRxf^nB>UjYB4zQ1{#C)=MRb-t;O
z=C2F&Qql^7^3(!i!ZI@d$Kw1K9aWKvn$~MVa30j&1AfQ+eqsigfFHCmpn^&Ig^h(G
z4w3hTEV05jd3)IQxN!^GTP*~J6oTpuv~VHqYpIzl*u)9b?_Qb`R@Ni~9=6iY6jnwK
z4Jva8(UquW>~0yT%nlDbA9ktJ&tG5S2x<-*6-!O?wBneP$d0QlTCsDU9q@E+GP|J#
zi*0oAdP66>6D|Z;=v9MK^&I$>kG&=fb_ahJgS?*UaDEKHTecHa?8n0NGXBYHRDc{o
zHfL4c0&a%FUUZnpF}6U=5#MlP2?#GpL3GDii$wPNyxeW^!G>-skeL1%wNuG%(@3yn
zgD}cQOazew1A{SU$l1Fm_bTQS0<PHKJxt8`BkYDMK7fmSOH`JAh%C==`V8^fBEO^D
zjYp^<xpwK40vp6eD-+O9kq@uGBA=5PrJwTTmGI&1#6jTd@CkO{9c8v7z1&);Uo%y9
z2232A!r3AmBFOuu*CyO;e8#S^m8ht6+5Uazbd<ltkGo}T%&$q)hmg1;XlMkI(an&x
z_)U;b-FRpBY<dUi!UrKtRf<Tyna^!6MW$H>b3+Krnv=a@142J13HcbZmPo-@<7At4
zxiHdx!!QdMCb)c84zuU?a=NouymEGvX0nk(<QjCc=JnfjNUf-wuwP~(7ikH)0h9)y
z18mwSm-eh3*N0=HSnfE=N6WtU%rCjm;^V<gQs;GpNOPhX|4dobfwx@PB4YSMTREh?
zaAuc1nALMXPye6B09GuAnL}g_hb~O5Q|XK@Ptkl?b)2+EKazh^OV_{yldjib!}7t^
zEjE#KO^qbB0$@W5-PqE!GYth;42jEzci*6GWx^h1q4zM=R^1Jm)sWWCK@67Q3<t=%
zmWZ0Vc-#;ZRgqim3dx2$fe2^8MuFH=yHtKLO;B`B@&4+1wPDmg;IE*y9T@9{&CB)E
zAAEq*g|4>O7?m{<*r_fZSmb|#W8!=U(E%ewwh*iHaAS*m6rX6FJcf}B=A>1}Rj5uD
zy`5N*m2*4C=u<U>&&%|^m$vRQ@*GvM0Dr7NfsnW9|7!lG1odY|D8;cTU)U2kZ<XtV
z4J<&)d>$13$puJl(qX-B%lo;Ui+mY04@}J(H-T(Ug#3inM+!JXQK>YGngz6RT93X4
z*$6-&0VFys7<sS*fcz|?8mbJ)(<+?Hp@DZRp}7(3I#J%HI@21Jj}LY~f7}iy-^+)6
zf&>Dw;=^Uu4#x7nNk5|t7|P)g#oFWH-uAfQ%MQP^L{iO+mM~V7;h+jW^kvi6=3y|z
zs;B}wps6NyE0ur-;WL+TBnCH{(wO!V-t<<*^;H>AsZfN>j<BqkPs5O#=eDnx*6##$
zf~!(qMA4e<IIR%>O%DThL}JUh%YYkt2dgVwfvJ66)g`j&h;(aE)WAWv6o^cB{U$>L
zW1<48Q=d3L5CXTe79A%drt9v3Qr(+x_lYd_U04Eb(FL79Z<S8FN#fu-gB#j6>HY75
z@L$`9k^b*=&B)Qs?f+r!uXzCc7U#D#00sJ&$=}~k`$y{_wWY!TDT4k531%v;S*?Hf
zc^oN2$pA{W=7!wQ95>P~+FEv30J00s)C=;<5`@wTLbNZda^J797Zf}UYCh-seNQdm
z<gj0{-UeWr?QQW0sJnlDM$}Jkog}%p=<tZpd|{q$0}X*ulj~gwc|1Hsz;QU=fz3Z_
zY<_<zjke`L=}mddwd+KTl;=I?Q}V<bKMSi#C-t0f^j~cINw_Xv78zSccF78K|8%_5
zD8)oP%_Lw7^|ApHASuoDZ27${%?J_)c@@lYw&>@QAN{NovPNnUfJ{tICN%9Zl?Wmh
z2aC6`uTLidScxs(&@g+1ILfg@#zLQFzGvs%IV0qW7;A>$ur>6(O5)EG28B%f%%1Hy
zWfd~!bB13oM0xhaApq7eij%)ctA@}7Ffh?;Fq$GhF6DUN@lFi;T_;(IdxdC<K<%?B
z`*C#bQbi)%x-HVbjEjgDlDfM|^}XBMUp_{H?;f~+J+3l)M=JzbmY~o8g_$#u0#-@^
zB>M0ytcLC7pZ6_K3CMxa%33Dn^-}ol!aL;f85Q_HZo0<AQbEPmOFQNk?59zVstQDt
zf}sD3<5|*!DP4=e7K)~NU1Gm4buDqgU$7tOD%ELjdP7#2um{)VWp&wXC(OEz+Vm7c
zM(rNiyx{c=dwt+Ub#4Ht^l|R4>IB8nt5YglSZli0EF83DO2BzXOiv^%Ojp!WlRKwC
zUt?K2rH0?3ip@BRIy4!YGOD8v%|$3h15i`N++T^g0zv+yd>k8c#WCPIX>J@X09jHb
zI=0R=BO4dbLi(ysb~#Nl{w%)Q%FKFy-O;Q2k?8w4<00kPsWQY*!`Z3w%DcH!-o>%;
zZr7^yJO#0xZLA4G?#4h6%WAcAeEzsM<h&H|p`_;0d8jlAD78i?jqb&ps0V^XitRy8
z$2Ak7DZ!bhD<Y#6^eG7+ut}5_qcm3?)9V_o>(Dp?DZNG~D2I-LHddr!K*vTikdc)v
zlkoHQyL9OzeA-P+M(GmPTCUajRSNtLE13QJeRz3fg@^+4{h*Omq{ISxOIvwfogLoV
zR1cOJedWE_ppfl6ZE+E&N`5W?I|Qr!z10Rf*yZOX%xK_P#HH-@*XRq)KeLj**#|%L
zGqB0OwS>R5Z2yIp@b^2Z@9_WgM*qci)Qq<dPv?Of+<GG`LV+PbxZ)!#G=(s2_LphF
zGJegIfy<9?Hmqwq&#p_3yV_J`EV<~M$#gwrj&9S(0EO!lD^;F=i40u1*l=HF0>cda
zHTBzN_Lf8mC25jLE}e{$HQ2a{@j3$J0di4Z&qZR890|nSCQs<Q2)*MuN(lF2!y?i*
zvX0s*20C<$98kXvB}eqT+8FDnx8fg4+MkIW<db5u`1RvV*q%AhpVyu`!<kf~T5`U5
z8(x$Fvu>vP74*1s^_FWTg#LrqCG)}aBE=LEpjC5&I4#NI7jNzo#$@VMm$-Lt;^j1c
zY3OAuld8mlPw^nUtJtId?3rx3ovVK2jMytN-eUp-nvvHd%V{H~cdken9)*b?BsiDg
z!U4ok0K^u;!W}5%wQ+TbLR@IcuQEh3jD<lgk8R1|?=U_|LTB|pZLT&rfQ=^SLfdMj
z#`$6p{7*b9u)sY|R@pxIOqMKRkSE-V<w%s<LH&2s7XiAU-|gjX*LT%EL)NN`#djBW
z4-Ly40uJPeA(Dc7^*(Nc5D-W!Y+FKF89s8NOAR#o?jdX!={QbwdrQd=LF4qISZ-86
zjj`Tod@PgsBRt1xuv8F*BVM2qKIDil$vn^e0iv+k(JKR51VROQ*Nm4R)v6y$4pXhU
zQ<)JRFNuRObMMbToqAuk1oCay`P9vN`g^AO1>HM4EwfCPZ_BSPYw|Cbu8!k6A9P+g
zI?vR-m%RVYx_X<xtaJK3aX|4Kdw*eF{Rj4}t&ILN`V`|N&DVI~g05bX{UHSrgzVf%
z3o9W@M7#0M;fjN^A}AvZ$j&rtaAhyzzOphCXW3dQf8S01zB(tDCJ@oBc&#gHth+X~
zy+hAp3($<V>!R7_E!$F2ZFX#wUp26y0OF`!>?XjNpHeZ->Phh<PxuC3tq}Ah1i@fj
zD*yP&3SlOZxD^KlXz?wSoT?3oCkeWV2;O!!ggYc*u3WK}3>ig$uLbHcV&G9<RcLNh
z<NfU{^F5bYWuS~&lGEbjp?MZ;UksV`G+Hd##-R|arY@K31e-eorE=QQZ(<d4rn9z-
z&r2$1CSJ)wGd4DHvD$2ouv;54X_NA&Uzlc@)Gbh+CD0>Iah`ap;K~FZ>FxXFldV@@
z6m^4|)PL%%Py`97)`M*bM&!tj{pd*M<eC<+N-O7Mim*6Iu9*S8OzWk@n^lEqmVPug
z#y7`y)YaggMzU#t*j-oWn;+_Mtbqa?V48NUZGKO7OveALS>YA4g9?bF%E1dABPIOf
zyUg5Y1{_XkP`OS?4Bw{%tS*F02y^pjEK5i*vvm_@9Kex%Xwxg7A#t$b?;YxCOB(qF
zZ;2J{g@^)^M!7YH)k~}kZ0$c)<D5aFpo$w+;NnT6|1nhE!>*VQ@Bizi=^=%nNboAz
zEmZ5@{8S!w^AQ!_%$4~)g8=7$$xZYeO)U(lO|6Wq|5G|qm>~OIMEmaTctK(gAdf+5
z<UH5?cCJB4h+tOec$Vgo5*CFcAsDc0Dvvr>(L^DFo)ezBh+tiMKea6<f6e$tz^e$*
zrAjb?B1jO2Q-ZrB5TBdF{+NyE_2F=pMd(HX@h12jDuz989?QxGAL!bnBqV8W<zxH|
zVwW8kf9JgUb@-y5G>A^ZZ+;5aSu!8=iU{U`Bjk{Rea+@(y%Z(XFu7-9eyZ{QkyJ@n
zQM1=>wMnI9VZvNRsDAO}K3TG)PJI~-(~cPcf7e6@9_^XH_DOx2y?t;%|4VFG@7HC9
zhU}@6=biq?$I_tshRfK(;nTeF2ub%?Pw{R}(+q#yg>HJl3;~d7t-sG;H<%|OQWlr@
z`z)d$^&8k@xd0m8FG_&B1&fyI{kuVjN@HuQ%f+QT_w$vBHC#}*SrG;nnCj=#*P{)I
zfuTLvff|3FQeNbAaN6{(u(U)e3niW}Y?smm7PRIIMuSetxOAF}Yrd5Vf3fw=APxd&
z@~cCTgrdw!GWHx>Y9MrLlxhWs?WA6(@)TUu;Nghz{0knUGap2I8kb$OpNBUv0)=Nj
z1vPlH%K-f*pj!B6K6`$HRJ5C+1MGPP&du_!%mj%=*kxoC^&UEujZD6i2U0g?Ry>1i
zH-(drn}On*ELbEFbwY?vGIFdn9tpU{HG{B1)V9@O$dLzpRuLNd$uFlBMpW@%V>L8l
zCOBzBVpoHpBqAsH`lvW+q-FjkZAQq{Q+)<Y7}Bmzhze6Ru~Q7h?M_Z<%4^+>4WVw-
zw7<sSOE^{`=Ie#DIIVh1L}fQE_!Zd@|DZ7H&DSSqSpX}F5tN`X<%La&y4D~ooJL@A
zn)TZV?nuII_HR#sO~5i-HRPI^Azo_e&~E*1qpA-)TJ27o4X6k%drGLhh4|O-z1i4s
zxbaP)g5MO1`@dWQU3)7!8(lkl!~e{qj&hRGbF^?BN6HbsL=|}jz`j1UB8CkjiKSGl
z)Syza=@J+OOHt>xbyT}udpAWggw=K-N1o4-LkA4LWb0|41_zx4F0AQYzC$p&bNQQA
zOV<NwS1O2<oQ{L707+s!fcDrNIsESZMPN7<bxDk7!O$)nIl!&8vQsf*_<MG2a&seo
zfh2o7cv3mgzRqX~v%D0@09*^ph$7GptoLFNngmdBt;bxg*Du$W_q6N?zSMp>ux*cN
zV16m9@DG=ssxW;rDR9%QifC;#nKzAtcH?Re4l)wVNmIt@Xr>*l9c^2inr2hKObQ4n
zoU;mMGKwYQ=(R?Ty}5+-Xe^qkFROf+T$nzm#XEuz9y?Ql>A#BgvEZbp^6{`Iv_v#1
zw(vY`=0)TkaI3`fOAQvfVvCpRoWF#lsy=&XnGA%~9ZcgyBx``{DX2sth^A6(ZOP9&
zCvz_Y0#6d0hrr)O@F>IgD}r8ry|`LlheR=9D7QW(EC{vHp8IrG_^nJfu{LjGGeJBI
zjKt!p_7yJ>%M_GE6bmB2ukbM`Z6AVMc2zFLgI&KuSJ%$6C~&k;Qeko=tx_Z&#=yKk
z=Ml1FtVr}?9V)ipg$di+PT?Ct=GvtMMr)sE;~1~+{aex}z#GJ5^-Y~A-*OcG|AHC^
zLwg4*eQP@#NBjSb8%udv^Y30xucs=OZ$lTxxf86r$|^6}1z12M!$u!k{_rj9BDuH_
z8<Dv1*PB%1TC=_z+->ny=i8;!q%rvT_H3hjF%x6YQ2d<qwG6>}qsihK@;d7qBvFrG
z&i7uap1?&L+!mb6nfx`q)Ec1#RkF}Qeej-yV;>><)~;K75dseMKk+BOKrStPgwA_Z
z{I+8W5`)D|f!?WVh-5$tEY&IkV!_x29gDgC^uJ$wPFDki7eT_9yp&-e^2!t}3RHY$
z9JOsw*I7)vXR0=hbU;h#ak)&GnK=}wquvRpPR^RSx;oZ%x(&SIktUK9hw+T29g|4M
zwVRJBHw>5v|HfYp#aIVHh02L}*sk80SgAfaEA74e-3qlmD0ePo-G(3riaK@#k2DM-
zMg(lz70$V40+)pr<~IwjZCrgQG@_OYy?mSqn`OzNi-f3!CL?)vj^de|Fg>^Z?oTfl
zjIc8<Ut*!;?FwtE`0jt<c_}*W?r>~Lz0q0tL>`~p?-oZm3MVa<%77EFHq1J##*#Ae
ztj`|E4SpS#Y!vHobVluBibR&X@ViLZb6FOZHikS)-E1363RP#jTwbgDrp8q<B0L!7
z*-`kaooe&??BEo_XyGT=U|Hmj*3)7bZR?%IPV8QAe@A5wL+gvKS1pb79AJl@wBq@M
z@3*RB&@Y2rFwPd7Ze6x;4;>}0#y<+g5wijT$;4+)A&-+=JY-@*c%;u4oF|dW9z4g2
zWn%wFXnc*`YxQg)|N7ln{xm<hp2qrB`@{<Y_T9k>npzU`&(zM)16zMc6n;s?&^@x-
ziBm9AhHt#!ZQMWfiGNl?<$Z^H*Zzn8(Ek@8>s$Ue0LS%2eG^~Mm1|h8M%*7Urzan{
zLJ@H?xx#AAhB06H1h)7=Qgq=*7yj_ajhc8Qh+nA2MxQT-xMQYRJWv!1ne`ltP|nOv
z*4rgQ%T6M1o*>a`p29sg)-6h_gf?3Y)pu%u><oXhYb3Dx^y$fBpptY-1fV?vP5+ia
z9?#W@vW25`-V{*Q4}go%srXmQWBf7j_u&R|f{Nq$(`atM3y_<v0ec_1d(_tynhT@B
z;<|&uhN`&4N4hL-emL1KKG%7LcmRblM<|9XpI?rWBBd3dwl+AH_;|-@RGna{bQb*a
z8i$#llMvLvp^_BVp3ML@yCau1O<Uf1zBA_rs+k*Eut(@ZCCbn!;KJP^0xL)K5d4KC
zVE#!yPVUZ?FLkO4C!+Vv5r7#-87`DXcR$iREldY0i;A(kEIbAO4%O|6v0~=8CU|WJ
zeQneffO$$8%okf{rTJiasROD$(ZkXRiBSMKQjt`JM2BGgM-FamAm*!irPUh)P?h)j
zwDe@OcjAu?69|6KY|~+Y=dpBr({hk3Luq65<>`~E7TVJ-3zRT>Eb60Lt+qRi|BUXk
z9cxBBs4(@F!6kH?J5B+tcAW+JSDmnysYCPe6TSQ{-`n0N(euCA8!_YwQ}({m;{F{h
z|5vowS^O8elT-huJEXtS-Ixvw@v^CozWO3BDjQfz5h1pP^k8hXKC~c0>%64U*ISfD
zup4UEvhbE-Tpghwkdjz76gLA5%3YcB^)#LZ!{`QeuzSAOFMFFk&HM<-9U-t~kjg+R
zHHK)F!hLuPyGa?f^6oJR=;qkSV|;dh7D{Q5Q-fBh-uPP^N@=`AK<n6qb-oE;04}<D
zm}a1&D79-j`hcXiB70m7KCX8(j`__*0UFU9)6yXUQq3HuNz*sFvDHRNWaN6Kf>A8`
zvUc4RXwA7nY{47~#9Mz!Wist5t1G9b<OVGu<fh5%4rh&#X_D}~B@Ox=iU4VTk;i+d
zPkc+RFVGeH2T<CQkCzByOJdpnLjS6b=A`u-x$ED9x^!d{z7sx-g}#K~b9+c$f;`c@
zN09+#hW8vyE<9&U2upJAsK1G*GMRI)AnDiM+(44rP2ossqyWX$ykZ<0JX3<q@jh$y
z-va~7x`NuQT{|P#-q|l&RV?jAQs99UA+<CXce~SjFgefY-TAfnvHn!KrHjX3d#GCf
zAyYQs&kpQog0WT?p%LJ~h8iphWUB8=VQ`QWia_I4!R+^u46f9C&vQEwMkp0_#{g%3
zx(7VJ)mrEO8g$wg-@bcRJKRz80{qt$>qAukmhijlte*8RJJ0_9m1=Kj=VWO2pMg`6
z?rFU?+z|ZrRGebvtG-5yC5IqbV`^11QN&Z-LoCuL7@kM_Odqi@9LGB|VnlPhLBl#V
zp24rGD!_vZ8H8gynPGqEtQG8G=W0YfakuetWcBgc$XrLLnU-x`;p%DKbhX(*Z{51#
zZLyJlh5Ndu+0@0fWzBSW@qE77-r&CGSwHc>qfdBernz>p$#kf@wmf+sHXfAysC?*w
z^*PD?x-l?kyL+_Z-$KEieo@H`>&`x|aV6QdsiN;)a^Y#cs4jnXdC7ccr>=fyy0OJ}
znl;+o`BGe5Q}$}-(vC&E4(r|U$}9i4m*3?1U47h(C&}jWY~6&0x_nAM(|r0I@p_tG
zcnm#ycx~)ji-^8zwf%^V&_7uiJEHM&d-@eYH^Ok{xm8gX?A5Ur_0GY{?rvwgxsl}T
zq#q2-75!cgx>3JzIr(n5RMB)LJdm(v^lbPx<MeT@-}QT{s&7C0q7ygiJm}1G<sqMP
z532ZXavkRPQ_}(H*qw2gw)NQrzy3sayNGn_PUzX%7w7F5>Gce5t0(KrPTS+olD4I@
z=iA20N+->mBPTsO?S1v;V_Ev9hYJ^Nr`3|<${Ma#`^Qq(#P2(AW20x97sD(K=%odV
zcH+y`M&;nW6PJb;m+$F}^vOrT+ME>vvZ5Oq{hXRDZwtM$HBqf?G!V|3kxL#Yi<JNs
zg?o8^N=#bjPwTz5v2CfLm^9=&%%<xLGh$&p=1Q#(8^?M?PnMO31*dA@j)Z7`+|^3<
zOfIv;5gTe1DcCOz#+~Dcqx_L74ty7TWmQ{e3itF*4#%+ufcMOp<(h;_o3n&Brhe~?
zY41=gKWP}(0(vFwu~Fnl%pvb03jd+$67w8YR^c^Z6^#C=J>=k8io;12dA@R92KH)s
z57dc6K*}iqS9`1&|A^K}ES;by9dB!>-hf>82is~cBy{v+qd7Hj&-NgTx;(;Nf^{M(
zDt~pR*6P9x-DE)u^)At*U;R%!g|mWMla^weyYs|)d7yep*kejAx6=?Ovvr3M0r53T
zV!rxf9<R$(egv>IyCgFOug*e9R17dVUcTZp#=F?E@X)}h=!_phliFZq8wDDWZJ;`t
zurnTqo}Q85*0@DAkZ=>3;F&$e@qy^I$&sw~H!2-eb@>Cg5nHA`^Bq?GPFL0aiWgY8
zARm`E)Q4olp~)mv+O6=Lhn|)W6oiy`P$;p=nILnefU2cn&TFJN<NP9q<6H|;j;~Z%
zQA>>N3mpeH8pMif@&_*!3sl*p#0{m(e_~)1^I9LpqC75;CLmWVZ_LhEZeR$ISpedk
z&F0fA6V!xfni(!liwuUe9a<gceXrM^Ih<2TXYE9>GUUi}L_iK5=IT@T0VLTNuSjF`
zMQJpvX_lz3CJ$hzJ&8RKI!s&_FRxfZW#EH}1;aqaliH|?K|RA)Hvy!2hhP6CdwOY4
zLf}<u1uW@G&E#V=HjL`+e^?myEf3&N6DRRNIXt=Ky4DNt_afZfxPVn(8rr&<mM=N%
z$9|OPWdWvDcecV$_JFddw7m`5Cg{N$kXp5e)Hn@pvPYqa1W!?PQ0GO>V7DW($C%ot
zj7<naaz(Yg*-_Vrq(f3X(FK93k>iSC?q~@Awz(pB=d0kn%K(x1!{`ZfO?spknL62J
zHlSHA%xzCZdPl(KW<LSjuw%LaT90EJYX;4gq+pCQbL4UowiP#dw6vU>7Z=pdd2I-M
z(~=%-y%PpHbhgK6e_4ZgM%6Pndei=_STXY@HF-~Z#ufLQj1WausC--xT6_ms`izqt
zCl9{dk5EVq)3ZLT8~L;DF+=zixb~<P(}j+_fcO=Qa%@SSgBK-mYNTHYqZU9I)trRB
zf{<jWGpY7aV}akrh9i3FY#L<q*Zy@+keMpJbO6c=F*-!7VPVC>1qjZv5H7Tnitjt3
zc<)!aSx<2^+dlX?o~yxqAl2Kf8&w)yDh0D&H1N~9F}d_lZPRt(yg9jrp#4AF>BB)Z
zhv?OO0YQMVw#a&+;45l@sFpxYIaLr^_<F!4XBMNVEjdrGzoWZvlo{eeK&Cm9Aa@IJ
z)MD}{4VFTA$~DL#1%+y*9wEvk@;TkCzOms%LSQ@s+_4OzI<N8ay}~0gB9ImGS`nNJ
zH7r@pwT4o}*x_T?jDlX6o|0a$+6WkNvx@1KqP`SuZWx8rNdeSXWCjI?cLsz5!)(Wv
znln)C&<B-cC@vyS13}G2(?Z5k<@We$hT;Y8!F({y1(V}d>@m0l&`>2Vk}2Vj3TzP%
zD^Bl{eCoN-&i=2a>leNIGMB(#cmo0LFbQs!vwgM*u3ZY?dXOjS+puyq$h+!g9zjb@
zyM`sFcl3I_!sPAlWbR@e;Zr?B{yl}GkRt=NDtEboiYG_ep02MA#H(x0TU{rMxMQ22
zCfr{}n3nirQV!Q*2Ky#5=?Pe%L>;U(8QBHX|MQRl{yz@^IsS2*87h;YELapL6QKtl
zHvU6mZuWYtxX)}#v+0OqFWYj_iT8*7c3!iitfVLT5nJCsUUDoih$ej*wBt(It%>9M
zb%#0j;<KRtkC)U(!~XpQZt%!|yacxLQ$^HTit@<6GwSb0aTSRF&r4`+zYlu)+mY@Z
zO0&W(oi!P-7p4C=2sZcTAAbWR{{9=hwl>8Pte#v>VHSmAjW1^(JQ>6uaE-sf&<Hgd
zgOcBajM9O?k8@M9v%0140SI`eb~<Z12whSIIkZG4J;rdUB4}hNA`iDIyLidgx|9K8
z6-P9JW(WunQhM9ur;uH|SOxF5q$L8v%g{)nKbYV*Ch{T*`G}QTWID09d6jr<2e=GM
zeM$=p3_)+m3)~}*+2x7!N>;&fYH|<YY^2dE-evPCjY`BA7~1AL<3*@1Iux7?8fBi-
zAZY{$X1&Fb+NobH^|Sgm;q$LAO;EK%GHD!VSmNQmq0l{bbIa50;JNwZB-}z#2|=n9
zN>3mY|IoD4HcHlP=WCF&SxrZo6&jQx#|e5YluGvXnB<l(Ervm;;3F)Zj-bt{EyR!n
z8Wnretqx~Bm;Z|2!1I?#mRBn@ORuG8Eu~RY#E;hIP1kX!KA;n2i*>wwS_Ue+eV#P*
zMo<*mWh^Wh2y*p%uTcyxkV&P>8mmg!IJe_Wf9?I=W-h+s?&1IRO9gWvBT?0{AIOj$
zo$fVHB{z2aH_{Mfpj>#tvb;$c2>QsOeJnuOeoYS6nLe|T2sGEWIcsEesu`M6=?%YY
zIL#xlB5A1PeYang++zsKDLl_*MZQ$25JD{fEqFPS=t$UfNc3{WvS$7{$k%Vki+;G^
z>&9iE6%OPiHY8~U#6l%WV2GVxNvjM)5DVw{@jYKU6x$#Silr~f*jQs!3VpGqP-}!;
z#imAz{spqJp}UG|GyTFGgfoHU#YzM9(Zu9Mu_ws*OrYy$r=XYxfjwZdUSuKpj6O}K
z{C(g3WV@NA2p;_C2DF{mZtw~4O+7yKtmWlU!UnC|lTF&os@ED2yPn}}yWyTUmca@!
zz@sh;0jF*y6nu|t^Ub~}E@l0Tatlhm&hd<IW*8Ov7x<W2uUO=%d@lHN1K}PMLD#rt
zXy)>X1Cwg8e(im0tmX#veoZ%2?Z;g);p327^zy3kEzC2?ABC9P=2_F_8I36k6$`nk
zXmr3J$}Q)PC6uC3BZ!Jmcm!EK>+viCDD^U0K43tX2QGeKB90b{=8Xy$oRs6nx&n3u
zWE~9>7U>Zw>)Go?a?;7AmG`W{Vbe^fSsd2rFg$r06{p1A*qhK>XPm!8!dT@i?Q#NF
zt<O<l<4em8a(Bs^OJFVj$X?iIr=t2bXc+e8j4L<kkghVJbCl)A3U%}cSjJk%J-oCA
zvhZyEIyEoR66#~;k3DTy;%psa+CLG}K6W-B)5z&jVw}$vhb@+q^?xTz_N3eoRlo*~
z{rM&Zhn{$uumca!NJ0mF$&%GA=1@f_n<}3R<JB#O`7}d*4#)0TY+G1LM2>z-uLqGK
zHWg;JfJ?YzZ>HL!<cXs<CCB(UH$4L85i6dQ2YGrScTnac_L!^%I)uYD6i4t>sDkxe
zzTmse*N|8;{sD=!k5$f`y}Q}f8z0umI@%{cm)W=W+$V1*N1mXUc7%s*3&#L|V=q`J
zM<e{Qr!mc(Jqr+j%qX8Jt7lop!I_d$l5fZ=b{8CS-f?=GaC$IVwIajOp0fXR59YC0
zng<e$8_0I9N2uJePQIJvF|2$stT;9&z96VwlEu7HaftU+==Q4;4)S=PviBwo96sa|
zD3v(YmrI)5760XDr@}+8M<<kU;dnVx*M8IhZxtZWi-kEgn-IIecwpN1CS~3zA4Q80
z4Y?QX7~if!{yla*j=s`;`mvI)U+(yqi1F97HnF7`Ay9FvoV!d|TV+|9R}tH9BZG>L
z8>N%UT=dDxkT)_VUa}Idn0C@rWH)@OhITQ4K5{UfN;_a1{ZJ)wnfP2UwwkCyUxEUp
z3SX0B;z05(u}%1PmaQa-$#~0+Y=?PfPma;2+An)E5(Sg<W2yF`rWNJCl|eK6xA_de
z`t9kH`5tr#VRB1S*%&4k;2Aa^#RM&GdnK?xM#>~U;bO~yI?YyuV*~|{J7fsd^0$aQ
zTZB3;e-aM|s5PWJgoG&WCkmi=O~B|;wKP?&EN3d6|6H#nahXqKGlySC<dt_kUiqUO
zgfa>V54!9OlZBcamfoHhGa1NE&sQ%_<R39kcnN=Wb7<NR)OM)7SIEo|k1dhV&b64x
z2YEkSLvs_CxtsMqv*fMQ3}4p0wR;jOtx6xs59yfnGiorIaiQj-&AG}d>+2oXUiGO9
zD*w#V`ty`4#-&B`>CCR~b0I6*KiTlfOQpDzirwCo_4DDTH~UCR+KZ+v_;HiN-2>o#
zo|7XYZR}0=-Tz~JIJ~Q?#r1A4+#9CP)<UDEj??>{Ks?NsdkxyVPUmZ^+UMxq$ecS9
z_6gVcE}eaC>oV;w9Fq9eFvvK4<<+Qn>P6by{o!=<eQNkTaRpZHa`jG_5|poMtNqzj
zqjLQUlzI|yV~g`QL25OIIIu02HmW?lFu>W<T5RIo%}rT%p0^d8D)?h{6LZ)e?<qyo
zux-)$x-l`QM(ss8r}A9yqePe8PLu4AmU{kdG=(YK4F$PfLeZ-$r3O_(j1|^1@rlr7
z%(yf-1&4!rJQwF%UMz=~!@Zliw$&9b$RLg{@<<RjlM^N$r&of*h_Wc<b8>Rk#DQDc
z=Q5{@OQpK~Cp)9EZQOM~sxvmXx7$bG8FyOSt^XI!`CR3j&Z;JACs`X#m;Bi|?qd;y
z^=9Yu&cR)_r2g82lSk+I#*ofLlp^&;vD(*);?j=wpSzk=#<mZyx#(>5m5aC7?w3oi
z_n5ME3$Cvhy?635)vGZxeaQ{aPTbFOYs(K^+|Z7X&thCFwzj5^iSF%*=b3r8H?AM6
zp4rF&7(^?U%-NA|wPsgJ+IyT5Z7ZI;Z`HQ-o8=ePRBxH4W0RiyjI-C;-oBADW+0Rr
zK-{!Yu%}LadtGlmgI9UJu<qCCUC}_o;H3|j8H$x4amst`{v@Mr@1$2o4q=PjZdf5l
zJ_mXl=kiUL!dEVaSP@ttATd#25DbGY6PLtZYbbvJjRRA86S>vgxpj&yKorw&KfQjh
z4py5Mk-g1wSiC(9E>~jy`2GI1`=Ff<G4usc^w##~T{vQKb5(p(46k=2oqf8%;Jz0o
z%iVWxa@O}T5co3pJ045QG0Pz3Y3Ib?d2HqWQe2_-_hP8tfKX?~2lu}!FY+sP@X+67
zist{|4{%|mW&O{(i=~|A-~0g{OI6FQG6wjBL({X1lK9YMXaZQfK&vDK;uL4AcbU!6
z!%oBASCxeR2yQg9m*bO@n_3vaa6JuHQ9|ctpm!?+Brbp8m7q%>*!<b^zjSuCN88je
z)4LNBY^F3IpG;;rbW>wM#tia!3~PX@#2B`P=xc*5pzw=H03GQyZFXecmyd*HR(+d9
z5_|cG2mx>)EU>_U12>uF_Dgw80?XJRcmv=1u6X&aHKpz|ATYv8>EP{#=2u$=y(H%v
zEfFO_DiTAP+UCuyA->Hiq8E>GC#yEzNhg$sV`u4W4->3QsJvw5zxB>Cr^7x9c(1ko
z@Vz4JtW6VgdSrNto?d<NHu7}=5GQhHP7^*5f(6)J*Fh$WvBZko_Qu4^S~&?q31(u3
z{EEsdy2ko}?LUbLj2gaeNO|qESb;>XxTmRNVtCRC{?U$KQ&FW?T_EWz;HZS5G8&ed
zx9~WD(G0Xp!#0Q+q3jLb6s_6_#`caX2@O9b^<qcOlmV6s*B4BDnf4%-=U2VgaRxkz
z^Zc$-Ih;RTz}tlxXgRFiCaX1S!$x{7O5oOW@1w>mt$5lVppiI@)(Ntyve#6v_Z%)f
z92(f4M}vb^;rH#db~UDIY&{X<Kg9-Y!)(w4P2@GOVT)LUrl)x$OO=+N&5S5ja=!Oj
zRMlSLuflZd{<ARVQv7@K<lg`$x^7sl|6K!v|F#hP#n|b;OM7}&2BuE`8DW`9me$|P
z3_dTlZEva-?2yKiGILE%0W7CcK-vpT5G?xG(DDRUun1@IN?1l#zdG4F1nkNyRRh{X
zo^ID~E?eq8cws?oikO_$$`?`mW}Z=-)$E&>ZCqVje5BPrCI}#{?c0=Ap>{0OdW~xt
zuTwEAtz9?-p!`%rLd5&@hYiOWmr*3tN+UpFLf;Ziw>XK0*c16tHhmRP?D}Tp(L@AB
zeYb=>^m#=>6dFYZNeN)ob(etM0{L!sq9OR{F!NkPU@$p|EcwBxQY$MqQj|NpHmrgn
z5E+QE$vbW%M;-e=$d`6jjmT0dByYfrL`><p-MzhDI+GHm;2`xIbXt(b<hZ=5j+7e`
zL#NSKgIuD4GL``^dZB*b`??0;`{wFG3FqhrLBR5%C&LJp7a-=pL{x{#A1A%Sw`b)7
ze(D;wXa9eMy>obFP0%kI+qP}no^WDg$F@DO&50(?#5N|`v28mO+sV!Qo_o%{_q!kd
z*!y{Qt?sH`wb$yduCDr3NX)Fj;nnK0R@u&rf}GmMoQ1RWrqa!;Pj&dIe+_j}DDr?4
zQz#~Y?xIb+Pqa)k5qgGio&{(6WH2<qJ23u`YYA<zw9CORkly|*bl;_IqzawZs<x)g
zuT6p_jhbk4KX;Gxpk9iNtC1|o<7lj*Vhez>vNlKf{I>UeUvn&Yfd##>`>n-ul~IUx
zz!f=J8kHOBm80CYB4&u<h6E8WH9iLyTaXnr2^~7*IthQ7nSu>1BGnrU;kP=nC>@LH
zk5ssQn9bY_NB=IZ`TP9vL_rOio2tEBuH9d{0w-8X9Rt)kyJX4b^mZF9FNZxlYF0?}
zl>2a%V8N=^(Q77!=mwLM8mWxjYQl69c%HRr-219&B?vsf;M8kA#5ofvub`yPWeJE2
zYe&#-Te&#$@G=K47)s@h`{T!?EOU2MXbKj-<@fFf>+eZriQ`!G2?YYM2Eh6fk>=Fw
z5GOqcMGtYsr*`p<Q$P&Z;j0etTJZMnz;Kv3)Z)38(@If6c`g&qfoX#Qp3GVYJYSZ0
z;TQUqR7-Nd<dU(_+wQVnvysA>E1&gAkp9M4+Ql&p=0u$lOX>p-uqDg;8uoGRz!(=#
z?{cwslbsZtD#zG)j&;*r9zXIU)!)*%RnoiCG1tBoI6XK&`WXaFmG<n1!b-{LePjXu
ziQa;TX6w0N;2xfZ(t#<vt+Q9w6cLQm$KXUv>*}%gW;N)uu4Y;s!6|#wj<+>JOwMl`
zM62{0Bc)y1Wmh9pI8MNQBd*mhIubrSoIlAbbU?Mp4Sc!Wk@`3nmyCG6PN&#)=X6OL
zm&5VSh|foBPO#?pn(S@l$vEGfm#h%<CwcyRiJ8~mT6Eh*(;C3*Ab=o!@J=`I!QDZl
zC)F;xUct&>a-eLdSJZ6zkciKggXx!9z0*~)&cULMR3y>cbkUT~(E#>y0p-OVeC`Ri
zSIO30ra!gt1AR7H>8A^VkFcTX*4p00^1Zu^%AmhQ74c8`b-(?S;L5`Vbfb3a^SZ5M
z>I!<}Xv>a!4#iI#Vus{324)?znsyw6<oW`)drEr=!`+YnaF7*c^H56hb&v)8`urzg
zc>m5@|9pKNNm%}OflmqvqDo+_D4~~cQP_&Dq#b{IaRgC=U|~_g^#n3!373D)+ViPu
zJl!|fO2s)G`ZyTqVuE92ygXoxccThy3JU<{P|_IN?!AA+Z})tIr&7ivZtd^asbm||
zLRIBa(JzT1XkhtCpc;E@4VRFG<D-9#Qz$_6aC~*aiLWHI`%BT$03|bNj>UZt?O0ls
zo&{-@SjQ%1E@V>1<=ds|ji2uWu0K894jt}lk$VeCifJRN)pK!qdo{fu-LS13@dM^7
z4u`tmQhj3ZL@V;Me_WfI&Uk6V<NcX~J7+!@L$7Ti&ZTpnH4BU471opm9KNwO-_H)N
zQ5m11lT54EH%gjjCvK=Lc1plVG4k`{L=I}9txnuc?RP-U&~z*uO;lwZ?0-Z^N$g;w
zGW{}16uz?C|C9X1e>MLP4B?mN9licL)mN$ZD&n)EbiLA-9M&rXS{#o_$z&peqC((g
zkMkuG4=QsiPpa)!48)#Z;+8r>G#ZOlTq57iH?z1K_PRVIzXBT7+H2Ro<0?E16J_Ie
zxLNCeA;LR8q1w~KE@}K-IfJv$Zc8@{oWp9!nc8Wr2H?2}$`_|!h(>jyx2Y7*8^BpM
zB_Q>|C-Q}oM3bDOpU^-*nd?|SVKu@|dq=Y6s}O0Fr;!lLS%K3a7F*d?wK7rKs+IAb
z8x$|mv_Ul>5G3=KtTEE<@KU+!Xr@~n8JZt~A1a)Fm!~1l)@c^SE#lt>wNi&!jE^>M
zSlNfdzv`Zh)y0lfz3bXnx3m_cDaJmZOP;kUGqo#T3!nW)R0LfuX**I#XrXJE688!x
z$45}=B>R$`fazR3c8(P{cMTDDVB$zHi`lB%5<B0U*RK*%Hi(D)=V@nut=O$3#XsCu
zkQCeS@?x@-C9;J;lISoTUd&$DaB{hHECN4Im#93O+3#&CjQ?e>GZELs$v!4lYX8jJ
z+eJ|D9sYWgCI=Dn;m2Tg>>dWBH@5?-r?L$(8Y1L;xo!ffs+Vi#xrDR{*b~t4_B|bj
zv<sO*U<ekb4J@tuJC%1X%ICi9uY4Jwg%li#0JacI=m!I5d#4%+XliM_h)<&<WDS4K
zwqESydoQ5gOI=S;ug@>&4Wc<Ag4mu2FIvbjl?DY{imV<dKv;Yih?@82YT@;68+1e>
zui!RQ874D$gJSjkUI^LxW4JDnABJlkFiG_^1xe&bNxLP}PRC<%dS|sN2@`?IH6aUB
zGVJ%k-CsC`Rw`E3`~R;R8~;Rlw*d1oRKGGWD)Ij7Xxo26#r}I+Cp8n`vc`oL)^n=4
zJ)0R<X-%=##qn*!HLQRn%R<%^X4>Mu1epJASWJn^4Z?D$?XYJnsK|5#bU2q9J$xCO
z8S9TRw&`Fn5grNumJs%vKjX~v$%;}$HSSF_19`usf8u8^T4be4^{rS;Let7GkvcF)
z`P$vYV)E(lY)nd8R9aD^3}%o?&}><&6k%mGKesrJvy$N#u6dbf#NT4-^$Jv2jz=JM
zt`Wu0T>6^Pt`R7ofnS><2EcLTm|O8?S=seW{mk&CDS{^gVe?fZAA~XkW_y}5y+2WW
zUT&@wFAq(>c?$NUNn*NW-(YM_VUzDNjR5oflWd9eh?{LEiRY4rhZrq({kBK(zE{Z`
z?xXjfwX*p^I`c4D^bGFmVCeRWpw5q76TPcW44PQ8m|r%T!}UhB-KJw`-QH44Ho29`
z28ac&MjyydX??QhXGi9}CW$%uhH;esRnVVt79%C{xG$2!DMy9(HPQ-@PfqKL4E<VG
zKN(dVWS3st(~j3}C2a50&U?_E+^fHe$1UO)O}7O2`@HO2OLsAP@m$=QL*fra&Aceo
zP@6J%6}X=>IMd`xKP^gwGp&eI<h7g`_7uh+_Xt7=Gt2a9_>DEQlFneD^E>+f^^8s?
zjj0XVs};*d28gd)?nw5Ie_U^LAoD@)7BM9I4rl{vTp}dCTMmUJUPX~iUZnPUFvva2
zM)xK+Y2k5fTkTFqO#ji=Yi4ojLBAHj)`e#e#NHu*#u`v%XFpYI>xV~i%GtU~;d5Ds
zb#FV@a^O#d97yM30gs+`o6vB$LAIU4>QHccL?Td`F^;k@pN9_9L2og0dXQPFg$RJV
z?z2x^MLidl`tz(2_~E*E0Dq1U_YeVtJ&A}U;~^h1fAPJb;ZdKA8_5X?`{{EWZ3CLW
zNYh|@nzH|BJo@i=k%xtn!CrBpuphb%wY#Yg{MAy>@-)3dwj58tPV$C15Y){)4$)%k
z@mD)v#xZt(F1r3BZ{(RkasqOWZR%+_2$d1+o-S_fXNtUxAXe+lJSoRbmwD2}i*<IU
zffYoF=J&ll=$U4ARq8<SOUSV_6i{m4B^?#tiYWwUMfZ%tP<6?2bFk&byZ&Ye$m!6&
zZ_~2ij(#CHN0FsSfvzi_zd-G2!_+v{ov=gu+viObO5$Sp!UH!?2u1r~5o-a0<3ost
zi6xG_=!}?NQ{%hP-Cp(<25>I$^IrXgVq&Qm{6W3<2%;s66}R%tER@X$;4r0)f?Jo$
zyN0^%)Vs&9@qO=nWpEkh$pTqVKMl%x%ahasBWp0L6X+I>Ro6Ea%Ou6$jpyaJo4<LY
zSU)ANAW5Yr>i$6aD~2!f2D=}IMU2VTRJNels35*V%5lfPfx^AXNpQ0`f<mzV$G<&S
zh{zgB7M#Irnhom*kB3u3%OLp93_StPT!?V*k@_K<_FBx+oVM<fO;&bJO9q*`X(T86
znKrmW<(S6ndOi7GHCGHCgzE>GG11?g6*TP>sD(H;R>yQ_^A~)51%(_r)r=(&3cS?Z
zUox)WduJV}?MXoV#MRUyWQ%zM>5tVUD@{%=PdVWi)~?A-mX{KANP$`7@K>4w6(K<n
zJDU~ouL|l?x~=+&vA!Ak7FP-zJ!v_T`Geyo3v@1Hj|$k?CPj8BN~E2WxYBT)Yi9aC
z%Wdr4ib?K$S|Y2>nn2b+$fx@J)d=0XH2*w72E<Tyn7^>qsQHSuON@3PD#_#RW62h;
z)K9JN_12{(l}#qW2o7XQut{4P_$lERbfD$twIDeCSQJpu=8`ylixjK}D?TEqo6?hE
z#fzPXE^>fI+A*D9&^}!{Uz<ag5;tv2&;7uB9;h@dUq!+l$PAema3zG$@LUrUiD=XU
zf6w2-osg~|TP455vC1r~^FFUi;IRCKycKl~ge7om*l^`t!R0?(QS)O5fgQ8$WHnvf
zLSp*;_sgt0m8=;e^|x4%=B3_C8p8hwy;t8OVY)~rm0fiD0R?`4=Q-;ePoKdMjgX^%
z*G&ZX-E;4j?a*{h<sn%B9WB+!kNC&3ej6Sc=;~E1U`6qp+vK0<u7+*}hZ&=+;i=<2
zIk}X&(vJ}vCNz1e3I$*0mvZ3MA2yf#JE{HAR|``G7+b2BhQB`RpMk3zZ8LdL{MY9C
zc&;b-uTunPiVLNM)Ak0~%pA$6^-u0%(^iK;aWC8XQBd=54kZmH-Pa}-8DTEOXn`HN
z68CPMdA)df2EWpks#h+L9f&KITSbK5YPTrwZ@q={>Ca9EHVw>!wk#Ozz@*-nBnt0j
zjfs;j|9JT5g&u2Qy^CuqGQ}Oi00@mahCOoVuvDxKW7#COwh+}#5mC1$>fmZI{~mRG
zBb=0emnT3r?@J|nYk*_B*Okz2Te(w0B3R~EMr>y^!hM-`irAjo0t}O?;6IcH&+1^t
z(B4d!ny~ukK8POpXw|JgirYS_XpDdW(tbz0Y3<n5e7vd`sax({?sy5QA3X>Bf1O_2
zL?fyFUk)!l*#FwLH@32{ceDHN7wR1K|KpSx3siSk8%sL_Sf+vLFJglJ<CHKOFhGbZ
zphV)JO-LauJr3B)kza!Q<tlk6+I(^0brJX2XUY+Xs+ZwyVW#aRLp?{l(~Rb*5AWyF
z5cs(GM&BCF9a|IQX5v|h;Y*?mO&o&mP9DYTj4~nSoS#GUYbLaIo1eqF#+g-uLI}2m
z8psZIArEfT3~ndDp-7^_r}d3eWZgyCCjqZjdr6jU0@Aj)M(5#=*vF2^HcOj@<s{1Y
zy`^#+nDJz*1HW?v$`SVtLVSd2UQVuN`D`l&>~9fnde2Q{E+!+wGmWH-Ow5}G8=Zo~
z4<s~2w;G4B=~Ai!BSr}!4GZ*EOO|5-wE@mrSztW1vv4~`y0G%Gw3{@C*ZZw#_<#i@
zE+md*{Cs!T${0$jF;~FiALC)rPcUTv?)0A(B`8-7x1k(+f8C@pZseTbW&G={iHJf7
zHK~Jt%oF+B2s1a`CDA^UkfFt8FnS?$8e>V3zkE4r=0L9M`nWZKceYn;a*p)bJ&U_4
zOR@2-Gf1bAt9fZMY1|b!1kQWmXfJ>E1#Xjo%$j4-Yr;nT@9!(*&j%e99b2e^=h&t1
zyOo9lr`S`E#-l*aZ1|&X0;*mv2?0uF1Ukf?m6@Ue$S!zq>^q-eOo<Gf>^$JYhOv`O
zPHwhiMkm&qrKdZ_|KZ>>U`Mg@r=xx9oFBKh#+e*`#=WITRwW2ZxXvWsd~pwhTk&sw
z(=y9~5qY>MP-E!lYt@PmzG(MtnIun5OfPKzXnMC;m>s1TWbt&L@zEY{e+tLFTW;)5
z^#<5JOZq0^a1gp4a<gS7f4^ed>P#5~df#939C$q)&^%vSC@Ihy(sQgJ3FawM{#;ev
z8<@3+sgbSY&hr(B+2=P)XYZ)LNMwE?mK&WCxjUa=zpJ5byo>W)R*{N$z)p}^1PfLT
zUJGRSqbe&h?%OvsUta_->azxtc=Zm1`bvh26<r9M=E}=x=1A`uKhB&icSDA{X`RBj
z$O`(}f^TeG9anFDr@(a`$>;6LTP1X-CL7QyP@q}(?4Hr?#!$K7AYtp~q+LT?HRsdY
zP;yppD`t`CwNqYj1`h*TbmMFaRO4rj__3s-fw01;!hHHsuY98xPRBk`0wui!LYb~0
zj5+;2DD0V!#?bM>;sl1!(zg$mNc8XxuT0Bsw_+l8PV4Cve0^*E96~~AxkP%<uEY||
zAG6GSy9RnM@_G;Q>t~s*&r42f(&c|Ex<?5nSqS`Ev8i2|KmLOOe}uG_$N9DQ^!f5w
z{#UzxQ)jFHF%U6U?f*E$`A{eT6s45;^LC`LTsZSQ{Z9G*sP&EY)!CQ*e*I12A3l#1
zp`#CSj|Z(AnQb%2MLc&TAwJrdm}_cKLUGmh+ihYQOEg%~5JahOv28zeZRmcxLbPN9
zlY!QrVzGZAqa!%7<@=m5@Zf6;L?FNBfwe@Upv%=@BtDqIxYl&6<`tq44kJ#qWUH?L
z>p#N0i%=PXdiFMxY>DJ&8Nc!F6$f&Vd-xFBxNv*f$>tmBUqyyvf;9%`U*rfb-8*EG
zM60|g7N{0y%L(=-ZPYRuJsf|pKP#5hrHo%tBS(+;)KH4{HY(fNAtv{I!H&aIIordB
z)U0C2XOz8co@$GR?6yiHPA(30O&YFOwP75f8hu{{f~u<_3RtIM_`=>wv$e|1hI{ep
zS8G_Yb-0}FkK7JJQ;bXz&xLWKkJrXDfWO$Im|G_!lh&|70*>98e?0yL#iZ{QK7g3$
zPZcvs4P>9usF}g_5!|*s>&o%=lCnDlvnXgDEFGG6#e})$r8KnBMG{RW`^xSFG3aVA
ziGM=uCCv(EN=W`h#y~{ZdMdqMS4<8RImfw3n{#E=RoFg!d6`o<b(Z5U|8{IB0)Y9<
zo6=@UubMW)RsdgDzi@y4eVa^m`&<~nSpc`0x2P_R`XtrOliv1e-v+;;j-93pQ_4dB
zHiPn0%ljBT_z0EHU#Uqg!hX7Gb8?GTvTBA=cE*BT3(oFThfZ8L^r4{LCaS=w`0-zm
zzyBN;0Q>(RcW-5HV(VsV_CG=c{O1h+lRT#X&G7%O`tUz8{(mwAobjb56TV&=?ysFM
z?SDPe|IOIg*1^Nv%Ej`(_nR%K+5J<#><fh5DTTQ>IK=&XEUQA0ih;y}2I5@EGzR5l
z@pam&^4WK~{(vpsZ&v(4Aza<#Dk=LHxktGj4d;yvmZC}}(J@LUi06fcz^+OE4tQ?X
zJ{rlLc5obv8)`O0>b5wu5?h{cXc;(xL9le=7p#qu!;XkN;`uBgdLbD<3<|%=VspgS
zDMNC(+Xm`p0>=#l6Y!iv!=#7wMElVpe2p@!x4|;9i(wxj#WP$8vG*|*B>Q|p*`|dc
zUomo-5HQ~}hJ$P!7fz8kK4wcyb5V7NQztzWY?xs4e$*f`E%K@75n2f4ttDB1r>isL
za+6I^O*I+vPW#?!qP-?iP(a>#mY01`y?J7E_x?88b;nd?N5YS-wMRyb%`hS!!mN%}
z>dj6|#{Z!ck}_V%`r89~({Vp1cZqZ+x!i;W${1zai$THJj0m2X!yF8+3rau*A}T?8
zQFi^LZHf4Ss$~zKM#Bf_wrJ>buA4Tu%C5iqGNkT^^U-VR30hYpA_tRT4g&ik3mig%
z$aY`N4mTg?v^mXj<-xzl@^;RDQk!-^6mxL5W_#fhaG{4hzX*#TT<b6>e>K(iPAtHM
zI<L>3R7UaY`8t@hi%*NxqQc**@)Q<18oCZ!>f-;!#viU<FN}NY_W7_}e?f^nktb%S
zl~oL`bJt~~riwkllmjVxl3M|&%M+!)YwBr``VnLnt;U^>8y!gL9-Gc0CllciRykX{
z&8uF;q!{$cGNN~><JJ(6_?zM9(~??!;Jdn%Oi{*9C`Grow7aMQoI}`dlD)@a>rhG2
z$L;r@p!h+C=#OxB>LZMaQ-Ax%J|zXLm{w#<6LWu77;q}kn%gXHrYTKn?*A=k*!qu!
z27+qdGLgO>d7`g%g5rOE<n2uV-z8K2lk|SKB)~uE{b4<?^kMsQOhu~%ciTTzWYB$h
z|58dPiOJFKRwcJqT}1I4Ffl%E@mDMkI$}y>KW2Jt&fJF~AplBlO-LVMd!JrjCMw33
z_UM<XU@8a}%+de&<p=yC$w*5%?rUXHP}N$40=MDN5->iiPrQdK5;0>5QyI_#$yqLH
zf&kY&<21VLgM2EN8!jNHQTUG6D3l@t&YwxPo%|<TgbsyoOcj^*hhsvD+F`7M2^ksW
z%MY?J^1<7}rd@0~4fEdfaYOsJ9?rtCpbcZIvIJzxZxip35~i<c1?!#noxq)K>&@Pb
z`GtYaimXm^LhgJ9vvrs3?)B?geyyjuwjQL*!}OiL6Y%t+KKs-$mB_{z)J@J!gIf%p
z^Ywkd(0Ts~pUF<xzJpQsyk@*8+}g%aMtA_tO(VyH`&DG^_vx(rZEo~3<2DxpzC+6y
z72Gz>w+aa~Oe2>KrWW)gLu1{aTboZ=b~sOCS?6GXZG0EZgdi$bsE-ZC8-t(r(tLe!
zI5AMe!g%6BS0PkT%h<A9E7Yrb3XXO84}4-d0HSXkD**%6TGD>ijVllE4kLM)E^6dq
z&E+nyj}zO<V^7Ar%Mz)HNgS5#Ml^~kQ@qkZbUTP93+~TpCKfRA0Dw$F0bkt{jd}{w
zS6x3MQH$-&$<^%x(Q^z=z9qJfxv}v5HbLBT*psEH|8RoJZGMT+;|Kz>^A`++=6`<H
z9E`0E?EohK{p?!RrSC!BQcwBh9{?GCJG(J<2k=iiOV_6R*6b#yUd%Ll)cP7qFKPbG
zE6R}SxAVgLJ@`H~N*y`d0q&-Y9sDwXEqJ5^Nuta)@#mhf)ThZ^O~n-PrO?NVuyhvC
zGN3i)M#1U1$9AyhSxDF{-Iv|_g;gidpMW_$fFSoHr-u3Ha7&oD1<I;-DSR(p_4>^j
zH+1gA6-_bN_3kMtUWoAa-Pudnn}?9W#P#0Wi#K~xIKH}hZN@^5Ctm32=<SYi>&+H%
z1N+oBfGf27g8SLZ)ydYjqH-pnA#x9o=i^d1{wp=;if`3SSoXc<XnnP<6XR$m-8d`$
z=JNE-6BqM!=B1Y3KH9ctQaS)LJ$=^Gu7s<8@}UqoN6EfD{wH3zlJ+)SGHvkUvf4qI
z$sw!pcIV!-(k|-uKuw^_AS!q#Pikf0#(*h(?>XROk2v7{erXDN5BS{q{_N=eAuahL
zeLgwGoSsuP5b!n>@V1rpCRaBlJr+-Y`ktP6h5z|+efW^>6y0+POmBl~JK-U|v{##L
zl>Exk$m6@&R5j2u(8Mm;zPNrIDJ;d=lmENFTOsj>Ls7sFX76vk`{L=Y80$61!x@RZ
z&6dZluj7WU|4q)V^MqkPB{hErbT_?yu3^)s5XNgXBuT)~=kv+M-d;aV=GEw8rrAaR
zzM{yz%{+&q;5i-_MS3CdMm8QR(J0+Sw9TOS{ANSdUq_ITOPC<NVm?ygo(`^1p*T(`
zg}2ay2*?*i(<^XCAd>N7{E3nDYLR@&JdjSdRVi<gcpm*ZI%+@AV@hbfTOh-ZZ$y{#
zobCuys!a4eYUsY=-Lyv0J-a2Or>`WmPGP`lQl^lTp|%Adk~8uC0Smxz@Rz*|fV&8g
z9sQgb`$P(4K1yfU?q&$+fNNz((B(5x{lN_(K&}tc*ExYdTeA3kqLOjkGOBp02uS8*
z{oVbw7T}MMU$S9VQt?Gt0=Eor=DNqnn~5II)GESnRzFrQe?V(@xF{DYE$evEBeJ9q
z`cEM21a6*|Cah})m`O|5KaZs!nwK`TQTI-qCf=!zN9(`4`9IW@G5Q;;WI{kGSisYT
z0{*&s-{#y_;nM$vO4ct2sCT!&@f=#j^V@$<#^R(^Hekmwx7IF{(nPerJI<;%K&r!J
zd;=XoL9zz_<|p^sa?LfRcyP6VxmA+ngA-U7Dr_r;qj0YTt85Ck_xG`QOJdZK_u216
z9~za1?YFU|WTnwXJR(Y1$a>x(D{j$8ofai~fjP&A3F|lWTwB=3hUf-aRF;faJ5T^0
zvOipjDw9i>OSJxF1fTF)8J>Os&bzSM&tU6fN(sE7#-xBKKlLn^L$$$)n^E+Gqn|zY
zj|V_<{G8T5Bv;a;_6CLV4`@)g%(oa8z&hq|X-fn*l}t7$<e&&T(+myTlWz_0ZMEu|
zVT$*0c7OXh+BohSjjtAl4mO7M0NA$0WUd1D%uIa=?nj%8_ijq!=<S+R_72?5%y++Y
zzIm(D9bT)Q-9(*n{dUR}qMciLC!gK5g6jt`V8u&T8_FM9w6`UDc{49oj2S{#FGoE%
zp$8`m;+V7NP6kQ?TZ6($Z>C8CXG+iXJVA#A6yyVwDUo=2$8BW?j~#X%G~v32=<WcY
zaeSJ5TBYO`ER>Yu&WQZOyz3Cm(v>ZW(%!6;l*rk5?imKlzv6;63oEfzRnP`F&se$=
z=R*k%^O^@<{62t}gLq?#np7L&&oB9PGi|mPxYYWs3MdU919QBK6^^Doorep(H|NbP
z`5u1n-Y;oB<^(NH6IGh=0ffG}rGMDp(TNSU(RZ9aF^XomFGrSL%k22h#7OB6f@x8s
zvr)uEfXI-c`Q<Ekn6s>3Sq5-`Tbt*^Uo0w^Qr%)0GOSp1A%6A)dBsn3Yp&X)X2mWz
zIHXu~F?D^>JIr9!wcm!|Q0a3D*RV|T`y|wdR{_b@bQI@~`Lt&a;lIlhnt)XL>c=fW
zNIYC41~nca95SYG30#(IB}&~aB-|$sJm#c&Xyh*zWlX9sX;)v;^dcUed2&8OFAmuB
zJJWIL^?#wn*R>8|1w~m=0U86jT{4-tBnD-%dCEu_(r6@7S3%md#$4440=StS)kL)z
zlws(bKwbIMPs$~n`S)srYPAYbG?7w4U4_$6b~pO8PQZpRLk7@7|ES=LaJyz!%TjQ2
zAThv1Q^F+<Y&tZcY|U`#cNfyq>u(SL+gB&%hb5kPq**&nVx74vfes3m9ENeU)wpsH
zf6mtk^>J*t2I?RIbrPhlTEwdBZs{k^j4F$^QNi$i#*t#KtU`mzj$%z(CDBd8S`D;u
zOfb>XYpPGns*3c8{%48QJwcK(_;Tq?lYXok0+KBRgJjg+7-2zTIKNovk){d5>%Nob
zT3S9O{z4g~9*+Wd1p*k<V1TNb$b+Q%?PUpdyC545Us~)tp1+w<#|kISz=U?}hBD3<
z!^zeWY9HODfoRwTi9KNX`Wx$h?^2)bG|Q!9s%Q}W$|o2U3uU*8qBmrYws1?!<w)@D
z;<cdffU!U5!Jy5dccJF;=rfG7oX_YSoT*&~T{Yyz5;{5s+NWP~^Je9HK=9Kjw^&+9
z5xs^vLI{hs^~FE8>mmQ3?;J_B$+_0O&)0fIlm1R@H9?8cb<JkQM5SrNBIG5Ni^^HK
zpEPS)8B4LyPxYH_k$h@+t{@C^fbM*^rNXj$p>kxQ|79Q7%YMGLK&uItLbNP`v+b*Z
zoPe(7dssZ?z+jPwz|pA%04$qPui$nm%m*Q8npi4sO|6|NB-lc=9Vx`5Rt7H|&m5*W
zL@P?OZQqTh4@SjYM3zUo$yoIV23T$)cN+}34D68>d>K|&RMXP}Td)q4np`W0&g_Zi
zcV;e3OVVvzFYFMOAS?z*eX=aL;sm)y5tT4KGS^T9bUo6nsA5me2mx)97!pdc$6GQ9
z&EXO-#;;{y3I&GT3Q)1OD2=`nn8ucBlmEp>M+E1a986Q-p-PDuqrVI36y#T<$iOrT
z$@{P2V1eaAc1{)Jh{ESsH>;tOi*}{_)`N$f0^2-MiBV%_T}lc8omMGvX2cMH_pFg)
zO-c)~YJ(8%Z&Ld$4-Y;Cws^`G^D9(SZp3s$E;Xw7X#@V$6;~=D$U0P!FLq6hgt9<0
z!mS;Fe1ObfI$iBMBNwL4bvdPJ7ZXrM=ZVk{b~a*bMxAb2?5l3={a3S%neTAz614WM
z5CZVprDH5AO-8iaaK)`VXjcrTeqWuMf^;sxG{(R*$AUEAPhD`O%CTI<nT@&_9J?4S
zyK05f0ThhC4EkW2*8jbI?co=_u*AkIXb?Hbr84<Yong*hKc;~%+311!O#iE!OxKlS
zx^a;fMA7&T<<C7ij?(l9k9G|54XI<aiGL{)e;WR!Sb?U~<QB-O{i}{>&r&(oSxT^b
z<Fa1{qiSWL^YE8$v{JKRe<?E||DjZe23eq9x_^=Sh+`Qr=jAftni9NsHvSQhWtv;`
z!D69q>t5lj@2MK1C`1^by!y9h>_Of<X>BT$3W~F?>|11zA@c7ubLE04DT0u~Juu6m
z0DMv}RK%+wt)G%sJ=h`OU4QbdpWWZg(37yQL6{?owK+~7gB*Whi|eHH)QjDa;ci3L
zaYQedI(HEqOS1imo^K)dOho#({}nxdDtMO+w5O=BL7%}ml&2`e#P0uMnt^y_EHoVb
z{4Ym>J0DS=>3@D;1$Sy8{L^;;@ULtwgh=c;QUi!NQcxf_XLKPbDDY@Ikd<&3+AlQf
z9S7sdSG9qMXd619Y4jZj?fFfUuYh<5Mfi*ADFgDzyNvu|=i}Z@QE{LAc>VnJV*Q*U
zU%jR8v$Y7Y&HOT6_Q7>PkcK4$`<Cwx=h{hR3ywEk<%EkL$lqy`a%=Je@77K|MEC|Y
zW)<j?E`ozkz!uihOF7I#4L^h6N|)O=yZ`k0Iikpm?m%ljQETxGXoM0w?m(+}UJ+OK
z?y1@fZ@f7s>z#8iQTB4AB!1$%q%8fk1&AX+n%4WnNLz{8HY6;Fy9<4~@z`ye9r@nw
zjIx>uD;KnV5W&*DYFWhQ+HMY$Yj#8rpW!|eC;;g;zn~?uw&?r^AAZ(uy0^_Mg?gy^
zKCA2}Z;hMGGOf{XMsb<%n{Xl0`^ar+=S;2~>V0ogFFzuJ@;5MuwXc`s(m6a`QgwR1
zo;$Yh`B-^`Q+^jk5JMq0Mmvc&T-u=aHF-^^UYf!(jU(DLWFFZ#y!lJq)&f#+`$OnO
zo5RnbY9Ff82o7PmR1IdX$Olq$sp6F?7nWzlaNMRp#efraWwaQxel4WghD{T~@jUdW
zZ|ilB`Vub9l84N}lJKXt3rwL4OA*pw7t&zAXzUN?-@$M_ACjimV<?J8#uEDS-um(p
z(RknoD%hC*?^)>3uedqEcZ|JqSa<bu(ko0Tz%mp`^L;2B*^!P2(3Hue5XqpoH`=jy
zrqvhEj%?rdcE4XUAc1RYi-jy#L7g!Y8H#jXyPJXmC+)r0;f4X%%s=w%KFMN7CLHdc
zP+<Xlg8M7a5gI~q#A(PaOCCMz8=FswutD*CN%A2E30ATpCyh+YW<q%l;SD|9!ENJm
zb3cjG<h(OMTNTXGGk;*48bz@vmi>aKFsNtw=A+~4g700ya2cKiiP3@SqfmU3y&2s_
zFy!(=^-LLk=qKp9*VbZs>rbOC!aDWO<sk3PF(-ji=4!)wievbm*rUytsn>i{&;fx<
z&eX}0`CEgyJzl>hOC5QhyPrPrzy9UyaPC(!tNlmEhj{2(;4s+qg|7&YLfSV${>Oe7
zdr+gv{xC7QgTdyJaCNSdSNGVXtMp=B-YNV{#{NMAlpSQ@5Y&rGL3v`x5)34iivcCZ
zoCYi|WFtHD&Vs*-OUK<I;vn*+{rQ!zG22^4NxkKTMDCu*+sly$n>bF@Wu^PZ32N_%
zggaWjW%Vw_E_b?pRF@h}PI{s<t*~MElgiJSZ+K&x$*5NLQwv3JgUV=3;f{PtR-Zc>
z$=g;1-f)o|Ek{XFxp0h{JFdAU)2grYq%9G%Ch&<r9g%bLC5F_+dl9(IQ}@>ERVQ5X
zH~FRxqBl%_<iBJOg*o18(8gVwG7Vh-@9x}g2Mik@t}fmunD;4R#gZPvNfc*x1ak(3
zl9xEuIhn;ZXc2IVK&v3boTB0^XF6;r7QF>JUme{PjwV6aWKL3ehIq_^QDL`|8srbI
z)4@hoH6W~jmoZPabrrEW<wXaIwsbVvzebF|$a5#z07xP1DWAuV-ts%Td#Py=o>(j)
z7dlaXg+|b{BHvHOEuy#-O&c2*O0Nt>jaKVvMIyVRIHkkM?oitrIQ<lZoFu_|Ja?Gl
zIbtA`rohn={DN+=EFNs>OxmwQ==_`#2*aBjTCvW3w`$)JRKb1pzi5rg(k8Xvir~rV
zwBeaTz)XZVN)wtLw63hRD{u5QY-_l(R4)_?Vm4e!#J2}rn4|-npUalCDh(cw#!lS)
zyaW%j;#cC%epo6&U*9H5ZAf*3=(x$2;@;6kFTB+DWLU7Zo9!)slV)RO-0A9uI5+*V
zX<E0M={=Qui|@P?)8$HmfR0XtN?}Qj;EEnyA5Z%*6(4FiWkO9j($^RQ4Gp_G0wx$*
zwXfN+*Lh&xOgdd6eS6KhU`rvOa;MBUK|BAJWY_Zi!RxT8r8>bu9HkLUAt3*CWyVNv
zcgwaD{^ruDn0|JGLLlgixZ<*G=HH`tR4UhTF68CM&-Hwe29KrYOS`y2d0AV_td2+}
zF!<FDdf2urze@2rPw(pJP3dw63f!T}!h#>w;;N={Nu<a~>cIm9hZ-Zn>GlS=5x#bM
zmLZ6_wyW}FA2+r>a=#G#skSQq5<WrH_S}t)Cn)poSpgudLEB!4c%yS@B`0`9CSJCt
z`V(mT63G%L#YV>(?{<{4QR(a9ICwE&u2P~XPv@hu|D*xyV~SB%rPAIZDyP%IT8Y_M
z0__OuDbjo;kx~67LL)r({aKqT<?;`By()a4>%pzMDyQdb%;=Vo99Z){4+ecml`C3Z
z4oP?I?`pv#GCphxYZ4>@ty)eQgt=5=_=CLofS?<Na*{s-En>zD5Jvo>k;`HoP15%8
zjQv!y*kZV%k@IS}&FDqzz>530Y~sDmG4y2mt*I1zhU05pwzR|OmehkJP>`A7zMetE
z;loV4G^-SQ!7)J$e96KQbq+Lp5%;P2TKPg(Zk>yZw@znn<Xg_4>#!R|@`cdwZLcL-
zRI2S(V`GlIH8*DLoB9(g(nuc%J=xTR-fVd`v7#*milHJbfnx$G-k?S{y+Tqm0(#?N
zJ~E8qs-*J>+ib{9_QiGgj>}l5#Nsu8P$G9k$gv%@2mpBNIB>-g8QK823KU)XUi-!7
znCFX4c68k+!qAeJ6NZ#}GM^@behiUfs1{r;g&_h`*v~El1N(I^3njB;`Z3ctjcOb#
zNu*T90eF)Ffvep&W8%dkbCZ4kuX0=?YCM>Ib$$6n5hfjDf1RE^TRxppQkL54t!0r*
z#f+e|%2nW~(!2}HJ5N--#MR;QagBb<dTA|>Z#~Oq>OfP{r^$z^lIqYC{QWV%gOASr
z*=ewd{P~fy<0bOF9y_Ux1%-G)0_k4t@4PPh(H<b+3wbZJ;AI`;LB}J+Q6NxmL&e+K
zN24`otlYq4cw$V_iV;CKYvSNTYWF)eR@dY3J-}wlMWQ07w`(@v=MrbekwsxYt2=(2
zEOR#>k$#h(e?dHK(Ine^*^|Zt$<Gw)&U3t0WAe1XbG*m!>?P!M>aoXhs!|DK!1pgF
zXI2Bx>==OQim7k;se27<gbFkAuD6%N>>Uf76?2v_$7~|-_r-+~`bd3bJQ{U@gbjdX
z0(yiXNVR0_ER5(tQ{{0*b+WwKtxtSJNM^841c&kKzJqxV(yH9o)-H!^d!DO!43SES
zgODL8eMmFm!2ws5j%C=hT9X-NK6P7g?auSJeWD{oG9_PqmHyEg$7DmQqd%9D;GI5I
z2NIHO8%$6Y3kq0vUp|veu!srSR!zemr)TnMn}~8fenHnFA)sIIOKC|`VH*QoHgSr=
z%DQE-ZpWKxRCq|>q_)W0DxXEHg<Ur*FL^5u>aBVT)w8QKJ*mw7rlI0y^r-!JYXdE|
zHgC*6!bkKPHBG1~v#S(7vHbZg&cuI;?Z26nUG(`+_UxCg3nCCS)nhHJ4YzhJGG1>e
zFsFygo-Am%iRbzgY#j*`DL!K_!JHHDrL3}xm;h*od?JC_(_sEhXMJ9viq`$eZwOTq
zpG0GTvKTP$)^Tw&p6?&h?|>-IVWsqYfg;O+ULqiX1{vk0bzIb}$dUEaz@UEP`ud8~
zgV<eQ$T#II)szw8pf{)=U_es{$uH+^Pxb9`+eg-iTYnNAx_DhFsEs8B8UZc5Ek70~
z2GJ);+G%BnXJY+&rd|5y0gKuolAzvUKAUHmja6RW1@htK{?yWO5byD(4V4a(xYynE
zkQosjFnlsizj5v|Qxfrdv;`~d#z<_Jg}HGiq|T|ebDx?W=7B0T6Pro)5q#C=Eiz?B
z0y+J;7=gOHSr0K-VRq$#-}|-jxZ6j*nNaFxx*&cm*QhB!wC(^xm|ZWQeyJ=TqN<}T
z6N%jH&kWFvi4Gju=G5h*s$07)d|i^b%BM^liQH>@=AVIp$JdKytkMy~cVezp{%9`C
zErG2JO%xbS;2DQEa|PICui^o^K^$mw9=|nw$;v2<AM-uK_1QnVH(`%S^m9>eH=H&&
zO&5ZhX&tZW?u}^sSjxK$cTa`b*dn4_1I)7%D7TIe<?hJ1>-1o3IqO-BOGhpG&D(}2
z3Xyzukv0>VW#X{dqMr_Lz$z9_Cp7_3#7k2kxrpJ$+jdt?JrHYkPBeWcxUu^e@}~_E
zqJ^Je4dJgHEu7yRa{FLuxw>><&;`5-I4R%UD2{01$brLWiaXtOcAM<oa`IN8^8vnt
z`;s*GX&IE$Ib|S^s;s8of7YlDwo7b<LlyIo;J}$!8IibTfE&|ra>d-{!Ww$!R2-MQ
zX|!-aB=E|&;1HcgmvaBiUEGaKHRc;)OEj)zUq3~b^NjVaLz10gScWs9wI3rm48|Fw
z!@u%o{Q^0PGNOwqu4Qn^fEQ5HegO6eZB=b<bsx=ES!VIGw#nDa<lIsok)?gZ*gA30
zSc_d2Tg-}_z)T0S+vCWcqVS~cM{nFeKUr{sULBd;d(%PuhEi7$ee=r1N$CtUsK*=>
z>(u1I;2sZu-%<Hv6)+VJ$Jvi;Tyss0ItcnTVKaMW8Y!>x<syYM=XLw?VNQh#e40%c
z2N3Ce)c=}t&WMmp_HM(dsoc7=^(&!QR7VzmtQ0xtB&6!YF$PI*<GCW++}CB7@xX?&
zWa2so2$8J;$oypIrp$y!D?|l#<z6$%{R-(`wDQBfA{fFWTdP~szt$DaB=6?xxI^J?
zv&{m`6(E%0xU?z1{Qi{x*GndSa7(eYcu#wzx>gX6=$-ME)|e472JO=}E`7s#m#zw^
z{&)y~Jo#8wxOWrxeTR=wM6|g*jRh^~E;t9|*nPe67xwF`=PG`JFoYBz+i-yFo0E^>
zqlFh=y>r2tz0-qWL)=HS8}T|J!pU&v^u(PQPed{ed8}*_c}EBD%)B%IlgC5z#?KhA
z+jt{)rQl(|^Gh}lVP!`ZLFO+k!GdvO+&{<J$q7MaF0(KwQceSiSZVf0rDwL#ABsE_
z9kRYkCGgjF_Zj;y-Inu#3@!_`xt8s!LtZXSrhXLZws60{gV)Qb17BXW-13?mn>YT(
ziMZvxb$3@E&S9xB|9~<*q3&xf=v=i`n`w~$=^DT)7T)Y*go%Gw&@&3Hi&>qW0}OKf
zsBZP`en9SaZV`;8h7x}i#5d~O%CCg1Q|R_qfHWmCh6!I#QsV4a-3I#|=2^ZFWYk*|
z3RR>5)`*et97{@I0GqD^J2QG`Q!%9Kw0`Kz-Bry-Rtvw4fA*w~rhw2o(ARYhwf41d
z9@TB_tbe*ludZ`6G7A+<T`(D{sl2jFEnY=Bo>X?&z8T%cw=D3%uq|4#ujZ*u@71+d
z`R=e_<YKo_JAno5;<a#v=+v7dXZx(qUUrm^Wi&Ns$U3bf(lUzoX9qKJ7vw>y<6s6b
zg$!;3wv2JRX*T5{yKQqmD>}CH7M_o`*(!Tq0YwVVMjXN-PqDgV+wIFsXu$n^C|Jh=
z)#f`#5=j)e(MG|r^ldQD-Dsc_f9ZEO6$IjNBYdADqUm>YDY<QD_1_X;B2cCp5P(*Q
zdhHcn!#wA5-}REDAB-T-u>4PHfL6GA?iJqGq$T+Kskedzy@GG~P^N>TK<C)~CZPQu
zg5l8iHX-%Wn`ACUj_qf88}GyAi)GOjQFiKH>eS@G^=Q1+v%Y)AG`g>`sHi+9MJ|}T
zZEPt?K3w}*MoJ#c0d?iu%`#Sx+wyt&$_N{dwF)&?Dy_*fNkkXaOa0j5z2bbFAoT)w
z<TiV~6@1^*Me=iAm{HCF-W#2xr03IM4@ZzO$|5!=x@0IR|Mv0}<^k(rj4e?iz|YG?
z+n{gq?cT-AD}|RlYtT~5a8oP=d!lLeHja_>2FFFwJ#ePByVHp7uiWumM=5hYb%OOc
z?@Es(5Y2C2`LPk{WG7z=8y|jCP9}LY9#`^vJqNrfK{4uSC*uzSOda^*p(x`b%uysv
z$!W_;`eEU+hTp#oJ=+MhHBba+(M1a(=^sJHio+v~ix|@hDWiT}r=;R5jWpqEBIDI6
zIMy<*1_By>9YfZfb4V4JvNGfZ+nqom$dw+GD15uF)3lWzjqY+b))7h1Nf<;Lf=0zB
z#`*O-|I3RK{7i|!@tdetV<3SluD#g)=9X@2KT(t0gg@NT#|6L6ddM-EukLr}E@}5i
z;tD_FU(NLx4FZ1fwn`p<12(CjYV*cC93)%JWHB|alc@#%F~spPi5j%WLp&TX;0BVv
z#CN30O-!{VJH>aVNf5Mq%c%E;$V`eDaqdhB@Ip}i+6Eqz2`?vGe8qJU&Nt!jZSA6u
zL3tbDjITQKYu}V!4u1M6xi9Zm7+?DTZss@4>hE|DdjYS_5r#7KrRS<yaW_3FG`qhh
z5Ac$Xg)lu4?zc3^=T2Ds^HOVKpik^RO;3E<87y$-{%oa>a5Kt@mLU0wQs^y7%o+P*
ztXU6u=5z1qAjw+8(|r5)`p&yM<^ui}d4_ZpdDuE20@XlXam>{}b8@Oti3^D_psQpO
zMDJ*vP1tWtsnC$!2c)m*9pnB_CjcraqKowqX93^4sIm?Fc}Td#;>m2J9Wu_PJ@kPg
z+%T%D?rqO^#G}*Z7Zq527_qThfaj9qrdjD2AHSW(T5u2Am_aes?Z<W%RL5l@A9gjU
z9kQ)xra5_RW(}D}`#{N~CD&1>w_v@SW5?|!GV$+VkR{%S*Uf5AzAT}=9ksKiftfdK
zz2QHVMW(y>0N3<o*>VAs!pQ55iE~W+L8CH-gFT!OGebuwm~^7?ql1|X(S;+>YgZJN
z$Wn5A1jd1ee8fH}+A=OSoU)2@?C)&B8Vge4I50N55cHWy;^j#v%TVHDNh{k>0F$kw
zQf8wV0slvM8ycLayHIZQ5DMKSau~~<ImaJ55rBqk+uxbZ$Os%iwNFKcC5Nq};%F;=
zzJ#X21vZx)--`}QO30a!uhgrpGO<jjjOsv&F&WPiX%5v4c&IobUtWF~!QbF8ZExMU
z#JE%?-vsz-cT+y=KCUeUabXg{|Jf$pGLHvjyE>wPY?YR&{aNy2H)1h?XTTj~%wo3u
zNcOX^ANxpVRx<yS;Ltt9V!z^Be69JEI;;6%1qu%3n+_i4G<HZI2!HI+`~KDDGV<Rx
zcGcgYwyKxa=2wSXXlZq~CRyxHd>0smG4em&ApG3K^eyP8z9eJ^3^r`mRc~BKx9)9m
zu$gAmQ|=(_VNG7Tc0N*Ry^RF|MzL(<bj{PuZj}V$@!LVoye7DPU**CORQ;1xV{~~w
zE2(u0`xNMU_AzivY`xflo`MLMn;&|GcJT6amnJl9^4i2xECwf?!MZgk6WYx@j(_09
z!)Q;<a0cmfJe-EewF9;FAIJ^WrV?m-R&WMS4cjhp`QuAEF9gb1jac^5bBsF`ks3Xd
zi7Ia{hwSQ@m@Z206?_q?6qr`|3=dn<!-+Rmhe$#3Ao@oo>gG(j+v;um9ZaXR-i{Bx
zul&k?&Sh?AXArStesaQP>q(6Ti=WJ|_rjsd6<@LYN^nK(Nu9VX5JF0wAouiQ8@D>L
zrLj0jqn^r8D@p1F;zpYxh^t@8800AJb;(<+1qO~z@5DfIhUJraO0=ZZ99~~~^7+y>
zZ!afnq=+h5W3)SYBZm6cu8rltJpT&(xjg}T0<BQD^nLhs-T-M~s$=DEQXBZ6YSgQ1
z3h{7uEC6m;)HXPR-19Bx+N$6;?t@VtZ(2NM#`1M3No(lxD#yV-XXfzxSKkaU+b@{#
zCz3|U1q~jPx{7q5?{@Fl>hMo-3^{xi6MN-i<Y~}_?>rXDmFYl&ZNT_yE63W#^4hMm
z7V$FG+Tsr^POI<JunSr|7OYk2!0c_&DuGLDKOyHCF3i!p?VaoahA;q|V?upaha>J6
z>1un20E!kFXey)p7e}%5>^)#fc}4Gc!|u2vlLS+s8Jrc&S^#f`^v@=bh}Gp>BF9>v
z$~B;5^{8HeJ4Ssq-s14AV#nWLC0XV!@V7ws0gySxo9V<;Rj1{H!%f{=pw`)4cGjuV
z(eF+Vg^P&1%>q_n8*w?O?Gf4u(uW>1^9p54hZEnLK*#THk_ZRL=Q>TGd(d!IPL<}$
zX-Vt)1@i-5a{K5aI`vX|39GpCO>o$G(SZCaCBNWNy7A}PH*3{Qk~jy*iQgosYp`V8
z{%I>_OQpdr^bf6al+GZ06hoC{@|pr|6;n!6L+VbA;iNrlM2m*+a%L{nicH#u)sEuM
zhvi}C{S$#ab3lTJ@Qt1O&Nruzr*`~AL&~Irz*!=3QZGujkU82s@PpFe$V+N7lQ$J!
zNzenqFfr%KQxwHg-(GtZ^zok0tJT^r(VuGW0W6-4M%;8jo_BU!K(4ZfkWi1%JHMe}
z2u(2WSkxT82}#HOK+h0o<sSO`#eBO%k6BnRaO}S4S;Y&P%VXc4?A%kfn@|Oz*tA;<
z$j6ivcV90UFmeL=u*bA;3m;5;nO<l}vsx~FWh9GrMw)=m_FQ{8HD>L1hYZWSbu2GW
z=LL+eU6|Y~{8Sf?%$8b0_N@^bgnxqI1vZ{sai%n$e`n0K^K;!AGKqWh=lXn#@c52)
z4&i&F-|vo;lsHcL>HjQ)yT_Eu0UwAoB4h|Nhp9Bkc;t+z>P42O>YHjEUg@6)-rJ1$
zNgrUHCa#@!{$s}eU|2-t;aV!=L6FFf=+q7{S`byPMnxQq|GZ>YO-GCiGu*rZGdDtw
z-J_Rr#GKY}qd=!i=)s(Su<!$hIDxPgwIo>%Pp*3`%I<kPtAU%k&?)ovyP3DT$JS71
z&hi=Ru8uH=vq<yWVr`CLqlG~3?ftpGYL!>v-#5LUbmd47<S}1CwiQR#oI%7B(sQ`x
z+bAJJ-PyfU|4SkWE_anSdIbG8k)0~vAmkI}3y`_5MCdgvy$4|BjU65KSZ%5n@wzPK
zaRSj95=)L6n@ms2+Ik{k<j^@S(Ovg|V@Jhx#NL<z5eiuSDPNy!(8%)J-2KguM*=R)
zdv-RwNA|B<;1vlu*-rv(<BsKME)9Djw)0%^?HkQowytgw7LmrG9-XE&TI193xOC{k
zqg7QPbNGp4Jy?GDY?@~{s*q{lQ)5{F&Q9n6(vJHW+F6H|K%U#U=;r=L&u{RI&l8iS
zCfp}-e1FjR9=;J;Mbm@#w6p;3TOwjgp5vQ_BocSWoAgmL1WmG01a^+0YaMXaD12C|
zUnjjosKtWR{|A(KpGQRJ=J`z}o?cJ+fHd~`hH}fkLN6c%l6UODfgFx0Tn)rdB3Wqz
zbQm`ULf%y{4P8RBO^st)YX(Cv+T4<yuebnr7?p7L$C>|aTQ<m*B=>JqlITC~`~#?x
znm`RCZs&I*$R7l4w(DJ6%i$|zM`Cm<2285VE^^F&ZD;T!?K^+6*HF~%>5q54-YpS%
zs+X`i@HF2A1>#?0*h$Pu!yq~LQ|%TT@pa1mXc|+yl!fV*IWv;YrRS*K!w-Np%&<5g
zN2+powD~;yWv#x~KL%+-0O{RoRHGwln}tkti8vAmf5z&o?PQ#_?8Zk6_iceO6#l`y
zDShtSkpl%H?^X@wL9A<#*r=QM3<d+k`Ht)844UR`j485{z`<d@aZ5)Kyl|{@l-R7B
z+)PTB%=v-q>@$JJ%5cnD4>9)&Wq3n~LdV1RRx_Kh0$QJ?)v=S5+m@WPH*4R`wP4*}
z{})Nu935Hnw3BRX+jcg#y|FdPgquw^wr$(kY;4=MZQFMCoA>wqF*9eXyQ**XoIZDM
zRXtDbap6P+Z~PkD8i-g?B)p&oh2NL=Z|&OBn2)ZcEXN^(lg>bTnJ5>BPGhh1M4kxU
zLfOm3d)h>Nk|?OQ{HQSj-eH!E8FjMV28zWw)w4zi_qR2|$KGcQ>fK(JOc`~-Qk_|f
zLcmRv5nwqph$P#reR@lJxXSDQJxZ#SIy>aC4`n$svU(W>Pn^QBc)*V+qE$a5l;(>{
zFaB5uB^OD6is_z}mZJvD=uxM$m{2lN&X9d0D~x|Tgf6-<X}*x_(SIn*l-bb2E1NFx
z#yH{PFJqkpbySEYX=P|=SIo*o{(?zLW$(*`=H1%S=a6h|dw*9tUaj~285DnUOg;$F
ztr123cgh~KKkiri=eyOvk2Jw~@vkw1>hZx&BID^7a#FPOlYN!jB;j>D$iL-^W*)eF
z@Y;4i(`?YtJ=;}!M``o1!9qC@iJ&UTafh&at`BspKe>6cS4zWW6B#t%ilxCL^U0T{
zha1(|>aPwb{RN_UjRipjo()(~j6qKhVK5GyndLV(Zw-||VcGokA&eO8%~MW7D8?@2
zBlKst;xp~GGUUg1b!4tAcfd9iNufK{%I{9&JlF53ZiDaZLvu#$bT}wZ!<a2w4XuB1
zvbM|2Z(CBu)$fIxAG-~DEV+GZFy_QC?p5xR<0>S{5N0|F_r6`ETC)Q>4Z0>SNh2C5
zGWjhW3uDl4^cESpo*lfhHqukib3c2_%G;)}IN4n!fGD)uf8$*xp2BJrd|aAVEfq-_
z)Mi8fKyH@>49ALErJ`6));)!qIR;Uea+Xhw2EUQ=!|VLQtc?-M8#1`yP;GT3+qP&Z
z@5SK{=d7izxj#WwQyKaDlVuofn*S)nTc9U2SGQp_xxm2~^KSYZRRu-#bJh9gTGviT
zM~=lnX*WWSQ|k$ak$lX{5*T^YILzc+U4%#FZUza%!N`M(a+xLV9<brrf$+3r(B)!0
z7RD1Yp0ssJ15?eXJZ-SjASOSJTWx&HH1)#K#zy{Mr&DFic(4N*Z-n+Q^x7DK4Rw}c
zE8nTHLk3p@>gn-dc-C%>u|5@+VU-COaI;L7Sd@3Sm1>J(-7SDVb5}bme}pzINKdE*
z&ks)ZeDBw`u4;IWA_-JsSqQmLmN(0A{M0c86aTu^n)TC1ZFus<q1a&BHvP}|^3;9W
zBgeRuZ0>bmK`#dbYwn0m04?quh0j+<m^0*^&d^=e1gF0Z^A#AX;2z9qq&7G1&8URj
zdJdcTi<bSW=kL1T!3NApVXu|yxXtP@40td##~%)p!b86)ms^z?O{G3WT+z-W`acs3
z<8i1Y2;Ef3(J6d{+QXb1WxeN{`<Js6A6>l@5*eIi!?tA(rR$y@0HZBRdup;>rUHeO
zY!p5RZDG!XyI05R-Oe|y*)7ak%CIMB!piysZSeO0Oe{Yi_In}O{;|jF=4B#aiFpht
z$>Y>sg&}WG{Pgk$UUd6RJrS5!PfO*cB2XFoFknFwCGY<j%Ad(#egI0eExG=;Lq9!O
zh8JUo^B*NTFIO)dTK1{d6V);*UBUvGPo8wO3<vNBob~riR{DLMCzOu+h1R#yz`wU5
zhJFrAnjwc>gps5%8?Srav}nY;tZpHW-q09i%SZeLh9K5F&K$%ROfQ72q~CvTd+_R0
z`7x<*rF-*@3VXY2Wo=aBW)S65D>84RN*YUlV7j2KALb)DAfC5OE@ds9I6CHu$i%+r
zoRcr1!8Y}=R+u}bI5OPe<!&;9_OPTS%(-Cqce_x>6-zNmZWjP2b+3Cu`KyqWA4)qM
z77D8Th}=irjb+##%u4^bPWagTz2VwbY{DPAa9nzb+y@>s6p!-MrDuNiPH^)#e+$>T
zPsPinVp@A3_T}o(iHAeZa`mw6qTM3}s_{m(E3|KpQyfjWwLNuT1_q-fq|;|qar$RV
z;A^x~M8KYg8k%qdXejKzp-(Tq4&w9`HZ1yw+e$WUTFHw1u<g(kXFjXZzo_LSMPj1F
z0(+v7Mugxmifpc1i-%&{@f>0q09t5OiY_O$0lvML{`K5*$JX89e{BX|E5N$za@&Wn
zau1lk@W>3W{lv%46j1!klBBplkM8)<tWjuI1D)Er4%&Hi25mb#$*9dK?<4ft)zt0e
zti&-7dnD>5r;vPU7CMKTKBdN|YKgik6Jr%^+d^f4?@h!_*hXvhD^%b2?yNeY)YUtS
zr`4&aEUx-VSV~XooGWIaBgr?B$++FCLAcfk>pk^D9Z=O|#ZG;$nHt%F-r}lpN4ws)
z`JI&sDl_kg_AuSt)b&Kq<u7Sl&pP!khoZ@cj@|<Ppe6%S5RE6hB(5}P>$f_E*YM4e
z_vGyhcfQb`F+pZ9W>U{`GWq$(x=nVZ6{qFF*N=>Qoa23G7p+6(TKMBP%K@22r+BQm
z%0&*VWB6*zXEh~q2FEAZd=kyGiSo?&JB5;==n)re{3gf9D?<ra$a2ZbmFHC4bZe;(
zHF?NrneD*u*+1C2bj)+__jdsR<YJpRE*G^?X@6Lo4CFqoZ7>M2&&>Gja*%mHexb9J
zHE)>b-I3198Jm(ttp=sl)*G%TMhq)#6x(O-4OcU<Qc1)ZazO~9s-VKxzNa><)Xqf8
z>!%VuL?B-f5H_MB%+{RAIGx*Vc{9S(d(C6KVaP1t0;xZBYo!^}5Gh?I^5tuVJf$_z
zb-%JjhqL#kVKNhYf4kiTEH3-9(Pa_h<L4MmM_{y+*Zoy5KvTmG<=@)Um)&OqKfiDE
zIb<szZobVZMV|??n(;aP2CUxUcbr#>95ww#^s)2h@!iPwB9jX<+GXHgYRobMhx7t`
z_uh(p5ch&6?}Yak>gsAu`y%G~$CpUTN6aVUs_(2w<F;5bzwu9PC|DQr4$kH=BP>$F
zDAl!*%Y;CME}ayF62ecP5CHgJ|8>6nw#!mHP4IwhSlhcw2W_Ywq6-Fs?K<n-s!qIA
zxCmvjuos_g@)WrJYI^=F*845gs39)VS;-r;Z3w`?-41dNrrzBkF~rNOo#8n08e(f>
z*v6TuXzm06a|MluzBsmDzeq`7-MoGKJn~u7X`|?k;w*2)K_00GZB>}isO(#8zzcDf
zOy@e~)5PWUID?kotK;3R(H_w+Ul#v%bs)1C%mIdS(Cx;bZwYsH`Yt(E?h`D$z6ccK
z7(S=q0N5YcY~*1q9EW1BXq}q0d=Y6BmCA1Lto(@rhGMfiUD-2uIAhc0jbf*CKwOL9
zI+HHcq>e~wRNx8W0xjkb6w&^XI;nVNm$28Q<r4ZNr=eoUq11%fO?BY60dC!quW9@x
z9Le^=NnX9+B(^SA*Egf{-1f+L>P8{D2A&IVMV)v*31SJ<pkK)8Ki35reed}Q%U3B?
zCc#z<*=i9Lh#}B|!V3A@J4~H{ON(kWhwP}8?8?lm(h~d2!gZLIu)!_qe#CBx@0~`D
zGkn+ncy&T1L=QcXKQu8ZU{&Bfn(jzlQs;=_VhhlJIT8vi;QQ|rNvlAfkDbR6K+UB;
zK<Y=L#uhy9)G7<{XU)!ow<)DBo{8$0O2`$zjFDP-22&bARJQ8=WgC(Erfu@UBiB5n
zY?`E_5Zy~lH#>*AjN9kJNezqf%Q{+ijFiR9`hs70V43#q8>byuV`+^u`-RsJe!wu|
z2_PGAk8{qy4ygOHI7u#uxcRp6c`!x~TN2chi25Drf#@M@BAz0wI{fNm0jf$Q?3oJz
z$~*Yzpl^mnb(A9tn#yMO^HxE!Mmm_f3_3ARLjZ=q^n*{?O+-jd8uxD+^0!Enu64-L
z=h^+2`_2B#P=drWxS<uU<R~0)9#Rr}ae3zmFI{1nx$u{izTDfhjH_8>cMdH(D7$ZW
zNDUFr`jI=Wlj|41iG`^A*Dr>yud27UQ%ZB>a5oCy6iJ=FQ=LbXhLI==AzTK-ouBs$
ziIr4j^-~@itf=omLAjQWAdpyhq=B=*$~^ad#6D$gUuu>da2tHxvUbNcQ$XA~@Ll9e
zH*a5R*-__q5sFs$F}8%Jm7U55PGKoMlY~3Q%&dGJhCkMG57GfsSzymcm+nuxKX2>(
zKU{$o!<IoWx3Hppo_xHv$_PrE0ay)xG)JnKVdr2CuT4<eH;w+W-gA}V0ev5~`^1z}
ze;D*aaI8v0iQ*qxg}yJ(3+2C`M1cV4h-GTB^$;_DR@0&1D}|b&%M~6Yt=?~)pARZ<
zh}%mGyn<|<<9-zy>IuSi{yl`(?RFS8%{2_OS3Si#w5wx93TS|ry>1q)sJFJi?cMiO
zA{%Nc?UD$yEqF^V6V)4aS}|5idUK-ZCf}-dRJ9+M?q)4BjFZC;6Qj{v{x!3NwPp=e
zboZ$(#?NDMDFf^&3g=A~#*7RkRhTW*RMME5y6^~^zwdRA6)s&E#|XPCo@i&BzvtPH
zx+w%U+03LeFw?Dnb+Iu2v4|1=Wagtx{Qkp5sZPRW7f<YTgX;EK70`4sM37pV6B=l@
z1P+NfA`}igPlx!)yeZJY)lSDp#b0`Xm)iTSZk-HNHY3eZu%flz-Gxn1y?>%=A+dYo
zF4nAmlvd@1K9^%K9sF5vwf4X~?PR}@c9d{i+?So0Y0&SohYsAhHT3ALTp)69?P81O
zp&3u(v?^wl92>g_q>*Pv9K4)hj@_{8-?AHg6te&)a342!`76@6QW@gI9P4~^`(4J4
zBv!{`9gPC66uOwY4xi46fBVJIm|@2A_pD_RqjLGpj{;xrSYEk=y9l3n@x!8JnNKq?
z&$1@aELJr2cn;UP)cRIr4?SqT6g9y?K`5V|@$Q4|b9TI@zU4IXi1KrGE*ciM5Ierd
zg8Y98mD7V&D@U<EHe;!hSbV}NdEJw_g66|%RQ5bkp({f1`AfTmAafIgonYsamHtYo
z<b<fkf=3)qO1pW&($<Zb_?7bN!*Tn~ThNFeBnjh~_fK>Gi6yBAu&o!y9h(-Z_q&{_
za(%Td&}3~~a+`9Gv5uL2Lr>p^H$y=7;LSF~_sH1X$^3d0_i^WqBZ?k^h<LdACO<iv
zQA3uc$d9CWRF)=`|B$t<NSb<zb$X8{Sfo1S@+R|O(X7$UN1VwdaB0!{>iVpP1tnQ5
z{5Cl`I#)}UW%Cvy03xja?#WuEI{JgcFDtQ79~4be$l*Y~kVnyb@XtN)_j9bHL@;Vg
zkTt9&(eu%*2F9k}KTfYGQ0c?>HH(e#gF~&u86PhmXsxraE|~#}=Z4{sv!_pL*$C&8
z6(9!Bd4*SzM*i_-WkoM;r~|<Un#De7{}}O$!r>g`h@NY~j~=d3o@HgF7a8$e7hD5@
z;bRw=o5>~e6jR3s3o=mabQIYgpG})x6z{jZ|6EG={NDp?OgXTXP2mo})b3liM^Sd2
z)?{hAuQrlTP0%DQJ^X54vnJe7cAU;+VYPFSkH}i<4PC39)dK<KAPU!j(V#0ZMQ$p^
zH!s^euZ!v4?ekSlmfW#s3~QfYa{1y=$N+P8dc%ABec-1nEbc<l8#-E=*Io>1w%A+m
zY*!2BYKj;Ce8Jm!DU4XTKj$#?g9wS=sZ&B|%<+aqZ{4j+C<}k`prdRf-9r$eL7ox6
zH{}v2l{~-wJeXU}>xNF454cMzxYf(^Q6ua-g`9VGt0Ctufw<ldVkUtE6Ce%b4?0~)
zI7zw&UQDTHQf1{qwssLm3()}0EmsstJW)$sC|wnkT_5}bd}*nt_pQRj3pLq7=%HM}
z-eVp<Oj9hcA&;DlsQ`swf!xH`pHS<i6!u4rRs$p-WKW<UEs!h-6vL&ELR#+}qpa6s
zfng6xuqk65eQdN?c-^?R;IJxYipv?#C=|bPq!>xg>F4q8`cs{6W>p;9Ik2*39e1m3
zg6MEc7$Bd^a<btcb@?!>B;s-bUDM`Lvit4COLPhAo4giRIQp>TR~zqz@5}aiLur8;
z*iKNEZqWD5bKAK?PyXAePX+I*$BQE!dkG&_ogTmMo9)(YPc`RaY%^gD;6BWH^b{Dq
zbLpe7I+jb*GDYNfH>F1F&ddju&!-p66pz?7oAaQ1;Co&EWFe>vHXcL!yk^zkzd*}M
z@eZ)N{>jE}FC_77^|w6i&_uO4G{_R>RHa!9Lh(xpk;*P9<`|ARG+t|BQA&G5TZ)ce
zo)!8qLBe~Ys37w_Iz2)UAMdwji-Yo}%IdoD{{b1Zs;7oI&x*kH8*%HxEW%hl5qu-1
z#^D7lqhsP0>E{r?>;3y_n()cA(R6ph7d<qx{4rb>CpDr#)j918OW=#lE?zcFEJuNa
z7J^Heh$>F2FE~T7#dw~aQ_ICw+MRn^q=Ku<Z=U^@oeLJqV~P(UO4v!MOr$i(eSflD
zd$Cjum99;)T=LvVfI>Ck_%khgtu+*WgO~R&c6q!<w=7#eYtY_;WCVeIQ|C=<Xwj{K
z_2^s1yAZiW)sV=e>UpL;2BUtGLVPg|(ixAeD>SXEYM-itukH~!iL=3_N#nX&Y-9%2
z9axbl5zeT{pN*xVt7fmRtU6=g+wG6!)@A*oZdAR(B?C=@I}wb-JKRBN_n`SdF}?-$
z`ngTzg5DT>T%`}4=bb^7M78gWe_R{GByt{63)Bb|Tlds*vO8IDhl^gO&B)azYGd{y
z*!RY*QQ1j>h-6XunaF%khgZmhhtjR{b<1BDUVuc;eTBvCXSD0Jjaj73gXI$NO=e&(
zpFupXhS2zG#*IXB>6SgxGkQZ8E;m>G+JlUT?BuGbeD~@Rt~B3CXT+x?@3Tsb3VgfH
zbKZ?XV)XBY=x-i1xJ!ADnGSqh?FyN{9VD!{y!CQt@iuRMf(@6V&8_m<5}jSmC0`$C
zde{4wmu?)TI2ur>5FBX0v9nPypmJ2~lb>E&Ewen1F1ACJ@-L@11|DVwtYrSCR;^Q(
z?RUAFZ9Z<2+gr}L+B8?L5X{vXUbP)Qm2o!_x<_uDHWv9g7HXH(279pNC9razw|PuX
z^PD$@xz27L_%u;DgFQL1Ak5au6SU{1&|JRpuS9zbE|<D-;n+4cthUkCrC4W-4mboc
z7e%P%|2^TiQ|f9&^O~7-dpec1gT_@T-@LDta`@!FSYZS~iDuIn_Rj-D1f+8SQQP^?
zdre(W$_s;tai!*dM9$PY@bc+qaruPwBQnflwv&5fjo_BV^6G{Kf^)z><H*n2pOiUs
zjf-qc_VEJHN82nfs~t(J7t&9}f^+8!YyB?s9J_cxcJ#PJeo$V73{TRV_wYFN!|OIg
zf1f%z2As9c<tUZUaRB)(py7?1hNRqbWhy%D>aN+BE+-;#hH9x*s|IJWbn;I%M0jV}
zPgAMs-zqiPp>TMmz`A)yA6C<wGDnUohuzGncOjekaX>7w9O3$ecK)#1KURr;zNz>s
zQ{S55!pb^Zo!y4=&t1o_%dw(Y3SL+nDZ5aWXG=@<gv+Bprlg^a4ao7yH1JFIv}Q&i
zN&{rY=s*De3RaVKpf^$IPb1N-pBCCnwKI0z(=5l%E|m8Gl5_QcZKcZdlh-cQ?;f3}
zs~_%sU-HZZ-$gu7AmPSY?tC+b=g;_`Ni$~cUBwxsc@~8d&6|ej+<;YaZJ$2=Hm4g?
z3g#25#9$Gh3ycYB!Xe54LT{zTyGx6<@^O@E=;-|?x6omdKB&QhrTx2Ku(=oRa4QFn
zTu5i`SeB{Do@Uj-7g&_;%PRNqHKQ0c&>B^xZl^hQj$Iy9_w4WY{D~j$7LndTSxeG#
zMDBoTNfBzfN6wO?zfMF-*2{{LsZ}n5-6u7cdCnVfWOeTmbZs8?V3OrAGL}o}R<m5!
zRwBVATy0A}oE3_gzfH;3P$M*HYF8wlUV*Di?CM<6Y&sS=en$<VY+BZcS=&50GSQ+1
zzhb5jhLnX5>;lb9N`@+R#p7OW#7juV7o<pa$bmYDdB2=lanAO<wo=y3j%jYtZF~)K
zn#b8vJJ;}k=2b=?-ubBOK(I82tYqx&MoOuO2jYTF?$Fba#H~oFP$3{e*mvyW^V3Q1
zPZgjcgqAT!WakZLU)qm<d|%{SVmSv;ZOK9JyhN|>i-TF&Q6t)6!V|;Jei}X<FTSQ*
z$pN@tfuDj#->ZJFXykt_y0zlzuQN%Hnu~{##Id)d4G~n`Ze}3UJU1LE<@!EKytf{)
z-07z#62;@Y+?R1P!8FM=w(}Tz-H&cBj!kdQV8PqCNOU1O+*>kTBn4P)S27Z8>w7<F
zRlKe~v9Nva95vIA{GjnGU3AyV%lKPkd+F$+rc01>Wh0nyf4&6ap=fx4G^`to%0oWx
zh&rU9M6e8#|HVs_J?Zw`anCP;c&_T52TK(1%mcd*N45EM>DsP2xW{hJk-%S?V~E%t
zY{!7Nr+51GU7_EDIWDtQXL<iKV^BQDBg*TK3<IGkMI9!zkwBj5PRqn{HH}Be$qS&^
z;|HtL=pRk`J}FaKgg!S_+3l{6m)%_geGXosYu91huRD3f3e|9Vzo?Nh%%EG-glZ`v
zw|fVYj??zDm|b=YG##~o?*{3nm|nj@96on3|L~6W%Y6Gq9+<>ZpAr0|4=PFecqZdr
zBr_k2E#cB!gSpPd)6Zat!Qa9~#%UpI(A-Z0zYhfF2JketI}9Bdtft2pHhPj>Pk}(s
z1#b*NWDoz9_0NWGr*v5cDV(HZfX#DYHl4H$RT<n_iEm#uI?yOEFMR&2I)^2vF|8Ly
zIzNh>0>SAoCLL&M#s;f8qfdFEOW;;L<@!BhZpBv&?yk#CT<W%Is$5?2I!5ZsJCH0@
z^Qk$<NEko=8J8FcZ~dlAuM1rF;JtYZq<E^x+dO|#)&4!BzAqIyXL<0io~~F?U2ilg
zdu3_7*I8_B#Me5K=Dp`v^OE8H`u;yh-(%Z?s($OMk<rJ`g%;71?Q#63r+<LA6zkkh
z-be?P!F1bBF`$n8xW0||Ru>O&X84yv-cl9!3f=Z&+|2=j(Qwbvu?FhYs1B-D^LV(d
znfbF}gDlhR#RoBD?C4Y=tXi?0?x!Ozex;L|XOvAto%bc00QELBnS6dS^Id6PD2vh&
z@L;Vu<FpoxuY7h&5o+d_Jx{O@sntG$KKgu1<(n8v@Qlu-bDWoG0}tZOqq5g-F({KQ
z_jaB{R7yWDtl5f@Iqo4D&zo7lr98mZhYlE>J}1I_IDdrE?iA`O)l7^iUj#Lxd)9@W
zFDYc{&dk7BFhH<eR=(6#ZGT!QdfEHd_~9jS?2y)TNrZ9&bYchWm_tQeyapg4Nmx<X
zAeT9y{Uvro+apfP8;{`lwebzZjWDEx9IohcQ5nao<_`kbU_WzO9zksj0`(0~)F15?
zsC=On!(^eA5kK#m5zB#nA?-hdMu^!nZ#$^YeM|O>cq?#`6;D58rgju@AMhcXoS~ol
zLJA-Hq|#Op#E-0|VwSLKE7=y12%s-QqRCf~*uB(hTL`FcULm5wV2hF?-;DHL0{|;1
z>|X20l&wC(h|rRd^J9ZV_TG{~F)dwJ#?pwZk#zi8+5=5zB1(kRbSL2o^cUg0Ynp|U
z{W)oU`*EQh5f;O&e`uPtw=mZCRFo!WqqSEs)Z7TC{%9{?%umMQS8QPD;g!&&=tR4%
zV8}J_96V<PS!aU_+Ml+ZA)bYsX?jvon%gN&TuZ>M^L_I)9#8NzW{^J%XLW26aith)
z8WT~n0_itJC@W3eDh&34mc>!~@)BjO1k7NhCbNu43bGD2Uy3BOKONlp6Am^w7%6Q4
zK&^YYm-RtbJXy_#%_CPdiSRL&QCza=k7e0=lyHbQ+y@YYh7oXp|K?2TW7@-#EIXhI
zzPGT?h^f+cC8LKC#j+G$*|lIIyL#Z02Jh<8<vIBubtSz)Oco+=JQptD{9-mBUDLp)
zi+A!bNjif7r$f8~kWvQk>Cx3X`G<if+S3t&B>&Te>k`3n1-3px2>J{y4~sW1AB%O1
zL);7|ElcXy0{l7|Wx&LnwV>ch{}YMm=*f$?v-*L>*i=KIi|j^PL==PVE}YRASw4al
zYog38lpz2q9X~!0%(4G~h1le}7N$c1dmvEWcl_|-c1~Q<Xpl+-!Rbyq6qvkSyP<xw
z^peENxxslkIl^_#+s>nUq1{Z4MjSv?D9M0Hb8~`0DZh~4*!I80IdzNMBAY+&Lxn6A
z*C%TG*H|R{{d-(<!b|Ug9GTPq_t<BaUDL_2=6j^s7Vl68ylIYS9BT<mcv`~x++dy0
z2F5Uh>{08UNVM$0LZ?~gvSfMc1qc~+iqm%DjP5?e&hbxsTy_1fnZW~^8d|fo%OgnM
z{NlkW#As?}S(chJqrN^hS~KxSBZOh{SOc5sk1k9R+^Xc|a^Dk+{N$Xt2!9Rw`LQ@U
zK^ic_7R@&H&Q@HqGOfh1H82>>(hekLQ$7<IaCXGyAKNK5Q>$kz^GR}Vu=Uj&oo63<
ztwvf~Xi757t#nvtSpq8-+DDLjp$7@43T)J^5mI8=iNgX&<D3acpAIWFn!%qo@6P%@
z6m?J28)Xf;3;Hm3&5&&*mWSMd_`E-Rmc+yn2jhhYS%cJsk=GTJPRf1u2=YHcoEi07
zmg^)>or_Pih7Xp3n%a%8E{2WZ;`W#)i_koOe11_JH|AP5JI&)Q`5{7IB(hIn+e$%0
zHBaD~R#)cK6l;tE)D^suj*{w~Ln|_bj;(t4zVlZ^lu&8&_ox#}dQ^fTmm#fru2*a7
zH9oP-eYU<<V%Dwl^&~aF9y&Ycz5gWsOblBY6<2g2e4V|NQN*r0%rFR2Z0N4a=4>>%
zPXz{K5=noJ!*EwK-_qRsac4_89j}<w3f|0jkE`#Yf(@aq7D5?X@|sSsy|*2>=q*U!
z?J`e8IY7D)PPQ_FuOI!x{B@Ti{FHjpPFX#+2#M~);FJeDn5Ae3390ovxVjmS7uQkV
z(O=u2Akli8!-^*6>eL#;SCGgc)||fV2b2e_0QEaKd6Xlk>~Dsugu>G0Pxi7!)=?^q
z19;A&^*1{0Q~3EdUGw9QD|cU>L)W^-+OWGp6jtnEQ;HgJ!dW~IQmbWMyWf}ue<@f}
z@JUnmIpo~}1rCbqeJ><Z;R{gR2x$QDy&`l63i?gVv8FVYHHuUi;$ZmmNIhWCV}FJ-
z374urGH0oiA(j22N163uzd6S}TZ7V6p5vTNzOQDUuhy$RG_l`ntQ=@%^WD>PU#4tL
zgh7ZI<DpxKCB#0lWYY$F5PT16wP2vEzI5vs@;6)9nh#SHQVIu~Z+#-I4{;asEX()b
zH;5-tpUL=VLlhlG2Q^FV#S~SQYqV)je{++hZVcOJ{$S<-8;0Yx{$^N{5Y!|-{+4BX
z$=y-W582wlI`+UrriKcS{hR7}0%tz#IrB31_xgDp#>l0OsX<k>TK-TtNhk;7k}UEA
zFHZYDmu=TNMNW(gb9&j_OXV-NNiM&@K^El$f&WD>PpAzQAe|jl2nP>%z(wVI#0nqM
z&e84ma{_1SJMxYVNv*O90I0o&WTq2e#exjycl$z~W6kScj{Abs(V|t=3i-pP$Mi^%
zjdR8Ajy`Sq#l|td-S@&K!zJ{|0>}`i@=e)dxF3EJxgi%8b<LjqNKLN~={Yg{QmtKl
z$=hX*CP%0-e{vQcPsi7S;NCBH=lunhqg|bb`G~F#6J`og_mhH{p%~mGiv%u;yt5hK
zaola}@Aa@A+(cv0e$d3<%ROBhwzqr?36OXdCLbIpp#J&3zks5FuQ?-&g2BBn=JN8=
zB6mok5D}v$%t!{}O^9-gWeG(nzp_vN;UNnarFMr4`8@y;y=y$*_B8*!Md9!h9%|U4
z?+q&gtsrjDhy~`DqptQda*B42-OBpZr$q!e&xx&UE15uWCh`1C9S9pRR7!$@Ds^U1
z{6Ytr<H&u~`XUQiyT1?%j<1PMU|1VF7))Zy_2f{iC=sRhF%VRfpy)ATV7-@n1fFes
zE8|eBDiLk&)QyYBKo?yzXL<gsRH_`nh{<YF7nm2495i=axHjNj-%N<Pc3@l@MlgLs
z5fPPKkP!3lux6a(-rDAE)LZfWoOPs7FjhX+{DCMWDp`uwl=v&FTIrRFqW!X=^q>{e
z&*ZI*#E_Ed;7bT#aEC#Z9tBGHAP+RxeJJM{QMn&9arqzJ?bg(KFCW$Z$?Tj30LzA=
zM{Qj3H52ehRk!1hO@U|aBz4MTQKMW=AisW~q|g;ZR-v@#Tl88P-wpi(lY~hGa47hf
zq6xOB_x`W}A&}m)s!?d}2H30AMg<uBhD<R8g5r}3cJNjMgX$I0#x6a#4{!8Z*Ul*?
z;tvwZ_ODQO-dbd-#Hm0hkN7t%g)CVj-#b;pT)~?vDi<|DC0P_@u>5S6u)h6Oivm?P
z7ufIvq_|%^G4v>`!{_Z;KND4Kw)&j`Y>!DD3VxrAr3@_VG(@Pg(J@Xh<{c;~&abjN
zWZKP+#2}k3tNI!~T&3Oxdg_WA6*33;!*~2G1LnRW(Yn`kB<=8SH%cPr_`(0j&=1|y
z1G85}#`QgENS4$GM|f6h{%i|v3-rJZ&h~z_+T_siMuRZ&>@6^H)>R#2Sn0dKD$N>{
zoP<KwF{;I?TfJAx4#XXqyV1CqiHG-QSns?ZTZw4m#AzJPih>mRj?Sw{VPGM}>2P(h
zZ<i%X#zDd;PB1}Sa3Q{?LzKWKQC2G0s*C$5bM+J>%NP|31b%lXvCj)pA85yBx4P@S
zeT=4=Y|2=0_Vm(yE-kfXiSZ!T+>b)lzNmy(Hv@!;I*->_#|qVy;k%PBLvP3kWre~M
zm8u7quI>&uSxvYXQxR?}<%OeugEYfqG7lI3m2HjkY}lv%$PowQqt-hijiLl``bD#>
ze+d0cvGu3TkpuFNU8G%P<r@{kIiP==u2xD_%kias8oY8Ieq8#C7I8vsNK2i0fw(K<
z1Gy4=@s27ifcYfOj+q!O6k<myEGFQhi#_c*PmuGWHl)K$EKKGg@A5uVlc33G@BaM4
zTm2O4!ogR1(Ddyl=;8?!jlplLICECJd1f%9$7}s&D8`KlhARuBH?A^iAk-mb9eE!~
z5;@F>qm)SQASO($0y5N={QA>*>hv9>-NH}yaflUHo7rhZx>?V$RWa1NmRK;S?vs}R
z$0BhTye<yX6r8F@orV59aMU{R5gN%W6y3zIk(vg4wRK^<K>o2?FJR@d7qhuL$_m;Z
z0xiMM3mf`-w&R05bL3Wbu5Gs`L7HAG=wHWp?<92gWh;URhZz-k_IFUEjN@}>>QDW6
zaMVu_Hf>C<c!g3%`xJ9ONl{pi{g=;6F4HHh;=A|>rHsyN->HvzSEH-De|i7lFNAN>
zF-8rJeB~aSwCr#{J8IFQ^1X(Vh12<y<aO{4&FEQj0x;^1Y5I5ur*&@6$Io`p_K{we
zi~&cAX8>wRN@~;JN=WCMIXj9KVX>jrym}I=Weko`?tbZU`k<f^OYF8I*6q9x0yI~&
zKqf=Uw}GIG{!$}v=Z<C00VP*Z!<Vu$b;^hxJry$4;My+QEfsCsD?^RVUfsJI*%1$y
zkXxt$ZLqRrm|9KZAYCKDrm#oJ+pBV_FPpdQWAClauACNXE$q>kO6{dyQ03Pw9s1{b
zac2AHZF00Y{j36WLS(w^$ev%=<Kb=0BI;%N<MivR{?o^WO`87ry<@zL|8|6#zAwu#
z4pRI6SWolxYwk=4&6eos8<m>uh_N)w@N&2E<38V?xA$`(TXGQX%n9LKet(!_Hqp3t
z&BQ;*zH9&`USc9F6j2lvy8S}yIt~sfwD@~%>hJiVK9n&H8loVo97o^Ey<M}1SM$Ld
zH8ocG-AyGurswyRlD^*1<&1L0a?TNXa@+*cl#{^PQp+x1)$5M-Bc(iOR_<`+tUeI8
z)YGdoOfkJcIXoRmVh55apFbhpqiF1sv<(OggwuXEVvMJCxjXE<Za<c>a-fRN%9c<S
z*wg-t=5nC$9K?^ut#uA-K@(_<Jd|)-xu%t<DaHZ67&a;!)CWI=9$r)3rTfo4JDbae
zB?{%(oPKsX7>D4Vppi9#kuMZfx#P->cq8yLALUW1_<>T24B8}IW+mOVmKf>e6X5Ly
z4)ekaF9@2b+4f@FU~5wLUiNgM#S|fqD<{!6j5fa|itAv*__}6diJt#Gs8)g$QJiW1
zd_P@eW!S{#|3zeo;#7&v=vsLzY#^UiF#q#eDlcL5%3dkYA=bnNJ)ah&n2!nSFiuh?
z^{UG5fsSAVYd9Jef*GQmD<W~Gl{uTJ4J!c#T2aKwdyM;TrVdmEN5(C?V}dk*9{l~p
zNuI;b(ZM-<tA|OH48|l}0@s0_x_w<B{LVS#fKt>R<dXz0kiH1BtrMU_iLeP5!2-Jc
zy_Y?<f69{dTA9xX(Ym-+>c}e5fr=*J$UGka4NhV^%I{#Mgn#j&|H61)G~Mc^G1)on
zI<lD3z`;x6%5m(aqGBZqUA^KLlA%%4z(q*l%2D>oJTSLc0IRt8-)n^`#}(<t$$HyL
zDMe>xkK-(CaSH(me^|j`20|(_f1qQwIw9MGNq>KrS5uPlf6e9E@Sr8M;}n;TFhA!&
zjz{TV5B)fs_IZU2J~$6azzi117C-2pdFJ)~I<#AZn`Q!4oJOC@Mg))yp~v&Q^j1|_
z<9ld@j>^J|lMJAT^E_zCTM#ZC(ZiqeFb3};gNVckkII-;D<yb`L>&_PR-kJo$bDMa
zCfYx9=SYVqlO-HH68erA!l=lNl-mWfk!gJD7s)dL1t{!^n35b(RBwh7o-OU}mDpK_
znZvHl5=Hk{vyyNuBv_ye-b<e%vz5P{^J_m^EF88q<8RgG_)9|v=mM*ipv?LDO}*xg
zavCJ09@aXFsQ4<%s8S;Tn5_|Pu0eK4&F-EP3%WS7oN2a2xKBNAv26+(r(8!UIm(Dc
zk4MN`rj(U~C;5}@HvB?f!5FIl-bv$?QpCg4vTClg%s?k&@{DsrSUr5s6vdFni65lN
zv9~O@b-;JtwlmP>w5g#sirD3($~)kng9Tl({owF^^px%6NL?NBN1MFP9M7L#^*W7K
zFuhccc&cs$Q;Ib9RT1m8O3Q56cJT~>5H+*}n>as)lzg_-u@nbv!IYWN7EGHQb^05Z
zyt57P;u{!udcTE87!~|2havBAm1f=o8!KntHZcQek}!<3<0>g}YpY=Wk&Qq`KMYwI
z75<^C{PqeK82)?F6NvNyXPcds5sj|f+;|f;bM3lxguPVeRso|QJ^IC{Bz-D`0#xIe
z&Gjs8=lDVi38IMenO|UAO!wXu6L(+>Wyv5-kr`mgD1&otL?0YSY#k-+G7HeI%RuWk
zb2zGYmjQWOG?5+06Kb1Ini8hI#a63_6n>Gt(tU{Wj_?|tI6zjG%&j!{tABj)__4E0
zf8;vnVRi@+n#dM9O_(ho?w4q_4V}&(?E=RzAKb(axE;~A!nY+RDg?}8C*)a_eGPsF
zxNBh+t!%Kz>u#tBEzqf=cXTyo{N=c~D%nk-H=^e1!I&1V=K6#21av+P82@bV(rc5W
zg_a)?#jA!J1HoG1KIb%h(Svz(y}SOom2_*<BRhTSl_%x>F<#UZ>#ii~xfM*?|8=B?
zYQP|}07i52I|M4qfj*Q6Jb$zOyghRd;5|zRgpLWw&ah<2{yS3a7zQJ7ceu?`e(dGz
z{bpZ45USCdNS*2<R{UMT!H0e+zj2aZAh(X_UemN#4Vz8UYG3~`o$^IsoXs`Z+kiM8
zxUZia>4o9e{?Xtw`jo0t%ffsJEtWq~zrzEoP@smbC&_3Z7YoODuYGY|?Gqnp&8!aF
zdYUAugeHf1R{~_Oe!4+u)y*4CKCn0DGrLtCKzA1?(K|X!s_dTo2CwI?!JGsWewqX&
zhbDJ$YiN;vZY#6&Mqt?hnQ6@>`569mlG#d;X@ktSuQE@EP>d)(aQ|J`x92zaFKBPM
zPm7y@qaWKaj+T6f!1W*6!X#b*4{PtbVXchY7A4~4)<ou13(VEiq(M2fb(fh%oc;uv
z%ukuFh-(S1R&DaVA~kFzNyg-n_SFPkm#C9qd%D`mL3}h`B<&82T6GE(r)1AZzney$
z+iIfrGba_XZ2FKnKgpW^uveaMa|4IY-P6s3TY59wXEu(tKP42uVMj?YE{?pvC0Kr4
zUWe>hR5;X%49LG~B9o`UA9Q+)H@^3Jp+Tjz{*@R~cpX9_Px*0xVn_A3yX^aU?d&p<
z6H$5EJqj*asUFdnz^Mm{%;u$v>+gt`bEtIbVz}s>14wBv{D0CPzDqqgl)wl$Xi$%Z
zA*IM`j;#YkISh-v%3;yuB=5|7rj*u9-WM69p(PYwebC8MB%#SXG-#R)_MsOe4rwcN
z>r?J3X*_r*5Quj!QUnk4+ltqUQq;iZX@<GqUbZmEn`X_LjllN<6128UglZQxkLUdV
z_6htH9{aYRGZ{DuT#b!i>kM-N)x8FXJ$7JP8dx0^raDmIjM8mSiw$@{yte#3NI!B`
zIIqLdKI|*^3xC8L_)LyHq1z@GAMoh%7xcb}12J*#-yS+Y4|rv^w0c3Z*sFE@4hbu4
zhFvQg71$S;sSM?dwq{;|kR>hhDn>*bhqPpJbAI2=t?^H4#Yik~FcedK6~ZIOZnD!q
zZ9nY~w>g}~TBcRt<Vw1WX7}J-L3j)S=>NO_rV2b%l&^Bpd%Z}yP9`&U7iwt*Jmqt<
ziZ~11t-{1--7&FBFvg7zKQMdh2r#fIRF%z}6nhCHq9Hil<$0&S{}z;c@md4VR%E`2
zVr|cwXvhqpt4}8vJk+xc)7~f>c<1QYtR7|B+sNg@;R|<v?RuCJNKLs{r^p*5a~OL*
zMy;)p93!r3c6Vv3@qV#H$prK&NL0;D_|;4+C@Q{kk&t7z(>ZArv9z~$3E^C%cb)z!
z2V77cWE9Nqa<nC_r)S@G6=Vb_UE`1&-*z(S&zW^~jdn9Z0oMU1<pWIS1>CRA#@Wxj
zk@5vz=V)jQJP1wgjIKL+oBDzVl@tFk%*!i3skvN@zkn<IC^c$bFyUd3ce6I}Shqt3
zSuY=AOtoXlkPbFu+@xr=T_QIc&XXN$tFE%EUr+DxM0GQCRJ5{nR*Z-52@eio2m)?P
z*kAV<m2*x7nE+X4nj$Y-bkM=|7i4ER5{_hFLn=)%cck*pO26Bbk*KIvs^~;neKpSA
zR3f0P9#58l@L@=iJT{17(XE(|4YhUJ_L6o=XE;4vNV*m$H}>{EO`7^?b$4&sxf;JZ
zow<H^@OISCVlW+<N9}B^=KTtrnLs3qI#iVVAK6?Q8C#|Z8*grv4T(+ptgQVCi!BL1
z745QC;hkQxPXj@py*kYEldluTaelZQ8d<ck8L;^^cJ$Ku#U9<AGx}De>>5pMY7dG<
zaOp>^`za!@FklYOAw|A(?w<#p;`;t>&0|GlX_qKuPU3SrtjT=j{cdroHM{8d?&iwj
z4^d&y(xHpt#Af@K7KO(_(wnS~NlDzyuJKEIhVtV6qhY0@&FxH4a3UP_g-0WphBWnp
zL73@LIh~;RhPcyx<NCIW{v?CD$$_GT-^hOu?q*T?M5yXL`7l`*fGEe~$F#@+i{u8M
z8UTZ}q*MAV#cx2P$Q;JKaLH!6`Ebd1g?EJ|-_HgwLT_Tp+v&o`c*)o-30)C=!9cmR
z#MEWmU61HkBEd=mUAJZ{AQkgovpQMrCNLObt+=E2E2~4t7h$=&N4rwQ0eHbxZk|}K
zg}56Rq3r#X=6Gjm(ElcM>-o`)qP3i6Mc|)`z}()~q_b#-MTEKPcxM3Ye?y+z^;hG3
zFlfTyrUnszfSJ8?PK`L;Edl${t6!WGZK~H8TFD^#W-?<{jz4H&(at?3TrDfocLl=C
z%U>bfIDn+FkYcAQ>D>12F~V^?G;(kpjJKf!6+dn*FNp$l-&u9$*)`GDlIXMnP+nBJ
z=I-c03HFMB33Tm|d3-!yU6XNUzBEOg5z{Uo2x<j-j?=u!8*6wC4|Amk`coZjSZnDZ
z-FLm!sc~+>RkPofQ0NiM5Yp62*1^Q?iYb6!+H>&YTku*^&91w8wuW+fH-n5C!)U{a
z_cdHxz6uq|iKr}?^hDSKUSE<VP%RI<I{SG>vdN?S1!Zbouajt}QITa^|Bko?UEHj&
z`K6eNLQq15Q3mqJ`V&fowfaNL<KKQcHp+;#P$rywp*;zpO4}gHef00vb{dU6(}sr5
z8$AmByCoCuZYf{F_s#Tlp8HEfq}%PT@m}d_H}OPGV5*ENr}U$8Ha66odCeq7@4+ya
zbN)UKX&c(HHTEv7s-uzQ{{HYkd{&_&ES9IAy^2RO#ARblI7N#AvpZkr6W>x3tZ6*&
z$V^*m#;rST%$Y~)#&`~OnL$^R#gl>1ronj{Ux(-TAwt18jLk{8Mt7iou_GtmQHf=@
zbDBb5$11dI$8m&<)OP3St*fmI;fgKMa;UPnmECZEUJS5%^!A*aANis=rr&=i6C}LF
zg~RQ1Pu%DJ|EZz*`P{2JAT~i#!-sj$gO;ZMYj?A{$Y=)S(Z4NSv>)!)!9BYR+jWBs
z)b76r<^O4dUM_=vcWV)NeCX%RgA5_Li*&gEyj+<UTU1#?9=UZR0ZRgNp_bxSH$T!!
zrwKmAn@)GgGOenemD8O(*W;KLLafwmO$!D;mU??xebYXdjGPs(t_Qrn{{G-98}Qn3
zQ<@<8+3idibG2m}$X}&^;wF`xhC+B9{@VYa7b;u-d2zT*GEjnk@4qkjKNI#mW1fjf
zS3JnpJtrjRIH%aE^gVT302l|Adzq|Pe5=3((SlC@L#e`c+3LXN?brY0>39Uc0+)Mt
zn5S`*Z5TU|x3=I$Bqu4HpRD4L3}Czy^L1Yi5(~w}Jz@{tDZ9Qd4$*Ni1PfA!pdsaV
z&IkhEdlHUV39C9sp{pS-ZD^zhXG%4D|73a_%HFpeGo67Ebig-cX5(T7mgqtSUOoC#
zO`4d6anC?k2W)wIi_of+8~!>V&|VSH9P<2T9j7a^y+9P!TTqStHFZgf#TA>}yDdV{
zf$g#9OYQmF7*Hf#KcQ9~yK@4KOxdk<+`d<F!qF<Is_(;~Lt;mUoUp~-aU<klI+yFT
z$?Q&i9++QDoGpkVqGX9B{HS@0QDN-O7|0{zF@3SQrgtE63|M+w_sPBJzU;Qq(nroL
zvA3Qy@pc&-^k5Ju=N$5O9mrt1&>mP(^Pj6aq2Io4$~nVXb^NXp@*Q%VkPy9y@Y^K>
z%cP`~1Aq}Yhhm?AZ;^dTP+^DcpbLx~!Qu4ydSE`nTzeC_7hiHjF6sYDSmRp+Dk0bQ
zo@sk8#cOUk^owhfbk{Zo2ZS(5d}Tf&k7v>Bx&5v|Qoml4P_rmFmFRVbq^N|hRKEvn
zw^rc7(h0bi^TA)Oo!?;=Wj4uqK-w^6E+67Od%5&@*J$z<%9==CbtfoW7=NMBX9moo
ztVZGyD2Hj&0MUO5j~w(_(We~j>d9L5kQ&z><e2Y}0)l0KC@k(4jxFG4iqJIwM%8q!
z4Hm*moxQ4Y-<*r>3DGu~Sb#$x$y;0kl7-hGHjZADqDtV<4~T6mlWp7?S1D$SAeW;G
z8M54S4LbTrsezmES2@_rNlgr9A>m3?%p@GbM2gr%JU%0MfZ9kK@a!q9Ui~hSAT1@D
zPL>h=L!^}qGF(FEg7uffESN=IW<DuY9oBOA2Q2YS%sKonMRrrNUc5)-lZpcglaB7h
zZm1Ex^sm#v4_cP|je9sB1$<5SOX{7X7XnGRO#)l`f0bRfU+-~ei*ouCtBB*7)*}L?
zYU-8qTznVke(N{3n4BNz3$AC|t&jx^gISZfovR@Za6#>csl53^O%a{3xPVZ=i*by!
z8?#gk)vIBbM8`@sd_^Eb;kAvVu9N#C&7nz>2Mlt(ys#7li@kT^?i;SLE9-Fo6d6FZ
zdhP@_-PpTB*M82MeS)o`<!uSqz<%M%cnZ2Cu(e??i1?R2A@C&UufC*4>k9Y)fN=#(
zbpYNK8mI{(_f~Q@uqg?1YHID<$0KFIc7qJB2~h6}nQWdhAV+0xd1w;-s}0{dd(muA
zm$#c~Et2y>$b{#zZr*(l_jz=t@T7OV`u%2-tLA=g(rG1^W%X;%wsL+;UZKiP82rxI
zAI2Z{e2R>=ABoXHA_T|Vm{Tq?SRg5ZXNI>l`nDW;qUq`;W$}1}^u4m)ZRQS}z=28@
z2VGlusopU5qEw_DE)}YOd;P~=|B#CpPaAH_XT<5s6lzW{LM}H>oA!?Aik=l>r`=Aa
zD^O=s$XJ}Ye^Ia6-^8H&{mJZUF_YoLQo<(^ig>bfaA*gfWa}G;886K+a><RWZKd7t
z#~*m#=OcJ?f-EL%H_R7of<Oj9b|*&Lcecpo<xb0{fK$v^QciSa;xoVI=|uQNf;ud{
zAq;_@1(_8LBN>3f@L8}c@TJ_K6$Q>Sp>v8s;18kLlBH<pJVU$LzQHGnQ!62j+`_@X
zk>|!=6Tqw+H=?3IlVrpB1#Dt}%YrW5LQd!B+x-2Y*KtSv(ME%oRjEqhH7EAVZ7US|
zc8IpOx%h~;hx6kY{w81dvIZ-L@$u_}*Zm)m0c=Q#Z~&i<cA)B0i~M5}a-Ys9>@WBy
z=}=foxgvi3|ED%c`5E*g!xdbwNB-8DgTXgXz3#7*?)<{0tNE+0^sjMW7*%F6z2PDJ
zEE0D4<a_Pe&)>c$)rtjQnl!p`?RvF_0|{tx5K9|{?QvOk_pgU`0{9i(NKqP>2LYFc
zn3jeC9ojM7+=xt}*J%053cT^!Q@fEzv7^c3dFpD4jPLginq#~C_q3od<f-{@^-CZB
z$>~$}Cl%`*Ru~(lI1eX2^f48Ft%JIaU<ElIeZIV%^<RE|ZZ3lQaQsID&7G!b?I1^A
z?ikHaao)pW^_uspG~4InY%Ue;ufM!J@Hh8G>m<8Wvc$a|7Rwf`@qS4e%a+$wO7oY+
zijXZu@A`LHEL(-D3#NjmE#0yUrk$ygHd>_hV<unkIqiC+!|Fs&zDOcUzW?fILLA7w
zd$}_(Ys)NO3e|s)0qi6jEwtM#e*kYbi6pIZEx)!ZSj||nD%QAAH8}HGUVNg-o0J;Y
z#VRU459`+AXc8=fqlyp2y_=oeUZxaz@67aiJvy<F`h7w@JU<n$l<^kNm33~GTiEM7
z6#Ls=omwt#<t4cOB>>(ZBKPp~J*sN${f4p&OE2(yJ*s5&&G1arm#a9JaTien%YFy(
z%l-U;s}6|7TFzPCav2?H1Xc@=RI!#FXN+n9C^jU^B-{cX0dkGyMQtvXtwSYW8fyA_
zYRd(7Q?)t2*(W*K#;B_VeKZ02>f4-rP0KBj>S3E;=dDGLalhHbsH)sOMcKA#m!G4N
zqB!r!HQr<b9^Xew*#^|#d@-gDzerR%$%^LwIbJc!LT>Xc-ACIjoS`Ly8A6VMgQ*B^
zCxP{})~laU@h&|pM1i?%RK8J5gGoG+AgOO_L#B;)S)h?(iu;k#ll8zRiG%(1=%OR@
zbHpi~qi#e+jbQE3j5y0A{D!*NZBu5;2rUzc9`opp5$H!XCff5x4Gk{w=$#k{cFf%H
zu7CiMhYQ815(BZs%?nRjb)AI{#p51t=?eNhahKb2tR#fG*pJ7BB3<-+NXZA=nL^Lg
zfT$48N%{-2rqTnCnGaUr(KV_9W@kR<{7rkC+j&glQ6UN<?o27YqzeSxj`LQ_{Z>G0
z818^s12ISoR+?k$fC&cL-j^atf9(hev%-?Da1}7s&-0=;sr(+RG644^HywPE1S@<}
zmn>+&dwYNutR*u21`MXA%T^VWHryDK)*B-q?BHz*v~C;@`z{``q2M+8t<E1G)8Vbf
zdU*f40`XQSU9y=RC$Brk?6Yq`QB%&FWC?O+qSpv=UiTDekM4>F3>C_QxfmUExRH7e
zb(Uws$O@KcK<9=dV_nyV<EO*4V0^qsD^>jBVG2mGbK|d!VoqVLM=MnP;~}<$7)X*J
zBa&12Ro+v51sApd>?-HGo0I#QO!WSeOoGAte~g_&kZ4h}X3KTU#x2{nZQHhO+qP}n
zwr$(CtMC7!BRaYVuixaHh&?%@9Va6*zqK-^zsOO8@@W$f^)#e?W!K|l-$UT=Qd?VD
zt){~BS(0Pv5nNabNy{Ci4&mJ7l?T=}OBBex>4Wo&6<!D+^-UQ)iYP|gB;>Oj`n8Ln
z(Bw*?HOPw(dH*SF&gP4-4k?UHO)=Oo4N@h}%di9`i>;7j>KgxYUnU!B6&qc>9EdDE
z5Msz?=Y9_myhC|%+q^>E*(%eT#lDLTOo9c1Dh&<XHppDIeGr+pigRe@)*e1+)s2T{
z4pAZwN?SZ@Cx|~2^Lc%1#xX;x``GLxt7bh)qRK72UAU}wt<)0H_;x-3pVD!HEq5K(
zHfjDR$deDM4j}JPp}OZSqhx!@OzLr+B%@S&qfF`nO+9u2Ia$7I^~xsS8>E_b)@qnt
zwmW7i^Ym8(<Z<U@s24+MI@~9eZ3@vs?uxSvzXX-uE=Y^NA7P;=kFYyMu5cjcDNQ2|
z$$VaUC}z$i80)+>2m{sWUu-)7%cj$3eCl`L{K9SR=TAZTYIF2Iz=&lgr+b;>w~Xd7
zOM4>WVG4JL0Bp$-m{}iT8EgawKfT)E80}{7QfBJm<zkE4t?qT$Y%fjWKWaGne7G-_
zPmG|;LDGnNoMQx&RlAMbyZQ6yLXAVzqC+}Zy090A@$e3g;1_(+BGP%_2+?Y4xjfp@
z5<ZM3t+n_i3XRH9m!>XJWp|kcZN>(aGUkK@?cj1q!G>_za`iOIGQ&jx7DSOgb8~!w
zN~LCIWtp)v=A^~0Tx)$13$$Ue&7_t%bt%mlJ{N|HVkVhIatE~|N^_NsqWU%F1q;eD
zNx4cZi>lIO8I;3Tbjb43405x^_J)=)b>(Jz)eDR>XX=tj{>pAjdxD0Hb{wz)Q&ove
zewp$`%arocLI*Kvo0%Fjhm>%;W3?igqi}mvM_7^GNPUGCea2r-jq90Y9e+i%c;sm|
zm1N40Mxwa^^>oVd<0WCDV8$5b<B0pIHF=BHDdnSvjpT#BqZJP46>GPV${5u%m#JQ<
zv17Dly|)d&bSo$KOHLc{y^pTU$BjNEBonHH{}f79aGlC72AeHbIw`|H?wPzsr;it2
z>swzcJkdVeUVsK8G#&~Cq|6=)`R8&jZTFz;s7KUV8vagXA=c?+;Z+baDrc;1;nTEZ
z<G8l_36@r#$RF5UdNks@2j<~Ek)?BA0a>^As5B2wa)Zp?TbNwcbGCQLnYwX@+&crp
zIj|PpCB5!}r6?aTIR=lBX*|BLrv$Qu!;8=Rk}W-0G8VBzTsLZio+bXo)MM;8zN285
z<sqwnbK1{KeRDRJdg@RPaihES{TM*J4C;)LpA9`0=xe1gRF?cQ4{w|-a?EDlS+*)?
zXC4*$W}&QgRiNw>hqr5d%X!XzJ?i;rSLGr3-TQqFs7F$9y@tTbz?Ya-Xq^mRyV9GJ
zvQiYzL4|1c64WdYVe1<XiBQv#OTtn-w%t`RrCTuq|CVJKBmPB;OdXU@o)6FRC#ZXn
zFRu(BJAH^WEzD3+pD<NHHKY3%Js2uHa-ar;*(*+|SL&U(kWT|!OJCEDC3t{oUf=!G
z@N^h4p+2fB1Fr8gYBrrNYTb4|kroV7D0R$dKvgr+@>Vl8)aGn;P^@BCorF(~hcl<v
z{@J*I+U)N-YO$eO{hz5zdcxOmcE_fUdv#@p-4&~7hxL7Z)l4@J9u5sfJT>5s**{s|
zU?*z*@mo-j2s8hIH3{Y4VJ@3|^aTPNEFInHRWBFM_nqEUu2$I{r(dn#$y8=AVeFf<
zRJ}{kjKn`Q+q#|6CY)Wp-L`dQy4c@pbRv~m;&$_oC=#To$5wL%*}9bndJlL~Ne$g-
zkTb=TFCs<uhNG^nhUm^}WKo}Si@bGPPWzsseZ+8icW4902TygoCjIkSoDCGb&;MXb
z3Hk<~M{*{i|GxZ;(9X{K=m#dCv4qtd3z1jf9j+Sa)<M=Ps0TCF)sMX(9paUaBwj$d
z_h!WE-a;RGXdZn|E?*uG*9vA_DhJAVyZOG}&jckhcpfEIOJZ!coxs5|)tz!gN1)t)
zPcz$176JK^wX9=}mH5ugjt>505z2by+~Wb^yy5Axhr9a*i6c^pQDUf;`@H`#pLh+V
z2T?}qSbX3iitX_oy5AyS`4Wb7e(V(ZZUg7H$v?{Z{qS}+h}0Ur?e#60G{?WWd>s#`
zt^yS!bQFo4Ud=>fz;gTje)%|Q)zqNl%LtfMQehg*C^&60v#6oMK!&y}(Nm%l%rHQk
zJ6yj1N_OXRSL+GY`8*rB3>P2H@qAN}-~wgl%TtEI!w1k@21@FmD|rK8V%O<1cc7Hx
z>QkA9MV<Y36o)!XIgSh$0mi1tM3I6oU5`Nh;>Drhc-u?M%R6TPID>4dpk5Dc9uaL`
z?*c5SQnhUsp91AqqLn!TX(Fdcrw(dq0CxFjge76F29(g6;#LcO1v&enVETHmf1+S|
zIt0>mt>KOV1zGmr$Ntjhu!J?ZZ4A*hP-QVQ1ThQGy3c1mrlWZ`YCRPEZJ^pH3MhbB
zLGIoY-ZY_y5u0x*mj>4108TAdE$0L92Ul!Js|Rhz9BTy{8%IRng3ROGC2T{0w*!2N
zp#q)r#3GzrSl5oJD>;ip>-OEYQJ=^4?d?4^W;9c8kp>M$sw3z6i2eO9Q||xq&&s95
z7jONOaSr|S&;Ac&oDPP}|GgY>S!wq_>RF#zUHgF4h2)T=<^bo6Aqi%9<;aa2KxxG!
zj?@vt=E60baQNTP8S^t+w=_5PB(jHX*In0B&dq8Lx!@S7$N!jTcaDu8oBo9q^{@z`
z6_5+%;cgh;!P7%13k}oDIkbo&psoD^@F}KF&{x989G?GUo&_NknBudYBa%c@s=6-&
z!O30%#3}Muj|+^$h!U7AG_1ipfB@p5mtwX9l$u!x0uR8aYKwt-NGKuF_Xl8~2lNLH
zC~Yq;2o^>)>fV%T<-O?HNMib1AFOpAB^z~;aKQMdDLS%QW*Kc&n+nxgoS7_n>7RKv
zmET5PhI^$kXs_lF>oF`MX0OE4c^ms<P-d~$KE_{4Yp*4FN~>-t=#Q?XP3spUd4b1Q
zwI9_x*lW^b+371dOGlk1;~S48QsLF<UgC&UpZw{c90-4cqxeSD){1Q((>FU_uur$m
zn#-FF=N2TFojco4!;8`bMgHhxfm_0!SFmi(H8+|UJlAdT-qq`0^xY)*+G7>-nX=g@
zFjVX`p;a@)oT}n^E7Z;lR7d5#0O-gT@%SS;IK)86Byq)b^9(+}d!WEkpnjrjs#v_z
zd^He(K`8|)nC9aQ@#0ncCg^a}e)BR?;g-@<nAO78W{sw;$bw-_X6?7Z{@I`BGro2m
z!|O*3&YqQ!+G92j+4+`4k-0hiNwr1ap{-KnTx?0{%q7-F2yBwS{3PdE<e3r9@{|&i
zoocpCl+aFhmHfjhEzG?Bt`D8pT~<!T*KCgCgQ}4N)<|VlfO5so)pC+@OJ<Is#;q8C
zP{IEyRqIXr1J80yCcdN~{=?%37`s<cg0r)SU#At#hbpsN?8>AgyEscuqc{@`H&y*p
zGm<h5`NA3_z0@zGE-b~B$GA2v;~?brPCL3Ksxg^+|EvY=imTV73nuP)_IncJYr3>i
zOkGv$O#W6vPyF0{|1@+gt)_lH{J%Hn-*8FI7zF?T+VX#Pa~$>mKQ~AF+;LMR<+rA{
zVDg<VNhKa);vrtj8byeoVYCZcA*QQYnJmsKA<Yi}#xJFb@v-;TbDQlGKunxbMh$`(
z@Z0nIrf0KOHf9XsJY;ipOtTuv!0XNK-m%oWi+GWlxR4r#B$4N@=>G0G7yb#2dZ@gY
zh}14A3y^`qVw%YA`2qAF{OTUoQhq5kBQz>Ap#;RgxxEC`UT+lCZx?S-akcv~R$HQo
zK@jW1$mc|sv?P+Vr9nJX=PdX-d?))Rm!39srAIrGD^YF|B*YA^z=$)5Xpo(9UY}t_
zdvH|aVb7l0mTdJ6ruJ=-ej5XkiDQ}9h_oPHLR%pAmqhC$y<I-uzP`Sw0nqkWxxw=n
z%;4QJ!|a-*n79$WJRBe6ngMf?5AzJQRGamrC6D)Kq(HG<ek!>GhO}v)ouI_N(&oJ~
zzB7Y*?kzvIDnW~w(f+66yMJTgs{=ah_3%XQElz?n{v~JaGtYEF?v9CKH=msQgV=A_
zx99b&WX5&HKl{xvt-qe~lL{XE4$bTCQleld1hGteo?YpGe1&ikF+h)$Us2vgbso;1
zAs+ek`~qU7r4GQLzRsbm&PV4_><Ke2oc&v<+KxlunMdPJvKi5}w_j{YXN+w*_(K#I
zmrw|U&~0aTd&%8C#X&o7qDg1+SgQ=8T~4Dzvd8<bUSIXaXvAhVZ#ht^DT1+gbu?TJ
zWiU`Aa9i~G0zrW64~hMBLiR?XfOy9!ccWFFP}YMYvDJcu{C~qLmM+VLu$6>%Dv*PW
zXZMXi_q%kxJ-$QePR(1RdjR%OU1~m0U_88D3zxrz7GysG5%4AnpnnqL-ZN%=NjJBz
zo>?AxIw6c=fO$#dToc?+n2o{eKWZSF3yb1dB=AOrMRj*>yy;6*<bI+HxaP2Ro<mrH
z6sx{Gh2PIbF%!ZV>1(O$yXL`=3|BH5hR!=F8}e=78<|oqLce5iA%aYf3<@Ig!v%11
z<r_lw9{LeXVu>QO!M*wbb@>g@oyRw%<0c5nvW?F`gU@vQBE_2M`5Dn7{j1Qb_K2C_
z_#dDa1Xv5<Xo~D0$Nxr-ilg7Z9gFup`zM>(!}WWM_yj`Z-Xt{P1GvYHP>r<_QbIOQ
zY2*Iw)m`Kp{bK^@8lshjZ6Ax;Y_Tn!eNTE>IRKgcB44rMxAQ1c>ix2Rb-kNza<}T*
zsGE*q!Z|DJ^8!Q_`92}Y&MHT_$b5E<qscNCdCMQ?XJJxh4WzS`og0_Z3OVp6S8~SQ
zYk~+|IY<uSj7|;klYYGp6%z(gZpokk0nR||*pzJN^ChP}`*M#W$RdA$`OY1z8|Y&j
z%9Wl7(xec52^bI}rd}%mFo4Y-f0bwlEJ<*cCMB8ysVwa(CM5B^iM0-dWb<00Vv&B+
z#uvbyt?{e?Av=(jN^B1Z_{_5k4!{QlnoR1$M!T7?VT1z?gHr`$D1gebLq5lt8@4aQ
zkR#SCp*K988<%l2H(9{thT)*^Pb4~PNFCnp_L!q7Jahdm{c1Zn8W0Z)G6Bc|qtO%D
z!*C)yh_JkR_5{5@nuRKcVEl45tsyF{jH}1#5R*Nfxz#r4!%7AzTq(#88_91b=^><E
zjt~!RGH*zP?D*`6d3)ZpW=6exaEzx$LCGgyajB8p<}L1}n>M+-H$~$#mhy0WeTj1X
zhWT-HMYJKQ%lA+z;3=pNd)lFijV8MulM6|A=05KvT#uT|?Z@T)z5!!ADUw;!$6^oj
zRw%$&Yb~+xvemCr$GG+Z-FK5BdnOjR#sCUTR(k4?metp_-gOdjFfQxoJsBt9Xag+a
zX;J@30P@^qU{;Do`u9&E@jka6&S+MC0-1$6OJ(uC6>3&H%n`Qm_pH-;L)>DmA=GyA
zm!i*Bb8k$kY@)B7qcvOLzj@lF=Na|b_`S(ImG{}gb);A=(uw#&l$51c7!zeOb!(;s
z;lpX2af*-9%hpX{Km>noVE`JV8A-xKSu=ruYztJnm#c`Pi1(YUnUYVGS-YC|<HChw
z4dniphNZa>rwrxCe1URRO2q2QSjjbENm69V#?@|}z)^3Qy_RI2nU6CF$1_#Z1`BrZ
zqXsI4bVNp9rUsBX^eXwj0BztLEA?Lq@$>2w6yeyCn7K|70p<3lpq<rCQfY8!WS*sp
z);p>0*yhY<&AWV({8vSGAtoY<oC&G>a!z`XNsMIzx~!iC_SzJLlU6+`GWOB-3W5<m
z9i_DAj!!$91_2tozMM#f4EH2sfKrM++smV%lm}m`xJ7tKebu3Do9y7sw(7T~XqC}+
zwsp^sxNe(9AZ5r($Y7vsc{OEnKW00QGZ0<Sr<~%ZLtV;QES@-9^})=YIRa9z0B}fm
z{sFNESS}g1y7FSAvE$;_`d8nk6YA_+0$TSac=F^x5ulC@>Ys-stpT!A7e1MQ167T$
zjxr^{xnfS)0kV|6&4X220uvl!I@H)LY1qke+ZK`XhUwM?-JRBHRI>UOd}X%NE~>5a
z0?>n7Mh3F9yC4Z!R0ZMmtmFxyH5HEsX#yq0o^X5SUoFuELAm7}A|d4&?+X#w86lJq
zp~!kt;!9#CnFRx7?j)#FCHj&lCdS%Xl)>#@0d#DXgdt`6%GYcWdYM}Og0_Z{mSyHr
z)S>Q07aq1-O?RjMJ_OTF@<+I;<XBEu{;O)c^D($U6u?Hp+Rs|-CK<aO_mdf4UJ|in
zh@o&k+hURLgHXZ~M)1Wc`b2xN+sOfA3|c6l^Wx-Sx>e%T3ak=AGrEv%Ng|yXhZJ8l
zriY%ze_0hRN&lAXBm>o3W%u})vuM|bz#Tw&Z2bD7pl_1I&lc8pTLKjoMPbQLGc6)D
zTlZ}FHHwt9eu=B2+xTb&gz(?0f>pNG@3=TtqJnW6$gx?lnw2>+$ifCiYgfkIOu@eT
z<UQ0_iHy@>E{PLMG`mT%Ei+=|36g#Catf+!N9yq8n$<3`XW5Ee$=*C(rH|CIpSX|5
zs;($9>*I42t&?S&&j@P&y+OMWPM#mcKyYevA^XW;t}VdggwLxM*e+_bBif@Bz+IJ%
zK&NZM%a0@D#^-M&FF>+);gwNDvZ8MaZ})nV_QIr8a;MT`C={@c2y#tbp=$nKz0;4V
z2M4sNcSuSz$!Ylw)e}xbhJQb;!0cNn1A)TT>&%wpw8Z><K1g(J^_l1EI?n6p5Twv~
z^Lly?ujuqb--6iD(EheihAjk}p+0Ufd&KJ#i1CvhckmIwlHdNU$D4w0Kv6=%%&e+y
zH|vi|c#qu6>Dq<MXv|+9LEwB4!z$J+4OY~o{_=00C-8*k3v0yo9N9w4*pEov*dO5r
z`_r|i>3$(41san|4H;^zObYXa8;q+e6sd0qPW{Z#H^~_X4n2#LcBMPDZca0X?u+ON
zauUCs)fVUNOF?kUcItP>9T=!o$vZE*a<A-KAY1Jhks~7&xM^3MJ%P&G(APGxb@E_9
z6Ves~SZ++)cQLIRq^xNn_C+gTAw%1K6&`vn9|pCJ0xI*krepvI(PONjB=s91Obdt8
zlBNB@0?biU9^xZKKu}-4OLD$@a><1VkO5;)e3LK?7~d%uN&ldLQm{xe=z%ZmrECqw
zI|5A6wOPgpLIf(N#U*~9oC6GuQH@TP`Gt&b8Le!t=|hm_K8#YfxU31w2Z&Io#0Vs?
zWBLJj)4=@Nbgm>$MB)A82IT^<;YV*$QgbLM?U1Ur6uWpox6)yMTyxLx3#X`*g3iID
z?pRRfo#rX9;$s>O4c=SdUOaGVt}9`nNCU}WOC*NbfEf;6Ez{ZKz1<?l8GIRr$S-|H
zp9#`GPumY^3&Bc^gL|2Xu&1oxbGe#T2SqDdYh%2U%Cky|h&|Gx2+}D&ERWGwsnTys
z7S0PwF#RiTxz}yXgd7QQpE)vN&kBt3u!TwP$0qn6<d8k;SNb<-3iD7D;i2wzn`Q<n
zmzMwvn!;GNM|HKymGZS`ZgY{pJM6v<47q7Vx$2kv_>~A;e}FY6{c2#j4PgXWSKge2
zZwcvU=zdH=ZL02%K}{CR*koL~Krdmyy>0}~*iS7z7rG+X2z)^_q9ZZYi|Pj~1Xl9+
zW9@tM6_t-);2%7^Z6>f(i_G#=4%8|&b4qf{_rR!A9k+gxjE>1c6*l;iF7yPM)D3;#
zB*}ujCkB3rsyG+HTXdj-$v)-++5&T+zhL~^)~xq2OaI|PM2K6^Oo;{;PFJ#l4H@4|
z7QHz%lGo?0lsmb=kEn4Pf@!q|B|?Kqi9`Mh<!}MvNu*UT9Xlq$D(T_~pMXBBi`5Hp
ztj=qqiVFY15zQ0l$;`e<3N3Y$qU04#t0RZ!VobZvIXz`n%a?A;J74)q((o|3>%8=Y
zYWXwX^0k=s@z(*MXp4F-r}Mn%56~flA>jQUzZ-55U0#kJ=o?ePJu33?G}o>qjyNJB
z#t<h@Z&cGBcMi(^fj~eb;q*MQ4^H$f0VU6M=u4(cr?_izqX0j;wbrihP-B7{x<B^j
zI7)Eip4guW+b$ygQTaHz0C2~(E4Tb)4fc0=LZar#ZIo@<m3_0ZW9HBAd0P(k_A-<H
zKmIKcX4BkRGZ>qLm{ry&0flpTTh%LLYAujsvQ*y#v)TCAD-{<q$n}htDGK-Gg17ST
z2SU6aAe%%3gTbT(T)hSAYNp4H&RF)r0^(SLrTW#us~LoA30x0(qsHt3$>6K>ZtnF)
zDJW3&LRS@C@_FT`(&E7tAo>r}oSslh17pj@<FwRq1)9km_T>nv?9R+MjX~ahh<ivY
zn2ycHT}kbHTHdi`&It!GaQlwAvj4(_isVq$t$-k(xFcX=lZsXVZM?NGc?iFUAOa&(
zKPqEWaRj<su(ZbE-PZS^5Mloa((4Di2uQ!;nnk7=m{RfAj1e0LGle?p%gf8i;>+sV
zp(i=Wu3faapO$4)bsD_G^|#*2L=Gnra4qD4%cYqSA8WXQ^L7)tR#?#zl2_P!z3B!}
zPU@}T?rBtG`ZyGat+PY8sOE3vm){U-^HLU~4?wi@9q{C_6vTv#WoA1|L2otCs;aPt
zAhbHX^&iMp`hLCECjQo`W-@QZ${(dw!?-;MHQUL_le28Qj2&%zVQeI{_0YANVZ49d
zfjZ%kGZZq}w<8v;&W3R^=B)(EHggLAOg3RMsIwV*T}h4~9GC8Y46yY&0;6@%FUmEU
zk+IB}%3c6`%sTpkE4CX;q>mEv7dT*<kVUasmwRd>D5Od-8ELCCcjDAqxEmmB?6cy&
zW@0a5$a1xd25iFClSw?+q}i@K>fDd4`(Jt&$v8GYOoyOx<`eoO8YH<`Xk@&pkzD4}
z(Gso4w1&NhAco<!9(V@U>-==(6bt?suftxOp%pc1`~iu<=5<25%0t@`L#;aS8YRU^
zFu-g(-3LmWv0<v8{FI(WCns~ywtg}Qo;^~h;1N#FO~Eibt=Kc{GLJlSx+KdCv!#o>
zKdBD8fq7SF@v#*E{tys~{ZRc1%isPy&{7`@!}*pGGA&hocW)2rn6;d5o3DhW-g#5X
zy9Wy|=@|YjhIDG&h+@UXm}5DE@mb7+L5SY90<UDmUgm_Nry=q@d_A_V<-LYk46N~R
z5<SQ&&vdW!5={(Bp;F=JT+zn<s6IM{=1$AY+;0%?-jbN{RJ5#19Ul7Z$)c*|P;EW*
zsP}g)9!B>t8)rNq(0FLZ;;t_VVPpc|fFGQ^Pcq|b-8`epV<s24$4skH?;@MCF0S2g
zCV*jJbP|o2gU;UGS21)u)GBX=#8@aotzN<qZTvjB@S0((-Onm~RtDCXD1YM~kUsJp
z+gAC|0M#aJb+Xlg*rsyTEN^D$kg++3?RiLd1^3yLNSIlSZdp*AJTp*Din<|dE)i+m
zE6=0FV4qzbLdkMXdQmATuE@739yVg?1QfV}L0{kwaXyO)QaM>-$iUTB)tr($d1Sz7
zEjzo~E^lVFRc!h(KyQAL@zmw;rRQkoK${PkkAgBzDw~7M{5!JaOlf6;?zvRmoUXt0
z!7gfPZQ``lV<PCQXm}*CeL=?G<hZ>CggKEC_AKvi+K%d7bAok%kRg|~Tp_Gm#@^d)
zb%s;wOlb&>@v~Wf6R^ObLGJ1Zo>~ZF9EGpJBbU!d+1xT(7EqY%;OJy{Eh3t(so*5d
zAw6%qPB&d*Q-xc!-Zi<M>4U`<xMQRz(~0|h(6mYLvC!o}bsD+eTm1@9V7A2m(cx;U
z&3-<-?5rIS0|}#lspS)V!{_RxiR7<PI5U3+a`Lodv!`vb1h|dMpP@Hi&gzfM?Yyx;
zMC*c=Y*w#MF?TEUl+4bYjky`110R*llX1mkR$7a3FD7jmkrN{#v)g2gF`#0FA>8B$
zQ^<_<c$X;$(zM1zF@K)D=&)_D+8Siis=Vq*!xBx<k>glz4&rn>k|C8{89#ijj6^mP
zT;&)uvO(*~T4m#vk6|exO_&F67^u8~4P$$yX&IJ;bzCNlVT1Sa_;UsY0W(kS?<`%2
zY`DseIdno^!x}_2zZlb8)E{yE^x=Iua>bcfy}5tn!iBT0cv+DqOVP}+AQYCpoO+?7
zYHdMJK2l)@U6WZpvvYtf<A0)F-E-q;z5TBIZ^UKKk<SNLH9i!CSE;|vmRdk0DyeEf
z-b8ZT46U6-(1IsQ9s(6{9t1?K3tzIQ6+sWEZ4ZY)EyI&Mx1MfIefTh>ilW^eFXg{t
z0TbVx6T-2&;c1cC?bF>TzFh}2{W8BA8o{Lf=WI5RUJ{NEY{{6t(DJkqY&-sFX5kix
zUHbxZ9Ul9$1l65_(AMR}{7-aC63Tr+gA>J`4fJ4RM@}ePz4aq`k|dM{Amud#->hZ9
zlbd-N@V`bt1JAC22iBz$4IHgCPI}d74E;bVZIc<fgoxoJ%Y6fYig$cMJ%6T8Pz`h%
zvL~|;{kj>HV3nnlYW8#yf5!Aj=cfaWOd?Q*J+xqPhWdz>P59$%XkKy0`jdP~ySTD5
z!H3pE3WQORw~`1la4~YW%#g43TsxbwX(RtryJ76dw<OX9YpG)6n=1oI6I+vTtXORt
zy7tfXg+Q7Pf8JA#=bWXqXLoK$;ciIqE1xG}w0-^c>2QR<#DxI`2~p_m+@}-pj>RQT
zTB5A<`Mm&SDs(n`Pm1j@TjR#5xG5I>gOX6u`ZGm_Gf~#~*~(4DMXJear5TB5jaTs2
z^jVj%a$YeXZQ&zehKB1xRnT;3!AFn=e<Y=A%VQ?D!7GPJ^NMqho|SLVFHZc|EX+4l
zuIX=v&`09$o3ETCFv$NIejFO5&2U2j0H6>70FVG+0od9Z+c-K}QPb1V)6f~yn%fv!
zIU5<%{_kU2V_jQEhX1~aTa969OThl%=@U#le;q>QPsE5hZG?k}Pc#_LCq$Y)bxu@y
z&a#(XGTpq5e|6Zan|y8a0r7XcKpRx6#-SVcr78Ah4B<TDnB$<aouKq~_t(SA#lb`7
z<}@lQg~}-lusw3fc1p1bsj@xHDAFmwFA9M_fj*JS!^8*bU;7sDRgElN_F&EwLH;j;
zKVZC|)>bR#D<-u-Pk0*D7BfUJLA{Zf=yW@gA`abv4p)m(Q0Nd+q;cQ&oT1V1vKCUS
z5f#ELOn4d@8cS!Lce{wf9k8o~L7-17tCPog2C_ZKk{6Bg5NZ7Z&>i6c#ZV??a}wJ1
zi$${qL>&J_9&v&CCSG$j+drByNL_b#t7~5=-cyp-xpR$&;YK0hX_U`8Ctlr{po$ha
z09-fT%inji^VVx!*`URhuSSw^WQgJ&hA`rv-ccRoNP&jkZBpMW?7F$r#qREx`P~ox
z_u4dpN?^(ON;ft_2Wk{ezwds|K8{H-sV#8;6T_+05e{h90$MZhh_onRx@-{RPRJz*
zpc4r^hzay<fBY;!=N@(?F}hwf2!c}rST6>B72}QSF|>MvSt<)e9#AwuEj+V*=?C}+
zG%dU0C^RtsO#*q3m#k3zUkGL4m`a|b6ks?7DN3W75w;Z*TT5%0U;~jU%~Ojb_*KPv
zOg|SdFq>&2cSjel{fN4|bWsAWI`{(8h(UN+z*a>A@gZdLZH`gCJaMC|X?`k)=i1Cp
z&Lwrp&UL_w{s`Z+WSQJefVP-!bM*({1P-ViN0^+SlPKgg3j;kNcns)a6`*MU`~~gV
z9)Tqz7ev-41Y`nwcx79pFzf5;0%pX!;BaPF|0KDs=mPJ4qe^2CMlJ5An$I|j9Dc)$
zScpfhF$j=0turjpFDV09n_@@5O#G6dKV9vxKXalQlqKFs>2|rGuhKYnz<90536yN0
zShD^Z{Q!8`v?>mv3Gv<79IzL1y)U7g@|9kwaXVS&TGE&egjbVUeCDs4Fnr|JalF4(
zTx(WyqPFavKX!q!o(YeR&}Y)kp_pYN8!l`LU!yc%8mKU9Zm;||n*Q^Tt()keXTQT{
z5xRqC@0+Uh8hsc$w<j0OP95F2d5K=)j9}+MmPp+!E$oZu`0xjuLzk{85JF<3pDbA~
zts;vutLrwjb5p2g$*-b?*A`F9^z<qMOMhEvR21~YojcNC!QvE9R+6Lvoe8TcRZsPZ
z57xWV$6a|P5ozUz<C>i!v;|%d+dIVf)hy{D1YvU{QTnGa`QL|T{xI104c>CB8{6gO
z{mF|+B6!(N6SNOW25l@}HS%Cv-!<wh_<G*>yS;6BrYDEuT(^ZcUg~XB6#9F|)DQq!
zz}OKxlgtz;aTTwPYjy3FG=r+ML@#kOqgIkQ7i#7|;X+y0J^WdD`CEd(*Mn=Dt^FAz
zxz9(Qcf8g1#%T!{v<@Vf9)$RYS}Pk|b*Ilqo19vy)4Eya=)pIKDP>Q#&&}Np>4^Dt
zPOj=^;Q}j4j>c=zVYn!8v(Zeioo&Fl5QsKH%TB0Jv05kb`=r=>4fee+*xkd#WZGNR
z!ueh5G4Q8~aC4k<7|!h4zG-vQ63gevYH_ge+MrU3yWuCCCGTl+TRU_?qu0;SPL$sq
zta;ae#DtRKrc7x%{;#c;)LdL^X`GwrOuZIEtZchzQAFw5=x;VIw=q0;tly0??z(Mk
z-gNLex>}k2R1*OT5lE=>O|6-)5RZeup@}<`&|)6r&HRqyZ_b*(qU)U74nCanp<oGi
zb#bolx-)DFSgyN2CjUqX4G*k7&8wy(p>D;mA!8O0c8s(1z*^Em=iewAPGIhIBFXO3
z&mFh5rNl6Hto#=&qT_n8UGyoSG*jTTH&i5qG=viK5NK@@`<`P!Sk@B@;02k)DQ$Fo
zr*k2RmCQ!)ypcK(N6^AN5|bEy&3%?fN`u7})N&75*TQ>mnTj838tZt-NPH}60(3?M
z5bVI8m>xxBP>*I-(+*1gId=d+GjX6Ar95(Kp`oj7s1*%vnc<I#<Avlp5J4NoMCU=~
zJZS>7Qy!|Z@%J*`A|vLnE0L{i5Gj^vK9T^ws=7DNflwEs6pt}Yfxv%8@9v6pMl|(d
zO)N)Vkf-W4Gs>2}74wLy6PVnmzi2N36FX&Wg_}6tUT1JMXU}<#g0`I7_hN%k#fx(E
zaRHATzz-@5oYA!jg+~M+@Y_cuLg=OAhRl&djV&xP)wM<Nik^p2!Bh*cP<ce-{F!+x
zcqT4B)wb=d%MBFc8nTkz4GxhecAKb}!R4j4nGx2q<&*pfJ?675cNUFE#b+>S!EoPr
zbUCWg#p|_04D<@Y#?o?`4-Q>d9L|*AS}C2wD_WmXk@O0Xc$>|lQ_m;pX^($G|1d-g
z%Em&VXDPU@rMK*ohU!6~X&7baCWLv1c=@rN+w~<wSiT$_G{x^+RBtt>%XoD~E=H|?
zvSqeEF@>SEiBF~X^hW1%q2Tc^JuDnc31B|icn*42LQyeDH+H%&l$9{h%8Or!hl4Fu
z8r}LYcLO3z@r`z03Pvihga4IW9GyvX!SeW~yV`jb9fV9w0a3UlwhXxmV0JFDAt~58
z<vrgD{2WIBW$ee3hJ%HFhL5y^G2t%e%_H~!JI6?Lp7lAk@L8n(4j`gRA2cYdz6SoV
zni8RnTu~pqs}Z`o!Lk-A8Vb53QYepW*V(KoCL;2*1)=hWi`W2vhoYoQXazAC;(cJ1
zsaZX3>*@Xv#z+oKLHwI752_B0#SMph{&n&6yB)ajB4qaaMeS3bQS4CUH;2mLJ?APw
zyo+kvOE>-e@lsZ$s#ISW893G7p=WBo6hGs~cvZ55sVOAen=HEB8NcXTP+Op|rCBJR
zbXwv1ZU>zG7`Qm;GLsacjMa~;n$Aioa*hwJOvwsqj%83OINb>~rG^4%bmv%@Q<%4D
zM|jnalDS`r?bhry%*=KpsM1e%3;&L-jJq%l-i?8ls{j0i#hROg<~r!11=RPE$+!jg
zsG-kWHA)OnmD@|qffMnm&n*Lp8NC(#N$>aa%O3WcD06JbSUs?}P#oJ`4{W{@Q#~yF
z@Q%cj-NVa{eU`s#vI7HyUmE=BE^!=%rg9?bX)f1Ct8-^m_a|?Ed9m0L6x^&=CI^{c
z!CI7Y@0j~#Wqu1&|0*^%SH_o{y?!+ritGexTc<=C7#`S*k&md>;7yP6kl00ft=Be&
zh(LgWuBTta(uco`Eg~-yJfK(KmllXyz}fd*7;Sw>B4JjJ42~l)fp=IRRpWt@9W9>X
zQ#rzT&-nMiV~C7RJ|cLoA$HwM^Q8fqc0K;N_356ZUalZ}c6joj_GNoQ*qC<fh#L{P
zHo3NR-tW*ZNLFWrXk45w<+=2)<QbaX-=C_m&#MQ3O_45&7yT5`%XRcV9a&5hlBpy}
zj+a<_oJlS4OD4+#W5o=->}}t|)xuEv?yKF!elxekX<u<WP>vRfW>Qeny9Mr~nO!bu
zy;o3v(M80xV5wCI#vIT%V=jO3W!R`prj!-jz|30l^w(#Re2y*(V6PveLtH|%wv~Td
z3U49up1)bu;;05cN?W-*(6}Av<|m`4vZl^PW#0xjO%;XSaO#_jXs5ASBXnYH6ff;<
zVr@gMVN2qCiSRi>L2Ns-(@0(XB~2E*9Qv){w<9KKKab&&E}r<`b<JWqAsRVqP3mq~
zlP%et8@;`nxizb|JIz|{Uh`$m9TKoL*9HuGL-7yGwF-~Q)Kis@KkMV?=jZErZX#q>
zlG33sn&c3w>S~HrrOC7(;~vWCv-l=PRd26EzQn&_LqG4h|95dtzMnGp0s#PEM*ctA
zuP}CS`2UpV8Q-><Vi=>oue$UW#Yiz;;q}?AmdfD(G3$DD0H&DN)$lF$Q^|gyY}Pj}
zzptJ-fSb@#0%tXqCFghUJzTSlw~RcT=W$2`qnoKjZd*n|T|GR%r+KtG@TP}Ij+de>
z)rsnezoWV)LL0`JY~r%v$RR@lfk|pU7o@X47sx?!l5i<LNgtFAkt#j{4GB_dyaYg~
zK4g7x+lm4>2iWcpI%3GCMyVfViPiy0Re^J)Ke5HV(_--P#$Qb^z_c14N1k!kWp4P2
zVN~5=Ly=R!YrtNg0Sb4xMCEBU;}!aqpAAeq#Ca`{3sexOom64{Joq{xE}2xDCBGb;
zpFiK9=Fs#-=583Iv8L_w>IgIEB%Y9fyq8WqV3vP8q)94@%2FydQaI1Oh~$ukcr+o0
z`J13!DRaGOnr6LNWxz`_X`l3KjAr^YHC<sAo3Vu%_s8dHrd9Z(yo%|dQQgaNs{@!{
zmFd6i8dI%jmT_obI+{uMM<iL>WBW0<iE28xLOPLuUA}PBbA^rqzx=;yAMf8jH0a_$
zo;t>$ON>}twRpu3gzh{dcN$tR-nA9H?%rKemvaom@R?G3ON^$RyH{@=9znH`(UcWD
zf*+UdOA~4`8!E1fKY2e4vKz1^8EqiQ<pU$u)KYEur#lFtNmS?zd4`+PQ>4S(=KUug
z>C5NrT<4hk<yoh@rb2V$JeU3ybh%-B#Gcz$4c+FFHAF7#(Fe?6jLZ`Tqjf%S$i6)}
z91<UalqaXUdzt(y5bbz8GQ{-F7ZSM4w4w-#4P6SM+Ikuxn5ut0l|Pb7r(KK1e3UP;
zbNa`d#=DI}xhRm7cDMjn&&x@slNw;x<6bfFgE=3K=>1`+B21yCA1jL?LsB{JiYa?#
z1Z&@WW58t`GsdR3_0f;3<X})Ng?5;>Z$*q>t7X)k{al46Gzj*pl2cq}521l=Lm^%d
z86&fIpvnY8>Kyx*Cg+~QY8<+2plU?HcUXv0)Ocq+dn5q1pyR?L5P5-gM#kupfr(wZ
zLxJ2#FTQD{yXqB~rh2>_)UhOUVDu?WUI;=j-JiWN`fQl8vjE-f`>q@M_jVrQ58q#k
zApQ$U-W#b%8KHfjzWAYhs6y%bfnWNb*)Z+YgkSnS%Y342G-UqUz;5g$l65bfyq?2!
zaP$}5#17s5!HTm)8D~-?iz~MIFJoFXn|n&>l^g59(YihY!@-d|LvorAQ%3=HeZ)6I
z;?0XqY)w10yvtf^wj%@eI-JP6^J$jUF8S4*n@)C=dGkhva>!7>a(KWvKnbD#wq!?9
z!w%Ur8n^!THH3I;tL{@2vo`maXz0l*x5N&*=&&l0ZIns`9T*ckgczl`@xoaVgL&~E
zMfJo)zoy9}uPvhg9H&ua5&@bMLnvA%65(B2l(r8fr=Y|XzVIi~hKo^3XANR9A($73
zJNg8Y5L`2zW8{k`3tVS(ZLNhXwI>rGGsB9u?9?Ecn;4QVYz#}QLcp9CNnN6P@Op`2
zcH_3Zs9<#sYTM7*D1|&r22v1EbNVPUf);3F7FQO6&0|@x#tlSN@T0`5WH?sy+t)N>
zNtQ_S5G*vz_8Qui$Z4*Rb1H30k2`^`#{o<<DGW2429gn6TUcxmK?qR_mx|AsmxfmE
zf(Z+42wyXSUN>dM>Q8U6;R7#9ps1|FWbk!~#%pKJ61~g(@l;a5`@OkZJq^Iaf^7&O
zyM)wF{Q{1i8#$zT|4N4z@ksr;PwD4iMMncW$Q#Ea|9g~6bKbDCQvn+iF@wbe#Ee>Z
zHJQ3qJ0PEJ$en}fu%6XiB7-V(S4FMdAbn_-tC`raN4a7+9{=<ecFpHljX-lp!)?lF
z-LNAp$t5D2?u~U7wpGtLvSIw9Yk=aPoRQDa+0BpQzo!@I;`^v4w&=CVRz=W4zFR((
zVy`63r0C)l!dXkeis8A{ht+Z%R<jO^xnPVEZ={}0-=n1*uWLQ-LNu9<D+5`BpWX{5
zk3riT&$L;+nq_6cfKuJ1NS)h@@;6kaZv<~e0rou!d3Yh}{^v;O=oqU}+vGw#)WhE^
zV^nWgW5xDTiuxMVu}u5r>AFu!YLmPf@IIlXZ|HTw;&3vP97DjDsK~1d3iWwV1j=O-
zRD)v|)M<=gA5%L%7*S6YOC?>&I2j`E6bqT92SuF>@Fn2%+Dl76A7o7u7D{s&5{kG_
z$6jsiA3K!{u*FBnaQ~!XfPx9eAQ$*Bfva>f(y8e3G!AtezJVzPZ@Lmrx#mPIIsTYL
zhOshyQL4&RCo^voDS{Cbb;#Z4XcIPMHge8ymF)qA*)R?*AF$TrEFu2*nCrZd-v@jA
zAq3JeIiWNW_NM5Ay|-dRig|M-YI9($$&%#AK<smSW3nr5PCVz3BAei%#W-F5dilu*
zMvB>cCd&ecC*Td75m=e?Ybfh7!ZIy}GyX>TRYVy^6>NDhJDbi;QIBMug$Vi<eBTvH
z1S6CiooL`r8gLo_*pN5XK@h#0JkPAf$?++b)NW_b|6~rihsN$c2g_`vyU23Rt!ndK
ziFsl%-A??}r;Dz)hlF3^b~(2Tw}0^_-0F}C26bQO`spc&>M(hiFmuoTko0IB%GF1r
zYbZ3H^OpcneN_Ah6aaTcqjHa3?K;o=Sk=ux_eAwN`BFA%l=AD0zSo^gD`3Tj?XbuP
zFkSPXRrY>jMHvq_mjhcEd(nnH{wmxuCKz%a^oSi+W$D4KF-kRI&pviX`XGVqmpV7w
zV`}pLgwZ#GH7n0GPV!qIW`yX7?MGwm;F_W*HyVK&_caA50`L(`fL0~AL6kUE1~NC}
z3JPu){@l53y7on%DW*T?s<7I#;rZKEdLAb|7rK?;?sfRH5inF|Lv0l0t~N+V{vGqs
zR}~S~+u-kq&cH~v=KkPTZx<_6a?UR05?ZITdac!gh%NfF7{=GCYkuknLQm5X-36bi
z@8dHT5*F&l#u2bs;<7y-P+nQfk~Ym*9Z?n)TAgoAl<)DKM-XJzRfnz80nYo9`}d@T
z7w?KDVC#omyQW39?`6m&q#Lkz!&-{rgG%K?Ss1=>XDN<<dvGjw<5nYhGHAXhgtfYw
z3?<!*im=Gy;hpy1Yx|D(>(_*3nh$nP3+Jq+1#is}TV?DAvS}ud4Kns4#;c{_p0&}~
znVESdi}Wt5#<#o`>KU3B34UZF(0^^Avjsj@;^MYZvae=O5Hzmj;69G~?}U$67$=wf
z-C>_h(D@l&uXRaz(-aEHy16B2)gWH)eL3RrUu0fE%uPN@o#S1V3EUi~PUS(KQMy*W
z%um#XmFuH(u*0s@y)CDt(WaZn7+HefQG2q&U8o9uwnrZK@z(D^?{}7+j<}Nt!kgE<
zA1<GF>fhJj|GTEdG<SuRf&%~;llvdlly=6}|9wq)taa&lFoy7Z(`#Vh+m9R??Rx9-
znk4}lXjK{IpLkcp+MXnl*G~o(o)A>;*!=6+VfvIa4{WE94C#C-obmH)+2QH&v{&UW
zlu>kAv&;2qju1DKO3VA}WWVzsEQOjBwX!t-4EWdchWDHbZ(F*~j=NX7W0H6teh(@7
zW63jL1rr^=)}OmDMwYt4p6VhVZ`fo!R18=aCp2iZ)LNjY6SIL~H|!A1=uq(piOMQ>
z>YAAN$ysC-upXPiQT4LenuAfI#idSfN{|IVG5s9g6(fz$3h4a<M!g?Ufx!g0xfI%&
znB%k)6Ru6Y1=sDx32BXHkJ|t&OcSJk<M;W>s&l(VyRQE=)q2&F<1nvrF6)IrjoSa~
z>g;UjACTA4q0;Fy!Xzr$^YG;?sE>Rzf4$Le!^LDWT6jEHaL07X?mP13fVQE&{2Ddt
z&7a+q2ECB>G9Z36ceWQ9y81lA-2Wtxd5F&B@_1zQH}=euk2@6WHD(-Flys^7>RsM|
zV8i9vuDa4!QS4)pz4tARaFH~Fql+GgAI^~JjIqIxi-21=vuxF(mQy|kik|-RP~&Js
z$a9WVA{R?k_oAQan6+g4UhX|51RmW@?n#_oNv;m8suX6SXAaCk<M?t7eV2Tf-P-jn
zJBs<4GQuy>VeD-mvVhk?(@jaN`h45yC+5CP0RWy@fUQVCjF+%TSM<N0f@5zrrM?lt
zb%lrmf~vM5=wxm}GCc8jZM)e{k@~rYKNEGO-nfQA%CdiemiL{@)QXQ=4{KJsR|QSC
z5nalpkfmvXxJbedM`^EP(Tc#JC7SaoJ8EJ=00sxJv6Ug0I?4U5Y$)I*Xqj_IugV;F
zl63}9=$V6pdWOC9{U*}ILH4GU?rwt}5lcR~<BZQqc1I)PK}6ILiJ4w4X3=55cLjCO
zgqgbi7na$k!T(BIVDaM4#>ND+G7nq8LT!VkIFLPrh?>4^+yR#zi7{)Y;h1xrMCdda
zs>Foov72ka@)~mj0!{^ZjNdbQGnO$PlFnpk5gZ!#etkdk(&Qto>GA4upsst=JPLVz
z>LRaB;!5p<YtPdZe@q9g3UML_Go=cB`7K=!932j23xfA;puqbV;)~9Z7(5Gb<Dz~}
zPK_s92Dkj;S<YtvmD-b^;7sWZ*dgE|HqLT^TfHuQ<9rpOJdIeYv*l&qt7v)^AoPjr
zaWGw**@6icts#^~(_r1C2VR8=m4h)wnyHn}-eU+gD-nqy0L8_{#Z<h=`jMboWrwH(
zbj)$b1pCcD@Qq+zCf(k_Ha9@h_iNaTpHn-_Fj<1SYUgGImRM6W0-{lW^<L0YKfoG*
zF1R+SyC=&Pxhg$yuU88im&?O=v8Rj#2!3sW?em`N<0pJy6|))B7sn<CXZr=|CJKUq
zS2xiUVdFX6AD0AdE$Ff3(Z78Y`pyI0J~1(mCnvTX3rk{&$2aql#oj#tQDd@%scW3m
z#s9ZFk0WZ1NjGmK0)S2&;u7R%MaAsD#{j37G=G&EWFoIN5|Qs~gp?!&=V&=X{Fh3D
zcrk;WhYG2CoDfRIYD(W0XfrIC{h!I^$Gt@AkAnMB)6CuEN@IWSV>F|n?MF~XPxK~2
zsvgiIOn@OiqsTgmplhVoP8bA&*}%_8NH>@^e~cf8RV)8K+_Mky#kX7D7Udv><#D%l
z;kHe#z#M+#R~mh0!@iv_pPMK*#vl%e%KHAFl(-&_f%vkJQ#L>D5wGpOiY<fi`GE%D
z$0N>c#XGt>>H&s9SWryHI~_ZK$n_^W6!e}HR3`||QE%?|PlQ?y`txxJ1(up+z$)KI
zXUZyx=~YzC%$1T`TkTn(Z!t#}>v*))kiMO)AD<_1x_{^ZhR|RmRa_VJNs+;hIv7_Q
zy9Grq4tD-~EhPAbJ;CY4Rn)t!EFGXq++h~w>APFeGy@1@f9YB=^2LmN44BUWiSlUC
z{EhsT+Uos5y}sWp(%nl7U7q%27P==+b;OU~C%i}r!k(KXA(vuR7_vNSy}0uFcaB-1
z`emR93;wbbwK`ekp7MTPh27T}=%sY>;ivFGjswlvba0We-+akOG!vp`JB!ZdNc=ew
zn{EZsB6jask1?jQvhc-(3^hdN;uhn=;<cs+gMnt+>}vDq1vQ%?8-H5HVjt%!Q@LwM
z^_<09M*iRNs2x(z%Mqb$=$fb9{rY>}>tP~zxJQ$EU_vlXv@`}ieN#E+)8j<#{7d}1
zh~riUmDfZKWkQNN&rWxbu*wT!lj4id_e^Vg7i5j?KS_Houk=^RukcN&q^_#gz2=*m
z{oJJPouVSxd4};+U5H3JA^n%cS1J_nBCi&QP~?uOyFe{xR^}cgy{JgqkPy;M81I+(
zrRUoGy5}$*84B>O1I$58?L|i`1!yNFU=+GekhGFY>xolioZ9hiR0%ZBvIIRR&4Cgx
zh_)-J3D&xlLg9*amGr;SDrXFhyp&N9R?0LGk-#q|C_hvx`9G)?8bh%A^4<OAF>$VR
z7rm&&!Y;_@b(7F4%l?Sx#Yiom$g7lpi$A0+8);ztFi?bRL~Q)257gsVQJ@6<&#a|w
zoULpA*$%vJ2-<G4PBrsh<FohCccVs(rc2EOO&^^YPsgKP$KP0OIdwB+?O{Kc1~Jvr
zCgjcC3;g4iU<Cj1{RLd0=28UQ$D#$~^<Dw}#fJtRU}Uz)@~p>g3Y*6eZ7-PXAH-^u
zBbvvwXi876*cIamP!9NHD(H}wj(DKq1QLbJ*`FUiimjw8)M|D}XDN(ksi@NX;)>R&
z)yo%K{XW9u-JMs>y;rM}L<wgkNVtmyG;Y_3)&=B-NYY_`q`L|-+Vdd68B&J}1}!UV
zgC8nX%EwIGCt1@gS?%Nm!ws+@RW=`vo5R$XD<*NQ=|omxUf!TimdXD?jHw`e$;W(Y
zUM>K0WS-)TM7jR_G-(FRN<6R6=7LseuB(uE(W$iEXV;LOxAfYuuh%F2;f%z-5bMSu
z7@yGin@*;ZlfYSOSgjOQJZU6y-Y$tV@s{M=ldxQ3LQqojv`1BCXY<tNcw~e<rGm|A
zc1N0dhk)V-Qd|8dPr4$lWdZ=#<|T)a09Up2_eCuo=?GnWGp4=j2pAj(#)xLDPLzX%
z`QC9@+AE5@`%Lf$W1j2S6VJ5qK({5nmo3d()b5K(8|SYF8A;O_qvr&*bZU&M4?bjk
zc`zD5jBVOb=;5vk)ZD7+Y~$&NNfe?Ey{xgI$m@Q+m71at)FrjoWWwE0BrYB<#cl){
zp$WG&d_o_qe-L-t7Qq#+zFnErlMWj0hf-5`{vq(mV9o-;!=u7ZuHbry2O%!&UAQ{%
zK!7pIDv|3$lJ>%+s=M?pPWUuu7PjXL)KNdSw<QAGR3r>5uvl9<&9yp$Hlf!ER@0x+
zLQ6^p>kkF%4|VGgMDp(><Z-t$>ZmH|S*>?``E&{i*%`s}=-ZL8Ah0E15sBHhc@a26
z`6Fa=MGs)&Gtx5HQo?D%2nDol)HN5(OczRsm$VCJX;cVA<ykVE6fF8Df^I{gap~!x
zL<F}I<3nPTvPgT;B;=+964ke{)Q*ogV2|>t(hAMwH(*7^W8~46qnW+n&6W!b$1q~%
z&J+R4Hc<0#<83i)>o$}rAaPv8f6|bk|Harj1!op@TRXOsPRF)w+qP}nwr$(V8{4*R
z+w7oE*I)n5ck`XIFZR{0T2-rR&st;6XO2;;yqllt#(gx$Yjn!XWjm0}RBM<g%~FpG
z{W&5KIvYu~PO<jvzR+@mMVQbrtkuex$m!H8$C?8v_jh)e$KWygrH=c<d*)j%lAc-@
zlB%bEccn@_#5S<+4RLF*D4#y{4n0q__us7!HAX3$qM>{OMS4ea>NDSCO?o|gX~9~N
z%$OSkVfG;nnO%zATXt*m^=p2RXqguygkoDKy`Iv$O}U0lT$Fl1WlC%pbmLYROV7Bx
zn4gddt>2xoURS-lWe?Sz%ZOHqV~`JCAX2mRAE9)kepTCD$?cc0t@kFf4kf!~LPZwa
zlEmGL`tx@ip|3dT%&w`@t`^5moA5thD+#juN#vIbbHnVyW%geO;hE<3pp9N-d24#~
zTP0WB2RYpG%i?y_sBWdFJO=i|TYQ>b*R>>1@cI}|`W4{=I11r5zn3MQ!L-7AA%?d&
zY=2OoK?IGBFN7uy@b;^(W|QaeBDhWO#*s#zbP$zxK}w6o83I^5@ylj3fKOaK!cd!*
zGS{H%W2<3*F^Q&|y8bM6ypsqYbsy%a74c8aXZ}u{n%93k->qE~o=6U4n(notDSE0`
zJe@z0a^Z7%Jm=e-p>qDZv`j?g`dH&RIlpoY+$p+7=BkTZ5_p2;?3@h&{u2zxi=m78
zHHJVnk5793uygj_^Q!bbLO*g&WL`S|ZxxJ+V!zV+*>EBk_$FXli#k0W!tO<jFmxvx
zk+n$xqEH;X*iLVuUoGjUPDIPQQ4>U(dSR%>RKe8CT@EY&y|~ZvQiL*$sTs*y)1~r$
zwu52sy{%p#^&A00{hi4s(}u7Q(@TY3Yc|wkppSi$#GhO<4!sEcubRAC1bPvv&>B?h
zY==VP()slrX2f~?qDJ&Wrus9fMdci-%VRJQ({m`xDn_S{HJvur8JsR%`c#@2)ep=_
z3)eNmBoD%QoQj)kP>4n4&I&Y2QE8U5OX)!_;-ZD5-D}FI&A-2Do~Cm?L{2=*7`k&A
zG<TMKRmyVtIU1XCrd<fWv-5FEyaH$4Hm#jWpNRv@;2jlZq#bG}u`tze52IqJiUVnq
zMZ8+Skoa=4i8lC$KzPsHemRfPr@fD=)_qXK;kmu~YEMk7ugDHsG_SZ%C{{syi0XnP
z*0UK)_S;n*m&d}CdG#YlT)b41{eGsxss04pe8wOfrI;PdZzLaaaF65w(<FkD1dP7`
ze@u!V(Kt6#<cXft;#Hew!~o#AGN?L}5hFIQ4QD@jgWg?+Fkq&;LjF$T^#MZJ+>1q(
zWySB9IREQb3R)}T2`aYgs*SjoWGRGHi1}7k*Ss&Ncw6;FdC*KWIQKc^-;wZ<g=;U)
z!Q~dxENVe0j?k+n*6VuAxN2Ugq|v%e*H)>x9SS})%&8t?vL_A~9<hUA!_;EHdi|e3
zV_wN%GBi9n$8w%o2%6hSQZla&;v^HHO4h6fMf>eK<AL#rqxvWHfXv1gxt2d>i~xWC
zV5Q$^Lnx<w!EhRoAC*)Do?pJ8q2^Wm`CtJxL03o9KEfU4$4vZ0?ZThro$;0L5Bi@<
zy~@F7=jk7oW!nV=MEbv@Ssttmoc~>_ck_IwZ?>lO&FL4)&TW85CkK+)Zd&eXg2)YG
zLr~y*PHgNP84FCe18=>IP2YEZ@4e|swvuWxF<fj}Cd0jcFRrY7Ck;ohf?Fo~Vc;75
zeWfGK#rOC5)_rSy;?>+%WQw$4$d4aqLGUlWN_lR4ri)2FD{0$G#3Ujy5ktk=Tbgku
z2x%7k$%261NuXJu&nQ93#Pt`&dcV&E@>%tf8$V+p_P!GcVj$HNN|f_DBR9FaqbQ8G
z#wr~~9Ov2==iY-|P2qXJz$K;|ha$43Cpe&b0a^#WKMyF`2Nhy6DmL81oXh>vL@{Gj
z*m{@5`mCmT5$=zVOefma%@UiCr`O~8_aGX=Nj7@pjkeKqEW$G8oVj24LGIJj(djjh
z)B6v^bCK>$P0?kV19v>EIcDG_rQ9a7VM17EgfB!)hu!hhoSK|Y=Wd9b2RsSn{Op5D
zHd4SCm$myq2oYRB?%KH%VE<z%7^>hk8A)f-jh&dU=g6Mso<g0OArX##p4c9O;3=5)
zFM-clR8CnA%N}y5_p$w9n|ev{b9VbPJM#7Pf6o2d-yt$=zXPn|4?6H`+&99K@<YA!
z71(7u=k9*YynYYr+j&LM)F%)9%xe2f($uSOxJesNNqgBBcRmVZ_o20G?s`hj0}4I0
zwZf&=-a+<kCQM*jx$rxBF6M9K?aF$<KQeXr+~~N|-<d%wr~)}2I4&-$WoN3nf5ITJ
z{jGDdj%SaOKD2X;4m+<b(n;UXg80f<5XPH+m><VR*umi$Z)|$^;KgSTpOziVXW<X{
zaj_-r`EDH&>flZGyRT@)VSzj=9XtIm^yqg6?!O%tusfa(J{|1=Ih--uCr2kI+0v+A
z9!zfLvo4$%ujoS)8WIur^)dHrv*v4<Z{bUbv)7}T^iuD2$bR$M&s9)Rdw|8eo_tO@
zNu7TEUckUx?nV&2MyS7O(A}IEl?C)3>%du2SMtMo6U-iC+#2IhA21l|mlGVb)N}sS
z810viPJsI?!4CuKy<3~%H5sJ_R!~80dvcq<`ybdvqdNko>-tG|3%ZhDo`AM;gHrY1
z{wViLF)H@YeoUZaqIGn1{Q!mLtB<0!J~#3^EK(8Wpgie<MwPc+xnxVmZs1;|h22G4
zj3w%SgMDgH!xBE%u{6V|f6*hG_6!$k6oBF8OZO`g!SCDMkNTHs&GLaE(RgsU>$v(+
ziZnqNmere{Cce+(a!0!Nf=Awg_pQ$|h7iYwL`|cdv6*6_cBB#nWauD{eY66kL%^+a
z0U$+{hSRoG6pU0}z9taqQTyp=M$hQc8}~O(2kRE-K&n~SzB2yq-v-#|Xy&u^1^Mo%
zQ`<z{U|OL@Np+SvoqDet0Zj4p+J21#!BC_$4Q+7c6H3|OW+wOkVH-Q>O(aQP)Z>+d
zw7^9I=Dy-<`d|BLHcbYx9V&y3AgI=13UwI#5}dKshevK_J7gzgV$q6c5weR6DAp|-
z8u$ABmQL3%xxa^;f>#uko({JV{<`4*!FIrTux-<bh~9AOZJ43)p7;e~$g}S8AQrQ`
zcYjcoHn(5u5Q-j;V1Xil0-*=mE*ykz>WC&}l{3!*4!#K;$<mJ_zzJmr_q~uX2G1Li
zMnI#R0|2rDakTRqQtTDe#}sT|`(=3Cf?2|!kM4Nt%?-8wyqHNpjwqHe(yjg{nqB5?
zEk!INB51Y|DtR$BebHaIB@=2Ju2jH$byM~(c{VuvSCeo~WegeHpWwND(s19n?Q@!m
zxrB1oD}hYy89{DY6Ltj6z@yR*-hrsXt{eCLZ_rLl;VRh+zM!P54FeG7_i3_ejJ?w^
zA`TbK@Ln-KsKWN3D65;HC=KIOQD<Yfy7botER1dwIIkEe&r@(ng8LW`XpTro|2EC^
zDHA4~btw6|on4H_sw>mVQFWhM$>{uHmKmcO2=?V(h4sDJ0=r3bgw6T@M*5T!jiRR{
z$;Y@2&_DbTzeo1v36xl~AQX3Fz3x^>wZnK(DP(Z#6Vc{p$3bAP-1W$+2j9g8i>4_W
zF2j3}84Fx$DKdoiI3QBe*-{RCdY2&x74$X~2tF|p!lLI?Q`Xc5(s*vFi+t>bGwJq(
z%4|@sA+e=01<on#tytJJc4gpo{F(~|5>{zR@+YH+DIFe3iitGGxc&|eY>$?2rCf7I
zo^S5`v3997EvmremWF8n2)Se5t7aINH_$NvBH!?=%POpmrcW}smG9f0h|FyS^5#U|
zdo2T2*XBqYV|!xb;ktKzk&%#qL9=kG(h~z9g4lW8xwK{-?}HeTa(k}ayXy6mUj5e<
zk*9Ly7gpFiNvR4*65GnM^T+X$d>s^b!%oE5gq$<yr;_GX<;J5tK|O~Zz#^fIdZ`%6
zf!c)kBSwv+VkYqo3O^O|{96CeXF{Cw#tLQ!GeR5N>_uw+An`?@V<nBKz@QEs)A=+^
z-**9+1~`Un5_aM&!+^c$ycu&2CZbw!0>yKj;>bdQP9;Xsf-hL4VY-k|7P&w$5~M(O
zk_7DE_Hi|OqXnq}2l3=bi=1qFY41q$(xDfLRQU^*d#--9aQmc(@=Yn&!a|1(ux!U$
z`n|uHgK)Xi;_VyCc0fnKK>vV}X4~L9wnBemK<pU}>x8!j=FjKD5Qj$*JsD>m_pEjY
zt26#~FhPQ-A4~S{PcCEzfg}p?G0l{|KQ=WM?C(8=2~`nWfc8kgJqf){wDQxU$$eX8
zxFl(lld*OyfSk?)U`&LMGqWF6I3++(kN=yW=vw&ne0cVs@YgnN<VaFh7@p(?PpOYc
zj!-)b|9lt(4+S>$1I}&K#5U-kF3hQi2Or3M+tE)?4t4GXfu;9AfzYQWzmi`X;@c|y
zL6%LKZBfM3@@K@(Esx3m*h*Gabo#kcW#pPkc`UWQ0t<YQtIG{6Ed|86TS<dz#}t(s
zl0e>7mk>DZ36q}r6+*Uf2LwVN^3rdL9y0da&i%9dD$N&9K+wLn5m9oFhp^sdPT_Ju
zmH7P4p*r;7jerb1L|p=le+Wt)Qe-2#Zz+em`+XD#VZaDdFe7Z#z7>kN{v5z%KIYb-
zmJ*X*tQdFhlhdg@&7~bMiFpF1Ne%8(U@*z14fc(LJr*~)zOc{Mlgy3vju!4$+HYGZ
z)xAiTvDT;}0tHox$zebbItnH0B(x||NCT!Rz)|StQoV<s^`(ZFb^dfHliY&8BZ(`E
z(^6WPsy&H6;**H}>Qp!R0s2Wm+dy@JtbSBnBBBeD!kA8^4$BAnGSN9CuH!DW%q2YH
zKErgWgfc&t;xgjF1XW~n*pKy<(LJD%+ZgaAU>qa4z6k?;j9(3!DfGenq!<Q|@`*Y5
z@XqhJJy-br7n}G9Sjq0UH~oFF4J2$(jAd30Z}S7mpTnu{K4GZ<z>FKmP&k7z3!V|a
zwxmM9n>WE^l*lfvsi0nVd`=^5NKXqFrRTtM(1^l$4sD^~oolb30S7mWd^5LNRdl@1
zb^EXE+wPFBo8L^iu8INtk_%jU^7Y=|Rk7ntAEgphSeA^D^)SR|xhOjA+!Z<wH;p?}
zLU~p0{j;67IJ*eaYXNAyDo?3o&-YQ_={j;jwdytLJZWKHd5YU5bYzusS14uL23W6b
zNcqy0uV#XO1qc<vj=2Tbm9gJ&$u8VYFd3??3Z%Zg2fv}q9uOH##$|PTf3|*D_Lu{q
zDT2oEN9;8To@dfh{Qv6P|D08Me2}9!l=o=<1FMCOEtTmd@e1k)s1Zq#<q&(KizsxH
zF0{iJ7T$c&@bf&nR9a^r20iZr-rhzKq~(q;BS`R5O>NW4sw0WTu^G5*{PZ&i6ZQ#*
zFHRp-Fmw=iCujtAO_Kn!-fU(>quoJ|1~WRGU^w&~0_ccSy6f%DFRJxfm(CbLI5x+E
zA`fZO`Vk(cyGTFEo8WcVBu#nW->(K6!128`$@sly)f*qpKvTh_M2kjBwm|3vLg`@G
z0i-gCn31{^G#m`1mON}zXKgI59oivd^jhyvgF+zg?j}rnO+Ivq4_W9wtu1Z4;_&r7
zR#J1CO`!RpR$Txqp%kM}Owk|kUx~0_yb`{;8k6n^WdH<FPT?*`bbK<<#lg0j>gY-5
zn?UUO@UZoGL+JeYY(}YWyH<JXb1ABfP#@k@T@1eoqTJa?6F7dSS!u1>j57K1(z=F_
zQGH5u>+#kvk_ii+-ZFy9r?&7uIc3u@Y+uVD<VrRQI7spiMOJPg_H`O9V(EDn<PkUA
z?um^Q2rug~VY2O8&p%^r*O}<=Wt6eTZWRO&zc=@BiH8MKB^%)L%DrqYhXEkruv$SQ
za}e(!I3sBTncZRzq;KPnDdA)tEI_H_m!InU*bcu-39leh`rYIi|K)*x8U8{&#5A(P
z!2>Q%5gbXv$px<F8Xrd3Q<I6qd*oDrZlH5Gx^WQFN=Ryp6a!b5HhqjTnHwR)64w#6
z9c)QffAiEEPdye+9d^rtS0VW!#pKKpI@N4CpSGb!fi12%CozwZw|6MDb)npG{ZnDI
z2e<umh)R=*Rt`2-066mb;B0;fxmit9xeqD9uK8+6ygPLI!hkx~eyD{~#~>anZfVqr
zLcT9`I;C)e8IeGvy0l0URc|zvzLja^3{9$)Inf~{YB`EJrV+@T&YtL8R)debUiV@|
zs85Ng=W;*VTO>(EfjITx#l?J5ug0tv1!1sCk6*`we`5l_sz3CkV_x<NB~*X*1m#U<
zoV8D7Y})asHBMtt<9u>CoSxuKY;y#k{vCX9EHrJub|xOwrU*Lcp0vtFl>@m7V+7>q
zZXAkgu=sT%;uuE_WyJW<QZio$d^W!*b3)_5R?Pti(Kx#2iq5)^gEe=i#=@5UMz@b>
z4%;W=S^SKp?Z?Cju@r?WZ{!V^BTT)l343C4$U3jOSyb+VV#-Ye39jlWZn3-p<ia-2
ziAb}IAz)qXP#1bqz@(e)L|bA#z)l`Bb)nDUo8Fcp2=cx|VuP?)WSvKJLWC1IH=v5n
zR%qRhBRs(vHP9H!fZuz@1L*oY+Mt9XK<!2RPz7$9fMdjk?Pv1ulA&JXu&7%BDpwZ`
zlQR&>uc21L#@w3BxJ0SSGeXu?bwzYtoqUXo)k}-kR<EEjuBgRCn_X)I8KH%OR({g=
z`95$%Inib<1QArn_q~E(IUEtz!}h)6a5)SS_I+tET<F^4y&`BWG(I_EO<-$ij56h>
zK_8V5%}RVw{8uZRPmWM0`d9V8?`}ix4MX^`_~cHU;7&^J6?G|B?+t-@`F+MiX74I_
zdHpCrJ)FK2Tzz@`H1^|15Mi?@{c=VM(L)t~I|ip`Yc5xW1socb22k<+zGoUQPCxo3
zE()&q&@r4Wa9)h!G#SMbUK<9#5S_-Kx<7K2u}hs;M#CvRPoy>eUGeB{S@5+|tR&`?
z5mJ^8gY??e46Au?$-YYweVs~jcO>>txm@5nleLYDScRUXXe&x~{rVSH4o+(hlF&c8
z7!7L->c1Mhs}iochJTpRPH((#Y}7kBqoi`ERGT*k>OW9c=rcuUH?e;m7?lDFu5$4Z
z;9_@qS6QR&$4G05>T?jJmpV#jRMW&!CTKMT=5RqgWK_~UV-KGSdIcCVPECi$jK`sV
zZ?XGDiqNLr`gVc~M*l!ic;%JW_DPI_{f1&!>dWQ_OI@Z1Y74D>E?&s)=flOYYs??r
zEFJv$G@c)mh`*KuQNW$YLi4!Vq_vWiF1ANHKK>I;@0W2n+>FoQ@TYh;MxV@Wk9N$r
zdyPB2-nEKgww)i7Lu}kLd!3KP`s1HS%X&$=_gG0mFN-iRs9^$IWoj9aAMK&VagOr=
z+XT~rQn}q~AEDhWDV#GnQJBm<D{eBHDl0iEb?4T))>JX-5m~jq!WDDaP4n1G5caW?
zRkZ;`d|W_C+vCBOT7fSZhz84&2zw49&!UpaZ_K1hw6t5mU4}5J(BT}^qrgl?NJ-9*
zCp%wVXTrpTTu~OS(9w_YXDdmB$2$orl6~0l*JGs<PBhpoOkhSjAyxi*c<oG*g6jPY
z8+~BWd(p8P%h#u_b5{m(9hQ}R%ZxV}w}$eeG!+*C@gLG{P9LS=N0r3rlJ=Bwx=?$C
zw(IOJSs@$4!@;a_BksjhaNC9hIBfCg2Zz+s+5`3l^NfkdqSs$)uFRSHo@3jXkD2Aq
z{V#~|_8lG9{s4eI8EUBByKPY=Fc0i`iUGD!#fRS;XBS3FqNsDZ@&=lq@7R$;hs{XI
ztvQ^9hc05s1K%^oUESe3DhO`ds{|Lhj2O<ILPO`i&2fg24sl168KWu5lIoI~8yFu_
zbwE4vo?-&Cg(uGCwNT$ffF@woH^Lr@A?w2NM+*>|nJ@&c!A9%WW*9{v5AHo_2O;j0
z{@6=l?{xWOG&BP9d-igLabKvhH9e_8G)_cf(i{FP1rB#=7=FqTf)7@M3yfTjuQY#n
zU>~JE=YmRJpT|O~%B;j+>QKXAmZdk3U8pITn>JjB-pE33h;r&pN;04l;GAU<Zd`7b
zhdDQ1;yoHt&y#OKjR+2kB?%}mW*3ljsShM5r-~w`G)$+74HUOs%U;@!QzsNDI8;c`
zDKSAi;ri!d{3m2hbDx|rOxP=zKyFB%ySF*cK2(-&RRAxpg*P|0I1S>}=qXDnuG5iF
z6?cP`z%vQa5e+Q}Z)H3*v`~Q=9!f~v8s!2#Yz~AnoP7Hz;ClqChiXqCAN+a@ps@j9
ziP`WI=tCvF7bFM>B8aZZRv%mPAO7f7_+*WopCKePJ6$}QgWxQ=MnAQ3E7(_R1Wsc=
zxM83EIK${CV%49pVq&J5^1L-l&ZZ$*c}#ckqOH26kTBb|Xv^uSVLz$2%Rubjb@W;I
zyngnp8jfSD`HdyCv0)@PW3(f*B~B~;q;1#Np%6pm57wd_&eE|Iuf=Y)@cuX;zg)4t
zRjz3KL?QCP3!I|W2;{dv*OYohz`q9a7m(y#4e;1TH~d78P=-*nmd8wktO^vH31&Fb
zsg!O!-aS3tvWrq0v~nfoVJ1veGQ-ssg-4TO$QczKT<KEnx>V%R_L$T${Y!gfmwe&d
zc~auQ%%%Qvthm@G$s))4&g@JiWfoEgIW`bGQ8E+HCjF-Pg{UfEj!a^<6&Bc~C0eLn
zk)}xQ?^>>x^ZSx4tg?}Sfi<BD#Pz;JN<Y^KHb_K&!N>7M>W2wN!V2os+<jkN1NEy>
zgPs&m^CR##{`-vgD`}4=)<LEZePF;yZwY(-p`$EI6yYOJf;%*R_KkmdO~nKqK#IQP
z7fJ9H>JYznAFV>;#-TT4G7NHU!rWIZL~%xu*5W6St=sM^odDU*z__6hRg@ZZ7RhjI
z6{QutKLmYRAc8jd3c5_Mi7Bva)$OEwa<kdXWV&v3wRl{o^2H_qtM^gbc?F5=&brzi
ztl2<K2X!7K>o&z%4Sh^!svZRj#zL8c;zsJehAol>Oa2-s^^`0d^$PEzxWXFqLOA`?
z(56f7d6*<HHWv`JNmAUT16_$#?G~$)J_qM(30m)!meYH!YjxK5b*QwQbsh>!kXizg
zsRBExLyLt&9MU(jgV-cq?I3k&`o@M0odz$EEx|3^&)vu#&tJty6EkOQ#iaYStLBbt
zCis#RYPb$QdbuAL4*Ha(?8fS*mn2r0%ZilM{r$NxLhZT`S0QIQnO@(DNDOO$KS-yu
zhP<xu#YQSO6jdv)I|fz%B!EHfRL7V)itOBIk>oCVWk*K&o@K9vtCWTDx%w+`L2VXA
z15o%E5qfFtnUd<nCqZIk`0v&53f<Dh181MSIW>nfNly_qQZ=&L*iCzTS{kySV@;HI
zNgBodgSA0k6#k{I3a(I<V2bs$d=;IOYbtST)nJ$w!fI7$5gCPZ%a>j&p?WfeDII=v
zT@#DE{9yX&L=3+}8FTrbHb?Nm`c1!oIy@|6(+olCDW^(I+EC>=rA6EzZI2qTI7*-p
z{^+9^nfcEqy)3~)yHVk#sh>BQwjKVLHS>m!o;6u@tpI1T=r&QZsl%(x>Tc<z{N<`^
z_2f;m_)4a;igB>)Ab@RiT3R>}>aAe)dP@s(6NQs5Ijq`f#8$d^+^*uc>cjM^789jg
zMziwrkJ@YAyD0yoZB78+vM;o_CKJi%Q>0d3uJ2L_$_fL_(_Kwk?}A*NmEKVyv~zNf
z`s6Q@QWdlFR4dIZV*s;9kW$hIrS8KZ;i10!ga3}Mv@@0@O7C3#Ig~z0=vuXyhnbtb
z1WOnLh$!gm`*I*D$-i`EAd`5+&%L(Y`stcFu}$1N6h`8(N_zcN)zp{CPEDKFx0kNa
z!JhdeU&k6i0tP~JWVhQzB>FQ<ot8bcQK3rQs?}FX9H|zk3KXOMP6awT&Nf1v&D79l
zF9%re=f|xczQlk=Rt+B{Gb)+{+bzs+pbrlU0&&wkCLT=pb+3G4n->2r2UEF&8-ai4
z*x&7^3s<Z^<}E>>f874Ee#J7x5g5f3$)B&Kuv&4P1dAO+mpTvrgDv5)mzMrTSMFg<
z<ikRvmS(8Yj|%4=g!GQtM_hdEzy6dtk1^Q{SCj9?T)A<GE?Da=rfM+_wuh(@N>v%~
z=5Q#M0#rfii97v`e|gMbPOzHQ><x2so!_K!XBm#l`H~#5;sZ%u<aY9_JZJ6hp1CBb
zm$ZWs+@)#g-?2?)hXjq<H+Xl4%!O2Cj!Z$w>6aHBi0S{pQ)%!)f};=IM*;-y6+GvR
z=<IEYpUD7z$T-RaOtJ05)01)1*9EQ&IZc}pSh3|J{Guo-sb{ZOL|fDD+<Dj!_8;1b
z1#c<#+?A=#?vK!*PX_;HCzR|Js)+2Hc8q#^dgo4!m}OE7_~}oq6R9&fajEF!rdG2P
zHKamJ^cDivm5BTbWomGo$p?2JYse2(mZOSD&<GE#>Cr<RB?w}Aj>N3%+AEk<qj_iQ
zDgnvqqe`ozF`P-44QlaTd!N+c@$E6)6BPES9@QCk4;G=~s)<+;<xp4|g@Kw`NsYLg
zpv4|7S6Cw|4}?bJ!WR6Yv_yF~oFRKch}GMDyJJ0aXD56=L2*@qwtCf0rHt=INzTVS
z*E^^P^^n6hO!EmUMU0ED%si1ooVPVf$Ni<2=PU9B)46J7VnGc;XrRV%%4`PqJ)<uo
zdhs2RG{q0eQ(t+k^k_DpKHN*$i+V0n^>CerZJ@7i*2L!;q-!BYeC%DN-UMwLTQ$ah
zGtPhX=kWE(0u{58VKF~TO6au-Q82=h2}??g1;ywR6@1Kt6IIM1iJnnpjQ9)pVdb&@
zau}Qsj{Bgvs@W%!vY`s(&J|>LC=X}ycq;J{-^0d3+<?|W5+HT4m0GQ&M6SWMvyF32
zuQFNPqE??r_9#|lo&}9Ix;ld`%&Mx5nMgi)wg1C(Dj4*I)Nr>C@7tqx!|I-@1Ed_(
zz&EDl@(jutMZV^ec{d<&JJD(*=%Z$c_VAG_%0sTwe<Fj?_FQK6Kgso6k?~ar-~C`J
zSsqu={9W139r9!Ea29*7ZY@?n=!M{O+8UP;bSNzQah}c;^0|hRV-(lmLn0XCSb&lx
zs4T!ZpbdcQ8QU|CA&@tjEYM2ib4WB%t=Z$Q1-Aq<S?%}}*+SF;WzoW>Z*m8>!)8vk
z^9Hay@_z_A{&i(T9!X`8nX7#hi2xjDsxM4(My}B0rGd(8bCSMFWyJ+rQ1k*rH!*Ah
zi(CU6m871(m1hljtDwMDDEy@^K^u0NOl%vTc>Rjj5Z`Q*Q2e(Y7ZN{;Amz0MhakfP
z@L7#rK5p=ed=`Uz@~djd#M4wtFO~+LdfeGK5>a$z7Mjb$FN$Kz?Ei?7a=7QvMb&Y@
zI0|TmC#Q!H-aFrG>AhA>d1iJMtxflK6ZW?HX4~5m<mV6ZcsJxdXx;wCx%uID<il2+
zl)F=blX8XUG_0j5d~5j;bIBzTPWyex87kU>)9F8?NVbuN*2R`C&|{eV!kCCRf2L~G
z^OsUP<EBy_5NZd2zcVUm)+;<A^yXNFI8+P3R)jcmkm|=#Xj&jGAg$J1ah{Zm%Ps-A
z;=$Q1Lyf#gpP16ouWl+iiKm8JRWiT;9r_SBjd)?z>4lF99O>Dv802DE6L)#o$C<)K
zK-Lqu6)d6_pdiGygbeusUAqYYYKHL;u!U+TWQ}}vX$5vx$g6O`si8exdbh0GIskFj
zw<K{m3b-#td5rrDl>F0Hx5ZhnHz~%K88<aJh4%E8EYn+>H8aw+x^eT*jkGsf771DW
z0t~JSv_rSfuKjW!iig8*?zCecN^^5wc-vmEM1g!v*#mzmbL2UA!K9VpDa5%X#FI>u
z)c@#?w!5B9|2L6)uaBpWYm3|~K5HJ&B{|vK!kLjG<i0&$b+X-c_9Jk5BKd?Os^0~i
zq95%U4~RY4@8D{_`h}~LQ$K)g^1kVG^+{X$qdZa}p<nM;*{<aJuG*s$kN*!=PTTJZ
zb>qpKVdkUeAn01!+8|{LLn%IHtiIN2UpA*+@(EL^rz<!69Pt7nWuEQr))@WhNuNqK
zxfzKJ9}?Y{w4A%_y{5D8N5>BRD)*yGIpE$Yr)x5+#66A7)l^v{VV+Yb86KJ9%9i23
zyo2_ck|cjc`Hlmh)*q>Y<-H144^>t~^-rekxVRtg#U_c<vPYzH7f<%C9j>5c_+c77
z3Gi1)5g2$YW=J4Nzkzzps)nRGo#wCNZWo8>1LcS!)>qWL4B(LnkjI17#<E6#zkUQM
zf9UilJ~c_4Ctu6kZAm|sm?4}@dYhlfzEz}ir~Lt%gRymks}GAZY5y5O({0*+jg`To
zY1JJDlP%2z{H5o9n99Z5sKgTr9rI$Zf}$DtdVq=`?!(K~;Xijj`(@1U>qN5Qm!as@
z+cTBheNb!scH5B>QjVd=Yv0@(K_<lJ-dbDoCpn%`Zc)t|GXZQ;lmN$s7y0Dl+)>X5
zBc`#4M)T%r`xTYX=e))$`r7ULz5QplzWzQ0z+LuAl+Ay)wy|T>vOfDZeboCi{#rwV
z{U<%!_w~79-EPkoZ_hM$1<|f$Wyff&l6S@){S;x!DcyEeXS@6Z(NElL#_RTO>%^~5
z!*uU%qYo#lhGtG9!8U)z^f%`><<zAkue#-y+b3=Ef(gT6)UU5J$I<-Ay@z4@prQ(E
z=dIIRg3+kgW%|bE_m9~0up)KWPTkCmHf{=H*+}2VCFKCVeE2Z9y*mcwwL<^UbNXL>
z+hb;uCk+U>pwFUx2H$-gI^F|90hSXX8FC6PpZH*ZtaxyAd@2ui{1E4NW-BTnYVBed
zg&y|^ycEdJX%=V$eiUR(V;P@h%^HPE=gom`_^thBLHN-X0jGfl+VfUOwD@rX^XBu~
z@A<PST{?85R}s7B^QT{P<;({SBlszkQg>`oZfVDKlSM=Sn$eAkyvOjosUrV~Baxv$
zWD83Q@!hfidW}t&{H8zbHwJ3Ktmp;gBP`?#eMc56DjM5EBd5mXW>4s$bm7wn-aQ(j
z0IZ=a?E=iRh2~4$g>yDTXKywlwY~C?V+^d-H%de2T^Ut0l2xiGOU0mF%DKotcyZiS
z`lskf>IDF-;2z-svV<h|Yh_%P8MQ*_-6CQ1SQVYHg82sXMhnk@pt?pL@=f+A1Z+(|
zvGbb(P38pvRYK0aN+4c*)PaErR%~HpuV_JNak54n*_Te#q}SOT<FohRn#m{CPXsID
zXto9E<XEMmNa2<v%iXe3cO+Zcd`+v7R~uB%N6+16FReXl@94s&6Y_3Iy{1czzBRIK
zOmVsK18*7o!szj0Gs2eyOJQ4Z8F5CpXfsL^&1^MKJw)<E4UnV2E}2%OD54ms(xaP-
zeOw$%O1JF#c2T|A$%@C|VV`0jg)ieH^Pp8#tB4%%WAeWRPnyFwaz>qYLv~Sc?MY<p
z2bK95alQ48>WE1G%F1v|j`;k}v`bMvJ1WrDMIcMhy%6OmLu6t}Tj9jcAR9?|aXsps
zfMEy|k)By^Cu6gcWXZU6crIaBa3VcRO*u9+9~=Beu)b_;x_GU`kSY}ZO|`OREX-Eo
z`q8Ppawqd=rP&!F+?+#^YDA%KV8<w8#1Cr+1`;Dujc@)6F03i(_IRLQOD*_TRm+ta
zm_#_9&oyk?a6LqF*>l>ep_jFjonoCt)kZ$?+#vv9(NTw#j&nfE)rz)qz*3Di6}>HZ
z^}v9WXhHT_ld*hY$e|Q<ZqM*1p@9OZJRN<9)+=`dDL>Ad<=GjX<ZY~`YP6;+OIJ5`
z%2Lq9)4_wv6pj@)J`<@Jk>v>Ps!W=X3~h0X)B8c6gbRmAsyDJEkKKs)PkW6S>h8&u
z8|o#zbxbkm(Z&hqgzD43PIGin80f>Yx$YfUxG7>SUSP?>yf)eQLkw$OV}Y@6F}ui|
zSU2KP+9kZ0u6f=tH>bTSG+lAKMGpy+WAlUOP_HT59}X;kyv$bgM4XTvba=Dmh}{NX
z>*h!j2_lAoW(&@`F|dF_dhzTs(zQ{@r61Bl_T%pk6WeIkhKI2Y)omMxpo#@YYwHPZ
zCRDt=%9*N5uc!C!qrYE|^q*dJUr+Y`NmNa`VcOY%0|8AV00Ghe??l!AH@z~pw=<)&
zptH17Re=Tq-AgXj(37svaP@!%0tPz=1p@kiuO9UW=S?=WAJ4B}_9Sb9bim~|FN<Z(
z#R5uq5i@~JtnNJ*F|@&4#GXkw`%15EcN1*;Bqf%uTjSsj&%5P!yu7~hEQnMNK<wi8
zq6~V~ey8s$ydnADD$yPE9c8e(;l;nSFo)tK(voD$u=2FW>ie^m98f34i}~P6-i1Kn
zZ&c(%Rp2eg7~x`Tg9ues^p+YF`=2!hI*JHOcuG)Qpvh*-3(O#@Lk(MYf!a|hr@u%Y
z3JF!0_s=PnkpLMWx?n5|{TyIMX~WZJz@eN=OK{x*lma06!5G%~vA!(wX%H~@F{Ti!
zZQQ)(%i8gjiBcl4nTtuW$}?bpr0-iEvaNC}*k?|C`0Sx#1S{JKk4rMSS)(1WlzF2U
zx-~1W0Td<3K!k!Q<&$6P3==9&6>e1y${WQzCJUqUxCH5n`OTkaxAU)jdI@%S({5hH
zlXwc0iQ~cO8B`JA`36y{StLSMSa$o_8*(*Ed~d(Xg2Zi-q_)##Pl=GnjAq}#M2tYx
z?H?%`j5NSn^6g)p>$8d6iqfJ8Y)31#YA-PmOzI^hE+Loh9^Vc3dY%gwf~d*@vT?4H
z=eoVL@&dL&&G+ALb<hpiGU|J(Z1(yFhUC}jPJvoBP+rab2u27q>eu{o7P*?I4{Q4h
zKD=uk?|XMAci*zhvHNI?gRZ@b>1@KAA>9I-4YQcHbJh6spdz!Gyp5dj@4dC6@{{&=
zo?p-~!{m>9r!M}I(cL4BlRxerJnb#i9a2m>JLZTRiLquYsxD)pXCEbv7y(BV639L#
z$AU<hN9vtAojoD3+KDk=3<FofsZhMjW1YMsMhWd(FU!qU+~gG2$TKce#2%4SG_xy3
z6V72}veZQHIN~mLVR)zyW4Goi_T6l7I9;scQQTOg_qP}j;)GnlA*#aWnd-}}B{rj~
zJoL}8KrXA4I9jOS$8}<NV6T@P>A`L4UEQ!IiA}i|h?2P`QJHd>2F??_ng)^(MJVAN
zBNB=V>wtpCn<nv<nQ0q>t^uuGpX5+_S?o8;6*fx_@JPoOd7hVf#psOM(D-(QP)=TC
zC?OoBjBGXx-X6p=Zfvo_uZBq{a)(ST{a#%)Jp6I>4mPY`diC1zGF2wq(JSA>dzDIV
zfhxC*!3fFWPRAA6$L$WN*Dq|vv}kcS-e_t8r%L3WzOET7Xetut*FV$!=OSC%3SX|r
z&suG4?1x6qMa#~qck5*C))x-crj1|LAH#hUU2`>n%gO5Of#5d%41f(X#WJ0>E+?Ph
zgYq2DH^JZVk^4h<8(L$3)K~qcw(;v<cIeVpP+hic7eAc6drj)@VFPQgd@+~{V%f0u
zS?B8EI#=s-wf^qjOE1wh<B#UY51&R>TeNZb(;G4XkI?8Fn`qS?6;QLbI>8>Ham>p3
zQ7*DNi%sNlw7J%squ`55LJ1p*;janYscP;b7No%@@@sdm&&CBJ-7UQx->-5In};-k
z9hRd!r-(v{1E81FEp&l+;Y}=PmRXcfssvV1EL0cp1FgzJO`kAuW4dB4Ffi(Q$n{M<
zy>XKzGK25AGpTFzFG%H3ic=3Tq$&m&4yK!4N!9sGdXEzEd4Wf_zTYhm<bEEnzag}Y
zAKxflV!Scm(dpJ^*TyI1H-LuuPL#6fCql<5a=5Y~dMIVn9jfq7iUW`Xrwypp-Q^xG
ztVHM>es}317*0##oOKt<;IvNjbCm44=Q=lW(v7WBwG&d_=?q1yag<$&Ihrqx*6Z;#
z&X50u$bL-s;3OfoiZ`;_gVyXr1GV|+^Y{<1eOe&Sr0%n`Kkei+7O{oprVqREP#8|`
zlN#!rsRFLXmaJkQ+5fYsM-~<3*nj~6Nx}S|Fj*%<JCpy8$)>8=+8?pO{d9l96oDhS
z&6C=O!?(XM5Y+ClX=H)PA%y#(pk+t4a3+yY{Ig>Eyel?2tF32;l(mZTkw`=ob={)1
z7)qsD)1q;LHOJ@w`SbK~v0=|JgDgfmIbi~1T>CS)EL7jvu~-J$Qxq_ai6Jpx;MZRx
zEP!B5pp*i^TwxN1b&V&ZNH4e_A|89FxDMQ|{)^@VtE5o@(}jcWH^ga?K>rw;G^~(N
zRhlVby9~10;3-~rprwEko!|@&xvAXc$)?~!^wP6I@Q*4_&M<bSVk%j)3`X@xO`}j^
z4}@K=uAQx=-<_L!wW|06UJNCd6n$rlV%vrsdD~Rba#!stAY-ZQ%mMqYh{I6Q9s{to
z%9tP{;X_2$kzlE43Y8x-1H*WA?0*f5ovtgYKV3Jao|Z`Ie7l<CeTIu6JypbXTOax_
zZzQC+n)rQ_ODr?evwFo=8JzXeW+x=A!{_>|eI^0nJ02myNm=oQH62sCXeJY|&+hnJ
z-d=nmbnjDIN?%(bJ^?+bRd8AeN{Q6+Krj++v&qWuP~Efzj{eof+&Vfeh1zm>P&EBi
zr?28JFvv}dAYE0GOwJ)-q^WH?PoS(SlQ^?E>)gpe3#*3d#O+xa!1CF=t!DOn;tf{c
zQa^KwF#2$6jy=1I12(@w$(T%OiZTgy(QfiM%{LETt5vpUGHd5L6=>5gw7aL_P#;|$
zDQjQHAP-Q?=sIH3A4ZIhX#Z#E9sG>qw@7M%Ubx#g*6pG1ZHwhsEjz$@8T)Nx<=k#N
zdyt&Nmxr5|+jY)hjTWzv(gtaes{9pRPWaNwGPK5F=+w3#kM(YuGHOiHXC-@7(SLmQ
z+!@Q}=E~_Wkj(m{h*e|ohIWaYx1AS_K@3fjBEJz$2qOOL@zA-v8}F^|t7WO{{U6j9
zLgVe#F;pgWFjK1_;@OKc3OL~c)avx@4m=x_M%cLazy2A0Ga`i^quY)f8f%;mL8ufd
zI`f*}8fTV!R;A$J??oGFnJweh+?@Z62RFU%#lE6#lDlyseU*DAHnT0tf8;~GW*ib(
zN4DQ|owD=$txtSgDM38VeoVeq$v*?K$u<D8zedc2!)ZPi@qe6dp;2s1(t9L%dho}R
zk$Qc(=VK17-K1kkvhI_@j3>Y0raFMD-G+=vP0G~5Mnm{7TJUEkXSCQMF0#*`gzT>$
zcvd1B5jcFBV($Yne)-%YmXqI`ZcBT)lQZ1+nY6P9(iwA!6UZegf~Xf$<Si?Y!Rxud
zWhnchh4vI!2aAB}5Z^}`=@p2~(5~3E)|q=$f$t!u`4_L|HWq9}>U439gJXra9;X2F
zwf(ROrAH}sXzaKehZW!{a35-=xC|F;i<9U|lCz#mxm^O^!BHM|3SyaAML9~#wgEJ(
zJB3Q9iYv~ldO<jKGt`+}R|;WMK#5nb#FVVP9}Yg;b-g>f^OgK|J<q{j3ZR{yAWQ~F
zC+@?%%qGbkaYh!r6S6N{9qQkEO<j~1{{sDIDHBGZX?g?#0x|>sKb105V-t)2Udm+S
z2jqqrkVNi2q7*v>NUsw>Awv?Xsvt|C6sAIrFKJp5jm2NH68gsMf`=W=_joLiI|s3}
z`DX`mSc)sJPFpMQZXfEP>xnyt3P-f>^-D0ahd0A18UW~@N)hYICHJyD<3)#7u|&Ts
z#hrM;@A+eUx*c=}S3v6Q!0r!F!|cMIV$do*G_oV)jiH~5Ele;VPr?_nW+?|vH1bcP
z%@QkS2k<+l9MT^g>8gCt9%-!e+q%++Zt0`>LT#>Oj}77?W9PmD;-ux7;~xYkEwe)A
zu#K7r!;`yHj+w+Q@N7m+Rdq4TZ7!kXVd*5Hzg50L{&PctKu_9)iGhG5lK)R;2S%3m
z|9wB3b!?rtIFf#D^#i9=bV<^UvLC08PcG|BBHdH~q_rgE4=btwio_(2LJ2y_jR(71
zzfV_o0TdDesk}<pn^C;R&kM2Q1q&efJUo1W@hW0*`ntBglG(qIvX44%GabOksOix-
zyjc@BTjUV`w&|o-mka9X1oYJhUpA5OV42<FsC=C>h(Ltv8SM^%BW^1!4!c<;*wK@E
zO(^0X)FAr}>L}h2?$#zf4U}@Lw9c?3yWXH$-W}81*<!5HDYy-$9r0dMaOqTDkBjg=
zh*$v4O+aY$GK3NKc=7L$puYlAAYIt6GYiwxd87w)5G-TTi|g9gO7vhq85@+3wu>xM
ze0h0%{QUVL^I;?p@`E0}lbLd&&T?!QtB{XN#l?HwzgWCR__BKfIa}(&jjx^-?BVb{
z1GW8N;(H7(?r_q-!~6MMYZ)%`Y<`mUoJt<RnsawFivg_Jh+)Pa%J-y|N1+mbv7JH3
zv?ns|XXDl|HB=Xw{2~_{^i=%$2qjP0o5nI<Ui`xBC#AqB*Md6uT=XtjyQTGs*e9Su
z^1j%y;J_KCw8Vbs2L9rA@GG+;tY`mVzs?o!fgM~ha+zE+VgJPAwmsjFIHIE0VPLQb
zKAnY$!Or26m$5RKe_uE-;mc$G<b3lm&(2~PkRCjSXS=OWUIe6r0dujteJ1h9M!Pb1
zXJ_Mx8@SHRvbZ!o3^gP6g%#5W-GZEpfF>0I+fUHgXJa#9#mkWWJtx`Ceq)l1#_V(1
zY<`JllCIgoQp3FqNFC9$@btIz5-y*#+5T%ZOWHow2gdHz-bHQc?%JTpppvTL|5x<^
z1b5AM1?LX&pwq9tBeA<`gb!zM1z(PDN@sLKu+fY8=~C#B2_cCUFLwH;dw;QOyzqPR
z>TM=+d1my3df(++#y_*kGt9k|1!jy}PLVPC@cs<;aW#hR9@8?XEhd-?@8CF&o$s6%
zetCWU2j-OYIKqa0)!LCACo@UAxf9a$cHeC?c~GFb8W9B2eaXgTJoeHJ@hSCFGV)4i
zOqGAn0$bFcbNh-&hHZ@E$a^<?mXtO2);ng7<A@l3bXf6jx4Dc#AJy%z9UP`G7E=zN
zW1hwzLJ=p4UuuA>Jd>EnY^~~w6L8!tRPJ{h7P8aVa^ljak!q#ofQ=%Q163@(cvGz3
z$&(1lbu=r`zWhF~L98aKQyelGxEvyA2Q?Q4+DJZ`qkh%3Rjc{(cLg8Jlz7abU+f_h
z54h2~0&a4D4@L={mrC=taQ4Qj+@0-~4>4KfBo%*`@zefwa3Myle#*gL3|=>@Oz+k9
zsN}Lmah7x(r3>(cjXdCv0M)tPI(VlYg4USx*FNo={#XltkjFF2C;h3`@f;5$XajsB
z+|izg4QoU0UWU@LyEW7WV^0-FegFJEC~$4m?oqE5{`qG6*LA?2qQL*bff)`MaB#`y
z-q2iV1ydxDuoJ$=7?ZPYU9VM30Oj(k$nHv7i5)cDt0So2?xuYo(#5)2=7~3eKqNKB
z-sv{neo8`9FbEjAu5F6eIjeQ!BdoALS;Y)Rh3vWkIVE=Z8Igw3v`O-6C<^-Vj_YZj
z*zf7;y3)gEmOdg97mlX4-P2#6!nbLGO>2&+yz_=WcH)<arP9n89*FD_L!K{URYU2J
zo_meN+~v4h-%Uzwzj-z*SJ0PZn}v^~Mj~0~@@qsMV}QKI`J5e<koX4A9slPka84@y
zse2ZI`zN^;yP+7}ljg-rM%RLc^;5t0<9-*1e|qDC^MsgEDDZ@P8a##IMWPa-KpPwi
z*WlZWVA%p9P7_G?$1`?PKz#-aceS<B)GxomImU^4Pp|1L7B(>8j-<b+-fq2$3Ys9s
zerSnNZWkacm+N(#79?<5XoSg?qw)3xY0Z%HGNw=XZH1&#gu44DFgp?64nsy3<89j&
zjtod#u)eSZCR9;x(IUQ&H)BaWg>c4@WAr-Y8|bgA@8j7CUEDx7+{Nqqu^60Zpyz`(
zv8yD50(Q4HArB4v{=Ix_pR;5zZ<0AyO&voL!qxG8A;suX6Yji4$VI$8Mxf!%F(e6J
zeVEYOWQ?`9-{QL9`uFKuuO-5?&4zp65!NQyg7T||&EKZnZY|vHXR5~z3b*`jhxGf8
zgB63&t2^vaRAnu7q2f9$?l!4dWXt_Q6Lbg5_4*3FnO)f;WE&H|{If!^eg>*o0)wW3
zFFOe7@_tFSSHyF3`>VlqUth@ZX}6zsL7<5u4#=trLf8?ABjlI@OZn-e-*?%v5xs$i
zz-^xiU&78!17Qp_W1xxRx_PWN6M>=@j3hI~uHyn?_d|&<9qd@sd~dxOAbpvY>=+t7
z;UDH#(H|PDhoyk<%s&lbpN(DeOph<0%+{NKxhk0Q?+nYv<2TZpZQ3{2Rx{%)^|37*
zFa2qmZ>+au##|(_$(AOiD2#hK1dM2(PWVoD)iucd{W1_o_r!jk?#)HDu%3<*ew}mx
zxMJ+cnnUOqk6J5*UTnE?vVT><hE}l;xOB?A=oMxKL#mNrnWrLqIInf(s=5@jwuDvH
zWQ+M01@W7qHt}EYtW?aA`eg&uGz0a2N%py9*y65VKfNE=0TDc17~8=jv%^${PwY56
zi(dcgKKT0*cBUGK9n$_<kh0^LY<ewf3H6OJa*%x1f869@=!W*On^g1xjlEb21=Zlr
z7a|K)VU9a3*-8kuGTx>f@wOGhX?V|O3iy1>g`{SuOQu&<e@$wYt_qZ1Wo2(^4lZ7N
z?2&<sDdyfCGareAIt7N-M_FQASPf+*x%ni;f6~PZ>R`XCr5t|i5+`U326HD%l5Ky&
zwE>~kc1ON>zkhMz%RKl{x(8wYoGNEJwBWhi%j~IS&7G;v0P1+w<vvAX;1_Z`FC)MF
zi7vw7Om*5VNQ5$R*$(hVJ%{cBIy(sct<`!ojQ)(uBoveHH))x~vP-*^GY+d(C=)?=
zytIJqLckj&G7qzDJ_RcOx#0!FTmF3k<^RjuU|&}<T5Tj6!Hwrb8^i<?qFq-EVv2!I
znsAnJ!VJE`w7A9@9{r|@!QiV89WK?)RHSefkUdJDreREU_m=`wtRoO;buo5T{|}=U
zJ+qtb*$W8u!V!aF3SY0D8Y_!xNGf6*2oy;3Au4v#M-=wxbjxi?^c%f8!yRW&P$RX<
z^n<Ni0qbf9>njvB_iSM!jPbo-JU6%rbVL~jUr9t1GK;G(J~|w|Xo^8ejuGik5_j~D
z-SX<KN?Au0zXQcB+^-rk3MWur^x-(0bF=_ijg}_tJFFO4Ddz0058E>JSRnnSX{B(f
z&ug0g6^YIPO~GA<aHLo9R{gYe(sSEj?;D9b4<9kp9#tt=(TsY5IbFCVa1rCSA!4Hq
z-Ge@nuP33X04O&&gv1cRPt*u8`NnVjOdqK0_VjS=zc|_UQ%+%RABQsMVFnUW@q;Tc
z<+}#44CL3V-cF!?b}N-|gb1r3v70);bQcmd73qb<WIlEyls({0wTBMUXdde@+wEqj
ze`t3&LPJo*BBY52obzq+0}SBL=gIVN!U0^Ca^)UQ*1ml_p9VXzWBSLwI+M3@u8&Pi
z{>{HH49?>7ELrTX$<t|lbeO8J=Lnjd__UHXR;JKQAwtIqyj?QJCo!!gk3C7TqGhF!
zeH2W3C#q?@>kU(_vqA@|?4M#ZWrGiF^C*+iSK5-pKWL766m|!t$o;)5yGK?eUtgv0
z5<Ha+-uL&`72HG5z+HApN7JUH6Mde~e8@|Jfiy40Y_s`g#Ce#*mczc{Ta&xd7GP;o
zia8mlkQJuhR)o8)qvK)WglXT;)FaDL+R|XDqeP#rzp<14dS~hgBVuweT2w@v%p(qf
z&_+>Zp46z$(~+uL5L875*1#q0X5el;a2?+5)7Lk-?}e5CRqh@53r!J9RzuAU{SRa3
z5G6>oWzn>4+qP}nwry70wr$(C%}U$0vuoNt=>Oj&)_Q}OMyz}HIa}hTIvGNZc`}<~
zsW~$B8#Y?!oT?iX3YR1hf|;=ckYQ@McuJdnJ6JB2W;g3`?hsI6a&-tj@L$}~PBn~%
z7>$JGT2;bnpqM_g1je^x&q`@6*;|H3=<?AI(bQlEM%?9X``0MOK0bq-ItfGPoIEDo
zq-~Ht$`F--3Z(snTqlF*2wKuWL(yno5^)N)75WYUDU?wCh(qg2ZOc8Dco#M^J50+R
z2h#X<8wgm4fgDb12R~U&N>^B1Os!Fdn0lbX2DQ;I@d?+$SVxmGXiV*ZGjF*p85w16
zuIs=PW#Z`Fn86n+W1y_)7j)#AYIuq~2kK6v2#8k}Xhu25=uM{xgHO&h{_EVSt;VyV
z4_C3;S`0-PAh7tQ1PE%*(k~C8gqIkm%SjbXu7E|WLb(POgc*n0C%Mc~O-D1b{6SGa
zMjTU$HiWgGX>w<)`NsQuZb-4EJ}|xV5pOrU7tiWt0g5d1oYg1k{Oz-d^*klgnWWd*
zm2AJPY6W&4O5YXgxQxd;y^`7bPpq}<$r4xT1tdUPb6AB}uL>{YDpSuIqiW<mN+~?o
z^9uuJr2f35YSS~!2)!M=L1n4r7eMah>o_vL8CI#)i^zp8|CS0hue6L-9D)q1t|>;O
zI7BJ7^^=2qibdp~&;pNP8skjZU+vwl(1Pdi4G}el3Oqn&K}WSh^F^=WZ-B<}+ZLH^
z=9#yiZT>%9Vl!`~&IY|UuwIY3lVM}|&CuzgFlkRV$0MCZwm0-MhP731Q`dhs-BA4y
zi(s4aGTIK`5r&SQ4|N^@imIN`Gjj)YNk%hhBroYzB}WGE&6U1Fgl4B%`szFJs}HO2
zZCSVNT~PfJ#IREvP$PT?L{RCC6k(UJ&>lPlpDu(Y@11F42ds50Ik1+wdmL+Hq(9S>
z+eJ=tvfQ5omN?cvFjsA>1gi}eKmX#DN?*IkQ_Ean>E<(*e}TBOQk1nhs0;GvzU))<
zy6=7px%MJJgnn?&aj5&)8_b?8-5Uev{d=XVPR}Md1Xodq=E_{Vf*HLY-_j6mRUhwB
z$-F5UYZYRdH$iPJHXRB*W<h!rme)YB$AknYs7l7aiv-k65lnO`7A#8g2&yEcnDW_{
zg+HN6^u$P^qnx5O$OxE(G{ac!&2$Z6=So@g(*|%>MvGvvzB0PDMbo!x_Fmd^B{4Xk
z>2#S+Kbd=GI%>k;bT`)&jSj80q_{fzC(D1mU(H`Wq9K-ngMb9L#r4t<E7wpI1ONug
zTh2hJm{SbsxsFrB%21oRJ+KROn~*~9A|R(62Gw3xA9>UAm~ILwqVKho@jyoO%&KHB
zy?>%_SqF*r;@F^+UyGV$Ux==g2J|PS6FWD*+;Zaw5*?yGhsWDiaL!(C!rbFl9Uh(o
zSH4xCF`#m*v~sJsa(5&s)h7OQrZt<FV~8kbwg&9E_5zIH1?k)RibINnq*>l?$Fd==
z1r)CM<NLK-dh-LbIw=^H1CKmvu@5{_epU5=H)jPQx#E_iYaXf612kGe%Nok+!~4Lw
zpf<Ny$?SjCq;{*Xh#gSGOzpKb`fj$YZ<Q|Qd(pNk#^q$S>JEre@u2gA^l8V@Yj%v{
z+exFH?B|zGwH6$v9!MwQE1V?@%kXg=jps`p*w-wMmnRIP<AcM%254g9$fnN_8|$t#
zeQT|atE|1~NN)2(*SL3%yB=1~)`hNqVhjGBHxT8|0e&=h+m}t-fXi5TtwEK)1$*o7
zkILH3i;n+V-RmB{V1LexbpjH7z>pYZ7bi{fuAg>95xVl4kSeT(N&<Qp#3fRtyFqMC
z3XJq$zvsrh=KJm46V86NJO0{?!Re-kQThO$3w{)4=BR}i-9Pn~(Y;r?CW&yf;+v6y
z_AbKrj`<XO?2g;O+E<4mevR!Bm^Hr)LTA$q?$>3$bLc-HC9vt$PFZ+~Q_$uS2Cslk
z5EWTTP-QdtWx?~^^Uzy{vQw$EVM!6{9v`GZ3Uo+$mD^>gdpr|YcM8^8@}G2g5Y1b;
z4=1H4f6Z7|{Zmfb*GSm|V?>jcH6;i7yQyr$a7hy^lU#x{(3HJPp#ys}^3ooI83~%?
zI3ZG@rz9(*B4-`u>xK43x>z~Ymv5Jwfw_?dh?2VIB)VF+xcdP(v<HI9Kwte;D?Y}y
zkw}KehXj&NVH&ga@0TU{YkSum7VCT#&sXq?<>HrGn)fezs?=H%7e}M>rY{A4O&B$#
z`!C6O=iOt-R(RC5n23<Z{Z<1{J`DUZtk>}q#gTIA?n$tgF<|A!hx>9W6tN%K6U_Yw
zkaf5Oj?TXRDRLJ_vi>NEeeIl~Tf5UCjctb}p}`-np->kFsY1g9J78pY-xTO&XqQui
z6f08O+$Zq3ZRE@f;#X$U^3PS2cHgow%e}t&*z97rOayXHZiKvbvQ&x54Grm%dyEgj
zQU#?)(PegbV@#SI^||)TJDenBCDCV^r64v}j!ZWR8rqTFU7a;AJ=+>&Y~F7P*&3_P
z+ily9OK_Xy$SvIKrmhIOspi$ew%QlVEYlXK%Xc(?YlVeC^-9AIRKwdn9mhT76m%)G
zds$)q@M-l~(j6UueXJ18NwM{4cXqf~>t~V^b?bu;e_tI4Jb(w;WT(TjB5ezW;6**H
z-jSq$4;xWMJ<l+pq^TKNqBcV~L1I9ANe&(R3M~}DQnH+JGT3ne@}53oSqm?4Xgm-L
zf;Eu~911JV0>YULSmmf!fl}%qjqe=n;s&HhwgV)SF3#*-e%rQdx))nCf2UaVPy6QN
zakVS0I=pARGI{i5kGr;}Mu|!5EX8Do0w3j-ZA^PcNUM8;7L%uI*07_}C_O17(O^+o
zr~JYMSyzgtqGc54@T%o{We2{5wPLXf6J7K6>h?p9pvJaXCT!-FHh3bmC>OX;_J~~w
zbvkWl3m@o7nOdSgeQV~A2#v;tDb-4G|H#5UVQ0raRh6T*ORfv)O6Q&W8qoPx%_E8H
zPE5IG34-DM=NAT%i@s65Ngl;`fUid`%S}u2T+d~Xsz2EdzXQi%9T@$@+(<+{T%ws1
zuAS}6zplC^|A&nCx_qqX8uFMBW8(yL&|EL*Bk_F{bN_(XQ~z2h(<HbR^)Ns&PyAci
z!>v1D^W4*zoRbdhJTkssWoI38bWKUCL)b7lHQWm>QJ(`rr*pJKHTLUsGdatyVzSej
zzU0DJbPP1qWH20u53jnSI!lSmOs(XvA)NU^H(d#Ii|Zb)V|?fZYqWc=`-f2_+|)Om
zP`q<ZVAZIn8Ys|S7bhnog2uQV1>6>Nfl7=p#jA)&C#qm{K;VBaMQ8GfEax0leKp8j
z)JP@bGhyPePFUZ15qp>`BE91b)n1`7`oc_^rVm5-ejb7!t3L|C7oL?wjd+^d)vK_~
zA^yiJ_u3$tG=LL_?y{HC+^FnMr~)%ueDHC{>l%4eX;WZUhwq($SzSp`b!w!`gT@!p
zHH~-BMl~S|nl77_X_!FmDjfi1KnGIOE{2o{y%OQqT4kzISXPBAW@%je&H!o_v?@VN
zh6{y1`9ZG|kB&58^xMUh@On;3?za|W0=U;4Q65j6;de!Bn0q;mJAWHsFEP~1v|HF8
zh@w9XrH~2r+(3odu<Eo*5`@)^qvh5%{EN#SbZKeHnKI|BAQsLfk};9o6W-C?le4@a
zMy3KDWoO`W=>(drf#huaseJFiiPdtAh;qg3+}1_$uP2VBjGklF9vulDI=~XTQyQX7
zm+P?{EjS;j952LeN%+^sr5yMV>Bp)3UQ0FA+^C++r_+7Oju@cH`~(-TR1+;slWwZ-
zCSuqxQa057uosY^mN(NT_Z<-aZG2)CRD4t13Vq?Gxe&nm?7m=-5Zl+^8q+ZKdMb-c
z>IjwPVecD~asc?%J4BPjRpYBY9!#-**CKe#&ck)g1KKrH*Nr93dDan#82MC3CmOt)
zOTOnW!*qm&1*=|$HDU53($n-X44xa-1U`d;d<Wkam}ujdR+o-_pZdrm=Ca!0OB5nl
zsD72?iq#{hE?Sc+vW4xGQznk-<558?tF=`xDn2}OZDjh8*-%t`?XTl-lt&VWJ%9#S
z`|GRfV(mqEYh=z{`mdFfYx=Xe&Y>_)H%+kUpLX&M0|{+y$EmEu6=pli5?x)!q&2mY
zrxY;}u_0y4$?aK5gHh_rMnKfEI+{G9I&u$GFOztlA_zS3&NbuYSG%ioSHzCsC$|r%
zf?g6u^xdM)_Y6Az7!DWQB0%LjN)(8s{NHYz&K>@H_cG)D^;FNLrZQCb*KBmBffvtv
zlujp82@TTYEZ$)<!=!iPIf<fI<z(`bpZ%kgGZex62hnzviEv17bh5&Op2fpeGm`aI
z0~^Qk;xkEfTLJqH@63rI_$D@zrG=5Fu&>P-V}$`hG3Gsz%4*(?5D1n1acC+9H>}ig
zm1)cb>`h}#Nb59>TBF?+3;a^^qa@aZB$y3U)h@?`v>^qef@=ydwYJf$7`=VWD5c_M
z!%l^&H2Ya93&jAm>l$Olq7{>dO@yB1<D$*jpDh<|p)T0uZWx3-@W?f|d&Ri=&eeFa
z5d$0=QB_oB0$_*yM{=$32uqJDmHSMc9Sjzc!1D58Hq&xOXc#5iM$Ga`#k0_CH%fVh
zs#$|CM{g@#Tho5I_%#?jY$&kEdCILLMOnI9qQ{3#O4B*yDK!f?rjkB}dBM3w(aoii
zkT_Wf-83@77_l%pyS)(knn>JUx#uX-pPWS5#Qh+LL(^=fJlf&PL@GeMOjD8v5A2-F
zCFmU=-uBgEWw`=XQ1As#i~Fh)SNk3bJ9L87z);ANOlM^9;0>!b7D9udq5U{p2SXow
z*%bE=_Nn!nnXa;<u|^ZL0nKeKk|*10_XAVr7bX5~-6<=FT(hQDuodUhfd7531x4IK
z353j#<&%Mrjh_4j-&Umk<8wkyC9pP5?`JQ1(O&DHfx+0v^)5tGHkt}keEiU>Wj2ls
zY?%fTsUlQnQy}_9l=n{*Ue(PdH~37DzB&2@*(+_Y!2r;|0K<>Ud&c4HFDlAmS0W}-
zXuI+U+cF?a%Pzx^c>gLFKV(3$0B~FHTarZeYI4**@og5tB;-jJ=_IdR-(v=@rIc=~
zmKNBTc2}bgtJ3&^`n1kI0YLN;x9;VDzs{?Bzo6HGXL0=J;2+r?YVxedb=Fy3XxIzM
zOA~trU`3^-?$FudDp7Au!i=HkYOqtu8q=y+Ftzr2$EM9w9qd4d&kfln2I$AFse-V-
z2CV>#FC04n)8ceNlhE*J;GI@573!;_K@v6)jOeZwjt#%Bko~oFR_AWVZcoS7IM!Rm
zOizSi!}Oa`AXB_D>vG&i9|qzQMf%Td%K|2hU&1alc-6B&Mr-Oq;H!cl+maKk%&4k0
zpKK=h0iJz+2KKWAH{v7dg$QI~l*0Nq9lNqo;tSn|`C`bHs9*PsDews$!<`_e;kWh@
zSZH4peacta?gYLOtdMcfk{-0?Jg!ytWmUhY)P35?OQ=O7#x&gL=|c;p4iHt!C}yA#
zLF<TS8L$!gD8laBz!}7toaP~TyPSI2_374X84JpM-p;#0;nkjfwkR%9(%eNdN0FRZ
zI51#v7-6;cVVg0Etf%YWR{(bLUhi8AUYeiDOZ|F!0{p=2-T)8+3Y^EVKLX(=_R_mM
z{LxNA*DcRw)#@+!`J4|u8n&kUs;H8J9bEkP3xBT)Fw#WZcxmxIgx#iodpOZCo%fK1
z)c%~O`R~f_#%#%tcI-qU;4VoUM%M`8#)8}Pbp$KzQA{oY8?Jlh5lGIhe)7;Fwh^U{
zX!&7|<X6gPl8~$pbmoZW>E0&5WKR{Kw1!GmQ@Js9W@GfdBZPW}s*KH-<nToTl5>Ot
zHmA!>%T*|7mG-wI8VhORr@kTm$gf6L6uP}ZBcOM@b_>Pfr^|p<E8Tg9@S%^i^Pcff
z%J|qN)1qO;hUN^Ee`+dy5bK;3U^Jt0j~Cjy8`>0zw&c{g-^2s;9Tk&2PA)vmucx8q
zA{}maIWzs1GCrBXZeQgX6m(A6hqI%+R}up1_+Zx%go=9a-*m&%Y}On!@@~ERLwYYz
z(R|2O+wjmqz*T4^t3|bI3w|Pa3c3n`?AQ1At+dj$W4t$hurW<gjpu-O9QvsEi1{8o
zS6;3}SjS9<c|{G-I!wVeh%nV0V(S@-y`J4q9_&A1-5OyJ9An#GdR0hlDY$WW2Z4s~
z$qSYZ=4@ZC21kuR=Mtpb2~y6^nV6w*ncJBZ*S_p7prBluw&bF-D%LKit(D<+9G2Xw
zc<t1k6-D@hIl83_sbhR{WV>QAbCC|M`kC7N;labOUch%SyhfVh93Ygtf3!#65dqKG
zilttnwy|3igfiy~)&F<0JBDX5i(bF%$<7$uRu1xBehvoDNc6Gq-?+wlVQTk3!qT@j
zrY~~#%&vqXWjDWrC%5%m{<KiP9>VOZFL`S&=`*|;9{<_;*EE-^j+iKUz=a-zh7%7=
zC@PiJ(9U#9N;oTG$Chnfd0~^NuXgL`xv4GIMVP`RMQT-?gaaYP2qjI^rdkM8CJH-f
zoQUM@AABB0n%tEmo5@0Agph}ZNPq}th<W_ymRp+<LOu#2-hvwIuT4t0(<w9AftGzs
z<oLaRz912!U<iu8WCLW|8M8WaAM#alzu<Wwh9gcObYLB70E52c8S{=3;V5JL5zS6k
zbx_{;wxm1B_~&tr8r#FZ*ar0keHSc2U!CO0&;0FHN<Ap~X2A+2-%D6cA&t0c)ztNE
zgj^0^ORek3(mVznBflf^iD^fW4=>jO`}WD=#?MsR&D!UTYgJEDTA<O_g<G#iW%24|
zrqL(E#N1LNDEZm2CtXgOu0pVe0K^hUw%Z^T5J6hHZRI<VJXlg#P3omvxjG;mh|Gar
zRrlk3FjHY$Z>swJvq>~PTJKApnBnz}hm_#OU$z&f{(p8_h=T5+xO)&6pzD*`OT*{I
z2vpde8($%?Ow<Jw?ZnqxK^6&qnxDygx5o-ZExfTc$Q9!5pv1B!1uTnKB{Cs$O{?ZC
zuH1Plejhm8YWD0?5Om_pxTQ0AMizS~uB;59E_PwcCl8gA%o*tn=`%q;CfY6Nb|4G(
zgnR++HUg1_zL0qgE(BSR@&$K6+X?E5a(4yo{2s?m$}qT9?0E!{^^E643wGuT0rMqP
zC>I6gM@%G8uJVd^kWe7pFQfPD2q4^L6{j9yen53s9AA7JR@Xk^(6%h^jQN?&E%`wi
zi#ux+STPfJ=hBE-lQ%e%p=FEL#s>l}Do*iN=0R`IV#sY7&9C4^-sp+p?DluTzf&~Z
zMLyRvU@r6tbpq_!ecK=_ypM^4*^3^UcC;?F_uVdSyi)dy^*eT{HUV}Vty|uiP>d6>
zeVJ*C=|Yv*)={q`^S<j2JbmAX(R4ilhY5_twJK%^TAi4QwTS8$vJ#UNpzeFJnq6bw
ziR>^QxN${&E+6>jMSp{%0~I5@oxklUa>_T8NiUo6HQ=)=GenMR{2|8|j?b9GVm}YB
z%I-=bT-Owm%pPGXkYo_c9Zu~fBogho=5PdAqSeA@?q0caV{%iQ2yeh9zR}Tf6MZIO
z-Eip2{K&IrnKwL1!{V+5e*qI`W_wYFmNhPAtFg8X67OLs1)BaA3)WeK!bB>i`@M|H
zC%=Nj%VN(Zixv2r*e}V)^OFU;k+&sg`33Eie+@dm>m9(Ulg^gHuB<RaO08ER0E1Xn
zoXEP5K7U-S+VbzR6bhOwx1cnmYETejUAc<A9-Gv<L)_<1cjjSX*4cG>#pc3-x%?Gi
zq+P__%EFRn!*1n{_meK(lBTR?AJ00Y%PTGw1-jLpHYlut9Vgh(-N>{kxToCN39nvQ
zO*Kt-7kZEg6h_89_+Gz(j~DTyc|a7Ox9fEh2)bT7oq3kmS~`n_g8%k}09@ukE)5f%
zdjfqjVFQyr<>jI7U~f&g*q4uzzL^Om^U{eeExNHlNa%MKOD1CRmZ}27!PJ~~drkGg
z;k9%=Y|3WS#Ms?F*X=+vp8K4s2>qS?QU0{-oB#a*|KEU4s13z6|3Cfo7!v>h`F|$z
z9juL=8UKTSdPRHNxljtt@3rnM(^JE^Lu@(+yUE$QD%@yrG#`}Xbrv~fUF-%SAAsDk
z?Zt1`8B2k$^WOM`uUc6d_53I2mhaSMNzYxYSXfN3J?bA~E>zsr)zt_8u~;{}rN9JT
zVUMBA6c@-}k%ZuxWfMqogZTF`Jk~$`jHPtJz4HQ)u$a{q_hQUNwDl)ajD#}&evxo-
zGz`Bn0>9QP*ax=tXk`bHUt*lCRD%3(JELY79_iC|fuWF29>;+7Sx4)w!ovv}wipj_
z5~8C`9>~;i=meV#yt@Qc@1Bg9O=T>~jKYJtV||SO#$-&=xUL;CJAjYK6^LUN3FM)l
zj(%TH&oj_GVQh~cLXS>a{-sRL4w>h(!G~+r^MY>BqV+@hxUp#4i9E3|mPTAn97t{_
zUkz-3_$Bv_o9Ki+X4qv3_7mIhQB1er#qK`BgCJY#aqte?=r8R@?)*48z8L<vpB8>a
zpVL|m@NV>e(!+|<STI5bTk#)B@$r1NCz`m$hAg$qPT^4(TYKI+aE9iLfoy|IatnZX
zPF8_X9BO1wMpoJt6&H-^dD>Va^OrAWR1yWy5Fyvn$QJ{?M8Q73k@x_p=p@1<ZP_2R
zCIDw1D{%r!FaVJv+yOuGzZ<#WfD-3WMjdO?E0oAzV(zQZ&(!)gwvBkJCmU5MEwMWB
zJDcw>Rd=3|V(+=IKq!R&n#!Qao)3p#41F8gCnJhRC-H-yc1!-eR}}E|FA=5_{tZF#
z1wiZxVb!i*(_k~DuI2rp8N4ckGRJrj=}5ze5@{m$2jH*FG{P+9@oF?na`PNijWKzf
zi7@oB>_ZtJkU4bTZi%d&)0lp;7H%R>{6k{4f>;a_zF2bEF#+ckjSTA8t2SW+*U_J@
z^`O%t)^yrolen91Tf+CJ6m)d%y-@UB!Aa?THsfNRqGE=g_b7nq7NWG232x{N;8A#m
znVuzK9fXhyEY?TmXhlGE0t#TtU0sJPh5+XfP%%xA%n0>VWLb_vpL#f8Z!8~YCHI&d
zR2fR<u;@dL!{wV5--3rtkQU~qK-8CfBSg|VFMn)OM_sJ3B3gAOaZkUG7CX}<L;n=&
z+@yG3#w}6AHWh^mMgqL~N~lHxVpdRFZ(yTR0TVC0SpSrZ#77OTc_P|n&@g296z$K9
z#z1AmAcRv%Ua|>5Hj977F0i{O+~5mhysU}Sv{<Q;5YfCU?9p{F!<H@L4ms#IAYb#*
zIWWz=OY3zH3sAd`(WZ24k;;q;9?B>Lv=(uGwQH3?$x)q<$7>vC>|E?;#amhV`*&Y*
z!o+FZrQCGi)#;>BFGwowsh9=y_f!&_tV)aq8WyoHmA|+iF&8efD#@9?CtCD1Ym7X>
zl&%I(AWc-ZK>T^6YmPi9vs6<~RosYWb518n5;=hUa6kk6jlX>vkux*|(*mYRIwYJK
z7q0f~m@UkSgCwKVoMytx*Pcy&-Bqv~j=oq(1fWISM;hY#N5kjA&<=G<F(Gg+0c4>f
z(n|>;JKj4)Hw@rBLSg^S3Y6_Bwze<AtgV_c*TBP^9i?~HB=dRusYS$we_n~*&l&+V
z*3Aa47Io&RgsZI4MECeLC_TF)7_~`t4aN&7e@W=_Q4NIhEXUV#0-|E?bWH-6-|*sj
z`+g}U57u9|xhSnaCXt2FMat8Or%d#bL>0k6;fMb;S33TpCp()x!kQvsZPeTin+H@V
ze!%%29NzWMQOitx`!(U@?TNBS?GHA{_3(4n=*O@Pr3hR1nx*3@TiS<%q>~XHLqwFV
ze9?71vTT+~3Kj@mrag8GbsS}tbGEWEz?^n#ntQS4ka_^yj7Q*S9qrgbky&@+1rs1N
z<b&BND^PWd9U-{fKCz-v_{Q#Z$~-jhnmSp3W1~A>9+!E9g?Eo1xGUwT;ODl1ZiGj1
zgu-$-SZ|^KqVz|ymw6zq);_ISa<LeSyY(@kLbzmm_<*XhbIBwDbrtq_v{tfzunM-v
z@FmqY6xC|5%L7T<gi`Ygseu}tVr9>Bd`l3az3<E@*ZU#GKy?O1u#oou@I-*kmhwH(
zz845o<V|g6tn{O5T_m2|ghi9{2tZ_4=YD&4=$;nn=PIep;#R+0FM<O0r=119yo4E7
z+)+MlfeIfzQ>^W{FM-{&8vLOrY5VfWaXyp30=$$Rtz3s{v>^vk#{k_dUSHsglRR}D
zfs=i!H1Mj8fAd=f``2W)nUhyAU9vHKi@H4i9ZPyvPv0PRf?v-rxkG>B4820vO#J!$
z&?7JUV@IisrXpCjw{KaIz@z^WNqFD=d>38f;-PXW+PgHadpmoiPX?G()hF=d{E9|C
z3<J>#ds&Dl^!!v$KS64wOPJQ@5jf4!pRB}!$TJ0ZXndL+txLNlKwq_ar+!hur0l`N
zQG5jD6SortT4;RpX84yLxi`KwR%#cEx~QU>8clmTDTIw_CBw|buFnc@r;mu2&Hh)Z
z$rG!0rn@pcn6+1Ev>i!40sVwnPMB-tl`b8mAkX~N<X9nW8Fk5+8j08q&X>OzJU}NC
z&$J(%2j|42VOdjupQmdFvsk<)`$K7y3w53OCa_-8)QD(>#Np~YAa?|1ybpq9oqk)`
zbZ|{4%wB**yQ@%GYKyO7$oU>nlzf;u+D_2v9@4cHn_KRBy^ssT*&c%C%?93m)Y2~Y
zFc)RTy}`p|p%&M6&$^v8rb}GT^KGy=!!-w24L5rPu@uRxL%>nDPzFye(5{J=YzdV6
z4W`#6=%okhbJujeCcE#duKfs7GHc+ELG^4U%c`Mwp<IEhhO<R+o!?_wJ)zZ+Pcmy5
zLYi-g-#`$budsCFlE_{SM-;ng0caifk)EdlYogu^#>{ABz$;Dd-x7vynN~O+dJpGs
z^n(t*m?dxaO%j6nr#)FBiGwL!FUqNiEriuWb}Z4J`AfvVyM*GuA)^x4D|&z~IrW#O
zb~1wmy1m?u#U%c0C$vsU!5>Gq!rw%q>6c5d!6MpyX*=se1QIr$0X?rcdZ3T`2Rtc-
zR#GUSh~>RN9czMKRkX}2UYFb+&{SsXq5tZ5y%T3ocStgiy2Uz)vZRKnl0Wi>&%i~8
zkXC|wQHxY%S+SY@m;0;*gcTd}WzO|aOIh*Cah~eL=PwLwD6xwA1=ns>QWl(b);*DG
z3QNFx?meJs$+3Z^B$d9k6k&VjFR0AVKCU~tHnL$r&%mlICvTnqGGOtrS=3`OuYaL^
zVkR8*;fMzHfq;-y5GtKE+OdRi=4X+ForL0(dAkS~6JcG|{sA0<u3p`{{R(H$t?;$x
zQ)!XRaQ~hx#)v7aHhr3@I789VVqBC()?!3|Ed3&Y%_LEuChjnu@Aocf@c8Rq<@zKW
zG{fA?p;nR=%K9R@urjd*wqFup5d$0YULKA%@{SO*I_6<5unVJ+FkgYoo(i#zHIbQN
z%Bid$JsmPzM*VzQ3i2ewj7s2tiat-7o@((I?xJ*=u|XJ=f2#?la_O{SAe_AL60rP~
zjsq&~;~8LC8HH<5r6nvol}V1iuW=|_$3A!E-x!!jbu6_tU5-}MPlG22wxj#9qA_r`
zX%40?{T$VWH`t{+Fs5W5q-teIeOEp8P^~IWEXUU6*gL4s22xjki4x0$x-)uHw*jI%
zlt{F!qf*mNPjhzuN+7p{hS6S5Q*J@CH+}p<rFppBQcJ#S!!gVe`tnB|;7U}`EjOH2
zGX}4&{$_#FuF&csnI599VBR`JwHTx>VUduZ-?C|!)w-IGA~eG)KQnI5m4#jlEwdqg
z&YY`u@+%v35j5--_cH+Gvqt!Q4DNT^-mo#M`S<@g2ts?oIt9T20H$#ND}dg_)cOAh
z=#MpR?KjyF{sHuk(){aiI^J%rg|@4JmIrJD-6Y{lwz}#NETVs_O_h)<itQGDdx<G0
z5^1<)lL{%!2ohv=rkv?XZqIh?fZg^L#HP~a&9Oe@bHBbE?u>sCb!IWLMP;JLh&kep
zxy4v<NW935S3-gqf}w}<_W~)=^cnl20;8)D%Va1{go%96g6P5_w^5p>_vED7mu`T%
zQz2=_k%E`wDa?+}Fx3(6;sL$oHH!nF^PLbwvLPn-GA}bwb0Z}~6o>@mSOkp%j}{ig
z2kAo>p|Eps;N-`KY-A=##4P#LxlWQqoFl#%5p3Vgw8Sqg>)d^Pw^J;Flnm8JmvW6S
zN={tNy%32!>lQrvfmyix5BCQa?gqKBVtWopf%^&RG(1tlI`Rz<nBPcKwx#n_BJ;UF
zR}wiq%}>KUc^>5EVA^omhxR;KppZ>}u&#Q{8vJvHaNojFWZrnnl?Qn$z|^|+#HPa~
zgAbGg5D$fd1lhT`eLHr?S4=kY`nWK0Jr55TCLV{P)=tyRB@BzYi7<a$IlDPn4=ZMl
zBL>$Vo1&(0PPkCGh#N+P$P0=e+2eL^PDOfjqpKCLboC7Dhx9^f%$FYIljylq4a$I(
zr3~kNx2}Oly=jDzj2jI{BRV`0bQNN{Mc%|jR68>wGVU2lNf&$q&ru~^3MIXVD?90^
znYR8($Xp8*XU4$%9rGqQUhVim&u<#?<T1G$=jduvInC??KVYva8WqZ;jhp09fBU0N
zp@ke1DciL0hD<6jgOMhn3%y8>$zCvcOv`s*cDSDN3~G0t@b}x~;rO(@B4^X{f~U!(
zuxy!MH}6{5e>Nd)FbS9}YO1Z;rj`$f4)+(T7Ut_wDx$FB%cfa)THei7pQe<>hgO#3
zP+Nyi!**`X#f90`Gr8!epQ&x4<-qWeS@gs@N4OiAZ{1IV;H-!EN#_W+_2kwLuH~c;
zcDwC=U>n<9jTu<M&TzDp5KE=rRAcb+u2V3aboV>?{<Mf%GI%~Mk+m2l9Uv{mRF0TE
zJ5_yX9Y3^ADmu0v8<<7I(S`0zE&P29QiM*k9II)?EOJh=zxHivB9KZ9_NcXl1cbbA
z9t2ea%40t2%0NEXh0$-GM8bw`Q~Wz)xi&p9j>A~#O4_lzW1l|e^-yikq9Y<1%8r{D
z!Dd_)qVu7$hHy2j+NaFT(;gGu6U$4AKv_8V3LO^Z<x-m%5~Tk(!`?n%yNtlZsM6fE
zzo{+ei&d}N2#igP6FA!o$0s7In3j(y&%#VPD2e|MfJceWyl6sZk%8D(tz-;O;0S8R
z3~<Uqja+*cbY&^JaM}=>KJcrq@vG+et{?vRCEDXN*^8@@h_|japWQIKroMS+5^3T{
zu=VrxBHU}2_twpYTV>%!GgvnZZ3yktRbeQKe?@<wh{C5)RUhRLuzw<h$ee8I9i8B9
zBBT(2+lbMovIL3|wMw|-RyM4qIO2n(%z^1fTzQ6!5dWq1Vkz0uF&6gbmBilqMm?zT
z^i0SwP&FhI!-L{HB*i~H!)>tQ0Z4<6oK_=Nx94GUz(WbCC_1r&DQ(O#P$nIIrdUIS
z+t_k@tTMyN=90b9CWC$<%GbZ&&@7?IFp_4^m0(cqaSzB~rP5?YbD5N6GDe^=yhXIx
z@@NH`DBTn+se>ZpEW)*oX7_a<goUd?#D(GDu<A++$RM7u7?Plt3Yv9K#^mEOVr?UC
zAsB}-1wx~@ej`XKqh#=GN@5$-pV+Kpz}&~b>C`*wkeA_~HDB|aBT0eF_!U`B_NWag
zokY-JA}OrRO|fgCtkP<9?I*)x97gv<3&ST0mq*>U-vQ5%kW<R^4pw5d7@>)fI`e>H
zWD93$z`;bu#Ff?Uz*E>xt<dBf{_@G%SR0}ovh1pwAhUt0X2x+bb#ztovkUWqAA(i7
zfGirs{^+5WRky1#8+%*+6iG(%_^p@3yzRclRYWg*(jt9!%2o8s7t)Ofy_qMs?DO5L
zsau-~I=qRk@!R5myCi4z-UT*%nrqr5+c@*u@;mQMb`Tcnp>JjqS9KerLPpfew%Vj4
zN2YOmob`L(zeo~(cS!{Gt1}Ps&j8qYBm<jW<iJrN9d{jW8J9?Z=1k~6^#9PWI3v0|
z`MU66(?R^mhWmA41BHFgY|cok4ca{sMTwgdQEdke7NXsopl>mv$v7Fp*rHbG=pEmv
z$#^fm_Jj}Xq)}eGD$>#Q-AzcWac43CtM9N9r<xMiP-8RWoOD(^!!)j$9}Dcie)ZU5
z1F9OjVa(wA0W2xV)vI(1RhuBG(YMrh3gybB;9vHs1YY~pa-yxb+D+O>L0(?}P1OMH
zI|6Y}RAPLOGD%6yH~GaKF@&Tk%}u4&H|0)_o#MP)%nx<;XTA{I`PmrHck*?ZGoRDF
zy|mL*-1^;re}=J8_alLP`y`>d!eITBE&4I<l@Hl{S;U{iYd`h--{Z4nleYc>Y5;)z
z%>Qb9W@=|{X=nQXf1#^&yzPlNTYvlbLq;Uh#z;xdJ+H22Z&EOXkXRr^1k74Xs0#v_
z_O1&fY1KpOt3J1HJ=f{b6-fTY(q~-Q*T=@jPTwCL>9q4iq@NP6`BbZ1$@uhjb#;Au
zJAWi))|8@KnQ~?DhLtnFgz1<TW|~|RFJjNc5-<)yXh)T%o<u`&|2cy2mW4*OLW$yp
zGa{#nk?++D1MpX;`?Z>ghto*Vvkd4DNRT^HCCIg@X;Y~Zg?j0Z*pR8vqD-1%R1oNk
z*DGvfhhZ^=O%R8P{&{?0;0)f};)?h1ITFKpVZ6Tgi|zTBBy)jU6wYZ>A9<7^r{zWC
z_q$zFZJ+h&=-s<?$pd&Ta9tB!Tqly~X56?gZIB1<rsVVJv=8im;rYeIA2ekiG<YgS
zGtYWvkHp$W2=w|nd3eI__ip}hAs+q|^Z)et1)UOn^kjJ#JYKU&N;<rNAQ4m?5JbKZ
zCDStn>V_D}31#xYj~wQ+<H`2QlzxvvRx@0=ZV-hFBbZDd1T1JOaV^nSiG_jQ<!B97
z(2w}`c`xD5eGGLC)bn@!KH<`|sWk9>0QD-~6HN+J{#c3lSpEcyrsX{QEg+O~c?A|_
z@l1yj3;Xvv;k)O7HSL_;S8${Hp{m!dsjsQOJpvTPqGyard@i$Bz*Y7_&H1#{eu&Xg
zsRR90^G&Og^0J)NpWslLN&*W0ooW0|4a4=VdChXIf2*YK{quc)F?Ui$Dy2JZ7G;}k
z{dJq<Gh>1krBz4vbFBf;BMu7`2RPaj9hib9NVO0zsVm`~2vOq>HyOrOD%yx5*bL-5
zy^6iCF5y5^V27ofU1d||uV%|qTj4P>dF(PyF=y=O#ow6`L$0g%V|mn|R)vA4?zr0R
z1&Z5Vo9X+Q`!|o;d^f7i{8wSZ)7|6o<SMVq>=jJ@_51$l>I%P>iW7h9nSAN7$*(s1
z`$_v3`rB8D6T5r$@89i-yNv{n%x~f6t3S808NV=11E_H)^i&gq=tXBllJo?v)q)uW
zA{LN@)mlaK6}kHRXn!ir;Khf2vdX+v*P|C<8UDqbWr1n>HKNd*JK!9EDL0@xb(&_I
zKQD##ZH|m^ho$Vtr#U7IEEDZtqv=wpqiq4jTT2LuP(YMA5*$ZQEVg(+<~Tw1X_*;B
zyNJH5Q$ZgkX2;vH5gHh|%VEWX_6@X%R|ydW1R@9tA($W(wBMvt8MLXC1%pqfyT?&T
z29jAj?bkPQzd*r$38YLBZhAELEicI_r|s}N-I>h}tDlRw(sP>pCRYW`Uc8N(?6T?^
zrg5CqkTU)LsGop%rcdJuT8s7cGF#}an}EI)Ybw2wA7QA03`4bdvEpH8TS90;;k`=7
zCw{DY$FV<0sfY=Vf?vNc!NP#+OLas8iT)kIy$5e!CYh4~0)=j+EsLUw!IEtXJt2YC
zeW462_g!eL_96gbA<(O8T@PlC7pb<EpoD4Mdy>?Ahso=LXI`JGX2(qmVC4b-OpSND
z1X(7ZB77NkA|J$g=m&)m@wYpLe$zR?z#JkO=T2CTf)bgjXV{%nS+`gf;NSp@-L|nv
zx`dG+p+pjLg6+8QS5ksgMaoQqwYmVRjz)oTInC=B_F<Vf!WL)*1zMUIjn_U&$1sX*
zj@J_Y`BaUpbMk9QY+xaSyhyd5_&BQ4Q2^SofgYKR$UKi#)JaE<3V}hhwl*(kB|ChU
zvnnHM_RSGb{srvmAURF5LCpfgG#6NOVY>3KEW>sov?YIMh`7YWIVT#-LEkzXMovVm
ze*>RHW{OPqi6V<VqQ>B@oiV=Ls6i))lD-2c5Kz0~nVqFvsM9wCp3hrYN*nC(a(vN<
zNG%o_@l2`-fuw-u%F;yuZtE|V<o5wbjrUzAX4P50H76*<L?vcQs<+h<=>>bUKU~0(
zJY0|0s9gvvEbZR`;=yDdCz~UGg_*c%_ha|Z_OT&W9-4xi&b_uwSWWNVeFv%P267Uz
z^zn70(o}A6FSRIb>iS8xN%as^RgS+;*w5hdmmvh*1RnSkLa(SrwR6&Jyr|sO?z1ga
z0Fcm@R_1VoIb1;!`aAM2R%#`vV~7ftDFo6Fsz7nDEr5d%M2hN4YHr#$h77uZ>BoxA
z$Nw@Gq^CViwsddcu@<@rUQxgSK2&yEA<;_qkRVE_12@MnA<X5gl9>rx(Nd&3fp$+{
zF7EL~z+bCySfW+1pEzlqa*ShGpawiLhi<LqpijR{<N>K7l4&S%!I_K6rHKYrsfkA)
zuaO0s2G-S>L}Uf+!b)Ir_ds2dQ7W`sB$;$cs#^{X+du@x2op#t<{&^e>M!U28p(jv
zCF+k}Vt!Q?Z)gBXsd~TZD9Xqbf+<LFp@>v>apJEZNCBSq>5ElZ0BQgWfkDDIa6)Nr
zfV!Cb&>?fVfe~(6P;3Z04!ZxgXhM8J9|5K9s)HwjGBg&iUs9-QABErOI)MMa#}q}5
zn|he=d>iu-=!t`|$;1hmu@<mnI-vg6iAqkp1B3zUVQWwFsfY(NmOB>vc%f7I&oLG2
zyfWS88FE|$=(<jcAG`h!p9qvMBnm7O+9CrRi#M<5d{L2V>coD{s97S>uaVb;()Mpj
zWPjnp2o%S4!=Jrc@m$-l^J84OejS@Y@|sf+`iMG!_#4xpSYV&tWPSZ6hvn44OGS8U
zo9vINWkwW=22y2Eqp+_>prlpTYa$*h+}|{<THM$ps|~|Rad)aA$Y9?7i9lsN?=H+2
z?n1<71xgtnuwej45rM2LAo3SC17WaR-{NlH3UX&7azM_I*I-Rh)0I}mE1}zfp~lcF
zCIE;X*M`&8xGdatm`TIrSY}z-Na8Zyd|EKxV&BIK0Zi~YMy($x!)J!>1aOq`Ww00)
z<I3?N@Qd)!zZ=h@W(;~7lJvfJm?E?+oDO%?K7M+ZWQFp`JCbKytrVTCN`Pf#0L9*)
zFe7+4x*9ZjRWk0-d_RitJTbWO;{+zaiB6fUY=D!{g}f<eI2tW{(gTzn77+H5K?Q75
znA3ODe{-)B?q1y>sF#_U3#dB72su<8fgp?`oyum0r>sW#16E(rLS8v7cWyMB=1D9r
z{=^uPCkGZU5AP$+m!UBWN_ZF(S%Mx<%zcmeb9*eP@DroSQ8~9WX#&59u{bau@q6R?
z+pH7^n3d)D=lvXk*@1so*yBPJQUX*od$REEONF!SqfB&X3PmF=KeWN*@{P@iNjn>a
zDw`meJRUWXyzBafXMG=hU6q|^H>(1j%dxqSlj1_tOD(r4>t-2z^bd&F92U#YU;b5Z
z+aO+_snv3gCO*JxLu`v4=|y{zQ#W%b?IW6RHYJp%e(`ZBN#5vAjSv`naQC^x8y5yF
zv`0T6NnR4c@eC@Df^6uXmo~;GC5!0*S?%?)KhOmz#K~s<q4q*XcW=95&@lKw<C^C(
zA3cpaZ>REVT;+V(9-!T0_J<-(o_{xSg7AE?Yarg78iukr5`_6<e-x9i>NW0+A=9-f
z2+fvAQU9dPs-}Wb25errQZ6Cx<H-S5TcTfaAH)&F{1SyK1jWx_`AJJQ(p}Iwb!%<K
zjt;N*`Yoc5-pdi-(E!0{|0Y@ro##bx*}3VC?u#~d_dDh9AQH!GU5IbCcED3yxbh#R
zRZ0xu(~hXNMnNNV>P*BCx;Drm#d5>BHv{g*1%kqO`kN0n0)pBbNJC4Y5Du4sBqA8n
z(%s>!tOXef(HUIQBUjH7DF&mkU~F)W0%VCvaF^)Tx`e|B9vJBGt!YKTk1V&0EaG^H
z0kxfBW(ffo<Pzg;5gY_5oyEWy=@MYMRwhXI>roj&mdSBC6WRrH@=ySXilH%wp~x=h
z3qV*MS3?7mjEmIog;(GNUo<4|N1uOH-1Hjw9&TVGuSjr4qqhsCDVrr&y<?f6x3mJc
z03~6RI3Ww5kkw!GuftS|dbI^ta>^5`2Oz7X(f9)Zp|xp9OO0RQIz{F$FNRU?9nzHG
z;J7TBR<fpT#Ye0n%KZgPHlnVOWVhv#oKIjB4LVs!VITIU=nGO2{baVB^K~Ee>+r?H
z`<S?_0)7WG%CZopE69dST)7`%ySW2ED2UpA2<3_`<*nl|gr-4d20c*f0Ui#q13!c;
z5?-R0*L!gE)oqv2z5_p}BIjk<5lNI=7h15YIQ+|S^^ZM68G!PW0EZYd8h?*tk2Q$9
zQ$czeX2@PAsqisYANtvqx0TZIdvQ0N2Wq1|z6B??hSa72gqmS@KgOZeRU)ATxv>o_
z3xaC~BA_jDJzO}nS@)&6|Lqy$pP=0&W%EImCbM|zr%x9)^EZ0H1;q}wR^$>|ar?(}
zXz(+vnpcG#I-A!iY!J*aI|<mC!+#fuA0%54DZtb_06(UH+TF1TB~&beV1ttj^0_|E
zH&-nv@s)*{OQr!4g!ogD$#tK+J3*qM4-lxxi4eeWC2*>D$hLCoE~3m(4r4H1syoH-
zgDrg$|Ln|56BF?1aF}}6j=fGDbAlgQ&c=mLrl11C>f54R#aHsmO!^ODEf-S`{(2=)
z3CUQyxa#BVbLQHAB<)D%`gs}8Qs(}eJiWrB(G5rr3%9gJk3P@aa|5jU`fmye)~HRD
zYMMCFX>*CSM7gYRsnYX5@KgwQ?HX2t)TH^<!ux*@eQH6Yp3xZO?*@YirKFM`{bDE(
z=7|6m%erGo+y_5cyD!?~{~`EM)@f@Xs!>wmuDv*QcD&Txv&<9SQr31@C~VcJGS2@-
z&~xrpF5z1p^G_KxF*yak0Hdx3s=FeRs01WWRp`6|j84YW&EGOae2cv`qKp7k43a)K
zd^kno-cpcU{<l@yV_V}7Nf<YQ3t7|{WB~lCoMC4TqaTk-M8{5E_+t;L<CMh|41Z)<
z8AC;SwGH3?5axBzw&S}iNSPd=(;)>lS3{9vcckV-z)(S_opV14>+&sojANCR0*j<2
z+r|Kz!&3_HxERdx#U|PJ!r;yP>MnzufwEl&Xs0;p(rC&R-@i~scW>;#`HfZVfjg}}
z!FM<A2AB7z#2QNcJUcm*n8Mb(FQwlnanUs-nL^*)7O@=>oUVc0=?q`<h)q@x1=2Oi
z{9&ccWC7OKV>}_#SW|N+Q1mQqXQZr)w8>SVgtq=FS<ktejCu$g1m#pP3<w?Gbq>&<
zyha}YQ#2voP<2gNKvdUkim>yj)ea^ph<8WqRM7>{bQcVlE%4m(-;@?wL+7y6kK5!G
zx*)^8T`o-q;chD4T@m)LS8ykf?1~80{*g$EjF?P2ZG2wwj;anQkKGL8z}g57*{LX&
z^cOJk=zhlcIta0(aHsVsv{yGX{CM1anFMUB?drKejY_J_3`*e51L>g6qkxpqgPUjC
zhSFhcU@)`E`Z_5FxNpcr<h$M5*Ij=uSe360@R9WA5UE-HMW5v7*Cle-BK<6##VhzR
zG{PAD_tAQzA}b;%2x_8&tormQ@tv9bh$4`4IuDkR_!lz3UDO<yIlzw&@^QlGFHYnM
zy3?Zj*}=ecc8xtU5S!1!L1av7#-Ffrq~wsMvh#LItn_R)KTc^#DVOCe4o5uoyb?YP
zxo_0yFpGPtq)O;q_J87$Ye3!LWCAb)1q<jcIG-oJ;8-wrEoth|MjV8?EZ>yRCY%>P
zzrsJl3r;>rd=a$a<E3LIb&~i3)_LHikMhk<tcS6&@G|BB8sPlG3=plJO8x7HTizH?
z`)^*~_fHbj>#^I5TptL_JQ+k={GGO6-(yw$$^-KvZf5&q2-exOS~b@|lcTNV&#P#1
zXPcN-L?Iy3Z}1Cm{JD}V6*{eSJS6Ko90)j4m|7KU<+Zvd19Rv&^^n3!)R38Iq|_~E
zC?GQy*)K%0JK&sxsq;X6djf(`4KhgX7mF9Pk=fdTf+pSR-%zK`S`9`n?8uCs$!!yY
z?<-b}P4<ai5=e60Ou^>zggtiNWEDd|*+MwbqaZu2mc7IpQzf|Jt&S2etr1E!z`)O~
z)Pwgj)3Xlh^;y5`vqw{IW}tzFH8VPgjO=iXHo#PDvOg}7QT;88C<53G1#|ZU(7^08
zUDO)8G_|%I!zVajt+8h-BdqKxgoER-WTpxTAUG(11eA#}OvYmE)B0mJ5%hr#ZT;3=
ziZDk+d8L?>CP2v$6@DF8xgD(?nw;VkW59L_{7%Z`PtUro=hg(4`YCxVJ=f-FWHWS^
zPhA=uO%@ACe$BPdp|j*Y+}+*YQ{c4ED>Utl_y<Lam}-*~E?-+&d~u(8>=I>5gd+S6
zvXmq0BP;2O2AfoN)+tKT_LD84*it))0Tsxy#jL#~f?CH<8YLqHKw&Ts5mqv=&T>oF
z8z6xd)2;Ce^zfa{z6nm~#`mcMgoypZfeIU`nWr+;)t3A)CEsoG{kuRzX)aBAR<$GJ
z`-bXMDpJ~N26?E=<J*)F0#5S8te8RSbh<P(`BFmbah(UvkD7wHq}Uj}40S_0W98s>
zt7uzmnoXw?cNSlUTxj==xa3&cO+-AzFVbg)-8+Na8K`LlX)0hDt+!YqCqQsS)r%X!
z<S?0*$k)ib#Ip48`0*OLZDf%TNL4;otMv5S1nwW~K4hlb<X~}TsN@n=;Ui@o10_<%
z^^=f_{1ozBd;WLc=r|U-%?85s5JSRB#zGkkF^;~QrjcO0)%oKDD~yWOiLjbr#W<Le
zr3!S!Oz~qEd7Q~>P#4-kvUt#u-ZS4eIdWjTc)h2T2ADeqM1$Qv)+{4_Ny5!42(=ls
zi{EV0STD>zRz`XBnR6VS?D9)&>|gk$zK@_zjy49Z&2hT|LZv*oPmyKuWvRPhhRHO&
ze>~pHZeRm-M;^+;=>uy%7>@C>XFMARn8MZYOE-J2`L<AluMfwSZIBZXrq71D<NA1H
z#o51i=kPqS4u)pok@0u;f&|1f*abqu<$ZFiAgZ0ryk4vInG!H^2z5gS^QtH^f{KpO
zM2r)Dnkv+)R$SD_k3T`3PEU^4dru53-8xD0hn;19pc#i!=Dzod8<8+S!rL4P@j5mS
zpQc!2V$upnY4dR%qa>Mjcna;UywiGiKi7a;y|{cv0f{WeOWPgb`JW&S)46pt(P8fx
z5P}e-q>bp1aAtV;O0|64Vy`S$??NDvgt#yg<sa<ya`%1`_?0ya#6=5xAe{1jq}`WF
z_HKBc3CT44gY%US43;2}O{8zOtNC(Wq~&(_E#*;8LsMEKforJpv~Ev)FLSWf{yk%!
zKYCti+|5)hSuxz*oL_G@w4ci#R&VC$Lgh|$#og_6-me^vI!HU9R&F()YYL9hHO%fh
zS}^-O);8>6X=`l3^R%%W=!NojTE4i&(m3u$`zA#44=>@J9%3oSt~`<^11!B1fVsxP
zYiD?E9V$q5Y4$_te?kGS6!6J1Y&P{_oeE2b>4pwEi1oGzgsKnfFeDL72fa7`hp=;q
z&P55gZEWw@wr$(C?d;gLZQHi_$F}Y4*uLj=U*q0hRjaC3V|=yNoP7LcFLl6`@~r)?
zVBV)tgn>e*df09Y-~-#Z#Z>c@dh9G-1$P=bimqZU=XjMP8mjAjN`2QR7G8_I|3rih
zX3HVc^zqV8coM<0L>PSIZl7g|40Q&}R8?(ib^UQL4z!iCx8m|9jAwd<_iMn|mBxsT
zbI0br2ijMC(j!r>N4<4EI2)vrmjeUPesr+|Xn8v{`Tc$b^>~3%6Hie)0CP=)w}+fQ
zR`%KK;1qiIBFv4a*?sFgGi4ev#EeMYH!LGS?CT5uRYpLW95S9kfZmjbfTD{AO9&{p
zZ3U|=BpEtTFb2)8w=LVY)5^bw&OkSTj1EO#D;@dMwxI#)Udso3!o15uUEt3H2F|a5
zb~fRS&n&yoWj)!8&RV`exL)Fy9q{s9IJDcvZ5_?armD;^z47ypw<Ie5^NKo~&!!~p
zH7Ri#TRcXE>gYCjL=rB)gmEBBz9-rb!Yv4m0t12lUI4GeM9;ue={hg^&4TxYiIhep
zGO)#?VNZ+Xg7#=X+QhEK1Dc^?6Gj(pD76-ZQKiL{rt&=x!E`Ere+0brj4<9E?V_G1
zN&=dOG(bOKe9aDZWEL<4=S*R!uZq?_GcpK4^Vfu-95p5H1#d?&g&{_PB-6pVkq2^2
zXeDs}5w+jydFcN317gFSvDoyjZ7y3u*xN1@Y>z-Ud@G%1Y>rYO6CLRvBROe3g3am-
ziCKG(*hJK-^IEMfC~X&L(09}-SE$2Wiq%eu-~N$CPEXr=Edivh(HQ(H^4|v^KKas|
zi&$NlEkwI5BDnfCvqh<p8y}QQpo6u2h#xFknR1hQs&)HHJKgvG!Xf|rGrnMsIm>M=
z+-F#AKS9CqTMEB%v3ll7Ys1}^(ZY?#-xs&mUb}6{H*Y_{ssSx{8x8<Ei`5dAOnG*Q
ztBpvj6BhweXmzp`X#>Trw4~4G_j3kk;$UmiG1_@yB++gBWb3c_+q4LQ>Ih4Zeq+!O
zDrs2S!F#@nf#d_R)klE{F)EROq<2j^5`Bs3%FE5)=8jyOB#e0K(KOSgPutT@vF(l)
zok^rZQ0WQ4!%A%at`&D|a=$HZew6n10p%kHjnL9Oy+sp+haf2tU|DyFo?}Z<m9Mn#
z03O|4DT`bO&HIbln>+n{7K8lS<VC?Po{x;CxKB5bpG&q#a-vFWxSUtaXkr4nFw?yd
zXihd$qV67|eY|?KPsohvN2408>q;4^RJMUn1_CkMjfoE-4PEvG<q-jMn)<H#TSR;`
zRq|ikz_r12Z2gL{Nx32v30rY_(g>SiTpXWV`%1&A1J|B#z=iCng$vu+t}?@gSfEPo
zB#}3k8;P-B!xrWV-Y1s^N;0ttYJcis@QYA9F`oW41?t($fBvrPP4ONDAw9Od1h#9u
zK5t^Ifwe8NRs_^@^yY+iuyrw*wDa@mlxw~#mSyv$rkcOv;AiAcr*ZnrL=dG7=$jz+
zj;UCpUB~93spCYrmQ+sG5x}Gwgr;38t1DgF`yB~dBi%@4x|t`@RSmQ!DoQ#iRjez@
z1$&Oj)W@JN2*6L2UKXe6i#|88u}&5-Bhu$pa4r~Y>uPNIe(aayQ%S!!QirU-+<P6$
z)|>nH+Ov3Db%P|`v%b+rvtp~d&{u=yj=Lv$W4Ff83{~b}`y$>AIx8v<LnaIQ(k<np
zQ#BO`ZX3f-?tgq6`0`Hxu5Xj-K8KgR6XWlWlv~=<EbTL)j&qXf`*Et(pOIQoU8J70
zAtPw&<V;PN!@p@wnuPS{*nJfaeU+3XC>Y|>b%m6OnHqOXj#NJSs&svZgcM4f!wn$H
z1rQs^%80PDYhAsQs#y#U-l=p57Yr6t;FgWhhYR?783jtvK)da!!4BaJ>Da@JcNgMw
z2bNJGhN!JAK`@ZXD6#;Y+8RWQiKz0R5I-z_N-{Mh0!Z+>MlK{6?}?&r6E)IavxYf^
z3od^DxHgkXFP2r7GCvdtP-U-<+R-;fNn43b;2$Lde9syG;cw6uVXoiWR$j`1;ShfV
z0zv`2ugLE4RxXI+=3z}){#*Z`mEB+gxflu!-E}fW%s%7wz~~2#qt_rT6OeX=?{o^G
z9bfIQL5oW%cP$`fL+t7KI<Yl0tDBolg%EZRxCY{iBPh>Ojc_tYhXkd#6C-j&a)Rt_
z6DNIjc6E`y?;fWFjKYpPxi6Qh#Tdj<#w;h$AI&SQW_$XZHfQIX%MC|Aa(+*2ORo1A
z?<mnZAko{A8Dwn1rZ(Lc`S8nu-QTDY#wAv+JgL9s=adxO$#e3J)`vgCidX9;M46JD
zMA&-1S9Yysw(p_QPRZe<WFGg*W|qbUk5LU3hW<-b#5&5Gib{`@K`bqyDV}Mz`P)mI
zMM}(;-^Zd}R*Cw-l7>T+RE!=?&pD*kTodhLTQprvmOCTDTsVSK;%PI*()aLL5@^U-
z%p1Z!ETXCVTMSyBa}bJ$R>LQW0I)R4wv-UM0@$f6!mfd_yOeW+dgs*Cf^PNcC|jPE
z!~%<SO*E~}0YSy0$vVq41liyQC^H??wK@=FiC6@8(b1|;!u<+BcL+Um*AV-M5V!~B
zwr%(CP!Z$Tz2()~=Ry=N%r}deQFhv6cX;bWE9Cn|&kL`fK$n=ml1))sNLxi-&T2@k
zg=;{C@f4?@Y|I}K{6#+3vTG&NEAAFo%L>j({-`p;6zte~cKeqo|E>9Kd^86d#YDq}
zl`F1X4m_{|eMBd;(H>mvjUxVg#Yy~*iF>MK*o6gQwzD%P{!`znv-}u0K+ubB0>=#y
zjO3yx(_q&3Y=vIVCU~jc0Iw+49T%L+91^CiaQxkeowz)a!JToN7z%h~pEJjHryD+c
zobi8HF@sbW%oxTeGInFNjp6YbbM9^->ij4x^Ao-d?DE6$Ev1G0S=IHNd8@f$Mx$@>
z|M;4|A2D5s2=l%|;V>!!)w>ciIwFptZXB2kY-Gn{+l1Eq9^h|`Evk-;a5V8|miy;N
z<zDETi+VY2P)=K-jSE5hUegK39w$oU2~-QfK(S?_kMJBAhy&BeXx$<n{5VCyDwEI+
zw-|uD`)VL)xheE*PVn42?##FWRhkn%JBT0v_#Ia5jhmaFE&UVQig1P}OszEJSOJud
z=hKhvdMip6<Q#Cl#<{4;jQzxv5OalfYeR&7?!;mwW-fDl2&`S_;lOub1jLts1h`r#
z8DX3RZX(*wH7Kk^5_Li;DD+?lF#W4ymeGue2h5|GbEEpUAv&V;AK5Ytb0-Lv`sQ8`
zz<qkpOnXlZ_O@z)Y(FeT@=aYok^iy+%#K!)Ja%c#!dQ8bpG^MwomeSlJLa6}-9iz}
zAt*F?Ol36so-WDsja>{G5gSUf(snTej=i$evc=<tq5#Z&?(y`rOglIHTqY>;0n8o)
zT~oG(jZTFKE*W-GHge^=(&bw)pOlwH>>xn&FELo!>6AH*&$BlVjPm|wSUE0bTV+Ku
zByS0D#l<5BMs%UzLOoRSoV6hqw{qjL6eCUW@%84;nzepO0_c_x!`7f~l;DfbY>EO~
z<fX@a@#=}k+tMsSgy<79p)z_O_RzK}(u{WwmUUeCqqkwR2RyY3GI-muN6!pY+_4aW
z-Hd7auI#&4_6S73-Y`f-Z!{Dw6N=q6T5x&>+ysZj%h~5boCahykxBN|Sk_$XK_#@A
z51*x!SrwGfb><idqgP!+ayTzqU_Z-T>HcP>gv$BlbTJmG%hD27OH-2uD?H{9{43b~
z0cF>7tw||335{sf_FagJ5w2n#R;4ULuo!EGjD@j}gSUdt8j;&dI3o}B#3#_Kt>UB_
zQ0w0gjUjSvOhppgOvWj=PqqfLGZ}VTM81QiOkQkCe!3}WV_x$1YNzhyb+eKr=IM98
z2gbeDl0sa=0rfJ!U<M2YqEC@fN%~wR=Hhz*;QcPi#xg;4p*@7;Z5O!4XZM>-zev;D
z0`3eGD+QZ^;B#0>F!&!zegt_mJvL_<&7en}Q!My;GaCtGT4^Bdl8=#rYiNEnqH4>)
zt7*VI?k!p-b1IWFl-g<j<9;5@E#I7i_xFO?eZwm&ug}Q790yuMs>uh&#^PNRC@|$i
zYM@6ju=6Uc#R_mQde;aTfl0H!!XlX*!hK-Jew+y?V(h%w7+Eiaf<oP`wREwvIaXIh
zkZ}F=57M?kgF*5uB|{71C-Obr8$BZe%ZGQnvnF*|REA&-(c6yjzf7sDFPwujl;9C8
z2g^vGcu#P0i|C2+6Hj>!MM2D$)H1W}0AJ$D&2~+8>I?=R!u)8bJKy1CMUxs8a$>uK
z&-0~~N{*m1-%%1S`M~1BmM_DQMHDhI!yc=)Dc5iv;$=Fr4~LK_ucL+P<(%-r1uW^2
z0>g+op20NVE2?Qo#YF;gkI?@xd}27Zu>k+mWI4gxKYyu09#(YG2vfuW!LUvz1>Xl4
zi=?!0I)*=)o^oaZ2!>&`6|SM**Rihw-rqytmjc8N>f?J3d0$FkshfWR`%B?J@c=+i
zS7x23t{K(-zL67?&Ip<EuCm(|vIi0K(oCz7us-3NLwA8um_Im^u#!n06crQy$q0B@
zD2zI~qgAv`Nkp*TN4i1Y_)CDcVY4<t62AJBz$u+d@1<9Ygct+(mW=+dNN}f&F2jOA
zswdIMrV^6&^*;KybQ2<Nbv#)ZiCXM#2UVD_2uLoAKn_w?89T->?Z8JMiO9(|8IP!?
zO8T=Q!+j<?-QPMTXA}OIo>0!>-8c)y%Rn#2j-KlGB$V$H5FY8dge?c!*sfEXP-5QE
zRrDdWLH)MxOyg$uEJYiQjYmrHkx_wZKE<CXqPe@zbmuteEb8<BytKWm5fiK|-r~hC
zW_2!Ix*A6f`$2pqI?bYDR`fQIPNlG(oFpc<Qz570_%{8Oj*S(~-*86v+B1B*j6#k+
zvJ<FyZ0$AcQbM?S$*&gV1OQr42M!A~u}96_u-25{guH};vYL~5)ye?9yRm)okNok?
zhp9B{VC?<?p;ro6%Aaa!Mu7&a);?5$-xOxAO^Dq@Z5;=c(21kDT~z-P6|uje3S<;i
z2OEp7aO@Rw&Z3fBe3qPZLPqRo|0=Xuv=^a;q%i0qmZ=ND|KLIVQ-!a!+LHGYuWN7w
z-bHw<Zm)X-p7J)<k!qQE;H;S0_`uh7Ih4|w$W6v~MPLY8jfsAw6SY{{zTf1d7O(cm
z)GYC?ysc(#mq2An26w23+aHi;+uA*h5_XB5Qd-{!Nc21j-88RfMmy~Z9V2FN=6C)F
zv#&6`RaYYEqXgX%f#i`PlJ3@5v&RfsIUR6|-$VRC!~Xe(OtCqbq2$I{$Ea;`cua)2
zELBO}eptzE!*n9%+kU%tVd-92dnSCua*-=R2hBZ)*HWj`KWL;6FMWwiX#X=>HbUqx
zD@WwTv={+B^W^q-RRj=nDVHd9vGw&*fBO>Jzo+=oX)BH^7+h4pbfsmBgTqtSX>r3I
zlW`K)!JpZLy5DpP)TsIuJ(K9)%;B3JO$&XmKi+G;+;u4@28Nz`-vH{6ws5+n5~j{>
z3*B|pOuge9=up4gc@W#|@c3IvzG?8+VPSy4Om@iaZApPK?D=5s<H+s)3Z~xhvqw|G
zT*I|v42lpnn9kHat3omw21Vs*JnIKCl8*ZQD3Ygt-|=Czd4a(J`^lszye~L2hB2*a
zM;)i)H^*mJ3Fm5n#jZKd)G~FlVRG%bXjj(kT4I)ZC$}S!N2}hDhA~(^d>PZFx#oIx
zBQy!HR;gk4WE4WXf0e>}LdAuC6NdGqbM@)P(y!)Mt9#ayfP)|<a_43#Jfe!WD2yW)
zQof;Yievx_Z-`<4>J2mqw62swLx(IkW<S@htg{2((wAPtJZdRP;_8lPXk%r<?&nDd
zX4_`gLqM4QoD*qTq9Hxs(Hy&TA0hJ<%@4E271pZ26(BK&d!VEQ@g#7T{SVIQSJfS|
zlQ~TzUlN!}R@z8G{IzKT*Qm5t&8{eYe8TKz%~p;)W9`XpIa_uUaNA!!ci$uM^HuVx
zbT8GK|MY<|{L_77*3ZG2?Xur*Q5(Q#)t#rilGPjact^K}7E1GZ=dwV6Fc%Ksq4YS;
z5cy{LECrMil8fjWkp^;_Ptn^8%vE1n_8!N`AkaX+19zw|*_5#h2V;a!;?D;!1z3ge
zD=^cFr$(F!dYnnN_AWgM4-@4}W}hxrMv)^^eYhNudO5V}5i-}ne4EyZHwd}<@Ow&4
zc%Su-`#yE%&sJN&FS=Mry*9xDe57T@FtoU>z>3+|@b;`ON+fu$_~j+17<TkcW;~h)
zr+QfR0K2q!1`o!i$XFbhgFoB;9OTkXk{{u!`8XGNpz1FAC0=q;knU3<uKk;Icsp1B
zN>q;Q{IGK1#VKNYUqtk?>|=~NY{Wm*h9ee4$yyxLyNpKug&J&d`1cmyEZOU0mbfp+
zt~s5Q^6*@~7?mpRz*mn*Q-Fze8Pz2|HT*Un%;0Rs{tM8OO7qK2=f{ho$HDMC^Bl$|
zxiI=2ejl5T<<C8Xf6QTg!5AKtSf59-A&}{}t;#MLb5MZ1O&TKXt-b-uyOrsWtDkOK
zwD|UCb>nL3HtN~o^^X5RJdaTPa2@`zzqGIHHY!^*pZDLx%hxYURXI}|wiUV%58d_b
z6XEV~pikhp$8;bs#SOY<?vlN1o2?E*#>ppAvFcA(tIJ)3Z#MG*M(cO5e!W`GHerS{
zI9V6y9ltc$hF5L|FP-rtUW20Ou6v|z{X=zuc-DJwC9mY7|9uy-;XV;Oo-I5q_3E;I
z`|=}YQ@+Otdna8H@^t55;`C!AGuGYTo!opM-tJiM5_fdLQ!;~E`Y;-h7)LQUzsu#f
z@$KyohUds6Up+nR*drFQXmQpF!adfQg}=BS7}ph2YOdy1^~gP!bZy_kypt?X`F>Es
z!JXf8iy+U!BC(Qt$(Axoy_X+9hmG;=$m<)vxSH5`>^bx!F8m?(-}YeS_B868cWTYf
z9Q#eWLy2rF7u%t_F3SLSmv`lCeXqdcZ{mJ}#cTWQqiVOv#r98{a*K$Py|Uy|1ljZr
zk?hpOdqREi7b9kDQW%X)`EHJ8l>2JTVkJlU)x}&_xvjEkH}0vYbUWNEznj9rb8Oti
z>Nj!gXbkH`M%Z_yGp@r_po?-b)`d%bBkME%7x(N%YY5X(iL-rJvivi4eeB=~&?F{X
zjCOglHHY-=CbTAZtFTb?&}JWQ9z{Ke`XcnB^Eh|MnnG7|-cxjnelgF-z?V%;#-+R!
zWCDavfxy4~UK`aaDwD7hi6eK4B9kmHx>n&a3+ZnT56@hT?$Sqn{WCG^9$%~S47iA0
zX#trTRW9mKBNMlP!L7lIeP*MFeve3|W@E?LF*JZFvkpT$+t2SY;@37~+tl9I+W)T%
z5r`Zi7yK^)EcFK%h~)n+(3_e3@9E!bzHj#}_N4x^`h6S!iV|1cXsK;e@7`C`NVk?o
zvV78Vt6Teb%g83rM9I_?6rQc0TMp0w(mpAzrtF)#U7KXdj6okGMohQ>i&_f#sSEPz
zZq}|oEuNc&#Ls0uYXY9+?0KxZArD@DXZpqC-=T}m3)@u=sVqG1T)+?(k>F{}5Us30
zXtRi5NXKlE6{f|(^u|atqw6Ye7Wnss)qeV3L)acGBHr1V=@D%(4~6{dEIBOl+z0t&
zj%N#0?wuQU-Ksn)&ys1Uwx|#<eD2)BM;M`nC1#Qp63@g6cfcqxtHBNt^&4ax>G<r2
zo&)2{!)=pkGDw?NO6}6Qb#oj_fI_Ze>|c(nXX?+ZW{Z3Qe}373a9SN)@{4B{n5URV
zXOCum`hxdn3WdDZ9D>(7CAGtt|BOHQa!aJ$Q>zEeJbyp#QJ?<0oyL5WJ5ZQd9LM%9
zc-N<29S}<;W=~6<hAbKOB9w6yq|;{B3qVp;9Aw+0VA%REx!g@@y;11`HM5*WjobTh
z{hj^XS@`?)=y8}EUw9<+dN%-lh-D=(qXaa<jlA4jq@MgI1OniG9^i-3*;vDF)dqdo
z8UqTLO$p(2f(2R5FTxrC*O(|zxFyo1En4Bu;$DK+EOkZ$2zi~=BmwktXp0S%nh<v=
z2#qWoG`G3(mn?h3`Y_ix4#;&y?^~C8q4$4H-hMw|jk?lp>o9~)W7ZDTTA&nrnw)Z2
z2x;I~1Nf&g9S!mJ#GNrwoX=|4E<8#0u09;{ePBWIB^)Vzp!dY@T^ch(XZ;zwy+?n*
z9On=nev(-W*TXOj=Z;wX8Nm$kOcMZhU<+R<J9G{~7h^Hsy2MwyPv19pUqvjAKf_#I
zb_A{Qcg_&Cs<awRp@>IXtP~yz^kc8()d2G0-@K6aE5_Jdhps)&UrOyNUXPtR|K0cf
z{HNaLyx%ebER%3q;ZyP1d&lmPkD3*y9*<_1Q)pL#YEqD4kO^OyB{+CQKTYle;V6%=
zzWw2=VUsm0kDc9)B~e()f?<!W>3I~vg+N<<RM(@I{klkM{k_2fU_ar1KLiT6FG5k$
z!UH!@@-4g5?+;rJ?U1u)*+{e~Tck^_9d3P`8`L@C&JFn>uqe;(<XO7`&<q*nMIxVT
za*UwPpjE<eH18(}-9kx7cgE`kvV!@+ue+Ap1PBq<g9b6Zd5^_M_{-!^?Rz&)+Wq@;
zWP=jz5)9MddI%x-2HVwR63Me$`Fk-Rl4tkHdsIe#R=oV!@%=vsQiZk|T<nY-VJiMu
zLr<KK&8?urZ`;{DcrSkQtljd-Gf}PFc<>AiF0q#VEy#t6OP0?I2H;jeJ0Nx~*MRQm
z*$Pl!PzLQ5C+|A8xSSn<xxeVB0->zT%vIy_z-O>1uJQ`l)n&zgP+7f-B42})x(<sO
z*#FcL0_k${Y6S5S)U-xr!{unqx@p}(N61JSAJP{v8ss6|B>R5yQw-1ELXf~L_zzzO
zT|9#SYF9k}nfC{4lpVJ%yQhjYpCJ%6P8`YUlMAD_gkCyxZGtlr*Re;xf(k06YCPA2
z5-QnBEF2G%w3;VS$YBk^w1dvW^ege&4Q#?JV$Nj#?m06#!}z&}{Y5noZ~K(q-+u!v
zRa@E-;_zs7-bCYFh@!Gntri@d+|RQ1@b1QjrQ3UJU;~AU27C5VbUDuvjNGRjTlvI&
zzLw5j@x~oFrk9>|wzuq*4hG*j&hxJ;_Hg~7&+N>3C(m0n3%hQ%D0Ew5)C^_^r9co!
zZ$V`SjZE@H@De|`a|%5H*D**_h9qqO%0MY$!NRM9fJ|?g9y+lAl0k$6HKCAQBIP6f
zpaRl<-}4z*S6mJ&IVO1^g@^uT-;~POr+fl})M!Wp2V>b3pzgCgIYNw0A`K$FZS95%
zW+kc4c&`JKMaCGlg3C<9TpX8IZVIB5zaimqftcX_s&-Bd_;?^-$#`N;A}Ek?hccCZ
z$A>AIE5HkR-N06NCp~Pw&n#7;Pyn;sViK|93837PEjJPm^$3wE+r}jP@53$mG-%*&
zTM8)cDHk-5E2O*;!9SUTBBZF9KB+ksYIfA%yEV+ThAW@<CeoZn@K)pF+n#)P<k26<
z8QW%S&5$8)<ynQ<M~1f_M4R=-0lCP($qV2_QUX@<*k4Qs0f65L-2;&Z&%8gH!?flI
zqZha|+|g-xnPHJa{Rxm0y>vH>nnzxkFWy0p%BnxE9WPQe1UegdYn-|&L-oU)q*MsT
z@e3b3(`AC?b7d2}8HcZ?y}A-iLm@?vB4Qc<W6JhsVpz=<WN$*!1^n@c#INLuh?iL)
zslKVOO2cU5D8Yett}<Ka=N1?op|bY|UQ%$0L^^brnasj=EgG!a;m;1z6%w<8#~}6%
zF6Y@u>25VvI*pqw#89s#0X*G29y;QGpchlRF<p&{mz`}F>!Ymq5#xS65DH?Wt{WmI
zsis;k-~t8t*3u-|j(U=?;^W8^b(_W6I`uO_u7bo$#A%~eaW$QgZO8VgrvdF8puav5
zo^cb9iA-HTBAh%1<?rJR5K5Iro4gUjNm$_1iZ1VZ#*lk5r>&Ws5Nqw0=GmB?yK|g^
zz>2Y!nF0y5SR<08P$imRe;gRF<h!Ra2-#<8orOh<TjuNLF&xq~QUo=@(LX^x3$y{#
z_XUyR<FEW}wNhPv%1pB4>{B#59kXvy2DLA*K;#+jx@MuCJlQyHnH7X%zM58X4U3A`
zxYP$?F@wGK*z2n+BMtb0h!{8v(|i{|AjC6O;Ai5C<748N#}S*+EB~TGyeSS>BIHZ3
zL2Zo<I*eeRtVh>d$3vC=QQvkL9nWD5w&uBhfdi$^N;lAbES9aM`q>GE-!Yk9O;|%g
zF@DqD6;eo@LT_x0Xt~7VNG@d)ro!_Fvo(T*k}ya2g*fG}uN#Ck*5P#ej&3?DPZrZg
z7J!Bif|#3ypz#3Pn%HDfjHv_qFh?5P{oQj3a<}>g+<y+iYIWXzSK3Gt#NMXqP?0~W
zW7FPqNLvt>U&v~O`0*clae<#EA-v4M&H8e=6xw<$4XaoqgT<WvmHule5Sptj=YA@j
zL>or$e@^08K}}LHdy+n5csD(_#LwK8`yfBi%zw8Qd`5ZZeOBvTnfq=fU9<HBbf;YJ
zGtAmu#kE5`?Cfp}X%z~60G31Plke-#sdZh&w`Vl|&1mr^rKY6f^59GeR7yCmK%Ml_
z18mXXSCep`rKkEagZ^m4r-fCsP74!q8+wlaMW%m5eg4MCc=no)utC>9G7oWuU+jf0
zCuk%l1lv`%0&8&51D>=_202q{2v|oKhZt<F?R2nUQ0nW8V=lEY7lK~=;Ud=2doTxk
zuxLSFL9{$(if*Ek-B*f1^M2<<qA3n&VKB<t7Y1LYM5IRyr9LNE6AuaVBEI*0vpY_v
z4Yb}4de5Q6(W;`zlAwy$9OiZ8(Skyy#G$E5u#P;Z#6UhECJD_xZ%2nz^&+eUU0zl>
zjE>k_fU>F#qYLbcFU^)s!1QxQ#Z|9fa48!!PJ|X1NEf1|L$=y7>?=z=d?J^UM1%1d
zH*A&u14S0h*6#2yQrW7Y8;0-6v{8e5CT2%i`#C{!1i`U!-)De9!Ljmg+fA0R=#{NC
z1*dCrSY@X20xwwomu~A+I>KiUs$4$91U~WAmKTXit9A^DW2Ldk8&d3d6J0$-mM2rQ
zHP+E=qEybR6MB7H%LyzE#SmRl&dRBBu#jG+qn31vp9-NZn88*DdssQRr2gg&t|W!M
zHNM_6i`FWvt4499?$2F(4A~DOx0I%jInbvGc#!V<K}*Y$vGB>bol+humsO||ZS43z
zd|#MUWsL8%ZeoThWmz;PW?vj5*O}HdN`3Xt@lyQC#p?ogrZY3rp8XI-1DaFsvQ(Rk
z^2xY8JG+Ub3^g!FZ7BzbZAkCdn|SU|KaI5^HTr%SoV5hCy-At?n~is#?9wYyKLs6&
z7yH#U{z=Z%qD362PmF&l@QH+?pq>kL2hC$e$`?6ce4WFm)db@L6^a*aFtvXTe(#Rm
zQyx~xwF468Gvf@dp#)6f-*L)Q(LY(<B$lMKq)TPp20ow?!SjPGk#*^Yiek7*VYecV
zZN<DDKWa|tPu2z?BPim=FIYoSCSM@d8akMBB%;AR!iWcm*~n-I2&**^Gzw|Dnn*{r
z?KKNs?TH|w{>;Q+a0oU~5@&U48qbQM*al|(=G7Jo^<9Y<GCg@n4x1f?roydIhx?sd
zTNVn_zvh;X)wf<S&=J;ja(Q+ke=txB(Irc1*^A8?L!T^lq2g)q&$yF!xi}Tc7KYR0
zqqqH7&3RTb7f0+jXejK}`<HrYi$rVk)|OUK=CLam(uA<Hr&;^2xV_G4vZQI^v6_h2
z1e+UdUKW5$QM=BUymi)0=+>fp0xKX?IoX_P;Not3FpmB~WG4@~JXcn={+ZE?Ij3Tq
z-O8?41}7yxsS4mN<j;C2sEl9DWZTGr!vts4FT!lbzTzoI4$pRlNrs=gx3Qt9?nw(2
zIH!OOy?HTt$Qab6@QYhc(P)bVIr;J*WbKS95OAx&FEX6>Nt*qu8?L2fH<AKCN$Vb$
z$l73)(`3rYf$H+rMj>zMUuy4XY5gs7_ysKg1aj<1`~K9b2F+0oHZ}IEJ<Z?*=OlIQ
zprk_iQWSqSk#TRa->*3odD5yb2|u2)!LvI2jBTDhldP8?_9EWc<>#2)ERe&tV@*%I
z{97{%`+QA_KYg#@wZTp`Bx-e~{^S9Ku8f*Gs~eOW{o4}Y%NpL8q-|>n(c6K$HKNTs
zOw$Dl#*i%~1eT5QQ!5kl3D}^&qXnPP3|$k%Ib+-%c#UNwPQ{VvxU=N=#hg=;ejzF=
z`4*Fv<U~GG&j#oyaNa!ZvCMv3;5xT%^_J!E&2o8Xy5O&I{&bq-6<gWb!1IK+BeLIr
z0rwr{JDqL>S3(tS`?lI=`b<vh#BV43SB^^7lW`Nn*0;bi5U9ybpdrWoe)cl%oi~r`
zNIPJby1g@SZiw8D53pvBelA?fUn-&8Ff-nwd{4`0keTGSdb=VY!sQ+g_m({5zax%m
zB>HlMSD$zo0zrOdmmDEIoVl$%0vO~hF6mfzDu~CXLM?)Wl}*UG%A!9u;e|F2N?D8x
zDt<9B*D_p%Mu{zUg-fuC*T$mVP_D^ymO53o{h=8texpywmFe0gTV2S5ttnm_nxfnS
ztKlTpq)npQ*j-OgqT@l>^2$MD3-^)8Ww@doU+oB}-!Z||g-B4}G9w%y>4;s8!pt<*
zY=Oy7gP#tjy4fL<KX}VSWB=7KP3MuKZ>YvkR>SJ$hzA_&DI=EHxE<FS58tH}19>A2
zBu=|)F7w~z?1i*<H|h^|rW&001R1$quH!#qzWD}##5Q4qn#5`i;UZo0NgCN}hItr@
zz5nYL1O@qz{Aj0Qkxk|Z^i&hkMbn!*Crg$oEk?lF=7e4ONFqBb&E;7TPH!&fr3y}|
zKh#4u+lH3#?<or5N$GUfuq>}v!+b^+kGm_%p)>ZUrKI3kt7*`h&gl7tQ`@akw<a!)
zz<{E;8nEl4TpAF;+3{^Pz^H7=gm?i*5(Uu-5v!^p*#*sf=G>wA1x#Zot=qaE+-30_
zmEC3KTdkNtq+46|$33^H37e_k=V4Ad`Q(Y<kJ2gR)g%l&SyB~AaY;x0l}g9!JmyS%
zj_&qgl_~H87y+ur^g040I<u^%*jb<O0=5JlbeZj|qh8JgD+7bo@Pq1Uo(~m+zqW5Q
zTK7L&b3fZh1pkWFz?*<Fp_jmq6}8rEG%p<p0+F<!TCHVLZ%lkWbw~q!@}9;z(GvaU
z-yeg|kk}=2PbR~uNFv3c0l=@s)6v4M|1adzOUrk6^T+ME|G^m9*Zn+8ClE4=oFop*
z`}3_Xv0O(WN<C+aExkm?AeoE4DgR!{h)ts;-BRa1p<FPJ%QdAx2%>+wCK7Nuy5MLe
z!apW*QO1@Tc1Ov+h-g>xF|3ly-T50)T$wlNU^AVgFSP5sIlGYlOQ{5P{1ZJ_G@Gc>
zJbnlzoS9-U(@z$GjYB`Re{%hgU_(&Nx}Gk{m8zK3PWYx7bj3n}Z}TCu|7_b{C@~6a
z#;gBu8Y*_#JU8LSqKY3-ORbr$qjQ3zYg77zGJUFHjy7aOw>D;{+4&h$Q08MhsvF2S
z{_%l9JGFh@{gl)?SLhfhXTfjDwe8KEgNL7-!~a9cSMR-w<;nkY^GdPnDZ-nximKx>
zJNq9Z{n%+f_bEKMvDY!q9@bP><y{}vX&rhmrf|(N{j78T>hD<VMK|-Yuzi!NE=5FH
z&v@8}zzub_Y%5$P!%S`9s1q7EB6;4#Gcal~dAG)~8*<yTlKcA+%sE_}$WmP^7d3Dv
zOxD>UEXkyaQQzyqVa?vP!q?5odGFc2ikgJPW*X?c9fQN^eA+d|w&PkR&ihEw<Wky6
ze3=fWj*`zlElNhp1zU`1>B+3AD7q&T?}WJ=gPTc8_41pB(qhMdGC%eS%jZULpHK>V
zrxD1G39o`6e53}HPU*rJTph(@{=(jW!l9{+Hj?@E*v>&Yf2^AKLHx)<cz%m9<$|Ni
z7p&Q{<ls#L+C1kILN{!;*{}bhgQ0B?abT}P`Qhm)r?*J3yM*MaQ<<;qJ%u;G=u}d8
z*<bWlPx#nlt{q9$3$PN4Hz|Br<Sk`skobqRo8U6L9zOnw_t##WNHUAyFt-~zw5mT0
z6>##Td(qGYA5|BmoXp@s$mM~sYo6j5&s2FsTwAAmNn=uAaP@Lp<pQ?_{VnllB43(U
zh^Vb)Cx-8G=)K{om*{p`5#KqGD(AsEyh`eAFG1!%v*a|<=z}HZXCwSF<r`A(xeL73
zc~WpHWAQJFn8ANz^YjJ*SNaeDd1mT4Vt^Yh(^^QeQPr2qnYi9~pMZ&g!D_&m192*s
z_Ctdbbv#jyhLVZ`2XLdl_n{-K^oiN_JB9MFS6gN-z<@ZBa>pPd80Ej;tLj^AFR0oW
zbTwD5YFO?2XOYW#MA+FRo<J&3xF0&IKBQhVQd1BQE2%1j4e#zplAc0KnDS}o2(U4l
zdv;oQhlQGyFh_r5dQU|0p}MsQz@Hgm9~Mt7nTjNT>1@vXrg;vfo=Se0pMa8an<UG3
z!mQ<1jM$4*BNTsMBs>_Sp6<q-d*^%olB))#;jJJyq}eW6`8`}>xqFgX2*+mhw5a_Q
z(6rG!utb9ohSb~o$4!84J^YcK@$OYDw#?>L6ak}nyV)$yC3<=fSpzAmabsN<bayle
z+%`tg{gyU@gIk82$0lz?q<=8A|B&(qHJXU9h2lj&Fku1R9LA3gz{nUyjhfn8RM2Kw
z*QG16@_oPPWS|?&Xgualq7{BZG*gqaLIG>36SJL201&ckq`}e7&FRC5Tw3L$D^Dui
z(mcd`ol1MO2Eqy%xiyCrI-zQ}&2ELNEEXqZjf==m760*keJg&N4k`U?YF+NFET{7R
zIh<%e87kQSN*jqi=4&1W`TJj%fl1&mp>n{li4TWE(~6z@(<8vNBB=4U7tzmuKKNJV
z2{H~kw?<G<d^caY=*bddN@d88MzY>nsYUbwP+pA+R&#Ubj9sH{IvmXa)4WD9K3Mm_
z3B%y?ukK9=9(xVA8j9L^=*<ZuKZN3wLX0@C3_KSoY$T|MO5@+kN$}rL0}>h?_|K15
zhh2AB>&5$0b(d^CVbfUfHCuIS!*VXWe-_;9+2be0qPg$UeofvJk^Tf_$3$N9`VHh%
z{?a@y_izj`3_F%73)Nlid9JJ_7}*doy-(COSGtSw79H83tP<}uitDB@{=G0$4`eQ8
zjFdM*^aWz3Zv@1ZWn2-ywv>so5NSSCvQ!FQBZ7R&ki#I~dVQ?%A}Klvy9<z$47<JV
z1uNPdmT*4zV?`Z54tQIhTy+Pzi+B7{XcpWv2OL&8*Iq=yKZHPT1C8pRlt4O7jF{RV
z^sI00R{lzx@tY7rk!Ihe=C>+^2F=_C+><0!-IucQ6-QbX=WqFkF$e<W_Z>k*|7tj$
zikFh*@J{xR)NS8Snh<M|>*hYBsjzQ_MkNPcgw=U7<inPOclI27Pb_c<=EVw80ZUP(
zUTvx|t6i@g?Y2B-ye;#pWAya|TpZtorFhMER9M09tLZJY*xozrH)P6oJ+QaZOWXeu
zXq@_#@UkuEvOMUJRH;tbE~@J`<eIdmqdM9KQBIB7v{BCzA;kb6bYF&ZI4h5#MXj2H
zoH)gPp5)}8))X%raqfjxLkilsrMgLkol=1bPT?fQp(fjnVNfc@;?EVG=HGX+>^7U4
zSA4nRruTVYS5!lg`B7cNCqTY5)@v?*wq7+#Yw+4@l#d$2Yu8Q)h>-aaS#6mfCcVG1
zB<K_@+GaXdfF3#x^BxYn{`qjGSIx(m4;t5!=v1(6TA9LbZq7xJ>%t0uJR&-&?Z<PE
zU&TB)DV4!J92&s$OLGyPNzXUs^Sj!Qo8P!c;`mB%f6zN6-)12S0E%-p)002%(5vDr
zw0BTR)wm%3gtYktKdHQd*sq=H_YoHM1r%(|kup$&j``}A!VceIv`7Dt7U$tSMG|gY
zuE23T<VL69ZVU5AhC<~b(e!al0dc{Ylm5nYVJkIgc#K2H{7xc8YO~P|3Ib{4{xL(K
zI!mVY5%|wQzM)x6uOv??BW!rWprv*V5NXWY!bh)SVB~@GpBl=oZ?Kr+s1|)QmX@hJ
z)u*+HJIt1Vjp4jIm_*xQ`<R>_Q}pek_~WIB#oL0X79rk5rk**)apbT*=8vFZ1m~8v
zrnQ;1IQI7p_&@I{oj(GZgNJl&i{yPfHlDTOu{fcfOGDbnwU6AKr^pM9z1$fkMEN&x
z1SYwYqLG&GruS9<Rqh*s{^wYoZY8|BW=Zw_ZJAH4+v;~|z?T_K2ONB=Hxks3S@`R&
z!P^;SVCH~o-(!@ORhLfPfw%^CAX3;hD3=CXHxp|K9=kT-M%nO_Z2z!k$O008eDvwu
z<3lGUki3bOZxd`gp692-|I%VxAjA8jftLWU*ke`z2Hk^_jWRoJju4te7e*j;)K&j+
zJW!h~(T9&!S(Bg2gpi^hC$^4_A^XBGYBRJ)M!i}G3A7^0H_Uiqs=rvdE!75mFd6+|
z69t{h6tbta$eo|{znP7JUrSBZ!UHI2^9JvB5RV>m^3%KyVQlqRIqx0VXW&7hZ<n0h
z>jNoG(?Cmoi<2oG4CI)McJj7fWwyO^d}+ng5Tx#XtNx2x6WzsBzwLiNQ@Y}no#@2o
z!`#x<>s6&G<U910d<NVXVYvB7D5Ds1na5uHeg)L?^~vfquDQ!ZEZjVZQ%Ph`HR9wk
zG1sKDXr@tRQ*OJS(XCaa)nId|e*qMRz(s@lfRD*lX|CjLZL|O8Nm7p@P|-PB8lAN$
z%H|MD(BU&h@4P`xiKR&_`Dy-ibBT8vNE5>x40pu08oOW{@O+4(h#5#l6IMVkwy6oh
z5`holQjg6*;7%9105<%Z1Wt*LCXLeGdaUBGQ`7pW0t{zhPDik(_X{W3!7FO3B*+X!
z3uprY(pU%6_|ZkK;<SAc9dFfhwc@3L0wtmB5P!K^wz$9(2ub?guA(o)mZbvH235!>
z(H)1S0-NHhi79o#Mi6y_BZA_$KNlek1c)QjqhF)7@ntjw%5K>a@X#%Vtm&KxE}usp
z$O@X{m)xU;)Owt1nip&4C4P?K#VhhOCZ-D*#ZjieIqKV{wXLp=c}jn!N_QkMs}qdH
zsd0$80V`+$tBr%D2m~v!iSOYPgZNHs&K@bSu~ca3ywDFMi!}8fDE?q(hjT#}N2CS)
zKap5#6wBK?_WX(j(3bEgMHLT#k(I6rLvyoYGtVaZG#!LVJLxXb{L;v%)x+-q0#|)$
z(9v{n6iy(Ts@7^J;Vv0|(KE92WM_b(S;=6S=lz_^Get(xxE#hC5ly-iD9ZI0x4beH
z&MPI0Hq+Zi7I{0YA6>Di7Bhr)Fj*p%n*!ZXgz1=+wTuYKSfCP4Sg7JNSjlls-N_Ya
zg(e*R(Vn=M0Erom{eVX@tvMUUjyKc1|KPZT&Mo}G_Uw^$c428?EgH-!{OdWRstKCs
zJWAn8^nVquF}cFsU5Pz@@!SxfXk-nN`_5j#PvboqEd8tDMc7Wf4U9#uz*}(d)IPhm
zecEektLId*I-aRns*qAlEiB5Lyy)5;SqrYkri3GW+DAmUQHg-=AgPs`p#3W4&plV{
z_$aeAmtp6OZG9>Khn>KOLerMfR{s$P9u|~)vt;aQhgHNDH#gKLHKyyTC6TQP=blA4
zF)6FIhnb68Gd$rn0-|`jVg=RC42dfv+AAq*HNCXv%IKK61hPpkJkJja!CXB5yKAWm
zzUx*b*f6<;N*`qe3(*_as>>FRk~~)^#`WMLUcZ)iJb!0gq=OPYmyX$iiw)pJrxr@r
zy*%yLw!K{!RH5-dbQ77@{<iZSiEZ=hwt6-sGh|YxEX&f$s4@r8vcGjm=yPIZv!-6<
z;$4rGlzqV3?kaPL?YOjTxT+a%^oY8=fy+)y$#h%mM$RWT5BzC-MKR?|<mF3{6>O+8
zfzoT5(0I{^ceetJ1AdeavVZ&z0Uo+YN0h{7oA5}Hj=`T@dy<@9oqzVHRdSdPv88E&
zdbgN|t?I9E58BnAVV<=sKOlTL@vVisy=N<QBqGuS`o_b#MIz#3H}?mt$cNAP#3QTL
z(U|vM^-RQ?M`QjQ|1HNbku`VxQ#$^$V690y&NUwT7Ku^sK}KS{qBEVc-Uyg)i!67{
zbvQaC9-*sz)-{^gw62{y8r&b@lZ^9?By=X=4}`h1?SG3VaR(pW44=xE@5^-n_};V8
zx=9EG5sys@ARmNudnWsMcaA=nR*aJm{O`z4x2)Wo!*1glATf#y_W;?a6AC99v;IHl
zxI29=@#6}!)bMrbz%#v{GChqjQ(id#o&bSo?&8I>b3b<@w}@TCkI^g+hX-f}xy}l|
zB-crK*zav$(O-%n_#}ks>A}IJ>GyKJNz~z(Wc||IS!|M6Ao^r8dM*qB@@p4CZPa})
zU0pW!Xuc;i;TTUz&ngagIKO0Hzy@}qRXkXUka$i$PjZm{^S8+42$~ZX@KpPH@hNmp
zwf}`sy!UWisP0=k@^%CVqzGgm(kEzrXm`DLD}HyoF|v=>W&8lXbn5l7H9uMzK9{R2
zr(+vAy~x2M!~K2Q==Yqf$7itdidq`Myx#sGvu#UTN$)!+pxrxoT0D^TUM~9$N9J+`
zZE2fMH|hp7-sQU^1Ba7C#RWoMy0K0H<uZNJ{8;hBQxjOTtfU<^0v{ge8V11e;&`WD
z_g<o2bWyz28{7YxoALV**lVkLeB9+Lk2PDZRHn|>CWy)vhfb8(qRTWD&r6knTxR8=
z6CN?jcWQ(q4pQ@M>4ew96f=%&h<)ruGUj+72Cb3%Dug|DSqfMPeXK+&-_|~$;;Si3
zKzsRzZm$$A1*^o~s-lD&wrfq_x)4GkO1y^ot&P8t0up7V$oU1;;;h}I@mDj+NrDu%
zAfyr2afB|eG#z@Deg^KvNf<wG8qQ*^^ia~w<nD|!OdBQnO|WoxhXf5K5ZJFs8T!Yz
zaBeLVaXLYUwERNMo(`-X&s`3?zanUjbs$)Pa+9n0m8~QVI7`QXk`;`i%#^PfM>T{@
z@J&L}XSVBdUH&Y2ds<emSspVa0X2j3_p(wP&ARa5bD@gHznr$3=(qRGT+AEAC*`7+
zdp2GdK4543n(r%w{Y1K-VqKS^R(=Wx-E{iq`*$ru?D!c4_-R1)eIJ(MWBd4892)75
zZoW3c@tHb6zXcdER_^O~;m5u&Ju*$R9fyL@JUwcVpEJQV-fzv0U%h`1PADRNYs2#K
z_IKoX_<`@$4RHkGzcMANM2`5r_rmbq6#N_gUJAVRZFu=sCSim5#y3CzLvsLhZCz;N
zB3tm^IHo}8G9AOM(u#Fd{sy5Zzv_cOjV@Jq%`i*xM>mjMJ<4RHRkjm#vsJLTF$lIr
zuw5;)8Tp|P1+xI&mxOhMS#7>*6zb_D`?3yLJJl0GZ-Y&+x)`ibX_Fo~7j2VIxj-gf
z{X~D0VVQ|s<dcHj+0KSG^|kzEcZ)%FuShuC%b|by?)pdus=tFFUg~Y0i|YcX%>6YK
z?c?jg7G%eJTC8%us@8Gd^vXR(63(|eFESioY0VPzs*X7xdS2ieviCq?f8n{e`@aKT
z0`(hBpQYeFG+UPu*(5N9tJ_`*PceloS60tWR!cUA=?FMheK)cDM@9Z$=t6(51<2Co
ztJB}>Fz@qhc<|W8<0jUxOq(KYsh{%*uhzSyFh{UCGJ&66?mt?q_qU__vcN4Ox9xt5
zK~=FRXsmOmIN0@Cl?6&c_)esZ44R7%L3Occ0C@ua{=7)FTb-~o3EH$D=OysfAE=bA
zv8qz*f-!Q-*gj87Vg^hz5(nPV@<uMr65Z-s*dqJ<^(ZrSOM$f)I>BtZ|B6Xn4#^fm
zmbKI1mZo??_A`@Xe2be|P~QewXuMZC)l3j}Y$_psX6HD1Ti_!<>Tq?{t<DIWrzv_G
zJi=y{$(3Dom*`x7b7E~v1lACk5jLf}qz;H%5?zvKq26TL^@O?x7hx@VE+Awu3TH}m
zRQ0(Ow@IRxY2<eJnk0J{mv=~l=dY$A_jBNU)-n-+HVv!cK6)N!Ss>-FVJ2&vp#^cK
zOJ{9C<{_L93dhJHHs@CMMFQC~u_bE}T8!vHEQ7r(SulWGW|`8+jTskmZf{-P?AaKB
zwJpw2y*!j!vup`2Y-0uUPfw-D%|K7MbyN!AjcjzT)L_r^+_@iU4-Q|sW#|fMoaF1+
z?+yy>xF|Gm-caW;b`2M?;O0JaS$^d#w$qVX40NdS2a+bCqUXDq#0#of5DOe~bI;~~
zvhyGDU<~yroOSkoCM-Q}Ub&Owq)fQ$DTT9FPOXQ<z&8unHE`&o?AOiDMwOWBjLtR_
zY6JM6A$BW@cU+0)?P5!lP<ij+)vRW2+4K_yH9jFiRyARTS+cG-057lDeaKy5xyB8Z
zSSE1X_4BO$x@1_>1rtw@)kZdZH!`3uuH+etb@w*lEnI5JA~;X6syG(ANlvk)#H`xb
zHAizFPx)P3NWr$jqYo|(E63aE5H<%Sh{fl6JH%PRZOylrX@f6+gVW!gW0x%l<}Ws;
zV}xyzir~7u^)s8S{#$Xm#J=k!qnge4a+D2Z1+T7m(oLi2ntrAxI*~kqueB?kLVdSK
zFWfokyD$3Ji!IpOd|`*)Antk>M=33`Yenx7eBzA&x4cq#U9@ju^Dq>IgAOMZ1+1=f
z$;hf<S1qlUBw@MaZWuJn0Sd0CKp^Z|oIjfagm7xb2vTI)%v)4RSS@TO+e(0H5&uR1
zY}Lo4S%?0|2GXIbZ*tb#Eegqlt1a7fb1fdp>p3kju=)70n&)b)+2A_Y$m)Z3$!wvh
z)C6te9sRJcr>;1oOqYNTu4_;H(#9u)>)I86u<=ZJ(%Y6QOLhQnSW<5jo%&L5-PIM_
zGmEN(Xkms;)5_zXciI!_`qoc&(6Sbh9dx_8rtONdz&=c-V0#_ZGYh5*r+*3lEI;i_
zrDI0Ox;fY0*E5TbQETuq6th;Z?3CUO6k1Zwj#Bt+o#sHij;APF#tu%Cutd-c{+kgf
z=exuLsg{!cHVb?G&o{e3Y2zgi`2(#o8!J@Eye124A(lp4P4zu-xB<E5%R3}v_Si|4
zND7mCjG2{-D_qUQgW6&lD@S{ga#5d5&>%0zgCs*c?B}h=*_^GoEu{z#+F26~*lA`a
zqPE0a1PC9_D5|@s12c}?l(2e!OnT4D64lh7FjmlW&c39Q?LmS2o23@y_|ADmSCuce
zy%cXZG2vjC@Bzc2r1rVcw?C=i1QmhYLAGV;;4Fe{QEA5_HxZyrc``?4*<>^(wbe|U
zek>h^ytPqF<*c#V&Rw}xu=U?XYgaR$_VzcQ;314g3krNog!^xEp1t`a{yl6rQ-B|X
z8$-_k;!g2)+lJb~cEZ`lviqpW7_Pbl+HOW!&N0aQyuVc(bQ56`gR!tS)d^yvoi=8j
zEt^=XV=OZrlBXkkHST>$w>*LQaMjX;CbtO5Sn<mCiTIk66VkQFT-1=n3bvXQW(o&!
zL<o=bJ%g7bFXgbF8l_Ay@TZ~G3U8g0m#LW#;WkG&V0*47#MhSH#rSid>AcBl3FyD1
zLv_+^Y9b2OagWu?VGYKQK6?;Ny#8LUY1ec#)uPR}mXJ%}gChDM&ytitEJ7mddzIa6
zF_={nP2qJ7!|YtOA#t9cN$&y4CHbB!+Wm<vrjNm5tqBoY`ZlQg?^?NtVL2T%%d39$
zpQ<6|hvX>D|Gk^5>vtf@7w3R#3T4kiR*<HNum54}9HK-EnrvORZQHhO+qSE2*|u%l
zwr%s4ZCmg5n{^NR@5veGI<X=$GIPhb1HwwB(4v#4d`=HL<&KEdfq_`qUptpOG|db)
zv@}BhEa!EDqI}n4qP?fqgb1pWTw**W*wBjh!inl7G+E<MBnwMyVGI3r_V@uC9&;5|
z2pA72?s$>j;C2ArPBBWerU3kaq2TLi20sBkcG^t~$_?vi)LZFIDk?4Yu=vCg%hzqW
zbqm^;2X=i`20gB|vF3F7GiRlRQxN5-iU~N5szv-;wt&DxrK_*vVfv0E1g9Hj*Gc&k
z{Pzd|183hiY&VZWozh$S_w9e+d4=I<njQcE0L%aZ0LcC?;#?DF!~b2MD;qZ;H^hJ-
za{C^s*daiA6%Py^9A8-pUJRiy6=Hlr(~@8;{*oErH)a<!>}bBrV|mm$h^5UxJCMy%
zRB?IIT5)@GUkh1B+%Z%zqJ5`djFC0G8AegxfcB{rzOGz+C)+b#cwiMngkB-;#0z@I
zAJfzApgXt%RBH!vw~riZ7y1~DQsJ(V6)tZK`BY?Kf&qRUwvahXIcTDhcN}GwP(C|=
z-!bKocJD}6>5cM0W1ZL5l{R!kAH^49b18dd5E~IQ_w64mEzcZxFF0wL89aw=)I1oL
z)SZ09ByNFcGis`;i&<uK0T~BPCkgqj@(uLgfycl`)tTwQ008t5|0m$F(H}E2Q>Xv^
zmxid?+8>Dhmn8wCY%fAGR=G<`tx5{Vtfbrl0TZX{y9w<JhQ0Nz)+f?o)lHw<DjUcc
zOAAP7j(M&}UQRSG#*k8K%faV#|JC6bJpV6K&Nq}i=3uEv!*=bS;zS<<TYWuQlGJDY
zxHCjfU?>7>CAy3^k&_NJUeSEIKPn^@gE@-_bzlN__l3VYJ70fOvqC*qFpB{z7haMh
zEae>H9fGl?KXkaM;z@P{M!^A@^*DECEQuM=(JTWHb6{FaQ6WFvMtn^#P0%wNN3NwM
zY6Gbb_K4f6gX9NPx}#?XW66&#Q$^)u8cNV=2mOlgB9&~X!`Czl=Ky)G+l(?4S4fz_
zJtstw{O--o+4G(*aE?;|FrZ|6xN{c4*N$eo#7Crz?#Bkc++Smz(78DItWd{tjH*tS
zMpfa2yJc%0rwas8#|-UjK0G`aDnRuq>bJ43n|SkBi=_D2L(8in`I^TGi=K$qxvjJF
zcgA%wcy?ZLmm2aTmW$kP$t9#^DV0A1P|N)&fz4!wp<2O~@#hu1W<NG^s?s$LAWG@P
z*4hOJ%XT5&g6fSx(ZRSWFw!9nMfX`pc}_ADG3A*NwBjFNY;h_#*B8$w04Ou>v=%?O
zUT?Yib!rCt!6=|!RU9a=G$)RlaY(ijwFgB%9mmrC&@|I98lEJ=?+kA^BjG!3EWY3$
z+w%R|1*Z%A(oqKH%IFjU<strfV|bVZ^E)QaXS_*_!)lZ$V8OJm%_!w(U7HH*3fnkD
zv+02i(i>mdG1a{VRvX#v`}LMmHn<U}nYR_PglR_bma{LOH{a=A-|2l|`bAwU2Yj1g
zQ}%`c47@VtxoZ&y-op^pV)TjR?2l265b#CNV360za;Zuo99-wjNNxqVfL^3k>H<lZ
zYbtu7;*7AN?(*kHfrIEOSo*xS$g+=a(o>2G&pQ(B9EuB3<raba$_~G#u!0zNLK=2_
z;M!^T|6aJL9(B~RmEx5Xw;;_^LtWy4RGCk^I(1tc4w}cK`V=Yqrq8huTbOBH%5k*^
zERyP%S=PX8f0djJGra;%az^!4Be8>kDq%)Ai48$*Srycpr}~{Ej~tVwQ$=*^lA=B|
zl+o4mQEEOk$c|j7wyGlYoBc(u=zuy;aZm|wJCo3^;8*`0<Z0%8+TWe$8^6uja(c^f
zY1IdezGGj)ei!w?f6X(S&1D4$YgY9*W=iq@qVUUQb$5~dfd2Qyzge~O7x`C4@qhpT
zNdI#wb#}J-4>p0eaSK+13@D+upD1CTO_0`A^#NT;wfXbs7N+%8N=wRFh)IdrwUg^z
z^b3<BXb^;cy}!`pI9?2)8ZF{8Zm<I;Y+l~!VoBudED)Dyrn&ztCRfOr0zJfI7RmfO
z5aK%m17Kh;=&OOKoobVrlfkIZOhT~Eq=;wb9ZrS(0KPu~_Jse`)5j5@3YyP*l<$LC
z(IMRR*OTrcrEj(crX><SWoIUN&%+?8NhxSk(duY*^Kzy1a6FJmr#UuGCP|yAl-1N6
zgtF|q4yRmOQ%pQ#6|VAx8ScIYG%{ll1C_Y#cc8!>g1}yfj0n$R-*3X{4iRPak!Tv4
z=b}N|gRmVU*&B&-V?+kF6f)a+xf3iSeXWPt+Xpuuw7imYu<j<&=+~+{v=j=Xh%Ra0
z{ZSr1XVSEd6iqC>yc|6G-Swl>ha02+?;)}#`G<%77b2Q}A>#PYA=1|u5fv8Jmy{Eh
zQ56x@7gdmykr!7LrIS!qfdl~FO)AmQlP=fz;|>h~2y*tX<p2MVY=XQzF(b^#?KcXV
z4nP6sUOl*7xe!pr7osTjb%hgh8|37$;=z25ec!B0=K;!y$Ir%XNuO3fDh+4M#%)gj
z_RKZ?n+u42#DQl|;On%$2?$;#$81SZ7{XqWCA7Cf!Ix~Sve-~{cY(&ZP)sV*IJ^u8
z-+(A}?#y7*6x<%XI)+2=_&;>~VfZ7cD<8tVzOZD!I0H}d9wSy@5IXyS`7{h8MnGF2
zl~_tyL&4KxGP2Ecx3{-0f38)CwOZ!0XydNhef2k{f>s`~<Z<sUe3<aqMM3hs<Id|?
zsc-8NCuZQ}=SX25(%V;GM=s9LI*sOf?A;TbbWQ(l+B2&`v+Q0G<jMuN+CJb2HjJSb
zwp$?}5*B!DeF&$ZTSk~M*Q)t9>g=H<mkE`px_00qkw=9nOKA1;Fqiz>8CG8fY5j%<
zlNobey<`UPZ55YQ_hYgnKY<8NdG>hJ|7c#O7@1j%|AmtI-&Xs7$T&+A)Bn)Btf(&7
zZ8D(v%&F@vq@gu{l%m#HvqlKAC@>53<5gBh209bs4a6Fip~!x}Zb%Xk7BAs_Fi9t*
zc+GM0_1^!fE(Mf5d$hn``a@9Q?Cku#Z``#MBI?f&5kGSZCu95r9TBWY1dIob>}d$W
zEQ`P(9B|M4QHr#v1xGp#@)6H~ZyZmW!65zbae&Rq;BXSeeGk&6hnInl5V8D^i2!J|
zMYumb2r*<b;QkgxF&;4lH&u`dPuhfN_?SO^Nm+kxptu)pi5?3Rs<W7n7f%~J<3N%|
z#k<OQIvuiP$HCa1<P3Ci^f3C==Cv!Cx)%Zwi$`}WQ(}t!7|aoyio+BG-I<iFC#Y~2
zd%gLMg~99J0!Kh9F-)~VDmhF@Wc+<P^|pr$hgPPbI!Y4dY?+kHj>A}TN?zGBj&{0;
zL6Nhue)I^&AhABcK2)F#dG%1jS41m|K@eT$XG4mlcu$NN^foa=`k0NwpDV*o09LM)
z<$k`>P1Q|y^Toa}7w_8Qn``j3hOu3A;WHO#?#jIgE~RDhx$V6jRHcm7uOQYt-gDj^
z9$wcxyO=d0>mB^fpuE_c>MAZuEXZz*Ov_yH59r7#bGh#-ZDDy##EC^wu>&6xdgj#z
z9L$_XHP&I|4W@k8?2LdDv1}R&1w6Fnttx#LQmx<eW8(tVp?=w#_&!cVBI$=*RR~UP
z;cy$;Aof<rQn9>Uq@^+?5ANqKEm!`YvO~9*><+s|lda0<xnJzxvYA9|zKi0hQng*K
z>hlnn?h?<Xgsr@<^cOS-@ar_WuBFu>#qyz*_!pm@+K?P4Wc7g(G`axk1*(F@K!vUJ
zKgCLQg0|plk|n)Vn$)6m5XV7^2$Ks<S}RI#yA<T9k&(Cq@9>2$`VXGd=<PN?|HJ)C
z356C=+XMi>>HrXc<Ud!mf1A$#-fA{;Tib87H|{=CYutv73LdQ6b!N4C(dUm#5e?T-
zQ`!RS2;|dptwzwihbtlFjrsL4laNX?rL>}Z1?sX8h7EZ*n@Qy4;Upj%k!|T>@zpXj
zy*-^DZq)O?<+xjmnQ5bS-K0-19ogGtAQI25N=|wWhZ7y_0m<QvYJN-y;t>ex96C%G
z%>pHk0ZL1%2_jEWIz<QJg07#xKzK+vH5PCqkz-D93iE7m9hsntMc1#9ZkdrpPcUuR
z6vdB9i|Gy8(8g1<Kusi$l4zQs_*44ZyM;sj2uK9j*kr9Pw?s1L9#I-V3+0yV6U_~R
ztd<3vwcF*GYX7`{eH|Z{qyfNZi}#TD@T5h}qH_2AX^jB*`Z_!N3jSKtzf)G9sNcm$
zVvn03(J6)8y^pqiqii@NJu~DXi}i87>=<s)nR>U1QGg$2l5K=(vsM6@8-jV8ZrdV3
z6{2ZQ0Qg`iRcs~(^fE(qz=#h)NcZ9=Mc#5Ty9v6~L`HYb%Ir}VIs^#Dl2!zCNnL*G
zN-<kR9(<FZI3Ug-lP64JOP9iy!Db6@jk*eC<CIhjl*lx7=>RMAXq?oufHGTWgw_M7
zUm`Vdkd+MY@%KlWS2V<>00xMLV%|NWoU_bk4G91%nubP19aSo*@BFk>#ih4QH?8+<
z0M6l8bV@tQj*K}?4jYzA!Z1rpN$po&MgaGs<Gh{T?t<gYExVf51wI7qFz%{tgg3;)
zVMHZ!n#LraZIPr4_4B?U(vB<%e6bX2MLC;-D&^>uNi1lg453I1u^3qJYs)8qi@uL8
z+z4)Paj2=Eq!?HufN2CcHL(G%!c&fC`hxZ<v6&E>XD_5|$Sdp?f<cfbg&1uz=`vlg
zl-!kWR|l*Y<eXE6A<xbi^#A4y3z+Xov~DfUAZV_nM*26#B$N_OTg4KMpW&}$L|K9e
zG@uAVm#_rUV6T~Z4TTxtYSBH!kp?B!ib9^`(q~BsDT+?c9qvGMS73rb1SaSpw**uX
zZw*xN6k&)%OOr3<V;Rtf=4igQ!#>myex2CC{Am?ejd+eh_q9#9Yjf-BdW#6)5MA*q
zV74}#&KJ+^#dRSlAV4x|VdC{-Bh{TDz|pAdY_pC$<;Z9feT!JYi|S1EkehgZHOnTF
zo}pdpW1EFAf;U-GyKZ8Gt^Tqes#|9cr--aRdxd9&+u=z7-{b{^3=kP^=D$n0x;zA`
z9txcWB>VET*-*y53PKj|?scJg*kJ1UI*PH8qYdX@b;s!}C9-R?mdJQ@*5&|OwjTLc
zYjoVnn?d#W<&3?4Tot3~g90Y(o@o+T>_;VRg!2)Z@2ciko4xD@)LgekV9#=msRaU=
zwTY;I3`LURq}6_w%z22|FY)Ixpa1M|4kI59vD^2`FA;;~v$V@LwRuL&dUDM+DayOW
zs3P0c5uw&)*nXolq~<x4PP>$1cf?4Jec~L-JBKb$3+-{+47RCTc0NM{r&eKY_%&^d
z;`Hqo(Q8HnD=Bt^@R#R9wlP>-8?il?FwjUM{BZ^d#~1X*x_xN}p#7hzC`jlaD4`UT
zKsdT&XM%VH2kG4WO)nLTj}sVzA(~LPLV48^aC#}A7==iN4I;D{8kjacVQVmTw2#cX
zon?sycI|QJUMb%^+g)FvTjAV`{s0e{_@D8J`|Y~gdhwt2%pLbOlix?fa!p|W(${YU
z_rB7G@!XGC>$jwhGhgr9$`HP2Jzn=zYBXFw9GE%!uCT6cP59pZzs)zU9_=PZ0#t|L
zDVwV3X+jO|4EAT%?Gx-FN`gW8vM!O2{t<o?Y{AB$_0A82BD0z}xv~R?v(8?2G1rt2
z!AkzJObpb4nC4&OAv5`0D;_!|i2@KH4m_#<d;w^CO{W|{&j+}4YNZ|0`z7Kw0L|tu
z<Pp0ogWY#|{dhjrj5~mVbA;<7SQ~H2Q5iV%1G+=jHHE{0vD&S@ZdUgk@{0=M<!%X!
zY5*buVZ~NKOlbXKITjNf!u;h8qFDuS<_Wy9woCtTV9XDJ%C-x@i)T7;F;u~=4Ftfg
zLxu!OU?I{p!@(%n8nU+4H+!YCo^Uzk!zQv4YGRXE3RwYO#^Z9%8z6>hr6()L#5CIo
z@#&z0lZ|^ul?S>m3t*?M;<YQoow3@j+_whpOzYH%QNf)7=$h-DLV`8pt+F^*vO9A*
zUD8DXYqf{IE7iDKF2PttVeYx7494Qj3$m?9JTnzjG|Ho+a&XRrZQ`>Cd<L=257Yy4
zVYCLULf9%2*-|C6QZy7`FD_h`7GMD^Np>URAWRC?9l8LIL8YC%zfb#*XpJ>xqB$U>
zZ|baC)Uq^#u+gNtJfUsXGvo`~8>%g#usVu`!tr)JGZ42~Ldd`bjDr~QUdj?hvsqo<
z5VS5e?%siEKH~?n%0#<t%1m2jrk5}`z{9rBg7an@>n$$~_@mjZgDiQVELS`egaUJ!
z(UyZ)PY?Qo&DQ@NxN9th#hDj|<NwhM3kKvh$w3vS#=v;CpO%D$`LPRN!Hz%Cj{h;m
zRT_)4l*uP+jS2jgGu?x|69UVb?8n|Cofz?lds+4W4gKb=#+vVE1EM<L>pv#X!Ic-o
zzqIlP%qjVc6@-NWceXEqTzm3ql(Tw_Jr+-*<pm>YM;5AS4iBc~PkkB>vYIPQiUzt<
z0duBVlhyfeMZWFb<-&vha=3T5Yw)b^9fzmzSlK)4-&!jY;9$9bun_%!@&VVa!ExCH
z!?=WEJU0ONNG8El>x}bEX|SZ5E|EJ}P_|EUE4K#yM>JxML)2>aV}V^qF<U{p!pkTQ
zjIJOJF43jiL5F$)YvX&q)H^rCu9~7Vj!2`4gwizMU{ZQ5K+q(dVlNpMC*i<<N=^{q
z+2E3Rh*`p{ki)4viyO1OB_Al(mk@)q>4-L<a5dLPzt@2`oz+<ExNk-H2qZ^lN!2C@
zz%#`))gcH?9pae;pHAIWJt$ppC6VXpJ5zY%Gp@WtF<;g!hm&|wM{Hxt{f9^sh*Y+x
zL)kJ5$2xHu02(%+jU5*>I7R(R26mltZ4E>hxJP_Yh>ubKX)0@wcoJI-MByn3#w`|<
zRva{6A{*pq7UTD~Qw%_XL-)eONTe}QMIayvDvjQWr`icvA{zYk>SK@+8{re%DSjZw
zsNpey@6sCtUdBX$$QqvEu!V^p<W5+vZ&ltInpIh80JCYOr9gw)P~32<NFo!{dPEZ`
zj)dk08PU3gj(CmCmBtyy9zo{@Wpr43{AY-mu#h`xy}ry7Yx6@@+0^bD31`}`()!d{
zde*`PWZz49`&w}PY=$-hcWPTU=WbPs1RKr5*?bpZaGpMTekk{O9@5GcPox{YNiN%?
z)Mz>rIN*_cNF6?e+#X&^glI|YGszq3H%VYMsOom+H}o+ym&`*`u}D;p1N)1eOaCEG
zR}M*bY!kDijy<Y3HA=dVj_0_YqNyS+QUf3sOqaL8P|?v1+-T^603lA2X#m;~5X}y#
zTqH2+2V@<u>(Bp8Suc3e^<aR)-5fps$pxK|_WsK|Rxq|Xk1qS`6gf8C!=CArMU{oU
zEQmAJd{wtv4#h^3)wz;;(>En{Bk$&I&8@p-Jmr<HU6@rF{{GYOTfw)`Xl9p!spA7H
zbA<~Q%}<l9(freBLT%SK1TmD^4qoPPlHWwHu!Nzs6SRLiC9{s-J}}|6|KmYJ3<hEe
z!I{BBL9%L_X(HLWWdzL}iMCEi?_%P)TT->hGFcv=z3JZQ9oW~)63`g_S-E>X#Q6v^
z30iT$#o;hD+i0HUhK9ni+XD;|j%%Sy4oHXOqcYW%6VvQJIfjz|WJGHqm>8(ya#jJ4
zZ}~JXop_CH?0tCACV!C9H?1cPWVU3Dq7Qv%)&-tD-G_tQk!!f~-gJ4$`@Bsbqv#*Z
z_(Z&Re<Eamf#a`#uNhRW)o`!f8|BaMool8Y2!<PV8D!kO^8Ge;i>@1E1h~9Q{DNvk
z@{%WRQR7|(Lw=B1dPD*y{Xrz=-2W90$RX8_Hncaj&<7gx^EbmIHNq|EjarM70ia+q
zSL-L2lh@?6yqGSS`TnhVBtI3}57iBF5`yO8Dg0|P?x?I-p9yU~`iBUwn87GsmWSL>
zK+fW0{rdszJ$qomL7-EMhTJazV7N~0U1E5yZaD*&b0CZ4SfP(do^pzp%*lx;VY!5;
zmbKWVc%XJ)BT_^OKvJV|Bdf9-v_e{O5MpGB002^LSiKTa5D_Tt2L@P+nj;|mgE`9M
z4gMqu2tY@}e;zDGsx&}q#C;$ly}Y4O3iC6{-Eto+!?Ns5pw&U{?w3JyUmmM6(H`Tn
znEITDfyPihet)V;A=-0fLydQaWX+-;$R+Fx?{JUJ)QZG|D}}uIas~&Qn2U2j+d2B#
zN*dUC^Pv|_BSuwa6d4<zWd9i_l_kEoZ*G!XXpC>%-ptw0W*g%qh#t?8(>+p#km914
zsMhxW^Z+lyVV%qaY@t@kA)g5O`jzjQ?w78SFCm$3C8`>+2v7<lBUmJb(a5*uu1Ej(
z%E)2k_8cNhE7uw;zJO!3#~RhL(ZgECp62)Br&MbFd%%i=kM>ILKsw<(CN>XD8yFVp
z9nIGD`d$4c=8CX?c5My85-uL6)-}d@sKNA5?M2zz1V7PX0X>oRz%-l{GvCmqjUJnD
zT}ja;zhXZE&b1Yyh+*q|82ndbG-$W)>holMl*iSjY8&5mO>z$3$A<9L|DMen<EbCQ
zrJ3-f>K+CTs3fm72gGyOPnt8cv69PeLrX=AP_0FE>(ltV$|$qFm6U}Wr4DHG8gzsN
zL$_kfzEeF3n3Zyqhb<-a7hZJW!_e>~_3)jDksm=)Qcz@tcw9wN_p0i+mc?M2>t0c`
zD}M_Y!P_p{9-W0HB}x^NF);^OM3C?4<22tg8f3VeX~G$Agr-CaiC*$UWQimW7_&-G
zM4f~p?_71|!)u;cVREAIj>ABkCa!)p`8q?&kj^^F6zPwnShMHLXK*7i(G>P@xV=#$
z516A-5-|0+XeJM%VkE)&K>;q?K)txoanmem3}S=?AqHCv1shypVIHVgceR@a9r~P4
zeH{shk`bt8D!nRnC~2BZ+28_<&RTA#1^TMV4e#4ptYgp&;Hv=ioAX8*o$~HIvq!0A
zIO;o*U-h^ME{Zp;)j23JB`Q6{e)nGi&pAOU4OF7WLQi0Vh85PI=zaMGd*q$6bEolZ
zKLk-JIJ$(Os!QwhC*o$j_swu?`S6Ti{@2vUJ^6009L31;oixD7se*Q}Pllu;N|RyF
zkYs>7dAuQwNurl%dCLX;6~N6ETZ>sUHw3!s+Xs|ITMimFoQNiLY2tEUI=+`*g2uq|
zWl_&m6Q9k4;)CR~s39?4M4H_F0jcCQft2dXcfsj+`lQ!vm$%gWKX`v8%Zw+aAlCbs
z#NJq-RlR9CeF~F-$)z`xKr$07)IX;nhH@(7;<|K+&g~<|U1u`vW$;}xf=%|680-C3
z%p6Exlovcv&t>l&Xia%`ZH|FGzNpROAdh%8y8xnub{qbBIbeLLezCULndRDsyA?&E
z-K#Vd(7~)%Y~nnmVC-^LqCf=~>>^Q{iramb`cMNWXwPbPLW(9zsl!-xh<E<|P8Yl@
z-C+Oqh1v*FC9#*?dFj$s!AOQR<l*H1y+8yNKhQX0Xye0CvUhqzzkV*t`AO`dk)R|`
zHI9bA`DpQqh=;<1iKJY*0<nq$(a*ZgTSV;CA*<lXSJBu1M->Y+6#Vd?aj%6<p_)*g
z;7CU)&RkvQNd~4;KU1SXhip=J*LRRA->hk87tk*h;i6wecFG+}pmYM`D9EChtO$Qj
zHx&3*nZBOU*9`~2$DU+%6erXIUsSHwlsh_B(;rR(8VK9Tr<Ql;;BhwS8!m>>W+rGB
zFCF1kAk$8`ATmT8<iwm>CA4cUqmflfAmwXvKlng~7|LeGj;pJGy;D<)GU`z=S_wr<
zu=qYJt4?MS4G?<RH;;$e6(B19VwRxu4IchQ6!t%Q2$S#?f#!p`?IYY+kY{`X_7&qF
zQAo){``)YC=3WRdzqr!>)oz8yy868ozyT*7vcnz$&x*<95GRc+3NnJ`6(Vt+ByG-E
z{F)7(?(c5t|Jg-ptc5G5^HpxPM@J0h&+Ogzwx`3>OxnQ4^)G}OabQGj>tq5E@~rXY
zMFuQQ^n%=A%oOXg5+dOj^v42X1f|q9En_N=NW)K=qV|v_g14$B#d&$<ky+^o%G(W(
zvs0;2{u_v_oS#<)$+*o4GNS%XxW_Zyv+*|rRW_Qfpu)RDf8x#58Uk^DOy{b7?J_5^
zojPg+#(7UAagp3_u+A?r9Vd);HAr)T_~0F>?+Ouxc-LJzMjQ&qOyOEU3<4Y*1>7Av
z`d-hMVfEX4e9VL`Fxb#aXF!vW9cNs2^oM=yrMhQSWw)f1V?3-C@<>lZSSoW#HzcQ)
zMDOHAp)P!mPa?Ve;8p`J934(FdRN4;abjeJW;<nV_qJ0%@==sex9)GZu`d0GcctfF
zgAbfTanr)S&=#faVRPv92T1rgDof~4_TsmQ9poxONK2`FHc8A<%NgFcZ)#WJ;QUBA
zWy%Ue!V1dPg>fO@%M}{`5Pt<b!g!>~IDy9GQ61kf$V_FGmPDu98G@px>@c$_`IB*X
z-L4HO#beFD-DH}PjGl4fazg6ep#0pyAriGKAVpalkR2QOS8QE0o=*3TD-7iB&ykPl
zNO3aC7sQ4oqT!0CxsnQ?qOMnk2qMR>-0(7d1hv05Mud<pvUSp2vHhcgaveI|tK*Dy
z!nqKwqjN{xfGI`!v^@u}f5N5PK?XrG)q;V1;y`7|@I(y+1S~|(?9Zro(p*?ABjY2D
zV`ztHRc==^lSF?or|KM1Ju)Mc>HgLSDuAzt)VD%uq9o@TW)cl`qTb6#452bA!b#?x
zWCm+$EPA$yawBuuy$Buk@VARl72&(vV;k49;#Tk-)qtYHsB|D#nb@!M%)VNiP*rO>
zE22Z@7QI=B6uZ}+`_h^y8TN_uEcEUXg^5RPtLm0b##vRO-xA&V^czbxXezU$M;aeO
zw>C{39?+O<T+l?lX?7e%)4xAz_R*8z82BLF<6+K>yPP0m5=OXLcb!#tk)X4w{joT<
zHz>WxNIv7eXAPdh%OJ$=px_sBjF{DPG^N;4td7KnK!uZ|o-<TniSxh+kJ~i$yAX%z
zuGs3lf+p3yNhziyg!#&~%OPVdr8$V6J{mLI{5NqaGXu0Cfa^RQ3=zaA$U?4$=yTMV
zMFyYX?l#{Djc;tD7y*Vq(kB0DpUlY6zmEWp;sYSp_iKH-m9?ai%JchLcGiL2pssYb
z4)oQ{?8c7JOfm|Q4z@AI%(xIBB5f4yFHL;u{yOcpJ6SERu4?v&UBcYR)vetz&bD0N
zjJK(>@xigqP5|=^%>FJW9-{gDz>f52?mGx$tWN1^d>e#pRk^f2qgk{-Rv7hGv(G2?
zHSwP0d;uKY%WL@6jmITh48968`cMtVm(I4sR|Y+9Pdu9&H6>0`^cIAQp%)2z#&Xlb
zSLSobkqhUkF9T}NWBX+LZ8^I3)aqP7)C%Ee8D!9IDl^#Okr+uVQ<+zowX3krntk|q
zO~_a35J)fHVje`yngccxlvkg2Ia+X+!x31FdT1<$Bhke4uYA(}DaH&0+0bnLt;5<H
zUUffaEV#nhOk$3n6`MFR!?BS1^;KI(b)+hq_?KhHcKEggO^{sH>g`kI+U+E)n%bik
zgJkU}@)n!!a^3ny%cy4)QdyxKHnDy^H%9@D>!S%rcKi1Z$mH)^_$qcrypY{BdVShq
zfsHUZlA(VaykA5&C>U=?drsM!O_Qdrm5ao!H-LS$V<HT)@H6owhNIYey~zE+UEA1I
zgIvvsT`tFwqmYKO;J=H$2<-U&Tq)T)YD@EzF&D^BbgP4u0a&S=?D8Z>yV(BoC+V);
zORb#My>P2XrQ&EU2SR4U(R-G$!ozWiu?FTeR?sHzqWx2V4i2%%>j_n)D!f3h)`U?P
zXtd5$1c*dLc9}4l$KZ-o(^xe%d`DAD{Y;P2%O>gqxh>Ks#Yo;2X3r|LMU;@-vwxUf
z-Js@yG&C2u_Lgag_Rb%!i&w6m2pnV-cBh|0Em$<hvrjg}bh(JBc^7Kec3{h&h%MFo
zqktN2nELaWG4+ERUJLzyrq@|D7_{&4jeGg1F$Z1V_+lsDOHV!n5_Hh*e)22d3bzCS
zmXTS3&e|_1d=@O^X&0vG-X*#VxKuEsM!gJHV3dayYiT+GgAeVOXg?S<-i%*VB~$At
zcG)18gdd<qdKzwbX7w&eze}p}<D-g;pG1gexYem`k6q%ZsbF#VR_zmDkjr<ppH_Ds
z3L5iLJ2=)fFyut9kh%C!G&*h+^$u;~u<Tj|gF*ZL3cgj(G(jtDpU?n5pfoN&sJ2nR
zZJw1pq0ZBNhZSG1eUZ=Ax1k}Wa35C~^ws5+@${2xA#J0uH+%<oMNb=bI?m#z6j7^F
zk*5KsP~d37iyGmB8smz|O(6l`Y9j(RA7i<QCss2^gdjRgwM-Oub2U)61KUAi?q1FU
z_aTlv0D6ToM;E>g)~#71fM34uG<{M>Eyr&H$^2l>-@;Pru48z~$C`zSKRK$mIaEG_
zip^G8r_iOXiP>+qZJC)nHS#UVJ2|3tY>cfV8co;4YBWfG6~eYS^8FzDZvc~@B8o%s
zD(H{Lubst+CKgdK=gy!(+(QPv%Q99A{OnI71*q<4dIh-I=IjR)sa*8S6`oktd*~Ux
zK)#alHZw&F3>i4$<YNi@;<Q+F!!nuKqt_GbO)Tx`k4|2+bP|8WakO!Y>~He5=Ud1C
zPn`-#0kbufx@B%Vt)6imbvn^#K0Mrcuf*Eo**@3s)SY1Ug5_t_lIQ(GtlY(MPTeZl
zD*wC&LRIP6e#5km7}!Kj9=g!VdbM~Q!>zsoDBnUal4xdNO9Ss;j&13NQyLqyu%>dW
z^w!U;jog@c23~?fQW(A^*7!A~u3515k!sg~6We6ZBNDVn;B*jq(!dR9$!^HaD!$<m
zu$#f(VH$$M605bUG8PcAe%gM<qcb&oj$}*El}t4x<fnF*J~(GbD{KIut)0O(YW9g`
zU9sr$@*YT&G9ew;-}aa4$Wk!^=@C-wp*PEC@iDqT#}EJAwdLxJmK`&uzQ~@8GLCe+
zL1DqK;GnYKle3olvnb<tvL7(x;+WJ*+G>$y>_<j7vrG7awj)!*OpdMq4T}0^X|*d0
zXw%DU6>nYADsb7%jotvI{4&=d_%EFsW|D-*K4&>#_e!)rD`rO`{+OWw&2pS)R1i;7
znRoqtyC00fUYXll<D%EORV&117l3~L-B3E;6@=$XWvdg*S-w2EFcio_8DM7bC7hDh
zH)Q$fYn-7P#3)gcc8#9Pd#iDI?V3nd_V7xmi=}Pj7X_}&G>3NQP3aVRcA&&J^1H~K
z#M7MpCBq$*wUDKO7Pi(CD}G+OcIj1+=cqJWpht6__nuKBJF9y#PWv~Ia4`2_Rh5gn
zwxrVu^V`!}-II4hS;-4B{iZo%uB0?=KDMyn9a`se7D4mlL{3E%L1onFwK5a{)mstN
z9}w(9^!D5-^-DhLLOIj6Bk_-J+OcB=)Nq-%B_jq*agw-vXM5j(Av8XjDWR;#@DQ?-
zYs$G!U;Z9g1ji+~WKX7*osmz?JE5Yg&H<})D|>$Hga;o<>PXc}==`YSwEMc0p=w7Q
zYaM@M{)-pJcIyNSH#h4p^iV(=UNnh~y#{emjyE>S8q~g20EOV*uXf~?I%620?O_@g
zl&TL~5i^}yHP+?j{xM<!BF6ap@ofE<?P^<H{sBAOf`(p)){5f#A?&PdB7a-{b7=px
zN^zi1aq*fB?mNHQll^kPx@P%ST8p|*AJUJo<P-h+KIBD5Wl58z_YD6k>+kMNy0J`d
z+2Us7Qz9HW_N4{k1zUS3PYm+Ujuk~!+9j?ewe_`U^HSG}RV#kblQ+lJ>XDKT%Tx=d
zp;?Ho%U-L!yPSRhsJS@XqD2|nu{n!a2H5pxst=fCLnWiw>!WQi@qLuu@l)qcnB8eJ
z*m+pTx`SJZ_Xc(pKQ%?r_soUksa6o})SZ=*sIJuJ*4T*Anw}u1E13j3JIJkA&MC!m
z+D6jZyDr_blR9|z2Ev|`q%iB%*`i&G%!IlF)7+!*9}f<PU|PNW^hx|)2~`WyAHI3N
zMM(QGy6EX1odIE9N@AX?mADJ#IyO@LD(YNSc;4j7eG{7ZSe~N~<6E&6{8jGg)cUD(
zu4eeyn=4>sP5im@i8IWoDQ^t;ck@-qAdU2PlsV$iG0*WLAmq_Y4JOC*0#8gr13r4x
z<{?`HL_Gj)DYFB%kn-!#a~|B5Jipz{D)f&WtGJ87^FYl3w-Q!f?+U2)6$4Lc4~jx8
zPjkm=ASDhG85*c^W)RcxSO&DAogzFx%mT~6{HCAW?_%sNT@PkB{dzH9-JjeQg3+MI
z9fA{;0N*(CDQ-vadpt{09<Isw?&bCcN8!A`D%2jX_}p*fzS*^F0^&(7VRs%x=cJ~j
z)$ZkcQL2*7Kc-f}ktnW?6M3?K6LZ4KF$iQ2;W3KRc31Ums`Z@eiQMYjL%75Ja`FW$
z+u0Tubd1Jv>%CE5M>gQ=t*4qYn5(-$Ta^wTNk<=!L+f2dNN)}+F;uHdcr8)kwe3tQ
z6CEW@=V!h{k4(jk=k8RFRbFn!%|l!ctU<O(ig>Q&ik&1z)O?NN%=hWeaKd7N8~QKu
z=wKfts0L=HQh(#g$W;_efbIO<@ayLLuh!>iFg^Myf;eTCJ%;^Y7>pcQ{Kp|5j#+NR
z$h{GZEH1eg_;QGbT;53KKCThPK4Ea;N~4~YBsFh!hS}6ot69(Fs#0*$YRH1*DhuS|
z<|>5Jc@r$gvlC3aa3)_<jpv}6#I?KHK>nQypJggk<@Gd+jwdSik}C)+{?;s4%XwO0
z#_(6IIeb#8@M=({(H=i}vHubZ3u)YTR2{2{mZ{!!A@G<5{8J8ay}q1g{rUM$!R`=a
z7-9d=Q#X4E;?dnp8b%4=-(NfFdUYv<o;(q1UQ5Y2uMQ#(t<-^?;}z1%L+A9+#?L0F
zm%Ig)yI(y$^VRDuyZZ1r|2UucNc^+BbO9>a+s`}t;cwq;_ZBN?O3m*laH#J&J;L=X
zzjKg=Zx?Ud+gl)#xSFE;JAm{=T5>8aHH)5IKu^V}->64VOR4X^(fv2^y{PyQn*EJ*
z>;;tc!0*EFxH#XZRAsb|-n;av{AVrW!6WZid)DUnkB!Gp*~R)G&8j($_RqNJ$L~<X
zG5`DhUZ3mKHs8*HadU0F513SX5fYA$=5`euYult^qM%diK`yz;Z)vkN45{{j8t_qC
zn~z4~m0c{NCbZAGYspY@6%YB|4kCJo9K%ss^qN5+vjG)Yt@*%~;BKMJD%|L`cbMe(
z$t%DL!4RHu9m2~^|4m-Zi2Oa$1i$NWWj0m9M-$xUL|h{=cMc=zqF=?_yrdD*nQhPO
zm%9CLLXRy`Vkz19gP?;h2iw11>S!=3Y5%=Q07J4a_|zkD*p`1g1RWk&d4Z!AI|02L
zB&fNh=w)RcB-L{)1p{Wu4=1-$g7nt(24`9`vQ~=;FE7>>L~zB7dVY(0fz3<!z~+Gk
z6-hAU7YtnL4d)DhFRJfn<)%g$4EBc(3rnEN_h6o>zAV7mf)x%2i}{mAt?D+;8o<HA
z8iWH%8KPW$b{DUJAmV9PZ7oqIJs3-9H|e=?dqL26Q}=7lo#@B&d`?_hZj`+RN{vj0
zrD5X7um$Z>)U3&-xAzx6AWthGuQjTh&^OWNxm3dAt$vaaE{Woys3eGQ$4q|Vg)+-m
zJ;4^DAww3nuw1rnscS~%rilk+aeL$IkA}##-k8Z;(09A*phVKUN;UPkb7A*aX`41K
z)r;q|uxNkx%F0yH1~J#2tZc2g1ae?+#MIdo4pLooTU^sSl~pdw&i-RYni9N@-6%45
z1-5J_c%Pt{pw7o}!~6Zddym|{<vjtvSev!E&&e52jUPWJUwl}p@MzZOY=P=LWAlxU
z7N4FM-Nzp$=@GjARZ5YBs*M2s{9?0BgXMVvbi^vtPXAKCPc~`N*YYzw{(5K*m2SM-
z(IS%2c_ks4QrP>xB;Zpko~hwrC-0W~EMd$A9rMd?M%`)iRAl?!5sd)w_-9Bp3AUaN
z_5IOCp1hp_5k0#F<W0K3+c5<x8An}*q-~Q&{0$lMh|&DMvx9#OI73&I@$fJ5kq3G%
zi#vVOv%Q#U(I9@KOyc*fuSJru)jrom_Ct}c>cDzZBR>yf;hTfqhVeD_!#dG~y84JS
zrZ@PMO-#>`Ivf>Ubp@KbCl)?n_=!HTpp+FiGKscnWN<+uKQnD;wl5k2TeyNi|Dd%6
z`HV-_EhDAV!3K71KE860968$9>$=dqWB#s--5ipX0PntG$=fUJQH-cDWN_li=p_2e
z{9kB}J?Gtk_zazx?>rOl?paW1#A(gZ?R^3=evS%bNKP1uTR-YxeS2?2x9!`$(wrZI
z!Im59rOvtlvhl|Aw4*ER_kfCNbr!IceaUbAb*tFE%76!M%k20MHy@day-22j0bJ%8
zeDKV=$;C+@*yz3V49>&;Ck0c>-AH_(9uBjzehvoE{M7yP;;m7cGe++ALn8?NZ!Z=Q
z4{E4CW9Zj&?XPkNeQQWBO4*Lhh_Z+fSf-H?MA4G%j0{?>3FeM60KF5-u?27_n?k2%
zfC-Kxq{sGg&Vocqy_j)i1RZcnbQwG{gla$_l6j`_m!QaHhDVmgIa4r)2u}F~WgEuT
zfE)$Wc=&j}RCM5dEWtcuxXy(+zNU>Y89!>B%~D9(?H1vgf+l>bf=4`ULI(ca6;45@
z<~Iusa4!npxWAiOIG4B0WsJ$JHZ`{e^^yChcz|U4Dp^cs43u?RgDLj8^9Ur!8EV0w
z*<WB2TVD$5WsQh{{`mg)C|PJ!*Wv~|BUOUs&G@j7%M&R3X)i;DkpbsXq(f<;HjMVM
zE-0wv<kafIsmlQ~CvH{Ee(_4rC*k!h^(>@Dvizap8IXP2MQ9{K;1T3N#}tU>uFfJV
z0S}ey)&+2=y>ziEO<idb9#&~La6RR<vY37yX_w`UTzddu9<zk4S3G@lX1_@?iSLWU
zWc~k0lEQVgh5kSLeZQ|~w|7-Kl#6iVtOChuwI9J);;~9gTqL@)XCXECCZ1v^WjKtK
z;rtdgsF)QTap+wlQ(RtRyP`RUtP#-H^uNYU=|9tKb?i#RMJHe=RGeVDoT1TR7;zG#
z?+fSb1(%P}p`-ZnM@-!azlK9)dl0#b`{CtFhOgLhg30(bq6M8KvsFP>LSbKln38n^
zohqkd+{(CR_81C8k-qPurp&79$j$@H-`*0FrhPRFn`$M_lf$Fd3hC(E0*rx)Fasuq
zZ#dchkz!XHrF;ic&fMELgO9^lPW?Q!hKFB||GK}9@1{ujVBR{T`ghi+Zsf>$J1z@s
zB_!mLA?`mlvLZ8V>xoUAWX*t{7cdco?&`DZMI3SrF0~lo1NoK@L6H%V!9O%+pI38A
zA%_Dh3Ke-596|T7XDH2@OXqvHQ*0ikE<v<Dt2fU}JD6BJV+}kGOkJf^HI3}>IV}F|
z)>^fYOq#XJTc=UY5NW>tN}#^l({=1iGxC&Fa0_3X>3VJAyvsAq<O}@y0x6o%A9l+#
zHXqLHa3hz?q{C-nIj@$T8LAY1^WbR8wjGG~Ph|>B69@=YP}##1z~%ww$$}4UD1+4a
zM`KfeVDU8A#(^zBHp(HQS~3f#ZWgevLimfj2>K&>INzbDp1D=`Ch%kH;4$;xbqV6&
zYlXel<3@VN?^F67tMA!Ia*Sd7ux~&kG@WxdN9s<if-avM*6GZ{6uo#XiWP*svuf>Z
zO}86hwanzl@CuA&iw#)qXQ?y<AwyHZX(akCMss|z2V2L|&QB%)H*)s=WUPaZsBwgf
zbeNkPv%fnC=jN-owOv4wedzT@6eAG9&>L~{-QrKw$T@;hQ5`~7){OMn7a>FV7x$)M
z_ruGakTyjjB`ky<DGf1#++;#zoX`EH>I1ZI%e5_mil0mUeH1_7!E#%YUeL8oI@44x
z1eH3^F?w|kh3t)CV0DH@=*CbUhk#%Pag8PNfiCqrfnq3%S{^XHuIB&JQV~qLgGz1{
zucuzbB_5;3%$IEoqg9Y<<fzp?vPmokhzEuRnudG)dw>+uJxy{NAiGT4AB!#BkJrWo
zlv-6FU7jvs1IX1DwL2`~gXz2K+&^urm7g4*-q%wc9ZsbnH7t42kEjSLCEmLhhO_FE
zK~9>BGDaaAk5aDDHO_SXcAot#LJyU^7_fEkPGk0vkM73FB^NMxy!a;xCgIo`Dj1DF
z#4AdFV2X-p)Fs?XIm4-10<~6h0jT83rIVVYoGW9FmA6meT?D~;Uq%Lp=PLGaR&_DU
zyQ!i9luDu!A=dX4mE;=8g(+s=VFwNT)^|4p)QpJ}lml?s%#7W=PoM%M!Y?O$sFO%p
z#=KNuq!Kq*Zj(2~O(6ji)qo0wd*nU;buO@A66~mkzD^)TL$%T_{ZG-pfzEP8p$@4o
z%-Va&b{|v{P2@5X)!uhSj)-P~5qf!g#&v=QZV^cLwCs(DxtSAaJ0{uWa{+7p3L4~D
zHRdR)1LXeIseShXq&iCN^V8B^q^~VJnacYX3>s<Xu39|>qpauD>hl)HL4(&HA96A9
zX*+_8Mi_@|;h#5lCj2eB(+y$|5MSbQ8g-LuQ`{d;IfjxORiiQiPkb9p53Dx?8Yw+c
zzR)NmHrdO^if)SakF$bj)@rW5-$zc#uJr4%_sG;6@$Ex_Uts`g(wm$m@vkr-fk)Ie
z5xx|`W#a-(uqF<F&La<r;z+i9GkS=^t={CxGUrS<EMI{!e)mO;8F<0AW)y=iEgH~C
zY*QlZh4Waj3UXVQ(BIPCSQ+9U`bWFL8N*wB(iho;i;gl{lc-Q`WgZx)o8T-Tz^9Aa
za_oXQ{*mf0nG#>7<8Y=8+xJNdVt8TLvkM?bu!icek#o{);rX-eMD+28;K{Ka)(zTM
zN`pR~P=Tkz4Dho<4P<{~=Ab90jM`1FgEvdk)!gyY?>az+W`M`ZQ7!n5+8IY=B;HQk
z2YO<9VI%%B!SIWd%Z<A`GC4C4CMbtOPPjrJx=m=?#pbFTv~xmXkYk5!f!_*!tA#>7
zW0&6aKdnlBel1Rb+|^o=s#$jTipvfUJ()F47Fmze*Dd}W%Ve4~)jf|fk)n#+hYdM3
zjPyX;<$)NB+;r{zP%@$q-4F9M5tEUupq66i>E(EF-*W50xMR4HyN^W#JOUBh8upWw
zX_Vc%Gb+TslZ2L_u;R3gI11o|%neg|xr7LR{D@Q%xB&^(b=zNo5AS&FR_9`UEI!JQ
zV071IVzG(A4t+*e7#hkvth^Sih%+AKIYI2G%fO;3GqTdi)Kz_hQ<Z{6LE?T<n5|>R
z-IZ39t%U6Xwu7;e=#I0{jlKc<ISE9|7^g)md>cr{z!#Ljm_7@WS}ddoJ%!D;1HN>>
zijosZitBgreF66kNmo;Y7Q&MriftaRCG76&(r}=_%##0H9~e)(VP2K<;`!l{{q%k`
z+*_6X4K{rT^I5#*pqZ8oVxL#3Z_W9`*LzxTj2D$j)(yIE^!7H;J)3Fg=qywzoV5K-
zTT4T6^4XyOC2Y||uf+es9G@2`N~fsQ>%s*aT0Yj@2|}C7XO}8NoT5I{!K?{B8u!;p
zWn){oJT5zZ)X7GfB-C2|4y}x#;KikO7%`xa#TSY;j7df!S`x;&8Yz8m|DiCazX)8w
zN9N99gWLY~UHh&qA0iQ>_8+Ugm#u^1op0}BbI$18P$IXe@UU3ocyomSERAQ}QX^<x
z*J%@BeRqtlOu;WLupQLbbLCPRl$v`Eo4f#4O1o2H%A9%|*<XlTxq-$z8XzPV#loKW
z!;YZ!l0*)?rxx^pEV#R%UlY4U0fBzoR@vg2^tx{HDsZ|7tV&J@aamG)DEI8C$<S%T
zwYEAYpD!Xs18dmL1K$PS=$_QmUss`i3K#+;B-P**$T|L9H7P&tZ?4fPkC{O03t9H~
zI(UfZ+(hYlkWd-JUO=bI!wacE!E-PmiE#e>yEo6pE7=!rGor#ig<Ov!&BqY>39MS!
zP+s7SZ2kb1qkB9j4x0w897Hi(By8d6z%wk?yq?f2`UoWepdT#WKED8l1cQBE(cDcT
zYNT<9N^zK}Qu|=s)%^uV;*iv#giA3ojmZ~SmNYEbO~%!F@w#i~zqug?WslQ8%9f9v
z4~-xXpN~-I>mGJnE3TdHVpSY7-kO1Qj9>7VF0OHO2~D4!=N(T$p~s?>{f1y0|0GO)
z8!?bP%^EiG0CN_ud2;w|)ENpMEjrsftEa^xUyOr7oU^P!JOX-hN4yYKjQ*?wU1KzH
zxSzY{Uj5EK_+)x@y94QLpSE2YrG+@|=qA|Hg6=SefER!I{J!hci4Z4Mj&oeoCx`DY
zKWsKW6Zd*{LM)-+h3SVn5RYg`5w`X`VSv}Vl{y@VGzkm7ykz+Vwy^jDj4jz;O1CM>
zXw42Mevlp0C@DBt^@5d)MosuVZg}e0hmLuw7>Byg5z|H1;vPq2j{TWTi?&9dVof4W
zt#9;4QPO##$E_w1zBh@yUmXo=QCE}+=P+^?taSYz9p4~LB%wveF8>P8H@u_i6glA9
zUOp11sd~-W30uF!?QNAGS<ij*ZhWj=Y1R06)RNlPB)55uZ%T1?g+<p;>%XSe{5ih(
zVQTruK2lFzO)OerN*<r%A>jQsKBaSVM$dQ$dPq!3QBmO&mH`tnnXT5nY41(4fC(S@
z_E<qe{H)&;1$j8Ix0fTe?G%=a%fe@>dv+X_x9tQ`)U|ITq!^(+V2|?XRrM2io6&7G
zHz*4TrS?^v<qRPT_;<4|GU6^t>}I?7h^^jaIA@7cii5^4NXBmfA{1vYc{2<7$$8?g
z>C|9Z{QhOv*}kMK=c?8FSgkOJKGt#0DFf@0o;CwD;@M|u$e*q<6Q#TP_Vu!2yVbO*
zN<)h&@@yKq;1j)R%d#DL)v<bRtZ|&V+w<MB>8tEkeA)I%x=90X6TkcD>I*#aXQ2TJ
zBq&+2+u;r`{VS~h5aMaI1;itPV7;cFnH^QB2v@|RT*{+Iwtu(rwJI_q9iTw3Y->z5
zmF|?ee5f;ZxD-CaAy>}{J23hXdUE=9L;k3L*X)aTz~dR@;wJ>`bk*#m`0tn_8SuO4
zvtd|oJWvqmnk>1cYf`Pck!nd>)yxn|&x<wly}k-GTQt#uVeJD6mb`a%=>>kt60;K-
zs0Tia$aF)NG5r3FesIt4qQ+#dy$7C&jLGl~?TL05_0*)A(BI_?40QY0!UeNuW4@_E
z@8@`r1<GVedW~1R#;_H5h~<ZNk+Kj<6!)2Rho4NLcx)Y~iFVttV-|cPKn0#x8z)R-
z<*)O>Za29w@LngzJY>(1WuCqLz&nGt^tU|r4@hw1`V4cNFC3h5zwd4RBIJ`DEhsaH
z@p=aRrZf3V+18oVCjN7sIHvk+xFb-;{X4*C%g%u5I8KpvpJ0*{j7R7~q#1kvWIPts
zuhQz*s4HBjv_wXd+?&&=tGy!y8}GF+aE1W~>?17cv+=78G9)ofT6VWOm?Gy*?9#OR
zBct`0*uC2}gh0^Un5bmXG6WoKUmY{~w<fFf$W=X)F<4<27iw@U3c4nTRRKU_fQiJ*
zyuu)-Xg4}n?&5Y`T<Jvw6rnPeh48N*M{aFiT2sZh6VF~KkeazD3yOBsjF0vVtcUB;
z@*GNKn!n`K6#+L-VK!d&|0SJ8HVSXj?pu%pA`h3*N1;d;au;>msW|m<8?Rqy18A~^
zw?GO73YJS;<hvLj-R#svpDih9l+y08S}N^eW(aIgs~@Be?Bt_<NZ;~`8vD|lL*w^r
zyvhQ%Ci{Pcol|gSLAS>z#>BSmOnhQvf{Bee(TQ!_wr$&*Xky#8&AIt*-Ix1v@5}D4
zuGL*#yL$JoUcJ`;r}4GG#N&kfzuPP8Q3@U-Q+kkN&&6?f8OHes=X3{zo%hF91Pzz+
z7i~)_mZ`B(R;5mj+R66!{0lan(fuvbzIBC=d31uYdv%9H9B4Ocf+-3c#Mvan5B1Y7
zO~Z0!H<$||UG35eyBPCF=;X)xl?Dbx0T?Q05LdJ0y&|B?#Xa0=5$`ePKv$er>JW`)
zB&|IrBx_0sc(ay<KKte@!E<2Fa+>I|J8H)3#GBdL>LgT2p^Nnt9JP+K4pb;yMrTZ}
zZ(P59!~zXL+IkA|9%TPHIA8S8#vWmzcw#KsU97BqyD-H{y^>k`tW7uOPz#~sA6r~|
z6SAWzSAAX*sO1)K(<p(fuT=Ib-K>*bH4-x1DUaqveIH_G%n7K@^7nRsG01nc{vDdY
zmGVQzlYe#GN490<=)6Q+%afTZh1<R%te8Lr{-%e4Cd1w93-3tFc`x%@s-Y>YCvp}Q
zhn={p$5ikI@Pg^TwYU{iFdCi|{HvC3;<}NYP0ebj7M1Wr4X$j>E~r&p|JJes&0r#>
zWma@!e}7uIvSj!3TJ&A{`p-{&k`E2x;0fNtg+dzLRbx7H6GcGMjbOj#bY*^v?aKBk
zS;aR&L+8AY!xqvjM^|Aj=O&ro`?@yZ%2wFnm<_+Nl{h?vo>;cNQ)Z1ni1|LU!NSnk
zXDOvnfTVVRrYV#2-B=;rLN#s<RNx4ws2C7bF-jk0^sT|Qq7sc(xz?qpW7uakQ)uYo
zv&;nQ&to3nylxGsaw)V_U_cBJ)Sh3L$n)0Ze2*y$)eTtjyc<^QJ!DQT8~jBrP+9ca
zOEd%m<Xhwa8X^FRXHx~TmI(9a^&BI*qv&^TB!MwfOWW8AnB=GK9zBKrVR>EoMIKcj
zr(A$>WRIX$MW=ZOUAqEdD5|u4|G1+H%}xh~7TeUSP?j@lM@3W-L8B;Qo2T()RIW;F
z?D=3`yORI-Y|><4y+q*ClftM(eeyxK<(_iRg7}s$L-S$|ogBSI&>CxX#I@B>F3&z3
z(kt{0&Mu^NBG<5sqJT-*;fJ%izEW5(+#xK<fxkqSUi30~P7THY50Z?q#VGwkZqXbN
zK$Ja)bn47405xfv+qr(ao}45%0rrb}uq>fZF;A)aLC?#4sh}RI5dO5*Vq+bFxPvVB
zn`*joa*N;rfme*`-KutuvLc80sjWa=$d#KaO+|RmCATmnvjjeCfM^z~QiW`L*A9Ko
zwtIj=)>%M<o*<U8k5v_9goz3DHxo0dEH~QhBS!0hh=r^`{k!WeoZ2GPr)3mHL-svA
zVGBD~*6NMfy8~8K(KC)3b;bOmSb70{Pg|p@i64m7eq)A~mx`@7M9};6q=T%rz2rl>
z&EuS|-)sx>sT_!qWhI^EUnF3p=KcEB?pZcO%8PmNt#gF@vCr`QM|5Q*Sa`Db2IXB~
z{(<mT!xqorFSTw+Y$jW2e#?zIlK;rvhuScXtO~A5gDu)UtR@XXAhhZ}kKZX4`{jV`
zYGr7fjT8eG9Y!@pF5KkS=fbRBbHp#QxNzAP2#=T}8GZbcNlo8#iPU}gXg~`W0mIyd
zm2_pTtJN$JS5r4HUoN9&LDTQ~^h>us9I<AqpH5bfF~7-9)x8$ao;=(f#9IbFxTjb2
zV8qVSedrKEt0HQpT_ty;g)$##AC6P}FX^yBBIK@#nz`vm-`T~z9hlkd-MiVLyrDt+
zB+<T21!A#h2+u?%m<TjpV_#zf6F*NEF%+W63YOl%!Yl_($hGSA7M6y*t5zw<-Kn7p
zL#7WJ2H!&W@eh=jvtQQnp+LtAQizxaE=W$p^b4P2CU#7rLLitKp_L@xb;-d<*HzZ_
z2OeCo72VB>eO1QcnDS+Tgx@vFMX)={IHa=ug5E+qw|^-n<AH7}bB;+y;Dvt+{JRPw
z3nz1i<eG$J-?esj1X%1J*%N3w$7L6ls*~SNUA#Lu<X~k%(>%$kPx86`NXEe-Y%;Ur
zQN%ebj%h_J_U;$73oimgv&gyiFx}_%epT0Kl^Nz%-3A7?te7y|xo(!9w1Fs9zUr#8
zDL5of4<tyvV3isGWt^D&6pRkZzfJ1z%I@1$oS2B$XO|Zsk?XVp$A(zMp|DC^jW(gf
zhTRFR%VA06+Kbhrh=LH$4=+85?^@DYuKOG}r6%~_znK*++|}1%CN_4<KLj-n@@<Tp
zx@b0PDcJNfJ-WBAj5o+RW?AKsm^}l%y&7KHl5sr-1&xFVq-v3z%YWF}ezxk>aHa-&
zI(c;Xx<LFbf`y|ZC9Zis!#~D;9y`Nlp9}mvZHB39>dg&|i!FB6fK^A{Elr=Vgk#s4
zp`X@5XA)x`Kogl&e&8ttc_l7yh54$-D4~Iwt)oc#P2BtOfB=4?1qH-sFlqp8$jT>o
ztaA;jcBo3jWjJMWb%=2T-OOx~&PztzuG^ME&xWCZSm`)ZI9VM&nRf?nFA_t$*WquR
zTh_lQ`!eSq6u=7ICw2NsFL_+nrBvs;&C|!Md|TSJ4P69NIvmET2X$lSA~r5C)#u;U
zSg~PD?CMNxC~p6Jj0&`Fqx}3*xv)MZylHe1XhlPJ-S)9lpMlq9$|1_=`8TbMgdkYC
z>hORv7rc>~XR%>p@VVG^CNr>MV#VmB%j@;eH+>xwrZ8R!!kzS{lD>=Mtb4IeyvZ!O
zq?K)$9XI1|gB)j%`9f1NlU4|KAhGdgVnemFek!wRMTyQ~cWa-k(G0^|9HW{=ox`RA
zEB=tDTZ3z+@k|24`zuj*pl2%%pPoBC%G@cBW%@R9lKfrH82+sNTC@TKiY8rG7Ur;g
zN%u_L^9X@obaD*x?iL@%OvzY>rJ9^#=BD+TnG;zC>mQmX&F1A0yg%o^A7kEAeb<N-
zZUJVQ_~4YBK`+L6nQT~H`A8UKm#|wdfqY@))EvIQ;|?8t^^~C?W!Cv{4iaKj(jT;B
zs=!N)%EiHU%HR8D@;u2JS%(Ottbq@yWMDaUiw(EqZ7*Su)RA6~&|4=a2TNS$(gybV
zk_m5aOqclDX<VOEG9kC7421?iN?I0i2*N45G{m@o{+6Q7$}}l=K?yHQJ;i-4+2rs(
zg?^D?_1hKJd@{hlc8eE?v%$|>BVcs~)9k~sIvh}=6=|odu(D*VN9CoDmyPpGckvVp
z($uoEf9=Mmt|gUQ#^RAssFb}=u${`QA^`fYuqA4EJDy?6rn$R{CNm%Jmqhi$3O=$&
z-&=_winwBXRTT1o+0)fD<(E7@H{xl(ONCgv2vRLm4Xk5EsQT06e-G5?=bQt$D4M1n
zJ+Nk`0~<oIl$qv*r;hUts5u@j6jZq`<eEDR@E!o=Z9bA5qLmqMO{JPMiXI7!SEVM#
zl1@*$4jaAsXP0e4?FVC*X-1+O^Hm+U?Qc`1*0wTEPXzDQ3x)2SJK>-4cj0Uy4`ppY
z{e;lmG2xODsicJM=FAToJ8i{KG}iWBLkv8SRxx%a43Qz1eC?3&;;@4W#sSB#JjusO
zSc!KffXY}w?0Rezl~>SB|J~b(%bB&#y0&AgrMsQUXyM%1ncO49C!j)A?+qJmXs9GZ
z@1m_g=fsDby5gkQMF6>E`dT?tpTQAQKQ2MVE-IC&H(FGnQv-Uv7lv){(zg;h-S}m~
z`<$T=;+F3yaw~8z=P!UbR|`pW(^i5hFxF|Sj6(fj&rXs@h2ckzzvej@-Dy+27axO=
z)B9qhUmgT-g0C|#77y-32gTJm(HyY{mUW=T3M>?{=g;{L^pBoRSuVkuB~cy!u(M(5
zzta6Ko*`vzX*DgKdwh1;&`k<asM-A05hufdDNjMi^FqXNHx+{_NKt72MbRX0V#qF{
z(kEh@X2nOtEPsx89F{SqUwE>vk7%Tqhbw_q;N%PuE;2Bac1<&m;{Pt}qV+C=ewi|S
z{=o_->RfM+Ju*FMan&>SbW8#8ITsTZpJ5(i$X0GD$^`ie(B(?cTCDI*SYF-r>S=;y
zO>n(|g^dx%h^ezeX;xaRlq0!ZF2AXkM9GJ7-1jiSw|{Hu@s?#Zc2Y*jeQ)75_*^UK
z4G6}v@Bab;SQ-+lgKcxmYaDNv+UEvaq(vX>_;$2!${&q^@T}_BWC=>GNyrw+`F`>^
z9Uqr+^y+&FzwlBzR2Z?=jV<D}Bd;-AqA7DC$Vf-nn0Jpn>$D|~_Jk!2<(aq|r0>?>
z<EcnEsM{dxLa|9b?|y4@82Y*fWG$u+k9eswHU{8F86+G4#Wi#z@h@Zi6B@uea<>t7
zzXCxU4|#N8M$bnU5<*=hRzuhNPW>FqOo_<lp&kJ0tf&Ws_;@ib?PQ-Jcg=*(M8$0y
z3)xVHJLpQRgB!@ohD!L<&spO^{)&x<W15d^exS!!ZnS?`Ft~Q(DF1>aB@##^-CEI7
zUj;rnE)d&yd;FVI&B3(Rog{xXSPDD<)2GG_Ip1X>B{{;iL&3k#E}B<voca7J;D~vR
zY9ahpC0}bQ<fQM)=<pUudEgW!0QRA{L3X@!h1Qj|wn170a5@ZHz^EaHjhb%A5-YBb
z5U2aL$OZ|wl5%t_!`{_~?P5}Q%mUm(a--^`cp6@_J-6sPi@q+;5g$5INmr9ygZybS
zdnSqExm@u(mjCIQbl{TduXRl`Dcc5T_E+@YDr=Q*hVIZCV{CmSC1jUT3R%x>)2)Sa
z%Z2p%WwF&Y2|clr)=0aknH>$GIBaRSfEb|A@k2t0Mm5r)lI$kAF~D}Eh?a@CnWK@?
zSQ^>I3d#!X7b)X5ddE!@vWs#yqv^?oiThJ5<I^b}^#%2oE?*5HzG^^Boa`A?sa^Km
z52_-wRx5%YLM`=-6n^Wo7XZZGzGn_Ao16OBaK(1ro`&M<Z)Ung9y+B8?ojt93n!^0
zYL!L8u)c!TCE;5eTWrvi?JG8W@(Ur~=uGs(6DV6U_EBMNzz=R<&Z`+?D}wD?r=?KX
z#UU!AiPV@;^>9~|KnJ$L9()+VhiJ`V_ZkOUZn0H}H`kA(Du*`L5t(@SSMSl=LTDM?
zTM%%!xcnG8sQizQGEGnfok9ww!Ox5DMxCG%B(qX!j`u*ZpO}Kr1`d}Cd>gGroPWGx
z(R&Eo7n%T4{KN;@O>(qwX_=vU!iv0-jj_a@4I=b^vyxskL|cE<a_}*bX$D-adcLFv
zfoFgbdR~$kA?;6WFXLO>V{Y$Vls<teO0V6<KO|`z&dVxCkZD!Hx8O#rj~STUbuert
z8|X<pMAN)kW$a{5MYQfkLgjkRtLJ&ZKM8uRplub-iozLOGj9gPP@C}PTVwO+lXdAz
za4k6%h8ylj``tC@8~Lu$Oj&c{h%3^m3Fkcc+Hf^>2r1Q?>nM_T@I!yM`t4Jif5;wX
z$v3uurRs=WYp97`Y}(HM7y0O*=SXSkJ{xMPum1hZ4RTB^5@{MDHmA8k=+U@K*|CGG
z+sjFe#N#AZk}!%=Gxy|R2jo}br+za_5VrS+7+>gz8Mv2u<t;fdW>_e@k6ZGl!$F!1
zSO50G%sZ=0TC`x3k9eoULxFoAMSRwu$mw_aQBPqR-{)%Wio~*wQIU>OEX{Z8oI9#o
z8y8-6>imiSbKEX=rIiX@o?h+;bWCsSuUi<u?Rr9R-l=*WdTSz+Bo4_n&$sVWpaE*w
zXazxy@?#z-i4U$<<4@RsF9m@(KSU!^0GLkgIEHL~U6baIH1Z^yVpxCIUb0qREJY&G
z^%Viv@1-oH4R4O|jl6b>Enf>dVW$pygLAgY{d#uAY?>C_^CM+;Jw%FUcSCW#^?Z5k
zF&PtpF*f(JJB!JbWJU%JE)h=^2<uwfQqK#y5#~f5=t+2CjZJexL0+^ENKhXo%Gceu
z_wyaQ<v`%`pGg6?j>$Nu$`IYmvNMgB+^s}C*p&hFfC<#h6z;Y-IX5IR4FPL>))@+*
zLoL8QPm%<q)ppk==J=-a(INHaeaxrXwM<-;5pEG`x?NVFOJ!3~UlYYD@au35UU5nr
z8~^z2$$9s<>x}20At+7x8fWk7&buTVBhxsohxfQa1t9a2FB1}s93WW$1^QubFyi}5
zEv6|55#PEdTi8EmH*ZSwB-V7O0O&0CZ7YYvpLR&;oY2TAX7?RLNm~a(p+8?dUko2~
z+4sJ<_q?n$XI72vn6S%!O!b4n1zo?NPjpIFe|<@CMb7&+t1^Zqk-%*As*`&v)n5pP
zg}cLv#_GjW0>Vkw_{LKVqC)QhKiH-_xosoBP|@koeby&ZV)3M=IS*sok(AlR>$T}=
zDvdd5NO8oS3V?juEh~H><S|CC9mhOkvRq4dj5z$_fY|VJ4##h3=nw=n2k(w}h~Y8k
zFtTj-Va%`3PVAmq@Md;``l84`1u_u8srLPkA2+8*IDerFAqOWsGXqTy^G|z>T3Yfe
zzR`2WS6Oy~B6bi6VKFfhJie}uNEBwZ8sT5HBdwz$s0G{MGR|#cc5lhGKZooX9;m83
zU@__=(w2&;noMf><vw64Snf8E_or&g^tIo*6yyl|c6y~BTuHcU{)GFQMGHw)@EG$-
zqW{&L=U?cN(|^JngRmvSro^BEHfx@JgYYvQ8-|Hwr6Jsfk10Mo_kK0(Myp3VB>svZ
zX>I8lpIL>*u4pJ9FHH1f8en*5%>h~&L!yFaNz*;fur#)M78g7)w8u^SctiNdO6Z_8
zNU;uoVrGlT8-XP5d+Hh}UQ}S0^;-D-S~e6jbsmTIHdDA?EgbC$XrSs!27@23B!Y)D
z1VM)n3Ju?gm-2szZ~nk2M+VOL$>2NYr)_Bqjhq$}&rNvJg?C5Sb`>S58W)`Gn!Tcv
z0dXE82^h#>ij0~*5^MscTv2*@Q!*CZ1FS6?&P|vWaFr8PpkqdEv2aNO9^y9)Pa*w{
znD!&dD5KATF8+sx+QR$ca_;EH5$ok8s87Gd>EdIXwCiB%YR)7gM(&gyA<xHt@ndoW
zSqKJ{4keUy+T*KIjkIEEBS^b!6FG7jV+kTnp{3)@n<;S1y9Q0ZNuoDF>^2)I7)h@t
zbc<;CDQSG}uYGb;>vZQj1i3n3WLZ3^@wKPw;{Rdp-)H1BP=tBZ$V=>@rfVtVHqziy
zURnP%2PDW26lzpnl5xw(U|kovdxSQs8q_JfP<`yQjdDSE-&xp7YVaRM<N$vd{nP*f
z-?BW~7Ob27L&kNTD`UueG0(?IGH4p1D^Z=;4sd};Q)uStVL>GF^(Jr0;NvO>O#~ut
z?q*`PM4p{(BVTf)h1{0y{f9kse*q$bwT}r804D4ZgGR`NCYZ6|e<^R(l~eD>n6sv<
zfUVc8&^EH5%3x87@g-pK(WuXwbsjLN$z{?k-g0K{Ii5rJuw@rqk>DQ#x7QA!j(5W%
zQSMa=qaJJFWvm(AYvTbYpT=E>X`pp^ZT>=r;5o-&6ysGlRf{|48U%RzKK)uWnOFj4
zfz|8nuKJg}B*yWEw@2R%tkk;FAn;5_b!Jf3^F?(_>R+J4odRmG;z+Lmjx!!#=G1S-
zFb}f8zdv@hx3_xb*iu|{vLpxHK)AzMJ2Zsy+s#OBg*&Bow`*0;zUHhtST1#;6z)wC
zr9ZtLr$aw?i1UZuzLdDtN3cm;rYjj%yM7IisTnKYv-#%R&_|3m9_Al+oVE{*K$dkc
ziRYzw0AX!x%|&A|X$z*~@dB!Pn<0_&ZU5BrQGyqMNjFD0@YA>tN_|UU&TWa8_WReU
zwT4d0{^@(Vo$qTNiW}7+;eK8AGNbq}9uI?%ff0FLj@Efd{XbbC1G*eIQO8fc&%{`K
zWDiE<Mgc~T66SIA8oG_>6O!_AN@{y2XuM$gKK|paij|bqZi_V_og=bKPbO%g@y6RB
ze)w58BR-0V$Drk2%cl+$6WV_0aDa~UnaIe<g>dS=ai$b9_)$7x=zHg9K$6msO+0^S
zGz4R?##*hE>uM~j9<z7EBTO(SgXanc-hqE!<*n;mq9ALc@VWHpX_uk^DEQTI_RKSy
zx^OZoL21^6tgoR@g+O`0&%_R9hWLt@1Ph^+h$ih%L(*&{lah7PXnlO0yJC?J{j)25
zV;`epMht%+x3%)}uDF~`+iS&FlXApal2TBZuIBozedg+5x~`yJL<fz$VDr+?3i}lz
z-n*_oM&lMboRlA9+t#2os@&7u#+&QU6dH1y4Dy!3iO6t6%hY9xa;_Y1`Gw{ac}-`;
zh^k-kCC*;ZS)5b8+J8AA%%FZx#J8_AbqKKaT^QoFpfXhH0uY@oR~=vq)qS2=pjvd@
zQQG3H`ABqiMy+}-=PNe^_^;nG>>mjT7c?n#g){(?bADTporJoHB`({z&*nRHR^`SB
z+t7FUUw)x2Rn=Q$5u$pRie57VZ;FRz*T$`&_~zM}J~HHJDXyC|+kd&qL8~ona2<l-
zYOl1(a^$);WH5Qfv3rsOBwkw_z(7&ciX~+~9_?qI>$~I!9}3wgAMNLWqaT8sZ<9yB
z;}0IW_BsaY$gM?F917O1dj#`xp9mrks;aI<wHvn~8pR*DTmdf}<`b>;N#^s^I}4}u
zaTf$xAY*dt$ypKjZ0w!KAN?6@?rO{>-w~YQJ2F@IGYN76NGFi+`gGq5S=x7P38Z$?
z;fEo1m^Yp)y%utoZ9oSD73c{>qp7_VIM9$*KL4;h#h0|nQP$xH6X1UEC^1XB{Y5)~
z4_DZ|8Q_3c6sA%;vxGy=y!HvL&DJtW6YBkt$DhZcM`AJCV6Ymb^PTrX0{{Cy)-$>z
z7&YY)KqDXj8_g+r!<AtH|23=n7k>U5#Hyq$@eP1PIe8}w4|5ggo!tF7+lsShDPl>{
z1I`5#Rxm<A3wbWhchjE?3N!V%BIZh9NwX1+17a`3syXo!3QJtknKm8WiYP@1E<%*t
zoS`3Wd$IU-$$U$cyQ2UVHV|b(&fGTEs(4J#f`2N_+kD_p%?RA3tX|qcQ!Q7RLQ_3N
zW_W7QhB*hUd%PZ!aMpBMByM1U_gl1Z1$Nu0!r28i@rKo-WzO0U$Gt-F=?lO6vq+eW
zId7fGH;9OC$O9UN@Y{5sT{nf-Jx&}t)yB6uZU05PgKjF|w9Jg$>X9yHRudkBd(^GO
zP>H&!DKMR4mmvr8Y|F?UamIc~&OPPkT1IN2;%D<lR1DuMnKgC7T&wQtNfr94wOEA5
zEe)=7ue1v9Z&r?fINMcu^&fWX55By2TbvMG#WO`4i=NoW9FARlA5=!>(j6IB;2e_o
znjK3qKM%Dl#FtV<6yhHZJZX(yi$KC}nHk(w3e<dfrdq2+Q3IVhjSyC#Zc~fTBELU0
zOu8HXPrS)o8g}qt4wU<{NBR8RF;Snc7%mL=Fl0-7_u}hU$Pb2I|49tgf&IHE>0E6V
zvwp+fjd5Fqf84eR(|zb(znq!o?BjV=@PRI-S<_{O*2pK*NPT0xdh#@I8><X6+{0Bj
zc)kXmR>tX0K&}5vB5>NMvyLWzZp`^8p9?mkWRX|N0mFQg#&8+q)r@_FPaT9Jd#tub
z<T&U2&y%M3GKe|{kMRc(jbC~cpzW28SdUM0U&BGeuEp2B#*59S^xAc&1m`xFC6ymi
zG}fQ{A|QB%xa#$6W8(=1feqr)r3@8_fw2P@{p9&f&VCG;Bp3Fxj$7HyXI>MLqR7>i
zId)#pztzd3#`M5>e9`V+vh^D==|4qc?|cZWL=%gsvY~Jm%(TqE^XT-onC8crY2t+N
zJ6wx8h7W@Wc_)S5O)ivrwtka)V*So|7SjRxCbyp+l#DNfv-vKz?`F4OcHRuVA<Ebo
zTdivcMJMdg1%1?6UKgxT(f4&uiujoca>gM%jH=hMrV7(wKkAo8UX**U&}5uY(CL8F
zvXsXvJ-$O;cSXNn&>%=n7@=`8Yn1mtwpO6q8N~eJ9UIzBNZnAaHJj))^o?MNiSFLQ
zyRxkx*&|mRHyPxt9UIg@y{${YctnZkG<U2zHJ#77PF)xRy&qmV4$UhDFQD!1gt1e$
zDDbb^Fw2`at)Il|IZZGHu3FARN!vX*=&YKK?@UskNItdvtUFED7)vzxcxd&vt6D5`
z#sY?EPP`O(e}{6lpr7D-E?8Q4GwkrocT<?HpKzBD!+iK<9hs+2EF6|IPm-$8aILT@
z+sUIxoO#;EMTeZba+Pg@&3M^iR^l+7bJ!D$vb(w#xYFq<q#1wBaTM!>XsDB{Jx49#
zi1D#UTBlCJmrHQUf{<Oj=7tRuDShFtO8CkUj}eo~EN!uP@QTv6JJ2^6*zIeCWZ7SZ
z?p+P%_yCT{ft*ijE8QW8_wC<E?7=2b!2?>C)o8+g^Hd_pLU!EsU+`QZ7YODewccg*
z<Fl;md$RzP$yf~)JodIb%N`86z5x46Lx6D18(0F)%F#Vm#Z0Y>aDazt7m^PlI>_5g
znf(xj`goh~X@=zp7Qnsft7bt#5sy#&{2({2GYFNQ!iX`UqLUl27j=AN%DM<_f1uh@
zvP*kBv}ovDinr^iJVE?y9L_hJ!+$RekxVG&0_Tkr8S|>;;>NEhUo=m8)bcZV>s$b?
zMZK<{CJbwr2XP+bX&oz^Tl$T4EJwQU(1(dMSjgterLLek1_<(oQU%ya+Cs2hm<)Fe
z36Ra4%LaYfA(l7(i;A)A0AqCiV8*<rTCg)~oVCeg7#2#w*f58-5V*`jj%2hiJv_G*
zZt7RJwP$J*gh)@4z2*63C2Hjy{ga({i77<at~a5kj4}tSg0{TD<>%%(JYf@h?4jz@
za<WY>kw}B-K9=ATO?p>c6CPzJ{Z)Jwx^uCTWA4|WdB;K%Zku)lvscSGR6TD2@g+#@
zBa5EvX2|9=L|SsmT=^Bu+l-$~rBgDPWL<-&O9<`2ZZ3iPw^WG;#$S~)4Zoo9-Zd2q
z2GgoYoByF)wfG6R%$y6Ou5K8pOGnK$opY%D*nvywx$3w;iqtq*ArO%JEY#d{jN&+Q
z;`bG($UZ^TqXTdEB>#2X8!9(jnC=$PO=jVkwdC-*uehfMmP6%rax*haAz(bSlkQVB
zXYI_4tFI&1-e03icTMFrBJTL(&mC}(a~Y`bF7yP8hc!<19@9TZlAeO3zFTNVbs4pB
ze{MdV76@J4*A37(X71NZ6-&_1<FK}m=i=S`D$picI$o(lIF4NY;c@YVnG}geWn_vq
zoOKMz$>*=EDD6>&fIhLb_o%4dV1_$(si<cv9ZT&J5<t#Dbc#Aoysl$0E$*c?N<gj`
z^$@&dRy4UIx2j=__r}dQR0zYc;>C%<WC*f=;;Y`##^T90mxR+LhJFIO<C8IQs{OB=
zXt0a(gQ^yzBoY7-WVUzKly>_N#jCpQPjFo$n{ShB=&XTO`G=Mqe`Uqlb;_pQD(~r5
z^K1T&vQR%4nmplkDU!BtdVmtLYdN&^DGzM#v_`Nr4MDkN%=W#!pQ=$GAnvcZv((Ye
zx(_d`b4J%uRG4mnW6_CKyB$y2t#-kVKeebd|8iW1+ul-I5t%va?@jF~st?K+ZjT;N
zJ(yMR=`5P{%MS|t-jtzjNTiiX0S<Eif^7y-rCASGxu|wg&A76Wb!y*VWQngeOiHLf
zq>J5Q$uYh@UgkG-L9JPQ)h5&I;&7{{9g&@8lAFT-cHLHL^Xs$NtmG08e;L|&_aBq6
z7RVcpdtH_Je?%ZfaxFkw>~R@iCubvd<guxr5mI9kvQuQhg4(o*H8*L%9wLlf%UepZ
z0D&gyn?M(cMrJE&yO&oC(Cec${zuZNp-@AYNrBx}&+Zf2tH0bdsfXw>hjSFJV;iAn
zM7II&aeWqKA<(U3%o$B6rKQ7?8qCpnB7hez7owp^2*w3XsNrl);(yAF-M%y#j(-U0
zDGa_$#C2air;Etd+Od0e=r8V2lmnP9?q<8bO&56ypio<sQSMpDbNu6Mcccc}>{M}_
zd6x$V>Cv?xZ@bPt*}&*Fb<@unpJkZ)dpWMa7o{5z>oyM^|BR`ri^Y<ACv2q^ZKGIW
zNA5VK2!iV(QMoZ+x@H~%=T93*A#Ws=1->knIl2Tiu8D>~$3n<NNN$Gs39ZJg0bK&4
z%?hc3c*7g58Ndb!!||4)l{YmE$c@J7(U-s5VNfRioK_r`iN<qqHbSDqLBUh6D9pj&
zh}J0TaG)vqo*Q^z-y45K^a~1N;UTfcJyfY^b-4-}qW-_a=~?#97%VkPkdI9g$O=tu
z!Qzuqp+HhpP5+=^MUVbACs{39gN)8`MRV)2$%UZ3ykkD3lUnM&H0t&IRKV12Z)h49
zF96>*4p1by9o$p%vyofUmkydwV9b2;+PF%rzoU_xn@TnN_vc%j2z5cD?uN@iPPI@(
zzr)*)?9kwl8PA-(jKhN?y+JL~Y;r6-fWYP7Z^g4h6F#zJTD(EfVa(xY24;PFhU(H;
zgM_SHNMXq)C);_duYvQRS%E9WxjtK^lipAeU7YZW@wuS5xVxcZ3aKfc!n+luJ4rj|
z^Yc!=*P0>%=PY5VTe9BcP|AfgHOmfO_eE)RJlSL4Z@SnIC1l!vgyK*D;p?SV-A{mg
zB?(k}z^9MhRm8HyuJbH1GTzODU9_jxFyZZq#dC7Ws7jGTx{S~9ZTee_dr<Ylfj?KA
z1t2_qdG~+;?q^uAjiK?hsNJ<?4D)P-@LL3k(}HE;+No2T@Cxd~j5ADjf!C#y3yR=P
zfNKW7+sS1Y2iwKNu+;v#TVzU>6A!vwjET#$sx#u!$*#=jLXOED!tf>IcntZb$94u-
zMs=~T4LW4^6ciCchL%apPjC#&G<&Xz3KIw<8?BGtbFbdna{k8uz8=xXHJ&*u(j~bW
z^R=OekD=b_`;z!?xc=x2OhM=Cz8|c#dg?<t%-}wbrp^ZxW9}c&$5|~L^ji%%&)v1%
zgKUs<mx4w3D7va26$Lx&2MOxjRYAVVcS)f7?(Z?qd}S$JXz1F1&>CCC-Iy8%swX7(
zr1>dyLMIS~Q?io7ph9AXa3QYL*M)sM<=&2G7R-8<;97lRTg-_0qu+piP>{TC8O<{&
zDlPZ!Vw=V22P1?E-9xpb1I5rx<eehLJHsSW=dAEQm7|I)D2C>$u)>X%lb#iRfR@#+
zw<EK2o5@Y*zOuRtR|qGO9E<gig@@R3F2OJN#XPyt_x2-d8V?w$yEDS>>6T=iO8=Qn
z8>PBdQ7jhJc2wAc{vC|jGl0L?a}JbDf?bJA?+Q?q-t|T3Ad4`OtSjSSfWDT4<aPxQ
zu<<aZV5G&p1>$xz{n$ezsz7x9njDA1z6I(dl!pbHaUJiIH(a73lwV6Wa<7rM^B$2b
z^g|LneFo=_E0q=^ZFfb_Vj4eb`7^#*Q8h?Zf+YPfRucoYsM%R$v63Gu`Bi@y+!?A%
zMdI8%7OC{qAS6`7u^);xusCc3r%*fhuyBcqDgpHr!G}_jj3#}aV0r=mdk~dU9d$I;
z(M7i&zLLf@D1R<QbCD>_JtBZqOTBKCF{;=!Wb>QecUJjf3Y4h%+!Ndt;fOK^-0ru8
zP<CGlZBhddTF$(BJ#wO0q*bXVp>-JG6R@BUZ0}2Awjkh<(t-JAD~6%b&~5Y-CH-?v
z)o*B{gS@(sL0i*dE4@c3=65?Hz)olwl6cqWcR^H(?D4x0kXhr{2vX~oLdVWr&LHo`
zPq{MXMrxeslQF=YkzGqOGd$}z0f3=7y>RJN*XKrb_ZtNVGGF=B2w%(e-uF#~#p_4?
z6m*9G-mda%bnq;ygR1G>$0##cTYPva@qbnTX;$>u<$!kJcO`rusS?>vtM856P%1kk
z7KVP%RiGs7{C~Fx`3rhPK>1F2T}RapFXV7=tH%5tRB|;oC@p9y<c>ti$fu%+p*eLN
z1wKi%Oj2?6n283sv5a#=Cav?&X{UGT6jxF-$29YVXH=@ib@_fgs-R+r36cK2#8T1c
z$IG5;t>Z?m=3j0|ps}`AhIfdtUFw-dXbrWuU>k=35KHDYKu_i1J|m@B<eKVEC)e1D
zo>%U_Ymzs{y-EufTwQMv?Y92RITrW2C^NTZ#pc~8HJD=9)&>ViI2247A{F?GD~ia|
z_X}Y0r9e;bgc!<aQg3R`)lMu-Q!1Blp;l>P6=y2au;0RpJxYZtE_!}!Q-qz7&5W|^
zn7=%$>pY|AZ-`|#Zr7j~HNT7UnJ_e_Uyz3)3@bS8HpLhAdoOh^(X)cNn8`PyZ6PC1
zWI5^r2Sn-Z^x4N^SO)%)E9!+}w!3hc-)EW6SG$=5`B2fnw8&LoZB_=@ZLvtYso~(U
zxpT@xR-P-d3EX#oTjf<KSPht}<$4sfZs8B8mj4T_bCeHP-`{K<-3ogarl_6@n_ty|
zVp1RQQO>U-EIZGNdDg&f<aD5uOmLzSjaYDBrQm!4=;Xo6;r#=gQtmwAxl=3C4FHxP
z(O{-?&p_o;mDK}Jv`pG80~sWCEo9thNFA=n^2eJ(WHismv(5>y@X~d0CwDP?UbkIC
z^Ew5ZeJ1GSH%#btQIS0uuT3@BH@()8%5Z2sIMbslSdh|f0_m>bDV=r$aM``=^0HG<
z96hGdF|VFJSH3c%CX#W&NYd9uV?JxS$ZrCqmc0b8xuqDgtk{q3VQjY>ttF#XtY103
z!s=O3@m-o)Q0o%p_h$;&I#0(wgevPvv(?kS6xb8wWgdDr{mGLj;k`JX`Fy=gRMykc
z%eaGa0$E0@Z-bPxW4V2cK>B-Pe5dGy9y7A7KUPHa+Xj4k8pYK62Mc$dYVH0oC?d;m
znK5u{yFj$q&_vo|ub=$*-kb0|cFpGJP%!jof&F@0tajCQI5ajJ4v+fY+PMF_1>ljJ
zv^C{Vlluw|2$eet4QstCg$+V7se<#}oFw=sLy8d2!BE&0^FhDdDqA()7f-!%uUm~)
zR7JCm@sA-&naBKfz`*r!FKxMS49jVB-hve!6eNB?g|uqs^;UQv({yHTX~iYE@CO>^
z;en22us&TSXPNfze1f;1Z|z^o*HtPHO~P~Jkz&}|<yPFg7snL8zKbKnn0^RpL7)MH
zbH}Oy6p3iV9%z7ns9bjb!KBD5J@F`POj_C%(9u3}?PA8BE^T6KgpCc@>PTu}6v;Gc
z<(ve8hFnPL%^dQ_cjYk5Y_uqE@VNHSM2#_kyr~9GofiS>I@#bI`hc&OfMDEDzj=vA
z?JYz}EYJ-=2S>d!2ZHH_-K}$F@Gc;CT*GCOzxoY*zbs0s`4zx{BMFUvxh8{tsX}Vd
zzn}?TSv2`7idHQd$*Wn(sY84S=sbx`Z8T~ET(eS5;ydmNxLANPe`OT}zNsmJFi$d2
zx$wH@G+`$Nia1iSf5N#;vG&hNcSr^-ao~i2!}Z_^)kHw_v=%}VGeQBT?;iE6=erRy
z&)Uh{LY2NF?%fED5)Er*bNeVdN@LjWzEjS;LQ<;prrI?s7`l&8UuwfwO<s%^iL7Tb
z^%V@YK$8AmLSKg+5Z>2*Z9*((PIV)lptaLd=v~C}zn3E++Rdfc4*-{VrQn7T#>TQv
zlt`d!``$QdzaYchaW!k?N_lxWX<Q|Jg-D>48HR_@DLv(bNj>>@XQFW}w*n0z7K2~<
znrJGo%wP9AC9R>1E?WBi&~LHyroRyEQvSr>898_;nSH?Jj0!@SD%=x@U=Z5pvA_i>
ztipq;Imyjz*;MoCvw^W(UM7nm>S&m)S1SHtoG9@0wj}pl_7k3gMaf<XEu}juj{8~A
zrMbxTIGy6LP$nMCL}k3)8-g|N(ZwW}0@O*`YC<n_m<J^T*C#1$noi?#r^oK`avT^)
zYC>DZ*sOs5HH*U0eg^Ynvk)1Cq;>h0$1|7TB8tw3#-t&!HC~Oi3!j;a4}LC%-E~*b
zWsUZ_F3x7k5yIsqlps&dQHZzaZ8g21gec;hz)?JXet+%uCQQrT{wqCMry@he>bM}l
zB-59QZ9y_66g&R!Xl{iu#P!#4whg&ZI05tZtRq2zLw8*2lr_ki{q4tSf<~1{C3nm^
z%IybcVJ`+`K8>8sV#F}P=fBe}{gcR~e{!EUKHvT~ifJGv!u^%>+c$)oZ{KMCe{hKn
z(A?P2(c%Awmt5#-I_ycrdoR_L8VG8fCe1@iD=MwAp<|3R^T-jBmk($2gM)#`LUO@Q
ze=F@r`u9{-32vuiLTP+8H)K70*^2+-H8Nf<qPm#$eC@5!iM{9ekuHuL6J$F%r4a3|
zYf5uTBx=`%lrRWnvaY{Bnr0pVDf1O;dNWAaF<AS>My#<QH<Yk&Cx;6y@!j@QAVbti
z`?H{ni^^4s1Br>8WekqCH9~!g@at~%#N)Am2_d;9u95b3#DjUT`tP>7p){!8?OMZe
zDbIPX(czLsohr(7H(g?dV}BA16#gvL<jQ<P#LBFAa%Sr>7O$DQwT~1wlZ-|%XjzBT
zB)!YJLR}L@0JD7FuXkQvUbvG4_T4-)O^}J%Pee~9Zw%|gDc}1yH#?5?0A9@AsnJw(
z+E1^$S93QTe?ER+WyQu6Pz=Ot-5aw89bF!P5EKeLrsqAM<)tb<T+st}J7zPHPi{?J
z4qk?1e3EuqlEtYNi~bBIbtoQcd^&dP$Q9=R5QjXmMWrc!fa<GF(32Of4EnIKc(*J(
zSi*^CWfvd98%yHx^jsOn3N*H%B+qhit!)iVy_a){0T2&4dSldPy2&2GM4B?W1x3YX
z1jDQhhIIy0J1e>L6ArJ`0S<Gm59)#~sZ>!AWoCH8$GF9I%d7XI!<Nt$xuzU4j!e}2
z1z^{%v>aL6uwMOeNNcwFrfOZcdw~yokS~2ZMHp|tsS#p{oh{d5(C1>tiCLUCqG5uG
z`SfHIJxpP#O*~9%5e4@vxJmQ|&2~*|EEev_JJOYQqZ*Y$o}(IpEj2-w_eLH66dzez
zB2fFT{tinTt(kHsCc5HQ;>q8P84Pmj7U+E`h@#d&oZ%&-U4^Iytn@o97h6EgH9h=*
z%&$yWM3XK4?&8T>J<-{gDpEx#?YBcT#a1M#6#fd7=x<xWW?LTZLeE!J8$j>ypw9H5
zm`bd_M8zXuo80b|`}b;6ay=*ALT~8<AmO;!#fj$ml9iobGIyBNbeM#5s6-ehi08Rp
z)L9=ers<YRptr$Pl8CB_EI-<5n!gX+<2h^{_iM?<YpUW~p%8zRnFAQ^!-iN()loa=
z8%B>4wB8zl+|f$9u_dA8&c+cHTpg9o+yAf<I@lieCefG7CLv!9%B5rLF-Qo<2DyE5
z*|90j(b0|&&&d&l7G-iVT>^lD9Zy-_SNB4Hc`{mcdJ9>xw-~y?JS$`i|B!V~?jt-(
z%V+;-#>}nIrQyqrO*ihRwH>eZg-|zkFi~sB^mmuOuYl=CrCXS6+Ch!sEGp(DSYs6h
zL(*y6%ca#zI2_cEF9pT&F6rZhuw*9NTc-gC*bugRo3ufRiL5y*oA^-70q|^MCO1kl
zkhyA|hDeVDt)~Z5hupA?C4nVsV~L6B=&LmRUns9_^IQSSDtm~UT!J|@Lcc`zi9cs)
zh8!@}`^jhycgLh~5E)ilfI2Oy29Np3Rp@F)F$<J*EGmWHnbmS8X1^($@TKXG)5zIi
zs-wjGH0HQ)`{lI1f|NOnI>P7Y=h-Cnk#w{p4&#lr!-)QL)~dEAuQC>{@H_lE=xqw3
ziC<R>NFUdr?@F{!lBYdRE5QF6hCoT;QSpT%>Rj1mg@)fDakp31CLkSn{mkP@$Zzz!
z6&}4|oY$(%jA-~GtpE|GdVJWSo@9JuT3<^Bu~>QTCWv+Snt+x+UTGge^favi3C6lA
zZ`S~;^z*}Bis^zTWGIIw<eb1(N`^MXvd|mbe`-Z=uqVu@!5k(<`=8}{v(HhX&(AHT
z=Ye;Z?udeS?bkvdETt{lj{^RN+STl=csbTwDtGOv;sn|Sj4FZ!3<!)tyFzbdzPGh4
z(3E9mvuX4MNBi4y`(lY#L#)i!ubiQ}SFiqR8d!b{CnuAHlTeTxA6%h|!>)#x1I0nF
zdyEnH5<Q6SnlAzD*bFyd7fQ5h{I)qsKA*{t+Kk#Rr?>8vI#IV-Pkt@vO)tCfoD85J
zy+EAL@k%tOy&ml$ma)yFB*Ot0J<k=QkF>5=DT(;4^zjCs;LpLhLoaE5Dv#2?NIH|V
z+=6i2CYkK7Cznk0ydZU@jAli(bj3MAEnQJneH^rIfBAb{#vYS5%hABsJ}`6pT@)uZ
zffva#5)y<eVefLT7rV(qAS2Uiy1>F>8ceWki+pjFRDk?ZYz+hW83;T|GR$I>sY8W1
zv~3~8mv-bpSes}-X%S^LBpxA1?I(h<ezG$P{OtqN$ML>-OK=_TYQr<zn`vXe?W`=q
z9FA9SslyKd#<<4g5yGW#FB(Y6vQ@nieML+(t8$O}rkkwxF0i9dz+;Rds_S8-RBX#t
z6ko5es~F-=92N3n9rk{G2HP_7%z;@Q85GR*QTmqkEFh-E^eMCNW{=;jOn+>zirAB$
zuRqKc#?D=IEIC;Kr_K0Eq6)&O=g~?Kb?_ybe6u>}HCH!9xmlAv098kgZtM?%T8E8(
z7I%L!YaE(>VNoKxD0&R`%(=?rOQI{3V#?#Uaz^W%1D1HrenVR#<B99mT^u#97A;fH
z-xee4XiHT)O0O1R5C6VJ*>rXL%rxm+6uD~~6pQy3sWMybZ3^2b^LQ&V@BAR#eYsR`
zRkIagwD@X{Gi{99`N@jZ08}|n$o#z`?6iN!0{7=z;EdP4hq#6zgBMxZX`t5j*UTIg
ziE{$QFFh>Wq4FJ6WumM<tteRK)hpz{<wp&eQ~r%F4j0E{mZLl1?Dg{VC=gpCqnF<W
zmUuOGw5V>s*2n6o;<{mmI>!@?TE8l3tQToEbvR{(pI{l?rOY}3qa6rZX@}`+G0~kP
z*7G-pe@g!5-yo1Y>;NT|^kU7k4BRM;v&KWTbc#A$(Fv6Nsc;t&8Y*_y;~>r5Q^vOg
zP12wFW(aXnL2}+P47iIJG{qPp5&k@h>oZezcQmp&vidoNwy_r4pIvoN<EZPd_GMLm
zfBqOZ{#&2$CDp4z=?TmpN2bfTopwI#!?CQIY@F)3bhzLs)mTNFykrk4JBAH17VXZ4
z-VlV;M$pP{b~-XG<i5^}?z2T<3u8zVEq2`HA94HA(Lz%dliA;9xWee7aJbt+ev?@=
z640GxfR*gzWYFO)jG3AxCR2viSca2+^9{zDsCQrtyG`pgmgyG<FR8kzt30E)T-pxe
zM64eKzQvE@-1PnS#ek#HGIpfeFBBJu=qKk&k&W8xGy*1f?T)rW&Xbnu2_UFLWK6v-
z{GDN9&f_JyL`03-y=!bQbDBX?+Lrf{W6Ggixr7AZUo?^D_MUk}M(c2&sKP4NU<|zu
z&^jyi_Z^e4)O2lQQAH96FGW#gdi#5HTLLkS-d(x(HzxcU^OAeRlZbgUE3{<O4m(k-
zZ)RffXrv_D)jRTCGWY0&j)CZ4TxP2pK7vIprP%-YQ(%1G^1-!67t`EL!u^?}mD-}C
zzz2+Za+ybzO@61h>bBob=E0w*mDPI7GsIgN2PkUprck-B+!XTerFBeiRaUredLrYQ
z05f9dlKRj-e760W(JsNq^AI=JsJ=tFE2HKe`-<;`wY@h3R+lyM-pD$dJ2>QA8zHI&
zThkVsRM_P2AYerKTyi)I31b58OeLW2?sjZl->TXt?M+JTGcta_k*)dyZ}huXyBh6Y
z*&#0g!l61pB^TUeN4fmSzX@=1YW0w6m%6Wpv_z-T0!LYLcnSw|xGn)<gm_=e1e)B;
zAfR4xsvzoGa1og*!zH&jm~?R@>QM}pem)<pIxHyH;Ws(UAmKdKmUdC$oV7I%b|gr3
zNImJ`bIBSdy=uynQGJYZA5~{J;iT8HSXLb=j#g$n-s{br0x=hXAG)2FTP&qzSYo#o
zO-1nOm6jX=Up=u~Zt*V7EC~Iz;*J_KR~MscSk|1@c-dQbe-lLnj4sAhVanBMS(prz
z@ke`^>vR4wSX3=WhcF`gtcTm__P8kb?4-%5->a9V#Gas$a}Bkw05nz8p&Ga^gr(L6
zy+nMl%o??SDW^{wOOZ5L9%yNr9*)LGig~%usFr5^CD(B#I2cE;;jV2*a9$Su{`W<q
z%CA+wUw!#bHkb3@O>0#}MlhtNLB?cqPZP>EXQzxA3y-3ZOxQx{&P`$g7ZBI$Tk*%2
z1EK$SuZ@94cqJt52e?STbhZirZj$uJ^I+Z7IBYNk*SkoRcb2%qEo0@&C15<?(W6`U
zr(nwE22C7KoiRtE{3htvMP+aMJVuJ5b1-Kjj%~lGW3|f~bZ2Yna89|F%n6OelJj9l
zsYF8(-5-Xyoq1)cXrs(}wnmgeU;N2@63WrLD1v*b0OPB?!p0iDhI^-CAzs}B$E>tI
zco^%}a3DI5X_)8o&Sb=RM0|eIVcwV4pccq=Ea9gO^EV0xnO+6?u{7LF+wI_-(z}O-
zWjW3Y;|2X@*`!%|O7@zl`pVh9n+qL-=61f(>8WvzK!~O6hiUmN{b4A8Y}B9jUjW1t
zIa+ovqZe&r{63f>Nw+Z?09ybul8(okBxzBJJ+Am5JqMl>9W7VnEuBn=r1o^QU!t<J
zH4*hrFJj4zZ$oEG&Lw76go0S)pmOq)O5mW~<OFOe#2(x3M|EV#-@P5Bn1|e&TSQ`{
zL)uxcT}zf>9xj)~Uaqx1KHW`_LR5*6+ujCyw1YKKcA~-AZ((Ef&7(cqSt?*i%w8t)
zFD8_&Y^4$h9^5?wY67srVt#_Xb%HCN+UU`#duQz>MP8QzG1mu@cdm30MUa0T)YVuY
zbBeZJpdo-BUK7t5O)94;kq!g@W<3&t+qUD^^mP0Sgp0vXcd!%x=&v6?bv9WMbdfBc
z(LrVo8udPm?$50P`M=2R$@pl_cm(k&>|>O0_*d(l%GV^?ag5r*$DTH+0|oSDW~h?9
zTp^lBI=cSEx$-<)M%<oNvTW#Iz9OY?2sd77PH~KpwV5VjnrMZ5vRfd)Nz>G1=#s&m
zUR)8-AO8`FTg-O6irm=VD4nm*xig-5ms0GNCWoNz+DXfyySpsEq(itp-Sm^D*w3~l
ztw&M9&xsou?4^*jQ#xz~rX~+HlZykc(j32R&5=hpu`XDcYnPjhaXGB1XQ^Od0Wm`$
zB7Z@NPj=Z&K1GV&RJ_H7Lh)|AUzYQf-u-q~GgULl)m1tCOJe23appcpSe+4_W1Nf*
z_%@rD<`yhTUv>g1Y1e*uJ&{LG9g6tC^3)JI9s~2e!Bsq2n5%FgzcT6AaYhjxTK8>s
zsYG_DU~mJ@va(-4I&*U+51{>cN5w3rC-$k%{r>A9VdJv-?1TRfCH(4OFwClZR<TEH
z0D<qPbXlxl0go>G#nJRdWsaBA-LWk!I(;WX?!Cq#cTt2Z-C#pw#DHb^m(87$;RzXk
z)pD{xde?Pj{rwGOZ~;$rn?mkPGOmIdUbe;!gB2cY%PuH-4&Z5Cyn#<|?uAztP}FgI
ziAzV2s2DB2rkyW<;S3oPbGcn8>!v}qMR9u(X&6^>8>ABqOz8jqb_3Esa7K#uU+48-
zdXmbD%9IOye!gMe<%)$bqu6jk8lVg8egmaJ*SvK>lmYeAZAtVdW8~!ryAjYIdfpd4
zw}tKpuRM+?Y%&{2%gsfIQ}?A2X&rJyOMkOP8q7q2!*DH#$arishPa-sD3v7T$cGR=
z29(AQCewY-rYMqp9jHP@otG4XTYStsjpHFdH2dl;kVFG>=u0PpA5vorj>5UM1bG0n
zcLSDEo?HN+p(l(e)<T!}!m8?5-9{KGb3Jl)X6wq7D&uJ|(M-aStHezYu%E93HF?eu
zt9@r**pZbAt|^W(Ci-(4ntdK!zpiar<0-6N>b>)ek~;9$9_fEE_6|{^M9b1}+dggE
zwr#sl+qP}HPusR_+qP}n{q_IP-W%Ne233Pvs|K}p?#!%=*b%|F72*OYn}AXAQ_Wa`
zaYDQv0TQv7+W=LdD*W-|KVw07RY$%Kn{+CCVogF%0hiRa@#d0ML$b9vnLaT>Y>{2M
zG}ktvKsT1Dr+*UGx^@z*Wt}fu3|UHB*>p%RK&!XPbbJ}UekIYC+}f|ck8;Rb<5wd7
zn5wxh+?2E!{EXRmd`#c&?$!#Lo{>UoG@L_uyLeqb%3`e=XTIyA&DHEtw}mZMR`tVy
zhYE_O!`eL>v9?^?Z9U3TU)z|f?L=N=bgVrsnd$6>6OjLsa0)f*@&)CxiHaUIlClnS
zAHA{Ly*F^IF@cgMP6d8#fxx*5nLJh{WM?|73%Cv9P309xXB0qXNM>piGPBz<0L*Ah
zz)|$?vFRfx&-BSScpQZYBA4n)ShN;}|I|-kZB9N79x!2C_o1k)eX#J43W|mXBE8q0
zT6YtG_s<eAq<>+GNl|q@+&rYIA9Dj1W?Euz2&4h1H=bdpZ-&wZf89ztJ3cdc_lA(A
zOqeVvhJF>omJAC>fO0q)4ozxZhC+kt7N9MR&o5`pG~|?iK(U4d#zWPg4wD{-zw>#?
z65I7un;$$<G}Ku3^HL27sQ<n=@IBx#1_C8)RiQh2kJ{c@W15iJDpefo(qGK1-<90Y
z%C6I8Xy*D5{K}wZ1784yXF%-DpZ<5cq1-`URS-@a1@#*IlRX}F^>RtEUnaZR*|Acd
zYx7W<!`o5oc(y5{RPJ^GUwI9+wrRIGk=BV4Y(XxWEm=_j!P&xzYvC+|3lF>91)7GY
zVv*#UQwo|L$0WU^kWIr3`O^!{)dR#ppg{$GWHzh2&7(ih@@E!R1+hv{oV+_<=K)R}
z4S(=y_>W3AY(yDa?v-+h?XRcS>3SX07I1U`{yb!h_1CPJy}EY7z{Y8t4Vgl~16|}a
zW#}=x)Z{`Ucf~iySX6dCzbqi=N;QWw+<4Mx{v8MU2*pWhC{HJk@~>*L|I&xOg%5M2
z>C$$^!+jcF*PN$h)`A!rEj#lC&v$K<vdUmGEl_8QcXcA-_J(@Xiz~(@)+EszU(^As
zj4WPO`R;7vfow}Anc>I-_=GY%wyu}$G@QHWl@kYq?~MTN2}31gQP7I23fwr*SiX9V
z!U(NO@Jn-SghWkA&ZHq2cfqrVMp5-QNDiD<=dnmwH^vBs<E+@hU*?M!fTzfEs!#HA
zPn^;}(yQw-Vb8rx=Td?l8NelDX9ZZqFzrbxK^oRD{jIlpR9Va#5+g0gD{^j%9PViV
z;#Z$Sv2=#@$kxP;9-00a@%E>~b6U)NevUxur$>v`<xy2OCoPiVnU;F$f(y!QvN%Sy
z|8No|6NK2Xg`Cky<aDq>?c!Pdi2AJmSe^+(%~4>*a8?xdAD$1ey3_|Unme3^xRR4j
z=o$@>jO%2yzDjh<pAJsJ$>z<wkE%N#16IqZDG`L+z)Yq_iKvNTSKyXqV#lD#%DFMh
zj`jb20$e%wES^t4TiUu@u=41j_b9k3@*Z)hte-w62z87A%ZO0Wd(Le7luwOxi{E8s
zBpv0r6H(rbc}iDh(j5et21$Lf`0K!hCPYH)B2y)aoyeRhRNxSIjihUAc@Mr7G8EEt
zT1zrx-O+(^ecN0#Ab=sl!MsNUbr0jS^M&2r{(ERXX5d}PwrR!t-qOi-cJ{f;mskL0
zIG)s~MAg)fajeT<BoQhi7>1_{r)Yjdoe~xHO7ZM#PLZIAlRfwx>#uN`e2!t^b|vn&
zjee5A@f43>>}OaWq=!&i928Dw=o2h;zVz*q(ES(HQscyabk|U_)HA9rg?}<G_=&6W
zY|zM6WGHMe-;+;nAb4DLw8I|HWO-evyz%q!`*WEQ#(;_#AIWt(VP&A=s3N%$kv`<;
z3~H=;`<&F9q(rD&M0qGar_uS}KO(8Y_t*VhG>38}UXoi7Onq>Y$WnO_O7h9t7@bJY
zML9_N3<_$4ZQCu2D3YZap+2bTyiVmMZfjTrIEn8`f{4SpAnk3gcrnhy`<(`^Q6;0q
z0f)K5HOLY4kj9f;Gx_w8`_Ci9TvH{*JjeqAX<8JE%h`@=ZXLx0=M~9zY<BaNrSE0t
zV8O2P^(s(H%mV^AiMl3cjJ7p47^h91|Clz8aipzV?-m=g2|37}DT6K6#GPc_<HT06
z4=5}QLB<5yWGNE$W#LmyQ8R|tDCHJi$xEi*yneqXxd6~5#6(OkFTMH9fSSyJvJI<=
zu4Lp4yM!^p@B?TorXY73;pqvaJiSeTlQpx~tL@(FVKj$%&w*Lg6qllsX)siZq1+hw
zTp5o95GVGMIVU|?9>&zn<sP}*e!GaRhR?EM9^%XJVCdZd8stxDbAInvk=>W`$2He}
zjI9R2N55!PK!I)q(OcpwyQm#F30;x=RP;XXU6%aR8nHRz5{FDJxbE-xtdPHutQhD@
z;w|yHSjJwSPyx!=O~}XEjD7bS91cAB!`}sS6F!mo7x%=P!ARe6(a@TvEitscqA6gf
z%y$W0QkXBeI~~s4y2|wis52Xvq2d6A8;2OryU<A*jhz2v<l#_AAY@%A3AT`2vz`2d
ziLF^IhqQH>Tq<GiExx^fFb0PwQBGm(P0Y+rjztz~^B(5V)mRen^e%8!kZu%TfdGRj
z;d)|eU129X_rihhWa)HvPTM8PO2;VfnuL~2fd1^M1Em&ltGTsqQU17P;Vn8ddZB(4
zPZz$pofv(TE1f}|z7a4aRK2B2@0!xU%|)zz#11#!IF^Tn^Jlu=tSbv9Ijtq(#5XaQ
zbs9Y+(9x9f^nIFon^Ed~4?SZkF1^FVH>9L_3_U-v-oW8>ooaEb*KGROVxY{7BO)+f
z&EeF9-M^&`XoV;yaWUDQ90N_vUOqwsZmZGCuV*G{v!wdu;|gBPTBZVNYLeKhP~HqH
z=3r&bmS3QGzJ;=mu#3!e<uLa!{+Db;rS(T=S0@&YEjb<F-`)-$QK>X9%x~BdaX6_o
z6ykNOkzNRb&ff84VNO<3XS3i!2B@|h9dVH35r<Z53j(qs2Yvw%h@S<9cDOeuaAGfT
zFd2ftY3Jy2g?>%YL*{#qV?T)v!|S3dp|LyQYJtHj?2lyNBkvSha<CuYg&HT~@_i@8
zySeZCiH~C*Ye&<TTyOQ*6kn%Qj6Et{pmoquB7%i?XSSv+bl|O<jfCLN*!ZMwvtl4^
zHRRdy%Ka=Y)6RKUTwhFJ1>vsFs_D{3J0zX{DVG<0STpml$op_uzH))>A2Q%<$NAa)
zc4Yn`tT-L-YVXG0iuR@V8Oc-6F=>hHNZ&9hcZlyn-IB^jsLs?H$-w^hg_mVF3HJiz
z+HdJ{Ex)_G63ABOKabV#bCp{(yBYuc(842+P7(|-+p^Sin0j{fo<mueb&J;}-3gBA
z12y)yXX~Sjve*`jWX@{Y2UXC9h0ec))$Zv<?YV2<D9?8mAW`o5xi_x-lt5<eTL}{s
ze5V;y;uVGrXCUQE2Ixi^Jq%rz^|HtJ@m}o3Cqew`L&kHD7Uc^Z`KISZ%`(D;e7hJV
zDpBLQfxd8QRF}a?A}9T)+RGCn(!1dkzT%uwN)VMYkXP8*<i5c!i8uHYp7Mk;1TR#l
zUj1eT;50r4n?TGAkvDj);u}BcGIf2BKc>~bQ+K18rm>K+iUw6uT4Kj@EwF0Q($75q
zn}kiSfe_{#uTe#(0_>-dAxOrvU?}MzIaE{m3#@*%@j972NiRqyKbLF=)!19G5hZQ}
zl4{!Wu6ep>I2*ZZEn>e&UX^+2q}`sl>|6onD89Bve`2Z&Y`mw{KGkZ&;DU`igZ6cA
zefB;S>z-YIh=VTKmP-W$*ZiQKQb)TZS1&D8=a{ekL#A)#*13Y8&yS8F5za>SozDG{
zY6YQUy3`_ALrL=n&`{y^J~YZe^8pLSr(>!kX>(*7cu|ojzBS>@jkkSiZrUXkd&2&E
zVaeyZWH!7v<LdP15l*C@6Tte1!j~$Pn7Z4=>FFA0v8^ni?pZS<#``Id<kkCaV8hqO
zTu+0-oi4rU;aa<%lI1krd`?rvah4ps7=8V_LSy#3!MNm;5gLB<)7FQtryG6hEQdBy
z=j-`r^XdNkIfYp6fQ+NFrojm#v?5kebT~V|na_nt`I?I3U`0p@+Z)!Ojtj6w-qeTq
z6TxPX42V`!tin0{<exGmo<zJ*^<plKyAMo*d}lG%zo7RFaRvLzdoVG9RPRLi-8I%u
zMKHCVJG`%-_vX$b-6rB0Yi^5FrT44w9thYq6R2AUl)2Iy01$<1PxUypWg4NKjl;ag
zd8)*Jj2=KgIb9&UCygv}fqkv_rl&a_tH|=%xn$zTdv1)P{=S1{pOB-tc688xc~Zdm
z?aBHl7;jVxU-IG49i4@=eLc-6WZu#%I?8lV`_y$Hf)-PRW2s(P+uY#v1Bh5H?@oEn
zCc%Id=dmL;p$*n(jnL~Pma~6Qq~-AvpuSco9>pYLhn!s?@Cwo)*Cdl}{Hc%0=XS*I
zRhXdq|DtNHlG~`5QV?t1j>o;)eT)?vWF!lu|B(b~j1%_6Gp?Upt~&|Ugs0WR#<IrU
zMHQ>r;Mw5C8*=x6NGHPU&Pu8=R`;{Lg%mU|w4iIVP|yo3hsoOAQxF}l6Q%?vkP}YF
zrmzQ+`a^|bA#gOJ7)|Z?6kT=ivXjRtNJXP<S|3lyxA>%k;*)Fx^@e#O-=On(*>yag
zO1Sk($t0XO*6t-gR_^fiulju{M|*p+BxRwZV+$w7<Kjoy^`dRK^iUOt?enebU9+Nt
zCc{?huPcFKs})2;?dqtz!jk<2#jpU)SC_f-n(o)ybp(CK=iQg$g8-G8{Cgu53VJVk
z#<t~UpMH_y3!an&5!;>|hm7(Nj+JVKnzIyrFy4}5WfrWS>&;J33&E!^v{{Q^NRzQl
z;8=To(w3eJhBdwKZpq6TA^HzJj&HW?W=6*^Dy{TI1RfeB{6ntGsP|7HrbD{nb8Tfv
zK!e;nnFP+)HR~R&b-mu=oQ36SJ6B>L+Jd)sF)b6UcFCpG(AslsHVG^t@<-~anCgVi
zwyc{^$JrQX(Nd?j9JFECx<qkC4NJ;&ank$E(b1*?Z82R*_e|20gj{a@Cq_SdHwy-|
z#<o~3a%dB0YjQE*{8ZM9tesAF<*Yx)y`#=LB>)aTIbz`JS|BOcq61;Ax!j3xrzcfA
z@&)np99OwZQ}$ft7_}o(L!RbssRD=5@231lXss=YWd0ohbzdKkz-RR3iTH)UpE01P
zM;Cl9aO3p^lQD$2N@O%7=E$<@_^Z9Fv?xR#D5=~D|Bv4qA*D{!aFH+iGG<F;fnDjY
z!TZ;xq_nMVjqT8@2c!1s4WDfZ%8NO6$qYimFeP=+>*_}7m>iPHIqvekN^mYGNBLiG
z*oI3t9K1+{dnn^9?w~jU>B>%i#hWD~XagIThj=*^-iAkt$?S$wawGIFn1-ql(bvsN
z>_FjWiSe*MVe<xTvid~OS_z0wgi;NAE6fvzQ2^DhCl=v|$dYEi8hXkShb8yF)`b@^
zf1{7zCB6pD7}r=~uVbeVB3BPK&Q5K{8Cg1{>d17dHT_99@>VUZA1vMrxH{6MeGOKH
z;(0P2kJW5nud<_Ii@FoGTI$ej->&@2NAC^FiZG4wxHDQ8a!ew*40KIWxLSTo?Tp$A
zpN_vm$J)6Le%;yqhf9vl#@rX%|KyfzIdBid0|NkHLjV9!{C94Nqr0`4zM<uRA(sRv
z+1jqtBMk36P*h(*FPF<`6wBnNlM;l1<iiNBHg-oydm-3{<E+6Y+V(h#kL=8Ln%`yl
z#^P<bKHp&4fomt(HvT0=&0fEH7P`1QqnbntvX5be(bdae!i%DDg32Jb<~}W?klq3T
zR$?wy8|4AwSdI)+z&w-}kHNgeCEW_yO~C4`Myj#p`PCoeA7;f*3hvK6SQSS98-@(H
zV=zer0a-VGuS}0YR2eKI=@wju&ybLNoUFiD@aT0Q|2SZrT$>`m_KFC0V<?J}Zl;A^
zG1OTrIOhdB+3p_R)aL&D_4KQMcCROWPSN$)lJGemld?)(<kU0QiU`fv<>xbd2D(7*
zh4aL<rH}sfYe#k<xSxhF6cn`(K;%`S>=l)0?mqS+I#9Bp-)I_;Scs@v8TYL4jp86-
zVqODts4=B986}pZ33i8?g#E*u9k+EG3^H)KLf%<q=FSKWQM~Z0y&|@Cc45RCvk5m^
zWDmKdVad4r$~7)E<b~I)g5^3OfqdaK8%bRKA`AyicKNeITcd*HVz!N>Fq`F6oTWey
zUA%|;$*v6U>dx0emPn)9=!Wydt~}!E-t=klZ$Jtz1kd~u8-~t}y~ZB%b99I|w7QfE
z^&HJf1}!*B8xdo-ywW5v)n7$<P}x9jR?Si?uRBzLDKOKVG->yGJErUhVoZymjd3RR
zuv&Ddo4Z*pr|a-7Xok5TTN}fylC~p*pTFGlieAgiLPOH_x^HejF%4uH(uQgW1@Vc@
zf{|fqWkAP!OG(WS*?NJW&}}Jd6tsY2xfnUeR*yne))OnvXvP9eW~p#lVgE$jrBF&C
z(t*DoX3We`GjFNxllDr)K0+GRT^P9qqQ1qIvx!5jq=2>`?h*Z@<F;&3;B`|(-Z}FR
zO8D|1^+@Eh1=7sL5`tV}bdiv0x^Jl$>0ReNNB+eO(~BZSKr&ktro$VnvzY#1n(<;o
zoH{rAGdq)lE!xKKV7;(9=U1?|;uKv7J5h`JH0R#-$|_eyw~G()Mh>Y9ZZ21?OVXz8
z=YO%e^xn$#nZW@7>=6D>JI>b5*v8S(%H==Pxsuehm9V&wykBZg9dLmtOg{nj(YE8M
zk(KXMQaxX`$t0Ny`k)T}sm<$owLJIiEYP@H!L)T;P$GF2@>)3O@NO}EE*8i=Zqcev
zb58?B$HvC;$%!5iwda_(tDl;1b`@%x`koTbuCPv4K45rPS+*Mj%ek&wzEn=Y@JBhD
zLv6WfD{dsNE35{T9UxuZ4fw3D?#zVww9rf~MPOo;KBe3DPr8*$S4s3BdmxT7E3dxg
zvzAjZ)5xSkx&=t!2V0CD3+OlWKMzIZ-3GcstsV`%EL@zOy{ENQ0c)6h*^$}?*44Te
z0&PqQ{(Vi@vuo2bL3O?Dp04!77A??kmt}>1z}yJ!+6GtJn@7pY@%b7#+ZvdniAmS_
zez)8H;CHjZ{F+A6tV87CMviQM`dnF{6X*ze-}!jF*#_TAEIxk<$>D9#T)EQXQi@w>
zQiV8aaLN8+EwTwHi*h0BygGk>zr1{Q@dz0G?#((b?(0c%&kKecit>^NB-1A=;rz}Y
zKIF(}R?4RCY)TS7Q(vljX3mF#DDqiu(w?+m^&3W}Hh0gy$OVzjj)n&>Opm8jm#QX|
z@KWXOF~Js$e~P3O?CO`Gq>ns>L3In$vTPe8=bDD&J<y7uIW=bH#KnmcEtn$2<MnA`
z_vvCs{IGGZZ+IVf67<xWVj+M~Pj+7Z$bxmwnJzv@UCJ1;Z*gn2bWf!oStI6pHMF$n
zPLF~cE|*jpBA}q2-)JPQM36hOJ}{?S2^Q>wctwLNF0WIq9&IKd1(<=-JXh3;W9o?#
zEBFFDu`F{=kanl?<%$m)=x2_-c(gr=R6rdE4S8ar0zd+HP+f<_yGL=y0m5oHg5hd}
zPt3q?3tiHx7#;yqBfzaLZGIjT!pm-4{2E(d=!vCT^^X3C0c%`T+{3R(fI>kD^NbZO
zpr}vUZ*skW5d<T&87*LqiKjEc#Lyueg3xs*+#u!9g|-_>kZArv1&e{20rQ1*CP{LA
zxx!M)QP@VtPvl=>s1y?2M0-1BCJY}Ks3~z>h|IVMz0j@h&e|4H#dj^BTOwf<Tl#y$
z)6tr>zc+(_E$7=|YVfq8!96{^Chl83+5bo2dd5k1_N(U!FyB)A_9yxY^*G7Ges4x)
zuTl)bvV-`D8Ju+miS-{O-@pJ8_h^;_)%rvyj=bvflOMDKWBec-$R9y}K{>ERP$f31
z#zr_NMd=QieEvmY_hJ8RE)wo1D!j){GV65B8JbcNA4LNJ$W};IV0zMcOOYWbM&*TR
z$18)Tsl^7=;||mzsEc(<n?OIxY{H{JkO2GqJn`KgyIkbpA`;tx18H(ECFsUZK?&1x
z8DNCod?b_2DG({Mq}so&fyTsxPl$?sto^VuaId;^h!MWS&lZJ>hWKE0D1{~sciI8L
zyAjmHLvgAb<gDw+&Xh85_(Q>(Gyx(JOpB@-85%*A)|1dq5=+~J^0lgF3n~aN?ag>Z
ztq0N8=S#ZS392@j?XFjIdBm6d*ZXXo<2uBo;jB%NfZsQ@WJrTU?BaiQ8k#Hz<cIa#
zjV-TF8_}z1L!eUx(N>UlVLiV9Vi6?{tBe?EtfE81GZ^zB1y)RHu#0O*3lq>SuBIG{
z4Mo%T<0h|!d+zK!6(r;T9aGD#0w?=T;xM4Qu7LTi_Sd7k$Lx^A!v71`DF`E^b1{5!
zWZORrQ)`ecTrc<OX<prJt@3H&9RjJjpo}~R&T(;ZBpYj6VR4&9CE)A_r(LoDc+#v5
zV6Y-G9$>euLws?It||YOu0Y6i><~@}LdFjZ89~F1-_IO-5Jo~yTF*&Flp3Vd9@)oB
zd5twQ7(EV01Kdlq8i*TT;|MYipH62cdQy)wHQ8uCw6sn!?4-y3g!9zan+%pbsw$I$
zpC9nk$CZh%9$yAHnQ-2V0jQCB<%cT&@NtNXcJ)25o#)}&T#vmW3$51$)4-yaT!4|$
z&&nTQZ?S_36m3d1p+X`AGA}_^jVM_#BlK|mhy5PfXPmSR-8=9r7Zglwi~YuV&cKl!
z+Fc}iC{jTuJev{gubMv8i-vk)qvKM1DhKm4H{riKB`Ws%1{tyAJ{Gu7`z#A<#R*{{
z>d9L%S9h5T&?j0g;?o;~SB+&GfDq!k$+Sl_a|b~#HJwRBSYv>mo~~&BDIaxPuSCep
zs@Zay@65RLsiu;kBfIc05oya6IL=SnkmkQo`#$G!oe5nK`O53BmLZE#HE>kwn>59=
zRnkR;`Xq2^20UK``LP8pP?=BGhwz3Q<|3w#k`%|hEp2%0FqQTv@7Bb|;)tD#_r2IK
z3~__33hfr|+;5_)If(se5T2C{QDTGq$`g>iCv|&g^DFz2Q((04A*Q@0EyE%?L+#O2
zYR#(?mgo>2b1TB-0^ce=xeJ$Q$2t1_E9Xkw&;;*5tLNq0^2~SnCjXA_{mk_B>?(tn
z>xJxpHo_+-Sr0UT001+;7s-Ebgzb#28UJ%h){d>S>8D2sdEp+Sp!QoVbSf3*BESrn
z{Phi&Dj6L_+aF&|_9o3OztQ0Wfposz{ptQ`pvxhp4=!RgrFy36v*OL!;n|$Q-D?ne
zr7vyXV6m$F9!}TWD_dGNu8l()|7$0oFXSnl4XWT&B@#VO0A9nck&6}G8Ks9k-~_NB
z0d`x&gT0E8NO}ub5UR14i--g$$ASrzm%9v31ggX$NLG4v6lfB+DDA(E2u%;&$|0uG
zDqNpZrJFMJ(cEhC+h$p5vDX`%NSw~L^pZbo5FTXTcV4thhvH-=q&0thDvpOb*C)d<
z?z;a{P6q1y%gdu5X|qA(f>Z_CrT54%^7ix3I8gdj>f9*CEtEP{Dul@c@~NrHFm4K7
zNt#>_3Q)c7y)?gnMsJ*7!T;x4sM{vuaR31TY=8g&kp1_ya4`Q}4Ws|O8qSK=wi)~|
z-_td<^K|BexmE3w+Qky){p)7TW%1JM%rapC6l{Gs?MyNaWk25CAtV&W;t;htXndJp
z{=mTK6&3|ULb7%q?r+~)Yh!1il@3Af!47ROd$JX}sR&UP<4LTzQ4v6>$$EPJU{6HF
zxX|iV^2Fq@#qtx#EVKU7b=CqqsGhL3u9tvbYAlI&V1<OGuo^hy!T!?75U+`PBKX9_
z<&{u~6CnCD<i3cuMwtJIlXI^rOzb9aEewlZ2MBcs`_I@@X##y&3M{59%IFJ+yk!I#
zbcLjoQ~szN2j0}ISjyRh8A8dOf%{6`XRzzY8u!`l*vAMD=P|WHiYDkG(iFS)T@kn2
z$M{tU?q`6x21!S7ioC9}zfLhJFh1PNdCtAzz<0wGtZ{2>%F5EowvVDyIGUJ)^9WHq
zWEhwf;YY-mmqvHtco8llc^u$=>Vu3c8%_HhUR7G51wX8@<dh@A$H%IPp9@FV^uN7A
zGp`J}m&{X1_sBfY#CH5mICHMm649sc(Anx;3qP1G7R(5RuQ`6&6o4HH`bPj~1gn84
zN~_gI@1nmiNPj6f3590jZb}tR@jWMd?+DHF$%cR7aLSGMox0SLcd)wL&6*VOUV~3B
z9urElxDug#2RnTPnu2|=5RMGyLXQ^p8jUF6e;++=N^p?hlff`%2ph=goHx)DyiV}0
zIikw7^(NV}MWvMNnPz9(Fki=<Hh<(x)FgbZUf}7T<BHX>p><;RagX*tBXi{23dr*}
zG7-W4Pg%muTHo+L$7PYS_V2GUviD3)Yd#%9U7_-Nqs>AgwGnXiJXCv`XZ`%4U?&(?
zeHKv0^Nwp42sv`O1hnAYNZScEUiF<exE6$QovK$h#;LYWw~w>^wkL24M!&Pa0Vhsh
zbUYse141Hcf}|(HA&0b;e+Z<7a%`%Huu+>Rw?H04uwr3pFL&P91&!IpkSeg1Gq)dJ
zeUL~e7y)b|CQa;EYY4^+qFs`nz8|#sVg9H)HBt}>o4UyMEHkkLHUD--YA-`yWK&Uo
zxQMDzfj)Y4$()JIgd(Emc$30sH?x*vSHS9O`(&zM&%@V|!<htU;Bp(;(q>KM=P|pE
z2`WdQ_Xx)U6Xzogn8Iu<sg)f{kkxJ`V3oZ;_(bEhNPG%Ke`v^-?RGda6Wxa!azLy|
zLz8}!lUg56$9co;!YSt`)Y3wS+eJs*h(*kLZ(y7hAo7_LLg%%%)ul#D?_b5kqGnxi
zHLxT<)zyHVX^e=(8Eml!-BIZ(qY-Py(hPSuPjFh7ZLW?rlR*&LjoA2-#)%=g8RVxZ
z^BX9n2Es6rYkH>OSD5|Bf(!{{uoeYhb`zfW%odD<3B^8DJ@QvTS2T;BB)<>83!C6+
z1t%Q#=f&I84_ITUYr-oh>=9Q>f|Z>VgVuMsra$@GVZ*v12M}7a+H#?M$Ge*UhQVU7
z$b*j^1=twI3_xiC572O!dl)fz2%gg-+4&YZ<q3A^%&hv77pjurAgH}P`JgS_O&-|O
zsbE*ftYX3Ewy;$`8@{{`A`_Rk;XP+qtG`y<krXwG8Z$166J9#9u7NX-?zD2E*isDO
zP=d-|9@gq7!;Sy(c4S5G*Ij&@dX8kg=>E^h9zLm96Z;(mp}+zF5dZg_t8e^YW<X1-
z*0u}32{&6;-x_aK(tH_;U=Tr3jWAWUy-Xy`Up`T5^Z2g|+BGc|=v9v)S)OG}uOA9A
zrOcAo^Mirz`6~^)2L0??|ET(TZcEFG=j_G>Z@>ygzkQ4aBSwGt9G(LEDH`q4uuE=^
zG5s+Rv|*zeE&Uk+f+1`XzcGWqAc<LTRj<(!;-#Hkh3w|~6+q@W&~yPP`BiT1C_8Nu
zYB8fw?+lP5xT62;i90C~3BvJw5s4eDQec?4e~h;97-G>0bV$B0djkj-E?mGI@hfga
zJAF{H_(fC{G#SehRv7k5(e%-C_|448LkubWvI&m0iI2+RiVJ5M*9`gAOQ$sl$%2v_
z#$yinK`owif66wiyf~#+tm0qFe<+as3z!=<J;ACAvhP+jL+wHG?2>&Hj{N8m+*H&*
z?yqZk3bib&0X2#Kl>d}&BGM=V=k&Zh?lE5%wD~-6wQ#Q7vvsHM07Qff{6^6+qmp#v
zGCXGlqKqw*Xv7%J)Vh|`i%%4%dZ$>H@S~N`t+_}Ni`5wdXyi&Mb=awAKAlNw-fhJU
zPkFUsabaS?#r6(wwE?!oDr0HMwBa(&38g4`$_l?{#nCvL{f{B~GXBuNmc@nq)y8bI
z*t80Snoi87GAXG;bE+e1+{2(1ynl3F(=W!wjn#46Oc7M)P;#nbk|CApKfA$;Z_A?E
zddchf(9ikExx>+^iXY$7P=<@H7&nrciQRgkec@pp^02WmPAu4U+Ic8<4`XJW-7lSf
zquj`Xrb*D|G!>80bRwYCM{P5V%PO~_XaLHs%OKKfOi?P%lQP{XYAu%g9T0#>SXCH7
zej78!(j@n-t1(3@UtJJrw}K^?zhjQY7c@Vxv8zUfxe1x1kEwdf{L*2BsaeIRVl_|k
zg;*TTJ0v6=x16V;k@*(5qdU4ruoAt&kNA*g>NU&RdxnNdWj^bIxzJZnk-ysjzwoq)
z=Vd(YoNfy@EkkYnPz}U8*n-#>_9s<6BUm@*voiO7?#*_bSc}xE@iZfkLbkT7?bsYW
zcL38bcLE%jl8+3sGRW!JEEa0sVI#l-c2*VnEQv1uMQAkEKSDd3I`@>`xT1JW-At!Y
z(M>MB{I6+k?dXI=6$$`=kv;$b(SP5h1~&h>_;hKRJ8rPg|L#%$DKGR1%U^4y!7-y_
z8g&!wrPEtQhy6>d5Rve>!6sowV&jp9hM%u1FgHJ9x3z7BBzVLxCpOGz(S!ZDZ>oB^
z_n41U^$KVH#1>mQ_zs+-sLAC-X)O!65+R2xj-TR4zekt8^}A2jGiz31AwN0hbETW?
zbZfn!&XDDRbzYXSY1T3^ApfZlw0}HaubjkQTNZ!rht~d8-HBU~;dA8>=IB|!8JSy?
z=k1^^!iE_q1UERdCF|3XyVnM=7~<ALrcuLWus`$y7yyrMi5Y?F#>F#W!M&fmm5a`J
znVtZ$E!+doq~8Ed0CtK+0oY&Q+kLr;iNV9eTZ5nPeq=NsRK>8Ll2^)l;#jfq`#hd6
z&GEjyf%2Y_p1E*pGj6RJ8PRZ$_&x%+Kf#ao>hN>HgbHJ6d1uOm7t5+#C3s*o4Ky9-
zTYK$OtII^=)1z9Nq3x)H!H0lP-L~JX+BfO8K=3l3@oe!M%P^WYXKY7}na!?{F3>Hc
zai$0C+V^<#!)zEmMuvgn1O3)W+Lv^30w;0>eE;Vy;pzQrZeP<?fkC0CN>J9)E<&@n
z+N?O4L*d@9ZAL(g$t+Jws5H&yJszZ$HSYE4Wk%Lqa<_?OuwJHW9&y*+UjB|X?s)KA
z2!7eWXDnND(V+bwmcTx8d#<<O6%R!Xn$|Em(!iW8tY8{!8>~hUl<uMcmt}aAVAFSj
zO+mPI#CS{FMdfE`hF=F2c)i<F6UAkrw~O^?8CeozAG236rPr@p&+ll|2UesjyCVyE
zyxFG<Ye#xOB#@Kv(i3}!i>y^eQO2)mn06S9(+a(GJZ?_V5op^5So9Qs*%rf3-}|>N
zy*}MVdcYSO#xA}s?{n1n>{xO`bG>I|;Z9WjWLk5(;lHAvj`yC{AkVa6Qrl{?M;$m@
zv%Kf{q-}cH1JigjqiSl4^VWKG*j~eea<Z;8sjxB)4pu9ew}w*EIHOOe4F{0T5B<;#
z9s}GIg=*R<S!St_m_OKO`R6Ym3ajxa;3S1J!w5mr`>fVsC7ul?c{yy4M#IF1^*#zS
zNHh8#QmyFb8-M*jZ$MWG6f~+DG4Vpw-XZeW3u|;lVZ={7#l{q5OuN={YjmGYx>C!r
zSW4_~{_5FVZ0eI0?`V${v%(Qbjcj02zk^u9w=+f&ETfviA%JGK#FPPZd^QDkp}vy9
zI6;RYtTE!WN8<q`i;6F_&j9WIv*CK*3`De~k*vM+JbzOr#iy3EyPCb4Z@Q5iURblD
zR|Lh%I<zi)wrxxeQp$2%i8v6u@c`HqUFpJbk3Gt2$$F42VH)h4EUXqo0~>bPSnY>6
zzXkMeV^Gzqh~j^G{zcv@EVI7@izCkcy%J^kAK}D66HVveY?}H_jDUnzjIW@jy)aKp
zqkCK#S}}K`M!!D+xB%)j`MUah_!}b3{}v!ZlBhl>)U7GxjD0fMZSpaQ05CHLK*9$1
z|JiEVepSqoseamig+BK#6_+A2)ai(6L~duMQgPTnkwswNuz;l{ZCEoJOd6elkRnS-
z$%A?1rw20;MF=I2(H1p=MfFExU(ef`(*T!F@kXE1LZ9jsTP7W>({CIEi8(TZmkoPi
zc<8^hmUUn7Kd;{NH(Z$7(MY9#hZ|um#$}OyPGYb=sEz)-o&!6SOL*_g8Pw(Khz^H=
zHCO=m17ZvPmCj+FdEEWzGS+MIhk*eV$SAR;mv&6j(=)yM><hsB+l<1msF#<V3vDs+
z@%K>4EFwxNPZV7EoHvTzDQ_lwubtkC+VwdA90PoQor@Wglm50_apVhH5OxQMF%F}h
z+_TaUdo?or87&Va@F%Sxu8>(&zevHEJjS9IIvKZ!!X+<xC8lG;4<r1a8OYg<4dP`d
zeO-vcO;ZDdF5Y_|5%E;%>gM0gaMgXr+8@9?d=n9C<;;IqS7M{6Yk{1#5kbZuG+|-$
z@N_zp&I6h(@@bu5Qj7EKH8krj{A)p~<#wv--#p17b>NZ?Q~075D}nmLp_^XzCkb$-
z69G5#tJVRogC$s*UTYm!*qLCQRiNQXeF-0JfY+LOVtWm8nReZVUjhXf0;6$qTD1ej
zNTT%A3ODjh_$jDE`X`_}x!K@9ZmanGoxi3grjlDb@H1TEL7Vhe9GdqBpJK@x>dhU%
zj?-gwe1AX<K6L<a21upg&43KytX<}L!;6ja0J&T<x%6TyJ!qvrayy>YhuZ>lnth0S
zqDy6dauG_d1s*|;iz1tVk$5p?r3gB|gx@vrimOX;q%CK<zk@3CGx75OJTAH(&aYO(
z3^2jtTeirE|6IfMZZsp0=)A`~>M^sbp2{I`{B8ONDGUrfA4adm)B%QD>>9^6t*-qy
z11T3`{qQy}DoSrFWNl{II)N$p(w}#P=CH8S-LbTj$NUKF*JjWuF5htCYO0Ur4sHDw
zJ?hmr$Z3r0zD5!rLg4T-(LV;uf13TY5b-oIP!`Kymi^bdI1FoFhG>={#c3O6kfh5R
z<eX7Lvccv5yE9!-{Qehl3Iv6J?0+Mkb&nbCBfvbq5xL!F&+T(?dm4bg?%vpHh|x2J
zh0qyZUnJM?v1g}^)kV22Mww8-OBjH~@s*w!5l{e~jusus#hs;c2(uCwD3|_Xd-O9#
z`MY<38BM|kP|E<tpq>~y_b^zOG{viBUa4t>NR;%fb`~ORyfg$eWvk{*@kSil>iEX)
zs1-)3?EL#Dbx0$|{=6P=a_<eAszAO&%0x>03!qVh^;#fO1=2wTsA+<H^qu$=u-!y2
z!fM3obJYH$02XN!up8+l(}+|vtOMLoTB$$a>OQYwM;nl{PiNCk*)d|j0+e&i+*=4y
z{FIFhtk>zm+9dhAv`8;eGJ<{SvrxDkL|*KNO;{yZ!cGB)=5@f-dYIS2wD_kadiGf^
zbUU5}+?u;beCXBU6!Q=;1eRyhSF`AM?GUc_wO6c*vb(sjNL-VEmTPaR@q2&R)x#{s
z2^HW_+Th6JR6T@pDp(J0rD>Y0pQv#Fc1E4PZL(k8o6m~65rACf#4wBBm=6>DH@1o)
zZ~ep%(tf6>j^e>^u5QGrh*`A-fPCT2DPg?=tO=&S7~sFqWS3h&6oK|R@!?i@-z2@b
zmxi0X{w<QytJftH&S|AKcEs2+q*;~VXRiOi4)+*QW~VzxdW@qw_Mi8@;;evq*`D-O
z3XhfQ_jU3WBBHQbEJimRV#8`77@nIt%Q}SrJ@8r(Q*Nb4uOZru<T1^#9@qqCVmXp-
zsY$J|!f}Luvxc7prj9<0u?-mjrZ&g9+>3?e`@0<x3W}8%EK8ywex2Uxv{vhSXl(4b
z%qa2RlGW5|Ni3I*WSS@rZGmo>tw0j@xT0KUPwwIId&){>dI^fd`m?DCCNbq`d3940
zBSVopQhN!Nnu#z)QAn+=(rzk_%#%RsEs=sn9f_bdvM*s6Xx}KRLL@Y+1rFyqOv7oe
zvqaWd6|v3;2>o8uYO5czh?r!Gq<L%?Ae>p#Cb30DP-7*bKCB+@-|YO24KSH&1CE%}
zaB*dQj80GNu&3P&q8delH-^kG)3;Ft+WEiB7ZOY!^`i7~6+NYLO;)7_{x{{9+o0<?
z@dH!Mdd;OmNm-ntWdu_v$KK69=Bp%yZCtO*%UiQ2Tqee@VW3#wI5~+@K!SJfac1g$
zfxeGL9WVOy%46U2Nx>0jW#WT=jgUc{6BOYzxY~c+O!~>kD4O>x722g2*gxH!`*kh8
z^32ZqHje_j=oKnCkRgB(nG-6L^7Ddef{|wjE$!$dbrx=rnuMVeXd`|N&Sdus;)O5l
zaPizAY3R#kEMK3@)gnV00LyGQ-D70XTo)^>LScZlcHmAzmo^NOa=aZ@e^1=e^+w!e
z_c1Hp3f(D-GYY^!71#%}IB3%lK`B1uYRD=PNTfu9P1yC(V%pqp_>a<a&5Za{u1ohw
z!{y{^uYMDuUnzDiFZ$RP>%a|ri1}9J+(0I2DqyiuQS9(ZsW3FSU0_LRunZ<|3^3;e
zkGy#>d5vYiJK{7LNOdEl*!Z*<$po6t5%Xu`J+O`+<xKv0oi;7vonbe@r%W&cpi?06
zHuw8b;>&nrtK5iGt#5CBQr9Dq7K7)WSlxY`?Vk?!G?=v<dGz-vgTu<{NAfIgHB?>X
zz<O%&+7Zm#Pm46tLA8`$=Wd&<jZ$CSpK49k(6TtnB>YF(VjG(@INWmGvf9}qINJ4v
zYB3-~GsA{KmEf`5RaggN5|<hI=3;I<&)POclGhTP<^ve0<s*lcs=A$O{)e^H{YxXR
z9`mqDk%K>}?X+UiNc5G^X1)jwZ0*x3xI`Bh>&S*gqu5kg)-9hh=M+>{d(S;4=}(6+
z3@)38xq!NY0xI$b*ZQ}tqf}x9<UoVDdZ6*KlB^A4cWu$zbot*1P2Vzbvww`J>=kS5
zaRC|Tq93$s)ivI2*)mR74|elENtZ<CUH=N}RoOFp6C(HYU<z(f_{`II$WW5@J7139
zkwh)}V>ljS6~&<o+KUODr8kUuNRylCfNDnypRSBEicE3Bk`O=fkCEO42!+CU8J4D5
z2)>O@p*&<@fPOI}83zwud1gI5o<De$_+ZlZDXpp6d9)a+X@I;VwcKDL`S<l+-gOV$
z7T_MW!-ivTVB<|hF5#5&s&LPdnAWxvXF5f;|H9%n&s-2S3%%Xi)ron;ca--C1h%nI
z<&Cik>@`^~N>~y`KUcpBS!PcS>mE8Bxiks`kvZ-XOJ<_$h5DuJ%eBy|r^?Qd6+gNA
zrX6V4NEX^R3oEMXDN@`-{oHZ*azHSk<xE$WEpVzCIpII?So=|@cJj0E{Z|IoH7Ye}
zv{=uv?WQG1TPE6Y`T9gZq~To#F@*z2SMC6?y#L{(MNH%)5(#)X?UDKuk-{*AGHcVC
z^;72?&4B*t<%DkEX@JM23b0kJ5QMdJ$C3DM>EP{OFLBOER&(biBCD+Tm`Cww+QAVi
zx#kN>5$Rue8dFgL7w!8rR?Ts1r9U3n9iTl68Lx{hzI><p`M%DQS#x(n3z-+=zWy^$
zV%Hf@sBimrIsG{9!fnw!whBq!p*SFS8yHZrg*waI@g4bM*&6K?ssw6jk+&{>h7lWu
zu|1xBAY!vpJ9U^}yO-}n-viqp3Ar4<nwUNpoH@&n`<8}&cw<DH-PQI!yT!Z5t$GeY
zbKoz=4FJ9Ppc-NSNI$=C3e4Fcv6+clL}qpmH!;mvCwYa@i&n_kj8q*xW3hM&#qope
z%pmDx?vh?0A0-$gSpn0gTbH_No*2KL7>NjP{B=X~;aNsI<+7Ah1g-f}V|IkL>X-uY
z(*@0w`f_NnH+`IazT+ZV@U5I~U5GOF;<LFI*}=PUGqCXBRsi(zMc|3y7s#f2fFGTL
zfcLjF2AHBp9(%jIUQb8w8WptzG%-lUg=%eNLTR7pYNs0)VaM-vgOu7Oa`#AQw!a{%
zm)Rs{C1r<z>Jy}=qsO^BK>ZF6^vAqqV{fISM*OL^7@?p=&sp>hTHmRMp7Yb;1to%$
zdlmOejRk)20rM(={H3L4Dql-xn?*HKQIeZznWe(Ij#n-w;0S6mr;I=P^);nM!Z`8M
zlBFDlszSMZy_Q@dPkqp<oseY_amYaWBA@<@02a*TfsP0oL>jHnQ(XZOJe#^iXTpDj
zG7iM>E2WGXBXBSFpwDU8R^y#79?t!TiL3tVdmBZGdE*|~gzCupg#%JLS-ZvaKL1j7
zMkjvj?k&>7b=}(Gm6Z=%GUZ{-HMHU6gL;*HPP>s(qtVM+gWghGqfuR3gIQesBZ7`M
z{8&(T$_BVu(Nb|nT|-hR1$FB%Wx64wy4d!#*^n-t2yvRWrJ<KLDaky(EIxDs@>Bgd
z1pZNchx{b?4=>I>NXa6}$iV85?{dc*js2BSj*}dxEt8n39l?kuZ7s1?CY$M4TAcf_
zk5abA83d2J4H^V5?^X5~sG-E*`QvM)WIg}(Ri-i}WgMRCwi8yI5NrmyV{v9CGd>^M
z07Z+&nx%1KOh2poAXm+N2$2Yl2Gk&HB2gVN{8S?bh1HZId2`OMBVm!el@tfElw{s&
zwF7x_qF`P0kvug;uz}}9-rxAB4gKA;jZ0?X2dqY`1-UNFsPJ<0Khck5DX+NY1@r`|
zbrJ}&eRfY4!0q?W<c4VM#1Sr5>QP-u`g`iMgQ;BS?$)jgq&y!CUSqHsan`VZa;02|
zV076=t3&J15T_|LeIj+BU;G^D{fRpCpLy`Nr{Pk{5g;%xu)rM{w94VQXX(4eqn8xd
z+IoTwp>CpE(aFMPxIBLCO$bNLH`-qK0DZms<htere>>*9gsRMMqfdz?lXeeHziX%Q
zSu1Fjp6lQ2to7^;=^;;xX+%YGTKC@8xt(PL$+=BQD~u;KdvIN}PM3t4Cs%kH8|*Ao
zAopMvRm7%uF>|mT>hKs|xZNsZS2Qi@k6o2HHm7n7$3n+1XUbEh*go%_@heipt1@v^
zPvQe-*37LN&71t%=Aj7-!;<0#oqI>46?iATG~A_+p+T6@!&@4%l=LUuioXKWWop7)
z4o`0Qi%?BX_OPDgT>~p>aUTxKOaeZ5Y+D>prhFj5K`Wq|x!ZyI?g5>roq~Z~XrdA|
zuOwlQOyy@prY09@yzW<QX4XS)!N^SFM|Sonj$hGC0`JdU(U&ww@?-qo<H4>_^e(^^
z%^bH?CGExpjR;lz9KNtxK%TEueqh*i&mRS0R}z|JLEmh%VA=|DqzaMK@z;E($f{yF
z@PZ5dF@6v;2~VPQ*qjAM@&&E=9#Cc*Q5}B9xgT;7JhatJPng%&+#k#EOCYDDgpj9X
z;n2CKTxbfVCou)$xx8ic;ko!zd9EWx<nWq0Hpc#%iU_bk4=LuA^B4K>7HO61?FEZQ
z;fIW~DUm6Uocc$Vf)L%*P78!THSO<qA-=Ix>L&AYGCh8!P&_tvRWk3!fs|rY>dYAt
zrwwDmXu4UN@>vPk9<0Wz6y5pF<LD<C%%xn)bWbyZYhv18h4s~TOr8H&C0X5<{*pT0
ziTsq5%Z!62c-@zu#Ys#5-JT#*K{>VR8jv<&jL~VwN@s9?sSe|v$^|zR*CLpn%-y23
z9ejBouS~YK4O8mc10amy>`s>mOeFuP1kkQHpm3k!X#e#s1mlWcY6Y*mE-q0C2Xk6h
zLgYb*HvyjA%_(A?DCrKXX5+T|eR>CVX5_|%C0+ijyWXFxKmQ7uFrvFe*I6JSMkmde
zRC&Det~X9O<1j<Hwx$zsFWPm7=1o5UgGwon{ZKEU!#}e)_auB_uKOs*V?En}Ue3Xq
z8Z&rvD%<t)*)t}!@|N@SzaVmJj)q&iUm#Nc7l<VN?~`C7Co4yW|2z!NO0<nl=l}mn
zyQJ^MU55bX*XfTqLn>zk%=|x_RQ-LF8~9SIM~lo~*I6o77yhP-NQPQDJ4{Sm1L$m+
zn|=cq-UG|QAQQ|tHZ+b7@b&@(rRFFixL!7|@aYn@n(DWrr+O(QK~M+?iUJv?=@({&
zo!rTDlC#+BlqImEzE<N0y0@Y@F`Rp+RdBbXnyZDLrL94#@<&9_q<TY=P);dx8bB5J
z2N~@~=1B^xjOy5vTp82EQdGNgjK6%(dyksR+fYT^N$wQ_A7NS3fEL*HBk9o)o~C&F
zLoD&4eJBdcyFU8njjHK7FapUeHp>GD3~de%0ydIySQ)Ga6x6POUzaOl>Eb#xnfPE<
zFm59hZ};j)NjQo4C1a{Zu>vlM3@FiQ2p<bWjU%g~FK70AT?zCyfB3JF&8bnVXGL3W
zVz~FSHeU7iZ<1Z=Z>h=eZ%z}~K;O^VJtc(a`-`NXxok?KS}#X~^mLO=e&vOzA`<Qr
z<H)X&VjFT<Te$ox%WZMhD*c7z_$79fnMTA_kGys_oy03X9m?@d8IxD+{G>*W2|)l|
zeRP6(mMc#gBr*tGt$4S=oRLWXN5IOC51lssOs7Cc$jr_Qfyg73QOtnFt!Y8eZekzq
zxScAN-poe{@%`Jnna2jl%u@>wD9&y?F|a?H?FxtQ4@UYQ3ugL!aYhpPquGBFv%zb-
zEWdAY2{iWW-{4iZ1Ya!5uScwe+^OUq2JO=A#+*Y1uONGkU0~uXmJ*hm=sEpoBmEV^
zQvh|ymM=kc!MNs(=K{NfZKQSb-nG>duMn{tCKmPof;BJIEJU1l`vCt>`0?r8trqnc
zdR%7wKLP8%j98}s9L`l5o{sC{NIyF{1~JN8>05s8Ywn9zDq{v#PJn$94*OQtC?t9S
z+Cjo+`WYRYu07Wn5@6=U{}vUF*hRlC&Q_dW9#79#pzo;^zP<?TSU19)_`F(eo;bI#
z46HHIuG37@4H=<7ed~;c6WQ0_1y)HTE|7o$2^jv429Pyd023XuxFk<PuSE=QM}QJ@
z8XQE39U}Eu5eG$^WW?3@NV`1yyZH$3#}VY1T?83jwMNyZkZgzz-i^-hTxpLyCr5E}
z%_TF*trANoH;a9W7y;M89)1AV2k^zkGhta$F3F_(puO7zY^utlgH991VB_5a))5U_
z7ntGsbhdl=_}F~p3Zb`K^Q~$@&Z^}9l6kJQ@O#=@Ti=sDzkOdb+Y49D9>Xv^jrOU5
z`M84+H-c@$k7@eg4;UC4KmHjb1*R{)N{60;3#uehXMLe!BMi%ecnp7Z;n@)tZ{PZN
z9jsM*;!`~jYR%e-pl<3N2g;JBTS!mU6pN6NRu)%WwG2M1>M6^mLX{Hz4EA^;l3MFW
zu}xzV>dA;IV<;NJfqcE4?!!_yyKpCeV0OE97Gc$(ziAqrQ$4zPez>j`h;-^S<Q@`u
zQU>M$??Fa{#Q%HqYI8k6@TFaq8U%`EUIcra8NxcQ%4Fe8%ote9&BC^I{Pk7Zh$g56
z^8FQKP15SY+Qfe=VqraTVr=N1hAm(CC@Z2!W?ec-_hHM*D1U1kqe)B)*x>&f#QPT^
zcT%))(|dA#4Nj~H`pjv;L9Nk3$YxdbX=?jtm1-F(WlyPMVT`ytP_JDDi9wQ>JC7pi
z_8n{$wJ)S>@+tJrjTb{lt!(8?Rd4E_V))fqT?l6?Jm-B9lT{D)##L8J0MlhICe<IV
z0i6_m&nL#6(Yp0GN@Hl#Rab}0xb)U)j|$W|jAw6-XA}9rFZq}&pHqU?95K_sB1nG+
z=Df_(j~q;QHzX^SuVE@w4T>C0SM!iH%`af2sOpv&cT^0hjIYOCZtaArXtMlCxKfwh
z$~>Yi)Qwa}jsE?rYacwFvy>bEQ)fvKiPtxiL0+mNNGYalW;7?}h+G~te!^U;SN4#I
z2R4_<RI5>-kt#|d=15w;%xGsJ&X5pDHcc$5CYC8#ZLeQUDl{L=PT22=XU;OXQ1ntW
z_(sl1EdrRXZE-hLk5$!vnC&&Caa%6!AI|{y4>mPkg`#6QJ*WhosYtH2Q$CRXe~i6D
zkSO7@F52d5+qUiQ)z)g;wr$(CZQHhO+qQ0>J9rW24&L51`Xg&lh^(rt%nzkPwy;&m
z?TsE{f!9sFFiI6F%m^@^!*?izib5D@fY~_%`NXT3CjFA?;mF%)u8;xg{v?X%O}@p_
z3F-C=uX?nMS@xRmD3;}!3FV;7CJ>581;cO-6bcuil1Uwu83{sk?%73D9udPbwQ;4%
zCJK9X<Nn!Z&dGID7j_3^tBGc$cIoVm>g;QGyPZ;~)jgjgpDd7BXtD<E=I|@p^lZfJ
zA9uj@wJAH<SGq%Fe9ni|*ehYMp05F!o@k=~WT+u<cA(?r7{g7G@*7P4_MP!<zSnj1
z*Ttv4?#koqG$(f5=A@z{1tB!3;E{;xEVdQ<9ckyDTpgx=H{2mv8fxd77zd^o(=A*^
z_LiQlVe<7A|7&Q77m!LAQc{RjbHk}VYr-_?y?`R9FRc@kI$3%JL?wY)Wq@wu-^*ze
zmr9ta4}M@+x~ZBgV|jmDSQc`t8~`i^V5G@}kzdMP-dz071)YJp&#KBh9XJz`)+F7G
zlQn7u8m>JaJC!fy`_Vjk!jL+r2j&Gt0ak#O8(#0?&7sg4Q804lr+3)zoY~ns-Ea!S
zvDE)(>P$>}6y5SC6{kM-a&;OGHkS9x6pvl|F`0TllzonlAbN!Z%L8M`^A-z~!6G3I
z&M?)UqXUQgF2&Fygnb7_6&W1Y??y`(FD`@MVozw$IV);JIdcPdFE(JOf4(`SL2Npt
z!7mfWM<-#30BA1T5BT$(%!d<KFLsO|h>rihd6s_LQZ;no$g5W!%OmD>cI}FP9f#N)
zIi8>Lq*57@i1&2xaJmyk5iqYn71tD~xv!3w{6Hv^wP|en8*DcTXU)(CPjg4R$i0hX
zM#H4-C{p*zm#)(UaIp|ao6pmd<qjh`3`sP{RSGizy;;@?oiK}~jk^Dv@~wKwiuLE-
z1Drn)6i{&(Op!{X-7-L7$S4m4Zpiinh6BU?p?uQ7*H2G7Q>&8*Nth&s3LIx1gzPgz
z4@J1Zfzqz10pfCZmed>@WHLh2+b4EE5C4U8lsSlB`3!1<kLeb=hhsm;8%Hp8Pf2Ew
zoBH^b#J>Id*|n3O*?(gpBj_`DkeG>LX8^vjEIC1lan7x?Jn%)hwqg)IYi4$UC`;@m
zSh7r3flz?buY5|RcF1N#0Xz1@@N7GAR0@wqkaIqG#^|N^$9wh=O|tCJV`cd2*&l0u
zLuexgQbAA0!P6*83Q?rF#lM?^x|wmTzM(GvjN~k|#=Vo&S!b8#8hsV24|St3M?)n`
z+8C@*i!)P(PXTyg|Dru>dzS@!4WT6p*iPTXZU}!3=XtJ<9o-@n4I@vA8LsUTSj=f!
z-qCws9wdM6Dd%mf@ak@J?Kr|H(%z#t!UcNR06}?mqXLDLIL?{YV}(u1zeN;Me~hS{
z#tdJ<<f8n}$vBHVMsw7rUe&sISd4BpS?%vT?kAE#dka&Z5O;2B>X4V%GB0(G5NA)B
zpf<rwoalIP>aCh=bIZSSxCz6bhkRmNH*KmNw4-%ID=$PV>C-R7Fq-!JyPmTwTue>W
z<S@j2e;dvMPN;ktx6PvlCkA5Zk37o>Y@<6S4pb{Awc*c}beM%ndl#wLu5yJ2_qi4$
zMu_C8_`>|soO_s!HL4RwKC{&HAXqzgl@ZLPs<*6Si(`n}b44~9-JRD5quCHV6z|g<
zx|IM=y2!g=m7`!}517>p+|SM38v(dK^p+S#40K?r_U^M!cnSq#IwDnPi0A!De^SM9
zDBgLbUQ#&<%JFZGKmpZ_{=rBRy3+Y*1ssPsW0pUac=BI~zv~&XVp){89^g_cD^IzL
zp2OsEJ0kU9F4HL4`-e`-7!yRO@cN7aAmW6<dJJ#Kg7@QeaQL^uBK2GeY(rn-3`{=|
z?-WDdwWg16E?!}GoF#h0`q4(?skI)XdyB$O$$KIu@3YGX-y|I*%vKJ+Ox%_9r|g1{
zU{Q|r=C&=P5Y_bS>in6?=XkdU<zY=C!%OpBIfC-e*SWZ3J94G@+4ukRQ;qFY!Xq%u
zzE3#NW0M@jWJA2*4M~OCNEqGnT*MO~=1;<qIRiHC`Yp`hDAhwZd&0&ZyWJ;(gT|52
zucz6k$i+gTC@0y$)#SxH25=Q1jYj~jCzA7bO!hiq_0+i+*Mi-mO;`%h8JZ7Fsbu(;
z`LFv@ErFB;5@`;XFcu$rt8NcwvQY~Wgg4j{{Uy;at;i+yDq7!LwzfuAOoV%sOxBv|
zL60>9)3niG5?=>T+ReX@SB6inP6PaHV-uUkRhUVB{nN@K`kDWyP^Kr8kZp7)7^sRB
zcflhxFHN5u={?;V>?V3DWrM#!BlaZ+Zqak<Qwt-EBV!-hy=E`9M*>-eixk_OWRD8Q
z#dkNe5lY@w@^2*}>xV4s5kb&|XPpE}q3r>!a-M7_*&;v$s$Nip-T#gGz-S?Yt>F2P
zKkN-AmhXt~kV^u*4;-R?re|;EfjkV<<A6L99MS>xmwBQM5E%4@T7Y9=cfZ~lLl=&M
zD`aP7mhTDmZ#bbAqVVu=k{;v`lkh%q7(fJ-RA0hBQ7Z2}5a5xx7#wX6!hF0#X|IzM
zf$cg~O*}OA*)}&K1{6LvE?K#3Wa(QFupeMKFd4B2T5|PxjT&k0X2y8?G4h!)buZK|
zP!TVn-L1on8q`CS2+mORoaY1bc=!LarkE|YLm!YHpnF?LY!uorT*%fS3co6Kmp?6H
z(TL`XYm5G=WA$up0HV6Fbw=wIcf{yTSV@!VO`aUvtTp+okPod0RqhpRC4yHa@Hc?A
zOF9e~N&we|4gec@;v8h+)|H#au%-YdBDN6bP;4!DqNFq|$=SOow%-(|8Tc!Hx|RlJ
zMw>&7cPCf39>|$mwaswW&984L>;Rbv;i^#@g+|2{?c6DAPmwOJN*!;lm@tSfLOV;L
zT81}3T6-o<zAyB!Hz{GN5&41ut^AWd>EBn3G0H5z8k2#!AI9|q64>>lsKs>71WB8l
zN+w+BfePw)zwC(j*+Uj*q)P|zS{;2OL7vIgIqE#4&zP!`)IR5qE$Yc0`Q}kfe-(^Q
zQK`Usc4ChF0-Ow=*4Xp_Xaz5!m&T_=FKoQtHIwlGiC8m#njK@{6SUAUmEK*tV_kD;
zPyig1QsFqB3;hOinNT2(g44qtpd#UROc|7%qj?*#ZP1^Tk_a!pIC{RkF*ke;!*IaE
zGWMOAE4e9Bo{Q}Iu`q=h(m2u*CFyh_s<V!dA1R$x8SgK+|NYZ-94b5l^V>uq|Haw=
z7n}!!|A=PxQjm)ICH{7us6_7ei!kT$JkC~8<}qIp%Axi(o6E>8V}xoLbbPDoR(!ui
z3#tN%MI{<?d*4iDxW*4748~G)v3Y87xiY!)xC_U$+{zMdS|m;!As>r;2_5TRYE?x_
z=~9DG1NHR-(WH}AA|gVmD@@C(SN2Xo!L&w4vRn4y6MN9qx+DO6%Hpyf;TGEO(tzQp
zI6za;!rP9>a_u6fuABBrj=?u?E=9RgEri#~`@1`m_(}R-c*W)m|7F!*5Ko>-eq%66
zVk=a(yZGbt7)`a0MXt5GG;Q`lE7h`Lm0t>OA)G(S$rC%@oK@(I#ed5j{_ZI(RkKTr
z=QD{W{A`qo;v$DfK0=~hNU_s@b7E-5L1X+frCoq@FWlF7%eskhjg1M}RSE8s&pRGo
zg9$noSOdS^@-6Q<FaAXkKA+0#@wQ<=fBcLYfX{MvhK>ciHt^D)y}v=u84TY8Kx_>z
z6RyJ6BIlZw`cIdl3pbN}@~T>vD!>(VtY<31lCcL`XTNe4bE{NWbHx<OUmKzAQWef*
zgP;5+*m1jl0bx)R@j@s=?0Q-_CUMy56Z%E4_7ejd92q)s0Ajit_<iwrdg~k#JHsnu
z%#l<Gc%}YTUNOJ-Q$FwgCf}T&uk}twD`_|OJb&L*$QQX(WTs*BR#&_f6wH6YwlZRi
zUEe_Qv4K$~I9vS#_`h?_!d@1I`#0CVLH{d!vAw~6pw}!V&RJ~y56ApV1$#^qi?f49
zOErbzRK6iOxRBV5!T?>gdvG0lOsu3(@6l(6!a2Tp3O%vwAADqY$IZ#jVQwkPU+DIB
zO$?3+$Z1--ogOYe9*Y5XQS`)8kpkRJtS?~DzN7+8EUbPdx!zeU>OXV&YPzV5qYduz
zx%H`j3K*EVCaL+9eQ{`5P6h|;Ag;5p$7fK9q_(I$A@*i^l+Yla$f}59paL@!0>u*e
z)Fek1u2E$Kgi5(&iS`cTS4ZOot_NHzwcA!~*D?E1#!XEBCJIT2$f664d;AhR>BuOr
zM#$A^Q}T{6Drp3)jOC2N&+Ym%k3m~R`DYUqaNVKU?v|Xm{{?S79Fm#>Ny_hakJl^a
z+hX*Wq~k2f<Sj8z^3`ZiZtrF@#kh<6>~2|XO~exCQ)fQ)0N_DJ`HQpw_Ot>kk(TiP
ztw8juP*9#m_CYCw@busKZbiDRccZv=34wbtxV^CKam2ZiD50~|aSyo0QM?%NKBM&(
zbGQ4scnuD_(!%7m9PuF|noh`Rm7umWw5bW;PnLhL^1ACn;<jSPcFr?u-c~2R;VPG$
z-JcqBuLoL!^l=^<yc#5wfobHfKTi{@AIZXj86xH<nJh0X2v8oIM2mNJMC{Fb;zVkA
z(N^g(m;7}kvbyJS;bSv;1xrW`WrI=fdm}eV{Be@_fFeKxKS5m(|JcXFWxgERB&jDH
znM85LM+@hx_uNgke+Za+@<I4&MZ)gJ$ZlTgdsa79p4s`|nW=ty>SOi$2HgDfU$s*8
z9Net`1F56x7yG`?4*!d*WiamnI2X{dei?Xjl!w~W4ax;_-`Yl-AO;>|U5&d+v~PLY
zamfV1B+tuqj8jLP;hyPS&sHAr18X#@SDqtew)Jv*dPDm909t_8OUzCE2WDGy=<*2D
zS_WA(FJ*gxK8%{H7m2w94JJicuNg2Zn#bU)2vXXcXu7Wn!qVZYOrE`z0U*N|M4}TA
z3nm|xJQ5fe?1oIVTM-lHC+16+B93jhM^s6OWPAuJ#lP<WXm89;;UF)woE*+uX)MBe
z+S0W*xKU}AMyU@?Xr;(3DMbuf<BJsm9VPx)Q?+c~WG)fTf6+>@l%Eu!F3dhPOKl);
z!!hkf{K*aj@4Y}8TA;@CxkWoof#h)NW<7$%<Z{n!*^uo3+lUUisnhZvL|$4q@_l>U
zE<Ii}#O1Otm2=%Cj^q8gDtG0owOqkf1$G;Vc=SM>9cw|4*xX%3h%lN&dUDBF#5KbL
zYOCGKoNtZ->%<ky$K$e!;o3pzVqH?XjQ4#8`;L=b!T9cq50DFy-{ug_fbyIgB$it6
zm{T1}d|+Q6xLOEg;Eh<a{>|}fE(^(Sk<-Vg(GjgiW~x-yPw_;*VzJk7V?WHy;yC>6
z<mlp|YBfYO;Q8=g{BinRQpxk>d|~M|1-k8;8DiH)h8|t%2id!ny}Rv|D^hskE;D-t
z_mO}LX^kBcFJCF*@5zuSfV=4U$i^tB5zJk%0!@y}i1VS{<D_kfj4aD1LOX95&>a76
zwQR<^pQX;;p(kMQk^!k{bxQ)Qai>YJ{7gaaSNM%OrmRsgroavNTeO>kLyvnJm)=EQ
zK!Zo~by%^$@q!#KdY4CO*85_4W9BcD%d7jGyi_mX&ErJv=IfT>N$&vtgiKx)SMqaE
z$sScIZk*Wt<2@aa?mYP>#}US36KW@3HgE7A9RdnSkb1yp?|aV%#}Ml|fTI7t(Znbv
z#NUuSUz9)`I!30>f=Pel-fKW_$@q{eg;5#Kc5S+{6J090fo3<ICB%Z7+JmoZTuv?N
zuUQGd-gNw<0^P+E9<FdY6&1Lkl+adZS9d7=ovy^H1QkR<h07a{nlTWNNh>PSyER~j
zD*3~~=CgY$F$CDwC2-Tp_b!-g;KdyLTzVjN39~kCjLn5LWrQu+E`i3p46)dY0wi-L
zpq2Y~2uA8}gA=d8D`ozh(OaYhOG0WfSzU0aUz1S*FVX3y;R2%8U|6Gg!@=wy{_b4$
zvQc#8S}3_h3~`m&EO1JcDNlg9zxSy_@!*yUUc%Dn_J-N=%m=TG_$?=lIdhCgwMI=$
zz)`Nr(T*KM64lu>He@OKlE}f9WN=+01|NIp_w`UxD%*)t9tN1f<#Q@Zrj(x}%{3LX
zYr>f<GYF4TDDI3-BMQr2xxX_oACBnn-sh7_WP`(ZRf6Hli)V1{5Gm0}QXywPOc-gI
zBiQ%3E|aS{+jFms?BsDf?cU6M&O|A8@Y%OhQ!nF$Zyjxx_hS9`j}~TgV?MtB=Q9gA
zp?oOxOXIowRham1N;(@W+yBr<|0SsHv;SX$nz;`7Ik96Qju|gAV$m7uuZ}Ez`kGgm
zzk^_>!R4qk)TQ~)hc*{Q5gz?RZL+Ve*Yw!aQy1Ae_-sgAxl4KtCA1B=N>5i_jZ1AQ
zd_3lnC$C?cvJXK6y`^PQBcvWVNMW=tzHq=hZbWQg=5ioYA{ex(p&#a@U!-YE?uow%
z&g~^3$g3br?X=6Upv!RXLLCa5ti7MFMsO1-tzVfFjVmoifAGe5gbQO9!~{uc(G+AR
zQs*`Y#rr|5wk0F((1P11JX85xp|Y(3iw<it)xO1O)q&FT^06SY6>Em<97ZHU-h4$V
ziSU+P|9CZMUjaV*2?<VnV27(KQpp<m8{@>aze6s1$}9ChJK8i;s6d%4_r)(pl8M^)
zOM)tW#)8U|1j}^ScMHv8mnNm?W7TL7wPEu)^cP553pq)4tgJr1z`ts@jJZb*7&P62
zKYJ7jt!Hn1I{QOf_P}2(>*xChf6abDHqOtPDC?7bigR4PZd%4ILdW+E$8*jq2TYbb
zJGTU{EV~tIb(AYwoY6!NPZZN#`$Gn-MIx6xGcOF_DG4G5^+mFmBMQ4DO>KKr;$Pdw
zxtJc1(d8iH69CbbCe*YVh)$*4+`QHony5cJ5i&iju5L{}(A}49=51EyH(o@rCI&lU
z1E8M%eb45$EVdSinJ!b^B_{uLX*1eg05ih37qK*FStKWn0{YxmLf~jNqDG(C?*bNt
ze|~}Z9UjhHa2V|;_u}D$rl2n{xKDeW-(K87>{1Dd_3dFN*2+XS%F~AuB!TO;ZG=AY
zruZumZU!ioviZ|AN)~MvQ~qYsB8}gE>LE?|SczOJ;%x#4i_08S2HNU29*5dZ_CrqH
z%|fy-rEKXM5%K4~_p))d@yAGxL<7s>*l~>0f#VU&^qKr)NozV_IMmDOo#AEv^|VSC
zO|Z~LL}?9-_U2?Fvm3PY`ChIzlG@+PE1M{s9a)}PJ2)1aE!#bO(%Hj1(sF>MGSLkR
z?cX`IHPH<{MF+y3>0iq#L_?dIrNZmuTZ1hLdxX>L({D@aj)!-TXrpu%b9E(Sgc&|r
zQ}K=ncr>9ELkE%E3?Du^(gJK||8FI1S!4sojt&5@X#QW3c>a@<*OHco!^ZIcIC-Te
zC{~dq5hlc6X0ned&k++d#fjk}+V59Y3Gffb_CrF_1CXbAd|Yktpy^iQqkJ5dj-x_8
zt}Oh|w#DSDor4>vFh9fAL8!&6e3-xB_OT^g@{t@ElNiayoH1oRRyg`2eu8plRWZ^@
zJ|k|^M5q9gXec46&OLXCjZRRr;V9kkD;t|Z(ukkbZ#-lZXVCc?h5vbcm>DbcmRxy&
zGj<<tDH-lrKGH}W;V2CG#a)sSUWk!)axq02)xbeAWA-$f3eD<2#yu_eEj#oV8~DvQ
zq;eNpp3%5vz?(iD^j<y926{KS&`7BeZi8|PP$#xkVADX!YTTtphmVgh=VUgdUNh@t
z=$-|<3w4Xbr*fGJ-^a`G(W>27nr<{Cmkpv=jy-}G+e>m+B3<r^P*bYm%{)W)K4JG$
z{WJSyZU6Ib2LtkiHQRTvVZ)RetQK1BdO7CqGX_yFdIN4_$R9O3<I(IOps4LcT8-Z#
z+ruu+$*b0te<N2I!{eIxn=5927>GqU-?UrJO7hc1h)<<)bd>GOX4D55^fxi~6hBYc
zvhcVs@0J%xu%gXd@>apn$5D%c{v5Pxik!JC6sn;lU5;;El45R46%WY0768l6@`3I#
zzlKEMXV0_<bMHWwYxnr@T|M!&iB;5x&s)Yp&)cGk49q>fjuaHElo-aR7`+25e<Rm4
zBNrp2GMjd<_b-BSRY@WGHq@eR&*W#A*&u@f?|+{){>|SB-U~Uk=1w(>t%hcV@rHcg
zv*osLw%_yrT*e9>n2Qpvm2{!P8~MUz1wK6+{i}237dgCl>pt28F^W|qk7n1tj+z)1
zSfq{}bLwRS|730T#$_!}ANiq++I(6>iu2g7?Z}h8{e*eX#%jji30<oocVl4Vy5Zr2
z6$;p1Z+0W9Yu^VV>cj{p^Ck{k98e>G^@-~rg7|*k-DKtw0QjRjI`_3*oaL1s)TiYL
zBlNQHcMd4h-vHOPLAk^qU7i=~&tLisVKX&rGlahKq+u#&Ble7~0F!Lc1-+Z)u(SoB
zVvT;@mjH^%CclL0e<^C|G#ES`^jO=ufQ;~yQ~b6(*r4S4KP#r5UX{08c2Cv0N5#$<
z4Uo3G(*c?HJ8~j9F**0l9B+3JK9D<zG*A*TBxZlu`b6U%3Bz8S3{(xxML|GJYE=tP
zYt3iy4*WB-tyux$UlJk|fsRN9ZAn@0BP;JM#g&;glw-)6C&!!%#+2zY#s%1*!3XLD
zeNF2)x^exlGHG+OL@+BNtOW``l50R<w`=!tdhnuO9-I+}^DD*)d)q5LU0_n&HDEJ_
z`%QJ)R{j*g-ollLkhxbgGK>4J#Em?a^U>7>vOYmf)VA-K6L`EEV))PT*EnzZwUb;W
z<guc^-ZB!b$Jz0886z?D7$dbP_+CV*{57AbHbGjVqmO4D@dbH01hn+JBkAUc)EYfI
zT=~BIC><v{I%nt*ldkxLOD~g}kY3srdNzyUVi<IOh1>?$;KG$(C`pA;C0d>L4^f6~
zsBdHdCEw8ssNPOCsHvkDlD%e0&ISGi%bN@PuJ|JrUvsJcY$~c6w&bw|kVHr8wfs`Z
zh*g+3w(f4hLRsjI!zv`;$AWidd;wyiVm@)Hz(u}T^it!b?<U-09JLPDvaF8(Zur1v
zE>#GuZq+BI5Ql-Wko>vNnDm~_oCIdZOlQMfoFDrxRYZWORr6-b)>B;8%0>52_+}>#
zML9v?BEE<%!{2PCPjV^GNyBs=^x<@YKU}?ug9`%g(ZHi~ZIAj<k3(#RT?m&1mjVMK
zB%E%#FYe`BuPpA^Hxz4Jmbs87Ko&{-Ns@Pcs>XP6ds;He?2C&Li8ETRhP|m6VX=Gx
zBkf(`hEjt0FHQO)MG+@UGwT|(<=d>&8$g!0(FUd-B?5<vc*SWLs!_U$)HAs{(h6W-
zH`Jg!KRRShzeW^dEsVBoZ9ouH|1fxLriu;gd4CsuD`c^9E1;AMF_{c;5aF$c6N_(M
zCtS@BFEl}C4+lYsC~Y^&m*&;Ucxo43FoMbPUJ+{Tx+^AdULx;OAN>MS&}5ts<-p-#
zNn?ev(5iQ*`muAdtBAMH!W-a(l>s_pE+FhVO2FLwL}`&x?BY@_0|KHo4OMb|Z5;Z`
zKrRM!2(k1q?2^sB66cPvSw5vU#{Hc~WnH|2v<e$tH6^DDy*+cv(ORZ^dU;h2!kbC3
zW!$fhgzy?^MKj8yOp_XM+)7Z5BKryi_=CGUgF>lA5?Q(_eUXF|oH+}Obvu<gXMkz8
z4a|oVJkMo50=22gO1)zGKTYL~&PRPc{FgtT-?uXZs#6h-5+`@#@=Tg+9H;F}N+$NI
zM-F_Xc~t6heE$$wr4bXR4JG(0R9Ve~Z4s!wwViTUvv_`orDUEzhwd3uYs$I;Cl#%s
zcT9Az(7c_-S+!b&_fAUnRXE4p(<hc>vS%PW`1Xd+^M7C1*fUzysoCb5B~*&m4lVPk
z4L2Luk^-3~dWihE{ERD;wUq^)fA8WP5Lj*@$yg4PsvX_}%oti=iuL|K$!y3~vMd!(
zG6^b~yjgn<$pqCzU)CKgwKQTdevmLq<_h$){q#3$K?}Bu*CI|qW_@^?k{1v{mSv16
zbd2H(o+&8{8qQ6x-_FRwfd%91>)Se8vaysuTFpy3vG+8u+G}<cNwCG*Ug0;3c!JQa
z*I2FM**Z0#ng1q8f$n+-&bKIiFAlqXyHFr)jIhD@5T;w0qCM~$i@ZcIZ7H@{*K%h_
z#=NT*=xzaUK53C0%q<LD!BdRPlv|mtbCQ_neC5ItCC@)}Y4==e|C<S+G_<$8eEhS%
zeEMz=p}9ZAbcnT2mSz|bh!Yu8gq3N6QC?xf%XbIc7#(Dxi$V;9V}i#P7#i}SZ)j2O
z>~Fq6z3(g*0_vL2BB_|#!D*bp72TC!na)vbeT|Sja6~r#vJ()WaitLv5TafI6~l!e
zl+fTUWy4j;ui#)cq&j4DHs~9RV@;~d1HG5wh)d?7z=9f*B!t~hF@;Q{L%`O+EbG*#
zl-2nCmG=I1M$u$X$;ka2&Oeh#e){VkynH7oJNTH`HnE)AaYK~a_wdVoSDNu~_m@ga
zIUW5-ZokT2^{!HNIAM*^%K!*DdFL`G4kZ(*)20U#wOmSdRwiuOu>NIk;}EM_V!|*e
zfNJ?VwT8@EzBtN>L9MP-AwN*^)~DFlx(vB_6#M|*m2vtcF`)^BoEhPG0)>Zu$z`U|
zqRsj3v4cvH?W6~mO%GzgG)eLWkZ!Abd<R$M`v!&18da{(e2>9Ib5~T^35P=tn#AT3
z{m3Sn(rGF=Zn*IKep64V#oqiCR(|00Eo$#%rMw%}c=Up~Mv#mn7-!vAu_29=YO|B6
z;{|l>8+;-jCw*$nKI{Y|&Krl1k+)@YsZAu13dk`8tEzWF3Yz2!+%oUb;Z7p$e4aaH
zGr{v5_JX~rya^@fAa1_e@T0Ex92wMbp2)}4;GAR%+ql#+J6~ut_TIPFTseX>Bo*)N
z<Xv}qabF`G<L*&;JKww!jlctC%0J^}wP>_7R^gu0BVfm-??O!eCS(oqQLnZ7A?7P?
z@wCqR!OPuXZ?~SX4?M+T+yn21RZ!ll*Enw)A=nYlruOzCyHqscod7M03>2{_)Qg%A
z)H}qfab2k9`Z|V0_JldEi7F90#rz9f*K}TN&c_^OL77JCYj8d-aGt_ncc!Sg;CN(n
zIN7iLk8Qb@^TSa&$ee?1{YgK+)dG?+>wH+huLQtMQBrWmA!@g4Ou#PBlNf}k0G@Or
zWS3uAPcTdMZt=bELcac0*%O%IkUYR~lq$#c{x}P4^SEhuYZTw<^c;w}^SuQC0sZER
zL<DOHvDW-N!3m%SzP@NMOu=Q`?#l`n7#K;tgXjo0zmg!`I`$EWeuN@*FFS;;vgLW`
z&|miE_1VOsJ~HHk{aDcmH-dR1$0&z0l2dcYR9rvmcxy_>%s@#G5&Jgxu;n2b%~p1n
zhsse=jgEhB^s(+?{fb6!L7D*(;VG~G0ANozOq=pODUI9g63S9Io<+_@3SL2mI0562
zoTcn;AePfb0f?stp!K(IpRKc8JxHT$vO?!>!Ypw%`cB9-34Co5m;U{bBmlbg<;&mi
z#+MA=H;5SqRe#j#e*;p%1d5PQITlMo0Qf#*_cJI4K_K=H2=>NR_xW=Ck{-(+pdN7r
zL&sCv6z<Ovt9Q}v&#$PO*>mcengUUPk}LgcDP@I5sx*F`Ipq{3k?)Sb<GD(G(yj2x
z9Av>^kxj`$5Il?ftzBK^kTmwrv~FHXeYk?(Sku712xwL2bX}SL+>L%|u)ez7oj7)B
zO(ZF#Q|tsg-61t?Z|FKAc>}PHY)ucLl%o1%iP`iUxH=NFGGaL!R*{(2{@JTl!v=7c
zL9f6j%mjdAP!;KPk9H}7Se1Cbg;jOSbo&+b_p2S`T30v_Vf2Z;LmZyrg=|*sF(!bo
zqJJMp6Yu2W)eCOYY>?lCq;N43Uiouasw+7rbbFjEx#=h|l)xxh>tFBBA(ADft8D)x
z?_)FCcb=vp9=rBHG&PwkC1QDMr2_9o%*EQd0dqmw4y!lFMTt#k3_P%N<L~k-z%xQd
z6)6zd;fG#~h+d<;*m_AP#Z1)f5JP=#6ek$^9l784{*g*ngen^5BwJqjID+{+JOX`a
zv>j&`E1huzYhX)e7^K+5EU4YhT?`!=X*X5cTSeKyy5E)|Xc$dD@K%9qmGfBrB*7)U
zdk2&$gh7>R^F;nDWzV{zx)!_*()BZYpj8=xjEpEFYJ0+YUj{gpg-=9oESVO%dhw{S
zv(qo$xYl1=e3>TPcaoWc@Yg-GLpRP~46cAeixi-2J{YwECqODl0efp_8|uImz3PmU
z&Y6(}6qJ8hvG05gb9aG_dFJ1Y8XO@8IHyRsmC}Ckv0!>nuJ$7cZ;BE@tv>NM4p*~p
zYlUc}x5`S4V#0olY9*{WMX59VCX&x}on`XfRR0~bZ)(>#G^GL}M&F4B2i*rD=m8||
zaZako-4Y=A0>{m{G`h9c%=>5!Yf_p@QG>jq%fvsks-d5QCo*S7sAKO3_C-4vN$>YC
zN9jn`A+Q3(e^*Ce45`zNWcMI9)#F@8kwU53)@&I{>xz83*#f~xDi5LzR3KTVyqQm#
zG!`+b6f`=S5Dp5Qq`;VUI-w5-6jF`|({A%YdSD>yZ_Yz#4dAGGY{DF<p3n%l7@Qrn
z!7hi@MHHJyfc<+0;~GVrg=tV~$Zze*7#vGpeJqvD@S#_Cw(@}U)mMIwPsnb1;b)g+
zr!gH3rC?UYq0`!F&qL2zu2Lf$g#~w|c<kt1cIXOPr=V(iz~x`7!csSl5XH_GHZLt;
z6M~(TYIdrawmg5tjxA@(IU}CCPXHS{zp-2IPNpu<L6T?4(u<Ij$PUy$<TNewT|6o>
zw(CYfKTp1eKYcb8K1sy9!n;ArW^z*Sov_>?<y%5h@Q+5b*};V}aDU2y^JngSvH<NC
z)rC#*%d2uH3GiLJmJs+$<)j5S4h^`O%O%J8+Fch-!l=Q956pZ>WaFQ<nJ_BLqD*zP
ziZqX`(~FV>#n|d9KXHY)b>`R);M`Xq1$3Y|iV2)ZdgU=DfHK*u{C9`yRu`?|Rb<Gb
z@j8HW?Zj4$^D;#k+px7k8P(kibNcKv4DRej)dusL;i(y&oP{EE{9-VGD^k<6yP8~^
z7HxVA%EtY7KPB9j`<%@VtI>7@Eht%3`Ho0}n7V=AGw)Se3zeimJ6Dwv(@imJ=HqYj
z!)_r1lwP&NNg6yuOtn4V*P0l=vEF(N2INkqLpY9+4*M&1`5Lrq+2NZiJkj#bXYK`Y
zvcmo#?tl&4(}oi5hag_Gj!=^r8KG{=JQr}8c0xOVMRY|Llolo(rd2Edt99}ZnaR_m
znKc;9H!Bvfjx)Iz1VIHs$1qDjr1rPu9O-Xj`j*6Z19>UxI+X1HmR2^xt}CsGGi%*G
z1O@whBi7klg)n)tCc?83bI4HNG#pNj)~|7k!2FgmqO|X(@%?G*P{8{E?ZrbR4fjkU
zYMWK!t#@>b`=ON61^Xn*$c=u&)FCm}7s3=xQP=3)6->Kdx7P?{faXPe)m=3Y-lcFp
z-Pyo@l2(1yj^Oh7o#OTPs8cpzfQi;S^XFDcfy&C2B_^P;wlRm$j{DF4T$>wia~R|&
zm~x8z-ImOm{lraNCQcE>QUaT&^xkXjiqMqXS|A!j?%lVmBTm&l`yN-V`4X&-_mMWE
zqwJXgOGh~-k9A-AqI;DsQp%Lxu=|n`_Mjan_eR(j_izL~UY-Ugv|SGdNU*Xr@D1R)
z2Vi&6rreza_Z@bmb#Os1qOtZR>#iH(d*bxj@53R4L>cJd=%{l!B*d)Y?_>(>NBdIf
zExSISQ7`@@>|YLW=zJ`nS43`X=m9=;cvW?UGh1k{zbpA(F%L|)F|RQfGC?s-;+Y3y
zmg;0byGl+5-<_O)nEV4+#WbIYtBW1t7-Tc+gQER({ko!iyypBpKj-b2wsg|kBjREh
z_@b0LSD#q39uAOot%U-+$>f-2{eC^fr%(3i1po~IS*!p7_kO@nf3Wfv$JulaF3EY+
zadL-h?_+0MK>?leK)9u7_ytZA{xEf(`B;zROb0w+gdvbAi$K({>YC6HfN}>ru=@#l
zPd$o(KWN741}eH4H#8NYpFx2|h0mbVY{yeM3m~B;*=r5jssq9)Jy>z&I@bt^a6uEz
z8Lii-jPk&V39@oO1^o5m0amhc#XftP<>XNpdW~tyJs)n9v5-yjl23<i>W1%({0U}v
zSqtiQ_SXWgxuy0Lvu3AbIJM0iCU#V||E|XGK`Csj0`CvAkCQyRvX1F~(&zaN7^fmG
zbsDIiBip6S2ov18D@HD~mj~Bl{?0Z33{dI=Fk7cZCw*+*2ObcFnegP5S#kkaan+J(
z@=UWHg4McuR5NS6rs=}6d80WaZ<W(O4U1U`>r<<ZMwVlT8`2j&-5UqBQ>qbHrWhV<
zugfi1ubV$8r);!U1n<t9SdG#$!Ol+_f-Qg4U!odz5ToAyS!{HB??jLEY|E@-QEJRq
z--$4<v%j`(e_4^+LxR7LGe}ymegLnUhQuB>i*4J9RTo#20~NPeJFe{E)K>QwH^*<e
z&la1=&n{o*26fv`%7z^`P~T%|zVz!^c%J2e@zgqfau28Qb<9O0D9lw^H+k&UF23tR
zR*UTi6-%RTL5CEXpLQghEqB>Qwgg){$o@utFITny6NagAfM~_k*z`V6h-}@=0;=6A
z+=VW)xj2_0`Sz*H<E)Vdbjqb>legUCtcfMe+HP`7GN)>5F?c)w;di0e!PXZVBy-s`
z`Q#>ta@Ek}CGXHUvkc$GcJF$yz;V95W3bjdBQM-(h?6ikiv!+XoqOH1C>fGvamu=~
z+U2;~_Iox_TmN6c{!~*i;>E9Rquc&>m$6Ls2XW8uDmwegQ}-{|WhPt`T0t%sY}UlQ
zkH>1?ENm7PmeZAYoyQPfUdDXuBdLVKuRRw+t513(ZDjMr?&%kMSU2<R*EWRCu$LIJ
zF-A}HHj=2?@C*;7&xkv|)A)iJ+B(EKAWwG>PAywl0pObexnFlJ@ye{#utf={f~ssk
z?%)>ipQHX<8p~#!t6%qtcX#XGqx{;sV>&X>CnS~qSti;H2KMpeVwU!DXf(4xtfCI9
ze;fO9WK=ewWD?I1alv=LDV}D*=g-`F>i-6J*(fezTv-j5n=78?z#Q?w?475-|BeFI
z2cHh*H7q1q$F7TW{oti8cR})DrJF5YZZ(O0?q6oPVP*($MuI`zfF39Vw*k9SFyZhM
zu7!O{(_2-f6$OV$J1Yj{!SNOv0O~=68SaaO!8Isc&$8Tjgk>BaIfD^TU#YQe<dDRa
z((v)=C1_i_xfKK$?eLIY{lLdOaL74^6c#=yKHOB~oqBhj&r`DIQcJVH&@cB-wOO{V
zH9n=9`-sD~GMCEkV>cX}ipLS%iRq^(t+KL*YFx4*NnhpLF1GRexz*exm@7#tl)B*a
z^YfY1*IBeCH4Dw&k|8~y_y&#Y0Nk+&PW_sWV)cp$Z;rOrP-pu1sv9`~zde8X0D@pT
zJTWbTnCFz5%=N<jV#PUt8s0k3h5(x=1aSFs%lR3)@C;D+w!^F2dHea_Ac!)u>3bg}
z001}P|4MSzz~0T)(dPeua@fRe@vANtzw<>^n^vwRQ8XGKpEg0<;8G;kScR!(FMe+*
z@1jB-9%v{{9xoZ&ob>ehaxokLl2hO1Q66puxCO)9K6eTp`*4kM7B7yDV_@Tx61z9U
z_w(w^jQ%ae>XJxJgju=bV2>2yBTGhbz}yCHuuNvKLq;W}YbcBnbyKzhE+A%c&B3g@
zNMg1-pGu60q2q`EjI|@y%a+AUpfiw&eMtn_A6OVkm~}X9V0iMDI4c?=0(l3t9~d(F
za@m`A*e7|-ZYM5+Xm{xwxG@N(i`82|6z@+5F%~vug5*%gs)Pl-fL_{$E2(djL8=Y$
z%20<i*dZAo>c!3H<LY`E(hF?h%@_G{0(7QXztAHI%j=tyla=K%w(|p%lP@L`&=*>{
z;H&8&ja^S9dFuBxN^ScW_JKofinfN;qMmW(_?*ol+#dhf&|O#+Q&?{jO<EiuBwkzh
z<2$bPG5ftYNwV29Zn*{8o+qO+`J(0`%B?FH0X4xpX4MZG8YA=w@RXQ(lo_#n4h{M?
zpar<>W;BT-JDtj+{@uMnO<l!=uh*7~E;kAG^bTl5MoYq5FYLl&<9o~JJSxm3ceSuZ
zTrE?9%8+P@0!(|`*Kx(cqONf{<IED0CkU`pcDBUt;>tX%e$cr)i8StMjca|G&S!_s
zX#kFjL*#0;cC{mt;?T^VMZ0P$%E&wWpGg9c=$eEj&WZz6W!A$ML<iI34Mn)wMZh-v
ztPLtIIpE}~bf>ONp-33cP;`jZX+kfrESP;W(*7%JhoC$`=nddAxi#Esi3{^FV~s}f
z!5%DXn31NTKE}>u<=FkZaVJ4fY~O(`J@&4N_JpDxOVZ$AI{bt^A)nFfO(ZWVGwf)_
z7}otv1D^dHuZ?C|8i0sj$G9kEyOWFo*m57#ydbEg6RSQ7!{nXH1)D=tHVxYH{_}f7
zo4_BAC4Et%d{#w-x^RZJ)EK&z!f*o4a)=xolZU9Hs62Q@QIsQN-fc~4l@%1^B{|`=
zY2~7%Wb)a(MVGUHJ`NGx4!H|YKF7f6cF|ec8G=~=a}iX6Pn65OR=<IPs{{>p!&x!V
zM?mk9MdvtlazJtn@{TJghoD5cwBF|u+xD-AKPG#ikai0Ld#`7gGK5#ie?o}7I2GK*
zdgoV8QPcklKk`0m2KBr%>PUNoKK8rJC+V=MP|-)A!s_)U!U$b?at@>+6T~9H8Ye>N
zY0wM{UXnZ-k(<o|RXY^Pc%Uh)`{u*xkr9MW)oZQvE?;+Dy}X8RgwVqv-np<9->LvJ
z<e{BrUJA^HfG>h^Kei-J;Kq=pke*gzpAtmI43<2z6-Rrp>*#awK95<37{UV&{}YQJ
z25gA}uQnWPE0|`(r=iJI)Z{3#cvw%@OiR$IIvN69+3Y(2@XkIcg8?U5ouT(dYQ|Bz
zrll7VR^+yUBUtUDnXE_(Y(w|S&JfdoR7YG`OJ6|e?yfM|{dWyR#w#LjIwv~OgtVb=
z-creC&<!hKBA(Jm`u4D}w%D0U^RHsHBG3i+16c;eRv(wVtzpl#9+Uv_dXyFh`#M;d
zfE+k=#=8oBa;IudABt}dlEM?Ls&?7%!2_1dGDIumVskk<UC-yo?$$vM_GVpAPcNBD
zp}*S)wlecMW~z4g7KM+mskeGWc=g9Ln1yV)=2!*hS&-?n{NKw7YI}sFEP@m=jeSQJ
z${4K1;j>#ab$|1ym8XM3pj8~!>g&dkNPt%k7E!1o_b|*K{EafW575g|RIglIz!r=r
z>?q_Fr)y3I{eTf+ub%=4NABQ6ASlt0h~e`Hv`(xza9?DyG#vijfDj$)0^1Y|Rw))i
z^dWJ6;wF^VKbahDVZ=7)r-<aqXs%&%1U~~VjfWX?gFw*cWmlt#PH60DUcp3Vw>WVA
z(tXE7C}d$?)^~H%POlv5TqwYuR4fQqjBX}$f~~1jQ=c2yj%5l(?_E*nFDvp%+*r1e
zLp<^_oj?!$4A|@~`-n-iE;Q0*-lGcSHR*tSs~hN5z#e;I81^u3QMVDM{>yD<hP`)7
zM3vG-LVQ4u0Q*6UfRgex1X(WKndY&2U{8rGzA5r0(wGa+QObU9Tj*6A)j$vJ4C{%-
zf9~56EXl;JcJ#Mh%!QuftHD8PAio<CwQ9SOa9~cRqs3Q@cDDr*;iMBybs1J=!hm{u
zd6)M##(MnmUYY5k#5_$PS_8fywtUIjk=I$bqOMPg{z^<T>u&S<B1!b}|3m|!M0SPZ
z%lgYEf+Qi}E1vY$bpYYSK)`_KiOd=!k8w7UjXt@;<^g@aZ>gs`Jh)rwk}nes(ns!H
z(e<E@TDA@tlrDVTI<KDf_BgDK^7GrS{q<C4sq2B7c4U>%{meZ8;ZrhEgWLgEN|os4
zt?XCSf0RQhMojFf=vU0YeNjT+E3a}`#hZbOzejh4KHGL!+Fu0g+ZEK~p4Jm%t2YP-
z%=rusj~$R2$zV8Jx4wyF_OS)a{vbygjehCQ2lEl7j|djeReF7y+6R4@^(4%Nb<RXT
z>Wi1Xy0o96g@vm^LJ;()2z4(hF;v?V#Jpfy59k4(!x4kn<WJ$XCpnf&f8G9D;bj#b
ze?w^ZNaj&wblML$clXa+Gf?YuY|fVeLJL|P|27&j#|7_8J4z-RB$Ab$LWOpQd9s)7
z*>cC=5!-mo%hr8*giic)JDSJiLIDgY(qKHF-j;zQE^tspz~d$xOrIX;S6^WV;BgOj
z)Nc(RA!;YQo7&#DY5LPUcY}k<&cA}<;EobcKw$4VhBJt^*vs|~>uizSG$Atm2~|a5
zCr|>cCZipBl0<5{?-HI^z_qP}AD`tOzxD=cM%;@F^@#vI6`kRUpw}NlDw#cy+w~pc
z=x9fwg%E_a8Rn#L*#3}9&eqB1gEDNH#+q9?&l{43bAQ)ET3-WNsv#1p{Tz^}_TcZx
zC>F;#RzKowKW~~JQEWZ&D^?7)9GnsgoVc(aP%&aNP?%Lnx05Z0o33h3&YppvF<??;
z7wl=riGsoG9tsJaSXuULfNBt#qnw1=Duw<rO;8uof}m>*FMu+jnZOrOjaneQjseoB
z^~IZZ|G-W_R8ze-YKBdjK?x&O<iX)%S;!r`tXLjK!7=&pIs|+SMe<B6X4C<FFggM9
z(`2fCH@tEG2LIeA@(bhextOo0kg6VZ)+2xgsd<5+Fwu^4E0q4CwqD|j&T9<5Czi-;
zZwc{nl!bIX%ZbDUdNd_c2CJ(+Z1PE?5a0o!Fem_-kz@kM>Lw&AZ0P~l#)DB2(h6Kf
zLFf7~(v3g$jFK+|kSxE~vM>=!;`~jju;C*f#qBkoM}Dd#6LzeW?hQqC<Z##Io_>%N
zHBTi<Z9+{5V%cJIe7m2?Fw)$g#D5>ZOb`^*mrBDy`2@yS4*8(1mA+#^^oWhOPCW<+
zZXxSW4g*C$t|Er}sQyyoUPJ#-vTk8F&kImO@x-N(C#@utqC(kddGE0GYiC>TKn4^w
zDj_HOn8={s9tNE2UdaXOJ5L?b`8IVHv5=D6r<qzPhYoW7sB(H$8}eB<ouIe+bgO?j
z$G|lc4ubgcYw-1Z)#T<@QaobEox*@)4iAMcT47?yg2oEh;nWNs(H8ROhwgVfxfRUM
znPh3Z-#U#E_%z76%~j{hb$^8s8Ms%|T+1^7QVi^Dar2u4Ow>~uW}MKP>}G>IR_vg;
z>a1D}PvNBs_^fs7azW4GF<4DagSycVt+ujf;t2k@P>9U#QnmnYuU*2D$=_U}2WV_2
zs5V=3M1s2|wGIF6EmxKjjIx^D!*rcSZ4RUz1V_e%cQOX(sA^W*71Mk!HIPV_paBPy
zHs!T5Rk0dBWm}aJ&NGEY&{4$935jBi9x#aWHMh*Gv)SX<7$8;JW@D7)PRaJu-pf5+
z<)Ep}Bdv|!QU7;iV%>Es9d(^2_$LmJ(m11)Y5h!T_aHjFTuJ*3!&StkBu}X?A}>6>
zNwVcETNIXSXFFwl{$ruCE45{X(Ive@pB^8nhLL8(p@0*0TNkO$7fwPUnz;LiYLpR=
z7T%DSe*(V025C{qfdN!|?5QhMKvq&f>Xc*hj0J>d=)qE`syQ#O$J$RxOXOJERr%d1
zG2AH|(_L*&v|uM$%?zi#^{4UPmmG`I&J#@xoUS+dzIkbGlRlSHPIb3J)zfur9XSG;
zu0T$K+qHULF)b-2sZ?WC{?xsRI*KeoYR4>DB8i$A4coE5srPitI7|(;O63(_wqnjI
zE~=(Wx$HXj-_%S?$~t5*%66bvb3QUpsV>@b%FeiKNjNhNa8TSFFBnjw#r*nhyXBB#
zHr3TWx_Qz}hYbT|y8cKv`Vkg$Zz1w_dllbOaF(?503<BiWa~XOkkH<KIKTG|q$J8V
zZ2nho9v(tiY@g`n457$|eCYGh6JRy{xkO^S7#f&==~on3Ao!;Ls4S8G4We7b2PpG2
zG!~^!fnW!uBDlMCWp<a@14Fs9T`EcC-o)vTp4gNkM6tG*QXs<9ONwOsuuX$n$7nB)
zKznCDan0~DKc*{IamSMYZ0gn@(rQr#Te+2*czC1X8Zz*_QR_JWB7oO^(mIR+2B@Dw
zX}2>HO*Qe1e%p@hod&KT40Publgr(low3Xv^CpSOsoZhGP%Sgv0iQU)H?coi#~G0*
z*>DBdqW8g{e>I}yVs=TZ5_|VOX2zshw>=m-)HGa=gnQ=GSoVicq%Ae;CO=J;5)C;C
zIS!u|zW|w><cVL&P94yE4x-2V494a8D3+8!tBpE*&@oL3*#uiR?&!yVnJ+Pxz5|8X
zu%o(Uv<@QJ;-8SaQ?wze&8+Nn)=C)(^fE6e=`edelf8`hS;GXStI=4cWb94Zz15_N
z2wVg*&qzH)PmNytYP9cg^g7&a9FnbF`l`f;Xfk*E1opt~Aeg85ZJ<HBAi|V?Btg{R
z@T3c+fd7RvS<VMvBy9A)bjuMMPuQgT$0e)OFS0B_jLPSn@TZju+|CEi8m9y@@aDv^
z>RgFWG8@dpP2l*vajog&LNh&L7l|%bdH!1kWgkXO@aWUfEcR}5Bp^*`BUAmjEo)4C
zbD^uf<P^^q*;vj)`GT$$x&T3)ie~VkfVSF~g(R}mJ}&|-a%&i}3_!K-#+FIqtKY6P
zj+kK49zx04>jbQWjflmzTMT5+mae+<w3aevQ#q!rm@x^xks**aNjY{`5dNGEgy3F=
zDTfaUFu^|$pd6GV%2&-i+Shk3i;yDdw!x}{RUz;;6~eCRp(Rxkjtd>&C(3V4(yc14
zxYJkX$IcSU^wx^3F-c(D|40a}uZn!#BhHs?FMHDfv}0$F3Y9^lj9}u7a%IX!tv?64
z`!XB68*=ql!?+8era_er%oqoJ^@AOj=!7^NBF%P&?X?+nWVbw4KU{@<Mi#qt?%+=f
z^d?u|E%2?OgV5TDVHpgJ0~ug<{lsTWb<ZTzLAK+%TE9eR&oA~91$b}&W7%~=raf!v
zy!bwOgp#=?(1t-X{<c`|3)F*4s*)D$y%<R*o-YjCtJMdZI?>TjVvrF+Hts|h7;0Ad
zK?iCViWwFsFd}oq@B~kyW?W34)zr3TtFQrT1GIBni^vh0gjcj67)hIq?S<(w*gO89
zT+3KB6)!L;e7rZHftSM)4j%Cush3jsu2l>5hjp@IwvuPS%v+;WCdc4zUL5_hv&%>n
zfj6H?nz}!%L-@YnV>O<)ef`%4RTY;P6;47r;&1Eee8A|gFpA+8fzKD!Tg15{3L@^C
zi{X`^le&&^gbR^ez-&5SjNW1m8)>Y&J0*b36!b-Tfd0Zw^Mfkm<PMNP=0z~vYdk!3
zW<Qy~x17yms&-R`w_0^^QHyx)`@vg@GCcK~5x~RIzWfs%8d5@t$`LV-^X@|OlqKQh
zw69>9El4J($PgzvEn!~mYph%paYiM){tLGe(J=LZXMt$Nr$ohI8W2r@-F3NB9uzbi
zVz!H}B(BPNjFAh96}iH>p~85zyg9E)Tn}fc`?ETJ+<*j5k+M*HRJw_iS?^KqgHZeG
zyh4~~BVijud0t-?L9vi$K`_!hD2DN1q1@GICVxrhU}Eb1H9z#w`isXUvHBgWe3E~A
zhlBlXLp`}z60q7r)BQ#s3-JC^Rx07Yp!}^0h)m0(z8}ke4AIFY^EN^xc9NBThSF~M
z$2TiT?>t)2hq@BLZf{gI_HUu#ur6|f5F6&`kGLJOgWb?))J;UvYNR%1$soVAy(7o(
z|HIfhM28Y~i8i)wY}>YN+qP}nws~XQ$&GE>w)N6));;L{*Q!;c8lE~;-@)E|sQkew
z+Y9JB8iM5HhD<Sp+f4a!2>WFL-h^@C^hWC1t2G|=z*F_UsTrS^f3|z{&*x*c!#<m?
zsd|qIJNH6vzdAnD(JZUZu4G)BtDc#vJR(vI^s1yAQGC=NSg8hk{;6HM^L#|PE2|9Q
zHbwi`=nfug#g6UOz4Ouz4hzWL>iAHk8q^L=YSn?eta7h7!DdE)tef)w?Md$3odCTy
zdU}^OIbL$JLZg%hWP37nHu;7tutjoxdeV!fp%>#XhU|RDr5`!=4O8Cmyv%C@s{K2q
zx#U(tb7TnFGkG;N<=D(nrji&`0aR19=54DR%fW^IXC^aPfowRXIapn@Yos+54aiR?
z?u+)v4h!l>q(9H2NAdHW@4wggXgd5C9ex*_$l3m*p<`q7|Gl=iq-Ei>FOK*%UHkX+
z8;CmS4{s?CQ~e)w<17mVYB9T)f1=6|%Kppv7S5~gY|p)RrYdK=`JHU8+``Vl72b4l
z6_b(?_acp=nZ<TowKeTqZ^G@}-QNWp3bvz$BcuNemc4lil~%sVv_6W_Ub!}&){9$r
zk}!a{8I5qA@-pVY2oEtctV}&7@dHfg(_SGnyU__<x?W|WdaRlt-weSI^Lr5|o+Wk}
z4)5Gb#aNGX|F~*1jgXa!EI;?JWpy;09u7UaWoyriCpO#u@jAM|uL^2=h*Z7>CE-{z
zUsY>v$JBke>;q*TeDq$?2JNu`-X`gYYs<Oe+Ll8@qobp<!ScTC^4V~0MFVms*s{3!
z9K`)cXW9I643@neFV@T^Z{~a}j%RfPsm(x>+5w>^W7Q20BkG$liFWT}qm}i1U8^lz
zCsV3_=Pld}=^qszy{?PK0BS_FK#MWQBSnGHu*Y}a%jw9@TEK=g|82~DMKelQ?4-;o
z39d&JPbqH$$=wL!MD!`(22o;VhUflTI~>dFL~~#B6Z^?Ulj(>P$a?KldN8KXp*elF
zWzQg%!q|YK2%@_=OzeT{%9lNT=Ki;&Ub4(9C0?vu;U?hO>q`uUxEVBukPoD=XmJ{5
z5mYWQV2WG&l51hTg`j)2(E@z?Tcyeq9`(f&oWj_SwJw}yW`!p2^*A5_W#f$eqU9|z
z$_N1yJWBYB8+2>kyB<AOg_(A*OP+6Y^l|+{D-bGUrqSS591cctvo8ugiTuF3Pz!9P
z24xTi6cRe4ZML5k{|9xHe9YLD=fZ1Y)+Zh;0iZ#yu5}I|e;#L7_afbS6qKLNB27g4
zcgbHJ5$uwevagc%0UIK^o$;j<-k`BxfX*JHLWC9_{#l#zKA*;k8H<78<$T|P5nqH3
zVizU&R`^tZu5%M9TkR$P#(=S);<S<{P6eC1uya!|o-dtuSkxVqn9w}pukw5OM?qsi
zncbR3k0p}K>jqW~sbB3qie%S>^MMMZJ>GtU|0O<f9!4nz@(e%=xRDqSp7WPBC$$<H
zDJ496S{3Z#_g^+83%eQ$=QjC~r~aa%&i8(+UoNXWi_5Z>v}qI8#-@nMO;j*#$-ffu
z6vBjy^png^*rIsP3$g)iG}b_t$@H`kq4yWQd5YgAXdg@xHI873vgdZEni4|%b!l;$
z=8bLf{E+ZIq0->luf1gY$iAO}LV@6`pf9mEWv$v7syJ-DY}=e20J)29Nxegh<jYF+
zy&@@+)+G?d$FSB+*u&#R;S1<4efAAq^(umVWWKHtSF$KOF;%oI5ntMEB&6cvPgvI_
zy0OmIn}CJ3GsDU&1aWZ;By5U9T*UYE0^8-*%wb5#xNv=)4zbqRMH$)_i+iqMU{vvU
zxoUIIanzcym$<arS)^of<Q$7dx}fvHBAe{RDt^35@!GCLD3E=3&-NLu#d21RXA$5(
zR4<DJzr_X>0+Q52TR^8G75IF9n|e_Q4g@Y%%z75n74o{!jQ}Bg5()zLsH)MwW9AZX
zFgkKRD3$#TZNgWu|ME$2WH<&wq@<_g_tNo;yzNBClYs*(L+4`Iqx=5s{j{qd{A~j(
zL{6b`{Q7lnC-=J{2V8{&%5YknHn=Z4*>}OE6Rz9f(z2wd;@wXGGS93wi(~ZOf(xM$
zDqk7=EiWFcq5*-OiZv1BDImg1V<;zF#${hL$=W<Zxx7utIwP3*M5Dqoyyy$@rVJ)~
z29Jj1a^#aXXN-IDiDIV#+F_#sdI0$;s?Q454*FV4qewo$mey6{69UBO`>BHw$53J1
z<OkwOpzX5#gUt|Q6m=`k;^KxST8)9F1<+@2Bw`XfvD`J{X<8HZLMJZ+cJ5sI>;>%t
zz+)4(JrD1~!J=hqP&7cUmk!fmR~sAMl|9GP7z{*V+F7lQtJ>Rk^hCNWMC~T;;vehe
zOQQto)_5mF%CbTgS#NXu*W!`{gO-B}v_4>0EaHyGpku+_>w2dEhuulBXcNXGMw~`N
zV8=NFkItS}n|P>oCR)2~@Hc<9cJ2kWU?-I(Q<O#&22igV58_bA8)bA%LP|X<&+;R~
z1Yzv_8|EV(=U{6s59_=9KID(Rwy~1Z$8GgBmu(0oD+HtV@ctd_?M%U)S=M}%*Y81x
zA!96b><lomd~0jmh8L61Hy9ydcu9B&#~R?S@MX)6Kc)=pYs%Pq8EY=oPGA>sZ}y0`
zMA>FkIx0m<{rM-~>hu)g+No9|w8A#`tafPX$DPLd+oeLecd*YB*LfA?+nKMlb^Tfe
zRL0w6`75`}WNOQ+0&RBL3h|=F5a|Y-)Ty`h9ayUbHJm4f%Z)?m`8o+5iJ;6UbB6Aw
zL&P96#|kxfE`Rc3!&yC%9E!2v+`zH;$>U~{bq*DrT4ya>j^_8t^W7$M`LNliy~Sap
zpT4kmQS%lJjIptwxHz5`aw-@NTdj4Iajn?p_M&K#qZi@wI{8qd+_M?lFos&4&2X78
zFdMEb5k5d)3&992Y(RcxOBf(8(~-G2pM%$8-UW~3Y`CNm-!vp^@9;}WV;;Wldte@k
z+On>ZL7tazDPVWQc1a5;j?+fRRtdJ(q}Il)C&SofWq@D$3^4?Ckl@Paiai~ib|M5E
zrA*Ap#ZH~|RMhf(pixHOo;m8Cu-^0_yO=5#7gshHbIhY-C6c_lIRhr#NP1^16^jf`
zfgBrdJ*9Pa`$hZN@Gqz}^n|oVAjee7sP2s2G}kd)((yVG%5W<k>p=@9)m4)-4rHkR
zy^AqTWogh*&)5rbV4+!{i!fiKJdWRAiV}*66oGd0EN%T*Z%X)Um||GRs50*czdh#s
z=K*mGhs5?zg(K%VOQj<b(biw(P%p91L*R`#3SN|;HDozF*FaEq3+ERly$|~lC_Kyv
za2ATwb+;Em%8qEZ(YZ9pt{2m826ctUx-x&KVZU-nf&C0L9D-~&xphZo%j}DAw5shy
zx`(4JxAq|T^^kzuvp6TCJCh1Wq@MZDQ(8^+)-R$mLeKE&EB2W`ZjHm8g?3Hf4?lh0
zZ4`pg)2(l>X3Uwq7+L=`!|e2IoZCG(Fzv1Kr$h4=YXw85_h8FM!Ra4@-8Q=1{J=(h
zPjhpdWlzzYx(2Mf2K^SMWkQ2c&zi(_cx{D)s7z^Z3Lac_yyekMY&lhYN$+p)ySckm
z@Jjp+n!LisB_=sfx-@POnbPlO%k3E${Pqb}*;sjgUbMAor>!GehHyFU`iJhZldnn4
z{=o8<<%7wApY3DaH8>Kc;f)MT2A7$sEUiwlo$DKNwkPE*;HGYk**|*{uVV4o8{DH6
zGEWmo;sH<)pR4{E3#GoWBbYnVKqaxWmJF|%CLD-82o_mU5jI$HjJ0Ab3m<+9G7J&s
zOGPZHc(o{mFQY~bIb@!@;y^VSjYKm(NtTF*F$0yL(Azj$<eXA&Z!?*3%9S~)<k}L*
zG3`L)V?U@>S=}g;;~+UlF<T_nbPXxhl{|wtDoOqntA`r5y|*TBSHcU$R4`-uOYk+u
zpA(hj?d}da6J&S!we8DrX9hldbeAOOxx2A<vpb1jspe4Qd6gL}2PZe_vN7Ew<GD=5
zo7LPhDbx}aOGd!P%SRAfR&MR>7$VlE7QH$%>Em!`UmS8$Q$<WPs(E>e#8!7mAO;dR
z<ZO5Gszo`Jw7I+-<tqi!y7-TxG3F}NOouI?`FMnSBO3zb<_LvgV;Xm|<HXD}4LU_I
zxRO+IQuTOtjYoY1dL3J;rzQVoL9!`PXrc4Sz6t$ak}iFGj?IIa8hQ2jwLJwXl}c^s
zl%wjqykeSiOD*}r@$s{sO$prj@0Q&7ENJRMqb#So>JXLik9y$pV&Fp!$72{Gb9#+@
zHCv6OoJjjrk$}z8-abf&5&{eF7`s_~6xl4O?;z!eGaNegO>(}<6}EG~WDf1kv?6RO
z+CS{MlfPijw8uymU9N@+PR`4AYl1l`yOJl2L2%HurzCRuDb_CG<1Oz;1dSPJ`E)}O
zFr{84N0y>Do<W=SyN<uTb<HFt@u67xn4YO3xk18588Dv~!`Pnj{6VMD{oor4XSSeW
zpCq%~4tX;&=~3AOm@+%s*y9Q^HGS8+nL<APF<b*$Q9aYySy<uF89DTL8Vn#<XtXrH
z^H*1fjwAsx!q5z^Mci?rG#Xc?o=W}G>5Mz;{tObglq3*tm)o0^d%u`Rye`^~f;uWs
zy6tc1|9+am%cgO`{RN5ClK)4@1{*u$|4UbRq^V`M!HVqrQj0&2HZpoij1_2z1?DVD
z4`Y9T|11<$h+rJq&^Dfouh?U~>W4?65Gy=~XhCJO2?~Kf#+`P9eSg4_EE<H1?(cwn
zgV+Uw-qzjY`!RU+G=-B64k2wMY}yFvE?wA*V7#j{9!OpwbW01<pM;RV3#pJ?mB4lw
z8C(My8ZLhrknBzlSXE3q=?CO<cPj|j)rJjp%OKf5z6FTL5U)u5SO=iAdw>Ag6hdwa
zfCNyaf^C?_55k%bn&DV3N*O>4I2YLNT{jUn!c`Et6P}RKFqU`l5w_-Y7cFWr(Cm@k
z079o2N<^CnkOtZAU!VTXjrqI!Z19gk9uuy}m}5Ld6mgnfzcL;k@5$4SKEU9d;FiiH
zH|*2kHp~6=K?(pHeAqy8$PeBILlUA5UC-ao(+=UTZpWw-JtE)&!YiLoJ^0V3qtnOo
z9i0H4Xz=|gLS$NS7%G_Uz#s39_7CqRU|2tu2y&AQh|wjJP%ypO>-)4^OB`DLq$@yD
zwR57H?lFwWA5l190z#G#8AGUJmOu^=X>@*&b8WM+iMCvmU`>zOsjPqbPB=Bw11=B2
z{VAQ`Ss6HdKHk}KI2^t1U`aZY9fH4Q2rl-CTr>mUF#~gX_tQ&xWrIVi;}o(%ZIFI)
zl1YtX-&nt&O8gi=3ALDx%R&-czpg84(=w6k(^m}PIYDncQ+fOPHu(eew<xA`7o4e#
z8;HtHkBu>gkxia+#%mI2>$Fjc-RixaF6>WGQ&+9`U!jsj>oc>&1an3VCwh>pqk_)N
zfU+(CDdnO%j$Fz*$quqVTE>@-N$=n1p&<h7hS9el(uNDl8!BQ&KtcDkjkkuXPA6s2
zp*)}R1$0=YyJblExDAd)uc^w8;PTECotI;;T<9&Nz}F8-Cj-A*evL#yu++DH;MS4Z
z)BwKWo1rWBclzER`jf#*_&$Cxp~yc?XK8J1CG?4c>H5oRPl7GoK+6^6hVIoXB{NeU
z1c@_uC&R+sO3g<dxgjLH@A2iRT%dEO)*89%+0N=^E;Z?Iwe#(kMz&{$Ww904sqY3o
z*YTZ}P}ghkHxDT?z)>Otn<ZzSi`2ff)vYD<^A*$r1dbH*6pMAFRSn1LCR37J>W1C*
zGO|=<ls74ZRbwe**ZBr>itG9r!Y(yujiQ7=a|T(A^Tb)K_ogawT;8TCP7APAn(2;K
zmjIPrmbS1-tDjw3)ox9^$d7L{KC6wy+FM_XIb@{Y=(lOch%{6DA*3_F{_~2wPHD>z
zs@IC;=2>aQpeR1+GZo6pkvpm@W6Geh>tlBv)$_dRaY(u(soTJ+Le#s~h-|cKr7cVO
zAzI+A+Gi-FGDu}#>@uI}iAsPP0-Pwx0&FV8V-as)vysrOfD3f%MjdNV>`X8orknzE
zIB>wk`v)L|=Em>tKlE8L*<s~OI6pNFQXpt1u6slkmxW!!se^h$R@M{}8Cj!9aAim7
zT5qNUFCHd`yGCs```+)?ZyntH*!mrmx*2Lj-8Y>k{!~70uGGD~2c1P@8DbWaqhI-q
zGKaWUh2^8|t`n(zrbD$*<?HuZMeK7fNPa^vLS3*M%ihljN6U+4%oee42JxB~9s)J6
zX)IT1Zqgo8R*{-E<TO#1o152v%&_NW6#~`ut&O>}7}Y!EllOOKLD%TAy!7YjR;nWs
zm8`}qbZAi_Zc-&MFOVGrK08|m>oH-IZNz+q)PA(DclNQ`e*pe__C)~UBXIgfIT8P6
z;QxRz;pFK2e=sI|lC=Iyf;_VGKoPqOiZBt<jBKOQOdgCv11ijD@hd_8$E+)ay*3RX
z^Ks23J8&8!IzDyc=gZ5c1q=+fdv}k&Dpaa(%ry<}9ZfJ!PA#PwYyd#j?>8qLpj93X
zZ4sDtQnw6;xU8&rmsLs{$V{aVNkc4CK&eQ{&(nVx1L^5mzW~MMgS1OltB-}3zY9ev
z!6IfNJrH_?e9Bu;0;I}6&}uTh|65=+qO9DbDGecZ0Q}S)B9B$j#bt)_YibAub(+x&
z{&tYLm&B(rQG|5WqZppk<F9JcD^;f8(^$4`W#Tx-H?eiR(`S)Y&5F$^w~2L}ps(rx
zS|EpTxJe%P0`%@j)F}#%;tsWXC+~r1Udv1$m(i+Mdh*i6`*oy+)#Y1`3>7^ehRC`@
zJP<PIS>TvKT$sDAq-T-;@<~f}`l@eazgRLjiM7S39Ic!I(=-J1v}XTB64%lnU$81k
znPqJ)vdaJqCNkC*_rP|jDI?F`ao&!c&J&to9R$}F)ZlRzLEc@9yI*h`8wPc^+H82}
zJv%IpirP(>CY?0J-Au$bMWHnez2LvXSJY~{dZ>oxCs|iv!O||*r3z5A4J;Ihf%82j
z@9jeMggi|KRZ^V@x*eHhUn_%4IXCHbccyx~$g*}|^Ciff`?ARB*4Sqc`ctR6(7^^F
z^i+bhC<W-g6ygahiYU|8TY$i$B?zW;FM|aMUxl$(hbYGz*ZcP~gngf+RWW71V2FvM
zw{NpGWIvrxs$Q5Jdd+#a&*n9H?7kS}zqt4DFsEbxnSx`FE_0to$OSNug)KN^QiPr-
zaM@#Tu$z3|S>R{8@%!%)&F0lA-uoNTzP~j6|3EnJ?Cz{*Z1}%dNL`W*eq$OTwD&|U
zdz}t}0ewre+$b|SR9=1oghcs*SA&4zpH>~y21Wj_Z{8JAGanKW>Y3+d+bcFMz``Gr
zb>bzvN(pjsW8*?jEia6%PMqPDqtxJZAiHsgJyjot(M0>Pf1DA*InW;fdQ#7RUQJMQ
zf`p+Ih)jMK#3^2kQ3E9~cDw6uf0QlWE*h0S(p3N>WJsT;SgCMdq%ry}?QlDYAc1KX
zH_@LM2I~lEsXNV5)CeLdYYHMzF{qgrO-UMNjmUPUjXS}UIx_YC6ivb4Lt_o`0cGAW
z@$)X_acyrbn3fHjymH*&(f8<DaFzLd+p@fInbO+;1MS2VOHWXx5lk*XO>Vl`S2&p%
zDf!OeeRx0=0_N#RkinOZfqdWL=$iMlI8s9ibt&Od^6v%2iFxs2&SzUO5BtDA`1l_H
znY<a;)1sq}o-aTg)_f+rOKzf#=7BQ?&!xzBIp{+<d3}!;*$7_?exBaK85nOHW!N13
zyZ#Xu;CH6mZm&Zgp2D$7hY^EnPo*B^FIm6>_8F*xUa)P6Neb;%wA-1sf6N3_gYh5O
zR`Yq4Sg0N3+8|6fxRZmPx;D|#^-LKaa8M_)JdMm|Yw#5}(-^B<O6NUk@~zGC59Dr$
zBvQo1js;tYlmVz%O@!=H|Nd@TDcuBS2s2jTyH!jdqk9@j7ur7BK9cS*O!bN+yA(KW
zo3;irimv!`n0=b#+&$eod#KRNh$w?NwBTUW%EOM0(pTW=FDnf?Bs*W5@{(J13r$qG
zmuoX=$r9J#tB&Gg6DO7cxkye8NlF_kKd*X(QLf!1d%3LG$h<@kk8xN|<q-OGB$3U4
z@dS1sgkSMZPl$Jor8J|7CI+>ljI=o!es;OT*3=76_(&lUuQh8~H+UiVMKl2A<)SM5
zxN7Gnn@?C~XRfp=l;{0VWC^`o${^0~`+@VHfg){;|1Wx<O`=`Y`hUqLPLyD_vE=59
zp?Ex-k*%fWEGok4XB8#GJB!v_8?hQXRkW@<-Bu2#`OqN@%yQqRq@N+Za3Ap#mwHUI
z1ciRSzo#nuFTQc8p@Tg_2xXAmtB&Z1F-1ku8dL$J*~3Dp<m>oDp74qTKsi(gAfQ5!
zqx02+c>8ZjL3PkBn+B$B0B&_K$sc$i%KOQkv32M{t%m>Di`C8dfgot8W*-IOTW8S1
z-J&iCiqrDfINJ`jr>J>_HGr3K_a#~&&&>b6lEvjTF^nZvEsU8GT6#h?Iywa|CEFo;
zuAQ*OTLKigqn=2tA_kqZ@~4Sf9;Y5`);4LngT%No2fwIDY}kefH(=Ib5Zz##Y{&sv
z5%-<>!Dp#rb?~7uBKvRiFxez)RzBstR7x2REsiG?T#+TyWjJ6BQA*onFP=?{Dp2P_
zxX(r?<mBq^gSs#ZKGKI%rfeQNI^u&fp={bl;#?kTvY2AO6Aw?l0xOH3%KB*v3Jhc6
z8^#hFHZsOv2~ZucfnX5*(Ji-RWEWWG#pj4ad|r$xb{U3-gM_cpo{$2wLRh(DX8Z8q
zLju7ipk}W+*YnmDoOi2$ZQE04XKR^hlKGp>sYk36yDaF!)(Obt=+$ldhvwScE%Sv|
zD`e;98xT)x0DR=vkTkHE1Jv6;;pt8^P?D#;uCtInlFk*cZf3-9lbYgG=PhtKx->s#
zfrtMIDIF6Kiy{8a%h|uk9LoRObmC-SYU1Q<U}W{br{`w%UqqiM!uND7ItgCn9|9Rl
zm5$B|#qk7E&dhAV_X0(drd6S?sdcNX8lls(Z!fcDR((T=cx2F_%WLk3$;(E%+yz-^
z&e@f<&C#&c{<W~*8G~s*?hlM>qu>pgg*kHwy_j!sA#k+zsOEZ}HhHM))xH57O=dat
zCy4O+P{x0Yh9Dl81%RzUMUk}TP6rAcx8$dQpCwM>|F9LW@LPW+^{J?(iUhk(;Tgag
zf`5~wB@#j*n9dC0bqA913&aKFvh(``L(QB*3-P$;gJ5evg0klFEgL!6f>9+dqO%WW
zEgRVIu{VaMO`Z?V&a7E4EF$|gmllrqn&>%c2G53Q6_`JpmN-+Dpgf_}f}&=EI`2;R
z9qBuIPyI0TnqvbvjU#1z7AY3wkNynMmE<X12*0jI`PrNg*0-E&j=-($xMQ1Awtm{|
zH3}sSDEvV5G{-W;95yvS>b7-tTX%Yd0?IFPOjWwEw%B@mPhM3X^nNmYbGLQ%U__^t
zn(5e|JbqF5_iFLyrPS;ytqt=}%9O&b<9v*+nvIMY<qlfph6->kmb(NCX3*kt6+%x8
zH`v?*-APRR1>;}|2PNK!Km*$r$q{1JJE>zXvS!B!ELDy(sbGi2{x{D(l{EiLuEGab
z5$s9%c{7?lVkT(SlW;5AOV?lR0r{)RgWwDl_}AQfM|vb@P?A|r@Te_7enly5?g7=*
zCKOur6~!M5!<A<nj(KH_`aZ1jSxVq_i3Y~jNK;JvXfpjOWd}M#<*(g=lvAm4R*D;a
zH;^G3uI{djN2{B{dL*CS0<W}=)%A}^(TmHC4V<$cnp-f`*2Jxp&P~xdVtD{c0FI<}
zHpc>gY?$KA_anD1(GbZ1T%P0Ad&VWmq;c5md6stS#%unls^L9)%v=|6KX-F|c1NpY
zmHu{|sSa7jw5ujhmUI8}O+#X4V>5h8Oa!OCT0vbVTMKO$_o{)zfZdKOYW`GGdkddu
z-_YRpdy?}Dlh$GD#9ZgV-{1|IP%gZFE5tt19+IgbR~k|4Z3T>59951j!J<}LhqyaG
z8zC6p;ggr$QTiJ(C!2naE&OG*<)l^)`|esA)Qf(4&xIk6i2KqDr>!@r3G$ielh&i<
z5%-%>=coIC48N!~_p6<Yj=I+_Z;`<By{mYxt79%=mp>n=Y{_43%X--3Zi7O=eh&-_
zx0cEq10x24BiJl<JX|jx)t2sDwKsQCX|=gkS$bWn<4`IRdl&hBJ`CD)G$0!ja3}pz
z`9t}zEykjLu%T8k!(SU&b6<gCKF4hJlu;11_Lcc;jMN6)Gs_ky!BX->X2$RO0f>;S
zgYr;Me-v#H3l_13p(s&V!K8CC2Bj%MGmdjsED-d^l-~?BH_k!K>hVt`uKx)WoI<8O
zdfMwC4+t8R+l-?SxW3j`9Y^?ssfQ8nPeUONsL$dAUxuePO$wnC9dn0vTBF&1W9PCn
zM@WZIMF!DBdMni5?oRmBy9=fx2rD*JM1~Vx&7H&(ihdHqo@z*Dz^2d#PB^!K2Qd;Q
zLuME|(?k4Hv0~`(rkS`QjbQNBG8Q!dP-KNMKtSg)Ol);IieijLLs(!Kq8aiGk{v>)
z0w<V=_uDf@5D%f;6_L?It{FZM=HhBw3NbNV3_QU@&SpA9@*v?D(tJJ?nsSiXUHU7v
z1_KDtrkuZN8me^eI}4h%pI+D4`TjIrJ|&jNov8&;!alihPJR8G>ZI@LK-a0?jZ_FA
zGlRASg-g?onZ`5BNkS!Shj%Pk7?1vo^;j;)9Kk;}lClsP5J-EP%%j+YG*2djA*!p0
z^cC!VVV#PS4?!j1<hz{Qgn%jJQT^1VX{s&_BZFWeK+qW+NKI`r(5O&<nSePK&=mbo
z<JTcGK3+GP<J*TE^O6}pYc9no@2M(1TS`;KtD-Z*u*%%AiL_i=!&nIU*q#<ayyQe{
zrd=;PI|f37Hcr8VR5CbXxtCBgTidhYCGOPR17z`*5L1$&k}Pi0UDN(7b2d{FLor)E
z2Z@csHL0M0-r^#H+BzF~Z#TH{ohDanItYK^xzV@M>9f_L+V(9wCDPterTIUNTeF}G
zJ8JL%026%wQO(ib%E*cBfByz8Y1!Cqup@q7>j^aV*%}r{<S=hs9J>Opq$26yti>nW
zdeI>uN4YkokO(CvfrWj)WDz_GMigH@UQd9o;-?&EV8G>Jz)4(b^oqS3XItkj*nh<*
z?R~tY*-e8F>V<#sk9kWOjbtQ<WPVDdabR5ChY?T7j*&-($M{FDG8df@!O9B!InNA{
z!Zc&X?_|%X7z1Vb<0le(yH_cAyL3lEpqGfV_Bul>>)0?sem;gb5M4D8j`(gP(aHg7
z)F92eLH>9^LLz7I-It7J2}L5sM>^(n9aIOuzhR~f`ok|#YHb<|JHaq+rqLiJpoL)S
zfw_HiPY>uV`HAfS@6j{m%fsd6>B%Xh52JyaLwfce9W))em(6>a1@UjjvwLL^3ap!u
zZP?s!b$kC{)#GIAQ5VS_eYoihTQ~TQaUC@Ivw7C<*zE51anEh3@`HY^t3Wp~=YVTz
z;?m<`m#)_o(;BF^>(gUmZx8B=EVp%2v=ip%V$P03#^~PiGxD?ZC39Gy?fhx_-Of|A
zOFFL=opB~R{@u)w-EJ6fxLcyFRAbvajIT9m;y$OCaO(42<A%s5RfL!#nj6Ny@Ps~w
z3;+E2g3;?FM5Cps{A45m92@p)bixrG*z(nz!~I61NGs^EeG$cr+p(&^OtZ$pX0>=m
zK&|^GcqaXf-HqOd$ZDS>)F#$c4RcVVEw<kty*6>(Sm}jGhROar68^MGE)v{0TzbF^
zGpl59pswbeAjWjXX%_eP_I)n1*J*R^wTLYb*MVTAc?#aG#zFd>x47x#_g^nW_A>}(
zv{w=w8OoxoDy0E%YNTe*6OO#8MgnigY0k&h&0*udt_9}jm;E6#D8^TINaaK7AxK}r
zeFM#KumI#Z_A2<Ug;0Jn#!yQWo?#(#LNA15WT_dd)=oHvZDq<(GGYH=l*In3Crub#
z4&$Ea8k!x`6P)y&So(%y@#F7hmDyO)y0z8YpI<X?JP1wGrX@PVI(%Hn<=z}l>q-qA
zh)3oZ#g2}EKSkQ7ZyZgZ1)vtm56NyjoG)`(dSA~Y^v2v#VH^gfk-;jDf6je!XE%%w
z-Yk*5z&@jSn5``UIz$3yalJzp*W`b#D5=khk2~|JhH5)7DwpuXvdvT_H*DQQFFPi4
z9}MMc-M>ETj5BP-I`XD8fJSokiEjn9qnX6~bIWFQshWE*&u?POC@V;5+aVQ@_u;4m
zIHix6gr@Es<n7Px)rY7(JX$xr?G9&MudNeNaz_-S59`G-0+v~hA};ez{UU_!$J3f<
zHGmE}^Y+iV1_sdhEAHdxCzmM4!F#XETa6@y_IU{NdC>dMTQ6iLs4ASR7{#oybh~|O
zP-gl{=t2TO72vxa;x4~v+!Y;kHCBp4mD%f{)jDNF;UT2eALT~$Xic|93`jNNNrs<#
zftmDP5Nc9DC{n5x<P^;cPj&8H+8e`M0pm9Sk@~nT#yGQN|H$y+i_g6Z+cs!d_pUoq
zWBlHC`aEv|P@%UJE=IH0^K1=>1MKWTUtwKMh7RlNAe~5|wbHRfQ;cto*O*=Z<L~<b
zFg3^e>L_Y+%5cHYDtmJLmzl28AoVSxl!SW&CecdQS8L$ZFP3YIcv*})1BtuVIy)eq
zy2$+8JSp05Zy<&Ty#6^wj4EPn5SuR;FH+3C<r)T1aYEj+s_e#$)nkz;MVJ9bGTj7M
z{xZZ$Bj1z{#Ex`ZKswr@t}gR@m57u%lXCt6G{Kx_F$ewAW|j&$g*%|-^{a*H6Y=Fy
zrCwUd%sUhmeiq);ChEL)X`vBv-%w>>*Lm`y`OP*xdt`}k`RmA@r2Go-j@;X}mFc`U
zpiG^WEOdM~BWd+y(d!(W(Q>fD70Wp%37W?`6Ss&g@Xe-$OLFMAu|MCw4_?i+?5YA<
z>HB5=P+5o`-028)CDhS)Z~6%HD^k}#+;M}u5V&1$I3}@UcD)iHiQW{=DoD<C15k4X
zjrv>A&ZrR8vK;X8Z+uk8$_d=uq=k&tI@GY{XZ%y-H7i36XC&+B{H20m!jzS7bI*qg
zC=j&mlM4{U&&L184j^mdBnOsV;aUr2OOpf)N^HP{lr%iRlNAtgcRnAJ<{RBcM%;;o
zvm3P@mhmZKys4!sNA=7;^{XsqS$I3A9AJ7RMEW!1U^iSa1y33fU}h{VJu7FOnHZ}>
zXZ4H;F0-wrkTE5{0$F}QuwKv7LX{GgF+M`o5*NW2FxLV}k5dN-akH8XS>(ex&_C|X
z2{=m;vSvuhM<cz@ej#RG-;3!pnl)ovNmf`zT4QV>D)OtDH%=j&hQ^)lob%CH)Mi+2
zu?n<_&0bKQ+lRKymFpYxy?{m+$Y*a<O%)Ve>dz0iywL-n8F>sOe{l7L>?E^bObt-c
zwV66-l#tp4%r&Zt>%=WW8UhDlWhV?tqJFnpk0f!~JhoCRGd7J~wQ7zVMs3zC$4nA7
ztQq4SW__b&kY;X^*tOpk(%&xmarbu=|AAl>_seCkMlj^YSR)6hntGbW=s4MOh-C(`
z|1J$=T5YFNg+3$0r)43PlT-PgGsSH{+P%oFdu7Pj$CpBd_`Vp7I7NTt?C%4<%S||#
zihGabq(9(3V1IJMM`?vEJ)2uj=l5#a$cf*zz=M894iRv}a~`IzS`E|!M4D-HuG+*2
z6O3K@q+|QgpA`G;*r<|}p$6rcNq)hmh3Z7%`wFfO((@V!7*5C+7#eJP%2}i<l@_W`
z=~evAGKxt$l9jkacj+A;!zD1l>s3p%Q-Q1V{7YRs^uhB_N1}DnfvT(2Y7^C+8g;Vr
z!1j;s_<AJuYOC_Fq!w%h=%uKRMDa*0YOttOK6ry6WP}zr-|N|X@h1G>j(AE(hyFr%
z#LjSI&qD<T`|cFlMo{^oTyc)3mXJpWRbeHcM;0|9$ULEDDdWIE(th9`)+eupPOmdc
zt?3i=@~o0ojF5wpM%Y&d#9dH+n@JKFxd#p4-6oTEKU5MMX%TK#w7IO82Wdq-ZQPX6
z`(iHpss*#K10wGnvo_Czkm~PAD>f}>Tu??*Q4`&8rn~+FWBX`_+2L4(Ng8v>$`6|%
zlsC5lB^JA;)T#$7;gTWeDSnFGx~_qlV#pM8*ta;r`Yc=CdQo@{m19Eiy1w4wrv=@@
zS)QSXbV5CNQJKShYB;Y&Xgqt@6PlC&{x(#$OLlwk`T266R>s_by~e^LsQ8k*-!7-K
z38$P$z1GYSppwYTriO>qAfFu6sw&7mt)K>cA6rNoJ{{r?ptm=qFS`l1|26Y^k*K08
zVcB+GZm@+Aldc3)aY%qEK_&*aZC6w$TjWjECKV0XwZD{9-~q7)@+e24QsL_5CP@eT
z^~|YJ<icX(FjHW@*{xGNw4Y7Bgq?^sF=uD5t_dOb{&5GxSa0bf)ZX*2?q$5b$P()E
zmJhMf=9$z4Ri;ll51(A8jH6bZZ&Q)UsJoDSSm#2izCsuuv9b({%=Q>~b4UHn)OJuA
zyH)Oe&*m<!)Km`qg_`^EUY>f>(U6$SU1mAAekJmTGAkSQItr9cMOJ~(N{M6hvZr5L
z;q$;erZA5P)zLU@T&F1a{j;$D@3PT9*+@2ph942SzN@7T-Z@7tuN1@}!ud5{Jvhj0
z^Tz(l{p25Urb$b^ipm4bi}O>kWUPzRymPv!e`|{9bJ89<fZf(ewx{zumXTw*b>+RD
z04`S=mD`X<RSS-l4BOU3nna5gjkQ;WTiZ{N2dKS&=TPRC$=ItCp~k^fkOM*ux}F{F
z>y)yh#O}Yks?F6YEwdfEtr^+h4xOk`BW3#F%hEM`tw-c^(@CCWg_OXdAZtK06Zz-+
zzt4A!!YgUOKL>2m$v3#S1;!eA-}JS!P#LVTJX`O)4cXmy)%|i+{KgSN7-+5++&l!A
zk<S4-PswXe8ci^54R-Y`GIMQ<l)B7@^8X>|KYOI&0XU~L&J+$tTO*;8{bXz^CGtlM
zz5<AhE&#`f#Js|Sex)WkqvhSlbs#|CdMPM^0cWw;Gje$zR`n<R0)TFrE~9ariX?g8
zmuPkO*DPJf7xygO?}DT9SmAWq1IpPly!Hc>>scwo8M<CYMA68Ylg9D^7+GdF9U>!7
zC*YhxZMWQ%PYaw|i3;yvwzD%260DjMU}$y-nP;oLU?6F9j3UgJ8?r)=?m?2~=D$+I
zYwU)WTIe`!9wx7EKLx{vxdmbOeWb8_YI5rDyzhpXc(Y=on5q{Ux@M<WSFhmMAGAAe
zspgUrxH8ex7d#*3v7ChEWULnV`fjx^I0|JZlt(HbwXs-)TkSAO9=T}Nck}$5*Kp5^
zhUapti7CYN%-0On(Qjz!^P3sy__WV{pKa!89I~+*fjyN?Bzo7zdaxSAL6$f+pVQnJ
zfZJhU=5Q^jmVQ+cnESTi!86YopIw422m9)Q-ojx<Z*^ticXmOk7MN(gRWiUh=XY${
zcGZx3ieSaI^q|dEwkWlBuZhbHSB*1tpNrU5S`0(eEag1DGBh<`k>j<kzT#1dDB7t{
z9Vqo(UXowkH`FG7cE>AKq$t8T>ds0CLd)&4dY**5MR$%g!01UqtQFL9(vFe&yzcw#
zocs1mX|stCbj_f@OoxtYZmokAOA&~4{bxFnX<AJ4SfWgMRl$FwlAkWxDXwbA$!NB&
z8(4H?I!p`Q#L@bS-((qThtdMdJiOJeMSa`?opb1H>vbJ-=3aMn2x{O?;rHAx7Ckwl
zTX<fo+%ti9lx!}px*X|@Jh|6ycv$)bNzQn8i$!VI-&-kPv?D1}B#M^9R21EC3rkmW
z1S`=|E2x%B^%|JhkG?RsWvy3&t4lcyd%BUp)l<H~cFZolmcwFEh@t^@+Hqmx2_v=^
zM3w3iT2s+<0BA*Td+tDGsGI);?HJ-)8NTjquu24~vIl5n$>J3Wwy4^Cb?&Xg3~JM4
zV5Q{aUXJdzC3vlYA7+QbptpKVRyC3yk<`9dx7V0qHI-F}(GW6sO+g=dyh1BRMGI}N
zQ<zzC*HU?9>}Ftiu<Rat>JtJvOS!RRX5cm6P)JeN&1Llnm}=}cohAQ;>%uNyB|`I9
z?GWX~YBGs(kUAU7)WM3JA~+{V_+G^FGl)nPWZRQ+aC}O+(xi}-#V@?_pj>rq`7u~f
zSi>?qWLZ-)dXGBy{9Si4+C-}zp=wMn_TcBz(%U9ul;<Y#qxJl9E>*SvGxq&I99Peh
zG)BXKzvbg!DZ+oy+A}dUGPd|X^e!oh|6M)g1zQzw3)8?nE4V7!kfso-a46+1ln{Nr
z$&B@}L$)Ss*wMcl#PELInRlI(9D|77KdAyPx1qS}$(YfF+1t|-Ku0oA26biG>_4;Z
zBSu4CUE-Xpl#U5JvD#NBEcz2Hg2|uIj31L)@4t?ED&UE}kh)7488pq_CJorrf$4e<
zunf5voj^pwU_FYz+c+%gPi@{>2}4o&=b6|9_=X-wm<rmKhB95HPAx1PD(ci)KPqhP
z^T5(~adnAz7RvChsU}4G^d+D8IfW2q$8^oNS59ZN&sy=MRbwOB#bI92mGpP`0%M*u
zc)Rb*+mlW2_yNALGfcxb4~F2c@m-wY-}t3cT7>O-<j`e{x1K#=n8WrO>8U%ZTa8&Q
z^hvN=CX7NF^CaRmh*G&&s5;BA{Fr^jb{;IW{SbT=cKT{V+E}7oQitp)rK$-0%Y~AO
znR95e8W(~0l17!8Wmg{CdNM0L9<QvUwu9U*9~KVNWrNpSTIz-6(6ADzBd-U(*qu#p
zuMau9iOb2UjF|TzohHQqYBii<6?W|>6#B0|ZNY*TM~}-J_z%A?zwSM~5vwcT-v8mv
zKnJvhn*I$Fj^8jL{=d5njz-M?du_)j(cr)IRH3~Wzj~@PX5(kgb-^?Sh>QXg0t$)V
zWX5Q!JR_S}<6<QwyT{%aW3G5t`k+6aPdzhd)3GB!!}M$}MoTTk?7i*n@6LB`pP0Ck
z!74Go)Rw+(mR@<pN$!;44hT~f&<h0nI?=Fa(1&n=fM$8b=0WVP={cYr{fcV{Q3347
z;eHK}TXXKq2CycATR7k_$)kLE6d+vUWe~|A=FSeqj8q6O5fkVe1|DHk%t<B_>*-Zp
zHo&2*U2B7=PLGC7VzDU<yNpySF;yNf#n1;-MyU40zpi@w?!7x=p<ebik<nYjI^@?I
z5t8dF)^Q=|6@gi_yQ~>La?59)z8Tw*1a-yCJ!%@NnyS2Fuj`EmzA2(;3UAfT&Rt79
zJ06YVX_fK3F`VOT2%Fkm>I5<-Iv!}c0pNm_2K0D+dJMujm4XnKmN2r{s}F3=_l#dL
zGUwqueR6F(Tlau)Nam$C$=pSkXZz>xC(2zd`*DX3lps54gAJ3^(Lt8y^rCE@43vCX
zk#$YBVaSv*@5Ip_Ona&jl#58G^txQlOP?RkUGn$AcLW!Uc+x*;YMcP1HfUE5dz<d(
zR8525X8yI*Zbn=+BMd$NBUb7}pqu=EW97eQVA%ifSkcoH77-HClaLjXRuLA_lUJ0J
zmJ?GEp%qtAh6DiKNh(p-mHMmh;tmY}2y*%xe*gbwk|1EU$qy59^NkYsI3KFd2AMps
zMIQjtVzUYxk{jt-wUxn`%Rs~t`{QF~U54y=ukQIy%)^p~LOVBXAbV|%!iHDNx3|XF
z1CI?ChLfxKIVI}ARuLm%x#<z-GY9odovqte$yB88I&F_|O&=PI^oSR&r{t~|h?aG`
zF9iD;P2`#Rr_d0Y7Q0#2-Z8hoHWWMrn!X;dt4JR`NvX4sZ4!(D86i$mLt2A(5;Vmx
z(lOu)cjLn@?4vdPAA^bJiEt8E?73l$96pVUs!Keb43mr!&I24_Pwd%dmB>_!tWEQa
z#<sFbBm3>A+x=%u|BOiq+z1A|oVgPSUk`2#e*qN`S~Ol~cA0{a+&PR#Z?p{A6c{50
z^n~)Hc77T1$5PI8iFZo+aqBgL=NK0SMcQa5!CX5T$hk(U_S|YAMJE~?6TQH_LJF|)
zb=({@cgcfehxPFlOLPhGY<SkjlTIj?$jw1hjmT>@nYT`&`HRhypHrfqY)y;kri$PH
zn0V@gHs;O12LO=k|Boh~oUNT0{`d6Ir1M|<b4lOZy@dl0L)U$_a6wmVZe~KL4O5uF
zbOS!t*1>{cfa_opDZ-sRTztMvQi=h^)GF<6%M4*LlzEfmop8GgBk-3*OoLlmhqcR)
zR$H6SGaFN?aZ}5<ST|jLEn(J(AwNe`NT!!bF6cvOldION$dHDtPlj~wdo;8F5cQ$o
zo6v@K{m=aaQR<E$jS_hEO5S(GSniIl{j06^GcDIx&;!9&M(_@a&3KI^y?5y^PS;n6
z$Kckuwr*HEu*bMwPf0A`Gy072?O1iUBn}33(1UJv5TJg$;&80k>C2-n_bdDMc!28z
zaY>_oYh=C<kAIwyinYkbXurP}%2rlZq7aS|MzW&lHGL!_cuf}C)yXzsVSXO>2Fv0u
z^?pM03MJO3OtaQL{CVCU$fI}m|7{GzvO*l|hwa77fWN>qWy#QNWcs$ex8sl+1UE)#
zv>h_JB>l^&?Wc8Ulh)mWn6x(x4M=|;!x%(E+lIFTPSUAEtKs_a_?HWI>}>7VXttaL
z8!dJ$64c%w7?*c~z@HEd>U5)6I|eEk#%Vg**ORrW;rc<o-6^0r%-?J#Dj2;P1n?f#
z3&8n8^0{|}O}$|3<kt$;8uj7}w7hlWnh(a@0svC-9?-egRlhPShv+Xy_P(}r#dhi2
zE2YiL;nn+;bZIAVum)faQANZC$W1p5^7{C544}gb)%#(K>8|j5QQXS+cD`WYRLQq+
zoPYueb7d1`LZRGW94C742ep8mzI9IE4*Fzk8txDCHWt$Rm+d7Y*9G{Z3n4^h<VjzS
zAh~izbUAs!BI(tM-CR*S!C&Jr5FX(=VtV0bZD(9I__#QQE{vBZPw+ymO@qEAdMh#<
zN6-tHO~51`QHUonkXGZMlZQqOMMU-Qfm^5&rI28A=>{>bLJt?Tf>x-2Xomg(*N$d+
z@vdSSfOrBw9T}-+n?>I46K`I1$q0?Uoa0FYEZ85o;~BukcmPDn1LZ5%j;+hI<%gK-
z1oH#Damf6g7=>5G#Y-s{F&_jEV8ep=?CunJ%t0fuYme>Yw7m@-<Jm`AYk#GWhLe^e
zz-?p`zu?{|GPM^5hzvJk8y9HT75a;}!$XbR4vsBF$9>yx`21@7Je00!t=~B2{OK{<
z`hNMZZtn)^*@WH;oo@ymCLObAjg7U(X!sP%3p@H9E&d(h-{}i@W54@9QzN)lyw&4b
zbZ!kLtfYfm3_x(AZ)z$wSXN9vIG9{{vQ&;Xtn~PfUP#3(CJeafjedIo?VDkxRGzk+
z*gS&%#tpm6jn|BRVDw0SqrN;wD`ufUtwFF-`~`hyHk|0|YBG2K0eDd+EB2<zwMK@2
zXR=ikFf*3J?v(yLFxD4@)rP%qQsi4w&-xfXR_BwUt`i=ww^(h5^YC5s6Sp0BlWZR$
zBi{*2qjGc~NApp%%YO3key&+;uMlhaXvgdiTc&siy?9-D5on;7|F{i)9`@Mi)L*4^
zRX(=ox9kv6y&iZDBiLH{lZQS@ZqV~VgcEwz`Pl=I1W482sZw9H;LCssix&dQ<M1!#
z?MGTBPbf~OFf{Y338Kfy$ngGY(o-jip9WIxF`?sb1-x2(Tf1gf&%a_q@%HFo?x;rJ
zAP;lN4XaTI{E4ev-u7_9BYX<$ToZ}|DQJ7b523kVgm9Q{$@lUD-$EkiJbntHdJd;}
zEl#$0Fsp>*Lu?M{`hk<x$w;++)EADnP3gDVg}lXdN8h3iYTW_dt^vJC?pM>@H@4)B
znOXJoC9iyVM8<hEAI0;lyI?xyB5(f2qJsU-VVNOMeTaeA&<=BQDc1C-ge3`^b9+za
z_+st9Jm16!A~<Y%EYpD_MCWRrylc9N4%pkW{}c&dqXkEZ_QB<e9o7?#wLmU&_JAd*
zb4G&jPn2?E9Au{104o;-CV(RAEGG%li2g`5k|`7Ma?7G*%=Qkck&@ni=fsdR%Ln#i
z#Yt!S<JRqoDi3IC<it%4exbs%rf<x*BQS@_uky#^&zL4uLk0^D#^8N)jml;;WNO7(
zU%JLF_~2f(0WXk7ZR#ZkD!=}2LImi|s3zOg`RW|HGF!v-2-B`ZG5Dx*I`RpDD{i&w
zL)TKrq0KxaRO>3fYeyPSCf8r{K-T(Mb|!Kn3Tl64@GSWd4<vvGFWeYAGqA}wSMz@J
zf#n$@=ckXkT|NLWV{VQ1I+}q6JE_~}$#kBLQ}QGRT5qjt$3VhxT$qpkH*1(YhtCr3
z?EEp;e7|34IjutLvT(jD{S`une)!4usOA+Z7pX9o`Ybd^I<2W47afh9!yHWBZR><A
z-ADDxrHV9gs=etBY3ksLWCBv#EK0IpCiB?x*BLdDTl3Ij^IagyWB!1gc_Q`9RKd|x
z+G?WLH1E2xMFgotArCb<+VrMNkC&Z;KwWGyG5=*q<95e`qF|CV9xB1dYDCu$7!9dN
zVvXWPTK7e&a^tL{SbpUe99PJ^oE+p<cTY#EpxL?e%h>x2<D*J-jzpqW33K;xjCY~A
z3YkDf(Pp9R(!@ko3o??b<Tvfz3EX2dUsvIi7Gm$?@ic9)N-FTw`mzj^a6B(D5DxS9
zrSAA3@p?+LYoBc;*@lhU!U5o>9_Vgp!bw{e3iVgglPUzfh6Kf{iX1JwI{`$V{TYD~
zMZIUdgR#05ylM$uZj{6PIc0rK{!p5sfcBx4li5K}fYrbNE9A-EFl3iX`s*2(RArd;
zE2-*qgoD~(=q7hD5^GS27fhuoU3xFhjRL7bTLhgqoyI+l<Yv+*GR;YMmhK0eItxM4
z!?egr;ZwmfcY1hiA{uQWzKgX|v#y#k_c9m+lzCmD9yL9Z`&)XHwsb^t)Tj>W$+e|Z
zuJ!&yv^K3tY#g6WbE}?<Wh4+egXe~Td~J8%n4*Q&`4RY}?uTS-L@@O1!E#6!u7F^s
zm~N`Wh9z0=CF{{@JsJ^4y2<wzmC2p#`Clfxs4T;|jedY~qA~jZBt|}BsDqg!Mjfq`
z<yrX=G5@{`HfM!whU=9N@2K#0KrD13BBNGzM3PlIy)JT;&_q)I0*hdM_vCxIGM6P@
z>Vbe0hzgDZp$ah}xK+*)K-^)8b*NigI+|E&x>!$r3%#Me0go=D45~~d=_xmErVCXd
zd`zKAZ?;@s3?{QPu_Gv&%L4q67W~co90B?F4{?IZS3Lp^c5sk7;Ohc}?$}J{9@iq)
zr3YjQwi@dSYFHsIIt*_z_p9MHSaQp-igRp~Y<!sQmOb9m43%al{1`(uLc{YEmf|SS
z`3hIK;_a@~wsj0#akbqog_DLQYqkP<m3G&PY9xtGORg*1T50cUnN6GKiGLQI%+U2y
zGl~Lj#t73=bOSPnulm<PDORx1<Svvw@A3sAWR86}6=yY%N-j{c9Xie`$-zqY^X^xO
zU=$P*lIym5%Soy^g7K+W>fhzGSdR14&4E^Gl9~?w_i}NhQ(J#!)soTBA}oGEx0Slm
z2n+X>-R^s}b+O1g>ic0&*AssFIR2m4tk;o4^3U}P>);7&@M-~Z89ltJKz@KBdtL}V
zU{Br+KI^7TmByqKs3ggcp9xF}<Zb!16xH+1>uD;(a>FYHES!{kSG3N&u}D4FM7~hz
z^whkUM9&m$jTto%4yP9H=rh~A!!g!%ab@YVLfKzZaDlbT5pUzQ{s71pT+u<@d2Jf8
zQtsxm1usF%@NP>BX-3DUIzvFZ-+-hCDbRA|^Rx*iI)=b=o9RPsWWA4X<pg{wm%1#S
zXx8z!N{V%(dVBwmv2zL%CFr(v+qP}nwr$(CZQD3)+qP}nw!6=n{%0O0=0425Pgzw_
z8JU$)QIWOx+TR+5{%b^U|1OR+xc7BT-wI^W{Z{X&-wlf<69VnN{uNB&p#;CP0?OUu
z+bwv|$lpU@vN0<5io(s|-UO-NBN{yQhE7-A817HFi?oxF|0zs8r?-a3|LhzO*vOne
zGJ+We^Ry{0IIRWq+2_GOHq@oVK__^S@Tj~2)odj1One*cvXO*|`#c{&^+=u(T@Z(r
zDto;+*D&VL1Nj)s=P4PH+rNHcurCwe3}g3Fupjgn3Wx`ddDQ&xAvtU`JpZjime?zI
zY3As{)gRBlNRoP45+MGnDma9mq7r_ifB7{3;U)TuJ|;!atnGetw^sWRko?=U-K~%3
z$DaP=aU_dhWluQq4i;Rq=i@r+Qugs1<#QqmL9v7aB$Vc^&lqWm8CNcI1pXI(MwMfZ
zWV=uLy^<pv9%nm~Lo>u1bAw5zinVAeeZ-PGk13wQtnWepmC76*;OBU@Cx3*|?fsWX
zWL$5~BrrUM#rNv<W0%n$yNqARe?X2u??Hcd7C>TTBUX)4`MreWLCb9Pxp%>)KILGH
znS{<!3zx%`JDZ0axH@O%Copy$`5(EyD^b(JlY<6xK2o}v7L!Y<%4ui_OV?%b{+fnx
z;PdppymrCpB?v3$;?vT;Ms88x`wJ!9=UsjQ9=}(RmEX$8!D#?+)!`2PoRiHavY+46
zZHJoY(?0=4ue)h@rsC(8pp2$EP(wK06baF%<1<Gpp(rD+LBL`ej|s;pN=16|lP$QV
z3T8hZy~R{KEMaRd=ic8isey}sw;%D?4koj)N4E-fELQA8e`8S%x=e}=src=HYheYH
z>!?UG@tKS}!bha?B!>UdznL83x++jfhjYw}+NQt{2!FxcX6!OdsDGq<+*PWBdqfd6
zloB;kjTxDJDObh&m55dQ$%AlZ_|SfuS5Ph8Etf8e5UvLEO=VQCU#If#g|o{qm{X@T
zkU*qoR<h)}aq;t%_thE)sZ{*8IxHM(&5SaOV-mu*|BfBPC8`|TFFOW;O=Zm6(iofK
z;{fh8`R)DfaijIaIC>qD|J`@#DRutM(3i(N*!knnr~Nw3S7=RrUYhoiS=dFhPymYV
z>7M`Ve8bI?3Za%lxD*o#AGHt+#Gw<ULkd@30sjKN&Cz0<=q%#|H~6j5x4vF3Qg4a)
zK9ivWsd0rpSa9EJYA0^Y<S_lPG@Q}kfA3r5au%^yOyjl7(j%R@O3e^spz`o~aZe!U
zND-Me0$3ve)vb3z0-t^CSWFlduT^KNr#ePIs75RtClC^VQq83ns11|owLQ4bbgPKA
z3`OWVoys|k0-mejDV{($_ssD4uHa<EkG5-;aQkxb1y!kDI4$lM3T2<mt^BlT*;0r5
zRp277Xi^9_y56D~yl|nt@9ujYD+?rHu)S)40TAdkj{pv%9Jp}%nu783h^hc^!LOku
zg-DPFR3t_TbR-w3Sd@ZO<TR5om_Q+FphCw4Jig4fTau9dSkuoG7A9mjnGQ0A!39OB
zk5kN`0(G%Etn&8Q>7*X?`WsM$<V=C5cA^_?38Od1I1z>pbS%0M3ZVfCj<8(}h0p{6
zL)<DpxjZH?%5K)l#Zj@D+7`FMAZj(eC1!;|+yVmb!j=j^8l^?tLWP-dOzZz+)I~R;
zkk&!^f7<}XB9uVEVYW!Y-`TmSPRNN9_Pmi|DiNwf!Qh4>P=*YbD@%CQ#}JcZ!qX$_
z>bhSg>&-?wjS}105{*kDuNpqHn(KxeK4=E#o<q8C_DsSW4wUbcMa@>oqIs6tZ&_vF
z6bYkw@+yLeeMI?}df*Czgpt6XLl7}U@EG))>=rG}mXL%&H<STgRKgMmBVvf)QDBQj
z3LXbW8IlkH1&;%x4wW-Rs1+Ju;O1gokfs*Q_%+jQj?7oalFcNoCq84E-W3>tgcZ+G
z$Ty<}O9&>F*Y-oeI6?mMY61y0h0Y<8jCD%Y?Pc7f@1Pw>LI12&Y!lI1&9dZGA2=9D
zV7Uy$P78wvUKxOZWrjbCAYvr>iHIWv5?+YAfc#Dd3(2soYH62yNG`3}lx~sO86~r@
zxOS7+IYsXn5@y0l{6F_<-v00BVG%)X=tNm0UPMT>w`TnGw?ALJGHTEl?Bqsd1c~YY
zQ&pQr0Tf)_sdBFNy9mXXm%obu5nmftD^zCrW~;5HZ`PAH=p|9L;JG*76Q!Vq``hO!
z;J1(PV%2{JAn_FV9Zm2U(2!R*cNY!$uIEEUyJ4$$RY#73E!NH@3w@+?0d}Js0ky!a
z=~S%oUj=b=|DWG)Ar;~m4VE-<rW8on?P9szlT;&1rAle%40R*v0@6`H!T5sKXSubc
z3p;zHjdF!u<;+Y~bLT`*<=WL^HWDhl5QHU0wwGYZ;5;l9khsA)m?|z9qDl(PY>N+_
zih?53vXMlPlsH;oLDL>VqNo9apz6+LRU0j;%1R9%DA>lk!dJc1mXe_8-O#E50%=ZC
z!D=fPIXV^0PI5HY)@7c~vf=hBd1jSc+asU#>^M^*>bE-Leh^}!i3H4G08p?5ldBVs
zyp{oiWT_k+(vjRV@A_-R3pmM>b2Wquyvq}{HiT=}Uh&73`hBC9t913biZ+xI%>>??
zHwdyuW#c0r&ER8;HmqxBU)5Gn2^v4E0ol&*O6{4+B>TlriF+hjy^3ruSVn)+HG7XZ
zL!jt#(PpT5?rm2%`)=Zu{Nc?JkvUEo%tnE99y3+Ggt)=@EhYraAb}}Nx7mEB<<T<t
z$_{Wp0gU2k!VWV6MhGAUjMWW2LwWGH6j7RmY5)T6ui~jtHBit61QjMy4HRqvaU2@C
zr3M&7M4W(L1_?&EaQRYFctbv3AVN!FIAJgR_Z_tI?@#!+KnyG1MCNTa@rPs}S;;#u
zIKfb<m8UIQwSrUn5NM<dQ>g+HP7<Plt$~7(gep)YGmVA#KL<)MmoUlNVEn8?>J`I<
zg&_rMl_a4!hUKYLl7!+IRwYtO5|BlD6&rS!E<)(cV!kk_XCNdHnU9Kks=#t0cbUcz
z<O%x_Fhq057=<GWh6tXe4Cp7Roc#okGNyD<$2&y-X{lh0t_qpbH><qOnq-SHo#<Fa
ziys^E8#|T_P4Le_;HL5NV3K><-wPlcXAZI_$8eX^6`atK+NF?@6@?~rCHm*DZOe)2
z0tu(2tr+1j7FWf5ohTWKYhYbB)wjb@FdDmy9RsKsNNQrkFu-As_7y#5{~RcM{#DtW
zLFFOMMYxbJ+0h9kyb4)1!eKDUP0)$~4s+QP_T497h=3t|D4X1Mixbp6E&QqI9HC<{
zv8If5h7WWcSNJvS)PHMSO<iUm2IaQ2Qrbg6$4FW(b~e>BkWfmVP4x_1NItcCp;ZDT
znvuQKE(SXK#C2y+y-v9ya}|{dBJ3D6JVa&GjhQS_4Rq9Qe|3QSOw2)W^?KI*kwQwg
z^*^DhE1m*_DmGyOENplo*a=4_z<SXn8wV7@0>#3P1`^RNC<($5Fp&n&#gzjrtX^;u
zgd<>gy~9<wiH~|}>uf5-qKqP_94h3p1c|t8E|<dsEbJ_)C5^ny>P#cKJT7w6yj%>2
z5xH#KsEL0jHhC~M{V*S&U8DP6vdg<0oYAgYy3S+gX6-oJ&x8m2y~vgPo77!Q?HMSJ
z+p6pk2O<_wQ8znw!U<gNfvt!813+X;#ro%WC|?k*CB>dZ0qEgL{y*<mYjxMFx&HpH
zMWFvyIoKcczhV8HW4ay+kKNgJ_uG~t@0cOe53MuRZsEW6+H1xP&>+%Qn18V&h-Lbs
zE=Di-avAu;k!N%X?;xXjIt*_3hvvxiLlB(o>(qWl%I$kJ>(Kv%s(oYP8)lvYUbd+B
zz1}&k5Byq22i|c#{Q6%2R-B)}=-&lDZQT@fAEe6wxIl#>2PwW<vwc5VH5@-#rMz|G
z91yATi?*H2-WjFG$jKjZRdSX&W4OZ!&+gxgb5aqdpKQtBeRa+_NI(ls7yA#HD(YGG
zf}DVkq%`{O<x+ACJprXC0r7^EJD{3(fq|&@)f9s+Bti|!!B8_+x0FMM$`@Enjx4M;
zSoRu!dqGK1F;DK91e%4Eb(*CB;AS@9$%t1HGp`0&_GF%{$3U^bZp6)K1ebn*rEkXo
zU7*Lwn14H$x6I1OJ8W~}t7kj1#LLGYh$yKRNxJ>SFBm}3^>TG4B&~cfn)t3;;x(oL
zz?&5zvdZaj7M55d$1be_<qc9`fj5A1;8t1SOrtTZm@ROW(*CEm+p#-C%c~NZ;?j8(
zID<-N`79QkriS2S@3OYGES5N`_la8VR$4oi3WGt!Q_3J&3sBjRy+oA+dK#%ZAhMgR
zpz?8#yNSCiFaFDM^+NjB)9Y}9*?exhgPZy7wg%5f2N+0MBwiTI;S)qrd@z=l2}xjl
zO<0*coC^&PgN=20;2t3{vLH?@qD&5&SI7qKSK_(CSuhrfo5V)=Y|sE4WEPCa=4R2a
zGCwqCUA_M?i&xHM>Kf!5siR)DnGTT@RN_j7v1PKw(ok9HA;i)?;G9%wA;YsO+*H_V
zv56<Mflk#Ki0Yw5A;MixBp+RI1-^RrfCvnmT2n?~*z|%z0%HBztPl}m0Gp4doQ_a^
zencE*MloyOISkL4c)n)v9ciLvvqt-;L!=M+XpR)zLaYBYt1)Iq)eJHXIEq%y3~CiT
zsz%5R3JoR-cF25lz#nSpRt6T=tuqJVKnRm@U{h!yFk@7fjuAz`aWF774C8EL1WOqZ
z^IzmNw%+hD3BtiRbY{P!P!MVq2KuIHBZAPP9!lnFP{IQv#h@YrQ&?4~Ofq1Lj=&aq
z2FyD1&7U*;3=EBfjj!{d3KA%_j8~N!=+f7m){N6L+Y>_AQ-s#G9Y7^XN}Ib*;NsR4
z3p*{%sKAM^0omXLsar#br3owZWGuvii)NkZ;<axWF)Wbg(+DhKk$2X!WdtG>pi<sy
zFhanzn@CmwNVJHGxEf>*i-Zg2qEmAQIKn?8!7yONC?fiNEJOpsWWh0Eq$m;zq#9Br
z7{~hn#*h5nc@>=ihZA_3I9)=Q&q5?es2=xp)tKOf)i+!UXFj0;yMf$iY#7gRciu{P
z#X`52A|T9;Y+EBT9tNXzE{w>SIT_u#(;=c~-LmA&i3^UmxO-$JJ_zPy4q~~%t<hf7
ztp_aJKpTl-Y~lMk!=6Kuo-m!$xU;Ly=QCnZM{s2ijOR@59DQ>IYlbK}yg8p^hhN|9
zl*gzXavhf{bAMxKx<E2Ud8rg2ibgRf6%=&qR$nYN0P0p3BsC0j>n3Yz9J!V?V8T>6
zlYrp_4rPdeCZ-;R0zPdV1?lG?JV>C67h@RrDXaHG5!H_erht(=jmMkR06{Q?NU4`h
zXcYtj>0=m+pcVr}CebSY06;K;RN0DsxI<*HFb7dM_Vj;*J^CMCn*m8V+yg_B4Fr+|
z=-NDc5kMMXZUv5_Br!hXV<}3^ScqLj0gZec^%YY?sk}v(RaR0cxiUQ7R~Aa34vwEq
z@C;Oj^r9z729ZMf$|HopB|3#hp#O=UVAbpYhLZKi8$mKxI0q>Qq0D=uz?z}XyGO;M
zKv6WEMZQE(jS6(Mk-(6vgosLj3NFe-)WQu?wBE$~_8{bqGH4hg(3#l+?x%)?2(}1v
z9oZHbplE`KOf-f}6OKVKo&hot`<47bs-@KjOOZBW+ftph<I+&=WMI1S?PQ1|%P1Y5
ziWs&heo7r<v@7g=V_StqyfyhTFjedvQbIb4Ux5=RZ_wggQJjdJs{?@qNm(L(#sWO7
zOKv|TV)hsMEx(rOswF`7CwV=(rA(rxHzRi>Rvg|qk?*zRMOsuH2*ow3dlHUq+O+>E
zx>nP3a%#n{;eq^GfdoF0f#6>K0K)EA&O`KFp;fY43+Vhbqie7i(Dvm{U-#^8wrBrj
zb4}U1_GjNH68K4vp#u=c$%D2WyE1luF@+;}@qi5{VHIt^8RDI}*F5TlX*?59p||KS
zd`;Ey$gK94=uaFW!bQ~o_b1?J%9KoOd@y>>+T;h8kR+I4WXMi$oJfXn?dub^Y9>Mc
zR}P8F6W=*pPjPJ#AbD*E&B_LF#-HY}sW5>B)w%Q-8;|8BUq+`DZTPlX4slEu%|$rh
z;V0obk7*zSFecp-3zetP*r3Ylv!PRTQ;KNz1><7z1;H}DK36SZa9~C0>IOsy1aKW*
zrwB>V+ap(RI2i!4MFw454|w}rE`|%g7n3wLE4R3eC!8$%MRIv{AnIo`43Tx4RBp1=
zQ*3El4-zW4={ECc)6&!S4O6G^#UP>C*O@JkXNyqcSsB%4E0=GD?Gr!VEA}lJ`m<{;
zTZ&WPE?Sh$TZ1loV{)}rb7ywS=E1{XmB!!lFK<^jHGbp6yUAK%++Pmg)O_<NQMEMp
zuD)F}{xnh5ZL?Pge|;J?utE(qe$o>2ZtJCgNkRH`;YA1UZ5J0)MHiBMUd#{AyBFeY
z?p`*Vx-#*zVn>l3OMT9T!5Y%eGYb<8__A4fl~qI5UQJycJ%r8+-QBdc-Vh=Z1XR$r
zb(m*ocaP2$Ta6libZJ6uAR(JKTi<n-eh*($3mzV9L|s1`-^r-*`E=;5Bubl<fC#Rg
zQx{KX9}Y?C0FHgJ!}@8jp$J0(D;$IOopF<9-awE)T(O~kmM|TA2VECc$xTIVDZQ?J
zL+%?ZJ44sToBAHKhGXF&EAixEhaCJ|bL7VvyZUL=&e^7n+GthH@<0N(OW#IG@o~<*
zZ+Z{SRA_4>uBFd(grF>+D>3<d8B@$p@0|GAY9CcaM+LOJX}p_3nu9Sed30IRv;2m9
z1#f>X>#g~ipFHjOzD||9{khh?|1JBQ^}=uWp}*vVx84+3tKY2%r456)(G+#aH<{>2
z%)Qun@t$YT8T|ZcYltxukZj5kBwF$yqLzY#zr01A=>2HBf~(i=I0w-l<m0ULH!SdA
z-mO1<x!_#87i|Xq^d4OstWkO!|C4hl^3|}&h)Rl~R;6(!Che<pg#Rfu-e}j%!aXX5
z?c!Z}`rH4q>E5}^5nC6r3%Pbe0WuqZI^dzeUAords@Z}?s+F1(l%`yg_EWPt8MaLF
zcFD1rmqk|f@sr2S{<;bSKJzxJZs%eicJf`y`+<vIk~_I!!uO?7ec4t1w?Ky$f5vNN
z-hFTS)<bKxrmU*+Ww|*ot?GJ@R{C>6=grU%gu)*G_q<laM`NeA-0$<7p>Ni&w^v8E
zcm4BoFvjQSd!lq{qpWLe(XX}F?ni;y+5a2-|K(zw5^>bH{!(6gVgE<E2WL}LlmEZ&
zVMp!m7qf-%bK7^A<}(iO;g$@vGY<!Bk{KCEkwh*f*;D9X8X4CySxC6x*i-oL>z0Bu
zZl`%C$`^x-1VMJU$NMgktHOITNZH}VNVl>pGw{iL&hPW#dt(DS!VD=WlqTffK;x3%
z#HwF2E0eAYj>8j<kW>X>QY!6@>52fs(32`vl$2QmEt6(|Curh|l%sSanCyPP7?@#E
zI)mJrqB+o%6mo1@1yngzIssp)gW(U9#EVa2Rj~wVbxNk@Jy<EAWHQk6FbPJE!Ml;H
z!h0|gZN`}HDRgUQ)pMgrvy5t~N^*%J)|0dZ%*jlQrV4%6&WhE_Liz93FOKf6(^aW0
zaVay?GwxtVt*Yzn)X~cbH<X$#=ZIQ&62yaX<%FjpHAE)8gvr|B)+Di3-pY7tbKPlf
zUE#J~CMu?yh%go+E3=%4a!r7=(#;lWvY<;(OV&BJqC(2{hmE8pB$VcC5@WkTwBk-R
z447G3#x`@-xkqUP*GtnRDv3&{pu2;G-qL4vqev|<&yJ&nYiQimR3UB$RY;cXQ*U#p
zK?xFse%qU+S=Zht&I6>0*81eeX|T{Tue^h1f|%njfL_tk`7+9c4w9%L9POZODXl;#
z9<jGHwk!+IK-iRMLW`zM5Dl|d(h2b<)0+4qk5+kl^r^-n*dPj;^+rm525QFA0c)>7
zYdl3~Oht4{F=<cq#z(cFa|TZwm`(r$eW3=KssDii#?B-ErGOoXJPu3{B5n_y{k|yS
z?T`WjwA=d(B8Hc%kW|R=8?k<EC;<{MqrWa3PaI+x2ABU(raADd7X7Wme*;VekU!#n
zqWu&xOjHotlL6?H2RR73-K>DSKVL51n+Ho%2%YD#VjC1OqySlLJC>I`#1ID#*l<BY
zDIa>x`JMIZ2zbhu2Ie~K12H1-$P+vAy{)KzEFpL4i6(|N5bBG^#7;!1l^DH8$Vd-+
zIH4m4?3z^=RgS}oy*}s%%@~0WNo%jejZSgxfgNWc*5N2Y7g_yTV3-&2fg%n=2TV{O
z0c8;S*GwZAv92FFgq0etI#!fuEKMB61uETfI~uet&ynBA5CfhV@0}ck1;TCth2+Y>
zZSNENU5)ux8X*oM{k#6P?ZB<yfscf{#v0C(aGsaF5%zbYsta@Hi5mACC1doNcT8Ha
z5a(&oZb4lmprH4ik2TDVSjN=&LlT<2J}xF(ZtQ{j0ZV-cBE68K%mg0JdO^@aNDbT;
z+jq-5PYSXRsf?k3&Yv_m(4)Uzr&kF0O%+tfyDYO+L^J8@dVZE(&TSn>!n`-rel3Ko
zMhwGw^xX~k>(6CQCmQN!DKEoXTD9n6YYA3T0StI$(LS0B{?dL7jWqlHyaDkw!ZsLI
zQguM%Eq?G-na#MCp}FElbsUqfj_xA4CvsRGesQ?i+>n#xjUYD+jITidkjUAdYmR5O
zN8`dJIf^biuMM5sEbfJIvv8Ad6EVb#2!r6|Xr9GPT53DZdJ<G={}TRl%*;b?S2rH;
zH+Oh7vcHLn9mRX1F9NJ-fr#Qbx&rVfQ7QNQ)~g*`pXKMX*oG>k>!6`>4QC0g4y0k6
z$UZx>*GJ6E=>^3LFCV-X)9B1^RSDrX_*plu)2i{VY4j>c3X{M&nh?N)H@KjoERa!a
ze>Rh!+G?%o^7d5&k=s)z=T5z6l?y+akXp&+WzMH*%ufEP$?4ooKeyd5ee4^%ZScG}
zt^&)W`Zn3f9$dRpX6;jKvxP@m-E1JwE#6bbr+O*F!5%k#;MM6(Xw-(_XIY%v@zWZ0
zadP|n)OSIm7f<3BpW$D4)~qqx7xa{3^247XGdEZ&c-yVd$NSu2>s@>2|6kOLSsDAO
zFTXsEaC86w%Ku)yXz%Q7qwnJR-w?b~GyZoebHFd{2m!X<BDyxWdA;Y=t1W<rIkL9#
zIQdw|nIj;9bn{e=ti?<6NO#-6kC0TeQS_r3>{=wpJnY!POv3T=6{<(HR01Az>lW(y
z@9F95*c*Erf02QBVz$!l7n_#Zp*j}oI7M{s_#-4!5{Rb~p*Y@*<*UpQBt}xJ4Vq%!
z5=JUdDJB({S&~$U-qff%>-*&lNCCNGp|6L44odlSMYHm?MjRVWK}4?z3oXJC1=1Ib
zAz?hl=WJ9ilU{a3tO%jFk!}b;ct9DrB@`Y>Ma)K8BrZO?Z3hK&Jz7)u_<AQz2EY$Y
zXz215s%X|fSFWGGKVKsKIFCG;5jNa4DWxwiWL-x20DL{2oo3h>&tSX;#&NudbOqFV
zWCKe`U&jZRSb+(STqNMWc%-H>3wubd=AwKXKZP+;*%1j8vXeS~b?4H8%yD{|b@TY@
zYbj$kzyw^CYel(AM2~N&s4AI`I!5oaHJ8qDcRmO#MM^hm$ot;c1+(HUUxDVFZ)YrS
zYS7o1fO+u+=4uMkqw}?x`^<lVdO}9~Gd9{)+XcY+_wrzmk!&&fe;~b3GXh)siFrNZ
zaUK5H{$S5x*GM1nG4o8ixnHM`-e|<HKXrYVwCK?M3z5g8-Q&{C{&zIc6@PSOa@xtp
zmQyQ_K|f1rZn|ZjS4EK}&_fAFnYsa}`X_`7{q#F+JgUF#{)~i?FWzvg86&jKlM(8U
zY?LCjX&a-&c{)MynNe75f!vW(>WGGI%(EqO-jP>DlY5rkc%bPRuf#ctia30?c#7g1
zCzORlk|b7yY|cEBdPS`0N~HP(vLJS0gTEfr=e9w$8N_2D436h~ELUtq8hgm>-qpZM
zcUpbjv5oj&V-EbCDJ{jy==V!mw)`+7+IuymKdb?DtIn7`=oEeFKXjvyzfi4KLz&3<
z-f4#Uz`d^U(J&_mv$mqO7xa<g|2l$PuUkH)&%xVnZNRvJrK?1v@$;!`^PF*<pq6ev
zjAlZf2dAA_3u)=!QdP2Wfcg_HP7!j;)^e(m!H&v-Aj>mtIh}Q<0XxyV30@ijIvsKi
z#;wGPnuER8b>IrLCyQKX1kEy={5)!=U^kYmDyz5~6AD~s=grR(O1QHmVScl+tB-=p
z8{7uG{b;Lkid5G}U^>sy{;)39w5P#oi}ug+22=F!lKjY`6+G+8964jUv6sbd{R6?=
zeSc~cZCt`sxR@1uQeCmIo+N%vI%wgc&t@C+jN9OgMqh^p8D3PnlOI2X?L7#}Pk{yp
zEXO>{mwk)s;0s3s>|wOVsi5;lh19gmPlkHqC7L?P6s@bkxulEQ4;Vvv?7Y)ftRh0z
zfRxq{Nc8zm!<P0k^h^{%1klFv6jY}fHlnHpBMkSten6B8DWu~vE;c@ENtS0@48sQ%
zDoma=eTr!B4#eN0Py0(kc(#{_DX;qQq^DeaXf7Q)vMyFj-QvczlKu9*g7s1iaF=PT
z;cZJ6>`I{QTa|FLARcOD;>&M3_0^`L&ok4hV+qBnLE!XOcaSx)@)|fUU9rEGB>F@@
z#FNafHANYZuv^$CV4sS3V)-gH(zMO=-#&l?+q7HIC-U(4Euc+E-o>(5bkAzZQJ6+C
z&G&`1Q0h%jkZgBbX~pr{91;3YPu{-hGegwX=BOaF&T6U;wokRyO3>YIX=R-z7E~w7
zP*)0w!YgADJs}qbO1tLm)1j=wtJ(_y)f;X%(>_FSG_#-lviVr7`bXo}`PP(T(N}=r
z-#(LU(NkrHe9kQ^#AXbgL6Kjpf4TVCtm@&zOQm}1&QtLHRNeFyvWM@>z$YCDKoL1q
z&)VKmjh_e*+8kln1aBpqp4ny#O~P6b<1pnrp__g(cb1s#4o;y^co@F0h$oaN6MI<-
zmT|?K4iyJHs61u3om`cAgT@@V4euf&i#J@Vf={fWGErF>>@R1-<q{!W?pc91uktyu
z?X}}jSQHcU>QqQ*xDdW@@f~JhvLpxMMUq|CtrhkNhif3yGqRd5$I?KA_Ve)kf1bpi
zr}h?Z%H;Fy>})Cj&ZTynSkUx0(#6z)^h&i^>bY)q-RXYahvGnMzAVp{@PJOHwX3yZ
zD!U?HMF5co*{{rTH<v1EoT}`2W$}~Q<c4k(bkd(p01ij=7T4d+W1s?+WO|r2bVh*A
zp%O{z^?9oQXixrA)KGaVt8XX_8j#OuI|>_;7-8}N8!5_E;+02u%<LR4DaS+lwi5|k
zWSA<@D`MD6^PY_U&Nbmk4c@F+5IFEJ1%QlWBaJ@}r4@MGeP3g$8yog3`w-a~XTwwW
z!+0c{J9q*2vM4}~U!}Lq(q8|^ws;AT^)0hE35wtTntJq&|Ns6gdGlLSll{u~X`uf{
ze31VEqbgTz?>`7Zzd3!!Li&JCfMm9cD?J3`OBObT3%pm9l8KTBEF)^StVYX!U$Y;9
zMq@5Yi3pP)UwmJ;KKPlkycvVPrW^x!N}$nIRqpn?v*>pRbfW7}({Ep}*HC|<i9x57
zO1cyHXqsT`SOo`ZrD*aPUL_^0Z8btVhA}32MuAl1$*j{1s)LKrII`XW_&p)R?;$wV
z6{MEAs7#TN(thDoAwqytgoogX4Gi%JRHchr-KmzMg$&?+bwWVlAn4+>qVQOn(YC$S
zt9x%(bYz~I30l*|RO`MK803C{1&iG(l!W}#W~!<mIZg>oPo579))Gx@xcsW&G5gGO
zT?UY(x&1R<AC|t@*LP`Ebpx^PfG8%Mn~t$-4iG^SCMC=I@cF1{oH1&|??<`@cum7k
z%Zh)*7Ad7KgH;TlF(g2@a7ml?SfbV#vIpTS?Th+;cwT+|g)*f=4R!GAmkc|C9-57(
z#st*aD4#5t;y4ZtBAJbJg#KAN`5vwT3KLKwU<0yySlN=t4c$Z>T_nE*czRk8idC|<
z62A1y8>$sz`&B5fegY?nu(tLqtvDE%{dFuCqBSh|DjTu7rl1l57aT_SOtDN`X}Mx*
zin7LE1Vq;1DB#L(HFjMnxLSw~k3tmPDR)M7eMT;n{@QlsD9EjzU2GXP()b)RoXIv*
zp+q~s^oqfxGM~*#dpPHzM5uH?{31sfDq5l$`&ZPGJ~9Av|KVz)IQi^4&6G|lo%6OW
zh!+=;eI2xj$^(CW;AcFLE3o#Sv4l0x0?KvU$z7M(+m3Qeeaq8v9H(7{^QOJ35Tid|
z>JOHdqn6f1KVbD`+twW%&)}~&jqd!jfl&DcY`GDpX5YamGsQpivPt|E!DV1nKCU)X
z!&}ev+HX~_x0MN6X-uYs9b$_?R`|q{K9@P3tp8F__9xPI+T23CwU7-`Sx#Js!j@FH
zI8F;Q8F)R8K_o$(!)B-wW+TuRo~#hpI~-Z#r&SRSW@Xzdu%i}y6YqYYhAZ~ABe9iA
z8_RpKsAPNw@6x<#ZU=#jJh}enEA>kB`tIVU>gVUbL@XdEWCq55DTNwv|D!rCXQ%&W
zV;if!Wp^ln;Cn_bH6aXON@&vf#89nvczCS=OvbcfaaOUi9(xgMsl8(hp*7QI-$EZi
zPvV#Y?aIlg>e_kz+(mmnND>8~1da{+<{ms?|9(WxV~;^&M3y#%$un`Te`<+A>V+)1
z60C?3WQ~N<F2mSi><1qRvl`<qLvboh<U=NyKM;}$y*cWU3a;ns1;Aef()tWQw3t9)
z=I|Uwt?`rq=>4Qo9SD72Xp7@S#RKMD%TDP5mmKV&BG9~u5=<F31`ZsGFJl75)<mAx
z)C`p!g%oMQr>^y=TId<_fmF`siCts-QnR;r_tpbptw41x%5-in`O}@VD`qbYbJwP|
z<`XMgchJR}rA4RNDSzyJg*876O0CVP=3#iq{7xKxd)C(@QSF`0FK-b|Zql8DXm03)
zc$ZPpJV%VI-6%;H6xGlkT4-I$@}fuou6`IalpL-hj!C<3Ees9uaLAx|+BLGvk_=Q!
zrhbnv#&GcDT2%ti$XqZ^Dfp2w2^{XRyv0z+A_k<l8zyyL+sl`bicy-@@RR=ZhGYBw
zp-ySNZq-t{T6Cjf^1+k!O%Ofy+R?Y<A+M4`^03Rl)3g^lqW4Ea9ei1P4(3iI^ve{h
z^4pP}h5$#!dKm;6vRfGu9|k*S_8ysMn2QQaAteBIU38m1y(KNCWsY{9_U|Q3Hn!U{
zJKMD>kCs-M9jmz+yCP<l*199ndce_ry$){R;TB18)&V3d#7QBlF`uVtcxfr2bXG_f
zi(9h;m*~_YQT?}HXPS*6h}2N`w8-JcS|TUaJ^(5o2!b-*lJhprR+IsBs*l}zXbgP}
zv4aDG_~JY-tYE!w*ES~3g(8sVwBujTSG!O~ot(KO=-Mg5Hcwn`vX87InHjI^;-A5t
z_%8P;hmEg(U_{B%MO#ZXWcYe_J`6U?z15WP_VSrUl=dfm(7Xtj+KQ~Q)nsc~vANY{
zw{d{JTPh)5MVJh-D&b2jGb^4TJIyj<4z6hPE9_l{<GN{^Couw<62sqYmy#xA(!upi
zWHhlI$%1gw9Rrq664EPeQwD=PQwlpJ*VgQ^!(@A?v$RYq)qQ7F*e6@6!c%HE>bxmQ
z**7DHvS26@CU?G(D#g37UfDQR%Mqamdyi9;41fHb>=1swZ`u`|PCND1LI(Vl8(H+n
z(zI9WcoA=tfdi$(bwVa@*jMKsk44ilz3bU_7X5bqy@Qwy7n#(knYM}OwyLfu{eF(@
zDHH5W<82ik&(_CF$t6_I;ETf4V43LYC$6sK=c$3t`h3GlS|PLYuj*STfpX2Qbd`V9
z-FR;~hrTG2S2ma4wamJQ#!utC*YRrh!^n!iG_xz)Wo91^&}8>%x|D;P5Bszy$t5wP
z2U}UP?IudV>QZRLB${Q2fqVbGox(cz>myBiPn(o4?q0MkJl#-nA2S9LmNyABvq!st
zp;BpG6?UR4st%+si>k5#vyFeU5-Ugy3H9_W9-4Rq7&FoK82PLy3tN&5-!wMcU|OU*
zf%*91ugEUdePwrhmbxbLoFZt1-}W?FMvP0akkv&?XLh)=p_Ki~HP&7+-<abOPByrL
zmZ$Sp!x`~+88Ddp8$9~%r$4U#OMKn;+Q!{~#km?H!=LW`;xuc0{zqFCLuWfim;ZlU
z_lDQfd5fcQ?}u8!aYaOlve(RQ*Dj|`wUL&5vw@UfdqQqkkxD9vMvg*BT8Yn%?BCA|
zU;qK6RLarB>}@qwxF{QzZ^6Pj*#6IIoJHi4#RtY$+mi|oE)GsN7Z=C39?Y2%Od3;n
zM+bts<8yLOabc6xnPSd$q#QzowM{~Vb>{fHoZK4#;$i1KIg`w>O7&nxjHp!s<a?^c
z{t!CUy{NN%MErsjO}99rScL{D(nGN`KO!@Kf)Jm~F%zmE1=)fT=DQw8;^D6RS%^-7
zq6C>9MWN#*U_JQ$l(-0}K0;E0?z3FiPj;<enn)E!z3dN3?9T($3$X=0H2sL%6N@fc
z-P_yU-Q63}KA~h#4@K|Jnb=oUZjWat1b~mfx%pZ?;1csg?H1>iUOX53&(Oj7&TMT!
zxF1FI+(9V5T+oV26uTrB=%1dC{G0H~C11{{q@pNyJtVwCY9IEYS#b6K{h5*TW8b?&
z8<(fsLU$*xp9d=r00<>1u*Dz8^`6@!XHkQ{p)W614!j^7m~uZGv$KBE1n@+uf8gm;
zD?Jy{2u4>(bVryF^*B(QR5=7Q$+URZyD(zOrVLW|_i#TFCOJ^(<@6)+-Q7_AOiBbO
zkQhGa1rK6p_uk~gdj#_#I-bcKNfsrla3Qf>XXS>O9)<g9%^aHnj3w~X4LlVwcnU*h
zL3?0&2s~_v95Z29f)<!!vH8B2P+~_xJS3R6YsmU6%}4?of(}S3(94Fo>WK<5*)L$b
z(qneXp@|KTxkVBXTkPH~&uLARzwhD{@M*)^(1Vj_L+c|5r?(B<-H*!-`2}Op?D{i4
zlNV0uFdVR#G35+a3~2ls@t)6~7>yDEVV?Y(|6<M5l?)W>Xt$bRyC?Fu6!^PE)CdU*
zvOENtEBJu!n}v3v*zm@XdIT%@6kRm$`R-11pp<|xfX?Nk;Y|C&IKkVeZcBp<>{Uh2
z)^C*?u3@Q}KqW*gX4Q)FT)xgtj>k9QM?Y4j!~uPKtl;YEzR`IP?S|WR!MtA1Kip>n
zO~54pk2U@MijL0u)3qGz@DM7cF4mxJY1(q4YMB3T(MXsW-$(=4pT~6neC77+uL+%>
zR$%Dlh=$xlO@mMK`_C$MjClFY;*&9B`T!FksSFT(8i4Q8Pu<(jUrTrSZ&f82mRP+i
z4;o@|U{)kjQx{AuA^+FcR~WXawnBw4gwp|M;4jYjc$XT7&0M68H@=XlDUPgKg6T)0
zDd#|bi2itIVTD-BaJ}^@qDY?oyd7bCGCacbuD8LIB2E>dRfI!M0gzi$GGl{57GhmM
zp9tm&EY6QP`Z7c#l|d_L|J-@929clO>3N$L6dzi;Ke#xBmThVVq-B;GK2d!#$9o0{
zKXd<730rOqlR=VfvK-q{$VaIHWFy#FJnYVDy`4Ow;XMy=5j+*S0g(RPF=eqnI><KE
z=^wMKRo`u^IFs_Gmq}lCbjE&G)Bn(CQ2ng|nR@*)-+5vs-aElqEyR!=g)QlwXh%}U
zt90T~JD~b1n*G9$wd!60_A*Z*mYKesGlBVcQaI1movQ=ycmCSu6q{Onzx5Q|22~}x
z{ThOaIpXv>A~Z?Sb(@zDxBC`ut8qMylqm+r`5cUVDnd5%C=GGU&zetVJOpL125~TE
zegJ+CH|zD&){2S}8Qz<vjhxH=sc%e}aCMNssIJ;oSw>IMn*4=6jnwD;Q1=#seaQJN
zHBvrRG3RQr<F&m$*Le=7D?`|=5#J0Zmr;@z<mAktBBmn^$0|V={Ljuvr|C8v^GF@0
ziOssL7VfVr@lIWFlq_?ban4UI*+X4PSS)1Kl6&y3W%{DNwX+(`TE_I6xe-dI#l#31
zH>7bv0j7AtCZFO6tTjm`hC@76`Duxz2`VC5#shTWc{0Sed=gb&9V|{1n6yF6z(8BP
zBs~BZU5{pHM9(%+SyT3asrx(Jq3Hrp18!PF${+9{_Z{mXJ}O~<G<UuF#)yyVV+R{)
ztYjAxfrS`kH>QMSlwpZN4Cx0XPOnT$`d9|>@Xvdo%D3XbxhpXaga8Cpi|-P`>{*9$
zqmbjHnaIkeuPHI>Cbu#Xlvurki)`ZFpqM2Tvq%eQoSfinZ&z9$?Ns+rT(MNn4z^g}
z*^q8-ihx>eWt}(sAIx*?+Z98S*`jqs11>#glZ4Q_JVyxY_Dn-9C0J`!N6?4${??{D
z=M-W3eOrzXFF=fOb{v11vP-KwJKJ;)$)YLrj@h|W$j5KvH9gTucQQbCZGp0$?Y0IV
z<2r7jVU}&8!2(#fIxa8h*e5B<K*$T;t0mGI+K6vtIw{)+e!aZ-s-8zvm3DD~9E0K5
zhz&T%CX=8_qq;4Sb3d3eRt+mHG`AO5w`vDfXR6}0x5#=oy&nJc65I*=1ht8Axbf@g
z0Ybxqk3^w=C~)eqT-j7-2!Yz5_blxyd;{IALKM*qpA`euuM`8l6@<n|rBq<>QwjE{
zef<Ea*`i53hxILEgDbsL!u-ulGVkg6g=vZfC-=F?hsU~9e~-@*83*mY&2F|60|K|{
zf`YOsZ$dABiyaAsGvF3Ua&%t3gzvQNTwVV4%9!?d@^2=-+GwA4y|4aGVSGX(VhF1O
za8DrRNFlMW`IBqdv5m3mv1VF1)6I+53{N!;$8~wg7E8IhzV@=x!*h|haz4rAYooZq
z_{!5RWPPnueTVs{^-|rKR8jrab{iOGVoP=!*r7z&V%0?t{MPSk0-!;C+>n}RQpu>&
z&f)J1(m`wy_pY@OPP%p021RVF-1DCchb~r*?TGdyVcs3M*($N**&5i{omaK33+;?m
z>;lDJ*&VLIO7J1&h%eJEL1i{%8SEXG@Tgm)gP}8oQ->ZLU0=TFoG^LBg%0^I56(1g
z!S|s7tdJry%_tyiZ1MToFf1|YQIhQk#TJPb3d*PSBWGy%0bS0cBKi`eXhj`CQL<=Q
zy`zqk1BM7zqEDv7Ry1YYLk%Zu-JLoDuBAOPuiiqgwT}U)T)yD-Rwb*Jb*N__QQ<8D
zwit>Q;Ue4IdM!m)AW9(2-NDWDLJt~H0RWMzm&F`$(DIkS(Wi%yTvQ5nyZ0&0cdN<;
zmVbwb(_E-Q(&9Z14ODz5kl?%QZ0ZOOuFTgtIxeEEDS@uA=?GSNzE0KU43u>qr!HYe
zxb^Y%P5}3|h++qy-R6M`(IPYwDW-G2H4|;B$0E<-it2ue$+E6#G~jA7gP4+CUSggc
zouGiG^8Dsysl8Fdo{@PE&94p#+J>JNDN34|LwmVMFXZZ+OZcuL6N%)Ad+UYMxVnvg
zVxW;1Rt+9F7f*53ELR@NrzGPRVQcu<?t1fVk?W=JoNqr(Lv<!)Ic(e*%7rRUBS*4d
zw93ih{F_Cl9sAQYCC>CK=3JrXNyCibXF66d0L#!Spnc){1Qnny0?U^#Oj7NuHBh}d
z$;urZl^DdoKRwuaBYw?N>v*D#S<{XWCZ%ZckP03NoT^i*rjIyJMIo1`K-7nk{?U|!
z1VNdR4*1pwfkpoku2AL=oPk0w1_8A2ErvAh`RZVBX7<e|<;#_=PV_uUaLqBmo&!jQ
z&2v*NoR**m8}-PY>CtF|3WZJ^MxE_U3b0Ky%`$jIpy%S(ul1$`b`LT$r&kT5m~Vj-
z_AzC@Y)XA3jO~rs1w=E@I*PJ9zo_RD#JDBYh;5_9J}>87n4ssZ)BuafX$Edl*d&j0
zN6J~Y@YLDr1>&DZi+A~U;;gg-H&*)7{$w4o#fwGnST_lBXh{Ru;weAPB2k0l#WHUD
zGrf}KKe{PHaA@u8cU&YW9n3SrEDqyWiD(V{9UA}<^VPxtneXh=iV-}S*9o({mY%JT
z2NpleWDGd(QB4Tq<|2b)s3>mrxQEd4pp1EUr5IF2P-$id3Rwstm9w2lU43vKrMS~`
zgnjnAi*f(lp8;}#1@a+u_`y(Z4m)OH6;73Na^!(zVM?-T$CS6ZHXnnr2RPf2)l-1W
zb}pbn-sSN4^>g3yR$HA|$V(r}a<rk}?M9>{v3|50d4V(Lnq(;G>eHNzg!hr@7U?xp
zoKFPi`>LuamW*&SjeW=q<2VuCOXRrH3x+CX64QC}h>;IVhG=@Ay_cfR!Y5P2nKHo~
zxQ3qW!E}@JXJ|)5l$qc|huqj*PC=XW7MpgKN{y*a1RyQ4r^VFunjq)y5a+i|S%EK_
znw^2qT<)8hijw|gg8+STL9|*Uak>Dd!Zd21F93Gz{UZHH;O)VuR5$xB1v_zbVHLNJ
zC@So!s{k-#<W+JMPM9Xsqs`iZ=6r7z=UfkLFf_YWi0G@WK}m&kQ%y|PCz0L-FOYn9
zB=L3t045>buhknxfKfv!V@o6$oFfQg+FpGerw`3MrKO{7J-#I9zy9NRemhKu+`i%L
zHfYnuEqD{u*kaed4Y`>!Kie*1wt$%p0mV+_al-dD3@~;4*4yh7dNVHHn5Lrdsxg<>
zsQ75clC%JgJ~#}4_LK4v2AGby@-;t(>xm)erHb~_yZ1HU)2rwQi{f#AI`gIy(p1)a
z`I<|OVh-+G)F`p@x4AsSibQHTZNid7y}>`6uB-EA#q|zY4mcB3X^YC3x95C&8%4lY
zJwO}FA;;|#e*ih}?Q@6O@lkQ?fUryXxw^P2o#Uum1rapV^4vs{aa9#tb9h30VZnr#
zzu5VlOG4rDBo=kwwk60ISB40*);F~@CmTP^e)oHU7DQFKRcBmlUe7-R_(z$!ZBcM;
zB6%2z3<N?IL>JbC^R)G(Ze~5(gMk96m&ZaEE7}YX3lg!@s0S_LWKYd+I-RHkG)S|Q
zX4+s8K03K(+0-ni)v@LvQ=x0n-Qb5KJk>0@=z9lv^)p5-03}sJo9Nm@(zaKr0I5dM
zXVdi>D%D|(nea$wi|G}e&u-mTI}~TPO*yllIUns(cn8izytry|7q<y~;W~=QwLDb;
zXCu3#741PnN!XBiK!ybz{|`|M@x**?=i#{!iEX(Mwv$52QN$t~?KB6;7^lxhi8PAP
z%zy{bu5Mm3v|^|x+87Y}RoW;yL5xLpQfh|{IdKqriDWAtE&Cd@GMtnC32){j71=!j
z(1teP21NFZ&eJ(xc8^6=Fgru#()DA5bH8ydxZ)J%SW4>96oN75+pWO^TG9DJ7;;b4
zeESTDWkqCb4K?yW5x~4)KXN(TiR+*ca_(Xc+^_V00zPG~=Pkk$4!Gi!1lR&$GY1QL
z0%Jy^NtaI%1+gE<S1N{k=TxeR`No!omvdz6M>Cww>Y0o;LvngC=?k^}WF}vsW$nlr
zN;WS>LyEp(DxEWFIZBf>Awr;Kda1Zz%~SHI-^%h(lRg@$ydm#;hN5Ai+<Q&}lmieT
zv7JI<QQW}L>-g?V+{79rr)R>*@e-{RJ0Z^ucVH}u3?*>u%VC?y+<-cg?_F?Q_F2+>
zZh%Wq+0B!=do&oU`CF_1b7M@G-orSz(Y#wyggF-W-5`n&g}F!(3Qm8tQn65Cdd%Vz
z*8=>oWy0#iA_#<xz#O;MAlRo#35Yomh1{wmd<s486Skq55eUt2f*b@~st0oS<;-*f
zqL!5K6?rp$#t-}uwy15pgW8rQa?{l??};=BXDdkgd1WyvrO_^I49zS_ow-YfDgCHD
zp2}T3@kW)<%~cqi>S;dQ&Z0zJF@VoWm^ztG$p0*CwNx$OZ!k6&y%+FLPh7v;0BE^I
zD$@)?)PaOKWt*WQ{q4YG(Y+}ZpJWHfK`+qTc%htY9*7K*<ATJ(fH38ex1$z>l7Z1f
z*(}2Wuso+RX1`D2DFJ`FU9_oZo?5JGO}~lVJ)>+f1Cj8XNTto>U|;ntl{^r=<l}h-
zD6e~?@`4dxY%YpmG-m{cj-Xh&6hAB{dzJ~*5}%TIF3Q3=N@X4L_@g1nZZtJ3J{S5O
zp`0acMb-dgkYs>U{ruw)+Y}6ih5D#!iB(K~>&JAq`xL*&uvhki*i<uCdMn~WRx$j{
z5iU9W{-!PuN=3YyHCLsy%hS3f&@_dLP-U7aTuW$ZkYKDCnsf&#9yupMUpOT(*99y{
z1KlJAd*~=1ZD%P0V%t**3>BrFmF<GJE7!MTbDAm_%M`3aN%Bh&6{B61sE>8Wp{838
z98QQ#D+YSY#DJkNzeS}+R{66QN9$?O^?tOB!OU+pPy;Gh8{s-K(41GZ_90m|rpE*b
z;(^6w$*!Xsb<-$bx4h5~3B1v$Dp+tl8;~r}#fT>b%-gj0dy+qNErmC<{-b@9VJ6^0
z(^2l6=`A&g2~Y|blT&IBRY<s6lbRDqy_yY(Vv44njAcg7w$qTlV86T^1X6m?M071d
z`cY*gXYLB?z`b>hx<^572GZ-GJQ)*2x56O1T&kj)MPNrDua@Ejc)WZ4+y{m;%M_hH
zQVPSqcS^<h@P;xKAR(LX%~9|vz0=*y6nYSl3s*XvVI7&QDNtFJ#txx{8*qjOdRK`I
zzE1%VKi<L`HIBwE?a}#c{@~y&JaOf)i~%hU;9Q>WUE6K&XqdNHTr@?&;)f0DF*@-C
z6uQm4I81L?+8HgqfQ3fm6H=NzRoQsLt8zHf9FYk0gsBxD{V2PKw-H!0%W2vqVM^YD
zsS?~N(t|suxDL)iDx}PO6)2R<v;jmyy(vy`rvq;=brFXeC#RO;(I&svWCrHkYS1o*
zK%s&Yq1nMt@iB;-6ZK3Wi7HYH5&}l@B?wV6XwsQX#-;<H2vMnMh&v^XAhN*_6?^?%
z21d^ca9;QDUD#|8`dG&FNg?$PQx|0Y-h1mL_z;BVomv9HRHnl@FZPM_@%IGkWD}th
zly?K~u7VnjPr(l;kJ&{<R6~zukZAGug-H$~$c_zJL~d=TKTV(iQBxu)_y))2#@8^@
zADINUF_8q8CK}$lTIY2t9#4OcOP#)%keaf~7}z}1_-M!l8=@9mf}*K&Sq96N{)1N?
zmLaO9t&VAA*j&P$fZ#7+m3<()nMumIl%P`M0%ra{BapXBP!(`CE&U@u7T4mX8?gta
zZTtwv+e^nI@g+N0RNHHJu|7<TsR89I)^v2?nu6$U3?rH@XD8jhw{(21HNt%CPGe6&
z5915dNH)SBa-EGh6tCkGY}EJITg7vUT-wxj44Hw=6)gm$sxwaOf#G%ci^luhhs@5t
zYE0^}#NvJ?4y>2%|Dep$Oc~&)1i;ukn}LZa19SA<yV$ads1jgi+DsFgiuB^r?x+N4
zwEil9UEt=P)cfcI8X11XGeN-jz|7%O3&P~_rwXP7VzGq7Jy>DHp3M{PHQm-bf7V)K
zaJxWo1RKhP@14HIE`0FBxYs+C6xBJ|=Fghwxh>qyOX13+UQCJN+!5%}Y*Q!k<ESqT
ztN(HT&i|5edN4*G*hW8J8&2r!(DA{z`OOVXqtbr^=XvhFM2~&3FPZC3>eqlw;%!wN
zxq2x~2oQ5jFZsD<QWCYlCDmW+4#KSafL(Bc6sD=H|4IC<!pvC8q+Q~m)b+Dw%wKMA
z3`%Un6<8J@0mX|u1FsF=Lx^n|a8GVwmnN~Mg;9QD(B16&06o&dq)+;OL0TOoU>8S`
zQNVX^uXqFpGZ48bPSU5?<5r3MUyPkYV<u3WZ7WVHHY&Dl+qP}nX2rH`+qTU&wr$+%
zJL?|w*R%5rj-I{O!e8Cqso~<=sgiYLCUXOHt7=`7I&UWadqlx_l}6P#IWVxhKz2*Z
z1;hvr&MPhk{8^0LD9cYaBRULMRp_5(Y>6}9n~5l*sdt^A{hOH8*_nn^{$!>5XaEZ6
zkvN=7F%yoD9!~S^hJBc?;>_?*nwyYH46r~8+T0YDUSVsVEN0Bqy=G06v^<|&v*{o?
z`(`En$V@(8xu<SY^F5TBw=UeWG|iEWS{Z&E3uB+O1(o8gl{Gkru7Zj*c&p;GOpcqZ
z)9kk8DjfcpZyE|YsghnU;w(gs)FlC#O8C4OuUh$o8rr;qJ;QZCIgf5&ka%(&v+~`n
zA${IpKAR>2UEMX`p`Z9kW0urBaNt*Tv=Y0sTq@az%BuoZVUDdgdu+w19#-uQ@b|MY
zB0S8N8^vW;Lz@KKh7zPKrmDpCP@1qI=H5aO-BdNJ^l!CLyv7i4_&_4lw)b*HnHX>g
zk>O2>``k=qJo>@@e!Toz=5(t_M;OVJRg)r`3!|i!Tr#3+b!Z(H0{jYAQno77f&N+Y
z_n}FVyeRn{jD(r0LUtCUa>hzHwOrBa7K}Q4VN)FmeJ8B3J@&Uprm3B#j;1Z9$HrL#
zJ6V=c?R4$RTb*LPw>f26%cIuJB}5Np@4B@CX?sZ<XlDH0+cXK8&<wB`Ipf0C8I*$R
z%ZQ=v%=Klu{IN&s{~+_rlPec`_p#`u<>!0hsp5TlIPYiW>9hB37!J=6a~_kYi-eTP
z+68OCIN^8ii%PCoK?e(tgg}3K1z9x4cBZ@^o^ng9BwHzq=GF7jb*`7yR^wHqkykzI
zaI*N%K8}Nyb(qt)<LT@>n_%V7_y0(G-2DvM@Iw6hb&C6c8lPC38#tN&@8gqZ4I8@+
z@&9il3!(FeB<5&V%-ohpii1W9AfJOL%QmKY4)kGRZAdLDJNN5N2Q)Xfq^8C#DP|h;
zJWMe)G974iZdM3Dzu$Rgf=cQ29hJ)A&D7G;@(oO#&}%%HbK>+1A^nX0qjN{!9uQyg
z)4}Y;qbRx`Qpn}BtqR}|V1d!bDqi=K-n#=2_(Ltzn9uE}qj6ig{`wAQt25O4YY3E?
zgdB4lgn}k87Vu;Lrpb>G@TYdgppP(h&<Wogs>Xo%?<C>hlfZm>p}VJ)yj%E$B>h4I
zKl&WFhGyn%;=jjW<>G;FqM!`tWPPA#Z-P~evw-V|2PZO7yandVq49>wq>hd37&=vg
z2sf+dny5Y;v%@!Fhc25T)c|N-sd$=9q5xu1DnvOK`aNuLC`tS`^K$v~eqf<i|4xA$
z)7#UiYtKcllNwbBZQ<#A&TU9Swk>z;9`h8P>!CB1(Vt0IJKQ1Xu&Fpydu%rxTg7*^
z13pkWLiUT?{#ngzG2Obd<ssK;2_&JWeqzXROtJ``>mp!Mc#N4d$aVIE@#)=vXFMTL
zbc#bKU%Ox17wa`!{@w^;1@CYGL^W%gAB)~ERs}3-BIzRfm=qE6`z>G-^2w0Endu@n
zEDp^JmHY0|UZ-T&Wn}{DkiYno7t|Ej>6t_2lE1G*siEd5&^!?IB_B{@L1_?<Jtol7
zcA&IsJqnnKQS#fUVNRyLVo2Bv-`!0&pC=2ZzB$5NkodrGMP-L1Rh+hn(_EF=(*lEA
z)`V-OUR|O(Lntm9l#RQ}I8}w;wTrXO*5<(>K{#^w^4S<$nZ7v0R<iDs$rcod1>GA+
zf;Z9SR<~f$0<;`$KA)Ii>UZbmvr2#ni268<)yrXK6#IpDa}=QH5-=92b^Ewgul(a|
z!M_x49Pqm_w)vvKUxMzW-x37t<h%JhbAW{kls{`ATk!`G>gy7hnYO?sD0v4luddVc
zLt7sLm%tk%ihgWIVXM5iL)Qr8GH>l*A62HT5-L_<mmNh<R2|iPgK$!)GjA8=XJ|=^
z`V?TkhumpuX#$}}A0rr<P^!VLbO&qEzg1SIDXB0YD8w3Z!L#3au4f$_O1~TEaF^nK
zKZ_gqQEgy;v~CX2>!MxlO)OKf?%j9bJBeG>G}XY}WOr(^se9ROaxY$)E(@s8zuKel
z+UB4eiEx=ev|TBEp?TSG)Y#}JzfSx`y*xQz7VUOI-&rr(SP;t80E|??a2YN#Cv#7<
zndt+XB2uSuY?mxcDwzKLCue=w6=G_1zTeiX7FMz5#I0=}6e+lG2~a&U>=&~Lk?qgI
zP6lCrvZ{-M*&|AWFSWIcv$txh#Iq5DWX&KcBu}%B8wIXEa^pH0)GJi2>TIaXNc83E
z7TaN!!Zx32njvdwcFG%TVn+r;;rB<uh;Ho*4apCQl~~_T5UrX)HEsF)o;N)L4XjnH
zHr(vbo{*xQD?S;6GCIBjA`c^=In@wUXiAGDM2ViUgqvL&K{n&;#FVX2wZ~sSQ~hHb
zRtVIDW(Cd1BhoA3lh|-%#ebf6>{*EpmjmZo=#3+r7czLDE4K}9;O@j6w^gBC@<N{k
zTf`PbXMcBazkeTCgD7bNkU2n+kKU}HTW~1x?qUcQ)MM$B6r-NdADkpv${qe#nw|hu
zljnD&Q5331C{~!EYWizaNSbtyCrz$Mx-aol;tUfC$&74xL^O2hscVW;=xSuvJ;Nmc
zRFd5*_2HSy61GY5Q;V8Q8)UY`=X}PcDk^5qQ8km+Rwk%I3gi_#Bc}^gDhh;DQeHr@
zc1@W*+j!l24>+n9&&u48hBwl-SeLw&IX^j{IICBu2yR^2XH2`aWulpihjahscbFq&
z$uY3(SSy#&Zscpt1Hu*+%Z(1Kg^j{rAY^&*i|<mcbrs1(`h<-CiXdygwnmLlG)Xy0
zzJUez{>|vXE5EB+Z<#V#FW&ZRGs(6FpM%sOpOR3BJ&0ypHXYZrsA`y2kvZG~e~|q~
z3r#a|cyH#?ZIH-}k3UdL$Kv&-iAf4;xd&;Jn7tfCQ7)5)^Q^0EFt;+W)6;f2tqdv%
z(fiZ2NPdpFAUZGYuZFZ-b|b-zr?!)B8RNyNK}nEU!D)}3>Xo5>)aGaihvp@auXN~i
zRX(JPAWN)Pu5dwby1C>1cSEn6g!@CD^hE{ExRkMF*4OSxNAwH!awq=Y>wYV{Y4~BO
zJX}lIqxMh+-o6rhV?c<2N4QZ2qf}nS%;nE8z)9d}As3femC33ILR&Gkx+V?Y>mV~M
zkd8~ED8^{BpUvcJ+?~_vG}U-~0sEv*hwE(>Ml3ow!dzg>y8_$jK6*sbG=_|WPGc(>
z;TcE~C+OS-*3mQJ^fAuKSTuZO>~pnSsm$T%_r1x_-eZDYtZuyFW4g3#=KFA^cYrhg
z&O~Vtj60_ncFfO6;TLUyFRj5>%p28@d%55L1imjVVezZ}BQsO}>#hACNZvNa|AFLP
zt)%x~ByYdf(zX&h3;V0)i{CmU_%aP8Q&N(N{UaEn^)t<(G?-Gh8Ogpc*@m++g4?YB
zXzyQ(*~QSFFrM^F!yQTR<sps#GMJ?&b~CgF@q|;ql^;AH-HN|M>O%xflytE0z%{^M
zX7qP)VN+tsy?;Au<VPuBqR3MOkgQdwRh8sj^vM!kX1)H}aRKAd3tB*<45A$^S>PvR
z0`-olufs<j;-q67SBa`iU<CxTG02Edp`I2W5g!xNt<XlG$+km5+l3vRd4Hlabx=~s
zh#N_@S5++?(gkRpNLABJec-ECtM-)OMvZ&x@Pal|m~Y%EWttJgV{oNFv1Iodb7Mr`
z6w(z&nh(ST;FsH@lc-m)SAq_Nk#d>$)T@T)`fmLbLa*a2bHf*&O|`>oFf1HzrMIvf
zfu;YUci=z}afnwL>4wRrPWjC_2*;fWoE!&bByh9T?E6?dOA4x8yJzhQLcylbLLKi*
zV>}ie(t1*t<Q$-?*tW=Zi~UtA8MrEBPF0Z<4<B(|uAFjpKX_r!`l-EY?@@mO*zc&_
z-`zJ>W9#U~oJCh)&)KFXwRas)(?LIl3$WD`X%r?jY9IdVJIv(dU}FISU&DjpNq>HW
zv^W)H(E;(>_APdG!FT1+)hn-}YgYGs8*S%3ies+YHn|A^9;)lTV3%GCcC?RnGS5y?
z@uVOH#M4?1A^JTsmR-8x=$jB>25|jhKO%W_-0Pp=_2PB_aQej}T+vQ!o;V5!WO`~p
z7936xcTB;fbem}>+}z4{H6_l;4mo^%f&BOE@GOlM%QVuzK91zCUqt`8lVkLs(m2{z
zPMdA>Ki9p$2OkJxg=;B^ZEil9ck9jt9Afw4j@Jux*crjZ%qU|>ML0TupYBd*|C^#D
zP7lrpX{N;-8AJ4s_d!FTcVqiL@Jq&s)^PP|C0AEYPP0fBv&FQ@x6e=j>HJQ6ZbKxs
zj#xOSDZ0U!DZ6StrW&`$Za>2<KP%h7iQ=8V3F9u5l$5pLR|L-9pb*pT?Gb}fZb6hy
z7fqtV1mkeLTnAbNjmQ}0&;A3ui6A52#!&uk(d>Gm`0CJB9fP#DT*E2vlYSk<-~mlT
zpq@Q3Lno#lXJWfiZaKM>zZSl7#@`QWRKz*5DXDnd?2`KTgYof$g98UpPI6RSvGH?Z
z<ZKL=nAJ1V;5{-32)@50<lV+M*^yLc$GWszFA#k6?u5j(+`*-S?*?f0&t`*fL!Ya$
zhxhJZYFGvBGIj#{Z_!-ozz$R-pShW~M#NSg)m<cN<tKjE?mtIYXL85ONGC=$7o!Fx
zw|)?xQWMDIaCGqNd<LMY0qVHe*jX@Z5Cp@dn|14-fj-AtB||sfV<{4#u{CtFew=(l
znTO}I0(bBS;n0JC+|fu5;q^?sa76IM4JE6ZwA8-77j!eb*?9qYA~c$H5;?_sl%7<_
z7IE%!LkyBHn-DJgA9lwby{VlYcI3f<ZmeFXW9WZ|6D|MgenIS~1Eiww6QCeJepe=+
z6VAlp%f!xC=L`RM^y@8+y52gqLW9w?oj!f~-KLALtEqNp(=j9GTe{;?Ta0RL+C}3?
z-F@5lQdNUFLA>mBZ|>}-zY4w|4#A5cc3@L@?gjYPA8j+GZjDl--I<?^>EE1~E4g&G
z$2AX|zy&aAY}*AbczQ1|X}U9ZfVchq=aF_tvzbrV-%zH(i{%TIcf-@K=Y|26K(WJs
zt#jT>OhaaY!57#<G9QqU#B8B!QvIj9r?qtkNoZqkW1WK#!dnDoZSg*4CF8$TC!X96
zargJ=Zk|4%*m|tEy0rYQscCp#KST(6b?m_U8;o#?X3T86dC~;2>x_xKyz;?IUO!v{
z6n{Mi2%re0(hp;WM%WxWu5#eeK{Z9Z>0k^<ezD87MHqNG!1H&3rVX<R*3gI8mikZS
zYC}jvlfPtkO0)ZaW=Q$l{A<bq8>bffChn)<x4mV-YPJP^iowT2>VAhKoJNFcQ?1x=
z%Yona(ojp`*NJO9k{b{NQ^d=qf{WSQzn-Bp-EhG{lUE=+(Z}flcQ{`aKY|Ae4H9lZ
zn+{rIH_5c_pOr^a$M72_x4=+LN3~>aj!!;#N{aOO=LQa}K)tm4qvjYB)W#I&-ooN%
zFoL9D6JV-~q)Q_<#goBi-!V(!@Bf-0QA)pYDh|C&65&td{;keCZYS6xaY>mI)1-)V
z4uctR_iJ=1nlfpkuL>Xb`#1nd!qlGfR8iHlRD-3omepFt|Hi<SXRwvANx><s{Hd&?
z9>`rkS&7r0L3fc@sVr9)2t`t=9)?k!Yrla*Pufh@DkkB`;YgXn-4^cvJq3bM)L0YO
zAD5hru?lIFV$)xrdSU^g3IImx6As(rxQyitvy}jsZCa>uK=rM1nQ);OtY&+!Y@N3Y
zJj@ELuk27KpO*(S2-*MQrs!?J9rO7lpSg!PQtuTL`iq)~bZl-G39>Tj)ne>vb?YaJ
z9irFZ_1A6w!x|An{6|n%$qfEEdD9yA!|KK`^XvjL0To&wfo$5XpE2;|$aQOr=#oOZ
zfO<}^gO(8TexJyE59gP7E^~vvZM`#CCP?zN8GCl9RN)V_2)6;n&Jc#uHe)ePjQk3E
zNVEV!&JdJbbNT8v$Qp7xz=__z67it{(+bR1@eCn?={PJ<es>Vy4J2CBjX^0Swa=;8
zMX45YwTGZc?}jfKmPvhpQ8Nl0eWMY43hi|-M8<olJ7iE3cP(ns+N45BF6$?-pyIX_
zmh&0)sHb3{zq~?C@%xr#OBPPP3Mi%~1rnB_>9cKJ0Wo-;C++5Qnu`B~oPRC|P^4Xc
zLz5Q?+~#>*2-8+$ZUJI#XsR|B#LJm&PCpO@2~)_MaI6}N+WUy0N*J{7EZ1-UL7{-y
z9Og{I$s7{4XE*knPB$n%nT0~d<&}wrYJkQQcws;Y!jyNRQc+PI4<{Zzudmk8L>zq6
zx^oG3vke)%zcG4$52W>in>^eAMBin$d=e-v98vI^j#dBqY0AM87!Y-$T5%s52-_vd
zsr4t1nv~vJC1F&>gi0a{(R~^@s9UBR$ofK?W$AH+*ieHYuxX4qiEmyqV#kH-?6A+J
zaFkjAo5Vm_0)uL#uH&cqbK_|w!QU|1po(?L4%)^l_&hSZ#eAkIOv2JcGxC{*;y2Nw
znTgaMeNV%AVOfXa;ziI6Pzpg=T-Bl&6q-(C8#ngfeDYzICLmcAFQ@jvRa8l2i`~P4
zj*byzf$6Hc4CPyE`nkc4>1q~6Nq)3pL`_<M%|W?A8s7f+P%tHimwcqvc+ppB<83o)
zr3=oJAeP12%9c#qspTtW<z75SBhs%*=;N*Gj(LcC3!#ZqH1lzYzB7;g*o=Lv-e#(K
zwU6ghwV1+!hW?|4{b$5vvyP!kR7W~1lH%$8toa#G+7jwO%a>pd!paF_5<WJx{*Dpm
z4^VDPmFZLlokpQ`ZP`{U46rRcQ6Zhd^^HVm%8dZTYo(d(oS)zDrVr2%&xxCBk8SZl
zF}uEb+~`W{EZM7t;)|wBKHycM1MHIY$+CTu+&&tY#ML&DN2;uh?G`(Nm6ZG~XGJRt
zXyCJ}=jppzDs{IMG4U?S0~N*m1R%T~B!$pXiu8B~T-{W|3)srpTYxR)I;dyF;5HU#
z;E$#NMO04<P97MlC|4NT^Qvri7@<sBn$s6xL*>^ua_#B%2&C-&!8B~my%Se$o5hm8
zl_oGPo8AY^z70wrs<r~S&W_(cl!h)_e`g6PsPe;weme8hp<9?3_gZ=D*2(A<0Csq3
zA-}T+2I)Ms2WGDv*7GNMYDJ79v1TEsSkJT$kX+UfQ+2Qkk_&~af~N){NdGYUc5#}n
z0gpEtjoo&QUl($~NPHPW7|muzB!}Z(YA58dy*Qzv(dfBIC0gbCnWKr~7BWErO!a}(
zd<n1b#5PoqWY|jNvgNDEc0Y_;IE#H4Bj&k_7reQmU7<O0ZS{ufAze`r!iKPk?kFZ6
zsn^VCG!1}CVc3o$r&wP)Xle}MwFX7t`u~#ge2%wl=hRhy273t$;|J$T=0=|rrg20S
z%xY*`im1iNn;QkeIM@ln)_>B#CAVGmSAz7#H8o_;aYvt7fcX33%B}xWUUBh9+d3BQ
zj;?fFn+@^2|G=m}9S6?!4>Kf!DI^;<qPtrle-k}E&bbCs(ptYJ*}STLhn2O7j##b)
zz*^PAku?p-7Yi7(><sF?jc`2b;~V>-Eu2NlU{7#GW35E#H#C<{6^xr~+rh4-1Qmsk
zA8do%D(aPZ#ArL4pWkpUJ{QIdTr?oTZ?T3<v+~LoKm_=d-9y=K%ko)IIgjCQ=dss5
z|5NUg-=ky53+KKJMKoUqkYTh{2zqN0p(!RBO(wa5mf$iBEsI>E%E0aoCxSu}?#v=B
z|L$L*i!Qb~VGzn>VZeU~s<AUr&6KNl1zX$`$c%D4I0b>@E(^7uhOKIfZ;|;Blnli-
z;!OBS&#y=A0ba*@3>f|Gwe^9SbI;Z4s}@m-^CTRb`rO805KHh23WbzGQ#K$2KY8Ke
zg!hG5HbOH{+;0@x77-OrUc#>H(WIL}8kuA`Mh|`1cunZ0u6qkynj`8!=rIobsMjo5
zgoTuSm?--x{$>T&J@l8j#$F&NSL6fn@?IbB^niUD-kkYoSXsp59ZR-<T3~95iajgp
z1Ly;w6lbkeR0>Z7DZ&;q+4~<Hc5G@%PAX3Sqe12^qv(xunTIaPPQwsx_pv^s7_QqG
zY?BSsq>_c!I!7)QmLb48Bv&g&xoYSqw|<0ap4Zs#3%Vp3<~9nixod~;pEs5;<UM|a
zlBKpwSXX3tO&rAmt({e4!)eIsI&fc6>x?lWuGNA9gJKt|RDRu3`?w_(AJhOILYHE@
zY4*uo3-;BS5Dg{L>l)~A>CC%~dty}g4Jy?2dC%Wl>9vgo?|R>{xEdls{jFprXC}i$
ziwgu4?y)^;K08J}nv)Y;CUg$e{VyzJ#D>ytdYqj+iWrYWk+7w#pmiJpSCZb23UjjT
zbo_iexwej1n653r9_Yu{zlmq%+_V8kNp0rx=Xc5Z3GmNg`41oazaCnttpV8aL<=)y
zjy{|2kSPU9zM#Ypgz^th-tQi0`4GglHi#0+<s=*SJW7ma>{hMi=m*6gMSM`@@i#Dx
zI*6_)raG6D6oK&Vil*ra4zY%+g-Wu9mJ-~A!ZJJ~vU+x5u45Mz@aGX!^M?xcm@~zU
zI=4@0@(B4N558GpD*JpYLJ?qQ;e=v|W@e#%`D}*NxkK)L8RIuvtkTvdmbfFz0ve=E
z$<%BfE%`iX@Cv3DqCO?*c>P_K&W#o-c6sCa7PzZ<mss>lAD_v4^_!*mWOTy;o67Cz
z!^(;<mu+PxXr6n)(XqrhxndA1Iy@^$n%{6+pq_#oraCkzj;tOqVDPWq|9CP)<9YkZ
zCOuvRQF{S3`#F69CK?%J_ag)B8YboVujV^L`R$Tgju=4OQ~Uq+@2$&dB2lXn%oo9W
z^xb^)!yfddroDSGn&Gxlns-G96f=U5D@2>DaY*qZmj13?UR&mAO)FZ#^acsL9S8?E
zJ5T(>It4hFODGvJs}q;EXK2e5Y&%R<K9vQTz*6>3_>ddlW357hmcb@uv}vKx3Hu=`
zz6dZFN`+;eRsxtj7J<EYa!YM*xeS$w)ejIH-MX#w6=7T!AVB1-R}6S4WAV+UQEydS
z11S-(gF79;ZyLfm@~-X3pgYOzhr5;Tui>{L@DSlaNi(>o^A6|Ibru?}PG7d!>${jk
zn(15UotUG9C81D^2L@?N+E5-G<ZTNpMdeLlk*Q;YD4JPNe2C2m!}jHD-dj7r9X`GI
z-gc2EFk7RU2{3-6i-2~7rPke)D;-ABT%rg&;`6&`25LnU#tz5uB}!uxkdF6Zhx6_~
z(u`SFW+)l3*<ky-g^Il^j@%aA0OdNW@Wn1iW&4SGkf=|hU&H#VJZK=~K@%h?6Ja<g
zfsa1gLS=-gk_o69^Cf0_N|nLd@8=&mxgU>(81?Vx_$93GzPs|?K=KHzH`}ZQa+T&@
z*(#eG|3n>q?{L*|(QVYm+!c_Dowj~7w~p=<=TD}QC8JeP^y>_tkyN(HA5s~%f7z|?
zFspzrx_d?2G(^*3CQckthn5(R3A}o%MQlWlzj~R=MBZ>yn>Px2u8vn^4wI`*Tpg8v
zxZ~sG-WQlZBXSRTm*r8SkbxoIha{6(*Nl654wf3)<ANf$v_3UO*s+yUv#&{Ri^I&g
z0h(#JJ?$rS-M7KC1R?w1?%8^IyY~Xb@k4a(Ye5j3m|OaWV+*Nc^<t5!-`b&YQ~Zo+
zDs&@tK+u#8_|tBUDd|O%mf($kuG`UMQ|Z$sOs*W=j>lsy?7e!T@~+$k%ymYrcn_YK
zrw#k^v+g8AeFx|4CYiJH2Dqbp44rXW&QSQER|0IheUo}>r`3$U_%T{+W$M<ofqlh8
zh%Z3y^f|_)I~MJr;msND$2E4xslDG$WmCfw0!KAeep&o@AbWjQo1g{tqfhX0wbLj3
z$S12j3Fgf2Lg>w2Jej`sem!YiCw83WewU>^S+X@=$KU12nqouKkNXilucz|H&aN$y
z@1EWV&eJ~6p6D#V`shy=i@4`HDR|wuEM?Kz04fNfj@0){nZ%CoWa(1K!d02>yG)lP
zU+>~<(PjS8Ejz2FgGP#LZ_lUca=D9o)3Wl&#>@^}s}xUOU$%Djt?BnER?h0tjYsRQ
z-owI<Uf3t!gxK@%mL)F<-ilEU#b?fTX&={Z0hygdx7YT(noaET7a_DJ4}fK;C%kcg
z`^CH<niE<nsk+;gPHTHUE~=lP{<aKH#fiFX_v}`oXUgG{7rQsJ<pYNN>UWP&>bA{%
z;L_XDb&=Bdyaf&pb@N*!@Rw(9Pd=FC2+wjm_jHB$$+=5c=20w*<wGkHwf<Re#k_=%
zW}zshb|Q7AuZ!=7z?Cbo2{NPP65hzeoBKT+HGOYZv>iH)YqgLlw9Czw8O;)ZUF-(`
zSBGe{fW41ceItgS{c&U@d@Eq-gl6euN@}UpuA|(|RL&<L{Rp8uw|A#S;es8c(yvWj
z+f_spnUT5q3xu-s$+mF=VC?JW#g$EyRk;mX1u_FeZWgC|LweB5q1MUR3zytD(WM8?
z-q>BdvQ&E~2h;pDp6j>g^cCiNiTC*?@N=^B-+#)|DczJR$$$NdZ2CVD$^NUl_P>u_
zySTrc_Qzs+Pijvy%R7J~NCKv(W~8?}sRXkyZJ`c<(gE$BDoFvP?nc%ttck{M$9{Yg
zfR>NRxXaPIZQDMYa*}3E#mXZdTkLx9i{Z^t;x-+#s;_In#SJIf6`OU(v31kYyfLHx
zs>CO>o^e&@<cdQ=i#i+3ItHR5>oJ8~&#ehGBtf-6-LAq!sx>-|#{gr9G<m2xEM8BX
zKixUa2=6FY%N?EuikWq)V^LytP*QbZ9MgB*?q(DiqSjER4aVzyVB-hA7P5ncD3Zo2
zV&q9Wd>^mB9bP=jC%-r$>*-6^-q2)j@f|IY<s|-ef_~3rAjU27vDx3&nFgEp@7LGw
z?;g}37z?bH{ljN<d>knU%?oQ};McqP`AK~+!P+&kTCcrmGr)Kq&xiYCLVqLv{)mw~
zu5hG%>)|DyMja66Pcd%-GVX&$mMi7R;f@G)H6{MBfHp&d>Gyt(<&@r?;TF_wo5rBM
zCJXLhuj%@M>VjVVJd3#xW136tN8|SCc?Xxtk3JdvRpK+0FZiz`eO{zjZcT8i46~4p
zX^ZTgM+o%B@lk=FF1BxP9vp&rouWW@KDq8YgxpDzIf$g()xtaFbjhh9)5c-et>V{N
zM87e2q<Zvj^vjpRR4}=OTeA8pw!v>QJMJ^Mv^x$Dc8>bI&ec`@Sb&8eGjqP2&FQu|
zJ6MldqE+o`@8t{1X)EjFQ`=8D*ON3af~SKa6WkEl;+>4$xlY<H4%uDhH;Qn!Oedc6
z>GK2>pgP#q!er%x9ZN>~xc35^O?`}Mqa8{Qbkko9Q>*HqaO1Z%f8v7q`~06xtY4Bl
zAjLSI6t^ItoL}Bo?c&a1xjLZ!L*)X2CfHqxxem8nQna4|COGKZ#fj=4kYzy9&||Ny
zmyvka?&tfXf1b2K`BTwO-^`hBJB0o;O~?F!TkxT;g{Sp#vHrIhJZt0o)c5zbs|89+
zLVjHW#@U9c@)62i{pY^<x${(lIL-V$w;sZF7X7hH@*BvnE?G*qf4l3l8jSN9TmRL=
zObKUO+vA|7xlw&nw=whVNUPLv^O;b(%Mai_nA1JH*@8rxBc%apWfib?^<vGsVFw5W
z`S4=D%7N!bF1DdEdM~+3isk5<TKeO@duRPR19gdp#|U(S_O{e}D@xlXo4n_yr*>;h
z^<}z|`CN-_+iaBi4Pgg)!F&2s>z04uEDMP8#&E0U>tNpT(CL3Oemq_p_Bx6Fv!~>@
z;6{x?c&SvLG!*b0<ds7RmqDKW`wwSthih&B3qn;4MI&}j;z5`-gkvJ4;w%UJf!8q^
z_sbwg-WR>M@q<`N2lLQ#A<4f|6&lC_qk7(Ai8Xy&v}W2HFVZr2Q6Vgv7$MGZ7BX(i
zb-T-<^S#h)f`B(YpgtPA50KNkVxWhb*MYovre%4B41!uXNpjenM;6aP#}$APN*q0V
z9E&Mu<zjO*OO*vg%1CAdJ#!BPx>~<m^(ALt%9_>wLbY2pEo*N_!)_Hzly&YuOVxru
z;9|{gbwaRJ4r^x9_M6=*j9^Ra&&-DUuhR5o50N#nwiu9^h{IoQ=YdQwWPRN(eE=9g
z>=<9g1h@uIh%C%g`dQ}z%x^R$BZ#acD+UVJJ`Dk-TQ|ciguv~oJ8cZW%q_WvbzG%W
z|Iejko=I~_9~gE-)wN<YKOkT(+q^v|=C=7tFu-IZXu%;rPei3Ki;_H%YVOjSxvg!1
z2%jb#YUK|+ZTCDsh?iARzqam6goS<)-{<d%9U8{xhl@lvCcdudM2(DW905209-(RL
z%Yn7CM&aJ|?x4B0T35aLl_FBp<GA&%j_kOzK|7g!f`1{!=X*dk!SyuAUkU;}lY!m?
z!^l3SVa0#$2}MY-9`-<TC3^q9{Sf#QB)%lj<IbqB2B|v=Y#21<74=bq6cN>W^5|fO
zxuJr=uM8o3D8hYSe|MDoQ?#kL0vt;q;H`yO@06MYowndLGRi*`a*Ph(0*-%r!jU2U
zI+r8J#4_47-}4$FJz|MeW>g@7;Jy{bL)asXz0{B$%H}~zViUq)36I1mm5cU%`6Hs^
zO6{qP3zWgg+2T771;RA-25%98=I^%ls^2oBf{|1RB8t5LMF)8*(IPrgHo5-w$OXmZ
zCZJ_v;?%l7aL{xg_Ss(?pGg43P7Q~VsqLeiKqIJVK|Ip+hYX6mFi|j%vpMx>1A~+e
zum=W{rZ%hlv`Di5y3FqH<P7Wb$7WeTH_cjznDM!F8Y@;8)y`DjIOhg$JkoQ&Ppgj4
zec6fMN%WeRD}0vb6!HJgex@+iUC^D4*b&$M+z?4q18R(H&aDI2tjFMQJ`kgBTw}VE
zTsq%JaOBGJMYTt8A8+LbMl&)v8G6e)c*P3Uih63yLKANbUxaDo2hK|tu2d4#!8(``
zlN4wIbFeVW$9dyOCXea)h$dt3YK{!1@pp44NwY4PJ_c_OW%;ep#xC&+T#}3ub7qH8
z2&u1hwm#q5=v_F@-Ne>`Zz|r{8QhC5GQ0KOx2yOAJzI&x{R#~40Xp*6FreU*oQxEv
zM%{p4?@Ex^9y*gG+)ZC}lQ<{LJ2B!EO&DK7K0zve;fqtfsyvtzg3eX!tS&a{sGN2t
z(1pPQIs>Da1>*u%DGPN5XX+Lh2_X1eMMhtM1Yb!3d;mRgjFeDw13bq+nOeq}Usw-F
z)BM1)7kEo8in~1yN8EeSBoEAxt?ZK!;va;u3Q_VKxBN9w4WGy&l4SB$qD$cCU@b{p
z5Y0~(*H=A!mft}ZSu)#VRn}Au(9f^xF~@VlIyi>i>Pu-O1h@v~*?(d3Yo`u`UeAuh
zkQLno&ALyB5v1^{k1AAC=X@yC`VRbziiB{s-s}DmUuao-Bl@1^{}CSv;h#CrNkpU(
zyoMHi6^bKFS>vTyqUR}nC=sb(yX`PaqTj1TsKt>V4rOz}pBwE@3}MFZA3GFdIgp2^
zME`QAQK^Dz@WZRm_=tO0=3ew>Nj$1mZK*6$TIG8ty;&-^d|%R=E|dan1XQric(3hr
z$i)O6X|(sU#?gTGIy{B{$n#RPRAWotXwN$7nP%cy<1#Td>JLevoERJY>Lf{~rJKe#
z%3nL&5%>iW?%ffiNpcq&P3M)pxO($w-;+5@=r@S-E$H2I^Lcw*4G!lqP8vg5x1D8K
zmzEMD@O&C<>*hRQ0Zt)+%0_CRwe_xW`-j8_Ev7#NyfdguUW8u15g(eW*`V(}8ZY>i
zqOY-(Hne!MeK&GW&iq}OJ-KT@Czx8DAKTv?nK8Ws$$5eU(`-d^al}O=rrgbi=Tw%b
zN#m+N{g3w?6#+yy6H75-y428q^$!&>;$|AR?($G>M^L7t>N^Q{FM>L|O&o=09Q}<*
zfxpHTxKmwpuQ)yW(2o?R%VyWDXVCQ;a_7sv>DnN4js&bmxf;yE1d?!~p-guKb~|(A
zX>aWP(I&*_p+pwO>r?Dh6M8IRt=SlnJ@K&tuG)mLKuO*=A4BD|#_+Y0eX<8d|Gym3
z_0eP?&x-l0i~}KaVwETYOC)uLZ;AW>JA!ixCl0<5l7E%n;9}c9LrWEuZZ7p+6h`&j
z#SUq1-#4=2buyw-o8UkOMbgZ~WGbkv{BjpIt6l!c3C5%EZiI_xAS|EJ&R?)NOaHE>
zXA-!SjN?0?#9!_y(=?5mBuPHW8*+`^hUaq&5=D-k#UC;rbk`HjmsAwvXo~gLEn~Qr
zCtrwzBr{}2(P1TZapq78Mdb+WuZW^F>K8J8rqMK0c~ljPqrp<bAo=5(g*i7BC0=qY
z4nh=A7QIdiNCK)-NHWN)f=Vr3;Z@h75a9`;H-)Po^POoFj?8xngsV=~p*@7U({t8X
zE~-|IKO+v$xS`5>7i3SKfRf6;D?>b*3;){6b0K2FYRh6^fczIFi5DQ4ZenS0*-HKv
zItwBgL^^Z{n9egjxlxj@YFTbGx5!6?f&gJ`=4Yh(a!5uJ9PY@xoknYzhl+*xASAt>
zq1@S~j;t<IAC9-J;*6n}^}>N#$pw;;bf@P+qR3!-y)<H9wIq^ABvg`M3Y-Fx9e3-J
zP6-XNp)o<1ehev55s%o8r3mc|$iDPcGH%UVlSr9B^Ztj)(LmW8KneAJ0n#sGyFqtZ
zw%h_wtUd(<M61m-U+#!R<=-6xLE7|kpTxTsI23$}Cpb9s0R%(;F0Y1!gIm6dEo<Zh
zShk|Q!u|9Bn^uPegFO&&6c(EOS`<h)cW!Oe;)XzpZ~w7|AueFxaKYR>Fi>-{*@59E
zD2NUP%4;W^<U^jni|Q#yYuqDP9l3_<ymy7p7lqpS<W`d|g;vJGRFReUyd2YQy+aMi
zr?6Ds${viX%zW0Tks5Uks<KjoE%Y%r`mopR**-f`{0DiAm^vPdu_ijz1cU;W%alFn
z+WH?@R-l{I985sH$-y&+!e3E<6UPM)SlJHpnq0>14x6J-6nE-qwohp52ET@#0Ly<z
zg>^Em-noqXH%+PB=C4RD{02O<^F8>wU(V41#m(MmBn|U|tbKXk<>KIs%ZHydD0Mlr
zj+lQleN!?2B9W?<5MQ7lDf)HF7(y<(N71lm?n<Py^@mHaDyS6Smzm-?gXM3O`i&}O
z<D^ly1NPDtGzaU=4Vg7j>Yor~^Vcvm53$7>@TL%`ci0!MQbx6uVl!<14ql<+X!Yxi
zeXD13T8w8DSm!LIhNJ|A^Sy(55Sb0b907#DT$-pPzWC0diB$zi4HH1H(t%I{Lwn(N
zBdGNx`lEW}m9iN-p&2LI-P7*7L>;R?MC!WKFb{mO{B0!hh`VcUePO6M`XqHEX-K6M
z9QpuZOA#4CkItud)}wTlcYZU1SREhogj+in6wU8DW>m$+*vv^=(w4K$$WoET7ARQM
z9e)L8toQ;PB390$4RujaN5Q`FHK8NC#B&NveyxDFC#*8+i=0mRBb7y$LgU#H*RgJR
zeDO%NdIQC12UtqJWRTRqr)@nfA7<6iO^l+Z7N-WmC#JKVO`9j&FK&ZuWX3FO{mkIX
z9}2x?ZJ^JGpeeS5dY|Jy5{86T-{pwZJ&?mhg<u`8CE>oGWzZ6egE`9tJ@Q+vZ7Bri
zk@^CLF>5<0X<t8Ar^T;|N`T9?ORQnd)I1jV7h!wM1q<8b!c}|JyxJRvi`&|QIz&PE
z-SFxBB2njUxjgYYjie<iIce%m1apCv2AkwjbhX2&DDQBE6HLQQ|INK1z0S)2e2y~(
zWWdWZpLQH0;@o;3=;d!HZoU=(SNRSM9~b!YuNea4_ogQUur#_v3<-V)1_y!^1)C_Z
zb;?`)HDP+~rTK(RF2-ab7>O;92zaiUaDoR|gXFf|D{7RFy7m=kX6t5hpl-<NuJ6J9
zUmBLOOXAe<{fze$7?#8{4VdsY4bhUEXz4;J-hvO!+O_N@&oLBda5cJ$tOTZ{&P+X0
zZQR!VE)%PM4A_DBC}_t}CixfZh9`WyNgWNcg0wrVH4z^;v@p#Z#z*JnHk3PD;;bWb
z5v~<As!ZYr&i3P<J28U8YEwF=pHVBT-#`Xy<Bm??kl}e5PHCj>RPdiVuoC)nhXAAi
zCnR0a_FNkx2G<>O9TXa6srrH7S4(t&$equlB=*4X6M}0C1{}Jvib!enMVtP-o+)Dd
zs|Y}r?rOoNg|r$2{Hz=KLPTql@#T{jI-A<6`khh5%5tdiAI+OD<g1!w23S{;YM{Eu
z-%A6FroML48}ZpaBZgy*B^{(U!<cqtwMh^DulHu3`f^ABJsh+r!HeEvTVXD2g)|*7
z4`d9H?8SvQff6#=jyl>jln7+nwWpjq&k5&7TGL^-%Oo5kZ>(cHd->913T99W+s4Cw
zxVI(p6h+;P68~@yVC!yerL|&G?Uvq8q#}%{z69KxuhDMF$@x7cr&4IWT={)xGk8Bp
z<iv0@B1_u$^|g%U9|mjsPS4@t_RHV3SSy^NmHta3AZ8E0p8Tw2Kr9c?aIO9567?vX
z!x@7p<-ZH&xnqQ`#YW1cRj?#$1Az$sLDYs0TcY~A*m?qH?ou+Hs9<klaRub1clCRj
zF{!zFu^#X%cLlG~Y~yAfKr$rMjWWp`WN#Y|y5qYoxCADSA4PY2T?0?Q_M)|L1B&vI
zo2-{@r`WW}{;rE``xl3*C#%X&W!C-av<|4P=<uNOtaZ8$+<9F9s%af!>pKBe=}_tz
zGPqvWLMFe#ABq)!VgN7sT*Xmwp~p}Zs$EIUFinHZ&wYGo^#?*EYLS#o$WtRqiZ^O?
z015fsI7^W(*;fP7PEkfB8RchmKiYcVJXA4)g{|b;Y$WeUsI`5kBU<3{$~ZS*wNZ5L
zm$0CWps>k)-!kfL<Bevh!l`TULXzF2Bqk@;-sw;X->H^!J@*S8J7}(!y%$;xjZomj
zffCoxX->s%>wcS#`PFjNu4}lCPP9$WxXz4vYt}$>W0FfQZS&HOD@viI2Pc%KYYSOl
z3cv@nc5A8!uSEC$kW=T_4#5eNnfZoX7LnDjyA}D3A-HG$snHSJYc#&ZR{5=|!{de{
zdDOwo(2ncOckt)NuiC<5?}Vb{RV-@QzR|Q%aj&45jryy=`TVpsVy96nXE|x2&|M9O
zi{vz>JvfM5S&1M+L~s@53k^1c*1v2KqRW+}Ak7``-LTQ6Zq<0Dkt0Pcd50vty0<O!
zD8J#j4Rr!cJd?6tG=)kazd168e|n#W%6)QC;V5ijpx{(HM&TtQ^h^qMZ@QT=&r#8T
z!$)9~CeMn0crzm*hE*NF)C^#K$rZm3t=P2IVPgWJ^rJ#n$)=A`pt(?p+>!;1*DJaW
zGxURrRv)7Fh0q+=y;kIaH%mW((J3-@$W<MBwJ%O-W;Y^*#VC>6_xNeU*lsyzbML2&
zKWv4bLe}jdjqe9X1W-pKQzyxT(RPG%-;>-PvA88-xfH(kP>9=na&_dP-}L<D5hfZ%
z8w}A>Kq>tIE1I9u197Cmk7IY3vp33ofQEKCyX<F4{ngr@@}*XTS=Lw-_#NT~%YZ4D
z_O(|9`@>a^`A3EcD{eTgMVHU<S`HPK`!l?+dbfZuXDQ0MTsNYms5XRhDX8wsBW0Kn
zGE82;5*(^I5!*uTvmQ7^a9=e+p4bJkqEEN#ZNCP~Eq2g}7C3o%DC*ILRC<nsCDhiz
zq}2Ik9W3<Gf7K)=5o{>eqwE<%RU957Jw2D!@;pGKi9~g7t1(J^beN|x99^nIugMbk
zIm1rjRMC$@;YO6V;_SeW@K&Q<uC(f#agZPAF|UFZg4Np#s*2-f|L%ZbIq8Uog(7KG
z!ix?iB!f^KRgQURfB<E%?oz!XU0`V=_MFbIT$HEG6@@^zdhRpjyU_Y91zxd7UZvue
z^1}YPYok58puM_q+Ld(8iBdAPQ<yDguce~8KrP?VYDl6^9T@tv?uVZ5c!DQ7$dKem
z5H92RH(%-;ZjimXJQGY9#s^HWxqc<lk!3W^dg1GDWG+lKcvxnT=Q8H2Q4Mc%y~<(J
zvzN#B#;37IA<niGNGtPDF~&K#Q7MR(F2{y}G8a%1J?Ac%p4c!(imgi7D`~wQXiF3d
zxL;JOWFNb?z1l5!1!aWde6r|raZpG3TXWDB(!Y0@b^C{u+O&ZR8UR4aX1gct8Y<xh
zRq~KAnIp|&Uzlm4Je87SvQq`$je3ouVAg#03bkACC0&l4@KbGpn|2Z?_Bq0IFZvL|
z1b-)lIy-3Yc#1xQYd}GH;8c!*NJSCZa*)4s5nlm!s-7!f1TpfB?xx!O<(J14of>9-
zo_{HM->9@XPfXP}kRy%b$8yUx^4YbfTCbxR+#Y>%u(i}VxsM*0kGxxvXo2*4X@4vC
zyzP)X%hql;Xkxe7(^Qe&6F_Uz;!f>rGW60r8rfcPJGtv7hIaBAp|}LfmZZKsdhAX{
zZP|q&DE{siHh*>CG+fwLAjf>@OP{00pyV@+4F15Z9sj}g_c>LIqzhYQ`6{Wh&@Qu}
zaP}n~c;MyscG4{Lo24I=eAa3W%|&|!r>~a*MMlS+=|uk9$;bOpV|bp;*^0b8g1Cpi
zdlorf^{}g+MHxYMBJ^m#v5o%s<O{xTuaBN^5$Y94emtz%B4FWdj>ln6ncR{w<>MX7
z>cSC+6xAq%1;r;Gpp7!|-Mdj!-5#w4(fguie%wWzF1xA2)x$lpk=#v|pxT(Q@Z5Dt
z-jd~czNzjy;=}&)^=sE;9891lGiRzP+{6b|92oysf<8PZhF$K98=~lX*i0W6sT_t^
zEeq=>9J)2Qx3M3R?>9ZCT4ZL09P7L1gN>Wrh5c6<9o*@IlX8Oi&B2z9-gLY6>&Y}=
zGP|7NxWv1f?dVweW2U$PeeSp8Ay?|s*u%3`3?^?w>Sk?*U4<6xc7hl@n0WRF)Z&14
zjH?$OYA309Q0U;X<k$PXYv;}%KB0Qc@B}9yq*BT1=FX4G9>CY_sV<va+?Ww09sN!7
zf=NZc30pVZ6Z$wu$j(+%m45z{c%@yB;*L&B{PuN#2$W^zxUZDM(*FA^?a07b?rQXQ
z=qaT!_gr$%H6yfiTcbo+K$X*l>m!hF-eeDe>^5i}`}T$-6MVPwoR`Y*ZnGB9tm=Zg
zl7LkED^jg)cydf4*lqFosoO1j#Q;DPeR~Y&>{ju!1F)wkpJ8u=4D=gyEbN}%P@^Gu
zmFhtBdSklYOOH%#BPgz&FMrtea;fRin_lG#=2Sz&u+p)>bmv=04cu{y+C$4SkpO%u
zthQ+gjUlu=R#+8)j+9uXxZ;P5e><R%j@5qBSlUxYRy-#G5B<E)>td;?jW4%Yh_jU}
zS79qCz&zzEAnUD_$y8FVk%nXSfm$d@kEL!JsX%Yj+7dNs31w)5KSqQX?DLREf6d>c
zfiR1#5=0is9|m}pjQueRd7eTf?6`BW=$b}BJnB19FhVx1v9kwnWFK3DF;2=%w1u+=
zXMu>vyqp&CLtou08B|5t<;0#)aHW=Ch1qCIeOW`h12F+vN0Q_QGvA8qTv@!OV}lP;
z$ugV=!h*BuQ5cSo6bFlRw@BzMKBf@y>#Q)s3rtw}!&-6<dDyXib@F_yw&3BmM1&Qx
zw0-I?zVRs9tp)?9{P`<$a4RZ*3U2=EHA%9=?)fdt=PhT&E3;tVHX#cB`tgl}4-=ce
zZG|$!;T^5sVFoI=6_b4vzoayf`;poIUK#_rDQTgAJ89<Fa~cq)wKxi?d);$sZP*vw
zbZbGL1I2)l_uA&Oaf39)$BCHc+!eTCaksL*V=WCQRIh-46cY>^_u|gPiy;o+wN^PZ
zqc-pUL*qK@yqQ^1uOAK6l@Y<~Pzv&$gI1%m9pmxSGP*5wl17wQ-C=f8QZp?vqdpUd
z1M#(CMd{3}Y>hzp#JW@_izwn=l#WPDNnmjH{U{OkUetiHGbzCK%Nn2rp(R8%<j=xa
zU2ap#vv_VprDU{}RPf8e4*};UY=Xh-qiZb8WUE=T>8i1FyJw5HRbAsb+b;9A(7*bk
zaBZAysha<NoWtxGaXCz$2J^=S!Y)gDawD@M^TWAAdmVgfwFmRsZTa5*CzdIGS8$|#
zIneKs66~Mbg9qzXt+OnGpAGz~R;1I@iO)Q!V8@~RW)E*eW%;kqv&sr`;s8z&UHm!M
zW+l~U%s&{vpPj!KU#M((MaixH!`Eb?mQP3mNy|b_s_>xRYU|ugLjje|rdb!qiC>uc
z>86P<FR?Wq=ST-k*yc#<Rkg9^Kv5sp3zoeWr1Ddgw0Y}F=ou4w0#i=J%FqhE0aKSm
zIdY)H^$50bc?jM{XIN$GCJrBIZ12uLFv_>u8q4qIqv(*bfYW9(((yl8OOX^+vaeE|
z^?3Y#T)XmBK~Haa#S@9CFFEkwy|d#jjPf^A6NRkassrWs;XTVWBAtx0R$G9}7x&a|
z-F=U+J82%^`V$huI;;}fXIT}(5wl9iy<TUr8}9N1AvwPoed^pLl6e4+ifiKy5XmMS
zcdMA4Q1RwBrru6vDTsL0`S(NIqc+M_j{eslB}n-rsQ}QnEjPAVwjEax@KL&a11-M%
ziB;uP!&v67=exH_^}$H28``^)<xa-<(5DMBhn9N9UWQa!um{V?%??j8VE|%xJ05H8
z+;<bDnTV8FGSBr>BK4Z1T8~_F%&fdM-Os5w`NH^}T9NAGL`8}Dj;RCZe&Qe&;fwOX
z@t(qRjl|O!(cIJD2!~fzTK6QK%#O^9%}VE}#173Pl}Z=hvo$zfxPl#Ls(4$H%gcGU
z`DG%d`xxXCnwzUuz>NfuQ`GSn;Lo^b-;3f1{%v#<&e)6MD9MG*5ZBPl0{E9Z(G?s+
zaLY3?7l#fehlq{)3y|U6$MgN9m(sH^O(gzaPwGkJ?Zo}4a>)lLSVmqN;$IKKe0ZjB
zLp-dA81IlXAWxn=FT&W^>t<3WPXM6$WgAC&(-$EO#5#drA29hO5-moxyR%AzCRFzg
zn@;kH?e<<4=eZ^?@~QL#M@lLzfaJQ_sV>FpW8ICsE|mN=X2M}d;UT0PUHS;0;EE|P
zyNahK$1tnf-BRj4uydijIvq45o*MtRUT_q2sd)5Hx9(-#KST;fXz=#cAD_0)jcs25
zd^oeRoIZW+J5Iiz&uif0qL9OzvsX2+AJ;WtYt7ax?gVhb^wZ*MIXm%S$v~M|Vk@c+
zWpvbocd8oMQ%q^1o?-kUNasv3yUE+q+Uwon;f)LUYWMPdKf8M_oqzqN`;tdacI?>H
z1$xAS_MI1zuSk_($?Ektd$M^k&gn0#b}1F{E`ax>_w-~qszZRpZcVdqQj9<s1GqPN
zdlry=)VO+mG@!IQvR*ckz?GI@(E5CkU6)I5I_S2Y;1CU5bz54_C%fI#gkGcPIL~o1
zAqwHyKRRmA{-#XHcumB?b71~H+KL@~C%ZL*^g+st_LG?b-Z^fH1!J}yYr4?DbVt}e
zd&&2&F>8EvM$|lIyGBjv-CJ+)Xs+Rf(48fH43Ekw0q6NRQWj-9YBN{RGijo?6mik5
zK>~zgB8yi0pO%SFYo>r5Y8RS49V%gG<3TPcS|>P0G<_s%vtXH8C8$9;(@IP>35sYu
z?sVSF^P;{3cGCZ#|G>@7fNCh6x~%*1?vhJ=sK+%s$xGGIh=nnt<%XcYN1rz7OcI{T
zM7Zbp!4x`dvXbs+w9s4rmAz0WHHXUfkSw>L)qn_*{cGh)DPB>bA5E7{2!X_jZaghO
zH}TIX9OY`c+ql>#d6;ihn3DbbUFP(N-4?GwNni%5`~NZaPSKI|+xK^zbZo1Gif!Ar
zZQFKtY*oyT?T&5Rww-i3|2*TpdC$2xzvrSxVeC;g>O1DzSbMJdDW5Wl0?i}WVzC_i
z1{-j9lJ0=%wAG-}n}hb|vZ^}2ZDJ{;e7V0ACDoaXJK}6K^biB9rHrnfUgzDQZ@*;6
zq#tMI`t{?H=KIM?!=X4j2*NVXIjHEH4nj+Y1NVYgbrJlSM>^9Q8;r+ojN6FX>{YK{
z^Jm#LnEQW3Yi+i~r(0oa!nFvmpWE%H59+2#P3-GS?iwwWyD!J1cc6ZVv+*D|4iuQ&
zrAqnBL{#@KVvblq2N#VYhVWR=af|mClgruJL6d}C2+k-*rN+b3S^nZ0MmOW14t<r!
z5tRczzh9gvwhg1tiAm7y7?Hj$L&-X$=0N|}ow(Y$74gRA5&}Ns6;NRBe^*i(8dC@N
z4k~9O!<_)f<z`AKQsEXWAP_1oTv4I7!OVVQRcJF4c6Do(if%dc0IBNh8Nd~9M0!of
z>gN(TNVJ{>F4US4L9PMa5SUIZYUy*Om9*{zX@8usD$gFVh@VWZR%Vj*1RgDc_VqkM
zsJapu2qxSIZYyW_!cpT%T65*docy!3F`M|6$_GDe;rJ*Bqoou!pW{T_i?;BIk%|9+
z1^nz}kN-VR;qlh|E=zt}?4sK2)VVRZyhsy_`48H+beArCjtW%Y*!z3WaJb<t8908a
zzjb;!DO}{g%BNAL+EO28Dx~h;nI{4WHM{A!cOCM>#W^J&7^tgg^H}&zpgzjdkDTtj
zhA!KLE3N=Dpt(|qsS%aEUV!{EY3n_O949)hs%i87P&y=0w&b2%Ru)(LfFMHOYJrsC
zG@k*9n3+XmZHoQGi}ZCDVU;QiHBat7FXFWGJW@jX*}o%vNJs=`{5(g_@+ai!DWD(x
zd5zu;>sO>wk5I!zogWAFxW>O`cga@~n*46V^KESd)9r&w;XpfI>BJTsr<%btpWt1^
zhYzsw1enqSGonjqM(5ROZj5Iwr^g0g--2DHg72URMzq+-NRb-fp-Pz)0Ay4ViD!XZ
zvZZF=h_tk)E}t=&;a5PboAio9$UKH2S6$IK1GVHRH@2$ZOb1l2P(<T`HsCXC8PV3f
z73xAw$42TRv4xke#tUx%@EP*ObRuF#-m=(}!#6NhcjeSD!&3N6y2_ZXZ<fPR1!9|O
z32f25)(r#D_}Nfib5%@>x6n>g<SB;O+SOFQYK{upM3PX%r_Y@76LC~UB?V;~H8Pu1
z31%K|eFr&@3!%RA&ViG``b;=XuhegdNL1k|*rMTX2*AuF+c(|ACY$knqtqJ0bc06d
zLYHHO>EhO2Oe4tAwSUlJ$ZM5uH=;dVIvHNZ1ag(V*luLWpiQZy#IT3K;x04il-sVs
zlKj5Em5o^De41|$a)Qf?dyUp=^hX5<1ML#sEq(Fr;lVc_#3pvL#xsRv{<Jr?nK7S4
zDNk7Hur51<R3Bw8NLv0=1Y^(;$~Xkxpr6B=YJQ3&HxUsJ^xk2Ik|YV>NOSlPfM!^f
zOgr6I%M2Sa;CP!*=_X-U@m1a<jtTEDwG(|@rf|)gcRoAd;<XZSGHV&JQ#Dp6)FmhJ
zdWKVt(S&4sq>c7C*;Y2Xt<vO^3aH%%24{5O#avLQ7BQ0*tC3WmXg4k;sLi^zCMpUo
zhrb;u$m-fmt=%nt3yT?H7018b>O8Y#k&MrtGjlz&BO(g^rYPMdQX$FEoY2=2fbXjJ
zu*t)I1j@B+sTnm@5dLijRBPVy(j*ZLJ=LQtdpqCFP>x>$M;HC&DK3N_r8Txy&zGfF
zsKbX-$ZnVF6>+mWZPYB>A%yef>XzoKcEhb*Rh!t3b(MS543OYP>e03w5@*8L;8BbY
zBS2Zb4e`g0fivLyGswpWWld&$Qjb8p0$0nMs&g?_t$OebckiJWb72z($vnBHJHSlp
zEHw;9cB&F({x){5Q4c-rcKooKVbInRvcq+}jioojsU<XL%`E;R@IGomU)+6UxlV{g
zKH#MUC!Y#2-}9`X8c?7%jo9WU_+Z{#EjY2fV~*9`GVjE;&Wb<XvVra0KshA0;<vL7
z8Y+%}H{<c8isZC3c~8aeHa!*#hPnBvI9SkjM(fojl|)Xdm3on`aBpvdn9-LZwfRo}
zv{(_OHn-XnOZf5`-6dM>!JE7~v${U>5;X;lSEgd98oHqLiE=UL^PdiFY-H5^zF0Y#
z_7D0gb+)|YdwJk(d_LYJ1mFP&b9;GKFvgbhK7LBx!(r_UxY7bo;e-LC*KU5GM3YfH
z%|?a14?^a#M5s|RRt|r_v;slFEhGZZ#{&n7iV03yq^iV<^=6OsL&b&_@ZyAr*Ksw4
z)TX|vH-*x~`yH$;JwKb840Gh;-c#<x{~1JCW)I0pt60P~CQYgth^e*qWAd2Q-9ylh
zvK^?mkof17UF+H(OXNwj$-LX-RnN{|?V~I!K9hVVjg$0i<FCKU4rilvLQ>(q2fxR=
z1l}cgQMm7Syk5-DeI<Sqf**rPi-#t0^Jk=1sPq`FiYBe8v1R4)T@*tw6iU3XxzqQz
z-|BvVz@KMm73)ibvzq@7@sG7l4Al9WbC3LD`H}yNnPDTB|6^)+QB~=mL3jV>8qT>i
zR#W$RJF~ArcNsYz>%>G;Bs2K^ku*&pDUOsquK4G>d_9o0Y~1j{40`C~s_VLIo&c7c
z(AAJKDrRqdLh$;}pAX=C(iYAHbEs30F?Y<4_-O73JiK(0RIwlS0hcVTU_S&~IghL#
zNxd$L1tn{VVkA07It8m2MsTxR^Vz^s9g-uBj3zlA@|<AV>|J`ajphwL=rs-|R4WKT
zLu?AI7kO#JH1>B%nUp4p;FO&3=(l1lJQ*=);OR&~O}`^60+F9~YUGM?b<E!VoTHQ{
z<j=a+iFDxr_~1wHOPMpF^NloX9M!x$`{C&c>e7dv``DM@O#L1;&Q=(TTSvz1L5(ex
z_&7LT$D~}i)HJHT(oDWzpR$o*xqj|c82c~bstSdktnQ9jwf;X$)DMcAb0eOiQUaH1
zA-k!-#m2C<s()AD#fB%X199RX5rwgK*<GDsqJ|1(GJhS(2o)ao;RAes4)xnOKJ5~_
z5^N1Aakgja30+To(Iy0Gvh9BtWgGuwzh&4MSc|ug+QyJYOY#lyc`LmBql&?LnJaVM
zp94woA`UEOq{I29n%Eq-6d`_!EC|DsA5m4%b-XE+qizus+wg%MikRJAZ5Uf16GbMu
z+3c4}4$G~+;q>_puHGv;xJ=GyEe1wj6`Ecvvl==^U5Qn)0QcSPJhQ{cWvyKf-lqrs
z6J_M+f{kagSaU5(KeIBw*<XC{THn~Zov=AQx6?<iEdZrbOI#;?fBeSclDGn}j&fM;
zHFWoB9o)zvpoFyUVfD<f_9^h69^Sp^&V8FN<r;k@H2ez!rH7@nt)qj3?f>@irX)Ei
z><J<dZ9l8X-pGAlq2`L=qEDlA7PkEbI<YyJUec)2kygKcE-yCqvgwejF4`j#8`_xd
zb;L1!LDXU<1m{g{fVuab`~;sM8{a)PR>3Hf<b`W&bRYyM{L%Mg=Xa4R##+!lZAcx}
z45N6=An6cd2>du2igXN9GV>6aC3un=RjpjD5*(f!^iC<Y5h1-0b+B^bt|B!n8Hq?w
zDU1u)_wUO0ylDB+$e3Srrr$#g@s!DV=IHgDre0mFlz$n=FedPx-U_8Y*-F&380j!G
zVVP*8D61KW$yCx%58oQj=`rCXZsD~pVyOu?%15e(os=^zXg%o81<80_!9xDNng!td
z5=D37Z9fMGxq;wgp*|P2N{egZkouMZTOV1JnVsfpDg$vZwrgL1VnzD`;Auif?ZFup
z+fAf7oHLEZ7kUR~f{Di(l!4u03ZY@4;x(Ytw1PNM1KtgtSD3npHE&5)JC70?^Pnpf
z!vxQjZ3>=FyRV%#zXB@PDb8M73atWkqb{aK%ks4vCuTVh^r&7p_;dg|(hWR|K95y{
zAqPpA#YUjBo6v;U9p|tukag4+zVQCwxz*@!5X!uj^sko>^SiRhp*SkXl%uw%HitH=
z5^_C|bbs@tFQiv1JGy%EY%VinL}0JoQ^&#@-szeQ@oc5ZrBWE>g4HNRyjnV9ZSYcN
zRy<dAuTJBt&2Ub1Y$+jEugPX2GdJlL?WS^^B$kh40BpU5s7#Ha6YDlnGQyMTYUU=Y
zLZ5M{MIP{eXv`BA&*N*E!*(kyW2x3vwVzg92t2Olmz{hJ=QQ{3Zso@Y|EXp<0pdbv
z&@V^&*W+KP`5#BRft``b|5meHT%CMBBf8kL@1UAy9x5VnuVP90S)eMYbq8bnsEysh
zTIz@J$oBmP)PV8$^fUfDdjl*Btq6V+AMQ~9=Er^&t-=aUpAK2~X7z1OA4OBN*fgN1
zvepq12xe+asq$7J|MOStQZspOnaDMd^iBY-M_Zp8&XP)Pmr{?!iPIdZui-;RWJJs)
zr=~>Sbt*}}cjGR4_F@+~eCnhYzZF2Lg0C;9DYR)|UsKhYa<swrqh7buUZcAK|BbA9
z%3R)ky8)q(!jeAADAsH1i<9$<n84Ycy2!*OD6=e<+1DA>q5LdT8MS@u<3sPMcDfg3
zo~3}4?(u!a3J`6a@QlQJB3fSU5AvTY{oSqz`R~^%qyM}8hKYl{xq*?R)&E}UDix!D
zj(Q(g22NxKsPn6rc_FqYhV{v*VI^djhPlzkxughU%yV4!l<(I`wjORA4z9LPCY3(V
zTOAZsh~O|r)#HUIJo1k0!0c{sKkp|fd#=86(WX_}-Jz43bQCfSCp%k+pUJgP2$)Nj
zv-pg0_zB0_k?<*l_|z$dpl7oq%@AnaoM(ZBRuDI08nqS@ikW%!Ctg3`;KJfzJadht
zh|x{G4WxTj!xiE75WFPj6HH};woqLRk9H1cRoaN+Y)4Wx?gt;uZ(GgX%<y&SX>sbR
zBrTU60u!$HMT`CLhTZfe)+P<Bq8nES?Nl~m(45v}pyNUeX<<2BK^@y9`RSKVeck*L
z02~^pW{gl8$gt4T)c{pM1^%ud1)9thZQM&lzIKV)u8e-QlFWQ%a>}Da;B%;WuO)wQ
zgkdx_mKgHD_l*>L5y=rEpcC$7fs6axkuD1y?D;~w-V;iz5pGCs(%~jp-;x~?<1HMr
zHw6W~x!E`7Dfm!5zqc#1Or9bEn<tPY^<x35&xxx;j+W6sD(&s*ysznq*iuNc>XreI
zXg%9}{ZHWeFxpC~$7KTP*3Yyz{<3=8_k%-uh1O+0;ElQruy-x<4|S23ov{nn&<f1u
zYYwx2fD?hz4A=qaF5;C~QQ-KEBRqme$k50k8b|B<e5d@||Aj^_^soA(^o4M=f&W*f
zY+__*W@~F@^uGnRsBYu1CjF1Vn56kxh0rN}jdfD1kqgtZMdBgn`G{4F)h~l@=`@^o
z#3|w)c6%(bCzH)Y1Z!h_1MOfrp2%RaS#t243Cy8Qjhto%zf4MMIKE7pXTi3B`2ZWV
zMDG(E{fx&s(f&HK(wUib!ET2@5Lx(T&uE7d-w(?rlFtN5qpWJkZg^)67rU`1MBwST
z0hTTacklU47`GOeAa=AhoN5~7<|{@71gq!Z_lOrQc3&{C5~9Y)8W|HV{^w6B&XODB
z)4Y?2DB9k>aeYTVSaln1Z81x#W%1hqTzV=4AzNL2bJ=`@x4*`9mQr(hZd-}gM;cQ8
zbfqa7Uh=zL#{_p&KXdwkc|Iuch5FBS$l+<5Covu{jZ={Js|9@Yn)WK88f;Mp0nAh-
zRTpkJ%HN-%RX-@BtKV&YO#0d>M><ofMn*+Y8jIOC`S`qy=Ak;y@C52yBa4ldZY_^3
zkwY$b?wT@&zqz%OACR<SIq!M-Tm9v#PyZ95N#(3^KYfDlWlr2Xhm<cv<TE*joN?^j
zI|x4^tc*AZ&q(f85t?XPD>8G4Xhtp*a+q^{Vku}P=nAmQQNO{VxHUbm?*YW8A^%|k
z3H#Kkh8ZxeE2H&LQ|goWj#W^9nb37#yWJ5fo^}n!$+uoFaFr7w<jRi&t%R*B@?P^a
zl^5{dAH{rPsnLwY5X(26a*5v{e4mkb-yarKVW=z-M-j5~fp~&Mkmrvrb;&||zhhM+
z?$(U&xk|u|lRCv8b(}uG8^yoJOoHbiLrAmnvrW&XWDejuHa7*XSRMyh<0hTb=T&G8
z;-tukHN<c>p!v1H<TiH6Q@e<@oRkqMhD#+ijkS4u#eF_?N$I-DN^;_v6LL}|%!-TU
zt}1ub{zw~z!D<=5h(QlLZ!2ax66a{)@Jxcjh47X&<wz_wSXE?fqMdMOr_V%6D`Mjr
zIZJGI+A5X3#Zu%?9!>O<{(yQeVH<dn<da$HqH$7)8xf2(Hm^UL>gx)+sSU+5-Cksp
zlV1<G))~`ZxIjH9Vhzpy{L$D6w;obi8oAc3)2);I$0g#XPDuQNNjod~S;rng<PQsp
z^I?=pSvOB%WarxWJDI=TWNX&htwGnX+CJ0ZzYYp|v{&t;U(rda7XK>l%f!y*f0yf|
zo}I%!XX4)+gYOf*Qh1#|Q(CUt`0(>qqzj@<-c5^ryqyAfR%8q8hVP`DOI=#tw`(F7
z@J0*Bcw+i-(p^cGRVt}5qXr8`xUL8^`D~CKwh~WHxf<l(KBfb>PS>&2Zzd{7!>cSB
z64>PSx*NpIxz;bZ<mX7owW?@|K+6srlF0>D?qIOL*C;g_o+r~)U3!nA(p1!G{j8}J
z@qN*ee_4+p9e=}gs7iYUHpQ~o0GSVx_$106v8&Pt{pnW#4Fye2KMdF_EW7j>&)LRu
zxbCy$rc9X(bZ$l1q4&7r9k${z{sbjwt&ZTe?q}%m%Iw>LZKNt?lF#<DM;Z4}Eb)qL
zxTM<61#t2E`}y%j3PrH$5e$yb*MSfmpW*XaFwhVS@N>TKc|#NvRpBk;wEJ_m0>e0<
zyLE0TwOL-Ncw?8M7TrfH117zQjz8)59`|SOyPZ&b9hf0AED9ZYg;*g!ytY2UnZj%Q
zvyKe-NjeyHZPnM&KY0uVSW+viwxPPUKEWYuJEIAa5bIkIM5JrSFy9Eo2nWuit5_U9
zup`QzPHNCiG5M;rlqFOZBzpqMwH~nPj&SgJhYhzDZqh~HFC^euXTnwj^JsBPx>y*s
zM1hh@s@|5tb(Tr57v0UYlh&<k^MJfyOUy|<hQt=Rq12WOIkdXJ<fG<b{<%GA@&Mhg
z#)PLq10=-os}v6ReytsN`~K0z{EeSPBiB+&+LFN5Q@)7gkc9n?d=|X*-Ng@2WY47A
z3&q<paqc!3^trO@m=M&w`zmp^mLDE`?x0R=-#S+>2%%o#|GJ7}`o4+J={y5DT!(`^
z4%_$>*I;$F2|QKgxpSiRWZwP^vd=<wvE)cK`k|G%Ty`)UkS^;yt7G<jb(ZC`Gd8;1
ztVyyVID{YXT-+TUHyX@`J+`uK$Za7_{H^$^j}*#&)VlEpy;~UK@PFh+QtyxUJceWh
zy@-+{LMJ(aWTW{9ZMDAvP;#vX<dI*v$tnI;qJ}`vC~JOt8O|NWqn{CZpA#)C^~C4}
z*w!i<sED>&{3uC$1Vyu2NbUoi<->)%4H3*OSin9ObGZ8^vT&3EzG?S}+C8(~;dn3i
zWXuKI93;&mgZ8$RRV3t=9e@Y89?FZ0&n|i*zf`*{6L$a*SOt^db}`<{_MyGVNKU3%
zy|+7a+jeI<+%48t_V#EVBqzZ$l>8@A=&x&bk9$7Z)pU?yDM5B(wd2K6aVbG8*l&0*
zpiplzz!8Z@gRSC*-$oC+J3@NSzCZmm`#`3c6cNgU@ULj`loIIq?RhE(VaPRow8cHP
zKozXw-^i&4@tavt%%&HaNn_T#%NmSNl!={;3?ITiuzD}1rb?guL|9OYz3HidRkz-@
z%hP<EeJ<H-vXO|6j80OqkECK^e!a{G`qYjoW6xmJW+dk4AO3R84@E$BF^pE<5kthf
zTcp>}oHp+?nqvDia(|?8&TlJPSc1mk@uVLX>xN?@M)L@u)mp^dTJ9hVdLaIxHcye1
zK|fkDPzqR;EZ3rGd@bo{r%U^?uyCK*eiDa>*t4y>9a?5Nyp(Qb4MjxEAZzQWw}+r}
zU2lm@9zvEOtCrZsBM$$lbUG!DvlEdp9IT;?D7QG(M)isL&OwPx`1czPWkp0cy&?JC
ztaG<)KUFAsMa%2dR%WH9dHu*9_y~-r)ELx7tg^7djjy`YtkPAg|55ITo9%3hdLbb!
zusxB7X*8G>q8<)wCk2OxHbO26Viv7>#lM!!+t=oS`bs)Q6DsL~xYAM!LqnF=@+;M4
z(MQX@&MzwVP}ugzlNR$|tSTEB6Jbtr_QDWNtA}mc3ECIG!8H;%yBR%R{iPp2yD9Pd
zq`}j$`7|y1&YF|xblf(>e%hvHzkNG0=7GrTrLrQ>2|Hg2ajU}}hT^+Wqq>oiGz4_P
z2?3(e%&}GJpimPf^W_sMcS)?`_5ssZC4wO&jU&|S%vSpYQr2SwmH`aBzpaF=vS(rn
z3+P1IA>rLhMl4YIqb&C>=8wJ3jX7;6_Vei_^di0Y^eoH{OxgE*_6WJI3d}}{wIh`z
zD)<!UmpPe=4(LSmt<b#u8uwWB!mPH~`NxKRMZBty`sc93HRx3nY|4GziuuCp@IZ@B
z1{{(9P^~5P{&sT>c1-wSb!L*q5m=$#I_PD~b(0ezu_$01mbgEh8v^+ncseoid5nBO
z*&1uZ4F|UyZ)AkFgLQMnef6DA{852Qug?z9KZqxJx#7>O$x#L`v=1*MtBE<@5Z&aw
zQM`<<rr^H=3F7`i7wm#fw@uFTsYv5-67ow&SYz4fVx!k~K5EXjLkG5BtOs_7&D)(p
zZ+H+wgvY)6Xyr&Sie2}*WT*pe2+G_VesfiD`D*1cJK>qb1KV&BN5kCqIcKUulIf}d
z0(t*;Htm4d4XnvvK0h2a;&>Mp;XA*^;*cZ<_Tf6PnqCO6v*py@eRQW2fn!C!3QpvB
zq;htFcOaA0RtLyKzNShcF&>`2A+}%rQ(_-oWm@3Lm5mzV6oR#wdUJ23Lz&{TU&a%s
zWa4GrhIu=bC%i9l@+jysY;!%f3CV0OJL9Ac&6Bo7!Q8@HUn+f$D^sJ6Y%NA()V5=&
zMG7@_?(`f{EcXf{w_dEQC`zG?qLDWAMLO_MHiRUK9Run>imFf9Z$3wYX4~1Syt_~d
zf#+kqxd}8PBgvBc^nlA#Bi`scJvJ*tf0+l8^_sGQ$2<qqV$G{>G><P|-Yn}Ce3I)B
z16gNMiq>U;kiHP6Oz}u#XG(`x=ZfwaHR>r}h`n0$kR%Pmg$F}iVxhEw<<ge=oJNMT
z5Z~}N!sJO>F^-Klu!J4IqV%Zx4YW|(XBw7=(_kPOTyzy7enRJ-Ne$AAuJJv!uLDzX
zpf5sy3VBWjPD|U1Ja1tlm3<(rdT~nqy0BedpS{9(e0&!Z{3z<s7-UrHFSE7Wof$|i
zXu{7eR<23jbwIScUqQ<YrjEv*HdQ-MTcbiXZmPmyytJ4yB0LkVtU&=*bNakJnS`c2
zjU)60KbLigHv<r(B7Igc*7ge16jqg2sb|}W(g>`SJ#Eq{&3ARp@D0pB`V`Vb<zmn=
z#|)W&k1oB^8==qA0psNcGqy7yWwkRf(6z!V({8V^jcddlH?#0AKcf43rJYe9BqzX&
zsCBW~MlKOEM&q_1V>+=)a|ois91uzM5^57#Mn_@<9@m%iKHwWt+;-49b~P3hF}&5U
zGj!*iq>EcBDjv5kanOhL$zVF+f7QanfQvrPchHp6U26cS^`z}^F|aKH^7YmZoiNue
zhpQEb{AOI|K|P%@z>Jce{b5_rMA+1_z#5%Nnh2QOVk$dm^iieGzmAmQPJ0$DF+c%w
z$NFmD`0dZ@qnzm_Uf~sQ5tVXFl(z$0hRgj5R7J9sw>(5S{yIlec*8c_i8cGS2PV@n
zC@qdKuFG5d#La2EHTa@6)O68kagI-|e=pv<U!;~NEF@#=Ix_u}d}^-0dmPoe8lkuP
zaOc4*jxusnkx?S_N2sjoV%6Yx%h+Pp9Nz{{z=Vd5x_ub+4nZ?*xnJraJ$*EgyW_FA
zcWLF0`VCSx5k97->#@StZ^Gt%<kR4(rFq+6VJ~L)7uxNfaIsQf7oPhNUURUtYnG@&
zx1o=A^Y~MKgPHWXu6Lpxp}RNJ71l*ew}nO47M25}pZ(*MgT%@2A{L*6A-ilaQZ<{D
z<20Q4+V8+lSF=EG%Tnkd@NNCeG1KEnB0HToy422?_0uXW*Mw~S!BMyo<L!xuY8AE<
z;Fg;;@+lv~Tk1!<LA(`vSK}-Q6`T$xkN0h&6@>u1Ow*6oY(Ix@ngi*9H+q;;cLWFf
zIc}%=J|^Rjemgwr@S8Y<EWAe)tG5t;OyC=iZ5sXS)n_w{F-NQ?TeNKXm_`s@b_XIj
zoDzK#dN%AkeJ!M%8?^|urrr?PGzIF=+d3!GK>Q|NGF~W~*qO$HBesarF+L5y5yl77
z*X!r5wojp0E?-!fldnG}aGJ*o#&hZp?ma*fzJs95_Y)cCB0V}Mk;&6GTEI&GaCs55
z=Cfah+o+R{<D|*^J(de&{8y7(-VFoMUN`;jt|4Ob<L@vLF19~+zfo>3l`YgdmW6mD
zCrhLSkrPaU<s&}!S3AGVfTGJ?ce0C<BhOB>V~h1>^Rtyge$eUR^%&r~)jSI3zRg}R
z7&IYX@u+}1yYq)P4>(hb?#<W+e5>}3O%qJwQ_tJno%xpKxYHpo2xIsx1*EZbfX{$Z
zKV^G>jLGpo->Go_OhQ4(IGbp5KNX4R%Diw$ZW%NNlZ!<aHSjX&H=2a4B3!SUu`F+H
zwwqf%xlf14d}zWanA+%Jk5v#&>H_4;?W0Lhu5L50t+d)D<xsz+E70gWx?lx=43<<!
z0{GO#@N~b-k)vGP&v(0ItPh?4Y&3I_?}8)eUCuK!TK&V;`~mWmF7WDzt|<4|(nB-L
zymZpMLSh7?kr6oRaG3-cb!k*WdJlbY!LfUA|L57`&me(Z37rtiOi}5WrHUd1>uDJ|
zH|?%zTy}g8tfdp(5HTYmzr+K@+!29srX}#<-i8CYEyUvxp~pBrM)r45#gy#Rx6@;=
zO@6$r_?)p>``wa(*H3&uY437DtZ<GNKWXilLciy6h~y`LNyu6tfG?%c>&nnRy--S_
z6Q~Ey9><t2i9Lg5y6)Vb%;Rk!k(<OmJ!=;<*+p!p577DJjpE|UNj{t&%`OoEmvq4P
zP_^$v2KSD3S_YBnK{7$loQb~;V3n0!Hge+%`S^L^fVSr0V4=KT@>hM<tKsIcG5pH#
zUgsHeN3?sjRPW))vhU=H3TK&;RYSLHs*j(X6fI2M74wAt10hP)={ypwMWN$GTM%!u
zelbcd+Hy{1dSpa24^AQF_hDsJOY+H|ql~`0CoO1&Y=5x|l#qq4lNl2h+tjS?X>Lzy
z36<4yzuEk5$V|%(e$o$L_6ugver(crpapf#e0%1*Xlx?M^!IDevO+1Ki>v>6itBnx
zc}v;lP(_F|>n1zvdO^dN&;TXVN1;CpM^UspPAVjcDV;7{+J~uKlTe?yxP)y^N~{+6
zDI|V{m%w5D^T9XP6#v!Z18fo3^Kyt`>`nK6Gil}Z1MChWk8<yo<D$}Lx&i423VpZx
zRbIB`4d03O$au=gq@y@(m-}MZRh%HX@NHq$XvyFvUt#fW&Oh3W^C!#oj5ygmfl{DV
z#>ZF~PWbjYEO+K4&*V6kY7MB94pGh_;{4i+6KOV#lj_Um=3snx^muP&;r#P6#?h)M
z%)jr=J>(f%XJ@UW8D?ixggn{Wh&V!}tB%z3o%~Gf*&TFRya-~zR1bNY2usv1U>bib
zrjUOwL{^8{%3V(bT%*!p8~KL}0rmu$T-sGDhbJ_{c$@DfW42*Sw)zXdxmjz}F77;o
zrLc-fmUkciIv*gwtMODBYveJN5NlJXENvZ)&1UApJ<vL=>ryxV$OJ~FGE);&y=HR!
z1<N<oRC9V+bSCxiCHQq!y|_WmYV3@NtvsfwB2nR$91YN^Y^m}(+eEhED>#{-JJz0@
z<aktiS<DT@Ah&A#`YHfpQ}bdbkU;}AQ*2p14L0*@4yPvEQbeLcjPgXh_tCcxX_%gK
z1j3=vZaYZnxyqL?I*SCK?U-e4Dk&GbuTKWg1EW#8Snzzg33sM_3;#oI1Hormlf6N}
z=0h*<mAr9YYCbks{TSU+cit^QSI-XS;le+%DtNJ)SQ&yNr&U0iZqrIlId{97I=0Te
zHj}-pqC<-(@7rkq5{XF}$E*qCcU`XM!X8Hli%vVbW@2r4lphs#i8gg&2jNxRE{)pc
zbThjH4%_%k<r4UlDi~RC+UU#HmCWr~QnHrD(Q20Xhw_G5BTarZLDi6@;+>1qP!d3o
zQPm2i55C7vhV-14$1HUM%#)H(Az>9h^<)n`_Ia01s!=go`wA1}Md9vhSI(?f7D9SY
zqNOz2FT_Tju<gii$L&fc4b_T%|4WR(rD(Ydwzo%~jHs{_s@Y}h7_dzvG18gLgS{*H
z-<BO1)r+`(P72zkjbb%yZ+hzJ7}|LG<n4Yc`W0+Tv#)@vj2Lyghx3YzW+~l@=U2TY
zVGQm2h4(rau3-A{=cLZ=He>tm)zV+O{Lw|A&=uPu8>YQjDU4MH*v9Vu4#)h@o0bKf
zFJ)zZ|Efv2h+f&cjqI92HiM+u7?nD8wxrp3FC{y5%gJTa#>RF<oYh>I3bhmJsrY&u
zHVy<mj9+e0+KaN{EoAiCi}14seimz12r+6bxSM7Ob`@Ad?{rb$itQ$+dB*A7xj=Jr
zaT5M6(|isb@6o;N*}ZHJ3Vg!-=e?5*o!^@jUv2FVx_{LsGj;hty4qFRb}nm@sDHn@
z+G)O=J1|h}qX1x4RX_2%YONv46uFy6G3p$MHk{OKRLt|)-*>m^=%NHxFyD@9>A(#C
zH$U$ZiS`TKctjlNU6%uUk8e1>e_pO8YXv+N)On<jzCR+Eh+}?*1vGtyR3+&l5AreJ
z@z#q9%BHfG%#yl!_rQ2f>H^=G+$7I<SV?{k4DG8Fg@x2W>{htP#XAT|KP|D`hJ+R|
ziSdt4#f%O;QszSg!@oKC8AHF%xX^8v9E{4jN4FW0rmv(b1iKl7)<GWZveX9?NsgvZ
zmYB$KG}_W4&cU>D*=LDfam#Ih+@RE<4qPUZMF+J1_VxBYgESPu_vs{F(|4XJW-M)y
zc_NHA(AU*vM#?(|gbNjbyu7jk)I~?vgmXcjXQVF(;D@YWntN6<Pc6wF65a-CJ%Tz(
z1%@x~uWw_kt8y?_`L-jgw%9%Y6c3Aax^wJoBeX4wquE)>M<;ms+-CM5|DcWQt36-W
zKU2JGVBA;sT?^_yz4SLC%i8t@y<##i;g?{=8#Xe|bU!I(`rDBg5h~8_#pW;e7aV=T
zV<ScyhAqVN#|4Iq4ToiVUEwjKRVMt70E-tQuw>l4?BLC~fYGfnJ#+tc)3}jDAnC8s
z4AH}_1C*-U?}mL(d)G~ele>;tjeC3kw%kp;qeWLUVp5cJ6Vp&+fYwoUpq>I&xEIIb
z_=-@#i#ix%-|EQ_e%w$CZu}XI3n<uI#NQp+b1!BEun{%QRG#JSr#$2t2@Xk<>x`Od
z?9}h3EM!mS;Nz2VXyXc!dsp9gPp5>}eo)x%2J5m(GF_g7g`N*tvvtnHe1c<;V>!~5
z;3*;T+Q=x<%dOl&>YFO$Q*v=e=8W2i3e#>IJsQf@m4JlBRbtQbJLVZz#ux7Z&Uy<E
z+hS8d*y4*6891K_twAbjbsL()%)q=r8B;Otf5L(HCNUWH@Cku(;?8nHK)2Z}yP!E5
zfM5<$sX`$~{Wj!(#CEe6YF@C(*{8~@vOh*EcmYT1f+WhhAux3vpzVDT_Zbh#6DDX}
zBD`1IrK~g<fjN1$5ANDk2SvML9i@@DY)qV3VQp@H;MI9-o4O>JG`|mEU0vHD9r?Jm
zkUJ#n@!R1Ko}?{Ey{F}5T#sT7(FR5EEp44J0!kW@x*Cs1qoF^QWeAc1bk1niqn`?d
zf6fm*h}ZVl<dSi4ieO>+S&A+3vvU~Ppt&R2&GijjH%f%_GbTU)w4bITB}*5rTGs3i
z4(3bgUzf!eZ&3Aq`eCKFbX1`Sw}=Ti3g_`Ou7`<V%_vz7sP=MUQzbZ7Q;SgtQ#+5P
z_Pft&V+A{+hEEuV<eZovrA`_>$VF;k?~z$p)-w;Sq+ae^(5D~6@yp}h8RD<y(u;zu
z^1@M5E_%c3LLc3bB0T{L8dFqs7%zo;QSTgU2OEhYrP5UQQN!y+jkx=dLb8YHYsO$5
z(>#N^$q64@Myt!WQvo04usy{4?rfd2*VplKszi}tY+lBsHOy(zoYY+;<re~9Il;%N
zb08LY6neqN__cZC?7@h%+*0g2L{<m(ISS5!4glw}V#+d22B|j6-=wfiD%$vN4S87l
zkPPYZKQI?Om9Vwl5Cat(HkW3Fh0W>iuvjuuwJfJn75kz*Z?vf54(s6aPdQZdNC`&B
zHLaYP&3+=*g&X}!s+qe{>vDs(v8DMN2^<O+N1uLlj}I18q+scvn+aVFmawmV=b_Ub
zp&c(-s@)z_F%wv|g1}2kq>SP|Iqm<R_8W3A5k0ou0m{?0R0*Ops0a^$?#*8TI&rGe
z&ZX~1PQb&JUTt9NdEEO*By#G3o;nevI!x5c$6C22J(o7$Bs_k{MkE4{$X10>r#O|i
z-DsN3`BEp(fnTP$*VO1{f;$I3PKPzM7?HY6zQgi@;Q6cRMxbP&gpNJ=_HNynt)_pV
z^=UEd4DE$zoXcuYO<S}F3NbJhhEikA4N<Spx!pu;owl1Nv5#7^D_GP{zsQCY;8!x8
zRcn%MkR@YF@{A(?D<B<dyGMTtT;n!09HnWM3rCq^s2V4AP*jJu>DIDXE|2FFNHmF5
z^;_GvEN)oNnz;@gcO<<Sk6uJ=m+!BJ9HVr08jH~>%t*;v0Pd#IVx+iYexiUO#Jz*X
zaBD5A4-?JY*@|PJfzA^+KB5p?YAAz7*`MKt-yhEG_?9(tx^#A_Ox%8nD&#s&k&S_e
zWNPybE~0u~j7<8NC)&D;PTYe~?m>8RL<aeIj<XB!{v%5chYuR6->h7$x&Mx~7SR5N
zr#$Py$(w+2dO#q3*=*08l7gNZ5;b;=Z%!pu<z?<Q4*>@5fsJX(mAIrR+A>#{vT!=t
z%EQo8#=+I-x5~nU<6M+kUH|$(PV(@Zl@H0y*D$Z5gEUXIgHG5NHWn-$*FGBjz`*hK
z{G8?p3Gf)Dgim-3g7*o@4g97L`z8<XoUlBn-SHR5vwUw!W-nFLITO<cOSeMbu!ykz
zQl5xQEy<SASl$l5bZya)CDvcHUB&2%|59t%*5O$bspkuKhv^_0Ak+I|Jli}A1kKnO
zE3#QSU&qYaRz~_Tsp~`D*8~4K|A?7|f=VMr`*4G%Pf^6=ayS+9IcH7?8v7eB&}HX9
zeQHh;hx2m0PuF*;YZoV)s68Le!n<z_Eusq|_<CPsHHthhTa>VLJYw}5$tPRH^sKWh
zw2kiKy80*Ck&J&-TK?)~wqnF^X;rg$*!XLUbKmSmI7(7?g3vpyc=uRka&-7HQ+v|2
zR&unzr3?YeQ@Z(!pAL6u#hG<eZ)H=~whigJv&F!n>2O1|G<Q@0Lzn&GQ`qT?B7K>~
zX?itE$w}I#MAonJGzX}9Z=5*aJdk79HNqwmw3?^Ax!a@|N#$DgZ}o{(<a^2uYZENz
zPtMS{%{3bwshKjiXj(|4X7_x95p%P|xwFR}WH=O>qdrcDN+z+(jE_U=#HM9j!B(-{
ztozKzOx`!6f%6(v4U|~sYIQoRxur#{iqyJlOhd3DTM=1y@u6i=Xdkh}@z<H!<h^%v
za&qQ81~g|n*#7cWZZ~ZV*w>l%a*yhB$U&Dbp|EAJKv9c;HRhpTmVb&d4c^vF^_&7`
z3`v)(iS2S}6z#N5<u5*?uud^^_)&SjOWENpM<->)s%WLI)%xuSp5G*Tep67Zco^Ll
zd&>rsMwxpR;e1j#tdjjOxk6>VOatcWGBL1r)QXQ*+2(VL+kF0J{E+(Y9rR8<87r1Y
z{N50p_d_IU%{sTe3&`r-u-M9tBilLJ$jzByw5Ytxcrw%>-d3blE6D!yXr2qa>ES{!
z;IFYo%7JEzkzYX7YMQaS>jQO#bBsL3U3Be-^4A4Oboo?$x%Fo+)m{2?tf&Gpuwc0K
z@MQOJIt7YCynrt4o*ZYIBD0q$)0|=47Hk?Wr}p;#?%Avo{cZ4~9>O4Tx8{5$0S{pM
zDOmUm%lqpjE_YVrZ|cy9ox|?_nOvVfud@j%)Gy2~t;Q0vz|AA7K8h872X^vU!EyUP
zg$q~;1t>7MKz+m8Qs<ZOcqHhCi&?~#;yP$B_np8wAn{nPjji&wxkA6sUK6o1oj9jc
z&C<C+0}cK~5xh%X)>*}nA=*>w$hStXPR?LL%9*3Z57*|*GcTUyP{J-AXg*uvZjF2j
zmyI2uDCS9TE$D}sj(kmbw(w`3un8tG>D@fQEc0{a$5PXq&o{M)2=T`JDyS0vvF!k*
ze1Y;A;-?WAV#xNIMxfYOmSrnpTt2k)Dn$crQq=^eU;q~#t|>=h{_kv28W%gK0Jm^U
zL7M%TllcPBs_17fso0Y)WfxJC=B$xLA%ik5{z!rBUoV7O7<{>MQ!#6Xnj#iy7Jm>=
zS}%;Mst+w+Z0V)J_za8PrK(!nX6Pp?W(WQ({$bACB#O%)!wFmpgOlybCJ+ly%v0!d
zei){H)9r=-XpYP|GrUI^=IWe{PHB5<wnQ{x1BGLy!CRBo!Ij(b&d|^FQ0Y%U<FLrD
zSf6JOm~~>y1vbpy9Z7Cj58D6qSPRqC6&RioP@m;WX7FJx82xNAZVBa`Kc>;;lqmPP
zYRWtcFOi$bfQtHS&&t!~4i)kj(#N3bZ}U}v6R(eihVNb6e_NI<RyIx4zKoxg{}#=~
z_P_7d|0kO3=Ay|4?!VAn)Bm8kr2hYCt{|rNZKBOnSD`o|r0{ZGo7;FT&d&CBPnV~s
z2UJX)zDiN9+z7|gMTTfPcxoV(o$r@jd4ne?$cOb85!3DHh*ubixD{iNG~idS{ptZ5
zgdWxf>%i1cq#Hdo#TzzBvwY?gUt0it5s5@kDYgupuyAE0GnVcU42@AkjF-uL`hae*
zwzj;f{DbplrR9D)Uc-$$XU^1cfQh(T<_4-!CFb}Tte7{#2DhHMoz)g}uXWQM#-gF@
z70n0oLO~wY@U(3L8lT~XW|68ZY|^bEYgb%XG=0H09w^vvKRc9Q;c$-Cf^YI~5i<iS
zP0uWdIFi>K+$FfC`z^U$&P0@>let_9=q6S|2jm#t_`ld(85%==Uu-VxZ`nrBIX{D#
zQK(FMOMXgxwzC6vq!BFU@kUxfD-3_SHpG*1U~XmiD$l%Y{TyJs?%{qj$bhKfvt%hR
zLP1K*DT`0N-24B?T*r=HU8S3S?KKBGe@xT<gUsdqMdnI7@fJj?Do`RxtlKaa)wrF=
z(gUvbgxDa36Gp#v^sqh~W?n*~{X^zj@L#%d_ad$+_#$(y{X^zz%Uj=+HtLYW_P&+s
z7VAnqh|)=ym?xuJmLNwxX%pdN+~W|h&UKb~m6FWySij$owmHH03C(kSu^Z}U^T|hS
zrI4`2uTEy#I6ADwz?ue7Yv+uA$Z?cv4<Wssn-bzd8h-pl`p@g;w{>uzSacAO6`_Ac
z=5qT#+=iPxHV(KlsoNhk(o+$JaA>U!E*2c4v7(IfmB=?>IkrV9+Hxv_H9-543ZC?s
zyY1)S<!`<Hrq9yvg3`9_=ULot`fmFEE`IsdY7DCvbB=9e3l5j=$44#h#~y5YR%~l0
zp3FGEB3NHN2u#a?78PV{bc-=0Y~mn=Lu)4w9XTx^D0{e}L9sD86}&m;s%GS@DBa2k
zzMfQY3^m%)elpHYPaf3r%qe&=p7m;$3nbBvbJIavrqt1D@s%7(C&NMN>x?=m&O)S;
zU;^r+wD(4JNaGwlqL2oT<lpf&p5OYVw)t74a=@CsEbCdb4z<!je9Qm9@2YDxGdXPk
zUbSzjf|xRtU67tT#DnrC9k!~fcY_$;*46zDi{*F{_O@`n^)$S--}!vHml8~2R7r!h
zYlRK1#J_yjY3NTX5JINks2)&E9&Pskg029y<p|O9g0J5iu^Hi0!|`@ElU@E?{;^@@
zvG#(qQ~$vi?AkJlDvDI&#*2g%THQ7A0%yl8;F*~6-q;tQ-@MM4zY8|1nuBFqu(8t(
z_mOqVs-D&<^SHl<aqW5=jt=1#F_0jtRFAM<tbO1Vn8iW8sD)_AL4e+O<HV>)jFeqM
zndliS%rdGSk{rYSqXKkeqev<*#!6SO47eT7X7q)meg%M&LkPkp_mq^a1*by(5>kTT
zuIQ?EjsEfAk$ok27>KLfp~;ajl3o036T)we3^37mt?l<*sGF1%I5fl|dIHGz1OAwd
zAf0-IibH@wQ*L5Z1M)(mw-1ipL0!-<`a?m9MF7Fa=XnFK^Tu2EZuRy0UyVEMd=>g$
z7dz(A9IATJj}c}tlc+qOiUmGc+trr;;4hKDbZHi8b09M!?NVKMyMUgQN<i$C;vzU!
z*NeX1w+T1=NQ3I0YFsPw9O6oVvo&yF9#GTnM*?*zKk`3n@hn_1un|Xi_yf{7>DBdm
z+S#)HchLm>2fUJode|*s`nOi1=vtf(R_hTfX49RJs2YL}IPKgEX76c8M1z1|N>En;
zZ<xP0*+P_IjCSye2`~AMIFZ^rz99+a;>2{H8`?tX?}U?O-k(Zv2jIhbxi+6tQOnAs
z!Sasr^m7yGl*4Qnht@<Ts9Qmq&=-rC@``)!fdk1gX1mbj-mtM(`Q%LrEuP4^rZRU^
z(lvi5C){rarcaod?2*zW$17*F&HL&gtv>z4WAO>W3Ip$2e0rWl)<6Y7(?7UK9}!M-
zZ>rqT@gdOZ-6MKV<*;8|m4!l%ktUT)V*&fJk~gH^-+a;!!oTs$D`GRCHU;EBzB0W8
zT(ShHC0bCR)Xnq$_+gNO><dN@q+LreE`DoL63Qvz4wv}Vy3>JmgYB@HG1ZLg8aE=U
zVx~(HFwg|0foB1I(P%sz7K6J$RJiP)6&CbeHVwo@YJ~yxuHI@BEE8jci#Qnuh7{9b
z7FkiE8N}dOuxrig9tttux<Tru1W<nS7v-K>HdPi3qD2<1b|{(-<u~9`#|3UF09Hl|
z(kVaX$(Jy3Etyx?6gA2X<u%XflvzUjc6WhR0+WXaEcl+Xf4>K#AdooP{RT=q!l`v?
zxxVz<rwCk_%_ok5E@x7nM+_?S>fZRiX=FGCC?vA>pj4OcPmgB{WFoVZU&iox$XI=F
z))>d<IK&`JkTe31;155sJKPRiDKX~qxQURJdSMU1^gVqE;M5w=y+u&zC7;p+!$<M^
ztL|>TRZxN!-mNn9is2URhWlgTur*gOY6jIv-C4$-nE&#E<F;>&MqA-9O_`a-b4<tX
zD)4y7E|oDi?UrlKvmgRfLKM~tyq}3nBv*WyNT5<=d4n$<X9lrAd89mxx6q)J`;N$Y
z293Q}0D`R7YfyxAO)na*d7&{xj-}cxCzu6r`Ae{hUFmvLbXo}$iqFi|;1TgWeI9Lx
zywU}Q8byaBjb4>Jpt+>ynxt+*(~Mj%xd*6T5iSZ7_$Vjg&R1V#8Nj}|_DZk+6s?*-
zhar%UFy~)4%WMC(IoVPSGJaN01f&}<M7=5nIYcbMG#to^^;H*c`cb4wiZANA9$!Na
z4w{jJ#RWk^&O8vIs!+VZ*xR!hoa8=n?7gK5psI-o(GNk;<zX{CW(7-`1dq0OMfT*7
zhLMgGSe|w_5!UI#kR<pMt)bT%WtkvxK>@0O+s6ihZ$bipPThK1JhetBU>hhWa`Vjz
zv@1|<z=b6RRf-)0I%kB-ZStz_XB~vq4=cjXRO~>HyFd$g2z!K&6yMw2TR4acVQ^ir
z&wW;6qLr!-A<;iz7^U&a?9)4l5~6BDAGxIMGn`J(6hG+&Oe`+*-vwNr4@Ub9WHFFR
zBkqnk3xW-NY`Ka$K8fV}>$S*A7rv>azP$!Of<5Q`x?5)F!h)E;qB?RIgTjkX1R{$N
zar1AN@uUS5)tmyrpxcC>5pz(Gd2u80Prw#?sS|Xv90WA?toa2uK5llM&NdO+i8}qS
z=YNeoKDl&|nxPDwl4iv%_YZNH1B+aUk7<SuvSe3FRSPBW(*5%b(x+I529VnUy1d|~
zKsmB+@R|T^D$JL$UAU~8ELi0sQ&)h|WK#-M*TW6DK0-RMw?y-o3>y@ZBlNwV+=eEF
zERDn=Dxzc9Aks~FkQ~+b=Xr|g?Y78>VbCLv%T8Sqy%DItq^Pv9Mmy8w$r@*jxeo6h
zo5Q^eJ}=%nH?JIJe(^7_J-!KG+uu*7L1OZ8$x2W?35DdezsraOt`4EPLprJ+C9Wy+
zVvvs}6(n;o?ZAJZ*{1|44xh0phj2pgF~e=Cvm_|cIS#kZvxbBohT#hJ$uxn+YXxP&
zr-&4$yu)06YdGLpOt;qc%6b^yinuDO5!4`QeWxNr{K=Z<SHV>K?ev6eQKiE=gUlr{
zn-bm;l!`PRIf|;N?Z%6I;_VLM9N4NS!MQDnp>e%UM0y09kQHwx<aYcV3GrN^VO?Ap
zV^laSoGG)hLpur&w{jp?W-lZTM)*BK6}LW^wZaqu)rd)v?Vy{?%3i(9;ej0My$2qW
z4?`rh@WBT%!Mc`y`q$Wg2+n<Ga;>8mZf@fR3fIm2y>;0@T=U;4WXv59&2On(tI-;3
z+nnc37<+7VHiko>$wO;mOPV;obg-saDor<IOLx~9e|VFfNl$Xwe+4CyD9a^NOR6%E
zRkRy1VM6wu3zJB#(Y|s5S$eeY7{T}pL3fiVedpW|LZ;1f-QScF4;2z8<51rNx;oMG
zq~->Ss%c+Srt5d#?8K6Nj6<82lE&`D5*u?KuIjZS_oZl`@S#WP?1TqkF^SO{b7}xH
zp2H+@s{oDkn~#A`y%><l26m**o{(Dt&%Q|MLz*$aa$x`p-bg|n_mG%A_1SPo!4M?Q
z#8~eN?-&&eGxs8J1Szs)mVgmzoSQ|!v);^kEbzv>HnghE8N@pAme1rDP_#wP{+EAr
zb!0WQWQ#DZW`e^#3z_JhbiYO!o%L>Uruo5+9Z(v+zBL41TVK0eV-%2OwaNmYB#XtS
z5MQ=qqpRg$&|cPdV))fCk%?g(%hUPVpW8*UEyChIct`_<?0z)|bb9cu*G3q091}bJ
z(CV^o_Um?CO=A`wHj`S_DX&K%|M8ejmWAu$uT8&!odogS3s4=t0*jkAvzapZYAb1^
zrln_tQ^toC?&CgRqY4JSSTBYID`1`px1a7HWAKB0tvd0CF049Y<i%2R?AWl-Rloos
z&VVMqupscph^G<pA<zm{=>vjwP10#)D8^Xm$Alq*1ELeS#Z893wR?za9wtq`b8%A8
zC3(s@1q&>DrI|5|qVz{wYY>KvIx?3*e6doPPp|h@(c4dF>-q!(+~p{m!I%;fS@+@n
zp5>vkxD^+C`QgH#XT~lf`Od$dytoRmz4gNvt+ll~Y|rtn+P;^vvEw5P&Y>anGp$wx
z82i0Vik&!KqHIX|olv%a6Rm%u7r|sH<iIq=*fc$^6mSqM|DyM^W!&mN!`UMA*OIHA
z;b?aS6&VP%NgnJS<uja3%v=}^u6fcf6;loS$iSFSsk(Rl6_MdYWt(HD6kl`2{#cK7
zf^^YlJ=~t_x&Qa_*Spb7%?1kkdtX@V62@?F9sYn|*@-a%sVNvCrx3g6{KNcViU?)R
zAX48tduL4#1I>*FM(}~#x4&n5dukY%`o@JxzM`aHKK8-j>-3o`3?ZLP|BtbA3KAvQ
z)^vC8wr$(CZTD{5wr$(CZQHhO+wPt{^LFOpp8Hf$QBe_951Eyf>tEle2pIj%)`97H
zXbZPE&zr`5`%4v+)Oz=O_^(|R;qQvs1enmK#PI!8ZuR({!mhH{Ap!scF*Am%u?ApX
zf|;+4kT9gbjo?gX)hUVvu^#98V{r9L4wN;E-8l)KCQW6Q6nE3i((1aIVJ`Wl_z~pM
zB|j;^R{A(Y=!V^DXIEmkP_WsM%ONi^tJ;vcILPCIri1#@^$jW;{c!bCo6~iaB9Z?@
zshfn7w<aPHO8+z#0dD*<QO2Y9aF%oP_vcH28FQfcK0Igg?V_agpBSJ*xT((mYP}NJ
z5RO4XHUSBxuf5UHNyZrGp?cSpYjR&&{Cxsp7rRGfZ9&~Pqh8hU{7a})LU<w?V1S;6
z;zzF}^b(B(O~T+@`F&r63o}^#HE6TpqJ8odZwE958x=7(Rf1I1lu>s16fri9`QV6d
zp^E?mpYFTLY*RK61ib|G>(;evQ(R1N6W3+ZxL$tRQ1yBw3eR^l3bkMLguY-|ctuJt
z0r;9#1;pSWaOx<>p*%?f>$GkcVh$|Y5>{9r_WW_BsH1wFq@np3DjRHQgVpp6Lba@k
zX?t@8y2wVz1RD0)sWUT$6BBrn6Lhw79I${-lMp(&?0^w+NFhh*;izB%jsfK5W*ie*
zYGqSFE!+5@h*a-!xu)Y%95+hXRf-*P+cG!TMf+R+WZQ({>8Oo|JWBOyb%^*s(*o^#
zVM<#Yp-#z`Bm8EDqUPE8hA;Ti?dQsII_qjDeQLnrnj3L7fWs7fQO|vtt(P8!0`ySx
zg$HFSBV*&39Ji>Zl1ds&dql-a>F5c-p6nR_VFe3*issQ*S{{Te<nkg^C}|J^5Hi?f
zL4PbYmN`)^QjcmJ%uM0e_WaVE#fh-Wr}8A^qsI#3CW;)A?;uRo!l9y}a-@#tu>n0#
z2I8PyzqQ!``DLln(Hxr?o@`3bjBZ7y?~mHmL2KQGpNyE3`;bKWy|OUSM)9eeD^wR4
zOfXWp%OBGka;ShfCjFVws06T*g}(6asd0i-!lpQs9)e}=8~#;X?8BLD(?6J$qVVj)
zqyjBD9HS^3{@MZjkhKI+2GBvP6NY{?0m6i$uR`&yv7o(#mq`J0BJUVMrjL!TfWQH7
zR783DKho9|j6J(w{#AdB@DnwloVqWjk!~NQ?%zjdvxw`^>Y`A}E}|^656U?;fra5y
z81X;at13lSdz9y-#U1sLe(H?e{Mr7lgVXKop4~aC+1JrdmQzpCgRiELE1O?8i|U6V
zO!sP(Sbz>?9X^c9LP*cT=!yWJOyw{xP!}o^i)U7v@chPieRkt}4k^^v{cf~i+fEF<
zKbstEYIjBAzj~L?p+(FYKt+A9{l5R+ZfzuxViF=D#uF_R=;hiPR1{OhvY{+&!`q2|
zDaS`f!fA9_n~ZW;M5HDeCe!<F%kW*j|MF6eYI$%%eCx1F6nk4H<@2=n;h(I;fL#qJ
zGBJN7$ViZJ5&77!YqKz)M?bnvs<~^PcdL?{aHv^nJ9$-|Ams&%uM@!Icj&0yXfxpt
z?N)EFd$WMOC9Qd6pKjO#DOf-KLJKqL(<RQZ9X(`z{6rHsNj*&d0PPj_c^{NqYTFT0
z$G+m0E^W2P`~<_VT)O{lMHF+PSg_PWd(h0GZ=u?MN2oJAG47|tbORn$D0J7qHB@<^
z^2A&GURY7Vsq{NN>m)krr5J3m{U);SUQ#_k2G?v-D^b5vwILTQLbQi$A9W2=K)?_q
zY3aB=Ao)Z?Zh7_7PpF<jcHne)mnyD&s#0*YzLjh<-e_V5mERWJLNhp$z|-)6B#LGS
z-ts&V2biHv4iiOKWz$~Iq}{4C)J6=UHqm`~5#dc~k!58Rx&b@JSjU8MS!*#n3@OM4
zaCEkhLdVeLl%4W-L4fVsFgh|KJNsfnH7!_s>62%e(Re`TfDt#42^`d+u|FhWG}F4?
zY8*$e%w8`Ezq*(+Q}#THVw7>^^+})Q#o~iI!x`e6U(eBltfbm!g58Zj%iHihDOT*e
z9;nnBkzj=o4Jn@>SRU-fpy(2*Up;*C;s06Rw4!;$sLte%a_Sm_c>g2hT&jf~-~gZ#
zL~y)4vDv0;ES2NN?K(IiI~D}@9s4RY-0x!Rw3&;H(^BypWkwI-O=iTh_7<3#%vq@@
zykCye>;ptLzadOxF>KgxG44y)8saH~XiQlmZyUeC$G!u~oc}vrM`bBR5P(qHbvGM}
z&xGb1>BnD>M$(6K`d6l%eYbQ8UmV}bzHvVfU$%<ovh7yO9(J|mV!D*8mJMCzW6dNh
z%3}MUAgA>46q7k-BO3yGu6H$$?<Mrx-gVCzEKs4A>v}Wm3g77yPdDHs=;3bX+P6Xg
zPV97X=lrV}G}@8-H1`wFVs1?g`!(JuoJUsh*9E|X6Su3Wn&0&$-xd##{ktjVh}`KD
zoSC$T4)D(t-~<Nd=#1=G28C^IfKU7bA5O^0LO;}Awu`pXesAoz`6kvYS#01SrAk1J
zCDa$&l`oIb8n8FNCV!*n_xKTre9#Rx`)d&&Po&-2=Pcs&`$^d(`r)pCF9uBaylE|0
z*FU>~el6dfM{dWVjqOG)>&I&hQwr?86Y~S;_WkJMijrzR<I@oo`VZ9H|9h1I@Y}(|
zZS7zA@8W?d$|i9@<WsZf65#Jt%qA<Zm42@47yC0bI2|_4x<}hYTKFIPH^zO>nuI)C
zz%TAI*=z^DpVZI!RVKaH?d3I3Y#-d19@uSc=nGu4ZG;J5J|LcKpFfWxi2Q$kR&cm+
z_jq;azr=n$eT{z`zf8X#5`DkO{&TC7N~jPy3LF4H3h#dh6#3U){a?1{)irGo+fe=i
zMet2<EwIWBO*=PbO%?d-kA>AlWJx^1G?DR*!W)*8DFli}AW$E7J;fy(ZeEa;>BD7m
zZnvClj<)2)%py|kA96xMiNqr1a(%uY2fgl*HgF*}h=Vv|!gUtk_=XO}C*K%k*P+c7
zf~)}b#z>=zbi?`nhz6u$cmy#X6h?gzi*yZ;Dr%Zhqw*aE;gK>0`9v}~IqV`tb4;Kk
zc)c+gk%JQjjAe=;#t24qy(J0fOYsEE5b#N!aAanMpDH5XwnGik#*y6ypm-r9C8V2E
zJ5SC>vY?t$*gXo3EZXJX(}Q|NXwlk<%^<zJettf_b4T`rjufb8;ohK}@v@n^9F>BP
z-HH{)>H~;^f%9B$NVeWP7*^juo)HBM$0dv~R)sD_GUn#xI{v$zJ_qM_z8MKe+vRHA
zaO>IUcGK|>W0RcS6z-7DstI&2y|3Jo54!jv{YwJ5;lXZLmwkfblm0v4H^YZ`86IdM
z0zg<EaIOhFi*FP>_s+b`e3AgVe=MJBN|`6&@~!SRd0?=uc*nWw^wxQ<SYdJxD>V+6
zru942PSt4Yv_!orujP!RAzWNLs*d!ZskhUOS0sPGmtzN^^N*H=W0756TNRiTw2ZBp
zw1LwSbD-Fg!}3(b)I<nORrG@LJqCq;6OI`-jQN-&Av21BMJI399J5caq@Q<c=l5TQ
zs}FRb8d3XD+-R7Ln?x?;;U~Wm;()Pg$5~kjy`+4cu?`aG#j7SVb27n>@k&6qsQtm}
zrGb!;pJ}u?<|C}GzE28|@Neh~|EVeYA>u@eEfmmwiG>t<y)G*iE~VS>bWUr54V*p;
z*M)9#<W9lu<VJxA7Dz_QMDXK-;)7ty0UAm3I!GwRzlWgxCuqDA-K2vBeZJ8`x(x6>
z`lGn0g!K~*CDQ7d8;OC@WR`}PYOUAN*Z9v<yQqOfEj`=os7b@gHvsoSZ1sj|9nB)m
zrav#KHU^e~!K0W%zF2<`hwZQjJq9e{iJfx(mDV~JTuxBAJ{&Bqs<NI3y_gYuQj?<W
zpvBoD-E{CcAGJR^faUj}HHckNn3++$0s6KxA0ovg>|cGjM1)nlu=1(oc!Kkk%0ye;
zgH0~d2DWEhjIC<Sg9DA^8O}e<<Fr)Egvge?Ys>*aY~_OszP1Ylgo0~Mk|KHgpk_RG
z<DN2u3Oo|W*8{wszX{<)F+JKi;9<?Po-?+oEAVADbRd;Petrq7gjPtD0+QkYDG1^J
z!Pcea=KE|Shu9AT3L~mGe@fUD-N<iiTY8pSJ|^n!fP792%@y(s_=7_2m+hK^iocOK
zJd>9;Dgm1xj+HkHa*eY!riKl5CX@vv4g;Qnzco2K*W$PPrFM~UV<TAx8CwQ4Pee7x
zF_zsrgjQyl$&QU&>BPJuvy3DCbbHXdh86td6Q$hG7>-H|a$tcH5bf0BM#xyaPqm@I
zU+z`?F#ItewPR*z3w;j~rW`SxtnMWel=V*8BfXrQ^zG%qMJOZ)SBZKsyDyb=cq5x5
zYA|t%ZjW6#2+D_VT+3gE$MPT>Nn9y7Tv4AkG6<(P{k(R!k#(UjLqiR8D@?QryIDI}
zSc@N=Au$S9iXon+MH<d_wU#cWMNa;{r?7OE;<L>W+S;JAby}7$Q<hXy+^-;VstHj!
z{6)A%7u8&@s<hLN>P422{$X?JE}@t$4id=Irt(v%25NaeEB93CzI&efac}=jOU*CY
zH@v;E6T96bpF2+Qs^!emP0%fJQ}<oQp86ZcCc56SxkZfepe3sAmN%q|3r+ai_u#sc
z5GXPcmB~>wgSJax&wo`sisHaTNrU{+rm!SY5b{*u;ia2e#)P<R5-=mCf8s@GbwDsJ
zUip4}inaPWS`A>G!(Ed9ws;-6f?<dm#z*K=;Z;0!06_W&6j)iu<4~RvJedvZTWuLt
zqb#bpVgdG#CA-RSbF8kUqJVr$a8^OF|Hm3#FRmO-8+6_6vX1{o1>De06DD403K%3U
zguK&`L+ETp7;Gua$+n35(S#{kdcC`e)&ZNnlBgXrqfVr5y&aj{Y!vaupJ??3q^|el
zKYDeobhnhqWQg&J1_00b1usRJ$s4YVfpZP4C>1X0!3e|#@ukH)^2B)0WP^eaMbS&^
z7!^esb3?+YLkh^b`R)YsipyFjCfuT6f)W=FZlRy9&JY*H`UCUlt_dZL#2Ez9Jy3>c
z{`CFVM;`z%ZCx`k7?KA1*=@DkNWelG9<o9+`ovs#5Y-OA8j?Hgl1!Xf$t>8+DlO%O
zwN`a3gHO!SN*r2@b%NUjlR&yJf$2t|MVAM(!itl}9^RT%6qVbPR64z|$i{A{k0;iG
zF{nuQ^nVL7(Lhn2U>bbSM0+h-3Jn+ST7=GqOHn<Fcgxr{xSLq$=G2&9sLoEVW#ii)
zgzaTs4n}#Kkas(V&GUXYLR(x{lsnO;q4HT;X!jk4ABMZC+npWjXioT^^KzZogRgaP
zov|*zGuY_HE6y&a|F&N7c9M8lVy!I3om{Im+Q=pj7vP+tJt^n5(jHr!S@P;OJ!<CD
zd{43r18&DS-k}(sU)rkn?==TgtFhXz^S3uFPnR=`ZHd4J`)*>iR3W*QtFM?u;yF{x
z-gcjvylouAoGonePuu^rFIwU7ZP+0$V!3b8x}Y_|vLkVgDA@u-nm*+p(+qi-K8M<I
zy<J=MGcYf{rIOA~q|&TU-!%_INTgF+UCVF=+f1UG&1cu}T_-3MFmyR>e=OIrtwh>b
z?+;mGZ4{QT&P^u}%&#_d3$sZT3*M&8UW|C6Z%g8Yr<^`$UfG~xW8G5g<L(5!x71iW
z#|Lh=G-(#{{~B2Ls119zHl^~iY=Df?W=H0-n65!HAdY3mul#!XP|>kJAT9X*f1nTj
zFb+jNLI41lWB>rN|ISWxW1;78VfvpJJ6$}Mj+^WW|0=uk<7g7c#0?MVraZ06QNp8L
zV+o>3*>4vWYE9tlU2{btMPF;{U$2*-{D^dt6NV~@<Kn`-b7wZpexxVLw|-A!^qPFf
z_tVxAF+07!zXo%B9%87iNz$v#&)*E`$LqiI#u8aF?wQBKQU}Bk=|qA8Crx?pJkdHp
z1Vt<{smwHH!mQ@Pj*5~-h&#fZZ+GbcUMt=bW6CWAuKP$5jR{te5l;Vp3Gge~^MiP4
z&pU|iB~#Y7Il~8?B*ulbb{G!=qVWG&+!M4@2>?O?dVB;G@BR>A)Yr2)k@aZuP&LTF
zE)}$qKfZY=jbQAZ5>q4GwotDQ^XYVZxVgEd3*bc%x~Ctr{bR^c&1a{!9%}>b)xyH&
zj8dIFMP#+ljAeuA?!4^k_Q1}-<{-IYmM)q3rLb$0W`-r~f`qEB+P^%!<hG=U@mrc}
zn4Cjq$^$3igQr{?Ded)wJ=GVvOXk4j#`nVJEHX!^f`Qd~95GMg4R8~3XwPRADCWcE
zg~CKVeP0611#m(B!Ob?4OFce>D6~_UTP7tqUd#Ym3^?ci!hcoAj@KzA`?&B?2S$2z
zYz>_4B%@3Na^`g1raiaw!cin)$8^&MbOSHUM%CjnN7yaW^O@YFC*yI;F*=VHCY6;+
z&SgVizJi7Ef>_jLAC&8VYGTTgl?{|K^#XJVm>v`(a)SVFXJ>Uz!2P|=KSON7W~5As
z%_h?$)~nx4b_}0b7m8qAc^*agS_tfQIb1jHg-e8?A)aq9V1fDQ6@Aj^-&8*SovuJ^
z8TW*w-~2cDCaX$6yzWYhQmrS1MrcFOlW*q6zW8bppvhBfAw;R}1i}Wfof8||j9{eU
zXXC(JAn{5Vf+*knDIshlkch9U--3XAAvGS(@ud>32xM*dHc3O*{Ye!B1oglG@h1s@
z0W^zF-VzJ@G}}(|(lO45NebCz2;=S`N|3EW!^tEfAcdmcwOBvw3R?Ax4joRCFstFW
z#F@jQPvL9Dxx>=np^EV?>1XOgv9f$r>7)0HKxZwJH-Lfv`AmZQLA?Ty$9&i_J7p9{
z=+X?uI@7d)8a)FshA16ujYAF<m?j28wVzJ;`Pj|^ITE`TNZ4Lw;=vTuLdYW8fqcol
z6Qb>8Qtv5s5Q9Wwc4ad-WY>!Hh6c9UJJ~a1fa<JmGL@Y=^NssL3v;XrET>`chk;Tq
zgi4la(YA2qL9AoCBHdIK1xiC*Op_}dCeviHK|_L5wOc|i*&<WgX5ku}fW6r=ViuK6
zN(j+8e=Hcw_Yb7%?7l(H`EXg}sBq`lT}=&5&jdg7Vju`{|Be9mXdz=|fJtSfJ{%f2
zM!(m*V2l6EHyuC8m7BBU3F%ED4L=ms6eOt4CCJcsn1K4?@@gwNfDwdlDdJvJi<W@$
zj<;B9$80It9)LcJqtk1b+;Y+*@}dy&Y5P<EXvt(b+Kzn>lo$gG%EWG|gD}?tW$Q+v
z?VuYS^4n(gc;DgAQJ?G_83O3~=Sppj54Ur<qTZ1A?e>(1!^PafD75>XyCnwix?#aS
zFmlHaycq5KIGq-?!cJ}mm6(Nr_KX|6jCVuQdYu+xO>MQ4aWNBp&S(2Y8Q%JC%@6#^
z_pGyf=O+-JPrT-zfpoA(9@x`^jPIvTmK)%zV951(vvqC5=K+SRpondzt}&?r#~3s0
zV0Sz%6HaX5dN9$~;Z+}dyazDPAE!`b&B{%izJ$c#AmA|VX=`9YiqJb8PhVC6k`bUG
z)d<}<%Hi5k3pyccHfO%SEaQ>S?CCmxtt?r^Oi{HbJc=HXdIHScsgOZ)tUY;_wFb(X
z7ia!1VV&+)h<4V>B)bTybWA(|epJmCyf5pd4Q{z#EGtpf9E8X%x!7H1UR&#WY{4w@
zYUaj;{?{McFO0Mc)F*R}z<e&OARAd=ZVDI+g)+=BG(hdENHKN-fMJ0=i)m<%^rs2%
z$C0hn%lTSA267Q_nkDJnZlBhID#|p(Eh6^l2^3WlUYW>t$uH~)hNg>tsgyx2m;Nmy
z9=g_okSG4^@Yb3LDb!XD*o;X$R2X{XrYqw~ymDlUR(ZqEY(9+qa)f{Xa5hR>F#alk
z;7yb;3ZNl26QK_SR(m%zeE@H!dwn2NR>MG}dEXC)QDQ-=!8oiPn2~8*g8K4(Hs}KJ
z6o_=7y|pbMecuVw4xY+^NIA8S_(WEeo@iO16GcRtUAqDOv%mb3n)al|*e2z3g++p5
zI)adY&AREUW_+>$%+OCXrx)BrDNZM1fgOBPC}kkyNhOn50)<XB0YP>noBBjm+i4mY
z^eKlGd>8z8X4TSxi*`-1Cm^s0we=OUC*)7a#mP3OP`DBW?SyQH>~K)=bL#z&jLZl4
zkll9tVja9?6zOSJtXN|oMl1o6)0a69;4@zAXKytuGCv@qbP4x$y^jvIx;-uF&lHYF
zX$}{o{f7!N^VI&67i(^gXV1*sjPY5M;TTgz&_Py?AnqysFHR0eVr+w7Z8iB1ND*5P
zSA(-ij=yn#p9V+lxjB8dJ|j3E@Wdu+(mT)-OHdQTzga<9=eCO6@zu-Yd;rtSW2V9N
z*wIQPeY#u97WxLq>jl-cu>H|}A+M{|(ke3{_T#xF#3;7;(wsHIQCflVGi9NkG*C3w
zfYnk|&Q2ySoX#Z!C&3J734PZJuo@w6@?+`ig@!;Tpr&&<NRwV(Znj`K{e{Xqf+l{q
zR>i!fswdAKn^eo|POo>0sb@Dnl!7J`huGOt1N_uC9l%qlBIB*M;jiqevN;>b>>&oi
zY|9rSjY-w9muA||VwYYcHY-LGKbnF<Bg^UfxYNErU0W#)hj+?ukogxKLp&w*(mK>C
zrCV1#gAI#%;$bix1f`{o+R7eEdR7fJ75GQnNH8CxS()03!D2mI*T*4{iXyx5=3~fn
zZYF*Clvr-@)0SmBEvx&Mv?7cvZ;h6jrQj42A;-PKaO0Xkq+Z4!+ufB`>hRQN+opLE
zo)Vy`-w07!g2ep|8LBoHB<^*?+2;1vp!tR1y{+_VI||!d(ANV67qG_HDChGbV8l);
z$|bgFfl4P7{?_JEmLSoE1~7RLg5QHdgB!_{>XYJCeF5wIb6VNM&gtxC3a=xXT_;ja
zMiIdIA(a$qbyoom`~DO&AGB1G=&xz#bR~_ftAV`Ot1<<_IxATSV~t{k&zwa*wmLH>
zyjA)ZdvkO_81&NCduI?k+?v(6WQmeIn_d2^+~f5_q<$Q(En#RWN|9e7MS01SQlW<r
zx4F@F{#0MyZwD0ch0QKI>=L%jyAp35H8xhN`6jcd=7P)nWN=M`x08Xg^*)W6fd?1q
z#monnFsx2@HB%r)DnDVFDP|7pth9QV(U~n6^vcD^ad;-0UZTZI8?c5sYw4xOZzyPR
zzJzVPkc8rKq+GLOGNDqE-~JK8&O%9CV%e@WQ4nGV%JRCQZPa)kt%vJ5b`pjnQLo6P
zY{>lny$mB}BFj2bH4~~yAUD|Z{L8_C5E-;KRm#3ws)RO_*hp)r3bytjcwWS^Kf=`?
zGW^j?{Ascys_e%0L2M`kbLL>7tOCDnK%+ISMC_5ld2kYxHonZ5O+@aA@oZvZ``u@%
zRz>$_$~j#b0kF?-QQAh-w%}$tuKf9R*txTT^bvOgBXIVdx3J?(_G@>srlDo8Xunmn
zN<XiA>jbo47b!{C&D>l@gGzkWF&fY}AjYF`0uqr8e{?(e<D0zxCc$!DW@$x@w)9pq
zMcGh|GDp^Mh`qc<`iia|^`f^>lit(^;@PpC71=w9Puy|lYd@gr_kM&f5ReiZ;!Hbt
zglc*$@g4nM0jw`<DaZkI-tY0w5wD@)L}K26-M{8dV%mlpKz^1`G|yltlyfzy5B^j!
zDqFwjRTIi{Tt!A3!-y1Db=SSZ!=aR4j%P>lbI`@4*|_|^j||XkrlxC8nJTGapdFhu
zAF%v|*<Y-GWO$>`lH~dp=88b%&s{6Y0%E53>p7E0=XTBuk7ddbJYPeuh$wB4r#_lC
zPa~F#vmvG$K->viZYp+?h$NgktdK#*7>}2ad*KOu%CqIy#>J4gl_qz$DCZm;s&Z?O
z>>wmGWXK_rJ+=n7GzH&U{&L3JQF4$mk08K~ykj+vyt@%ZyDYPvV9D~V+i(~`T<ZfG
zVTA5Z^mb$xW~&4ab6q5Mg>-zvz{Q{%VDNt98WCpblhjd9kVA_*@_Ir|<MhNMv)WAk
z^YS_B4PrCEnrnhaB)73D*v3YQZFAn9n9s)LczP;hGk**Bw=KTW4w^rRi}9QTkD$CZ
z9HQ-~9&ogQ^C}GJRn&hFhXA9<AB)^B*^IhYelKRpr%k2JP<b8+Pt*__dNgM#a-zYR
zTs(o+J;&%7F^KbZCfb{0`49kd1wd4;eG<zd-CsaOb66qtPnmyoAtac*7-SMtJ0pjS
zg~AU_{b#FS6BQXpo@Zvm5|J-p(WN%egBX6KU^06o|KR!9vNhOYmE`%MJRZ8tDL4zx
z2UFq_f8fBQtJ-1C?B8<cviW0qSEuP3c*vw1pAP!tg~b&Mn?xvzC`L#e@-n&7cAIBo
zq7(qIOPQV-$O_zru+ZrbQ1}SNY8wMQa95%ZNVaeQg6Z>I6{0~)q|{cY_vVB0RMLxw
zCFi!TxDXWV2uMPouI;RsFv7wUf0a}c$&i0o8h7_<j!5+uigkmNKva1tVE1j&<n}a!
zK--o8LE$Xj>7X`SO@5mFXKg5QwIbfJ-ex~WR}RO~f5Ns=n!M&&W`izUtUyQG0;xGx
z(9;<-oF^VSu~VoU>Qt%F6%KUy(n^yM#n0iRMWYXQpugX8EZwrd_AI2mzp^nq&hCmT
zHV;X4$ApG;61^qsLKVx18j*QhN~Z=@WGr62;mYYh05WPlvZu*M%~N6xLsdmiI42<A
zupLaMupi6kutpttUFPuCH!Hh^{!n!Q(d6e{HRT$iuqvlw0^DI$hbK{@{Z1vY7^_s!
znJ62)kS=Pbtb@m4CQ&YH6{7O*&@BT2vfRG@n=)_i)}h}=9ZV?jytW%3tS)FDQSU3T
zm!5_!m-`xnj>4Mvy2p;&E781#$Tc`g+3d|Wpsb<VXDDAmP_1SM<lvDcwxr!V9dnYs
z_faz50iQZuvN*jY$dO_&8CYKBLd6=rZT>RE<^)?URone?R|6H;&EFTdM`e%PbylQ~
z82=2s%Y`zL{03+sB9=6qn}Ja!&`Kx)vYFLpp##^Xrc2^2ffdip7ZA~kKIqmfIL#c$
ze`@?_ZlUXhzV}LTncd+w8aRwm4{m-xfIpd)r#*Yz2YFv2u8>{j<zTO(Q=;2*QFFYZ
zS+qxu?|Fb-y1|CO`?e@I345xEYa4vd%iH~55-I1!7GEf(Kkvp^-=IcBS<bOCZlcZ6
z7)pz$v)wRPyF!fWwh?Kc9$LPg4u2sBmoMad#CW)9R0^Z*g_3*K#lFqxprtl35jUQ6
zSMghAe;nFvQ(=6f2Z74}4nr&a{Rk#Vs{UAlwAXm~)ADE*vR8p!@9|m9*|^_}%*e(y
z_Ov2CW>PH;pmOdXxi|y&7UtlPHLP40fAMJTWoyxssN3J#y2A0g@{Ey+N`HL*BgPYo
zRaG6*0a0Zkgrn&T@_Aii3(;V`Vuk$akQoD}ua~m$kmu4}!=47uJt*JKad_`UexDQ(
zyy=K7l`Z?Z-}Se;5v8bH$^y_bqEJKN!lRa^q4GGey6A{-ARE7brOXHwFKjtnD;fZU
zh7NLNyun~!sNIcSlpb56NFRB(PP+ki_j!Oww;HG5O0lgAhXq~M#h{gRDFx^@yS?@A
zZw(w4t`#PVvgWlbRb6macCo@mQ*x;~y0PLCN_$`tM2~9gCdQby>bZqd0_&$`J)UEU
zcKxmCA_$Q|LG?fpQr)==-^~J5<$>}e;a<vT)}1HC5C}T;FZ*IrUMW9cHXw$!#R9Hd
zTul@8R1$t(EFV2$uO9siybm7c1AHB{1Z`=*syi2>LOf_goGO|l!n=xJ5<!Xm&>cVY
zo4Z*n_C4=Uj#A5Y^r^OkRjNQq+RdwIvJCiD#1MLGU>jmY?dM}HWPD3R-pv-vuv1(!
zif*g;1J&>z68wsM2K4C-o-f>D1cPrkXQ^*S7lY@Ur@QK{?X8{P#?Po}jIT*mQJS=;
z`q%8|lxqj{;udOouW#b`U7a`1*=o2!H;+CZ(NFV+8HyoX;*XpJAyykPWJF&GW!p>x
zF@XA%zQ|pjcr5xDY-imqz4#_BqV1NfjT_X+M$lgp#BL2gR?N2kB}u{U+?(L9zZyA+
z_9T6Sk<JIlh5G&a2n6jgk(x;Jyj9TX<UC{tl(aRL<w9QvFo`=Zv6eR*b#MVwet|Zp
zb8|``Q$~m5f#I|?waOw4iZp7SHLwhSb$By`+g2Z4r7Ls~j1fD>DSyg2#`TpT=1=HQ
z`4}AaI%~aRW0`;21qQ0Mnk^?=>VGi^h{eA1!S4;VuvS^QYCKpuUr>Lz)-OlF4~i;D
z;%!s&dBw_f|5nK%ybzVk7G$VRqfmHCtoW@CG$TTz&V<@u_7C((2w-V4Vbs|ltTwA7
zf?*e-0xx<|7SV?f77Xe@#unyHwKX5SD(7sQ?*|)8LclCecXX89<vG)k@dV^m9A7K5
zy$qR16vIzB1r|Url1~-pQLL5?ZDL-kgFvWeTB%56v3i~)V9(>*oCgC%91xO|t@qft
zS1Hq++!^Dxx|3PP7LMY)yK?VoR4^L*?87Bk+YCafnP=n+tHds>H%uf9C&Qv$0kL^4
zGd+3CxZ&20Ie{*H+wV<rzo51?;`cT>z)*ADypAqgn^Jh=BWRQA&*)5{q|O!h?U`$v
z(Di55vVF~TP=|}BECg`N+iNaK72BMq@CJlON_3p~cB{kWf#k5p8Q_BHnUxc8ECIk@
zL<%~;0u%#Zawo$+YTUXf)nZw};eb1)rp;95VrWn=mVDEIs_1&DZ7*s#dosd&4Uc7N
zh=8kH&Xlvcw1z7bLv4UW3Wg#skN8LbjN@vI7&jPB8l=7gmg10Ip>CHStOi8VTo|ia
zD@YZhkU!^7<FXe1bvGj?Le6~VoRp#rW|CTqXQ<c^82jP;I=hjtac3#suhnsCAr2;$
zePdZ+Xp%%p8|`Vx)BFUU6kGpHx$+i};9-Tg2U9O3(sB7ScLf#LV;(qizveeq3nsAc
zw}N?eOC{MydZqe-Y!z`AViRnDOoWb&<#vgn8@vNo@p%v5t#VdqAhT?@Q}?_G+Qlzz
z;!v4K(f`7=RZ>;r-&B(eq#|1-?Gnu1Vm=7}Si^X|LZ6mD7BU4{QoP)sqPKWX)4Q^~
zU@>aNvOtsMLjC?m#H$(nE|dMQmH<WET{gg7)2fHEIbX$T%xN)dj$J6YfJjTFfKGxX
zQmj%EadN=YH9{T><bgI4ZWPI7XO}5Hcqk>Z+^9~ayVQbYl-c?@mPQlVOkAL#LN)L=
zwu<$<p-R#P5Vn@mH6iq_93MIe9POwTpWwq9G@}!0@|Y(7m6;?i^Dn)=Vua`1&}KWB
zD1jY4x1)f^3uzM5&z08uLAY-}6^!`z%p*DN9gpM#JlQ<rzi5{9J5DD@_(FiTnyPkl
zrl?!tr*;Y>gpQ3dw9=EQEjK3TWBe>e16wg4lqg91pen|lHrLK9{AB4QyR<l>&Y}^S
zJ+<C_R{fB0m&Wy;OjA*!$vKojy{2nz-|7iFp9|OxX2;AL%I14L6hmPBW4|&6Zse!@
z@Z|SV&dHY`8+vt^b~s=+<vpuwxT83v{9R6#cU?z4mD=E2bjfK9+x_J$8krtmJ3WyL
zUk`oazELO8wiNd=Q*}T$cnqk=jFELsM(pM01>~5BLcJdGmEx}{U9SG=z!OA!@80*w
zZzsUf#24skT;2Sd7TLYx5sliO90MEaJx;GWp*tbm*Fs$fnz&GE-q-I+O?9g^7UVxw
z>zTC-0<wb5b{*NU3buaD(YVXXi-^3HGsD4<zcJgT-_PrPT++~_*uUV1o~6O#Vf&qn
zn|RKn_LBHMu{+(;r?0*w=afmu&d?|GU`ig~D$V0XQg@p#y9vyTt@0choaJhD&I<eG
zN(L$Mw<8HH={ji?>-0BYhaWwCZH^3K$nQD5MQHp1T5i5{rRmEuLk*}lTY-`bZY@)6
z>0+yj%v($XDCGj+5CtkP9~<dvz=?74=%`$5&Go`Vc^RI^7ga}pPh0Bi>Jo|aKib8)
zH_jFx1qeC&VgsYJ&sS95ADnK1%+fE9f0B?vTa~3za~<Aq>ycDtq9g1_J$CM*Lh{O<
zhlrAK#?1)IG{5Uv2-=3?-$}xJ9DhX$cRf3yL!Vzo81P{#$Q^5t*{AhbJ-Q>a^F8$V
z>s2v}^$nG7jiotBCTG|iwn~t9vD<aQ`bDnEa5Tk#pL82DHux%*Kkt~w3RM8O<DqLx
z%d6uuWL%I`DYVWP_zh)>B`Tg75XWNTo~%DR)~QsDFB^{S7L=KN@7)X1IgFfaU?|ns
z;+hgjA*j*R&jH=6ZB9v?BOA6E^$HPuWLDW)--XYFs`FYgT%E6KVXIF#%IMMMHF)O+
z&BG3s@)=Qi@#ZNU4f1+X8u&#TyW}u+5t#~<KNVB)7Yfg_Sj8!C)d5u8S}?d*^&6;d
zw0NqQw>xHW#Ttrn3>T%#tN3q&#QWA}3Pt9pmH)u_dzJ?3TO0~!-Sgfw%NLB^Af6`B
znF8%3S;YM{$XvA++B^;F#jvcp?E+gfj8kj5Bfc|-PViVMbUYkcq(TL(zh$nACzW1l
z%-aeHU9v`Faff+T#q|!aJmLk+9<!KsuTY<jkU3?~Z$HQRh*w%<+`Fio2sP$-b$THX
zRCR~-e}8In)JC<MWbdqpzYjZMl>1mAE|+auOFYmUP}2t|wC@_$m4a>~82ZQ=3Ibf?
z#e#P0;f&CrdJ=Y2lGn^@$&n$K2k_}KtECxRHf`2y2Dh-|)Ibii*F#%R{a=pMzb_c`
zOivU=9&rkri7cXMY$PA@1w8d}Tap-g!t$t$gg_S>6nD;Xm1wL+Tg!yQP}d8rq#D%|
zKm%I6GCS64CutUO$CIQr)N|jFHSBp1WNiAD#Iy>H?Zg&TCznlT*9{-|!g$ibf0}=2
zk>}JpcW2UY1n7{?<BQUGpPnOEwnm&^9C|gjs7e|@bx<>_>GwP++3z5NYz#H#(O_89
zY?v{YAOxm_L)#8CFT1`v8d^kdEndn4tIQHt6?u}%S`iI5RalknPB~30J>e}IXfiIH
zwSJ*XU~=4{GIQ@qZTS9jkeLz^;k(+8Y+-bLLI#n9QChLNGWoM<N(JN&`1YcPPqV;*
zxj%U_bwW>+!enYsvP6H5V#2K|Yg1=9n6&|-n8A0B_t&8g{{|moz?(%5P82&eR_u(c
zYefCcflzEiaF=(}IK*az;`c7=lDQ8ws(y8KVl-Cq#zxQG0+d9woa2Cfg1bo~J?Uvr
z{fwy9=PoJl;ja^^Et&6huQ3D6b3F2dOp8T%j2<9O?To-<3%~wxN@1W1)U5`B?uE=#
zSep<=`9ha_q@ObuJGh?%(+Samlkg|=eUl-1I75|0dysg4Ok2@x;$aot8VfWuRZi+1
zdgvKj^xLDvB{A;{i~>eBGp8I#g#@d}(1@<_59<Uy&Z&OcnxS+ZFgVm%9Cmr`g2KhC
zxPJM5{NS058WARq^tbS&PES@*6eNmI7bw!nW3HKU+3>1tq0@w9`6_zT7m232DEz$&
zxc-rFlC1HGxM<%=nk40_Xv?3|aoX3vbZbIsfE{M$caB)t&L8^}g<E|<QrK~cWI|jO
zamp~G<JH21qnkzWV4s4*^^8G;lP*|?VPkq=#>6_43Nm4J%34V5VaMAtLKgIfFILa+
z3WsUR_Jk@(EU)5+sYcV;kZ7-o6kvU?GFEjM_r4Hb{N$u*!xYQ~e4<}mpl_c)6+a!U
znhrP<%hhh1r|4b06w<}dj(wZ7if1ywgfpSV7=T*Z89!g@`nPDsEZ8pSTmy!!{yq_r
zVp=0<Mdhd#+C{xP&MSV@1=J`3!w+_L=Z3##T3S_{Fo`o!(PPDm{>X6B#^c92_ewDR
zGCnqn8-qHAeF9m~m^nf9Xq<FA+usT{arzuGX;R?JWqcCoJ_eq@ndA9)Xm*WU;pPOu
zDR?1$O3Kk8`vJrak+%_@^BRwA2IV-_w;^9ZboE-h2g7=zD5@^t$$*lZzsk!$J)BxM
zD8<V<iyt#RINqXZ74|eQY(GwEb#29L53z6y7d^9H)I<)Y6VA;;n3xBfmX@7~=F*9C
zITO?bY{EY+%SFmSl;lV%wu?~_5Zv^Kgttzed43~;-5|K2A<bYo;4jRPG=q%ZrFsoU
znwB%H9a-OlJFS4%Y15ESqY*I*NnD(#tyZUdMEKYmZvRHa&j0sRd6{HSX^)P~Ob8k}
zlXsA~I&B{rh<O9iJwZ*g!lwFzMV-6ha|8*RKLeQDPZ?hO92%pXO|I`Ig~0Z-z6752
zllKtw;+C8l<vihbwjB3k+m`1craWe~#aKFd=@LJJlm4qVkh7n2xPyWD^XN)*UBeNT
z&>C|3XXdsD;Eq|++B`hm0*!$#=W~k(`xuzJm>Us+H51dZQsjzW*V|bqR`&WMeMNDu
za#|<{<{Ej8FO(^8)>MJ{N|0mT6F&$!z+{-{ao9YQ%t(l;fvC@2>o_m+BbwP+nZ5%b
zkt6QdFnnAZL|wvJaHom&V?=KxQiiPv5iMAX;u*WP6e@C@2g&@*37Q2Mi`bW0wDTiv
z0%YaB8N;ObLcSSwIRjDQWf)IuZlc+IstsuOWu-U97}Ro<8@pFyN2_z|Rc$jTDo?86
zpeAV%Cfz}mJjZNbq>0q3Y-eL}it`374)rmpY%3~<_S^=df4}SprsP~32~2^TpYSIs
zj%7Q?zq4iv<c6s+G0ccv6Pf(+Zgt#S-1@wW3LGbZE`Wp*dxaLaaK*|Uv-zPcLsc|j
z59SMY@)Msz)`=U*Sq6VwvOMRJev6{8eQ+{#f3u?w3Gqto1_Az^cFfv`KtqD?;KfFg
z<4yBz#0P<3M%%(%>jQ8ALpP1W3r#jeygVye0cDuI5=u@sV9~717i=D8nCZokpGo9C
zj+e4<bZj^EgDMDAre7Z+m*)4YhzU%FqS{oye{3Y(1iJaeDQOG5zFoxystP=g&k13r
z<+?X=7^T2%=Q(fUjRhy7;bCN{z~AZw7RGOxPpRxu<B6C*h!pX~C@$H?uV*iEz^i|Z
zhn)ttM`%TdutH<gh^PiY3(m}wpU(}tp^_M$R)K4&VsEbwlbo8l;5(&;$*VA%L@s0v
zh(=CoHANIwSM$%-qK9~q_n<=IoSCRzqhPl~J<>L^w6b%`(mZiw;B<gj^1N`^i5{io
zU`nkY0db^iGV|SHj-H#j9Ol8q2*6_|ioxcgey_@8O@!D6j~()zLTDy+;(~1RyPNKL
zT#H<-ln%il6Z*ffZRuZJy`7y+`Ge+&IXSJ6M$3B@yV1Z2G0S2(&4L1UxC3tJgXbMa
z!ESe=2K*rxY(;Hv1wC?Dn&*bEiF_dumQ#nCZm6>R94_7})y^8sBS)RR^p^SUe!njX
ze<s2U`UU&XC@z$_&%E?M5e+8P|BBXUY4l%`xWg*_HixY6-JevT<0La3Ey*pOW^y$$
zWFwsQ1nmN7<ox6dWB)vdKoY|Y5kH@>B<e0M*3I2kz+v!Wk0vMaME5W?Ty`*q$+t~v
zrKmO`J7Q|Z;E~wI@KgHb%ev_5=qRkp8&CR4#(P}4e|RyM=+Iv&LZFz?5F`T`kQqf`
zUdW|Yx&x?8yUK9rI=ua6EBs{I{*+TAgKA@ELjDOKgTG@L*b0b)FPF&)mlp-s)L&$D
z!zqD93`Sf^gc;``e)T#PoF8&e=|5>?@C0AmG5MQMp+OzBd{AB|h@c~6hC|!T%GL`F
zx_RAF8y3i*u6zER2Lxlm`MqSr=z!<MnMz2o0I^j+AN2mUXf$!lnaWQ}a9_Rr&Z#<6
z$W0a1$@ONTAk~Jh+qau7l~gaz3C8ZJ^>9q~k{+x2lT~{H*qh7mtj%&O`ndVv-3o(N
zS3j#lW`76R<=fvdo}Lxd%@Nt{*z^jLJM^;_10(vltbQeTt(K8J`{~H#@<OkjHSBYh
zvy;cyCNODj@(;TZWP4D_-B8Q3Hl+R5_(yCNOWw#?#q($H8TJ-cN;aFx)2O?4Zda$Y
zqX=veSF4*GVbD2M(yV-)3)z}}!R*q(Oc54i;&wLgV%7WS4@ySvG2+NQ7A-oPG=0s8
z>%jo2%!eW6S_d7scg${m>_zRXFN>mjJw#(k@L4@(@8<v;UmWT0{6ykDAH4gBwl*S9
z^5AD(-a7B6|DWkizMzDFxbO-nhuGyeUg|Bm=5gP>eQ04LJDA@3&GkR@ySi`mI?`%;
zGphm=^jZHfpd~GWH4;kV%<vXLb#;&{<O-oFN27~1oO?tx;@nm_3YR`P@lNqvVGHs#
z^KE9C^rU76QssgXM5=-tijmv|WoS#9G*u!Ho5;uZ!Vk$#dV#b?y`0}Tag-<NkcSUR
zt{H+gGUNYLK;x0-G7p4`3@F)UlDP3y#KBQnZ}`^7g7K$KEq`Z<+t>BbyfmsQzLmIp
zo=TSwK&gI@P~8UgxjHr`nXt}ax*Le`gdBVDb6uY8nR8{{j9exIlr81Fl;UP@O$F#Z
z+m0vW`8rIgTrwn-=2XolzPL6=&2GhP-41zEBz?OP^nT;o6SSK@K7jsnr0!U#%{|fs
z09X+L0ucZAB$=^`-TxdTJL3L!JYY}hJ*~Z){;Mq%BH`yH?crfr2_6?@34~0V{<Ndr
z4vpHsIdWo^7`xf|`@NHBq?tlunDBI?f}^|*c<FuFO?EEvaKG<wZ{`#@ZF$C9V^H|~
z{<vOyZF0GlRvpH$1Ha20IzkNnBZ*o+zdlll9~Bc7bBduP92P|pF8(H*MT8&p4`>|l
zhF~96eH%9y2EvGI$!PI*M+W<*^gTx31EOhY-HYi1kF^<wpY3)mI<oK_CZL0AgoIUN
zOC9h$;%MzF5M|1yqi~P~P1aE7O_Vmu3a|;#<1X@lqhu8I`+1vq>EB1{$W}smCv6JY
z9go&mpniCmE>Uik>^s7}czAq#e0U&vLdfo70&i|paWU<jVwG;!fN%Hx{j)cSNjjKp
z-?FuQ%^!uIKX%;bnrvWvSa(~`;RO&ITE6?%I0j$gjvObxX#Tz28sF*=fWPYZm!gZ<
z-8HH&2cAXdIh}wlMh4HfWGmLE{T<ipCwp|>LO)r#xOkX4dwdDxtUaIojkf%+X>8ez
zDp<;N@E;q$CNQ6cm+R5eW#C+GssWhQkAzppc3a;S0DR_98`3>4(@c|B(5B$(@*{2R
z0M;Hx=C<8wK)+rlZ440B8^4iym!llT=-oQM6^>xUV2wY_a<$vs-SV%8*oUN)8y*kK
z85uYs+g|3Znbm@xbgMhGEo2{yFN=bny;Lo_W7kY)XO{{KI~J&$pM^FNyDH6mPPPgE
zE_bF=f?rpc6m+LHw<=$U1I_tBUNZu)ubFWRs^Y+SpqgYB0|i0(<Leu}ev7<y^y{bu
zwlK+q@Y59@p8;rK_$i+;fiBGO|M*dZ3KWHKQS_l?1p(%u0xox@kIK(2t3GVFLqn(|
z@u>{(8r5Z9V<%+yYR^iP`5of~*TLmhKeilmqN+=iBi1SCZEd-9U>i2Kph1S&fY!?k
zO@)|DW=PkPOJ9l5SRz$$@10oQQtm%*t1nPTOKj9t4UcS!zTNtD@xOhJ$Zh9F_2PU<
zdyQ&WVBff8iAM7}U~GB&a<+Y_p!P$<7Fc~)Gg5^cfv#Rk*-;<X0fw54?f`xoVmI`z
zWDHSFlFhQ9J*;o^?*}kLf7QRs>YUGhpphgrZZGNG`D^7i)!+blLu!q}@2BkXH)D?h
zCZGurB5Kz3u8*v2LFoxQ{Av#A9Td^<^9SQ4fHO814;fpNjJ=o`a=2Jg)hB|&+$=QW
z6=E-}#BPb<m9Vj+V>W3AUVhkU?WuANjXM8qUCiJ{4T^jzuFkF5@b?ugH4ClC=Pk06
z!@8jGR#lqc;ueVPh=anI4_kdLnFIS+dqM`EJ;u(HT^9^bz?N%T81=vB3nF`Er4qyL
z;D@2}MNKh6uV|=q8+^h$L)xoJ8Rx1G<xljzwVCN|v;mZTKNq?eE$`Vhny)I)|CWXM
zh!`m3hYRQ;kf2>aW_jIBtWmGAR9S?IG~@R`%?;Zu>_4vU$msv}xchRS3aXa^Mjqqk
z@iPQC6VAc!5cL1dS3+o4!*jdr?n5)1QK>yt-)n%Ygej~2;h@!?n^$hU?Z%|qbk&Qu
z68im&y$c4V(S$rkHQ>3lSZi<5`>@`L3g(cARJ>NGz`11r*XQiOWv3r@N~MKZcXM}g
z8d8~*%;@fSHg$tZY~GA{S6&FH`TLKhIKOQtu6pqpmS^K)7RcZq+}&pZXde^R8Ae|R
zIYq7&k3q}zV$=f6-ce+QA<#v*-v~v6T_1p-E!D`EfdZnh;o7QzU8T+@0EZ!0W1V;T
zH-D>}$@EaOnkO)=&uSs8#l~tj|572AChX>8WLeJu^AZ5HMMEwRA7fd`rVaO%4xT}A
zaxGgXv^<J(*1D&OS*<mYR<HcK`+cDVXiG3f$97fpB1*K00LpFzq;WIx+FByqsL#)5
zUVO#qQn5ov9tsE#{!lj|kGDiop$37a9)6FRy^Xqo9B$Z8O1m%_gb_<A%5?QHiesJY
z5>Jryj(e;VFlEh5lzhnr*t}!V$8>4dBbvsMA5+|jp{lG;j%e^j(15EJANGEi5dK6Z
zu1q?{{C5UfO2rBz_y+AQ*WeEtg&xM)U8?Rc^dvqu!Y)1pa6lir30V;66GOF!;%{hK
z&=$Z-AquEGPtcwFQy}~i*wu={W7)c%WE%$X5qOml=4{i|xqLi9ZCe^kKAVnyaG-tI
zvSh!lnGFN$rX7+nF()VaYv#P0un_W>JNplj1chFH%qhq$^GsmzJ{a}Nt{(P{uS3J$
zO25VfBfm;o6KS^2jBpFs23?CjIAmZ4WTe7@IQewfmXlMPLm#Vtowt@kv-$*s|Ac<E
zY$vg&hn%46JLIgoGJ8ZnQ~G&R${&44B8A7}3J90M21I2>*s^Dr_&$Vuk~Xrqy}%)*
z%QI>58WLt)-rOce1`YAU{YM1u${-$wMd0Z5cu74-9_0hB6+Py$<1AEVKM}NN<ITYL
zf__7)NJu6%p;6m!kjpExPBn};#E0#n2k30619=E0PBbs<Erb(l;-FITaML94Kf^BA
zn7l1wskcrqjARn`%M4e>Q*5~G3OXyndYlG3XQFD|pvI~6@NMjjLLVkruv%*Tk-7-r
zuEc^5x|(QO53YmJ_vwF#^~0RX&}cA9mpU0DiQtPuacZ1d(49j9sU7b*$!W%%z!Ecm
zl2DA-UcFdM_igZhf+JwF%jbs?Kchi#W8b=Z3W-u{ABp9o+SG0l>=!cR0J*gj!}pqy
zAA%aVN2ow>kx~V~CppuFRl?)vC#e`g6jrd{Og8D%86-$#f#gNWDQ?Bzj>nbC05O1G
zGE*e04vU%*pFTUy+vGmu_>;qW%Tm`SAgE2UzhP1u%5X~l?$~x*5tZXw9k$LZU@iD!
zG4y=6c-Kx<7>t|gW}Zk%iFl^m7mF;9*{VA+tAH9CSEpmUM>u(@jy;W36g{1%6{fI!
zvYw|>y}#{C^8P$hq^JCo&JUXLC=l>jmmDtSa16oXEq(}Nmn;uy=+7x4?-u2k{n)?z
zd-D=5s}!{BUL^BLQ2r<yv{R$~eou+<;U${~&xVp}?-L#EGAf~7`f$OhOUlVsdCq;O
zHN{V287EAv-``T0D`ONVT)?4FPrI9wdV<wcgEbIdd$(Me4nQRnQrq`K%338$ijR{i
ztTLJ|`kb=Xi+%Vni$N&%dYW&?cs}&wt7I(_IMa1n6uDq5B!?_YKrE<*I%$lUvnms1
zC*y0o+AfQq8fQ6)_a@`>Oi4$NKZe3WhWSc!A%TzzQ8Rt3ZI1h?nfQPp3UvVu?aoQa
z2(GTlxtuLrFlxe*{!rH>{2#{7AxIQh&BATlwr$(iZQHhO+qQYzwr$(iZM%E=E#GEl
z7OBc2RmmoQD#<zDfgZZ$UKBiaTuX!VVb!Ap8E6A@%WD{LZ-Q#c4Ke{F2Pk|{gX&*z
zcM$0^;Z#$lZ3TM~)snEroR>$e30}IefE0`mP*VW}Jb_Wik!T@({Nx_w=h~I2+Qft#
zzK2$|Jre^^C`Pr`#{f@uDa=tIrd~z3+-#qKJGGbMth<0)X(`0`t^9DPxo+B(#;C*-
zW`G5k&NOSGi(t|`b5SKj;zre0Phdq>lD<6Fp`zxdaH_=7(FosQR+WRqcS()DB{-!y
zitr)yZ7x~|2nEuZ?i5PpvimC}RQsTDH-(8g9f#wsJVk#-D5@5?KIe$w0`tYae|i4)
zpGx=E_~CiF#pxL(6kn6qj*yZ6dR%;rV&C=8t-i66&fI_#ndq6(*g%)I)ZMhwf-*9w
z7EiXG*DR@y32!(d!H{WEQJNO}cH;uHS<P~#G3Wj)dVn{6scG7djLG1nKk>efG6$5o
zCRa&F9Sb(YL|7RYv0k>AuA9p;a(~Iu^G`I=t;I;nuQXR{*{1>W+D*bv%1kbgR8sHK
z?X+PZ5Vq?N9$JcD7>J(t7xUvp2L}|r+0V;7Yl8xlcS<%jNG0VQ(w(uPBbK<sUBh0l
z@6NYdI|Fn?`6mOx&lYZG#e}6R3#8@R`hVi^B-lsnFqJ7PtVt)7m_3M=0^?dP@}jnU
zOgA#^R?R0VmFev$cJK+2H1hw!tzDTNMmWccFWqJnof1EWlanIZHYPZ9HkBQ9E6V*9
z+h;|YWTQxQv||uiJT%(Ug-Rq%^5tSRi@jZ&erdxb98F~t=_C`(1BeX&>MSWAPbN=w
zB+LgiPPs-aR8Ej6tAJE9<RO5Ba=j#69RaJRDDA<tm!!&`;e<qGmrKhD<S8*5nKHU)
zrJ|dI(EN3z-QfG`Oad0aC<a~mN9wlY7_DD`VYB8EXN>#}CKIItU95CZf$LpH#IceI
zGe|gw*69eG?5@=4>vD`$gN3~$4s0Ndz_}sgypo-LlWh?O&VrW;IUphez}FBXco6w_
zHqMLp#u!>3AQ<d-5!JvrN)<IQ{es1*7&H-gBVzOH7qMDJ0`%9D37biAd$@nk557|l
zmhJs+8g=M>-bw;T0|-=<I4lOech<E%8c3Wr1ON3`#TqC|kYHpbMh2NQpEfZdPl0Dj
z{UG|O!0^*ONeEADqtR?7sG0sV-KEPyYj;{1<8%#x8X8da`XT1`aGTo@+T1Pit2f=X
z$A!gh)Xo&pwJ4?#Sts|vQB+d~NyY#hJwC}5$1@yK_M6PKLvZ4j-k_-YCz_hVdnYAl
zP@``ycwLF{Y&vntFTj;xaIH|Fy_FnD$^eJf82Re^_Xw~Va<cKV(0WL1elf|bwYqc8
z`1sFAW}a*?F7JbpzaaOAI{#24uOZT80CJ`#vzyOUqJKq5$Fe0U4}c(#nIc!dM06bI
z5y4<kJ1j&9PW3<p!2&sf$Btp?lv+9I)nxGl%%l5JMylE49qbyJ$+ZD2#w0D)16d#*
zbusLl92sKd<VN-mW@XYK<XXg6u4Tp{`Z2erNu8LmLD3#sN3yf&KM*TH2}76~d1vYm
z{RiL@0KjP!{gln0B4^TQxd+39I}YwMXY8@-N<uJGcXsGCPSCdr%_#^u37oH6d<86W
z&McbKsvkInaw!OY=klWwU}nmn=PIilR(ZKj+#(@Ky!ykOjGE*;)%yAeLG?49?RWAW
zACOM9z}54IJ{1&jtx;>Q*fk62?4><(r<vO&uvW)jA_Q}3JgA=8pmB5_L%u|MaNn&o
zo$_3ZGqltXhZv9m(KXkjh}_~PFc}l^+Nn3t{m7vP(Y;_V`T=u3f#U95+kI8`_YTB3
z>;Yt1YIj~OnKVG%sYYVD_VrgIM7>AUk(i012wVxNCO-yDIL_dWOn=cmQW>jn84csR
zVy~i6)10O1a{0`{O8oo<JN^8ETwj>VuMUnZ24B2rSM|VDlij;*&90(|$hOM-#QU~%
zu76~BvzA4`imDhnn53l@A93_qS4SYpCF!?MCPpIiox$VCpwu%46~L>=rUCKkn4yPY
z8P=O8#q4+ia6l}Cx7dqG?{&twfLUSQa>Y;?!|gcTvuQdTIdcW1*u&IEb2D+zKRLUf
zAQOej^{rs(t=R^~{!Z4gZYbLo#{qWS;itIaTTP`uVJ-Y67hhjidX_4=B30s2DZc8K
zl`0ENW;YSqvBy+H73uOw3a-)tdhR3zdOoL$gp@?1n3LoD*lryg4~H%^oZkx2V8&Y~
zrFRIgomHRJ(NmliU3sK{<Q?Spd(tTz`QUk3(@olVz2BuVw-fh`amfi4WB92`1p7_i
zoZB+BMqyFcMmv(gS4$uUOg%!7oOBFVLtxCP_zO1?=7*TJgo;bNK=?$2cablI@;Fgn
z9<@-i+U=%YTy4L~#BHYi7FhDEdo1{k2|jx8zEOdCyGMC5OGwlCU`YElVAA=bD?+1P
zlw2zs`LeH=d^OP`lucD6;#t4>T3<-blQa>xP34twhW$oI<VbKw)-TRvDEd<&7A+pE
zM7E(yl2j^Y$y1Os0*LYFQhQ3DGxAX?2u+YrGooM3F`tjW{*a<_E_FaNpDvWmuR3}h
z$PSXy521$(uUFka?CnMWSsAb_orj|(TYxG9b#(}|aRo{l@IbFIMv}&HX}GJnjU&Le
zfK!n2loFCU1L7m@!?1G85?m_c&s87I`95y?yDb`G%H;)6iCYqc&<mp5rrZ1mY4|ZX
zicT}hdIaAto!efOr&lLkih56K5)5y6nKnBiyt%TI^ll(w;r{v708}_@yDyz0RPvA-
zLziR#ibjPfTV@JmAA0AqaXh35QUDSs2!kw`lz6QuFT4HSiSs|DBUCQ5j`fBDW=!?%
zyX#_R=5LXgz;(p<f~G_Sio0wL`uh|+B~;8t)BrisO!Z}|c{1K(p7HN;==D@JWJ^3!
z^{VAAy^W{Cq`}2^de+<5$AdK0uez^E(Lb3ukMC5*w`oc5cjx<%A+yALvV#G)BWNBK
z>oFd}3jT=2(6KzhnLun4$ag%TP>LcwM)aTY?a*VK;XHt@E-E#GtZ&RvqOh(Lv+>JV
z%8B^9fRt?P*<gq{jib*%&;*H?5!We-`?qeJf~1{Zn#$#gOb0fG8Nsmtu;w(N&ZERm
zp=EX8+nAF=X+ezBJPbY|weDeJ?TIA1BEkOXbtkX@3ED_m=ZeK1z`d^PbT+l~)+DR|
zeUxC_1AL~+?A+tJ=;O8*RG!WUF)ZlW<)J91F*xlZGW3-av(*yv7;J@Wv8{@<(C{Vk
zJlz?MGgmVp8}8X^@=4?Eb!-ugljbKOB@*gc_0@YG*m!u@=KyrOWk<lu>s$`K*c=^`
ztoL$Zqm`LL?rX70XSQB{ahE^AzO>jIgiz`1#d0?JfPT}C+7tMOm~0AHZTwsx_${Q(
zIL^{zGU;p463D5sx}(V3q*;C8?jUF$oGdReLyd8H5Wy5Qq&+nIHBOqmk)@jx7cM)`
z)^fU~WHM#x649e1=~0maK!x0Ga0~96iywKhB3DVqOHlV^gNV{A4eKBvPqu0DpoPk<
zV6NB*5t13w?VChn&IIIx`>6+0N{-!WoMG3S7%oQ=G?gVYoyp@GAzPI#k#^-Mp5z^2
zb;Sm$tqf2_B)2eh{;H2H5=c{>o|1u1ed?>-T~Nq;{=51|n9Askb34>Zj)rl6JY=gY
zc^sYknH>H1jO$N{*1oK%%7uG7h*vqQc}>??>!?J$S3RjwBz@u<C&$sd%uOQFXzkUL
zrg-InXi4|e&R?o$#rJ1BgW6Nucrc_M(D4l(t=B>a8URJIhwDU9IO;43?rej)ouTR+
zJRon>119+y&CVVfB)oYa`S)$#{#z5M>!a*aBpKem48Y|`clA6;E5bNVeLgS}`n8mf
zQzUthsleJJ6~!wfzLwdQDn}sX^_}lVJT&d`4?|u)kQ+?nwi30jo0!-l>acRv3lmOV
zZ5L^eo@D<*isGr45|N{sBk6j<Z&u0)|CHxdH?N9`hRn-Hf(*lF8i=&wYj$n7)jR}*
zKL##Rc3!=GS}5pZBSO7h=ec~-fdCihT!G|7E!uO?so0YIVl0Af+tvKBwPQ^Ta0z|~
zYY4#~Kd9JmNK5=wY)gL|(wuHMHky8kps`*e2Qv@KpgRqf)x~%9g7t1P$%vD>wS}}}
zUG$cGH0C>q%v_xi8`K}y#Dga~h=W6Keg23(s<W5G!X-3Pb=Eo_pv3flq%eqCc~}4&
z-FYxoji)BIu~shHTRy_85+)`oUZvD%L=}}SsAvzWR)ZiBpU><YU)of(*Hk@AR0Q3R
zv6?*T2jb$d@JwGPe&W{^SWgk2Y53+0Z=2Lut-8mbsGQN*HBFhf_q8Rdwx%}BvZ-n<
zC{YP^Jx0EC6K|W_H5sfV%DACGpR;aLPe}~D@Xg>OyeuPyn}+#_T}?v<r(I_%USFHd
z5ta9G(In&M7eGNb*X5%2*6r#Ma_KfhPMRiY6UXw95%U+7G9j*u>uLC6nnV(XiA7^G
z{J)9pB{up=8x#c$$Or;%>WWIqsbv636dPl=<oyGw(%i!<$@Ygbvj;D2eg75%H=bLz
z82SGIY#xJ_>vNHo;hq=|?OM;c;e{G}a6kPzrEIL@!fyUq)h(`mE=$*I0L3?kfz+-+
zP%BWA5Xi>J|7HS$Rp&<^i|lLXML#9>uxP%aodg5*a#yaooT%BbcuL-4rci~yp`RY>
z`js^#TyvL8mGDfL#ZC3v*W$kLjxs3r-%9fw^>GV>2e7Bl$h!&NG0So13mwd-<&oMC
zKqO~d?ggJw#<x2TS3#!Ue%u~KQF9GTel`OO2c4FXdJRvVwXCWVwJ;YSIY&UfDMxr~
z!oJBwc&FY1SIkGMx>iBGO&Xk9>6L75HTEVwe^xKAFdH%`eq3prssy8gDz&t1mK|SX
zqMLk-i*oklM{LaKxS-QhJ>5OFta8~=K?L7~R^ysi2_45}^*eK5#)Ux%%~G>JvI*{;
z+tA|efA`+!Hnk?;j^5s?p_uZ^xXmqII?m)`>hG_mG`0E^SigAj>OskAJ48EJ54yes
zc>a7ua#cDjP%Y1=YgFHrk~>I57E?qNk|e5kS}!YPnzTz>R5HJ#{nYw-OzLtG-cA%&
zgq$()lARw0RhR*rXLthUcnNy6dfb4&y*}EL!ty<xKz=#p`*%nZn#Krhze;NMVS&&4
zxiv^UDapKOlY8IDt_uSLEeXSRlK0L$gYmosd3(D*UJ=XpInj^ZlAZ}3ume(EObY<Q
zrTRKSXKXL*y>{&0!jV^~!yMVFm+B#7UGLoG4}a`EKZ#H;bV2v<E?(>_n4kP}7yOeL
zFACDIVvR;Ly*+6-PW@Uve%}$iVBu$&G@M5u2}!b{VYdK0=RuG=dHCRWr;Q&g*=W^B
zHxQyl3PR8xf3h@?@<%+>u<M>lN&-Uc8s^1Iaa1VD+*pz4LxEyc9mNk`Ss%SwXw%f#
z5!>lSVzaW*wcZ^-*?bzndHz1Av*TZoQ+e_ar-A@(F^LZsZW%XpOjwyAFJih-J-`SZ
z>W38p@W#1&<kGc_85&Vs)Zux9IvtoQ1r~UtbQ&NCR$EejS-Qh2AH6o&=`{(-kIvg#
z4#+hli}41Xlgj=aJuVmxAklkYJ({r(<R<&D5JaEQwy}T6OaO?+9`+c^CVRW_{qh-(
z$WP9v9^m#s1WS=Cmpc$&&nw_x@893hSYQ8!G6fjOeYn*V^Q~@Lr5z(ot&hF>R0sin
zt&h3qW>&CsBdhGv$rZjP6|G4HsI&KVEQN;#R)9w)LZCA<E0DRxU=CwhWT2d6#)9XP
z(QImfZkcc(&kTgHM+QQ{MFXMVxwmbE0FF$Ak~8BV6$S7o0R-rgfdp#Lp#Z+DWd&9m
zSu4Ag7E!hC)=~lEj5MnM!bI*sVck+$ibD?nQX&|zVBTAJrw$KDx2;#8`OO3Zp8vfW
zpA9&a2BE{S1$FQoD9<W^iu5+Y^MN+lgH$?4g&M$JH}X);kv82nD_rdDY>21IXn!mW
zMCgAs{So@$yEF&8Zf>BM``&obGIF-pyEdwVt@QDj7OeBxxLfUM0pVoN$LBuc$L>D`
zeXG5WeUljpqTlzJZ0Sd4N&K>X0N$&f$4~CHKzX7`j<e{XVZ(+}F{gu>m`?yAn9J9B
zjGxv&Z!`sjqE|rAf_=lMXZ4ejn3T60x|9I~51Z#XdlmBrcOgiWs|9Z+;YeHT%U!-U
z^Cx<Kf0=hy1#(~rMIt<$*ZKL@A;4qw8WUyC{DdY!mSJK}yJkoN`A(LslW%PU`FY_I
z<@x?`OO`eL6HSPn$Fu5fLWan_tf_xnMBU_%k<lghPm91V$Zqyh_Pz8e6|M9aEW7A^
zgYbfSkN%HOvf;k<QZtq3`FOK;ok<B(0}c~|doPTB&Pb0~oH)=#n?vJ9pxwCvW+$81
zW)}=?yek)Qj8^Ec&eQ&(1-Wg2x1Sa1C;(d6vettuj1e2>0x*8WDbb2GQO2j|PL$}8
zB8J+I8Mg{d&S}X`W~JzICZn2M3C0Jh%6WwtW8&G9iLNTqx=rf44)cB4&=*V~Yq{RY
zHWQ13k(hSLeW#qCx?f0i{1si|0Hr)cm;+TN&A7#g2_>8!KEsW9AeDol^iNS@yj**K
zjeq|arQO=o`5CCY48GpD=1UPs=otGsk>|u8$7B6BR90*to_@A?<4#h)Sv-$R5qCK~
zt*n75%-*Y0n6#-w+N{TN2a0qSuE0Vw3y>Ko+u;Y4!?44^v%V!c31&6yCKD3EjOUVx
za>?PCfM%__(Tn2+nwo{js|6ZHi_~%!GE{c3725<BeCEJeHVr;aQ4cW^j}ef0Nsj#l
zGU(#)jzFBOCfdY*(d%dyOv<uE=UysQ$=ZauA+R1=89$`LB6Pruw|Xz*gg#6bCYOvM
z6Mugy<xB4EQm<W@Jbc!w@d=BB_)3lt%%CS-78<{HdK~8-tFMR{PrbKwrD%^I(MLkG
zg)n}Zi1E{o74;P@YaYDU#i~}V#|qFZkt+0&m~$wC9;|wh_&kI@Ct!L~?8RxU8oDji
z8R4sz?XQ^!u%}hX#hy!dczVx&OVP*{;Y;V}KP<zCrZ;jEd7Fh?12m;+h$R*Njkw8{
z7G6iFMW@eA9(z62hi(yF?qSKQnj<HBf0`&&$}U_JQFGHc#tCv6PEpJ}YjI@}E<Rc~
zfw-lqPbaEAEZlv$#cYfP@UU*_t>>i=4*02%pAmt@BYJpRk-e@ooSAKklyXq~NVP~R
zY+XKf84YW*05#nvBCpHgwh}%k3RV6oY|p_#KnMURIT8oN$l@&<P2Mr}J~ja$1-$xP
z=<1p~c()?8RWrG>0L_r!J}0H!4qQ#xw^m}%WDkAZd%yh6rLPq-w##0LQKTANlbNN!
z_`?Sr&;f|X`5;1zp%E<K-RXLdSV<wr?>fM~%+Ugel=&3iT~EeuVo|X2do3q=D<Zgh
z%a9GW++rW*Kojy(6HBbU)-zQSBvv(nsK7=`jkK1EQaE8|PWUG=ioBp@$mb$)ct(3y
zndycR`X#m2)<Gap<n}fTetz2h_%M0!AssmyQFjJz$LBR!`b?A5ZhhLJM&5opnVKQQ
zg+K0C`uKM&SF9EI4Fy6{_RUu4+=Q|Q>e$BnV^`5ltj$ZJAY0a{k+@Q7n8v`gH>NyD
z9=b?4p=CH#wSzQ<KDIF0*wcL-F_r5;rU*WF;@u(#FPck)fKb+wD|ePi_Y7~M40++p
zNFZDom3?EcZMV?~Sec+sI6$`f13#^Q_4z|ppp>1P?~`%Rt_rtqt=c@CKdLO?<Uu^{
zAGSl5yAo%rJeqIoChSvh8jK{%094sLVV%;T3@3P#L!?QLBM<VGN3&E@Q!<-#X!X!`
zvafHy$%<Ct43-u3E?iP?)FGx1zwEaNPds~dOg7@dHl*sScmD<P(e~t)p*_BZ>sB-&
z13XCii^&q^b7vwffxzN7FYRl3A0#qhhrp(h$wh%BIYIQ+wN#%{ilOueN*nsN%L#BM
zrq|M~;+_+=y&FeL2Ed*)xjoA}4(wRNU_fn7pF`d>0nY2l-&hM4XbsdM#k9z^_wRlv
zZ#y9RCSJ%ViSs*5V+R&Hyt-KMh6C8zfQ>@2W?f(U5DD-QiFik{sf5m+<FUHFMv+SG
z2#V)Bc;zJ3ahyW&Y!xzt%O7juW6G+EF78|&BuGu;_YzR*x3Q9xtov~w-$QX|yo_QD
zHd*D0zpiFp<^w+<kqT0J0@r*Lwy<wctSZ3U6q*NYd@Vo*Vy2Z!BXWL5id(?=cQ#}B
zR>YB#oKr{{>4h|Lv0LJFxOnh!?nY8uD7QEuQKkI){iNW3^<vmL?6ekwF}h~5&K97E
zU*jfM!i<@EQNcZ)ft`Xt(O?N_&RD4G3^L6i#eVnsghp%ldy4U3G~#=sz@cSu1WmE3
zCTK~KuWGDy0H?gg*&E261wzXE3sjE&Y8kQI5Tl4YOVbDjA`OC6ObpUI?;gcAf?4km
zCXSS5V;fX`;}>kk6qF04bRsNUFlfG-aJkYK^@H;6Sr(Jm@IPw(OW|RIe2uxLOb^GW
zc>+4ioaLd`Y))F}11C7LGzEWOEo1lwj*JMl<+5}R6O4mVwG=X@47fIQDf%2JZ@#Ob
z+}0F>!VJ;BpH$?`^L^oVV;q(-ZpLk!BVGxur?xq}PDUT#LgN^hu^D92o+=e47Pw$S
zCnUmzuA*TJBVoBp^l()Q9fGT_67_r~tfkUqpmP%LxDg#8F~9}^$tmA7Scx&Bpx6fk
z_}gKWXJH+aIsIQ8f0=wS4_kdyfoz>`v#OLo%uUa>VHt>5Z-c=)@*Tk`E_M-w|Ay_-
zMa4bkS%E3pQLi{euZz1rm@JH3C=C}W^KC7!3hnfLx+hMFcc1;`kMu+mf(9>Pln>vL
z%46T({lV)Q-uI|xpWEL=b0-y`?9bEM;}>`Mxru`G+YgQ_x_NEnFwFm#2Is49eEwLQ
z{ip)t-`mnB9iR*PJp!~FW&aAV>fXQ|A@db1rlJxcI4cmo29VK9<YDBzAYYANM<3EK
zO-{+LsA9x2_9Ew-p+s{9h5Iwaa!$gH6?CULW*Yf!aVTzw&@r%{yMeV~$p+v@bSOiX
z`=e3(8T@4E;K^GYPm`2;CRm}^$P1d#!H4onzt6p-umc*qDh9W42M`$pR^tZf71URm
zz5$|M0CZJiSn(tEd+$`%Nbi=$(tLInq|ax{Eysq)>e^Ufkp7n}ni7bnaXq(Lo1CGI
z@lTpz@VL7?3Dzb*i6Sz<8*ZZ|kyUOW(22dAhg}yXK4mpSn!36e0nW=L#6*5(4>dF2
zOICjP^fPqj%bhF8HuaXTrnTRifi<oW73@9FWO+v&Q(xTm{{CM-XysoL!j_%G(NIB*
z4G(?sxdzHL?sQlz&{rH_GB`ZZxoDW&e=V9A1KasddCn(|4&*)fM?2zKWhgic(2o5N
zhMil*qx$vh@zZJ(ivZuO>NhQZe4tT>cTc3SXq)(eoo>Gar-2gT?xB-MUwZd(#kI(>
zf($lt<joEX>LjkC2RRM^XBBxZ)8azx?H@(P)_|4f0)sg68cCu+&NQHH{_w&j$_H9E
z)eYj6Vwil;_r0t!l7@`Raky0P9!aVw)r{TN*ex|WVmOZGm;Y0edW<4pxp(;y`)W+>
z;tx_*Aq=RrRJeDc&R-|(_{18vy`?%9pl?!#0xhzklCPk7sgJxEoT$@7&ss%EiDy}I
zm6TjxnHgdHo40s-e1-s$OlYst06E+!9>>78?t;N4LMtQiHBs$N+KZBgZ4n9rM)4W-
zxe@Efm^J_&(Pg0=4?<;S2*i*T(3?rW7kpr^eY_kNyD0Vile}Y0ao8V`QVLE@M7M6(
zTT7aQyW3?cuRL3ct6v93F@U%*E@6RNvxN{EqB(d@*sCMuD|VAn$52oP1G6R%wV9$K
ziPg#AG8`b&cQmSG2uY%MN3-pc4=*C(*Ka4vKIVgJ;x&CmP7?N<3RmSzRO|>9A_YvU
zz`;hFRP98*6aO(jQ1IhpJipFe-CMfzYccXv%`99YAI)7{Qb)rCgqd~F`k>Ln(_ath
zyxbrzwz+@ZV+3AsqH7^|m!R(3He_m58=Y3w%?rh-Gh<E-0r}I%ts{Q43BGQEvWqnt
znZ^ZL7nas<D`Y6g!7HxRRNS_tYlaS@!v#Ev>B<seN8FXQBp2i1Lc8k1a#-{$)*K$D
z>+RPLIV9k&JW`&xn7{!))=ZPn7|s{)ppb?nR@xs@-%e_0DS%&6^3?B=MiwT;9aF}N
z-_>(nCa2*wWV&q(T;dGLL{fWDrNysWJ(U-7fybR#%~^*ECFh)Fg^}m1s5Np|<!`{j
zgum^=fj;I^FzjzdmR;>WvYz0RDx1)PsIjxee+27sYRst>)2QSapTsYjv~v7&9vFIG
z!2@W3zg%jyP{~2?8217ISSop|ii`QiBp9wv-eEZafaySfGHk^|vBfeVaXsG9QiG{U
zk$r9HT*j5gvRhIvaNKSgT@b1|ls%4xER_+<7Rah1R)d3I*}|@H#>3joE>OsL9N`{f
zr;V>=UdBXCgLZVLOl+xA^5<AUBS-Go*>{*kvqad+)$C8s`EH8kRL#JSAQaNd8aD$K
z>?08pb@fq0R9_+WzryU@lsM#y)yC%X^vCD!DcR+#;-xfTj(KbA$rHB)P5&7<Jz7t_
zWq8Pe!)-^wewDBMz4e}eI{k>gy~_GNg8eRUbNgj&^MBU6+V%`(%jsq(=p<UK$OI^o
zG#4{18cfk-O?$NgnFa%mK3@WaMT%NCVnHFWqFG%n3st5-p=KYZLZN|j#Gz|zWEFCI
zb@g)w=WsSG?&&W7YGLtJp$IOzSf^Bh1&722!(%{@u;EDAuw|_2vegaeSdbKqC&z2U
z`Bh-4OmV(43B*~Yt8Kh`7|T?W`b8OMKQsRs<^U88X#~lzVi{NCn$oPE$ADnXKFfw+
zF-ygOVq-(Gvmw}9Gaa3wS7@@LItR-j$-3Al1&sdW)gP%a14?A#6$c;`=RZ&jjjK57
zyn+&`Jpm`gLm#3C6G?*+W1_=`5L<zhKno|*(C<@utkdeTTcirS@XrQrp7roU6>{K>
z3c77Yoh5NUV^}|DgUNSJo4(k<vf{63xg)wt1PxzWpjR)@@*L{JzY-K&-`&;i<OQbr
zm4*#|e4Y5rt$zcAwp2YrEa{?22fjN?!Gn1Fz?ge_-e1S<5yI*lJzm%G<t*6zyUzF|
zRwSw0eEgu~=(1h!WO8+5j!l}jt(OttS%3{5E}~I$=D30bEPm%iB7{pO0EErejp&4|
zUEhh?>T>(U2K(G`Z+A^|E<7)vtvvII?BVzz?CKDy`?B9p*yRl6z1bm}1y5+<*I#Rd
zu00vN#D@8JX=A=K=jpP=TnqXz=D3*#S0v*98mg~#u~z)M5%ltJAwEkb$)>fTux^c7
zGS+92tu8DmploBns>p^ZG_f2#$E%#K3l8>*kthBWXE;QP_{&Cru(w)t!s{^%xYK4$
zGgj74#BCJ0>TF+yutj#i={gF?+I<_E`GNpzdzSBFO)Rdz_jCD1$8QOfg9Kiye1+rL
zd*O152%B!qC&bW<J{#KEHk$D@jbE1TsLLiA39>WY2_?%$!(6XZ9sWse4)eL`2VT6Y
z(57jWz|OBAML4ctE&dVfBwcRS-MH4#c4`c(B{>IkA15WtG<$X=qsV4S6Tr)ojGD2|
zPC>e)0(CQKAcdkyUtDh^Sp<-ct0yB3xJ4+*MueH7JW9V6XART|xH_=Bgla85bu7>)
z;w8QBW}2L?o&F9F*qWw4nvR{Tc6=??f|p0!3>?&prw-H0-QwDgWjQ9+=9V$^S~G4y
zI&BLDo6K3lA;9pE7^SYBL;%aR3SqOt$>@u%PKRsMjI6IG&QyVSZrH=zF3Uik8}6!Q
zdxp|=$>o)9zkOSif=#)tzSYO56)p1D|J>U81t}R>VxYGs{wrb7ya@5J#T4!B!~(lY
z?Y5!$O517i@rJhMzTFSm)~s97=W5y31lYW`2}OU#8(fG!Uwc*@sN3c>ZDozEIiXps
zyJk*`jJZS5&3A&Ph~~1AOF_00w25KW3de7Ou{w`4b%vy7Q)Xhuv^iyU4*&NxOZNv>
z82b6N1w4R(g(I!b;)@16;NQeqJxms-tlSm$;7mqL((&m2iHRmNM_lK%@ml+>The+u
zSQXA1tx@oZ&gjgaL0i2Ady#Cq*k^qa8TMoCLQadqMSPK!V@Z522gl8Gk5@+R?9>3>
z-cDj-6E?D}B?GfPq)GLqLvLxlsUCx#`ZXL=U$X&2)i$b4uxEFUt7y-0a~|o^hjC+^
zS!+w?)bRA%*y?M_wbjs>ie4z#m#`#3mT0k+((wjsN4PcPG88w{ue&kHQ3(8D$aQ2_
ziWz&p^e0G7rXFcq@WUH&BP*M>JVy12Hgpe3yijy7SN!UbI!SIEG5i)a{k8W}?Gaa7
zR*IIJF2_R&u)|*&b_e;$3h1#$-BWx{9~l`J@KxuxF;oJL^KTRr5XeUyWRo}pH?iu~
z+(lT(YUm1z^?`VMHU}?3zCQBlB4!s;AR<;vqeb9Xf5^2nA7UE8OtUtRSd0RgMi+R{
zSr0P;b?~HdbUwD$`$vx8559GD`xP$_yJt0j=9HPWJ`~qVyXbB*@UvOq{2?Jp)d<Be
zr+chEhmESq^s%*%E><QBkRKE~W|2~pc?BsTN7g2`#buQ9H-Nbs|6#4W5*xcDz4~y_
zK_>kM-lFd>wkWSvoDMb@zSyG0Dc=Ea>SI~;9A;!qSgDck-f<&B#te1;jeHry0Mw}n
z2?VlmfJ{$xV*4*Y*C|M%UR0%-$cPn(GISc{WWJ?<HE_BcjNQ^7gqXs$C$Pf;W3yUa
z%ezrd`eqD^@nfy*2IGY`W-qA^jk?t-kU@xJX&W%OKMmxWB51}KXuQo~=83>c=Can=
zbV-k1b26qTHWD`msxC&wo~al2@tjJ4)J+s5+QudO7wIN;xGU~Esv9~3+A^D6iC=iM
zb{OHM2^CM=ijxJNKI-82>|ox%0!-+iv#EyIf>)_r56xm`EvI6=VDp!9n}dg`PGc($
zHmmbZ;;uLP5FdHdp;F&ETIFiq+g+NB<KSfE@U6UTHg3P&;FPIFnGiLt6M!3^QQ{U8
z+X&Tb1G9~-!eH~v&T}CBO~yDA<HuHSG+OcAi>GvlHk)f-3rO-5pCIe%JputDki=ul
zPB-pf@9uY)_cYbhePH(w^nV*Fns5mO%|QSFUf}*;)+Z-(ga6%7F|B4Je<+6VeWS<d
z?<`f_g+MN%T|qUk4Oe&~Br329l~X;uGqlNNW#tAd&iVZ@%^_z!x?eKwQ%(wPqMMtO
z;q!dA&_Y{hfG`X%H3bZu^Ku)PIb%=;uLc+vl|Fgy4AWb6Mt_6JAuEGGxgEI35G*Y<
zXFtxW=C)-=h+q&CGFo!NN3w7VB?CyN-H|Ug@<n6cy94yfET!L%Cm;rfGz~clA~Yxy
zjPt4%HwqRELa#YgpuccvPcIW6XvTmUK1w3e8fw5W`0q6!{~x$$ss7=-K1T+e8XGPt
z)Vy~=3{q<ZBH{_Pe&{`rk>S^$P9HzN-N-udnnBg#lWP+tZmTlXbkXpAn@KJNW@}Hd
z)4@gfL1{Nn--}!=aDOsFkM&4X!fu8;&d+Rv)^==*GSp9{M~g!vE=<UrzJ8Z(4jGni
zv>(g1#5(@9F!4+O-x@?yWy4<a*^Qfr0$jdzH+%#GRN60MKk2}Q;8+UljN67f7T~qN
z2&SCZjjt@uop;cYD`Lr*Cc#1&)4c!V;?4MKqajqL_Y4cwqlstza$%DN)JHK>M^1P+
z<Ub1oY@MyKxv}}YCc$kn#1nxe^9M=;ce+8cB<LMoqSbJxm{(M3x1M3&{hq3bBS*Jg
zL%O-E_r#$a=f%L8ZD{Py-qF<sZl=H_BP<;`Fa8ZO*9K-G6!Yewhp&|Ngxhb;KR>88
z$PRsXN0L(?iA^8L8pFbw{ms9ZW_wr%ID<y6y6m_``^&*l!+1y!*Nr5k!o;<%`(5&;
zBNj0OJsUQYL)8Zz65m?01yJ*IP^YkhrqmZDF{IfAQnwFf4Z0VwB!%rWSwrh@-TvL`
z<=9B6-9E9Breeo^ilNdhQS+M83mFxge|yQbQ|vpZLu-9Y1mch1iS0hl$`{SGZEWu+
zM<J{Je&<+NwEekARJK$0PNqvnqX^Ia>Cz<e&II3tUxZ%?YZc1S<B!C^@_YD?p`ZC?
z1^?7qNpI12Y*;iJ1#Y7yyd9@So2*IA&?x8M>=7xMRmx%KxYoVL2@Y}GGOWehdGPF>
ztW_oyKPM2|1;EGQY$IrzY;mYtKIj~|<_HXZYCNdFHhq(m7s>=MxWaTtIP?lr%=^GX
z>}ulepnqlzf>$Yf_K@HSbiBzD_DS&bfkWG9;|T0C8KhBkQ&Cc5*{c*<7wGRB##CTu
zEoNO6&tD{z$E1g?6{9BD^Gusn02kqN(gkfWFITr_izHVo23zeESf0F|xVpT+y{w8p
zELb={wp_H+2-t4X)ekc1{zj3EMw}?Fe(BmM$Pe4v+uQR><+MRJddsF!(x1KPio+9g
z`r&zI10CkPy2P)>E0rIk)>92}?3o2)q*X{UVnrEdOAyT+zC$ZQJXCFHFPuKojIfvR
z&K%?tcqFBlMTj!~;yREzr!<hb?@tZW#Jg0kD1J!mscSS)xn*``ryzeyzQ<am{gUg2
z{myn2rz`>z)78A(<)&Ic(;l0?S1CR|aR0lCk#biH<e&inP+I@C|JxS!AHcYttEtET
zUdp<4Y@80-Qom<v6{fv0gytcOlXA~9*0qlP7Y(uipi9fVtg5tQ5&PLkPTooBJH38B
za*5Z~TSzezw@NBI`%`lt3X6)Ij)-40%0#)05pHyeZhe#DzfWh=@MpZf<cBsCn6~Hj
z>oJlvP`-0IAQ=~ok;U#P8NKtS>V;)aSW4%Kb#j0Z3}blHz!-HBSk&jkNr0kf?Go5@
zKPjzV7sn|H`3I7%bI_53Atj9>ImSn##y1`)3ufuINr#}rv2ERYPC@8M<#ihj_Aq6@
z4!8gzZ;`;UxaYiI0u}xNYcbW`nd{4;nflVgEkewx>Sl}V=w!MRKE{P7>G#SeULEYt
z&gACi$_d94#(pg_bnqYM%rH5~v5&8WotV|E%<f<X>n33@Vq`jfe3;xeeqFzZ`7FL?
z^tsUICu-F&m$J_}1ai6F1iWz&BDyS6fcbVDVPfUkh9g(6seL$n0r6KH+6us|%Bv-h
zBMs=yQyw0f5$%JtuerT4BcDYF{lMPL>mS!>t+j5DeXPO;vD#@`?b~I$7qz*ahD37P
zJ~l`zvmd5ik2v5PcEx0hI)vMFa`VUB$w%>#vp|i>2jz|ZH2Kc7@n3qI2h^+sUvj_w
zV;=y~Q(tUfCrXj`b>qqL)tRwujWQLY{#a?UEgf_l7IKv)h}J<75E6?o3t?`0m1QgF
zjm#h<naPni5<*U^?oY?JII7`YH5kDqKlk+6V4^C9kZD0NyIuq{8!tNaqCP{|8f1yw
z$8S4XpxEblY!cgy5Ct8I{)-<9A0B_BzT36}?H<B;{pt&&ykfD(1eX-gVVgK`j6U-Y
z&1MaG6ww*L>9{dKnbvhhp$P`NK${L|8NuApM7|gy`5p7vQBw5_g#NK&z;FGgY_Qeh
zH$B0h+WSRd{ROffPmj6ke{?lfKayYYx_No${fyS)H%sCY&&pc)1dsjG>w39?QLlJ&
zP3vN=8%IV~K7irfT()Wx5P|$QeZJhA1uX6Gkj04~z@LHXbogAnd><%+bC6E<4Apg3
zN_*CeOl~0339{LcMec_JH5_#<w=QMPhu7lewh;QUU5V%duowS*xmWCCz3LU;7j>8{
z_Hk3ZxUbeRfl2<MOxZckoEGeyo7HB|zT~s#U0rNQu%@^bpY1#YjDF4_M)ZzxA5mj?
zg3#QN@B`OSx5JR9uMF@{BIZIJA-+I^81FU0EwNnYRU*Qba0uM-4?VoJ1y)|X94!2o
zd52Np@U4jxD<$~|El03^l_AV>z7gI14{4XhTGHiCnH<1p`SOk>Z|F|t0Z8$;VqITi
z*w&~c5{y}EqrtxO#u{vIcKnZJ3JGOv*{tXT-fjL+Z|$B{{%zG9xk}6E^OL#tfTt0R
zQ?zeQ1S8JI;CvTG)B_fb9?RDppc_Pj@JBl~ht|fhAkrK4U51Ne(wJRqo_vQ&Xot-Z
z$9c;aLmR&ZbM=ieC*Eqwp2Uo$Np05|?GUpfJdw`8hpBuop7}U0X)tHr=H$4cDV*3U
zu~T{I8M^?6TE4KAr5_`$SCcvo;WK`^lXNf#KM;^l-qFLIKzIRX`cJw>G^iKjI}>9y
z=@9N~I|rH}-(Q0G$w9(WVP>^aYY$M){IBI9f$Jo+!YMZB{pX>VJiR9bqD?4}do5=4
zqzaQCf511>XmO^8*DV+aBO2?64{H{+H8nlETnb5K^y1o9`5|+|pvNaLD8EuCFBZy2
zM-$zm-Jl5O8Nv@w=o%x8RkXEG2*GzxWLgG+^7{I^t7B_(byU7bHqC+b^xb0&PvRUp
zTJ<8rjINZbB%`w$XY-kA><|9ww<X>5Lo3tzlez=WcTeUTS7XC%j3UVh`0gC4FLd|o
z07ksSWYS-ZD$D2?Q(?V@wwlhUM^Fxt<Ot86Ou*}rv`*QnC$|ZP)5GRt)kt36<+U@5
z0rNB-h7?HO+$N=Q4SRmjIQr}8Cm+LfL2#Z^cg~6TRO-XJv*Lpu<_O@7GiUwDWJt-<
zm`4!%G1oASdd<?quBI98R!=mg1Cf;PU7!nwjYjIxYi~UHmdn@+nSEX$xwds&;BAgY
zwD-8uzbzI!@hGi9tSx1XIqdd3RF?L>-lOgH)1sX*OtFz6ps6hk={~-T7#!8U<AGPh
zz#pT?VM?Xb!!dJ0qsr)cl>bD&?qh6^cpJy)=LY3yo)|M`qJ4TVVS7lXT94OEE}$?h
zy$X~w(c?df<;o|II~V3Q{dW1X<a>Y2Gh6VVX4IEP?H^5yF`LgI86I6H-UKH7)13jT
z76NON5APmpdFjzTxu>5L@fG%+3R)MtA2Nito`nHj3R?dt01x5J`5BvVF!4RQa^dLc
zWjQ$|4i^TU%N#(^XC7<}JF;cX^!uO&uC1C{Xwzk0IU5#2gNnDM)13lWaQDn@o=;`(
z#?pYiv1P`>N^>#&P6S$oLm%b|;W&@LLQ`AaZV~v9xrMcB5=by|I#qx?=KJMMycxB=
zSO}}_W#PCv@=Le98!HOD5|5ZNG4gD|@91}Ks5?QxQ@8F^?=zp6Eyjq#N3M$hZWupC
z!)T*cI?pjUlf{Hh=fq%ZY|~Yz(Hv+KXvPNgs&3LFaj=7qzg_S`x>*xoIm_j4ICn0^
z(2=`DvY=I>FF1;{9z>09_QMy`ZCFnfr+>^5mY_`~4$rB5#sd!RxN)L;VlImO)w#<U
zaJEs3uBN?bC=O%LobFmSJ~mjGCNoBoDD9mo-S#_0-zlGTG|rNDub*N78wDbah4MD?
zf4ds|fb#UMK1|9V{lO2rC5uj?E6^H!SZ|z|r(s6N5;Z_!kJ*`aHed`|2^Ky2Bkbr7
zjoE?*z=#!igJ}yE;G|>j&sRUr$U;U|KLULyfLPD_SCs2!jGPVK(EIa}lzylzZiycO
zpNF#glg12iWOSh$`@VuujvcPwJbV%M!*z_{n+bOLW{n)J3?63}ym#Qp3aM5i48@vJ
zy+t#+t@EIBF|6QW`%e#VxyVoRXgXT1C|LsX5Vr&iP^$xOV8N{EL!Tyv<m0kdjHq_1
z8IkqKlG>i$td@#cqgjR3ZhM?ZGZ5z)COPGGn{Q+7=m@%(eY5<m-ISn5xYsQ2D|Q+9
zwkV24ZJXh1kbGNxw8aS)lASc<3b%rp=m0BV5x6YbXGghg!mFc!V?zsTM-9iy&I6|s
z#zR0@2%YM{9+mnjUs!wjfPUp`6Xe&`ofC7l4*TK`GxPhr4}y?sCK&d=B);;|kP5gW
zkcUss0zg%t@^vuysg}1!l9Iq(Gcc}4!)ibRd4tD25d*AhjvqJ0SO3{9=thObaXiW?
zao{Lr{(KX$Q5cL29TdLa@bV9!K!qCe7A#1Ok-}g<#R0R~g|>11mA`>gN+9R?fftxZ
z(MG&n38Qty?{P~}XW;MA^(ATEW8oF%XZH}wy~*L|)?M6vu7PP}pYuni&Y=HBigSzd
zH=18@J_gYO4RdlGv0BBp7Yi;hV<gk_d;8v_xxvdWMkMbO{P(=xRUqL5fT%^|Ni{iO
zyv^qq)bu}IqYY$pNMiah4wtqO$iV_s87OQAN_Ei#1!<lH2M1Q_-SG3>;U7h9dT6?_
z8m#deSn-(BMk3@<F391)W!*aK8i18uxP+aoF_A{6M?z|0rmBXQ^!x<q6nTQ~CXfDn
zz?{$%9F&uuulqkbwq}S}M8l<|*v2=b4_l@-cC&qWvgj$FGGK@0Vz|7_`Vs33lfZnU
zqXquVAXNjr%+#TUrGQsR)HB>ofWe^I$dMo715vi5CY$^4(Jxwpe0#_CF*Qqvj446z
zdkYDVk6$}MHLoXwRxEs^FES%!_BG_W?=`OnA{;tG{TV8gi%v|TDzzWcA2+agOtzg$
z*ZNfiZ}RQNY0*<-;nZmKr=h!p;(M58&tD{}jQMg)3bl5ETvpvE&FTq8_vESV5LdMy
zxu_6m^KEkM?cDO!XJm-%Q@IF2wJq~s=RM1f2a;8*N2A*a1qYbR=iVMx9^T&%ad$Wn
zq(~DV>0grEgm$8+KM~6GaWjrkSl>-nVU)~({{E)B^>CpwOCK_4Nly>L7?8}^H#8nY
z7F~Az=KQt+v!kOLh}%YWUm#!DG4HsU>tatj_>dlJQ*+4@27N)Vc#NaLk8s}0#kZ%U
zeP})?V=Rwx$CLptJ3&Qjpj^owWy!Bg)Im6-FlgP+`+UL;;_=r3o=!@L_@Lq5=YTvF
zPpv#@8QrBcr9k_B1^7KZ^lqelu6-X!eQosA0Ywdab`8uvtIj@eN8y&ask?5cssbj?
zkkK2_K%qmT(Xgy+hNH5oU;h)A1|Y*tND3!Q0LMHNyuwjCec;;JrGs?hy(JKdKvG3h
z5og>6oNvAsdd+E)uEE7E0`##oia=_jq)KV<x(rtWO)i(LhfW15Fx|8bkCoeKp8|M1
zt3T6Q4M`i8?A)gXP14x5xYMDd?Nx!ua`8e*nc93U_)xGMjOwDQS=j4ywH~r$L2V&&
zHf{*B_8e-ysj&>nn`5M2xp=tf(Y({hUR{HFvTJDIp)@?g2cw`wHO&H1@o^zEm=4se
zjy>Rpy#MZG*$82*A=cl#D(xbV(meWFqqV5*flWwntZ_S}Q!9@q%h_gQAGv?JFqcBy
z71Uy776<8JFWS>n;>)o)0no0P>4GvhQskuuFg|`-&g9@ku5PN^G{u!m9!_M9g{Ob9
zMw41E<dJ}Cmeh{OM|$~NdIA=Dyw&DbTps!(tl6Yds2M%nFC5U7DlR-8smzF^f!aYC
zc^Ri7r@~#r<fHUi8E4sUA_~AN3<Wtf@L6P1E~!ZQKz?xBL9)Dps^MI1Q9@byp+}gY
zRJo7=sMKAW_;*X1svuJ*X1SlrCEFf}`e6B+<b$fUsXAt8iUh}8{MbAe^)TL{>8D_!
zE8B^bo@%Gj2vNL2_qd!xTk!rCsV78Lr3Ka6oOPyg_$71sBM4LEvu43}UXu&JaRp@|
z9Gr89PWD(G0?}`^q@v}oM3GUAV5VcbM?M48%_}7m(Wi14hatZDnWbWEs7_Bg(r~4w
zfmi`$#2OXxiJ8*Q(MhBe?eBsZ*9v8qRgZD%25DT5O~b?qm>awGMe{a&)2=!|d}}+6
zQ*QR`WTscz3pE11n|5eBZGBtClL$X`;?Iy!i)p%M;2R{8fb2l^(pR{z9%a}-ayoc4
zVU$H#Q)|lA#+0kHe~(#0V@f#kL@N8^z5<q!za+f}kYtb!zwY_$oJo+AQQj2OGzaI1
zQ==+M>P?8$HMdl_$1CgB^;qPxWDDqOWyV8rQ2lLfY4A3Ygo~iL#*FmHnct{BdS{<V
zIg=6Y#Dv>*i+BrxfCA<0mP16TKPA8KE`wGQF3A-doWSEobhO;yr5+~LgZ{}GqP~AJ
zb<6=+0l)crlEL3%@+aClU}$1$u$2|!`b6F)1=Wf3EEzONDua^1!@Qb2{ny5_Sj4Cs
z)uI+z@-r1E!Bv8#!Tnc)BB@HPH|6NMoV#}?YupOMx_1SfkW%=ul0B8Wig-z>ueF{-
zC%#KUN<AnO4+wsSfnhV8hjmZ^b{kT}0H<hJzKHa8V8wiYTp?BnsKt<1sd+9YXiK_g
zwSCcs^k{{+KDuWnT<)-X+Cy@3rvtM}pRdwui4cTtsGu!qw-Q_uj!L><y(a!u!?h2c
zDyc~OMeBX|M=#~lxJ=3m5@kx@?<ade-+u4(?beeY>e0r^wIsR@AI_6vZ;4OdxGs}^
zjw4JRhC64U?Wp|gbM4vZ3;yV`DQyqL<K~>n=4-6tl1xBi8_xyZ>%Zc!WN54G!Zqm?
z=mwHvvSW@hd?&~$WLXbB9@Tpj*(?J9@=4gP)<OKd+*FaRCt1Erbs2+6sEY?RWgK#f
zof^`$I$(8;9xjH@C^PY8JVjt<_6$2<kphhU$`$JzgWeI(c-;?e_Ol$Ky}BVSU}R^^
z0}HzzVRyWJ%|-47-aSwbPb$}cK;S!&&8!|M6EN*~8tsCk^Wp*G^X#nPGa9C@dmP8V
z?7zP*_BFiCHYVP@Ot{X0px=E(zsV!W7<^Hvyv0g5$pF78QP!g?989!RsoPPH^V2S@
zz8O51#1ly?uh_j=5P6t;8Tbbwjz;;g!L$t*6d6$Z*HF8paCftarL0R-F%0NnZb~M0
zAXXAU;@*2sE-DaJ22XdpxAwXg2fX52^qTs`?RE2o09SF2*EXuGYz)40p_P@9B!s;@
z&0P6PQ=>G2SXr8t>I?N4YmGYyjK3A|+MJ=U|0D)J(h;<0Ql=cNMYDr&E-lTj+`rEL
zQ9m0@17Q+u=jF~=^(0)}1Qj{z)}KV&2Fr<mMxOVKT>>R1$a%Bvc3r`exFb}leOl0~
zY(nmS0^hoZ?bNzGZ7>2*IG6bj>8ff>Yx@t<4GubV<ZU*^y}8JZ`Mt=UDDn=j*CZu3
zA|(I8+UOyS0|Yet@FBcpIzF#JlYRFyW3hjJ9ICR>G>12@7AN2^eHmR<w5lb@CM8=U
zx{>QQ!s@d>RNV4f!BAIE#utMunnYve2B^i$=+P`cWRK8QHSxUF_ko;mxeV*p0jbBl
zUWI7F2TQa;h1z&tGB?@2fns6tB^T5(N&Wj3>Z7jwl-R?cN-@g{DTev4@jfgaTVX-{
z2s~Q}F}u?8LX95HGT&W_8db%TWu;2D;Y1B#Bvn~bIiKaqeh9$|B(gXeRtC9DYirk`
zHoz)#2>*2;(p4rc$du=tD$T(^^~qB0h^pf4sX5D)YMQgU7UtH#gtG=ODnywX;~Vae
zHYc)?5_0-`B!>WV(&rAc9(zE$2C@A#z)1MBg0mlxse18oo`S6oXD(D*!5!oCV;;+I
zE|OPY?3&Qu|19zwGk)L?u&TrlZW--E{6r)l<`1<c!{AP!hKafECCf}bvH6s2)GQE6
z^8~Ms5$zQHIly47`5~^-W<W52cW#!KN;chgY-jyjx&1q?hi<Z91eE<-fmxn{J9p`c
zWB#bZ63`IDP!QQc{V{HN)Px_v;rDv`x{Ko3EH@x`Y3TbO#@;c=wq{)#ZTD*1wr$(C
zZQHhO+qSz`+r8ShZLZesbG{olzI{&Iz26y8W6VEu{uosw<EgBCGL^@JvmaP@9yx1`
zp7G@n8!3*lk!-)s+5CQu!diiY2*Sb1IVOgaS|INdj3$p<;<yi72o3Q}YNRTo(vg1J
z$I{uhhgJlRrZBKMAkyjf#d9kV58Sy>C_g8{dPDFUoP5i3!Z8ZZ!u49y>6_72(Q(T2
zYaDwA*0G-=+>sL`l}felG7yw_=DUZY|M}ZV4LttE1=GQJE8{=3Cl;LZ3aG@8w^<_b
zj2FCXVY!%=mLw_o<(D8owM9tgY2dL*3GFL!YoiQ5XBde(ht4R*AGVt_8BcOp{hIHS
zh+~!lsnIQ!at5X6lv07-<iR~PiBbweZ)b+eXYEr9@Y|>_6Jhd?0HUM7YX8T*xEY<e
zJ~nbv8L_@kQel(OKDYDbC1n>hC7&u4=itd{Obm&_d=v~5(e*@{pn)yK2C3kP1|rB!
z3U};k*jvw(&94PrF#K)wteq+EJe6Q0-1=iFD|0cv8<X0zVo!J)@LcJz<A}&CAMr_a
z&&jCGs>W_mD?Z9msN@l5PqB(^o#sYwm8t_Uv|uVqTq>F@mE7W%N=}NZV4*t^wA*Cy
zQO%9*)pm%qMDhe)B*E40<aBN`Osv$A%$?6T684$#r$=GX_c-K_<MpCBE-X67C(?sy
z5XJE-c|<SgLizcN)io>C=RB%UraIw?uQ$Gb<-ZkGnlHlP0RS$<{!x~=osrXj@I~v<
z_OjdHO#SA|3p5W1uxXdb-gfn}Go#yGcPy+R@-X38phbl@j%Z~`A&DU_gF$`RdWl~Q
zLaq>t>c=!k(mHY5KDjkuWJ{uA7Kmc^kO(@U5OZs5YqPtyHM>dh85oncZ{Dh%BaQhE
z=)s<*d!vwTvSNl4GDhGJrOw`a#CTu%9e%3`jvLE(StNCMfP93V70)9`biY>>c)Rq9
zSx|QenzMz5Jj~H)oPIklClCrN5RUM*w?`}{5ZwKm9UOq=f$jr$k7S}-Pm%6!8@%sx
z4b%X2I1Xh1YWIu8q;(lBvteoCPvdJM5F6jvJ@cyGJ^oLq_-6L5>`&f~-{z+G_tz&U
z7*->7ckIFe4Dc56v3B0Q)2~A|HMP1RV00gTxOMLejo6M=+w8Eam0!G2gqyGE<wSJd
zujrpG`o2mZkNc<gK7Sw1&qF<t2?1q`xPc1wLpPC&UK7m#{VRgl^cP&O&`C{VW6{{2
z=5W1e*^xR3gs&XA3xu*2n|`md!*H_+Q@An>z^8ZTC%r>ghdUx6cbH|%tep&%)u!of
z(t87z67%yqRmBMy;E8c?hr=Oz#WY_WuuRa4E?eGRUk}o_Oiv%e1mHK<FQcMFe!U*>
zC752~vRK(#Nj>&ma`@;JQupiH|H6-XT{(5-J{s%YO9M3)#>@kzPa?{KFy7Xd2oZGy
z%JA|BfzaOH8y=5|ExDZ23ZU*HW(S31Ru(GS5iVe#B&T}-ILn*Yqgd+#)5r|U$;~<l
zW3SeT-G(xz;2r(r4$A8P?OuR4a;mr3U#E~^!W@|TZ0x(7I<uU+(M3ZH_Aa7~(UbAC
z>pJ3EMDv&e`_lp5#?$_1eI?|ry<tiW$Fj!vX<Tb6h2D83D63BOuV&sxrv)|c@rX~w
z^#<;yYuj9PO{;Z!nD51c(uVDiG61y2Y)%j2T8D0?u|ErH>=oQe2g+wBsHs`(K|(9Q
zXz10iJ&-jpvUcGV=nx`N3;N^akPhOEuJVL$d+Tfa>GI8HV_}MCm)fnzuGvL^ikOpN
z^e*u>F~LvmRV;SlSC3|Qprs#74iS4iZdmRnb2#1XmC(ztX`1`FCM;e15zorg^pe)h
zn`KsX3u<Pw8jP1`p$zRC63aniT)R>psXaVJM$A&%)l3ueiW21D%=w#?>Htki{Mkc;
z+A4M6C-98F5>1awYAxG}PZ*`oCcs2lwpGY#@pQ-eUF$PD$cIukHCqd`G*z|xU->k=
zRop_(X{R<;Z7nkI0!_&iRGQPSMRXET3YK-Vqsw?K5v|JK&*zX6fJw$79KS(LIU3SP
zU@fL(ceylX+Gi(pe7idXK^9?RkdOD9jA}(U7aB5EunowDzk`Eks9Z}6G}irE8jR$$
zRspHV!eJeTp~PK`Onj9U&H5P}AEY9w91%UtDN{?qm{~xtxooWbk}ac#`hzQ!x1`XD
zX=+`)gA_&M#CT>_s1`gIQ$w&L6`_#`BbUy+Ycx_dN@5J-;T2k+TwpY)k24Iz%~wly
zkhYwo<ora6&=k0gdYka1rM~TA>>g-n!@i&CIA+-E?AY>p*Vk2V-;)N_{29WUdu@EA
zp^TRk4Wdn<;m|HRN;n>B7@SnOj08j*Ys41{ADlj5-lwIDi%=&;H5k^TGQ6&3oYtn`
zGAeh;4uhmyn0T>{cVNQ(yhsLrC+jg5WMXvISQZ+ETj=Y1POZc`z)66|T2O6e7A`q}
z%I!?+5NuC&@O+npU2Rd{8oTfcVCf;Rlgr2n6@+P6%?~7l4PwHkGRdM3Dl^Mk1+iQ}
zs7hNo5r8-s@dR$6uAbk@0QD43#_exa$pTQNLH2L=?uWd(1^nJx1HUuRlTKnNJd?~F
z6qEHvzcW?>MB2MqAT6RWnJ26yKhV{Pwxuk@oQK4ez`g^c?(v>TT!{|<V0d~qB2Et`
zH3BNgOm0W`n@6>-EV?}|GiS_<5jSEqzL+YGkOR4EEKMvMv*kIRd^w+}p<F@1DO6z^
zml_haeqSUdCp&#(5pPt&cHppACfO9}$_!bE%@7mF<(Iw#>4aRTx!}MpA}mvR@#w1g
zxn1XWwUejT{U_y{cZsCHq+>{=10KkvW9(c}8Oo{Pa>Ju(Oq?K@9ZGwA$Q)TN$?ny}
z^I6I)2`wq{fT^g!&Ls<3D6uR>nsF=!h4)kH<M<Cd!K4q{W@=I$o1f}Ky@z`=L3|n0
zL(Nn^I3Eeny^m>who*_Yu{jGnvvkf^cZ0PxrqUdrNw}aDYcP$$t(96&^c<6H(BR})
zPN|XX-2Os<!&?*=GcHRhI3o#n2Yj*4Oq~sWES|Z@nf)Ae$V{yw&CF<_t@1kA7A;mV
z9(KP!LPn(Yc(Z@8SU8bOAo37Q3>NihG~AIoeNy(|^wx(I<9%a8Hg^%&k@3`sK|a}5
z-Q0&IrwDFk7%r^hGjAb;`DD%MY_OM52oxN!-$z4!-6;QG*1-fhRLf#FpLrSPHMs<E
zfpLVSl=e3ZN@A`|0G@g(J}1=YG%%)g9eUHBe6Wq?mOV5&#^~%VJOW`b;v~0jXEMU|
zsK3R!UqNIw$_L_7V$z6=204Tz;2{|)>f6!^!zb*wA~<jqBbGQ;>(D2#x8)~);!{RH
ziv4BAmzfrko)yr=#DwS7_Rz<;NYaOkDdFq!?IHk6JTmLtcFWAztRHwY+$c%zUL}CA
zI}K~(p+FSTpb+EO`&?$^&psW#{hmPHa7%?Cs{+^)tOSRl69cAXzblN(Da9j#F5a0=
zKpwQRE7P6PaOw!(5=E3Vuf0@xL{0^qF|tPMbFmnLpPL<U_bU8?3CefxkG8IE%oBB<
z4=*|eGU<imP0+Gke}$?LQ%Hpz=He<z8N8!}kO!sn{#r-ZlLX5%IH$*!dycwhfzk#p
zs>Q-gd&p%<vuQ&)PJP#dKhoN_?x-T{7sJH@sifY!Wg?3tf~!(jwkeI|vT}(D9bEpD
zQC&I=q$k30#b>(-?y<Y#WbwFR0>mbx%aJU%6mx~5;Y)m_glT7vnCZ6fuOKGan1zRP
zuS}IbZVMV6D@+X6T42Rg1jlNeW_?@EjTw|GT^A>89Gyz6<{+HA5yyO1=@K-KtKxu6
z8a;BK9F`8ol~6WsZ2A4ef-|DEs-_tYhr{44SvQ}eOcW!gge`UocO<JMH#U?lBbNa*
zOu>0GYCA~oSjitgu&l+F=z%jo$<D9#xv#oyYFE60DEO=vnHFPqo9}jBqD_~jSJqHb
zpHESXh?7d}x&^fhW)T--9_9ab-csvqV*sY*jLAA0=#IC^Z%p33PlO{WGI)jHikRJ+
zUkU&@b;5mwA)`@uoH$Hu_N+p}+QZ|}FL6iw10f3Mup126iHvbtruQ;m_io-Ewu%ly
zq`V96(eRPt--EbRFSwcPG6C&1Y)AhR#x@~PpdRwWQn;|$E`_TuF0<0a1T%&%x!WDc
zZX#>mkidw2Aj5CVMd^`^Q<OS&?du?xeQ-6NDxC>E5RW&?$AdAkvpP9;I~ieIusS;a
z0f)8^0%)`|LgzHF7;|x3QdHx3qs(`SLNgNL@*d|;uXg-xd9NxNKCD8EJ~CD)#I5M2
zz$oQo-=x&A&B*sDqqTZC-oe7Q6s_;e|K=P}$w4_3JENF_Br`rKa9q!9<>p{ySBUw<
zV@}FZnl&!+q5!9ME|8v;)ymw3TpHq|1;12fabZtf$M@zlCQs;*=Mpa<Bmw0*D?cBo
z!Ynz{^AxO>=?vwx4c3}_dk<&>6G?wyGi3w*$I#CbcCx1WjBVLC&-9zH8g}etN|jN*
zvIb=?|C-MKkL`61*lw+P-b(LkW&?>?ZzPE$CQzJbz?6%l<t;Jg2CK0e71|2XiFVcf
z6uQvz)xqyS>j4#Rkhul9bROR9_Vu(D`8i2EUIv#6{>_4DY^31~`==_`b3$+~_+BYC
zy&WdR0Qjn*z1D>45Mm$Qj1f(^ytC;hydRJ4=9_n4c%Mfc+SO@b92}xmtpVINm<7?o
zK~0%hLltm02k<BDaiCkMDIkB!Wj<_+IB}6Im+<jqS23j>@og-GG5g%erHnl1VHjre
zcoMzdrAq?WWn{h$`(0RwSWD!Od^y(OrS0M$GW6zN$a<$rCcI*$q}JigC{102`uZhk
z?p5y3#m|7Yrp!rzX$!0hV!Ul1?u%Q?GHOBTIJ8u{eMvOD99vTBn*Gd6m-U1x6H~I#
zezi{G^O|@l`z=#?s6<fR|6NMmT5nDn7zRnJ!C2l;4on%RrkEpbFT%IPoz65j8cYev
z=PzR94CJU^sp|5fQL4>H&G1Hm!8B06dtOY)7th)VRaNTw^|KQCgb}j~{O>?XcK=dI
zPS;RYfVJt>Rpcensiq7R=TTM>xR6}TQFawIveQn_Tbc|lrIrg9wRZw>wRa{T4M(J0
zRLNY*p{(9QBDq+&=()u>WbF)u#-8pR^LjMxbN*p^5OeA}Jx?O=IVq}InAr+esXODd
zlZpF;=1kcV6JquLTXBl<VB2`lD3~|-H>L35(zfv2QIM|Aw{78IhG)O>VEW*minetd
zg>9m8;ovOXhDHryQX%SOii^VFY?`$~SkR*&vG}kWiHo1uXZRd;U9Di0X~}y+r@!5=
zF7t}~uIng<j>XrqOM8>rF2$EgAg|eLi~llnbU@ou%Qd699W@Hp0exf#*in%zoW2YF
zLiZjW$3d7@2WavWs_PW0hI)MN4NG?6g1B4s;WT83m~%hco~w(OAC9A^5!;wNVr`tr
z^MD0xaQtioTkP~5LX2B1pQOu;yhnKD5|th>a6}fpYxs`Yv4fq{lxW@`YOt9(MhQLJ
zXZ9~V+DmZ&Dh_RenBAMMk|}>DC9lEa%4I8=U#{&D^^G%Wgl^Qu`FYa@7lh8}LIzzL
zlbDBEGk@QeV4F5&)m)!TfmU62%Bh<rvjs0~2VBu-kJNKDs0?itM-AJi<l{SSbFcCa
zaP{o>T*S7mTjZo2%U>b1zZS4MvTYk5tXVDYR}QvxxR7g}QET|`ZY-WmZTU5q!IR~X
zYczMX8(L<)Q>Q$mu+BesQyPRS&;1_LKkCO7vyQFwNqE*?2h}b@SuSgz0jRbPb3HZI
zG+&(d1~EjN<_ExY%43eHe|a2$@jC;5&rTP%rQ?gS<y-fzaxvb`W~bEF94V*&^hI5P
z`)mZ+wnih$U`xUhxS7md%C^2EB(`>M@iT_sug=^Y^^&zwMX|jkwFVM|GZj#DW%QzU
zNNYM*S-x67bwEysWosKbYubWNPRABj9g;i@sg_Y_iUydbO=#T=rk<M4DKR^=m{Qzq
zL7uivH-?C7{Y7$M*Uu@bu&Kb(0N(!)m{Xk7Qt3g0S1GK~5*RY>qDrHY9t6{~laix8
zt?`*ja-0KR2Puf+NRgqVY=g|3KBOdAkcv?%C}~fqRGBbe_E+XUB(+;&vM^&=S-EZE
zF>E@%HBRY2#zJ=JpV-8hB-MQOaA?<iZ$z-0t|Tm-?f%F@X?;*>S_4=KwPk&Sw8<(p
zqFhh#PrahOPUMU`gyY_{5{XmslBrEZv}uMdZ?We1;|A7T5Mv<_o5EqIc}T@E`qeon
z{CIO&$2I0>w5NCI^jwCbo5r^m_YM4CGzTQWe|@C$<R$<6%l~`9|NocyS=c(8INBOm
z)2S#!008eKm8e@wm8-kBLjeGSoc_c-{P*Qw2^5Vs@;78a0D!`uLGlm&*~HQD--`!z
z;u>rR=#fQUyoXV!f5$iDa5f_eCPX67QPw+03f>3mnOu(f5**!F2~n!x`0R9u^{!F&
zLt<^{;p8Rnp6%UXfQz`_j9<Qh@@9V)iq_)_Yn&)mw}@hB#3gcfK($!d3(NGwV93#c
zEhGkg%>BHhQRp+I_N~$Za$LLGdIr_{x5zw&t3^gK`8T1SfLP4Wn^v_lLg*TcGQ1X~
z5=vOBMT>y7z}tF7l-z_KNhljKy&ETe8ErvOt*Jfiys!hTk2sbQJS6k)Y1CMw3@rvh
zFPtsc$y-uu%w#H#%Yc6pjc0Vww+y<t4v%bglsz<5?Z&YQjD@}*4h=g%In-QY%OmyZ
z$@Cf$M7pW<f)b=Bb?*OrGLe6#@7I4%CPo<PbR-Y}fG{`!0L?#m<j&@fCI-fOcD6<)
z|NhZ0schJ;^TYd`P>GI12}j6KwkV3*h0C)b5+cloiKkSX@a)=5*S4UAt32&=9YB%n
z#<$u%0V8%f%}ixu;Dwpdum=T9IMSp>giKadt)SI)rrGJI;%}Oemn|S{T0OyZg!DE=
z%#-^2W)1`cfRUQZ*D=6yBRIr>h*{8skr^%OyP415L#{i!D}v@a1Nnm==?^=`PXscF
zbF(6Vp%RMx7K_aQB?zceNrfck7!X}8#;-G{M4TZm?=ay_f4ik7qx=pdgle3-(r3?w
zy<jTJeztC)SB>gu67=W>GlfV~&&tq6w`I-Zf5VNI04_;0fPk!W4IHXf#KUdXEEBw6
z9R6ijbsK-d-9#zA{XU6~CP=sm&9@aBHg`D5-iZYlYC{lm^?UE3MWk<pk*b|84FtZm
zN0snen=N?7pY#5aS+O@zyeMWD$2p6hB#=Che}Y)d@x#2^%2!fYV@*IsMC$!2IXurV
zr|8Fmd=0$l>(FFNiq^Zi+@vTSTo6~~?(bT^*n)<iD;In90UmfCI6LPzSvX(j_cz<C
zs`{$}4V!j+({KHId%mtH(>$`lFPY+;=;XE}Cw)e+T>NiXLj`tVh5(0bq7ihY1+mCW
zfl_ZmM^+Uw)rSF`6!7CUR!|Ze{h`I6kfiQ<v~kr_CVD6=Q~ZT?)QJq{uoCqm;`JU8
z4zkp9i*16&>d(*TP<ATn=7}z$M#qsryx<2cUkE5T+P}=9?w!N^ff0)q)iOD}U?}?2
ziYH49xMx`v0as135Tt3Qx@L4>mNm{lhDHyYT8)n~iaaO!AQ*3|7d8BHlkYji<kGFa
zS*<q?9DOI+k0DDIY&V0j7Cr4aulDU@Jg2UjeE|Q8F~U$s&q+V{g82hM{{&+UE$sgN
zLU)PhvD>7F4t4v6B-FW%4%#w3odp4%#~1P!QabE(W;Bj)Q>2m#6&_{?{CZL3JsFfZ
zkMYLiZB|bMO}0OKXGjksW&eCVWBOS9#m3XQWedd@_#KnDOPKIXplWYGvuVmYKqCt6
zR!-?^JiRRLjDSL1Mi0<4yJ`edwaJ~)pX361J4tpr^lJvGIDAcLU3e8M%Krt?3+RCV
zZ*7|>djviDe3JL_6e0!oYbwZK;GORjB`qVzc<V}<+K!uAT+gYJeimawpal}fpC515
zBMzCxQ92hMXrZGw7>4zUFd-l8%99i2OwLJn9b~-dBvy*x2aGzc1FFv!a`n7de{EKr
zdju6E2wceBKkPu5UffxfXE<bvQ2-@KTbt8UmDXYUzgFshe71p)O#5van{;OZLp%Y$
z;VzJdUvi|b{h_X7W<1^WWfklHppRxzto_bmJ5N!%r{m=_N1!-Ndb?A3ZWmJDfP5?S
zFw@{|aPZn0bH#l3Qbk@k$G!wM40?${B#u?uG&zNcM-7qsq-1OVhWpnUZwUfsS@>zL
z2}B0~VEzXXXJlvV<ZNK;tmkZDW1?qmXJq~F7r>JG|7o_#)nfpvILRLhSf~)Z3J_MR
z<cbJF+Ead#s%hbgZF6yT+GYvp`fYbJwLWeD6o4)$f*jqGo0Ddi8<AJswiHNndU0n$
z8&(n0w!wAN>HLZ@qZpjTP}#rxi}&O&UNki}GV4;u-5&nrZZaD>yGYO*#|STnp`I9{
zpb34b;Bb0S&mJk2UBGA*R?42}2KcKK8a-lKesjnG{(D0ObNm=IARQsLRy-sj52l%7
z`7Z-PoAYcnTS~G7`FtU&G4=Sj*F>E;P%Ta~F}(M%(V)S#%sCO+Z9@xd+Q9)ynRh4n
z)R&Uw*lD_+ZDYnemL+}Z;|uRqDz>Le$B)HWM#h^K%`C=(LZnxF_uKb9i&;Jn+-w}|
zJWw+{J{&MHvd^MjAuFUYK}u~)VO2#D4Fsa@I>HzF+2fkLYoV*9jX*x~J+@3~pbEzO
z57ShrGDMI$b}H!amfHctTK%Fvz#Xlua>I;f&7K<Cm5D3ZmYH|}Y=RaJ*7zbCM=-`@
zSK_I@d?ffqkD6KkHlGCI-WxI-adN;cv|1a%;rc68!~_SenfAEH(pFND<7?rHWzk9k
z4_-74fdEh>(KMRzIpmDNyg>yd3c2g3F-b^rqmV}ZqwsF0D|do$)YXb#<Vd$5-C^}I
zD)TJ-AYS;sM-No|lIO>s>a}WK8N37uRB6kEDz=qRf*2gi$wkFu86`eV+(0u#W7TAw
z$a5S~sJ2*B=HA^?uKKpiMyG2Ziv`x&S3(}L22%3J(BI6jF%{Gl-AlEA-IZtY55AVL
zGKXkEB~ik&`RmH+@X8{RJ;?~^%A~E_nb*;Ol@aWY`$OP715eW3CK`&^<OuI-$0#h_
z&sZM=q#{Ld7gm2CSsTwC4a+)Wn+2ARzuBK*O>6I~a&3CF@1y_C>qFlW;D_bt!8)uF
z(g|}g7OZpCf=_Idr`E`zhr))S6y$6sP5iZnPwUc#n_Av_UUlq`F?$fFBXX5GmS=V}
z)p3Vj*ka3xeCb*t@Vn`RFWEIY(wpE$|K%)WC*^~2_T?oP{E47fb}{VLFTb}<%$*PT
zd>&+nekIE38E8zU0d3c-{n3m7+t(*2c(Cq*5SxTAy>9m>8I8q1CAwPe_-UYBo_XL{
z^)%x!BVpWW{g`YYL%P4KwszoIdhRP@p2=fkQpuO`9@u@9Jw@DXqgijNcs|bTNLnyL
zKF_F22~yMZn3KR>OTWN)eLz{>-S9C^UXltooE1DPROwlf&E74`zDJRm1?qV{n*A30
zQp?2E(#9`6*)6^ZWcPTNy@*WTz6t20iUJlYHr2=gm#yH%;Wx|)AzY@bBd@Vss%y;+
ztvd_R#;l1(Umsj<!j3!{Zp;Ph<@~*D*1k>+rUOi2ZSI|60MHlM9~_|<1)(w>-lGe#
z#oIv0I$a4L(e>@E9iL2Q0~pM@+`msgI}56#o;sbjDAf>kBkDUvm$-yiE%{*uM(0My
z)+j1%l6y^uB1Q8n`Io8vta8gTu1HhMBxkAt+5A>hEnUnzj6>wh+!?Ga9l&g~cu50A
zM?3e_V}C6?x+P0oqEKGO_DFf$bttV;&dS#{ElZA^?h7X_RAHLinIB55>8Lsn!Vat6
z>PC;g-;)T}IuG4!Q!Bp#{}n*%!KYcAe`-X>pBnMs^!5CI1;4F}jiHI7)4xZ}>0~{-
zb$aCCyvefm!ueGC1m^kz%fck{Fc8ENB)?)?xTyI<!ER8jwHfjS-j7S-@_tiHuMMd}
z>^!gQ8`6ePRbWl~(N-_n<%-}LmD}1HS|0V{UvOH*4{sp64$m+~5JB3d(NJ(;8emL1
z`1+whZ*bDwD8)^r#G;h+0okNu0?UStju6;1tW-t|PXN44*sOE7<Vo>RiyVw3K&r$-
zzfaKH5PyZF+q7atm`B$WG13fFrBf2elGl@AP&gG|ZuG<|!mVor%Z#`Uo_V{^f=qTu
zN`=Q~a~~zrtNbBI?4(U`q}qP}vTb`v&lCusGV;Dk6Y*t<O`DJ@z4R?|kWjTeMTrg#
ziW}5m*V*2IHG8mMYzHAhihPdLBxIhs2Pw!)fJqpT;zRz4w{Zoi%fA?yhSBEHbD^XC
zK&5uQY$4wPv5lW-WWdG@-uv8j;K-#NnAK?CJ(c3Jml<v7cZk&573{0S1$m3GE<t&+
ziUw=Cb*)xf?1a*bfvrX0$?X+xi_<y-h>6VL(JD*73fSkHR)qn#+wDugjavX6c6Mqk
z{UX&=B78dGWyqTLhIJmLncG9l*3pMG`DB`5nC+Mg!1-KxDS7Uy<)2xau_CQz2kljA
zrE(=NKwLS;7r<-^o@Jre%!NUSQzBeyNOrPDm0%{Qa=bw9l5go)zOrO5Va{FdP!76~
z?@YD2RsSY$weqm8+SdCr<nBj$w8pQ|5SC<4n9vLwf24siiaFQk30S&XRo85)Pc}D9
zX#q<;)509VT<-S-s(M)-na>O<5k{)2W~rCnnWtZ_hgC(g;{9S|E{C002;IgXg;@Gz
z``2YXNR<z({ZkkGg#iE{{Ree{v4QP>*z@G5S;=ik!him>-L{F7w<ZUJ1gwV=b{J3~
z5ah3Fw<wZKu3os)`Hpwd+S|SF+*Dt&yBdo5^ZDbQWan@&aaBRHfHJ3#j7v?Z_WIw=
zofgOW$@V`|Y?3lFMssYI-0>|U<eLq|De(gE{L-g@z)nqGctmpnCns(>o+>~nqcu*D
zQi5m6$bSXldAk>a_{fI^@EyVkeuffm@Q+riAo3pRHv$CxdpRo%5cNA^kXYaK@CO|S
z{tQcHC=N9ch2sUs=wt1TM<xH**-Q-|H&JMy8-K=*YD8Mn9uS(qW#}{9E7gY_z6lb4
zJlMZJJ~D?hfX@U8WY>m*TBw&Y-HM>&dzX`gPYo9Hv=jaX)zEATkw}H|vDG<+GSr~}
ze~l4ozF?XsA{*0&G&`~svh_-a+VH@BJ&9yo{Oi$TPMJQ6ttHPqsjKkSfm;)P;17q6
zqKjJ{ZJX{nb9Po12aa78PVqb%G^d|D+8rw~qCW$3u|3;|aB=PVyv67Oz`h=a4}wqx
zE1auR%dj0b#uCc~@3civ(5IP^LIMUu&tyIA#=&6gGJx;I$YPhaoJ>8fN=6wRVB5^8
zKrkV!nW2Kp)@tvKTEpK>d_#TiU`5H+$<dQZ)2os8^59`biDJmj%V8s962y)XqZOq|
z(3)sNk0L@!#s+cS4s8}`C8i9rDOrJ3Ryz#(Q8pH6MvaI^qu~5nd>5IvWZMf<V*f_D
zZ;i4C?dZ(~I^7bY<Gp*S7b(w{uW%Rm;S*LP?dw01B*v=nWj)NKkPPL>F=)#q?c-^)
zrTd%-prT4=C!h_fmMn3w8v){j>Oo^^p&9GGO&pHjod&q64PdT$I<GfgeEM9VS`7T@
zlr7Uf7?NCRrlmWUsBqnwnC!`1;;7upMBps+?lJi2kUi<*o=WUMNuMHUHLa_KIkcJ&
zpsQc^8hWLmWlRwQPAZtiC%K$AzMjd&4NkvNe!4I~m~9!j3^U+hc0{TI*1}%a;jW}y
zTZNks(S4wme?umgcbgPc)P&j+U2J#W(~t?bw4DH%rU5_p&Ec5i?F7M$gLfGt-D20U
z;i4V{S*eZAnuaR5XA0tePoU>Y<y)zC;oeQ5MryNld;QQsS2bm!oDdKEMCFXMw}Luo
zv>3K(rDLC!<!pbn3tlZ<L$b4kxv>yL{aEMZn2@Ff`kEp2GBMiM`&%%!c2H<HZh3hu
zys>`h>CeM@l|8K3`8DG3+MSE(Gb0PyO^uGK7-e>jz_K7^oM5)$2+N~ui6)$^ip>ha
zAq{76^J((vIhBi~bJ|SR0mYnUnt)77s9B#D&FQc5iiNQ!H>=YwPOfcdVI{O3l{JS_
zg}z#KSL52pK#k|S&b)@Ws?=#WR_yD)Yl_SiWH&qbYHRBRVFz`aj&+GzSj)7cV_8Gu
zC>muBS+9~QgM*(lS8(;!`y0gLy1<jXo-M{jH_zg|1QVi2l1vtdjB>C$&v}@RVE=PZ
zL!*haJ^6!Ojt~F<Wd8uW?DUK+{sULmqG}*_zz+Ypt;Z0Uf-2uiV{YeSC|4$>Bt#QJ
zj7C=fxhR8_cAPwtl7rm7@cEMEph#X{_U@b_ue0%R+{0#+HMa&Z^IK_yOlP|es~tU#
z&#x0b&o983hG26-^A{dr%~!k!u<b^53agNP6{H~~J-igrlPszb2qAUfl!=WoppA|=
z%rv0%5=}pZ4DJ(FoNO3?)6xK`SD+@#ET#nebSHB?B^AUyL)r$|1g2xlnyQKF2_o)<
zsZGCEIxg`aOZiFC!D$TJ9bN?FulyX;sS{i%kc~eWOP0b^k_)GfYpf*$?l2lc4i}|s
znUiy;dwT}u@<9ws@@MY~Xw2tF&@0oW16M`;`ps@l!k<(%tmcZnGtPj$n<+9xe3<NW
zTZ?uoY$D-hyJDv^ie`TyLh`$UjdEF~R0MKtiUV9)lj@TZWz@}{dZ@E!0&5nt=F#_U
zkP^$MQZ3p~K=3|J5t;M@d0hA?C3&>DxY+S>HwxoM^h8hc3_c!?<n(Aq^9&MhrV7h`
zT{=MF{jzy1)sekd!n*24f$aO>KdwWTt|{tTp0m>=ORYPPUjk(TPN}3rnx>w_)Co+P
z$6E062Q9K&TCcQGR;ZoeCV~cMq~VH-7Xs9(aWx4DGR<MpQ7W%ggfsDp+fqa$0mTq3
zXpga`weaTk7Mk|gyy7^j{GC%{As>6ir4>-JF0tXKN*S;V-i4(#a;DiO$Q|e*VRh7V
z94zrbNyRp=ibT7O)E^8Udl`{GQz+v24VU(H`zRhVu@O_9Wv$nYuq?FKIYP80u49_w
z!SMCAi94~%#?N>FB<!BD*}(veE#}}pS!NBH#6im#zQzKD2xv<WN(Y^oE;mmc4eI@U
z4GI1FnviOp1?r@~Q<x3`XaM~|de5<sZ+{5}VKxAW>+Z{W)ZYRe4kVDidu2a}w3!+V
zdqkA~k^ryU4-?gc@#Rdmc{09<*tsvke^yJM2bF+DwkhSq7D^sdB(Kgq&vG>IpyNAO
z>b~sZ9}%!sNDa@l@}hSpT&%`O22Ih4v}3r&P3|;dbWBowVscnuH8$hMFFbX?tiOXU
z>2T1oFbMhV6`5t9Fk5;Z;}x?n`!$G49g#M28TzXTfiNdLn9O2emlL`yFdtsG{uR|u
z^A6=hUVT)tA6q)Hot39BU#C6#K!UQJB^Dea>VR3&9X%UymbzQWEWSEwPRYs<U47bI
z5&aKD+DAQ${jTkZJuj(TjTNm2!7LA51Kq-;>{O&LDYzkl{tB<y3Xf<N0pONHziflC
z_AJ=8Nw3q1s*&Z9QbW8J8@IXcXe#n6O8bJA?BV<L>aV~T86;hVMDZSt8(%*Yyfi9r
zE;V@C`uwQ1UG!TujmZ;;bpb5YC~vKn&@Zrigg=@vV%rEGEbOW7@oGT=56vmf2yvQG
zH*V;A8)P4#x?fP-7ce8#Q<KaAUgK?bL4W{TkN%gpidHP!-~y2~5hq%fGNW3+rmw}S
zdGL_mO!AMmcPPoP(phd&vfv>FEdx*hc>X29d?l)`zRdiTV}ZF)>|BS1CaT%p1mI?7
z9uKF#4W^t57wS^qn9iIGt=GBJz;+_<p!}pYm+L}^&hSnIXYt-XUz*0Z*gh`6A>I;b
zu#Z0fN3JxoU9Ae(591g5GyX}PXJlvdA9R^AaSgJ-4A7x3UXWGPHen#>=l}#ND&WOP
z`Kcil6GzfU$)pPVkK}T4jy%Mo8#~|QecG(`!7Xqn;^2e!UOrCXH(+}#`5RZ7?onS*
zEQ6FycMK5f8c-V(q^pJl?gP5WVoS}%b0n7pUARQId@()Q`nqXN5ZN>!zr+66E1TKp
z5|CBnvL^2)Q3Lr}K|>$%zZ=yTXN#hTPm|{{Cka!5_Zq3_tK8bxRx&C(Cb#^#n4YwK
zXp`a{HN2p3D5hn4ON`5JKZbS^e^G=T#P>dnPekFxJtQG6;~co1L)B)TM&Yn=io0ds
zYxJd_Qd-F7emeMm$CKL9)l#Mn<Kf6%S=cXl1O3-(x+DEy3-`yqhMe-B@v6p7|AAL+
z(X>%I7(@6men_{+gGNS&_M%&pDw%-V4#{qy*x1BLk*pY*N2eOY%o7cKD!JczaQ+ib
zO@xtMY)iGrpLu<D=G*yx)*u)6Je1JBIH`ilH{;~s>+0(2=)3$TD}5{pokoch_r6cN
z@U3h>+bP1kl3@{Ln;4D&fzF^PYVwEDQV8Mfe6&C^CQ>*-loH89M8;4r0@$<t2K5@R
zHN<^3M13qp+=UjhNL-FLE+&0A0`c6cJhdZS3E_O0F~S6s@(%IDN%eY>ouoiIB=;CG
ziX@dztr*g8R#J7juj3MCgy(zelrX53oYezWE{c0O{!j3fgl+DL)WhB5<Izz`jRTlb
zV(Sd9T+M6+m#kMV9U?W~*2X(&?%phu!`6lFlW6~vJG%Cb578~T?9#CkckBW^1tH1T
zzH?sanq|ht^G98E1Tv^VyELTG_m0w!e7nT(+fnbs>IN%C^v>Gu<}n-yG>><(SYC8Y
zIsur70LH_LU|}p=8)}_-s_Aey9-2m`a5ODRf$w!b3ncG-i_WP3n-fNABui=rD-~L7
z31vU<l1R)~b52o%_>F;1wmDjVTnZZfC_`F?&}sNi-SjU<tUezoRSFa+UB5SlDW?`a
zwdy2$GQ_71D8A&4{W-hOp;*EkU<6o!Y@P~OU4%wLC~GT|reGv0q<ZXn;mc|$!P&6K
zFt%ztpUk26&h?+Zwj$y+K2-aP@I;ODMt}|FiJ=ayydfo22G72jUw{+zoEa0h5C#;9
z;^jZG^<A2Xn0wL$D_gImi#?U7!jqUkEvR?V&KJxY5oj65*h(=k7}+GHmb7_B{)yd!
zk<5XDUmkOY6)_QI5a8oE7;j!RdiwmX)(?VY5xxXB(}-_l6wD@G(fid&)KM^L7#cZI
zL>aZQ!juoM8W8u75paYZ>c>E0C}e{DO~1)c8uuR#=$!zN1azsLKr(WHYpmH?H6$l2
zB3+XOTtWjGrj1(#Q$5jA>gk<a50U{38Pijl&gBdjwyO-X<uRZ``}4gvph%0Z^*3*1
zZ9{<--rSy_st<10WfYw4NiX2lAH~T;pxFV8SxAg5Pus18jFB54NQkS2<TKC#Uh{Gl
z)1jT~3H=##sa;Z?M1pGHnZG7p=T`?s9V-~k1+1qg4lNCapte`F*X%uk@DxBph)m@L
zZ`S0L$v9Fo1K~tQZ_kquX<l1R`my;+IhCNttxcAyf+;DprfGlsS%A})+Ol-tm6{P4
zLMhln(O@KvLbb4P)**xR=#ll?&-#%UIbBbVr^srZB2lCusLH+u?~RE^F)edWCUdfH
z#)iBL_^tK~p!T0A)R7HQQG45G$zU=HmwA*TDMbMRS*k`=$gaL*7Y`#M1S^EX=@Jr9
zH$qn&CeW)CW9y4A0>xE)5fGKzeR*?jA2+;rO<uR7MdR7>!Mqnf-&|UqSl4j}#}U6x
zVO}Riah)}$7v^wWDB#<sNE^(H@%H|e#8*K$7^|%hL6+=6wd9tCFrhcp-x;z8zLF46
zcVG!Zrf>}0MMTAik|ArmF6RUSE$7#?b{hC8a+KO`vgvK@2RO3*OAE?#crVxy!NsV(
z`P!jL;oN$J9Qfnl{IuzS(a3+hmdB-MxBhK7Lpe(Fx~Y7Q^HQ05O%1Y4vr24x;}2+Y
zY1cL!3YgIj;J(9&e|*g~fZZdMEN+~8<uoUkN^$CA&bH5nU7jU8sO(tOCickc_vw=x
z&+=jjwmP?t>euz}7$a~xc0QwM=o6wuEtaXRqBoYx$|kABtxT6p=hvX+*K}V1?xJcf
zc1%p9WTxlr0Lvf{!)AOztnloAX77R}5%6!<uv~y0nrVA;G`gU2je45z+_0CDLutXJ
zDaTiDhP(L<IO?NDXnhtw%S<!oT|L+_HIxtnrB*h%w|lZ}4g@Q9%E67lgN>7<;~$^{
zgZ|k7uU>ws;9zFPX_ZPDZKf|=Z48CZZpVZBB}Z?sq<LVFMN%9t;{%LRTnT~xjY7F9
zmi2oq8E}C(Y8>d@8BIODvSti^rT(UUv7O(CS@ni_2BympqiR;s-W1>-qLE1+r@)xq
zZK`Qbjo5lzs1^^!>zB$6=tKnxQ+r7UQoOqm`#Ag?zUqm^ZRS?OsU13~<avR$%yi_?
zw2FKJ1v}7;wqds7W_-1&716Nspzw`>-w;bws}0Urt8yYKt(U3SGIYdVW7>znBHgk^
zcF|>&K_xaCYotrSuA~ymCOtuGUHCd87O<F3%^ML>f_f<7Vm#x9LP<Jd|LU79fPwMA
zns6KTtroyGAuBguauFf)sxFMJR}r0^N`R)!>VXI`B=Wm&5VJNCimrdFqED=^O{OmL
zBmi~YU(&hyp6t7iD5L!mLT%w)?`Hf2j8i<e{vr}zzG_zLBFf>h8Gu$;_)nEL3K-y}
zfQw>9yopf$&I!cPr$QRAJl=caehIcDhy5R0bjAh{%%T({h~+btm$?Rg{@oYz`)~`-
zJ`B+BPQ`*BqZ!2M<>9j?U&U>9XoI?uF~`scpSTlM4IJs%3iS@))JY?u;FQsd%^MI_
zxM$6D$1cZ5Cz9#wHB>gHhMSg~q``92b>}KxxfR~&7)evtJPQm&)x);+iFKZhu$u1S
zzsEzc2iDmHzM%=d{7<`@)<NB8^2gtxX&AMg2{lm4<`$)!*=_|?4@X#Aa4exsb8I+%
z2K<qmQ-<j&h>Mr%15cArf8hNKVH=k15OB^W$OW6=$I8TAJO^~lw~}9JO`0U|F<7;P
zCW%^xeiGgA0)=c#vR*fcfv{6!YVZ318(d)w+(bKSJu25^o=7!ckT1Lkd7R^A9}XUV
z{E4i0gX0HUaQnp4i_hG0p?l=wh9%MJd9~;<BQP|!_cF_5^v>B^V}>w1JEq`?4)NHR
zdK6L`C!@UAOi@bHF+)<b?n?+#{V8Vo<Bmh`nMeN)8Pe!D_+rS->@Sj4^jSJA-;PJr
zX~1`lN4SHj%f<?m?=k*FtRq*~o9{VwaRE2`&4*Om^-t1BV&L@~%^3>47GRy)#82=J
zW4y2i##KRh3ttYhVyoI5JVI_Rtm=qONag?}MZinQ3roB}9%-A`Xuw%^V_EzXca5?^
zm(y`nX_{mrk|LO>5_imn0{FYH9OT+-zb-FHOakb%pKW+#A}4~N0Fi-M-^dLM<-GP(
za~RNb=pwxIP9+`{Tx*z+OMyTc1dNvoNUqcQ#bd8FbX2~s&dFcR-yr@1aoZTKR2%4A
zH8QOAhgxP4p<F+NIjIztTw%E}Esf^EE2<;VlP5kLmBPvaa+Oe@ClfV_;-mPjF%F18
zND}An<^FMz)<_cgu503vZ*@7lGYYJ_gXON4eI}#cExp3?5NgDz?+mlj_IoEX{afAs
z$JcAaqqn1}E2hd;76AIpRa<PaPYT=s+>3IBrbmgAChc8lspxqIH~-1TO=$c#P9VRC
zmtC@~BIt85g*o@VI*7ZhP?xlt@jyU{_2WguAV*L0nyIheL4h2bSDi5&#&Pe|d%1*G
z+9k-1dr%(9B?=szr>)?k#nSIaQT%sIXm1sub9Nmv1SOH&F`@Cio)3x5Lvq8v5QhdD
z+bjk2xPal+6I&!2@Edaw8i({SnLjZ=_{-92-WME8_-W1s6vX&#>VYGc7k^zUOt<%r
z4bw3##vFvQq(JOQosxkmnY53EI$b&@_dy$%8>!w-$r{w4!|A43WId6A+QqIB+q4Oh
zq6J3<TktkmosgeSF>-=#QOcNn>>b94-!OiqGT+TTsuq(ur%co?ECRmvrf2Q`*xAA1
z=DG9wClM~}i7DwLCwiNqwZ_;Mwa%fiGSy7!P>W?A3p5YVo86mgVWynMA%i16iLZDI
z*!>Wbo7Kh!zk_+^lrlh&Ck#F0Yi2L*sd=AzH=%{?m@#9Aj&3X2NO5G^YR7b5)=>2Y
z55y&LW<t{uuuK{DJKcdKHztQ#HLcTlDM_oLBydW*eVYr8FC2qIc}4GzPKTLv%Mv_G
z|4!hxksV$J4{zeV6>)QIXG)r&^0@gS^q-#l>&~ccZkivN#i8hK*6KNcseS%Q3))?n
z-i_ok_{?<staEZ*rj~ixw1eP0doZ=&y6h$MX)w8&j%u=*KS7(Ge~$gqnZzn~bHb4F
zGmqaMH=+L233`;JB|3|e{Xh2y(n&W*46QF88B9JmXRVXVFj5OMm)p0}ogyRamhNko
z7mWM&&?womSeCyU@5p9R&RZw1<9PmkHZ3jPb5_?%;a~Qz3!ht9^JspyiQ5R)IkG%L
zpC*g2^Jp>iLECh>cD+4rJfpV{wOk!vkF!0Uo>-STO?Fwuqg{W0e*fauU;gs;>Evdq
zasP0&y6^pA|6c1n?U=aDVaSr5^cZ_o;H2=tA#szwn<EQT(YFarJL7gm(n8%Zk9u|k
z(DP6b%0l(owl}RGrmOhSk+OZYdD3#OU*dLY#L}#OhV#CPI_Wl%G@}7?qU!0r(wEV_
z2Dy5Vxm^8d%k$Vh7;Iczye2Cq`fSCU*CoF0Mx;<g^jsyk^;N#o<GHKfTTrZeC?;_8
zY<vG3ln7l;^d&9neQp`-p;J3%_4Ep;u9$DJSSJILROmcGZ=2h#jFzVzL+|FW4HE_n
zlr3m-&wQ~fyS<4InsiIAP2=mz%Hk_=uoj`pqvp9L`YO}%7H1CT0rqK2L-zqQCb!?k
z&3?)6C*n8)%Z544ZAQ<kIzHE#&JXg^{Qi2IC9kONGO`Ub0Q-%u^fEN{=3@Tfy{n6$
zauN3KE1)lIOpj&rwRW%XZq;{i)@Sbae{^2HNnuL~|7`Eye#SqeL!F%e10AXpFK0Et
z4?leKh8*Xq&=8?{T0jHZ5C~e4=zc~qG;Ll=+-2Za*pk<a_3eMPeLU^ew`a2mH#@qx
zC^p$8NRJDPcRe~dN3;xTpphh-2&%g5oq#BfNfGTrKxz`v4#PflICf0|$5U=Xqn_ZJ
zTr|g_F$Po0T{mkp+!b|Kiw2ZeDv*Lx5R>n)=vb^DMw15eS5+BGT_~fHmSZ8(UY|nt
z7U~#CAtQ86{CGN}ZDkboC~VmykY>BADbCn+Dcj=5)AMrZz7&C#*DgUKi%Qt?1z99)
zkbt>2$jQX~l9n^9P%5WBzVh*z{1<2UQ%PI;A5yy}cAe63PT3Oya9v}WZ<jv(nh8>}
zZuapW3Tj=42f}X{FfK&)uL5ORF?Fa^Dm_AtVic9i%B~4>vQ?~^xjHf6kBreEE6tbO
zPnmfRyCA)PWeCKevjT#DCMfggDEXi9Ft(=u{tVeALBMK*9(nZUFLK=B{IR|r*JXXQ
zz!<mYuQPGaGl}whr(yyrK~GCe(Z2UwMYrO5jA)ylo$r^|16KllzzcY}aa`#BGB`ZG
z!5)G3sMD8sm=EbaG|NC00whIS{Uhv4$}EF0j0L1;7_LfFBbL9>JjgpnK%KMgD+t<4
zgKHo&wOIaP^7_hTw*mRa)wqnTgZel?yjIa5%R#V4&Z-_U_RYpK_YzDJ&G+!Q5)9So
zab=bJagw<vSsN~GTW)q{9LYni+oqDw4e>D9a{1-Q&<ay}>(B1otN~nymznXfS61aY
z=ggs^qwZ8go3PrR{#mw9Jsaa2S3YeUwXBXlZJz{oL)h--JYRM*9(6ir2)(iwnm8Y`
z>2_u=EK(IkR2|zuc@RlqYo1_z!`MD{-~=FO6dzSUWhGCk#-fB5a2lqDu&?u?B<khp
zJ(vy@x~YQPpc{kD%F89szb!iV)na>~wCQ#hc(uXKPh-kQ9ie?3(vRZd=_34CJm0j8
zJiq=gset5<HW*cZgxv4vTw?7<E{yTN&n0NhESxROZ0#IP{#z8h`6CL}{okTs7gZ^{
zO;-5c3$^;&5(I6^)&o|K&I%lmaIAcpIjI0pkr-lA3dJM&XIt3MtDFMdu4P+Pbw^!n
z*f1tM7Xn_^8E|;{jME@_0>K*Rq3ZY)2tJLv6cGs4N!lT_9VjR{ebCEh97_Buv6hf^
z^?2U&(ABs;KJS@GI=4RG&Oedbl(?QbD1e$FHPNL()%3EH+*F+&G;_Y;+{3je5?*Rq
zrHTsUy$3Z;CN{Lk)AU&siV_qYxTi(*vdXg_Q@-T$+J{o!mxoCXTF60F{;=yW$UJew
z?_6se5wWZM+@)}pwVp&QT^(43XfW)*C<RG0<qzYt&+2cA=qCDCC)zbzqrzt<&k8vN
z?I%#*LgmI#d%?rZ(UKzamV}sF%e~d^MqapPg_KFi^rI~rOS=I_fV5nE-krGZ+tgN=
zR@|dk?CQ2Z?w_{|{Zmh3+LnmNJ+e>NAKMlD&mrPSoX>LfBGysxCQL~LyeR;BbcGY2
zRQqc-i_IPA5qiA>x2`VSELUYV7ho<4&8~TZ%gZ?x@4{Cr#nI41VB>4+H=$a^_HZZ!
z7G3$wgb8uS=*=|2*lxyvQ`nu6ZgxGO-iZWgYwSolmqZ~sPU>+(?RG#$3TjDKQZ`1H
z+eNvvRu%bv9hKJ;ZPgdFL&tt-17Tn2&0Nxgdfq`BLe0jV5UE}6)uWc+pDY;;i!Jg#
z@{$J#X($v$kx?2jmKc*03t8z2FER)hC$f27c}tTi4y7_e3=s1dY(=+BiJkL{%`_9@
z^&T6?O&gIZA+r#`;b82oUd44hrv2o4P{}#pOI<&yX(%YIM`mYoBlvCZd_KGP)i3m$
zvZhfi#DTTQ(_y(uFLypH<DmDnsh>{&(zoL67qV2euAyN2Bk;tSQ2~Yl&iBDl<bSE0
z=P*thX!v)deS&X6fQDJ}MvvsNt0R|GBV}4xbs4u@LH4LW)q*pTcrpX?$eFt}+rMM5
z!Zm{2MWVnONv0uay@{?o>G!b62_aV&2j_38$qGktL_}`hV%#jPsLDm99#93aBWEr*
zyp_O*gx^V#p_ok!cZug+nJ9;&fXYR{l>*tzdAezWZY^iYsb<a~s?jhf%FyIHNp|K{
zO;N1{-CMJvW-i`MW{01B!B0AM`y3>nb#^lphH4p|yk!_u34JVz3&1XsOH>4urptob
z8!gETN<uSJ7!*WLlEIZ6M&XcuB=clT9({8l;pBc3@~xVneIVhHW*1`LIYpJpwF(B;
zHhUSQSb;487@Wd0OULtz%iS{cY;mZlkM8z$A5%JaXs>5Nrx(fLT*|67#6N#)`-0-2
zz3@uak7Op@(5|0#{5cfK{d7vuGk)`XcsH>uqVNoOuYF9NF?(|gz0@m<Lj>BO0fb~6
z8kh?MdV8?I$DcB3DU;1RQ4owz7#W(A#C-3Ob(T9Y-%;bn>@v}^{K(GA0bAD>T@mtJ
zh-&pNl<3r9H>NVH9*4A#aqx%wQ^GUXK@DNWY)SdXFjW1r<RZmG00A0T(4;i8==>&S
zY9{dff0Y*hg=p{4Mx}hT007F_005}}8_^_Wm6QdfrT-nAHEVk*VM!!@=gBFQ*$3|l
zBKpR-EjKth2#(=y=@$#Rk96sRE1c6xusmLLb^?0X_P!q#{rK5y{+^;S2#W7)YP^4&
zthR<7vgYN`qn;Uh^mgFj<igUCH9G+}+<oI@hfl+@5l#m)sZJCOo&f34r6h7Tgv1bO
zoV6g_#p^~booZyJQzoC6KDt$C<b^l2f<(b`P`6HIU-*9rd#B(`z$jZgwr$&X(ox5@
z^(E=pwr$(CZQHgxw)ywWoT|U-oT-_seYfv+y|wnc_Om42T|cSkU5&^A_|_jrDdk6h
zV_}IC6+R0RnY!7<+icEL@@V~bd)7*d+m>(T3RGSZ7*Ku~#7I(BrB1mb(HbP+<|!SM
z#SeJf^4G$Mrjx@K>!SRgMA}qv$Q{T<>;*cr=t3UGhu4v}ouPG1-6-|x8J2bLuD6Rp
z-WwD?Zj!^XvKdQ^;4X&KV^n5r1J`U+l1#~jlebR!WKWyrz@$u)PwFMqt0zgir%Y=6
zb<w7<prGshf2%U639f5Q5X5VT2fFQ)w#ONkDUz|Ew1H|(7}Lzr;`cFpmo9OSPd^4r
z7NRh+7f4iEA_Q@iG+7n(StD3sD2dyNC}Wrx*umQQE2^>65iDKhtKKUfe(9I|Jy4+7
z9KoP@T2;^fUJZTI!ONM!VE-smd<TL*<}=A2ga~A7_phGAkZ6Kme8P20o&IayzEfl}
zUowx`DwR|RP}4#yZl$`(HW7MZhPn_e;|*6cSHPRy+8p>`2jLdQ5rx9YO++zIG~lj_
zm<pc1IO_AY{BnN1gh~SEY%h*GK*IQu-70Z^Rr+N7@-p%5!RUSPzC56jgjH$m(>94e
z(MGmX!Y>oZ7*yhK^QsXP0WOQzsJ#-ZVh;;VVH<=jk20vGVyEP9tBn%Y$W;+aY5uuL
zSLoxseEYJ3;N{2G?R&YidR}xQ@$r3q-i$`zpc30?`e$wBQZ6#5Dyq-)h!eX4i#0;W
z^1fa02hu0tOChm(|4Ao-MQV909!%-EKZb=@#D{B<=&Zi(XJ6LMV+o5Hc0_VF&BmoF
zAcls+j$IJ4SW*ZxR|*y+^M5}5ycfc8NZ-kOEA*|yo*0YM+!~Vzja^~t*s}%U^Q?xs
z`?$%u;L%0;4H4mCM+_RTLk|3g=Z@3EWDbW6ZbUm~_{bFg>%w)IL%B_HN<KWO*!M^I
z8^U%?<AVqp^EQVRb{08iZY3VsKZ{QSNGW3i0F_#INRJIomkqf5ydTcUL)P!z>8&@v
zfk%HCMo9?uSsTi7N90c2cQFxyBjczQ+G39LhBGz}t1-Zj%QUF$eFCq#FJ|m{Har%{
zKqt>;d|g@1XQxiFEK{dV21E!$HBKzH3F{IU{Q%Kl<xRXc(HOg~z-jWG@52)N)poJM
z-K7zvQyPEwO5^K9f|t~)RRqVD(2Cih7{J>-SenE58wGSLR?Nj|3?|9I?FieMO<$#B
z5r{bGo;81==j$C71KCn%^lA^8QLpo>4ShGt(sDdiVid1kA~m#$;+04?p<~-L#qVgG
zK`3VJp-*HPyQx&m_&Hep0wqNL6$|O-s|QdxO10gM!l^C&^x&)SzfYII(Uy04$+@&5
z0Gm-vU`6(WNe1?X+lUI_6#Q$ZwMY>LdFmiFhVY3LH$CU?E4($S1b797T@yM+7!0u>
zpM<iroPb!W<;yG*)cS3MDrko^t$iHGDlFQG1~g=Eeh(l+@9&n2HM)BlZoIoZ99@6w
zWNZn;=Iix$0~XCe3>~a(qr&Pa+aZHAgG3r_?G`07=?X$0N8x@qsPCf?>~je|U!)Gi
zw1l}Cdfoo@*S%xLgl>nF;HR_@R;}(MovZ8P`zpTkphui5{v70KL|Y-=e<?9FyqOxv
zaWz_l@4^nvuA5Gs*863UISAvm76m}!w%P-t_@e;(g0)k>#FJHA!r7bV-G=4u^)j3i
z9a(E#QI-{3_%I(j{<}E47E;h=>k(QbbU+#sk1})cY7(y+%?YgK;DAx0V&jB3%-v0=
zeF@nIOVB_P@CCmVjWJH)nWmzMj=ywXyW6DcqT8y7P&i%P?|h3xPdEj8+LVPy4>v&i
z0pV?x%C%N5X&K5qgfsFBYLT#><+v+%BLRG+T#77)IM9FU5z%$<>Nb<HFe{)K)1}vV
zw56!P8~9;Q7v-XI-pgXGy|bZW8raTylRrd7n#XJo;G>72kD&iZCGct{qzippJ`9V)
z%~WsTy;V?vdwC`$Cg2c5tcBiP6`@3wLnI%Ky;jlLvNry4_J@$3?*2{LrI(0C1THTP
zx1YTKn7+VZ5lH`ugvpOuu`V9xk?VI=1Op5-h=dK<C7w^gdYqWBIfr+Ch@~w!8RVo8
zQ(c@iB`0;;d+39_DlV`kVvi|4m|zK1m$3kOpS2<dk*q->HEI<VG^}5$;J82;576&(
z(j>#<OkuS_2STOoK0kGMwGJlG2xX+&`vj#h?1)|wvdAY7<yR_hA!9!y(WsW5h@*|X
zZ#Y3e7Rx6Q8{?Ye2G9&pbZj(orn=_!9>FqC{-AU2DP`-$MJpj~(Yzz}I|W=Qw2&)!
zVg8|aI$7Z)1zM%_!&F8HW*W|0HC&F+03f+C`Mm-RMg*ZP4_0wTChs6PA5pUj^i$zL
zunnJ(xU?*sK=i!Dr>jj)1VG7-575)<+^=o~V9nF>t4v@8Y^3JZS_pnZ^dy?g3!Q&|
zL1?ZirJOt}#2@tAusHBF#~s=;9OdP9R1Av>Ho!V`%`y^_xhW<}NkR4SnPJHZyLh@j
zNer3*xtZi+A}dWEB~i`VZrsN1zK|K>K?E3l+Jnk<zsl#<`&4~?Dqz(G(C3F+3}e4d
zCv=*Z@hY5dPFFLkm2|~<B4Kuf6-n+>&BNPHFpWBDVB`F0|DGh6epf2Rk*zqRVB(d!
znA1{W;L>=xkF@v-<4wx-I7k3l6UJ$wsA_J<BuU)~$;QSWUWLh->L@gJ>trMz<=qCm
zEAycV4z@Juf;1R*sj@8q^pLySn%G@+S%XWGiGO-)RQC1^5&8O=1hUC1EDrmok_bfm
zBK~)#b7c!HI)myWzFZ5s7K2s%3MfvuVIfFWB?2LTg@}hpS9oVXMiJ>!C>E~TwtVPF
zC`r()?&0eW<~Dtyb~`)0p6+N->yp7)vPP90&R(quV`(xGb2QKI);m<@VG6NkQ%Dwj
z6j&8KyW|N5&+3*g^FF0ggjs*ycU}xtY@=S6yt=<JFt?kvo^8Hx62L9}y-o(HE9$QP
zw^&N5%*MT5?8rag$<4;3lLWJ8w^8_<uZj0xA`RQ1kc89={AdKE;}vmD15@bu?tBbs
zhJi;ue3iJY&frG)Fbc^C5x~ZYVAr=E6`k!o$^#EXf+~3IaCEp<ZApT3$tfl7XwLdJ
zEe#<2foH%P;HkDA7NmqEL&t3*r+v7;ksgvDIANL4lTk!beB!&*N5|%pdv$@LF@Lk5
zG$2@&4J-RsnpxE}uZ?_tl<f;|iB;8Og<iqk*Fw~p2gl;zdIiSu)IIeHq(W=^!@K?^
zseT|UQc=agI@Gw^*6M?g_d*3<-;v0xR`-iRMnu)m3N1V5c2F&CO_LD5n0z{L<1cZ-
z-Z$J%k(M=)huKcvkrKqn^aKg``IRLr-z8`Afud?^Sqgyq0vEJcvL+{!%hk614Vn^Q
z#d-T@xT!mut7?I8Vo2I7Wof=-Tx+?~reZo?;3$!<_JRwN5_KC-vz0<Us=gn3N=4^F
zRb7qLK16#D$fAA&K|^)R4Srl-3-emhM{yZ{D8dFWPa&lG{xmvD%8#Sl*N;U1IfjP@
z_1x;T1tp|Fqz_HzXL(?Idmh0to8`=#>*o#o@`*5#kkR97rM6c8iAjTf*W;t4Ri0!L
zr{CTd3V!2VCFQ(G!Oi$Xb|1Pz5t>^e0pUnW%<`B~HiI9JjMd{8&j-+T?+B~TPH&{%
z$_nv4SP}j&VbT3|R7WWU!-};A9r2J9q8+QGcrlN=Tgh!rl9d6bQ5MjemEaLa6k9DL
zm(D%f<3y|p;Ug&J2wW0-nTH|&bp?5{el>$pVkdJ;cP9V1OqA)Ifc#(yQ`KjO^a)#r
zrdbz|O6+>(5KqYQS`!qF>^iG|gi0PJ1+s-O2t)fn@D$IuAmLz+7%Dn6dPYB#5+Zd0
z>HMn}VG?O+G>2UDsJ7prtCoqx`I!aiO!y+3WNU*cxPK~hLtWd(Q7?nJq)g%i%0=>C
z?uS}pFo*5*1?fYmlJ{qj6!RM4lOHtFEvbfKe?I$;IT}SR9>Igk#K~-nV&>YyIiN&9
zy{c1g6(6c664|)26zeM!Ev?>7H7=yIEj~ygCN^`daI#Suk(xAY&*i{Pgl-hO1TjIN
z>Oavlr8y^hx1&X19GU|z{{6zj-CL^_i7@xf@=F8czj{^3yw~LDP_Jv5BQihvdJ_!Y
zhDo^j4pv^j7+vuhp;i?KDoInO)n5kFVzGkRt)7a)A8=W^O03KIeneVSq0h1O_S>P5
z2IR>0Z2C6knHgq5GEs)a2NlZX39FwiV*iDg<so!`F&8!@z!{eirbmwyzCG$^M%jUv
z9uPhAC?%GgqT%@Jge4D{7PG{FEaAu#1AFlI@M$YV2ee0PQ7opQd-DF-^R!T1`^3JF
zD*O#0?hQczpWuvhe%_%~HYNf6dcP-9(Swc8F&8|&XSE&p>Yt+h;WegORv&>}7zkbL
zMdVmmjCpQv?}fgYymzgUz5dd({=$=vLuX>Ad&F|<F*Zg}$a%9D9_SHMe=Q!_-Ncp?
zGSo6Y6e{nc-=)~wIXg5i>ZK(kH~i0{N7zrtNP)4GvbH*^oL;Z7-o;3&YxSXP7_Vqo
zqxKwzNEN3{!iu&18WbACdIbkOL+j2T_FiMvVkVEgqyRCR_<H2u2XfT%H*jlX!m;0^
zJXVd&-p6n`i=sHr{~pKYy)zycyEW86FFbk%gO#V&cvOv3#c%J^IFM#Ij|LrdzlM}u
zd&{469;)OuE@=<sQaX7JK9}>344R#PviN5#Oa%Vg5EMgiIF&zr5LFKce{@oZf&vs$
zCZM`dE!RNc%?hKG&1L3~_7`z&P+eZaNQs$1#1*qB_{99m@(NcC+(A7&9V63mp>8Yu
zWj6nBhI~4*r_B@;<hyYvh$%*uAk7fBwau$K`afYtS-0)-eh9+NOHx_Fd^K*YdV34Q
z*d>4>2Mf@@0fs|SEC%38)s=8u)%+B&8@v@sh-`1BrR>5cxO`PlFgnP3gBwB-1b|F}
z#8$d;gx9Ox6S4?4C|0CHmR`l>9+lg3Ne`WKu!}o<i|E(tfJ)I!l1`706PWXY%GBDP
zmx8_^V(~z>bDk9y#%5FE^Rpp8t)1^6iQtttCwuCoL;AgJH34A|+o?WB|08ST_KfoM
z^rel9#+Sq+Eh94V%mDf$^Oj@kj`2`sd#-&~uOI=H)@-RU?s3K9Lh<#i*^=yjZsB&$
zC>Hchd-A|QiAGSDbia%FOCcS27FF@l=+sWsb<+m^OB}~OZzNQm+@`w_mxKBa&E(x4
z!%}45imqJ`?V7IQ!SG)b2lP}tF=<kZ`&PfPS&vV@G{wt<4;>RmR5q;P0hw5K!z-&J
zYnA~$Gb4f4aD>Cb{AopaF`L{yX;E^&<U;JtTyr>c*X(%oOHU-RZwKML;tIQ}W2ANS
zaMk`M>%9W@8-q_yYY-?=nJ6k`J;+XL3=|3>VdKwSu&WpG&~P{v?7fS@k@b*_x1nK3
zoz=^-?8!|Obc3HtxIwfgBFU|WFQ{HfAxan(caKDS+wqNAzyf=HWCrR}Io5%3*4Fk~
z0G!dyQgzgYR=y~=5jBBgaL3_#0wLiiF*ZVTDinL$TsZ-wj9lh5cfd@xOxlNb$#u=o
z#9GqZL@7@i4SrH84D12so(GrCgxTd`vj|$RoiG*9W++{yK&AwA7MZvrlDV_9;1+Pv
z#LUqQx;SZ+stJvEM%UNVkAZKWdUYA4Vw>war94zI^<RI(2EbiGyCIPb*_m?bOLB*u
z)c)<mex~>&?;dpE>4M&&3$iJZG&<bVT$6;^0X8~fI$3&AGxFV^$CZ0e`rr4frMGT(
zK2fb<gFAosT^YY=DCA;w6y*NyECl1OKkv893(F{OaQ&oZ5(sEh$SAlq`|j>y9!|EK
z<i>C3h*`wZI>~NsSB!|iW6UUsK<UC<2*KU)KW4>@Ofbaj0T@u+-3t;ApDKu$Zm5pr
zFN$=gg1_disVH6|n<bs>?YUi(wynjw?@4BP1<rKnC~DhAqesO;m^Uue1B)4kwqI;@
zNxd#|z@AQ)9B~vvBg3@N5yANLl!1Ik5p)%&qwQS_9L>n*Msm0w=uG4w1RuOu)`<K_
zd~|W6wOxG<`xB5zehF_u{pIz)bo(yH=CwUdS}r)$kjzTImYd;2Pcexgh#HW5SQpk2
zp;3v?-tJv35{Y+%&6JWtYlF#S@(q-LkZ)Mrav3NKpEtAd$UIhAOC%$jy8}}~3@Th{
zV0YbUL=0CfdY;>-zK_U2Yjv0eZLcN)Z$Q0i^W=E(u2~vCSdydw8uCM<r)ojQL$hb+
zCd|%~tq~N<#wX4}DL(r1=AVF>(5bV_xx*qt)~>Jh*mRmVb$KY}QYAc^Rm<Mu>d^ql
zE`Yrvf=;=yds9sP&!GoYK(TG9YeOZc<oWo5(>>P9DKKBL$Bf~%86gZR0gQ&_^nB?e
zhf}}p6TaHA5X6;aI7T_ePjQ@WR4pbI+zw->)@ZQhZGwgt?+%X3wIh%ZZ`TX(?S<Vd
z9E=7|ih_d?2y_~?_`Qr+)(%5Bai_5uy)V|)pzhpvmlns>D30HvqU|!(n$OReY%&lH
zA7GC#OnJD$Rh<LhfnX|o6Am^p#-5iUPs|CA&4tIF*<Kg5ixnrq{v<-Fxjbm*dFJ~2
zus{Iban?S=5+1mYM>`-uXxvVoTIXofgXV+4h1A$8+-d5BZP+jJTC=_|!<w;ybS)M?
zSy$I%;n^CEY<r~<PUH^YA$?3GiUKF_LA6dy6MCYnHYj;Cf&^2ohQp)ssMzT1m-nU)
z(+0{{)?XV<^`j<|AG7~bV%!Ji8W-1VXZik29^=mlgS~jUUPi~Ep{@2+Y>Gsi8jG9!
z3Z|_w4=ARzAhl&P72I75BIIk*Mv%wKybXD!e8$xRpb7+BNk)vu$hraI{v?11f1G(a
z@bL6z#dykrgl?DOyp&LG$F(f_mJ_N*&M)MabW_yuEQzom&Be;=xyhU9yqdt~V?mXT
z85zXcXQ7uY@BYKEKrD-7@#?pvZrH(gWszt+B=w!4WzS|Sdmc8ZZ|@l?b~JAnXVhzx
z*HTMsAAOI#k7nm>0E6*(<o`9K%kVq)l-S6uEH|NI7_sI14Jr*UFPw`+eg@QR|LB2N
zak5@hc!~h*l{9<nKS`js4Dbqm+dL-ax!cV)fAFwBobprdQDPHqtqq;_Wf{G2`W*7V
z(lf;LF8vmXKxf{dG~ggCHeaBN9s@niw>6mOh%NioqRjHdi}OSld81DxV3p_ejJc)%
zV4Q^^TC}NnJO?nE;71v5Xbm4QI146S<HCJC`Dhj23iSHR2z)BvN+kkH?DZ)8y74q(
z7BeeLzNnAsah)qslY3D(sLnIG<{ps`E;fhrMWy|q5u)AXgHX$l^UP@l_!?E7xE8He
z_UhX8uYDJiyGYy7iJ5L7ioWf4;Sq$Wy*X@MRjA)@Jh;6g_w9A~rT_FhEZ5x{zqap{
z@V;1_O=N!X2sfQTlL8;H1ECIoyg;?fFB;>--;`vm+Kq=?6tltC3ph8p|A9}d$g*l|
z$Hcwpj;chG--`qY_l6yzXPQGY(K;&yKXyuRsNS`^hH!fwf4YL8(E0tWOkI2MH(&PO
z5WF(YJfNtxQpHV$Rc+FxSOd-QP5)a3&|xL9<`a6~5^Hx*z1dAxRu`Xsy@}*Mhp|;b
z(}w-{JA?s4D*3yI+k>sK3YN4Ssb8{UmbHY=MbRx6Dy6X3H!w~Ki`TZG-Kh4jFuFvD
zJ(b4qOsJ2oYy{Jxu^99VM}YQ#G3;?ma01*htXKu|9u_3Uz~~^~Th<i+-NbraY@5Aa
z|49`;#(myz5DMts!&`VCSU)!$x(^cR!mG(u#-0bI$-4$VKi+#TueWFLA*>47vslHw
z+}3^{Wdaj(98KFP=aPdtSacdgJMkKvoVvliD94PQNv)IQH^q>}&d$yrEYZ)yDBr4A
z@z1x1Kd*PFpDXj~@4e?WO|8*n<36jk291z)O?gs<Ev1kOwu~9{lPz^C^$C|b!PZc}
z8_4Ws8p0|H%%=^$KTaY^SsM@{K%NH~{0S__Cd&9o54{xM(SmSZ5H#J!lF2AWh3K{g
z;B)uj`SIP1jQjm{!<HZ>98_sDOp)M^y02^+h?sFY8%DOY^WfY5j#IS%4nVTRw~%oR
z=*?7c9eZmK+KF$w=l*F~MlJfL>hR}Zf-54qd|{Hvq+a3yRDv*&uF6>zlkZb)VezY=
z{&PP#NPb_Oz&Vfhoy1JTtzr2;lKk3O9?;)B>Mdz);921Tq%8^|je5RW1u%X>p%$g5
zA_a~SbeLB~@KUZq_=#u%Yj@OL=>!h4G54{0Oj4BzL2a+l;}17m#1IyA#uQM;7`2nt
zQ`}+uL&O|GzmmOuN=S<IbazsLl<(&JE`JF;d4dk-Y$%O@YyU)*BPjL6d0!W7a@td5
zX)=I{EY+3`h8~7{$P1-;=(wmHO9dyT^$*I`ULJGSGyA?)Kd`GP0KYAZ_7ly*%11k+
z&p<Ris8xNP3J@EJNDP5n^vn`#*1|Hw0?D+eOEs54hGWFfuv7bNBY_o(k`pNryQpeL
zVNE3AuZ7_3zq6h)a-xAiNx^y-t#z$MDXC|0FrR>j<y-|5bIw)Xt+ZO_#Ut;A{p`r;
z$Vn&kSx8^ugPt$M;zA3NlMRPuuH~>Hrw3n}@5|OS&X(+gwC@nx%&Mtt!_lw(N`lbG
z6ihv^n`u%niu6nv8BAJ*h7Z79wt{Y#+9HHHLmBZFp_NNSh$Ttc>WV=MDd-Q`x4K(*
zvaw84mrukI#tmzce)GMC(+ByWg^$1+7LL!17iK6mAxFZd{=1KYtj8MjlIsa-?JX;P
zfp2sq%Nb#j{Z_Q`?KTx|@p2towE8i4rXVv3$|tkz&tG3_T4JObzDw^(%*_FGEIDAK
zwZ(c~%WL36Od6B`41$eaMUuJw1U(n1Xq6VXsUwcxIoWD~N8^<S{`M^|89MrCiV6x^
zwa0QGFAvDhqIQStlf>US&ix@{5Q^{b_Whz20>~v~$%w)cr(ij5A;}X|SBn`1N5<nO
zrA=Ykq0|zMZE5*(IYsXKZ2CyXo!j?9d7!OJ!hynKMz3)pF<~o4w8mv14h!5&k2Ct7
zN3*p<j9TR8jT)z(OAkohUjkMeX2e;0Hh(!*Kz?7+mhI-P=5F4Qc)><>%$_bx8VfLf
zK=j$h%BOL=Bo8om9^%g~6U70LJ08Pt<yP(0(K7zM;HPHqj3+eir&kakNISHt$0Zcw
zNz+rIhcy>{yd!wC!R#umM$)aJNS|<C!5hUyG2Fh3@&Sk8AYpH_aay{jlT8X<;uPqA
z^*kS1x{@4Wu-h#_s_h@4d^p88>szJq<k;61y=iV|b4Uh(eI|P$QuQNctD-zrUgJ?F
zQyLA|hdyZqR}r>4@Kqj)<(>o}r9MhW5-AC}+wgX}c-z{!;x3Z{FCr1uM=7ft%s<Fi
ze)k)2YZ<I^L_{>LvnXhYFH@Yytmc}wCrZXlA)OiH8*m7a+hj?y%`jdCar}DQq>Q3!
zZ<jC@g^oR)e0E%rJityY2+N>PbnsHyh0e9#Lbs;a0K)H$J7wm6kMi;9X@8~r`keau
z{EYI^Q=$sN8zu=nIIh8);I;Si&hAf!Q;f)4w9f#!G6>5$N^<52cz`GYI*LPjaVRyE
ztLKzTBmHF%NXe)hq~OmK1!XjZuO5CHhJe_h*ZLC%hMB?3eT1D$I7ZHy>%0A6kxJR@
zrl;=nh#8=m3in(V4FR<ivmN)5ks$&3;;RC*S4j!+74S?To#9EqF(}Vi{F^CyyXUh0
zn*g`WXslEV2%Px*a(1r=eriES#!WbZp{cp)f>*K$>}Zv0MC<&C3tLf$9(=+%<*&Xc
z2<9b2%5jC1*AXfue&jb<L0s6pSvL*KO+ld5F_=N?Jk%S<zmsey@XLdD%y58K0-2T?
zP#FV7f{5BRIX~z*NIRUodq#l|GkjJ{s8!3*H$6BHu;Q8{(JahPk^>_|*kP_j+s@O*
zg@`KsWMN?7lSlOw!+7Kes1DC<vH(F|GHHy9$-Tn#pM-0P{M)09xXNy$^v&`hFY%GX
zmkp2|;XB^4P(S*ADClnO=qxy$VciZ_Q8iLZ`I(D@0pL|736E4Q?)^<RQYN`kXx(4l
zP8j7Du8Rd#KK)8DESjI5WfKI$#bZl<H0<o+y?#xwFn;-9G7`De(<!!KfztaKkfUS!
zIf|UjAzbGZE9OPM{$6m{u|*9)Usou|$O@arS$gzr_**Q>4#~A&RM3<Qbq#+9(o-jD
zE{eurNX&>noPrR^J4`EJRvG-ko9pd(h&fpX`Q6fRK3T-sRoG850slU`E#)>L*u=p<
zNvr`J<KmW9V+1||%4j>ekTK=_u`-f$Oih=w8ptDWB0})ow;p<d8}UZw^4njL&KRJV
zP4hWD&6S6~$b5xf=l<_1A$H`vUO*#3A_vpTDSKylgEh0o&~uITGD=NK?<(eqbxl*j
zALlZPeOSd^9+P)5EYqE*Gm=DJfem6SN>FxNdK~H`$hRw9(Ow*C&KECjObZ#2NmVW_
zJq7V7w$*I9<6EOEmQuY}Unlp|<MoJTrHZ!87eONW&3QF({h~;jGdKjk$(isRx6Bl0
z2!g~gEK82d$TcP#+)k6urmm+NjVpREx7U>5rrFie!P^mkVg~6Z9g$;-g#Gmie8)~Z
ziMspTMX7`lhtz^Qh$YmUVj*w7m5m2+e}%tncHfTKFvze>!_Z~T>Mz@$N(_JUYG5+P
zCZ3mtlbx~5A8ozk#{)?w4Pau5BAI#j%N*CHwZEY`uT9LoSK6+#A1iF<58ntY1#AZ_
zR<Tb3iaIalRWUI;#lr!}s=wi9SX`*<Utew9oP8X;y+3S$+cm1(%oQAur{;<vN0w;J
z_g2W)tS}-7EHQ~n7r#Yh6oLvbtz$=RcMx~=96!SW9v0rv&xTp5EPan7a<3Yn!WWVw
zc@iAYDRL<aMEUVs{S6TAr$60gKCC3Gz6y!zN1T2e_hT6BdIg^sd5X+_0|1K;sa*H>
z#g^I@+wJb!mXi7EGPf+F7eZXE>k9VKzV=Cbf5A?LR2sCMzED3?>?$?CaaX`aG@9Z-
z4Kz~|xJ%5|WB?C}Tva)uAmOMk!W2^sc0_FxNNWW-96F?)+(*|mr(~|`FmQr#OQeH}
z<#U4^j3T3zH*0v}ViCj^SGH)EVN^GRWrPD5n|~1Tz|hsxkQ|MB{sh1ctlwL=J34t@
z{Mu#fSr7%3XLAJ^JPdLZ&Gt<pDYvr)<MpO4TMaGX<a<M3I7yx-tZR!8%c<NeV?w{9
zLy0wIcAWAatiHDe6`*#ZGFwlsSjs#;sy7+XAdcEREyCF9e#*GX_qclH^46Kz_!5)N
zK&B@}*H15^Jh^`z*@X40%V0=Z8xWn%b{I;%us{SdILmzc6xw(!avu1{;5xVDSMNEZ
z2jj#R^C^OqBH0-LpUe1VHq=+3DD$3)dkfHYf;s8yG}k~B=E61ftxWIdKl(x!`JR;Z
zc}2Fr@3a1ov#nK#guI8#40>Uzn2TblWby0u{wG=5TWTlwdxzOt-kzG%^RKOZHX5lX
zsAWY_OJ?kqTe>^3UrMcQh&m@BLob+8(qxDVM?--0eP2a}K|w~O`iGrH3Ye^>D??a2
z!~FQEOmtpsgM2J6;R_bXbLz<+X`dCRZ;u}a<fqIYb90j2>zCek486h@Ali0Cph7dP
zse;JGejxFcO=NjOY@Xa+y{`K6>1<gHdPrr|ka`G~sDDKw1Acj=2u##-&i}yX=tbFh
zXl`WuL|Ux|7i*osu-y>@ihIhBeYusV3jOul_p4Y6OXKk=b)g$wfN&W5%(dwqyKD`N
z6{;bK|4480nL!Xxb5O_KJjjB4Wm$d(v)dM|(!f;r&D0&lqRcP6t!_EeM1nsr`NMP^
z<@GS$M|;P<{?*KjW7GR7Rm0`((L44~L9A>$H=H~+y?#9Z?>Oqt7hyN&QeRhR%j?XO
z#W`?97LA;D+(58eWc4F%DgbqY0>y$luz6HnN9ZUhKiL0i;fqXDPzf>>p${cRy9!X9
zp+Q}2>p6<~C$;oOes<Sm&<5>P=i$jgwlMT8XzMh844P6&Ax*t3t>|V&g%Iy|uG|2p
z*7_j}Kb%zo5MBrl?CU2<z5^tde8oQ0n*YAW0W;_c&J|@^O25n}--)FyPEACXi@KEc
zath(jdjQd3fn8f%QOz*TZ@@rz1v_yh+#D(T-||jR6HRw-JVuQ+?Hn3)B4e7=ELD)T
zB&RK2Hj|(&B~O02!1`>ELA#_jFH@WjtHAlUE++ZF<hC9-7{)O@esGOipcY8j_7PPG
zY2Zl(+VKW-=5ats=`=VLzs9OZo-%`)?CuYy9f`4kjKN8_<Z7A~4Ww8lkB{Kgx~O-C
z%?TN*Q{R5&$^4$SAPYK6Ib{}`adt9gNy*}<!eTkCgtJ+TmnAn9dwmTUvY;}lOjF}!
zZ#F>@)*($|+vX5ZyBgl$RrFUz!P%OdUYKSg>hUl&0#YB+kCWWqWn)Z^(L;gM5U1hJ
zkOj$Yeac3cfiVUZKRsO-?WjS)*$tuGZm*By`*)Ghz6ia<V$cDSq3aM>j*j)c!yr3V
zv*`5{!64MRA|LFtj-_rlMEgu00e_A_qcm-<6r4_=(&Yd<=#m+ckhD2`j)g+wtwu9e
z#o^%!cticWMr=lHZ>riU6#aX`AXsO~nzF?ZHcVO=Zm%fN#K>p~LrKgP2Y9@y#Nw)M
zm>pY^yc)*k?jH_x$ob@HK6V29LqmxyEH(+LGjgYZ!^+5u3+<l0j0Y*p4HvdC5lKGe
z59Fxa2iWEJjV<mg_J()UopKT&+dAYm%yafce21h~<2`%XajC_{Mjqn4$|M6zIh)Wv
zDR%eS9KNbZ_YXr=iLDpR(ZLs+o|)aOo^I<(Y9lx<8vP<C)flA_=jebWYN=OZ{THp<
zT2T2#n8XnBG`KsY4wM*0N7AwS1@sB&K)zW+q@G0O8dhbb6@YYrQ*Hrmv&J%8j!(EO
z95Eu_s3KG9k0>R<R$&reJ4xf=IVp?<1>@s>`qk3LArmi_sNl9WfV$4H9XvABvcm*A
zJdB9n`bsNuVpVB&OB`@&Nu9PJ*XI|Ahcomz!y(kP!!<7%rRtcpWnqIICZKW+4O2G4
zqebcu?`Cxy0l`1Z8w9^_Hhp0q4I=6<t;-XJl~iT&pb)J_$c-2Ci&hiPLj;h<VcPD#
z;<VyezpR&|!+s&NoDTjuDeKaYl7xtoJPtDNI(XsQi#WUMg7RVt8}Rg4Q<d_<h0RIJ
zCR#3ZF-o{*H+3BIry?(6CtqsGf(@0JW~tFKE`h~RT;~hc2C{WTwE3<~7{pX5R_yTo
zYd{1=!Fo`iV4)SFnFlSTkA%1{Il-Y@hr$6Kl0$r8UG-zzHnk3`_14og)QD~FOe#}X
zMN@fI(pj$ihaG8(DNeM4$a$gQqpH^hMI&AkqKWZJ=<EIP@$+eU{K-X}ekQxfJU8WA
z37tvh;UERuvQwfq<gYb(Ax>f@!=9sgw}J^4JdVM&`l#E0CqKA+ce%r*g1@=rqdVi<
zr|9W!4$QD7ta>YpH~J;QA<@=@j^!Z>6}4FByw;slMU>KEa|HfRSWuT}y371EMjmAY
z%83cN!bA_hsyb`~GPvH0Tu-TE);-NRwT52$bkAEQfk6W+Li=D-%l`Vt7enS6ZX4(8
zFQJ&vS@-~T9R?ow;giUTd2tl}KQdgwE{cG!xmuzO9*=2QG$!39Tb??lT9&{|YXzkz
zxc9gE<7gmJP8-u5niZ@R=lB-|UyN7tk+A%AiTH8IZd9=ihk3|94e?0Rd{UE}4%=wd
znEt<4uXk6-6_pabwvIHjhYCKI5F)M}JSbFE6p1}sg9iMZZ!{BbTlo_yf_+yO&1I=1
z0~d-rWofnS;N$1{qp?^bZi!Pt#+m|N?W#Dgbix}Rr1Q|q?kwh;fdx((aa;N<&O~od
zOm=i*CNcCc%bM28bNQrX@LHN-7_3-p$)j3aX&BN0308I^KE#ONGVXZc5l3hfimA1k
zrZ9Y>rnDG@CB+-&51stTDh4eu&y7VrxnNRNF}N$qveBJ~@Ipl!OG=#$(b~bR^wb7a
zFbDZ@R_u=V#_wQnOWLpGdG(mbxvR`4MxUHTJ!%jIKnB40YxYVgdPME6a0pwB0?ZAB
zOm}=NFo9}HzAm(|!pG80!9gZUf$S>+GMb<vjm5UjY`yrnc&E&M70xve?n@Vz^2KR(
zm<d^^8m{)9(*||aW$*Xj7n_xdi4VAxMO%;7cPj8?JCTfC<!T=wTiMD^Vn(6(Zd6@c
ze{pOxesn2wuV0}AL%jR9#2;e(VNZ-=&r2B{Xzqyx|KK!r1C07DKH>)Iof9K8NCaNJ
zX^3t7#8;4Pn|vKzVgA@yq%NfIT<i7-zZP`%NS?gf`MkIOOV?mjCeH`X*dv7}-W}s8
zQ~o1FE~xglHEU3=f~A#Q=H;prYRO2Fo>Z#xT->}s-J|WOP5X;#lPQ^(JK!%g8#YC(
zD{TrB{ovcKqD(1I)+#>lC$2`0<YCzjTOpTK0L;ZpBGgU%HS}_|Ni1{Hgj~>X{4#8s
z9mjqq38fj)+H_b@zzB{<9F8$JGrIBkeE^{Ff&H8p-(-|3IIp?4c^;5nd%-9PJB<W!
zQ%#d6TD}}*pQ0UQ2F;}{#?%9R>Q@6=VTRmQ`|x;E;!!^uXp{_uL&8F;@^uH{IV$PL
z?e-@_*yvNB@0SyGn>LgqWwra=ypkKkm4vW=Z1qbtH9{d`xr)j4j&mEJ71tO1pfB5}
z%k}(3%;<2`v-}{~v`j$04<q(v>>|F_<yAuN?~o5j@*MJuLe}bU{V}AcQ{2aq#*5fd
z4aA+yKi9tBYfF>aw-sN5n{%>0=|3=)L>lhrf5ULEeShB25vgpdcTt0L^{F>@u4ZdN
zh|LYdh&3vcGrs%co(BcN4S;yOFeJ|%I~F@;6q=`xI(+?@g89c9#~(&LJ4|Lc7-vTt
zEz><)Xs0ww#6>eZ#};ex`W3V@`9BJ_;y)98aY5#6CPPWadmO*8zt+D1zKuJR?As6m
zQyo$9p=%O0YU%?kqE(eI+cSoqt9su}<&K}U7tGh!`^7IQy%RPGWu&q4v*DYVxO!8)
zTJf09I9YW>IudsT_SLRCP9wUL6wt{n#ag@G@eG8<Mw3=iw2U6o>##FD&==U(%%v;J
zYci+83rQ+cbf!EHXYEl&tcJWLu?}rrJieJ}5&KMB0t<oZ#vZ?8EqK=Pi;IztR;*x<
z)jaq;s=V?<b8(PR1oYR6io(k22|N22ocG9qf}MEn{^19upo9U`*!6aZ6{}8J@w$3&
z{CXBU$N>6E9|$bXA-39q&e3~hkTEPah#SEd9d$A{-_N-GrCk~+7lY*t3sbmR{X(0I
zn#A=}Tbza;-*tYU^*icH+mN4OVJlRZ1K<C|SN|7$U;6)o@BcS;bby1qos;c<A@_Iw
zH{||*^n1%eh^YPtKs=@d0{U-Y{{N@ne-<lqBL={K8r`@5`@5ZL981@Yk^4^H;k2xw
zglOh9a~n&_GvYL|CO$8q(P>F<=b)y(6=9`j*ffr7+g{ergg8NFSsSMf4T*=Gb@$8j
zBRfQdeB_|YF!>S`i(g-lhj-@9&mbYn5Z!TafkL=71$&4m5@oZ;Y+<6{=Q)tx!bo#}
z0)E4usKp`8TR4Wk1++80=wkR!#oay9GMySyL(rw8`^EO-nLfjO3J&Nn6_A$d^rd;i
zt#uCyLvKM+rUetUdWZHWOqP=nB!-7`wIKFOY(QC&y0wugy#^AY*Sl2CUm|3Tvm#HC
z7M(Z{lL}-=6A<};wUBj{C*^bf;?`tHO$KsC8mI)DKN2O)9y(VkaX2A<9pBj*C+>Pj
zP~RahT|TFVI}vbdLj^Y?C(8_HY4U>nnzIq<eY*a#1Nu72TmPBsBKsxSX#Ykq#0M8B
zfz5Cy=ttIW>$wA?(_%niaXcV_ZEm+6ELS;y122FOGCc#t?Sz}mvepwB^4RQ-qy@p9
z8^XgzvjHUEcH`!V**)n!PIBaQAX=&5;bpv^IMLJu;f|g8D7prqD7xBGEvXG3!um%;
zOZ%8&r;E(}dL0;|%>8A{*Hkq<ieLGJ3w+qP`$E*SBJmRTaL}G!T11FaZB!MbdZS}w
z<Xp9TJHJEFNy*N<0-n1E+teJigD$p~XKnv+xl}K5alZJl39AC9&=@2Lve?#PqpQ{Z
z&wYD)iG69?bNyWPo|ovmN;2)a{VdK3kS5k8i2KSROAyH!&g1Ut*+`^y;=&!oI~L6*
zZ#w@|8vVXJyhE~Q6LApac&!yM?rt^*>v&^pg87(m6r+T4Xvot4^aWFad9Eu%UD{1y
zd{pIVcCwE-HIJB8j^9uGfN4hi9=*b1#9(@!3}q7WiDg7Daz*l+ISxc1ohh7C%zO}=
ze35PcCJ7H3Eou}>-YmDGwasULFBcTmCj=)e(MF!=g7czenV(m8QUvcMxUY#-Eh;ul
z2U|*Bn=$7>2|Fj>;{+#*!7JdCX?M)v+9bZ?pOVL}C^;DClM3u?b0c78?&{0+d;dH4
z=@Qd3Im(>^r7T+3H>gb<OAPx{R8t&@rli6eBJk_g^xYn6uDN?h&UV$l9U0RM{1482
zY{Nk=EM$j6e+0<3{*fN(!Mx)4d<@Wr!mUp#ZNqJ_-fO|ktR8iytyETY5kAKx;8$5^
zC|_{x%lvr0m_X31*wyi*)-sq3JqWB5+6w~HK>`e{=FW3n&zhMB@4@pJ0Q!0X;}nIV
z{pzk4Y51AMw6jvGIG`G)1?H7dsZNzZdHBy1Nl3PEggks;0$R}QU>sTB#F|xaFwFe#
zbPCoJWpZUGO3z^z5=;?>;&kJLS%am$W9c$-hOLn*YXDBr`#ZaVRQsA|pK6)R7h}bE
zqFcMbyl;cww%$v{ave$4b&M>!Ha$2^rS>toGET(BYzN;J0}^65Q^cy+z?5QZ)ySyp
zE1o5T>TpqrWCc)1NcBZVMA++onpCRE_EKoHUa6sGX8T*mro|&eChilzPepq1^1K$5
zeh4y-P1SYkyMSzWte+`SGvY#TeNeX0;QQR=9}8v|om05F$6YkiT~ssW`QGh(7LDir
z3-#rX^YwMjnPr{1_kIpG_2OO90RxTDa)hDDOuZizzLSew&ghpX0lfF;C|%>o_pQ<$
z*KFA2Uc^CX4ma%^{U=X&Ed3$#{tXmR5o=jLmW+@ov`6bKDGBOCzsB@e?{3d^n*qAK
zTklb0O1r-Vp0U$qqj2C^v)5p4go)$iogg6qS(H$m((8`2K(KrO_jU-qb)CD)r>>WX
z*7ru$iTzeR-zC$u4~9u2Jjh|41V3sN*^}IAML`DVmTTa#-zWZSNc(kq$tKSbp2Q3q
z9JMZK>P{HXcgin>f^-sRfXt-bwx#B_M`?Nri<J-4sTp&LXuRMiMg#V5A>*_noyOgp
zC;F(>i&k6hXthS(rky?O#-BDa2`s%q#O6g3rZHWv#9$ZW58&3sqL?*tag+B#DN}?(
zpsW;_b_PA}61^d*5K=l#-+F_p-E{24>mO+VvOT$!RSo0C7rc@$$zEbtluFPBWUo3R
z14q3RN452mm8#CRAM}sl0a06@k2a!f3+Y=xGEodKaBhl_(`Y@kYB5G-W9nRA-(XoK
zL6~;dEolZeWjsG>k_SnJg3lh|AF~4|9<Ba43|A(*k|;Hwq_}soQech*mm#828--OF
zn}?@Noq8uQ4xNw|r%txHdjj<v>CKgz<II~x4d3F{JhmQcOR@BJR&XmN6i<}~mP=bG
zWbLC#l%i?3nzsnUigZ&$SN=7@g=9+gnPE1K7;AG+2)TFRk-{}MiYpd_z+@z?wUp7j
zW_<PFd@ZEHx7WopL`IuKYB}UN+pvM(S{RUn($b7CT<x_0S4sF>c!t=ch!UQ^Houtl
z;CQF$d`M?3K+i_N4HKKpDTaY2%{V@~jtOuN;H+fOhc?wZ&EbFPvDZt!Hg9&GnMxx~
zuxA!Bkd`FD@I`enJ+>95*puX<!05)UsCPJx!=JFQ7U$imwBfpFK(JVsG|jPiC!f*7
ziFo#jZl)w2N4}Jd&=nG4UuK3$i)AR9Dq@M=kgM23jPD(=8Bz65ac$>$@o4@r%TK~0
z5{vO+aa{DK2taWiqDz{Tr6IcmRU$^+q2eN+*YQd#njUsZ>+By<5X0yJ&}D(O?L8dA
z+czeCRaX#H->xV?j6CYlg3b=^7Uj23xlyLrX=eS6zc(~2kv|sUHG8~LJ5dB}lJ)_z
zc)0kxFpMz)m3XTAeK&})`!%zb_&F`rU}!g}yCT?$8%<le)25`VAs)3L{G~DSYwD^T
zB@zuw2Oh4EIRFiBhXCJtkOJdl$X2<K+V>!^Yb;iQo=MqA>UXNt@?xOTiMCKe_kzK=
zEtr)ah$W=yRT}Z|q;<T^`0<*C#|Gqb;Datv^EOdwr_hW`Am1+h{h&=8W~b11Bks}Y
zHqoyui1JGa?k#wSPber|FGtKj4-;YvSN3xOCR#-CYs88a5UP<JT(1N=kox1QUYIpA
z>JHZbN_6ef`KPZAA<QnH0jCJ0tQd~q2>|<3+QdG6Jw%#HEwTPux?9w=bU-0mP~IAf
zeRDd-1~{gih(x#~Fz>k<D2mP)9v%nHsL#ssmL3;V^pH$om3KxD_LGppk=Fs-DRh*?
z7=h3cvisbfWK;BzZf{Fd`ubx*!K>v%4|R0FqF-#FsokK*3bHBV!zw_RE^?{RpJ$Tw
zaVi2P^&qf1A${9OO~gUUsJCtGuNT$~*qyMWjT3f-@e6kL6m`JAb&Hu#A8^~YCnjg(
zQhEi7UUcZWcww@Rv<Rnt%m+^bQzy3Tx|idZO=kwhpx*O9zO20FIhm>*_p0@c!-UzR
z(Nf99VxPpB@M!f~sFCX>Ix>LmzOqr&yT%eA*jd4f1T44OHYd8Lo+sBikP~ehl_ppL
zj#GK4lNx=3%Es`b;}6d=Lhih|uR}4K2;(;sg0_kd_R2&<LJ`;p8oSHfMwWz_MQ`42
zs4OTx-q`n-Wv+BBL#WtqY<#6LCqNYq(u~U2C{Fz}i`;iYcvVC|;PKQYTx}<2flY;l
zn!Hu=$M_JfbTFun@>150P`qsdCY|Y5XzP<9eqlFUHmBN+`m2nucC?;)aNbU`T2Zfy
z!BE?S`Q;>@$wAu6xwULUtZCCQm)sxW4lEJv2YC+a;g;W?KF2aTY$%;s$4;5%(kaBH
zOk(z$vA%6RC>xt%H2mm)<+mRm=lHnsRwobeaw2xW7E;w(O@-kmkfaT5F8@+yUbcJR
zJQ46J){D1g!I>04orszGo?Nm414EYX7?_H0X#<}TEt&m8W#@~v4cXoO2nE(p>N=|g
zBFMk!sOYZk(!oWSV30Jl_nCJ;)qI!yVq<jJx2X4Ih;GaxB;;;V_=BP$hv6R@4qXZG
zFcYrf4r2N@x-_AZ$xUKY^@p+27HJlE8z{x!Gjg*Ta~?6FP}dok0h>@r%A_h?OK(Y`
zthkyK!Jm#co*J!8f2lZxy@3iv#b=Z~`vWDsGwrqfGpQGIbBm(d(WY=0i7~uE5*Ns@
z-cP}ANWHKhDC5Guxc|n_^evf}byIh9iv2Yb_H8v><YfI0_|1Zz9W&u2I^deN#iR>R
zn9kA+i&=GNT)!Y?k@7oEdKM7lg4?AAuR&QPNmfysSltO2CfpFkA}~bDGiAk^<+oK;
z+(m^BS!fd_bq`mH<0wq>tAs%?z4RA_ucPFW6L|0MYgDHJl7uD^#`P1nml<1E^i!)9
zByGX&(G4yl3t>4wRPa`~j8ws@j*H=mFDfHyu#{#nj}3Ms4h(<4H7l_a(jx9qxgO_*
z7)Op4MbyH2#I42`t<(VFO!+f-gKH{giiHnb63Cs*`Br6q&0E1%*~lVe8P!CxiG*&A
zOtb$GPexvELvk==zvq5Dtf+ONGIY}XS&)A#;DVEBPu)E0gf9*}8T6NRgX$UE@kx6F
zeguzW1P{YOtaG>@OJvdHeUMlxKl*#L(r`ASP_cCViACiPk>)miCzau~7%qB#HD~;S
zyzV1v&h|3h47;5fpims-3wJF(1mAq^bJDY0Gk*uoD#OZZXlwAVx?m^$tv*({Y^s$>
z=d4Q0e?>g}_p%cA|GjelKQhqV*u?O^wB>&&!2dDM?LV~THIv2W&Og{k8Wa!^+5g<s
zTpwU+#KHDI>&q(@-T#P;@Sgn_^SXd$mVvnBe2$e^fnmNp$B}%MU%`Wh7ub!>E0v|7
z^3;2?AxQ;R;T)Sd0y-q{LXhj}B{Aoi2Z>3e`^T%FP4v$n+n5hSCzxHVU`FcX#Br=1
z({oC4oEg|@m6Q)V1~8q>5WE_5xyA$v0Tk>SW=fS4Hh*CXHqh?hq%=@EjqByGyt;&Y
zV(4{It3=5mB&8wZtT}^OurQA~b1I;zf=evud?`T#5tgRomKhmALnuo!qZ)Vs_YMw~
zHm2khD=%l}cRp-(&vqIXV`;Y<RsmWz^|f4~Dp|rsp6Oliev9UN^qIK71M2G}Wf=h;
zc)4fAefNF#diIi{@d|GGsgQj6^|Jze#Q2S@=%TMxhg|;6QySAIT4rG;AQf{b@lpxZ
z%F$vY+)}E;0sUv=QI<px*mUR)`9iD{#{(LsU#&8adViRYcveE3YZ^?fMi*dMq*PLX
zlxa0Eg8VbIQE4{P6^<~gsOs99I1MzWu|*{TWttMF<3`+NCG_a>d*=>L0>6KkQZ8!M
zM?P`u6;8bkupwjonLAvtwB66k0iE><8fXVghMn#@kCQLVJUco#JiY&L1MALW%0LSc
zn4QB=P&(KL+lW!%UykUU2{ai$1#$Gt-)_=EH#rr;cF%+CR1FatsH-=|tym&elU2y?
ztjgGZzR?maTmns!8tbcPVvHZNMt7d(Q{~MK+>`-9#Qmi<b+nB>I=a~@3kpLhye2j!
z{v2#cmSpH!2U&1_i*TH@FVJEhg}^D+!n`qh`NVN%?`nPS%>I(seg!(@>+nY$EM)`w
znRq_6W<(_^v`O81UcaSVW&Lm_B2BbihXCJsAJSoKVx^uR^M?xpUpR6M<Hj~K>cE>&
zXeoFVX(!Y+_xAi!JP%}d@~82k_Rk+$zQAr3{ILZJ=A*YLLzvB5SQL}q$+;b^Lmfcy
zTl3VQlzlej1Ho`I9#`y)?f(zU`H$IQy_0(E`v=RR`4>}0^1scF3E+R(%vi_o+AcC7
z`R#tGXAMYe1%H--El?4u>XK2=2wu3Qm6S_aFJkHNHq6qaANb~8wE;jsjkdR4ci$2$
zqzquB`Lm+do}i|OhbvPXJKW(p`9o(x)i0i4da%B-m4ku@^>DQZgr(XL;4y02k5BqE
z&wlqeqa@KzVsj0*0ecn11EBBYrclykrTnz740f{x&B6Y--x@H|d7&nN{z$(05uqt`
z6BeDK9owO;iMub5L0_Sr(z_5`^9f`HOhEcaH7qYTd^Oq3a#v>GaZu3V)H_o(-Ehts
zo?akBew0+ii~`EP5LPCXGIiNGRL!#+M!O%~eviTCmpMfZZU(6b+|^v}{tM0~Zj4t+
z@qQ*0*bbc&DO1Dnf6n$lTQ=!jJ0<3uJAtHM3;HD4i`_qs3gC-y%(qLBJvrhe1`b#o
zIdd6AXD<bQm_JKG=RNjapu((p<t@g?nE$y6pNYM?GVT7H)AP}7X8JOmopoQ5sCFT`
z05Mhu>df4pl>}RoIWf$s`eGFc*j|3Qof&=j`*c#jGvvV<awukwtL8_@k70aOP9(iA
zb8Oh9e+0*dY?cEu&6*eU|1tI!P*p|YwlE!1=g`gJ&>d1D&5;%a5s;K_l$LJUNOz-j
zgERu7NP|j?fP{b`B`E?D|3Y8f_r`zkeGd0v9M9fsul2?JzB!ld?ViNmby?B<+yAcy
z`0t&K*Rf&gSFj-u-r#5jj{l!m*!@Saw(zufvf{UQv3dMo33rG49ygk&CMIwTay}HT
z77T?Z`PV$U8b#Pn+lhQLn4{*$<{XI8(p3Abjx%PjYQz3WPbMcdD+jA2y5T<0ucX)i
z*Zlevw%<*FhXC=x{@eLoR}?d+|MiBo|4dj+H-9`Q27C5)UH_}$%LI#=daM4sS)6vG
zYl^|Ve6twc!ASJGW6hLVx~kl1bpZP{>+io-x3VpNL`~}H|MO%amowsz-z$<`k4}*p
zk2Qp(q~wpj3p*?`8w{CMg@8+ce5Tk-^(VNt5!v>Zeoxrh{0s0YW$<}E<f{1LAwOI9
zMbslB6pG&mJ3g`sAdsT<uM_tF_8aYT68pmpX^Pi919^J!VO|YkF1ZxrRbpXm;}Q2v
zp<ZlWVe!f(o)0(PXJSZu5ysMFt*a}1!+xmuYB<_^UH`?%w51*uj=jB2?qFZUu*fIz
zck~~#Z>7(Po3|S9`qEB6s@}H0NwlT<&EeLY%xrZLlHbSg)zEb`qp&p^GsE&Gc`|Rh
zh&=UYKjE`V9=bKhq?jbP7>V8RD0)NJAaW=+Jp-P}6&jGz>rcp$Q?poMP4mm|>+yI2
z$M|yN0qsvq;<dB5!P(4rO<cN+xf(Hf(?LNH;X(u9vbh9dypqVSH8*>v!j|r<Y#(N6
zvR9Aj$;TsW{US6v6lR<%1R2YxCi@@7@8jsaQF#CO!56dNk37%kCB!8jbZ(}TNuBfO
zy~tByxoWi^yDK$vaz%3$x2|9j;q<P}v?OPwZACNub0wz!$11+H%q)u%A!|#y)IaZZ
z)n1Eg+`YrXQQOT)98dg`;O)&ORBA?B(~^jP79U?l_dRizUQ*2u1)Wcg3^c@6bdFwa
zYjR~{4T<6?YI=UdTUja?S_lvnc8`0mS8Pz0p~fL7xfzZ>m0F}0@)%nY8V--ZX6D3x
z*UGbZnM8}`h{*no$GgoFYx5rZQ}7WxQkTGpq9yG0y$9cP^07sN)ez;vR5mW<{I3f8
zpDLS+;#=}$_T-lN6j*)He=rUAoR9F_`$8Sc9QM98nx{Xtw&Y!Q&2(5aK5yM`heK@e
zOY<_7Jr<eF>r**sF1_`~IrG?_%9PLVuX2X*Titj)W*@Sn^822dTln}gMVAQeSM%*g
z9k+IuTdik%-|5MQ?Pth+OIqPY_(RZy`=n`a{lkN&<x-3ToC&Tk&to?)PM2~~3@u;N
zwUH}Di#8Vf=DoH{&WAns4!gw>mhX<gY|A`e-13tCxguZUyukgz@%{P4vs<@9x~ntB
zh%@XODcoOSvNO8$62i%(&9c$W^J?#QVA|k17cdC!%vQzk@`){a?~v0}+LSI8A8g8e
z8`(+WXznr$?o;Zq{cw`EKG-_cXyz<@$^UVb__lOJw~2Y-j^NiRuW$yZ$X@WN+sojH
z^&`&QBdsys1>!lA2D{r%93MaTr#1Vi?$(jb3TMsX?l4}?4keSwqzJy(w4HjJE^owo
z&~<qwBugv(ScYE4wlhcoLxw0z3r7p*JQ8mUpM<S=Xz)8XS9QKq{!7xg!J)oV**Xua
zIAzJ}i6XX>$sG;?KhB;j?azY0xX*ttU!2Z-?43%#(iSJVTm9G)?YGOw<AG1zzem<=
z6=~k6ZIVRTlr97%rf3Jhy~vSKi(}sP$kMa^s(O!*e%|iTZEtVy)%=9uyG52fW7)2I
zHNzoS71-a-&@UMkQTVhT9m1Xbk%6~4ZhS3_R#I9nh>f^2EgMhhYPAwU{&sCtC^q8g
zxmgfuG+HtcEfw?YuDI3Rp{`$AJ@PsOD{q4S!(-E~5#2cXLAeE}^caNy57pk%!t%fA
zllA5_=fJCXf9q?Mhil-e(qr&NpcG)`Wssg66D)M#OZL;@`sQs<71ZhPPo~>n>d2ZN
z{Lz_u&am?#=XK7^e%t)3m*^bkBJmrnuqAr>?H!NXpJa@2v1F9P%}jE;(<RQ8q|p1z
z@!m_=cL`ZO;X=nZP73e2zuYpKc;u-m{hn-DaVUT^jI-6;5WAV&g}OVon)2P<jQ7d6
zaT#x@kRdOiV0OWh7_>|uR#LfJPru#oDI1o?7}3QVdhKeN^OQewPrlV|yTC^zz2*rs
zUuwf)L-M!YDZykmbJ{}j7wpIqlJb|#%a%_fdaxBxgOOf;PETJ`SP-ecH#C>Bcf2>3
zGI67aO!2VU`c3gy%W|!yfsB@Nt*?5526kdaRy|UmZ;0_a(&{jM(v0k9+3li(|Li?f
z`C>Xiwi?3W@jg*S;EAQ(y#-^+h;lo_dwz8ZTETD`xcq(G6Oj%YlU#rLyg+Ftg%zRl
zr-c&_K5<e#a+|9+P0`k1SD`r;_bx!*7`lD;)Ps0B%Y1E|_$r6}!~534ykUe1*3n&N
zLnHjBb8l`praX`9`g9PU-a)-!Ek;>d=)&-MC^s}m)4Y^qmnu}~CtkKa^V-cHiprP6
zo<f>GlX-4D&rj3+l%!_Z9bjf_pnWTIsJzVOwzo=rxc-AUZNB_Tn*pz^1bk`s;f(<i
z5o*j7&#GbP2^s&-XbhMhdT6=UOIx8Qbw#IlnY=cie!o?h)y>}gi0<~@iy>NWg3gV`
zN7}(_2l@!Y#i6N?#IT1q1>AJ5E?cYY2hUW`EayZ0df&Bm+L5hOowe0_A0&Nq;7OC`
zzH_m?be>GOPA)J|6~uhbUs|tyW>rC$fTCRQ7w*WA7;*$}P4BZZx5(0XPBfZRu-tU=
zAR+Og%n@ziMW*Ij>dM2+ToYqO7DGSe$m*@Hy?#`?jP=}^cODLXn33GF@D02q&K?wY
zA}7XK+NML=NLwersj+DvDoLN?v=4uOm(G2j=A`Dy7|W&b_b04m%?-H@X_`JWd;;FX
z!=^s3^-X`Kr|;IkGZ<kXm!(@N=9~1My+7o1hiD;IW!!vk?6_IJLd>#!ZuFJ5!%^GD
ze5i<}opnZ@jSNZQWak1xOld}>mG6YOnUCxfwz6_G`-v}y>cTLdcI4Bh!2he?;k{Ag
z(hst?0q|*-|E^beceM8TuhX|$&-uFBxde~I9e$<cc8=t7)fo|xOQ1ElS4fxjQxUv)
zgjbuABSJ?-GOq6I?Jno$$Gopz26#rKFWUV)ygOJ#e^8Hxw2RESw#BhZ6pp=GpZz52
z{~Yf;3x2%!DtPhf8Pz`9R~M@kx3S1M){yuixp&G)ydZXYrYQ31(6exS(s$3W!^50L
zSq-sDFh*|l-mE0qyEXr=umv+s?F(MPQ!5m9xCpbHseh8{OTzObA@#C;e+(n;!kmtm
zTq^$Y@@+|s+<s+wJLD9aDK?tTt#7k~o@S(HsEE_gU~sdRR>l@_&ARUu)khb7=oty?
z@@n5Hr4ECs%6{Jp5u+vlcEoa;@$&4QU|`V)Eiv>E)qI(k==*15RcSd~R+%TNvXVCm
znWa?&T7$&jnk)pJgquo}f&Xl39$G`go+ykjkn+%S<yLWs9yy91|L~MQc{pQRL)IE&
zLNDtiu|Gd7v_>yT_Nv3b^^f)C&)>cDuI4mBbis<+6Rwv7gS2G9l@D%>M_E$|m{YaJ
z2H{@){4xNZrGEdZWnY0ffz-x@`BjvxI+>7u#%Z?Y46&s1%Q+m=<`8}7rB_59E|`zW
z%fj%4AcMGJh`(e{PfNi#Fu7oo5i<hccx7k#Jw|S$lu=DRkx-gz>@8Y%I)nb0;`*FW
z`+|>F7%T*x!BK4uG+zxUJJA2I^^7gmiH>~dVl3^l42me-Ti+y)zgRq{=}eNHu3a7Z
z$a88b{?x9FGEgic|ADzfmBjw?)%vk2)%=8*L4oIkpRsRT8?mv97BCEHb9<^Un0h{5
zu5<j6{qX9F&D3g4NO*Wo1~QtJnH1I;S`f3Yc+vWkBkn@v{hYb1r$*++YRa5h#?)~n
zZAp}iQOU*f7YWMIZtu#A!lA|AMz<F09iF<+94SrV<AggNPDyqZ9hI~OGzzk;m|Kcr
zS(om-&Gl-64_D1b9w-yN7F}Jt_Zl+v7p?eyQq`4j5_VEmJsORk*K4Xl&6q?li;=_-
zE*0=WYvl05FrIAWANO-csKYii(j}=xDDQ<F8*5$#mlXBeKN&n~H&th7sTn0d?7Sz-
zlQuE<=JfsZ_cBU!zDeOPzl5v4c8ng}Qr){>SR-5_X{sN5zch~vbCrfkM?^#~uB0j$
z;ryy1|M?v1>_tMgHoJoqMFHaz0vymj=%-p4Dd!ZEzsVHAbRuS`io@f7;;Ygr`{|uL
zdz?vmQrA^%WyLL<T6%->A9;I@<qx{YtUZ?WMd!N3bQY~L!kBc4hu-V!Ypy=Kx&5`?
zj@Lh=_{IU#|H<d0#Bh=GKnt_P`G3&D9{=}RSnPfCYes*OXXeUHsy54iw?c>-yU4z>
z2Ze1HK{6pyA>!&7=BQkkT$6RYcxz5I-6s3pi{<rp@7)Cxr2vw%C;W#dU7vLo{e92Y
z?C5(r_QFU{(#V8fj4b&v2PNxvKP)fj)y1>T=}uL>_v8*a7k5&GidCx(FPlOlp;}@h
zhDY?Xc8)!wFO`^n@_0}9)W5LahUqAlL*K?yxD13egTEHDPQSw{a!YnkgHqn5**je8
zV61ns28uNWCA#+fZOis7kbE=S2mWWCGR}f*!x%HdB_3UA#Wtje1S*Y#g@)^!7j}*F
zE{ajooV|(<tCacebz8`E-h88$Iq1;WDC+ot=U>*X%*&#xA}if_L|DJXMPfg4sPtLb
zQk2Z6oEc6tpp&hI9Jfe!6cN_ue30gNgQH))M7}2NRpLMd4j(?5qh;o=Md8HTCaf<#
z3W&DUD6@N-i`mFoQ}5vDx|rWDA<wMBkMkO|KErLsveTKtr`EgAlKP(7fgj_n;H!pH
zOR5!(v8l!gCFhUTr`iO^LdM_7BP<+~lgEpKWyreu!vlz=pMHB1<?M?5oJDMsC@`_r
zdwza+w7l+gBOp~LDK)3#!zjhQL=T9_Zcct_ey%69%JrbN<d2<E>+@&#dKE{LyE&8j
zmn<z6{tV*xiF3@pVRRU9S(x{#&uQk}4L1`0=+f6Rvj0ecSj>%_n4nULY($>I^jy>b
zQI<EC#fJbrb8qcY^kv$2^<#WVx?`7&bAH=DAG&Z)_GEUS7@YJq@RAtHeZ^>=JolH8
zmAtVOD0{ORgXscw>O4t*`@p8~T+#9@#75Ch>?Qwb&ibmT@=CJvE=<hAQ{9n6>T=}C
z&8V&=xZjtcUjbi#bs+?^S8kej27VKRDC=gp8!gaW(Q297q8Hl4l`Z^*kDSvhe%OmY
zIM+RRD^?&atB1`X=n|qC-P~?YRRA9)_w=*7-N%IW*kW1w>A&XqpEiB{1WurG{I5T>
z|7m$Ow|4(0O<zA$_`j5<ugAQLac~(A<h9QrCI9o1eLW^P%>K8&_Mbel*f~i)enOBu
zeD{)~5LrE2!CH(<{0{km4Hwl^HT&jBxA@cC?9y!FMLnCv>8@j`ImJEqDB;Iz4eMN|
zx{scxRvOjDKd;Lep?XYp=)JrD5^vG5er|{M_re8Y&_JvzhlD1r?@=-aI^B)c7iB|8
z&brTrNkqE&bre2(XqNmeG075}v4yHQ+s0w{XWmOHk#V{jYy>Mi;~lB%d>o}5&vhtN
z=fSuASP}L+gAu7t;JqZAHEdTq7yg`SaHi|CnSSql^GPN4^odHP$D>*jB1fu2Mz+!%
zi<<68DcKhznb8aif|-Z?=cGe_Br}(jqmGRs@maMA-Eb{y$mp9!0ONCM76GoJ!L3K+
z5pP__tsGc;k|!wAdcCv`UUBdQfL~dcq+51y8dawA=6SFoH05>tc9k{{-`I~oyyrr1
zTkt}4r)s*<y2qV;x#dSedVBoJGZz<F$Ogqua(wrOMB?-IDI4#r;JG>C;B{M%v-D*q
zY4-NAz@DZrTLJCk0pBM1QfYED*e_@>AK%e`6VyZSzoGZq*Z!>!2eg5oxBts+h-+W}
zUuxNZ;_T`NV=mX*5H6kX3#vsJRhpuN#fa=-QqQo^dlmg2ak_=tSF`mzzu%|(Ytc5j
zsBR*~Y8J`5?Y?{KR%d6N?F5`QV=eXsd-8B)kvEF4(cl)Par)B7rAYL8T(Y0fQvQ?#
z(UL9>D_!z4-2u;Z%lBrDzI-l3*4<Css`kWRIY~Lng0W5N_=Vj1pdkC`vrl_;#?dN~
z%cj$-*&ze1K6!;Y<IZnO*9N!<-c4n*dDtk5cqjg%_+)N`_?$lTBy`nIjNx^!(*`du
zH2U72&ayT9*kFpH_Yo^`(Rtk>S&+gT!6%P|e;F8X1_y~Hs)^P!lm6Ci(nh-~q*U0<
zAqtSi`nfrm#{58&o4Y(gbX#hEMPP&0EAP@+VBR-GH2=`=yje$)NQB(id(Q8!8onr;
z;Eh^7Mh*Gc@06SLe<DfPxy3{yxo7UrWmWe{iYLt%4zkbRFvqS+*3-GaUtsBJU+j2u
zlBkgH+xMG|xAmxX-bpH|IXI})A}u?8c~=_;Gw<19-)ldtGV?XV5&7a=hjp5&UtOYt
z>7qiTKesAUyUuXNKp&|bk;&pII&!GCld7kNBEB%zji9YUv3pGw7s&zZ*t6Z<C{=m3
zu%5*2p{INI!>j`q$Nf2)K(mp3t@=Xr8S3-{bVUelEhpSm&O%O+G9h7`EN9eiglL6S
zW19jG8^6&%=j1mUuKaKURsC<du${ENWlEXq<5?7wfK{+ENuAb#ie9v%j|V@m<0z?q
z)Rc?$aWBz9`DWYc`7*^ufoYH`<JIsq_44_a=PBm@8Lp^g!I2CAO+|oF{O7x7{}Y<L
z-OQi-4?6Lmg=>PmBb^W|V)qXZ&Tk7k@9F*g@MiLu{rpLhuH#+~7DtXWTAxOhLZ`HZ
zD^vS7=8BsNFQ=Ss7XFAlehywiXYi%M^{kBAW@6)4|IE=QnG?nPyAh2uRZE{|%s6S*
zLQ*|tB3}!=(!?QgJo>@->H`aBot`1mhnM+Y6!8f~Uyib%#z%P$`WUz1T%sqWL<!b-
zjAW6i$4^R$Fl5xKs6|2=ONZ>_N%KEf89t5NK<L1}U`BINYMYAUQ$!aznOE*ce;@gH
zP`vK^BvH>{M3V`_k?w*Ri{phw&G~vk*_LFBP}pzwmY)VWckfVf==%$6n_A7_-W?AY
zem2qbLnT9@t;C{`<TdTlN-aY*?1%fWo%c&t!-t&FtQi90e`cc`g5p04Qpl#=rtY^O
zy_pm*&Qcps9?zfpMDR07GT}m}I4#{t=nvsI_5hxp!a+oAed*`jgfJF^D({xL?2D=G
zHWSY;E>u(@M{riuR@S?{M^znKZSC6GgyquXKh%%E_7feAge=mW%0|ctoKJsAzuZ}5
z5(h8s8vGCYJ=Y-R#(WDl26{scw*QxcWN&NzUpsy0;s4^0>aXOz=x=*IdsLQ<VZTW!
zKfwyMSDTF8s7EOqTj?a&wVP&Nb>3EsGj+c8xc7MklM~c-dx2s1b!5ryyO>!|IKzAf
z1f;O%b93M9{QQ(G{d8SOf+&NUFzy>~O3+Q^t}c|1aLnwJr9V$JZ@_aJposfx&10|`
z$u(j!xVt&hm@;%IV}C{e(fFzovUSW3(?5ZXdd?lD)5U6GrR*aW3ja;>N`RPv{0Vv-
zJ+4ekME9e<)Y4cE8&Z}yJ~`sl*!N=3aovR@NLb5b8JHN3wQw$ajafOE4c&c;6l8KZ
z`L$)Sj1u!obz#yw9ySdRjVuVYS6i%~jzy(Ps!BL(#Rib?Qunb_#mTw~N$`^sMC^Fy
zJYnQ~K{B_Xw06<ZW880}J?EFF-Ge`z9>+A??$m=FMz%FFahQ%NNOFd`)w{p(jn47O
zkv@|oY(FT2K9dZ-PY|N|ySUX(giw@(dJ{uQv@76`16o`TthKpbmi?LRuNa<}sgbQm
z#l^nQ#_Zq!`Mvu>0XCE`eYBoYE)>RmpPK5!lgbn<{l50_{Kp6Io=<Hh*8B5|$Gny3
zi=Ec&Z<oF<)Jixzu{Z4f8SL60+e*Gv-*Ud%*_e4JDY0u*ON;{^L032E&l@g^^1i3r
z>ThMokv3FZ;&0#XT2wL@T82I-IFGZfIN?zQ>54IoI%R10?WhbUJTS1!!e(>6SGgAU
zaIGsNHusTBfoXPg>76#dfyZaGfkifr5j}c?8cCvGH<FK|n{m#^m;{r|J1Q-senE?A
zS?2jhwEVt&CLV1IrAh6x{BIvolC^zKJ~E-oUYTJQd2L5gx{7KdETgqzBKvXEHNS(h
z2gg2B{DNe(!|IUDw^y|E!$Uh3Msx-zY9aC@3e?CzZR8w9?Q^`B;-$7<cyapE7|fIJ
zvx~)=1)_W8bdHjo6+EDQ!)+h?`Eu~vX=H=<tGBh&94bFf(=WcBlM>Y3+;ew5RB<j%
zl*s%=XQW^%k|=Mb+jjU%GMP1G|Dy3lPr7>DYkIxc3@?9tkjNzxd8RdpIivBy<C9=T
zk>5s11pjyE9g+H<V*~loT9_F6jIO@ozLhC$4-DDMyYz&HRew@iuE9e_^T-)^YFW5*
z$=*ykWE68t=kT{Ggatc{f7(5gd)I)idi2OqU4$E5VXfuGR-b@OKGHW+Ca~{oalExM
zmpB2Gja?+FGpznHGv>i_tTH8^`Sxe0G%GzOX7Go`sznceX;Kl|RGho`(W&Pv+<Eso
z5I=%K^K+ER_q?PMM)9VtYVM|A3&O=ZJ}tsN56#zZK<#=6?btBN0FU&QI4%7*Ta?dl
zcgOk94vBqHi*n(0Q$DfL*bHuMO*bs+XuRL^&GI%u>+#N#m-DY@cIv-=5;?s_v#jDH
z;r4sPd^SBx;j(9+Q|ZEnSn<9RlG0<UcY*pOS?X}vP%=8dFSNa_tuN5N=I!uOeCSL<
z<MQS=T5xokaOfnfn?Ceq^W^B&{dgMRaT&DY`P_}B@+;AE&zKX~XuDp!R?>*F$Ia(K
zRwvoQ9j<qN3wz-DASp1v&){)Vpwq=>6pnVt;>r+Pk?%882KiHouPWF6>Mh}08(LY$
zC^|5pHY=I+V5a@X`W)Abya|znV4dH+>w}uk^Z0Jru91$bM@q%{HEvhbu@+Kt3%&0j
zb7JPBC9?Y4{{dFZTfX<&X*>Lcy7O#PUtXUwki8iY2)DixGNXTy26;}W%$X?j<IOZ0
zx~Pijb#7m(wAlU<x5Vn{RdMMxQ&S)#*dA4SD(OYuZL{|6xP-$s`BL`@xk;X%+w%R;
z4EIb?B{jDpg+=z7RN;w0eDQMJz2}h`4j1Cj2yMN7IFKh#DyXzfo-<3j6sOK}QmCDh
z<x$O9CTd4dYQK8;5s~q{x7@>(o=;o(c)g~C=t6s~wp{||?rLwJD;_{N@`*h+Cs;o6
zSym?#M^-oiF0IDqvBRfwj#}E~wxOxPkSBH3BaiHEr|Ys$vFUK*R`vcg^b8AaFMsqp
zcdS+Qj`kB#nxW-*rO>W~*JP1nFZ^@v2<C+CY+ZdN7g|gxr|JF`NoMsykem94u5*(N
z<7U0l>nZP=cRJ{4D~DgGyoHHh1+~uR6Ah7mv$13#iQcb{t~Qhv8y%{aDr<?MXvrs0
z5pO(4yLh?q@VxZ_?dKmNZFo!tQ@pPw+icQyCj^#l^tY*0!`jv9zBL7S#VRE`V>R)~
zQv9r84ycqY?p`{O{CMf1;Wv$W&&K|{$kF`CvzN_QD@-2k4^oZaD>^glkD0h}wxwf^
z&8zO%#3WS~;UZu5>-e^==%4#opZ{Mi{c>^f9}UnW!9iR9-}gw)_U`|4$K*fhk(?8{
z)G&p}@BBV}-tRF%nNx1kdJnEvjv%b|*na;&_2%O&l`O(R^?u}KyXx)G=QH6Qem|L2
zg=_?$y>`~p++pkT5Y9Bc%P}p!hlK0#WmRy0o0$<O$7+xpmweH!;b>4A8Y$}Qp<H#y
zsaB(dFT&`ESE7V_q*y2bC!7%6>T*iK?3hKv4aBg-5A9!NE|(HfV_9l{mnKI8J05lD
zjg|XBKG@JPeMH(t^o3y`?+|J!EqWe_%Cr7H;a^upxp?z&Sah?YkDCLP%FGw<cU-?%
zwYMHe7i_hC?Gt}m>%Mi|TdaFDGRVf@(L>OOGla+B5dMcz;Ort}I5J2l?ovOYw@c3`
zAM9DPSM6gdxZ$qM6wJ<wnT(Lc>rJs7!yWI&5=prXxwSv6(YGE%@JEv8+-iSzchom!
zz7Bo!s4{3g?Y2$_u0}QO@nGkF(8jO(nqg^2T4QN6w4h)AFP^dlZwC5r8k^h;_xa|`
zvY-*OuI8K7xst@_dkvcIl@bn>5Bongt$N+gEm9<XRIQsPHSRk8!R6}rpQI6WbV;V9
ztoao`Kk)<BV>tfO1=e1$L{C3cU_wBK^qZ%DF1~M=nbitsuOG8yXLH~7VW_8i+<m&g
z->^MA9R2wHt0CfrYEv^~Q|V8{pFY*6gGV`UTesdwU&OgG;Lh6g^^y!ftXyjFUY9Yp
zsVvI6$!|?kVs@$f_<W<g|KV|IwD(N*&p+Ge7O8LAZ`_xzoG#U$dFo49zxSKD!^FCD
zedfvj+Rlu<w@mnU`^41NYqx489-6kp?E*7TH+PPfw-<pGYBCz$pHii7`}&@opFBC8
zpXzN_FaP+$w3=V*k9Xw+0as9_XJz@<t*OnOsal!KllI+CKYwOPW0PFz&erp-e)2Pe
zDW7xSUuzmJS0`a4GM7)py1s9SuXhsIGI`ntUD$OPN;6K1y*(8(HobedwcqD>=}<6S
z{LL4Ym^|4@BhwC(+|FCM+unQUC!BuVYER)880wvqSq<Ngb{x4*m(G{lx0m*wa$RJ*
z9N#;Ryk9qV>d<y|S7JowG;JhaV148*zW)5?{^CMzg!kgJ!~XfbR+1Mby(FLXsgU1o
zsr2=~Rgq;jXtkZ{$N$+fn}0Z%KHuIDz1{HhK)8y(UTZ;<iRrih`A2SJQ?K~m7x90F
zwH}-#53V${9kkd{o$WTX*v=!G?>&AKFdaR1GiYClz60y);BI_e!wS_~>C=_2;ckt~
zi|@l!K@w-@dxzT%vV*<d+e=e}yJj6yp91%z!z^E4Mw>zQvgucsDGZl?(gjH3<89mD
zeu(QlIhaW#Pxdusl#;zADHWK)ARTnJJ+-bp67-w%&-Rq+@p*3)YLrTu!)<ObTG{=V
zp;HBG+6U8fu|Lau-zOG_`@=@!@)&Z@?OlGgD07Sy_ine0FUTK%?;1`nEUnFB==jj-
z|Lb6wsz35RUo!0rCI;C6uO~;n-_}XLD326>+ukFI9MP&@S!9y(^HSt1-`I#==MacT
zz1ujnb!QuiBbM>=Qn_8Qv92sY@*+>;tS3mCf+fmhgweX+j8R59>(cdPH?rVk*RZT~
zlEZr5w+PnZt3bBjgTJ;9!vu%}IfkTLyLp#GN^4CS1BLL<ms{>j_t(nYmboSA<LQ=h
z@v}F2#I`)1#OzYOe*Z-Ec)NGssZPH?GQKD=IjsD&oKh&=SSe-1l!57E^KIWix08eK
zl>%CErcyx}7ni+Ey}}k@m|Pd9PODTSwz<730;ZSt72d*q+hNKL>48C<>86@CxkTQA
znJWf_Cr7NW-IL_DeUdn{rDf0O8wwX0WP*Ilm=7%~e#9&HN0Rh9D)&!FD~nwAW7?li
z6<u!gCdLM_*GUrG^bx&%=Iph1$`r?b`YSLhVudA^?sRIuvh=O~maJ)8*7j*H_c?bv
z;i5@ijh^}D-ltWj@%~?>l^QxfcfR+wlqTIxa!88n?mgW+SmxdO^ya+fXpku&!P>oL
zwp!DV%XjblnDNC(QMZI2M}+JK>o)=Yc(b6a%L9k+Bbt9U()Yb*6$7P=1FyV1>n;qb
zYFvy@%FmYtY^l0uR;FchH<_$IP?r+#2;lacL2*n0Pe>1BuP!RLr)ON*gJdt=U6`z2
zk6nG$*ILDKKg8jns(GCC_?7tM40V3-kK(N#>1rM)(aA{cN5e|L!dKOJu6#~wUsUX^
ztr5L3Ztb-1>{{qB=YRcGWO2!5;fcwG$ArJ4>)|uiqrnIIJp1#4r@z&3v}_v&t(vP!
z{H`qB9;aOelyU37uJLC}y$EpH%xBE9xP&S2$vO|GR{Y%R+^=P{f9*=YW9JT@7WrUG
zKcJRLK~&H3@ft}r%}_pX^p@L$pQ~D#Bl_-{S_4etLDUKl^gWgRtgZd#rt99^i#I2H
zRvED2Xr}LVdGDlV_v{|?5yDf~+1sRsCer1{jiZ~EmUMGS+X>=>Qn{qM<QoC^`;YtT
z=x!^%UPyDEd6wsvUl#3qul>kUX3Zzaq((4z*Pohm-Tzy3g;H@{LoS1T2WRoI5b9QS
zcF%^gi>JvL1<UuMTSjw~7qfu_ksUERQ^hC6jDmLr3z^>JyRI8exABiIJmN8WQ1`|G
z)}n7MZdM&eH*c_1Uq`=H_o=+jHSC<+l6SiGJq6p{loFnHH&)XQd}~eyramu`!oh4i
zEu-w&#@4p20G7TrMeAJGlGQMZ<l(oLem==m2a(6KI`13!r*?HlpWiUv52G`tsTl^o
zQ0j=~+H7{HB)&M%d|&&au90D`X6H<}nd-psa>>Mq+OdczwDd75BMq@<`Kqgp`b8K?
zzz@C_%7W@t!JgJaR6WC<-;d3D{<*Rjbw1fG&kSQ98?P7|>xp^2QjC?(?MdBmDloJ5
zoiMulI{!v$qvoipQ>w|R+L`7NgJp*b_m}awfrt7v-U0G#NzSRP!b%lyjGrhv)iyRa
zIakmASqgQZMJ2>Ns^YRWzAtiz?y#&<jpK4s%Hhp^$$PHXmkH<WCrdl9LzOd}Y<=U@
zJ^H?`rTR9C-j8x@0S}I?nF^R#=iAiUFbk$hE=H+1d89L12P*HgE*cx5+8ZORa#;Dt
zCdn0ro@y+vTi+K8InL6-qKVE>9^d*dQ~PT8o*I*=VNwP4?NfX^#*QQMH{}*@byaC!
z%NMpJyS(>1Fp;!6<!b5|9`~B*yKI2ts-2lXA63h1Qo4O#l;)J<!dhC4{Ve3=`e(!O
zSt9H+)kXHEBW{mHQ4=y_URyS%k1Aeio$k4GQ?0BeVy0q+=TTm+h2haVczlkAi)VSP
zHSSTaQKYLP<MSy#!XT}_EKN-{5%NsQ*?AUvR3*s_*s}@UrT9LXh*~L5`DQOt#%fY<
z<Z?^lcVWwdo{%Z+&8Pb!1(`}mG%>TqNiM4NA-1`QnMalj$Ky&|n4~ign>~%ZXRXB|
z&Iu>&!j62K94&LA<|7Lxne(?dYZ$r2i9O2{yCd7&O>yEgl*6zz9(YLBcoYi+yd>rL
zELzQmVNK{cZoEB$GnlW|hIZswtd(*F_sFLvpy3m&A>$$RoUDZr7|{qNG$bTeRtn{B
z6?YHao*n*Ua~2h7hXZe*6?|jIDw~#)jIY3Q6K`jo?ml(Y6}4^CYEYS{e>#f07@?r=
z^Wyh2mCcUb0JDCngMbA7Ip)~alo<SCFPDfO2Yo~%R}W5Z)Wt)`=;nkB6hRYd{?wQE
z&u^$8@y&>t`)qHkl{%^K2)~gSd?48)nQ2EDGC;vI5IlG1mI;rhaBiHkQVE%L=}HN~
z9ZvdB^wn58b3K8B>7?XM6Qi4vN+q_EE;##*F>Jcys*8NjqE<5OON8{A1WEa=@A&N?
zKB}5Uk524OKa*;n)>UK+VE@cGR8gh$ktLHk=1yEr*awr)BO;+sMTO}bShMjF;Y}Va
zBHF{b%!txKYr<4S%qhRL)}l{t(3<CcbqQ_F3M#YB7`udTVv}OC_erM-DQ^uMo}D{P
z=Bq0;c2XxaRNu+2h`CrA#oZXL{-hX_{(_bzLaD^_PGvGjrdsA$pPMsV>hrfkZxRtl
zc}DJw8X<Q_zmMY%y|AOo)wFxdGY>sAy8m@x-~q9n;DD5IiEZ7LlRJ%aZ^&dtgH4R?
z@KM{4X9ol8Sy+@;qEBAAMk(|7;1{E`jC;?JnSL=@G0p-({zvWQ*%jr6xlJt=M)w_F
zJx`5k`EvjL%>k6ev27<2`#@Pd{vUgoVAgWLoC@m}uH$NdZ=iytd1msjRWorS66b0~
z)p-qm1x=1H4<iqun(7y<yLHXU_F?#Xf1-3ON?lF`H7uINHaV<Vq@T)Ho9GXXl;x)q
zkf~_bqzH#FZvDWesVd2tFfz&v$44R7i%jS2MrH?j-(_=_eo(jS`CSxOYwfFdD~6{#
z%tH{9c3@I|d!gSy;ghm&pM3RaO<C!?DY-GmoqZ(i0|qi#)Gs^*a;;>_r0FtQ$XWKe
z=0ne)&NhUhBKPuA{`4n12itu{uj7$Nr81x<Inm*s71&6nZXcNI2B$5`*td`d?rDb(
zUqRguW1zbY(=Nn9vHD3t)R?W<@UfXtNRk~KQyB0SIsH(`_!k1naE};SU`B-OJ63~f
zV=|#8zhJ^WgR$V2k%Ga{z{4;|QX3s!UWW-^3Ae<8H<6&h;cXc3I$IJXI|Bw(HjfRJ
zUH>$}hNv$_L!gZJ!BCl%JgO!JVZkdN3`xR*AuC68q>d^klAVkNrv2v$44z64sj#s?
z)GJPC@YhqJP?;{63qHbPTZI;;jf?U3q{K&j@;zTn36RLU*vREbM%3zaT)3ql1-PXE
zq|)&emZ+u#6Y6_Nf^-uFx9LKMt8Sx#Ik7<yB_)cr5d(rEePKfU+qwwk!Y{<K@a9Jd
z8bwEGNFrd`ky_wBlHjm{2{i*lh>Qh8C(PKW+riMF0%?b$aXbQ9Ac{Z^fe|uW!=NAf
zA<$7TA2g84h>F3~1G8>IgL^KcAvdeAQ88}E2&AD00{LAH1}EZ%39UKfBRA17kfcLk
zGSUPvp)@*qRIW=1G|X!uMstyg4liW#Fu~%x0ZUxkkVA!g0aLBZp$fRbB;==E>}s!#
zy%+|G2n9nT3&9YcNiZ}<!UCy~;h<PQslgIe+z=M^2rT606C&g|3Jsn<=BCsmAwvkJ
z0LDZJ$fKlgheCBP#1Y7gXlyv#7Y$xsgbla60`B}W5ej9DhC<ZkIPgMgTo_zn3ak|b
z!oE%@H25BEuX_sI<p&`IxhezudSd^zFXvnsgtsHtgGDZf%3TVE8o_+Gg@d8GAbWY#
zQ3C?0xsO05=^`wS{78^Vk`xexj|r8L0b`)6!xCZIJa8l?1hHNR$+|qsg$RLci9;Zj
zD&%^8MB<=U9ng^$&uLLTdD0N|FEASSEg0O|2$o1#Dc^%NDUVv^l|!9Bl1GJq0x=Op
z2_`!e@^=OMPWVWr3ndtw4+EHo4}zFz!7U%b65WV^w^<-)kq@Hoe~W=aX<{Oif<z%G
zkr2w@?FoY>C4(W>el%pk3*e3%MpREYnBXV{G!RLO(vTxT^#oC(P@gbRtVl^Pq9+VK
zu~n5xf&=DAiHZq)f<VrK7*TSNM~Mu`_i&b?!?~t|p^O3?cvJ%=7=QtVqQynJRbs;N
z-Efg51eG^I5YvOZfH|5tfRLz^L!rP*FTtVj1`|3y1Yd9|!4muEV2LCQP=?eajK4z;
zWQIX@reV-n5Ca4qgZu9S<0gVt9={+4h9gEI4M7m(p~I6SNMP_=z@hs3z!e^dWlg!p
ztzZdh=^U6g2pruIIh4#1!Xih)0G4R{Qyz8K2?lpeL0AYUkZsd$fzWY)X)8;Ee4qj@
zz83;XJ_1KDNQhu;<R&#CxDNqR=TjI|_l6iX2_DNmSx1NJp|}NQXvE0<bx`h|V91|Z
zz9-`)a6Kj-R2Bg2KY9zICM&^#C-#LwtTC7XIIxlIS})~L?`^O^P~yNnn=z4nZrBi%
z!v+n=-3x_gt-~N!j7K28#)F|OX#_IFEEIx&xdBii@Go=>P~ak!_8jC;8rmU{`s3Rp
zX|Kmaz_e&llRv3Ylf>w#NiIT&nj=OUOo1CxNi%}MZPO4I7)6Kz%@#QnH;o*MbpymQ
zuY8YnfiMfQYc>RW%83h4<_JL`OLpaZidiz@+J4?JA>u0Fm1ANM2yhfC3<DLja|@Qp
z4swG@M=mFiQ4_cc9_roLjR}W;42G_g#MNRh1VY^*LF(`aLv{<HkSiKUaUFjE7mZ-S
zu2=wh6M#pB01U5zpQFH_(zw8ZxNuKiY`EupbR;{0DWV|m6oEX}O@`aDfN=c~@)rw=
z-r*sU9@pjqDN_ONX*lhY;Eo06ErLMa1&9b@2Tr60Lc<os@-X*5cnSR!3<)uL)M;~|
zA&^Yh$O{5^B@7oX^bO#b6E3Q!0TZI$5e@|?2jHRjAF%Zu1A~{!B9Qz9Aj}UC7BO2O
z7g(kLW|;~bF-n8dFqo;s3b>wL{x1{=UGYLt(`}Hr?yy8!I)EL()fP=?NPhQx8c;OQ
z;K|suFra!s(0yMJseUja9|cULg(v}X(-;rDju?!|9s{yrN{!Pf7*YY~G8hVm6d^|S
zWMV=p@lNtRRv5%ci}$3c9u*KUSB5a5O)%vn8IbFNqL7Lo0B15I5+u?VAG!P+4cLkR
z+4mH9yRlXdbx?L)xiEpT*#DvRT`U+}T^wQY;Wsg=$QTo(Cn;)G5e;tHNdl}1s)nmx
zFl11L0Z<Z{wf)+>1hB*tdifq|fon4`qFAwg|K=+7x^&xe%rHP8HURin0Q8yx78u;M
z{dkg(0e?*jKn@oZIc^GO^??>uv=8jRuM+|pfRM>}9|oaZfN3IxVem0pSfUX~e>D)j
z-<{-9=K!WNKo!>20UnG8_c8=#cuk99l`*<5GH7t2JNQUaL$G?*>nLdqhI&A4v9HC3
z?*sQH<H{hA<6s@9wqPhwM#gq=P^dou)ig<v;|qA8;=2KN+yH>_8-b*(l<Ub2{vn1A
zN3km7fMtmSBxFQspn<^u2#Rkv9+K374az`6cEx2m5$G6!s`2>;Kxddd>Z?H*^t2im
zp4fl^CzHd1@0Wv`Q;iMhTL1SwAxHy>Rvfr$6#c&e0j#1l36KZoSbxudZ5RweHviE5
zdb}b~OUAwf0C*Sz;UhvJ53oEHwrdAtUQggJRH#s<Adsol0Gd(2IU)#TEHE4zzkCll
zY(0~6eDZG%N#p@B1y;~QP64Tm)=g{L-Ui5uvHZ1^B^DcwpGS{EJtRP~2ZOW%Ae!`&
z5=7eHH3Ij7ph!YTp{}D6jKJy%y!*-vfn*%|w<ZlxpCyVh;BbH)*K@Sn{g(+MoB&wB
z8nOft$iP;72*3`sM?5BSy+S!u%Fe&53kq=ITmWZ99{>A%jSuz(pw9yMaBaac3oN)$
z04}mX9<*6tde`s({}=*&Y54bjc@s9gt~4t~g6`k-S=0by9$|q1NB?KhP0&_+ZlVLZ
z`ENFRz(AlIpapo30fD3j)hDzR)Fw&Lm4Wefw(yV#T_KRJ#lQ14B!Z!$98CEBbxQ@l
zzitpM(lLNZX#W{B4^&bR@KB=EUyrD$faqj51fffR{dq4e9bjY*fPWL5e;#u52F=tO
z0x2r?ZvuJ%RX#a^N%H?Q*Ae)vxd96O_P+^KfpC!V03P=Ecm96>g==f8tjM8qZUsX}
z1EAJkJ2)I9ULpwPtEPYFztO_{JLzk~-IvRO!*8j>;BP^3%m=A+9WpySutX_tFoB={
zCeZjp4wZ$6K&H9;`#c1?zd%kf39P^8C$a-HmEe&>@#_8a_m^JKpP7P;TgUt7p>SNd
zY6wUaMcluim+R3$&kHjC?TvpkbdYrHBLVG2>OYJAM>P1m0tZmq$pNOg{f`*8BZ3C1
zi9p=r{JWk6R3gw*sjy-Hvv@T+KrJF9=?lJpIl%?`!ckBZS!u3wz!o%$gdkzSMNI!(
z1c`tgxO@n#05I=524-6jNH^fNW6(xlTjW0=0Se8PfcY#|fO+UdfdAf~$$Y^F<yOeg
zWf5FCUM&jD`F9!RRUPz)kNIvkcXE1?Jr$2JnfY<__D2}XJ3H`U&-WFD-P{kFJhhd~
zcW)B@swXmBBWk8jy8E+N<YsxgvrX}bZr`TXYU79GlJ_^%H!@A?Q+5;|7m4e!qzBmg
z=CV>+|FH6Eig|5GeURX!=PkU;SL^LW(VZbM@ibp16ZS)8REyyIAn61C*x|48O!BG1
z+O#QlXLSdjEk#;f7iQT<KTLV2Bx29&%LyDkMmdWJYSZQe?!uCCrc2Wq%TipMr!*h&
z($d(ZXPOy_@#_vNR-3Z_lzF&}Cu|zmCMmmicjC0zFJW>MCpZ6dAYQ23MtXP$R*YtW
z0@s_whwoqW7n9vPu65ej6k>jq$uu0J?58%k-${_gYH6pDF3^5wwxcef-b!~pf;G`i
zhecGgfp$mAzw8;?`kk&i)z0v-UrmIIULo5Gq<p+jSsu!y4U2aU)o+m@cdB3M6<#D$
zw9;02k=zwcvA8oI@xwS*TvZF%Fj4ZbQ_IRkK&Xc2hOo2eRDCqN29y%#5nB`;<JsoZ
zQ8U*$Y9IZ<u~>$IKl)x%m)9Vv@kV={0b_vfDVADW<Ungd{jjhKv!$)dTY5bMbf18%
zi5cx@2|v&Lta6WzhcJ3M@4q<GwiW0S`9WBkfYUwRohJV!=tFv4!wq(=&ZBRkqIXNR
zUe68<zbcBRTxd^7A5ORGO@AX`!Pr!i!mL9T;=nTDP^%Syt-<~J{&b1elE`6qf%V#G
z^T#i9)_!*cCQIYJvh*_gHqyH*W?ObTWS83_Q=c|U&J1tadrYWa7Mad$85gB(6EORP
zGv}@*cuQWDN4{UPG<Y^#B4}>V|7|N3J(K6bS);+TPf-rp)?aQ48&~8g&Zr*sB|bW`
zICY&A&>DR5oz`U8yE7R!`b(E1tV~_`z`ppAA?CDeIenX2RCR6%_wZ1hMjJPsaeXNB
z?1Ntisc!m1;Sb)voud-ouk?r!pGfIuRUbYy{TLC?v%(fje)CR#+YirugA$}3PL@^F
zVsp)|$A!}DryT`f;hj3+%&D%yEK{Y`FE0jl%Tvv1+hdwHB7IMBigqhq9;PMii+k)O
zNFl4Oi=62g;!F77njTZCubx<MG$k)o4fR_^tMaYLPw|^2R_qvXkCERImByU%^vmR$
z+!)fFp!(F@#(DEd_)YowL5IkR>qEb-Y{b_b|H1KT;a+MF9Mge}Y4GH5!|BhT`QzOP
zGF!8bhQ+PNW(rJCT6c@DKHGaz8;RF$Y9&oJQ;4(jIGLVh@B3=y;$`vBuXdKJ(WM0_
zh2isOe$(K~s4zS!{Pf2f-}nP>ccaS?mqS!8GE>OwBd2@a_pu6%;I9X4<2r6r#6!Ho
zOdi7DG}BJ34b8A3?kx^kdCt&rG<lA9@tN@)-&ts<wjJk7iyad<^eV<uH^@T{jE-To
zJJoD-9DN@P@_J&j<@u&LNAmgiyMzz)<GM%r-9<9h9}Kee)R7LRW%}LTRnw(T^l)VR
z=@H>v5v0Lb-eS3tZLE*v&YWt|#4n@`uz#aj89A2L$8IEpLt`+jcWYs_1nxgs$`kuR
zKkc!mrWxyxiCto%1wGHg!v*e?YWuX(XNo*&+G|e6%#Ddoq6z!uDL#Ak5@K=r;}o`o
zlkzrNvza#r@X=AS15$E*Qfx8yuiR2)SQDfe4)vzbsy?J_b#WYOO;8BCZ24-hE8!Co
zS-YZ)e$2k&xy>_1z0$z{e3WEZUk10%yL32xHpK4M^i-#6vv4f?3$IkWBel2u-L+n4
zD@()v5AW9)-P9X=?ruV{AP}7rL16h}t2>5EiolHDFLO?fpVdgvs$?|1jgwn-UNn|p
zQ$7AxhBi|#)dW@_tI-`pGn~xn%{Is$hi1wC@iy(o)6|?hF`a^gL#eCJJW7X{s*f@Q
zPmyYN)^cXejRR=>hpkrFt+{J^O8Vi(^O^o-=>guM(GfDLi4R-d6_ZJgIJzh5+vO^#
z4Nc6GzdgpY9_5e`Zd4nSFmqs&yC_Rw&*9jv7*4RsDi$!ateL;pF8L6jcb;>fOt(?{
zM>S9SZ&eAi*t3s^hHIY#FO@cak+DZvm-0XXMxu)O@xi4W0m9ij$V3?LfpBJ|hGkx5
z`mO=qK-%yP-IZqrQ`UK|9|DXh2mQ-;viwi^_4o_RJicUA2z!KoSFeAdtrupW+)7F5
z_}t+koK(0rE%xI?kEc&&1lH60pAUyNKPy9lE9#InAOaGgL23X^Oy&(#%(E?d)FfyF
z-zbtGH&Xypi{q9@4Ltxl1K=Dyfc<Fz?FaP{wBNNupsE9Ps$LflY4I75Mj=epWEtRP
z;oX3fF#tua1`X-(7z@d+9tem)3Zh^QaM?l_M2*V`#HOhbXjUAY_y;uY%It`OXW|f4
z5BNYVARi10*hq&K9HdSS1{{9}1Es+TdN#?N5GZB%TEhVRr5q4cdr+8H072`$0XUL6
zCeqCj5NlN;qyrTuQpryeC=EdQK-9{k7!2ilR^doUB^3PQ7?7(<$pH`30+JZ$UQdD8
zCL#kkQuqzjWE>5O^_Cl`<v`pZTtyUkflfw=Rvr~I83GLgB}&JU7&-p!AyAIE<$H=&
zFyNjTXh@5q8z_`4xMzFgKl-Q!bUaK3Aj^R+)4l);?rDLAbigG5lLCs%aTS<Q0uXzE
zB=ZGyRdt4#$W1xGAi@1(F4T#Tn+7)k$00x#bV(w_fJ7hz)DC{kzYUL)-!WhdH9*5*
zltV4I;Q-6s14IuH7d1dhX0FMk7hq}Bz+<36QOAV|Jsib^YY&D(CxFac>y2aypy36y
zZgcwvswfAL8*D<bS}EWcNkAvBH6KpUfCAp)23(Qj^G~&tM8EE;vA~6ZRFeUbh>RG4
z^s)y!hy*yH4Dj<8K-J0x<VEaST4Y3_qH$0~q=2e{^<6s``JEn&jsw%?phs97;N3v6
za$onjz#F%Ktn>@CgQzVamQY`N0_bg^9kcMgCVFV_eMM|Q(?J6)0@}DpaA6W~cAO<P
zq$2YaFl0X%+z+tVX28rE?c`8NpxwqZ0rHyyKcrF%<V@&uD1>?m$SSr!poEUV`+$DL
zN&}K-90IA_2U3Hh9Lm8-uE(m26jk&Yw3;>O@Uadc>%Lbe06ixf;J+B47X{MrJ0^Kl
z2RK`16?ETg2#ZGGs)9R!nJbuBA~Dnfkpvy9MLI1C1+F5M0;=pEDj?xi07YyUknF%~
znHJ~|DidMQzzkruzF6?WE1)v6OM(9MS{Xq@_W9`H0%<4|Xp7*)<?EoO0}P4*8bHv3
z8#f{>CIx_!sT~T1L%8tQfY@t)qC~B30$%f!0E8hN=qjEF<k>Gk+9*I%ss}C@0U9G9
zNY_MUQUcg^u?c}>23LxV0m2-P4!698i6o@}J#Y}<_h4-nA3!8qJf{bXMhE`GhI?Zy
z_oc&1OC!mU<K7^Nk7L1Mfv_Mi!-d;7V*v#h9WE3LlvXUjgFFo|;MzqXEy_S_Qs}}G
z8+U<9$p`3x7s7({1W~|F3zbEI6jjCm>eZSYN-`Wow>aR)sesJyfT7RGQIp$XL><5<
zL8v8uxe3IkvVUS}oiPE@AubrA{Rn~{WT?i{KZVU7ur_WWL=_bRVcil3-o%0qPmgm{
z>aiOEI2DD4JYdEJUInq4BMR~d<d7FwZ0;FQ1580+R`LO404i$iZ-fO_44@CQlt7dN
z^Ux+iY3S9<qa66I36&g*wgsH<6WGcKM67N-0Lc;{1~URve+L=wP6l($WcvtZR22c`
z${Zg#4$OOctxJV5$f0V$4dg*^TNw}opa6_auM*fh1yISSFd-TPprF0XhHG;WBMOLt
z6EHwpyEOyVIUJ}{KwuTB;R70+1V~eS5Whft4+i;O3?zj{G^Cp~CX5HB-H(D@OKpiH
zz>sIL2;{Yl`lT57XB^}MiV!s!1qVVh1;{~S;N-U;PCo&mI2<r3psDoXyW;-^x9bgp
z9+hj^R2vP*rXV5n!k`oYRX=b+Ft-4<T7R90;2x*bq0m#Heb<!&!d5{KunUEaOtJ?2
zaRX%K6*iD&9f8@Z{^^7=Kw&t0j0TSyxfY#(KEMy?7^MbC{6iq70d>j*Xf?xN+AV<G
z?pw&CazOZ7eWypURvP`KTF7Hw@DByRsz7lmSOj?4gNKUop_4-y13lo{8F@ex@K_dS
zxpoHR3hDyRwV3k?WRfKq4v<_<qY!9}ALtREfsd!aQh=^a{r!VHYStY@1kg$XfqzpP
zu;Eb(BmjVLkw{e%WS=XL0?I**zitBJYY`^gQWh?UDkuP3H^X>Hx8iHjTN=pYJTQ1V
zNG)1Iu=~OR*24t?%MRpyJq1`75!e~<1pa^NsNruX*TZQGid7RPeDGSx&IBhMHe<kr
z%!!etNPwL)px#lc$fFeM(c!K`Ah%nA76H57D#8bv9ncP3fxk|UK%Rp-bWNw-M4^me
ze6U>u)|>-w$qHo1KLCh&0M%82K!{P^1aJlTbwLs)yqpyP0ucKKLnVQt3ns-31WUUG
zAh>pb4|mD`9bSXi#R>DTyH-DgZ6E^xaB-F(==`oh4#-Xb-TMLyK#YJLofF{L(|cji
zZFE=AQ8)=s*-O)DY<;)C1wqe6A!_|6zA(5bs3&nAAi5C<3*)Xqc@#ZB;Mpz!WmzDH
zmeN6%)61bgV!+^!fwJ%r9muN2zypTh@BkeGItUw31j_<sAr-k>Fd<0?P*%~<ftUj}
z)`mcYt1&}muL=J~#iT9<JULYrq=XnS5ZDQebbtxXP6R`<=wP!$92YLSCD+3$4=fDa
z*;I=GKV1S)i;n}G255XAsHTf_Fd<DeTF^m&dBtr43vS8xNQ?r_8kEH{2H;*GvQzJj
zhd~C_Kwtvup#v`Ha~|O%`6r&!fPxG1#uRi6YGS}EzzINW?6Clq?s{YIt09o)T|*#`
z2;lhdV5><RC|>8_3rTPcVt`qQ0K1I>Wm*krsD2<+twB(L>hQN4LjXm0Rw(RmEK5oP
zH_8zsmqBVeFo6vWRnTGpRRURJCyz1)l}}|HAjc<A%-MPW>K)K1U2sMiRAdZvOR&)~
zcD+A_Mhf&ApwAcsjB+?afW1c0li7d`h#w$nfVhf}1`OO047KtCmB<5ZE3HU^p5+*n
zIDu<006=gFvWNRSI6yc8^JGY!qQUFbLHB3}AO(o`fA=6zJn|@Au*q}1ohb}-dt;C*
zT=zntRc(-Bm!K||tpc4A2v@m8;EJyzAPglyci;$w;wq5$@?al{9Hf~Y&|z4w4GEL`
z+v2R~fw<9?>yd~98(r<7GP{8e>kMdDN8LcSHY7&sMB&1tw7@>c1!y=bfots;AQdc1
zgoRV>b#Dfmqh_$vBu9c&lJx*EP76z11>I8(5UU>UVZakhK!mk{&IyQ<bxcR#1kf9j
z0EoL%g9&{a0hTR$44em~Wf71;gYR)cBX;d>fH9>&QKS~QJ{9y!exP4UN&(2=4HneO
z2oMKsWO9QXD>Fk!7WCpFm+OIM9)=D26l_@HJplYW8?<C#BS|Pg7y#NB*iLQz5C&95
zxxXzV7x0nD80dz9)-2Ka|55f9P?f|?qaX|pgS!vz?(XjHT-@E=-EDApXK;ss!QI{6
z8Qfv-eE)kZZ+G9@y(g#AsidmYxk<WCb*1W`QXSa$TA)Z+3%o~68t_{jaDTilfJDXy
zD!ZAqpuv%0YJl6iDHrfH3)G?!Z2bGQ3{+g^19!Fo;GXCY990b9gj)gyYP*0p{U=Uk
z{sKNNP!U+R@K3W3e2oHyMHrymKBo^#EY2kX{BMBw6+rtzoXG<e8ts64G*H-ngaqP%
z@3Vhu`+pNkIUfXhbOI>X?%M(>Lx2PMpD(DO$gQA8$#N9rwbzV`*HWk46<7YMw{r-x
zDsuiAU4hcJ9T#1sbFL9fC5wlASKQj<cht0H@pcbzZsYp!c==rw(|*QNrx$Kq<`UTQ
zquOa6F8k#O=%aCip%g9?%HD;6eoQ7W1Q}rp7voKRp&xAX&m{;Que{2pQFkvsFFk?e
zC`U_|O|P5bWLJMp`ng|k4fT)!OGM>Ho<A|vPK?_QBAdrb!0MEna2!_GLio8;N$a$i
zhJDB3HWlT{qB>p+jVrGxr9B+D?!OzdRX*UOjDe45B_nssymI2pP*$y-uT48$z`|EP
zj*f$*LI_?h)mfc30WeEk#`2$2d9!E3UEu)EdThF>E(ub;c`H_0m*OsR-^gV2dX__H
z4_On_*T;qISqr9@Q`59n3i$mO{HV3;XZuv`b(TDzW%3NpD)Y^BZ(*+vFX)O@4bxf~
zEXzcRawN#^Krhi!2c?>p8R*KZ?rVN_xFuFU(4wl=GHk~Pfz>E#JgNn|NKlxn0divL
zu60CU<-BY;R!u7)m!w)AeKHfrXwJ-He;?3|jeCD2cyiGOr@Ab)@(xNwg=jTvEOxTN
zpz*r!&cm$Us_k)3olGdU%F{EzOR&W%ifQDKP;`zg(vEW~pi<`^%{EvkSdW5%0-cQ`
z3f^(A(D+*WoyCx7q0YSP>sv~OoPkSoiDwwDa$pS)A6gQPSsZuZZ3LfKk;+Y&v=-2p
zpHf%G{gh_wASez_amyVIt~<P3r7S8MXs8~cm?XJuN@gRwoJ_Oly0z2_*t<HU<6Jm!
zr`^#X6ZpzTm~J=J3nU<UaZh~job_j@Jh;h}`_v=-vb$|&&KtC@)&Bgr319Va%)nmv
zVa>_k%+ves-|3ao&HHh*;l4}DgSZ_wezB?6Hnyd!8)oy+!80w(UzO;)p3|KSN9f1f
zi?F+ocwBUf`1R?=ZRgG1;m7IwrY-$N=aZL{TStGi9eVdteW60d|M6+%f&bpw_#0;1
zY1s$qQBCth%>F%k<3VuJ-Ou%P`EI9i*VR44mr_{oQ|I|J5yzdHhFZ7ax+SmT$e-t3
z<*`8Z<!|uUvq6vJ?Pz$Kzc;gg`WYws_JKleT}^*ht3um@%LKu@sLtf)oj_yW!~<<J
zAZ)R7{O*F}?%?%ED*J+>H@7<L<NbK`VR)&O(6pmPD|(Tg;fs7vl84aO>y$!;v~c3k
zpKqC9-1&U4)0ts;KnWUks<wZUxn@&qXo$Jfj;glg&6$7j_8LJ!pX<$_e)9hA@2FGw
zs?#t-V|9f4%B4H&4MOV!f-xcgsuhA<?dfsna+x`ix53=DoIo;wrNX85eKc0)wrY=t
zKGF?fKQJGBS{?x943X!TnQ><LcvsPg(>vEYS`)r5)1j%1)}_QeP1RXsQcK2ktt~Zn
zMQLf2)#6d!8&6i&ur58Nw|H9WD9skf`Dh)}>?l*xstNR})K&6nRnOn5YTYW!|8dBm
zV4ik#zLj<UL+v(e@UwnN{&5^&F4h$~{-wEBxk8|!7SrW)j?cc0;hCiR6x*fsU=yv?
zFzB)xU*Agh*g$5}K=#`3@H@kAnbw^Sl=6`M+A6Ix6)VMwC-~RPF4MDlG6NmDjLc;z
z?~soxKIR75;nH>HUi%vM^x~t1-0Pax8~$XfM=oTkKYea1cKZucZllg#`)0)P16CKZ
zz@z@nzT2Pz%Jc(b?D2`crGpA|R@f{4r+(|s$455-)zkgcl4N^Y?{VH_Qe!Vi><&Bg
zsvXlJ^LYB}dtLL!k>0oikE<`hnk&bDaJ|&7VD*UY5~ud#HU3S0!ME*LRL|b$3-v)_
zl_S0Z=GT^<ZBCtnjkA|$bEbWVuIYA8t-g5>156ODwj8&dSh?IqcdT&jLwZSGb&^Y_
z_H8olcKQSZ@fLdlrk27qM6-J1B?EnT+rCk@z{LDj#mHhE1`~yeH)C+rir^<TzfZ!%
z3?V;q#0x3V-p@MoL-xss)V~adF!|Z#^?5P*S;6l^?)`ydysrMTh1z7QNtNltxnl2i
zd7HMkrv?_c>X#HcySm|ZW&a?xu5xI!T3eRdyK%kW)8pmpQ)9Qe05pTI<Lgryrup?&
zwt3a~)w{IKCwcP5$<!1|n#l)`F1v(w3+aNEd-K|TY9G^i&+8$B%CwEF7J7r7$@qO~
zU%UO@-cqeg_gjuWzhmRXkwd4}Q0-5xYyQ@sj+PlO=0y|m4->X$8HD+{FQEU)+S9xq
z*&i+t6{kNz{*!IV@VRGsT|t!}`vv?bv(vCYAK^mGj)Boi)62>IQiF{5T(s$M^5TC2
z!JMP`&OD<lDdDu#og*<}&mjN7TX_=E;9Jhi=il^6Q(-eMDRqhqW?Bkns%zavKwpNa
z!K|)}{W3k~f2GutG)?o;1q4qA!Ff4x$NVv?_5eQb$25&;K##}cg;#lZ%J}ZaI41?)
z;g|GPI&0STS*?kKE*}!u`}=X@=dA|b4|fDF%16V;QtzyX?K<HlJ$<)r<C%)a#mG_C
zps>TO(f*t#;+500CK>L1z$rd=$}zHwC@tOxTQ`-mUIwoFgtapFAMLAO=kBat!^}CI
zPS);NRqnDXT=l2y$x%QVNH-q2N@~qAm)d9=hGp{MND!TBxncMGrFsmCctd-{pD#~|
zn0OGth%B-6Q)`X!+;&CJwhiC*z}l9U2Aig{$#8kyp>u7-y~%KCO;gbSFqM773-_g#
zeIkziLK_#ZPrq~I^GsY&ZnAbsuW9YDa1jBsW=U_Mn24*j{;F`19<#=+&7%3LkRAT4
zJ=PUiYPV?qBUZ(Rsdsm@xL3H?5v|^-+qAY@xR@DTTX44~cI9g_%l7+{DZ2K?K3>Zt
z>cc#dYFSUUE1s5l@w0Jc;hHEq^C>~>vLkxzDN&4l+aE)#@r$;>?MusKvm?3^h-(2F
zNv%2o%T++y&2;*OYqI|$0g@lSO%t~==~-+^U~qMQ(K^|EX&wB##d<n@(=|!7ZZi<~
z;5|}!#Ah-)hbt?yd1{uRuuL!|(KJ~HT&$`zbK$z)vaQ6vYt6$cG;<PS-m;y<zAI=S
zW_HiE@h=+1Z{m;X!D1cbM)97S#kk0i>Cs}ZDZVoNYY$MJv#pO|_D?x!=ZFnY8CmD?
zf1c9w4qrtc_>L^vKSTIl=WL&y;@h=r1$wrOds5F4`<~Jp4_~*M`HpNe9z{5wE@c(o
z=V(6<k|*S4uI5`NM-K(Gbet$qQXy`R(^e%iMu*(TlSiwvXm-<9C)X(0atA1q6>>K`
z7_;jHCNtO-Xpzwg_pABTSCLJvIc($GnzJ@8mS4=5<<dAf@a6m3#LS!tGdPM|qbITw
zJH?LP<ujI{3h9{F-$uHyA9PH%CIaY~vv^GP2^U&MF0M%K%pPqLJz0`lMr^KA+U1{y
zZ7yOn!Y1PRJF*`IZ7*mp8AP61S!L{H4LDo@n-mN!F~wOO_SkCwN;#P4$-8vS+yAg5
zIwm~|`qfuc(GQUi7#Y{em^$K*|EW`VKOTG~^^Kl*8jYr73Hje~%)dVOQ_I@tA2^$S
z(U`4G7S6|AZ7?jCnzx+Zt)6;bzOrmgN;E7p^GR+v=J^I7VoX=BTEBX)U-d#s?QED&
zZwHfwEmgN|^!7Bej5ad>Ca3+&hPURYNtEslbw9M0JxD&TW;{qxuYrK-9}uvgU9qv^
z<zvrt!=S}kmy6{{dP0chxP1l!<yRnRc*BUjRFBQFBpfWPUtjPbc>t0XVYZ3v$0F<k
z>tDlkSl!lH+3#u-!$;}Ur~mkyV#e6vd|Yos-1WtG8no>L+%aPSB$~a^_wV#U4?1q~
z8ygV&%Oi`|#Js)Hx*w^VBpmL2&um5yost{Z#Ol4K9Mh9}jDE4IAN1dzIwcqFS0|m1
z>9KlS3=Z7ss-N}X#QmHNO>KcpbtrE;F;w4cLy3Fa^BY>=hU(~$Ui9Dqe#_qyw;K?5
zkN#0H0;xQJSP{Q*{tzDbz6-MGCAa?(UTr}%rqODz|96;2YqceUvDpr1#-P>I@;^eC
zC;Iemli9WZ8{F(PcuW?X1THh+s{Jpz|7qJKF>4^jf5HEv`^wd0^p<L-`-isE`Pa|G
zmW!ZOnY9npe<=U|prBg+p$P0&f!)>J_(Pxmad7yk$M`lndHJtV9?w5I3IE@~{vDjf
z0U3@i<NvE@{7;4bml|-q-+(Ost(Hx5%$VNotC;owj;jGq+H=d^{|gSdM*a(DSM=Z8
zCG!0rxTi+Ap>1=_iMT`;l_%g3Kfhg0wfO@1PSdC3lidDi=0C0EIKI(i`RC~|^8B|&
za8<v40_^rDf2V=l1X9b0PhMBsuwBttt6Lwh$MMCV)0#`21`8aJXk3N6<W7z`sjFOm
zyIyaSx`V41rmLmSWmFsF)83}HL-CKVm{MFRkE&AKRUkOGY*(B2cUvCs*u1Ve6+hdm
zJQYXSt~~W(wqLx@+q`VBd-AsKNc`Js)sgrD1X~a`i}zD{^b<TK_USEYczFIy_O~mX
zc0@LKt@-w$OY?~Lv2$Knfj!}R(~GsKDx*n74|5#-8XWqXHTI~>&KUR2Pp&><%{@W-
zh?+C4_U8rFUS@$kSU#S8UOqJ~J;T0S@PgCQnsJiH$vq6~`n|il<7b^q!-pUX=Njhb
z%g53u);AA_Zz8<Z((#@%&J_2yd#`)$zWbd$N85Da)1<@g#n+<CMR@nBkiNs6J$?Gy
z*V{wOdkn`xtGM=(t*4!X50|H2F}gWT>!tR%0C}((_wg#@wB+6y`n5`3gdg$%mRcx;
z6Q0Y5w(oq{BwUYz+t#(m0te&m3mY{I*?_o%;+F#pEWSozKvqw-U{245UVPUK338Hg
z#Qh2wAF3LlP~c2wUGMew@i6CMREh6Qi4RW9w&IxL=yZJjVe>|h*GqI;rp`R>1cuaW
zBPiFp$Xw(Elzvnx+3PbnSE~R@i0&A(qK1`xv2s)ip5HgVGj}YZi%+1FUrlJ5L@Ew;
zu1M-09L~43EB9EPj-o_G@@~GSH?Ftc@mFx}Nq!mqzX1Y?Azzb5oSB)Ix&Hy@yq}H6
z=O{AGEEN~6z4fQAprY<|IbU)3^zH9H6;X7L7h@ekcyU=-g|ngwmxE?!yoc(a2S=Z#
zDhl=!OTsn6(;F}^KM|*iKe0tP_f4{V=9L|e<U*}@(%8l#fQP!W=9BTa2Uh6Ib5^G2
zaH%-Z8Dm`}h4_J)JKX!?h|eKQI=Ktydtetd3IXy0rPTy?`R2Hmt?0lO&QJH*@O%_v
z3Tm??`eC?GCQXJPCqXwy$c!9QEHlQI_f0wMTviZtsg3gYSn-FtN+C*Mm8M3$1rqfq
zT%2AOMY&vM!?33rBwoMde-1Pb#SxekU{{!XpVXs!g~ds0cE8><g?_av=%o8S?Hj@g
z5VZViS@7{(HiVPC_`_PieS38bKhjpRfg`vv5UY3i%U-*--P{=l?!%*_zjx#m_G>=q
za(Ex@Q-DW)*IyUpOMypVSAG0L1)<0F;WE|9I?#~;YFfZi$WG<_YaNRG-9xiKKAh}d
z*86D)<9uUpR*5FzN1WDRZ->zy_t84P%)c$a{pO=1`(<7F)ja?8dg|}@3h+qj);i}d
z&R(;sIrn5)J)_eJ%gh$AUbotk_x2#*)x4^d_~gxg+rIob$+{?#{iOJ?`$#}oxPSL-
ztMT-<z6)iye_Hf$w7!dF2fROVFyv-ISQHOq-qivwj-xMqW@`cWqk~2tMv|3uskZ{j
z@)O}VsvVb541jFBY&`xhC7Zaoc7p`sjT-~lip$`O2l&e(&-=LE6GAzb(Y#Gff)yKs
zN-yl$hxsc|-#OJQ+xw-*RIWcJ961I)lVzS=fF4NSryXp<UlfS5pNRkb5dA;9T_gCP
zx?MALw*CL%dab9j^|g{51cWFX1cdT`$rtG7h|a;mnBKwWKMw5wU(WAe`g*(L4%Z)V
zACzH@yQnu2IlZzWj!x+74Y!{=XRiz^yKz_#&hdJYRtp7Sf{@Khy|1=*`0=IZLJ4Z$
zT=BV!P$LIsR9>BVX~@OC-$=~9Jec|FPo*8Zy|8yQ0DZs=&tg_pWj(w<WZ9DLbNZ4R
zCyGvQubgDjboxAAoS&>eocXU?;qrBF^=Q>_n9t4+62DFn*%V%14ApM0y<R*UYoDHb
znx^6ENGy-9)fU<Q8u`{*7=E<}hWNa5PaE~w)e%P@on_I!Ccca-Gj6jz!J)(gSQ+W5
zyI5q;WGJ$7^=wYZ93K<EK3eDKY5@$^DWQ*BsM*1NqlbP!3sWzgMo3tGeXU~XdEakj
zShvnve8|M8I?lTE($}{?rV$2645rR(*|ch84Idw0Z*}wN%!0CK4X#>!yy9^lf6|)U
zx1>ey8wd41qx)H8eAVaLx4L2f<d~f|^+omV)ZRc7sNE9J10K^pU+iV&Fkj3va<r6!
z#(i5a*Lv`frO_2qHK*+zSM!xS&b2q2&06GnTdFlz^3|i&)@m}c5>utME`#6xcv(N*
zeqWy#;I-amSF(jE&Sd~d3>3TDU#y993^-0-a$P=o6PL8>qq13R7qz$;*GIB1F*8tT
zzOWFUc4=?x+G^BAk59g=)(uK(AIC2(;TnM;zuGl_-Z<VDbrV^&ENe8LMEidbYu8Ec
z$auR!c6WDF>hpixu8v<{-r6^Rz@Z*i2V?n2;UGuSR@zlUI0n%td9*A!b~NA)i<ZST
zg(a*OIrX^mOh!oDoxwZuziJKViI$Mnb1Nl=k!KcEs@WDTyIC#|rY`-6?5(BN7Rwtn
zpY7GR&(R&#hUE@ugrhiIOnR)VUAFGrptsAeSRmx$nqHm-GshQe_7$X2tvV;WbW^Jy
z<%RJdvTCRg;o9C3wbrpwA8*`Dyi8Jfo2x^rsY}Dv9>jmu6|XXb#<H!AX!Q}Et9dlD
zeXHWNN>kiLAvl|mI(cf*1z?`z-f|I}5hc)6Y-uWMm6_j>WgNO5Ry(2EYAC66k*$+N
zdzddvxv=#%fQ#eNZmmfU<Z)sP>s}BYrIF^gJ|=M<vMxDZTPfLSWf%YY^0Vczxki*a
z9DS+=Os9q3g%A;}j?WR*Wy{--DEW$+`!{yzCp2kNlCmeAw3Jjh;#_AhS1!U+!d|wj
z<YCiE78U_r4O(PW{-8?w09h@V;>fZ-{^r`GiSC*QKjql16Pv1hkibE@Jo#WG<3dO1
zNi;)!Xr%T5d_<YL>uRJ#);!Uy&>|dasVFh^Jp{9DK>gFRQLC_X_kE{*We_-m+LZ;x
z(T1pfHd<}1rDf~GLyH5}fq6E<lm)UT7{hOjg&A^Dp0}GQDVwF#kcMiz5$75_f2r|G
zPnNoG`*>E=o~Y)$xMddF2=EKm76AftO5ql=_YOUcW4B&C<qA>)3YidSS3xHH_ALr=
z@yBxazdGNYU2;$E=1=N|fv5I+UIBm}A3v8wz5)h-|I@{(|JUt_u-{o-XY_RL*XhY#
zpP3FozyZ+vaisIwQGRo%F#U;ZH@Dm?;Z~1*S$tqXfq%tXKi#>-f9-c>e_y*fBJN-E
zEU}y3WcFvaee<y|`Q&;aw653d^ZlFw;P*1T?fY;aKM;+tg(;B7Z~>$A03hl0z2}UI
zl%c3EdcJ+%T`k-0<@CSVV<_AH`rRwQ!{v{XvvBt?80q2k&dBYl0BOlUkp2F%_9MsS
zK7t`zkB*>C5RK1@SJFk=&@;rr%}xHx8Ai6gomU`WYQ;x#4DoY3b)wQK`jIih4l}dR
z9O&L)GB0<U;GK^9W!JxD{hIV<Cq|9vb$z?gfKT}>6v`Jb$LC;)`{l!3;p^{VD6HyE
zx(%b37UudM*<jJ@?&%GnXgur0<nw^DkWhUwyxDd{{5+iE4sPo-C4?ZSP14b=zFm7d
zZT+Y(`f}B%+2_LuxA%*5YHRxM`QUBeg$b~KM$SR&x_Z2taKuL@os}m=E`-N2?rQDv
z2M8xcZiH0&vl4$o1Q;+K;e_)beC6NGrSeq1wDj5_a`AleY+F*=(63MG%(^>bJc>p(
zUFz)@S*Ieo1lpYv7UScXTZN7=*4hr8KMyc4nfz6+iVUn;5L6jYb)aNGRCHj;-N&u}
zMz(Z8%B!lXO^pBL+TdtSl3cfs`PsaU#k5UiHQe6TZMnfQ>nF3pvFazY$<Zt_v7xcK
zHL=OD-wPuVYg2(7hm+9~(Vs}7;}k+7adgQc5o`4i3Bj+2kww_}98_`-4iFm!{OklC
zVt&6%V*v1T@psZzaul0NAVwWd2Jbi4`1bPg^V4A5Esq!7KU*JD=B*D8OQcO2`8LJH
z$B$V#lI~}qG-6WZS^5XF9iBwaZ?;}hc<tO;V0sg_A>B+RvE|egMNP6hc@Zkf>TTl@
zqPy}zy?*!ab&6DZjKbJz;h|p|mZ(0GxWAn6yesk`C#C9~X>9utX=OhcxtyiB-Fhi|
z{aM!YIk@lz3-tq~VcMknlp*<DB>bl8CQ#C3xEE$)=tk+iM;hg4dH+P=vu|>Vnzreh
zZwq@#9`EtFly<49`ZS*KJZnRu<E7n#lrp(#<TSfwQYqS%Gd;Bmb`dsFB>D$aeJ66~
zz3jl4Z>>!dxn&<ux@c;HY<;jC?z(0lhqOwWYo_Fr*0PvZ3cKMgb-&zg5OPB)b*1nf
zwrKLG?2)W;s>Z#<-IScr`GQsyerBl!Y#($9Yx}6}D71PRca6hILu3{wJ+@GEA^EZj
zQ&6RAO>)Yq9jw+!nEQO#k`1k7(%7XQ`}bm4y^}Cx3$To_?CFFwHCaCpp5idgY;_++
zn#_(0i0jfb-NVXXT_R+t8Kf&j6_R$5R2#7imEvrfp4;i<wsYy2W2#~T9iYOcO><!y
zY=w-WmYQ?TzlLxI^Rl{-V<T7`q)Lg=x!|fO&tuw#^H3{7P{IUc_K1B45F9bAU;pqN
zgsD=oA>kQH7XGYT{#lt)ACqsC2$O_K$U2$KOZEKSQRvmk=qT6bmY6|07~dv)ju0bZ
zK^Rs$wM5^n$#Y7$8keR<b*7}UrG$<Q%#u5Sw8Suut=PW7sBe{+tzy&>l4zfI3Zjnm
zOxBdzd@BoRW+R;;6SW|OHkU_)TtZ1^lP_%}yk4J~z@Og#t)2En5}s5piaORNy_i+0
zgqn>c`IW*%aU!6pbiA@3L3~X2hzdbN$Mk1^W$O2ODQux~S#$1iFU&|KQq*#H{b+5{
ziM^GtUk@-c1*+<b_6;)F6h6VK6;{-JT?)?JndMmRva*)aa4kunm@uovG+KH;)hb?i
z4=5wH*?`eq@||Kujx%KgXd~2q%>S&lGBd@_nlMRqANg*(VNuTE`Lit!mEXm5gpf5!
zO^*ZOLz6$NW>iup@iz=<@n&UE61qu&>m-K6XRP1%?BM)KS%lt{#2+Jg&-v^WlhY7B
zDaVlOU@wJDqu?vBB_{bPvNCF!(}D;gzhn|LFtif2Ai$+sh;Z1^R4^+Q;W;5$`s~Q9
zPY@Ama8R0PHSvo_&b#PW)92Ff6Tl}(VHzAzy|*hP9@O9sOAexwqZSJ+M)VT3S)`IC
zL`i>)z5yiH5*X~k=j9N>btNYbe#+5VX9&(^lv^dCClfIfXEH;PGY}C9`k1~@>a0rl
z2S{r#CA^u5FnMN{LHH<@o|f%}7LyGpRpM0&`BXOr3b2W37sHdVs#&RI-5fV5vbF1#
zyNeadyMUVOrmroeCZgBN9we!S8ATVu@32vJ7YaZSY9Aapo-nARR^iIUrE-;?q^m`-
zSnOqxDvXm_-u@LE%T^+L32WQI-(z+bFtAof7LyvRCT%#CXn<FAn4om%S2Gian^P<o
zmtHbg8Q`3=7r~O%M@e&}(gdSqqdaF0^;#|=J1+CEo^x?3ha?b9)<(}9Ma@Leg7%2j
zJ=0D8##ECFR*jIckYsU~GkPFvS|H;of*_CcT$s61gCdF#j2G5WZR{coD+D2_%vG<0
z_IE2NsGJH(F=bJmCRK_=3iS57d_FtrjH(d+7<G{<80cV9^#~Y?laPFZJiI#tGp3th
z)eoVp5cd(9wSX?n<l}x3JL8K4GBx3;h*gb@0aEydtU}`=WAchZEZb4m0-OUHs)*ZN
z9JvmOq4BCxaAUe;QllukVzytL%=ZoDi4235sYwWo-)ba@g?`sjf~=|r$(RTgCdnpA
zjark#>+-&QC~L?n=b|h|24+=A%OEHbUqog4DVqgMQgY04HGGps79|NxplCvpiqWEy
zG(F1<+~am$8@578jxG@3Y(gw_Ffr*OWzfv{foM-n-ds44pbY<9lFh6n7qs)!hky9H
zB-Npek!XI@{X8sQCJK6D#J4#*N-XR@*+j!~^(}$62V@@=M4X9cQmF?c1kOh3j59QQ
z0p(=Qk*cH0g^+bh$Lg9<UK1H}?TVl@G<Pxg@OdTqgb=7?@!~MzqmPQ5%b8^kzb%iR
zCrPQIG}`I&eHz@rQz!Vvc9k_@P}xZDS&yfG7Ez{gf|*VqK(W=SqJ{b4l#9q>Q|<nB
z70J*`4yrj=%s~dBEK3PW(jXtjCz{@=gM|%l29ZJwqS{-mo^zG15HCzOKF}U5ry>6t
zL|)$z(vnn@JYVrUcH<+ZtCDKu&oWh`nr4(`Yyf=;S$kgFw>0Lc_zpuo;^gAIO!oxz
z(NwFjd5S+)NQcm3WEL2OC|`R0*uN=mxBpU@g@>er>j^u-E5s#4Y9dT$k@JvxY)p&?
z**9SSKHF7d#Z&4M5%v-L3|s+!3%BeGFVSoep{|E5A|?}8j(k_?3;f-yx|#6{DhXZl
zyG`C#ZTE4A@@0b23ZZ6zbmSLCgchTD-jRzW5}7VdA&+z<O6ng1G;xB9f%j1d98r%W
z+y;P$KN^<UFm&-fwCD_!y-ip8;4!53D$$LpsP;h~h7^Jo%k_?DZ-WX+h{_gBMQM;A
z^049vqe`V&xT>+M2kx_<K1d>DM$6u`)-ZHRoP$hxwz7RYqn{aj>O=?2OIP5ssh}n^
zFBrArb6M#+%nM#N?1iTArvdl^^h8ol>Ya9Z)y|<}WPjNat!{B4@nu53H=}?9BJ#Jy
z2!Wy@d9`7u>|m+6E^c8MUP5Mvf!JzeaAkj0ZZbkFDx=FPG;)I1Ihf_3W<_%S<uVGS
zZ+P&MmlrUHOmkER{wLp`+dz4OKaMu#e@O#Om{B^w9Kc2rGe!zUg#AL$;7l7#Zxshh
z8DX=5Or=3My+#92JhAcMVjz|_+Zh-5Bep0Rl)NoZ_$0;L3t8Ml=u-m8u0u@F$-ceP
zlrtKy=Zqd7_%M5bbAmvM?gmV-Tqh)qkkAuZV>rx?Ed2r*>zLY5ihx7oIq_yRfQSXL
zcDR~yN<1n64RDAdM+Js`d;6gv^=<PG8>|kR#n6H9NYOYb)1=``>;W6X2g}Q<S@OFN
zI>dg{%-^ocgo^t1X)mfT8EFr)*@I^Gzo%l0XyhUxb0sBsRQ59T=<{^^E=pxm$|B5K
z>S`4Vp5^(;9k*N+cGVRsoP%Q{h1AF&CWSFef3HdkSanS)HLP@C$GZE#RWJ%gK^BKF
z>O&VOuYaW!yr8L!hE2s-5V<T4@H;8$DLmlJwKSAEHA%0@4x+n4GlxYjzz(UiOUY$8
z!Q2&rbJoFa|H!9R7a~q!u%t3*&SZWdP1Con%$5eZd;|QPaB6!OH&?~!i@V)086)S9
z`ROT*U0=siGXu|SiE6I3n?yRyBt0Ajdz7&BQ%!7jX^brrM`-~^S{~vyjF&Bir2md=
zuDoeBL4*n=r_@0;1u8XE%(|%_+tiftj69x2n(G6bQcj*Zq&P;sV2(N5bb-CX06Gj|
z)}*J0YAj`p7W_r^j5(Fxie?NPcmEAj6)kPfU96bSG|YejcWjZ&CTEO5WJ1WOTouPW
z^ah_j!?Y(qwUU%i6axv>Ncp#+)-qvI>8)O3Wq}g}j6vp6i8!yds_c0FOMz{Yjuv!Y
z@{(AQZ-lhbGO^KOd1#@L(sM&%CBZs7S5uQX5kE#l!Cbxt4-tgvz2t~X@(S~VTyGL<
z{%w6;%P;tEJZj0r_DIx}Y|X@v=qU}#CJ_CexeF=CB=<^6*2eqZ6{JZ?3-}MQjH+9|
z6H5!{O2vcF=iR{nnCBM__M6`8)*g5+r9>#O)fhXA?$RzZ{d|U&v&=bW4=o-~Pm$=)
zQW+FNhaD4l2Uj7MlN`mVuJKJ%ELPL~;Vwr*w+~6*G|Egz>$IsS5Z^8e0cJ^vmzqKf
z2@XcBD~j`Gp_LJI{~bQ4lw6*DB(9v7m0F}t#Z`zn<W4=ZT8-Y9O@BZxhs6H}TiG0T
zyUbOkc<h0^l`v5j*teV?QXeFsrsa=MQ(7vfIr+d~;?QVZl6#*?LVJl3nN7GaTuM1-
zC`94XB2rUaH*{yZ?OW6|*s~PA=89^{Ygk-_foVY-;_HG_75TS^lIrRe*DZ^t$|e!v
zs!XdvCV@xR(j`i{ecn7}8N@fms0Xf><5IWSFgK7ka-$jK?e^fs4NN01P4c>}2(xKp
zZ41=f;k3<3o>4z^rPauq6;Nz9RZlijGZy96|5T}nbqSpoQBj&et`;eJQkN)*x&DNn
z#V8fWR4!t!G}THX5oNN<(v=!;E=-|T+`dOu)f<Pzmb|oxN=zPdO~tbGHI!hhzdh{K
zQ6-hkgr%+?$0N$nlt6}COqZ8B(JmBHG=cxw!!J?ts`A2LOjMPKPEA5pK|q23FvzBM
zgrTOCQ&o*2scDfI)D>Y*yUb0mwwJXNI|{zm8A`;YljoQ)KUvMNm03uh2hBAijqVwH
zKg)^xfY_eY&#D%hGBiUZ8OJG-jD!x$WjQs8ao|+^#bpWGK-g+EkF{;c;)+p}B6Z6>
zg>H3FToGG+Lt1TBjNG8wGq0uU8K*5XKrCZ@aK~Qs`(oYsN=itpw8VddD4A76FHJK!
zdV-=(O@3J1F^6jNKx{YfhO}LZwqY#@x*5g_q9G${?%Q*@I98U{ub+iKAVSwLjiicD
zNL@{s<g$y(Q$4ZE)GqJHlq_HY9;qtjVIi=gBt1tsYQ4;%q?dv8CEDu^x0ipSurz--
zKc>Qgs};MF|6URw;GXtTlk7>{L*6h`StJ)%&?#=WK-n&oN7Y+~x%IEHQ5h<S%b`BS
zkt$mB6iy3FP>G<0x6)y*CLUKLPNu084bGJ46r}S3<Eo1-*@)I4ZdXG)@Bt8$D1;4L
zG}%^!`bUXs%h1CPy2($Kr<OO`$}7<c^+_kjprC**j_6TSC9qUAAvykh&6N<r#%Fet
zhWlB`%sN4xlpyQ-Q@mU)PCB4p#1wwaam-^>?+wFMeoU3)qyTGvM73a?NO$N&XSt$M
zSquhVx5P^FtUQ@gaS4J9x4Iy<G8vN1Q2Isx(kscLCuxXEHOn;D<fph;5i=|a4t`{m
zi}>(RxE>}Nniq?yX$dQ3lxZn-PLZ@#X4_QkV}_u<NxfhvS?P&zEuy%H{PL^5RiT`6
z<OU6)>0^d?i7GA`RkHZlJ~Qptb9@RTOUm5UrN5BN7HncN5w(yzY8z>G6AgjV!yq(e
zHPqi9lt?qE0ZJ}vP1oN^PDm=kc!Yam+`eTpo#xXVzHQ7{qLm0OUY$4FQD{QEdT`|i
z5vz!7+`^Cp>N@vk1zOBVO;pR{6O@T<fT5@MV!BZe7nQ6FaY3Fg^FA72UFc9k6i#$@
z^Wc7)Jy*|&m{97mKt_dVMgZN-!o%*7R(p1OZ9c*KT7R<(79i2gr|rM<<+7k?svOv{
zc-{eJJ=6VqFEZxh#l%75B<#qSWK*ix_Ype97wN@DYR5<Uc7XQIAzk0LUXdfW!#5-R
zn=8RbP&fhb8(M$)3BI6G@=>e$FZ#&SUjENRLWSFokuaec|ES6F{Q0?4f>)99l*F2o
ze34LXOs?e1sg$>41z8kmV`8QLeE8r};h8UCcl1%_82lUt)gDRoUH0HBA}jV3+_7PE
za`f?hoNpC5sc*HcQz1P{GXX+@F(yoK9m+enXTqG==`d?82^dYK`}(L&4Lg9um6u@%
z3-|uY4*EI<GEitWQ&qIX^2Zp4C3i{6$C<I)cnBiJa<nmL-b(bG?LYNO-}9}(jPegH
zj$hr5^A#cyXtkS1a@Puo_{ln=ayW!J`XTXoO-?P2i;9IMe{IT_%lWpVOu-$CWP)S-
z*5tlY`>aO;9QDqMh`WYCqM{rW8;3v>c>Qn|q(175nsM^z&-cb+-A6LK`8)Wug7lmp
z{%~`1vwA*Qsf(8b0XDPQr0?-iPx!^Rsyj(w`0atnm;cgicMaKqBbUn?B0<7W_(3JH
z_jU(F8`YL1-3Hoti18GO9QzNcNV>~+<1ofmEOA7`Tc#MC--@AZL5U(*Okv0(SX^O|
z;fz+`EGCV3jh-W>Tt~MFqfQeCMDd5|!y*{tOwr+Zsm2J1*wsVd32rsy{<?!S=p3*J
z9A8}%5~7cL`MJ3?#G2dXdzN<47!6g*X{cKx_I+UvOB~J-_{yc;-g=D=8IQKSZUbul
zd?r4Q7)4?>C_g1Wm^`G3<1w!Nh()5!Z$u>iSb7UhxO@d=n|{Dqkr($ew=d_`wEX$+
zsZU+ve9`U3Zi=+CxnU>D;rp3hB8xs<TcMd9mwRXr!0lX;<98-xTK&oivpSyMP(#sp
zXY;75BwO?A-yyq?-PlcpHlUp_Do3vOfqCwY=kz%Fr)kum+PgRu+to7{=Xuny`5ie0
zEEn3P!X4NgOJEsbJ|fZke`W_&eW^~kwNfL{RlnZ1y<)T7oGE9+XUp)*EF4p_@ekaL
zO^=gCu<5|0L*0K%f!*1Uzbh81O7LG%qlUB28!|L<s^%PX!8N)&`xk##&3<h*OQ`na
z{e0Z6AAGCYYrbsf9xlgU8R<^sxkF<jS8AjjrTKe~6v$v%7ny;jM?&;ii~P0#EeYjU
z-fd=P=0cZ2_Axj>iw|lVh-h7R*y!UCn<QV))9=%+)mjT*Hon2i$DYVSBpzUNM0E}F
zvKajvfPhJs<$}=~Oje`#w!{XeIp^MOuczFakxW=#qBhy1hKktUNpDU!zCq=dwm3mp
z>c1*-oNo(V1DOU&x3`;1pu7KCcg`ChfAL0V4@T8s?P3ni0O!x;e53_=_B|P1s07Lt
zYNf9sv-L<1(u#j**<mp58)WEX{BBG*oYY*74vY{g;u=Y0tf?Rh?l_i!2vFT)gp2d%
zkbs_)>Kso8gxcs|wOp-25=Z;ZH<Vf6DJXId$a_N?(y^=!EOqad1ZsO{um%I&J~4Yy
zpF@x1Y(j7JjV$%o^;R^#?@nz;h6#Vj5QFh*J+KZO`u_X~KgWl1l4%ECRN+H%>0U67
z^l66^A*6DDcl<SH7!e$bAc9xzjJ0Qw@dpX23J=P$ZNxAFjBV=bkg-cf9G&MYuK=-&
zNqmfd9}=!2Y)@l|S8*MgaaaWNeMJMzAw@YE{>#E%KDc!y#6Mc@K{^&R;a;#o!|!`Q
z3KU9r5-Ip?E`BdTq+bcjw+?@iz%M6)oe!(nh{&=0?f~$VDjr?IJ*o8;%pE5S-{Bjp
z&PVX3jk&*w(TitiOmho|rdYoER4<Ze(+gGDS`ibkKUO||K%a0ye}k3yK_V2w>DAgO
zDb5+FD~#7jV)~5&NhKor!XoQ8j2H%S3C|RK;?}ihv<3xH6oFGq5p&i6I#KP({t=H=
znWJe0jdxoi>Jw`%tfLxX>wK`KF5jK_5a6{fBByRoN)(kilfUp=-+Y8rMEX5)_mwP3
zDUs2d#62u)Z2DwZ{0_s`>)KUxnln^R_>3o9Y*6XX3k2-}&?XC8|LCCJpQccB!Y4~i
zHnR{GCCfr06l*b_L3a4URY=-$Gq%DO_`>Hf9mz;*Av0z{S1v&vHbG%NT`I%PcHQ{)
z?3-RZ2sRxLZpRzo=cm7W?RYXNc-^%a{JGb-R`)9cP^`I!lI#fFyb2`z4!xkIH}-CY
zq4<8U?Ee+^2WH1t!e5&bfqGqg9Q}Hw2lC!t_ew6!EwP*G_Jzml*H7pB%}%|kNtZ@%
zeDBa%)zB-ExkCuPA6Pmb7rYrm2sxivI$kzJjh6SnFXQXgqH_l3R|5A5jn6T7^2~Hj
zUWZqPjAghcTV`I|S4;&KMk^Fsoj*`53J`Hc+jI8w1e1v}v)$fMEvQ9R=H>mr$%R`4
z61(fAw<NFZrXx{ASlC93$nKC5$s<jyg@tARmJ-SS5of!G#Tdx)-O!K)=NNq>kcnuH
zF)1|G3eO{k71qKK6_+Ac5ND|QS6?iN!jDiKqJw8yY>kzTsLKRlUnDD^QXg2V1;_#k
z^V`^BP~~!j{+KCJ(Qq^jkWWTKm>ntjXb=TSO~{af2f}Ldt5<t3@Sj7uODmh_ETUsd
z3Az&;5}$+tyK9Wm6nlFJk|}Wm$|<M?4$ZmO>Y4gXF+n^Q+D>ivqT~+wpSRf-=fBnu
zovrm5QFdxP`y~5Yk04sjKwHBeb&8&9KwlrRcq7F2S{khFIZ;%0Ew~>Mh?ClC4%To}
z25cdgx7u9VHZlb}W$M`i-O`k;zg^OYE`e)f6q>q6w|hn;Z&MvbDQbxNl%>-M(;@H4
zGiijpGNI>{8r4Fp8B_Di4Q(jWknhdAOu)Mu5%Y&KJqeodAqgOgj)K)Ypn;MH?Nfrt
zijKp43Bcy5*!g2AKB4*bTv_Mv<R)|srxk2J8XleOThP%j-Pj}9Avw9_=h_57F7s6s
zo#%EuzLNVC2G`7!Y~8f>%3;@>Z5YIpO2oenn{4Dc;Lm5uBl2A*x5MPU25ca02zX?G
zDCh*A21fT4)Vd?~_5(7fA5Mt!E?Gg=f$k=D+}z#RH(!4N<JKIu*hL+5?W;aVv-_?X
zFP$FeMT79>J@~o0i}Id-z+N@wnj9+%Pu}z<xc<HBWXb!4l!{Og{f2+r8?c~3@@4H(
zwJ+!$eHX&CjSsiP+_rhlfzM?%%&{gYdTO+{@VC=GSHSm^>?Xb^50d8oU{7;iN2tEx
zGIO8Akt^;2iM0w>pvhOj0n2gX2<dA_9%&D2sl66#`vq|dOnrT`$R-yFMuEg%vs0!l
zShrdZTzkPS%p@V8S*aJonnL<<mVcv}Z}h5wEj~w<&^W4xZ-6%F_!pA#QksFo&I}={
zBB8*Oyhm!RCCW#)_WBII&9+$hFWc%f1H=^m86AnW2)dU6^_zjDJr530RPr0|TkkKt
z$1l?l*OrVg6YoagPoi6CZOf<T3n~ceuKDxq!{_q9Qs0YqL&}zq?e!b5Eb!!GyGe+Q
z`)+*kbk___^LNctk<Tw{xdJcf$JU!2?&)>-9V`m7|3&+C`LYJ+^W2(V2By!myXG3_
zp1iv5yt<F$%(}~tZ$Jib$JROi&(oZMPWP*a-#(Z3E9bi}Yu(OW;YZeGP@dPv))a)#
zS2=Fomx<R~mdon|uU9!I-Iw*(TajCDFKg<OKpv<-#>qggmy^p&z-w=F-D_4rr~i<v
zRgc@(kCVQ>wU6L@_q=j=k#VS)g)pI`wCM$c+~aQB(nom~v3ZqR_YA5`0+;S_*;$Vz
zw(m^d=21iYwT1z!JSwcY9`Jw0w=xQEW~{MvAE(eBj`gqERTc=nyVqrv{LdcjSj0XG
zmOCfWF7rJ37*(45j~;%@&TeHai?E1!o9llSnMHjHWY*y~4Sh-hpC~UTpSGuML^phk
z4f~u4Lb}Cw!mEpDJKJKMu>A2;s?-y4YES+Mwsq)uo#gKa>or4USGY_kV)_vumM3DG
z>(hJ}Fnx`dd5RoQO&eb$IrGPDty#$wTu|tAelfn4d@1~qxErr}IIGzd<=4IQNAqj$
zarye#EbodGeV4*aNyj%rs$lnE?8g+asr6tKh%xP6?o-~)c5wH0%6)1%-Tese?R7|U
zXRUh+RB1<TZ2g)Ex%7y6tZi)gBeiUxv{__Ap~yuyQ!F72DAhU-AvZm17o@olt34ce
zbc)w}@VGl~aEHau_LpuLrF~w+4YM1^{)#>%dXiC}_UavaU+9%=z}F)geUu*xsd07a
z^e4ubW<OVINUqLJv7yMVH_;(7^#-0hW>WxDf0Bi8QIIq-Aodbw^SVF(Q;DqTuh{S^
zLb{%Fa+L%>#gTLY9^P>E7{QXf)DzhE{wt26#+QVG4Mwvge$f)ea97LCdes)=Vqe5V
zrrA5zKEti|rlx7r+K0xzow;LiN`H8sO+|p+3KRDl5ZdmKew25smi|%KcHx_L7_9Pb
zp67yYwf{<ejmHK+L4g_xNMg3>XCj_i(GiN3+zOc&9pseDkmPg2vejA}X50t+>^B*l
z=m)$Mu$sA3<UsU>w2^%$kaTcUaea1W6l`&ysD3&pl#A-Pi<dRcW`IYh`8cdljo<Dp
z3p4f$=k)c<LX_|27RyomHF|$;u!r%z+VBQR=$>;y;yFRpF5E_&0f+c$qkjMFbHU!d
z>^g2ToIKPDc&G<vf5rt2($|9d<y?C<oHQTwE4-9BF$=*(Gy;Z(JG&+Bu$!ac^6LAc
z?~`h4v=6SMH{`}(S8Rv3(Z);Y7D2a<=NO3%IbaE^YkstjLm!-h)2ys0jl;bT2LUkl
zzFTNIvcoqOnMUA!oqV;`+jd@+@y478;DW)<Q)xY3=yraT%<#EhxDO1zx*VuT=69HB
z$uW>vgF<+1elwDbS19_`LoqSn{bvF#uOU@I>;3}~k&wAl-v9SoM;Yc-74L^k-e3I4
z<T}D*-yQr#e21^eMI;aR1cbIHX=_9e_m<gglk(%5KobFQ2LABzi;X$Dj_o@oZ`vOL
zmt9K(aJ{>@3w#3XruAMvC=|szIro9D@|LG5%vXz{oAL*$aiyX@tYl+FREhZb*ZOE{
zcR07d+&>7Pa2l@NTkD8g?eS1+vaCMmXTdtK*s5IbFIxc<g$zA!cdgUCFRf+%9!Fk#
z|7GwL?XRV`dT7?jsZ#^^dK7x9ZE!yRdptWhJ$v*%SQWng^>=R(z|ZG<bGFe#hcO$;
z>2J%BhX<%R9=9FHSBR?`v@$OGZ`Kq7T%Q8}Z0yj0;Y^`H{zXR#0R~Gt(*i~Xz5@lJ
z`~PAKXJ<+0!O0F_XZ>Fq#94c<vp4)TKV2p4<CeFkNTSsz9hcu^mz&@0$&!0x-Q3Kj
zkiwTPv}I2!PfB9w{&;jZbD#i~ZpdN1EcK2vM*R(fHGvPdGX=G^)iClDc51_rk>h<w
zn#X$W5#R8lmYbVP*OkA{X91<xd+qC<>H(NeUTrj2=(4}P7&dA8OF)lluBGqN6`maV
zM8{6qWuHtuI-TrT<_YzKPfB96T5@R1iCx~wz5q1i7qLB*fZa`$PAC5KTd&Qj+&+zc
zDqWXpB1rn6mbM4QDd|npxDqqK<8%VobpC}j*1Tw-Qxel0JWFJkQT%3NJS-ZEdRWod
z4<cd5y;|~DuFu2C&AfU1U@NiC5r|DTMl>%zJ*Fk(q%(uQU}NK;kv`tlrJk;?3v;@l
zk}S8DU&rv;#Z9}*6vn(%GP$1%+!tv2*U_m_;zZZ(&nE}=p4*;La*dnwi;XwV-08au
z7F*gp4~mRHLkoU$xW$6SEVF&G32r*=EiJdiYzohDT!#HfO_+K~qrkmYEX&>XueYPl
zy06c_fN9b0eq0Jg)9fjEKEc^Rtt5&q^qs7I?$FPkkb-PlXDm4c#vvFqS=c&Bl>TCf
z#NK(INAZ_MpTwM@d80aKYfW&$Z6Z(@aF9*Xc@xM1ZQA2IS^&~fPbOVb<kR1q#>e@(
zfC-Ru2t`4t9ue=rWF^RE`oK>NLUhS2V{z|lTV@_PbE$E#HKMg>3b7-2RCNY=BxFx^
zd$6cm6aGjER_L=VId2B}sP4A(z23`lp|3VV*CW(xu0q>%*#@}ks+pIh`V|f-guJp5
z=!-ww^UnEL0rklf;=OUnv-FCbGxts*q<TIFaz^PJC$M2IY@v3Tr_k5{klmb#1}$%b
z;~SGC*}1&^-4JL>q3qbH{EDZOI|)W(9IlxZOt(kxtrIKOKxz<pO1DHtSUj>&(G<e(
zYkypJyX9-SC1<y&;4w}}#nvVp4^LO|X3E0C7$^EXmkj%m-sKgsg@@mGL4_eG*K8<G
zSr4rvm`g`WVI;ABm=_x*(9GMggWktXDes`fFVW-{M^|A4^bJBh-iRlE4_W36?rG54
z%OQ_eD4@|T##$j#h&lv^wn^y|lz>a;2Xx#YfUiKL=EUN7OyJ5l%v#q;`a>3+`l6O`
z3G&{Ujh`|G0+4a!xigxdEG}X8B{SMq;Cr`+EWMrq0?NHmd}=$bUoY*$U%0=oL5^;U
zrg4$;tr7hVe#&#M{2{#e4(Nq?f8zh#vLD%2B=>m&S{OzK@x2Q*Bm9HC60-!K4nqBp
zc>+OO1;gd2p^6x;?*uJ|z3xwrq=Bz|oCdurZ=fyy_Y5b!+uJ+_9}+&a{K1P7ZF);b
z28e;tkI+bd5@DaW&c?7xWrUZzh>!^W@hjIvLC~v679&LPfos>{GkyU(-Z}b&e%Da<
z-mEKs5HFs5-@D7c<ZWPOW`t#1B9ar3478IRELQKp{Y_M^Z~S|1n2}b@rFgF#3{wXh
zgH(;X{xYLAVOsW?PD<!Dcn$If3apR5;2jF#wqMUH2>c7(_;;Na0&99byIS85+y=IT
zx1CoeQSQTT{d)6(UT~BqQ{0NSbR>|gXtPiRMSZbNFg9N@kCQNrS-M~r9lG-wTws2O
zn*_<Wadwq;3c&J^eP}{uQoMr<&)7;8OtcgH3|;~MBmWg6ZGGQ41+l!IU>ZEyV;Uo1
znUm0)=f|>pciAXJgcTKRxA~~i_}jG>tj(=l49foc0k2pEqGG@NGVbuoXzy<{P}K7A
ziEIyOI73?0laOyVkOo%i8;qd7IgM=JD0L4L$U&4ma*5{~xzX!O4+M#B;Hsj714BtH
z)puf!wW2!C2_kB}BVe)M?k9f*p5?_l1U4k%8frb_l;9$b?M>)Pph5kZQ>3i#5L_0G
z{!K_uH^fCE79x0ydauhI6}Xim9E<tgU4|8<MLt<8sjP_3P8d&s@FTOE7rS3Ku4F5~
z@t7hX#!-$!W1<iQ1mc}tYVA9TXi1?I+(j%Jn&Oz~Q_w}`H%<@?JclE_-$tO9*=G3U
z=EYG)$$f6)T25RPV<8XRU{ycKyMC~Q{SHzkq$>+i0r~cm;wGk4oKocONGnO!F+!tK
zYhvlUx+{hPhKA|`ICM4@VW_)3)}L&H2*E_gl$1%(aJg5Dm@#k+l<+v}AX$#HKo@2e
z6-_Ak7)SCj`hZ~cp9AHBSlry1vW7nbK+N;MfvPZqpNQ5Fzt4Uy|B>LtR9#VwZc`g3
zVm53M^=^xpw)`;;VPU-l7r|^_r8%G>Sv(>x=wCx8Mp|r}jFlepjECWuG;mBxFeQ4d
z+ae|Z!gsMHb{o{2Q6D0Vlqn+M`TYv=$IG`B?`TMaB%)+2PD+#-AE)eN3&XydFJvuC
zr%<b9Bjt%Z57D-{7|;Q>cmGrh)o%t7*wis$<Uu=mcbvUOe+;w5d8bxwVR}&Z8M|AF
z^=X|^_(8@rc*nGZz8i}QL<P<w;R~<ZV+%ttzKjZ8+eI_}8mtMXdw+ie-9e9up*#4Z
zD=tG&Ip2bY5;dE=AZe1Lu$WDFV~ba^nuNxBZ&wqPQVsyY4~*eHG=WjHC|rvGUoFBu
zf`3%&&7o^qvm}ZXJ>e{cao}x3Ay~cQ1k6Cov~-1#7ZWFR9|t6vkND^sfG|<Yz~Ig+
zW-vY!<01Rz2J|&2gfK_mAd1s*!lpAnX#Du&8!|s*nMSwQnko2z7{m@r49+OiYOp96
z*(z0nYsHMq?2r9YAF!xk0VBjK$2rL;g7gdW$8Y}JSS^WUP64^^C9^<>5C-2Q0`PG?
zo;tn#b^>L8cp09|NJOHP$o+2sW<Z(0wW5yq-()gr2_YnSA8AdRuOkA3R2ze$84Go#
zkgD_$G9=&+CMYE1Fh#Njorv5ca4|%ppE6|%N_zoJGg&fHFMz>dwj?7@mNTZhN36LZ
z7%x6SoN>j;=|JO!7J4if3F_~HbQ=kUFF#i!=y+eK$<fqMzYvyNlKQ6DbC#T(q@$D^
zNT`SE8Sv(J_6aEd9(E#cCq^ke&kD3IU~Opyz@`v&z!cqOt|DU_P6u9s{tyEg$jSi%
zBwG>2-ok<Jb~>FVH2Z(?Y>DCp3>2TJ49ppzq5lGBP7{(U<bRPeLZJe4>kA)A_<=}H
zpk$wOckv~0pK=(5%0-O><X?==5;SVYI8^AlNMOyz3}(xF217;x|9PH{PZPB9kYES8
zTc*Kg2uPW`EC7?ihl-cLQ$yY6Wft!U<-!72XMyxB=X;SYCu6blsHm1ht_y*m(B#AM
z@zHVJ3N;fZ;+Au?_!zeW;l<-|%0_8%hIQW9(TEF#&n{E7)GzbuzD)qv>3L%4vMEK_
zn8s!r2c**AE{;-6M>w1q!5S9XWQnwt<kNzwQ}DU>%MPy?6t}yX@hBvb0h_3+haOSe
ziWy*I?t~&9&j_)@M406yu*yC)d9D-*K$?<^!Xin~RhPb-Jv|&Pmbf}C7MKGi$W|Es
zx<a>_Ee*NbXh_*Qh4P=4$Y=31{u#&t#l{$Hua>e_*^+?N7%eAEu`2o}v8d!Mm$EJ3
zJSNf={%}1IYvUB{lQBvyzt4J6&84AEQmBP7M09J=QbbQ`OlBA?{AdLIpdk+n3&!s~
z!G|y=ga10-=gS2*G*K=kmtg!<coc^vVg}%Bu<!(6izIOcW5`Luc_dN-bfhOZtVR4f
zp+6_-Vu7v;3=kyLJ;@DVIugkNaI%h*5mF_ZzA$%W-H!JUuo+OXFThtR$PoP0`-(KN
z_?vX`>w>`mE3%!Pw3*|_0HTPWWT)v!2p^E*@o9n$Naj!CIl@}BRfvf!kQ4X|e7I~`
z2<(%^jI(*22&)xQ!YtR8;E|Y!Q1A{#eoxRAqEHQoq%k>k(l)w9+A?eF{hlO?5gG33
zjDlORRF_%arY{RIgl?PY&PyiT)Fo^Z*9ytVhHD)x;X$8y$NOiJ%o+0l`GLDKMwNl0
z?Mp`tttDf7EH(iWjvG-tP=U@8+218AlN-mx57Ihf^Hn5@wEtRqcrY9aB1?=Fr0a#I
zDXK)v;tn`K8Z2=$DI^wlX1x<*k_lciJ_KuEApP;P68C(h*>og<vb>|D7j`4be8Fsi
z&?|w!l9(h(i<pbiS*#q>N)Hq?6#@mT0vEDaI&Fwd<5TpVl~`fX&1}j-LLG1GYX;fy
zra0^^T~($)CkbK{fK*3;rap5mg>uqYm+c(jUm!NUvzYm27_rU3a5}*Nj|h%33S5AJ
zM_i(58lXEv=3^Q0Ac@2?od1Z#k-+kDj_?QMBD;_bG7fz#3c#X+#r*8*{Fq@#{b}?1
z)cXhb+bK>$v;{;D5O(yyYgxCtquINM#9G>Dt7B<2!plbgvN5=15dq;uR!F_k@H_qe
zMz=Ev;YUB{VI&EbaG59LO4w+C-XU@jH0t)SQ6GOqG@dPz>sz+5M4kQ1Mz1q~A$7W!
zOfaw=8;pC!1e>jpO;)h!Y9gZ1z)}0y_W_Q2KjML6UJzk{&kN8_B`1T0|HDg+7A~hV
zri%c}L+A-*3GE8a^E75gG+O;iryD{27S~_GN?qpj7*`6ulPjApJ_XwtJ#)0Uh&O-&
zJ|*|<BAtzSJcK5Dn#c1qxt#`#bb%qg|3e9B*HySa$gfCHU}DcPA}GiTC2$9~Ot~G-
z)fbCj(MAJwf>TlY)fAgZX~+p6#|maJlaC;ngV!?^VLbjZ9-(Yq<mr5pFvH9tb8(LS
zOA@*@!|;j)Muta|IGtkX1lJ|Yr7O;YU-1-88dT{g6?=h?9dyxvb*9NSqo?VzK(`gg
zLeAwP%UGC>C{o8iSqLmtJZHPW%nlNvHS+GJpd1RewFzrAA%h$Q(!+x7_MqbdJ~@m@
z;}KZKvp649sOm=;PI{6e>66r9hS)6gW(hNbPm*Nf4Pz$6y^wj|6tu)myv`gYH0wD<
z@5|^&20l(0Ndv?@ImKu)NF1<`V0`m<1k#mh?thR1u5vTR4PnIa_bfS;o(7uIniw|q
zc87b4T=MZi3k%YnPSR7N-{1WX#*Z?-k828oLV)vr7kdO+bQTusBEjL3Uj9Ak-9_=J
zhw>^eM+Q@#kX!>C<VeYA+87g%A)yNtY$D(%<T2n@+RtTuj?VH!kR%i3DnA^Ld2so1
zQ5=K&3*PTb5@wqA=N_!Fw<!4xDSehO-H<KGW<zmYRt_yw{k1(1h24(#|B%qpKrDs3
zN@~xd)NuBrGqCVU5f71nX@XA?xyVy6$6jfU*=Sgr<68ZoomK7WR{mr0PcoV*&QcBA
zP@YGv4len(J5ZHJ6fs)4%Qi_H%vo>m30;MH>HF`VHE<jBYf}4Sy&LFL<33}rVf?^t
z%X@qQ8|XCep(aChhAQ`<iz=6X!_C2e#0A<w4cbTq1x{L=l%o2r3-zA8zM6o$)d)bx
z8};}PtddSZUre*v0=FA`dts*+!5Dje0PY9y+hBj^-Y)(DH0}L8n~bS0d=J#VE&ezV
zKYG~n=gY}toc)~S2$kl7GuRKrT<FgOMnVYx;Ub%AV<Cy5c2rc5MHgr+-j||z*#H|9
zSDIu2$Z8Q&1){rqIh_vLevc$Fg5^6qw5tX(8$<PtQJ#{e)RJ2u$N{uh0#pfdGd(2>
z;f%-wWYZLgbo-lcAAkAP_eWbq|630lchE%OUuoDFT*$mF;DasZ#23)fe9;7p<&H<&
zS24Qsj;sw<tuA%ru)PbzIGM!f*)sQzyy7f9Sv+WNGw0J&UtnB2s^0J3-iyxOuJ?;4
zY94u_^Z{wI6YcNcpbIcy`q5GMfyaOIy$ZzVv*}A1;IFuEb<vOZykCD+;HgI_-QL@M
z0N}d#WxBW1x%d3V-isG6cc1@2|K8u;gD%EtezfgBXzqC1ml#4h+S>jFzWv6g-KK9a
z`7Kh#?Gs+h+w}lt<u;wp9{eAsogwn-ArOFZ3ce8w#e=XwxaCGL0o?xfzW(=jt*u|Z
z7hBsueE(t#|D`JMtHcX@V;Fd`1<md~`|b;9baW4XAQq<CIf|4cNixY#9;YSmQ*h9-
z^X0tQ@($&%51OAHM<B?GBeo2mHg>k|=A+B47W^}2{|tcA;Gcu7UGEU6=f7BwZFvJZ
zVfArJ^@>z)1u%Aze*Zm7FL~|eHikftwmO)P^kN2`(}xax!Q`cU*7*9H$4{R<dvct{
zVE|^t@i$bfxy`~`M_YH3_>yr2MI{z&Gm&<47^5=1q3evN-UlCi(B%1e$f&eWHDTj|
znJ<}UC*zDVb(X^kSZEx90BSV+bu=8klpDYplGuj+kJ!u^Zyd4t!yl7mcEqp%f52iK
zF<e|{(A()b^)jH=Fo>2nTI4Mn0pJ8Ma*V}(cT5#<mloVm%o?PbaIDcNSViAn56V#!
zqgYd>+$6rjeN*fP%Dd1Win{=SfAQHDAE%klpenBtU={knYlN~!z&=E>M#w(&WQ~Y@
z=*t>C_F-Sv=(7(4S!17lI3PMnXMuu%6@1ygafc<E@I4|kO2pT+tAIn}a|QWt6kVTS
z0t%>;f(P5k_&{f&x`2L%?`$B7Cm45~WZ4|kt(dOS_b$YCAE<lGB_jeE(asHq_R*MO
z<^;1-G1v(vcFqiN0E(dmGW83b#V_9U%G)kx51OFi_`rl(@V#G}P`a}{Z{eD^IDxbn
zBH^F&WVCzq*|9+F5nou6%pZUV$B@+y`?w2I_x^qAh%@oWA0HndKWH|%5NhmTAG<9<
zK&rs+n?-&T8X8cjL)9M+3%YAuX8F7j^w(wMZ8pIAYlMLSiL@*#VmY6jy^9a3eYl~i
zZmj?xG&@gVHIBD`ng8Y=17Z%F4M0EsDOpCeZNRcO1baFV=CiRVWYJiDoc-J=_0zb+
z$Y7X(xsEA?eHPA_-Q)gnWe7O@-+lw)I?vLvChZgndpoqT$tv6f+0|mdA*rwuFhY+1
z`S}05dpN)cK=4F-NFYF9L{V4(+KB6z2hB3ZPA6dbG`4?X-Tx+JY_qetnkUuotrwrg
z!?c}EXX!k{?4@QW2ET6xSZY=(1OAzkYtV>x`OLcwLRdUz;+QHmf~YI8PpblT;Lr9a
ze2oxWjSoxQw6g_0Z5gbzTj2(84&<W|5B~+_`2;u74A;3--PdS=PleB+wS)NG#i=lB
zK(^%N{NH9HPXI}{*KWaPr(MN-bxpXWtgMNUplhuOulyF)1bX^2u8Gt~`l1Nb6SI;M
zI=0ygEEOj`N7GWJr?tGNpyj~%pq)M8CIbw)TL8)_yhKk35Vb(v#<Dx|^fYA=GNCY0
zz7(H&k6GR`Dk+R~=_*X@OQMgX0qD0VzA5%$)jm815#@gQy<j%Jr*_Sk1rAH|>=7sh
z-)9NWv!Xp2xtG8qRWaN5ri7A<GZ?9w*hht)s0}jmJk8k-F3aGckO3wzXS24R=B1(L
zIa*43^baAih$N5whc8)9DKj%K&M-Sp$Hg=rQw*-4BP7s3#)7;+Uxg0&x(mL=%gjWU
z!L%S(6~}9am?_@F_E<5MhKqlU^O%tFL)k0lTe|G{gUq~O+c12;N+vlNE3TzFxHpV&
ziGKn_7cAnLvq1B>vd_lJr$aGKnF`1g&_xV`<%AVWaJ|~R#+DZHXGyh>zWF!WL0;2h
z{{+nbA#ad-v3Jmgk0*H&gYr~cZ*o%^h#zGMbuG*#Zipe*Q9>)*MdC+@JjUhEyKSEg
zyHPra!R;}@f_@K~nx+;c!OA(C`IyMpL7il+);_GUyo$3)<HdH=s+b&AQ_ODdbRFM)
z1xguBvRloTlERqVF|*{faW{`I8x)X`<BG>)7^vTGVHxP6Cv1YpD1ZWCP~n%dJ=3iz
z(+0^<L(ug(W4F+67_fe;pt?2PSa8v3bHtiGb(#IvFsIeL{<LJ7ZsOU-YAg43MP#AA
zPP_V%YoaP^g>RL$f*Z0{xDjiGe-vw3zXxxT<-!}VoU<%=YwYMO3$Dki;cc+01sykK
z<J$6|md!&On}?ju?|4ypi&5XdVkQiwU$CvzY6>fEGGp!u@G|X=Kc|#07J-{wz4Rj9
z2DjV7?%j^}H9sbRfw_cdqfo9XPv)ZyLwyjvOOfQn_iDB6x(i`<ejIe~;#i7IouIqO
z^2HgRi~ylgm1oggm1p4%<yo|mJd55nd1n0{-m;wQpjF)HUUpAf-Af;Tbi4J^FM31L
z&si3}6Oz$c7G6(kMsHebTG05WC2DPXSSxWOo5YQrhE@Nq3ZmW(1yO$^LDWAi6MR_`
z*+r3C7Fm{>LNJykwtlZ8D=u~F#Ey_Vx_MPY-PR$5j_*-DH(1;B>IF(y3KSs#8$V9x
zCHCzfqoU2Vbu^3LjF7Yqp{}Q}rmPNgD=_p9h+JoxZCbX4-#}FN|4322;j;bFBEGgf
zT2bDsRS|ugis(C4#Ne%}i2WO?h`~lGV(>OpguS3fM{Fv%Z&Po$R9esRy?+fIw0{eF
zV{n|#W^TPPxW3-7byElJO$(rMSsljr%cB>X?Juf@oMkp7*~o7L?KSu_YOl?R=TEQo
zYRmg8%J*xv=D?;k2V85G_K5?wcfZSW4lB8GyALc4aAUbz5N--7bU}(Xg%r6U^*4po
zcR?C#3TYrA{jKR}1J=sz<YH4cHsz$SF(jj*OwudmuCzRryMoEp4Ug_0I9_;@WOj;Y
zFsd0XqGCE*;JL+08Uas~sPxSZpUQWzd&E@$t)8Y9D-{pz$x19iQ{*VMyO+Je&fUD2
z@3!zKWh2C3#!&WKi<M9=!pR9`R&W;WboPy^`xp)Dvg$^`015(I!2uM6qM-AH5BwO@
zkE$bw(SnT$nhWH33v(kIETwq|fB)F;1Lz+yqY0q^Z(}L^v&?7B^^!o`flO@8>@E0l
z+)#Os%<Q6Kk^h!sDy3dUKwl&vh3@8qaSMN7jUFCm<yoWJ*hQwsowoZwN)><nl&%)?
zYU;s%cbbh6SX3{zyO)D*6>o!k40FSV!av@xhn0#myd99`(a<!<KP_F^HUlG%LDnXU
z&|COgQD7DYT2W{gg<4T$7DZZ7&n)U`MSZiVuNCc^Mf;2^5MAo~oGfbi_x=%L4E%-V
zu#8juw@t+$GuS!2pOZY>WhSjcuV$@r-u1|&HOdcba)OEl-q|qVxj{P0iA;})P8t2P
zs*+AOTfhdRX2~x)L_yZZAblnQXrQY|K(z{(cqq5BQip04GTBjXWhETdDrzwTDz&oG
zlxo#$G1@A%vXYx>)o(GfE48vxqH2XwbYHeol!$**DkPB_{3|H&Ms#eY%0u9GJZmZp
zBd$!)C@zsb+RmdgX*Wa~DV{e`JTXqkbcIls=h;Q`jgWT@C2ma16{@Tuy&C$eA)*>e
zxdAz_Z74%9iHYJ-b$%oi)28?WmUJe&f{m+(qoeL_vuSFEL%tgZ#TdS!BWHBClqAP$
zQl`>Dfg~JV<KV`uXlaudKPI|*y2!N3RWTvDimY8N&hkX>tST^!&Q7vruGOvz3ej8N
z+S^Hbu6I_I7)EDBdRZ$dL^3)f49VtJUR}js`xgGH;h%SbF_ao5-%X1KX>@dWgAD5x
zC_~QBk+#l=fLIT$D^%8J)$W1~R%nfZAl=)CQdW}Hp@g?XEUQO}>}DTiStnNq8NG3e
zUSs^g?}sL%_7t;Qrd3w|)oJzqNJd>fV~|<)1zSC{{yQpy%t`-kr6cym<MkY|GWyg>
zhD|&)X!YJhdvhKdqPNaNljZL{wD%s`Tl3ILR9W`WxFkUj&4^+h8(W-i-%WylL%y5!
z^isohO6mrlp5BpfQ1cBPKpk+f7QyQ+!nKH9ZxO9U=z5FZT12k5=&wcKdW(G<<vQv9
zjk%&i1-i}v*14P5c5Qc)I=Z&INv+p+H?jH++)Zk}w!4Y7g}ccrSEZgaAijnlDkaj!
ze(1)sVslyWKg#3|POi7{IlnmF>NO6@ZtPZXMgptHUv<Jcd0xW_f79f-#%wH}JfF`s
zJo$Hz-Bx435+&dWxJH!V-9y0U@@5T`tsR))n7l?{;;(?o%_X-(Jg;7oYUE^X)K?-W
z|C^}aSZOxpiX2wY3h`eW?D`^+9H|ngL<Zf8l!__KZx9I;m_s2y5@0Q(f~`)mh)1tw
z9hF2ujrU89Ejbn{yMkH_DlIC>7b@+7S{zhb$gB)*=bH&4D*8v5v}9_i<f>}&N~c{-
zbU_e*Yu;8mkD1If8cq9=anHpuzipv5wa0V)$J2cn3`e?;voWhZI)i1uN0$n*Uq{n;
zMEBm{^@+3bgx=M|*TV3b&t#Fv-q`hlR7@}4u{$v^Ccxhrpev#2?NEBof%Wo%_mp3D
zjfvYQc#Q;1!h3{|0?|_=c+nwV1k0XA+k=0YNa~E}S_J;);x1myLkZ$I-Xprn4R6Eh
z>zOQ6PPcC3pX%Z(`g|_$)S|zK#YH?np2o#%bvajEZWLQePBeTKjU*{s1wC7;U&)rT
zwYc51DVViUrsqjvu|k4TP0yNQA)&5Ot|w2ia*lFfPdO=fF4feU5>?KLQW42>@(j=U
zrx<jb?64ofC{pG*iZQ5aYI>rUHet&tQ5+bhgR_7Qmq6OpRma+}h;K@P>lnoTxe5h1
z&v)Wv@wSuf#CT=^<bH9sJQ+5$ak80X01b18TX<0(ZGtZ@P_2$t1c_;Vg?<=9DRI42
zRz5&$MC=e1*cZ>#uEaXnAjEA)P1iA6(lks+R1V>){(Q|k>{gxqQvNT&1myp4gguwf
z*Xpy-=NwR!k!9G!pZ3gZOMzd)k~OK_%xTx4bY0-PRq(Y*;+2_PXCiYL>rV~EDvY-1
z8aE1($&HFO3w(L0dQJr-FbC{T+IAHBO?3;Lj5V7ML08cflzBfKd5?F}^IbbzDceh#
zrww`<FOip4Ss6)VOB_q4qK7hkh{3}Wz8SaZ;b}t72NV@_Uc<HVJzS1!wn_#wmpct*
zkh9x>F_Z}fPAgh|W|&qV&WQ+a&9MA4Tb63Y*R?IJI$s!>R*M0F-jb!c(pcd>o!eM3
zE39Lzm@VE>V`Z?Rv4S4)&5aeVA5CM$Z7AH95yNL%7LcX1aJ91~>==ioas3P?WlgCL
zxiM8ilHG`K=%<S6XsCTkvD+?96}xSu8DhtLfGZ3!X8&-5%QUViEbTC^WZB^x)^DqH
zSdIP@+p#|18e5_CfBe~)`7lr7*Ls!+?v8o%wRQ`*WKgbQ3u;D$%NFdKhNG|#rGc0s
zs%i|x^15=<%DS$95d%`qauq+48D-_j%`tFo%W)<5+d0$0nnb3sgm+d`jV||(rQlyF
zALTB;fJ=B?|Mu4RX5*jKY((<f%xo-KU#8huvfb$X=ilB;jB=5OLCH*g7s8Vp$0Yd!
zP;12`DdNaq5TR$)_5cljFsKF{?|5J1Q^)ZVpPDM@(qFGwo}MNJyYv;`1oWPr#aG_n
zmr0(nXS)A00TKGoJT7M0InMcPv6vt3?d6LOzK~HAlTMbO?tPbzUMGvaFVbQ@iLW|m
zi|ORkbbJ(c1OLNik>p3GOX%f8d`^x1ikIsCGr6L-OzDb?ljUUMEoXU#Pk=$cFqP#b
zYs<TC1un$%tNgt(dL{|e5BbZNX!=~@Q%(G4ea`MA2WVe~wn}LCqqloBjpsWQGTlDj
zYVG*lPRH-zt@G5BNi#s^?$OTH_Ae+Ae;aSL;8(DW;Wt)q`y`L2$uZK4cjRH3j(1-O
zj!*r5_prOWA{uKUTGPR?RH#3@YHK0$V||&ohFL7E>To$hljjaSqzK5ycc~_vGzrBS
zJ~=v}*HTc<l4$d2=B*}s$N|=m-SSKzuu?KUO)UO|Db+0*lbVlmHyJZC`1K}tzi(l)
ztv9HsbaPlU8P?hL6J{{ft{Bw}3bz8-63){}2K-Vo0_2(<GC?kdI2v8^WpM`P>2NNL
zV~s+&*Q!nc<KHlSaNw4gfaH9ZO!(sR%w8~;@Rn$LN*)BwI2o_0DVa+Q9&?O328=lU
z>@(d}O^+~@++?VK!0VShV<;KeN)E7O-&O(!Iu!M-MSe^8@|B_hiy~`Lh()2bD8iz^
zTGYcLUlhsZb9w0$XyCP5w2sJO1JCcb>FqKmGV%G-Y>v(zTP}KOl#58(iz=`cz7Q-P
zwljsKk?3A#O!nDwe%lX3ZJ0zui->zqo_%g^^_m78wUm1g%sB6ABAc2^2a<6FUI?i|
zD)VekuWrj8d6pA-g$*1}1weH}L;oH)zK529M7pJA7WLdkeZ8oGPY|g+k9e4|r-xWJ
zu!p4<5c>iI_a1ggA8}6i@KYc^ApnLAe3c1`#UEHeD?`h|3-u3JVV=&4oV+)xVR|j0
z(XTN|-!NT01I+kR;o2CP=0S4-FH&0BG-zg#>=eTmp3!Syn7@_D@y_riCfCeD69=rS
z(MMP@n0s<W2ihdYL?HKp!g*EE`@xvcq;Je*y)c|UHUebKiS>OjCIZyDu1*R2-*=9?
z?;JPQs=WSnUxfFly=NIEQ!TIjk3SCjzv9o}6{}2fmLek-{{Gp+|2)3`udn~}`D0@$
z``Tz!EPy4}yf*F*lS`#|(@1DxMLn~q*AzC;z&Olego$`AFcZ?26GGaNqFot(>Q~?m
zQ?js!S6;g>dVN*K2iUe~MuC-1xR90>;fJRgvw`$4vHo**Bb<0dr1W&e%ch=BE`=?P
zAFWe*qJcllAqF1Q4SZl4Bm7FIswL9L3@pbEbTp7rR4%Ds*WVZHiei?wjorJ(a;$yZ
zSj82Y9t&0VxhA{g&63N7sX?`96qo~iq&(g#wW2eAL=1$$Z34F%9Mc08&~liNsBFDL
zB?wIMN(TLzn6!=7Gc-g^AAw~wrA~dVQx}-9tbsO}XH@AjFuL>%wNnE~yIHfX2+CL{
zzdEX#*kox~VRcwh&9F49V-=308XRjzif3q^b#Sa%GNmqi=46aOHZsAqa>B<2J8~8D
zEJ54~+wg?V&J%InMc;AovM-~!{WT9>?rTN*F_W(LT|YjeAJo(jis+{_^%EeW5VHD7
z5AC>FpAPLv6!aq(Nm_!PeZHyk!_ng%Ty8C}*ELmHSD?iZ1kZJQzw6NozBGFB4J?)7
zl9F=Exu{*Oc3{>HjM|~XXek~kDYBe{8fdkvs=S<k8fvvG+FdLdN9I~5rB(fX+o4X1
zA6brVQb@^iFq5K8mZO&xc+xX#6%A?IUSijaXvnlJ#5qGvi&ak<R*x7;Ew}c`G1dVd
z8gm>TV-6~6L`l-x)?}O89_H3$`RpOyu_~JtXSr@USkDydx*d%&soKN9Q0)Vu+L@78
zquaTW*ideoU_vR`Tw0y0buxGrn0*t>z7vcujd^Zs%eys^(Av8BRyH$Sn%uO(XIe^?
zO=;5{xXImBCiiONLi0ZloIOO&lAg1~jq`m2J)sRfESDUtXpqN8!GrDe;{p7*e}9)>
z!^~=3dPf)z{?On3RJ1!3_^n0?jrA!F?NX70qr|r^3w!Va2@cPh9k`nZ&JuI=$WFTl
zlWP0BuXHDn)@nPgS*%OvVqH2H>(aScmzKq179EXnJAGwYwo85!=q9MIZXw&RRJE1Z
zd4<boreU|W-D6~iIA4&KWzXZ$F0uo7nXUE>rySisjJ*35tIBOw+3#w#l~mWGYh|9;
zE?daqRS{<}$WZ7v>!hGtu({=wTOR!Za%5<iBezX&ZesZZmVe|>Ek7pzYpXy0A6)&!
zwfgLy`10~s11F;FP};O5-^+S;eV2PQ%f$~zB>J9XZp=#^MqoN!RT#crJ2YLfYVAO;
ztvhs)t#+u_*4;eo?fq5|ZhHLF@`^%<a&mbkSWdoUA-+)j66!qfzvK@q)L+G7CP}HZ
zr7o}cl!asG&!4{h!62D3>dPadSRj4VXRt2_Uke171E_s`p{twtx)bg<tS&g;l`?w>
z%8M%s%yXN(7u_EZ^a9=W4$GjTGBJn(^RfdDO83hny+C)tdnTv~0jXBX6_<iVlRdsw
z-rgY})Grp=rlf;3_SI!M&cnR6Yocg$+6s5eU@R9ou@-@%3A2Ue5+~LoRBLRuuw3B8
zT13X;Yb`97H?bBywZ>)(%f(HxO^KMTtQV$g(Gc@`rWN<ph;YTg5v~|CEVm*#;uQmx
z&T9);IO7%8fQ881H#S9@O+A``X_S~*#UHqY|6Aaz;qwfyn&+g`>GasU?tCAbMcJC#
z7C75>H}>51EpC<nsYby!h9dnI8ilgZ*a8wy_o;N{PoiB)BU>);0+`1;d?35FcX;Z;
z9bD@1byqCse7nc3*lJZCe|1L-3v2s6^tjQSGQmKfsK~ImK~BBPQ>#0TXK*NQpdP9x
z$ljtLHdDb8QpqghgJ|oy$XeZ!`Ew0L&VuQB{$X{Vj^MWzkL?;VvKkNXs;XvglZv34
zDgNwM8gYh=H#M&|P)$uiENYk4<I*aG%QJ{dwXHYk*(5Dv#(tF<rF5Z9(u=t8dM%vb
zoXt{cC)0-1GsXOh5VlEfjoqt#_FaAUO%jrQ28ODxzYo~e>Au;iJ?a`A)(Hd_IW*-S
z9@K2Of+07wk{!>J`SOV(U7prhIM#Ij(mrijbd(PrxP(F-=%B7JtP>tuiOJ=bvnA!k
z`Woh~5OF!F(ayatUbl0vi`Q*;2fK(hT8CJ}KY&;_Aj$A1Bw0sPYaNog37IhQ8LT5d
zeU~WnSBTGg%BvNhfveA8h4?IA!=ux$(L-1wKW!-T3>`a(K|i&lB9wS6^N!W-{x&nV
zh({=wlv?`Qmw>(m+Lw^NgxZ&gzC_xW9)0QAQ+Yp7xxBJLUmSUnU-lixSoEAt;~b1^
zIdB|jQCWnt>Ve}NOHi%qGpzdEO6AZ}nIqD#RE{i_8IJv+Qn_cT%+T+LmCAifWwtVY
zRH?jgsmvD5cdS|^0UJ}V5z5eUUP&u=oms+cY#l^-wY74+%|LHcUT3XbZ?mtrDKEHI
zuD9vyZ7K_|RnQytj7DVw&?@MSBBN265VQ(<qtIwnCJ3#9-Y75{l?g+upf~c3M!jky
zzuc(Itu@T(WIZRFIa$idK2BC~v4taVUZ8<aIe@3m&Oww<Qyf~3vDwbp$YX4_6FO}3
z^39xMyId5;O<Oz0fwI}0Uv~uxsHI-b!{_m;$JBh=*|k7cUCs(Hk&-ckot{7U`!DIV
z8f~3_wzx>**Y&5Q78mS9_TnN>3jAj=o#TNi;{B}_zqqQ!Ks}FMYNxAE!Jf~_UO1*E
zIW@=+_)q%*tNl$6SRpnO%Ts{b_xk%Hw2JQ!-24d--0=0=<j9R?D{F^il(|gWvW@R-
zdqmhOs~?ECoYWr}muncg|KgoP<W%#3+Z|7wZSxjqiRh)~*jrFKu5CG~?YN4XriI6Y
zJS`GGEj`!Ru)f!5UIyQ&KG<lxN&^|5alO%m+y?V;%4X$ug-RkNt_b)$UgcyHUO0j)
zKaEe*k+^S!Nh?`H_%vKP^<MJZCfJSZy%T{-F5W69oP-;PD~5r$J6=3l08__{^qjAm
zeqa?!PqRE-oJ}dy-f{+)Lm6J_=WsjTyvTv*@BlDI%RzLXOw!SU#h5{`x1W9ma-&$}
z%aINRkI@!q*>W=W&XUO-&p03{oh%p2Ji+(ju^PrjF>$JkiBpkGoWi2&^)ZAqUDC5_
z6~@}fJW<hRiB^H&?UXPKlfmOSJ_o|6AP2r0;Yu#&b99B$MIkP2sKB9xLQ>Jx4;ziK
zK1Q!pLe(@VV&N)jNUj+~l?gDqSbv-rI?`eDVInp)AY8mjr(W4e@;Vi^SK2i<P2~kC
z{d+R5Icg}8NC#UQ{0<bJM2b&Uh#l3YILG1l?;rGAH@JmnjjL_yE>fB5m)PiH!+JqZ
zmGeO?i|CP<`)Q6RmGSxzBT`f;Rv8bk0FB*Oj)!G<1VwO(lo5u=VK96XhVbY4dUs#y
zuzB(X75yOA*nk$8&;k>h|5A%sy5n9NywHRfn(%^`svj3T-+&jH@FEjl_)_)bf)^O@
zdM3P{2@jZ$qnx%61ydX;UJ@q>^{p^sIJuNoRx)~tUaHx+Mjh7Q*MoG5)9Gu|nJWRH
z-E-7ack>y7q5F~?chD~rb~Khg7v`vIHmocleGNZ~968;qv$%L0K#`6&>QOrw(%|Q*
z%p*FM;RG*hv$AYW!s-lsHUqzW*2Z>b#{w~`LJSzh%ITervcQbKq?jo66tSM7RXx?_
zj!C@p(<lZVdP=Vo&2bhJ;U~i!GI)#>nJH4)Q68H#73c2W<y0w&CV6VdcE6Q&!PUE+
zF{q{^&Scmw)2ghVRAJne5yDhvL`#EqcFJ;}ln1n~eORN2>MW_U;aIDItoC8~Qa3}A
z8nVAu8`X$>S5f3LL4|Fn#H|!t?1F{))f$6>_4dk#&TQwUORG}`*EJWSvT!9$E641H
z<XhLRW|dulENIsl#JbuhX8o6%T5-avU8fB&Xe<cVcShFz#*AS_y?+h9*vzH6CL5S)
zEM#gdRC>jZ;~MTU7c+RNEBy7A#>y*UQ00}imZrOEX@d2Zrh9u!vmUEli}E$phlVrk
zrvJ*aNWF7Aq#u^>t1OyZApVuW>dD{g-(xRkCV**()tKsQ7%djB*@Zc6-6&T;x9>Hq
zZxrSz!}Cpeezitm)(9M-lBsz}-F7;(3^_C*ht(R9StF{}=$SQoO-E?PbmTI}Vcv2Q
z#jCc~p#Frip6o!)daoSMIa6t5FAZ5~XfKUeX<#qyu~J`_R%1%Dku9)dIic)$2eleu
z!amISvWiKICrvBoiYrHnwHjHTp5l`&{6uTB6a=FjV9NYWc;c@xZaSUbOH1l65ATZ0
zwx*Sfs;%*Gt6)I;iDf=ZoH~=A&C}Xq3N`u9jy}<Fu)psqU>X@TY2o=q$W~ye>L~d}
zv|U_eM%#d;h+7+nFI~@nN@)02p8+p)k0mOP1>d<d8b@p}Q~Nv7TE(9J@Gx?K<B4x%
zow^vDis<Q0!n!b<9=20WqH-jSrIg?6*)J9DDJ)r{cdjU$E6!zq3(Wp#y-0U*A;1z@
zM<y^D=_oJ?^hp@Gf|lg8%JX^#Bz@WjB)`R$o5?$)jgAtdP0(U=kX7@H!xmd_OHtHf
z>zc`f7HmB=O(InZTTe6OQa!Jy@vr-7U*3^lCLDGdHTC0K!Rz0vza~xi22D&?r5{!v
zK2>wGA<^FmiR{r+2NL;b{Z8*p-I*8InKGzFu9F3<j25iVXu*1nwhG&omt0F0iq1BC
z9RmA01e>h`f39`aN?2tyFRI9BKETkvP~r6!$|<X?D;Tc7g5k|YW$n^d9<{Am+LGm|
z3qFNZ+p32ftvY|A_Es0Y4%@s<MKkj`MRr1os)VxEg1A(Xl~AJQ3Y$XTGSKM6WmLGV
zf>jE&^760CjHuD4*HfEn5p0ANZA4f+C!1xP_&qHf1#eU5?#f;8Rlo}DmTYaz9h7-2
z$2?C(^ClKxtuvzic_?TWFJNQ-fH*u&D$>I&3|_M>-$1#Wj96tTr6dmK-0<uDw7o)d
zjpIp6Hszm2la_IGQ`dy%lPTgs4P)>;Yk*HrpgB)2QXESro|LHd#2o2CW!GJDotnK}
zz`k+&Ll=z-pG{-g*U92n*N4B)+IOZ7|5dW~-zVq4PtO0JP0rsi2Vcn1nk;-hBU>cj
z>)G4b<El(={@P3>)0=-^o$1XhzR&djlV*C?K7n|fnckFi{m$lklV-wef2HXuqQYR-
z?s^oB_xn(B0VbI;f`PJ=1(<|jR;uJ}M*Z>z?owv<`)qQt&&kcl+sY<?pPK!@nwpI=
z?0+>i8|Pk=nr#&S(W%*s+s)197Y*E6Znh2HO>(ns@ZSC0Y}=^cncQsK;BGfJyQI%t
zo!%rpTZeZ$>De}jH%rg9K@6NFH%ZU7!Hb+FZ!0|;<)%G7Tb3L;iKFW*@tq}A<eKT(
z4$5DHJU2?ucF?Aq#;!vvH(K>|(zDg-Nj3I{)3Y69uz7m6gKBOiJ=;NdHB#SIbc^ZP
z4)VQjdbWdruaTbZAo$JGvmN~5D!OiZwu7ZMPS18Q;5E~;U5v45dbX1<HqQaR1{+ki
zme)?tc5simnCqrzujG}D(z9KxvT1s@i&1X4H0!a-wJ5(fJ=;$Im1S9-p1l$2*QRIR
zl=xQyt0({Krf0jX^)-x^Youob$XiX%*5TRHv-KLco1U#hwx?(7HSFoxdX4w#+1E<X
zHlingg7j<|2>YYcvz<BA*U#I=xow`e9n|J+Bg_r*wnIHv8ryD?w;k2yZ4)#{-nP-@
z`}FKvNzXQu#`q>?Z6fwxDB0TMSC})?Nb@gTxn$lPDED+RHY1bOR-0#MdpsmVY~hD3
z(_90m5vp_5X=b05Bm?e^yZ1UsB)PObg#nAn<R_0z1M>b2-EDZV;!);Noaa}RZU%!(
z$N1=*+ov((N+`U7YN8z%Mw=(0Z(lzP9r}Dnvd}9bNez9QWvB}j+cEr(W~g%s^hPq&
ztx3`T8msi?ve#Fv(O)flov-fgXRlYn>)Pu6xiZ`9DdK%*yCkC9&TMz-O#h|Z*ji=T
z{8_Tz>xu5VS?|IgDQWyem4L(3;8(kVjzk}4UU-=^?6i1m=73-28j~gr$JEI5mpXQh
zT>tAP`j@l(Ro?&lY5sELe?*%94Ric&Xx-H>=lcZz_X+;*6a3#N_`gr^zkY&0%Fz`G
z{vr`yPw*E>`)~46{cJR>zf|8-x9WTRT7CWyfc0kmmbyG2!_ky{!5#-Vo-L=?#=KlV
zJ2@$m#c_&P?2AkJ%^FXRpTDHiO54#{0^?XtOV{%=koEWTi>7iXYf`<PU({8j-{zy8
zoA>hXK0smBTbz-#(#L=E)8#aoEeZzV$??1;yM)%>k%#SvmjqxqmtCc}M}}`c^+X*%
zpgMlY{)xo(|3z{R@XwB+C#cB;t@o+d>wAaZfK_43gr#81)ISD*RA74yK>KbzA`%A8
zO2xV(BIaok{wvBZ@oT7ljaKOt{(@!Pm0cBcgKhgI4Zrd*h(p8-Tq5ScC1QN1jPZS!
zknsc88y|jXynUmW;8T4AYY9G~cOXhSPxu14&w!B4s!<g`4T7|bxZBsLx?1_ZI6R_J
z`5kYdw_%OSCqI-i&CWnn4>LH<Q%v++*|knEm|5m>A4Rfsiwh1ODke&yEKwn%%ncvk
zJ{0c<ubP4@o0we)z@;|Y-eMT6k-=V<hpvW(e*PLM?bCJB)-@D9(Xq#}(w-c5>7WKa
z!I_Q6ZIGVBB!}k4JH*&n6N`#^)Hx&mp{Y*fw3I+*=Ku=tB+U!1mOR!IcKWIC?*#3`
zH-IxNP8zyQPkp&vse#rAG4;*4;upEYt~^@D-kf^iR(Y->;G>I8J>89OU@K~I`Dqfi
z&BGO_{!zyP4}<79Ih1~~oIQ?{Xa`xmx_Cs2rRqFt)+>GPvCn<;vxa6`4$^zjA$B=i
z{JcZuyP_~;;MpHN22@*}ax<^}iMNP{lY}#vUOCkN=*iP2eGOY94O_IyE+R?dqvIGx
zrT7}hFkGiCw8HAy39Ybt5JD@go@&qvt49><+5R@t?Kdm*DQ27*nIai~6R{L%7IU_S
zn#G(gg`r5#b7Y6O6H9s`VO(RQN;Zs*IA$XUA($j{C`3xXmJRFZLwh+=LKy183;@&<
z4doMv>Who4xq^=5tJ~K8XtQPou^ByLEWf#e0BbK#vyd1?u(?#ku(w-4>IC?Q5L{Vm
zRO8RuN*-2bCu4NFhPk=kFwwH^2-#+;wpiLDpxRgUSgmcKQFRIZTUx>mX2Q1|Z!+rO
zZ4lo2Q{sDOYYjd8!+EA@PU)~&&Z06b<gGjbV9AzgQ;U5e>BJjWq*6E1coZ!Z@Rnxy
zs|KdI|JR9nSEJe0ptUVFZ3{u$BF(md@~y^=l^<^n8`lK#B>-OsP~8crIR47zckBRE
zA_6KF;MfSLgbGxQz_lGvi6N-qfooHs5?s(ujXJglDp3a&Zg6c7RKgJ|4&i#ew-TpN
z0SbGNSPNi~g@&=7`~1=i8Cz2FWKJfxsHg{pEa46op(UbZzlHL*K#Sjs-}HWJBDs3J
zOhj_^*cuP6nWjza#b@y_ZD-S2I?omuD^YHRS@Tfk^oiJmE-)<-g|0jXx@_p)tJ1*g
z)QfI=C|zf1AFB4@iuRPW&xWiCUscfpy|-)Vs8VYUw#;0R3QWZh?s)NNw4Aa-#!3%V
zU<qf8zbK~R4SrRDpVA<F6G8eQd^L!2cgDGPvq&>3!V<v14bV8)ZWe{+66gR!H$dZL
zyIEASwsnA!8(`(4WM%BTn)F^O7gQb-v7AO{oNkF))CDbEQ43qxf*+gh8_^0U`*p4C
z#|;*YTxda#YK+4Sa>yvh+j|(wIWPZZO<}OcOKO&8VI9oqrf;QLW#gaaQ7YS6cMMo*
zv98sjE*0xSA3}2?_*rRN)ap<564_ts88WeD;W+1BTDw2T0@*Ia(I`_%HafXh)yL9f
zv+ORcx4F>JH#$`6mDt4)+Z~os=xW+htSenhv93Zb#kxYY6zj@Q*_I`9vC}Sx#w=E4
zw6;|ly`xrTz18^MDqP1ZyoTLZZ*yJG{<*$&QD;NEJy}?1b-X<_Q)?txG=1dO^wC??
z^zW+HzLo}#{s^jbT`#wmid(5^->3?7D6y!l#3HK_^Ve2l{-I4{h#izWRiUjUO0|-q
z=dPto%q=bTV!2C`)C*lV!PUA$8%$Irp165$Q{m&gg^yn=d~Q!%T#Lai0^K$^OQsES
z;24k@&la%Q;FhJ6>#}Kye4K3Lm)QuhUe4>YUHz<mU!B*t#?{a7^ZNeCyuRAIo!{s6
zz0d3W3+MIGY5I3EuaAq(>*e*ao#(36;W9fm$^+DnL+Utup9g5o1C*ET=qVXB*D+U$
z|N41=+Px|p<pFA0IO`C3ZAOX)%ZRqrW~!JeO^!z8tS>Wn$kC{reyBByoQ=w9iDr77
z$?cn^E0*cir0m*sMI|k+o36-jJXtqgkze0&{d7fnx5T>XisI^lo2M(9oN&E##rJ$t
z<&(1PwWq@wSL<w+O?fSCUB7CZ>hN`Ec(ZIw?Rtr8XJg)cuC*kp1M{y%1nZ}Hy3w(I
zn&%&cj(V2WTLsrbVl}bUjjZ((OaJ21t!ZNReSYiv{MPsRt?%<&Z<^nV^5kvgx30LU
zK#v>i`K=<xY;58PTX^**j;Q&LW+MFI`K@mzHQ~A$2-i(Ny>6DNJDK!-&Zr}2^sT&B
zbEBM5*PZb<$r)XB+5EL~M&JFHa^76dsP?{&EyDSydLHR7^)}KP8`|31{W%tBy_`|;
z+QA>2Gg=-+DPg8uTuPWJ7ngEI%f+Rf(Q<KJ&ZsoOM4o_(Pg*RsHF8Ep&3DvNyK&Cw
zyKiazWimJ4ibPtOx%pOv{kq9hLS|bsH)YXV)VJ@d?!1;BjQ$9!yLskjoxXdcipZf#
zqOvN9tg2*<%uP}Atz>TAVk)MCg5E$Xrh}O_l_r){Oj%SbO>U3>uf?$z3H|m`F$HUs
z$j8YSewi=WgZ008zun%=o$Bt+?Qgz){N-2QACHD3k^1TJn>(qT-Q3B3g<<2>nT-ZM
z8_#d>oFuc;#hJKo)40D=RyFV1yqBKOTdX?X>j|CiK4AB4ZlC1wG&x4d-jRoqX79cT
zaes=D%ERvN1HksOpgTc55i4XDUY;XniBf27X)BYq>Z0Ac8$6-H{P>90-F36&_Ad-c
zzv)=wvdUU!&4l&)O>5;tp16j0Yw{<q?ywCRj$EEWflcJ2HI+0;Xaj$>KPkTz#*!xW
zr?_5YJ|OjYH$ND+@CO$6jr2{~qrmZ<w);Qt(dUo6$4?)9`+whj=hf7M|L(}WFkCTP
z?$Wsz7qGbLB8?}wHL*zeWODN{G?ujC_w{$NI987tn~G=JL=D=k6jdmDMc=E`3mgwe
z_~i_%YTjPsPHB&oGrQxyb?DH%Z(TGHJy!2uuj0b`Cg8Mmv%KYEd3|5C>)KLvrvsXg
z-x+w7kG2_?<D0AFnY)?d7uT+#QQbF<AT#X|$x7BYu-P>~Yo?i^4dO6!tlBdSz%8Ro
z7~;?Iyx@qu9G#saz&X3(pS|pXDW`YyB4v*bz<2gxoO&}%1MN(**(q)6^!pE^FGE_L
zIr^l<Q04Zr=L?{-B+ooW(sCTM>)OEA5a>yS64-|lEG#I3rDS+mN*o66_KZ{WH3DyV
z<@ws<N@Xf@5E%l(y`xl2T}~O_48-RI3lQoRf-KV`EsK<ZcTn^lsi!w|>OxazmH@J#
zZ81-0&A+XbO<z1-Pd1h1fjX~HmNv7*l#j>5<>Yk}-%vcm)HoPfIy;4bSjI8Fmq-|y
zz@O~paN2bBNa3}bOsAbJC#cm%>HI9o7x=O`JtKj&ryv3x*~5;kPeZ(Fg6q7Ll_cFH
zta7qkECH)fX^r<GD80NQo^Fw?^~YS;bd-3)c~~VaR{7xwiyf?PO_Q$5J%{`-1%-oN
zh#2Y)xy*$S)hr%<IEB3((?;%xzcJjH&X$*;+w)m6;Z!q<XWkHSFdJogo{ScgD|}yO
zoQ&7Z5fCR|tVdb)T}N34uA?jm&XX+8Yw+oei~S@^;5^9^I#04h#s>JbbjBrCXIzX$
za-DM_K`D-_u+=KtEa!DL3C>wsC7PUIiqCmoMbbRwXqY^1WpP@-ZA)6W!P`3Apli+a
zj&&~awfbS#n*1HB6eqB=wfa%lnhzeU>?SbDwfenoIYr#4ACdLWQ2q5ckDoq!_T)H?
z!(bH8kH5Je!3w3sS_fl=`h7d<i}dn1%a7?mQd4l*EC1t<gZ{7hGkC=eVf9?&_s<^w
z=kfi2ef^)$9}8}k3#&hpI!t49M?iVD*#nhqB(HR+(xAtE0|F^k0(HX^h{a%Ovjy}W
zh)HPq{NgMfoq@A6%fM>)9xk$}_bi>9C;2p+Encd@1+|0Qr@^tDkA3MoaNCevu57+Y
zr|Hizx-Gh-6GIxXA=#uJD?cnr*L~x1X-2Nfj<f<-CmdKZj!qu^a`dCRU&E%Rwb^&H
z@in&}2iDe+;s~}Vt`Xs&`7v4j$86Dc`eUb#!1@7|5~G)l`EocTSPNXm_$-O>_>r}T
z(D6NTeD68F*KgQao9r8S32b<IC-(XrB|suYvY->Uzu?0BHk3Pm`(mjaP4{^iikb4P
zs)mZtP9ms2fT@Azj{FDP>BoKmKkwh)^;kfIRlCF&IJVOd{oPLm4i5zc(|~G_zD|#h
z_EBAPqVj#IVJzCJG@VOlB>K|1N|(-6x^%A6rE`@oovU=IR>@JKliw>u`h8^1d)w(N
z3-&K7=-}x4xbOY?tGDw3!@2k2hv1levXAke#w@GmxS2@*aoEu09_2JU8yrxBWc>!d
zPc2wvwbJCba`?$2XvGtQ*VuokF#Neq2)IGiGI14<Reri*)UtaOkhM!Uj4H`#e6O^J
zGDrl2mqNJbHl3sCsdN2ZLK}ir%-e_zck7qQrr(rjHA7$VtN)Z?YU@T>W@J6<u_^_X
z8=S|x1_cN}L0Jljf>5oUg5~S5e7z*lOM)`6s4O>FL1i5kyikW1>Lrn05;@jzUz(c+
zwppwU9O0Q)!hKIcmCLC1BW#*d8bmAoO*s-p3*B;Szol#_qea!dl@>a~dZmSS(8p{M
zGB2;%LY;akwTPJeS8Wj))S<QLF}JYXqQdoNt3GoXHH(t7gEA?VEj*BJKwP$Bo6<uR
zR;oldzc0ctk3}$3cP%EmwN7yj^6idC*<=F#I5^^)7{Y71jcU+}K<p0Ap#s^r;z77U
z1|E8f#Vn5q3*%c8fh^QQg2w>V*Hnus+Kix%I-)LW`UX+z&;06iZ;k8JpEfaNSShrm
zbBGSxau%*C?`%w?1JSrfe2okOS3pcY(t&7<#OSAI(vRUZYa5I@40X!1<k^)7*J^YK
zs^Ua#^UU;M+`ba97D^guaC&xc%}HdH-rv*No1ru9>%LlK1CA-h9kj;iwO>Q8eLKDO
zRj;09F#FdbW07TS$mU+XY<?e;v&Q7C!Ky=jy~}oHSw8jckJa~^t7L#lI&V+_Y{t@d
z-qp6eYI)htw3PsJ4I^7MgD{8eW`IcQcIgjc`1G!A_|!93(_~-Au6tKa!?znq;1cUW
zPye3Z_p;oZB!%`ex`Q*7*&;Y|MQ4kPOz$jkbY^91)tO-HRh{AKbG^IJ(VbN)sP2SR
zSkWDx)7E>79KDrgiq@p3H!%mHi5m4$#Q1glLDL`WS)w}3=)F~7vkDmhMKy{zQrL7D
z1r8lwC8~`zv%G4f!j5ZfM3Zc+?nDcUvQi0;tJIFvHc)nBhLx2qq#D$ds=q0zRxN|-
zdaWi(tDUnsCiuk|RykwAMOcrE;9X+dszp`Bv&Ntdp}`Fi$}h>VicAYWqk4RX?-D+5
zMGRKW*6N~E1YWqoqF7hOX5^UH!K^=hyI41dz1AHTCBcmSQc6dsb70iaWVGG0vN~4P
zJth~%bXV$JX5O*Ab-!21{gVLZagN!YC0nsdib4xyrPLb)<Ve3UI;g4?ks@O6VJZ{v
zD7%gfa44Z%xk~Pxk=#?HmZZK)R-f(#@{u%+868TkWyznSn;slDjQVTe4&v9}4kC)3
zmxBcLmxHXj>Z5u&$f~P8s+WVTyy>HQImpVJKB||4ti0)?dO66-n?9<SgRH#iqk1_=
zCDBR0!^3_#h|GX;WIOF(mXo+1S>EU&^W2P`LwF`YmxaTQZQHhO+qRRAZKGq`Hap1|
z+qP}n)BiKGnbpjq7FC<ODBY*(p7+FD@LWRO<h1fh<>u(V>O8<7y;pI2D2tIA1ApD4
zKpX{wG;#5W&h`!uxF|Kpp#18b;*s<Fb%Kaxv#p6PwN0P;@J0$wdFmqaU}r0J#9M&h
zM0<yWwtqauE5qdX&#~C{0IjIW6p&2{#9MTgAu`@*=c0uSU*bS7L2~<BTYp2sp$yN%
z?gmU0p;X}-RcfDaUF`G)5&+fo7Ciz_YnTfx7sZYPAh~Hepqy5ShLD>n0=YSLuUqZR
zy4jL@R?m~8ENFJ(FHpVaRX594p=1M*J~ae^VWv6;g`a)#_=K!O!`@9@b~*)yYx#9w
z%V6F}h$@f7%Ia!DP50+-;9nrqVT!+qwQiTILE|3g<KQI}VOsH$X8qi6zaVqP3i1)O
zk3be28ELpO{&Zaq>fT7(<M)i8$G#jOk2d{{IPpSr3Vg#;-={I*QaAT|(t#~!5^WeE
zO>AmYTdl4jPo17l0tnh{u<_$!o9RDP)*6B6FPusClux{p*Bxp*M3iVn_um7Clxp-^
z8HQ5B)>SwwStl~pcG&<{-1q}dS{6n2)0GC;S_;jqr;^(y+`GyNV7o~caX-LdT(ym2
zTI{JAa%pj9;$m2l$oHL1&H2TA<7*S<qw)*Ql*+HJ9-)o3cX4L0{U<+)Aih4}0z4M4
zdo0QNNz;^Beju*jpy<P|lONvfaTMDlCyyE@s6WgXUo89+2Ufff_}%yv3#=4I@3)Vv
z5bdeC6iGA*h@<d2eJ5O+zLX@uSB&<z!zSfgwEWZnrCfStLr({MhG`&JCF8*G{$Bhn
zCZLcbHw0kWB-6bw3_FyYy%PiA)4Wux+}*Jvc#JbMy#lE~n^R~%Zn(&^KAt)j%@t+B
z>xcz=X;SOKgGJ`2qGUxVGx|}+G>ZwM7_hLsS-SJ|n(f?KQcd-9)<}!=6G&mUEa0(h
zlY3ieJV=akLF)i0V}HCGDobp29<j!PY*+xd$%Lwyj@m7xIW%XV4g_7-?r9X&DK22u
zH>{a$njX5il&!h6*4S2Cg~q_Z#`+KA#AfB}vPRh?o7KlBAutakB{SNaBOfmz$r54J
zT_yog^CBW6m6B(G)NJ=p)b-;C?P>VWTW<R6M_rGRsR8tqOaiZgJo%@auK=c^o^FBn
zsM^mVg!f;vaR+--3nhBMomgrT^l;o?KSH@w6~Zw32ciq+ZlicIJTm$H{T|4eQy%);
zLs_rHc`~sgTffjRrjT2iQg2^#vRhPJ0qPtEUdYM&d{ul{Q?48+>|qm8CSQ=yJ$J1y
zk-%$EqlaG2FZwobN(NlPmV(g*@sVZmYU$t_8JL92DP~<9ChF}8M_w(~Drf|x#d!79
z5!G(`KCRc*lI8**xB-+vxl?c|iuP<!i6C+Ausvf^Lt6-R%|LLr-pk*_G}*sRI6-N$
zEloH-$7h)Hw}%5jc=ErGF&jbGcW}kr1cRp>S(`z)S1}b=+mcM%(3K<K&oB`Xj^nii
z={bBrJ%B@zhtoP!ijrwpO-E(;){9xPJ4mwOC}wVF8xhr9Sm;i^0^@bfeHrC_YC6^n
zG?Fy>G;_+1z$e#m!y}tG>I_nMn2fcu=@i1?u7-6VhS<pp<|63HQ92U)Fhq=3@Scw<
zC_736<5W63IS%dojnnMz8k&-qH)_%D6_!%9-RK82bYeDfoi&7eCk?wfKgBTN${PQ)
z8j6?<*+*>)AW?JSUqx&}!uc0U$=uI@j|uG{lK%TWK_v~eC-^M3N6GJFEXk4W3m1my
z-+__ah=Qp0-71BI&Dtl_G?Ss7Xchf!(<-WnzDd^x{2OtQW-5{ykblGu1|MXUBc}8V
zt!0xMH%#3^HCgCM+n($i7p;wEy#86o{^<f&-7uWZvYo9SN5@T*QFq4<s{`pc;JEFR
zdmOV?{e12pMf<LTIj&vKhPg<mYQT^>$~T3)j`G`!3?A1;Z66{q9!Xcx)ef63-u+wy
z%yAcSFt8wwS8oR*L1)KZkGZvKVqv2iO}a}c38x7(je>#>C8YYMGylC+Tb)i(4PAbq
za5$`&Y{`-h)?Ua#v}0RvWV3)v(lL7|38m^7(sc^yEE5#h<jly1wZ4Kml3kVD>rXxz
zz`G{4C$irW8ZBKfr=y{>U)~IK7I%N4wk_M90^SD2f4!n<lccdqplsMFZuB~XXG{Ji
z;!=CD;^p7y$E$qF34VeIR_B-eOFHfyNZWmN0oh2ob)-+xZm>Tbv^y3gjipZt|I0_q
zyAPi$zTIVUUBSdlO^0rj<CJS!hh|lUskYQj5uoMF_toBYdu#nuPicXj!QJ;pS);Uh
zBx?#elA;aR(DAk(x>T5^l$`~`z6jkPq+H8RtC0odDBwPv6hwq-gI18n_so*Fdauo9
zja2(oC#-WL(8F8YhW!3yu~F;A?kFvb52nS5WMwt}EsLo{+T(7PtfR6tk;c$3;tXK|
zg>fywD}2j-CH!Xv+{x5FGh&dT2C4P-OAhDmM;kklX=-A%V=3U(*sMA9*;W(S{f68U
zDYs{Q*~I3$;i%~?cm%_dUk@S<%?ekYqj*_}&cdW`$c<8$a?aA{xyMU4ZIr8=F%W7|
zv)4Wplr(<nf{oRY&gks*5lg&f+UuD3<&Zcnvk%d=h>$faluSz<*-UnrGZmmUkZq}f
zn~E3lG^XeUmeqLT`uE|Ai2~amhq282I?x6`(EHk^&FE*t_BxP{ssUhNAP-=Aet$cf
zSnl%d2wlq!8@{%F%lc|f<;Rc3HRfNwW2M)hp!4flxi3QZ*yOi#?g3xmvxL+BsPU^>
ziPAQL>276&q6&?rL?a&zK#-xnZoBmtw-QJ!nT7v>C`pS3;pUT*2&cyLtVakXo9&k7
zwOsm|aX4RY{MF2Jp6ily{kP?O#hl8kbReSRW6KXC4r%3QeUaA5ZvIiA%eEZ&C7kX7
zf?0}5+W#3)6CRhR6mdW^8P-o)@Q=QyjlYHX{<K5zeSxK)_Uy=;cd`~e)9A@e6D374
zp&+m}pNc7!?>XZA`BgNs<MXn#q7c{fdcMYCAn*b0f1(j^yd6vZ{d`wc*YnlinMP5x
z+>__?^?36osr&6&Hs|s9v~Yv(|C8g6fKr+`AqG>x_jx@hfbZ{3J26aUers*DwaqYP
z7vSC;3U#J~ka@{0_313@?_~ID6yQ$+^m$-dl_?ATl<4yd5HEi+vO`b)BlR%Eocrk=
zwlct-IDw_(Ii|3UemAy!4VufJ6caX5G}lZ3e1Yq1yJ$AOdR~+;T01d#==FV}`Nhq8
zvvAlmpA_=BqWFbfVc>nal9YEybAr?an=y8Nz=ayim8;gDr29JZOtIsX)QPkU{-wQD
zP-0IFB%-D*<fcKdI@q(G=L7zk>4T5)8Mdi!p!VRac0~Y7WiS|>J|I%I`r<D3Pv23d
zRv-a02ppPRSs%sO&0EBQ)g{F%OHP|Va??nl{Ob?@bKFGB8r#O23v@?`<aBeVlwdD7
z4HLy2?$V!a_c(n3W&84}02j5!50iZLLD_(?GE(D{5ZM9RooCRS4O7*^!xYy%-Z;TM
zLe9-lB=oWU?$wkc?v@B!QqE=k{ni$WKNB7;nEGb)FN(df2s~nJfp`fCzeI^nh|JPb
zjz1%`G#S?+N0EN>S2QyTXWTR<ZtJZx`%JNO!~)`7jrbHAHa#Z?95W;7FkiWGL$4oI
z8u(Oy44zSOe0rcZyxF@)W~nWFdc0Mp8JJiYBc><Or!SkU2*61WqKPk<8nhnxK!3(C
zU-1sdgtp>AM&i|D4RfcarW1Z!tTFxGC~b^+@#p*cIR+OxQgS$IxM(^y()hY}nkKTF
znmNJ9<XB&S<`<Y+wY1s8^wVvai%pJr^sL3c<Kt{j5S9?(JIjY!m(lXwW+rXwde>Ej
zVBqSlNnAfSUgTU>N36z<Nk^0~LJR4uJfDNMsU%h6v3m%<B4uN#2rF`(qAEHjAd6fv
zDV!o@LUwtY1EcHnPZ8WiMs~Cbm27@Y{!_<(TCth@G6)qG+u699aZaUxe&K#QHkTS-
zqI1DXjZL!?R_4@+E;FRbwK+*W(2-d@Pe9*~70V~S!8z3OSs+&um$Q?Va>VbVMTHG5
z`XEvQw&sywfu-D>f-3SysP<WXtW+3US~0`VzrL~~gg@;3qw0`4CN2wE&kXzzo5>kc
z)w><@_&w8(1Zo3~P|Bx6hRtF$X^vy#enE|^ozXe?$H}Sj8c>nUGbIYLpx=2Lz+d3&
z<}OVE|NHCpOaPz%Yk%y(0qq&)`8J^(xB0TwKtmnxHq%HZi*q!`L3|ygu@VAcO<L(U
zW)R>FOIJ(EE#}&DF-YD}2QpbbgHUx$p+<@~P4i28Xau}_G8f%K>f4N-z>pYAl)Brn
z?yNV!yK&SZvI@;Z$zWkP*{CAwSqy164^AB&PJ4TL!C%0$aY9A#daWo*R&d<elHZP*
zBw{43$TT)x1W?>$c267mFqg49iZ%|#KrNUubWKA@HtZLD=uq%UH+#*7*rOM<BN;mH
zAgOMxQBYjg*UrojRE7aX=UBu-a1ix-2+t0Y(az=Gc@g_B5udF50@jXmZ+y&OQK7ov
ztmP-R`8BDqP&o=)^m8O0?EN(-8w#2#WrxP)O8ydTy)6qlwHk$TwS^O6gkZLl_Dbpt
z6r1)Bk)BS!DP1;5Zieb`hHVp<fwraiTbsL-nqn>uxS$!Bi@lY&9W{~ukvkoFrV1C!
zo<GH#XXo0sYvE4H*D9Z8tFA|2Xad>=*c|$r`5ohAs${A3t_`fKrUWC1WKNy80S;`9
z_BBQ(OvLoLqsI0X0zw_BUq5MbS(NSad5sOHYQDXG8g4Kbu3z?d&yYnreibTqZIp_*
zdfLREjUtKag)HP9e<75jb?J@RZ{j&n^`ZpK%4ptQ4qV0Zu;qvHE*{6o5{hOL)9BwP
zWP{NBxj$&yvJM8yHsk3KhW`X)_E{!j_}8*wR$IajyA@^8Z|d5ZX!DfD&(+eOzBg;_
zAosYo5Wi#3YP`?QI<OgfqRPF;>w5LD@*(VuWP7|ca>2ipbIK^7d*C7KrL)qb*IW@3
zT;cn=O$ykHbQWC)o1^4q3=8=2^~>L($D>&P+bf1Ifm-Je$^pgFOy7IH!yR@?YO;2v
zUbhgc`v;`JQY1s$6lasTq~X7t7rHKA+~596jw&zhytqkoEp{?QeK54T=Nh<eKsbIJ
z9(`>sNAKf%?eNU({YQbj`2s=m<a82>>#(>Ef959Wi_W-&0x+NpBREL1J}dvYn09;J
z`@XK@;n_g?{J0w-;;Z|rv;Dl<?&+lu$BK<@4R%s_ef`)**y>VfnghWd+Zwo<17*&-
z8%w6se#eNenU32HyzyClFCW@)l>HGGNRm<#pLqED#WIP2*y#1n*xU(wPO7zgp*<yT
z620}S`3TQ<zb_`7?i+4L^LR&`?hf2JaA>8WJTh(k-a$&nXU-;<6{pj>a$=2>%Ls$D
zpTXnbIoOK3$guJ4&{^Hst!!k&^SgF2->lWWTB~=3wz+zZt`@}bbDpBoXZ8F3sA~)3
z@UUz3x7fGgB?+7b1qEY1H6CcVL=2Y*Ib>}owNfzy#C8zonT_${cHiFVC#XLN#NG@7
zQ<|@dJhB4X9=0?SIQ<i2pV?YsV)_jD`>oX|>*TU}cy!&4hcsfR^Yu_w&WQlPBed$<
znt>~hf@kCVdfSTG*KiS=c*rFJo0G}q+U_PHMiuTFlg`p~^kDb$MkzBpyobM+Xu-j|
zOht5?6N_F!;qF#Dn;|jDquG*sk5CNS8dbGJ0&S5p^C8<lMHusT#WE2s^5wFV;Xha*
zgv=j;{|%JBp9ZEz;sF8@nFRu({{H}_>6}@(7(M<En)ITtojYz@!nMV{hKnUvf^DKT
z&=<ANHmBANzC-pZh0`=&dn0WTFzdh9QS<3XMdF;no-g!sA@?HhFk};+PHzcrWd#m>
z=%;&CU^SM9?YhK~m91yTCQUxKs+F-}yR?xTvK|8m`?l!l2|eP4X5OR<%EUSbz5Ao#
znq0mQ;y3Hg@9hk|`?IHOr>?8%B!#qz!<lZ8w9hqH`;Yathl3Z(Vg~f#8g7fEixk%l
zQw+Gq!J@;09#3TKTwZR4#Gcx^BpTnW>gCSE4rkWMYo|G~E8{a{cau%?G+OmYEd#q$
zm@Z~|&!$zq`&FZ4#<006)2&NZw&g`1XBm>Y7Kc$2-@CUPfsciznRoB4cQ2XXHL<o0
z`pk<hW4W!i$Ze&zi7opDKF`nBsVt5Y8*RZAx|x-Y=#kS0&g!F2C-)X!{?ca!|3D15
z2mjXSt?8P?WA--}Gl!(Q<q4fH>o4v%O$YXkCx?v<XXlDEjo6Ucc7;SYzCETt^?~Kn
zT7DWf-f|cEE@fj!?|;0nTFWB4mM8SlyVAXo&QhM%Z%=yso}SWv-p&Z}o~}9uxvh;c
zs-i>EACKql^qgdH5jOQ_eSU<Bn^$xS&1Fn9B@j~e=D9`yyuITDo>FmB&u&dR2B%fm
zcW(?slGrB;Gr3Ie+-hYUCq5QUdbC=71(h?)SJ!_^L*tPYCuo+dhtTF8*Y(<$=nH<@
z#zL7aFzk<7y(BLGArRLxJ~c~kAnZNOY&xFqy-pHyHuPORYLT67QU|%Pa|WdltPBsh
zXI#_`h^m^*8)Wp`b$aaQcXklzCWdI*0CH|Nb+0mAf2HNOb+;2M$+w)oj(6k}1vuO8
zob~C{Q$_3C#}F)fe$E;6glP(l_-{LG-6l2=%IDU+E=n%!vjg2whD7z;<ydLe7w^|^
zuTE?cMO)`=eJ5I4$85R)<eh7^b%`|YE!*4gu2}Okp>q=$V<p$TDYnV6>MNZ41vn>#
zM%sm#Rc@(_2WwhQ-Hx)9?i)c^tP!6BH@W_l5Bu&6gc%Av=vyV*|CG(_!*pF>ybW7V
z=1tp){l48Fa%rp`508iwE>4ZkqCd}%q;okKld-^kb?u$H1`Kp_s}n1Ac`iv{vctFH
zJIJ2?y6!x2f*l2Y{iJ?KqN6wdFWx;KVP#v!?XP`nDqd}JwY6!T;57nPsWuPLG7rJA
zjn9Q-GR0$Fb|jt@IqfdC8M%Um)*{Xh%QQ28z=<yEZxdh}DMtFa1q2kjy|VhPGoLGo
z+&mN8reECM&I)cNJac!l$wORtZ<ei`Gklb{NM|&>+`G)^k%QB`yoI`^j-JldUWm1t
z{n&6?&jsTMJok>SEuL(OCHzT0@$D`izAM@W(sDMse6H2~+pfWNK4j`1ipP*h%Ez9D
z<EjkmFqYSP-$o@N2O^TWY<w_o$!G5jyu@UTw9oV9mf>qCti_5WwfV`1Ovs3QFDoKr
z25h+CgpXVQ688z1zkjCd`zHN>F?)1<W@|P)Sqq|k3aZ?u7jM!%{WX^)-Q_d6knuyb
zYSgmbbZT(IudqVGcyA$rI=WFH>)3A<#P0X4E8-H0>oEX5V89H3vZ|8|Amwl&V&W+p
z%b5ScZ}D_;Kppthct^t`xl28{=m0;1J(x~JmxkV3ZJ-TP%V68<F*rlP4s#5UwJ3rb
z3$mhJVU5$Nsbip@N$TmyA?SS258hQYcjgSK>cBxfdoxhShpWi&?$R`Hhq7`%;p!>_
z4R$2u(O)#L7-L?hS@seh#p@JiY|g<Zyx5}hYz}P?p`TL*LRh@MOuEYCHHDzjXKdDK
zTuA6#Zn5tyf#;>BVOm>uaNDk|W95n#@bg_hTlNH;?hVqgI7fq$Hi~L{3e(((`#!0g
zU_Z>)tQvZOFre3U{VVxtqOIf6U7^~&firqUGunSb=agan(#*!-0Om>456%e49RdUD
z{s<~4@3<Rygu%PDVe~2Q$}{O&Yj7NtB%EKfcGDsIctQj&qRK-uR)RccO0j&lAp|-_
z-X~4S&Z)wwqjnGhpghmOI16)oT|F(0@X-^^U5$2+)~2<Yg0M!t;JdWASj4Q9nJOJ>
zBFyeV;Y;$pMVB3h3==7Nj|iJON>)t4<F9V*I$gN>i`+u*M5b3fEM(d!BNw)9SUrqa
z^{E>q80gT`s{`O2fQp^g2>c|-U4_zbx&BFiukboe;aliO3;k%J2qZ(TyyB$Z%^h8R
z!9{<1JKb+)=r<u~Kei7%@&1x;75w;DSG|nQadq9t?@E;^6<SGl)~y`_NC80}51qvk
ziyS-WE4f*$a2Xh$>o(}mc>q#uV^3PgF5vlGJu0C=y3|zg?{PZ~`!yXq3GSLN+HK#Y
zjvU>2zkTDTD|uf3>=#Mi4UFg|wsuMaN&e@EyH(p-j4HP;V#M~y`Ux8A1W(kxURn@G
zgyF+$^uwGa6jrVbOEf-B&nk@|A<HxRW~0~D+0p^Q6(|t*Yx2QmzDVFN$g{~pJxql#
z{jEgIHdHFTBo@2`d%3-~u(OY!j87E!9r@`bhR5luT8_HVi+oM}DW6d(5!)>^VBfUQ
z+t&rUngP(<yso@w-naSA5N<xx7o!~3C;(B)uIK7CS2kXe&bq7O-wV4~vyYqU%L%u0
z8Gl6AgzWU8<9QuCx`agpOMKZoQuF~X8d%TNdaOR;47g?}=PH<UI|<t@gRuy(u{h!G
znU0J4<dx#Zi4u8zy&NT3Okr2()KB5>0k#dBE;CJJ70r${*Q8le50jwPqZWyRuA%wY
z#S__1`%+^*aUG|8KRbX}L_<`nc7iX<BO?6QE@qcya&U1Td8Lm4*F)FpMHAhzaIWV+
zhECBeG(ocrJab|h>KXm|mc+;iDm5Rj!%sS|`b?<L-K)}l+d&b;4F6A0Uf1Wl)iaWw
z0WTld+vzL8;d5lt+yFH%;8r0n&dScz7=eJFP?0Red;Eb{+VAV4xaX;gfWZIZ_>IG%
zo6GyIkK<$q@OImGAi=sN5c`$O;Q9R2<Nuacr=Y+ORb#by0I^->!SKcUbvhc(;n!1-
z@qsU}TB4w^y;Dj-fXDZDeyi#>>>9?O>Q(t&<}8a=J?pnzTS|}WH@h5<uD1csHm(4n
z!(|<df7dRObN3+<O!uLZwEr3t6`Fz5MkYghjbS0TJ*}Wx(;<f}3^A17%!56f!2<v<
ziPq`2nZ+6(FWL}<5H^81K|F74=LNZ^)suV==};R20p1T?dxso8EkC#X=@7A(BrsH8
zv+t`RlBp=OBz`>;@0BG4V7-On1V6BQt%T#I?C|hzhodTK0RrazL+KuY;rI3Z<3XH3
zx6j+$U3++!$@`7lK`da+=Ssfk?W*IB0&e8wayXVUhJUz-Vr22`bp@$pMB?lZ6|@><
zP9FK0oK8w9tJ-m04$Ya`icb$^R%69w#m#JMjjfsW7pM-Z+#Ks)H!+>&KesC_jO}9&
zF+8Xhg#w=E1jYDGqLrU5j$&HLnHHlkYon!uu(h^hWiWoThpo+KL|?Avu0=Q+jGkfd
z=q<<aYBtStSam|pDb=P^q-re%0$4Mf*4QKJWagGSTh@Je*cmIHSJ>CPjm$J~=v&QJ
zS*399qam%R?AX`&w&qQRrX4zTEw-Mmv}H_VU%w$LJ~!ni{v=PkEIUDD3Z^z5vn~FS
zlFKv+W2Qh)3&S`Uwb7yRU^lZ-qq*|<MFOLRnqI(2+D5$cEp(<@_0KeK=h$v7l?p+X
zN~Eq@Ec{<3(1hor?y2qxoy<CPTBq)vt4>=XniV+xm~wKVxzX9M`XFC7eKE51p$}bT
zv`Zw`JoVHm!i?fcv9uX{pAv#p^S!T4vQqm2JT+Phq350OL`ONyl#L|YnM^M8i>c0q
zHV2paZ!0N(O+jW9<=J}Lr_#bP8}vfE92aGwv>4YvHl!TmmO_ciVO-0J-BJTV&K;8z
zfMM(q*^6d$-o*NpO4TXA42@OsKc+?0qL3xlvSNfdD>Azww8pGUHF+^YyW8oerM5DR
zR8rx%ZmX=aR=GGEmOJ?q!)Sgwa7oF=xM7&?xb`v`x<!tYw2`Vr*lOygP&su~BldYs
zv~GfI{&owRI_l&;D`53Kr05I4s_4)tlY#yjpgPtp&UiDCnMw}pZXX30!+~f`{JsdX
zO-PxXPc0ww-~&S)bbvumf-C19D7=V~71X&_)W{f%F;i!^(mzT$z^cq9w`VEmD3G>Z
z2*R*)>JL_LthA^pO*?4ek`Z5z03lS2ccTF%TQDtHZX81Do}+=_gv_L^3zR{F3YrYW
zIJchv)CMX7;aJ6oj2>@AHl#^T#7QyL9ybO20zo|A3IK>}bT~odk*<YVt|>ZIrKr<!
z{$lB~^<0`K_-7(ZYFVL$S6psqhr?dVOvXnF%pw&;%c}s|N^RWLfT%8|sf(!&v4yOg
zpv@wcI4O!sNVUsAnuC(s7Ia45O9UyE0Vr*m9|uXS4QU{yAs0~<ZAQ{`5yBMoF?*wg
zmiiL{%*JXfe>)YHxMHSfZK#woH*qUCk5r#r8D@=0AeRcN;H-Dvcm!WVrFTZ%P2bW8
z)~V<qQb^AX$GF@+RdX;MrAcl*MlI4UHU}mMCsL^w4}6bpEsXmfzBFiNCoVXFtI{m1
zVho3MCyPAKEQLh`pwD2bB(jxcn~7&n@eiy?A&P<?s3vVZBU}45%B6nD37nEL3T8#A
zT10x`Oy+}o<}S~d4j{Ih7q9<iX@j$otmv@82_i70l2nS4e=HauvnXvLn>%Wmpbf-k
zow0;Pg}8vt*?X=yCW~Cd%aWmMkLyxl54CFwPun<Xuhx4(=~O%15Ie^_25uE!Y;D{&
zE9f93&${xPa@>qwg*Hh&5o8ffu=kjBR#^xSTSciHIDB7HJ*0P23k7n%68NR?-X5YE
z8renv7Ph4T3bHGm_XgiO%{Z)*5j+s7Y35K&zgf}YKGrUkSt`t@nPefv8c{tF<!Gn{
z>kJ=@Ax>Kv=OmppA<==TCU7XBfMcClUwWdF6mJ)vl{gX%ekUH(sRS%-G$<rNR#_j}
z8l8?X_jk`2Y?5l4sA~eKx$FTXBH3nb{Udb-aBbl#X%!NhVg#XfB)qE-Xu@E6N|5TX
zwte#YxD7#-lr*A<fBosMD6pw1fRsTqgD_+UF3Fmbu~-rGuWH$$t|TI_a>PkGFj=UN
z7&L;Zq(Dw@A(bLh=xlr~xkd8HBo>JMeG8p!k^O00=&q<1nwk=cS9PQjakxGbL`cdc
znKGF~AhzPbvOMR#*JQ@9NO?dCo2%G+m<`owiD6-gC8{B-EyB8pjUGtA#P~y&l=5NS
zxva=r@e>&PB){0TGA9(ul+>x&)XK1ms!VlYp+$dRjKn;5nFfrjBo%Q9zmGuKXf0iz
zy0EJQn5C+Uq);DC(qWpSM(@9p*jea!QTlY=T(gu`vQX?$<5;BTL?s;Zlx*^b#=zFZ
z8kAGa-$l=LVG>hpL;$*sn*Ia@8*rBjTSz};P<pjPf~Hj0NZCaFREzj9QyK3t2?D%u
zJlWMaK$_20<B2IaL+s3#UpgLYGAw-5k6i#vfW$Y(Y$8I=Zf?GML=*7&ZSL<2puI*+
zZeX7(LUg}TbYLK$zoxy#E~j7`(TZU9(277bpxG&yPM3>@sMk@an0I8tO5n7>i|LMX
z>7b4<F%XQsKkGn+vvmb3&?;as^;Y}-;F}n<JfgfN6q0C^FcNWkVxT0(jG<i;EKL5?
z)xV~5-@*hjV}ZQk_?SWF_<WF6NmlU?j(=|n3ysM8;K*YXl#2j@?X-Kna_g{`AaheJ
zgcmCa75}ncTBTE!;&E%m!0!g)>;mt)AiB_W*NTf9VnBuTlUKru!{Qp6n~YlPsz4HX
z=-NXT{gO0ffiAZm$v|8OHZYt=zK0;m7dK4BZOI<#M~4Xrm!sNkG2bJmMmt)C>VS9v
zec7emO@77RxKjQ@JHnk_93v5~0Srlu84gqNpC|!x3Ij0W&6WdUp^@R;G5xNFbjgt;
za0$>MK$E}~MSMnOF{980gz!*7Fo8LJeix49nr5pGP87JPK)(>_SrWW1LlmLr(A_3u
z#|HdbLzE27NJ#2&fR1JCDUk|+H4SO&uaWxe;etp;<WV;2VZ9KP9Tk}}c>tJhA#gJx
zf6+R@aa#<VGCCaPh<Hy@fRTWJHW9rc!3v&Mp_uq|Q9&$$BgA*Zfa?cvrtrL-0(}u;
z1^*TViU+W1zF4+Ly#7W9nu&QJ&o0{qgCvqcI@5>5_Yh5o;y}Ph*pO3Hc}?<e(&wX)
zI6~OsT*Q4DZvMcjYdY=df0~sN#j(cHvzT)|MR9%KdR0Ulc)E1(@pHdMNd5rreqhmk
zMR6hR8mV3t(N<}bsnx)9eWF-S^UCt6*R+#Ad0Ae`{=>^HJv)SOA3pP)>2o{2^}cZW
z5Pj64g)e3zF%skZ{*blPx<bQmE)Z*fkj)ee>l4~LU;uYAj>>^c7xynIEMt}-cu(4v
za5-=iY8#{)J07KN`%K>^An@(s<^Jh^>mFH@b}lMd@%9mU$7vpyC=fc{S%CiffWg<8
z`zs-F6UuACS!&R+G<1FcT8<&BB9m5{QS4S%i!1;O=j*d*JC#7#YT*ZDP|(N5mFCst
zSmpl^$0w!5P#07yc+F2>xwUnD-nT>l-ABr|dakmRM<(Dii}WRWdtb=sHCr;5_*){|
zyou+&IdiMPZ2b2`lW`~SefU<HkWqx{7T%kdfz#X4gl5NLF4TihmWr6_3u$20XD(FK
zHVfCBH{t+?<*nZuI74T;oS<y+Mnd5W^)EYu2va=SL{op@2IgN%@zhss-uo2;(vk29
zGm!0P7|>rGXDeLYM`p1O4deL(5=1$SN|#5*?V?eKk32Uk0^gdx?mop`#?MnTfLw1j
zgN(F^Cohy5L%<mo1y_>fPzA+(=c9;#V%w27@=ImYX>LEC(j$kb<IY&jPF?F~Dpip?
zhE5Fbwmp;iqkO3Q*DZ`f800{b743X(Z|GoBdT(fd7j>bStfiJL`ORQR<4{QIkmN)o
zM!Eqs)khIY4~$fv`x!;v=p{HuzFA~A;NLRb|7GPtuOJoX*Z%FfpC{v|A9`}G%4hlu
z_6uA9qj}-XHB6g!usKvPnxuMZfwGh}O7H+~L6DXHFj*WJ+adjz!#WdOVx9&=DRRQD
zBSZWZAtF|!G_LX6=mDX4sD3b})(6EoNtrPAkQ0jNUlcw#Q@d^LU;BfiIcTL&s&%cF
zaSc!lU35qxFYIh;%laTr<iPuJA+Scn*24yUGZ0V>7-xs7!pw>B#!wX%A*3>vg-6uJ
z&9K$C1LL`o)|D^Tg)i2vl^-T^^!<h1FTh<I!SZvz7q?lsk2A16$ulfix-^hxP#<LF
zJWIWDLys;OnY`z=0^E`2@%|{f`}<@CE-3_d8o=+EzdknY*@rnyz%1CjfbBOz?*E;N
zE#XRVW6#%Z1LH7dXUz-HUj$%Fm`-Nw>a*|ShZTRT`JV+>2kwWiHjU5<i&jT%xO~_Z
zs?nuShHly<#mYSwFkKWN71JSV1VII51bmFE^uTBC5n18wEpwknaO}Iz#)oqAzvl&R
zMEjP<7Y%QR7P}kY;0o`MvtiK;83m4NQkDC&jizV0e@vNR5uoPBu%?whfMmaeN2oM%
zB8=6i=^%6`!0v>t{Gf_^cPWs}pcY2D1ni~PId7<<(4~4CX2ThNvh!C|$T?=&_rN`L
zT9~t8_gZ3}>t{cr*T*LKzNK1n$F#^4MF>83i<vJ7YO8~;)Dv(*;{<`ueZQ>*^2O{p
zOtI@K*~N5qvJd0e{uvX?Izy)LFPRWcIJi}|R62*1Xpo*@c6S|(VC$g5##M=GZPkhu
z(YMpi(co;H#x7G<dpXlgnJ3`~pKGOsjxNfqWG;n0i)U9bGZ*frw$Zbf$xh7FwO-ie
z)J3PBVa9!7_athmj2~~VMQR^b%ACZZ!_F?ZXkVxpV3N1ju~5dCSCDRPHpeB1o@}<_
zly22hN+T*+&|F$BJ#E6|--}i`0i?F{o#`x~w=QzJ);{PSw=5NS<U6MHBgyHfWT0{m
zPgtj+x4@oAma?m*hOT3hRAF26+NrlU4)<y6ouoL4ajw{(D{JC7&B~k7#j0;KS2io;
zd&Dj=Fa0_(DPfa8E1fCQL1v3x(xY!imLy#?qfhQvvLtd=YsEU8jUc9x$<}2jb-q$$
zU+R!PMJ@BO%TaHHTKZ*{sU{Z6avmjaMJKO&G1<|-Yf4)t)~q(_dtR!lzPH$utd%tW
zJEl%l1{R?O&a)N=i<-RH#x!)ne~o>R1@~JmbS#of5}Qh`G-djq*+g|^ylq+~5ud0w
zVM%Q0FjVP73kfqvfpLFxKOsiZM58@3?(a705+g;-g!V!=<>>gj#*V4}4A+GBdn9!@
z8dY^kB<1lA!rD-f2-yzZy<Xi3^|||ZYN#u)*a+8U^jazrAw>~vLt*BC(%*FQ@6H-g
z9Ybr5CNLE9@p@|VQPKxKJ@nObFxjCxRl1qs+%(8iBImK2Wur~w`=%|Z<P&tv^i*;Z
zb{=re&8n}q1ZB(@9o9IwnmX7cOPr~7=d@F((1cO*%PllSXXIo@37p$<GI?F1(rXO=
zNa`GvW7yeE1woR@<V%v~Ddb63(JV`?mCSqbpV-#E=`yY<iO<0G#iUHTE}EP~<E*%O
zS-MHN|0cO*a18w{vAM=cZSPY@OOANZs+PJ~tpzs2E2p(pTsUxX^Auz(X5Av0#njtW
zTyOMvHc(wLxj<L(sDx&~%I+9aE@2&m{~y>Xez1jtiy0}jzIaP=6=}(Ac^6h2lL#t1
zTCrQ5#=w0@TKsWLk*zo;nO+PzB9kM?u!w=aN+m1o({w4FS#^K4bQTSM6r4#jiB>UP
ztyOptZFVErJW>|5Ccl-vI1`EmdLM388#x`_l@giKEQ<sx*(|i~u+PzFfxSefK)hls
zxmqTBoI^RIKdd^TsYXamL#4g?>cZQ$B7$Qy)cg>&68DU>;9Pk;K5JZ-NHni`nuU&~
zSh~g*8$_72Qcs5_64bA-nY`8*u0PSYO;SozK_!Y*&AN&>jo#Gj&u{AD=db)iL3FVd
zv-L&JB8ugN5n(TO8mZF^(Yt_JZIN#Tsj6l<wQ{BLG3#QXN>ypG>zx*&yWFJ=k<7*A
z%0>_@SZq<0sE|UItdc*}!hyP38XzSG+!Rcm@j-;MHM*n6t?S6-!tnEydOC+mP7Xx{
zK&`W$Hn2{(Ty#N)5p2!iN(J%7mF<Y2V|epFnXKSvhyvCd#|7`?ZE8`Q=1LpQ>XMll
zHB%*GDb-eH^rl6^XvyrZe-5i8#niM(Uv<S|xstD6sryT*vJ|1Iq8o(^+kSh}RmM*-
zv(e$KJxiO})wq`b(4GT+OFCN-FQQ4}Cr)8P!vrYRjOrcrs^144qS}s5qSsKz9}z`c
zEnsW8X>nLt*+!&=Opp2&OsiC-hCqjsbT4C#1F6=MSs}PoOfs*eD{7lY1Y%b-8@8Y3
zyI9cxx3&^bol_S_Lg9=N0JH0uJfJ?=7gmeugxt3@j#ksfBTgpUWT8eH*GXrHp^url
z3boA@kYlVJO1dQ(omC1?XXlSbpi9k8@>nB9O;~5~M0I(PCT0;)U_hf$3o|FL&Ns`E
z3x`r!(Fvh8-mnEGq(}lfGXdIxu<V}9(2`)PMb8Drg2-|y+Qp@?Vu*BNE|POfn&rtA
zin1n>!i}(2I_K8b#lOb*Fw;l`6p$GDTqzBzq%v%y3!``)%qkS034I1J$JeFJq{V>Y
z@|9aiT}kD~l(gmge%V-7+0GG5=_&&(e7lgLn<NiV=V#>fRLMo6RMZZ|nUg6o=QC)h
zf;XPzg$gu_nB>QCwVbr5l9nX1TJ5YacwrI*YpPW9zlq6igl8d&h-O_2rYlG9`y;q1
z3B;b&!WJv0Qi>(9iQ?kwg{>H=j8ar2z028$r>#v0hYaH(XLj?2tr1T{#Nr~&OhZ&&
z(bb^>pq`=2F#>#Ju$~nKfBnS0VvmN*VwL=&T%@!>qbb0JKmQZrnmmWlzUfGg32E(P
zjVeQ884Lr{K)%yvV$7x5=1c*mu}V$U5dr}LZo<wD=P_PHg78Ngn9!3F$-)kEf?`*y
zz>7N>q2I@&Mo|ik#-!kv3$#7b2FoCqWa_{2K%dE@@XSKRRv@rFn^(BY_**6*E*iGe
zmZ+>EOfc8;(ZF!#v4kTaCR7H)e;2v%Vk9m9GDgXfN;x-&XnOc6&>r|tw4N6C^rC-A
z;EA9o@Nyt07;?}ju{a@5Y!q5K^}ZiEjUi}(0d`7z2(>vrMj%rJ)X+6AY$c=kmdF((
z`xK;ZW4RajhJJ{Gy{-!0xM~I|;;^VOM=&xRDz0b?Q#n9*6Sh-A4VJwx0y{8Y$qcF0
zVb!yIw=zQ&Huw*cBwh=zYPFGEIaOp7OTC8prluGg%`Q%B1Q1p_lynCno#oVM7dy2x
z@FMXrj9MsVXpq_;G(#he$S_5<>!>d-c0bS6HiVq|8<7l|a{MsC0_D|;qC%aRzu{&k
z1_4p<h@f;56&jSGnM;fX+%RUkkj3va=y%jgj;w`9@Z`FxTfqT%C4Q@VeLR01$!%3c
z$WVG=E<^^w(0et-uQL?8#@pTu7SoK1!kWkj$A?BCk<dhmBLr2^sblkx1pCVyDXA9&
zo5YOF%X<P5Lh#rBZVo;lk-I6|8*la0Zj#2}<!pxXJUAu&{xDFoH~#sd=4kkVnUK5O
zb4t?h_?Z}&^Fj-5MG(cO<lxGWftZl{b@geWYcI@totE{;kq7Ik#xzrPy^=+H0A`!r
z>t*x(RBN3St;OwzRc7*%sN>7-CcMLQUx#rc-TSTbFK*qYs9X}C8!g6K9mn3U2QL(+
zsm}EReKP6G5i4#U^l02__6F}I@+NCYoTVyUT8@SnY7VX8w;6p^V`4NenYoG1`TY-9
zfh|4bc7ygYcKO6%t1tKEtj(g$!RZM(^CMn2N^~w=JL8v1IrA0_w`z@y;+Ue4n}W-u
zK)_v$gOlv|*QQevs8^kM$$A|}!-H3nR_GtR3pM!EtX1#SELcenDvrP!KZ=FwcgC-4
zBZ2c_|B}gR-FG~1hdN7D(*iYz(!X@3XgdavCQ;h4FC@Cp^}KRIAFHMy*1#@YTsWZi
zY~ac}5?5y@#ePF4E@iLWfm4pZS}~a>35T)fMe;dUWwLWh)n>pv>SaT-<WR{fX|N_#
zW@WG0aL&2i^8KsT_wZ3HbCY{@Ll#@HWd#2QkkL!_A+oHOK9T!Y4f$1R9YJS~b(tq=
zM>ddK814;<9}m$wO|B`xXm)g4ip89LfP&MqeAdD*)iU}UPhL+jctLh|R-5%^y8pIO
zR%3S3ziyG<nVSFdN(|2Q$d@j$I0HNq(Z~HoAmBROF)0RdFN0TvV_ze2?7ePVgzRdW
zB&OHqR*ffy$0){49&gS(ln<-=I<IWlh6qyi=9`yF85e@uQY&|w*-!4Cw73O@pivy0
zsSw0!gNA5jgP>L{v}^k5A5yH^@3Fb7y?Utl@e=qxZm+lSo3Qs}H*L1b<>LYvan0UJ
z0ixHu!|-Y~8WtV0yX5WPCVYGMZ}9ABYSF7~5X1&d1irQpEGh5vRzn{&fW-cZwvvbC
zY&>^LyE{(s<-YvBWn*zJ#>^>MyH>CUyuWP^S~i4TzG1p8b>ePfyyR&fi@h`TvwiP%
zU)@cC8Qy~<vY$<Jp*$oeify`%AY}RWxqn(Q@fAD$Hm(q;x<AjG1o*t4!9y$_kB>C`
z0(rIH<FVrtZ))is5rY&cJ);<MJco7)(YnbltDTR%I#;*IU)TAJ*ATvgp-B7FK1-5l
zx=azZboIjuJ|VI}y7y4QQI2)XrrJhl`G5y}>S|?$QP0gA9$C8F%-goN*%s6Us!wMq
zEwgXxzS0hAINA=<Sab6p97l>>eU=w4<m(V}eZQL}ngbPrlu#gWx9kDILXysfsmxhz
zxcQ>Idk>JgB9*f{dH-Cgkj<t%uHWqRoP8bldiorkySA!%Ry@sibLuDrPE_C+j*T34
z;*grDm3Legx4&5O$0VeTkNG3x!aw(t6wB5In|3#P5|_MOpS`*kd4BXvbld~$t{zzN
zUX$m-@mKu&f=f;rA%idxf(u{frb)SBq4)FpCs7g9@e$Q8a{S#0C2x2Zh7U&bM(A=&
zzq;z%5UENxc_RCag%4+`uDhKzvdT6zW|pG0E)}N=!<eY^#9$XPpE`p=HIJJczj;R-
zY~2BOm%-MXI=#(<hxqbbWmg_QOP!YoMWOA&`LRR<c%e=z`UUPU1pc~zYM5o29n_R)
zdN#YYLOoBWC@J4wO=d#7@hsIJ+~%Ml0<R8HLj~^IJ&?e`6HA2onlSWf&!Qc$#NP!A
zWIj%~1TYx7k6I79+fjU@gLEYA6C^t4?9+>Ufam-tYW%zX0CITn=klnszlyN;=rmJg
zEzHT9GW6hx=C_$54S>FW_7-R@Gw;Paf<w>={QkC4-LSE+&$&R`OtkGU{Ep{Q^3Z%p
z!j~0h#XXRLjF9kIo6<rGpM2OofCnnD5P%ar!~<fsQ<rPS;bBsX%t;p-reA-J_Qz(n
z=K7bYwB)=V5sH9~rUwY|hr>ETGT-x!B8C%^?EH5JlX;Mj(8T=KT|^v9NZb*Txe}6j
zJUCuSB0ey9Meh}LX4AeZV~d)rNr&z9WfNLz^&7{9irO8;;_ZQs3IAP+V2d&T=`*%r
zz?tR<+yb!sK4ciJ<wK3NX1*i$yDhsjlJz_dZu-^0iU$<+*$FGZ{x1x)?|TVHlkaP#
z8LR>GMtGg|F9Vf7t3%j#DvVT}800BGf6_%$-vk1rj=C5t00iVIFN4MR6eh|~@UoR8
zvX$`0%JqU=n!Egz;5I5MHV@%HPGQoO=>^KE(~4G%vs~1kjs(IbmnTKaypO0U<V=`!
z4-^n*FLT!hx_`nCp7`iWOLlMV3eTdy*q4aZ(!8fMBVSVVuGmQF!deN$z1NC-R{<vT
z=U19_#?@&g%O_6D3|Y@25eE5rQSWF?eoM^+!avAgjSU6~-!Jc}+a14ll)I+d9)C+!
z62Ncfil!dG06kk19z%qcho%!SPS3CmjGZue=3>Ed@yx{J0={@ztR*k}>KOWNzn)_`
z`A_l+Z+onM8+LtfTv4FmdT+hSn)`|F`_~)u<R*Qd|7M!ZZj-p7yD4;b`tEtLbZ;<g
zFAT7J0u}YnW0^3Ez$Xtk>srUo7QYMRS`pJjWLd_QyZn8BvU1}#Cbjz#ndXF=R7}!A
zP;BYN?b_f6!V0e+FiZ%-b;yMn0V|1xJFe)7xNh!z2z%9PvKE8M8%>x*S!!?G;Pn-v
zKp<jGCwT1m7Xkyw2NojEap3fLRXN7x;UBJIHmAwWX$K9N$S@lsgxXj7i@zUdZWae?
zyE%5d+;i=1PVaMr26CTOW+(RW9dX5Ce+~jGXmp}T5G1-=n!;Vo`Fui3jHP{po4~1K
z`N@j~#}I(^MBos+MN!zUy~zue!fDKFxMc_64Ns>?=703Ow9eGVKn2Vv7R4xLKR&C<
zc1H`#{$o&EOp-e;*6&^YASygHO$0YhIJ#j?(IZULUuWyZHd%aK;#NL2RRuRyIl7@u
z)xuBH-(>6kY0?;3uuOWpqk}PpWE!}FZEM^6pbVQ2FB{A2`Fvlf6Y!RdQ>c<qk~re=
z`&gV|4gutxIt(vFbi4ljx@wNQ{4hNjuzQt`P<*S0GoYHa0GvGh5mny_lZyD1@Eu`-
z#ie-a0d~x1SP*m;%}cz|z-D{Q=KQU_G6Lo<He*V-Kr9LWPg)Rv^S0A*Cvdorhxs!)
z37qy=)kQntH;Kq|#AF_k!)YP5^AW1=2!#C4=XI-ZWKa1}grTQ8ty8hw+bdu7tv2>S
z%iu%W#pR^{A>sA()nVkbi11)0|Fv!JM4=JoM}{UnE%;Z*Opo?z*PUxm>c;%R_lnZz
z#w{q7r$?tp*O@<-*|qV=DfPYvs@71CrJIE+8e3t+c^D|XnAecm_?1(G)G6P>HHV2N
zP#00*$Fg5^DY@Q_TKg8o4QB=q!@>7=Vj;4E_79Kch|>JRLr79Azrv{*bMXx|Zx$JB
zmoHK7`V8^&fCpJV&5w-mHw3iEUzC;?qxWsXyFDkDtO?S;S1x)Idu{w&3f!gdzt?jg
zh6i00B3o{v_ZOR9FR8X(Df9U)HZpGX@&d}-aer`M(5{Rsx>w~s2wLt0_(G|lSdLZi
zUwSAubDbMSM<%vXANzlBmx=?r@Ss<x@X#)Ce6wEjX0`XifmX(#e!$Z7pL>*~+Z22t
zH&kM+G(H~oyMA(dC_Xl?N)wNF1dj;xFIk#{g=45TgkZchqlII}7FqMI-~5Mj1N?C(
zeqdK|wDEh0HVCEe7*O@Q*!fqwFP*Q{ynYMe6GM2Qm04xGZqr2M3B1;0%X3=(do*1?
zAjy2AJipvpKc0&ZL{o^}gj1i>0K2RJJ)4{UF}#$e6VC2fzg+mW^oV^d_o&x#_ccd3
z+=+Fqg`zg?J-WT|V7d8|@ko1<YqVPpn=QvD@&y6=OrG+Q-Q`@sq}}zzg2M>0els=E
z<s~T#A^K_m>RO2)vcO_cF<#StIHZ8>`)K?<mEYv@b<y=d?aSrM#s}V%vx?>zvRMWg
zevOLq-T>spKW-gIHH-D)%I)je!)MVSy5Iyt1Itrttdn0XkmRnw$<qfX1v4hE5Ypnj
zk1NzG%-u)AS{6F*_2-^I4-1y=Jzh!iX>26M3!lNADGuuutHqnW@z*!1R6YDi|LVel
z-z!BhQ3CR%@4ES+R9sJkKHiXQB(`iyC4!kuYs5YN2;i<U_whq7EYwGP=(rCJz#Gu9
z0HLyYgy020aYd`|n~4ct!z`R{1G>O}c}eB)8@9X|(7-*v1%c2RinYgn4>`!`8XJMS
zb_ng!9Gc;yW$tfu*FIEyo}!A{`^E10J<Lp<hwpZ4J>I_*6B>{hUC)qpfHW+S&k^rq
z;3mK{CNC>D|KPVn>I;L_a=RRkF7Wq?`}7hufc`k*fxUeP#;;o-vr?j(9vFUGYGid_
zi&isq=R2VbYV8aN)?LeQri*Xl28ze_D!k+u+@sg$v?O7crZ<K8=Dp3I)|tC$7@ZT3
z@MDu;|4*Cesk=J<pCBHKShP-m^AjHr`>5TUCZl1OpU<#2NSx!x*smu4e@Mpf6|tSh
zoY*x?hw>i-@0ItBVaGv%B!6(DvQV=G_Bd6{<=RYiIz?2WghEFFRKGJ(yprhGemb%_
zv4ozkhxM(sE;1@*b<)4^h?;<njgw1WKbEGdJO{=K*M<$ur5(+x_pB-NmOr#j(7>Kl
z!yYz1(d)JuRVv<aZC!>L3<jkzWj90xnc<Z&E(D(3gp<|7;jo?{@rUtX*(LjQrmvxC
zybRC)Dr|;(vI7Tx`^bXm?Eo7%(0HjUL!f!pu-G`o<rNUBh}z;@AhSTCevIG^o4&XG
zlOvzN8r&~Iji7@xmj<V2&~<sSP)+RNmwf<zUGJpWc$hzZ{x;OMyS<qphU}RAP5Huy
z+w9mc1)UQOL#L@!a5h#dr&aV<>1(uZ?6|p9*ZU&p#V@?Dpat55TkQxMZ@?}=(*sZ^
z>G(ip!wR8%t+|Eg)7UhN?;zxr4^-FDv!#wq3n?mwc975s0@cZo>~?MsLE2yJA!u4(
z#$cW!7wzm6&d>uNQKM}kl|?d2cQ)<u<|A~1UYMmi*;tKmh%S#xe`6h1IbIonr4yNR
z&xhVkyoK6fhL)lO6N{{IrjaWhY3x_vPn^pq{}k8b(0!8?*8t6y4r$8}WeTi3ag9oT
zBK&Qw)A5c;7gb`Z9G5<4y6E%p(3Avd2x~{c`R%?F>WSU!gw*%u6#k9nDq1g`A^zkL
zz)2%qXPhruQapL8<)3AQiQKrz3lQdiF?LR|p#^&vuWj45durP@Pi@<_ZQHhOyFImS
z_iMhl`*d$+o@SE0cV?2w{%6+ut=cbmnKR?z)#TCC%v>}t^tSXV+cNC-!@$~crMyE?
zO~MJKHvKEWSVnHiBTBC(cPQK$rBfV@%Fqyd4%FeH2EoN6zn}2epfFbJnd~q{9Bq1i
zEVnHOR5oCNlu>AX^kSjgHWFMzJ7uZRK8-4J;X0x%V_USJF?9uL*ybLJ6f+uhl~*|4
zhekpYP~QLw-ay(oy#X);EyZS#A2OK!(_&$>c&ei%U3(0`?NEG()n=?hJF7)5JNPiE
zMPME3Z!&2(Xax4N7jeI20@*Xe7d8hc!?6-jXi)4!qTHzJN)XP(OYubbHv-hP(#$vz
z!%l$~`a9^1+)`COG!^umhb=HizhrH2yCse5T?%zNU1Cl>_m(wi!RAlU)W#Xz&wHyA
zdNL)e9U#z9t@C@#2ou66#-+0h!Je2-vVCAds$N!W9=HKTWf5y9Rt~p}ebNUK6=GbX
zvfHgRueCVGzf49<gFNOYi&mNeNCnD+n$wkPF_z%R_2rqP4m189Db1np8fMfXa?Fev
zn-dtY(~C<@LO(6zT7+d<5}V>-D=&i~({oRm0y#!koC(z_{LAmTUWgeBIbI@~C1q-4
zB&YaGht7o5F)rKL^;o_59@YUx3I@q{GAeX)>wo=Pp1y9&Hib4^faes5CPkr0+ks7@
zv`M$;mASCiY@p)`=B>Y`3@zT%g_bw)KI`kj;4&l#x!a?Gq!{_74BK!YD=zJ?70oE2
zL6Fp!VFI?Gp&B$ZAb{_{)7*y!!9klc<*=QNh^6{*dGy$Z*d{Jo*LQi;=j3eB5$b^3
z;x(LrQQDar<var{<`#4Gv4O1T8hLrNc2M4q>IZrnemS<mo9!u_r&he#^r;V&Sbas0
z`;IU>GCLgvoq(lp4jp%WG;|3p9683|wZybJ15NX<<1&ybVuByf8<Xdq_0U&_!20Of
zd<zHTt+NV?I|OGhaD^)()1eDR$J9K&kqQ6IC}4S5X`=n@re$+S$qmtOt$ey>OplBb
zq~KVC`4vH!YMLIt!5hVEHCNvbD@-_9NNHlhMRAR}5S^jT7_Kd@{UWTwikm9}(*f1{
z8+S8ROOs*Ya}MIe#9h|=qEkD!>^UP8N)Q$WQ3mVMG7}(VhHam}njld~?y$kaF^RoP
z_1V<&2%7`#W_sM5Acg$9#|Xisa9oxyBTWhgw%?S~*wFe(0=u%(S7y~3rFO<vMOeqt
zM^Z=*$7a1a2Ay0&2iu`2`vCl%tysywL7j8wF&@HcK^4u|I_flT&z^h~4MKc-ycD%=
zhT4Ooo57K<3-nc2nUa?_@&~2OVC&G4gE~%&sjXMH2ydyZM&Qbc<JnlEBM16@)k!0d
zG|mJWMh+V53p9o->t-J+xakqIJHJG=rYL>!dQ*5z_oD~GF(??aif)XU5YCaQ6DsMP
zA$>oOF~)U@{u0Z#4@_q%xAz#P{`jtuE+RgHn|ns>qJa7ulJkenwhSg^AXvjPkfp7!
zJHR6-jXipO%ik7X^i{IVo`G_U+4CND)QwC^%=;hFKWJn?Kfzh7Ff9N|*>5SgWA42)
zI_k8CN1Fj=uMdpi1m|}5g}`djE~~Eq;AK)f>3ISKl_DgP-nzNI61<G|!oJgR>Klr-
zS!2%S)rq=_n^2bf4zsK^>3p&_#32WWQh&fL&Dtq9P$=e`aUSjp;sJWSMy+T@h=cGP
zuxLOK+z#r75madlJZXVqmSq?Q<zHR}Fa$YXv;b?UAArs-$b{o@UNj}ZmSN8!NP(Om
z5;>7_8`$P|;*Yzjm$IoPE-6<dT{KG4%%0?YN8iS5a7TCMb9I!Uv=9rKisrdfV?WA&
zg{uLO;K55JD0eYA0jbcPysZaAX)F2|qaZ1tgAjl7B>k&kOBM%VJ@Wv<2~&z&c!%oV
zEUOjI!JKG)FjQ5hU{a9EPWTGYjzi+Y5Bg!@C|Yapn}-6PE-GLJSxL+lvlBL}?pWM@
zbye#8Lbb`u`aVDNNbRLU;rhHeypwxBH=>P=jZK2Q3IIu5!$oEro*;R^$&SrFm^3G~
zj<$}`OjA>e+t1ZxN40BlxoE;T;=eG1N38^f8OG!*(_S#~6J(gkjO4&|&56y2nhTpE
zHP6yUtET0Sn8qNaQ%3W^2m6v8`8e~`y0@jZp*34a(Ld%$97ikeC-%>YsTe^3r1r=H
zPF3Fst5|8g7r6sUW*v++9GS7+CyoO>MF`(n!GO$<W{?~p^<L3mx&lN=+}PjM>*e_l
z-p@0v6uH{NLetN;oU%n?86$+)!4m{e6~{AnW;-B}Tzv7jOAy94meW+<+|<tsl=aP@
z3F~rGMZvJmo#iDIu}Unu8ag#R)8w+^gL53;w=u5KTJNwKUaPxBj$PVK05&b5(22~<
z1Gv0J1v-r&EwM-$4k(gVGXCM}$JFOg0mK3nxDY^=2hM&!mIZ*F5y4vLUg8&yO$hKj
zJd~Dn2o1<o*l)v@sm4iWjabvsSn3cj3c(SsFsc&4yQ~OVwl!{(@-=^y{CgGprP90o
zVG`|>m20K|tO<dO7!W(rR=3n_W#WpjFg4P$B^B?4QpBJ9L{rwK8?=Kr7)mJKr*`^c
za9y~?`wsXaCC#^6o2L3>y=|Vj=><Q!ZK+!Y>yuB?sj`@DqugmLs2^L@SaE7PtOI2<
zH+@K?fy~V0c0rI0OtDzv&?~AyS3Q2=73J{Kdgk?-Eb`VoLoS)K{Pyk;ql_>&=sD$P
z=C;k&lp9GoR8T6HR+@e+TG&9a9;12*%uIWe8dFN83wY5GXCo!#g#i$pPrryvo-6TV
z=ooeg`)TinQ$<XBS4n{!(ion5lZuAC;LArO;sono0{l1o;((5y85r5jWk%hgPN*Sp
z+GoMKs8=#z3_r%WMa@GdW{JJqEkMm<r7>qyV;lj5%lK|^%>s7OZ9@{kBbsx|8Bn(B
za%k$<y1Kqgo)fGikOJ;pnBd}iy8;;m3Xpsq49cH^GyXI+tYu@-iayw{8So_F`2<3v
zZ`+l7PN93%&w8pB=hEJRVK_02ESQ{7;1eAULuaed0kB#%+qhnniVZcGZAbx@EziI)
z;*<`?%v**#2${=(+;T0JcGrQv{o(oUmPB8GJO(_wC{2FK*KkGYfYV>ItyI=*iRl_+
zBL5B^?r`o8<hh^1sfb(nRxOrCJzJsB6Lo+K+s+3n>N`*#ZZ69*VVSKmYs@)Bc&G>h
zwfkNl{>eW$MuIB%E2B<2>yr-M(4V<GEo~F(Zz0SVS^bS9PmPq=>$xB8lhD<jf7fjN
zUwyb%$ISj*tT)@Kkk>TgV}->sJnmHla*1;Kk;rvd8N|o_vNKwK0*YJbPDE#(a4Km;
zSVM#q%<{A~0vB{ERN(3Cz{NW|mr>-!8aLaOJg5tQBUi0r?$?lZ?N9RA5`n!bZceWK
z=6L=vUc`uHg!_0gfL#{#_gxn$UUO_f-fj5V3||j)964PmT)}y1zWeC!D!CS#<M!!@
zqIDb3ts*|ap(OcvfCE*mQVHfDE^)iz9%h72^5AfeP&Rd0x04q0oNDl$YtWykd+Hrn
z$3j;xIk?L;H9&dO>fKE`M~}FIki*fh10F6JDhXGmxcw##I9Cj-t?kASfXx$?<jK5m
z8A8UQ?lg@Yrb5`32ss<}E#f2HV*<!|4v3pA(A*~o-kQxFOAP@}?yN-XY(#hSzHeSF
zO^In+`jk%vCWUoHCg(*3&9;&~<@CNAV%kmla;+2e2Y6xtb-`ngoVNhA0iJw8T<vxJ
zg9q=C`^J*au2bjAh+8%sM`>MdY>qIw({;c0A)6EWaM#ASxj0F$S_Hr?mB*<%)`LI+
zJ~DFqgCAJBV9gt%CkDJW*ouJpw;zuvQ>H%0V;*bJ2jeHGx04<0gJYWI9y-k!v_kg)
z5~ZXILvzmMV)p0rg>UEcb(Qbyi=3PF<3*oH?ZMSID=^<`>TtM=^Jg&eIC9>L(|XAf
zW>ctZa9a;~i}SnKSht7E{rP#YGx22>ekZ$&rpBJwh<-Nm?Bcj!0Jy09^y1iziCyHP
zl->93PR~}?vFfM{K)}(MF5?IIKTWs4xYD;`QUCzq!2i{BYv5q*!t!5Cx0hPhj+>$h
z-_qYu!ivwAG$ICIH!hbE^e5eu!xGx{FLabzl~^!fNGmAgp#0+-RS%mt={5+!J>#+}
z=jSyRlv0>*C7$n3XE}t9pXshG7Uzv!8M*0i(XA{`R$iCh-Re8b%SS2~69436i|Gw-
zo|5l;)HB{H)#$rYpZ04-TXz~&Je$ih%U`V69(<ZWqF)NlrM>?~oV{XX=_+qbVJo>+
zx*J&3;xeS)5#RV{bDyK(@nm`I%tj`=R$q6$6+Ed%17<!~SadaHV9s`}nyh;)Z!Jb%
z991bgT6b+$bQA61rpAP-I@-p!LPesc(BJey{_Tu&>wZ1HIQiG>(UW6|R*5wgQDJ^T
zrPsU+bl6;~8K={H)!^>r;^OJarNi%Ek}iY(bcDH><=i1%yK%AZ7WE|O6N<j}>8jIQ
zo$mRT{bHrN<xY>@$n|7nf8br7GU;)*%%4=M+rGxYFqV2*O388Kp-`3Qv@G3KIb7Y&
z_%uYVYSH2{v>|5sQ|4|Uv^Sco*YmyiFW39UqPyk}Dv(r!wf9j!f0J4X`v&g#T3W}T
zmro$cK}9G7iyJBsym7=bicsjf{-CyKHofL1<!WD1huw7X-(<w@!{r-w!%QQ7Zztr{
zkZ;AC<gzQu4o;aKJ=EVoSVcj`H3_eaZq8}+n`&HrmYed&jdQG7spTe=iHQ+{GP>!l
zr3%&+ZM&u7mC}BeEGSDCg#BEd54azVzM<uRst|mI8>mw)6dGhVnQF6S493N^eZtcw
zky@HQ*5^_O(`c#5A%#{9L<BW8GFs;F$AdL&;*_76l@(T32_Ex;7;sO+IB>bdIcgcI
znmSX?%NvIRGlM71=BkY=jeB+{XIwnYgJ$*GShJj3({d*!%PSTmv-KP_9x`X4q`e^t
z<(ZA2HLOO~go}$^4eJjxTkf`XJeki;7FcV$rC^+xH%D@_Mu$Rq8(DJIwmnKhy?xH;
z(dP6!X>WW`j<SFb25$yRDkx~CReWm9QY2nvKwxLoz@S!9nhI7~uA6j~#r<7pETNG4
z<b-@L6_&!g(d}%GY4);&3a!W8FEpfkV=lcDWlD=!eZ(pP#WH^%LO<ust)0o{zm4uY
zB3TL5x%*0obKjL&Vf(<6QeGTNG%XhvP0XEC5<(H}m;bGgWABgTYRy_fbm?g`ZX;qS
zW+yQ_10UY!*sXEnsTIHI^L!kxHnz6f?(FpN@ciswJzibm%gx|<^tzEps&r~M%dJe}
zA?qgPc>WkznE*WMSrH62!sAs*m?ehp;D7H{m-22lg0sB=;9)nYXZXOB;%?Ja>_bqG
z;^~t2yd0|CykGV|MzY(^{yyIK^_c!qug>!_8%5>oP?)=<7``j<g`v*f!Ra3Qn2!P@
zgREq79TD@Q=`zI)K3>!_ykwF2vr$Bmb=CBx?vw)s)kqZgJrzx(iuM7vV)U=3ar~U;
z)B8W4*N2PodA_bzF>>Fxv#WW{EZv_Om%R7g`eN7eTsXA;`RJd+vgf<wB18;GEQu(R
zXrL${E{m(hIMHWwVd4*#mcj{M88f5Y5|#!z=E{DF%vl=S4KM@S(I$m%{vej;>LO<}
z+FY-<qv7G<gFAZ_#Yb&zuaD2so7~>EHiDsrMpT3+2+<Dt=AH~)-00Zq3S|+=%ocQX
ze(6u2FMM=#w}<`Ao1f1`eW*!))gw1<5vC@W%$PbiJNtRv>KaFPdx8Ad^i1F9`=iK{
zG(5S?PWQ^4Sb#-iQ2tyb5%Phh2|lR9SGVQxo@4g4M;midv_{>`@sr3c)qi)&(-o6%
z6j%?Rg?EoG3h2Z?-7yCQaLO!qpD)H4r^2QAxY&ui$;K@B<n9TjB67+p#WclwYoQ`I
zC-ylHYeUA`#{)6U`NX&)268ALfIdY3cpqtHq4?_lTJMv{qFkX2Go`xkyD&+ZOA?<N
z;Gs&y4=uzD3La6hGlo|P;G0&EOG;HYK}nD+lrSY@hNqff@exYMQ{7T63|%RwR4508
zIba$qm^ctI86c5mz{aQgoPD^<p+KpW4VV!@MbtqY1U*tDD>oGB3_^G*Sa}j*s&m{Y
zpn*{-8%PMRiIXuAXE$hnY{YKKN`Rn~WF)Z{&`b!<)d<9cYUIIO6&ceUtX-j4zOuz6
zd8ei2!A!(?DTx{@lJPQ10Y|H;a~7~b1Tqj^$IHh@NJfMSri}>$Mo(6u6yGYD@}!3e
z8y(6gqf^pI9jJp5As|MRRz>D-j>~-^@HHu+5k4k_WkXXzwww3N`NI({B7^pbgL+9$
zkZWWOM>yT18dBenS2Rp1m)wtC8GVBA9SURq7UVev#BzkfqA_%m#L+O?muCZqWT{OI
zK><htqA4_pg^G!e(UJuu6Irr?@9DXa`xFr@;(<|K$i<3M*>O)mLDBLKc}g@6@lrE{
zxS1H6isFPWM8;_XHF<_-L_mOa#2N{15;%tfcu2rSa#2Mjg(RRQz*jC2MN>v8bpyeW
z(g+N$fkAZ0L`VWyB?iZeLc<CGz4jJH!4$&M$1k1e#`O$lK}9a*{y3>V((s5L9ZLaT
ziAM4&W`=R23V25&={RqNhKH=6Ci#xpp+)!r5Iq!YpJTZM(Ak6y2$VrIMRpQGxaR>=
zSsw~m#UU<|#1Qf!bgX{rK6|4^5V(MUB_+&}QlRLCIx>JDb0gOPrJ|-FSinmJThKv`
z=@?LI!vMwf7bzUuQU?^o$rX2u#<HXtz+BJ@yntp%jj6K6InvAx0#IO`#5n=e`Up)G
z9Fr@SKw`v+dW9v%(NL-61;$ejSq^jxn}%YUh2@C|iVEi9iKrWhN`s`mhUkF&hmiTB
z#_;vs0ai}~a5DgY{>tPRO7;;d1`H*NGb3`{aZa6tg~<y^3U~la0m$%%XQT$x7+n$(
zp?3K3Nsz<~Lej1wFxr8#k^g{-V$<p%9qZ%gTgm^TKNCnJ>gizb7KWs;0928T=%V!h
z;)+K7i<eYZL{cb6PE1Q035SB}>ym<vjtdhS2IUtKQN}Pt=u09>MA0p?1!QwDD~d;B
zOh|W{@H2T8A~YUg0;x+R1um;bE>(i?l+5D_M=$6o3!*_g?8DZZm-WfnNM&}fAk?WE
zpOOcrm*5Br$S%lZrYR*t39~>Kg=AVM(RPf-Ml2IwTATgSmM_{}OGJ0yS1cTZ<!2*c
zj3WiO4U4A~#;AxBMkP#A9mrQ88>A8Li@(fPp>R^flpK>mB5)?Q*1j|*^-~s&at7T(
z9Mb**Lh-hyAj@Zy%y-xa#oQu9QG@m0$D^dP@Q0Mah?|uR=O0%Drx5`eB?k<Ztx;+c
z)n0=6gj^yAgVKkVYEvXu)cRI;@%IZe+@M@sgMg4I*tk!^{CAZ!!U?t(Z|;mDW<Or;
zAE6V%8(umugi+K6O}xt#!9}SZ5~k({XfIbcgMlRXT4o!@klGFqtBtyK^Cpo&pc@8}
zwZ~*5$pV!xQPhanAa5qIF9M0cN!Q+$cYK&ncGm!cH54Dnkd5tEdziwH;znwOl30)n
z#eA(hHxZ`DSwI6O<d!@|gJ38k0R2VOj3`BT1l)6b05gy33MS<T=ryrUC9gvyV`$0J
zVHS;ZZOj{igCl~|xsw!?kQW^7T@!@GXdT21f<=P}J*<!?k5U*$6B6Lhn|HW1;qZwv
z(@rFDz%tWDJ)<v<Xpb{MRS;*y6O<z`cs5ry7R69DWK_Q;*s^Oi-H5_C@t5)zO1lG?
zV;<osNp3>WJ%!<vy!;6?96is)B;Ns$8k*WpwggswBsf0n8Zm%)+^nkFDcy;4uLxiY
zHoQ;~QI|9{Ce{Yqi3LAjiWb?_K^Y}exQjsuI_NlSsFBK;@*rPOgDwaeo))OWPT)+Q
z#4LK>j|P$gT-*!^I~a#-MkfiF55OX$I%!=^c8fUpT#>}c!9ZS5YR`~<9MHDM<f6E2
z-9Vx~^l_vzFS{t@$6go9_o$m~58G(!&CSA=rHsM>z(Jv?m*W6Ri0;eSEy9C{E)>Vc
z%VoEqKRI&~8q5{C1s4(6W1~F;PjQ67jDaCI%G^h8h%`rwm@X6sH!B<_6tdAtn8T4!
z@%p+Q|M;0h|I)y1L6&?c(33)zDg^pn%ZXr$aRvD;tHcV37h^%Mzc`+`_o532(K7)t
z0~?x`@F+_eWFQJOFnf%b(sD2wbUixLg^tY2L~#bei)rtDB!BLRfRUM-j)MUgQN~f=
zgl*j}cUWw$Ms&`n9h$gir3u+}0FWz5ia2+2jH2W6mx?!|KU5ruVb{MOD8PTPgc%?=
z7NzNhA>Bb@LPPMEd2;D&shNBz70p4AS^ica)1cCc%U)_6W3ZfN{l^Ldj+iaQNkO*j
z)opBd6x=#wD=KSJr#?866>$`=6kjVg5)z#r>%mzN=}%%K9*Ls(R{J>v!hOHrq|`Y~
zKRGgQ)=?3IYl(<!9?>3$Zk8i#W=dfAs|zkXmp@~Oi1XV}sn7LF+w!4QTuqT(j{UcZ
z4f)K(b(XZS7vum#A1x<jISyj0_E!5{`M)?fFEqJ7l<Lf;5WLY0$5NUU?c0C#_l))~
zT@Xe_ndlz9sE!W|#_VSc?m?rZTx(3c45!V>uS4IG2394!2%e)C%elbfOrjuQ0Gi@v
zX}6Y4V!~$Ov~$`x&|&7c9vOjo?K_-KJVE+R>3SCOgENQ&WClGtr;cRfZy4GHAG)#r
z!Qa86w=&-mJa?D`{Bg*byRVtJyGtz&SE#V)PV42sZz{Xqia{>J4h^)Q_`5m`1NY&;
z00({$W5WMfdu@R5a!~DiV6ODl-P@3rbFUB6e<j1^{b_joSUw3%vCy<*v7?;&oJj0l
zY;hB5!MmQLS+xOqDn=YjNfT?E`*Z1iH?y^#`Ehn+6<@g?$FBEVuG!h#ySHa7j;dy|
zmu(-2T~Hs+@8Y>ERoyG#N~d@@WW|W;Szq?Iwh^l=xr`qpcl6-0UOC4LMVP#;AEs(b
zpWil#`e!cVUz&8OxvEWhT`s>AF>8$ONb)bP9k|s=n6AfL>%PO*qO%uXXLu=osP0<y
zT$UJAOVFNydAgnahPdEOM_^^Ld>>9{y#DzEerJ_`c_K8aa)DZ*@?2OjJ$t=URE-fQ
zDdkap?5HGHy66**LxXto<;0No%-CIKi4^S9@47M-v#2|?$2&e_AyFAm_AwOUngZUW
z9pWhx^&E-utUVOu<0`y0r*uivt0ua4Q`M_BX4M;KJ}V-7>MAz2XMuP{)2laTXZqDG
z7@^;rB>3zV0Qtqq$X=TLC-dQ}MW<#e!h<^M>*1+t&4Flkg0}MRvLz|2DvRxLexZzw
z{eoY!moT*YU!1{;t@xI6OpOw2ZZw^;w>PpbOnhNt-sY!FBX?*MTWo4%F*w1N#J^Ix
zgnugB`YXKH_m?fO?k<}l+?{`gTo45ms40L=WnfP<u52zUSn+%p+Te}TB%hUu@T?7C
z=po)gDZ}e=+q20&=ElZJIosch`@vdZgAubCE{e4vI8mgwh*jJ4s?3CF+;i3MLew3!
zs;rls497i(Bwr$vt;0~a$kF=K6RFoyEWxR=_4|1O5bZ7>{@V5E!I<vi?rNDH$!dzQ
zq1IBf?(a`0dzSP4sp=o>Y3Ur`wa9c~sqD{QV)Vt%cTZa;#;$9>ySK3E?K0@KD%qgQ
zb=G71pl@<_EdizJ!gr3Wbhos4SCs8NZ@!YcboIo`=GB(Eey?`U9h6avrMOTvL$`L}
zBI4N5c?x63q5_N|8!g>?GX)W^Jf6s0wxnKv1`6>jl$E0bWKJ6v#r+4wb}ov*_FZ0A
zKN<Of)Sh!XIq6XV{4MF^tuQ*{o+LDup(lzsr#u~rm@)_$75u5|a<j@f(%5geB1$Rp
zw^R`QXc4_`V%Vx)o%fujV65p2)B5k^Jjat!f98nq`x04S2#n=e9o+LOjnS+ioQAkz
ze2#5+cMIw8pF~h0CIKU(RoGz<2nXYYGKtQd4RQ<2n#TI|zM+^l&ODYDwC$CyYd;gf
z>WfH6XMSXf$%Th%vw@r^!#oLkY2p?Z#B4Hbx>JVQ2LOAU_Op6Lmn?P~I&fKJOC%fq
zsv&HW?D``y8qnoKdDc}KO&c9@=QY28F_GAh=)o`lRJb%&0>d9ajn10dK+~4Wt%k}i
z(^Y*ImNU&lU^3V&WH|MuiF$(t{oUZ$baW~(Ayl2eo%#EO50XT3o);YvkM<W(1-N}1
zCGOdlpo0XQ+|;wYg&b;+o~->T)B!W7*d85uP8cF#o|4Uuz|xyf8-!SQ`#kCFLwLGP
z$l#lZ`u)Cq*EVm*1PHd{o#^T1L@b_Cg1qd+;9D(JD4@CJXS4M<wpotPzxIT3{TzJJ
zhg)8jS@=QsS4g`Y{E>&-1GgOfnL<0@xraeaWH>|~zAW55x+1lLRQHFxUhu`ie<5ed
zTvI+&C2H6D?f8o~tt)J0FJcjUcdvNFJ}}ES>{o16H>_8H>hQkQRkgE+xd9h1>dxpZ
zH?6m9H7{a0a!t2leqTPoHv}Is!MJrVt?+LK0PwAVUW;9w06p;M;I6Dfud<=y|L`kJ
zYJfNpT2&0-mu~uA;q+~ZA9i~jqN|(GXZW>JF`qxCo6Xgpy0``|IdY}tUUcGNZalBl
z-a5gbwLY<5dbDQYwtsABJz2PcuDCyzxc05vU2Y;=)o#C}B9Z@I5xZ=m)^Ao=Y$E1t
z>YUP0T>Xr*^k%t5XQ<J}B&&(`HlkDf8Hb|}=E^B;!7$|Z&cE-tdQSME_H@pK#I`(p
zAK%~B=S=)4F-E~hf>ZfohX&8k{c{eb{-^V#u=?V?KmI$%(wSeK_SH_Wd3r>JYg%*F
z=d<A_cAypAfOsURTkR*bu;GJbH_5FE^Y&%*$9?^0cJlk@BlYWgVjVXW&KqEtt^oWb
z9XJ;X=DKv-edHH_J(~I>mWy}UysVq))o>k!0@CJWEpaQo_D8Sj(FVddY$ImYzml6*
z3-sb1e>lkES?Qv>v;7R3K~Jw(L2S+DF>b{_Guq4-?-#+`?C_!d#CMgg6}#1fI{J$v
zGF&|Dw_#(vN&N$dg<`Fz*(Cm@IOIYQZp0WyADL}!@VNLA<||pmvY>m}B%=jBMplSO
zsSEdW5=Z3AOpl)%l6c{sv=xC#UYLO%A}jbxCd%EeQ6<>$=@foi$};j2I?Kl=!45ta
zDN>H*HoXvP<@2fA?e>e;iA>e-MBm$pmtjBiLiW95B41<67twb;R8mY#jL1^%U8`>r
zfpN>4G;!2SU(DbM+{$dQRkvWA7&nvL5*Zc&u`Ea9@y6fj2`{wockAuw2gO6{ST4H|
z{Mm}M&Ti!5WcSP&Wckq^zcaYwmB`uhDa3)ccle2RpmE8nP4k{L$jGMs*FBS}w&01-
zxSh4tfwVJNGe)P?Q-fA3)mE5Q_Wnr7=UpB<DQJUcQtiR<o~2^@*`&-<U+Iy?_)p;}
zrM;snK-a2#*FXyt{zblja9ic}wo#?uFsPKuElw)ALj=^iFu+6zbX4-HEYDJT&ZaC+
z|AXoj8`TM$Dy{lwhDm)e{HlDTyF}<wdFm&EHkKzC5`)F5JL4`GCGv%{`2K-uuni?4
zRp>Y-AL7N_g_GV<iiIa5^meNcg@bPz@0b)x=5LB#mN0#2vYeYd_*~Ju?v}<=@V2VA
zL5qssr8G)VN9wth58ra?WllvevkJnsY2mw|b!E?oYuUHr#&S)QX`nBkd21o-!Zd#I
zS76chw#bGz@s*9x#*v4RK=N~eyrF6tvbF2ShOUuRjZvk-i`9{<>I>HWC-jm|?Xow=
z(MFbKJD2+Yc+=%b`-;`8Ym4~H4w%MB_h$XTvQ3CX>xP}Z#q-VTQM7Eff4mqSosH(V
zW?2l2<&B$;wOos?ZBAn=y``mv{XR3}3$r*ayO&9JmW-x%+3-lw9MKauHMdn2x|Q3O
z#Olm>4`JG}ng&R{S9hlnRAfylFXv5rN5pE~<M(!3XW47)&st8!6Bo#3wPx*hZdU??
z{ZF#+!?sK<Nya9di+(oy4~u7gN~YxMu+<K&k&sA8p+#<PEt8jL_-6*|eYxf2!1D<3
z41Fzt<*$tRItj!}GR|C?*ra^Bmv3XyJRDR7&${(AtmVi;tjT&Ck6Hcb$<Enr_xAYS
z@cZ`Jb~Uy{)~ik<4s)pC{Wzsna?x7LHu>DO(-u#)^LV5O`S(|k<C?-?xQ716MMp5%
z{stoRYpTqt!kZQluwQl4gdF5)k!qZXY@*h1gnaRor|a!QZQ78s{8OY+DfmPx@pH*}
z!OOZ`JcE8ZAk#T^i+`p2*_ccv?Ea@~hvGt{HH>I-*yO9xDk6=kdWQ$xk#zOExwLX}
zc;W24T(lLsZo239meaj5FD4La$3QnA4=ty|$70|4p(1gF$9hwRE9!^`(k|sG_aAnx
zAo3wgPYf2{zT98h`%7>rWnRy1TwkY4N}dl$-rF4Bu={?pcY<7i&Bvo5YYU5T^7Mx8
zN2(GxnE-ol4L0YLONs6sjuq|wFSqcQ;mOoaG*{*oFNqiW1==1fMcE%693FLJhA-C~
znk#F`ua8XdV#E@!)Q8{}R#256LSEl~{4d4mzt>ND+iIkSgCT(&sa|($+D+yjj(<R@
z*RKA~T7Vt&QoKK_qRNW2^`Mx_BoOQIDJ@0byhz(Cw6@62Do2_|JTV)0zxvE3p*#P3
zf0TAz336?x6lny>B`0-9o_Z?Q8}?s(YU|N`d9U6damZHe_VW1N#?STsxMYW~rT-{R
zdXciYgMKl~R@sJXOIF!oUo=6LR6YM)d0o<IEz&!5K^{&n%!u>hGk)#L+z#hWTn(FO
z+`7fxUZ2u0PB3-hV8^Msh0OuDZdzrJ%wq{>w3B9Q<t;NDjuYJ0>;XWJb;!y>TXhQW
z)l59_DffE;bDY_mkR@~QHNW#hqlMO6yz$cuuaIWwl{CM=mKoSUTD!=iba^2m3I)n@
zeft^jxdLnt0N9{-O-h`#n`XppCsZe7!&&E0;CaCp+?#$8c}^FaeTEu1N;n#}Iz&pO
zW?+5*ZP;*B3V!*KO`yxuKxrQa+E~LO5P!nF?pxp)#g}oAO@G4OX0(k^sCtMc7TNu|
zY8O?=n85W3F_SI|@<4FDKfl;TRrmq-tV_8Gkqdk64bLkhmSEL6&q*N>{3k|-WIHon
z#*>ad`;txQ71%#-R)Yw}tF1;Q{A7S;f=gYAIB5{Jtf@%g+tG6iWGWx!C!!jWjb}XT
zqUeBt((`vQdpNH5Q{g>(ni?fp_5_H3CTKykDqpCCnRh=MOC(8G=j=OnCJ6dn>ja;q
zQS<{3!#NA*nwqXX=Ic6yFN1+E1d4Jtki@#PF<Dr#<_Huuk2^HU$AcU}_ehN7TA&d?
z3WrJt)1Uq%Oa;}P5{v!ygD0?aT6xz6w2UJutnxchoPVX@+(D2OOjXWD#b5)PZomYk
zOGfMh2<H^4Ue|9;3eyBioeL)^pFqy7jKuNtlO;v=+|<AHXh_N5B{)@J^nc1LJmU4o
zn*&GYu>8Z#1a-|RkJkn1kBNXN7#Dvg2v<aRVP2-p3AZ`{npNNGCC};C-G5r|q*sHi
zl5C%i^_=}e_tb|DGC}XbkCmk+Eur5U1-m1rMO$EMWCaBNosPTC27nZ;vcMyblp?AW
zm2dFRo~sTn44I3fA4ztD`~)SIzo72P!08y5I5L<5N?;qr1|T*|OSKOw@Oq4nx_}DQ
z;s_)SOiES?oHGCh*O__dU5Ys1vA}@enFbX85Ck?ppSe%xHD0W!4;V2bVScSTyi9Zi
z&8=jKZNs5NPejqyukbYtZNCSN9(kT64K)ND3zNT7p0?^-fO;1g{Sd+8M0D>+9C<24
z!WcE!l^mRq2$(4-;W6v5OoYM%O`UL~&8IFH6WwExg8=mptB;ts%2%RHmM3^EBUBS;
zZ;-{I5Jeu*0+G;_O6FFA8@8UjvMLFzSD2#7;SAv6T<MPJy8N>TX>hAP=c6DT8OpIZ
zj5$DUovT7|ia2^z5gV|KSiF)07C#bQH)_G0%#!{e+j%ifXF<R=WZ{2_yFjieiK#$o
z5LC^jXtmD!{w&0RHi#qljJvYxcA}B$X#&8p4S-_N>5jl;Vkfj0JYn!lMTb0q9||c^
zLg5i*=h|3f<iLRgNQuD>rRIm>fVa4WMUTJ5#*BnJD&Rjz-HyKg;k+nL#nJ#(n24u_
z3`EKd7aaXT*+h;ZpjLu-*Lu4EMRajbOTKUc7hXTrg3&u&hK7<wa}55uIc3W83(Zoa
zGGQbPlw1Y<zR<bXJ0leUn<$P_<>3W#TpVD5(bv8%kc{!7JP`m}7jZ$yd9_H4F<>|N
zDR|SZb$}#kCzL-Zb6aCem!4Y7W)K7F;8k(q8;)vgl!2us0Gs0y$zH3hL&^uu;Q*CR
z%C}~ImHGDU@~=R!(%NF^mWhd`WThxj@M9$AeQ5a#scGPw60bSyge-S>Hz@5&aSB}N
zWe)~LOUJr^{G`t0V+$2m8pVcuC=5IN(VKvWipl`tMy7!W&Ev?X6P-X*M7U(V5aF^y
zb1*?-Hav1A{;ZmXf((5N6qri0e$-epa-en61@|FztHL?juC@L;1%MkI;2y{l+kMD(
z+!in-Zh`WT0%8$_jxkHEz#Q8F(+))`04oazp2OH|)EeC51a9&<Lv#>%c?IP3mVL@Z
zwUU4+wI+w72<gCAMAoD0`p_BF3QkaVFv0DLa5Y5#z|KVspyk67;PK|L9OQ(S2*ebW
z<>(6hSv{C~;`}}rI3cM4kM{qfXcNS!!l^0}s2XdKH6Y}9|5~JD0t&6xCBPE>7#mP}
zLv~b{u|%np{Yaj6+5`ZHh;iGQK;u^UpNrFM1Ow(NCG>~i38C`)9g$?=jHqtO!a-|Q
zkn3M(7~wQAh~dSMBK^gP@S!>8D6GM*u>*@Sqm}%=Kxjdyu@Gva6$}Ay681P{2tUMa
zp{YHvJ(^(*gOcnbKy`tWg@UQyA*P7H_)=s*41?Yf!c;MYk^xm1!oq|Y^!yqOumCX7
z<PBYhm8t#2(s<$|VI3>xLe3Kz-1ze!_~D7`f--69?R)U3-plHW9Em`@(~yXeM3?-K
zly#AQ)oPC5l#n#kZb3l0Gph1{dbcYK-8FuUj9Csk1_=-;RFW_)AgPg*6#F#0S<+Hg
z6;0)W-PHQDWm4b1uXt1M06S>Z7%N61Z!WtN{61jC<^24Xi9&~dtAbyBw?ZT^Gbrb)
zeuWrQT>rx4k?X+)(>~D~rB!oT1O^|N0r~`a5H9jU=X_;^{QiNIU`eAsByLs5!3AYk
z0oJ3o*v_E)b3!TE&2wPe4OCqD+k^xIf{0Y?RT@afBG9gIz5y9diwO2R5Hdah3B!n2
zh3tT_5$wB0IofS9)QcrSky@|0rnwlZl0-(%iiohK_2ri>Pe3anIs-jb^@kc<$G$GH
zO0za$m$V>Y!XWd5&ui6XY<QFd)(e;*a-r>z>U(3TBrB+!474GZWF#6^10pNytPmUv
zr{w|-slK+I%BP{I;`Ff`tGvitPf7IQ2pQ-f`5~gI|BGk<_aWd9gcu;}@U0<Db5n_~
zn?u6>#vudqQ!p$6k43mhWJso~;t4}P4~2l1@#|OAvZbh6_Tu;f1w=#^t*RvaW@{#N
z3%nH8_ot{~xYIw99|-YY%{$z+@`s}h`t!=OW?;5%W?)ztJS;VN&-9=-AWH2{uPdHv
z>1oS2x$4UI!p3v(*roM#JRRCFKR}0F&0W-V*``P4WmM?RP50F6tbP6y9nD5LYQa1t
z#<ua>KQms5v9Er6344oDR$!i`Y7#8lhK+EOe&MwL{0|JabxUt2!Gg=0*+J$FSKa&o
zWWLq@nRHov$J<5H9^!MI*%j|^UfG}Qy5ojz@E9~+kQlU;xyJ1CY=$KlDhFm9>kzNY
zIHv)gGqa<(2{PQPez+^+#K@M*;_j9X%-CZa^8u(ooxg-G7Nh2u{K8-zPR+pfb%Ua1
zU_#e`Gb>hleV*32-?tW2jkLI$@4)932D7GFW1qbs|9%UtRg>nDHRrE%%L+QOMYN1{
zp%Gjx^XjM6py*53u1TU@ZqJNZ<<P2n4272NIfMt=g0?evWig-;`*mqarpr;)N3|m(
z1==+u4cjFn!_z)PJF2@UtplBQwir(jeTr#kYOjQu`ih7BqYU-RI{x0|r)j^NR`L41
zWPyEM*F-=Mr*yq)Bw#XSyWjrJdJ!RX`urBVOpS|tWTVNGpT(7ZbrI)w-I<4dx!0Kl
z_OF9`n_1(IVIi{#INMW5o7oosCic1zPU<?VgL3jOL02i$2@?iyXe)}<taE%h43zQ;
z&1O?(y8RZX^4Ut(-<qw=YIJzQSmuh79*ecNW4Y&Wpkq`kX42L*(+e|bs;}i`w+{Dk
ztL}P8=aYuPN@Mup;9AVE@}VReG@ZWl!0vT4P;ajJv-0$<^n`xK_iJ14`|&ci_v0Df
z7tgon`{Mfk{`~4eFS?h?o4e=z{%TpT_f3Sk^nEY%UTWq*&K4h^@8-jGHa54n!()eU
zrZzBFFE;Yh@H2S)^|iJ(m;3ec)A{8uH=nlBUhF8hOqWk4d32~b-Rtnh-DpnkF%ms<
zsfXgoW7vh7+Fu(})7R#Uf1ls2=(+Xerf;bu_&z*7-zM68zPDsOoxJ$I0-txkc}(t~
zX54jixb{bh#5$gzm80!|zeD$ppHD}qGP0xilX$w_JR@1mJfwO&vm)+H-if{jo>g*Q
zLe=a;504SY(WXBj|0x73<H~7x!~+1>w+8^A{-4qp><k>t9smAUC77=xwwS{g_A3f@
zdW|@u`1RD~Wo+UZXGVedganb0;)&xv3J(`EH4zvfn0ka_@k}m{Z72Gg20+qql8!_T
zNQ(dPuCtt++{;By^K+zc*t0GA!<Pg1_RFH{d~~i{h@P-mV<!B=-DV|cg1z?TgnH5Z
zaB{4y&FACir?C@f?pJ85vy+>a-t=)~_o*FI_zaf6h|@8;&-YAc_a6G(ql49#)1HnK
zm$MJvvVQ{P4+@VB7=Ck~nA~&0Y3RDOlQpmKq6Y3Z9rx0b+JT62G&%46O?7X1;T=mu
z<3;B9nsjyS^~e+InN4#OXH~jrV*?uicAqUTKXMH=!I{U~{^{$}+ns|IV`sKdIyU|J
zTU%H4D0A2>v69ebMU5?*@7llK&d$wD1Hi~(BU?7#&RM39E6wMc^NVpih|hl8+klLl
zlY@@u#j;NXT-oi=Qzy1JeV?4}$Q~wk_J?)+N_fxb3F#UhHiNz1m<o;A(K)+8t!A+g
zS02Y!^%pnBh#C{u@9f-IB3DbY$!>L<MTf|#CDwVn=fSh#ao5n=nbbCsLv8{aZg1><
z30F0r>q7Wjw~H&r;}5iwU+9WDb12-&-JlU7Z5O$ojr|dQQ;|2<kDb!&PR7OX_m1t6
z_$dcBFZoRt-gQp*AHMz5&y&saQiPLQ9(0jayqfG7+AXEoX(vX^RUex_R25^d!`J&G
zQ&*jaHzrIG2=pi+@_!57;TRu7PrX{Rx<eabx)y~mw&=0&2X7XOEs5AWg&wDg?oLV-
zOaEPpkSqP7L({_!QpIFM2QDq495J4xkbE(d@dW0rSoS}vo8vbU=e78(s{%c^9DBAo
zAkrMbCX*sA!MXft=R(aYypb_duJSJtnf}p^IzKl4)S-7jyZYf~_h_&n4xtgi6V3Hy
zWOSd3e8oafEKSg;s>Z`oC+2|wMyYUF@gG2t{L9i|d%3+SLKKu;oln*X%CW%xBN!BI
zeX!B~GrP&?0|Kirmtx6}aSxXB&y9<%$mac_!2V*|%J5jN(Xto383iEDoxNo2Yw_$l
zvsZLvWBsaW2OG|{BHTUHD+aD$c)6`27uI#R6I;C<%WR*Ov)9e%{@C#G^y2wMY&K-j
z9+l_%&^P>f(db9wQE#w+X7ZpHrxynX4sX2s)sr8b>xBOM>Gd8+$o=7JvvE*uG_@9P
z_S?%VBtH!y)R)7@$K8eV4}$r_*W>hCE*5I!29KtXuk%_=RL!roC5w$1`6NY8&wCLr
zszxg6i}oJ*)_Rtr9{t5ylFeH3zDI`Xdef=ZU~${|UqPpHB*ZOyTb9WH)lYfzuDR{C
zsU8bqD+2}j+Iwr{sk!p>G;71slrLB<%<VgortjCLlF`=YrX^oBha)xL&&%G7n}_4=
z>14Y!K2IP50^=2Z^x07w#x()38I4BF_}=Z^3=!TH4aj%ms~nGjI5(I$Hx{eBhuUKf
zx5quqE!O`x571Q*i8G$Umo9(cSc)hyg$Ke{q5IHZ@E{+HZ_#IbbjV}+!>Xb1KBF(h
zcid<GEAbvYtY=6x59m69;rH$^gl_ciQCJY)ngifs=rlPty~DRYYr^u_3VD@i1J<8z
zjT2cN*|AoR7GKktE=TBhT^5d}#k!GxH9Z|&T_Wx0KcXDUcTb;>x2JBm2Q$NWdh|Y9
z=3qNsfs9c&+1z~J_NI^Yws5)lLxqE>^gW*5aj|f*F)_2V@cS?KW=jNga=N{r1`zEB
zy*W8qIxzAGbYDpo)4!+1@H%|qVB<|sEPM}FA#{CLT$>+CId0K7L)_r)+4?vlZw%Zo
z0{!lNGZAp~K@MlQQ%C!U#lzcSJ#R)#hKMlMZDI0e22OZKec4N^1eKd<L&tdQfF7M)
z4s5nS1Xh*ZaaDfJ==piYRU`Bi`z{OQ`jMnC*X1p=)X;bmOVky^9iQxq;ha}`#USB>
z!98^T#UKJMaVJzDt(Jein_%Am-cz6f81*GUd3W?xSNZhHbDI{(H_{WA4k$L#Q-=;H
zH_|hk4yZQLxfLG#$OukeNd3s@Pg>g@K)>?nU@G4=!5qEqh|3@T!}SY+Kn%uKMkh9a
zvhgtJ-pzh|c0N7>gm5^lduz~xJ$-vEFyb~d<!#vg(P`F0G)8!mO2B^LHw%6^aEj9d
z2PX!C;zAdfPcL(_gH|OcToR%~Nzwka;bf*68L()G+Vrdb3}e$>XX^{Jzlb8$B~In#
zBV(Pzs42}AP<Iwa8pND1DljeWxC+`hSdlI3I<jD?X0)Two|p|N2{@9ajo4L%XTCOK
zdfvFKq*g^k;%t-tr+F%2d$NR++H}XOMh%CY2;f2x>{PIJqS4d&4nbdjDdd1u<Z+k$
zh9oQehUGkG@(v{I@>f9}A_DCjeYZ~Lr4*Q?mIRnICgBUj-ToWedYqE%@?TH=0amaD
zEmd$f>-^Q#G2ALvd2B1-TxznW$P7dt#D}1StD}$NWl!}^B&ye%!@t0uFGY?^Z4Zk!
zTC2IS`56$l?Rc$(Z@)|KKH!Q*yS2<z%>hz$XVjQ-2t=AerW1Qv^^|sgtL``f8ja8~
z*f8DDGFb5rI0-g_bxvVh{(EQf4nWEk!gVm=p^G#xWa1UZVKPx0H~Jlra@e_&*x``G
z)krnq4Z8=AD+_+?7+rcDShK<9i{#(kSU>9Q{|hpMe155`T{VN*DZsZRZ@O89+v~%t
z-RxLr1U+wKexcjlC$cEwlC7zPWE8N}=MKo~pSi9=c+lTLZFI%2HnsuSeh93}fRtVF
z(#Ww)P{U-eHmj-7oV=hR+2l-FrjspkK|+(F*ifz0prebkF^#Z{#@zhK--d)W4h+0`
zm^&r!*D^<Qdm{#IGH<*%M=fnJG>W-A7y&@tqM8Fh16;RN1<?Vn3aD=V_Z%P-WQ}AE
zs^!mxfwSLo<}me*{~|z^4O(&m_zaL;i$aCS7Vrt+A9$QrZszAc5db<i>b%pNTnKh~
zD@)py=epK#!@~2(Z@LIOY>~Fu>Z>nrls(a!Ssa_Kca}X-R?c}EHW`zq&WTCmQVzz*
z3@!a;Nr|pNZLrh_GL^E^lSzW3$9xxqWs~Q&0*PB$2h?091XS;Nm2*~&o$wkLanOPW
z`i_ZtvSluX?Tt!ciQmhL*V24HSr#3vEU*R%Pvjy~y_P0==r|AT2D52OApH(liVliM
zV5=6?&V5Kk8>yY0%Ck2i8fLwq9-0=x#AHZ`Hsd?hI^A`I4$UxtF07<(Pj;T8>7BAV
zq$LB=Q@e36y2Ed{QnfbJTR<xvKELXV&^qTYgq9lozLh87wGJN$tyOq~i+94`$)M^B
z@CN5E{@=-wm8a5%CsnX7h~OV8$LGv4&-HILapkIJ!|syv0~)H2g0Go#HFf3c@n_8%
zy}jk4f8fs<jd})}-7A74Ozs^pne-=j0AkIV?X_OkwFMjGxqYK&Xwi~B1rt|I+13i_
zWVvMy)SV|^cxfzXXXF-Jx*!p>RKZhx3MV|xL^~zF;TB-l9JG%Xvn4(I2b~Y$tW?|#
zak`Xz9U@vY<lUMrORXK{{U?#SxR#823buvzmR1@}efM)u?d~62U0>d8wnrbv7bEpO
zJKaxQ4QRCQX7$aan=9YV_YL&;SOxEV+lzh8yG8J_*Jl%&P1l7_D=k)9&}$Q=-fwep
zRX>Z~GTM<dAE%!^BUQoZ-fs2X^qU(HbT5|Ho+4gywJk%nwsvys8`n=(sFok->MOPn
zDX-16hb_}@nJMaxD_sm8LmQ%s1GFLu$>L~HMC?wb=B!nndkE2|3R-jK>{+m_Y=)ay
zamj8y4bnk_1cA$LZE*#S)v;>*@c964=Eiz@zquRg<fSbg^fzf#^V>|@svNCbbTWy1
z=e{onw;zd(CxNfsGD^u*g<=YyJrm5C>)hrw-Ltn;P*`$}Ow^965-KXB)R>*eYN;j0
znkimai&WK;^V;YG7M0Em62<icxiOh~e=(sy%a1qSS)`bS9M6<f8m0o;y;SqN5gske
zb&ea9*;d1uiz&S&S2QWap%*2Nl37<sn&=dcm{LJC($LX-A=l+GDIDF=rc_i)m;#C<
z%b|5%6N<bNNYjmNlT@^a?bjtp2mTy%ky0KZr50gU7c(u4MI6hpps4ZI$ybadH4qgs
zg-cK+3@9@tf>u{jSX=$Yok}*h5-}ME)>W=?2sl=$kq>6dIc{J|HpiMu*0ge{ka@5?
zRw=FsdM;Z~Q8i{XpG+R6E(a>tCZ(D$(t|FHuAyMdy4|o8SyfR8mmG566-xhQdNwtd
zIC0=eua+wdLdvWn@s1cXsAY{pew)<@62mZ0cfv42E}Cy?7$?IOs0|aLuW8@&s}_k^
znCa9Dq@AUCQCAM2lq~gY^UmCgby6Y|f|BL^p>#}Bn2YJ0kfK*X2wizwNKJ@?M59Es
zJDi0Aq^7-UU{9ZMLadS+YYT%G;0&Hrse#%c&X%IK7UfljATTg$t5HrWNXk-Td!i&O
zITge(KhO{|ubZL@gAM9jY9NAcR8Fpt76)FS6iG=iWePPg4s35q3Z`MwZGM=b9)9Oh
z?3xglEaM(eBpO3Wv<QYhl%~wGBP!Mj+eANVzMbJR50n<znEX?$hZxe*5b#VvU8ijz
zA(Vcun96(0eLr3#?i`_LDy2o%Bsz!GGIU2rkgXgKvO|GXgtCx8L@sA#i0j@N<y_+^
z=XiugrYsRhNzkx1OzA#ofgndpX_+vwdt~0d;}1M>>>E_QMkZ1~F{xm|4=|%Z7pQ%=
zFeM1IcuurCh=U#SNCf{1l&%bMJhCE_q?gxQH6gO=4reWBBCctStciXKMJ3tN!qPt8
z4OK*fB&(d{y@6@0Jp6swbl~o+yGMT;Qh|WAAde!U&^C~ql&=xRFDf1v3`A3K5O;#w
zGRC>H4l_*Hj3QD3Bts-LCK%p?Y_4yhh46=sg-V+A{}}t~ptzpkPYCV~!QGwUvgo40
zgL|;W-6goYyGw9)3+}Q&aCbs*m%#1!uIj4puisVe?t9fcGd1&>o|ZTLdO)l@{Fs_w
zm(o&`mCD3z4+aEnS#)TfSxOj-V_O)<;A_kMzHNCk2UoLj21=_I{#^iSnuQ5)C|@;}
zD0<Inmqk$&?O11nj@<3Ik~L^FR;Mfh<!4h2;n<jFQ9#F%$lX82%?mTh@NnUK5lV?+
zpMG*^{8Gi&NuuhrGJumscfd6ORA46np4ClGc~O>9f7M_wD&x~J0O+XuDzIsAiL;p5
zZjbOh0c{){EeCciaF96R(8|2xzh6v`sjv{QDT=sg+Gg9?s5Q8U#@4vm_SICTJ|D|#
zS%{al&j<VC=>(NPci0?N!BSdbH)_&ow_`!e;Bhfx!;-IVcZL-)q(_FFn!zOL=#dYZ
zs0My7wLo`W!B2Je`vyX*E`J)DS7lK&E@Y}_9dJ~{0zo(LR+jtj;Q)QK<U+nCBG~S8
zOHinj086LA(oVl`SF}@L=Z(b%9c5G^rM7ToTa75VUFBWy@YMqa$Jfey@c`&Y6YAMP
zu;YW8<$^W*>MBcBG;}De-e~b97*xn9vG@U+2DFHVn6Rg_P<MGOxSYtwY(ds>_ULwL
z`|lhxH>ib@YICtQ`xnDS-(J4L1Eh43na3q^1G^WZsxai$GPN7)$Lb@#Axv2)U>K%t
z2q1=QN#|V)WYv}I01y=8f0|Kfl&D0W(>kDpWV?jK7;J^G1GP{!2aR@OTj7lH;lzzy
z1b)Cp#kZOX#9@1824F;gHpe8E7F>5v6HYEXS2V3n#fQEC?w~cBQsIT|_ZQe&EBZ?c
zh<B+t)#A~<>(@_GO)dztwx_f0C>09O?Go+MJY$-ifQ#Ts4w2b~CwQJ~Y)|wZ-_w9`
z0f#n>S8C8O0qS7k)D)w#!e^@esD#7mw1iOP!xq`Em_746(&+~#q2JlN&EV${ldB7C
z)<0{H85{7M1;pXZTg8l2LEbC?mq;dz@DQytp$NwZEzsamqckgk{)`V;=m2MgtyDU5
z5m}^|1J%wMg!IFBnKTZR=Y%5$lMa7AIJy!J3CqHnS*~gUZ<*x!co_g})Uzn@*!qza
z=uOzo1bPo9aRYhZaKpzuyGf>LSwBIKvda414i0nvmX8ywO}#VZ8svak5c-mOQPM8&
z+<mPRe1^E}dLfc=9_gdUXz|p&N$`@|7`7TLz+~bdEyP&+z9Hn4YKFe+Yi2*CZAqcg
zNS1Wi1m!WaVa04gX~9HX9c{VG7X2mKD|pLba-768_uJI!g#Qi>Z4XLq#uSvD1HSAv
zfXmcnxxc(J=}R<!rT}G5ba%>aRQnmlrBnFqedw$X-4%SkdHWwHn&wQ|HDMzylFUHd
zSeKgPxHT90k@DqM>$w<nOjZ3+E4GVFyh|3XuYl=9OWWUa0!y>qL%&0~9r5;ELW<6W
zA<fif_CMifwscJ8hyg5fz3OXQeJH0x4!SKyc3cF%XyZ){=h8Q!SvDWY8ap^jHH?~J
z-j>A9rcQ<UDp|s_fzmsE&~0hUJCQg88ZkP09f8F*z0`>nzizwn8<{Bo=|^VZJ(Kj~
z(PMP?TM_~mQk$(Wj17E{sb2-0gA5-2n#3{BZ@5c!6HM{i+9eqIZU+bnUdTQh%Ilf)
zU-B168?((UJftY9`Lc&*2EKYVF2Jg7q&j(wKB5Whj9EU%xP)jCcm~h1>%-Ad(msYv
z@#YBSTtYWpTgCZ60n~3hxOQ2LZJw2senIK)KQ-&k>u(6$c7$CjURw!1^mneQ!_>s-
z1PKHt_|ETMv>}!}Rrm8m3wibbozA7S*=e%=1?9^waU~afiH<ezY+L`s^IV+GMReRl
zqTT&ASFm?^$YZK~U2c%yRtRl=Tu1V$_2GIo^IR@GJw5%LTGVIri)eq7z>MhCD#;1z
z0YEhS_IWj@@6yr*^CbVtHg5fV=R;xkh`Z_IhcB<?;6;n2OB&1lID~>M`hUvaTe@Vm
zKaDjB5S!fUiDWNKzd{<AojrQn_TxQ%Z@ut<TzX~f0ryt9TcTK-FCe9l{GhE@vDuem
zfu0|*o&Uf&zLUukm8R>w&mW_+M-kg+t2s}P-n=sJhLBb~d@L7;N1Z};o1U2QQQ;D9
z1pi)MH15!}QKXY#=l^vpdXIraOrn_obaSb`;GkYx>N*CG`<)gRR=mjFyUeGus!C?I
zsaP~S+f=kX+Z0fjUHr~$KNE8*!*`5z`F3+Pquh`~o*4Zi>f)j_wp89BP;PdXype;`
zcyDDt!?^mw&3Bw)>(`j=^1T)Cd-~a<>ApDowzNawe0MX)M-c##UUlOLjxHB1PZahu
zJ-p;2(^eRNkD6x>j!4>=rE-*S2Fb~6NX|LpmKvz}j@uo5TwTbb+dlI5&P_H+?i;d;
zfBdtLdtaI6Gzx-rZ}(`$s3yCZY%}M>jZdb2+7Kh1T03hc7oAKhVMfpbVPxC_$B%xz
zE=^wo`lA?u=eS?xP_R+CU_k#=Q%A6<u4eB?zLdB<X9)ZaC2cQGv;;|B`aM&o8egXa
z7LD3H-SVf0DcG}I7!3_yj#WBw#x}#|SqhC9b{zr^+nL8|!4t%7>AFe<!NsipU}!^y
zF2Tj`ZCNO|1O_@;q~C@?41gwb3hickNxT#V!op$HrRZ+HysQE=VhokW0t(-#84$;p
zxK3m<{2J8?I(pCjlPWpbckA{=>OfP<oAHPG_C^U+KBshr%QZAdMaj~XY<LGr=|f~H
z+SWBYHklZ|{T-;?rJfnh;IrbBmKKV{ple=q`U@>^|1hHaPsfx4^mUuNlBQ3lUu0?3
zOUf}*6(|D<6*jg&#`$9{WK8Y2v!ujwjnf@c>nxt#AbnMfYd1}dUi!)SD*yrYKa_=N
zIpf<Y2H~O|N41}M;pjBwEvls~FXpLoR^X=*d~~w}pQw0r!mp~^xOn?;{du19C&<oR
zqq4(+V#JzGdK@hJ7>kPdPM>`z2U%-beky8YV*PG*>puae9{)0BQbe}wY%^YOBusnt
zJJvs_?RPTglVDfPk`IL`XY-F&UP4$A-YzbKo~UY`Ye^z$IhQU+Wr~-uVG1y`nRY)+
zrygmmy_&+ZZF*qiaa2*&IwsDL8>T<PnDKY=NPUoeQIxX6O|Xd7`wLsfmZ&~6P=eTi
zb<gm<m;qfFhD~7@?JK-SuiGR+{f|UTtxLrhMM2F}@t-4qVu%U~rR9}8Fl#*C6F*DJ
zM-39J&VTMT*y(az7OVvJYvc<^hdOZ(VLU*=R7l_O2AVao-u{D6G!M2)i#d31B8nA5
zx{0X}2v99SWAdO7h~3}sOtt;;$TVcGs7vmne~@~XvuXl;f`+k7Q|mavMwVkT7fX+P
zqJJUh3a6iWRGO%T;*{P+*%fK}MgG}&+BwUXr;K?n&-W`hrz9>$KuwXAOCXgf9cNK~
z4CyWV$S0u!Ic{yVkcYOKQSTzIK)FL}ajj@tKoX9OoAV|S$EUy?U+RnSnDX%e9e!XJ
zbMcUUse(oh4{rYso~aEen&8~-Te}sl8(&;bF+OWNNjqpXTJxqruBCKL&#FGF7QQAP
z(fzW~$+$e5F;t!N=RIJI$kEStcL;|4rIeUH37V?GF8!xiRb^TbpC8tah6giiK#dpa
zFExv(N=!r%GHpX+ar>?@lf4)YbY~)--@t~-!oSWH!pcDPepO;qR;L67uI<FLou9<3
zi`*b-dq$TTT{;7oN^LCFoKxTV`jy7xUnkMB2XGYkK)?76e&*;`^UCSPUs*4#a4gyU
zW}@wm*~JGProIcnKIxt4#sY0CWHJg-F8~(8Xa4b;Q%))T(p^0@<3bo7Abz*s=jm+t
z%Xakr7Dg&wCUy)d<JOjWM&7GmB2Iw~UyBsWSZJe2G_sL61F<nSla-?VYKHcqzl-Yd
zF<72X!QT`H$4vWPiv$QBMQV4<iQAK`JuVK9-QG+`YwEdreC7>6Ike)(4P4>-_N`iR
zDO^y<(0O;nLWmy~vqAXoz!+aU9}OWlV(>(t-ECDlb(BAN*dP*GW|c&5{`*0=X52j0
ztN`$KBJ!_@^)0eeeq4!6g1aGVZ3|TA$|@l0(~sWJLK_OzuHs*!_%c}RSHr=j$BfzP
zpOR-8>;FJEuGztbr;U*CY<K+0vAa>M?dD*or*a|+?U*7^$w~8PQ-*>Z3;!0GZ2X1d
zP3T&l<k$G^z~pcmJ{C~Vq(=OBEu*E<DU%==MR%@GpGZ$HnZuiDTM37Nd}dVZlh4$o
z);XCplmmk2zXW$OCyG|+^1)Y=qEMH@ws|idAMg^W!xo2d9UUFtajko*Z7Osz=GH{-
z^Ugf=a(4|4mZ}?y4$4K3itO*eiq^<wK?H>&=br+H=7;sHy7))36`P+i<hN<`1VHsm
zsK3XAbk<dr<OdN{yJ4MghQA)b6|l>&@RL{45%zSG%cCE--!5H+!TjFT)MP`+F6Q@Q
zyT8;UwqYy28PbgeVT^g6R8Xvl=P_5?f00N?uMZC@4Dh1yd^hhbl<$B4q=ViCzk<dg
z6;cjmWZ~r-;ah(_K%qU<&QD;0DNG#{825rxbzE6=Jey6ivh0B}Rjfkzojo#(5D%_a
z-0{--@OTvv;n9wyO`R4jYAO~ZyyP@wXoyd9wD_0(JNEAs4k=6p?dS#{AT2zXsO*Db
zJIti5ZY}K1)Z3RO>c9BccBp&EgEs|Oz}wp^l`9dbo%8g2Mrkraj1kxuL@gAaFV)a@
zs=83fSOC$;DBM&erkrP?hjRIxvx{|_BOPPz0`{Mwj^&QzhoGsn^wp5|;W&#eqXW!u
z<?_0`lb3m{#g(J?)eaaL=fB=Doe&-1X7N>c1a@b3GNCHl*<OH?zjC!gZL*gm{}F9q
z@}tjB2f~F}li!kRqUWI&WC0CR{c+r@SL9Y(US_L+LMxBE*1#$DaP)scvsBfX!Xjd%
z*(L13;KAO{nFvkr{)87qdonS*m}zK@Y)n&!yaVF{EI5F*HJSb7h;=WPJS}5~vt^eU
zqqu=B{IuztVkb*115az{HiKy2h+b0ym~`0X;EZsO)|~2BHoUK#{N_IwE_x9x9&opk
z$5cJPFNB(e_`#w|{l#pMc6DO=JCv>(niB>nf*<5JzKGzgo@~e!&F>rZ7*xVh{-aWb
zz)7ULlJ!$i<&^aji8CIR@gLnTvI$-oUneR>by&o>9rydoe_P|nqW*nCeUDqsJ-)>H
z&&S>vo4Xi$K>I$S@by8Nd;K4423y^J_csqWZ&xqAqJH^R&)=)F&jzC>$=}^QulJj(
z2BXj30ex!*CucwIjx8;f{hJIs(j3}6L|S@ZpU*E2&$8D&M3>k3>KuAk?LPLKw(Vw{
z+tOP549M(zJ3D<}E)ec{{yqKv{r+-P?q0|~mG{HIfj!Fm_QKXbEq)d7I!VtiO5*%*
zaG|KZ?SJOpx4qfz_jq%E-Y%Rk`>~MyZ=qG$=OS!N@8A6}d@JBty4U;9NkFS8fM(@9
z;cT@(`|RKD>V0?p^PhSQ%N}n)cv;G0xbyS6Wq549h`xbA`eUxl@zbEy>y_~S#opzs
zT|is9^=~Z)`xkGy)!U{Y(EsnodXb@o(;zbxR9X=f6vO}5#=4aWFE^XI#y2D=n2qF8
zZ9|2h+HRgGP|&a^Fi=qc`{%E|&wu$<K8UMdF-?7N<nX1YVPNIP?`qGV+zqbjYF9eC
zM1Y5%pj8GksXU=TdaL(-4`+D<@E8;GYf6n>jW{;^C#UcCrbG)_Y3LZ^$-aI%W|qfz
zyD9JpIgJV3g39BMXRh}*hb}ioV;}Uf%r_wQ++&~sO?;Zd4GbH@IEGawzQckUKfiFu
z$Ji~4l9qW^!Zec{ikg6J+8?ad;qk7ltBb9KguVk}XDovx4Z}pmOsf1p!p!4TdSx_z
z<mG2kX3W^f1ZU>>HG3)Dla(&x`c2@kdm!KqBz({b_TWsx430cOjmzi#@A$%{A%Mrl
zyq7URFDX?cahgvfZSW;X3a?hEuF}oR)${3Mv&#fsFy+uWgTOM}8eFJp>1k-d(sI)@
zdxh})W|^p=(Mffya05!!Pa=4};qp%Iqs1t??;QK6ZzmZ!2H#M@S*DyyHjWXeN#olb
zHWgmuB;i^~f<bVGOvO#OHHEB!F1NOLc=OKnCq*=>iAhaVx*9vb8RBlK#x*TVCSG%d
z-eN2g()i;mbCbH6oiQ16<HVuzSjKcZ<)abBhrN>C$%?c^wM!j#jUtM%1-fISSh9l8
zJSJ|xhj$Cj?zwzwXo+i-m{F(|I(@BN5!jHMzemr2scw!0%a(pa<Q<GM<Kk6lyuE#$
z*oDD*{9DkeUk-ronn27cH~w?a6$MS~EQ2p(tkZ=Y<e*-SYWFQ|brl)ZU-AQ>eGCLD
z{b~kw!h|W`pasR0un`bz*T{-F%CY?ZB7$J(rwOdGbrF9$O%U#-F~=oXrHTfdN8gb;
zGtPfOgoz*}#61MUb_u|1m{8WQ92O@kds0XShWbPxi`mO-5n9R9s91NvQ_q$ds`};y
zk{dHhIg96s{Mb#l<jMSscjYT*C<O;4o37)vtB`iq{HuM?4gfnD90~5D+5Yw-C-?qz
zfP^I(_%%y4K!{G}lD(+?)8P%=Zi2(sp--<NZUPJq(L$ZdXXmE{lp85U_`52~XBVPW
z;uXe#?rQWsL~Ko@LNwKsR~q6^Wgy1QP@Ch`Rq;-F3i?2_rR)iM<$Pf}4fnt!cgU+2
zjgxd{`5aDtW0V4EK3vo0*V)(_bhqYYeb=0?U&DQ+^17cAhtjXPek-$Aed~<AMv|==
z%f55w7eoJmjvLyX3d_+q({P6$Nk|l*Db6pZ5+@$oiM<mWjH+akD0Jx<E*9x1j=~MX
zB<mH<IKDLbS2V^xcCbEr;`e^O?*~98mkhWJWSv<sYl79qlShdVyZROx;?B9_I|E6L
z0V`bfG*5p`MnhXrN5LgFUzN-)fcC9&!nmJ{iJ6KO<}w|dKRw(05FSP@%C|>z-7GyE
zGy%pdlTzSXYM?v-irEAaPJ0<oGkOT}Bfr0j;`;-Wa3u)pfu9>BZ!Wn)twTwd0hYSI
zU0M_d#iE!f>1!!G8}l`E;i5?x9(M<KF*o?8l3X>sJc^rz$BH;U_uh@KujPBN_BY8O
z{JLMAlu3x8%!=k)_Tzzyz7y%@-mfM?WtMdg7QYUgi5lnZ7yT~^wQMxF-&-{eyzZ)b
zwcpRBDJdO~a3&Eue7!@(w9SIgF&&5STPVPd@K^Ybr;5d86}LfuIF@6j8uFV?#HY#>
z=pVeArZXnOs-~32s6l~54E(<r#riYL;E`u|cpMKT)Tn_46^Y+VDiS3oamSokAXf!5
zSx!hH%I2@oByc}V&`BM$5-+=`>VBP7eQ{NXV}{d$XLgE_O^_@&c0{ez8e?2^;g?1Y
z5CfT}^XD<)Oh<`L$QW~2c%xQ*svQ+04JhgFv4u`-573r(H~Kgoj{mrSIeZj-zdAT2
zdw#KT9tC*4Q=vY<KXNmA-A(hccQeQ>_3s#VhJ4XDMw*g5(v=<VGh&%&o?n00kVkmr
zzOE`?bP;umH-bKK_yI|%)93%P$u~>p*LKWek>?0NiYEl2!`Y}H5|pfEd%~t5u?4}L
zE~MA>`MnUN_H+3PpxC!Ijem0t&@UsvtaWx6V73g6B&-4M;2De)OklbN-ToPPeK`EF
zoEC&(sPe=29c}C;P0m;xjWgS`&graInkC_L)TEmm2Cc~8V}Bw-*Ey6s;gl!Ylfe%>
zvhE(9m*8-w$juHH83604IOBorIlqwuuhHd~Q+7{6`3sgilgD2l&~KvsUjlWM@>p)4
zg;{C9&>`)0g-@7M2$;ITg}#YiK^THWBxu5mcA5EhYM-SiE46)YF~e?!J4oJAQQ6rV
zO)(5N3Pi8+fy0<;5wq>eyO(A=jHdld0?-ZRfWG*&d$yalt<KK_7g-Gm7}_U(_1$-$
z!cZ~{pq&2f;s?%MfqlItrqDy;E#4e`Sp>{nCIdZypE|kooRp(oB7ph)=zHzheC$hu
z=6QADm>yeKUN4;!%K-mSM1HY1itWlP0Q)bWrlc1<mel-}YS^8r0qv15NL?Lav+@a}
z_e7k`;sUB?$U@LyS(A^WcEx>x#wqt@*Sh7KJOpTQj8oO?qmVpwT*~eg;mk<!9Aq8^
z&8WK5*I@~qy;aZlYcqI+0-PUve)TDDyMvKbOAHawMY~GVd6dXY5|q<RV*PRQe~JRW
zl*5XrhW;)S%hqPN+m$4{BMSD2=|>kB*eOqYRm;{Z2oI^-Q%Ibr#_XzlZnL90x3n9;
zYy+*AKuf#Y4xqyYVHt4X_Rqn8hBt-{u*wF8>MpQgqn%~JC1t4H!+waQ=5%~h&jD?F
z)Cb&NlShUMF+cU<z}W4}8tLpiatP`+%<>aqrzZRi9Kxkp0|wjg6$OSda)bW0IxV8x
z5XltnuE)Uq$=m5ej#R14lhx=lo>R;bG={xOGX|lRwMMz7wnRZ)7ALprg(}E6nbdQH
z0`E);BSM*27W=oNjBE%~?XuDmBZf35Wyzh+i^Z(Gsd&zH!wStaOf#W8C!vn)nmDZR
zJ&UcnVB5?4*;qELKQk4opa7Y?i*V0%;Tu$rwCNJkU?=OzCONDK|IPEHiQ9p>SpK%4
zCa0Mo&&XOMr<wSrnM6SP{B?oax3$joLR%)x(JmLu-p;?pjfTW}m&2TN$$@lZD@ACD
zP;PeKuSbUHRJT*U+{TWGhJ96&<7<!!(bu1@BC4J4vBAclJz{X=?`(}KHaO#^zO*<=
zpc;F(I32u~ZS3q$@ON+XXW0F8gcLb$^rJ1cA~~%nbE2WB{dK1+Q)EIkt<C6DlycsS
z$KeX=vW0AlM9z!nvQQs1h$-}??g=AIA9(G4JC-6D3Qd#ZB~|AI+o^B`U$DeBnv9ks
z#}q{~kYSE$GWSZ9&`;%B|24%OlVwv3Jn=iQC}OpDtJL5$r|NU2Z8EC?WqTrP%HIpQ
zK$9}_X38#lh7#MW&t%4MJXy-WhI;}j&S#o8%jGk1N@K(e7|kzC7gdmfat88R4%X(%
z;x4mYw>e$g(^ke#oGyM>1@sH*Q0E=h{g<99M~jrZGHh^9GDrRv@ia-YB=?AmVwqfY
zrt}3QVv08!-sPhi&ElhR-T|ui!%R&6cTPP#W|j9x&V>nob=r@I3C>Jj`nIxOY<TnV
zRD4yxmon^mW=g~51h0BJbQxrNlXE$JlEd2ZSX>lDJet4P)jCO7;zry51aBZaM_ArJ
zWWk{*44UJRYa)k7sNDN5&8cWRQI0NOR)d!#h7FUVnVrR_)qSmJU)j4yo<l2A-Qph8
zSq&t&Db!JZ4rEFTnIx=iH$e@Zuh-Xd_=<Nt?ku0~ETf{Olg*kOIX&j>k?EkHq{Y~c
zh!;4anotC2)~dV(SI~Y#f<s#WeUS=WbNkaooMy3HF;T0Yu-S~?r9`;I(r25}ieAT8
z-BqjZ%%f1FTMr<f?~k>qHXmqB(OP7z%Q8<*oQxe%Qgs{jmXE$<Ed9w;nnnAKRmY|p
z`DgZ$lDxIis+8U8B1`(8Poa9`%J6(O$;}&i*pX}46*@$A%rW-5I9B5#hnOvgDov=B
zC>Vvg!tGxFiiiA5?yS;;*OBwGmjre9^SHv-xXN|57KdS5lCD9n`<>D@er|FLEat6v
zTzpj~DLcJ4p-YDfO|})$uoiH9sl66GMX9}=->lLYray(QHJzZ@;MBM&>qwk6mgvNN
z9yc|$SC64NT{CmfJPDavCl`bZSbF#~QLN*%$aRMHTkj#mySVQPOxRTZr=ao=NRwFl
z&k(562CasH$4f({3bfx{H++vv^bL<_`cpCfvMb{^Dtk@!=ZPhPwR)ZNsl551rP9!S
z+75?)1uikSe&gZHlzB`(o<9P6ME6L=(xPiAqf=dCKfl$1yjW*#kHUn3-(g#$6x_Db
zGg>h1=j(Pf5tA*wX@_j}bD`~~cdSDtt||v{)&F!GEz`#VxTIj49!xhh#%veMBsN4^
zA5#S+()ersNQ>?&YM4(UrfQr+`xE~#iCa#C90X-?inWOF;=Wqgfe<E?w}XeV#^NIF
z7FnF9oMpcB6R<ky)FaF6rkh_SltxK1zwF0n*Emc+i@i6MWUx9@baZLSY=m~BcvyvS
zv~~3kvHCDF@>y@an(v5Wes3DOOl)=A_Aw2fIV(e6_*b}Ja?9+nUY4q#JZQ<B&<jYM
z3CXYd*~!H;#1gDFT)}y8&nlb`&O%<9U+oO>m>d?vf+F`c?KgS!k8oX5HELrc-3%c=
z(V)LUvDMR`D@(6HLZoXl@V#T|@z_}d&9a-FhI)*xeLfq|GJrjLQMT@5(=Uyh4jm;E
z4p2#u(D>Kg@madTbl&`L)e>xttL;>Kj0UG=Eq$Az3bn&q3@Mr0S)B5oA{=!4taPUV
ztiwMy4jh(8tpeal-6`rO%zbamr(C#sl&&*Jj6q(Vy2@Q(b7zW%#e;X#{ItY$w1nx|
zDiRAIlqB%igdl7g7wlb4;c3fG;4%XbEed6i#;x(%$I1aEX`N>VJ{rFF!^Gk)mzo$Z
ziuU}H7n7T`bSDz5Q6B#E#toqjcT{4%wiyi*w|3MZAR${%$C_+L@U@ed;0TBKCa^K;
zeX1mEil`5EU!m(bZj)50pbk~6L)oI;@^1@^?NH`w&5TA3azokp1k=?o-M_fm`XtMz
zUfxmXEOA2Lre?pbyxxiEu`GfoiDq{r080SJXT@sq+{K?Y<+Y)9G7|gFD@eZtAJ^y1
znF3E{eMgA%VN%0%cLxrbRYGgtln|9Zx4o*ckdnEd(BE*jp?o_iM(mKFrQ<L$#naS4
zW6UvNggcvQ#RaDh=vD=_rhtE|4b-NnY9Tw+WHB&Gk1X0IlObuhC?KVMXy3MNgvMIl
z&!;~O84m@{!gw9=*ODU>Ci1Ib*i>YC<@29PuoIbZ>=mhEjB<|907z`&4E$%(JUHU;
zr2W{eP0WysE2D@$XIs?=I+bv^3s8+z4E*G8efrJV5a?Khsq_Nn4Cgo>Jv$zQ7Et(U
z#e{zZpF7l{Xm>TlBbjDZ-cv?VW-PXLzN7-+)HkshDmP(K=W-8XBF}X2y9<qK#<6kA
z88aVSY}{k|n^m17a>DhkW7K3UbE1e%l&yT~k)c%#=V;nWpaQb5d&o1|;QNi*^(hta
z)^Qyv^#~^1gh7kPHI+0x8DIbmrxs0p{dLHnT4i8vKDb{}Q+<oB)_tG=3hJIh?PXh8
z#8|tm)+Mell#B-%@AK$yra?JvCqWILYhVY(g<#Ftdg0io6T2V8q2(V5y&|(D<0n~N
zzWOo4i)SO&Q>l&S4R^cbs9<T9n5Pmnn)Xs;;I;O(XlN`{SYGUZO{&y|?@}#ROkIw>
zxK+5nWf4fhxvWp^jEP1?!4iI)@9z-`&u-+;v8)<&y~h{IPY-rWtYLC~ygdH5AkXz-
z<@V?qAd1rTx)*-=adIiVLiiqcLApQ7!?Li6!2j$R|CTE2HF^M(b8yR*I^;77A1YWS
ztLaTzOX%6R(6jpGD6o2SFy9R6LA_&p+&BE!lwSY)HO(PulQV`*fX`uJZw7xg_C202
z)A7O3E+Nav?9FQp2W{VTg;hpY0(Vkkw^pFQy#|&Oj|t&8Gf_s;w(26cgd#<3V9Bs*
zcvNL1Q4-|I^U7C6{)A@!i=89uqOg*C0(9F#I(=DP61Sf}vwl)qSxp5_FNVO#Men2A
z*V0+b>i*dMg>O9&`ad;+OOqjMJmc#qIkzg4wXOWb1Rwz@8=fH<P*l~8iwpzpVxh}E
zzK*h24@p5KUT}pPzZ=iopG%u6-ePQks(IS&xGx;Im0XLRZiub8l>m~(4L;lR9b@mq
zM6sJF2{Szp>}#Nn)4dlS;#eV4{rnbiyHmr>I*8j|zjuR|=tF^rNP(d*SK9Qnlzkbr
zVU_qMTkLdZ|FUey?cSANy9(N9KYG(Hb}A3QrH&n`u@5zB1FxKeJMD{|_B9_&V@GoH
zLpvJ5+HJnR<I?*xvxEAZAlojbHeMn=@8()-?u+KLAKt}I#o}j`()&t$Z==Mq=ds&M
z()-eqlc}*Iv2+PP%A`#fn68w!KpQ8IJw;$`-)?Zm`%COd8T~E_H_`3v1}LXJc4WL&
z+H`Fll(QH+@?Ec((}9O*LD`zSw-NB_96O?gZ)Q{vZvWl#Fv&yIrn?M*!AaTcUV)eB
zF-5H{cBJo6df#SA)Tjvjl+`kWMii?jlDSSCTc@+^`~KfQ9DW8_>kw*g;s2)A{YO1p
zqVt<B`j09~+*kw7Sd}(?IE6q!j&f?nZJ#Ex3>jR7U>1aO@yr@K0s-@unK;%5Io6`s
zsmkG>I^<qH8UmA1@!xF-vOkqud5KWgK`a2};)V+34QW$r;#jL6#SL5S`Gw&2I@Q;7
zTkbMC3)miu;syc3M{c6*e6o#skS+5>6;bSII*7ZK&n{Nl)Ftp8DRv~yX%nQc%tI9W
zS~v0jn<y6NH^|o3bsc0&9Gko@y`RlTbjJUZBE5gm3SQAi-{vLyKc9~U9wNRZGv?jR
z|4SK!Q2r3||Law}CdjsArureo!3fFwYEa?H_S@l!1C+vAr^cXswVa!+{7!x&@Lu*D
z_~Ls&tBMCl=0_f0hzR7q$)yae<{=#2_r!j>cQjruIsN?pwY>Ms5YMhBAWs>)k8H{2
zSDSBtg)b<qo(^fyi$8zAnQ+M_iCaG;THrR9vO2TT6E|KuVjA^~hZ66~L(0z*(T1TM
z^&R=Ys(aid;rod94U*blke_pAM<K;XiDL*(sm$l$Ef8&vip_FjBpG)8)*Ir`fQ7Tl
z3olVk6p4bz9EqOq>kYr?45^a9osbLBwCm9M4wOe4VdU~Ge13-q!3arxNCnVm#{Ba>
zIcd_CijF8G5t8zI0tsf7x%80<I?o%E#F#b*k{0DW2eB~>^H`j$1OVk=ch7|+Q>c?D
zkR*mI!tS%cRC`!PvN9Qz)kxA%E{R2(Q}u>}aMl2$rx{E?rXmVte1=g-hha?tN9uR+
zq~E)zA&+&j{+L3lUL$_;BPkv{$Ml=PAEz?;Sq1?`iVII2%VfSua*_Us5<{{go=nh*
zbZ`q*=4lSyWSSojr2)|~I-{`ZSUURp`&X=N(t)hVh+XA?GEPaE87bHgqt(p6)=B#o
zuG`A03=YM_g*ty8Id*EwpirB)f7sj<|I9aELD`1IM$pm1!Un45e8T&_7inbH(UIr<
z@-)Sm<?_dUjq&P7_n7w_;IX3(Aj;kNFpRhSBxYE`=~pf9J^oP*IywqQVY~j(Eo&-#
z%0$`vvg0tNw=Mg_Q-r`v8E3UQNt-)LTITdLkLK<30jEtEA+|$y(dxpoh77_rr>v=j
zRmb7XYcc3(X<V>0o!&oj`L<>2WoMZ=i}RKBE_`+aNQRT^!3{nR@8h)prt4!0*E`nw
zxbFW7weB;wGSo6kmPhWH=$67enH=iv51JW}k)Buf-vI(pdP<Ur*ww*P(|zZ5=q~DJ
zudUWU3;WsmL4U>X7iK@1e>2lb7I)g**CyqDP2O}Iyxm}HM77w;#D9Fd;<HH5k@LHS
zVZYJ&oZEV~&&d2flHm6+{)440+E>Ztvx!v1QGu7TPNu!6W>U1U1^6;_yiSXo>#Fxz
zlLHB8IJ;&N{>v11Iz#dCLhDI{Kxe6Ngot=u3fPpF^NEx}b0pffZryp(T+;(sTzq^C
z!J%y3hJ98>6`Ui`nf5Q+YYMoOdo}GKcrqhi>=63^R?Hg$=IJR>$4)nDa<?)a<((e+
zp*AY&yG&tut>eaSGM0S!G|U?v{40#6Z64Drcp_e)GGKG<5`kY0Tjbx@zcN5467f`5
zbd&rUCEO-;_D+@U5By?L?a@O>&`dQcn5b~$MOF+l`{(wuTJI3Wat2(!cWi%0&*}m!
z7+})9VFC@6%e%Z;mq>xsZ6qi3*BQ~(4smH|M3Z9R?r<fvO@a0tTrd0B+Jqx*5!~2b
z(pWFln}3pVI?qg1T}5D<hPJm~(cR^))M12P_E96{vTuL-C3?nqo$l7oj%?(>-J=Vk
z2LOFgl&z#DhKO%9S(G%qvvU6rbu)6_-|_EPXLzxGuVe5}=&xmCk3lw7HT{-K;GFz)
zRA$nrQHsgw#I^*(r+0+uJa|D8m+N<ZvkttQ&D#)i=ee;RYSDO>57UIhqtiTRLT4e6
z8LN`u<PO!D_#OkeUkd<w%LSsVc<THlSS9nFWY0IjKqu1a>Nvq{3}9=F)5LypodXA3
z*k}4;%pZ+X<ag8`=j8#5K{Jese5xr|pAUqXTju4DUuD2kHPSDc8QD~qr*s|_u)H!+
zBNqu1GZ~H)csko^>^;73WDx9h+*k4Zi>NNGFrs~({8NgqF~*P&R!pYwbe2SFnt9)z
zf~95T;0$hUtJrSxj<7*!h$84&k8{9;(>OoWn|E&KhLgJEaA|lU|3v+ZQHs~Jz*Z0Z
zEpnhKjvSmw$40z(nqG-xF+t8ku!TtQTWXuBNR+RV%pv(u76crnB#k_dqo`^j^M!aB
zMDMwr4o)Vxg)1LC9gNE8IMnM~NtYvJgZi#32;;xc*(IEu&SJ!}r)^)OhZm?N9=0xN
z7yl|109`CJjANj&1V?j+)gn6Q;KZwPyVEE2pJBztLIzeceU1*;7H=vCw8|cxagH?t
z<gef6{#xCGlS9aZSztPW3md+zc+)<B8+yO*g!%`Z(RZR|?Li3BKA(mUU7Efd9Eg<e
zP`;uQycB?QrC%-u_uzo72yx&4E<#vGddXyz6o$MOvVcTZV>PiH$hl3ibC0oic9<HK
zIW2N|8s!;@{MKC&#}$8|Hae`1^OSD>@CRKOYYFH}=9G>(yO_bKg;iq^=_u>MbOgqW
z_Y&|QSrOOnh&SbBS<*fJ<s1_fR9AX76;a`Sh#lBt@0ImsxOw;Oa_CISCnxHX++rJE
zfndmTCfk~9{{)!|3}g{A2UwY?>Sgv&eY4^`aw45%9L|@Z_>!?pF9lXJfjn}^1b#gg
z6W_*N)l`hybq|ac1>MEk^YMw`DkP5LItSi{C+rjml;f7g@H;^>G|p<t{uSu&CgXM{
z&fd_RjdDwT9A$lBge(d=0u=?821=cxF-sGn8&To!$HCGbT+`ukd!`BJan!HP`11q^
zv2nE%OE?fFTgP-RIl*uUEXvFtT5%M{d$unj&Wod%2Oz|5kid~z4Mcu3^UKck7xcY>
za0@$}p{q4nuy9-Qkgq@JuG9B<lAS~!xYQ<Rk&*514|)g}PWvnPAd`5w#MrEWWWOoy
zl5UH<HW}U}l{nfg{sUjF24UJj&APVZ8X`$AxYb0`>!<$XW}c0kY6pVnJZ8H#k)2Bt
z?uP=qHbz^B_)_Lv5p|bkC*^)$2c^c)e2hlFkzJn9@8n}-Jw9!KQrnMlb?R2j?cq#@
zAX2dO21%?|I`KY>Y8YQA&1-JTu7LpoTOdj}jLKs4JPD$jl*}mP2g8^fdmE~=!p~gi
zo+v{}7D*GkG!E|Xq(sSmOM>ZsT)q4`eU29=OUCb5hiiQ-NEH9++e0y0I_6&Pw!9fG
zL&|OHsjLfp7fZbFRQK#6xxqz<B~`?&S983EEcL3t-7aECy9J5RUfy73*nd&NN3?FV
z`&VysG1mv6j>u^BM7Q$mS+RDA+^JEYYd}t#iR#W%6hA(8ltL#W<{JC(rcXkFFpoT?
z)0?pj1`%PkxG0KJI@PS*Jm)O5$(i_D{EPcrd5l}c*-*6{M|fX2KLP)ry~RkqWdC9s
z2Arnk!}^JztOMyOwKTu{i-!(tWaManhpHNUgHZ}-=e=}Dfo)c(^@&Mk)?te#qoobD
z%u<!i3vNjIo+f3H(08at;9;EQHm*m*N=49Ea&Yx1SWCnUmfgqu!tRWSjV;d+**0nJ
zGEZlb!VuhUj(s4HWD;>5OiT-%=|@oV%^Zl`DB+z1m`?gR)aOba8*&^G%{Jlml{~LC
zloF@r(FFJ1Ac#Tk&`yp`R_B!8+jF0Th&B*yi&n0cLWo%ohmrZ4(~y60n(zmXX~^+D
z5|&GZ0xE+AsDu*8*^yQ<raCm${au*S#mj={OwfcfFJ>EepXR7(yo-kR`xcK`&vzyc
zN%ky?dCXYsNU!2s&n#SWlJ_dy-lT4<E|Nk~>)#ymcPcZ*V=5aYPFug!JQoF#XxMG~
ztEuw(Xq*Dvyry(EGOSCmN<T9);#9BgvL>~EeR{>4=IrVQ4iss5-Y~y1`%uEmTG-5_
z<BrqBqz;MWXGSMe94jfgez{C?@kVC;42Sfs0X6B{fN&Qft+-KA3PoNArzGPaTmkAv
zL25L)^KrQ2>ukfIZw<W8?g!n(lXOUWPQX%zU5XEeaxn{(+L2GViG{Lcmq`b~CHsc5
zaubM`yl0SZRx4G9tiZk<;pXCYSxU>To#I5(bg?YyNeFudl~l&UB?KiVe-qfEEu6;P
z#C#rGo7PFgtlxj$dyxej$v3FI#X0wBiwMV2<uR7S_lZ)J!d67x9^P!f_kZjktsex`
z0T@Y=Mz;DsUVmJDwD^52KM}ke?SDM8zkSqwyp3+pUVc2ceN_2<|5pn6#y>>f+vLk$
zP(Pxb!xK1Z7EdCj$^-Xn-L$+zP@J&JN7I{C{WO~^$^bVRN!Egh=hn=0Ar4U^cKJri
zc&8Q7bHj>GQpv6@1&Uo^>Hc^XiomTw4QE5O--4ip6c>D_d-ef~UVu`_a#Sm91H{`i
zWorb`ZXb&Yh=a=vB%`qGcY!$>e|-YND?l3$BKm(EUD)@e;xFLW&~T?W<}WU#?XRh-
z&)XPtB!2qNg=qBuXny<~WE6rHck6={#Yogqlc6Wh;GQ@;puKBzC6D*9r{r?cE)1`O
zp>}IW6<P^Wn>8{lRlo?Rs<yqU=r`5mcBcOQ6Z&vIngs@Vwnvgq4LnwJ&c}Da!9I{R
z#mg+u6g4ufxUd|S7am=|;FcaHD+vynVEtXMdeb@PqbtpfP6!Rm_TOgnM}%l?pDo?4
z5ZovWWk%yaIE=f|zOBm}h14*mph@cJYA9zBg4HG3s3uabzfl$<w5mTN=Z}FK5sWDq
zxuOsP+o)Osbr)h+hRil-U5)!R$biva0+O^WP27h$w4dRTq?xuz7Fs0<8!W!1o;B4r
z_pb!BgtI(@<0nm^;{np@jk+r=YS1VS!Rx;BBQeu?<u{CXZ7GtQhK(W;O%Y_<yZBmx
zkpjSr-FPGGrNV<)&d0<hejp5W?qlv*Ddf<U9;)tim93~50ibCeBcN8zp=0b4DflbX
zf6%X%wH?LX>;acZ*=l`U4;ZpK63snuXj37&Siy>#in;)_P{^)`P&ylZmE*ilR>Ks<
z+imzS8g$-{_;GP~^CG7V9gF5fX%WBn57>I$U^y>Z(vMEm0qj#3Gg=24#(#XWqn&4g
zD5n#Pb#%syXkj{kFN_L7GHz4&)!0a)HDDTa&G#R&V8$#Ce}ZK|N+$b2)#Q4QY&cWa
zz3rv7%%8th>s#GR*}-P)aIqVjD-M6=2b~g*rDd$D88(B1j;1<r&m?B&fB;eZk>&)z
zH*T&1+Ih)@EY*YC+p=XjWLfYNTg`6=idf&o*-wg=e9Z|AM5K1tvEmaMQEz#Ty6a<6
z3|THONvAg_C_PUI^Pn2^l3~19kpdApn2KM~5fm1i#HrLkQxE-22btJgs`yNBA34`^
z)Y01_(WdnJ{;=r#a&3BFNwZ;N-Y(}DApg<TLM2d(yK!qKm4J3Bnx!pMkPu@30>88Y
z<zEZ=PN{@XvLt{4O5l@|Kd$z<&D3NE9p-%!$+mwX*2=qoRbj0QmcMV72(@_~$TdZM
zS9PK>$`*%O#9zVtPk|Q(L=1zVd&iFHOBzuGk8xu!h7^0hOvn?g%Ix8`B&Rh(lyk>O
zehIx=;_^QJCLF^o^IEeZqf-IF1r?Rl@pzr34l@zyJ*(sFifMu!6%trMCa!2T|MZ`~
zYE{?R<+Xh~)$g@nY5P~ZO9_k%VDFh9X;XoM6u2x;=0fA<Z`2#v{MFW+c`3+D1#nDc
zO;51;(1@Tvr%?zp6FV|tEtzM(`Rwd;6U}A>)cZrREKnSNMfHl?^u%7+0|Y-6bGk$$
zuR)xOsVC{x6HN_nZ;tO*Xe}4f-J*lxnW~y<+%IX5FJ*TFj5j?h9&aU(IxA1uviWoH
zj#yyFvZhF0dY~zW1oKvL%`4UGcPESEgd;8PGr5M>2(kwV$Nu|#kViG_H<#wqi!XdL
zPoM)o%r|civB)#msls<9**Adx7z$^=$K)a~Si|K81lKp#+V-^#W<oxy)%8ozB*UqZ
z*{0PYDVh-tWFd4&H&9s*Lj1hYuaZ)7K=4?BfAV)7h;R6o_vjPcOwO3qB(|K9&#-G?
z_Ie}<V()~(wIif!ZCCx?6CwQd=VW27JUE8ZoRU2PZ53$dqUnpE8-O?MeUn}(skaI7
zy{J&?!7bI0Nfy5D1b^~PybP^lcQ#O!1ArbZ!?y6fnb~eK_t$lM-&MGK&6T%vK+3%l
zUzJx~ZB=Ig5Qmqp5Vm>K$c(U{wyQLX33SvdNo_jh+%<L_PXAIkr~%&4G19#UcAWst
zCYRPfO{_vB(YCz*u1iw1uRkC^N9MOGcqr?jr!9;(E85n_NNZA}LIu16Ub9HcONp))
zqK@H=ay>xIdSuC00KPs!{9mPMjpj$@tj8(o^?0sZV47Zp(b<WyDz~Y#f|up#so>a)
z^!z5_`L`&G9~&9BgO8sG1m2(Z*YJ#{8Hm=``9k?X(>-IB*(t(i%}UH!9d6E>#NLkV
zHv)G1tT?~F09_Ee$QTn2Ze0>b@2<d^7GMU5(aqZyfj<K2u-c<p>r+0SVmIkN84fFe
z;CU;rB#X303Nk3?K85H3aev6+^%}llhz}R<V_J2>*gNJ-ZJAai<lh6Cd_FC2u%TC?
zTQm2gd9w&p7N<aMYSmp2`N3nzzgU9vt0-yv=I-_@zh&T3@Cw&IGTnZREEoC0YuS_j
zp0P{H{^h7T6x?Z_ocs&P+()YT-ReNe?1Cb%S$Q9iyAi`T7*^%vA~nPKqC~g41Jb?h
zG>BKcPYT|3fddvVQznas&-$@7`caSCdOh177J!4L8!V+i27rKdntSaz<U-KW;HiFi
zYYhbS(k_ppk~+{u$Abm|7zW}aShi!*b&}%7R-cwU2PreMHO5Oh<e=p?L&iNbojW)B
zBk><h6!_#>*c=EsyTkfS@@x&*t1y48@QYp|YD9ErvAS8_5Hd_1iGBhzi2uDy4HM`v
z3sGpj4)<}&!?@FaFQKWTceq9ekBgtvU1=eTwjmSs#H4S`*`{MAVpbS8wx$wS2Iy<)
zlz2(rsB#UAh71!roDaIkl;By!#V7yjKBcH(nP-Z@FPuQ9uFs<-M0p;f(RJ(U2I(0H
zK7N(!BzLR)hYhjUp5EFZTchD<O1UItY8r%0<A|>1rh&c0>Q~go1~T9wl$_1v*(kP~
z43EWcbAL)B9wN=x=}YSU+0^AQ_6CILM5CMFT7lAx=)KtQI|0!ORB*VARFiPV@{s)(
zN_eGt&3SoB`{b0%Qd9#)Mjc(EgP(cdJ5$&d6CZK!r@Dsj<e6oY>#Auw=uE(J)_dE_
z4vT>8FW+%BS$E5EUx)ss6=`vo%5_|nPB8%`<=XQH_MT_ZtgVpGunTCBD3w2cW{6a4
z4PeS~XHfP2Y)cU@ZDvA3Wz4hCBjY*TT<~?CSk(^2O)q6&H<BLbE4B#3E|N{ulJ8Wb
zNh!nSwBC1JAsU}NWCGgh6gMyIICMzU3Rvs$lvJ|^j-E=VQ>bR)U$v!d8r`y41qjr3
z;^vyOVvkKIjRSP8cE-z}rS3GbyH|{?Y7*zqZHOsLP9@|!lNOVoa~!}|B#d*!A}LFs
z7+K``i4-BSiA*kekoU~GT$HFOsly~M=_>7}C#BHtHH7<*Y@_1W0B$AO3dOaAlE3zP
zDkWAj^Idz*a$f>)bq=Blo;B%+b4Bfx8riG_I6{3G3*^>{*3#e;^HPL{ZpJDS@hMh$
zz~t0}v)mH0O@Xkd<!6d(76&PrX@%;46Si@ChPAC?6S%|#fnD1Sa`y_<L#MXsxp?PE
z(&%qBWMBRkRvXN_sa>Q$N6aYL%voh~&L?cAz_TLR&^o#Gj*ZHf@(iyqFoNtCV5t~s
zt+10*YW2C-yA^r?0*dV47tCT4BAb_T*lA)>k5A=>`}Q5I<dSIWo3-QyC3)u^%L<h?
zzFI*G)-V>`ey6lUiLyF|BnZ)cRZ0%iZ!1ckY*nuQuzVeQX%qc;*#3WmgozEwekZd)
zK~X<LL9zUgLBii%Ow3(a|2v40?|(?Y)huk|lP%quUuwkJ&|**(ZD#-JxX3<d(awd4
z-s}4#x1X&R@Vi-qc)_Q}VY&+k(M$aRLSr+5({Y?Yp4%-47n8YnYS(t9<UuP;(!CS-
z8b@sRNARR)Dt-Swm1LQH224BuiEkiy9WQQX#<18!?u}e{a_(ACZ%9s1YSbiR3nv7(
zXOvONzFze21x)F3KdKDl16c6JDTpgjcC2#_+G=Azz~>*OMBlJY^PMy9FrjYw=P|Qr
z3g9ip5Tb*HXKEpZM3ZL+G7Ni`i7T-gihQ>EF1LkY$ez^^bUngO6$wNCHf+MY_rE`f
z<JnEgMXa&QNSL?5+zLUbf+*j`loQgS*Qh2nPm>1+*VorgP?1Zl_+ygKB*R?B+z8nk
z%~#Gpy*)WRA(;6q2C)ocWgVUH-?-edp}Sm~`UdBDRcT<05=cFxPn(Ya3h4drPo#Ft
zYWf3B9-$%(|C+V8KQipCg#bT}!S~zKXtXaj^5qX7kN1bs{e`AaY(M}!rf5VhmiCEz
zAWn=k2Opms)SEw)>d_f&iCjQfd?EE$)hJFLvuM(fq8E~xB;VBG<t;7|vul^ufhJ?J
zsffE@gk}<Xmo;4R-r=A(!H6Z|J1lxE^om?;@*YIT&R=K5UxS`A(;<=Qt2e@^RP2!z
z<6$SHN@?O**xz-&2E`KZj(XIo!uv6<pn&x04O1YSUOvJou7<Fy6tr~r;OlWhjl-vZ
zjNUFc4`{#N5QG(%43idc%|`g?buh&i_i5wWkqU+}u#;kf4E6-F%E*)uvZ*ciRzlAL
z5mXr4QNc))rMA1~EQ1r6;zNCg+!0rT3KUXozv>vLH9viwXDD9f8RkZ#%=E2<Mvs^j
za1U9yi)uH6mrL5^rgz>9>E#rDq32|xCo_A-?1>6ufs)2dT_p66SvbkpDP^T$d@{Wd
z4+<*wjIkD@jT;~dy*{T1NkFGO2&PTw-0g3So4>clgYh9RnfL_>oMI41f3wWBn8U5B
zBPjVbL}C6JTSx*8RwJ#so`&Bb9QMT>YYP9{aC*p!g`+PlBIc7}P`=9XP6WKesHZSV
zp$-5={1XM-i)9AQ9%?nT#GIOWhD<PH#ufF9l{d%N1rj2R!4PIytW8v*)*5OotpK6L
z@DVJ|e_(jULC=RoTFrx+x1lb0z5LbCE5?1K8QzUT^*L(y1Fo{>%j-GXG)vw<;|}dw
z%V=g-6iH|_Oold9{HdT+nJIscx~M>HWKRtZf?)Zf{!B#$oBTuZ-A|^lgHi_urgUi{
z+!$!(jk|CuWf3FOJWBA~N){@>fPet=Ka#oB`ka6IuvxHw8%oHNNWsrik)ax^cT@eG
zghG`}4llt8AzI1SjE*+Xu`uxuRinV%gT~F^DYKZuKTDxOmwFiXCB@EQjJqP?IF{=!
z*~f_ioDs_HQx%EGCSit)cakKjLT&QG(o|f~P7)I%Hp|O>qRnOHP;|iN6rTS6WEv>q
zi0u-g%@bCI+0tGsN}?v@cG8#T6oK1jDm&=t*xgGf2M;$@lqT}vcXu<afYu}YLwWjo
z_YJl5%nEzZ80EKwDNl^^Asi`_^RS%)?WMcV?Oa!&MDPfM0qpHxE53~4;3BuT<=w;c
z;luO8o&UwyIYfyPEbF?t+qP}nwr$&X@3w7Yw{6?DZQJ(ibI<6F?w#a{%&1xAs$3Nr
z|M#D7O#FsDo}u245Kn#&mf6uzwIz+8GYU^%)saGB=W@jBeXd|&ppYi>Vmn@e5yfIO
z+<s#?vvI}*>_<BYlis%by*t38v;n?6IMF|X69a*JEoiB~s${jV$elBsQ63Q<^5=tp
zcS!-bx!a^c*jP7DyaFFMLA`#geizTB{$Nh90q^w579yCiaC>~|uO4Uj_E6yo0eF6s
z)M0s9@cW3%3$($61pd?0J-#0kZOtzjI@eD=KlW{EVM^ySHel**VH)k>U)cbQSF}#_
zCh%3v^W{&1*cLotH{Y-NbaO9_U4!^&iQ1K2-%3C~p95!S?q^l7&)=6a&yB#|?98Ix
zrx!kkhX8sP0_dVX<xlv0^HB*65b+3Y>_LiXhA7^6!(iTVw@6S8cX|^uzPQ@xYCqkx
zV6iptIX_(|H!yIX!!4#iW82$G`OqK$L)su*hTjw9_BZGY4Hlh%6LI$duJ{(w{mv2H
zLTE}lLQ25Aq+ZmotG5_^BmS{}ga753aFPrVH{thH60KvW;df-smhux1XU62n(e@f&
zqcE9@cH{X&z--4Q{7EbHQ^+fNn5sApPW^Kxg$_~eaI*W>IHPGt%J;1wgFWx~iyxI)
zp`KcTo?4!yy7DOIk)zn%a8VuT*_Fo}X+K{O$4`lO|JovTWY48dE1^#xLr@qH<zXC$
z9+~+kLy9ze@@GT>%ozYj!G)>1{2zkVKAYHSojOv_nP99EfKxuDrC)(yeNvQm-Uv+w
zy9!DS&Eu+wl7B&cKm{?``UrUjq@(_7|Bqwsr!NS<zxe|Id4NDV5#-NBun?wh%99e7
z;$Zw$X$-Uwv(G?WMDE-AXk2jOC!N)yWOoqc9JTWxN;aKKe$Xj$`UFnfQaBfCd*+8F
z4viiWxn7}rykm(~v-%}KebKf9e>9Qg({-`xJ!kfpC#v5)gvM^-7D_XlBUW#mDuo7`
zIPAJDSd&;(1+<LXqXQE?@?)h9LqSY0O<gw$-|SaiwQLI*aSitD)4Omd30JM7>Jc6i
z_f3Es_N~$apPbv+sc7C-(L5{U3mOdY;(VzK^}3>}e20=uofJ<9Ye=)spSj^)s@H30
z96`v9LUf+5XRB|7&wzELTb?pmEbm%|Ms2*qKVw_<5ZMPukS3g*?B@k`JsC{d8@A3>
zV3VF4n@+7}_A^nuK^j)dd9eQcAlS5jnENUHTIME1PyP@mA@nHQ|M`-HK(;}_E*i0i
z00*7cJT(!Gq$0Hwe~$y%#~SDsZ9yjL91Aib*4P<<WLNL=%%RqwPX~i)v546&z07MI
zT1hv2fLE%O%A|NyRYI;Cdma+J+|t*hM^?!4RT2f%vbB{yt<6QaZfjy;K0oFc>6FKj
zajaX94hq`UM=)&Gg1r+>?2n6FvXzxZAQrn!$h=~u1(1qR9!4E#X|VMy0HM}MozwIf
zwI?ObkDNHkT(2aonW1E~P@U5}Wn#Uzj?iM+nNh#mL1v3YshegK`4XhhBfle;pYA@o
z)N%#PI*TYzc7m9+LpkZp9kv5CqY(DzNae9IgH>sR;+RU>$FvvCqD)kv*cD}zAzge)
z$X~leh)#h3hA``)c!gXznFnL-;E=(KTAiwT+ubX+hZKZk92)ReiA2<rKM+t*%wLyL
z;tFoV<RS9Uz64R5&3RUSQ<1Ie@i9gPJ58u$7w*{Ky+jRsz;9?&#w$eSq_^&fUG1sC
zt%9;xw;bl7ivQZjknbE1FuB!xM<y@Q8aLk~`L0UUS23td60lhg)YNhOy?$VBLt$}l
zh_d5UIn4xeE+`dH%Tk`4$RxnmFlkP@6Q<;TO#3Ygda|=rtPw@Tsd{M0Pn3HqCgN8-
zR$DTp`Z2-3-Qotaut3U6R84k;ctrI}vXmshqyJt_Xi=UL)!M3;6qO{$x~NnHYZ&l0
zfkelb9~KmoYAUA!jVmfLU1X#Lk5r0@W6X<M1U9DpvBWyvATeJWSwGIPJ>j6^4GE+j
zi#kh~jH6{r)YkWONKa@^YAh<GX(E>mvQua$mJ2~l1HK32+<G?N1r$SKs0zApJ?gY^
z(9}HAC>W`H@{@n$HKhdJWrn$kA7M&)8Evzsto(O3-y1)kRzaN46F{EqK;l$rgKHtK
zwjfVWf)g@GQ;hs6lqJ{++`xZ|RP38-JnSxUoSJIP>mhL*k&2b6Eqb^g7fIFD?&ur2
z&=ciunam6w&VDeYp2`F$h-C_dSr>0=`Dd-1u-KrO=-FSD6Yli-CN)L9{z@?p&=@eC
zpLG|8(T^G{)4DGBEQ#9S`Aj1eUe!WZ5YJ#3A*Mcw?+{;3WP7Bg%y3^D59F^D-50y=
zP{nZ}@nfq03PG$3uEi;m%Y~okZ8eV=+j!@(3Snl*K*2QLPFx8ea{G^%z^klKW%l^O
zk5G^<$kptuu0RX;-xXbYcZLcGqol)VoFEH9JG5c=V1$MQwSx?LQ;F?Ofi%)bR|9EE
z>F6RA#5z~~wV>^3N2$rx@idGk^<f|RN#;Bf2CcvWi#<+Hd3)x(jn;96-DZ0iTx3ug
z^Kh%^<_~-~wmi`F{b9*k4~)<Ylcaf_WRpv<2Y`=5XHeZg>GBT;LD=w8D+0$dYk8E+
zBWbvynVt=?pWJ_9OwsaEP1QD}*1}R5(fiJ#w%a_{*Gd*%+3)+0v%C}i9iy)R95>jc
z(f!ysJ)bWz>ZK9X|5al_w{EJ~(B^VQ&EA~m60e}0g-=+zCZ09XR6}Vycud(cR(Be+
zk!U+akNqcfZXwoosQRDKr|EYUbmBj&F*p*f`;sYJ#@Ze(mth+)juHsC28$~rUN2d7
zn~g)m2o7fgTP5D_p++w%phNP~7Fw!-MOiEcnua%}f;2L!%StBls^Ude<BA<5_wqz$
zgSQC66g+ycHl^_bhL7N-MOfpM)abdy>Y$(T<w+TgmTmXdhGG=<Q<tht#>v`NrAPH;
z<JX8Ps|gf_*^BaZ(gco+X9yJL-UffgwW*Bzdo|>^rB34)#!);Eg-ibUPQPGix_ulH
zGnu%1B$nkxR7z~QKFi)`z<7|zG_Q%owZX5JNf#*>cmim^SSPYWRNrK3B?6Z5UUJjn
zmVz+3cDrW~c^4euoNL#;5y|RlQS#JbQYesOHrWB80?-1lazd+WOT{*FSqzM{Bg}K*
zSo|myTgj8-U~oZ~+a!mPOOT_FVwbtIM}_)h!;9cPBMX^wkwrQ%ij4vZHqUQMI{_@f
zln@nVPfi!vqdF$X7$kHMQMPqY^lG%0NPj&`lkfyJ23|fpDwtalP2d1Nh#D?60T67(
zGc{wYSm+BJuZG1bsbL?>P6*61OJPseTSm;u_8${V8v|46ik(rYy+?sZm#sdwVo?vU
zNHwsOyg7@<r!NFpdGGX4M%*_9R35W?yeuWD#D_;@rn}_dD~n^-)?2<W%PuM)qLkq7
zk7nM9X9eFmOK!6u!topq8Ic%lpxZRWD;pGM5;OZUFRT_%r)PNNRdGY4v}8qH2@jR9
z*CQIj`I<6WK94SLhQ4Z;nn4KTEFUocHSQY1{brs(8R0A&mSB^B*Wl8UP{zS35Vgkl
z3M5iLB~dTB6)#Jn`SpL!`iM(QojRp_Yuj(ntzP|N5!WF9bPZ{9$1mZTK+G~d{6f<>
zx1mKXxk{%;Zwx7`CSI@aOt9TxD%)CWOKR&-Wz$JdYfo4=AJO!XTZ<2Gm&}h59Q>q`
zTKalZD|shrlJr8S5Q|lrFg+nqslqtB(sdrRk7rs^uxyaxqzqe!E5l|~Q~1}MQLohA
zh}9<Pyf%7;qNQPhTXDJLj+~(~C-a(EV}v0s8{=tWmmW}FF3Zy?#%0_%$$Nriaqp6)
zSNf08I?|+tC1okSth(_9W~#h1F_7lON$EE!mARQe<AjTMc)_0fuQXgC$LS}o=0Ll)
zHmjH;M=7!9;8XC6xK?rnuB4>t)3K0uZkz+JX>`Rw7dUAmc$17&dRj-MJI0BZbfE~^
z9~msTUIASwBDsA~Aqd4x!=#`Vj{*@sB6^itnXImja=N_AKid^_6lzrWk%5G3^QS>}
z0pJUJ6U5+mJ8psMk=)7fzx17PH4~>9y>IWB6&e-F#a|PBF?b0T4hgr5EO*@IwDf8!
zi?z#C=U^-!K;AJ`hVd%B0^KpK$Dwu!9;*8Uk5XWv5ZcvI3CFNh!E;2Z5ZwPJK07aH
z$IJoHvbC+>S9mti#9k_MVlj`j+XPmh{hTJQhZO$)Qd=9Lt0S)Z-c?ICuo;rL@@U|6
zT5LY?npWZsBP}MHdmQl=6_JJC1adk}WOi&6E;YE$vn|RhJR}wFl>0jsc`xY~JGEKp
z)TX2o<hR!v7Y)VL@0TO0j*rScBy{eTVii0>>ZpxyJe>&^qIf+bSm6SfAU{UESYM~}
z$?|PpCnzBGJuj+qg$)OH0G}GSl`ljvz1d5j>Yt5f&j>N9aXJ<zm_csMd(iGy^<@qZ
zT-NFm%Y);n`?!GwImz2<2~)=oi=%*hRZ8%n@}^`cnqeIWMwoVO!yv6WPV_7UU|AB`
z3dxO#o#Tw=4x1<>`tIdh)cysc%DMa%E%JaEcNP=*3qidRgg~PURywH|w|DPgJ{*P9
zRje2qu&5z(Zjo1D@7W>b@>`(&g}TJe<s6ZR3V%CJ3otO(t3|-IdhZ$akDNz_DxDwy
ziG>LyDxd1^#)#&09u|w~DMW|S>tSCI!4Cw`Pz4^{z0(~6;L#S;I|}%u(!J8(=e7Yz
zXc@zvvH`M9Rn1`oVL%C(jUK0(O1hjU1^0+vu>oq1YxE~h0{Xz+dhM{5>Fs!@@4}lr
z!}?Afn<2Z|$?7ZyYY#9-t@e(3?lk7OOIR~(UA>ssJ5B>b5dHZW=oq_;R7-U0$@&7R
zOQ-p=Ak*QQ=Y10c-a+4L;_voW!zNjSeI58XSV)ZNu6w%X_4w+_wx9wgsVhGiTDu!t
zJAA!#cD&#FJe+zV+X-CmQTf7~o*||4<@9+nb^N{<yPHuNF?Rg?M&_mS&5+)mxKOk6
zdBbO30+fs8L++(LMR@D$l%k%3&Zb$OC<{A$lMtsRG!LA2Giu=??mmsvYqkf|bz|47
z;zA%T!4AcUy4^C!5KC`4t0Zz&1@1>S2e_Qnnrpz&&DcLm`WGjSuw8jeZ6wC2k9!fC
z_I(OtG7a(o*IIjQEa<zor?BMndA)UkWd3IvB;c==xFOVWND9Py6_J2mBKhPJmgyU$
z8|mW+3+ZR7a!jM|<O;%9Hk>>Ybag?@R+T^ZnQN~k&T}A$W>v!mdxdcEdu+}1X@2%+
z65#yW%%D7<vm^>}{=iDfdqu;GHqPl?B(BfK349>uhhUo`G^8G+;~)sdDU=jtpls|o
z2~uK47P~(Qh_^;E<cu-eTollH>8v<MY77`d{pBc}nX6hB!oFj?lAt&*Y2hFxCq@c>
zl*Xw3Hc=Eo0*fn3F^UvLl**|77Eu&M0*l*!=Q^YMJ48_=2~GdaPnO0RILFdAi!X1h
zq^VLD(VMh#y?`?zj>Y^pFP$!Y&C}1Wmn2iAUQbWcxk)FPqDmc(mRXI=)B!8!o;GO_
zCbO2&fS(5GI<6PA_u`#qEz32qA`eV<#=NZ@oY@rY(COKqo*bHvwK@3G@=R$cM_a)2
z9SCqJ29If8;7YLIN@2!CTY@K+7D;^diu`Ecb2OWyN>Gy-yI5IBNv8^|dSnp|$GF+&
z>w4;SmjxSO928y6lH{oncVyn&+YoyQO#;2(Tnl)*ZeL&rodzvOv{`1|4)vncbq_OC
z_7<|b7fuMjZas^N)bB?H<Ae{)aXu!twcdKfT>mY;ZeYDE)z-r?Kl)`$6o2%6yo>+B
zCRMn(gI)DIsg-^&$&^j&1)+JhbJ}OJo+LTMKy<q2`>yG-va;O}U!FOv;g?pcLXl#n
zB^H^VOL4PmP$?T<E|cu!fQvEoN4D4tA~Xj`x-@q3`H+3lo^=A`S0E-@lUA`tO2aDt
z+y3|c;!I*Bu0wIYZl~Bz%*H@H>h&!B{uH1)W=~q+VklI_Ys}h;@43Y1^yN#*_j2a*
z6n)dNd*=!4d$8vbxaS0JV^o+(v1|k~t6q|TYBy4nX?d2Uf>|GCsD8f3OOr-_X?RsH
z7A4c5DU5~5c*$#7|59&%)!@|n@&YCc2J=tN|BN%3PO+KM7{k@k{~2Rk9u34Qm*bM}
zHNMoLx%8`|G^*m7*x(0>UG$CV`@`faS=;?$W0&6cHgayQB!=?Ro*?LGkHeHg*)SOE
zPZAGXmXX9Vq(__Gq>&P1_`<zP`K-cE|0Q)6Fyz;I$(_mtf{O4CauVsFI$)mNA3aAs
z&Wnmo6++1rtRSfv=pbdIu&%qK&8$&!rCotFeCapiO+NFDS+fZzG;Wk%wnoEvE(e;-
z4m3nVd#<H1pU!3MgmA#YAUSPYOt^_C*4*MYdnHo%cKK7#nK?yI7m?JIqYD$HbP}21
z>4O3QAnQE)=6uaiw**XaU^~+&H?y7K_GWZcT>)lTe-`ryCc^AAf|;)iUE09qUQ(KP
zQ%Hpi(E}~^PgbWLEXj^z>RYO*S*l7bxW!$!LUd!C0AwBcWgO)N?+2Y=V$UIpLj{nj
zH$d`uT$M>;r`Z!Qtt%wQ5}OL|mF=U8RW#6s6$lX0AjS6GXd8{f07PS&tl+XwHRI#X
zF+)8jL5?XJN4J4^k!$F#iBKFCpf%CsO*NWz-o=>p(ppyjRUEh2O?)9o0xI6{L6eHJ
zV7#HRzj;$5N1cDYw{7-mD3WXELtvR*TnX);f_RY!!j=qw4p*57flbr%1A;*u1(wXj
z8VadbH}B-vg3xuILi2ZLpw|of6xq$BBm5?OtWXwh+3bd|4KE`CdD3LF-V@u46rdm|
z3S-_$J|_K0%^0Kn3wX<i4vnN>N#-&hnlQqq6g^)$;-^|VQc9QzXApVRTmlYp)?N75
zHpj8Lw7``lA2xft8{c3h;{`Y8#UE}`;V?LhWT(nV9HPZWQYuI_yq7IP*fqYFe7-3%
zNHqSR4l!fIV-=xyK~R+nFtnbvu3=hyoF>o;8<bR{;2GJ3h$eR)Xc%QtY<Ng<Z1~=6
zD+uM<rj3)O*LMf{1BA)TMwCW4K5=1Sh!;c4yX5jpdXx;gQC&C2{%kBi2E)fS9jKmE
zvB*&^c`3V^C}{FDVIy#i<GUF5&pCDW%z_rUa+Uz3XBmiN>!eTzgYXu|{BUDpoFgKS
zypd^>w$8{}O(je#Y@a;a&B>Yjw&HU%D|U5c){XZ0s74$F3}R56i(LKp9rs7URfLQm
z#`nff&x4~wJS?2d<bhmUYDpBWQ?Y0LHiP4>1KA~zUOnXm`^?)U(;i$q*G0a-GUX1T
z$gK*zA+66<a=UGSg3UF4ib1!fFVnX%%~V3{wxxyEQWjmF5~X+1D@#O6wgEcLeU#je
z<9+BZ6`O@_R_mAr0#?+Tn*cjK1WnEgq6X?ZuD`>?pr-P82qazGKVZs%An<|D4beCG
zq*(E{1g_Oa_-nt&QuZ!$D4jXM8QZ*(!kC@<bh(NhIudz}9LKbE*<EcFAIbyOPi5Nv
zSJL^?ITDg+wXbtEg{O*zbG5wZh)Cnk6`=3karK(n1<I(JgcQ-!kJ>In<^KDKG8b1c
z?JCJ;jGOYcZSvRjQC5Sxe%@sz=>jOa{fCMK-6pM1UW9~<ISFPqgm|onAPI>vG}0%U
zZTkqp`_2?HR{}_l2E90P>ba$lh<;2DH6oIMXkmj!7zJ@~Z@lIfVFDA&DLoTCG3QGj
z8Qax?^m_xGJFGB94`2mn=or!;an3?@k|e6#!|~M9MaE0X=87~^s9u2`nPDV~w5Aio
zAVY>>M;6PWF-zi^tEE*dtzc0`pJtJLGp)o65;DZBDy%p{#`{DElXb>Wnk?*ticXYC
z{R(STa8bw9e80&R-0iwQgf-$01~Tq{q@OQ1zg^Ccs7(8J_M5yulUvzho6fR-F{x$2
zBq`Lf=}EcyLqe?JpGI&+k*MC05g=n{T{0=!;a)FDQAGOtoYS|s(wzd0VPrk`xUXKf
zd?y~uXZy$SHw6y?ygg=cb_Ww}6$E;aeBf**WE$Gi)vM@3!J&!l6TEvaHmh@PeBrvL
zuLM=|-&3iAcVk`HT3Dkof<Il)+j3Afz%PK1b%bLo2-K67wH}8rUJw$hx+EpOY+hjH
ztgq-xKioNPvL1>FfIe(JdGs38t2x3e0+$ra*V?^T!3yquJ(THRtV38dN1_X}ef0e%
z?b=g1M9Pe7NP=sMw>&J1_cYnK)S!5S!=%R^5QS<NO>^LJpg-JFz1V<hz=m&m(IA23
zYap`cwcCyYFugg&c$(jp7R3+!Yl~eFx#&VHT&)EhAvDewz!99ctpU_YlpXj|Yb+UN
zg6APNzJ(&T>{&8w6HZ4~Knei1qH$T2uhH$8XORdhWrCdkiY7AJWTHejrelO-HIo9?
zLyDFO97$$z?aeGAgv&7VoZfp)$0^3Wrbtq+!2&yfKjrL=-;NZ4{jKR?0g@d4Y3Hw2
z*Utu3;xBdNd$OuHFN?Cl7hs(S!4Hv8SkiMZ15^D>q;EOrhGCm8ECszT5o8EWxKMHs
zg;8?W87%a!c-A?{TvIQ%$0xygqHM8$cAm<0cg$%6uR8uXMXTrl5C73=xQ>~+wgldw
zu+laJR%nnCnul(sq@dDg4<ymY#&zkN9-N16Q_*M!mBA?7=@_j$8p|;3OH18nZ5kvu
z(Pf0wal(zLu(q5I>h6E+?gg`jn24BuH#KWG9KNhjTTuJw)o4sja|K^r@-1L`tz*h-
zt<WYW!Oj|-JWy*W%~Re8g`FjZ@iMWuF)~&C_i)%n9d@uf^TczC`(+4xg0i{Pu>G%i
z9VP1)>rUkmwsc-cdclW!+5yAEpeV6kXtnuj8w3^)Y`?0^cSz6{sm(HBug&?tZ~M%J
znj4>H-W!)_)!Du2ht6qZL*y1KMgnAb?~Qr?%3HO^UID}hV}zMJrgU>@W&Yko8CF!?
zqfN2&P4w+Y_L1^~C2LYE)Bd*AWu}_3vB2YRyJVxZH)7K(S+p=FWHpCAvrJM`q=leB
zze1r;QYQf7lr`oYQ?`B+={?L7*ffW!(j6Ke@5*P(?OqT}xFn0yFgd^sq@Ty?`8Sj5
zRemxiSpUS`P7}q}ss*>j){f&nJ%!bGfHp6$cl=&3lfZ+WVhzsy>gNq(3w&6+M2yTO
zxf4q(9nTiP!MEKUFYxc(zpCdirio*L^O~Y!MHMRVZ*}CCcP`=~Jb>E3r2%k&!0LtD
zAIwJ#2HZ4ZyphENteL14*8YQe;o9Kn8vXL5xDt7s;bMx7l^C&E$mua+ycGb%9E4*7
zHeF0`f|mq2sy;($>bn*(3jyk4)9lI<sdDA?(#AfZ;^*=v@gjMUoCxsgAsU>Ji+-sw
z^F&i64D$Pi9I=VP+@|H+I3ghmdT%Nj5DXwK*B<;CpSbpf@&!RiYc-bK3j2X>1K=8o
zdhp`r`a!9&phTNm@P#BB7`{pECjF3sgiSM~_+SJLuA&c*t{I?Tb4)IkSaNvSV}k<n
zlA>n=bUanR?{H4bZ{UwbN>NLFhM;}cYZ3StT`be<BHxDyf5wLac7R0tuou{H028fK
zA4tUWXA%TKr=ZEiokZXoaWj!+z}O8$PaI7*$X^>v`_Mt<qB8>O%>!BfgV{j4Zj5m#
z!9@?WgPUdqtsAO_8k)q|^5v%TS*?{y8X1`&k5%R#^|8Kq%Y8e>S$XJ2pu?L4bD$M3
zdnz4sHY^rWI?>}=AV*kvo6*rxLI%dJ1e41B6>hl6fIJm=EMMFVP@=zZhel(g)N4(w
ztX^(4D2k$v>Pq5Q`~?|;B`3CKf<wg5k9!Aa2yM3f{9oBMaV9C#3ojKEJu4fvy}bZ&
zTK|w|=qmA#V3p16@KGpZIrdx77@5c*<#xT))?(E?S&3k%3T*-<0PY3F78f;90;btX
zg_1yrR%p|5J#ZiCq^t0Q!hQazg`?7jZ{@E7oHTy5$qnU+LbO;am&{W(9>nrtJ18vW
zM<`GVdd|;~&(3MZ8__Kcl6wp@2mLCrpIgJ8Y6;X$S1_e^01Pj51Y+c4T{hckobIe<
znlAB0D_n9@+q%8GG@7(2ENf+r{Rj-mZSBqA>Ijen#PN(MY}-}ILX27~3vrGaDKT`#
zl(sywbB`3=HL(;_Mg|h(o9U)uYA_(@N@Ix5Gi1>1B@$Jg%SGn1a7ikO#oKPZElraI
z722UoGmIk=x%a6`1f3vnz*8-bIhoP4o(L;6dH?V&-x9opn#Us@v!Negs8)sNW?cJU
zD+YrgK4rIRe@&z4G?1VEsyyBsEzgX@A~RH)rbjsVXH4r5ReZF4yJ9Pl6G8yWHR>+B
zu)`5Fv@$Fr+pFB@H3uYC^&OL7DDn2IwZj_m$_A^J$A_048LO|1v`5@ZJELXSf~G4G
zb|?cM&TXb~l6FH9Qr&91`}XxS|F8=aWwC_>TJ?Tu8H+`ol=7p~@%fWkx$q1nxms#v
z1u*yPdDB7-)hM0$k8FJa=oq>G>s^=h-1&L!A?@||`lSJ_Zd4>GXfC&gpH!3`_%Uw;
z8|ba^b3NC*txKoUx{{PYbt~Qs&iQfNILZZMS?W1mbfKF2&yn(llV-Wsn9O5+%mVJB
zuTiAz`QQOEiOW?u_55?W0CsPp8&=G3D{JoPL1qfSPL3#hb|`OC8yXRPOO>m&v9ys&
zfOu$y=dKe4trN>d4}Wd}oru&p-J`zks4iR<{=h&-`4+1|z_n^AThkSCr+Dj4jg5nT
z2Et|c`k_s20Rq&9bqfFE+<dRsaj;c5Ry4x(seX8~EsOTkmi5mlXNFy#zAb|3#)=>J
zwFkh*&(2+~w=MO+wPa`lP>9ju%6m#ZX)5ZAo_eAhl><qq*L>F4@qzVJ2q;IEWIT@%
zLwn>V5kg!M=a?Nd=z!h*j&R-}h6&cOkyFsJo^~XMJM;j?61gP~<wzPm<+Hqy?b9qr
z@1Jri0zmPM3u+{H4KIcSWb|@Bu70+?pXLaDA$Uq_ueAz5A%v&Is~1A-lvhNRDIm{g
zQt&?7^+H1_P1Z+uxN?}V{uszk-N~mU#3v&i?V$(xxtJP-j^;5AsJ6f>2p5H2CgOZU
zYxZ!D<Qky*uwjP3FPjFj2;$7p-*x!3m`;XaqZ8%b2*W&TQa>GiC8^GP%kR1@B^&)l
zD-+mFh(L<ItjZsK01Rf$U(WKl4;PvOI4tf!XrvNoW)x2V8?ydAAMDo$`_a`V!>@GI
zF35=+k^Er0p*Ro~gcv;o-`|k_#e%AvU}i9Y%^1w|a-Vbf?;Vf0$>-eiv|9MVIJOvS
zLM9f><{K@Z#<bhJq3|Y3{=iP~pLZclV`)*(PG6rUrR|$$-5!q$k29_~ozM?qZ`#$@
zXz6<FAF0NuXW&etVxyUmnt!A_Al}a>4<};VH>!fd&QtuMvkMEt&u`2e5RJZ24Ux&n
zNKtZc*m$vNr@I7>Ez<7yhbnUR(sD7h!a&qdT0fHWk)P7_I7Pq-ITE})yE8xs3u_gO
z4!c+n<jr7XLH|g7d7wTE)Q*SIyCoki`Tt(811=XE@jx_k6z~yx{587zgd6Rz!wx!H
zgo-`+gQOSZ%HJk6U9mmIe<6~7=>_qSY%H6@ROP>Lr{SaT+|7$_01hlAuHpy3q$soD
zpd3u~M{)7jjU3i2`kz-6t$xXgo~*e9h+O+!SDuJ-SK(QA2?-9Z_!FF+y={vL`_-1s
z8er)5?dFt;3#>pY)%I1R>n@=2<R5%_2Ggf47h7&%uDZ}e@gr*>;27s4*pdv;cJ}v(
zOA(`iKd94$v7Z<Vjmzc5vx$p=6CM-Gp6!N7BY!3`N_hFQq%BkQmjq~dHJi*G#q}57
z0#q<{FE#xgFOy*lbTz8WhP(NnT;ydtRAh7fWf@VXd7hv{4OzN&S4E%1*2&mo-h<$*
zA=--u4Ir-nLR{MgS2cJwHwvzEzW`|aK>F)zbh^*r5FRwP27F-Ou0sBbs&xjwitk9+
zzwZgP?zr1bqIev<OQHVVj+gaWY*2%Ky*wtLvVY)k*CwB$qUNkgeqN&GwzWU!yS8&S
za3Poc^rmff;o`A1@L}uPnl5hL88Ta@MeG3^iM&{@!BCwymYNKPPWb+Dy9%!8R~SHs
z#zj|aqa)g6QnL9~p>Y_xDZ_~tk5u}D3S0P>bmXgITsbJ$mvY8V`MMs}+2%&F3tvqU
zQ)D5?qD-;DHgOiK4u22<?4Tg<9rxp?wuU}x(9B3_&B27cAaxmXV=A%6$w2Kj_QP{R
zPs;n7j;Cu%A8^3kVmS#qnEl>Z3@z|`Vf}Rng2^J1tQ_as8RhIG8Hhx?1(~EV!bVXZ
zdq45TB>JN8Que7eCJg7cTEw|i$H+pV21j7JYRWgF0yYKNGiB5pa>9UloWc8kuCcqj
zTt>n6S>9I~SJ--z?nd1oCbAGwkB!P*(nKW?qhxG8m(rG`g&Lo*#`dp!imxLcjtS8l
zo8`nTHvw}PJA^TXPj%PD8zh0m324Q&gimz~+kY1<Xf^hcGl`=tts~WVtaft07|Z8t
z0I!|8ce-&KXM?5M5LMPFYEwTHv7mMgpG>+Vr0Kj^>J(3L((V$#vwgJjKMqDb4(^8f
z5Y&72uViKrYGYQ9j->vFEWJ@;4PjO^yHb-#RLTeAJ7Apd`I^aO#Nq7#?)&$U{fFT5
z3jVwK<Ccww<}naJr5VaD#mNIN*7;0rQ}9*mEPczRRG^Sy{s7LmpzYze&ldf=m~4u#
zbV#fM6{~;8Z#wk0Wu&MZcHE+6{ETT<f(y#m$z(lwhT(HcePOF<`4J75$xXc_vvT8$
zW@2k(a*3uwh<YPXn;_?_e^rB83#S3ka19seKYMB0<#$SlYq(~qez!MNZ`14B5n)ns
zQ2zTosq_=N;o5m=cc?mRE@=DSV=d8M`Ud^B%+^D9i#yw$6gyVKwkV+eb1;D$v|r#K
zd;r*d2+}*R{s9Q}$ov-P<GSjGG&ib*V}UqfNVgifgrg;9D)n&87m6n$%X_Ieso)&>
zzYsrh-GT!jWxp*`NOIm8oe<|s%5t0UX&~tjvk?}<yw8|Dt|2c6;HVPwpgr}#+xXnm
zC8C8XPIYiyI38WW44cLVn=Gt$RNOZS>=7p>*cs53h1VWDxr)I8s=?}*dkF!lSKt#5
z$Lx|zUtRm;Hz>SqWPJ<B_!O!?z)*3Uhx7SQK*SST5xC-hh0r#IfC&ji+NS}hXu5Z7
z+iO36-zIYC{&jsFokTv=#QJo*bC@KYt}X1I9(|lWRk(8LFbaGfwCwymyq5ixd;d+I
zESc%{-|+=aD+|s5g^x?^aqjl?cr3pP|B-L(i>z^cK0mrhb&t5KNbTV+DoW9)C)cfW
zkUfs0!dy4;-dBPH8}$iSv-`f|`|)`w|I+*a8=r42Qs*U90RZ??0RNA4WEOVT|E1~q
z()-PGW4Y;OXI=@vaep0>#OM#kNP1S|lUu?fnd`=eoXV5IDzZW%2vi&<CYPOy?k?}z
zS5?#Vu&{iy(#r+Mi?XB+`szSNNf*G*$Easx)wq~Mw`ZZM+OlSH<iOwM1w(JG<J5=f
zqxELr{dHOMt}LnxH>)PkyM3+;4~<WiBCLywD^uO1rLw0bLxV4IB+3ghm9l$DlakPv
z+IcsRa@FMV$}38xq9zNP`Z%#=;C7CAU@<s3nhUw1WzFH1<?>ba4M~IaDejs|jc)mr
zc8MiVqa!LRnv@F>+!{p_os&$Cnkuz9tHQf+$^@CHK8BDQyE?>b3;dd=t%j1F@7sMX
zry9y;64Z%%OQqv6*F>~5UCp~c3&)vL?eC9s1s4|=3qat?OZ$!Fba-P~VwkB5Z>DYR
z#)COtet6UmBaA!Ni{p~ERW+(>RZpGjo5M8`R2L2IU9^#OW-TRW+`7~#t@33vRT^^y
zjH>ETHL~gc6NDQ;cb%A85Br)rWscS+8}0^a2Cv5M$Tf_Jp?E)!pGP-74@)m}lda?9
z$RWmW=kq|x)hFf3%QWKEW7$SMdca9*%^=Jq%cID+)RYy95#b#C6FC?~Viq19+sLVR
z^`6e}ec<82-vF2hQeR4P#)(5wMP7eqD`gB204S#pe&xFhhXJa7)l#TU8XDA1Ajv2a
z!^NFEP5-9Uu@4ZD2RREW+>_~0@4z25ZR}+4SDobUnVVQ0Jjz&&sQ7}TiigU_1#Co^
zhbx6OM%3TX(Uyiio7YQ&pORLBYg4EXhg^-aKSv(S<VJ9E0a_v^%5{$^>DYG9_m}(M
zD`fr+M=mTVU06;2X=N@|CR_DM(X*AR;$7lK6-V_@97b2MS-HsHoE@w=z7xaD#mrJ@
znyP)>M-?AVMQP4HsfYquYTz4YG{b*#@`c7U1e+&D3_AZ@NDL(&Q{66FZ7+3HY(=W<
zO8~8{6W25zZ&#*L2_WlywexxH0=-P<`BYxWtB<iLG2-@L#<Qy?C>>FiW=<bkIwrc1
z`|UQ%7+o~}c<Iq{5PSq-sVa(4Ly-yY)1bLmlk9D(RdvnZ1DK>|w}coq1Zw)VQlpZm
zuhvi3kD2!ZE;lP5r&9~SSXCHeBI)#JX~=b<V&o9K&Dhi*5#6G1)0?lq%coqopVJK?
z^k{lt8rCdRR#DMDUS*IiH>?8<w8hXt%tfep0S72#xXMgqnNY`&SX}Uk0c6>$3b`eg
zr^;=hFd7{rnIurkN3^EzN}G~J70H4KSR$3xi#7nhceWjBz=)C=!c5RFdt;>4Gf1}V
zSPfh5Qcnz_8EvJS^7jIb?2y5Ta@O^8Dp_U&-9RcOy1N`H`5tP((`9@%UI;od_FfiI
z0J1=BrmHl=s+tQoglBzIM2OOywP?6_qe)MGj+k7<7L{Rm<QPRX!|)3U8;W%9fcHTH
zO>9-n0r-)$iSbUL@dFG=9%41<pzIuHGd@Xqw`1HauSFH;TuW&(hZi!~lMtwK=}d2^
zx2X&Uf}?2~^(TBDCT7wgm#A;8-&`1j*_(q8iUy3Mh@?tUx`5X1sG7=xf56sKURK-b
zrmr`iYN?pGSFN?^rH-h3n&d<Zbg&&#6ZyxWAOM>X79@OCPQC`lPnfWQgl47u;PnU4
zZ@)KGt;U@~8nJh1ah0v-`^hY)ZPE?JEX^hwQP+HMMpzzzxJ(69Z0P$2>onjg(;Z6A
z&^u+1PH&hbEji)l)oU`7KdYB3g*uNhg`ifh>f|r@;4S(o%w?lZyf`}W*nTM>I-SaJ
zb)MCqs6(bo`e^A+tzPt+!4Py5#4aNn0@feQN*#64q#(3#P2?5Tw&2Py7bu9ZJ$gok
zQ$=B~C>8h&ey$Ub1mNYX3{{uQST1vnzmX;a?p5xPq@)eijaVQ%ViSfc)cpS3IDnH+
zgt8`_V*-`sP#NACn9xr7Ajm?OpsvBtI$0*?O`6#a3%29~_bz~woHGnp`^kn+Mo2AD
z65p)Gf#q3`U{=dgz4W%MP%eTBf6#qFxzLbInf93h>sy0Ht&b<x8Tz$O8nlS)3(GEf
znbZ?+pv;@h=c#4ckkgST;h_)1%#eBlR6@Q74j8DSaU-orypOPYGgZ#k)W~op{@UQx
z81VIV(9Sl1Qh@8P($=r<t3qi4vRcLbnAN#2*Zb}mjP`rtrp_v(`&n|Bs*JN)=K_jt
z0GS_y9oiucY5soD)NM7CD_?|Xe?IicX45=C&y4&5;KoI9d)4<eGYZjaH+4c>g}Xq3
zQV{UH#PwGoS^C)<{`q`4kKo|j<Vvhu7HFOSp)jk%xu|svatXsMc+Ri@)a~2Y*A!EF
zi|R5$QjF8P34xW%fuvD`h8qliHos`E8*6RJ6_2L<#Ddf?7X<6FBp=NO?e>0Wp`K-_
zsyB2l2jT^9Z;Gc6-s+*ZvMyVgP?`vr6$(<48fNH{K`Zx6+O$nd`?piYkYH~2=`J}B
ziEX-(90tAUqo8e@jIINURrsTdNZTX_oJ)9ANR=<ToKL<iiY@JRncZ$9LYk03MSMRf
zueb)<VrrQ<{Uit=g)12XYMJfrJdJ$J4R9vGm2`*u#vN;_-Y73200vws(K1QpP5_w~
zHEE+(n4#4wBp8$*|4a5;Qv+5%WscXRA@^WtZ$ql)A!D^k4YM|DG!u=dY=z|NY#UlI
zoB5|fW-R&fcsux}vg`&66p(}sgE$jW34!iW#jnJAAr8A=G%v9bnONAmmxgqBFY8U+
z#kB<vTm!fOe#51f<YeD2+SmH3838urRZFZyYxV1_fI5aZ6b~N;Dq1gqMuO5pWa^fh
zB#+>TS}O>uYI8cqXh9MQ)aqZd#cyQ&b-69CTQc5BZX}VamV)%J_IA8dH|-{Uvx30Z
zFHWwgh7z;gAb946keNA`J8uyL5G%edkT+g)A-e_vC9zyNp{c2i6)DfSK;fpH@_ZG`
z2faLEH|N*ky=uO5RTW>OOdU{b@hn(hA0d+NY8f!jRN)h90raLNz~MZR$Qrr2Ue}cO
z>grFP2=i4r?)SK^KXpvyy|Y$|G4>cpQ=f)SDg>*3%XMoa5(q3bs>S)kj#Z)%Q=xWT
zL^BiGOl~tu@U$P~98lcOI1?<sRibP<PT5Tf$Vi{Rys0X3CQE+%R9~O9l&fP0V&5R^
z%vT^V+7Fk#gi_D@H`WCoDOhzh)^rlC5ZWDeE+Fog4)crt{;n+Z*&H>Hm?kRJFY2Zm
zD5i@Liq{ZAnyrNB;x9S@0$}yIJ?xCIj(l%b$s+35Jdzf){@J`@KWg+57^_UmK8m_(
zvy>qk^ra}{E^3|y-@k&cN>`M0#GDNT;z8?9d6y3Da+z@Rm3P-BrkHaole+3Kx)|^M
zR=kF_px$&5xzl*7oYuaPoPXS>M8*!57<#%1o8c9HN!ej(CM8|>;ahhUgNoMD$FV5f
zi@d6WA0aeVs|Ya(h=i>G2Lt+~bknw^dsgDxZ=fT|mQS2Yh-|v%yz;jdT>?YNy+f)(
zR<{<fLbPSN**sF&_Cwa#4=5ic5fxFp>gB{Y{&R)oaA!B@F#(F}5y+O(Mf@Pd#?m!Q
zHIfl9x@YUbrBSQE;<}wd$n>5Xo#9nX(jfR@T`c!dl1=<$Z#3%e_35ej$XCz^0=C7;
zY5fsXHI%?Mc7Uwrh3q_%PYd>nLc@-e8o<`C6rqf9N+1IfIKYaiuZqcMpSu00+9%Ip
zRdw1|NBXD`eaRA%qbf@Kf<b%d8i2u}dJIdX@`^_ZVe;(TL4Ht`{?blU(CH%;Qj`?^
ze}}Qf6a)e-C9+^KE>PT>%w_tj8B~#f5I_E+UMo)`tO-?Fc~vFv`;ikk=tdyFCbLTU
z|3!U00Ruz2vBu1@0xqOU!u$6IdmX%|VSMnDEn!pXbwZu1mFJBr!aQ{%$m!<_$9*yh
z<uC&`Etpf1{ipG?SiL_h*ephdsigImv{QKEkOQ_d7pa$7R6z~_X9`axJQUH01k<Km
z8s`PLYNPt&{IZ!x(hb27FW^S&VkpwC$p+ZpDO)>%6xl@ejN!6YE?4MMDweKg)F6(v
z;!+(-HOq2F5CRMJjRT*Xg^R?Ov+0|?CwUW1%g4am#!{^ilDIH|;E_2L{Oj`t&w#e1
ztlia>XN6L^fQ(BkkFH<P#0OHoM^$@NB(B~<&7OUjI)h#*3fE?*zB36+{p;S5%j?=A
zE{`t!rCdEbttXQ_pFsm(o)7C{aq~nznq-ZPl`(0!R-oLfH=2mdrwV=R_r$vPjl&zq
zcdG6q5RIk?AcB$Elc1`@GZw9ZYAYz0t2#$rj|E2(NUAGjOuRsraZj$%KQVNaeJ9V2
zTG_2ssZ54tGIFh_kD~ZUj`r&d@>?oW1iS+5Pz-1`t~Gsq;0&phWXFZ`13JhqVU$Z9
zT8x%#!HRE<0Qy_ctI{oejaie_I}QZO8_jW-$E>^h&yKPwO`_8jauJ1uFqt@lVe-{R
zWa%JXIUeG*{hB3G%8|>49449$ilT&|nNW0rMZ{1Lh|<jlE$N>0jc{kPo?Q>E!7yH-
z4+3EvC>*w#*thH|2w~BkXb32@3a&2U03WASX*U8!Unt5W`L+8Pf?16Q)hLF-&5@2E
zaYoFF17y=Uq4J-8eBoS@i_=@sf^B96m5Z(T@xR>ay(5yrs-cRFi`Nvdn8j9biF#k`
zOq7j@H`rhQJFR<t>XO4V*Q}ORCSG`rcwiQyS3f}I1nbPnO1s!G{nLKhq7_6$#WS%4
z7e+c{wJdpUfn?pwPEMgoX;8I%6d+n@sS}alCru%X*ojZcdZBu_^L7(+3RNA&)&S#a
z^cCv~lr@~^PkHTFk{yer7)fOrldL28Wd{5hno%^Ez`ZTR9pb&i0~}6_rDRLiY<!Jw
zj#MYn!;}p~L)hlHN9w%U)Tgp_Do!#=OmRw7CCsJ(<R2Z%7w_NWmS063qMe(PSZ^*E
zTv~IU(sJl60%Y|v4f0N$B{+-@JJC*!!@|@?fY>zto<W9h+HAzeG%kKAK0l2u1`b1P
zjO-r8A^wt1si%52&L>mJWRiOsi_SK-&9-YkNI$e)$Jn_wP~XyFLfZ;(u!#5y=HAdm
zkZV~hDnJz83Vu1Ns&e<9YoR_E2+yU#hNwm;H%Fz`u@LSpW1kru$R1z2oqh#BaKI~x
zlr}g(%sV8*X|-p0-p<}XNSC5KYKr2+q=kYsOU}n~4pn5@3}%NzF|=i(^-%UA0|12{
z;msvlmdcoj&V@w-1O=CMPbn#2LXM^GViQtcAj~3U`r<yq2n^t#l=<4rKmqihLd+&0
zV{Hq4VQvoGWjASSi+lf0&&W_y7)cjey?DV{fw*Fc-BwPg0$}+%w1nUCP8tHAOG-TZ
z$r5)@kbwZSx9kkk74jp89F_LLgT9Rz>re_&k=GJzv{rYjGzVJoX`ZSm1&uk_Tm!e^
zM~6d^@~F5RV9p_KWgNvR=LYS0q633YNwgku0n;u@x^YrM{65j)Zu>{G@Z=mM{p%sU
zf-&|RJ6Q3>cu>%xU?>w~<Q2bCE+6S;nJ8U6$d&1<`j`Vz_QidCc3j|$JoK&N^Z_uu
zbf=;-GT>>p(gj;3MCB37BxzltxH2r1JynTPtX2e@trO^10=Y=eXc|Tpu%ciz@VW3*
z*f5BZ#1SOzGAa`VNG5V#P^|iSAZ@j?&hVz?0E<ZVA(8}nP(FaDHH#G`$_06Ed_c`J
zNxnJZl}lH5pB(fcwsmisZdrz+40@fF#gs)MMIX@+7|=2Uo|)PR$TDNM@FKX>5SVcb
zYV7fDgodCE6$n^X0j=`%t94EgOsX&u#rG*lMhr_UoW8@x94xv<Wm3G3DVN+HNaA+Z
zY)j0Qj0yNIR6dHx4KW=4S4O?Z{B+S?c%eP^LjR!BBB99!r?K&Yz~A~jBfPfw@@u9s
zNAUrQD9d?!0;?h%<jj?*Fg1k%fwFluk&ceu+sJjIMM;DXc102$nuqh`I;{+FBVLW_
z786#>L@_or=kMrD;=qTjtjh%D#@%8>_e7YcsWc<WF`|mABN9i3WC?Iu9ppu|z9#5P
z(lMB)Q|jh)&qWxjD2>p8RA8dP8Fg!my1)W+byVUjr?WI2DT4dfS4G8BlTS$v7c&U0
za7U?dHHlyBXu{-DNvI6-0*dQ_!f=(yDR#L<fqpP)x|!-gnz=}Urbp$B;0|RKc5PVA
zvdE<;+pqP{9(LjEv7UO52&8ZyLvkm(ql-^sCDlc!8FGDQLw&hMa03v}Pr?RVVKdQl
zn$qe;`{PQ|(nw&)qOeXeKsA)Xyz1j7Uz1OgE?k{|hidor{4StNyQ{gUp=*7O5}<;h
z!Zg(scpl~b_!2526>mJd5)_+MBXS3OySY<<Yk@8djy$5LqRSwm4Hc~NdLGqVu}>Ur
z`N;Upy9C*j3rbI_;8|O;OH^_!mlWF*vW`sNZsY~U)0{We6z8y?<cq}D>(m6AGVlg|
z;~pvIKy)lDT&(rQ*v#_%T;Re%10Ub}L(UA|zpvn*pTq*O*s20*x*TkdSh$r9%kSL@
zGd^yd*chMwDK;V}2hVr#9|b83Z5lB+JiL^1yNxVaXFE~?+w5wzf{|4*LD>rk!j`84
zp>yy?pO=r+gSnG;h(9<z?r$*HJRHM#X^waebfwa_yQdX+z7L^HA70!MDlUl9f||}=
zK`^hi`{5+OG1qfH*;?mz%cGe=Ad}wBRcAwlvWxqDVTPTlmOFt_xY)QV&x!F7b^x;q
zN4t#iQfR4V+McbGuZVMGIw#IB+k5T%7c%v^=~jYYx+k0V2s@H&$~~w)*5^(3a*WD3
z3PsM1G_bK3gGYOFLn0V_Z9h|ZIefJvtBx?eaOCmDhl|cEbL6@G1)s~M<EAFZyP*Ez
z`wlTtnT;bHzz5nGC#_fh*S-95aL^mTU0eRb{J3Y$3>s+G*`vFSQkl$v+bVLmp=9KB
zi(ejt2<a=L_eQs+V2ipw>5SYZU?()T;m;-<*=%aX=5#ueyXkZ^Kx%~qj_ypgX9`f=
zm~@*%B6#Nm1D2WUXvpN+abn)Lv+rY?+nQo;MjWu7aeWmv%FnyxzWrUYa2A7Kru_=M
zyyJMh&D-jB;+rerQ*`Wa?g5>FrTuICOI5**BMu9FeSHES_;rZ@=If1_^tA{yZVEYQ
zybk6STOBSY*C)G1zuYv{O5+~g#ECZJBt9@}J*zOjgua<Vm#UBmG}~1C)y{Es+ez&u
zmys;V8Y^6$`MdQ|AnrkybU%dKzfkBW7%j*B3KH)U{~m6^FOU7M^EFQ@$XFx!?)ov)
z$y$hlC>zo|jm@z-&c65|$+fK6cd1OtUSp*Y5AO|Hn&-EK?#dYBb-deU!0;MJ0z-|)
z*Q!ypkz3l8GhI~#AiunbOCP`o2IsKHMs@^Z-5KVm9A&1h^$$x+hfNx_pt%oXG?t^J
zE}N>QcW@NcQ$b?N8$PqR*y_4aj1UN)UE45Yr9*AO(5X4LTZ&6_n2}$Wn?y|<csNgz
zddT$<F8Eb>{}k1FmT;ABRy!lWCjB~ro3}qm2Rd8CY>-dBpMTiNR_#<h0wVGq)sx|w
zp#IXZ>!raO=pbu@Jr|K#ev-jg`t~qVSx=A^4mZ~$a3Y3KGJR+vOzy7GmM5|T$w)8~
z6_Sg`vVhMR&3LH~y`uMVX)HKL%Ho{n#)d;ok|!ZRgp7~lY{mkK4%PKk;r29pI^Dg@
z$GWKgdO07>PJta>4j+Dv;^J)Tp{jx1cXB>V8)!7iRv85HJais}n-@|MQMl#BaI|QQ
z=8d@85p*=n7B<B#=#0+cf8j{Y(H?yCe7*ZqgWJPh2U3FFzc8@m-}9`c-B|QU631aB
zhBk70OwaI<;g@?*@N*iNRhOK2npSUQb6Er)nb-2qqROi~gAuFIU5wYG&+9Hiz`<3b
zZdG4S8;i-gLQBh{k*@Grv$kYT*+tX`CKiK*EH?1ug$#qsalSr=8>2dR2%poiul4NG
z`cEcI`v7@xft-uyp<<b@ha{r5G?i}^X~W6qX%W5n-P_`C;Sy-^x9bRUV%l{GiFe3}
zmxzsC2PA$$U7Iy;5fyG})C-CK-JI*^CCCOuaQp*!1z#V(^Tp5kK{Ed)f@pD*Dt>|{
zS=gdSm`zJiMoDW>%ivlxu4bXFc<|5VDDI*d@ueCcX0&MF(93DmqhnE<^O`@@WH@vh
z*<=blQ&TpjePis4RNL{_@0HvGu=p&!{O@KJ+O6L2A5xw~yb$Kb&`SK@x$R&#^G&IZ
zWO|5QIZHJ|^Di6?n~l+wqi7m8YYw9c-r?5zReB!n+!`?HVc4`te#`ZgQUZg%T|j}d
zEYBKq>tG`)c3dqVE4o;bP%-va*AZEI*Z)V@ImYS|v|0PvKHEIowr$(Cakg#Swr$(C
zZJTG?=6Bw2l1V0+WPbGOJC*9B{&do{>h5cOX0Vws*_t-$>odI=z+W2zZCRPH{bSM?
zlJ?D**!VJ;{$jfMH-1Ramz~`lP~Yqykd{FbfGDIPNjrRb*TEgJWy?A=gfkFOGukYv
zDhs`w$nYgLxZ@xG-KWb{2E2Iail52H-y-_T3=tCy#u;#%_r~<O_KNsBi3cORRcZAe
zyl)o~S{%$@&kU0IPs<%skw@k)+3>^}1Tw19VX;V<OJq#<Rz_B&^@GCBL9qdY&{(df
z)~(jas^2*91RYXKr?NVW`Z&<q+s!V=mJ89=-8DikUzh`}OaOI1Ae&4eSBKtwy~w_5
z9-5w7j??SK-4r~R&VKViqe1)yvjt0J8KKhLxIeu*lj=}fel66+#?g0p@S8v;YDk#X
zH|`@jhD}(bYYHRVGFnFW9rfL6iREAz=4o2UeI&qcftrUcO``Blv%_ybat!jL5C68(
zNxR*zDclq~K2#z`&*@K8CDDV!jEW#O&7;gW29lN9_4DE7_Dw3qr=Oe@4O;iju)E|s
zL?iYFN}<rI+4A-VjrlSS`o3HC$rlzq**b=&4rehVuZy_;J1!-uNR2f(Ntfd!iYvV{
zC9;j?Cah0JO6`lNQYoZ4I|*bCxS>L2Bu})LAnExuOItciS-2Jig(plFi7_IfZ&{De
zpVqc=rR$9&Qy6QF!Ria5(gET5GMY!w;0O=kZY4x9y$qT=W}mr=QO8N!#9^Kc7#l{v
zkh>*DGWqe{+_>=38=M0RPJ0W<-=|}!e^bY7uN4pl4KD2W7CJS#N*T4<Ej4>mquK7K
zzt|jEg@OoK?VsN2xbayx4xcp+yTiA%fmmVSqr_q@so-Q)wN^U6Tf~1=r=S2!v-;;n
zxgI8XcNx-LA{&S+l72Kr;mm8XqjnRGnr&%<V>WduNOcEca~Z)xPzPID>2Edo8?173
z&`feMfCH__Hx#szKgFTIiO=q_ud<~Gv7h9$icH-^rg06)?hnS$c7Qb1!O|pzpvp>(
zC{EAm815~N<jJLC0=zR8`bW8J^Ylf?)Hg2ZQv1dC%HuCZz_5eIE?pG!h+G?~mCo$M
zh`hjg%UA|*Tvbc+4uqT?V{<0V$I4cFUh`e(A$xh97$|<`Yt_V`f21FaJQ})MANNjo
zhW`R(%T`A|1=7*s@|M`k)eXqm;%eDSZ*$;XI6NkHpnErI)SPXhNi(}b@#^qS<Z|Ej
z>{ZN^60ZnfdUkPjBbRU99<kJ{82oPKG<Mi)pjj0m(Q_v^qxD4;fYNey1*{&{9)NZG
zP1@p|*HuwEX#tuG7L9&N2!gX}#?aUf?h`yw&_Oi9J#m($bC2bPUE^kddE!6LHTZD0
z!Be{&9<aS!d&8LXaLYsUSNr-fDo}<kP!{**JCfkgEg~zmGJdc(#K!EG)0a%2U|q&<
z$t$YII=haXF9nU1uvrnpSwsqVZvVW$1tNzk#}?Rj3_3UQW(;kRY5zS8KtDv=Z9*Fa
zC@r`a743SitcP8*n<%sBoeCg(iw*dcAlvK$#d?0HMY^QW3a+Fh38h^g0<MZ@IhjF=
zdo0a5g_In5_tPFAWtOW-Dx&g4V4!`0z=i^P;32zMA+-tol@jrPBONhCPs$0wJj~!t
zfTEHM{-v#O?^I?|e2$ba86PCKjN&6gUD6-Z=qLMTkdEW99>50Nnuu{|h4L#-q2S*v
zQZ>szLaZIiSYwx)XwL5!F~sVrYC{!+W=$|8X*)CvNNdG}dM&Is`q(9$$ew9#;A+NZ
zBIC%66lR^d`R4!GqTb$^yeDERaJCsL^~|8B*$}I4U{m$aRl27-Y?1J_2u%lvN|!sl
z#3GB=^U0&ijkdC2y-O&bG~i#)LQ1h|w5a5rL5GB(-)i|LbbLG@SuW#Ee^g@w7%mm)
ziWC*Y3q#O+nEaW%5u!oB<FV%y1H!TM`P`nY)%E$vbNW$qpb+y5)ZSvVc_maxeLDvh
zSQwrrJ{rOIHnZJ{J#IVFz3>Jyhe~iwU%{roEzNcMD_@!(tQR4V*BsGyDU*Q-jhCmW
zQQY5GQ(PRLW&`!6sPSS}z^iT9FlEzj+VCNqY7{4#E`~#}G;eC^_)h-Y+UvgkQEVkZ
zM~>Z|q{z6VmADrd|ANKdHWJ?=nFY$rwk|VlOs_ZoUU9jds+QuyQYwl1U6aJ1mFu-D
z2lw4|HaEm|wzReNU!OZ<D1nt~8eHJo?a<YL_<JpDNp?&Rdx4Ns+U7^K-CU7{jue|o
z_8AQGnW`m1Zulh(^PAbfg8W}GE^CR9T4kKKVh&?=)}-+dyLa8kW4pIAw`D?Bi8ksC
z6lcTIj%AvTOSKQ&t>-(e2TR@vz0%VivEk8FneJM4vfYtRy9#?d7ZY>OyaLMh1LbPh
zOM~DM+$sq&>r+YoC<Z$z;JZ|Z;KUtf?PRp7nGOQuSsU&MQI)$Y$7$ZEXbneBZbr=)
z_Qu-zGb;{KPP{DxCdaqN`WfQ+*Hcotu_iN#1C4TmT5rA*%GuOQ_v}Tx<<pvIPRMuf
zVm(4naO%v^yV%@h^JkdU=NQZ;R`a+A<MmoJUyrMt4_IO`dvB<jj}>oYATGJ%q;*eb
zHs4uPNAKSG*Ljqe2<*p^dhFrymHl53>!h*lNh)DJ2$zcwoyV`re}@q1vqr4BQ*p7_
z_ZMEq3K~mG%U)oOp7?qL7}bpLnj3wP{@<TtDIqkck%G%a9&AEvys91$DtB5*9;3yY
zsQN+;%ee_3-yc7VUT@N^{ntMl%8(~s4i5J|KL#@wCh^A$w%-fwwyoDcLLbVyjV{M6
zHQ6i8I(k0~-C29hhrKRct1%xN_PSipmX_}u8C@*}tE#UXP`X;*mXn^=?X@(2n~i@2
zvtFkoq~}xP)~4lS`FfRno(GA3J|AZBq+{?tZ|i?<^S^&-<nhf7N7IyYYYj#6dZ{;W
z3Tf?D<o9OOUPOuer)Zts9le~LIkG$=`AX-u6~v+)Vf){220Z!~dpVEqLR--7pk)Pm
zUUi2IL%mMqcJskqdresFuB}+car6}%B5R#Z3@i&gEJaKyjV{Xl+<D{Zrmr}9X*x;z
zzMAOyoU=bEiSd1nzBpS(QMZnm{dsn_w76BuA2|}byjVup$nPJspYG9>fpzCxmiwvq
z=F5^QicN^~?9iaK>{RnM=uTT)CCq18nlsu6wnS@*S6e^&YQIqDYD@m+x22#N82z*$
z@!GO~VYx2JeLZ{FeXtbR{aq>b{Ty@o%;US91>7U!HGbo6{iagH8uYX(U8X#Jb2;J3
zt1MeYN?qndqIam{r2Cy;TPKgmdU9h)>9+iSfqHdAF;A8vk-5)k`^NLERd_*)H!)Re
za9Uk7==okrcGCSR$tzB|y|>WfHA!{R%5%&`W}Ok+zOP}2$uhSuDiM18SR=nZ%Ds0v
zUa0ut(o=EcnAsH4@x24li>c--i=Z$E*()ua<)_DMm0Q|sv3}!@zle#|G?T*QILGPY
zb$0KbTNw51ZX};8_Plxyadfi+WB1bkMRx|gCsb6zZW@!Bwav>t!y77l&t>PFlHh4l
z-KhocL@?)sk;a<AYtWJBaMHY~KAH!|0uZl`N34>=-fbPv<M6WlO_=rlw&TN|O~CHS
z0}7iZgSNOG4GCUT1+m(RT(=F*A>K!;&k`Bn&1_Ehikk7*ifh4-UNFAXeRq_7_q<DZ
zc(c5GOS_HgYN3}&?L8KviPp4IgcI+!x)SESv}x|NF2{3YQ@-yK3bb<9Wl(>{rg^#R
z>B08bDYZXlNcP5xcMW3Yaoe2HJ(9h*n&1#;Q)oveW&?*U&;jKtzOW=y6=2<Z8|(>r
ze4UfmTU>gS4T-f)V-?dXwpOr>3K)E7VTyv_R^PhU|FE}FsGFR>&9>GrM8IGp8e-XW
zkJsUF=|Vjn2b@ZPy!*88thb&O*kvqc*>F5|XGm$nVy^dqN9)Zw2$arxl|96}FMj4f
zE$&Ic28VyhT5x^|y!<peCM=wV;<f79naMpoHAz@zz&#iB>#&7O5p6(lqQBdEJuf^`
zw#LGnfBrM$GWc%<ZQ|(D<G)(Lv~EV7ca2wPpL4F4z@GaP5tXoZ99s;}2R&n4q@&$t
z$7OXAcO2^sS$AD)l-R;<I9AG~mTo*Mgi6o5x6Jn10<K}Q(Xh9EEVr^?QN&Mi&l3we
zjF+p6ce?aNV=aqs&viSWx5I8k3*Y&VZL_JPAy!>wcuQu(-Q5A6?GhQVk69~UWjVvh
zLr0nWHMlm{qE9-w+-ck-OZ@d@Jb9+m`3$`X#GNJ@3-=!26Ynj%U=FPUcX^h2%=7%A
zWM1k!{-b%Upq51-y_l*pVvR1L_fOln$3F$FmjP#R0T>fSz1(LC#dKV-IZxYlMA#P=
z^<^4t@zv*A^Wv=#`?}>f1`2o2)t>ufPDx#8@j%|@zR&ANX!<%CYA&7I+s>zpThSIj
ztYvD^DmU_F7v>!(c9??cS^_d<Trx(nTP!$QkE~9Y8;w29TluL>;<b4tsZE;POGDQf
zgFOu1wzTKV=_C-|S{tp+H^bJPyd;AhPCgqAV@8}ZwNu~hhcjje*NtPHgjm-zAAVv9
zzHz>?H@VK}<{q^b(VA>@1uNafS8_OArmp2)x#2&-pkI*Do_LjXHm6u9=?8XJ%9P(l
zX%nK^NEh;{e{I-5d3ACEadNh42YqEzOU>`Cy7fhTbG`adXG_d$zeqEg9lzylwl4RN
zdx&&@5^SU`TX7n%M=tmGA8%hxo7HhI%^Qm7c3{Zg>8uEU@-*M+E{1XA8a1UpZr47A
zoTK2^3axRQr-X^{dBEbYj%gx(b~&4OW8tPZiGLP1n>XEFV0G|p`#tz}eux9_ZLZo1
zG5uyrd&-1`o5M^$hYi2K$zG`MdV%az=J*&Vey}q*x~zW+F+QCwB7VVLS7tiR*w=aK
z*j4c{r)@Fcaf>zF_xIO-Kj(Gn2n($DVg+rAP)?Wal%Axi5Rcf>7{J1A&=}s8<twiA
zNTSNEsp+kgX>yNy)mZAi9Q9*GJ~i?9AMSj?rf%DRXwh~aKC|h#j9yuHqAcF-R!ytu
z<5g%oyKP;&97FiZz=12W4$RpVHq+-KZcc9nTbyvVh+mh%!^%0lNIPgHcDNTDUWgg)
zPLarvX`OP1fIZ!glI4c^ecd2+`OMO7jgYy9rNFca^%?c){22jxA9xmJYMKZ6N7~;B
zK`9!vecAo|)*H6{u<_w~?#1|~Gkwh*>;@u=ZWB`}c!y>qavyDjL<!H`rfdAeC>BYR
z&ahj_dPgWYnxmXPtDYHGKjAz!W-DPg;q@Yg!F_bi#^^S-U2Aw7*SRxnhEj;v;=Lb~
z%bC9&gXk(00FP^*fplh|b@ljnXf%KJ_dZ|wIT7f0ZIb4NZ&R}kZ`BgXZ*uZF8}Ih@
zp76jq=x%0gt>@{X*ah-znNttW=-Wb+-Pr<SNfX86tEra8^vGR|Xvqe8$U6u<u6^n(
zV{We7MSR$jnd{5G=Uc1|W+*f`ADxbvQUerGirE-OHv2?<eOpsWI-iO#(O?@?pfSH1
z6?8KD1Jfvxs9?e5>zU_3X4ykXA>L`y>mldYjn+kT&TMInn_rP8jc)ok`lz#ihMAO+
zqyx<d;!2hH?h7G>Y{;0fddIJ=l1DVM-r$6AjeSnYaCK%I)}puhRio?sr{G;o$(R6X
z9gIW~Uu*EMn8J=kYH!jH#LY^coOQ0}0m%wONe&Ad;G_)L^%)*YvxXJH^;jMGeEiM$
zA$36p6G;wT>1>gpYObjJscKKA6h5RoeV0oQJbXrP8E^Io5I{FqZ<O)^BdgCwCws0P
zT%PA5vPa}4jz`9cR!C$~m47*Mkng>1Pe5h&;Ot<IZto^NA!vuVGZ>o;_B?3)4n8QK
z6m2uEW?abNe0Wlp*3v^3=M39H0zp1Us2}>7b4ISM^l!>>_ERa2gJUk*XdTTn=D2*|
z4EK#ERBTx3H(^x@5|r7Qz#@rq)g+n7L$Ja@Xa7a5EyWd)u6du+JC|4-$Z&_MMR>6}
zFZ!MBQ<Ay-nZ;Y<Dm(#~bHelsqBPv00y_~HPfL`r8g-$^w`4*<o7z+GIU&(Sx|7UL
z45mkw?pNM#L4%#+mfR}mf(@#bbf1_6bqJM~?PE?8MfL?2z+U6})zuei+$(VcKwL4`
z`k~*U_>#&!^D~CBM(gE`buejkN}*h-cM{yjMXW7qz=upQ>SH9K7a%~%x`SIJmLY|4
zX9Xit8FLdl&bN#2<l<72KXaRCWZISUP9xf}McQLCNc%*`pC$!a0YY7yxePL%h(6nX
zRj&Gja5!pe?r$$^5{{YYj>#|34XH#Esh`$BG07Sho*Q=~=M6lBk*5jec?^M^v%l7O
zW>pb%l96Slgu{sP9{fc+Dx3_;hZm718s&;)n4eCi?si9<^D5MEB5;?TR%~4Ihwd4;
zq+Qih_qUQMvQ;A&*9^Wz4Ve#hw#nj@vE@<XfHdKq{5N&q4Pa*-hFVrA9sxp@J}PZg
z0l);$HN$u+aE0URx4Ur{UN!u<k2~D9VIc~x`p7$}%{~Bhu~%xIVuBp9;{VW~6j~1M
z&_~@d#o$_^m|Oy)S%57_VW1PSZO$Ccy~8Er{V8o!Off}^J?Y02i=Xwa%pH#<W{+}v
z8ID!{D_|5QsQkIXtdDWn{B&?U%qmb>Af@i8Eu6`@BuBjp|DI3|_Ea4vAIhILHY3j6
zMSX>FH1`dGyW|I^Na7HvYjAEjb`}YPf_<BP?}FXGzKLfAmmZhzISxJ=$c^3LbE|wn
zZsIc}Jd-$4{?h&YRsY4PuSUkeNqLGX33?RbaAqrTW8+sAdI`N0e+&@p6Ou6%7xFAb
zK5*pl3_nX3`+=pHK=dEez8uqVzNb>9lIm)SvHRo>-Z6qMelwIlBiLK6z)8DO!dWP*
zC!`cv79sNFcWMX*ajcHBzMVTzD`)N##Y-Y1DDJ!O`1{{mAdB4ozXaDIZe0iz6-W_7
zQe_v$h0Xlx`h>zpGoTv;l)#N(2NCJlknG<On(_B9riNE6D0!ztKER#9FFB&zevue*
zi1lFyG0fH#VnAXE!HJGQsk#Gf+xijaNe@f&h<{zU^-_?M=N|X%uYMJyuO6!V>9fM6
zpCn2I?P5%N{fayV=dHzT|AnJWk5Jp*lgL?47RO~LX@IZGCiw|kF^=Nor_CM>ZsKWC
zKuWR5A<6VPB;9NtfxoJT#Kn$M;|{VyAf$dlrgTR_F~kAw{!AQ{K+Gxy#|;V7!Nbpj
z!x+v6z|V<DJ1K`R#S%tp6kJ1yg4@ehP^V9i*j_OQ*W+T6lny$fO;MZavjT0GJuRvt
z0m6=i2w?&<hzTG!(Fkmi_1}`uItL8S?ehdcj@?LWoNWIR5I>QqVh^@dz6MNphdU%C
z-ob#b*{MgI#o8G#X1D#(;)dY6_DjLX29i!68e`o;C(bzI1|v$IrXNNO+Ij)6A|wT&
zNaZ-}00_BDKa@)a{H?q8Hv{nC^lj!2jF&;)FbKW=#y`+!CvVRHor)wE9RT``IX8#l
z#N0fbDvc1s>CbNi;(~5m0wLePWXj*$hz<n%7*&3VFAd8S|A1gJon6;MGK7lm59E2>
zugry9f;nLP+190p(tl>+Kg0w_;yB}%RSG%Pg2P~nU_}5Lp}~Z(e?Vqr;lTh3^{*S@
z#gi`Cm;Z<TJmuRUkL63raX9MT>n+zL3+?f$^=EY_nRVPc^K6!>H(;JPVkF029HHwn
z8Jo=BMd@y%M!me6rj~gaq=_@5aB-U{A#1`{4*)OTgWtz1%EXzFQkjrrgD`Y=&<)^@
z4RKP^GQ#}0$|NVBH7)LNqtL6_t!~pu#)+(Fo!9*8H4D9lrbcuUi)JW=C(2@wWC%P9
z{s4V}2S+>^b6-1ULVh|IgncAxVzlc0CUwH4-G>`IB0Lg9R~lsJFF&i;4n<_^qYJnJ
zqJvO?@?x*DE5xYcJ<J{<3DI1#4dn0}1Tme!p?9mRdkX8lK;O`61;Z3o(@eS^6g}fF
zGx&V^8Bkg6B@B;q--&AW+ZoXEQ~nbYZ#uu5bnTapP!S+6n0^|8FtW!41LKOf!k4**
zJsslni{Pe%^Q$r(Ky$Yw69D9&2>AftIBZ!au2bTSYjfLznxWe(qXx<c@|KOR8_1=P
z?HG9rQdmJ1fXQe9tMb<-*FfhMR~QaK?zPB`$*SVRgx&G?6fU;r7&17_LAZeNb;W}7
zAX%gnfxp1O2O`J7=;T%?!KOS2x-}@gION%^T|(npHsvF-LaYxKp?As0l#`ggoTF=B
z9Irq_-2w<Qfmg78hEv-2$Zw=Ix7Uxln6XkjWUlj<Lg;Ickob^?U!^eNdB8DHD;$p!
z`#l(%z>&D_!fqt;a<?pqSncpckSV7p7@@LkSfb>Ee}reZfhwbnm%IaYmPLrj`KcAn
zu+*Lg?ij}ret{^as+*ny3!<yR5~M^ksEqlYwf4WTJ)>nvw|R#Q*5Cyag%?2~fwLT8
zN346JyNf33gv9kd;@b#`jGebxl+AsG$Hj=A7UA(Hpc{}4wzXw|#$$S^8M*9xtBy4l
z{M4o4u7?o!2M^x=+i1ZP4~Q0N!ECJU@ZZ2X)v?Waf^`44R8wtZop$^0{6|)dpTRwB
z^Ira^JbnEC0X`@Y@20X^TE3g})0wt|T!n&nJfd8VH)%|L9+)SC9Fl)^R;UuZnh-&n
zgvUbT2lri_j@k4eRy$H(JYa(L-uYHMFkt^f&Ls5#*-Ozi{4SF6^Kb1B+bihmo9K(L
z{X(wpXEB?+-t?qMIXd6imC{>`5ERnf?>~i96{tBFHB^-wEXfJq55yz)%xeMXnTt(A
zIMlPIeC8!V9aVZ^O2I<FuMH0kEjLf!S03ekNtKmYcl^7Obu|Sp=+@iLkZ&PMXRokq
zMEqC8|9%yBqwrbKgRNHTooxR2kk<=oYfDhk15+qtt_1F1i5^}yT+ptp^>&uo)!3@q
zJHNjdq#iyHUCFB%*pq#zU2d(s2nHUvLCF^2%QC$;-;%(np)uq?QEQYMo*|2@kPN^-
zwUwVSeM<k<(8-5+_l459E|yp0?D<)|S^f>@02ahups719%Mvkln;O!8oKI~>Q1dr!
z@22PHeG|{;^~6ebq>A>h=`LU2Z*)BnU@VVY=&1w?cv{o5bPuy#VUF+1{<FYY?q)<3
zLJC|a4w&;HDQ_0v!ZP#=G$@>pRYk!fFY1}eHxTWe5+veLuj(lybDs%F^-X-HFL`+i
zh6#Z4<F*08EFVrERcZ+S9P|)5gr{-MN2o`MoO(g9NQ->)y9JO%V!9yk=cX}_c2aV(
zldF;EB^7YS5(wHeAJSaWw-^Z*L}ncxT_0D4v6e(pyl9<74A?@cGGPT>QOCKK2o{%q
z6%JS}YGblI$zO+Y3KdJfcz8Jg?sa}!oBDaC3`C2|7gU%}$Z(8!7bed@PsK_`PL)lH
zn7ICSoWimh%XCkP2*hqr3Cnk|_M!u+F^=<wx6A~7q(@Nnb$V7jTzLT<E^Kt6&b1BG
zMp*K;+}#=_XUX~P=_A}Xj<*#|Q*@gp_{NE$aUM>{p9KGB;<$qfEd1j+<w{&tZdf=n
z>)1TTX^9WjU*d^X_0w=w^_%*L?qx!mo=1@^X81FE?59HBAJ(7+&2EBRPsb@!wUQw?
z<oVNK{5jW;+*O?|pSb_5|8W4wIiS!FocN3Hm{$#0x3vG&knB#v4T-`g$%lq!c(?X9
z;wqibU8F4ZHsUgs0#hZ2l78?cp78~r@o4XXgG~tCdZWG{0v7K6Ad&q~*c;<BU&0GY
zW2lp=wTCd@{G~n<nTApHUp754(F=nlmfB3N%f`g2hB%ZbP}Myr)61PPGM6i8yxXp&
z3uV~M_x{!^F@CN;qMAUdv+EDb+=O38TrY_?8?#xDiG?9DUsJ9(WUU|L^Rs;?r_-=j
z_5L6!B1dXQ%=b3T?>A9t&Wlo_Dk-FTPseR4G4RLILQ9RPDt13cJ3zw|v9oyTwAht$
z9t$z%I9n&&CDl!USQV8M_a{|N5g*27A34|#8vdl~e<%V6e5YKvHW>OXw0?!yP}*fw
z8a(F|eR90m39+WGdhDpAmpYO}f2@qE5@)+_E*cyz7MXMJF(fEHh3yT{M-%e1=dQ`c
zI*XfRxAt{pIy_r^T~dX(;BzFb-ojD|QZO2;)ciWFIYBoJs7^4NtknEl`MG?xmYztS
z-Qb*?=f{b)?p@};V*|DsxAqi2R<TlVr5lXBcu?I9V%@$*j}ts1`PrB3Sw-YkT&$!r
zoQ*jJb*H~#Jz~;@LW`{O$eS#>(hA72S6NWcg)+xaX(^zl&snj#Lf~)zWNe*hE1_Wi
zsez9zpdTrW&^sM60q)`p8JMy-L4^rMt=-U~N9lq6T4lCfbqQoVX~&BE@ra@2bI&8W
zR=U*Iik0m!AfWGcQW)U~rJh5risU+B!+uzJGsF8D9Jo%|nWsvB9ETmK4=-a#S6}mz
z+(j3Z_=#Be&$j21{l_+Ud5lB$%0)vJFlbEAn^WnseB&dNAXZ3}0i2UP6J4ep-br1@
z=FLrtpV9MqU{G}CQ+l^JLR9pcYszhOz<$*Q$0h*B3=Nz_G`-h_h%@A9J6ffkCCogA
z(Jd8-MOE`#CzRB!r<BzB)G`P642|TJ+!mHlSUocbTbe<cdmTZ3z`GVxTynhW^7%U6
zU)kTb$tm}w`0}#lF3aH-v@pQuPm{YDB(4QZ7Dlsg)U6dLyvY!UhO$=bu@8yDRpQ}w
z`PRM1b6@fct~ItYr1H}}A)F4=dSmaeZ$^X5wG7VYwuaZs@V*{NTsPsdj$HGTVW`5t
z2NXej_iH@@4cWJz1%-my;TVuUv`~-)IigOJG_E~`+$cq=)RA>Gp`(4+E`DpFT%S@9
zRo;JJ4ApF&#9_B`=NGnTFwF{X<{-{1u|KhyaIFX|=2T0-)1-{w5lWPzj+-zTAOp8(
zFsEyh92$6N395$bE+^Mc(dlW;SN0@(MQi2E^=nVRiF><T<&uiXbnM!Y@U<#HcgL(~
zg+qk?$UYo4f@O+v>}puDuZ#5lD#8-cm-5hRzB@zT8e?f2uK{1xSlvV(xaOW{Wm#@#
zShoDynD1jx;l_Yzx(f1WGj45uB(ilTioH}dY=RBFq!F8cg~FrxsG`#!rs$20^j3Wy
zG|si&N$`HYpD0LLHf8nfSVwl|{)f%A2voMUOnGQ0M|-#XyX?i%Nj}T>amnP|=BrS_
zlyh=>`sOZQqk8bCX932!q$4k#CAC)<=b-NKslBAFEQq?TZs(4u21VKSQ6^FC80%kG
zu^S)xa^bQS$>D>V+p4i&c`}Xf2`;U(60NIK+oQg)>gFZCYUiC%d1y&XJFLvrlDoo3
z&~Y_fln1(LtN8(Q{?TSO@Dsx5!pRoJED^^>x$YI?=!D2Q<7m(HzAe#GzIiu?@G3i-
zZib;0KZM7e(#_3veo8r%hZLKNQ0`26g#o?2k_rq(_BdxmxQj<j%OlBUKVdH>>xye3
z?Wu-S0qylMzQ=2=1C+P7n2kH=7jDwO478rnhrcxm_tk)6x-q1+>tBc8rw3yFzdCae
zo(=x;$mX77PDtmT{YOs!NzPx+*SVRQFD=IwAG?OT{W{tmis=)$riu@Wx7#$i7srN_
ztVaX1_bNWNOGZD=&=4JP`M*PTlK@Um+Rr<BKUUj8Kt_=9iUUB9#6IKp*O;WU_CzdT
zpK?LCj{2Ftc1cAu`FC9FMi`k0NKsCM<b4aMt^#6ceVBKZwZuY7J&>pQV$-<dUdeBT
zloe;2zCbsehLu5##T6M+B#`5z<=<5O&Z(hUqmcNEMnnfmDmkU@@kuJ6pC!zZ6&0Y;
z3h|+WN&Krw3OFr<cei%I)Kcn}ee>#A_nd5Tnj#}geN@ZlTFmz6hJb0LVPS}!nW8di
za2Ff}W8)1#Qz=Cvp+Ruzan<;tBtWYsTqDVT@KC)d_!ki6uyNoy;mhrEk+JR)3{0Lz
z&NySAi)5ubF^9ZghA5o){vla~;!eabaZ?3VR`*e{<P;WYphUI1wyNORMTQCY^(Mc^
zNeyff5`^;w`k2HqKVK3Js^hsq8{z?KDUQ4~BN0KwOMqep%tIMVpJWx3Bc88WLMaEE
zwvWO*tHYe%FEWv8#67L52G-e%p$8jOwt8*AyLUivlp6ny6r+f`1;U9W#goMO;rO&V
zEv5c$uszK&qM4IOx{5QfRXHQ%1G}Y{b_#XsEXbrhl)GZH-$~^}6O7>=HHq^~!P4m2
zSVdWlRvja1)q#cr=G;I^Foxa6gm_)k9<NJb$*~ONP%UY>a2lY7+CmA{(eLEgm}+8a
z^i7pnVk$_080Od_)<2lMH|idVKR|=9f|Z6xZZx>exb-P5wb*PC4vLaygBtim6G_B?
zl2WdBlaNjW1uLnI-WszHEu{gz9?*g=S1DSw_0XiOCo|w*Pl~m(g#8*`j*>+WmZP#M
z8jcMIUx;#Ot#ZU)K*gw_3@Z<Lkul0W1>31iV3g=(S+y^XUNXx)TiFF@_>)DZq6}E5
zE)T-ani?HUmI&4bfs#fsm`pd2r6P=X^h?xmQ)h)&qfV9hMK78Y8KUA>O?5#XMVOap
zA73vl+h#gd*#ZmZN0rDt^8hOTC*CYU5l|_&5g))(Z<;(79(M%`Tabs+fvMdulXP1I
z%$tFNPmmlarddIr%mY!Er@Wz&@Ebg^PCOW}q)iY}c6x2RS-7$yVeKX;H8M~l3+sfX
z<}~hCAYI7#=U)d{UDX63t66IJ5=cmT!YH8;HS1^0LWXL*SZk2VS`gT)|76L`J=9)_
zio%HslyD0t-SOueJC0*HdojMC>q@=__1tFB+;1=h=uOgOsqN7qjV5YXBEN7|=ghJ6
z;3i`G<PyN2D0kA0iP784;;KD{xYvx16iOiRH1nO60w6&n%+~llUfyv{7uFcR0nFfb
z6m<S2dkzy3a656*V%Z4)(p`-~b~?vA{S$klkILMbg0yBZJIF;*S#<@^74%vo0wCgE
z))dJQ43k4n19zy~E>aYG9OInQMb3m1B=rUnh2M&|j}hilIcV5<zEQ>68NX*2S!OR<
zz@@a6M;yleo?6B=vRV4HP^<~83t|szXWI6_5P&Tyl<nd41<C`{tCU{|WrfOxp?1?+
z7ZgeT^o-nz8j!^6sguDeK{8CoD_gAoz*7}^*%PVZuc#B@fDT@$DLZF3^$8|NGO5_4
z|J{~mL7j_K>^+V)Fq0OpbOI(;k+jA6%WESPA1VPNyjVq>BngpPwnXYMhyP$dR0QzU
z#8nefSOE-BH&%r^^ud-8Mn_`0C8j@;9aP+nxvLv-NCD|=+>^^e0Tx0ONTw+O(#2XT
zl27M`nKFtB!~lb-An{F9{n~t#zzT4e3ULuynT*n72ShbOkSr4#XT1$zE!B<u0yF=y
z^`eC@*z{4%r0PfXHUrIQb?jCEXY^n|s$&1SrqEe;{o0}V$O2FN2JSOg^1?6-HZ2OO
zS9#I+<kTqHxYU`HV;+2~Vv8_r(YQQuzSH(oRDFv~B>8<+g7${=jvqr7TQW11->^)Z
zlen^^)RPwHjsqok1L*;!IpHlpOeIGO0)!^@VAf*KO_Gl(;Vx!Y@324`RNpR<RQ4Wo
zEJY(r0u2c;Cw)s^rKzW^B<djO$Dc(GH4atRu`nuAD35L<m&3w%aQCRCnL`S4<3b86
zfdSOUlDg454NGN0@LP%6D?T`CaRN9k-(C^T9F*RCK8&~mNS-p;X^07rtPy5c)0{3}
z=%~O7!%mDzqp)CXiD+#^Biopl^-R$t5@RnZv4VONJg)~)ZnMpN&wBDU<YB5X{b*>&
z;Yx_JxU7gHPECVm8W;lIe&N0@>AP_hlipaeF9&-?I;4`HVup%#6soP9n=+x!oX3(n
za-eL=e`_m@GUWsdzoxlK8#`@XL|ts5{bfv(axkL<nA#mx)qDz2MRnMq*)i<KCe;9S
zSr{rNhxPsDF9o!*6#|Shw`#YR=Xd821YHkFv&T#LBp~47UjbbUF;9MLT5qz?N1$n^
z5WTNT_}D)OM1>QB37oYOq&_nk1_=nU+^YcsmzGb4{jUBn;a~XEhuDTe_WK;hZN^OP
zkQ*lU*9PEpJdA$NQ{S4X<}d94-4JjI6s?Pebh!;HC~E${Z#-C?6#N|j(m-<}w~?^2
zH0X|KJLGFFX>$HrMD7w4$F*T4R`y5mKbkKHYcu?_D}?~tYP(EWbTiNy1QT@cwzodX
zQAKNQdJ|#uF&lso7X$TB$KBX--Vd(0(IM&?1WaEoEtCoza$YH=(=JRd>e$*?EdCCt
z2U`<U19!e@pI{m8wi`919SlFu+3YWCLHHpKMuA&#ztSjCU>?kM_*cmqD-b+ve==+d
zS%gV}Kl<7#t+Qi!_#S2R`fe&?IDkPcpRmYSn*qbA7FsAHC(tbMDIoOCK+)JW2(!mJ
zwcB#QOSF}eVcKDKC~PF~JItV%UklKIt)eGxl0y_z-*i4qJvU;bK}$5=9u%ZMyI2JP
z;m|G$CZ1Kbd6E-=wY>*K4XFdhKf6yu=wPL@E}DU2{woL={0y(a!ffN|CBCwifji7~
zPY5f<UI)w!45q4wOW&=pjsN}2P9m;rP%$|0+(J&cFaW=AkVvd5`V;RH;-7<M5F;=c
zx*+oNRM*d7T`#^pA97=}HWv@=7aZCPbOGjl4yP_W#uwKmkg%DzWT+yL=s9-^8OA05
z6W`CAc6n<~@OQdiNWXz??)}RX1m_a=@qe|Leq8_CRMJ#y`j7SWUsEq?uKw$ZM+nnA
zwgAmoclzm7*TFyuy59?)uAaD4@R<+~hQ|F{(V&g%;s35geWb43R?_}Q!bsgq3Hn_s
z$dk^jB=~Sp#{tw8m8;|68oeZF^x?gC2S}Xgn<RH`?u5g}tS{;r)&BOjPxGe(Vmleq
zh-lp0?Wt(z<U))wwMp<Vp_YHI&BJ{(=3t@UH`j5jPjLx2ve5E}0K!4(Jo5JHyRHwq
z@;zANWG*mIDTIL9_A9}ChB31b`AaW3*=*fB6XFB!qIY#}_~>lWx9P$@MzQ;{(CR}V
z$jJ>K(bvmX9iRTz4?2dwUbqEs*T}AC%HsWG&1e3AKSv_c<Jw+>lTE<F=)}a>$)hY1
z)T9Jk@Z#A(JO%YJT(CR4PFngv!)^(EE-iNEfTFO>zE=l5Tkvn(P};0HxE<~6R4S2j
z4<%X?W0L5@cv{|0M3#usrseYsyu!zHTBV5Nxt%FCq>><7Zv|Ri7ZE<=oqGCVh&G5?
zA}Qv65UFkOgBySFvu{RuUvFG)H+|0<(W`Mtj?28j;)D>EAFTGBUFw<>QxLmb4>jnu
zxtrbL^Nyt_b`D<1*1N8jd^|PTUl@4DLE$G>B)Hfg-1*HhIxn({tvuQ~)3+}*w7<Ro
z7N4A>MBF$$3BE6EWPg7=S>+3C{9T<ytG)xV0Q(RV1$jyQE2!$h+nH89hcVFK#NF%R
z{9NH>*wK)Xf+8mpe)c-66x`~3bsul}axkq;EvrU{T40q#$zr41ea-X3+_zuKvmu2R
zhu~S1?t_Dn#LaEI<zNeeB!&}p=CA7J5Fw!+d4KPbf85@VBz3HHp|o^cx!mMDj|d-`
z<RQ~7zj@vK9Ho))?$__RAa$r8no*HI+@P3LDOu0Aw7ahBrYBCWtEzIoc+E3<c+Wt?
zx0+1bDG4DEzCTvRXrcO74mZ+pEqt`}epYFJEaq}XgT(aCxR&~Tj^MhRaG=J#W?l<F
zx+11B6+SCj|6dk^M6`85rqjDRi@A9RrWX{D`Zu=)Fo`ElNPeWkvRb`FZO1e=izw?o
z=)i)EtrZ#k(VuG7<I9EzK9#a6U(|DW*ts&V=hdgko!~2bXD@V78)8^FHIaD_ob{RC
z{hXLy@3?2;kYnT>*LpTk)PGeu3-tyV7;u;w1i5`Hqn;~bxA6NYL9v7xsk0rel7VeP
z0@qn>mZm@Lur=%KCyR$+HXiOv^J6EDF|@sTeq|GsY;%JgX&zCC9za~3^zFJv%=g65
z3syNawNA8R$SLf0U@<C9RI@X9|I39u3V`pG=d5Xm(oMH0^DPHencPk_ve}nbuEhh@
zvv6^~l6j=|iJ3%1$Q82K+?^8<dHAIRU?WP7Zq{razzq}q&D8Dh9#|0}>!HK8A~C(3
zex9d5?(JS&k&Iz?wL7_<#Verdt+pKA&qc;mmKkE}EV#6F_D1<;_&KV4eDI{0EhS{%
zXmzPM4h;#q#(%Eg4iZ8kRDG(zGzNtu?=otHk+bVj0`tNKTqW*{?aoG|uP4nw?ttyv
zZ^73LU%|=}JW7PZ+)W-H1cW37)pfiugqzz;lUhmOveN%>*5TW~y8Hc2_w(_!sBc|P
zlq-r2)HH45MQP8kPw-HVMZq$k4jX?`HUR`NDwFp3+f&|1x&yq<nOWnoKlu!a4p$%J
zFBzL2QxmMxl4X;CZ6^f|QuCUkY036X?<O7K8^4*s8<LaGWnpb%D@u{A#7TH09qz|3
z!-&jw%C`P&aBN+<r93wX4lr>ZeLtF9jh{XL+}|SEa=`W*#wK)HSW>r`W?{@>xQO(j
zbAGZav`-0IENP*=Ve?>vd5zIBep689ON*(QZDmQ(kSE10VM2*t3J4mrSR>RM2rppA
z2)GuD2cvP<d8cMoWa+affnmVS5uA-BlMZ6B)LPSat_*51Mc|VfRSkW(kl(xH8c1e8
z^V~uP9Q8Ydz8y<Ygx;Uxqk^zFP|T>ZnMtkpVmi5A&Ec~9d7^0|H$a8pbQv45Y(%J#
zwMmXd`k#Gps$%M(m!rqV7oNDMxFuey(S`cdOp3mlH}!M-q&l%RKb+lv+ExnroUg!v
zY$8g#$kZ+O0{Fw#$vxb%?PaebWve~XOo>Ut+aBQTy?!^WsdQkTw9D^?(jAeXf2Q+c
zOYt_I^_fxhS)If^trwfK8rRrDTBj1MMkkx!h)Lz@2w#?!89gid(7eMrA06!3Agz^w
zMUzV8=*ZNYY`$sM5yEdPwP`#m@nX{T4ki|zDrfY&)z7%!3-#KgoIavF{UPkyWY#`f
z%Z<yh>?%z1t<p`7<-R8RfV^=L-a1zT7Yjly-Qy2_X<T~6OEo$~{7NR+;cpJzJCDcX
zJ}ShH)!)8s6&r_5>x?%l;WtVup2j}aImP!qqI;_y{+s0zu@;TXMrgAz$<e_UnqxHK
z9T10nG&5;)o{2}%@%v5ool=|5e9tCD(<>FDv>-md3StieqBzqn3Zvd4sQvJ}UN3z8
zdOaT(i+tW6PaS&$a5V2%mAqAUjpzA0{Y9CkdgzF_)&U#l_dXC?vI)J@*K65VQ4|UU
zf5Ef8>6?-N@};ib1Z-c`3pZvX<0LjZ@@1*2)ow33p4?`=TyD|Dr@78d#Scoky6M|E
zxSCJ5B)ICG@m%7qD+D(;Gp3xob}c&zqs{x&p1F9+(80=$u@A2r<km{eS|+zSd*FJw
zM#6l}6L9?1$FU;jnwznQNUqXOZhVMA_k70&A=bc?<ykv$ve5eoF|7EepW~=I-xfOE
z&Bumt4qBEww#p5AvVnYkg<UoFG5a--lg&cm?IHO9r}&Y{&8_5@RlE#m<eK8b_#qdw
z-~xYJGwzyu?M9aV9{*_jEIN5t(PU(Pp~Sy}xk0(l=X}2|v1seO_qKyA=(uHe8KouV
zS!7|8ysOb#@x*m`wd0#Q-Osf`j5kEO-x;OKC%e43KIy5*vw6wl)5aD3g7zUx$-&c=
zox-H)dPJm=?vMpyVRC+2|M}qPtSUaaREMInMJOd7y+-2su{RC_o-dS0<lm9nVe?j6
zwP}=BloOX&O2o=OzqGI1o#*Lf$%M4!XjOXNs4Y&oIc}}eJ)@w0gC1MD9Yz3tSr`}N
zWjkJii`PB0fp$7nq4xCUKRTY{!*X6O*{!TIBR2g$wt1t9qCqqB4UrT|ZNO~aemQD2
zz;9E3mEZh}ITne~{*7I7G;wd40D_&_JO2h`+BDSz%f+#-ei*KSY~1h$Z`YZ4{z_`z
zZeS4@2@-~PaA=u*cV=u!q`f*2Fso8sE!|qLl25jdvrS36))sE?#C{Jqb2ju!ymOaM
z8rRCov!XaIH_V9Gjsxr~Q!&T;_d47-!RCl9!{%>YHxf~~tXkuJS1ia@iiEe&mdor3
zlz9>bS41tiEPLYJ#$Kv$jh;j5&H`<@r)xV-Z)4t&ZTV=T=l~L@`M$EzmaSM!DeWV;
zPUu&?`^8r6x3BS?xxA4JcE=mhI+f#V>tt{`xRqgMxjo!e2mSU<(Jc;Wh@~<;B<zdU
zqH6=o6&r<?je@UuX?Vz2m@Mx~#a{p3Cg+6epOo>;jg(#6xZY7%hfSm22kZMzrsNCh
zeT1%Fu@A9D2V8=6l#UPTgKdbr9WFSZ_U5fQ^ZD$QE$4vF?k(BKtEQzI<PBNjB_QC!
zd@))f-^-OPpoJYlzUZ3?xmy5J)V0o!<6{0%^*0U<uH<5#3(PS+4=3*@gyys3>O<)6
zr!4H$#dXQk!EtP(sa#Ibzu1D%`~909U#E>5lEe8jw7~q9pZk>*s?w8TcQuTMtn)Hm
z_|@bV_lx^rAN8Jyw%|;UVxrGhk1N#dWe8+(+lS6mE4|FKs$R}}8db3|_G(2MC>s=h
zZ|8F1DFMJK4{<R}XI6U>&PUqRrGKDXL2NN??caxo^g5T$`s=Dhl6U6uOHmx+`k9}{
zH;t}?rOR5RN%`bxj#B+&$Ge#6V|XsPIcOIBj~%Rhuoa!j-RqT~4rDB|ntw*xO&gdT
z7+y$I?&0myKY+rQu5<6`lwRI7RMD1R-We21d2b)S3H9z=7<smt$!<hhnwjY?%*bU(
z3?&9ZnU1cWvLbG+X7Z=vn;=m<=ToE@VMwt=V~0W*RrRAsDTOtFvwFd*!pYY$Ddj}f
zoH3$w%8jgX63g5#L*XKO>-J)O$p3HtTaP<bzRJ`u^Ty>F)Jc^-u}oy66Stoz(*=jw
z*lGOVGqv7SOUJ4XNwM#Muh`@VL*7qyF23{CbiK@Y!K&tr%bfZVMyOP}8q`V;08x4e
zCvxzi<9=bjwaE}t(5yIvr*xIWUE`fr$nz;%zeDC{*z&#;b6kn&cNILU1c>|3pH5WP
z95^MZgKCo8ir^1RiSFh&1$33fkIHc;7N+Fh>(Y8YuM!krw1<Cj-7~+k7u#`X1~eU(
zV+EFQ@{lSoI5dL6=}ZrZD}3#7vD+pSw=LXDei9}Z4M7&1VNLRT`<-ywZi?@_BQ^E4
zD#4zgE&Mr-6Y4efH!Fg-Qx1wW)jN?|RiGIjRugVYP!Aww)VR5@Y2K%bdZ@9g6?8i^
zX-E#NML6f7c=IU==QgnzOA9?nNy#JTa0*tW^OzH)D~6~M8E~4>_*Z5HhOTAX+bg1X
zC7X|bHY%#MD>o`wDxx2g-$eh+;atnVZU;&<pSq-;Bg9HhkA7{-7T;H^P`avAZ0kv>
znHcJfi*-0)Rd=bDUYCrPIGtm%v;@j-E5OQ7F3VVinJwE0^+y=5SgJ5ucE8G0L0OWz
znc}S$I~XB5hgfWWj*m1&*U;m^?#8LDfAh$yPE3PZuW}`qdt9toEm|g5-xH@@>l2Hf
z^*FP*5OVB030tv2XG&AAl0UC9HR~sagJHc1QL{E1EtZpHvZL~u@D6hr-?gtEzz?F|
zc{aT=H?q!{mT_k}u1T*R8TG6lW5LHVv)27p3zX*$KvAU_<BMd&0j>8?J(iOlA@3gK
zgI@E^f>A*MPE4P>3u$Pb6Rg^@`pK|xuIWM4so`yNL*{-zp32(SnqGdYZ3o`YpmM5q
z_rd0d^YJVR(FE$Np+$Kt(2O(^632m38bW!MV}oKFeT1ddIA$0Zn$hT0GSWpwYz5Ag
z!mP`a>bubFV-Thtau%72G^&os1Nn)^Q`Q)U4fu)qXkvXg(*tqnV7P{8eD9awL-*+k
z^trYEK%9#?Wl)7sIJs>9l=c{Ry(Ve(NKe#t`0O&K1K9}4_upc+n?^s{jO{=8x9Hq(
zS--h=_SZ>Qxn7U=Cn7HqQNkP10Zb^fM!6%XS7uI92nsuiho(&yv&WQ2f^u3+;(?5?
zt#?XH(I#8UM%L1h;1ljpTpnL)F&f|RF_`W8_af7`G}Vb}9jpc3r8#)X?=9|XOaZDf
zxlfuG?%K`#9k!^V>&|phU%U{^rKYu!BjiHg7%uC(*?P_En1wF*X6c>oKuy-3YDSf7
z89~@OVoYRtXUr`IQ*Q<p$!vzX>lv@d7t4>E<Ed{f{Mf*|q7MrzN=)MZM+N#`UcMI%
zm&SIT#I#Xi6SAyJp7d@Gq{3YF&7dRMx}G8V-nJeu4hJEVRJK0`_)gQLA)j1v20R-@
zxf-%yf21}IGQ<IGhkN$l;z{hs3+)tsPaJ-CjZ#$PxO|;W2>=`4hvu*51=R1PQKwL{
z!>)R{E9`fT)nhN~)DQ4QURSjN3Dq6>S2v`mI5rSx3&T9D@`7=XP|EQJ=dW}8*K|uY
z2p|f-UV)jGC@7~@@+CBm>88hMdl+@s^N_8$3}&6@mPU1L?OI{q!ky2neB<+&$)3x4
z9eCUUcW!iApHrn}vbJf&P2++Z=^szmenaxXcWC16o5A{q8tJX%@UxFG;SbUn-HhuF
zFRSAOapgbPp=Rv<$IjJ&TQ4#*Zq$8)_9|1pi`*yYUox9zwtu`{a`nDm;02yYUt=9;
zliz;6o-Jr;Qzsv0Yf$-k<}EaMJ?&R!XiX>4Hb9sDs!1V!-af+bem$L`h5o?*PgJc<
z4U-r?BLJXg1q7f3U;}LJjBOkpt!Nl%8EEN^=?op*?VN1s42&J=3>>ZhbGKusv9mM$
zzhJdImadzu4Y|d7{whw_8?YpaON+AG+O`?pnU2|{WU`&xnI<@r1y(lXic*U3WHP=V
z*%$!OUkNQ)Zkt7=<uXd3CiH1&Cg6D<H*%Ny$)pg8_?)+eEL!gpYh9zb!;_W7ZEaI&
zmRw(O+98+6#j`myU#FLsNj!1~zHf_B*;Ngb>=K=q#4zj7pyKP$d{2qZd>5=YKqZU%
z=VIl2hLvU~WYmjsL0#cj`-3T`Ya2I=&#`X9s5`$S52C6S@#c(D1tv}ePMLhUo>DQO
z30b4jCh2br%4b;xTqN4SQ2h<hMW}O(aGjp>KJKCD`*~c5wM*r2dA_eN>%CG&Dna9>
z1DK@(#wnry0OZnAf!2&uXch|t1E)<EqYZ$~F<lOi4*UkO!`hwb8b#KM!tr+d`S>4R
zh{qWD{v=YlAWhe-J+OD(?~GVJH@9k&-uYTKc@3V}`ws$ojsngT9#QYCz#8EcBXvfw
ze6Pq*GpoDgB?X}*pvEFi%Ao1K?>>(ke>mJdNI#0LPJ~i55OnDE=T8>oyj;LOQM=&u
zyLy2s9#nvri2V#tgoM%>mR`aWe@A@=pE%OX)TC&5?b9p-UT51QB6JIbCBOi>@6dce
zCo*bMCfUcs9LZv5`H}gbD=8v)jddfQ0o1#%<B5&PeF?N*=JfC-xM$$>^uxV2tGF6@
z3KAI<TYWNd>kp>BzMp@h{-nK|W0L6*iXejt@p>qXc7`1=Lzk3AQlyKxoB?%6C!{q<
zz)12!(sKHN2!kw)HO$@Ef#zM{r_p|_Omd$D_lpDx<F^#2x*42?_H)@HEsWv!;frL0
zQxnWdtUL^^$5KaiYe=>&Qp<YHB~BaDcNa;30iGT&MbJK`g>C|5yyE!ohal|vfH>(6
zRoDaT7tuH7T!2_)fZa^(Y*0VUAOHS8#=bE~lwj#{Y<uq5wrzXv*tTukwmo-j+qP}n
z-g#fdi{1UT8`0f$PF8kRc0~WkLRP}OIbccyG1H4Mwb&*2$(!wp3eYo5pZA0RE<Jfb
z#)Wu!BY~;|{Oy{zv*r(R$QX@8H9MC`1Lb>N2*k_zhPYC_L?x$>1BnuPiE}VJg&))=
z-ZlUvmP53jhP_3rAT~g!+NFm0gOQjRRi94A+fLytiF?>I)SH}#j|icT1S|rrMEx2J
zN!to8^k;cNZw$7iEEIB@4|wI$^Hj}$!&g>)Uv6hO{*Xb<G0C3>_>xc@6}Y#bJB@A@
zA{(Xzau6ntbQP(fAh7||``)AhAQb!sLFl9SCYgP7)Trx>#PvzeKebhHHZ*Z9>g)9$
zrqMNFus3Y9WpxjYglsWoanin}ObarKe^HQ$l3mq&v8sak0i9waFI4?i2deNP_(=9U
z-&K<YG6vgYEO;k9=<d;4fVOp7OGYTSBVbJVSjrGB1ehJ$brX=p#P*A-8C-j=vlpb-
zmh3~=s_^cVF1B}`3!EtzTkBwM0v%Ql9>5X)j`C5L&0}j|&wmT24Yu_WOLj%!3fTe=
zHqV>g?|Bbl{mP^Pwz)NgB@8DJ5bWVnpaFAoEyv>%nhWC@{(0@gq|p2M@CP@y#|k?Z
zuQzl7-IR=v+XlNsH~i%F_VVZ@`amUPN`>b0^>fYf6=V7}^k(LJ80+ldB{s+40L2T~
z*Y3IHuN9mrpx0;bCq0eAyd$jSJ0}UMlNFSc)ix^RT3V15RFIW}pw}~QigOqvVJ+Ex
zbwcGb@H1em+xy|s#KOo)Y|qE@*qCeYMAqejE}UQwtP-D50JqDa)vm+FFeVM$bGvTW
z``K=3uFg%*JK0y)4zFA9dILU(4HtZdXJr>`*Cd}!)6PHx{KQeC5PbVYtqALEdL*qC
zUO_Yxe~TvoA4aPC+5YYyyMPi2!ByaHR3*%KG<-iBEyuOB3EN!npLvU~$@QO41-M+P
ze@i6F27Eu0%wDI!A}d78-^lwGKTktr3nL?j#R6Bx`!j)8_7e{a4@YU7#S;fA`@Pnl
z*+sjSw~3K7u7-nVBR4xewws1O(9hr%a~5MVPGHl7*0VjHQ=n-kTwy6HSkx>{>${1S
z&x}%)&&&ZGAlU}(zMZ!zo>fKO+x5>LTi0&BKY*cLCuDV?x2!tY6|g06{0r>$>(F%G
zmQ4*qiu^T@>(?%!98MYjp2Z9TG0^RM@^*nS$u{(YlzAA=9WjCI8CMk4>stpkzfJ+4
z@9ZUQ?@@q|bz|r0za=XdCg03HJcsva1>`YK3zvc41Ep3qH|oxEhitlSxurjy;m)L$
zVl%HJ<DMs<uiAJ>HrY1O@oC;;Coc0-1(O`05+xcQ%huE;2a4iXr-qIGuxf3bb1chU
zeR$9L)mzniT7HgbVDu+`fYEi{3G8(kQH`dX0IN2GrSj--J~#7$QKt*zkxqr=f!oX;
z0qe(D_E~+T(EI@VlrHRQ7Y6GS4O1{mqwM9Ou?k_27Cz-d?Quq26GoBg7jF2>TpbT^
zoZhtI%@NweNs<<Gnk~O@SmdPS*p)CNjl_Q=-O%h=2oR-yOqmeD{K-PZxqQaOIRn>&
z&46U=|8XsyV+ZXFd)Un6M}aCC9IX(_JuvjdD?o?{=9~t`0oGWN!N`+?3?v-2X6?<l
zy=B6ruB;=^s0^ApJ%J0Ey(##IXU0DZ%DdVRzPhoE{VwX$MyHsdsOrg;J7axl+71!|
zg+3grZuAIqO(Ty@43A*%jruMOWX4MP17rg~=SmIu<gsBEM^`t5JTE@&+RhGqn84J_
z4&=CdX@N<k6@ij>QCD?{&;d{<(W(C$#YBe*JXCGXcr&X!!1-32|6})ij7^FZ8SM3N
zFZBthju$z>*v6U>6SfnUl*2117f~(S#|q^U1?rI0+3<v^Od&u#c4V5XO@y94|NEcc
zKU9A1h*dbFS0|t4WRyXi%llKK4F2757F7V(b@MzTAl(G=2E4$Xyp__sL8cp{*Kt_f
zG@7-ajG(Le@<U!R>%*Bh=lZw~yc`0f*BqNpB3Gs@cFZUb7_#yo>bm?>k>)8IXf@Fg
zYeMioj>HkJ)IJQ_wd|t5yE}7_9U75`S}V1+yQ9|W=M)<cMy~ln|B%E8rAZRe@OC-;
zdrg&da5Bva*s~V#A9Q2*yzo*!gj1t-9s3$s3JQkYgVajX0Exz|1JL<ct>*}>G^3}a
zJC)3P9N>DE-(5!3L3d^=P!RQdW7Hm{C`J8`v%PTw)Ek3Q1!&S-^T&AiKRly9@Dx5F
zij~cay4f|!l~mP8gYDz1eMYriIID~Rhi$RJQgqdH4ea+%pkT`dL}y`fy6%to=o{ZB
z{ZW!U^Zk%w!bn8`TtUc`VEnMSY?6qnxRU%gOGYf}qxfQ4L-gFl{p;K^QFI%FY6H6@
z(QSP@%iA?fJu|~4;@}`<vp^h}p#f}%pQ8IBwK_53xZx);qCj;r`V_6bIGeR4*v_Q7
z=TzAK49Iujd&9=DI!L!TZjbxDxh<-6byTspBe{9TJ+N}u>>908>#ri1qoz&lo3)B6
z)dU)9aOvrFHtot26`Bnhg3m5r7MzT=KQ^i>g19l2N0o1=o5lU_?j7SZMs?p|%+E{<
ztFcUPu5E9Wu9>CAJi@{PTTK~ib`2L!NVZs#WEoA{PiP74$i18^JbSV;<QxQlW5z*6
z4#oFp>|E1xx#O_T+?WB)i3p@R4uFz!Tit>Ypjjl<@f)F^R1`u*;-Vc=Se27s`m#~R
z+tlDjG_2&3aGIccDDNy;d_pNdd9WF8mSh55zgdDkDmL0mB6R<rqIdMIpuIQoiWwN9
zEP9zczaC@J9i1HcXi~iZLzho{2`=TTmdgM=IIx%m7r100fD3zLkCHEr*t;rMswI5X
zDhfa;)v~qN7OLD9GPpNEy^~;BM^CJ9YKRvTAR+bUs&+EFwYk{w$FaqYV4~P;D{SSg
zHHy{I<-*V`)A3@eTWNVQHm4noixp>l%DZq89~PPIL)Nz2a{JpYyX|X)W$_VKp(>rr
zu_wPH%NBnN%TwUmhoEz#-+(E(WaVeU`hq#REW!*ijhshCi&Za;rIQHaP3s|Wzd_2w
zzVDIBeXv>5X}wJq<X|6Jfdm)pDvnyx#7)|AZO;L*T##$#+31{{oJ_&v@ov85JpB5Z
zLA(dxVxM7nmWaUUE%`Sr0&182vD5A+Jlv3Vtp$ZZ=Z|2#VHknnkDEVimQ$Z-o}(HH
zkvMfK7yix3G6pAo!L>zt%`9wnV#=DMB(8(-SO{y$)#8?^Dx~0`L_0#1&(Iwve>+T8
zqPRI{B_i#IEUd2o%`rBpWEy)hP1z6rnaRY-@aXPK35eC~SZ@dMH3KiHJ!!gL2tnTg
z5e&n%spNnI3L_WUI0N!}U05;A1Jc7s@Wnn|XtmFjjH50j;rQg|767>ojn%!N<UmuE
z&O(sL70E()goIZJN$pS(ZxH&6MLwQflbr9Ll{a>`?k~mr2MDrURBZh=tBSu5AjG04
zmiP8n9q#m+dm#c+*<jNfit;Kkh>b7#HZ!cKl7LL9LO@V;(;uaOcXoPex#;i2$OYsR
znrBCw#|!o68Tuk}d-yg+b^5psv=MhqO-+HpCK>ti+dR4#0n>55F0TdLaOfFw+Nq(X
z-IBnb3}8-|lwYZP=l*;_hopu|#!s^6Q&$RJQ}52XT(9py;?Lkdku2(R4M%XGT%$&i
z4{=JA9_$Q0Sf|UK-Q_33U!*AjxU?Btayk4Yr^oU+a$KMDBfGx!+yuOo@LfhekYqCZ
z;X3lY&*#|8Px82sb~^KRbAe3R62|^2t=YzBqOVgZ#xN_sps?1$0)2yI8P=3Hgy;ac
zS0~;UH<iJiyUH+=7WaE&JGCtgF_to$AZXQ`K!QkXBnpv<IyS=^mH5#fod!J`^r5V;
z&KAl2BB#->s?>MLSS^D$*cle%qtJ;K#c>($wvs0GN@vBv^$73)^?iRMZnlJl>4C2d
zJ0d=$LQ)cy8w;&bbjM-Ff2(&8)3DOzTylzX$T*EZiwC4_-Gj&B$k7H{lTHyAz%V?M
z<*-Dr{-}+lxBRu^&>j7f+W}0HCXSto4MZOkfI-Cm+!!s2iY|73BTBT$rX(PAlEr0N
z2-&#B<)F7%M1fjh&a4-QI?@$Yry%4Dv~k`8t;uDx&%$2Ct+w)~YRA!4f5`<?EeNxJ
z$Q`S3-kU$?2wD3gj%$V^0=m3l;N6DQJmv|}C83iXdc7*d9{StvPDt3)@phqU0S^)L
z6ckBza?tn9n1o)l$0^T(=_+#@JP5u0>#hhsh1`pa4YR`zHy;*`UbUPCjomww2g9c-
zch&<>u`GL%U-I_&##xgBcLQ3pm4*AMeSpF3uV!;k@y({*o7C<g;Rq?+!Yp`|+QQb4
z1gobH>7nkj<n3_w+3d+Fvk*RDO<Yk4&dgl5g2|`(y;)rdnLR|PCmcx;Eo>72m~@$z
zy9p?IIJRrT!KoVjxJ#A|WFLoJvB*;b6(o@<8~n0W@;g&~Mmq@+8ASR*X?B?tVl5~r
zlX4ZAG0-Bw(!O_$72(_Ot<pgwcX7z6O<syCdF9UMII<2ZlwznMZLN2w(OSHlX>~l@
z&JK+IQVDcKT?htRs_Ks52sBGyqA)&%s7F|-y4ui7Hv+i}W33|RXmND3+n-O@OE3JY
zh1z4%-ZYeE9CpvkfB+#vEs5#Q+MTZEn&eghwL_h7P-i*5Y*w5>NXxfIs+u+|c>r{(
zw|q>m;N1M7c2sgJ@rC5bK@U6?9i0O*sGYCixGr)A*s?<20WArYbF6ol!g(^-WIcZX
zYqIvaRzIE3(Yk3*$Y`V-MRhVFRve_B+|={RA_5{dd~BZwt8*^Aj$m%!k2+jGYzMz_
zyTE`nZbcul4B1R?MVr}&QgR+hYbx8)_%~Yr26nQ)O(3Uus8UEh02i%B^zbN0JK{vv
ze>jzM-idjTsS<X>{k27x{?ew0b?IZ?1YIygmp;&@$GP?^H>Hxkj~~`W%9D`-+<8Gm
zEn#bybb8l9<_}mME%GfCf!qT2oe;G_2F8NgeX%ZAXcvr^+AGa)=#2+FRRVrSs4WGK
zf#q-cQyc5&jdME-aH$LoXXVq)0e-m#rq}bwF3e8|XO;l~e94ap1bgj>QP+8`2)zF6
z@hlRgmnj%EJe;d!V0c$v(j4;T!S>7#Rr!5;-?C;w3a>{&aCzC&fnpX|-~Cz`f-&hm
z*|3wAk|fEU{~vvhC055vU7Gs#%bm%5e)wM)i@ybOZsB3rFV{@+yac)Z99OE7CpZSM
zbGPH}Rqz~ndl3ue2Eq3v95~9OTPt8}r<8C25k`fheqM6O(sG&mw9<f?2a%rs{a7VC
z6&buS)`WPGd3&r2H<=47$^L?OG5}KKEayfrG~Zm5iT33EXn|Bjkv}mN%Es~`7@D6i
zwHosSjDrME)w8gOMS1xX9!*}z0GiC$JRLe7C3z{~x)r5Gh1`UcmKG9}V5IWnCI>po
z`5;^qt006aAcA*Ptk5Qpuu=dGnmAf~Cxsrrr}@NS$9f3K#+M2j7JPXvA%ud4BL?6X
zWPuwQF0T)cQCmaWO<F-^qBYRimP-aL0>tdXCx@g>TK}tfZY@l7Q;67k6UZmX=imos
z*F6*0*7t&<82eY%Q)Yo~DF{?gMqL3z5xWsC1zArQl@AlXF}`lBUWR60Md0wr8P3m%
z@T@2*xmVeq6elT36$ckAksSYA)n6Q>BwGM<Ccdg=91b4~i75nI*<Z|@l%>I|1n6Og
zN=stK5o&Q7uiToHN1{$SHj{anhAM-UZ$+ufLN?^F>{c-!zW+ef<(6!!-Ab~<rhy$F
zo2;o7Uzn`vL1;_W@+d;9YJ(Z}S-r`K!lBz{Jov!BUBIED>KJOVSD~I^$-z)|6tq^r
zuHQ^9n?@6XY!bQuUkYP^4%Q@@N|l>Ov6(DKWiZ1^7isAI?OMXje9|`40~O%2=<r>8
zfW6kkb(DA09k(FTw>)j9#wFAsGBs<Zz{IS%2s4Go@?VP0dNj7@WxXpnr1>t%=JAu@
z3$E3kp%dXq@^bpIbNaDxOSRZ6Fnlc0+55u$fJ=Y@<M*}Nr-638V_3UCg929hEZ;^B
zuVvxJ_3x-^t-#H)nS48gCZgrn;{Vc^j26gS%Mu$-L>A`;5t%J3g}-c?i;KTT{Fmab
zfL$Y4ry9Pjui-6EZ(Aue{3=}jDtP`H{a*@yv63`@x%IwgcoaJ3P2R)<&<0x&aFPLP
zPWD-WslrbRY{RcSGHl?B*qQQiGD-7{Zg1Y^JAMBv(E1ewkUyjE8MXP+=KKoye+7b6
z&*%yy&ulFSERbVg{0-WSIPOvL*G*%Zhqm?&)@|dj3a?OJisaTFRLM(+79{i(SSUlX
z>gW{`tCDHOC<<m=#>SPT`BeHT_o8>#NlkSbK{Y|@7GRY9vgKG6WADF8aQWkxNj-HL
zi*h?^AuNuiAkj-kUX_eT2bsy(h1H{i*-wSv?xk9p#j=sI+!LyxxSBSyH*pyC7YWwh
zw^~odfJ!j5Re9WQ&N^e&QsYm3j=%{fN(`;cD7>%E>1{C_Z20D)sA<LdX=zg7Zh($9
z{PR(i^io0$45<l^K*yVYMVQKZDIo?1v?RBnlWl+!O#gbRVTT5_#($jg%@OUF(jgUq
z+myTfWUbKd`5zC|KqeD;)8WE*ZP!^Cg%37Q+$Q9_SPI<6=tR%<u%+U}xD9k@?zrN_
z7<Eim7q47;X07h4B@uKbY2WOF!4iDGlK5;9ee)CE4gS8-F-v_DGHuc^vusfaP#b5i
zkf!?*M;{f%cmLJSkv?r}^eT<3k)wOLo$LM-{CjkwjG_kyu|~>@0QX`1ddYZqK|gt*
zY>>x}ouV)q=!_G>yvmySZu+@HYPLa$I%ezape1c$E3RQX%55u-XFCdLD}Fd>Wi`@x
zS~#D|?fPE!IZz(7%`##~mG3%5<dHnvaSZh(d8+;3&%Hoz_^t0f$yeW`N~82zW&Mfj
z)GaxX%wECr8L6<xdG$$7QmL}1om{IC?5f;vfx4{>S)uHvN^-eEv6rU<8QLN*_&BDl
zQAVs-6`UKJv1C3gMj_dh@tdD%$)dTUK&fJ_I%2-!Z<0?}0gO!{dF`+&MZ~^&Q^99M
zhCJC}Y=UtU=_Tcah0LmQicL1P=TrUVj$jJPgfiscx?+tqSBff50WXxEisB}!o@`E^
zj;GJ-t&p9})`$%Yjit?QRIUs5Ck2?g3yl3mrok>yp;u4C73tPTQmvsV*YwG<=WJF^
zs~zStp7~Jn9u8&P{?~xe@s{avTOXzF$Na9FyPqp<>%UkM3E$LT5pbDUfnxYgLBud4
z4p=S7b;uX3k!qedBvIhdX0>qn$HaZ~4HI9_72_Uf<L8y<Y!ag-R}diosw=B2E6@L3
zdgUm=n$LpAnzTl`l}P8{&~`K4(a9PG5|99I>$SWP8qMo9NZ5By5rc1<Bmi48jR7{#
z@m^VR=#)jrIL@RTfUchcJpIzN=os`B2Pf{<YS6Lc`(1;@;B<BjXMNIZ5$&{a$9Qy;
z1C9TP&?XmNf``+*$M_{&07%BhKETlA8HcKkW^eRdND^Db;+|R9o#*e{5_!K_1eAR;
zd{geUFuf#hjn<XAiJzyK9pXvNlMau}>?dysz$tcz43;k}a^xW{(-w>*2ZPP4!2^}b
zr9G;mOQoS;7N40df+q+S7}+1%w19_Tt2)_ZiY=l<n$_1qh)XDhf*xDM&V(P*R_y^S
ziMW9(WRHyr+TorE)uSaBz}U(HGVUSF%k$Yc?$&{7Oo<~oJ%6MAM1%AY9a&NRhcaOR
znEea|@k4OYzPGlX>}kzya8IMwh#cP@5o?0B^Px`5iD9|Tm6nUP88SlUHhEMU%vt=o
z#2Ed`$wEX-OJuVY3j^?guW4N3vp}9B5Kx#5Cm(?3r`W<558<;)WL#8o>fPA1z^&4N
z7Q)g1XJ*hJtY@Rru=b3QVf=Y^D0?6lNH^}U>4FW4dRkVld;(F31lMc0fk9pdnwwiK
zv!$GHi6L_AGE+fpV=PP(GSZ7oNZ)eOCA#775t}T!^xhHwg0cWg$ne+00VNzlKy4u0
zYWD#$!+S$)sDHk7x%Y31AsOOigEOi>K`-A1Ty^3jPH`iI0X@7|x8wf$yDlT##q{cx
zjG?6UTMU<t!hNOFC(Nag7Wt*mX)4g1-P7#gZLKnKz1~gQO(5rHWW;d=!UFs67CV;V
z3ko!9TIS;@i>Lh74OODf0KqmW%2@xr+mvN`#>oDeOO6358M;EY3L9a{NOutUkk(6M
zN57Vja}Q!!*vtI2B_;`7M@1m7h(yK(Z2%b{oJ4|&q?e+n?x*gnh4|kBX|<rOfrgE{
zqa$I{5GwHSeC0*gf1|X02rwEVE|4L5vy}Bx^dNyM3JSGR`l1=Bz%Hv^Z-!WGG827l
z_9mp~4L8%x#A2bb1%`jAi}xCnLKYPNP)G@&;8@K<$J3?>A}hmGBEbMKO3?$1QuhJi
zH-G^9nJKT5U;qeL7|16%`Qz8Rn<A}tI#QaIB}Z+oLP9y9)oqR1%JRTvdo)VX6NWDr
zY6l=nG~!+%A;&8vb^EK#3y?nJ>HWy!?7d@L$X&p#^kVpEl(vEmA1|~Iv(O*s-~wv_
z8=jrj^|AbhNZ~SR5uqb(Gg#a>D3Gv+Ojb)b5U`8RRA1(m7lP0K7KMc)i@!y7VdzTr
zC4NGo*n0KlZhRs5R<(5h7hA**c_wcpvn0BEWG;9JvjV(uY@_7wgIV}Li040u?LUZ~
zOn63L>D9wr8fczuJ2`#h+3`84g8>p?m1&{(N0W|z$<79lCQ8{1U`&w7)-CI%F(w!@
zE~lCV2Ja{^!PLEi2Y6$yVSNDnqt~^*CFl>mzqb@Q?<RQnLKn$mn8}T%;2k30ZT1~a
zzNqv|FH%J8t^W&5Z15lb1)*QPUGQ#XAGmou8jf6e{96t{2YNvFPY?<`=8kp0t%3%1
zq}?i46^0OWcFaKO^iw6%QQ<5`j@E!*%xyL*ti-^f_8&}aJ}OMiz_I!t3}Z1W{7CQK
z>Lu>PnGznRe=q+S*XlyOP!L3Lcik$=iU)I+k#LO}lvJAw6e`g!<@0Af8J`cZmX%gE
zzcZRK_<^<fGEottvPI$F+;&MGEd_b>D=QSoF;@5)w~IIh0GO>omGHquO{9>edL-gT
zQrBs^9H>8>tKmq;nc^o(z0}>oAnni$Xa@@2tqX-l`AUDSax`JZpAlsi+zJaV<)zoM
zfA+Gdhsm5RCE`#P#&UQ+N(7{V`gDUv^q2l=FvD)hiG3Jy28<X7BGO=n+~;GpeTjYM
zC%EH5oyXihk629l)xSE&7QYklzX0(Ufa_O>bXz)Vm$z}!%n8NDE$pI*1Z?a>WHN?C
z)lwLW{{ki1)ujCS^%6#_adTQ++MrGqf;WUs6@jRZd?$lV*kYsu8}cjAs18SQo=I>H
zG1&&Z*3cLXY$4mhT?~&mQm~Qo7e!(4*SIrPntblU6-&jOzjVcBu(xj;J71ePgD=<J
ze0>Ib>EHTO9JTR`mec+jj(Nw};*M|#<j#>^en6cy3BkKPyguT+s*Xbfx11P`)N;&x
z9bD|5T9Y%pA`8A+qPcs`&2;-`UWi&=I8y;FpUSnL$u$drH}`9VyEd|M2OngIpLeD3
zroL}yJ%KHL*F@cyCQ|PpO}yYQ3vGkbcU*t?yr95yU1NlQGvx-@71R1^f7$wa{&WxR
z2+9R2+*;gOGPmz34=>z3zAM{d>56{-GxOkSkD=B4EPk%h9YNPEHgQXUQ~=jG?)|uV
z`}|I6>Ie&bAdfp3`A&g^)9ef5QQTc(R00u@Z$qseQKRp{qZ2(r20T3W4yV0Fzhp<d
z)iZJd)g-iC!_&PfW&4D5=Fo^*)t(Z7IoVgQjme6owQ>8nv-0A}i6KRTXh#3!4qlBO
zV$Ts&z5EV9Id$aD{v6Ke>B<z29Gxs-2t|L;BYSXnY6BPDH~5F3zjGV%2<NB_G7?>2
zh1w}QaQyEyqqV)m6UcGmM%0UvIMd=opowQukRQ(qa`$^+8O?3e7poZr0d8Ed6}s>p
zu)`U4>;Sf*8+@d{J0=6$lpK}FW9kP;>FhB^voOpbNxaPp4u<y&1rJihTR*AcYPRZ-
z#%#(%MabaqB5+vJP$a`B>2O+I6C5Ew7K&R0pBO}#91=XO(*)WC0mN?4?T@EtHo+w_
ziGC0^^V_3?f*A$~h(*#;saJ47IVXsZKonzVZjU8(v;z@aUkEefTYP_5DLb>-a%5H`
zdK~~Dmjs<;oer@m@InWXmH&^A*W~ZC;nTg8#^D<Cv0kptf(XPs%>cyw*4?dbD>)ki
z1GtRb+>kC7`|I^R1Vt?(@y&<1bbH|*${@^OxpN*jEU2@i&3Rz4+0cfI{?MqrOHs_d
zG(zx_LdnJcsq~AEI*n(<c-wGHr!Crk-xM320UbfiReQ(tB^Ps)Z>l9^e`lhfp$<TQ
zc(#93pQZdpU{TaM!RZEj<BIG_J+oakGHx^83nwD2ezqRlfK%or#339Y@1Wsj-oVez
z)tzfHJpItqP-{x7$LLQ(Md)!uJl{%xhzD)RC!Z&6$ZRLRw&X+*r#FStN-f?czpSl1
zG^S>7Ut!oQo+A=!TVOom=@-byoVmolcNL>|`MU@sPP#l~*41AfagaDp6@wRI=ri{l
z1L8V!wSV#u635I8d!zN0A`|uxw9=_Lvlz3=?#Xnbb_cCzO|`Hb>#P7$$t$n@<F|-!
zhxMh8#p5N^y5~6g6br>rrO3|N?<gC3-SAxgdc-bmk2Min4Ug41WV#a>v^`YRfgo%1
zz1tU%rga7NB22Zt$a)kP{+4f)ZNhcluVH+k2?u$1Abzv51L(6Tdb1CYF}kn~8VkYf
zPrw+ULx~&|aTQ&LFXXI8GfmHHDQpXS)7TKbY{*&N5dCdGn9HX}H0ft7iR{xlV&yFT
z_9yka<qv47OY#`t-`VVRpqm}&Q>&w5ev0C7G8zY`=oEfG=LmkRK%Y)IQROtqlZ1Va
z_!i`W{u5bV=VP#BQfc!-U-WFHZ7P(~LE#a~MkFPFW{xAxnD;W<A9il^zk@cU8Fwsc
zriXTb-$XpJ(UN)CP26$JvO9)s44d~fqil(Avv-6oVF_P?XzIHNrwWFKXLJlX<k(WF
zPu_9T&j#pG`rAFiy6E&(-F^LFkhm;8@+wK*8l!ngT#Pe)s6sU_81FlpjNazAG{BcO
zH5@i7ap}AsgC9is)QA6M5x0yS4>Y($cUi4qG@P%qG`p-|EO=b~5juC1sAf2==J|j-
z8YjF~!UiZ3BUaGS&4yauXFyib@SJ2FGbD8-*k!2rQl_vYXgk}tguRH;v1py>+dLZZ
zlJ;yKr=I65K4o%i?zC2YvPxDjn4mHY&Y|J@nqxa$-<OMwcCfa7c7N8?S&QgM9xUnC
zI)STzlW%=QR74WW?(9G2#V-2HsYSo1$ay)kbKP*2Ag^9CFIf7r`ew<YIcMQ5PPox4
zF1?rMn^4rXs`BajH{?N5vG;OWHoYlM?O4~+weOC-ORqV>+3S1+1J2$teFC7$h13I_
zrTZj^y<1-~a}JOyHrNQP<=(2A!5<j5$I58t2VEiw7Ok@e^M^4wWHO&1(QK6ZPn;-G
zGG}2dvIz)K3kt-e3O>DqKLAI+7#<`>L?sq5QSD0zv_4+`>uE%6&g&{Vo|-tjmTmiQ
zQmO^88^?5Ntn;rY2E5Kmlt1JUWqLr-8x@e9%<&yzYqQCcg<?kY^69{WSgH9NZ}t~o
zx_qB^d_Ia(m~Ct!yuGt=shZ(z9uRN~2fAwNY$2x+Nl`i_QD4%SzgM6%=72ONcsk>@
z@z|+zBMecSXw7uh9igLTkb9yfeu`e56m0ezOaBtdsyto4tz_}a?V~|3CTqWO=_-8^
zKj|vOgZc1eE#mPqe>w`*8%ymvHkLTUTY^;{<y-yl<C+=EODLge4I-KutJ5ghoK<+B
zxrp1GHQ*3?^$yz+c;kUMO|_~L>%G=)VQvJ#d)N`rWZ5~Tu8g<TE|CrAhG0a3ud3q@
zudeEr@WlCTvJ~b&q#J1+V|<gVUd*VRvhofB3&E(g;Kd@!yXiw^<N{>)O1%PN7Z!!T
zwnB?R;=Iu163YA8V-=)Bo`p-ytWU(OYT+@@Y{Ft;jg4_JN+jFqot%P|cOZpa%L=|i
zPC?>o&}ZVxNU^dzkyPaKGlE+?QR2$D$o%_EU|_DAz<0T6=3;-smPoV(i-qTqiJSix
zm^Fl5C6Q}j){!PxWf6>ACueICpCxMx9`V$98mAI>-5>K%BwP(+^gBVtx=K`M9=HNW
zvf@6I2D=?N!uiNsd4O(rDdw5v8r~<<H}<v|Q`!V^gna_Xs<s8;fK8L+C50Ej0MteU
zOMc!Dh+hFm$^paJ_)iIhFdX8p3eRjG^16r8m~Q8G4y2Tgq#~KolvBTR{8i5@LZ}_8
zG7}ucZ5x%0gQ?|F83TZa#*m(l5_X3r#njiWFCd%_=xk0VKkhA01Ew+uzZ{~9A!|x6
zMYY;Nmz8TQ0>#G!=-@~yFB1o&nc3wU>76c5j_T`RtmveHBLiW4_}4p^zaOV)3a>Hp
z?49o<AX0CsjN!Y2@p!qhY&c7GyDN(6Q17^R=mS(V*!Fj)SE6)3t|V5n-5uQ6S5%hC
zY)Vg0V;IJz2z+!j=2#qSclx?m)=XATuEd<(0nw=AA7er-M?Hqohf9`Ch;%~|IT+?K
z@pK{ms24f_5!UAYw&OZIsu__hwAWAHfyk?-Net=efi{KP@{Eg!5$<57PKF%Gu$W;6
z)O{FYBnAEheh5)W7(p!j@(8L_QvkU__Ovu!9~}wm-6W^CFK@r8BqbrZOZ&K$!<|u#
z0wbbw<3ba&fW1qY(<iprF{o(#0<;iPGI9=Dn6V)EQ%E{d6wX96w!Rj5%t6ZM2`RDL
zt=qFFbL5o~wS;8qAtzUlv|_?Its!YD1FckXio`g6o%F(|AY+YT16-9V^f-M-N~(6c
z%8UaQ)xm1ZXPJfHhlAhS)CLN}*GLw!rmzMj{9yECp%34QR@i=D<6^n4d5CJps6}xq
z)m!%^t;QI~J`|z<V!O6|270k`=%h!udbpWTBCdsA9p?=jO@p+i{)&DuPblg&S7oi7
zhW@={xk+o!n2DLXqTIGUffS`hmx%dsg?fTX&Pd6kW7>T8K+<~=1qt7Zp;Q;@MuIV%
z_L>=iBe_L@i1{5=M&R!F$Z+iqeF(2P%-D=+bBN9QpGrWOBj;eS+JA_sB)>@<@)ExA
z;LUy$F6=y{VYSTu&|0C|7D#r2L*XsN>>VDpuiuvMf^2l?J%@#;aoDB^IuX-7X-~VJ
z7Cz&tooqHzwS<W+UOiLqFFmwfLwQu+YSP|a!%pdh0{5S_So|49RbmpTZ1rN(+b>rp
znAAdDbPiSl9Z5*?RK{;GQ_BAQgm4z0hWN-L@^6@y5RpM1|CjwB)Y%koMFWsBW{9dT
zWDAq^2wYFl@|0ZZ8xHZ|9uiVxzFVpn&kCrtJf#1Jt5{`CmWqL5+xr>(#>YSjo74_#
zD@Uv$5#)%t#WQ_V*TU?!Epw3ji4*M@vO90P#&U6Cus$_vH{v!vL_k3_JrXHOn~Xsr
zWhG{2KYci!COA>55j2k&CY?OtpJ=Tq#+u@|(LV*jtT%zO;ci2BXPXR8wkhaw8RU6-
zQFQ9c9!!7B9S1j!=>c$iT<!5YLv2H)+q4GOC$1UjYyJ{JENR!pzv;82uAfLaTF1~U
zW88=Z2sw=UoY!jDoH6DcBeJfIGU?(NuIy5Md8m}LBcA6pPC6opG{*fZn*=1qF+1$<
zLs%#YH&)ipOsKW-OpJq=-|^02Ghq?8VtlW_sGoaapW#(VseKP=-t}bl-w}L$dsKHY
z@ct3}pQU&k8F|&Bjw@!@f2Onx+j@YR*-V|?@62q<gZ@Wg$?O_^JUzGcze)AnrpVl;
zRgFktTfQIH5X*tZ_?|_IUTB4S08X_Dq)TfC35K|33N`eU%*(%<%Vh0<uO_FOOC%V>
zVoznl2r;-l$=OX3FyAV(Yow545g1gq{)k`baw@cwL_gP**A^)kNK)8l&I6z2G0pF|
z;L$vEB<i?uUN^L4cAZ59=)rS{u}jU&#?#;2xoKwO5p<QHoY!VPgw2lHK+DWlrT5XD
z5^`Ju-fLqc@>>nF%`t)xJS9`{yRzx?TW$E!odY=~6C*Iwef9gg1B~LnLt&f5Qt==U
zaK?tLb)Hg7lMj1~Hx<X-rc0AEK>HPIYRG9bXbteZbxV0=oTg6nboJbtdAW~M^IHQq
z??$En?Ak=I-oRNq5(pOYp`Tvl1vx}B`B;$N#Dw@SV8UO$kDLn7Ysl0f1ljN;)&@;O
zobmQdsYY%2;s&tNS3;{7^^zd4L@L}Q25<o-A_iD}kC3Mks%YWvh;P!+F`sm%I9TJJ
zbOwDOpkGOOyQ~@Tx)faoYoIj+%mizw)&tm*2Ci-SOU2-)18U@4&Oq%~X@V;F<5{lU
ziAs4VOX{`AV6_=oMF=D~Q*|M{*?%$R4~hcP@0>b|{S4{Jy%W>xo{HBbFWs?lqJ|)O
z^_W=&EqUeer&tcwMohxzk~!!6*?qDuNGV7p5t_f{K57~`mDP9_;&k#Z|7Gjh+V;{x
zzhWgY_@4UD&~g}1gU_y^Ilh44&da$!qJ*+ataL4eh72_;sDW)fY3IPBGY+LUb&rmZ
zwM_A$spH$LcRfv;_<FB5yeQtxO+SV=_f>@6<K9{hcwug(ZMwSDO32)b^%BO{RHCZk
zqh*v&^qi~z*Lx;n%qtBz4%)~mm8oc5;AJ~l;l97SwTEjCe<b!QPrilm{@kX3sVqb{
z(=g?Ov_HWsi9y9Cppul|ZYo4PC35#+jDQ9l$d30mg_B|*!Y5Ll=rw!Z5&x}}@O={G
ziv94R5vOOppfaPNB4dFVqXEC7SSnQOM?*uy@xtGOv$JwY%$5I){2BP*Vlz}PH<{XB
z+o#|{4~CvA7S1Zr4t00dAit}PXEsW8oB6&R-j5zOvKQ#CPW74BwxL|tR}{Pk8(%pA
z+zZbPaH&O463N3>EqF7or*8@(@0MNzQu%}%-q>?ku?{NqG`IP02jKgxKb&kcT~F{j
zfw@W_@LFDcf?^jE<qEfU)DtzY(spD5cOp7JLJz98<G+t}-Im_&p5c11zPBvb_6gMn
z&rL*E7Tmgj$9?TyTpD4}dnWz(?>oDwJ)x@Y+4yl8kVO{jRSRz$E|wM08RpEd(b542
zd0$ec-blLCa3c$#9fiYNU!N77`ODAChw#3q*EgTD?w##OzQMo`HNbBp%OJe5N*i+f
zsipWClSF2+;zn0nG1tvgteWK;iHbRmv}$h#NLNrid3Cdttr=0c`yc9dpS}W~NEE?r
zyq_mCct1}wp<3wlCh%N<UNaX>a&p59p{#fV6KP*xt}HO0a4pk5`ZyNhwk|RF)34-i
zoRa6$g#TziQnoZ3tElRI|Jn3X@~L}A+Kf05-<U{a_EDvQl}4&o{e+J!T(MQL(YSDV
z!MNWoJy%R0@Hw}~PL9sFEN)#jwysH4-HEe3Q(211B*2-SHh<}SdXG9e4oc^kC+5cX
zZR^8Dsh?eb8}y-Yos2G4+!;Di6jbhHb^1eCd1}<kz#C2NE~V$^h)Hz5obD6mXvdVU
zB<{3|73^Ubhp==PU^%Mzc+A_3M2m9&)y;mW(a9C7Sz8%vDJ9!vSvBD!J-Z>ZCLi3f
z9S{nWnG2Q6-g3?LJuGQy$bK7<^`zQ7w{~uM-mv#O68H^e!q<e^Ht<)|L4b3iNOw&f
zs?kZm<q|&w>)NW);W{RwJHZ|t&5f<0XzI>U<K&j3%G?5?*0swNbofhG*00twU365J
z5GgUK@pXGA_w(HnD>n55{(r}y{Km4xXV3xw*iQifQ2hVIpwL*G+d2NfLQu55T^B@`
ze>Ql(5EkOJ_m^FY;y)9DoY-a?C)Cl|)1Emxf)A2uIOYhYbR=RVG+!@gx|sf$i`uG~
zndQUo>P27UY_-`s);u;i-Z(n6hW8J&UEpzkqpEY|uXKyyf?izAcC|)9E;&_!^MxD^
z6$|B5<M?uB$C>Ki>Y5@ZHpqBk1}Wrbx#POWz##r^gphSRTK#(FNi*N4#pZLcs=u=)
zBd%i(ACZd(#@>{Ic;WOG{6@7J9d9S~K}eK2>}9?y#)>b#;23mouv=!Z_pXOfv7Bl8
z3>Ip(@ftgpHIX=0Q{#m^t^*xJi>s;8Cv}SrvZ@|C5Id18IWeGyVkM9^=}^FKe~`HZ
z>%~Q)0&AXN*AW{D4c)kE#_I(t7`*`B8zMO2kY1keiBi?+fPE}&xdktI>zR!<93gwK
zbU5BvIaJ@()~pGny6@Gf8Q8r^AlHpI&LhWIUD=fNHtAH>v(=lkStLpATW)jcr>$d4
zA%h{XBEB?yV{Pw$@a6Hmd)#QaDG8t@Yz8K7zR*ROoqe8%#BqQ<msPszf9eKQNXbMf
zg4BoG@JH4WCLGa^pq@M6YR(xDaqEf+gtkP*dA5~`q@P)POEN#{7?~+?`*cDCcT}VF
zU~^m$^S{cg5E1@4iPfF&yWOK=yqXGRD+ARs2B~<;%E1!B0@s36`7~@)*Fu8E_Q^9}
zr%EFhtP(!lvXe$zfrcjyv;$fgg8O5zCtPND{Erjo<=94Ahik<Q>(=`9MHcTH)I?oF
zVUiFu>&2k%RGYmUS%aaLmVcD?bR+lzh({D0<1VAM!Wkm5Lv{BBp6#?Mzo8bNP(LOu
zSYothN)?6kXQP!KC?6#>1p#(>g`~U5fjbImqFMXV_cn$;jK&LE;ajVd1dSYk_JV_I
zBzEXuXO-)zwNQQYCjEIobwb%56iB-$>c%9JjvfQ}dN0W)G@ht6RWp8k@4sGi{`1}g
zdwAhx?$tqV@FH0l8!##WIuMq(X)u-jw!0?znejS)NiDt*udH)EgH-+f{Ui(!BfyOA
z-U)gsP=Z1Jo*gl^biopPmGDCOV{+5xsm{^7843=!QcGU~J+rvs(4snZ`YWfj1!+|k
z3?d4SKorL~kpV7Fa$~`V=dnb9Aia=Cbv=fwc)Noa16NQEC}CYK7j;5lzPd}=1K{it
z>4nG%`~a^y^}v~cHP5krNJdwGsO@K!YfeTp2<U(%+=9w3<)Ha}NUhhZPyaRDFjTd{
z9eN%xsea}ATLu$tyHHwp3;B{-GB6(OjL9YyfuN9$_U1%(SSkJAM1N^>YyI<mAN1xp
ziDWx`UYlgGhCtzib%Hit`?U7)yr(1DoiS=IkJO`OaqpY2ydY)(Ieg%u5x}i>5HY)U
z-T`*xhWqODW8?P(a35YWQqll9flR^-lTnxC0E5fH6a6a<_(a1ayG-C8d>s0-TP^$7
zK9zk^q3Bmx)s;_u+Y?`3YdSCd7cb_i8QPquPO^RjK%CI0)KGN5I;5Row}1LAi|#YN
zx~m<VAyx_XBK>H9{tN!}S;Ev173l}HbH>XGKn2b?)qxT0q4rrq*32rJN7LfGe1LV>
z7?`Vhc0zhP7`tPc6f~LA;8zPI*5Ym=anr3DWcdf&_1FbcIGEFDg=vY~O_mC{*3twm
zV}sYkt{w8w1A|e1AcCj4D6rR~>xLiz>Io0GtPD-o1N}kx3A)?MsTl_i5u_?gQvLIW
z*fIqW4C2}seaVZlQeWi^qu9?J1cEEqUGrLrpmEx8q1Ody>fpC<>96jF)OlmAzbmow
zxetk9wAB`y_znk_kE-Kny>|^E3lbAF6lr&sbyLfnJ{T019!4eXQcgvGl&oV%W+GPP
zMW-q_JgK?|8pXga=cVL?=^f`zd%wh`ALC1|1;;^Wfi3IO@>OiAEwCjbE8%oTYj{6F
zXGBMTx((?s<JO=9PH-&&iMms{>$DQOGJE-+*%m2wyEALm(#H+H7Ig!0`hlLu?ZkC>
z;$r!;7J1Szwsw|trS3^KcDJ^oI{<JQ?@31Ev<`Ym!DoWC$qGR*<5&8AN=h%+&-nFC
zP%E72?wB$nSJDe)o}>Np_SVA09&`C<=Fon!RxZ6T212*%K1ECa#U^df$!p$25(6&M
z+PU~Cxh8nzTx&e4cpSV*DQKfikRDYIK^iu@txMOJ_78KG*DR<<zc<0~Rl@x-DXE*?
zhbvRX)Aw3u(oNgm;}#G6`7fIH3GzMk8lUg|z)UP|7fF}n{Kw2$hmg;4?E~9a8c8g$
z0HDwM@GH;j$J&FfFMyoIm5_K1+uhlB6e4c-=J%_^NBzrrWa?My2Hguh7g<${wH9)E
z_v`!F3thXXE(vuW^>I<|#`Ju!<QYFw-GccK3}ghkqU~o>lbg4luS3to4tLv5@GJ+<
z5*Hc&NAp$)A>?ysATR+6bRpc^g>E>;`=_>opqglOScRqDx6ONP2VXkxWfrcPc41((
znf1ONsPRF-8{y?@+z<md!I5A@Y<}6XL*ThOsMGsypA{>Y`HNwh+{Vi$33Vp7H(2z#
z6XORM%J=Ez*uh!k!--Xonj6+?6&~@lU26~&X}gZdm((p}mh0LuMVS1SRS3&8b(PC%
z#^0go*_?)klh|(tWEP!L@7P=t60&3|ubhq$U{4Iya;M{SSm<H6l1eL-h{QD*X-FKz
z<p3IX*^_HA+0A=kaw7q%tC@AapHHTL9zU7CXR&AhE+Kw=D&hI`8J-1Yr{#RveLum#
zmHsYpm;6+QSMXd-32M@&X0UDt0!YE-r_U*Rw(}ku)Y`k^X(V5NN4Bj@k+{`9R`VPa
zr$d)%<vI9|A9-0wB+a6-;-=ArtQn-y;D$#-m}BH``;(-sFj#RSV4tG-M5%V_Z9t2X
z(dD_{O-1@tO6Xy2NACAJe)81A1fuSJPwf=05j^nEpbMz()){O+)dZ{*0PZKVobj;e
z&9trR*`nxE#XDLp-!+0=@n+fDoBD&H_NO}cT=kFIcP#0K%w{y%c`n*H1|dF1&gv($
zXl^$Ldn~LvaE;Y%vm_g?<4}!=s+QgZoI*6;JHgcf#t8?X0>0O7*>pknqdf$uA%mOI
zYGdbZm9g^!|LFzs1nUXV!Hc^>3-XTSfS&vZ-*MpLiv(h+G+f6%))kvAE$UWB5Q{PS
z_bsf&8<_#LuM_-qC>zbF1U=^4u*ml*nb(U%7j=>NE^pwR1NYzU>E%2lJSY3q9R?J<
zasL=M7??<m*k3o862wD^^vTZva%7vz$`OFnv1+E#no!2I;c*A%VB<7hIOBro<fT)n
z3G$vl<IFrNXhN7$<4n_Z!vJGR$!2QiCg>dFbf6f_#yIWcevm@ikanlzjAk)HGjt&A
zW%W>jj*Xi72%(!}1|<=PX~7{*lLbPYCV+%;di6=*@uXm2)ISoyLMbrC{)iJ%>UN9-
zlNM}qX@KQ#lCy<zffjgkX-~u+T7$Lg0?fxDNIbL-N>@049t4WyQkhM{b27MDL<n2V
zvy=A2tbr+lM_rIWckmmdM2+~<L)OG*%;qa0gzGs+>Z@anL{2k0rL|`?1r+KE_|!Qh
zBPPjoy<c_ATauOF&v+SLvU6Wq=8H5E>^7>_u#{vumj@g`)`RMi9b9CmBOYN)hvG(O
z=HtX?*^S;<GnG9JsnPf4RpHA$%)$nwmC4cAlNpQ9L(S|*cZJ5Ml@wtpjWa!b%na(t
ztp}@BHjRj{{HgZ)6Qlo}J?(=Loh`(jQWTaBO^GNrlg?p9ZIjzjCy+Ra=Bll2cvxYI
zzA?U<XJ^yKXXKV#I)%r5HulM;jviXOpUxgr9`1=`Uc`msTUQI?mNeF(sh@q1+@0&T
zHEj{OLr#+ssz{Tl)W3_=Go2DUANeCus$UVRt0#_zN){P8M;aMw6XH?$CoEAX1XB?G
zm|0C6;ZjLTpOe~qh7=7U(^;)9Q&=)kWD>s@xk#Ql%gh-nvPi&4oFy@wMvx{JNEnDy
zk{x3co-Dcv+0cYIl~cx!(unE!B&!~x5nJYsGdW1@bCxwk9ImLP6;-QRAdOWxr?+n6
zCj9*y+`fpBAcvLpUTA;rNi31qqKJqNH7@w2rbvrcA!KaHoP0&`@YlyB?@}aP>b^n9
z_+YFvHW!DYL;Bdv3m%Auc{)W)!Q;Sb?5T`xI#p}xy)>1c=NQ(5f%UDNNW@fvn3N>8
z<diJD<1nlGlrWsJy5u+=zf*w{!ZroEUyc!zxD9`06^%9WJg2!<LaC)8cq+d=k;V$j
z0lA_vIv7mlj0k$FVqFdGU8Q)T(pH_%f4iY_?(k*N(UqO=X}SJriY>T%xbn&pBXE5s
zt;rkKQ2ygjLvxKjjD@b@@*@jgG^4Mx*x#ji`rtHotYq~3f&wG%z|QpX3VH2g%wrm5
zoe;%z(<C+(cN~i_&LoED2WX`5`XVbm7_qmdQ_4UsHaohdd&_*vP%RESIG!FPp`%v_
z%g{#Ua_7W)@2+LB@#bd@aEgsh%dP{W?QPdKGm#V3n-bKn9XQo0vmcjMOY>ikgPv*S
zL@vh;T?WqS&2JnW>_+W2EP{tSF@M*tGD6yH4NW&OmN`5{8GyxIJk?CyUp~?Iv?8k)
zmF>!ygX(&HVqbZyDRt;yw`C2b{Dh^%M1|l)jjGf}SBL!1l;D>QTYEgGuZV*=i93lq
zU)(l)@e7fPP+7F9GpS-n^*MD>v(^%(_*ILGQLc*hzWLH|mWp?~xwqd*U^yc57(|8<
zhzw)EvyV*nJo^qx^_?y|1Wi!cDhUEA<bcB-sACODu2C(Tdmhqwf`1y4^u&0CPRl(+
ziB0T4CKL_{P=S#dECoLYaL9o$%AZc68C<^eHYwLW-T{CHn&nrDpyh85^)$%<E+l0|
ze+S_w@c|wlKz)W;ThYcOchANw^8Sq|%wz?T;xQ!?(4}~3<}&<06T$;f1;6kg{-1H-
z1E>OjX(uHCBg*qdlz&?#vU=8&%NMKKZG0Sq@SnIb2P1r)y9NhEs-A5%RE%dw$H0ur
z{~UmU((~hzH4#S31Xc9=p@&Q#`(T;x+V&q?zbQv_)pR0nsO=!^o74^QojB^X{0mWq
zgu0j#cSF{!q8@?+-#FUJ3==;vOkU#&KQZRNTpR{a5+73`FpS9uVlaXawHTo|+Kf>C
z+S{<BAj{nsTJ86fXSULhlTC+gRB@D55W_bYY@!CrY$6t}p&rd$M%<S<i7-^2i{nl?
z5yzTvCWw*X)a~tibHpszB+QV?+^-cW@MbcPn<kRJS<MsY%48fiNF;i(n*Ua|q|D4i
zVii|PG$gT@r__^9DJ~y|P+Snx&=vht*)me!ik}h8WdWIAm&Fy&jQTY9Zw!Gc0yW02
z(3|0oQ=tPe2VHFj61PMLsP6D@bOGFL$NCTH_#aZc0q`3>25A1IfnTK!R#e=?uh9V`
zZn+3#e#MAir2=2ngqmatj9*pdr<Dm{ZVg(o0U~ZmrMD%AB5t{Z@PFKZ=Dww&>2XR@
zNH*6wDxh)8asG|mTvV>jP;y*P`wOz~_B>ag2*0g|%~gWVuZx74(8Mj%7D!wEnuKVy
z{@W^gUM*DIvPxbp=&vb$dzAbdn*MwDv-wlXqXUtwD+KTY>ssO5(&mOVq-uVAQJOz0
z;u;+&SS6|i=2wbl7*&Gv>&2t=g-{ZfsXzmbu@^2LkR}VXK-!k^zdf92#1=J0%5QlP
zS7{HPONy^k{&oUcv{d2O=t2^gq5^1sC5d0909w>U<=?15@@og8&C{<1LoHVT^Xrt1
zw&1^_cz3)5<QC6dl$hn}p}F-Yc8v}+G0T;GGuK1OYVt1o`a_RJEK{j!ldlD-R8Z`y
zDgXmi?5ga2{YduTZ~0%0okNf(O|<sg#<b08+qP}nwyl5Lw%t8#+qP{?+x9o_;#=I+
zy|u`w$c)NGMpV?PbDs13b}KowxQBN`*`>htW0(Xz8dZMz4YV7O$G4Q0(b^zS2R5<h
z*cd9efiCoj-)OE_q=HzYL|tIBHgZE+e{vOiI6`l*!#bCgis#bD96^W{NXkynjD?!T
z%COW_jAO0OGl-LAuDe{An{eU5cF<&}PP$B<hzQG)E|?NeaYmnqSE{HKEO4TgluDU8
zR3ZYP|Bgufu7lc;?Px-+A?A3DF6xp+!BugX`*$Ocf*ZQWz!ZBgR-MBhS?Q}f8Og?9
zxnl!K)@D&erBPQrBp6Xp8Q+h*SvRDmx@Qn!t76nZ<x^L>2Z)NI1~xqlmqLoKI_Qv6
z&}2EBYffZM>1%+C5T)0Yho+M@hRQ$;f2d~ht$DOCc+z>B@7rsKDGsc579E2e*L0;*
zK4m1usCLd4Dx$nw?vO9oPR6>(E}wI;B0%WWUP^;&r0sK$vMO|i+9`B0ac}@0(pHIh
zKIyyL3Av9EdYeuE@>kcf^-QG*SxGeyS8}oSbfW-YTQLb;!5e7-G4}pLs12-73BDeg
zL^-Agr!t^(EzsglxXB%VB@WXdTVTZwxxV4=5^tLcdGr4lAi>rrG*7QKTT6DCXsRCd
z^qHzGC(_^^_|MbeX16&edQ971s|OA)d<Iv;H+`!Q5hMBGJ`E4zfWI*h;*bv2dqUc>
zes&IU{HPt<pgt38k?cYxLQM$cr<gU2I`3szg*1D9Za#0y&=<A*4}cb@5PWPLb=A6`
zT?7LsR4ACl_x|*E2P1@%#z7HQ6ciqJgSz3g44=Bl%xO?+o|y%WP_E0)>AYQm4MC&~
zHjR(O>u~hylVDIGq+Qb;2rYO-U~5NgYQ9o{lSr%_lgT?YQBCg&KQb-jDyp&q=$550
zyhW5b-*iOZIB#T+_zNpP52^0L<}6df5o_`z`Og;|GhR=bg=F~D6@6yBLGKKeRDFCh
z+3Zs~IApVaH|AhpbM$UdJid0r{)H1}%zp@UY%D{MPDONd10WjKdR@F2=>U76j)Kfl
z#DW_r;=&3LQzs_QArWxzfi9S1yaqh(gYyykdllTDnL5Q8Uuz+uprp~qCTjm4NAi{-
zMToAdH;dSm#UHv4F+xA5D04jyrxF*lD}0Q{Qjtc?m~Mzj@3xSXB;yy8HRewvo_<lT
zN*0t#&h~J0iWRlua-Z36{7zpN_yCzE?Bt7k<60#+()D)$T_r%(^}iK&{i+@tIfweY
zzrEjoJ?%HJPlTXJlp;GUMdhr18y<6#3J7C^#dqGK@vz|YNW?3n^ALO6!`deF5F6gZ
z`pN*9Q=fyof>DPg0(~?MMyT)c@FDXb>Sa(%JD5soCcfcJFH?r<L@f!@@DaaQiRPwh
z#rK{(AKq9#69$*yt1HL497{+l)y&V3Q#y`u^$B`$80i{v=hfY{8lWX=NmB_&jmtD2
zIihnxOpnGgPC?2)JI=B6W@wURm?eFx<<2!EyJtUr`qj<wtB<i4+#82{wm;qpeGkp#
zKFNQ#?YG<%G=_<G=4s98vcHvn1}<HPp>Nb=`Gk0%6z!g@c<$#;c>BnQv>)PkcnNp>
z5(oinfT<ybsXAiZtKNR_jl;>{?5${v%W%$)+)U@3t!RtNaL(ENBs0t4_Zhj_);+ix
z-yYo+jA6f7*o--&$JIW}>0#w7)IAg@S$RbYWA&>t<Q*j#>vYT9Rnl>N*^OrX#@LBX
z{iN?&KKZmivmL3_j<8CVyIw|bZ1O2IxulccH9gy<l%C9e^ENqa$M_kFto$C5>l`cw
z8>TQ3P0cp+=;_0jP6}fTB#EP_(y${bs&3}{TP?OAxetfOIG{yo8vLX*0cBsBO!Qm<
zm)bNm21KqT7Rr&p#AJj*Dy(E*7Ja%PqU2r{jd?G^xorTRCrY^pOMQ;g?!5*<W{u=)
zAg`5o3g&&dHCMhlslxg~q;6W#Ir&7xhtjsPXoj*4_|kjL$DpOd`vkvZQ?SiXoVl+X
z*{N)Gs1u|p5a>0~-&b-%WXVt?aWWYAsoNQ8Z%~=_7j)+GbgJgbIufRSnRZ+ltM2fT
zPHbEEXb?SH$W45VwAs~i6&JAB%t}ryG~4TiM09Dnm1Szp(4|0=+{=u2UQQ(~FilK9
zkP%FDltUJ?bdsFvB01#xZ#2swF?K8^99R4|&-pho`XLc_S(52*B8j-TWlVmVu^d;b
z(Wu8=U$`ZgS(&lf$1|VY3@j#onn-H68A-CfXH{gCIT#teM|p+P9L?TThewj<g1qO<
zfI*s1P_R>?-aBQ5jF4&S0P?*vuB-PO>(L2?ZVA&kZlbbbEY1bdhpK_oMnp??{wHkV
zcW<}zMa+>z&8_o;da`)3fK{f^HvPgNNa*gD!JFigl<PK{OdN#p^-K-?kGs1c`S0K3
zcvk~0aIgKahi%JMGZWF#9FD{d9puG@U7cP;p?|7q<B#iVe|mx5des8DQn~gmBlR!x
z$bPC`-SqI?zr3G+8hZWd{JhjpcV~LMTYvW720t}EFaEXA3?u5LAQQB_dA67+r>Os<
z-s$@`f4+J0r}%4qNDH0g0Hi~lJs&XX>BE){Y~H4~nS3pF2lF5RmIuOy#fFTStuAkl
z!Ph3X3U>SVF*x)PQTjb0^B;o-6$8i0r|va5f~%#I-aUF*`P75Qr0kW*EIkHd1aM}5
zcS6ROqWbre*3XV^Akfn24PiD7=2p+{-C&LBAiN3acI!>-8K%$f8EG7H;I*psL)b?*
z4DQFHmD`vECzawduyCRQvv{4e5NJj8hEsM-|5RzbG<A4zYFAboBZ}C`ex5jR-1ZP@
zqM`Eu6x(XSo20V=lfN5#eb5^QV{Z&=+f1&Q7FzJB0NVjkZNP7BtJj+Xw)DCW)W1Ec
z5IM8HP%pX=fM&BSs%dJW=F-Wm+g)X2hMOtgsXy27UU}XG-wTfr+qiTDL9SVY`PDo;
z9F}-+Qe@1bIMsgyy<bm>II>pq2d{NY_F^17JZ$#qz0DooWZF#E-iw$h#Mw#Ms^I7@
zct!Ph!~p$86(^e)DT1TNu8%EHF|*xp1oWF=Q@+HNkN~<UvZ_tYM~+)mHe*}3j_p>;
zOD9(BCF8a(tRqAuvsQ1cQcX8#hx&IyA^6l8dPE!z1Zb!@E}EiB_)I?C*oC-~VJv;P
ztiZHYh?uZvDL7gPR)nok?G=C^e>>=4baTHH%N2v5IYaw)h7Ko|ip;+n3pQXJe%-KV
z*`Uw-w#ACAoVoMmq)jg$y*Et$xwHSEv!e+n5{i3%sXwEnf4^R;+`YL!(3Eh&jL~8{
z9*kvN6f5)+n0Y|9FO!xvT2meZ&=N6i0hf8{<aWe>iP=36THSxt#PV`7rqxFTfxu2o
z6SxDY4K{Ly$`u5%hiG0@!lA1~dDNMSj$6)mBF7x?O`9+v<v}-V!@ShQ4(&4sgxF$3
z_YCK|`jcnTb@q#S2#idd%)Qsh89utPtzr7Y_(9f!WHqjV1ja#dI};Ga4(7W;=n+;e
z<eRG_AsmV1KTm2i&Dqp7%4%qzA+A1`#P*xn8rMapYD}8dwWB<~S{ct#j)&120QVh9
z;}s!?*9l2;2j}EF(UK8Yqx{0RK;r<x%z6A<o<NNIIwc^b39pqWLrcu4Az?~e&xL)N
ziy(1zM7&3c=VB2&vUh6{gtZCwrx-_!6Zw@bfun50Ak^GyVacq{!voG@U_O7?Jo%9e
zz_ge!H)vI7=>AB{2vU_nG-%SYZeXCUy;jV0y3HhFk&>@ib&f?1m`J0-TEI*W9vz^y
z2JoST{^R4#C8|pX9a|}wcET94L%=(eXA!FgZbSeA#Cn0bi&yus0R5Mrd`4F*2Bu7`
z=bj7}JSjvKD=Yapw^+qf1`e;Mb=XEQn2OTEYalAvb6&UAhD^TJ4ALcuK5T$(dV7iE
zBtdw`ONo~e11H%!v7H!(#y>uZc)(;QFVG>rm^PS+`GndafK9xI<z_*73->Ng95_vE
z1Vhdg2xe#c1R`UQm$3we8+bJ#9B?sD$fX|H$^|iitQ2DXGByjoj}1-=E<?E;Oe;wU
zNau|eT4|q7VB}nB%^EtOA1nQ5M;Z`X($H^1IQMo8>Yo9xRTzOK4N7da6<;UKjb+0`
z61YS@)&OZ$!FqaZbX2))@UjPxSl!4su9zgt5<B%}Do*!gT`M3Z2ET%z>QT9;8D?UT
z27TDg>CaY$1oO3?`{ko@Rt|3PSk;{%1PKr;fpIcmv1mLu;1>r*aNz)US+|FXf+Q&6
zf)OSZCQjx8@G&2G#Uf*^rNeQvk&k7fC(|XH^#zp=m#X~qB``7^ZDJ>Dn5m{%DVWRj
zRdN9`Y!8wgP#DZQVVbWXxKoLk%SDus4nw2I*#}DLWZSZrcqw{(U1VqS)$ic`+&};z
z3C`-Z;H_vD83%XvZl@rji4OwNCgZ^@$bfV7V->c<0a|FJogG+ka=1DoeIO`ubMd?g
zfDQ4oa^ZL&ocX2SPV9hbaeBvpXy#-sDRYur-4NYSu%snqAxrjuuV?ZUOIQG!uu^Xk
zaNxQwT&A5kAVveNlLgv`$qMNaqQnZ(!jiq*hp7%W70B!|HksTNG>07LGhP-Ffv2I&
zM54}<C1Dt8ps$z=uexF)-#ISWosuIEJFlRelpG|AJS%3c8V;LA*ignAxtz&S^e+xP
z`Z1Z3r|I15v66gJKS-}IhISB<@*0h+e1K{EJt|}0C5>8<C<Xu=Ls(tCQ}7=S=jhsi
zq2H+K<r%D5J~Zmo5QH|Vz)FzG^{(PerB(?q76LT1SX6`>1as@RBWG}+zz}ej8icr7
zt=!34GOEOPyb?QriaIzvdeA`FaZXUw5I81`ZI~qzTZ6IqynWu_ZhVfWgc7>S31q=A
zXc%7dCa@a>f+ul05Fvo-H}7);i^efC$=k}FL$0EgHXPeuIcD$@P?m?3jk~PYLsho%
zqM4N`vC{?$nl;w<3K4grAlM$e#fb<GVz_EnQ)Hs%vJX;PaJ`bC!t<%qTvSQWj0Nom
z<c4h&Y1vvBJT6D^M=52eM;nHzgyn_P&?Q2QxN;U_eo2X$z|+6H&AV}|XwT(_PO@rV
z%BOuU7M7e8TQu9jo!(7^sz|sVVL?%-QX3_mDa}pws6s&3IU_1pO8&~Ymzu=I36ev@
zPdP>reN>VsSpG$U@qel6hIVOwS%R!S*9xshvAi*7#zkhRb>JjInJ~wbeI#<#>v9pU
zWn)@EC_*k!t3=gGS7chbJCj?Kbk8IhTEjtmpFawr9Zb6Myusj~osi^?Xz+lY-*<6l
zFee5qZ}%^cD*>8@C+|~uf?mSo>)B@5dyOhoqrGEuYb&E5h@+)-Xlpkhvfky*Bd?Vo
z6$X&cc;9Op(sGa&*1g;~e&Y#ku-dlBitt)l#7oL2DBXf3KA$G_-#Add^PueqmgQ5V
zkTZ9Z122rOY*4<(O8`xpq;Q>ZrDtE}OXV05mHd^N5oQ#wv?TdFg&M#w+1RUTJ{2$S
z`RC&-LB<MdL2FLi^KR4agxZJ-j+5O*$^9%`B7i#Os&rlO!I<v(@57mN|F`@bwCK0b
z8QK6epL_F8X5*98$&x_unWSuvIiv|$b1+zI;<!OgY*lVUs<?A3l}K1Q2QVw*{IH^s
zTa931{seKb3mc*4x+bc9k4om8EENScJp<{dV?`CTc-PI}x+E&szstql6GJHXW-U-E
z!{v*eJ8TYP2$~AV6)4LBxVBbxmsU$XHlr8$k;U6(TA2$;K~&VD`LJz~SdxcIf(ju9
zMVB(6>~C;?!bkmFqEDeB^LcqBaO+mc*m;J>E9!@78%kQ-q+K`az4N#lm#Im`)uBD5
zxwS+$QvU|ZP08VpcnH|=TBQfz^WM8HKz~nubCqCdStrcqOD%(N^inWXd}kn)K`fjI
z7rJ?gYr6#xdJ?C=c)CiMqPh!PU(GQ8f<CW}q&$3#XiQM2Lgl+T<}F(TsdOzyx;}JH
zgE1FNIFe78lXxels9howyzj(rj#7`_=3JT4{1fqgSoLcWMD8vCE<@70bVdumu{zK8
zY<-#UDK@;XYeN>2^)&-K+$F~amXv~kH$$h4nQ8%QacPjUk<Z@RyDXhh?T^ZM`Jcy1
z@7hCG)RhD&d+ZFUf*GR*x;TvZ-cpsG^UvhVv(Vt>^b2Hfmog7_CGBbeb}M%)3Asoa
z|9T$_s-p&?t?Cqs*t5H&FTHD{f{q`j_b4<_qJM@GD3X2V@mr5dTSo&XR!N}ln_+O(
zap1V3PQ49>sBI)}07~qoBX&!SFvL=UyZf!~kh2?H(EZh-XNBCK4wsse6Xb@&vSVCM
zVaP%Ss*cP@ad&d-asyPnl!DZerO)C5k1j3<!DjYx@g<i~usOwG6}PtGJFvuv>Sa)R
z2G9q>$cF<={^DCfrZd70KJjr88?$3-!$>YGquM>x)*d-hd$%#66C)|ezUtV>GtvbY
zvn-zqE7k&i2Wbz8pVbJufw2<=bw{ok69o)UHR=Q0l&d4$@dej#DY<x}h;s=N`VP3Z
zs{|Nt*V4a_8uAb4uMuXa`G<cST}#(Mo_Ld^^w~(47<Ok@kb>v(M`iJddU@=+&mj0e
zNKp!b8^|e1gy)dpT#E5We#ONCRGcw{150vaa*GWDDSXdbFKOU%`aub@x}H&)8FZH=
z<*VA;3d>7E<V8bJ1V$<s);nc75)ys|i6ACNzO}d{H+*b~?%_U+Onjj({~rF0>cnwI
z<TZ!pP#=5h?Rq|wz}vV&rE9W)>{BYf8(*;0R(G7pOBqIHmh#WO*lQ`9<^W%F7xqaY
zqhb^~V=5JYUgOauKdvX|cc7s;uN=Ut==lhJ-B@O<pVGEEGY@K*jkliJ90c6#a^@LI
zDs98W#4+d8lS&xHi7SLt3e6D=oRx3$2wzf+*gFyPsS30U5HUWy&P>(>MWR5?`9`S(
z*8oe@WQrX09uw5bx2Xv7hCm-0+Q^0_!*M|r)R;rF_>g{BVK|nh_t1=9TE(9G+6U(f
zGf4wq_Ao@t)+?6)<}x5o&UT^rz=8DyYoyc!wp%ad*5@1g8A|@kk?Sv+`fs-I+)Kht
z^aT9ca7Wk3_Q>vm%=IDxk<;wl$<sP+OK9Ig7Ip$Wt6e2ne{rF?Orldubd?OyB%jCV
ze>ppoJ9!-Nkc^m~oU1kGm1%jmgJHhg44QFgX(^$xka66z0MsP2ID-TZuZZkMUMDE`
zvrm;c`L~*LqC{ttcd_mg6ODU`6@BuK$8ziJTgsK`BMB3;6;ZN)I2RV4hCeD^URyxs
z4=OEW(5j=0C(6-I*JAvo<1;36s@Wk8vK;*kn@wlwCXn+CiTIfTv`=01!>YcqUlEtk
z!&I`~PtMkKT8sbwt)EschvEMYbGwoADzKL`=H=uGAug4LT{}m9hDmL@kR7KIVPe6%
zf}ItBQ6N!JH-;@{y8Nmp)}5YTIxWVYlJi-Lkds$NI3kk(zLJ%r*p7Ggk|>WM-KT7z
zl!9!S&b1<qBI2HSWjPy1U{8=4BgpGqFysnfsVAT+T?DZ2Pe%_g{I)0;<UJO*5}qiK
zYW$temh<KIEl>m%qXqkg?58=^(#(fZ=PG!M5v?mw1OBNe(7yjvzB@64^9Q_zj=>wa
z7S%?tpAS7)>Fxk)R2qiDARA;5E#6Vki!we7yp&FlXUBK_DCm@mupfk+${`9wQ{~s`
zK3=c#C;{Y1j>on`Sq5u$R}E|2C6UKJUwk>5PLqJtNkq6ND~O(=v~D^D7H}5D_(+(~
zazb--4(q$Z1U3iB(NpH4){Wqp=KJpvgY|;Gd`pJwexPodqSY?`KuzCv$8k8fDjRU_
z>!rqt5a0$momo=QtW74P(F*|L)!smGD~4<(2$5nu0nBGLVIVq5ebA*s*Xfa5bf;rn
zhG|+CGZO%Oi^21mWTHR3b7e?ex*D(=<tFiwh85&!Emn0@>9H}<!q!C>vcAvc&G7I%
zuq7=U`a-Q22RGMw!`j7ohFpinBr|)&E-K_EQKMlPr7jySi7(@ASk0|AjW3;tTChP&
zSAk`awx8huAi5v)Ye(8#9ZPh=h95l6Dt$i?j0IU&o*SSr=m629{pATx>V8Lj_|$+y
za3#tLg91_Bq<xRwx<mA0Vj2U2+^gYfZk#Ttcs#@&(dAO0lM;upWo(*=w`!u*Y2=0D
zpWR+JA39Nz{tRQr<TBroAvT=DB`c;k!`+!0@0%uwaX%l}Ipb3ff)N6@NUhIe43p?D
zxI;g;0)8wPs6#PEFdT*Kx&k(|OH5yl=)A-f7&Khn+OU^1iBV^`mB8(4<bIcgQ)txR
zY@}v0$&2n8)}<qpK5m0lj6NIYwGE(L{%lSru)ACGu>V@qz@UygMKJORk)5^X+}^m;
zrQ5YBVHvi~lhySrlpzJd)`LnKa7u>bGmtF-vGs|DYb_n1`)B<-v+qqxhMr=692q3?
zSqWc*1}tPM=4tZmi??0m%&!<g#Uff6^Z6vo&-d2Ml&_RIpcqZeHQm!!Vi3P7PEfmT
ze)JI~#N4@fB!}v$9$4$U!AsEyK$S#puh|m!p^Hp#iB}kF2-i`8R(=!atVBnnNV{E?
zDVDmey7wacEm<g#45Q$t8K<skq7Fx$iE0`%s%4UJ$)fK)cv@051SC}%$vW(&wh={3
zQccpBTuVktwk@ee$SuCCB%0DVnw&1RKxNfPGj5CTCS@sRuoW?#ax@VackB%#q$wXM
zq?xf=*!pR$q9vXRp8}cEJS3+C_NMGtCAJ}h)iaTtrxNC(<%Wuar7%Ncw%lTcG9;~t
z`j*+I<0LGpswrKe6RA*Xd`nWMLk*+K6+<k?LTIPHG09|{dW3N7RuLY3CAz-uzCzq6
zWgp3q!XrupgD&bm(w0~tBZe$!DKF_d{%Gd*N_kv%`R9^EmYS9Vngm>{L*%qR@hCJo
zkEHPEEOR{M(m@n@f2`R$mAE*U^sDi~Ck0k<NU~odVC=UEb~U&4&V*Dn-vn&2F=JS9
zO0eIvEGabmG2gMV<d7(|Zi8OqS$EZfyQ98uucZ0O`ae$)G(R_b^1t#vRz6RqC%f{#
z5tZM=i-XU~X>q+Co=-1%ZP}r_QIk)wDx<Rm&z@htjt`IDcV#D8?1(oz*>8T&SGIRI
z>SbjgVFdO)A6J8MyZ)XZw})Tfqi^+XHP`;F{?4vwe)<MG&z<~T^aK1VkDvR9)~{DN
zWzI<7Uw@eG^==1e2_oON)oz*7PmI3azVP|p|LwnvVK@TLkDy@l@$t3Y(yQ&ik=OHn
z{^yVKEAr2mJwfiyx5KPT<m6B8wY}e~UC&4B&92@~Z?|XLcTHDTkH5Ef&(xjI+Yfu5
z@6+*B+Um>dva2t`&+1lK#CegST3Xz3-UQ^{@bsXr@5k}g*Yerp<M*KaO>SHkyF39t
zL2m6IhMkkmtlLAK-VZ^28+t!y81(jbgkDmt@0TY@`>u-3&Wpd(S699odYOI0g#Okb
zwRT^x)H@yDwcFe>Y}+3^-*MM|cY*pnZ-d+ReC^Laq3g9-^f#5gZQc%DKfay%I~{-C
zH|eou`@ZOCj?%8b9bQ_m393AM!?@ofzc<2<qXOvy%|XH8@6v>~gSC0Pn`iSDqwb%-
z8>Nf?9qBuw(3g<A{}w+FMjQdb4FNw@aUP#voB#W(2G5U<&e-9bV{epLWbX@-(CdxU
zq3@ljpoIU+<LlSx4L-k*zvmZm$J^i`Y4|h^B709uSejTz4d3nnUl-@-bnQ*e#q4G)
zJMc~Aq+A`+n-SLcU@gPvCW{Zt+(pUXC>Vaj2TC0CnY3-RIO~CF7B5_rpT!4#f<vAj
zY|<ecsL>7c@!hBkf|<aR-u8~JX1?#wCXAoQEB?<ze*cf@Wq*+WDSqb_T#9o+0RsBA
z1p=b`zlh(>JZPOA44sVKIR6&~{1vaY`liHx5QcfjDO_Be-_VB~U=5QE%-&A)jY%jC
zwV=UcN;uZysZEJ+WLSS&?N#}UQ)vQ$g(c8uqLHf4&(FQwUCX{cu{86@?%wBMS1cXG
zh_OH3of|O3FzVg8<RVPdeeVrr#_5sZ5fGloJ2^htU6mTRWk(IOUB+u}l3t*);$K(_
z?yy`t-<<^-Za7&a%B4#KrHvD*Bz(RjtBj0=f!MTk|LNZ4#)o<c1=ABPg@9$bo{^dE
zeWXsO3KXTf0yy?b?s>T#C^%mh7zb(Vpm1aH;vLdAfNVfLT!7Q}uz;~@zFNKczn}KR
z*HeQRG2`3y5=V9%GQEgg;v#Z{S{*aR##i3o-`+gggP}<xcHs{fU3biNr%Jfx$a`kU
zdK!ZX1Rmnnq?NJb_rcfUw_xw-9_cUj2bmje#T9YC6$_5xu|mKRgkQp8D<_NDp|>fg
zHl#O9aB~-#v0Ed!n|&#vDM=^^xg8YYcYZFm!}Px!J{|&trNgCxhn|9zL1?%L7Sj`9
z_geRwArHU6ila*z6;MDC(gtApiJ(iO|Kl#?Oq*{<&=<1sG?R~exohfx@$hffGn;u$
z1wXLeDj|~P$`nyVE0470mHs?0m`EY)T=nc;yo~X${<M#{&^$X#pwQovwcHdT3_tQK
z(?j@uNzog~ov{e%C4gZbEY8d!=IAFpAh?z>%C-?*g5dL)8LYZW{w`r#lLB0RS;i5q
zeca-Qh;U1a;MpH>3hXf;2%>-r2xAj~eFkp`4pa@uNt%obpg(obF5w4xfO3Z@N^%%k
z=uU8C7C<r^sik<W0Uvt{3hF>ffg)f#SwkthnMC6iB;~{}GPvBerZEjh4v^f1MiZ2=
z96!h+*Px(2vX)q=ch^W}!;V5CF#Tq&7Bq*#jCW>G7_mWphGcPiy?ObLj=m%@{RR;q
zcq7@T;BDRS2mMoqf?dppZP7Zp{^76uLws@#91VVtKfDjd@U~;Qw^1Rx5Fedb&n`9S
zu>#Tk1O(xMkxTwcl?|i|x8}B;-VWmcrVJS-i3w_W%E414D#$zzz>wkA`z5RVn42$$
z@+chuko7tsg`>BCTbN&dB7;H;bPtG`x5k4H#PxZ7p!ffnv+F{l$EkJwisEZ0{3F}9
zHL~J{^15OdBn4)-U{{J_k-IitODn)qU$i_TwZ>!Fq#k4E-nbm}Eep9+(b?GT>*RE=
z<$nzx%kSF1NtVw#1C1@}z6Av8cn0MXefiVS+UYN#hRAn${q-}Rw{wkObvK%~bMyUa
zEWO%EnNxCmv4j}bW43r?!orOdS>(P>(hM(6-?O&BYLHl3ZyBFv8x(B4!JN!`lCd{K
zfN78~Gytf1qkH5VYENPniauo1#Cj^=KO8J@)Ct982oJ209blH#h6bLWsEAPDj9(V!
z2}<d(v$I4f4=QzC&CiQD)#$zEQ*anKy+{}CL+M#^r4^JI@oVTWOG*IR3&>ft*dzIx
zb9-ZPwZ-(e6R)`3*oK72F?sFBj*@s~q0wa<T$_vZU59OiT+84>$%}3KolZiEYnIpl
z>_WTf0}o{!&WS8$amVVtIH?Z`?c8LSl1>M~6eB}trb(w32iS`iYh+j<A^nQhBye}i
zkoqMy9k8e<(q@>V(ocoB&Rk5zkihg1Xh+EG0m3O4Hb*fP@rdesdL3pM3<LLo8;ISG
zRX-**XYY|xKfywR@_>=;tA@6Y^~dT>S@H@b_|f{b{3w^DnCn8&6`rrvHbfXpeWI!n
zb)^8F8=*@iOqI!f|M~AFFDU%HO!_)@<2)4hTz9_(BQ`Fdv&(wameL2WU5@HVy9m|_
z4$*8%2--^A>8j);eH1Jh&}Uo#KXvY*gg-DYR|Z7J=pNnm(v*%e6(p~S8IyjoHKXj;
zWll;j4(`Q*t?+3Trh)W1aZ>zx8XaeJLY1;Gln_@xC%N&F-VrvzQthqa#079(R<$G9
zICR~7TucVQ57J|H@n12$@$4CPar$2;eg?NB*|ZgIwxb}X;Av;L1?5q5UR)`#^sh%d
zkT;b#*H&eigpx7JhQ_xsN<ALYnT|1NxOX#R^N5w7h%spAnyBpC%8iRi3`BHJRiSrQ
z7aDdakiR#-op!`R-J`Mt+PIu1Fx186n)<zCvYkQyZ7?xLNvy4Vlw8|5Mk!1}WAHRN
z;N@{z5}|?C7{Wkfcd^nxZ0f)WLC%r_$j)y}j~XTgil<()cPGda)iD2R<8zfEGcR-d
zCbe<(p#YeEQY2|J;-pkgtWyAK2VF<oh&gyVrFcrnPAH=7N39RRD~DR$7^;NbHYjqR
z3ba@LdPq^tu?Z0IP1TjKH`D@bL>oy&<vU9}3>9QIX=Ht!`-l$J_UKt*7<wsK|72WL
z&j`Zp2Q064PX%U*g*cy?+a>p28;i_B&p!U+&@`~F!WoQ`H@*y9`X?I6FGRmA#2MU&
zCkhh?ifk!=6+<cBPUZg#-=T9M=+Id-+n2GFX^fdgv&I9xb$l7sGJP-Sfy<)lK&d<T
z=-r}Mf$FwLXPcYR-wIJ)DLX<kfdUvIAke$sOr~UvtIvFqqif;dLZBJnJzUfj`Uyv-
z;_s0(yqbS&!)>A7SGvuvB5q7VUcrX_3uN*UvSnR>r?Ae@psGMXt}{GiaSvV(K${_V
zWDf)W0kRRqdRXme<}x#wJEpmcdeje>Rk@fhnkuUoy_Qxu4OZHXw^w+)_1Ae~3O%t~
z8RR8@GBx=D3u~(hTKsHM0>|~Gp1)B?-3XLQH_o>E>{Xn9(EpmlS5D1h>zMkj*6d<1
z^XuYKG}0Gs^hAr>>X$mU-kNVG`SM1KO`GmZ`FX3N*94(8IIvFV>gUwCM#zKKo1Wwd
zW?c-w!3<MZDQJkd*Peg_$85^Rb89d6K`!zOQ2AlJeELM3nTC#YGdsvMZb!$|hvoS}
z<?(qx->t*`B4)S)Wk10hHntj!-y+m1|Lqixgy4w1816$ftCmH61ZmVVMyd(!d*LRz
zJ0U*ef*aq!%Dd2}Rp{rZ-Ov`~7%KM_TX>Ib!&pB{5zYggbw=@#jHhEGOik^#2Le9a
z7Y&C0SB)vVBXbz;ffFn8nlF|hn7l2DTAj<t&8B{k%>Us@R@YWFJ~Pb&tfC9DTt&6}
z5zbmBWtgZriz0noGI)Z-!&3r0H7ZZ2Xnd6nM^mx25R-x@&}VScseH9$0xOTj!phgu
zt55J#Ax$Hr_`U;%{tqK3lJbOBz5pVX_+5&k54U8Tw1N*|9{f;_uYOI;{_JZb?ofQS
zJLO;Wl@=Lq2N%15W!SCAh8*N)u56&DYbD@rpdoVTmDvs3yMwiKc$$@11mJf_!#S*V
zW&UAhyzpo&Fa{vpj3x-pJjD>=Y(5_2E2i)jw<$lh_P_X&=xyl-g)=j&we5?E`yKI6
z%s0bi@s3gQ9bhJAjg$i!#KwE7n)@m(4S`tCAc2C92}qpczj1z(J6ejmnf)G?s$ci-
zXGIDEO{|IUZi2V619>oY+u>6;8-+?)?CgR+-_l#A^0vz>A?A)tBQcIR%C>+U(d0b5
zj?)HjU0|Gy6>a{ok|(B^R86&X>31sGm%2bWr9smUyyRGjf%gJ#>@HGBvu=Cwz&#}U
zupfvreP9euD}OLr&#uV~+}hiV&@x1DiUOG1H=trg>BiFdnUlre2xr%=&0<KfOIA*1
zVT6m-b0++v{BHaeWD53ol8~`@N@K1h@{1<7#sQN#><n*GjM^U8BnHRxcQMfdR^*UP
z6fM*(;6{W((*)kTMJh1;Dtc;ke}HY-RohmH_#Uqz^yd8*E+ZUObCtT)kEx`VmXPw-
zIfA@@JznmcE`=cZYDoW62cZ%$DP!*8MFb8+lM?MKdSoF_%6lbD4Z2#4KYAH_8lygA
zI{mKb6ND*7vm(B4W35?AqmmF*)V>mPTu}k#F+~$oTCoYEbPe@kN@N02qlsn^Z6B!=
z8`~O$H9PaL{X-II1E9i<K~b>L7q=*QP|0yG-)G;xKDVn=k26kGsRReF;NnF}YMwgk
zxI{H!-|(+q(ms5$2&p6~HKHLa?AXwq&RH|*?u5N_R5juS(@zd_MVX5eU5*MOJkRsc
z{q=Zec(7>*wONrf_Dgckw5hq25Vf>*YvdK$rmxgWi$HM?lQlKuP9^Sj<!z6u@2iO&
zgj>WKbz)N3I99DB@&ih`G%a`eM2PB!()~eBhLx&NcA+wIMwb_{N(WcOxHUPVev-!X
zeD4PoaVy8Wd)hw-?2k^tQw@mLYiusN0g8$M^Uwp5kA@!g@;0;l(gPMqEAV0)f`zI%
zfu67Xai*C*I?P`;z0XdIMH#HBusniqeX6j-bkvpTI!XKD5khE!Q2n_@5NV)D>h>i+
z0-lPe^#%f7m0DZE%SN%aQEIg3kIj`<ilki^f6x&zFVk+yt_#c@RmVX%KY5dBq#iU#
zk~-#lbzk|U(80aECfH6IrnysSdg{9#_K|13D`I#IsM>;$u5c)<RECb<3&mU?ds_=f
z)MY7Q$@h|zR9wq;RpKv?vb=b#6O`={UG}CWjf-OP;?Bo##%H^LO;G5?)`{Rh!!%<q
z<oZkQLR0V<O{^D-4>)wdmt<#$v93(Bql|-f{F!Px2|Q<>$_@!vjpMIMa1##ku~|jv
zKJZSng@C%gvvIj8M&E;6Y2CD9y?s=MBSD?3atf4I?MjE=_c{*ma!RQQN;_3A+s7q4
zHgi|Bj~KR%xujbKt}HT!agd1Sl^zP29<qi*N*Q9`hRGgk^lO`Fe76@7N)oT7OMQO0
zlS(GSGmp(v5|k1NP?J7y^6fqYa4Mv?pCS!<aMZ4a2^S(X#{OOoU5d5R(CPO=cg|gL
zs)m@EF(7K1jR0G#6IyM!JheA_cI2J+y4U{9IJ*{{+gBq`FZ)psyO|!pT!<VUe`G=O
zHjb=)PN(@#HhOT?vgv=OK+i5lG*dtH+n-ErASVIBq)B_9l%1r<YVf^D+o;6!Q$lzZ
z&|V`WZA2MsTUfNgvsNwsM23ZIk^E`0-EZ%(N#&6(HZX<mM9ET>_Q1{vJ#o8COyLMr
zSRKB|VFiGz!6DpgPZCI$?NSfe1XYa%^oNTttY7{M2tdh{Y5hrZcJjeMf3$fK1_^*i
zC<gM`Lw}k-6I>WT)eY;6;}&V~|IvNsqro0IrVkRn8s9<S<V=$On>7!pAh4JNxje4$
z%;+W60+0LmRNr8;3n3AE?kus7W^ixRm?e_u>M1-!x~BOHPqZ!@k;3)R9iMf~HUVO#
zy|euvjCDl%p|3ab5ZFhY1+gPqjM?!{OWY9XPB}auTpkMchQnqbONmpOd)`s$FW4?2
zUKh%@k4?b9@xHA<a`0z|+ZJfw#p0cr=O;oCOK&>C4U9M<Q_F0f0#NxI?=437FNHZx
zn5Kr!u|YV&Xhf8*;H?)1yM=4ZG#4|E=9iguYNu2R|8<YackQ%|p!;-xRZwFM%=#Pd
z05yXsZdVFR8PFRzmE~s~lT&avpZ;sE7t4uWjXhKsPmsgT{5d(PE+ofN$LIvFo9$f(
zFcW~W_@$axx+f1jR|R{4E}n-(X+Ks#cz2Pc0J-5F=M`BS#%JB$pzYP?oroRkykaMo
z*zcZ%1`yqS#4XEt?6<FLc-s?rJ!;_dVrwnq^yspp1o=j@FxDuSe{JqsU1$eB!YH=B
zz!^iaDXcxX79Os^ogAQJ{W00m*F{YN9>RU~7b*dB|A>;W(kuJOH+ypdH%o3K9Q>{u
zuP~iaf2h|i!q3;=CoG=kPP@3ijasTFSGe>R2TnQHEi(@?Vk~>s*9}%rEwr#C7eD)l
z{ILCE1jQ+6sQOqU71H-nhtU?5<8=Gt)b}5(zY1WZLBIS#AMM$+`EACC=v}W8#n~_=
zr3=?!7mzF&E_kG3)*~6y6U?b4LE9^_8Us05Zco_LFP~eQ-*Dvoy*DqvLZ>!%%;05c
zuoJ&B@9q;72&QhLYGx$5K%}StK}Q8kw6MI~f~Z8W%ix2U?2^RBa{H!Pe4c~#D)#He
z|A=d?S{pxq0W0;&6hx<^m~@!*7{y@K<q2-a35=^D$_wvu+d1k|S7I?;NiTNkSZmc1
z#I1=pZh9e)rK8FZDBBW6t3$ki98iSXur{itVoaJzgU@8KH<)$3iM2f2k(z#!!q>#J
zmFc9gB~iMWXwO}~+=#qJf8Rw351v0kQpn#!HfS;YtJ@K;?Ypk<yC{Vg4nIi~e^}(R
zO;InuTsKu+UB&1)#;l7GpuQ|Cv3h_OPN!&P+iVG>m`+gQO*$yX92RY9Tv2sL=fC>P
zu<E6%fUebbf1T4&B{H%H$}sEN;)2Jpaq}!Bs(X@Ni07#x^5gq*`OR~^H_6Q!46n1S
z%2&i2C)RsaKW!ndHcD1kMXTxbnbn}>$A$hmZA9RoiS4y%@=j}9QEX`GU{Wex=9AK^
z!mo)o!=?Uc1gb+w`UGah@z}Bp;tODVTtmVUGN3^oc{2zrGS24{Jf|LQca&!1$V`zE
z=xo=N9=w$k2`3_gp=a2qc_esu;=y+X-k&rM{5ntd>54fAZiir$1V}b3+UgZ?aq`tz
zyspA`ul&IN&)lA|>qhMx3lLC2?Eew2YG+C7!NK;w<n=CjzuXr`8u&NM{D)S8mr7fT
z=(z*qcR-GJMmuR80zWqJrF=~+QT~i2QjI%;l=y#St?Nquk)IrzbC8lk(d7Q`((i2S
z?71W5)DYe8-?~F6cb5af?%2jT3M9}8omnR)%Pic&w~XW>rAJTZfi8dfe0w>vJpB=?
zPT$fVhUJeQIm*3AG}j;^p0yAebhe7?WCvP&i52Y*-!M5|XCbK%9y%5+j-&Smsbj}P
zxo_+xmVQX|@RLzP0%y4!h#0FlR1%`6!5$jA3qPg@U1j8rN^C}<$FvI+-K&#{dwo~~
zGeGGBNcVxwLXA22{+#v?{>#3T-4OeufiP`G9L#0Z8jXgX6EPZ>w}c-Ob~roK>D7+%
zxe!Kf)f436-Eu(|(jSU;xpe9V@UQnH=D#tz9He`h_(@)SK9hQ$cc%Td{>k2A1rR>=
zrbxVnX1{Yn2tNhHEvCcoEVQc6S(0NXhV+)6u;3zln|6!~kQgUN$DOTHz|8vjy&sJC
zUVq*41V)9+0uQ-$F@xZ0(OXE2lh$e1Z3I4lLl<Y)2<4N3;j)E*uoEMdL?@v6d?r1e
z^uf>r*7%vz=KDR&b-+aE75tDP0@mh8p9Iv3RDZo1PI0`9MO8>&^ZM|4eL@w(wc!T>
zMep-2$$J>R0l5MnVECgISZwG#dgz|#aN^@3|H32lD#dv-k>kw9BKj@Fj|m(lgxyv;
z9ByFyU`LS7!o^TT`i&<WTYA_>N}piveEx0?Hs$da`Daxbd*FhU3fTW{fLzf=C=F9r
zWBq<GUMz4Hl7>O}frbSD4#V4Y$XOIsbY^2EV0_4U|CxX>ywnuoA1QTURI-*0x=U<+
z)<zbdjyQ;beFSLB@9ID0e?P~?)_O$>x4HyPv}o4JEO-b_)GjZ*#eCbLJ#}w#3cOi6
znbS!ML%c@(mv@_0SQ!I+Am*3lHV0(Z7BS+mu25OLRe;hQnK+mMK>}mpi0I->=U~dJ
z55Q2kPOovArw)=U1AqzV=PXe_rJW#3@S%N1K`nhD`us#@WGMs|Y)&3gJB|wuKm|EC
zEMNuvC@B5~y#Yimm@;@4zdm~lk#GWIx$vgxjiqiOwdHb~CDrm{zkTz<^L~4TTA}!|
z@OF*s%OZ-4hkEo>$J&+6Ce2?J9lbfYd^~$NC24EUnIBPHKs*y_W!Avf{;jd^hQRLu
zu4WB1GC{@!dr7?D3Xe4ZtsWL&B1elNg7&!5sNqlBC+K6a3UUmLY5|On9}j{8KAZ5{
z_`Vw}cOEJu#23kSVh~t$HirR18x&srZ{m*RFO2}8C|zvPJ`EIC*=|YVG*>9^0Z}j!
zK*Sh;AoOxyo)`Syk!J+~Q@^S6$J&b;SIj|^%6QsYAuuTWf$^^w3)#<;&Iv1NSF(V;
z;#K?LJ_LXh9@8Q%^JGly(hW6<vd|a$;4VzIS{(>P&v+OUk}2^v@eiZ}etbTAQEo4n
zc7RWAU{YWyCZ#xr66n#f*S<!62dw|`h6SHbJRhc9!OyJhBj}6pC|^-+-<?)=^<dDa
zxffeXJ!p{fV&s0a0)fJx1|mY=ebair@{@pZ1b2Fb4aOPFky~%U(>AQmn{~EPw$AV(
ztUAcHhe*r0^iL?E1`$7zQ$FItSaO(pI$BJhM-}ujAPpRWpv(!CVMu8hw^OL%$aQ8_
zZX=_IOrbDSxp*W4Wjp3be83pp2_criQn5g?{q%!~U`Wnqewj{)1#@`RIYZ?f2>lg}
z71^`=qgESI@>dn0cs3bi$U%+>0t#}g%S8dBoSh4(Vi4cOz=w;!+hYe<^o+;TfdBx}
ze-g{b$HSvA`fe!xnQ3t=%?*~W9psoZuEEKpFwz>wb$j6k*&Z%W#Zv(T^c{y)U2)+S
zU2h1ql@L@CE<L}0rZA|loGd*GzO5PL50*Sv#g{7+7;r|k1g79?BeRYYu%q8zbJbfw
zB!ExZ<=DqAxB(|pdziFyb<OMhe47{N$Mw(A{sPZk07X8+BPu(>A{wFxQm>Q!h%p<D
zOK|JT1?V~23)O}gf@aw-4Y16$%UvYsJ`4P?H;?j!DfkA-bT~i)i~Q?Pd=mfoeLjEB
z(|sC1-_MiP<Bj^`<7ua#alJ9;)<mB78sd+|{Ll0JA>`oBj<&~JO&U-1DC8~TZwJC6
zc8=@N$Cnh)^99i1V08h-8_W&h5-0(Bxjt|3QC+ygv810K%;z2?QXrR$x2T)F?Qz;y
zaMkC6=c&8wwqEy}_1^EBl6$MRGPpXR!|XZc?F{Q6{i~N;o{)gow-@HoCDuteGx>yA
zUk8+WV^RjfEaq@PA?9QU1L2p6$mxv;+;aXy>Lslp67cI$ny-fz_&lTMYKfgl;00^R
zHgB32Ij@zT0Qs{}Gz0OgMSUF9RuP-GTNhC7Z^*oY)z_Wz%Bj7F&!F+ittP!%5cE%G
zP%=VHHVAYTfZ)H%ix(RY1$lSWv6A8II&4a}0w>WN59Hj!Y?qEazx8Efg5S#e33L-&
z-trNEf@ST5l3pbdvCv_FkDy_|*@`qToyhN12SKNE-YQlMaSWW7p}#38%uhNs?TeQ?
zGR#}i0{$iY*vaAk>ar~g2|U&W5%$Kw5V7P9XzoRys%TIhz`cIhAJE@>b-8I~Gc%X?
zloEC3Qm#W$b}P-kpB5vZdN1xT-|ekV@L6AW_cxaNrsD?rfRGI=ifHT}G#Ww&W{4Ek
z59%N`R7n~f8FCcaab^L8Q?>$(=Go`<$|fL)N}%rpL$Hbo>eN{WtP$40U^<Gh2~H{G
zj0N~32>fPBfK(CgRqpSH;GpEXSw-}n3H^O+5*tv^W}BuF54eIqJ*E>9F4MU2Z{gQ0
zlmc*@_@1US%B9wi&trptLr7VlFIEZ4*eSolw;VZs#k&1(e?OlM_0V#+E-}*ViTx!@
z{M!LU08~MIoneskoS+kvRs3l&#E=kFoZ-;7dw}BVIfE4MH47n)+SvT9sVkm?UWDYf
zH%^zbdCd(ZvjN)1GC~Nas69a_*kok*GVm#n1P2s6Q&<K|Rq|a`Uqf_rj?zig<>$0F
z=<x?@F?2burwq*>2_Hx@-lQs(;=aAy8XY!hXy5d*HLyDja9bRt!(?*iv~}DAYkRle
zU6fqx2ovO44QgCDz$Yuiy--U3`A9di=)zRU3Jb15;gOLwmWeTsit6)ytEXddQ;{BC
zhmLjcywUWg)}Kt<qxx9O-^T+MQBoCxCB@~BK{*uXNN%U+V6E35W<ksFV25kE343@*
zS!vhQNKMQTf1mcPSgxdCQliFZEHba7O9!hhtW1Yfz?}Gt9r=;=mSzT6dS)i>J&v~A
zFHHv6P^2x3XU!11F40Bqg};NR?~$QQ&42t}ncG9U1K-5^eILC8D%kgW1Z3uZRoQ&M
z?A({`lG>I%_b!?@M(=-PtBa)hn#QL%pisax1zs|Nc`JqW$B(Io<d{LIBn?+rDyF2=
zVI`l6Via;4IJlCKy~iNAK%OXqV5XgMoe_q|R)W~^17VOxNc}BXTf(sMORo{@ry29s
zttvDV`u#w(>c3ytzKPNdo_B=&t3ZyQT|vl?Dy)Kn*QnbVasf0w{jmuhfBuo2j;CsK
zdf+$Ldjw1ziwq$TS`<s%8@9)3HmLaP)ag=_gX|AueZ|S4lH#z|S^8&N8_7F(paOa*
z#R%34_A2Ao9I&S0pADMPLl2txm~TORBR3+wJtO-3aaz>QxfXNX#Ad8<s8Zp9mBHac
zdlOoUn);2Q7o92X`=(*q=|=lIQxTc-YGM*;EgrGrHn>pga>3I)ZXW4T^>|>|UpHL#
z4Dx$|-o^qAdO#(bqdf!fL<=$2G9@A2xg$ZAB`4lRRl3?{)6zNucWO4!sj>n{DB1`y
zV^n=lTwlu^<Kz9ktPB{7%vkiPrLqO!$n~ELDiX?WB1z(gQ|KthAl-n3M)Xp5F-<R^
zxqTR(g(yo=Oh;S?fg!bA#{?1<Xs}2dwA81uN#hZW7bAa4T5IIRp!quyC*`WGcOq$R
zgKJP`zwz>8@oYpqoF*4WeQahr6ON(Ye~M=k=DfxvW!Q+<Xw4NuDiX*<Roz^`k)+g3
za%KV`gIOTjSA)(MXC0}!N_0e%426gPdl8Xe0t;rbMY!)*{gF1`)1XIA$zbZ=kVYNa
z_5c|yPa#?jF{H&Pv_?VMDj_iP`2o%t?b&0GWPJhz$rWa;wgub?i|jqg#{Gjwx$)VX
z^lGVzB{ye&%Yp))edLfq6QS7v9xt`@!@+<t<^fBtFWM<;7B=hJJS~d1U(Lv3+g9HR
zWjyj_HMV3TmV#rYXQ`OIJe0?zF~OXwlUU1emEg*oVarmKH8tR>wWvYXJYcm7>|eag
zvb{6ssnm-#c~s|}>cdi)SDBU8%=O$#mS05`F07sW*?(7qtkjv1I~b7J!xLbM8EK>k
zK(^cl59p!DD0kJAcJ>%ev_TBc!HHOcq0^2?As}+GYK5Xt^pJ#?GV~MqU622!^925i
zvQ2=QRZA9Cz-%}eA?mp@>_3eUPuCGRm1IDnHNufYih>^JipadNnvf+SyZ5{WXw$9u
zVbVJ&V+RwMI$Ly=ak6Y=4XTyaPMG=qa!#jS<j<{;X>`o#85^p2g*9uxRa~FQ#P*M2
ztqz{&H;mfcDtM`zU_JZ&n|W$=h)F$er<q}|IsZMyrdtu`m)!0@)wQ=J-|tr5VkkCY
zP<*}3(|Tus0am?l=4BHxN0BXCk?o~iQN?r$R+b|MxzUYzh&Ff(=K>k6b0*F-4)e*c
zmU@@JemPYfxnT`T=5J+N|2hT;=3g-)Dt>pBWR(XqYW2yq6je$-@i~qzO$|V#OX8bh
zAlSWEaJ5;@{{g3#-Yq+#vlfhb&QC%<Ws~!m$Z;V0T{8YQ6<M8Jf|{Co<P-`1-je>v
zB{R~J9?d1QXv-+8ETg|<OGj$&-fEp?iYR)%l(~9b9!4_BBvjHtz+=G}6(QZ-=)p*G
z>|>&AnjUy)ndHROuuDBpUPA0hZ{tda95HPUD+)ZPo=`}0MEB%m=9G$#J)r2(BET;7
z`H?lnLfoB?N2{F8Xlj+(l+2@IB+Kk;;YfO5j!PgdA4%K&TDTO$LXx;QG-A+m80il4
z53u=s^7d?qYUbf1LfrT5o3h?B)HpC#oRbFR<UMX>z~V_D3m;8)6JHU?c+^eL%7Egj
zE)4@9DvhtXS;(QXq?93%(h(X#TMy1<gcpg|cIrz6l^W<U%EUb8$Ro8Iw1WmUZVVRL
zHj^;n(ZY{wnXVi6c;vzN%_>N_!}R1CVH>1B%s9G}Dc(0{`+tnRGq^Bnu&lXk+qP}n
zwr$(CZQItrY}>YN<L)~%$%)QnoqP!UsqU(m1lup)zP-B>U`0w0t+|Lw&DJ*a6-sL^
z#c#Bg4}?1C-#Aojx=a*I#-(qnh__m-h;&w;qS{u35jLYWv5@WXQIv3eb1+f9RgK>X
zgYyvOl2Y|p6XoiqY~$U+ZUK;StJ0qsb<D?R{jfsqER&{KaJWWDOICx`O&!tovVLeP
zMHOmxeW1xe6-&iS=ktZ6<HQmR6i!t5JuSXl{f-!$oj5y`=^-*T_Np6)mv+*qNLM1q
z4{`LW8?J%ZibS6ytZH#vJa-lxDrf5OhLXvvBd{&OzH>nj=e!u3Eli7Y!Cc_$9>+Xg
zq?Bj@?ecFuObfH&4~|8jd_gYetS;zg#Di5JTe0O@Ae*q)hyb>uPlbT?YN@<J)Rwqv
zq>l~0W#8C92(H*>q>37NaM3{@+2X88S7OH%wq<$Lip1Ybbc-~uA@6YKcK}o$ywUid
z4Ik`~eKf`+KPU^9e?98n)pw7ckNy3d*uzgqUp~s7{KuE&!w;dq|2Pwa({2^n*8K>$
z<Ufs7C#&Px^XXy9L~2q4jyPLn2AoZ;evVxub;x^hYfB@gQ?M?WvE~OLe4gZ?JNyzx
zS?woa$DNovQunw<WMTriZ#v$#u@GG=j0R+knpFCUBa<&k6^;>N1`qqqVEkL&{kJH=
z5k9@+(fV}m0Dc|c(KMgL6#$51Y|jKeM?JmT8B)j5=m%7uJ~GKtpCXAASttziA-vdk
zJOMoUrg&jQvc_%{{~;vh>pcAZtIY8BBh7kb8JbI`IFLG$?iqO&MFgbel;KvI23Oy1
zRM;p}2NOR)ouJW0CHUyd20AU|1X}*Xc7xcWR?LQMaN#{tX=bmPQQio&>Lt!et$)%|
zi^L~FjVRiMla`}=yOxlL68~y5Cc6O~Ndz$_MKY<vK_OI=1yDp)Sw!jQ^T+#ugGSk}
zfcow~8;Le587d?_Na<OoqiE%q2$PpWFayd^##q#?SklxcfN!O!ZKSB@c~gnJ#5yn{
zX@(|3hH1jeiW;FHM0I$QhPE1ZqUWlmr0FeQGiyi|b&k%Ik{N;*-MC-PGS$>(ewp;A
zI#sgVUD$0lw;FEj)z;tA5h7$yq%+je<mv~j_2mN+!sMXn=A;^B|3e|ipoX=3;46&y
z<@;31#B8q1m!9m_Y?h^lm1VO(w{p5D9uA^zAPDUF-5uN5Rh`2KY`X*Ji4CeYUsZr8
zTzh-&fOP3F4k$Mfv<%S)Li_Q0uA5hFR5ZH+)+Y2r%yGP5PqyVmky$kTH*m}ZxR61I
zbdZ=NPO4~V2^iWj+&x-(f0-x<^h1REsWm$2w5a6lL|V$8TUa?ezjSt4!O*phh+*&?
z4ucFYA2>c0%`mT!q8UFd3hO@yCXYI?a8g5*Lqldk9Z)7;K|~vL*weh@B2|COFRD&H
z8vRaC7tdwZRK<SR)}WM%ExOK`R8$2^a41|rP1ctmpUrhl9;$U;*5zy^T>X@q#q45-
zul(S0oK=r)XopF{L_Q&?WCWrYnWyaXc)n&f>oI?ZiFwE2ozhw7(63s22TS$$kJF=V
zkb@^z)y{rvh19Wp<VLK@`L4mhE!DG-&gPqj^re2v6Bz^e;k@2eUDt&x-t(<kIp<hz
z70U3(MJoc|s^cr)tD84^$*iS~=APeR*TDh6R=KI@?)C`=PaS5ZFMM<FWap9+|Br6V
zFm%^@9sz+8gA8+wTLe@7j=y|!t|gAZa>%}A?BHK)jN__uZi~aUj^E8iL6}_(lu)^_
za9>skmOxyJ+!$S97ZkQKH$?^Zt~E1td8Q{WzBShqC*|m+K3f@$ASxB+{QGVIT^x!(
zx=K~I>%qFgV*bTF*A!;C+_^$h?H8x2YiC1IpJfi}@svpmer3erdMg-|dW9APzUtH+
zu_DFB-5?i9Wldf%LX}N+pa6>}wikgb$kfa_unp0w(>G2$IwNdDl<^|qM7i-<j}vXv
z5zoM`O(D;nDPj&pbDB>n+=K?o-~28v2Xr0^sa)7g#W6|E-GNHA*Ry%5QYl7d%(}i(
z+i0zAu;v6~8k3^t*OcncxRgZG%Tt=9cAu=d3;QceIsTi3$#g8BKOK2+QTkXVF||xF
zUu4!IQCBJxttBoEWaTbJ_^8n5?LKLb)^Cq32`h0Od^K|C*SO|qk&a+;W)O}goWQ(#
z=&{pnQM0tu_%X$tOe+}%0UI6nww5Aq%dE}mcUie1<IYEVZDUc@!m&hohhHaYBpL94
zb)>Dmsj$w+N#@AJ4r^GG@``<0Mxaz^5cW=n(Vf%ikatM^sw!3&zlL?-9wT}@cOm=H
zM${cv!ST4!cv_eh<71T_<!m*<#ptXXR~dEQEW9togsfSawF9_G3Oh$N+8Dyl&6)>k
zbJQyGZ*#-&v1aLJm1+0QtN0YsaVQoiR^14t0Zm6Hdn9r6Bp1l5)~ZbJ*1@!LL4zw%
zy343q?V>79WcDQXbdk%{5wNTUv9n<`b&nxyOQkZ!$5j>i<EMxd1oXnXxu-_xsDw4u
z=0_AHXaub_>z+v5=`xBb#1p<H+t$t~l;W(?8PdU1jP#8{U)n)Xt23bL(MPtfQ<O)v
z$wLZn``hktlJ+C?XYi%V=|w6IHEaElU=$qQ&S@E2+y1O}JE<m3a?h7$*^c@l%%L*I
z^osVWR;WsefB>JD0u<<x?)woI9EZn!Oz?!}pQC0ILc8kw$1wz`^8{!3b~lWc<7W|3
z(?lF3$jQ_ic_@QQHKcHIGGMI{b|o(Bnw%#s5hwjTUB$$`73(v$tD%cmNP%ufa%+kG
zxu91Af&R=m^7^5}ZTY@VG|G7^#AI(%QjpkFZ>l%F)>_qS{YhnXcVeZ&{<fE{=%vQ%
zNNhIErMgXL?xkC1h+mHI3MyoyovdAlAP$vWxXtlh+gSs27sjO!MsaG^DyIi4IfHG`
z)(u>l&FSQ-ct1ai{^JUHZOj^5H}xj%gx%ewgU#4yEqpzC`jiz1f93J_>#ShqvAy?R
z0o#4Y$h(d8##UEqZVq`;7<=?@oh(<oStdOxO(FG!&vL2%Utf>4zul48B7d|$sPwC?
zCfi9iy6Febo~~2ZhLo;b^5$`yQ){~-Eajxppt{6lns58x*FmgZLEykW;RIWAYg-MV
z*S!TxubmGsgom^iTva4|1n?}BCNdu37x?X2fQ~#q1NbcPn{)T|Zp1H0?h{kJ^6#)O
z_7~wly|aZxf3F;6@ySq1FJ|r7y=k#@rPueHz5fOf`Q3|{Lh^X^d$E`L-q-anE(3o?
zdO&~CT}R~gKLLX9^wx+3P&o~cd`Np0!R3XivCHUX06d;I`2nB~op?J;?pf>{4?2|$
z;L?UDB{#Eth0q)AxcOAoj?=i8#GXMp`Mkal*EkT-aYk@rjSush(JJKG@^g8COIuIq
zi#8R=e15zuEq=^+Qm}Qd#}KP+<Xvt5UMm^NIA2h5&OhVz*TW`QfP{aP+vQz9>VLH8
zN>{4MEWrst%F-~_%TluK(Qv<@!y!+AR1^oxIqoxd%;xg>=bV1eKA`DhKU(Zp(*^Ln
z^P#3`Fl+Evx8Wj=$_6}oE?p|>S<7(7LDq8{2p&wq`B0HI0?wnD;1)F(_#7`klsUR6
zPu{@+X?EiJ1L6H@cIPgjY$*F?^?3386&v~Uc#rl7c@KSXu^AZ3Qsy9ov4Q?`&puyA
zn_G+-6Tf-bEX&GPqZMiNj`~e;`VVU}WPX?79~TV5uu5xq=oxlrJ!KDf4tf3ap}&1F
zA{|X<C)QQ0T1za~2Yhkjs>~WQc`W-LimrU#VI&&e-(dDf5h6yw2x4)n#Uj~aV3mR$
zT5k9U&{igMKTzJ>DSgV|c#KE787%U<TRq{iaDrdu&#tFG^`r2;%c=9y*DvH31PV?y
zL%FrIZ5Ml6dOAy3c)mJUe^TEc+4U8ON7fP`WDFjnAz%rTA_yodBVY=mA_&O0oeq?9
zG*<po0CH9_KSk*cHBtZWCryikn^+N;8WFCAK9KA_J9cyF71udX%xk0>GN%cN3P_@+
z0V3ByySQ=|lc=n2Gzfebpp4}wF4sMT9Zh3LI1gC+1$1rFDL-|-MD^JcpS}BtfF=ZA
z{qO#JrYhnv3(PR`Xd$_i3mp<!OEY$Oeiw0@N9Qennf2H#I*p?cU{*{!ZjB&*C=y2D
z^CEI4n;4`dtJ4XJNNIn#fKvDMI0aJN*UjI>T3yd&V_FHN*(2z4#@umnb>>7f#}78r
zPIQ8yGdAEv?aLqHcbNTkb^engz#AyQLyW-aP1*bg?j^!_q&UpJrI3dM>YFNNR@+8i
zz?Piv-M1rWPRzVLk9Cm@F@~rQp~I|r=8gid2Y1e1&1}o+9U;>X-E~{y>Y=<q;$1^A
z9?+F#(+=hyN43)V*%4NEi2ZolA_=^IE5`h92}d41!3-mQaaSh}T2-(#to)=7A>X+(
zP+!yTScM89#H^sS55o-rw;j}|Hh?~Jzqi!GIJ=YB5uJ9#UczA+$p?CH;}RSsL=by1
zuByiwG!iHGlp5L!aGOD-9tgn~86hvMlpS!?_Q8!v&Te=MRi}!Qf*Vwj{mA6Mr167r
z^@@nYQb014GNAmil3?*h*1Ib%otwg=2V#53yYyN_>+tFdY>EtiQcjb<#0B>kx0X7#
z44!cy#w!k}oPKQfOoyb#OPQ{Elo2s0#8dGQ8LdJYt!zknQp1u9p(w(Kmr{%6bSv@C
zpm#<MW1)G39%p(e;id}Q)`!%p?M5Y04pu^6YWHgU%ACBNN~6iylWOaYin^bj3hF}?
zUW~7_qB=^93Gqfg;+X|!e^iyi^s+#j3S*NZq3Lb4md`tA1iOEDK|5PJN|Jz{zfM)R
zlb_WF8uE*zc&;bh8UEutf68nlL)f<zdRYxQ1wI}$peVP_oKUYk{CD8RPI68_h>1(G
z7RM6z{y)loXjlm=UMlj3#D_k;ronvSLiDwxM#UZyTa1s3sM`dKWQzD>dW8gDR@Z>j
zJh&gJPZebsz!0MTCyC<x6&1|>E>V2RCt313@v$T|3tv0!`n-ZZu*zh?q%4>_+8g^L
zyW|~aA!Go$E35^X_bCrM8L;H^MlS85H9ZF`d@b%l4=(Mq@w;2i%=p`)5<A`0t2PYd
znf<{dJX;1NDaXxX9UTk+Qme7|_J-Tdw7}?MBa0jz6?XX*SC1};BXF7ig4M*8U2qF5
zqvEXXpnXEsZ~fxF3_i;!L6x6z(eAu04W8=q$GzTzluPCHPt0_xI~1@2fXx&}><wM9
zMV$)x$1T{9665ZH{pK?+wu|35*1rq46=j6azXq9YkkcB!i9_N2F|Kub&h3VGSOdV!
zul+GU7@3V;7Vs?Vz_71&77gFOQNBwC1OLSl1cTBOSTyWY3I>D9Lt@c*WQhc?s8i!v
zG=O7W2ZDVWP#Ob1Uo9F`V*3Nbjp8mC01}|fSuw+=t#wdi(R9b77md$Ff<fD(?E1jK
zv1l-4{derYn-^@C8z~sJgW>+42M-nv4oJ^)fnnW<yMG$z4OqecTk+v%!@350Tk@}A
zSwEfNo;O&C@jqo*2l3^cH*gmUR{eA<7_bu#wpCmE@5hFV2C1L;77g%`U|Zcecp$K8
z>>vvU?MIzb5Zs>hy<Oa<v{CMVc%1bON7$hJY^U9J7z|KgWBg6`3jH^NTu0)zK5_TD
zVq~_+n`4er>~TwUP<@1gt9F&{gYiAm?DKm%SQm|lEkt5FV(krF+c!0&&e)AjlDlkW
zZg(LauwD@Hsi*L<9kyW1vh>y9Md>TQ&yNCIeDiIRe6PKBkGb&R5Aw9`H|=S;U0xG+
zv~SnssbkHoYk8%gde0-*W|LR@@^o|cb?;0VPw@0t@~lTldwSnDcZZeg?jF2GHyxRq
z@ode#l7Z9%j@Z;{E^k(v^5VG{U$@4(<zJmsj!V^X@6*ifPBlf0#)sysrXRrBs4qiS
z1O6PIytU|7O8I=f=e!en{OIXRZtugZ)GJ~=V(O2$$<e#Uj0n?Y_q9P?oIl8`a1O(C
znthvPP-3j@L^bxhdVOCSdxkV_xQ3Bktjfe;&1Ek(EZXwxedIMT?x^b^>ulXfw%MzX
zbiErsZl7tyX%8VA#Tyo+B@K0s#M4%FXHNTGJML>o2d?hVX$RJh)eqieFSb26Yc@_-
z)OLX#irVpJWwTEPQGjc#hskSRXRb*Qe&wn|los?LeudJPl0C?$y={PLFK4@$Kt||#
z_$6Q+n5eT%5BiDR^#N;18N1na>x5j&^zW~O#8C;AU|J*jmArCP%H*^U{Y5Z<At4q6
z(`|2%k}AeJUCP4lDS1ifDB5=4a@vhE?(!o{qIhYV8JlBC(jce{(rEt-<q$WNy+_gu
z+gTJ|Jpof03C)uQ44<Z?V|&1=sRhYsRv!5mP%z8+@ToNGf~3rZ`?Y{O2r+}Rn^GOJ
zsSR-P;+B0BBg4fxvP}DHcd-R+HXnU5bMj4TKrDLc>Qpfei3)mdRkIm%KAKT2*bVpZ
z0FjRKl!JNFoC`7=Qa9xanxNa1J&aFQCm2srTs=Btj34bpk`+b^au`rtl@*ag`D0%_
zylySh9Y97)kH9qO0qQKwPyW&MYM={j_2j^s3J45_u~D*3gt7|h+eSm!dYNAB;2fV}
z966)RJT|O`-_=mFji<9GClccsfY=0bCGnK3#x`>HEe9l8KdG7YPxE;;o3N!leSRx8
z$9tIqb`1uEyuy{*3c^b}SF$}c(Br=@2%DrGqgXtRpfZa0QI;wN>^*~)1dh_IQ5wZL
zF8$pujnV;+-iA;m7+Yr$`-XmA&!LGt*a2`C@2ZB;)Efs4BH?W9luuiv*@!J%sDxo7
z6KEo)KV8zDwE%<%h$0-hX7m<-avWC=q8EhMlz^sa2wXq|sJklz;n>L)sNkn7iANEp
z{aL!onS{0O>07#%VQM}s(P(MrHdB@(%;XoPt{zBy^zTzb!fxKa#N9?Outo~CC<u}7
zc(+V=g;0Urj*h-Sz|tsRs+L@`uU#c$-I?NJnzHrQhPK>iT`IuMQD$DBPs4lKy*m$c
zg*N+BxWc7In!YPc;!pv*ZU7~ZGpR?)ddM8E6^+%i_qA_L09F)rlXuvQ3FJ)BK>2F^
zp@yAUu<Vo&A-(%qL5b6=bU$ySdOuRd+?QIeZhoYUzQYZdQ@#E~0RR;grRujppwRvl
znHE?apw|M4I`>udlwl0m9H86_AK!j0eC}}tHRXfU=C-5~liQ1O5)dJk8)NnP02I*+
znnhZrA{o#HfGGm1swr&T)C(Gcp(%b4*=z<9gCHHSzriWZ`ysdel{9<<mhAz{{K)`v
za9aHU*X?4c<KH_%)ZsMT**Vz0NFHqR8mSEd+d@erqe5ax2&!ReD@Cy4HY`$T+$eJR
zNk4Jp>KRi|osVo)O0XHh+4!^|Lw#-y)rR|aCpT5`*Ao-Gfkfz8RANCtr4_}AXxo-{
zL$9S5I4Z5XpCk7U={*=^mnyeDp?<D++O*bC388Nl@IvtBu0XJz*S2ZoAfzn<>L7(n
zy8oM>Tn=5eQyxME&epml5}h!5>yeo%Gt~;!@u|@8ZGhkFlV39{Ous?ndaZaf1D@1f
z2e>vV<?t!FuyE;bYa}sUPEr^W&_>F*5O=juS1SXJ>jjP$PJ!t^7ugD70)E4eva#RN
z0;7*6n^G&&XoI5705MXhi4(%kcwPN3uVLLpVhaSad6dFfIDw(OD25w$j&$=YEsbMm
zN4{ZvK|!F&GEUQl3#C0$bZ@di9WZ#8C#%jd{<v=OsHySah>*1VmIV7qwhe>isrQ?<
zB0)ru8}L8zb5Sr`R<eDq8Ru8~o>3xCdJk-IVoXje$dV3&S_%onf8^7ZdP=VhF6W2p
z^%T|^Tuu+wZ@M?pzReWG&@akRxgVj+b#Tr4HMlEW4Z@>+jQ3>Eg+;5wkU$zLdId|!
z4hQ|pB!HkD6VJHhYlLY?g4>-A5|JDwA~bN6i1~g}!)cB8zGQu1xR(MsU1_3Q!!_E%
zxJw0O7<{}XA{CwCDG{R*LxiM35t=wkM11gdsEU^f|G_g-BG?4)W6!m<z9=VC(D_JQ
z*xqRp%JvO&=HmET>z{%A8pGMYIA4~_H3rK0Mxgj!DAn#O<r{<K?<jiudm4{#m!Ol3
zP2u%9AB1FMO^k_DqH}^ZM7Geero|&b+k6=ZbV4->w$PDFLPsbndNT~-glU$h(4EKq
z??rGP@!>w;^LfbrWER|L{tl1<7xJ+c_yYEK0JeFLF?~n?+|l=2M;QIMJYsQ=%8l37
z9euf6c3_=&Nw~K+24tfqIB;%5(BBBR3f};laB)!Si5YCz{~<`I8gs&pe>5OC4e5UV
zDx+GsX)Z0UXZ51(gO8nCmy|-7sg%?$3U?0ulyTc!``z%e0@03WOaf~~irjYOcQzEZ
zQUF`@l5Rc9HDR(bqtz<Bx7n<w5p?NF3By#8Z<Yyn3RC!bNVpfE(2|mQ++DzFhittf
z6+vm)^79%BSL@!4S@9pIgsL$2W-o`0j!*6`;$amrN^-(BT1*q}9VFa2jJsp(UrD+7
z8%`YE{XK@)_kCO#abR37N7Z%KiSVSarH<o&Aep@k{#91XkQHxazqIyxfasba)yB~i
zd2;!6ol7EqFCwpUu*gsy9X<R_!hHk30%S!QgoUX=XXi7(n%a$r0P7Z32v`#33hP;v
zN#_@Rz4?(Q^Bf05r_?Pl9{Ud<Gmz*D{GRdFfoGj<C4&FRUk9B_u5{z-^*ww=H_?@y
z5>>Vr7Y-zK%Uab!EWgd@_l%qs;Vk1OP%#*cK9~jC{af_$&p~%|G@^TDMn{bL^4Yco
z=CP&Top15SJTPRc9^XfFXr<aC(fE%nb0Az%f#lQ=u7RZ7812fNha<caaB>hD+X*C#
zEGYj&J#nBCGb8KFq+5ztXTN^kbBCZ_q9wEW7|qLT&XF_UE<kgeFcIOgU(FZSRzT@i
z&m2rGVujcHGHoGu&BXv8>zN+E$lhC7nGH*<O#Y8YE)-tzq`_+RjHzY8>^!oZ{}f7A
z%Jq0^x|16Z);=EA`$F*z*qayQV9HBZzdM_rKHsEWUrj$<KR>r`d8qrG39=e6t%P3g
zhe2z$>suE$dBjwoWPs*RcgBzWH^e@@J)%h6|Drc*Cd;FhS-0G+H*Vh5YiHogj;?-s
zQ(^*SEE+m(ZLrBd>WVbf!p{=<jbH8Ct(v7arv3xhcK!C*I=L)$L96b%t=`3QKU+|W
zf5nQ4L#EEpHav8rJ$gjS-Fv3=NiX}!UCLUP@Gj4~9F<K2a0`(Uz!w=Fh$?00G*k0w
zpiN^iK-6h`W4cDs70RM0(?h->CJtZ+?SP33!bLl5>Kx(S7L~48SkNX-CR1*o?~3^<
zZ;BV(^K6#eATs9qnbwh(&22$Hnp5P&=?)^@3JQ;tq~Jb)V`GttqCm!45EW(L|0vNW
zFc*Oh<yYYO!fc*9SG~W2^HCqyCSfN}F&Qe%LvH(Cc5^ksF%(FerU3*fk=J(fbYvb_
z5VdFi3-jN<Cpl?vRq$z53{;{&bh{IWURs)lGDjf{Jw$SZ(>EiId>OH!m-EMrEJ&lK
zEiKj%Xd-v?BRyjhAodiVrb2)wCO^%2mdm#T185(8#I1gsX3W0-nqvhUOk`_``8<P7
zHsJwP5e5=P<9~wQd7aeka&^{*0b=3qAzj-D5W?>c?jZX~ft19xo(A&klUd?NDY0oh
zSQ$1fTL&E_=2=u0;g;E2o=lDnOsKX<qbdId5emDHscT<#1f4;d>4`t#x}Y%CkEc~t
zR|Vg=s2AB;L;)cq@04^j`o?0kY-6_=p$CUWFdR3eV#8%yr@NrD;moE{|0_j(AS-qt
z8)^?4hZyptbZ4NC01=RrM%}67*%q_|KJXpZ?DM-D;+Dux6~5CgF|_9_d@d8S<DhMa
zkyo8GE8c5K6nLq0E8rv9UA;uXYjG$al7+u9A+&(Yrq_wcjHHorI2A>coe}NPiNBJp
zIzr%XmV#&XvbT@eAz|x}WWl;i;I7#<FIMPh<V>=R$BJC_{6PT*&@zj|pWzIhM*Wv5
z12l%b%qhpQj?D-ET(0IZH45udVziCqb;&+%tF%eeZhu)a&TR#gS8#J*@gQG(;L3~5
zjJ>PdpypDa_GGE9@%W$c*Bsq^`C;_fJtR%_HM>=p<ut&xi(B6reezB_WctnE(9&HM
zPVARKAt(G>`gAT4k{f^QSm+$*(Tqj==lq<9s+1T-?3c%ZQLp~3&JziRr|9-Pu2m^R
zZI{-3>)^-9BowDIKg65Z{XTiED2HESL~EzErqc`teYV&Bxc4{>AG*l>zHG0cuSaug
zjBLny7Q$7ws4;Y1*4b~w!{bH_dFZaQ7%*@+HR1z^RS9>t!GCf&@6-_$MajYE>F4A1
zjWcmK@%i|3&AzlSBLpXM_uh5)cYlWO_x@_6lRna*r{m+lt$gS^Vd03gCs)4F_(F4~
z-62vxDqRNW=}2dm?Qb_h5xjx(FC?l*?z<Gj?yfU^yX_w8drjx-a^=!&QiZB{)UY5H
z_)G}qnJ{r16IM|4<R~!NP?PcRF#7QOZ$00WPVe(X-ycaFf#3J7M@1G_U!kzQs6H-7
zAb_y`SXg!-=;SFqRKGVOg?@HrlzA{}2y1TZ=nmSmtYiQfVwrabU>->ItSGO)S))JO
zo04kdSuAD6V=?)OcFxTMlo8+NUt{>Rqj55eUhPQA=~xvFFtTP{8<-;T9Y!10G94R$
zkNPU&Ke9|v6ipCOGN~ylin?vBZB7(*TWY$wf{x#|LnxA48*N8aq&FjN$1{oTk5yy#
zfI~ey>N+0bsvOn{XEdc#8sg^fkXo*__yu+<L@6KUeErFpX;$#ho=q&4zKtIlJciT|
zgH{eug6`gbNY6qBT_5K#O*B&*e}&qnZ4kEm#xI^HJof7PGjep7)qf<k4xD<@!^-vb
zmY)Ao#_mUw6I@Z#kV^emrNs2@z1ua--qhCe^1e{3jrTtfquLZ4uPGpZqoTO8D{j6O
zLa8GagaMu2BVZl&zQ(i;FvSj8RIEzSt0#^Z*|_Z&vD?v0Q`7(~`!?W+PM?0Gs|i;!
zY4#<<Kv?12OsYDpNt`cdkkV#LbO$ZmA{d)570oc3ZyeD02O=M7bbKUjIkNKi`w>?|
z#6k_Ky*%4S)Jz>18mbGlI~Du0HR8%%JlOJjE>8b+xco$*u4%Ij?DOu>-q1j9Z$b?&
zr;6l4dX;EKdwURcd^KT|NQvIHUxW~nSy@zxg!+H<AWX~J5rg;9dk~mp?1@JQ&Uz3y
z{wu-;Jx7<VuGEZpa?YleZEVb`mn(aFT0k$4b2s3xS*V91-LXK-Vz3ll9UkiR<hBG>
zBTV<uW{9?Qt+sH}sM^STEQMpHvZ#N>jkf#s1Z+V$AM%jeb`35vbfCDfO-aaWMY<TU
zy7_X_b!KIfm0ln@OLh5#;I2R^!8PBKR^?uPsQ%SCoYoYZ73$KB1dk8J2@Go&?8Lm<
z4N5~p`xVclh`_R{O#}fbi=xP&-r&X*SvfH<0TGxQ^0by8W&-yCNngEQQr#Ejcqro8
zsqcn71x>YSDr&tm>iE)>IT5DLur5ejGEZxKWIT-4ypt_^=*rjOtYd71Ei#y{L{Lg2
zDQ6iHFq)zSqBXeeVg-T)2ruwUkK~JRum|vE&YL`Il88uq5-V@1lY~fbwbV;Rq_<h>
zry?-eF7-ZzL|A6O=8}iVXt&VMDH)Z~Vx2?47+j;#4(AC#7_?gy5<7gc9(th7M3<yO
zCw%R8Pg6R{3vF?N6>&nw2`+3h0+3xfLrP$WZbX)&p1UC8wiG$eN1YdlUKR@~)5#qb
zpw1|MQ{e`CD}J|Oe1n44cJJ`Pl^FNeKoEJ9p=%%9$AhVc8*ONZL_lU-`9bZ%Fa};h
z8@vQ}^v1{qzFF4N@&@go&jmZ0c7qT*o&>~--@2OU8q8r|^mI|o$9z<?gzM)*-T1w$
z(KSzG8U|*i{p*{1*w5NS@3j}Bi2U&loi6?H#jmyIe@RErqmKj7m-urwq&Z16ry`Vu
z++HdZ$v>q%?lkgOMM1037={>JL$%cd|8Q~qO*g2ioe^i(N!v=s@ULB4X=!~|XIb}8
zm~#_iT&6jTC#eifjPT(K?%jJ<zYm3e5rmQ1A=|^inX-_MJWv_F|H6@*5Bb8HHPH2x
zuj+wS6#iVX+^wyDXHT?f%q3t(L`vn9%{UU7A!d^q_<Y3>>_4qWK<rnsM!hX8I;3Z}
z@lwCL3{~fP;|N4CN}Vf!jR@H6MqIuOFX$^LAUd`|wyGIzZZAHuI_~9LHr>@0L{WKJ
z^qM_&;lagIRD<Uo)E-0AEj8MSEsi}XvkHL=eR$Jwqwc<3#GXi2x4bN-aw$KWl6L$u
zGs(#6#zg`dtj)wS7#vAOaT{RQ+kpu$UWr=95>}CC$%&JF<l&yEy~&L%0hOqm3)@g-
zo22uW<@Z9Zz7};$d-<<CjPjKKo=Z)G_j-rdE6{@-!_UKEe%kKIqVL*cxMnyQ{d}I=
zd+z*uNdNo&9lQH|Kgsvo$A|tX(xXXx`ulkMFk;cJC7U~&V*jH8FVd5xuN!TCxYQCz
zIxv}KISj}5|J(8Zd9Ql<`=92jI59zxD0Bb-8#Mp`>i<8%Np2jphEBE~|BJion8(_A
zODrirP@l2T0^c&203Zp8R9h~`#?HPvM|`BWa|a0(3?z(*jQ{|UKvY!G@5^-#7$abR
zNRRYi^^2MKv5dTYUza)9@Pv6u-{j&iO~faQR&q#Lp`TE1RPq-~hvxBc<Fz4tmhz*a
z;DkG5>~5dGc(44CzY;yUz4`}{9CLCvtneeS-1s;=OYue4XPF;R#x5vcEYoGO>hV&_
zF;r3ld?K7%8;C)*HPU0ehiKX@Z{%T44HJ~bqi8~+CxVg?JD#i)lE`p$x+F$NqWFYv
z!vE{7y5Ei%Zr%npK<`iX?gz<7OgQj*Yp?J9ef?Q$qK{UmBzOv@kq_RWf;Y;@Lt+oN
zjOLMViuU`vy`7B-45Wdc;pn+|;`AMe{x_apIE&He6XYLo>c2=ZXDMR#c5HjRmwb10
zzx%_fm%L_|RPulhMQcCKQzwB@My{hswzSLis^0IKfN6rbx4<e3dsx4%U?oH)Ni`np
z(-MmR`|uNf_xt&p{f0zG%m<3VA7KX(ac(E5EOjfmE3^t&^Oi3#>5~e?O1Xbe2@`@j
zL1CI?gK%sgli!=ZOYZ4&MAzK=VWI>gf<GTn0?==Fo+M^avq2?!$YP%4{WZjX#pwC<
z;@tq=5Re)UmcY0G7$oEY!s%X|=Z!p~iRWR#i^+WKa}Z>BiexEf#+Y$J({TZ*7*;Tq
z@X7(yAcsKO0T;mxmYIh9(H%HcmbheS4`$rJHv=HfLr&1PEP5#OI173ukw~?s4N{<l
zPfH4uCK$KrnEpUD=?JIcjPWg$7?rXc5W2)d>?w1t42*)|0Zo<)aPHvCFK}#tzUTL|
z(@qkjn~#Vj!r5bZSu+Kmrr&|tL0$O7ISSekMJfi&unA%!yPJnOD5I2BJBWkncz_K7
zq5(PNEo8rd5J=FX|L&ioltAmEnDDST6WEX$O$JpVD5^>%0RfOWRv|9bYy(PtK$7f(
zF32M7+<DQ13k!o09@)e3f=TQm%zJx=M`Ll%a1^M;+$5FZQIp5(r4~U!9GQIzs07o@
z2oQK^h)eb|SflXB_Y&xX^B~~J0Lv03X2xx-LjJjut{+Ir=xtu6K>7ls9^^`4F_RlQ
z?MWGCF3>cb0gln1ohB2>JgGW+F^+~JQ>4PXWF%@z7C*C>zOKR3^Cpx)Py?vp6xBFX
zj5(PTsxHX+k-4kC@A4n4=^mbM1RmcHpj+uI%NTB!b%qT$x}Bz3LRVm}-|z><%%dtU
z&sEQ*@X4pdGL6&h=HtH<H6Y2TG7hInF^}kozR2Qij#-K#Tov?CMG<siG3fak@Y9P1
zc!L_p63Ha)7WrjGD^j%Qy5RqCVlhRsg{?uPLRnMWq$Y)|!zLlRq<l+E@bL96J-qNc
ztR$dLkWmn)AJjd#^^Yd0$xY(++Q*OVP1o+z=<3P8CQds&pNT)d8@GK#w)_(GTd&kT
z!kgGEH&bd~fS-6fE*r+UW=L%rm2am&Aufcfwz3Q}eBa@cJ2PoNyh|H4`~f^LoKO5t
z4qhyJN|}Hz#{Fb_KX2g0FVvYWoBY4Ni%D1LKG1G}-y>h}{($>a=<@_il2T^_r%fk|
zHl29Hy=+`#Cs%7r7tg7FNFsV2K-BgFP0H*qXs1P>6D%3Y7brnb&)Mz%;eGl)Yc8Ls
zk2357N=~?DPBf>cQ^TBCGJ5gex6*l%WQx*DECLIZs884z!GJFM6OlH)u|L%Serf<|
z8FOBBt9Qb~Vw9eaEa9IZS1EdEZwhdjB6kFX7TJ#Nj!W3%ROmf*cC*Q;Xo?J!$ZIQL
zaehIN?sc-|A4aV?oc+*`!E_*g?I7*)6HG-@98ldcnFJy9P<oe!yP9CwE_Yga<G01z
zI~W1MU%X~LG~p1?4m9x+K4CEDCFFu~;bb4yFnCA?8UrQZ7dfTRWicT#4rGkLLi5nk
zNWtY@Jg&tt;T{YK5oywB7J@?v%@zTzfQe0JO+nKl>?XKhjxmUr2M2=syTL+16pWh<
zCT0bWm^UQyv2IWgGjpBkxvQgAn6=#4S+T)00luzU1srTY=vkux@S9AV((GRw03m2>
zZ40yM0a!v>Z%S(=hxGo!t^RP^<hiT1-kVHZX_k3zUB^YM><pu2mfE@+lJy$MSuz;g
zBAXKIdk2%~otQ!)i#4&P*ehi?4>kWpY4<pu5osA>ofE9+FHIrWbpwa;FjvIZX0jRb
zLbbjEzxIw;ia%6L@+ceN@?7%gcaBDzKd6i{i%qP^8SX#edLQGXoSpEu4#Kt4$Tvqh
z+1Y@nIwp~hO3d^1{L8Erq8t3Ko7(0FhE2OyGdTNUbf3~9M`J((S~Df>TZ1wxxr4Wf
z1m+{$f+;v~83Q+VAx#8wkWabiohZy*q7>L+6+F|VDXf_@h&4po`x9<bl>2SVrH20j
zBUn=;uo$kJLjM%nXB*!D(ta;=2pQ@O<tPuJiZiZe04l=h)<{nWyL=aPK+b{_8T<mI
zqr{9k5*_!OgdbZlzX#Yze_>oA-2y3`H6us}ku!tn!tgRRPB?~q5S#(wA|JyTYtlg=
z<pj)vkSFj_h?8f`sx`~plZC28NO*LP@boxJevhYruS15+8Kg9XQCDNiw?WLH5*$97
z(kA=^jrpaR5sK)n!>vUBfls*kGiUtejw+wX!umL9Of6T&gJUO_MmG#9SJT)%?1f!{
ztL0$#_z@*tUpH+CTyFrQF(UwpKL9&|9d2XkCHA&BWYP=fZl2&#eL^E6gj@SNgQB9@
zCT8M|;uxx|q}=+oFx?_0Jo*zhEVBf9{;URpJX6L~h*1x=hMeKj1h%<pB<!WC4k<CP
zq0IQnGfM|urt7K}#8c`<deMlh&MI0mXq=_{3NdLJ;-ikdujw6kzz^JB2e~X~Y4eXS
zX;XiyN!z!gq0OeHr_CNgIQ{9~w?%7V*xhmLG;0e7eWRCMKLBBt%|gOLZSoCdb<ol%
ziditFw7T%BmFwRBZz1I-oJDczq?(1unq5ax_p1_Bh%oYnd3jl8xfWOZAm0VH?9vSF
zyUCu|;ML8ZD61WlZ>MiYVHDn;8D)RZ*S_(J1Yn-_Co_#S9~1s!9%5;%%ocLIa6WBz
z%6%Sr&#8d`yheq}@7|5Ig;QAioO#N4{S{qYorC6?&m<?JV%%+<!_}BuEF+X$I7iN~
z8E@`kIL>4@=x|l1mTWD}GJke5ssN|q1OPrW^eT;6qi(O_p(#ftI%CP;Lf2=qX@7)4
z_2?e#Px*DTd+oF*U&`p8`EgNhX0!nH_%3;^*`?b&U<3m~0Aj;mTW+fvQuwtt<M_Nj
zn4MulWV>www=VHBbsZr|P@=(BS+-H|WzWlcfft{Vw~vnrIG4f2ahTYWCWbeEvRrxt
zGak<)&7Al~C2VNSrE6hw?1J`Ukz%xu92e~-la_RS=on*e8oWNx_p1~qwNc)%oa?&h
zj9A_phb|o1;kD_N-8|CM;&?bDg3JdvT0LNFze3)7Lvvo1#bshVelOE+dr=-!8~-6?
z0D1)#D|bUDR#3<#Z&I*0A6@lD6Bv-4)SeNb_&)U|zBzWTt{^#%R)X6=PJt|IoKDp2
z;m$sGQ~nR91XaBUmW7qpFrQl@74V~h*nyBg6`dOrm307;^uLG*3{=>M_r;V1)gwh*
zIaZESo6o1gF|KoVgBGiJ`9|?hlNoy<tjI-r4RTj_te_v{XM%CNeZJyB-;mAj2=Cox
z3v*6c4{LXNZjJ$qo!mpf8%#E1n-pcOy_tcpf>!IZ=I+hmUDlV3V<Gk}r)lQX45Z}s
zZvYxK%O#7+@^MwE8Yfo*&v6L+#@Ccq^J|w66@;jphLIyE8doPLA-l02ZSRsmtoyW-
z&sG(00vQix`7{M>Lm|v9d@_`N{(6eRAQA}!wOYQ*Qe!ou!bJ3)-;T4bV)3Hyub}Rq
zM|*{JW%`VxR?6LRvs+)WCJizUfjNXYJk}d%KgwLC?tFu{?F-pemGFmzK^Uy;M}m}%
zG6)Dm7(l=giaDnq22_M+H5L15FL@e0)1`{=xzGq0@GJjba=xy_dZqblFw+JLwB)sk
z)<sw`Efj_rgjP7gZ0>Z%@P(m}LM=SKdp2<oO?oGIQ6~1{COsLWZX~G(FR-7`97HyF
zM|1I#80{?}_XI%qN%*)GL+~*0uJG`4nXa(XJ@lhbG-?|lW%_8LoM9vPNGz~a$<Qj8
zhWF_rFlz<srgkjBm@P-d0IG-qo=fpogds1d{5i<oqBXT;Mw(AOn5kXG4eq2Zt&)c{
zd<8?dB$xDLxhcs>Aam0@%)KBbl{OfHmm%*Be@6#RB{K%YSy5MA?c%7b?#NIhjFUBh
zf{s9h>-)~K1w+`_9`sn3(uJ2ap$*Dqz|-~%&K|z;lh;dg2FfU8nuf`hcm!YN0PY5k
z%29UIZM&onu3Zu-q9L^O0HhWw<=oNAbK`yG!CDmgYB{`X9ryhNrKlzA#>PuQx9bO-
zfy)}|t|}C7kAMY5#n#5GU_eU0zVVi*WR=N|PGkms;{|cvGMo#m;|>lK&eyGhG<IW#
zDuwYi4<`9tp*0K3uUhBu@VmA-+}>|;tb0OiUK1yA?tbyj;&D;&ED|(1c+rdNf*f2m
zT<%n&tu~k~w%M*$aC5yCTCAjN(bf#dD)j}|=Kit%`ydJj=ES;`?-^#7oJnOB(x@i6
zUc-tvCO8h}b+t(z9*co7#TQx>&}Y0uQom|T#Vv}&jV_CWIL>t$X~V!O-`G3Z5M!`G
zg?FYjAfq+Gs1qoJayTW^nxwii)KZ24W8&8xP}Q^WN-lnxl@G$IS!<QltrsP|Pkah`
zC7p83)*o|Wk7fh*Qn^Iz4JWYO=pbA>xeb`!>;U?ZNSyr6K>&g69R7&O$p?M~SkjZY
zb>H-q^z!L-8#&C2_e@^z={nQOIlNFkPiUvJ-RAN_*H;Bxz3tNwyP%xuC69?Zdtn7i
z!;+WbOC%(G=+kV=R~d}0h?d*K<vA@0B6rF%$Wx7ZhXJZoS5-42r#n<F*fK>cRt!-a
zZv4*51V)aam;po+7`SA^J3?a*5X>RsaSS}Np$*~Dinim5Fh7;b`>F*i@x<^g+r=Dy
z6#7$Ib1hfZ-Kc(A_Yl!zvGR3A=i9>ZUbQ9$I-Qxpl5u`D$5T^P^Yt#XacEIBWK?F8
zUaPEw3OwainAHADT4GsPv&&sfX;9Z>qNno_Wza2oX}Lc8(@Inr`JwZr`CpR<Y1PiB
z5=6<Fkd@;Pmjg5NSuPa4sxu*Fv)wOXApOvGr;kyema*U!Li0O5#nNjdaLat5AiX-L
zg$79j^Tf%(^Uw}Oj!OcM+HJ8Y=iN<MQaniiV^Y%>%rIkmiWOv+mpTz%S9N+a{#P`U
zu^w<e%<WjM6V>pL=ljAJ9IfcT#t-~|W1Yqw8%M`sy8j8<Y|lwMeBFyJ$UxZtbv79F
zG4C!v7k2V|X5bn<mX*6TJPS7xd2l(0h{$e^skZvbEC9G2^p+V9iRk3q_HukLmnB~A
zN?uUo+C97<%U8)NON)hqbwS6SAGakJmm#v&oeK%V7IPt?(7`$DaZac+R|wS*WS8S(
z+j=&8Y%rnSDPPz;pQszsJVYMXH=`C;ZpL>nqyME33A6u~hk>E}jHZs!$_?X2Mz#)T
z{4I;}>k#orcX>rG=#7A~rbM}ZN&Zf~^p7K0;n7O-zPZ$sgvjSGvUZSL_I?Bi;09%W
zq*4WNW+HKYL;pdCA*$#n;CbKJHw-5`)3D4C$mDlok`^?QxC6;bX*MpUxR}bTTx8C#
zNI|WuL+Gbd_;pHo=JEna1y{R^v`Q6P5VAOpUZq+s2+6GacU$$z4!wue@=QFz%@4%#
z3|!K>Cid!ao08pis8!m|s+QC}K^EIeDa+iEV5t5oF3}CNxd*v<CnB@45UP4xu8P48
zS1iT4b;VlSc+j`kD`=sj=;pF{eVdXcd9f={%w-L^YgE#+peH;PD`5~?t@x6;ccqx<
z;?u`ceB{!`P_=Chsd~o)U}Ok>jI*MdnIkNBfY8n4Mww0rj8L&d)71{Fs{`>NB9!<Q
zp&24n4fH=!azB;ukTC|<t&xQ8mfC6?wKX>we6?y=*cihxg#@lAmKNlUYnYhpq4-Ov
z_+#Y7X7Q<-=W~(ov}MBjHp}mHiJg^@1MGzQh|=E7%1xP<T#4_Xpdu#TGWapNrf~nu
z4{c<#tZky$M`o-N(FQDNijvm;6P*>5-=NJqxoIbHQ-+e`H{QgbezCtelgb^r_1X4U
zdL<xheet(eS?Az>1}a#W+Il8aRWwYzriq6|Vl9l4u8E2`$Kq97lW4tu9%eN)gzy%w
zRhCZ^V_C}V7`%Dhu1J(|`lxgIq}yY$ydK}pd8wtk9%r!S=GN3u29;f7{J=mm@!v%(
zOd`1K5=q1-958PC{FL`2jokVaB%P%A+C3?%pLCZ`v1T@*>u7PKDP~PNRgduXN&h>H
z*Mh&AfUrHJAJh(3Ufh1vdsJ*fw}vP{Xnb$I*)d=dGhX$$I}3*GdX77N9{}Symfxv8
z?7vQ3efPSW-H(^4+m-my7ii<89tG~N#@BDo;T4il+`F6>8K18yl6JPang_F_x34*-
zM;dEPkBik)9e$K(zTeF@|C^TFwR&+~I7PxURN`Mn2F7^hORs3Tv=G5vOWC5df#tQ4
zv(MHV{*OxMm!sqIEA*WSdEZXAA-S#FS9^;XoPqmmwMCxH7wxMw$fNqP{PvsZwjZZ$
zR_%A<D75T?+ystiZ+jvy_1-~<L?1>#k^4TrehVs<w7u}}9%Pou9Tfja=cJeV)wO(g
zfzxDe4HoYW!GTQrPTw*Jja>`w7$Mrx8#DYRV&JYV9d~Yu+jQL&_p`~HpP;5!CM+x4
zF4&2^U(hP$SIhbIC&C>$8AuvL$UM%x$FBa+C)lw1{w6bvAjTqS4SEKsx{!KGsEgRE
zopkzFgL{```DsV|Uw{@7AlJSA0lU{ikvwylb?w3MCU)(TA5=EbAbjqA0rwsA5J#+g
zRZGaoGv_9<?XG`%=GXwB6Eg<1{gIb+5NPJ|>`9L{tl@~05cwJE)%%}Mj8@3qh5Q5f
zN3X`OyNEcT&H-*bS9|*&fbiQkfUwP22qJ;B1Y_y}VQ?J^r~2;X>K19h?+&m(w%$%F
zZu`W>!JMd;@~|y#2e6;Sg@$695tPO;9!HakjAncpnyUsH(Tv^h+@tq?^?1e}Z|_US
zFwi;p$mSW@(7T%+lJR|O8*vo4_tj_SJ8Shfg6aO4N9j*=eXr!}XAS{%??C`?W`x6j
zL3im76yBm+nkTwy-?bbExOr|ue31_s{~ohgm5uHV>SON6rVbPO9;17X!S?7SG<-<>
z0*)H|*~V>BjWG%<bFL@f9!w5b_(!ICB@*<Xxp3-WI^Kb3@f>nv7oN@kql+w4#58%s
zVdY@szJAPPJEr@O8E%;8yHyL!Dg;)6TirAwRV#i~L-_xri2*32JE5*j`BoY>S$;b%
zgjtARcht7Zr_dC$j@%RZn)5k2c+LE?=r5OKnb0l>I$cN;%t5C)#JYFy@9UxI?Q7Au
z9PCp8`&JENzaMK>U@GWv&GmRFHYR|j?D9I*7p7`XggY}W=LOhsC#2!GCxa|{{7ZA<
zqlOq_z~JvHcc3`b&~=T12>QgcOQ-Ungdz8MIQdyz-r%Pyx@OSmOGzO6Fok*Tk&Z(*
zk~xOdZM5H5g%#v90t#+2V4p-ZVtM2J$Q~Xh1Rtf%`mSWu&+T8F06W<?ZdX!IGe6I1
zc52jF`Oqu$9(=cn-P>Gr-I&zPFT8=$SL7xFuhcvrAf8qY=^SS^lTgoTCoaY3^2&8G
zFa`HkdIW2dD}|k@2Nvd`+BXO%H3MbL;JR1E5+H`&O~K=tEn6$ZzR)D3#L1)#E}zdu
z=E<FyQ5YjpR|QP_&jsCQ;5LAC`#=PUt7c)?`4cis!g&t1lllkLE_eGs<^FibVFqVX
z004m+005f*Rql6lFf?`kzjD7D$N!@DU;lr4|3oJ~W8$&y1eqWVgU80h>fy-NGAXut
zPR}Ow#1#<ec#$ZQ4nRu9d(NI8Z!ji;d{jw^&F!TM93<dRmY=MAaq5x%yhSQm@q`Ow
z6k59lCTa68qtnreFVl}pE}`h?CIX+!^OI|cpN?4c+g+ddUDCU=OD3Urs_vL16`?nq
zFu!65$`4AZq7!zg(jNweFMm%Ank7on3Q-JFN@~RPqxgBsF3(|rxH*#0A8P$PPltFk
zhj29u5YxsBi>UgNW=PSCY0LDyOCa6RhZ7qtS~_B9w%J+?Tlt`+4j43wd=o$bFo6Cp
zFlk3wK+Njf-oIb{y{|((ta>B@G`S_3OgXg;7O-a!P|N~d^9?3nUaXy+9Z5zS0$FpV
z93QL`4&q+43$E<B&!69i<Zl4XhGC+aAW^pIvL}ch|G!=J#GAhG6%xd(AfO`8mT@4e
zYLNr`Vv<s)DWuyolpOEpp=UB7f5_8h)knzOUT`mUN2H=Y+A<iPE`IEQLeuD=K5bb8
zMv9oT0=CE{j9{!m2oz3fMJ!Pn?1GqQFR#>@qUxARBg}xel45O#7>*ANkqZdW=!7EY
z`>A8U%n_x@4{5~?tQ|T^g0m+UDdAUn{_U*u`rmkeQ9%qE=bM5F-cL3Sy5#pc(yyOL
z&I@_P1RxNI)GkZ3Z4qb`-2vG97L**~@rrPT)bf3J3or=GD0D=v(Ww=h|G+X|>!Qg4
zom>e{fXrI(wz4ycLmX1*{?qfW4%me{@cR>(<A6n_o)s+qI%A>>he^6$b;9-HhAy6;
zk1%#Q@?{$grE%y{;P@KnXgMG8L8P)e#>#`lqG>LUM>yC?Y=dbgXgbs?Fplagq#w_u
zM=-raiHSla(%T$kAh!m-!s&`1U-x^&^NJVY7T6>mY~opjn4qYtpcg8_izB#VBf-Nc
zqz=)0!K&xj2sMCkG=nr18A+7!G!s-P{T1ud5vV5E*j!OfhOwp-SOY{*I0Zri^i3q{
z72gQ-d?SunsTJo*TIZnBj}i-PQCwqHB}zRiEzmCgA-q-#3_&>Pf%1xDI`U_NXoVzF
z>di5pM@$ky8#Gz6{*ghD5&ZE(|A(=22oi;dwsqUKZQHhO+qUgKjnlSm+qP}ncHi^Y
z8@<uJlO$D1RVtIDviI8SqqxR@U06P5g;F{pFmS(+2R{1wS_BYXFMbMR1c2LXD9;1u
z>GQoM&=y}JMW^V7>2uUX3)M-3;SVfF+Ji^j>;&Nh2BAcdZR9TjP?i%ySn_1hna61g
zxuuXSh<65Uai9(@0`Zev?aK)c79*aZk|<$WN~tt~w369<`XpCx+(T=i@QT*p^IYuh
zEE#`)dLq#?om72E+2#}We*;Ep?Rj@~adh`{bZ7j!dl2eq^LAz8;uhBL0b<4M{zjb^
zFI|{?jGiAJ4sU$)ud@g643-<Pe0TxrJ<lyje1<{$d^tOU-ulEMc_i#4q%{|}2_2+{
z3z{)NwjhvLfcTleW|BB9q&<V-&KiIN??f~S(DadvRAUf;W+BhV|9yGfJL{bvo*(D`
z@pB}3Lx(zu2ER+a^?w0)yOw^-qbhny*zx<k9*x7_eIkw6s)E;loh*C(OS%>}6?DEQ
z%9H=;rVnMdC?B0Oj~%0cX1-_q3c<#^_X6p}?=8`q><9Yks{iqGa`^Q?tno}IF|dl_
z{b=1w{_Tt!!s|(kydLkWnP{q+obQG~&~`duyq?Oto`ky|R&546eG5SYHq8jC2H7DN
zF1Y%ZoM-KV;S!Upu}sp|WjHyZPU=UCSV%*GL<$jt$w&o7DhCO)kHiv=gaDHv3@Jr=
zhJ_2Jd#D~%GjBM@>Sv>A`OqO=okT`z5?pwk@fY(U?O(?zJ(onVjEX9IIG4n@Oo=*O
zDG;|G2|fqMQ_s-^h{6(}76?=$z<meONV*Y_EL<tjZ&aZGFnRSVPW%=g`-5aIE=nYI
zuG`Ufevr~m=mUQyuAo>B)-*DuUPp<ZQvl?P?a|qw6jb802D9@QR(b3I5S2X@#3#j3
z$1ICDgeWLYvj_pe*@Y__{LIU%h47pz_8>E*d_Br`?EOJ!v%Z{<Ra7xRS`u?8xt<C;
zCki&z!L$tz12axn9M8MP`e3UhF%1%6w-WGsicN%PUD*X5`(y21hnPHwb<=Gm?Aofq
zC{rx5nENGC&_))UJJ#-Wt|ZP^`h}rCs?f?fvvDYk)QrY4vbe%{kr+e3S5(oNi0aN+
z7d@Dz$Nc>ewkeo)bd-!nGEtR3yoD8hXwg>&#k&e|K$9w~ctC@SG^OL1yF}7t{iS}O
zdrH-&s<OtCn=C@`3bv^hqouf`;|fEAkhAH8JIvlP<4~)F$&Gj4RKdD#I%y@^vZbQ~
z$qx;xF&sM}13alvAdxj(EKsbez7D7!a)fVWh#ZS<-29@)s-mZ6vf<wiJ{V<aFsLvx
zG+=CVOa&QwEX~wc&6;J3)(>->IT%K#COa6;G<P?OhInJX)^fv{B2H8AAw^khG|bF$
z=O;}H0{z+;X>2t8AfwLgJBg~KQLS|JH7|WhiUGqXU66(qcDJfB$>u7LKEw+fTrjrQ
z5OJBp1_Iz(XQ<V4i5Zf)s=%V}*ncyzRxc<kl;luJfrmUy9c|?C&(M<n#T9&0O3tV1
zyyrNeM`oBzgf_CEqlc+wG)zbbw;*1SIwguQ+e72g$N#EaC}~_x5r-`5u>q+nssLHK
z-X$D?E{blD*0)M{h#K#&q$KqoSc>IkO{pdq{B=DS-ek>1WfYiT4YyE|MI{9v@-Tfg
z5Dh971POeG_k$~y2%t7%Hb)4Q%1&?~E(8<aX3L~ILiE{)#xkyiI~r<PMA>gdUQ=6F
zSR>w&OUxJUP7y5fP7;IOVo}bHh`Ysi!%?;IZau>htoAb`;}D;)iGFjWnei-OE`2pz
zCxX23fklPg14^-=SSSxrxgsMi{HIVx7;0w`rR{Ty>_|<_Xi3R<&Kj|*{Hlub=-$Rq
zv($n?6=#n*b}XM8<ZMTdX&~%#{eI<;ijK0xB7;dP3!j&0cc}_-009*Pc)gDF5Dr99
zU>yNm;285WY*TgFT2MnkfELUs`{TAaFzW>ZX>3%aB}6{f{w}GC<$P=`V--46g8BNE
z!BCjKN{4}izWG%OObKR3nClu5qhfo%%qU}Z{q;wRd2qa6Ze(JBIHTj4sN|@za&w*W
zx-oRn(!3^A;Pq?}ZK_9@wMSh#6A<I<B@c&I!@Gw~jAfEnhp@8?o=2EzA6z8w?)~!w
z8=dj4GeM(e!{LV=-1VSXndd*1*>tk5{tPOnBCVq;Q>f`vL@E=gm}JTcEhU5wM*yy3
zK%o=tDYACxm%-Z5DbxU73>0iZke9z__`HRIRStCLpX$euiZm9gJO+ZLPgvk4#G=$i
zeFUx#`ISDw+X9oG2_P$j4Tl18&J_*Jt2sHY3u($MP3uy4OO1EkETJbp9PN+amEVQj
z-9bqBmSsTRa~Qe4+L=8S4)~N(@yo<G@nB`mgrtAbg?ooFZHkVw)n}BR6wFWC^!Z&4
zR}uckprPw=amY(#f?(OaLM5R;aMadk=3@M)Zq-fulpuG1kaC6%Xv5GOF5`9O*PcUk
z#jm&~W_DT>lo_?<o&i!{w-9XeeM1_bTt&F!-@ET!*rfL*zAZD%6od3gG{gq^2`vj%
zT{1?_a@hI9)o**8XEDfllX^5}PgmmojAB~g7ff9^yE6s^eUYXQxK~0eaj^H-<bri1
z7(E=DwR9HJ&|8SV-NshG^$^IqS;5Q?UA=nQ<LpbjwQc5};pZ6J?p1r)p&f50X*EP3
z!&}#aYHNXA;3DwBMk|B{3;SjTQPTsdtUy)BK`E|7?}Xa>2svXF2hJfu7`g-kfCZ6E
zRZpug^X?8dg8hc=4hXLoqrefwg#B{Uh0v~5pKxhO_XB*h+yU2x9r)D@Q|wb>*mVi$
z#zw>`w$7tTbd*m~DLIQExlpV8rjT(BnCY%^xTDFDA-1z1&1Cj)eu(P9riRzZOLF@&
z2)m>o$owY|Tv$wY$qs5>DJS-v@aoM*VUBSP=>$826<Jxkpjo@3gSyRPm$ZXzScDaj
z$-B8Fq)(q#`x%$s479Dbj;+{)CA+jj${ob*&Sh5*P{VZNzX1kl5#W9?pW3hk$x0_1
z1><UD&vA)U458wdL+Lf~`_k+63hFKZD~1`H@$#4`O@@v_B|<31g7;Fuf#agGMiPV=
zoKI1XzMx;dE1$T|w<lD$j0ffyOxVtKv*Mx9mTcEe)EK@JPRDDLNDtGD^=fO#IFWm{
zf=t8h1nhNqr=F~8axN)POOo1j<tf?QW3W>dk7Yi)Dd?)@&mdH~=clm<oPKF0saF+-
zTNi@Lm!6peMFYbFQ%%Qx{SSTKw>5F-`%f*@EwI8AhDOv6qBN5`)Y8nkPW0nfBNVt0
zt@1J_S2K99Ss`qlc@Y%I@&RE!mG<pKPX=J!p}mAB9+N;RW7O?XU|cG8{C)zV$x=bI
z75kUe`r8CF%3vTS+6^$(IrI(hyQkHP+Ic9n?b{@<3g<ot*mlERizCmFhLTjn;p5RF
ztr!PZO;@{9m3%e0O%jQcbdqG!VpQ0&8pg3!h_J0AcZ?0`lA)7o&-3?C6^GT29l9xw
z(*o?PH<hGZMWb|`Gh=Xy{@EA1spcIxa=sZw-O@5vsHqpM)n;j#9IN0hNKn>c;GQOL
z?$cOBGgw_Zl`+(I@nkpl%@+QyDt}$Keqa&{;tL9;tWphwdM{QBB#?aIfj>+F-b78@
zKp~aYAyJ8RWYqD-|G58gme(d3H0;%vvh_rpJRp@dByvw?FC@Beu@&=q_mLk^usl-Q
zT52WrEVYGP39yV*j`Zs=oU{5N^fu~>^t;IGKMS*NTw|UXSZbntQT`cjes4#!e!n-G
zTnTk@L9~T%9PKN#<o!l3;zCm;6~&+&knp{M$e``lhQgwnVQCu=4f<y&s?2L|pD%u)
z<a>g`4;|G^t52h5t6e3L;ZqG&SaE~|#-7c#mSSF~qsu6Pw&g;?yVWpbHQo5v0?VDk
zKU#S?>9@UGZ%d8t#XB`|n4Tts9aN%MEnw>GOHlpYaALZ_R>C{FwE0?0w07M(M9)#j
zN^p_N!t=(^B3;0k)unqUQXT$gKgNr|j?(?&^JGPeTy}#hi^JOiz7`coUU!d2QFmd>
z&z%DJ=wCX(?aB(rVm-Z?-Zw~@kl~;IRCwz|cT0%?C_qa#i}uS(6l)&#zGnvx4t)L3
zKK4zAL+(z(=fE47{x;_|Xdtg(R4lRkBrzEeLs7_4kV4l4AHxSKrv^dFva)U(OBG$u
z_gO`iJ4YMU<*)LnngfrL4kkAK*7cs&fZyHKgjJb#rNB~!4IlxzEgM0s<nvMI?>suA
zOJ$_paTUHR%g(P&R&;RmkXl}5JI67JGKxUin8v33Y=j}YR+H75>xI+3jwO;kPM!78
zG^`^hIi1|zM8_cl9DL3m&JIV!tux%|1${QGvy>6+tf!nk&eAJq>1j|VtQ1BnjdsW*
zSxx75iF58GY)rIKW!s*d3g21bhopaQFdutZ2V<BLqgZEaO63^1`xad3akLePbF*rl
zd}$uuYEVMmtg{OeoIR<7r6@P!s<dE<mTTd3=*qbaZ8zAB*sx<$n}T#jY9{r1Ev900
z^t6<OC8>~pX7o+S>PGdRHRVikTSJ+bpO*-CVM;DXX>D+nVFqD7TWVwX?mQ-X)-3X~
zu-l)Fny@k9`A>yGkt-4SXBjNn#9%M7Pj*==*T0&G1)8YoK|amf4gYxHyLRQJ27+T$
z?VBY!RaMTTZZdX*Mls97E05_Gs5nd2<)qC)YU#+94qQd)%C$rw)eS2doTc2}d`nm7
zGW-`S)4iGdgWGvCM0r`=$zg2p7ig?jMuu2j%i?fnWUlQI5)`<fcy?4y+MVUrr<*r;
z+k(pru@?^zjY=bUTh#~2AHOwWs)feQ;)4~QbYqaN+0c0Fb5<@*FBTT8@<5#V{{51B
ztyFW^st2*O%qq6H5eEt=%GtQArrTGgl$TnU5wkPb3~I{3TfS8#3+x4plk!ZK!PJRt
zhX2BvcG=D4hQ-L0eNfO<IyB8bemBVqWS~+@1>YS)(8x=8D9l{NoVO1lGoJ?kOl7v+
zU3$W_<pWs43qh_|){{#h;d6B@Z&^Y!)$l7?KNc|Q`=`5#OxiIp76Eg*9{d)iYt5_r
zOd5GT1yUy5v<go>Sm3Bdy{Ey?cT<+Eeqfyn575{3`+(B1x|I?W)4qM#Ngh7aS}13G
zueO|2hK!nLrVH}(8o({KW0fu?ja05B*}S7RwGx`sGe@XfTG&a7dKN}wE(H{tU7*gl
zyJW}0XL}0^n=C<G$FPDtS~BR@jy$!O^CBwp?}!E}z^s>{Vkh^ma5B*`)mD5^&93jM
zs@5bZcQ5wPNPq4aqBulRv3rx3le(W})dsUKtxNq?R%^=ZtO3j?xmS(UPY?9;S{<*H
z+#n#k^RMp^Y{T1I6gRoqs%cT0O1}8pWWGA)2ZaBit;Dp<N(=W?xap$#?Np}QKiHfo
zQ`1PlWHznaJ4JkxRnDjv#j)%jAw0_FO#2i~`ph?`%U?3-FPZh6Av}uC{=ZJ%q{ku~
zwYufwl~K*(U9hzlL^ms<m0j!k(sF8J<+kWGFDM^;)?mAEt^ioerZx^6vr<*1yA%h5
z+I`Lq9|PGQ^8(no8T6YB*f=~cTJ<cV(fze*%?>!Fb2h4ZQP>tXkQ^7)dnym(cQLFq
z8-?3Ojt2dBKG?{q_?b*<*Veby%xcxTbG&5m#RXVbwnofWc%9`e%1)pdT7kaXx!lom
zh?GAZPE>i{7H)Y9)-4UB67;<%(ZDI3OpCnVA>HV+C5V09{*z>_rRO+BvQ7%QaGuRF
z9po^MD$(G;UvQBVas)8P0jX+d&C>G;B+<ag&<II}CI^qso)L4$i1wG57VGLR^Nsjx
zg->xZPoq)V<t%UQ_cbD?OuPwG&U?vZGe6iCex@0<)`8mDWOGM+1&f~6*yNZ!{&xdz
zsRXpy7`);~O4uOP{6K4GqPc6{!ljI>RH3DJz+*^2#}qI2=B)bB;j90)YJU05<$CeV
zsz<ny>UPe`Icr&NjW4F|L!vZK#S>V~7yCJ&*9EKje&X^@PHVigW0$-&`=jG)Y9o4r
z7|SUpc8d?Ty+l34wN}8^{_VvEGcQZd7=fmA@xW&va0b1FOTTUS{l$}9>w=T#N$m*{
zxBt{}aMTqBn|9EbD@+zVlVx!x@okmwhLy9go2>eV^_{nEbq05Gcc$Cz)`Cqd<I{yD
z^9J=BZi||$ue(6)HOkNXmC9X3@$jH8=fatD=ZAN-yHw7dtH|X^mt6#p)AeI-&GIte
zG_HM7YPH4msMh$V=@rDew3|GK+qb2B5h_zk{;lrsV)n?^D>f(XudSH#L{;*>o$T?9
zVWU$4ufxF;=c#NfTXC-K-jnBuEO+OIJeU23jn^%My_d)CC+Dfq>t!^1%YC@GfHwE~
zv~Cv{&_~nvD=(N7zE##OyFwH-kNZ`X`xoqyFmQ3F>rN+_6zBEt`OTXDKOq7?xBqbe
zxdON$j$#6-rYKvJ1u)DtLf#|;j3}A{iLv!x(c~nePT}8I-#G8b*pebQU3K;pnVrYZ
z+n&+w*9g3+O|aq<%+RUN^_cWl4LfX1&RUI?Sv}pXUHF;AM_;JkoA5VVml~l}*U*_k
zg{b;GPfI3fuqtl8{$a#lQ7WS(A#N1Y+bCXd9;etDU4TEe;mftE6_W?<M8$dv7HH;V
zS-4_=u2cSo$e`8#N|AzBbA0a@U_&Pg88#QD*Re6goR*J_*Vu5_d}$ZTw7u24_(sDp
zxE8nR4%mjOwTf$8tF5NB#J8#H%BUQ-3&L_*Z}xNzfH$S9-Rqv`8X?s+KGQhsm1jB>
zkUe~fI%<}tVAENlGG;0!D2jt&1S{xOrm8XZdPCow>Q(+=s$yD!x9$zw$qv#*n@^=_
z*EigkjQ5hazW)*B5r3I`e)?`H>E6iTv)q<(Tvr`eN0p_ur;JCI#+Z3a_*0WF@geXL
zwft<*z%81YdWoG=&xEhPOG4FlC2y*0Yp+Q~$Y6@k5K+pC?5a8bCgz@O4mWnJ!ZAX;
zi+m=yrBWsqHaY}V{Qg<bs5lYRvB6IJo2<F{>5;N#6pi0Nb1_d<tgl|Kz<}X8XkcO>
zkec8W*+nhsSx#XP0cT-H6(H`{%4wVfIr07+Z@n)(H&gr9Hx>5GB6@PO81`s?83aFt
ze*-?Br=J~n=Hx)QMXTSe!i~LkV|#A_1$Smi`0WGeLtRnBdFrJ>bbZ;(h)d*5dn%w<
za}z1J&uIfr3Me^3G~K+j1Z9m|CJM`%<G~tM-gzcvdCRD76+D)<OS`WDm@NsGo88Ae
zPDxKV(E<<vD-GHx0Db_aAJ|pk#qV}`kQuI~)XLdZfFE=@*}~R>vg$NCH>AoI_KZ$@
zw+~$ES<tHQwmj9hdn<(t>qjW7dDLQM*b*dFv3mOXF0Yvqv}6(~y27JRN!!03V&_aJ
z;oiOdMMXRLFoZj4;tG!WlEvLrZBVcK2u=;vZgcZ^nzqU_u-fUGHi=e+XO+^eE^mq_
zQfdh}v%R7flBG_aHJ?Luq;-kt1{jB<g)#CF2h4Tbn6HwRW~c##$V2;jQvOYJUqAi0
zRV7_=qNFBDSC0)saT^*4Q5ko6(k9s;igik%SQ5dIc)C3WxqM}*Y7E~AW3&fF6qJfa
zn{STBls<2m5zWwdIblEVCKi_Pf@bO+=YcuVrgr)nLOkpMXz!kY25xP<=U~fmA-Yi3
z0RpxJwa~OgPy{B0YwFL)$S9IP*78|QuMRs01d4qbliz${o31TZXJ902M%ExCb_j8n
znA{?Vh^ftDQhiYyZ32>BIe=uOA_^C?8aXzcg5&TturbC6&Hg$=Nb$|ezYX5nel86p
z)B3zOCcZa4bKIs+O`t4YS$tf^XdfU&m}L0=vQD7iJqtXn+g$4QYy++<TfSJJ1G;M)
zr8L+shufH00|IR#9iP~c&Y=EeQ#*|=$^KRLd-p7al+^uj$*{6a_~eX$V){PnDEI>`
z;&bP1s>A?x4hvwi6WkIXBg5{<nO-vn%hJrgtMc&3?EiY-7PsMxHXx~qEI2cM7F*=-
zUgOtW5x=@`oYH9NdNlKv`~u@HQaHLoC)zm67Sv8##UFEAwPqVX@drCY{&7%3vYO-y
zjU>9q?>ZN%UaiJv1PqC80?h_1Y*J;{h%;lBM8~UuC3g<SPzg#zPFsDyrN%`Ya3bK7
zUk1~LV-m<eU!1i#nZdl7FS0I*O|8p|@TD~^ud&#O_03ZdH1{7_W_*lpXT=X|Zy`-n
zcxBG<L;dqAACa>}j|Swl-!vU+4&CBkInv6PwR@{&JRM=L&MjLA)bV#h$PEE(U0&Zs
zT1piSz}^-A(sH)Jm&0}&rF=wX?E`aR<AEi8*$Xz2S+Wc*lCpL+Vt&mTbxru0pVG7Q
zh_-FZjR7?^NB*B5<Cx~`Akb!et~r!1?Cqs>lcqjcRv}v0q`t%g;{yVdS?mc9CB8@+
ztRRb<&ym)z<;w(#mT{M%rNtajyuviiE(vlTSj5Mt`|GJ=%3R#j`G;8F5b~ycpSAp8
zvXPJ`3qENLVs}9ksDGkNv!njEX<R*way|!$4|^AnZV$b&o=q`v7zbw=$F`7Z{06f*
z>ZwXhHm$U^qn&u)(vu<72~%0ot!(+)k|SDW*|X&QE<Sym^a*fyhUduAM~)f~X;0;0
z!#@6j4(ieiwGU5)9GAxOIi3@-C}2;;2$=|PLcA)X#P+#vk^%%GbR&RYZPA7Kte=*L
zGLCKm<ml6P=Q3#g>J8vmTDSsKr2^Q$eB}KdcRKiw*ntBn(j_FR64P|W{1AZ|_+hs`
znx<?H4iN893an`;q&Nrk!0RXz+(jgE!Lr>yBZ5?2j@o@tUE%l^R)YMRAf1P+>sp6C
zQovqx;;WM4Uh#<j0FHx*?f_jaZA~ng2_<0Hv>RwsU_B+-4JFsq8`qZZ7wh-mmJXHO
zlGAc9w<@k(LbW~M=aC6{i|eUqdk+3wuMWvmtV8B7%H89|P7$MNk!AIa2FcOjQ{lSR
z)9WhrqgO@`4pw<H)hkslf|>-t(coC%E2e+DD(?SCTg5=&FGs8ZmuBerXa+opZ{R@c
zX=Gp}@XjE$a(jh2QLE~uzG_$aoX^qm9T&<yw{M_?LlOgzOTkOW{AJxh+MvAiEJz5L
ze4XrYz$Y}AFstPL&N*5TJN;N04Xl+Zp`@Ng-d}`vy#p@L;O>a&Jn|hwKs6ah3;1Wr
zz7j+QR9$?N#XCWDe<o&U*pbTC^<wFDjJsVXQO{hOoTUA?c{@&gQvn|lY=bb%0!-@8
zV2e{t(gm*0r}TU&H&9!fRcJ6?9hr4UHURGMyxH0J!O+EuPp4jv<0%q6-$x}o2@0;>
zF@^Z5c<CXbBSy_FbJ|Mv%K`?Wl+Kb5>}#u*zO>xW+^&_m^dW7(&|-ly_LkhMM;k0n
zP{1W38w`Qmb6R}s1b(vdLHd1qlPyV{yKA%xUH)OneTr_7V^cW&ait2jlrJorxY=yM
z=^jAdFC3zh^ZEJc7Fo;LB4zGv_cMB}zEgY$r5U)V7TC?;cn%vXgQ_FFIPBx319^uS
zULgfFA1;9xr=o;QI2*n@+lVvw^Yhv<)v*#a`zxJNOKr}VQ1P@OK5}L-=Ny-+03Fl@
zs}_@K@GM?F{l3XmIfZx7sho2rzP4Ap#?X!a$vIsa`L_Quh@?(Rt24redhH)uNtyp9
zg+LOpa*9Lwlr;eHu>)T3a2}t0x2e(2jcnP(p#IlYXKI1?n%L@m;1RiP!Evh0w(SBV
z7^<U@gApoc7g#s?jBn2MEj3cdUFEHv;~<07hPYO6u7=p@)g^1@UxKek!(_UF@k|G8
z79@ur4by@($+bO!{lg<x>mQ_#-=k1|64{dk@X^@!??TvPBljF`O6D>!71evgjC-X`
zH)=4+Fuo?)rU9TWK8Y6hZ495~?dJ0Pf(O0y>9KR=uYE#oLT#e8reco8D;7-h2lqzs
z+%N!8I6UJzn-L@e<?RHk9`+K8#d~U(;a3X{`;ys@;^%(E^9`J<U6h7Ac2ABcrQ;?_
zKvT6h&p@=DzuqsOcdoS5BhK`AXYJg`#as$w)QwJyDelV(dsxhc*8UENSL`++NG&{0
z`eDT3mE#^%A1{x(`6=Hm9<`r0ZULCyol&kfzEZpCP0CAo)lr&;NqXCv@rX~GuAaiw
z1p>*FVXL_XMXHaYt$in5$6H58P5x#-B+JQpbXA<Jp{_CI$&uwB#FHX4VJfLH+z8qh
zfX#k1-dSJ+Bga(V=^Gxg@UY4A!*+>-EV=fTN;ok%ul?@D<cmD<p!oUw55=XZM(AqV
zkjVD*Q9^c37$-r`-ouj;=#xUYw8OcQUiGv%{J{6C*5LPLVus!y`hK1pJT%Zv3kQrf
zInCv=%rva+HFMv>Cio+{6JqiFz(%QWctVHdkDY>WyW79Y)83oK;fPZ&ARb(py%28v
ziH0>Qoc!;9Bb`{ex8`_jJS6t(t6e3k2V(YClC-lk0B&!uCG2)OJw(`R4Q|KmRI1WQ
zhnrO)$iI)({mGmK<CXE}<}k7qGCpkL4CjiHe^9mQcMcd|RUg8cI!{;XVSW-przXuN
zVG$fukD5}MrZAHv!bAw>EA}Zn;<|rdGX1;W3R%E?NLSWwC+F|pm(k^mu5l!LJsj_q
z(q~}vYQOYGY?$dFPIw1^SGa9*Mi?)~LIEH1=lC(R<$xvi+FqkIPU-WabWZ8Lut}4g
z4IxOY+_xzVQNMb{A))e1xv?hyI`r`{C!kFyFwtjv?I`0wpm;_LynkAw-zsf_3m@PL
znwSwJXdy_F9&oZi+Lp0!V!@gsjz){28KPrpf)J}3px5dZuMYCVo)p%dGiZBeMf9<C
ztV7roQgHTh{nQ@4cTlZD4oiO7yq8a{BdfhP?D)U@@U&y-=;?v_Xk>rK(?1wY7+-q&
z;A@1Qn0R`L6#^Aw?wUkH!9LB;TlkyO2?F}Pivt$Yw#&XSGQnPqC3X{AAPGv924K#0
zvdB(mfQeD<!XgVIl5M*KQkw!CaraP8K?VA|mYVP#MrJG>r^H(HriB;!BxL5_*vjhh
z^jD(z&Xvxl8W~561F2@u??*gf0x1?6&dt*cDW8L%$W<*DfuV8}&U+9=*c%RZbwk^T
zD0BCTO`xgqVFfKyJy9!|(WS#B5XokPy}u*m!~xBY-hEB@`LS$BsboA2ZK%Di**5Yv
zs%PSSkxW@MGe#<7=!*gv8qZq<kIp1Q5UDqt#vNf@3mP`?^amX%w`>gGWu79BoT(a5
z*O#rBT32R_Urtj2XH9q%v7zY18Vpl$*sK^n(xxXa14c%sQyJ@OB1k+5W`Tjk&Vqx)
ztlQXn*Xzzrsb1oRQR<m1tRJ|c9dOG(v(@L~4bxs%+b=>6)5S~E@kc~IrN6nO4^lsh
z#_wy+9u^H#J$(|=;<28aSPC8xm{)5E{z=B2iQ{Umyl8ILz23*^(yW$oEwv>=r?_!A
z?Y&m3SJbpc#lGIeCPKN`^4jSp^mFfOF&2J0OmSN2?GJ-^p!en=cdSih4*`tg-uexM
z-G79`zLp&1`g|WR(W_|<N&~l$eXp>Rx?gS8?|t9gq|f;R|Nn(u_m^r1iUa@vI&S|L
zVb_1ME@uZrCu29x|3%m}rDf~9CFb<g^+`=2B~!HE6pCqZN2IAvPAzvaF|lqsE?I1X
zX3fA%U`UUi393fq>-v7}S%R%$kh&+Cl3hU~i$%Z4yUi=lzs+134j*LRY4%xFwlcf*
zAzbIUx%_2#*Riu@S2<b97H?QKV?vRzx19{#v)T5%*=iqj+xk2^)6`$7>#b^^X?kbX
z4CQwRBzqTZz4a2@IQcGY;iZh(YL^A;W_{Tr$gR|Hpx$r%dsl?*@nC`p@~e6qWbKPx
zb;-8I3TL%ZSphj=bqwTgyj22Q;c9SkIbE?}eHav{>Mh#AO`8o@xGJdIgcZyhW^b1d
zx#~x7?)8|uy8HEf&Hmk3vSXV+r6${19i^+ijIayV5xS<jX_s+2o8$ZS=BPOsSfWXL
zd40^B;<@tP&}CJt?(Fn+jDHuH@w=sFd$}U$h~1^Nxw-f0<yz@q&JUu0K5eG`+uo&{
zLEYWqrV%>wO-XSXOdvcMwraIr8;4)-3NClSx>7oyIwM{X9pn$Da#jtGWm1zVV6W@Y
zzI=%`Ssqi~+M=ZoX3N`LG09H@qVR-&H?v8Z5_H3hQu{o66k&Ha@F@ad{Y(#$LVceH
z%XcxN?XKIrTx^G%?pf@=tc|@yx`bg{v!$u6>&@=6Y4tdX)Dg(?^}2J_qTOnz-ii`s
z1xxGI+~MnhXJOr1bDvkUf|rSJE#n$ZgD|;wt*N-n5t|Hd!CtquvKsjDVr?Jy^>SIN
zM5+%i`%HZYL+n#Wf;N^6r;N4gBG^sF3R~6GnY;?bzAMqft<hiH+^!3<Dp$J?Xc}oZ
zKB<OIZBhUHk*nSI)$bX~P~6ZoWDjzw0k->oHJ>^b4|<#?kAU$H7Yci&mP#v{r#F~X
z>DAis4_`d{bD5E~1&E-HF@M!!!s&vN1~z_PlMO!U)Xt+PmWMRcQkM_8)9wDk^Wp}m
zm_sZkJyIFezHfK<=n#F*W%Yg%{OGBDOIOQd@A-!b(_o#~`Axv4Wto)#M`z{k*mv5~
z?!vWmco8(I4O?fRwnD@zOU1gAc_!!01-lxLmI~BRwU*xSprVF7a8sr7!|C+=T%b;y
z9=^h^-vV?64o|fWfXnyEU~25*5wtp&9nN~`rp0<n`&LV<En7cs&))<kP5TfXEr_oc
zHdB3zNXgFk1%|4Md2=&nR^dQ|u(7egDp-H(8o;(~xrL9c`8jW`T8n9E76z8&6dg_)
zl=ZiJk-91@oaO7+G1Q^^`)3)xmeB_qpj#{nK<V<@2bx=7c(7Qzv-*WCo_V#EA-2jW
zlh)zD*D5I29k#>`znk9xR$flSwDr0E&Epue!#TXqJ<Oanr~Ix78@;R7bvo#DxX^0Y
z?defix?9l88>5pLcm`hfx3%{N0#!T=-PL;-WP&McImF9kgG=HijECQwDVKl1$+pgj
z{@*Xg^WS4l<nei<-}8CDeQ+edJ(-A(p>Frw?CtsRvR%3Q&y4mGzV_!Eo5xQ@rQ;mm
z?>kl9{<~4t_Nl^?5{Vvc0#-lg9|ZOnj2(#G)t~q~=FE=BpIDwNe+~M%Hpw5=l|8aI
zvNLmOw@i=XQK-Q?`BUAJzncA^VU@fKHTAPSq}6!&5`8Cr@;jUTs3BL*Lz>RBC*`Yv
zy?V7($wjgQspBb1jS|-GYcJ~SzedLLUjy^s$jml6xtDBO0?=Q!B2pB~A3D1+9FU*}
zyNccre?9Q&Qqyn$uSJc|&XTETOGUHk7)wt2$)lM%2)bJ9#{u!#<$dD&F3%pmD*Xu{
zU&z7eN;0a``F-I9DdTh^dH-&ZIG*ujDlCQ7b_zLvv$Q-NfAjvdW!g5)n?HZGJX##p
z*DKN6=hy9BPH4}^#lgYB@RwmTTP1G1*8;%!2~e;4WF;~SfoddY@Lmue>HYAqPrGYs
z^5_N3WV6Q_2EeusE>CRODE#(@+A$7o=sgbuw`PmMMB=b;Qr`v*UI(^$1*=xXyHDhv
zZjE`F#iROeSGUJ$&aC0qSFV^~`s@I9B8eiBWi!M;CX=+RRl}M-cj`gn=@XA+bko??
z0CbWmr8K72?*N(PUldUN&LWu!p|?vN4AZ12NdidXud=ybi1~&C@`u$CQp*IZ3_;R{
zc+m;wwk8ooq^AM}wq{GBZ&w@FeCX78Pp}5b8c70bMK)I%z6hqo^r`V88uqtH%M&Hx
zxM`)Fd>YqsP)HP|V=8x0$Tp4`<v}@gQ;je~L7@6MGyrB2g!Q!%Nh!BfEi26hoBE)c
zg?dS*2WNCr*eI8(!vqk9Kp9gxzN1h`*)oqX6~du%Lh)=0TT9Ssv~`{d;%f^qV&rrZ
z9$}+8yU2wf(Tf5mD&r{M@`)xHVWlKdu-rD2K$@sRjlXK7O$!x8$t?qvr9>Tck4i~I
zQyfxEsO4jp^)80YB5^gyn2{0`9Vrn+be>@h(8gbLFzrA|O2g3LkdWHv?W}(zlZXQ;
zP}2Ln{uWy197U4h3&D1k#TSrI>YR2c@B~9Ef6W1nYe)b#H(iK^jXP_JXmg#L3~4Z}
zpw`5*P=pC1<>f~t_hqs)Imne#sd9c2n52cb6UYvjDWV;tcqdB|%StIm0f6V5o(dB|
zDN4)$CboerBFY4S7vn;sW6>pdEdW%gG>{}NkWdv6k^KvA2ns0zC`FI{-N#HyYM)Ye
zo9P%6MYML67-Av?L^O3oJB6{&E`zWhxSOf2Bg#hz-wtn(=Rhc7fw4a-hC%iMq)1<Y
zi1N)CWHpp%lTgWr8Z`v{aShTTiPuz4BO>z`K#6EQMj!?+;4v$G#Gnj-A%ZZekBli+
zK+B&{Ik5<nF+5;0^9WWI!X`UvQrrtxLRvahIy@X>H~(7{Dv<_)l*i2k!xRJ4oWcb6
z6&7dYgpek4JSB~Z26QeE+krDS3+k+b4m$zvpr~aQG&qr0BuJ@5&BXW)02Jube}c-j
zm>#VmK*TO08Cg&j>!RW`#3Ad!mYn=%SXzh#P0QLZ7`1iMl4l|%yoUfSLk4Nm2E}a`
zgWzTCS+C^aXaoV*0ip}IVv-<|5fLJL@s_Ht6*ws^=oaiCKuDObo}{LgekWx<pizaI
zPRN82;}<w3-3J&!T`hm~hdBYcEI<qNqeMi}Gov)4og(_4u}FdoK^p5A26kwEDC%A1
zT&0v0GKtK!eDaKI`7h`-Qx|LsS0rm<y_%Y)_yD31nUiF^plu`rU}G3y6EX?Gdwj6t
zUAV!)0TbA~(hyObrP2$b*c3@xicD1h9ar&~2xuGO5{s~g$<LtSGz^UtOem7sAu%Pm
z0uD2ZT*-vY5D<i^MbQ{vs#6Sb4=Tx67YWUP5CYKLIZBHJ=1z+PL2pC}*n(hL6ebB+
zm5a<tB!-+-f7RbfjyOPqhURF1e!|51kZKlYB{|GdjR|RlER`uywEbA58ZN}BO2-h!
zwn(I+^&$%KwotPdG>QT#XTeCFtAmJ@q9g!;97afuP*7RoFkwTcCM+EVoE0b-nE@;k
zh}!fU(UVEIO{%&%s(ehRV8}i_lN@^Zc4*Hq8b-*mhyinzf`o+qm<x>&!gLdbLR_W9
ze83tJMAFj<j5XnhgcTIyEaF6whz+16hY`YgXxnyus6`r3FbM#xdJ>&GSg3euQgKL3
zl0PJgDo`sjQY9XDeu&sil=6nI1!-n7`vMUOlQng3MJNEN`RtL-H&Am#5lRgLIRc1k
ze}pIjFs&^WESTf?f+QiL`r)~^Q5DIUNa$Ch8)X9alL?jUq5H*|>5mDcpwWU@T)%NZ
z2}CDTLv#XR?#@BDW5h&BgdQ)fP>72um<a5aHWHkP>F<m^_eC;DH4~g)(})d(7;6v!
z4M{~I6`U-V(pYV7LWGwK$53*FK+QG(n)hMrO9#piQ9_9c2P-P@S;$v=PJm>Y@$Hx>
zg?J^8X7rO+v)AR_iBhBvNXjXOipo28u<aD+G{B$b^anFqE@<s5GvNri6vgMCLS^fw
zJ8AS^@IiVg#HIjEQ>P#4jxnE5$1qudW`-dBi86;=U=ywUD}utPK%KA=Urvz$VcKsY
zS`+L7BToF98`MMv8`er0s>-p{q{NW20Q7{66{{5Xfsq<QT13K^Vipf(9nCwKh%Ww_
zv%Y}usi0|O;iy^A3)%>nNc3$gq!^5%PAZ1nx;k~N!_uC?{8}<jFkF=BIw@#RiOg}I
zu3~gj;1GX+HOULHN`3+$M}JbE<QiK9wIbZGh3;%VE^9GFGeBZ2=66rC)!?wh06eF^
zc~35E9S_9`%L&(ISkN0Jjc)F`di|%!Lo(f{ed3>0^d1Zm*|7=!tf=C|8Zq573a?#o
zJItM&a9lzEG;b=2m{_V?(e%CR_#2Moyfa<LRutEbyGQ1VBk#1vAB5rJ<dcII=7Z$p
zjFC*Ns6Uk8l#?InUTp~RV07GDZsIQ4F$MkDl4O)S;>Egn%%}=en&xZ|mDa=(%rQqp
zW(9k&l#8mI8PT8IWSBG7;}Uxo3<VrUP9dHPBiOVhygM08<0nlMTbWTVB*Pp>K1Uc%
z(|a2tt6i6Jg^EY(=nYh4-#WT!FzuA5N(ujV+63JBMmb__jcM6zkN^IYHBZGI%WxRQ
z;?4_Q3)%>;%{@WC!{VGctV@`S?y?;67|YCsKRxWZam_0k1rM8s+2%^d{VWmnNoLpW
z@p&~Sw6j%`MSQhQfz`#n2Ss36bQBh|9_AeW=sRT7MSajQgDt<4Je&n;Lz}Dp2P2>o
z>lOj}-&r(vc<<(+?fHb+A1W_b$GOcQPe8E7Gofyz9{-}azw0!$6{Ah<Y)#aI?L5X{
z1hk$9wF>!A2@%5@2Okdh#5tvR3h?3YSxuWO_>2sc3T=&$7~{C%f}S5$<=^XK9`RCa
zCQhYZUyn?`HQC(P(S5x-KNkOTmHEGUc#f#czku6F{vqsD$;3p_ne+TtMK}O|0k@hv
zYaa8nXI46G<~U+LWxfsg05p5o(w&~Ic7DKnle6IXsEqf*!jsFpmTQNX?LT8q&Fy_F
zFP}TX!K3eDURpT%V~8D#H}n&jHf;tk2G9J9u(V*K-Y7RJ1hZjxaSfw|7KinL3kh{j
zS}2E9E2!gwwgbK2lD}K8uz)!%WCZw9plsd}1xgxn=6*%&N&G<=Z*}%c0FzDaWovFS
zE@YIsjm`RJl524F*{sJW*tFwr7n}DsCIMQMDZ%!lIZ_bY(*@Yow%$wXV)j!rBUv4h
zcCFe1AvL&-2MztSdxMWgm*!BA59_GV*wb?d`^&(gAi4@mWhgl6O+(aWr_$`b3|fdO
zqEb)?H+uBn`iG96xhc6x2S=@&LqxZG33%ZQ7_3C&n2WC5a`&=mNw%@lU>`4<+^knG
z@9>U*qhKGlG4s)fb5HyGV88<$WJEZs2SHK4DkAP%Rc90tbWlREGOR$AkWs9MN4-Z!
z4es2Iv<Ty>*nThY>Vn`(2=Lht9vnioKLpe_MlImi5Y4(CVr8hrYf=9IZnzGj;ajNm
zF6I*u?M5KFj^LdIz_)?-#7zlg(WhfSpc&A=zua70AkmNzw@}76PR8Pe;8I+3ACS@d
z=w9`j!Rs-aE;NU|ROZqI``42%BHX#}6gw_5iO)WLF5)_3G(LT&ewe(Z`0LyhK#(NF
zW^2^Q$P-<^IThfRG`d@f19~cQ5nfr|4R|7|r-4|KV#o;~0c1vZa0in1?o0`B=qgG+
zux+dRP3)YwkQIUs80qe4CxwCIO9CVo=6@jIgVN+;(Yis6y1dqdDzv;2NRGr>Mz8%W
z_&8a1uo2@{8MAPzUf9Y8P0<VYKf@aqx$}4EHCd=0uG_}o2M-Png*EZvl|Ky^Nxcj<
z-1LKb%f4Flb^J;-T5v1w3CI29MDcJwbdTG<2b_53tUBrY^;P^f>FIkD8UM{2%J7#G
z!5e)2H~-+oBXm&);_vuw>u>(v4c_d_%4Y@3*GTlL_~Co((NMOnUU*wMw)1n|;HE(k
zPCMZ%`i?v-D`V^YfjikPYOa3;7hRR5(6T%1Q?Mec-0=N!f_zMuv*zZiopZ>=tqQWN
z(G^!{uj<q3=yk5?^&1BgyfXZ{JTche6*nQ_r*-NgDto(}K9sw{sp;8x-|{G6n&YE&
zTqcCyN6@QYc~|*B*<7gQr}B2Yn6cF==l*&Qp55>J@!-9B#;hG-Sm>9hG4Y9J^<lG@
zw|nM_=Ysw{C^Q>p`^`HF_<b%*aw_cn<C9PaXZ|Z5^F~f_@mqAwH*>zb=JlJ>^6CD(
z9<KOhQu+OxH_r#MO|E^--!UJ{Upp^X;%u^I^NOp(Hm^+0+O*UOw6^zs=BT~RKH#`p
z6Z>J+e7k&G!NIj|_3D`~rW<Krz(qQrl#rj^^Lb-em?g_Hk?qD>y#G^J*>i7N+Q@CL
zZnc}ZyX>{aFW!CleV?d*AScLGY+#Xh+k?%uFPS)qce9^A{_Z#8BXwEEf1|zmW@pWv
zHvN5HpRzw@wYy0c-fhbrv`umo2IjeBaeMxD=2E`O5}D<g%5(3wbQSwA(UfH@3xSKz
z)+`JaAsMi3YvOA>4SH^ufZycju7dm2kev|-@*~L2bH6=s&?Kek-CAS$&7aNx<Fzl>
zyD8gx`j^{W>O15!|2~4D<m2F5pt&^k9L=7e0dv8-Vt+esQcUx6uTE?mGc!)fxq%pq
zh}UGr#hd$2(&16M6=Qh*d_3W+YwX~jM-o`#^`8Cp1Yc)$#%ut>Z}{GVuR7av=<0!C
zyY?c#{A~|+CeD+GC)@MaxS+XPdqwoJ&6Ahk+b~uYPc`72R$k&!b}=Kfj?rS&3R3mn
zhdNhCcfRo2c7_V~rRvtVR%}n~A=-Hp6s7QmL)+`M6>XUJZuhEF+pCL{7O}#?`;-OE
z+JoiDXm_b=$6hV$tVkfE1~e7}YQQ^;Cp&jF$q1!>m$nlkGla&{Hgr$ir}y})ra%5Y
zFAbMoOK{IC0p6_lz`3t}=pp$4KjI<z&USLvqadJ|_Ygj$sGr1A96`ay?#qlRd(9Ta
zpf|rL@HiEN4chGxL9`7R1OkX2$)x6;6?8rAC@rz(@w)PnzBreabk9WH)%-}>Io}as
z^l(MNxBqmaT#2Io#&sm7wpp&V;rsjgrDUodn}arRbgGu6p_%oQ!?F?Hj^0Og=paE>
zlY)h#-!-mb3q&gOqqT~jR@*yY*JFh!igz{nfDaaJO^$?7?{mm7^69FK;Kd;r=|`Dp
zDz;yW<hW0Z?6_Z)VlBI4uEnx4wqD~}wmm%^-O0~}O!xP%+3KOFCUVDy|3iQV>h7dp
z(QXU8iSWfFn2Y7ob6-p0w0&Gn&YDdG-IZP3B(M>K&+T1zr%&l9_)kM%PsXxW=^rMY
zZslE`*|y7r63>!F&xK^usd153^0SNTlaus>9apDCm34Xf6DhaPBc`MFSD~Hcio+HV
z*M!uX(n3ht>@yts`3g5?tz(NdoIEV(?F9F^9>tP)+9e;d%RMh7LD%tN^oT8sA~W2O
zp!V1+qN2DKmqMA1r7y92b!o;#?Ykbqb!6gH`GOK$IZJKP8yj(VS^*RF?3rc(weoJq
z6(I(Vtkrc9ihXVRBc><yjbs_n37JbTHQWsRRk7NNXs`9Ne&;ZNzc#p1LlM&-C?beD
z8JOiCvLM`^fM;mB3*|!fs$uqo!mVjpi*(I2SCZ%R0#k=Zbr}TT4dv9iO%btH74uqx
zl@+m&Py>d>@Q_kfNjfas(M%0R0@aWMbK`Ik4`ES^^554@8VgkFW934X+eZzC7%{0>
z6H_-7*g<%#pyDF}f~U>Qh8k7Eg!aM#Th(_Nr*Ic`PZFAfXlw~l9S~JWNilpv`xx!1
z^Lb0sEw1|c1x`GXh@xD%(hSoA99T`XQqc%Ya|XfCScf`vS^?PG(Xn%J7m90Ub5WxD
zxY*zs#>PQW>yTZ=#wcpSnFD?hhUEuge8LYa<X%O(sCy-F6?0D~2uk&HVsM3R*bb~M
zpG&S}f4N(Esv>Z^GoI$1V#G$gWQ9mfX4R1WMlNn(no>032NyR9GPfW*25iD_Ng?Fb
z)_^M{B;Qee1;{SE@>mEsXr|qjh-TPzm8a&y$aXUx<`i1YI-G*e?-Nkm+$B!O*VhP!
zpjE1^5w5BHaQPcg`jnMfh7Y76bCqyFsYXY>pFnucWz;l*{YJu5l;Aba3)VbYjsmD;
z?ztmEI6>73IAOc6z3hSV6w9cDk#Q@QtpxnpjhdG7^Ls>wQ<9Zbu6!Xhv>urRWF)dF
zDE{iGrLNER<@^~*!I|5rK+KL*kjY5#gv|e9)?-g>3c%BhNg)t1Wv^Wq2FoOiHy}h?
zNy)s+5eCi)gcr)hLia+@&ArBv6%3m@f~GK(fYx<FsQbrW+m82rEDNSZph3dV;NbAi
z$4^XO+i_yT%SAhzQmO6?3QEJLA2KvHMozSn3c0CYA|Ozw<`W;IjD*edr0shS6-**3
zc!kLT<TA?<w33wojm6Bd1#Sd`E8&AQMtX9Hhu6L&hXA`b!z6Vfj?k_bD+PcxpD+0!
z^E%uS14Yp=YBe4l)MBu~mbjoL4?QCgAxjKeA+l~+Mz);_Zq(GKxXGjo1t#PO=S!GZ
z2!4=2)<$*C8~OAW7}z*TLphqR5WRIlH_20C7Ydt_8y9xZR8}AroE|SZ`~#ZY3)^+3
z7R)>DxTGO^RTah*)W*5P+970D`!7-EtI`IWX%oKCLyC+ocsr485=%5d!&Vt}KcEhW
z4tZqY)-|PjRDt7Sj80;3G{T5@nO8YpE*N}uf`{t2Vb1=R*ZXJR1F0)EZSal<3fRzD
z3kQCv@9H;_7j$8L{SrfNk9M^nh-s&^BmvNOU);F^u%Skndtn$tB-L69;Wn`V11n^o
z*U1R&!CI)SIE09#`h_qE<!+las=&V{vJ}>e7>iqJCJ6rX$S0hE>rtRH{4DEL=C}cX
z(JKD3ey}PFl#`NW{`u382c^HuI84fb)rE>`iR>B4bn+ZJ&4Dc#9TjfWO%{zK(owVV
zwJ$ZOxm$&BkqVnZ*qfFc9aaX87HNu0VjTsPX>V=p9m3Fg=>)|=5-Ktb{e#hCGb21~
zD}yfz$do~Mob4>8Q#OZREO>~rfuj$ptKR8P038R4Dpvf=W_p?A+R&2D>4x?5(4`vZ
zIOHu7XF}lI$ts#O5JlsvQv^`YUk(gbScgLL87sUuU~?uq35c4%W|We1+L`f^%LFvj
zdr@#+c687&<%l$D$EXW}LqA(hWDw(=yh}F$?heC~`&wtCLo-WYYdEK2a9~$3(@~0L
zV+K|XI&%an8U2-T<-Ft*DeY?-cw91%z!rjgUbV7YusZnOS%A$7331Cpi1tLKh|nX&
z4YL}@B-b-V1_5758_jNg)GjQ`WMfyO3bdTm$pRCKh!}Xo>!HH<Y_Q<lbZI%QGwM<Y
zK052-(D}a3V$P&73Fc}VLMe^NVxy$j*A}QNaxH{WOhu#|wc;`ZD((P4eSo1!4LpF1
zAmShZWNT>LIKpkhN4`tT{|XY)0ZReyAWPd44U+Dx^I*9FL_mH!-3_e)kfrmk6l(}Q
zC6n9v?70C1{m>1Yg>*xek)WhW?Ee^s(^5nhSNa1$3rHgjAFqO@kYD9t7b(8!qCKH_
zn@^+vL`a!}zx5Tyqd0O1Cj-|F+|Ebheh?aD<k3M8T=xEDa}XGalQ>i6Fnz3e=3yZE
zngVoy%(rn*5k~>O3*rQ77G8%u19sjL#(|pY$q~s9zW@Lo`9MBpYW7}zA;!3*1yEu@
zPa@KwtUBDmsx${&+-oiSUi~0)$@^0FmXMNoTV}2>{v+<kVE7E|VSXCk7wh06_HOhK
zI0e^BQSf1>CuwlXO7+J!200unk5@qD#R8RpZ)tYzH=x1+L+m+1qGNQ?A$AaPNMc5>
zP?Vp8(6EU+7aauY5h%7P*vr963>5RV4Y?|Ok%$Q14fal;3hT?<e6T*a2*FM97BUa2
z2(Hs69C-o}S$@D?T^nb`5z56WqSq=^nSg*&aK66bjxKBS{t=)lIy{X#7E&OP0q>2c
zPEhbdPLU(PPXI_!!<JvQ(G1GQ7QOI}9n}{+B0mURAnFipL3Fnp8eARl0AZ0qd`Y1W
z_+@4$Ox5G;`TYaAjcCU1?UFoc*3TSvqrZiMMxh+C1uR!QWb4q9dkGp7W33iIN8-=j
zc#C-DhOC8Zr%2@nd7kP+qai=U|1kDV(U}F^wy|y7PCD+`>ab&dv2EM7Z6{xB+a0qz
zw(XmL+<PC+c{%50?^%0P)mT+E)*hv~rj`pl+k<BPQmIH6VNJ&(R_<w+K%|<@z`)a7
zr2=GyJPiK&9Gzb2Psys|&LY)Qy#m$Ow<6X1k9j&LyLmdFxH-B9l|ohe3BG()Wb>uj
z7`3h93%(MI<E$c8{cPV}T&;(clV_wkI-j~Zx(;abrL?lWPKl}>whv#Grqi=OH{e<i
zPDQF0`1z{TKHIQbE`N@6zoG6n<~O_`EKt3Oov(bXnX5DvR3z}G(rwN;x8r`(S4p>R
zegW5f5K{XfF<wG+d2BA+M{8+Q2c&eMRu|?GR~J6@(S5vuRNcP;QeN8o=pI1S4qidj
z`2AIHXLX68s#?P2`{`cZIqPM5e4Rh?mU?iicbR&iHI@W~e64@HGXXGr-$AQAL8^T1
z>rZ7{R=_nL-axBtWfiGCPPBNnbe4#bs_=NLe^zbRl#UMG=<?`g>vnan)}FpStnEC!
zWbN$;=1f-HwVKV&>dn#<n@KNibmd*WUspaw4c`2!Gux}a?EG0R#dkHmCvyJxYG%83
z64?RN<nwB+%420u|Lf6O@8LOZ?~|z8Z*EW2_qLAuWqjw#?8U=3i<nr?m}o1?g=ed7
z_VeZ05pXB6;E_S%##YzKmpe^upZ9NX@P+{UG^dxhGk$|yzjcsxrPZnW&T~Qi<NENO
z@scA48!*xAb?4Z>r5b$KF+vH)|Ni0^wzpu?M(y{yw@@~#|8aXf-%*Q@miBR5-oq#8
z+P-hQU9_w}D@%gBchI>PCHeK=t}TGbG=4Fofq=|tfq*dmkMU@}uPr#U|1U2tT<Dy+
zZEym=<UTROt*_Q&#ggU*frM^Zr7!V~?KTQI8@aiQRf-f84x$NKiNG4ZN4wr1AX0$}
zv=L4V7bDaSv;Y>IsrN(B_{D8-M__DGQU!K){lCy^jr}vPed)G!v2E`J6iclp=w6Ba
z;lKo9b%wSMPkG<S0Y5fs(zumzvS`B~zDJ+iA4uWjvka#5h)#$;$lUx-1Xx2;lxKY=
zsL~izJ;!8WtE&mYIpjg{e+M`;*YVMUVKqk)Rw>|_sea6w1#j_Kr=T#C$hYad<Pvg6
zZ+eag-lghLAdezRasRR=X$kOd29>vu3C>=*GgHX@w0~f?i5hf)n9^aEC$sC2??MTc
z9FhmDl1Z!Gyo`@uT-2ZrfbFhw4Ve3qjbx8C<3t&sobk@-Zx15Zzi`|p216QmkpA7^
z%9X7}xE0L33Zf%!e?-*wJ!5;m2x}aI(YQry08isX+C+Szz2|y7yM{{V1FBciysM$U
z;Rj_o;dWRlf|oBdXGS~{{DqoMx~lDghB`SNi<3u_Zy;7AjV6LEl5C&9GCO(Q?tb^@
zj?2?az)in7EgKaSBxQyIOIyVYsn=o=NcXzPZ#D{`O=Srd%j3o$HDg_&6|sn{j9kg5
zobw0<>_R|!q{dS=8n^@N(Z`n?e9SI30&TirR(fR7-Z;pEjO0;dFLePwOpsPu2(8C9
zJ3+nF#mJe!@A_%lAWZ5$f`flJ@*yS-v)X^prAFXa9KLmZ+LSMHq_;Kq2`R5$_qY7H
zG;WE#Ngz62Z}XnBKcwgeS!4(uQLg;QN%26~g&DnH8h<K2%3dbS`nDfh#X9Ly8I<lZ
zIe=^t(ZFE?z`JJydESMs_+Ktz4Fb?@`c~}PZ-w4I!YXb%j?)3;8UlScoY9*&K0l>7
z5Z&E0qSp=o{T#?8$(lXqCJp1sD?$&q7GZaWMQ*R>zDebbb`Zsa_WKon!7Y?+-_9$4
z9Hgpg{FW04?4;2932#UqhAW#Lf;|-gXbyEyYJ>1+7&Kp?%+DdZk`Y_<94xG-p8CkN
zL9yy1kspAGV4;Jx!r$jgbslH^$Dk)U#Xq8m2*&8~?iEqk?rMm>@pK3(N>sl&pU)NI
zQ98C2%ZXeID$YeDMGT+e{@dhB%PH9~`bNnNFzlZ`axL^vvhg^*5%h-rEc%f>21$~C
z3avec-7-6qdXf7Fa$H<fkMML-4=c;gDMsCloN+PgF-5;8EGa~nC6pFLgWYI;b9jL(
zB<d$aw?=I+v+Td~QI|jPX8bIi2*z$xsHE%2N4elHWc5ek{qa-FJ-wu)&*gS?a9Ddc
z`VMXxTq4)}faHOMAk=}4Kfd4+?j*Y*6uwv#Q=`Z8Z#$Z4?^ZE@fP#EUJ1EW%D>*d-
z0xuPqDw2p+2$F38m`V*~Y$s5dAn#=x-;|tD%#a06qYwNOweKEkde%TGacyktTSMJG
zCty$sVlwda1q=j+U;xu_eReIV#|GvQRR*cx{ii=|Xq&cNJ-yt;y?hF82#S>^kmLpb
zCFR8zyH5{a6utnB9|fnR9~hOs?Qd0JH0%nDom)UTYI1|8&5I+Ww}b3}P1k{m!hs<>
z1!<GWC_=f`c97yY7I8)s0H=>ok8baNfa3tIrx8mFXDkp3C%s#PO@)KSGsZsdloR^P
zCIRl>W75C$j8OYp_7ABES)Cl-LjS$GMC=gfgS_Od$~o_nSi$5U7|9x|I)6hNpCjll
z92J`8Hk2;2IsrFMdw^&Rhl6GHpjr#IL%AbYpB$xOok(<m6@OlkY`7dqXdk6JYb$e~
z4I+&5xkfriqeBxCi@9S)U(r0ZPOgdxL!Kk(pZi<G@8t`(zYAO(1dBd`=7^qy!wbpM
z+o1;1?KO0t;(NfTuMX`XM6`Jr0A{>R_S0v*@f8}3M;Pb+Ryh8!-=VYq4@_E20WnDg
zPC|JEA_J6uaJ?Zkok=vTLz^+|EYeh*fi*(&2BYQLU{m-d<v@d+0m88I0uH~d6K!iS
zm=e3YHM1r!do%)So&R7;jQEaQ!qJQ-+z0m_5Bt<YGQGE$vys@YYa&aW_=Po|*#{GB
z+n!<a0b95|jO-TI_(AXZ?fx9M@5|fxRj)pA_dE30oBh{*;CZK>bGx1Hag|FK_xs}-
zvO-7BN9){kPm&(a2<-cyZa5+HPf2V~h?8;f17|~+jG5`RU`ZLH12-lBuMim3sw_-L
z6+9ulj^o4b8}ZkZc<Wuv`M&ef(YdLMg|4|5PU+JQxFoFX90}Dbh=^ctAP>C85TTUX
zNE@#bgS;N_U(RH0J5xs&WGJ>4HJjg^yxFPT9~f||gQZ<Mi2Z9`@JbUPj9o+Y6oH&E
zBSUQ8XGYO@;m1&@IP;=bLYNY6mBT=<;0Gc$_)H>Hs3j;MULPBQ(1fs&K{&pw_k9sF
z2*tY`=V#<OfJsA$xzB45L{@zY)`Jh~`c}glyMok*l!LRRMD2Tk9WPNLaz6|=jXa2h
zSOk(Ve|O~$h=VCX{;TX=O2c<-Ll)P-?w{L&26uTf0d3D?DDbctt&3wydpxaoLb+7n
z-4b1336+$D!E?6RyPYo@H+C$z@(9?g+rkJ(f9_?$BGd@ya$1wix=x)3u+7JWPaD9G
zlU)GhJH7lF@hAF4oCNK*gDSVPPC63mJ0U)&KI~7e0GHBiQmDoFIssaFr^DZWU+_Mj
z*wP!-#04gvbnVPXe{71b=VbF|{4xX#k*+zHX}2r(3(Cq+K8iyQHk@Rw(Jq&C^ue)Y
zZiwBJET&@Ni$14prUp|=HUVCORIQr%W(?sdA7ZH48m1Gcn*tO5VXP#-p?M#9$U%di
zYKM3(qy-59-U<A{o@^cV$l*yf0G<Tyjt~&z*N1g#fo)FFc{}ehh&q!)u&xZT{&N3R
zVTmg*$^}b5VV;42B6W(5PJBVKJMQ)-WkFW0hbdNOyrslT2SD?rbj&ibN@4h&ykhf$
z{F%&P=v%|#V$)*`fN*aQDddBMBlZqTf_nte!mG`moG2O82TuunOfXa|rm32!UirtZ
z0x$qo<3jIc7!RM#n>JFT#KoqaP$?ZD;J`uu{UZhp^i!@thZ!>G!J@KpN|P1OfjF3i
zqFc3;ZCLk8xPdM%qF0wTu(S|MgPQ4wluveG95ks!9Jet0ZZWfi(x!I@R>RQjtNAup
z&$5eW?F~m@AV`M@`sUJ2qNvWoROcE39t(FF%&1jCU6bgFX*TL|Z>CNwEr-g*4n1y)
zr}^>^EUN~kf5J>Gc_-^#PI4@0Lmxvya9CVN4BFe}^?Vj?J#>rB8ozNM*>X$HP-G|X
zhmHuZ*y|Fk)vA+;JG>fQNM!8ELvPzRZSG}Wijz%^Bh-KW0Pb03zGRyAXk>ySOtA0S
z#)Mvesbo5|mf}7&mf_A#`jliSs8&xDF;2JXFHHFvXC_$W(@qy}X=X~_!JcQ|KRvar
zi1zyHK6x$y=YuXx8Ctyn!>`@C4p!<@A#GJ@7HC}eOW7J^++irH79z;Mok*k#kKDi4
z=dBpCzmQ(bP;xZPJp2{eNM7d_XMg11Y!>dJ6~O3iCTIiz2b4z$rYaMn83^u1oOlUJ
zo=_r1jk)noN?dX8Mq@4k%k6_gp|K*!b_7d2*meX_FRHk+JR{e0h*N$Rdj0~$G1pIn
zVUqhbv63a?Mk~RI>OP(b;8W@=WHQ~RZuIqeDNJA=lS%LuQ20EaI(WYpLNYC&Fv+1)
z5|+!^7Z(@nxy#`}9cc&`r!vE~6P)|L5D=|3O^OzMDxKAb@%~jB_l+)6db7@;<Ru!l
zr-aHVQHRj9y_b|Z^ohI&2<E8sLu>t*MYX8f_PbnBSoApS+PN3)4nWdsU@;#J#Q9*=
zKq05!7Lwhrr!W43nKZ|!0y#PDBKSjVdctpz8hgefJ8F|Yy)YyRP&?2Ilbd{3G}kIp
z%lhM*6*<3Q-9g`jp{aEwGi~nMgbQDyQL$)FH$GvkX`#ksXIV+C+0CIY2-n}Pvn}jS
z_mmVH^L8%tD|tXx`EKi|Vlx@u20@H9_zlClZ#uFKGx7-mIE`KB#p82`EyKtFM?Z52
z`sEaH@h@hS7F_AD3gHhdGcx3~sHZbqUktSrf5yx9DW6lM^VvKlm~qHqgL!Gm;bsWj
zv<GK-vS(p>C5CGoCOiB^ccv4_eC{8!4UHZEeHZ}g$a$MAdch)!lqstzy=H-@QOzW(
zfTd+>mx#(n?Onpe2JtsC?WM=FUfPw1y;*ix<D&5ikcWV~fjeY<YZN28^(9?K?V5Ed
zVxRN)Vq*f4HV^W)HrZ`3`%-{guEXdC?k5)OjM)#I{Ts7Oe^Ho?m5+G42LPY9%;>9k
zwFyocha1o_E!V#brSJz=^X2KleLjawntTQ6H9tXApN3a#K7qPfag&%#Ry&g3QZD_X
z17V63KAD$AX}^2cs%WFCmTwblF(xbIEuGoLps=P)z)+<H9ZfYUtLKtL_wc{_A9&v0
z%urlT^tYZXmJQsD^RX>E=3PHyM>=8X+q6ungyD}RP1ZxF*Rj0Sn!6zLaO2c+kfzmC
z=}7Dr3&5@<4rsk2wX7ae1OJ?Eh1j}bYaKB)E$hC|xr*1^fx5B&?k(J`qv?+KEwR88
zs5Xw06fiRDzqUx?wWBA1=@r@U+Qt1!5hvb#d{pJP4F0U&r8||ZEmq>O@T<jLQ=WsY
zgkNXUwjcprp11dS=w1EP@ewmk<bQKs4FJtyLI{{Tm=^MRU&~>~i3pHhEJGA!E9|7G
zB|mZ1m|KgOF_C%_NaOf*@_=qP4LrGyn+9H9YA$c_A1^!Di~(JA1W6`4v>U5CIU?JC
znrS|X0<CQ`C1w?+9FNBE&juvc-x@Ssv4i5ShX4K2Y{{^p<Y3<`PbAHB_$`ewtyA^=
z>B3gC1u{>S(XQW2HnoPu;<t%*YE6J!(XHzkkmFnnXpMAUb18DR2?=DF1*<{5i?&@$
zL-@*iq#T^*YzW&^vuHPwG!>r;m9Y|=RHj3rNiQV=6Gwv$5HX@Or0ae_z4Jx*bkV=%
zd89P)UOtyyzsa~U|C<)Aty<yV<)hD5STmvWeBQ*2n-X+Z-mjZUW|~lZ%CzJIOBf4x
z)9`sRx;zS51w||1YZ!~4D=V!)IGUnq!O@p&T9VSIY{-NxQK5Mm|CB+?7z||<rrqNQ
z)VV$>-P(yLiu`HKT9dzKxVadtxn1Ff5nb6{3UjA*M4JF}M9bO2gS^%6Q8`~NG1$zf
zRg|F`^DSZ)V1panGTIX@Y1Naz6#g`NvsXv^=~VnI7_Q>&eQwDN+tL;?P^LKvSA@0l
z+(fggD3UBysZ@Vxjt&?7#=B17vsN_iO&Rl`dSd>=Zk#Rf-CJ`d&zFh7hjYGMG7s^t
z>1NzK^ZDF45KbqS$(7rjzlhj#j*h#PC?8DPEiFh*o*GH3HRsZi$BifEAXs~Rh)gSv
zWDe=Hz~&{mtN^Ks@5Kk1vPD~d#wM&$zjEjkolw!Q!@^BY#g?PHNs!~qL*|?j`X6N?
zUpqUoe^s|L^ic&-1Ltq_hdMoW!iH__2;G~$7Nd($t-^t#2b8y{lvVw!pWYR3NPZ|~
z&(Et%zIldG+D)me9MPBEL)(t}MPkY^fe)0fZ$5u7!q)u?o7U~IMY}1NW3MjUSmC(W
zT(ONdeEyP2_c)oiUsc`vp6f=}-8{(-{|)WL>D+5PV3G)t{x18S;<&brEBh{Fx!Sxr
zyz2V5RZ7_f+vD%k$J-O{Uk8D))@%;D{k5LZzg9^-z*-&s!sFA{BAWe^s;~(cncVJ!
z+IX(s3-yJpUMN2l<rl23h`6|)@T(O^`i|t=M$I?BmfuZWKL2^e^`6;8KCwW63IuGf
zE1bRFP<oNVG^M+x8aWzhnU*?I_$|dF?_D9w`v`AK2`;f$^sZCC*4#}*$i*DexmOgi
zdb(g$q*r}D1ZQs79nu|JX0@;9y4MwrPpkSae}LyY+I`GWzF5kfoHfZvsC!!W3I+J7
zgV$ok6kBlf^w8#KBbLbII#HetuUJPg=IVlmRI*9M$~A-_xIP4Pa=~LoxqNsE=iaHo
zvK6#SE0R@9DIU)j<in`LgE#973F*q~rgEIG-fWxa++yFjPU>51GWt3>P&eNT5qSVh
z(&Wy$O($s;iOB#2#J!y=-bWiDpML+9P2-kpP?E|B0<!fTCYkYnvn|DF#L4b%Z|&mr
zKhSB;`PUrxxD#jpsMl}hS`a77#q%<#tN%)B>DVAmyJ%KjSlIc)YaYPl6h($fc3|}S
zT;ubXd1FZ0Kg>IsPYJ&fQwaz|f#w04F-B2g*URdPHST>x7w-Cgyqx}WSN~blKs-xy
z*k6{lSTASHu~TFfZR@>fd?<NzBsp@z_sQ&+h&Myl9dRT*X+JQ>O%9H>H>L3YQWK~B
zU<bOO#Bx(KG&({y@VP04NkMwX#woRj2d%SVjXP3zGm!3yEP+urLUsfC%M+bq#0BLw
z)KBontO8YRgd%rlpf8H5#{s*T3xjKPz(KBSEWAz`*`FUIj~|5USssM8wrKF9|K>%g
ziSot}Y0N&p`0k%&0u(Dk9=;yjpzR;$)boq;&8@9wLjZ~NfEwRd)8NRty`C1=34685
z$luz3#Q85KM8y@vxa!EE=sVDR>`262vo|$2-CSAId&C%8+qf$YR0cQ#Mv<0E7r%_U
zKx%`E4K|0|K5GQ+aNKu7M9@W~MTGT&BN($kJb8Iv#y$L){-J@tfdmE}CxMc6blx2G
z+<@F30+9ec!~w}?!vy6S;7I49lIb`RS1Qt}Ft-X5vopq@EV6qF+w5x=HFA;u$A%#H
zo=QJ%u}?PPM?-&bm))*kwOqAk)F9dV7{c7_F2p$adOABgX5tXlr^?xSlkvzwlWe5(
z$%zmb!+?Q3i-Sq<fYZK->C^{;SjtSJSwGHhsf7(DG0hpBqSwg12g79JF#%n()P*g*
zABpk&4Nkqr4Uux_DxF#5@@ZpY=>I;WXLw{Y?vY4QIr%}&4Na9rQBdZi+X)|n-oXZ0
z#Cr~vqkn7K#m<3FvBw-CkECGxK<V0A+i;eL&M3?ZoIj!fa0&4mhcU}@VvEk5O5jpj
zq6e+w2f-QYXd*<Ru#5i&)Gm-vc#Y?!zF_aI%PM!g8;Hju6>uSt{S9h{R8H3mK_1`)
zUC4Qwvup;yXU=r-nBc~{`#SPO9Qj&_r1_x0t^FFf?4GyDIIraCzG(U7v|&DyiaLwa
zXnX~Nk%XfXvs$Bfq=zELejKuZ6KwJqe|!;M)O<^-o1ScwBr_QPeD9YjF-iV<xV2b5
zY2=FRxFa}x#-DDqp&W)<WdOKT&YKR7y07O^kbwd7!|C7U@@aoMz(stW!~TNJDO0H|
za~ssoJd}{c(7%!ju9x$@?n5X90RwzhIS%{5Ddgju0SdK<b-3DAoWm?`s<V`_daORz
z6NL|$*A4BF^6`wWhr@an<vp@+Aqpa@kpM9+8kk~`pc6hc@Ple$PDx<1A%UX&g8L@P
zy|}Y2Fj|@OP7NiXUi5G0Ln};QQ%McS0PEId|CB#TA6M8CC|cl>V%FOViGc=KFg&>^
zMD>r?t6lN%h&BPnE*_R$QEUeS=R@gZN-jXr$Y!256$RQ&pZ9nS4o8#$-2knomeb!i
z>+{=Y$iah1-Ok&?I}pw(4s!E;LvZP-J?*?|dc(hn<hOv3zz05@DVnj(p-Q3j&ZnVx
z5Dv}o9|L&Rwm^pgH0y+I`n+0YV2E#+a80Xm(@3=gBpsK807pgwfbhIXueXyl*V@R4
zU$3}P{FSpEwszsyUY#F@*aDZ|rFU27v-?v6&-Ux;t9xsAPh-2q`=exzb??Z_@xT4S
z@`lG)(Yo%66|QAT@G?;1%fpQrj<UvO4X2-0S$6qG?r?;ID$52*NMgLcIEiOW?Nr3_
zao%V1xxx46iB`8e_v5Vs7q~Bn8^jW;6d>WTC3#4NMM`ntq+r1`DB_}mgkq?q0pnys
zSfD_;Kf;29@bg#U;A;?Lr9xO2^)x6Z-~yoKJ@PFPt$+ReJUm`X^{h%heYC=Q`(0`d
zvh$F)J0-tKgT2TzGsp_Dy;m9c#P?p~WtnSjT?B-BNCZ#Uw`l9(VO^$153w}4a%SEr
zZ3VLRw!05_X%iuTVth)n^l7#t@*;)PhJtib*$?}8&<J%be)mzIY_>SVHB*gK6Ys6Z
z{E&>c<3fs45SQ!(b*1v`h}rqKf^cq4;;FM}k)4NT{aJ&(T<vOf9hX4Mq?D#Z=Fl!%
z%iv&=NdNN;zg<!a7bYz=5R1vCK=bLkY_k8RzrZOQlzqHweZLyf0;8T&wkW814UeN`
ziDKWJy@6AfJi2);npeCjZ{QiOg9BcP`LX=DbS27Mxvu-`tv(d5R<-wcr<18U&Pa$=
zjFlwxD0J^)i;&XB24Y$7(fP7vGnWKT5H$?hD#~f^mplv6l0a?VWu9*C`}5ulph@_U
z=mn8ykZO&I0PKu_072o&3Rt$2d63lp!S9x4^!0+fDm)M1GsaG2w3**UD+sYSb{FvS
z{&RS$p%r_h#JT$DAXbl_e{lhCg#hDyH$Z?+^m#ICWJDx7B~K<9DB9Nn$AIVLX{p<|
zlWs`2Vjcc#y8z9g>Gs7x8h(@jJg+HEJ`sj*EcjqAp6FO6(C_tz<H)%&TgOUAJbOB#
zN;*uXjxaAfl|k0u;Wg#~!u?1zTi20xwW_^oB{8iD``XECOu`uEl{ZkAP*_m3kNqYt
zsSyuba4^XrN!NVJ-ZcFV4A=336b31k&Q1ztaYnFBOdX4rr>(FoF$fQcoAOqCb#313
zUFg`3469<dUA=Ft8pMAo8si}MBvFqL55C(KrI+*{MLjB!J>w53y05)JWZb9*5~5p5
z;j8V7Sp4S2sb_ysBtoJ3Xh>e(z8<M5x2tMS+<;;=v|)sdz=-=32Xfnqq#Q6?*$rbT
zMabI5TvqiFPpWjZWt;vEMvYe5vuO0HU^fbP$v`(TkFo*a(g`DP_i$Njn{>F|&lRhx
zp@xdF_y!!=G9VM$+1AfRM!Jy$a%<Ls)b9rv=FzN}SzJ_;Sz+UZm>K;1nzC~Xif+al
zNk1~$JITbXZ2<QVY62&nMbG7^?+kFl>B=ajD8Z_9yc7~7JYW&1u1d}s_7h@huq|TF
zQsGFj^Q3egTXaQ@A^X;(JXtca<C$n~u57%OHym=JgzW;LxfP=R@oIPnV;l-XG8h0y
zswrhi<8DegmJl$x0uXczMU&Q2lpfk(<T<HKaS3i^*rP5@-nY^TfukB@UDL(1n#t-`
zW8F*<{L(onMJrX@RN7=4I1}(D-8p>CJ$8a`VsJheupARbdmevFFl>?8@#FN<LF$97
z73q)|vtqsS_oS&rHaEqJm#?YpWkd$`k#5T-pj};mH-nt}j(?cLjEq$^Az3qcIA$a<
zN?Qx!iMMpq*hyKoZIR(JzOpcqaz+oepeFL0m$G=M+;Xt2C{J5ix;R6#q+74L7;WF0
zT8e8!)o3nlNTt$He7CUk@7&#fC_qbct*gcPL#vFjRZ!rrGLS61P8*t|MU7O^w%$%G
zzL7gz$`lR@kR`cG@Fykyl6ctW(jy?{ZKpjU1?MIuM2-0dgqJ?914LIX?%AI?Li;`<
z7o+XCnvdVnL;9O<|4>}6aCD4o@K=`Xu<JP&h3#ngX)*nUvOv{$oS#VhAZ@d#e<>{(
z=|%iT>O5W_LpCUkIU?;&?J3xw$IfMv{4h~&prTQ*2^iEBE(!b)2NiPcH_?thZz=X_
z7(EqH0kLk6F|~?uCT>;*V~7wW7ZNI;(O1le)GEDAqcWZlVN!XS^aqKff|FgZvQ&lh
zXT(-8)qpE2)rqZq!~~(3*2V(?X&a?3<49yt^H3{-%)tUJfI<w!VT55%`My?^Xg~M+
zlZ_-xDx|b1T_>k!N`V!Zw^LJa>YwF@e~jsuhT*lh7+Mhf!RjjS3(NX;Dv#*0cv48A
zY;i^L(C@0>y1ifkiw=`m3D+vM3Qt<dzD4UOapa6-n+nI@B;U3+<mU@D%DdQ?xK!><
zR;x72xX7x3$o(pi0ve8!YtP6y71px{0o$9CHOd$*THu>tU>*p_!p8}ffc+`U6|vtM
zj=Li?HE|OtQ>uD!M#+d&Tr1xj?#!nB`buVFDU@O+GTr5LvNT(Dim82wJfhM_`pFA=
zTB+p&pOq%Cn>vKDldL^W3;}scseQ8yvj3RrWd8wy5Vha%E6D^_M>n<a>(T_4sCuu2
z8c`=TYjih1U|1Nu3OXhc;>S1Fj$sB@gU1YGX6D($%<O#=C^oX0I0VX6H3mrF>LauB
zPw5ht4#bIS0>!cbul{DPPolY>z+$GQP}Xzj8#)LL$0dKGJVOV8{~)$`Mjnt|;3hBD
zks!m2p9arY3T_Pdr-8%!;OR|W2SY#_QKP-4CRmgT7FHR<yVN%l#li~v4<bXKNt}XV
zsyYTF;PjKR1}+UrWvoSX!C-lyR_}{1-gBy{JZY3(E>ZmWzo6>d5DR6v{}?hRZIF;O
zAUlDkQCwUvCB5_Ad^K4njZ__m93K^vuX!MZUZ!@Ri3u!&GQ37H)^#Ef0xJWOfepT`
znjv5b2*JcC3utBt_^uHL^MhP41n~1NF7mgHYNg4KDp;rJ3DcJSQVqS-zCse<pYN(C
z(b~TI`@38%lkC6K@5+TW!K#Ld8KMMJZMRb^!z+OhEmgGQxFsF%|1ZaXUS;2g(i9|r
zKN$%>djB(Es;TaJfD)6-Tr5qCm;O4cCeLqC1s;z@$YY@A5VW`S?~;Xw;(D2~i<CV&
zA7B}T8n5JRc(ooH>(RIupYcr6)Bd*;2I%W`Duln^uKO&_G51pPkv>k^!Nx)Q>7%Xh
zV_%Rr{PLYwgXa3~o6QCozmyARIFQ6nK+Eu$tt=FQdG#guw>znewP21xlv4C1zM0oD
zkkZyuM7#il#emfeq&L5lDW8#;z>4LpzB4xG(aP^ECO;N4;X#6oFHx`jve;GsV<<gR
z9r$}OUl^qbGNAOfmF|ZA=DV5pJq!U4K!}+%%4^F>v`p2?&NeWBWyg}!%{MLx`u3?7
zlSv>{640k0)QJ}qY#{N68ODAr=-NM-v)`j>nq`(Lm7|Iv48ICILnInyTqb{m$W7;4
z%bP^FtYe=liIj;8r6-0*<4p4|{eM47sZve_uqB(oat2jBXjd`Gen%=<_N!7LM!1#x
zgFHBbJbsv^Rr6Q_dPEI!w{{b8{~a@6qk?Ng!)b+i1rNV`!?NI$$^$Muw&$vsGLEL9
z|DJY&gl!@>)nJY(K*H{M3A7zJwB)a|wtG{k_UMi3u^+<cdq5OBa|fC7{)5jX#;eb^
zK)R}Z@q7N|5%}?b)QHT%rcxwIU7X=~drf<){i|w$Bl9ZSwQ&REl~mIYIslBR#{mG_
zHgxFwm7^OU?S(!M?Y2k-0j>ch5IX?<N|0~W#}Wx%!L5i2ZHM*%^0=kiqhg4l3`Rqn
zuZT~k`*x)O{iS53g0*J9=F48WR-IGiNUKl6fin0PhoX`uw|uM<bL=PP*qa)r<Kl*s
z5?7dSE0|9m0e^Yz_pxxC>)C+|XJDJ+&3I-CFwVTz6RCWQCcS`xPCB?+EyYh~`a(vl
zG8epZq}FlA72iamscGrY20RazGrRi8K@m>g1n$O{xkIG)Vu+Ku^AONN%Q&P#yggh%
z@<!J<zHC}l@HKh696qLhYNrpr(;~T+?xvoM-8<n@RedMa6VtX_eMbo3NocE~9Hydl
z?}E|kf$@O==_eNlgN9WE^m}lE1iE%Bk}OO_GrSDo5v*QY>z!l|%}?A4vExFgx3*dw
zo0Ibli^pRM&{k<e#StclwrB0Fm$)4@5Bum`$Yom7phw3}CblWkGEvym9yyFAn@zJN
zmx@U*C2?V20FKg)V72&$=Uru5S&|0;W%sUQEo~OHHCbaX$Jj)nrXI?tS(-l$FBlZ)
z3ToiYwS!FO362~4_jFQupte4bv<tQ<TL+t&<!F!Ph-J8z^hcCkM`bw&mNk~`%qQ}v
z%=TKHl2iCnNBu+5c%s(AG|!n$O?N)xN81?8m>Be=7~QZ?o-Ud^rhZNt9$DwCz9)gM
zT3))T(yK##n$X{4GDiK?PiTj6-GhV-jj^`!^7`Nc`P>6@;jWi1>ZqFy5F&Xrgl1!K
zBHjmkxUB_sk@h>vxHQo?)Pd;Ogy^;olsQ_UoH^3J)F0r^b>I<PSZLx<Sny~sJK5*|
zW%iI;dS`cTA!gMH)^T_0D=nSWm1yR9i!kY(<i)aD7XjHH2h^|YrMsh(xePni9$aTK
zytr0?n$y&MP=4)Ee{x#h^R0by>Eua7aVO-W=Cqg|k2o73g`dCaR_zdu@z;y>A3#NX
z_yN`<!ZrSIFUPgEv}t^GU<*uhOX^<g9N+%x9H;J(o?ox=zqFY1w)*t!q8tAQjHZYs
z&nu<S|2v<m@S2hbFH6WMd!$yvI)xDY*CXb*^uZ(p`+hgXR@FrBo5EjbU4p)1*UP6W
zEMv;i@K=C`&wH&$nc_iHGmf&DDdGqG$o34bSEu=Th!CUMxy{n*&&`|Tk!?miuQ)$8
z|LutZ!G^A<&y)Z_CmV`2r}%&<JVY8lQ3^9&Du-ps&sGfylH##e9XtcR8xio&Fc+m7
zCmVSdZ_+DX%B%kD5dc|09PM1jg1-QTzanaQ8q1;YYb%tHw#%(eo!XwL+#VH@!vLko
zHi%5_Q^5m&2P*o(7%bq}kSHN7(~+bn<ilI6IGw)+U0)x(Y#(Z9ZXs82Tq1sga_a%O
zj=cq&ur1-@FsnBit`i?to`%!N?H#^r@h^n#dKMzHcLX&*<+o2>f-50ZV|2b)=~Y5v
z543^RtZahSD25A#sqEH!ku=)Tp(Xm;5R1Ve*&AjJy=e`T4ds#qVq$Q1d0H5Si>LV#
z$vAqbITx}t-1A(eaN;k-2NRrMdU&VCY|4^JSt>XbO4O(s7=%@p^OVrL=;c{9?bd|z
z2=41fpzD)DHjqu!!avcRxxkw-=5%4#Q}RC$Flh6AVAs83g6nqA+i$#~oTjj(=XbLa
z&Uw?-2ipe{zt>OqWyG`3Goa+-8>X7t{rSc)$v-d-Kw1^_K(si!+_~Bod--<8OE$RP
z5JxR1*D0)Aere3j(XBB0&%0y={4w=6n#}00Z06)}uUzr<^n10+>O=_}VjO%EaLf3*
z`wJn6OBN6hmdxKhX7Q5+Ilnc@iZC5Kzp!Y^m{uzNTUn*XIRY95SJXfIZcQl*^yg7y
zlF^8XyG{x&*K9NdnSdOnqALb$vMzgvk+uoq&DJMNhY#`Q)##2P9wogtSVtnS@hf;r
zT~J{nH;R5)FLxP=CF_zYU8y|(w_CuOwJ6cWn^&J{Zt|ptH{83d{(DD4ij%|*zxAiQ
zV>yL0H-o2Hk$$4Mc@DLu%T8fa+0k{)m9?tQO#5RH=dy>!<x8uOcDo1X_pe|~l*<pG
z<Z&EP!jK`A&Z;Z}UHJzJ?kDUI38diUdX>s4)lbVUa|XFKzy$0MlUOx$z<^wa+ZwNo
z6+^VXE(CCcC<-#40pc+kt}KavED<%!g{=99Sq^meaFArpoxhVTqE5eU#cIvwV#~V4
zQCZ7KWd<$bqXu3^n|eGQut1S-E`?2TOy&2)cO1;0wn)IXi$HQGUjt$BtYM6`O<d~A
zZ4<YVxWc#1;1EXM75&XJN?|7QvFYFgIuSb5)G8Q@iuy{|`@;Gr8(sON@ggy%TC%tj
z$9aBHC8kQRcuD#ZFX?BhXRJ5Lh15}Y2@7d^s`6wb3=fNpgq4c!!SPaqyL>PaTCC&i
zBKgD-CsbY=Ya6v(`0<a5^Hz$*ze4t#qTr*xXg+Cp<5PJME64=cFR-CBv6-#+D;y%d
z{k~3t@5w`(X1$gP?)zc5eWZ*-$jbG30oRGftPicxB$R?{-*IjS7TX>MLjG2M^<O4z
zX&@JB26esmHuyq9Ps~ai<!siq5N*yJ(|>O4Z$0medbEErd8qh)%Bww8SM`$itQO}u
zy&y)N_4X&9ZyFZyCpsL}4W<i$$of_Wp)tK<lr1%+p9jqUQ!&0a1#|90>P*I6IlX9C
zQwQgFI<}*&UTEDqqlg!Wpzseg;fAIuPyK3bb~;I5kgmMuJyq9f*6<I<-Fhm*2UP_(
z41t<vho=zgP+&hTt@^!$)|l}n|LnHOCvW^9#SkweshL3JyEQ#MHGQsOOhCNw^8P%g
zI{Ekh^VQCEu6*M9K3IXc_x+vrq5pICNbr4%>+qTbzE=@{K|fvbhL(1N+%tt<Uh9dp
z5lk@qh#Zt#1uFjWMr!@({(w+7%k#D8nDArr=jZhTxru^4R8r6A?%vVfyUwWuZ}M;3
z*G{`7ht)%j9_uUJ`xIpxTVe-~*D?>{jptdv_Z{Xt(2u38g1e6o@3@xDy3c*-PVYCI
z+e5qDIZ6Uq_v}neR6VM%YmLz`%GZ&+x|t_rC-3E*DoKIu`?<gutNzBD!!*xXS&`&f
zhQnVIDRfs?D!e6v+qb$8Ck2{y6Pa*$3c@`Chb3`aM@#cd+pe3RlG59Fl$L*ogK~-I
zpZ!+FUt%hBKTKg4wG&NW&_0p1CruKO>yS^927L*PXpD~mOd=V++kQ{mbTY{O>sNY2
ze{Pr1S{=#!3Xo-w%miw~pDv8xuS{mw4Bk)Guew0_IU2MTF4VW*6i%`d?hk&9Lw?2g
z#+`e=gjSsPejgBeuC8kfzAUu{c=J5v+5Nr#MgF(6j>nVlWaVTs+4r;5JqTxTlJyw>
z?RoHZZxDMkGt9M$gPUj7_$rRwf%xiyc$5i1co~OX_j0q>1U>cP^zKorUgmFN;GJo_
z4tBW5^VvbftYahOQ+xxByamRI?^paXN)NF5^IYQb-i8bsRAW|6%<K#q${SPX@mnRo
z@q_IPqaOH4T2r<KMx{NQA)#v~H2BO|vzrb!^2pO8_@`RCkEis8x{v@o^?}D%zH@WM
zpXi0_WVjts!<zptF%;`~?W!4g>hA%3AphdXH~3_n=4AjqGQBI)eN^eIz5Auze(JwI
z@+94NhI+kfktta5XC6AbC6~0u%m$q4zChttr_O(2f1$J@l^@W_&HTF=xy`%xB%}gS
zBmOIKxp(E;W<Qy@?Na~lgDyNqM$tyWQMZ$j5_k=T<-FA8SkR&xKe^u15r2bUdu0^+
zmvG1UjcEahkc-u3@^R}={-3~?qzYG`KL7VHiPG#HHZPt(bu*;@Zc6XxiXqj}6=$gw
z#MU7AIDIB7eWpN@)>hI-+<x`-J#$v+h0ZMNm%*O)fSl>GJkSE{-$W*K`@#j7PZS@S
z0NfW{e*(Ci`pBWAnB|pY5UR#|<z;Kaz>c-O44OeV0DB8c%POGfCBL*S*8Oe0W9{tY
zUHU|SEEMEF*a(?D_86&Z3q=V$ofKSPurQU*x=(WgMtkJn2T|(N-!%c<5bV`u{ZY=K
zQR7ZRkzRelpZT8Ccyk@^qh8zWa}!@>t+8f(rbnF*z(fS<M~;6AXa1At*w8FZpxC$l
zldjrAcDF+l?S9U%4!!?49JKl_-+nc=$o3WA?J9Qo&x|^;tM?7PBNm>6W8JBrxzBzg
zwC(3D6xII*uzOWI^dU)0vz(IWbNDTlDcJ-h+*H4=gX1lP(eis*fw`WW7$s=;ojh?M
z`68}z*Wr3?f_X0Z*=}7RaMxq&xU@ptyY|Rt_UeNp9qK2d?K%exzHfvE<$=pD3+^e@
z`ftDAh0<4nOU$Iv1ZAO{+j!41HbZ4+V=J#vMwD*&9#M4kz^@+Et<Iv_rwc@v+hViO
z5J^e)Q~3`+{yZut9gOYey*Yx+T)&5A-oWb9gR!|L=(GN`pH@;0h5yKCbAI&SUS62!
zhp^ss<A3}Ko$acR0%@-giv2V!#5WJAW2)~y-P2d=jy$gedEV6qNaF+ye>LftNcNdN
zvZ2b%fbzc<RXM<v^M4Lmor6N(QnQbk`)?g&EIU<$q91MS8E5*>?*}b$Lh`OL%eI5z
zZPXQ}GUboxaT2XVMH49)9!Lt!eoU%rUV+BsF@JW!A8QD<G6^%yWeWCBz`pvU`>hsG
zsPtKW`bnJn^v!r`iCod<H@?NvSYLsM!hVq6XMizf5r;{>Lrx8;tMI~+{mkd`+FbA)
z5df%qPkuN<WOMfHE$f46y^l*D|Al105<Fj{H`CzJ-<}u;iF)}8d47lEj;B@|D1nos
z@+)3#0VRJFxZcHMdGX1SbEyDVTh>Q!nu3%QG$ZK4sW-Y3voVeovN|dWwnO5^AV$l3
z0L@t=hn7-?k(=oKBie2eurSjqT?ObC3hGYEB+%|N{>;Fh;mtSdCE%cjMd0+^Rksp~
z^J%aYkA)DXQs|QJg&;_zF6F?wehYc7M8+wx+cfj)vv>?o+uHCC_^=HV%Q9$su!pbl
z>Wk<da1P%LSbCfck^4lfj?8=c`ld(v2GAda^PVRx=8b`+U-$~PS(f?BzaSM163lt|
zI&3?=BOx4v*E;ioaW+cAfeev@jVH}n!r<uUzVVN)^!0mkcQp4|Jki3UNE6kgB9m)H
z!u1_|;;w8$FOHe1FXPX3_yMd$`zAbY)UvTy-d=VeX8h4#>|JOUl&Oqwr&^suMIZ9m
zb7g%K=QrN90Da}&1a*E;a;9;ch0{cHWO)JNv7l*NaokdgAOJ~$O|;*Y{{189fLte`
zs`unOelV&#>ga*+07#$XHvL-v<wI&=3SUs9b1Mn~0WhSjUWv&Tu;&deC27!~`du@>
z0ZQKD<}Oh8R0=@*Q-!`*z6v-L9<Ztte7&x`?}J@+y)t^hnbL^?LU~H>zq%R!k>#Kj
zVWPgscWKDB{eb?<@0b;L&`kGE6el$H={^oS=wjeervZz-ng0Fv=yh_Ra81X^nrvLu
z^=m%PfVp2nVct^Bw1HqTqeh!?PJN|sQL??T$JSk7wUmItuRZZtu%ywW^Ct#>Zz;&J
zVE?6eZCQ*?Nb6&KB@ZX4CSO4`It5Vp&lu%h&HUyEmdHZdxke&o;=pR*gz|&l;!LN$
zV7>|wrF{^p1qF<F5)l%=z$zOsrdhu<FQz~^3}%N1BG8y4mGlWrdz3uIW=a}x-bObx
z=UoSYWUdV2k^l6vXh13%O}#8}8#}x;l|m&R0Uk?1UN)LMnE58LW2H+U(+4ThF*wtm
zU<XL6f6#+UB`F(N2ge;qH!5hHSn0ss@9N6kc}zDq@l~~*i>l<op5zs}E-`USeFG9q
zT$7M&dc(0(j$=<9OU%Nmx$a0fIq`^&-Ftc_;C*C-t;y8<59%vj&DnuWb-g_HvTmyd
zzAiU|xHyc`LKf8oA~o*rdnV?)Q(Dmh^sd!C2!Sqhag5)TL7vjJ^q19<S>KT-=x!?_
ztBT3gYxHRSGj9;-^Ae86XQ>^nUM@!H7p@IqFdy0@?`rA;BiXdY(|;FOTVU7vPA#w=
z0{F8`0WB(m<ml8sP<n!^b~Tt}v#EK^xji@9%r$X*K1Z7PXD80UuI;;8(DCy_A*AV9
zJT(cuskz3`+#}cb^A+>DABLY=K*P|0HQwB2bNL_J0UULi83~Q-k+@j=QJ8v<)xX}v
zJ)!BXOJEa2*=5k~q7v6Eb1-`ODM9%YR4(U<-Sj)}6(4DE*=EPizy-O0B*=-)*lJ5Z
zzWN)r9+!ZJ;zoQ;Mv~MDYpX7UDo7`28nRC3$qLdMp2JhkGwNpj*)?ibkIg?mg}!AF
z@hP2_yT&e!=Up}PfGV2Af^kxSRI`7&{AW7+2g%u*<HOn1^aQxytJ$WXNh2d?=(Co%
zYiy+ntqB)n+tZCX(SjPY#S3De-PJ->2WHI5zY+^5W*a3AuQF;RWYW6ALSD&%r#OOR
zvSZXNj%o4}S8JW}dcFGz&J(xWT~Bie)kBlf@K(0&K8Kpr<ZdUS`$gSZjI)WDce8(>
zmm5iwRJ;~Hc0Fkb0p9dg2JfNCP{kb<{Cl1Eni8GELr*=laaDgTn0pw*dI$x-)^4Vm
zQ~qwWGWXE-_I{^dZl=TZagf7qP2cflzMdb4s}3*{b|YvUDs_Wt#KeL;;8D4XjeTGZ
z!iyrZXd4*x&}hyd+fw3#haxQLT+9_t#zGD9XveFH#W-D3F^oO5Z-ZMq9kV?qDGA&O
z$+9P9&oSWOhHEi|L$m^a+{*XTkF~&u_+6CjD{w?d|B<~-=94z2DW%<~cvEf;hFP{_
zaYR5vmk}$3h!9O+Pi%Za#fcDHTVhK?<96|&3oa|`s?US?<B`;=Lt|V;ag|%B^qkLI
zW?7}o?kde1XgslB5&y0UR1KGD4&&uD?)n?1o(;DY?nIAqsrZV3bmyulu^3{2Ee?xB
z$y^5En=Wu)*}mxnw?w7@B!3VtH?-bP9!kH2y{&CdmOIoDk@Ma1-axCAZefIjS)#_z
z`7P(J@`p-WEGgNM)P>!_CoAxLqT+H5?RQ{^BSp!;pO)6-0n)-#`D^#d*T@oO@2m@N
zo+aUkBYqlz-{>-^GG$M91MrGq85C>UGgyjnY|e3?b0YWfY~}rWb9e+LY=&umv^>!n
zVVx#EiB>`adIM!j5c5f3mB9+*_4_+|e+D1qN;)bMkuk{ROR(Z>xrnUA4Z_4w6=_fv
zK$tI*0ba;0IZ;BC5V0NRsjV1F>3x3n+v2oT=VKTmTKZ0<d=Ct+fiD$a!c4og)*l@`
z9bSsnRs{s(hhswgErlau(n^$ECDAJ70xr$Nv<a8FXGo_DBE;pshIUO9?oklfFqG=i
zGK^4kw1@_4VHem)o%EE4hnkLR56BOW6G+VVp`T22JB>}X1et$#lG&G8WK!anaM(wr
zdyM5V4&h9eb`)Mk`m+t)F9i4p;T5g1O=NcB4B1Ho(kO1o+*z?o(6C*^Difq8wE5gq
zxEhi+l_44+LTH|B9tV~J1%DPNw{{6A0r>Vg=%*DhHRIk#MNT;FWV!1VezyV|Re}5y
z$~34R@Ppa-^MSh~f_--?TUv{(=8qxCH|sT2-Qrua=Y1a>%mFw6C1>JtF)qv%<l%i>
zSPpWT@_N>f-!heaacGkkpU}{vTV>;E6BpR84BM&s*H1<4C#eyIYFnr$(k;H2yBfcH
zAZ*u`P>IK!G=pP<C@@flJNaeD2Km(&a}om^bxd5=#fGAj(*gEcWn#<mU`Ib3dyERw
zStioHPjB9ZPQ-Wy<WERDhO9ryJUP6|jiXMma?4yJ+u~G`69B!xXe}bWJvYGeZ3O~>
zRmuAXf-Vc0eo4s|7W;|XGSb?NS~|eoLDYkPaX(7jCTI6Pt(Kk)ZjUN-@YY~#SvfE$
zPOTnmMR=d6sk<>F<+`wiGh>c0EGY6XTNy(f#TwN#123@Ew}a=WBJ=WY$P(>kAm-6a
z4t94KC7Xkh+#@HoJ$ZyWFk$HOFi<Mx_AeMQ#iorc#+Bix6gx~75l$ExH~2fznss*U
zA|~1?3jDJjh1o6pNqaKkP2eCsx@{^*POl<+!hs_kC>{pJ+iapm;KEp8)v4O=kh1+i
zeVIdZ$`^FuRITlGFC-v~I<tjQ$B>HdA*!t={JJvqQz~M3Ov!!5gQawkPcZPX%euF)
zINVK9`5pN&zlW8KR$EXnT7r8QUTLl>Jkkp(68kO>M#x7?2k(21misYD4;g@^U$V~(
zXT`WRytR>v#l0vUWAl_>&kc7&*3tA=5vy=>)=M$GjaTQ0bo;nOCc#4u5_cBs$EEB5
zq}|T%MUlDw-|7Y2rJIGR13wqI3R?!w%0rTL6X|G<@38O-(K>!1)7~)ZFV#0hy&mhI
zR`aNm!>Y;B)@n%$h8^D!wPM|nKL+=TM@pVda@%}3UOOipc=j<$<`@^cW7Wl>QKE+Y
zt5`zgj$G|Dn>|ftz+hL$&Xs3;8LFe0cK<W2{R~^aMi<tB8JX2X$v#ZWCV~i5^O*^F
zASn6iyl{l2N7ua8OlsGBk9L|caf@PCK^3VpK^nzI*>f)Yw_ZIb;+yoj1ojg{Cgx3V
zTEz7)s?49;Kt;=gAPv|Q@R`Z`B<(2e)HfBz)Ms*v>5>b^+GHY(btdIkZC8FVOELMd
zQT*aSikl05EwnaFCClt46-)PV)tIO!bAzH>;9+X9`ba1pNa<v$6Flr^A!F+4lgo)3
zFPnnvWUcVDsA8MEg9<qXJQ++%?*JxHRes<;OdF-74`xYuv_{@MkjG;ZUzLW#)l|0g
z;4NBIw0t`;da1UA(pl(JM|ViHda<gq?X&0}G<yg?+4mX(gA{MYjERQhb)v^^2b1Ox
zO2+H^C_i468vhrT4|_JW-L1QSS)%@~v&O8dR(*VRYp_#ubY$e^O#)0;rdHG9l+95U
z(Xv+$EbmfXq<6bTcH!v1`~K{%V{Q52b{SZOoWPOFx<7%OPCdpkmJVWf=RF&;i%W+B
zt=gPExsvT=cUZ_GtQ|Gn%=ZRbMkmQeT?dHjCAPo#Dg+9}QkS=#4h989=95dVX0doA
zE=m+Eog#B9|6<7akojFAvmqzEZ5M{Dko@hwFV=RA5pxZD)sYjxp}9j<*g=lKlVX!n
z?l$S6XSADmSB+yVQDu|0BSlTn6}V+}@Y|sa-)v{MOfu8%NO{ZF-v(AuvJIfWN!qua
z!YH4<x2I{_gF$Ex$+q}zWtJTLViXtS59;t+h`RhMW5g$1ED+fDA^9%Jea1-YW5J4_
zOWYn`MQ%a9Y4HR3Uvkfw9_lcek$6Hx6E-MQWT(@vY%r#gSPauqlKj+Asg%nX0p{;G
z7~}b_!Y6Tp2xTme(>!_fX{HWZ^sd6iX!j|xBz{?p_;vKuPieu(Wb|g5*R4qgGEVWI
zQ2>k#S}>U!=)yC8+`1#`2Wm3eMIEZnRO;>%%FYN@@VhEiVdrCWi2P$`YO2L95=(jK
zJaau%&mtAq?S8sQZk6hDk>H~n3LbGauX%;y@^H!d=)#F58d6Vv=iM7ExGI>RmHAQP
ze3AKBi1h25@MDFUOY8-vC>*HaL>M_tbgMrNmXb-)G;F{ub5J;HS|H~?n`MJCoJ51~
z)qc@u*RAu5Q7_BSRG|v77tu)8NK#a;BZ}c=5k+49AI8ohMigMdqHWu@ZQHhO+xBbQ
zwr$(C`?YOb|IKn{Gk;Y{Ei0*{aPB>5rnE>c?323J3`9HM$T5W<D{4*Fw$+bD$A!tF
zF<d2eCy0v2M5&@DQAq06(dBz-H$s*urxb%aAT1JC5%*zgpPRy3qC-)cQe?zQD^!h_
znsQCjUWLcUo+hkT(hC)m{xYFy36DhmqA9mlbqdsB)zdl$ME0c#i`qNXoq9EBR(|&a
zx+>k{@2avOT$+|?na~38`YY>&FE}k8<${tioE?VbZBFSdEK0J%Ry_N<R;vgTbz<os
zEz8QHLkU>O%gu$Oq%Bev+Y`t;s@C!9Y4S^W2@#vTbQ`e~3brU#Oh`GkY?v)5702Qv
zUlxlN)f3X!a#qq4*GP+=o)Yj2H6sGDq*m-xF~C+diE?C?SNeWG**|Eb?C12%dieb6
zeVCv8KhHfMGq*q2`n|u`{5`*?yJh@7Pwbav@_GC}pS%8FE<aDlQ*nJiZ|{9SY`zz|
z%N}#)_q)Cy*}Ywv@*DoIcE9(BX-yyBufKO&{@*`c?!VCg8~*Nl%OL=!0sx?#0{~$9
zZ{Tk`OIl|OLq=K;4mN!@mj8zU|EulozBJnUtNnxG91ZD4G?n-z$3Utu%lTL7%t|S<
zmV~3RWSyvygoHB===<um?Ny@jOF}B3)^*L)bYpQk_dD}Dn-Ttp6zh@0Dq5#+|1FKk
zg{baHfCqjsYdl8=+3+G%aZFqsM-KO%%;hUMSp6W4!s9j?xq)B4R1n45X!miru9*O>
zkE;P$m#bCH3qYpsZ^PkOEbU3}wFnU<!TnKk`Jw?QD9suR;Sa=#k=Zr`zr-+)TL4)`
zX9I^juQ<n=F}Y00Wt1ZWH1FEOSZupf66K*>Lovr_Dt(Zm5#TzIhX=5X2bsX=^TqKa
zdL6u;iLoO?T)?#3A&Hat<1lPJ50YAt=@JR#;kMY}#f20!fdG!T7J@96lPqzHXcifB
z-Ea_m?+}0fJFipH@cqb{*wyDt%p2*QU3Ju+5>M+O15_@WhbPf&Fe$9DCk4CI;dU12
z3yxA(16Aojiu1WhW&LSt+O<fl<OY~#uWakxC4L`H@B7@(95|*9jSV<K>!m!1iVLeN
zk@#PM-HKY>`A>EY&OGrwG9b9Efe`elbw`aPY?OEOsU-|?c0(kYYR$j%y;*31XZ|O>
zL!;C7VJ32KTmFuBAEw{$O{d)8zuW90oN|9ncxa)~Q;(-{_#4I{ieGfL8dMAg!{_gL
z#!_38rHsMVd(kyoPd*|JEg5D)uZM4j?G5@PN0-Db2HFn9mTcU-aA}+8R2lkHZAppT
zCL*2fLJpho46c;jkI0O$y<MAVyZ4}2409eC?^R#x!;WeTP&ExEoDVVUgM!DMtED&b
zs!ez6_oUXL3_X(o&{%UKstj&6Jjk;p0Z8iI=f0N+lQ6j*qranYEVmmlI2i`RVT3de
zE1(-U5JG}hX2zi{`!r%e(Hai%PvS=-s<v1S2jq}0flhqzK$#KcX^Z@}FJZW8X`hsw
zjY<18ZJAUYK{*Z5;wcT9yiO4MLdpa*-X1p~CP6U}qU}fVG~gmQDWMRe?U2M#F-~pM
zx~s0}9f3Mi(ceJ7fu%cvE5lEj5wn}LJ=JRe3{oL!9uF-0;B>)&-20$_&R5)CB~DO6
z)vv)eiNB$;v5O|$1^vp>ocy?x%bDGgmsGfRjd9!7cve2K_Eb^e)@-XmIF)U9OH{T}
z;PFK1cpp&M%Gx70>s?!jU8^v<$lj{J3NvrA%Di~5&=FW^{5|KbzG?P`w-&g6Z~_&S
zzC`Gd(;g7$B3<<7-bPdWszcQucuGlKwZgk)X_0Fw$skx=a_QMz+U&t9-MqHaW`-qN
zu?<!!n<<8)v*WqyHnPIi+Zxp}Lb-Aqa4wU#o*@(acR1d<K*$2C^JRPG;eK0+=trR}
zDLRjzpYJ5IEZLaZxI)b8sQonSOzV&vz-``H^8%y2I#<f6S<U1U1f&9hR4Sa10x1GZ
zws?x@$`wp}R!>Q%Tha{l&~yM(ML~f8eMT*>S*v)F)PrG}q4K?ha}Dg?(nZAmGJ;J%
zZ-H>{Ytpo8+SW|LS|(Ai$1jQMksP_Hj@VB5%A#>g8VMaH8@`d6{TR;ZrE+6mQVWB`
zFq_pfpRmgx<g4g|zUo}HNl=mn?y_$*ZSA@|0U~C`GzXV)DGp57aOI9d6*JXTHi<PT
zt9afjHficHD4WYf3KyLuG^dS~P!Eh|FG!I&)OB=lxGS81`zK?PKn5Sz#HrZK!TUoA
z0!!g-5<^es;E)%D3{I3m`651G%1EGSBZim3mCP1_Weg4kvepsiWQjxI6o))aAtH@X
z9al4tMJUVvd&~~v4BG<3ROBwaWDge*f&{j@75EDgVT>0ln9NW{vuQonz&TB5pafKe
zF--}UVE`60N>PcBTyawvpLyJIyxwBVjq}|Ktr%@|yDr2^)+#<uy7k8<MW|_#q8@OF
z)9uhKK`HW`63n+$^j*@7u=0_N?#b+(U6Ww=FvYcKAevXc<PLg!rkw;=v4l;S!@W5o
zlzjr#$R#szR6<dO*=u0^;qQ^yk_jgg=cz!DPv8Uj)~6BLgj)!^hq2x`$u`0QG~y{6
zKT9#bm2IP3&6eIXpYG*gi))SjeD{vNTcb~^x-xFkC+dN0QfVjd$JKLcH{cK#e4D3h
zp9p7a&1z`HRjp_&{e<i=Zx~XJkYZUIg!87C6_Fwb*3152spLSd`QZ8I)zdh~o#ESs
zl>#9qB{brzZB2`VkyZnVPhFXURAG0~B?@7tuShr?xRtOqZ%7-ll!2<PD5LL5)!amF
zAAtcurH%a>TEgHT)j?$<54O)q4u{#f?FQ*Nhq`2BO$`a-Zl`wcz(0ar|327QJs&u!
zDB8(}+9!Sr83`4<9IvBIw*<H0y5e!Cb#|rNL-rT#gwW&`sH&<>wu^DPzuv_Qfy7GH
zOpGm~iTKgR!UZYl$#a$ErwAR+<I0$+JJ+l7Ql(Oy=Q>4l$iX!BbIH9+pm_MQ$&DBf
za-%MQZs->{7O+_F6;0xS6J~B4;T`oneqoT*Yj-VSpLi4a3dD3qJg(;CYCK*b59DgO
zYC_+hECX{XjanDWuK{!9h?~SzxA^!hv$L~TV|VXg<w^jNTCriNM)fMFsMaVpvIRRH
z5RLOpOEgazK^~aKsy;lSNUhGES63~xfc^i~CU_m%!9@4FEld^OirAFC0e4qLNdR0v
z{KMchk4G-s@bmb8X)gM-t-h6(#|rTvT;S7S@zDq_*3LMM%tMnAP(x?PwMR826(#<~
z48OGj!D@tL$W(aQF29$MuQkTj<Z1|8TcwiUsYjCnC0(cW65{+9m<1Mb3(Jnb?<E1d
zDTnWV2Ilh6hgx7>F?*mS2Cf+UtpofB<v)BqGi^^SPX_$ZcowV!3)(p86Cu-`5@3b<
z{zMGQp&nPM`LFx3ztH$UoUc^1@vkvy@>^~ZQ>R+$%BjR<RSiZ(zMIT1yR=%NV9vTS
zF}x&$!^it)hZKSmsS5Zga0oJqP8OGfGO99LNM<&NSsDdJrARHSMzQzdRvybA6zh1p
zyC{{~vkCB=U=61~)g>`SJALlmiPK=&92&<Z4x8>3ZaEw6;>L;}5~c_UgT!8N2zZm5
zx9Re$Q2J9mpq?FBM_2QQfOGtiWK0rvz(kn6Ek*GUzx;6~9y{f0nV4U~FoedSKV~>M
zxO?AESjQt@69vK4tzd!*+1$H7+;?bKUqmXeE8ZW9@Hw8Lr`N;B>Bj0*TN06E{VGve
zB-3MfNOsMre<E{XlPM>cuSw8`H|xa)gFNt+6qaPXPbt;Z3frNjwD|Xh8bR@<WEwn!
zsehM>S}8@M-Q0e5d6>uqO}D1Gy-)>D%wAmqPb}PK4{Svn5RJrAUkrz7P$DU)I!U1@
zM}-?4h-#FC8Jrpsm-yh<E%;HO;|Fcm4oVm*((hx&<7e|Si_s(dwx5Zfyif80s-VoD
zq;xEBoaSO8bZn;y1fDQx!E`>>#87ru5e{Tyzu8R4p?!#%-3y*8D@5ePCS5+(&|%V+
zH7!tO&wxdwn7J*0${?QNBU#gbumZK=HqryL0)<I$Hnf?q<%h9hr#Yfd(|2Y4gEdu$
z=l}A)G(TmsEuhQk1YX1I<>keau1Q$0GiR1!s44oV$W>K$DYGRLgri$8@XQh`=pUQ!
zrciTLm11sn+@bZZSkrBgiW61AP5e&k>3HSB0D`?vsuT$^IGoer@03P7aqmSL1w28L
zGwD6~@D<N5x*>dZD!hhLaduv|zkv7yM$)Rdlk^eogUz)p8ByH38EJ6F!Ww*}HXc6S
zVZj|v+2KH77=v~%27k>oR4cI5Yq%5+<BNUXmf^>~HlB&qGF*);6r8SoFgY$j8PYH=
zh$QB)H}Or99s#^2%$5!sj;*4}x92=8Y2a8R0h@W5q@*}FGcQTDJoFE*Hqs=U1-eiy
zOU*m5h(ySV_MS1<Y9QMYSvF%*!O+x*fFMBtGM70RbR48Puo;4FQ>J0Up;ZKC>69F<
ztvJpxH`hyGb~L`I6if9lxIbW3CJ|;<VUlQM1Jh&{8&ZiW-JAxfJYTKc(5s`u-lI)v
zp+%&-uFkck(Zs!wcBwG>Z5v{*+qwGHs99hmU+VBDj5W4$*mhoPkQZI5Ui$aI@z>+;
ztD>m-$M^|Gh>l`W<V^h)E!Z!Tqwv<wwk=CIDo|S?q`?qDa(Bt?aS{}7%F-EzY%A=(
z&)$X#M69?F@jQvBe`0dWYv83ienp%LkSZ}(nmF{mi^kF<xnBk-N#zj59T>^Ec*CDD
zDuChB9vdnx8PSbpEx*6nM<yU5mE3usHc(clvn=HM?xtE?Rg(u-VQ%Ja>fFLokqL<u
zCzQ*9+O21c_s%RC%9kM^nDWGvA~;kV#J1)vc{1gV4TZy;VW7Yl-+7TQlY%42GAFSl
z9@sV<ab*%1MVBMS>HJtH2Mrw_HnezKq$AEW$JKUcHC|-V1@_oEy1Z#&d;_SEH2=y?
z-Kif#>Xs%|0&yI$&rXIXX%wtLIjN&j8=qn~Zyi(tlBJP#Ga0zB&AeEaSlFkZEK66m
z7>v(YQto?sOy^bXk>T%bWuDm?0rSXzqGfIR2P|j*j!R^nYGIOZQnS>78n16B?>$}@
z_?qXO5^^&4Hy<3B(8>nsQ`$;5<@XS~{VRX7Trm^5<cvq##6N)&Womts1~W<We`hlW
z6BVFOkw0jl!xbEw{w<v(gbrEIn%y9PIaT5ciLNjN-JD|s8jaLCs7Uk1**PI5C8yqC
z(f0BsbdE$2&9X%{N$;fEj#y_BEik8$R4qB@t`TXnp<B36ZS;-4IgJ#AofGAnYioQr
zf9Of;;ZM6APQZC%R6S*WKHqQfqmmwr;4b|fZsrMvF7BsS+B*fY$xcnSMoFgdTx6#b
zeOEl7D#4z>%evPe`up7A3B|Qf(c36gtKux-3p!8GpBLK6$MVskd!|bFwOl4X_Pnb0
z%AyQt9p^-w!KpQHV%ZyFGQP&rK$aJXO>Z`R0Q1*_(fCdVL;m!XSTwReA0DjS2!Ujd
zEdPWyij<QH3_~$W7{C9{j#}xB6bVDW+z3~5a{uDu<YYgnI5kmGaR~v$NPMh}n?K^x
z`NL3<K<}pSBgSG@9Gf#Lo1=gTGAh*p$<`H7aBY=cJ%gZjS=2yRJKmXBoI%@(M)M*7
z9gE;_DnELb3kQ=6JyTuHgdVQW6u+nkDu}^Ww~?<nNCg%`6C!^vKY09Un4w0e5;c;s
z{EJ!<xS$t__h<>OQkLUU2L{Y5X6@v7Qptr>E#;rZTK9gA!_Bc&Jyj;_J7y0`wR?`I
z);LAwTMLkT<&Oy9kSp-JI+!>SD3y8wG;nGdT3h~K?fJ5c#U2`l9TxZSSLns(jmSn$
zmiiy3*#^L90^%o44!!L23jKNItJ|w9+mk<D>Tj@#=6GtmaVR!<#ec9^1|C@P1dYV&
zwv*;$C8A>_o?s=SQ6RN0=#A#S@UB>Ir*@#syD$lQcBLGO+%d~0#a^{GZBOlU_O)%L
z*uW5B!sQ0fntL)|xTvtAuQE0XsLm!@;!X-|NiA_%Sh$8t3B7a23!2D1x70bE&cUdq
z=0(VERGR0{tH*->ooMaR%D#ABP<RP52Lj9O?wdQ$qb?Itdzbmm2uGEuiB)>6M%1X`
za*QbkJDR(#sBnr-cW`mQ6(u(gXbh=Uhvj?`8&$tI9n)u1P@`&Ce$WCa=#-Dv!*MMh
zQNyP{h(7O-8c3aGTM$}fy6$c9$X-tUIC}5+*6~-<i=0~x(7+UYGANqmrk1PHAgimT
z283>!3suj(Urj|Xmb!HD4RJhQ!gTOyJ3`*9keFo+^+6Fq%e|=spsG=SG~Fmqy8x$l
zIBET31Qvq&jqqoHKo5R!eP3^+_oPLQIy+jOB6>4#jLOi=W*ksZs_t}1dTY#Julr~i
zCoK~uknE{EZ>V(_m`!v`cXuCt?Uq)zZ|R6^^7QQT_9hvksQka$cNIakz`6F3Tqx&O
zrKXg``96TC+!4c^kEYpTZf|@=T`|fm{qJM4g`{P_FWo7+r$+Jl{dgF9^Y|BbPX5`^
z@M_-Hw=WQ?)VhusTg0-yNpGi)CR}%7{Z?{)9bFjI3WZhqcsv(xm-EG$=Nye#cgIP}
z927l|;J~(FA?-<h6@fJA05ebOx5`+ej7A$ql@lDP`5Ga-517@#nWvuL*$YO5ca7&;
zzp$SMf+E2xh0jc27Aq=_#2=mta6lm~QcZu8fpGtMOT*S$Ml`R$ekxo1^MNcgQ9!h7
z?8}9d|2%kKnswyPn4GaMt^0ecX^(hUfhIBtE90|$zA}kK==Tm3zENey24d?s3+QXs
zs|;7KN>i)KnD@A7&Q9y=ciAZTyDKvq`ia)cw;dX0VYR{DlQ^3wK;=-lBywtdV+pay
zQd4S5_mg`*RW%YM#?-|Pi%6c&a)2IS7oybv=;r@KT0KKcr*By|+SgClNhP>zp7umV
z&`S{Q_U&ldtns=kDL4}<KlEn2ra87GcC_%diyrC)>+Jnl-rJS<NVXXIC0*Pglk|Lo
zO}GR~EWK@OeldPGTPdTlGYx(BmK?heKfAIHztZ8J(U8;PdVTP#vil58jJ#s~#D*d4
zVr+0!Z}+^rU-dSMmSwMeRfZ4Edy6OdF!{ePpt<G5wH)Qvy%ruH&_>f7q}ds$;Z|1D
z2cy#)wKigRekqh>>rEENj|g9q8uTJjn6EJ&ivp+3I;SYl(wVNFa#AEWRb@C~rM=Uc
z49KiLR_jdLEXYQwknI9VpBCm#ncy89i~s(@XBU;Dx2~JjlxO>|f<lLZ%XFnIvHf^%
zR>4Wz+6*X0(fH;i<$d15=-O<TW+ys%H;*F=*)=`w^8eDWU*Ymh<!$gBX9f{NAktCB
zsV%_d_HKKJ*zGN#{oa7}Mozr)ySOXX@G6}<**_gkASVGVI!p6CwOOWuojY|>+2>QM
z^@jMfjQWD?BBwwoi2;eXBG9@Z+_pu#5oRtO6zU$4WNgDczv+(bgyi@u6vw+<N4G>1
zG-bnoxXs>Dh(bYWtB&ea*$(!Min_gPVWOVbe?`8OKj5_zJ&@e1orJeB42|p=W^ypR
zl@~8BPQ?$}sUFweRj%A~ceS!s_B1W!buRo0l~f@N7{M-j=0?w-i1w~)p(OSXy6U*_
zVki)b_o<Qyo86%{$<|yQ_-}Q6ypSZC{=VK(nk5t=fHN_7hm;>-7`r`t>O4y>ANtCO
z>=c?nIuJN@Tz2MtyQ%iQJ~03jMmRQ|nxL0fdRJCe?N(O#d3gMp=;hC4LBR&fnt~mu
z<*pHo!bu@#Xm;`suub^k>A^=~3vyt7g2pcBOTe}RBV2bz=zKZ|KWQ-fNXP!5>l60j
zd5`}*)bH4LtPtc%Y&;Q6qxd|xEK2w^PSUF$ly3j3?ua9YXSE&+CD;0#T%`a5NQg}?
z^!k@Te1a>wZI>`N6O*|jCZuI|Sj=Se_wCn*pY%SmvyIwBkH)py*G>@ZGdnEJ8H(=u
zZuo2<p6O)g$@{`*zGQ21pDCvHYpTp}c^4v!X)I<u?=)I)WjOoLy24~8BYV`xD#%-G
zRs>8l+Vs(SQr+6HRPnLvx{k{k)Xlazie4WuL@-5LGA3W>UW^GEUk8fnyPLOQsZ1!4
zP6K6htMs{wKOwJ%k!wa+NG&0?##3A-8+Ic6tUzFIjURJ{R1SV3>uJz;gxH@t3{^OU
zS_NSYrHUGhN93kC2uv9##tJ$A+agMWvz-z}a6?v?5}_wZGZdn{Eo&kK+!Z0Cb?Jg1
zKe=xzP2X8WSQXR>0dRWybh&{6C#FeYHUU8VdqnWJb&JRLNDjX<?mW$%;ks&Bl9(M)
zCDp8d&~9G1Ah)fkuvVfugie?TQKT<$O8~4VL(v`%nht%z-7gf(ymFzn7-6LerX3Uw
z&p{ek|2_fB8G5&fv8@ZQDuXfIvDM{Ig#+F@#p`eb=*7uPcjqL{q09Z2a$J-F*bR~A
z?jexKKU-5^0_KX+x(VpF9~9Wa-sn9-Vo|#z!&JHhRRav`w@4F`74GB&n-u^xl6o6l
zbWv>-P4vdPqOd;WosaH`Q48FX56oq~mclTR3U>HYXCX9}*R2FCkAE6di4d8xN4jnS
zk_QEYQmYD7+`FihZpobqRIyDJN&>jh619qwE-E2}%3>=O@KHU*0ca%(O>p3nkSd&n
zxq=0%Y+@yCAP}-4P@j{(Af8Mf`0J2)CgH%)>qt^$_yl^~B+rTfU*U{Xx!OG<$&G<o
zKsD~7mq2x7wIA1PdWRr9+Npgb47oO18J2JiWspmk37J~b%t4zyCXVD0Z(8y_WD?S}
zY(0@-5Q+5fG|eon%OgP5D$rhr5E*3!BisHgeG1jyYm?b)N>66kgm3CFpTyE5gCcyK
zuE>aC3z(Pj7~KgbdXVXN$L-QHb=BK2i8KIBpvk`bMxkjpXzL&$3fv(ScocM6fdgl)
zLpgfrB9*4%weZu;APcFpW|I|4<E8@>-=ij<Z2loTkJ%XEG@94Xth0F1&*@J+XaGS7
z93^ph<Nki%y$7(HAPAva(j`CC<k9Zy?IVI~yMyzi)SSmU{So&&PMvxVo@$O9Jn|Xa
zGsR|ydZ8eaFPerP#dcC95v_?hrL;1NEXo;Y@^a%6#i3x?Z@D5Zfe?r%3dq#5P_pFY
zpklb5#^y>`;3*oa6m-7(4qH{+D#E{9p}Ouxes~pObQK{Fo0ymmtQ)sj6LTmyHVDnG
z5S)YIbTv>W8F}X>6U-A85Z)f4{@gOT8=ody-unxd5WK6|GQzqQ#1(7uyTGy)ge_}`
z5Hghc#;7J*s|`n;W2a6WFm@$V&U%K&DT{M@`~t&03i7YOB;JxEf+v(7@W^+8_l`?n
z$!2YePnwyvgZEYEeeQ&`bsWMeP;QZj{e0&LTQ@t@9po}0n*e}ee(|5IW|24KrhZnU
zd>4BFnTU#7k>W%NKyD4m;@x#Q_Qka*E^bhmfS&P42>|ufHvcTsKB3f}#V&r0Qr;Vp
zC!J4j^+cOK8Le;In=konZu^r#`V6T&F6y0J<=?sSoUk9s@tm|9y$&WZy2@xzn)eq7
zsp3wvPNvbbV^u7%hTk7djFFR1bA#w+uAfF|cIU4_>GTJrG(EeomNlI2XlVQP;%Ib}
zaSja40zAV=7E3rYw?!}XGW0C&kC#g7{YvSaPZ(~^n@MZBo9+{6`&N@O{dhyssy9r#
zx^njGm!FH5A1Q7za-7R&>uQW$0Q`s8$A1-9XDLcz9HM{i+xAMhJS@HT7D(zBTnD0v
zgf6-T<DlS+IO30BHfQ+ljFfV4;ha89jU0+a|B$dXf{>By_ezOKJalTTY730}r&dA9
z&NX691911SV(7GVS(ScP*(DI#SG!xAx!U)%d9-nqUF;Asx2497UmIcGqR|^W+B+tW
z^o>ZOfv-h-=j~L%(f!L0i>o)=WTerKso*(<GK3QD!RYWj86&P(HWH!~o`5l9bPxzO
z!_f(O&~!!YOgNisM6=5n!l}@wJ@BaHXf`!*jEi3!qr_6rwi8_t_px*WO^e$}OytKg
z!~9v;{|G(L$M4`;4g4M-$zP8{0dp`L+cO?+N|x|T3j*R~c0fx*a%Ge-DXt_asPrh8
zfP(Zi)I3BaPD^D)V_!sh3@rZ}gkZUBj~fm3jbuQwW|LVJESbo8d?F+{TE;L}cou2u
z+5ucnWR56tNF@QojJq0GCrmBKEr5*Bwh&^fh3-e(EfA)&=vbE>HOOI>tX@y1gBow#
zC}5Sf2Ky*syMM(6fM?DHfndA$kRM9j<Ix|JGPGSR=9Dd3fU_1U+o5n{;%pEej(EIS
zN(VpOUg^dPBN<rQ-d|W}$v|2}RLhrXASVkHkQ{DbKO`F(9BsRwLPYHsS38v!o2Mb)
z@kTXO(ST7g?=J^J$M8**gr<AXbbo$OvfW4*Asvi}g<;(Hb#1qk6U`?BHilzHV+oGP
zj#P~hJj$T~+iTas`uOoN(|Ys1)`nJBYmExV010zfIe<l9&~cu++s=9@MzN=*_zL5~
ztD)wnV$;KlpRdNzr)!ei?n1#!mn+aOEi`@jl|TB&!E<^e4USIUv~}RP!UbC=SE_B`
zm{Gm~D6Q<^gt3PnK1&?tcdYs2ZHZq!I5HM}U{V{jP7d3=w>kx=2hq9XXn;(X84M_{
z4$zttg+4~j{kpUfqsoqvFRC3mB_Vuq1U)L)se}eHodz+L;$s4S25E%ny+E_@jM^s7
zU__6wnOayc&=CW;rV)n{3E#mDy0dXsLZv-zS^~I3r61LMu1=scKr#FKNrSqQ$!4IE
zY50WA<{2NYRqF5?EvQxipa9iL6of&CeNT$#AQE)c#7vy9frxwhDxX*lCM*NjcsO#E
zp$Ry4-4S#BOg4yM-$o54Q5u{uLsUV+XkG$F3{MXG4=E#tXSXd%-mn3UIH40B7aHjf
zPjO-fYUMDH<{&mUyrxmb<SMe3D&sn7YNd^Di7G0vkx_+}qdlDfbA}>Le0Z*l3i3^_
zMz~d>I_WdXyzKD2v=IA(b)pp#1-X=Ll%m{IW^pRWW`vS5&?e+AZgC)YL=0z}AQ4TN
zV7=GTJ1x*a9L_53$IBS(b*vELUm)1Op+>u*M!)_4Y~TnW<-dbL`0<+=SQ9_JY^^Bi
zfNtn}GiFVvd%F~D+*|=8nAihg8cE8l!=MZ~W@3xKR!7<*0aKzN3cd{=C~kx-0dKRt
z0G_PcZ<0Dy_YweYvn&49&Z>CUNeF-__|`P-`69sK@2YWHq(g3#@JuBG7H=E(rz>i_
ze>Zn_UK07JwygA8S1;{eH*5N(Kf+Bdr_t!O`5`y2<=PHOeTN&{OCuX|)M&3jwlmY7
z5T{ms-ZotHR$ssS;lG*oAE^CS>fW{Q8gA@AY5QRDx&78|-^oWEi$J_xlzu?`KvKV4
z_gRnNBb&$Z%PZx6^4Smyq<*N5;Pp@v`4z(8w`MKNe#?@!xA}eEyW3w)Zh!Whw);!;
z97BN9*Q{k5zujNqeomjW)cdY~{3K$*Z;Dpaanj@P;zoP+UAQP>$nxA9rTQj+%Jg37
zX_@Gic0WqqmpwNb3ysYtl6ZoZ!$<Joc|{P#0~}#h2Tt>$AmaE00idH(J)GY1w%1Hn
z{Tsm@5RQIjKT15?KjHcY{b$x}5|rJ?7qI>Kzh(&1q)Rr9%u@n!;wE)~hy&3yW;9dk
z!4$+*dcu>k;FR(`(>S2_EoNllkqPa#EM4<guA6Q1Z8t0f;fJ+g7y*n}Lot9Fkc4S~
z8*qfH0T`nR)f7P!%Q><=Uf1vGDz?IG*}_W}!V+u&vc)z`yz-*m;EbhVQ*qCuhKP#0
z=aYIQn%R@Ciq79q6!iFKxGp?jqEAu9og=R$M><cTe{c`qjmrP*1>bEksDtsDG%enP
z|Au~me>X(I68ql~Tdoo@aN%ONJzUbRBOcJ;Ei+v>`=O-qJEAUW!@ai07tF2zZyz2F
z!vF?F%gH&k3xYG{g%6#e_mEU1=o{Z@0k^1Cz-YB8v0}+2uD7Ov?|l}^p@c~i)53y6
zu?F@x0p&<RpvoCgq_8k%wq~`#0GEN+%;G;4C(;;YO3B1rv0vK)YZ}^-h;h{fq~ts1
zGbUht8)YQ!x9xesErG43l8`2IW%<F06iD!+&BW4(b2E+NOpaCT)Uj1kYO7M(iE5!P
z(v@@`%ZH468FP@<O8~CbIiO<<UR$4`Qy=`Su<<?pD2o0p<L4%Mu~q$%Zxp|2H`#<C
zYD`PJNKimQno-u$O|@m#nxQ1LcFm170AK|;z8Qj&sN;h~hYu#l*YpY`O6vfYTNKr7
zn$RlIh<d?a8d!{xVU4kTv5+doP>ZP^Shz84`a_q|7X<MUuCHXPZRl9ld10U@1+Cpe
zw6R2OKPgGO7xnWh?LR+tN)|`uH}HN!b;}C;NV%_f#0Ez6uZ~<oZu(+Y*#;J*@DHA-
zSriS6j@In?o&1;vR8s0LXjDx+8Czu3Ok^|Hi1EUT4%&G)!Ux#Worndt%n*8kEd#85
zNb3O07vkp6;**5Mr}Pqe!8N^XT}W#m%Qn*gOiKToyh-nu#p8+i@l*Y(b-tI^T38DE
zX0It<ISc#czWMp=`ChZn?ep63`S`kft{OVM+xT9@a@&8!dPwxC?|Z%2tLS1pckOPY
z*X#MJQFD|ht7*zj>p0}_uG8z?@c$j%Hn3xZx7zY;dbRn@r?lAS(;2291DZmps1uxv
zHAy%A1M5{dtQeQVdZ!@SD+~(Dqb(+H!q7}ET()tQ7n22k8tnc(@xHdYcOBndIR$5f
zBA>=e_Yy`kzN2L9Ls0uVKsn6k_IVkO8W2bRTk`4EJs~XpPj9s6UyK#ttZfZv7g`q#
z=x&PU4yWbpr&4a+Z3}Imr!J$>Kt4b9C*S!<+wqihqvAQYxs-QOwMMd)Al_!KTq(D8
zRvYu22s$X}%NFJjC^}gB+<es^nq<Ty<1iZcd8=126hv?d6+aow)JA@$4*4w;uB+(T
zS+Sv$=GPL)9h2G)tMqctf|E(2^I(tjcLQ0{Z@D28e%oi7hpkiPlLABWkM)L}w7yuQ
z@S$eVI?ULkj{&VvWu#3uo^r6xhfd$c)UGSRbKbnph>p<W2fZ+r*>BSts}esYzH@_1
z@a-^@W1OxK_YZxy%IcMoOD*R}BmWOn-**Qkj5vZ4vFs0-ZHxzPb8(L;w`;1c5Id87
zLqyvs%S;@GWaVedCh|)83|=MQ$*Y75<<dBoJSOkrkK_&upAE}7UWXLu77D|QMW?Mq
zUl}!D{s`acjo^7`$F%zJoHn4$vp<H33_9@nB=j_4l2@n$de8G|jp;p5X~v-oybN7s
zTX8P%eU$wvI$2)Tw;52l37DW_B0yc`J<{uKi7HY@$Yunkx3x@Dw~DL5df<R+cW{w)
z8$P`ALB6q0f-OP8LEeF4<esg?=t?ojFK8b8%4<0O<Q2f!_*%Bs51e;@+vtCnzMe;J
z>}S&E-1PZ;8~hFQ+FdxE&o<C$J@b^zvrXkKIW&dz+=<-TwxU}GHT_L{w|w6gYR6?^
zGrkX-Bb;NLFhizJw$C~vqBl_!2HWLJqhIp*zZbK<ptcANM|vU541uC(Nj6s1ePUFU
z!Hi036IwYU&ib^LBwXia`g}eQK+o0tKb+XEx+pv6O+tJ<0J>mQujaUW7%kwQ7V-bN
zF<-QjX3<HNB0BTNiWslF#{J*;!u=}4<xTG?kMcH+?=5Hf_vv8x12rdl8hRI~QCn_J
zvgN(k2jn1cLbZJk#r5<vr?pJ3Isf{v+Pw0;hRv+&hpB3M57}{z{@j_M%yrz2O)g4+
zwRuw>F>M?aH+~~!bP!9HFm&!q6g5zoS5F>!j&eYT&*oI+XwMa&0Ws|^O?BDMh5a&0
zx;*YLPDlem4cLAC)HkH?=&koe;5KBMc%a%4n3N$)KRIOTX(-xWHCyF+*C6@LncP(G
z<4+&wKAofoFkvKU&TeDG6g<PSI%ieqEIHG&=eR({jLGI6$WHFt5{s%_&HP&Rk1*^M
z83pEu<&;=JSoN0|lSv-)U%jRGZV1~s%o0<-D<N2(4%Uq@nIVut#BXhn?%tdz()}9V
zptos{BprT&-dc15*8cede;9x8RR&5LG$pro%awpcUomaZxG}JROCazk38D7xi04-R
zGaj<?OPvROYlr$XdFpKXuqz%niGqCas`zT~=-$YMkm8Ef(N80d_tW#fu>18|?kv~J
z{0F=P&ef*hUe#<NK6bXLM7hy?cK7kdvl>S^7hn#BG$b}3g(}RkQVJ(#%5~Kz9=hpz
z#l_d>i~gfj@HU&wgHv;#b-FVKH?6tz2GL9mz}#ikG{lyk7(eX5af*^5DzNtQMebur
zk3A2W{zFXkT`wR6f1?TgY|N_}T9_VPq?3V4ScV+DI!RcYyzXD2e@=;wPT9UmFzlZn
zEQA(I;^j@72!rS^fBO?jT70b${)pAs(pTh^3k}-<FW(G67j8U%AVZ5U%QfTd?cBX9
z&##C{$)<yLGzL>>(Vr1B?15LINx+J<Nc_CU(`n7|yfv$-XyIpcGsRsFOUQu8bB}rc
zIrF$sO?dURpk}SL96LPU$$#4Mr*n@YhbK#9qwl{u_3s_*K~tDQwx=WIp}A9OY*1MT
zke2Fz9=PBL#UShz_E681R}2>sfZhv0#l}+DG>P~hea#75B1yzopmgINLb2C&wdaD&
z`JOp|0_(WFo*x(2Sz#IfSAkW{dtL5L{!f8b3;@9L-{YoCtZe@saC*e8?fnlpoqMQD
zw}n}6ps{vwS89SxZp{|jw_Z$51z}DUYZYkKk#s|%`@S}>!JJ489@>!2|J+xo7h}Hk
z%gXY))Hi9LY%0K~5A|svlg=fr(LOTl>>fWjuO<kUn*sddIPw^sXd>0e!Q~~KYkGo(
zhjMDCGP6vzK4Op@p9_yq%JZCUVuf#6rOkgLfqNr5CDf!9%1tN~BuNl1j>@@4s^4CM
zc<0qk;OruZY9^@42F@@-J0*!kmV5K;PXmoWCy_XvA~A~!NNQ?NhukDhNfhfxBYB1f
z>xb!2Ll=PDgrKnC_58Y9kQa}u?B&rl6`+ZJB#Qc0MJx-*MN|XWtfokP|8ekeb1N;$
z7sw^o%9IU5GS|2$oQd>YM2d{->&GW})J8)G)kpXZ!l4_4e&CU%Ti<e#?KPY-P2I5{
zcZw4^PyGYvONm<oc{{V@0ID_CA!T-sssAWLx*tiJLQX}l3TG6BV7!02n}^T;`Ez%!
z2%44@4=jN}UkW1Q!gh#Bj&5+fxXO6<2`3VvhAEK*7!yAvkeHP1Y&d}%`XznF4AU58
znjp8qgKwoj9Vu|;ziu?r2#q*bc!)s^^@GR9^>Kc`w;vq#U4#z@yG7`Uh&~WKjG*H)
ziw-)(5f2tEJgYJ&5JxJHgg5Cxg$lLQB%0W$5QPpZ&k{asIR5C-i6I0&6|~_nLD2J1
zV3{6!YB9y2BnW``x0=8+I<Pw-^zIJ>=<p}a%VE$}U>DtsL}D(WJjA?efD<f|1F_jv
zqA85XKZzuqieM1UzD*1skWK;~Oe18spazpHVY!*JQ)+D@!cKx&0uUm^JBi;IqZLr@
z>E2-U6u?}>93dQYG~{5ACX7uLodOh)eQZQH9resQ0@B}~Q>dqXPxm@;3=rvo9U&QU
zO)m2H=#6EJZ136OhGtVGu^a}FBb)GhsaXMZ2>E$x)CJdcb(=vKJbDd4pa*BX@od@y
zPW3>s^NCO&0JwM!H4_lyHz4wdRQ>o6`qB{@Vt9^C;9`*~HU;#m4)`17lv5&!fLWxJ
zv{In`uc)9Z0aA2BQrlo91EmvCi;+Z^hM^%VXBDdwC}!z<(d1)lerdrD(A}{;RTL8D
z{7`nB`2<EB06ENFD7DF(9X)%fjPM-;4OTo8M~-8tK>pU!En#qfowsx4O3p|jSy}au
zP<L+&uC}mLPizMKI{v6KYqC8;w_O&1upPWju7mIX2j+3OKoiSU&Sq9)kaU-2cUF0I
z6nSUy02UyUH}g1z^RsJFAV$J?m>I^<QZd>$M;HMoP$W@E-S~MRk%998D#^ho+&L*g
zUG#O2qJpw>FMJiJKSs5SZ7_s?=U?oi{)REAKq<B`VCeIB*Cr0>>nj+#T3|5Uq*kX3
zR%AQ3_VWzVfG+)xJ{rZA@0o=2-Z@bKb4o6iP?1yZ{{{>!i_XIyMMvZV+X%#-!Z?~S
zXbV9UQ+o)g^l1)AxDZaV#}SxC0uz=ev!o^ReLTMtOy-9QY1JkIg-~Og9)mU#t=tOv
z4z??T`Sg%PpJEUM_rrrVaYBQ|JKg!A8yK$Y8LNhDfCgbkdIuuwIi}(@YvoWFT1)sb
zh2q2z$Cm*Uw(Fo4-$W2E*6jZf4I$gE6W>aLa+0l_1*U5kj(&<8IHJ+xSXbl6H;PV>
zqv+F}l+on*2e9Pja<0bvyeTB1;}|wGUlj~<y-bJc+TI>d+#MY?zdodRyl@K}AdYUd
z3&U&aE^^BEgCDw`@;><{mzWcL<O8&bV!#w4MLzYD<n38(BK#a!LAJy5%L^hv7;7B%
zdmY&U1|kt`Pf6qhQ2lm3o|WnE^836c!1x(o7|4PFVitp(BtAO;0?LD(G5{a@+>k5y
zUDzG&;C^(LP*^10`hS!F0wasZnl^kcVnoZyH>Yv&eDJ!cNT1g~bGBD(6}*mu9a+RZ
zRiO_76!|49eM|Rmcl;|X(B87s%Et|{SNIw#D#O3L!3$_(5Z6DX2FwYm2ihYC_~u5s
zkcF)HVJFGHO?Ai>P*_1auomvtXHS$&F!8a6231laTF@o4_Gqr~Z2P?ZRu>#ZTY{I*
z{rYHD*W3?oJ!Q^T2&ln1>t*3LMmyZWsBA+SXb+Pm6asI|&O<j2;a0HQ4w4K(*Ragj
zD@`|R_X$16qr#q5P+4N#6xw4{MWO5~Ca{6}PB&~fAfEH%RNKNIm+X4H7?H%zBML3(
zXkdSuK;g9%*15&S^@o-?<b6Z@W7+~SYD*y<<pCsWNp!gYav}_HgM-iK@nG@y2eI?+
z`7Ex%b-wfWvFXsU&AHqSuRJHr>QuYsQR3RC%&k|QoBwHa`^9#4c8iL~=N;mRI0T&J
zPhqpYxn8*Lh6G=^9-rkp*h*)Paiv>2-0z)bKfm()Ot~UZ=J66$UaQ9-68!xw{>T#N
z(wMGM`Lc@W%{U*FZ>&^>)%tpxx<joLZ%TR=UqI13yOOAiyFssh$oo3rv36VUJbt?3
zswGaMZs{!;W%c^en_jm@W&5<k5%rr=?@2vZHp;P*q?;s*My!mV&lC4Xa7yx(KCQzw
zv?0#41{lg(qjs$l8GM|6d`~`y{bISs<sdEv5Ml}*em^3<1TNk^)+kpvoNWO4A(|Ie
z^dDoVcL-4s6D9;E`Hx-~Uu_xmv41;6-9MtGjTtcZkj?dl;OOHccMVi(3NLgIBxF5$
zz6Mc4*iJ0E1`)xP*~l&?;3*5y+8TsqGkSfC1KOAQz$Qk(nE8NByfAvk^T$pn*3%o$
zDuO!eo_$w_EGaluO~9*73+wB_rhvyAE^EJtJSjaxtUopBl-4%0*sm}=1oSM5G|l$;
zi0|=GkV}7f3dOBVRN5HQL%Se$`sN#r0l|~pI-(q3p#{Xd=Af=0?O3@sU$FbCB0YoF
zG`BV-2~L%<M_Y<Pe=w`IH<k5gcd_Sl@tNVhXFu`<MD2(#E!_*f;z`Qps-Y4O0*KI9
znW*C}UKJil<Q{tOL;(;c@^6sB$$+*Z9bt5!ZobP-Q71k*(m8S@cp^0t1?r?ZCITz$
z`=*k?X^@WIl6`N%Q;Pwr-T~;P@?MKao1t4SUEM!G*(a{>tR8@}!V7<IY!qKPzHA@u
z9$X$D+gIoDr9hM#`Bn@CtTqHdZIsT}dN#C88-K6020q@3vTEJ}WM*v2WNt}DkX?@$
zDc<S5aaV~6ZXwdO8phO?V5keqaIBI@S4ITkq9RV5;&>PYg=M`$7WMlt6OWk)vHZ%M
zu2p9$YvKIUwLsh#K@b`KyW1J_rx?Y_xEs*Wi{U(;X!0V2qF5-VCs<Sdgb&s_PdBF2
z**TrD5W~7^W@{aBq+!N#lW%N@4X?vce>Y;J_1j-KU6g?(;hQCheK9|bGdSl0%=rX-
z#kEdEs5Y@)W+(+Ly!XFOyx^H$An}HK5SY&a3k2<mk%$ioh#Y4uQ5~t~jG<iMy|Vz|
zxK{y1J@MNRrbiinOIriw9%ZmN<iY`qE=%{pEWG#|#qChq*@Yl+YA^jv1`RBj-9>1d
zt8YN28EsjhTA~veo$Nx5+Iy>*=fs?yF0hwHEUOV@ki^P+Z8P_bt#%+r8eC5@TS=$S
z8FJp!!SP_D4NSt<8Fhvrc>XQG^d0dHBUQ9a#-T<y5=QE6;PARjPJiiiH=>k8U>~@&
zkOfy!!VLz6vB~-0=0A!QB!El0-(nOl!_@&wFwT>*2twk-*a-Qx)&&W&Q)}P-ZT2BX
zu@?E@d|=Td!f}k!AbtE$KxT$g9JvEI6ioIZKu7`!hi5En#;wMYHjmZ)&b(BS5(w>`
z1>WpJnCE<Pg%Bl%sjz}`3n}yLMrI_DiHAySQPG$A%N(7x$_CLNm#J_Po#Tx1_~$a>
zF1+)?IhPBv3M%jTSH9RYfT~q}>cE2#Q^9XJi@g^xxaQuT(*<mGh+k0;F9#-<ABEfL
zL5`$%e_DAxI^W*T+hUk|R%=#2UvC}b8q^Gb1GHf}wg<08%l4etzv5@JkL?XN$nwPA
zo0sLVL_MZ=vFA3B+;C4HJ<S)@x^hbuyU1TqpI@lp=Ek^e?k@27B@Hn_KHcW!I+{XP
z4Bt+r&R4&-&V~VJ-HhOugKH+YrR$YUIALHM5!5png1j+QpMr5Fx4AD#YqQuW(o#Sd
zu>umPkMh%w75K$j^wtpa>1`<Mrq<enZfD9f_5V~ptCny68y;25JO2%@s^zi0P^vGQ
zm5{->dg`euRgk+fK);nTBirdj&^agqYAy65>~D3}ct7}=(kHOnF?|yme|v(M`y!n+
zaUAU^XZ$jb{ms&U9qcSt{S|-68-Lh4L4kQjsJiM}V_O2(OGb`8EoxGmtz$iki(C}p
zE^N#wvSUuri-)QmPt)-Xy0#3h#?-k3Hz8Nx)VUKjGb(d1gHEXPaDJS=t|pp>?7Mh*
zcqq)OMzsH7{nGCok)9q>GR6UG2cC`z4oZ5%%{#~@NpvGR{A4+ilY-mt=o4X^J3s$!
z4f8}m*`~??x~0-r1S{U3#lbahp7n{cuN3?Kkqdf|6cAPrTFFQ9k*zOeG3eV}7rLl|
zD=_>`<D4D*=a$z=qT1OrML~X8dNMA)Lbi*j;2*koA1P{>hkzVnV4)gdz2}ilR-XM|
ziyXKrvR<3P0w4q~Jp^NCZtygQg?gCPr`S^6AXJu1iLH7|tJa&OSPGd!aU44lda~|Q
zV%8f^(r+H~dM^e%Qjy(->!67}+&JZWdVD>9^$eds%Qo#yHNsWQ38wJ95u)7<0!v$_
zkd;iFqozL&(diGDe&X(y>Jt>DT9=5LTgOdfGSNIaE}dAF%6c5zR7$|vDh&g}^amQ%
zd!@eA0sVC9`?=8*9=c$uJctr~ZXf=&El*d52iaj`VzIH^dl?&>7;JVef&TQYqULTO
ztYU|>d8A302^W-I$);8GVm&E<sn9D(qa_-IE9wG;ec#)Zm9(j@bX_G@nh6(X8dvR0
zFle`zKq%!I#%wPZlWf<}`3;X~SyFa)psj7|P79)5gjfjZ66dt<hCx*?r}-TVzJAiT
zxqIGUdG@#l=1jeGSa_;v;=@#tzc$3|4wTCo3$Fld*jvi)F;19Us)1A)>EkK&-K3gV
zv^L#7>rJr?EY=1WIE)GZH6rU}&U_3qr#0=EG@rbl=C8||l1;*LU8>Gf+itFEy7!@s
zO&cL}?Cd63UsB2!JK%J3jaf(=yjC=iyYQ%uW_YOf1lW@HL5~ReH~?q$SdC7n<#Cd~
z!_gm+CXrO1O=55+lo~Z8GW2u?aREC(pnpKULs0OcM-hyqQwNRj`LnpjOeb`7Kuy{W
zGgIvJJgwb($eY^ET6s5;icB9>OyP`1@AOqk40mq~LjgVx$W`j7r#$jW?--}jdnlXU
z&RaQ(-iaW!tHUp_d?>qsx&}7b%<HK+klGQHr6pct3oo`d6|f%U*k*V}hhdLBx(>>`
z8OrEBpx}!=z6mMP7I>8-Fv=F+ggpKi%*h={b4y@Hj=&q+LIu#*%ah2CGSQ{;fJr`u
zRd2P4#L^ar+G(WU;C_kbUnEG8lz#E35kWoPh?ndDk^e+GO_V2YH)0OsKA14|aHM)T
z!5!;+jYAO2`#8sW7e$VWet(**iYfo;vAhFDb)<x2w60&>+G7(!LFS#dBSx(Gpyqm&
zU^)6kNLi(@MM<@AtWOQph$LP81(0<(Cl7Wn%oV@p18><^Y~{87hPkTO{*tfi!dvBa
zLv`2PHBb53SO2v`br-%y3YQG-ynYuYu}ZH_%Zpv`Ob($4(&!3g!MaO#lV({vI`zS<
zSEZT!ZDjL=siC)u_rsW{)c{Gk(w=j~3SDjTRlmQx-S?uzI&*`1ZOBMfU*MQBe-niv
z0nLbLTdbaCCZ)_|E1|E0zjkD^u4NmuOf?=T&$fiI&nSVM_xT4}LzE@#{MfLQ)kX)8
ztu=IJYKRPu{&9mUXrhRLv@g;+$0((I%<ln`hj%-?f!8404n$+n21V*PUaSJWyw*R+
zG<Vf0MMDfYiU`dXMk_`T7(8Y)e+h#{KC2XL2CBOy{)EmtH%R}?V0De*fX)K@Bye-w
zK4hSa${09!O7d$oEW;><&3uW&Lg;Y6wL|tkfyycg##(2qe{|AGTidYZe5cN84B(Xb
zi$mzmRK3Rrh49?5LtDH-WSiDpy+{wpfV~vi?%v>>Z6Hn;M7?8b==&t=<5SXSBxX-7
zPNL}(c_Z`~fCj>V(@PwnvJ0;V*g(d$>V3u)4i)_My_~<cazH&xVW^+;L)btttyHt@
z?HXIZsaTuN1yo&Tsp_*WoE>P+0tw#|i?vn|H{9HkFpi=={j4&~56k6YM()YEQCF6A
z4oOlKU4`0fwB-yE+aT8kTa$h=cNs70kn%jv-XJ^+V>Uj8qt3nN-Avn+ck#Hx-?Tf(
zPjZ3Z+_XTMcs6rEpbj54?KyBJSBEWv)-VIR=Q4tZNY<l(CdboN%~{q^v{)C8_1mf3
z7jc8y+4v&E%Jw8?qz+xM*w9HiQ7q|~nb0MJ(e^E~u!p9*zbkd5Rz38my5#-`l2`{-
zD8@?k65+#K_CYfCQlD&$UsB||G~(@-jTa{z^fgZ^?#Rh2pC+`Sr~kdqJi0;E<=2rq
zrEw*JHm%9NxmBmBjnprBFqc0)0V=B-odkY->|<Q=%RlIMYp2DZHG$?gFR9N+E<8OR
za+)}h;Gckz!aKGuxYKKP1sj=3Vjbgvq<Z7h>G#Ectw{e-0_f}_m;MG1qtm*xs!Ct=
z`TU~6q>JkL8Y&x~Pub2HFDXrQR4P#%mjE@^7b2^Pwsn~q=7zItHz2PC3kbI=RZoX9
zuj5vY6^m#S$R{{WA$<Edw6A6mLjZlKnLCC6u&Q%759w@h>4P*PfHa2$+JL?(-c0hq
zR5DH!kI8J$h_v}*LWE|a143~;&4U4T6jV$Ug;Z`7ChbeMkzPuIs=aPSz@Ptz<p#B%
zpzf2^vZ{Q?mACrE1|`A?<`HbJwJa_wSp`<~v;9AeokMtLQI~~d+g8Q4ZQHggwr$&X
zz9bbV72CFL+v@5b{XOa)+<W%k^K+i(-nGuVpzeSe=;n%dAG&YsuQ^wfd7G%)U#Qhg
zd>j$Y2v5a2YLZW8i*$E!^%SxBDIeXBc~ZH#^vRlRhbR?CJRdc8Ie>{*!I>FFu#1Me
zmxqZ+^5@@Bh=i@&86N*!sx0xZ)tqX|djL$c&MK3v%F3n7GV`c2&At9(pp{3>sT(VA
zZQ4~q=RMWba>%xj({h3%>%89mo3X~$ZHl#=&k4Sa>#F`Y<CInSpS~u;+iHvU#zmx8
z&<}YxoA89NF`~J|Q~eNx{R&|Rdg_r2Cxi!CjkajJM;n}-lC|+NXxS`vb~(#=8;b>2
zS)82-a%*i-KlZsYF*H+DTP;x|cBKgt>wl$==v3z^%;V@DtBGV~sfq_xU)!kEpc1j=
zDXBhdzaZI@$1E#vE^D#p*6fhN@X!;*oQGliW$Y^mXsS*vMKDJ<w&357jg9p~)@vO~
z;=v4r+~!xj0e1#3V<mm?qHzZNMN@9I6XvUs=H9_;!bUN}A|hZ$rO$S7RQtX`9mYEg
za8$><?V!k3!~GW^RDWI%%l=FxnG6tA&(EFznX2`P&e}5fil%<P1V&;WbkBm%I+CdJ
zAIzSDWFXFPS?AnbgY3qQkr}$K+!thJU~_Wqnc}BrKnFW&VRL3^*<^(5pLP<o0iO^D
zBu$4nj#>d;gZgZUCG=;){qqpZv6bi#59M1~M}wyu0A#GR(RaFF^tD*Y-od%EPP#J(
z#JK(Y_i(L%vzoLcv!~+p^O4K>Gpvdfd=IIqFjG|<?@4q=0A8^av}XUgv6qlbUAU4%
z9^J@HR*72f%4V;n9Y0YLfi3~uzwFDjlgd7^?_II2HbHsk(1)v#92$ju9J2(tTJo9D
z?Rx+>218m4p_jR^=LG5n9XC62=&F1n(qZw=T)dXuXVr=BcVpM5y27^CTTg7d!5O|l
zZu-yil>f!?Pq&@lzyzZDcFn)R#1Cla=b?<G_gkOdpRP|v!8-)d1MM<<91PN0n}*JB
ztf^I-WYl8=7mlrez;bxEoFBK5LtycK%vuA2mUX&yd$%YDEvil2Po^k$myrEQ7$sfD
z-J*Rfj=Ufq`3eJ%KnI3?9&kNPkKA^}>2DSOVO+)`6b1QL=f5ux)W~tngH<RHNPk<2
z7n9)`<*V2bjyj5!0qzxK7iNFilq`$t@Jm5Il7Pc#rpK%Yg)CUG*)73T&mBgwAuq)K
z;G00NF)9~`kzrd^4#24CVs9b9zO=`6Bv<-fplufgbS1?F;Yrb(k?uu3^jI#%;68Ht
z)mq-4WPesx3{FO&BnDndH+d=7s1>AH7vWgRY0vrPGmDT~OuDZ?;Y}U)%fL_}i&yNE
zI1i9qxw-4{@UzWT>T#e~OTj$_62pm@`k7)GQ_IgIBzGEf0%nLa%{|O2vNKRAt$J?E
zLWRf&ag14Cy{NI~VLnq$45p=l3UZR8&&1$Xm*w^e3tM-sZ>e_v2;j)d<Nuv|Z{i8m
zk(k)h#?A3ehZPzzgkEGaTxEK-*p2%;NG)2@yqpCo2$K!H74b$%3UCH!b`u&ZV_uae
z`C&=784si+{P6f!3+ZP&!|H7dr)z}J2m4$yn=yYgVH}Wu$GC^h3m!V2oCCk&-%Sw>
zbbnFZ%I)@a!-uIBQwvR#hGEeTBPEk!V;Lt6(qutF)7dQATT*staY|u)Ms4JVO!PN3
z@qJ}k=@lo!R>fAQYUI)$K5LSSThmFH5HusSH^O#@5vN%ePCRuiT<-)u_+dUi%~TcD
z`qPJYH)s)PGG@wlV!UgoyEEx*(W|2{$PJX`3muk6uHLgm1hFFH`avLjB@Z^B3@ro_
zHaXZ<Vg=L%g`%>KvzYcZ$kX>``w*_F_125pC*R-(*zfz=L<*;2kLY1YETiww3-wo4
zRAPRM7@CIoD}~GNjpF<o#z;b^(nGFDI69cvPQ5+q9Zn}~`^!O#h)YAtJsMa98Y-3z
z<xGie?yNKDT`>@2i`<1C(+lQL2-etTC4!>a#CW&|QI>@iGe<-A=yAXg#2@Q8MyJ)K
z4%jErq{`od23)aoPyh7vbM10c<x}lQ!mP9*SEHKlaW`H7^9(*%h)eY+bsIQS)OWz{
zMNVnL8Ha9-GF@&o^`Q{Ws@>)~VEa(0zRG6|x{oSi=3bP|;#Vi#5`qK(oCER=neI`Y
z5}mp=lpi+D%)5RI2|2m7h#6lPlxDGgU8gScHZvBlsfmb~N+hGq_{hY@?2^b#lp&ic
z&l}7BRgo5x%{Y)7kb~Fe=nT(KV}wN09)`mf@;6`Io?ij#IMaQ#!XBk62-L_3=Nij>
zB?MyoIvhpGgeJ6P9dPI6uM10L#JQ~k`FcRkEFB8*G6KLJi|5yn)GdFKMX@ZJXL=pr
zf4#GGf^oCaiA_veIA^MCFf%xrX2Y#tVPxZ;Vdt|1+b-~Xt4XenY2<j7Jxg>=!#EmC
zv!~}LfyaU#j0z_wN%LKZtG62XOBHFWSbK^)k|RO>0oBIlTX7<y?dh+Nzq8PGX~+Sc
zDA+cdUT>O3Wz2L7PdtNq)xv0K)HlUBkY={FV8*EP&Y@f3Hhb7KK5xx<--)S&^epf)
zEIxlsESQja{khO+m%`fmJiQdt1TF-_>x+O47^wD*oe4IYyDS;P7B&ceIJ>a#$|NtE
zf%<!drRSu7KLM2eXEp3}1IQ2uRV^C|M=|4di&n{wE9?uKfc%$75zIE+;Q9NlU^TS&
zNBmHX|I=frrnW)%ny=7VZhA)#z9Kn4ITw&den)e6H=U=)`@Lh(VEDqHQ^XP#Fb@S+
z++UDGX}0(XhVI0Y+M^|S_PrV?`#i5}+^buTc|QmcoZVG_q+5o!L$Mk{5$pV8`3(_^
ztc!h?LpTG^!CaIZ1dA4NI#dC!s%+BXet|fm4UE<N6;*&PYbVGVdMAk$#4gzOAY)!Q
z!>m;Q+K+Bc8!Sm8`Z>%IjcA$aIR<i=1av*_IR}!XCfiXfX26nLgJ)nYYzkq1R}U&L
z5_lZ3Yx!RfzM<lZqGPq%Q44iqKXYPzabkW<lEtIaRoHHD?>)6O83#87l>MViPxSX}
zMVTlSUIixt|FdCVia7ZqtZp|w+8EAd4Oh=52k}i8!^C02XeCv}I=(~{Cxsct8HTsu
z#`|FR%j1K15;u!d@VmZ8ZE{UQ2(fHyWNrcWxi`DdI}rZPZpmOly5?=b$97ha6;(OA
zAB`0CEP&L3hPk!zK|5h(e0n3Sv*wbw9w%yYDo2)(Ih!jJ*p%IgS!5K>nHe_$`_PnK
z35<IoK*Q|CloIN6BdE4+8OejW9%LCf^qA6ZmHJAE5&Zdu;QCy*j*yCwoqSZl=kqk+
zL2PXoE4>0^Lr=jVfbOMSGn2xg-2_sWb9pv&xe!RF?K2RvtH8~lFY?mrpb(e=6Z9WN
zl}79tPn-$MIWL~FWb1JVBwRi~j{m{iX~GW_V&!_E%Qw5=L<S^fJF2m@=YvrX!uFN2
z7yV>+?m&c2Km=Y8Uw40lxl<-(E(v^;AZTYd7e6-MpV03bHXGLkc1_^6!xF^nQ)>dP
z%wpP_06Ib@$e4I2<_roC*RwknQ_~ZOoykVjc7l?wX<Lw22EM$Ru}*v;8+a7t>q-};
zy!2dAH&C^CP$`|6tjf}5gv<&lUeD~Sk|eEiu(}BGI*N${8YWC0a{lGKaO+3^(D((a
ztX8%9+DU}>o8<1bZ9kEc2-G=5Fgl;Z%BHyc2_F}i*4idvL-XIS=^%yV_->R~yl4)~
z2F>8FO?H~)OlV!Wnzl^`^pl*>se1GADKbp@B;C;@6=oRK_N-c|H}IP!-j2Y}&jJLu
zb2i9WG6M#KZlgawUoUSUA?riO!1~j}2=6KvdkA>(q_eX1Lr`SeGGI!_by@_p9XVt?
z{oeVe8tx&NCA;SM#3{R1Pft%|kd65aHVhi8T6p9~lrcvwJzbxaBOuV3Xljx+%DhF~
zIV-5&{Zw}cUPai8*>5WQAMOLL&xOMcxJt@7-58m9<d@*U*Y+eMQ(n#=-geznWE>?I
zup4%>Wg0u5&+DQ_p&-*-Q?s?+BAj`$vlwaLM=p#phEd!09!vciBNcR>VS&uo@=3bY
zk~b5Z>x&s`IJi<m7FY!TWK2IW4A#6@_FS>pWjsP;E5U5|tLpnxnqz1+uF^vtoX_v=
zy#rp6!0LPnNJEjSW;BB9AZ#(|Pb%uWmLvu93|okT8pAasw~c0od~NtYK9z1NSEiHL
zm70~T_h~LKjre)bcOPzHZkLd5Vb90m|EfKXOSl319oa)mi!XB$3GdTZ6s~o;9qB_$
zgHJb-a;f5SwTG!^ikw|%*}Eo_oLq)=w&?-H+=C&RR}EU2;Jd5szG#gee*fjQpQoef
z69)fKi<2gvbHw7+%G1l@;I0#ik7;c@{EpguUjJv0Mxj0kJI7MRRqyZ1rM?Y~>Giue
zOPD8NtB%@d1jIOQ>RN$-Uv}*)xl3x{0^w@3(M}tOwwTfI7@OpTynpyKEpfMQ_w6Yw
zVz*zLAf;!;?kZ-_;P_*CBo_AUgFU?F@Vf~jsXs0YvPALi3O}yX?d%l=epqp0X3BS!
z=fkSY+ROX7fOhvsy8odpY@m4ae9|nwUah&FEnf}4oHmSDT`Y|6V;RCk!ci{}<JwuE
z+nQ+C^&zeVF=!?085X%5U#q@%HR|=n5j&D2DzdV(V)oS|E)}83qQXCbZ0~{HfG~Ya
z9^U`@By0wVZpoI+YQ#eY3b-+I4cIZ@NRw{9MEJv{%ysT4D4W#X7%nEBDO*n&7A~el
z;68A^JaDBuJ5fy&HYFd1++}xKFvMMYm>FdAmkMpzOV~v5*3eM*_R260IN{_f@D%Yk
zLppY}H&PF@B+NeA&OP-pHIGAI*dJNbLRb^Q#K&0-w_aq&E=zeh#n=))yANLTxq)3B
zHu8qgDlfSz32%L`4VjJ`$s9NX#T%b#F_R_l@^yW3iG$I}P$R#mGUP52HEuVWjg&Jf
z3u!WfpA6|l`c%bCf`6il6S`VhOM_@{hwhS}NETiDeEa;KLLo!6i_)H_1WcX;>aSSw
z=`)|tZ~ZoGa1F7ek`r!q9kk<$Mc(EPYRy?ruxdxZe_qaR^D8b4N2hj6KJ&!G4oas5
z{v~X5i;);l)<*ajm>TP0)J)_SO%;jOSiA+fST%@IQ}hqRv32`taGt_8Z5D+y(XxWc
zHsg+A))JHT^x3e|i}&<o5!=GGRY*Q}y#OPUUzc)4p><7DW^8Un911KYEimk;+L^CV
zcXNdSxc@n6;Ckiza9E2(iNxHUC+#n<k|2^3>>s+J6AoNTfwMjVfy%mXWj*;4RoKOu
zeGqS`M;uJQ-F{5}N4=A$Mvhzw1vf(XJp60^4Sy$x6kdb5^ufUFE`f^!RJt-az2dzh
z4FkOLI7=HAE0H9AW1DNi&O3{9!?2qpY1Hsi$7fKs5VabTTYBk`<w&I9TS3~Nu02C1
zoS}G1r_}N!i9R~i22QX6YoR;e);%q)>|yI!OD!!OW|`5RHY>Ac-SYd(r(_C;j4B>H
zjO7M3@pYakYoCZYp^ufmOHQ2NLqYoBIk89P^Wl+lCx!%ou8|Kv1h~Ry5;Y+o+oDQE
z9?07wZdG}vk8mhzzM-a7?9QzD%Edb(QwIgIo2`+r?8)r%fq<dCkEg@xnHb^FB1dfw
zyK}LU0EayzH&-k3NeXPb?qO>7WaD^htI6cr$%z`yWEES6j%}SH`b14eYE>tIrJ-gV
z9+b{#p~5f6NT4Bdp4!|!;vW(Sn3&F{gWz+74d<6ggQ1_yV)G4^!g>Eqv{v(+8ihs;
zJcDrkv|H)#?436*J$F9+ATXA`hRq7%#Er}qL&^0ksYZch3dX&jAzLPgD4IBPkLM7E
zu=1IuRxYn-1(zoZl~&%!_$phdgMLw?zXy?y{OTxE-`3tNwSjkKul=B|6*@=nIW*Gq
zZ9Z5-Z=u$1i8!~Sr0D*$uFeLP>pY@tF=a?1>a=LmVKNPeO@y4=mw!)Sj8nn?JS7ci
zjo8giLaB=P2s$zlp^WnrhSTw<f?f>;P~)$ZAv8S|C-+gFYm7%V){1&-flEN@SKT!I
zoY({ml;7Lec7JuNyY9#>Pxf#;N-=PTj^rvLGxG%gw!C986h=#RmzECHc{bxsP1B1C
zCk?f%e9<VqthH170jQ1#zWV<7Nxp3I@!b&G@($4*lMrx`;q~8?l|Hc;m8xC0yX(=5
z5iF-erXS*}o_IlT_qp9v6icL^`ynO_nI3F~kN5mMTn~ISpLZbQB2n+Ae8tAkmE%WO
zXcYcIDnTX6U8KJFy#&7{fX;bOsCqW#NE;)?EzqpOOOOY<t>3-w|NXusfA<6QzqyiC
z!df~$xIjQtu|PnK|4*Zzt?~cQ<aep(>Ab<d@RR+HR#9`Dh>uSyhTn3)YIWX{x#G&)
zmL-2Vo+7$tL#jkZMaY#m^L@Qf1dNh$xa#=ek~6l7R@b3PivhdaTG088Z#7w5H}_Hw
zZ|@~;uFpwdlT6Wf$^57wZ(^LS-UuPEez;UAkvG+OHj(~u=!x}t1aExrL68q&q)HJ#
zVsa0HO>*BK-FZ8SyDW1-WVJ)+u`r68^yYFJN}3iDqlI2+xQ9cbyHSC9FTqHG`jR9Y
zoH6+ead5EQPgMMS_1E@LZ}!k&ev%MlW~{F}_w8sKVZQR3E=)R;LpkZ`2t87VAb$s#
z)NM?N>hkvjg*PO_i>MabqzDrGV=?FB$HOXO03WFxoK3kSZ*&W8?8C!@7Z83#ks}|J
z0!~bM--oh5EX9E`^r^f3E@8wQ-{Zk*cG5SQCojH!(n;Uzyf0x+BILCV21Gom8bOj$
z0T$M(g-y=6%Po1I148a|F*O(bbQcRlb<*A@esmy`3F+`iF2WqT{^#B2QlkOE&$IHZ
znCU6-*ld0tQr+xZC8pOQ%H)*Xm58@MFm<sf)OrY!$*Ir~CrRRol8E)?tHFByFi~gD
zP+ufZB+gTI1Ig%{Eq~mXwm(0P&=0{)S2aGb*alqZ9&gC^><H8oXmNnhC)GtEM=Z2S
zRL04qZUuq22_B+9&VcFNCQDQB<eoyG|1qdbeuP{QMS3t3J80|+gGoGsYCi(umJl4-
zG&>4z*q(SgYMt;UVoc<Tc)@-`+Dg<<VU>pxZ(t!~jQSQU?(`qER-IcLwl!x=OM;O;
zFfc7a;Ls_ra<fk$Lhi=_byQ0I_EU3#u<zRtDQlK%1nKjJ6S@L#FLlYI64jpexi$_0
z+%Oe)&3d!38NvGlA6^0o!cL?k7wx8g$J@54{940)`bxveTVh5JR4mwAE20wAzA8Sy
z2lW`%!D?#vO_d1kJoz*M{8!FA#$7Cqus}??A5_#^Ob2oo2um`!X-gj56<qGvxsDF=
zt}CqEcC-1DYjrbc5sR0UStTgc1r_@ORk=4U6R+yi)z{6vnZ-w<nF1X4`Qb>|GH(I+
zX<{dcLp1A=$rMkK{zaxDPl1e~Z!p_773x$8lNUG;iZ!yiN`WYM=_5menPVm?nNQ@(
z5|<yc*a0t-U?0*Tr}T(*e4JMC`IDL1!8QR~o{nRLJq3(0DIbnpytcW+1u*kl&kd^t
zg?#0^Cb0@S4t7NoR2lMEY2Sw}ql4R9%Y&`_$CocB&@8O?J-fAaDmBSB<ICagYwfpR
zDZbsOE#9`};uGhM|13bN%D9fy4ZssJapn5<z5copg-^rA(5k(&;YX-x+z!)@jDl@i
z<d*^7ZotcwN*x60F9_Q{KKF+#m0#EDzb#7GiJAjg!?v|dVC03YF$ZHw?B@vw7A2#v
z!e6Qnl8g!*{kS~n<^(rm9NMZo8-MFagg?2Hf427o{!(YIv&E{FUi13<d!?oZ-pRnH
z&bIE_qHM`M<$9Zs-}tp8ZUqfq7!rEP|MR|e#_A3tAstS5l*x~DmI6Ra#tAfEWobE%
zqkW9dnsdsQ6VunB41ZT#vYjo;QikH}qDD0<Tw$t(6Iz0t>aAb-S@(5fcqy;Ie|6LI
zW-Fq(r{ddqvmb>x)etq_aSYP9ifH7!OTCJCmk0=e<@9`hS985W<<h13d3$z%_gCo&
z9vNg+94=eh!+G65p3o2gUbrUzT<u$WqrD9u481*nA^)rR0`Vm@lRe)BR0#z9ZStG?
z%~J7P&Y!!=E@&1Xj<W<Y?uUOpkcjW*0ORB`*B8tP=-m9KU4ln<5D4QCEB$Bt=juy{
zeaAapO+T2q>|ty;&WM#gGPHv~+lHO!GgWBtdi`Z@)?kBaIT9RX^R`44!kjivvmQP<
z2_qPZ@;MBX^MnA{9`9OyQwv;jqN~}uR3}``9<=%e3O=c_$)>{A$hJ}$p<Kjrp!y#2
zw+ZGcJvpj#jkLecZ(SHnU@=vw(E^gXJ6W|3{hfY*v?tOeldQxNv&ZF!HTH6V;V%)}
z%z{|DCg3pQ1W1)y?YK{>Td-oK!y#3=nJ&SaPT()}XN${~AsqPJV8hcTcS7FNCoi5-
zuS>nbQe}KUuf0W&XFT>@h8OSdjV8$J>K8nK{IHO}4caRx)ZZLWvF4=#iQ=~uyDq?#
z@)rIFg-WqiI?QOROhIxHkq&9^m5{RuV<vXESw~c{HuLv6?vt<KrChKTBBk^&Dd&Xy
zZnw%C|Dy%28mq)ugpme>a9j-};^j3HUC0&C<)9(U{EG<^&zE5VXQ2i|5ULt)h6#F8
zE&G_aX|s&9XEz~_ERVyi*3-u<xS09F>0+;t6rsgfu~~Wi)Z?5Kp$>RiQ6N$*xJ<Va
z3&W-zIBw|mfC3<dCmPNL;Fh{X8JY|5G|J41qE}sQkD{xvJg25bwZ^lJ1!tqPjfH2k
zwUujx>9R7h-;9RGV)VnnSC<0w&L+0=E>hV97t@cw@)s_Wc2E?KmQk$I);x-!p4zPu
z>2!v?8CwkvM*rK-jj_c6-_6s9Eh$so0{oDZp5P9QxBf+yV^}BRQWencEh?4WLR{us
z8N$QtAX7du0xh{`Qgc;uU|!&)Ry7qPlB<qvV9bB2`}p2>>y&*D_mhW<9utd8Tc$|g
zC|(R1Xnah5ELKiau}eV~^@&JO=q>sa9Q}}<$bDR<*M|jHa?4`tj0e`ZEd}M}U2O&G
zt=){D+inA507m?)h;Z)IfgNbCj*j{R5%1OUho9d2FOlW(Jku!%sd`74G(Kz%5s9$M
z7ZF^rb5Q>29GLcLun5?%ZdNK1SuqeDvhCEbUl@)VQACn^X8>NCCnVXvwa7kUmfQJ1
z@w<Z3<kz7BeR&H+gHR#5cvST3ZcYtKjFQ-p*9pA716R?XBXS?zpt2+VlOD9sCWQMa
zF$Vhvs^#?~`wHtqfOQ~bTwasljd`Wl99O?GJ7(o!141~aOOeI=bC&S7kosbBZ&U*s
zqinX~;#mGsZc_p&-IlnCMF*`ISWR(kjCKNR&dXvKlH0g!37dqyJ|ywdu9Z8EhtITK
z30o{s%yJhw^ZI}H0~<6Yq<c)$$_%Xlw9iWGOqG8<Q|4AeUDLw9O}!IcI9%b@^;%q!
zbfD^I_hQP5b(7TXDzT2+cm^5GnpM={P)Nk<bD<F_kPs|@`C=M~!PwcgDiQbPXG7%(
zWfh~r2SllGbY%Vx1gOJ{ysBDXXr0D(dN|-@i!Vq+a;+g_quCXZZcaSWs*fu#=BO>^
z&^^$X&&rGtFRidHtQqe*RppuvA-gz9aia6_y}ne#-v?7RjJ9}$JXo5aqs9b?laJq4
zq$;uDBiV+ksS4p|4$Izxx1^_%sFL$Lj)ySDcJz;}M(NI`+58Kh%I&=e{wg}=Rlll4
z3=Nr~`_*VR(`;e=wP39lG7gSFy|}_c=cJ@^QH0{07%xpab#%`rZ+)KA)WKNxfF$Ej
zpR;KSLEwRc2oB1^zSlRexL&}M<BH<NI!v{ZvwtRQjx-piI3Ta@RDtIeoX{Vs+_}gZ
z5YgDnln;-5BQ;jbG1vNts+SXDNJxj#E%vQ(NwI=!q#@9MHU{?$nPH*H**yg6%(w6q
zE$jZ_hJ&^~_HlB>`ssFgh%Op)xSG2vwH;S-w9#tOL;7vmf@^G_d3hSuI#d){AB}sN
zQ|Mfyxu!mkU$NR4)dCBy!`<hmURQ%|Lx*B>0mjkz&*#$jOwuPeloCAy)1bI3vlWfo
ztQ|a6X$~#_>dNz`8c+(8Fg&10X3G9t38s^3h$)@$@)i|RMqQ}22z@51$ZSZ(^15gH
zF0{3=u;tNUCXpZ%Os7cVm|-!}n^gZt;G_CthU3BqZb)+1YGo47tzIvz;??5tq}+bY
z-g}1%#H@-EgpPc697;9gh$X4thQ*wxcFHrrDksrjiOdA?892ihfn`%}cx%!*{xjM0
zw0;6bP^)%D<}xJYak?I^<WQUvvZ_QAmY_YlU>@w};1)wRjd-LPfcBL98^TFW;?LOx
zn_k;+>hG4rEV{N~<|Du#WwS9g{L*prmLpf&(m$1p%_-axmCh;cysG2KCEC*A0n`jE
z3(Vo^bNB=dzwep3u{|=UCQfOM&3ySStgTR?p7wVsz!_@?6TDdb@p2}Sd0_Xj^dw$u
zkW_0|qIzFR>ImE$h79>?_0X$N4mBVz0`GnYJyG(*E>Fmf8+NJsK`!qEKK(#xBJz7&
z81nsoK&bw)Hsrfz>E^4;gZ}^+ektqv5rfr=Y^<d*gtuG-JfWq}S-?5fwZnv+B!hD)
z@^KBGIe`yB2V?^;o=F}8yK4Jf1aMz-*&{2iu)4zw@<ppzmpqu1mL2PWFPf>L-;x*@
zp{x1u3G(eMuYfNeJ=;Mlt~7ZR2egZK4@=pDDKcbiazIvK%AV9BR2Y~P86Yb%-1Zm?
zv~5E%KrF7|<be!<AL#HhuCQ#82!5qqHDM|KgkLp5DfXE0&_OJk@r-RGHu-#%T~P?D
z6*UT0HKPwTsET^r<tE3>3bUyTXNC%+l}-cauW@64$%4`vw}wiA*5~JVVKVXYp1w9&
z1=t)gD`(Xt2P*1;zPkj3DMH>DfIAyxh`)h=`5E<#@@b*zife<H8f5T|y?b5rHjpIs
zFeVof7(H5KOcIOdgYJ$bGRy#1N0^^Dgrmj$6>0ntvt-AePo1?1<UX0R2~;<ckb(G0
zCz?1sknsBSD(M(gU|2s`gCmCto73~ESff%36Le?uk9M}SJ6ZU6meXf2n6pTKz%D(C
zxcH&FI(i3pKS1{G-v9DI(73QGx8E^ZrZHZgr_}?}{+TJ5du_YIdQD=@yZAN#vhO^T
z?UWGf)KG?1W9AN@LBQ5N<sdRsnn1JRw|L=FXn5PwY*zKk?x6q1?!^K8cgA6T(t;(V
zYPuU`{fhFpq6-eQV$2^^VSMxt{T|@k4w}FnEFWWg=7AMr-;fXwQenx6nr$8$p~LBB
z;(O8lVze2f@6>`Y8K4JM$V;WHtn}B~sNCp4jb7)Ii!B$1km<_!XzOjED8*Z=l4%kv
z6vx<vLa$A?Yj;>RY4gJ+`XzVNoNpT{#e8KSXl2Atmtsv%QU|Xi1SN=?a&{o6=Pd-E
zqJI74{e>1yu#lbwsX;x$;F$Ha(w0zMleTsBsw-Jnm721TU6w7i6c=ZPMxM1ez~xyX
z-B$C&WliTbv$xl!^veOWH_r}7CLdpBX|_*hSEKe$?%~V*X273^n#0y^_p8HJ{V(}@
zo(E<jjUQ&Abc?+wBQ~)OckJcwV24{<CQK*J53Rl{7ig$bN#1yBW`x?Emsec88g@AT
zE3)(v*;w<l6&hl1b@IkOP!yez1}=;)*0DJlH2(+&N{c(IW#y^qmZ9R!@m!?>uo!T0
zGWe?f&MeZ#q^7}!+iH7Rx8I4a1xX&DR_3x`zq{~;x*W+E8@MqYt?>wFrp9{5k{d7m
zZ}6yunkd7RYf;{~hB~4i6DTq?!DCFSy0omeAvKnc4PIX*&!r=RQXYYidXe`FMlt{D
z@HrrrA<=lPADlDE0SjID0IwSU2HtYSAPo#j@d<kZ#OeIYrHg|&RImfMqxN$Cwxc2B
zgpo`EFFsYSZ=yuoqE7?q$rH^32PbU^#!MK^(-kaoZ2-><sK#<`yP7;|VM*VZ*0tmL
zkH)eiXi@B*x;OWiejhTd3Y~l0-$i6tClRtW*j9~u;d(e}Xv@5?Zeqw#h{cp<n4zr{
zND&rZ$C`1>TT!8RZCX8fjvkj9MykO$<t^F!)Yw4QS9}Vwj-=l+h5Z~V(-@suB#8V9
zJ1i<>ncgDl9R}A_>o00f(?z~-hv(l#zDuMh%sA9tE2bOL^!&7rIiIo7Xiz#Oq2#=l
z6^rmySk<C3d(G>2)M?tgvY}cFA>y2ha+ktWzt*2UPem4t5l5a6jYTHUR*(7Da-uF|
zHp?er7i8UYvOH?1NSqk^k>p5<Ol;kTnrZbJT8)pimGD%v#SSyV=A&}0hSas|oogto
z;@G1{3z6Fr&C3$Y<|SEHBKE(ff5k0E6tnM};y9Lw!w5mEdC4Sgk7EH+k$1+UR*WzJ
zuPvnAxyU=y5%v~C7et6^J`yN9O12AQk~gNMzk!nb)0^9AD6Cf=GPO<gOs)SxkKFid
zZTUPODyqC6DrlUVnbUskr#9#%H|R&#zwOCw*H-n9&`Gm8Xno)#yKNg^^@^)V1;{X{
z-l%%6oYOx$W&E~f?~_q%*M=83;L8vVh?1)-wydkP=9-AI+4Y!YVB$XM%%n28-L>XB
zXwT>@q>}BT5!B<2=(kP`8~!5E^MZT%magR6G1QE!6ji+6H&w7sB-7FgG#+lJDO07U
zmo8EtHB&ZAdjd<>IEkhvS6N2_)c*kJ0PAglxQcT;GYCw1uyaqj7Mc02PguhSEBaH7
zpasfWbCr~|>SBPG`NHTF!R}!#xMI99&hcfN?6*45Q$(rJbY3fp`AJ00b#zAKNM%Ty
z>mWPOzcRcuq|J9w|6Fe{hYyBq65sTi);z5cw3?gtpo(q`PAjigeY<qwDB0?6Wt8GV
ze>$n4Ze#3U0VebH0(djs+AxU}@&EE^xDIV_k=}IR=h|6KKT3XZQlFwY;bObp)Rm)@
zsWdec(j>OcvA^Ds#GSx4AhWk|XPfxq$mTHbfT7YW_f-*><FYcyR06iU>R_=Rm->*7
ziPHTo*+4}BFNLA9oM5T~kCVhOhWpzfmbyhx$Vu>{LACx0M$sRBjAR3S_YNmXtffPI
z`*j+*_BaCeVff$9nROfTJXrkijnhxI)_cKoD(%^O;eD$yj?0jVW{|+qJ;&9=Xiuxp
z-kIB3-`)KAwME7y>{nJ2E;XncC3bT2OfLub=RA7CX`Y503O1B#&!ky&*Vgp!(>QgY
zEak;v%2LQ6S>&y#CJlvb*PG9iPg}R68A{~vM%!>R*RVfj4gEAp9R-IN42u?+7$$cc
zz2!h?27<<98$(D;gHa*nU>!Xv)dDNIE{j?ZnAtpK`7o$d+u>u9{O*O>YkGht&eo!<
z$~>J`-aM8|S2VB;BXg{sHDl6DtT_Ss#5S)YP~*i8Pl8VCJ*UpIaZu1-y&vtM&GuZ#
z^M)4;w9)JJR*b{pY|jD)?;4@NPic^g0e2{sirU@S$Bp*W1R2-Tjn$55grDJP1RI;$
zdpEB>G04g^w~Vfm?>CkomViyV(UE!XHSZ78o42a+83Zo@KHs;`wTbdq*}-&u_4#v5
zZ-u<B*GQYN?Sgl&pS3;)+wd4+_kFcHhBSUpw_EF*E1Cu_sIpgz4FKiUT@^*ob=N7G
zs|aCz53^)%Pbf#PfR{!Y$*I9)F(DTZhRYpG!)|y@^XJCJr+xpE*SG1iH*);Ws}ZmJ
zNNxFS7je%{qF<oJ({19$%kMtZ^O+#5mY{jeKV_;LV`R~z3IyTb@SCdz@x?u21o}R>
z6!D~gLGHUB96%_@K5?@;>z;2zy@|W`|3$Puvo&=i!IdnYuV&0R7dNgCl%u{3e$2&s
z^#5IwAETuq`$)w;qTq0A<IO=%6FZa5qEC@LZ3**sJybyvmsIctcC}`9``FGfO4A&A
zw9rZseSv)P6`HA+^<S5f{yU`otQ<{t?22J!i~gIgY+qViV6)~17D933>Cvm)v9FY*
zV*2v8#hM;kV&)1&Z2xLev{1Wd=|4KhYIuzr-H4Q}Y>y>fRPb!F7oDoG7(jhPS3FOb
zr~VQEzcrgYq9RVu9dxc?+aZ}5(wUjSqt;=?@XH<LUVX_e%0*#R=kvnUy2fpanWI#w
zS22){PUdN>5HaccF6dpSesiA<KiNOj#TQRj;kIK*Ti$&U557VrHk_xR7mg|A)L!?I
zjAI?+L7O$MkLo}(kzwcB3LRTGi+tZN3o&?APdrbO5X7_G5(%8^bcCWX6C$$^Ejo{J
z9&?)r%F|CxQnm==C&$!42jQp1)-90|OYN1Uu|7*mi)NLd1JmxuK?<;sc<3;IS|zPd
z___Vz`E$q66>LCA_}SF+LelJaxDW?r+yOwWF&ADxN|^#II$|xIfO>LBNwsoT{*v@R
z#zcMzIACTfCkoe8GnG3}t2D&eyg4f7Av5Js6StHJ@kYvcHxb}|>d$v<lRu87A~sRo
zBlXf$SKItPP_wl<pI`)6brnTl?O9R>w5us|d35!}ThY7ova>%``G)$@c~ebIAM9j^
zA$wzj+CTpc=_%Q-{}Ttvdq_;QE@l(JBDlG;{v@|pF)Woddy~+G3|ckLfgxAS*W7Nn
zcMtXn7SyR}Ck9>R_?~=Bb8Y;^EaNImXUv+HIgjh&AsB0kh~$fsnB*A1d|B2Sr&g{Z
zSvsujtB@?^4Rr>WWop!x-3^J1&^ItObfG{itU0ym89r)6F|3X!)V(E6&+mSOKubgK
zf<Mtpr?fh}5ycc2>O?i-`b_|O#<gtbQd&J!AdMURd;>_N4f(Ot)+*jA%VgWHSznWi
zk!#v$QkA{bFdq!1DlMXFE<NFauoENXmA5<+Wm%)Z6k}AS$EDle1Jrcm8@rmjcE#2!
zyqI391l~Cj)w&LEOj>eeyv$4LEJ}Xtur?4r4BhG4x&mwcNzHtG2mdC8PGj0tQsHIf
ziP_tuUD-!o_?x>K3Y?cP)NAV3Z|oJ%x5R&Q6j}!&Ym18E;t_$ttk9B~g)yu&0At~%
zb49yjd+1(RI;7W9k~G88f|Jzn#a<FD`#kSSPGQ~7xy}PuY)1TmVPjl2GGa}Si3683
z4G#kUSrXsM>Xb|>OAbiJ<AOOWGyfW_fn1RQ9FwxO3<$O>swQ!)TH|gCN#_Xb%cy93
zs7hUeyRaE{#L?@18h-t;;72ZXy;b)m5v||-ctpbiE@3eK$#w)LK=L|WlXh;VMw^bs
zUGO0EM$Krbyg{oCMzH3NJEYdmW~n?EFnkh1XcnQXP5<o`rok<%zBKQ8(No}GkZ{t0
zSkyJ9ZN@;;U`C=wt!DYF^99i0OD+-*sjUxj5RvYQ!(b$!cdMMQ5;XU~47fu{WKN(y
zFREG?Ee9_8fI*o>&Zi7j>`5J#or(}E(axIRj6mC9Lc6f<t<E%ArtZ50R|1MHhi@83
ze41HdTk1PYX`~?e(faU=5q10an~F0E(OKKIF+&XM5gTd{<y@^rN{bjnVY?=cK7eds
z3|f8al?^t$Nla1s7517TY(ci+%*B+$f40r}FCcoS0P#A35`O7#=}Rsd02owXLeW|F
zDa&}b*iK0ZCw9Ox>8o5=;y%n#_-LXk-k`_8wM5{5t9-#!A)X2Ua2}B5KtR<0r^@H%
zU}WY@=ip%Sf277;^8R+;U{A}hY!m=F;Iz0DErYtfifN^&wR2|QI$o4|nVaS$0v-lX
z{S)}su1)+t^mPN!q@)tJ%2+y179+`^IvF-8910Kn@<&azQj<-&^GDyJXiYQY2@+0*
z_FHoN{#HXfS9pUk0DF2<jcLGg2?+ShZKn*qFxQMNnE7g@q{`(TbG>O3s~-N=8gn8G
z<?{kc(N|F6sx2X!XiFfg<PmlHiomNJ0|oVPutB}w8A_UbrOU)*(^5wnT})qyGF{L`
z@k|~UlPhyh!e|uZKYCD2y0G$%Y=TD@`E}&1Ov(mnh_D;2QvhZH9?_)V<Mn+nFm1r@
ztX5AOn319G$|aZf)CBaHbc-`ff8nK+D^I?%vf>5|TLIXlA4f!uWnubV&v2o|j}uGa
zlSD`anwFu#mcK&r<U&67_Vy-|&g<)mP(?+S83b}DJN^5QX*2q#bXscCM*W$jiiev_
zcaFZ)J$OFZ#62h%H>8)A63o3Fzu4{jvj<$5n=$yed1kM11f_Wa`^M}m-XakxC3CGL
z8JRU`ijtmuBX_!1EI`xYHqW{NWQ1}Ymc9yl&$)0G-a~tv{=EMWoWD-gk!iDHz_TRR
zR^y52G_oZLX*Z2O*eo`VR^})Blv$~{l#`B317)<T`gm6gBoO>~QL?FaGL2{Sw}qDA
zw`slPm6)B@cr?)IRQ5@s`+@BDRC3zI#`mBFdoCW+N?aVB^wsO>++E0fOS#bjlA!Md
z{FTT4M+;~|;uWDz%$iM67|dnWkI$Q{q30w5MYlx<)IeNKFZgT5+T2{R#0b2uWgDCz
z5N96V+~{)vO+sb>5IqF^ZR<95e0Yz4`Lu`=ybyVxL|?v48|65TI^4Nn>;_h5=^=WC
zUd;@kHoAH=)C&mAJXABNHd<KyL0|<*V;9!PPsT%y&H~oODGyD?!3nlW9Pp@2(x2GC
zRm%koO1TWv{Kw2w)`S0xQNynMQbv#xSRDAV5@sUVhdcb0C*2D8q19A7UW%mr0kMSs
zt#iCwFo@=@u^|H(g}Zl54ow$~0Lu!FW~|)M1nI(%o~BFrU<p!CDpC+YmH@ockYZDN
z+&nq<z;Q#3>k2vU&2}RET?fWL%<L-xh|mn;hMg7C!+0=;K=@&;E#DbMvpf!9SFj%;
zy?)mT?GwM>A7DM=3dB>)s=&oJ=Q0o?AhH1awLfObIyE}y^?qZD;*o4}zc9+p>;ELc
zz_6`tF^Bqk`+o6IzSG$>z50vg-^GEQ?#5{ZfHp1S;s}R9S73bGEa7&pe<9)ii2F>B
zDxwOKoZP3dslIKU+gd>Lidk3aoooEvQ@ro=ipcZ|yoHos&>?i24}uh|iubRPKGb{I
z(@O0e{1miaM1i08vvh`;AoI2O%8v*Lg@4zu*c368)AX25Oplb6O||qLfYI=pi`EWD
z{T{E}lW)2|F78_W2VO?PlPL}rWhWX%-c4OZ5$sdYXAltlgW3#;z7-rm@GgOJpGjGW
z4zZL!A%bibc5A7_I<w^XgW^{InpdzP>3Jqn7xBS4K&ml~zHML{bb0gezh>fnU-jTT
z*OVgIJmTL!%#?^A>e6u(lpo$IL@gU>Ls{j29Wh{HVk(F~$CRfdIW7YaKK5CfuH2V}
zal|OmfW<D0!HW{r{YH1+?Yely*E4+7D*=qEmKU#RU^YI2u=-EQIKuqBQ1~@59sLG5
z(dJk&fVbi}3^v@2%2{}@$LaPrnG-oK^jGerRLu;L8&8FIucOT<qS8x%dntC&HSmpe
zu~IVuN}j$e+MLfN5`=IR5em@1S6pBMNrZ`EH5k^o=|599VkYr9#(BpmoYD)_8rgz%
z5w!x{te~3PDW`Tk)QuJ2KIgpGpd;XkAFU7A;o1~}4FYMU0EP$~M-_%NS#A+a5G9xz
zh?J!QO|l(g2{LJq8~~IsTc8Xi1qVPRWeLUsmC`8Aik<1h6!R7QM_;O1q^$r0Qlz-$
zS7-2<qEZ0_He)qINaNwL6y#&Mjue<aE-3%;svr)qGy*}w1Y_H!EJIfASJsUMh-xj0
zrwlbLlc_IpIi+BlIC1e^pA)%Yy(k57CMoqR%Q3_J8ur1X`Dbu{2sDj5h-7qC%2Esn
zRzxhODzeIo1S_VJLB-*!v?Qxa66Qg$p&vePzDAK95C!|IiUT3c7%18wA%P&{i}yf!
zkn@h)0LCljBYNa_D#bA5IINdXMleokd8vp!7Du}{Dy)RDo*deiWLANB4jV5{4-qjb
zI$6?U3c$c=9}A=X^O%dKM>S3wn+*2mt$)lS&(sLUd`NQOCxKyZYD5WpF@Yij=o)k`
zk|Y<3F`3?sa5PO351g<XXE!y{mu%K47rG47Es|2{Yv7cg)$e9FAbpJ0kBLsk^s234
z4^r!zWIi|q(YpXfz8C?exL|%^+4(KJpx`6X!E}^&BNZiGIA6T2?)@G|Sny_s)HWZh
z_*I`imtkHp@Q=R@NA=s4a<<K@p>GmC=ls~(zNK1dI`4y93(pwu{m-G2B$F27-uNo&
zC`lw}pC^u;q(tb+5O=GoACVwT3Vp2UIV`P&AD$9}Rgkz0rhT&fgc!k4eDCe;I;s+w
z5|T4r(ZM`xKar#fL#z-w=gq9_>qZa@M&Tkbw#w~1S}OMI=1h`kG!1cu>8eV>Yeocv
z;vl9kGM7w+=s^Un+!y2Es)Nal39qo4B8NOkrtLbX+<ZV`Q6nShjEj=)tUo#FldDpA
zZ!zt4RECf2patcAV|N5WNr2`DA}p`@JWL4#g9*6;xPEU?@0!cNY`lstGU7heW1K!N
zY0gJ?w6;rWvbol=n^+1V>K$3stCOLngokW2)*!73K^*Z7WF+S4R0L+P@Tz%8dCCLr
zg3=V|&Wbk<=6yQhNFoM@b1>ucJM#C<mh)C!Mr4)sDa@AhZY8zDQfenTN4)-{D!z2Q
ziQ#L|J?S)KcLQgl>M8XA-<eljBeqK71q8G<-$Os6S)LS9y<wuf6N(LyvVcz2I{?RP
zfSxM<sR>?tzEHF=#XA#$396DcwlXfW*IjHjW$_w>Ymt=|0kQNJHFtQP()dq#vQz?-
zfScH6s?#Y_M~ROV0S%0u0AzsTdUwJezQ(J#ASBpIC{e5@*f%GVy11geN-jB`0D|uL
zoC)!QXXJzn|E|{MgnS@`QMi?LdYvN!d`Lg33Z)o!skVgHImKkWOM&2UO8>^B>K_@t
zu#UQbH^o=J+(RN*D0;_0-q=RcDA`gq<Fws6Y1yalGH@%1%}@(&_YrD$Q!g2me)XY+
zk6OyGB5dJ`2WxGkEBMU?wtt_QuaLeTGpn<TqA-m|%u3zOc>ULGNEMhE-i|qD=H)n|
zk!Te>;(R#aYvvA;qpAGbljV^K!uB9!qCNTNXlcFdLxG)bEhVaM^DUy$OT1%dt^ghi
z*V2ycgv@W<L{M;tS(8(z8Q7<^;Ewr)4byQo%8v?3!h!6lsT^z(wjn&C`9XKkF1lc4
z_?EfSYzpd5trDfF`bEMnySSWX+6kE|7jgBZV+;@KOXeOPpG!8xf>Qy_N<ycC_lDIT
zDN|p%Jwe+8txoqad@bFGN@3ip9n@Pf3J`7A0a61(6T^b6h%^=mNzFPAw=4l7%T#%P
z(!*WcOY<a-h8#NAZ1jy<0FM#3_yJFo24Yq!<S)+V_-`}T4l;@Gx?E+trFtCNfWB8G
z-E(E9z+gA?;i{@T;*hc|E^-UgVN40gs)6X>J7id!jna`31#y99R%B>o?Ol{Wy^Uvd
zOVG9;mLRW=oc@iXVTEXI-+sOhuNuhD3X=`ANFw-6g{l?pE@r$&c)WzfVf-AdJ>x-S
zP7F?Yhn!u_ea+<&3sC9FA+pB~qO$4AvWKCfl!Afw%nzTe6LhL0$Xf!fq;N9V(Xk#B
z?<<zW3hL3CHhRvn?M^Shn2hl@g6&E3yGXB6{yp?c4CY*O6{=q7hkcxngW)Fq1vw_Z
zOYwx|kzYrC%NN5+%?kade?HY#FeHx9eS29Sux|V3@`*%@sVxgIn)Biv_(3a{<dn2&
zpbWpNfYfr<TZ#$PVI9_}>(%F0S>ky;4qXX{Oqv(i6j(g6fa8~9%|1gb>Vh!WQ?seh
z;gMbyKo4Cog{)vhy3GUjujeT*daI$uw#<}U1Lr6vYCt^kGrYoizj4CoJN7f$+9&j9
z>iGp&)=V5$;1(X%hRqgh<R5_MCnGZ@I9#$Ou<oVt2Z-DOOrN_VP+YvZt`r?{Jh>c^
zPWXf{*QZ8QcB;MXW(E~<f=hMp(kq<3;`E#^ybMWTDB0%1iO?zS;p1V5N^OX9aELN~
z#b+5v#NUjfi(bV1_ZNh7?UT-NjP_J7I<yZtDML>5fMqeug63}Jk1!^sIv5u=8uk6~
zQt;@=_>nY}QH_U)s|xU^t|cVslrFZ^GP^-9>AN?Z(tEmw{vAP){X@_#ktH}uNQ0W~
zx;w^wX(+1Kzd>(mAr15ZW`*h-1U|Y7lWic)2bBwE<oV88yjYL6NtBQ>oX9hd^?l{o
zVv=%CgE`<oMyEI^a?=hm3EddVQ-uU0dSTN@S<i)Q4swm$HFD>T`oT+m_pY8BkL8gZ
z{bQY!7`qUNqc+rFcuG;#*o8qGM}2YqVB}>S?3!A|2#u_W1m5F~#GSE2XWTw3egieA
zW;MSawU2s7Os>{|j9#?&cfOmOS=ijv^X8dy<jE*=c@m~2#c=T};i^ijaBKSCZ(B`*
z{~&ixx%Lt7!<c48S8gFoUwNTHXSDV%EK1;~Sc|pP`~izx8NVvtw8>ZhBCo@_w&8k&
zuqS%y9h!>DZ^_9#?o==di$RI8nr^NyZ=LSc^R~;F*U4_MI&in)iqN9V{=JO$r_1Np
zca|bEtoQP1FcsT%%dd;taK5W{#fe2+=B>pt*i{CcGHFB1s}+lJue<Hh@jQON<yacg
zuT^axq0rYE0s+FT9efA3R+wr|0Y68J6=J;=U|mcs(09vRIY#HjA>q<ka)V928vu`l
z8n5@BVGGmL$DdD`Gj8$}vVV%pFX)De7GlHYC*PH;tX%bnZn9w1*sWJWV)0fN<}0!Z
z;?gPCM=DRrF%fBL@>Id~(m@f0jlFGr1r=twx70K^Cp8Hn_es|p!5v)YomSIjt`e>7
zk)#MMVv!(OnL+eSt;*j%b!{}On>qy??;F)-#%{kymCI{UG((NM>W@w>5G@Ka{pJi9
zOtm+?8|PaO5D4*C@4O9@Bi`cGbs8kTl5!sab|4P_l4BFJmK17FAv9e&q}IvGJ&a7(
z-XW}DlXgVrGl3J&A<i7jDKF?m=29~7hir=*FtT~V^h4iH!wRX@9M7&`qTUa#xhNC!
zja6<pq@7z)uBiN9xE@ytcW)DP+-|Vy>|mcx6sFvj5vqn>Mg7eVp@v7UsIK{*2wQiE
zJ$J6}b~>6kYT|bSaa3Wk`m!<z3k=kJ$i@Jw_P?qCsY978>P>-4Be6@h6WU1J>OSp6
zUS**D&nk{DDtFH+cP}c?&nnO_Dv{4BkuS=QJnL*M_-5))&CE02wwI_keCytp6lUhP
zQ>g1cbd_*8DI>?;ayPNXlh$UAb?l;b!5HBO41NNs752*+82TFo0P)r0we8VBi~OT1
z>eh8X{5+w(VDgUL(!t?fr?_u839CFnEk%~<e$%Zu&uaCr_f%t#0WDwcy%l|~N_)(N
z?+9ZpZCeo}sS5iGwuTJa9)83fv9y+_RV^Xtk)O6*XWlCgNvhhz_V$dDx?wxkdNteC
zNlQeE#5A3nCifhLL&Wx?-T~MFx2D9fNq`(5&A$`h9j2#{S7}GU7BTCtqIBucCmNp|
z`ES&M?<QzP(qEdb-A|NF<r+$pN0wW+xZ}R-uP)&V(eB*s?%ROu&ZWD3q%N$Szv??c
zb|S|1$Kx;Le|+q>$6v~7eC(J1b^n&>e_geY{qVo8+9#v--l%<^9&8EPp9$Ev34?n(
zBW_6_DyopjZQ0O`?Mn#(u)oTWoiY|H-`LjnvBf>bI%{Y=YgM)<P`iY;Rl0<?Q@AvF
zGixn>{qOm=V*JkVXw$=61Fme9Nv;tZM6k+O2weLw#?B#1kS*G_X;o%c+O}=mwr$(C
zZQHhO+qP}Ky1(~Y@3&$^KSrE0_L^&Me3(MZG$YAF&h>@2lueA?2Ug}DPF>E6mhRbi
zsf1Eno$``q`!6t~OKV9);9gzI_04Swn;HThYsz=rMP`%U63ed2zg%Y+o|sua-m7TP
zUF*y$i5-?zKiwei!M_501Nu*3T*SIFC&*l8t=io=wXvw4l%abl<hcW2B3A4s4JT>q
z9e$ysQ*P~`X)gZp(L9MG&wF?nyU%zVIHyRx7XKg}c13CD+4F{LmgZ4O;<c6<d&BY(
z#aArM&<Z(Fz0Qpx2QiN|XEZDdO!dV{X_C$*>Wg{4-GiME5q@OI1{7v3SHl&gFKPE)
zub6`uE5aLVO!?hKsOY;*rR9!#W;(G4a+rgcHYchCD>b6_R^f!>F$|))U4yuz9We2K
zU7s#(u=v~sydRptF_^$HPfQ^njsN#p*^Y3K4fN{b?bRGDbSC~7Vuii>VTGOEp69(B
z*;n0VeX7O0v0tzI)wqOBg~=2eYazKP?XY~KW`zm--u}r1dvuQ4J*?P&?KGPcxa~4G
zYjN+rF3ESCpUY@(H+w@u1r@Z}$9u1_CCg|Te31-B<g!0(9=O+d{1Dk6V%go`U6c#N
z>bUjMhx>MI*R^x0a(ndgzme&4%6@d&rLEK7Ut@#&n)n2DWZ7!drF-<<qW!Y(y_@aQ
zMQghK`R@&w2CjoTn^Om`OyItp1`b1`_XkKnP+)TmO$QJ9Xvf2UZtvUP|85j?Ae#nG
z>Z^(tE`x)OEY>{XrYqo<OVRj&^!b<ji-EY9cO-4HzfneH`vVeP-gNBcw}H(j(dbc@
z>qb+hKBFQU!R-e3`0-cl9mMmhJh#LQsJg|%qLAm`dOI_|GcXA6-SxoX3MlaZ)FiB}
z)>!ww<>#So@yMA`WbpvxJxmdcEcZ=_u3O>@<4#nXVB%r{zzEQM5)KSErnfgcpLcj<
zn~1E*xCIbcH?W?at+AV**%Yvf1)5u~Obq3JEHK@Xx3IIW;6B2K_a7|0ztb)dDU7R>
zp|101&nlO+W&J_@f9p_ersSC`i8KyG5}XIPv8Vz#4~M%hQo@HGHvBdbBh@|D(~9MM
zQe55_K$=p8ALq<6@|<Z7_aat#h-~>+X~wN&E&@GTLbJ5x+xcqm(Lq%7X;sHDFrp#I
zgv_f|D_#w2oc~NAmI=#_A89Wjm*06mbexZd7hju3E>r8SADAp+Ji%v*nzIca=X8%S
zbRAIOT1QsD{B=Yjq^wG{2qgWt_YsI)bgRUGbux%ojI-gWgS19RM+XO2S0^P+WQ~M0
z^t<YZgi~?X2GQj2%z}kO?U+_P3H2S1Z-Uxgd)m?XaEMA6a6a~6m_`xIq8_F9pjR)r
za}^J%({Uo|`v>&9&1e+D1vz~N-C(j7{$JC~a{TMIx+3r(maSz*gjb~DJA7-D3yV6%
zwxo)6OwLi#P59nul>-JVHRWr0)Y#!JVO}#AKlVuMY<T*|m6JX_AYz1pfu<0bhj!Sb
z75>Viu^N;gX_OHz9fRl&B*7i*#~dYpo#J_3yAj2q$`Sz%>A+v3*`zh`WLh=+dIqu=
zPI0Q}b@BPM`JYB?>~@D9`nEyd_c4MfqAxK5s>%;0f~wVa-plxHW2E0zBaP9#WIkD~
z_%7)}XE*q5q;RADJ(&n&K=rMw5UF2&JrErjSatl_m}*yff1jD*ug@_z(t}*?%1cCR
z$9Q9iT7lM<jSw`CTgt#mrpl=##&=3K$DA21`l-R6mi&>_p6T@3`RRzVZZMhwW&a%6
zw_J)F1D;`3$T_a&T905=Z=YtBJ0sHG7yP9M&LEAj)j;zE1vcP(>Pxr80;6V9Nn#2t
zbx<CCVNVC?-g5N!`^~_Gu~_)#`FUK%slYSD+g~GpVZSyb5On-J6ssx-GSRw>Pe!1d
ztq3fCGHT&8`0kcnS`eEyUZw}`pCqoZFdUQ@>uqq$7PnbfCq?Z1$XpDi0szGVj`UQd
z-!|#rE2O;wDV<hAuD}&miPVxOiY0K)V%46^D;9r<_f0*bJh58JLwucHYhwt9E<Vai
zl>zZBJQa0)nd|Txn>`m;_?D?17$xh$ff|_QZ}}S2us~yH>msOF$qtgleEHKOPm~Pq
zKT7hob*75WyR;YUYL(dA$b=V0tTTYwN>^o+16oeAYmU3##miAwh_uQ09xC6(`l1;{
zb(2&2G_rz|Q_Ms%Aro*C;e(X=3IUCGCq?#Cgz2OC1lDZROv%X08_aXfp8~kLCz~jn
z3GZYlp3rEZh>Wnf1YR*(o`qSq{OtG~3#o%7$UOYA>=+Ec{c4Z5>4kYB6V(Q4%AnCi
zXkBGJeNw8)Ab-xgg(fL4a-|q`b()FGR%`Lq@>V$#gF#b~=9aPL1p4z)^8O_RcfuSC
z2Ro|;W>XV-K$Z0N!10>yeK3MC_r1s=Q=yon!TTa^?ymo;7kd0su<(wuzM2@zAN1cD
z>J1R&e>gYsxIDYWS=9T1H`>Q{AFN1ajsWeiIQKQdyfp2gYT>Ijnsi(1NMu)-tj$c?
zCHkZ(Ot7B@72xsrM34&0={jZn5xM%oHf9HZxifa{f)Bp(P9q8O1PDt(ER>ajdT8r^
z8X0Y`c&}yVcDAprnMZbAP)Ly;nA(#Qqe%$}*n^_wH>DglX6|U#g5u#+z*y!t5g!Zt
zvz8m=kAhupi5cAY>xD~nDHyt;;^D_te3|0MMdhHH<A%>2PL8^0=q*G_y0nQABlL#w
zOcaJji16&-gRP>{4fIj`=X9!J>WiNZBC5(I<xoKTA4L&e!Y>UkFO3|Xt6K=MFB5*m
zbdpBHA=X;afmbvQ!3xf)$+T!VYy{uo;0tE#kGwfJfMWa8Kr^FiXZk1QjL}0g0^vbX
zN`S2!EQL}%N9i$H72{;#Ht7mgax$~C&hY3}1GK>R-5fH)l2Gcrb4bT82HagR8nXhB
z*^?LFYp3wG3Dk7@!A-Ou%7qrVYV+OYkvS8@rWDI&t^-QCl!0Rsi+<L2!$0r`87<eC
z(t8ILEM3{c3fj7<_Ie}di%X5!(TLM9&$;qJL);pK(TeD-aUQ|uW`wk!D=kL|3%$O`
zu$WTm%muCVFb1GOm-kHwE#5f9`RNXhRCpkV&-J?`nF&G-N9$ww*;V(k>>^L=sr2~@
z;G!}wk660;b%{cQ`>!%^P8vTcq)#x@@Zt+9kckd}N^+Q>4p?#=kFayitogn~ZnGj#
z#Z#21c@cxR55gIyP&+TqsD&x3NEICK-PIH0AB<v}O!j;F`@PAR*ezF^n7}y_rVm$T
z^)GTs;d?3fGDS{~xDZI(cL+#F9@G)T%!b%BmqpCtjVnLs;@qzW1XyTd-A~Ic8Dok^
zU;Jrb*bU)s^Bra=h|<JV=h*T4P{_eZ$W@+f*bZaDV1Z?#TO^vOQOzgr`7EgaO!DW_
zh-qA`IGibW4~V7(MwNV3YrBw=rG-S0k}XjmfPHlwf+SZjPFr>Rhl7ItDNa{|WfDRH
zPoh&WG=NHhMy4T=0HLpkwV&z9l6(8YC#CXv6fY5ChS^S!%TY+&K$L4dNNP3~sGB6(
zdGjog#h^?u%L`38%g3J=EKi8o8im5$z_dbESJa>^4b>KImwI`VRJqTltBZd!PqRK~
zwo?UHzPaElj+|vV7tYFK=$|~wUsx0Ce{&)bw3ctJA23YW2BRE7#-Iau1}jZb?&?wA
z@sZ8Eb8I-w;hwaXPr=j;X-~z40$?7@$323ADH7COaz3l^@>L!duZciZ7S>sU@#mq*
zgMybsc>~v$82_B>l+%i5jW7YTqcCh;-EY9#irY6$glbu{WI0P8eyq_1qkxj{8b*Yo
zW9fm}F?KRSS|j*+6R`;fz#PbG6gnGi%^ao}bO%dvtJ|tFGaBp+!v&YaTLgnQ+steb
zidr3Y9X;Ga!?h*kK-a(l6(wEO34Xz-ry9US0=0_5$@{zxvbyLf4@sr?U{UlgoFT4k
zK2sOuGnP<AEK45sVCCSsWob#CskO8fUS2>PkLVj6<Yon!F>GqW5nnt2j19=Nx5YuE
z(K;v*8^SVP5d;JdWp0h(rDJ)<a(wd=CNTAtIo`@B3`KX7klZpuc2__ow8z?2X)(<3
ztCyK(1p9i30yG@fD4ND72RgxM(V}SyG(E~cTo1<!p;l<I&<%PH+Yi-L?H;J~k++k8
z2<a@%ld>auJ<LS_<6vMv6KjC0JjkDo2v#Zx^1_Z#!)nKmoQ+$21DcTW3VD~JNj<Ky
zM@sAF0uE0??rCA$B5Vy#3guk8VOg-5LC8DESz}adc->IM7xqlF7>CtEH4+*@k(@JA
zHk)7nQETv*_i6Kdl$=A8ZQ>Rj1|LAcW*ZI`C**~iPl`GikV?Sy>@2)K3ZNRek1ykV
zD`u1FpA|`|PZO9O0V^t{k!j)u%=u#oXy_W%%@_eqBGtTL;y7ZGC$*m|KXfU5)(I$V
z+YF>E_184?j>_vO=VrsT9#I%Tz`Z~UixO3&$n<R~=VhOJx7kNj+tO%0Ds3>+89ke$
z-}jsY_G8Xr4o31r({gQ|APoqgc8_+6xw!XV_&_W`%nozPb~c)Smh|Zq4zelhSV17~
z{z*W8Z?Xr%0rq@|8?ilgHX3^01}!jOecNwfLKl4xk<YLZ-&j2qD}?3L2dEt?!4(u3
zyRVf-T;E{DI1D?_KTHw8+B+PmD+EzXS?DR5PsRWS#N;jdop)F{UMZmv1p+mTdyYpb
z-}5C0xsiLi*Ow?NbHb8R5+M|+2cS7U&-|o(wr}j#S`r#dU4B|GXQ3pF8@eVPwQ^WL
zU7*<z%SFLI%6a(Qa%X@1O_sfx8b_z!q7v;R+apFYVZ>qPQ4-ru2b+$E!-D_^ZkC2x
z;J02V69d&{jWM+X)*gppXFBS>o8&2Bdq8!Sy|&L39?RR1^ZN97p#EtnN&PUm{Fhk3
z<_z3CYim-!)r9nZ*Kr^;rj;OfIA!=jBI1&A&v8ROI2?-WJP$0^8Xb@X*^a=5+WEa*
zP@*D|^R=Db!)$8ap6ge*upSzlvXI6++KSAF<I;F=h*pXF>=GyH3O1?=<5LKSJyQ$~
z$($hkJq^~OZ^1Bf3ku=X6q1h+yb8mwBp=Q!D_W6wK(EUSwmw8>VK{O;f0@a_j(G+%
zWnh_!;?APX8r85QbFjiZO^=z=e}ZX3&e$Q2HQ7kcjui&@b_D;M#gvm3j0U^KZ~o~B
zO^hjnx{r<JO|+1QZl<jp8GLtD@ImFZ7@Bxw@^6GtVYx_sd^LM?kMtB^Q4$Y-9|F`1
z7KK_H{m`hw+GL#6Q9dnLNHUmSe1aTIz5!Q-3|etHFqZmKJ`+rcqkT|q;Eck7Y@1n(
z;J<RM#4`AX(S|o_Yp$r|*-Jc6YlcQ)^PQ8-iYP(DHQjKo;Gvn|L8>%}3P@RoA8tG|
z*h8PvSJfx9VD{G%<zrhVs&c8iJ!!*4i(I!*cj2kI#z|#P>G9LmYI=?~AO0V>uy~qp
zx;5EO4-G?k7&mBDOsjsEJbrDnBI>z3V#P`BK5vSECl{}rgSo8}OPTvEnQ6WKuHieh
z@qcO?7VO!yFl9IB&60<N1{K{hH*d|hlskeg$^1pl_hwMFhItB~P?JY03DZn8eYrj2
zyIL~DsyaW3S_5`<w|s+d=gf^*rkip<?rqkM-<I#x7uM@~w>a?KOXm=Y?;vulCMN%(
zeSfB$SvWvpfvw^k{T%=o4KGB?l-=O{h>NW6D!hj^hekfx*qIyxcqvh(w_JlokC6uk
z@s?lg5ygt5ghl|!V}Y}#1>=^UC=dsfeB&(Vv<?CN+)rXvsxne#OC;e*M2-2C*wB|t
z(W_<x#g4C`Wq}!a{FIxD&m>a}90}889^&K{OS2?0*X`!*1X%0Ie4#*$^`H^Tr5XOF
zS09w&Zc&?@Qg?vNG3&yAqxkL0Ty8NZl<ew8^aWTpPvlJe?t(VPnGxhjNH6St_(&+Y
z)L`iH<(}Ne_U08;U_wQP%sV+bL~a6M%HvX@c@8pXdIBOOK}1Sviwm}mrhebH4MuQd
zZD<jy%IkFl1|{AW`gNHY@tF8g<p#4mUwSS(NNJIWQI(7}7dP>v?yR703WS*D*xAIO
zZzzNh?e{~)#Ji$^pdM0RFC&B$K<gAZ!S6Mhs848VNZ8UVsa=H>AK4$W{P9rpqK(5c
z$ewK&(STL0P;WVBX60>eIpIdTYCkDE^7UXD#~WX*r1_cwVN9;PD4!WR^FR)=Lcu@A
zOIvX|u#6m4;LpRaB+<(|L>WBqJ4J~vsQPxNdctT0G`EYMQN!vKZTwm!P6yX5vJrn1
zDRK6}E+TJxzF+562}YlyZq+WHz6KK)x$8p(*`y12pZv9<Ru{Ax?t5FTYbnK0;nj%V
zr@vXKU4!SG_*b;<z?-{qO|Ow$dlr7dvqE_hib@zuE$u*6(UH!e!jlcpB7Su4zrnTd
z^C*9IorO_$FH%0bNa=+klw_@vit3>`<Ph_41307D;^3)R|7K)_B0*JP<GYn?ynnkq
zt;m`E#kl4#^j3;CF~iX;Os9y%3w(iq2rHb*axe94s{~*LZZK(yD0FuG^=jWGG0Rnn
z{04JaV)tG2djI&EuB6pGwdL5ChHC__bwnm9MZzo10McT}Tjs6<IF+yCQot<V>(R<G
z7fP)n&oGJoXU{y%(mCVew8Ft{xjXzipWHiBHM_`5lzVKF8{qVEblJ<Tpwv}N8CFM(
z4?Ei+oJXp*57Plrog~r}q_yJ*sYk2N^D?|2$Yx>MGRJlM^2S`#fOb?rb#8rRO0OoJ
zcYv8@QOUg0XxgyB8PfGWe$|Y%-(>$iftj);yg$Y(k)6MOt*D&4<A9BIW2MH}_bym8
z#@gEBSXuW)Ynw>GiN^K$_>A@a-UQhVFmqotaKg^L%;JqsVZ|=G=JLPo6{o-tS?nLS
zJd?=OHP2Q6dM5Yut;m%gEHGV+I~bIH#`}t&WpI1zeze&qKnT()=HqCQrSk6CvF(*E
zFn$#O6vylcTpHa>o&LVrM%Dg>O}i-|_FT0f#DuEQZ^8V6x)y7>MhHg1225cB+{jwc
zfRP0i;z6<__DaQpV-ehTN8b*1?16nfI!Bafc3DqeNER5%9CXZILsGi_x&~Xi)S@*W
zy`@8~kmrzqG4*=4^uvRf5d-&!;eeD>xb)b{&wP0%5mxl$wbgNn9jS%&SMIf9ZuK#D
zhV2U6@%NpZT^41RHbxGB@G)04TOIA{mzU2@OIA@Q{g!Edt8#UkyCh=Eql#*T8w<{`
z#Lzx2TP|w%(>VRxm*<ef(FO+%lxkuR)ckdK$V&V3e0aX&3;4g8zi%a(byq9^fFA4r
zf9B7PjphGf{+6^n9XCZ1{&RXXHeJcF2m=MSVp~(^pspV8M|QP$N;FW!VTH$u`StsG
z99`Tr>b^qr1ptW6$5wPFDiT3Ry*j-*{dRZ)91ZJ^xlKRb6N!&fb(2!2(8}n*@oI7(
zk56~uDakK8zR``3vJ>)Ft9iJ;bHB%#wpwYxxoS@}X2phes>S8T`z7Y0o4#{rM$6~`
zl-?$iOR{IiJ98MalUqokJRqR&jr*|I`LYlk@isE6kH`{DLp7X0uOU4KC0-i!LwII2
zDDx*INi`l@#1EY(#fKK9{n;T-O&Dd85oaMcK*JimTSl}CFvKEr^ZwoW>)Qog>Byyd
z+Gq9e2$ChaBpCPOBDDuJdMr@8Z#}#p92_JA24&NYYWVuM@_D3~rqI1!D=RCj>y5&<
z4@`yNSU3yiRJg(D=;483DGXC5fQ6k963vfVU1Nys5@K|>G3#G{N{l-mtBdqO&|!4U
z_1>Xj#&&EE;Z580J?e{Fdg$)p+zR4PH5=R4pa;-IoO%mLW3&Vge4749U)&!VHp2l7
zJ!l@;nn=)2njmr&dbhv0yMcyA@5)neX+!7G<CFV~U*^h2ggP_4293{eKEc4Ey0b<{
z2wQ>Fq<dCpoeO_>jokT%lulz?+>I{^mji~f%$~dwkcx0=Q_yKYj8aT19q&T2s!{Hh
z(o+1&`T)gYHbFYz&pVIrva|z7ipGj0hvDFdxoGVCYf2K&ktKsC_;@DKWP8cSu&97y
zS|c6_!cm1bA`<&wKDY&a#+lh}4FK&OvrQ%S;C>$bjm{4s2MTe;$UhCf5l4=T2!vAB
ztzf<=UA%AtGq>oSym+!1?cuvTxv5v&sjV0wUWh>b6|~IoNc578p>+@)dvt2%y5}Gg
ztzh!O`Eh6yGLfbkF_KYC*wHM=3*gC8?0=Xl&|$uu>vc-t9<j<$?R^GkNF%L0M7?Ig
z9~Kl2(Gz#c*5AJ%u`asOPN{N;&!^p8yt&=H!BkE!LGAb<+%jnR)X>1V{=qA1EVCt1
zgnJOjN*0mGV2IH3n5{B$h!<I37_@F+R2Tu@J4upf8<*D47ta^a!NgusQXFpIA625)
z@f<75@jNQm@hg||&PP$@^aGW(vwBytRycwnuVtX9PQtKCp4`gl^Ym=ALPYkFR_mAQ
z6Jr>hNN?#-F?7moO;PbW^&L_ua8r|1)E*pJIGISN3-(nv0IWo0qXTAjhPA)jHQt}d
zurmITo>UaCGlp#Gg{m@#<O4(;$V1MwA?r3{2q=VrSO{@Lp=VL#uqTu((lv-qholcU
zY&2u8xV!=tdq+Gca7f+8UVma#x#F)hX4<uk+1X-_lsIbB9L3%UJOS`a)}aea(}3CA
zIEw({{KNFH`-zAU3wQuJ>=t%Ug}m`<vLH&;`v2M)-=RZW#-VVjQ_Rj~t6q8~+mDDA
zAI~{C#9u<h6@^2XFN&r5C1V``bJ;ktMu<WjxR0<r_3e4y$wTX=r2|7m4qoX1!IBZJ
z{|OyFCe6FBqV@y41~{mF^YZ3Kf5|}`Ib_8O1o~%+KvWB3UGiaPc}^|Lq^`lD^C`rj
zy)R1BgL_1fHW36uVn1hv89lTNN!g_8S4W3=d$sNgNdHlpjPm7XXICB@{*60!qx1N_
zv_0JQ`TV|G^$ojaEj@HSa!NTuExqVWT+WyU_x1cO<h{!MLCyNQ^>L=dh~DR|5;y3%
z%I)SHU&p-!aXJ(1>L-V2|KUsnmoo?LbK+N7zu1O^;{SKNjq3l_9wVbYeLNTfoYLqF
zg2#0MT~KN@^p}4=_I^E7K77{c#vc9LA;H4g`B!2&d;s+VApGEYPqWBpB`*Hu4W0k|
zZHsFnn|uh5>o?EgZ)YSbO-u{C&7nEWG=ka%3YIBNTiE9mSG|Ko$kEP%d&7KE|60RE
zSTIHWx@k0jcLdwDb0GG;2l1Uo!0)Gw8Ta*Q4kNXqKhuTeuNgwZ0(a7_b?8TSTTF&)
zF&c@mkr7l31uS*dYy6CKJeF77dG=6~+Wvb_$aCJEF)ZvA9M39;lgw9-ysQ#phei=%
zKmm`_5mEXEH7uxIk0fpHXCBB9K%Y{iq@Pro<|gJJUd`rK2KXp<AN+n>(}s}GRgnbl
z)BGOpJ9r8!=`&u@=9if4ai$`SQ;L;{iB8pkpH6BT%?_Q~ky4O1#q(@t#>s+(k)$98
z^4ELSQE*sZW5c52_|iXb$y<0CiPBF{HXLZTRk;Y-YFM!_x&;xrsIa&J(V2T_wxECc
z6<YWYsH&`Umt3>FymG0H(HRF;hX|Z{4SLH__*R^Pw46nW1$c)=UN{g2m`s=y6K#Xn
zu4*yk9VDpzlLQvUP`<Q1(yT%`O<Ks31NQVN@w3-xNqp=FM!soqjDAygKaBDPgv25w
z_vXs|+_M#&f@^TQ_VSWfCju$3{ggzOR9GVOFg+pd9d$nw!1NSfb6jG++-i$mv(lh5
zzjP~c47_{J`Gj+f!1jW6Q%sG5EF%HZDD3i_JW#V%_3;zb)(QTMDP9VUK{wu}qO>xy
zofVl{<r*EbzPp+?1mONFkDGZJh&3TL7SC3LjUo<~PGXU?yPcbKLNzhT{ZkFoa1(>D
zbImyR8ouTc@Ks#3&|mO%2`Naqpcbv;;C)9a4z23p?o9E_hrBRm5@qO9)G*cJ)Dvl&
z46GQZ6r<?S93$#`iMksB8PpI;1VVTlr|}>H3`r7_x|_Twy(nl#J%a%|Z3cV&HtKY|
z2v<1`I*|iZI!O3>VnqMdgmB0z%C8Ch?7SCZqrF)$QC5clx+ggNrLh&PWx>}a;K^1X
z|FFE+OMohs6((jQv!oNI=GM7PDm?Mpe3U>B$OG+70yfKzjQ#QdK9$LHhIpJM1jC6A
z!@-_@E;{bTBzOFXEHPKIi+>kCvxzP^^%&5*`4}m|`>(lF7v;geKhVlYpo6MkascHO
zAR>FpV!+QQ*q(gjL{nqCLP>#N)Fx&rs9H7-QVpVIsGn?kyJ;$|THH$#r+=JP5#9bg
z2E`W=^p*1?dBn_zh-m)NR_us_H!m>-;khW~^vBRZ!&q8T=Cf=n+)}{vw<@=53_!iS
zw6uTFU0-aG&rb2g#S)jB<czt?A6fWlqz>%FNS9MB`+fU2^GHRx=os=*5(*XyL+GrK
zlP{~L%s;uH2IUrHv^K|38fqYj7vr`lj1ai)3ne<9Py#8Cky|>SFYu6#!~mnJPn)xU
z9&=TWAM)Ov_ZCGF@Hgkf-#}T8^3pCLS7z>_v$F@Rl3TRCDBJ{%DU=_KVkuxiO2($P
z5ZeiBvzYp09D$g|P%i)oR8TO<7J~zbqQ@851a`I%0*`HF>W)8gq9E;T1e+gGTHZn3
z;HcO4k*0abQ2@=MVNgn+5BeNM`Q68;j0_#(D5$QFrW2G?*-0m`xZ%S`t-LD1OGmXR
zCrxE4NNUFq{sg@FXhrG(dVu}#lv{s6vU=%6LDS@=jZ%=*;$($XOijh=L`YG;B?m2w
z*HCehZ!-qR;-sp&>~alGY5MPvX2rOKS0If(U{S;o0O{6kq24rr#RFfN*GeQ5R$h1C
z{D?6@_hyx%A7hzW+`1NWL7CyNt`gg)+czpa4_yXM(F6kX-M2uz0+3#+!2<hgcGR8+
z(80khaKWj6PVE&?#y>si046Y#M{H{5Q6V{OrJ~1okEw^X!Q$+!Js3_n2#qbfyirr|
zS#mpWu<_UYNF=3>_o$VO&$zs>9AK?qL?#H@0ykw5(ZR#oGb5*Fv7xGXDaeXY6B6TW
z09*=GCPN;R7OxFU5iIa8<@Fj34Hq8BQa{N_pI9Wp@M_D8P*<Kc(oQ@hl0yhJd;Z=?
zj3`JPy8Ku;TV}bZhmnU{iURhEgn6hAQhSYViU<#cX~aoCpwzqoOtQ1n;=oa3JmMzc
zMu;B%Y4h4`(n8A|zJn8aLB+bt8PqDYljy2IgyRQ_8p++pc4gst2gN0RGFS@!=T6@X
z45yRV{!)i&C741_#5>b_BkS2O0gJyqxO007=et2DE^9s>!l=QluiFq#kJ;<+h?Ong
z#&e=7a+j9$nskDWduEGIawB_WWX~L4&a_9MgXV$q-7PNIMBVILg)d1BP2=Y}?mrN}
zO-ti@ztT4l(1B2o%zR^T>YDCs%r)e=>I_D1F4~ML+xd@5Kk1G{S<6DLon>7IfC>lg
zY+@>1wZe7{-Yq=gyQV#~?*T!3+?+bEdCp;Ja4S$k(p7|93}%;6<0vCu&BFwABXq6F
zhj<64T%`CAyKlTSNgFlUOt}H9p_op?8$2)Rfg=TvX>7v0e{qH7POTKoB{6HVQlpE6
z4QDtph#Jm;kD{mj(vMuty!s(fHT6x!ntHQx*31I7Lve3A-Yg|%OD5#%LxlW8^&g^F
zTGq!EwiRLp7b1_sj7|Y=lXqC~!ldxi$aN95?vsPIUloih8b0z4ig8qElT=REfrQTM
zOB_fE6s3kX?HZ3j)ngHiD%>jlc;0Zgjcubr%SbBCXUY0JN*NQkK(fx7n4t`otAf=7
z%K{r=Adl=WWK6+NYDiUAs`mi0gc7qf;oXZR#4K8h8SIh83Hb;t<tsJO-5S|!#H4sv
z820FntR_Lmj+=%~oy=|P&rUt}7*1uu_BsZ)pohZSOHAh8pB=f`GX@~*jMSU3Z93ZI
z08~$udSXReLZxFT>hiOi`SPR+_P`bxDy-t<k@Kj`2pH#Aa8YCZT4XuyuA~EQ!miae
zQaTEUi=KOoM6=GxumrG7@fN<;Y!mkF^kPB9tYhiBE`}w~!$YNW7mBSN8dA(?5jWZ7
zGrFK!Qp_l2O8tk&M;h;DZExl@kRbD6pYT5f50O^E`n$-tnqw$Z%64T&zI%KoH+Ow*
zUahEO#EN6FyFQh!fM&Lgdbmfb9XrmUu?mlL<YJ+@8kx(Ul1ugr#w#BK+b*AR8jpbE
z#qdtg<xcd=)~U4U%sk>=r0swP$u3rhMGAos<Bk4s&*9}u^gW)iq_&ggww$Fmef|-b
zjbJ_2QZk#8$wsrI=EG;}QM*ib-uX861)EQ^+g0QYg<=_;;r8&42k%X3*F=A%_3T<u
zl5_o3-<-)rO`_o_(2+Qy^`_|A88vxZCz`F?v}~>=>^>hcXN|$!X{>K(BXTG=GleZi
zS46uVdZSXK+HiLa_q7vL1VutC_Zy-sl?Sn(F<QQ+PmUHR4^NUc5=OVvAE$-bUKyPo
zx{XpDoKh-8hv0K*S+br2ncqlP*PN?^K5dZ^a~czI{&q-mX5y5sz82M6%fE=U#!_@@
z3imj{kc%8+a_wrjSywUrakXpq*w>leb}LtDwe66x8b;?^HhedWH$&{?zrbRpV<p*H
zYL#hhs!FcCm~m5Y{s%%{%QRZ3cE$~pzx<nyE<9UhO7&M|gL-h=%bt1yR!I)3+dD)>
zG;&9agEsQMIUJZ)(`{M?TQsBqVR|~zoF7S26*#LIIb;cw=uQ$O($<IV=)=DdqtJ6u
z4a77;d}^TRkE$E#CK4g=EmMSJcXsJe52i|V#@84Zc1w%@sqN9J<?l7Az4v0ZuR}kd
zvHzX*fYCU7Oz#${?5gtg=?rIUVSex3wItKsv9xM<H+{lz(=Cn>RW7`L_x5jKEOAV=
zDts(l1`JVe<j>PYT(-!T-5%oXG0hu&hMrdVY19QQb9v&uxBZL1<5|8d%9C+7hR&-v
z`b|B5qCaCT>okO&?ea!+UQu;~qE5Adh+d@_pR;z=Hx1+!VOqM5a&)ksllUT-^!ZBG
z>Dhi#9TuTBRg-FQ4T6gGuZxV!b=w@>1Ye}RqQR`br_j&FM#q!Ki6nd8V|g$VV%k-e
zg^pWTD_3M;wV0{ztokIIVmj=V`77?Fy;t}weOM*=Eg@H#X;vz{E@qe5oSEc(5Dum1
zdBDCuB+29c()X%lR8UHhYDU|)WcL;qqv5ODx?YW55e=fqB%ut--r&*^&3PpR(+C})
zxnhrQc6^Nbb~2{v5IviK{AlIPxNBt|)lyilon5uVSgzv%XZxlHR8Ba4@^U2VrED5V
z3(3<>yOXeY5L|<wUT5AFB7$H#+G-t#j+*q=A;6Vv+hd<cnn?PtwCVx0G3XGnilpPD
z`6sCARwU`fLLF6cUpdoEmdiTlpBxk@w_;5K(RFx&LB{s3-%+gUSmH{b3j77Mfa^%S
zzlHVE)gVuBYXfY_ER?kB)?^s#L!1)Kn!87oZQSI*JGr1e$N<?+lQLzrSQO&I0;`H@
zDBX?TJiON6jyTd0qCY-MFJ7N%CNY!UZ2-Dm;sR)7rb2V-z~ngyP=oGWBr(k`=Xe+n
zjY}zsP7Cf(x!*n@1|%SIbLW#g-c<6%uQsu`jt_E@Kj+GS`;h-QnJQ!kIGk9a>cOfd
zham=Kdn!OgYXksSybJ9>GU;M$jUe()KHpJ?BB3~-+ABYjYY)>(4jBrFriseb|3gB>
zP)yf;<M0}8vU&5cI?B}5gliu(37YSav?1|3W{mXOYSq%Oq+RpS-fLTyDkrV2607Qh
zx=u1H@>8zQwny!rqxTx`{-}QiKByMI?onjza#pBYFgE(b1Gw{iKjfu8pIXW<MfNoo
z+`LAp3M;8R^AhtpH%gmX{%oECN1%;C)R_>AsO<s>%ZFgVdKY?lOo$CmAHbYkeaQVe
z=aO*@r4(dh7DRH{jsGK=@`X|;0YC{qrz?!MF1a4|ktI(_&RXsslc#D2P?k~N7|N^f
z(CQP%iIqt2g%<>}EzuqTu?GXos$h--E4V;|ePMcn0G66!*P08+z2p)LLwAabjSs1M
zU`BcHbM_A=e&igedMt!*n5vKoubLIUwYuKT4NgBQ582ucQkjA+a#i>6uYTZd7tQLo
z8CG?(MksK5g>WZuyGfHp-`@iznjGjY8!0Bj4wj@<90|fB{h5WBlAyy^K4>n&U%V0(
z+#MT4HX~uLijJZ+uE<umuw1w2g^n*@(J>0pEqFZQVN!CN)yZTxb(BQ)4xR8}qu6k-
zi*`n%%brGeF$=}Ir7Ay?KG);$xwg-iJU2>%(oC+N(MrgGZ6(pvSK@DZ!`XW1lVmrd
zBxlRSWlY07^<yjIImSy5TH{XS>iO<#CCSn4PK$rMVf=NAHOTHWau5a*y;N~g*`WO%
z67@kS0jR=LzOb%^SdkW^3VCvaBBt<fHz%X#ltZfILV0!p1QOAFg6H(i40mC8MD`&I
ze)p)b34aT&_fr*98Gz+NFzH{Er}(635RUgLWeOSj*3uM`i!`Fr=@+XhX2n`JlV(dy
zpF(f_PZQ@)hbeM})aj}E=cWsGB5AWwPOtk)sHDf*CHz_|z0k!16bB2ohP`hA`sjjA
zvJTT)Dj7m<Ni1afBvE;SpE}irE2Q2=F%3%;`k@atUKH<PUYXk=AE-!(QP?I(&8%3n
zS8$Mb(jdEFH4g%w#MKAh@Z5K*`1dTu(q@41;I}Xt%daZ0vpgCuXm6_1^WYj77uZHT
zDgY!V)j_?fxY<I!GUp)Vu$?t?z_r){iReNjw0^}PSTbj;=@kHaYQ-y=5cScZAdF7+
z@^H2a{kp+xj0^w1G7)eZJSkoB{_urZ$^@+Pv+)m{RsUuoxh1~`Dq~_{U4Tdop+Ak1
z-m*R9K_HO?<PHRGnBWPFIYTc_Ya-9aLZ%PUC!E?&p)}O$h)@*f_~04?48s#3i}RBT
zmPGYlgd^m6+$jrr9y%+*+aP}MQgX5%gbtU$wG9G_Iq7JgC<ikHTbu;0TnB}FIj#Xu
zr>xLs3m%t^%(-Uc5$W!lwNQ$Zio%<RPB&ax9Dg&L*s&#bWWiUd-93~H?qw-N<3)xs
zsv_igO7Y8cnl_rK)8CXT#YBuqsiVpTG?)dN9+F(m;;nk|7Lg>je17i~;%BZ~-UJ0L
zQ2_S*^ko7D)vkT+fnE8K@`i0s#ih;vmO3BIZNJSVp&N+g2Zig`H*am8+;6@(48GdO
zyL$9;^I#(4S9+g$YaIc1@8ZOEgl8?`JeS(XXY#%G(>&Phx{?O%az27;9c|Ox@k0^=
zV{HI0%D7Aew19sUs6XKA_~y3&+zN1zFeylMJx9&kK#74x9F@exsP55o#CUyqtA{sB
zOSz*<C<4FAXyaM#jzj;LIRm?!U3L;`s@aHh3g$==EHshI!nz5Uev_G4z!|`OKgxHT
ze^MY&Zn?+>RbtO?;B;-E=xkuZQ|X0Nakl7#Q=<}raHC#Q{Y6x1Js=Bsx-%dal2t#5
zA5xWjv0N?+Zgbt3LzD~_zX~^Um)a_2QE$J-DH`vpdfdFO=m<|>3y$?NZ4O0k`pf1}
z_m<6q@SJU-mBFTtPQq#Om^->VVtbI<K)7!8K@GP1fvy#7wg|K*_d>!xApr<a73>mL
zmsR}pPa$Q?n#moLu6w!HR@O1BkdOu(v}&EWyT8f1q;&cO*NzHjY>>ChZJXQT`SGqj
zfCU*uXa>-=zI3e+8J_dQ=BZj)J~>@>bk#gfaiou*LuNO!8sLpZ^4f<Z&1sDY5g@J&
zdO(R*))e0GG!*b!QfYJ@_+hu<<nC?9fZ>t2qyFc7x!^RJ+S9}B(}mT7bnJ-Xe$i0&
z$;~9#)05Mb8ic*k_2MOM^6;q!sj$(LY9)TTVUDDMbZ6*_o`v4`K$;525OFegJ!o_R
zyX#sAkxTVHpI@G9U0Hpj+nq^!Ua|WaY0#yPfqcoVnpTy)1I{S^CVsFtCpPz6Sef>>
z2jH%3inbmKM=NOPa`wAI=lh2%9tCrr#X%cA@x1^(%S@s92%sDbpg@vI$u1~d`4=EY
z<~e<W2g%qsRrkB(W6ntETV?Z_Mz<W$j+@ci58qr~zy4yTD?7AOqj_c>y#b7|YKBd5
zaNtRf?Bn{KHgR>~(;G#(ZnU=H{C>-7lG}HD08s;rKS|ir#~jmLiFpq7&=Adt!6#p5
zE%klaM^$An6~^5<snuT>VrA720v~nLj%xwmTWJsJ*XF<!T*FyEKZ5utDp;_-4il36
z5H2*6{vM?DUF1UfPMA^^C8k7FTF51Z2Js6!B2^mZqK;(3UOhE5v$65%`04V9Df7qn
zmLIrY@Rd&|ou0E$)DM($ZV@Wj_xuC!gNb$*7MPEBdfW1EhHKst^@gFn^;}Pt-6Pyi
zQvn3$Bb<d8)khS@FW{0L;~FkF^ICeST;R8iaPQ+e2LSG+(%p^?#jU&1in|(nv{TTn
zV`27SgzBYsb-=g>ew2_a`>xdW*&t641B0WMOU9%OkOp_Wh@r4WT|qkO<F>5Fs97>#
zmHYCa(<4LdH4!juZ2Uo)z>xV{z~9wc__1kA69$cP^f*7`7~OmOEtaOfTN*9gKH_(1
z*pJ0T42eJS2aNmkBO`>A&$arX39Ny|U=QV0rTKXZtc?*9bD&u^2f@0t6Mw(kB7#4|
zj|pm7(>V3CrKnq`yJ{_*%rsIFc&iEYkyys0lcT+&L%1h{)-}p%Ydn&{XZjpPhHEz7
zW=rKu^v~YaY~G#vzaPjM#}8mycBV_dv~7C2|A8A8R||pETqElp^Pc7TsY1iV5AV>J
z9+n{i`g;+81B(Qq*`1eo00kj`(@1q7=n+;a`afCRjkI+)^8Cac*%K`PbvXht7jKia
zQk31>fD&iOc5h%a!+a)>md|kiceL3TA{aT&4FKRk3<yB^f9g#BlbQSrHg#E;{*P?)
ziu*sGNkeYAu0Mr~C2_-4sy2(xGfSrQ?Rw*RN$L2Gr>E6wvCxEpU_2KH^5*$r>n=K%
z7yuFRx;?IEi;QJ_TE8A$8ahCr|JNCzLsQA|Jk@y2!4)?70RuJ{!R+Hfi&RYtvc2`^
z+gx)t;)4l#qN;FKx6gNim-Y$o&|?Ibrs`x@5#j@t^f;@Ue}b(6M(XW>8G{>0k`Bou
zTcN$siaJtikwRDzmJn>69T{9`Ate6piDd(nt$2#6k+dP6A~m7}ia18%n+XmovN!|7
ztg3KE&^i~%s(7<e6DTsjA&v=At};GesGrUj5V4zxkjUlnZf@_}=_P7I)X616m@s7Z
zgi%XP0#-#TQB~eXLj}~w)7ja_hev`SIGHr5ySwwyC02NkRLU|1c3q4t?jHEqmu<R|
za#s90wR?(i>(M1wH_YzI?U?RB0ofxhN^9afgOn<L6i_rTX`~h+gB;nLn)Dh#&4U>X
zw(MCN)#K%xwpNUI6RaXTnnTtRTCjT1#octPZm;|E?re_-^*vd*0bh8+RfJzsO{zV5
zq9$BBoGZ|^H)Ivn3bCCcP&64Bp9EyIA;}c1`p-az6BDg%Bt<Wj>XX@nUI2)|FEGOZ
zzB4K8>NMRyM(yuuBYXPrx>q~YWNT8;T)YvemmgH&67TQQ4ykFGB|x~?KcC-wmK&n&
zfxxW)L}fvQB+=#O(fjIe2cB>T7=s=h8*C$+^trx^8w`|IF<z^1dTrP#&P+l?*C7^Q
zJY(E8sT?R14hZx{M!?1CAB6z=Y7=sb_u;g;XD@Mq2_{@THm%yfrti{H?FOZJl;&Px
zhX@4|O7v&8L59$0k!=ARe28m6m6ZeN4ZzJgzt8L!!dxQpat<(9ho)~dvTJWWPJMAF
zbE$Au(FWsGH8qBE5*opet#gHT$b}_wt@IjbpjsuyYDgu<SOGgV2hi7$#A6sZmDz5H
z?}?DOiM59aN^Zkd7;cj*mFQ)JcHF($guQ!ta)qZ|1eXLAU58*&1%3UBMTY9MIlsw$
zWd$_#r(`FyYnx0|wFV5jHI1!vM~$^VE(e+^r|Kzxe>r!CLKaYUv)^p<nChwy5y@ak
zNWo+OX|w`D+EPq`JN^LpI!po1R(Kh!la8h!^MU?dib@6s;c1W5*a7+tT}Ch-kTR`D
zgML9FAM?;oAkUvPlFx>Hd2m*)qFhKK`s47gN+b|7Ln=!6Kp3B<NRVGT6@WVN`ES92
zb3*o;;%8DAX=oE!j&WsVT#b(gpy4X%5B&RiX$Y4ke4eLhp(38C;rPXw-ox9~*V)&X
zfzu22r&oh3h_sM6`?jMDIJnU*2~4FM$JQtOgijBo42|rUpb8850={D0U~nG+q1=i}
z_V^LR&!9P^2JeQHKYSQMnpEGtuYy0!bbO6EB!{0)XxGPT=KUS11JBmy&F@U;+qm3b
zeafFCd&sQ6`5T9;wm)FWC9(Uc5`a^vRm@W6@kWZLOCBHvvWczr`a42`LNFpQrNEN`
z7`<$xpJuYi7VK+Quo^&6;~X!qRS}AHh;<45IMfGh9a4$P3evIIsG5SR5j<CHZ2ms<
zoNziQX_<k-vZ09-J>@fuSC2T&rGwvWUH+-u7kiIUyq#}cr?WUbqF3x$v+6Jz(6ZIt
z%3`}<Z#oB@feaY(Fxo>9(L_n|*~kbNQ*aTtf!#!ucf@E8%A=>VckKpG*qjEmu%7mB
zk&`-FFA65`#<e(}#e0D3m9e&afNPWVFX=U=M(J32#Z@-rI_$?MM%VPorJ|pv_U`s}
zC^#ahg_(ulj;8KGd`;+887Hn~893Po|By}$ZKA?|_fdBfTpyQvBPSH?FI0l5rV`yA
z3ufty4&s(ioC}=m(bE`yG`}o5t{l#Ik!J>|%DV>)lHkC3KSfy?a1b9oABjU?J1oez
zv%v14R(1m(FlBRwV&Qb7Wdk<x$E%C32HThGJ(DS3zQGYs$gfbC`w|b00dTrw3yq`U
ze$-ULoendB1)QB^(*7wqyS%t1dbHfNFLJx}y70xZ?6o1NSEI#aD<7*}DilmNXG|UT
z3L~@=CMQzn&g4-kNGd?CfzP@;km*apeL#}M-ml|_2Lz@gcy&Kn%5YaV7|P3_1!pZ<
z?TDf<#XTHSeaqxtPu|9!U$i7&2p&VW51%P5e@J_xA$t6ppf+fOb?_+>_H=tXjKKU>
zeArMn>##}un>=%fC=KI&7JM68$DDyJX&nt6Qb!UaN=KbYc3J%x8p%tqS$1?_Q<9wS
zY<$(iz2<u)5+tELmT19Ac6Pp62#7WwMffZJ+qveD&CBGnb--5D0-I7HX|Y>7&+b9%
zSB6uxDfaFuc2|8F=+@&lg%&m{?v3*&3sXb905M)#>@Uo&H)iDg5`Jww3PIgWmOM|a
z<lZ)ljL{F^7{Pmvvxu8xcbu(!fFjM&4Z3L?7`4zG^opH@#_Z6hOySzu%l*LTvPJ3+
zgnnTV@U-A!e6%`m!@*et{mq2@8HX!uOvM$I>Z>dU#Hf?Z8&ii4#|xMDH$U#PG(;zK
zH*f8x&(0c7?sfi7ddzk2Th$le%+DRp%kiGq8Cr)gZD}^L0GfTWV;R}@3e=VwRGGu~
zqKqc%BHxQ^1SQXsO)9c{VQWbi=wj=c?T`g(GMx>SBo!N|iA@99SDnH>uJ0n|Y$rGP
z!MG3Oqh+Jz_u|sbZ-aFMS!crPbMOfq7q9|lt+93RmGwi~voNV~)KrIlooXo02{dI1
zER_Q?Vj4<&V@Mmmzi7H+u!jdzJ!sk2#He+FO=?+0=`!4Evx7X6Oail6k&5>hdzG5K
z9d8%=m$Sf<H)un1e@V@Fy8I!jZu6~M*jMkUL~N$SfR_-cyg;bR(yEKG4<u}?p%<N+
zU^7PDOsfr5IWlUe5!wu)h})I!Fi0uduFe8SKlg0T0$XB)T|PDzheD+%VAHG}N3?ov
zHmqiRyHdsSotcWNU*md4;$u$9+-|^Tf>#39kmaRd<n6eaAke<5-J~SDVceo%yzfoY
zW}bK_?Vy!fWyf*FMv;}A=K~bw|Gsi!o^`|I&(2s5Zl1tdc%H$BZ8C(_v}{JU#kg!b
zx{79AqgPgP^W^K{elD4SKPCxf`4DVct0LHchF@8&eUMlxY@^gWj|*<6&gyjaAerJG
zKGF`TJEYY%6pdA~Re~kbN!Ku>ae!f;$-aM8QlY6OVNARMf<@xdu~y8ysLf?uG&e`7
zRlYInN9{8#nBz1A77or%dcg$O@#)Ua-LTE{edsHzC8qZ68fTma5BMm)B~c@_buFoJ
zhV1dw0Gps$|7(kk9En~UwrA;0!e4<h#8eejVb&D}z$t@wQb5Q%*OdmqIS*xJ*7LG_
zW_GK7cD9>Nmuy{OKfZl;8}9w=(A)XmqO~=;rp&X~Ky4s2Rm&lWD^jSJk*82CB}Imp
z5v!mSHTSW*8Gf4F&>K@80{wtv=8b>aIHqH{BsHMig*AT!B@mP{r5DrVfRa`cMBkew
zl9El?yt`xLTr2+$t?EUkgOQ{3c|;qK0D?YCqtM04MP}<Vu-B2A{Be6|6l<W9wjGbs
z2_42?fu(fG!ZL-&S)5rx=7pvam<y*1meD3gnvH8?=TB6^QZkTIr2<;Rf6@ALfK`|5
z65Kd+Z|2c=$Zp6LyN~NOG$8ZU66#cu<0rF>I8(lLL+!GRE4JAdyn$r+tTCVNQPMCP
zgTh?_2n)_e?KcT%t$+j0l&@!fJEG^)=zhI{*4n1GNu~1G7XH_1m{P;40j9h#81|#h
z!eyIm7^w&iuhK-T6cBq-J7bo(G+3zveEAl7L1~l$j99Ev(5P(HzSb%!&kwyx4)PTo
zOFKMl%3dEs)5oyL+n7mHKgMOMs>Zb{s@M_?p(rRIx)da4!jf>sPf{7sJg`ZdTO-@5
zT(sBWVxJN;@PValbsgxq*&KU)0jyuyxd;beYtCW5Lhu@0uM~O9qHoDExC1FK?4O%7
z!o<AQGpm4NFzNvP*BG7l!j649!wGi4o7N7Xv1c-++V!!g?sZH}HnUDz@6op)4Zj}D
zuWczob{KO678VUMW8YxvxDpNoLkX4scQoFpobm8?sU;4BkS2JtB24v)Xc|l<eKlc5
z1JAgVxomZUg6=E;a(#6im0&(}N>J?&F>?4rT7%R8LDz5)W>%~IM$kL6j6QN6jG86L
zvwMS+_1AHqn*H>mNR?^PQ+<5AWTBD}?z%xm!*S#y7CS?5l{b{Cxbx0u(kdeGWKt?j
zRW$({GmxTL$lh3f?fK(shEFQV+V-$aY{(k-af7WAywtYku%CKh#I%8A^Gg|^Fo2yT
zF*bt>^K)ZoJQoZk`F;K#VuaUY65kyOY+B<UklfN{O@0niAkc7!K~h?2{GeEdJyT#g
z)EJ{cW%T|UjP^;>(HSe+8UyZEhUNW@xlS`>$mix+xMpo<6#rTgX@r%w^^_LOi8*1}
zrN7U=6k2FYeknZJ)<C!NAYB^YA5ph>FOB*E@i=e9{DY7*+oUcEUCiH21Y6{pQ8oX<
zX-0=r1c_#t<sc>=RQ<YKOhT?B-3T<1*k(dZM`@hG9oL|xEbaqe5R9sQ$!r{Zo@=$Q
z(zqr?lJ#*tT;*bEfE6>*6rBV$TCa1gv&ME|^$<+~EBhW=SmoMI>hz?&+wo?N#WGY9
zyByyNclzaZL*{-dYq^Tu3AExSwJA=Wc;#>XS$3Hx`muUdoKndWN<X%6p@I!~#SL<5
zhi+0Hi~o!n|8#E{h8_;H{N9mXj%m}uaV$Uo$QLBxJXXNiuiHJf`~NU@jxnM{-I{LO
zwr$%sPTM|h+qP|YpSEq=wryLt?>9G-%>0>2C2QASE0xr*%HDg``@B(J8S@$1#cwoC
zi?<*xD!k_{>VcDeA;URT;=1fb)U=(98f1znrd19HUuOcbC}@`Ljn5NnvJdKuu`wGw
z9#e%oJb3U7)UeA2JhG`J@$ds0-*k8d7AxV0n?(v6!)dtVxTAaF;7}O;Kdba7>;e#a
z5<(hNwVj$q>SEL6q2%8f7Y{?xc`V@F4X@+-@(%lV`b2xAIL<zWi#$6I+TWTFNm0e5
zdEn4H{@_|_Naw3YD=YaXIRA+3yGIi%Bc$`UKxOdWmatf~mSb#!?45_?L=TlgWRE_B
z-dZ;0Avj7`u$bddRCLE#2*Z_2Ajg2t7B<_9AR%9w_{LTcdLiir-VSOTI5DL!u3cdF
zDlx!Wg|bA`)@t_hrBEOtz(2V<>I2V`caPo0UJ#rLWd;mKzj8f(0K5ve3GO-F!?8Zd
zeD>G*nltly`ZYoW`FRm1!}w~4;5IVvUo^?Bw35O=lSJYd!Ip6z-4ZKGXU2+GKxhrB
zLsT*TRXB^4LtAJR5aeBpglsQHn$E%y_z`u{B}OPRi{qv)@rhfaDf#Q}M$fU=Bk2ZJ
zl8i<;Zk9$++%3V~5y@Wx(K{S%YNJc)++F>XfC=4+1BX6PMMMv;g{rV0^XP5HE#>{(
z%@rr&=J;k_dls&z_iZrNVinoMjkYQ|`x+i=zQQTzcdEbgcBt^(GT!jf*-Q(ul&TCY
z)0wwJ)oql${dIBEqO~X;Le?S_x#fD1YZk>dPR!oa-V?vsKJR;Q*dWKlj$wHZoOhKP
z-{Rb>P3);|b-hqGkiOhxl*7^_$8sI*+q&Fv;rc!|REIxu9TUE3T;by}f4bG>Y=OT4
z!~b3_IJlhT$f^aeLMA@A-CvQa>5_(e4@v9}RrXLKn<9*Q{?1Qt<fa$kVm9Yr#33=@
zO<m?mVgk9<Z)>m`+4w~rWhg--Pu(OaS^k|{LuVo!mq1y%2dRptjORX@9EaUX)q6g+
zc>ddCBL}ni2cyNlozPN2I%!kHw8crVX~0zuX)`PPqvB+esmi@KOC#m5#d5mx*9dx;
zv%yz?pch-V>1S_w?^9e$T#IZ{Bx{>zovoR;jyu78W3_tFrf%N&xDi{GNvPc;&8F^$
zHoRfO`mseSYiq5&1=lhB(_bgH1>_x{%^vO5l6-o+KRUd@`Bqw*HrWy^UGqGgL@^$R
zs*kCuQEcviVvdv>4YJadQE80Z1YDq9&qMt+&cgKKmgat@$wuO@zd(-9n?+fN_5Ti;
zM;poQAL5f+$!Hb1!{LAMkkFLgdn~~&d29Autg(O6Fl(<cdYfTZ;inx{8iJb^RcS$+
z$(84zS|5)Fo`VMcov1IG*om8qRbOVpuHaYs%%H5ez3M1$7Q=urU@<uxx)5t!-b>TT
zH>9FrFD~cs937YZt44SfLO<0bcQ%QkL|X>)%vw~Hw4|$WDJBS*;qps*n(uXz?UyV5
zFsEB-$?U~vsAG=Z^t?;p2$7@oLVhr{Am{oDs-{&Ny(e9!?oB0eAxG$ShP>e4u6j##
zLCPrHGa&c;Aoe6k`?R1{MCc)g>Y1~Gnj?JjQRfA`5Z_)@{#!h1+z*>ea1>CpG2P2c
zK&Sh-YS<x)Up{seavLBE)aM|(oG4!nHEQTzo3c|bc?2r+i#P1?e&*i&i(~i4QEuG+
zHI(`<<})H|(epV>372InGklsaJ^D$94oaBvpEcnf8z`XgKGx8u4$eP_o5VX7P?Uwe
z@_nST;LNg$Zd|%~yLJDv{0=~whLp_}(H3c$$lh8aB=`TuM--DIl#BXbk3zAEGQ>H-
z)PY({g7xL4WN8tP0WnTC9RevO38qp2izZd;+mM)4?o$>xfzA+98WFbjqL|E*OZCu7
z{rD6-$|}CQq7~al%=h$AK)y&c(H;~a^7Uj2DN5(C*2k6jcdC>+@OTl1$8+X&$BmXQ
z6_oaAJ&Hzh@%!WnN8drM3uA2BLI68LtnEVR0vT*)p@X|aV&&DI+2k>T@HS!Bu|pUp
z;X1Bn3taeF6~-G02f#O}kuzFavlU#G%{CHTWvM}6+`9&Bl)WZ#_Vm4e#Oiei3<1}}
zO@No)PgStbY<F_>{>|Ixz+epuF1?ZBSQT4c;jkHe&pxfWzih@5FtD~3IPj7N)}gh!
z7TQ|!qqTRAFF#l`vr!_QtpK^A>iefE^1`l&`neKGYeH7a+;fppO({c1ds%%Ei-puQ
za6w=oH9=6Ph<ELRm~n5%ExLM4y;^1I!@K7aw>r;i0!fqt19f0ydC3j_r(z!K<J$kr
zrxXXs|K@lh<<$_ijl{ADXd^tMz*cIgrsFUxip2Z~3gBhCV~%ZTNm5I;{6x-|e4keK
zimY0jP#?)QaT(;&^;}Q<LaY5B^3|fkbe^YI0TYIm(d?GZmrZKIrJIh>VD7btPJik1
z?h0vvZ^Z=?Q_6bLoJ(+>@6HF(U+p`%7t&hbb#F)j2o)d0cLIRBDo$y^kt~fT-gd=u
zu#iYVghz1dXnSgEy+Z8xGhH<&IhddP$GSCkZf|xD%|a8n<s09?fyVLaH2WJ^IQN#v
zJ{!AH0%ym-LQbFcBQSBDoz_0WiD*}!-$ecU1K5c0)~>+S_XAj{Pav^JD>lwtjd!3h
z9hwH=1A$v%AdK3c3KKrk-z5XpxmdryDE6F>+g}V@VOc0YogaiKZXa9ljV0S1_*4G5
z?z1m;YW(|FaO+`=`_+Z~mi$s9uO*19Ru9iKZLgmXT!S+yOfteEsfL%urOhlApi-mR
zM*BFS@<uS$@N7y|u^9}LTQk^`IIct+Bb8eCMIbMRY{`=@DkhE{v?&1vOdPhpg9sSt
z`k_+>!0JGmX6D*UD^+%ruPB|<x0xxucE=O7B(W<jbU%R8(V0vY+|pDLC7`_g>p0u|
z!Pr&QN^O8=ne*HVE%H-_>BxPXfHvln-H1@+`<4+qwt}gzrcp^}nfVX=*}=Z?#*jXY
z(b6uUWsbV&jwX4!LqOe)l+{PiGLogkx@ONc99P)a3NtS;@{_|JS34*)FThpD8=m#g
zVV8~Mma%Y|(0we!Zu5gd6ERr|h39Sjdp=o!dj?c23L4l134Y>ZNs*O6C9xN{p-Umj
ztpAcG`%7Iuse~5&^LD&Yl>Rcm?D4#dV5I@TaM3SrghF9ymbTj_4fSjM>K;k3MAo|%
z4WZFhY;k1w9d^wAq;7~Mc3!-beF1J*`={CivvB}-FF07Glalu4wqdO<_0d@r0zH#r
zXo2o^SP>5m(~WKW&x?%bmhWp4&^7Ilw3=6K_^wwzyjqc$)&|cLQTDOEk@Ww5B&N*O
zpx`f}hJ+Lq$?70*DD3HVLpwCIK_B24yKyq<9_lk{EVExQQ+cQ-=g|r`Kkg-azkQ!`
zn%Ql!$7Y^u+}P;Qrbye6cSPyyBe!*+aTFSdnnMTjM=?<(S#5AOnzC71UQTQ|gr$-O
zM_lU1T+nOr2;wQbVL~6K^B;-$vt%ZNp6-=9IVwB&s;7T|o$(vJjP^;=5H*o!4bG&y
z)4ZNAquK#)QeYP&$C7sz1n96&(Hly7N<@3C4E{hPsnHZR41zj<k0t~Uw+Gxe1O{j!
zMVLM|)|dha9Z#8viU#l7z0D^iUUU;t``FgcdyZP{GkViYVgHrNG_RTb=^h-(92~ik
z_3E@l$Q9Z@z!&lIlr*BhYoa({+eh|V%j-#e9gHBnj2sAWl*#X==>oHp(yKCelxo{x
z_S0rWxPX%B+*mOVCLcziP^NL{12!q9d};J^<4NTAwIECKqIfc`^YXH@WB+=2De?WW
zIhg9imwt^P{YyuQ(N3Q_N|rkM;V8MYixjR+#2+U8Jb%kaXC8NZrCpy(@=`yBmq5Zd
zC(RfC@oIb?ZIzTxusoWK+18ZG8Xd{ETZK2fURR#+>|W3$?&PUQy<>ZnwgqHz54Pi2
z`DI6*YIn8P^&*1yZQJ0idzrjy@+lWztST}wxM+;OR*t$>KZdsV0ijj{sU{nsc$=c1
zB+4+}q@T1z!>_<FecgL!T+dW4nH;mjZqx1DX7liQo^^3JrgGCKLte($(b?wlz9uWB
z4H<b5l13A<(Uey1|KZl^9aQERUw=DqN}W5ON}fAELiON@(NX|yq*anza%ZPx=aIfo
z+O>VlXFJoG6nRJ}X`{^UKTc6$J#C=%#MAQ%XL;ow{C5n-JW9{^;RKCA4N?&`tr76M
zb&|A%X$$DzCiHRAzaSk|4Fbmy3FJV0wm{U<g`hZw!vk$gz{JXW&-KI$TfIQY6i!<R
zwYEb}18~xsVxHAphJ_l$C;mv5Qr6MP5}rVABeZWCPT^cN4ffaxJ&yhZ6{KlHtS4?L
zX8n&p3>FmXO^$j3-PQx$eiLw(F%wy<F}ulmZ??bQ$YOe;x8>xnzo8u8$gyhk?*S}(
zE*dup3YqUs>n6%hiTb!;(^BoGA0c-6#Q62egRyWMAk4_QI+l}wClKHR%yv<1+Kr+r
z2BI_-!i)a>&MX3PXW|?z?(wWz_416tE($$2l_vq^Y`Prt5xlz^+x?mQdU%cX;XcY?
zLGe>hW6=rjozL<{Vzpk{5A27p3&4G?k|Nxk!W;_As1{yH+oc9|f}dy7np-bx-Wx94
zw*527&`e2MuBV#eu?ofV5+$e-%kt71P#KCfftm@>WJRK$b<#}t9@6q^Pn25C&Sp`m
z^+OOIVP*uH^q&ZTpXkcKt*RW!Ydfj{()bFZ+}j=+sd#9<WLokh_=lr0oNCzWNr;hT
zc6W`N6xmGg2N#W|F16+fGuzAhZ92~%JNJ0NmXHZcO197m%d(bf=i5Nr?z)5^dnpff
z=+mTcJ2#Mes%S5V2JXlc{;f`$`*yTpW$UHS$E%|SjmCl5+TEX2zBI)v#N4(Y*^OfH
z4pS3kuBoS~r8l@*Afd~52Hb2vM7mu5@i4E)P?9vdY2vQek9Uug>N=@1teJraac`Zs
zm)sJ(oUc17lF3hsAIhKb`O6_AD>tB}Tz;wvnJcqGv{cZFUDxS}dL>jC2|r`w6?QlE
zV`mV_XBO*wCFD;W55h<jWFNe9GD!GUklD}AUyYdT;8Fo3Eku(?a(5!#hbp!EL%ofP
zf-?~G<7fPQ6`92vh=pO|LdzV#ZxK3%gb6>>7Z7!;n{3>p?CXP3<@>r$m()|vtwnWa
z`GWcB*LgS5rPPvIaZ|>M^R=uOcmp^8>vIQv&)fG$jl5j;?zT>jSIhLcMpW(iWLYlj
zIEApOB16TVF=TI)UVxIyasm*xI)4LyI_v>Gejh-740`jB28Bm&NXc0)2twFf#a5<t
zTyjV1wUx{S;B1R)fkXQc54lz&R*W;$w;@NHhKVoDdbLH0RpwN=j76MtKFsUdlSz=O
zX-SQ|ZN2V~`>2s#uFfZytjoHoQTd{<_iQOgk%f6nIN19ddj&01aa_^AEI1VFR`f_R
zfgS#X#8L8M&JzJ|v5p{d?$X$i4c!hkd)KdHi}z*0@p}Jn!BK+{Sfbkz4BbmzJwFxK
zy2R`y(u=@)eJLR{^sS_<EVxn?N<k6&hYzOi{=brk{vR>2x71Gu|KOxQrWHcpMX`_W
za>{wqT@+YldDJ*3pW%&)g{029yuL?XF)FTd_yhTKhn&2;HAgbt0tl0lWh(P=YB&2H
z$!EffYb9-*@6PQu1{kliN(SCIb{kI2doOrGw~#eEFM4EnU9Gk63R*yKGV+wc7D42Q
zu3W#5<dbg15bzb*8=2)(JUf9#0IZ6({-AzWYw|0r4TX-n2xI*P`FJyKg;>aOVH#Jo
zPaYTTCWB3`&@Q1$8fYy2Q#@5X*iw|Xtddt65nqU=spigV8~-A&cxENw?#U@S(Oy!D
z@k|XwP<jpDWE#KFv5Bgl!atOyt2Pf?vgN6D1v49Uv6gL!=E9rExnm&rK&?R?nd*cC
zn0W0ol~}e#JGmiozbh}@eUYMJUHSd5pW`^8(-IaY3!2OZ0-c;OTIHPNS^nNc=jMIs
z%%r-FXlP#eu7pWHapq5wo4p2_N%CB70NhqjlFnP8FJA}8&sm<QX$O7MWe*bPCj@Ja
zZ<*`|4%8HMr|N^{Zmea2{9mmrju}cM5crASN;2&~gmR<dV{j8B=#EkRm^aV{=??_u
zLOIY?)lenc4&6TK8<+mGbhAZvRDR<XyHtw2#e{NH&J^y@dfs<m@Z>+=M?GI}Jv|?L
z)h|Rh-Jf6=SJ$I4nVlw5IhX%j=d!x97nII4l5?a$ojs_M!v<KN6-lP_T(X$n&&&kI
zk?76$+lt0_XGopFeCd!-?-D3<#CXRK4p&g#R@|JS6aE-}9cJ9PAGxm8_S&4biZ#?Q
zaY-d?0v#I38ma`GDE~QfI8LBSXHKQ5=Om}kQV<+Su2&|XXcqEm7ho{KI>RDcw1+U4
zEr?X%rg`x7<b>YjS!+3>l!G11t2MiaIge8DQa7!ngR+ZJ{&QguLZVT0VoP^J@-~U(
z8t>&DmH)TQDie8*0FK-er%xj1?d)yrDE+}cBDZMJAj>@R`UIU>)}dsU*SsnVJ_nyZ
zogh?^ifnZ9xy3jjA)5OMREbt3ZfNjGTt99eJHY@Au|cAMnO~AXc4J{cN>!Q2d|MAM
z#Y}3~WcDkwqT(@Ie(-x?i?cPL><4Ux#vLT1yA5XSm|P;2g@IpIeU0ghs^Vi|!Vgtg
zzNTK2f#o1^Ql9ZGy<`Gu7pQ8fKdVcP2YT?2#lY*q*ad!qILJSRbNBM$xVQXuAGsR$
z#xcJUYYh9@g_gu8XYN{gzRX~hzNbT%zjTE={Ywv&vA#If-xtc*_0)vb%cn|XgT+c?
zlf_E$9NGrVo|)KA&kv5<yDPcuDEw6#-X!p9+`zo?u<vkZ+`YCZnqCFrWc;bXVr56M
zuSBkwM?)niS5?ot_46UxFY^w3-D(p-#&0ubn(LRnI<nQrD%0m51QvlMuo=zj7I&s8
zxJ5&$(}y+JSUoMBcC-3SC5)eEwMS2r2CYc}b53rmnAlCgk2Swt_$**Jg)Xk7CHqXu
zhL7(H+aJr{#p%yO=+Eo%#71R$VRV+ZNLkDdxm43?NvZr<aSx@y(?jM(CNDUUbSX4E
z;QLrZLEfmsH01nQ_xefkg14i}ax%^{=br>Yw;c({vm@Skq(P;aB%Cc`We2BNb;+}n
zX8p0bk%$zp``Zzm_r51{QQ_-@Ecp`DvOX{M_-5j8cQXoc;*p12#BOX<s(!0ZbKYDw
zFSf)k&z7jk-vhFT5av&%WUZ~I!J!w&mGHfry*hl{>aEs5bLhRPqoKFP*xUH7ca18d
z1Cp8B;q07ZQ2F!{5m(8KO40}AFLu`-@<0lH>5WWiT^sYIdz!mzTE>8Lv(x1~3k`V=
zw}Z{oWm>9OQ{RIdnuywUiS$6Qr<jSHi0}}fiBloD+D+kl$o2y%j-_qj93lG5PYvtj
zq|{3@T~ll*%IL|6HL=-uXh=38R8ri34F86^=NozkD<W|T%l^cEZ;|Oa&E26pj*Puy
z{I&|LiN*C{vUN)u-p+*AZC>6{L{2MSJ3v9!P9jfc(yOETH1(Nt^3xgH^ZYv%f3W0v
z1Ign-2Dc1v@f5R)x0EK<4&F~&Jk?@c$(I6h<+xg}XkLeljb9un-Gg(Qq&3>$X_-2B
z1s=6p6LLjlY~*Ksl^Ne$PXg(lqwaK&;6BY=RX<7=8sx820_Kvs8K2o7WYp&MeN4Vw
zwqNYIf3SKU=#;&}Zrtg=6lvedGmXd+mvB-Ip~!!!AX%IB1hO_n|B{D=b~wPjrIE=0
zN*1pSCfx2&GzH6T1Xhk2OpTyJ2p?Xd4sjkSeY4$E_Exn=PTZv?eP({sBiu+&Ryf8`
zP}WStS@f7j)#f8#Dd@`b^*wzg?%Hfha_v96zf4ooHr~FUReP>TA4KDSIN4VDQ;X5S
z|792`Rk|OncSaY3>tS5N3czFe41AG^^?+H`l&tBjx7yHj2J&f_ZrTm$i!JdqZJHZ4
zvP6FE1z*C*TuUm&mn|=LX8<UYdQt4?gJs&K!Eq`o+-Xi3=f3d>+6>8g$=d6>?0jl&
z;jjhH4w+*eRxQNV8AP*JP+bEgd{M<R_Xz6z?G5=1G_$Hh_JNKeI3OFx1xmaa*=^d3
zc5z|oCs}NGU;qltlm*+*O9sFAvDmmJg+27Sb~i-V@rD+&fH4kzV(7;sz@b;w3K1+f
z9%NXq^=3E-&}e!Nq97Myz)mH{g88gg;P7g9nKeEOL6yaKi=8DYL5-j>m6rl-yMB%C
znzmF`F-+Emxv>#F=DPw<t3Z&Y4LdM04WZapV&n<;!;h%qjBct2sZ!H%00bY+LDO5U
zHXri_<_btTPg+!f&g0V52ILB7s4Z)Zj0~?fGv5l!Ku&QS;HZtkoq0hIXoMlSALh?x
zTyPBbEsU$H8xq%%<NGnT5<=lcGf_2DIQz}f3SX|SM(Q$Lj!9g%sfEGgr5nkO4zChs
zdms)j0EEQ=uJDPe^XM~akM%iME5T}F1Gd#-s7r$}hV|*oXMn=?12LWwqd+h8wqdp&
zsm`?zQxrgea7q)26T(%VnZO6FVrWt32NmAE_v#akF6eaIZS#SpDF`#2#SF+B(z3<)
zJR-VJzMNsi_2n2U1Y(7R7-I>5nCshRwSY<TK0>(H*2XCwbow9p@4@Ue!y&4#YgpkH
zJt7Sv#;j1k!a^iE0nD$m7XeG`(m4Uoqqv^YB$Ahv;%Fn4fd)M=z}5LX*7ymE#;QYu
zfhg5VZ1~BvvZQFG0~o+oy2q*gd0Gu{F2uDa$ue~+kTH=|h^nhI9F$_=hm1Ofo%Xbw
zof|br>wl_FrPW04eVrt1ikgEYN7?6T;C+UY9l;A(Yjy#Yh=!gw+6KeskRndU_{Uz9
ze^|P^lIDtG5Z*-wWsnEb)W^yOHOMn+UnB@<HDhel)v!;j=}4@Nc(Ojk2&umRfxto0
zAL10Z4UX>-l;VGX&Ldn2$R$AIpv}l9hTmmtCuwXh1$>`yu&hpOXLUoW&HH35co|@5
zKI#ZONJ(o>bRESErS-BY0vr^I0isA7U@k#+(gZ>(+z4Cx$3S3w54d3xDnWf5g4i%{
z1P38G<jk;&FWfYw5iJde6ajDF7i7_GC9P!{hc5gVh(@7Pa=Q&nK*R072@DOdwlbd&
z2e86B9lHUMI`RaDxB}lr=6;<XbaajFFcmNx4yPpo7Xcr{U5!_34IYBrUo-%4YGzl8
zVTj%#kO3bCm6CP{QyXFjcB28p=1@sEGeA()h-SZGf<ol&P6vqFh^CK4iJ%ev1eeFu
zO6n0)TWKh89z~q?N0$hfL!j!oo3Z)AKqI|Z#Q{l%j8x(ylY+PueDDo`1Y&YKjU7CJ
z$)5&h&vWM`2$%sHB+YHK&5vz239L%cnE`{VzLg{{1M8O04ueZ`-W<2owpUI#ClFz!
z*I432pMm<SR@8J@#0r9wrYMpi8T$c@wX|=2@J&=7iQ&SI2O73OgiGITG1)m9RY`x6
zE1KiR6SxP_TsKhUP|C0-B=8JDWkB~J!TlIia9V)UTvT%f#sOei1coUstNGuY<{;lQ
z-kp_~-vr@uB{;E~SUs*f(~5{N7YKvpk-lWA8^K9lopX)9WC$E3I141iW3_*i6;nJL
zfPe@~m?OR58I>>_H3Bw9VYGXwG1_Cwp^FRiZBFzUBVm@~DPO&qC4)oyU%WOEe?!FD
z-7rA}@o|nKR()0IM9Z}@n7^f%G5H<>{0$Nhn|_E$AZrn5%0`E<S&@A8qd?67z}P6N
zBA<b6vl}^yR){ck+q*~%;sE~y*c`wuU?{NetPBW^LK!%LMd(C@sf3KuP)3sXaC*al
z>}}kMctSeCC4gtWjkf0l62f_77z5sld-nx65*(MPwV@As_W;l=>`ozg&bjAFdD9AI
z5D#&C;e;^n0F};xEN@-y^k)Hb30*MK%D51+EfFj`#eJ~n>-`YSMjZhQGM>U%8B+K5
zIdT~DoC1kFLr6_ySWh?M37WYBsey;l(gff*foZf`Sqzmp2q+LD&pzzL`9<9AM0P0p
zMf@)s-!fc?ZRuRTkA{YvJp`|ZE*?t;0-f}jxk~IkzL8;Kj7rp)NO;M@*daAPQ+IpY
z;>d{B_8?E3jT}tt6<CTq#=M9gVo`|73S|#yX6jcWlYz#>6UK`^>WVg4T#Vro$4OIj
zH!<YL{e!Svx~ye<fY(HgJ>!yvb)nYm2KO|WXpUu!{wAgk62*v}`@!Hb{cDCGhE8$f
zecREEdlXZb=+`e<w#GKi7Z#Bn$NwQ!!p;4I(8nT1rkl5x&?KNNNiAcKMq{rPWP)x%
zP(Wf3fE$l3{8FTU*v!Z`-OcGQd!JA2F>-xt{tSSA7)}rmL`a;t$X`Z#CMjZ=ZNI=V
zYep>Tfdk7;#2vWL9Z(rU+fPzO+lC*cav3(LfM&Vq+>_00j*b<|15PAgFKKQ(U$zlH
zmWC~H6)!0LC;~xzPf~PGt7focoXA*-0x8MD=N@BxkZx^MV2uPEWbJ@QK@#+0OoCmf
zLzO}9&dY)2{*H4pX-`xn|3TYN;U(194~RH0>P^}|xyL}Wh6H)$R{tW&{f9^N?+)Tf
z38mFrdJ+p}tZ|Ye!DvFhkeA&3pp7^grJ#(wy-2;31W$aGWcOS%BWNE=Kq@R3NM=$T
z;oqWkTSPYFsW3<4t_T%ONCCq?32a(((jjVaAqb2LrwOl7{{-kJRbk@ksm;nLfI<r6
zuX3O0CF@(WnK3U{qhKVV$`yKhk+T!^x7q%27{$;b$H$!$_C#|PluoO{Xk@_`+Of3B
zt@;HF9=bU6PpBrum54P{i@J=x<50{?J&;GQ<yjYyFzto$Qp)&+k+j73)5;u_jNqd@
z1_o^NQk;T=e&yx;XXc|YyLuKF@H@amy$cE&W&a<g|K#{7%y51L1^FpXeIY=-lXOwM
zI(>$0#+GK@k~K2+hblZZwq7n&Ndz1U&vjK_&P)a?R0lqjSPmc0U(bDPSi26qTRL-f
z?{&9~#y@expYqeyYq(6sBpp;Ct4N6bkAefW=B-sLMx)J0SY8F;Z3u$dn98gO!0ZCg
z#l;PKBjiNpq(YP}oQRC<7P&BFkHbvFJa<fUlDZF!h*6Cm`$UpSi++_#NkZ$cf1pHD
zAOHwi@Ug0jRc!Q0(3%VecEdibcZN<S%teno7|X>xv__)$jhZ=MS0#5$Wlf?NNt!zG
ztP$Fi)oqofZi}4UOuCMe8j-*coCtIw<TQq?fgSKX7)6-Y0(K`yv+%5&qH)J8AOYMr
z*yjZrFRD(G)NMV0oh6LV1x1#S9fJWN>Z%%Z1t%Dpm<ZDB^XbiX*WI_{pExD<ysV0)
z8g$zk5{fq+`_hO9<Xwd*Qk=_~h-VFm%_&@l%_Py_oKTdup(HI<o~$PCBj9y*q$bq5
zu1)0PO<Z97SeP397KMsfj{BmzFqMt0=mG%1dhdvCT5(1xRLQb|M?*4!%hlSQKL>C5
z;Eeyc^aJxI#G7Vge)n`)UPW&V7v%Ex7{)oFOES2KL==oRLT1Qrk_jx+S(&y7EHqK_
zC75U5ExNRi(be{N*SM8pPK7le_*g^=0xJ_M?tg4M!b{?7^%-ZDE0|n4XbrX%ydV<I
z64Yb>3~peUM<A(I)JHI<Z%|EP|F!P@YdVFkXqjl}-y4Z_JHjwijMgSAOb21QE1|RW
zS^xy4FL?h4Ad(8XGrp}VX<dc%1@aV~WkWg$!zqyx*h^Qf8*<)wo35!v`D*oe_?3YB
zgUY!SGf!qnozOe6%yo9$PL=FdMdAbj6{B4EY_C4pDl3)ffi0b04N?G|s<i>gAiT(5
zNy04@L0xnzeywy!)T|MxccEz|8hEuuHK{<sd?Dpoxo8u|G2o-oUzc);BHFK5S!IAF
zF2RzARW5sDTQyOz<+fHAUGTP%P?5O?#LLIERsXe_$~*%l%s%KohFu_Vcp22l?!AAd
zvjA?U(H&W64-sCqUb#FV@b9+DFfdRe{#@3i;V=`V_z^9VLW!WMJ;+F%lrpS7I4ptu
zFd?%h7FpSG?}c&WMfo!1y5$)!Le_JJ`F%>dDs*%G7&7)Ww5f@ZNC9tf5QIF_fSV2R
zUjwYd2^0}kWAOP9TgCT)2PW%GGTZgqC~L}$epIXxo2Z5+i(X8Y^-?jQQ+1Ql9|x^s
zR7^Rnu-fcqGiYc9kw7_15THKEjPo|wV=g-lhQZTlSkxyPF=-XHKSbS>qF2I++#E{M
z)uNDo7nP)megI14`dz}iq!YcJqt*+}%4-S!oBF{8fWU|3rBhDPX^{)1g$8kDu2-!H
zVuY>A#f9&~Etu5qvwk1*ilOG2=|%<lB6t9tNyf%*Tnxt4)g%mM)L!Nq+3s4JV%JD0
z(aX{Q{LxKi7=+9LX{Opx4po_KweqcMSG~q$B$dEICA0RMT_B9SW)G1awM?yPJ7)p5
zQ@~Wp{8q-m9N*0<MJb_~h`3gc{dr7+OGBtnEP;VSq#YDk1B{6?^tIF1E@d#eGyKzx
zVgQ8J=_;@-D*z(=$x5sYG{|hX(a;cK*VvEdhfl^sm&x>t=1-f7$E`7+%S&;>0@lx$
zi;N=qG>|P=qTUkhv3k=JQlpoLiMm;wuhM`*Qgu_-iJ~eX<&&Z(q8@}+BBU9B1Q}G!
zZ+Sq@#<By@3DiwSJCEV)mFF*@>SV9FU;uHX1PAi!@<=)#BeXUD9kPUD>k&&e8Gjf9
zm<anwT=)sBNCxzP&bR?1LokLp`T5_~!|cM33qdRGaa7SlbloupvPcJz8(;19kVezx
zsFPvP=$DOCDxEZ&Lkp{G`Yl4UG<S*usJ)gGoZ@*#g%YqDrE3(7nnHyJy7jXjs`j#}
z1OP}@m@h47`msBU{;hngFT+`&)cx%tfJw;><Z1<t1TkX{adUQ(b(Zn07LO+<*M}ir
z)RRF#>Lz>kMUc5#H8VwVfeh*{T~FHdsv-_2SKgXWbe7_Z@}zqtp4hX-G%OuTzyRYH
zjJ|^>vt?Q`$rR6sqM?*vMk{nyR;Iw<RJnE=qS^Cfnv<PxDw6+F!rr7;5i*keiL+|X
zBCn<&Rs-@Yt#wY|%rS)`S=GnO8Ob>8Ok_qCxWF4__o5M;hnW;dl2~3Cxy(x?K!pOe
z9H4=4^iV|%Aoxu?0c~|4;Yd+alv<(g<yiyPp`3#B+o`liC+jj$Cn*pLrrAl`Z0(3s
zcv1mStDq+!Hcf|rO&o^V^gk{N;z_~vMD5c_)uTGyRoGV-`P)4Y2MZ^sJzlh2mID>R
z^aBCKjv>&;Q8WSg;M!`Ol6c63SfDh)9noGP=lbJlKq^H}1OE*mf%stoWyJ|qQjhxD
z$%Ko7jVu#WBUiCZV#>f{;rMF-l`)v+Nh;E@A9lx)r$OTAgQP|ir`I-6%*Am~&vPE8
zVFMUC6xXd{)IyMkMlo4w1iOJrfNw1qLLw^O5vE4lA>ZQCp=j4jk%t;N15k#rm}qWG
zPFhzIQYgjE*P;3?Ki015t08h2F$|mm9~(geDJ{Wr%88ikv(N86Ikl3b;aS0-=Ne!k
z(?rmd+|!T+Q-(r^>8QXsg8h^A{R^N7e-23<f+zN4iba#%5feO;)H{zmsnjWErev%N
z*9%h2&xVMcA4g!)=L0|uJHlq>3X%hmP|$+l*VG5166y>V7;xHG&?}&_3nvf_914?)
z`^PP6J4Ui@*Ut}m5a;!Hk_g@qpXR<-4^YWp6nx`w-hYy?CepBQ+Rlsj8_Uute0?JB
z$L!?sgw>GS$b;ywuq`<b0}e@7GVrf8(lubz{2R;U`JN%37fVbl(Kax6a1%(Ls7Q<f
zN3&pJK!^ZE9NH{{^1|7OTQ2MsTL$<Y9D@^AJ37DrQhTGO^U(dDWCDdr{5X(9+<#O6
z=d&I}SWjKSs00p!>$^Ymj7tX75RUUi$We6X_?fW1D88A6n9VL+e$m0nPEMT5Xl}sU
z(7%Fi{mPbqx<w0%cfuIfX)3jc>7qH?>kw!Qz54%(;q*159-8~A)on-Zzc84EQ+(f4
zV=hW8-&0#ZVbQ{1d-{M5V9{3f{bA8CY-@YLpa-+q)%62G+0+SCP5*oNU-!*FV9-|o
zDS!S?`8U76@Si97vC&o;(Ouqi?_Q@DwgxDW!9^3sIH-m$eLo&=LJy7?Ua6ULb91}i
z-mR`p(a}q|O;2odH_vbh%m{~0uiaigOgnaPyEb>YeZKE+JH7@|uby7B)7zAM`MO)Y
zylOwJes<qp`#521S8ASLx|4zSjT7g#s;W#sJjFY9@T2ip8`g?{+&Im9o*z%wBDVq$
zhM3vA(suAgNvD0~P5*4-|F}Madf(h-t2*q#u^N2pe=H2;o*7-iE`8hZ&wkH78hsgq
z6hE9aR2>|geZ1ZE9i8$2J4wZ#JiEX&ITGVe%{}(1;N)%K$Jcv3Q0^JatdV8j;`8Ls
zoSvckx~wlbsLg3kmVULnvw;?ZJDaDa*XjzscIa-kYQk!taB!zgNkyd_pf4n8MOuQS
zKQ5H3scc>OJz3t=gl&T_DLHU*{1_7?*BR8}ZPi^TOLSTHPD>d64jV_QS{M7U{1}^f
zIj;K2Y`c|E88cxz1tVO8W*K+PpyTx>9L|e7T@UIa;YZ;oi*BP>SQ)btA+42LviGvU
z@`V~|lVi9eMiEId`LW=AlAl_ht~k5I=vv~vTCd(`Z{8}%A96l2RZHzzn0l?e=XdYS
z`6NH6DHBxwIt2l3X`gRtr>IUA=aD7yhgRti-WC7BJ<trEpfEz`Z|{<sEhD!PABuOP
zHxIXZVY(p^Z!SERXirU&Y%V;NXeV#?oZ#U~Ph@L>L^fO_<^3u&A*Kbz&3p?Q+y8g?
zkdpypOX^uIyRFnjMV_^zoK_uUJw?`e$WDqLdALLpA*Gw!i51P{{bNQ69f)?>=<Jd0
zR2R3wxcKX=3EH9Fhy<%gwj?`-uIHN6*<Ges<^?U9)$npN^VgVdM-T&?i3zx)qoK>k
zGD+rf=6k^u>vSmz`{C1*ZN^&fD?a)`^KE03YK^%8d*YqDsq!o4<6&)y)u^qZ%cHQN
zOtJf_!Rp*%oIg?4y2J{JUwXj*-HYo6rK^VBvVxv&YJGgm2T!rBYiY0BnJkiB%`w~`
z(Ru19bZNX2qHu?+A-P43IZ71c@G-Nz(d{9Fs_O9LGzHI4V|3cj*9S9~N7uW-^pUx%
zLe<*GR-sACqh$sa$V=_-T5~^S;>LLq{Mk)RCM6*Nd(3!%hHaANp*Uvfqy1?dnq2u!
zoZB#AGG^!^XPK@&o7}k=`O?i3e^DaVYl%3n4Ry-v;*<U*bEnVl)moc0Q#!8WBH;F8
zhmtLy!6G31(%2zA9@TsmI1ls-Qiqf8Sa!NpsX_<^p@sZbD)iR09v9(kGeQ||J_oLI
z&7FqhcZ%$A&C9p@FG#y&=a*FD*8cLjblumkTylZ*Ac>bjpUj~mr6K3hRC4`24Y$bW
zEJf8`wBwbwHgUFQmAd`PGW!~o=G-iaE=E`!)z_yNIwvU8N<_CV-Rfy?p0RK?#O?bn
zYboK;zKejLz4L2yEaNatMzOmee>tV_i^9iS;@z@Gak-O_9e#P%?eP%(!g5Z<KMdzh
z+nf{H&lCffh~0`^p4mvT+%Vz#*oE)nY`MwH>Jq_`1Zw)y3ze}WMN>Q4k8o9+^0I%b
z>xgKj&}|y9pv-Rv>vm~Yvz<L`yRD0CaXF^_=v>^|TIc*}dZG{QppU`+Nr4glAlKvC
zTl!YwcU0rcobF#6AE55e9IR~Enc~&*YVmX%avghd(!dwDzn*-lk!~0@<(*@FbMD_<
zIdWCWNd9~euO6+T56PUkC_jnxdWZA~+%xiJC{^rc9@DyPtU%TB_|y1Pj01Kkm1<9I
zu;ZQq>EqICN?ZDE&pWb+(lW(JB}VUP<?CY;V~Oh{I&DcP-}CQl*S5aXIrGyKc-Q5v
z1yyIFr{k&Z?FDQY)x9P?p&RYt_3mdF9eyWk^J7oXR?f%E?q_OD_@{!i>jkvq=eElC
z=g5qOKX;mLgpu*9zT^sWX`t}rqb9Z+=j;Dci_5u2g1|BY04(4E0?__H)#8SZ|KED?
zMjlJY4UUBW){Cno;cf_zd4)G7x>3bWT}@3j>|1SFt>K}Q3L>(jlo1kWt&d&SwD~&t
zUbX|qfk2LqSsiQ7RfO9-c3=~viTe_jXsKpT*Y78xxf%;sc-@9|Qn7zfdA976+<N)K
z*fP3z6dZ=a($dlQkn*b@@t<ZTqHA?iQL_=!-)D6Sf{1M^h*fa6r@`O>7TY#((qibu
zS=Z&E?qS7i>k^4W;FS9h96%EK(zh6AUrQ=F)SIA;-l`0bGEGqCcW`dmC7>GXR<paO
zpgBriGj}63qN0i#<)9U1-JyV$FnBe9OWopvLuu~#e4RhNq}EtsP`98WXc<STtyxVp
zAk9)II0$IjcN@sd$=}@Ekds36s`F7+xRxNDD338|+&S}Mz~Fg*<IfY&>*~dP?M7)Q
z>ql2gJb1-Uc6)q;R8D|)+3(iiaZhjvv!Rgycg?cWx>1R!2f*l|XC3P=M<n=Jl{?5`
z0uQi`qJEiVsw5#cZ&{5;Bsxga2{Jp42-4;C|NeU52H88YV!&PI<VSw^#09JrXZ!u~
zi<w7|j0Am)cX)N-)Y~dyF28$AO<Ew|Roi}Bg&z5CJ2?IG*_!Q-V60f(XOS%(vw-U^
zSyl^$VWLt^nW>O+KlWiQ*W%ikHhFs1bNYd@#_2scPTC_c=r$`Vtlw7EdyYzhl4qG;
z5zaSoqGji&ZNs56qmLCuf{C2UQ^m1LX%eJn4yXz&E2-rl5{eN>sRbV_zZ?SoqT|>3
zyYWVpx)}!=8hg0squ!2xqoUnbd=`;mNGZHA2ylkdV<Vl2`{V$YvD*fH9adtjrt-%i
zeo;Op)6087=@pT>uiy03s<obu=X2XqTfj9~<EIor-{71FMhc>-aFG4fXZkuOt;d%M
zu+^2?KdbCa)CK^i$ut<X-+ka6@V~HPr+>I=*B2i-omykcq$aHt8AVJeaOy>h(*0u$
zJ1^aKlu1k8;Pj2RM`@gC=mQFMz+Nqb{30aj$E#=Z2=_E8h%fWX(gU6}BxDAh1XVw8
zp*`n{aNh`I4LBgfG}BwM%T)wKNiCtHn&+wv*4`p8W$pnE5Kc%2F4zm)=SxZ5y=zU8
z@ZuzoafBdh#SPpPs9Hu%mPaW?re1B9BZ!cawi&^_D^Zk3iW!j`eCR=8KBcBC1A1QN
zXQMJ3oX5CfwB8!rW+TYF<TGGv|A|;g)HKy1qmZpQdsTPnm9CP9mjv}hkqty{0AduP
z#v<wp3QgN550!JH<IppHT(K@-sLKH6nQIO4PO4=ht(*L!uc_7!J@m<<3RynkOL#~4
z=gbi1eNF^iBVf0VDQsLOZTj;;pXL?z-yH^o^xwIK-d3kOWs$zjVRym;kuamO-p99t
zol!6T8OAN^S+?HxKgqj3%_k^dFlK(&#5Xv{0<%_;P;o<G^$xs@W5%nTF_Qs$4B$F@
zr-!Td7THr}`jVvjua48?`6nEvi5N(`sbfa1ue>_NyENkD<RgQUWQ;{?ZVoPBsowZC
zJ-bKih^;<Mceo?5<cQi)x9cV;fz!(-ec6oKkYpzSpVS~uuw0p0vY^nT%haV==E;n+
z46QV(8j8|{2EyJN|1^#QJSUYXx{SjLVC+{f)aZ2(m@);NX{9P*RDL-i%1j#t!VCmW
zL$d^~=G~yMGYekbQ%dP{IE`!7mBUQM`UJpWX+_If6xLnu$$}i*<3Y2kaX%obzy><;
z`1YM_pz28nIHx2OD_AISt7*<*KkCMQ3BtP%R<Ls;QiN_55y%n)3P^H6NMurac?@S#
zRPsX0<N0rZ{9r{t|DtLDHN{0jp!^~r(}hUr(!9WAp_SEUL+@El%=(HXu+plItmxDH
zT!2I(L)n~VL?mlcC|g<LlzEqS<5PqLO!7`T{+Osp{19xoL6X@}%H>rFqe~F_>%01A
z!)byfF`Yz6;BwLBBhWp_I1!GLY8miAF$+PzmJ>#NX*OSnW=Le@2`iq(nG(Yoe6Gbz
z-aCBz_#L&SQGZO7A9K*|tgk4+iVvqEiy&xjlR&JOI(#xiKAcN96x8|yz-(xZWjJiI
z%9>Cn)X^aU$N}rd3ARA1s!Y@0=i<kHHH-uq@PVwLxJwFSCO*{N@VZF4p*_(J9vm`)
zpyhkTEa!o$=h`S>T2ibe0Ao_AdzrM-)px)^S;VwKtqt(NlE_gQV=JuV4&F%)ME+$p
zU>q08FtRhbw;|e0o^A;Xb`a6|t_5ImNT4VeMG4k6p7?Ocq$j}bCBZp@NB}5;nigCg
zeYmv*&<l3*E!iZ6-UY|PtHj0VOEUt|LI{sTT}AM8`UVAKDtAveG)ZaDfmQQ#vgi(o
zX!PqdN})SbVB^LP)1F;`%@dYq*v=kmv1eI3JRRgf1=->5HY}$MCyqZ_GbTE?4&|ip
zkX?@iRpz0J0OHD@?K9L8-2HmJvnW8Q^D}!obX7@QPn{t@G0ngxPi$BY%!kWzP3*y!
z<>7t!*xd<Oe<65UPqG^p&}iYFwy80@15`x`xPg2_yW|xsj-BD@qr-*{Jx%#@*+4*=
zoLAtSAv_0w>FePcE{RYmUi!P2imWC+oLo4^y(RFLKGSu1nwf_!eQj%Qe79i0pnZ6R
zLsLH#azT*?Ctmt)inEf8S-1ZoDp^TfFuJEM6W5J<KUbRLpl{mg=|h?29hnP$Nh-DF
zW2DeUy}&jb<<Ilo9+{(jyUi!1{~J_MsATpJj2NEqVxe$sZ0YIj>1pb2X=eXnVvbU#
zZnQiy{>RBqM2wq4{n3!)9aX<a(iRsQ<MmR3Wa92mG|@;c41*n6qS9*#8gvP~5&{Ss
zW)K!lcs}h^9fiWYI1u10z+q@lmvboo=#$;!gZzr{CyMZ{Wg)tsB&;?(;ML*%l^(#^
zKFGG;DAxKE;vo(CNGmY}uPaFPRZM-y)ZNhBt$ovI2%Q(hTit4S?3)b)7s%lWzxT`5
z5Z6}k=#~d>J8rx9_u>;7GCvoe&v~z=+A#wn7~LBZ6E)yZ^(bOYIv#N}V)jgL<uvge
zN52r5YOScK3VU;}ix_oD9LyS+W477H-bGe{C!9}mJ;d>m<`}L)|KXn~Wu|LS=(n>%
z0AK=XI@6<=PpW6^Sy=-4xU8vBwL^<z!MxX7s9n^4>VRLCBx7d+_I*_48Vqx&6GQJM
zv6uw|5qZRHqnOCk6kX1au0K@*c9~pE&x`<THxL7eKq|yIP}svsO=K$N#42@Nm{Uy7
zObqGc^>fV+U@;7#S{*c*oiMw-H@ib1_6w(LE;Hk8DDBOjUYTNbf4jeZkK~lo@q3{P
zN`-&UzZ^{ye<6~P7_kDt4!7sa=V!FTHG$CcyusRnpx856=zCI%S%DmoU@VHbJazvt
zHkh!cgZ^s{5K^+HG7wTM3N8*RrgYdRN@OK~;IkbVfzNd*oy2e7v@)@%q;!i!+{eSv
zs>Ag2J6Y;8hY@gAv<s}vj6tCVM!qSVg%D_9=JQf~p_xg7Qr?rDB~Nh1YGI+XZ^15K
zL$J0FbtFW011NXE2B2fandnCvAY$5Z5m+ZwL-P2|Cx>w0weFKvOq<PJDgS1NC->9#
zlqsfMv&GQPzJ2B@(>0!3*Y@i`gW0D_AFIOk_KZezS^#8{yatR$Q;Vy!K)^)x&+VTg
zoM*dx;*>`VW}rIbzw<^U4ADztz$rXCXb`e}JJybNuMom7XJaRygg&xYkQfj~?kCZ%
z-5oE(p7^|7fblI(U4)y&;-({qhYhA^vNO|;;tXqM@VTC^hue&={szy^?k%sR&UP67
zjK4qtlqYOWMewqwR9q66E^|i}f}77{Q^zKD_0L0#+Oo%uo4L%n+@-2Q&`0N_gn;YT
z<tsrO?StiAu#~}7@&<RR)cGCX?nB?o-6<7WyBR9CE61y07M8XuO$C{!i@2y?FAQ|?
z4gk6!fS?&(FNdFnAaYm|fiT<Bz{MEE<&}<i!gE*jt~qqY9z;)cjCZ9~!+RaG(}wO%
zeb*;Tgqzcj?n!S+?eiX$9{e3J5gOE-8;@Ye9r~<JC5|g8@9xC4kVvO(Aa6)z$gMZW
zYzqiwso(;ztD_q4Xe9lu#^a0Z$#Cro9Pad=)|CDiheciNrqse;;5M!rNQ@h8P%^Oq
zo<LDThQE%ioGgk@l)WzWX8occ5bWWK1*1R#qfHa`nlj&&r6GBPkD6Zi7DJC7YTY5t
zn|Jvu%Ee<AX#%qB)u)&8NqpJEs`Bk32r0YfBTLub3A%LGUpC{X^7PXurm~Bpv{1T-
zVHy%~9~4~Vx0f~0#^d1>M80_`exk_A{svS-HQJAo_A0{b`s#TL|CT!VlIYUryrIxQ
z;5HFps2(HUJaT{C4H#BNgbYT6)ddM1+@cQRt~~rdmHe{_X#pYV(4uX#OPjLxfe5PN
z`l~P6WP<8==Zcdu1P*eX<@wj?VLDTxSml(0@J&;UmC+)=i%o{c%xSjMTvzh>nN5Nw
z?P{y77iRPQH6{K+N<n!yL^7_31F*cvO_^CnO7{NI+se%4apgvs!kPJObhG~y2=oe<
z6^rT0_pEV&HCwMJ2RjINCu5DN9*i8KyGB{r2v&G{*-w?LG5axoFZD2r*~@L@X1NFL
zEbFqHu_lN67%dlG&DfY_C1-6~0nHXhl-X#9BT0X>f3$)<wj$NAm!aj&sy6q5FrK91
zrO}pe%s4Y*vljVm1nZogf7ALLW>X6S$62Z#wMBbtna(%ZV4|W@M3IHXVOAP_9<VZ3
zEUjW|>P)(af1NVW_cl;=485eezUSZLh8(|n_i3!mUUByw=s2Ahya}vN`Lq{<uv__T
ze)1xU(G;2hP_IHc@{3vOQaVC<fp39$0BsrAZvi?li8h<Z*I>{^_Iq*041!Zt_osa{
zW&@a;h+|(Ox07Bbx65Lef4#8kDA}KvM>gDZTH)<3&uL3q9$0I40)Sz08g~_dp<n)1
zTsa(vjbZomriro6&laNbEcGfu2loO&Ydxw9$7<OX_#;CHj{-GJ;c4khz%Q3FOla^z
zce|=KuU#ke;FF~^-3O)dz=*A2uJns!O#~cy4=Z(&#)u=|wqoQk*5M+1wo+$Ox%y2~
zzSqBk-4G^YyFZWL!X{bnX~%YMxtFREQ~3ffPZQ7N@Ddy7W0xjt8djR&gnuz}TA1N%
zgqej`5f;$9!GKgzCCU}dcNPWaag9reLu5WBf(klkD&Z2&tHOc>oRb>i8kEx#z<?~7
zlW_@c(g|Uy&(m;v=*YYBrt&oA09#yr&Rr}Iz6$nAiF-5SM$+3mZ6-W8Q)3=Rfm#$k
zmMyV+=;+8hqFLnI2pPSPqVO-HS`nzH4EkTIfC;VYF|$GO`Nch^#=`akVj4~nI;SQY
zY9IhPPOV1-OG?B#+7s={ry<5PCD#(7vcDa3nHH^xTus^ta@y5!TBuHeDe2^JP4oov
zuzn+GxifJI1eUa#Y>%5mTf-o0EL#THybOzE-rL@7KKRo%$(3J|AO1CM;gjLnKrY>S
zBz7-4S~Wv;b!L(hQI#8AY()yA_HT7){e8W|c9qU`1qn+jo{_Vlw3<|~*jIc?%IwiW
z>agQP{q@NEkOFzbv^n)I_R_wjAco$Y{^+LdYG?a=thkX_T*n>&MSB4Wq(tW8+p^us
z2D!>5I3r|{8Fs}hdkIFectR7BY7r8de+(L4aq_!l>BHy-o6<P2S78MHgHc4H1Z0Br
zl1-^VNPyK<|HarjL<!bJNw{p=wr$(CZQJUyjV{}^ZQHhOP5+x&%xX6G<z3%AC-c0F
zi0{mC+IYwf?<eBh)QM1qG*(kU{5sU`Xyjz(A+RmI`7>l1&%i#W=$48NJH6#3Xfst)
zIZ4DuF4>|GrXrNnQ#((={;?}-f1ItxQWt$ResrbPfmhCZ04r1Q6OK8MZ6ePq*o1jU
zqUlp^U*cc>fuf6rl4{->$a+C~rec*#?`@m2OZ@6kQ)h_U62568alU&~d}(Wp<<-66
zed16uzokbV!@a}WdUkC=^r4_E-R2aqVT;8#6Jv88^}2z;qysN|OK?Vl8yu&C_J`Jt
z&!UM}6aEZjP6P)l;y-SQCq;(F0pm@QN4RBYocoJ2T&KMQ!_@VTIpo+{lhUGx>o#wX
z=N#{Wm<X`hQ|)$JbdzFkmRfbb?NPi|<jU`{VFWnvnc%5kpE&-MD)^t9t-HjsTMivp
z_BT&MNA;SH!WFd~&LJe+e71yA<bhdeY0e`vPM<OPD%Y{G<<FH7ryGdV*pHGecbq!K
zDiKJ;<9?-P`)vIJkbhxg2WL{2T|xyih{K7-F&+om5yramZ=Ut+f68Z;{(aLZYa1{6
z7e}&RbnGOFmTm=rL1FE@GS7jq-0~8F#Bk441WR!(s`4Dc|58{ud89l^LX-G375kk$
z^xp0BKghbJ9cwBU8CBXSr?_XV(QGCkT!njBLC*0Z#39*>b%EZ`?4t`x2y`K!L*K~@
z<~6^Dqwjx$N4V|~`31Z@{lU;D_9Ng9_Mj~o&}s^gY}h5Dl2{_5s?v-q8wsW@2=e$B
zi7c<nAUE1}7-gUEwlXgG!H00`Uj308jMs>dS!>>T!zN>cYp;2^j$G1nIIp{UL2{MJ
zwoRIC+gPtD@|S^Ick*DWg}nSa{;9P^h+20ta-+pHqp9opmESd0%ZjW<_Gb>L(Kchl
zP1M#ql`V(6Z8}H9x1&%JDz>eEKv$oKvVN*@I+RZ0&gM&%LM~ABj<#koVhjBi|F8EO
z#NEEL^utf658r@q4O>6?u3nF#3|p(gok=YYf!xo5qPciKNFMR@)dVs;@)&SuV3cHX
z>u5kR#6kbD{x1O~Q76i-XRkcmWVz8dTcVqWdT&focGj{zvE``I^QOdxqT%;TyqlbA
zFK-cU(X#!gMVS8cCf|2b^%dXt9`b_-FKSXpVFovqj;Ff$5Izq%1Tp7`ZOSi@VU&i|
zZ6JcU0#+HZccMl&W1t7+!Lcuo`Ov+$_un!z`ZZP<F9smJa`@bynTpqW=a_JEIok`I
z%Tb&J0(5ckXT%<|<WdH#fLgFKrxtT$)I8323XWH=hSo4d#~+oMT<piF#;6Yqy3>^^
z&0l{)S>${<AN*xN;@n{_rHLSQfZ96^{vH>KfG)NG0Nvo(NojfPy-Q#p);{(9Wh^Be
zYn0MwLjR8myTq8%5dj}D0ykvmJwiHQ?6iJBvZ0-g7;G08Lt~&^52>j@v_!=CU=uW7
z5xVEHAkMp1KW65Amr?LPkUzDws{2JYzEQuZ!5_V_FdpB@RD0L#OYJG}e=6q9Z=N4r
zQe!4v6KtjAp!?(>uXOi^=JVK}BDylDqkW#*CfG*l68;W9L;ID0hJm5j&$ev0N--Z;
z_EtK#|3&$I3=W&^UwIA79FiD<Jy`KtT=7aA%9vW*^;ED|AxukNcJ-8QQHk4%EMJmI
z?YGrm1_XC=@W!`3q0sv)39rk^AZ!9I55E8jrw4gmWW>$EDM8NVam=88-%q{P;Ie(%
zA}1=Za<$x>pA3a7#O4$+#c9Uz2c7$3eJb!V?ip+g0b-Y_Y`A&!<6Z#hp1;}Ci1J{A
zW&>t0bs_1}s7(EhPJ1z~A%(gI%~a49H#6_m|62Fb4Ouerhn82A*38Q`KHrXN+-R%Q
z<uK<21{Mc~xw}-`R!Rvo3N29!-6nn8^RI7`Z~b(5m&#GG6shr_DF}R<awaBfW@09$
zgUK?A?FmY|4O3f7X#ljo&HGU;K8sdIV-=$p*bIRxGdY4MeVM$&cE0fUK!`lisUPwy
z|Dm5o&LD=o5U-x8lUnONI<-y|actDEoYv3@_s#CQjhkhKI=8aB4!W?LN!eG^U0+O;
z0UBc~v<DuIjkld1$6<v{p$v7!&BQ0@vg>c7{O@u9F4e8fnzmXI-bU#buh1y#O7rzZ
zmDz*(b!jRKix>(ESS#WRs($dzeZ{e5E-!s%S5{B|ENe?nH!WJ4n$$~6)%h&Rf>Pa$
z6|8|2>rJ3$t-N69C-cA-+PP`<Jlhl`)eSX0#GE7t8pdi+vNj4isCoJ+SVGJo&vi9V
z{ccVUCufJ<ll<f05Z&p<GRQDUUxF&lBarJduB~B*cl8ls0`wYk351V>7Xejw8D|Hp
z688{c-R(=%oz(5uHfzy$9Sld}qjJ(iL^z-(P2JgUj)^>QHp=Hi7o{*_aW^+IQgWW{
z<pKw1bLia?wNGvWXlLIrbYYzp21V#jm<%<owl?zfJPYyDqPx-SD`V<C$;L`R5(P)E
zF9}qK3WZWA*ot`NVJ=k@1<|aEYUN=tRhlW761b1sl6Cw)SUR>317@(&xqRN5?sBq5
zGO~M$jbP-p{iuU@3NwqZn)4(;vj4OzobKWVdBuyz!*aTzN{8VRyACE=VP9ZBme%ON
ze)j@=NdeEO`JU$jmDmqafq(mR9PuMWhQA`?0!?kElIh3j=N0nUi$2WQQ0_v7Y{qU(
z_qc07YuX`%zGGcPK4^vgCf6=H&rA@`Y3B*gX+^t=Th6+S`HWAGSV-MQi<4&=n_R8A
za%k*0rF3Org+`kx!Wiq9Lr2varEX*0`Tl&_km!?dU)YWu(t?0hIP0AOc-8(1O{)bW
z|8z8aJ^}d+X}HV!7-O7TbF40RC%?nSTjg@|hwzU6f!If|lC-7|cp)<P4z3sT77_^t
zdX!p*FJT(PB(lLS7!L}Eicqb9)<$6CsiE}rw^RfXl{Hs{5smmaYEfF%Wd5T-tJ&h`
zIS@6iT7dn-e>bi6;PFwoc4MJux<>C`-~Q%W%Ob52ylwTAZgD!PIvk*C-`h<4F8@Qy
zgO@J<zW%>b-9Aw7b0#fPIgE~+XzNzY2^1I)E-UvgP)Ym!?cQ;m59YTE>$g>~d!2@W
zU6``}m_SbN&9RP;eVQXQAnPe&5-kYij^O0j3#L$-!p^8(oU*6R@=g#Ia~q(AYAF-n
zwV^8v>D^5d#q`yy|Ll85>CQx%lERw!rGwC8EOt!to96EOX76m;Qx>l<+nesQ6|AS}
z+?)`bCq9#xE;YuhI?@Ah;<Iby?GaI=Gs|@PC!9-xmpF}lhyw!TDhZU*hO7w<@u{L-
znj(`%-83bpvfWjZlSth(`KGkpG9as~3?VtCl8{BW-Lf`?Ew%<ssN*awQl`4-ML3{I
zt!R&@Taz40<w;<=zSIS#j_SK;7Mcsosywt&9dNEx6I!}qe5j^|tN99|nvL2OiXnvK
zUsBPb7N6<%3FXU8C6L+9x)hRR)<TlqJ$L}B6bpi4n(c5*;p~Fo5#=l?@n*f&+%r(H
zMb^~)?9Lz4l1VfS<QqnRlxY(#kF6pQ+&DCvRHfBRQ&DtWXsswI6{Q^`w4mtAQwyw>
zq(#oME(esPRW3*o+(GTn;_1)h?Tf}`n{g2Zn7n}%(Hhwae`4?4qkA*oxYxOl#0;<b
zyS8zjkRfe1-#!KQ0)W79wl)sqZkM?9G^unJ`u0*qfUk=>aGYU;cD#muhrZ;I3B`RB
z7%pGax3#QHUc9BgA3>%&wvAEK0u@DFgIml8vmZ>sQxQwKGG@pM$1_dAFh-sHM#8-o
zzYaq_!hcHMFplvLzl@Wj4*8PaU+A`=-BRA0_AsUFmiQH1mGqbH>yTVHvS*5G11}*a
zn-fztMBOB{s|Y)f1gZ!+gFB0D%@MuQ!DonEPL#|Mxtw|bE582~V9n&l3U*ANGmXXf
z00#7Qa4J;1K6CBzzyH+GgH%R5<82$uFCINd=~+n|R~rwwW=;w$`3|JVuM%hI@4P4P
zAXZbqW>96*Y4pnc-CBH5GTi#;*=D|mxEH$dn-hN1vtm^-sSWf5`+O%NVK!$nmeK3>
z4WG{0uUJkU;``RB(E8cToU~r>P_^JgF+L4LDrkRMt)QK?MHzB{yf2u!O`X&>vSc~o
z?b`MQSu`1=CaRK{@KP}8<u*+&iK<&fHx>{uU#&YZ8a$=Ifu$Z26!!Y>yn?hOIi%1j
zscIG6!Y=5}WY3K}G7&F^--~=a@3@C+xcmRbaX)|-ZA0(XJ+Kbjr?%O-LD>^h>bh)n
zpA1Glpq}W!>mNEHIBKhCG_O_r3~=eMSE=A|O03A@crEYOtG1R8R&s!-u;@F%sD66#
zwcqHeT|t7q`*_J$T);7;iOK{rarfz@r45-uue5iO2m!R;$KbO5Sx8`zaETVxYmA*3
zUiqGHId}#fvy(cd?<PpCrawR_6MkgOl;!deaOTT0`+#2aGqf|}`iTz<2^Vvan!jq6
z22ve}Nl@@X*Q37)w7Bx#nqGDjypq+0%_sj-|LAf>^;h$78Zf>tZxm5lSd!8zBAJ)k
zC@LyW!HG|7QA2twIuoFWl2EKb4=E}uMHek9t3@9!vdBYcC50c0(P<>#QU}8Fz>(fl
z&jdk3X#G=}%$BH*EQMWB8QkJdSla?YD*<+E9W{5dlb4vLqt<Y)P(X&(XD`eKb=umG
zhYg!prVWTygsv|9=ZQ<y0zqI;o8?R_Pq42dGY-rU=N=7~iVF`pY9!##7Z8ob^dTdi
ztXu#^9ON#L$SMGWEqrAKpa|7O4+4RbJe&=f0LXSZ90K68DIif*=fCbL4J^FQ$u$5X
z<%0_#LF>QqjAiqXR+S`?lT|&YOiK+Xa03)zGd@)eHUbvJVCoGMwgD8(a)nlWHvtq-
z-<l5RtO3jydnu{9>re`iG$Q*T35dXW`vP17h@2hTzz7t1HG+n>0L()LK$w_<3Yg?^
zpb#+K;p2IjiXdQ8ihgwa<=6!uNNNEBCXPKXLm&~h+=FSiSVziZRD`TNI<X+puLbGY
zmli(7L``o2JbUuak!Lsu2f-07JBjp*p7pioy=^$wRA}XiIncq_B`LG|@NW|tRwgiv
zPc2KNtAj#4B0xI}8tS3aOfmN}%!&*?6v43KO;VuDeA$HR;i>g)64W)Pdmxd_>@%*6
z2ZF6h8ccQKFpX4J|B1dI*B(qto$s-8u?e8Hqv9c(VqMFlOUB++$s0KA)r9zqGC>;z
zR;7zCi0l*3OsfOPf}p@l*X6>8W5Vzp(x#O&B9DRgp8V?;E<<euUE-Z?`l-s{tdMn(
z7j77sgZ57buQW6!FzfS=9F2|+3kU9H7e;W_Au?j%n^)=qF;Fv(4&DjO+b)9OstaVn
z@Ry#@0Hhq#-4(Iwf*h5Pp^i~w>>0R3<+2S>S<*2kz%qiW6;XLT*DAccs0YTV;zCVC
zhV;7_L0PpO%ZO@Rov6gRY#8Xsuo8v8P|4+-J<V)O#Nu(W&Q5k#p(`@n%ba>vUoJ<t
z;2h~9lk6|*usjZj&G9YN(JZMH9pRRUVg(i57l1i6T_xvjVg~*2d*oJ%xwbyDH*S^F
z{TmmjY6`YTkh`+S{$CAraXwcgYB@Yk-9~u8a}xqBNP@$MCzec0J(rL_f;l(jnZg6P
z!zSzegM(QGoTtu3@?JA*4dW7zo{Q$4HM63l%X9^<W8=e4Y$KUT#^SYaTZ)7e`d?d&
z)tKGuIox)$xY9GY#Z}2!+zZ0|o_l4uY3Jf$QJN^J#bgeMDjYH{OHQCg%pI5V@^!pr
zpEBUCK^eIY3Sp%T9IxI?yX7EMpGl-92>aDO8IL@&tH{>H{26{@pX7&oyjT$Qrz24R
z*<rp`ofcL*k0f_li$oEIocf^(HRRc(nZ|a!AMWN04b+PsLR^?CAX_siHDbTii#~(c
zAXuCqcajc!`Td`Diqn^2$N$uDz>lEQ)&~MtmQu>eDFXRg3E(<-hr=pQi*b2$X3;bG
zrVmV@3|N>B6oZDw++>n*?F7?Fg|UJc{+(%{EV8w!Jon0tO<nKGgA39<H()4(6sFD{
z4VWcnD9>{ep#t|hR#1h5rW!43=<k<MjfJ9OmpqoJ#i^Wd6g&=AiG7}sRc+T)Xcwho
zf1Ze_$oi+PmRnR}q4n9kbWd8hak?3YUFXi0-SHd&u0v?7%Q8=&whk)iNITp=09G+4
zy;I|%n@m~<U`<62`ILdzTsY83ziFBoQla83PPGT2(DL3)L$|y%LEa5C>}3W`*KFKP
zPqb&7=^pvsYw<!)d>2u<w%t{Ts)SS6R0ZaSQ!{ib*04R#5IEOV+s{Y=d)@$lSrO#s
zH=i9AqReq~AATvzv;~!p=y<+%dMkp0upFSG8`}sToKgX;K}LRLn3Wma;{srj*POaS
zuE~QymSd0Om&i6#BnZjqDOzgLq$U%*A*9tE|FD9$oP2Yb9%8tL!`^06*CU6w8@s-@
zg0A1ACAIEzsbK)yc#Leb%}>{!(^vBeb3*C$z)femhDvwXbsSDm+^1?lN=lBl8iq9A
zuV7Y>r)C=T9Yr1e4zXV0@}t3Aj*KrKV7-xJFWMez*E%C6Bzvkv*q0CwULC_N*m5LR
z8hsvv5SJh53EF6rkG))A`SIF2$a}23JCfMt-J=_H>>bI~GQX~)Z-mit_a+>dEUfOp
zGZ@FUo1gW(8BXVA!FOZKa?fVZo+xV!7H0!?E$Ln_n9*KphjB$~PzvShG%y0??-Vdg
zPpp(;zUt0}0mtiIA2#xPkY@Y26<itqye_!h`}c;L;T}d=3HCdbECl@F-*88;Y42M)
zaxMV+^L*CZ#ciVr20Pn>andw-pGA3W(}#`U^GhnRw`@ezdw-zQ1^<~vOY+v}!M@Fn
z@)_eJ$;AWg{5Jdk-GBZ0imzc`Q6Rw^J^36D-`<0jMm|Kxp@(A6fden2fbyX%q21?)
z+o#v?shm^Q4pyeSL6HvB^%amA&o+6DdA5~llQpemb`C!}ILv_S8TCl>-7Oc3(x!Pd
zl?to{ltPI~_M#8|*cx|zWYE)!_V>0r=yBgwxp!v=9*L5J1h9uZCiR@++WZZUz{HMH
zDsZio5_-+Qrh47?uGT7$KEwSy(@?)-L1_B1Rk2$W#;G-MRn+nyIHnDLaKDeQPr<eO
z6C^aTGEqBo06QMNonN*aP-_6ae)OjwgaP?`&fmfN?G)|P^_8xuER4uFh8TstFE&7n
zkT@4mLZ1!Ss_bq5rOrC73+(Y}=6c_{#s$Qh)4C2w0LmYOmQepKb7!wRX$<41g|WRn
z@+RM&AvfAU_H}Xn3b-*F+@KW>eA31@wXA<2wE9bsv-ri1_3MQ};dW4G<xOM#_}k#N
z8BS>{B#QbkR6b>po<KH3uFi{Rm@!VTOZV;&%8Be>czE=V;_J?lOXJ&)01{{{n_XHN
z9}~uGyFX82ki&2)%GCY78zPeqOOq}th9h?St{)dWoRQC)`F}Mf(aub)M||eP%exY!
z>Wc589<@>eCbtSS!8?lh#9i+az3`X!r7yx%fEZT6s3IopGX{yo6W==cM`+BD`+zT%
z=5?;Y95`V+->v4Ke=;0*cPgH~WdJ)jT3!=Wl<6UN?Tj-!Vj#CvWg|`e#nwE$J&fHt
zgR-Rqh)49?K|j~sHajdgS1J~peS|Ao0NdH|wijCA#!Unl=8F}wsfVPXl92M3kNl~d
z*aa;nMVQUow7(K7(Rxb={WczJy4a_Y?wutr)xP-B-clenXSiAkG?_ljgHW)8irjt`
zB*k=yB;eXNp%y-ZRLJN!k++Bt^_wL`LM6%!{^Uu|G(w9G5DNZo5Gjtl`EYGd#nk+5
z&+pek?L2UY?9d<638V3$ouV~1<YTmB3sIjg5im|dyDmL&gr4thK_l%UV)>`*F*miC
z@Pa4TqS>SjN7yW<Q{k?Z6L;IXh21EpP_-VDn?Y{%0Z~0JteF%O&uQ%|Cj{BRVt@q!
zxC18PkbK=c?!a1W99ux-H~LvqW)$J!3De(%Pt+|7N&9578ik|&Q0B7oh}6)zY_#s_
z8lawN$s-2(3x!p1XuRQkrG>ZAnJW&pz9E6WspFs}w_PmFtc%`btgF*r)M>Q3bVlKf
zaZ4pmTh4qC6Rx%3)fl6-Ax4`bLMy3B8KG5B&&;F|F|xjf$id{;f*D9$qaM|VI3$Y5
zk(t}>h8^e}g2<8kck|z>F{Y1FCd)cx&jNleftOPg)!!KWa*ENNZUe^X;+;b=j-ls^
zQsRZ6&FPmx0*_<B9RnWiZy@I^+LV$pSgwgSjjA7CXV5?W=b8ME8t6g&u_V828m+ug
z7ccYn5%XfE6UGN?=+7EwVK0H1IZ(s0fe!LHv$K8sEbx@GEVI8>^C1OuY0f9iGLLtg
z&e=c7iR@13kI()beuL`yr>5sw+=N%l_6VCNwl?Yqu+3KJkIuB^klW@)fNiCXb4TnP
zzWIx|rUS5$e~XZJvCwC`u)oysEm-i6&G0RfWJ4|SQ>jY4oxs^_Zva6`#H4HRPjciC
zEW~%a;(r_C65^ZE^yXjtE;RMMmCs*nv#~dqD}7A*`;gD?+46yn@FAR7jUM^~0Gn0d
z?^iVyu{Ji9G5i+wD)|<*7kYowB&2Z_H43Y1l_9~CE#jo<7ltPioSuWWpF$p7z^Jzj
z+*Nf}!?R}{b4RyK{~$NpY}}bBdz3)E`FA?W6}Xe_loUeCz9mq1v#$m<P?uUSNI<y3
z!XOQ1*Qv)2SGZ$nBnC1EtM})$=#}lVlA?yBX7K^;a!UT^@DLrBEGKUCHf}bwGzvZG
z(KDx}MX&R9lxf&xr9AgNKlhEc_cZqdQD4OGs`a~v{|>nK9KY^G!<zpcSBchugtuzL
zq^MMb)@T~1&Wg{P<{7*Tt9r>KMJt-ZWZBoTR(WMCK-H@8M5$}lebf&;4$0)-slF?F
zh;O7Y!f!)OfEym|f2M==Tc;%9?OX91u4m0(g(Sm1RMuxQ8%d@u2Y}5Z6T}8+bH@O=
zmdv+`Sn1kV=A*`siVLAZ&8tRja^37$Lm1~W+OIL9Vo)>kU$xUM$^#P&+$;1=Jn?nl
z%Yc<|p0hpk8)^@m4h%NA0^{9z=Nh-Del-c;J=f;t9L_OWLmmT(Ql>y|sC<f?DQEeK
z5Zl)$sJ$0s)k9l_de%~G)=JQ$u2G|2v1YAYwz_Cev}#7`R;$#iPSvZ_tyariQYv9n
z!Id4cH{iBn{SuoCFsgGq?GT#x3y!zu59V6(kKbq$D>MEEFORVf?x_AHXm*56(-yy!
z4}zvU@KVvX0o1pvk`pSXig?238Dgwqgyp}5=U=h&O#^>pG=`PWr{5TtMB3%&<Kr`O
zjoX10A6)vp{QbVos@@5G<@rPEvc=CW@2xrL&4K50mm@ERzpzVwYo8GF$6kKp#mPR`
zZ&<dx=MeY%>wEq&EiRXr*YoM^?Y;4E^lqKo*l#?1+k&0m&++NI5k0PpyRmB5<N0WP
zv6rOYolAPxG(NxX<-4(zKF-hYeA_UFK7DmHU<I$|>u0nOoxH+^A^1_wh}-kGY}f1>
zcPGeWNE`m5wO;UztFN|zv28B&b`HRYv(40;-o$0yMu(ddvnMmBOC$P+EsHkw{A@XW
z+lruN)6<PeObv}ITlx5Y?lJ#^V~js>&H{-+mr@FgFXx9aJBq|EUSI}50fW)4PJ)vQ
zAaLg3;HQ;7cvBfV15wn{8*U@tCOv@&e$PzU1#+$R+aA9WG}||A1~hV6#;Ji|Y~1fC
z>48GGsDQVwjDWFqfD9tS$)c|ZiwKf@s14)3Ck!#^Ac188xR>zI)^hjPM#=c(cwa-b
zdQ#Iml-gWY)=_8WF|X}(0jg^0(H>s*q1E!_#=GI~VYg*A!SU93f)B{2c2~G*YH?N-
z=Gh}72GfB3P>46b^e;$aT;q*74*|#BZNN!-)=fcJv%9|EAz$j!n<cYdu2`ur&b`H5
zK)bYZ94p(e@FSoHx@Q)hzi{*@+t<(SjtkS!(db{>nR0LC>1cFxdX}hM{VCWVGr5dU
zFj*l?Yr3$uwI!c`6kpUD!P^4FAxFN(A$5|j4uzw|&=DQ>b|;>oIz*rjMJYOPxI)|D
z{fe0}%0N$xV8ymb9<`%sFtPEpBz8b#0-|j~x#SkI?Bz$)^HVKzf#k*4tS8YG@j=vl
z;`VWgd-UC6o?f^$irZFw>T)z88nyx}CmK7@Yzv3)xH_=SGAt&q9Db<#i}PK1KaYny
zdUAPxpSP#^q(XG1RUulO7!tFWXyyHn$R=8fLNH9;%+*uha&naOK!O<3bNER|e1jEY
zwZlJul_l}sLX;yXi0soVzwB+Y<AM#dkVAv-EZ}OTFlS~P*5T_Ss4*X~We(<s(Qxf5
z3i1fyUqlpzQUgK2MHHpc>fcYZRYj+gH+?@Y#*=sfeYYJq0dTNuqzM6e;%Z+Cqx{%H
zGX8jC#-^=1rp|nrGX*HzOgEpKKykBu62Ch9P^#q;JyRy<dMQ7j3;78_1MvrH99sY}
z%HLd{>aTtLH6Pp9=spMFAhbzo14y6v;0-9gnce|j8}6~ROsxiLm(&Cuyr;}FKBDr~
zn4)rM0R~-*1qMYjd0<Ua8$9_WuLkP=b8?AW4b+LNnAd82QrrSn<z^DN9qX(^R%C*D
z=jK$SuTaw}-CpAi|Aiy~U<E!UY|MWkC(<I5GuUVdtIY-jU9P>_-nrv@#B2ep?N;@<
zW>nbN`;onzY5$%ryYCboA32KkN=RQ~vo>(r29KJ1@tXhMgx%tRwq^e9Stt+7X0z|=
zbmbrHeS-V5n7RA={Cq>-`~A`3ZGOAD`r7z<Zt?0?=l(1E66@)>h}l@<aYXmIf-ifL
z;r{h7->6QHzx4ZmJQt7yohx>P004I$0RIoqg`30w+jDWn^S_L~N{&)D8O4Gfr;3{s
z&&<Yiw$hoKZC=?+;fQ3>Od{2whGV{$*4rrn0>H$?D-zyU=>r_zfd2@6=nTTVANVUf
zcTK#|hi(YFb*}MZG2&OE4L#C>lcpmbxU07Plkwg9U{{~62)Vhvrnd`6RO#kd>txzw
zl<sSd6h{1e05g6N9`QRMJ&PV7={up11Sf&BZ1wm>G>h>f1yQ)h#>zl!@;D<u**0qv
zoyLxd^|0^&vMn&2+QEu_LDxJQ<}}gkJet*ob5W;&ov@9h`>7fvvF+%MCaInPSAcIH
za18zCAS62WyImg7uaD{#G31#j@$ZDQ3l1&g10bQLQ<Da3Op_~LRogw?-L6O)0H+B_
zMQOH-CA6ytG>xiD7A$zasr~_AZbT;;=;qZlI-plyUtg+myxy*Gm6E_{K)^w&2<CVT
z7X)9j@lHjZhi$Nd`|r4)bX{<3tvgmNlJx8MoO{|N<+DGCVIVo%*=u$4*^oiKn^Oji
zQ}X{@&f*6iur_zV1|~z8@IVJ(41eecMbSW`qBZJY1pc8-!9a*5>AM12GtfUdbb@9V
zJ6%&bbY^ZreoA~B#RN_t>!Y*(cz{%5LSRqS#1F7Lq7^~Iv$0D%y+3kTd(BhrYbL#0
zHrNGX6!mifF&t3>V;NG!uWrPKp%3;n#^S8_kck)d1F1#5No4WNh1#5(wsE3Au744Q
zTeb)E%LC#0r__@=00-M$7i*r0%G^aX9v1wDo<XA%v?+pcHA*C*5_mk%y3<4yax27~
zNDEpdz3{=br6(^Lr@UeJ)y~})gA+O7=FL66Gv&#}UrqCD7X6(d$vZQI0U2%^XGjmh
zw7{2$9(^}!7MmC1n@WT&!=-3L4@qNm8gm43-vzW!auNLtL9C|db(-!2>=?sViJ_7M
z95g0P|7V3p>SXn5_z^uokg4(-`~Ww?n)X&8M{Au4mWMx@UVGfg@#_c#W0oD!KoHu2
zJuW~G02rsS6DB>A>@lFQJO8<T+tC_q5|D0<B074gT1p*y<o8UJhjQ^nIfF&3-V{@V
zrZPCS?E#3j$@}YQJYqSUW6*8ab*p95-79t3HCwWi+oA4t9J23+SHmlB9I5W`3Bkca
z({A*<NicjA;E_gJEtM5R@U-mKWwX2HP-~?QxJ;}NXxS4ZP^mVNqY+Hkd<iTFV0Z{q
zL(TsxdXvGR%HWqh!YAk|22k2RD4y6{<`HhwZWVJuD&SJ>QQMjQ?}WvSp-<g(GG7rM
zO9{n@vwbWZYB54|z;VAwnhmHndeA)4=df+^4o2WRS9(|!!tqaR6RXi~k3YO$NF#RK
zA2dzsTPPCNPUCT*sdg=LN{PRHB*ob$O_*_s+5|>9Z)JAtNTGlH0(t?kFeuxAlj?#c
zx<QpeQVr6^SPkotIJ1mk^#xu82j<`anh8FP?g1x$y^?B>@f^gR;55le1lchSaS~xM
z;0{nR)Zm~%AI^2SbN-<5%Le)I5O_c%#eBdqJJ+o}F}5R$L7|b%C3zG^GiX%w5=sa8
z06eVvv};b;T+;pf5fWJl1=!1M4~Ffyfz4+J-x+sVKX7IoCvAMV2?L<CLem)G9hIk9
z_bEaJ`SZD<4ZP87MfaE~c4&d<$-c+2o}2*fxxoQ+*Z}sa)D(cqL$~)cxPhPb0{Iz3
zIYz16El=5^VX^xgKxsGVv6kzW!}LCGiW<#7Qkl!s^Wh6>-G=+JdG)#r{lr52gx4&e
z1JnW6QnfKUlZ4OT#P9QVel(hU{{2)2tNdoj#p{&I7P~&r_RwIk!SeyT@q>W&51VFy
z{<lf8IwaVL+`xz07^f8Wml5I5`sODi0uX=j9i$L$-Mc{xg1sjK4FG$9?{D0z+oStS
zzUR|pFCWW&w!oh847vp}&f8qDq5RBlZ?NDZ`CX8X$LnC_KNKRXZDO}@lX%<t%+qBp
zJsn*R8%`4lEG9Dp3}7;LmjJCQ?jDhLLpJYDjT$bhS%A{O)K@g$Apb>hHe9`?eOA-m
zGHxC`IJb-7lTJVo4X`{Q9>3i8H6&EBiyvPHU`@$~-W79niDucgX!4X<S;5lD0ts*?
zuN?W?f!o>gu)4i8@J=z&+A)j4nAQ_ts6^tn;Fl*P)F^WJrh~py96beqSs<EbqD!{y
zOIWX0V_izsfkU=QUMy^w4xMvY4Axy^XtR_ZjZQUeE%N>IU;_70Z4Gsg`zLNc!lxs^
zka6a3lsO`^t(Wto*y;7NXxj_`pN_Cec(yJy(WxsMDXcXt62@Y9ET@BUfB1NW1&I4&
zcrm1fS(p*RzeJ8BV9jqI1fm7VGnS&_g#`CWmFy1T?7CP28%(S}+dzkGlAwZ|e6z34
zFET9Qc6=02LoSu?!&901yI$q=ry`UV8tRp-PlIHAVkYOh!kYy1IHcoPFUN@5A$%h~
zdyPlrMiE*`$&ESbZSZ%#ZX<6~+sOndmH_jJ2pL+n0cRH!B}gG~bBl~JsG&&CPy1KN
zx@lz?W!0)KZtPgGJ)DD$K8IS_w2=4~a1HWySy4bl88CDxo?nOZBV=yR=Os>D5sg7L
zwfV~4p>Hgl?w=tv?x5cpjE1vjSbZu$78qPedEfxN^&^o!<MrF-WWTzcD)pzHl5qK)
zBMee!QiO>oWjBqBr(olW=aG47WNNFb7V6Hh)}uJV67u?~<E(6rpI=X)d9jGD=9`yC
zWBU*Rr*JFw8a~W}5w<L`9JU))md>e1@F!P*a_KGklt|?=sa1;lRw$rVb!!p<PKLn3
z&fdE9-N5bLdY>CCY99u7l=}YLtJO#zF!S*EB*BISBKBckj-ab#gUJ>!M?Z^KT&|Jl
z46qH~(e2j?hw>5o>Zs?8V)DahSYN(DXUIR)!aS20LbqCbfU@Xa3o-P}b+Vu>f8RSm
z=20*2Ypl&^9CXGpYo{<_fs5~CQTd$Z$X5GM;A^8fQMW-;85m2?sZmooN}$AJpqX1r
zd9I)k^oM)3Li+8~!SDxKr;?4Df`uD`Lza;)_Z-^D;(+m8&H@2-(|<{n=l0+xa{`Xb
zLe^#2PHK`nQp)+yXh}3bt2yPzBX8ZHn)SF~3C8yKYoG7q7b`4nHK-E3DdkQ)E{nx8
zPVqqWW_P;#F%;oc2;@kA5=%e3@6%L=^tn7Ze}v>jB2J-|e;Di2e)sk!g$gSNx~+;_
z<L;vAi8)2~JUnbpRzb{Z;Aa#FTy_;fH2HEf=2feMlYQlFO-dD&MNmt>>*W^n6w&Wf
zjD)_V0DH5fL44{iT><ggq5|mohxeMT09p*F>C^uaWqmOz+|(&sFyCa^z>+J4+uL8{
zr|L-KzMWEXY_QC9jE}jfmOK-e&ny`K&AYsGc6X_rCc>>}iSa6LJM3}a@4z?dEs$-}
zo!%m`Tl(=bwWKbS<Yp~+{TqF~Qvc{`kH|c?W$eGMR^P<oR}}679TP{#<jyh*29B0V
zU5jj*E~LX`*#t*cD>76(J8uc`r0*a`Lk+YMb{dF>M~N3DVnw9kB9F+Jlvc@f<gJ5a
zc>}w+LV03_;#t{fNf^<})@Oq@rbpeSVzdNRrlJ+ebw#wk7^8)Zju$6I3*2Zy7_r=y
z0PmW`>Oip)Cx*)2g#&9FJ(`cA<mxJ#@-ah<8(5Qf%N10x2JJOGy`dN=q&&cDY<pw}
zp(z}Iim(h3>4dOs=i^>d+BNOH&z~F2h!5jRH{rPRw$FR!Ey0=v$VPP2m)Hh4r^@ys
z%wle?W)MAA-=Xsk%pJ{4C%`7(wMCOAD7k0$z7xNsKMUz-Z@T1x!hqSG>J^Cv^ieL=
zGb$_WKK-ab1(F?T$|YyWONUeKZY{sE7C*-VPb?c|?VhZJ75oRXoNC*#k>=Sbc6@1}
zJE<;4bgn8FfkJ3mJ^s;-zD2Q6U{skHXcj0(@QAyVc-W^>Mmly?o01peP`W@5x9&hX
za~x)(R`9RM<Nz+SeS)D`oyeltJV~qs)ym9ihs@mlioC3oq7N?%t7+=OQOlY{y0eXS
zzw9-s#%x}bx<W;^r2+Z~SaupD0()4o00yHVHL`<4n0ii6(+$APje6h?NL?FQD>t7p
z^qNw9kBM{plrxna;5u%lSjw@QqzV<IKw&L*2+!yPo;9eGGNKV%d_zrEg`^D|^vMpG
z96bkj$tNOaX+rwX(@DWq=%5E%C$cMZCT1O$Tfjn2oD18Y&_ggtL&O>Y!d^a|lmf*-
z717{=c|YAB8YFmsQ?5}pJs(K>vt2ifzyN@nof1Pd2~0vxVG&ayC^c*e2V;~@@@?>X
zY`7qeKo)5qDLr%3A7tqJh5_W<W48qhQ1DG4Cs|flYMH4A)xBbZhuCxiDTR-;{bQt-
zdGRVE7qGgX3C9?RAk8`fU>Qr1zaAMy1~7$3YB3-VSkc|Vh}G0cu^geD!w|^2ts2ot
zgKEKoP){VS{jh!tM5rDJI)?`N8J8^g?2iG&;*Xl~5!CQYtWQMPleIeL3KmR|7}cC9
z(2_<%)K-FPv@5*=>7u|K)k-r!`7sEjIJFFxexoV_jXI~J3&HBN9JbzRxPwTy>1NaL
zYX_g}AB1wl^+e%r;bfIytS<jzQN1aV#luaTPPqCM02H(u*Gv+LSrT>5&Gfa(BF&Jf
zt<XtO8##<)BE*Hq%Y`Q-tcBS|xCsm|pphOwjk&guA@~as=glthN_03HnWWv<FrL60
zfcg05Mo?08%dpGhNzx3K2gjsUvo`=Y4~AjjmI=Y6^@jdR8T_3fgFw!+i9H+gLMpdq
zupdvKFWaK?9kx~N#Uw|eNC-VREh;mtQkUA3$WL~eZqujc*CZ4y5bwlEB{1vF8`A(;
zC%FiFseJcI8fb^LWo1)V5cNqa_&kkdl@(7W5(~T6wx1534EQDt5-}m6Gt}>Gc@}kv
zPKkM-Myqx#Gn(;YGPr<#bg0l>>C4j+6>_C)0FayR_-7LDb6-kU>Q-~aqPt86n`oXu
z7_mze)ImOR^5G}zLw;e#esQ_8vY6;syt~{}iyfmjD$u@-t!$82^rYos9fPBAjrLrr
zoVJo(HnzAsoc{Ylwib$#y-Xc50v4I#>|f0YpdJ@eVq?9;_ZFC^j0=6&0vRi2t@IEa
zVfS6ucQFfv1&Ps~CI<~pd_RGjty1Y4U&E%UFqe5mPE;vXjZ;L~*2aBhXad*oV+_6+
zf4~g7g>()WfaaGDCpW0aSGl+Ar#*<bJg4LiH*pPgjgsSqy|6quv%1y2qzl&`V?`>s
zIyOG}iA-D<@6O4}Dg3?SLa`aDwJFgOV`Zm2_2}=HZNzd5*Imr5n!)>}gx?+cR|PeH
zl}oyDB>Ie(S_g$gnB$D0#q>%J7&E8d2QBkGdK&Yx&mVT^I(y!|x??IGRAEZ)w3GpD
zhpLd<j2=l*Qb~>TAwDYEXD-8Va&!W@{L`I7aqxocZuLXV?<{@gH>Dcet4kvjaFT8h
zUTo@Ywo(r}sZuz(6v-cTh!tcLgEak57vYiW>H_1T{%g<ut(_!on-1!#5ZR@v8ZK+u
zC3xMtgIvOC-_~_r5!R}kWEI_c2pXm1s#T$FDiIThqj5X85$%j6pBhu;A1(3heIrEe
zhz387I$~TED)}5-d;th!OdKMAlti8_?BmGCsW6PVAT}p-2-)zXXyeVS*o`4!6b6kV
zvlGc5iHJEP$Af24*cK5MA*Mhk2Y61+NHN4Vuz=A~H|<ch3Vs>iMo3IxJgVF$@P`r|
z|8M~rPFgC(W-f)qqSU6SGqs8o;FDB-5kgCVcGErCNceb^DbbzfOYww-#Qpg<2YuKI
z#CPO+b#NnYSlf1J$1&>)l-u&V2!zRS(%FYa0mSJ@;4rl3(^7!Mxa|IX2*a^AXnN%s
zE=s#_qTjTFA48SaH(=q>&(IYPf3-T5@{`zL16!gxzRp(mZuO&AE95Y<lR7%UGIId;
z6QN7%9<S5{ysBxy3(3B}B)c^<`nElD5*RDRfbd6v_{k7m;$(9&perOFO)~nn1$D`k
zRkC1z|D|6K<)*$blAl{X*L?%8^AKm35}#M_WG9qWPPbo6b<{igH>j%DmXRSS72cED
zh7!ZivPFd;N=@uPXGHPpX=|icjH2PS?`Wgfw_W*Rj|iw&LTp;Pb$rSBK1fGQK{C=C
z6PatarR%d9R^&_(SBE^iw`8wouX;oy$I+b4QeF9?2-<aoZ@Y8lW-Wwq<o(-N{l^g}
z3Kh#{uN8-@l})NlX$jhE`r=}*T<-`p_}n^cz2qU<gE<ujD4D&tRQ+9|d5sNsOQXzj
zVO<C*ef)-R!IigyIHb8FsP!0l!ph6Z;v~DLtxzpIaD4+J!5ix*tB?=v?c6XiCx%?R
zB6?Z%vDXK=!S^c=@#O6qq7}Wf_9Qpls?0P}>n5by%9+0@-&=l`@<#%mqz?2(5Es7;
z_`>KEV>p^blJx=*IQiuB9EId@kM<825B7p}WLb}wT|i;O*j^WD6Z4W83y$Z6*%fYz
zKCQ!r*K*59pT7v*NW?Q2GV1!cmmvW2sw$!57aI$ruAf36JD(NBH>skv_FImDf=A1!
zHW|Z`7ZHDO<Bws6zxSy!^xJV9cqhACwGU#!=p8Ff(}rDFSXV1#w*P?D_Ac&?*V$mI
z(dJSG05X>@_qa?Ip#35IZU9vYNrLK9H~;ZceN>-3&5;v()iX)PUz?-6{FY39=Fe#8
z&lOp}OQOW~B{5x=9>p3LU*_n%MXku15a6amSBrCB=DK>RUf@&1t#rxa_74E$%93Un
zN^pJ3^r(A^gT^!QOySq_f=cRY#IJfVLRNN++g^+wngKMAiHd?gELXkPVBjV8c~Du4
zQZwfsY@#PO?q3~3me-?!wJk50vv!HLDK|cjt*2Ej-D0dSzDncXD<UxMSUB8JqN3*2
z)t1sOE;T=7)z_8B_abZN1wOl1iSrl%U2_i<g;B-hOMxc@;Yp6;xFg*`hdE*=bpCU2
z4-U=0{_c!uz;<uW{PS|LTWxPb=Qv?h1!3{pQTmV3kP?3h5c$sb8!80N)Je@N<~{-b
zqFvLzrkpUe!qwq5Dsg#sj%!?9SnDp+6dSm+@79!)KYwV&OI%o5`5YaSle5Ci==Gr$
zXZ{2e+?6)my>?@OD>i;iR<`ZbpxG8@qzw&SudSQCVy9Zm4py<_l*Tysacd6K1gIa~
zKZ*%V!}#OR0`}f01q5uDSO&hP)Xisy+##*%T9N@Hh>Qs%m_*$RNxpVDQCm<a?>GG5
zpXJNtO1|CeGUL@b!Pk?X8OO>lmB$y>J`XFjzI8TIWM#KR&z3SB&6R`CLXUJ8rTPAb
zVVo;De^GuMA}_n%vTni0V0E<axN&zB)#GR5QKzncnXFu%P?IcmTrp8*^*A|EMpp+%
zRS5D`5RHF($lu6>6*uFfI5K<AgI^Ub72{&6LKQ~gXI*s@@NC%Ca{rolRY(zjP5e|Y
zz7N|Jc#tC#mq`I2+ZoX*ZvT_Ib8=uSQ=3F~wN31n6zumtinxA{<G-WyG@Yh5k+T=A
zK`dUJ*#HY^apmO$iSCxbn0L#hy&*%83`pV~gmR0c^%o4CEHun9w6#>g{rt6hLQU#7
zf3%@^;lst6wW?VS>kc!R>+!glv<>#M0G4yc9pEj;U6n#bz6Nes;?l~F(;l&%U3%dv
ziuQ{_JN%2=0$P#2NO0mZVfRbfMxsW%vx<b5e5pRp4;b@pFby7bzv+E3>%mE9BEn*k
ze)u_-IlICmTic@Aqjtn>bx4ZJRWV(2+61~Y;O&t)JsnoRG6-XK^2l2HA&H}mru0oW
z<l|UH0_XaXeR<gWP(0T?;=Km7lAGB9-j<NwGlg7Y0{!$AaV8GLD(-PHdRMcXd}+Gr
z2G(^k*5jALaK-<qPU1v)^O7O5Zs>~X=xvQqZ`>G?xHx6J-@%Q>pAf-6zoXgX^<+50
zW8kKDTG!SdnH%kA>n9Q-zq1&-@76f&SgK{Thaf))YD=`Ej?@x}-NsT%NVDnl^!3el
zB&q3N1iN9m3QzXvDNjpW9B+>C?6A$H&tMlQiA`%}F8yyaZeVKj?OiAnaa=`A?il{l
zr^Kh6BEDjx5Q4%^ba&gETHzf+h_?z)#@XW?sYZW!LnHP(lyF#s1)!`WsF5(jxu9^!
zU||x&t;6$X#y*(Gl$QcZ%kx5^itB4bq5b=BSj^sCZ5DdZ&w6yH#h1Pfh&(Ppv@0j9
z_!v4ds*OJY$HuIgOY+WD>|pKq&(0ru^(4(Y@-Pmhu|hP-U{b6w2<%WSkpv+uOcTWN
zIgFe0aQ3os3n)+BzCe<Qr60eRu{=gBv$Rck|B=G$-r_Cj^d4J#axB~|`oWti?`{cc
z7)K?^ng~0D$lxlr4M1->2*B6|apounQCVq6W6jL@Y7sDR>v;R>6pqE*0}21g+7V8&
zN(e>`%rMfUz3>hak;fHwEsm-1m#lg`S<qD4!7XcX2w4j&ALHubGSV8=8S@wtOA<xm
zau%)y3(;zUlKx;)%&m+O%9$9|M32oEi~OtvB!dmZ0w=<Vksz(|7!WiW^O(sZM@&{a
z>KIxDWLmpm_G;Tin5ky4gAFH<CYuVY=AHUb%b9LQA@U}dHOeKU(1?7650z?P39-2?
zeN{Fj8~FfI!aC|8hbBbm)ct}GtU5l`{6~GMn(!G;=^ChR!qUcPDgBV0c;tEPkAE3B
zg-mfq<rAu;G-VJOK>`RkA)r)(9taRY)GlJEA|mE02`py=z?_KP`L#m!V-aVtzU}Z;
zu?JmNs-|{MEh@|uuY1X~%QB|uiUwts0x{+;3OE-m3fABj@a|dy*lkJIXbS!On(;-1
z>M?8%;G;xV$(>AjAV)B&h`x$cVi2KxkzpFak0erlSEQ<I6xXVkS%`%E3JXv;VAj~1
zP1)24EN;ke^f$-3e}W(HK6r<`Vk$hE^*GoEbJq;ne^P_#lL|L?CRIc{Yk8DKng<{f
zaI@@HfWM(yXE+!g93VPZnsA&=sv04$`)2P}4F0r<uH+YSfM(zhJL3ycg&E=%pXJti
zvVXh0f74&iX9Kh;YX=(tWg5bo)_JjPd!C_yi=E@Bt*fCLR5tXmCUw<1awAPNypsfr
zTrpZ@(H%2z1v7*)l~uG_K8bB)VkkvMQW9BEboB!@sdoP}gfxug$6w_mXb=@xT@qVg
zqJb?OYc;|eTU-VPXRyhVgDDp>MS8-Z7f=gYDq%t)O31vOAhW!iVzy(&AUTs?9m&`l
zq)b`Y9I2_A(4UUIdNBfFuj$rWt(5Grk1d`-qK3xwh&$dkudjS%#1GPU2G$Xn0(v+p
zT9OE?ZZOF6L_c51ny(RPZJ<CI<H!_Kg+rxi5d<?V!xoaXk)W(<Ld+1lFab6qovj^Z
z*_M~z1`;Z0U%7G+v!~H_7Kb@qO&XIhVSTAm8Ccl4eIRE<V4`W=F>>+%QcN|xvU0jp
z>o_EPXPxD!KcZBEIRa;Vf>G-og%T?y59ym7Wdns_1J4c{xD&*yM)SJ&?9xb9xpz08
z&lPNl>!&{0afG2mSt=#1xUpn)hc1xdX`x!zY^5Q-v?oSoz8QKPyNPfU9)byWF9zH{
zVA2Q<m)?{hsm*Mu1*c4KhdE%t5P!7N<}hJEMLHin9|_qU>v4@eP!$lN<wO{1lwRAC
z{^$3FmR5$Xb2lI&LS|~;ph7qt0#6NNgb6utPksP89XS#0OGlMl;akcIu%%jrO+>z1
zJeBJ#fI$?ggkk;48<>oa$&nR#P67x%-7{p|l8V$21S=BKOk+=3-b?`d?oQ7-Gt6jM
z1i6cLDok}xIi04~_<_)`swC@RffF4nTgG`qVAa%AXj`COt5B;1!?oz4AiW7TtQ1fb
zbI??%IwK*yQca64yW!5HflvF(`*!B`e(mQjC39BYvsa13ks9Q-1fG^BI@c8I_AaBC
zd--r?ub+t@)pa)IoQsa<O8rux@HcoCu)F?dxUzIMPJXkLUZ2PRou%k;HAJoO&(BLl
z<E;F~{JxbRo8R}<`@MZo3||#l?&;y3E8OSTTZ;Fil}mc>9uwTc6ZPj%c9z?#SyUZ}
z7di=#+~r5y%dHq<+@h7gj(_Yr{wSz_8=NNIsO#_btuTOHPsbWJudYuI5AVCz&!^Ed
zsu^i5eV#|-S5{k2?n%Q|OTm2MfZIytbM8Axa8}my`1vcJ=Q`;ikgDVY-}ncK{5ZV+
zgix-5<uc`PqCpUx)cS3T@GO1p%<Lq(<IS&^5|9o=67ba%)>Q!nm_^ldo(&>d!~Vrj
ztvtUx-^{d0_KMkS+nFK8YaMyH(#H6zWU4xl!l2M74FL5R{+X^8bR_+r)ZG~s-HT35
zs-vc@3tz^}>>`mX4>J1${H7K4jsK>I|KA&4kCrwLT7UZHk#TtI>PjOwY-b<l#|DBn
z<VSsc`vHF06YZ@|f<hGiWGu2O%;MwCaVtJag4i(7ELwm!>7T(r?54wLQxQc5BW=_0
zxM1dWU-5Av9vU@4Tz6Xg9;J0;6B%Cu{8`1k(~bY!Ii|!2Ek8^ec(N#q{l!V^|L%*c
zb%e)PxrLL*M8W%^hHX^aij19f9##pP6?FD+c~GM=@EZ&~c~gg+%7bWA4i;E6M{#@E
zPndn!_rM%?lP`fEd<>Nxk+O41o@>=9d7?(EZtoo|Bi=F;o)o+8vj5)QxCgee2rHpT
zoU(`A;S5K`-cUD<pAqB4YvX?XE^^Oz<>GSB4qr03&od3WCGM>;Wky!r{g(ty#TFb@
zy(~7+%~h$%$|e-l^7!OYba|FKmMjB}U5r!2q;EmV!Jj5uz#|0)ya>tz>~M3o2PB=S
z@k5i1K;{%FB`3c!7;f$M9X-tx>?3Z_Fqt{qmXoy=ej{w$p-<kyM{9F=sm+0L_4tX3
zi|+*~3@_B^@QgrM(J%gov9}JY<XP5585rE%VQ_c%!QBRTcX#)NySux)+putVcNpAZ
zaJ&5WJuhCI^WNS2{;@i;Dyl20D!=-&yH{qViGu^1A6IVG3rYC6M7>*k7u-JNo0?cs
zlA%t7E7h-G^W*gQ-9>xu7)pIrFD@sRb>8;9z5et)a%Q@hd~I35DI+9iX(%;4!Ofqk
zm!l`nAINxplSJ)ouD(p`$nE|X({wY0%w>gtZO!aaZ*d@kW_s7LlHB+?ta=dY^Xnt6
zI%Ji?TiZ0|UBcjH-?2+t%`3J|Hmfek7ea<`RMS@<*Cv2YZ?Ur9#Bv}FYTt5j3a=BJ
zRZX?c7uFGn)^|^Em4e(jtO!N?t}41?+z9N%D=$mBV=te=nbi(1nl4IeVEtaxg;c@c
zBwhNSlJQki+9GbQ`7T?={(i9W$pEgds|kC2{H})uwtD>B+^;TPL+|Vo?}9p?w)$i5
zrmrU)+F@>Zkm1zKj>hl3lX{FE%|Ck;q`|(Ufq;NOfk@>lNEugVb9PXGfDGn?fKdGV
zgEUQ?^xQewjqDsv=#5mAp+Uel5{uP!rOVV^++jh!eLn^R0r}Sjkm2Km%aJhjxm@~t
zG&#B~`2bsAciEMiRdl^7SrlJy&*j;X8qUAIEnfm%a`ooIRN$2lD-T*QKG7g4*AxPt
zm4Foo<iKng@;nWGsa207Qhu3dD6z<WEU`(y(W-x_)s!ter*VApC0Fc1{nOU1d&^p0
z!>`>K)vC?}wUI4zS}eDKSZn!ND1C9s+_iPiwBPlyLZd_Ne1xC(FF2xCX_Sxpc0KNM
za`h6AYb#qz&gQ-0_}btc<6R|lD^H6$Q*%$d4*ee~><5$j&P(dY#V4sG?RuBSL`qu4
zw};AV7>*WWwbf^H#;!DklT}xrRzVxj`b`^*$xYk(koS<$?B>p`3)@yduZQ#TREAQk
zzXqK;IW-))Ib4NiJv^n$otb120z91Vt{akd8gEX;#Txv{<MQ(B7njN&HokAx>{{yp
zPT7^&bj8Dx05K%KlV{@n_02s~gZnc*8F6cWIrFw2S1CE~Nf|oZS_6+JO+SP8-J~kN
zq)n*$T#Om>=EeiNiHPo}^GkV-&G%SS8n@Ek4Z6uqvqtXZ(<UZ?4UVf?S1b2t%kIsL
zV!-ry@Hs&?`>VL0=4f%3R?R9+`)b-|Mt56tYiV@nyMq}!u1CZTuMN9^`;nRJK<8!P
zakfQI!+Npu3@~=-LI-R%U3XjGpK8a{PF#r{zc;7*N<IXxS5Iz8AbKjq?0gZj3$NkB
z`@xkrz2U0&O8(~K^@`{M+n2v?SAd?P|D<W&2Pk$$KP~>{z?1kfXw90HQ#U)f<L%4d
z;qC;~oisZ)<Q4wjjXSAe&CY*P@o3tTpg%fPyV|*He2vliu2y(AdoH|udNz9wO4qP#
zUOP?ynz(AtC~zgea^UUAm4jeI*Me(Sc(T(a;K{)&tRG81!-)IA+Lcy+vi|Yxu|T)L
zilsL}PQqz^rRS2I75h><6<UM;_pdc8HiBu3z;5d|kwCX23Tsa;yr^@Aem}U`%#T0)
z&=nWV{aA?yy+@RxkLOjNHJ=dKJTIskjG#f!#!pk+yuLPP=~H^LW`(QX?8bIO`;Aj)
zC-%3fru%=ncnIZr1`p?Vp>fjhZSGnyMuL~8lGW}`%I0mInQ-OE@5Wcny=RT=hOhGB
zSdaT(s!%<=XYa9zqbUfjyH%rX;p93LJ$VKy!;_m)YrfKA3;pgp*Off`_BU(ujJ6Z2
zhl{WqTNf^b-*~8{;IZ(eE>sa$)+RmP>dl9cZrbLtvoFx@a@nhXjmt<pIa;^zV^yBy
ztd}8HJuSw2V`tWx-~DV+pjf#vm-%V>&C`k<R^}pGyFssVZ(k+;eIm{eGxxyu27A?^
z$;h#@yOT+)Xm``rA}1qRjJmm*RnHAVW4gqueNM*&Cf&!L%Pg&Zz0)RD{z}!c{i*3I
z10)m2*`!(v6CF7f%J|ZYv6erD8@tPBb#|McfX$Nn_l`fsMIG$&@oR97XL1#KE0cz;
zPoy@$%{5gU_)VdP=B3w)co58y=aMtc)NC7@SAqg*iG1nCeB<lRv*51o%_=|Z-kb`n
z_AbFa?oC$@7#sp#K~3!~qTQ}KbQ{;wWq}R9w#}1+f_lV$mR<zj#N+#S%usjxX6?#@
zlY0X!{Hkc{N0Uk01F@~N?8zd_?lqew>4yW){JKC%cR!%JF7JKe@273O?4P5yL`2vf
zaBV&7&&X?O)%e74=eIOlRo88ao@ask;p`WNCg(tVHmu%G5r4gC`WmE|{?SEa-d@g3
z;0;Fc3So+e>zjD(Y$9F39|7X$DbG-lftih!!RG;2+tup5UuT1-^Zk}$n3(w)(X(!0
zL`!*v%N&k(uspU`>=KWeMwnSu$(E1?OLVV@0vFsXHuSz%@9&<7UvZXp7w#>zd@F0$
zisyHp`K#57E~Pd3FUTQAoldc_oqfmnZ)d+DrjG7WzD~p6sBWP@Pqq5{$NlkkB>A$v
zzTfeoizRH_prU;kmbO3g2y*iZN!fm>+L41J?4UT_d}A`Y7{C5v?=$KmkIowG9cr;l
zMh=4^@hB40{xO}d&NkMSFfrF_8q?2*%KdK{Bu`r1r_ZP>A*R5q=`OL?$(LJ718seu
zC(t`;W7%*Swty>O8_vwB@A2D#ZLF==`SH{7vE21OfvqPW#ce!Iacs?2EdBSZdcV)i
zO+RJh>njF7gU@C^_j?5FyY3w|weFzJWi6x3jd6Du@RNwBP4v~fZpb@g9-O??APV`z
zLgL15!SQ^dcEx4U2XmjzI`75?Cx(fAQ$Itm4~5oI_oZBT9+iil?o5Q5I)(edhnj_W
zUX4`;Ben5K&(?EWzvbFl{cFgO?G`U5Cc>ZaG(4Mc*C=3P1;1bw(QoWsVyg`PB6(n1
zJkExy-cnp2Fd@c%1S7ox=-6);bk%qm&Nl)kKk;}c)*QY1V=gy8dj^Ocj}v@SbG%dW
zd^;DmS9ZrIcahgld^!h?ugw>E3_?eD<IjB>lYWJEA8lKYKK{`n_%t1KAlf52SiPAK
zN;e?%d&gFCvh;Xi+NGeCe2@Jt?;N|z%Q8xc<qSU8_ET9}&3_oYpriwI?-BeVSYc=D
z1=KBV5|r;xATdu%S&SFU-ST%TA~Y#N2GRndw;Lf|YElA*uXH}8rR02=Q*KovlF@|G
zxex-g-4|7IAHVZx;)cKrG&?|f>5<qL(UBYiMsjO@Vqi)ThE)-wYYY>giHk1PkGv?x
zyU;fHDjRQx%T$(WvEC3E-6GS3x@=cxu+x$Ej&&ggD}W<6j(3+e{7SB<4(m?zQgzYU
zV-CTpa$Zf6)j}ev6lulFO=)Yjbe=_f@XLu;NyM-Tz(;bhOE#lc^T<XaspLg|LW6d&
z3+_ZCl#8k|)=3gAhjXw~vD~^QX9$Z|(QH*umzCVmLf1}3BBl^iEs2Y^W|rO1T12tI
z6hkJdq#Y&@QKe&2KZ#J|wF$3RDX>&gV`GX^gC2IK33uqdRc)DT8t6{8xaF?J{pw#i
zJ6S^m+fbp$0@WMGuqq@$^OTkh0$w`%qzZXpq+&5aI;VADCm%436pkgX42z70Inb@5
zH6~-){$q$qFRAMfIY|howQ@m12hotF{X|g1M7UR_ax>0s7Ro*+Yjauf%s^hqA8-a{
z(I_KbLm13p;>+p=<)-5#qM^owRx*ArCiP|*HL@@VEh%GS8fwEC#>DoCyCf`)@QFX<
z%T!DQVv8kD3j^vNiX|qNoJ<o^`7}DCAy{6NBGhw%sE?|k-?9(2QH<D>6Lyu5`zf7@
z`WmLf<5l9F`iQ{3K1Y!ym9a53?5RY=N`!gQq%Vo;ge72ktq_+Vgp-EQW-K?Pbde3I
zy8PNR3KNVbKA<|nW>W1b{~@}D6qL-qVZVv8?~7i-6g@Y9)XnzgqmFIJtHjDo!=Pn2
zVr`S2nl?JXDb9AR2*1o1lw2-C_DeRZYAlMT<~E|Ob&ou`91WZ4GF2`UEj<h?Nn9Sb
z5S?kt8sZKFItR;Cii9b`LpX{BR|vX39l5`1p#WJ{18JXA#wCEQiS)8MNzg#i(y&Ub
z-%9r=3rlPj%K)%6utMD&>24b)_}nl?U4&z}QOk?j9tZxlM#W0UnyCB7KK8*kzc@iH
zlfM?EZp=x>&~T*Nrc%@7J5x+QOi*SD8&ee(w|I;ljA2)aJ~l(0J#xQ0dWE8Fad>=k
z4U-^T3j4JF;*YCkGKwKph|0t&mc1=0v-GjL9@Kr#Do5`O0M=RpQhv3gVU<B4YBno8
z6J;!XfQ5=&)cP1%O%)l$K_teFEi02M|M0KCep;r#l>>9NR+3S7yeM729mU}s(pGay
zsF-YFGXrUBNtxW!nq0IpGq8qtgW_Ob%NA;~tBHn~2r16J#>~{w&`QG1@DwH7UB;aZ
z!-R=wG>GPS_glU%HKDC;vl!!&1f#W+4_OXG>RuzkH=)0g4|SqNJNJo7!#yi3b}WsI
z=G^Em9PU@hgc%^lHFNP(F~vM%G>W4KVlit)tk8}nU>%j=WlCCq3nyBKqII<x3csNz
z<0sk}$88uiaWurkEottgk%hCdm~^l<53k3OvM8=h!de6B@+q!hxepN>uFOHXUtyb?
zSS2Y+A?<6VYwF+%!@a`mrn*r5b31jvipoG8_rglF0fkJInMpWY(qbUiUflSv6pycM
zN3ENIvI@X5g=ujYGSa%l9?qv`J`bibOryej)aFRQsy&p|EN$Kyh~v2Zl?0lJHr+-i
z^A1WP1gDz3Iatib6tl%@#bS(VxYE~x<w6F|G}R40oNO|nZ(_d|?;#e&XI+OZB_a&x
zq@moF5P}uk0B{C}SY;7Wwy`fyz<QKsRZ%jqxrVFHpM#sPARcOL7}B&cmW10MbfEqn
z6OVQEx9*KpRud@*C)k#;Edy&hX-I#*64!7g-RRWl(0IUImADl~!*qa=23}0JKt87)
zM^@F$Wip(okuNO6Jqdl9u??N6EP%x~h7OD=M-K;AO}BL*&IXP=%$${J3Zz>3m&unN
zKn$yPs7Z#9RSW|41;pW0v12~lCBo}(Iqh)He}xkv;F4ljnGdW)811EUQ-r|%P%f^h
z_#&AdbILIwQoj@+@8?$X0OvYo7LH2-N>B*)oM;TzU6gowAy0|w0HZE+j1HE&VONIH
zr`nG`RAK%kk9f?LQ1>A#sns<AQJ8`19-gtjNYpTFXb7=d0#*`-M0>+zn1l5~+31f_
z_mH$!vtAhKe6uQu2MYL>yMY;1mA!fL0nWo+&f$<mtV8Buhq*rySZ3$6D&;8XOy+5Z
z(>j01zBaf?BAYr#7!g<zR(Jt@xPul@xda$K#o}JZN}rChf7d|Gl4V6>h*i7bTTKMV
zw1hMq0!Kk;xbjF%${HPYge`6tkhD&kftA$S$#%{jULSh14D$F;a9qx)Ud?9&&ywYS
z%S;vm=MPXsQ)lDd_g%fyQ=u4$LnQR(!5#KqTVwE){@O1He()h%EHNI6`W6ab^nuM|
z5D+dJ<u<Oqe}_VWHJ#@@w}2I%fn}8@bO$OfJUyct+%|yW|Hbg(PSqF*SdPlkMj?GC
z>nu~D$&#`aR)z|~`og;DAy{U(ifS%{xQ6Pfq7ji!hSrN{E#p~OhWvf(1YFTr!v@jN
zh6xE+hJ_+16M!E>Hs~|WeZNkyO<}|Zq7}YK+_q6N12sqm^u$sHb$_vINOwh<jOkA_
z`*1Mt3HH^m^T%VAoG;Y<YQ;Ipz^a@zWK#_P5z<1PF6Ay4RgF>>dV#|f#Y`&C3dg(u
zOy&?G7DExDC?{(Gql2>FuC1ThR~d!1HzUTfBxq<&Ru?NxBL}A{86CMipx%!{L69wN
zc&ujm`Q0D+A!^;Su1|U_1dCOfv(k(+!gI(H4W6D<aXK$VMC^A-$O_NX#dCjetcta1
z!_$?~Lma1o0sB5r5`t`KiW}vI&aA7#^V`6BM3GlQ(Pekz!Pb)V%w@ha;<%w*rSW5t
zqioq)_wv+I_xNW2gvu<rm)1$d$;9GCMch>Pnu|z>TX8M_3VRQ`n&^e+bR+_>e{rEB
zK`Qv;1>z22DBq=<0pIzc!rskdhT5TJEb`Bq3PL$ch0a}gWot^`5_WM7OR~~t8_#~y
zL5;*dLCWKr3$bcXp<MO?bk<9Ni*RyhD6@HT=Nf>fB-<;xc68C|EjzJlEU?-uKN~6h
zakYGEQ|BzpLOZ@|bsb|0^<d2=%L^zT<dw>`zCl&G)?NKT#}!&cv)Pfse57>Pg>+d1
zqiNzRq9Yx?JhzzC=^1R*`mm^$-&=z@$FVD=#!s#z+ibV|yb<Dx%K$)C=gDnHB&to0
zm8_*kyc<!;cnWa2idGxuxH2ShLQeadz;I*kUtKdbgWauzOZxjeB>>YcpR=xM4cW!o
zK~3+5OVI;akZSr_nFBn#T<ii{nGYj3DgR#~Yb*f-epVgSa6}jZ`x?(nFQmg-N3peV
z((J}yLcHbpwP~AN{?nP7X$W86&Q4&t(zEv;YnG!9xRzi-gd?@HQ}(GNAa=6v?XxXp
zHO^y!^M#{YMyFx<w2QCd3mmFrm4nz?yV}c*n{e{;=z-VHWksBmRBa<6$+GRP=9qSO
z_<a4n#W>)Dn=Y7T%*XOJd?Z<wzrzOyp=GGs+(+tf{jM68TJQrK*YatcljU;cLU);V
z=g?Q1nl69c^f(Uc+G4Bn+xR~lR$0bFk6X17k9(`bF)Vw&V%&v8Cuux4xK{>De#Sm6
zpT4334_9ipB74?Zr2}=Cn4&qw#YFrolM=krWK7<XYJXM&U?sil7^v(=(BW^ko>|7N
zvReiqw}%f@Xo`tLTI?T~Kq2|3A^jH3izVEJ;B3%WX3$qWJ^4A)lQ;n?=r>!B;9pxR
z6LtS9C)^B`Rruq_Wgu9c^7Ch_n+;FG{>c5NUVcD;;Map=2#4e!)yJ-t*QUDdH+{Gc
z%mfL~imQ<--7Eds&&xcl_$~<##i<y+iwnFwIWux9(Q6c5<19rK)hrdN)rc6z3xU2p
zxrwbQb%z^QtacYb`czQtJ_uiw`b%-T6BsMKA-B^m>RnAUAh{vmE;yIepe6CIjBEy~
zDv#tm%}y_XYJSGU$b<tWrIf-47lkx|kw+F`9c2q8rFqEr`1}}JX&g~OFfFBSOxTKx
zyAn!?j>^4OQ&xQ`kT2V449Qf3a;5zDVRRjDId)Te-aFJhy~Lx!5)F{ric+UCnn(si
z^H`U}6KE-4*0o<qGT|y1v^Y}%SfqMpgl5MEHnAu=rfJ(jkIx%d1Mw077Jp$@a1iy`
z43ia88V*V*WNcO*2#BM9(0Zlc`;>~wrCk<7V7k%(ii78WvxbKJoVd*}G+x66GTZ)M
zl0C^mE@5Zg0>)hf4zxq;4YCyhtIy@j?<+9C)2Ioluy_&!*O+Mlj+daiNl4((uq2SS
z5RRzff*W{Bs%*{?6UdlNHVSPBCu2OoYztQx2`Kp?V}?pM-_V*+7ZobhuR}^Q;Y=XR
z<4FWv>21To7{&&$Aj@dl5oGgMH_I;>JquvGZ@^MPbVXIgHbJD@B{R5<<e9}jfEvFa
z_cRHuA(Lrrz{j`J5Lb^8-i9uxrI>K+--6#Pf*McBjlC`=mca-ilSK%u<9|QG=^>Jt
zEpaKlf)G_-Vzv#m#er^|mptMr!7@l5=jb`ACYhKD<~rLjhpt2wKBl3^H{dp@oAF(8
z1{`F7PEuz#1Jb#Tn`)F&>hKhiMzu^h4P1TK)+Fz<>bSL91#|PD8t3V^gpQbjr`DUX
zVot(oLk3q9<~HK$M<K<Ab<96XK2D>9#Ezk*d-YEoJ&gexQ$J(Z>T>G1p>4!%wdK>q
zu8#Azy@b_oqY1)xS?z&ng>ZLLe^CuiQg`KOYQHeU0FdxNOGa|WW&xC^Ha8k31=fw}
zK1MlRegSAXl3j*&z!5KIi{*&UAZK}@!z8CJYaA&Uf`ZN<qPv?FR07_Bs~{;@%n-~V
zWf5w&Xda+4)v0m;Wdy;*6C30YB28w%#qJKtH%Ja#xFsl4LDa^s9~(`dYF9)qnLUH!
zAW?uHaI}6Z&&Ik|8<0UHO3UV!Q*Q}T6dd6}DnZAfw(p|=GOxky>yy%kg<0UW)NR#=
zBd1_U4Flp(4LVYTZN{P81Zl6>n8)Fq0HX{%_c$2zz=ng#ykR+Y;DFaX$h<!d&~X9`
zKG1y*wPcp3eug`zZjAM380(Bu7?s#6!cwCkN{UqkCjNd8h0NLQAFVVJR0FP5EiPC5
zIIRIz1eL3|l^DRms0&3@f+y*Oqa$in(7c3t4EzO!*)DsSg&PT<o8<x^`2i@G&`%D_
zbk97`7@hosb{HZGYTijQ?Lde#bhHdgy0=Qfa)!<zB{vSELl`N=AxL_6atA6=4<n=_
z-4i$mM26w9g`V#wt(pVM0m!s+H1l~(p&PTZ5>c<bfKsA;28~2wK(ucY=06g!fXopH
zQn=s?5KQAjE->!)^6DnS_kT(SQA<7o17L6BkyTd}nC@FHpp?E}L$sg@A*rrffqR*3
zqLyetE9qHUeT`=0M_>TJV#3W}F&G`DzAH7<M@-!UNy*Cm?8U$wTKaJ28`0Ip&$M!3
zF#+`x=y6>LQz+QqB58YF!8Sy++5nU9Sf%CQAL404`3gFmoj+*bQSyVm#nUti%tOEn
z1l2E<vJfNlNn{E!3p5mnkW%6&EtWL*p;<Qlp%-S5Qt&`9bg)oz7)9Af!N0T0t1}nO
zrV+j6VuxuQHn(a!iK$PaElaX+$)?c)@XPQnB-CrDN|r&{LjmP%Xv=g}9RL-2KR|b6
zCRAeZ8r<(nQUeQvb*}l27)Fg_?W1=_q?E_NU4A(tRWX_F4KDb%E!31ol)b>S;Q+=-
zh8^;3H82AWX(l6mN8}Q$#rydY01>U%YX6X;q+Hs8Rd7-rEow^lL==v{4l+5c#xlH6
z3&4bK<r>sM8Bl(}0|f;N#4zOYl-`TWCTLPc>`nrhWD&~zP|RYChKGW*{gqXB&am7t
z`tUV9+$)}b4|(-l_?1A)bvHn`-3qchqqQ*7czcz8Kdcgf@jlfI2BMmn)+h;23swsr
zxPVi*R0o|6HO>y$p(?r78DRDF8Rvmg1ejR;&gpg;LLuk3GpRHHMNX+~KTn3p5lLH{
zp_&rIG7B@Yg2Nj+qWpr8P>L^W;1`=TTyQ#tFe(+4ZMkNX(Z0eSHwL%Mr<GG;Sq~e_
zt1p3OoDgLpmEacy6zg@we~p>q<(m+WL5ALiF*lUp*No3J`MKoMEc?hs0(<}_xHxA9
ztxU)znsu7)vtJA17oZ}@FZczB)VhJkgt{jCw5lsD$+Q<MJP122d38tjMGuSWf2_i)
zBGrm9NebO`Hy&uYpp0+d_shTLP|^sD-*~_?WYTE=MhJqz02|mu@;d8gg=O$Ss5y~8
z+{VI+g9`(vFf$lML2NZmyD4a|1_P2UEWRLZUkI>CC8vFcxJF%3u>=lKuMTLf$Reej
zVJ=$+nj|qsd$7CyT1lyEQV_I<l#)z)L$N`810YYmBnNvB(*L2MRQ#C?1_Q~69C?eT
z?2>0GY+9}|0T?n&Yv-V!wo>ZB7bT&BkM_h)63Ao!Hb|QmA|m_U^wLFdT!PV0vf%r~
z7KVoXm`=&7AptTtx7fj`{REg%3N9HrQFg2g({{`p^n|lf2!3KlS(l(rgp`Fw$=v{p
zsU#D=%&2l=>E<x0;;~UZ`xf*8cUt9D#2ZV6s7QiXo<HP#Uz(+u4QNS1C$mb{+;$P7
z6t_S5m`6rX&9}y@vM$B~xm6<!Jk+hSZ-N&{5gLrOHcF>>&9Ha}AUZkV;?>~P5DLf%
zqoxY90nEfnviY76N(*Heg6Lq<kD`4jmY51SL6*d58hP%J!Su9NmF}=}kh`Qm2i5S<
zC?kPg?Bk@Als<g`j*{M4-if=yB?vY|3*JJ1utm(YBemeN?=B`~bPl6>3(a{_HbO>)
zC;Tr#8Bh}&X1C}In)wjli;>H;1j`{SCKLwaMga;Q!OTQSfq6@yWY|7c#<M}Ju@Vy@
z9|diNNWysymcUn2W)y4vg&h4q{n+6V^yj8{0p-~~M1q1Ukd{Bm7x449pi3PR0<fbh
z)Nv>TyS|_PQV0g1Fy{`jRLCj>GUs_hh=au_C@+aXjd4Xxuh7oYqY33xBHh~-1xtHU
zSkll&@9`#C4R%nP3dzF4jHyQ?QtsFXGee^5QDTX76Gy=7bX@sE?9K)Cp?Am1hBQ#d
zqOvrzSVk($hW<iE%gXmfRB<U|J^7_|Bjg=!D6H%p4}dyChPaR+S1z+s2o3H~m>bWF
zLKJV+NvxHaJ>SU{I2dO!MUwc=*(>rPc3?L*7qzJVP(89;_7-jG(#`bhs{7&R&Mwd!
z1^e#p?QJ>aMp)YV`ug{64)Ky<*FeFm)o#mgqy6yYXjiy@^<3dDb$8S3X>S#=asEkR
zQQ+fV$^Ea6I~*nd+uv$f#9pr#PQOEbnNB_aNqH!^+^f>u?Dw~+LCC#eGudGA!HdoL
z-1?o|d^G;Ii))FBlOuy=Ua&$}KgZq;BbLyP9U#AF*8_~&$2{R@qX$GPoP2C1Y{-^J
zi&rKe7=mXwA6}1_<CVbf{wlC=zNf!4MBK`ULoc+Z$4NfdjWFZrZC8OaZQlElxyjbO
zZh5yF`C03S?RX`WC+UV3Bjn}X+i*6#Y<xP(X|Ff*vRt!K-!pWOLUbYSu7`yO{K^`B
zCDE^FBhiJvhFo>5*{3Ql%hc-*pF9-r;sKrcGG(Ev)R}UCHeKJK&EgEhQAp1q6^8EJ
zJbWf@jvt0@zC3Q*vG+~r9?g?PcZ6PmTP>!Mg>S}|O<d&mgxd4Xu)fuuPngz+3ayiu
z2H(mp-f6cxlip#0r_knJs#CXp`rZ9Z-MQ~B^SGx|o~JguRAe+L{tGwzT!BQW=ywc@
zRM8i;h0}ToHFRhn54T57H?m4En;x+&f~u;A;tqMI#|Fi6iMJQnXo_b3oDSB#wMCS`
z>S)e1nberJ)qB%o4IImk!}YZB%-|4d;li47NSP-YB`O?u1v`x~1u7gbg{$M8`Q_N|
zT+Tuss*XgBwf^VIe)q8AJY5~?sQt@h&dVin3k<E-dlXL-yiif|bxvI?<98dp+GwLj
ztl|3=nxW`6^NkUseRAC4_vU@hdzK>_u`us2I~xJ-P7iPElOs!S?WO7Q8;3NR_B%%=
zr$H%H<VdLcceW+1lmZhrK*zE=;<E}h2GC#kj1CSw^yAHu3cB@D2qgym^Xsr8pS!~z
z==HMcR~34K2fEnK_jzseM>IcE&=&I5hrq6aBi7+cL9f~iMg-r9rBKz;K++}e**b7V
z3RL;{dqN<C)^GMx3)|PHw}-FeWKapa5JVsSC<!R|?1b{*K^7V_qXM@1e?uII-jV;*
z=gOaO`t4m%I{L~P`zQ48^wUk|-y7T)&X$WcGJo7zGN8Z-N@(o%%y20^(HxnGD|9?P
z(Ugu*iS)=h3bT$-O6rqPwSf1_-^<kY?jv9S&6!@lk9$4-p4Ybz;kzbW{_}pY*?yA0
zp>9_V^cF+Y@=rmejB_{{3RfZTU+)R-=V=|amzTFWTnh6~RZcJNJtLVO+g}NRKw((z
z#v($oufw<d36Vd_uEj$I$ltL032{H#UJrfHMe+z*)X@Q3p%_67y}8p-dwz&2D&I_O
zZOfFe_WfF&^mSq@uQHF|-va#CwugS=<)mYNbn0|=b9#6Mw_^4#UM!BTTXl86ylxYC
z+Oq!?J`X*t?!`M|n0zZP>up+1t@xNTNmWr6@Eh^)K7X`Pv?0KE5`|Q`?%OetsIJWk
z1wG`i8asJ+7huTz)W##GwL_wpm1gVV>G=gI@8IE!zb&}x!i=;AA7M$$MX==HoyURx
z_Ddt|2zwB`->I}evCVET^^OJ^7Pzc}pR-&pF;UN5P?3n5X5?b5LP5cxenjLJo9h^>
zw@c6q<ns;odLw=upn4oYzYM3@Kvip_pm&tdag^8H&FKR2c?5giwt1~4X&*GOBuCR$
zV`seYhkk-`bL1-SPX`CHJ?|ftJ~<iIHTB~1PvW_L9K`;<i`%bGTpmVzycf5xN590e
zs{OU>JmmMIZg-MkWu0K@l#h1N3%c@lcfk6C4_rHEzjk%QpJdxl;PqQv*^weQHoW&z
z7a{-P_IDiD&fU}%#(<$82Z$RBimNlfg5U*?uAlyL8nYfDs)I^0ON&G3tKuou8resw
zUU(=P@=p$S!zLrSKu43A7dEA;K-1TWtdOG9EQS-dgpaFz^i$TQb`Gj~MwHH5L_+4M
zD3SI=1Z1KgRlZIa4i28S+?hMHcdUE=ocA!{-Zt%6G40qe<>s;ID3iflmq}fhF<X~8
zqL58ZK5@)EvCcg4&OF%*J82q*7GN~rzvO=tLLO*nYJA2cHoM!dyW5!O{nT=L8YJmh
z%_;@dH3!u-qpm^_UwnPU5~q7$+iix8-?#AiV6)?0fsW{oe1)ZTg6<2k0`1@W%A5U)
zHw!NYQ7B?q&Er7WPS$PqcxL8(@;ah5@6|o#apx7V`_1+I!9FC-FQmxjgrNzJY5y5M
z{?LfbMb$p~nc&=$&klM~XUojFAxXPW0>@X>lrDmt1sJ<lH89!buO6A?@vR*LS1Ew@
z4xorKsVOqDRwXJ^^(FLu2^%yMmU`&ONMFU?uVPo_m(cc41Dc6bUG!P_uVTwrk@lbZ
z+J72QPn=5Mw#L?jQHm8|=Gzex$3k5^BSH5o8AIj^?fv}h2~z)o^O+uF`#_eT9<+RU
zu_^7->y?f_#fynJc`1%D6?3Uu@w$0;M3k4UPw;HFRP64EKM7SEtz1~)2)$WWkyU^<
zn`~u1oT0O>-45_oR*_STJ04?WHJ+@osnHe^ub?ialypA8(QGhXW>=%nr%*{wL?i2J
znNPZ=wh$B51fEekK-Z3sNW0?`G2W?}Nls{6lEkNHUM(l2U%#*c$h%q+GG21jP%>9P
zBS&RbUr+*_>X;I;I@FXp8u=l+(k=nZ8e^!i+4+3+GuWr7x~uHG8J<MoQYATgf};zl
z%9QDzfe88KZ;Qmlxuv3CH4FdL5RfU!E0D6PbZLrg+$mFi)zJS_Q(}Ayy#^>5Q;WRm
z3FZ&JO~T^If}eb@k6Q*B<v+XS?7QtoQ3=Sy97*4&D;aA0#U^H&Jq0xr3J7cp{-s3V
z>#f<(O1PVwn0!|net(6T@|OC1itu}B^V93=Q#i?0zhTJIB5=B<;pC^rkBSdo`ZDv^
zA;fkETaS<??T?@FwL2UdXf^Zj^_)g7;4SQsM!^c+8UeMFKy@Y@73DT#?k$Ctt>Ys@
z@|-&-Cd}#Q_O$5IH(nk(yRcmAzfMdf|I{QNy=hO3Df#B)=5P$yvU7K&r61wxOiVh(
z(3>7niL-#(OC-EkzOqR&D|`4zC%hYxj-GoaOxPN!xUN@Nx7Jg8@$2-{%rj8PxUPFz
zwIY*yozjwK&{NMd90|GNrZ%s)#qmv<s3jP?;*Qs^n^$ZOIi5RYc={xq+h-;#ud@B>
z8b>HBP`C3yxtFbcl&utB+&fvfBVVMc`Shz^;K6EQ(zBR8pt)#=%i>F|Z8~DHkMu77
zm&9!UpxrZ<GyR+HHu+!D_~n|@vy>NqXXl98za;ujtAB2NKEM2&_C6SlV(4OT=&2ZM
z@jlRaz|?6E`KHRTnu6V#23_-&)1c?pP^@i9cU^lmrIz<=Of<`k1I-U>hyOI^Xj$<#
zirik=69CbAt7s#B^>Gyac>NQx_c)4vaIejj^m&oc_$>zSJAwQ|mVQLzXRTUf4a>kf
zN%8XNZvEU@m%Wqg(RaJ3RNdZJZUbJ^Gj28BRfHp6p4@3JK@xe7mMOy6)ebp)`IdgJ
zY5I|!ti0q>ZLOn33dohgn(D@p<gCe5znA}U-qUa|aU4A;2nY`Z2nfl4bPY5zHT?H(
zfrE*HcBo89!B?*|Ib+4)K-)|(AvB_3YDf`_%97L^>RLCH%*!<zFLsNcZ;xwRbkxCR
zprXX3&F_bInH+LVQ;b99Hm!2CXhxpStUi2v+`d6pqHX4*v>0Y>&JQ$_Lsdp5+0#sw
zR@#H0u{5`TmXr^^p=p?DCfq3Jv!HWbqsnX&?lRgEzyX645jIv3qE~?GVn<Yt>K3uZ
zHPFrs<tFA}7MU$eKnb8&qtx{`mY+q8b!3r0Fa)=3NvLTHnER&qv!|vp?}qv8creYA
zAI_au>s#`-1nsMoCaV3^&@v~<Tk|2W&Nez!W--x)dD{0%5N?UbbuCEFYKXfC{{;WY
ztwi+WG`C(PG!c!U8>*IFX9AS#^TgyD7p=G80nzwZnm46(-CtT3;M!@Cv7xAvizcZL
zQ$petoTue}H|~V#XfB5>;A(LuEU75C29+ejxTYsywVBu);In@xTe3hv#$||K8c^Q{
z>RWdl7F~JRxCF0yJK*Ah4_)j$Gamb3mE3ruM;4(V7}=0dw+dAz!twa(`W0%4$(jyY
z2IgQhyz=(;J;k(iO6P8Ok#j*Wae4TO47xD#j`f&9JA1k~dHCFPB_DIIy`7NgM&+dG
z3%0F8*{2Cb4;)ao6aFqtJQvRrn7WJgz|xXPzg)i-zq25IcY;Etfv%2oQ<l9p3E(U)
zcJ1>C`%L}&nEoz6@!8t`N$`5J73fFxQhIW6fABH<_u<i6PvYv^fA>-iD6$HS{DLA2
zI0y*oe}tm7osl)Y`M+~f^+|G&UuQ%b{G2Xr3jid*B(R#OG=u(HHu1-Ru{;@Kt*0cF
z+aFy~Jg=%A>Uo`#grQqiE&ui6d$slaYh7;GA0bM#hyIvYX{Wu$?N9qA|Ay)J8YiGx
zBZw``P0#?0Sn-$$kqs8pS0=e122!L{z6k?EKeEwh((ENsC_RK=6ttMC#Pls4YMCxI
z*ng`j0*#s==+TlAj`5Nep{Y#1k5H4hgN_kl#BvoP$3oMVk5ycgmq3S;AnXZ>n#auK
z)ViR3%uG?!w&A@druWVkQNqedmnnn$P@<!&>-{Wp)+te@-{zWfY;OXe`a#wxT5o?!
zT#7wBwLl`=X@vF4I+(B2b}df$X2E%DW?;{U0E9InR4C1Q11BovH8m01DLUDUQ;?XR
znrcZ`hDNuEo()Y=SLm53P@OMvG7M2`ba-0L)wH(<IgG^7-GYC?;N`R7>YrT<{kXBZ
zK_G(_=IEd3iL#wY1~(mn$xmzN27D_C>U7*>UDR_Aj6m0_BCqMpcD~%6^2$lqaxood
z9nXQphfU6o;kX;atQ3wL3)H*bi%K@>v(T|4ZVI`^rGf5$U$6xXnyOfy9NAs+Wo7w?
zqWXo>wQG%Te$cE|8uLxZY;=BpYTl!`lqxZf2dL1YOiej28%%c4g;e7nHe)^5sb8fN
zSq>dS%bvmKxfyqFlOKg>9*Mw`r8)=r(J=O5`jfzMTvZ(8Y4hP$ETjnURr}}I`mLBc
zV4y1?gba;ix8ZF1;DGs`bYJj1-MWsx!egHYj-m-Zt}tdH=*qcs4FpySF@}?by_NlW
zny}wLE5t{}9xC|ZS~Y#(>w;N)?LhE-*PFQ;0aRO-4fgFWNN1}Fp;GP@?7ssY-;5I^
z`Wpxc{g*TK{{`n78vT3DtxgcM+hhFV+-G$8P1rp4d_2{~7ENd(1QkWCZ<unFoM5h2
z=Oa14O)Ebhn-djO(7h_{ay+iQSW+4V1HX~CRAsM84w-Y}=|qPt3)Ck8N)sjwnfe<W
z8A!4ABZ^)42i2`63j2)Yay9}YSpA8uO1@*ugHtQTf%yTCTY`0Ib)A8czA#nR!9KeE
z>S709Y)c(mJ@@^Eq|BHS%;2$DwH+ByXt?^DM+OqPJz&$GV8A0T)kP#&TA96W_1*ZT
zEiK1#OO<{G=3up4c5n=$S9ofcB3=5EW;|xt$g&?{>ujMzXDOq>He2~t7t$kzR3Hht
zgBr>$n|FM)^!71*XbZ!JhD%*VpI4`9P^@YcN-cE*b?NCEZKyIE+K$Tjl2PIC)@oGM
zJAG&4=9J;<wI#5;crYsT1SUwW;?w8_$Nh(cBTYZl{C#3;(M<)N=j8jJ><P8$@zS=z
z`{P5Scupt027FTT!u*`+PtNY>mOZw>mUq+ZnB`uZsG@xeE?n)IM+mnrq_>>6|Dox^
zdfGJiFHP5c(b|93wB3KQt}bzcv1|XO>2+8URs$~ON*k4bY1$3kYZnm6qVI;!(=a^K
zbm~_tJ69nT`M(vdbcpRpYrW3pk`%S-%<UzRx#jmel9adEm^~9cC;MG4kO`5t`VRb1
z(<mE`!0PsooH8bIk~$69h<gRHj4Z+%q1Yo`)UO*`q^)RJeJikxilF+a9V&+}JqLa1
znW)U<OV63Am19sqjry+NkP{%t$pM>A=z}UrtvW)3^1pQTD;XjWS|@MqCf9d}t5tKd
z*C18dU+}5r_(wNhh8uWur-P$;+-qUaVodC)LtS7-qhoHF$G50RoXendAv`qV8U7q`
z;6zuys=78*40*S&uJ(WUKGczrXfNMNsPFHyMX8CSPE#2l#L=*{)35$cgyYCj6R;Sb
zF^-|7I8LWJKXZ(HOYT@-I{SkfF3F2a!jX?{)=NJ$==u6~>&)kw!5n?hzyY35A#!&i
zqu;cw+C{!%;EnC9A0uGe+bHnQ_J#S1rT_tv{)(pfm+)T~od2VpGIlax_?LCs{0gA3
z{{IG0{J)g&PoHg(tE;_VKso;c%KzE+{nO{yPtVE1%=W)H;h*0Bf5J0-;uWpFY~S$q
zJ5|g%8C!T40=u~yaIPxpXG%;*@WtrJ?c!XCgcvsk{8wJM(t&_;6W@B5mrq~r>`2}q
zJdB=o$a%}a@yg2BdBiIQfxbjB_v4x51DGDjPgwN6E{cn<Gcj5*2vCuBkx4@6*aJmJ
zo0(yB1|U3_^+CAjSN1WYlpI*Ui(`WBlwKK-Jnrxc5;A#6WI{0v5${w2V}5fg_|9vP
zWDBie&p|%tVUtR6U$aRfNXNLn7VU{j5g1n<?AhvUWn0cZ2G~T0qseS0-b_HoC2`6w
z44xINT(|=7@C}=Qp)H(3gZB9O7DimU#v1YcVAHdl76y?-<m=McxRlVX$9c+YH1HfZ
z*B>ZsOTR|)0EvnbOLk_ElV9#57q~g`4uAlgV3^mKs`6lhY#R<m)g_u&`Fm6I=CbUW
zM%q`+sY*u=M2{D9Z*<wSp|Q@9LRX8vPbmxRA9iaJs5x+gMzga1-{{3W;=4_L%l|wL
z0;`cR!zJa*E{2dBBk>_c{mb>5Xd;<1B^yr7yd5pS1ievHIXI6vg5IqfQoerh{_>3b
z=h<$*WpkC=`O|K9!WStQ5EOc|FroL~!2$7Dm528o1f&u6-?7O50}c~M$A6EF<P=4_
zJ<cy|+);^Lz$)W4CEFHv>&i<>j)~%;utW2ylqRExecOiMiOzmdSiJHzLRHsa|9yjE
zIDI9Mjvafk6%3Ban3t7OUVts5sz8<Un6ho5;TnmTg%rs6ZTSYpW)*X=!uT#YuyQ)r
z@BQHA_7s&A7REr(1MiiQdQiZ*;&;u0P*MY|YmRWyH)!PKChrmr%;2V!>5?RAXU&_a
zlss4C+k3R8zdIT>?n{@Tyb&-dCopXa3X&Br3xSep^;w|rZc?z|QT@uaky*vwQoF(B
z!N|2Hmhl#2f-=exLsS`<G<3lXYja`Gy4&!EZY<=YDg~NDMbxX`6G`J3h*UDPC{;$b
zJ-bs=Q)_->6-{&&WIZk^)FPC2DvaYzdZoBbJ+am@!}LlgGtKI})w3wm{B?%j${sPU
zps3mc-)IM80O5!LLcQeg4{3g6O)?g<K#5}so+thwH4o7JCXQXYma`EX<ZGpRW3k>9
zbN-Q<^0DvbHV}RhlXI%w@|Zu;yw7N!%$gkN2cqkGYB8QbtzvCCu}69v_|4&b0HTRF
zO{_qN^7)aYEm#fq`my7k(Z;d%K+M$`(TG`y+rn)JE;OP^CN%+#Z2$DU+6hMTQvB+-
zu`28JAKUZia7-i;R(r5&|8k1Nh=T|R!=l5aPr~T4Sdp4c<*c}YtsiB=Khl3BOya&1
z-|UEOz3(I3$w;$nu_+33JSTGQ%hrq}RDh3G4AEkf+kdVZar$tL4cI!0f_fca#wS$J
z0O!eU_GYtZp|as45#Sjb$fuM8IBPDGWQk<HNr;saTmAK@i;>e59O1?5pjo}M*dhqS
zeG~cRn}oNG-%&+g>MnBmo5*qa{ephNsPfnPX~(C!LB<T5ovzWy1wGUIS{+bm+k@ei
zczPrp9m~goFj_<)+<OvZ`(*65lFFetmG{#6U`qedrJTcRfd2Wb-O~Extd3)M=0}t4
zl2(07#7Oo<T<xE}hhg#s$&5Z!-cpZd!aaV}g;AozCq}$b7ekO~0!8+Q&Kcx0VUE)0
zYtX3S{$HM89C8x3oXqu1F%I=`@_Ss#FbfstVGe}`INP!tlv~M+)$-_c2g5MJ3^6W}
z59lc}QbR|jRDh`!!eLTq;l1_Q-y-#B8p&!XNl0;}2VF!Eyxo4B%bSHB^se4u>@&k}
z7`m;k2&P)$)evc7%S8C)V`^_XBCSiF+rG>kOxEQl!r$x9xCh+o??YQ+-;F1BWPWAD
zXF2|U)siD4H;S)e(BkAA*2+xln}4NqlJgicO$pYjJIT~8!Y;>!2#TvV>uYGaf7w-$
zkZ!<Ei;V0EK|*znZbhJ{Ox^A<?SOA>JtSFkAvxV%dLLr*J?7u;;Tmnbyjy#*K`r#9
zatNa3(%w|JTk`ww#N%B{axDuF0@C#J|Au(XO#XvWy3q1cT9-ii%#~*{I77j<u7f86
zEMq`h3!yu3%CNVuk5w33Sf9j^X(WK1hg|t?-o=T{NnoXH*i;n2=*vI;o%s9L>aet`
zmNp*!mOIMU&~C4!=<)X8POf)-ofwmz?1}^jF0}LyEyAbpMH1eW5=T@bo8$58A3Pq?
zKUw6gA41t|NPq@8zDx*cml0ljbD3YFQPYwGzlTiv+BP&v{^;#y$yDQ_0I1R_&<=`f
zQse56l!R(+aEb?D!|>%uwi`h+6KEJ*((Q@Fpz5pr0fh^orm!o8xM<*daf#48d>%f$
zSOnuOq*=p1CT|j0AH?n!VDtTCs?c8BEpW(q&d$`-)U1fAh$P>d8FQ-c<jxGatZcdO
z1AKfeEV3<jCL*e-WDRamab{Kwg@*I5Le-#goe8*9VQ{#kewOX)Bz|ZTVj13!kFLgL
z`M8UEu4~z#nLJCX8^aER*T}_UZQ)cAG>L`SA%-U-g~oJ)4D_Rr(TttixbbvjWFE_B
z1#9c+^?v=`M|O?(>1j${v&f<;EiK>?a50T9^)OJeJgCP5H)M4g0E{b&!NkZ&=>|z5
zQ2*$_-xevqieB0<iI#XFqmD=bDCXJ4R{x$=(%%}S;tV%=$-meik!B=xWaVWYG*w_p
zcuh?Ey9R=y5pJ<YKEioB_nme7%^wG)ZvMv&d70UIvtdJm!fBfB@4-3-e)vnY;0YR6
zPVww?Ym9Vt0XTBwL6d5?a1S=dZ9GKXUQms~rMcXwO<Yv47gq%RYTF|a7oaMFr@6_k
zzX1VcQOLADiy=4B>I;UhRt>$0hd1B%lJ@ZzB|^Bz>EbL*mB^u|%djf{Xc_#5Y15ww
z50br|?XtcpEo*)~CQTzTh8>;hSp%;@8C2=@Ij=%_U%L}^4K#FRONaXG8>T>pm+vXK
zCfURjA-Q4wz1pG}1fiV#I(RiLX?a!qda;)6#+u}jDV;KrtKzJ5e_e)+IY*{XH!YKK
zk8d`>eyb=Lyj$c7VuqvZJMOV#GrIV2pI=ZLbc-=Tb{7|cZd&PZ5C^86z*$@A;|~7h
zu;(Fr!i#L6Zgv;8w>#wevQ1)g?DZYAul19pMFNHfc^#vzJWb=95h*{+R>1S+`wr0C
z=O(;LMtCMvO7z{`#&MPW8+EyC$=fvCBRsz&CO78~T&~`g2<`HfGVfsIRee`a9W0u8
zq}$G)r?8j<>VuHp4Y3wgWf-@AsT9lKKTLy(SaLv(H2OStw1yjYA`iR}(wR^PyC}nn
zah#J^!xaY9l#oc6?c|Getu9L|XtDbjD3c{kIyOnBz23EppfqO4u|&blbjh@E=^Er(
z*ogvdY^WOm6nk^4c*$iM@qM5AoI#z&k>yec{g9xL(MC~(hYaK&zW2L-{_Yv;=iuiM
z_JBQFHd=eyBE-hVDpVg{ZxX?^YQ-g3DYR^ynmNtz;?7*X{_ZuXH{&lZ+dtWGP2b+b
zEJHqV`QA*0mRGTKGdi?#B$l5!o+Nj193m^8xYr<&NwtdfQTUXEJwsEtSg|%lDkBWq
zq5LqiL(unbG#eAhBU#NU`fbjC&z9a&h%6ksjKsT&Wa1Pm_Y}$%pQwUF|L@!^^M!o~
z_`=h7<EQYmXr-l4aNp|#F1CJu9J-up$<V)=&4zUw?5=JqUgMb(yWemDme~6uqrVv=
z0v<Ef(?gUJSO554hB=Z+r4tR1QAJDC63bOZ6*JDacyHH<+h8Q9sU;^bR7s#KWvHxH
zlCD4R?u_7V`XdBGLJ@8RN$BF&a+a)lYSHf}HRnW)q7NqGl97z}0KgRRrYLMP2W9!i
zFDJis%SoQfS`5bDj3!kSC0aiLId<pbjN3`ZRW6q7?=x5QzbVSxY;ei%>IX0(3fbGG
zW5ccwVe%ZDF!S6RF9@=1kP)QR>O8HV9J7N(f?wU8p4PZ#a-xHIP1ZyiTI!^@6tH#l
zEFCj);CrCjlPx0rzQoh0jzEc9bxI^-4>#o@CUxo-&~_~`TA(UoCD;jvjQJH0qJnFF
z_2{GP=8<dl=1^FLbG-a6(*wj>Uf<kgrdrqTo4c@3Mcm@O4g8>FENNFYi+pX!S~vBu
zWkM{{H56lNi{ffYKocg)F*i%g4-M4sT<8G+3570zkS&f1N(lI;r-l++I6(_oBu7i@
zcJE`^NLThh;2PQj2*)(zPCaT+(8g=S%k(`q=LnRmt4glKl=PZujZxQsQK*(@fFC(>
z5>TKi8TqB_kVtCAsraOg<sF~dxFid*Qpw0|#2GPV8@*S_(*|CAKs*<8q5t?m#0ec5
zwgiC((%iy%Uty~{xU;1i2Pju{1tF_oiaxhTYa5Ee>@c*ovX3j%d5P+RrG#jbrH&gr
zgSD^6oFqZmo9CRHcc`(<fC0Jr@AL6<gMmD#O83;>QU<yaRj{3r5YFC~v>=2Q;OpFc
zi;z8S=Uj{Vr+{!vMEQXy5`;)EFJmw}M|wiqWk)<PxfQ}IzIIFB>=35GGmUQ3KmJNI
z?X0t<4(hV$YrGXnfgI~Y6lss$UVDN0ByauB4t~Ra8m){y!h9{Flh|^VDKkvg>~!a`
zM}e<W5{D%0Ejs-0yb`}i4;}r$?>o5RcXMP((8d?0fFb-z&{WCu-}q%U1S-Z~ib_Yf
z9d+5bc=gP7&TlQEiBvcTq|dZ_=zB3$N?MkZ%DSb9$QzWoLNI=rVQhiv=2m(%{pkKB
zwfo1U17Ndy-m}rsSk{jI2wIk#4Xkg{v}DB-GWbPEH6Hsd$KRh^5QY;NX#qNogn{Aq
z7+p4RRc%(Pu&Dh^#c9d-zK1c=6Z06%1wRd~Jyvz@#|CMy(CUFc6oa+V?NoOT{O;M{
zg~q-=RL@F=aBS2NEBry=_K94cSw4VbA2u>T6cw(GLC=Ch5ReoM`}3Mz`LJjq-x%4_
z`vC0Jmi!WLAzADzVAEI?H`;Wtrt^jqRJPqEB((xZ@Q|}4i9{qG1s?{Wfp1WN)CNV6
zk;V1Bo!KU3-qd7`w6vU=<(fKSnexxsvW#ZANrFyu5^;s+m0s=L-eeIdi?Lcc_%~{#
zZ+nBSdkdQ(mo>-77@ZPWMI+T4^2|{pPAU$W7mOVV9XiKWNO?&#oU<bj^)ngI<Rna=
zJFE`zxPj%{QvR=?`5sSZ@e+_OS|6lQ-3!^wkD|X{&D~ejGOE89bF$VO*%g5-hMCz_
zIZ$>ZtemRFSI?i%=lw6n-l@sfsN2>|+qP|MrES}`ZQHiF(zb2ew(ZPXJEBg-*%eja
z*%$K%%!@JJ(OP?2@8{v4>FKJdONI=QPTvU5mx%m(qI;E#i~CB{2OWz1qSm?RP2o5y
zbM&R%gL2^|aB@FBUz}oorLw-mKdl3`U~$1ZkPsPifyj?!zA3!`W5Zr__QN_uS(55A
z0Fd3)ip?cLnM_zav!*(q-_s*C{Pb?N#$p6L@hxqv<^iud8q3+y0xEjuS1~+RM@GX%
zL-7a#_~bCTC0#6rBNb@8M4bFk?nDhh-XP#r$}6Bv7QKpvR0Ihu`=lvg*SE8=;Dh^=
zINRQQO|YOingssTzNDB~D3$iRM#`*&CrHlYVot6K`GXrvMPVZoE)zk0)x8iE7Ilo)
zzS8DbKM?A;bEK=C2s0r7&luDzn8vbyS#z)xr;5g2^?Os4fSgc<8H4q>eW)Tymr>`c
zIC$9mGpw^vCljVpEGH2em^5OO?-s0Ck&(;DiG(nTD~2JDo0^6cb+*ERa#sZX->w-E
z`V=KY-c&gYeVwXqBc66d1bVDnZ{i*;&|3*glUF7EU{wPR=&Ph8y)6T<3w{WL)>7R)
z;O+KGV{Ju=$Z^9D+L^HAEbgpSN^51`y8*qa7`3h|*YOCgYHii+DP8eqMr}@yrNmg4
z4aQO`6aNA>Mc%||itM6VlQJIU_3yf3blvy*S4%?kMGeyD5=)_tI@N_n9L!~GqR2_N
zb>Ut?){7dIz|K_tnLcnj#s1^-J~6{L-Tw*wc=dI(U4O!BKd;pRe&`5=xyx~i7075}
zAS~(}opz>%(nTck_Gf1pd(<m0`SPOl7832sLcd=r0@4%^tUez9Z0{ErcM1+A3Mlvr
zb;&eXzRsID{H_2JD^DyK(&WQSI9uK&_7;PJMy+95=!YNDFF%-1exPfRogWgGUR(>T
zC#X6qO0!8`vb_Axd3pOFWqW*Yb#O6>SeB!QgBL%wr2+2c%?g8zZ|~Oo)SPU`<x0g4
z_7;G%^0AE;4^Agwfbswj97sly`q`S+l@T!Ix8)sE^aokiO^bfx{r2>VowSt|orl!x
z2z=bfwd@1MGj_Do#1sBJGz$G{vzn`vm#JOTvK)pJk{hk4lm?Gy0J{u-?Y9x-A<|9t
zO8gGPP+=d(4{8+5x801a95G62*Zps?URU3PlMJtP%*Vpjj3a*wimaEPTAwaQ4>uqW
znrm&O*s9<=U8($?|9u-{pf~VRo`J~m8kzwf+M3_^z11#EUm4^jeQCP}+d!2=aE5Jg
zCOg;zVy2$x+Y3Fav*fF(Uu!GW+ZmFOVTIu@B8i;XddXzcHx1hf6EzPe=j}JGF01^W
zvaI4A&NFTBFVKHiYDUg5&|?2`Gk%2siGOI|WXt%UJ)&kcExS!N6yMcaj%j~cCY(Pr
zgZ?Bkfb0rPMzJ~T<Doo|O~RX7#uB9E#W$J1Jwl30!)blz^1bRre7;{ZA*b@&slc>t
zl8vlpQ6<4U>+9?H=MuN*?&^vdW-J-9VfM3&y%rP&d6Om+BH$kmFv!jPeZf!@dFD$3
zM8mAcgfbv81ad?Z0xRZ*%%C+`+*JNzy5M`YEMce`LWz=Npeo#s;~-NS(gD7Z7GwdW
z2&I)YrX-M*+|2DuN1!qSNQoc|86*&75VI?hP<kkeNwDB*Kjs&kj0q<=>qKNEW{uhn
zD638ciq%?@84-`RukY{eNrkY2LpjOx9i|Gc3}ubUl^FXvqwf)<2H9dLybzf6O^sjb
zu(<WYin;M^*bgpbMr@Zfah8h-1OnNi4n|Kx^)_kY#jE*NQ)Amo*(3>>4j+pO^yweH
zd>=*ByWP1jLFaobK~it40S9ITL7krlkmkU4gUe<8*Jt-LR=u$(s0$u|gb~IDb8BpO
zVynk1u|=!9??vE2f<tc`@V0njYVbk#=2*cNM8*tqW09(z*1QCA_aM~=gyLt7pUDkl
zPSFme{B@w3+&!ara$)^yNJXtW{XGlLHx&}IopaD@INCAY!SjdqXDOk?$j921?T}Zl
z#J{s_Z%GmikT)NL`)^cj=kTF%$i4c9$|u}_BwhBpIAWBIiGiGDB@UW-%Ux=L2Fz1=
zq5>F71F*0IaeR(;x5*TxRo|{7o2kwD4@1j8b{w^^rc=R~n$^+&RA>hzW|&(R+8$MO
zpn}%>ALP#X0iqDJ2=Kp46v-o{T-1STaj>jg9mqXC!1c4O_78qtR`wKGt2@n@G1g}m
zULCX;d<LS7+>I4zBF?f8>Vbuz+#UYqFw~Kx>_`<|=}MpzuoddT%xXLb2B*Ty)h(PE
zeotX>Jy65Q5jNgWLwo&VX$%@UM;B#>yM=lXc1QZ-)m<eLBd=74L0(h0n)h>A1u3>V
z0c8V4vPS#ZQkH#M`!(&SPlj^xy8a_;d@qun8E-$OY$bx=k|od;3!AGX8rPE3D?K5J
zY1ezKR@fsz>$jX<M2SD5tJg$=wJU3E`cEOTTlU-?+j@qZ@$1>Xuuty@a|a0Wsk4E8
z$*AD`^QJ*O`9J8s3(uX7E1RADVEt^nHD|`bNhur*Onf8zVICt8-?Fvp)R)|UoLKYr
zzmM;feWWD60CsURl~*cmr^_d(v8_AYlVxEGxtX6qa?Ger74V;Ir594bQcBqOGLBU6
zJU4E2i|P$p#hqo+E~7U#a>y+)ZWs3x?YHa*jW?hC)5)-#y@4w?4LM6!{t`CBur;ey
zFDZ9P;NwzL{M%7qurc+*A&mkWr%2oeq@IK#sb?@jrge)d3Y3^_ouc(RREfR?H6csv
zb?C_0zMB;#CF4FHm6b-<db%!(jVPfn0TQ3Cgj8)Hnt%bGdWPBcx0snJYW1Yj@WV>a
z2Y7GS0iI8`?$K3i^unue4(j=@U$;{<;_1btxJTd~4K2Cc%>1EOS)2oH%TMwpJa`ts
z8vL5~cPL6<nf@PG{Z}sUjAN(9hdJ&wiR26~%tXw&Qr-#dZ)NI|E#ZeYHP}MFs02~N
zb*--%=?zKDuUfz&B~`KsuM|r4=;-Plwqc@_^2k7qSd9a6AR}cFDW52)wiogbF0>M5
z5<aP^O!BTehXKP>8hwGcXqvxJMTV5H+tM1@e=k|;+|ok+4b|0|S81Ej#wH7Hg66Wz
zGd=7-U_o0~$`;GQBA76Wn4H1J2W+;o_Gtx{O}+n!di>v5oBs-V)I)lo=l%sec;NpN
zJI%_(<3HcgIm%l9_y!c;*;)=~dI=Sz^d^ZuenZ@>c*zX&`Ia(@w8fE1E3+1%bNS!T
ztD$xW%*6-!<x}sp!$Tu*A@ER!lXum4lhVDrv$O4=&7i?ohFOFfC*#I-kRGTXWMt6O
zkcqZ<-fSf(_E3U-Fw)3B(mu4tO=KhjWQ-w!B^3NF#^xzNt03TL9CzOS_+9=kO`s#F
zC`d7}6XC(21rY9e`ZfLx;%{7KB!-X!p?|ATTA5TyA~5dMMX+!z+<RCRJq_YZ){Y##
z8FO@&7{{RtmKBLo2pkF^R=oien7X9Pwei6FO&jmqcY>0aP7N`Yi~DRxXO}W9-S;@`
zAf(I_h`i&eNVjHZxClj7)}mk_lql4NgM_V}L?o`vg5df!!5A+W6){7S$(QnR%ZWsg
zx^Y3t@X&*)1_n@V)5f;s8l5mM+T0E}zzSCjVvE92u%w~w@o?twHT)~nKFzF@*MBk+
zs*1aqY<L4I5MXje+Edi<U)ugcHGZCM{M+UoUAu<@M->#eXwUr%Hz>S)x%cGCRDVB7
zzqm<_aUx<}Y;9W%9Ju8|)Is_jyDeFy2!m;>JsY$LwPNc%jtY)aC`6MrccBT!&62Iy
zZB#`|LKf18uJa*l+6-KLBD+>ww9?pWQqpDCQ-&)tr1;o4RGO?X{C)gA?Vgl@eP{_v
zG`LIQF0>lLcP_Ynla@J$6SngCJIzj|qogHuxi;mm?gB$wMOQA}qZ^RJ`nVSijYV5R
z7@L1xEbE)=4LQ2HxbE%i;c~w=iqoH2M!0k8f^PkpCTePe{toek;kiAcaT&tz<Vbyc
zl)~gT-K!6=i%?^0=EPua1k6a+#vi_hh88kco5x^BdnfWo@dMFo-OUWVitll5MlZ`o
zww#k7iQ4YA;5@eGqYX0;t9zAC`PPDx&0#_DlIaCcC)8}rrS#KN`QP@loucChm3P7K
z|BVLvufq~vC=BKIFZ3e#H^%P&oQT?(IGg|H(^9QE>3ATDvi*q4J|ij*az$gBFfNU1
z#2j1c-UgtSm?D{qRV-Yq*gC~f{{H%;WLaQK$TSZozsvi|U4tbf28_|~lbRQKhJf_;
z{&ItRB?xkfQ?hvtlpA$Le}tT#LNW!#9iV|T7`kk@Mi3pzjv`F~7NjA}E6E6zFAb~=
zFt2Y|4+7WeK@4pditNwVh=g<tVj-G86uuwNFi;m~2yzw`=Ln<#<(qosa8$w@Xe2BM
zM`u71ep?dXjTDFG)x^!mNbwP*;#fDl`0d@CQ|ZM)4IPOloQ^VYB~ciCL*GaI52+H5
z^~;cr8$Bc`!eWRe*KkOWlu@EILrNqmJznhB-&h3X=6&7c*>tz;ux|#15#n5D0Bq>i
zeakyy)T&{2B$9q-l>Bak`MUw&Wt;tePtsL>`!m5-947Im&`EwSt)NgB(m&{WLU-D^
zy8_Q(xQi?-$Sxu_I;$w%2j2}OTAr5Acr2uk?*-0{^TiC{dG19S1j5_*k)gOtw^gev
z{m#Mh5!ui^s20Wo)kC`xG&t$^22hzcYzP4qt8?`uhwp(NIl^~b<C#)Fuc?qCkn!h=
z4q8jMB7#P(y28a3H9T2lLZO)q%1w`8h>+x>H2_Jb+bR8Jw#KnfXW9>c(7Vxr{l>9H
zz3O&*wy|t@(v*&UQZ;(;6Hvr+vJil(*Q3&jJ!MkIwYd$dJrmxQb(dzJnOWqGP4vTu
zN_vvWVnh}lyS&jbC=!I!*VnMp2yX-<+KJew3D#es=W4?U>MYC#B0U<9`R?w)dl}|T
zPW|`?FhMIVp*uc+ty2&u%s9>*Gz767S^kv3h{LY~wW>`hvFnkr5~v#L-{N(ijTtw$
z8_Sk#H?9)ME*p$pp4*s10mUR^(hZ$WQp>i<S<Fk|wK`2a39wpPicqIT_pxU62jT;3
zhAwV5;5heHn6M2al4^mL2xzd1{Bhmw5}*q(T38sT&nF1tGQy$ZdBSFkzj?A63Z+%q
zKbKMaN1?Inycn3EjeLUyhdfgP_cyfdF+u{JEU?yxb@0`tYFLDpX?rF(l0j0@b>I9e
zT?a9vcNWJxw?BKkxp->yQW)oY)xOKsSE&+Iu7|<F9nNcMDw{P}!d#_e&-d4`sPjKh
zI**`-T(5YIWL%lmN!C*>kS~Qt55}zT7-7=<3X3QuyrHBTdxi9?(izdR-w97YI()`y
zY?j20j%k<6vR_T51gz=I@<5$}@vMWFB3N><)G_7HSo4{9O-X4-7B?yIK7oERpC-TC
z?Rk@(*%mU>IOU?<)XN=Lzfddj)i$bGoXg7Q(j8sA5+WADRhXPFz>(L?*kg#(cGNTB
zv{Y-QP%VP*&|ADyuT3ansyA~2y4KBIHjwIB0QK4hdEK7(A}=?j*iZ8bULk2X@_Dal
zoMvBZH(U!E=pWsh(Tz`Y7=O5A;~tm4%VM46=9xN`6MCL%tD(YH8(MjY=MqaQE%Nju
z0c1*2m&nt4=gX;6YTgZfhFu%IkT%$i4A+^ASlLvHGqW$>(f_+#0~W|lwfKjSto-}^
z=gZB|#lqT{&cfEz?*D;F{y%V!$9rd}mgU7o@WSk=;-kWez(nsF{ogqPvsH7Jef3QY
zI#3F6O4(>Rx#>kIu*L=@>H?a4LkjA8j#-2W8fwX)hDhc`0Z;j930kT^$y0RnQ~nIf
za!`i(p{=Dv7>Z7S44q&LG~rBWfdBqC4xnsFSRnxbdhq@y4;pKW{{;{K|3E9v8kbI+
zBZ$8<y@sT-6eL0kh2%2Wi;C1zO~aU(iW21(rAht%eTZFHLyr_05h=YqUUE2iFvk*=
z@ND+2ovod(o9G;8E&0%D4h@s$b*2no`(eG=J-pby@UK=tt&kCDQIuOI_kIzhdybPU
z4ymvEOfUvBn2za5*~W20w?zbWR+2nO$3tN@M@ca0q-4ojb0<-wk#}v2;BS;W10&l4
zD9mdo!IK77nS+s`AY*26BrxV6x?K{27ovCp<P$4`ZAeAI?zSNJiS6Q7L>>)?g?AxJ
zPzH<R%kC{0m(AQerWDg<oRepcljhN1m~GLI)tFKb>_PpDi%NW=*bm%SqZ$nH(!eIN
ze$#A(iSU}$0_e8$aV(BP?j#yBCDje?z|f+25+KlaxL#K7Sy8|L*!}T^>&}eTxUH>g
z@cY9MgvUrx-L_}Q|LRVDKa12mOB0JSaqI7ybOwhwuj}D!;YiN*Gf_3Zw_gU=qq8Y>
zda%&UXW=3ha29*a>ODTI&S;DBJh>(_x9Mtg;g7zux311Tk56oePVHM^2hQE^<CwxP
zp8s9;j4r1ScN)Nvp@`UUk?<~B{AdP!Tct?hi`Ja2R?SJ{1Ai831JWeX5%~N|*GkOx
znmewC(zKbAkUtHvX{rF+J_oB;!iDHTl~cR6l)4h{RY8n#KNC~CR2m<WwqbSGd0j1_
zhBY6u-pNk%mxmpOk%6(}A=uqn<b426o~=m1-+)-|%)lDJWcP@P0$HCiv=l9ro>w3_
ziosh`N%-0Q#eiwB&yZVMg3f<e?FsnaFR0WyNqqL6{E1T2*^`i7Ne^b1vs-;W{N(aL
z^lF*Sv7ktI9<?+Zb!*2Un7(x8Y9)aSlI;Bq1*Z%hY4hTu3N>g!jpX6HV(lanvkvq7
z?)nL6m`UnSW2tkat%o~6SqXFv!O-eVdA<a5`JXeYNtDKXVaUH7FVpnyr}e8d=kz4H
z&F`k*%`9w?hUX!0UzSsX0wj}dmNQ;}H|uX=C4TTDkL}EEyt=Ywt!gu$ljBbYysD{M
zXyT&}A*ZP=S5HL5)QN~wmz)<IIH=fvkI1z<GJl=j{4Te4r$*COx#N707?&{Dv8*nB
zt9LexDx(p6C!}N))z_1J;09F2)I)6hcnm=<N|4`VFqpf){Joh^zmIJ9?V){f42FOm
zn4`^INbE5#5RPgT_v*fgAM&6O05wGn7rW--Bqy97W*kv|p$(@n$8@TAH)ER&<#;LL
zfFM2i=EVQbG;BvnF3T&luJ#Z}L7260ijsnBNV^1o_jWy2InCt(iy*FxQ6;-C5ai+R
zn%HX5#{6DOo36gmOP)L2^Kc~G#5?B@^`c&2_1j3{2ec7imn0!`R9Hvye@sB+Op(13
z@y@%5e~z4NBj=DMqy;5`)Bcb*{5=;62Fak5(egJ*+t8Tb@+JkPz&aL78^*rithsHK
zWBSwjyyqOwTXLqIQJLKGc<*&;%bT(NN39jU@$-eT!Xa81EuK=lPvcvC+NWJT`t)_i
zIA9B9hp4=|B|xGiRF!RGT@7u1DiQ^|bOL^>2%KRAQFX8KO7zeA<Rz;tvhl5HEV^MS
zb5_KInho)GE8^9^4O&vC$m`eJGiOE3dUS}#sWw?05dOe@Trk;CwtLqexN!ER!gzg3
z$ojfzUdb&0TXn#GVT4_X_6?izS6Go`-G*sn*vgWf+EbzKyRV1vhnzG{?QJoRSi&3x
zo>uHZ$F9$Lx4w9kLUpb_;FGw6yadsQa-5P$)8}BnmxD52!A{C6)Fm?`d^jJvpRqo^
zok7!7vDIB!#|;J&t`0}N!pS&z%q(e@E5K=1qguz>Gx0-S1^GkM+R+^AK99l+=#RPf
zxF=LY8co|AQWK8YEt6gNhS?F8A+Ha#U(LY4Z&~X{^+8%^5{*Nyko57tR37@pU_j|r
z!8<gv0JBI*04I_?L#O;zy}DPA3IOb(2pt;y4L!C5Z$3HS(G9b_wW>veubG{4sSsMM
z1LB2t36{!kQA?0!H)CPi_{2%A2pIJ5t>BPcFu>73CM$+tvtjpFmf8U|RX{1_5@m$z
zDzC;MA9-E`4}R!2Rn8k+WHu+ryGIqdM<?Dng|X>)zOxQqGY~&}(Xz{Ec3BE7Nd)zV
zbu5#G(ZOjtc|m_ONfAs;DA}$!%*w!1N}7~j?#r_cuq=n4WiCHNKl(?P+<X?($s-Gr
zYik)}6Y+|9AUqMszp!CsQ>j2Vsi`hs0OR7NHKPj>0v;44Runa(D;!Nb=82W&1-i1l
z(|NpuZ3|Vs=47Hq^WBxnHK8y14nD(rDnfG$x1c3SYwWPVa)qiY-pD&pgXs0#K_RJb
zE#@my#DMy}boY5`?`|wY8H>>`-LXIB*<t9ZCB%!3IyE$Y)TBWoq{G4qI~$;D7G(9W
zi%W8rHugu7X(%%iHt5C9ETZ3;$t8kX{+d8#s=jVkajRuer?I)@Y~(;;z{1fp7_IAA
z3PqD<Hh6wcd!84uf?&^}ouVT&qfoGOk<!BWBw>Z!s6`WPEK`WIYl>BHzQ#o-HSSAY
z{Q($>T>HqL17fz%w-e4XW6e6?`P)^N@~SCDsW$l|5~d86u|OVbh{2*Hm0w_)7FhZt
zesc-4BICK7($s>qMmkKAa3Cs-cLZ8A#%2MmLRG#HNM)W6MWP~Ky|uulBPIhzhqrjZ
zNO2K$<Di-x+(ScO*bng*=7)dDrcj=N?BS4_z}-(K>&&CjVA4^S9!nb*2Os5Sja45I
zEh}<s3KiNSwW5<FUH3!wyw`_9OjRM1dP53r&GfjizWJW^ug?nr%h8)HT`~}Fezba9
zuOX_L+F#32JplnX1~I|J0T5UUfs=ar#BUZ|E7CPXyX=A+$hJmpu@TrczR)8v3tDHz
zIc7++P^m{!$+gjL!rElDJS`}43bi9ci>R(vG?Ev{6|M&t4f~KB)4A9sj-7}abkatl
ztpXM6V^RgV_<30xbEVndBp15i!gJf(#4~VNGN*ZbFr9-pRQHkD*SnD-3Q}+Ad&;!?
zJhRV!uPg{XGbSBDAtI<Ff4>><Bdab>{SEV~7}Arih4dr`N5*zcUeMjEcUIe(O4+PI
z=0@#Z;t~9dloVcn=JwxTWI;|Q8qxnaVyFKIoc}LW)YZ}SKZ|CQ{~aSPVT|ZPQ#EHF
z5L6Q-tSZ@&$_pgYqk+|6>TptIe%W?&WYSF6v)=vw>1~`*(cp)4tH)2Wq8&V*o-R9H
z9-Xv$vp~f2f^q2%C`0ipFi?lLHX;JGy4~jlhsaG}z^zjtny86k#(==a5DbER%NhAs
zK1qmbWah}C_D|#BFB5}EFd&%1Yl+pr<p%1(y28{3K<?c6g9|e-U!QYiHmzak?B8ZY
zTZh(#-zcfe#5v9e@Ak@f@#)7JDTJhT7@o8VdsTRZY(B#|xwUAcf*U7>dJH41JG`V?
zChx)<+py))Us?E9(mk1{BcBI{L80YZ=_=opTi<_U&78)&;QS|r=B8<3{BOQQB^#b<
z(n%2X2z<=d80ZK|%S3U#*{$ou%uX}*f);+v?6RQxn`&*V%+`c;D?Yt649O?V(FOtE
zka|wOwdMh+F$bRwPv|g8C4P?(<x!#kFWtFR{8QH(j|=icJdn6a`$hb<V@mIl&7H+a
z7M~R}&#(3u<<I{s@G${4fkph+A94EE+xyQ7;=h1#V-x%T0~8#i+;6+dfzW+P4K^;q
zgd_1%FvgYzBzeIGrac;-1L}!nZei>ol>{U)3>W$H2}il!3|*{+du4ypJ<4uZMG^!6
zW?!4BHqG7~;*c3zJ92)8TV)wM3U=(s85E-WYiK}dWmDZ0L5K{Li__nSjI~6sK0<QT
zWZK1VQ5US5`nNxKEW8G^fLiydFNy-}twM9HK`nkl&}!~{Eff218-JfqKny5df&8YZ
zJsET`Zfi68t%+wspoF~DB*YZNP8Sy?7e_IAmdq{r<MEL^bH#G8s-qFBUTZ4#ftCKs
zy`>fQBd>&Or%shQn2~VR6WO`A1fQ(-W;KC35=exczKgRi#d#G5Mg6=wgH*k8HO&@l
zLBtqfV;{@H)}J+t6_&rS>c`a*Tb#}4R4)HI=ZT<;)={ZQJNd%XU5}EG1+F8Do25^$
zCL~l+Jz);qWd5OYi^E80vu+F>zU<D5(ikpqO3RoRmLP<2l!ltHH26&VwuO;WiDfwO
z@@1?YvbCZK?4Iia`n|h+#*^UrW)HJO?5x-!3JBVc8sRO%Z=G>$=e?9oR5g4E`GKRL
zv{syxjl(RxeqRk^s(1Tn3qF}YDY|7AT+k<RkKPX^^&gqFxef1*snw;*9=URA{iIMI
zl%Q$$UE^zs)V1G@rtfI8Qs~->HHi_$bG0$3-ngsiWywJX-WI-yf1FnyVni+0uyH4b
zT>|4KVZfdeUcH99IIA{-k6>1|ur@Ytb5*f=95yK}OAYi9CbK6AIXd_tl7ET!^MeGN
z=_0j@aDPxxC2jTPKQC@YbW!LDaZsegS*d$O_Q3AgLUrsAz9R<m)la4E3imp}cc&j`
zlit5`DtF%^XQQvSKz_vevKfkrw>o5H=@l_V?7g5LPuFR<bj8C}rSz_hBUu^YE^x0;
zD9$o_sjN}DEC0Iq-6mMhok%7RVGbC$e^h223>{%x%{btHjD1(^xApL8>%3-P*Jz<}
z=Hv9>uZ#7jh>|pZH<7QuNpHW4-GK#^`uVL1sFBIiJEPsfd*YwtOQU{)|Mz<p+ZPC4
z{GV-KfDHgZ`X4(V|8?B#|Ic>hwT8{VfED5AMz7zLpAfTRcg0j|3&tLqo$+EV_u7>@
zR3P4jYlTWGQk?ug^6PawAz64`@v6A*!{jGEQtV-W+ez%fy;_aBSaN2-9NBACN>(#w
z<i1k1$V0kRN-`7?mMn=Eb9jGu>A1M@WRk&@b>ZHJX#_GlnzHDgHfI$8qW&XS3Rv{i
z7<bA-x()1blFl&yP8^n-$tu_zZq@kMS{%W#!4$>eZNbQR|2=umD@`=p9nfJ=<;Y8R
zPto!8z63yx0cywv2x+DbI0zR5&jtYsi$l@>*~@IZzc_15y)72d=7tf^tC96pFdZK`
z?68aU6!A~_>g~;qCE;3Mx*qi5Wk<HM+R0L?_wnGJXURhldfShu?6}s*sjj-#Pi91H
zm;WM%{Z|LJ9np<f<Hmz{Rsq`IKQ!hKTT@M!KQf1D2Y8;?sBTk%NTm9qurb+iVooP(
zzGoj4)k~E}-V22D=pBG$20J|DeG41Mm+4SW?_`Be9rB6~&4PR2i=whuRTMPBH5UAZ
z#l!YUZ~-n7438XENjdn^W;=Yz!O%zrN%k0w`lx2tkH`zwO}bfJGt<7=Swz`~qENsi
zjItehqA$yw<)W1yf53qUK!b&gu|<r;f+Gd}74Xl%Vq9={^EhwN)g2KpJO#=1MEqKQ
zEXkQwlNnF3jBYarK0+proad7f3odoQWe=jjpHg@}=Dw}-WPZ)nsG@^HYt*rL%!{nL
z`wqbb$q&Vsk6%qixMaZzmN}oqRqms*6Zaurri<-r`v&G%<G1V$!W~K}#XO<))uVYy
zgW|q>G$dH!C@HYwMMK{%)DQsyqUn~8*(1I<*m1rDNvi0UgA;jCW^ix(IhX~+dm-T0
z2N=sNJDw!(2{vI@`*tWTD6LI|8+AM=PS9twXnjwkwMgg<>$POtLBGp4#!jQUUIAul
zic%!R0DFoFPI=SYXs5ON8dMX=)mJv2A*6cTwg#5WI+MFM=d!Gx-j^U(=9P$0R3&)m
z(j*3)5tXO{=V@HfZS%K>Y1-QAz-<}a&WHBkZ~tX>yYKtFb?q3(i+zfpZqR|VYrYT|
zAP^DNe<|h3VkGzFC%#yW|E=(xwTBQQKNomB-o+AEF(?0nzHL$w#GN43Jr<>8C@v%8
z!L`0NVVc1S{Fw00{}=w%7xU(*!6@&Qt|O^@`xcI_G%e1sBny#75GWWM8|}f25{Z@@
zhxS2H-bCQ)PpK(|tdEx@)}K#`V=WJ4BMxG(+n3&w`qnjG0EWT|9l6Lu5%bysLC}>X
zMiAUjq03(cAfV(^s33~<HBE%`eMMK)yES?)EqjDgnFnf1%?Fq&(dsfBN0<gZH^>)Y
z#ewEa0G^G=!yejvuEUvS5jXwbOBr%<&X+<m4=GK%Sm<)kWy`XIFB3%8%}wmGjIACo
z=eKJ0DD;B{a(X?ab@OK3N>MT{_311-wZ{wY+CnH*<4uMK$V|vsp>HrAh?9~atkWfK
z?+TWW_M`wj8@s<8g$~yF2Dc>zZxJJ!L?a`vc6a5AVegi^(tL3prk@Em#I3TqHW|Re
z)n)eIyNgj~tBqzqaP%@9x;=Sjd3^7qdA$b5?9(f+5#?sVOCoNW(3Kad7Uo)+Pvn^A
z26GFEJNfK9l-Nuk_H6ItxleRpB|<YbWE=j2s(3D)M%bF`*<x?IGw=wO)<SIDH_~2%
z0X!J8*W;t}<{Y`Mv)8YK^*r5IG6=qtVp`x<4~BFXYH8=hYWdUdUqitZ5@yP1#5a;U
zj+bv%nWaqj-hD_nR7^+W3IhmoF5V;iD)z<)PE83?5(^(fRFZV;VPUz1X=??-t%Ih?
zn}4h@4`R{PO%p9~@=vCXB6qk|m=io9L=+i?BUZ3t7b<Pz$P@WJpSW6!Bf<G2GW(F-
zHKw6C-h0UOa<qya0D=h@xe`uwjsAuc%~~UKQ2zrDj087TNH-}BN+>F&h2zBr>}ivv
z7hbBY9mPH0Z2`b9_O5XI+8bYPvH-VJc|rQR`f|?k0ww%2{MP`xnVaHKIq_rHY7i}0
z%+r8ZD2JKa_O~*ojmY(T1}Ov8g?aBl;|>DqN`h7Ckht@oGkFiD192tMr^A(f6vP3V
zwslt59P|G+aJ*Pwzi&Y^g$2wlIGIb${(G_{Y+$SYB@WH|nEN$_N~NsP?ZMo&z~O|!
zkHt6zW6I%n0r})A5znQmEdB=X3N{wG#x7z*cM!Ru>cQOC+q$P>$AmfNy^-xSYWpW@
zc<6X2j3p7^2wQbYgW?yFhd_=8)eY1ePGWz*0j+1pt%HWmBL6UG3mMNh)kHt{JCj!N
zZfMl&(55x0YO*QQHYusJP;yO=^*)$j(oR+kCGsC1-)ReX-?3M9flTzAQ1%sZ(0lCO
zYOm$QEgG14&&$OgX%{$21-IBl88^=*YKR+EvafrSZZlCxam^c$>NLp5yBhkvv=h5u
zF{hE)WR)_NO$c>9(Es<(GzNFV+t@!tT9o*I@+!7-a<cx<`e*x}Bfasju`;7Kf3NBR
z8rENzwPb_S3AZ^^0L6!Pb#;@b1j*=+Mu<2KF{S&}tM?j>R|F1kru4e64QVdA7<Ybi
z{_{LnrIHV(_Tz}mv6$h%Lf_lPW0BXg(|;J<|DEVDXn>Cg^eblyeHLtZ0^S9PyBY$B
zXpg}#6Nrk<9*=l`@rUh^16$}UMgu_5=&(Xff9^=3>F!@b_cjP`U|`et2pXJ?h|lQ6
zA&rv;=+&~W=zkb+O`lq0<iQryOl+FyF+^r)sD<}NY_M+#okq_-1O?ut$aMKy)8RH~
z%RTzdz;A057S)FtGH{>33m}ECEgeqkw`*OqdKnt$wYO#S*56bfo;mM|#awUi;L)gP
zv9gDEedeADO^s%Mzy|pR3InRe2p{?~)oOMZFnQ~DkBO}TOI?SZJ6t`oq^Bd!#>bI+
z9cmN`J-l|0-5BM3F?J6EEziFQ$0oJURWx!XUKIXh9oq$?!8B{8n!1~=ReHH;%ZVN3
zMXRZ|KY$bqyE+)ld9}?SGd9vQo>OkN)-yV9hX*@%|1t$--=7@Cm8sFUW}=%zL8|gh
zb3(dHh)u-IiM+q?<n44NjfpPW)diR4cCvhUE8jTWcur6>xih`JNV{a|G^#~=iOR7@
zUjUifdE|#)o>|3(qn}wQXs#BGXV$Q8rQyvq-m$qXffGvO%GrOPy>vFbitIgW_5s90
zWZM~+cT-CUg_Q(>1~Yrg`6XuQied&(SjPVICVpNOqQIqqhLCYQ!DV@IQ@&ekx6Yj_
zRvyL2w$AJc48IycLR`y_sztdhj42W`4uk)hgZ*f9Yk+|%tW<YY{tzgt47XyfUUWL9
zJu=}ovK-l9;Qs=_%`t=hUiI+6BWFfJ3uhSV>P&p@mFiJH2A3CPo{g6UgDC-(KFmm%
zE9Az&08U1C{Yp2BbSW|HkS4;lu!j;Of(-2~Dj8QDQ=$2QgHoCeiP0v{7+9-!jKx|(
zCT4O0jjxU%93622tGRb%D1mZuFZIDuE!tm|jc5~sf}h^ny<g|%X2k0ZhWljX#=uRD
zC{&atc{LS|;g++i-Lq9=Bkbp>u+^G<QgRYbshBks^|~hFq4>@^tK73$V9_`7^BL{(
zY)t(~)9`nYF$B|>lJqjaP>F0b=cf?Wp3n`OZfahX!Iq-e!g*RV6W2;u)J2aJmH&hC
zgi;tw$+<k<eK;~c;1M0z4@eIpelB{3H1#Z8nBXBZJS0xqB9%gk(`7IEZZuKoGVfN_
zx8kzP*S4wIfY~E8>ks|5_64B#AIGkjF=oZAWdnun%N4SMo?#{w7=I!#T>Ys^XX~GU
zvJ$BDZ~Myxt_3fONW}vp=NPkx1a7K;My6A1rLZ9vMWORmrd@#-_-2BAcW$S|s(bYi
znp$89Eu0zYYksrvud89Eee^$9K(b1u_4;_Ri6NYU&JJ`_QZ&hC1wh_$4u-SJg<}|d
z_k=Tm0*bN<AL!8DbsP=fNL=n6`b~gT98^_1)N|3lb^Nx5bOonePA9fls5}Eiog7;v
zxeA_t6?MmEAG#`>D~NSWEN$ljp5^4YWQ-<On8{AKv<=6YEEZ0md5(KJJ(Hy>%{~+}
z(8vLeiUVJ$^zd|>3X4{fERqzBJEx$Qz6zbuh`X&byHZM(sXE_E&^PRYYHEWjpv+D4
zt<a#XCCZR$M2A2GP&YWMZ&rS@nsy2<=^BLi9ioL=_98&?mY6X>#gtJMdf@&9hvMt1
zoIndmAzHz8#>v4ySC{Z%*Bt#_l)lbOTRD9f01#;>(Woeww2LvUrlSPWSW#rur<1$P
zIw%w_Sv~-p#!%nE=v?;ziule3I}&zRT9UmV3l)a-HCn6fbUiaX7AdVz`dRYWw8U0c
zw@<Z%E`5|633RZP(Le>4jIbo0y-sl4Wx4}xtp8EGk4Xn$OqiloXSRZa59-X~_F!g?
zU3^dWpdsKnt8?!$GqM$5bgu!KfZ#og1{MzC(t?=iPV%Hsh?3^VSCYxeIX(wnVea^z
zQ~K%BjOmgxiGy@H&{UFzarmnDGt%AOg~iABYTd4YYZp(~h8(q6bXsozSYoxiy~Udj
z^HxqAcz^{Z9e42Yni(0XH!kTAsLIM^fVVy&#bu1(kvAPxT&oVilSCeQ+I50-PQ}_8
zU)GOSh<5Bq)6`0r4sNvXqC827z^9?{&<S?bj--lggODS76FP2-+edq>CvGQUI{FvW
zkg43Kga`xGEk5yh@^3^uMq4P{TlxzG;5POnwCdl49#R@8LN^=kF#-WiwGib)A;Jly
zF4Tykw)Sz@5Sbn_b(jJ77_+f0K$SDmA&N8&B4%k&kHQCuvi8G*28U+RMD-G}EZj2{
zPQjm=Ky=X9yNa)0m}Eeer>V@lI3}<?ZaOMyqCTKhRE_kxW>ypy-rPOvLcDZ?^Km_q
zW}e`7>2%vAX1TCP5&?eJ`_$K~YX-oa;kUYC@Ljksg;RMn@!-_?GYg@<c*y?jcxHq+
zLlp{xs=>-5`Bat<h=c{ghTAmGy}$x43<3oDPA6Dp?hZY(nz%rO=iq}#{(`TDi8!Z*
zm>57OsIQH{&r7l)p#%O^ATW)tMu{nBT(abb-;<3mDPq;yjoz=jf7`-+;{CbDf^b`y
z$c3et);GI{6xZ^p(_Yncy5n&JHZo%}05tLF(Ao1BA=xzkgMwM@R%Y)F^U%Ki!|CJu
zdE<iJd8M7zo0<3LyX@u%_qd^niJo=*6@I&Ozm8sH%hgwmU6=1UFZ9IZ*5OT3NGv(-
z_0_bOxoy21)hDzXNEL1~gi=Af`EnsLy|h(-h#og$s*`6`3-#KcKoO-Zl$&G}qi0lm
zRN7Olx_J#R>!4kSk+qyWP+nKfoE^2@l*_^*QnF-ZQsTrU(WBh>hn?hfZ&4-i)-Ou3
zPu}E5FF=brbJ&&48oh=rS{pWBdq7VM@Jui~cuSIyHpegfgQ4esPDi^>?iZdt^uBZ^
zN#?qZGCGM*^MpWYVlaFibET6Wobq+@_j(X9h<mvouxk@39B1m|8COa<v&U_=q1j48
zE^&+co*Uu7(q82=p%P~QWWKsZyI*Tw63`ffkA5)W!fJja?A3(vCK-F(?_3_}op^c!
zYU4)bn$_I9S5ZQE0xp6GkFO=980J~HfAH3YPwC_Ct65SC)_;dYl0a#8fNAWk`x+du
z5whGM>9mc`)p&_sla4hz=*pyKVnQ^#SE4$<qDDW;t+DMT$oH|k(l(8Mt(rq+MxSn6
zrpXDpFa@-J9@Y+V#MCb#7NN{Fy*D>4?}X-6mGbs$cAYX;Mz&kIrPzzg==c9MPXU8o
zi}v83cPjjEp2GjxJN@4VP5u9H3)L$B%gb>%<7Gj^p}r4;`@0HQV`MCf%Nf31{Z1l}
zMC*_so?86XVDQ^5);-){M1M(zQRhxSyUpXq-7X7`g8|*HL?a6WQ&Z#HgQKm}8)PDA
zKu4)ZV`^VJl*hutFd;*fd^1QPv)|8U?w+4n!5Z@cVO(!YQ>?uR;fSXIY6?$At72~u
zVn;Q|zRlZLG)74LXK#SNrhJ$Ya<R^k60`%hoTZN=m?(*on7g>nfQ+(_Ivt9H1V>mO
z0t=ZX?GJPaxRr+gbm?J4Yx)ustz(Ee;-Y9h0lRd5FOXrCo?-OTt&Usc`V;6%zRLzW
zm8%qaD^*!uI*o`^>*9OFJ;O9HRIl=hZLtL3d-I~e8xG`9Q7!D(HlVk5+1nuhWP@r*
z1*<|dNIHe2qf`+hfyNt1J4gje1AJC6RpjwDjp&LbQj9Ar%Hf7QQh@q8e!%$c>(6)D
zxKW8)l-~$!hsfYTJQUtwCRI#xT4LOy*6kxMM}yB7S8&m&%ibV(b|zMPOALJcL!Vz^
z=YGH?oO}Qa&;=Y~vEii<zVmvZ3WCt9k2Oza@{p%GB6O}iro^Jopn<rcwHsMmgox-e
zT!gGsMb_V3KlazuANP0A?C67Zu^!eJYB*~U5jAmcI6YL;uRHhN?9U|npJ{W>0mf%y
zL-BHG(3gJKvED2izpUNld>PNm>@e3A@sDUIYf!uDWv$KS2)94aWNC^KtWkBrRI`dO
zaL0^?O(~;;_>J#x$Q<Pmd7(Leq0@8gG-!*Pr~Q?bs@G)ascE>&iQyB}(&0d1NmWo<
z{ee#Z7#{Jr%;7F*bdzh&R<WtBrzk@kPtX_zNsn3#-OE*<lh&bn-JVjiGzb-~XX~KI
zonX^T=BL^u*IW#}N!?R-maH;Hl?Mte)0m=J)lRje7`vY7Z|SN~<RK0vqtHc>R&dZ2
z8HH|3PfN&lUfc#7%Gx+@@GvA!cUsLA!|v4{;%M~OqRr?h40b#IfYUdNwa!#@*}mCT
zujB`X5pv`o_;*v@3C$S&?2PVc%??y5mxl&dyZI{6!7Pd5t<HDxVP_TJ?z>UY-Y4E!
zQw~8>zmm~pC6m^4Sb~TFEfagt){Mp?#k0AN;T#q4sWaxHw*v+%$)bhLp6^KpEoO2Q
z&e0)nk$W^2^I`Hq38-@mfTLg6gBU&{$+>S^NBikserU<fV&}<Y6>a4ua84=M8FLvu
z3pM3}b-kt9w@P?Dz2VaD)SZ2*GOG-c?nRVMP#3I9sCDN(5s-vDqZhH(6B3&sqaD-f
zEH_)^AMue`%EtEw^G}|wZ@&k)^-r+>t}@G7ZpiIm006+){wHRz!T-Pv*0TC1Gts_h
zYR}@a(B&IougH>`k<|>c+}HH=`(|V<-K0q6fhB`Uqz2-q-+E`ew`t3@ED^65*1zj&
z8tOkC^n7m57ir(?6bNA*Pr%^|8r4UNx2=12?AW#b?LbOQG~n+ZFP0N6_|2FxT+kSm
z;){k8A9WeWAQv{4CdS%P`~(0gsOn)Z(iOI8c(KMxR7W~|pi>+islZUL#z%M<*Go!y
z=I7=ky9_VPc0U(3zG+LI`^1DbJa9KYsRdfC@4_T?lkGAd2*DsUHuV_F8$p9<(RaV|
zFWiI284v!yJ>e#iA1)A!7UbaqW}VSk_(vhbVGcXYQ2}RXcXu~8x4j^Eg(JMT{eyTp
zE|eP_n!^<6L3rwvv{-hhRW?$)qBYmApks*@WtXn>(A;CZnSn3@*PQeI2C8WUD7afa
z*56WTX|Jj=t8$|2F(w_qlM7NAp6={*Dyn)I*7UnHBKphHR)Gbr2t#UDQ-qQ9eAIqV
z%MIs~&8C%a4kj`Djy!SVH$i-u2W$@G*cv&HMNg=h=ZRIQfZB{(k-9zIBO30p^z{WO
zgMXuODvj6xhQal;FEB~e`@@#7_&}c26CE%Aut|3{YqvKuV>V5VFSoI``OB&s?~Get
zJkf_5nKy5N+L;7-1y$aNxJ^liptALAKg7b+e10E7VY~32$Ai69wQxBpdJ(o;(wT3u
z08=-qvf`M=cLVgcGkg6-@jjUU%MAI3y5NrMS)9?DC?R#6fB6R469^NpoEEL$eYE}O
zVg6{w&9D0gZl=TKfmJ0a0N}AvzkURjO<?vX!e%&i3y`hM=kAk87b+xT0V^(S+f^C@
z{*g;^S|?(-a&?}@I>iQ&u*5(;2>y`=st+Ucbh~liW3^A#iROo?^YGqYn@`o0{%eh#
zfzQh4XoUyq0%(f?_|ahB^y|lqQGYe)@#eF`y6}h)>u|nvgV_i0u|I86wwI5adDqSJ
z`_jP;+K$AG$wUjpW(m`cu2XHh9ukv*JB)||L|)}J{a8U}+)rDhox3>Ol(IT*^l`O$
zi$*={8#x%;Hr+ZI^Yi4KpJ{6kjc2uGu|H`_Njf7eSu!=e9g;0mH8?%Y(+Y>QpO#Tn
zpC4KZMj6M38r#N{2UG!oJVlJwSSe1R1!`Uo1~8W@kvu<VFApv1Q5_CSF<UxJ$SCp{
zir-0nLKGbUvy8fKvJz=JsMtRbJi{P7q>87(mQu_R3R^??<pn~n@ToQHsWl{<XbWdt
zQ1@dLilI(G&L2oMViz2ApamqVU$o3dst-Ds-=b7pmxUwe{RP+JN4yer<>a;02y%a7
zgh?H(GS?JHnPRC6NScW^{3FdxjL}Jodu_pn7AKqqy|QR+teXEVnDN=LrVJIX2<0+l
z?5p8=%T<{yDT9KT83KNAu{SH%sP+5&H2J1rr=!3)@I=ZUeM}$-bWD6enM8mJ08Wg5
zliUX}LwilwrGXbACzvLP&;Bw#N7fS$(}yFg%R7ki4-ve*@mm+zUtnKQ@K6G0+v;?r
zEzS66x;=n@woyV~P#(6t@~F-mVYZ+uPnKsrv)hnGSQ1x*V7(HQ=oF1xi>m<LA7Wgz
z0F0*81T(lH^9O7vmKz@y#)a<wPeK^?N4>K7E+=XxSl$U~EHVE3T%B)Gtj0HA>QLB|
zfk;6krIRggHVoPn67=zxtZk%g&67pswFFJKx(kc*dZ1IHSGfo4X0L=1Bo6AZ5p<E*
z+O(N{irM#OZ@t-PrL;Wp$H^QX>v%u;hTt3xI=b0jVgOc2T*3aa3&72KZTBt0AR;cU
zFqYAArEY{ubgs~`L2CpNeIMpx!)MgDf>ew^Wk~suPBTa-gqbbLY^exZ2zowq>lRz=
zA^MH6=)LAK>PPU4*$GVLTJO!`R{>k{(<ho%<MBLz<ooZuCSNVYSL5D*z2-Mzy75;E
z*M}v(3TrEkpS6Bk$x~`>d>0%E|A{}0c*D3zuA0;+UKF)}&&2@vqa8&+p<3Cfk}rkR
zW?(MA`fc?QXJPNvM6Ips0{ij?;MRJRND@5A3?%Yd#RI>lJ0#kXwKFDmO#SAiqnG3C
z?fM4|CkzPzy%<e4?LO$7CLNM;2$scbXcMDSr~mfFE*uWYUZ+me{ShV6_e$6lCJ_2c
zo`;;1X^?gbrI1QK@HhZXdRPLX0?z%SsxMx_BM>y5&c!7eNmlhxJ+#!Yz(jfY!a{4D
zx&!ZaLarYnn1=o0ZAA-Jrv@17+lyVg#Il>L<whBq#hLyb=P|bI32^}}wmNZu>zS8g
zcKiW8YX_VR251?uuFIr-?tl|0lf|(iMh$7G=PcmLi2mTXA503aOlp~HaMT}tL|Xuz
z5LLOjo;$h3T$y}Cyw}j4IMT9(qKzWzpJFm!#46%@lNWa-b0U6;%39-oQj4%E>yGMw
zCbdvkydUam8a0pCx}L3xTc*aWMk!fZdW`hOw{(DLTor(gQPGzY8&;8ENKy&629!PO
zZdaWn`RtK+o_12%HCNf?7I;2ruRzyahOW_+VUp3T4wNA^L{+lNJVNCHK??}ZEE(D)
zP;ybp2U3i4X0~-?w(a3GO313G;31}VbIKwLh{k>9W(KL4g#2t}sdnK8WY4pq?>rZm
z&npq4ER4`O!qz{}3Z(XOxNZWka>pW}V^;2BU*quOWpC(AV*z@&24lO6$iDSO^d>Lr
z>S7ltj?QBdwswXG+0^*glzZ|KwPOiL0y{AWM)xA3=XZ7QmP3~yXT~i>E!WI!)5Ue*
zYW)r1Rc0=@=t{N4`(txjiW=4rbse|xQ9Yq*Aq)BScLO^!HZ0ALRokMarn<#@GFWf;
z(mwTyA<bkWd%F4u1vg<sjx9i^{fEBR(tZ%e6}nFMe)=Pqu!HEUS`k3R<zYP2p{Sf3
zDcM3~HI_eP!Y+eav!O*{#nV%`0!*Q1Cy(6H86=0`BG+K=@%Srqy!{=I6Fnn)n9Z@l
z%RhOFtQe8EnI_5xmo%;KI6EtO>zfTID-_3g550H?)HT(n<k-zqJ2JlRm<Itb!U<hq
zZRa*eGMjwX^zL*KFD6w)UR&`DqoN>2F_y@V7pxKTc%peOk3BGt6@itFjz(%w!I3Yw
zQE}a}^eR<@Rha_7o?^4W&Fs>a#^#(>M1R9T-Ob3VQ@`?dqqO^7VP=Gi><_(hz0N?(
zYnLJ3%j_hb>+hGR>Ogx@Vk%IBi$;*O&&zmRmp%fo9+jTnG%-thQE^pvdO&gp#)ZUf
zAT6sVaZ>NsBk#K;xaWg&2xBbk97IbA;OJkgwV;mpw~{(im+6M)ktD*u$@nCYL5;z}
ze8s1R)*QWT$v4QuG{deWBdwV9GeGfmdg7O&B;E03$@gL&f<zRs_c`GmEOZeQI%h*H
zu+V~tcr=<OU6P~$SRDvZ9SCIF0rU^5UGn7gNDqbN6GjS3>fty!M~FaCZUxDMS{^<k
z#FL)VT+}0Gwl7$5R^GHqMNJg3YEg|G&d_nK8udXStFLH7Q0TNm-2S1vn-Yk^ZnE53
ziJAB$9*m9t?~jQB!JM5~uQFZ3Uzj}DIFyJY<>9U&uiEl%N1QDJsdta+=Si2?k=RoM
zaV=aFi)*-zrvzU)au^r|E3OUNUfMvuO-{EH48S_J`i{dPez$q*<C~x#p9B^vFIpAS
zPhe<xcJ}{1QEXo-lMzc8{p10qJM9tlwzI9OqYY>&(}chbe{eRldG9E$Ozv45U;$wa
zPcJ`KxQb67uR^hi%Xbut3OfqAsE5|&hz=O@_VW))n8nl<vrhWwxI43xO);Ln=e`U-
z5Do@&*<Ym+FMlat_;L)flPtEFYk6ZjG<aDp(^+D;=op65V$O4)MPanT1_fIE7t@EA
z8go3_$?6)NwtJcAXJsIK%9*rN%`KYsy6Gq^$mz8f+M8Vui@bk*nfB@jcAJQTl)O=)
ztm_58@S_+?-IqroSgT;~g+xVleq#rCdEErxBIrfSapJ%~8oZt-@3OCnuXd4DS#(8z
zy`SwE-l<oqCS-jPt8Gv=g_Y29WP4XLxUotEH9HX=R&^lWC+UKdC(R=zuF$Heuqwy>
zuJ;sxgKjpLjk7=S@k2Mp-aY>>*4`;NlyF<uj&0kvZQFKcY}>YN&S=KTjBVStZRcd2
zs(rE7Uu&(s|2h|a+f`lt_2_~3eMYrI6O<!u^bQ43Lqk%66>X%<bVvlq>unAT0{v7m
ze@dx-q~qz=;0QbV0(xGAWKJu%jAPtgbbh|rOA=;QHs2i|kxP;p`GZuW1zb@Z-qoVf
z;cd&^KS^7xO7v{ae&m8$|CRv%Uy?z4$NvC%n^cmu%Mw87yr(Xi0;NIEE*mSbrQ(E4
ztwahUC{IS-GlE>-G5Om*P?!1fJOxDNib8owN(Ihmy5+@uT{pGj&#1HDO?{$UzGKYA
z`{~WZ%NKH<=syh^MFbC|_)U}%=utGLC4qgU3R*xW0TDs67jVD^WkDNf8Z4P8-0w&v
za5<`?3oWCI^VpMM0=%&VTbV>#t0hPrv7|_vqA(K);4uNAE`VwLn5oWUh#3H@YC^p=
z{y?PJmoKLpxbs7A{`31rm{^<9&SSTl$W1-Tg;;^MR0%SZEpllDJ)UBcI%V(f&%QMq
zcDoq7lA0^+Rd(#bgX@J-6?HIosDp^68Y^djozh`r)A%+0Z$y(wh*T9hvL+o>mcQe(
zct!X-@!-Ba*jTMH&cNKDWZM4t`3WOY>b^L-`gA_P;5{ZRajiYgEjvfQPFor1UO<uz
z>TUX79DuMi&_hf<*Z^wof5Y!PFLj-#5?Go#>w~77LYZM9G1oIbDi3i<%-7R!a0e~M
z9Ba-%o<f@;5Xy886D>Ux=u}tli!uPR!|XHgb!!f6-ECyTqGT^afE_i~@Lo4Xl3Mr_
zBhQdIn;h!9`yM<=81Fd-nZb&9t*u$lP=FAcz6qI&?;=xA579B_h8xpvOJ4~CK_BgY
zP`#zEJlQnwe%jcI2Ol;vz{O>+9^P#^IQfA&-1K*bFn0T;6nyPGx2(g>o332vH!M!l
z3AuX)$^*mT;-B9jFaS2-TJvfxomZB;e}OwbFW-K}Q#3}uTcK{a&wW;|_O9tNe0(uv
zxPCTI&#%{gTw64Pg)($~c%k_HUnA207RhU4%=EuN@=mh?EDHZfzHX5JU6=45_x!o^
zjm?~#|NSgEN8QG5PYmH}swQ3U_gFl7Eg<lrBNB!}QHk5)A=O{5L%CSZ9!?|er$imC
z!)~|dj7Knt<vF6d^bE5tGuP!wu^22A<5wd@diBJO-h8j4zdCt*l^~ttqMklJqTOh#
zIpHKRY>p|Yhnz8q!CO`ViCa-hD9^uqt5Ga;)g4IYlqM{arbGoDrDgkQ99eEt0J|#k
zkUtY_%yIdYG9}lNh0YWHv=obGLm=rBCrC#sN7lRK4j5uVdWIiDjm2OUkw7Vr*_xE~
z6a*f}X{EdsB`CPMV9IRk$x~}(*g*ZZ!Aq+Tw_|6TO7<2kSa77KyuTYZz2Dv4<xyr#
zHgU{F9VdfkmE}05Zk0pn(EQ_rU#eK20qv<f=8>IKvvrY}_~M$UHgM{gW=g}l>~zi0
z|FMOCBsOS7XV|tRB1oq?HK0|jv}mkoY~{%hz0t%i5aO5N{t!hmZcjNycB_<JF*3?T
zt>U^&R?@05P@caXm?w4}p`tnNo<XHMOGRV(S1FV!_Jl9$xR~e5JIi<$UA+7g$NMD*
zYqq>XsG{*IT+v7mAM3dh{oKCXStkj`PBmicBvEa*b0+b*aK?8y(O8W7Hf2mhUH?;k
z(*Zlx0flUoc+*Bog{GKD=9p?|UA#PUd{q=@NZwVf-R<=WSl92N?F&|SMxPZG^KX}D
zkaDNo<C?`eD}c$tsmt8575$9WI4>*HWyII^)8pDDz~z|>)J7#JON(uL;%$N50&op9
zjy5nCKqt5qf0;2@Eg!%lc0c|LTWAj465j(@k<^eV32=V<%$jM<&OOMMoZ<Xqm0gcZ
z{%BqR`1mJcZf{PX+43Lbp=`!Vz(zTQTM#DT8S-dM6(-`9oZe>4hsOYnpuOHZl;qqP
zv*2)_YT#V(k-yNdjNY~m+00q&FUbDKeWv({v`xUC=u14>^L+Na3hg6{013{Vc=qe@
z51vi%JHlB`{xtHtqZnGI?s)ctHuw`9-8ZGMRYnWVK@j3Ns7n!#HbA(#)imz_HDa}^
zqFdtmAWbE>E11Go*ykXLz+%M0yaSv~OuRRyGiSu=%Bg_A!86d7G9Igd^}%Nrgn4wU
zF|-A$-fp(7R(0+VdV~P@eatfguLPGN_?oS|TLs>0cK~^R;kY4~A*GtJ;iVmeX!*GB
zIc@D~hf%}5re5aIIlJxLhLgjegDkbpFa=KAtQP?y=;ktOK&((#Lk@?UO}`yEToSAX
z+Tt_$<n!k8PqpOaL3#n50~(v+K$>A%g?%=9+#9+9S=or73N*t@_1xZwthw`Sk@lPi
zEbmzgm`>>SFICFK@gCtunPqW9@V#r4T6-vs%5bW8G~DKf<20_4T`P4gui;G0Bq(3m
z=F*P5Y$$J>#%H@;-~s8yJ!_0i`)BpZ#ZgbO+3?uJ!e^W~y6v`3x1)48dZboOfN+6@
zS4{g7Ujgp7NaeSTHJ2Jz4TT}&$G?S-Ir`vJ;`+2KS$T^MLOYJV$S2U^I7Kd=?gege
zwY(`qv{EWL>Xq-W%#NMaEExXbB$`$KBV5aoBEY+7d6qCe%#x~o>~6x(<&|W+bT(pL
zH}zK|O^7S9QeLB=kCSv?U-ZxNbHQwyV`tbxaaxZDML%yonW_MCQ2YLiU29-CaW%nA
z6{=rqa(H88ErPTQwu-uX*DZ^qY6jIkR7u08XM)YLzhesK{=tk?Mz&8W=%i}VFVzlY
zcL6&(gua(E-J5&11!K}N{2cu34`S%e1^I}eTBftB0iGlRYAZWaE^M-hb_ChNBxuJk
z)eO15RmPrAy>h-uu*oPIb@UsebsF{JYHOBhdwlu_SQXu6suSeQrx%$Mnl6?S4RZ8I
z)(y4J!vZ+%IRDU#o4h|(xD~uLZ$N+eVLcJf77qdK@I4Yl&xB&k_gJ<irYb$R1puYS
z(6k@tsx;0(R5GP}ZWrq#G)81}{iJ>FSxLFsDd6@Df9spiByFE%<+NR+c2c#VdYfiI
zT|4Af>@JK>>zi(*da<W*3%_;iqd$c;wDpZETPC+gEn;8&dWc2Ho5M|_hP;r(=l;ZI
zu9wOTLyImb@Q|5bM@qUv5lrB>b?fx%?+EcUasI`^HTaOJqyL$kZLJ<yHN-x%R}r?$
zCw&P>rzckYHq{+q?uE50@n*bWjoNspfcffNuw}z?a%I}?dgp<r-?HJi%S7M?)2bXV
zr~h3MdwOjrt404__OeiMu?_PLc!(Er7c2BPPRJ!z$R$qbRlL9xTtWV?O=ZOa<e<x&
zpe`_46tGk17Mu8=^K;l=&o}Ike$VF*myeH&#}tT$T2R9h&TrtPO>*O!*`W~)?6&8e
zd6ezq-I%5Cos`VO#>w#T^5($v<zY!~5$NIv0k2-1zR%7MJL&7^Cc+}Z{C0XLR#}e}
z$CS=HZn|OpuUni%_icpN)1!5kjA8xXg{^BWO>Eb?DR5w0jbrR*c&mRBE7k+F=eGZQ
z8~*R)RPav+9zf>bnyCNrgZ_VJq8^cDjFgw8r<;`qW4^yvdQ5EnCr7kjm*{%rPcmKe
zL$3JO3m^U~X|S_3`S&@4jf&qtF#ez0d3&jS;SCG6{cPq9uFjH6U>o=>l-9{eD6cqH
z4Wz`Q<MngbT}gW-lI(^sT%FI}*H;HE$O7PC6<QW`BeXbpxIQb_xH!JS7P0oa1=%u4
zEwg9fj?iX*CsWuEvr$1exB>&TS<3tju@d6vr9i|j7(%p4%6e@_QO=3Yf9h$#rap+B
z_KE^y>K{{v&5tQV2V+Dez`vVQ4J{a?daMFL#xeMJZ7aH+F&5$!Nm;82h$%>onp`9s
z-05KAt${NuChu@`1#9{5J`LKVzo?NfSm`bu8*5`Y!?%vD(I_4aCE>|>16E2KD-n*`
zXdrPx2J#Ym3zU82M#=?+9}lDpNOOg$mEo;=s!a&@6m~X@neYQ9Yfc>mPm9@YR5SfO
z27@dOF|b7xKBk8BgEA5<U0m3@`k{%c3e`J~C(iX+j%HK-st0W23Pp_snh~ZsUbHb9
z5@*=c8KF~$waZ7rrM?$<#kvf8@KfO%K0azChBp`hw1v}P^L9P&zE(61f!%>=&v2|b
zd2wX(KZYl+JUyNV;5c;5#&Hxmxt%jQNg;fv@xlBHI|jS#J`JdK-|>F*bTMtK(^elU
z2eG8|-krS*SEkG<F@3Q9TZ5!S-4rF&h;7h%GGQWvU9tG3eX&_`>$=J-czDli{I{&2
znBPL9puLu_4YxZ>Kll|(X^xN}dudx*Nsan_d0k1>C0Bh2;g^nvFr)ZST&gJ#D)%@{
zy5QlLjZTA>DDOl2m`{9#zOPZIxAj|;txse>sHJP(WEQC`DPL5U&4ng91?HubbL=+j
zB;z4yV`o)wxER(mb^JXznfPU`71S0B<cD#CFQhpMTbD!?$y>@7=>PudA<XI^NB^YX
z&g4Hdqkn0Ku(vldGPM8qCwvjhLV11UuH8?RUVBiBZkU`Sj8J>P0m%}!h2fw~MT#|b
zNF#!#yclsu_HO$}UuioIPWZmtic~A+^ZdZb%VLFE*4y)#+U3HGK4bAWm;bbJjkhJ!
zspY1HIV0NOqFuk0aEAoNX&D~N{@1#_Bm|(&o&S6DhBX0UA!|L%705>L3}Y)ik?@dO
zO}<o=7vfIt62QwrXsv;?y$+yZPeg3GHsAzJ7H~Iv3we)Yk3D*>4dd{Ry;(#n30^`(
zIK~8^8x;l+GsttQ2oyeq5)yU}T<CF<VFy}ELEM52H9{9FY{(%|7rYF@mJS5H`>gfW
z<|eDo0wKgj==nAasuHtODI+>Gc5hb7SYE2pO2OzZ1wzRo+Y$Y}bQ3FW^=qn=vc~@2
zc^`G9COcfiy;VVwP?n_)7+Ibs9Q&U(TWvY_n%+44)3wo4@v1xW;)7H{W|V+_G@U)C
z;YL#rrf|oVMSs3Ytqz!v)FL08n+*XTPHSh$b0FOh`j@_R$|?YhuY|FqR=161MPVfJ
zLa2;Gs`>m1YNWPZF6MKx2TYIOh6U%Zf!soTeS8EoiV?<fs^Ov$AB!v>zsaF;!?$H|
zwdD0LJaP+|x6|2=yi%l2;ujSy#u4oqhjf`SPazB$<nj9%8{bl-1m-aO{V6)={8yX0
z40_pZpCYbcSY;ISbI!?=m_IM}J}QJrN@Keq5I0;zP`7pC=%%)XCZEq*>~aJI+J>Z-
zO7uE`LgW#LD0`i>T*~8-=^Dq}Bnt_m`R@C+dR-ILR%+0Vwa7+-D2xZM(xhxY*_gj7
zIA;%)YB5!S&-JgS4(N5we*`|@Sl;TpGbJ;XC5#SCcyXa^)xBT7WRcTyVAuAF(#6E}
zBcOVC{meiq@b5Dz3)+q*CP`QQ?mRQw(KTM+m{Je7tq?y8Q!b4;m{5Kq7a3@ZBZej0
z@1v9X%HJSX3@(hD%zltpFm1RkMt~(Yaqp?o8tZz6mVxik8KMl{;>pGN^CzraIi9IA
zLa7Cu?S}+9>5c|R%LwxU1AWB{<}6G*lT7yn-}-g%-qV^C5f<ovk4`lsyL_~0h&<b@
z6d!+*=9}M)-CbOnUQ6NLE!29ziAo=%rh2^Z5cDsG(li!#KRj9Hpz6i0o*ObhWfIH1
z6Sq=LH(m4(-GVE(U*dYVfN)#Hzp(YaG4!4k3J_p1xa2`>;aeGDGUgGnu>ENgNKT8s
z({w7GzUVKG#;|y#h|lYMheApm&$Y-voR&B*PL<bLyH2+nDs(C__xR*cEPIKFsL=f<
zaf_7$FEQf;*)t5<&W(ouQm0V7*4$q1+|9q775+?9{c6l9C8Zrj!1YLMH54h}C6A;<
z_^sXW44Yw|YF21PzvC`b=N*$a@1RmvV6z~}*JZQyPlDVuh~<)%f;jvAa#C#}y4Mrh
zIZpMXIqwUOLW$HWZ-&-XB9$lAYbjxU_s6HFyR82daH0T9gQf;fgX{l_LkaHI-T2;y
z`o;$F3!cdW-Rf|X7gI024hsst`k@gdoDE<%$ki_x!CBzCD>h-X8=Br*j`HE_NAvw{
zuM#$~oBo^j5UfI*QmqceZfC)y(Vq4~-J7<HX5CLW^c`BlYUUP~p)6g=a0pFJZlAjv
zh)Hs$g-813qQe7g)?~EBqXCL<ma9wg0Zv9$|CwW&SlOVqHY@a4Mld1t6RRcrEM(ie
zfA3EG&HBTaR8O!i^N0K&A4ieKULlYMH#i!0W1h{$l0&J#C&Y7AHgWZ;@1Gplmj{SX
zm)+BOdoZ-7@t02g?nKklK~5(bY-&~ygk2-}9rbk=h)%46rNi^a?eI^3v6(vcT*uQp
z_hXZe1@4ub+||Ce!yzyTR_mU#Za~vsnTB=CLqaN9PVRQGVTP9d3+znGAs@LUIv%i1
z``*5HZBunt2py1kr|S4OCqe9Z-(RIZ<1|^aHk^D#XzR{7-8b<U$h=stvcltR%I+6`
zvF)#*j2X>{ELN<V4!x7AT9Yk?Fu7>wOO_9ltI?jX|AJ+6?GX9kU)3f-g#$`Ss2n86
zhJ%a`F8uAi_wb+OK?Ax?<08OXSp5^E_n<VHuHh+QKC-IiJM{SU;fa8ou^*N;obv(c
z$>AA9fa)7ZIwUEa*(5cT|LRir&=N|Lp|CGdeeV867-sGalnTCMu6~60=WlQ^m`7nc
z`~hZVp7pCKtlTV1ua4{lL=~eSCH!PTkoE-pK?LV*=>k7iYUeux2WHwqhpYUj*c!Qd
zTOd{8X}Y&3IA^2fJ63FL{`wqLz9M%m)S8DH$e^<t0vVW(7KkdifX~Zq1;ASe#H;UJ
zT{gwsM3Adm%&aD>nAsv$nchMT`XQfA-O%Aq&eo!K6)I{w3EV|3C-tB%sdNlJR^KCY
z(1bVNt<ZRJtNBT}45A5-s%xuMRV0K74;pR}BV^l4Ctde$nr}8)6mX0=wKAXRsI4tS
z@S;wVo|0jd+WeNBiG4^;VIwnzYAiGc%tmX~)gkmwZYs4GDYNQ=XiI_ap{2EAm|6*#
ziN|+k@^ih^#~z6`HTahUPTKxuQM*R?$lB~fw(m3aR~}6G@2}|}#1+S!evV#_ZU^4c
zu{*{i%Z45}v>%S}b-uO1^7N$nFGs=%rA={763ZyCXqgr@RCTOmIeT?;dyr1Y!~|aG
zb`ItW^@3u1tDgf$Sh^>iqw4BjQ^Ff?xUup9>FPSe$5prvRDr9(WY0^6Xt398+H!Ah
zKN!^W*juZKpg_q;!;FX7bY(Uh2BA2bb(bD|5Emkxcw~Z7r`f}WEP#MzNg5t1KD%QM
zZl+x5n!lc~h5>VK!}Oduw&rGy*%J*KXtex-N!f-MvXi!F%;YtgVCmxHyl`cyH6~Ls
zEKJ!tS!-=FYQ5Uq8N_;-GgshND;B2VzAP9-PTV$m*DQGxBytn@(W#%n71RA#GUg<+
znv!XSJ6~4)=w`S=ZSrzq2$K{sBS({$TJQbEkZML=qi+<If$jJdrEU_zAh|EpDhwCJ
z+)loIIB^{xCv~m(PBL!f+9rd7y5hTrhhlcV&g_u7kxDR$aemv|rU$#qZ9(m?y%53f
z{-Fsu-SH3yF%O$aF1x%xIK6>pZSR3%+}_5EpQKq2+O~o+*7ReL_Q$0KmCWR_QC-LV
z<;?!M=W4GGn-oq%s6V%4Ffm!{R`d|x$}^Y9H+3-R=8~S>#hZf8n`QX3B%?#jZN7zp
zr+qCj5JAh)eHG@-lxKsg_s{vLTKeeC<vYh8niru!kx81TV9S+YN<yu<J!-?p6$lL;
zsveybOq@yqL~)SO%{B4Bs#Yaxg5&G^M6`~I?1Vn??K0|VedO)3?k5Q_bQ>34%_XwZ
z{wNvw4sEhcXVNM*p$9YK*QminwPuX`)g|UGGf^I3)xsmE-e}IJB$wAx)XtzziS`Rq
zDkYu2kjWS(vNNRjS$(*ta7R=nT&S_5&Gj8Qoj1kuuzU<2sunG#ObosCn55@`xk=@*
zMV^+NraJj^6ULB_PW_>j%yO?imSMU{BzyW!BW;Wty_oQ0eQ`_zzDrF(fQ}wqvO^|{
zRdOq{hn^tK<Gdf!W8eS3ddl`DHvfyBGB}w=chFCH2={MSoc`mUKiB_Y&09#4;XhWK
zhISvTXLDIdHP8W)kO>+psjro5QK&-Czo7gcopmR1HRf&vyxn$lRWb*k{~*2F?3~{0
zbOD|QgbyvOB-J*-f|Hkv<;VZ24+G9&b}K}>G=dqD_Sng=z*44yRrp};aE`?C4Pv1V
zflK%TV5p5D9YZKpctjyR!IRi2?PY7{(Old3daBCu!>x9Ngn!T2I}f33)ZqZKL#AS3
zgo&V-O#R9wsLYt6=@@K`CpjWW<to`r9~)oGKlw#POOp*FK0j!Vtz4KWBAqdpNJ~8l
za!NX|cEVI8?Schz{<wzT7^Kune?Vm}BG?|AcS=-x*W<v)kb9sSX<y<z7M$nf1M7mZ
zOyQ9Y9#JWs)9^db#TCUS2mpVKcT-x3X3{QyOWrmXUT$kTStC7I_|lNAEgH>wkUZPM
z?ZF96S5Kt>Tz`kub3TX+Ah%ljf=eE5CZUXa)aER(O2L9S#(rNbr2L}yfefbI=h&lr
zST<t_YumNFrI4mGjwFiIT?OSD1eOpHb@>}7|4>Vf*!FB2hQZYM$?ttWMC-x&$8FD^
zR6d@-PB!TqZQDzIUAHCoir#p#UWQnos|h%@n}6L=fQHEU9xIEY;>23i+zL@dH06}g
zvaXl#EAC{?_XaYyjrJ2x2PudBtABnR${0ZE6bpYS!Nus#hbvbGoG^wzPyGJG5g}B)
z-<&5snEhUHoY{=D5deuj!R+{V0_NeOik0zfP@HQ39!pWqY~rSy0&MUSb3CHFNaVJ8
zr&sgiRy<7^Zt-I#NM*MVurp^d^sSr?#f^WcKaE<gNQI9G<;a2w?0b^y<o6sz)6$lt
zNb|{)8-AL!{=4tjKlML+kuimYfA}M;KZpEZORN9ufV;CYaQ^%9&?QdMs*eFBWc!_(
zZZm3ZNzD)&+lW9ZG+%BZ>{8Ow)2x1wgrr&R`xEK11m+oO<aO#*Xig3U7sI@v`PU?*
zr{+@UsmUg{hJCPlkR=~}@4}h9G010ROA}o{S26=MFgUZbd9wzY9*PceuL37cffA`!
zK64BYk$DJ%ZKMM?p!+habtEr^tO6$t-d<mCSUg0FkvT*#Pzk$Oq!44U76ShWwk)w>
z2vBEXUmCPN`+NRf+6>Q#Sic}&#xZ}!e9B{!5=Z?n)r1*eyMp}MeUTyF5)0ksh$laL
zIkL6t`F#qTt|a?434QsZ6DbO^KS;Zyij>ZMdGd-hC<Uq^G8voLiN8{AUaV(%;;X+d
zd;x7IO={aG@#v862RA<XA=m*$`fr_+<L*a)aZV0PYd3FoTw=wVg&#$&+TYdl3|^jK
z|M$urQ48({;wSoG{$N%Ab%W}^UXY>ne=tZ+rrZ21L;SzH1dkHg4IE~&7oO&}azyIZ
z^AYR=9(GeqI;3v~SC+20KvZ9^*xP-3;^N6voz;G?aW{N#X5_pYme%|g2r@*tO806&
zvv>9VdVA*A%jpal%<N++{_^GnO9K5?67L~EI`_ZDgW-WUbp#5-JWSqHoD(K2XLZFr
zbCM#sgES#<WYV(^Y{KD@#F6LX^}iMb!S(|8B_P;SISc<gZg}X4a?&X*3|I{>R}0Cz
z{DcdotzMbpPLveR(FEVCv~pry<kga-^g_U!vf|Fd@}oS$-4`5Ch-uMbaKnUT?|Fr>
zCOobRfp~5A^=sdJ0*VfBszI;K^5rSd3!c}GiV3^=R6AdI#HA-f`PvI?5w!c9_B|PR
z1U2cpe8g>n4mqatI#1e&HV*izXQ5}FX|LU~|9)Ha=p^lMd07WT-dw=OXg-H6o~=#Y
zH`myWs4=ko6?kl9#q`(oUN8z;y9I8C)_j+CQ<GgqqeWu<<(Jmc?^|3JoXa6NEG({T
z?a~GEs|q>AZR#^nQ6*IsIIL0XB}uG)m01ieOII=}+z#sT61~j&qegM{qm>pWGU#!Z
zYMLe+zy6>))1hO!i|b;GuJjnPyvmAJWwcc$^%<GrObq=vbItj>+~q&p^Y(0V*$cXw
zr3Tfr4D@05%^b9^cKqCSWdni8<U_ysaMD9rSxlj=Y`weK$b^faVfSe%^nd5DO<u5|
z8tD_BQG@oD(W*=uHjfKIW_X!FL%A2@Sbu=?6vtY5g`-HO#hs|%tWrr8z$DNJUKpDM
zQbgb&)`2KdxjHx0HqbJswhYvt?T`f8BTu-B$nZpZ;&nFoB<P>(PV~Y4^{EDE9*PLB
zN6wbiiJ)2MR{X_uTk0oOrP}jjbi&m2##@Vi>sx<B`R&_9sLj71Sq4bPw(IqHQl0;q
zb>V-Jjxku~ldcmtTo>gW+TAcQk}`F`*|<NHK$l@NNHG~h?ZWx(-|>*}9)zC(A2}=q
zDLLox8qU3X{Z){X6di`IMT`1tx5u8u%@kiuc_!76j#F14QLA9`mCazlF*ToaJaddz
z*DXL=AZl*mN*RC4R9mIF<+KDS@jZU@1gIK95y=KgY1cSK34JfwAiY$<Chk=TUv?am
zLhRdtg-t*k7yjE~_fSoXm$*?2i#mSqiH7{9)f|0KX%~fqEDs*vP!K>--B8!Iz&yeZ
zO7>ji=n>qT+(L(rekK4)5gByCrqZ|Z=B$RNAO8Ay<nOlpaoTqz`Cu{F$h1NDf}w;T
zPw0pPOaf8p1B`HSIAI}!$Qh%E63i(o%;_V>SmJ&6Fv99{g%soi>xaj{G(<*;G3<wf
zC&yfiXPv|2k0nxETY#Re8mEFKCD*Fr4ocF?KbQVNEE^48$u9piLD`!ylkY1S3nNPq
ze!o{8&a2-FegtO%Ox?*OvJ)<0FN6NrVkmL;SeaPuEo3MBIYU^yLr5s@0hxF|49guv
za4sBL)(YkvBk{Kk>5U|Yhh+S~a4t&4*p!iC;v)Ic?p*S3@gEe%9~kdU*_uhA--Ssu
zDn^DAM=_WbRI1y+N}hl3%jK2z^laJQm^3iv><wCR+Nm~#R#CKBsf!QBI^Y8SDDj7^
ztrq=Rv6H9DODoVWuug391lfiA*c9kC=eSG{K*t24j|Ax$0dP;alec||U+^hfYVKU|
zi6~i|erjY(gjrS-*TVY#Cw4Wz-7u-?&s3t}-%cj}5oG_LO(rNLCS&NQWTt=kuFTB$
zb9V(Y`HmFSjO5^BQnXY+^$ITP=~x;<zp0U=sq-g3exR;@2-bn7q^dv|$Lr@Er62x3
zlMI7c$lt~o004w~|C1lZe`LE(@>sd8jU;Y=QgcmcY8&(nIWQ%0Oz~n+Gh$<R2ry;H
zIywiNM@PqNNWM5+A9UNP@)z6kGPpW6jE4<KY%VT7R-aiuS!x%HarNHuIoFsnT6B6o
z7CO{!drFEiOT9^-!G|3mFu_!pBPTsk<$@Y6kl0KU17{;70LGZR3zN$N1lLaKhP@%?
z#Ha8V5JsRf;Q5Kdcxxa6Q!kPc`hil{*Iq~94;Z5=1|v^zgv;p0A$cCpn8@hlarFLZ
zahk3b9M6ZC!F2o)1#s5MdpVj6YhnA-o*|&Rb|k<qI@TGzgq8WC0#zYq$ZS!<uG~@E
z0Vm)iaQ8bjap;Sdy}X*6n<oLD5JdHuA!?ppih1jDj%f7U8NBVR&e@mUI(~30?20@N
zK}Q!=cOwzkX)1ofQE%#N4Uy-=EDttz(~#F`b;q$;4UtTuJ9X@OvZX8wy`yfu7_F$N
z-No$Vd*}t1@{!vcohyE-AEuJ%r1VE}3tSYd8Mv>s&|Rq4)<WY9&ow%EiuUKtkU4$Z
z2ZiemQ<GcovzUf?{Z&;IO-9RrUqb`X7ZHbB7*i8)l2vT5g5GBYX$fA3LH>8c4hm*L
zpNoZ_#Z#`P3mMwA!u^mR6lndQqB-W<m!KgY9Dt!(-bx@74%dwyFGwp@@<;myTv>h=
zdK$I#<8{1t*4$13?Dkx}@!t;G<m>_5gnv0ZYivKEC0I$b36P8YAoqBAnmv82IJhpK
z{v2F)N9p-qs5Qs`f|%xAdyDZbbG;MH(ZR2?TSJTYWsH3!zjBU>%S8gNBlun;+S^Yw
z0^)uwo8H2)podB8FexVc?)e_E($Rs_m<eh4QQw9dQdz5I;Lf?DzB#@;SK+U*#%G2W
z1fckt?RJ+QasQd;<L9?<<6DT}#Lxh?a$ov(_l24lThe?_vdBp{je}*92h{^A6_X|<
zAV<Df{BX9=on6t|()!3CEFqjdC^MRSclXtkZOWLaPA{Vir_@|i6iIEEi9I<VLnQw|
zsZ4foE=KaLN&SEvI+vF+ShE!DomwSeZdu@qUwI<Vhhe5OxHvmYUdPmuV5=t;Q__!B
z0lWH518S(*(givJmTVVL9x2vE_70>u>QgKsAxIfOvhk$Jkj1RyU+%<sY+RP4t?FAs
z!8dJyeOAqGK+cD$krwnd+UmjBxRq6;*!;ZJW(^<a_XJ)#h9m?<jOA4PbUq+)0czbe
zRu#;plK}X7;&r#|QUMJ>-+(UJa%qF{EQUnT-h7I5f+7!lLs2{2_9W*^rNaT?KEVMY
z0V0QGeyq&Z3vLWk2(T2tmOu90d#U%ZScB4^Xil+C7-2m=jnTr9mRY8-%T))LpFbf+
zco~op8?r@jHG6}J#SomoI>^BzbqO6Slp&%})J-Qle&GV<ryDB(i(G5~HjnvQ(w87S
z5M`+2%&m63VGZxdup=APxe6iH?e?Wk2;p5IFapPEk;jG*zF=lite}OX9j*@wL|@7n
z=%Sz0?-?R}H#+Rrf901IC>U~|UbJd&4N6MLtYNYhJk_f%51isgRTEE@oh9Ri3?|hD
z6*pFT(&c7I-`(i@9eS{0hs(q7eS7zlg#MN1%I^$x)Z5XQOp24%srkKB{#q~#s-mAX
zDLFX1ovb#<L$TnPoNiVBV>r3R;w<airnUDydx&=8mZIg>8vi6_$h3>Eycxc#w!|>V
zpoiEH9gz?qAx#gziF%Le@R5f5W1MxdeJS6Ki#jc6%yiGB+@g1kw)T2<jdQ3k>CUbH
z?3VuF?-u&vCsm)D0j&mGK7;q9HGzwf1iTDYg60RRe@Cd6({Y}gRm`S4wo>Y<Zr#l=
zBNXO=9gIAVnUu+#s;s6&Cg0{0Z`=j@1%;8Xfnx-t9Uz!0ZwLFqU(evdP_byaSBGkQ
zumQim+GCwJrT~Oto8u;bw;NrjuR1!p6c}&V#sXlqLBn_Y$bI}-kO77pj9n1yzqA4i
zBgQUAo$dwB68x?93n?%oG#Sf?*O_t0ujGcQ%u5S^=A=!XxRXF<1#d+4Vxp%T*-wz5
z#=w2F2apnm=$IxI49EyT!#Qygd=7~Rum$}oyIvMv9N2jaLrTY&;d_s|7wZ{;xrN<T
zhSAx0Rl}85EE5Rfmji2X$fkIi+bD9E5oeI{S07H!qr4>S&JgqFU+Q&bw2qG%%&&ya
zimpxA0B5gjwjku&5t_72f|;?y{P%KRCdiAj#0c4yj^<Yh=@`aaU>JT6S%R(eCxX(@
zi)^~GI3kb-qUL~ZWa3j1KE8tS_&`R`cYOCG8iEubgnY30H(B+rex*AK0%WiW=s?bf
z`1lU`OiTo?HMb!&L}#Xwx<+KBKu9bX;1rBt_>&(HR4fT#9(*t6d(kbLLKA{`6tViG
zW**ODw;8A>|EONQ%oNnIiPsDmATxM>9!>5!DUqg&asWbQ&1}&yf?pP&%-e;O<MFQI
zS6%kJdwZj>m*N=F5R|~5l(2*-hsE2TW}vX4=iICT{C(3+b5jEs0gPoFV>*-!Sf6bH
z?;CxF$W2PY`#9I9hv?cWWeF@|Cg3dS@{MEl$$nsOR?$B=4F~xv5Y&loo=+JO0SFx+
z;4{HYhP=GWW|hqQX)HP|j1~L`O+28{P%(dF=a13fYbw89Pmd^eqrqo93|a$T_2cxB
z%y?x&nvOx62ac=f3JhuHSq{jGFG=9k5i=#ft^`wmXKi9k&+hCaFqh#I&F+sjtkw$@
z8Ug?cm*N_7rsq$;U%KhtU#15sKI=9I#ae+K2swO@g7h8w`Z1ZTSX-_5Y%}8v=7cTL
zF!1L@?aFVun&kjlB|;Oc1`PI99Lx^UD6)O@kCda1E~xm*k5}x!r;AyXWm5t!ry_GV
zo%5_$(x&h<HGxz@cLEWDazag06Ijwq361p_J0d@%=Ug3TaMluxog)wHPL<gsG69kE
zfR`s>kvG3gft#>}Y0qyp=#tF>-<Q!8t<cxd5TWN0;vz%sku@h2t>XZ{1kKxH^Lj41
z?0d@uZ)Fk7M1_9hy|)!R+X^0`1cS*}x);R$j=b!JU@FPYc;4lh&y{%*fmUaQBXDNC
zPDKe6{f;#GE~KfMn)jjb?Xtp_na?4io<&!W)O$(D9GRoir-in(<M0{VB6`yTOOMB*
z9>&yUK+<w5P`GJ_62K2266cDSG`QsqO;;kP%rXwu014sU^8_pm_{NP8=kYeaOR5Cb
zN(2(j2|)bXqfnH<bFd*iS*8qp*}Lu@Wwvo;R2`?JB1{obIH4}0op@MAr6`^>5PYyX
z8CtN1C$sPY>Z+`gM>*xp^H5g@a+y+x$o3(3BV!!~(nG`<u$j_GYi8J6Ft@1_Hh-U{
zbNS#riJj0_I5*fZcnV__q;+LrVrqi~`u*VU3`;@}=r{@fTfo!*ap-FpbhrEm|Cl^=
z!VD9A&2sF|K%Vd}9|>151!uF<ZS|$UM{aKnrfi_UwOIB5IkepIP}MPnt|6vkS-2gU
zKYjX%KJZcax!Px(h|hou=VF(buql7qBeE4R<{q4!at_k|HR`9;#myP+EnI-g)0?p<
zqeNro;BG#V%y|WyTck6{%*LEHz@IORCXvX~`nH1Y+tG0WPhgMM!(1)f{8b)F=>jI~
zhzha{@M;87mdMVf1Wz=en$5fD!h@LkkPxey*eLgPDkRY@{Y5}SMf?NFP(-y?0EuB3
zaos~5x#0~kR?Ie<EDH}AS%J>xG=!dO=V;8DEXk%4QNVH;sWGT5$lG;LaU1RJ+7o^m
z5Xa<6Aws{rzxN&XT)xWn!%1I!6w$DxTa?YH@2upbskj)?MQkrLkUsPK^49b{+K4;$
zgj?YZD~xlQlcFvAKv|Lk5g}&eQ?18jX(G)2C=n24+XGZbrfDhi81bKW67=mdLhxr4
zIIiTy5VE$+b(U+#wVA+k6@O)q4`YT@iQV&9>n}C7igUh@(K+sk#aTWS*^!0q*icn~
z+k+upohXKykK9`nY<G(ktnDr0Y=#Tw-dmwlud}wrf>}4`%A#^rVm839B`@00>+Cg!
zok3GcHLz@9*W4erH=u%{KR-;Zp?ZO8=`7`gtsAmR8hP5IS-jJk)5fYLwHfYQ?RC0B
zZAxF=plM;hhz9I(Xpt3a`vH7Dijy=Q6KIW4qoT-h3vP(_f_vtnWTp^$t(oTSKFvXb
zIW4_dGkO@R1OT&pKFlKF(riqmUeqi6juH_7C(t}`UnvxHl2TJ8Fk7LOqio&oLmmw}
zet}0Q)<JNUJonIq0LnhR6MX44V}k2^^YtX4z(3yvfZWSa_VMv{1egqUT38O(&IwOC
zqYAI2k~H?M#G4~i75^aNj2uG@0vGoj8Q42uVOxR-8ik2v^O%=eb~B3FBE&$<yDQFV
zX4_O*p8O0iM?X{+9df1pc3htFK7MOTqiLU{8Av;~6G*dZ&g7<><7K<b<ekW&IaHk|
zZ6B_ej&=*DNaYrv2J(2xb>}~D#4<Iq5EOYDv2Q(IP;KAHH%9BXA$c`X6U7(}A?+_|
zl+mILD?mHG&<*{j2?AJ4^`}r6x~OH4m2J2brD35Qm7BxsB`N>efoRDzN?!(OaaaZ9
zv&9o8z!T_^Ne>{H<d{f92PnKEbxNTg4BjHUHQ&SUwegg#BzgrIlS9_9QC|nr$X!l}
zcEAuPhb5&1zog>6b=^6vc|d#mB=(XPEyb-tg!JjW!op(+JMI9n1zaaq+UKA;p7*gM
zBcO$?mHSl19Bw!f5N-a#Znbc&9j?OnTMjO`o;O1W0n1KwAR8L^vG3|FKH=W2!N7qZ
z_PUXPF`#Z$XI4!M1%*%MFERwMi5)&P)beZ<3xK!Ijyl>+9k0qgZ^Np)&~X}?mNhv&
zVe=-qu-;KLv@m#tu!TgTQZThx`LwbK=y0+`axn4)C`Q3bCiBFV+HKV8Ce=9Dz4Kq1
z7a+gWdR^$}gj{B539W4!%&+M&Sm86o_oXiNM+_qDRLsa&O#&N~_;OrJ#=kU?ZEG3c
zXoEt-(aJ4$a*Q8(Ek<1<)oqa_hFPbB<)eW#m=(NJ&6pJ$ko*yK3&8!-*)<3l4<tJq
zPb-HBh<a}lYZ45(;GiAkx$X7|Pb)CAay+T77<K2Q22tdIG3lhSYU3t7sAvVU>bc_8
zLSA(MJpM_$3l_L|jSRduhyoW})YD+ES$iH2B%JNPP$N)qauyIX@q^Qq1(ptfRTy}!
z(8EG?G~!bIWU!JL(dvrX79oVqy<=JNpj<3G(;zz5D+?Tr{a#(5B%t!9AV?ouP$0T&
ze<+!ffX_Jz68TafyxhTo?DvL;7^7o!VX_&p9WgobM5L!<P|X8<b9u!a!U9(EfWv`Q
zzlwnr*%B1f({x`TM6?yul%P8DgBI$Cd!Y#JzeGs@nkIGg`S8eei3L|&@J7Y+1^WS|
zBh?ajn_w&&wN{L-@dVfKC@}T$G@gcg1&JejLrMP-&FpT8J_BWoq0~n4MS+spu?m3v
z^3Gz1rCo_B(S|aQrql%SKSq@nsH+B{@ONif?Zm~@K*epf$4mvMCk0eDtf9_|fbCf6
zeh+bJExGI{>}KUB91VPlwib5s?JIu;^wN91DF$vTL^EJkJ<{o2?v#{?3`al3VW!i7
zc^|<&#bRO%fdZW;^+2N>SBg)^`1?R8_5}+6nbW~MhExCUPDG<gK$)42@|wS9uIkhb
z?5KtqN5HI;{DesFsRQ?hn;KgkfqA1}7qqz#L=#(2yvLyRHVQ^{V5OsY?j4BJ-X8ur
zwF@^V;itAudDoCtQ$JiCq~I!4F@~~+NZ$e)gR`AvP@ef0tidY&gBiO&mXF!&4NDy<
z9a4MFS?><?Ddj?_-?iBQYP)y&=8yj9@)Z8~V&Pn$n2svrn*WY|e<YI036F@N-yT}1
z*=Mf=$2}`ILZ$5u;OXNa2Si8N>74tRE&ZO$Anz`eUlc_{N=*OJxapr)9XZuvQk#nA
z&ObZSK4RBc7Nx7rk?BfwSbYMdfrMS(C@!EH7pq3EnR_=JtceeXB7)%lfPhZ?uEd2B
zXiI-lX@(FkZpVw2#hPbg%%HbGWBAn1GK15Q8p~&uSqBX4In_WZxHYrSl@MmvmKQuM
z#wD~OM>SoqNDn~SzTCazPOzz@7HK4o>zd+d8+*&gu{agvhl9IZ-#fuc0$X`_XJ^O5
zrCLwL8oPdZDNWJwBc4WG*^h9MEBf=N5NB=iAz|QKxig@@In(exO-!em{-BHyh@{S_
zY8J_=_$`K-t}yahRAq9$p7Gne{w$ONAgjli+t**%^(nli^K0EPu2QoDMC-RoD#QYJ
zXeOaZ-=0}srsME1=o*g4I8s59q115!h`@%59T^{zdC_F;pL^gtwqB95Hk|v`YoHdj
zoKv25N~j9V{c?MjSSMTU&*JmL2OhKALI9@rRPA>M!`>jPvP7+1G*m@~l9OD)C$Dd_
z{L`jc18dhHS@Uv$O}#)abj9QnUx;mLd5DaBp+ARo58Y;%Y}rbaDs6(oEmr{<cjYN*
zNPZbDZ#Yb>+2@?T{cUobvFrjw`CDCOWso~u>#0|c-!tc{yqxXtiTqzIG^18r&<Wr&
zYo%fVT1N|V>@}XxjqZ;X{=xa-EJzJlWhh!cH?ci;sRz1}yKtHVtiXvfmK&#EUDr>w
z^L2y$6d&>tHOx*N^WLtV7-0AOV`2BCD}ys>)_vo5WP*one$|ZAlUo>+E3wJiX|xA-
zFpNPzTMsW99#~WfS<vHUki(U%z_6df0?DwyoHS!pTID`LyEW}lHVP!CL||^&f{vr8
zzEp&+2tBIGS~i9oRC*RXDX5oiir7w%1HQDB$S(RKRHHeWbY?38yb*4~KI>*z4J)=@
zdMDWhnC8isIY!iNjN5qCq$jWBb}582lini2kFhPGT?Q_43X!^g5$Jt-q7K-BnnkVl
zql)e@n=&fjrAz^Gh>*xa%d7f17yPOjUH53&GhtZUW=J+bk4%vW1dr>px}~2xFs=b)
zm@aN-^fi4O7Yg(H&e?4Y`Yr{BgFIoeePP@~XWF5h!b3p)taM=lPujh;W4`UiCr~Q?
zD+d<_uh)TcJU9{!eIFRcPo81sExlUWQjo-DOc8Ym<{(-?VZC6Oo(6@dOi)M>gM*(!
z0<^uC26MTmF4G69^LHexM;RZAW4L~vWz#Za9Ly2_jFw1LT`@RNcb4N<Xrd-Ty5{7A
za%;$Cu+@l;^Q*}8@5nXlB>s@7;q+sTH{1=B;u!xCxYbd2(dJo+-JPCIUG?vPkPT>(
zs3vhu%YA;iggEFZ&)5`qn=HZ=%Q|H>pLigh*kAmQGX(UE&LbYBpWb1Vxmc}VR8EZP
zgOo~5)qOju&?rrr*MY#BWuHz)ixg%!X1Q;&A1^5VCAVtXgybL<_nl@2)Ir_$YX@9g
z7|4%N!u9Of--l!rs`NQ5LUjsV`f7f$e<{wy(Z<7LF23X8D!ixIEGZjb_*Jo2qsc1n
z&fWiplJ~T2B9(tKM$n!grM;k-`(TBlm3!}PYhjO&`UcZkW49Sk@Th=%oy$T^tqMw{
zb`b5{8yz06V*pwG*5{a6`s&^7R(x5d8Z4Yv*c(t@rk{ae^8~JnSBPQ}-VJ~HsKe@8
zQurGTNH?FnAuX$|<jn}|k)R(gu2%H{hmST_KY6_DtKH%}YA+k=P9K>}qOw%?{M|o&
zBccPf)uPdGQv^@FL@NfT+N}}@5EbdFJy(!3v7wN8NM(XFnMxIJ`N1Pvzv`)Zn)*(e
za<k!|olNas5m(PYlyL4mbi&7(!99v8>M$?vLAY;~i$)?{M4IhUVW<SeN;;(=eEXMc
zC{Aq=C<sRnVXxyC;#8aDFPx<AJpg-Q<eXd$fa+C>_C{+@Dd@41J95%j>E8#c6s+F-
zt7wv<o&Fd`*P~9umY<_OH@|cd1?AR+?+*!|P6YAZ{nzK7s~7qmHPAFOFJI|JQ`bvc
z6G4kQte%AOhUTn0L~<i5+!JtEtrWxDDQ&;2jFK@%p|6bOYw~ZUk6TP%JMa6{tpmhS
zSG2TDWZx=rfYzXK0WTN#5fL6)w%kUs*VCK{eUrjiDZ>-S<K;HFXA#y1wsHCZ!name
z_C~ylUhS}f#Szs&YjVo@X@~r8^)r6S+MiKp(=D~ub)ue|deiysKo>xIBbbM{oqw*_
z(NYh~a>#JIBi<+XA?6jwN%=Nnf?JH2Q2m}T>V9*lL8m_7*NV(L5MsI_OJ_v^LD~5r
zSLz{$R*?#j;va2GNUbypNN!4$bnUMILPm-I2L11oZfmjDCB+{pg6RKDieTvC{-2}>
zy3+j&D52Ny)NuD=!`9~lqKJm(3B7E?YXN#OY`mG~slf-%n_r!yYWxVD(p$$qdGW>g
zg7{aBtD3iCkf9cyu3R$Hboo0FabT*s@&>k#*i3<n!aCaM{Ss0d!2v;_T#eY3M)XkC
z5e8*AOEYCyv@`HAJOmtYKUvO`+%JE#&7QW6fH{zu{vAR(oDPTxf9=pv0SW_8n_>!7
zVRO*i&W?F!BsHoT)RZorx3*Q#l<wdoJvPj3lLnsmiEP`-=Ec4QR8?W2_s)>SzF1^T
zw;U3i^`W)zUQSG__e>ly$>*H(d9623BvEl8#?=J~_E^gTBj0!2$6%tyie$(JZeb-A
z#_LZFXLypunoabcm{)A;>G?n15guk&clg2Q0EM^Ce4{0+l^T-`r(;dS@>@+<w0U3%
za=;J{dNe}~VT*XEQ6_rE&)_(b<g@=|LpO-<as~YnB|zu^01*9aOTj;+QLa{|HvhqF
zyNL4-qSlYCV30(6Fi_Z<K#nbCp!F_@M8$d^h`hP=4|R$F(+Nx>4J5xS`}b$t@$ZaT
z35a2@=Hajbb5Bptx6LX{*XHICHqOYscaro;=DBlcJ-%y~wwjT_4f6gK_~CtI$6S%`
zr&3H#4U>BcNw<;SUxH#Bgrvm$k4f0u>wqHR=OpQGhG$;JsGhz;OrVp2unA;*-eZ7y
zO|B5HXjLO~o#cke394trxz>2a2TU3-1Kn9~4q}1vGDRjG5F7SqN$Uhz$_F^G;!G~W
zNU}`m{<;8h*NCXzf)bGz#`X*R*w2FvELx=glhAWCkYs;o!VP?dHeik?8))RVFRr$>
zwys2K!&r1LL`JRCWY-SYS2N7ULH)07Z7!AIqSYO6NHJSMM2_|O_rImtiPgV+q&8-V
zBf9OG4G?HrGfn>t$V)Qo${q{czNQHi+&F!&?~dLeI1qlkn%_L`6i)v<#)=j{=&p0!
zoqvL0`m5v#oonf+Pd07f=+uV=-$$%+7xw#j&a2nB08rG5I2oaruVk+KmkGj~o|8M=
z1$G{XnXnlPpLv2<KbI?vkv4w<kQluS<=CD?pBM*xw{b7g$kpf}Rd%7m7QnI&Jcskg
z^X^GH%k#(q-@V}QoB^0L@<H!}ycUIedV0ZHFkTrHkr9xAwKOw3bjg}X<eKKomQAwz
zqy<WeCLdo;JLKvXT;I~twKfRf(rx+$vcHEkA<PD*7nC1?!pDW?*Jqs1+yMDMAX;rE
zep^1OOf&2Iz_knpv7`%BkgN6EpzPw&Zec-jX8Ll_G<zSb1!UKv^U1{qk*hdAJXb@m
zI5p@v<119w2~`;~zzH}vePzO8ZY(p@P`N%O+a?#fknl2Eh>a~dkmhFOm9<?=BIrIm
zf?_Amm({c+<SAf<S+c&XhOmc>zF4`ba<g~qwxMb|Gc@<Un<4P^n4}%BXq1>#8MN78
zW5iQGUbm@UsBMH9Z_AAQ!-+~|)4N)1%gkU+5Kdg~Oi}0xF1H$Ig2_J88G0-Pnl)bD
z7Y+`hu~Mh!!uDmK*FBT#0g$Uze=oM3{o9pTOac9iOH}{MbkJHbSZywj*YJa#ylyCS
zx0?C7UO-1P7%74sPlPxq2>Py^XH;vHS}V{oMMi6tfzm78S{+(Q^Bb6763&pRf}$6C
zf%v3OGrBME2NaBj3fc2P`Z-BotHV+9uTAYac(x#Qg_jCuae}6&Q$0w1i;jEbb`odr
z<0z;UF+Sm0vsA?L<g+BAGo?0;+;I>ZtA;GESxr=DgUi#PYW;j<Iius_w#)pzA;VWh
z$X*GE;0&c$OzvmV@N#qp;9&K(!+j{V$OA^ZphQAy08y+u*{DzzDuffEy(D43;%!AR
zuvc>*fWQNVTd7xxOz<a%8A=yR{J<?bGX2kM>5hJ%=GCX45q6FU<~U)5owrF2O+sNg
z-(03s{aW`Pi})kZzY~a}F`KGykN!7^fXkT98>?T6hv{VeV2|%fQFwqwq*4DShxV?0
zpf{gF6k<(r_{M4LClC}veskhy?-vNez9@h1wD4Q*=QBILb>}|E(Se!ahun+Cl=$-$
zuAB}|yS=6r0|G<f5`6(7>G+^~zNvM^T*cW0F`W;)&MLYo5;11<_@8vWNk(EeknxPj
z<z5sut2QeeQHOyKPc46$^I+t1#)INKiI3qqV|76Tfi*Bld1IKcN@TV4ntgv6Fd~x-
zVqELro=i^wK9!St$7mcVZZJ>*l!+chOBFx`baaj~?uTZ0w3Op%Y@1J*a<q&=Xkcz_
ze;h7&16{OuYOiS71yyC#`XMf=yMgVF>eAM;XPwb(YL*Z2T~|<9NiS+%S^SYU4>pi%
zqy&E$A;N7u%C%{I)EV_W%@dGFqW)mMlaA`}lh>==^>FBTPXxL+oXV-DWyRyyu#(Uv
z_-tRv`z1EPb`$!*#lqhTW=(HSiXY;e{@Yu4z^ym&|4{ahF{4CZm*>5YZQHhO+qP}n
zwr$(CZQHi}%zZo4nRI9RKkrm3C-v!ks8q6c?X%Z!<?t&D=Hr<@C|NbA?8xWbSX>OT
z>%o8T;AlH)N`JB9wMkd{vz&t~ARpjL)Sc)dE9l~vb7w2zDEX+K(I8Bgy{-SEpZsF|
zbp3VI3+PV;u%{@LNK3Ab4W6eZnmCDLKgrs_=SB=25JAmiGqu6^0@?UbaBs4l*`nSI
zHNyJ(M!;mFKy5{0oJ8c28uI8jB-R6#+^W;Wi^>c^w6PqRaa?3f7!}z<35o}qeZv4y
z4EziOA&l%|JP_+2e+C(7zmE#;<U0M*W4ht|o;NeIcT{t(jEO1rneA`xZ6FG&FinJs
z=46yO4I$Ej3Y~ddv~#M@Y1nd2k0W>$^*Ir$|L5yNnZTlwv2vVPo=yjnf3%|`QW~_N
zh|Z^ZI^UAa8ozkR-B$gz5WH{bAo`pLnN*e}i&7qTuuz|+5Dn`BY`~U^%@E_z?Ttp~
zG4X!WE#AXQ`vDvfoZPom$q;;1)>f>mExWk;@vx>gd-H5Gt^2Fl){d_#6Jm<H$`~B3
z&7_-pV*oGBjt^ms6wx|*0S6cYGn9psl?4@>1q&LONL$z=FiAB*0Kh1HZk90b6np_r
z3h4}tV?urZEuS<}R6ej1zW_a*Elb|`Lamif94mm78h%T-`v_9Ak?~FYf@1+%=&(4d
za@vyGu`xKvczSlA+Q2=1Gl3n85Gd@+niGVD)3wt4VO-+V-!$0|Q`J(^SD#^Kc!{8y
za<~ZHr;|0;YfTaT?A`9{9OQwTHGqQe`_=C^O~a_%Rot7@5sH|5q;0o^niImRcUzs1
zZmj5uo#xv8&Q*U@HKKHb_<SO?j)Hcn>A|C}CxCBDy_pf`h%CVT&h3D@h}<Jc$TtpP
z1@_E04&k``2UvNC+$`>}1gm-zt}#PuGJS@zsTzaqX?yU>_=x>So2twV5e}A;er*-4
zcR-`Lt-m}!2jny@eFkyqd1;nI#*14}`{b?mJ{O`p&#I_pY>KgUvK3{Ek9Cy##R%Tq
z9&q94k2tC>I!k}YhFKByxzpOpgJ>~rXA7InNkB7M0RE91S51_8O0i$-6Szjz&r!#n
zk%}8Z)Q}s+TfwI$3)rVwdCW3WCCcw4!C3AhMQs$G5)rdOnBBI|%>lCQ?fP~X0vXbp
z@s@J0Hsx->rEyjMK&$g+IDE&?6$-efZIgJBI1YmOS3s(ulFv38uwwrk*2XCi44U`s
zpRYj@c^P-s%`zuyr<0F3K}jfd=au1qX6_naEMSWrL%nt%AgZ!+*bxHp@<4qeuJ2;b
z=>j5QZD3MZ`y%7N86@e5o#CBFc4LfRuNXhYOqKE$MIi7HFhhU!btW;0MF=E_7Gz_C
zE@h_3@U;>!NGk?`_9~zd2Vy@*UISiP2}AC)E8^eJHoS`HBn6UfJE+pq^aW#4Pp^sw
zP4|4<5v|~Z8Ra|g<@)L$e$avc#a7Bpwm?lU;n*kFI3u^CHxC;Ki~NPtXKsJKcWO?V
zl}2(qVgYB+{ZMqAoTp&ih}^Nx53EHp|1;Z+xm$k?$YdTjvwd9r(gYrh57lj>3}uj6
z;?>k@8g&p3oZ*;k1?v^zY%8@ukRa<O@D~876R0>Rh})xu)TNt5pe`M(km|<@H@EDP
zu;6?vSBIVIXQ4?H$b;CPe%HJ4)yY<Jp6_K9sn`aZ3B?5uU&ThPY!X}^&dnH%$_ZH(
z8K^tl+ofjrUU`|4(6hCEj(;dM&zh=hYnbYmU_b(iC@R1%qnC6z|BYhs^-JOd(QW!o
zLR<qV2q0h-EE$NuCzpCmY9>vetX}~@t~K}$LqG=rzA*DjGX}@J*%Dm6ki&==xIqLK
zPckb@VLah(gi~bW<gjVYBNHG-9DH}NC!lM2VVjB;k%__jiqMx(`vJsx&?;JiR>6TM
zRz7L4VB&<Y<CQT3!oL1>ye?h1w_Al(jZizLivFH(N!>Hm(!F}*yUg8bctKVPulW!^
zgZF0Z`RTUB)+4Gv2Le&H(n?La<A7}OkFb^Uz>I57CykJTadgX##SMF8qiD-IQ(>`!
z`ME)$SpG#qzRoW74g>5RtX*QdyhR1i9ZS5CSl}T{$KOXh@16z>aDkr6I-LmA%AWqY
z{3uI>0dfiH$7U8M5=L>YkVCksiY8Ix_lP%5M!SbVhOA6?CHKlE)C$Sp^btG5kQKxh
z=eTpCtLLev9JC7ULk!Jg2~M+;<`#^G)@8a3wuNs)>>dpQ(S?!;>-{9mH9^0Lo^k-4
zM^w{@KIu61$S%|nbEIX&RX~A<;wt855mZ~rW3<TS+=wK0Ecl0IMrmYe9c%u6st282
z<LhIO3kS^#8HsIuGAicn`O=?x(^ES?Qt5g4@KrJ0nGxNY+0eqsA9`+9Cnhd#+??lG
znh}rrCHJVJ#<C}k!E$YVKpxfg_=;F3=92yB1A4dQcOHjt;aUOnqK5+rCm9{N2pm-E
z`M}*Jjm8srd_i>P@d-fN_9N-~jVH;|*iexem;lxvH`_Q?;AD~Z_9i(B@H||Q4>;lt
z>^~kH;y7yflgM*+=tfT%3UCfG{a7QYpXs>_=nmo@A_D|RVX9PlSD^d~Tg*^mG)2yq
zX|a~-eN#Ttf%SF$94yeqkoabc;e~(rcDDrbE+)zByvHs#;+irQaNjh5bp~f|dG~BZ
zc+YHcG?Y`=F){=D6ELI4Y7NDju>wxSAbj%8fTH8t>COL0X!_g0kGx2P2;nvwb6^h^
zqgkeI4g*>Z6p^D`(V+M0FwUT806KKT1dZ2WNX~Fo&R8#n(K+AzvgadKSiMy%*w@Cp
z)G9KtXjXOy4+D)~a7mIEPsQCP6QjGCkImlgoJDtnb(KDRS@@VG_l-qp;}4)q`lf%V
zCyL`@23jA#;L~<`{L3USq!4Zfq@dDNZIQD=&a5n8GyH5z$kqsNSu6AgQ`u?#27kl#
z_#u|JZNs@vM<(3S@i>y?1WVEZt{;S{N(RJGC)TMeNG`d@Dyn``W99P4*wwP<=&Qr#
zEpm<Urd^%OQfQotE9LaGw57m9eNKFO8*(X;gxA>z>TP}*D_{G(mGj3PZ(ism4Cumo
z81L~Iwsq8?yundokpB1sSJcH`xShI==o28lJpz^X%=aF+ogiI-p=ci&LTLjGq^M8n
zrz8aaywjBgMy}g4=J_~~e@&5b;G2xSx9t*Mb`fPD&lcENxWDd3*W-s23#+_kV$iAM
z${OT>hwD{-n}?#0$2f)Y?bZHS*9owdvo8>2xQ?WJ6|qV7mU<94N0^J#*cc$`5=G%#
zl&#%2dC2NsiYz=pQs-9NB9?;}aj17vx{e3MFxp#~H}zZU*t%)e934{2b18YnuXK=z
zh8a|KIi=T`%-KBq1{ZWgKpG8VAdy%Q%vzOhX&2Faof5prJ1%`b?w~X%ex%%GP#s5x
z??OD6%aEuUNcxfr^8g&Zk}fm$;<R8Ae*7Y#4E{-;4-J^&pgfQU7?SmBN`I>4=EcPJ
zyM%kcSlKRe5<88^j6%z&8m`FY8!O`bc0A~I7yHxez_@z;cLm?9wvcZR1TFomEBVSZ
z%(--=8XF>@HiJaEgUON2>zbv<Rh>Mh#4b@(YE(S#icQhAKCNxBl4GpQx9D+NlIX4e
zeQ0q1o|RcE8#ik7?Gt+jjH>{?_GxhQZG5mYsp!5S6x7f3VU!Ul-9X^J%agg>5~jPh
zFtI0vPKybVvl`LjO<6!Hcjq7>KdaT5l1ant>*VrC)^%O>YfciJ3Ju;hL+GrRD_4Y5
z3W%Xu9hm%=spmARXsME`WU_0;eJ0qy*Qg=iLdjS=`JZWfO4X-EAqbdcHNcdlc#5|%
zI&zLaIiE27CVXt3M8G3twnfq8;AB4_f5bqE{<*D2NV<rjz^<u|8`!#MNMmTltC`5D
zsc8g1dO`vw^LGu*Nb17RY9|vzp5$K=86^w)={*6iv(R=;K3XiP7^mkQ;nuX%ey9G0
zq-IL-6QM*;R)pw+-vcmC4R~xJ^jkS1Pt2!iq3vl&DA}&+4S5eLp+5Ech=T0&s_Yj_
zoP$S9ugB@F?lHU|VYQxU$77X@r}$(_gDxt=OsRfFsSZI^qT_kP&>!a41mBkzD_79U
z8@z?pmP$!<g9%4=Pm%GqqON*{+Hm^@vruqkQQAXDP?qwXqt(H?f6mI`{*qLP_lgT`
zjP7+o+R7_=)ulL0b36Cc?+$Q7gnid-qn3hU)5~ja7W=_XPYli#BZijU#WH*E*u`K6
zcwe3bE2~%Vbe8g9X~FRVA!-4+Mb#HfH?ytqu29nRR*W<S<HehU)mdlQ1^;!LFHB#3
z>8lGg6CbOfD@E$a+9Dq{2z;H{KmFn*Uc<YZ3emMiGxN0fU>lCeCqaAxrC(-9nSA3D
zvGsMq!lo*EMtsVoY7fXs-aJQPXczhB2p{_O0+Dib){lmU%Hr2~u3-?0m40<uY>3(H
zC+?R?g^I=G3lwPbL|E$gUa1=nUYY=f5{qor>TKEMt1UFeKX97Mn-G^oTrX-8g>#zr
zJ9RL5AB1Mgie)M-R4fKf8KR)3qX*Y=n!`3b)U3vY$?@q`4hwWG8`z7m_HI-(8(CXN
zh=mNllrLl*vFn9rJZ+-*)-H`dLQVF^vl@{Ra=5*J;n0B#mq0%@B{EY~&oIj^cowBb
zbVOeVMJo!IxtAnnC?jjy<eci;p0c`X#s?!3D0k}4VvIBzYl!9sHT(M?3&)wlx|d@H
z!tdIKS1Oe~lWGf<iJh3aO%Fo(leNsR={FvT%pVtw4;@<x@+V<;Bpi%B$k-luIRZ3O
z#2i_RNfz3!c0~gtecTOdO(b`z6F$R#UT%rM`hR|5|JQ!-mekKF&A(nS=6^)<{7>hT
zt&`dRM>|+?+jfHv&UaSV-cSKjJ|#&aTc}gI09!Ghfv=AHirgU~&<(Q1nA6K_<G06A
z%3mg`wR3lMo1IAi4?dT8^QxD!`WY;U>#dFL$L+pmFr6|PN+gnr#?R2eKwW+E5=n@@
z_TUyc)YN?5jvjhq{G)`s|9~ENG?{!LcVjs>koM{oR#>(U)SVzporx#hf`H-N`&tC1
z+5^U4S6~WAEk69!iW4a$Fio4vl`lO<I`XtX>6#)&B2LY&DoSi7mMJm0B8kIi#imAu
z<JCta7CEdbk_-Q$lFunDliOtzu3a!CH~P~!QaqB~<Q>#VYpyy-JP?3v+sQ6Ugx>V5
z#*MYSIhr}N)RqF4#q(b$R=8p-XVMSg;*O>r!atIq!p66_1KXhvM6^L%Tv-Dr!v>lG
z1Bil5NhCOCn~N&XEYqTUGCp6}lTI*A;C=RYnj~$AXz_^zShS=*(nVBE*i*M3QcNAv
z-P0n%ZfK)|3k)y>`d85U58WX2YY6VD>`;O4a&f0q$W5kHE*K~sz#_kdSDpfPt7kx&
z2JVvcXlF>t-@p=Y%|GT8e*Q|DtW$QS7yvUv=(;C}cpf!b_XOQww%Yf!n#oY=vUh^j
zh~YMWfqmuJ2(#KQUSgvXt%^i8nz5EK-X+5pcRITsiFq(wb7LK9uE9Dt6vfM3)?{8u
zx_HIEo4v6YN{Z5D%r>^$mK=@-ZaRth`Uz)HGaIZPzs3Nzy=x&j{{Z>^Z~hP(6DcpG
zfA}1F^8b!Y(%i<x_CJ4%*BaKb|6&UNp(V?ViihAr+|{qe*To6o@2uA9{QTB8x3(u3
zTmZ47HXAkv?Z&@eD=%82t)cV_zU|s0i|6-lYA!t7J1ROhPopuI@(2U0$517~Q)zX7
zoLrpk-&xaW(4hcNWJ$cyf)5BCiJA=Ck@S}WT2A}ZzzEP9!-8F>tnmpCmQP_G2~PyB
zI;nut4G+(0=*sTR8Sc!xf$#W->RMX&Ai?d2!eX@^z)rRd`);sN#P)dD46xm{Ua&zh
zX;LHH2T1e})_B6wo9yeN2Lq|=2T(D})1E!C9qH&7Tf~O&9UR?>1bHHfQN?frsKaf@
zjp4q%e0tWcGyt5#2x^H3hTBOvWS7jTk2ePQPn$Pjw_Ll{jPEECXi%$<Gqo2LZzNGZ
zT3l~}Hu*ffRy25~<%tlpW)I%8f`J#RWT(cU<()}8AuBj<d^_CKw-M`{okh{sm$7SZ
z`f}JiTww;`H5?aOK?E%su3ti$$D6j@ZJ}+Wc<odwS=-Q8^643T8yj3Hjan?Xo<2yJ
zPWTZi$P1JkK}dPZf|1wco8a>;*%{5)8cDXmZv+TyR(Z&IY&`|drfQaNC%^?sYAq`=
zXZz_)?lR1%a;>30aMgow3Uz7+FIVZ>u3s<j$P?k74fW09GFVmQ*X!4BSo*PItLvX%
zUPdlncUEc{1+ti7yy<8XT0)i7C=C`eKtU`7SPD}5>lSfkri_Rb3c@}^noYFekTKxK
zVC)%k*ro(WqSj;lGcbM)Ck3xTPddGHIG6n`aIBYm2SQ6f=nr9|Jz+KwHE>PML+9?U
znI$ta=hO=F&;lO@nR@Z&Z0m9FgJb(86gyj*BBg?H#~;dqRuF#xxK3FAdefSvKyLd(
zVh>ro`heL6r#G;NWw7Emu}Xs-vFLT|b|0jqX=-?R&0jJ0iBwW(QIK7x7bws8hgnR<
za?h59Jc7ry%srD=`C7hy4#qey-aOlmn!s#7Q3W9x<!M)ryaCe10({%xli@#F%CWcM
zIqB?ZJVQA?1=)LNtAa|mJB9#Yq&Ke(B@Q=f3WQyl29bP~>Id<H;l9CU=PV`|9TTkx
zuZNJ+j7jyTDKcysvC*9|>scAQyAV+`gCSF9M5mD)Y1Gxj)L-8t36Awq$qK{XJ9C+Y
zlFwdt<1;SVDqH!yHFOe~hd!JVRM6>iT=vbO5d0-ww70#B3=rq8A32=`-Vrsg((lcj
zOLkr~W9?Ao)(~m}umh_GE!bq;<mUAhB!|sWBILw=Evh35VAEJoFdyKqU3~?suvV-a
z3%BErF1(O;;XSFw>m$!K#yG{QNnK6VHkKZ3O)P&`E@|Cp_4Q)?O`Y;x`pCBL)j{Wo
z!NeJ_fW8gd`AyxH-{)>rMJ_!Q?}Y1xaR(mdUceWlhj`DXUiWO_uEVO*8*ce6j3Mtz
zXqj@Y>K3Tr`lD!86EOZtG9n>_+s(>rHXobulBcqaQ4H+&{wX%=C(~8qw`LR4$V%h5
zRO`(SMYVnbMz%CQS1f?N(?=|D*7a9yc0?_qV5aGE@B`*G+!){4-=RI$P&+}juicX%
zt1~vl@s%^nb+#4a^oAA0w9yeEV|vDH>$97iS$<S>07JaDki)%4St&F7S4Xb2TG?)k
zwJxD+E$b0}TrvqXuS_rOK*{Fsyh`@YSvLDhC=m>73KbPQouPoFWq*-!0Yk%g4aqNs
z5#>ou9TP2~{&LVZ3I}(t2bF6BwtabyYJSNCQ@S1!j7vWsBGWuE8S>Bk&JP?rcPtyK
zxhzO(@ng?obJ3}OEpuxvA9GaKTqumgk4HZ&q&5;8{EK1_wCbi!y8d!8mwNM#44@fC
zc@IKav6$J}W48x$M})jQFw$2$?~R_CH`#DZLg5@!eec8Y$n2(}Xwr$KbA)6&{b|lt
z{i!oEKf;qsH?nD=r%;hZjFD_3ky$qDQyhqUw2kta9%Rt0p1J6cBRFFSOQBJ?%q|0X
z%k4rNTs+qPqzX-YZyqH&jiSujb>MZ!8qgV!vnrvrDR8w4C3<0WQqlZF{^02>GUvgT
zzmoBcY&e5d5%;m+a^j?)_f>LCb+hlXJv}ihRt4;a%T_XJ+`V(j4PyNSWKj&)v%g)!
znH#oFvW(YZGtW8b&w((z5LrCL;H?#{i3YJw1VAVdWkB*!5#u)LP@7r8fKWtePk`9x
zB<Uge7)<{!-2^OuyVs-qVDf6ndF?Hjt(Nv*f|fI^9yAhG{M0J9Tluyavy%l{COE;-
zT3(4(2+As%jEg5<;qiO2b8=SVbMAnKlVQUePN&i|Z=vv)S~ZjVuUw<l)>hWU9o{Kk
zO7_RjC^|uEjG~I7@e}l(@8ySfPvmzInjJ$(`4vgf8}j8sTG}6;8)@n6tEc*pYdr@}
z4CqnC#>^@A3uqDcH~ljeOZjc)QM9`{xKcY|09!JY9r`-_xnfYcJ$Zhb>j8BWs$=6>
zuH}XyxpVk*+9ULk8AdAm#4B+qlPCbvzlsE;@P&^;Xbhqrn_789f9awOs<!0|vpU96
zf7WS;OA&_Ca>QcOqj|CRO9HM9Ztl4iQIcN;$hkaQARCe-ca^d@OWoKN7P&@7&9CX|
zky-&cOS=*Bn`{T@_;r!`xR5NH;9<4%5p0DlrTaAWcpin@TDaxFsVP>OEtHWYQ&4&-
zXVOy$ih-49HyfJ%ozN%)i;JHXG(bPpG^uWMhaZw3m4_!=EXDg&`H8dU%-X*So_9=%
z6L9D^HWd@_j|C;&`4b>||H6~s84AMeTWWGlGT^${QVuN~gb!sfc$<AfhV)Oy1nFYv
zG@XO*7aH9+sch{M;lNTnWdU^v=6?>k3C@nY2|<cqOMHLNZ0OjLR$n*WN`Oc<60nme
zi8PR|RIKg;Ykj*>J?rsuP?_rah~{aI6-O+r`Mwi&d3Z+&5B*LLWj%<A+fPuT`W8^;
z{$3uq*GEdB1`X7kHJa@4bvKmaij)|`a2&!Cb_{Nm+OJO>{AigWR2x0ky@@v1bg=HZ
zK6fLh2u~V4D|QjpRR-Wk10!Wk-s819?I5ElDI(btX5<O2Zk{+$m(=Fy&hxK<!*MiS
zni(c<XE)7u-ir0nYUL0yg_j5n!)y)?cTVCb*AdD?cA(J8h&>h(%f64x1l#$#@pna4
z1m+pyRJ)a#0BVO-JCGvjHrbuSl_}vOJ@y7x#>}=SR%!C`gOeBvfGxv~va%%cM1~Zh
z6~!fL3t9MA^2C!RQ<0@ech&)aBvOQ1(U!y!kT)5I?}0;+*338nJyM+&Tg@5N2MRM!
zUgR=|*z1;n=YiJbdFRchZOjP+c+9R|Sn_I7THK~ue=W7dv4oj~#Ygp=4l+eDVKyXx
zkl97AQz|S=Qp8m#aPdH1+d-O|J{&SosxCz6-qt!`Rw3;^4F};K2S_Na;jB@8{cqD1
zs?>_<Wd8vFfd4J*gRz6de=azq)vRqZ#o&H!bn7L0hm>bz3N4p)YDx7Q#pS^8`pgRz
zgXyXcyY=|$h?*<DUNhBo46e}bKqpO3-AzngOk6_FKjGbFYt*I~bnD`%T8rSgGHh_v
zQ=}Kd%1G#?QstB#<sEX0Hlui}fZy+qCr5c{W_Y~_ZZhB*jq4B3h9(kz)$qa;!kiP1
z5etOi>*3=NGmoh}4fcV;;v`T1MmoxA4B=0Pt>uSL5IaP`%2M<v-Ur2f7U5y~N*)Ns
z5txn<u5gi3;?NKH08=3cjS`8mm=Ark=^dp<HWSsFQ6%)miZ>wffPLcS*u+Ep<P{Mu
zHnTHhY4A=a5&*Wuoe~^M+9?3MMZE#oTjDQ#)t*1Szq=>+LA&EfCtT@k1e7GRCpNDM
z;qhQc@7%M6Ma0GTI>J8~HT;;K$`8{G6S_I#8)IsrN$)12cP~H*SZ_9sZz+`rKHa`S
zXmt>j0Hd&Vn5N-~`KbWNx=+dNbZVhJE-J%=8osY8oUoR@39g#t2;0uuonLuvfvhXp
zOC2&9`s56W`kk6CKbR#!>fZ51u-8<htL9X+LHs3$-8##Mi2wae^djsP1>)(=jLsh`
zX6>BgTDBiCJu-6d@1~oT)tQNr&~Rnlkz%wo|LQyvM;&lU(%_i<HcWW5<PbGcEd{X>
z6$oI4#PQb=q6+bb9^A0i<9w<xTb$l{w_4xGK3Kr?(A`8W@OB_Sl#Od=wc0ek)RanH
zp)XMONE#Jt71uiOU+p-~n3h<d`S$O!nd!2uC|jzbmv4AlnF>9a^KZ1_(bSU(7RTi+
zjkVgO)y>@H>!?o2H?C;LK-UmoD+d+QIN1xdv22P&m&oVpRXdo)8Q<tnc1jI(R+Q(y
zhAA!_g5~~kl0xW39)0s`uPN|){IkG;6;$!MEZ}lo1OH`XNn_2Q%Sf|Ex8<)9e!W<!
zFs2~9YAQEs!KB1Rdsk?74jP-S=6D)KOn1(1_|;QTBYI0^Tcf_Z^ul!5u>Jyw_$jF^
z)hW8<%JB)xcqC;JRjQ*IQN6|Ssi!9PJ++HfJxPr+&aZ8O`=B;905l20!0db#S59u!
zEoH00yjDQyiB_^ZUlS!cE%$_Rc^CSYFzT}uY*8#~Yl1~IoaaR*A3Bn}r@!+3=Jq2D
zVoNEYoBJ|sf!S**kXbmJqIwRf+eL%zar_m92C40f-tBdLtv{i2nipP<L5xnd17$6T
z^>Hp+#<EsCUNRW!vN^k6%A4O0kx=KI1nTx@<26N-@Na^(;(T;|2!wX}e3_v=She$3
zp?GItjWD?*lKfXVkfkpzJ*-^oL^8{3)bMpxRY=&@8|+?t+Zxp?#KGSU1+3Ff^GfM1
zJg(=*FZOW(2RItgH_kHh4D+jV-vEaIZ;xA;CJsItWNF>C;z2h7BeS^V*+PQLI}Pn>
zY}i4O7B?>KK`FpMaV?>F`y#8Y?sjv(zceE%$*wt4T;K$xbfA4j@I>@$gl=Da3k=}n
zKBbE#Kl=0UJf&8RI^n*>bXC{%2v?mT^E4)Ogw72pl4#x_aVe=~rx_$n6eGwUbzLIi
zVh9Mt_k;FTCVrn-)Ar^2H(MigO#B)HO(O>UJ8g-YSbBppzu~V*f|HHrRRDx@ArTM;
zjDhb;Ia0jT8^>CiEmJ!gVAPZPVmD*^n$z}1{rRlQw=MhbF*(rdgzJ|38e(bdl1j^(
zdu>$o_Y~(M@`5Yq6)SWolM;g*3~=@-)-&9%I|a-%(+PfI)*JDxbg3LQ2A$IJ5&gsi
zvqG}T0NRY%I~;4`$@yx@u_sM@?+gZ+S$u-ZAqL8l9Af$YBNID3)lcW~K|Ob&Sf~tG
zexQ3t*s9x2Y8M@k8V$EV9YnX$cfs-`G|H|8<zbUr#`?B=)KI4S>Urp36Ar2fN5UBa
zK6+%5J9HrwV|fO*jY{(%%ARP5D!J|Mmgyixy^C4DG{h;mUbsm^au5%#wC}EV%n!?E
zL-}fXJnV$Zs$4;`J|9VUc3dCcPs<Pr56JPf0(bwWbtMIXdAB|H?SC8zQb&(AS=+<y
zmpS%I<#j7VqFe3{YXgHSXNnSh%B_cZ(Gi7F5@B^kX$${%EC!<fo-NKl5dy*Z?;s`Y
zEZP3E2vz?Rp?~b5{|eM7!378d;GYO*nHG1q_b5Y(6Zc%@%%<wCiliNBS#iO$c-*x$
zSw#!9rXwPYsB<-O$uZS&Ns(y;k#4&WB)$1c6SjN#`F`)zdA(w7%cVyHoywF6rQ84U
zor>C{h%w=T-LyOI$V(6aqku&BHB!NZj<3!)WS})d8Oj-E6GCUK(F)+`<`M^z#jy6f
z^?`Ey2It}pU^6lz&0xo0i<$JJmPQfUbJP2H>~nUSHL9~KNT<t56OT&k0PTT4C#x!S
zyAvw8^Ct?f-`^8Kmrh>poQq}GXw0HJh=CW4iT%KO3VSk<M+(B_$R0MBe}NZ7>#)xK
zJrgUI0Vw5;JfVqjwP<dQG3}@y-ZMl~kJ-)n?(uOxaDzY0xp9&DK@zGlY%(Q9k2VU7
zf!|~~#H={au$4m_I1qk8L!zbnS0hEL27oehT_#u6vr{h(h{a+dzDM*uH1Fl(a@Cc7
zJnKP86Po!ySQkk1Q10fpTY=+~4%M|<$i3nJovqhE!=Q}{dYIOG2rUpubT>&)VP9lt
z!le^(hy+b_r{)7~=7Sv!o~52<$}`8Hc6-8x%&<QU2+%hK*`UkO>njzsW?CtEZ4I=i
zCzyu0a1G3NfT}3;$Bw+Fexw?$aTe;=&o_`>uQyeA38~wY8KV0Hyy3cdgYK7ak>%Ny
z+I{JNdDn{N@e@pwyBIp~@w+57ifHUxmS!<M1A`b4dM^NX%-Db15W@J1+PC$)QP*<>
z#m;wuGguz!fQ*4I4SQ8m(grK69mG#g7v0p?4lOt_fE6wSsS`KKCR*JnxXmI+F1;Ib
z6AK$llS6@<*}t#yhDo#pc6tqs-I+cC^B7@UEcV9zwSNdJ#^`owrIt)$+X)C}_-1B-
ze%*=RK{|RcyMeV9-p&S>`y{WjLmA$hR3Ubc@^R5*Kn?#v5d$^SiAR>mJB1KRinB8d
z=uL}BRk**Y0zNvRA;`)}o&+p9dM0DT`ij)c#fHUXGzEQ{Ahy$L(uMHw-N1Ftx*pWd
zf(MP41OCu;OR!w*Cp824hP)RMlFcj&w8ikKh8A%()Nta`tbv5JD|!o+`2M)ucDieQ
zsMR6}jg#aeA5MgR?vM+bObX7S)753cuyZGOv+kQ+@?{!lt4%!SympDg@K&%0Zz-^d
zsEAR%HsSgxDSHi^C*40@?iPq)p;4d|XX|{JcD#T>0PFSP$5szzO--ALzS<$W4+)#@
zkwTR!j5kbg6E!=+lmX5t@2ttsgmoqo^~kCtd?1@)6T>}Okkhc5XR27on+^JxWq4-O
zsqHVT+}^Q$K(jn$>TlvWV#EiD#3HWionwg^D@1!BXlGe}`lLBW$}&7MZm)y7oO;RL
zfYo_myNTN$z9w?jh~B)sXVM`x%C6ZU#li?eL0FnSc1#q_$}-W&zfkbt7y!m`olzjG
zunP8(p6$?1&<ruN(REYNr;7IAOhBO`Bw*E~jDYO5b7T>%msoRw#{!LlQHfQAC33NL
znPT;vRZ+^+d|MEsp}(_s(SD4LVnm~Tr13a1P;on1+8jzQHeV1}*Cq~WNPffg?=90V
z=)8k48fOkgfs(~vhh6p%yKG-*Z9AWChy^tKw2z9IuWnwsbn_#qyNkdrqAe?5c8<)j
zwr9xvVpX;l!2Ub!wIs<wlrg>|Dn?11raWuK>rXhRCtg8ZAorYfO(Z5HjNyDHyTK&a
zEvFe$F|&~MOI5c~RVS%tPDPi=kbELn)I$$ExPFX@bUdF*+sVF8jhztH3Y!EGe3<k}
z_HV<|TlRk|bALmY!}Wlt>VWQr`=~$D_4gyR8Q5&yQ<c18z=&Zlg(=k2J-L17ucEtK
zz7f8oP%VrIkBj<S+=@xqw-PFlF^WPNaAwccgC0{l!JmqCZ4*#bMu9D(d)u_X$KiXk
z)EQk(BWdb>vynlk&c#(*khGTwy$yzeDje<kTBL+9dq`TW{bW1MUW*YFpq?+l)Kcn4
zghfnfjF1_4ChL=24c#LZGJ$IBR2x6&C69{Pw4g2^!@TIJtQEn!iqXvQJ<Xo4%*1sB
zeYjc8hf>CD@eBCB9{y||;96JxlO7Yy|4zr<&eGWZKWopn+U0*~&+m*by|hzuG+Er%
za}tv^5k^*k1Yp3E^YZwEA$U((vvDTS(ur?xy0&3$xI0nmMbQUfxU1>ub7pF*d^I2P
zOn@D{yJ{j3OiZk951SRv7kDZn$amcRd>LpU*;^<(c$3LEQP=@TlNWA?6J7{@q`K4K
z76$`?4)?4+mkG^O+a!S)5=+k(Ks3s$!T@(S%pG%D|B}WZScJ6Us5c@++K~EFMm@*S
zU~o6AEIo{moMCK`RviZTDMc1?#L)w|wea8}l!Q=7gJ4=A^0em;(~;pZwVL66Dgm1s
zRML3USp?d?M|d^x>`WqYv|bA)8(Z7UzZ-C)KHOn77!PuU%%wcyB|HhN6v^JPoIg{>
zcN{WWv}Lj~kHy@vq*MnfyLJV_X>U2&xmV<*3V)$JS#TQ5?3gwotpf0Ac8yr|-$%ZT
zAKSc0yIc+e2bn#sIz(W4AJ`~&9Z4;%S`2*j4mA5uyfB@0Z&dDR^XwMW=}tGI=COCQ
z9071h_oS-8Dw@LWmie@koIb>h4ZJYY0$)c|%V45lO@^peo4Wh3gm$8n>t3z$yRTpJ
zEkc>c#48^&;4n1oy)cDp&e!CeuQY&Lcv$^U1)NJ%dms(UVR8pB+uqhLv&V$<&!a|n
zkVluquF2x6tU6Q-kYB$2bp2=Bya-8$*EMZKhZ3%mh_C`*qOkO75l~ET=5iAKFt|i<
z-X=?#@e1aT>pbsgv>qz|x`S{3Vbq@0@@FuCS5+bu49g}!xVJCKZy9jC`>}Fb>SkNr
zpT;!1xZ^$~cbV$1`y3Z)Ct1J~+K(R{{ioS(#PXpz>H@X#0%njFQ6lH>?E3)rYP5as
z$V7h`jOCpQHbM}JzRC9Ey7I;wg+m;bJ&^$&vFJ<8*@--yYqE+<IYiOP$aT9nkHE&|
zl@DOjVx65L3vo}6Y1OEw<X^F^$w&;lv`z0*hTYK&+do7Cc76V3*#0v7sO(GBYdCCy
z%(*y)&Hba}6(K`7SV@x+ZpT?D29gBZ%=m4oxMa+<Sy^$U+-{~gc0<xCh+z449~keO
z9|Bs`%)dJ(`h<#9S{v-c@7QW%5OfZOyrZ~+RL`F|`mUikQSLW9?J~fqv;-GI*mQKJ
zG9b96hOY!tS;S$uX$u(ymg#atHmQyDclQXoH>V1Kj9JL8?l*z8R$ZqbRL>9lzxTIY
zJ#ET0mr$i2K}4)hF^W-b9IPGEFgG#riWzAo;62>M;^O^!+GD)cpc|+XY5}HRLqwA0
zx-&|p2d`S`d)PpqRH8@dAbaT;4{P7WYm=aMXbxcx;)`_M$=80S5E*5C0%A>xaEBx2
zmMo<HYXDV=-Hgv9Q>MKTDnP2<90BoTY>DU$xS0JsW&j+hyUx*v$Qf^~FMO+VyfmkY
zrvy7pt~aO~Iw!z^KO8VYW1QO#__l}S!GDyI6~NA_{1xABH~^D?8pb>VWAg2+uZ$&$
zUMXH4IB=39^J{<sVGO5QEwtZ!P$tfc+C>qA?2_2u-fkKl^8ffsO_R&jJ`i-#V~6tP
zv?!@gWuQ4hL+3)bTrcwqnzp=cMO#u(Q6v;c*a4L-vN&;;euU9xM9Wk_&famrYgtb<
zZv@=CEODbGh*n2RmA&s>K;kij)?5>d+Ba)790vuf9s3EDKG)pPA?Yo;ET_i7L^o~S
zkQk)6MtIu7RSWWD(4m){GJ<EAM~shLK!EfrLq2f98AQS~XWUAcgHUtnnm!D(qPysU
zcrrn}g&6sXYCn}ZFOEH5aBoU>GGANCZJhb?E9s(7J<XiV0!y#rL>PEP_A=J(N`;$d
z`e|Jn=X%M_lS-+4nR6f?6@1^EQq*yC-NkhL@*Cf4J2ON!cl|VWRx<xR-Ol;De6Oe#
zT*X8hZYHj;G#MKmFU2PJ4Cj{SBwBjjkt1C5@vMQ-`C2OZrKdQc0zG2Fvp_@m$8wr&
zsqQuo(d@XucjYoR3hUtMvF?gs9Hp(y5Y`^9T<<moRI|=)$mnAY+$c3%5I9+_CNwdt
z<6?fB@0;sN2LqPBx!fS*P?_UvGxIb?8Vo{{d=bsH+unSnnKN0U5F#~x*ig!81kv{|
z606guRO0K;tyBBgaof)*eiJ9039#H2&Y^_;nz<`bumVoFk+#ndFKT?z{9+X6bqrZY
zVQG((m1~dK$ho)L_^Dkdqb#@g?PaT-VNnhl=iS;)X6BDmHfyA++A0RbeF}O~YJMnC
zrUv>#oZE#!??q9r)(K-MSHalrV1w9L?=Qgrs)X@_o_hdbfBtBr|6}|8AAMHl`YcR_
zcFyKTG>Xbf;C}$O6N}Y!B+JyC-5~$`1v&%#^XGpo+iIS+n`{Wbnjc78C}+c}n(;=%
zDT~WE5jOtXcx^!AD4mf7U{85gI!5xu<!k-=w~f1TOMwZ=(>s7{djSP-p^qn1v4Xj|
zg|JN?21cETW3JnJ`<*)w-%W#O9RtVP+sGaIPqu8xXWrB<N%o-Kv=B~|z-%4ESdF4t
z>@V-^UxKPc!^ETL6_ZemL{QAZI|8N&Zx#Ap%#Ls$$tz~Ky!i<bN{&>|Vc7d*q`)F?
zX$KN`3I$0wl>tM>5%d0G*$O*l=1E2N;bsH|dNKap9tjnC`0U9ImAJfKUzgjXDI@07
ze3~L{dPL>G`FOK(R7G1dVG+7HxwtT(p#o4@s4&Kxj?_*&L5EjEJ#kmOiZ6ZeWMTN6
zygj;A07}U9W8|BUl6Q?&v5rrJ(+7*Rj!%r_s(<aV(wUvKSuBzBo)m;d4Q}=bU93d+
z3hS;{iA2$7#KRjKKXGk%z8!pBzt3L=N6|eVLA)2QwYIAQ(!Vuot6z70eGP}zRe)bC
zwfHPXG5Kg16E<5Ksm%~jSDvAX&TcMvsx1<>9jPuZny;0jN)|N{ha^95$JP^%vXkjT
z_4n^2xY$11yc!Tz8+<%pXI%O$n5*xG5L3W&V!X}50*!55WpSw|4fK&1L&KJQ`r(7-
z#BRe8>+?Jlb_7R8a-due0<0u0&o@guqg{`(m5u(gor>nJFZ>#45?5mxsN4K5x48^c
zD!dp_kb#j&;}V{1K0GN!P31NoFRXl8fm>439=|Biga#+yR2p_{g2-g~Tu05Sv#nx`
zj%-Q=qyZiqC|9~4TPTK%nl4+AIA$sr*HK;H$>}uQDBFFJ0bKusBH@%e>zAmwOi(L<
zQL;a=JXvNB095Aa2PHa0Qb<VP^M_WPpfm|Efv&K5`@u$2;Qjdqm$FZH1_1XdsFU)O
zzt|6GaDxovXZ9;*Hf&Q$>$^j#0}ygRx&7-*Bqfk239*MfsB1Z3#{wE{4kZ>6#^)Ja
z1->FTbjd|Z{?~b78nFCM(xjQ3+#AI)I<n!%j-+sw?4*%B560%|>Od5oeM2E>6>6!D
zoeGwI5~=8KY!vq-+6k89__$rxP15{e48U7gK%hR846ysq@FL|9e<6a5IeENT!Acva
z5mrOwXt(~HEJxvXXA?EK(wuelKBMaXM8LlRdi6WynbU?nPJ#Fd1}jOZ8APdx3>&xY
zca!3uOHTpt@rKH*fQgH3Rk@lC(6U7LPw3;;J3g5oXXC9GoJ}!q@LG*-eI@$N%SnQ0
z7D{4ccJS#O4*l&i%(ZXFHn3Bx#mPOUhbCfgL_O!=d%zLoEbHt(_rCm7dQ>^Z<~V2h
zg2021L_Xciv|+n{Y+UrnM2!H0czffExeqtyvZFmr)O=%alT2E8$J5BVd#cwj=cG>S
zEQettI<tCy&B<CVZ+_X*JWb~2^evF74j|o)>}Qc~&<)K=%0(N!|FSGY{rKlrn*TKS
z<7RyAGyRV2?V^44aE{+*{&?1q@5w?^N&lTiN{d-zC4BKx)Z;MPg<99l09d5|G?|Kf
z)zM?eesX|&3Pzx-iNklj88^(vt1TVhXL4s0f7v!~V3mF;9iKFJpp))NBasz7|DSg|
zmZ*8bgeIW!L$SOZa^R)Q4Nf=K55~R?AHdf|oz!7!*H(1pd%AtK=<{NEeIGs4Fe##;
zBo6#XxbzJAn<b}dn?pgp9+lu9D`1*JFaQNYN~E0HmT#N4xt)PO2~j4fZ3oNEbt+dA
zLjIR4A+Gcc57==W#dhn)bSq>;g$4d*rx9TCXgZGj;!i>15(A~HYjDxg&PU{kz0N3H
z#OXxW=hUh51D4x!T#>^?uoHAwRi?8uGA&O}t_&Bl6e_O_Ga!hEWK`~j&<^HE3uG|r
zJS%j@(f*Qxo@QpSp4$&LSXpD4zE#$P0Xrbg))fVIaMr1AtN<##%1$mIUABYhW|`io
zJ!wHVVN*a7Y|8h|q;q0|%g?5b9zRwhx7jV&9Y61OpO@3JtFNA2pq19IQQ_NQ$9JF#
z>U5=0Y#@P4ZS&fm1;YXQk>AJfDHbNQh8UhM9~v{XCl_j-@Z7cCbW#1Q+-+{T7w%P>
zFd_{-j~7BaOLnZ(f$cZlBRaz#R6uT3Yjz2iazHdh(FA~Rk6Zm_C}}8~{mmk!FnZV`
z!bjep)vXsDb74idqm2`RM=0r~cvp;WcfuafM|LLI<bV!&h3X+8>WWsx!z<NmCMM$K
z?|A^}k%@n&oC?$Xr;1n%*UkxH2OvdT1Hdag#5Ot}q9RQeb(m<oZ$*N=9U}V}!FOCe
z-M+R+nQ?VV4!6xcVp*sC5X%KIwF#sPJX>B!0o5O;na*AUVU`dft8qw*v~noC75I3s
z1ixEwy8Az)DqcO!x_0;9xLo^qysBtraWAhwg|N@rlo&&LWRJr1)aS0y#~;Pwp7iDW
zIt6^Pgh<ynq=!FxqhF2^%)xw+&IGZ3^x&Z))$?D5s$sO}bB$ujzhNnSp{7QU-vpRH
zdv#}i9G|abQJRWnngUYwr^G>S2Nb?`m)~$}ZWjM6k>?u8^sx4$S5`YL!#(uY)B$Ll
z^KU{%4)gHzq(N(<?!Lu*yE-OyWfk&kJ90-GH4XjrrnUcKp^Ee(dcbvn1{#*WWtL4h
zxp;8>vP>A`3H?CfqQ*I?PnUXk<2*luL5*1K^b|Lv&013fyjf?LRcZgI=Ks-n&;5Uj
z3yEAg2`$ly3WR@|$*-{g$;2%sXJqc6>uh8GKOOg5|L@gBv#O@!feM1psp`{|((vA}
zo-FYvU5->WRD*o-e}RG<){)>B`pM>l6JoCPSs!;_FA2fn*w($(b>OObbX|SDIiY4b
zon#8F8m9|Sn~P#oQ+IW}y1G6n-7WcFM2c!G7pP`^ko}3OlP;-fL5hay*}d}cM3D%5
z;rIXWMH!3ui$TIGq=yiYy8i>n)Rs*Syfz<v?)aUNQ<C4eCYdBm2++l7i2_#_sKvcu
zghdyT72`>=*dLYp=dFs>AiF^;1_Jp=tSfxTz2x_-Ga&iYl>jhC$J?}f5K=ZUfNG#2
zGsLD8M=@m0j;DIrP#>4PF=6%e^uRC-$syh2P3DF!=j&t7=us!4T@1>Yx(%7Io{@`u
z;!&!7x{H;#g%=?`vDX6mMpFJg^w}SrveKc?#HGIsOUd-XU{J*p#|D;6k-s?A)G&5e
zc%n>!gY`8nhM*W9Fhd6BF?<@I1-2H-se{G0ez+orxW`-VsbZTvVDpS#FpWzOfybpl
z3!Wtw@HsfG?2oquHm)2g#e>XOM?u&xYoe>@oze-Ch=oYzzvF-CH|w47g5nBU&s5%T
z_70fGdnpt;nu7P{as~o{MKj0Z&(a4!{o(CdYE~u;R+l3oNcKr=!heY0_l}83C5ZiM
zTSM%nyd0#<0JtLwk*x8)<Ti_uam!(U>84*9b$Sd+<%qsoPc+<;=E_(*QFGN=sG=`Q
zIYnc2oORI(c|S&-9zJhmd{$}95%bMr@3>63j-$^`2Z7Tcn5UYZ+vY)E8Ow@=zO0eu
z!=HRnD#TPA3@kByO}<}DG}>KIauq@RTC#y!yvs=%*BoqI+p4}UODIi0aT_tSv4ELA
znVAytbqF#X#7@tkUmgW~`_oypdzm77Bg8oE(idgOtJX0{j|C#d%E7g4Bb7Z}ZZ;ZH
z7|R7?`O5?lZMSg67{|FN3X;<w8I#9!TCO|T@v(b4Hz<i=sdx=T@AAvZDYj^KbEf!$
zoz(V-xysnpUb>iV9gBQjbF*d0(7tN4QA1#Jb1{)#e_}qtCC7)wbmztB3N4(k@7{4Z
zWtyX}$!+xg7ph+ox^y(ca`Paq@?zflG(0~YHaVJyTgqt+yF|6VgdUq_4bwf;f)1QP
zS?|+reBoB=P^MLcgK`b(Nw3WVcAQa5g)Yfn3216Y`6`R)tz^M@ljf{vf(E^{DEb!q
zrFTV?yG=x!C!%M*$i!DJdK*?AV~F@<>Qo>kUk!RiccXz#qs7=hC|nim^7!nKaJ>a>
z;#vf&JVZVw#%59|r&OI-L;taQEGxeYC2<DS!f7XyF$=3|*OdoMDnYrC&TW}M?2vxP
zfCR{WWKcrdf9My3*jT_kor<2$4MgAa?e9rQhP6-g5(`g>ND)Y5vGnt>lIIXlmQn4&
zKVgVE5Q0Ndi$M<(56&wRgJ|Y5$zauY_TxXR)E@jf0-(|R5l(>UpD3rD+=>++XeS%x
zf?6SXlV<N2G-E-qjpg}Om~<V+(<g~|k}^m&ta(menNds@suR(pmJnXE{^Pk<li)uE
z+%f8|(Kf>Slr4ORhMQ#x_j{*RXgAb5UD!PZ$$Sg{p`JgsYa|R$UC5TOX@Ortpy23<
zY8P?ln)XLw-rrpi0Kk#ElKvnfG25nC4Q_;UVdV|N!dqZqDZ5zAYYRx{t8K{JoS`#~
zm*A69=5zU#TZX(Ff^Ddiqtfv&37+Q&^2BMUAUZB7K0JVkw?u)GvNHZXMk-vf2tQ3-
z>|2W;hGZ^qZXdhVfOp6avr?<u_55vbYx>XEeJE~RP=ifSAggZ@hI8Hw1V{alH6nyr
zDsW2;lI}48^Xn~)tx^+m_ThB%$1pVi*@#!C*tgKvQph)?_P5veyUX_Z9}#8hrrCTz
z)B#{t*wBG!jt89cFRnP<Pp7hpYMe2u-4~AJ=Z$s?Af?-Nwr{bOEhhc2WIkn7xhF$n
zV;>j3=sMNVL0o38Klzv|-6lG>M{SJB?h>iVN1DJpWUC4-&OUlqaIFc5s|qMik!QLD
zn$F5e-8(xIx%f?8jaTJ7-8S8po@(yvT*PQt0xpyawDL`&FRl?1#jf|jSp87C&G$>&
zin}h&#osNX@Cu4=v<CBSH9fWFZZp5eDL)J~KbCfY;7h!$1@<X=aVI_*!uYG7_&XG+
z1q_=pJtwUbUz$nR*>AgMm5N?+%4ZXC>ug~it+HP__eo)_k)X$!Aeq-NHoNTK*~)0;
zMAWI5SJ^mM^T686JlQ?p=d-ilQE;<A?(Qnswc0$(!mzF!S<8bf+IccE8?EPyCBVDO
z)Nk9a$}KzD2*Yi4P_hARgSxATEv^~1%l!VFo^>TOa4`IUxSTf+i<;`a9X6KQTHWO?
za#(2TJSXm&*5M0p*G+yflecy`SMt5iKmVht{cmpk-zE7^ZU4u^|Gi-RAAjYI9Bu!9
zBvh^c^eHL*Q}0}XKYxh-<DUQa)pa$uVPyEvo$_U@TgQ!&htA&!#&lFjsXvD-xKi2Z
z0rpdrARu;IT||ZP@pKkJMe#yftk1tcF1IoZ*-ilQ9oI?YL<dcst-Y?dZIX>Hd=^Eg
z@3H>gy%A!a%NE@htui`^?-K-uyAGy}_~}49wJQV!+tN)B0d@QxF@hywa0%te8vUx1
zR)6q|n43^jFf~Zl+e(n*#PAO5RD}lnAwa8?FoV4ASd6T>5LP3{NSfkgni>Qfny@3)
zda0>+30fpkcK#*F4Qi_$^~b0rv5^jjQ$eM=xyJwP1M&Ne6@%!(BO+$Odip3-=f#2S
zmj1IO#Tf<gX@j_qvj;j924{;b?Blj##lywL#1)4Rl^ue*#fq+w7`dn>Yzf+z2?|PU
z<+^Vr1vdl5y?u`&W2oG}PfTB3e63O9LXUab8aQv>32`{2Gr*<~_+ecOD@aEI6_-0^
zUg-=cB4R{4X6(w59^-kGjqERuqP+-JMR#SPx_TIysh?X_!|iye=FE`wWb#OE?*)X3
zZdvJZckS1A+Tyy5JZj6^^Rw?5+S8ytXMgI)L(31EAw45rN%+UNi8nEoHXK^2`zK%U
z>hO>vcqCQ~p>HN!q_jd}&8vX8*c(Pj;j1r##a~i{br3&r0^Z7ghpnh8P?I`do3F|R
zCP%I~#d1T^i!WEpM9w}-o%E5Q@+5E#N;U9b>Mgdvb4ZRp%ynlU7*3}~ffHIgknZGV
zcZ*Z>GhiZZlW*%&7+XqZD<8)luiKK5k%N@X#S+;PZCS0>tjEXaPf|MgIB^F_bA=7t
zo^!}Z*~%HwPC_O?lYfUDU60Zjv0XWiA*KVs>5`f919koJR78jf+H+tZWYdomN6tmz
zz1D5)2<vUl)8)^z+eiKeIm<U9Y#^J-f?Zj`Z?W!fR&J9Ff)7kBtBg^vcT`oot7WE&
ztuc^>ZGo$2B8U01@!(SW$)yzZmu54CWI8nPlNUsq{f|&K`YP&4;STLb?H)&~RPvVQ
z`V;6hMmie5P#3YZ5~bliaH7g_zYD(`XdPwIyqVsPJNzdtN$TYd?T6O}_H@X$`>#MQ
z^w0mr*gFM@7In$GW!tuG+qP}nHg?(GW!u&++qP}H>ee6k;l$~P)7>j#z0bEfM~=)d
zSIDpM^~tBB40GoH`G{D>R~y{p{2QhP=<}qr7vuH)Hk?2C=iXv{J`vL?v3n68u*E<G
zT?bqq8fT5}%SG59hRM`32l!rzDx#(!0Qlg}7}1QnX)g-vYwf6%W<%z$0&(TiP@7{r
zoV3NgjT;vAVtQargm*%3sNgX~{Rb}Lnocb+By4G<yH<IN{#?io!9wxi`9%EyI%vt%
zR+Kv12^eq0s1^x*otVo{M2G+`W!2D53}J|wS_Zrv{?AUv*igb?jSWI!lU|;H!y0H2
zqsthIK3la!hGrFt=0<a2`X!tK1PHfI3dnPeh3kujKu}r++LiY$2pdAOzI3juoieO1
zvD_0+kN&t=|7uwJaLfKYw1#^UQU$UFWtp$b!XFr*qv99lTOeDsGPsQlIFfv-N0uIN
zz98R}kxY_Fm>S5Km{gTwDsw=ZUYM@tbjv2IYyb{7F*fV9Om1XgbZS~JYNzQZt%o<_
ziH*G33{%8`a57uNO+e+@x@ubV4v}#Pt3em6D2){-4PZ(Y2zOLoyk!f91*8FFifUd+
zrJhd!RO-A8f!@PrBaZ8!SVs`)1V2uUXYs9z9)*zW?or|ZG<AYcY|s>{uJ}MBF}0mO
zK)#DKU4wn0T>z+JxSTR=4YqP@i&9r5$w!6qq*u(a$`stmLd#*~Q&)3gUs>tSVQR0b
zS}34bZ^!@{x%^?6@B=*5J+lt!s6|P&vykvTbld~c7xq1<>W_2T{a06@t`v0=SmbOs
z4DNJ+l}#G7)g{N1Lgd0y?Gm~+gU?k&V@+<sdx3izvSnwQfvwj=1~T+YFH8-!W%(la
zo<p8+ofpW5Gyr7qiwY{|xdPn&Yp(35)y&*!NB~k=KV~FbzO!kwS$P6H9(h8q<1fpe
zs6v?%uMtdR@6IgO;Z4=kQaLAUfD+s5{)k2oKQvE&{8-Zc2msOc^H{pDFC{0O$d>Xe
z7Zp#YXIlIx4Wxbfn9cr3mm^!8Bm;-p$L}QvHnjGEXLzc>5w&W>8!&V*n$mn>miVjP
zdcs*NvKj7u+qBc5)=HnP+GF9Pvt3Ru(NJu0o-%eix<%!u#_dUY(FpZ%X*x*20-?9~
z!reIjf0AoOW4mw%J-E?yWd<K%;PfURq7s&REyY7ZZ~~P=d5ZoM?PF|k`U%L4XbD>7
z7L#|~yadiZ!DCp`yE=L$)~BSdiFE8pq`)3)A_?ke;nt$<)D&wzc2%pNjM{b3rjhy<
zO1moMWsU}*S)w8rC^V#P81qPj%+)U9;Jt#3=ZF7fE-Jeb0M^_|%iyCRxFrPF+*wr-
zYak#z<@0Z`LA|9`xG)LdDyTzxnAW@bHd}^~`8nDV!>~1SIm9r|+{%DQ9M{Jh0D77o
ziOP4H39v@lnJ@(9J?Cl<21I|p@<#CL$3g}Vyz^r=B0X6Hssxj*IZwF{#U<3kC57v^
zY|WGQ4B$M?y(_8HaN4zvf~T%x$9YpOh-<)lCuGUI>D@9J#mXUMMAzn=(3~->@jPT`
zh?fI2%JH>x6Uqzab7LL6DKYsZ!xqp$rA5(d%SEj5Bw0nwz`jUP2`%~KW+b_B)jq^4
zKGf|Q+RnBK0i+7Dau`^-k_5n3(T+Xp3Wp*sAcz~Jv7-tb3z;cXE&Sp@IZ+m=3a<BZ
zgB9(0vY)-3&r9M>#2>EdgKQ7tPV4W)&)UZ(%<N>WwA!4H8Bw=U{Bz(;1k8X^*-VMc
z3<W;g*da7aGwJm88M`J`8XEKL4qxicaqv%kg)>*-7XNO6rrs4N)w6NDYnqj{PXSIN
ztE*+`KhE)r&=dP%q9!X1AaB8{OR8Qjo2Ex;a`An`l`si-pVx3$LI9l<Q;jh)Ie+?W
zCf|-N?_39lawR@zbI^GTYgM!xdx-ig0_YOx)Du^TY@MrsLddXI8@-nHv-|fmQ|uAR
znx8G`+qsXE3f*9`S~2F1dskZ0!lvsyFBRmC@A5%@{R}{fnjUG`05JE^TxUpB3#|W@
zvXBHFCnf`}f=F3c3l!I_28hTah#R6En=L|>S4v!%0=_%R*5}<&b@|N|Wb^KF5ndnE
zPn^){k#9R;YAK#y+klB$=Uyx{ZgJ$Acq4!8+!-Xd)cIRQ5o9N=Y5mO@(aXX~qQRi6
zasV%t^&crpT)pOfdz7?EXn0(Ehx68TRACI6xv$M*!1v%z;A8lL%*OLy8yq`m551?B
z72#DPG{F1QLqMLriDN#70}cwp6txP3D_~rkq9_!$@fWV;BLB~bEsWE()89|hXcFs3
z76^u}2~Ylur;nASH}LI~nNs#{&oxsWyZkZ#soj>JZO{^&teyI<P1Kb5OtkO9=S0V+
zgyNhTSEV-)d`IR#<i(f!^bRSfYm^Vfm*xjNuBvt(B{=crdrUJSv;{|4quUWFcb2_>
z6{G}VWLee3Br|9kn@!BcHJR!aeA1LG0!@$H1|w@_WM_4)V1817^rg6r`hx1hARA9$
zDe}2$&c^NH_r#}GDnn{{C9W97o2k5y3IC9wW04V?5{>lV$<?STr~cus5&Fx$BVEEb
zxGu-K7&|)}E_%r?0Vll$x3Ye$zL9;Nds}wmUiw$Wn?q^XvBi6;cga-BMAm0It_V{(
zn>GnAKj36p@v}l@;72|CWPbvPO@^GYcv`=?AWxZ*Q@XE(x$b^GP-$TMis8u0yVhwd
zx5vBW7f&=T0>6e#e5qp9@2Yy*W)#V2*K<KdDr<P6N+3lA*9y?Vd=U6XW89Q<MFs~-
z_>9)|WslfJ3!T%D?0zt5Z^be^-$qnzb3Cc=nsqc4zRdQ$@$|PDju|B<?Pv22Us0J<
zR2I+B*DXT)#|GV<zU%K5lk`iK>8n|Mx`ABehefC}Nv9-cO8womol472!C-2KC263E
zFjYAHw@Ei}cL1=c_)n8?S|qJDYP1s@_v(;M*H=Y<%3AV@s3z5`_95W~j0$RkJqn5;
zYn)r;=t}Sosp)!P8lp=$ugZliX}lE^&T5}chj-QB^lc_R$-G<fUzK8)e}^;)?8yYS
zkR)=H(GmTrR=vv4N`)w(Vc1+^CK*1Rp;r~lkiPYgL9Z^T%GnBhp~@VPG<H+Q5uyB$
zGTADbDOOst`aP4}4M5<nO3z|k$POW2g(1Ba>5=x;hXia?vAA1dRXT6-s|>iML?s6*
zvZ5cV{P%B()*Km{Lf%*0af6$)%!>&rcyO!MnMqX|I30`27&+*3-Uo9Z-zq#ZL4|iy
ziG3c){1a`>cPbR@kHEKu#s3U==d8R|HH+(jCVA8*m7plZM{;{|5p&Uuh~2(dfc+>K
zyTw$@PqZk94y6#yEC7bAMQ^`fHJT8tYQ^MhXb+32(WlW>X?07y3fy7dvIldC%uPAJ
zEj#PIlpUTJdc;_83hE_I`S9Rt-v=at#i%@3A#LMzM2*wnJ__F+2Q0C}-=4TEc?{8f
zd=6@2ZlQVmewQX-z(98>>p9+|bd1F-j}1Pbo4K*?!n-`j!MX{Nc)rl&CgNbM2*uo(
z@mlulH`5=CH>FpYFf%p74^(q>b|cC>iBUfR#DgH)KsJ$lI5Uf@V{;;;c*q}3*#OJT
znPre^p5yvtk@9`_)Hw*)lbbfNuj40^tUg{ud%o@*ZM)$VuCGo5apa>_Rn^KpD>_9q
z4G=UC=)55PI7-#%4GvujAyH2P%gM~XmcsAVBRe`5?BB@O-{u~`?+aV(=bMKS=r{_0
zd}M{QUi>qxH{Ayx<p`xo|G5v`X<t5%@bAdX18+8FjhVn;Dkj_yc1F<v7p)H%sh=i7
z=1&r;?V>Vi#VKWY<HhMTIknvvL=vR1DC=?EO>!ZiYWUl=d&UbBMn%)3#W*357G&Ju
z&C?%lANCm0y(wgq#)_z_A%t<Wgt06_c_*aCJ24|lT}JBFo|9;T--*tML0O(sXBZKB
zt@nt$uDS{FTnZY2?54b$1mJvV$vS{a2t8CTxY?H!azuM{l$5&5i<r0`znXvku>?1<
zO^0WusMMfY%TU5emJ_vLokLQUEaUQ&+!G}f5REu8wFoRWl8j1Ek<*?pECwj&%9JaX
zqN`YV)SId?mAY%omJd`n5s@grv$y#i2^8@^4Fx?vc;6mN&CHhJz7HBkp!^j0miP_^
znMC>dFWDY=T?}!U-%3}v-?9DwUFrHC8Q?!7`~R5jNm2j*vpv(b7{&VgROY3;Taw*6
z@<eQIZAf(ht>)QOO>7tGX!I_c`&z2sA5(R&p)A9E{sLwhC%=Tz-_N@i)&rK9uFWKJ
zgkeLVJh7?ueZ2Vcm=cD^p&Owp5I513e}bLKQ-jLm;d;xyx2xOlfjdMRPH$QifrBA+
z4V_QjAk`{ktN_|9Ge|xF$VboNZS;T+2{A2cvYo<VUTN^xY@H|hMBY}^7qxy{umGBF
zMq0HBCQ_0|!*N$;s`QUYlJoY)Ifq&TWU^5;hfHRYvkJMnYScP2(_|XNgn4K-J>Rp3
zkjjT}B670+BNba?qn?PGv|&gx--JmxfoV|MAksm)_<lc5&%RsFojE$6V&0An-wSK8
za^Q?^iAwY#$FNIkkcZY7&L53RuHpK=HaI^sUtHSZb&m)!Qo3(mPlw>JpTVnkZy9Ti
zPNV1MZT1CBP2jUO5!9*!z&@G~MDEZFQERs;pfF<B1Rs{%?#D?n(zDbHH|q;N?Qx{u
zzEE&icdoSZLJs**+ibTzEwPaZSv+7x{mFcQ0!4YOiwRn2$4z|hAB?O(C4_6V1(fRN
z2j=zwJn-#{@d-u-Okp7NW#?S=6<o#KG^)<vnGs!qCec2W-<``+kPDA<9e6Qj)W+2f
zt-r~e_h94%INb(gji<e+@64CQ+a94>9ctWhhR2~&_I`Ssti1Hx^@X$K^xT0!G_n+n
z2}gNf6wqH>U*bn)$Ad;h4%ol3IJwR4bF*$VPVUe(xX~6PNh8%b`8SsiQYE%6!aM6z
z_3>RP?j~QCE5Q6Sr3nXHnN1Db;bR`)a*ddUtkXTIp4eX0JYW39-YH1h2UMi%Rk|0*
zME%_MBlNFWh8|Q+(@bmwog3wx7_Zto(~C|mhK@cw;kTGwd4`T9VM&Z?&3kC7#|ei~
z#?SaSz}bO)k2wf&l|tkO^_tCwEmBFoS@R~HJ3b~`Js+cfy@8`WzTmzMTlza}FSA^T
z94=1imPOO8z8#iza&6B(3$MMr8%y<;hiNeIsfBZvlWbfu9JpJ0{4o~l3dVkPhFIQu
zs0%n#n@g_?YnAnVtMvoJlc3M^=ZAkknpeuqEB$>zuLm7-qD!-q%<K6Y{kftqfOD%p
zD?r4Ak=eCa$)O5OQk7bpjflcP2d<WNvcdl5lmrV0TQ*l@f@WbFP|D%k2XxsR*Ike7
zHLaha3>4wZeOmQCsMfG`*biuow^NbwPYWR~3OKcIwbW24p3dztR|vSO0;ZTUNaL-~
z*5Gd9N~JoHjpMjbhExC+sNE;Kv~0Zi?3{<Y-YT=R{16J+z%f&npDfSWhZya|J;Yze
zpwcX~S(Qk7Zk^I)43_Z7nk9}+Ig-&v+IIvRhqavG)mhn+Ad8MqN5Xw944l(4dDJ_w
zGp4W3WuL+Qg&Gh@_E@p-f|r(&RxzD|>Y#1%aPSDg5eYIMolZ$o1R-?mS6qrjP8}>V
zjWsI4C?U=A2kk1KbxLWs%Fo!oVQy;R)FG!@Om|;WlKied1l`)Wea+Ytvr(5pk3v`1
zUy1o?{zhg`j~>BWo`|&08iScg?a4tk%`w+ti%Tw4*BKn^XSh{TULtWKsEAS|!i$_3
zp^4xgjw?*VERaD{(B-vwhPaW=sM<@Lsliyu?feB*bouLZ&Xq^ue7P;ymx_sJy-rVQ
z4!gouSLe1c&PN?;B!P6bGv-A9{Ficb9|0c<w_l>T<u65s{D0I&?Hx?*oSpxN{%qR>
zL3wOOgwUIB)CJMVM2X81!F`26KvF?bEjCo?C=StB-afI|?uL;f#UcL@vM4B^+{=@f
zo;!~U#$d)toz|CkK|~qyq_I1f`!5tb)cywHjTY9=`)fqdK2ee*ABw$xjJB~r0CtR7
z{(Kr_ibgBiS+Hb;Y7zKHIAb_<hDoD2>?lP@hZ`cBH@qt1KY+~P$#8XZV1PeRmk>>$
zdo9^>n@}OyWKU2xjJzTa&~~ys8J-R9AJJ0bmp-9O>W!icblXk41@bKAz@FW)MY`kO
zyUEUxWzhT;R;?Q;bWaFDl-d4eaQPMXr7BIVV|t8kMb!+7CC4TX)CVDystHH1K1pqJ
zXh#m)bn5;!8;CGq_(Pt&oi;s*{MPR3Q)7?R7e`f?jA(z7(Bg|PhOTCgaPFO3B&<x0
zGdDRujpNnkK5MKYB0pH@3RiMIculgBK)v~lFL4b&{d>=Uj9w3$aO#04h(+xUZ}aCd
zz0Jfeinr^~|IgC;KQg-dV^j4PBme*&>Hp^b{2!ZcyR|l))@6`-UX)!{slXM}h3TIA
z<r+k7{wnYTLfw}56k`<uHlZOEV`jLrdA?lb%o&D&gpqXCB*PZw@V&6}RySdz&jxHb
zd?0yNHix)p%blF-mVUUW*K$U;@}y6NF+}wHJBka@r(Q51(Vo8X$yf#lP@?mA9os=;
zBG%@g+zL3L@BceOln9Qg{q4>}vxYRBvI67@W3*X?2FVZ6aM&ka$q6Vvao+uLdsPcU
z4?wnS=@|hEADB+E9^x@fVsO*|*b`zRF_Y-=B~*J2r9f@m+il^`d|F^d97c3<<|QPy
zN0g=?{6b`q{8(198*=UJ-nh~tTqg+GfhtthwzncbZd!IaAol#&-?!J>eXWlgZYOH`
zn!VG$SRV?Fm+^wzoEm;!`Tm@Eg~OuLZ&*!ZtG4CHyayD6AJ~hLgn{+Ky3H<t*y<Py
zNUe(c(E<3TSpOrvDXZU2x;XLK3;_Lz_HN1E5NC18{us0k!Zhj9jNEyFcDbC>sOA?{
zNKlL_VdI3D$h-rsHs0P0ijK6({NU4a>j~S0OZ$3k_)U{>L!bW8G(wn!GsqVq3)DQ&
zm4u=9*ebX+&8N=6;;wEt6tjM-{3RAgxa1M^#(=%PqnJHg4t>K7pXTaRnxc@zk7~OX
zN)aTU05#c-#Cz^9ZNiq%pS`a9VQtTWv$Ouv-FIuaF0VnhKbGJ+<SbuX8D|oF#WbcM
zdS}8Po>QqL=v|zr5!gmGISB9)gzbdbl~T747?*zdF9==WYpz)XqHX{NLN@n1*0o$a
z4e_MtP&2G>>f^3!jFPD55K$ZfL1Kj!&)_r1;mqxwBO~tWEzPpmU0k)Sik?$e`DZP?
zBtfd0O~^Ubo(0Wf#zgA`rk2kukbF<J;`4~KYt6gt^*X~<z#xn_tV;wQl&a07Krx#}
zCZ9Zi1Gs{up=}P@gig~@&_srPL3jp)R;HhYpxEY23(OSBh-@I{WOdT@BCTyrCWcJM
zHOt|QRggE&K>PL^*hT6uH{_1x&vuRscwxIQw;#sT#qTz<qy;<Upl<{UO%e$yeA{L@
zclxRihSTE~F9NptLMp9zMh%EAMgKayd*<1~hCe#YSZ4Wdv?urZ1Fb#ZSd4zBT3F^p
z8t0YJIZ9JOQV1KmT_NL`q^&$Tv*cVM=;bEbhO&cJ_f2zLML34ktWX1gQHh_<(nF>5
zqtAljLut9DOtU~fpM<&3OcHHeQ5=FhG{E*%5a^ytJV&$xYL~Iq08H(n(QZ=f91S`=
zu~>!EQV~T8>>CibEsSR*k`%+<mL{$-@>W9tkBsfuJMs_m_y>2E+un&K{9OaTFD*-{
z+I=qN;V73*@l7OQStZv^qIl=&T&yaHpsI2?e%7iP*kWdtCP)kmab~Dp98*m>PxXP)
z`Nq6J86Jqd89HP8gO>t}$4y}EIgCBjsAHaYc{DZZcjXDrSC!Buvf~XO+-#hsI6L`2
zHIx1j1=uY%s9ateqAR3xPRo>a6esC61$4MVOhRr6esM8A%pzVN?p(MlP5+tzm*vID
z%!uNfC=9Pbofzs!P10lBh9`1|+#2do4}&@u+)QtDrGa7xEZEh%Rzz^}Scb;ppCG$P
z4rhIV0ZA*{<@}<t<lvJ8FBaJRoo>SX*+MP)Rpq85^MZ1}%>bE_4oT3m!yxKCE&tDO
zG#kc0W%R_#j5ac6sZ|;Oba{@*+GN&U2U-#}Los>@j~w;EYPeQ07jsY*Q!p`R5P{}B
z6Q+_s0YWu4lczX9X=RIV+vHunNNGaB^m9+CQl?X088Ufg$PUgvmqZj0%Mdh|<nU6}
zw|G>@@nFV?5V_$_#1M-l{<>7QU2!Qh2%}G^nD=&Wb^cD^tvC2$t<Rs1^Xl4YdI6;#
zI2_=+I$bs@^G5-;3=G;QLKjIRCnNA><U9>Sg?gVX7+aKx=6F>{6Dm$N>4B3~yp(}3
zs<EbXilFD1L~7@X>TvSeHeZ=qjU%-un>CCFX2~`lFsdb3$CBEx4PYMFWVd1l4~SsC
zHxUbnq#P`Zgdiq>u+bnq52v7P^^GOQFn3N9g`{};J(+yfi148{eZCloEb|7`8mtMt
zz8?L(*3Xlc#s%O5!VW`4;ZZY_ahx=k1gI2x=MAw)IB11<8wwEid(NZNqETWd*l2A+
zF$+kskuiB#+Q7(zrDDdhnX{|15;qSi<lV4nDPo^DJW%;PhVo}L;u44BMCw=5)B7>n
z_RU(Us>G!1nOk(xIUsltSqKw<lC0gVxmZq%LP#Hc1PW$V|0<B6(_(bF*5l{J!dn^A
zwANP@OOeAZflmj?NWBZWL{zdYh#|3G(UGxaLd=m_GDfP^M~P1Q2)G&|N^_0Z&894u
z=?UzxGloIp>+5S;{XGe{@IGG0At+N6p2*6B@If<VIg130q4k@7KWFx`wBnhjeXXof
z^$qeLFsL3_b(d7cD_<)gAZA5YO~RiUYYh2YCg*w2;3*=OpDTNaHQv`z+l8ck?IFEh
z#Y`*f->{fuZy6$zoXlXADAL?0_RUA%0$_9^DKp5`!QcuN^K|ca?Yus%dxM>=Z)->O
zJT?9i{qYRm)dfCZ;E<BNR$qY;TPptg#Svl1G(65pgCLh9#gGALa(B8qAREd>j!Vpy
zFBf>#%_5aXO=4ZQ98v3}XWA(y^Ds$LPTlBFy~Qz87Cj>d{IVf#)W>mfZKsncnzFy7
z-nEF+eIBA6*C~$uEB$#a-mlqfY?ohyJeQ)CM)B`yDbjYzdOR+_^u@IHh|6kkYm$59
z@tVu*hepSD^sws?QY+0PBbAQ(*2eBfb@XzfQ&r^yTEeB%bV>%A6xZ*~ooiSjPP$d5
z?Vu{t?FVfyCu=DX-%;E!m5{$(S^K}gy-;7h)+uidA1`cMuw71pA1FSxF$WSns;Tr)
zTAf9Fffa*M4#c(JI5n%1E6w5O5?8gIsMd=D%uhZu0}ID)&C~DCK#n<l4r0W8OA^=f
zgSDinAKGLovW8N<4_&xwei*A?{rIjY?pyN6Pn7M)^5nv_ai(^hK=U-UDm8J&&dOAT
zB|v^0aC~zWHr_v+{%IhZZD$RaX0ioqk*PtapL8wkxV||vW~SuuD!T#N@8ra1Fz*51
zF-`=Ay3#AzsJy9Js8+{!ev+$5khK3kS}?x3w)0Xl_gJbHsu}LFfIeTRUdKO;+ONWC
zEbk8m7vBqYPY~^*<{<)W`|B|dk$fy4GPU2yUf`#HxBTy)w6Id<0QOfeki%9*KuOUg
z6sNnVX0_6{SwOnt;Aw5StWh*pt0nL~@7T*>wOl*z8g)bWO6&Sl1>?&A=!2rzYe=yr
z9`%QF&5u5wb#{|fsV-F5fqXY%OWr{*9vL}l<C|Y6QMN2BLw=)m-+$%&LHZl;CjF{1
z>m2`^m!+Gn^M7xpxYD+D-WNmqrLHg%(qVUDY}nA1Gk4Y)F?LFW21Bo<Z8_^u5yIwa
zNKnOS>`OoQ>c4bZl7tx0XKjXa^Vv+6b(VIP>gV7kG$sK%33(}g{(XHAm0CYJIVrt*
zh`Jfu3QBa85uU(G+#q=m?VvoXnHNp2LpuWl%pd?JMjp4gkMN>J2x$oGkro!?ZGhs<
zj9)}R{v%!#8^tQAVci7rhVff!<4I<ioQPUTL9Y86J^2}c^j;}_ko-#MSZIp#DtD^X
z@Vo$uPB$b$Sc9Bsk;x@+3E=q|U9bzS<YYJ?Sj*q=ZWSY12~y<ACyngiA@v3Eio9Pm
z+A6V-uA7rxy>g)j!p4BsRAAyqmOfp?SuNTD6YzPtyQ|Ib5}X1)>`BuQJPNB7g+({R
z!$tfHYh1%xUlyPE9*F_HAd&m~Hcu!$p3Zz?#i6Wl@5O`TMjmXPr+}nCM*>;6yg#lZ
zomy3g^tv!W0>mw(b#HOZtWZ=pJ)bBV$Habj0INg}X_2X4-K=Gvn>u+s9?)z~J{Xyr
zjF0BQL#P;SXZjhC2IsvW`%;F@5kZW@N6hMd2C`e1cBKWa3%PGT*aBYIx0T1;WIqx-
zr|WN|9qj)+Hizgi^G_&lbt{3j&bx)RC-?FFpK9OpJL}swH;JNN95KI)r4jRwJ_5uv
zdB@Y<#B*Qi=*wuta)aFix!d}w&5;y^bYX~eaXxsY?OVV=g$mkrS+W8lk@Iq&n%xs8
z<*V}G<1_(pK%ImyIuH>l287_D$CI_Sj2r><KmO2>N(X4bs#W_Nao&&X1KZprxv$wq
z^UB$!MOlc-_~Job4oFVJnTc7=d6^ImF*Tjmz-MIHU4fQcW6@PI1IZ*$QsSs`@43zM
zC8m2e8xt+>g<fy|9x@G@R2JRUI(ko8zXK-g3M)L}Y7R0O5W#=KNaS)ro*;(_>c|_^
zrBU{UAA5D}ymBEQcNVCX&-Z$tc9|e#?%Q)2LjC^U5s$+BszmPbLL?tH_2iD1MNwys
z2c8jQb)k5e$AT<FAaOZrj14~52Al(G3~-P*!bxd06filGwtFFZ0@ffM$#!(7&=$W&
zpR9pjFHJLV+gZ<raCfgKGoBDuf1npkv1q{?iHjI=<Q7fLz0hd#`<{*q#V6N54hZi`
zs6WQ-RQ4b+5Mfls?rmCpuI#C$iELcpdm5?;L9O86$ro~FA-v)kHU)}qk15D=O)-r{
z5H-6lATNgazN(aqBr+A3C7FPm0$y8A64$@0HhJ1@$c2-1qX}dn&j4r2eB{-<q(2Ui
zG=6db)&b~iL|UMD$FTN06j_}>TU#I|0HNf72uP&+*k7!n*U(qMy?`15&>>BfD_Oar
zI!NKQDUR@_-oS<}0GK?Hdy?VG_f@JB@P*e?;2$L)hDMr)pzR))$(Hm>W+t$51@SN#
z7!c<FP)N%owkV5sF>6J|6oaNhjPXb%)y}^bk4tq6TJ`7^Kbh&d5ysf;5eu&oh&Ic9
z?ddx$B0R2_J~6<KCXk`05Mv3N^#bRyXapIe&@l@jRybq@_r&!SAUZIk(?>C&0RxF)
z0JMFsZ3*a2I!DnyTVR4^bya*VS~U+|G1@F1KuLb13}yN)@}=<*R0WLXR*uzU!MM-z
z1sr#Kw|^||pTPPG{y><LlgzCO{mrAe-r956B*tReJ)k<Q2lWuRfCpf<|GEstlX_IL
zP$_!>M+jRz25j~@`~x@^We9dsBk#*EuSQ(KUs5&C6i&JyMfSaMZGnmAisT;HSp&3{
zCxcfeI8HT$EFS%)%-1~n9+HCW6~B%0So7-{S;cN3ky-&<u61S^^yR>Dug%&lMD_-W
z3O2-N>fAZCNc9Bq21wF)^C3XKP+3Z;Ii-OR{KPcD6yJgvsb2yt@hI@w>_~o$jPdUu
zElf+p`*L{$0DVO<<+)#vWbFa=R5u7JsxUSq{0xsN@!Kt(G1BS8-qB*vVRO5Dkh*eK
zZH6bK#U~+QoQ{dcX^o8l?hYB|&=G-jIj{>@`ZpIM1+X3$4q1rLCLAWZ0SUlDLTL>Z
zn)Y4GG0L<}i;wq~Q(GgoBz~gPgs1rOtQxpWK3>TO1{6${X4cK;PlRx$xcp+kOezon
zI@`z>ss_GmfHsDAHL1jD;*7^{%974{4@+{Pf;MSij+32a9?L)!qSBufuWVs{OsR-j
z&v$o%u+Dd0F0V!K=Zra7CLbKdMxxN?C6b;%G%s9`jP$7r8IK=t0w64zy0lFRC7n?x
zRt63CMTz6EN^pg22ZHOb@9hQZ{FT8vosV+u1n-j)O%TRKq2%qpXt<5fwA^cV)Sgn{
zoSFlih7%6@%40jw9}RX$nZpr`dlXcl_mF<|aD#0dPC-Y7tIOy^$h`b6I3X<7NCtC)
zP~y744jE+rdl$4Y4Jc+<PRK&(pT!uU01K&Mt_cvDhyZcdj7d@1H%UGno`Tvq?vad2
zQOKI+cl`Heq?na)Z@=}!*Cz}_EG<HUhEAz`k?6U)=9z!`T|`c8vUzwIkqHjXe}gPl
z;b@!liw4s;x}0qmA7l&p?75>^)jAi!l}Vt~C}EueWZ&fK{&i9~DlyOO$&<p;_p<oW
zt@M;}i@ZV~1|x_=BUp^3U(%L+keGqqese*^DKmkqmQ=36*a!csX2#&ua4c1(dyFjm
z4jWaydH=W}T9R{BW1alkhygm-hE-+WiWzy%>g&|iWlc?2&MV{UPqa|ukH8j_{nMLQ
z{X&jBD<sjl;|4zPF*ZF7XBKYvsS_t(+t4sLAn~CX$v}bk$SgtR^!f1SXfB+Ihnq=4
zzUtD6_IC=?Gg7AO9z4XE?w#;DyQvO;-o%V}B?5-OO0-=YO(T5YvPiUC00zo3e-HF;
ziWY}dwXH_FFtJZ{!D!z4W6p8bIv$!D9%%Of{*`rCRl`jM#^ygm8Ro|@-HC?kE11}7
zu;i8F2iacrje;>LIU9THagK_qwL^;4LP#!5obNE+H4fbMyGU9GFYfO76)0IHbc0Sn
z&K7$$ZTGG1IJU!Oj|OZqWb3026r24v*1=S$Q0m(|D)2mPmnKyF#qK}wkMaU@R?S!y
zevYn=yTv)SFeSf%^I+#}a<Vdq@=8;IYzI{T!lLqen^Xm@xZ?ZvA)$Dxu@hLnKT#JI
zipfffL2uS5^aU^zb!?(~K=&WTn_CG34P^LYpK=yQ`%!3@G<>}vz_rnJg2jB`f4f?s
zA0n9DKN0HPBvwAJpbe$~c4ADp<;zLX&_%hg!;Yo|$5=8{(epMcx3}XaBfX&wH+owV
zpuckjzyapOs?zPIs9<kYnbZK`QG}WW^$>wAj;D26V&6+BVR1hdbx>Z5c}3SK!bMrG
zecfGnFK?P?pohjKSZwF#z$6<6E5+!M_J;L)#t@^=rBOJ%RuURfz_ziD>EXm*FL>da
z<o>j&$^x*F$j8Sc=t-YMFuk!UNFr&W0FOr5fbg+->&X@74K6rl+Vs}$_|28*F&l_l
zk89KDR3<h9$#9Rbs|5I+n4obumjrPFJF**K?XfHKs3r_R0&orhc|hrp5UrvN8%2iE
z6vw8|l_(~TV;hmu$`yF-(-89B$kbY;3FR=&LJv!rW4+o0zI8|ylD@~4nt{0<QO+b<
zWW4zJ)eWY_XzAeg212@Ft^M0!80UWNuCTQ=fsxuLAM;%F#B*dc>#X7ec+i<T*l@HP
zKCw`~D&ZMRjJT#(%KmH4CGdS`uz2GTkoPW{f!U4P%$kCWlmzu)J;e1n4QKy&w>1o#
zXExD;>2s?8(xIlm;53vsnlkHh$a@TC`xVsXCE9aPtN2!&Bji$CZt*I-dFhrk2zi37
z-Z^`6G3)Ph&U)xDuoHZXX1>|yzgJ!JbO-jE>KU4F`^48fFNkSR64cDrUCGI$Hl}Jn
z_^Ci29zW~=GPJrGUg=>JlQ&Tx<dMm9Iqc-l1seMHs&ByW>1%Z`7)W#VT|##s32Q?3
z=O_M$GUM)u9^UFpbUYZ7r3^8j+T%AS1c2D}y*xJnD`O6(m}GL(-Fr`n@z!kG5D%Dt
zeGT=P@-Rr|I7FdH!d41V9*juV$*|_fsKm;BNDTagO5accutiR;F}KgrsK1w%OVuei
z78(Jsn8k}=G`CI_ot~9MvKYoTO#PDZ+CE(OG2PQU1Vyj!Y(Ax<`s(aE6Oavp2E_rZ
z_#0Nebg7s!Ro*AW0vK_2hyQ86d3sM(MOSiG6)^stsgp%SK+Ie2guvtwefRReTJiB3
z!#A+vO46#u=T4T{mBe)5EU_NK?1O8WTwCf@NEA4uGQ{4?4QI?yr*Uz;&B6nS(`@K)
z;mOG-L;0OLS;s&FQo;yLP7sfogbO4A2G2dkH)9Wc0{H_G7K#q`u<=9&yn>FyjKM!?
z$r-pE^BwlkY;HmV`K7PVk^{Ykb)Wir4n1;UvxM>t%~pPT)MI`XzLiB6?$tQhQs&(;
z!g*fKi^!Qavr1O04@dp|8q@NCT%2UJT%;ABpOwxMp@$jNEx~FZzSjeOd**mAG69nF
z_ElzfAO}vYyA{$ydxMB6`MWv;s#o)$XW2|cIn?vcR7g4db9>v@5<!I2qt-2UlVcfY
zYa9S=_oR<)+<m%(aE4?~ZNE-pmIF1fpHNPq9ZrqbuWeDY*5Mz}M7QJUaYVx#&%(Nc
z<KS~&HZeqHy_8njJOAg|#5Z<q?WUaHQYCw&mfrV}0qnf|aHPVt+id;nM#+usB3tYx
zvwIT(-VF-*CA#AM8>t?j?Kyr8laDy=c8Fy3qjPV;B_PpG4wNGiR>`?TAXRSprSJCx
z<V7-t6<2s<ih>S>K!1bgl}2&^a)w9J!vHI@IPx~8Dqu%sNNif;B|q+Spi;P#>1~_T
zGj&~2cW1p5Hk+FnGrRN@+nf^uWZ3%ZZ`=lUrY=w?t-nR~do2pJ%>#>E<E#~;dv6v#
z)H(Ru0Cd<-+dmS1Y5Mm59cY8UhS~_*i!To+@{<%Ut+~0A;VVHd1dqWF2|o+LLu_uy
z!YAVEU}xa1Z-0(A>#(GsBgVrLe$SQMQ+?WGI0DjuxA5%I){^<uPn}9kR+NC7nOk4>
zj#@!xS2e-$d!Tilf7`1Wi$^!EL&D$qfV2Mu-*zgNW8N7=J`Hq&DN^@q)m|(0`|K{*
z|DC772bE`3inrTK(F?vB@QwYf3$77CBv5ZWC<VUW2XEaA$20vFlK$970d}%$_1@uW
zI)o}(l>&rn?iQKWh(mhDp>y=Cy>`c2^m{g#-Mx^EJ9;u1{<JRfVm;K~_AVR3ePjRM
zo20<<*C6HJKt}BEPx9X`2#s7VZA|F?L-zmg@CpxiE>JB?3k%={e<zC$3&w*IeQFGT
zW(mw!ELiq5HZbTwDI_ST<K)NYq{Eoz6Cd&}7Ym3epv&M#g_aWa<1^KDU>4MKGR$p2
zOw*3gE=ZjL|I0=bbM#5k?-z>%gYZ8c_&?SW8+&6LI*b4Az*FjqaaimKe!cp8^Wgyd
zd9uZPB&sCi3CAcv<ZUD|6;K(v105&L>MiI}72hv@#y51AxYZRE@SNEoRabYD>^nZp
z+~@lBd|B!H7Dsdsmv8Jlelyq1eQ2Sxl}piEnh#kLJlJV`%*(KA8k8+X-LbTx$ZquW
zgf{UR88RVmM5e`Zp{C!H(UH<s((v3%!*cectK`ZJfAKTea#G~tadRa{T9hEk{NzRU
zG8SnVJ@ZLcA`HOK8V$OblrbgS%*+lr*_>_YV@;s=EzB9%I<sX?DlNYzGv@oXsIps~
zl)Wq+wwbQabdG)Z^rFSW2MjF`f}O1_F6~g@V=5fNGG<U);%aJoQn?gOsaD~qOXp!4
z)l0>3%e(6`D;166Le-s^C%Mv6mCe8XOtUe%i;pT5fBfID`xHi-nZm6}pM~n9FHj`j
zj0q_)DIdZ#>x)gW@+x5D?`BOm_kkTX?BWQ03^amB4@({{<EX=WvzCm$?7V)=90%Up
zZ`USnT^8Z-|9KoaVz*LCqYBEPbLq@)VP`b(wcRP6-{h>s?L?ojH=f1&dbApqBg*kt
zz9Pjq`hwU##u6qOKuA=GKJxED8dYiLdB)O@GEXnd5Y)0Ol{Q!Z35wAn=b~gakn$ii
zh*YE?1085;1-qaCah|0?otE~+Sr+564?<lDv<|2m9Lt7WUOo5Y@zl1*37xsM==Q)3
zx)JSKrhMTE0>c~Rfj|l1=G~y`agKBJ)fH{!WYWvCK$6>ZlX(q+4IijOlZL^LBVgGe
z_+$RANeEg64?zE~y4q7&O%U9_$EuxI)32jbzp9kK)_(ZKIQb%DhCJM^^{xj*z|Q0T
zUrVu^P&X<W!(YQWKz$QwY+qh~{w!DuW~|d;6T3_ia4jG)BlNrajY9p<{W8-=*jT;Z
zf@r0Za<k`tFRA0tk>59{OEY0whEj3c?D6dd1`Y+T;vboV6=LWuJ#Nz`Yd$}AU3s(z
z_=Te{mv+A|KR&}NWqmNT_PS1In2KF%?w<fb9#6_=_k|;Q*Gb2f1C0UMS9%#ms_Q-L
z_-nglbB|T%BXED-vUL4I5YP|;)WORNHSK&PLtwAA-YW$lNu#g#S$~&7?HXMj`ywDw
zmr;{M)}sL5wrpGu5z0H$0NV5Y_${xFP^IBRw~fmo=5sqqOT}J2Tx;#8dNS(Q8HIyU
zhkoOfoCvim-Q7smG8OTdMmDmi?XvE?ZFOa9Vv3}u+kki{<1r#v$@7B4ggJ*C5~c=J
zeQZu%(;-x%1nmrj_cwx5YW3+^PWUHzM9Q;yO4FM8rFFF{8jJ|wL!?-={>1Kzaseyd
z*-^pCn;h*i_EV9?--@lRq{xyYD-3cE_%pz%p$H6`=K`cTGO$0L{ilneV9Q`VmIel>
zvlt-xzgn*CDzGvTs1RUI@s}bN{Viin)kaeli}RafOL|u^@7TaZCBJ@)mqq+WNdgh?
zE1s-g!3)faLX^$Rk>G9$T6m)v%y2S8=vr~K$t}480DrNib_If>G7a7C9R<oRu?iNU
z^1UDq$*I@aFH^aG2v@9j$)>wGsDo2ZF@+;&F}WuOm$k(%*C4Nuce%J|{zea%!yCVf
zFXpX0!sCaOxVe#E3YUge$Y-j}*%Yq?j#_{O7o6x<1|sRx-tq4kpm7qEVjt8*Kg=>{
z460;~XdTWnfNl_)P^l=Ia96Ewk55`xI~_<DdnStRrSPSKq=t&e0#$EzMH*5@WK-wJ
zY?j}mE6a8615(5y<;tnGTPqp?Aedm76NU~zOT-i<+{E6qO~+G64T<KL71hC%?Qmwh
zk%YM*3jZ}AMSWU=TgF#8i88Nd{^OEf$s6)>pN#O8cal)Pl(R4-RNgYq;Ca*_zf*Jd
z&IbD`Yjmy$w)0jrcbieA#7gc+Ro4RAdZVd2%We|Wkfs-?ra*YBamuN&ev`$KaaxpE
zEo$3>)xfcZ_UXkCqH5_<`Gy%|eyWxf@lXqr)$&r>at;l)!-DN)1RHUP(EYLV^W@_8
zMXbq*!!AuIQ4G<y8?0^B@)}EVsh3nU=GoTNt{|wtD90OYrbW|rQ*=sApfBsEfyj&a
z;$^p#^o6nq_IN0wAUwVMUaoerb3U}R@_xdG`@&EeEIE?Ee0g&@(On{OAGZmBU+rZq
znm*2_sq_A$uAhV4`A#wHcNA4gAKU8kap%GlIzhjJj5VwOe_zH79D~@fumAwv<o}x_
zqlt}~vE6?!zfWOVJ8!Vvclr&9Wk`#Nr{Z5d32(ZI)gOvDM;<2pC9|s;$d{Nk5=P_!
zXp(C`?%kmSNX(;Ilk;*`mMzWi+ZyU|uiu>$gofMwdxD*?NrU<q4<8>t2QT*%KwTPa
z;jih#+wYD3lN}269;)R;=shd1oQ@b2f|(?<*-#c9@@JU?Qj<&*L==q?aGWqHQ++mn
zs0Gx<n>WB(?;q8wz%VLGA|h_H49TG6c)%C8NqZ1UaD44O3uHrlAD5!E>}F!UNIwB^
zj{+bNI7E*9ACzyw_{>!g7rwuf;YXQ=p#oNlL@5$zp;8?C&=4qlv?=396NQCOURwtg
z!O50!QCY;nE+#`~w7&+(+d{Pq3F}?n;OKlHl<+^;oEil4vgl|uFbX{JR8k)H5i%i`
zh>Yc$nhgOcVmk9dri7zJhwJ{lp1(nX8?zJPf2g~E2n5I~Nnk;&=umK~fq>D-H50c4
z3J73Pf_AqdQcAVpBb~c-n1ha!kEW4;`Uuc<^2-yxG;UEL+$`FX%QA9O?=6uEO^wq^
zmzDomT#yw`-<$$ue1-&}w}~c$DHdr)Y5e&-&=W~DRYYoy?^1+nA|Crn4!5*lD>+JM
z!<{VsHt=!e>qBLbwtw%1nacbDL%*uHamM`MqgCm88-Q20_?&ZLVz-}64KaTCWRyB!
zxS;hf5sflCiz7o<=3vBLRaYFjiR1IQ9l?JJ^7s3C|FYQs@OsOorS<!A^W%H+$DIBH
z4z1K(s6KEP8nsf6*vx{*;|(T1KD4&vu`91YHnT9xeMj-EHwDh^c+!;JsUN)bZNiWh
z3!zM1KZ;|T#H0hNwUM7e51bz`GF%vZiwvrzZH;P+DPnv2<h8z8>@`+k|AGHmsp-#z
z|56(^x^lWg`1kuOTur({fRu1vL1E#P017A1-NW1+FwzDd;>!8X&goiTS09e{mS~KK
zpRS=U=*DP%v?$0S!qJt0y^=<wKJ$+z+vwx4_^CD-!~C;Cp2fDj(a_*jcNvrUo@6Vi
zw|^&sockFm{GwBR{=bXOdl2GSyiT+vJvY|6PaR@xj$pr}d(rrkzy4JBv7P0p(@Xao
zdrMho02DszGPJ(3fPO(g7M$y*tR6KhxxqT;DDh;_h<{)apyJlWPS;PbcZP?rrA#Fn
zIXv0%++QqUd|6b8Nb#%gvRYgyv5|QrX-f1|6MX@a=bLocJj-YguWzV&o<LErEMD{c
zo^5^Sho7{>mV(NKOm3?zBN~^}8kBS+L85S%DP?XnSSid3lPO$z2yB%&FZ;0`o)gh6
zMc%mjXvS=LWrMMOBtuBZ0`Qt)f_O)`fEcxnWn+v#v9qmkZAgwn{$%MgJSZbdCx_`W
zQo4F}m}<IVkoLtus0}VsDeNId;w(>q;5*UiGNMygS%~I1|3dU>5_!{|AxIc8?=IW>
zi<~Ppp`eE53K(tD&-+i`pvvGHP?<z@K*+civxf+X_Rz=-6_2PvmedP~Fs?H<8(e}}
zb;w@fRbA1FN&q2&BZk&(;@Dy&=qvG}XOWSb)`uaYekkP@>j>+!qhu#q3fQC~vl_5d
zO#72HYbrMlF5^CW^*UAU7;^OB$iIi$e%5`blx!*?CJ8dv8GUQh-16A~s19}GN5G0`
zid7}+I9_I#^KZjk3YMCV_mNwqFoLsKJrl_cAC;HT=l4P1Xb2atcR+2%{=ItS0j29d
z&HMyr4zr>92CVlnpOWNMOD!rP65`T;=fos698nVgTRqN4G7+9S9M^%IbVm6wr^P;V
z9wr#Aw}uS{Wpi5XO9Ypqib6?MT!)@unXST*_;c7OIYytx-61!Nma`U&Q7DldqCkzw
z9O{QHTv}q`@nAz%f^XLsQX}vkYFjY8z;~XcW@bV1W5j|d_ii8V#{ItK00Sh#Os!ub
zC$sVNoA9mRuVE8+gZF3q<Yi{X$Y>P!{(QfxJoC6#O@`gY=Wj2Xrusk*QLJxPq|{s?
zNX6>2WnEQ|lAie%#V5t%*oQM`#$RZNOV_dZIrrHKbu&$HL$?xJ-<JLd`p6J;?eS7p
zefSjdd6@L`>PeU;W|%_mo^QO_FC5WTiy$f<5LYE{4qqoArxikIwpW3N2z_`=bC2sz
zgFmymKhH^cFL7@wdC6lcsCFnXWp$XSar33Yu<ZCwxS}FoResLK0;|lEIV)Y;zEfWc
zy&4>|<7SZ4PWL9U<H62IMGBw(miG0A)2ZA)aDq8JxHPL;Ghw*UUmVzI)NHB`?-zo6
z0~diT-S6RjgwL}h_JbBjU)(?_x8K!g=6@N+VY+@F{%ttU|5hrO-zuoZprHUbbU8jH
zskLU8Yel5`5m1Dfl_Pvw=GC)uWL<cpevwcPjH!RIE*BhZAPcUs&bbi)$4@nt7%nMr
zqN(dH-Ftt&ZJk?~&4P0^gM;tZX_PQmmv2aE4nA0|s^GRinz;msA{S)u#qtb;+v(i=
z8X(?<B@5<tQ|szl3dg&>fj>3jn_)u_J{3Qg<2BNEeQ=8)*F#xxecR1l_k6GW*yQW#
zDEu%tty>14M=FfE+R7M;s*c{~-nch_I(;n%I?cDOz4IJtrjNpVwdgAI#UI<x_B`3J
zP2xm!A}OjVFK*TJvGnf7;m!N^>&$>M=@Ky7h&vyJA}B{030pE+w-8TqJ^~WtBzff0
zP&bewegjVe>JfX|M3RPakVH5}#Jj8-Nm86I>#r@Hjm4n~d7>77i%3#V#ZcTxZvrtN
zzt{FCgV@yRnCV%Xl!&MvvU9Sqcj~RX?z`f<{|0_s=?V9ySKPfduum{%)qY1!BxjC&
zG$Ype;z(Lanr}?1+z*o$Q{v(WYgRBdSL6}Pvos0rzdM$yUwZn9zE_bX%So;U7jJ=k
zgT~q&o8@eA<BmS)g1IFwh$4|jS=*}16HH*qI8tS=G=)wB0(>G1Zv5Zaq_$Q(*+Cr!
zV~#$P1S+gx=K;B3<U?ThVZJ3D@Ii$Uk;#SR+BujgSSI2H0B$1lsbVEeUw81LQd<#Z
z?0vf39~-R#{dT!fnTW+4mzH0!UUD6Miy`GC7M@BV7o*R6z1GmUdgw!{`!7r|T();j
z>%C#8U7ckRiaTtsH`>~IEg9k=<|rS!lf`yhHB*Q-A#u7zl4m1GSW@1vk}~I#D$-5g
zUSIdKgVMQhof6R`@!Gq<ODQi~cJz=L6sWs2BGWbL*WlHJhXuN$RX%AX3ZU<T0RQ70
zdw5mYqMp%YXFx?#o1l2QT=jP)zRIjW*gWca$3*^~ZEL)F!Nl;#h{`2+tnQ^?KgXxI
z<MM9$63wMJ!ruNCCqQs(Ib`!sky<9h6GI@D@JzPmEJ9I7aoz{^=D%FI;T5fM<JvP<
zQsJHKK;lC*a0>aMzBH}kbu)Kk@rBLhqEKHI_A*kATsc3?=^6?zo7@iCm2AM#?yYY*
z?{9ilO6R~FZ0>!xYVxLh!xJx<gWH;sc=$x`^yM_NVqcZ(-IR_>K-n_>>TAj)*?BH5
z4jbJyMMr=is=7JmfzdgeN5Ci@H3L>r(v8lAY4`k>`QzvFaU`M|>HJ@_qC|w9bNl+?
zq+p4}yzts!D!Z_G{JSKYvoiJGSvIyJMeXFtO48Yp4@-FRaR*8f(I1v-g66Ncg0ggi
z*zp)^yE2!9j?|j2*K&lQNrm#`rw%w`;~UW+ueI5-v|46wZ=1+RqC9!H%OR1`ggelI
zg3U%Lq6C?YlC@sH+S**_R8bdU!EW8KH&juEUqWiCEfg%OLS>l3wT`{j^;r^#iD5!f
z#QHzkKo~+k?qJdukn~ZPUcyH=3J0A$b`AOhU#2M@GtSA?wV3Q+b(r1yC}eAs5rV<-
zfX!kFmMb+QE#IW7_Zt2`8SOK3tt^9vwZ-J8PpGXD#J%hNdah~e?~Ql=@MRe|bslFb
zrCmQ;`7tK3)X!dk5+fpT$PS29ip|#^cbBUvWIx;RC{vB$bV$5&u0ql}cS+yWb&o6{
zUFCOZSkObiG=|XXk_*|}F7SJQU<(@$U#mJe)`%5>Yq|g&RZUR#OYk|~{H#6NUCAek
zF4eH}9H!3Zs#9<(gXO~}S3B6uM%Iuw4iYiuEslvqZtW<c*ZR0FKMaTF-z;B5M-OU~
z6+^0PSs%ec<kktPSvpWo;%l5oVxd}j1*q$}!Rx_OixY9D#?{O%P8{XrAu2jb==?Vd
zmjAKl7$T_9(?=N(b+XpZO){f2I4ZE=rnQ9I>L3)Tiw>!!(eMw%xnsi`FNo=@5zX$;
z@LK}6QMAl_$iVh)9MqJBv$|Q=<;#=9(SzJ0rs;L%iM_tc<>pnNoEna}oHc3tq3m<a
zZH*;*-x){X=d@+tAMh($h$Lh*W^lg)fBb)xy;E?nQP<_WW7{@%Y}>YN;~(3$?PSNc
zZQIF?Z9D1xovu^Wr|W!gS6{7*r|PM7HD}E=$M}s1RhM#;)F&`h-CWOD3T%bd!0Vxz
zuB(C6vk9n1QM<Ac=;D(O{Ywgkx|gs$4WAzoqPPET)-qv@ZH)N`riml`Pu#cv*Mes9
ze=tQ%YuY+(wjq7j=+`SA+bE_!?YF!c9MKgu9z~TjTqfkOS(5*ov?TU3h&g{*s9S#S
zbi(+PmSJp;yKtQ#M1UG#d^}&$spXi#Wdc(FSmV>BBFlAbU*Ac#zJS}M!PY3D?`%cy
zWm5Dq>kkknO$JA?!4^W6h!7e~fF8WiSdftH|4Y+Ehd~!WhlmbpS`+bv!EVxEhq#c#
z*;P*LpU@W0mKXyi;d8`-P7gx@dA83hMjpWYG)WOF!1#d07iw3Tg2NdcdNGnPTNoU~
z$CqCng6^G@9Jb-%!jZEJean<!irorSkief|!XlTL?N1VEO=dzX&6yb-6y_Gh3l86a
z(syQ294%Yan@|lN<!;`%V0bQ~5jX-)Xj9x5zcS59JpsxZe49@3;v1=rC-B1A4bZo0
zmP4uGr6bCqE=bMw69--ig3NFi#M`)H)4j!xm&artK6kvG@6LfIXFuq_y4~u=`m%<k
z@bglxggP6a69-3z4Fb;%BcC{YWOr?JpXJ*I+!;C^|Ml&_Ul`ZKgt+F3`q~G;z~RC`
zeJ>o$p<bw7R%?t4(vy(UcDg_2I*h;KJ37wbzoQ*QQJjfPeCkz#cmBBM@U1h6oR1&b
zT!8`EZ&4Wjl6_xeGHF^@q8MIHRLT?H5KW%yqLfPPq_JIF#R{>>(u23((a!-H9*rC?
z#u2$?{uCeAn{{x+6bU1Y2Pve4Hs3n1&L5OiSk=OAMb~e_h^h^#e4IEObl=)A#*OCD
zzYh<bL{#rqy<L)XM;c^+H=Vi7D8ig7(9mj4v!k?Ysn+%qvDPxPNzKy@QaIu(Es>qb
zm~w}ONNxXU76-=N`yk%qnoicy@?Qh@SxUm++Jc|?jvWVoz}pDEmm<I}FgC!3NSIKC
ztB=+>OTU=2cFL{tM@Q>m7?kzp4M7qEd$<AMBu#x>AP{)*3ZS3kmarEnrJ&Me8edDH
zz_L%|T_iUocg($j=78)?YigTkm)6<Y<gb?|8s{f)zq8tU$E1;eqAcno6A%Z14r>nL
zK3rs~>=B_*VU1WfDRo)&-(W!#c5{~u%@cW0<|o`{W9h}h?BSvben67AqE1s5Lxr+s
zGVb?xYl!5^wNjlO!7AzGP<XpUGfvGF0SPbPALdVyA;Cqc0`si14RJ+Qyn&{W-(>o`
zJ{*Ngk($5{P$U#g#Ux5(O)!rA;XfQ`n-IDND{*l1X6>^ms8x0gv@W^>Fty=wef`6}
zj)BID)$&yMHRD8%jnUim*A|Vpb9Z#%=EgDP47Td7M+ftLo8o)G06}mG$3gVYUpYG|
z!iuS*xI^f2Y-b?N^6%}<XL#|p`P?++bF(2QeM@!NE~khpCTOz#Y<VqyE%^Ow@r_=L
z0-f2~Vg=T)O1f3;5;=f0_S+v!yh3`*0Lb13lfQHNc%$VOOxbd}Q;0PsWa(_*8-bpC
z8=f#yohv!YWhc>j4)Ej8Qd{ko<f$7gqQn-0!lNlcY>s-^7*t+ulsC(d8I{r;e@%L3
zg9UI1>uy;5W!T`Q2zlxTy}(h0MN30C1xlg1xXo7tFg=k<5SELe7{WztLV74v-ycYs
zK&n`G&9g~13Y+&XR2+(73*B^Jbl*mMasW8I3m7gutQ-BBLtPxw`bS$eHT7_vSe;HY
z8iQ2du9Q7Y1sWQ$0Ant6N8zW5nj)o-#jj~IIU4$*?X<q{K@slsKtLp6M|=O@sPNkd
zR7H30CSBV}wHRjDMh<OTkqi*~f)g9Xmuw#ML5b5yQLP5Fqmgjhu2Wq*wH*C>Pm%iU
zKUrx!Q7=ARStjBWJp?i{qpl5;AZws^Oyh;WASI}Fue&LY^CJZk!+uxfZ|cxkM_2fl
zM$UBDGM*>b_yN)6HGU-REmj84BDD5)g2=Q+x{pw?Er)+R!*!Q<phn5Ri7dk;-g*ho
zFLhyvA55CKQ|(-Jdr)hrrrWf;#{ov?KE4(HB73;8@Y~WPW8kd*+Fs`9^HLPLYC~6O
zBGj1)!zda@L~`=yHW|5&OIfr9@#|0_dm40p^(!wIW27n%iT$8D*ULJ>iGeP|Wr~4o
zzwx=b@>s+Ab#6LLRVVOLkslTW;;x#=i^QBZcxFF%MlhnOxi9X-9Jed<(jveV>{Kzn
zgk<bHs*_HtayPxG3_Po_#P<B1PKXYL!r7?6i~>82bh+089nuHhqcux?%uxWUvUcqB
z0uyjn=VY-dii3ibwQ3jL{7b(JY+X#^_@q_wtt*8d;^1z1Jyv7Kcz<Dv-@wK=H`R8G
z)NJGst*9Q-T9q}vXH<m34<6+=>vQt8wiUfnrdUXzUdR&D{Vm@k@q2iH1ib^S2<Ck5
zn3~KfU4#3OCEo`~BC|JQjY~2FkvSh*;YF(FX7#P@Z$dd6vGaMFU7#C8s6jEzn;u=J
zf7NWPX_f;;ll0E=j6y3rl9UqSZ#10Q_ZCf%Z?1^qy+3|>wIZf>f>Ezg^|}tUpZyC(
z@#<1|IEOL+=D-RKTY1>`y$h8`G3ZSl!hV}o2xPX<>U{?J@3J_l^S^8^^rbbynu5`s
zwQVO(^^qyg7=LXG;^Hdrn(H6i2!N<Fw_o9C-}6YmQ;ZTn&Nd+D0(E~adxd1oiI^08
zlSc)`IF*^*NRQXIHlkZ$k7A4c-ck(8FfWc5BM8rclo^!y4Yg^SX$m&K6}RaNW0t{E
zClYDerXgmvAERsMK8k1pozXZnHE|)R5=IVOElH3dipTAQ?^%y}4#r`e4!)d>7lJT_
zszWAP!NsIw+2!CWK^Ou?jHR!siT&Gxq};a}yb2CukNBV|IX;+?(dbb{(4WWMT1gU)
zBSnd&bk=-F1P<Z+iNUx|DBL(U-T0c&zvysC!hX>n?6s_Gb+8POB6cqLM}e*no8U}w
zoghm}y(7}wQ#403))UNKj#o`uzSSb!)W8B!hj`iZf(m(yHJ}Is2E2kdRinL)m8!z+
zTn;GXTMYcXEI^O1j`Zj;2nkN_N3v<SlPl)&T#<u$r;0r_^{5On#h?AtJ&FTgS2mmP
zu0%fsU>yJy0$*wGsBnW#tSn4rwVpHa$I4hnbZfhE{55HzRNGb(#`1dsLb?+UN+Cfg
zaCE_af_qa_;;u;#?s@%$072@rv2vV0bWwXk_!z9dd}(FsVtiF(&-&x|rx;H(k|Wtk
zdNuX#N4}7WY7^kr|7U^b^5~V=6(?sDUkp7fM%>c_uv&L=)Vp_B>pae^Uoq<07d$(d
zY-VK0L+^mMVVb=q#N!4gjjsH+2A#oZ&SD0S;r_6Jl9P=pl`lc78QSD-QQ=!%v4KYu
z+44-FWszrQ$q!S14$|SEZB_l8E`11tn99w6<Gk!l*!`b=D;Q1)mTwmAK;M`ApouIK
z?*W<(C1tzS6D5f*hMCIo#sr0Dn4FL;3ohU+cg&q!bbdZYqkb4efA0#Nu*$!}L^ms*
zO+f}aMOG<kx>spag-oX&jTO}6PfB7r<_2P%oX^Nn5s4K|2lplhnny^QZCEDAsT>SA
z{iompXfIz(^!v(?mFA~}iN11%d%m4lC|<Vjjz{TfJ&bBLfpzVCg2jBdUrx!JVRpmo
z|ElQ!FTk;gfal~i=&xUP|B<y|Xale?{Gag&0Gt13U;f_^j+fQ7?Kjy_ebN2EPB1NC
zEgD3M>#bWsB5M#p0?8yA!hk_QH4BZalgp%3=y0BQ+}u&f$Sk2B3)ZA1axdKA`SCf$
z`S(m$*(P-rX)Rr%tTz~(gZXdY3x3<d11B*+`-SqCzP=0GdB|2)Rx*3f-}YLN-+sv9
zx-Wvi@*2M?aW%arwluXDd-%r^E@&pqR}^zzS7ftkzy>l@4~!~tFo!mZ`rlFf-DC3U
zL&IpZ{vC`IRyh0-s3>#8tOcW^!f{|a9oaNN+4B!!Kg^~m6HQaiuoHnAt;|qMK!|)<
zToCE<ycrhPtMAj)km?2pIvJ(LGF*cK2Jr%33cLj`v~*?G-qqO&!+|>2LbE$Pt@J@7
zOWQA)3`@jvl2gVVu(OxBs!fV_yZlsp;-~Y`s2}avB3fn_DYe^buTLg<ZxsbBcmpOR
zC>^4Hr($Q1xx;w#2@KH7A=BJO^8h}t5d*3oN{XZ~!8ru`Ag3*7j}zv9JUK)qbs5C!
zJ)?wASQVHsMx-~{`W$alW^fagE$+vZq|brY8;P$U$r3jsGmDw_G+J3T<7K^=sItDW
zM@v{1={}E%u}w<g%aRqh;WI)(&PrJG2QZ2O1HD+aB7Eo`x`ONpNNusXZlbjMT(y+i
zbvkY~Z*qYSnUc`qIIM?His`WJHz1|OwAl=q;w<3^w<PX(KD0ca%s!Nw4<_@J@0uo%
zS?0!_F~{?xcS{sl9Mor%O=ShWW46@^;J=nLBMzipT7gM35enPa73m)`Zphl?)mr^>
z)KX81V#7)MBU-e`-Zjbv5<e?ECrB_2A*PHeoV0Ebob)h>>1?d#3rKy46mlcvZ<<=|
zUPt?<Y>?!GG|h%)pbIuwf)wH?t!gVTvq@1C+;7?ZeWWF7^p^Gq=WjSMI%y!0!B&5%
z4Zm=)K`~2$vvi88Ntd&N0I96nIg@Il#Nbs_z#YtJB>Wr^+4e7XT;vA#t$=^8ratuz
zVn7pXXv>4z*6!%v8w&trZD5sp+n*+hg84I+3OHXo*DSAA(l@}{+5S7vZ_A97;|E6c
z7&-dIgIxCW>foU78X%qFBp$TiOz8J)OFpVysXoUpg@akv6pQfH%V0HLK^j<9eZP8Q
z6M=`=58Xw8j1ey&aJ7R{nBtL8i4{<e=n($U3%IDG8xRslQN~uuZkF8vuqT!E&yMG*
z@m|pQu1^V6_;!uo&R$M5!Tcs3eebT_pDBLjy*X;0neuAeG*?qL%zkGVSI2W3e~M`)
z)U{4Ted%eB=d=(fv=DbM)9%_U>C0a9S`IermQAzxYvk=qa6R?P{Q7X^GL3}xC3GP}
zq+EBoa$l2imXCti0v3SY2-da&F5}w{9g`E@gsui>*JQM?Y<W<z#u$tB`xpNR{iLy)
zv!Lr@7%dReuoGI(4jI#kW{GVNOM@q^Z0c>!c1b9&KN#mvE6B9HDltFDgE&5ca#8v>
zfJIT1c=C!oCpv9h)-Q+j(3*y5b}sny#^YWWc7EXQV`VBS=FRXjpr33VBns<YDW6~T
z(2IHnzD2{&|NG3&9ZP~tUp0Ts%>!;)7F_h{S>%U!j+ixKTRtH77Bu6AYJE+>(OoOn
zXVaR{>i8#0VT9u|tn%k+v+#e1CG;V<!;=52l0n?Rei8h)S}0pnTYV=}<Nv&Py~43p
z#u2~g?kyxz6`_WK%GOcB==%+J$n1hiDH)se@TM|(4QZ=!Wp@Rl8PUGuyZx}1u^#4+
z`t68D1!QUVzP-4(&5ZBdnh!(a&>$C-B??dfg7DoE*4q<w7T9k(P&j^wTeI-Wetg70
zb1#~0=7SkZ6b(ff#5k$pIr_;*OssPfFj^S>rXa#6O~gJIYy{24(nf-D{V!WY{{T4k
z8oQ7qjMzAsLLU@sDkvW4<FKAIj1ZV!kKAxq3_nOUo}R-oLX7xs3v&NrYj~KBPJSi$
z-;01$?B(aBi8CWsc|8rC($F!4W-j=uDE<&+USJl=7V&J-WmvyKv(}SwGSTFKZ}wkU
z&^dv~Mg7A`#59DK7I0SEYd`6Y&lZS5ZMQRU2GhU9k%O<~23J-h+tllK_TyQ_i`m7K
zu=^fKfgj}T=yZvmXoCZAH{svO)@0L;*crn98>Z6eMBKrwziW_)U~6aEc#Yc3OmGQm
zRxMCW2pxr&9FozbQ_Xk*B)tt%cOgZZ_@!GlJz1T7(~U`twGvouzoWLk;ZMNBj6@cP
zVw*D=y2XUwU~TaViN~_-Y7BLlOc4SwnNUZlPlFx2VVr`0Ck7YiQg7LqGjaXf@AYTR
z-$Kv))ys+d8%tL*c(#57=1H!8s4jRI5;D6h!PVa<y()?Sf>9gI$ri<o%@{gnHy?wW
zO;Y<nXykix56ug3<jeZx%E-yn?fMuFn9aj6-_gzf+PCo`J7MuEQpRN&do=`1x6cRJ
zg?=ZigGWL7jMu`NUD(9eqNK7$)2G=jF=V%uciLdiDqN-PwPPF+5f~>BOevx$r6)bi
z1GXgRMBphiy5rkVdySHvL$CS5D);!s8pqdr#k5e45O-%=Km2~=iV%)LjVmJCg!pFy
zch+gr>{zrLj-t070n*bD39MKmg7|Gjz*yFDBfWaE^yUXICutNv!E|(awA&2P-B{m#
zFr$FG>(5UGd)}?3!#d(m)C6(43@CYB^tLNNZ8AP}OLXO@cmEbB*SZi_!T4by^Qt27
zULJm)1~`(B1N^d;{a(q~kr0!m(5a}K!!F8<$ApHs0I7#o-pfI_%V|`u(knXi>Ld(%
z_PhWJ{5admfT$!lDw`vNIu*!*Qn{HaT*2Nnll|AciKioiR!ReIOk-T?9*NVb4SUu`
z0RJoUd%3pyJ*y8hKAim9E{#zoyko5aqzjx}TZl4UA;Dpp1c}i&rXX^OgIB01TnYA?
zSRY9Jv0gak`~ks&jYRznF;x>>P)#}Aed7ll`YwK*<f4$flUKs+N2*dW39lHbFehB*
z$+y;gvvGNn3GMO%Reg23>^;twtx}N43c7Tz6@1T6hb(OQHX_<2emZw#tXDm+Q1m}!
z6Ixq)8bBJ-d&JClBQ^n8QjaVto4X(BL=5YX-HIyqVf1GGaLp0=eA!WSKT}P<3%}YR
zGCbF9kYhzfUJpmhaE+6?NEWB{jy=NJLHWwhSNTe-O!Yzfm5fV|)FR4~D{ExIIaBJQ
z4#KlnzOCW8kfed~p|(0haQ~0|`?Z+4Xwy?0H755GzO7TSJOx*ROmFH1$7c3kCb#<h
z&+nI(oVNX*{p3Rp(PI&BOqgu5-oMtj)-G!}lmsVd8;$JNhnA(%tkjfv2YbR_NPFej
z+0R*|zTSuRIfotxLm&_V&hFYCCWobXV#F6d==&vpd?QxX+Rrey$rPKz`&GK4Wr!*Z
zr~9aM`VU&5?_Ydrpg#j9T)6U+Sh^9d>X{8wRcBL_q*N)iq?X<ouWkJpG)G`=p~Ztd
zuS1{R(WUYl9b|Z6X-K>S^;)2R13iC{vd$d9NB#~SJ?j|#p!@TbEvi!GrBV5SM_cJh
zn#zojlZ!~?fNmg|RLEIBP?Sj)NG#+CRVcfK6Aco$Mg=L{Hyucjgn33J;XS(06wV~H
zRG^iOjm@$P5DFg`B~O)<v-vaiB-%?z=eT^qFhMd8)`$4mOixDi=4);l4HC{nPNxpE
zV$e`Wlcm!28##UgxyiN%yh@pPN46f6+M9q3xsylk<JS$=7E`JM-icYEQ$5W9kAM@v
zWy+93`_Z(dCkPqLBh;X)HLxp0!_jHICJ5Ih`Ofn;6<Z6dh>Od7FB69{DuTw@!WK8g
zTD(Pysa}h%YOG5CqxiL$K`*+cudr96kb>d-_Z5*~liUm{yStEnBTJAy2ltMXSUB-|
zFaV{7)R}jgUn%ANXc&@<X%hgSO{*I!FP?NJZ@vg`_G=YhfZ}JazqeMepPj%EqZj3H
z9trs1l+OExLyXy&iAm6QZFV%v@C~Z0z_tUj^XKfz8uZ;B1X+CY>D%W0_|k|CH;yhe
zXDGn$q5JRNll5vrf;y_sd)EPIXQ#mwZhuYYTRz`y-Q9foz8^1s%*-tLq8jo&PT}vb
zVksHlb=DPc20rQuZSAG80?NcA%e}iy?Wq$cn5r0IcB4F%cm2Fea%M(9gd}!m<b%2h
ziHN)hsMDgxWYae3s*b==7j)tU-Wtw-!YUWbnhPq;VS{Ybf25}1V(_fOwG<=RA{hXR
zVKg$PgV*7;%No~jcqo`0V5H#F{6ld>JK5~<SIG#gg{#7G9F^GbicK<h8j8>uwTPuW
zG7LAc>%i3Dy3z`*X>_^^4PQulf5+YKg#bKE|5)YwtzuV;lX%2i{kD+Uz5G$Ao2v{g
z22%~IRuc5$aC|{dSMvkxgTv~XNL71z7E%Wa;tX95fQWg1xg}9mv~kKcl2`+7LGyx2
zM!X?r*;<@aX>!Ff>2S^M&{K5c&0^1ieyo*LTDDs8nMz8Rbio1>Xeimhe*8MFw2dV@
z)}Nt5424n7vJJHY8?#6pB}id{cAC_a4NiHip=QDMXX-0{E}_NVr62F}TK|8+s#P!e
zhD22(KMk`OjkB(u0V-6D>pV3#v-j?1Ltiy@vR8=l6ttO8%zI{8Do#;w_Zyb*E^MSy
z19H%G<D48`8gf_Ng-HY$&QFmwMRB{(SSTVadZ%iW#5HM@YQy1Uj5KPf1r1&7bCq(*
z4m_$~a_6h_3Yio20C*oER@y+_B<+jj^9kb&>Pov~RG0*AD~Dm}#TDD*s|bF2f)>dr
zbhao%DvkUzHRqas?C~bHc_~+YHbRd+ZO-)le#=J`-Yb?PU<5sI2SotosbF(=&eqbs
z2>ao@q7)f-R=VxO40&}w6}@&@40As03%ax-m59esL7)`!iK!}bZP|iQS=xDIK_N0y
z*@T9=iveFuztWMHt4URrTJq+6Ia;`)PZiNoD?5vmNCCd>!q5;~HNDRs`3M!>g<Fh(
zA-zMBlHDLFcd{7|KX{{CxsnEM%fg2hW^L(^8Ste+{fE-#1C^;8&4lXSY^~+^F=z`y
z!K4>PLIat)Y6@;jo=_gnp9YjS<F%v=9{C}VgiG~`=wCl55$$3+!;kx-IiSSKcKLL$
z6_1@0t)}r-oPsics4j6cBj-pf=L>6q$aG1(Tw+=rRrW0pC6ql-#S2%wz*9*J*>X{H
zAku}xa3}bfO(HHBuL-(RDD>8=j64I9I=Z$~1G4&M_ey-pKf;fU6W0$-)Ou1F@-hTC
zhs`;b`A@gSaBRk{FvZ#9=~0kG$BkDrFvK4w-i1Zfp5+O^O8ecTRQvB9%0Ri9+<?B4
zPo);#4O&mNqg2@|MXKy0&}2~dYgw#OB~7@490PDPomQ;?Al#CU0-8~mk3D#L)1eqk
zU(20ZZgP}eiZE%o#pa0@n#9Y#H6v+@Sgc+A5Arvo=8KB8f1Wb<bYf<G@fS|<SKdwG
zW|l>_R3GCM9ctu8$myUCF80>nPM3Va=Q9@Z_;@qUFJZl1+4Dy(<q+u14;EjH!&-Z)
zN`Yoe0;jDgi}OCTJf99i97f`uj9-1Fe`;<#f;MfHF`if0O&ipjaf?k?@7iFe(O4#$
zmzwo8zke$vbez5xV`PSeFDq{StSy?Rz>8wsLEk&e;(36gC5VCH!-{>zL^)*5vE!?T
zyZwfqCv{uo>0=;NQ262fga4y-q%WY!-0HEzW0iLQ-LEDnZ<SAB6EnkGsCL$qQb7zd
z@|$01mTo)=G(Acr`p!JcQYW85R4DIli50Gmvh`5pE}YzQ``SwE564mf8#p`xBIF)f
zOljnZL*!=l!aKUP?VKqo*O!N@rw1di&&#uvvGZ5wFE?SBnOwLPDWRT=#Gs?A6LgOc
zgb9jicEJ_n>=JPcs$TU@#V*i=SRKy%WoJ_g7MZAnc9)9@<s2>uF$N|*kz4J$inL5=
z1cD0s>&g(hk0j1=(DG`n6a@Z(0Qc*EStB<<cfl{_lTXn*uB<N6nV!NteD}qF3&W#V
zV_D`Gsyv))#ag|;i;PD`YM3(&H*?XRE7^+CT1^#-$rCMv-E2aKTdwR*DKe-|+;NsS
zZ?_t%d*hB*Y0)_Gmz-&#_}z&NQjsb+2F~{&C*;M|@QAR#Hg-(i?0cWB2I^Qw6g{xx
zF#@8N6+MHFkW%H1IHZMCYN9i<i)5H)$k2cv7WIAqZZ1Ajp$$Xy>>77(_IHc!umI}B
z9qC^i+ft`$&>!XWh&NJWh)IMKrj_T5%AG7pB_+gI0*4Y@@wN~dW7QX!gyXFkvD0u1
z*^?zP7>knL92YDm*?*<a%hA=kltNBvEX*yDh%TAB*ckq%i}FjFC#DLcnpA-jJp<*0
zm3%f`B1tM7{awn+h)n!q(Aa>z_57;QpKb&L0ZY7%TS!oIfibEO#Vh9j+Pf^J%-oJ2
z!dy=j_m)NQ0n2QnIPf=(n@{i^arWdqMMCZeG&I+wExkhu1+!FSymo6jMhR;*0dg&<
z1KqmZV^E6vz~UO8B)ahqSs?q(Xir#NWzyL1qiOY<oPJPpP~Jo5EgT0j#JZDDQ`j=k
z=jf>2_jK6~H+RW~NfwLWn!2*YavQ=C2hufpQZ^*ZqaLSW%DBt);JvpU-vtXwrHkTR
zJvKMi-EV1km&~uw?Y$2!oJA21=4ZRHW>hQx3Vj76pj6g_)?778l`T(YV{3LYx*)N%
zZm@p}vBdE=bqbMe4|3cDl@B!&VmkMQ=AXobV@7D-Z2ne&nzsDk5~Ayv_#*vomLC$L
zgNBi|2d@>xLi{h^2+TtKH8nfzs)0aaz{SDF572+9pa1`}VX*$&@!Qn+{~{VD&-GQ6
z>>p?L6Zt>UO#c1S)EJ;|XX)hppQrj|^&k5UG1Q-&-hI|2asgCG?V@H)YQ_COG6GCE
zCC{Zv^$6b8?GM*8f95xSd~UqKVf*DWT^7uUWd441-RNI0Sgzzlfh256wnVc$c5E-6
zbYGug$&f&=LLKF@2jcwZTM!WDUrvaxfcxSAUxlOulovY64zf`(b%@dA>&zo6;VVIP
z<de71l;P}4!t+=*0r7>Ss(s@D3W!vfPUn%7>kJsd-Z}Flz(<G>D@o1x5Gc2p@JuJ1
zSlbi(P6&@T#Ova24`<2-_+gop*|6cWBTj5Ar2Zf`hsgYEVC81OM`W)XW1?CV=c=Vn
zUS6B%m_bSo+GD1p&@T6YjRd`6$eSgr9P+Mj_}T8n$3AJ!XidV94&}@m6_`+-KCWo7
zUHIC+vb+GiS%)70oebWtm;_2BaD82bicx{RPej53YYbyL;<4NAG&uu4{Fe1i5WC9=
zzEuwF25nLQ3DI%fW)-1URJRg&3&{rCH325VKFgn5>nSyvO4r8{i7BVm0wwGjpU`wa
zQfmG+<J>v_A;GO!IV)CY5laBL$)(JWuD$?@pPnvxu<`m>q>*yyQ?r3#(X%?-t>VTi
zjlVFXBx@Hq3?qUgo%k1ZoDN6Y*SdvN4aDL~DmRv1{0sfKW*li^HKis4b{IEXhq;ad
ztaf5zF{-5yrg;Z;y+C+m1*4#hk7nqU(2T<xv8uNyE0j|9w3XB3=%7$XvNJ(iR)YkQ
z!{InC_ig|r3AQ&ehcl2_szY9y87)%u#YC5uh>IR=2~+LIm~qCoaQc>2KrEKaKfAa=
z?@{Bx3M!g$B!hu$N<fO)nWYi;>L=KHGle>BqqjiGW<wq_nXd*H<{l57F=J0jLsN|m
zl0JXBfe4h|c29o=iy`$7%Jf0aR2*0AB{1EmD)s?<Fo+d#IcF8X1sU{|Bz$aiKy4rr
zC5M(EsNATM|0n=S8e#oC93)lTgAlNpS}*Jwyd79Ht42ux-ydTzza#%>m!&?w!i#j7
z*4rnpHf!)aRS32O7aIGeS>r9qnG(*>#026Bq57*uD$zMs{EKgiD~Pm_Dl*mv%XRkh
z15-@<!ebdJ{jN86wSgU9vHb9sq-WMz-<tIwCv#e#-8|omw==*@BE{}Xt~0yBq>d8-
zZuc##D@;TJ{WrobsmKtK%T7#D=jK`qdQ1p3ed~#Q|MI_j_;ht^#e^f=$dG3`+vD$7
zX81R-6@@9iC(JCL-+qA2Zk@T;D;J3kQ_dc0Kb|ooM$BW%2Iwi;qCBQrKGcx24yCCA
z68Su4#3w@txwHLS2l$3u3CATSQ1`I7t#k@U-C@;iUXNQ&|M@%yoiroidPXR9oJ3R<
z?O7|BG`Tro5wmt10rULH*SCQv`3qc_ekRxMba?#$?(1=Kkwj>H6vuO(+vndmT1+ZE
zxw{S<@{>f9)@>XnEKg-_@gb)Y6NbSH-$~dmY4TO&g;swYHx5_q6K(=fy=}#mV(;x4
z_6`S|E;r$<I4WPj7NC!fHmXAp4JY%S!Tto;A>d`mlaH2@f*`D6x`lV|JS>XF&4l^l
z9`O2A@pKpW3~DqLyt9Kc%ape}iQ!J(XwUzV%Z^XCdo+io8-HgLT<oM<wJp2zkPTx*
zvuocP_fy4TCkoWcXM%)FSH86)PG6q$oMVK_>=Hjb!7lZ=ZhBBR8^hxp+2yDjQp0ip
zSo;^zay0KF&Ak_M`qA=l%;1f?#<_80CwTiY*-ZD|Y<VMioZ9*ST3X)3%H0#ifBl*x
z1^N#F+W(~j1DIIZ{&N+c;`vhElxXNZsZF0yBV$_|NwmRA6+jy&_v(@+L>rUVE!If0
zi4(-ozL#PO*1rFKUfq5uz_PS~m28QXie_D0)L-0QWL~r|zku2_s$CeiMc3Cuo4WDT
z!{HNh^&MV63#2eNw_pFD`C=!)xU|sJDc1aJDBg(m;Sb{Y9B{(Zd7K1KD5PV5z$ov?
zXE<pxz^sO8VOAK$T6b3t>b-Hv@ceHjc|1=my%0$26zd*Y$zi_eK7#ebbsQBq424tr
zFiaDh$Y{>);2=6ih8<yoOGbl-hV)DPS5KR$%0IJP@a5HA<tl}Ft*Uk|9djRB!~=1Z
z_$0BMq4!83@Te}@F!7Iz`N{EdNm3xJ2j9h?^`ltKCX(SZ9kd55{~I2U24z*U4_;aN
zfO7{Xy`sD#Q5HHf%le-q&DiMI96MF@59G<}>N*H(7zfH??RTTIB~a8%0gF$;5D6cV
zA?9-7bE2Ju4qK2NtGQ8=k%w&4&so##fVm=VbXxyP2NqyG^LaSS52k}T^*>`zvgjBN
zj_dzS%joQiVj~K2@x>g&q+@o#{^xzLx%fHt2aTndNAv4<no)J$Tzo&HXQNKfXQzW<
zMM)0_tLB%FAYLw>_nUWbcV|#M-G<^6KSn=1d~emm9F%a7cePQlroY6DRmvD#MrJr#
z)6+`=%f0(Y?^y7IoX3xtIu0+Hx{o!1h3dg(j~!x@vOuCx2AHEx9FWkK)KIF6U||H~
zG}f%+_5)vcopQqsttRARXJ^(wT6Pey@}~Difq0_RcC%~}MkM=>CpD3ht{sxIiH@><
z_0cm2+>lRb{$mF~Wtp92cjt~8h+XC(Nu=`5uFGcn^k?iJ3^M>V(|h->5`CDJmeprr
zHZevzGNKr<z<MDVu(S-@)$HG)B}6277r+|(Qm;LI_}C-VBM||4LAl}!H;tbtg7=2k
z?i7+9Ge7g=JtHq=VerVIx|Kg(Thy?;N@qu#PePf~|Dm`U+c{v#aIJv{GT_=%c74Z}
zdA+>4J#>D3Uq)1Y_r-h;?d|nsef<0fRVbwxT)p|5_hao2kM8{Z40&btdUyExIZp2l
zo^UZvFQYsW1yz<3pB00pAylk*H`F+F?J+SrxbD8v?kSaC3hN$?!e<E^)|=<;&5Fym
z-e@kvUoVVa*U4S9xBE-$mk3)IHy`JhKLBFNnk|n3oG40vP)0ep4L45vPusq0zakF1
z<$V|8KhQk9H&gF04b`qgZjl+<DWDD1P*7YrT;hC_4@si035MZ?GV3y}g_;~sV&4X8
z(0AbaV_i#BXL03^pgs#pF9Wz0*mYj6L2^KbiQuTP8@SA=ZMh1Sr0)GUDiUdu`@2X|
zKVPD~+m02Cw+*a!C)yOa)}Y>c1-6q-vRupsP5aj+I>`{KjOPN7IS@T~<*&FyL{CEB
zx}6=CPyYONxIAC`&7Z-|hdn2H8?U-x-$IUvNdlTt2Nq$1U<f*AS|LzcB!B!j2}35q
zAAh{j0RfG9DB^*!z7h^V_?Kd;XzM~mlXIu4|7?JtVPx<UGZF!YBDfu7=1c+%YL%&2
z8vE$YY<eqBOAxxhP}3G1H!w(HN35B&!moYo;WXRqI7+0gL(DJ2fdU8Bbwgshr$Hjo
zWTLxxzia(EkY^0db^YzyMa!smzRvB9(p4dDJwi<;VT!r)*$;3|PQ@U#`m^`X70)IB
zQdtS!XR9>Fx7buHY965_|3I!oc%C2uKSk#&mZFzHo)?hseE>NpG91Y#uIz22yf8$t
zSsdc!!ppn{0yNYR$!*Ok=^ld>aA3YoMyRKP0Lw^rI#Hj0&j*On^5|?l_><VtV+hLx
z3Il!tsf65)&%k0)>R*4B`{nfZvl<gz2*kW>4upuoGV#F<<Z^5lLM>fjtoZQGz?DBs
zDujs1i@anyNI>9T!K>*&1tX00?HH*8PZo3@3ef#$PEwI~79-%GjqJpGc5r*H?b%Y(
zs`9Xe4xL8n0xJKE7jnS!S17;*$NsN3PEbYQF(EF&#T`P(l=%fDg-aMti$BkYI3c|)
z&}UeqRr50QBBv=poTbj?-TiS>i+os=)MY~(w2jNZFJ&>S^qUl-P9rjC>?BOAvDCEN
zAQygRs7IPX_p-$#vQ_0fd{?d^>iAvj*}VBVud{hS-CC~|-SGKBI6flI4d%{j80X5Z
z6-ERtUIKA&<-oIE87c2HG7zC_>uAvcctO<igdKS&^4!)mqc;h4V#`7d9M=XEV!1lO
z!1~^m4#VMG*)->k>QV?PBXFB}_K3MNOY8Oz?@R+NeL*)0eAA8Ky@-hgsGn)H6woW5
z^_cOiF~ho{ezeMX_Z3Ayf&<B=0P>S8UUE_RkZzd(QxJ|>GT41jKItTBAP<7)R9lE}
zp>sx~S)zyBY1Cn6@3N{{X_?pG#bM39Glm6pZRZ3I66@}!5QR)mDZV*fyuL5@(NCA&
z(k3pH${FGbkr8RLMsuRY@{=?l0m?i60e_-X?vptHAbzouh@XR;MAyrpv<>bviUNzq
zgsi##1k?M4=?*EmOARQ0UXFNUf3|{9MTP{mmM-&-s!W>(+#c$weY=jL1*^*U2#Q4$
zW(NIj&i#ok(AwqZ#2f;DTXT`V{l*F6Y%0z_jE}H^c69p#$_CeVAaoeVlIkcrHo`4r
zub4}Jf}4VY_NPhxhQE->_AC8t(*;|e>XQXj{S3KFVWJg=lyTUG4{06eQE=-QV=Fcs
zs&C~R?5_?CcRu3IZmpM^^{ds6?zu|@t1n-KkKW&Ssn0>tNuXK@rUd13=7;Tb*$XU%
zNK}^PHae7_A5CYwRY2IJ<)1Lc%0Z(Xik`G!=-76F$P)D*vDdoGSDc-Sd4)S}&qaKq
zegLAUi5X?F3s`(D$U9^n&-V7f?E$9IuldQOJ<2<AcRjGo;ZjWeqzd?wMt4S3OoeCK
z&GZ(dxmTus1z1Mwk><}1T6Elll2)W5?*5UKZh<+UmTo-uCpk2-2>M{$xyg;Gpr86w
zNRB1n5?#nH>733ko=~4RZcB^^0F^K%Pb;IslCE&<4z?v$g?0hbWz38E<F7&=?OT)I
zgpQEtYeXXPR3}Ib2$O4|=KK6S(jGNTjhuNWT^5K^&^jKU1i5me!pdB!V({<4Rqypc
zTQK476WC-+1w+IfwiDGj-(9|7Uhg9p>VxdU0?xi%-Vg6r7jCo`1iqNiIk58lxd`$*
zu>80=pWj-Aqj}L7lQaQX#i{n0G`kTGh6D71cdNLX?-8KXnTYRTnY5X7oNFvb<r<f^
zDMe%kWWG`oDjBC~xb72_E&z8ABdlU*hyiqJaxLs)t2&VB$)wP8hRa1PGad2`rs;XK
z0noXxiF%olM164>);>^MMxY<r(mQ)fY2+{lcdm<xHBsnB;`b6Ld(3;1@ALN~RrD%5
z(~xsDwLf%>ZGrez7`sDgiPjWC4~C!~(@{w4to&jut2`-4TakU_(yVsAOe7m4hCm@l
z7>za(CkUrbIJ;cUPeOwBQ|B#FtF{=8n{;-q+n4*KyvdfVB{T0GoIjkOgT6!)6;r|u
zq#N6x%6TMbgQPj{RN3};W3Evy;*~cxa8+vk-GAwM6avrNLhW8Z$P}x2&8>IVvAMJ%
zRN>BOwH%T>x4*kire8FQ=KH$U7OfjF=rLK?iSFugy!5(lYc)kr`VRBk*3$P~bBJdc
zkEtc#kWcA~9zb4xH-M{run3=~dRt_8Ya&c>Krjh0|3MolxfbYmb3XyBmRxgpumvrh
zTkDLGAY~}^DCoCj{6OUEr=5VjH~*E_Pq_=Ai@i(rBBtXf-0K-J{?!qjKC_U8-nmDk
z9~()7jj<oEM^#nSz>8N?TytAMTedXV8h9s_uEn9w;0vV;a|2CIY3TfEnU;p0<j%Ex
z88mQkC<iH6p?)qGd8u}evyWMh)4b*N>72ZDqc04AiQvzg5@E@(2ueAjl;Y}=NDg<U
zs_)KDxALbiEy6yUlq?H<S9)^PCWLC%jgr`G4sZIeLr26WjbO^Ff9t`Dk00>rtziGq
zWd)1Hp}=WD$5yHt!z|GV%Mv6DGTjHyq6ENF0jG^({TPpC6|W=8MdOjScrof2NVel@
zl&-7i(4;ArUi)TJsp46&ACUbrs~fRL#rWa<X4W|44@&u;N8UOA0^&sS;d}tVzw|a}
z+RS;bSijrOR?k*!D?@QzW2X9u(m4}`jsJAU4Wr-@^;5BCH24Otqa<!(M0Zi#RGYFj
zn7WL{Q&+<hcg#B6bNeYh+hQd){iWk!cTeeACkAMu2YQ;9D?Q8(Z7G}(KSeQJFLV^b
z1b74K;=A~y>0HkWyJAN4O0~D)(X6<ygSpAkK;7xo4u5T0N?}uy^0VKhbsXYUy-pe*
zNzLTju*MGZH?|i>YItG2pCJ?__8^Qj&pbyNeXpVY-)b5=Lj<_KMs=CmPRLJeN|sfO
z(Z1R^2&V2i$<l_k(CPEGz8wSHIT{R;+RnYe%YuJ5Sej!3v$d?zCL<UjrfCgS*Ua|T
z^r$mCJi_x(&89a81B5lJ`OzH&(t#g4AcGL<aipj#YSeJ<UossOI-fxU=$ESZGLJm$
zWf?|sR?(sw;!TDF5+4-e&>li~6hme0myC+g8FKs*fFL$%_9rXRLBDatVX1D$1D$d)
zR#??MzMA9gAax)Hw!Q0E<6`&zg!M!=T&BKV3F}S+%V23k)=JL{zoKAK&DpYzoviH<
zWhTPL`^&(Su?Ct_GOb-^VfqXNhr{lOmeoKlr#N?l`<ny1BMXFpjti!7tZe|tr(%<8
z+-pT*07HI+lB>i%Mi}q?)>|xCHWE}r3NkhIZorM|Sj?h^w?rb9#;sID>1r1(8f>>Z
zK%<Z@h0aibM2nFv;{vp&Q@$okA)d-5qcN%`&-2FSm>3o(s8Cya<)!eega;=+4Qw1H
zxDGG&tb-WRG+?(lydlG=l7a+S^FerNsgsmA*bL>Ys&B=_YncFR?vjvAwP1?M2j$UW
zFDp<=p;;rUM<w~uKM=E<!O;rO=uk<Gwr8sjnxV!nIA4~hv_R{`(tz0GKn+U_AAeDq
zo6+&d^^8HoQ7vN>mLp#<dT<;y@L3Zy{6g^w0TUW075htQv7LH?NnEol8z&NqQQk%i
z3?iGBrrttm@un)Q;K?^ZtNNl1jD0(fjY~y$rB$Za#bIDrr_Y9qp9<IH33*IbqQA_%
zM$)F3d7C{?n{qEj-o1c0(l}}$GQJv@kt$;pTQY<uW4IJbekpKwQH9*cTh+tu6#<Gg
z?t`0|k2aEvr?Cw8(E&0wp+WZuIt&cAlBP{v+}?!hUR-qwY(ExV9sRRtoje!d)Dvt%
z?UKL7!D3mv5D4sRC|OLeG3?E9`oauq*T9{rZe0zOA_1uhP|~!r`WlfU(f-$^5kE;_
zQ)do<Cwnf_RR>XYIDnC8BzSd-TU)3mn+`(<u&R3!eXQS>CrjbuN*H`y+D<U9H3z$+
zJQ<b;E2Db#_MZSd=!)j@T2wwXR`(UNg0k?B{iPA=dCpY)sA(u8ob*2(byf~lN+@n%
zf=^`{`R;4F^KqT2mAO$TestxiwLIAT25$QXp9nh%OOeL<%=Wq|EAVTn>9~Pa1l-H%
zfINjNE|JnJN0pKeF|Eo)NCrC9zLll01KHwV)e1;<#KsQ(6i(Cgjrk;rxgdK#SxS%i
zLW*tXDJIS1ejFIz!fm%Xq^<Dj`t=QAcZfW}Vfiz{_RNWYjfY+1VJnQHlw-pf?+9T4
zr+n_9(-3DJCriz=?taWiA8|(o`X>eYM?^Fp44G^TF+UnbfYXv*qUqiG4#*1@h~m@b
zPIhySI21RUok#!u9tmGR#9BJ*j&Jq6oaI^WXr-ceCBe2~&pIQ+EPC@A)#*+UhP!1q
zynYx$uYjcL?>N0@|KaHs9{F#{;Ez$>k)NKB1?HmWpBI`Gw9K7O4Z9X5PqQ-b{CvB@
ztf8RDvYk$1`<7qoB41gl#Iw<@2r9QP3eBjWFMn{*!2Ik7>J5Dr6>oz|p1jJy<8oJS
z3eI^wwYDo?2GKs*i(%2g_${=0!zz9(z_=G$0K#ApacXs0rzEJKD2)xCbjTFMND(OJ
z=)l`4OR$@t1Q|8eGJGmE$ErBaVv6$ef8f=N9r2GH^_)~&cZe^Wbr3XZP<UmF&m_Fc
zLEUU8T7?#`y>B2cv>IPX7P@84O^<ANq_$lP)ZFlcAM~o_DlgiA;qg|-mpf`Vz}O5N
z6?AN5>OJ4!P+fG_N>=B7SuBS@WtakKw3;@U@}|Gck3y*iPp>&=%(=w$2=*u9=FaaR
z&lX-d|JIu!BoCx>8=?-J3N2`R+H3Do*u|=wE?soTUECp3rWMMPg64wPPHTTFpb^c-
zsp#8LLSUJ(z|~0}<YAo(JjFun2|Ue0^Z_AOK;*?4*dM&IcK`Csk5b3wpphdh>zGhQ
z4NMF)(+qr1{nQTi46Gmr=B2Dt1wtUJqlO;StjhcBh^%`g_!}FNcfH%a;T`<_tM}y9
z7cch4pn$s#iCxNjq)Nq6IJ~yzL!(?yqkBY6Xr%-k1thhh>>X9jY8C%Xo8-<Q7n<t$
zpL$vwSw?E6&MKeadxDR>gSK|v>N2F7?fd!J`)>HfYtF$C{d%lZnn*zv-Xp}ojY=tC
zM^q_5zG(pe3phtA)3Ei=dJW<e>wFK$jh%eBz#zyt*Vw-F=Qnhft~#26dJ^=-y@wXx
zI@X$>fVOL(S=RDd6`|_qi)SbN_h9Z43}pV}!DKs>+885Xg0XB;v4N{>5-B|=UvKoD
zj%T#Xg;95;&9$J+E!QX__H*z}GW*VfvD0)OwU($_xq*e+iAcTc4>v{zM$?cj3=f$0
zdqyPR`;k-r#ey@wVCwHpt%b@eMnkX@fvwGIUgLqPA#EH}HW;S&Ix#x;=6g&Z*P>q)
zM~v^;qCjO59s6+*QxgQ1iLL<B*t1>vjmn-g)k+LWdg?DB#TSS?p`iQ8Tnh~KyjSP3
z4sz^SF=0RuEyf>xk~UhXXSDtvCxbf2-Fzm6MjfNF@J}J)4Yd$5kf&7m2qEoYG9ykJ
zhP^YG1l%_8_hSJ#dsvu{$4h*?^di<QrPfR&uiY7FKZ1&05T-A^rTJQ?pA<Qs+iQn%
zz}Eonx<|70(~VR0w@=M-?`-os|5)?;Kq=22_ai4Ff*yMrUyWncH?O~M%tlMp234sR
ze+A#hnZiIUMD80*n58kmeGz2j^<t!o0Q;Xbw9dO}^b(VPIDT18xWll&`!==8j(2Wn
z<1+K_b{$zoTc6)T@FW!>3WS}yGf=zxnb{H5AR)OP4H0G2X|7;C#!l_iaNLY_V<L&+
z3>G=!>VBsQ+(MwtN^qU|xqP#9Kp7n=vmO-jC0@3YO7>Zspr1#8Jv;3!T;5%t^xuV}
z?q{#UTV1~WYC=pwD|VBb)BG`8jbd$|L9mp6Dc{2IoZ~j>rGu8i6#;N1sVF^3d^EMG
z-0utJrk>(DyXfjrlsn>;JBGwC8E3Mh@f3KGx^)~BmACVD)J+py{1L0ra!NASBt*nL
z66JjhJ;0U4eX;%&TW1j+q*N-hhZm;xRSAD7sq5x1GE>uE=h(pYFP7N!XF*A<Zfwr$
z*yCI0B^b2hbumT?w+j84<gu*os5*`biNnI<gz87K^(IJRhB6C5X$M-3Tc8Ap7M^zh
z)KZSyyRR_nReK7TTOd(L+hNe2x2AyZ+mi9VF56|<*Y~ZHYkim|xkhX-7FS(H(%&Wv
z)2JSCu>KA-FK}&I8FWlfyaksInCt};JXvLp*yojMkBI71lqKnqyvFq5e(zLS*cROO
z%qy>`DWf^nnsyz(>JLZ^c<mwi;}(c#P)xIu1e_jD?wwuUY6*m^T00VwYtsrlKm!kp
z{#{m{VUSFc9F&VUMlS|c*SQL_`gC1$aanz#Bj2<Uk(y$RTRd7q^?O<2Ns@;F?n%2@
z1(Upn4HTE0KKV)ku7vJ>2-)mF)ikwp9w$?Y+v=0wX>|p6+%{+Di+Uu5D&jDadMkiV
z6hV@P+x3V@Rq}Jcp=IuumdTKA!&vb&mgL*j8{o|D(bh~&Nu{7WGsEt&pA+H)o+Uo{
z#<E6#lS#cBpQVu>E9^bw{4X6^J_@~Bi*CnXAGI#^vj(l{bqqO-xcT$?$NKfeobANg
zCZ3`X&J|~ziysu7H6)!iHoCky5dH-a`j22dU0e4F`&znDT#~O>TleJ>&j&L-m0Gpo
zUEgjWxt!`!?c(XfZ-0{knw{;E%dg2ViUb#<!h#=dkHjzM*vCb}5WIin(^pNIj6d;i
zv%mGJxe<=0pZ>ObR1P0*ESMb=4O9Q-34S2@YDpa@O=yxeyLntynmp24BjS_EQ5C^(
zrkl}N)EXUP)afhY#h9EGSyLY@oY+Pf%<SEx#_4^2$UN%*oALxOIQgheq1Nu*>}+`I
zJYJJ^xIDg-D`kfeSEG~B)ihDFVY)rengHDRVh(*7?XIz>#OSaYs0MK`ehd2rsk6J=
z&l}yK`4Pa7#WByw)u{92=&)a;4Zk1J?&{06F)>^_^fwP}67*CQ+m7*1T+y5JwfW^)
zV1_@UTkKHTzAjJRTQuzZdP;YPcaG-G#Q@&{)6&zcu~4(i)tmoBK4xmZ-nMFBxzfK_
z>c5O5kKfpz#vRGd_+2B&zxud)+VlH<cYU-r9T|J;J_0$IG5&ha8g1gp-%w}Q`}{_V
z2L#n@8Qg`+`l!0C-b>|sdJ=?wc1o8peY<&M(V9x^Z4)^0cz*zHU{Wr#_(w1T{BRRf
zL5b~t;l+o81^KD$@$=~YTOzPL9DEe35^J9nukYbGxMFRZw7}Fz)KaXG5-1Xybj*Yd
zD&2+26r}LZ5l6siuy*7vD3&wHa=(}NIp$>A-V*X7srekTHNoMB>&HXfryT}p9rVkC
zl{n3Rr2&~ukPgnzBjthH8aq#+Hm)C+f)m*PT{;Rb3dR$rpm6ED>a9xgP?&O9m|mBv
ziJku^ZA9ANqwq65_h2Je!K28lXtW(syck+nd`IH{oOnz-`v<1HQ?)KJ8OeUY>swpT
zf{Hp;n)^Jr35Vz>T^za>(b$sgrB9y;m*au*UQ}vKIL|z_wVF-waE;b_mOR9E)H+{R
ztj|-{B(ziVsL}i&i(sLE!{IhtM<<=BevcNpyGUBAOR|f?d(d`5&Qd*S7VWbHn1d;t
z1aadD)f+P|fp_UgZ!`)OKlE3FOFLP$#@tZx^q4MBplA~<Y6N42*iW1FWH>kJ4hj8z
zNV0Mgmy$b5xnNC0ZLG===O`U}3@Z&w8(q{^F4eg|y5_rD#b3ST<#{gEbZ(rkHjdzu
z)hNaj9GQG0?Pj6i<W;`i3?A4XJpt@=Z-0657}nYAY7I$!9B!o}bn<Jy%>6wg8QB^f
zOp^DS=J_eXbxgOA4nymCK%l=19;4DUQ^%;a47%}ozahF#(zA%}r0hl@uqW`Q+Cm76
zO5th8)%NIw(BwrsJDjNX`{|_bDUQ=$ON&EbpKV2uC;0Jw*a7<=e4SH}D8ZIR+qP}n
zwr$(CZS%Hm+qP}nwt2hfzL~H2c@Y&E`CU<28F}*TwMMXW;a<PPLm=MWkG8(B#UOet
zzy7A`@s-}792Ho5rVjD)1a6MC143ftx@!;r>4UYebFXtudeAtH7D<lm_tWFXbAm7m
zC;M6?$-VV_*uC9y>Nn?!xZ}i^bw;lOdhpABf%$P_<o(IYj3-U<pTW*K!~gmmBm9dI
z<NsNu{4@RWIqBy}8b97mw<Yb~gXeQL^jF-w=WDgsAO9@^>LI+xzq`fvSPd09j^<52
zEcD}I&HW|WrCY70Q4^LtIzf|f+)V!U4GGloVX7hf;ofcs0_{;e=MGTq>gsY9DQ|w`
zN5lLpb`~m$Jg3CEX_l&d$(>y3$O_aPhmPRMD`g>*kE`42kHe*4x7~iKxL=S~ck@6P
z38AAGcIrOa!xhrr?y<cx&m&tmWVnyFFqVnt<|4h(60_4`?WHD*T7Ui1K{D?wGes{{
zSeZNLVUg*;*h07ck|8>4<~@rpw{^Sb!jM(FK7TyvkOyN*+q5dyuivW^;|j~a{Ik~x
z$jr`;h_5mD64b(Y?^TW_wzP7(c%b#>n5QU?*A=^=Y-c-;cxUNT_;_SAZzc{MGJPY^
zHi~impX|*^T*YU0<mt7g9Xs6-?~m;COw^<`=ri@IK~FKm%X&VW$hwnV89}(b{`J2E
zM(XH9Q){rtw@i`RMtg(zrjg^X!quAaj7bo^$q|Nq2Qa5CT#P1$5zjUQ*_^g->mrF)
zvcYC`wz#TftJ({YIBdWy*E+1+@dUsO)^lPhn7O}|zm;kEiv;j?KB3vq>n6<mjr*>X
zMH^hJe|3rr31mXW{@r%20?u?9=4krQI&V`n**WrRdb+(eaLK+6xzvT76%{DoR?LD#
z;a1dMqpPnTR(!Wf5MIt(0U@W&0V#~>nhKFUbj7{yt}N_!4S6iiJ_oYwDQ?E^!C!z>
z#8#L3H9I|N!@dba_!k}+#ymO?neuo?4Whp0kh$EjE=cmXWTZE5(${NRyK3Zbn7d(Y
zjQ#Dh`Wo~&pu@#VQ=1qq@4Nc+eH(50M`i5dOuw=0zT!E-C(QK*(&D3L#1B$iNxI}M
z-W$`LXyn`$)f?Qbv#z?77G3E3u*zQiYB&{cE$>5MN9&in_ICp_9>ujbt}+oCi?y3O
z);bvANYh<^(G2v=F#DFSnsfV2y3e?;oJ>E0+g9!Ld5CKFj`t7uA(^E9?#KIuyIvd5
z43s&1hV31$*4%4;TSKgUd1XWcCJNu(>lq~$mR{N!2^`V9a-p*QlnPr@MGoz<7~^+w
z$G_#frQd@S8CIV8TGPJcYyU#en>Db>y9Rg9B52>*?~TU%*s~Yjy=ta`l)>}@%Z>ND
zSp(C%qjQqNW4_Mb5<X>PnBd^}!a>LSrR5QoXnTEN^zqpJNGn@+<mtTc_4n|Cvf4C$
zFy8cMH~n^`b@n;tTfZZEMciEbeeCj&)fqVR|5nzE&6cA}kNhM6_wAeu*YSUM+t-e+
zCA;{!zWMrl{buNVp=Osd9#hm+s9Sga-qZqbLOqASetH@FJ@6!+fuHyxto!EIm3}b^
zZihzACJld*lqRppXBvoZJ9gDYB>D9-75G{uT8P$*o!VkkY{XMx*TKuTRo6}RGUW9k
znWrAtzlM!}`Nr5~QwRSnur#)U%1z#JWUV>q<7Ax>i9^qld`!$5LC*BU7O7y%@D;;p
zGzs@nB=iok82)s|b{VIppf8>mOZkzYhA^t`#i<$B>mBJM?}Qyq^-P7>DmTy4_os=+
zJB6uN5L3UZLFLU9DJ=c6k@P@Si7GmI)<W*5bx!Ui=C3cht6NLppy<E>Q{1EMw<g`b
zlFaqJH)x-y7<Ig(gk7vJy@`FJ6OA`!wD6AQ#m4xfxP$P76dn0dD$dqy89GUSU^cDt
zwT*1Wm)ET*hg*AD#ZVP>Z?WUKjr?4?qY5^0ky`WPm~MMGaINgfx#?lFaNZa?@M7R3
zXM28E^x4?{q1gL`Ygz;_-#eP5gpWJ-sG@utYBD{aq&<4&VD#f$`GLP?1;bi!FYQ^`
zivvw|!2n`pr`B?~-{QL(L<PsV_?TV!Fuc9{wVn}p-9K(|JFBK|j=CsXBQcp1)O=fL
z2u69Ii1s6sv)B@H`6z&qS`F${Cc;iRq-t1SKN7DHDHq4#v}ouTp*#$#V?=W{4PRu%
z3Af&~cIp+G>l>j+1hBu637O;K1VO>w0cV`|t!dshYR#~9%J|;|%7aMNyDkr`cl0%L
zaX^pKH1+EcnCFEf6|iF^Fqeg#4w!1HeIyxYCWcFKCx0cUFaY9Fg`Rxh*NuCU-k;Ve
z@})UKqw1m>$q`aAWX4zy5@xpI)S{p>)J6SSme2Umn}n<D*GH?_2T9*9^#s))+I96T
zI^}i#v!k+_4xIWQWz##mBQYuQQ=`?@0$VPb{vT)4h@a?OfZ2FpeT@#L&~ER^hsC@@
zrU?E#<heSm#ib<H@8SGN$K_JNr1a0<49A|#QJLR%)q%P*mrBim8Oa>4*@Cm>kvw}R
zN%}{tv}|3JfFrj+`ci1K+V5n0jXd(2zcV6O>wiX8b+#zp<gK4=jw>eBq+rLt`zRmN
z5;v_XYGWLqKZ-Uwzny$cY8Y#ruR9-*{01ET(Y|{h$ouJUUmgB4!}^YV?U@yEaAL-~
zGzIP4jzRNL^2l9Ah@Yw6f1OKL%XnkVP(E0KOu3l5DOCNb0$iZX|2OSiK|;s^%KXtm
zDR^8K&^PmDN7>%ReV-J8#@&S7gL{7Wk?=8-z-Kd8w?K8ZpRHcb^;TovCOG({I9%gq
zGPhQ>)ytB{1bl4y`htpF;Y@~VndoePKUAq`<l`%;xx~|doW-)HK1Q=X`FXm7Uzv@V
zgLiz23#SX3{BuZ$gf^hy7yW(0NpB@Rb%A$iRjbkF3eVS9^Wo|POhtFpWbwrQ<??o~
z^lZ^7ciWlWo4T7m*-n1q4P~05r{|OAh8|(+%Yf#C3$@=zPx|Oa!g~<GhB!OLEY$nu
zE8{MovgC}*%^QRB&dDiU8CF|&r0FY<uZ+vvJIY1KJ%hRJdw<~iChXUN>d${1C$`#$
ziSc7*OfdQ&VI%?&ocw#Rh5vcw(vH`+aKJ^qW@&|Q-Wsm$(~gSYL7^?YFjWvJ0c&vq
zog0~Pkc)Gh67J~y*-S<2G$$OrKC><XAA8=tfRY)h0_#!+T0PWb*1iTTS*1NzMoCF4
zrZf4u28AvaF6Odp0To*k#;ac$Cg5i?60YX5U<D<goC<xd#vyhx?}2)avPBcCFzJ@Z
z7Vf!ywo>bOVv@Z6EoX#wW{5_{9$)7dqb%jPQ|XJ>Dn0V#KIfSU#)aIb-+=FS`!nF1
zCdz9Iw94Df6FW*gC<x4rQ}<qAqxIy2F2A~U;$bTSgm$969_hoNSu*80OLNEm2&n(4
z>042U_&w#kdBxOug<u@1Wer}~xDy3piZOz8!rJ#>mK)jqC2Zx44vW3f;|r}}KXtji
z)8-g{goI(j%*Y%^ygQe2r$4<f!r^b|{})=-e}+54RQ~ht+g{SYT*R;cHSc7F^<Pn*
z?@dT)PvT<sSjTF?W*NN}G97Q>40zfzHom9Lj8#z7;zKov#aLveW7QTF@685*3}l(}
z$~pD5Rw)G2b~|oKZcIT&fkPdu6(_1-=!Z;5!EiN=8;P}H^eM6XLTH`({!W3K+e|kQ
z`87!^iTTBrK@cjRDv!%1L|FTp7Ck`NoG%pEBv|O|ivD7F)x6@SFhF@TiV@*PGD--k
zj6XtdLX7#if{qJHRU`?;&|#)bs2W$IS6a8+Rx;Xw_FZxi*fQk4*02v{l84;|bPS8<
zrG~B1_rgUw#$56|X}C8w-K$KHaG&$z0_kkBE9CzSf~~Hl4^qr4D<pwJhL~Oi7%n;B
zI<2&@172Gm!pX8E7ja(ke4TM%w<_v^Ytvd~zz@Zip-6`$k^;*Sv#fX)t-B=eIlz=T
zuLvTrQ%PdA*4Pfq(#F|~QY%FyA+MS2wh+B3g0dj-0GPA7MTDG<vG$jNpt;edwj{&j
zV3J4~2%GcoVnWq5qI;+wr=f<6tzpoU1JOw&qM}whLmB__x;f$%OS)H>!@(L-TO_o*
z+@LuYTVbDY`c-_wYZ6cpqik|bc1%*uiXp(BGcAv!nIvo3Si49|66O_XktE<c*upG^
z(~O(#TB?+=u<g~pTTJd@bez}$-a``9uHc5Vox>@2`5k}yRv&DbeCnaDq2^)jHno_F
zN&bDl=WJL2_Ew1@0T1RXj(|Za68l+jSio2N+W4JpBEx!-H`N3oSbH9lLDl`r6_j3J
z0sC6S7m|rUFu_9#?s8oC5<zu2Phudl-KCAjkt9?3`Gfaz_XPQVFBC0{*0d&56sRog
zkt0pD1zZd>6(>UM6N><3&iTs_fZpjQIV|<clS-Blige3PxHe~mZ8i46&MJ9$q$gZr
zT=%g~GcsA#*y|J68vu}Hn_?tS0L3b6g1MkH^yhV-&67`JmbR`e(ON4cuGO(x{RKIl
z!5h*fjE010ae-t+S!|j-D_G6X)6BTpb)f>53z!83e#NX|l}RLw@VneZ0g241<cZAz
zs#g(&F%HzKm&lLwq%vaG*|!GZR!<1cR`>G4i#=_AMh_q$X;d3QajmwJ4J>H2Wk>VU
zqyMDF1BgVd#FdB!wzMEYEf_+;<dz=E_e({|$=XQ!M)`jwnfBRX9c-|~bplc*)K<AK
zX$VJ^$eSx_su?#!<P^{K2#kc3j!>f0m*CXe7bL?{Tm`Lw6rqMa5@-_P6O{*WP*PYF
z8aC-EJ*dyi?FRl;MXr#(9fgC%jmI;VdAQ;3ho@Gh7g~tKQIK9Gnb3BipJ(NCYJ%-u
zfTF@Vf-)iz$0&&H6da%w?9*uRh6AxSA@>+7MAAA#bn|JedD<!Rm0N+}Wq53m?>vMl
zu5T@$<|(R*V4)l=b4ij&5I{7|5O$i|$D$139m@9$0zECb^q{*g@{L-f0prlD3Z)gI
z0~{c2>@w~(X;F&{g2^n`#bJ!_I28`DZ|5O$O@MNjS{)TSXC(le$0ZZ@W3<K<jWa?*
zXZ<2QtSAeFK)_oWlO6(U`Za`NtK$s?NUud2(cl0CV+(t2tr9V^k(Lkujd_v?D@fDB
z8xCZb0+`5`Sb;xaDn}%|WwWbJI-%i+q2|Q3fZ{#E_95w#i|#A*+Gk4@gH}L(5r!nf
z2%9Hl1jjKAS6$ArcY9J{#%a%CrU!BfO0zH=mkj&4BN%z;uGN4>R0%3q1UY0WWPA<_
zqYd*zbYD1?YB@$JQI;tx^8IR^%ZzzMNp(m@#tF!v8Z}fzoU<7rg#q>wd<*J@TxpNH
zk08dZ|Atx{V_1WzZ8BY2B}PEiJMRM%A#O6|5rG0xB8#M}9jPUS5`b~rqA1sKNtp3U
zts+8Y1aEuY-h}B>sr&m`0o}C88o;3KPKuexwlO$H@aK~+27^yj4a5nrU<6+awOWPs
zlZtG_8%LIJ$PA+ehLk08f*xV35_+d&cw>}k2a8ioJwRA;A;==6X|2c}0<2ij=c^!D
zh8dLw>sce1vUM*ciggOb9o3jLlWO&!5@$=iB8BBPZz}~;6cf6(lF}4|{Dd)K@4O7R
z|6v2WM(_ncVdlgN;eDVLiw#PFI#9-PA2852awx%oNC(NM4K*WN>(|IC<*td;4K~11
z<bMPkC<>1`2ftVCZ&w&ZOd-8-kvK#!(6BCd5nBypTL>GpB=}W8lQSxeTqM#th={Ka
z&SQ@xF}^3=hu4HoAcO=Pln&V`ECL7~7hgVYCxm#8xg+RSVJpLJ5&gbqIhJ;p;MHhc
zfPK!DE)s2Kx(BB;_!Bk45lT!{HcnK<7n^dgh4c|6JS|$r*>H`Oj*j8OVUVB<gx<r%
z4iWfo8Kf8i$GJekh{gc&8YHD>LQpdD0mTJlXe=j@Ad1s8>V#8(IkwB+2Zjc?ht8?)
zM%o-3L0Kn^5FiPlm0p1$jnYG^R}pKMA{H`_@BDk&G%?};*+($NuIGRmIHF96-Ek3z
zs{$Jw97~s4_ar(fi%{|T>n(r2mgoQ;xOM0Su*T6OiGlEmjI2a6)EWOwT||X;5&}ZU
za3ABhki%93&IvCwf%C~X(grfDRu=P(Qz!0g!u!LWEJENI7A>)E5*9;GicrIXy>kVM
z*hLZSIl-S{JYRqyB|~5^mm`G)nhqS1fH6oBzpPbGkqx!M4H0C`_LqU_Lw5-h5p<6s
zxH0-?L*xdLi|GKVQylFV1Fki~{sFJmt{>>QW;qb-XE0%3R80Tev=kG@2;ICd_bThb
z;$hUGAO)nPVqt*fZp7Yr__e*&?8*{L{hqCx&*9B#hy_mkj)29!onQ!@u#<2~bN~-C
zbup2IgNwXrz$Kvheyb68uj*P!#1G_tpZ+s^`LBapeXXjhQg9ed!0R8&hOGjOfq?=n
zzamJ{qEgvF!^NRMn;@0RSE{}Rk=mf;8pN<oScn<ZtzSfTh)`mG;Ll3V0l=^icJe5T
zox6d$<q&y4Soj7&D@Md1iMFWl_1ho9K;M6i8UY;p^Z>JeWY}_tU?vfZkQ-R*dGG~b
z5TI|xHL1UX9M^4tqi*Nmy@Y9-^@om7os!TjuYPGFI5Nd+K(*jZWR|e&0U)GIAQekD
z0A>Tr3nO~|<QDFqybPd!areJ+N|deOl@x3R0$R0pe*R@|*1Zh*Lw0EcTE|{RkV<n*
z5Zb~Gp?kbOlLdS)!1yRo47Od40tbe-^1*Kd<N`6kHp#GVUylR<4x8Y$)POn}3~4aI
zhU#INXSni1&vT=5I4}c>B>^9}b8J9=l^`T8T0Zj&f_XRP)(3+*KP+;`G`DXW)Ue$D
zqJ-Skb8lY^-}m(TZ(*i~NFudq)eO`#&zB{)C~0`_t4LxE*%^8M2@GAc0+%F@5WK=@
z6kC82LeMe5An)gNc?C$n4V=Cjmb|=sPCD_1B*8lmFfjihtj`Bj1{~L8=>4wV0SsI$
z=wY!yrrrz`1;r+u-w+PtOJ}Q}<<nsAPle6GSWXA&B>4++orY!!)dTV>nr_<fo0z{g
zi(xF##XB$eDLk+1qk9bs8PUvv6LQXL^O8D6N>DGy1yBO40z6+5c@M@{F4&`2wIVi^
z!>PCUu+<OX-v16Cl-uAhTr4-gW~9K`7`L}r1`@`ZZcxu>Fci$OWq6zFru7#M5mT#j
z5DUtvK9pOSKzbj!a}m1olmQG1?hhb*D)R##gr*Dc`%v@J9FP%w0Mx$#CB+-zyhAtz
zFb1NH*?SZC?=UWKtY#-L8ZAKN_CRy1f+}pl$h!bYuwFa^Say5PXMQeO{zY>L2{;{m
zBR~wiLgk@Co)WYgM0z7U+K=4&h9;fWLRWG~`3Fb^Jq2(zcR;^9c#hsCV4?wCds3Jo
zzArj1!el2i**T1&{#C#+zy%9Sb9fxSNquQOp<#z1e*y_SlgcC4J>Px>pL_-IwbA-*
zupbuK&;0$%FadvOFoHw@Fq(Gc=I0CE-m|zO`i5#M4H4hk3IBWg=@iA^XH&wtl#9$@
z4*tf1Ct}BB<ap)U$w5gs=me9qb~j;fb=tY0V06|N63!6gXU;UA5%~iR3n|rxy0Sx^
z@rbtl%&iff?o#)O2SAq-@aDnotd6#;NU2MgJy_QE+1j%ViZWmbk$tiutze+O_f2{$
zGxJ-+E}@rdpVim}joyShf(rWz%a~m$02BTU+K4lo-Mom#Z%p4`Q4%>m&qDOQHvG_&
zc%Z9=)!M%)erW)*uZiT|6^kf{xcBTb8yY;3+w5uf6-sv+e_KjS`6h8@qiqmj1ENd-
zZOFt(M8DlwPAk_o2@kqF$hcRURhlduy2cMTXnISUWuoE~(oo=fv|!OE>b&)P_ZxXP
zMyP)-Irj@~>gM`SM1A&R5VSoC=8&)3PHvV*aOtUtqUh$jClBE@FJ-oo$7(-6$`)v{
z_y>zjP*F_zU%p2rm!R+Sz~S-w?YU!-qo@IoDX@Zc1<pEMba>7Ppg-2K+Tgo`3)~5V
zemQ&{x_zG?@9QJWmLFDpf;Liof@t@sp#%;T&^IuQ+sK+q)1?z<D6~q%-gH)CJ5C&g
zgQF#c-U;gdDK9j<SDy9Qd-yMX2!~8Y6`A6$yMU}Qhog^iLwTYws#`8mHM2*^@IzZJ
z?V{RZ>}xY7W=xR|W#_CVY}DbEQhw9xZn6x*F?3H9K07)Fz5Kjtb=M=e9e(^w*2Kd+
zSsW`a{EQ5gqx60nt_W++0o8Wj=?}XxOtd5dhZPhwXK*<&NBJW9ypoeQpBEQKEDAzj
z%%L$FSX|Y_;-FS}ex%Q)kNPe>b(oFI4{+t`gEqo##6EV7M0>7247?dPdNbi81n+B0
zu!BUb7)2c^fl`Abr7Wz_Jy>TU(b~T5m#Djc%TT?VCT2KtoGtx)HCWT}R1)q|u*g96
zym0ruS%h}F6+zOVofGi5Q}G|f2QUFpisY#O?N+m5O&^6i!;|vC`g#=bnp2kBU*rz6
zac|?+psvY2@)8s__VLxv(u!%aQ{M$Lve^-obTP+(1k~LtAbud<#K-urX=-|yOm#SE
zp)ZXAe^`1$O~LO|b<(5YdN7h5!q~ZGc8>;?K;~wijbqr^Er}1qb8n~`ieLHm&wA0r
zY<urN92@4+8s!An>a^R=XzrHpR%@hPQ{OBvCiD`sC7hRD4}*?@?Xa$>XrbZ5Cd2PQ
zEkVheN8=qpYq|xJ*s5I-5N>AZx&^lJc@EEu^CIkjOoIO;p^R2`o>v%Qb4<|x(>V_i
z<q7)n$9$tOL8GccJ+vJ1@>H|RSjGzg)?3Bb!>C*i(2TT^Io3(QU{I002DWF>c4R0X
zU%4=yCBj@?hv(zl)#DHDets2f={fU%YqtgcuF7en-s$A5vlBhXMt)ZfI4?#1G3`i3
zW|~eaVK`$uTN#F6-un$%^(cys{?+3&Z4U)RQe>dnB72|mw}iq(Qwr?Ukr^RUtaui@
zYLnrS;m$c6ZMY~~Z&7Wt6V>jia<;BsWp%LqgWB2oI!<N3{R#xGJ&}0+(PYVjH-o+e
zF%!gs`~?l3vDT^qxJ?9GFG=4J3Rvf#;3e%&oXV4+Zjb6-YMfs<&d^#F04v|MVt1m6
z{zmOOn{mg{HI57#sY*;)RMAvpgA0Pc85s6D0I2gKPO{%#s-V^{5nKxCR$opKGNn+)
z>LL?yRwxBMH7gu`JSt!EJUTZDgvpQXf=IR^WrWRNQi#oe6@9m;mqOIttX_gqrYEN;
zhun4cb9L48t<S6-6KkGXz-%bP3!gp5Uv+k%ty*_I{7gJ~jZ_O$v+SanVC@FXoxLu;
zenDl48R+`r-&%0d=!{QI?VhR_;hP9~^mK7?^)K^v{`@v{RQ7ws%0TnW*deyzx9gA9
zv(Eo}^R8Y8*hhsICgAW;h1H2yjA<KEeWq)^ArxA11fI*oz3uIX_P6ub=I-Rc)8+e_
zhkUmvSiea9Z#niLPk^Fm@<<Z@swQQS;Cs|O5nc0v4d4P$?CD3>B^zXVZ&PFHyVwR?
z`Xp0CKUqA7aK&Q^dKJ5LQ?#a8D{|doYLaGV1CJ(?G|f3`Ns%Yhkdfv?JBsskL8ZeK
zZKdOsEtR8ntBc{9MPR$`evk1rB&BuC%#Sx$mQD}?a0QYj>r#UzWh&cMYA_l+AYG9@
zXM;msG-;1da@q&9gY#VD2aoj2X+I^8dYVHb4bI&DmO_+losClYN*a$;1zFD1LPYH?
zoiA7X;mG1huv(Ji%c?}JG&*n{0vbk*PMxQzv~$YoIevvj(RR;zEr<6CLQ<HT)l7BW
zbIswycU?wH<F_x@=e~xk9~cmT%KYM(<*CQ^b2k2pq>WT}oZiw9!0y{d&EUsBS;Itw
z=3}-6(k4b7YOTUI-gvi<10gf>ckMOk^cNLYxnQY94XK$j7+7!NH3uxhOTb4Kr17U*
zk8U*wi;1eR?y3Yiwf4QT1^C|clS1|ckGJRZ^Y{My`7}5GtKK#44e#EYoZMR;ULS|2
zXK%RtI~641Xgu8Pto$E?0@;w*ZZSn*Omlo|rEhMo`g4B14Sp_e?ijwK8dyo$T)aWy
zlM*r83@qrj&H_4<CQaCsu=4w`bBo`%(l&oDtQ;}=S2)4Q$lM!ToL-(C`en5Th^`Q~
z(3czX4nC1wlN(4=id!kri|@9jzdicI--&168sOTkKXCoh+pvPKM^#ZzgX)u!8%v=T
zTxy{Gl(i;a%r%^wa<R;bKC8;EK!y8=<v=YjSZ;7wY}(4WL&pjmSb=}X-z%}tqLhPD
z<r=f^5rK37W|^ReaYi*uSBD2PElz+uQ!@nYrOO`z!QL)@m;sLV&v5`eJzey^B!R!m
zO5Y@j6B6ErpP~uI6<=p(U*+eDf|)Tw<xOPoT@Hy^*7Gq$f*?L}ZA7|dl<!fE4Sxcs
z6lzP4%sl+OzL8SndY94VZ52<k>26ZO_T#pb{r3Ejiber0uV=bXDvZ6Ysgr?An_aQF
zJV8FD2A+!2=mR!WH8;K)xkp|pf>*>oPAI&*ekQF+qUF(2orcs}0ZUN?x$V`Dz#m;%
znjlVz{GwOvfo<Cq?7iC*k^$ng`U3YReCqYCiwt)Gm<o{~I5JyV4P3(L@X?zMt&-ty
zd>824(Qpr4xnU}~j_37d(2(KNTZ4T5h2?`CWffxr*mFnLoSi%&Jk4-3*0ORfH1%!E
z4L%eeqJ%@I!m-Y+0geKhbd_D0YMf;v9(Z?|jz9h8pTS<dBIk+g1|;deEbK+izxrA9
zbAPP&cERVrSw8<hzn^pR$IHFSy#-8N=jB=k&FK`@abY7+J(0xLSF_e}P)@z00@TO!
z9LEUQ_`k!`YXUVhZVX!EU$ErFD#sR%qz#9U_*HOgE(j~C@B5C{%6qn@`8A}W!7yPO
z9b<+A#3-Ypt9ZXKH@{<!V~AJvc)gG15&8h~Yxyv@L?5YUWV4=hF{bZJZBM?JJIcig
z3IXk*ykM;Ul|Xx~sPOCAF-a#PS7nVYZ&mT*)FN~ej_+xp3b$lmJ>W}RYLU?qm5K;f
zWru=)#$lV>Z88TJFTcUb`|)yUcJK8+-Dcf3gkO#zw(xiO=`5%G{0u9I{e>5R!LVh)
zbQHu9?D%_}vVJKRt=%(n)j44nn;N0Ma2xMsDUng$$MK_Z^r>goL8K07)r4ZMKvS2d
z&Ur%3ASLy5z}!{kbTh?d@ezuq0;6Qvy$RKr#_z5G4CKc-$Rw<zJN^3CzX-IfVB8KM
z8z1l6sH0z&<V^Z!C6s&@(7NcY6{x3e<vc}oU*>tYHf~p2Gw()Rq|SpXn9x)uiK_!l
zEv|6mi>bHcXYu%v<$Q8Zx^JWA7F_>Yga1(rvJS=Bv9YoU6ukNZ(0Tb>R<%6)GyTAd
zOTu2ITnA6i&1<MYWwe7xj8Wh8iE~<72Z3<*HR{3ILsH~XE{-jCy0&6<^?T>|lnVE^
z8(~dALr{NI(P|+aT@eBs?}3nL6&Zy{&#^~NXlBw;Ro@u^ddd2=^a;Igwfu=b)=PJb
zHpx*HqQjXZN-%Um!*7alO+>Pw*{-?wzKxtrwwyb7*xZR9iiPGF#eN&5nw6F4jAm7>
zsuvMTpm^K!XU|LX**j(}<bv?AafF+SitXW;pmsfEa?ZWfzsKuB*-d&*ltYm?9<k@{
z@7?#Q7N~#xE?Wo(reXaQ=)Fxg8I&!~nXr#5a8b6|Q&v?dW*^^^74uD{J`V{3V1>_I
zU3*~LvQ9x$8q$$S6O$D1)XLcN&^QLWtXnNxfa$u*@Q8XZ=2y+}$pAgwlm5qTS&NTA
zeqzwcF)QEDFNqTbfG+=3@L&3V7`bHnS-;KwaOWe|%u5Api9B1~;q$Z>oAs#p-C4gH
zsLHjcG=@sptZC=%@gvqCf-%M3VWxFE^j`-J?^D_hFCYI4TnW3jW=33Y{DReSVAe}d
z#=dT0Iin9h8n|-A!lQ~ut;uT8jbnTFPhYJaZ}%>*rMW8hnYaE<J3&@xYGjeRzw*)a
zI!aU<;*HH?V1*aoLSsY_2%b6J8P*VFE7xeDlQTR+IKtA!I_E0-)Qefgja)f+$2HCl
z47*ccqTZw@N`a+$qfN_l!PP;g(Nb!c6+T>|)Mb!LskiHC5Q|t{5wk8}Q00cCH7?+j
zyENdP%W>>RNqZpai53b-e%WYN1;+JKV{>tF2U{($J5A>!Q$uDch}t4s>d2T@x~U-x
z%WSTQOc<VMIps6m7ZS~mX)=i9r^J{Q69w4X<%n1mMrT%gDB|KvyCh}SGX21y;~B=m
z_}VO>DcW<xz>J|TgKmuVU<$2buXH{jU98czlko!>ZDW}Obh$cHP)noC$j3T*yM6ZF
z@T{6qV_B(NV*Z`c3wv%fU9d?GI6lkkdZnZch5^SXu=gxVc;=pFX|_zpSZtsKj=Fo0
zOw!ei({MmIXPMbZ>3R2zLlmEutsu}!dr&%Er0U_vjMpugX9QRVr7m$Ow%k@IicCRD
zD3f6VAy2;kVB4U7CpWc8>zX<bv|mnaJO<!GSG56_QOKMkr5|OdXGeM(K#kFz@uBXe
z7=6fp)UmV!@zL>@NhEhu*$D3FLnKf1`d=S6V#W2LaYib&dQKm$E{kIEOyDW_KT>0d
z7XU7FnQ<utktqKCI{NnjIO$Rj-RH~40a4%Cm7dcO^UkT%C(gT)udjXlnI}w4>afCv
zt`iS+SqyeIV8>s?DvZ1vk{%XV>&H37CcJ0o=-`Sm3XcjpwxSX5lvkDC?~z=f`IU-L
zRnS(*)#+WerTu!*H2H`FYYzEUHzHF4l+8Y%98j`+X{(iNt<E@?ex`%{q?C|800hu1
zz=>WNQ&heq*;o7FTswr0DOon0(-DdH^uZT`L?N@K0y(1aW{5L56W^SL#uYkIW5Oy`
z@#6*27FOV|bM|*?hVMpXVGf-WQi>~Bl7)S+MW_EA>Li8R#3PdFMMmDe60OXnmZtoX
zKOseZpm&N*THiam8q58oV3dD-T>Yx1U0Pefju6%}7}?$76eq|i@trmThN>1&;;+RY
zG@PU#O&1bUu@)B;*Ir#}iepl1f>oU`WKJq7orPW{tF9ltR_O9n(T|2zf0OHS9ED@_
zLPBZqo*Ii)zYGPYZovLBc%3+F@@u+~78g?IC%P&w>!dF5(~Xj@l2vRHysk)b@uczi
zUsV}&^wHz*Tw`e!F$S??$?msD^v)Oz4Y$n%BJQw{!no7Ro>fkZ6%8~eLY7>$$Ju&@
zlhVKHnJZrJ?h4a)V?Xl@>YDWvC)dd(xTaZPl%@?BHgUwY(ryVCc_cVmXizW8l;8{H
zAz?*GH8#<@u<7Gq#TzzaE2&Y;E~?j3&pvYR2y6;)Qc;MON*yctPbTLTw)nD}npY$m
zPmDN~nDM5ZZk03HF<K~HcTz<Qt2)9T+}2W)aZ09ClImCiNN!M7iK?@n9P8fRPgjX@
z%CYMB4C<;^harM5UN1-Sae^r<Iq@KOOxV@E#64?4L#uLgAbRf%`;t1{?=Ipa^Xquo
z(8^e#mOK3fA?G>BG7>mb%`@Zubp>9>h!tnRYaY5Du(6TrL;wyaHyGh&YN4RxqoB6E
z*UT<Bfz@Dk6Q7D5W!j&|y(P`1?&jR|Jw@(HF-}n5$EcMs=1bRI;=Q$mvqO~Xrb*T4
z2`r36ouP|mVM`P&{u+B2-xL{TZj;d^%o&`trYTjfcG~P2bgV32ck4I>e76#>LUnYg
zxv%jgq6s48OlF!q3Y2_Em*w+%7<*sM(n-ll2c$8JO1hQ*Opv!o%b89!RpF37V_}`<
z^QM#=#<4GH8YVr9xH|D^u56@kmI;^?+*A$Twlc^9cO3cSn=^qTw=```?VNdiR^+Ri
zxOPE6<W2h_2n^1wuA&!6GZ)Q>mLQh^&R$eC!j^WyQkz~9=)~1N#F<l3LcX+>>3Y0V
ztc|h)q#=LR3IL$W(FEUT0}sy#fSnsOH0Ji0{9FlFLw{x3?mHdYxI_EtveMy}w2^T&
zYv7LVc3-^``me)0_B1i5*dErN)RxEok+$S8&2QbKHin%_kfQElq)NO)u@9R6#9+Sc
z>gmmJeU&Sko6k@XHb@y96A;(r+Kcxy@`seTcId*Gp%l^?hcYeUXab3Ndxz2m=4=YR
zhB><r5~ep`fbV_53cn4g4BZabht^rvCS+DB*>3gW4q&C6o!no!%#v4m6y8kp`{#j+
z1sXbLP1RmRuJGuSgp`X;Gu(ga^^>l+he_)$WRts~t@CLQ(k<|~FEd6fn<G5*@v&V0
zRCtkQ(pe$O{G3fDX!D!NG!R=Ow-;15$QO4=dKCS3sW2Rt@Zvah`yN~4WC>g-`C*M>
z_*pM52?{&C*4z6&sZ!MO%^?!cW3jdr&OJWgrJ9P#^%+9?tbKUq=GIUltA(N13k5AK
zCF%u@>|VM6?z?4Rl#bMTN!#1jtHgTg>tQwQP0G>HqsgY5>%;;43K%bh|NOF9+I&OL
zJMm`l^0)_gyT*uHQ@RYcX%{PXj!whhOR&oYHkkCx@kB&LkcNMfOc_d{A4*}a;@1F_
zv#0-?xRNugjyBV@Bqd`i4dLXM6bzkijjz(1UYY+tL)N61J>1JFf<4GTBFGL*-D^W{
z?Hs3^_rv8CZQED=E!Rzt_z$LAao$Z{bd=emHi@owvnB|F@>It3?AiWT$MF=j)`>vP
zzK**poD2Dg<XR`jb6b!9P1=4a65ubeJYM+Q5B~p0{)87Xvf(2G0QlJe01*B+j+?2m
zzKx~Pe~0~?@Y>pMaV+jVQK$3fOE|?nHM&O&H_`5MSzYd|!`Zmodq;;7OvThx(R?Hv
z7hf#>y<-<vLfRvls#uyih#`voV8WS&31=Q6barYMkCR~6<0TpJNl18FT539aT57@{
zHxZn05G{Im&)g<?=&Q&}nB~$QmfR%EVIU#C{*#C(Yw09zZVM1nUkjWkMwye~%2EV5
zLBc>-M+C0%o@4R8W0>^^{vng52OMbxQ?m@^z$BW0v`tU~^6&AIs#s9O`-2lInBK9n
z6TS&Fm`(tqfDb*<1Itr>1Ne+OJOos)fi&24=b9^+F*&{Tkt@)=nP4XAfJ+W2<FkB3
znqi-4YRzIAIr-b$+YQF)pHf3^xl{7)rO0$S?*v+53%|xTcPA0On|<T@<LsC<#0zjg
zq%wF*u{6u*XCnM}2VYsSo+|ewModm)^XF*iNFM_GpmAxuaVj|cLJv$2LdQ<s#9H+#
z4#VVWO{5`=c{UjQ@tEBOgi=moWwDlrFTjhp&Z2|&A&<l7F^1#(EjvW|Oh8j&IeLqn
z5vU|}9ktDDB7aCCew{gr4@5|unXTwGr-J-TNLi$6M(W{TcdNd;^1Cp<bv>Uk3%{;7
zpJSYH==<4=PW7ULFYG_SA|$3BD52sX_I4t7@CJC6VZ5KS$2<3lIJB0n9NS;Nyg+%4
z@<L6~ylQCMiNH3%K4igfYir>l{|eHESm5(lHQF#t4nG@00>th<yxHyc4O5~E!27jH
z5rBuG{uIGDeYxZhUMFCRe+~l5X2h^#9opT8-qzA?0l<9MK1Lk(IA;5Ag1R}<ULdX`
zogSlL><ubn>UQP`@EiR9faO{Gcn2(VpfDgPuexDdF?@dpOd?Qm_guXZmtjhc)p1@x
z{-_f<D5&7}^}_aeO6d_y?CH7Jj@rHb^<cUl@~>xugC%OrbqtESMD=7gU?MyqDphAe
zY@)e*V2(Eg>{p>z$@lZQ`q1nKwA-*^KIfNW^00I{Jyanj8;AkV>2;nc^D1DEOCn|I
z#e4-rZsW%JK8zXdIq3K0KZpBb&*vVUHI-cO)%}FSn0vd9fQ*Y21sb8(WR&@0D^MZI
z&ks;aP!?D|X_~;sp%Qi|00?Z44#s@+NKrs%2i@(}sfT&;!7Zy-e}{JJhl<xn_iYSE
zoe4D*v+r?D@1ZH>kS%|E08*KyRT)qq=<azq)<5(A9l+(Z&q-iD=d!EwcfNVf87O83
zG-~Ya1;^f&bw3oVFYyUGr7uBMM6rsnPH%ZKOB_FbpSM8UCelJYOi8k4F!=_DvERo3
zIn{IRy50ETmkCijJM;gi2N?u|Fl0t1oI*(DtjnD7G|g$^9NwFon<mV!pFo(ePOP4k
zSXLhmpe@7Wdbufoa<y(HtCR6OwQ7`0-*`kJ{V?!xmEcaskkK1ytB+X%-4F-Ws6DE5
z!x=09u%v13R;xb!K}eZARu83<W<cD|Nb@Yj1vuCgw__<ol<ju<II9#?*=i0euUx_|
zl$5%tZv31Va_2ABdn8##|AYM~U{^Dr8Agybmpg!jS+!xqwwP|qR&LO-fq=P3w201L
zybz{Go0!G!bF0G_M3FQMEaN1}V8$||Ra{RXYMJ@oSZ_ca+W}CLz_^CH>*JBk>R!2(
zNQy*(7eM&Chyci<=RGYGpnE&has;>cee6Ph6b5{xgQ?g&YA*CD*Iozg2Q2zwOb4oQ
ztugYT_G(RZuMS0@Y`a@sw|%?<Xp)oN<^jYkfX!kLAgm1=vf))CccHBbj>gj<7+Ge;
zzW(5oykLN<Svp?{7>Z{qy)G68wm2S@qR9AIBm<L0V`Uc3snar}SS{GQ?W`LMCGfUP
zf~v^U#Nk4ksKjjQKHr@!Tb~m4uDAk`7Y<{gj~8QU4C@kI-o&diHouIrCpQHdL}s)T
zy+bv|vL^n{=q3ycYWYLf08`d#pulNH8w|624U?Fevc=>CUPaAm0<@PaT!N_3SQfCg
zc>V=)-GE7mg$5RGVx`IHqF|Gu4UXZ|kTO1SjUxzU_q3c)03=}t4apH|sUp3=YpMRS
zHi7F(Y_DlkVLB1IEC<J0ZzdYJ5jBQUtft^l0LjHXNeV=n$_Y-kadQHpK_SYWN<@+p
zoJ_-`TJFi8#iKs&DVgRcXl5sgRwU8a2*?gd6KL?1&GzvI#krSARM}$`Q~s!zZ_y?N
z-!2+GipA_l%c#5^=n}ogd{mMVgpRfFARZ@82$O0n0Qs04O@Aa+4YTPr=)+qL;>bX8
zRNbMKXycJyY#wXYKooYFfi!8va2Q`XK*N2NVF`03s9Qm0e9USz2P%=R%i}zNxnNnt
zQ3RBEd^Eua9ez1$2}XwxYd(!s3-19PAhdv*BO^}%njgBl>}xtfZd8d86%E_Ju22kr
z_fqQ4>aj;IE+kzU8k(8JQ@u&MaJm|k6X|^dldWjZgmVJ7Dhp1WPxl(WCyq-H&s_Q7
z;9}l~2Hh0fNj<guD%RctrHAHWiN6{c=xnnQENuXagZEa;AQ?p~`LEaA<SBPlHP=ST
zw^Xuv3=oPWiojEtXR@bZqg5k17R3eOmdf5!WR&qbr&?7CZ5Nl+<9Yl%)I7<PdY7B@
zfp+5d2(3dOWWSiMC!WQ0%*>Yo{tST9lc2tGmHHeZ<fi)#op<#SG$5QXL&@%=UU{0p
z6i;;bqL=_jhE!t5gH2ho3O9g&vOSIP+rAA$HbI8)S$0U!tD%uJnGrw}5z1AuT4i3h
zEHQUO2oo)59RO*P%EhvD%VM)TsR9F$jJOe3Pg>nR08@B!j*pT{)=2$?%$@4S{sRiZ
zK-Ep1*5Sc5FB%g0)8__NXW~KCQ;AuWdqM*|NvC=}2TW57o`yZLo25k3EZQ&i4-~DV
zp>a-2G!7!$dIoiXEDmk6+zeh>gZ7#Gi=_eVl(cP`b+s*qy;T=1k%By07s|0OO@Vte
zg%tQO3*{eLMTV(^Qvg$Puu5tUjlmr-%?aGbLTwHqH=71AVfELNc5qYSwvaB+)<ktP
zQ8&~fj{fHJI5JBF@o9EuggWNA<apHVEW@9XMJ~%*ET?b;gzC#Wgu%EbspL@%ZN99F
zjG}09;99fa!gy8F&)OoEbn*RvQC@mN@k0kdg8ZfOi{>a~>I#t!&K70ZnX1jPLVEr2
zUPnIF;jIk$5}~zhtJ4j;MZrN?H8~xF+!Aa%qDdXSjMZv@@u~!ARhF1p?P?Gkd(%xF
z2H1uTwEV0ht9C&hS)CqT)d`_mzE~i8XnTv!36($Wtw1$mV>0J(4g07vho@I_S(R^F
zKsDd}us@!(K*~duD;0Ldw_!W#pDnqy@rCC;)KPlA)KRnS%FA9TF1vN9N6yab?_7dE
z&Lkh*b;K_`pkF$B^LX?dds@wXq>=2>og8}1l)OdG+lJPtez3M4Z==H<F12EDPs`DI
z(-o7p59rIk=d(e}@<FBuo{DOeCb1{OAsaN22RTcBH+rsPyNdMs*w10e_T(&ROvX_&
zU3EXDr5(1W@5?px04OPsZblM$tq0<rzaMzN(+}4u{c`;DO*)VB8PGJ=y@=L_m3DhV
zqCniRW+B2%lsTuBF|S)dl6mW|U-c&xuSa#u!b`<H-3*74u8>btaRGv=LP}YTEYFrO
zmgH2nYvMB9CG@)gsjN#itiujvF}~`o3{+;qaOGLJ@2aA6fW-ercuknA(5}<uXQ{iQ
z2;-cE^;~3`=_laYMT{HV)q+APr&!NYSohRdWT*>d|MxlAu3wEgiaO07E;&^KeM$s*
zkO_70DGi~R!nmpH`;j8UAb3%$B6<A=eOPqqF=<ezHy)JYH)V<JMlgUBe0it+qfIwv
z2}j+Fyr!vya_vN$NI)AkgK^!f-jWn(C3q7s3Frzehpp3QWc9UF8J8cR5TB2g5fzu1
zd>pQB^bN8j7=s$<G;~mE9_|D=$e}LPD_)KYAkQH>H3WL@V3C-71w+7f4*cnFonIq@
z5cUUXz?w2z1@6Nu+?7mTweI48tn!+?@!s;(Cgu{;--GYxH0`kTf)g+A<jqjzSWZgx
z-sn+EIAKio1Si2#wWwlw{3%vU^j#KEZAmU{3`Iw$SRR1C)KOJP@?<cXiW-faxVux}
zp~x)e*a-YNcQlFs=%K9F&uQpmd|+HlVPq~Y&4%tCqxj|)fj?ya7A}Px`J_U(MpW}v
z@eZy*EK8p1gJRJ&BkU}xHS3?>aoE@jmJS6IgQp2v6wFWGwLpSXIIUU4v!R>>rw>{=
zrCxDYbA!Rn(NrvIO$zd{1fU@y1;j<M5RT|z=2CUIX5%2`h66<V)<@5fpyqV;4(TOx
z`vbNn#S*3CNnRM&@~66Un*6K=)nAw^lRmQKBq@3^)8~<gua_~8r|;#Z>?DaAf=8FH
z<9SAoTskbNb|VFbT+z}Ih&tI<&5Vb1i;UaU)shf`)H?aD*d#6aLT+)wu<(RYQmaf5
zZ)p^V3~n}Y$V3?mD6@HW+BN8*g$8UVdWzn=Jj!&r9Cr$>9MHBoh@qbYGw8ne2G%PH
zzAMheBK>eP@w}1NDPGT_H6SX*Oq8Z}8yTkeFG+1MxO;j7T&XRBC#I~m&?oC_?@1A(
zF1)P&CQ|n1mmv6?r?i9Ypf#zbwZ)1CkAEj7Y{CTZpYB@+j?QaXE@bm*IilR0cDvx~
zBnammm&w5$qAjSz2SCkF8!$Xh+S5IQ0*w}js|9FLEh70o4z~HSg~Rqwdo7$TqOPZr
z21%m6gF}M~wzm4C>wg_kc6SV|u{S7voIRtTy-#SZU*>c(+WQ}<y#s#6hggfzk7Xm!
zGY)=?xH1*7%}Wx5{1}6O9ow>nqweK;7>#!v2xjrHYHpgyGy$;Dv`#QxpH%yVnQt;`
zT6Xe+_!o?t2tNCIH>o5ZTc%{CMJa5%%Qi;c%r|(g6gS9M*U7%@*ZW)hpCoA-Xwg)i
zUG*vda4WoVyRhZP%J8v^_Q4j;2~yQ)Eo7-4zfK->5647pF&#X!!7l9sgo*_%baZda
zKI@!$CO&;lp*#IaKKWo>10q=UHvQY&4z>mIfEyK%rcYs=P)xO?2(namFuT4LlE$D%
ztf%+ys>Ru31EvA@5sEYaesZ=P;7&uu43dhRQ1-olfYnG8K94B-It&|&x!WwNx!)k%
z1pOK1xr)sD(raThICc{lCFvDv+KdOID`$e4cXi%ji#AQ=F>4Hy{M*%Jnwazr`g~~7
zS4s_pGLo3`gi-Du^oR{}7?XCX;C&wAVitNWnKbi$EmrgvQWE`vD;tr3Zufcy>GFVD
zLr;o_DfZ}(mtt1TJIKEPIjIn_IsFFp42&Tz`s%)lb-*0;Rcsuf6!~Bq96-%__+!ZI
z`cY43Ihx-(o0FFDCF>%|NxiHn=i7R&NSO_J2NG2m>K0bodZM|(gmtY!hB=xneg}HA
z@|$VXy-(Y3dlr-Fsd=2p3EjQKQ>5`~wl9^~3K@%2$u>TfEQJrHK>8*ud~cTR0@Ah^
z%%!`ZTS(u7IXw+(3N9T@#wskD+GYsnA(~OMp53@fie~!HYgbA%kcPs`I>p_!-Ne>|
zT}JfQmSBIa(4T<s2<347pHKC_8*o_w#eJZCSwiy&cVLMIhdPHnh69z`XxpN#P}8J@
z2WCUsq)o|p15>W)pj8a_nsJ_4&vvYkI^pf|d9CBTBm5x&+N^_}_%6G6^1R<oPy<e=
zi>A4yxra4Smt7F;H~N1tY?HqLymp)Vtm+@{W&iQ2gQw9UB#+Ia&puck_3V#oPZBbg
z--PBquLDWG+>QWFwioBX`m7|=qikt?`ho5z5Q$4X{wm8Y(CPCF0yTZ4%_gR&O&SNv
z%wAimHnLI(Kk!FkI=3a_q6%`}IGOM6iCGgI_pQxi{5FDda47cMznHLey!b@<LkOji
zx-FU4IbA=uHSN(CTjd;ROjU|rE$u}rAa|?p#-%|ItLB!!C&N?_D*qf<W`9@{v37oq
zL>t{7-XwtOoJxK^R&f(#pYCjtqj~!JoCN8NkQKQtG@8|XHrXLu7xVP1;FMUngmDJ`
zHbN9~N^R1BZH{_ag8vpucE0*%HoExc48F4@G0xoB1^a>e))bvZ=DaT0=wcysxD`_o
z<!MD+dn0~EV!{p$UeNA8b}2&B@8AsZ1L>!VnSgE*%B6m*o*6k;dpJPt^-I~->Ftm`
zG*XzeoAmCFV1ta51?|#{o~cC$Wx+U?v5iNuy|2o4IoMU{^;G_Wwxry&zZK1BKXcI1
zTlng1YlMPq*o9ceqiYtZ@W@e5?YK1eWW67S?(U}sj{1B}<~Ucq`(Q1UpjDLtdB}2F
zD)#A9G}3h>l<>u->I)@Y9-W&7cT1M#M_mLEJw7M)-KYNoX_BWMwByI|oY0vvxsBu7
zmI;FjK%aklZ+Txm+-WfOj6Rfr;ZE~HrJBUp<~!_m8+N(^EI31lQZ|!h^9#1#a-SGx
z|2|^BDtVq(`{>`p_x?YF0tx^C00e;aKh^7okFgji5CFjMKiw<If3LimI2-D_Ihp<U
z;#-f>K-?w+LeCj>=`#|Mga#aMJuOm@O=uK^)Vfr5;Xcf;Z9VapCRWYoUCR-TZq2$>
zSNJDOuIJrMOdjwYApB{!6$mdH)M(Ly2M6AcPmpaOg6epp2`Kh}KY=1cmFhs~v!Pll
z0(MXc25A)dv@fkmvsyAiQo8Vr6H0#WL~<)gt>i10LERnjwFhijHQ*@fGE!_DRe1<7
zE#f`;fE1vqz<ULi<tW5pMr9%Doe39WBICYyilsy8fvR!w^9X@<!-^ALZPGm@xhHM2
zmRt#vi$3)vtG+-fOr1hyViEyI-W=Z=w}j@W4i2z1RHy5=P>vKVJkA-hX>ql4$Q&+@
zz#;ll-v?e|Gf9d5bFE=0g8}({SZSAlDm0nwdTv&vo&>~EaItvm1(jY@QRMFV%A<mF
z3m5uLdNL)%S+q&&DUYv!AbhMeN7Cm-MuF9xL;~dfW049lg9CC2X=5O;dK{_tgvkdg
zPYu)j+p~5%F#LqP&F8GKbP2e_*06(@km|pKw0|Y${Q-3KoqE+zNw_bd2k71Z5Oxm>
zf&kgJK-0Eu+qP}nwr$(C%}U$0ZQH8MeARE(lfK^&F^P3f?7jIwS1h=-;?`x$I@qDN
zx#Ik<m8xAd#Si}IWT!5dPOexMW3F||BDb#CHf!6SO|csm9k<7tzth$4S6-P*Tt<i$
z6>k4~SI6{ns+UirF79TlXQZYL<75-HPGe>Ee);#Z&CBuU;+os`8~DF*_pI3r7wTU}
z=Bm*Djl0&Sp8v=F($;i7ltA)(tFO3?JO`+UpB|dF!{04vye0z+26nh}v9X~rQN*x?
zj!X!#H7h%7vp3VNN|F+4-?;+cT24&;IMD<z4+lR^cs_bzgS<`0yl~^%IkG#uHfPdS
zV$xf(;KEJHCi$U%VP4!anc|R?m!OB403k0i5mL_Lng4)95YigzFISX0GeMrQ6k>{%
z8Sj#S#@3GxtluIJ@rh(NIkA;QF*iw8DoLjOrwBm_NT0_`uK!<kt#JRNx{nwp(qcLZ
zh$8<{UER|G1NgA|HVG)ceF-rej&ttfO5&|Wk7R%r&jd3`hqj3zj8pRADTiIAsnv_E
zrKPd4v1AMriKTlIxm)><5@o{K2`24OhQH7I`_BnJ9)bByQsXYjiC6vdhc4M>E~$8l
zg2%ylVZuz9I=)%56T_KY$#b)ymx0^EkWooNGy}c}o`&tD&YuFp2*z@^ttMXFL~Fr6
zCOqFvxtwdt1?-pkIR60m$cI0U1CN0#8kV%KgEq$@(jSV5e|wtJ6JG>V)}U0Gf1|FM
zp`BYZ&w3}q-o^e;PgyVa=fT8d3!B`&k5uw7NdXrTLWI#?;F7z)Yj1+^&syxc@f9K5
z=}j;{9K>G|mMs#*3GW?L(68J!v9=+@ublyQY|uBmt50kO3-(8~KcGs96y%g+z?P4K
z#oItm>-aPh(J#IPHi)Yg4?(eaB+g@JZ<5`b&O++R4>z%)fI8a+wPul|<M>vH19L=$
zDB@9`t0#S#B#0SDPbp?}<Udi!>Q8&!gsqMo9}>u=u{y53(WDD7{ux0E`Cy2pfR#wg
z3ir1J>E%#9jAi^EPR!U{dT8}PdoQO?tJ%lzJcZC%3J^5=nq%hT$FcxUxcT9YzpD2<
zj&wWO69z2KUq@RDH7{Atk65FYP*CHX018@~NawNxlIFJtP#{2$cwv`0(mv>dC?(RB
zAhB7T1)<Qv;WPyEbmQ+}hnp_vasT>~I<aDK>>951)#W(&&TfH`{ficOG%%{2cZ%yq
zew}*iU8X28y4S-U>R3t?ZRvcS&h$=OM6#c<xiNJ6?cs<FAQJu&cLsn8OrCERM-Mc*
zD<RB;LW~pM#+a<4>u!vqWs`GHhjXC%!nfn`C*ey{H#a1n2tPJ~;)+-!hA`Y#zZ2G9
zxuejAiB{GU12`oy?sCd^Xpl7)<w6o!AJfSKFdQP<jK3e`fp%Th!T}<k=|Dmali2+W
znKIjv-ob8e2Zto@{)=61X0s)l904!wQVV|*Fn=WVwVOJobRNoi;$&AmCMqePmiSgR
z4CHzT5k`bw;D|ICa6^|+dk2HF8tVWWlA{a%(K^VV!7-;0d3a65L8Qw~X@Y*?MH$9q
ztaofdjc~n8IE&|{_aGc5Sxd+ea}M+vCi0TN*sEevX0SsCxpyg}?<RK3_txm9%_Q~c
z4XG9<>B0@GSf^8J(JaqIvGWLv!xe=k(6xlUZNVF{ekGR))K4Oj^?P&(OTtiQQ!!Lz
za>-j^KIFuv%dugZnLmYUkvVaA`f|eZ2`KN9t=LLGX6uPU$U<f53sxMW619WM$?9=`
zK)Qj-tVqHfY5}Yz+F4rBX6#LE7#%Gtpgxh*GDTjOHSCbI7>=?t2H`;_CI@KqOd0Am
zh}21u_e3(dC_t+~l#}LbV4QoqAbPw5@*4^H`<6xpD!d%f9h;JZRf7300SEDKJBBeH
z6!8OHlsD%1j#pNx6$z)=uXItvRF9zK2+_y^OCi#wP>4}geUei)Xx<=TG%pe4g0Rpi
zA(@oQ;43G@%fz55C5a79%6uv$$fWQzu~SGzZR^^&nnUZXh-r)|v>d`}gMdz2r;{LG
zW6yQDUrn6a#>A~t@9?-;Syk#!*UQB3?}@e=2J^t(S%SdUS+8Z>?7iIVt)RTI9(T)9
z;s`pt>y5XjUAFFA9JOqiT~^6{Nz9LFw=OdVca|c^5;zgY)#|imTPU!s=c$cW6}q75
z(ni&1$1|VJ;P$MpRf*iAUK%xYMRgDcn-q_dX^lU8S~xcbEb%cy=K*PhA0UFprgL|9
zw`0he&jyD(iyLB>SX??BiTd4iOgSDGQ^+)>#s3Jg7`I$LNb&qDs3Cz>yGmeF<dC{Y
z-EJ>_HUHkQKc1h<Q&F7R1XnNKvUaLi0rVt?M{|<M*=H=-rN1J|sFP|A>S}ur^6}Ku
z|1(v1$Tw>QM72x?WpPQBxw#2yxvWn8Q8di}3H#9fN2aSka$m8ikm|}i%T;I9DkIRX
zgs|)y!4EIHlsh8LV*$s1XGu+ufYIuPD-kc<Lv9NQNbvGUF1bB*O?epTpBbzswyN)<
zaiTuEqPp`wTG1xc#~ySO=-UbfM-vxaKH^ZC2>gIK+o%iaH*qFW>)xs3WYsYGa}U7_
zJl@cGywH@}22aB#%pmKX*qn$6O!#>DT@z(3+-aak*@@)8U)9|YzPYa`lJR5IDTP!1
zRYWu@Oq<MNQrD%t_>e9b(V$*snVay|@{YyVfQ$ZD+@Rk_j*GUUvl&s4F?VeGY3ak=
zZE$g`eAj&B=YrD^zUxrYq(>_L0vW}qnqQPvS#FrNNsKrm(VP<IR{<*nzQ!(m1}ZD~
zfjn$WAM6W_S7y4UwPtlUL%b^DlZm&SS3EUf!SGeos2;I6H+Nx`ry}Qyw4saL@5dGV
zEsL-t><8?P!d|RoC@5v*M<_YOpkW>;zmA*W$5b(dE&eyoLVSI2eS-S?te7W*Nj~JW
z*`NF4dYM3%usr2K0R^9c8acP{@}P&V4Vkj~8F?vE)4C3&mJ0!O#F+#qhVLyb7+Mi3
zmK;5-aO-$0b4-ycvnBe{AScS?hh{D0_F(@=k7o6g=;+mR{@a=fPnR|5`Z>Y9+1q1J
zx{`}ErL0fRLTUhG7b%ZT04Q<l2&ByNrJ;m`02SXEzYzs@M1Z1ZOusg|*wj&K78>sf
zs6S<30&sJvE(+%#p{7obok5tib&?GphtF}&yJ^N4yj*%0q~H25WBQ<FpNHxAGgBRO
zBebFyg)XLZDyl|Oag0(wb<?=^fW8x}U^8myAPCN6RY|295?Y6qe>zVs#^;nvrRrjz
zUtd7@*<M{CmMPbsHs)HrcCA_Iv}$!JGVlZKg#}GYZ(lQ_F+-=%hCYt!ZS!2<XQ8pr
zPWN<tbKu;^_e@FiNZrH_(1Q~<#9AV*pXEcPPDSy^Hugp>5qhqZnU!Uxn`9+wR>K(|
zRjDBgyQdIvWj9={rA@Y~@=EYF+x)OBx{eaS1WFIo(>MaUBhEYAnr*Rq&nb3yEJIVv
zN{PZ`0FwXS;NQ;an(5``FOUQj4T%dM4LhsJV)HCPSn-a4B!(NgY&W%as;BR$R^u$c
zKB>I|!?n}e-OEPY#O(Z9j54s8z-l0a6K=*1?rPNOha91cKbo#v#TXZAT~2919Eu{%
zgL9E%d7GS={wVd_Nk5$6Js?R5Wf=wDh=y<mm5fSdw@JY5Y4CX*fLZLndjJRGq768A
zCMyY&QjwwnHZc$DFEof|I$0J7V^^)+Y-4*$nqv3X;{7Zl;z@(l?&0nYww^BLK8vZl
zZebNy(49S^@wXnOx~N{S)F&)M26yvcs>n6t%tSK4&X$E<+)*eu$SI2B(jZkwv%9fO
z?|o#36P^_R(FtuG3}0e^$~jEp*|r|j-<*-W&?MSr-~8;LdQOi(jok7%R^ozPol5Yb
z*%iJlK4w+#uo$4Ohr2eL-90&<43ZvG>&|JwVOJ%{$-mO7l8(&)y*!MSguGJPP~{P-
zrZ$;OaXA@BCrVQ<Z9&!=jr8b|qGfBg-ni46^Wn6x5N{)TY66$7V3=$udTdeLNO&aL
zVJPLnV{In!1XXC0t#r_QdaN0>9O148dv6W|@)LAR2evMp;ZRr}px^stfE~v*pLmcp
zMS)j#)wL;NX^$r$#eUn!q}CrSnORQY&!Oygm4np^!;2}^>?^TJ0I3|Y#w3^t>Wij#
zcn8LQg&Sk#P@i+oa;)n)ZEVOxX4a@T8XD^hL;1WS<o9P$iBKzzc1NwrRNYWxmg4HI
zQw5@royCYN13`L<y4RdjkW)4fN~GpG<SKkOO@{?}ULl)?DhK{3>*b44?~wNc9L=Pz
zGcy>zj69r*wZW&JyJ?7M8tJ}Ko6!&auH5<~CmnM5UD5L)@H07apnbbdY@qRG*Gw^`
zZae&5?&V$3jn<ZPeD46ee8r+UIUMR>!cVtR>wpKA2_qw*yK?G@lN|2AXDf#ArP)R#
zi4tN;0@6zuTSIUYC_)^WDy*Vspk5lW$SKY2baH|!DiTGg7tA&UF>r8J;5tFSM<mw+
zUZq=h%r=oi?(TfdBxkUOj{B9(60QE%j1pBpQd&T_AKx@vzy?SRjfIf*Geo}|s>oXs
zlv@}+tk^DCbl<z-ST~_%qiv*{KnlCTXrM$k4bMh&D8%cDR&xo2Jm97TuM5@ai?mxl
z3Z08QXoiI>KE)^YP#np`BOQQy%Rp~;Op8hx5hS5>%J9zW^3}e)`Jtu#l**zYB}EI>
zuwVyh_Gjk<9^t3@X_=FmI+|I!VxXuV+F{);hx$meCp>i*QAHo~PIG_DZnYF(M$YWP
zp_lu1&hOf`4=8o0V!OJQy1)C=KMn6yDcmAZ4_#{nPv1u<S?MDKceQ<AyV7$`=10uW
zGFkcY?b4hL)&+uE4Nke+5IgUx5p#Ucdqdqb!PiS-6hrb|o%iF-lhOdF1M>)CU~3cQ
z!WXAedOxFNio;NT>gB1dtHK*y#M)l3H{ZBjicKNxs97vMJ!|HGaDHrSO4|HzcGTG2
zYe%^r+kGQ*uq+2WQS_-+v03H)*HvZ0l35(IyAxvjjq?(YUv*#e`_Es#v(SM$x9rE_
ze@PiBLboL&(s^L^eAKkf5KLJ|7-279LtBx}!0OcT``kNS6{%~;p^E$wjv5=?Bz24-
zlQbH2?V(<_E6#*fRTZjiK)bWSHjEchpzpk%;=tjs^_7DfD5`CG)budMeIvAOk_9&`
z22##pNa|T}B=FZXAc2+YK)~>5s{IjyY4c#DdC>-JUe)dD=Snz-ssXeNDOJsgAXft`
z6@P7UoTG<quKfS|k!>o@KxqAsbsCfa0Eqs#<LKME+Wa4_l`}ln&PQxX|I%0)lB*g?
zq#ublbS9g6P97*C?Rg(lXzb}yUz#YOS~<!jP$eacd49fJk6?jPjwftx6)Iyy*|1{8
z`sOX}8(PG*j;XTipWZFCl9G#yk7g$p9@<P;N{`*-mb$vI9|`C97Ar{7qn)x&MALQ1
zATf=?gJ3KLpGb3E01*#6BZ;%nT!hdrLQYFq=1KmdTJ8_60o}VcOOMZO1WgaJN;W6a
zKt*{>TIwW>aTJF5MV)t(I7$`Su*n}X#8POEoTLz<TYw}{$Vjr$2?M|Z`t*va+yfJ0
zHf3K`|LoV%=c8^Af!idvQ#^TeQyjs3o{`Wr?){-T8@V_*uxhz9V+b#j=+yji8Ry20
zx^O8!p#i)f>ggFm<NO7h(M&>iYLl4w;+SkU(oJzu`!nH+HNdsKopA61&mVU?-r&E6
z|I_>nw-)F#?vx`X*d#tXPUKCaZV1O*DxKADLT1uU=Kco!`15Jy;r;fsQ}O!)*8o@7
zX*-NihP<yo*#R_fYDRmKBQ26X_f^din=}%V#B5^xxtyzqF$Z!5XPI{d{e9}1lg1)H
zbj&ch_QVu9wsT><cjbuHzxOJQ1uB`c&uqZ0#G?d+9Go(bDJ#g8c)GIx_%+KRl4*j0
zj71kH!K6)Mx?PxmstMKLIF9BoCOAwUQSa!+-_0qCi9m!<9<Rv<+;C>saV|6Hqn2_|
zaxHg$aQ=Dks}uH-G0M<?KvOI!<V=RC-)Lx%5^V;*00hU!B;hnXX41qnM;Y~2WHPsD
zBC3dt@lXP=-UO1>N1_`~D1nr;qB;m&-4-zk8Ud+PNdYtp8C97;A(dw#_0#~ua6a{g
zsDX5jY*1eCF9F#b1PcQ3?@k|-AI9#kKS6CdkM^{82rGsYoKPm#T{B}dO8^RB)Vn%X
zib;;i0`m{;=fvzaC$JI7R(I9D1UhqES&%WB-(^#}L5+bOPFQjF=mN@`Ar{>Q-o~m{
zDrrs3zkj!%{qNNrxhB+nkPE;W4+pPa3`Di7Jiv*pl3{p;dBK$_LQ9c@Bw8efuBmQ>
z8nlO$8{lZy$ZR+>&?@edBXkk(RfJnfB-)NgNJ#^{8RX`uI(+>(%a;I6$^PtWxkqK!
zkSK{cd`bz)5oo-x*H-UO;S075e=km7FY!x4dA+^;pI-%#0^bmeeb?dZ?Dm3(GmSDA
zRfnh(XL|Nf?o{V;(vEXvffbmw@Fb5?1Jaj)=ZWNHDRysOfjP3eviH{zJdjuu05^<*
z9oe#ZLt_UX8MB0pIWP@qu?42z0tFQr&VQH5z7H5M!0rZK_XfYFuCl)j^$l3g1O4Bd
z`B4;ep~bl7M^hE})uF)ddY7O<pqUH*ol~j~3|J3Pg?;zbdGM+=_)eTR7^{r;+=)?~
zAI>ZN9_V`lZSo8W<hQ6MY5F;1ISROA$GCcGbK|6rK@BPG{SZpagwbxp?hrPmDaBG_
z9)34r{qQsjXb^2dUNZ;O;6%v-*vihnc{WblM0WekG{BL3v$+yvJZ9<?O<n?&tIeeL
zc=I`T{o)unqCywKR%M~v`Y+x%fHZK(HoREuTFmkq%sfI+hR#3d@Q6HkggeYvbnpeo
zFmeJbcm?4?-%g_v(<Ul`rPJ8reF54L0LBYU!J_a286YXb3&aNp&tgI*K4T7Ai_8sd
zvy{pbr)KFM=%H#N({@5c+Uf1$B{k&;E2zjYiw1#VCf(?cF=q@D=IF5sAu%S$3nNG)
z3NE0?3;aQAMmPdLXoh-6e+86(NCMhK`U{r1lrutvQ7D|!X8?$Ch+*D<3-N@JNFhX!
zHboh?X@WSeZoqq(LUi{IFu*|<4S)a!%F%)F0|>o>!9LN4lfP`?0Dj~RPG2}T!YQ^W
zetdVV?Q|JT1Qg{nR`AmbdT9;zGJ{6(s1Nb-!d8JC!c`f_Wyj_y$nB%u55)90xy2tf
z8uMVA(k~KUq#MBhfq;*aX^_|qk*8_&Kzs5F+nZ#5I|G!yfE7n3ic_121;#*BK@SLm
z?Qh*5+jHezG{F6>D}1oGJIQEbTkfUh2SM%d7@)|E<zRgDUWfS}ToCo*U&7joza+6)
zJ|MlM0b`SmM_rc@T%D|i&tFb#ZMzVcQ#CNiFpk{=)XyAN*okm|uM3y9u{w(uPI({%
z27(&zv&B~#3^e#(Q(pX5{Z9pT`d=+2ona7F*<Yw=4rnR#bm}^S*%DgSf*kD5J-9_I
zGl!=<njnz>tyZz@$Wz9k$_n~u(Xz3J7A<1$qNZLn!3hc}<3|(fpx0kt0BZ-EW~iW7
zfzH`H!e1S_G$#jxJ%EfD)i@Ah5o?60<D#WE!!Gg(+###f*w%`^mP)7T8R#RGgf2cW
zz^op^)RD;PpHm}KZzyyp-Cv|+TQzimiZYUpRqTItkMUh&8x%aqdFLR}uuUo=@duLw
zCMQZiEs;5<yYU<6gKW7?e}zmj$YoSF0sSV?w>X_l54+Gg<j0j!p82nWhwv9N^z`)^
zs##*_z$YZ97hkopfA7EE_`lVQx!bL~n}p7C*a$nRi^1FPCV)BM;^VN+9DqWh0s@Q$
zGbwYeBCs*pYZ*645T8beA3$$Wj3B6CWbiJjzwVk2<(r01!O7W$GES#-5~8*>Y_2+8
zS%baufvoP!V?t2P-_?ZPWK1i{cG31I-HS{W3-lb|)XW<^J15$i9)Iua{(fBv{_5Tf
z`_JR+#o2|U@@*<JmIcGQuuL?WlbDEVf*~XGw``zOKNTflqzOhu_$-zt@@j%Y5!J-T
zKT4w=P@G656>sQB)e{xTR=r-O6T2+$yF;2WQO~HM+LU=OSGbIt&jpRPuiCVqfMD|s
zwIk{X^8m-XBypaw&{X5Oq19DqtTKkS|6%m-u2N`}+qcUT*y@)N<e~DPL58qvPGO_g
zfUDgrYqk%7D##oyP>XO##<~1pp9tK<Ta!<hju=l))&%2b=ABY8tF9t@ZM=-8aw*cV
z(4zM-T5wri%*iPiHl<<}jEUKbpV-JmlbvRCA-H#42V?{d^|KL8#VLO6?<JC{wAVwk
zv|z!)GwM)xf^aE8)vl#Am;h5q`EhXYMDCX#gEMfp1#IR2V@kjhSo%Ga>6vkx-fG!!
zh@QM47qhS3Y<!jqM;Pbrq;Y!hTG9WPPa4fl0GeWt`ZmK3MZzVdn4E695T;<kwf`4h
zLN&{ThswQ&IZsFVTPx&jgM%Q0s1ZO+qNArepvAk3*Hv9%yKE=_<)o30yB^>nCwu`8
zan%g2>5otMv`Uz4c&T<dslZ3g>+t346427OO_0GpgHYrU$*DOhfs+T2Afzn02_yJ~
z=+s21I;drVVNF|dACgUl4W0==-mpRQkWX!S@xlY^>G$|uA9l1kKeIozn2j`o+Di)?
z=Q%8YiJ;vCY&cYn<J)wG-Ftr0?5QT+sbf>?Uru&rAmp=Rk@8?&d698cA&W|6yvc7f
zo6?4Ra)LyRA2}WNkO$-B9IsuB>wPFx{`+w&;~=uuCS4~pa8=`a1}ACz3E3Df(<wOa
zYQUo*(6l55%>%dSj;{Gts8}$C^#w7k2vq~g7%|}|(I+4c!m>TJB{yXlGw)&>vA+tC
zw5YgS!aB{-0${xw*B&=<Uf4DO+<{GQyI~nPO$3LO#0~Dn0BW+&8iu8)^sB?8MkNBp
zoIm^y*<MyUL`e7A$t^G{f)_$|%nG$B?9AT@b2nO%F-~mo(>h|HN#+3nVx{D*4j1S2
z$BStdNX1ZT5NvS7xy18Q+l`C`$5y~kz70V`sj}$<3spu@JcWT3vbzwsYNs=BCnQwt
zGAlHWUK1-^-0E7Vnn_e$98-3Ln<(Z7Jg|exn)@Qc+aw{Pl7m1(%J&(Cb;9?CSjr(t
zbt_!j_Q^!mb~+h-1MmLb8ea_qtt2vQCn!@4Ja_PKIpNqwLN;<TZqq>7l4L`Q{<n)Z
z(_m1B3D75SB!x6fccDhFv;E-wx&psVs_xY#6hqxKF1(2z({C{;B`DAMv?rD6nJeN<
z<4z>{IXD|u7tEY5CC+hEKp3Um$r#H`ArQb|2#bT%AY4|iKI_jxhL!PyT&Z6ZJ0@dH
z2~QneP-1YXlxa2&`!ue9CIMq$o2Dwc>>fC0n~NgG`mqw#GfjMQ@h_lIR=3%giek*q
z$*dGQsAFd~ccm}kV^YAx*iP~GPU3UET6f%MwmGAJQ>GGTxFl3g|KRQ3S($tdeYq_C
z%#Q3YK-0Av^(8gMQrz{$r;3;!Xjgvt6mKjTU8rh+>y4c7h(a$`#raktc5J*Owt}5D
zDfU&FA$au41|0)v1-Dwo+UQGoHT0+iHQ1&R+4xBgl9_L9Oyb*FS|hG#BG}L-70{o3
zRFOy30qFqi1_1)<=g*HJ$#)*iN#I!93ynOw67WOPh8%3Dr`+{98Kdv4*atLh1Ql%;
zqVG1hZ34XQm!bas!fF0^<;l10wqie9c~!@#$IKOdYRS>TzLv_qo{gu)=CUUEJ*`9Y
zonkTcPdoXo{~HQZo?`JeNU;G!hm+&I)bZoDj}OPDg^=E=dunIm@{LJCQ-uCpH~oYc
zajV|WZ~mYIL8$hbqJX&6n0!(<+))3~Jm-e@D5G^tvX6U5PVH+ny~$L-wn>O1K&0H@
z5paVi^|VCUQTuugPO3`9crlStrIV1#5K7Lq76mlJ^*e^-8Pu&0!YCJpgq%W?P13x@
zbU(7GodcfX-{GK^`zJL{A4p3z;r>u3kMv!d7d`BpSo|3gft9UfISb%$l(?33ZvTOp
zmnXg!FJe+vKtg|U@}#opbHAULGVNTC6@#z$Z_wM!PI}ua-3lHuyGLrAd7Z4gQ7R1}
zb=#pA;8e8er5X^rg#P@YN{|M080X!R^Q&0y>=$4>=Kfkq3+#Oe;7=`B!&Zyx-N+!B
zurk2I$*bN4@IK7neAcDbvWkxA6pyy<EpSE5#2v84r*tVwy6uQ9JTE4>V?g$Cxonk+
ze&HKkRYA(jhcl`wX+4eydwJ3sunv6u>wJ#c;EYs%tQX}<M-wz#(SVK*0-s?hImvhh
zCoxIa^{Czt>V-cXM~aOw(Olz8<}^7Vfd02GRYiZRqHNAY=QjMi=$Z-5R8zOwiCu_=
zD6!}CFah9MBJ&TGhJ)Ml=HTs82BTV`8=T}>FHplu+`K2f1`&KJn92QZjSl-?0BcCv
zhJMzgB32wTRim<t)^gR>w<K#h@JBVCy<!=*@;9o~q8aox;V*@Z?u@5<n11vUi0$R%
z<laeT9y9j0n+S{~7z+7>?OShb9x1*QVWBUXO8h#nU`lLS^S;d6qFK6KsEzqI4CL8q
zGkI4ws|I6PT~ytw7*kJe8B(~bV%hPITyv&NhN$s4B9jDK!;wORh-#Yc<pY);cU%qV
zmcNA7)r^G=RVg&YPt^*YUQWlPGPdz7YoA@?RbQIIS-q@H)o3|GG~IcQ^~QuTvGs2W
z87$O?=&kRvL?B_E1xK3FpkTUWiK^%o$*;Xd9$S;!g9+#X&I2&+fKp()M+Aw~@MFvs
z)J~e(S1IXfZ{1o{^wLeoFxH!$7E#bXJE7<`81KkfPGVj5%+e4mTD!6(5$4`^#Bk8-
z+jDL&EOJmg7#7lZyhgRttiCq8Z6|h{Ds%xOx#M$<BdZGYSaR#!^1%a6edT^?<?-0w
zI2A-}FONtYOXI0f29h*LQ0wifQpoNlm$D|<roFVPRt)*v7{4UhJ9!vlxRY)%3*erD
z3tCPWWmL^`s+semsaw*OZHy&duoPl;$!NQmOZ{8Y3eW$1GsSe9B%dHtab0ASX&f$*
zRkyNFt*&;k9Cbo}HA^{4<94sN+2laO52kRl12qiBRg$MQF_g|GMUFl8ubO9>Qv>Po
z=>#rbapS+nN-(1jIzfoBn!eyU+R_QC&)jLM8IBb_*MeT;i9pJrn|t$L8qb>iQ8x6l
zJv^qTyFm9?7xW1R2fXG?<_R~yt{kEV)XrZ?3}C<r;qF`HIr42aEx5$^iXXU<58iis
zuj@-KEdrXWsXG#W3xSx@nH_&*dSZY#Ptj$_Qq<eDJ&wRW@X0gJUoUh8ax_Yd$|;f3
zK7e%Baho{5=~52E>Wn)|A*bxKPPSJtydNavGIMDj+rxV}6nu?FZILkPyvKdcNbjO}
zl<5|r`Z9w|XpJF%)T$U3!pA?ND6{<2imdi}<NO+-&!}GgFO!+@I$SN4t1Tq$>#q}H
zH4Y0^&LquIo92SDhG{T;l|2fz%?e<{$*u;7!q-M*t+s-_wILS1F^Om5z4L+wD-X<s
zoah&IaX@nZjdvF&zUTRbJm3AqR8n?~$fMWQ6vP-*TG4Q`s%ZN&bt*E%2P&B30TzEb
z5p+AOwUU2YYjWs&Oy?nKbtk)g+kRvXQPWj<q@$2x{=*BICw7EN+Wji|NZX#T*G0~b
z=TiqZP6DPk>VOTAV&VI@y8;K^(KT1;?=q5?5`{!2zvm4OyMZkdHUASHnJ1ctRZ<_s
zU*oyiz_pWhU`MoZN>}#hyhF)39>zKzj(v?*;)=4-9`cq9#4!}v+f(_SN7WZdoFrKu
z>`9Bn=6D!JLB^aCp?y89CMT&ReGb`ZYg!cwvu{3XYnz-dh_{1ENGJ2J5Ot4ojjVUc
z=}N+~ZZ+i*2ZL@lclT`iD#%99SCk1WaW^+PIky_kx`hgQ<vtzid7Y?OP_KtbSg$r@
z9$gOR@0TaKa%MPOSFRS@x>tRAPTRzCM{PK57rx;qUV=GXnYN#4_u$)Zt!Z<;Q*QF=
zOJQASa}VA*zxm!i_qw)3_wPgm<_RFIi>nIRuC{-ZsMwS*v@^Wq^}KnP#d*xh*beD4
zZf?{pmk7l-M65GpmMqx@a<*Qc=9@0&7X4gDevTs&-3}yA<)-O*Z|4xRCg5n1oS3oE
zdV5F{e!ZXOI~v-rhM8ZW|7Of-1~1%2ZU6w}D*yoU|IL^V`gWGiE)GmgEdP6B=-SuP
zc}uMI-2FEyPli`Jg%WdT{fMK!dmMAl)g=99dqRn=8jyvA3}phL#MU$C_h)u-9Z>3#
zr0q6*Y#3#I>SC#UZWH?!cNZ!A@WINrBQrnOKGdni8ALzO!`W^)x<#|s?^~yPyT*_8
zLXBtJc1}I}P=iN@W|+E0Aws>3A^VMt8%zM=>Vt=MYS6@}ZF*YF2HOBFhZK(C;a@gV
z^+Y2Af34f0kbcyO6}4NaAjj5|C*kAAAjA_R>s4(Ay=Z5r2K}j5Cf0*tFE9B%S`28?
zWvK?KHf$&>ioQM(#d{zr<oc6&yu6%#ev0LYRU4qiM)$hi>4Y7(zTkK4ympOy?@nEG
z{oT&j{lU-!)TaVU^wG-cHJ*B>d6%<KZ;yt+gLj+V&Q*d^)SX&2v&G8>(~fX{xOMI-
zZ)VglTQ(4);+R~z+8b@k6x)EE3~h)aQjaKo<775yCXxmgzXXCbyetPYCk<|tcUr4>
zfV<{J_{ktj=z7MU`xC4SR|kq0tVSsppbq*cu;Q1EF@b%TPz}G$>DI@i4U}-QJ^wi@
zqcE=k?O>{e&|WrZfJ;A^KCcgLUeAvdkJtO>#ucUD$67P{ugAj>_CtMmy&f-*@6+{h
zi^spQzMtdg@kX{ez1+c?^27Zz`GfwPT)s>wV3DBk>5*5kFM!CIgo2qXp&s^<5RpEk
z(#U4XlTV(|U79(!ui5a%WzPmpp|X)J8~PIvcpCr;b5L`J{&bs{v}I2nZhB0pD1KBw
zx74Zj;E+xRsXBG|_4CFR`{7BVQXWI}h))kF&LZx3nMVETRBih@ZL4z;?`jkAvyEoW
zRHA25x^pwaFArKgz@Cxy=@fUU#vM`xanlN@(*)9a_bAyW2LZ)-f=9*$^aBo8FGG4y
zC)(E-@H=we<eTX<?$4J`CY@U*;-1Dpm-%m5wW*)a4=u_#b8<8~ec+KEe|~OnMlMet
zA*kLgkp1h<(HL`Ok#;$~oH_YkpU>0MH7v~g)fv2FhB<!@pSSbXof%-%>FS>7ic;fD
zfDA}?W_w`Z6-gRL=1f`cQ>vtSw2Pz9531lS=st&j*0llK*X?uoSo4O+b}wy}{-O3k
z)LcF`Bs`t~6iOrH9zVD51Jo2Rf)i5*DToEe(=Lr>!Q7&Y6megV4tB|C_{!rfS}%Ja
zB70}ld5_*X?cZ*SgeKF44IA)WP^=k&z!dqn%0N<wLo_gD`=+lK1;%KBWC}f=q_$zz
z{2{j^e{_-OK4`!cV30m8(T?x|q}xUjz~I60UutRgOO4oFbqIsZnI~;kc82&)gdO`*
zKzIS8{gp~nqrgZ41^>%4JOCadM=oFI$IIsf=ZDMVlj`I(@^br#6NN?|U$@7<ksO|W
zkGv(lt%q+YAauZ02$6#1HZbQ>%j`0au#(K;+o+eh_&ArDCE}E*Jk)-0L>_L4t91gX
z#-TL2nK&u)IsIi`jQ|$z0xKjVxt5eQBbS3VXXs@J;Nx_*-vAyc2?{a*kTnU*9we|l
zNnm&r)1~GL@b}jb&d2@D@^f|3uEAL97%Pq@{L{=s5ctiHPjUC=viM@oaak(c6NzE&
zx5{fG9x7^hR5Jw~K!JReq);v>r0B|k{}L=RTwbfeWV=yAq6B1n=dUOi?tnSqNF2Q$
z1oe?p1(I)-TA^>!qU#$uDq?rQnpw5ZU*I+Y%-9X2It)P;FvEa;P&hMYHgtS|MPP7P
zVvSn1lwO#)3vKQYpy$<DCpocVNLh-hy@JEWD~13<J5%V@@Z%;<tYJgRbYQLDm{ks}
zdp2eb1L$n!C#=%pLQ3@_k>ea9Tkw%ee@z9vRZ<)2l&sovetVe@je2wR&qdwG15`91
zK=!b>Ktg(F;-EE<H<JBu8d{YMY}K1azdPX^p$>kc-&*UG85Kw9`$FvR(pTF_J9#TX
zO*=sEESndyr;H1Wh9r0pEZ8F(6JXIts;*}?%v!XAe}s?pr}<ZUMYiJ9b;Mn%+u~D5
zmIWk0CE|BcKn%t&nH#B!M7FOmiK5%}eu{{$4FgL;)fSLkqE+bnV-m6erO%@e(SK=O
z?)OZPer|kxK3%AKud!j~u^dUh9DA(dnD2FgFs5;S()?w9QU1QXJn&=A^gsei8L<Au
z^IRs%@4-KCAD)dp%XY-;{PlZ}xKyemhx{!G?5k!Nf<Mn5KXx?r@<Ta%L;my=k>H6u
z|1b>gE0PJ<ax?}KxS{%d{l@wg*8}#ib5%O}dk*Ob9^Y=VV<52?Q|1Es8xQ-}cr+QC
zOo(Io-dJ+I)AbII8A3|EYH;tx>Kzf#8)+HTcTg6|u4;f^Qmmx{9gr0X(Gcm<9&Z(8
z99f9AWrpY{9rkZC4l@jErWxyp5Ksvup}uk-M8%k_7wQj>4kl_m#2JU(Jun~ytl`zS
z;}yJ;{qbb?HpXgG!9ooZqbR0z3S1Efvvl)<_9`E};!(o}M|QDdDFw>&rVnHsZaXHw
z+=#sL!;^?l!1!cD{=nL{P68(&FB#%+pfV-@s=f*30A`LoJ-LZ+o)DY%bQus>afBm9
zhcrMm4bJn7O?5wZ?N-|0th2&Al#+>pr=Ifl0vPZdm)fj4G(&X4Gpjt2$!YQX^d~l7
zJ|_P(SJB)~@uM<7tly-?CLl)KH+)_%^^$37oP3j%I-9PN=kstCP21!k6?g_XUV4rS
zC=V5Zt@d%Js;6J7Ikm7^mz#mK!;~tdO&J}ETBu2z0=8C2Pt~VvopCC<x+iG@fz?V{
z9IfJ!5UEzXgeGdzj*zWI6jYjvB?`##m6DyR)T>m>foH1;d>3GpWFHj|L~AUqb8)Va
zrOXOJGx1oGM9Qv&<#Pvz*MThMI)-k5@rV-}xqXPwzbCW<odXoDZq4FeO?6P6aqp%r
z2#6l11nm<KN`o^R!KCzku%Zi86k08^60u^#lSTt^`uX6b+euMTJS04ImVIHX)jbYn
z!YrUKNGP__)UM2)CZhTLEB)mSJ(I^*^i<qL-|x5mvg==d%1hrqMnI~7-S`}ughhGN
zG70a&;4ARTAVwt{?7?l-#n@buR~GDa5|@}{GR*`My(I1Zf?#6IvBW!$!bVo#oBrQI
zbTGWD3!Vq1(xz<?%h4#liERdlVv2_+g$@|$SHziS4v2382$>`drF+S$A%c6RImuZ2
z^==OUu1TU=7U1*_baKhVW5=8lzsQQH*kqB$$wiJ6Co)#WeUUuu3<3h>jM7B>6Q)Pq
z3lkHOLy0PyCmAHuI@VC(2(V1+Aco1mG(knzz{8^^OtRYoCnCm}85&)ZK($usumux~
zEHgza7xU3lBF>m+jmAuSih=^8isT(aS>S$n%@;1E*r2`WA|11^nwt1pP)8zTiwjIR
zqRWsxnBam{$fy`aLNrezBloq);k5K3pp{T9<|Wm+A-dHZt6YnIa68PTMTPXZbC8BS
zF1N@<iRmL$Z~-2@V}7b6%?!(%B2@6WO>crU!8`zb4#mszVu-9<udbJ5OyF##QE)J6
zN5gUO{Y<UD4FBp)@e(+t)}b9#55XfLgU8qGA}wql*JonX{L)A`zd{7}#{!dq!_Pu2
z@-kUqnuaOP$vd!non%2enB0I$#SvpuCYxnI3#%9BO@Be}9RtIW_?<o4f!N)J*PxX%
zErfVojWa#`usjPNmyi}nCVYsIQ$e|uTcbUb%)|!Ut??`>F3h-CqyX0tTr3|+ViHVa
z9=jDqdRW*RldVXHWRP2!D3O7IP^Ixf!YTlQjyo%*jwm2Eyn`2Hw%45xc^(gu6yYsy
zKc&hEqNe}-MP`#xxde?I+r@9n1g63Kw8Kig4+4US1s^&iDX<s~*AuN|BUly?67@+9
zV}djRivjKyP>Oc|hI}*`Oxckc1AnBRixjx*X~6pAnHF5wpU3zYU5W|1m>!r9ly8#t
zEoI_2?<<(sxQ0_T{#GnODhHyAk4^@kfyto_#^hQNURZ7{@GqR2+`Jw`MXt<vEgC@`
zj+I0K9fL(4N1=<fs9;9G_B67ZX$G%0yOeC!@ST-`c_7IW&cyMF1pH)>32+4moeQ_K
zzoj_BY@RojVhuFTEboD5Ezz#R*I*|{01zh^pkte&k%|TsBrv#n`Nio(RSDmNYubrC
z_ECmeD>2`K-_^MmNA0~4r~_W0r##Y-H^D3JN@{+I(c;^Y7i#%Y*C30){V{;*a(b8w
z@FNPhfPl5U(3T(wJ+SkD5Ed9;rDTy$p-+rO1<S<&Lg;SThH9Gxc9B3v7Rq=AF^WaA
zNYL9utWi#lfPilumvV;yPjnfc^qD415bVI2wn!0WxL+pjE}2!5c;4HuPEe~S2LVE9
z|94o#0F+6&vYaR08NYpQq9?!_2)LYJssIo;e@MF4h+e{%{ULBKVw4JsDV4Miuo{Wu
zNa?OX$&sj%S6&%Dm*bVR0AN)YloDI@JOs`O-XwGeF9D!rYS{9U!;e&kA+IsLBQp5}
z4|`8%a`}x#VR9<7ND;t`-c7mT6;V0>aE##107k%;{0K$X<lG}M3~qvj1Qh6!e{u)F
zB`HmF7^tA1U@Y&-JStWQOR^zU07-$hOi7+9s<hl^FHleF)&)gu(Xo)((JsQ$X-^sO
z(H4p?Y|Kj~&{Oyczk&o;lx0@;-eZs@7U&)tg5#Z)v0Z82aA=ZZu8`dh;8JkR2F0mT
z_V#lzILpuUs#)f=;3jZ9Fdezbpp1zeq?;Ff+|*SHA+Y;%-)rQ$9b>;j;nWepH|8@!
zXfmBMtf0x)g{%Maoln|{V236qsh_c9WdzIzcn#RMo>wvqNk=?41P`N@$JKO%MnF@6
zj*2<*PaYNp&QW+`HE^wG2r0!74>&voN7(4ni!bc-ML=oLtJoMoJLhYF5>^Qv0o_!P
zOfVP3&~`wNVQ=&RW+X5y8=cV_a7qe%2cQQc?8B19VL!B!fGjwV8YPGNKCP8}^K?n?
z@?t1lhvi@eH^8R63DJOe^k`2o0~9ZRgiM9eJPHi~WV?Z<kxm1W&5<(rpKQ25{bmhj
zQ9}{|1LO$*Z79Xm09~hk_UObTNrzalcqRaF+?vv<hC!NWfd>zz2NsDkpJJcLQ+ci<
zFCsO)<8U%XFdeB^F69KEkm7*7jZ9_%hYL?W1V(Z!@yYo9WyAY|rpc8!CI`xH2px|5
zYR}6F(em+`rgalU;W=W4j{S=u>QOHsrvCkaGsxS>4dDfWv2*mx`NleIihdU5{i|>=
zkT@_dwS7(rToM6HZr#$9$Ux4LyA?c|^*fwr^?mdG1H_Z!Y2avrVh9uxc^0XAPgW3!
z%6g={TP8g?H&`86{F<$HTHwuN0`bIbD+cyy=6+>Ah|3wp>lly(>LCQN&BW<3q-TLs
zi+dm^2O24nfw@otA+fw9#n~ml#<R?2X1aB#*D&P^@;YQe0b<ulDfm%(;dv~TrS@vv
zV0`f15@@R(dB~J{C-i?~BWPkfUqJN3BnlTLa#PY{P6TNI9UwBP6&@%Mur1hWkTgCr
z?bCjVfHPP^p~L3hgiZKlkSKxk@=OLm2jKQS!+jGn{5DgDQ$&?$lMFIbj*NiTn0bh>
zkP7HlT`Wpw10+<9he^R)3~-f(x-dS_HU>6?h2j0fhY(^4aB*vgvw>W*lk$O!I6-I*
zy$poQM*M)kg4Z~wm1pt9mt2Bq9*FH<WCej>Q6UHyfq*M`V_5};f~4*JH&p5+_{b5)
z0h;}87W%3YTn1Kxr$P?4#@0ClK$s2mhAH7TIs#(>@BnyvV9SILN&6X{7@&cKyUfpi
zNEq{Qd2x#*e|%255VB8tA#uy{75DLik>*HZV4bnTo(jf&@4cF#6z{i`fPt$An3H(W
z3h)Fa`fr5{L@DtwEFJm<JB^SV%|Q2Pg8=Z~VLMr)DzXI>py&|SyEBd?=t1;Fg1bWf
zFs}HH%sKB(VDRvZ>kj7uR*n>cP*g4{T}*%;xEc&Do0h{Z9C;(ymCnhc3!xtb_kr!W
z%nxD*SVQ-Tpn)0~fW_KkAf1wf@$tnd3C4#&5g9-ND&(2)&exTp){%*HAV4FEAUP}v
zJ5?D&Oe9g^f|8NJ>E5~aahrfa3VIa65i(79o*B<E?o|mv0x1H{dXNd4z!|Ycv?tmJ
z*9!25XaMHsC|(T+mqCdOl)%TakkLUSvrRZlIuoxRjG+EN^NE8o@(zEd4zBG(1+NRZ
zq;+6M!)1VAz)Q^P<RJixLl}MFjFKl(LYtimlK=;0bb6!kQ82TEfzO3YsBXE2jzgMe
z1^K~xvH~3{90h@tAS{Y?OM$QrK=VL&u{M}QQizl&1$99sWjGUL5(kGwssRW%vH)V7
zFg))6v3BFe-IFBv18556c;CJpTn9QQn2k{5F>Nhf$>>>8h&9YVZE0xIuP-MM6bMJt
z1@|d}U`pDn4~={t%>YYq&5GzP76~3k|16x77{Sq>hVULx8*uQ-jLmeq&rV8^Z+Myk
zI5tlgx;#bDjipN`cb{b2^65B@oS3cKS-U2_hRr<G*=%I3E_QQmlBztXxLf|0vzBCu
z#@Y%>&in6WdAhycwBGmCNA%b)DV(F(D<9z)avpiS`Cfka$5=G^Ap%~XcW0jJjef?>
z2NkzRUzT~Yc8q{^-JiNn#x1KCH2#FA=Z~Q~y}7&`9^dz&C-!Fa_&u5G?Im-0Gyc(L
z0YUy#bTct%M%Px!EenK7v-Y4R>LKLORuH;Jl(Vm?66j)fW75Wvrfn-<PgJqcjYp){
zAF{bReH!NW<VMw5wh>axQ2(%{OZDf+?UKHkCeK75-!thRoKl>b;=5AX^mTb{y5{uO
zn<U|7+f;!~JN0I#6T2D)w6C))cl5cvVi}d_Pz{?DDSfqCF<74Pk0w?79L@IC4b&E#
z&2|OWfWg=<G1*lbI4L0*RYhtA>~9_k)ozH*No#j0bKiw#P0c2ZsVw@v>=}x=>FCT|
zJx&h=tCnqgtc#Iz1D*4|n9}pz2ddXJn|P#@otLid<uNx=?5P)TeN>*c_WBd7Qq7mx
zR;%XdJ@(whlV_VBKZ9jXc$j`F=HiV^%<;Ua0eRI4s1qy8Dp;_XJNwh7q7SnlybVXL
zBzYc4Q>_^xXaH>ku7(c|2WvXmvRKysPJ8)4C<uExJ9JYMf=D!pfBubGv$x4%cBXpe
zHe5(>Qk*-|XF%YdUD^)oKk%NW-Tz~VX06k>O{=U|vt2j;r^uqko!nry$EUed0NS2y
zYL~9<RETWTI&nI^UE7wGIQ<|1H+;p8yQS3|9gt$XR#nSw{A*;Obap5hSi58!(w&1d
zgPt7O5gV6<+}`(AJ(X0A52KRyHp;<?6v7o0;zAd8Xb1eL&Iw_#Z7(V!tWc71w+sx0
zco7#M5Tf+_=1&U?OiBaF7H#y$#-fSQY;Cc%J45(t?iY|dZP?q$PS=y<5Uo&v^Dw*w
z{2wqDIHGMVrj9+jpyj5K;~%5N=9A?gC#g**yS{Dw>4d`>DFo?*IR9<3+H`52Hi4_B
z?x>%0moyqxA#YaZPtX#nG~L}P^rx2?LIO<qEgN?ZeL3q*+Ub@HNYTuq;O7t>M-r01
z*?lcUWO+ryDdpjKy#EoiyN{Id0vOiLKsMw~b~-+^bwee?y`7VcfbTB;B;bJCwyy4N
z$H>7;Xn|g`)`bFq{*Flp7{1JzC>}s6cSAY>XFLQ6C|-xJGpe(YNZfrW4h5(JHGX&i
zZ*2DC!veaO+R(uaIW51Q4I8-mu6#g(2&%k8zh}zNuX;0?<c(<j{vCfV@0a`Mu4FKB
zE!guE9(6WohkitjEauocjG||Bw)H}gCG^dlMTd<^+1Hkkk!?%eEwt-%4Q(Vzx4z0}
z(`ekW4EXn^p-NWnG|1E_FBdO`GS-Zy>Vhy0r%jW-xXGix)fe-Jacb(+sS0WqXt_{y
zzhnCDK1O%p@Cw}?o{v$pDu3b?YF5ut3J~+yT47>g(OfER^DWH}E{gjOekul83Kq;p
zFD20J-1cDaYRFQvf@XDXMTNRLXT&R7PiP+@Z)^5!?h!~SK->(`3a+LfHXi;!N4`2+
zHqK`^J29gUelh6N6o78O#g^kt*?!4{c?*vs@bqZCyx@RtG=9sCC2->wU&mzV=oTPd
zU#-(|tHUP0T(iiPH3b7?j=&+A07(b>^!(c<gs+~}@QW=S(WTjHwh3`)#BP8fUf;zP
zdb>sFbq`1A-5Pl3c1V`irQE$5nPq5&A4W8WHpN2=C>Y3fx4`*$9(E81SX{xil>L}@
z1S81AuSNaT1P9MxLUbbP{SbR!0P%^HD{7)L0+}6w$SKYqd|0Nam?U#y;$>ZwvkcY;
z?hyRMacrD?H&{&cLI-yz#qBy6;*j{Ur>+09{)c2~fnbO&fe-6=H;GF;*k^mv*2$%5
z=ll;gA44)uDvd8O*??{KZ@%=a<HQin7ZF;A_Jf2v_j0?NYDlS=x}?g4?7O&d=b44X
z8xHJ6UU6RQpKegx4ce(E?UPJ~^WF})Y)MS_j~Xt#k#4nbn@8<jjzQ-YLu!Ih6}VW(
zOf@*H5_kvk@>9`$#(!CCw+@nRBKxq8`slqb-M<B}6}B6W4KMuR<kUhf8cC7N{fRp;
z?g(*fG_xWV%-@U}g6v212lrrcIp;mL2cwZcTWESY7%))dBY%nWyeUJ0N<yNC`kPIb
zkr3ODqR{0F=YZ@r$m(d}1KZ-lK43k>ws*$t7F2O?J<z=k?o3av`d^Fa!R|zfgOI*0
zoq|Ge5m2Jv0!j#4z>Y(bf4O#IZ-3u#NcJz{)13Rkg*ap=awY%L!3QrU#y{$ugGb2(
zjJdm9Mj1iEINT$k<x;nn_g*YJyoET}CoOg^fppy&A)q^$jaBmb7%XWoV@jw7SK3j#
z1_;Q0xfyG*#xERdZt+K|wIu#|#$rwW6?U<%m=09&XJ9>7*6aT94L7-PFqPc-c+ABz
z#IADZof(HZF}jg?&|YkNDP%y6S6f2tk=k!i$)&ndQ7vZ^jl=mVD<jlMW}Ej)^Qj<U
z+sK8&rz{`$w>z0=V%&&D;R4-3ieLsSDT~G3b;M|b7fy|+Xa&UuFVgzUs8n|nsg}fr
z)=j)8QN=pQgWfgbH=DQvvXUKUaYR}Dpr#J%(M+)!qt}WP!qSf<D`CY?VpGwSwrbKk
zRW+an?oqK()zzo!8mtB`c>qVm+MhC`2A-(IE--0J(2^dVZ2+$Aid}nq@?^FUwPdOE
zgsShRI6uN0te%%bP6K{x$7u%P;;Tjtqdbs8hB+}sDOFb%8DOC0WcO5V^&7J5_f)`R
z93?Iv4jMaSvDd!GkO#fCh##FXNUfuBp^uvyie9)4>|dXcIe9hEcmL*kP(>D|tJ!z0
zy|Nue=T@k2vdKrsL9%kOy?meZ;-xxmnb!E~y;cjUf$?f(amyaP{M4w5c<WoO!YjN*
zvqH6)(_l-IE}f@W98C_rdH#nrhw;S1cJe{999oaF7HeLs0;V%o=oZj?uMC*XbM_%*
z=|%t-;FS;o2>4zVbZ-w{pRIV7FQk+Cn~ej3vm*N1Iy^YG%0_l+?EmrgRY7reQJ1(|
za3>IgTY@_T2=4Co;qFdDaEFB8&`5B1cWHt(?%u)O8|`6co@O5Yms{uI*3q@=*4cOM
zwfq~~k!%joT*$&WYo%mcV^C|wpSycDgSpxawkW{l)->^*G+6om9Z%D?jRhr+cPg<U
zW?DhiAmR$eX5p@=%eJ+OxnMs8m?UrO6G=jHSlFkl@x%o+P2MuTApQK4^_@wgBCTY0
z-yoK7X=Db^l|siRCXhiFHE;nNC#$GIX2Dkd?Cevf(F^6~C>`I)?H9pOZ%<uqF;MXk
zA*z#x_D*LT-t^9D$wG7|`wXeRI7GsBe%8C%(aEp>!MO%;Ed)a&JFZWeRYi>!@bw3}
z?}BdOmvg-&y2z=HVFi`)k>71@(y)pS2FD8`b5L{GzwPD8bP>wk{GJSKm){P&XhrSJ
zEx%F(u@C8#kvCm;{;XGp&ppBmVzOJBdIVvD%k_Sx^`G=7A{qFslWARlnBv{Ni`X?}
z;$yE>3EM*29$oAlze_y!C*mM+XejH54GpNQ%UCpy*qA-Py=P%7@k$UXuOC2rY@Ti_
z!y5hCVwJ=ul;Nl5WOf}Uk4ZJ1)DeMci?yLu+;a3mcpy5JP9DlM0-_CE<Zb`JXf|N!
zG2vsA2L?~gupX?bG~Jc_hdyqiN_Tnw8`~HVwN%WeJN{{XbPnJ5xZrHp>4bcvL`(`G
zMz9GjzsgfO^e4G$KN4Cs&sLMUo@EPP8^lY*Lr~*!WtX`NrbAynEI>9zZyVaA-btLs
zG=4!*-cxEu-xwcnUsj)T_SWJzs4*ki!}3qcMCURN08Q$v-PPG&O=V4sEvAvwsw-%e
zhwWJW>Q_I!E<jQ^8OuoxG-J6aH0W`Ov@^9tWyku5YiMmi=T*<@YltSr`WRL6L3~;9
zLwe*n$H;i|L<dNp*f(sGZ@7jUCEhy>ue+!2h}@l*E%ZW+>4eYGQ+ZLn(m{4cN4NV}
z7n-sNPoF#5;<=Go&DptS9L6}`adJLy=F^_b<(QEM41JPqT7o)sK9-wt6gvpIVNvxs
z&wTJ?pNSIO{PM>6DcBI9!c!Mt*+?C0v!|!IgQQVIAQ+J2R?5|alh233Y0RP|`4BJJ
zXuM-CjfPkHQ+Kh+=ngrpjSN@t#0)IW;z7-Y&ExR_l?NCr{t_o(l<qK1e`i$&)lW5u
zUsydTL9Y93*nv4`(1A`mgA$eCT`eDivYA57roGV_tDAGIc|pEsQK4VO4$(oywZ`3@
z9_mVIu0>R;v__p*L!AJu!wYVPl1G`K3OM{h^lqfV#&24rA30$7mzKS3Q%}|;IACps
zsb=9my|2g=u2b(GuK-Yer^4K9EU=q61+5GGNY8WV&~;5%%AP5CI$ipwLVFq$4e#RI
z69{Pj1nTv0*Sa#iqDhDO-tj1dKu*p9Jt_QC$|>Ux&1OW_cQ4l8ceB(s%S&jMWe*tg
zjphXa_y*_cMaA}dNMk2O3&^~rR#^StijQCA>!uNtzK<@LRh($BL2sCdTbLGCvM$nP
zsm5kCQi{t9FDvC6NzhrYKqUCZYXpAS_taEet(X%VvLwt719kt^8>b!H541g_K}_Pf
z&avB*>Yf{!2B$_yty0$t;z``tj$do@m0G#OH;7W*Kp}p{W>;ckzUEP13DXELbTvlS
zWXUcVQm<+hGoj={`>Uxj5B8bV;BB$qldqFN334xFyQkO@yP1-?-27UeFqo)8qk{rz
zyZB$$WR`UZ$v=J%f3_xdA&_xsMPbpU{kMyvo959jS%hO|MfJPlcbX-KHZ5ZhxkB=R
z!iDY%M&JXAGUdck({UK;4+h<KLMmQ(=%k~KLH8U6<Ug!0tr7bFK;8OEY>~e*Rw#|F
zyGeZjrKc;J6qbyS$98z%BQ^`&`YIO);*<HK{p#P7|3O|Fya7$CsRZKHehDLDU(O2!
z3Q^8+Sr<3`Cic%SF>|CoGl?AVfuQIR*yGx{pTel0+VchA1x#Zr<oEWnGR_aCjsuBz
zJzWr7T@N?T@xO*CC#=n9yQITyLQ7S2{~B@11fhPr$@9vRExRx%4U-)v&nRHpYU?jO
zIuk4jqq%r}!D;%ddI`#%uKBT0!nV>GPDOTYV=?mdFXim?*8)zhE^1fgrnpso2O@TV
zFYrR?RHX`IhItDkX*jqmOubsM{iAHiW;pO-_9mQ;QUvk&)64TwZsAg<dF~7g^mKtJ
ze<;a^fjAoZlAHI5KxZ4JjdH#v<1IX*?jPp!HBlGKTF8Jtk8Qjx7`ni*$94lEbF%Y?
z!@ViaMI6rVikYREx+-?kPEj;OQca;UIvgMBfgo-jg}W5@mzSSWO+}@k1ZUia!-!3#
zQf6%R`eCD}P$<ai2E_Q}Ryhn*#=c5P#NyNB2w(<Ue;U`EOz_Xi$Q;&D9nS1&3lWd$
zr}3{BTT*taG)VFE>xpj=pAzyePN}RobvH;c2%CAnbylr|mcMgued1WwqVefyaqu`F
zB)cd>Z38wUqj}&$XmH7H>*V*;^YNuZG83KJq_qiS2E&qM=hM+eHug%rxdWx6$#+lf
zztIp-pvK$E=bV=vq_#;Ris*q5zre|Q!AEqpY{sOIpABJwsKP@nRCpf~<N{ukOFF%h
z_}FwP9;i?dyYZ-Z=(ItS4Y%(XZ-z_Rd6Lw@<HO|d?y1aW|KO;pKYd68pe6ag21uaP
z<r0(d$njNs@3nsCd`B~Wm7iL{i9j=Rr0>o&a@#iP${*L{|8yWt^7k=Xr=PXnhFH@4
z-bOL(lQOeb3%^He)Pj`QJMM-W{w<~9knTKvu%`0nM;+m3fn7qs>tadD1{+x7-GM$*
zQ--NZS-R@ipY4Q#L;{eyltz-h)Kr_l1l0e$vj4+XFgS>d(u80~Qu9*p_OA;$#NMlE
zyv)eZ&M~^bOawWx*hg1W8&cwbs$H4MD&5#x4D6SY%J+rVyQ2c9cG|~m6XQiS(Lc?(
z+#gns>-z{J3);4&;I$gzw%Zgh2_UMzF}^(cF&yO_ByrzjU!5Feek;Y+Fj8{+GVIju
z#7%NjurEA6t%m+un%U4xKQ6Mz%3`vA!#V1MOdH!vaTL9rr*QgayugRp&Zl&XSKw24
zG{WC!te$H!3iU{sb^U@FE-YNWIgRkPiSmsr<pjYr3LWQxN+{7gYIEMAMefSa-=s&o
zwQsfQ4q@Fp*wf%5;dAufXPIIj^nRpyV<VlN!xU`UnT68U%vr-zKL40ngWU(=nb^<W
zpN`hmLS#8<Uh5j-N=}5#Xx|N@aF)A^??+WPbuPLnd^-s~#VQt9*li+0J-SEut79Eo
zcb3Mt1FTLSIGSsfGp-dKFS|A7Ww2`N7YA&EsgD0b7-4uX4|h_b-tb$etC+bf0gL)N
z9aGMG{JN^Z^+b?SkU@=yP3^qZ!2@GE4Tka8P{gg8dv&kAij$8w^2QzoaWLrISL?ct
zf0{vOqh)d6%JBxHlQ4yf;5UIrCAYu0i*!3wUjaoXe4n0YH>9?VyE`pfUgz$t=Q{dC
zQO@r}eGXRc`L~T1`gV#boust2dQ)}z3sDT1?L47ZV>(<Ct820LD|zCFUftE|<z(2V
z`+hd{cv&jZh$w$TaSkg8S3m17OZ(HTwVPN&b#(pvFaE&qZBCXgULGj?+=!;mwXLTg
zq518TdLuo{*v@Z}`YZHfm0<BQ(!o~|AD7gxIJ0L1Ra{8;XW2g@V$-FZhp20<(VQIr
zl?l@YAfR4|Cs5w|kdJu5x^6(Qd~gCoVuw;w>A2<8YC^~Qk((f7%!O`Uf{_;}j(lRY
zNuRo;>51Lw@IZcbPuH;inciR5ouT1({$JXxiiV5i#*!9ZQ3qZ=yoeO`R#zT`+;LHv
zvFUC;v~CNcrKQM1(-O%In{oH!20wI%vt|`noa$@6N`0KBFIG0rTQ$j%pkChOA|Mg9
zvcr6qniK#|6#f!^bf8EZHa}m{^=Ktm4;?a%0%{S|_gtOS-7)(8M!q&=B@3!%uPOTd
zz@peY1L{x(`mSnF-iBMd`$|ydo)T&Q5c%_f@?MdhkC@=)<wbF|Ik1SW+wCtU5Z)hr
zCbl}Wc-YL)@lLAqO`rz+4UVmGw!#))UhUcRJ3HS{J6WxvzGYLcjjK-XE;qf8Jl$Ha
z`&)Dp?+ijKqs1tzoRmnfo!`O!-UWu7P2wd8N{+f5swvcuHkUXRqNpq|XC+~O=oM?O
zIM%%@w{q!;ZZikA&EzLkGtw_4Se=c|n)@yq-7&PFly-LB>>EpokEMmod(~xQ;WeJY
zI;GCX^0$X3?Z!A%jS_E$ywsgsM@_otjx_)kRn3}(Ao3aPgR%L#hvB8b=&(><-yb?n
zd&xU*LC=YfCdlFV%4XemN$w850lL0-&YJ^Oyqn(LZB=qJk{`&e@_#N8XD8bU=5YVs
zP^<gCK7$^Z<T4)Y!WZE@)7I+NcTdhpWpDadBe1E?G4jnaf}NJL7P*}*kbQJ92<pi`
zYPCZ<%B~%kXsS77n0ffYB+;s{68hI#XH61=DaHA5*Z;ZbBk`jMSS)xmZ!NS4d&;0{
zt(JC&By&(;wu#a?g2Qz`5d>`uobh<f`q2LXI-Xofyw@T*sNA3%RFuC8*8R5xhF-R_
z%w!Wf&>3z{U<;9OIjtirQ^5;Z&Z!rQe$wtnLf!&sOjTXQB)ol3Er&LL0fo2j?;>s@
z24;h!r;qSh%rCS|nq9QS=-ouChzUD873)YvHoAoy`v1B1R2fup0ejgEIUGJ}A6CsH
zhCJb*YaOUR9iYBEthq$+=M|4M{>ON7ALjh-y!1(@&-ra^<7J`3kA%7aSgp>2{xn|e
zQvYR5|HUiYtmS?TEsz3bQ%gNB$Gk<RMA`O@G?-1C-<L^rDZ4@AW>f;=4q2?;z4-~x
zC6P6!|7~vpt+h6?2AAUHt1Q9_>+C^@pFll`nx#A-k{^LHKG>yU$06|Xdi!Y)H`k&B
z+R;Ie!TIBOALHP1PfPAaNK7oUbo;UxdyN7MEQ@=_uGxCHn0&p&>5??uXq2OmS|j4*
z`!slSpxKdR4}bp+@(m{|s=?U715fKtrSO{W-@Idsuf=W%2Vq{*lMW<d319c(vrvss
zyH<Ai*qO9#DxA=TG<jXjt1j80lfO#dX!@xPnFbYhOL<vKufa*7cOI9WiJhs&bKE|J
z!e1%!&v?yw|F&>GOG%Ws#12vKWT&hW+_MTsJl{{^?)q4(w|j|?ojmL*dT%NU-ilG7
z>{x2rzK08Mv9|L6u{1oc1R4sDLM@W^E+A|DIEExEoB)^O^}UN<J&JdM%?5M4cAnEM
zU3O=Ma)~XKMKUSdQ|hcmquqVS9z8J>dR-Pv_!(Z!EP166)gR~Us^IbU2$Y6OIY*sN
zD;=fLSGyn8Av0NNxhj>PA#h8D91*yy2_Lr;Su6TPLFNPP7te^F5^oW;r5yfK>KK{a
zZTow(o+m}qnz46~OmX4#Q?yLb;Kfw!S0dD)%=O3jGsD>@S=pPZF$~rJcn<<>sWF6S
z`7o;eIJZBd3ZT8oy%j-K`RlnqCskCGSh;iw$)%nKQt-RYiej0c1R)SJ%{a0US1z~|
ziga`v0;aR8Y`+cR?unMgtA0NEVbc2n)${9C_g3wVU(?TnOQHe(azejA?P=xXGIvJF
zU%8_n97cE3s`{H+>)RBg(okh<KN3J&Mk1+yx&&bAJ8d4uhYd$Ne~H@u^d)Wq6+=>i
zpTO^yRU^aHtG>J)lf)oO&ml<~%bm^?Lyl~%gL@)ra;*Dk<{FWl&DiuON>Mwz(P689
zyw>3##OUa;h6~TEwgnpAcmcLSd+HufR7r@t1E;+KyUR$M<SlYM>%t`260Y-T8>~p=
zq|0dvE)~eRTSY<mdzrO|mUOGnix=|hR#^?GE-z0==KZqJp){i%kIfG5xPnR8tw)Id
zp(Y7qXpu5%_z0I~i5Lhi*`eAo34rp_-%yRPiE=T$rs+p&=Wdatb1dCfb_4=u)3vmv
z5Zt;e+~wG6)V<`s*38l6jh!#q_e40i6p(c3mlx`Or(U;)o$?9VYTEy)tUQAzp;0;q
zmpdPls*SR{HCAs2l(E`bzC2$?(s)l?B@h~RI25F!TuPr`F~Evgf+dE=SijcX2a*Hb
z*QVjFyZv%YxafrBx@rB-nq8oe7Qzug&N2(Bcn5v%mv{pngnMKiZ1KUggse{9my;yJ
zJD-5fcqx&>q3wD7-<+s7;@Xe%uf6+CINkDxQFE}R^?JTmH;Ue8U87%Q={{-p)YU>2
z#(t4*wlY+iv&mZc{9Xd7GUHl9pkxht_X?QFDF=1j(pBP5ij8>CJp8gD8*$vbLT4O>
z>(5Q~>z)<o^VXjbm6NlXXUH#V=gE4GRXZBb0FbNkpR&0q1^Io`S7EZv`BY;PTM3d2
zYO2=NjdOFryF858LMljs(Eb^{ozNtlbLm>*VXYe2`ctQL?&5Zf9~U=Cx_ZBVN1oAj
znApT#F07Q2WzA)RcgS|V4!<o_uj|(X{zLF-Q<nJc&S$Ut=8^P;G~y#Ey4vV_KQYRI
z(wE?VMpN#Ze;Y)`*jP~#Aew>36Mc3yAM4DMk|k~@fI}dCd3ZlJb<j8YYtIqp_|+3l
z^J{RlN%`J#7H!L+0{U(g5>x2ML09mw+8&z-bJV#v-j>QqF7!pRlMzqA?!kVG%d>Yy
z!I{hf4Z>6Y4AfQ2+HkI%JE8GJCUl)z)TH2@@>~w0_z=fyZK`cOs#@RK)J#Zg4nLH%
z6^%_`*6ZO(7l~<lO*=RDGhF(x&=yG&yPV~1GnhL>V8oZF-K0zIKF89O@EP=Bj>NKa
zxxJNfYLVUQb~yoMlPZ2MKXB{3_w4oOf4~}NDwa$yg@q44$~ccd2PmPGfz82Bg`C$*
z5-=ev4<y6RMkI_f`Y)#WE<aBdU-{y%iGK#w$4=D3k!KSl2$|b#V^HC<l1={wJchb8
z5NK265c6^^166lYcOH!_IciboDL-9NO`t-MD_D)%xq??cSyOoD-1D#R@=-oZ@-Bu6
z?OA@@4k8EJXQ^5<t8vwD4YmwVKWi3bl-9FynG1Cb^PNylRR_0zMq+S8@;-n!`T6K^
zP}Z%w_X@EtW&Wd7IcF7@D=O_{gf+TWUTPCG`d0b@6i~kNTf!{Y_sb6n6~J=fCn2WM
z?~bfu&#^bRuI?iO20hZuYzK<ugfi~g1KSU@D=7W|?q1;y>5nC@Y5BL(s#BhL3g_&^
zj!MG%&>HL1VcHm7&(6+xt@dwqKZk!LMM?>GbH5y-xTd0YZp@0OXNO#UF5gTJk@Q$~
zQg{yZ3y(qp3nD72QZ9%eJo!!vPaidKhryl2WzGaXoabY+OsXG5g?TqF9ix<@^V(wM
z7O)@F+=@Yu^L@OW&NyEZ&5n62+F$oc1Y4`g6-^*g_T$=>40sxg&pufr2<czJUe~e-
zUx^CkV=K1>`73kQcKfjhcdFc3JhG2JxoG1@t>DKzHX2l0eTvpW=PfmKa?y?rcTf_a
z*89ZNgo)ISi`(N<rJLPj-4s?Dpy$`T$K1)5f7+1Iz!EcDa@s&>mCn-p?~BG_2XiJU
z81$_~F{zNS&UWLzwr`<qphxSC6&llrohhmsTUhoq^EH|w7v+*o7EhrmbJX%6tI#<O
zOxA$Iv6JUnzkb*#K3FhC?%b(4%`o>!${AVcnDy7R_CNe?0-C0E|DS|%#O>Q<!m<4%
zhUyvP65h?<(;iAK45dzEu^mRSo7swK^t13?R2gMfzDdeuBz%OMDXi$zMzlENI@C3d
z-#BObwJ)}u+<NliqeZT4ua%g(@l5niwo`r+67}2yD*S_7{i-A0r21P@NKts~4O*Sr
zIG5_c9}lYtFUiof33>(*#kWShxD<?ycrk1DOma!I10y-Ws7k06#kLt<V2US`_Oe1s
z7GtxZF!QJ)UK%P?I^h>`1+}?m_zL07`sdeW6B43Yt8q6$xI{9|WPfd_m96erDIzCF
zPE~0Nb0L@GXWV2pjfjoZ|5&eZb$Eiu3$jhUIpVifR|yW%thL(e#H9S?*)?%iwMrt8
zS*)xj?-W;jYPtp^X*DqSFr{KR5ifPiQcaaVaQCr<blF^wYJJbEf6&QWusM6hdCWYJ
z!t_hq*BMu;68o+1tYbW=WWE1bM>>wI(9Ex~*IUj4=-|F+>C$!9?>Vjr)E?Z>-U#X-
zQBk4YB8q`<7%K~TXrb3G5f{kRE6WsAY+<EX<<5JXi%q8c?u}cZF`ucFJ>+=!PFnB|
zo0XT<zm90}WJu)95B~_l_Hd6dcje0fwxd7D*ougf;IED$986Sg(DiAp>(<&1vP3~A
z?=R%5hCd3$c($p2O!OSpXuY-#o)q70PL2m`yE&=VD)*F3vP_p;)i)5Wo%M<fuCp|#
z1qp4ebT1*oJ5K^KiwN4saTm8%OPs~N4gN93#K(-S=8Fjb<*7_kVCl6@u_5RxqqrAR
zKxe}o0Ffeb+`9ymer=5~AW&Kg2N}Cx542m)!6Wyrq@G&SqJ(4cx|eRSei4mAOkY49
z(DN~$9B#@@Tv*}K$xLYI#HkR^WBzv$e`-05SL3<P-Q|h<HGN%#jYRgyw#}T*Wz^l0
zmi7eUJVuhp&G~1fu_cA~%eEDIeyB-M=8ycLwLn`3ksRU>6|B*+PO@((%Z_c4EDCXB
zQjH)c!4zp^efX9o(!#o<zXJ3KlC0=o@FZMUnOt@z?-*UO%3TtwT~Z*3bV!bHjY#}I
z_sehoW}SEHo4WD-dPPTfER(zqR}xJuFmSo}{8EVi;W9k@qanYNaZV6VI~-#!y}&fd
z*0zIJ%g{HN#WSWLPf!6dHIo-FO)i3mYKg9Cvb^0xU$L2Lfg;*$?vFMif}BvZQd|MU
z#?z{y6h+Z7#^u44Q;JA%qwk2INbu@>Jh2nTR7^z6=2AlUonh-2d*W7x+mF!Q<Q={z
z<%@gPh#Wp?#qAy4&YNi6>~>+<WDjLJMfw{<6B)*}*e@d#IsbsLrdq&F4|;)Io%zQ`
z^&oK~i^bK$VHz@fD)uK9ujwXC3pu?=5>r2N4C-jQf7f>iN*+z1n8&+W&tOqJ#qkBM
zpQRZqpi<@Vz$C5Pzxi_TDMf$(6A`sMe$ufB{@ZML$RyS5EbEU6ekEdlgI<S=`}DW2
z@_f#Qc+TQAZX6p5gz<cp-~G4*{}L#eB`N36lffjIxJiKpu}uz*G$Pn#^^8x?6`)(4
z;3ksB@*c%zt6-oR<I_K4&<RNqzp8JXWqq{PX@WmBp0Zk#92jvA^G?pKk8Re>)}?6k
z^TMq;A!6;5iHDhUahMI-%piR^>Z1IGdE9=(VtTQrfZwV<7%C-QjV7zXBT?mVmHKfj
zkbv^PLF{M=?68%wOG0b5Ph34$rv;IJWoBv0<No>0GAT0Gf|tFywaT1wOnR!~*^XNN
zQmADh!t2XoThpf;9cTdV5&>TWGWPt4;CbUx4@11oGZPnM8Crj`fLXWHDmLACgAiqg
zG$kDGKK-#DBE;Sr>jYZV>lC;y=C>iJD+l?KHq&<fTb?k`7DX#VHpko9H$vxPBhrSq
z4Ir*-@Zjj1lw&%I?1tp=HExJ*OXH$PU527HvndzPHVpezqrx3JBai*F#s_OY<zA=m
zzCgr;PDtC`JwqWO)QonA%i#^uW}W*9TA^Zd{ess6xx3?|XWWr`8ozNWhup)MPzb8)
ze(sQIhI*=UzS{Gs|8+2VOJ<u5uV}9^5JBzL_-RsahW5Es!?U)KpU?bFD>JBr<5dd)
zPoTyNs8LpF_Qqve(#apqd=J%D`!u;8eg;&f4=xT8?Y4F?&>Rty-9n4LCZoP7#WDXG
z=%@<$%U9qgeOPw?*G!WU3$|T?`%U6=Prr$sE-&*gJ%b>wyun+>CBF-wp-5eprzVDL
zE%qyzjC!o7A}S|RgC^2{f2UhM2?lTSkx-Zjj3fpuZ_wM2s-%yq^uQ6cTgoG63gs?M
z>+KUAqka0<W4?ZM>+k8;tc;3O|M(G}Osq{dAEZ-jE?Y)GPsAQE{cg9IT2doNB6ONO
z?zx4%D>41yJB<ujT?0jp8c8c7l?r7Z4WS{2rT&8sPT`0P0FZg+vXdEx{Rr7}ZmF%N
z6R8QGavWUS@F|}?PlTGn6F7MvH(ZIEG>mw9OYd&xmgfEw6#Dz{)A)rZhkm9g&KM*5
zJgG^NiYbP?apyPzF2CbRT2R94ZbL4{imuZpo3{tkKdJ`@y&{E{lR=77FPgAj6=Urj
zWII~ZJ(W8Z6}DxX4#AXk5Fl^a?fc76oH@d?5@PXCxG2S?f==!vSK8dP`ey}3A)my5
z;aFZ=gLI#0gk&`uB0T{idz@%VHTgusDA;~d|2u(2;Ei7B&P#-}ANz|rOx)xi!vZ*!
zf!vOZIz08puqV`w5;J9}-(y3PkZvw0{dp%8Z3$bMQN4ix^22pw+Nkg+7v^Hv0>zAq
zOm6W`2eG2yJZN~aRE(p@svNjfl(Bz@QTA<b6z)`qG-Trt?o=!b{$tI9Y{+tO7;Q8p
zOIMQ5MWlvyImX+e^jocW7cJKr!a$j=#WG~DFO{myH|d(ic+95|@wY65%k7+LJ3`#A
z!#3g*V}vDtnM<@h?_TNWo&l-s3Ai5{+fOh|5V{ToQ_g|K02a44Ocb)~?Z*3g(V2jf
zzu!ffkatMR&AB!@go1FdLjB{{2ZTg@^tI}8g3N#)41#`Aoz;0FEpmcrsr-n-w7udU
z>p%W|4@c^&h3F&zjV)bSc0OynNsVihuTvET{=q*?ngkkrXqZmSccE3def$f9`+rM@
z$yOlX4tO}Y-FF9zPybWNu!WbM<9{4>&eks4TIg_y8^4P6OccxXynHd?;E@gy;o$zy
z<F}@<!vGgykO?3HE8@{CN=610Za0~uCT`1jzfC{SV}HabZ|G?W3o2KBbp+`=xt@13
z9^|ANI?YEJ>-QYgTC#uHKrZ0yKgzE8@hB58^O~%%OG|py6EBE{=Yc3IvGni_UNo*4
zZ$}S~-yPqRL5hi}Dtbh^54+zR1JNE`=0C35Ji6>tj{j0E(LOiIC$`bAqZJ@FwU_z0
zi6u}lDM09h@_7tPtu)JlY3jCux?ja`WMZ+XLW82soRh&Bzs%Q+jL|YD1k5jg=sR4f
z4e{(;h-b_?E($;Q6Qe&CP3cx^;b3<#>@2-Kw@0hL7*_--&f+PBYz83ToC*P78k(It
zKR3#xb6?axg=(^FO@`FmZIepgA;(Mp_L;Y-<_|}o{T}35W&NaujHhyU%xPV=z;vzn
z-7ihX{(G0Ud-Hu5jH$jaU*LR{OO`Er?>K>>;+~I54bq#$MiN=-ygtgS#0Y3rd@R?m
z*X^9Hd{wRW_O2HrO=R%D2omFSY-pftNd9?e_&v=si+E4b$5|(3XHa>-ELi%>htx_X
zqCD9S^@VeGQ{HBO)`lzWfC)noBf1jG0dw&G2a8ZhH<T&{5$@0d9gh8ff`ygk|E(nV
z|H{i}>S=D_X!SqWlmB_uujSBp|BTXeqiZCGJE_$;DvFD6t0q$yj!^brf!@M5DLnju
z|GxWtr4y#pU{g4RZH}*>N@oFx{qcn4lgZq`caR>`#%4#odw$r4Y2fok&+8d3;AM%X
z_qlWn_QEaze8YZIeY^((06njRG~fpqGzkDZ6Musa!cMAyy{~KHuP@Iu!7oR(|GWLN
zvj!;ay_{=>c?JuKzq#1Jc&VkqPtO;Nk8h=oy{|{lLBTKgjs6of(4?N%&#&XK@4=V7
zkCUc==X==8j_TH%-^)qs1pxZE1`HOu%>e>n8>(C9J^+EODS+`ok~rY`{MqFs3h)M@
z>7jVfVV#-wJU>2w2lu{QC-e5e?gwA|wxdvkUy@)7Ndw~3s$#g$&#=o@z{48grLz|B
zFoz3x`k=bD^?G}gv^DuY_YGX=vv@Ft_}td>D_9(MRSJ7^dD}OA+k3Z9LJb^L6@T5S
z1wgNWZ;`Ost<i&*y9>bEf%rBEw$J&t>yk$V1>f#NP5s|!03x@ufG0A{hG6JhDG>DV
zKGnxgfY{cE!2#pTbcS!`Gh*%hlQ~Tnx#(V%_}e)U0DbQ$(&)|qb%9g70ZavW8U$~>
z9R&h{DaB!z5L0o(VQ_(IsOsa<8t#K()oljwjRz?HbX41uTOSM?7oSU-{rY-a{l^8e
zdC>zJf4kgx5Qhzc170g#ARrsnsfXJi&uh@5HNV7h;AQFO*R9~frRTY%-Yy7Wcn$z{
z13bJ!$yA?$dttYxM`eM}KH_GGu-2<6@!W%}CRzaW`~V1ZeVcp?2FR{KKTUyezCtyh
zV)Pza0Z)8jash^|k(-FE*SQB9*h1^I%f8S1g44I&)&Q!#M?gFDJSr0iE<|=UNqnaK
zPpkexr})d~v^$r#hQQ}uz|H%Sx5D6Y0h`Bwk@|sb5yjz?+Z)ba8qCiZ&v(y9kH<@5
z00r4g!CnZg`fbcKXwdNO65_K3Bj_c3JEC~oG!1$m3lL>0gNh>i{BrY{r!w}k<N^>8
zpVi&woE{u$y#R}2i{-xP`vWeMZ(dtzz_0_=t=H%{=ow(-4!WZXSk_bP8U%|6QULO|
z9yUD6u99{DPd-iSV1zmG_nmpV!g|cR3+ONfqd(25-u6H!7B7I8l_+nxHE6-HwIC>j
z1`NGo^dF#^T7IDqJokBi$JA>tpoW5-NEDJJ{#FNTT9(_+duiP=76L&-UekM@H(<~;
z*mdiB!{u$)r<X$fhFt{km=0!zB>g(s<Nx1b@X~sK`^5RG3WL7C26)+c52hyY)1WFq
zBn}q)5&;InHpJiFcNqk`#qE7Id_mu|ewh=;)hBv-?EN!-FUm0mOVqp)_Odw=6i9gB
zbaex~IbRXI-CqPhcfzh8V3%vKt2Nk)>9eWDt0|1+RCJ;rb_aX8-GBuLw*ek$jxu3a
zG;f10u$zmwvtHN(Z09|6vRwc-Fc73?^N}CMit`M+5;=rH!LZBsPSekO7lZ9Rg<lu=
zA54QNHcH!qZ*;eM-gv+>H^#T6k9neT?`O>#{L7Tu)h5AwHfi4A+vw)&BYclnx(oYl
z=_gRu4GRtK@^d7m$9p=V^uTBxdV{#CWZ81lwME$jOkFxa9I&fy`Yzt!bIBiBMV(yP
zyCe=EcX#k>eYpxr%T<(F>^tjLTm=O8ky_=nz1*NPj}RZf8HJJl80VNxYC6;O>4ZJP
zw@#2D0=})EjC?o%Ar2&bZhjTXhx#Sb91{fMI4s?<U1idy1+0M(18L4wd=6#(U71h)
z=J{HFJ4}KZ+fr;AU0g5puDoT%e@<nNN4@{OQ6f2ZvJ=6z_2LJJ)2NLtH=n;&!JBy3
zY`(pOsQI&f+O(m#dgEQVxe7U&9UB)H|Ite!D|!RQ9c9nc0`2oNy;;PF`4lv78wB>u
zCb_D(*kgP5)WlB%WhQ(F_l^$`XFa()4}AX22CXS>L})co?7dqPD)hyaT|wZT&%P}B
z){NV2w!4Krg&SC+^NS}v%sm=R2rhT8Cqv=wCcnt4AHXeD7C!}UQ+2MViisCYG+3-e
z_2SD4A~mD1D+6@`7vbU(;<UxY&8d?hU-D4d)_JR%gkm;wwKV`!lB$i6?|{vSyq7FL
z5%C6Nc2<Gr=*rI3xPZkFCB(F=8zvx`F)(mZCHIrDlbXFzdy~f_B6uhdz+o}*H(`@H
zOhc9GEv<xx>r&^YUCG=9&;e_b`#YRxA4rXd8*d;#Mz<%TqI~2RmN6#87)-sF@M|^>
zAV#ZdDoZ(*4?T39y>7%5M5c)oloNHP{C&ATLggUJT;7T2Z)&~|GKj~9M3x4b91zZ`
zxF<Wuy!zKF85mFjCsC=!-5h#=vh5{5A_AxS`_vP-jqgxAP^0((o45go>#rg){KMQM
zf!?dtcn6-!wf&SU&o<aPx3ts`?I@n}t#M%Tp=_J2RhIOufnk_PT$^mU2Ow|ABOu;`
z^Ii!PwXw1&aAc+P`QUX79sT>>4T0H>t8vT0+~#xHnSB7>rC%J4>vKFa1qdO`-`IBw
z{tebq`F>+;9$I{D9O5QiM}Bxj=YL2T9F+YWnd`5uBM2q<)HTx>-AV%mf%*H!YJ?~{
z!J6wiy2d3&IHw|<7S%P5zQ?NB8M>UMqNSp#o<D@`DNyqSIoF2b@5tDLcEjML*3ttu
z;ZPfLkLD>T)7>_*Aw&j8zLo^9nM5$MQ@~Ba4C5<0WRY2ijF@xJ5@(hT<i}@FtsGdV
zyF~VE;%*8?Ja_(L$vVl{N2DZ(8eqPXZV;AejPhc(<-6o0<{gH69Ek}~Q?sY-%p?@k
z<7yDdO=?F+KVahVpm5vzRf!vIC&2{gG{#v)C_5Mt?5q&yL;YZ<725B;{P{-ZA?7y*
zIgM78stOhton#F-%oBwg?!Wt-`w(pvm9uYK(1X>zuM3?QZooBP_(1%v))vq;_yRg?
z4Lo+$%~K5tqvgM9PY9l$b@vOVpUA^k19o7p>~#3J1>RZ6i!b%Dqdu(XjsNS{SBPEB
zZ=%k{Op+HCgQIU&Z9Jc?3XUJssomyCTQY_d7CYTs3gIQ4$&tQHpnCFH+~%`))c3RL
z<4B?ymGDKlfWG)qQ1wNi%K3`Hld^&ddBt39q70$f2H?-+zZSpQo?IJ~KBpSbOIAEs
zla8_NGw_9ECZSd}<B$GrRI-a~tamy7nwz1>4t_STJ#S%fs%iJOpwI9?m7B{$SN!R^
zl<7K@XEO;*N7tgYgwgzh2ZhO0>bh7evtI)TWXwe4MavvIe-2pQxmNBNr1^&lli+ax
z1_ng4n*kiVXw2~$G-zKoI$Q#`r3A~3BWYT7btfsH$0uEZTRL`MQVSh-kzXpfP90MM
z^>_pGhSY3Oh5*5`7k&r#?re-^7mpm<JG6^LVzt~%zb~#HQ@9kwyed&cT$A~Iy=nX6
zo(097EU=eHMqIdb-8gLS;7CY}-u$R>842Lb#ArfpXzC>$Jv0W#wa!QeNYDR_##@0z
z*AE2coLeYKqxw_6=WBcA@~at6bPX-DZ=YS-&2CSg<5d|sP#mosnWmA_V~`xTGcOO~
z<o_1i=ydpq<)}qPyfamj%bI`W#>*Yt&PWMa^%m>n`n}}W?{0HO;=YP}2^AdM=oD~(
zipW9NHdVdZ1mp2&4(`U4nHS)VzN`Z_n}VpVF5R{>MrBtH_EmI=(OHqgc!0kSU;6pO
zRT~p;HeRirJGlEEkL^h~)YEt}-#GaLtAP$&=699{RtVpO;6rrU`I6#VhR&*l+?Dq^
z;Nao$MS2k#JMK5<`GoZ1{K#bT7R_~Y{rZrr<nP|s`n<TS73aJEPS8HMf-}rlefGc(
zkynZA-I)`+Kh$0c<Kg(IWnmFW@zS<~875~+^()i7@2>ioG8Lnw<@LY(m<QnV97|Xr
z;!oZ0gKf%wzRj3*bDwJ69<gV=xPwR3zJ-cocA<O>DW57AE7*3d9dia*3H;5&(hx0r
z<{~S$`dCrmM(1c069(h?PtC^^>(vFDFSDBl>qQ}$Y13B~g$$c=_+28%cakyW-LJL5
z$HeZpiOCgW)UVO1Yn4+qV?Hb-dS9U^{p|pwfX4`o!vKW$#KPYCq`I>&8*u?9YwUK=
zF+5p3ra(&4iW4%${UbUD?~-sW_h>+${5#F<M>Tbil3tQuX**_}z>?)rp3KmX0k#u4
zVl*T;SmQSmn7&7#7~I97uJy(G$l;@HVDgS571tA_^;#6P(y2Bee<H%*<R|bq-;Tz)
zma*c7@)jd3UFjv?ky1yO6h7Yf6ExHy40(HzGe8Bm?8Ag$8=RhS{ftlnQB`V(67{|H
z>E1HG%6hm3T~^U7nN6=N2qTE84AWE1+xm|}8I`#CfW)>R_0}8ZqM=!kiEZ~oKos0$
z^v&0f_NhT-)Vgt0bUsVlKmHF0G(uowf&8}i1Xb`nL7V;FM^wEoux`=a&pt+Pzw>Vc
zlEWLkxXY!_9YC5ZLHt#9+wOs>mNORM9F~Z-I1L;(BH{3tSUB$xcI^YWXr#&s;PejJ
zEAPFTFy7~?IZL(6gug`12@sSVr2Cv61e}dqbT=a;V|kzJi$1$?DbekJov6_xH^IDS
zs<Q_i+h5bX1xDf5d$-FMyx!GM;IdzQWhD!*|E`WD{!>EW-1UZMl06&n?%bdFpu6h{
z9Rs8KVmzBfK2s3ZdG1k!vfD(5mOr*%-bTJ9<y@h?Q4u7PE*n06$0bhnw`kgoWW0Ry
zBf$tRhGf_$VY;q&D;aFE+Tal5)UB_Gk+{*5_D_XSpOTkq01(z=QAw;9TgKVEg2@RR
zhNwz&UN7#<QjX!f)jl59xlAx4AO=zY;aM|zb<g;`!x;j9gc=eo3p@RwCr{VuV!^b0
zm=^J2g4{e}!5EHcm^1qHg>zf>kv?x2h=esxj2>Pj=tQ8ZFG`r`0;m3*RTOicgzPhH
zx+39hu9@m^B033gF&>YR?D_;&wY4+mjHEzCXI!h~56L{M<~JFFn@v}K=_|#I>no*d
z#XmKSinvm5mM_Dpx%yWx7RoUFjwEcKTE=zm-!eZ=sF_be`SIMGi_p0;1}>Y+`U7ku
z#fS6iMEBlH9YN)GOfJs78~Xe0^{RMD${vy&S-~`cR>QUdFk^`RMyB`@Tvw;_1-Y<p
z7i?DGLl3V%CE?}>&qE9_@pEX?@L&%5cL(+yWaS`44pOO{!|(8+FdjR&wad%XF1X+3
z8D6nS&mL|Oq`M*FXLcEtsJ~*rJ-5)*nM*}QjKi55gP(b2%VsF|!U4!=;{sT$e3iOB
z=ALXAA@JEvSpGW7ACLcG3*UGB%PQ{csgRhzyYc)e6S<pv?G@<?H>6FHmmY3Da3_2W
zkE-?L-BVdkMB?)l_|DD`cG<)1gi|%p)oJh43MF`?pVhV>=|<e|XK^P+P9*Iy$!^jM
zcsCmEF_(6Ab78`@tu_4x@q#DeJZ74TM%4XXeLW<~>K8~&&-SH_7R2`H+<;0^(^Md<
zMc_JbFg$_Rl}0R}dAMefGkrY+!*LL6(8bkkl?V#73xtedocA;T6oZg5mxrasu7#W^
z!GheVw;$)K2D1?YL`~&;&o@iF%`e)Vt=NF}o;`W*Q8zVN?8cT5+$K=ExLyA@<l}_H
z#gC#lX{JsZ--!FuZ$h6e89REWM4`i%MUVy(5;5FaDv6?JcLjGZ(!NSEMaO&z%2Z{F
z-kuWGcY-FLJNuOHK4NO~Z|%GT=bVw@^z!?l1IE6LO1P1|k$5x5123dc-j~dv_=?+j
zTplj)&h^k>On!oC#t*)eRPW<PSFGapna(TBw%}sUDNp!}!Dj|5Eyd^%np~0(FE%Uu
zwhJ~ucXJ&rg)#NVh)5|OoWU+0$-FLk0&E3NdKJC290v;WbC54_eT_|ok%DUi(5E2&
zcNQVn(2PWKO{BnzR~wIaO=`;6fd`4RPqzS$^a6e@SUYIo)~a~486Fd^WazFPrEcYy
z{Y4(?_QY`WZ&5u<t!bacf)LK8d2vBa6vHwBv58zor%s2FS;OV*aSGRZO1|}cFG@Ak
zhtUvfh9ZYD;R7@-T}r!8dVmC*AK0-1rtz~n9HPiFevzPkVNgyD!aaj#pDX`zJ(4-!
zeO2C)Jkp48j4EC9J4cW_L{ghh%>7+tr$?I6Zjp(Q^B)%0=FPuLJ1t2a6b?M@!3YX*
z9#goF`d23e(MsX3ez}NM_Ze89F_ZnMbU_3Mhg0bXs%znbq}JGUIJ(Z1lN9Vwu~L7y
z_~I>RF&`qfmMSCVEL*ji5F1Kj_sM3a3oOqqMQiJBZdXCIlTvMzQKUEjU|CfMToP@#
zLXf9xYM$~)y3$9yu-S&ei2stkzTFS9d*PT#Z`X7m{L;H0?f*}}2myV&%HHs#tt94v
z?E`V4o5BNvr}Hn5;Rbp<YZaq(1Ae`nRb->-5AA$rVeJo|V%;~F0>Uvjeni2C6Xn#d
z$IGsPj?T`mon$>Btik(2nRYbs-_gf7|7&~R6>Knulb7rg14|Big@K8Kal&?Zc1EfB
z`#cCi8;Gi{V$8UE=NJ1>NwmJfFDy9%_g<9>CV?NmvoPR!nN{#bMR00MY?~d2?~!tU
z9nHG*=)(o}Kgwse49T|VuJ^+)koT$oA);^S&N7@CB9Ps}2Hr1k?0gMW(%`B!Vi_=t
z^W((PR@(pAZ@7(f?FDZdTYT8$hUl#l=g`mxGav&xxDGgbdE}r3Bo77=@lXj+)j<vr
zgAjMWmfs)=8Q~wS;(RpDHK`6A<n14E7pZ?%AwmPXz^$ug0mRG^pbr#YUsQ*V+8rCq
z!*SBDZV1RlG+nT0L*k^cg(O2g9y5aO$<t$(#S&QHMk(`rb|QZUoz>cIA_O0-p&>+p
z<A90CiR|fv!SHzmSfVGMv@O+yEg9KgD>*Vq75bRn<0F}~qqHxdDAh{*6tE*JQ#X11
zN_e{tx;#!#wm&T(K4}&Y_XMae+W@gfS$<uQn1+^V|ENKrHO=(i#*?c=WqkJdurpED
zqF*S`e%>?Bw|Q(PCunwT;UJ(5BxZ)(TKC83{g9Wq*fYAximJXwi5ia#tc5dNf20gC
zxOcr{RO{*Xl03Od445s|-xA~h_5!B3jhidsrp%3(G;a*H)VqY|LqqiZkRv_bhc-K#
z!nVzEsb2#;B^Y52UPZ)v!{ZD)gF7*5<vZb`RTX*hlNdIRfB03eR3(ge?6FD}C_S=x
zGB3CYH+rB?D}>ffk@{U;8idmYg*P?u^xBTJ@yxUou^fD%XvFE+Nhe)MQ6*DHHP@)7
zYC8X_lPBRg7(PJknx!Q-aD_b<RyO|6Oa`AZ#rkklShFazR=D4-;#68MO~7m5dW7(6
zIxbe-KdL9j?*m7!#d3DWp2D5gigp^&%tVqWHN$pz3a4J-L#TG?J(kxPyKtTn95Q9D
zvwByT?FrNZT&bTwT8A1>R4&1>as2%<n4RqR6xer*Ix+EuxELC=*x#1Np|a(XjM2ig
ziZ(J}YLG7qCg)in$sdo|X8gLi-F|A;%{_7zqh=o=o7QzxL1Lo|9K!zC%Misnh#=2i
zLX7Ij1)jJHn+N-)Qy^y7khZU*cY2j^Oh{15W`h{rHc<`=ruyl|QUwZQs6sCIVpvWw
zTkPHBQXL1GW9#WN{CZdT_rGX%m3-%3TCm=hBOV1fsWVm>#rNseUqRer4ZfIl4r_Cx
z9>mZRm6q31TvDW;>|5w-;awl)hE7u{Q5AgzG8g1iCr2;cvk<8lwfKp%YoH~Ltvu4-
zhv0h4u1Qy@SuiDrDXEP9i77ia_t5s<w0UUrl3&On*_xCfxIJ@*<c<${-B5a0_Z4H-
zXgx+`!95642r`<v@}Laks-{3#O1s-d7C5TDN7N-sL5O;u$}L{oruZMmh0h#<W7QWp
zCe*z5u&^dv!V>t3d9X(ztQv$*HL8!Bz$5Vt%E03r6lyWg%x}bX^em+i%JJ?Hw=7}P
z5M8#L#ssp!QqM503uN%SE*UzU+nzR5Y`>)8?*V;DTvEn9Q>&gXE<P<>yPL614<a72
z8vTJ$znPnxa-Q8%q}4xvAO@G8C#h{%QJVp-RGswEcSNs?Q_Rf+zrTxVwX1ZZQ9kaH
zElGPzKN@Vd{C*78nCqQ0t-gPYCr5g|O!%Xmhh1SpZ9&CeL6k44H7jC1VSH5HY|QF@
z!2YpIqJ{JWA2zdB0gV~H6iS(cDi<U;!~L)7EpKdKJev{2+1ZsI3A1dwa@4;Y{K5Vu
zqAw#h3bVv0RYz-WVZt}A4sa7E!#06El1RylHqkCve}M%m7FSC);0sw~yvs%)L$y!-
z54?6Yq|P09Uen<IL7PTx9EsWGD{!Zp5bsa94PAtx8T~ESzT+Y8gzW3H@u5XyYBQpo
zH4fgW5=6XeV_(Jl1d55h|9*LN7bmu??Dw(KOCU$6eajK0EZL_u!*zcQlrSkkplm<{
z67Xm(ebQ!0|7k$k_3G7{c^{^rmuf7Ff&j;%$&er>WKt5OSDCEv+Jw3hHTNf<w5+K=
z|1hkHuAeVa2oYoWKm0UownCGde!Uq^Qpsjaxby^jgyn7I3&^Wc7`lY`(mV5DyU0Y{
z*vKkB@ULr#xcM(7IYJ3GFhj(iSXFkjPtVSO;P|~3ELF!?SUPUC(UkDuVM#9Ud~PGQ
z5AKaY1~#0{uY5S!ibV09dE>6iS|<_bew<4n@#WZ+9l<A3b|doE|D3igGs&xyuyp=v
zv)J6OH^%ISukWYM3wpKf&CZjnVfci65&19VTf*Ew63VJjVI!_^kNG}5Pd(q<Is7>d
zJidW}l2^FVQbj<YE47?kC9go~fXCOL=Zy2}N<S>jA!AG$w+W&SiuzV&d^tQOi1wNx
zGTilEIk*1^AYpUfR2}ZYDlC8ZnFzc#`rVg>2m>wu%Rba}oBI43@}c}cAfgrXvzrqC
zOpilVpTyjjSRYQa<yBo7e(Lb}HeUwI4AQrR@xFiAS=O;N7>G5PgtUGwA5cGp%noVc
zPMdBkX%uf(6*R)~${vz8rC2~HZVhhqMzs4SK7(ajWstEvd|#~oOZ(R9yO`gMTp;XS
zF_7NtAs(6xYk!pB2;wFDcXNfB&;qHQ>rmt#&8QL>MU5?y3a(jL+4l7flPOz*hmjNa
zcCUFzs?Rx9<t!AtuX;No@+zS?B-dk4Uo?dEri?#&euqrpMA0~&gDs2zvJ%{|!M=TU
zBOm*A9bD8wS-fpeSV8g_7*cCFV0ig8H}GP<fJ>LIj{_2>L`1vLRPe5GmZVtBw!Tf;
zA;{&6DmIkjB)}!&Lh*|)0Q-0KCfeE(k=K6#p=c^KGme%Ql<f0f*rl1=Xw)^0T4%ZC
zaE~>${Lw_VgT#K;xRqnWK__@#3umZWTg$?q77)sWvY7cz-nMx>c9xwHPockAI$4KC
znen%t&Re2CrLLXt;K|*&P6;`65mfc>R`F;{z59}<oabjrB(e^cEOeRtzNu6j3%P<%
ziMjO4)N#Lb&dHY}5%20;MV1K4Ct*xI_%pX#>X9HoZR0+GZ{pwnCqRUoYyiJ)iKI<<
z<K9l|YUNqM+)z|vM8B04g10M%^PQ=2I79g(M!fC%i1x}yl15eI<+Qf`l#}0Jl`m^J
z7?j~@8J;s|rMEfXPugsM(@eAEOm*>%hb>(jxr+vJ?(|qxv~7djfRig^^Fw_>xJx4V
zjSq0k;@{$*u=leP<K9)ho|I6kX<X|G+d41p5);p~y-ncN+du@0p>ey)UfU=H9f7Mm
zSqDc#G8)!yCnnA_6P8pq1cXkqT+SShgTG!D$Z#$<kvrL(>@K^OV^wp|$km2fe0+Td
z{Ep#MZ4}~vn>*VnD!=P(2?S*$&Yk_WvtMlS&(5V%98}<SiS_f(XyxEwLa|3ino-YD
zF=h*^mT~WsYYe7a5XHQs@c4yn<PdPjITTsBC^+y#w1-z^ZmGq*ozVkdU<(0IV|ntp
z3+}0M2iB8?&C32^r9s+tTqY)(M2y6;QmIkxLab>GGO>~P$d8{Lzv}v@q$Q>xotzR;
z`C*&4svq{?2PeL-h#Yz??C>?Y46&rtHs@Q@yG2|QyoPsw57xUAGHbl9O}O@|kdvVI
zZ67}+DZ6meE_T?+Z-g*w`X5_xE|tFH;WCW>u5x~BNS@b}f3vj=A1J2eb=kH`&^(V8
zxLj8YghR=4DQT+wy}?mhslZ9qt6})vr+hUW)BY*z6NyK@Tjj5LWgk@Uho+*p>(aQ`
z$+lKU^>&9ZBd@9C7kQL##w0lHM|p(`uRd7F6zc@}#Yg@eC;vv^uN7aLaO<H~NkUv9
zT6o?-rWI!ak*UDruIRn0=^~D*iVvqw+=DKt8GA<wfB-q)^X05Rr})7M_c#aiq{44~
z@yL-*Z$tKTwVwR497_Tpyrt%F;6$de{}%vfK$yR_OIWEHjBzjf<{mk63A;Lgb##y6
z07cK-@e9iwPcbFGfJw1=j$C5NQV-h2=2=JqgA*miZ(yF!HHe3L2bn<!S8#4$5&}3P
zU(|2~e}Onn0zE8XP-duL2)$)prRaNDt8j>*hS=c>%}HFaN>_^b4wd(6t57LWdbu)-
z%7I}*KJNnT7S22KmKCt&`{?R4cc^z%Iyo*b*8KEOL@=uqo8qdCUS9Qa2bVQ+NN$4U
z?d(h>rQZpZ!R`fTlF~Wq4Sb8fa;he5Tz1=-g>$%oA2_-kRs_v?#q_YNLrRWzu2e$x
z`3ae7%c9g~CwM#mF1QWAd+cI2^_|)}NnG=^S?l5CobbWw9HhJf1UWdocZ@R`0(=Ld
zGp^M1vECgtN@%drt1wEy4^7GrnnVfyW#^XMh|B7a*5im|0vwCm05U}Y9kUA|2OwrA
zJ`i+Ut00^a@Zo}#;IIKGKJNm4<&KRLlVySA2OUXiIDLCfR%rlS2)6vaY}^E34L<D|
z%dAb>96Qv^b)4;FJj}F)fmH)%Go*EsdO9@V9avWCS$cK>FH0FOlX<Oh7hF3Is=46Z
zbg?P8*zi*5Q70a-K0Q<Gt-Hx-L9Ev%c&B|M+}2@09-l&T6GZ^WzoCj$Lrg6$y#}ZB
zkQO&hg<BkG(dRjUAE@^*T7-cw<!F(k>%poM8`bH%3r|`02Vy3f4z7a$L2p#euGRoJ
za$WAPTiB2my6HVHeK^TF!amngb)BRe8z`9FI|xPhu73K)4use<*W~6y>~+3+2mm)5
z*Fktc6TFkjd%_H^#WcSST#T@^ch0pgDfz|!!)hPHoZ<|z@kw+o;)A;SgwR24GdIs+
z4bQYCet@t5K8X=PX@{Z?>J0{Vesg;LDXwwefUJ0_s-5G<Zr~*9*lzSA;PkM;8{kAc
zeqN?P?e~?FMVpjma#3rrXIS77T&n`)01setJ&S6o*!TE?gPpdv2hHzwxH2ooRw)i`
z5DJd#SKCpEK&LM~4)6rRd2&kPn#Yv%OnB46u>NkKoz-*{fjU{GHVlinW;BZkf8+dQ
zqm@=4ZB!japz6xV9X%Phos=y;9}s;mlMic~yN*}R4{+d65#qB#yZPx&Wft6`AJU|_
zso$h)oY<%s<njvL-6#!f%G+Y-z@UuB9hLhX-PN>X_ab62dN`o-_B#6mQ!KUFU=S^;
z2kemZ&CFj@Pjx2KnB}N1>aeH@l_7#3>WW>TV6S)^M=L!x<5(IMfJUiS?NoTWv;x2_
zIHsJ$fN?1x!KUyU+>Er$7$=4S`ljVHb|3J#e9+6mYRylhO8xoZd)#xpZU^PoEkVmK
zTzLM|yFtXPQN<n2jmwH_!gqSz)pTJa+hB4^2O@6+^I(K2bINOgyPsb6AmC&J<#Q84
z239%6^qN*`_XuBk4wwvWR8Iqi7o!hU?p-vMS*^ktG^xpjLBUZPFTVhY!#WYZmFbE}
z)eL~cEu|9q!lu9AK4|wiQ}ntPA%y(-2I<0u!(p(^SqYp&9VDu&`T`h@(hSAe1CN6O
zh|VQFBndXOl*9?1;{M!_GvVjA(V{q1CoK7-yFhA&4o_p>JwTj*z_6)g(WGhuwH9)w
zWmde4_Dod7&|rtyH_k)#^q*k}aK+yFx|~G#z-bW!YBZK2hj6h1+w@VCCzHs%Ww92l
zscx68GlMy^03b{kY@bP-0*P)nx$$WO3!i*-5dk0=Rf{lp#%1j8)1XwU3#?pBQXC0q
zxfgeyA$Ml3hf<K!2>i@e!RfhZC*Iyy89G4T*7A`<Mc@r}E~{bamY<Qq_5xa|MQ`H;
zB`b;VDz$*aUKqcy8wfUA{?dF*Sa!9Dx1D>q<R~}LscuTUaNp+jT+q66ha=H%0J4f3
z!0kE|69m2ayv|g^7ZX#81mlJu(iRE6jzXi)8l*%DBcG1N`?~-FxVS7e-}0+|zQ>C_
z<_{!5SB)A*BDpxn{WM_rE>9hRfFr<F;6J4-ZgEz-F2)`mLrL)N*^-VUH3~ru-sC#>
zI5vh769C5GhFGu-Qc}{HSDfy4*;<qcKH*K#acIP;kLWnMeu^$SPCjkGCXR1AnBQ$m
zyLOI1!`#`G;r{Z~A&}?(941|`PSm$$Y6K%Gl6a|`j(xdT=C#8h_{^sS6gO3?C<@Qh
znk0_{wbtmn04CC1V+aO5<y|sW2)-_=kB|$yHnvqq6#*%tBsJl|@Dc_mmcAWjsh%GJ
zV*-a%A&?$IXi{WYclTg@Mw<o@#5E?K&BZxhr5tWnlAhxtg4!o6n$5U9WQ@asgTj;T
zm3_{;N~I?3>B1ryiv(gu8O`S)T@b^ly)$6vfEnRRQlQwJOaz0p9r16uk0N_8Q!Qq3
zT`T|<qSr-*C#HUW;Q|#&#!!?dc-@pV;k%<m7gDFnS;L+0YRm5|8itcvfL_XRskQXg
z54?cAy-|Yjw*n$@R5$s4ldjOq6CPh0az+Qm4kl^nK^TH(6tsY0a?w>u)yEv11SEHi
z1fo9g0^BhiDt|(6v?RJcZk^RCp9AX9a@W*`h3qem3&;4uX~64r&v5|mk}ShIkznBG
zIiT<bsi8f;gG%jE(WT!bgn76XB()6lZ)$=<hMl@Y*zufsZB2bi*R^o~;;u<1+m!qU
z5|0(F2lxjn=F%W5;Wl`wnj&dV!(0I%Qm+Cb+`d2vFI|>}gCV)70nB$z$L|0ZuJH>W
z<U*7{`32{(a$F_hTgcSU|9K7;?r=;JfM~VlR|JDvh9_r+sfjFklQg`E+Hj<48O8v#
zOJ`b0hI+HK3<arjGGSroMoEonRlD~Bq`l*b)B?=#qtB9qZ4Cp;JC4oz383*y_uu<Q
z)q5;aoE@CP%?9d@UWhI}Z&2O6RVR-@0CHJd%niJ3EXF4K?b6}ov9BZu{E}gu_)lOB
zB@iA*weFv9P@b}BuFxa*esul(fq_|zt7#8~G@Ehn7hrh@F6P93QMgL0>z0wK)BsEm
z&sa>hsZ+SSa5*VV{47y-_+<bdAWu$iyX$?NM(di|eLcfzFnL#wHmV-pzTNcIs7Y1J
z#v-{&Idg_l)D~T}jw2o)aWdF<x9$Bg&8lD!eYLOaj8%TA>z)IAE!Fkmkq=5HahgF`
zq`%HnlxNphnIry{XOnhtXveTg!x;n21_yotci@~}MTX;)%A5(@tj%J;wx`sIpK_f+
z46Ei${zf=_E=A21Zvb5SiIq$DzOl)ux04ChX`*~7$-_NQfbz%I%fhdcU^kyNpK-Ev
zRZ^j7qUZPlNlqT?-d)MABvwU%|6Z=^*m|f7&X=nwSAkh}mVASYk(es`#t>jObxlwJ
zhP+$@0F2o3a7N$<&ZuXpS`K)f7g~qC@6=@^+}@96Dso&4JByySn>o*$bzB+m>_Lg1
zZS;M@yqIVnH7aFh?;HFEWL!6=%>nl<k!@JzW&0=&U?wggXS)0(HH??oReU7FIXG}B
z=xnGj5Ksv$E*Ie1x9?i#xxhrGuf{A==d%`x64aFgQLx$bbR7z7Gi++C=5tWsI*+YF
zsIH0t?<h5_teX(dSksHHoO{IeOi(t2O#)S{UVEv#PRnUTu#DOHPZKE|che$B0m*Q=
zv@0|cmezSDAhf(CKc5nny9DFf=3Zd@d|fVuk##5x>w{k^P0O8}kcpw-wudQ=kYgsW
z3SG|PH<<v5cjj}(F!_Z_#iom$SMBiM`PJq4BxzWWBl$a<Hz^XJdpJa4#}`<_YrlX~
z1-Q;Oagai)Gj}1uNbSJw=_IYypA^KO4?2)#k`N75|AOcn#<KmE0)a9bmFTHYn1NL3
zr5iVdwSr;q4ul5hl{1Pk9sbpS-zaxh*k*$&U>S`>abL4^vHT8b<|JK>lA{m4alDfX
zBJsJOu8o+~3S3_9sA94=6_6x#tSZF?9;?-@p67xMTAPKQCRkf9+9t+AEizwoAZm@y
z<Qpq&8fkt$CT;KOYSS77Wl_T{mp#J=Vm(dQGhXaY-i4DX46e7a_mPg&vV!>L;g|8w
z#04W4R#9Ik{;O_>89<>qeXYUqHv50pjPMsyABX?qbX3>X(V{dhhm)fVrWu7A44q@F
zjO!lGt3D18hZL%$h4D~Rvhj_;1E8BlPGU)28`V1(cA1;g@c0{#$uER;XRkai0{{Tt
z{%HMwQXHF6x~?KFi-{jlTe1^<{nPRON$WhPnd26(L4DW5nO$gUQo|G%E`f-ju9Nr8
zjafy(XnN2>dlF#*;MLh4kho}kDGWEPfZq)BJWzS5raBE~77U#$Vt48bHc6SZ^(gjo
zpGPckuhA$)VQWwF;(NNo{|;TP3PghM=5xA9DbPePfVBhpg6AMj{Kle_b&iBcCP!G{
znt^nUP23eWq_6<sjaa3k%iqVLzHpX6@)NMUncgyT3PXgVfe|YVyDs%yq>9LX0o-Gb
zv`y2pd(`_`EsNB3@@s@aC;2<Ji4Ff*zfyyN?;3}*>#*--JFT{jzd&^v;+b$vy6qvL
zyHxq8tkmG7Uak!gZZ6iQag@+4<|JPHtrYo3;AcTfbX+;lU4534uM5xC%}5hi9NY!>
z)d;zA(4%d(n@<rDpHtsMF!4m{Mq83qt)K*?Ql>v)H4=;E2V`Hf(Y~K<!e?`%Lx+>4
z(oc08?<jt7+PG32YMI7uAfIO)8H<*BmxlXkU+`(}Ovi$PHkr2RKn-P!J2_h1_iWwS
zb!mY`_NDDsOSFp!RN|`_FdIOBG-vYdX>R9ZhSluBXjS2Q0b6oly7XE;bXhWuA>qLE
zO0|z^cq1H1#eG_WRNYNe#}7c+a$(;M?$UiWQq>6u4BnZmfi4YU(B7GfBTC~i)yZLi
zp&4Bka8VdOcCKKcq^_a4b6!*&!&aHfMXIp}RBjh|kdy0url4ae4Hyvb$RC(<CBdIh
z=X%Dbdg$j9JZ^K-(>NS%B7hsW!(c`CGIc04VIUSZ>-!d}a@MXb;w1JZ(?V)(Ynus0
zo7!}_MstxW#Y@Pc7JOe~_z`fdlT{20fY)9my#|c>Ub<-+@Eb&lHJIlhffd8vI}q>*
z9E`)Qz}eM}S#d0vGMAN|5=kf5l+utOZsInBK|bVZ#r)+@4*@Xt3k}%61QSn$#Th~J
zjX)X^JXrh2J1Gez6%Ypq%#@V@1X39;x5E&3&RWPJ#1MclMHn`vFpNR*D*<|m<mXx?
z6s>jLfzCtV$os%SgrEIf#1X5Df%UWtR%{d<4(vF;TUu2B;VMYor(-$0t==vl6-VWc
zSzl)m`!l)7gr)>kXX45+)tjYpn{==CE61`aOf31(MM%CFnWg4dIZmQDpgTFIrtiY2
zC2<U;VGY4hO#yz2*ldn$N8bS1bk?_ToZrmyynxIzIn%7_LD~IR`M`?D1s%olFczio
zEUy5o3P|^P8%a7MWhtUuosxrEaXeu6Cm-bz0F<w3PRsXXP<(EK$hEjvSa?p{;dmtr
zmGFfoegMOdE69X{%D1R^OzlD+pj1b)P^3y}>QLZRQixpt2V#(dTd!JOP^K+06c;H%
zYtqK`7B{)K3;<?Qb&;|MbV>>XjE?ohu{I|$_mD5ko`STMRfD$56dIe%8*zvRmB5*h
zDBP(i$Ib5JsjuF$xJRnoU)Qh$`*d>-Qt<^??>PrCJc7q+7ksO`Fs}t8yD=Me-CGA0
zs&e!ko*Cy#8x$Hz(pl`PZW<(En$uQ0fO&ipt8>c@UC>lc+mwpt+ekf>rk{qiZRZ^#
zO1|<LS=|Mk(?RW#&jV=mSZQWLQK9q{EA+X&v+G)F3iqeB$n{965`(f`j+rt|UHVyR
zsLFa3b!|BOExm66m)q!dQS$3X))dcuEYbtg&Xq*Iv#2QIt`;-74&G+MAjo(hl7<U9
zEWAKcj+EBTd_y-Ph#R=5p2}%s9F_1A%clOCkc88%TY-O!+V&<XXpvomQwcu4LSeU!
z#<!80{Xj@QA3(_;P#KQm3@Y8%^@%tbeGP6H>Z6h5sZo{%G(62+@qQp2x=t0iFoJY*
zvJN~PHpN^fKY;-F6F`0jRXD11FsUtL2&X$hw1%<dKsCUu?_1X$spx`d&_vudZcYfk
z<T#CT92`-)D~mw^+;6&^Xn_X8W^-)a(}YITzmSO9%D@gdK9H*Msz<6}H_pV}I7pKG
z)2N;^>;95qEO)r7>3_LlcIgX0)CzHpclMOzEF!lBtA39zsUj3h6T_Z2aAg%M<UsH2
z61N`!GluPSWP5n*jLc|&>7}_A<}%e#j?5F?08HzJP`t-EUtF;j#++fAHvp)BW#=^j
zn>elQR|UijZgaizrLx^~Ki`1n3sEx;o3#AMsJz&FU0rk-fD(H(b!l_q@Ch@lEmIC#
zS4j4LD7yVv3*Xv|re!$RO_C&BqEOuOuc<7no;xQKqCPWCH#4&|@6$)f`MiEXGWBgt
zjYP^hOobCt0Bb*C9toB^Q5}H^1{~MHI4TB8?n-|J{`xla!m1<5e=h#7_*~z!=1ep<
zA+Sk<8;|=K$I@49Uvb+r^Q^B32I%_DLF7K*ML~`XLJ6b9!LAJyny|G_ojXU79p*DV
zfkGNZ(Nk~wD%XiLK486u>&y*4z`l`YE#R1%1O*PKufOD6{Y|=6bnZw~g&1Irl)4?d
zmV!Uv<s5P(9muVlmisvoaF;bxPKD##pGWzb%p`^7001`@o$(x(V%f}{Dc%!;5lQy>
z_`X@2X3+rGsg)oS08*bpLUjSo)3|pW0#e8l34sBms<mnI02m)hwC~-X*C<Jz0zMr%
zQWV$0!LGW0fds#%j0c``0$7`PVr(>VjHBn|VX`jbXosdpHW_6BC_Ihq8m>5OBBy12
zAq@ik39XcsIs>5Ca-^PS^8iofGORf6sq0yzG?++FgB%}#;bL9M;DbTrd~u=*Q1==2
ztKJ~yTSShN4pge90)p`KikwaJcu+f9Z5tR5`xs^P&V&Uvu{2LQ$l`n2jpWX?Bq?y&
zI5I1%M&K1Ql?B^8O6xMxB)hQQ6_W6c;=9xCa~4w(6<oMwFp!IWRX{e~UFdJmgQ+i&
z_ys%p#7G%dq6pZ|I7uW0qwztfCR}DLH}y75o$5G16ko;lyL*_$m%cAmiHVrS1cw~{
z^Bhn?^=V%sM<i&V?Ey)u0qAk9(B9tLN?DL98qh7mDWnne8me+A|G+_6((20Bq(~?e
z93!_)w^r|Ux^0@qO2Q0X@fvP;6WPu!z~>KX4qv1Zr2E?7F-U*s*#!s7(T)CpyKo#)
z{BMN^e`#I&>#2{6{noy#TC`5y^m-|5Thyqc(RwT)!?epJt#X|mER$vdD-zb0eXLF^
zO^4#zEYfQfVJ>nr*BQTY2O*x+U>09`o&|(y%aCRwp23>}#~wzP$}@jA7HTQq2z)~0
zez{q=Ua&G#C3-F{G>F7=RO-Aw=u+D?H$G8Hu3^1PG%Xn0QQ4tq>6YeCTY4J@<;sP8
zd*VCcSefQXqGT+mLEX5oQCBTePo!Y^wr|VFyg_gHFqw*04o%wgFTb$CCYccV1oLb4
z`#hXs<Tw&O5O{XJszBBbhsAeX%6Zr>)740viHBL;zU!H~=o{!bQacfwT=<=7$3*W1
z?_PMFVGwbgleS1?M<uO2*KE~{L>)Z<z;bdNoG7QJ+mUJvG=P(VW+VBYUn%|%-pRxd
zPxEtz?w|k@9e9Ea9K(JtBNTln#SEC67SbswT4E@`22#cI;}=E%Lo{ikkURc*5gCPD
zhy$tzG!I6@0)T-)XEr8{D)Orcde8*fIJJIXjHAWD7O5wPgJ@u0b2!V=1OgIUaV|9R
zT;SeSLZU!i;I^g)qf*Nf0}ME+u(saDnH$Xu=e%>dxa)>^;xc<b*z)7d?XmUbx=lmO
z97h`o>4M!Gm87|8E-U{??~m%4@=P`Quc<L^91pm1epLnGQpuQTC4r`aAy2Ivwj=%~
zXPavEB#3P#1Wv?>WhBzlfWy^|7~q9Hv-WGCOnElCVZKwdcKhlU0mgp`kKK4jYtkZ^
zVfO4G1DJ2vXSRJF$ZFMBg#Fx6B}j2#w3cbmt9^pA@@a?@aJTCkfIxRd@ahE!>(|uF
z`bbO11$N+YiAM720QoIZ%G>ap@B=2-Lt0)tv%c&s!}}C;)$##&9GsuW$sDA%|9POx
z08C{!4y4um)(4tIIl4sroQs>9LChk0l8_Y_8xD-5woCB1XGp!Qcfbs$J<j8yAdF1!
z{5}Bbn)o!*uaT;$J`PBYsfQs64XMR!fY0+4l7lJhx$u=whpNbojv$bD8iEIJsBnWi
z&vA1lIc#1;9Oc?frKY<8)tP<t!H)G;?)Si!*2}S7;4r+Z@sQvuG+&kvs|ziiSK<`-
zZVoO41+oS3GhnZ~N4a1Kb8-OBnmOScLY72H^@rxuep<$!Z<df8<-*g{{54hZQ5iyn
zzn*3?(PdJEZ&^gG0JF-g34tO6(M!F~zSOX5YKCL>?#hrK?D-zLg5O0z1J8FMu71lh
zE;dgZYQ>?BlPKu$(po0@S{dZraFYN`jXh{oiop)f%>$aPOFeyV(<ctxy4k5F)XIY5
zE$fkCN;Jb)Bj!Sr${R<M=3KDNR&V<H*-w&Q&X91ob#Yl;B^`FLV<hSVH&MlbzazPn
zLvsvY{B;gW;&YLM^BsTPxL9ob0zwlVp0$0^D8b+9+I3&LVPkt^l^gbHh?ZhY&m01^
zja0s}6UX#moo0(xKQ2@%3*xa}zTWU6zybG{22eeZrzx=(r{H+DC}TVDr=x(Js0U<l
zr!!>mN(VnTx-5;RTu95!%y+{vy-wn+H8WDerGs6yz2_v&*EvZ5(-V`|(WF>h+KZ8#
zgZVDrj-w1A^j~K95r@*Qjf7>66a)h?-O$Y-gVsqQE_1=ks^?sN5_4<4GzPrer<<;s
z8s>nggBQ5z;-dLhI<|}ZEQ68(lrHeUaV*qQE13+E4GZZdtAc|%W)}{hHjS(@&K2P2
za7eE1)WAD*Jq%s}AcHN^q`7C?^w)*pz*bnYV*@$|T}V+Q4TI;d=S#`!WttFZOjx^8
zQrmE`oQ7HnQ1HOxKMw$dYR<?2J_>VF6ab!i)vu9T2X7Fhy}ySG+-LBrzXv{@)!+MR
z_z|^;tpgQgZW!u;#)Fxrq(sVpgA*lj#10ywtJA`Dl#P9s7)Ju;?{f`6g=jhq$M|s&
zZ`0!KF!&Lx%Ht>(X%!d-P4aLsi(Com%b8wBQfiz4n=(l;0Do0erFarn=5p+G4!k9{
zQs;hg0S?b@Yb0Nvj8zW1!Zq+Vf^zIq^dJMA3PA8Fqo6{kipbBS46-+xbeD&Mf6(eU
zB=AM!*B-0v>P;zq8dZRx3Fje#l%yG^OS{g>xLiXD!)HyyB+MoS%myE%@`y#~gH%@^
zeSh^FhtjGUH|4<xkJL$)bMtkYdNml-o49hDR3}S!Cfn5N+|u7pBMSk~HPCbsFUWgz
z*DUuMoY<R><j$VovCD=<($_hzODS8v?3spR8c~x@<K0EgF?#r}*TikoAxWI?Dx_3(
zjbp(tymv$~n*jUmRr(E9l>&>3*A;T<CbmnF8h8wjp@aPfrx8lSpKKWxJx-1!erXI!
zIj-^|MpC1iI^z}`P0419l-C9QH36}a;IN{M>>durLu(X)?kv*fW2+n@T#%82TyUUH
z9za9K$I$a_4+wnXQWJM(gv~QKKTre^Q%;3+_}{KY_~7orbNKO&q``(!j?3hXWVU+T
z<L;mdN6eez_M9lGhvGKo0gg1?+5d)!3)i*Uv+EmNl5y;&BKK@Mze{!1O9OvvSb@@C
z0dms#9in`G3aL|mA`~*pQ+kSaZDZ+>Tm=J9{%h<QB~=YZx`QfKoD2n}<~VIos92|X
zPLvFinUAJT@(d7PiCp4EaGQfpQ<T<XX86%Z1k5r5_UGgsWaMR}qT#e&39~|#3_Pg;
zmj>kE^C&w?@EkT7bB7R*j$^c&snL>ccB!!slYPz$mK$sHY}5uE@j9wV(ytUXcvdJR
zD%dj-_PA3SUAS{ByE|PI6e?I5lR}#9T6QzJUr%8$_Km~Q+;S~Y>!^_^$^6~X${MCU
zZa%q6J_o?0)B*6;=jmN~2tY!?A+yOgt+9@0qeYXmuuwX2N|Pcl!~GrsgKfr*1}VY+
zaEu==BxhX{v_NxwW`O~ar<3h82;i#Krwj#kG-@E|a1`a!GTX$PVNLF|18(qXB5u<c
zczAg=ukY<*k?=W<*R-OXgE|vEgV_}yxgg!~OJ!1t+hx;e_)$Bu`_RN#=I6ES)sBv#
zoZ{eHw~SJVlm;<J*})?=k>RbdCi^w;3b&&TMv=W%(i$)Z1xE39j$qJ8;d6A7pm@+A
zk)i}A#CoS+DLw}`<|uydKINf1Ik2j8MHx#vuq81XZJMxQkvN7PcEc_Xtq=r6P$xGO
z_lj@HMqa1E72pQSPE$-@*Nz8bm7cSX`(QzW>GY&xrMg8rJ>lS=tbry_89)=CL|laI
z&75N}h)x;;O#i`9k~V1-XAjPe*#t=bcEcz|Eh_sDGNBI4Gri)8l*u|(bYnm(n(gqz
z(nnFF%BPe1x~BiI_^xy9_;pl!TTQwu!m4)8f0L{+n68!}+*te0q^rZr++`+afgm*8
z^eW3#_AB#B)30G_+1%6w9ARSoU=%ZZkqxJ*q(>K0RQ$&^F8sPMNbsblR<xY}j=;PT
zYy}WQ_mV8qXkc?g^Ae&negUgqfSwxD>z0A^bn+OkvaBd-)Sd<@f1boa&0CA_0-S)u
z^InbH1006ohod-Mv9p>$EkS>|oD?W8gqQH!2~?5G$)dDIi*`tGz9fmx-S2~@I_lJI
zxHP1I1JkAA(0e0b5BS`saFTk;01eih>D~sn!-bZehOC?V`IA9qq%jL*g{<aF@jAi?
zB`NiUfzQWiuh;2;KV_C9&BN3HW4cZ4rVPOfkh5QA<W|~w502k&8Y8@tUc^18Z(EXC
zarbVLh7P#HU55LxO^FJ{v_ZKvE=4%gAP4<vPy!`zB4>BW{MDC=B5g3NDi?;I;f_@d
z3+0j^8%H#W2G3U|#@H}1Jh(MF5NmJZNM%(Qmk6tYm4(-sAvlxcGULQP2UxAqZCf-O
zNd{g~v}5$6oNJ;-Zc%Y+3B1(y*HsUez<8X*B2Ltenm&QGRVLq~!f;JfxeY{7OLiiH
zxYLKc&Zb#ud>bh^ztgV-<935X<Hl%^w2`xJ)Fibo$1;&)ZfaCB_~15A*-eH~8y~8#
zb6qsakz+gnu>id$whm%?v5P!3V<oJq?zhdL6aI2^KXjVnVrKN<fRbn73OyP%{~B!K
zsbhV!43wMW_G%_>gJ_YW2UjJ*i_F)A9GX1qI@h+J1Ns$Al7_@%NRaJWgXO@qb)Ko$
zT)Xsz4=UgH1}g_b7>jH44{ilahL#|#q!&_n4GskxO^T$`ytyUQqVTmV=}OH>b5SM6
zgU_#JnPeR)-h=J&QP~dW%W28-PHJ5&G1SUv@b9J>1vVMPP;wZ+k-KSCRj`~Y`aEgW
z>!&w5&j1u>G#M-MC_QW9>F98AfP{pyeKXlUcx*6ou1bn^ISNFpMWiyEJES=+UuTEI
z?&&Vg%6!g2y=lC3+pq&P1w)uMfbX_d%bAA!Wo{ksyOyp?dfEu2+{~Knr1d+ECP^X9
zvc~1Eg-%M*T}_APjQb&46xfDg0+N8wb8fCe07<PO>L`w*u#EIsg4$5kr%?pC`+)v)
zD@Z%!O7(;sFb;eq15K(}T&A0)wv(w(@%bIeVGVQvey`VEQM#-kp)Hzmlqc;8hb3B2
z0j@)*%3y?U_ET2q5mo<O#0bX%{3gQjz;r|R6m4*2I4)5rfOUvAt_;fG)0Q&Aa;Y0l
zGuKdpFA|<eKHT}ah`B@>567bpVHkRNjnn`rnIbsiR>zSui7HrXDjMd|B{)a1Io&cG
ze4@0jcnwEV`sN^wgI_9BMNc6OUG)aQ@-A`b_rAS@nwUt|-3>3t5ltE&^OD=zApg`d
z&o&!Z^O*j+m=|gOKfi;}QcdU87KOVdbsDMkTdFyU+ZU27=TEpT-J;bnz*;>GI%Glw
z#&V5sq*CN4x$Sb{XSWtP8kN%dEO}BX^tsK9Uq>2$okdN;qS2CitOypp;x2G42xuwz
zg9Vx()Kd0b2QF;YNm~#2u_ix0?SqrrOzs_+qe;0dRi9BAwGIa!{5gjM8vxz<m6R#4
z=xKsM%B--On!Q&l25(Z00xV(E#;_)l#NOGUG#YNL7V%OyjAzFJ&+Bm;49vr28PYLR
z#)hxfdY+);KwdJ@i$)?>lkvQ?@`Y^<?YT>OW*3di>>{Hu;hw`&o$wJ`hifVfFlHmh
zq>DI8fqhxbs6g1T*ro-bU*Fu9?g>u)ZCX}^G+S?D=MNy^oj2@#l|GXU#C&2(LpN%I
zZ=^Yxk{z0ncuY-D_XU5S;dHMwbW>Mm!5OEOMYW~EDn^5q!EwNcd81&J_s*|g(~Rp>
zIB~tfYNI!4qDXzjg$vj~E8ETYHL}~MDD@G0+*_t$Z3AwBrnfym0yi}8OY6GB`#Wit
z$p>p_YehFK*5%XQfk67unJ(}|-&T;4Uw}m0Pm?pbbY26{5%Qp#{&#F`9HKYs+_1CX
zR|qr?gbP|hLfzJ#924{*eaV55a86yOgrW@C#4BwO)Ml1+LDN~4$~f3F<?UxRtspq7
z!*fB?1S={@kKhAc>UmBX9UIcL62%cO242H8csLNNz0@=V&TeLt3w%??G0wHE6upxm
zjK{6IRXdhKlhb9I<Xsd>F!gbVCgNO~8%lCT`Z9&JdX=cI^W=C8@r2E)Us_N#x$92R
zd?DpkWOOWz=?T${;7b`c^>P>p_h^u8xz6^r*h~Cs2@16uoCw!R+HoRolLz3qI!L%Z
zut74nY?gRpG%WyaMQW^negr@{Wv!m)@NS^LQLM#k$zUWbQx4KP9ve+T(BgL)SAmlL
z{DC-&$7DP&SXJ}vncz9@o;n0VC1>q&Pc$`=R&P|(Zg*6Y$J<EFYgOl&G8}5E>{zJt
zXWQg`0F>^P1pqSz6Z@+<Z9l@YQtIPK;@H$luGMZ}2(dj?<7ageaYk^IL~z6hKzAEU
zTX4=nWQ=MhdZ2OQK0Rc1d|<`!ou*wDeCgnlaQ$De_(t6ha|%9i^GHs>*iDVCpO<Mb
z{1V=%LBoOCD}n)gm9|V_pj6&9ogBG?vOC5H4jd3}KxcVKem_Y81E2^<vN7uss6>ov
z4iz^1RZbKmPB7!xK41`PF>$2aNI8X_E6y>_l&%i!B)phq#KO)vwkC01CJZm*15n1D
zgKixMU6@Pa%8Poux_JYi%JG5gPyoU}4Rv~;FEFy2r9OfNtC`w7*I;-fU+1#sU9U-1
za1=L4h$c@OqHc3-5vDpYtvYp&{u;7$XdJd^(@;z5NX9CI)D0j|?o+^hYfFPH-zJ#x
zl}?iz>oIK*6q#8fa)dL1Wz>`>Qs=0bc_2I1=uJV>h~=ck)b~<bO4Wg=0Y{OgIR4z=
zz({_jL9gMWa*P7r3pPzTmIJqhTPzilwE;PQE@HZ1JYU^yxq_8w(KCu6#lziqrvrXC
zlWX(40EKa_%gLpMtv?|LS8nAxl!5)e%?wpZ-h;ez7|11nPOp7qrjF{s^na(BM>Wzi
z7k0Se#h(XU(!$Vw;o|vSx@`afL0U`^2ORjJQWl1~4Zv2v!5P%-Ev@4l7;>6z?C{w8
zN}J@J#0j*x&4n}ST)`P=E_N~YAS5uw$RS72<ec40X_~~T-I3Tj&DAg_EtYz&NImxE
zsm4HOI5zx_kghoB@n#JoxN5EJz{iY>rh@7aNC$p#UqaSo?>?>a?1f}m83moS&ebs#
zSgQjg!CKtlX2nKv;8m!8o~b1O1YSU!H0lN(S@g(nE6X$~UQo#$`7TiPRW5oUX4p?~
zpR-V~n714HA3{v4NVbpqx`y@(`-GV%2W8=<045C74eO9VB(tK6<-Gbf76ON^ezgd~
zS-a0&pb-T$;)`J(mD=kdOshKpWJsY6jsEE7Iw$OI;5ku^enHfXWmXzi$rW3{gS1(J
zpX75MWyyGWaHOq+FqtZSzZ8%OELD@d2YR5!Ebdp?>F$>(Dvh=Q*J6YcNQ}aavY<k8
zAb!RNaI<G>^*oyPxjn=EHm~o$GBiAI2l_3&TjX4?p8Y=Jf#(t-YuBSU;&(KoX-nW2
zwCcpGVcw0+$HITQE=_Sa_y7xwPvAIGp-J>xOV81$*Iguyl>^aSYZF84Rbo{!$LV!!
zJ;EonzD1M0xn`whc0a2`F7^dMiY+cJyN1(yq*av6WtgU38Q^4+^zZYPPaNr$d#_Z;
z%VYq?dy~}u=Qhr#2ZkftB#Yvc_KhHcC$LG2BOMn^_dATqpbP<%@32qSJ%&`vzbfBG
z{I{}gQ__8gqHsvGc)a1(NVRlQ2b6RA6oVRzG(oeRV+RgE58t85_wlghcZgs(?rJo|
z(^E2da<Z-$N@?ouww_XtO?cy8RFY&`h68@-V4HYxC|lB(slzwAETdxqFy=j```zQ0
z9`-%1(2(?`E8}PvQ~DC`g$pxEQQMJ7C+qwA89WT1uF0aFrY(Kp1pw}v<b9*;nB#e!
z&QYbJZku-a`@M9j76ufywfn&@S}0aA#^r^p)N9~jWha-xVvhrywb7;lsJfo-LLzaF
zqObFO^f}mCkSaL&S3|nUyR(>-tCPBC^~^LJp0XIfoLd|XmHfm9ovNm|w=9(sO4ihO
z`aFva^advcp}96mLxbP;7v+gyJi3bnEG-UxKkA8f*Nkxpl&~Lc`B$J;6K&Qj5Dy78
zFiu=<PFu_aBzqD|5C$Ml&`e#2g2NMK%CI9UaSY)oakVX7gj9>Pk}k1yzK-5m-LE?m
zI5hDC8Ui*&@-uDc!Pm88ff<{Q=Yf!heV;}Ng32zYB*$@&YAjmI(&L)p!aplS!f|jz
zRxo_`o0z@B0_NnkNHUIQgUym+qea422JVkdl3sigH$bb`q9&`jbUi1La0p`FX8L?R
z*qzE@poA@0qi7`v@Aj4XhOp>BBPJY3v(o+I3dBJ|5=m2@-qQ?$ZzKMcbnwmKIk2i-
zt27|4Hj2(SQbBo=va;+e&8{=#8x}c#&6D;%j;e*<5_k@*HoN!HTg&Hj5&a>0%r%f8
zaJ3a(5f#D&iWMn|P8u<0hyrjdNtwtZ#_Wqu-uK;LAGq^x#QRK{vGl+1y+j+%AK*^)
z32vY37T*O=m5$LQs;;ASCBwY5VDqxh^3Y_aJDtb_l2DD6VJt8yMKTCL0_*BE=r>om
z8!qMvG~>>OKxioV<|+^zI^vzWz>&1xWr`HZKzU353qEp4ztF}p$V2Daa7#d@S=1!;
zhaZ|bQJ@GhvtOWu4DOt6!5~g25<@iiD}r5r-bNC{b*z>JX1u1;*LefP_RY=pU}vP`
zXpS<8xk&v14LobFC=TwzqC4~)<#4G!-SqO%3?muz2&i9huyj`$&T;dsxk~c?We(GV
z(O^#+TV*1K;}yZc8;{wl%usxWNSVYnjb^&sl9gto2|*es0)JhZNODQJ*3OxRp$?(S
zEUMTY^$+NS^t3PX2Zn@eVL(>EQTM0GD9jDWw{`ylO$wD-A>f$QoGG;(guyGT48&fD
zWodPsmRsDS#qB^Vt2xRrvp6CAl0f6wb3GS^TFyv>{8?h`f$v7cFw_md(mC+!W}z^%
zdV>kZAme>}E<~z~s_LF3LCwl>{;c3$nq{m<#^JylnztbkM+2-ES0I*hQhTYUg-oL?
zx%1BxHL0fL`pf}#Eppu+B(dn4ZJ4{TWD0di@dBrrG*LRaNqS%gn%S^4>B7s=EI1}z
zU?$B3<8r`dmccSGxw$u|4GPF+ON^u)z&@7TjB%iY*1gom#|EgX(}g$#@HL#q3Z4`r
zO>jPz18>AJlulBUx`bkp&_v@9%^k(HZECi$uvmNUodar(WqVzZls23?k1K7|uIWrs
zS1GWXmBTEj!Gqta%Z;x;xC{)k;wD`QQ=?f&tBI*4b!X?JgK?qM1K;|*!GzJT&h&ie
zPKt62qh`-f5xTmKq>|)W{WncOC_A`*Un0N!1~5#wM{SYXxDC*YPsuZ@%S^5-v3EC$
zWIXc$k5mV#P(bw*`2-OAu;#C;Ae2baMuwXtq*(OiG>}RB3sHZkvCp;{B~hPEmT?VZ
zCTeTaF@EY&VzH%I&pFK`&=b6J^IXun;6QKCMaSTK6lwgb>!zU3r+bO{G#Xg)+z8N1
zU@aYrX?|198vE!D0ALO@O!xVU*4zZ36!laP_ztiJ?z)OV|GAq;3e{rY%#{v6o-w>;
zdNv@XJ~(g-7fr%rCd+_52<?l%hI_I$?lfxJNiA!kfAHow(G;pA6Ydkp>}XkSW1QeZ
ziB)=L3@+YeKtIslx=wV4VR?!!xE*1`Ix`Rhfmv|aMm`=WJ4k2s!j)jb$6x+5`9yT?
z`BSVh?x<mp6zZE&bK`JS`YYoG_|~tJewsdpGd;(<`L(l*CCxFAYO(qRc&q4SP7&23
zd!siUYZ+A6`}_`)*Uq}b5A=Ib<>9l4)T>%eP!P|*dvZc*&6<hQtIL$`buzv_!N<e2
zS$)~;nhXVvC+w2LivZ(xNNJY``rmfCES7fSM>rt`P@P{>MOzuWdVc(f8O+F(a!eYa
zcbJ(_0djl|f7^G{4dB@BZh*W7>_rmo47|<&*beB<zwCiKu`;v6p(Le-&%1!@UOOv`
z*Li$@$tV<G1_&^hWmA7tnO52KOwe9tCIBKZAR6q&XXYKVnuKeWOtoqc6Zd^fSTaSo
z^mR_v;i_^;avapnYiuIb*#Nck?;ytiQt|7!+)0KE0C%onsTUyjgdyP;{qT4@U8xB!
z39rjR0N^C}@K3}Hulh`oWt?)y$}hENJZ{R6VEA(C>o83S3q~M_mT}taEL}TJ;~$sf
zqGQ}l7&wDdVCVtHIplQ%&}#46FEr9g?9#wb;@3tu%yk^S!Cg)GN>AnT>H)Chpw%1{
zEZ}*|WEtuOKI$A<g%|NR4;{-Pw^f-zp9&XpOqOAT*Q~}9Xc_<y&DT_Sp+=B5_FF0A
z=c<V!z#YPl@L`32@l*q+xEmQLi7FQFNl(gjyPgQU$$--LTF0wG54IxHpiZ`lFzd~n
z#ISS3foDwI)0{~+=z(U8EsbNVoiLmo=CGcI6Xq?Oj7HQUddiF}4#l|CahOeO*gUk*
zoT}-UhSf&RoB)IT;mZUbNooORv`W~)IqqWUVZflhx?QOhV{zIt0tcK&#`x_UC(Wqh
zmu!^ioq7>_pn^26AY9-VKAEWEbR&kvx}t#J8@T<|CfUF)84hQMi&vXz6?O5rG^Llb
z*X^}_91U+Mr;19$&G(s2|Gtg*Y%(cKaXa=(S0(L6wdb6&OD%X37Bi96)M%XZbJ_t8
ze9##;Dr4SK+Yb0dg<GF%Ky_82Nbh-_Aizf}9g`w!<HqtxEtkjkRb}c*l0k#uztQUs
zzt%?Wj`ex)-%g1}z@Cbd-QvC_aGnCr{K5yfhbvRfJecJ)qZmgixTh><m1#PC)(P}W
z9rdCg1dK+BSzA;DawXkuZF=gJ(2ACo#7wI+<iPiKGna&h0Q5CvS|fns(XybOq?j{T
zY9>Dytg<PzOohH%>eGR>ukLoen@SHvTNU=U*rXw@L0FY5A@dH{Roz?G<}G+A4}UvU
zYGz7)m-Dw326Cy8TAk+bz?CFk$O8K{Zn#dPsYxwGUu}}4pL2BC^KcbQFPYa936mOG
z&}TY3kEexacJt_d+lXTdf5fR8M;$|^^xIRmYjWK19*2+C$>T_hog&%U18lM#4jVz>
zec=f-F;Fdr_6u+n{Wz|l&kffpoA7iZ@zu-o9@Yl?oH___$t;&7(lS)9Ymh3eCU6XA
z;9WnV9$hPX)`7|7>zv!I-fGj(5aCb-AHX;kuM=i8`!K984T27XX(u6!w5ZjH{cnq<
z>bxi68=P-W65!C|u315keVS*1p9wcT`m2ipZ!ii6LI8d$NVxd~M}p)sJGJk#oi6c9
zYXUs5J-9QbZIgxpuE=kWB7pVgHgp*SI8&?f$WV_ohSg=sq*0MLuNbI4en#CQNS)&{
zR^;Fu(&#f|m4P1{15IoQEWbWTG#J=BZkwjQviK`9OLgtCWs+js_#xdAG#UxdFp30_
zNuiqu92$g`IM7gQA*-fk*JcKGX3t47f#VpYy2_|HU~Ch+tL{~mG(2eS`6{@j;&T&O
z1s%Rr8^s2tQ!|`ahG}<&B=tIT&)Q5ZXLV9vXT}0fl_}e!=zp0&P3)OG%`6UPe%+$s
zMw4s9D4{k^)GEIzEYJn6QVf8RwlQmX@1s;Y06_qu=u*#p`c5(dn7S;zGgCza2zi^F
zd0mc10_y2;k><wcD1#P2plUNZ3~>;*ldq)A(9{BeH1qp#2B10WxiCG34Wy1V;~A|3
z9C#g3JB7MKy|j)805B6_-?7ttLeY94fj>=s^P+ualMBb<*E9lv3tQc?#3=4FVopyP
zeul?g(I8m!dLz~xXG>*r+>i!Vtk=M7nsYpgsQi-fXEg<O`5v0Q%b5(^>^^l&Z#Qx@
zY_B$z=XH~=qM<lpa_^SM#fjl18(xy9aZAr#1(F7!`UF`8j0mKKAx`iSuv90^Lg`%w
z^x<0UcFg!WxP^NzCrZ|tWqCaSkH*nqk+{UK#|SuM2H;I9HR8x6D9QA%_P8{A$P&Tm
zcLxHSpLgNVn7}X5kg>*7R{V?62Zo)FRen##A6Xd%8m<=o6zAmv+?O&aG>i>Dz;V~T
zX>zL(Dqb-M=@M{j+%|QmCoCc`7SoX$c8S|mtK$9=9OkNEzu?MVAyGP4iR0VwyrIuv
z2IThasthJ4iN8H{ElA6_f{VLZ_Bkz0Q;AW)EGf#)o(X8UZY}IWaU0L|yx2t&lKgx?
z+h@RxNl=!mhqYrlDdgLv1F<Gj^#26gjRbXkmFe@~B(FY8Y^yKQZ#!sML^K68ZZDq)
z$G2(5A6EhXvI{;$a0Ky<?)YG)Nv;@|D@R&x5+Hz%E7vj)+%v29gabflGVqIv`dXAR
zJ`{@6Sq8v?kaFf3JtSaQjMNn1Jk=&}M03mlv!UyzNq*058H?6J9cFsm2D8nbPonRg
zQtmn=I%q16$c4s6<LQh%FZjR_ahq^)`<)(N4=Y|{XB6o=_Nb*#gOagwMOYii3Uxwi
zpt<oso)aY`k%*gbx*SQ2MJnKi-}6o_YC>&VOZq74BXMZTn!p#}*|^yQpcLLz2W0_(
znwNrGd`W9|cs!`+rH)s=@srxLb#x!3aW8Jn^0*ZEAVdFK4Nhja!4nQ(2;FN+q5Hto
zVamX{w1QtF`w6!x)n72FNvmaTnul>20MY8)X?4eM20cFc%OahZcsurxy65?zr@eMC
zMwO(^Tj8??)J(YZ)%iVh6osJSIxPJB+yw`kR|kLP20PeIPmfEk%q^4GX>x5?CUr~W
z4Qt?F7knRHLTi=<IL;e5J#g0n{R*bf@+|7g<8s$d!?SgbV8T_ri~H{b?C%Ul*ab&t
zr^qqY1<QTI&?arb=M?rDso~znZfZqA2a5mVWnd3axyYZHD=u?j1l3Qh;53Fi!*18j
z<!zN%&C=y8B^H{)!K@8-D;}eU5vq6T3@NnC=>$DVajsUWWcInMa7?(4W?B@D6!kod
z0q;vgM3rN4cU16Ijwb^0rETH|{Zg2N6IGMyo2GWI_<USv#<32*`y4a-J%d8j%-V1V
zcqDYKW!cNhcqg{XwG>k9|Fj37`&6j->;k}a?0QTwr7S|_ps~NrQ7-Ls7e*nd%<;O}
z3OubIY*JG#qM}H$nmw3Y8<?U$om(v`u*!W^@Y58s)%Z_mCv`OwO9Kl6J?6=(@Jb0R
zR*Rwn;Uv*%YJv0wObjJN51-97L8Ai~FWsz4<9p|3fKh<=PBbyq4VttAr|_@Ou3cRR
zLE|uh9{92kD*ZNuqdA}Qk-;Vb-aDpO&oO+v<6z+c8iRc>L&M{4;j#oFFc9fY>Zu^L
z(A;#+c;Xn<WV&4&&?&WV@r_>&{6vr7y9M`;-(Ukrcl!Vr0inl~7QvHd(^(#{v6`~f
z_eUU%YZ8_ot`Q)e?;8y0>iRlAndrowo~51IMm9CW3;w){lH{RGkT$9V)IIen<*tQv
zV@yyMyVNg7Nm}i9PAzKU;8>}do42uV5YNwD$bqaumQqh#xSO>6UT;8(OByv#+wOi^
zBpMFaGqW}vC{hd700US%OQ&ZXegF%bm@15Q5JfI9{{?KTK~`9JB*zn}U}y)UB-tnB
zlX(}YS$|I*KUmah(z!Q2=emHgOdM%?ye0ES7({>fdd+Iu1E7ho8qVzW<`YOotQ4+N
z%!Q!pQdW6|>!O^JLsQ3RG^HHp-kG>jbM-)?O1itvyL@GsH68}EZenS4zGCJAHh@|%
z>8Rge9a7WeArF@vy&<0WnV8MOt3Z;WwxeTdc$}XsbwM4!K9~ah9;tIlCZjAc@0(xA
zx&{Km#Pd@5t~X;vfbei$MNfN1Dw5KI;qVw)gllu_u`WA-AkeSiKve54gr<cclRF(A
zouzMpV*$AA0D(dB&io_b>g8yB&=<|3;NpTC;eUpq|C^?!52n6%ULdZidx~&*u*+N<
z)>Gfn6jnLP%UtG-z?c~nTekqDKv`4fOm4K*P3F7Qu}|V4%qbf;OD8N3;KjU=lQcjN
zX`Ax4T_)}m7ah}K-%jiEz}%hKIB84z?LL@3%eiA8RW!>eDz>%q{Fu~{!(L-Hs@OFG
z!LE`V4c~YW<&~n&GnEliJzVB;u~+L1qZo$W0Uj5j=n@*XQf=d={ta%DSR~XRjXi*4
zU3c>XV3d77PPa`1Hx?0^Xf$!l8>Og2!<lcA27c1j)Q$zalDBNK12x;uBrJ2iElOI}
zEfT5KZBeIJ(yx{%(<DY>bX{YK)F{BDYsC;>V_mYxWf9Sp=O`ONj~y<2>z1+L0QXr7
z!v@fWez*uSgt*T%dFP#|DwoN(J3tUyx5I!VMVth#6)GP5tC;$@OPV<%Vlb(AN7rOI
zO0Y>s&xYF^cHmXt=}u9bh-Kll>i7ZBL!a|XZyCsyy^R;Xh$bMhJ%G{J;We6-;uf4|
z$}|ok821iv3;$U~9Jf(FpKjO%gIIxMD2_VmwpoLDdyam}<QHJcreo_h0)#GJ0~+YH
zmWd<X;w#J=M{(x3+35+p`{sP4krWF>Bf&mTA_=pX&4J(R@v}~c!YC<|<CIBGfwaG^
z)D%d`l6g?TNMIQHBzl_T%;Y=moR@X)2e2ne{2o01<gH`th5FSz8&!a%OjWxED-%MI
zh8!TivX_o0;wtXJJ;$C>1<S-#L&81?JEjy--FjsAEZ}60qYD(SEytt>dbz!n`qi`?
zNwYwEXIL@EuJ_R^$);L$xUgFmDT&hdT-q;Cp{eT}5`{sYd6<D$xdL5Owg;0$mAz)J
z2@pR^+g2H*<X{?h>&1QXk}{>fjjTTbpa({2O7@>dqL?a>IaeB@z_Uk$XS%PcVWH%H
zWZVecOfs%*0^;D=TqHrmDz*-V?H2bv+-)-!Ot#JP0HM1jqtR!Juwc3!2Jo$n#$_&W
zQX_e*%i>SNL15pQZw5@%S>H~Y>XLyO2hiEr#EQ>^A>nOoApyB-;kWA(+yT4y8FI9f
zX|_u=fR=~r;BGIco7Xqxu%w+AJ`@<kuy<;PcA~P3^{h4OY111Rut>rZ)&lp==sX9~
zWvv`)0xP@arLKE&pDr<*0G7iRnQ0s=pVcIi72F+o8?69*K!d-&Ujfpj_w9^(;ld0)
zh#uyeV-zzDtfvmj!WdARhEsXBZ)!_2k!`pl83vgzDN|{CP|76D{vhz9FL(gs+5+Xj
z*l1B(vD3rjGcLmX(nz4uaoz}q#|7$MSjuU6k`&b~f}?F9VXi;Gk=n(!1c7OS5=fL}
z7qB87TgS<(;1etpIr{(sGZBnRa<n2I(`zV0PbdPZ4!#J`yz7zM{Jf1hJBkKB+jy@(
zOMB-6W*#T^x(o`HL^DmY)d>(Kp|Bn{Oo--<G!~|Ebpj4Dmcz8mx^UBxV%h*W1T>)|
zSu`;ID@}ASaIopKTyu694F+--cKhfk4!mB(>5-&zOYL6MLqNlCE~6k%35M~S6GgEf
zp}tfjT8Hho#TFJ(%c?Xu@l|R|lI=}~?`>dOuy=D8Hr!QX2>}>!8WNyRB8*riu@)vA
zB)MW#k`nCtnJmv+fa-44d|{nCX67&uK*R)yG<7IcH&HlQ=lhL$>8Nh(w|z+<d4O7X
zOi9(f<186{7Z>@Zt+W3i!aFfeOdf}_8mVeP<x46<j74$XmbQs*=g~ZGW2-bO+SKY^
z?`ln)1lb|%(O+?-OwBA@bhbbkVBieY1vNY}(qsZ$gr$4W=dD1}ET;j&5?mNYyDl#*
z4ny72?@D{V0LCU=S01JTzw5lY3-!1OjxJT>-KFxzNHzPw2&K}5_GUy3fG$?(l5h0m
zhNY7<%iW5PWM)lqfNB%~8f<2i`GJncbsb$5=BdbZattMUPsv9U#UaWQI248x4TGj-
z6b^}yFRn*wK;?k3rsH?ffC;vGc?aNWUEp|D2V-EcJ)h*N9Yk5<#+~B`21!9Rt)e(@
zqoM<jXi@;8S?M{~B3v-TeNTg$br2@bLB(u5_6;u!82jm1fU&|1+@X+q0c6q@l2ph>
zDjkeeVOE>D&O4BLt;~~Nt`w(3AT;{Q%Y@y8|G$%Au2iDn788z2B8e}s?XWB)o=bn)
zOB&-D9s71|r!7Aip)5d&@)~)TOAXyi#?zOxy&+vagXk=dVBppyS9BFf^>-6`WYRU-
z38rcs4w)KM*lcD%-J{FO=BYHVhbL_gDz5UT9f>>6_(#em9V4A4ia3j&v;T$CJ<b5l
zN@CYhCfAYbS=6=rH}~cf>wWtL*lPJgE~_sYTH+~-{e0ywHnEpQ?&f)eJAhP8dt3s7
z4~~iFJ`ui9rwiekOF7&Z?k||<vWY4Z^{ZR@M0!523A@zeo20UzbcFUY>ig6Vn?xrO
zv=z=>M|Bte@{$RQE!SPcFs1jjiJNQlHWBrzJE|^lIJg`K=Nm~ZnwBi*eW&y}L&-Yx
zYY}HBgTqZ>E;q_38Mxo_T$_n!1g4w5DT9*z)6u{!80i_=WXg>PDcW(l4mJPMU=4Md
zNIW<(vknDYa*Vjm9Mn<E35pO}<izkVH-*NwZRtoJ9aP#74p$f4Aw$VlaAl`f7_JQn
zYDfoS37N;LzYo#`@)$|d1Gl@T2N2HTZg$+72ZFi5CrsM7Q{acIg>MAEdUVnLOpIg1
z9p&Uby~1>+K9MS%tDLpA2yN)vy!5y>7Jh^2OVyN6bg%##G{P@Q5yjUC#F|FBTx8<l
zL}M@o&trjP<SU6FLV_>252t}Ilz=3hL^ds1W8yF;zRo?a1S9sEtqYtg#l9X}lx%?`
zfasml-?(?~JL;*fDYkGNqexh;F{**OFaWDa$dM!lfxNX0<A6mCoGMGhW0B41J6v}c
zMYF7==0eheC>q;TBA3>+6#&P~Jdn}cZC?S13CP!82nCqwOMjTE-rFPp^S+G$UPFN9
zqf+zA`UWalyDVsaaPv>Ml4Au_PJEB2fL+i>c?_yo<}ucw;WW6-(7u={?klzN#9?*(
zAW(3vGfL|jM$MbFak|t;=J_NRSE$%gZR4VOT{3b7Bse+Sdk){RL|dLZ0r8Gn6$Q`{
z5KL5@U~HOUEP<Ms9Cs7tFqfZNWqIHtQ6~4<#t3s@%g(9Yh?EqW5v=yEgt@nr5RNF0
zQv;nz6XEv2S;)lm*{I$@Js|pBdgs~z(jz_5G%bTNUMekP2fo)hdf-@demc*wwB2Y*
zL$um7Fyx(C5eYfCqbuh<kVBUdM}xXGmYtav2X&8fDeGPZJEfC#IK4+I=ZU$3cUk&>
zX*@8yHY$!TT0t;kQ%C+%%L1X>ro(bOpu@)bJnC^RUdw4Ts#KH4ZJIkuS`weP@d5#e
z^MYx-?|ESXz%fdDB2Mhh-p*9LAeSPbb23oWov%_F?1IedxRiTurXecK=xgHp)@ocZ
z?K)MK+df;k{q8XY(<oaq$m!+EGY6PS5dd`(PXd|XPM=CGB-QkMk2A4Q+$0*YqCg?q
zGr^*a%s_K@63R4s-;O%25{p^jQ04M!21?*ORP*(`UkCniCOF^v0r3+Np|Zi8HN>Go
zE~Se|<Lx1LlPXL1v?@c_I*e|3&54>B06&Ww#sP)B)6769&fmy!+d9GOf+n85QCL`X
zB0Tlk+SEB1LOar7>1*%frLG$sVI;}+0WJ4m5%?+LUM_G1ak*jCmqrl`SrBm>Ds!=S
zfl7Qp@Hqr>W_}M@qND^3^?BByjB}k)$8nux2fx5Jz(#JmR+mby2S=SjFpH;7pI=i!
zAUW0+n4JaZac6X|X&`Ign4D5itP58CeZW{$rk}@C{f({(BF(H3*u_$;-zQTWw&xze
zN30`QJGClkU6A8ylv$1r_URr|WSA3$d!`6?%+T5i+CRZo-mi8YB0k+@UURJ8abcAo
z3+^mx){t<B#eWu(tFET+8oNi;q|DM6K4<AHLr7y%i^{VXY0#_}Gp_o8!DilXeC`2O
z(tVbIAjyfc8dwd0ke&SwhqAK_Q-Tlgx;3o18H=>frwa~|rvZBhD}T8zIp5(*ebq^N
z>_O(zu8!N<i~C$eV9=5!ia%020CajP$XFf}ly?C%5Xjihb_F(Q3@C9mNWoj%r9=~M
z*+=6Kz%I=+2%2c!s*FZ|ke_aoB)!cXn>1#f30!GvhDmF=$Y`_TM=e+3Rq)@LB&J6~
z(j>uapjPidA~GB{PKvf`4;cXzL{6iS%9*K33LEezHK`SaGl^YS=-o}(BneNC02lYU
zh@ILHv#6uh2|BC217&`2(>S4bD~zxS#Z)jS5(;9=*kRaSNkh<I+%(QUPaLIH&43%&
z1F9i?JmlyUozg9WYr|=AQnTklQ&vnl3y|1Ke2{S6w|mu!x;{F|@I9X}D%A{GF~&8@
z^lW`S4OZ4o2$VwUo!>9fWGiok8~}r1w76FE>~dPrFvFJ{W0PXje1Pjrl_Hnia~=Vk
zu}dBA=`e8z?!L>3>hnxd5kPguY36`a8c&bCj%R`2ca|l?Qg{3U(|_;Mc1~LGaAR+K
zmvR&!4F=>6EYC$-c%1?beB{U_T=0$>>^Ty98XO3DrU4}*p?}&Pt+P#ph4ypm>a<8h
z^CA<okZYzk!OsWG16Ojztb;7N@Ty9pvS=<n8y&1>Y|~d2GcY2Tvt&50a>k3p-{T}C
zHzF8JHVrvxr3>#<WSt{Gsm}S`p5hhHbO4018O4Z&&E9dcXpnLvn8PcY1a$KyCQV69
zGbt%9M<|v{B|t8L|6kLhC_@!R?YY+GO*E;)7=Ry&QQbW!opqeixhoX{xcC7F-Haim
z(W^5{g&v$l>*_A-iTho7s_0E{uERuDL%4N|*x@4$(lzZE?&K<R*0kZUeFk6vgnBP^
z5DDaQX$^wuJ<VO^dfp9dmrb{8I)LKtYrqXG%F&6_z2LfsNHuQSMQ_4Uxlo>;wO?|f
zQL}0nC}rQWj8XQWIJTGsHyLb#b14fp_XMX^Q3?pDjLY1lw788uXp6=@u@c0c>71fP
z_%0T(4;jJdPg~2Vy8@8{D057Y^gAh%uZ=4BX50d@QVz}l44NMkM0=gOz)#iA^$a}!
z@Hq`M$Z;oA%FzKyua|Vtsq5-gO{jnejx+GMrgL4>K2KWWRq~!SWQwop2V4>*=Mg&z
zJe9@>n#AcPMQ5o3q*$`{&NcS(HP{{QYo}t$+lB`RmwHs7#P0lS7r?io1cTsKaMg`g
zRSMH}&md-j-|nH$!JM8HbvV;9wkI3^c@7*1@|NB$(#5D+J1u!CG4LXRgvCB4z8yBa
zqlk9<2mo^RI7*PJN=hlu18&MR4&rkgK_1T+px^MW`!&b_i`ZmD;7yaXRZUk@A$2K+
zIF&SBUIFsxso<9nI&M9#v++#69e-rJ4D9o2<LWg4>#12{j+B0DHs=@iER{b2wufeJ
z>o~?U^p`WQ<z@$NV9Hr)pvGwqzS8jTn$#!cJu`7O<};%@Z+Z-4q7P&87pM!Y>wp*q
zyTJRIg0H>+Hq5vwlFju=TC)?J&(M`w{`gY3n<d8OLB~yC6fiC}K5L04t4*zvlyJJ!
zVf;dbCs|F+Sw^2yP73RIX=sr;NN~-wi|eIhv`id>yG<m^4}ONdeyKU`5lfR%3Z%Vm
z+NJ|(ZssKkGw<WlGkQQ^+?8QZdC-EJWD&K0#>yDPgH*-)V$d_;4X=pXENr=X01!!Q
zMe?4WLi(?1QI4i$aOgOc3G->J@_?Njb;%guMrs)94JhZoB%%hAeDhP={@z9cQC^1d
zZn)N~C9`V)^b4F3q*)WoPSmWhTE(;X3jwSsX*rEn;(;~iZk9vL+L*L*3OGiQF2Y6A
zB-JjE;13P0dp@Dg1UzKM)0S3uWK!d4Q0&yL<EznZ80L))J{b7IT<2Ti{#ayi0pQG6
zVbxjzNK{70QrGG&W^_AcWIb0cmrUw3T6Qhu3!BE;H1UjE>@0>0N?r=Pjudl(_tcV@
zA>=6~zjfYlk5PXoX#<yJViufSZ<=_<Oywo)IYG$=-oX@JlXj7Gzt2HYoR><{Sx*=8
z^QSJ|atux^>EODt@Mi#{SW{PK`542NN=<N^{VQ<4xLwv2pn0jbS{K}wvOR_A7+`cF
zZ8qPvs1Zp*^rgrCO4$L@fDCZ`9?VG@W*{ahWG-pQ0jJ8P=&9oX48CoS;_NkPRMRKO
zDh|+Ta_6^eVV17zVd?_2kKEY>{}b9WSx27_9PpPmO$Ec!61i)F`N|Yzj}J}7#J4F;
zbEG8~q;aRFjVkUDww@`O1CI~QaOZ);nz9JLZCIqGl_Za&S!Y}|wZIo<v(w`a)jjbp
z5SRz<)lnRhJCE^eh7c@{)t9A_Zj0|5H8f18kMe}8a-uit@AShe9XFf<*I6nVFA(R|
z$zx!agx}1MuWkl!5+!j`ltbn{><I#;wJh68q&pzJ@nQOI8ge{NfAd^$i^~R1q~nPo
zQ^2X*EHgodu5AgL0gU`|+fi<X2IT5kTEl;$OopdDNT%nw<~By)rleSa0A3SvD5wK#
z&MF90P_RvlAWbd^BJe{+k@LLD+Y-$sWZgF0ij{(C9fv_q)R*);0G>5D&6z;!;d_~U
z)7U9^YrBo(oW>3OxXjH}y#^rCq*KZn!2{#F3}<p-QDaqL9M)o<x{P5Kmr~?f5FE)3
zN@8{)UaEWJHCV&95cL4O23~qNz3ynHb2Rqgz$9*QZ7^*uy;PF&pt2&)HuW3&yhf*~
zG&qaEy&68cLRAq8q2vjF#D$jlltn4X&rhJyi9?bxwT$}02O%F)R*-rfDvB^OdfK2E
z2*)Vyh#S{g=euY)<K(N>%e~GjMU7fdY+S|wbP}mIM%@K)>5@gx8bE|fDnGF@*^t2f
z?Ze|<=k)5Ua@c#0umFXY>P<kh#5+R!3VPx)1U+fFV-ap=@(uXnS~QF$&VWys0=9_d
zoVwU_hKkF<+`dwq=QaQXXYKf}@^|lWpLE&tF0RomM5ZGJXxS86hDaH9W`-~fbA^|n
z2QEhxeS9)IH=ACPJzxhtXE@3{*L%%esSAnP&7M6vpe)5KqH|<6`MSWIUH_WVb4Z(h
zu$C75SINaRqfnc0lX{p|dvGc0G6phuN2(O#%-y@s2lNY@8o4Dm_9uR+<@e5leGu11
z)G8Z;0&kaU=l(jtIG0{CyVml4g!82o<pF^Vz$k0vk>#|XL!;OAZA=R`i9<98_Nkh}
zDtuSM{xZF$(W<WkJCcM8@&^8<F)dESb*5G&Q6&puW?g(9);=k4%5IY5t=6Q$id|_p
z$+$bDP^ZlL9OX+kwj96<XBKfjJwa7Q@O5h4))|iNz~8wFfhxe9EheFfbt$uE89sPZ
zpR|T~1;m&mZS{cL6jL9Et4Mvy(#b(>mb&MdUV2Ia{wg$wz)BR4L*-n|So|rVESj;5
zOhd3_!fu&&nnKGlFYclglT;YQq_1;7XFD$%N&qN*n0c1boxVh1FP%y1b~<%CLk?0W
znIpyC4N@&5fKo&;+-W)&boDxkkcpaRqKOO3)P^mpcTXa?39r<KUPO4-4t&d(z4`$2
zWO@kBihgl{I~8gIS!<{Z9#}i;wk?>)7>t+&ED*`;bN?EZ3>S^o>#QTlbQoNe8oE`-
z0U^FlCMA(9d(pF+dYZt2>~{QchbkUEk21|7k$##*#V1KG;*DnmK(OCxZiiuc;||Y+
zh3BXgz?c`*y>-IU7B;GpIsi=wB=+pa=u)*@PnbG_(QvFl3>g3=05WG55nc@!ox{SV
z!dH7OlDxBv)FR6kv$t8yIjAuO3ZFBer{)`N6E9WY$pBxl%Tj|W^}M%DP!2vS4Y0H6
zP#A7kqA4BEHg4?UuzH@eopGcUWZ&JR7KWXa`WFa>H>hQr3jVrlr_nsJQ8^|JvPkYX
z$dKTO4W$Y-6GsB=OWgUrNWLR$DG4}=GP}(5yc8xd(S4$gwK4*r#uy)UA4NzZr6BJI
z3JSPndQJNU=aMnS09)=Am@fD?J|)p%05xeQVVV3nbcOg00{E@YFXS4@Uvp&Jxl%3p
z23hwxanQ5FH32#6IfjG!?_}V{rfFEFS{1(^KvNpzqlc^40m%h;J>!s(oCWa1RP0jy
zO8+XTi3wL$pMxDHrNdbzsU8wZ{=^4q<lG0BY4n+wzq*fNrIh9o!g0v=T8k8^34)Q}
z*@Gqty*{B6&||9%yhpP+OujKL9DmL`)5xTu`>s7q+G-qIPt@vJj3$XE^d^}uK!tsq
zu3Bysw2<yQ0H{Di#XddLaRE2R$r==}KHZEGBmO1F6B~ZaFB6Qzs$?K!sf6qskX}<B
z2iM#r2Sh_Al2K8l3XC<9NW0DHik?W~Qw9|G!mOzew0yonq@rO7dR`or(sW1^7UYup
z?sH1~re@SnqZ%3^F)l7k6!3cu{TfsR8D+401oS@!rIkkWla34&p$TL<bxui%TbO*u
zox?b$s|k!K^vDjpSKNj1QqQ|SchT=ltH-qMXx5d15V-u^Q7CQcZWc%SKbhaJ;?{0&
z=fd1WbG9Gn8r`gUX|PQIDab5Gn(yhCu?HJ~01TdQJOzz{7WCL8VxBr5Gg2&1rb=<l
zMaYM3B7R4`UiTPIEd6#;FI5M%aDDCq(4#*=#OZ;ok8Y3K*wicSI>2J97Slt}4~?4O
zHvkv{P1Es%x_pPhV9yCsny0DYr{VM0$=I=RS8uwoEu~21D|`+H9yQH$*^X5UhfiXm
zF+xqp);&(v_%iy(?P-VWz*Uf1DofMOwrNzF`UKd5ElSwFIZ_ica3B5?XqoGgC{JFs
zQH=@CQZjKKzYDO_G-mC-n&Z%ThCP9i*R|t7`&eOa3CbbQX+q<$`_4OV)Vw!Ps$F|$
zSFq3A#eg*o-kV)$$0y$zt@m^TiPLDlFeu2x0n;7vG1FXUn6oS4K=()mYmwx6GvEb}
zFqj??%Es1lxJP%4!!o#nf3*aWet40@HKj~J!A!O4!v02?ydEfZeKpult`%SyzG`^(
zHO@5;O8xMdVmu67TkCyy*H_FOluZ>tq}XWQ!Zt0=<J3%T;Nd0Hj6Yh^16gT0kP%77
zMFKm|Vz^;{W><dUf)|(UMNyPeD2DcVz`rWhs@omX*U>XkTH07VVQq7!Vzel70>~Lb
z=zk6XvpSl$Zgu-ehaXNvxJHh%0$xjmpp?+gtNY#IyLaJK9xM+aj=2j@0wK$oVz~Bn
zbX1op1{@*>raivTY8Zl2&$va=yT!eZo(q%Wz{VBsG3-0sWxAdR{(b8*y|v(dlGb^~
z?Y=3=Wjc`}bB6NZ`b^J8l?D>eqi258*gq23eeeswf^#Mm=6cLc>JMlxh;v%k6-d?Z
z&Cvx)q1Sp%-kDU4{g>8*ciHPK59KS*=6a;j`dZgy|D(_THjb@7${bE}rnvg`LjPMk
zJ2fN2xcZnR$o3qSQP0?~K@vC^fVVs*k)knvnc?xED<BmdTOZ-1tHtk9slRC3`gP)*
zc9caVSr-n4fm-CfUb3u%dNa6!e*<CQ)|qr6H8XqZQ`lJLSF$bx{nO;U=b#VRrfbs1
zJG2^_NXx)vwBEG<U?Ax?-lGj>9hYIQ0HRnXjwfa}@w!nL_f2rw(WOx{RzN5tdgj+G
ziD8uQHv=ze*G6%ZBOSkoM4t@lI@GSUI7Ko^LdfZeW&+Y3n=jLWqa4Ku{E*CgcWgE(
zcn`Xu(fS6X4^ze@;@&J%AxYTS$=H;;hYz>DI({$gY7phPkazeMp{I06@8S8843ZkP
z@LTa~m%-lobkf%~w-K*R;_{r5bfu9I*GIYTB2&jhNx%oTK@T?(mYri1BsTGq)1XP{
zSOV7boC98Km~quEwtD$4^o$p-TKhf|RZSex+>cDmHT6iBGFjZf-vCD4YZk_Ej>fR@
zL0TacZyd|29S)Bf3(dw^UYFieBXyGkN4yC5NHC);9{0zm9lWD#uhBXwn8n*g&5Hui
zHa$SV&~sclUR<}Ndr30*E=(rtg_I3)Vn!hLej`u-Q=WQVd1+mf+ME-?(lAOn)9CYL
z;GQqV@mlKeN2{(oU;`)AH}~FKHFc_GIyzpQD%)|TS6KKuc+?^Wubxf(%+w!vlD1{{
z3BwRxX`<u?Rv}2zw)^tz(MRIC?>V?Bc+MHy(j^qfC6^{6X=?o)+e~e{SeLaqvrHGE
zRIj6Xln9G5e-~Snqlsw34ErK=;Q?m`WLftV5diXDY6t1A{0jN57o31|+XK$+l`;kV
zalW%?YsO;dM}X*K8>h>Qo01%`(kVK+e=~5`E;3y(#pn(BuEmq0t~3SX*k9eG7$WS&
z<cMa3dG$6~NAp5)3%L#jIL|G;i1UKU4iUS`vm6^&t~55cNk$Ql5LQ&naVC<Ak*G7Z
z)@NH%)gF$)0l&B%Ab=KjaUjD|+=n|g>N2V*eXhD1XAlYv>pSoCK#kOW$&a6SL8I4&
zx1wP%&pB8QNcQTG=qAa(%BpVouRx_nt{dJa<j55U6$Gu|pA|x>z{*>+GM+Iy252@I
zZ4eO-c7>SXW_0^OToD#m0%di&ZNh=8kRlvgq(rfhrMm|jb)h&$k)+?^t!(?A@D*9K
z>lTb=DKCJLmXkKlR$5ur<ekrmoBG-xfI&hDSqC8SCoUfz<m{-{!AcZU9(Rc%$f5@R
ztoxY;iCxJ+(lY!cRR?1a!h&Pq5ChIx+Dn((R-b2-)cN*dR1;TjWQqmQZ_*d?FG*4=
zL~{%<a7yM`rt2C1DyG3oQF*uAsuq4Dd0`w9slg}|RW+;)O9P9~V0QNmNTw5(nM47q
zoDvVrY4v$%Xt3v|<#ll_$4gElg?S{Q>TqfHHPUmzhjOcQ6{k4!(bIVxsXWyp^F&AP
z)5O;MrZEhhp2xE$;F3<>dwQuYy0g?;YwQ64PHB!a92@(2*XuerFi*!(oEu;ry2(2q
z=Vp_1TmU-3M(ZGq8)J8#<{5fVBl}OJy88inE+Wi6_v%`4ykB?%DKg1(5tX;vw%adJ
zuPr%aPjtmJ2pgzU6=9cisS)sV4d6}Sk=V6iKVUZ08gy_v*STqpazy@`c;e}&1nF3M
zRHK@%-Jhh1<~am{O9kp3%;34|&ygz8;zA>-C}j^~rkX@<6%C+g*{JX1m)@_bEchJK
zAbAa8jJU&GN;7gzeH)P@64MNa{qLb3?eOYj$t5JmIbnbw5NqQXNDO0&$^c2j->hk0
z-C!|;d1D9ij@2BbU1+#m;NbiK@ymKf60Vo8A`3_TqTu<a%als{5(~Q&-%l>uv5e_b
zznsE}19!%mP}oVhqk>QXcl>+&AMRPNo?|F|W4*iSu*69%X>;zKWMqg{Xt=*&)fu65
z8iE&w$@1U=M#q|=uzz!Ht?LR~0LRN~;HWaW8kr?e@%$rmoNuC4(pBR-gBUZ^?XCy+
zbozXNtPy%-lh)U8qdL6?)Tewn)760GVWCaqwu_NQU_CF1U*OzJ%mOC^jGP-~T^nVa
z;=W3g-PYH5y-g(#Z^r_3$lD0&5WFpLygLWV@bPta!MUS5X+ofgKa2O`V?#FHxvxzk
zVayjUH82G2-mwcw>{agYoyXipko$ZJ*8}&m7R`lKYk+SeqV(KGK(J!dg_r7eq>PgU
z9eve;U#A_4)v;n&?T=o^r%m)b?8?nH8$JR+QynA#*VtVX5J+W+ro6Duh^1!kTpI~3
z=m>_RLSoO0n6eAQrVGy{tp(l%m|c)89myKRWe@k?Q{pm5;}-(BCXEdgK)*wL_22gd
z%)+7Zv_M_6QG(duOmt752egQLp;=qHBYZ_P`)vsZ$>tm3euGpb*IsMYI1xbCt<Dy6
z-V|`{%u&YK8&On}+yGn9ab*B2{C#QM3w!KkxAB|@xjc6v0_5Pc)h;B;eq`CkT;?!s
zC=~fAU7A3^X+pTVA}Rt)OKd&60i$U~+fZC%96s&92Aw)4)Ha?Scai?a4a1S_l;=bR
z|9sl>NrxJ8Usf5HS&ET+&lDT~RTYF8T#LiYkiC%J1vQ>3=4Dn>3{R=NX^SeEGXKoo
z2DsPJB7AkU5QoV8V4>VJ5(4;;9)_f^Jq+8>o4G*ds8{6Ksg7;SwlOQrk_v}n5<$KE
z>Uutxl=GPQL>e$^G<Hv@WH8yuyGOz9RiQU&6zP|i(*_wfm>s{dG|}L1bps>o!m5>U
zyqpZkttHr~;yj5aI!O#2+gj_Z+%-10vXr;g9*ZG=FvmMqF1X!;l-FOi<J86^1lVVg
zj%4)bQzG#l#_UvA9fpRRG#lp1H0<MHz?O+FQ%w=g5_+yJF2@b~)e=PYrCh1m3A#pO
z85b;WD3SBa0j8@tZ5ex_VXGW-gb4-8u&tsveImNmK+`E0tWF|nHGSoNfj48awIBoM
z%QI41>5=KtZxGUr63c-Xqadm|i5^77b3ZE_*t|=p>=p>{Xk0lqD#-zvU=Uu))y(y%
z(-RoeWzR0mm883^2b!^Fv{6>6w`MMDswKk;>btN>7I*SN+T>lVZ1~*0xxh(!DnsXS
zPQQF0V9V~3>lrzRYAX2qGoYSz7~%y$E_$NorI96~Kko{aGg|fc3ygTA)&kIQWF3}l
zd5_{a(gUvDyEhZ`I@KLqzOb;NG-2*F0IxsODxXjA8T8mhmpgeizgcb(PCC3kVVszz
z5TB5HJ=uilVdO}9hHc`F4f~)4tAQ&B!7?QPTyREkYTh!yh&V7xACU5^9cGfSnTT#h
z?~XBPzAh{@*QYzUWS|zEC;@oGOJw;#Y^a&2iMt9f%|UqAag<!vot}k+E@Wz0&nFz)
zdtO}u7UyhEj5LE!mobEeqflk4*$!cvN{ko}>3J~R95fF@U+2+?p>rsv&XMx4`t!rX
zZb=9np0dAYIX**2z8VM@l|h)IA{e|xIpyaz((pI0>*Jbl6_A*HBgF`|onHr5+AG6N
z*jJZdT}>nQSxOP1MErGcTEnn0*f{pTG;LzE7t{g-af!1{fNih_rd9L;9-hNEfSgw@
zugvQVzlcRrYK{EP=UqsiD%@BM8Hj%djg-QqiIz-{sYAi1ZiYqEME1?T5s)j@p%-z4
zMwOPFRs|OZb1-H-R9~d8ifRa3(yYOUeYc1(6`yFLmJwr|RN|i{VTMmG`xRN8U;>;{
z+#r7WSGF-ux7!xwvWAb=6?zG96-P;iez~}&!D^Qzv6kbaUSRKjbWu^8)ED)ol>s+r
z=_d{=s696&Enw$RUd`(yCqLP-_~n<oCi4nTyI=-6E$D6?FBODNwHtx2^VnxCE0OCc
z$+4vhFig0S{;G>wILcBRh7F>D6(%?gF0e%0W?opxt2?{uBC;b4ALhuLpdc<Q{C|-C
zdmz!OFVm?sX@Ng5UQ)L+?emmd#s%ctcu1*1E1P<M^O2ci_(_i=^XXiB%{h6Fu+K_e
zC0c_3t5dvG<Rs!J*Oc^Z8UQodH=Y>U8ZUqW_yktKxgMar-HZ~%=&QxmC4CLd+B8}R
z_oM5@{lIWLq+0yxTniPKJIOw$nevOn*FH(j`MC?QZ)X_ye!#H3m-x0{Aq}0jTq7jx
zVv~~ys_s7lhNmIAgM0WQT%j8pp<wST>H0H%@wF@yP3kn{@5(fYNK(SO`@N?N6XB#h
zAL|*XF{;t~^cB+!sRK4@;Wq%wQRkO{JwTr+cZEI3I9^g2Jr+!&7CplvI#IY?K;^z0
z3A_kHyBt>~QSWaLI!RD))0RxsJa@F|jc3Z#)R#HK?Ew5&)l-6eB)%YH(P;Q?GN~Fc
zF1(wB!0|C8#GuYWB%t@zA_!9vjY-4i;v=_IgTjJ)tt03!1!g&9c>BKiS|fV4DckBr
zJmw_a?U%3%-DdXAEp{qNFpQ;NS7gR-$E%drm||>v-JNM)0mj2m8l$>E+qwu=J3oEV
z)v5>19y`lX4!^TIMoTe!2kP5IZi`x!%B$Oz#z$uvLbQNHOy2WRiV{U>(1A$vEp&LA
z#@Dl7$iV7kzCKafg{j|6`%Zo|_jM^p@T*lW%PufB)e3&izB7&sH@uv30YTJ3!t1*w
zqAPd9`5(hvR}0?D*fE;-cdni;+dKY+^aE4Sr`tKlV7}y?kFfVm&34)zP=1}Ecyke!
z-K1)YYrY?z0~CM{!mIo}M^fG9$}w>FG}1N?7%Kwain{CFBfVMxRv9Gc!T@8@$b-){
z@abUlIYE7CkmA*}56+NUS$U7BzdD-f^KgY!P0CpL!jVob*6gTl`?3ZB-YvsKns}D$
z6qyiW*F5Nhu2Rg=k@D#C1_uCUbvu?6gt*A~*U`@yS~A;>J#gDNIIt+XW+G~%&;%Nu
zy3tFc@#;GBnwGyZA`r|SY`{q9<No3<vEoLqq=I-}MMZGvM+$yO;Aa^P!;6)n(KXL)
zY|jWzeUR1-xa%^UF5Gsk&{F|H5D_6NQ0`vSJ_kaGeP*wb<^pT_`~(=B8BdTwM{ZxQ
zV<@>ta2T$p?TK<8wtfC)cpkQi1#tSUjsqLEzdDW_94if*{d6p6R?<Xgvq_qwuX@=P
zH}M?)gtPWAV}@vFX)Gu+SKytcGc80o`eoO)lZU-9F%;i&tx`8l5--EQMl}P-=Ej8-
zIAgF*CjT8XSYzWGpK8Rldeu#nAbjPjB%EoQyJY&RX4}0*5wjqDF&#$&@{PF+Np3p=
zOs4#O_XEN!6Y8kRQD@+b2SsTzUk`V+mtu4nT=KO_{P@O`+AGttC+rd97hgvo*8t6$
z%N?F07=Z?uRjp|X$~8k`lLow%aTLr{(KHWspYsTV!2PS2geH#WC6!r#5y=P@H=KVO
z49dLhV&61IT8VH8CvtG-NbTeE69$d>n@p>yjm*8K%g&nG`Kp_~z1M0)QQP*j1UBpI
zoQ^Z49gC|2U&x&%)NtI)bQr25%2B3v0yD3zqq>e13>_ckNV5V@GZi_VCYNz5<_2*9
zf6^zB@PT8;2k4S+w9P1kl$6p}fxB-nh2c#C_?NMKIW$YR85u?gvM6Zyqz)gWQ#J5g
z)r-05K-$|zbyuUAS*#rA_rWIWe3u88288;mU7OcNaUzXZmLWR06>uK<Hr6&q3j#0_
zSzOa1_|(%>?(7<{e(l{7L~W9hMG#?~LUzMIU9d7IErJPjCA}<?ql|dvpmB^(MS@9J
z0SL}1H9^#unYA(uu<<H~gD_=WYBMyMmO>q%jDl7s4yWaHT*3cHIZIh_jTp@?Y*H=|
zW!aMNxtj9SdJ2teVvq&<Y^5l7U8I1?C4QwkSU25159}HT*G*GQD?Fnj--}2RLxF3@
zfuhn~8f-TjpmmrtMXYfS*JRxGZbPIfDH<4^uF%8d9k!O8D@}0?&E!2>-6661yT^as
zuPz3FM4CCzNE)B#iUC>R8k5GY^IgE6KS{Y?KH=O+8io9Lu&-{q+X{Rms3)t_!EBCG
zwLZ@pxC=Z5;5?(O%{I<V(lDHuj1DyTW@S*uC~!7BTduZnz=up9MFmzpY_wopGl1!9
zC@4si45yoEpPEfLa8iopWT~GoaPE2yVAWe{oSVkSP&doxIlyOi@{Z48&6M8ly0j}a
zTu~|Xp!CT#g%s%m0#uf>8nCd~`IkKJ0Bz&YI1Tv0b+9A1aDznd(p^%{))hHG?-e#g
zhK|%5Y>i-YA#N|tpzs|n>2Xsr(4z1;b=3bqlI?QLm9oOmHUh<@peav{j)nw^5(K<l
z7^X>)s-+~4bG;imYk}ZAi@#rkSEie=2u6dzldQTZuh8Vt<a8;A$MYw5q9&T$noW`6
zh4X2h%g6TVF}%i#(A1MVSo1spO}b{r(*k??EEO;PU=@o-X%~bBmsMs>dTRYLGrP(q
zy-6;m3=U7wJw=5I*BsZb0n0TU1Jj7HaKa<U)<N{0_qukRX0bTQFW{a!YBMxR8W^3z
zLW{s?m-;Hy8l>X8%=q<GLNM*XD_r-yI2gBqRN~a>0XN9sayc%5|EkWCE*cb?Skepl
zDBv(__g>SyGB1OO>ukg5Ff=Nll;N;&8#id)NNgSJCQ21+gwsskdBPcN5sF>`hep3a
zB{iDCEkP}%6|xcZxRI1XoZzrV*j+2jl9>!#NO9nLgPrXf&W69@ZNyQ=)oeO`(1B?V
z<3vz%AFc^NY=G^r`gw<QcD&9vf-1u!^UyCUsEF01jXmfpI0J_qNyB~WY~ONZAvo_0
zcG}`JlTmU8w%p8E9BFZSzx5&(yfr5*BdLXYvxvt7tZ!*YZ8RBdYni1)V^=xqT;^`>
znMM6Uee;B2mUvxx=G`fq2<!@K&J)2anROG<>~*!_I1J=YZP&j%6G+!69GGr-q}5Hg
zYXYArh2^&31i`U1^~DJ(po)x<4%mpT(1XDPNMmi=vw8y>)M%Y1&YZ=ex<OLjrkf>)
zx@d~D{754=r7u$l`jncb5~;DvNRrZIw8bHiN|KF1_Y@6k@s-P72+`WXsPi10WFdC7
z;>Ns(K~At3t{o43pKy&__nK$7!Zs0J1b?IG5{lS;J3J<FlVJHaAPc1JL?Jc6FaF(E
zMMCaW@AbT2c4yd_>ZCcGfv-yer&<2pyk74R>H6hngKaQ_j>3X-<=}VOckNe^p{EaD
zNn{ug$>f>Tc^jml!`ikxl(=+{A*e2Vfs9c;&kUf?Z6qn!A|-U;g6W=GUicul%m&X>
z0%aQJx=2|daudRWqXc470Aqou6~|SSam;apjp9%gW;<>_o4DNjzAjUYb4z=i_mRf&
zey%~xaa@sh+oTDm2?w?O(?t8{D8sl6XGU50-C*~b5l}8Gzhs*00D`&P7oPL#Ygl{W
zLFQyIIhE(-_DWQdq_5-JakpU|tC6AvA;@F!IurL<QKw8P{^70wVce5(%o|i++pJsi
zOa-5#`9h*m?pZXHz+gwVFmF7vWSrpungIOQl`xyCosy`+x5xe&$^(a6yiD~TFj?B5
zEco6a=|W#NO;R+$`I)G`lD!{|)LJ^nl4^UjqMkp+dQxfH=PrO#1h)lXtmL*Xp|}o4
zT67`+>TxVhM01de*!~)bNdg}F4GPseb*{-ubN!lTSt)J6TX3=I-GF?rnJAP%>C*Q_
zY6PyEoa@7AIV?N}nAvNTMP3^Wrbr9G>=_i(d;%`1@J5(zfMs177eJ+}C|QlUV04Y*
zIB-iWo$nhiVtA(u;jCA_67Te*lwwrVfGue(*Ow-VtNEo}=PHc;lyo7SLNqOc(eLCA
zSFblm1yowxrsuhnjIyYm2#rbFf)&-eL@1i(eMH?)1Dm+E=O#s(3JJJi0LEG{oV*4e
zM!mJ9bFT2|D@f-zDc?pDS6+1#pmi=7$_-RskFr>oYDXCAx->(LCOrVpShrMNWuR_c
zXw6&!_e*3_80(?}0;5IYLLZY$e&HpZf7Q>2Mq0Phg}Ekmz8KGhRrgL51WTfEj+!^Z
zDa69p8NbGRXJ8%(1srG)eV#Y~=5&fA+)9(8o^AAfonz)i;j*mSII9Z!NYg=dIM5BB
ztHhO4^21r1hy?_dVUrPPr*ssD?$XZ8SOQhHIn$(g;h1jYCIrxhkcL*<?u!r%m%-kU
zOLo;@<q}Cbg)0nb#Cg-{0it>5un^VhsqIos0mBoMWel<h_9JSvUVV$%v(cyC+c2z#
zVWb%wRb)?tqv6i#6L1dO<qFO?97v%N^Z*+;G~DmG3z=Bj(UseaX11~Gjn`2Pnwd;9
zsE&$*vbjy)%PaT3TFRo$e`wC)G&4O9TnWgx)MVkCiyknPVQx-jfN}QiH<|`LP)$mU
zh@8e#VXaH5B55~q?|ECGQ^AU&lCEL&(n|u|ytJ@Oad8Z3j{^yX%`?sGU?@3Ct*&zw
zNJ`h@ltzt(tj{w_OFcxBHa@Pn$}b6|K@wwH*kz3Dq`Pg5J*rLKpXPBq8L7gt(Bu~V
z2HveIlV3-^=~}g{{wNSIS_f2dz%W{$2Qb$;j{T3C_egd$YXwZ~ob`<qZA(spEZ{3r
z*XQW|jNWH67!@q4*CH?q2Qj|V#_?&U75ZP{+uAaPt{`gFi)i}r6;41Gc?KY>azwih
z5b_$d?i)~upHfIV3;dtPi8X`gNatDE*dcQcsJpHIlDr2Ie{TGrA76HNjMj78SR_+s
z>Zop`FtH=%jV04r-<8+RMUZrW)i-nFRwla1l`#J1luOdOZ3*CRu~oiQMR>h!(8B>O
zOz>mG=e*{H(H_B`aQDFVwH7l1@ivE#yfTFM0%pFNmecOTOJg~x6<D8<AdDnCSiX|?
zxbxaKZc_NEPWS?tc{Kn7_He_@aLp4oAto))8+@cWk*wmBJ9gQ$!wgt};DoV&UE@sX
z*!o-%9-lQyDshWtGM+RDH1i@-Cq7jGD5IJ^B_*WL=6Ih>)%eCq!XL3~qX}+NE6b)d
zf#A8AC%}5vWO8kz;;~t#I1cJ~e8mq+nx*k=Y?Sz3CbmumNPSBmBP?os$+E&2#Sl0&
zelBrrvkNo8YM&ulo<p&8t%gy-M=poLU}_Q-dYarje7d9uI*m+>x+3Z{@;Xe6OHDAa
z2Bq!LL7(|0NgI50uX8NhbzC7fH&{Yy_x}VK@uuAQM-n)6E*hbb_!S<&wYoR>G)x$%
zEy{#O8P$B<@>;e%c2ew<QCzsUxSJ+H5%AYXmT{ovkWEk)DYcA~z*S)<Z5jadX;4Za
z%?zeIFhBz+LY)H-jw2;i1rRM-oQV6Eu{c~<J`c>cmfNB+GjKI5MM=Cbo6@>aR)D!=
z83hve-Y?-dDswqZ&E1Zm4n}Po2R+04a0$gEjdv|U*h3GL#(ds@T%#>71i^r{4Wj*$
zeUCbR5YGxY+$_7c0ZNmxiL0JY!&aYN@Bq5!zK|+Os`Cf>IUgYUxs5bfQ4mUK1z<v}
zX~OmP)H&x0baK;JhHwBE`hBF-whvGYJ?iRsuwOQKG&q~4DgA1ih#%k*sU~VYj!FaH
zMTT*cOpP<ix&&I*BLlhKsc%(JpU;zQ5<{FGK#$@urM3aAEpV7+!lD2LX@#Hz1oSm0
zYRB5Lfx7El>aCWRtP*_D9lv2tytGW8?|@LjkS?rp_KqXRqg;?vEuKH~qmRS2IDv$K
z4gJrZTI(3*9l)(|by-<yBr`I;LgT$fGlVhsQl``&klJ^C<y>PMV9ZSW{GpVV8TU0w
zLBMlp9M4aF>3m}(d8*6B|I`u#n`>gK8(>zHWh*YjUAi$Y;f#V6vSUeLMpo<E=MX{1
z_`104;!FEJ!@$A$@j=4-&1hiWbTfy`K~LO-abB7vj^-K#PA0<k)oKUJ9Du|l1BOnb
z)OLI;icXqU#q1pj=a@7R%`XUz=ZOMJSBmfJWZeY~<S0`<K=aPTmBArg9@0&ER=im^
zEeA?64KD|&H)rj^1~~^Q7KjtwnK~p&6(asd5geKI6eE^>VKM;LInzb`xUa#qvreob
zj|X<S-8@YNL|7zh?j*!;X-vVZ`#ri|cpCvw>O5xLSF4wbBss{jT=A=@lemC4k_1T3
zCdXy<zB?Ue>2IIol1!2cK=?^>tobB1N(CCv<kuck3LIhn0QhwwOP~paq5^%u3S2QI
zRe2P^W#-N)5X^gtT~Xxca9>*n6>vTq$`jnJBIQJNd2Z+$&4w3PGOQc?wvBF*b$BOG
zH7;2ifMhjm)igruSX$o3yP_WkWSxy)U!<(8UYuRs%hMYvrZ5Dfo@oHh&ov+k&wHIn
z09T*A9>NHBo4x18xY594t+>r@dj#R8gqqjUF;%LP0ZCwtlxP;S)hGf}1rgxOL<Qdc
z)f|}io`s`01xq-m)$d#2v!02kpQ)$UEKO=)^_`DdId={#qYz=mQj}qwR9l#}<QPzN
z3WvQjta9JicxTEruE`<Mm_Q4M7LJEio_R0?qmfiCS+y(@Z4<u`B8_Exm7S*zt1b%2
zc>r!3Eebbba71c~)c*3T)3(*V34uQb1-}Vb&8p`uEP)i$!e)U%=^_q7>nTfs1Sszb
zTfa{tjc&Zs!RTG4t}0D^u_&E66D5#<)a;<@=)6qhaDe_XFRdh5MuxNCAWUDYEYq?*
zMj+?N_5hU2Z%w*lNLZmL6`ao+nE1gco04Gs2Jj+RCuw|vy{a4z1g)TGqp6slv(La)
zSD=|-&pJgC`)D(WT2^#;MRN{lpxEjn`I!d@e0X&mQ-d+HwgEuAx9MvGDFd@w(yqJ~
zO@Y;+@dQK4qOCqRk}EQ19qzI<z6%#VvhJ;S!6h1O&)e8a!nrNKs)7J`6*qXpbETZi
zy=s|Yn28!Dt4S65l4ve9DG4tx40TgK?A2Y4Z8fX}+f8Z)PDX3F;}Rax^#&E*G@4m0
zWr~$r7oN}Dpr^~kHESlh4$k=n+}fP9%uj{u0&W*Y%a#12`T1VTj%y&oUZBso5*nvm
z*AlRj_>L4-H)YQ>LO02<MPFznu%256c)D=pIXpew2+a<22&cjRGR*M6%U-9ez$q$`
zx93Ix1I%G+MQOYewXHE?KAU0vFIPSsYCe~uCz3cff>Q-3Vn=pxE);j(2Rc#qS@iK8
ztb8<O436dk6(?6}4Y*s~DoWZYGSRE~gA+IHG)b6*%f(xV#!1Ync}tl%)9hj!jkCO_
z1t5Sv2B|}we%zLH27Z#vp$u}q;4HoveHf6+fWyRC4fL5BKGadhE1%0iXXG%WorKV+
zQbRhsDp+8yx_%zNvcY|_dx;6R&6GW_iXTZ_?wTkm@)GHtuzFO1_Z+iIWgSL<E>ihe
zcQURT6tn5;3?SQsuTrlAQn5{)B!KujQlW=8g#C_sKrVLCi^xLp6vj2mrZ~wsJ6y(4
z22N|!*`}2;P(05dKDGB4joLF7_K^NMU+3(D_qzKX$IMHCT_6~fOm|y%yVb$uYJ)z^
zSFLF2ZP7%x$48Had%4WW?(2Qn?4wWjGe<3rx(?~~Gqa-#E?{e;FAIZ+gTUq+h$D7g
z4|76XVavb`5<;A23IL5E&Xv{C;*F6y9o0FABQ4=omFBMPV{D=eu?cfp)Azpg8c+#u
zmzkq9vU%7^ia3SvvfPT<67FJ*Y8&xMIZiI+7^QU3PXjlp0-$ghVjmi5?R2&&<U2)G
zY<PUnHN0hn>2b!tiU{D*wY&~450!5613ElQv0cw3640Xvynz8+T^|Povv*(*-m0(I
z=ufkr2Ug8-Kg|IJiCq^~0c>U()yP+^;82>%taE+C%5he2HLBgvYE9U>*|W$|ft(IA
z+x0H2QT8$~^0+>99D^=uS&Y?21t+o7Wjz2|kpVKe6*L9izwQFfc44mp6t#{C$%PI|
z={fJYP6LzF8oK}o6EKyP7CZS)JHrqBIZBCN9%<0TY8?!swgfI`!S9FlGTkiTyy+aS
zLp-Sy-qX$N0Uk9iF2lTo-qlv*;0j(IWN`43^EJC|-Aekk%;68d^eMM_8<YT?Ke<9L
zUaWc3QW9`E<s5-pv;@QSRn6UtyPRbJ#!6+pYJ#XQPzIk}9I4%GQ&L%j=47+g>wwg+
z<neL%axNkWsSp@3(x{b2OfqljsrwS@tLr(^tY{JKK9lN$KM&H$G^Lv{@jMM?UNh(p
z_#lH(!9ZwM&F5X1G)}cjpJh2PKRPtKFIdkK6{lEXRLwlgo~UR?6s3W-R?=|{xT)C(
z3*^-jNpr%SgHlSBSxBW^m(QyfWMPvf%djZ$S`EaZO5|BsNC}SmQgMn7Lp(}UT=+$^
zYojS5aOaNYH~@`{4T7qr)6a#K+~;dJUEAFTM#uGGvIE~9hIcewGaMIO)#L)ZTH!>e
z8GJ_LlRFoaT*|jq-6FVR15UeNI>-Tr<8v4A)J$XTo|nX>y04NRm+^Np>oAO4Ps&E<
z30^6TAu@aP#z{vN&+fJ6udZiM$zmF_b_~>V!*&<kirU@PZOj)o?#Rp#3c;Ep0x+%O
zH@Dz<S7`8}&bUQ?D5&>*AUM_8Ms}@a(iP{(rSCYn?`l=hZum!j1J^>|-Dr{om~GGD
zo(?8?%27s@MkG>LkFOelKs4LfiG7|gl;#U8q`piM7re3K!;6Bw*fE5#DAZ2<>~yTo
z`>eK+X5ZApr6vJj!Bt}qD&;Zykw(bo=E#~sI{;kIzPmKisxZ6ID}IS%l6@MyP}4y{
z;DfaypM&nHf;!o;<(CF+a?s6>6}`?f%m7f6nQ-jvh-(|t<!&fJT0z1D8rE_eH&@tM
zR*G@}0kPXzO^xO&cbWB^=&0!0un@r87z6?y<-U`dxV;IRC7Ine+e$-orjuxTF0at`
z(FLPHK>c}LO6ZQK>GLmxLPDRHW6v>Cr<{o@UYIi~=zeyZ2CtR%3Qxxj($Aq;{3(^@
znm7g(H*kHrpJ`C*hI)ex`rVm32bwSv4Zr}Wo3(I+-2*;Qh)!E12VyK^(R``PnNCkQ
zliT-}an+!mP3zAOk__4mLxDhB?ep^_mbKlKf|YtGv8bUgP1{~ly<X>v^_W43HDA(k
zWDVP0V77HVOm1Z-X$`AzDggY3y;oAj=DSb<d3Vq?f+d5{2$J@Rq_9lN4s_@2#Qm&|
zMpp)1H%$Y(PCODm4>3Ixz21v>eNK@pUZNjVDW-b}aIEg(<~b@nUv?X3hI1bxGI&!3
z7}jM?fambG+}iFV*p*4$f^3iiEf-SU>*+UY?;Kr{>2@S<0IXnYK|t<-exxxPXn*Sz
z{_xkA%W@xZ%{g~de4eLIO*B8SOzAA0K;H`{O~z?oI4Kfa{@jImS3Z2-!2U`HnpHM&
z417S4C=-m^Fma@P+@^`_&pHp#gP@h;;LY<IT(w+D$$sTes|@@~UG3b0w`an|(%o&q
zw^{sFrld<WS`;_+aWltuZ}Q{5yIJ5gR^~E>x=CQiXqv*0tgnM~NV{h0BmoWqJe%;D
zQ{j26N)lz_DrfaTX-IBbbLSf->3ls0J@<Zhwbf}2?vXdD)3m%Y^+*keQzk7-l}62a
zGivG5(DBW*3I^>`?}_$}w+#{42g@GtV@4@z+?~?o61sTicy&4A@Wg(Ds8KJEJvWkL
zuKQHQefm!ROWy?mRY0o04|}sXGu$^#4L3Cac^;A<W{ZRcoJW^(j5x~{8Ab=@4PI#k
zL2JpOaCLaie)R3N(9^*w2w!5D0B~uW2TVZh#1Ra5m~v-(jh88r3gDgx;Nk~wqIsm}
zksW878h|r(r>ZvqjPzf#p2xtAHrse;`fB46KS%fF>Qv1noy^X3B#{C@cBZc?_ev^(
zj{{#%QLx4bEz{^ej`_ONmYtBZXej7q*U>1BKD6xGpw3G;{O1jdk2#njKe6M!c`>Rj
z((QdI!%#~!tD@j4I1oIu3(418I3a~I7wS{>^UE=-Sm4IzG-bc(-Wb<5T^e!@07mE5
z<0Rs|xF<3dJ-6JtL8{j~9}iRCbFkBHDuWUx&X#oakXmw0<|xy=`g@sDz&uk~qVDMN
z8-$9rX-a<@^^HC7sh6<19@RHT+Lk(^d5SCbOAi~i!$x%%tsGmu6oCPfP9Cp9izqr$
zoo0rbN(_qkEolk5rxI<{swf>;w{;mA+QAo$C~8WilOTc~;IQx>`a0w3Z6}$<(5Z^S
z=DU)^|8mtb{KK3>okU#j1N_6iZ~b2Cn*4OGk;d9{3}sCUzUxIS&!|Z*HjPwLoqlDe
zr*lK*%ai@{FPUb1PlD@WS_=P@yCL7__%?)-jDEs)T6zwov&F&&F8~6%ZH9V~S;tO!
zF`HD`p)3;NzL1+x9_-?^^|A?fG)PG;jY!>kbbEAE<-@^33TRGmHA!j@H17G~B$Je1
zbvH{V-NPXw$#7C5Wy9JCm@S67&qRS$)FQT?Lti58o`G4LX$=c&ofA1`32aVN?sUDZ
zBRz4M<b*%-$MA(gUBZ*g1XfRxX6oqN@AlL43eghJY<y!TO=4Wq=K;9ysp_MgT=sQw
zA84%o_G6k=;Y)JK+=Kv5MD|q=HVNRuiL(zEt~)!E;b_!nEcCz95cIC;zu$d>n|~=y
z#}c<~Lf9dR@0qUj^E!z%X?zc^&<hKc(gq+%r!+2+?C5p&{;CmN{i%0(9?+;Q>ljIq
z3g>!d`bu%VzDhZ0*jsXJQ~{5`D~+z}OpV0M8R}95rRk(?eP;McDJl#eVC&~yz}9a<
zPtP0NkjB=r^+}dkqRzf-+<c>57pdG<q+bKfK4tgR13XPe<v>)VDz<ETO%IJSzfA^C
z!g{%^JyRe>Ql?}$iG?7KIY@JpDF5>ba6ayp9>|p57bWa6obTRrvs7Zf(nUDQbzLnG
zJZTzy;gX|*7dXKLVQ574ysR`0FGzFTUJ}Ldrt7Ox1Ryq;&Mp8=zybmEbMKLKI1uoq
zUKvL@B7PNK=<^($O(P!|3FffU)M^<00z+Mqnkpo!U_cfe*Q$|QF<~2tG-(|M>Qx;~
z{|{USO?v&@h3Z{PUWR^wCcZ!xb?Xk%eFq!EDKYlIgGy%6IHm@zR`hgPxJK$PVIVxI
zt=#ZNa@s}4egdpF9x(UIpTZE%%bVP&$HA)O)H-95nON--&eOuM;}QVlb4v3)S}^T#
z4gj_W!HHC})3uBO&cN8Baoqdq^BSw%VFI$0*u!RbYCuya4O^EhtNZnRsi()7wB07j
zMLcGc^uDUL2XoDKBA5Kq-=~Pp=OX%Nasp?0X!g|Avt8*R;sDCjus&f`jXsYrIL#ba
zzG)5sO+88Rj9D6Y=i@;7xQui?VVEn*^Ap}3C_<a{L6IcJ2giXe46EO_V0MMzC+9(K
zb?UsuK6By3dZaA+GUcu`w$zFDi)G-8^yKvj665`s;K-(~X%k24iDcio;RP?7UP6!w
z+qNWGx8_bje5SOErWebs=Qscc!qG9+NaNtSZo2JQd@-}0`*k3OO(;d8Q2T2VMeASl
zu3_5zT88$O6=@_q$7x`l_ts5{eaw^B5|dk~NYJ!J0sa-4Xbt)mZ_y!;K*D-HNVYF-
z8bWL+4?Jt*_(8xya<7?Pz7-f^j&A_&rx=agR)rlaiF?mmi$1(`+j<HljKr~ZnvPPl
zS%W|bgHzL)<~AKYtBFt~aRx>xG_c!<U9C=Kk{rKJ6t~T~+qFJ}4Y?A=j~ppJ`RQE!
zyvIqcOQjUT)S+?bYag7bN}yNpI%axYpdnJMd$L--DQmxwDge5a-%%H*b0*V8D+nsW
zX`)v1F1o-jguRP2C5_!-wyj#$)7!uWO|!2!x30l(ZUKBVx4$4Wp_(2;w`fd5{L1pc
zw`paVO_M1m*UN?th~Z3R8%FOIiCvSJU_M&Yw5=3rTH3Qhh13d7+Bhsv)7cpxkQnD9
z<@C#+0u=4R0)+>@86?caR7ou*vDP&#!wFYUm#z8W0CN;4`7+^KOfe5kU6w)-Vu+(@
z;(3xgJslo5GGgx8NKwMf(3D74#|Z-$USnmKsezu`G}@{qG^6)DGg)%JF2LnfWBeMb
z0`M$toPaJq)?@@dD6CyM^bAl30;J<e6LvmzQ5>f#8>^~X?gYN%UX2C1bApx_3eCBB
zd5`?MhYHC*w~-WrWWqg|e}qxfi+Dqfouw%A!M(Uv(8I%)OH>yKqyXb+n|Si6QjQC+
zd-pZcw3#McRmKPTuH}c${-04|kP?avCk1@)c@lGObvbt61D<q8oqNaqqrPj7Ho}AS
zWl)-{4z95=gvjtQQEQr3xYjP7DFyi5X0rd8kV{|$;JQ0C6+H(c&h9Rkk@N|>d`u%o
zsxX3)Q|BQi;2quRNwYj)S6S4=cbW%m+<Wb-NW8AE2FtBeBrv!QWQ{x1L)<h1@6#Rt
z6vW1~FSyW7NUwg|LoJ4Unc{>^HW~!CkUB1dm`%fPhAyEX#h`wpOrOs%UWPZu0zi=2
zDu*4`X*wuNym~p-+Pp1vZ|6YZz7BV!=(zO@9HPy79&R4i585?H;84@W0NnK@husVH
z2<Xgr^rOPn$Vu#U&`gFS0)k{F9Hg8_?YWxz;x-@7gKd(&%_bm;C5T^zBCeH1I<jgF
zXg*+)`u;v50Ji~}r<W<kv@pmZfm-xz`IF%>S$lU@TxjFoT~5Cgd4|?}-~A<WRNdYT
z#p{4~-A3bh9H6WucOm&*njUqvRsenG=6c{<kU*nxTmhwVzS#R6EW)e5u1qjTaeOpL
zv5#(&G^BB{q$b*@jh)ge%kV{TMqCj!j-zCriLC=mX66e6Z##n11G97Vcmmt(0n8YU
zexIkRvdfWe0E|_GW^Fxg8c)l-F;KCsiD)*!2Y?(_t6VsWQ>TslB6&fs*aFK3zp{E=
z)OIa83>3-l_dVtbbZSc-3RUylNfd;_Vy;r73Ho+)0D_X%L#Bn~?11`At}SOAj>|~3
zMiNxiRiX_xE;er8qnO=F+d5ZIgQAMCHuo+o!`Zzs+Z^w7H<0@0=Sd_fvc&<(=|?)T
zDzi@WiGT{Y+ZAsbs*znwwVyJ1rz;kqMx8DM_nskh94QW5yI|))?9_VW2u7m`3a=WB
z;Bd-f6J8r@ZYJLd9DAFDSxEdZdM#!_WwcqQo)%Bt`DPJgDaUuNPfQ25;Wg$7&f3+)
z;`uXz^DR^C8$2vXm;SX4nE7fya1I7BGm2bbOlcU_wl7$t2ssSDQVCZVIA%a`F?dAH
zgELsU-%61e5$LCSBJG*Ny-)D|`M}{86?~X{<J?!u2gnKFBeXq;wE>lIq-~54o9QhJ
z^^vsU2u3cr&AJ970OM~dbnT^r)^!tr@OZ%DGSgZpdZ^>d0lpPjoA2scxRBN+_R^~0
zgWlabYrLw)aZ#iM^hqkaUzveG5SweVXd?I8uO5!!4}2$|gLJ_BO#I-MmZ@WmVP0L-
zYN-xVgRje6*}o~PeN3_r)+mB-uw$vgx2l^}VI)Cxl1SrKP;aaMAIhc0W#1F=BRUM!
zFAz@Vn(Z_Qted(tPo6`veJkKDXWbqLW`6T#-{=Eqa5PopaG&WUj;R)qlaw@T+kW)a
zx%j_ODNHp*o&~OA4qk(OYM}~1eG&@^u`$31{;X=0<2?Qb=p|P`(5S$q(RzoUAOipF
z5sjo6CSf_~`c;lyPl}BW9mTnocpL|&5203X4pJ<>=F4{>^%VSyI(d)vNuqrp$*307
zj#Oa;Q)Ka&8fadj#z-VeoJ9zdI>cu&v~P~t`sVALD7D=6tSmR&0B4sf5E_WsjK=Yv
zKm_buy{9%2J@O3JganW|uG}cLXF_55kpbbnGtMeWtm@Esq^=6i0Reizz?no9<&{EU
zlXhty^gEh|g>#+(P$eR5rK;g_VRj|#x-)4(>X<4iWXT}s2?PebVJfC)b6+7xPi1Ud
zgRJNl7GHWyV0)@FeU>2~qKa(wl7|V>$}ka5<46YujVmF^ug|-X2|)83#1SuZl0P%o
zP-Efp0UDWhtiTVPdxyd2L=b>xoLVq^!Z88}bA?77G{(`uyr;OY%K*agsCwzZbi&HB
z2;zaYs>5)m0+*NDm(*15l&XI*mPq9}3~|!w(I6D!3%ClLtm`uZ*Xo0m3J4jiC{iqO
z1S3TW-_@h!^WY{IDT3;tEUAfIu@>{DYJxD81}J{1VMO0@*1e{{3&1R_kpRT@46`>m
z78*y+^MSI*xeH!rJX5{pFiN}B;MUFjK=^-xHJqN0jTB5?y?t#Y&pjq{Y!B;a6vta0
zR0;OHWN<ECy#@u3c9qwF@C}yHwC2&c7bj&TYb4+Uop0PX_9==W2cY+y&yzSih}2~a
za$ufe8kBnn8!IG+&75w4-x&>pwbQ+m)ANmjEHA~dc1cx^o5C`EO^l{$oO=Em_x8c+
zu8?%wG|7>dAtTSirFf$u95;Z5ux~sGMEB?b#JKld8NTO^k2sj-BvNomI%(RW+To=I
ze&XXhS;?vmQj#_Y2^<GLkIQ+(NO9`oJ}fGY80HcWIKVVa{NT7kL%c=c2RL!)(KdI&
zQF!Slg2g<=$S6?zZ1s%8Xeebl@da^OFEXnGN0!=XO+XT^kH#1=$O7crN$mm+uPh>t
z3)@z6G$~V3Q6lM~=Xdm!N7PB05CDZ+|59C_<C>bR-DuW?ROjE+--6+A#_KeWY<FA=
zn%nky5@A#6XPz}!@T5&E&(mb8?73QLlj_?t^FaJ0wK!fTEcc2*XZvWLdz5<R=|EqC
z$+5KSBaQjsjp_#|OD$sWBTmulx^S|wn(2KoG9~08b0o0`uR7HP!g57|5Zo}3<cL8i
zX9Yh*rI033=@w0#tJQ^7Qj@~AisKnpj<WL4PEVqlO%Ky>DX-1W-&3DnHx<)Z;)5&9
zX&6wn`_k(I+Q{Ls-vW!qF)^ugU+`u!1qtSarv2%PsI@8x^Dl$(U{dT*mA#8U;yMCw
zt&X8=n%48xwoda|mk9%TDwWBcD$98Ra=vCDkVfR@mMl+6q+kbCH%FtB*r+BN26*&!
z-c)WFg;@hdmSm?q*HNTc#tkY4bQ+;_?BiwUnods5&WWNSB25BO?*GTun`KL~>o}t0
zsXz72aMaF!2n9H~Z_0wF-dn3G^F(;Kn@J?V23Xz$s=gveG&medE#0s8R?q_wCY~yM
zA=3$`-&Z}aT%W4!Gxgw*s;vq_%QGa|yx#!J`!j<9ctq86>G~FYJT*=KO9cV+Zg8^x
zcjn_|FZ$hj_LNN(eLLzxY;RUYQ!RCGaUCy<1oqvpV~5}d3GSQ2VZ|&hFRE@V*<(Ba
zyKBFL6zxz~P|#vPl%u7DWesiJqBB8U0eZ`lc(!=HvSS#)30e+jr>IVkz$Cj{-GRlw
z2D#Zs@-;~>Wt?nh09sBtshAN5{JM*ujvFv`A39{nMGCV|6Wbm=$^w6x0T<vMw46D)
zp(=y5(%;KYCDF+%sR15Gc1{ZKGq|HVy>JCw+Z!zkw~&LQ7N8lH;@dcNCD02>Dm^!q
z>8x!zjmxr(^yHdmjjvwRME=}fAom99r|!tV&w$HPe_>@F%4&VwVJ@;?)Dgduvoj7k
zASzt%lv2keWd5$tw~$rhf6mz2HRdjvGJsC1HMEPsXT82<XSsQ$!d^WOi7~i2m3Af)
zmx^C$^|y|(OP#J|)xVuwwfr|j_6uU2WEBK(fThFNHH^2zOS|fVK_T=S_K3hqPnzG0
zTAO2DZ*e$BZcRyc;P`Mc1#)oa0vP)zn33H6)bw)2_53RlaDm=9r?GT_KP09ZY%7Mh
zVdn1$UBe!pE`{LDV%A8%fG*U_wfO10M&Em!f0bWH!JB`7LhGr6oXKlU%d`CRASI6&
zuw{{S^i7FB)AvNm0(ldO`n0kuU-kET@KB^l;F%~)H3|6ZY;Bl%gw1irTb`!AfU1hM
z_)`r2_b&M8I6tB(%y({<Je3p{+k(VwcM6vUOlcPJr0P@>ovX@t!QRXP=RoD@GM%SP
zRgp#k-6_m)95SA7vuLo%CWF_m<Kxpdtl@xGMD<R+$Px3^N*Ze*Ey)n%&0wF!EN<h9
z#Z_b)W#g@RKR!hOgtR7hnH)Mz!%QLU%yy|)>6W(IZ!!9RAO9=D$>KJb)bcgTFfCp#
zj4QpvZ~iD9vo{`=niS3ou5Dr>s2@ia#NsX>ApUgz|Mv`fq3Eax3?wA{WF)T=E5dE7
zR6}cc+s{MvIj7iU#E-A>Sf69pH{z6>c8W^m<3Fq82`oZ}NjN4JuC<@*;LJ|sDwbzr
zc)45kHRf4Wp9f?-nyDlgxsvBpAqX@mzIxMm!gvB*m#VoHZOEU)O&Z5(MXg;h`sX%g
zHyZe{?BB0+&Ni=cRr<p_t*{?pwO1XdZU^>Sbf;*K+l~=2@P6}uEeX6Gm)@#kt91fp
z%4O%Ue>M|2NO-9q>E_@8tm0qkbnw^JRoS$*99gRQ_b#+b0;xX28HwW+ayV4iIqJBb
zkT#DQW1y~Z*8w{gw@Z8Xt{t@+tDpyDUOZ(pfDf*NcO|n|d9tSXCYBK^n3ZUzMCzm_
zqg;kdUe*fgSh>L&UK;`26V8vy97Gu_+ZBK@4|jsp&AI#O-h%`b-;Y;238a4TRP!3A
zORRzazQO2V!!PY{`}nI`T6c%>AG;*%umP#6RYAgme^vZO<j%iH%lMxNl$ilQz8Mrl
z`CZtUei8bK%3w=di5WG5XEU1|jx}|4sPl9pnlHq0q%ukLgU-%t*%bgcMp$YRyyih%
zf13oZ$5W~_k1IHl&t`VKa<X6X!Ri%|@%15C-pw^6war4QW1}}6rwi=h{QgMp4JrJc
zhshp{ujwktMvh3PZP`!h(W`>&EZ;r{{)d#Dj+$_UYuZH&P`BF3pQ|@u+-z@5Y?J`|
zTb2pAn<2yC1|F@N$KxmLPrHhn@5xI*Srja?I)ZyrCqzcS*PvdOfARtz+NoWp*Eix_
znr4&(f8eefHTUEiKi+K>I2V^yFw#!kMfo?ZXLe+x474K4x7|L|X`WIsLIynE0MLXX
zU5r>)my#%jQ(vd$+rpSxyjf}kR>)SfY!)UrDS1&az}JsCEH3d>10G!ZQtXT%Xp+}G
z1*#&p&q7Z2l)jTf$aKi!+iZ4iTu|Sn90kVIPI&cs3Tc1Q3OmIphA{zbxl=$`RxP-i
z);`jxp3+V-yH;Wa;5VXY_<|9LUwq5Py+|Yv)IIa$q5D2D4|W92-Zfx}-@=^%bL(EO
z7DdJXlyzwee1W=*<{V5ezXuT&D`%4GKF<KKiOxTQP*#uGu(k?zPcQJ_i}I(ReLe#<
zd@B7<T)yn<>`wrIow^dVemdpv=J%!)iYSInT4N0}a2qK3(bcY@gS&>0V0A3`U&`E8
z!Z#?*3fLpzuD=QSJ~*-XQMhF^&^8J#w!3CB3ycVCSph~HCHr>`qKAX8{Z|y+l)W&n
zqM@V^#K({tF5zQ*)@LGd)q>s5xKL&l1jwv9xeMIB_x_cZ@rk!n25LZODo%yfC<=i*
zKzL)V>!Xs?x%;jH`}lr{Nv7jQ2@m=?|Nf0Y+V|pv*vcG9j#(c7kyiQq&dfC)iF({s
zUvFs^ERAbda@pPCD5|ku8*U<ZsPf9Kpk?nv1cyUFl7l`r;)PW{XTaEUVNbp|DW4X8
zyvIekYFuIK-jpT5b`uD$q)&Qg;z7O-F-+hJb#6JMdE=;AyT9lDDT+G3KRv$@hhJLX
za2H218XrTXbGNeu)m1qi_5w`=7#Ev-1FEpDn9PVDej@J3?*k@I5`7b&w~!svp<E`U
z>1tI`@bjro7nGkjki6Fbuh1o7$PX-?^7w|e)xm*kb=`2y@7D$3P_#&8%_j~Sn5UsU
zcs1q9NyIsuAW%<OKgjN>Wi?8!yIix?6#7BN6~!>%)U-Z?<JW$VvMh5dH=fLE?0{i_
zc}h6er1Htzva0~N67Xh7tp`&Esso?gWm3~$*Y0`y9LQ|9Mj3WNMC|TA2Jkm1{gnN+
zd;`7K-kl<PsSeq)XdY)GnAtElk@uSnHY2>v6W6=(I|qJ*!o1mv)Oh|$u2f4sDsJNt
zvR=(He88mr!S5S@pCVBipjl#BQI3l5^uu{=1i0mdzn}CWmXo^02VrHk`NKKEpQ^6~
zA5c&HlSteR2i0`kqH|$28KJwb(-P~&i5r|$$5{^E=kcb3QN~z^B2ri0ySk4dW~F*%
z4}YDY0m@`@Bj+HtEUVUx%yQnXCZv^lqs)#2r~Z`m{>=-{(O+J57{CErd6ghMdx~8h
za$E-oG($y*)*<TN5{=Eu>y(6$Pckj#O3z72lN)IRzLpApRSx@oDw>HMZ)q9=403tg
z)Rp^U<KTCYfTsO!Z!N7ZM7$yMvKjXbSoq(&fN(=jErC1YA$(*MaLXuQB(?Q4f1_&u
zzJ)j={+751B0SyueuKRyH^XIJr?9bRg6gUssYS-eC<!+5t9Z@oUWr=c>0@3i2zmiC
zvx=H{T<a5Ge_OW8?p71yQJS+=oDRl;NF@6zi8Y~DLLWdg)FSgb5t%;*qpl0O9&<hM
zFRbtN%C0rQgTH!bF6>krPtOIqG1L9S%A7}e<#}gGeu@+&sPnqcP@c-^wG{tML2v9Y
zT5t4|O)`q=0<uamVpn)>fgNf&Dxi(|or?mJ2QHJlTE?D~g*0zrhT`QJ9F8QdS4N>Z
zDtyO3<CSrfkzE7uqU4_RvM!Zh-_b74e;}4hM{xB%f)VsU2x~ZFQuIVxIc~iJH7(#U
z%Nhh1xH+}-?`^F6(yK%A0yx)vsV~@AY(absfrB}~YZ_HlNmTchwZP2!M+IR=;0hUv
z#uq8%h?YCg=5@F`u#@ys9$d5v79mYd+7xVa7ZCMhh<e{B*yZ0gQJQQYEA5-eY`z#t
z5xiTZQ0elwM6I2VmBOr4{Q4cFMLS|UwLDw8D#JMZD09B$z&JTu?^O!xZmD~JPa;?y
z<=%hy4L=ci@-?`jwo@7Edg^a$W<HKZ7$8N7iBto;?o-)zh@+}p(+4iQNh~+qyIt4r
zGfjTh>xjX}o`nAQJn9H$yltlt0S#5}!q@p(huJ*cP5O-$3=sjtbh;K;`H{7w>A6k%
zZu}xCm7>`>P)DyAD+R=y1b!+-*+nIr*K+Ir{F!9usrW_vEz=^QdE%1FF;Gx1^VQ=h
zVRLywEkn<52>ajMIDt`)3a?&2-N)1;0bi^ubcA^}+p*{Qb4C@_5x*(S{x0n13Kq1~
zlcTM@twixAfCyR5<69Z`ZJnR!5Ygl%PkL1xJ3C$+?y%g2mUHg)jmj+)#0xozA;%2<
zZ+6cU9{rGkTU>p5^t_41&0D)_-@A0K-D2<qczy;IpDp*ScWrtn5DrbQof>p@^Bczi
zZ*r?DS^0g~bCiJs+ZOmiLowfsgaGyKk}oP}Rk#17wli@Xhism02hjO5V)}jq7bbqU
z%z|t{QNKQeRb_CJ^7j+yKjw{N7VaWoo~#`u&>fl~KR<zr0$Fl5T_)N#zNX{n{jQ_m
z_~&bXbsRmVw!@zg73fDbbCN*wV2uLz5iJ(b<XeORA4*G=B!{OzuDMLLQ-M>8vV*f<
zFXdTtQrks%V@x!4{x`88X!rUzSe0n%8Q(6?T%a`4xCYvbbSnBctRq<g#0%JN8#MI`
zw$B6;l_5h`7o6E{8vqqWm(zM^)#v_3q=D}+r0+aa*e;lY<USdcMY?@~TGsCU2@5Zl
z-7bMRpa!;8HtEk?WTTdK^zx~t?H#yZC)C`ZN?EsmA0qV~uGAC9>W<2*Z=b2o(47hZ
z^8c7AkTzU*Dn+?YZ(!?h!!qxls_FwI?@BZ2J+ZozWV{W832^(P&x2%$+$ldH0PlDc
zl`pP5$2fj*HzB>=kESUIk5}!SI4Ul4H;pO>sC=Z;6<y$j+Y9%pw7ymJ45w&U<7=8P
z;#v19XT=KY+a|(Ya!Fms8(tPDiAim)&a7@6_ePiVtCmF}NH&EvW)lRO0fxHA-#}A6
z9PfS=MSI>3KSGAzXxD31RSQK`6pMz<6#mX&goVrKBy*0n0}`|urP+t|drhvr#+yH*
zo{bBle|{j8Ff^ky>=89RNC^D(a}wvqgKL7I@VXNXfB(G;3FlpR%cx>cA%*8B6y$Ez
zvYfx68{-4fGo>8Vj&k0x?^{>)F*u+CS;(0{^4&~s1J@x;NN#j~aIxd9;zZAlU!niF
zb7Pp9ED)iI{3U&+mIu(r>w)0ed{>o6j@ve~i~{D5K&dXibb3CYhy*$v)QsvP1GwY<
zjRzE*J?>AsC9Tjttc_T_%A6!6FUK;q^%)RG&ea+UQdfE%c5^!G&uJNy3ADh7-!<wu
zsJR-DY#E={Ir#Q!It>KAa+?*3K8+(sx?48z@Ar3*1+RYBEhW*6Lxeo_Z(^Y-YVh(C
zE?!~HpH0u25(D+`93VV`B%0bfZung4jdSMO`PE^l_;2fo+GqD6>}cSATm|1-=F>Z<
zVJYuyp8IJmRxL>0-#DcyOczf5{+a6}Dy%+t!TS)E6t3(Vf~INGaCv^o+;jpoKI6V?
z5On`h2jDSF2-B+LoKjiq`8|U^FQ+)(ZeNQ<hd2;WW7=l4ZY7`!FAMU~Cr(_x_H!X}
zPeS%>kyolSQ(=fQxm*>WO^(YP56nB9@(kKgZ6Lza3?1iHTJ(QAe7;iZ_Q}p;gsk0v
z+N$<s8WinkUK~^p%d_0}PDBAa>?_w9A$Oi-Z)1!IQ!)oy+W>uet9hPcSw~iuDy}8K
zlqtfD0~8_4>#;^a&Ucu{7tpLA1DMY52KH}EL1P?$<Qo*YmHDEy;=*rM=l2>z?=zci
z*Nc$G{V$={*CBGhA+3TSOdZ5M6<EOBMnq(Xiz?!?)yI9}hqYbm>!<-z1i3J~WjI4O
zd09IGxyH$Vmk{>O0fAUbw&K|IFT{xlryvWIq&rE-@8ESltAoc#F>Zs(Tk*TOY8<O+
zNwnPjS)0Zi08+f_XE|Ic#bTtIbMwmH9WKTj4{*rVz9P@tI>^X2+phdlGfNAikeHr#
z{vdMIWk{7NQ$V&F^Y}m|rYtjACC307`HmMlih0ZT0|QLUZv2*${avB~1SXG6`ThhN
zFW^r|Ubvi}G`l2~J7@Q5353Wxyi;MGf;m^M@8|_K%{Wn591EAs#Hv$xg<TqTq@2tn
zfsge&jdxzeRob&FxeXa_<y{>|))>BMR~i^?4I?3d)0dMx=e-&yU!J=FCVW$tfYR{?
z>k8%}rm(z@uF(*4`ge$fgKVcrZuH5e=7(|P7#p!(r$j-4DbW3V0DYjn^jsZC9b3ny
z?~K!~a@duXfSKOwOyiy_%P3(2Lyc?ZP&nA2BaDrUQ=@!%Bb|$7eloHmlZ@VX>^lPm
zNKEwf?Ruf^Xp7HIAPx;~rx`cKBgT1E_jv%i<KHF4PMt{Irzsps52i^ox<f{n&T_=v
zan*hLOc@zb`yV%)RfE~L#s6-pOf#}S7(sbAJqwGZa-CTrj@eGiw&Jo5_tDDY__x~!
z*yxr@9MI!*XIt4`h|5<>AdzZV>22PR3;gZ1FpabeAZXk;@MKaFf`2?~M(<I+q0iW4
z1QZZ&^=6JT^6HvR3<PRCcp5LjSbTS@t3~fZ%rx^z8^?$@_V)q9cYj_7g5F%rS5|`N
z<wUG8-@`|a>UCcE{N%k~sp?#RYH+`pxK~-px^eX3PL(fN5RrU;=aqphFHVW1w$#qt
zHX>~f_^L9D<1FgOWGS}jbUJWMT=!#uraP&FuL@s?hfS7`$r6Y4gjLd&4oT==khQ6Z
z6I4{Jy9?U%#KZuC;ks;L7Chs1yqQxiX@ZwY&$R(()(_NWH9#jc)}aQpd5u1l&aC`<
z&Z8jHzH_P_;MQNM<_$znut+mLKpm$e*%=`ZjO5cgM_MXJ*7xE@qP-?612Nz_MO86Q
z-MjQQD3Dc3S9!p+>04z~(+~u1mEt@Q)M(}9&TfQ}O4R8^N~9Wr9}qEG#|gl=0lDLK
zuDkdIU{~>#1?SrRKUTwTt4BBqC<O?`yQ~^$ex+5W7#i=BaUBP+<CT$Ta1l;k9mmZf
z)3S6fjbo}t;3t3)AzMgcx^e~V!xsRd(wRDh3Mi9}X*hz&JsNlOY~VO=8R)c1ElZi~
zPr$0vC{2TpW*inRa*Vz|FmJB5huTc=p0HP7LYiZ7NZolrD9+pcFO_p<a?m%WFr(4F
zr;;X{2)};=V7$&3Cjw+vyd)XC>lvSC!g^{n+>pfLQmnqbn&&q~H<Z^R`kvZNZGGZz
z_$(E}cIZO)PDr}eK)-dO+qGMlGn4bDfQHEKd8W5Xc^Bgftth;N8wCG4n_Wi&28)^(
z21gLvJFAOR$d@2PsCbX-T8HDrX?5*<yGa56Ps{XFr{4h4EV$tf=>n9^MMQ{!rbq0r
zrHKd5+*x|U`0F&{v5dw2)+_|-{+8dudyqhR;!<0>1f*$py5jh`G|RS*s{xSceFhVO
z^vaY<2;(44{u|Orx}0vic09BF6O;Pif1QUaqoPodLiE4X`wwSgu}Ro_VKd?SS7PV_
zV{PHi3mKzEtH<#xwuzc%#-%#vU4*&QAqX@zrX3T9$@oBwUB-0E&wUWhkN+JcP}ikD
z5J*4mZgd=n<Nc8}l<q)d=gZz(;_RyGaqNpcV<x6UUC7N|MGVIE+r5Gw^Y&ZBeh8^O
z-m$FcSq9pb?s_eGf_^_A077-5?zN?G0J+TQ{mICAMgB-RDdIQ8PfSF<7tU1L#Yr#)
z$xs6B()d%B1<ic(LNBewBhezQ4h(0;3z1d&snRYSz74h~pJ#B9ET@zwBA9t_ru$D-
zq`E}~q3n449nVqr6~Vkn^Zs%TvKfF8D5BM6=zGpE`+6nE7TqmW$?AZ-)H00F6NOj3
zG=kXnPO-oH3nk__ih8bh{Eud^t>JX#+_kTJdZ@2Pk@J!6_A0h<+&pGx8w>%*FRIEi
zcQEc}qY7lAOLc+E5Ntac(semervm-sBI>-~V1>c8#NSKC#h|{fc?%f{@2aY5#zT7x
zk~ERtP5{svbIoy#y$^k)x}1X*n$PhKD07VdCxUnypzbyk5Uyn(eN(>RKx+0oEqwe0
z!k0zfw($eaLCOmRJ*kIr#?vhCGw6*gk+M!r52%>TZ3J0~zR0Kw=+|lOGyI?0Zczf>
z+zt%a;Kan1rcRpRUR{uiS1cQRDHnxciF<}7xpv^&kyV+^p9G@!M5IwuqcNR;zzxW0
zP#WTJeEN-R^*5k&0L!BLOdPmkO~n)-0I*d|%5{GM@SofGTP2E8TXzdYKU8DF2xjYs
z6sDuw4F~(l3;E!m+)aN%naLj`ITk=OM$z7TPkVm$7m!w*{=kj!w3Ers09BstDLE>W
z1CwuFXs7P2*?BKK1%neCm$GY;>b{S7O&{?)oKjz<a2{7jgtqd$$RtDeT#-TgEbm}j
zX4yHan0L6X(ID}^R1lC{Jf*oLNBbJm>lT&I9<>WKjGVT!5;vQ*!Ys{Wge_nu|6Hju
zO9Tp*>Gg#Ww6pQEJjjvjujiNV%&(qgjkP-Mdv13<j=O1~m(XfbcNjl<STE#eD562+
z?+1d@^kPOm`=FSScJ)SKCFE_Ox5yHkDgf+=D`tkvHbPO<Wsex@+^<GX^BZwf4Q_ns
zdzewrRS~n75X=ks3?lR?gd}R8tI}e`^|o`82^dw8NZ66{XAfqdE&?d1T;-^@CZm}}
zf9jPathkL_yI&c=asftlDe1UP8zG}~>>Uu|R0rG9=s@xIIaaxU0`@-4XmtcDvKyby
z?@hOR?|ktpGHUZvrH&FiF=kb?R@{=UQ_D1esUP9;>R8MX+R;Ks3N+=Y6{uIL<|z?G
z>?3VLo6jIf?i`PxFwKr3zF5jq#lQDNWW;x7_%y(F?ScS99m}8zjh5O;RA4S}jF*0{
z9k!0Mgb<pDiho~Y?&PfMKm$JC-q)C^d%k6`s-HDlo+hjy1A^B|_@;NIe-!}OmGw!N
z>u-*An1!53k*FboE#Nke^3Dur*O;QDrdN<SmizZE3@S7)(NerE;=|s)=j}OCApiFh
zI9D5u_j^I)OkThg&^=)JTSdrhaunf~Cy@dez?**-RZ`EQ*KhbZ=#4(l4Wc@V(1KrU
z?IhTl)ynGN;B0w^3@5@U(5L{Ng2Zu+a5<m@z>L&N+AV%A_hHZ-Kt?Ed0cJwzH;&sA
zm^kZxJFTX}OMns4rkf(GGQuI4HIkSBQb^M>T1{!x^V$$L=N4zJes3Wm<y*IDP67I?
z0y+rs?c8q%e%&Z-6z1}ptS#yFy#*OQr+Zf2{<9|8gYQKrayTMrY|H)F!2EJy6P4)B
zJ5&@s72&l90X#9R#xC2%u}R>rxEHg3cTGD^k{qPODXU_{ZSd;2d?g2I_Po>QI)j~q
zvr0t`5ryMJ7INdyNZ_7GBD1}$A#S`nuSU+@9d10@kXGB2dQtQQ4Db9rs1gFD9CSA~
zmBUOt7>8P!Qp-8B1NFSZE|qvw4^qV|FTwUXasrqZrQ=c)zUUiJ0+%bLy`J!wM>bF^
zY=4vP@Bz=_2Yt4lUBl^?z9%l`KF3U>Aa~+A>Tox*0!aG1F59a^u9B$iy1QqYkjCc}
zgr$>#-;V`f;fAg1O~=p{9=C}HyC7|gDpm&Vx+lF`3=y2V$z)ar4qP@fWgr+|RW%b|
z_|#X}Wgxz+BekaDfJBPX%(|=MV<r2!zSysSj`9TMK(5lsa(X?R#_6oMk5i@;O9(0b
z^jrUz+Cb~ek*;G%b+L{5?_2Oh2*OO3M|?_e=aq`JW6IQW04D$-GF`_(bydNlfJ#VZ
zuZ)7j(TOS#+Z}?}F^v+$sMA#si(1b4Gcz1P%kC7`fQyOjZA1)0%{ZaD$uT%_;$KhC
z&4Ii62Q&{|x6MNYFStR~sHp1jF}$h{K(p$ehtK_FGv*kPJBMu0t+A*K^~%S)<dAj*
ztpgEzy8=+pX=BLz8K_O&>s>;)zebR}BfO5)gV`-Z!~&L+!YJ5&;>7&>5c`UL%RzD_
z`)*_a$(uskIx9*&%g@m9sfl)JzlXSgnq&W-L<bPIb+~Mf8`^n)0`)+a?tS%*f6N6_
z1ek6|MQLC!5r5+C`5kT$$Zg~fLpTQNf-K^XXf-K08sa{bXNOQu(9!R}*%oIPF|Ko6
z&YI&w!hRL6Yt4l_Z@(wB#&3lFU%r3@Uc%5#&zA3ZJ`P+Vr$3J#Zjsq`)k$?Y+3m)O
z=HT_a9=8Tgs*av<AcySn-#&+%VN7k54BXgv@0xjvD$l<UXm}debQvlhd{rp9fp_+P
ztIK`?AROt6M(~Ev4Mr-He0AzZ&${*Fca5~!aR>f%V-OzAa++^<ak%RD0gDoxujtv>
zp36`YZfc_Qvth14+SIm}bAU{iUVK2(y>*!uIXon9>f6TyKuonlPPeqr6hdd$KS-Zr
z<mwSQOq0OVc2{crzV<}8`~nPqzo-sA9=yWHEN!x?sB1?Vpfi8;IPlj;)zb0hCaVAU
zHV#hVWXU~zpLkdAT>y^_YJlfl9?^<5<16AlyFcp^1n$q|_6>fIq<a*-++l#`jmLKt
z6+36O65pV@J;(lKpr+@*{c1!1Glh#}n<Y7r$n_4B^xgpzr7%ht+!ZX`$H{Am*1w~I
z^taPHALm1M)r*ir<ow_^It-hhbzW-dxDsuYPiFG0Z^#~KrG~yU-Yg*N4$M#XuE9Z5
ztRMM3PkSQ~AesSO!cd-pbX2_zR%O2svR<s*=fvR>#W31Jg=p<*=_<Bm?75|}TzQw*
zZw3k+I+au!^>hu)Yb%E&b((~T+CMV@#ht<$`!DEwhi7U^APZ-U|3T6_@>qEL->1{S
zS_Z$a50?S~|3>ANkWF0s%S`#_EB?Q$R`S6ALQFksp_;QX%w9OZQGlk8ch-;Zxr+!^
zY3XiR2A41p$B$N=)@cgf63Frk^N@-_P34&NM)g{w_RN!5hwfDk7s~5H&^ZM<Wi1M*
z+Tkdgp`uwDpqKiR(B$`h1{aCs6z#Z;)YCNOzyz$mRV$LZspDsj{(tPfA0!5`IVc>l
zGS2|`I3XFy#BN7`Zm*~bmHDW;BBbzEA58^gtj^go$qUY<>)rvo-D3M&70sm|Kg_J?
z#_iidYL@QeF^=&m#yLb7d5wO~>4GUhuto8w`GJFvRQ~F5WWfDZiry4XMHz1v#JN({
zVuzzs-o2w;bx}54=3yF8o@-{OsFmS!iaI~P@BGc1{O{uf`(H^dg!9C;{WmZ0_AT}N
zX0dL6HhNlaes3B5p7;$nTce{y%^cOA_q(!+{aj~`_;tyg0PgsIn#O6`ix5Eun{Pxe
zeCyjjv0p30roPg`%&dyKK}EZ$3PIz78op?KOyo1Qg2L-+(+Gkl_J7n6vv82Cy|$!a
zap|a+lxq}#HN$0nt{sx75EU+2-p}YaQ0CMv2H=wfkYf5>p@))1;Af5=?|pkc8(15l
zLdF<2D+MMy)3|r&5`xEXnB}cx0Z?!OWhigN6EKTeZE~(ynBfX6%D$sr6LdUZbw=@h
zyJ^HMSmE<(6u{!-{j83cxp9C6rGfpi<ZAXP62-iw=$Ua^cWv*GAx?k0BL72C$T>{I
zY)~XK3nTC+6u`n)f4*ND_XzRapsmXkAehTsQ3Je0o4=1vlN%*E32DIE$!&9;^8wTB
zs<J%6nc~|b0sNl`G7=Nh4=en8o$=a33i1#Ev;jFkZV<h=zQyS1ls>O5Om6`4mL>8#
ze8Y6tXPl*GP-Yp!1OS}LB-iX4PLhQ6%aNe@Hco;0NF|$s?VFoXMd_nP2Wa;@2izW>
z`CSbIyg5O(S!i|Xwi$OVDbli1E>i*^YVT40l?sQJCpO}%wVNv7T%*fjZ4(SBzhJu#
zUt5%&CqUg2n;GdjEz-P17Gl}wz3)%xo_5tu1;bOO4d1_Yq{u&`PDz_6>@5e<q30^V
zD2bX4hIo3%rnlg*d+LfgJhw5_<B(6p>fs=Gc2f=ntXXY{A_xw8b)QwyI|H(f#4Esy
zevj#Ng<V5eC8p~7jrAR{<2nrzv|7gklV=kXL3ca;nu>~rlj5rc5!p$t!e{aUkZ?u`
zVoqeQwsa;J@#4O%+vpRHue#6gPKaP9ay-q91O?rSfA4b=C%diklJN>g%EkrY<e2e)
zWF?n_;`1$uf;EnqWqyw`Sf?6E5!?{)2x*a5`l^-}t)E824jIE_B`r9!v<y^&>mxna
z+%~0bKARl#0+js1`WZW%Xab7QoPSFik(TfMjR%XuNVzLULf&=b-*4c{n0R?YZdr#~
zuRyT74U|h@s7o{yGD8F##|!jXhKgLLyUI)Z1_uN*FN{(^MD6G|h?IianE>n3yO@QS
zeA1MvGjPNX-E`myu&Ai<d(M&6`IS|n7E959GVmTL*!k}_xRKh2GIPT%NLSy?bbZ7B
zCky=LxNUo`joyS&_9$E?5`8P0rw>q1b;y|)q|PMQ;~I^{#0SU$#*Oi0CVV-rkjNZo
z8Fx1SZ#?*!SUE)id6)i!lK*=`G0YI8npe(1rZ+P|yRrZ#LJ9fqR>DUB5Q(dM89GLm
z1ZOj17WicgflE%}Iw!k#m}GE;<%kSaIFn`*ri#<Sx|*o2w+<{i-==N#*D(nE!VMtY
z7$z!LWYZcYJGTb*<X_5DYW6WoA*z(<o1F#ejT>b{>&ko9&)zkz#%xE5#(RKuIkPI7
zk(JUAz7V-yA6})XSr_e|<Qv>RK_QLl7uTMm!2OP(wcU%AQ$XT&vg^Wi-eNTjk?q2t
z;&|nh$9g{?Opvl6V^;{y)eWQb+yF|P63@6;NIGvJD$o;5X9TIIIL!cl+vm3vB<XVl
z(7YuO-1UnesbZZ#jkZzss|rV5#mw9@_^gT|w_T^Yu83|anyKZB>o}a0KpF?=J_dM)
zec&o!+vCcGY9vJlGCBgOOyq=4pYnHleHP>sDO-mYvfCym*2ZF<R16z$=Gh-n6FdX8
zB?W?<JDNUIr+dYa8NA7!%tuKQM~gzQa*!PEqO~QZ$QkgXL_J*j<=>4S-1UTfDaC<7
z0RYo$LrA|}n{_SY(Czmi#Z1g2sh65kJDHW?gGU39Ehq70AnNlvQE-;$WcA}l@=Znv
zl5UYvwW{V~(dO;7RS(QC{|*vxe>0t~%o(F1Ytz;DoYp%hIYGGoI^T{i!@;;P_zNb|
zWn-rO&gyF{GY)8!j#MG2=Wy&uRimwpl%8Y4F&OU%ML;0UK}LS@LQjv;Oz>x9n|$>x
zG$7xPo@Ze;k-K^;ZhAI-=ZHJphd_u~%jn}(QN+KVoGQc2;d&m|6ys7#`)Ch?T0HA5
z%C3dy+axdilxv(>TArCR0Yg1eLiTyRg=tTrX{WU`dPy6g2{ey8COQYFH1^6rHPu~w
zR@<2fES}Bgcg45jHt6p$O*SLm84MhKL>!sHz<-@#7}@sIgWE>}H~wD@yzjN21Fb~F
z(D`}9#A8n41{mL2$4D+m3O}=XG+DeyvHU3~n{Tjv>{)k7KoSdZ$Y&|ZMVHh;kAuBd
z0I=Ld<3OqAaeAPY_cdN0{GYQb=*a5Ep$LBfm_SE8$$iHwCE+@5&(v{Onl?65fQa57
zkOCR?tg+SgnugP>BwUHg;0otdqw^eTD|!V5;m_7H-Y(Cf)T}B1P^=qQ%bM$qe2&!b
zH#guus;V)a>W`@Bt()$!AuS>!BML}idR$Mj{x__TySADD0+(~!%@pJEYAQnPT!{I6
zX2+vzJBoCDqi$O)#@iL#k_r)mks{ZgKNFH})9qFM>&c}U+IQPIBgwQ4onL_I-lLo-
zbEFbOI3>#t;3Hmumx*=E0oY0HornrzdoI&JAcWIr(;fgnuSr}_1~3Snaz5<=Ja{=J
z$l?J<&S>8Qex@mHB1+4xe9xQScS%_mb}NZ~C`Q*cQ=m%b(t5$enBgr8`*62gs^__v
z_htfOWpI`wD}trhpC0gY8v(u%X`5nYrZ7{%aNOb16~T%$lHZefQ^0eSXONKfaQFYs
z3yA>bi0=Dvae_a6X7g|`qYmJE5Q}6=<DNQ>T_QiAaN&~ETh+~nT9m(sm{vxnH44Ls
zXVnS7h{2Co%BNX(@ToH1fSl2`GyAp~2`5#VPfTEFta&_87dX`)86QaC=!mc8GJ#R-
zA<qD((2b8y6Ci#8SCq`Okhwzq_ZiR>IO&%Jz{2Hz#c>gCCz6{aKE%6Xsc-K14p~r8
zDGS%-RT!QpUZ?s&l$gEFSY36W0H<Yi4R6pT{|+<(;-A<AhK51`bfd?yMw?Zu=Rnm<
z#yJ0XkbnrL+Dz1f-0IA384fB{E_B2ak0ZV)jg`g`{hu#8vXIHnm!o%DA*dUdX}s&Q
z^>Vjf5({`dKFlZtfep~ZQWka{hq&@<c^3ChsxW-Y1eG^VRS8e-92wi9{68z*&s!Kk
z;!cK<3w_<EvA(O9^XvlikXPL~Z!PVBEU&DU_lWOMjaF3$3+lP68^;diewLQOmWS>b
zw)QhI|Mw_gUudK$avES8_{|SSDjmouN%Q{Vo}Facg?ZotHYq)WKu&76yp3y*cdMJ}
zGXRJhwX9g%!WGeY(CGp65x=7zj=HjVI-=Qa*Gn5Cr;o|46h9q~QrS6{YUAN3f$jeL
zluyty3*N%|N&NlqHHMQ(dL%EDvV##pOzDg{WX}@BF!s;rJpvjV22z|yL>|=`W;5Df
zl~q9sS;fD4o^t`AXZd*CI-GM859pH>u0mbMtNA)Dv;P;ih%D5IYq88Xi1h*;CUxtY
z%zkfS8bFwm^}i2jb&hlYy^U=)kVR2uYh_TI=IwCc^Zr_8cP!ji6Av1#FoI~u<_?B_
zUrAEdLjituajfrDO$8$k?`N$#UbyzyFHXGR2T^Bn&bpx1MwT_+HSr~-8CDyP#EVdB
zPIYD}8c)_|t^WV$$opO@1gvJ%k5bfXlot?VywE6`YG(KGod7PS%!1t0IN<d@#J2r)
z+PnvK&(<6kgn-t&zdurOv)6bP!xja=rC{n3S92|IoX87NXI&2diSe!sQwcLo+56gn
z{o$B_rac1gsE*zPj3R(M5vd^8f<#EE&ZV=h+V+^#Mw0P?b8Ge=OA|`AUoXt{{z$1=
zkJ|{UQ*~KD+B(;_-qty13nXhGy7iWfXBrTC$59jcJ^X~=-r{_Bt)wf-e<R>;Z)~0d
zUQ*uD0LT{~R^KYl$#m?N(Yit9++Y?pX)=oQBZ^_G@AX@R{J)S3lA(8jV|L3<OjFvX
z<fe>e)m&bi;;{>5BITUUiI-xky1=P8?puALI1}}%uBQ>|Ju<-HY8&4Ag#lY%ux~l6
z(cw|Qnj{Um4ToK=<!K>cNEemi@lQx~A6Y2ucciLOYCC3y`@WBEG83XW_ZVeH^Q168
zLJk>pqicf#01f}$-UaU)M|yu}Z5N8qzF4{6vGp#@-FWd$dIvM4%=qs$4i_kx^?U%Q
z3ASpg&EkAC!~eiH9yCRwUglDydt0VdOb<)-IDkW)5lQana9K<~01+jnm-c0b$#a#t
z4zNBmx881PVaQ?}a3FVQUyCEpdZdgOUJxQ=7V`~KyNC%gN>k}~@mgKQ1n4kjeLl2)
zt9=VB*;7wbF6{0gU~eG`@nHnv&Z&UmdUKG*JPvnGN?~qM0qu=Qye2cLU}?ypEM^HL
z)q{{ERUBl`USGJMI(N?{pnwMB9GH=7BsSbQSwO^P@u1FcpNYEBM`B_N6=AuU<@I@z
z*KwVEJYeHnfS`H6D$-1JL|o38viewa^Rj{wOFZ<`e4ar=h@0)N%R>)zgVs;I0KgLU
zTFpDZ{e@iyNst_Le<wn&8DL0rv?>FHBf1vXtHW>rDUe$PD-W8=nYFahO3Q!hd7T&j
zGZp5Min27W9oYX(&in+b{y5n^U(Mm@f2=G<8$GBQ=cP?^G)-I5vLe?R;f;couS!z#
z^Z=V0Zm1n%3e$eyn`9j+kzwsuW(kPt<|=b2=>|Zo_U|_U2`Wj~(|1Y*QT~+}nn<`+
zhCIQaPOVnMkjidZo<YOc@$s`H8Ywd_(l^}78FsYpu5$AcocL=okC!v;=^W6le88nV
zj{(~hT}1*Dl!jyJ^ZO0JSWc+|wks$LLiWGenWKf-H+8r_y`6V5?lun;Dhm(+7;!Aq
z{a?6(^eOlqq<U#e_JXWbQ_Mv~S12oKOCUWU?=N+I50o8wT^t#10KrAs4(D)OQx@j7
z5$LE84#!20PjZcjR!K&Ii}z(svmi;2j=ydiMO-Nh{g5sX^w4Bc=Mt`2lja<70gpf&
z4@PjtD=p(HrCwwyY^}o9-@mUB;cQ*?l^ugH=FJNPmvJg*D)fIbvTJ)&B1jGrXdjX0
zTfqQHaC>WoW#|8p*NJJ&sGBr(#~se=t;;FzyF?lfPm4RfW<v6EO0=t(6k^9`U70&3
zT&enfzl(3s4MrLn0VRn-P(h-;^DWAPWP$3bF)h9x*smd7>4ZOVdQh%fzQ(jP*O=Og
zy8vfEn7^fTt2BM*L4MT=#@VO4^ci5t(K$6ZsHKFGjr?8%<w@Ft;7oLSYpU!g&>iY`
zlz|9cvF5xnTn^CvuFD!bwwL~crQxFKmJ55rc6)&0cJWRXv*4b`t4YGXQc-I@9|7d2
zDMa}I;&=Y~jTgu2ozYB0SZX9OVy&!Q{>$Doa)oZ|EQ-|lS5hQ#Yc6U{_3~ol1O7_|
z0c>f8CcB(C@hgnCmNVDhN!wLEHzYvg@#|c<z6f(_5eaR-wVdH24vU2T(tk31M*3`k
z_7^Qn{#29N>oVLb54kQ;PQWrVjgkV32!93W0?d?N2fYjkodmN3gV3MMIBwq_aP0(4
z0TbZVzx#D`)%9W#2zmo5X;#BJS6r?n`AlN7UPp|8)Kj{&k}i2yF$y(#c~%>x(14Hv
zmi@NuIFp^^9TmsEmYG_13B+j1b9NOsf94mn7d|(y9)oz+b~X%*)Q_c3g$R>%eOmaL
z{qd|j$D{9Nv=s3Qkz}Q2b}CTQSRaYppI?+*DUaA_Gvru!y)mo(T+ZX<j}HNrA>=JA
zM~M(K_T1CXE@hPo4k@O0hajx9+>lBS*AuE0YX-_%cyq!F@OAutX-C~OUy|i|Fqm?!
z#m;faU%C=>@PFU@Dpq-VY#lX+y|=I@_wPf*4H-qW$pZg-c`-YHMFlX>g<TJ{XBwvm
z7`bW1YIrUce+KZWa+M_L{3K4j5$(Rzuq-kkw;j-Re<!p08Ms1H4C*uknszk|@fs*Y
z-oje+=Xm{X0YtBQ41&s1KFfqw%7Utk?@s&X{FdZG%rkeHPD9K*=bG4zlghfJR1t1;
zfVZ#Qlgleq>2pM|BJS{;mL1@Y7k##wK{fkZlJjepzO*351p$A|41ni)x{Q+|AA?Q5
zdK^@UicPcETDMpNJn;c}i}+fg+C=*dQmmW6pry}o9a6SQu>}Yd%uC8qGvBYz@h&)H
zQ6_dnYB;rK%&|Gv<)wOiakHv>rw}NG>VjCm)QCrQjfP&k2)jtdzp#!UeD-U-Rugi*
zmjZrh09)B0C7e^PY{_dx*k+IXIY^^2%*t!Lct>`A9#mkJ6SOco5jS6TS3t*xFD_Xl
z7wQ3+p`x*o$fc*oLCd+`d0F55a#MmTuqN)NF~B=ODfiDUs)1>Z@|lNmG5M(>jU3DB
zj+eQTR&T3wKz8rk^!1*8F-p)w8p&uSA@hN&coh-CsYxHW8K||ad)EW(Vw$z-z-SP(
zK;9N$#9JJ0Y<gxHHEGk;vrS&`xq|EHHYtFH+wMdD(!q_C!sz{(yPDy$$Rd%fO;2jI
z_m{hYs?5H#N@j=Fhml#LUL(?p+Iro&>#O?hTRHo0acs1NL~2Gok@3Tff5{6J`L$l#
zqqps4FdP|<79)nk<Ci7f5~ycUR{J@LiSwmJ6ac^hS4_rz{wFA1bmy2(jvskgpx29E
zuG8x{62a_Ug9?<jH9N;eA(nRrfW4z2+%l2qW>XyY%pFa5%b;}Vr#M`x%iE>?jwHT-
zxy(KdQ(hH@+S7H&1n<sqTHpai$6dot(NJ*U^gEpDb{>#<H(mvR1XjMKoz_MK<T60>
z(3(ZF-yI_Yg1_+~(3wRhNz28rTg!-D;dJIIBYwa)cgJ@ws+HPX6jw8Z>+qj7ewR*@
zU6Pds&f<C5BW`;+vP5}k+&;_}172>=Q+@(i%Jui1PTLjyH>!~{?LUTT7CDc^^EW$=
z2fos~CV9hTA4e*yuCiHgbcS=-bn*NBgy^XE_(}{>ZpTSolLl)!nX2LlEIElbP0R&o
z^le-2)v0qP{}nK{rekeM*O|I*l0kRx#}NaG?yN0p7&yowRLfsEM-f$81_veFm&5ZN
zaA5U!4iHe%DgUPT(?Gm*ejeY1ZHgzP9WYaz6Hzqt^~6(*dt3l&NHTX64-&*r{PchS
z)s1mf4?FjIn^pM*TS$D5zb^@Lg2VXgvLK%>^`51`$!TVj0}yNMDYr2IFU{``0Rrl2
zBKy+uw8Ah8dc9`wSE-@TTK4d7Im#oQjU+AnkwFD)F{tfbue!@}Y1)OCc$UV|fuf9x
zZoOvDa;CM$k^Xng4*$d}Ogc-ByNIni|6{cR_P|FCmq?1k+=`qp@x&oICkvyZc8<Ho
z$bgJ!`k+R{94h+cMu%&noffh$XO#?*7V@|<?U4p`<KBT9&cGn5N>6fz!C5-<0eyxp
z*63l}bw0{*T)q1fUGb%F04Os|G7&1T3?1Wf)7J303odk;J&G>+7-2gjHT83AoYGT6
ze4fZ%FJp=Lc>RD(CFqchbUIRFDUw`43wJE;`vI+L#N<$DOJ?MEcbYYekkZ(jQ%)~F
zz#;KYuG+XK;u%?KR4%}ImF#ex4&Ki*@RMd~auSo{D7}eDU=-BklCarv6xIv#O8D{b
z-#3WEFHqNi?*edC(}`UWq<-=T;;h5DCl#VfH>Us6am1@u-8P(=**^y<;6AFxZVVhE
zGwD4pgz_Vc7{Idh?|S#Hb8s|c|DDrx7ao_PeWL)ZYYX3x=|BChbK597x3yQv+!Hqi
za+;9}V*!cYb-wk3J&@O;6fMv8$P7kvdjJMb9G@S^V*RasNSEKB{31v;k(KT>jgm5`
zv?iNfBi+0|vte`M4K2Y39E!rtF|V<X3dk?(sE+bA;dza0pI^;epbB$zGj!aLz9aCy
zJf<+XW&K>|!?9ycZGHhvJ7WUKDPfIB9-$vB?ZHTQcMk4LtuN!>nuhX>crKu_<Q{GV
z_?It4Ai$;O_Q!cjni+@_-2%*$b(0Qs@G(xO4nuE$MogTwGaG)?1948;RTbPfjW0@b
zaVse-1z;tc%XAqhk5J3bL$hDe?gNy_$wNuK#eoPLTM=Gn^%16x+%4~7R;cag1NM7I
z72shR$?Sr^;GAx9wCv7$XT!$gRG(TkZv+HqfF@luy&jeG>lpO+GU4>(`X}>H1JJzD
zX<8RZSzy#;Pp$3e9MIRb`=e|Ef#X>2j5j|*(Z_TU_tUon?}iF`P&v$11NRdPmTAav
z8MWR&#kh3_@`P|YPl0gTaf=Qh%n7CN%pv~mKF`DYpiuJ?xkheOl315MRoX$gRXu-H
zziDhwa})uZKBZyU`<<oF8PpY|a|P%v3*Smhm_PfQ*oLj*0CR*QlTTsRb@J<&bqeCi
zk<3(64LG!BMljO*WU4gz4mZ6Th8~yuCWRj~)0^fpE#~GWYMQkBL-u)hjvFqM?)#(w
zTwcr^ga@*`HR(u?2WR<cn&KtQD=j<khHKMEjv)@?fJrf~`j~TnTliE(Ix3?8?vcf0
z;GbR(r;gN_Y_!$NTR&Lax7@TpAI=2lFmhWsY<SF4J;!N3K7QP$!zxoJ1du^fHLNZ7
zy+IwN-_=%j;p52>SMfoO-4~McF-Wzg*?~d?V5C{T;&%}-rd;to_c)Qqn*78A#t@`Z
zgf!gBdJ7PMojDcB&fE78+BH!b?;S5oGzjP?7}qNZN=j8lbOpa|wv+z_7!<z4&rqqU
z;pTn!X}C*5tAt-}yqt+P(`gMs5NTJ2yCdk)$G2=>gw!aRvxEJ+W4b&@m<xzs{*9Hn
zq?O)>c*q9is&T!bnAR<>%Zx#qa)2Xv2k($!P5{e6M$_qM*sGQ2jkV<FRDv*+`PuA3
zK*1H20>mf@n9)2$mLMr%`TLSTBg0qdi51n>R9L;VaJpHaKXf(uvqt9_<axIoT`t^#
zkz(BH*CY3t{sR7&LCuu#ZSW>urKm=Qkf820oz}5-X&LAJ$a5Z)+G+1WqN*D>*WU+#
zKAYQ!GgJZdr0j~Y3F`1(XZEklP~ln!tZ7;#iL%D3jziOcG2GiOj2AyaXy2mE{a$7c
zVkG*K2#ms8CgXTvp66VkEDX`zC7EXsSS!o2_1y57?@TXN4)}y2Q<S|IZrd30UGqKa
zSjn-Ac*|>ihHM{HtP{|mYK6uf2GrGOspk2yT^(=FHBE=OFMI)vigiCLW|6|)Ixic*
zXv)i(N<>)q>Ws4H4bk)){XYFqxz&~KDWdwEgLx__iL`J!&b2o?$BVw7L(T#2YsO`K
zk*XV=M%}{N5M7GdW}&1{QpF8Vm)G;^_pv)ScTf|e(<y~x+J(!zsKP00+__#QNna`D
zpsH@{dplE{&-)-M549EfCFA!S00ovJ*E!`GoHt66xzRVotJUF*DSoc=4JSD{=(H3|
z!Gv{cH_W@$kAjv$`|}V1i<~a(;?Dss|9g-ELb=y+;Hn_P<!xA=j!2%Q3<QidWQy{8
z8|yqhjK9Kfqg>VV6SzE51%|R8${nMB4^m|Il|BxxUFh{4duBl8K>05w0tuvSIMbM^
zts~QE7vy@EcRnu1(GexIKoV#WVpLTViylW;^v}fAdX=IEa{m-&4f2z4*Ni+b`2W`A
z+Nk@O-rcf5^XAZXI&F><Oew730s(diQk@yU;-$W^66s2pXVFIOSj+ASvOA@w8oJ8}
zk<SPC;OHcw<2Gcu$qbX=E+t*q^)9!wzoy|ed#8)#CAMYVrrCkOdsO|t*bskS5k!Co
z#C<u+r^M_`UWjyqb@B}SOgo=fX?pI4lqv_Q?_MbW`R_wyfz3$|qf@SPzH?D2R0p6X
zr7)0apUebA<t)^dZ$Ncl0KNAhIdV!V1N~&}t*WXkjZI0dY;OeqH>d)yw4J3qv2RAq
z4~8?HjW3pU^ZVrc@#xt-a@IyIfRI_2A>YT<Sac0>At$W)R&@iC>BxfN@VGs&y*0=M
zNr|!wvUaOJd_2EF!A2A$y}}q}8{XIf&Hfxerti28@BaM+RL=8nN-?&$4MG8-&#@hq
z$EWD?JEaJ?QEOH^tl2&H0sj379+77M`O|EQz`v8*Yo9a(t<O$5L(}=5VBTJxRWn6N
zN`D0a*C_7Fv?_8`Kf4*3CEt5jJ<m%WS@)WLEs#yG)2d^EasBM^z9+F%Zuu%>x#OPw
zqV<TFU37qf6`E}Js&F)x&oYzc5Esg)!{NF^_EkNx)n_gyJD->?W7Y3V#>E}xS86ID
z#tuQ!)Rzz4*p}lM_)^uw?;rsE%C7&5NC<*)3djOto!%~H`RXeOLDZndirX8~x^wsv
zGF^}8R<<2`t^giK_S?%og)?5yYpkH6NjJOF-hG(%fTLTLI<Er+(R}S~+TsD0EFdeo
z7?v{%0Ql9o3hI8-Q)%%P$K~JHD&ibza&wJ1u1DynsMqhh6yl|KMUd^6zGTbdQ0*%j
z>op2h6?ar_Ydb)QcZj1(^Xqre5suh1{r4o|lAk4je*K1q=iBuK=W|2$edYj~KPER8
z{DORCWf+WzN^h@DQzYn;4hQ1SqBNE%g;jt52AjbSxKQ&v#K>iE`L7j8XIS;T%vqV)
zwG6a?Yu|||M3{guA}h@;QX$^V%hrQzB0X2If#&@yK?qQ>t4=4x=n(Qu{eZ@AG5pD4
zBgx&j>w7r$+|>ZD49=eZ`wVKw`5q#gPLCS*32E7b<E;7TxLr=S*6k@$xL2$qd<njP
zr0WYCrfO~<XdPmP&kx`qu$Z)sL%>yf8<t##UrkakU}EUSY_kB+<4tSaT|1o5&~e&l
zW?ccGtZTi^%w&b%L6Ge>1cor)A`DWcXYKp<6Y}C@o7w!H`0H+IV;E$AzP0s$K<<v#
zQ1G<VF-}#;$H*))`pwI{!YlNYI+wO|--j+b%Sg-Q>5*{KpTM5OSAI1~B4@v4D$E6{
zM3|9Z3cDi`|24;H<onTWtN2wa&zlxFs8L<d)L3%r?heve&)Y6Mlu{`{=VWGR!^8vN
zcaMZBd)JXViSPUYkYxo@Rj*0FA1l}0(*f0zQqwt$3r_EK2Fl}W5d6|y`Ek1MHvs86
zQ6~`V0&;$<c|hS|>FyhlJYBW^z0Qk|Nt<<LaKGujjU(VJBEJa)1OMx0aXWRo+7Fd(
z$s33NBRz-Ilm%>uot;c*e4oMfWviz6nRsXEeFos9u@xBwUVAs{Y5W^d3T4El2@)Lc
z-g%2Ky;s_Kh@3chAF%(wuhG-=N2~jZng#u>sm=o6IOQ3%T<Ah$5X$1FW%={7EPa1A
zek1bp5UAVhb<K`caUTbNN+dfdA?#n7<_cKXyNnO)n);Y#m<PGnf&EH}Vf)oacwS>Y
zIU!8T6S~a2-pp*XbhTvei~9&JymKhUW&R3*;=ts4n9_K>ivpUmP3oz$^a??GK>1K*
zraW_ICzzJ0ce7m$S{)n}SmCW7)VgOFy4{8cG|cY#S>diFCvop}*gJePQ)yf+m+yyw
z9gVb1FO(t|xIb3z$Sa?EV%kMH(?(WG-WrMwPp2yx7(y!a?rq*9mE71B07cJkj_r7I
zn^lZkXljKIc%K1s#%ih`Gy$5Up}vc@Lt4?q6L9^$y*5g%QNU6HN<i{8ym5yR*+=|6
zCazV-kBmZ(Cr#<G9DD_e7?~bRbO@DViH*1rKMOh0*HLtkWjUXBHY3-oHGl@G82Zr>
z5Z;RBrR0fPU2zp5Sv}90am)AL>J>e7-`v>1g67y7ZaTNe{|zXO_r1zC%b@$tdTAfB
zdGt-BZ#E6To1wns+kT0<t`Bph`Pp)e2%}?Y<sC1y87WGTm|E0I3TZU>_(r6Wz<0b(
zv5v^mA=4(hHFMuv*!$+r%qzdQGSIKoe1Q?u@}{=lDk4U#S}E#2rSL9pJMcK2L+OrP
zUn5b>Wv+3A9Rnx-jD(-4{1ZJE&NKkwz`zVX2zvsPi*sq7juzW5PGnU^uG;aAxYLC7
z3Jg4@DBJs)Wxv@O@jjB4{Vo$y4E~^9PRqbRO&=moZh95RPsfi)(sy=sQ?uEu&)-Bl
z4FMR)f@98C*d=zb=b<ri^>U2B4{l#gSs4NQdEvdzKu-&SM7Xnafc3`GBp@QCChKRn
zj0ke@ZaLxtjlZ%maANkx52RC!v&g@3Gsr@E$@k%0-H?H78cCP3|Gi8IF<>&H3<Gu%
zDd6$^1l;d?q@K9)C<rcQHLSD25dMT9aq2$f1BF^K(kkOdDEDGabsy(YMTF+5>sypv
z3-4YXNkG5ANX!n$1@;R|7|Q@u;F9qJbsf;9_8WnDabBj`BH8uO_WpNN93uQjrwM#6
z(1TkdCW!hp^nU;<PnBJB8z^gk=1|-WQPutE)iICJBuUeOmg!VBfIIH&>tJ{&q%G@6
z2dVAY-aFDQj+obYFjo5D#4zHiTay38Rol+YrBOSgRw=@8X&OlK?e=AyUzO|TlM36Y
zB;mz}Kbr(FNMMzZRCTKz`CW<w#I$x*)OV1}Aa4N>@dEa}>AivxIT^U>-UHX0GSEi$
zL(CE0=+Y=PzS~6Ew>o5@7)XDfZJPJDGVDr8^vuX{!dDd~rS7^sgG(=qXsUU4{}QMs
z@ZN8GqcZp$h^aIzV;a1VM#P{`5F?$8tC`yH??FOP97p<K$lPl<)3mMaWLB%>OP<{0
z>(YczMzYYoJA}@=&A#m^v`&x$1id(?e^VP$_2~ObdZ!cdHtxOv^c(-M6d>AltKR1|
zdYr<p3IzrHzgH`o?vN3i6eM%PL!7V9bDgCEAIKa^#Z^B>@XK#xGu<@}+chNGS1AfW
zI91uNSaVGJX8!vPGSI9S90q94u=h^Rw-SPrS{h;-UgI%yX;c9_GF*?y<ce$0Lu~Z!
znX<>im7Hqjc?(kKjzv8X!ddqXX<&U9)K|_y$EjLoK5<aa^GLHUBA~4F1{A+Wjayo}
zgm^d<W_ut5z&63-wakgT^ZJ2Qo?gXB0iWFr^-Y&ELaG4ZIL!Ak6gd~DM!o4PWok^*
zHX<)_rb*B`{?C0|rWxE9nO9`t)~(~1iKtRrzeTe1XgT=$R<`pEF-+ONq=#h7_AL~5
z;#o@j4v^;Sc<w_YzK}{54)uSGSaQl}O+^5-R2d<@N12AL+KB^(48e4|#=W2=Vm%u=
ztCydq?Mx29L<X(`@?<iz`?-w?H26aR_$)RApAP_O1dr4TMrl;WHxk7_5cuIz>^hug
zc*XPc?#PW|s1Ec1sA$HGx%7Y>E-?qcA)I&cokweAiP^wg4e!Z}k#vM1eT^J)?fG?O
z`KeH4?LHJvy&B2#J0iX9M9iY@6v}6R0U;BNN5-M)Pwb2yhr@ec+VxF?!)xyZ#9bwG
zT3sG-p|zMDy`MkB*k4F%E3fu0O!t-@UB-UrAaZZd5KqVL-Xo%7D-+MZsSVs6#8JWx
zSL;DKj4<phcsJ5A1%pLMczq-jmG73k#@Pnd&HjA`z@KhxIjr?gijut}6sG~C$*ApY
zy@z58lIgM(rG#U9ytR){)M8WN&p`=v!pO2B@Tb%y?p988eU^n2!uZi1P|1l!Ekpl{
zpCEI(&&1ihw~ABPgqpHCm_29okMV_>Tzim0Pecr-r_u8a@(KNBWt9Pu{o2NL3se6M
zF5~w5_E^$!WR)t?xb`YF|ECH9h&2}#WZop6a@Wh@5Bc$y8vkWGV;{50!MCaPZI6Gk
zkJs45-CMm%oA?yCzhtV4D{-Di4$Q7D#g{>6rfj93lWO~;7zT~E4IHX#M;v~6H~hi{
z8Z8339T7*i>oAV>6V=@aEA8^i{Iuy1sI(LVREeweZ<3!K08q<*<sy@uw<PBP57U;O
z-^F2S+2{-x>Iapn>@0=)*|UuMG#{j7xR(QHGRFy_YT`so0wJvkFN3BgZdm27t?FYo
z^DsNnI88cks|JFCcO@u!+`_9)%g1+H&%%QTq?O>A77qP>#TXGuJlpQSbC4&Fm1*JM
z+}ns!Ain@^p}mM1mz0}Q@`U=O;*YW9948hv^@z?_in+h7Ti2@!W)|;b$<f4SAnL1W
ze6yAv!{;Ps;AMfsAf_oClVaOS_ilBE*_@+#r_)X<DQ~CC^`NSK8ON;L%T@LFg)`vy
z2d9Ju5Uhh$2fQU1#C$n<?zT!b;DNf&QO2Xcs(*`La8ozBqMZd~brD2jX!)Z>acj8k
z%H;OpM$#~Y6kG(JUe--cq65x5t%{!?vuY_GDx*ac*uYf6aI%cjeIbc@Spx+qitd&*
z+(*0ZS`e{(lnQp-18MLD{c$x8I;yrRE%c172*_C-I+c_YXxK-TbK(~v35!+|fME5e
z2rzj#bX9aZ8UnvXfY=K7q>T8*PB|(&rI>SSTQ3v7!CEi*8+Bby#r>X8<GhU#BBXxZ
z%`)QG<4W^<d`&@Ws4p)Ez4}#55nzruniC<y$)S+>Zv6Hc$JV8!Ji)M|*)5y+nQcp>
zgq@yv-(?h9h!^#Cy&GUNTocj|je3{I)Y)z?FWjVFh+kKG(_!NrnH-%iqKpcsP#?>`
z(x|Eaq-i830@@Gj^_&xM_*mMcPi@9`4FW&#)GTkIC2j*6#p?!=PJ3m68I(MDflk1`
z8k&?z3N6&Cc?KLMo@zhW3XbG@W1{2e=TZd#A}U*k06#?_7k76s&wR%#JQhJ(ZxQ?Y
z<MZlP!4BAg3WWk?xD4~#WBk8U;>XbOHhNV=H%wXb(l=CJRBp6?eO<$1VvRu}=2-x1
z<{+^(6Q>R`rZ~>WPNI*{eHZl}{DR1_$$vxI0qb`1oV}xA_B%`hs@BSufKm>ktKELT
zt%uzuGp$%S=l?cN&&KJOLdfdu`WUOF>FNY+msX7nNR=<>2RNC4Svuy(iiRo8rhyYy
z&YunvXwX}p-t4^At}@2UgJfBh#%8T9B>~Xwao%|t5Ml%@A;4hJ6v(l8fot_5&z|cI
zpWU)aL)#^rp6vvrJ@X8Z`La{ck9!2T`Zf*Y&Xto8l6ESty{YA#j?}E*fLZ$VkAfXC
z1^!t{eBS5S%)%}x`mE(@fjkCArRN*OhM1}nNH^YO)!z|jcL<Wac0~#pZ)WPtIoCzG
zrtUkAZC5$))0<`CrPb_rduzK?dZz5y?+JlwhhhrkxyBw;ZjqZk0L!m?+|51|K`7%)
zkg#ahWjTI-)P3Hyg1h%RAw&{Gnb4aQkMm|$)B}g*KZ9KAyPX%UNA7-f>A1BtfaFcn
z@bcgAGB;h@u6gZO8nsTu2;r95(L-#SWmQh`b|KmK=JGWGB;B}IpAepCwi-n_(C|_R
z?C3*$-{SBr11DJKwgNW<mg%$%s+tTnJ_|Hwf8}+kwlktse(97HmUT|MTtAZ;LHfKS
ztbfLu?xAa*JmT%PT|(FtJ51731E7fjhOdx=qm#3g2nufIv94hONEFvx$~^;EaJ>sT
zgGS5ys4}~w`=+5hI6318nB{^pvP68}!mPPUl>=b#9IO6LAA(h+iqA@NDz9=JC>Raw
zRg}}`U5%e*!{08-4EcqVe=BMrvWOu|SDJx1lhINfEBNlEu2}(lSsr_S0=IFTWKNJ$
ziaMAngcdu_zg*aa+w9*V0^DSp!^#c;Z55*FI&wALdqHWpI`G!FFnZ$*xr&rC$i1gC
zm1V9ByG5Tt#VdJr7-Fk^2%iDc$upS|zlHQSy(AXohwMIkRk^e0rb1N9)!ht2@w0;J
z$#UBC0Oa8vtO9D>wac!l596kDtPjD$4|OV04<NeV83125V4t*>56-O5#%a069Gp(%
zlwBi8);q2Gll&1fkilW+waaO)fyk&xe(t@`cjuU|#iy%!Vn|ETF6fQ1uTIG44xriJ
z4Zq}q!#VnstDLwhM!0;00Meo^!yBaJJqNY06D8U-;0jEQb~5YS=2Q%s_7kmrYP*B=
z1D%g6NdLxe3OFvgDnJge8IR#(?oxRf<SsPF)Ni2f&ZXkfiTvtJ2W0-0*Gbgz6nhz0
zfHkIRlmIxj9sktxsIK~UT96gO%zyX*p`{p25~O#krU|*Nz=HEVND0vJ=zd*G_z}r`
zgTf7zKXWx;5m3vw6gHT-MUL}q;H7SBC;+f+OIZIw*8WP*`85#&RA}PxTA8gT<km?&
z%ilQ&V3Boxj1U8<qtKDw;wYw$)M=-(h1{~~2<ZMgs{)G$9qHlK=8oULm#GE-AsMm1
z9k{lix66P-#?67>BL?%W%XHxHMF>$-ElwpPy}kPLM1AFtxzcCIXqFuukE)l6I{$sV
z6^xZz!9midAu#JTTaMf>nd)mA(&SzGG>`FEwOClv9^ILGB3|P0M@nHEnY@<I(y}AP
zP*0As=51yb#LqJEY_)AU)4p%x6p$xvt+=-6a4i0-S=13pWhn`9GxoOtaa)-TQ^M`(
zV`EehLRmmzL+4=-KlAIHMiHp#hwjsG%fhfWgb9!;p_WWTF28b|Ayfo0q2`FsDaK&l
zLi7M?lEBA~h`=xL%wZzv%gnI9K2i$al)@seoLV9G4lZ6l2qpNfcXcD^2P=v?Qx9EB
z^d7f8<@!=ziYx{ZC<GFjJDEL-ac9hVXh6A0g|FNeVq85}_dME3;To-~;@An1sGNJO
zRQGrSif7|M_V4ShNF1iy#G`zcGz~}IR7rbXf<|rAi&1iH0}#WEx0QK3!jLQ}BI4jG
zye)j-L?9a(Hf^1zCI1H1R05)|+=ZVAadK}-G|`St&7vJ{l{acxxI2hjNu|^4z+ZW%
zl79L+vWx;mzDF=l%LueUSz;jL{XrsmKcJIK&!O(Op#mrxUy^w8aq2pbe;qOHodLji
z>g~@nWL!XTtE%d8JSC)E<P{%Z7s1r<_NSbZ<D<hbG$oJ*fDnc9a53xFx3<pm9Z9#a
z%0vHnvpUXIk=3*S!RBv&%YjJEWyokca&ueTj(R3U)g?=c+pQ9RH~#;U|C*pF@`(Gr
zqnR~`g5<otR*FC?OMDB{pyLR4G6Wg-s{b(;1$57HoD6FK4egJIU!~0C5|BlYpgGOH
zZR>?<7&0T6Jk@^QIf&g0qLAoBfPu|p>}9$OcXcU#r=KhMn_PPzX?Iboz#nV4EB{`m
z99HOR?vhKs2p})Oa5a=JVq5{|^aj)ELN+S^X@Y{dz2oY05=W{V@I{IPv|?Ch%yHgS
zy{7k@!F@kUl6Ziv6e$*7D%jf1?@8<TB5k5EIPUryX4A_xB-yf{jg4OhU^F_uMd2hs
zIzYy6{Q%ki&L+jU(eV?`_!sI<;EuXvw3_a6AiE!zptbYX?-%yqb^Z4)M4TPnYC5jZ
zoL=JTGpK-ia!|vtZtFJf3){Q8W<WQa_{wosAYa|Ly&nH*MAJN;xC?O!gvenB_ZhI8
z@!&eka$2W2SvTXZ1HrsXwQN#UdA#FoxPLzWxyugFp>0e6V?k=mQYi`()aCZ~E#R(g
zFYB`S{y=1gH;(IeQ~jHOMBd_k#cgoGvpRkPUvb*R9Ob)M*VX;H3LN!j=LO(9oM=((
zkm;LbWY_SJYL;?aW^_BRN)m41xK;Q9B1^=VHR3jOlpRHlj+W=%!gCvu6jG3~b+~v%
z+0>N>iO7+H<c@c<y7wHUQv;ByvdZJfGHVdv14tZKhy2qC^A$M)CCkW8lK29}s%?`d
z0_3P2G_i2}bh;>cww4ZB#^vd@`!7<h;0wN~E?VWj$BR%pD=$JgJP1^@%P4rtV6Iv*
zjGlWJZ@UmTjRPqX4`#d9*iF@&@CU>z@g(3p_bz5NH#ots!>}cj2mc#T65{fZ>kK%9
zFZ1r6v(DR>II9AKG83C_-yX;5P;cRyM0!=%_ZsIc;m(M6q(}e8#D%K>f;;6T(h}?4
zyY6_0-ixLwvSiD@;=uPHZM=dePR8ffx#A19@z)EUoV1O35rWN3!zDx_p*$2>%JD5o
z&VZPt%V{2IW*OnPGeCCZP{E9tOM1PYX^K{|)DtPg@0}??;QJ>42Wi@J$m_$}CjLHf
zq!eL>qv4M!&R-g$si;^w2Q=+9QK(cwpX&HY#|X1q#wsBdC?z7fkXQVy0D$m%fq9)C
z@7HX8_Ygsuqz%*X5bu5q5UF;5gYw4Z!?ccBvjz%vN=(cb*Y)*!J_{kp%UBZ-V@)Yp
zxh=O&Yucbltk=Dgq;$x<GM#Yo^SC1YZ%o`Eq)q(caGmiGUTxchkXv+N2uKQS##D7P
z$iH*)EByuGC~sxE10SC$FS#`5y)Q=a3rN--DM<QF$Afo5?;ei>s6Ncq;m{hNqR76v
z4)wN$*YWS#blg{@GC^lntcLmmK1Oc13b9)q&)`#>uYEO%%7}IdZ`L);XK;4iugl1;
z_gz-yjt8i<ba^VP3uc?;tbq5ZyWN29`_u6}2nej#OGs<<2l)2`eo7Wwx7%($@wXiQ
zKh}n5iK8H^tPSDLnNiO@>n*xhwJs;WUk?PFLWE_RKcMam$h>J#lsMRb|2?J_IdJrG
z<2aGY;`akx8L=37UOYeivmz~1cLs-h$B95PaFk@srRF=y;{FY)K7=}S4iR`StXG=`
znYZ{WoUT%BvCaRgp-kPNbE)FBpBF1Hj&*o3Ap*Htww@SzWq(2lKIqO2uh;XSq~DQ>
zCg9WT*SbaFSFbERjLT8{@Gfr0P7o@D0~{Rm-5RGK+$LQSYz0~DQ<QaM7G8kgLBF`P
zwz@yU@JYe!z)5s9eI~aHPU_ayIWUwrN>SO-fp)5faPxFTcrKG?p{=QPI~9;j9m&O;
zrx&4w8!7bkS)0D~;=zlZM_e;3)9s@XWK{Q7N^g$(>NvKz=^84`I$jEL7&(p11s0XA
zKXu>w4&07PXLeyMKQ*yy())CqV_|{>dG%}mEThnFT@(OL&NW%Ru5>_Uf|~09iH`MJ
zuK_~_R|JM4I)gr2lO>$J*_SSA-Zb*t{r3o}dH*d*-0>glFz!qMDVbge9Is)&b)@8w
z`2HrMvX3j;>wNJIbi5EzyQK1Au87K<F8KY|->j%r&!eKK7jlcUdJ*(q1H28^r&1CZ
z54+T990=U`84dqpB304cYdc0SdT=Ef9{?_2#f+7O9VcF;4E2IU;xfG_k*zwl;5*A@
z;0rS|OjYwK%+&*yj*>o8qO5MIR|jVUmQfs^xz-bP0S@HZ`|!ZL2GqE-XjR1#0n-e?
zz!%7KNcX?E!*axHPwUIxY7W~SRj<uJ6TU&Hx_*ZIP5rWWa=W<J)Cqbv5RPjUL0aE{
z^b&Uy((k!1zyJ>@u82xQrU>)2SQ*D8M;Z1#E>G~Mm$e0)l2&xTE=HgnV<@uSr3k?<
z=F|kZ|5@O#3#VKDYswk)$J)9K$Bv*t$+bN#Xx|Qp1L^sbM8ngVW)h~~J<?RQ?HIrZ
zUZ9CLPlF<PhzAHTnQ|a2<6a>SU0J}>J`#j^P@7g#@1!=LX;k@`@ghW7wgStp{x)fR
zn@4SDKpMFrWSDEF>bndKO>n9m$EUKr=+h}kH7-D9Q$wMNVZNesKsn;_F<r})+wSr2
zAdUYp0i=H;EpCNYf#1xJ8%F?=)y(OUY3nsYPd7Bq-2L9dat#6CO|C1jNmAA9BhfqF
z4D$fmb}hfBGr^r-s9QMuGN=3m-u0g(+V>=ulw&@s&jZBvDGRsR(r9v>0orK;VGPGy
zr+$o#(r{97zmu{)I9wEg`*=eR!O1Ra;x;&0%|0nQWPy*<GL7E^=J{Ldbw=cfQj=*2
z=>k4lsl3{CU{uu0mkLI1v;Tx={%H?va7#&E^kWFOerC2wGNfdi9L)tyiv&Oxzgq-B
zap6bF`5k20*-<R!ch!)ZC=u}QTe!n}HOK{s0v>n=9OHF46(Iv|;z-<TVj`|N&aVtO
zb}oIs3PBgwgPsKP@ihyM{hq|(u2VD|2Xbla@5XNkY$pCW5CBM8%Cq;O&Drn1wNiHY
zSQy|hyClUpj)06&%)oO50_fWDL^N6ZofZb0n&~R#;W%}RMyu*{Dmlm~O*;rV@s-~z
zF6}M_N&3Q!YZkW=rFI&!EkX(5)YH3bI#a&>s)0aSR2TjCC)@!XCC?y@wQ7EOBj=U-
zkXm1fo8=Hw1{#}Y5na*nNiKb+fxv{d;tKA*hh0BdvE+TEeox=f>EHBTenQbw=V~W*
zx<dbZ7XrB0Rs&j)*yi77usbUnM@=GcOL6>r5;t(J3rT7yH;)Ml|0GvDHA>pZ6Pmau
zMl>DQ%^|GHTkv$@Eic^1yT{>n%3SdSj0qzU09Wn>1qE8eeg>LGoOnyp2Wtf%Zk1u~
zT)dCJ$Fx1t-&?_;w?&&$@5C4AbZYwd9OOfJn?EVa8}jQ9#3?g3RptTgXM5BAr(n#{
z`M;h|>+T(FyQinDY{I)l2Xni;9@xs18H{!M{A~Q<sv<^d&<7N1!3;c?aPXca|IV2G
z-0w-G_%J||){(dgV}##Y0ZLS{?1-Dgz0N13(ewMN*oKSXz9u47DpWe<jhX!G9pcD<
zKjX>}DqBt=d$Y8B-1R|zW%H3;nJ1_g2gu-M@V$;*k!Gw?6kU1cv@hh};ore`FLD_2
z7820*Fl}R8aij&2+v@RfJN+Fq1#t$^lDkj}eygeO&*0ebSEXr$*zvB%wF%UP7x_EN
z18Jw5{=&>1$5;26fJ6OnK;VCm7}z<fO9Wph(xa)V#*-;@E*PXGLZY{#iJ*Ta+_ZbR
z>0nyt1ElZDWZb0y>h<rS>z>|4bwN&U)M!ju%N@jT@|ey!6r*_V!p^Bxc?%i%qk2=A
zPJNf6nqZs&iyzH0d^SblC0^Crb26LX;ovd^QQHRhI<>ts+qbvTW6*6^5Z~;K9cbQ&
z+q&ZqRtJ3k5r&On4jBQh06X-YFsUsD7i2(y9UnZVcbq64+)gc9x0UGg{_i&kxC=v6
zQFdD6d`uXrJnyxo>#N^L_6DIODkW&^+{b`d{qEZa<QgX*5HhDUjWKP)QC@SY_#F+E
z+NU_5ik~VF+(ImUnt3G0(Mz$qig&f#KBF{L5LAQWgU30uF{0emIoksF!BNj>Z!r$J
zlpZBg(L`da*NhKb?mT<ZzrpK79(wm!DlT&^Qo+C}0zfgQta&#o{Hw}xz-xHT_X2Kb
zJW)-}d!a|sza<d2`cQx|Ty49h&sf=VK%o*;>8DmrO?BYW9F@O4DZ3V5I}gg0*PuQS
z)H<AoxrWt3NfI&u=Vv>wX4wJ}%_*y-I!ItM)56912D&Mu?X%)SzcF$DMx2&LWeQ^q
z^AkW-hwck4&{Qy#cS`h5U)6P%S+6_OCZZfiNjgq6rwi_trj6SJpNL+F?~5L?|6XVO
zZ-K@oFMtkIg!Whbu1-p5h@Mz3u7_i~zJrw)DKT8GNBXzd2FQYEB0q40lg?mjs%}$k
zQYH*Cz^uz}>wI3Weh4w<8^TF2^uL~hQ!Z24Jx~PUy$jug%4(MfNMlsH2-856svuR+
z%I-emxQkkLQ|4r9TMPWzOvVA?lw4F;ZQ!4IL6&oyz(hD*XnR-_1=m-IUaL5Gn(1>J
zafpx$t~RPh*wJ7l7W`IL{oD%L`5FEPOs@0Ds&3q?0~VXtNXL&Q%j+2_Bz@HLGV(dD
zquhm-JmS6?C%S#Idm}MtUmAuzClU7-xlMFgE>#o_-0xJw8oEAz58&2Ylm+s>h>LR7
zZlYG;zo`v;yOOO*>Hs;<pM7WWrRFtv_X|d5XY+up{8oh^dLjCEn+U+Sk?#KR0a;}>
z!fz?#As$JtiS^J=hr{QRoNKCBG7qIK{*B5NZ%OmQXf*(%yiMDRFqCBb5r@9w156DC
zBw^I4ilX$^{-`7|@g*5}&d3=woiOb}cG{#ZOY`&|+Gk31u(%`!gj~QVW;Sn9^23X4
zI}SP^+q-_y2RA&VigURd9!wP{1Yd9rbOjRVJiM}NsenIh-DkqLD>QxiFBODAv4y6_
zXTx(U>74<fD!CdZBTdwhO=R?)u5wa<j{e^BNwI|%R$4x%t8|a1*R#NBi;8jvgs~7_
zciF+-hz>pRz2JwLCviF;qCU#f@wDE$rgvP&5{AD(ZOb(pyS?Cxb@?NJNnAaDi-Po=
zyTaW#i4k2lbxowzT%{ZZ8U~vEQFl$C{o1DRml(m!!*Hh_cU>?$qVT#Oy(r)3SxwF9
z*qSp~Er3qdKONs#JXhhLOWlB|qgaA9FkO)$`d+Ek;-9feUTwM$Z}}-`XWc+N=?trM
zJn;mPfqriR$nMtq4jr!>xg{h)=k^2GW-4l+{Z|*{x%Nacp|?!|1Uj9TVjQxk5nscF
zO!XdB{_tylqQah~>^5}d$k83#palMrD(rD=WawU=*Vx;clmh#m#K9davxrgX!jT1$
zvVvbfGlJCn^ie(lIE(v9{}SL3(+EM%!NxnN`vttcA?iAHZo!f4)6h>p0q62i+j3&Z
zcR>%K)r~Gi!OlZk%-r;%0L9ii27`2XYrA1@P!YL}B?eFcvs1*=nUcIlAaV-SymQko
zAQ(x3{J7a?GByH-rgcl$nIF7*<5f1D6n_wvhCX|4)g*bG+}wjE`2psVKjQ6p$s_2v
z>jeAzsWg0VW6Li7^*vAa^S%iVQ1Ip|5(k-D`_7oV-~v?yc-bl99^!omY8q}j?vT8r
zi$itIQAYIsIY|Eg2>uB~v{#_^1SD21)G%V&x#_Vt1&rjV<d~B8F9BxKS6MO=!L`G`
z2dQQ}#41R{IV9Y&K0*%k!xoD`cX1hl>Gj+*SdEoG67N3ot+40A?LV=SrUSCy*Npte
zQGnFdUH0G^zKh$wBV0|LWi1Y=*x*&XLZl;sT2$w8^Bpn_-0Z4C{<xF`QepZW3B>;T
zKbxUg>MLqOL9RUdpJEBZsu8FKZ;LDat!59rgSR9HSV8eL8Tm!7?$PX3-OSdjls-M8
z0g}rT4?K?UjZ$v|!KrPSDuM&{=}F!KecFL8--%sNr`@*hK$e`M>G^HYYIj7xm5N=+
zZO=2<X@!1tS=DVi4j2<a0OC`06{KwMKeAt}Y5-u#_rvR2%T(BrIp@*^{_d-5>)rew
zKKrB7D1lRy$MikRnmI<1QD7cS`<=|n2+7CE%JATnyRB~*rf)A12@kW<%izTaARSkV
zRjv?6SdpWf?+!~5X{YzY>*?uf!Y2S|v-rL&LP5-M<*%bf<B#_`H&63=p<ZA&z~82}
zTbJ8MHM1Jx!i=xY5YFMiVU}p&H^u18%J9v2lQN&a2mY1$0sU=;*+d{Ox6;94%z|DY
zajM=0@aEyb{Bsv(peu-Ma^xGY9qsa+I)qZG0HmYy^E+U7*gICOD!S!Ht8kkV#T=y_
z#Af$>X$Qy6;>~}fXRd{9N^+jxK=6U<#kcy(zpd3zi$yRTJMi6BRu>E3lEC9H4ZXrH
zWt^3_XjM6cXL<(x`vE6_B&(?h;;&2Zvg$-iUqd8(Lj}srMn7&gWbC9mef6aHkwOGB
z-Yg^t{0Qp|v+<kmyu?<&kkNoZ;`<HuYz03;B}G>9$*fJ^u~SMifPZnT;`mfjM%^*W
zXcsNXPc*Bd05CCJxv*|f7-qkkBy?Tfe<DX9X4xp%_2v?1g#=)Xnm(hRc!%NCtZLML
z=ASeCH?eqXolA>62jck;1#gIHOS?^(j-5ut-<4AlZgmAO70P_SV7t1cQdlzqi!C#i
zlt?m;%poqYgW21=&4LS*nhrS}7ja6=_&e*Ce>ib*S>ts|Dy!lGie-0NWB!K{MB$*M
z8d`K5TJV>*ZAtNX?fK=@Z(U}qDd2e0m|jj|^;Fz?`D@!PCK&*1BPD13ZJVb#i_F|`
z6tlnLci_Xgi@FZ85uv>q{hs)SRarVXX5oO(+qU#!6%k4V?L_vr+N$_eE>!=HGJrEB
zSl^&}x6`TWoEj*VnGvjh*QPg~($O=$V@-{+FhT8eD`KvlpFeH{JRI46-yX^7Z59C_
z{nUYfKX5n?5clshsEC5A2qU<ywQ)W}#}tj3Qt9DG6T<u(m0P{M4{}(`0*iZlzo6w@
z*7`kzeKyAg&2{Evft-WbDs}wRn-@l+)Y$JjH&FR%j8Pq30<-iLy{{Zjdpq#EPUHsJ
zNX9W_rZf;|0ldjv6!6Hc`K!aw)^2*$*fpGXg8#aCbP8~WQR+umG-kjaRUsZ1d@Pyq
zckhVaw4Q~>1@iJ@<+iw#B%PqX`zhu&vK5qLS2KswM}09;_H1=ZUci5Bw-}e8mP?9T
zU>>^#yXLo5!{*TvG0dMl?QH)h*B_O;>Y3>VH=AEI44l!Z?e*)aRclgPpn&a~e;a<_
zy76JIfkSmsenJA1n9JHp)DeeTc7wZ6XyLV!!1V<@6tsROouAFbZUbG>&8dS63%vCz
zK>!r(EJ3vfq=jm>T?fuiQ2SRvg?{>H+qDDZ>psl^_?b7EQrO*qiqfE_hfm$F+*XMZ
z7eF=m<1MEgJL<W1Uor)VV~51{0t~Js+%D4T;iR;)naH6gZS3=Zb<F@2@_Yck4^EG~
zBf{Qge9P7<0NC;kd_mCYuj)59*TC9j1pvHvTIF*efHU=vq|i9<|9n6Jg+fRY_yOYD
zve_}bBTRr*X&UB?;PQ4EatX9&Y{F|ha<9RO=^*F%Kh4nLLU=FJJ*jfoSqR7GHm#Li
zI|CR%N(^mtVes8K4h_If`3&AsZ{`DLybB*IlbWD?2;xsbVRWcE&l?JoZ?{rYVFjwM
z{QiwN8}8Ptng(ndqbjq{<?tiT1V3e%x|D%t0FYYoHOT#0A;<#%TvRMF(sKi;1BqYI
z@a~Btc~4%Tot6`iLD0tvfbs87@JxMwT9&f|ki2>vXCa#fnJAtcdDj^|Pgdw%*2d(e
zoZzSLIanzc``lQ@&UQg>rNaq+Rg|XY!E1=gwtZB6LEjGOp;6DH0Cd;Y?9#?f@gtp{
zT>#7xr0OEYLyeI^-T+RrE*tK2#lPQRbp$B)r=_);&!(!2<H=o3A^6p;{1NT;nJ!y8
z7~bP<%XS$C;&{@t=DY)3c*U*;`M7{>+>$F|(%%oL(_OV|pgY%c?@tJ9iN~Wm(IvZ_
zjAmI+$W2=(<iY*#yHnH~KEXvT&i6g+&M_`nFRJT$K@Hk?hl*l8XKodqsdwdJDp_p0
z(+cSK0bHp0+(s|~uy>hK+;}?s7|s+%0OHpz!gaai^~3`QB3SgGw}S)QO+7J=GF%hd
z2dKaEr-jd*t)&%~uz`P)>36ZFfIlJwY<TNP#qW+`oUulk=S{b8<o4eW$SLQYq#SsO
zX2Lrcb?Cv@q|%0`%e_*Aky?&>3efbcf%3eo<3K+<)Sv~)?ZPzaouglU%0?}aF*x9-
z5H%^|FAcq)&#YaSJz)Q%RvqqM9GQKEAc1XhUF9J<>SmZljNw3SgN~Pj>(AeI`Tvd?
zhydcG4A_kcjAp!D%jDX%-nTM6*CyT$d<G$xm`y`MH@2BhqiAUnNs%%lHT2(rvRaK%
zR>MNsz?r5LM!j)BD-nw*`R4i>Vs3uxB1;H(082)azdwQd=1sbeqks{71VOz+%D6Jm
zo649un3K31Xy=ttiO9C=`3QoJGXHA6wSWa@Z%!i4AuS_*348)>wU1U64Y*Yy2&C4B
zVrE4bg4jwyWmN`eA>YmKnDHj1M8kavPI>>!nPMg1)QJ~hY4_enDvGQm%zB;>dNUI_
zw7~t7Jq6M^xSH=~mjj8KMMaog9NTO$<XgF;C(0}CP#Wv`00jDpgsXaDK7n^y9fsXF
zXCmw!i7CI;ytEd@EQEO8l5v}DpJ~xmR6RL<W#kvFS1NFc>`Twoe>IHd=3kRufLs^=
z=da-v{=w4HQPUBeq-4N$%9O}f&&=WG`bf{sOtE^AzTv-AoEf<F<*wGH99T|2d%u$y
zCjhQbfnb}fuEF|MAunzx?Ex0TynlVq*+a^@%|bcRl85;Q_u!Xn1p`k5-1L=_K(2CI
z<@XR=oNZKfN@-5{m58k_w>L92Zi48?<0gQeOfwVY&O!1M^39s?eYI&?9+UX?_l}Tc
zYBtkpg&Su{W<~47OK@*IXfytH{(e6pteUqGa!CH()m2OiPYgu#wcOf(uCA(bTwc@@
z`Zuh1;2sq@!oelif0x($K`?eYty(tFhrvh_$E(U|-yWoG_Rn_PJ-Z4iM1U_oo60u+
zSGYf--xv7D&)a*?cyZCGOGLjo1*W=Bt;?>t=R}S|zJ{2y?8#xT-%n_yHf9k6m#ywU
zMel`Eklv+bPlE&1)}tWE`WZETvopdZ(yzP)&nor%8eMGVHd&S#_@0PeCZMb~5elVM
zc8=>`Yt{`mpesw01AxOyj#WBr2%M(u=~rF1RNx;c()zn~YGwReL&=5BA9;<-d$wU-
z^}H5RN>YR=p+&X}OuG<4>`2))u!-{Vuk(01_yW?TnPgPf1A#j{OD7BfL0ov{d0VYM
zRj&rV5%0r*th52ghcLr2@K1!dn%DhWTz!zY5aRHriWAeSVF^-=Hvq@Hoo^(a0FEIi
zk!5QeRLcoB1u6J(v2-8*;DeQLTb<LjX(XU*ZHh1QewO+{jX!0Lw-5!=$5juB7MYvj
zCZt`enif^J$64R6zikf@k4@FU@%aD`rk3V&qkMzp---bD-i4SiQ;Q6nu9%&5UN7^U
zt8$kkY<!nDpwRc+71_H+v>Z6>R)&!>VUnFEcsP>ZtGe#+*+B#fcOK^?qXaQINvxik
z@m>U%_br431gC?RRMrjuF#!=W0FIo4lp_iDD-=zAf<N6^hui24XWDh$lK#>sMdIJe
zc0tHRFqeP=m{>>sHzI9By6(KHAoO-W^uJch<LYjF^SjM#OjU4SLy@x<j*EA^D?yZ^
zcWUPm=kddK`^q6y6=sMRRc3z^%cy=NH4tDSt2;Ar%hhbo!~On^2=)~Bdl%dUlvfGm
zc-ry?<`s`STm*}5@TyhgXHN3erpk7pkB9OlCa8j}F4>@KxS4gos;YO-8>2{3)=HZT
zGr8>$HS<!n%5Z+t@o#diVBb;_oiR`r#k!6IUe2u>_KTjyZy_p<xU~E4kMl@DW<}5?
zUsMY!;}ORAu1$9?Men8-2KA7|nfk%40JMUUa&0&{?>9IX3_#{kO0GL!BM{ti70Q*{
znCXl9sj0Ta6#$YzZNJy8jdk4GVsayBZ`!)B>p(5ac(Jm_Jq7%h<+<?-7XMyn-1b6)
z1_2o5rk!3tkQD)dlu-few`|n+Y23S28D<?<x1aCMaYOodvLcAk2hL`SFx0kdK^FKI
zBU-(0Zd~E!zw!iI?A1)Gwm?lDLBojY(S7EoE53Bmekjg7M~V%=n2k;gD*QHP|A~_S
z?+G;;f=l82AYuXp8OpPPEQ2tDIobtWeg_;~rS_w&hB^GFY{uWgV)nh-!{{N@FTn6%
zm0QA1L{1>$G4+F1_R>lgt$aSVV<e3w$hz#Qh#bzqJe-2LqpkpWF1XJ(v4BREzn$oC
zLMzRP7`Rm8miBzRv$s~?0eq0*tH+E}fMpo8zQGp$cKq)|R4x94k=St5fhM<Z*vB*|
z7CU+}Jh!O8d)}qxR6vVQRvU-2Ml|zCh_&EEDg=4`>0>@0Fu)H+k2;eDw4Y6CYi%P`
zY9}dpK!|ru67XoHt5z1ZQw7Ja!}Qs@^z-lx>j<wR$Sj>p3{p79DFGrhw~=mcMM}?m
z^CZ8oF{MiX2pK+fJuN%bwf34(rJ!rz8f5==c@PGi$oKcyDC_v|PeA(Xv8bI^T_wGm
zWjGYKY5m~zv;q76{eaLAcW3$Ye)pri)x3@fd7Ly*Ktel@m3ao<pP_~#cu3TKc%pJ>
zy+;}GKy(BgG!_O3AYd}munen3-`??o+v<!?hLPjG5eVhqw=f%57o)D^a(ez%it@w7
z@Fz48n!{214?9Xq<jKGg-Kf(GG|wDmYDF`rf%};Mg?XereMyl6!2==iBcqTIvUNV9
z^;SSD%>aWh`2S^jJzU3al27*^gx*QW9X`>K(<lH0TzMU60>m11yxO(^FOIT%g3>BZ
zmFYKLBweSCAiTyheSaa&JcvOmyS8$z%eqZBu6#+i5BS5S{Tio_0)%~q7%xs@M*AAm
z@KbA+*WuILJ2`*c$jCIZzSmRn*XVJqh)~{Cs+yDUt-n*EK7bEP#T9RK-)y@7?g9!H
z1sI;qhF6BMO&p^n^@AAjQ>|ZEOATyO=7D344W#3B?<3xyUUMUWL^biiBZ>ig=xSI-
z1oWR4Nh`D*6MS%RMobB0BVz`w=J6091i#YtNGe<s`i0zm5K@hnW!TvvW+*?$S19k8
zX^jgRTlVY9DdpHY(z(dKNdz}<NUe=`g91syA%Cl_3$jM8W<K%!D(13&@LOxn@0Mc-
zR1lW|M?!~coa^qSbDXZ9RoZ#1hw@Nevj<gzpgB(s|Dv?v@aTM3BZ&jd`r?D`kO_wD
zFN8dScFkR=xd8xnB^;gRqHm+hjRJrnbF_QqRP5yZsC^}A1R>sV@$|EX!nU{+iF{j#
zsb+)%L<%fG#P1Tv+~+%Dxf#cU1iZ}Mwr;lva7FK*4pJ85tmiH4U!O?Uq6!I~v3ctE
z0_+Brrfq%CS3JLSV4w+l;0VR)2I}6F%2HSFvf2gi{wR)LP+J)*qcr+i#v|$HMXnkI
zew9GOu;(P=WE35#3cw2Cnk7Yca$AksMLB`CrEjwibXkLbt!x$=r{#@9fO{&}85peg
z_bx1tXPW$<gfa-38RGDq=)XlPh8a-z9dHbt8euwmU&D>bsAU1c;GYp?7!WYTr?;|A
zI}tzr`~wG&ZZ`N}-r$0in(#09?A~!>R&9n8iQ;kwm8;FDZHcF68Sf7ucDea?E)D1O
z4&lx-(c0R~=AGSe$z?~vZA3&j-@LF>-%fsDUhd*&Sc@Yhyd^svcpL+-?VS#EF*dbq
zr5*UT;x>uie@ha0UZs>iKk7Jpu>U0(X^b$8;y7aH0#ud@%Uy@|!ALn*&>0amNwbz_
z5DHLHz&ZL|myWy8?rVifO~c!Scs8z%C$pB8K{juc#8NKkhkwg~6+qeRWE_BS%*6y0
zrsM9!IkqJZ(!5REbvG@+MO7694`Iz5q+PhIEdqeRGh@Fou`Zl*6&z`0^jVBCZKOtk
z7W}{t()o1z{LWMX5%)e{L$YfqZZ`KP<gj}FX{<aa@p2`9tBNAnw=?qx0A_W~u1(Q}
zr}hqU?2vJk{yZ8yzN>+{owNB_y>)Mn1piN1PhbN@;z5k1<!prCO4+3k@ty&}0TF+P
zIJk+8m?^xm(wM`DrdN&>l&zX&o!htX2Y~x0b<#Q+nJsP8I!8#4QA(m^_`^}Y=Pl&q
zSJh!(=K(RCv2nm{SzXmM(^z-B^GFWyAvZ~UDXs0ML1{UqyPNEubMJiZkGYP!i`8nO
z|B*7!#y_x8_C!01Dd4`nvw2{yz^c-|KtPRL2mSXa5dW&)1?XQnAGs}LoOZLaiN)z{
zbC3q`IIybp^S}~Ic|}nvkJ*-7XT++60BrUfBMZN3&K|h__wmll1MK{7<EycsX^f_5
z_a0;!h_lftrMHsRPv1qz_dIO=n*j!}!nrgafSbBr-@&%9C;d+35p#^Mn!UET+&EDv
zMZi0B<u#_w)8XsM_CRF$xEfj3*g3kd%B|th>GwHEmEulS2lH|3$~CfU91y@!6GxJs
z+Sj?Rux~shZ?Ok1{)YdME?>J7n71>|dwY*^>|@t0=)p}Spt6jK0<L%n>e93>Qp`s*
z-Q)Na>3`gUEV%9RIuMNWvW7w&c*pC7Q3l?N&PN~#uVl}`9UY)V7tba|&)y=;<m7CS
zC*<7;%Wl?z2Kg04eI~?l_XjHj%F{PawoK_)77b2JgF^*U!64MBpK>6Q9x#$ZoE|~Q
zj2UNJ?8nJ-UiiV?r?+)}@cBjX3x#h^G$AeW`sw<71on>~BZ-E872sFeSc~4P_8aux
z{2l7gS3|pRZM|}^tx3@s{};3CzswaGlc7r5#xc`E=#`#xh$dNLHgeXi*L(wf>+YJA
z1APD(AD?k!Tm<j52ecclHUCZTvnA*KP(5uASoVVL1K3oTw)PSI%g?U#8<89yzz*6v
zpK*d6JP$D<s!zGj_ryA*8EBd}QOQ(g3Xsb8Yh~f_ulp<1*T)RpZq>GN)N+*?%5MkL
zy_zJ{a2zE{1Eq6GhN<_zWDrgUoYRfnpZSA3AG>J~XEi0qdx(7->Qtx4`;_^%oRHw$
zr?`tOJ=>p%&jpn<(xw?W1L#1-(<+|!`!et=@IT9OrJ*w7peZ8^mV4xFQvb5wmjQ#D
zp01vuKTpDHI;Ue&D^p;3<|0-rFHmU#NJgpvoJj%~G`^(dJxS8T!W~@hqiNwOoFW9a
z&ih*p{}(C^&h-i;rHlJsui_LKeW!i$@3ig3W{GLF;2mEb#!Sd%rM}aqbm_eQYWe~!
zi)PsrX9%%OCMiGw#+fg10TIHtj@khC34h-dv=H7)mf9z6P=<R)vnX!ohY%N}U)o=r
z&25J)oTY3xSVcS^!D%4e;v_)<A`GB0vuv8fh*Q*%F93F5=TqRGd+O>LCw^+|rqMC;
zCMf;=gjMP1{K_DJk%sD3?D4lXW$IDqNB#t;u&%m4Vv4h@pqgAbv4CP``8);?ciqsV
zf9L-6ucwPhz*pBWb0hyU>4B5g@)p2#)41gYtOdC%$U(Yu<h4!nmxeMydo`7Fmhmm>
zf!TqAXTcdbQT=yLzt<UG8L3ff^z<B_{j;IxD#(UtF;P>zn}yqS!nsA(MaFdz`1B?5
z<+`<`+~o*Dj%hnCPi;NXk{DoTC%y(Xg|u6zj_YZG%HRK<gSOZ)7O90rQQx<a0oW7r
z6#d!>Zg8x;D}G_TYEZLU>g(Rm90S>{3_^f`_|k1z5!fcHqSM|5Df)FbLA=hmOX?Dg
zV>X%@pf9I}KZ!Wj@cQc`Kvtic3^9i3aYhV<o?%Siv&!T}%00XZYR<V-RXjRwZJG~Q
zOwwDFeD?I5#0cLkAG_3!J<cI+zR^N#DJC@v%(eD9=7;$Vz$>ZTmH{r?jN4N}EMUR%
z_YF?udism@050$aWEiATJk1ON;N;=(iU1Dx>&|?|lIT_D)Zlg@#oTSm%d_`dljLz)
zDklF<Ubnj1-13q=1;Xrf*&dO~ebN9AIFkNVazKQ{-|1=zUQ_kg=xNZ3F{sfoBFf4y
z17_)@uB@hFHIHn@5WsfU$})`EI46BxWtU13za?AC^bm~EtT|G<Auq{Hm&Qo(m2a!y
z8K+8Jl5UjVne8;t+m%#9pQ_%jzgvp2>{Q)fDTNH$V6C<&MIysjp@vCY&j;enG@Mc=
zcU>FFn~55nlcZ=b<psR>?#r&RNjs(F7k@r;{~n~xji4pHQC?gGjprMHPvUTh6a)en
z(u&y$3b(Q7D?A?rfZ*|^PKhIDa!QK-VcUP>0Z4=2!hA|Cp!DT4FuVIaQmFybsj?jZ
zPpc*5rAERIzm^LzPu~*YVkmW@ku=}qzj=WsmR0y&3*OKEo&$E|=aMl+3Nd$YyxYTQ
z2og@IlS3wcUBAHomT!XLPIW(Hr+<^{iPSolpRg(PIzM}o(}k&O&78~d24o$8;d7*G
z7(Ehbcx?o40<zT0-WykI%)YGSrg4!Qj~~FV{Hk5u3XmkLo&%2{MAPi4t|7UqugEP2
z0p@*;WzN*K%)v?2X1tpFZwoQ$D&@jedZV&K;ytQ)lJj6~)l8Fsn}_|kK1RvCkC@{4
z%?_yM3F51-W-Dp6m5=J|)wYg%#i|%2ahcSNfnJYBHtl#4E}>`rAn5$2cK&xx0o%fo
z+=vuby<MyVN@PxzB0nJSUau(!p4*y9n?0lcwowg<-<z%R-$P7&i_ri7;=ylANu_J>
z0CF(WFtmTg+m%X)<Bb1jje%;We?n3Nza|=|qwFd6rq-%Jbbh~80FcXey$tZ-ypG+?
z?l@RV21O9P#YsK=w-!@Z9Lvj3NG+#rEip>YblQ}d1DX%|^3Jm$-XK~?og`fxI%`xk
zVr)Yu?0U|<mv<v)HE_Nn0Hc7~-u@reVWecW#0ZVcQ*SYcLTbq?N-Knf2BB0g`cy#x
zcw;e)&qNInI--nRCcMY9jd&gY{6<if>{o%&+Q;2x<NzkBDhs)mwk&H)`+6yC;%%f9
z-?E}x6tfbX$eL#vCMr)#_m`>4Z|--l->zZ%0ZF;eXN+T}&--<$ZZ-XGz@_IU9E%c!
zRV#J~4Q`ngzuz`j(5RQG#P<TtL6I@_+*(u)iH2~*lFGfZ0ax}ax4nF!bG99iMqYAp
zbC{qScBfFU48$xdlfL69gNiAqsKnu*<F-+HqL#!J@{PQcM*gT-@TpW$n!qbY7BxG=
z%LC_yEp5HRHG+5c8+WrbtzfX#f1~M~9$>HLirz*}Aiq9CXK`HgsHX-M8@lNd%-nYn
z2+=cW=6N|2$Pm)KE>_{p-);wDcBYDuRNWTdSb1&75eB(RAyY-C)2_)hJ~_Riidr=^
zWV%;Jfl8z+6hV=59DE()a05~fU?ip-v?af<wQ9r}L%x-~Rc-*kF<`rJphbjyd&`JP
zua-n(A1D5y^^uT8&22=w!7tFL2TWLA)|P#t4z^sT1y*bKVH`dafmcrZr3&slGz^SH
zYZL*RkurIfxkjANF5MWqilp%FMS+*&e>HXG2r;dhXAlD?`2C-w)J1@Kb(X-Win|KM
zJHDVX^>k;Bd$W$G;XU^7X)_=WCgqLXVz70j>=6OL0)F>xA(@}}>D9zUm7(7`I0N*-
z?8_b^kfCDB_4Jir{dhbOim6EJ6{jFHqstm^FIzj4m1a5P&CdI{;gjU8lNx6_O%bLb
zxhKsF1akdjH;sthwiLKe_TYEHY+}@O+7(yO-8O>yJ6#q|2l{r3RQK`GT<4Xm;}QNn
zM32<^@zm&rLf`TYkhIu!G-8&ZzB!8dNd-N2?G@by_MM}O!q2Wa1kGp+(K@l6qqVBO
z?|e(_Af+>=pn_d#v}`KmKxn|0Dt#UT^4F_kfM0<BthAIyGu>#<HFuC11r5hWq4YN%
zgi$wOj&NtB*1pX-;Kc6LIfi)0O|HIsl1T2<&(&|>fvb&85I{pd5|IW@&8+j?pLb&o
zwO(h}gj0+EegL>G@|UjA;S20{a~oN~vsx!t4R~%OBUaU@S1GGg4p$+RcLIN&+P9N>
zqW=j5nd>|*?rW1BfQqB+{7XE`-jQTYV)n?uGXK6tJQXhH36unbo8#jikJNf}=?OQ1
z?B7_cIvf>sHbI`>{eDzU@VA$4io^o$>g-??BF4J1cSJ`}e51E}JcwC@{udVUlj&Q6
z4eyecN=ecga=r7eK#lII5@a}GHscP9s0WCxGK!_;G45xwDtn4S2>s{gn3?qiP(8a{
zEj@!E&Cds<4csW#nW~c0o9=Pra;J)Z#92=7FJGWWb614YYLD|6KM9HgcAe%7NF0Cw
z^Ya?x-vD3t4$Rc(u9Z=1h|-xnu?{!iuAxJ!0NoVyP>NsO)RBIk@?Q1rz;Xd{9*EOD
zD1g&ZQV>*tw*L@0#*dVt8&FIzpf{|8tTdcc*#$vzJ=UCM?YfH|mE(X>`fH8iDL$Q4
zyl(GSj#(mDZBDOY{Y-cJy6>PQjfty7Og{stxlu*UWCTZeV@%*D=T&+dF*6KESfAh%
z!;}Miy%(ofwiKzUFyBdvc_$;el!f!^H5!c}JQZr(OFOP2jg(i&5kJm{E6ZgoQHjU&
z+B!(xRCo5-4?yGVONzr2f>v=NpmI2-D0^DmT}zG#p*U*qj$mpPuSlzn>0EcsI0}9j
zD0$FzS6Vl`!(r!EDk((8v2_QtXgPtjYY4K?dI9~*+k)S~b}@F<B&`4t&5$m@$G_z*
z7xH#D-Z!~cY81*<J0QX<{CgJ=tT(=zwhQx3@h!@ND`r2XQI#@n*bVunX8H^=JGEmP
zqr4c&Q>gl?kzwYts&RiyCwM$6DMW1_xE1-vgTU-4)dk%2QcY2|(f&Z!imA+5<EN6<
zFUY9c&(9djwuaYtwi0#ksJnpg{D!o#=AT#<&M~Lc4QnfH#IF0Yo70>xR;E_`(IQN(
zILz1DN$#BT7G{_@Y1!ZFjHlCQk%N9c&N<@6zt@?5s$1sE8`9kPXw$AX*d3DDuFNeo
zGvi0+5CBXawn#XLFa4i!rK;;Tp!xKwF*=Ns`;SSbWjpx53->oCmbPS0Uq=NcGYj}Q
zdRy&b@&SkJZ+`($dyOPW`hdbBQ5m7<8aTHm&!Da$6RrRIe)-_0s2xPk06+$4(h%le
zfjB3T`@U72mdggl*WER?`|R#`j2vgtO$^pFKLrRRE`)OlcywY)rWEEmwiIRjYb`R}
zSHFLFiq{1ll&tg|HUd3V*jEvP=2=O99R#l1;E}Qe03<SfHWiF|xA#Lf^bpZ1-r8Hi
zm>FSEtInLcEGD1;4WH@-&?5-|?7kDXt40ttX_-dk2i$hk`3^YzYGjC)M6Z^I_H`gj
zDzE*{DdNTsrd0;2;EsBmr5o{+_q(-B0I%x)j-r#*Y$+yiE(Css`?%NRm4aZc|BNl7
ztF81_|H~Z~%u$jn7zqx-I|Tv|Osf$IX{;8`Y8Z=))SQt;3PhIU_g7<R?v?cWAqU$+
zR6L0;dr~D?4WaiPBN<$wsRH*Kcs#O{?RbunoM`;vL?S)9=PqnKpR8+5E2aZtYnbbt
z2X8^HGng)5*;^8AdnfIDZ%_Gi>+&-PS9)Y=2Pli>_$MZE5h4kjVD+}*X#blRK*`;e
zSx>N=i)8+mKuA2j6eM>X*;yIIG{{q=%)%K#P{4n-mhl!ulhie;aU0L>F&Nck7;`fo
zypxtxz(mYaJITAkSf=Bdd_TIt7JiMxkNNvrv1x<CMLgot{zWK$ZG<dcF57F}`kEks
zY}BJgn6_!v=>Ek>bos8z-aX>S?fVs{Su0TJ`1b?DWQa8*yFh-_i~Akc5y68$A8=az
zi<oZoODX7ozd@@vbhYJT`LMs`K%d7tNsGn@$vYaM=MXF6fy{XX05M#-kBuP7ge-zi
z1pL!XP{lz$r377L2;hxxw{P;47KsP6j;-E=^+p#>-5ozZB7MKhB#A-_wd$JV$?aD#
z{ihVR8eW2YK<^HS;B8dJ8c&qTYd>-8mld--V1q-H<8jnt46m2PqC<4A+E}k=G_#Gu
zgnesMY4`q{!+xGYLA+}sS+c=k^EP<_@gmkPb)@d{xalQbnO+@Enn=Br4e)J7st^v^
zki<gcMnL-4qNp+-s+A(;4zf}7U{L2!`S0IAOuga0T2nXQlEhzt;$3SR*Kkm#0yr!5
zAMAYP&;I<P!?bYwLVEbi8sFE*!80A905t$8`fO&^or4#@5s+%iK>y1Z*7f*n(yWVw
z^Z8XpU5jens{DpTj__pCdn_PDY81tF)cMv_105}!^xhW@v78~EARz^$Nq%MFLhRe|
zWEc%@s&hKt>97z7pI?tQ1mjMryh9wEXgp3<zoS0^nZXFNob6A}(wg>_1M?p}jWOa?
z^EQOnQcYDi#fsx|b%-*#Rz3!Hw0&8ka)g{w^M9<j^?ZF*Z8!W290hnjVC;%mEvJNX
zfZ50-g|lkuD(SuJ>izBh1K{tyrEI<E@qSG~a)sc1l`78Y5y|kiUO#Pw+$3iASgFQs
zW`0k&;M<ZHh68<h<@110`pzozcnKtoTQrid|8tnzqtX%SgVIt5wo*sTON3$s{3wt$
zk}Mg{^K-m^nJf38g%Hh(>)wsqR%XHsLr1F0>G|#QteeAj!kuTHq|au>FAtxuNJSwN
zA}YTKB^TN!%1dq&m@}Gn7KeP;)L6XVL`klf{%^49B<EmHys&Djc_|`P^`<(=JlOAG
z8`wic6p*?yGGCqssn&jf>jlC|&IKlU_v4nw`Ic}~d|IW)f3Gw0Kp$$j(ZKHGc*Q8@
zVpBmPCSdtk+4S06KDdLbAy6wf@ZT=a$&}2MlIZgDW<&c1@=^*x1-~!w&db`WyBzCR
zy{){cukr6W00jV?RN?oI!1uZ+tQPA3c80--z<*43P88yj!SY5)qt7f(qF&Dx0Y88&
z;2$F~+)i~aX~~gOs{0*u-M8Hvgi)=PW~`=ZJJNDnT@*5sah>l(RLQX}|7V9C9nid)
zM`B-ji1QrxgKvAgeIEFyt4Y#6hZ=E41_8_x*;%Ec@GyS6+5bm~@^nW)R-<iOGV@4j
z){Xot2Pp#U#II*}L{1jcbuZ<2O*Jp12B3Ro#sR-&)^|Q}vtN-_&I^xY1#=ruz*X}3
z&(SNi^G?cga`0R|2Y^3mnR%oDwh$FcB0NuI`&aBbfb#_jX@i@v$?VUEMh~y6ieHTi
zy`L$NM1v1i2u6NSW|^dHc15yohkNRWzGfI~0xzkh(OHK6uI4iN;g78JM38S#g6A$E
zk1X6KDb8O&O>frQ5ay8FrPzf(>2i3-OmQ#+5QH?+2C$SnCcP)ndM}Tu`rq8_M>1^U
z3ux6j9N(vDPyiHVDgy~l?6fg>$v5(GSHUhs3XprFIYu#A+@(LIgx}!pn_NepRpma<
zrsAg=bj`UsuWHmWjdEV%c^4ArmY)E2cj?OZ?`!m&5e+JkN1^(6kEPC2ar)!~MjnXU
zX8wR>7M)82Yi#*b)g5d!1>G1bYs_e>c@?zRMR`o%&I9-1jYzX}`~hhfHl)yG07eI%
z?omqPASVdYpT;#VQgE_G(srkmw7E=o4PXGVegQY>pXtC6Jwle$cqj)AT4}77^G0$N
z9R-l+l-%oOF-Y|GpBLtecN)fmfDDWx7|E>)9{SFqq#HaJ3x7xXq}Yn-Gu_|Hx*$~`
zYYw5kI~=5yYv_90LV7oYuHj6OMd1rT6AiK99pdOzV-e~*TOKKy0z^-&V90nOhq8Nn
z+eC%!yQLFb2T;PwAl%z(%0t%(0kd{`>qv<fNHWkw!*2>f{re4KUToX`KHw~**Y@gZ
zWY;PGBsjK5WGd6?!ZVCcit`P3cZB`v{__D#+93!m&Kx8l(TN`^i!cN+`K|7+&aQ-X
zzB~2E?Lit~n=#9EiS)6V?p4o6yhEVZh9$syF_b4ZdK5?j0;Ftnbmk!()EKYAna(|K
zIkS>=Idib|93;f#^dgi7tnXCqDx^tG1=DLw2pB2+DJ@=>pP$#5K}b}uyETq`I+GVN
zLXeW%Rsh!9t7?K^wRe==b|j^Vt7e9}vInYA!|Qn%qMwN5Kt;w?=iGiuyxAP25`Rh?
z@)ini##=+Fn*za7UBD^3W0~GN63@Irz;>ao^?pAfI_d+9eGvW>!lG5X$_GGA+%#y-
zvE5ro;wE<+PNk;tMTZe~MM#^-?;-_J15K6R`oRR{zmohn9`+e#h-1;Cu**c$AidA;
zUR#|PFIg(C_g=0q+F>4FN^`0lKVxyPSe3`o4ok8|XU}LDTi1Cn(n-`6NPlD-^nWke
zo#|D%HskNRYS&#;!zI%m20-te?*v4uIA~Efb~k8sG1J1h;ms!*WyK$L!M$*wOCh&p
zHF?}f66P)(@QJFEs0&xVe3YUq-s^DEL}FYx!<g${Rv>jyWGBvC=eJ#W>e%YN(~&yo
z&!piS4-%rT*ESKzE&H<1Pgvp5pYoS>%59;UrftU+K_nODl+o)B@$(a!<KTt_)fN$x
zjON(l(!ERvy4>gq{${3=ch54I@40*KjIs-&_RdSkOc%g-c=a@pIe}jO)(;Xnld0;i
zmi7|T#h}~TdyoK>%P!J=7`{%h5i=E*O8MJwL}<auf4l#E#6}kM`*;$Yvj0u471w9Y
zKf*E3ysthl@+v-ks>C6lK(Y$KZj4yPVF+igm;6>V3jkPaO9w0_m2`|&b;JkHqO&*$
zN8y#*2C%AlLITAvHJeR~WZpIqM5Gl(m4fnW5HeBZt<rXT){^Y#J<g}g@+)c7Tgod9
z!zb+bm9jPNTwC2-XIk7VLh)cEsl2l|ZvQ0vMeie!$C@?O1)8^pbQI&7R7U@RZIHbv
zEs}t@?AL$HU~s>(C^Pg30G|!Z(ZP7-9aV4ze~p;sV9g*&?YhpIU3-P!FQ8%2DV5fk
z>&-LpyR7<GejjHhT!<GRaDh_FRC_S(SP#Sscztvcl~Cip_I=1|NUdtq1i+U4HIg7e
zZ#&DhaGTUGdz-eQaVRlsJUGs6)8T0D2T#Q>Bk>V_d?3Muz0Qc7)Z?<kZM{&5Qf8uY
z%xJmzK19xt4(T(6dccB>pGW=KKP!k?o%-XiAqa41+p6=xx3J7J=rl@Dxd{${rShs-
z?9+fw<s`1`DGX^G1jZSz2=yJAHU)2WKi<`F*5#_T)mAkj4RIfESx0FKy{z7iYuX?C
zC0IG)m>~lH`wTcvScl5*<IlJHzQ*Ab$3P@EPW)R4lK=0&R1iE@eu^|_kHf<X`Beb8
z0q;sQ`s(uaZnLZkR*^!H)hmDiJe4;pfJQl|3j({gJFjuHNTAqMWc_`EmcWBv_6T^0
z(<II-j>`_wHcG&2g9?k5T~G4wMh{+O#DSHyZd|YF%|OjX{@Ej{@J8Se_q&Y3?X)1z
z;Lys(>cjq~+nV6P4qPAnYit@ghcP5F2IfC2V$f){n7ZVrT}MghO)nf?Z&E(5xLott
zxv1OxXjNsqkj}z;8t_bZ4pL`n88O&J<Nnqe6(mO^TO;_rS8CNmt>U1svGo?sa#|iW
zI+;5fNRQNnd@l7IlU|;`(>e~_?aab1u94enMTAtD=L`Dh2ARZrln<a<o;e470d6`O
z?TVf19Pd<8=44h^G>hofuUVJHU&(h%<S8uHk9Wwhk+V*H$yDvK7Q19KDM@gz101`x
zcXE4zpgVO94;`r6c3wg4!jSw_K=;djpFyLbNZ;zc26kbE!{(wsnn(e$go!NwegoeQ
zh=9DKR&mr#zYEzRmzGqR3;Acf4Kv2ll?CwbF(ZZAO)X~u28j2XKc|=Vs;_~tX5eW-
zax*nI4PFg*k}3TDjWpvx?EJVnfbteC3KH>5GkBfpdy{1qbB5&ee7)Cpt`%unI&R6c
zSY&KP?<uLuJPas{1Gmbb6kGoq=rraQIjQdl;06sHtnw5#`m8}vA0Q1;szCCMJsMS%
zx#GYNl^QyZ!C9{==N$bqwF=DOQmQ$LIEXQ3`IQr>k>;n*YwR9Cy=dL_wwTS}b&eqe
zkjgY@xDI*ZiON0ha{l^pH3PI5<MV_dO3Mcc>vdD?_{~ozft1JxGzL#I?#i=uRd9L%
zXwC4xM!L=NB>mn|-T*>&VwdV{?fiK)gK@tey`aafEH$u0VvEbX1rSn-Axp7^!e{=a
z9S0b=O-(EVU~8MymcclCRj38FijRAhAgJq7WFZHi<+p|00qhkSNmc}JkI2TaCdtjg
zFM%10MOVAk<ZCKv%X<1)n@%fllfcn-S5_DSN^d=;j<GoYsIpz50CdFqu8t3UVw2JI
zx=#t)x`IxyS1+TK;KG}>pwBb#G(wWiF0L~J4;#2ST?gNi4m{V_#%GkH(^Xso%EE`=
zX*|1ebdj@#VB+F0?yNjN0dcT<oszh0qF7&2WUI7f{w%UaA3naM2Pd)1DZ#Cqc^9J>
z-Sb>kN9=v)!K?34?h6l5;3nc(4OS=E;S~6x<(`_-eA`t6_$27aFPLO=R?MQ}7*RG$
zVq!e^_~#*(J7)M3n5DU^l|COk#y=y&g!H~Yqg{Pbh*+)~ZBKeO(<nJ{9aej*c-7;+
z?r%BW)YR}A!O<fwn}>M0&Z15MJrF0pD!rZ-*lMIigY;-Jlc$7i8oDa#IKcBx@Y8j)
zN+SnA<M?3enzJ0v{>e#9JBIM4_Y=#(b(eh_nzs#u6OYSCtzy3tE0RKeE33Cr5;kbw
z0v@x@=`D@zqsT06`a#uCiT*dWD75Ih8Sx_xd%V9=pbF4$(4Nnb;g07FDG_AOVGgsj
z?6%86jgC3dO9{#+sB&7Tip&!I0dee&V%TQ!w*4(3a2oA-h~2TzsFGuCjPA@JMZqfw
zszf*k3Gh2yhP=B+le>W5H)z!UZ&2Oqge=c_(d9V5>NqVOJX8T$B?I+#6On><9*|$U
zdc9Lw{G~jF^C8-UsKqy15X+!`tE%#6x$I=T+Nc8rVhF!p-~u(989`7aF4-$DL-x(@
zKn=|qeen7NT>@w{(<u1TSr;9UgK#k4<ccWlhOP{|bb9F1=z@CA->Ygj=u`3I$qN;1
zq!;-H6t3~n)cCzClq}Pc9^|e$pKlN|5Ll9W8}broS*@L<J6&h9*(U}m_>8|t{G(DT
zI=C}8n3f%gA?s+W2kEI(^BL(0b5Gf}In<qLW+`d9GQG}@FC@~uUN1%*!_~%Bx#z(#
zF5?DC@07muAOWnz*G|%b(fcDnGmZtmaLwMeKRzF+p|60Ov-bNC=c1O1_$cSlRy4xn
ziNgt5c;iTbmE)b4#Y^?G32O_u3Zr_{^XsD_?g^9x)sOB~$8m$+g_51;1|r;6xxA!|
z8z8IMnJ%SoJm5ttK{{>;SgClkdmeCfLYDS0?k-iQUd|Lo1m%_VzJSNJ;Y=M*ZEHjV
z1q@}pbCRbbvvj5Z=Q2W?3Py+>v_fUIJuYl}%hTI=uexp9Q{mp!vqJTN+TuWqG!|<1
z{Y|b1w{fba*Dh%mD}L82_xgT+B-8gfe)`|I(6?(@l5;NxAAp+!NQ&cRA1TN5egjYu
zWHwn^cI$!=nZ2rvd*G9#HYD1)R{iMr)zZC8r=^S|(@e7n@H26XMQ9ahvVYeg3KAbz
zl79yYX!~|E`i-pOsPFJgUK4O*eS{zZDsaiw<QES-+Rbl7dM---PJ3n(|HE8+z2VAK
zb#S;f$B1tC&Uq{0jpHKIhPTVG;)?#ygO6LI!(3;iF5q>U0jPtHg7uwBqUC%O91Dip
zb2du|IIG92-NI@KK=VZ?83Y5#KuUFc;f0uanAC<#O0T(|TzdPIr>TM{AK&ox*a!YM
zA_Xdis7OF*^f7(=o`~zc$}}x<H_((hNb~0yFF+26a^Nw(3PBg&C`;D3v(VYWETd$9
z@&CzAQ49$FZ*3Qp>})5*csXQ%Y|a6Nftwcz*~3}-&o;|kefKOq$r#w4H}rqBxTsO}
z`v!f??OxAr{Np%F+V8s8(*y6{%hbUB)!Br8zplIxCs4O3irOcR`N+-Gw|7c3-4r+G
zg98!YSy9IPtL7}AeaTnbs=4%jU+R6jJEvFP?sF?ZHG<O89kiS>KLG$?OR)=#hI&Hp
zK26TG>&g-?BPA70L}C?c=uQ!!|H<Qh3$dRabb1aq>pE-x?kU3{nj|CK63%-P%fyR`
z>O(l!rIE|OcY)q3D(C^63@mV8(X)bswTDV121?VJS&*6IRv}1)rh;?*POm#&cNz3>
z4yV2uq*_7MdJ#Nc2C`@P_|JLTFNyC7fWRtlTcM}zomPsx>v*Ye{owxms${;OlW#R!
zMG!Y>>m>n&&#b>?AjZhEB=I@Gm7csA?Mie)(2C}vc+AUO0f|Q6YT<JObytjLc5T&Z
zZo~^iUg)3Om^<yl<Rt^*9J9$m;+?1JFp%MY9BwL@T5wK%$MEa6Rma(@#w)_()Krb}
z<Cx9GtfoNNU(ixhPrMvOs*;(?rg+z@(*y{YygIw@<I63EJ16#@xAgpgGC_deYMyTZ
zdFm|>pdKjCX~r1BJWWQc=LDu~<?X;DFM5?(3Z90TW;SehfLSl25-sh#&dXRl&JM*L
ze^I&PCQU;)`kf1bPkMe-xvk-OhybQ(DEx@aEshZW`w(Y5;8`l^MLhDZP5T?E*D3!s
zmUxyKF7p?B|417q;)&&)AJ)d2%Gn~vi8lfScFdmToncSeZUeC_{iDNxRJXxG1YiJ@
zgZLSs36x0TdZE7f2hyweJ;6~B>Q(g>gzA)kU*mSIaWCojM|wdReqDY7UG<9B4=AB0
z6HrRI&fl)WYRhqQ;~gSM#d}dWY$rvK2~!I5nS@seehrf*r_Wme8|Ui6?<I%dryI1s
z7jmWua%YZuhWk$B<h!_j`g=n4j<QWuZhiq+37Flq@bs@P3uTR*`sd<EaSG8+=*_?i
z)h}e=V$YA)Ql+1T6YbpuE>f(JLuwNkRvMQ6gbc*=j`%fTIGv(&5#-*s@cr39c}*=f
zZ%g3~X&~=xJn2;R3bh&XJsSHe8q%m&@%agO??2;_Ur>!SSu<-8R8C-pOD@w$<9v(=
z$gGDn(s-)>!(*pX<GYBE1H*1<<DCWR;kH(^P=-fzj7?CXg{{tt;#xI8%a3AMoY_lr
zJ5RjSZVHk(oZaa<47GrfjNh&2Sv=B?hMN)hG4;fZ2b+$(1w5j#K4uIDICm5|CBe;#
zgK5NZxr3+D@B<fj#&_?U^Zj)0`~ASiu-Xl8yokg{`_AqZ)|Q`Vkcx9zZsX`D17{g&
z8RmBFGlBNi`LPM2!4AvezaLn3PR(dhfYUqfx%>_iSZn^2fgB4*JqZ*KNaEd8_ZRC+
zSr;LlOE}k`DaGkZFDl+k&mg1Yn1`?aO1X_AH?6)+TL3hVuq@j5u>vfZCJjYZTM%m$
zP>MeHTg}5;%XLa}{nZwoSw`uD9szQhT8m&!=bZ^Ui<;+>nOY6m>b3!f#-l!ez2G{>
zk3tZFU{!Y)S`L+FNEgoTSWR_L=oDDqXD~x+ASo*N)z6I9H5^fsR)~U7xJLdKW%<<D
z^bkJNPb#Km3Z#2!>n{2CAh(Wp4Fc5vblC?U09$Pu`F^0&(3fodZlJXN(dWtdf~$9}
zZ2OVDS&ItDr+FrI`SF7h_BlwK<Kk)~SlXecqQM8aKh>*I15SSTpS|mb!=eARc|ay_
z46gwxe5^X$?L#|n!?IG;#|ws|^(!3){>{#FhZCeIi?>11f%hi>8Uor#YKtAb+6-}Q
z>T_4AWUWd^>UYqR*2j5jW~v}8(X`HKxdP&;a~=gaEq_QC{!(75MbX$QGpP;46%<?W
z!9|+-sH#p-jGn7*Il2*($xMx@Ye{cAyX5b<pDoASugkI`$YsB1vh(2pYLKRAK|I;z
z-8mlIB2CgN!*QK%nK8$PgBDf0ZUV7USmliepwrc>pn1ooGesCcnzVJeti{c>ohK$X
zpo-%~fC!kn)NTAgHj!-6mEnNYb6+_P{~L%B*|qF*InK<X9G>vgbjD!^|1pwiv-hj>
zNQ>r~!KmlC0jS&D-yTIn$ayCqwxg4mJmTuZtwyF9q%&6Sa3Ft2{D_ZjSm2JH?Ay**
zMjN*4d;9&9Spta#Nqg6(0oQT9|LV#+4Re$uKn%CJekTzDEzEaD(C_ZT611KgRnyH}
zTKv@&)bldmJwL7UIx<%PbY&^w%NkP^&I}J7`Mq2@KJO+6rxJZv!%csI9?aJB9>}L#
zwC^2ZYWav|(~4<(1>1<Z!!TDsH#c_IdL7lIUR~GP?ipU@4;;Q<xu&w6w~HaD5Hr4I
z`M3Zg)F5$Pt>&E-t1(q^F}18-jGayB@hVB;Hz701Ih`xsl#Ng{{y`U2`@ZygYbc)z
zhU*;m5keGuY9_JZzWt2H1q~O_|JSp7mQcMKAPwN1P_jX3z8CgLerGL#m*sZ`W6(ml
zCmCp}v*2<6`xZ7GdR3;N_lX#rUvHdR-C9crg6UFdTBdcyQ2(T9k<5Mj3>||x?<9@&
z&<ePTsc3dkb`T*|RZX;xdD}#Bj2LBleZ?H|He+RJR)i3NIH8T6`zt+%mss1MN`pUn
z2eVT&Xb=>2MG(&uB<VTI!6EABp|Wrncin7$_qF{{#jsrmc;BmnFmEZXN&SGW!#&K3
z;Ph1dmIb{E1hdZDZ}dQ+D@&ma44d14rVur2{BuG~Gjo^Zv&9h7yiyJX@?iDe6rxT(
zu8L^L+`ZNEYF!VY{e1tbjfD{E-=LbtbvrCwKf~=!?>9L3%Wg|hZHWFOnoUpqe)d^q
z>>1$*=k9rpRNqJTly^jrm|~Tp$kbH1bv0k98~FqjaHLvvRw(r{e+AR;ZA6@mK}#S2
zSt-9b5zsPILj3prGQI50Wg0i!Gquce@ndFtk!rkUE_um~ZLnxIIdEM%&ZoLz`4rBp
zK>!lix_-Y^4t}bg9jCNHkg+o4ok#<aw~mwo0E|p<mH~`phx-<yR?)I6AV}G-55&C7
zm-*+6I^wWu+qZ+StHcmcH4e_ZOOkQZhLiq+L(~9gF{8H2BZbQ|0D!o?jQ1#~dXQUW
zX}M8x)mj)(!Q)6plk2S2y;}^4rJod(*8(eh(>5NQ|Ivx*&H2U=UVUFAwxl!VKP}>D
zegb~r2wOx$aBpzjUxb1*aB|SeJwowlOcZ|l5I~x8)(#lO>xk(&P_3%)fy=wrRAqE3
za8%u}Kfo(*G4A%dlJc3laOS<CeYgrp?m;_AoGh=ed*5-1L(IR|Nb~k-+QxUfiH9g}
zniuag88_MqH*L*ZI5NYuNIa#BgV4U+GleHUIt;npA+j%_S2jb8ejn~=99f6HJ3?=H
zQ5qQApJ?l*&#<#j6gdo5OMfxZ{T}I?7fxU?PjDj6GMiHW-bOs9aTVg=8_!%`{XX(3
zh2rdc_iH{NZFlkarK{Q<V9+ZFiYP{N9<gK_AXLr-lo+DR+C|x;*7DggM0nckNVEX?
zzrmTXPPb}zr5u<5hTUh7C6q|t^QO!dh|bQbf=7Ug$#Vu~Odp+RT$8lD6k&F5c!bfU
zHX2>(IIj;R%C8AyAy}?bUC6iK+85)Dn!_q%s8-dWYs5Rqau5-Q^x8VBTG1>mBQ++x
zUip%xg6F;)zooFps4m7d)5xZ_UOXi`<d1OEZ|=_;3NT^`@{U?5bmp^O7<H~Jlc;fc
z{Fs;i<79C>NLqPiuiTBC#_9B?Qk|xY>=@qCcrG2MKqfeWM|*4L1G@78EJJ8j<Ot(i
zKR9s$6^Zl>{&vi@n8I{k9nV?nwk6@yUYR8zQ*Z>KzGKvwt^Hqe8COthC>)qB`Squr
zc#lJGW1;zqGeDCj5;4lS&c2f_FR##32l2bY?K@)p*rxm6Z^4z5J(ldiQ_tJ!0yO=f
z5hX$&IGBk@zP3=iuw%R>{QI9_Utr(S<uxKR(=N*tVE~fSQRR6Kd3?<GCaC*fx+)ZL
zv#JSc`?~3tFanC`yY?<-A(>5|)gNf#$U7r`$4PEvCfRa~3t#u69Oq&@T?Sdessm28
zSs4aH$oo&KVGrbv=OA%-260tw-@wCDH)hX>q~l6^KBvMx@K0%cr;xNwbVo)^`j@$a
zOHS%>{_sHoL5Z)u570-CQHFUCUfBROVixJ<v7{|q8V>Gyb=x{P|8(MokqY9n6-lnW
zZQw7VeW?N$o_976C^mU@Q2MD_8OE~43E;O{kOZrVuVNV3!b-}S8hs#+2`FuQ0IRBM
z*1vt7PiCSqtQ6;g<5#u&_i?(o)PxbZy-gg)=NvF#`yy+S`v#iW{(BeZoiob>A|5k~
z>+d=EX{t-a%s<61a}sl&k&TDnT{xb`;qNnWpxaGT+o^YT+o+1*<WtnF!S&spZ&4QH
z8%#-rXTXUOJPdo^Aj{_l#fb^j@+|{R0CX1De+M0eX#B@XbO^;)C5Dg}Lw;qN@l=Qt
zWo^#ab(<**_l*nRM2#vfB#!eIAl8}3=}V4<s_WLIc_W%^jk_tZv-L{Xx9DP)+Ij^4
z;;Ny+%9RmAoG8w3?E8WHZDpiH5q=AN2FKU~gVMX2)Fzsfu-?7Sbv`;E6hZ4L;m?_7
zUB+|mcPMjhh`_HhOu{)me^p&zYQK%MEtofs=+Tkud1`o@_p1VgYL|y|v|#c^<jCjx
z2lq38+?lT{3u!Os{eB++^s<T(hRvnXG+de>9Fg#^9tZN?=}I^*02Gj(xlDai#8-tJ
zLQd%&GhNHI6s0f?1lD3Tb7_defN#>nU<V_ecP0yYKOR-r4aB_8r1$HQ{z_LZin4O^
zuT^$Ab?UBBrHXI5X0MI2us7+y!5+jrz%T>-yVZJqcaTuyt-Es`?85#2NOnPz*Z*EJ
z0aTS@Awn8%sug-dB%S@w$f<x7y}7Z)i{oEZn}%e<`~)C%3VO;x%D_<d-LyUUM?=uP
zJLCsEBeNWcpIB4TmMNmc{h)Q)P^c4kER?=CQJDt!JxSfRkiLXhMxprP+toQ*;F#47
z?Zb2P)v4w=Kq1#S-zE*h)fFty;W2<(W9P9)@=-e9?cAC6J4%CxKJ(b>*5v_K4dn@;
zfh<O?o)=DuzY0Nx@|AL#d;`3&(lT`4NZL_cMDw2oen3xPQ{6cmNVKP#IugM0QG74~
z;}B8aie_%DcQw=SfC0Ae46vS^dZM)3V{7m1e((JERlVmR9Bni7jSC98q2jpU`tegs
zLsSk`wRb`Ka5as5KQ3wG%)l=%%u6S!`2K`VSygT2QFHa0+B%+K(K*l_cOLVd66M?<
zc$5^*Js!`0jG5NncUQs9a6>rn(m1ewNUf+jAOKl0OXC1p{v4qcDK4=8__hl-vZJ<%
zkY5&3lP!hONIj~!+&-tiBbK0HC+K(sO?GkYOj#HxkxBjc4G#XN@)l(y{em<qSFTz*
zqqbcSz;+VidGN<6<oY}V%CzWB>BtXwjmFaCOy9IH4MuX$dgqbKY@NaizmMmb&gD`5
zFBt^Kg6)>dDBf$uPkFr<J!c#QNc9L5a;@rC$}?*xqF1&+U$mDe8*<_;-zE<9HVQMy
zI^55YPDI9~bnmR^ymc)#9R(uk{+PDo0H91;YF-m`6|eT4q$t36OXzKL9vQ-nAvheN
zt9u610X5}!jscOER_H1}>nTfa;3D$wyfP~>$KEZxbxA7xl_6Tm1*{_^Q=?z5xDb_l
zA&w9CPLp`<b!l++zzHds{4xQ-s7LYpl_~AyUU8HTNIuobFwwm$no3Bf^SX{kFJ#Et
z`uhQRDx*s?3JfY!MC(5q;9ZxFL!zI~e%+#rtCY=_<U!{blcWK&>r_D|q%ZCyyk^hH
z&^VhiZv(X3qmg@#yCN;gOwXw<f-kN&L2*}gt2-=f0LBV|&o~ZMV{Cv;{<X+CK&(DX
z!3}3B1Y6wYO!-u)V}ymxg3A+IJ7r6|mXq=VYO=E5;7z@#2OsiDe6iL5UE5RbF5{&k
zo>}#rh<#2~tyaWUN}su=6i$@N=yF_~2}ac<?am7KF9l5y*!>F3;w}~zFeHIe?!#2X
z+6CopvP9652T6a0!!lP7lCZx(ZTe%n1Yjops)tSSsbn|ajT{gw9CrBz9#OU!0s4}1
z@lonMjUGMg-AcltKz`CBok0$}QS`tATtn?7BVtZCuN&lA^XK|0WdwlDVl=PtN4oo4
z@~_jU_EyO6=!?r)zi&VrgXGOQ$YsSAbW$NC<d8SNjPAf6rR>S|`)Gy7!O~BbagW3O
zq1euw;U;oq(M8J?YBqk9C#N2wuFL?|xcc^P7wFbJI_(ng0+uty-G-pt<Sqb=rRLr-
z#Rjs0TPV~Hd>qNlEEy(1{VFPVEa-9S@d53bV?r`jL_JJbmg%71cySp7>0Erkc_(TR
zg}Fm3sSRix@!t#ydgtAd#pX)Sqw;Fx_66cy1+WgB7it;)`x?_~Wy#V`b0v=PN(3>@
zP^emQ2F|*<Oq}0zPL0oTq)K?_+kU=7LHg@!xP@0@+6=8B@-}sh0L|*}ZWyo{-Bl&I
zE&$79WDw5g^r1wg+<GYc^(FNjiQ6))(jC%kp2pM@PXNJNn8on`BJV~{!v&>w((flA
zq`PS_H&_D2K6M+k)6ef6gcv0wxhVs77s12KaumFVBZ}34{62m(uRI`dJAy`u$!4-c
zK@9<ABsDug9xLUwUZ2ySEaUYq`$i!s6Hx9=M^`C{W<DN#^=3SLfy}}A26p;ySZ}-H
zDM;$Tv8Pn=tMD^9@G2*<O&o(}N-20OK=v{~@2(HP>~D6?b9*hZJFfa4Gih09hCI{@
z888eH<JC_0xgp#AKA@G`MzV{RsT2fmSuQ(lJH7y84Q`A}O>WYGtR8b0fIXA$4EHlR
zllQ7!0fDih{QG!Z1<u$1`vC*Ix(f3Flq?+d`V{$*Or+IPQfV|t{TCyRh}1eo0B3o?
zcK<GuaHuIK9TH4HGiFaR101F*lT`@LBj0z8;cO~y=_CbR+KwHBs02=`1Uy_=slS_9
zTy1Yr)uivKew&lH#;%$d+y%v0?;JzD9Ke%dQQCJ<IrQIn@Vfvq+r`;gpoMpqV|fSI
zAvJms2S1Eca*I9Far*ZR2H^gDv-9P!mzM##lQ`LG6l$q>le%z{-C9JZdK+FbBjl^c
z&SHVvL?qX4p>F=~1L9`g<avnre!Xr{F0ajl&lr*2b&v?uLB?_Tb-gE%w&`aSwQ>UH
zv^Dw+1XL0F<-YYEKb9CJ#4@6aQJl*BYV2k60BDf?bkJX*fw$r1X!oje9SJ~aPb248
z<Kl9fOw?@Pi~HV2FvigSdbck9WRd^<28}KfIvh3-d_H1TV6zCBLi-R~?kwBf#y*$V
z?KIBk#{I5#aW68fRnno3&I;E3t<02Ver$%)5fR?8<wb`buM$Rc<!z!e#mZOG(|$cT
zR(s`f64zDLDk+DatfNI=mBma6+}xLm@6PbLzV0QPSuyureh}<?nNABe4lO5zHa^bj
zEDeV)Qigay9>mzdec<b+MZN4&_v3YoF0J07Gl&;JV%wh(7T1<#!mc6<0ujAl%@dsc
zk8t>PsJ`)UNo{d%M;F-UZCtQ<+fA|hrc=kata_5UOo44nr$R`vAo{;Eez@UYMSz1J
z^jJ4dzrL<hkKUV*8&7=OO&*kAWm|@ybmTVG;dRDT;gh}aLgJ_8mWu=bmXLOOE7Nuf
zs4ad~yQPP|-FuW{Yk3AeNCD@}N&q-;Ij~KY1Sxmz@gd)ts`|1iQc6H_wF9%Q`lDu!
zKVhnOED5x{3?12>d)$)DD8>eEa78fE1}EBInP1vFCK;EZ*iUb!0D;ss@p{zXZP&10
zk6!wib)E6Mc?04Y=kzwHN-M@BBR3HFx3~*jwX5o?;Eg0O4l_y7XRd1Ecae){ez`O9
zDn&k}H~{$I0A)a$zpEXHx%9-87xlBF{#<7u$TWu(9dStO>Shd~FM#|lVEfkF{eG1k
z;w*lu3*aEUsHWwX5RpOVr0$pSgX_D-fRo8-R4Mt@jjLvs%K})}n6hM8Nuc&y+?~Ms
z2%1-*cyhj0vyp?hSf&ifRdC4a-?ir!l8;L=)7YFgF^d!#paA$l61Y2U>`&)37f>xJ
zaOXRyGG_$*kTZ7>f%h<DN2+{2AhE<=MdC0QT&!%0yB?Pmq+SpJ?jjJ*^8r8~I6YZ;
zZAsx+*|dr0qKlSH@8iBu7q7KCmCNETe+$-_q|u&0fZRze8ojzIT#CM$yYF<XcC+@p
zDi4UddhBq3q~7`Wlo%x?<mT1zl>Yq*gttyb!3r`DNW}~D7TAnhEr${~3TOJ3!MErI
zN{%xR{>-a-7Q6>?6QD^b;f=Ztcy0TWE%gDJBfXrd;Ju7kMa#MPfS_uIK_*wv1tW0`
zqn>y99Bda?RJEq=9yJuhnJ#ddlc1G=(QsovD?N!8P{N((p}~h4jPk22)sG*IE%N$7
zDBPu%H3omEhGp(T&Ge;L9iz1xcio=LL?yYagBsg$=+~GzZkO*B4S`uBot?kSWd~tj
z5+9C9j#jxGH~z29z|HOH{O2uzLJXDHU2J=rHHJie2nF=(as=%i8s;k3{_9g9B+p<@
zV#OhHS4vHQVBY07xdNDmpsuCJ7@b;u|2~6o`@lW>{e(rU<9FWmQdPLAm=-WzZHD$`
zP>8Cg7dvqnuDl*Q6Bs{AUH~x%%uN4sXFxaZ@u>{}{<S{dfI^3WtVcN^06Sxy=6wdo
zmpOsf7SR94{2ix%OmWEVlY3^iAh`fg;?&GU0qy<r1qU(^RI-GP_Gm^i4syv+EhnTg
z(8TyW#GMZJxpZiWzS3r~s#W?UCzXnF4&eM9ggA*SLAuv{ZgoaiCAnM6mA3#e@8}5m
zJVdv_+oY#>sFHV0K@w587hR<2Iagq=mpcQl&nVS>fQ=QcN-`i3sE8D0IdzJo@~$x;
zpCfIlE*z~IoXJeU_x}I0^=8?!<T|e4cxtWsP~Qwk?fi%E0H@AP+Gf0}kIak+-|l7-
z36dZXg=KijURio?x|Ori5?*%0OAN<28I-;Num#X}ipWi^K^Q}vbqfh#&G1`t`g<1!
zB1(Irp`)x)^<_d07yK)I{f-qCnxSF<ot9_TgxY7ern%pdF5qv~lS1)sn4mi7iu*V{
zm$ac9KiYFEkSHq<?3{be9>f}4Y<m4fKmS~&#2_};Yfm6MZX>T-!=m}`Q$<Dgts3T)
z<9mPJFB`!%)nrES8QAuvHiV3b%cvXEfvamz&4TtJ-fXXL!s8@6!`#~5A?nwdGNOn)
z11>R;7W6lujN98@51|awuXO)lPoCeWsh$z^EmEbo`Ri3>B=g-hEh(X5Z~Iwpb5Y*e
zb5IZlgG3};{+Oa({Vw?5@r>lE5yRQVYryj!Q-9ti)VtK$bC-5!NyZnO))U3B2ml@f
zojZRwzM{yydPlI5gc}7(#}!*zrX^ZOcWDX+!Bs59Y5%!13rc?Jtp~2#2D|1Mv!mg(
zM5KL>(-wMt(q#C}*J*iljjbqIL$i#3RtO}L>*~GWU^W?Cy8*~G&5|L7ow<hadyN!X
znVS1u7WHu+S@bw+ZySKoOAcB7M(Zbar&)#$7YT7lO5f-Q0{h>C<j*1^mpupyH*Bp<
zOHnoM@w}Hj-88yu5l^nXg5xv*#i@sNqsCB{%z!4I^(;ozH13Y`{R+EHoqDY)0&Ixm
zBiH%Tw8UN}wmsY|Pw0RPe|lq=zAJc(va^&tYGdQI#Dz5kq37A{@D=ihy3M`pr|^T+
z?)ralzqw2)oZq`qyf0n$;WneF5;?Es4x*cB%0_BY|I^>23|`Z@aj%i`c)h;7avz2e
z<6YcH&qDWDbOh9E3<yYcYZ5_@UMaWp_b4yab+l~!odX0=)PTBj9iwOWoL6Y|__Hzk
z1{5S+gfS6^yJUUnvJVxTAMPnx_Y{3L4>7EX#3HFJ0C^*mX={|^sX`{Eo=AIKQu_N7
z5c+Z4gdi84^G@q+r9_?RBU321QG_-_4*OjoIf?Ak%&Yr}4j0|OJ;~z_#q_L3F+j|d
z6s3SFaGh2`q><--dK$SL>TCSH&W;W5_|)a%B(qp$rn}?Z!nBNhpvB}yhd|Y;P&K13
zt>n)p#_74=rz=mF6uat)OyT!a5$e?yAYxrN;?LqCO372wNz<wz;#Y_A3~G=DQvB%a
zqy!K;g;`Y-&XOU_MgYqi?~}9cCnP<f0OSH}5jC#L<=bj85=uSt+J4s=Q8SJ&T{X}A
zAWmT0uA2orpr%2_(C=UIJ)WqKa-l*{I<J$JQnFH#2(vw%{uUX5keVLer?_!Yg6s?r
zZr&IoOPd9_=gqS4=iAWZ0f4rV-^S31zzVo+f8PT4fU^9J$kDRX3pGHt_~+8e@<^N0
z8?=6BPF%MBCD%N!i&~44J{IX2YEcN=HzT)=@)|hiX%u@#U0uE73EVXW!#P~^W}7fS
zbGA36xiszkSZ-(J?)-R;d39V3qp#x+o?(#e3^485$Gk1A+-8<`<v{E{*XS%!Ln9W!
z<D^yIpmE|tVnpHk&s%=qXm$V&N@}1GVTJYL!iRZ%$zdA8yskHKYtmX#Ff2b^l|f-m
zEswKM#HFW(IY`M2X6j2mczq7J9#FClEvtI`NUOYg<3+d#)>(#I`Tyi`BGCEP9E|8n
zMDi4zh?l*RHG4+s9`5ssa0T_grc^~AC{iHv1@`%!UA#t|S*|=M3Dnvj%C7e`02chx
zO90X{ilFl+WiHIP37kN`coo*UtDW}q<UBuSs(pwfH`#y-KtaRn7RZjc?$tf1Y0_B@
zRg)X6_!SZl0&s5ETu(ZMpDMQFh)lC5a~GmRKD+(tvM#R7e7u@3V3JIwW2scaGx9iy
z1^4x;dRwy(?FLyw1jd%AoGC1ujEG^yQTI>I8UQGckMKKQ;apb;SBD0q-stxubFsZ6
zL6yo?QKR)5k!;c<FpzGWjOcmYxByc)Pk2wWW-UU1Ur^k`u_!Rh>Soe)xE$W3v<wIz
z0QDN?(b%a=%x;uKtEPvtcN*tyCH34mn9_qPc5#k$7mxy%nD_iCd01Y{$_&E6%t3c?
zHchzizcCRh_@-t`>$jyZy{gQe1MO*oV|>pRZXT*H6kWz882?6&wLW8*yi?P%X`9|z
zBfLEgAa^SnhJxCo)|1*f{no$qA_Zp$k8m|fhKSJ&ZIM1{U?@;GB0nz`)^Sf)YJ%mF
zVGd%d8JTtjp|qa8tWUjYxPN>0`{_iYAnPR>20r2pAk2Ood%Q-kd#aQds82^BwjO#i
z+H={*If4uX9TM=D|DN#f#})W7=Gf6%E#t4RvgL1#>+qAcO0pj`yOK%VakHgq#4JgN
zLN)YAl$9e6UA^yc@S~owT^Z||mMD49=}L1x_&e6p&tQ08Il%Zm;-6@``wMYUEDyia
zo1$?0R?`ROJ^(1P-;a+j>~5MdkuMyS3L4H4-$yG11OA64iLWF47H{^VA~)Wr6kVR$
z+Ecf}$^|@lPFScH;;PG#d3K``kxaVQ+GA^=xly4YbxLi&Dv538EhNTW5h1vI?Ln`z
za7%;T;9p`Xa|J6IHdl@GGWorz&~n*&NK^beKt{4N4E%w*@$YM-C>b7}^b<SqiQk%w
zbJC!QrNB`CD?k3?#2EqZ<i3%<jRHtVWfa5QyZSxiSS~`YU2mg^;8WlYCGDXJ478sH
z8h=(9qmE#dVb`96{8vfu_|3g)o2Hz}sFSx4CztV!;I})}ix5FiT!mRbdfjKV;zh|}
zZ69%4|AzJEQ$hZg#pd+e#n(g@nil@Es-kX`GXn~MJQurUKOAZwKh1dntW)o+tQ%fJ
zHKcDOtW4p;-<O<janVX&rd@87VVzs}xU$V_ERLjcVS#LlP3dl4^eEb{2(uvE%$tn%
z9B?im{Nv)_43wZ5lALYDRi52+rPY*a2lhGh&2OD_(trDtTx)EvFa|`Lv6-pwo+xtG
zc|?|rm{s(Qr2z_;|C4>K(=cJ^YQM6;D3rbkC_1Q44&#S32iS4LQ8X<OAd*}AGY$=;
z4y(7|7-rpm%JFXF;uwFQdlycM(8}5cmed*oDAUfr`NC$?uJ^xhfz$uq{XhENEm4y=
z3M<X?thA~}b~W??L?D1+5po33^f>YA87yifjrEKwHX^K1%SJ9Gw@(B!3rAU3%Wa2)
zT2&AV-teWu``_f6{8>-%8<_BnqE8}jXHM>kRRM(pL|QuzD!0m;#;?6d5h|>+B~rX(
z&dUz=FgneHt1qEG`8>p&kN2HNcBMhi?+GD#=TfX&G#9HMO#^wd-0`8AI;x1i)qoWc
zEdCy(+VY-9faY!}FsgPOL(xUSdWo2KpM9<MI_?4TnT#L?jqdcyFD~L~{rTr+0Mcq^
zt`WD9vnEL$jSMI~w4L|(BR!sQ7oxn8o?q?M5ubWK-9Ws4h}6dz`)O6@pIm@-P7i*+
z?)khs+^siufoftOQhd{h$XVmK0oYRiNl9M1ynTo)8EE^d<KhU!UX0B!CBo)h&rd6t
zKN<ojB1Api*p+BfXJwX28<a(u+<a>v1wazt+d0qPm&7--mX;U7@EaE<A0m*gg1UH%
zrN_6qJxYqfuB8DXo%6OqDFS=-sI33^GfmDZ6;iqxk<5@#R|$dPj7y%nE;uTJ(2}wg
zHSDazI8g#zG|pvz|H_@EZT$>TDg+V&eg_EwvqTfp&g>o$;dx@0K0lTuC1hGKJ*TNa
zqQ7Ya9pLdTd7&X*kawb|JSUO0`Fq3%K(?F2!qw{h*1j62JX;r@Bhyw@GSfZ53xDz(
z(oj-Ut?_pk{0^vkG?~ZOg$pGN&Yyg+xy}>yaC#U7nG@Ml_m$6JP?WpCVgrxyFIL`-
z1AmD*4%eauJt7IG`hJ8)vQU81PV?_iz!|uY0l}59y*{_GGc&ze;09I?Mx=<Iu0U!M
zxJl1ypT=~aKL;?uv7tq0)GPpA%X&P}*=tHwb2LL=01vVnz<`u(@r|tC=VOJTbmBVG
zhv*7$yVf(;oyR+4$FcAMZauE9$9FusUI4m9ygdKd!ic)&HqvaS2I0b{whtwP)IkE&
z_7A0{L+X){&&xia@m5`$C%H<?WvyD~Oiwy4cwD+|#j5JX4V2QdWc>G6>$WEp3rS$;
z^l2<_h%6H*>pam9+7r>2LcK;L6~uihx+*0-&Gi2Of97Y?G+Vf{mCvv)r_`jIS2krW
zO(SZ$9@=^0@+FR%^+8$;F;T`?+#I;eEDIOb_elhB;-$1yRcPJs*y6L9q@-yo#z~^$
zsQp_*xhR6A!2jPr#noDmQdKrS>F3GzXY!3VSHw<xw7dYrK9(f-5mnYB(wv+y7>E-t
z#Z;fNT1WQPj$?>NDfd_U?o4el(||zAPfvHPFTnYvtM@X;%K1f1TH|apDx18mUbyi+
zZG<2#lN544Yluj~!SCUw{NJ}QP<6%U^F+%Jr%z%*!QGEcecf?kUh@!J4RrJpav!d1
zD0l1ZjEtH^Wub5%q#Gee{KwUGky)kz3(&o`;{d)mMZQ4`r6HmiR#^2DXjNwK9)GN9
zp!su_X+k<fDf9bVe}BRT#PT9|k%nt&>ZS4OJo1Dbq<Qj8mMx4*kadKNVWz7&=nV?`
zHu-0+ONWM%uJOht2J!#gZ}Bg=tYy<CaNB)O7n`hj19gMjadpW($Sb=9O{wxXQq5H&
zCJN`~jY(2!<Dj5?J<D3+r|7B!C-uBVn2pQsOdn~c(fV6g2FSvF(gwr+(rr|F>wEd!
z?0zGOG_;<R;=5A2LVbgV3Z_0`7Efzk+ED+O3If0ldx@`yeqA3^MMf7<c0}32q_qla
zU9&?#ziTH8{0@%|g`A#y;v-RdOXW0?O{clkb=<VBXrop~UY1rSMY;^5NMxKR?(WSZ
zMnu)JT6$_r>&&Ee!w;gssKROP3rYH#Ny~~{XO)&5BFN&Bl{!vk^b!STggo&B42>aE
zgeJ=3_SlG?QD=v~*NIgQ8!!tVsp)4OdYyS`N6i4}cy%*~!ax1(MCXapte6h_<tFor
zj}dz^eO5HsJ1B~!@M)CBKFjP~r|kQb;E7*&cGewsvMg{2B}caj7-QDs(spio_cpt{
z+g&F(#Kl0z_}?=iMJt%?wt`O`uWv~A721sGsiUK!mI#+L?iiR=5SPM9!M~YbSTs*p
zc(t(aFWqGtV*H0za_#hLe)Vf%k6+6ul$BAJh=^XFWzAp+H4f3TKi~3wxn1<J$N|bI
z;fRXAOJ@(mTHc;Tt;`jVFI1D$R!Jxw-SauX;{gmaaS14tj9cMNr_d1!^-m}}&ak9v
z$f-D-69YF#x=&KN1-62x4s1B&_`iq_QI0f|vwWC@^FKr&#{2GmBDVkgr>@WdTDqPN
z_udW--6%h40l~!O*9A}k1+h9!nTjUnF6%SI1=Ns){Z;44`Ljn+FZade3B`lB?~L&H
z=^PD6ujIslOptWtMB9^+U)@61rYSob(kt?kTqZno3R9?O5J^>*UQ^+gSvB1xq=v!{
zvjq1R5l=MjncdVSbro)A_S5Px%#6bv-)+p^e|(BNtKY{Uyqj9b<{890fI(%-e=kcQ
z9nwlBnZ-Y?#u2$e_?Lx172g+gNau02X^vnnbw1OOf@(hJZRTA-7QH>$%v?jvdiuOB
z<(tma!~}3Fro#>pT22>sc-=rXP9x^INQ`K&EW#gZ)^}{5z~R1J7o@?hg&cy5C@+WX
zmMw?JVOBv<{NXF4cMcF%<3~FkZw1AQDA&+e^_saSDtL;vJ=N}BNT63y`QR88kv63`
zyz|u%uVcJ;^1u6rr&N2>ix@!p6xEU?Mc|<9&F=Z}mBL@bMp=}S(<A&?QmH`(W(jCF
zF2h1tjS9KasX+QHfX^DUqps@r$$j7f0}UHy7Tyk3=H<F9yyw|<Zlw5)$a)420HWDB
z=1<J8;gkwjHuX6GdOc@I<_yD;g<$roCX!8&Sx=##^k+<g(iV56zOG`TvWpRNNI2n3
zXiccbF9W$cNXT`l4Mm%c-2f{zjChrChotei!^uhW=S%M%RrrHo?CzSokY@udl7UnO
z^j`bp#aKBuZ*R8@1y(Tr^$Q`1ZinwE=RJ!42AA9SQsDz{t$vLn<xL0Wt8@`)2n3L#
zrOWUV{Mm0Fcb0T|{?;vlP4?e)ndIsnt^bx$;)mx;IvpLojQKm??vSn>yP((UCcwgL
zB=z$5gcd$27<SrBhzHMiEM3PJq1zCZa$D)q+hVQ5F0Xfd=n{8!x9ecsQO^Jnj=}<h
zk%Dt}fq&s>0O!j&0BDY0%e&G8;GZQ%MqXIgx_$wKhatrkl0TcdT6B91{QXDxiFb`?
z{Oj@5rjP6Gl2jZ#-J<Ws{me*zM|p2#33HJ4L`-{n%(;%SgSJXSeZc=G6Zq)vDTYwf
z2e+-#(;#RKF-s*DV6^0mY#1PA1t8zQw-F@-{-Y`%5HlqM^ioo!>gSWXKn>-q8DIN6
z5jp20E>ZJRtMFC&O=Ssq9ALC=j&h}k<a+FNM%19WqW$hdJ?h^-jWOS31SJt`-F*D?
z!*2Z1+brc$%(*<%khX|s%w^iSK99S>)!3s0O6W*DKEAChMEGpfaV`Q9%5Gu2pl0mx
z;}Yz{#bK6hmOx<%BXZP6_gugi2vJ!MtElW!Tipwv7YD?}W7-fa)$)&x(!HyIIJynd
z5l-4$WsRH$7$!#RbEC$P<mzXom%FN<&$!u3iyoD4rs9WTA(TSV#@}s3y>vb-#a2<L
zcxevTP!CFLBWmI{X?4QXT+aKXF;dy%CpGaq$|2oo{p(YqCAG96aNB{#b=`QW`0Ad>
z?!0+TbD8$SfA;+AH_Dr{wCp#xc~Qp+TE|au!*tXR&5Yi!bohp$Y3;h{Jh#K%0G&tv
zKU~8PGJ1Poa#0&YbB4E%{hwPU3fo%@FKX0?DnT~r{7++0iy(I2PJRFb2X;_G?e9<6
zsiD%7{z1Y)IJ#<!F1B3->h8&tXw-42Tg3f~-%;rZjvu~k@MGen$U#B|nrRs!hkQ9N
zmhP=b=^6Ciwcn?V{nq;t))5k|v8hAUY_GTLS)pj(vBIq_X-5@WD%EKwE$8Q9D-E%d
zFO7!u;FNyu`*+pITwlwqMKPboA~=lPt&(-cGDkh>IdbtO027<r_;V_dUzvQ$Tw~JH
zrk||9Tf}fw6gFIt=<9fBIHi5M)106V{N%SZiSU5>@@7eqT^H1(61Y3C&eoMH70sxw
z`uhM>EFl=;^%$iBYd;xARDeHE?Ega#uErypBzPQ++IBX%qBNAS&Qoxv#))+uAiuY7
zi;H`%u?0a44S=Gemr28i{n_w~1Lsf{_+4*QBQzShIO=%|PjZiNm)D!$b(W2PLH7Un
zhOX&gaKc~qlRl3W{L}r!v+08=m1_)0p}#4}-`*~e)qY-#WXx(UitSrKHU9gjgK+(t
z7D&a>s7dA=2woXA-bc%F`tjCb79xD?cFU0)N&jTcxK-J7y)f2n`zaiHU}BfeNz9QN
zoX<U;3pqh+X8T(r)s}y^vC)&jGPl=6^)Jg`fPpzV-Han|6J?Vya`*__vVtDH^!*&>
zI>1WSj2ztM{|V2Oj;q+M;dQ`WKF^p0wLAV-?d}3lG@n&coD^AdM!DRh9G>%u;|_Wr
z*UwKF$qD7?G@ofG`4?ny>Hj=F>R1kFLXU0>E?|_p7MEo8Vbt@eRY4_EfjDb@+rnkU
zbo$eY=mBuaEFs|F9sGy#q7dHt)}z}yYmRTufxxoEG%`y#XsA2|(EClS`;i#RYz#d$
zuY3!FhtcyqCEWQ0c>TIFXzjXl{c(?Amluw`H%p2n_OJTZrl}|vmS%4Iy5<t`yF2hN
zCZm=WSC2jm^9fgNWEVf$bt|VUKcRS3$is}Q*eS*D6eEHVQS9p#K|l{qN8Y4m)#9!6
z+;2lrf+|pCKt$0t04c3BM6=9Ol;WBXaNO^6((Iy0Q`q~X*LBKla+ww$Rr|SB{u$lI
zU7B!)@jli`I;`XWLb8dp?qfYDY>h%tn$G2C*H}_+LGM)|YoaEr?=Bz(4y*ILZeW}4
z_Y=<H_0wC9cz|KYH{8Y_i>4vz3NCSb<AHM~g<cdwnQXU9G0<`W)U}S771e)|!gD#i
za;KZ~r2N$*C=E3&QQu#f*Jqx%OOh9I9A|#?JZT6Pg|&<m$1$uyD8Js1?9*)5GZ2wp
zT5e;a-h7r`gKK8i)Dt-Eb#?KWOZ)Jq*R2caLrNZ$jU$*D%gD=xM`Nf5u=eV19xxxp
zUS#7J1>(Mji81JUKOU*qan)USwoBUpqOYP_D7q|DldZO1B`W7$$hFWcgiR$@A;aS1
z@jMMDsCh2PwYRTQ9BMnAST2X|!qoJ@v?!yE+}7gD6Ut02GrOz%i7Raso2LoTq^_zV
zTCN-lU9NsVfmFGuiB+fvXFKjGilQJ|W{1FY4QWm3Yy(UC{@L*JdzK_c;X#o+ew^m-
z2her)2m(N!rlh!@z(*8&Pp8Sxh3Dao1b#h-t{A_ddhT{p3%?aaTwpu-fbDZScF*zz
zAR~DTG(Nzw(bao82x*V@oKcoqJ&r)Z+9K?<KnuK~I~W(}7w|z;5GdU<jKoj_x~yJG
zOOkIWNURVFT@K>gJ>RWmXV#)(9L+gd_VAGsYkJ>yQ1h%l(lJAW?JEPA(Lh!b%eqK^
z8Xt7l>+$V4AQ%Apnmx<eiI!!W)-%GM9-tqR$&++(#@=`z$Lt)VBHvwh2x`6D1WBLd
z3h4MOF)}&cru3z`5xv2F0cG~k%I6#aT;of~3P3^1uqyy;#^aX>O<>;iwTC$ciOWkL
z2@kYRZ~SEfwP3aYdUp3i(CT>uuPrX2Ve(ou%R-1aeE74^RGV8x?!%v-35Ajj6FcV@
zW<(NEX(GExPt_&VU^+MU>U(`m(hVG%YzL#ED8gwKwnt5<O7x(L>$(7#(yq*vltZ)O
zw~_9)G-1dA#BJ6`ImWP^T(ty@bi66LItu<<<x39ME}t%rry}Z+zV`*#@yl9jBGTSx
z%Z1vWdnvjxJy1p^(FZuWTxrq#soF{*2>+c#O0?hgsaz4RhA>Gfhp?NOc(zTiK}js#
z1LS<#frGZgZ{Iejwp<E!b$p{DmAi1L=jk=bY8Po@$~mRK2HwfvXMhKoaem&?GR-7E
z?k<BW=fY0If%0Q@vzUdNYewmkct@~MKQIsVM~%+~5a(=~9tr_|4r2VVCX4s>>7f93
zKFchwSj=OXnq$*E?n!p6ySDq7__f-~dJMuDeaVJCaH#Wm;$!glK9bfX=^c-?$foCX
z<rkjJkftu6Qvq2%<00vt<9%BlRX#oioQh_ANy%S3smkV5#JRt^?4vF-E{m*9)330a
z2}i)A1yYowg7PI+{T6@|{jG1ceH8Z}0VU*xbC8}`1PVL<ak#<nFVBd%k_Vp5Hp{ty
zuWzUK0MLc1sa<*F=WQVw2E5VK3>&C+u7U_V4Z$bOvp?HyIDTEiItPol85xC6ndl&t
zB|LASFg;_*KWPW)BXyu1)KGsP;tp;1E23fp6<c=N;Fh#61PMw0bgJ9N6NQus;1(|k
z<>IC3<a)Os{@oOsVYThdCI=GR3hCc!7+J+1RTL_<iWnDA@L16-AprhT^k2|$o;Zuz
zCI}VAYEkB39B&hhn9_IPvec(}?oakn<AdbeeMU;Fd%7MQ)%6}x^ob5q@bT=Tx8GaA
zGpbUKWHuCo(eEqBZ7xbxv?-l8^&Ul`tV(;9E4%h(`SYPq6s}J|ha37ge&!1cuU3W!
zg)R=(I*m(#|C}i31yYg*7`w5?kWLn$cBcHU851!#=4V*t>Is^`zddVTVUps&oe@k}
zKMk?+Dg1L<gD|XDK@e+3POm6zZd-X?M6njGU{NwI_BuK*{OpfJF^sHbz&OK8qrk%u
zGYw!~fJwaq00_&lE((Vu&tbWuG>&oMrH+VF`;%PnPGuFD@=#j`aLRZf;2@I9B`9r;
z*)?mK8moT&(-Q;I4A<CA<EZT^jVPKnkdB~2T6Q#`l1&p26uC`MrSMVT|MRrE&1*qW
zI^C>)W9>arJe#8H#<j!K>lz4o^Xk2-J6sz@pg0Qquzrr-e?Fk*6NICgXfiXxhYiH3
zuY7|%0f4+=ua^-I>T3bp3Hd$f#8TE7?s4<znQ^XJRviG)c=GZLfY(sisAo_Yin@QQ
zX}LIhe*S$69lvaaXDr?*_@!6J5uZ?y$CtZtwX3O}@z6?<A&s8^BmUz9!KK3^owkzi
zp@Q1qpbA`t8zjuQ8EBED_bh+By*I|{z+>Bt&K+LCc?`sW(l!Pi*0*;wjgeypERMp>
zKpam~(6{4{hltP9SQ(|nexrTwQfqcCYM`zxkDmy%hnuGz%UB1F)1O;3P^}w(&w(RB
zH~o`QAZ*rXy&&QH=NGn-B(fda;^lBh<ad<!=Gu@}p8pXTlHApuNpdr<5m)7qqx<`n
zD3yKCAr07+>#zcGe5!LAn1{nZ(|&Om5vMdA*5`HpbRoJ93Je~DR15xdJU7|s;dpcE
zktqNM!cBN`8WZ2gM5OFcDR!A{|2#LF*1A4Obzum|8WnZ)HKJ#&)`oveGzf5{i*Fj{
z-CNnI6%aU)1x;fbS)<Mqo@9B(kI*9$U<>@wH&kBi_IT48uY2GM2xr@~Akd7c&T|-r
z+(#eT>W%*YL|GZ$3INJvU>fa(fxLg)Kb*KaQm0waBTD4r&x3i#O}#P<povmZ(hhzB
zU1khxJU5(o>5>$#6O5~!l6~7g$mDy+6>z2hqO?FJZE#P@DY$aHhPv(~MBHaDJ6j93
zYRiDX?iHTdc?4DU0hE@ksXiwPjy4UE#Wxzv3mdlu7m@uwJrs5eB`TNeQRWY`v^-E3
zMKNjs%u5Il>NSR4DSj=f4TVDv))}>}Tk#rx&zX&;q#IE?QNLK?)unQ%?V$iU=6@ao
zev@>iJ-de^wM9y@l4#*;lq3@{$a#B~1E(5AoMy`65JXp>SM&NArTzsNE6@G(edFqz
zss-v9#JJ0TY+;0&;tW3#2xaB+%qo`e`P11Zb%s>j-ziCWqSKIhP>S9)MV8gqv)a*o
z<(y_gvXc%5s&BgN{yj*5XyJcYIYd|V)c2y08*dVa#0jX~48XvvnXll$T}D{cdzL_E
z+({NCtHfty1{9PSnD40U5^<FDQC=v<+1>sfq{R}<Y`2Zl=%OVO0tI)`X%WPIM($4(
zbr;IA8Dg6Qmi|Z6xO6xQdP&iF#Q7lyiH%30Lw|n)bp>8_M)t%<%ui>VQYO-QFAHd=
znkmn@4Mn~Djb890qNWpdwx*sqUndvH8K`@Gy(kJKCN6|j#8nm6eQo=hECC$gr5d=8
zfQKJ0T-}jyv%8K+xlmX22~k~2h8xayLivt&FWr3_xqocOk!ezXLXf!ld1up8ZKT2s
z3EU<65I)5>n}heMrbVE^|B|8{2sBY9%M`@~sMq-5B3BME+gf!cApgH;eY%D)^+b+t
zNnz<mQ~+iJf_Vc~>MR>oRaAL#KcWai9)pfH`Ms0~k&kcWcm|VPN4{e?>7Ji+7wvC!
zFAebhMT=iuQjK;U_x{=wjt2(f!jf)4)K-_1QCYv|o@v@Z_>Ps1d%vI1QDq+O6V=+j
zfFHuyKHf39{Jjf6lKy4qKm`%6UE8SS#Zu|_h{sK>7*mxyV~U}^0Y#1NYBEouXpwts
zoE2#Mm|dQ5ISPC3c)zBUmfH%83fEHGhkKB<tN~%^DJ59~B;%AT0=jw!_Kni6OtBWK
z@BTf?+)BRZiQ6C;d~PEEb^<tjt-4;WGcYgCL~$o!ASNDLeH+X29{<9#JR^hLNXsA&
zI{+<N6{V8J)L?t!Z1*VoLBLx`qoyUA=0K??<G8*$0E>pYqegt9%-YI~wC^?oKMrxs
zNo5EKwzrF)r7%|0{(Zk(S~E)1oA!7mJO%_aMEWd5WsZskf+b+};{QIxfP|B}Tv%MH
z=8u+X#yKeDILTXBjxDFZ5AmS1-LgFpF3sqjwsqNT{5;3(0F>v<%ryi$6w83ZBSg=t
z*AoZx=Ci3pbob7gjVfGHB&Mh1h`8YP{VGZB^;oQJxUiRPK(y;hk)w?3j<BT*4rB#?
zym0gK00guQh_QdUNw$f4K-u=;sRC@zEm<QX#8W`XjLQ72N#rze?6O<>GL;j3^itbT
zuBtApnzo7k{)yk+)~D{N;_T+V<t3-KVi^YN()WBlkEH7YPqs#BfnqU_y+~QDVpw54
z??7L{-`@zR2$B}~LC)yy>5)4Z&ayI$4FF;I`}#;@bHtzn${FqT6Gy0vd)Ri$!=a~O
zBv<m?ANxOG<@<CTQCX4NX7IrR4r)Rp85d{9>j4G*TK#Lv(&#5_^8xq|DAy(PJPzuw
zrj?ycI}n-jq;)b7lo^@!d~p`#MUeuw;-@J~2T{2xz~RSx>*7dzz!9D;EVnd1Ezyc#
zp2ZIxDKf-lRF>PAWU~r{@OY)4f@31Pqf&ZopxS7r{TCnjyY4gmoU!#7bnP5NK)Ee!
zpiP%3Z<w+!A^W-_Y#?r$WGxuJQBDK&NPEH^AWFlO&F*kB^$lsx!qwKUEP!ZnhL>0l
z+lyuq=2z!P)wWlp9e@@LCk5nL<3@iXjblw?y5aOl=QvSKs_VgZY^icB>-U7(ngYeY
zmnoik{|Rc<nA}ez@P8)})i#Q0!El+JFT=su2~c}VV|sVg3spBD*iSDw9lwuX9Hg1l
zRvTjNGipG2jq9w1UDCW^y?TM{v3gA>YoaLHOI{;^0u5F_)jP`Px8E2C$NWZpe`WkO
z|8H#E%Kq?F56AbS+QOYPG0y$d0*NaG!3UnKuA@)lLDES7Or-I+jx$=8rvgn!p>gi?
zvuXYq&n1eGiDwH61|VzG&Ex*-5#9Iu^QqRB>3Hw$yjk0%h0`_J`2t$T=$?H}=y~Xe
zc*iEMQHBRV(W9G=X6rfk`dZ_3&s}=LF*ksCm(<1y^d6?*@U#rf;khK@UynMVAl#;$
zo~Q|F^T2HXse(Xz==uEN=uvz^{&bU&^B$qb)eN+0{3tpeRDQ-{sZow!e~%V{VbfdO
z1~8u4uvJ&7Zbo6`APzbdF`8T!9Pp=LwN1kUXOjE|WKZ+`E7RpLbsvL>J3firmFabB
z@>4ju_bIa!T9C0)Q{Mo=^tkb^JgO6K>Q}$!IZ0wOj^iFl+lsh~h}`AMryGl?5Pu(H
z9rIq9b2wDXr)j_INJ02?p8NbBNLPlDLwTh9%Fl|EwY27TIsL8|*pQ=X{$dvRXX{j7
z|NY8D#|s_Ufc`=*5_D2%CnQrfEMS{ag}4O39FQ%wKMe(*(z9muXUA#CW$7G`qap;h
z>HtplGiW$t<J3oXxk%XiFVLakH@Af(3vY7O^h3n|J4wVM>A#wS^(C3VPM#bjyu==~
z#0}XSaR`5};>zQw8im_~XAmX+1H6+(q?L*|T|cq{&~GlZb^iMS$ZDxS_E)X*ewGwN
z4D`H`x~i>uuW=3QE0G2yExGJHnOf>6Ad<N*eb*RgtlgC0r{+`NJ`F%$$W8m2)<J<~
zDZK^|!cL}}bb!QMeS(yz`SB8TQ_!`Mlf-5>S`XW7e&g^5S~|&dF2#K?JH^o45V#qB
z?s&`ea(p9OMAVcwMaFdnjrVi74ErA9h|w$|Ao6w!q)P!zMZo@H<m}L%Flj*fIfnTO
z%k|=32BK@>{pg0ZMk_=K?g7!pT{CeTKqj%CXXoUz+u96r;C9l^O==3ad@^9K;I`f_
zb5HMZVYiM*J_kIZ_zX90?kAYHfM6ZBbZ>vOj~?{Oup76%Xo2d{qaZeN8VEy3?oU~~
zZG0Wg1@ZXM*PcfC(bqP5Q8D8^r}0eo5+Y>N`!xCF5k=|(31~#CCt2y;>SPpB5Pbaj
zXl}cVL?fNw+))!b`x6``nxC(@I}=Dk3zw5$Go@viT071v00505jEWH93K_prv)2Kk
z_h=%ZJE@=L%t}ze=es9;wz>1Xs(uT2sFW7`{lJCb&<q<T#)h!>+@?J_{Q4Qtg?uJy
z0^rMRgheBPH^%5qYBvfM_obC#@QNKp>3>fMSt(YN8`mL}mj-!02;5z-LCna$hOFzX
z5QneRsCFS^B7Z+G$BCP#5z3Aw-e*V2CC+9wb`hpH8<3$~?0yxEm|H^4Sj*#0&*ZJn
zaBv$ZSxEj7(WtJEBqoaUIE9Xj!?GyaWI8Fg*DT%JK5_T)M|E%4AxOyf-NX}UcbL8F
zk?2|@yr_Z_AvCS>n^0#I5k?D%;@4&kBF{3`+j7LsZ{zCZ>Wb%%;@hh_yjk`jou2p8
z6|K3ZqK5<?1)IMzeO`!2wHbdJYHH#`qzR7)g7~4ThJ?$so+|lF-8W}Oc7;18{Ruwq
ziqc3|4FNSnYeE1ld!q<5(r38hnT-IcTjD_JrX9C)Lap#mJ7>;zj4bF%VWJEd0$T+F
zxmu4SXJocM-$t@8%^SJsfr2bG!3PWJlRJs}Cy+NLSecSdYcAskaTo=qn{;T|T|ah|
zNY1Df<O$t9Q6K!rT2z_ok%~I%(~nb<qk{Ak4IOw|Yi84qIw7u+p5S9d&8-j8OoO^J
z0zXg<H~?<*4d(sVJH=HA!uI&Tkh>2+lL%4uIaV+uyB}(3BBxRJLEzIMi?*iinK=N3
zr`$~GMZ3%M{Gb5oP<!ckFsV0tB<+M&9dWg3h^^tG%oPK@G1AA-VtG1xN#^W?82fK#
zTAdxWe}0x8Rg=z*$D#gsZV<o<Cpt6t9Hrv_{ycOGfZk8i>;IxMUeS6DyTgjiu1)*g
z!vnLpmdHbzk+aH=;U~mv)Hb7;>GJ{1WU!T^GIKe4CCItO7LY_tfbJTN8b+QTa9kui
z?rFemnh(=A62r3<S@b_WHY%e;>CZU*$CB(-lSvZL^%9OkT_~QcdmPGR9Cnf0Lh?I(
z9Q6|#E=qrWS0B>_1~UC^{LQcg4Oj1JW~a`<>`0Bzq8HbC%x>esI-x{q$&KJ>+oTtE
z*?Q>WXXyZ7jyJ+CG)~#CF*=hQ;YTa}zsrPQ_#jTdhi;Q5FYrx22U|bdi62kTbZ~#m
z+p@qh=Kj#%;(JuoW%8nsqQ=M{>2$X*3KgNAIpo%C4Q{e$n@BDbV!Us9-*$!0ZCr`U
z2)+NYV;GQe|AClFA&HM(*UU9?N#OSrXzFRjnlmkYyG-0N%{f1AlCh$e4$s*QMI$ir
z-_%y)&DXtnFlR)P(p%3!Me)jAIE8hs0h)Wwivus>?I;Jn!lc}%!>fCH;p1-W64d<2
z^>K2^F3RB}ncZ{C@1}54o}KxCF&eJ39HchgsQaU_JAq#AV-S+BQ*3&72N?QUE$zB}
z(geFwQGt}FSkiEtvf;-iPD+wcr$$5Aj9OxdtSF@ae^v_3A7kzkGO3o*fW{eUvN`p?
zgOoR7gye3-dv5rdF$KLwhE#2<9UPRbm0{wn@jUt+PE7LF_zamXMG5QCMQ*68^gfF}
z<!Mz_T#Asl(U(1V2#<UY2!cPSg&e|hK2>4tZlp#Q9VVbuY9C4Wwz%<aMA0XO_VT}P
z&`V6)@E}I++({RGynCn5IwsDrfbiQJ5^!zQ_I5d&eQ$vxEFoX5_MF4<RURV3r4N>+
zcuVRlN|R$d<fW_oNR@j)S5V{u7(3CB%c9$r2=;fKTMT|K9S_){d}^O=uC%XNLhv^r
zAxm+4fRIqVe6*?t1$Um86i#h5d7+hsoF(LL0F?!xshe?l!rWQ^MWnu4v|bEsDunl<
zP^IP-G>u`<ARs@vk3K_KMk2TM!+Dnwmzs|`>Es#*h1Vo+d9o<2ThvBDLpO!rGjNEy
z?P}AneGC4u)XvDvuA9*<P)(!fyu<^C%<)+f48ToIR#`pQA-hfQhu7!%itpoY(!=AC
zC;=GW`W_1PY`VJiY0h4zdV!7S&;ET&eZ+_1>S+$S!Ln6x|NN6CU)S}ld6JuMbXia&
zdAZja`a7;7-n^vG5P_&h|CawNciF~ug*%F-9hlf|8;^H1`lwYy9K?BmR~Z%|w4K$>
zQJ!Rjg=bwtvEZbA%K%?;+46`Jd*Id)W26dDA-iQh=N0{j;+Hn+757A20cM&JMP0iE
zzhA+DBQZX{=Z9u(L)bEVa?jJ81J7%|r5WdNndqviimo2l8UnU~ssZ^7FDkY)#(Hv>
zC8Gk<#H!>_Z9fRM9Q9Sr#&1XAnwISB>@mw~_wx`({l@`_0NMa6Mjgk|WIH`w*Mv;3
z1ptAaQG$q&12PDgKFubFr|+0B;BXDN4yqChUi->TvPQ}PnwG&I0Sb`8h2nQ6GOZq%
zQP`<8kw|oh8VwfW4AkfTnY#eg<-N5M1djPC64DL;SIAaH5!rAjsSJzD6j=Q@=+S6F
z0LGkslx3)02f(hro#WvH=aRbU%02h>rlKehujP)XkZXVBG9c@W?5XAV@Bn&vA_ge2
zQ#ax^XP}ZP@|ZX|#sk&jxIb1=ef`dI0riY>T*Pg9nja-)fF!-BiAn@znDmi=fpMs<
zu4`TUKF4jha3tMli-GDE<?RqS_j8vwQyxe07~!AwfQsRx&qK`7p2Hux_1%0xD?Ok3
zYy=!9i%~aW&dlyfySs8J4r*+Q3m|xZDuuZDVSVz#jlV5OL1|ndHn*|Gys2_22qjgf
zCKV5;j6B_2*9i!H#}r-2zHtarb@>F|Ep?d&=|0c*ybQW?8~Xc6(>qayS%><&de)XJ
z;AIl^yfPa_<ji%Zz58neq2!^DuNDC8^{`9%dkgseD;iQ!X>n0><M%g8>8A#DlmWZ)
zd~6g~LeAZA1W|^ac*fIt9ssMlr&<7Fk$r{FyLM)q`tMOjV(j~&VIVYDwa+nXoY=<O
zFmRWW%jO{t#Jaa02b}G2T=Xsp!oeQ0NSfVZNn}Q*A!TGHxz5DATMubGcg0eFG>c3|
zg5^zb+~5@7Nu0aufP!Zj+mqiL84tvDQ?+r~w$!I3olpdR%pd{x{g6cw{Js^F>F(!|
zCb#(H8#K-^^g~Sa^Ab6*kdXPKA>gyv9A5bIt#Kbg>ogV89>?4F@$=+n*s2G&sTbL!
z7zGz^e0phsH}$@WC-+qByb(u*uUELDb=>Lvrx{oB`6qt2(u(#nCBIw#cM@++>qBP=
zKu~wQ{l61K%g$)q;=0!+^zt}1LW&;J;1vP2y(L8yN8uWfbq;<&6VWr2|2}<MVFf1(
zxTn6l7FgP-B+-FyEm1AqNMfPuo+{_<?(w#$S0YwWfBHz=B+ie#g(KngK^m<V;7eIf
zLkU;58J%w~xm@Yu05DRuT^*zo#-!Jm{Dj1zub~fweQ9I$`v!wUNj>#l#mCm4aP7v4
z*~SBb#tW;;%FP`(RX1q<Jhx$%<ZfJMJS*e4O}mzuB{!lPSjZeIxgrGiHOd=Y6XTfm
zxDd*n|9r*i#@jWe2l4Hm<(|n8B4RNU&rS}<vp#jm#bIe%k=*w1k9dvZ4dsj>+|nh?
zCHWf-0h01B>Lj*?_#guc#FaCw3j<33oLzg=u1tQ9u2_1>`$-hjT4w$11->Ee22K=3
z#wgIPN(U7Dyq^Ki?=7I90hBirj&psV(zA5KHA=lHkmc}q-&NzL0ZxKx!n9Iv6EGXc
zq2sWII4G6@F2!aD&;t+AiX0*A=J>3PI{u=j6Ctkw?Fv7lPR;?0uPM^NWpCvN<R~qQ
z(nxpnMnEwrI|P|FfXTqTit|3CHf_yyBtmr(aYB&m<O4i)B)wUmzd-cBdE)W=TUpRC
z5!Fa4{<VeAjoTSUlmqnH&!um7O5NzXF;GjqNp0WvUEF0gy|kFa>*hJquDou61g>3e
z>0lIKUO-YKV&DK@i*PVfojFELy!NBfJn<R35BxJ@EHjX8c6#b`bK<tOPalbE0rj<L
z5-LnX^^5~JFpo#(sU(Ex1_b4Q{G0l6KdRY?1o%0hpJh3RqTuQrpdux$|6g+;B3T=>
z-nmF2jo<7!YS+Z;H71g`G@@J^;Z(B@b68PanJ8}ha}GV_!8JwRl!JuuO{-TkxUPq$
zb+R1306?5pg1F-r1Svu504TMXw@?G#;v+V*WdoR}A0kyM!+g4OTvanFiUnySC%Ldl
zg5-F8jAhoY4@m<{<^M2$TLJKO$T$vZ&iSov96Ck9%kw?QN%zgr3nReweS)B~qR`Fy
zASIl=Ii9gh8y98e-@FiO#RYy_0_hUAYVtY4x~uYtac1ug#(8~~N+&{z%0RX5XldH!
zm%mT`r%^Ixn&q_EX!JQmBXI1tgO-+|N~#axpPnazqG<;nziWSzUWF^gDShHWS^l|6
z))h}VW@$N>lFGAx%^M}hr>ol>Duyog0s<aTr=dNsOzm3vk~O5cx8Ce>;dD+xe;<Gx
zgM<G!HzFwC7=*Fww!;(CC~YE3lq6+oLVm#2Ho`8fXr8^>>JcGcJCfk+)x3r7y6}jd
zGd+|$Q0+SDWSvS*ua;f=$?a}AC6%sZ(OxE$lm4Ng>ges-)lb05pmu^#|JqrxTl#zH
zeq7;>^B4h7tDu^=FF%CTg&Ov@W2&|j+r$wSp#;3f(mrd`)pIZ+XdTahgb|ZmS3|;h
z1pLLVNNrn=XN=P$_+{c+Cc^@8Wjc4yGbZ1&H{D0_b(iA=tpjvZD)8?&z)8W;c_k0M
zp`F(I9`qL2BF5EHLYZvT^HOL4b`nss2gKN)n25_BXL(B!IHxwb&biN;(o@Av3Nvf=
z`bFmZC;PIw6?M%f$GNj}u<^T%frhxcqnQ9MIWmy4?{L-b?@`{Z;(H2nyP#lcA5RpN
zvb05)zBjIY4+f>(p7Gxcp{WMf5e4;}iQ2pC6-2$e*$q=RkI~MvRqKH2t!b>>V%q0f
zZO}_^ST&5*a2t=znegA|xpl$ONp*V^3V^XOgAsnKr|karRVr=Pr;dqvIe>2|JV%PP
zMY9%_QFX019>~aYvuW}C0mv|;aK_y3-5)a|p>8n_>9bLya+Y2RLPgm)nEpMXhTIg5
zt0?~c1`s66X%YD|=!3+b$yn`aY0+BJB$hZ<#XpgXAa>yUs-p5Joh$GE*v!LSvyelr
zmRh|mr;Uw5TGPt>tbWb%JV)uJYj|n+FN%BOa;4EhPK)C@MB;y!y~Ps|;LK%;-R~h`
z)1Os(*B>xWNb$;y1r^*a)esm~<5LpN52TIZi_;20o{PeA64S!V%0^lSmxV2iCo<UP
zh?-7xQJA+Ukw`-m)Q(2790-U0#qukG?5o~tDhLt&dDHK{011t2TOy;nzq*m)-m!gl
z3_C{*GC;Y9a-oJHS=fh_HAKe!eRONwpAgpePm99)oD89fEY;GUwN1YlAV3%2Zjh=i
zjWSeiCmmxbQc#!G_1<({^W);^3dh>AQ$#5(+#AEyrCP?37D#qnp9!COVRxWc2`Hty
zJq=o~H#aH+{Jvz3vo39Ib8|{KsISlEHgK;Q+E&2p_{Ialp^nwtu1JTdRplj@ISS(E
z-`iO7qR_YuDDDXUW2Uj|PJKx?FH}U;ZRSj8?SB5vndlc<w7M?$OhcCDz@gvSGOFvr
z<+8><yRWld(t=;L`|@uKGf&Dq7-rn2wQ-lnl;hycNNbk$8flLF3u$C**_sK557$|U
zq^P{pC|ca6h2JWZaJKhPqS%hkBNv%unuaQRdEJ1>;Wqjr{NB+V+ilZN^f~5|B{QMG
zs^_D}@pB5@&q#t?8Xv3*!bEnLu$eC4fp5Bha6>FpY#i`1aBEEiVyCcbasLPcg=>?#
z6_!v=%P6ljz>{SvS3E-m#fMN<-Ysbvh2?^4&wZZo#dp)m8pJ)1^Asnr&eGyGINLb?
zGA05}pc}C1AM_lk75#gN!2P05_kZ!=dVuGD`a!^&Mtz@}!Bm;}{VPDF(S0<_5XXT;
zpNPSo_nN8iVSk`Mf`H?qh^`wWZV+X{ey1eRFw7_j_Pcy|jVSs-q6*bj8^YyY<r$78
z1QhcP_~&POwkgQY0JrKkHY!!W^p0{a#B2`Iz-dLW7p#o$j}xya-zXOAGlfGjReDW-
zA7W?aS!J^>x)esy!Y=gUa8>4Do(<q(0LC5kj(kQ=YmHuYJcvN}1IX(KKT2akWGa>%
z9NTfff8|nDNwdZ)nSK7*!n(v23sd&FMMrjd&KaS9XyrIWSa+Z73*(hv)o2j-i%TYs
z+y4G+^t2`k%39zbNo{2xuD$)u&dXKz*1kAwspmtX7&Ix{k0E)QzvdY%Pjxwo{L`WA
zT%SG?-fHg>asgA_Ddr%#8xP7!q29B%zjYTUj34D+cxe>d=w=0@doHBE<v_Yo`=qxE
z5lDI6es|#(r1x(2Z8POBr5zYE=}qNBZ1XWc>-LMv8o|N%Ku|=X#<wmDteW)HmsEGW
z2BAAu*J?7a5kFw~CxYnHqDPF@C?e=;?KR3SfPi6z;pCk2j!GUCHPg}u2_bP_xhZv`
zdMd_D<K|TmheWQTwn`$J&dvdar}$I=arS6MQ9Z!%9#7|>`0I-%buH(7*>4B+qOuK!
zLcu`AtzW@NkyFu+J@7<6-J&apP!pXu5Ao8xNrEb}WK5r)YF~|(CC^}psu@<()E^(0
z2qn1gx!<UHs$A_k!hk3dh_4%FoTC8ekjqr>K@F=r7zN;Xt@S)rX}V@S(`e`GtMpJ(
zO~`Iq2ojg4&gb^s0~bJxVFQJ5QkT}V3v1l@+2QDYuJEKT@J-IoitBrs$o@M5=<&)=
z`xITkD-{K+#Kc311G4~SK$^dzIVw}G(1~j2N@&&ngLE%4zHHW=3bbTMT_f!_k94w-
zACP?XWh$JHENPTcW1%%evFx<?E`k6MjAopA+ILyK2NA=JKGs>Tm7=7EP=69WE7gzC
z6B9+=5)<1X<@rBYAP6!~gCN9+lcT4;p(fx!!3VcSfKH>&1DHy6CV^4c6WXeu5GdPx
zM8A(lfX*AuvIdxk0$XTXgA9!5^lLm77xcNl_ZI%kcn%r-c@V`yaj)`eOpm&9dp6N2
zwPYMgGN;*9+HG{POha$lwgM>q_TCZg3T@f`-h~JVe}$73LJnnXws5~O#8>`%ikc+T
z-A8ukl<4VoIYMi_!+{FJHwicUwn0HdQ@Jwj3sEG~o@MH~vEz{5BV%Kv9H7WxRaFn7
z$aCkJobqa4m`H7#Eie>S1&UH5auhDR=_21hZbjw#F`|q#mJr!?8u?xC4Z#uhPDqk_
zMnW3Nn&g=gLh9S;nuxh8FT+Pd@<c3@`*v_{yiP2&q+de%-Gy0E{h%QFPZb1r``qUZ
z(9=fY@$qh36u}pE8j$JUCbVYXn_u!<U7T$%J-$x3Q+wSfYkoZ5l<^^`6nvTw@B&e8
zExNTSMP6hR6)~RTtEQ8ZQfKG=VKty*o#4Wxfv@a=qB;T)GmKrpoP!!zxR{=5&F5np
zzQ{I}u__m8?0#K!K+NL_`QTUp8|jYP#tW{Guj6Al-JC~2;_1eDE$~TAT}`Y?_ssET
z(}C{vCMq0m^*PBvc#WqYy{LH*oA1+lJoqqD#Y_R5a}Q#cusv6L^}6gn0|)diB>|Pr
zVBF(=786+zGk#^xP0Kxbgw|EV6Y&Rf?53{?tXpx^o(y0|<)ux2vcrv8GD65_Iy_=C
z=jh1nP5J~Em&<?L;}BS93DT@;J2O|9vSU*3S<V4HPJGbxwthQzXypewl<?j3_*ZiH
zow72V6A!yS2cw{bf8;VxwchT{dK}OX>b<u;HtEK!Un5XFEhgnQ9>12+Uhkd#Qjwqq
zM4;V)mbgK^hsz?#r;zDsHAyIsIE4?>cUn0GRepA41geoqO_76NhFFD!bKK0rmpxn~
z)N4`BtvQ}SACk|Sxmin%5byJU*}O`pe5TKc$bCHeT}<_whuAu0b)UrCTrM|FtlGO!
zQ&xl=R$SGJE#Y`a78e5RIe^z|QFsE}H-EA!i(?O~H;uFWuSQ;EjcVRBdsr?>NpLBT
zlKw+NAd*}yh0mCO=xu)BKBoG_;c5!ES$)|||9NRk&Pt71t$f~5O}&8`>l;^W>6OYE
zPm`+le#j10=b!{6KM|f8J@NM%(e8n;{tRew-JQ$%Gik{_1rcxWF1XdruxKQgOQ}z)
z;Q&wSApwf(u-?M1M}5R({P!EIobxWvJcZ#$(_LwOgI^%g0-<J2WBxWXqR#D4#J>T*
zM@@gvbQzTEJQ0zj9be-&N2*}_PU20wFTEyN7H-m;`Ek<}f6ZK`wtKG6WjLe&WTcIb
z%J`qTOCgCon6_lxmBP5P8kP|?yXFLiisSzzF)PaJRHESk?B!5{%ieYJ1jSl>ZLFW`
z=qpY+^D_f8iY-3nm5nEW+D{#2Qkl}5jt5}pwT#0qFm|F#uLLbzw-0By|Ng!>w|K-y
zDpHyDbiMfh<T?AeUDg1@wVv|h3=d@Hk!>p`N4f|I=x+%H>c^6^Zr6|aX@yjGO2!~J
zBNZg~G<IV_!LMly6_pR2dw!3&wgiY`h?W`O-wQw8*Na1;DZhzV(Fv0jl`K6M{=UYr
zO6EzD@~*{EwLeYXiBmgC@0*U-*WiON+j<&B09kYF@YUdNcq;M%0OY9!)8ik9#HL5_
zYq4ZaDx%Awe*?YBb(Ui3@6*vKSw?mo8+koxNwtlTWzupGuf{O~bV$9qjQmsvI2`))
za_+8c%HTBbb5Lp;W>&qW&Bqz$+C|iJ4pNNDqrZn%Q9qkT2$dDwV?wqxHr}b$k830#
zrWX@aD&4f`agHNS=<AgXKJ~3LQ^>f%vT<~mqxqAeG0;^+2GqB;(VA|IQa=L);FJHM
z8kcR5mwfgVh(q>!%UW^_iPN#mCJ1UErkU)VV{AMta@I!pu7Y$&f4ulyOIWoSfKliT
z^EN$84m4={MCH{&5UM9iDq#O>&^miTTQ+Ke2&pBnBGO)a{v*d<q>!?WT2{X^Qm0yA
z9t!v$NB{pK=85Olf4VWPbTd5Wi|)^L+;MT%>#1Yfhz3<UY9}?1;Au<n0UR&oCu%1Y
z{kj<xeAzR~Ag6QAT$*joQhZgOfpe70)xKpjG{l3q`xfR-Eg8kIFmPSoXq2vnHEDmE
z<CAmkDTX1Qgkc)wci=Hf-RNf>$LU50VjRjD$<BG~?UvbouVHb=RXBLX(eY9P&5Kj8
zB(bzj-)Xbu=usJ>w0j(Vl(|2v!~a82tCuQ^<wQbbnunNBR^jzZ+&w^4OD`=CKwp1l
zaEd40@cj%sjX|}%)vKGg&-b&@L%1%@Dl+AKHte)ZGxhzHAa-Vw(V8TDv9HUK1`eDz
zK^34Zj`bA!8lK|)SZ=LJ>3u0j+;B9g{d<)0U(kC{Kvr(il@C7-&-AerZ@l=a2B~rj
zm+Rh=Se6eTgPR(-PTt<K%=pb6&9rIm=H7O>Kka0#2m%1cohj+0;HHFZ8{~Mi?!o=C
zIyF9ZZx<mJv0Msc{G)VC17bun_@7@S{^#6viyp-)PQlys^tiTmQ8RSPAq!eZosVy<
z$CjRx#{6#rp9)g9X-A!K%ak=l>Yq?eQUw%$7fxyujD!bV%}>a_0@w*7wq=~usd<u{
z8z^<W6#)GGY9=j+s5~Ij<Ur7B;WM&}6nl}zEzl^pRm}&WuESfDCOl`DqkltM??YZA
zQbwk~_g|p7gRAv_7CUuRo!(FMe9J<|MNo{(P&xV}?O8VH5M11Bdip$?C&NGx$|T}4
z{P~O<iu5CXmN(xPwCgxEBFp=L5{q}$R4jmC_%qT5qUIuUrEbQdbni~aC<%~!9@ACC
zF++NmR?{F6<YX1r&pJ3;lDqMjRu4uwjuM2^3CIGxK@F)n!??Zfy8eRx*!P(09I_)7
zSlTSjR}n-0KMWTfLW-P{LAg;gWk62B@qBujNL?}L=5WdYiVsO|E@1t{`MwYFq>MUA
zIQlaI`Rk*65aM!>yO8I-E1T4YnjA+_7NaB3{%xP#^MHCi$S&+C7k|iZcEy#*0Qo({
zgjC+O!fl?wom*OUz$$F`|ILm2QkU#0^j&szJ|ag65iQDVWJHYBD2By3%D7Sy^g~a<
zj~pkCX^K@=Sy#%)m48oS;+Al{k9d7hqkVpY2k6*uU`G3!Xxh`6ieWQ97)5zd9g!kn
zDj=LNF-BkKm|>9%?1@XOX+`9wqY1Y-1tdmDR~H{&tw&Gw4lqmh7zvDVv$fC@A`pW9
zb9P%LEK~a4mU6zr!D}wwP;^7GOm3=3U-?jNAeqF1)Q6w;l-cks?ne;>Wn^MeCIHCS
zvdyq)`hZ$a5X$U%x%O!bN3Od{<J@mN#$y<}NV&LULK{K_2S_qCwaeAxi)=A89G9I8
zLg`!^NK#UqdS)8BZbSf>>qy#(iv%RIK97nz0#ZM!XDe-KfZ@5m;bo|ae~6ek49LQ3
z#HE#o_%jjEswmOX%UVcJVWT)&W-Y4Gv}1_*DjwiZYF(E+3He=kQEsi1qDd?W0gFD}
zzrR5(il#dl1naT>o5T3rdNlI9NZGrJ1mQ%yi2d7FM(UmI?b}Y&V8&fGoq6V!7q!B{
zzoB;sQgMNMwo<v`6j>$7il|-Rz${fyzbLI)mK#s73{dF3*-dsHzont{=F2COkgtA1
zX#Gri1~}6=3d?LUoOM%?>jI!ofiW%g6b4u0Wq^Ju-eri_k#e*Ds-o@?eLf9I9FlZI
z$tpG6m0`MhhbyFStEt==Q08fEni^1u$_KQG95W3=kL1OZ1tTqPTvkmsZT0l@T!P54
zs?MhOMC!GWj(x4}ep(>F6UY^h<bYg%rs*dp)b9Nmr$<t+yf(n2Md(WVna7vWf-@F;
zh?F;qx^4=T3D9|A7u>G)P6?%elbL&Fid8(7Wt6_|G(Bf31Bp9G*>|X?zRZjz0!Wg$
z|NB?U^=oTZ5_O_)lsOZnM@uzc&oNvoU<$o$+{Fbll@};hQ}SbG&Dky8HMeq8l@Gu(
z3MDwLvW%*-G}*614tF&gXVrAr3=@T6j*iFDT#$s?J(u_<@Wh;kA4fh;e=7SF#|v3M
z#L1D%mS};L)3_{RaN;cKNLkfq!vjs43$lXCkByRn7;iBy03>_#@)UynO;rEZ^9627
z3$bc&hasBV7}&uGPtiNYLK%Bi{@;ewBJ{gmXh&t{Of3v#Pg&rvDDXniq~kli<BU;I
z8k-B|EdZY*H3`okG@2=B`a9}nz)P9-k==|O^Y<qpMwIQP5jF5Xq@)*e=nzb8IZ1q|
zuWU08zj}ry<gyzsXXiSkd5?-t)-)=9E27`u>%4FmN0Y}Cai8%kH5<iqDO<4eJ%iBy
z??db!=rFGbr}v)jvs;F|hFB_V5RF2&X0wZHyea+jmoN8DJvwhLXTIFuUBJ)7xw678
zn{LfdLZFvE^^m4>C8*171Onu?fEn6)lp8NI;o2o+2^E!p6qYCO6X@J#Jvpwco^w3u
z5X3|yLv<Tn+o<~9kOmcD%|^DJqQ=iKyVHp%X^ces+?5`C4tNm-lp$VsdNDl}A{5Wv
zX$QSN7V@3M#MW9$$-ISwa8{Z$IkqdT^*`SL*z9TNpfCuv8+=eYUi6i=Yd(DxryJ9V
zH7GZvVgW=1dN6sRbsBpK?`Uv^;8XVXJL#MtwCqg^)HGht70}TABe)~JZjF)B+5=UL
zXk`Em?PG8v>N-IB^a{_M$4B_>RJ^+II$1aP?9H}o=^0<`Z80#BUA^_Z@^Dm!{XIl3
znH@uW_74BelQ~4}^2k2wI<si>@%gHqk=KgG*d%8Z$O3h740GF>JMJQvBLyFLR5ojx
z);Og&kvgQskb0m}t-8+XB3cPjogJxdN7Gy9P_@grFrAL<tIPj+JjzYsj-!+TW;Jks
zN4(nywl~T)<Pm)i=J4D!mWpbgwv$;(BHuSWnnnO>%=#d0AQY6IlK6VAzM1mh^`2Zj
zk0*&!;PirC>NUBiR6z;bHq3q<{`-oLkR=3%|N3ZiSYW;s+&_k%N7ZMdGUuoxO5onD
z1zcI(h(f^M&r}8PFrRHO(yhy#AS20AMiPIx|ApKWCrX%Cj!fz_8P&9fJGviT2N+_M
zj}`?z&8{dxp!8iOnij~c`?f2)TXc#FD}P=iI|$F=uX)73Z5q?mzb?<5eawVxu8mOv
zonsMhdqwI`&alGha*%v}0y=nTJ?LE${L|&d$oWvUqS=}WzX}IlYEzGM*>uH1S;W=k
zA)@AVAw^UE(;ay}*0Se_bm<O8cL`@<%3E+b4kG}FBY^KHid^)aDj#WDZk~oXpC-uw
zlrV#;es-x|z9dRKoZO~cqTbWX^y#|(I!;EzkS){lGzbp$hO{2X<=W-j^gNCZ23D8l
zj+kZ<`W^zB-+JG+0AT=IO3~F()CH4V`_F+^RsaSnOIPY=_uTJOWT>3!nC#5nHEu8p
zHR)MaPDnm0!w8AF93i&hm;)^t6NQkuhaqPT_h#*-$>;tQ7q4)dQ8%t~jk|0`KsZ~N
zCTxgCr@5kt%EP&TY8W_E*_3@dE^g5OPU5W;y3<o0RB<SQq$C5v+x{n!_<fBN>GvVk
z(&{}ymplb!Wx{C}w4O`p*X&hs_smJN3)RnQS&Nz=l>jKp#!>YhIHH@9XVPy?a^v!m
zmRmX^IV6KErzGGDp!zmC4A-BTCGH+1-`Vx3%;i>B7l<<s&d4%i7BkX^SWsF;@kLD|
z6;wygaZ6X1+M?H)ql}O2IPPzKeuRGX<~IV;&QJAqBJcf&>N@_9yBy&o0SwXjOq)SE
zich`WbFwF+5%}p8YFN_2xV^*`y&j#{+i#JRNR=m)sekc-8#jf~pK2PiMA7je=Noz$
zj{=I6am>iHb-d^&F|>B@<Wne&M6%M`&R?;U5oH+sGtf8m5f~gwSKW}L%2@nIw86FI
zF)?tz&G^i=0tNiKrj=1sjfCIdPrxb1?KCLuXH)#HGwvIidO9ySPgAwuKgF*>gf>Vu
zBI>5sdd{?Q*J2ihd&=cW-z+?A>qNnM>p#uV5=!k+zXjwHk22~JuUBiw5LseeDYR$c
z(<6?q23fUmL?Vr{R7X7C<b|1W`kGK__Fk6@0qPt8st+g8qE^~@nA8>)t#>6VJ0^+G
z!fr?2BjynN!c|q%j5|Ao{76%)k#4Nx0g}q?OAb<tvx~yv_b4CK)A89PB-9f@S1bTf
z8OK}37c?+9hLhzkUi1(fhv~=3AL)8jjjWkuRdnJ{En9e&<8GAVmK(V=<kABQTxc)f
z4^Rci!1UIAt~l`0Q_ZLh-OvPvI&lY^f6_MxXvsXpvga71JsaRe%S`<i`V9Xz{L<!@
zgjs{A0Ae-g=iYa@d7%Repf0!H1Z1JQM}q%*67!~Ti8#ZRy?4>-y1;dair&B4nVz7g
zVrh|LDMBm<k~{UooZmIpf5vldp~kcl0vB+2ihWK)CXZF)1Ehpe9-q3Wd`Gq9|5Pjg
zv)``_=eqvUaYQZ51;F1oKyB`;S;zryS-FYIGOksu-^R4ZE85SNlq-m1{5?p8$FB(U
zY~UW?zUuJ++m&9D>zoVql%Z7BL$fSV!)OIi+v}wyHySy<G9rnH*~tj}oKUuZ>*<+X
zh1NdJ`ReD378${hauk0Nil5ZP{XM4DQAt<L5=AY|-nei?aNAol<AI(K%eOS9hrb6G
z>+4{M%qBZUh0OeGJ<~=Q^fvsRHDraD^q^`ZS^6jsG5u^{P4&J52|Dd9e-$Kw_35S6
zOkcU*4;&dt)>>gU`n1Uif+H_{8O?;LsMJn+uA&GC!E6uUMa4UxK3=B~k~WKuydF!O
z^?t2aYsQJ<+XDr?DayvF*5tlW-9AmI_aU~urol*I0SMmzsiG|2In~9fZlRo(-hbOD
z)6I?{BHmfgF?8LN>v!`TX=A?Dcw{>ym`)b5QQcWOMZU08Gd~oHz+WKb0&3?5v!qxD
zow&s#384qMQQrlWdN_wN<p}@^cNlkB3ONC{$O=XpoRWOJ^Kw{6xHzcYD-we-o@1Lc
zN;j|3mAriH{~EDFe}dtC|Hs7h;CIa`YMOXn3E5Gnwuakyr5(s#imSsA7zzh$GGpl{
zoVfHF%AGe*USBdN_uNgra4R*(Wv)9nPJ(k<H4S%tKl&r?1wGe{NiY@fo_Z}!;BjBH
zxJ{n;ic<d9<PXrasT+YikX>KoN1+-utt=P%K)ZjE<+TSBm4BP#RTTbF5QXsBpkSGV
zvP}XW#Y=~?1ByrrlKc%6X?<6%o`=#uJ~s2reO~K{az{gQ6u!@j31zCT-nsWdi12#`
z)Xr;WNOKVb>RX5cG;pX4HBPMA(Fy(ck|SXIF#%=b0<Fi52O_F@fAo3oaK5xh$i{C7
zhTur6tuUU+;aPL0u9rY|EBh$`0LHi$j3Mbb{<v5EBSoE?r`|bUeWb^yUO<t@8?+AC
zv)y@ips1bZ)+7!lCi*7-p3u#QTi}0x!sa>5k9p=7Y7brdmh5Yj#Nu0P&e{Wy-fJlF
z$tW~jSS=}%XrA{<o<m(2Zv?+wPcytd7P@`qplxBV?~!{8zmG@KOV>O^`riGsEk}Iz
zu4uU}+>AJ%=l5QV%z48CY1GWCqGAlZ6{?o5rzu={3{G<V{WjY~snpOPK>%-n6`XEB
zBoY*#KTyF%tJZNF75+a_vEpc;^YNLEyRD~mxrZx&+qUpzBWpfsH)P=W*{E9Ns7TO1
zlj3Hk0fDD>P#-_IA87Ea;sF2>0Q3VuF`<(0wha_fOv!j)l)-bSyZe=UYWa;X+^WfJ
zkxbn9;nFjx@5oIWsTPm>n4jnhcgl`Yit-sjIZF4u-CXFStS8@Y1M`UJ8AYUrHKuL&
zjr~5^_UHgmG;{v+v2XjQbsg}(8);hHCPd5UKtP9j-43jW);BUlTBP(Q!wy7DN0gA<
zgAmRYW=*9jaRTm3hXsX6OeQ9lMs)<)Jx9QbWjp-=tE`#i`{5h|3>l&;r(-KVLsI7u
zbF_FqM^}_Ym*meyawDg)SInyjt-DYZ^|+73P@8}s;zWUh3Yo<K&6C`Ebl%o)^&fAX
zvFY0!pTz>gMKon!q{d;FK2kzyKzA(_m1Cpcw`>=peCpm3o>BAoH&HAzI$ABLhsbsH
z^Q2_}UJ8DqNo`c4l???~86H2B>pI9ml8?{#reB-tdzsQMh+=Zqkjc`}6VC<|y^fT=
z^g`^`H*UGo@TTNf=C*KZG|c<Gq_=yx^I5~x3*=*kDwhe@r64NlMOo(?DNny+M%hkZ
z{@zA+1O9*6U_>V5<Xf*RqtvBo(eE1+e4ArCn)@afgf$L~6euX9UgJb*9_Dk(Kw*&#
ztqgH+o*~7zCoSzmvFx->*wV#`NcAlle30oH_dl=7oBRDVWhp#&pCoB>6-Ul+^N`cI
z)+II5jdN(A*%4#>{3rCZ`yQqpNR<LNr8b>(#U5I99Tm(;RYrN&<#B^qL%HolTp_6l
z!dNY6zwy=U9B<MU0<G)KuJ4Mp<CVcRS!c)-8eo(&!jjTA75tmtEY4s0q;A>fy(mnZ
z*Z82J#K3bD#gg0)eKG#O|Np;a5M1ZhuzXi;J=5G-9fxrmVy9HVn<4^c(9t)tbdV!Q
zG1<BGo#NY!4~<qDAvL2RkhoZ|WyIYhw^Q}%_eBAVqV*x2(_8ru<FbmfSR@~~w1H|(
zOP9HTx?b4lDBigDWFlLo64u+qz`u+_L(gtgqrAJsJv@YE1tkZL>3ltKWRu#Prefe3
zBBbwsCIOQcB7Ywu{`=Nn8jf`3(02;8r>|Ms2nChq4%Xmy-nx@?pc8<^a9YL>!M5R+
z{7aFjozCCT80n?z_uF3YiQCz_8$|2(M;^zCq$Abe54areJ|ctz;F$aK762}uoz)n~
zB-L<wayp4x+rOXSk-?^JaBnsvrzq&=%2Q_Q&qMCjk+Olm@oxPMT-`DLvpJ+OlqHLn
zFdBXLe$N0Q$n~IYf`H<IZsL25>ogObNdy{szXmrlqSMV?N|Lv_-wc1pkW2-9TIHA^
zNO~ZBT{EvkY^gahxCJb%RBSeQ^K$+yjYFV!T)&UfkoWfpjN#-AN8M<jQP8P|H$5)E
zEm|xoM0z(1SeuvrHa0~fy#e3IaMkCVn%+V{5s$AVco-!Kp2#vH1jW<FN`OFI1J#Xo
zgS@%^TeCn>wP!Ozf~`)UUdJip+@sRg%qoY79|UL2Iq;gyN)PAi_ibt-10vRcmX2eY
z*-5;LEh52KAAyR(AjxC;iKFMC`%%+*0G(%d>43hC2>&K%zd{B<Z1B{?Q{SMheZ8bF
zq+j+Rt$ABQaV@hDe8)I`CF=h^p0mav?eCd!?XM}`@S@YYBBDnF@Y6M?2PwKzS?u=~
zLSb0_`vCz_qC9bPzV)&-Xdjot<kFXHs8VY+3%4P!<h;0oW}LcHwW5bRwBp$R2z>N0
zGX(nC%Stkl3OE#L>b0gqZ=@)53e?6a+r)y?PKk#H$3{rwBXL^~f`ov{n*)nO(_Ws1
z28Hqg>(10P9VHiEsXg{P=s(eIlUS(b0(d1<hq!t_x-WSbS1H0{R<-1FF%<sb5Ou>-
zIm*b@Tk8O#yj@St;+#;IGt{h-H&wNtrqtrTp_Vc{0Nq8V+d#HwE!*VJ<s$J5Q4$f1
z-U})o?6Shsa*kmg3R?gDfZk~?EFt4EQMRlP5}jk8m-H^J{Fq<gx3CZ?Z~AAU*XGCk
zJ&zQ77QT&dJ?AluKW&>_6O@2*53Zb^5}e{fe5PG@A&ooJmn3~Y1<`H+e#dFm+A=ts
z)Q^>SG}8j$F?YeYT(>an2(N41T7-Y$3)J>}icuZ*WY*i}MfLY2H_CA+HnoaD*dx82
zB~IY`Zy@(4q-D;G<+P8@%~4%@rGDD8n@0Xfh);$Xm11swy)DJr-H1A@1N7i<3(Jr_
z4)4qYJ|IDi@|cc4X;eLG!6DmaKBZz;1GU`#9_5o`c#K<`f_4{mBct-FNb<ivg&LO8
zRdKf>=gDIV5x+<Ogr3Q$7v@)Y=N1cfaXRLCVh@f(&gt}JO1`ycw1@<R++u75H~!;V
zUSe@AtdFheS{?QEvyVeH?VRCup%f|WIpiLokyC>vMgg71Hvp$m&CZ6)5gpY_pN0>f
zGKvG;pDq!_lhEgIhUlSU?IeQ>kGkCpo>$Wg__4Q2rmz&3^qw)qX)@C8qlf!I%I!zd
zqf-G<7<MSEfQk*DW!JOn{}{LP<f4}hy=%Q!8TPC>Bl&)|GYV*UpIZV|6m)v0p(iq~
zkcRQBkh`pg0ARzj#Gs_%{O}ypq}S4uaSCV7WTpg_YNJ;=4GD0mf5>4YA6%C77D30P
z7tCLrxWhzMB?GU;If9Nzv>^k=mQ#Wg=Yunxo`fs1|7oMv=s(vPC%d~Kbt7Ur&7{rD
zE|#&b>;Q203qVh6&$Wh_c^;2p)27&r84gg~l!r(G{dA^oFGmCeFC`gW(~nguzNj*&
zm;U<(zOq&OasBG2dm#Z7)FyWrI?7C`{bQde2H`ujH!F}I-kxwxJj(20mQ5oys)u_9
zvIBQk??n|<AbI&`_UwDI^6%ZD`0Y~q;(;b#wCT4?F#v#w3~?UFd{*kXj+&pU80xd*
zqL#FD+2blnP1jeiA)Ad|4|M92>>&=yHD6sja|}p#*55y!!L@7(4$2z&7M=tE?WA=`
zLpI&`6~ed$sE_t2Hwu5ABE#Q||EYc6!o^GI?kT56)YzsU6@5!(%6+>%;5KT@tUhvD
zM<{v@(Pmd?++FHT=ifezAEcsx>c(;bD`bihP*5e~OZuBwI~is4j!ZT_^Qwm2>Eg4{
zL(1@GT7+au^Rw`fYG3EWtfHxgleOpB&k`M|zZeO@xWA@Z;fvHOemU-$g==y-P^j1F
zEa4EO*HS}eoW@6M3Lvl4e-cKgaqaW(2XJ)|WrVbWC~-7&W;(^6KGL(Rz_ZRq=?VC#
zX6GIymewZaV-MpH#AJ3maHQ5YYF9nQI*$B}J^W8OO8tbC*r1k}h=7oTSw3GB&|goh
zVO_vh&Aj#z=f9P=BiQrFhSxM_Mcn+KFd9Oy7NDntH4P<x-)}Cri=pr*1Y4hEe!V<`
zeEevR?NJa9q;q>+#2YcIT?2(@mehvwjM8ozXeO?+$PQziYwc~;7)Y~OkMdFhg65~e
zjfd7#6=}P=dW=8M&~Fdr&@@KaWp`7SLM!~_MbQ)KCl*}Gxy_WIdwd5c<0gFk3R|~8
zA|14x@LBM*XIVyraF&8AEE)ocpLuv~=2+ZV`CaxieW#bA2`CkDT^bOM5<2NKL0=@e
zh{$d}0Y_<>)vkk5CX2-UDb%vp%VnouMqE*0s&vOPlhX`DfST#~(_Zce>Eb(bye(tL
zfN+E_YqTUbMGzjh>j3q7O$wp~aEL<TkE2BI4Sju6$FYrn*JYq6_(bKpYMxKH?d;V|
z$rCrqoGisH74VU%bz8XQm7aU;iFlsH?hK<`&RIyqObYAjw}7agxHd1DDTZ-PJOB<m
zE8f@S&+C3@2uO@KRC$Pgln}1*X2tPJw?54=x7S>nl2i9VU>0jPRJHhbvr#pny8qip
zrR*aRgcfpKMDXsP>dLCcEY!r%X&&-;O?B6<r$sJy>P!cz=_+xtr6~fg7xAnB7<S`!
z9nyfGPLL-Q7~!WWzP-PRO4btjkrlQ!sL75-hOZ6e@C}Bsiz@WpsqWeI<<aLyfA22b
zr}#n|K&Us%=Rlt+JdQm=d}I$q_Y+6{=M6`BAM)}3UZ#pf;P+cPu5%yVjPtndaSK98
zzE@=X{}}qY+@H*H=Gu@}ySfXHE%e9uxrf%zW&mC~1tjFKwo9*AJt7H6$?_Ju^Q#Br
zPn&{^|DtlQ_`XSRYW^tsL+V;T@rr&M0)K8JD*PycJ7-EuM{U|warn>k2;>6QX=aTf
zpGCK2=@4wj6nz)^rpAwez(b9cYMw!9b36BB_V1*>n)(31s`fs9yG$W-tN4{jFq5|H
z%nP?)eE^^#zO?|L$j4m`DF|_N?<xD~J0hr7E%b~F+-`X-+fMe7@t>pmgDcWYTXW#%
zRIPG!SDJ6=hhl(!eSZ%U_b6KtvgqD^-;W=qAAl84TL$4MmTHDHosTKYcz2vep;}E#
z!d=|&HnPH;(M07*N4N*40RTMrMb%qa`Qkb}6Ti%g$JC8Jc<*G>0Yw$6$e^RLuk&od
z@|#|NRzsg8z>}n2Xeg_4Tpt=j?Ff3$$-tkm44)+~f8*PPB#j*Zv+g6|x#ACtnnmFQ
zHIA4e;-F0_x)Sce__T%7So{tm&~tE3lUX|MF{RiZl-&NdrPmlDcLIt~$57J(@tH~2
z;)daUd{=51cdg61d^}u<{~e@}2dW1{79B2e&G7dO5*u$?N^(0ysr@9;D-Col#3{X=
z@C;zer5&`!iNM<RF~1Oy&K%pUJ>OPOk!hc!7g7s)hVQs~Al?0TlXKbdn#OPINdA?|
zWAG8DX?U)230X9ul3=sr?@vH&3aBYF4CFa?wVno`FD}3nZYw}b(VT;rDt@KZ&d5WQ
z=hhN}c*XAZ))D)5&i(I6JaGb_$^c-cdk~`a*78WB`TSOTa4)7&vmgkYW&T@W!@1HG
zOQu~#6}4=V`-5G)P9^2_P#QHwNRm^xakvnoAk~0}af4}%1JI+`70ax395<&wP&d@*
zrH@qC!NoGS@gnZJ_YFKfFFw+;tVVDZgv3~5PSFsf_z1%z<*wan0jAxeQJ3!_oL`)y
z4Mb)82Ql&S{(dFC4zjgYL1f?DJ$i#1nKH6wY>XdyrLZfwc{qr=_^$NWOmC1zu_&9`
z&cKD1g_VmWdCq5v06{h%S-U#dZ}#y`dcWsf8Aa8&IO^6oF;l|wDS{3}$7JgT9M4&0
z(sg}4^J)@Drhku<DbJ?SQaAkr(ll-nhI<8&jX{I$SjZF>py_d9PcXwex2Y^Esm=XJ
zL0TFH@c(DS_j}2m3%jN*%>B9kS`4Iy0an(}YsAU&uTcj0;tX}$0XX4^32oWO7Q5Et
zMABHH%TGY*y{px#E=;XOfE-u(_eT-b1JsNmB1&T{ig%g`hsOae(nE3koN=?3L2xeO
zwaD-uPs1<Mn8vq86p}$uo{QEInx=?q#XZYyc4z>14Z935)xVx<2m$}X)?FN6d|Uw;
znVwXS4JaI2qkI<iyWnSvdi|ZKWGq=d8#DDB4fh*JI5JjA`b>WNkAMAkA!Qj{<C7ez
zO@HHoqhZzau-Vid`50awYP+mQ;OoE}&FHr8%5kGGt5E%<tgE*1yGqjcUe%RSP05og
z0FIa5wc{KqeD<O!&iAIiI|A|*Q+y+)(gxuHIn)kbTkLZAJa@5DOtj6IhR8Cwy6^@R
z%Z)ldzGL{&XN~eKcF9pOY#@}Q4f$E9kZ$+AG^Ofi#`@1^$Waj8D!UNIMWL#Uf(H_G
zN7K;(!ApCh&C4xw(*mJO-;gm8x9QsXs3ha?#$DgUlb#A@d;Q*p)cRIxM?kgyu^CSL
zr{MqlfKw@)W*04S()y!nrqRc5#r}Vn2_f6}^zaMrb2GB*iCxb4Z)X@!;e!*yMhH5u
z_mB9xiYa|VU9EeupHB`*H60z1P-=!L8-)0`9Hn^8c)+*z>~BWTfN>gRt>LLD_Vjf+
z+kvJDLn>stFDi3zr|IkXMS~8|zkiDFf4w1252QYy{5#4>f9rD_FY4(ml&VVZcs5ws
zg*yOT-uin?E$GJdM8e-ixB<Q6R%Em4ITzJ5o{?dzC3LTe)2ps^q^Fwt^7QZi`x>d`
zG+*7wNx^O!Xx2(4YGFWhJfUXRo*iwHhiomEL(wrURuvFNbNhErTaVV)#qm?O+_zE!
zwb@lnq?KtL5>RN1iX`y&8E}4vf>P=-AOJ)@y@h~+zCGibK^=x=%KwY3??QYlwKR#*
z9SoGZ%_k}Q%D{DwcHMPS+f9Zb_@qsDb9I?E?bgQA3+1MnL1`4PYvBoUWIue-HiEOV
zT`vVkYTT+$M$rSsXqpcr6|R#`4KQ#~5Ne-pJHqEO1p16hGau=paLJqUASxmie7hv?
zXogCGG*d4C5l}ErE>rfW>%4H0nNb=`QMme=(Ud$6F);-Z*mo;X=}G?t<V{3PVK1JG
z`pd5TayMZM6E)+q?ybA~q0_$VKKI&<fMNY8N5PMDue@%gb!oP6EjPc9=Z=C;MvKzn
zptKhc5@47=`Y4A=n#oh5s{6*a%;5UYin2;z9$xkIn#h93h8QA^>3l9?m$BTgxWcR|
ze(@mV?+v|)L2>`E{z05W{-qH)4kuIH==YeoJ)gch&8eohA4d=LYvr;kkST(>%vfdt
zqSq5oKq9;)F^)r$Im;RPx-USN=}8Qu%EU|2Q{UO}lH{)TiFZ(qMlnu?uTeT#=Z0Rq
zUN&uaR4zaKKHlNhR<joskH>wKJ`I)QgV&_4dHjw}3_*~Ye7Dl`9r+N?T53~Dpj<7p
z9K+f1JR8A+D)Jh&t6k~pBXeg;u#PtMQV|N@GoKYjo@~yW*H|dvbf2f#F2n22Ha#3#
z7Z6BsGLjwtzJ(5``4;diEyO<$5yezPK_Muu69yQKq1=$Pm-N<02C&@Pj$=lj)0Kdd
zk=gt(49QHp)hkTY-D{^!xPp1L4!4934Y)Mel=}M<s1tIfutW4az-3xvXytt#y#Yx9
zNh<yQ0EhD0y<QsqaF^Hh0)ckR5)Up1uGy$zIu3%CG+`WjFj1d_R$UHbJ?j0*&6!;g
z+zuaRdzRMqjHBlZEVs*Z`$)Tzz-X-3TkRA|{yoG^nuMPA?L*7Ff4Zz=Ai@59279F7
zuONUEaVXEntGV@*f_oAGI8v?|9R+qEhveVOxIV8g{|A5IQ!I5HKA4i{47yD`jp7#8
zDSBk;a@+B7bpaBqzlN{Ot@w~c%>oHv?562ND2S%Z58_b!`<lV^PV{1vdcp60bJF!f
zW3($0^k+b!pAGr{pxVUom5HY-liThZ;?M*^nlOIiJtVuGcCV*`<nJW<<yO>Gnszfs
z!s4qA6zQ9#7oIu&Yy5_Q>ON{tRz4J#753ukC^w4f;)H;zv$?0Ez?Gm+cOOMce}>nT
zIBLtP<HniVTYs;>aTIsg&A4?#NYC#JaNBtkR4@LeCC}g_S_J8h-MPy}auyt$i_g`#
z1dntXh-DZSia$%UfkH|rXHf`FRE5~4rwZh>dVFSC3D59jBuP-!qO3>YICxaKW?+ev
z!_|}DTc{lK98GN7^i_W|ppGop4I8M2c;gt)k-DG&(?{7MwT>WdVO&#JoarMW8np6^
zqRQfcLN{UD#9NHduhb7VvHzy`6Huo;7*%f?WqrIbQG&GlFp}R)ZH5sw?yB*L5R8tf
zp|_TICAXzL?VApWbc|;CaT68)TLM8;ExMywF9rN%E}mIDO(SBsGbgdqr-=n+c+yJI
zs2*zD?hTPj-Il8xI+qlmINarG>(FkT6w4luIX~7|rP-h0DS#&=N~-lFJ>?m+G;N}?
zfCG=bX&I9Ema{)2$vw_aS~d-ssgEI-Dd714%Nnt&<d#3Ot$NESz;Y_J;gH0V_H)Wa
zan=ldz>&MTL~pCQ-pF!OKcVcIr@W&WBUz`$3o{LFj6d=}3B6i59wiv6aXCnxvQ*I=
zq>Ajma(FxsAk`1a6J_TPMMkD&;=n9BA}KWYmDB+odT=E4U09TllJ*1uE5f5O&+FVc
z#~J;71H6Re^f{QJGwjRO+ghk!qOqSxz0!JlQjH^~sJBSsYQDXluH`#mn%S&FGQ|&l
z{6yy%($s6@c<*KzP$0Jh@JzEofpU;m48PY%WtQ0V&hT)2NHQh@%0zxQ`wIgQWXm}q
zB&=H(p7R2LRcT0e#Oz!Rcc0dZRD_kF3XoOLr{Ktbh38w2S|)cRUROH6v43JvyVi5G
zRMg!2*7^1qqU*prf8l-sfLS3tcivN*(~N2QOx-G!Yl_UE@G@1~>Zv|+I+P|6=}*sC
zG64T8|9e<Cr)K@2^%~n1n77%{>{_=SMN*??ogiss`faE*#Zym95;(B>=|@N9c6&=s
z8m2SkU!F84aSznA((uE>yiE`55M@dFmc+7XLTma+q5A5dAXWniai2yMyUgqx{{jl4
zU2vxKMYg$kj87YW)$a;MXshn0W)bj?!?4OO_+qHhWdP7dxL1qQ;PksPgts1kq9}$w
zfG~qVRi3cx?a1|-Ie&KG{ro*4?tWWu8|3UUMt}Q_n}*$bf5F`Z3?zEpH#_`BBVtGo
z$1D?$l03!PKYJ{`opv6*&^c$PeFGsQ@B7+;sOy^Ea|P5r-ATdWS*}b=bdA(3%g<?w
z%z3?0)u<lyOi^3|&RxcRj|^!fpDIWB(3)E#Rn!~4OKwEw9;sOxNzbHgKXP9K?$vsn
zwKpK}mm87gj;&ntiVf&c?%Tls5<a7IyrcV^Wk`KOC2PJx;k;Y8@h5N*K_BHn1A^FJ
z7Y7-j8ojMJP)EI?ZOCP(GxU}zf><kZN?K@nOp~1{9qGM*St`ekqa_4;re3_Dw1HEd
zmZ2M`U1H4T-y8>V_3D)@PE4B!HF3ohSIaB|jQ{{G9SpMYM%4`n0?oAK9j)29vu(s_
z1`c?UZ-C0d-J`qv$SMn%<yl!?WFDK|b1pRGmaqvlQO~F3K{>TwE36@ZTw@4QP@#0c
z{`qav09`kxOXGr(H0Mbw-_GoGg@hMX9&rp6kNZ?@s2BD>FK?h9pUpD>j^+N&lN>Kx
zLDXy@hYuL*z2w0){=XrO#E$ZIzKi$$#IG;xNIuG4aJAK4c@F+d2BC#>+|!uPqo#Ru
z<#Up+sBGjoAO@Cu&A`h|x1Jnw@AIyvg@Q{!Wwqa=WM;fe^C*xLQT)8|^Ii)#S1;7$
z8gXT04C4CqcA+M<(93hlL(xH}bKPEc-XUtdA9#GL#`(MgE%qz(>xj!$yOx4D4fS7o
z<EECVt7L@$7gt<G-F(f$5>W-F#j08I%b17}(~KQSeDcp33{dPKG^tw+oa0!8znWms
z4e@V&naFxs((pok*K^Q<PZiZllc3>e@cWwPZoz@<PI|LAd@MIL;yn{(h43)ziZg5@
za)YX5ulCrcKx#c|Dn`B?e^;nk_^=Slwxpm)MM`;%H<UUxWp|7Qq#T|qcsLYi`g;zp
zoAg^0K-gHrYc5Ai)B=??$6lf<#uo&D+4aX*IV9IyE#qGTO2Z%}{y?7T)gs>2aPI|C
zqG*}lc@-OtXFt6rDvxi|oAn3vPHqyv8}*q!T80RmWeJIqz31tycUr%AKmUp&yu_xh
z(?<gUm~zlPMaaGJ6{SUQ+Uf0zuDXIwP@W1@?g8qs*v>JmA`}*7%Qy$v6)-@H+zg<}
z{bT}r$~aX9?a`SP(N#JPB_RUoPKZxb&U=g3yUcB+NdwL&YAR_UGlLYpnT2qJaPhVj
z1Cn7jKm~XmcR{esm>$Sn`vl=!T`mqvc^jQCW?psZ&bsD%OaTyCYoF79p*0zYh2RHX
zt5MYqNW8m0+7E79({xp?-1+o0?AZLX>~logz0;%cyIb7-Y;Ny9bC6C*ArI{uW0A62
zBtP<Z-`vPEYM$ft8R13}Xb02@$0#|hK_Muq?~u%>l&?iG@#GQbUWI-TF|FxVC@7qt
z>ji-4$=by)(aJpkOVU4ajK2{HQGEec%Lh!ZwCWu}+-B5M^6@lb+pQWoMqgHl0#pz^
zPAr;XS1%%5c+M%52(uCZw8eE*8X2yKGMnDaqFi|_?w{mTJJp;6`hehv%OJspbh_RF
zI1aT&eLhC02gWt+Wjuqp&WnkqMPIv)i8RfLLIObM<W{z!V&DSfb7i>7HSey4zY^`|
zuTZmSdE6{r758JTBfU@H^TuAUItK>_t4Immdq*i~7&Skst|hDA+mG1i{-8a&SxIN~
zkO(>qvkF&b-Tu$y4i6ydSxv=%?VqxlyR;dybQIK|D5+%N1rRc(mYi}K@Uw}fccU<L
zH|=G*^19bX7_FhQ+23YP_5N`=_Sq*Lvl}-1bVq(dZLX(}7~-iw2u)5&r3l|Njf|g4
z-VqfcGC%y*O2g?=Nclc(HM(E?hdJwA-92M)E=hXb$k;%*)$OP3G68pNlYg&3qi(4`
zaWD2qDhkMowsR7*OW)QS70Hl#SW?8N&CmMS08)y%K9Ai@HD=R`q03`_K@~;P224^>
zxo>)<%JjJT$PTrMNR1PkX9T?Q5H*isM<j!1B77-l;Eh)jm9}S$j|zEH4_cCPW{URo
zf0fx>&Ws)DR4|WpLV7O1shU}JX^_)|PTNqmc&qnZaC~og3h((ABrm<%^&1h1m=-&`
z(TBh1fT6O#aTDIM$A#8PPb4Nj(XvK$$!QJ}UfsZ#6b!OR&HB*OYHsJeMbOZ8w6C#l
z6rlC_xB7^Cp_A*~`{p+iWR5z08h@C5(;c#aA5wHQXV5tD=H+Ex6-Tet&T2*;G<}zD
z5LaeCW{dz&bG*x*M#!<55;}Mf7}uX*^gyQ5NOf&$(LEQT$t?%lqsQr5&ns!8P6wpW
z^6fPszY3+8`f#(Eyx=I6`4qJdko#9#CIb2GEG53X6stG*AmF~b@EXVgXVPhfpN(9?
z-KyVDpm$6$iG}l}ockk2-8!=7Irif56YjrgQA;(uqJUVtCjoMZJ*zp*`SpnM02M+N
zanuMho>>45J<MlXfh<&gP_OZ#i1R_jb8cbP^&g~Rz_7Qt1b~(I){-D2)lrL(S>4Wb
z5H&gqDB{zO&zXcq>_vS8qy#qhW!dzs4kTbYAqVAT5`@wbg!_zo$uI-G#;1jKJ0hMD
zr&+1Q^A=Wm2RtZUXXhPg{4H5yZT=#&`aSxJ&)_Yvv6(+T`nFC9^8Gw{4BbYgnP++Z
zo{8#wyY|`0L8(`zC`8rhYB&70HW4zqlvQ*?LMl}tiyoTg4Q4mB_M?%o&oonft``?*
z0AJGSkVck-T=t99*?v2W-*`Y~vy(YR2xn&h@lJDd)+eq<&*N)HuMx)tI8l^_DMNI%
z#w~szQd@sSjg6RT$f8JI;h#53_JLeWbsO;v$I2p_0?^y;HT(0(6@v@xzr$L0a8s}N
z#kvu2MD=sCX_-t5WO7U4Jh3Xoec!e5*rh3F5g~?sZd*T9@IUE&0PIU;SXw?VYLtdx
zm&Y?YNYtP2rnw6sI7w;!9hFLRF)d<v=0OnKPkkpMjT?oZo?L0qVvZ!MU9^C_>!qb5
z<MD|^SyMNSO&l(=NPiy?Ca}5I+oJX`UghJvrqZ2RV?f9)bT5$`-*1~A_qN?8MMHic
zfYP-d(?bc!8{8t5gOvH$)j_H^wcv!)vnXTW&23Bv=kNK$Aig6t>K=VXi7}QCqgti*
zxg`n4v)MZNJp+6dM1;?(=PXp@`W>@?GJYF!7}b;F5?WHg>)25@xLsjUDPVioOvh={
zKj7LyT0+soGw)8@LAs5Dc^=%yi9uy)b$*GFB<lH!!gOnQmbe05%zdgW`|e>#f;7#`
zK_b$b<CLZ|6G~}Hz5b#_bSncan0_M8*Y!`D4T#1M%_`zPe+yZ*=Pnz6##p4*bMG^t
zo7`4O`D2kgQ09oFS#dZ8&O8GigZ4h)0)Gsz`_nXB3q$T|EhKIoqr#tQts-wB;n2F@
zZ1jH-^KeGxWri?FOtBRU07iW>MCo#&N0WjoBFNqU(_%)1H14h?)ryoMlSzCU@`}#R
zt>LnZo(8@uSC&jb!TDV7sSJ8w_SLH#_}!bu@9!kC!(NRd=s|s7v+U#!oFar+b&&D}
zuvzN~MJ!Ku_`lD<mlmF{C^?Vw<0rX^GJ~j^&>t+1ZOeb8qBotzkK8k9Q;jqW>KU1%
zl#NfArszte#+e_(u6NvdO_ap3nD@wb8l^SbGzZDk6sJj5#8r@;G<|*T!X=q!o$l}G
zru1bqJpLPa;ctzo?O|!2fVUv8k@NRzolOrpe(gDvobi>GZ6Q?(Nd4Xs%ENI@^$vW2
z!cK_OIg~uJ)+mmFAw>ADHPEQdAe2cj<0^{^$g7J(Zk-#44_C&b?jqVnlbLS&EjvA_
zh22)w6SI?cN7fOE0@?u$8<n}r8J|sXJRyehLF;wID>MYuHOQP+Dr!+{biIvOn#}2#
zcz2pH{gY9o@{5s*s)cgWvNyeBInkBRn5d9bBO*mWoc9`i9n?{%O!xC1snn@gCy^o?
z91;AEa&mPY)7id2@FfbbxQ3H!*t#)|Oh5xD$<8%KXG91FUes#O;LW$)KIUtv(pvEA
z(NzONrePJ;UL(m}0;iFF+ebc+_~**X@Aab`7tA&aU`<%k!SHnj0B=3?TL<w%c$j!Y
zxQzcXJ?;kwN&c1o6Q<Dd0Kd9C)iX|(OE3=+_yrJ4RESrm4ZFV10A_ywvmwGMYsXAD
zVyDx^E50i|BeZ~gJc$;&(l|$AnA;ojI7;Gv<1-?p4UZ;|=gq(_=%LP((l!wZAr+xC
zKC9$j(uePgXfkjcW%<1Kwf_U|Uw4tS-i&;p!qyKlN3J?O)w9SIXao0mM4<H&l{4TJ
z;Iw*(n_I_A0LCtW0ofbJsuMze@u2p*5e4-w$YmH4K@Mt8b3y3uH{hP-4o~wl`gC>m
zUVvS17d@~wCgQpktI8=L{XQk;OZu+%%!+50Avp1_j8fVJRpeHWNF~WN&=*9DS^AMS
zEh+_mMAWEeks<=t0g;OgQ6U1+Em2@R#QgUI3vF18kYi4*{*xT<Zc=hg`+|6!(kRO$
zDO}3bnnskn3<JWzM;bwKrx&k>EB}-rQ=6xIvs}iCgqy)~kf`kP(N#Hp;^hhl@r0VD
zxeE>Gw?BIq+@r=2qGDp|xz=aJgsfDfaj;{pd~SJWhdp-p(N#fq?!f%NyUHd|>3^R=
zqWIkd+d%3-VNqL~AeN()li@u%hTe#lo!U#OPu4uu<v)v-C*ovgsb}h3h20F(Tjv(U
zeP|uUdep)!85Il;v*_~%Wd8pE+oQMonsL`JcRuPiKi#D+AP}K*1S{B;JnESA^tSLY
zfX%(m3#6M0M%pyLoz4h)&YvfgB(D}pyw+NjsNrxj#Iu7rE*RZ*?{7@cdi0?B7$5#Y
zqK@Np@k7ao^2_uO2CjKt(qce}#{<=`ak`kwW0ysLaC6PFDe!j+Ug!fm05jf?6(WMz
zKiwC=%vPI`N%Fm&G#-pXq0ZF~9TQP9t@~6K_#+HW5m6sSmHZ9F*7EgM?J=y~1%}Q&
zk`G257Zv}ZOwjK#xs~?TyW^zj;jYR8eyTX>#_oxA9?+^($K_`qsVAQORD7&(12&2W
zyC+$4@A$K_(0cO?RkKY`%c*#oLXGBj?j|z<HX*7>69%Bvd8c{Ls}!0wOLksAAYgPD
z={-7xu7k({*s6B`0JU-a<ry@p=Uk%{T@W_c<9@TT&5nvXNPuavi)K0AQN=s^`x891
zRD&o0MlNDp-9K>7U#@HYB2p&7&Fn=TP5|fgG#NOTQ<pqvF64A!15q)uZ_@&qi27up
z|H3+ojqy>6t~e!xxWBi6Kg8L&4Jf|&{AANQO7yE6l0R1inJ*x5=3A|Od@3BfN~7lj
zU-(a0_hYXmZK_G**JjL`H>&!a<Qq7;P9!ZxfwSw!kapndWgc(VnhuKZ_0R2@8@r=@
zwwA}i7k_Vo58EtW&sig?6zNgK0C7N$zjpo1n)jR>xn{34|C#aH5Ab-rGC}B<gQAbK
zDaz&YgeDXIaWAF~v=Zu#=>KPV<+_#tm_$fXstHoRiZlDNgDyi`;;v7*`KY_P_(;0?
zi0o@X^%Kn4m;;RUoK4fJ_hv0->45u?FrT8izy3E={&SG--b1)=D2f~>yXpf_&!ZT8
zG!pvM7@ehybXe2#vhdBNpea?=-#)esZ5JEM$q?v~PZ6@-9z+fsAyhXY`rJ1O<tw0a
zr`3&#iPzsFeI!4<^Ii|@W}zy|eC5bk+jg?n#W4!c4l>j*y6&ku#I*W!<wps%3^OK*
z%kB8YA`hFUM+<spJb*C8XSk2j@-%uHk)7!$@$Z4u^VX!UOaJ&QAJBH)I~%enLhT6Q
zQB?qM##rhZoE-)Ylz(@1$Ba~KMrA)UR6)b1Zv@WuQT%e}WNA+{KP#YsmD7w={dgRV
zl~CZSpWx{PQ=iTfqn|U)xSznamsV4)fVxLZK}3!lyaavU>n=0db|7lwB{c~Waq*wU
zs!~H@r6XuP$6Sl)Xp(@iWRa25RFpW^P`4r^O3<$;C5m17z1$Hva-A2QbgHJ-p(<bJ
zNrKGaTMTBg>g0lW{cO2$6Y(eXHwgL8AwK~DiM*e`0E7I-@<^V*Ly>ErDm$ZuDg7T$
zX3uC%IRocp<(aorg1u?wc+}#!t?|vl5>BjPNXC}^3<5NryY%4H?m9?o`(MOFKq%Xp
zrQ?(V*q>Y$xA~IhBi()Xzk1=0vH`3O`<zVM=eou<vr^-yr+UMw!jH(4#_HxAAo&d-
z7imO|Ld7G!I}T7qeFuqGb%kw2Np`Cgxs=0t+~ki?**P<F%Ag95xVCOeUsT%(2}c4-
zMr4>8Xht`ee;WdoGo)n#N~1#Mdx&(B$Bq4n5CDACw{)CFIma#;-UFm4jATjya&uJ|
zo-M5S$OX0DkWJya5VvWhBsh_tOq$R{e$dJ?9+=$$cAC1e(a`m6r!}Nvf3(9bb!+nz
z5F%ToHKUS@hg1PFq%GX;om+SJJy%r6^ASYgp$n@4nutO5u`GN>aL_w~Df!jvQ-VCT
zo@!K%wnNdk<-U!WHn6kSWi1F|N4g8GjY6A*zaOwrXyqp=j{Lo<-VtQe830CX80LxD
zo`WBQY0DBHmv3mipnd{UYb??~K;%h)4~8X*N6*Sl{>DHd|7p(OOun+L98vq!n`RtJ
z?{cQp=Vcv)UG01x1M;4i_QYjLcT7Aep&^b512N>e$o1FH0N3deu7F})E@n$Hb6&rs
zIgc|GgU|XTqSz*W_`QYYJ^ix&K7$Mp(IvS8Q33dVs<wlVKhjeLsLrz6{-=Myse-gb
z1NTC+ZcJZlKTnx|6i3%%L-H&U@8+@dQ$vO1HCwo@g6H;JRZ#QMi1_bMxOj@MGQ_pc
z!1H>&4ZjJ`QO21ipR%0MS!#*OheExlC*=OjnWEzWPwGb8%W0KiZwN#YZ^Chl4|;<l
z%(8td|B!UYY5sc>DQFtrU^x3x$^OwXaqQluUSNnvR5L@{vim;)U1W__J~Bx+-BzFQ
zJ6)mx^ZvdCRIa2oJg}V-$EUgllJm{7k;ArHO@=;zsOPqmfnZyMDsCU337A-=&$aN1
zW-u~I@#6Tl`ZPN_3M4&a!4JS449~Q?B08A{1QO4vL!NUlk*ld%PBZO<+ak?*x+!&Y
z7x0<^1lN;QrDLZSYU=D%PniL=i6hypG0a$gyd@Af>%f)OGuIstc@@8S5PCq(WCoT6
zC@;uk3S<=jrYQe=$;j@Z3j?CvIw)Le!usOx6cHeD>!W5!?v8A|q?!P7&)s$Fx;E&_
z^CUNB!-duBt{M2-%WhZ|BMGB1)No;=loTY&_MsgFkSO!=qH%CZQXQsdqFxIvaemhY
zaA<ZN)+-9%b)PW|H)EGEhDn?I^YQ_%1jJ`ey{El>N<z3I{j)E#&y)rtNET6&*^|SS
z(PEa>;b_Q`A%0*B*Bjn?!}+X5*gz53y<GJHm({=(>6$^gEN|dGGVVa3BJlu;2kA>w
zEJ<05@#%#IUPd!E20}p`kl{E-#7WQEaI#%{PRFeT(rS$f0{7~lbgRd|J+^iv?LDWM
zo;EG*7?0Tz^s@n#2+(9Fp?pGGo<EQ!00_^p{!~}~MCD6ywzs9&Qp|eZi1J`v_c){-
zM?IRo=~WW|>@x^z2#8rvzInImKYg8u>pl%WK-dMCmY}+DpU>5+p12DERm&r?oYdxj
zg!P}+nGl-d_3>jDO_>&IJ^Y?QU<2A5<uZS!BSJH!X!K`$0MC!buasmlt{IJK8c$Ar
zOBU(;6vy?D#+62I$X~cwYx7V14QcD=vm`Rct>Uj~q)N%-xP;gixn35oJ<4_CdkP<T
zqArShJ&}T9`2Qp`;c7=K^gLQe(f62f6|v*vrg2Yi6yW`RzqzT1V9NhYvzPLgFc%e%
z)idbS&JD6%KN3=(m6lzo$Kw@;p|u88igZIV;GVt3@Q!nMi*Xo=RCdoo(-{36lx>;;
zF)60<mQ(<$5yP!m)nJE8Hex$!z@eM6g)wSK?nWswqurM!0Wq(4SbeLxL~X}$JOZsi
zF#OL*vt~q+SSWQNJO>V{K4Mj)7G$O;K+N~$P2C7+jPhKD<BcPTtq0d`4!Y&Y?)aWu
zelqofLmXW48u5%!{Ahw>kF)0ccFu0xZ5ir)u5+c^MM;U4C`WJbXKLpLd59?Foe0za
zNo}p|C$Nt<=0emC#eUZ?hD_onrKVFcW1`MK@~(5v^gPt^IIdSzdvX_IihU&08ZYdS
zr6&?NJ9oF$Wr{xlA~q2z5Ayg;?R+}om`L;;9x08H@W0g5Wcv|ttfgzYIGk`iLh(wC
z>|U*6P&&%x@m9uAms^KopBnzJqEisPLlpjaWwSB#*a>}%cz=GSf9?X}SrHh;Tuh3Y
z?jy~7Ug|ABX*(nQUKUv-(rzoOdO#$-L4hD$|M?4a)Pz5l%J(567v8robWr%NPXl5S
ze>^$OxZEh$tYqyO2Oh#3-e=#ZhB&CQ+Ub(`{GoKbVL-I%DZTm>H)G{qxH?GW15^q6
zHzTikGhgW2hyH|57RvMcF-4hcUPJ^5`q!bnGJaq9%J?VJ8b|gH(Q67t#4!Po6m^@}
z*T{zK3-~edU&$s7o^t;TZSmJzf7dzT!~&@q(XvJ3m-3w9uk+1mSyfzblrX}OBnQ=c
z<2J5KzkcFC>Ajo|s*(Tw5h#x0ZsCoZ4T`x>E9ZqxfZ?kvS6~AK%%|5~{9VUh=QSoO
zPbsTVlkBP!i!Ue9=~*6e<2HiP*U5#Xh1YhyK)qXizybV9P0TtPDzbfzx(%u-U|=!e
zDSO>;HKi(MU-0ywNCGOrLVCl0$snBTa9N*S0{4@S1}dH1oGUAc5mf^+g^4QxNB*`~
zrXNHBZ5NHRasQ`fm;l?Hp&^vuQ2@HPgLm6k@W}_<lKR}`Je#Y=G8>S3)hVTuyEosW
zVFFu4NMO&9a*~5(Huz(%;i+m)QmD6{)s%(8`98Vk?r@``aXv@d@!_$%k>&Acv;dqN
zhm`Z*d2(DEHFQ;WYylpgZ&*Ni_gSQ<6r`3M%f*tuj4B3i@_eKqoR}Dkwu58?DpoP+
zjqE98!|7=QAw9>pLU)?`2tHA(#I3ixmhe)WT_V6O;l%0pm{7LNq5U9e9UI>Cm|~15
z9}Q^F`<#&8LM!f2&^fj*QvBE3+wv_Z<6M^LR1wCjvSSLP>RpiLYI_DaIMj7@LsMM%
z&&$)2K-~uXtjh*Kmy?{-pNj@F&A4*l8za9+_mu?V^qWZi@B1w>e#DJoP``Q@!)lh@
zWu>=9n1Fcof*sD#=~3pERFYfAR6e5twBN_H^pTDcpN7`N{gJ-pMp(<mWVnFB4QEaG
zBF%O7e$-_m>TePn@qXxZV1l!cD7~fMa}hoOCiLJlk^?IQ`ccXr%dEdsvyye|@2G^f
zxZSE=<A`(ZCkZlQD5;pXqDT3g`ah}z1zdFz-|>GN;ptIV{35ex8JQiP?Bz-H@k#1B
z@3Y5!;;pP+lQW#2aw%>uMSMC)E>rsip^o_NK1#?v0Gwvn1CVoptEFtH0~thDz%-#8
zS<Dn1qB|h8kwE~cJ^!=<4>#5HdRt~8kfj0ddknrBZJF%+c2z3i*?~Sw)5>A^emIK~
zvni364CWq*U3Iyz+%_yTYT|UpgL}d;_-rzMOgm{h>S_rw8S$@v`jT-|<x&b4ASJH0
znB6eEC}eUWgWw6apyw2ORMM@U<0hTU4Gn=cax8LP=t`WMUZ?>cr@PAYgYY=amJE_n
z-4{{rM9Ay-xAoHT+yLaF_fe_bTB0eT`MLFNz-1i!tO092^p6t_feQ=}r#Xq^lwF@Y
z%PeJ-57V+ze|i1$)I@Dqjqq1>3CUA_0x}!wBrQs^j|*wNkc;vWm7bZD%sn_U`aLF8
zn>%P0fm_puSe_k~JBXg9q2)@Z3!fxcz{7d9%8}nd-Srt#j)l_8Xxuj3zbCj@QyTYv
zTB{y+;}IqAX(w(2SaU$o8M4~deRg4el*3kRF}!uxmNv>+Yn?tk9T0x6@kBSh79l`d
z3cyWIPTF6Rn9Ky7JtUC;KwkZ^V-!Nk8#hP>9S9qD^!oQLM2hU^`6#hC@7;gK&*MzD
z-cC?L4s@0n)jS6czvqmIGd>3P17MnKf^yYRd=}f_=4y1#Pa6yvrRjj;#x4J*$A_X`
z&HM!57bH~qR|Y^H30x{SQYWPfRTB>*&@{jV)wV}`a?J^_ZfJ&`=Pv4y>`Zj-Ez^?1
zF3rn?+TBhDkR}1RKDZM9dqN8j(fW>WqH<qe4W8=u9}WDOW-JmhTcxO!ajXi6LcYqV
zB~I31dLzg6GC~%jhOdz>K8B7`yhkz;7<GYQ;zux=A!-WixTHzHroTrSrCGq|N;3xu
zm@XiC^cqq2?x!<IcwyFE$vD4VW;F%X2e7>+%=Vs1_xwHLO{$sM0oXCJe<NyAzOtF}
z=?)Vc%CrdobHRPL-5{KTB0nMB)Gx{}^$mWVBI!@36@Ubc(o+Js#T^wnjNWfsIxmzu
z>zMlur*BQc&{a!`9tTJs6QFXunteWiqycjTA0!`^HxP&Xky-?7w>AI-wdxs7Mep0w
z`00}r!!iUy3hilLH@t+k{RgSeMk@~afgIl%u-)QX^YPo-it~P8o<qKM4}JjNL|jd?
za9bQ%W5Th|eeR{DVGu9@Q2t>gmfOXsUD23#iYQpWC*9S)(<0yg>AtL9=QMoRO*hml
zeLuu!z#vT$oE|aP2{9^@Q&E!Pv+(*{aj02^m{U*CaS@Y0GU4wHVSSoS&Amv+mcHMm
zUiI%+{_iML?0fv<_))vVs98(~8kdB%<9)p!UC)s6{nwXtIH<FkcrXr4SI3jj3mn@d
z{S3}dPn3j}JQAUmj!W(4`W9C5&*wyk_3C2$cT>onwKKb!xTq;?)3yL1G(m21n7YMj
z5nzbC&%e*0{G7Cf<Ci&6TKXZ5`Xk^ARdeFV-TODW(*JQx;Yu|8u~4QKA>fGXsqDt$
zd<iD3H}2CmanZ%U04S<^vu(}Q=lmyV-BB2rCclqky~*SqRJYRsWkdwUDNE6X^mY3a
zPW1qaPZ%x4e!QlyBb)V*1#Hu_cwbxoPvF2U5CT{WxKvLKGd1v!a1bf4?}O1{tboeF
zNuwvG(Qnn43E;d@knZ>KHTz>7DUiFJi~lIG^MsFiI|5qHZ+<-s%EMzwg1Mj|2#+Kf
z+buPGxSnjz3Z1rat`)5zW!-ljX_~FL<}O;01NQ)h@$*K>bV{+yrVfeY838*a?;ew;
z<OCFZMHFVKfWMn*ts<{%V36l8i_(4R<#PuVJkoq*5I1oc|DJ<A5G3mS$EEBUxk*0*
zk0`aJgK@YbV9Ni9ny+p_>xhoewBmp7sBb)iH%lUF?Pd>xvgJIYQdVu!g7uOia#1>>
zvoy1tXB%Hp`sUy{NpqK&cYnN+S}Hd`QIZyWaMLs(>WVe}Tk_x6e~Rz4?hH+O$6+Iy
z1k)k+Zlu~|tvKNu)})=!W2X~GeBv}TPB&%>$eky@4tb*+<JVkeZ5O5_KIDhIuR*H2
zteTgLFX~MI60J!}OS>SNXm`1T=w?Q4F>TkR;kO%Os_v!jO0#i+V9upPs@dPLPB)VN
zRE{DiGkV=M1U%#_rTM{kE7wRxrEvza&o3%BV7{T7{MR*yKk(cpx%z7A1q7KA!b=^M
z8oW9)C3aA{xH;yIn4PNGUQYm%&y+J)f8%EW4j@d!3fYs)wA^mi2LOd@76uy%B9!5u
z)$i_px<XRd4iu@zv^#HtVTp-cK0hvg{HE{BL#QGtB^1)b6dbLDwj`t#7HC&5QuI~&
z3W6dB&{8bfE>Z*{6j{IrOhkIt&A7b|7q)+y3GrYA<7nv+=KR}`N6i#l*2W?z`G6Q?
zo|awbA+amJ_?1<3mhcv`FCVh#48Z@gShagQei`Yw<+9^=^Y<2z+K?J_GY;Q6KO<!t
zV(n&hRcfqfXE|#N!J|~Y(sKfZ`6aA7>H$=f8yzj>pPJNVFK}p(#Uqx3e@lkZAu1VJ
z)mB6O-^L47O*NaOhD|{jIm&FlCKD6MoQh9p38lxNL5%tUq{9;4iXS2qMLA3ZqT!kg
zn7ugDZGJevfx1Lur2O;zn#Q1Z0jV}GYYeBQ<x>A}dI~4n&kG@X)Nr=sLAnX;pPt6T
zh1Kx@&tyC+M2{yry`g3$Jb4srLI#NiRgI>vrxy0v^6`saH`y3cE_^GBk^DYjAaH+_
z-zW&5YJGm#J4{O+M_S0YNI(h04ImPAkeGO5->*T!NwXnBAg1qerHfNrK@ilopbcLE
zFj01f1AWxZQV~aq)eAiwSLKAF$>Yt_(^8I^&v+--_=X|l(@y-^F|Qqi-rPpvxmp*u
zh)V_6W~3k{39(yrkb%|@PyDC1o={9mHPKs{%XlT_!Fw+3^A_*$M`Pt$>60N|%kxkL
z!E9;*XS(c#-_`*bJt`dC!Qf)IG)$4j=dym1sOKZnqv)#OIRouzUem!<D<TyI*uPIO
z3pKe8Ka+qMlvNHmPAh(ec1IFn78b=dT33$1X7m%lVV~UTg_?8N&wE74eDDknuc<dw
za!y#ivlmV*wd6QqiIW*itT^S{v_wxNUKclpc>s`>*5^HapstpG+HYRPZYALd762J3
zx;zqT(e$*C0TP?w*i<8KtI_L@c=`Rv8es>3kRkj3Rn~oPFMHiotqnaI`!{zH%mo2(
zh%-a@U}ef{*0)tXa+%S#fkH;*Cm;*eJyW>43j<H(Y1jK0Q8O8uB9obas$zYX_+4`h
z8Mv`a%@pWfUCh{+?NImT&iJ~+552v9fZy(x?X<gl@76Pm6x6(*d)u1n_>brIrbxG#
z@NwILF6MtDQcCw<<G1y@fcL)}yW9EwV)mxJi?M@5!NNw(?<e%=ch&Z=(`Q7n`Ha<R
z&s7XQSREz1@EAs$TvgM0Tj6dJVt*e$0wRyu&?Enn26A#({dHb9qG*}(Z<(aJi+aRx
z{C1B!tOuw2*mOEo-8^7%)Em+k#v{VlGqS29r?lVNP)HXQhc=`HkmWW0ef;rd?Phcs
zQ^a9;L(xn-WZlifu>gE=5AI*;5&XT*_+q%x|L9+oNz{~Gyr49nOwvMxuETDpm7S2@
zBqp+<81>xwtc1V+yw`Ir2o`1wA@eK9L-e=v3u%R5IvEz($ic5`z8Xc3(RzqaI2A#A
zmZ`sij|>qqiNhf}H=4TugqQivq_m{+sV@HqrD@Oe2}(FI!7?oqQc-)J)-f(>8tc9?
z-kkr}!B}%ygW3oL-28s45(QP29#9}H`ZmfddB!1<{reE{A0eebJifV?q}gR*;u$@M
zn(G{!VWy+mP<IK`^##B^=!M%pk?xbUh0k56l8qn-idIL6@_UFoobXw|&pGtAAJY;5
zjy=V{@qiQcD=fZ&;sJkB|AbY`c-k_>`OBK+?>QK!m4AB%i0e0W-GBf@@6QqwIr28U
z=GbxiOA@kZ^AjgWySv8U8ifGOR(k;A`P;#`siMw$`g;M;zUgrxdlvn*sS<8;?Pf?b
zO1<-`<NkWzQ&0OGja-WK5Afl8I`b2_DpcMo2P&4BqPBZF#q~AiG9BEDn$0<wsQ2%c
z7uEc4r$M)Yt~-FD=fThcFlBaz)7@)GSofY2nUCHUHUC~`8)>KdW8y(vA;v134nO0?
zpS=D5e&9?QRf7D4jO=LlrZ-!TMR<;}UoJUm9tyr7m5+YkU^nJk<JPoJOfPJn6Hs;O
z2?q^PP;op{PPSx>C<*ZK>3+T~KoX;iCNyQhbJt(R0wkXe)Ey{}QxNj_&7M}v>H{w7
zhxL4n&H@4)1|Oj4ymw3Kn@IMI+IJl3Y}RnzZ9I4XV)hs20j9<*>2u?i19<ECf+uhj
z=W~=BsNGG)g20cr5T76iHzD<cT||VrZazQB-Fc-=(X~-HN+W8e;BZ>>{yY-*jUr}A
zc~PGYLOE_V5{-V}Ao<1R6?K$rX1DtpX1dsadm4ZGNUo(RbfS#vwr9Pa76Xv<5KVRR
z)B$$Q$aEyi%|E3l;OU>?<Nv|D-H`ERleFNG4%1JhkO>mf6FuJrM^Q)RoKOV`*v6p_
z*|x?vV)>ZQyuCO2>1mFpqyD6{#(SCWHq*)KK&Gj-#|q2I1+6)j(>bobouz<dS<E&H
z(j8aqq*ujFvd`2vZtubsjwaRrnzz*L=34erUPpjsTm>y5h)k1{d_d{+AvEN1T6yCt
zJi)GlPs<<v`$-g>6`+YC^qS=ACY=mrijr{f>&GIOTLt)GvUL12BQoWGDa`-ElnoQe
z{JRqr+GzL5IHm2THvr@Kdi{y70YT;X{b|l4tUe{{etYcAY$Z{{z&Al@8%HG`y$b^T
zkMAcibl{@<VR|URWyBGIQH5*EV}2YhQPeddFpS=MZ)PVbog9(fWn`L(H8es&v^oge
zLa9O$rZbl5E6+_w@!vNXh=E1V-g$JXi}w5Y5vdGkdT9<If2U`KNLk0NN9U_F)V>n4
zBeK>q`*G9|rl7l&Rg{U<gl9?u?e>qv0jS`NwoHf%NKPtOq~=+U=47SjYOhkyOzI6!
zBSwLO4QN_QiX7vmtBCr5)KJks3xaZhI?c4N;k0@u>!cjXhSM~OBdl?&w5@APBq|u;
zw&iD?<pmTM@ny8E>Rl+mg<^>`?9(*lzD$XqF73eXeVj+TZG}7OoGM!gDDy)#gR0{?
z(&G@6b{px4nhjKd+gf?G{pEKsV4HFgP3&(HE<!7sc3#5<MiEYy-<#^Ve?iv8gFC(c
z<9QHZ=(m6%l3ug0Z<a(RBK1&;@8>x+WYR3O7)7ebJykYZT2(7Oe-I9W6a8BbiG%xG
zXYM**_m<-UbcfMh^9_f2$N=DH2p05W)d2`iPs*y(CL(N;oioK>p40+<KrA1N+<<cE
zC6<k^fcItCf$Jc{OD}Eq;Lg%?qU|<r!V-O*g(82OURpxX{ioT1(1bszg;~y~ZlS=u
zj>{UeS-egK82=fD6<k>S_X=q4j@mm2z(7`uEt=W;1<vDYy<j9<hO8w)3jK+ytfnK)
zrRlwK5I_`cNwgYf-1L^wv-dN|pL}KC!80{8mO_)mCsUZoCU&}~idu%tCK7U2YQY<;
z<dDxoxhR*3L!F>K&t@(myxBW-=V~-`B6oZM3YY5G#WuU%O4<%b=~)yFoYFhY{yZxB
zi{LFfhaI8eYXFc7(2Hmk``&wYMiOKuzFp~L;UD86>9<f3NO4q!WC9q8v|*kBLcp9d
zh6#%zYMO40!#Dd=p7DqafXaq?&(Zmm$@1Q%%&DDa8n*|MbobXLoxw!qO&7@5N1Ex>
z;dJ@mYICRop4lgWZnZ8;2{7wlO!T-gPEWcJ0#A02W;zNGqj`vK_nfOV{7A%U9}Y%o
z_^*<ror^l0TuOsf>%oncil8_eD(aDGisPSsQ0B&PG=1f@e8O3JBM9WCwADeHWdj!c
zTlq~0Y16bs%fNFN4&=Z&@I`xFwd9;1&%pl1o`!jiz;GL{H@)ke?@YQiUQsYVS2$|S
z=4?XR>d49Kyd4fyhCjB=|2`n1qFVBfBCX`D`#WMt!D*B0;^XGlib5!OZ8+xw^QeK4
zjKa?b28lyxWsWnMrFVHk##_w7!DzH6+=c;BJWUYF6X+Qguu*FWT#k^0&CFANM>H-=
z5wN8QOEgU6uFt;gbhED{R}E;rxozIUK_W<52E)#$wfFhV+QKT&s)~Bf960{H&Q#28
z;<LC>Cbo7zBNCc;lsBZg^=|VPkhEQUCI|=^t1Lb3qZsWvA|2-uu5K_Jdb_T%AE}y>
z&$xZstT~mlvkdD{&H>h%po(g}geR}-DXsm{S;GI`Xk7n`n2Rqp7|}AkeD?-bb)hUv
zny*}Q!N<!vaOdD9nr}dl#hWE;Mt~Ui@ibWz<<Nc(0wDoZ|A!vuow$SYC4tNR(5x_8
zxsvzxdj<nfpqQ8#*;XEJp|!I})VHyd{QvBtSy=$}nKhKNM|jVmcbv<px0V47H(3zB
zpRhJX7R|cr@YLLw=63~<TUB?m#w>`KLgonwsm-#1rbCG?lca-0M87We8Y6OR->-V#
zs~jUKx*W>Fx1UZ;%6&e&qCK`yq~xKF?&wBe=T|mf$xOIzIEO`}^++EnY0==Hpe!_Z
z!Q-(0GewC%RH*lvP($7SY0J!fNcsHx5HAN5LNl#^ASZpCrUotL-wJ7*A*A&;FHjeD
zl>6!hfPJSkQ|k-2S(ZR3bq#=FN*<u?HifRU5X9+<r0&AP6-?(fiAp_I!0*mmX)*u%
z0MvY_&D1wQy^V_G$>+I1KQps4%nisW`S);BacMWsP6LZ8QdSdR^={LQ1AL~eun>kC
zF5Ec!A#zE0NWtMqm%2u@EIHg3_cka{`n!)t@y6fZXG+%Sy8|cveFh7aR$l!Xiu%#A
zUi}U@-8%?NH2Os~3?sW9`a)O~LUEWh0n${ONY%3W{D*vs%k)%nMQ3?Zk{wtC)w(*$
z2>>a+i0M%Mw_w%})=Gymm%qdMo5*OSIuQm}kc}!7F0tBS9pK4WPK?=hXJ7hbNiy&8
zO@Q#AQb017DRZB?$yuWiW%>BJkSBDWjN<ITdCnA`fF1b%{;hr^sCC^6s|CgXsBii|
zYm44oXSYjz`|}lPsyp3RuH#+`*8LtaARgCx|New=kkMcMMUq7ksOJlptEKNGvg-N|
z!*S%!>SaR#*`La=dI<!FAYWm%b9{{8^f$Sp;yd_Wf<@^YF|^GyGWQ+Nxjq)4t!W5N
zsQwp;lfQEiU0X?awzKC@;W^hMg@j}(790;;;x~qwJNW4J4hMoDP}8$W=y=3NbL{8t
z@Jt3OPI@mNtc=Tp+Ep&oIxP-E9{_5q_sEx=KtpNj{=r3<XAF?+9N0558`m}F_R?ot
zz3r)6VP)dQ7Mc3?loJXlvm6K%7@LH3#KcH0j5<hU)AhFiaky=1sP{;Pq!bE1KnB3)
zX+{(^|EI9RGT;ho8?(BPnv9-fzi&Wc>JL8=*kJpAT;heY_IOixj^$A~zUO>VvuMfj
zhH4(@P=sUfU%Q`K)_=($G}=)<Gsb$#%Ac^XLS?&4EU(riSMoo&-#0|bFC>oR|EVt$
z5DM=5B@S^9C&TPTHC$;g%%vVVT>Yr4o-%rQ+N)uNdb_EB6Cv+-b3uPf)^mzI2b(q0
z4O$bC*9?CT-oVZ2Nzk=jK9n51Ken+%*AxHN&Srxj2_ccA@%tM%f32-gXLNT!OxdD5
zJC0z~l761_QCP>}ApTc9{M|T2sXTG_>07Br{~a)=PbV+D<JwR{Ufrp9JkGT2%i>Nr
z_a9BY(c)VoI1xag=yT9L?MP*|TtaQB8!E=x8_8e%Tk!)c&5<-<?WkLY--c57wq=?*
zNKRy|KHtvxD-$%{M9KDK8c>J1IQ-u`g^wqq`^V`)7M!0o$J=L?rX%tnxhY1oYP*f_
z`fnD362O0m5P60pL%*IIrAbVKyCk|HONSik5|CB%9K#qV%qK5jD2QhS<jHs+@y%-d
z80Ew1L3BqrkSCOu8{J6QUrKpr8TutWgHW{G(oHSm0!f<#@E)Px)ZiOg@M+lLlj2Hx
z*yC}qn-}8N?W-kcUL*Guwv!Ec&g4csnx^P|2~Ymz)EfVzh_4PIV2h4Ipl{gFq4DBw
z?IBA~6YsD@qr#7XM1OT*ld#pW^vo`$Krd2ZIiPeyb}+784bk*D#LenUZ(3=%%s~?%
zNs$+E+nELYOFLEPp5z89gEe(mu;DVjB)vyYv6)T?r_0o+6_}9l(lqDybYPn#C}gBI
zXEYPD)C+EiYyn0D;afi(Kje=6R+71JMAg5)Q0XTPEEDvQ2DNfDo1`HlO`+s)K^oW9
ztUb@sXu2(BgWF^2+3ijv0Dg&3a6e~uLyTI8fdEm`x{Qd=L7xNEQUy@zNmT$ZCxf+6
zIs&JN@QFu-FzZKx4uKv4>j_3Xl6U?Bm5#8TgUF(kP-6V}$JMzaUZwm5fa5t0h2P<5
z>?ANDZi-HhPvO!xHJg4{jgpqm4E+i|_ikBtJ+;&_ol33<(Fb{6PRXo}+UTYevhZ}|
z8Qf6P{h0Kwv``UCSl<KD-<xxQh%|7VpSI~dvuGp2II^4l4I#)pwe=^11TLzuHCCfR
zl%5_}b|2pOIk|?I`u8qm)FY_8<Adb~DMD+C;G9y+<oAd<cdW*!*w=uUATcM?{k`bY
z35N`I>wJ3<*HZxP?*}XZ?ed6{#5*6e<}(LSuq;}pRygS})a}~+cq6w$VU5pa$|z%2
zkY`ZGIj39s_J|APo@3P@C@&xSdU0pg=PQcnIjy#7#qoW-rr41fvqothn8aT>%HCyK
zLz|OWC<*EQsY$g~(q|WBU#=$nq6OJ=*%0J>i--u)u4#Z_{<G>CxnuF@C^a-PZcJOT
z&v3n<Y81<*94&%ZS1ReL+ngGDPTkC_P|~4t60T?GOV_kz)Lj#IQ0VLA40kg%Y`HG~
zG=?IFTlFJ7wwycpjmN`XBb%)x)B!a;`Sy+sQGU)J|N92?+lVqP%9%Pi2IkciGoaiP
zKkE}e=+oR?t3IAZ?zq~;Y^Uu7KwtkE{nbeqGmViJam5?{o<)aogOMWJAOCP-tW{$q
zg!w(6`};z1d8=8d>Ex~#c?Ktq;hJ{op*;P1I)jn+T*VB${JbcRgn>^Dp%lCpkl#J7
zEc7()Omkh-1l2Yu&ijjcK-0Tu^0-IM9h0PY9OLbMH*JI-DRd_Yg`|U|7q81mnOOMu
z5K+5uL;r73trVS%Pk6K4^f92LzAS1bX)-uen%CHdQ%bmP`BxJ6KB}gt&EGou^Z45h
zP{OQsP1@!@vIScR&grFNTr;l7JdvUs5EuXcgouC^j_h6mbB?ifMDlpa{z-ylp!VTS
zR7SPa@*8nyuJ||2Z=?Sspqmu&an!I3vkFx^Uarv75-;!P8{il*QVYv)17_NO)LuTJ
z2#_KkKhy8e*7Dk(rRnb_H`lst@;mOlc~KGS_&L5Ll^b{Is1{_pUGk4$Y&s#n?wSQg
zrA6aSt)mbT^6M4y8og`ova%>ElJX+0lzC^)noWWL1Nb2jrywe~c&);02(1YM7`_J|
zwF*D5I%VUfXSgoa2F*cQ<E$xl8Q|C^v{etWAVS>7^~~X?Cv6&=6n~JmU8u;VpUtc=
zj$dOv4MJb<PZ9eIbt|byqH2Q5G>?-$?Ie;=Wc0dFj@4j{%U49CdgVXOTdA3^Bhqbo
zOF@J>zPoC~D0W9p)TF$gC}{3SLXdAbZyCAmi^~4kQ40l`uMpI$%jtBzFB@06w@6{!
zfQY@dd#XLpy5t}^Ty2D4EzpC+jYuqc!BOST=xr@zW1uA26+QT!d8mho<nCscK?hJs
z0Tee{610q5GI}MEOSFXlcg#>`{c{xqzH!rTZl8(N7sW!R;X3XQVKyVz+$Q8T=VKnl
z$m5`FjPos@uS+=$?O3%Poe(55aUPMXaVFtfRJ#9UlDMhq^#mQ)nS>HSDD?R;mub#}
zEC1?+TpGTp9`<Y;v**?nI1r3hkOTipEwbuKgSq-~K5w@m<V)&J<Pdfv(1T=xs!dv9
zG$Es5uZjm_rW=Kmj6<^B{SU8YT2>2`#F1ETYdQ+b&NAMv3U0a^$w)=r>HFSd+!0+Q
zWmb2xVl461wY{&Dn@O%HcuwjM#H0nx^-%;(v|F3cj4_>Dw^4H7qEVA2!-*O#UQLVw
zxcn7bzi$vqSk>+fBTl9_Bfp-KiCSs+r}mco^AY57jcvj#T4IaU5q>0!WxY(odIdmD
z<`e)jbC|mEq9mfG-S4`Di6TpzDJ+k=vz^BP?5QnpMz4W)WWO~AR7F=W6}3ZBzPuwm
z18PxNf0#u3L0K1RKe1!&WVnti|4zxSart2OqR2GxqW^wRiT<M@;1{*TrC!)Tq5D5{
zzxOy)pL<{%KSqaj=TJ+&MpW|v;@vbLsKz$BsN)W#k-PO00SaeY&<h7~BWdjaV%%o3
zr6s8Lwtm(j|Mwa<iz<oP)Ro9)Vup$crJBs}5f=a#K9XU`s1#ligo5zejMH&RdCk|9
ztvLC3Dcb(chk8zZeB5^M9gKt^SK3yV9tG9r_x#k(oD>Q|X^zsfmWF`a*WX}~1~A#_
zNy(TfH+O#>O%C*p$qq2X?MX&%fFH+ymQ4=@`j@;$+T*ouGzc9n<*&f~ask&qYmR|5
znkxVFCvoJBtSbGaS9>dTdF`@w7pMIkF+@j!ev-YI@pE33%oF{0s;nKay;bQxJ&t=W
z0XL6qm0c3haFi}iy$IYNVpQCu5(&)1G4sP(9dRtus*nUDiDX5egGuL=9UuShGKCpE
zP6~oLS#Xc|E%f!#mkG(z3qEkUQfJoavSx(pC}%B`nbLIey=Lnu#UxswwwuRzVzi5N
z(eCpu%`qHJTb>0a&wYMToH;GCJ6@<czh&$gLaCvA2A_viqVjKF7SYE#T3*WByJt-v
z=b2iV1+@r@Z^6oSP$bAy?~aWbCld~UZd^HiooVxP#xuk!CCz9w1QN=BJOVk&mG;-V
z@C5iy=fON+R)^xsZY2eWl0tx{4}WA;DazW9dv4F6=V})09EwRGJDGHi0|23Y1ou2?
z4gd5sW+}mJucrcpy|VNZQRv2`$ziBT2X*+RD8vU;W41I4liAZ<qse{O;<gn5sy*A0
zMU~fT^!M;s`4FW;Kpn`dwIn7riryo>K%A~vp(a{lKdNR$;XStY8OG5p^|h@R8ywB}
zO>^&%-s!)8h5K_|?@1<h2fNTD_R6jf19fYnl(@9t>AG~vw{oq;KWmdoeU$$Y@S6bS
z^%)TYa8kZgeSkX^FiQ|hBW2Reney)|h$=a7HYI#DpM_MD^mL$FtlUKZdzos<lu!5_
z<-TbKtFv>;2^dF27SBb9Gzx%yaiv^{N12+aP5Xw`7!gGzcjt1t3=h7~U<|}O852<&
zW;qRY$vodL<N`o(Pr_Q8%$c4KkDDu#7^IGJAn8cPg&hYTiS+L|;Ba6*Mh#LYzRlEh
z)k4=WX^{LDew>wppp41utyhl_TJ>#Q1<&oZ>M~u?y$PxwIUQh5VAQM`kxxrWB9OXg
z-i}x?`Z6NN4Ru6x(yNLsHrmmt^gdP`>-ob_hIg8`fMOPr`?Y~seK&2wM@N9+UvjPZ
z^Z(%|dE+LLRsIJ4UthX|(I~ee!ZGb$l*wkzar)6I9QykPtD}6;iKPQw;(EvwD({ZE
z($ovFp<<U7NTh#E{zyeFBDf{1CdqTMZuVtyllEJwb$O@iHGu)C2Dl=>CJatxGwUp+
zBi?&yfzah7H{Faw{n6u*4~WgxGYx@$m*dY{z@M92id`?%6a<Us4G*Y;%V?HKfRBQA
z!ofglr`4*?jbxiWYxl$CTB@CNo#pN$&~vx6Og%E)Ew>^%k*IC@wImL*nottUW$NDN
zqkHRq;d^)ar%0MB-SzhwgvAB;H_t=%yFrhMaz}34vhdS)<SwhR1x2X~cp%$fZl7B}
z_VFF)V2Z*3<;+4g<|;t*fZ!tB)`9)gh?;Smk=VK%Bu55AH_rgb3{g-nYzx)V_ef`^
z9&_B!O(PT58gdwAjGmx&`FZ*@z2>+Om8W2&cBq+b*rvc&^_I7b*=b~`FH_o{y05aO
zm~q*QsaR?cV@65fDYNGKRIa$c^(lhVXW$moO9Q@0?n>e57Yehj+d#9gR-SDsl4PRn
z<KJ^I=Kl%&CYmYgsJxI)5lAE++yoS6w5G;t)PfLpH>%9>5$r-GdR!h4J={yIV45(#
z#498Y_GI_aJjb~mc`9$w5{2Wef1d$rvO-fRK>$6ut<9Ez2v9o9m<Vr(Ys+SDy8Vp7
z-vEI7;qk-CLIm*g7B+xJo<_(KI1`ntU=VJzAdjfGfG5)Xe)CXj-xkxwanzpA`*n)Q
z;nSKTx6Oo#N2D&p<@ojQHvpdRRN?*o4L`XBt$XVTa42h^)O5hHH)Enr&+PV68)=tA
z7oJEvwImU8Oo=}4X2yaz8oifYi?tWv{zn#NPtr(aFUlYOg})zgE&@gt&5oLW$5I#H
zsjWKl<0LoW4|5xFa#0NmQKUxhQMJ#QXjP<dVVkCeG;18M2iZVRv*XSd+R(D9z!!*$
z!iw&@BixyFmPGA?M_@=1uWEiKp8b?P#3-@xz&4|1fk*67m&m}9gXjIxZAZvF`Smw0
z&GL*O2l58umi$V*(mU_c#I~A(_fnE2{Kv%_m*cV&;A5G1x*5Y~e?HF~`<8W^&hpG|
zqvVQL^(w<~<GAH2e1Ni%3<epQb`<Kz6da^Tu<DVDU;#4e#`NOG`SYC_w7s#b--RxZ
zEj)_lE#ae@-cWA<#0h6?1q5~DqL7%i<5NmN>RZ!|Z(gWVW`U^O56T52{7waGcb*}1
z824z>FpAE*st5>GHhi5?2(JC4al~wb%9DA2x;TiKCx^F<vNxqS{wCK<gF>MNN1*X|
z^?(8>@%ADi7Z0$sZ6Qu~VRSjHzbdzBDM|c*jvpp55dp<{Tl)GC0k=gEt6a~Gd)*qp
zt88JZ+?i@whPI5T2UH|I6c*kzTT{<~e5q8PA6WnpHIuG^FTiEvm%K*ry0c9=@bUyb
zLyRs(gO#}~GNwqgtvdngG)kLcpk5VrV2k+AqiH}~M-!v)(E9c?>Q#B+)Y?aRT2m{R
zV8rWy!;mrFnj_GC8|O2;ZxQ!F8t0Q<k4A_A=%LPYpYTcC6k=4BYl#^bMCis2C6(1}
zXGA+ia2RUyJGUOvaG1H8q&9rIN8xGIEYd~gEBEabiZ*FA3)ER5RY4CqUKEZ7BRS7C
zAb~g>@!;s|?KDdEq&L<E5MQ>t@6z7EiyQ`HK^q$Ghl)VjWglh(EZ<<*KoyVx#i0ys
z8>P2&XFE_XJLTs)j>~H6M%QTSF8H8k=j(^Be4PV06J?h>96i;n2tlMMuUsa)sOoj~
z&RN|)0(ITp_%&v9j>}3m>+izSwy-6Q6H&d_`#Rfs6<}4f12Ac~Rb{?FJL-G2ZMa(z
zzd+J^#~CBwG4;Z1E(yRu4O~yq6ONh=?Ri9H!3SS#Zmd+ixbguRA)MPeDxe(1Q72WK
z54BcrWRmubkzQ}V=N#)<ap}ZT^3Pu4cMj;IH;0i$LEuH1@dPhuBd1RyEqmh>l!jY^
zD%5zd1LfWm(<Adl?mFm@c5C5Qz9d&5;bKbPPF0ffwC8+q?X$5<Mp$}kohW4hQ4Dh)
zz=?ay&ovVjMfey+-ONqqR}3KL+JzeS<7t`kFZZBi(Lr?}?=6X#auQ7wCLt9ecE1F^
zMyq<=b(KUBV=r(&a3p1%Wl9My<TqI^u@2o&1SSB`6O<N^+qO45!`E@ePm*i!<Thzi
z7r<>gZ?sSK)NE-aG3QGK+TU3NR&PUZ@O$zF(|Qe(9D=1><H>SIRocR=DZCaT$f%_e
zGvAh?<81!#GoXzlS2%xnVI!3d?J$I3bpW`Zu6z#^Wil~w3{?1X-;fw`&`lVJe4GAt
z+G6g0nxmZ0#sN&PC5oDD7j4HuGng(F75+-x$*5V3Oml@t?kjZv({^3Xhdm!_jpp0g
z+n#Es`Gl-evNZNpZ|pkn&U$;Ct*#NeX@Sgv+w7!1r$27l+7Gm@PEAo!^9Hczp48uf
zLf_pb5vicK2DJWoUAda3+|}Kgx{bGuN1R3QfA+9H45MBn@Now+6CEgIrJk*Lou3D%
z?;Vv(TVc(Bppn*;Z6cr9-Z#y-i-d|wMwl>wy<=)k5ui>g&x=Q6jhmuLf4_mFaDdb#
zzOQh+ZcImHo&I*$@Hxd-V`VvOT)EzVTYxBawd$FR3&}`^b*y`9bw)xE3E0htk<xDM
zBU(m?7oH3>{f+>6Y$K{M?8v|pS)>#Vbpf^A@a45Y9QUftH}H$%v;O4;6oy)-`BH@N
zN?1P*kMx?Qutg@SmsS|+vV7vvZz1P}m?+DpNc{3ozaN0>UY-PxyIi2Sx(S1T>zr)U
z(h2ZbAxD4`e1znMjfl0b?ko4b5tE;^9XD>4p`E+1@gF_+_sU^h()$an*N@N#!s@jI
zvwl!g;^MVf6wUlIeNsmm@fz4nz&5~&_l8Q7x!d@Z9Hw*QbX|Dj8C=|;rvw>spUgwt
zZV+S0-xw+M`=L<KDEY}@Q0=M|gVH9B-W)PtI6tX-O=M}PGVp(pDHIC8|KKYJ>I%HM
zb6!2}u9Iu#`uxA-4-^1kZ+h!MmhG)L{6Dt7EK!zQ$8k%VhvjJ8{}KvF>b_zey8EN6
z%XXg32#EwZ0Js+T&$XDP!^Z=1NZ%Q6+%H4Ei)$zSZyE@};e6e7+Hy}|FwB!@FsnGe
zB3$qIw4iC{p_fh1SamlU$o4>kF<NWeo)=;G?;9-e%6)X7iHhang|r&*42@26auFd#
zsyM9OucRAQ9snsm4Z=HVz-l@ixGW`>@G3>F0etIcF!1Z%!WOb@;Bd8}|K;cA{d<i+
z#S6X1GAYJgMcQsq%Gw*kaZkN5|I>QpT-;T!(NkP%35pyeww25v%K#cLLk5cb93@4q
zr@<B8`4r7d?+CF*uRG;Ln<VM601mmWhq|a<<!^c`A{}SOHY^Wl=XnE;h~oIaAJUa*
z`70azpi`rmK^E{{s^>|a2I=2VT~}_D$STstYJhX=nhkyg?aT!g0Wk=A^^={cQ*qy>
z&-pEM7@_BQJzj)_P1;ID?I5rUvR;=KNh^)w_kSNECjvuzLsN^Jbh?VO?#bu5ZDr(`
z=ndGWF6?dswyVo{<QnSYDpPqz#A$F$VlrA10Z_R#xeIQjw4IKL`;M^oTR#9d-`4;P
z$8NNj8O==%`RsK`6ikhZ`oHuJ_?6N%W#QQS7*dQ|B?9*9$vCFwvY+cqTG=lX4|=Vs
zKFbf{QgClgJV(Y!74cp0x0HuTEY0C?tv9div&${$j^|m75Hh<zR|a4*p6RRMy2?rx
zcx6jnCs)ei$EP_4{8E7wji<>Nd2MOOweEo^=4Y=B_#?b%;eT5uW+@C08i7=%F!7?k
zf}X!c@hrD-mNs^_cAgGb=)4k0Sa{XC%hM@m;ocxi3N2KV7Xnz{Kg&=AFt)xwC6L*2
zmxBZ(wM(}?kla~VZ^*O7$(dyJ3;-BnE&m3Z@Jh{=X}CCQOJLr`Q$}#nO&ZD^O-X!t
z_XJ*OO_pameLX3r8!4Qo`wJH@PY6fEBObpkmp><QBCLDCVPlPa`bSHG!pPyxU{t!B
zo9)7wsdFf%D4F7H`Zm@^;b)nIIV*6^|L<L(Bj32<c?JZ~@YZ#g2Xts|nT$KQ_IDZa
zd$N?gM1QY<*Kws-Jp(pT-&TB`A%SGJ|CT|(wV$iM?eNeWhrd;RiTLWTR>Zk(fLBu$
zykO}~#K}`Gzp*0qOEw<U6Dpjk0ZJ~DUvTU16UEGwk1HRw<?3-E>NC9X8SKjlKIH{!
z{17jo3?P}Fyl!kii`4@7KuNcm(X7Vt1pj2WCgrR3w5e+wF!${YCp-^h_k<HhVS1@g
zSH~d$Jun++Mm8RW9%sgDiaGe!^(l8!IqGh0-rnk%Bxk?C<XZL4_>K?!pL@pJfCF=K
zdY*;1ExrNz0$l2<>DhH0sQw0{Ky0{&sEvlWm;TDj*G(?i899v2Lpa~G>8|->d9`TW
z_rk)t5lG1Ff*_jTmE{8{M7pv@I{5YnmtLxZY){%n3JwbS8D8Tv_~6dx8{h!f@U+X2
zp?^5&`xC%TyqDtX8h|WY<IMrY&!Ks#0w9qbBbuEr70G3qv$&O5SJ7Z?S2x8twR*(K
zY)v`CX5a74%y6E~eVRRZtY<tuM-VG-W;xorky6yZzmX?t#%CX9AiAbkFWZ2lrt#_V
z7F-en8*T;{99ksz?t?olkQv7`7h{b&n*;5Ym6=hIkb+j(9W!;NR!LtJ&@{2N<5%LQ
zKQDv`fULJw7qTZFv#6_%0Y+e80=OM#w%(d!j^(r3b*M%WB=SzA?;Nal8D%P~2=UU~
zjEYGLDy>>}6Fl4wU5(7N>0VT}lh?RhbRp?d%AH(Zs80=gBLSK8a95$ul$3Axs=a8?
zo@Xl@P?4aT+?~@Dv=HiQ7k0H+hd6qF-sKQlm!f0Oq%H=ifEN#Hu>S7bDL6N}{TxyR
zw2%crhZ6~CYrNA+iO#?2?h5Fa^?KVbpnK=-g4D~x)8D%g0LS{i@5V2rv+t7OSoulR
zBC4MoOy_hJF6j$ByXPV`>9??ULuPDVQ2*U`8Ew-^gT^<S6)$n0-d;xlDR{XuB-mV&
zirt^WCWy(F7B?O-=d5%<VGHXGcGJ%aG|!5X4E%SZ`wiH%NBXROgNEF;-fGt!Yg=2;
z?x>$8orr)Gm9_5o=K5Wd>h%J11JW_#XYMXnWs(u^@a*+zfbY%W0nzQkWv<y)#7^na
z%WK5t2g%kEsjz+izr8J-Lud6g!tD5NlE7Ix`jzqjKdifwU&U_GaCn=^>l(mXmmmNZ
zn!D5d({YHhNzkWDJ=3tMkXMe)KVuQ<vuSBk)*0K7fgPM_FeGDz=ve&qQW>q_=wlr{
z3=(H9^SsUSNTbES{Buy!qe;1@2X3x@m`_H&Zc_eU2~cEORTD>Tqi1f0G+Vc}3C2~;
z^GGAcSA>*g+Ru(NaG|~tIQBjDP*6Htuz3>urDYrhlN<4m|E&>%1+nC>K^7RWi*LrD
zQ|W0MTMwYX{L~Z!%`J=G$XPUSx`Gc}WGmV>yb49@1*PFx&|X5fn=S(VnNsrWcb8^r
za^Ub4mq=iF1y@^oSoB_QhYADk)tyrfh4z=>pgf29Qjxw?uLeQV^`~YL5Kn^D978Ao
zmKU{%c>?X<wF>{B#J%KhE`8#kn{&_*4C>QQMJC=(3pF8+^!Uu-(qy&C>VB7qTq19}
zZvNXkCZ-jrawKaO9Z}UAh{MW9eno!Tx7?~9VgOceudkZv-(e+cDgEiE4A2t+-JcBZ
z|A$<<3`^eHU{N4<My|O6UOFkUw>EGuwO10DZ9#67i5lRe{9AhZQyER8dtn5)$;jXu
zY=f+=dfY32d-{qPtz)oi@1A>G`e}%3l-AC~1$yHso|(xELIj|+@K%1ED~QZ`f1Z<C
z&#R%%K6@}40-TZzd;FWI!T)%*B_=t-kg;m+&QrnGL}mPdDW|>p5X;i(y{20c24wk-
zUNg<;ZKZwLY<zyxC;6W^`Trl~L3wu><n+VmY_!jPLCOshP;S{o>zc&lkmvN42xgll
zHPgSYZQ~hAZFYvA^?<qyzy|I913)eJY@7^<i}qV{#33rUj9LJ6K#RW;#4n_48B02#
zfWVx8ud@ThN?TG#%Q11xPmwOF8(t9#PRTb4^!-Jua{@fd)XrjFTj^6`&$L$%?HdGj
zocg~Qse?@V^=}ihFZb~o9`z?AB?b7EC<tino`A-e%*^cUo6Gt-14pm*6sM_tx|bPC
zipNE&hW&nJJ>%xj!0d>=WO29!ZJ->5S%1f$Y*U<yjt6JTACX+#=NhDf(ZM>mRelS8
z6v`v~F6`>#&n^fFLVn}4mBMdE81%NB`xOy_<qv-5XTq)>&!)N@bfms&)*NT#6ob^j
zLuv~!N7rWWJ$wHX@eM6jgVNdn*6k8dHn0*Ns8*oIuV!~d&OvuMI-~Cz5HlX>iY+56
z=mC19rOVBKc}IQsbWB+>M7C4p!p0VmDYdG}$_zr%#fTH6&-lX>*8#6ZN4HYLb7)DB
zl)-48m!dx_>~01jaJ~cnC7~3c=gigW0|r(6pTg{!k%rHIU!yB43^{8f2C9DQ!e&qZ
zTLA2S98N8o>hP`OJ!kxnxLJA_<P>fR%bFuS1y?t--#4+FBX?ob4%%tvT08x7<`arw
zGu-HLf@yX<CRyG})It2LvlKRiMMD6gr=D$eej}Lk>d$A`-?N4ukOSZEENV#Zz77A^
zc&j=j-6~QGxNn*JEE*sD0Kb$#QU`c9b)*uDKk<1|;T7Z$Ldl&joAoVLl@aY_YR=sp
z?-Qe-q`tn+_-DVRe4(X1;I5k;!L<TKFeEqb*}Qgh9094dl{b&ufhSFQnN|q5pEvr1
zB-uYOubttis4bs75gzP*+$vz@Ps@q&dsDl10WYi&UZoAmdD)(wa~*V4D9;Az%AYBM
z#UUQQo;!=fT^VMBfA#IE^g=*B%87bFt^v2Xx1P^IzLJb^_{x+7DG%<`U`tnVY9`2%
zhFqb!T{Zv%2b?Nlk~+XGC^)1G+&<Oxgn|=}y=}RzF^`XeLBfcX)c8ot`ja1)2Y$ID
znPt<nfbpH=-yA6!suci%aDcj=Q6hJ|yisxh_}sg^p4bG2YTDKVfQgJpg1&EkF7p#8
z?ue`@Z9R|!kWa0zgIrM0(<M(hFxLpPQ~+>70O6+KXjd;<9^jMwJbZe0t66}-fwb}p
zel5j<x1hCU^4)7n0iw8_Q#1jkyGds)sp?X|erRplQX`V3XwLx&)ng@w0dtohQYE2N
zJgB%<-DdB_%P}KktIJHAb{1j0%rQhF+o7MqJpl4W+F>}c0U^f-vjB^?*<KMQU*A77
zzZn2LN_hg8y`^phdTyn3kTfVFKCEu7f!~l1!Q7-U&5hgBj7Bl1!^R^Vd+z0<o^!-a
z8cz12fZ$S$X2H(Ic={8~1|{K8ubyYgceEMas!7k=*@;^O-CIS!W^PUqX{D!&2!+!q
z@MBLTVe<hQZvkXWNKJ0jeH1-7ds(_{qcHNFXv)GFXRSZ=m;{)bv(5|1DkKy#N?KdS
zw=e~W%_7i!n_2Wa)&f10DcM6-3<m!DYaMR$uL2=j)jQ&!e>QgOPK+{dSY_~)nTT}b
zKF{p{_{D{)t2h8XF-4hril_Q$-5j~ZO0Qy}6a-ni`HLfp)Hy`R@vt1YjOTV4q1Q)!
zIYT|PczU0Bu2W_?Y6Kma#=&kQQu=kDsA-8V>h<?Z>y??`;54$rws0T!1$XH87LW-G
zdjN{|1>Ru6@)UNj*`TxxaNuWoOT8)9sYiBu=2)~7T8fwt>iHjGJ>>feeqn~3_9wZf
z35dSmb;jQ}lN5)CFa4V)p?|AhCK<C-1ok6o=XREr{vuTzV`kvro5m-!p!cGt>w64o
zU-X45V`Y{%NXB;iSsCEu-KI_=E<$0sTY`RUJ=j$aU#5EsKlodIj`SIbL8|bw+J*BH
z{{!Z^i<|KL-FFU-Zne4v&$K5K_z2e>x7n<EBHQ&QjbS`XAhG+gccH|w;8^d2&%sz7
z_38U4@!yJl202jA0F>5))=4}V$f7lwHHO9cbK%Yd|GC?GxeNqkj`_CdfEhVT_xCbQ
zf69{DHI?$uao@1M-7C%?j{0AtRedWy_J|}GiAOwo2LSLr-SYOf4!8YHJ@Fu+w<P=N
zo$_8^&eZ4FOEyJvq^N?a>Shp;@e}}^1Ek5iG(N{F+|U2L<O>x1AG9yWU8D520sAQp
ztv?`chiD;nF2^=aFd9RC);eV<h#}t1rcJvY_iaUm=^pmt>fhuVT$o&M_#uGmP7PZ4
z9S;BiM+W2uh<LHPVYrGUW>UpLSl-=f-L(MT_D__(&)l|IYXUGNMGy>fPtHT{40`~E
zR3xmo8+y40p@1Lc9i=gRMg)Ps+CjkA%Hi$bJMwIp8k|^>3qd!fEt@KbIkir+L$d2q
zam^e?tVWBH4mZ6Dy>@N4)IQc{)$M;vMaa@;XEPKufnKwVuj@-~nyj_!!C$VI1`4<{
zBD~R2=)bXI5$tlfi~A!1aLx_;DGZcT5H8G+U{1X8qO$}T=S1w`e~*~{&O^4-{7qC?
zGhmx?)JM?z!5^s~o#wd~D1&UT&zouPX3Ibg097;uLWpaXpo!-OO?mYVkhg$5X@)q!
zC6|+G8LkV0l9mWclpXYvdV8r96gLsc({WYMy2I66TgODY=g#v`B=UQ+LmUUm6(B>h
zUjQzQ+RMU&Ahaj&O9T77jJ^&o)Ad8ju82oB?av2{c2g8$jDM-(SpLlm&2t;Iyb--Y
zFA5DbOCR;gBzau*6^xffJ6r&LBMLnu6=~|5fU@puSZ<$ymW$bs%Y!3ZlAQqu@F5DJ
zw7dp#tISIQ^PX#pah}7(Lr~iFuEdW7fZsr#;qe80e*D=GeIFtM^#KYH97YfFq*YPR
zK0v!7qC_)*XcWW8Nhv>iy;pE2XsGKP!0~+r5?X@wV=CKx3+vxW1m63^#MEQju0Buj
z#R-1nBe*YqxYQ4FY4aXE|ITgMl%62DFDoS@9p_fyaJQ5gD*YBUPTY}mm`^7X0j-Sj
zH@U9EIbmT0yLviie`YW^&MOs7M9Z3v8L6VD7NDYVrsAXXx)_H{%d8<QJrQpx+CI}|
zJx|6+YH6(E>OK=PUv%yD!KMqK24;L<G@ryvF?O2NX=9j}DKqZ=2~GAIjYe@ENMBb#
z7OqN7AM<vq@uwzQnT^{^-pXlmZRpCE1hJ*2h#qXaoYxak5^(Ud?Oj+Uv6wAm%fKS{
zC*k|Qh!n#rFJ{l+x_2foAmOI_Ob{x~r=nIpL%#Prh{J72JDp&J-)XdkV<20Kcm=2E
zan;Ig@+8GLWYE>7F~b;RQ$tGb8@|jKdMjyn5Wy)RYr0Zqu?u#Avm?^!s`vu{ZF&}G
z;t_e#JZVVO6yGql^>%`L+VvNybZ8+*Ah;2mM9hE;!qwBiAHZ=SF9@Jhs=iL`X#&U+
z?|P|sBl=ihmr&P!s%L!@D`clX08udu#M!u4d7AzLGH2~sc0qE$nU0@{+eFtp!Lf7i
zjo@QeyJDy#yk_0t4zwPvi>3R%gs}ir*W3PMdmVqH%V>0p$bVh8&Jm~m>>{2MsOff$
zzt04p?nm~bxX6wGtxMyey=TadLSMwJ=`YB-^x6!MvBZTSu0=_3FeiD6Jj4s`X%LEc
zw~Q!YwojtGk3|vQ0zK${uQB0FXJY_>>rD19=OFoBk5)}*=5I@yG`O-LzJ|U3c2uqm
zwvC_Om)_jI4){FPx1R4~iv4d?rmqqQvVTX}xf=Zk?zcVSkrs*H6h$%5z;UiW`X|uC
z5Ui(xIwE%SqDhM2*ul@taNjJYzl|4wTFNNskt)EicI2iUcR|X`$}d6zl9v=^5r6&s
z08NLy!~MJ82TU-yXzGc?Rd^GUI^3EyeRcpCD(0KTDZ_K4(L4iA54>s~L1)klc3`rX
zleoY1o_loLPDtW0r`IOBvET>jg&JHRoP_#h5a`G~&1zSr(C0t>J=${X@d4cJ0nRS?
zg%zS|n{{P}HDpL4P^cm4?*B>w5bL~097jvWteMv7HH)%ZNx#Wm{R~D&tdN6_BupWD
z<0KJ~&tJ2Sd1c@7kreIAt*67dXDZ9=hH+|r7ulPR>)ti>K+}oy_9*_h+1=`QH-ju0
z*YvFofnIn##g7HSI57%-p%c-{24GAIeLfi?z|z#N?l*$)Bl8G80N@;bnuaCLYUZ}{
z?>2f0v+41HN%7nyb7>c3qjl43^92EEzdjD7`txVK4c{q^H*)PbAYm)pk-tp<#s-U@
zS#NHim==(g6paB-b}~v1m6LIAsJc-;)PIy=t4ni8b-@FB+-1r@b%l|NkQzh|KfUgF
z#sdCPqy&PS2$*S68eYSC`wKM>x1G+7fCLv=NA{){-smx7ruaz59>wo5{p>MyMUw)<
zAxp#@E!Gl^(o-1Z1aA@soNBN7fjAp%^V#zhgoa=sj$31|D-kK+vZY_t`+t;{IBq26
zKxA=$O<g&cFsa-l^#fOr|J2eB6*%`(a-g8O!AL7y;9+^rq$kr)Jvl!kO`>17k5-gM
zV+hCznML|Ip)}XL=FT*S9a$n09m|~Ubb+un5O5LLuYq~y<GFp#$g%)|6A8#?WDx3X
z8Nu@RrU&bzP4AA+Qg?g{Kb$u?#R#+fpxYFi#L<3B$9g_70=-U|r~YkKMH7)S#p|DN
z8$n%adIF-c36^DYK1FcCVGv61D<ka4w6Kd|1RarFPch8<yezoDZ1gm8Msjn{Ct-la
zE<H7lq&aaAB;?N3iD^xr3F&#tCM3SU2kp}CItXFN>Qd{wp|@<>L^z)vA1e)j?Kj|#
z$_pFVc|NP;$eB|sc0H)mv9k1?N5{F<>3vP4RxhRdTL5IU9kEP!vd_Wi{7TeXP7{fD
z#{AD9C{PvE;6(DMecoND9XLzRq5QT=#`9R9(v+RqF2oda+RM*VSYM`4FHX0N!BVV?
z;|PDldYBb=SS0=d(YPL~zQJ5^Zz(_k?$H{?u4H+dbiDaQu-m2U2MxD7PQggE2als*
z-U8Lw<1--wH4H}!x8cjBQu3QeVh6`+mbb~OrOc(_uEefeBxBOA?%DIqjkIAZSs+!1
zE=0c<RlQH2nJh4CYGue>1>L#HNB{tmEZ}8{i9Yt-wQySvHO9xR38sLcjK&Z$5t!>6
zWZ4z*Rj<Ft9(|TAk|CB3#-0a+1N>Bor@M4}&?pVbYVY&UiUNGXkS>~6v?-lsM?sCL
z`_9{QrAiEfe2p~pFm<HdL4Kuv53ttvb$ZAX)OET0)UFmDP&K5>4Q`4^JrN)=egyoG
zOG8>u^$f=x>D`PIH8;1Duzp%Sbgxy<z(s&@X=4RPMrL~~eazm36{VfR_TSyU?Yn=2
zcZAB@!~@TbtFfN@p09W#x{A|5v!;X_f7@k``R_>#4$QO(oCes5O>eIwf`Md6)|jV^
z)s5iy8JpW)&nqGpfI5v65hh1}uQBf0wkg6Ce*oW}nB`8~fYi%@5p*I;ohy}705`0V
zBT(X!@;jF$oY$hJgVa08*!gxGOEwEpjup!;3%7@jxu_3PN04*%Z4-eRjAX7e%bb*2
z`u!^%@BDVXy-w--7jmngNZnQ$7BMGvS?->@ggkUuzZ)dXN#Q)k6=yS66k$<0D7?Kk
zaD%Qpo~ae;Oa1dSL6)<U<8^`z3Bd>N#qDdKJ`?o`-x@8bJea)IQQ*q3a3(|!M0h>q
ziBt_#BhP@NzM+}rz&17;>@U4nfIeM_qDgZIk~I#(owwcpURfJ@V;YMh|5XpZ?@WJB
zsV;!Zmtv%%CPLb5<25Ki7FO2!ypzgLPZw@*LDS45A=>9s1s@dFXHVC~xU(C8?9;B#
zHBB?@n>;8<5n|W;XwB=_*m>LA6X=P1;>a3tnz}sQ<pc%cwKpxB<~g_VR)wgXjoWBM
z3~_ksD+}Y?_tSNsi5uH{317hb9h^@vmkG!4NQ0sm1_T`ska-a=MGAt}JU3hMI-KvZ
zq-DBs3Q088TL|kSl>M`b$TJxBPN~*DrGt?6TFL2^?RyUEOfq~34jQ7FKbWbr^ei<B
z5ZCo1cK>?@A+K29(l~W^y1C8=AS%E1JVi@a*Tge7cia?B(uIfzZvVH>gk$7alfH9z
zbQ9DSO~*eUWCjEL@uwI3Hy)G%!tnM;X_)SHb)Oa^6p#>BiHkDKBn(ZSVv*dl{J!`v
zv<f2St?pASJ-r62tFjZF<3*nrQ9GxfvfBS*_KmUhxATod3BYAEhI*bCx$XB2jt4Q+
zK(l#A>MCyCw<0ka;)zs*zb_5J3a|hWqR&AE9XQV)m~<-JO`7R)J#WAfulfvKN7|_Y
zy4B}-R#~0Q|1E=nl)BPW*<}+HUsbo8aLv+|)@uSMSs|F(?AUYG`E<4YPpV7-l}rm>
zDYSU-aVC8OR6?ZQg%HGaKtQ$dSFN~J&l4O8o0HXlA4M&$`hRxO^gq!%!zTg#bXn=i
zz>A<Zrno!k)*+hLfvSHWGX=K4<`KZ^Pg?&mmUQVPdIgq)=Jz#*ZuXqWODm<{SVxGa
zSA)2L*eIw!4UY)(VLlz#Xo|*O=&?mx$Y5I^xnJnxEjxcC>{<OzTQ+hi#=Cx3_D>xG
z=b*oe7!YOu_`}Q;mV3?V4b0SHHBLnXoa&#<&e#q)?9(McW)Fe^z_bC}%tVc&RX~@>
zwn3(Q`~cRp{HSmFjdSdNnziSdFQSR;n=IeCSfughz2R9I9Df6Ni>Xf|a`ngl+U=n`
zJ^NipN#nUmA&TSEO_C0|tbbEG8Hr})rQ41i<2+Kx*qova|6z?<=vXRg_#oSSIwc3k
zuR58xiGI$0tj2A1Y_7ifHv9`+1J-#xGPl$WV{Q2qYebmi4NJ;3Ajq_n(RGMOH)^RJ
z_u3o?q^S<$M}kp^1OPZgDZ1s>C*8{9v#&*}u_d*2GB>KFXx0wy{?R}Mz=?F__x*4Y
zMln*wu{cB#Ne}b4ovsVqz|fHd^`U-5G((-**&xYpZfN1_UcJV^;dUUU2jv>jw;?W<
z)tn#$vmH@&RxKRP4Vr&S$Q&Y<8N}~TsNhsfBGNhI?4!HKZsMvoiP@FYOUE?4Xd=NO
zkKaL>#i#mNu$vyx;(2COf4da|<mMqI9p$iAD&}jz$~lSgChT&%c<H7tITlUfW$Oo*
zB0D{K?K9==Wk+EKmw?Vq<CCT|LpE}#v(S<TDl7KF_VDj0yOe+!{)RM9HxVxr_*_C5
zS(|E5Fb$Dex<!*z)T}-4IOFg#`|Xnpv+Kocz(wRc;a*|YxvXzk!d>)77-p_*#ZT7|
zA@{DwKONxS&87;_%c*of|2>1$<2vK(aJ%s*<ok`=d@|J_^6xO(zmb<!oR+Mn)3~b=
z6M^IaSgR=~)sgR%%Tybp=F;<R5&SW~VHF>N1f8u4PMnVC=6KvnEoxOwy87-du3fW?
zQJWcCt`s-*(tajt+O25wHE@~q1g+a`X(Xc<)sdZj4{r$It`p)%rWc9t&9eZ6f$N&4
z-$dBQeUXsH0%O-&5)<@qJuhekzUYn>fTOt7b3;1uvi_<oVuU|$)f3ks;FOp?Mf6~h
z!tWf7M?O12j)ooK&A+<{ieTMYYMD1nwWYdHQ_-VY6o30?8aj9mvoiy7ZP1KZAT#CY
zKJx7VfGcl7{e9#^YmmPo4aal7S&n>N3tIzL?hu!HpJ}%TIWt8)R{Ba5&^~EOu=TWQ
z2IzB3{AJ^0ea@`>*7n;V6?%r$8Ox{0zbSF>*6)C2ayHXtcnfX6+qfxcn>EB?T50=<
zRn<T@=f5#A=F;aDVU{}E2HX1>(1GJOne7@JI&MY`afXdc+Fr*jmGP0RZW*AaON{{R
z-dAS=$`~0zS-t^BkZ_;$4nXg>Cn@=5`qMRQ8-DReUw`-_q~@vHj-mKkf`Dxxg~;#w
zHztCyA}T)f(-!K?pAEebhL>p)1gqe!AS7Ph-9<#pI8f7b`Rqv!I$AtuwH)TLhEssA
zd5E%0iB#bE4A6tT<}9n}{wH>2jmIibQh5cV4oKIvw<;c+12~jp2BhtlS+D~_>#mD%
zI1Mnu&`tzr?dX%p^!hPtv?4{EUc@1n+Go6ZOkL!UD+V_tq+QmUlc@rX-S8IUD{Kz7
z7C-xOH>M--0}vF<ul@aipZ1-XvRwxr>s9Xr<$F7D+wUhVq_z1g`TZ&Gf{|qDkpl~a
zm2^<OyPdP71&|67c`|NI$VvzlGKO#&(z0H2oIneRl2Tp<3<XIyv)}PH&>|U(LQ<hu
zih78dgWX<MdIDIkvt`9XQ&3rO$6W*{)A1ltG;PUFGq(rp7=J&2kH9(U)o}VZkEou3
zyCtqGFf?3%|L*?Y#=xq)lQ#b<v^)4rn{uSB$}>0%m@^rHo<2cFhb(s^_ulD02DJ%?
z|BXp_E;Tnpd1%;*&*=Y%XBs-76e_ys`~-w>8=ILbis1C_ac8!|d(@4Nn=*G)Wq=-t
zkWkaK9a+{CfDs&$`KPqH5kq#8S<f};2W)_5>WE`WcJS7~-CcS+jSkx5Rq%7bKebjz
zculpx5_{@y_@Q?M=~1<}Ae6*~p6N_jpB3m!gbui;*28BD;bvfEsSc;M0X__0*kD=J
z?WeO8eEjt6R%rLU^|nJZsIyI@V|HBf_-`PF4w;|PtelXmp1&QgeKA6g)p4R$(q|eM
zFXDVwzY%nwP*bf3!NP#7O*4`4M&uW3$w6D6A#tu(FWZ2v%Nrd9U}@yse_9QWT?MUv
z2i!K_;MU4Bjc5j^?{Pp<G71T*fTK6`hF%}(T-oo(Ki#0x<{&xR_(+AEd)wtx84Z9{
zoP_v&fXAN?X36kI=VE;lL2HyfKf_`D{;z(}TPtZE(|S$FYeD8k9R1nLS1#+&K2|2|
zRvLH@rUA}<a6jIlWM22<`b`gGF1h?Z9>+KhBN=vT;ViKfcQ4LS)CdI+1z}m7*+Jem
z_h<i}#Cky4Wkf!7Fx8<Y!+xc;D0vG2Zug)6?Kd7Q4yX!BL%{ec!m78BI)ah_pqVr6
zW(;4TiPQ8?>k*71cI`~km=|8B<c>z$4pR!FdHf3~9VG3e2nu8dN+Sz3j<(0gj46h+
z`X~}M+22F>&<nRT=E)LJxV?|(X%s<o`$=m3a2TFw%AYC@u4jB2{fnMpWB<JiV0s`z
za*)7nD>Z@CGpNx~|M>S1$5_DHf8&8izB=hheH!too)5&q{qFNAO*l%5H8XvlS%;Fr
zD11eCZq-`|zGPq)sqt*2kY<NLfa2znCVL$>5i4lw8yCpC@J1lGxy{Hfc-ibPWB>~H
z+%)y|I3sZhG0vbaAaI6s<$4inrR|8A>AIeOM<h=7jqEl`?<QyDnq%Y|!>ii{P!C;4
zqI-OOJIxeJ9K)OgQu49|4SP=TC#R!w;d-W2T%A84JO<|B9PZnsE9dL*&1>&8PJV*%
z2&YRFhBL%-vOX~1Xch%Iyw;imPn&tjNbx}yoy|-cu5$6!q(>eD&_&U8Bs!gQbNY7|
zVu{%q6@GU4hJOlx%>m@-p568Mn`1mtHK6)rw$m0;CQ!p03PL#gNCa(Utr$eOjVA8M
z-PRvw66pQ&he48Sdg?eQfNjBvxU!=sBj0{AwGCv60I-*pK`k}Cs8IDDVyFAMkwK^x
zA;Y&fiUAH7K7Nv(z(^|FGa#<#ZHsYSB77S2<Fx$I7-BQ+pH$RX^jI@Hf*YADEirh*
zAEzF*9u5nqRM*}xNTM!-nfVP3-)%lo5{iaq-Td_f2U(Wm7j2ApGy=cem#NYs*|b7(
zTaO{&d(SL)0hgk9Z$>q#qFiElxu-gAxTz1=A)O<I>F`s|wLKPB!<ka-8Xm!*6%|yA
zCpPuZnys-aW}Cmq<Gj6AS>dXKdJ7IQvgg;7q~K5*rX>37n+mxd0~~Sb^>=)Oo}Qit
z&=^PD%t{ZjU4EvVDUuv$1$xlF-DP0sZXBaxhQk~kY_B|~RN8D!PZ@$q4q6e(BX(z<
z@%JE+-j^xPWh<<k#z(kqbUf7O3qnR1Z5;`}pikMo0)yK)DtZ@W6mTtB_(6(b?zYOX
zr>rQo^;vz4zhc+_eqfpfOi3zjyPRSx+qegzzXkV<n?#1L5{o;C<^Q@5=j>q%Q3>xi
zKX27I7XYo^1<Cg(m?L=$Npcx!S%j&SpHN~8vw-Vs-*H^kT%`xpGpiHEGYf}f0Bnk#
zQVjJjZN5gw`&h%1%PJrSwywPA&Q;2Rw?%wiJ+@3^wDG^yGhnuC2uB74>P52OI6!qD
zD+5<47$!PUvtEz~vkwCV?*FGriV%%=qWxiJrt6##W5)?4>&7tLK2w~4I@?4?PoMjC
z>c3eNK<ZwH(NPHOP#phO>~W@w9!IHohrP(iPzx)GsrdIBP_QGsxuIN<3w21lZUNK?
zr=z}aF2*CrdFmL6ClxYZ#uL+J;X7%wGam$tF<IKz{0T?cG0@09Nu%{PHqg2hB;AZH
zU85~SGq8XDvN>+xLS0v`+_gGyv^*3r8p9V(y1*zh26z%E{?L;Y5xA&7{eJp6gk_7e
zsVoAa-<KSm_vjzJEvf>qw}!dGZHE4X{9n*6X_ZkyCw+h>K0Ca1mWbF0&SNYs5Ky|4
z;`f|vP-=A>WJ8a?`t~F_;%!`dRt*keRUiZq$Vs{ol|3lSGl#1Se?FQIxHp}d-9IS^
z`rv4hB1D6>`x{U5;9$m(vIXDn8;KnYz&p&(2tTFRWp_NM;CwNvXTT2=iC-$mh$r7R
z(T(7$Zz}qx$dZZ?{9XaD;{{dcfUGsh%GKjNh>A0JgQ7D=5E-e!Cpkz7=|6nzT`H0{
z;+X7$fMdsP`p)N+iSPY@W|%Z@(rqG-Jn=f7Kw!O^<~^5WMwQ_!u&2Sr3Kf+jHF=6$
z=RoNjJBQ){FQf4DpJR8PdQ@}F#SH&DNUeJUSJP`N-1d|P0OwSC(572%G#3QJfqC4s
z%tM@e(pmh;s+K;B7OV0&8UD2gaLfQ@&BSdheIacN2ARx5x{fq}U)&XKymY}Sy8)VD
z(`C6QLXZl>j-KsenJmj|3;~&8S|tY{m-yTq;{@1^UXLxu+G~^9E?OquXbO_OZeS$Y
z4P#5ke{4Zhxv@P(^Eo07M$8CBCN6vW_#K>Y>(>ax<Yo}3qUvavc?`ga!QK6|Y4OB4
zcBxzEh~sX(r6NFYD;b6h?g6Q#*oD9%I*0#%O7QZX7;0~>&TLcF<%nPTH|K#@?LQR^
z-;pY}7;4wpa14qWS7jY(yvgPg@Dg>?7TFewLZ-q7pGPca0)k|6yiyo|GrOYdAs#x9
z&*!OmXKKal1XWKL%9ndC@UT|=nh9*8NaDMAI(Uy}WVbUt-)FeN%9;k-ZN{*(OvA42
zqMyc9#e>iQItfCFNcK(3EU(1HGl>?38{*ygy0A=huiUr25j48CAYl0~w6{Bs;54RP
z<v>UtMdmzi^Ens2Yzmr|+I?ypaUrA{8-~DkUJ7qVFl3-%^$@q)EqTFk9LL3(G9wfr
z<<X_K?kMP8mlo^-ul4c1sWon`m>G;QD48#b1uT5`qX$_=3S(zMs<Z^`&iHwNuvK5B
z;0OFbp(M>%I4vF|?cg0}f<Dt<hzLUQsn7Z|J}50C9kZ_U3;J=eOJb(aX{nP$nB@js
z-=U9kq*Lf?P|Ta@+Gvc5=PhH%bG~EXEbB$fg4YO;F1sLu#dXvD$Mqe#Nd*JhZ-S~S
z!cp6(V~RKY3GU#`no<~XZmG{0Jo)4FLj;+sEV};Qg3B&MGbIW(JpM_;c;tw>HA>5C
z=lN8Q7DD#5^GNttYD(^HhvP0b-MFT*WG^z<ohpKQ+GaknR-hW8zF{KI*H4RNadUG$
zIZaTTWp+UTX4iR&8IH~sMc2}R%N#<4NXL!Hs+ciF;h=4l+;cl}b<=mjty;laq^>+2
z$cvF(KZ7NP@bvdM_oWp8@BIxLzoE0^d@~izNp$&4k`53no}nJ4nN-8iuW36#9}LVx
z6ddF6g?v)kpWX4rT6mVA&xsu>yIO<-$}Nja1G$_FZR#g1%5lmhO!Wj3*T~~coR0B~
z+3+jZ)RnAU;~q{xAn+_VVoXG;)HRVVkK2?N&!0Zi!TmW;+%{)WNNY&BV!u-4pxxsM
z+TRDkXwmciA*d{D;u};;T>UAlRs4YYaTGZ&;yOPQ;kAD|lLjXS?ix!K2M6_JU00qR
zuw<uya+(EM%EUzQ#xPzd>0VE9c=Z9>7bHyKwGJW88WpEQ!^eMZS(;yHxQ}l%@etxa
znCF)v-*oxKe<#Ea@yul{A$U{x4a@${=|rsPW?%NqQTm&{n+;)aXyS>x5&ZKsp%XNS
zuqlnN1MXU%V@D|SvlCQDJNJ!|Fm;b&Ivj_}u<p$#(v4$jks@#;JYZp!yoo@8Mk>lz
zgkBjG$-Up}G|(&!c{9pHRHL8BGPDnri;k+lhq&=L($)SxiL(P;;Qp<p027;899K3F
zfDBaw*@jVdJZLlT^KTvr_#t|uYQk4P@>?fG06kwz5{k(SN(0~;XBjgL{6M~Z0T_*A
zp4z&u{Is&ASU8h!>^7KM8j#qPW>`Z&%~ktAF6vvq?Ex1TLcS>nZs3mC(z68Hv<TJK
zb@+Ls3J?ZZ@?)5{&?YzV-J3t?oVeBn2v*j;3|Lg;;CXFcX!8PpJ#Co<DCjj-E-tt(
zowx<=?z1=T0a^(U84y6G=bFAYNdnd7Q~I4mfEl1HYnkmkVuoyyfOd|htt<h8tLw6O
zO-$>Hfx4sM%0CYSeE#W4k5nN!JCLR)EsM-%SHC%6jN~j$ntF5kjM{b(GJq7(6v-PL
z(y;e?D=yG_+u_|KH|gXW@fxp`Ku(E2&hhsog4E$bzFo}X=xU-aQw79NO(e~zi+!8f
z8J?4~EK<cO&5y3*fpZ-kK^z1Q66MTRa}3!OFG8k;8`qfhW!il?zy6sxA?|b|r|E7&
z)(&q+pVcm1kfZ}|$d9#wf!$yTM^1!^5_emoD3dOU#)-V^Wx#@#-9V&ftjyyEWN8oJ
zDIqOrQIhOR@=oSdYoq^=krb_iM@9CcaFIODwGOICm%Yfubc#C-YwMbi|Jk+vp24pR
zqn`mc)6N^AK=2QHnsT74rSI_!YA@pcM=}imi*)jvoUh@~xZ>|gq+Q4DPofX;V{4ft
z5VjV!JVbn(m@L%ow;<_B;g_||QR`R90dMGyH(Zc+XVffa!qLgnnm&F4hUnFA55|uN
zE3~w7K*NlgF1NWND3v0RTZAV~`|!VsNsP;Jrk8Z)|HOkrVYTNw4hHJ9)O4Gxg(V;h
zUmyI*nByRZ`1tg&Y1r-K$KE$bpUaj<oN0Av#!SICHZJtzjks@3t6|ROH>ZhzA3x9D
z#|(M;>3E+dXq^;uE8np0D3c`!1yE?4q3;OX;=L67fCPwC703eD=w-@F&WKll4^{yX
z5W366G}k&^(vl!^To<0#asnM`-R!Z1F&4GNejfmKQa%zvf%@G~_oW@M*lY$_X3xRz
z_>9ZxSFJ}VI{gRB6Ey`G;_|Hh2At4&hS2z*sxHP={0Ak7stMIVahPo58XTdCRTYk*
zXM<CBeShP>(zIobdz<C+*b@$mv`9vyzq@XcOg2^AlZwg!OWDk&jnMAuvM+S0g0hDm
zFGK*iLw3$^lhbWR#E`o2(aARmaZmtVD?Ry)oZg@OZ(DtuB@m?Bk=nD4y)~|^_nE*-
zXZZJs2QF?f-M&mu(|`W+IJLg&Rh)>cQq!v^j(up{@%J_M8T&hlbeZZws~8Nn=iW3k
zLK=RMh5Lm)g#9$j5gk81PaGBmG?OkA5*T;)%yn)#zP+)8i<zsoc|H!Q@vTp;U4Z7y
zZS>P~FHAyO@C|%H8^hFI{{bLGEAOnqFf+lb>1jQVj<f&K6q$GkufKpVFoQXX<Cg2a
zyr@><r1+{j2OSB`PgxCEjgAk7{ySvDDE&Ow+Zy*Pk8^g2{&_g>#D8wmd%)>>`-6kG
zO)sCXdE?$vfVgXKgheyhmVtt<C`BhcQN&O^)Kw4V>!k!T-ST$7aV)>umC<`(`BSqN
zx5YVLH47PVxU00n{`(VvF1?q7gve52S?V%fTD@ecHvSM;w__x1k(B*ph#J?Q)d$cf
z?O)lN1_jNTQClSD(VKr86u>H1GnTqCQQC78N0Ms)F&Vc;8czC+_u${qiRH34)nr*I
z-*tw42L4WpQOGcDag=^k@gU4f-DFX6z|~IKt|x{a?i2mUF^1&y!t|`Y+$Wpnn;X-c
zNf>-U14I5jXN04=lAa0!(c=!alxQl~lFd2jtW_PEb&0-2_wkL7u^qs}rw<rUaHiAM
z9FF00X$IEVUzOx^JP37rj;S>OznGEhIzi{+8`~<NNP1TH;_T6HSLlBQ4>nVxX(!$V
z@jzSv2wgLlSjVqsATbd))7xdB3y@Z1NMbwS>Ra>(#qbnzO#c|mn5IP%ooC@!+_nzR
zYEK`FqEogL&67F`j*^`MSqQ`HZBz|zsA+APdqB=ddsFS)nlqNB8LtM|PPPk=>tKO;
zqsrfS{COhB$RM`M6UrW(M*saQcjKLFSJq1U@E&n-y@DXd|CT`rctX?}_`OZs=o$4?
zQD69{TgGK}0^uLV@~VcmU3p&1+kt-Sg&K}A@B7+KA%R4j<@0iu2aN6SQDjlM|6k}n
zfgZjh0EgcULTwCc-5mbk_PTdKZd!z3Qxc}u2UH@JQcVk<(rNvv*t!g~sU>PbDG*g;
z#m_Mb6cgEYKCM0G15i%PstGJ-czuv+(CWbKrpTXmOFfH-49A*U)r!*|d?3HsZvYOL
zzySV!gAitV26VFlI(|m8@Pw%VCom?>JMu721R!+aPJ-*H#(bj&tW?zt&yvf}jb~&%
za)x7fL!c5(b+n#Fnk8ia+T%Y_F0)kRX}xy$b30%MJ!tmVa7>3>O2C0ur%|)Ghi=YK
zuYyu=p9Oq}jNr<BBgKP#7b8&{5evLjgI2<o*;-y@_X{c`PY9SDIH8#-!;%JIxzuLC
zjMCQAWvleSZSCJ{TxHZ~3K=OcTqi-i{r2PTXUVXYRvv8t&Zx(m0(V`P!uIa{O6p2!
zO_90NdRvr{G7-(xr@_11aQ%r8bfhX>QacwZ?#QxBq2Z5pXDOih>6u=3M@=WKAU7g7
zb&&G6Kc)PK(NI~e$w@87<r+iPQ$^d=$+`aDL&Wp+_94a&wiZRs2)}qCscYhL0-}v{
zPS141Wix4c12X54YD>gDpqHw82EeE@?x$o#jWe5|n&UpUgkL0b7qq1XVpSPU+!$&>
zF0^jXID{z&DIo8?6YC|qte9Lrk{;al=Xe7Xvb&rg-|rlRnm?V>?8nNo1At`O{fuV$
z{E(c93}3?kX<g^olBla9!)q7GGgR{$50la(h@0`CRoy{fiLC>{88dOqz*w7rJ%SpD
zY6yr){P{U6+7M=xn-Y;=sOa?fDEsXY&1Ku8-ISu9BFMg74qpo|qJoQ+E-x-p599Zo
z%dS9`+PHkLTjyIf3BYQt|D_Gh@9nqn&l6HURm*l?4wo(AMQ84Ef;ou^N2hh+`TK@-
z>c^3Sx<#SAIZV#Un+Et^jnexs@)zWek3dgEE^$KMMmoLzmR-JY;eeMs%d64B0jfs4
zVa$`BM^2yAT`_IP-RXWJaX06V<h(wY3IAxmt?I=FKs5WZ_1E`&FRI4Vw6zHyP%Upy
z66ihyfgAI71oeJpk%9~p5aP4mHdB3RhhJcN6B7~k*~OQxT&4|~hKrzX_(nqF^Tati
zrX~kEQ`3@C1@e5v&DLR^KAlOnWx#Feo@vU81^;}u$9zKM2)%j+6*2ota`kv!!Mb)0
z&>?V*H?<R233@z@=l^8sm{m8A3ud~E8}r@CYplU@dsbJ(d`Q;|io8hf&Z=GAc4$u|
zgAf&W;p#@mK{5jjdwmN0_rC`H_ZdXQ+9!N+kXcvNX3aR}Cq5&jRzr@{Seta5jvS@Z
z5G#^BVy`CgWgr^}C%D^(Yh`)?j7Xb*L90@?Qft@&Q_+O?8PI`U*vV^8Ymy{dPBbw`
zqS9rA)#!^ZZqJ?r%BF)(j$WUSU_thrLm%bRdumU4+@}iqYQj2T!}_=8n1N(RUphPI
z9#eQNK@Wfu%zzyJIM=Uak)k3oHa!>xu0dBjX#u#xD!tjz!+pnHcq+Cj?~g$(NIP<y
zRIej<bE@eY7Gx%R1<9{;o%~Ck#GKZ8KQOpLRY8N56T)T`mW^jjsek<w!U{Ce`@JK8
zi(onU!Vjac?e8HLpq->;IY-W8PQfoFR_<mQ5rWx~i)4U)<?QFu>nyPm%Zo+s^!c7*
zNLN2Aa5ev7kjq5_&Hm_EC54O>>%PfopR+Hpmynt{Q!XDljFVQTE#B`DBj`K4=)cJo
zFl;oLyp90Fw6D@1kaJ5xMm1|hOf*QfA?gFWyh#dVhNeju$Cmfo-*Z%ynkK9lE;4!n
zn!voQ!Rf~5pt!GWP5IgKJO*UpM|<~tf`EAaT6*po_YB}nWSnr~O17HUCyn*bY7iuE
z$B+75KzJ!th7>x;3rM1wybk9AQA>k)Aw~V*^#3Di*1Mhsj~jJ)BcGQCrz8H!VVpa=
zt_HOMo)(07x*T3B=uckghlBUO*SKyUS=S{a-b#6s9+%M~nZjlqB~lGSfF^)t)G={_
z1l}gnq|x_wt0|?-Ml>sfh>0cAtLK_(aoiq%DAH3P)3`bQ%)F$uiu^setEs>?ZhAaY
zqrW)hXPZ7n;ns2yg`c>R8y^)!pWEvB$%_9Jr;X<Ih#e4G8eaJQcuXIQTm<Ei<TkQ3
zKCI91jdRd0{DpPoDZTRRH_l0U!yth}$+jMabTeMTs1=7p5p~CmmM~KWqd<ad$!6Vk
z_e>{HDVo)d2&y%1{asWd7B*248=4swEkIFY$$;GEX3J+Z%OP{uD)`_~gmoEx9gouu
zEGg}r>cUD|;}$p?w^0gFKjn>M)G%Gb19$)fiRU1CXnCBU?ao7K3#Z;2Ym<nC*s^?s
z&?yS$wNTT#x92BX=4dEk4^li_#F4_LLp)2`Y-!JWV|d&iNZBnj2m$m5ZYRs81z3SU
zR0UNa%NC>oz9SxyEib#Wkp14s3(Xv|UhS%ZCPcE{<`9;t1^M?VBYCH%<;1;j<Ud{H
zM;PXw#qSYk2iRx^V(M?*`^gXuJoT<GQvy!q#Om(}Au^R?lpGH38t|;_%euR3{g`t0
z(-7C+q9u(-jFkbsi~v-nvDgQ#nRR;ai1<;|;fw!uZ;ih!#V4y!-w^R9K7P{&IGh;e
z_lPHm@6CS?(j0BJd7l1WtlepoUb<xCTT2UmFC>v}c100{>hn^Zq2u~Tt$Idz%N$-&
zmJ;Je>1pGC-}BoFj(x|e50dAq=@9w$NsPCx)^YjmcfMWB^xJ^fMHuQh3hhG*ODPyJ
z%if4Hr7RpWr75(mYMPr~r2f%=mcndm%ZqBKzo3eTl(N=QK;GZn+7s$KfBu$#&p|5m
zeR-~#Hv^9A5xr0-tN%s>CM5~Xx+@YJK$bAq)>8W@K?WQIaGIxLuvh)9ntWd)07|P;
zj2pW(@vQvc$1h)6m2K6DLq3afXPFM*?YSK+7Jl;wU@W9wH=l%&LyR^4Fd<QEQYxAp
zVXi^TD6W2J&?FI)!W(-UAqIEvyrNgpIpjDrMq<l*zwJ4yq?cjM*RC5k$wcdpK<iVp
zHt^-(wmgI5CiQv#zQ)4l!ZSO>8{>$)2HU&cu-<h1m{i#}f*c*e{5jknJVbYNOuUGy
zV9$~l*lIXN*p;#@ct3JskE6eY?r<z%%k>Y-r#+pyOf-cr|HhUn9k)N4W06l-Gz7qV
zZz)EEU;y`oAuaBm_M!!gI?DKV{XVsgRXN6BOm<q2a|`8Jar^$!)7W_+n)j#Hxy!IB
z{B6;xLO2QIQ3+YEG3-(5Ya)SCf)|+a^+b2q_Y49~zT28~#dONb5;5ED?hG^Q$uS~O
zC8^?2BxY+F1XmYw%i9&b8$r=-EmQC1$UsbXc#WUI>3|6JPvwY{F0?88`wcvB<Pl0i
zY3&&FuIO;BvPJ&OOw-{=7_a3?f8_aW09)EE>OD#PQP4K&gSCQ);*Bn=XV7uahX=VC
zyifmx(mH<OtD!g_rb#T5o?p)n5@5d6tiM5W1TZ4R;E=cPG?Ukrc4kRddLq$4JvuLh
zRT1Z<?hRfOw^=TW(d81P(6ezZebhcdxF+*FiQx;1%=W86>kUy;*4rlNF%GV-sb276
z{}e|CD?Ua~qpS`tBdX*BS=xOBJrQlG5%7!IF&1!dGhOEHsX08QClDOOB;C6`NG<g|
zLkV`*n-#A+2ujj|z`a~9eT+pM*lLzt))^uWwpnKxj=HW7XvXl9aaAyHRD{fb@B^2w
zn(6Z#@DzizASPF0y`D0p#COVqA}1r7o$(uyzf)YhSSecZW2WHonX5e+r$f(evn$HY
zzbFf>BcB#N9yyB>@kK}%Vnw9{%ioij$HLo{#pdL3pLAUre=<@x==c5j;m(vq0i~%D
z_)qXVf5mAU&VG9PFuMVVZ-Y>fJu^;%%sFlvb2}|Pzq8NxS!PrJ)EV7&Jms-&dRqt;
zPe9`XYJ^aSS>izi+&8u!i1w+?hXiqKYSxn!ljf|iX-iWx+OPb*3l(8C$w(}fa93EL
z@pUl4E+H*$W_t4)ho?)9%uZc!w49~}+c{94Lh=?!^4>-j6%i9eOEA&|od6I1=qO}z
z^ZH`;0*SO*5(&vjMm6_EY#TbHWq&taxFv7(bzQQ|756<#;Wq#guAv*2BnbEI4ENpV
zUZw~`iAtUj!HFQ)M;D^bE)-soV&Uix$G`*>7SG-|O1`5@z3zV>zmqFPd`n^-v4mrW
z!@zU;(-fK8A<=y#hCRS{mjQoA3j%Kn5Ib*b(g~?K;B`~?7sdpD&r<L7HAN68TY%t*
zo{%o&;gF6NqoCh*P2#LpT)uM|<8u5i`~_(j4#W>qZ1oTi{<D{QJBLiJDaPdyyU$X9
z009F`(i{BLgy%r_@1JI5ouB*cx2iiS>?hx#%>tyT&D*JMTZi<7&!OvuGxM$u$Ja?I
z%-@wj+O!!X8?9MR$+!&{+bkXXQvp3huVQoVx_qpXffmM*UDgI15x4ObJ^0=?JiiPg
zwy8^Dg&Jh{Jc&b)(rzG5^E7CaN)}&29G~ug+yUHGf@%pKkHl;t1mM6ecpRzcrlP%;
z+hX}a_H}5Ak?aP4q@?&1f=^Gw`*AJ<myW<@Pl#c2p7C#3N1UOBg)H>~4xFhG3IK{@
z$6jJ0phh)Dge;f$E@feGSk6{|R(`|Jhf;WL1A8(iJ84G>Wk~k(Jo#GK)w$T{F7*3=
z3UV~e7|BoNBS@7b0`@nj#ch$ALA7KOrXX@=Z<a}RMfQ1Bl94)V@gD=ajE5iv(|J1^
z<A(l&caHG{yEb5N(28G|Yl&}Dlg_ip8(~)@MlzizkhcKZ^f=KTJI$x?6Av{#Ojw@>
z80rm9UrLmJG|MxRZAkT*2qSD*X<4!X+&QV&MYo*O)8{zJd-gZP=x7=IAJzS~+Nci!
zfNpFZ52#7Jh7`&QB1gT^)DM9DfRzPk#!fd2Z5w_@IZg&8#RI_z_~9S#>jfii3Nb~!
zrAS}lQ2UdXrC*g<W1uHjT~h4wdmxSJqAWO+zpu6){pKF$->|-^H-4X(^q|nZUTc~g
z6e`GT<W5rlnMr?-GAGwce50Bm=v%LLac_~hL{giZ)aL&C0RdsX$P|dLi=#WA4gLwr
zlb$^ff<dwML}ZJdM3EcG>!fg1Jn*Tr?;}8X0!uWbMd?!>ExeJ~=zED8AH)?A3Z-?P
z8(q!2si9D+t%;_H^S`MWO}h37pr+D&;L!4~ANsd-UTF>f`;tBsoJ_3{?9y;=yZ)w*
z%xh}v6k1zJu;`*p!uZbop1iKyg*9bD(Xh5M<FlMZXo$e}+F53IB=tu)Dy^8!a#^F&
zLVqK%BeC|S=bni#rqGeNH+zeJUt`6CNA~<z!2lBbOyD1yBg;R%3*3Gf(nTv8I>-Kg
zLSo@b%cj*-ysJ-s|6G2)fjHh5&;>CaL6V*Kqd`a^s;B(s8xqSj)-*^gabGDpf*Ipl
z=}OkQey&$6Jf-2cnu;b@3%Ks_`w6bHwXKmVo{*oSjyow*w2cX$2NDif5XuTan<uAp
zBktBegP=|bXjM^f!v&G+yu!G#b*-9Ss9P)Qe4tMNGj<BZMM@q16Ez*2>r(jO;ETU4
z#g<#axiUo<#MzK!x;qTg3%xVETBUcf4BCW7xNHX7kg))Wr9D4fUsW#|=2Tf+5GW43
z=!<dJ`Q3zj{+ThBeY6AsuEFvyzn{>#Q(!d5xJkU9H7de#@&4ms;3J6T?<J>&b2d!R
z^*6rI1fevlAh!?1Ip=2rELiz~kr}8v4|AX7h2Yk@W9sR^eK|=b&gWoO2>jNXres8W
zsg{kkT-QAoM|s>OV{fsSgs^Os-^Rr25vU6shTE*wvUA=Qj7sbvsSZ$$R1^j6?@rIA
z3GwXXGwl6o?2r9EU~zJ(7_TeOWF{Lg)!*p-{cNjx#AKP^Ok<XFv(eYNoEwvX(jy+m
z{FFdw%68*ZVFINp2Ce5*a9m%50t^R7K{x9vKwuXrKEZ15HVCCfKiKFLjD+hvwBpwS
z{=o;xU7ef)G%*nnuL9jYk3k^q`4K5v^ja0uZX}QHe^c$>*NB*YgA9`XEHi@^Vqgo`
z53z}u9bm*2tEa(P*te(vLg3rS?RnC@S$HD=myf}e11~U8TF=?Ep2$@%mD+;yEerVu
zS#aHso#z4^bf1VJA~z6(p3MVF^GC|ol%YdxF=M86hwi04pKCs2=;AzuGFA<5F#jTF
zn4_F;4PbgAB3$V^smBKp1{-3O{L?uSFpTN7-Jf-X$W>03y2hsj0$%x?*)NqXyorf<
zxH7%eEEj%3ce<_&uFy}Apo$lO+hBwoaXj0<DhcqsD@(Tr8X^?(iHx1+9Fd?+Snu4L
zlc_Mo7916=qu@X`r;E?Sz_s2@Mbj^KC8UDEq|nyKmL=i|H5my96(}>A?R6I9_mzjp
z#a5(Z-6~6+)^<{Wh@cDCY*1A9Q|y#NPv@SBrvGucil8me;J2S)2HRXrq~$VpJ{xiO
zXXu;j?{D=x20UbA9}l1miXiQ{N&f$tQ)Pp4df`mv_SCL56x{&`T=Z*5bn&Y6I1vk}
zO_rWOo*aIXX;_k~Zug|weBVI}_@#;4aG&ryuv8018McmFLEwd6BmGyWh1<3dINr~R
z8IZRma~orB+~$;-r$Z%5jZ`Bt2C|V18xbfsQ$MH&-}#>q5*x!#kDbSm%6XckRKfAi
z_<11P+;n7P$weU34^m~STSJU%=3I^j^nc$%;Sh!hB|4Dc<aA{lF}b%X-_NDG{V^&A
zy(Um@nLJC`#p3kv{{SdBRpNoCs+<))cMCxyOKRI=(rrjD!VF}BED)^6RY=AECKgcF
zk);FzEW>Vr_Vd^SpZ^vBTS}=9qmo=0CH`&e0C1hHi!gCgltfhBcigp@dSVWDy4M)4
zm!0yD<T#)${^5S{AogWOu8X7Bd6&j;o*_hS*EQL0pR&J4`92QknU?7+{*7%lKTH4Z
ziTv-BfNGZdW-vg1a8S%i1Wb*gy?xm}N6<!5G-fZ)U8kgx5q(TN$i?6A1UX_G^|TMv
zrApV^6=m0M8x6vVq>`Q*^=92GRSoxdC7*tV+6b85nT6ZYnNUSVsJ0TT*5~Esc|0<o
zn2)2!tm!u<MB67JcshV;)FV~kn$*O7;yD%ZrTvE+CucXMR+SLJyPlMt35WDZH4ng{
z0703dt`^<?=TIE+7q3ojbl0dyYA7JaT=O#xOZq@0sgfjz$LzEv34%plqy1CMKGm7+
zfpV!3AtA#6fIxr0(Q%|{WfvM~#%J#fKD0(Oo@asc0{^P#l!*>nOJW0urzj(!E{|M?
zxlDlv>{YVDC`c^22*ZKt*j`(E=fe>MQ<RO|c9Yt5ifp8O8Wg}BuN>&c+8)35Z%_@(
zBdp6bZattEx-i{5D?j}KP0-q(WXU(6q?7mCpXb8ws=86N>kPTQ%ybdmoN*AqT?3YV
zCC5e_rcs(3I2J|b6OmXB>u!JVLJ6bICzBNX#(~$<Kw+%D!dnO)0Bq(m9pKOeZ1;Nx
zbo2Du?`wiUAePEt+h#G)6sBFGT8c!Z3g!+>r%NDV$MIMjSbmGeOhj?D8m~&mG#aR-
z)B6j4`W{kvR#m`X)wGH7LcZ)zIi9;oOFx5&>zA6ugT4UbvQafDv3C$9_h3}Vi`S!d
zNHpsWIF_GGP5k>1*TDHG(#LUlW94ejgg;;W)B7lC`xwniR-4JiAcESobRf4=KY@-X
z`DqMsJ}eqHPM2qjL1Yj@a3I&;DUe?M%bYGCx*VerjDrX2Dc89~N3kj`tLm~xW|7_T
z=I<URwMD-8H<i6^cj4oz(hw#oivD}Vbx%4T{e6fF5g^HnsyRCZr;h_6GIA2N4Me-X
z?VKvb=Gb@r9VD(EM=cc<OFAGF&#KDfs+$!IA3@%q<+(=)tU=4~M=ExCIf>kjz%w$Q
zCL8eb8AVZWyjNWgT$?Ie^=Sy)iDP95hd=3`gAc$2$K*bhZSck=_@!`GHyH_l4H~jq
z{ind|LeO2F>zQi=WYNxJ2IIOm!I?rCZ&xPVmOqN1F(PfOmslukYF4&)r7!VonNk>g
z>NQpBRL}NyjR2N_TdnWg1i=?5>FT14kd_?3oBkEDjs$wPO8NT`IVk0eu=l{Bnxqwi
z5s<^Il6p@D0g9$9eD?0G%HIHt#5vHjIF~Nx&prrQry(`X|CT|R+@sy?nH`o=hBhKh
z6IkxJSDPIjXw8^vEb1r9>{KWSF(0|5b#Vf5Q+|(vbLKX>gJ(=UrKdpO6EB5s{^C&w
z(G6jHbVs9QxGVmZE=4^M<g-To3<;(~mnKP|TynB*&&}i5$G4%^Z~SQB`*RTwg<Ot{
zv(Qaw1Y=m?4FTX^p10~H0xJ99!N}@24lXZ`d7BMc{Ea^0#Febg6e6wD&yx|R3CcDD
z^m~j7q#`dI|4#XI%($~fy>f}IVF5^)t>uhc;DqPTN%=Nik4ga)yYH8QFaChhZzHt0
zPbNR+z*RGCD8Zz9=W7LlRvc5vKmsh|$^;wrYDU#t2!)dmPD&{m0R-32_(Ajz%r7gy
zwGIR~t+ot0dO43Gn46Ot_9txD(iOR-1dcpEj#Z#eXCC22hnqFq2y)~K+FS)qT|o4_
z^)w0FL+iQt<vr4{k{~$797~s32{3vDHa%enDi`uIR^K=DX!;ZrICeBC<|NK-ewsaV
zdVpC$ApjAlZ4=pIKBuQw84csarpHl$3a)>C6^Q-dv&Jt9j1#=$spxTr`D2aR$D!q|
zn1;r+T{5(x&x3&K->(cA973Dy+`P+{N)0g7$fp<?1Ym@JUWNT$){7MHNSpIEa@B4<
zxSZx8_S3<$W%ir;Ta=zq2WfL!TO#K4oX&B7zd<j1fwn#Z8`8`l`*<KPy0`v*Ai_?!
z(`CqxRGpFeG19Eyb^DpR_pv@1zQER{nK}-XE0n{E@Lyxq^zl-4>k3e5W6V~K{(A?V
za!&wfWNv9`sDxaA$0DaBaTMb}w97a<{uUKZp8(9d3c#9N4w6`g&nYj{HJr!^<?UY4
znPMi5_D*iVxb+P!P4FtyW>^g$apSW(np6o_=b%jISP}jG1cV9-sT!;`^SqCm;M9z|
zb+4v3Alf$^wvjhuHCPKVnVSOgn3~&DZz-mm+2WTqhFXvWjk-<s>E3@EdU126wdknq
z=#wGu$hEw^!Q4!&fVJ`rK=k_2tyeITo3e~8<3J$3nW$Vc0Nqp2If>ekI-pR5WIbvJ
zlr#D@jn9Ci3WOmOc4ZzAPCZeR=n^b_)jY_s|3f@|x*Ggb5*#CStzA|)P*z_|jCTgB
zwhT^*AN~%~K#s_IbK4bn>V2CS9a*Z|f)+cA=Xq)ld_>f!KZQAO67Ds)o4mXk2Jw_E
zmBuIXSahGxDT_-ZN!_&7N!2PV7>!W<&y|B!x2oYHXwl>j%I^`gUKfmL_5ciLEkz)6
z%C)agt0m;}WKnRcLv{wV&p<{aVSVBkj-WfIxQMupqVo{za4{M+3y^}Gp9CHM74R$F
zyDf;QO(yJW=bnUl3*d7Oyi^qA?m9OVJ>wT5wfSE8d(7*tsm1~R^G}FjgUNnsv&j`e
zsQ3hW_9#E8if>SzIH^_WV;Vn`k55?<sb&ZO>V$yKc;w8|fu^Mj51^UpKBc+W9<$5B
zPea^^#i*Jf8gP(r{L78BIsNo*@s4ETr};JKGy}7^Y^yEN(@3OQY3Y6yPGYHVje%OT
z(X6|Io`G_S6jS-p109h7x~M!LU5tYC;miR2E{Bsc(g%o$Sm|qJfE(zf9k%lZ5HWAT
zu@I8vIaiR~5p`y|ako;RQ6h50$Yv}l;3|iQl{1pp@_IuL*%%)or5+q(`l$VV3p^bF
za?b^ap1e991U4CpsN2w}9^uON><(ao+&B8e;Fs#wtLFy3l)Fk_;QQt-gu2!`5)--m
zJG$3y&tW&`%S-Q#qE9xt0!2OX^nURpKT3iZBoJTXZKHtL*f|D&!2$dehXXv}0<ii9
z8Mx-{ZMnIM?`9*Xrr+9+6f!_x+eb;TchHqCDu1_@!L;%B8yw$!7v4C)Ky%gQ<<Th<
zcHYj?<|5hOm<YmE+Z&K;DU{i@X}6=9^?nn<DV#7&n_<?D6Z)n#7S7_S>LKE>_wvf$
z7vRTxGg;LZYmXw(4$OP#*q|^H!o`};Z0V+SorSst;7_FJB0Q1ns<!}465bR6;$h>6
z+~3PIQmj`1eZ?W#MPDXB@#>P0?_L(Zjj>9eX}9)vF~R9pUV5!*SK6ID-iRD}rV)%T
zpnSgXr}X45pryJCnS;|u>IVgPVq9bA&?#^JTyQo>*{r%EHj%c%yNv}gyDnoNe>ugI
zpN!(lh(}#-YPQi+eWGQc<~JFep9Nmp_Ui}X!s2Rac~*|2J1Ic4Hh0cucpPU3SzE>s
zT-^z1RA;6;CS}VWzyOgqo7;dCcRX`5igK2t6~9hfo!wixjR-E=OxPu4F1%kk2ac<1
zP78yAfD|XgYe3bGZCdjU*e^=YJr(TzBc6`b-Q5;KL?v59O|#bID~Atc+BA94P~H5U
zm!;Cz08ij!!>+T0+MSo)=<=ugt^o%A{X$DQ!EkpayHpg*;-sZyrZtB<TEx(Sg1Kid
zkE8|KWyVps%ITfpM2d9pe)LEV%W%&r0k@H&Y(}0H<d|4hs3lnJZlAsBja(w?@D5>z
z(>s3yia*gmZ?a09J9KUK`dn_F&qx4?&YO4uj#9!Dl!kADET;uMIU|eQCbL~5_B%`w
z#&1OKF2&Q;&h}S#PU%V#-&!`OpYk=kAo$-oz)v}>d$`(@E=2j@Kv-nSumFZOBhyPc
zy1L{xc2~Kk^*PFml>I4|0z4Ee333xtqv+eYc4EvrBC+H5xO1mn?lkp8a9iL@QBqn|
zv-+stB@dePtPE<PwwJj~HU0*RWs;)aT$hfCuDOf9ESCw-*k@zPS(j_=UwWS`4Qix{
z5EBuFBsbFiC7A*G;zIl9FUvLd74;fJ{kcuPg5+A)*<FwU)`fQ`dq*B&&wqvl!wM%p
z`hWN4MDE|H9O@ZyzxFf5x%A$2BT)8&m2s*;#LaaEivqlqshu=Id7Oqg;CvaZN+bXh
za&Wfd>3!yto@NJFtaEw?fW`ud`odhd%W<2`<j(@weyfy}h#z{kt8nT$l_wa2lN3xD
z2=SmJxd{@iE2gF~lCPzMcfDDYk^qPdZ^VnAudz6Hp~IHmmvyDkulyHsW5LY}1|LMW
zJ|*Uq?pls|(Gt;s+ZDnW0Mfu6P3zTzpSLH-L0#{w8=v@cDLf0F=sJ+OF>iN)TBveV
z08j9ow4p@l$%FIDl;H(+u=DRefqX|<{dOfcgdE*!sWjx0x4;4GVeMfZMfJ9nKr&HY
z&{IXo-CXXFbBgRAkD<Q!T{FGOYg#F_svDnu0jg$+SGg?OikWp5DhG|{3*v!xrj`&a
zta-F2sh#re-V|XF?UC_h+k^e(*fsH_#3C1!ez$Swdai-G$ONHQ!ODPPBx(9J`hL&b
zmu;<pHktKzHz~~eDp@Vx616Z3x4ztxcohOLn-z8~b^H9}Ymr8J3R=Lg;PANpyj2~m
zFb1iH&~JWCwHg3h0grY6`rg@O0Y3x2L|f6Mt9JJPwiFW`s<aa10O>zcl#MIg-IFyU
zT>AtOI*62)OS%k{Z~@|z^8zU-W836PcjU*4a>Mm6PVdVC<&7pimW}&df*A%W9Z&ad
z#O6hbJiSmud!&;@3Su|XFVh~llv47N-UDZL+|WpMESh@C2Y|KZY$y-zSY{vOcaU)E
z?nfrcak0wFW%n~LBx)<0mbjrRaDONKj~Z;()Xr@($52UvgW1Sod*mKz7yd+M#?^UY
zfJ0nSIl7EH*PO(<5k|7C3EVSBI!pTq1|YL5mx*#kcNinWiXf1liOr7eHAijIyW8|r
zqB6i-KHF?!;DFwc<X7HuV&A%oGl`#$d;s3TF4gL7jg-q1hs*dq=i@KC*8ud*Pfz@~
zVx=VUWRWyQDFOfLO!H&sup;oSd_QDqKl`-pLQm5+soVNckO`Z91|+T$Eo$LQHHoEo
z;BlAUEXUx2y1tFO6<6Ow1m2p->_NDLymCZd7oXI3(VG}?<dC-v@U`s`|7^c8AfYB%
zDvGn?BlM=`EYtlnR^O-7iq`a4kS=<c)Nwq$+jK3ha1r&0)&=)kOEWTx9oVlG{~A@?
zK-2E70YqRtZ<J1tLfdEhan&I^0P}FB^|OEv>R(>+9~tB>Td3=UkFRnJFx1ojh*hn!
zXb<;0CCtOkjOZ=8J#PUqNFfQaTN94P<q}~m?2NWxv?TD90w9FsU!<<ybdRN;#^Elh
zU^GTZYr@A*c*5^<g`a(@t{>#YwY%Rp$W$dY!(ku<^S(L4)hZ&&)bxL{)g=Jq;(b!*
z=r8$3+F0*J;VR{?OApS@*+p>dVUF@<k)k33%~vT(;j&=zQHG@_fC$GF;Anr%3<e%6
z820O?;j*=ln#FJ-%^)@mH`aTyVJs<8JW*yGI<ROTM{jD<dML<c&xbm`X7V}$4VPE+
zq;WM~oHk?J?4O8+z>UQ<E95u_XhfFB#8{BK9^vnJsPXOhyM%L@jH(HMADcsO01fQq
zlNZ1RVlHol!ZpxzGor`M?vejllY<B!Ezq+HtBC2z|02Eq#{_-^C4V{vmF^)$ONxR^
zgmR@&)*FJlH_|W;L=3Fvxji?Ry_SkXvOS2)Qv3I*ArG6de%EwuJ~NDQ+R#3NxV|^G
zf4gDp0t)~A1~F0Q>-i-7)-rWK@uSq*M2rFtyWVZIBsTq&wg3#!r?jeWSR#;KJj3S+
zjziIwDbCYq^ZB<9#CKnGX5xIuDC3>eA6_zVVQ&yKsoQ3nlNBvev@#g|cnfxWHDCY3
zXbA5&=C@2TbK81=p%WZWS-5Qh1nznhR8LAf$QA<U-0sJK&LL!bCq?75tE<jHU0_e7
z9}%a)zp+3H^hDGR&O2#qPduOH40~S)DD-0#YS}K~u8Ie32a?y{4@3qn&a{o^U5f&9
zzYBXqbRWhNBaMfJFE|$?LcD1cwT_%CrLg8BBKOd0*<&TDGyM*F;hL98?=+Z3;1t~w
zP+(jIT}R5<&6nOo9H&fUjT$fK%b)Bzcy#YuZ{*Op;YwMU>qj`%#(0cN?dho?`UE2V
z85+Jod2d1kSiR1k%oqtr%Dc!Qq_l7-^zL}~`_k-GFdV|Ax9jgnSG&j-V2vOYOYaD_
z3k(+D7D5OAYwquLJ_~%~t$Id8<x#XT3|D{=&Sk3_7ky{rB(Xd<Bl9Z*(f!)%#p|AG
zxiZXpN?v{#H4EI9f$S(pIVRdks)z)p>XDUYrDyi*j~T5ik)~F%3qoU==JdWSPSp)p
z24;bDVza}d6P!QY_MSmwh}8r1r}~y<c9236qcl^LEf*<gKY4pbJzWx|j&?ZDJ1rop
z|7HijQ8{yBSMmbb8_>>YSoEj;EE5nrFN9QM5JXrMi&W3S9eVOwx4nmjd@GaTfGTTO
zQ<TNa&3nrDKuyCR7qy~CD9D@A^`+wZvBIu5ARPu7m`(j8DnF`k03r;+Eb2C~(Gt_p
z|9n~IdvnDJe@|EQ0(j}abI=`&EyL6knRy<>0fx)tcpcKf=2M;`vz*V#(Ha0aH#m+X
zSoB;f4XEVW`oj4aQh0ID=YI$}BG|k0jG{VyGqs9A2j4!=jhbt*#cXO0mcq6mRm7GV
zmmY9Lh#U1;CC}Cn)r=^~m~-+%{i5DlAb}ceFK+u3DNKjp@w7~00hIPPiTw>ro3-eW
zR@r=bT9mbPKzXC+0YVR^R-dEDb~Wkw_dqqv`3!0cmHv%n7^85=>y44*PK#N6kWR{P
zAEwmqS}^nP%e5PwOhADB)IF~rV92Gq`_6%D4G+|Kt5(m+P$|l?pVG7e-Ol)kAvl(f
z+-C*z8XK!5Qa@M@XR&KNjlpwu<sqhA5wgt^LFn9wt#4c>vJ0&<lXFOIPsxG0?^bRb
z6b0Z%6n^MMMJESUoCm80yOt6N{-?Q(F-$HX3{BcZ2ge<WQq%t(akk4_&tJihY!<6L
zp8J(q-4+v~kCv7_1svfDmM=Y&z75>3gXM3T0`VEBxqL8E1oUk}M-a`%w(Ws)Do~RA
z%I(<-(#o))NNJs?bun<LlF=k}t#e=LX+44j{;6!2aNjKP27&{SHr2fRGZ7J8m05>N
z`X~pmjPvRnfJd}>F<9BB3LGy-1rKz87O%rh9;xA7=bl0_Z=n>#9QQC%Upb}EhF;*t
zoRkAs%LxqLltlOF=Q$7}D(^dWa?Ka_`^tpmO}Gu+G_EU^(5g_15rK_|raY7basMPi
zKwk218TJorqo=lnjO(2bM<-YO=k#R|2-a{j%P`vm8v!GvC-$%$9*5oy1N6m<md&h0
zy(?3ManTVVNXV$s&!p{P5fFX+M>sklrLzh@3qSHXj^*J;{3t=r>u;`7KS&6QEt$k}
zc0j(9`!+y}@CEd)=$&+smM#=%xL;Okx&V?aDZ7@<K@?5Civum~5;1`y0~JI6LL8)A
zci*7MrvJ6p6p0=XzY4@jk*XvHCwAJ9ba@7crq)v%ms30|G}%hRrJ%=)S+E-o$4$oj
zYdFY~Ix4pukh&$@&~tl4W8c@BXJJDI-+Ra*YXLtBboC}%l--{;e|liw*XRSj*#lWE
zFFJ^-w-6ZSCHYsp;oD88E9d4}Mfs(+gLjxeTg!|6E%|{5pTxbOzdvC|d<Cg&x4Hqz
z>UWrDjQU2Z{N^~a5iuNY_AFr?|2o)*Zdi67C;|3RWJQQH!#obGW<5*l2J$s`(b{vs
zo?*S1*paBG*`KFTTj{TPj~jbFa@&(_o)?uH$k4o|90*2Sd=k|VT>RXc<_mR#o4+NH
z0zBHg>3HIAUQn?olavt-boc*o`)#hbd=50{%xg@khTfn09cW*7dKsuzhd(SUA~dne
z-k7Rh?pbyLSw6>5ss>p&m^D7hFn}~Jff#YyQ77P|P|KO;p6xR}0FshlOiZJOXuR)M
z2E%`b8{kh9G5FJW_5fZoGv<*&cWHlPqUR9GYtqa>VRtR)c}r_t4-n#sER{^_Jhh69
z`i3M{AVv9%TwnYy={r-mz1y{CdiLD6a9j8eK0TJzE*_&KKI(F|VfN>L+of~8DNG=Y
zs#kH2pPV)pW(`&fv~AX&=PK=rgm1_maZ~Rzc?V3B+pD~DYse@7?n2j)`jjAVqw<qR
zD0Cg1PjMvS?;Fxp`k`92bXEDvnl=EK%w|u?8q^1rC>UXuRspqTsrROZ=d5e0rQpAK
z4#o4V6RU9~trHkM%QSAfICM$(nF>fu$*(w&anh$zj^CbtwMn@x0NEdnQ2MGBBuL&7
z*BGzqv4mMNn9wt7<a^S|6)2VZx>BZc$M2uX<M$-yo&0k_P6L=Xf7tu&1H4k$#GDlT
zveIz~8R_-jldEUzX&^dfZvUJp5g>ap**Vonhd*(@-LA#{d58-zc1yjJnyjT+P0|5!
zJ7fy8(RuDG_#J?6(_<_Vtgjhy8qj-uw<p1K8!Zd9Gi@vZ$@Rex{Df=vSk_7@Jo#Fm
z<^hHK$ZflG*YkPWbA@BryT8SOxyr;5?%UUzCiojml>SHN25SyRqu6H`x2&lGDsTr;
z6Hi>w<K!IdHaJlF_ZjTtLtl?t_Tmw_^}zE*f`2ft`R+NvW~#cgrsw385q^MBK607~
z@ksJkK9sIE$u%LFmLR+1fe~<jlwAlv-k|H64X?>C*EsrEMIt{9>S?l~h-VM8zuQ>P
zjlG)o03JaDoE2&JiI4lprX|08Ya;AAJrLBjLtP8U-^q2RdwHMwA&$i@m;H(`F#xvO
zx-v4}64B6{@yMHY-vip8wY|yyNorxF<Cg14H~;4UE}O`DxR2{Md;Vioz({7>7-%{N
zC)s)QN-2BYZ@f4@=W%;qCs!5zp2UnFUS!i2kJz=OYiWRA;Z|Xlo1=!y*s?hM{yOjT
zQ37%wQxE&rp4+P@hE-SX#*(A~$b}=tIKbRgkQmfY0D~Aorj@3{2RO6e7&&C*&vWqU
z*?qRk%H1`*vULDb58hPwbBL`snSgL@0`=(yh&-JOPgA6|ddZ>wUM9!RPI>tki6QE0
z9>Pi4S>_M&Wu?y8y5jr!P#-ttaFo|?;Re5pldD!5u2r|<G`XCAieHCJzUqNz#C&FK
z=|cG(S1?l39WWA6RffL7vBK8#2XyNm#XSpVM3kIOSl<KDdOSxj5AvWDzxs77r9Ft#
zT(Nzoi^C59C=&(=FLF*jG0p2!UL7ecuyngDoP0`etBfME^P|T}8g}#ZfuygeGX;n<
zFTj^Prhxb1J`GF!2Y^@-ulkx5=iackavErxoc7L*BaKjEoS}IURYMX7=Atsdf5{-=
zpH(1f84s^uFi9g`yegcC=hEY&AKT1!wY4vBy{tL*2)e8v#X)vTUaD2VX{Y^{e_T%`
zJkah2jm$pgtmn79Egyie<}75U%zhGE&^T!xrPISDxXIGL4k@f#jCxw8&0i5bH$dj8
z9H_E<T7ETI`3)33^u`VnNgioAzPM6B<n*NFY|h1h(&dR;047D&MKclk3E@!DX@5qu
z{GM;EiIem+*7%zqT%OcQ_`RqbCcCxjKo)wFJU|Va*5m$rrxG>hpIrh1)9y{L{1*H`
zzqXXSazz$TX63g7;XP|qZe8!7m4<U!ZN8bFJ3?s1%(t!T@wLR)d!+(U{8@jm;5DH>
zF$zSCkW9zSNAR@=N%2N$hpf&4LIOu*exduadu>#5fGhwb1&XBAIOeE+Lc`%f%8^US
ze-sVc1HooXNw$7!#Mjl66tNx8S>N9WlnP33R=+`T+nwdD_<=#Rs|{w>il<32=T;n(
zwoKoWYN1c}`<57e(Uw=ER{DYnBB$|bFcS7i;hWxnzh{7>+J5Hf|GNvd*ZV)O2Bacu
zC=sZ9Hbti(HBb3bZ3~Kk5S|djr4-XL(Y<kz$jdk=JxEq)dV@cEDtd^143%J(DJzD7
z^S=c3rxo@o`Ytp;)PAH|MQ?i$OnaFw=Y&Q3{N9tMZa2A!47$S;GQI;R-PC3sOVToM
zLKV@u^fU?3RdiRr-v!TY(~KqIf4M?>iW!_Jyn3z)ck$wIi_QaZAYhA8)r|8}@>Ajg
z9<$T6SwJ^#V+%V)=mfI;8`dwCD7*+U%sK#H^`zx4>i{#$LC<b;5#8{PnE<S%e+{Zi
z%S9EDGGP8J&&GJ;kr)p>E*h<x9w<%-4j)Mngj)bS!Q40|{CEEzq?ku|9jW3jLA8p?
z$lmq7ynri{mv!wLylnM70|(UgS?RfRBLc`bV8^7|PRZRf`ywF?$h4-Z=bqzksW_Ra
zSp`=mnu!_*Izg@e-<Mpt%uXZTNzeHtBYL3wab+{dFqT6uk<0|>%{gvO9|w2Go|Y2b
z7-#-_kO1X(>GM?u4^pF^WBBFn*H82N?j4P;=k5c+vOHMsaN2dVhZAX|yh;eddK)Gl
ztd0EVM3lrGgskp9&*1zF>V<o`4P0g`<c0HL@&Oqnw`p4s&z1c*2mu(#;A5tWE*H+v
zlb{=Ocpa4y@%QlM8RS)b0V7I6S(p>v+>jr$H(iVA{pTDkFL{&;u5F|s^3Kai?uj{p
zsp*j%B&G@4E9spp6SgK7kyU1t*VtHzDY_C8f~$VXN-~EwO0s@YK<WR)DDDNg^xC~`
z&jtc2wC0|AaZt=RSV$a62<(m*5ljmOI{==4%Ot+wmD?6PVO~ih%*}pQb9zV6Q8(<l
z1jOX{6U=QKAPrlxpUa`$q4gY3TG7??_~%8yw8AVA54y=iBvL@&*ZVM$6L`YG0r$Y7
zjj2Yf92=IYqS6lSl5~w87X_zTiVWOVn9ZC6+~pPJG2I+T>w30}zN)v&6eQ<;!+)5o
z0N#!$A+5Ur0<8-fZ4BxfNJZ?X;GCJb^^Qen89=-2^lsh5Kc%|)Z>0xVVcLb7G->|s
z{wa?G@oT#$A6Bm;Jeee*xqSXUMDJ2bPlCsDu+!<{u8(VS#P0VN07-$7%v+eh=I;}T
zEvJUhew^p;lXx&_5|j+sUbzB13S;r^XOi<#HMyw_kp#i(0=zIAyEhc>KR$)`!>L5|
z8siO>@_&M)FJhOejGmprSR|liH+w*K)v0aGK4iYF9RSU26n-k@alE_**E&$ME+-|<
zqg*Ly`R+EIT>f6?=>pY-1+BB9pcn8*zj(^yDbKLOZf3tTi;XS6WzI?6Gj$gR&=cDL
za@l*%znk)>wCXF%@RI!o51W>Ppe6V-#F|tQj#jcdCj4&c#?;c73U#}Q4Wc9?{3nva
z89|P_iRfkYsa;@@tt(<T9^iMekDuV@d76zJ1iUqe+{P2*MJm?Aq9gG#$SjAi^uzi4
z7WUvvNbfe%4QYH9@FN#$C8$Qg;9#Z*fP%8`vc>?K+($Xu7X;Cyx)-lN&Two^ucp_M
zhH#QdyQYuxIU*_^YJ0t99Exbfs&+%veV!QLxZZ#CwkXYjeEIge2OYJHC}ydHCey!j
z0QTfRt6kxM7QQV6AIsUp)T40w@GGA&X+(Z*T9^fRf{jc;P^@DYJEGTUj3*7RjWl~g
z`qZQF<ex!a?k+XEKhGT++$RyqMR4)?v%&8?^{ynb1g<EVcmPsUsrvQ%01oWBrnl2@
zMu4E7Y4^Usltxn|O)9htoG#}A*J@!Fym>bTNjE&jaE-+c9h^fEc^p4{TT652Kuhla
zR6iqYjAq&NT%_#i-(A2l_}IVgnw&rBtsLREcoPpiMG(4FvdWzcDOArrQ`RW-=Qlks
z2!oN!@+lzmOX{fHZPEMlKqQM|Q}Tp>b^0~49BU$*Nq;!x0E||(R1_mp6TK}TIM`%M
zVGWl!NaUw1MJ?r1UM|Nc=_Qd11iR*VilYpcTxa}$aF+FYn`if^|66B?^O!Nkg=o}=
ztbUJ{s&Be}P>&yO$V9LQSfCc(-@CAI$9?~2c1VeBot;mJvB@GRvQ%%wbO}nG0oYJb
z(21ZWIxi$pQSc}kUTX`vyIBze<c=zG7@q3uspy@cnnsH8Q66$vyI_Y<zwTR9;Lgp|
zYmU6iqdbj+)<F@COfP$@{+;%iGYxM(>n!Xw=C^7>0~#Zf#KEc?1#E|#Xd0oCYp+DQ
zQq2pryU0f2$AMHKD9ToF0XlCQYy(9jLdXYjhm+%We*?<KaRoyctbEoOdX6Eu%cZur
zY+3{5lnrNU%iRa_Mj}mA=OA%8%?Zo{xeBM7w~$s||CD_3MLcy3^+_zq=`X!soQmzu
zAOw)z%unYKBy@dbQDy}h-2yPmJOJ+IF5nr46rO`DZdFhE8vxqnRsW4<HT+Yv2LYtd
z;d2R_b&l~V#sM1uzOGlz3;3tz0}544OMIJ}U|d_D#D2g9mVcMMALq@M;<>8<n~Bpg
zV9@#04<bcdyzI|&NaJQ_R1mo+x#Uf!MuT@PC3$NP_f4DLHX0WS{=z)h@s#CXVcV38
zjw-0`&3^5ckmhKFZY(Y65#?k!EP<T3rYR37Na!m)xX&?2OL>6gfKX*PyW(MVEisJv
zancb4HAYIQnYyy06NeY+mD4GTr1dycy7+`=ksB#yHBBvT)QW`luU~cB)ClG7aFUnV
z^qYMH@A?ZcR=yV>@=UGLnL`KFi;KFFh$!XVfD+AZyqiKDQiz&<aE?%y1Az&G7w6T(
zA%c<qCfCS}?w@~L0z-0os>qMnC>H(u1{c}g8x{Tu;(3D{Wk=_!6ST@vz+d&^>go49
zt(hK+2MEV^6O81R2X59YzdZsk$V;A^uh<L)?Oe-#*{|%KXV6Lx$j3<d^*JqGN*0;i
zNWqsk*}MQ1!qp4-4G{elxs7+mJhyoZ4Zk}-$H<rw!IoArh{#$<XU{(_f?1fFs?Tmw
zC|nL}8};Kiy<F&ir{^YhM-Kln|4x)xUd@uL-CFSrBxOb~1qcLR4rl#6%HUaqw{qhF
z6gdr|9wKR972gtIOe*x4p`cUp2r~ZFOB>;1M2Lu%@o&iDSD6!$$6BKTVPq-J|4dSE
zR3QxvVxA)??INmjaoXgCOvWv8R6B*W^)`wpqw8|j@MHWA<3Gas;-J9qsDOH>uH`WB
zl}=AXR+9Sy$TEY|w0Cn}dibrk;78Gos>%w_TS>-2^u^LXE_ig&k^rArv3%T~6XnF8
zYgc7Q)gV>w(;%hENvv+(pqn%o_p8Q#BFA`P&Nvkvn$rB+TK1vfE$S@<j+dSKbmcP*
zwai_>H)!XXT3tH!=nejQLPua042NHntS?AS5l>Ev9E&1^BWXnsJmNJ3Xr>E3Q_Kf6
z{H~RxMY55VO8pqr;wR-H!z$GNsFt;X3a**ttgQpKUi3G(jZ>Hp2m@_UoWr!v5mu9|
zH6eroPw2igNNdVnBmm0zE&TjNX`YpzEjk6OPVk$LM~=&5HgOH%CVR-n!7dEk-|z<H
zwsQcxdj1{2jbd28pt?B4Xf;IuZ}Pt>z7>3IIwsQA{9mIgrnGjldK$o@=Sb8;$i&J1
zkgik82ye#E_t}>*Z_muX>p7PJh*EDty+-cnl=RrUufd!7wsbw~>Ha0xm_BmbE^$9j
z#CPv@doE+%?to3RlQ~EHm{qS<cA5FE5G47}i6`t$gQB?IOMLZ2{NxrsJ=dGsm@*7<
z*?_4AA2`}O4`D16r>QG^HZ}2D_nXTuTmUqKQ4U#qJ>Rgi$K6d2P6K9^aP~{C+%7gz
zxosAHq{!g`mE&h`8Wir-_yoUy(p$rb5Zuv2^iSEPt=qNz8%LVYeY<PEBBq$c!WkFj
zGvNz($}8xKX2~8=Rq6+>Pls<~=3RTwZssQiK@A@5sp-yj&gJK&IB;SNLIHT&`&9@M
zQs0f*T!pYNFPS<H=ceM#2nDU<mlFkEB#|7VUM887R-<p#lmBC{e<PBgfGAPII`tS^
z)$8xI1J?v0o_$Q*_FyI;5QcCP-==1|h&x&dvK)|M5vwX8`#ua>FRpuFSgEN73N>mu
z3^r}nlbY_V3%6|Kar_LuO1qG)w$${7-t=*eDQgUE=YZ>OjUebTC&aGd6}qUKbs&L(
zK6(;RXyUibieJj1I;mN%ar_CNWfJa^2SF%)x_yhCypHS(%LE%zFWC2I^11+cJrh14
zu;hN8Uf-X9IMY&=^qF1bh?}k-0GIXflqP!2+2TZxpLJy~3J4_PV(7v&em_8<6pc6M
ze+_3!!#f0CnfYz4;V5d#vpsn6em=v_4`*zCz!br2-uOE4_=h(-K=eB$_2Li|FgLR&
zNw1e6AdB;kIEq?_5&vH*IsYy@t~RoWX;eiQ`<6zPqdeC=-<s+?MJlfJguqoZIPu`5
z`Zub%2I5E1{yy~nNixtxXH?KsbCkg+?|myh2R|`s@=c#pTo#Fmw~sW9<Tx93H@``f
z1dbWB!!2$~+oQhm1{&2Ed)Q6A@yCwq&YjBS>H`v3-`y`e1I0O`j_WsdRi(=VhPf#+
zu0k5|L6I$q*x6S%<3tVgf4{}0JP|R5))=B`Zn)1f<yW3HZK4rw=Lq5NZ?v-W$DB0*
zy4EOjGMhWic8OpnV7xb<SW0!lYoDhT<0^0Yt;R_^U$YamanQ01CIeQE;`LrsM~KZ&
ze0Q%30A}{%7Kf3q9A$hIl4sOCmbPhgDOS#`=ycN}!Mg`kmb_4B#q-e3`vcO2>m)T*
zSL(5siGHU5xB_BuY{&UH-1fuN`EN0Nv}1&xafLm73goa-l32t2QbEe*a~)*|dYNio
z{FyJw2Xx#WP;nJh2W3_Nsj`KU@k~s6fHcdwr`<Bv*;<@t<16{6A505YuwWC`qsL7U
z=8CuOsqn25%WteQJndXoWK3%F#M7^BOdVREG|0l$Ox$Yw9pwtnH^N`28#yXH9zUmw
zO8N|s<94Ke{~6RWg;}#^1kE?$PFG}{Y~5?Sm$Jccr+Md-O+ayR&(ohhPwlA`ofq5$
zO<S_sMSsrzA14uj{;nsO32vT$ep>(g2}mrxJvQO%e=Xo6VXb@16TheTj2<HaI7Qx)
zn}T3PA1Gr0kmK50)}DceIJu+OUBm3f$pAwL$(L+YO@0luDiJAcx^{oiI;~#bmSUUW
z*4sK6u7mXHUY`lby6B>8q*-+DZ<g3QX(D}NVoV{t0m68^<F>rY3lmW~o+rk=d`M=w
zY=(p*Dldux=Y43csfAGPrxb~(<u#lc>PnOI??UhqHh(^IDy-8Jv&d3(<W6!i(}B5_
z&i_tuSmzVb6Oy|T!i$aq)%mBXE6>tda+DeS>fHMD8;i#g$#1=FM_MhLg&L%y6lKOf
zk9%>k+UFbKw!aC^fN(WT4TbCXeMr^xB6#$!=TIgm9)k>A1;oTPZ1Wz+Jw68kze-6_
zZ>J^DDMWTDiL#Cr%|H_ejQtk*Jiy9XmzILK2bko{H*`jkJL~>_0hW_ornPb1hRzG@
z(99}YSb%69QPu2*;ewtwgOLwVqt^;QZWqK9DHh_O$7?SWc-YBVKA`RZ6rl&63rN_W
z0)X%|seWqa69+gzmy>uy0}9gLVB&D@By}!+Hr4+Bz6HGJ@gz66^Xb>rt+M%3u93^0
zDCA@+nw<ULk9^ONUCf^bMXXF`4?%?i*7El<#e<*K<RI;YcktOxbB&7QZ*v<jBzcou
zH{j!ZR>__G{IkD6+o$WEmGh(}m4P^TvNKm1;+TjofMU872BtdWTaR!PkJGfu8bCw+
zXAe6w*TX+;BD&JPL0m8wcWk37RPU=4Ve00dxb{3d9i;ZD904nP5b(dx0MH9BTa+Mu
z3<!(51Trh0@7zyD5u7ZWnJmiX|8ovSj*R<boleo!Rs;m@>VW)>HZ7OC+0FWWKwo$s
zdI2916~Ih3vk+@qnWpzn0p5}&Gi`9Dbal56kR;V8XnkIfCt!qG5L2l@A)A^%i!*JC
z(#ZLz%p>7q{Zva#hlA3tvd6OPJ=JS3Ou*I@{9A9s?_0+#9cR3Rf91A>7hR{GKfqn$
zIJNYE9Ot=>5CaY#1Dy;oa7nUhjUktcr=XUET*gl$hml4pEeaN`9e^lSmEP;9T*eZh
zd3(CfcpM?^xK?EQE4Wc9HK$No;yU_MqM}o*H+tPT?ejd3qcJYNj1KFaroX2?iGqUE
zVs^vM;4zTglNb5DhIxLoK6oC;0_U36hJjj*PkA)~Xr!&@R71l*s?XdHuLDWMlz~7>
zLV3OS-7@mm$53?671MhQ91^L2@51DsRg^wXIzHT^dE-XN-)=n*U>dU+=Q)27apD_M
zNFY#KueUX>?`&z203}io+<btecTASJi+?*FEsIilotHH0QvM0UnGK4u>9_ez(@suH
z*V5=gdX~)Ux-b!ztEr)kk<SWG_@uM!shju2uJM0<9*6Sze{<s<HOBqaZRmESg&gl(
z08#Riw+Gr7M#M0*&_jN=k%M%<mD>Nu2LO&&c;l(af!3ZUf@q#1Z-J&K`7^V<&ItA9
zw^4k!>Tmi?Yxtc6#4KL{(zL*@TM>y@`k{evrI;cNy*$QxOJRE>H0X$g516$`lLovO
zl+bvh0-OiLTdCXP-`=0S>AnvTLw&05ps{I~F%m@0azq?%uv=I(`M#X+eL{|R1?E7b
zW`RI+LU=>fNYz!BM8~0^jij9c4t=&W>xudHapPOQ`w8^xm>9uIpCj4~hq^4Lh7wku
zZ_stdb@NBq6}Xf2L0O+n8HCErsZz}HKL7a!hSR#9N5U}!`pvJB1@7R?WL)6@2FU9#
z?&6#rr;TOX$)UU-$gcW!#>%oF7p+mB(DSbc@sZz0RD4684T*)6=<iWR!u4Jj<M3_Q
z{Zz8>fN-B>=d8@>Yc#wO5Ul{`N%9(nTGjeB)|Bz0WkQl~v>S^eO1-x$gCd+1F5T%4
z$4VTR62%dMv1&S9I5&H~ismeb;@R5THWe0jL~o1ddYLZIIS5(xJmL4sU3T3%?<L<T
z<HidCp1zf~NrOl$?44SIC1>4py$jD?l;c4gUAg=3Q9iw`{`7ef+IlWpN5NfxZWR0B
zbSK%rUCqNm_L6(JcHPd$MZw)2`unGp$qQz*t{~WgxjuhjkKCps(gGvIn|T6*+^#bC
zfcC_7%0e<y4{n1d9IgAkgXrr3iS4jVaUMhyVdl;I08hlO2}dc5liD&R+JMQcS%Ana
zA9$%~hDKSiPqz=jF10s^+v}kbuc_wUHm<C?r0jmHuDZhksCwV35U9K>%Rroh$eW(A
z`$TH1SGNaneCL+of4W@kVl2y2jG)dEv_=`_eyTWq`HM$4US62Z8VL5v70u_XMlr#p
zM<_S~-oqRAb<NdcTv<V-0#AZmXWY%Dr$oc8?Pi%`Ej*Odc%lN>wfaPa5gSJGdJ$$7
zsyvKW4vYxu)+;-KvM+hlVWdoDOWozU;Y2Bg`E>3KMru0GI?9_v=@Ex+Y2CHb@!vNY
z`fmFo{0$>Uagnw2c{Pf}4M%m5s9ON=`us|P8Liq?riO5Q^FA?ypj6#o0Pu826u%<-
z%fSq`flp)*4LPhh5Y_8_rn@c}oj4?x)k=xx1NPY=Hd#ddMbxPsisMYc+Y(eKSajXX
zu3-F@l%;A~OUU=LesB(5&tHWF6!Ir!^<Odw$Z6TXc~aIr5GZwy%?-g(f`+3yOEV(+
zskNS-QeXZVE4fc_#?x^^F88lSYTD1?AfCPQa`TPjZ7QyuP&wf#8+sg#Uq;{6AMSez
zAoR<RGC!KvI13!dkS9HW2u#xt;VRc4&vJo#-m5F*OnE*$1>C%UcFU&mc|i=MGU@@E
zYQ3MCp3~BKgBp18RO$PBr~E)<d&{PA(O~nl7ZoWxDv&+{^4?<Inh<%Oof0U<;S!sA
zjR9fp>C4RsfbZ?{`SCLysnK)X(AA}I#^CC9lO=+aJhF?Kyk5~Q`i1^NBhLSyrDNvk
z@_quX5S)=$+4P+)B6@}Ruw&4cnCJAk9}0<wf=h;fBK#t%NcA<+i0I7E@_C`|oixA;
zJpznOFFiY3l!nqi3lB<<YW7A3{^V80?zrNAe*$7k{}*}&BEX3s>GEE1(xg6J5*>q*
zF{s5=JVS<pGVTiQlJ;JAH*z#vLihFSm@S0ba7&LY?W~cK>-r~buH-#kF{F-itxiwB
zeFEi5X?1bxMt_4y>vSjWXBwEVU@&)BJJ0h5<jx)bXpx%&I*J1>6MzfUaGDPKo!)^$
z%30%b?(Lt7*kNfzJhPAkl3hNp=`>(&*#S6s;8T0(QED6~@iie>iZ?62+!QK#yp>w&
zpy_T=Ouli&?uSAUg~8M8ir@A3X*Fbz2vqdgatiC5`(}P4P=7bI7#eD<@wx;l4&Sv5
z0(fObc9)~vIHhh{Zl&Oy%(u0SLkVuA9^$Q)+Z9sGaozQ93R)L=fpzrXuWaoniKjwZ
zXn;=sY3z-Bf75T@a}f4V@K7!jBLCHJ5&7-@b5@&(-M~tJf5I$ufDr;)fa|IBtEp4;
z_jz`B9Lb!FKx}iq)gZNwG`Y{Jr%h|8Dc<8=px67jzdwPlUg^z#U!EKPabu_~sy!9p
z#O{@m1aSi>^jS`p-Dwr1o<VaA?9$m?JAon?H^<7#e;*=FgM)llQHf==INLJ~ja>0|
zrnI`i1Zt?y=np}@SB>`Y4-q3I9=KA+HhqeU1B%S_au1&7&sqF`0R@Q;yhg?px!GHc
z#Z4flenJc>0dx&*RGeryJ7mQGhy~!$^ll5A)^COm;T`C8e5K3r5Trs5#9f**Q-(G5
z>Y{(6ka>Wd=wZ>=Ku@2xjK{sP;xsF>ApGi*xcv2_=NOR~+U`$II&i4cM5HrLC^BpT
z00VN9v@Zx~S$w`FcY-LkW&~pKAGz@6%Q<*-KHKXceBrzy!He5kj6f_Rvg_qFe}SFD
z)`JjdQu_4Gas*nRo91ucz0q=2_+0?e(L+J4@4&P5`+x;NHjK^^5^^qOzBPtOMZ8bD
z34qqmN1^dQdE*;4=`6lvQepPd%P#6NRjMCW(Kv{u<D?naF18s;kiqGT%g6Mns1p|<
zg3P<Ndk`NDPMn}_&Pkgg(>#7^jFiuB+C)ajsHkVxnrioWQRf*_2A_h~5J))YR5KBT
zGFlH-tZIVJ-1{nzF_e#pJ`!)NQP^o;o8}efEr4B(@%$E$yYkYeoM0*ke^yqz5K?P0
zzM_pnB0)y<a^S$Bp8ak(h5#AQeRfou5}MNLE$2#g*!x8cpq_zqj<y=|8fO|a8v@%s
zSLmb$J~z%p)Dty{<Dpjo#^D}B4@SOy^}D=~qcd>xt`;fEgFUh(t0pO?X3L6>e|1W|
zXPwHG7%iHOlicHZbrMPnTPcX*aDJqBi@U_B1&vgP_j^e3xw6Tc4g1@xCKm+a<eU)G
zbo+U3BqJvqISHwewupZrP5{U`GHgLpU?f^~opCa8ha~N=;L(;Tu@jNF2lqK1+w*64
ze9=SbwHZ9cJ4|Wy=Oy-3gj}i~nf{};j3`>)h5!<^%O<RYq*2C4s3ld2r*1c`>VeGs
z+hI)LT}GM|feJZGuFFNlL)g;*13YqjvEXU!Aa2{cy*1TWahfbfcP-3<AQ)<pBEzEL
z<}xrZQTySIA%OL!?dGTH=Mm*(TV`>2_ZZ!^lSf3<d!m!8t*uoI`tBKg`VE6nf5&{l
zMKnP=dc4g4JnR*~2-J*U|C+x?RG9u?Bs`br&Vrjw%LtuVMjk8&{m$uW_zR{M<I>vy
z?!q1+t*muDInJBPvmI$T1i{Ssbu#`so^?nrIqIR|O<S{&o+;;|wSsB6&EHhg>xKN7
zyzZP1psFHOOB&n&DgJ$pZMn0vjH7Hs@sRWqLG~5dDnHuy^QW^5b|9u#vNOOe0`o_<
zJ31OHOJ6nhF0}Md=hXSL_On-OepKx%N*j;)&oJ{Mu}rfI0vwCfCAwxQb`S8at2lUy
zh&J*A@m>Byu<Im8<+exrI7_J)En9B*ucV{bZ*0AqX_7>#k+(WUr)ETW9TSghpmI`P
zPMmD9?(dE+S5iF1JwTS!<z=do0y;{OsBo6TNP?7@S?Q7MQW4fm)4kh;oA7VdGvc>y
zBgnzV{_ao0ev}cN-W><HsCW#b@B=(os!1%Z(w<OW6rR$WM|VotiH%pLj*+&@-DWJQ
zgZ<NM;`f+vOm5J_VF*Xy2*Ml7LU6n0I@c7bPA6^0JYD=~5FYT6RE4nsW8oo~<Vwqx
z_0OaiU*RmRdggG@Df;@m&JjrbnB6eY*~p3O-#3UP`$3mh@m^Y$g&**_9K30K_LNKa
z((JiNjQvwTxU`EIa!T3)F{oxYj3c(|?Vp9R{OUu`J%cdcXE=pu*K0Pskr@+b=ilBm
z60Pptf-eAgN=%GCo!HH71Qe~g{!<CKC)TE59`$l?-6ib+#4-u~y^VknAqzK+g+hut
zGmX>FO6PgEY@8CKYJ!{#<RFzIoWcuyp|xod1mk|I=}3&Hnt2xPtA`;W?EtivTJ@?Y
z?%8_Euv~`W9>L#;gcvx3ld0nvknKOUw7Ju60)!C_ki1Q=Cf)#?IG(@kN;p><V2n7%
z7R^-fp`Dz;2Lssx%uP1<F9nD6P*5&hhkduv`wQ}FmQ4%c@v9@%p6*9~Z?g{+WY!Z2
zgDCGWN(;=4Q|dI4i(&5LHys1m^LkUqyU%UJk_%O{n>g4dib5a}siVw&ohgraQ5Q2B
zxvYz1GM^P9GLLhg9RS=ij#UdniK8t$zK-*agCdD#b4NL7>PzwAR3s)Ms3Q3Ezi**7
z-#Pg6i#Z%j`6)5~?-_t@;Euka9~W|)aWZT;piyi$IV>Bmw*9JL!gwe$cZG8b4rWHT
zxq1=$)4+E)`t{T7*`!ReAwU!2ZHlt^1K^|k>22W;jP@x5;juQEIwlGz+0g&$?n+x!
zjw<V;zy9$5Bk4w%_IytZsQxj7QR#AaTy}0a;<vOU2!)XV!{n-MTG5)V<>4CfrL<ms
zan$-(cY$K%>B;N*T2e7~4!~`cEqOb+86ZlB^#rzgpId~(8K^V<y-Y47ureVWY#8;A
zI8CCqZIW^&$U^Vy7%d4J%)d1O3f1lK$xQB6++gYQaE+~-)o+l|OexU^^G3>Aw5+rp
z-6*fFd^p)^1|c@>gP-q4o%jw;Z{z@Bmn5SixE0M6GwYdn$EK_i7UHm?fu^6WAVx{k
zkJNmbHW8p5>E`bPXt2QvUG)tpMY*K_5pMD+J2UqTYEA7{!63M~M?;)nm#RoHjy1P7
z?Jx*#$ZRqK=MpV2^<q`0Ezg^*N*qK@W{$y~l>0N`YYD#~X#Kslf#9D5FOCCi+kbxo
z?HiE5#O;}oY-{Pb1BgD~s0b)q@6}kJ(X*a9$MOLP!LzD|*y;22Hg;#iotdWB7P(5&
zUV7(sjk;af;{n~2aaH_3fcs_wA2)3FDL@Y3#NVi$2sr%;ur3|hiul{jWR(k-C`;=1
z91pKqcl$h$(UO(lF_AusS-?lYy3s%1@wl$rdI3L!bhYs4NQ>FGVKj<s<jlALdR7vm
zo@*+2M=6vi7*grD`5%+ldB3%12b_?TR(k3bl30@bHwXB<AsnsNj!+{*f*Ck6>n06n
z_NJG+kP&{@a>fe*K(^y+$TI*Maq**B{u6qX^o|^~tz*?J<b9&3mHb{Ke;O3*;vOl5
zZ5A$vAzi(nmi7}?cOY&1BfAc?5T;c3!DiUQH7kCVo>p&z{~~|hs0oLUzGqSM-naFW
zP4|C>d75vp$N@xNwOurVI;gBvnUKU|@<x<|01M|xD%;3@IqE?O4y18J<`?jW2gyz*
zxfWOIl}1pQ`(&q$Nm*5CUdn-PwS1a2tOi#-=?!PMpP#^YCn&KCDaY&pr<vg}d_eGT
zBxkZo6SbctH|AP>$}VS2uwYZw?Xk@FB@r_zDXN?I9JtMr8@U(mf*BS~Zc&9$22OIB
zd+P19jwlv}tR$D8E}cc|px*6@HEI~e2|NCOu+5^Z;Ml{(u5P|Tr`^e}&!GmKp!d(H
zCX(Zo(ekv)T){YAZ>qyZDLEcLSmxGBPbn<7M35t0>TcTQ^D%MJrA_2qbf74@EG!4(
z&EuBE9?0K^IH)D*U%Rl=SxIxI3hp}uWCfgaT0fh{b!}rk4};Qx0C+%$zfARQq@3so
z&t0y9)^4*mjiZ6L|MYqNXg3|LIhJSKBRx}2WX51tdg$Wmiu_811(&O~xB&+OdzR|L
z@c<y*^x7^3_TyV)Xf1}QU*iGeso}oafQBq-9IHCQW<LFiL3wsfKdT({4tmo-Kl5uN
z_#G<pTDel)&%i5R&GOdWxsrM#hx3mq#ub_=U3ratmF>Ll@>I~A^TalDFZlnM)RrC6
zQi=Z{4j0vQ^M2qfIWJ8lt_xa?V!+6@odm6MfWxMqybfUjF8^~p8K8|uPXjS`vUv1+
zOviCA_^VyNTyalNyx}pLw?N~EwWW4_xrjM+VrlruyJW=x5Dvk^K%A3+!K+-@${Dz%
zB}FTMrpNF2{lGeb^9*+`U|Gof;l*8w7V2*hOF_VrsGRGr&FC=BL1#W$TnZjxuj(N|
zWX|lSY$a`+0X&Ak80nlqP0uG82GTQi-+6cZh%LqWMh!WOP)5Hc9;sE~2+X;4K%tw}
z7(&efX~9yBJx?tFs`p7ju;CQ<r>4p&jQlz<5q!nazJT28uIx!3N=AFF*X=~lQ>H*_
zXvmxf?t}OGCN<R)CMC;t9jW-jSviS`be1$TzsMV4I<G}Sm*EgJ&<urC_Dw<74uWLr
z2fYAAOSf;)%qM^Jy2q{lNSDW@3hHXiFu+F`ie)k``8#(1h*|cI+w{*2DuisJG9GOK
z!g+Hj$@i`U3T;OBdRxmo)1lUAO@VEP*d9VDz~)D5%fy3>Dz&thadYkDb)k^>dhG#6
z*-|}HwGa?-7A0N*j2*jVc=?{41TDbGGS-JX13&F9(+Oi`ZXKC#fCvD9Dr<yPNb7oB
z6>#9TB;`sVHh^j~J^-eMd!A)L9YC~aU5E;u8r}kR-QL$XJD=FXsp<9i1BmO?O3{Hk
z^Zzu_#uz}Ye}igfy1CMG1qhpG=&9qC0PRkCqUW5BuXg#IIss7{04HCtYwfC%Cq=fT
zj&uR1wn;1%bOJ9&wvrBz_t1WloWST#`U{2r^_I021gdr3;x%igUIWbnx)PsA(V>h(
z?SFp))zs#eqNk_L@6ctS;zCbLWR_z_o*T<tXWG`fw*`pb+ovu-<if=&xz0dHSv(fL
zZy|@-QhS2m6>&=sPSayMI2o{@J^8gZ!5b0vcA2qH8Gr1feis1@qZdlHK{0nTA<c7Q
z?wxiZm>ir|x1r4nx0d7};dNIt;27It<wpv?hclzPo=6wZ6s5+qIL&jcoMz<Mq&&nD
zQa$yvKOe)6Z>yS{UH6z~T`D)@$~}KsJmj!6-0y&vUcLbi?5(y%!iDrb+(W8(rAd$4
z;`mM%<fhD&D+0UOO4@$S`Q+_4enZiV6zPJq*MIGS6{${ZIvmN>=c(Bp^|^Ia4jI`p
zNttSKQn8v|8%WS8N#1lhfEZVg7tY2%P#$Z;F^Oh#d;8GRlO352>^$nhwzyr7PtCg~
zP`YWXC<;z04*A=crRs>bX_`0hTxEZL<vilD6%62m)t_Pp<u321*A@qUx=afrSdL!I
ze%z*!(w2H1FBT^N)lWD#gd{~6k84F~h`%3D6Su>q?Ar0hvYyRrEO5j(K7eZv+GZ-6
z<sd0b!;&2zaB*G5K{i6Xl6mU;TV69`Wdq+bN&=@9Gp>e;2RK@kITn#3E*bb}#>&zn
zGZP>eDyypMF5nojRwl!JY4azV?e+L;>B~<DKuJq)<P0EF<UXlnfxyjRa$^J7URTPl
z&Ucp5wf}rW!oSaX6}%px)r^%PHMS}-k@c3DbYVJ_nnQVXWUT3{IR|*Pqi-qr_2`yQ
z`X@}F1%$jez<{Ve%}f?vlkZ1rX^so(t7<KYazR>Ts@+Xs{b-6X9H87sz5y;9cP{=o
zO);PR9x(veu>%bF6X2avM>@bd>wbJ3@JR04;lLRvfH`I+YcJ}Q$#OSvDoB_*%6%t>
zOrgHCcipC4h>({NcBDOzGd+tIF>D^Ev`YnJ0uk40R(=<LKhUT&0BD?5K6T~Dg8D00
z;w>X)8I7TUh;(Jh6H&9QqB~u!u=Fpia?noT*hQGkI4t*VcE`<YJ%51rShw`vxh4~)
zY2MR6^SlK%WZyBO9$-Lr26-;eDuXf6>L`GNoL6$JpaaqA5zD!A*-<K4)RA`9>6m(9
zxu<7X-3KU=wqaO{MU9vIJDYh%o7MyQym2C&sG0833O|Um|1=WmHWaVvwH>acT^Zw~
zxLugKqS@(pnq*d&3bH+#-aF^^sYxTL4SyhNy)9<bdDcH2g-*n8YO0gQev*6eFN9BC
zpqE$~f)n#??euQONGNF6+Y>@^-giy^aR_>N4U`E+g_vtZit>pq36R6*v(cl``sf}g
zN*01~6-PJXb!)Ev&xFX8iLkAU^V9uIN@PZ)X57bQyew{7AcJpi9WVMLyPi33wO@rL
z;ATe?6Z4<~rEE~dMk!|f4RBF#Ohlk3;Gp(mB2qq_Gs*8oRXjs2g8*C=!#jzQs_WSl
z<0>ojucFy;nUTj7M%q9>>DhHnU{<{7zi_|%-vEKMBvUBBY<iR?_n*$<?=B=FRbz^h
zXcg&%86v9%ANpr%Jc8Ljb^m_x7!BC2VNqjWO3xk4(rbMkgdm4EA*yV+HcaGyLz?TS
zK9N9=aO8?!fGBjc_7asj5POq1I~>`~U8Gvp=c2rh`UZ(gDWgesA)f%|X5_Xf{>oc%
z=)aw*&jx?pIK2We&b)Wb|Coe{9tl~-bz0zzq)M(V0pY<2cLuEl_b|Qp!JQ>}({<b!
zf9B}_|BgTgu5>sSn?c7gmPVh`B9fxO8hu~A5S355T!8(314JhfbvxwA*7@tM2N(0l
z=Lt`=t}TS4IgavJ2SNaJ1gq!k;yY5fu3&KMqKQDyJ`G3a8o}>|C)Xt&M7)JqHAYGu
z@vI4w_N<2{ixYui5LhKMEo7Lj{XpBzB{b<iv^~SH_yEtP0u{)9BLW&&o)#$zy;83B
zmzi3_y)@T(QK7%|SA@BjxKbS?*FxID8+{0&dh-wwx8u69FT~YzBzyG}xbaYvw6TE3
za<e|s?i>IJ(Z2;KO>t>=USKN3BkA(&#;r1=t8zIka~=}B^bq<eyVN#(=}$_Md+0`6
zW>fU+pHx&|olIJN1Mt?<gm8c=cwfyBM+GIgYrgpd@W!k+>j>maN>2{sY@{xues|8|
ze64^ia(&%*Ms8#|T=YJGK2H4)sVH2aw*I*+Ar<MOET}Bivi~)0GhOcfW+re+YODRO
zGr&Z<pQ-VcPRi-oP^anKFzg*sb6+V;=gM(|&&YL}0R&zKp8dIHn#MK$06@OXWFaQj
zv#+K+0~fUj;Q%`v+?)M-kXSa|!kt$;WE?uEBDEeb1CFe+Pdi$-0B+|T&s_(Z^knU6
zLg|CI<GDu+AYsPyjC6ZQa-}nNUs_MYrR{H&RvC@5kT^^s>XO{nw`~lt6F)|h?F3Ld
zDZ;cy<?FxSfV;FDJpUb5e3jO9JP4~fq#kKs@XlC$opWlTY3=U=5O{$C)IrKF9Hd6s
zIV&lgYRGq?J@%UmM~2I%>OGcD@y7g2py#<c8l(yomCycXxPiPfHNfzZUNdi1h?b1i
z`hC?+!&yn6m*U#GjuahmW)u346w|N$3CPC*&`dDMqIRV&g>laZFIQ9+YTwmX_Z>pH
zfBYQ(FPLuDzAhYPdzxd7HEd^fS!Y3Bk)1AFtC72Y3v<L>o-DlE$dbQD{HG`zy<gHY
zt-trA_u2}M7-;3QJfED9IR7n!KuJnm1*u1Mx<lwX#C1SeS2l72jg-6@-S)q3(X(63
zgJQs+Iff1n{bmesIS?hyILbg=dWC{rkZ!$}Uu(PvZ!&zRwoWn?G4D$DUf^Oxrl6yQ
z%JM$8*5y$!fHb>oN^O$(+>}8J{ES*nG2OV%Q?OacwIvyUn1i@+y%f<yTj1>4m=yT)
zu(1C7fO>hp%`nIYcGxlq0g8_(@Y$ON;p}g0YNb+#Go2DHvw{xD&amf1onC9op;nMm
z!GZx9yBPoZ#pY@kkvTk}TBhz>`Vr2U(nmp@b)ncDL0>)9Nq*-56doY^<GnsMU+nMW
z$HF5Fe=lWZpYTe_%26R^I`tNiEOP2H<p8da>tez}>oJ@x`33oOyN^^cMHbpKmq(D@
zp+?jEy)%HKzPcZ7P)Z+|;1@@k1+3v9FOy?a2fvz6h+%SXLPI6G6rQ)+&RWoLW&s~u
z2TWha*F$JKbZy>_C)C`(UJ@{SunV_$tj0OR-$4QoTc65kSu}Hg)GqIGN-={`v7Hp3
zCsnIR$a>8YsNc~vTL3kXR%}KF!2#ce^Nh!Eq|#^6a<m(gtn>tM?NrRP>GkZ938E}{
zt$nl`Ljv4I*po^~MJ^kL0nZMu^R9C`F}075AAnlm9_Hf&IizIDipvc=1+lzZbU)F1
z5colDZE1i5&zE6$!*J56eJ*AE<bj`cr{r!>@F_Jpk3$VmZmIxnd;ISu3F1xBNnL%w
zxrpfQ(VE;S9rO1aoU;9!XkEi!alQE8$Ah=WE1clEk#JC~r>3VxlFW7iU*kGxJIFhu
ze~no>w@hn|8t5}oq`;l<ns3z`y8yZV-(EMe%JJ10&;d!zRAnbOA(!<}86izt5y<`?
z4t)lLHe(0?!Z*v8oRe$bIx5%ffs@A@*`;{1oqs>kh5R-hW&*kR3_{Sjr%P%B=8nih
z#sZJ7ZdvA8dW<<W-Sk5Q1A|OYCJ@oiZs<|xw?(1Q5t;Btom|KC2{_<kEx+kL^*5w#
z<i;$gJ*7>FS3Njg=>aJL4=@gp*(!(4+-ZC-L2KR8^)v8D*XMP1Grbm;S#t!<h{;PK
z1DUJ3FNvSk`6w|Fkee-1OXBelQhBY-Lk$u=6y#{8CKNv*g^gmwQSl0Ae$yJO@K@@C
z)Nn56b7x8HTm>_}e!(#Rp=!>F<6`L#Sb*WL7K6y(TQg%xATtO7PsyR+rDeV12SOU+
z8`PkkRSu>FzrY#(Egfh6iR#s5!hZt9BHpjKrii~*!>$M57RilwBQzv!ERykmy06dc
z(E*N{L5KwgJzvWW=NJG(zXgCcM{Ryde6)5qlU3tnoFjn{wbVN92jZ}e<L_JjzSmi`
z<=RTlZ*?lsGOvGlM+S?3+v~xt(#|oxnsyOrq|Lw?r2a7?^l7H<g}C64U#@}MirB(0
z6JpQ~^0ZbOKJ|EnDQW%!2rqZ6stFLllfgwEKKV1Emu||q3~zv*bB@MzYflQE$<#4b
z%$wKx?=|7eP0^M?h5{He*?An6-RiSX$;cAAB9?Gf($hpcjiOS9LYG!{eKPr+`E*fF
z*x?JrJ7o%TmYtFPO@$oiD5WEVNB+#3^;>A1+}gr?y61kijR$ot|JDS+m9I;BYuSaK
z!K|day#RHOIm&$&Tp%fyc>fbT{Pge(_@!hG+LN_l*5AvS`Jeq8nO^y5ir}5%?LTvs
z+mY$at|&gf`p5n<-L0GMoPw{$dR{pRSQqim3`Vszfa%3lBLP2bJ)Va5eyOf5x%*D)
z3H*gP0PF2lMkkF6qpk|p>wk(G5^~c>C7Zl}Y&`aU+UF^(p^ZsL^(VddIMI5EW>7M7
zNo7fi9f`vsV(1Qf+sHKeO@7UDmm%?NcjYL(kXX5qr^|}?ePPzO7Zs6p?lpT+xBWbt
z<r(+@60cW!>R5F?x#mJwq-DGm5i}8rgc0})F!+&U#A{@MS4ezVG_W#A)zMc(3R;U&
z4<A*{7@GHTkUUH2(EyBa9qZ;#j%sf2uYLx_g9Az0naP38n7q&cB<B++A1(VG^mTT7
zyWZs;;goc`@EWAbSofAqar;BpbI<N_WJyqDcALW8W|}17!ruF&SHLZzF0mJ!(c5G-
z9q~T^FBnZrH)nW)7jAmMh5Gds1-9JJ3wi|n9$V0IIOH;fw`ka~KO?(+ggpGe20h}5
z*@L(>G;YcMKEMMOy6-B7bNN}DfS!7{t@b(o2%V&VKLOkcOjhqruK~U)tzk|OA^@A|
z^Ts(`Ngc>5V~_sXQd|gEZ&buFz!|Tkm}n>_a#S(IRr>ra*x@=20fAxhUo}$%AQ5{f
ziAV+9zZ|D$J@>Ay$p|3=M>xS0xPhQK5Gn)eWpZag+k$eL+=;+oL$u(eh5_51{(w&o
zqi5%|mPEwu-VZ?$XM({SwBAC@L)KkO-G~ml=~oewfgIm@erEmgZ(?Cxa|Rg)&A#sX
znIfnaP&kP)I*#?09mYS&wX)pze7RP+t7t<BKu7odu<6`{qi77L66oODN5!vAd+SOT
zI9o|q^giNdncr;W;QIOVoI^pW3XY=oRxNmRTey9?1>wv11mW#+`QRA=Pdcr9^q#?2
zx4g!g&pO8h)m0ehq<Fg7qO4czECIm$Q$`0I!=W-`NeE&I{PZc00|$1!?z%yF{)Kfw
zIB;XbSQ33jz0f}Tb|$Bx?n;b<(yO7nS1DF+i;{Z(<dA*uc<uT%o>PIhpNw!s@HOS-
zpN_+m9qGORC+gAdGXb~blY$_4`TfA}K`QhPkdh<t90=G^5h=w)kzE-X0!s7C3`QLs
zj(W~B76BC9dJkfZ7&-R-`v7XgB*U3fzX&>#z;SVqL8CSr;=DMJ+wTLoUhGXNtc|t0
zdnLz?*c5eC1~MDhg;(nfT-Y&H-I$P^-n2&VVR@}$0H}W3kv0e;69+d<n<3Zs(E6kl
zRMA=z+ygpQRuE5f6hSlD8KesUL-IoLD}D@S*tbv5Ko?&W_`&>yfS23KKhaP(d(@+v
zNDBw)Ulssy(_6P1_-xzzM}4_B)N~yQR}~QcJ{^U=oSn2Rdk^YC{SMM{cW&J=183wo
ziU1&oPYcU1mQv|xE<#O|rnw(y(^vp{WMmg$hizJO4sbNGlVY6b2!7M!>o}LLJjH3w
zzV>JbA?m9A$YrW7ZXB!6+H<+cb&}qFq)L$?-}{0lNc9}-WPt8##jm=Gd!wYRm-=bu
z+sXkY=u-6DtvH%^>26UU{%IUs3UX{ykffqV@ghpHKwsw4WuT0E3S=f42VBxf#_H%g
z;EVKz1i|8O*E_>5tb_L~<7prk-5QV4$A{|)zi)t`8tX^#D;FQbb6Q*gBgaUW6X=E@
zEs~1#9=}TjfKUCo5WB%GMI)yfamNu8<u3F^e^=f3?Ed%c<@?bd%-BWKt-3s;VkEEo
zZMn5_`h5EI4QQ*_!6<MXrc`ON*AqcJ)oaX&8?2%ZpM4q5s@vd~4WRh<3~H!Fd*sAA
zSR|53kDTi4#s`4QpuG!D>}~o{^wRO9`MZ;#k9fr5q}fXHpkh~cEs){zSlXF{^RC5<
zBuE0a_s(o3#j?4TB&%Jym*91mXPo^LLYKQb*m^Td$GHEX*U$25fL&{OoJ^a+S2Vt{
zxiZgRpjij_?2_d&Aih<m7Q4<g3awI}@E~WWnj*~FIG{!N!kTlj1gVQKw86;#Ja!pl
zjSPYt*FTU&K_G?=-734FzCl*gQyVdqzjt9&@<9nGE2SBhmJl4XB5g>k%+UgU8*`QD
z-7QIEhyvep)PfwTPatfG%4szpifLFnT+ozc0e`V4<v(vBQj9`Mwrd80k-s?c##3r~
zo|SVBya*joHm|DeG$Y`F$(z|O2f_s?D8)GE5!7^#g%IyPzL4-j{4wkA10X2uci(2N
zAYLEMa?t7}9zF=1^KQc%6N0K=FQ~f8zOEkGWhN=oHfD_qNysREMUaJDACv@E?s`<y
zrNRxp=b(d-xXfA;4iWOJEG}ibiteOGcGtx9mTq4=R8%smsLMy@#@~y=y_#RcY9D^J
zBf$p+u=nTL@jXZpA$h#oI-(J<tZvf8k?NcIMUp+K8F`!vWI10@b-(K7$E~U3dmovs
z0_bJPvIDb-b^k6?+<&Z5Iex#Y)H{(^-LOK>Am51nlG^GTyG{+ZX=i!HKS42M4eJ}W
zR*1Dr>bR6S{9vTI$Er>~epj4|Y{V=}3u_OV^(-A&cjyWHGh3TeW<5REle`grUy0ku
zGF`SWDBEvD;r~J4&8)8do<ZWWpWTCSiF%mwoT+-&wD>){<%mPl(#>IVhTfD!X*Djt
zaw2Wqq}SiUz)m<)fT$C^x|k(HP__*=BvsRp9k`iBD8<iR#f~a%!2N3m<kF(a)AJq)
z4sls~r)4guC4o3VV;e`&P#y$je7Apd9u4P6OGP=xsJBGW9rXxJe*xqlR8K_9!oB@7
zt{QPsIrsF77J(gE6Vh(rvXOsN7OSRD*LOGI@YkqvKH?i1{XM+FfWRp|%?yT8%ZK`w
z=HHNs_q%XU(KPRITaL6O6PJRk|LhEJyyX7I=h)0N<U6wKd&Kr+<0=KGOQMqz?Oz9`
zj&PE>&cGdM*XNgUIdHE>^d<vDk~z%ZfOh#06TZq70Lgw-)9t!#Tnar;#GT&L7u^{-
z44@*9jQAE-JQYs#D#yyfKZSuniI-$GNxSRA{d175mD8R2HU2DJ1;bGi)tf%kXc^2<
zsw6oETFB{&CW3sP0zX>pxm{~aS^!U9RrgLDeW!<p?-&O_^O-cbUy<hTH@GeC=w4lU
zX4-P<fWj8#o53h$pJg<Pv!99jx^m+=bEIv*Kx=aeLU~yG-=W$SKV+{WU(($(eA4Xw
z%t$k(=K&1PvbM30KWCihD~eO^=4a7z;#VWpJnNivnsxPLOR^QARXEYy|I&IIw2pm}
zAfx8tlBwzfsDt+jZ)_Bv=(^YDDuQm6Iu}SNJ&}x85^x|0yKs`@diw3){qGqp&Otqm
zp?0|`VtgE~1E7`!4hR!N)G7w|-bV4a-^T;@BHJ5tR)F>SN{+xVIe!KiDt9~ISlIz$
zbjwId7G%HU1WupAMtb^`#^)-p7?&28ii{m(qyXoBONO1gRXVYR8vwfGB(|NvyG&`k
zcLt60Y(Wb%iO$Z{(|E(8d{)5ScF7PR=B2h0+rb;vJ(d9AxMXvimfiR?TgAyKM5z$C
zwer5&ilVc4uq3fK?hbXM%ep|PIraYg2IJ5ZP|qW+&A|=n^5B$b+af8Pi0!gA6uV2o
zZCwHZBTVjJovTHJUE>=D+;pl0?r|w>{@D>sfo2#I)~W92O*Ieq2+&NTaz}^;cl<~I
z_}s&zr8m>h!}!Z4#Om-M4tOqZuU>CMvin!}M%-iJ+;lk79P{aQ@4;S@)*M4np9qt(
z&cZFTZmx3%RQAuYBY}PFrJMJ_&ig#k)$O*cw!?Apm~daDg8<eF`l|;VTWUxP0zWG7
z<S=8VXYPo&^SWu>f3Y$kzTZ*C*XQ-r-87@N8@MAq^Y)x*bgY#eJo$=LbuSa=F&lcF
z+Cxb^40fKEC1PEOs&f<>Zog$vrPYj;u}t(<W=5mk#HZWWZ~wPJ*yv+8OhGb_3s4~u
ziHmmREV^NN0h%Q7jXPLfFx<J_;a;)plB^d^|JzTBCB11NzsEIAnnWwZBT7mm#@731
zgC9Y)gr~x^SlD*f=cyrQOJSPQAh~=NDRwU|3v-Rgo35GFuDTJDyuiG(7n}Vbt*M$=
z$^3ml`ITsFb)N=6k{2p+Y5j<v-+D(VGU!STxZ#Y?aOVR4d_KeZrtxW+;#?l8*-OZ+
zD;_(2j#op8y5F0ou=LczZJY_iZ4U3_sn=<WvZYV%!2DvOj}_TX*OA=V9Gd)n0Mh&E
z)-WudxU)<L0v=ETKz{&hV@EnLtZoL|F2t9{EfWEpG!T-H&dwo$mA*C>joi~UlQ5Yk
z!6Upb%5wFy>WO!FaQdEwQUEnF>#o2jxbM=EEcN1@>*NYlf`D?~qDOLwm}Zq@;v^MG
zuHa>3b=_mZ1Hf~Ym`HQX<E&K`$mnwYC07nu>y=**zH^)O8#|bDzGgyl?MYKF*|pdt
zS^5Kh1)e3thuMMqBoh-G-OQuJgBAt|y6*ZW2EiuYugFSmI-|?#x8vl;;|nY_X&Xn1
z=Y%a&Yuuv5V>W1==X=Y<bgA4$(1j?#+%k_8rg2)@u<q}d6W8s@k^!l#{E-~5fD5s{
zuJmdkRi>^SbFMwSq3Swg{^;`-Af#t1eyEMJ%tTZJh;iqih%kO))(*Eh_KJigh9EPP
zW9@lzM|ONxmY!Ym{3!#i@f(Ggn=)38hVp=qE)FvNf~w<;o6{fQW1H*6>`f6_^AI`P
z|4+)<M*#oNI1vsuBFZ!G$y|pp*ZJ;9k*#M==Vr}%;JH^{&Xn~wfWSfx7lRWcBe(Q*
zJ*e;UpVZa?9waKW8hL{=;xu^y`-v?}W>szJiRl^gt=m75BK)0hfaaMU|4MjXm|(U}
z&uFf=>io9=I6NSbS%itVQ~zIx=kT|kpzY)Fe0-B`ABS?X?efgd;!uCeDLA>|!`j-d
z)T0*|N(B`&R)&B)!hX7DAi=HZ6^y(i2lAv4g>!^MVurqFjyuT?UavHF)$<3y_oF^D
zO`ti18@mLOT<lNp^01PYwI^x<?VC-CaS<RO4(l)!fHaRloPf9v0;dtm;z!DBJRq^O
zApH9fsa;=0iJ897^aRnguex=feNcDTRnz4OmD{8;0l|u6&7U#T(+_^11l5asw@iD0
z1I}(p)wHHOd((Vj4}{g1w*t|NorFQ0#Or+vY`{}(=^4#D0?mhIh7@3-b)(;ph@57Z
z<W=2iBWc61dACpLne>9@1E3hNO$Cc3e**{xDOgKQkIp$QAw(c_DQC0GgA=}Rj${P`
zf1b)~>Kp7ksI&Nc2FvGTl^oW|_@SbwQ7^zf0I@oWl*d`pG6e>l{+hON01<0%e<8=#
zYSf9vb?~;6pLpHzs~X*Q2ZS=FRI+ewVhnl)qt64<Br75vIj;VQ@i(<4T&FGFzKm0Z
z`>%h(Y&kq@+l8N#uAPV~2=zr~^D?XCDSgKWGUAmq6G1SGo!ze>_5T`zg;S(`YB37-
z|Ek2R)N5<Q^jtw`9PgmO=|x2V&D!wX!cznVZohjN`@Z9|15T4}A6QNLSP=L-;(WTX
zekLkMnW3&z?)BpMiICN)XQ`qxKwq3s2a3x;!{}`_M7o_NvGjfK=v7y;2KUPRyUqx!
z`I=r^Fa18v@`?yNKVp{mH$)|EqLDpkvkm!nKDd#e>*)=%>DKvb5xMHE=dZNFHC^9?
z>xaW6)Dq+e#7K)>BOtBy=IW^tXN{s9a>86vPaJbpAXB|%x@hYr^@EMrfD~e~bLMT5
z{rOly?V6sH^**rXD<?67%mgEHyz%+HN%{R27yQx~sR4WBBN6l9b*E&FWpM%K^YbWs
zfuHn`V)&qb#4FB6I!%~iUk5~y&ck82*G&)qgSDmTo~j8g8Iuw8TnO7cN!yrfE~jan
zc-j5$V#AQiMCvsz3Y~SzE-(*xF{i34+m6<FN8o-*VDiB@QHGOyeK3l)m?3K8ID|o9
z9@&1(G2twlIn_zS&nK)7K##Pdm7=d_J^MM+rU01c{?-#S^>F`jXK-s4S~PnnSCw!R
z^TiW40)8_zI_f?#X>Nh)h_u!Y-pR)!6!>$k4MPTJ3o`dLOLlu{k>gTA_{SS@NE<bP
z%=kd!4VHs60oR<C90%^DvCF?n-Yz}iZ$N2Wkd(G;>qJR<ha*g?;kDO$Pd~wdzem|o
za6_`63#<s~0fu}ce&Q?LuUeP4J(e^lB{6;{vE^8o4r#xi{ajzpJsxSo)R86^&*UIA
zM8E8G1%svNHe~A!lop)BPR{R1?G@P@8@aBekFp0k!CjFL;MUSLj3v<ZcgQyg8SM7z
zR@tq<bzKn3Pt{=>F$z4DKs~A7H%Jq3U4w0qVnjkYB}fnmE(R<2MYbu@vh9Y0{H<f+
z=@Ds5Hve20Bbag^QYH|{tEncIj`eKbM0{XXRBj6H+%S^kchcPc-wMXbHEQ)c2iWPi
z)O?d`iIXaSe}az)cCshZX&4r?#!wk&-q&}gA!D*1FcuE@lKsI0D2g<xC#H!!pFeO|
zcw5CxiQ=*0j0&Zg#b3lkU4XdzH*fq4`WKJuav%G@WDrIydpv%}k{vDc)XSKN=T1&^
z0~w|7(BJ%$JD7)PpZ^TRonG-<q9XAGt#6|5=--zCK#I#Q73i`%Fu3kpB1N<H`TLzn
zkYia%iBd*wQc5|Xk<|LtHMxyY;f26<eg!l0iv;BFzeUU9Cdii#Oc_A1$Z4aqHSV0X
zcWIlv_jh6{4)p!BT1Mp7)hp^vI#L=Z!;$}|A-hLKB-WP_iM{^olmspV3@hvb#2tNl
zZVaJ=oaom$+(Ed0^SG_<YI^tpXfYNcN5F;tI4xO?^w{YV_4@$NG4*Ire-G3dkTkr8
zTUR?B<I`&|QW*vQZX=s*)zt%FoO}EeH?ZhoklM%K7yl*DmL~wYd5xv+S!9mk0O8lG
zhr@uA>S{7D3rq!~YpOw>L;p?cJ>a(;09Jj#Xq3zr{s}AzRBu|Z0XQ5;=L!7;hfu3t
zV_Xq8;f)NjVU>(YFPjACNlu*rD*1~X|2qfG-LjsBUF58s;T_a!b~(H{gbQ4LRcH^l
z>7Q6~3d8qg_8{(RKuQ9c+norXTGx|9Jg&AULVy!BtfOU2Q~(l~P}6Wt&w7G8_CB6F
zeWBR0*-C1a@AteiLIYma=Ku(If*ndcphSK!?5~3C+;N}88<JSpc2BVnAWSK#;SV7l
z?!OE;bx!3;%Pmt*Y3V%(WH)+Rqz70RT~1A}rchp78lNZPr0F`uNwL<q9FIR9nm6qx
z0Ok^bu>>;5!!agx7x1Ngx=(2$24_{XMqAt>5Ii@K4ARvFtx=Fx1rMKcdbmcq9C16`
zEq)O0wq2^$RRJ+gNI?Fj$mObO!B39B%=Z@Z0b<spS;!;^v#-OCV^~u#>NX3Z_Dz!j
zNF{eZCVY+tbkY(8<cc>MNsvzRxdl<q?PvdZV$k@!oPVuh{J^;W9;ArW5tFzvY#ai7
z3-uF#W&=W$SS_Sk%Qjw$esf6mnV$k=l-@oI_#gp6^yxEl7DA5s0Fe0d8cHCDY^LbZ
zEHLW*Hbu%Wv6wBzgwx?)0eRkhs&jgZfRgd~nFNv~2BUc$s?TdmCxYw0C4DpmcA*B8
zyd&T!cZ_-aZ9gABX{MZ;@7DYiw26)s(%l9{ViWW4Yb^XXo-HV+f{&J*TBn5NWYu$(
zRa`Xs@8bX~E~$udy?Ax4^b`^0-IQJuE*<L}hJQ{<|Hw!z0WZ*>9tN2ua*I~D7h+E_
zqL?0Mf1Iak;z-~0h#r2yZYw`wvNg*z%3;;h0_oq%Z^yCK9DD}WsK)ObECjxKjgH@S
z71%|3AykS*BG3Zz__OY<F@Rrr+>5^<Ehi+8CY6Q&xH*#U8tzEdAt9HziFXfk5?$YI
zKec7xsg|#vb8P2cyyky1Ju79yKYaste4AOoXf;HwBzO+eYnN#k&hJ-iJO*$9-1GFF
z9cwR|0hfZ?*k!bwI3y>t{*LF2n0I9m0=Tl4rpFLm=<%6JyMfzujlxg%^cH?IeheN_
z*XVID5K5nw^W6~-%S@NGQubRSaDjezn!w_sT<QV|00KLV(<nV<D(bwhobyo@m;OIq
z#o>oE{YIoFlPPd>VJ77GPp<;pq<u<i90yPD5f3~dGkv}{J7Ute3=|72TDshi<l7M-
z>{*fP#$<=xocS#9GR>>H<_i&_I4%izo1<aP&T<TPwWYYrsO+M4GUUShK2lnZE++2V
z{mlz2Q#nqcq`SzzT~FBUhG%qT_6#{IOjCz&2lp}Uw_Mio6g1rDEI3$>TxVq3@*n1`
z$Y*ECAfk(PgV$()fo$lW^Xkv>GaIAg6vE}8|BHz<%+Yg><lWD|CW71meA^27@aOHH
z^|Urs;?+r{Ie~wjoQqE{Msd27Fm`xuP2tWG^{6I?`oW|At=rJ~!E7Pmxs)ujBby>7
zfO6_K9*S|vR5T}Nzzj@Y2(88TT(v#EX4Ts$C-qUD4%CTY(7}viROBTer6-mP6{mGw
za$H0tm;bH5Bc>Y9?VcN=vWx*b$|}vR`_~mQ^N8+R^>dzPnmzbeGMJ&9gEIpVj<(3%
zG%6DE4OBg=GuasrVAL&e+C}7;PxCjB8Sf{SaXbs=c3-w2n@P;MJ#?IEz0Q)rjNS7>
zm|P<_mC+l=DXu(6DEvmJmka}E5Q=CJ;<MW-@$Xx3qvaIkAhmRNn;PQeSSKEkq@6mb
ziT(E+fEv?rL<&Zfkli|@1(y&3q&N^fjSftKyZzYan_%n7t*XWA0_EKE<Msf(h)>4;
zErC*}S2S~e`mKk<V%%h#!tFcGObLd$7ChRLq|9=OytNW!r{Q}R7veq;y^h)34%Cr$
zveuLs`agwDnh5tRFfYyRaM#S_buP3@eqP4Dmmd=RfA-!3qWLqt=$<Pze?MRV%`REE
z?bMCjdIum=_RYJu!N1zFJA!~f7g$cJZW~`W=*_H&hf0ad-#bD?+}3lOmKcB~QkPuG
zm#EE_@O+U|<vJ(icF-p?mQ-;S>I<9HRQN~;;_QU^=t#ozp<;-+jTH(0{YqLT&Gpgw
z#r^QI0O%`l-cDxfm`d8utQow!xzFY{PG37oL`^%=QXfV@9z?T%bj!8}CCi4M<;d5a
za%IAfGLFfa&23`aUZkN^`a$r}ONO|nh>7x&UBfjwRt<CHb^1Sd^-f7$t@O0HizUmj
z31Ho=_BWt_kM=oaY<X|6Mz3f5QU)RM($S+djBl27t$3(6A-}SwI)|?2(LB(LP(-1t
zN49=ZDS^GqaQ123Jn8BjRL@l_X$h|Xqw7nMWyx_IucUoBj@J7hVSu21HT^MX7PIcE
z%y<#*5(#htA^?{&1@6MQ``S5Uv~ku)eLZqlOy=7-z&w(1?c$JQ>q6{6e>euE+fDA`
zehCC?fWiI#hw53r^~z5Gt<2NUj|2dnQQlY*;#MD~d%P-T(cBx(-pC%``S*xBC_s~g
z^fj8AYGYR~NJw*d%9P(!m#I?kyuR(ZHgTx_K7&C&^DTZ0o^E(qzeYzNuqtJ$F!}%{
zHRm9M#-#or4sdnQyb&)2L`U$!u7q3Z?@vI;<6z<QE^R#x-DaSr*NxBor7{7T)o;YZ
znw)&eb~$&k^<_E?WI{)Pxg9Q^aWX`1#}$!?gqVJ-*Af7;t@@fh<01)NqiT|HL*tbu
z`z>`*C`o+)zI4qZqgYyNy<2%4V5IrH*IjJg7i}MptAyA1_9REHb(^VU95h75@I139
zyP!!ICmY+9)VnG&Of#!pImhgupEK}crZKmQi6BYoNNJq9pUc_Zu)6UN2(jZ#@$y<U
zyA@iK%JLg4RschPPhx2FYm>h*BVB@v_K!Pwb4ymw4t^|Hun}_X0fAJew~7bCsv0X(
z%soHp@&@3X>=eNPxa4BfgL%Vc{R~>9#+UFJc7Q;R4duBTInO=H(*nMPo^x!t-f!ae
zBG}Dn@&Z!!;t7-dTRP&4o@?69(KA!tLc}jH`*AJcpO_L47B1g#+TsR87+I&vPnbJ-
zt3e31g0Co3d?k0>zWON(Z=5m#fqnIox|t%_je~)2jv*w^@}s&7KviJYvax&iPlD|4
zLp;NI|6H{j7?{)7d9IS`5Mgtq?&^{m9_Q#+p7ANKE<|8GZQ2Tm>yie=q(bmC@;HFv
zH$Rml1Pt&u-QfTN%;{+qcl_)4ipC$NAn?BA>L#Gz*7)G!8|<g#P;Wk5YyNwb1I6)0
zk}HgaGoj5C#+`IP6o65XmTEKZZR~%&y=0)~SU<Dh;M%b{xvM}c1<}O_If67H?7n3U
zio@ti7XFpko?Ue8bOSc49D_r)Ua)dqg<E_IZ12FSKY2$hQy1IpLHI<*E;pXm*`s}|
z3@$m8e?n5hRqOsvSz?ejDLof_g{(Ofh<gh~uJfYsMb2gd|N2qi_?KHi8=r3gmQ>uE
zyJ{q{-4q~j-yNu$)R9W;?xRgRvYWSxKMboexEe<Ftn>o5`-J)jz0&ns6TKOoFxR-s
zn7$Zk7#ze~rQ0_Ejaw~2r*~%j^Y*4Mn7v`|t)8}K`!}FIyVo5Kz^cw=sNY+laoI5_
z?Y2ziHklV0U>s9Vmn8(mTVyCGaU!Rg9YI>5&Lv6-1CeQc{9(XWI1etR@jE<-ypaf6
zk!@L7K2Q8CJuG^WxYm-?+s>$Wo1Z|p5ddnLV{r9yIz=~WsDUI?1T-WH-E1YfOs^yv
zOfKO!P^X^3cKwbdb?@K4V>Ya<&=Bni79AA$8oIW=JKY{-nPgF~_!_aQio;1#E4dLQ
zbA05oxU4hJTS0WJ?whgY+)LlD;D`UYeq__mWFz}^eeqE)8K>jB!M>gJ^E}<V+lTVp
zaQ1qe7?HEE-9+Whv9ssSa(^rT>Mn4>ZiV`4z85IVNB{uoHo7$a&H)D)euIeriw7Ps
zGfEYw^crb6{TJpHq<t?9%TRuH$||T9(BfHT6C<bcUp~Vr)ZYZBoWy$j&RY2`Q|BbU
z)pUvo8u||u<;$CZ;1i@|rg{dq-`qsD1<!AcVOU!lxC~1IO7xXpX&>f_C|H-=1^Nu(
zEB^fkHG|Mf%M=g^(Jg6RmFa;BM6RPEo*}H7w*cJI;#-|^gw}e_kq!ue6+%Zmhw)68
zXL7Rt37?dKgR-@#Y3@L9Te>`8Y=_k_+w}#~yRU|lIEt=5z@6ack?ArDr~u~~%F_Vo
zeS6w&=cKwm(lCY2W0Lsx>=a7=dm9J+nO{{GAuC<ocTS-<*F-J5wODXS{@%u)?^zKj
znR-gIXz{w+fne%8CGmFB@4uOeXucLnp9eJj*97_BYaAosoQr%O+q=O?%SIgE6NJ<t
zybUBKP5TlqYZSfEO_RcI^t$^`_eYk?O7C|?twD%z({KZ&x_=vGoQzpB7sCGOb??zn
z*4C&<%salGFm3`qzZ(gFiYPe#X}_|Ds{2ehy&N)qGs%ct-E1YTm5}g+UMHG_J6#q=
z*4REs?Z1W`nqPnMK}tX+?fFRts=RC7h?kPWkV(*3LN3SD6FsgX@Vcx@M4k#=(JX-l
ziRYcRacj02BdIhn*n-j=iG2C0+i-eags3U-bFR^%3~h$dUrn|6JA$rYq>0DspSBFB
zKYrtXNQRZ|${U4ryX{!NZ^1n`N6zMg&)C<Pb}IeZuliEU$3fsO-mdXd@4UfG#?=b=
z`h;CUS5E4B?HR|v>>Zx3OW>HCagwM9|G7l|1u#;>`qY(ymb37g<>|R;N}_BeW&f5*
z5R$;3bxAaWJ;(Km12|^E)YdPE5{r^QoXD}w&ukurUEHgo+&DOlW02}um4jEmw}9J=
z^QNaw>-P1ZrwL$Us75*tX$1!~y<L#tWPR*^ci}|PcZrGZj+&Yw-&`lBq}A_D{}z|D
z;P=P{Pgo)n4`Q&(rn42#GQ;n0%muWhZNGl4sV#2Lr8$IrXKlaAOs@g394JxHyC9cx
zoX@<+)d}isFp}qR`AToyHME|zl0)3AUOkVagj;_MKJeU{cCt*ek!G87D!tFNGEkPR
zemn5LX*wKh<@C?0YM)LEO|4np%eYV31+N>-+DxC1pJ=F@#0GwZ%ddxd`l@+~kW|lZ
zr(yK>3im^{KpX^d&dTVDX2}hqQ0hnrjHw%yBM#if|CK;~>UE!)Um%7orF#mpbL!>q
z2b7V*mKh9$bWY&w8I08uqHGW(y^!3EzbxIg%BuggpeaPFLmI8G_S;baj;-PR{Rtq)
z)G(BG9PXVgF8%KjhuFEL@C!GAI|x<<G2)EB$~NxAX=Uq&xDsyTixxg0dYUOwb}?_4
zZ$N|WcJ$hFseX_F{C;4?Bh6-j0lD+w{|gocfm@%|?~^H}xgWsr^mH<X>FKxwD$MZS
zxIUBDVV^-6#NSPcse`<ja$qV*=#rT{KqA-6R9@Jj)FVwK1e-=S@E2h0xH)4fK(qSX
zbscFOijYYujM`!pllc1+F3!r9Nz_T%v#eVrk&xh|H-q7C+h(*5?|qFcXAOvxdj0AH
z)&*Vd!dNbH|4fGdXJAJ}<Me(d{(_!Y&UJ!LtY-swcB#f+7IALHH*!sdKU_CGs~h72
zh!ZjZ+>h&Rw-g8Gb;Po4&or{;&fRy?!lywv&&<J8aXdo(KXqKtA`Z?f_Rh)HEyaNn
z01}&dh?Ku^Nm^w&pGDPAb&%2xI6c3k><j%s%*gdxgS%PMv`yUh(>+&u2Z3&iSVlaT
z?L*TdiDO@Bk;LQu`L6UJZ|^FSAbVx{Z~i@rbyVc!7x`TVfBWQx1GHVFwNGXIYDLdm
zPJQ-&1^{@COB+SG;x}2;?<nUOTQ-*|()gvx1OyV__Dw4UCq}gM3Q-7n&R!-Qf37VH
zxdoxX$=4VOc%x=%+SZ$XgY<uo^1v7OQmev^uOVvUIe}aKkxtyfZz<NOIOlP_yKiS0
zX>5O*wt>RP_uW-|mt_1rc4aF}Dp@nKfPeJxf1NBROVN09;>(Cp%+OD1qIMN>p20U2
zR41Q&6qkpFG>ZrF_aJSLxBtev5ld*xt=FED2WpbuJB~n2(e#~Xh{(wGnWJ-QNN<sZ
zUXg7j<N_z)d7ElpLAHr8y?SD8{5_g8B@Y@S^9LQ@wVKz+fZ^ZTP!0>p>D#cx$qMl)
z+pl)*zAWJ5byeOpd;8aE(et*zC5xc63rL#mRuY0pKTbAPGTk^n1qk{+vCH}U3Bk49
z40A=`_sPp#IQU=aPNz2HI&OXodPuZ+GS_*Ol)<XSk_6<YU#-8lG6KMQp5UBK2<9YC
zt|eUQ>*l>mI(kkOEbx-C%56+sA~86TC#j3W-&h<m(`(NlrL$MLjXv;gSx3?}T71dt
za2z6Qgpw!}`)D5!9?-5qX**AFQvurne{Lq7o$F;U@Y#m5!+p$U@{xMfQW{5+%v=^%
zci~PK-s;%_=-t`u3<I4H_lExiAnOSqMGr^8a8W%gHP!#X2e>{o#+7f-e5HJ>ItMuX
zX~bu!jU2Mg0t9Xw34zpY=ehu5dVikIw)Z(raX7J=H571dx2LSP?F7DYH9i2wqVJ#-
zNFr@7jTOZT$jR<WZe*G^1RaqIQst8XD0l_VnGJrb^X4suD2Iqb#S6_F7w)_C#d9tb
z_sWc&*KzxhtuhMT-=a+v-Spt^vfDnYFY6eni(k!Zt*~QaiKZ<{aGe2E<*LP8IxwZt
z+d}d!Pm2<n6sSy7U;HPxF8`hoV0STvDE55!lMrmx#jrm+964R28j0CBW1#0oExR^=
zoF{|8>7yI;zHA24ez_Y+V<&Hl^MKlglJmcBfJC38j)|$^xdx%7vnCIaWIRnSFxHd_
z2$$WNLys43ZdJSWoX=Yxw!bi21Q8KV(m^as*5){yJ>4j@l)`WKni@)oxPeoaK>E#G
z)YP{T2|YfX7+O8mnK4tG0XkO8bvZ~<ADN_#NWQyl7oLOQ;LXHzU4v6pa$z^8@bzY0
z;iztYtvr{gNM-`c0FHXrbqxm>piMsm1gP=K6ZAUt$z<o)YI4tg4+klStDUOxje(Hg
z+&WTqItHb=NMU0Evv~qm`l=@&@=5DWGvicK&CirTvIoq15<%^<XQU}l`VA?|cmu}|
zju{`AoYQ&@OFU;ks(y%h;|_=YIxu*m-rxi7^x})Y^*_grC#^*Z0PmCZ+E(ivk~e)O
z<RWC~f5ol{fKl~r#4|ZTDp|lM!Ombfsv~TvY-b<v(5LQnEiT%KpeGlF0A>tt^!=_U
zhcV_w;MAS(9x1yrp7KoaDH}}@JoGiXtRHy9rjhhB@Evcl%HVs5XZdL6mB;=WElLA`
zO`M|lndV7u>?V)6&x}83Mkwk=%#gzG;SycZHVg$MVZKh>D)Ul0+Z?3I(GAfxL*PBL
z>2J{H{htdXO>oXOvpB5uocNXl+nrGlG|^Lms(Zix7Dsv6;eW7E=e&sDH_l*s{SA=K
zL%$+UGaHU!Fx7pejs$8Ye}f+Fqv>g3+>VmvC39)7*b>M9C!+`V?-^{osjR2MIP#dv
zn@;c{a&_tNNu<?Q?hnv|^kpq2Ir`)xjnohJn(>-h9G_Uu6A6IYCcuDhmEo2ls>xzp
z@s2A^re#|3)oy&^u@PxjbLY%)`6{c#6EL%RQ`MbJ`)~Fw?17-Bk22_T8(X;j#IvIA
zrD3kog(rlx_gQypVHS5NyZRdI2^l6E>dVcH^kfk5jPVflVqA%X06~;zXgBVRz;8sp
z<aq4wwC_}F(+iRvbQK3x+5-b1Y>&UspaBt7C&RSJjFaI*<pmDvI%ylnSwUirAV&og
z>(4=89!er~{S&xJeEJh+2`3#hN|OQ($1{#Alhe(5S-6E8RuSS!k3PIoE96Lk`_J;@
z0<Y+0;koe^oQQ3@1WwiS|3?Oa3mWMeKK4!asF@F;sLS!GB>_%GQ=bON*{91~6QX2{
zQD2Ep%?~GGs}#Dln>%&-_Mk^E{8rkGYGV;f7r(Xa5jY!bmX2v)o8PGBp}m#YRl$P4
zKl59H#Cfj6><ChkEcLgw9B?+*hku^XV;5DgI#>@dJAxp!2Q>W6{5opl={iIUvj_h)
zuM41*5qwHL0x5^5;7a{cJx$U9&ek)eyaRW_8Rf9KHkB4+p0rOKz)zQ8u(aZz`5GQj
zGJDeq_{V2iGNf?mIeH7BrW*h>WVvh=ya!X4L^$m$$pl+%g(jmKGMAlNkfC8(GR<Hx
z_beshcS`w|i|Xa-(&`AsJ;5i$Oa!)W4ia^`w|gV}9g*xK-ws0QuVkOS>h{re3A_W#
zFaNZ~LH|A~y9qx4pjw0?LiDK`Y0?71c!!`pJgybIHY%oq#X6!tOO?@5j7AMhm!m&X
z%-goVdh*%>!nP=N$y_-kVEkcx#1|-nGe!m`iJ!{^>bHkLxqe;9yBSSOhl6z9UX(ik
zQ(B+pu-3U`Ty=8H(T=P3Nwb4DR}93TqCUziA|m%^RJ?um#jw9l4VR~CJqzb+G*t3o
z(W+P$>|DjoHB*K^(X8hT=Es=xvz0^`cIxBDfQz7a#%#$2d@VsbtF?*Cpq@d%_3crP
zS#GsZF!}FKSRjyDBtbYQ>AS85;Uj_m1Tr7wLHbw!{RzBqPo%!(fFwP&(2tvRGnJa*
zaUCCFChXW4KhkRHfI>BE$*JV(JR!=e2~ZPIkJ(y2nSN)|4=NG(S>p^K&=vE3CcW$~
z8pms#waAS!q0oy;XrJBjg}Wg1wyaP>HO*guNq`H{$pdJKrRuxjJpEbZGO>2;is_((
zY9$<B=}?c_r5EylP$}23WHG#Pwmh5eam$E_S4MI;9uBtnk%qY(!1y;~uun8o1V~o>
z#JAp7`Z{0dGJv3SB{$Zeot_zpN!%axQv1Y_AW_l>$qisUsY6tXYW=L;{~+F7|LJzM
zy1W0R_X4C+oV0?7>EbZdY2oxTvj1{VET8~-2mrSmi1B%&AYi#{awFg(Ua!<*{N#9<
zMmmet;@IEPQ!5l${R=QI{`;p^czQ#K9$F^pW_p1<aycuqj*;EM{bOMN9i&PNTdn8l
z0nhLuGPuR!bTaK{kp2`#`L}x&Xfmg3^vnA$^DGyvNF=qt-vE>`JU!*^0sxa<YeKGK
zOZ^o#eO%U51OG|`E|&@X8Yx+!i+U#x?s5x8@~60C%-6W3@Mbw`#5?$?=pk$Q<VEKJ
z8P1Jlyc7X&s4FjJgaQ<k^zu0?0CUJFDINwAm+2ZJpVFsC^c=@IC+oUoa!7S8K9#@O
zOENn_;ZQ$DY8~lrM_+73T<)IfmA?@fZoFoe1L-!DD#cSo@b(pe19+l4k<^O7fYP>O
ziqt=Dvf33K;(pSyC?3Dry<ygfU)Zi0h(Q|Q$h!1KY3lRIOzen<ai7L5w_%Mi3jzj0
z;lE*!K>DSFDriX9vUHqd#>J0jfWD3j`d8mu@IHUKMZVlQWq>{n8YNf_yHoPrGHJ<a
z5l--^pD<VGM>-{hCjf3hk-yu%1s;R`&v$&aT$+B36o*A}lu1zB_I-^|Q$a2QJdj!k
zReg)L$o&<_pXw(fy2qzkPt9ND@6|qU%}4ic+u0GhK)%7IhOajd5fDDK^d!S3XI6Ab
zD_kQIYm)#D%@w7;A25AuLB>&nUmfX73kBo;A}7m3bTO4~S}hsJkD6}3e<ZT@^dVgr
z@1?xN7YHNG0zTD)*ONmAB%`a4`UWlC6rUB-1!T*~$aW{HLuDx=v=bvZxH<<1xb=2v
zy;8W84S5sREAYjALpRxTd`n%X#wM7ElGNl^v)XeUSOJ5U=M2txk1i)&9)kJC*E0}b
zv^q<kf*hiwP$_9SKC_;;tiGN?{>%e+*G||~+9`^1Cw|NNI1%_XK=NgSe<4JdXjVB^
z1T^dG_3*pjedyabxPKv;Y5K5RHq9Q2{KhxsfAO9`o3!Rw$+Q5L4!S>spJ%Q!PWzHc
z#(BB>5_MwnW#z{vcH6mxVyc35j#|ev5-2Q*>qX17sA>PI*SJa73;}TT3pDAe$N0!u
zGaXPsVV<lTi}|S-Sx!fjX)ilL93uz)&@R8;;lFgxmTXrR6aIcc9>^ZT3<pIDdQjPU
zHbk^nfasG0Ge*1)5ogsbw&96lPFZW*x-@`)#V=|D%LBw2={SU;{JhOi9|^!$L0!;=
z%6jYXpqI$9o(ZbAC5~48UgH6(ZF=pQLf_rX0N<J%ZEvQ?A94Kd1Df5f@Y#o9KaPH?
zzYhrRR%gKW;A-P~Mm}qUJ?PRZ15AGk`GwMT$vBhH@;=S^oD5m^(b}fCSscKV^*d5n
zXFa#WXzeZF<JjYYebyK{B{cu3EL;#vv-V5}2|u1g4cI=gzaE&y?di`4AO!>jSInT~
z=D@6sql6pjyrIiLi9Uw{fHvn+f)Nf!BnBmZBK7I#W1{<21$4$e?HgYa;EbJv2l#AT
z^eQe`uuos1V4w4qrQ?7{7-lf*ER>2!|6H{xC;Ndo0d%7ZMoPDNz-GhR5?I!j!Q@WE
zy7*CF_lU(oh6Hg<4|OO19wfJs4Wt~HK#^M0lh^4M+TOoLOglN6+!z7Rai4{~4~DPw
znPbQ+1fe_`IIoRq4J8s{l1v$Ps$DouI5?*XS|;3{%R$4LP0hnK2x+eRMJu1rkRan#
zk(pn_gT>~jAsp+sx%B%RAU9#@c@|s~<ONy$;wT4jxoN%9O|=LT^chGj>ej12vz#ZF
zh3GW4H5&RA`RkkFYgBaBeF{9l9bYvM2yE_QR=duon$>-zYat8u&&Y0_wWPPP+o_IW
zXdlh_-UwU<utpI7FxSul{A8p!)xCn%VZ6X6=V^9aByg`~(<X(EcYMV-mr^oyq>Bq!
z+Ik?%aZ)>e&jGH=3#zlYY&6F<C4!T5BIvf$K4MjSwSB4_Bp@Vwx?%4$B0_qVViy?X
zt~wt0gMjknJ^`hGwariHITny6dDFpHm$Zc7y!hc$(mRNFPtzEevvt97i{D!)$mOHx
z1^gU}t4Wle9M^HHnI_4*t*7O5)&|r4=y8IJ-0{>b7UFv{s%HS>sqFZq**M6pLmEO*
z1wNL$It~Yf4DoEpZ1JsD??5Y+&k#U#uFGutSPtOBOq-rPa-X7en6qbpN~bnjBP415
zvPyOB^f@;{z+>bgvM3zdhq(e74I$rtjajmpsG%*%aIzD0JD6S2Hh{PY0kG&7Q0lpR
zOw+^1U!QTxm-L+*{~GSkirjdgtC&aVh{+5>Y_R$#JK_)BuXF)|Q2XCL?@X=Y_Zr8l
zTyUKQgWwA|fSk`ypr(k}7y~kwRZL7AoBzOiQj&=MQ~OCGK;0Om2t)gveT_U05b(Oy
zKlxfe>(S;afGZmiTxR@uM7(J`?ir9)1Z?lTfb>4gB*>@0I8TgXo#E$Sn0G>FasIVP
zkiPxLbPLgPulTl6z#@lf{sR35#3YG&_yD|U&6z+o>!W1b(=WqN9%@;ENy(dDoXP#L
z_XU7-Uv|c2_rZ`ZL}dr`CHghAteoyM+cm-(Vo-bQu6diWB*2e*{+YAhlHAqX>tNzY
zZlZaD(~^C+t=Ef4x7?dAZ*AO<l;q%Lf8upGRKV_rxdLVJ&-@-!83?f7ZIligC}{`Z
zt$_*~nAbp!UuxTfww~eB!(Tuz(lQMdaA;?vn%?jmj#RSZ%nA8h&wd~0kgBAedFQ&@
z93)@s4sRDT?KxSmQkRJyMC0wtR=|L2eaGE(t;tcjR0#YGi{5@Kd#%D;8=$jUGTdPt
zP;{xD*RYrOAFRyHz_&9TS6tTG#OKgUm%{YH)sr=W|2^WmHc^<sJW5I@Gg)<3^-HQ{
zj=GbdB|{MIe2#Rb`=BnRsiisa0fa&6v4DDmfa%nR=X0MHWp$jT$bTQ=;e`8@0lDKF
z;IIy=B{15^SoQ9pkk`oLWcTxo6x$47gAg?B10&lhNLjcB+Fcr*r4Fdux7@}aK-RaG
zirR%+KJ^W5wR(@0MTslZOXGKtaBc8U>s?VUi!B)*N6x$SOEAwMwAF+ihXzX2v>Ilh
z>g*FauKY)>E-Sz^EhA)qo<z6k>|7fmj;v)<!(cUIx;3fR)yo^v%O_l|b_KkEq%OLw
z{q)9BHd6wjbAx}LRB<55=q3&Rh25pr2eQ#ZG8n1!gRK9|+uhHpNbgOzv+&cUmImem
z!eO=)5r)`j{Dt*iI4_~0ZoZ?v<?|VjUv^w|00D;}ixg=zLT{a&DRS}}D2;ZRcH$N^
zXmhaX_ct=nk!}}yw_3~sKM?S!@MjdirU%`S`!=#`ZuF1R6KR*cBf!a$tr8^iQcmul
z1P}hFpU}bo9dtmPb^p!3Pi{S$u<ik;pI-N%EB5Cy(aq!O|8U6xXu}jBIDP(xhQk~n
zms;Tmpo%a}2K+tZe>Xt0a9*~(ebj^qnw<8?NvrrHv@~<!v76pIjz9ztk-_QAx|gmW
z<PlT*M}1?gJDEj_;%RLsC5GGc4IdfBHsS@hm9?hS9LU7qw?IeE{zepX0O9z+{qobM
z6cYr%aC)=;4eJqC5D#C#HVE2^dNd1^$K5wdlkUzr8Gun17)kO^3Sw0p1-;$|?0JUt
zKSHMPt$B!a$-YA#A^=VWDAJB1d(wALmPxqeHEnuNWwhtq5<#Bb&=z<&q6djnfG|=_
z*+#4iQ27F|%X6+X#k)Rpj(90kCUtm<knW8pDVS;K(hLJd11{C;t~gd1d|nhifZ%pA
z8#%SiGKXNK&YF<>ED;3%lY097z*60*#z_J>1&mkX!RCP1`OJRrLBTE&dTuzB#~1)~
z#A^TAM8n;6r>?1T&t#uBeV*v!X7^zdJ|I7PHA*UWEt|$;2p}!8Y1FFf<{40%u@+fW
z00#~LC^{xmZq&V{<LPkB%)BdQe|#0))4-M9Gd>&q1K4ax%QQp>3}(19cT~JA;CIi(
z5xpk~09Mk|P~HvUyO~zm&-Sj%pyUcjUcG7&0>|7W*%{d#<lh`58n@GD`}dC=s{MRA
zo`eif8m7=F(Ryy*RfpR$hY~2&@AcO5^`QbWi2QFUBNWrPz8&{@%9;SkQ@s0rR(hNV
z-IXp>_uSPqa6bWRKF3J!#}J3O|Gng!@lan?_j3KnfNdaf)-awl+pNxgLRv#sc($d9
zwXklCASO7@y7`$9ag9rB6yuuVAj`<^X)M~BHW9*Rpp~^mB$CUI%WuAj%7P-1=sTa|
z-=mD<KHqHhSUr!cRS+qxKg+`h`DdB+H>4%s9o~&(zj#i%?bBoFE`|L(S9(3xJM9M_
z-@q*QN^bcqn{s{zyy<t44iHW;K7vTSZV#F2MKrq3>rNK{n8#6+HOGM8XZ<ActK2S9
zjPrC0a(Z9Za}~vjS!ALI!Zd5oI9_8qIjne1NF%yM;_r`4i+|iXxA<Wz7?d)T7DVAb
z;fMBhCapJ@4Xo@}FmtN>U9QM(7`*~=*Fm+=8!8A&Tj}(Zf}PDv9jQk~ZK>T_w)zQ)
zwg&Fm1OtWyI}tSjY494Po_ILhs|yh6Agl)=T_9ft8OUrcFW{o*EKVfJ*sD+C+U>35
zQgt&{v&PWR1xq@QHv$5<p(TP2lG~8=yD|e}hbc@SYQH=`kA=I3pP@eBW>APG0q<0v
zOM{UH!oAx9ApkEXyP~>&u*M$YDSF(PmZ@yhH*S}IwCdFGS+JuC0>X`K*LSK;n4;{V
z%;8&D@i$SVNI~5~V05GmbSA)lGH|~a+@C9^-MMz8COu9>wtW8CMIQn^QyPz@th^=i
zBj_T)>pIe*;%WTf48{hSF;deROsmOY8~zcGprPkfef530Cus&=Jq&jaC9V1z*9Xiw
z_^1m}z;J+xlASZCL&`?shaP25w<J+iHC^p|-u<rbpJW*R^;yj`;5KxYi74Cz++Dq)
z=lyj+ud=OrF2K+>s;ILeH%WWm#kO7k=&B@IEIg6pK`>-SEV*y9PJ1y2|FCmfAs7KA
zI7vG=MrZ%W9Lk~UjelOtyRV?10l-7UUlvN{yaQ}DL*IDy&b^>jWA0m@L{GQ&Ar%Z7
zW}ji2G(Zn|?C>Op`*urjrzOV`3z2ESwanZy{0s8}P)(QGI?j;q;p04)6L%6sS0%1B
zoe}VBwE1XHsEK|EO{<=<iW#F^wTbV#ra8(q_Qf@m`NTovuFpfPogzUppXh*+axqh)
zbDq;BBHf=Wg_g&;zYW>fdtarMZD#kmal@&`-#N&U1wY*;@;ikhwLXe4?P1oMCWVWi
zB-g6VgL!_8VQAMbh9JA<$Ugbs0>s)BTzSUeqkFIIx`3}7FvfFt9c@(OqJaB<IQj4k
z>-hJ>NS{erT#YO}AgW5r5b8I*4|=N0KeAGxhl;LjyLr-+K=!$DUC;oG?v_vToC_W^
z$Ewsf$o!)M#X%(&j+r6fr|_0Yd!A}QQ%}OIc{&5Be0=rAn=umL4|-wC2khNq`D~}n
zvSyTM0dh2`{Qma?a0LM|<hr;P@ul^s?FAQo5&)Ym>25k4pq5}-@)lU-u2HYMdSK(W
z!fW0;I&)YtOHhEP6di#R$I`AUlRBqI_NJS!HwH70L{C5f)HlqNf#vjV#NokNAFubG
zD6wv~NKPny%0IFxlbdus@x++wn;~8KXT)v|1aWr%w`|kdgVt5u?r<0dD_`((KTJ6g
zEMUd@{In*`G&JR@_=4_8-TP+xJ)4JEb6N;Vk~;7&gEFYQP!_F&Wd)-(z<_F03@Xxl
zn{w7T$rnGa-<0FnZ^(q)o?-FtLo7M0{9I2PjivN_;>0_wO`bsqTj2EGU%1~|LLd@=
z0Z?0tz6*J6q%P5#nu*-mP6K)NZbXU+fdzm@I~~)7+`SUWN-47PXwv)P`he_61pJ<)
zy_Px2zk~F_%HH7lCcRfu_bQxZfJDYyKQmbYF-R6}abwP~4GK!<&!^=yxTBnk0-BuW
zi~Ws5SFoR8w$~B#_kHZ08b&xwdWR$83O&j3;>I}D40TacZ@KeCifA*Sw~5$-rAxJh
z^^u1&`wQJw3QWsd+KHtOJtaEXqI^wTcHyQSu>?xXqsU%cq<2P4DxeHbvJ9CDE4}Y!
zRS<8YjH48Of#D|00qQO6S-6Vw`v%lQ*v%M%aO!XgW0_%<8@1+GoY{vX%ceZ0(fWOz
z1j=)s``!Xo{}g3g-+MVxUCA`-%;q4m-|4o03kD^etb;1Ya9flSP~b`5?ZWK}r>FfU
zj&=^wYtFRj*8Wzq92iH>W(8xqK!_u`XKXi}-XfVDhu^>Lb-%%I4R>xEfqY8qeBBDt
zqy4^cZo=GBL!loU1;9*ZqBpb5=D7nrzCN3Em7QWCMAQ+!_8cVS%iGJVV5HhURh%3n
zC6s08%)4;xR@qD;oV%V)(`>72IShPdAiE+Z+ca+cCI2tnA0Wif%fjK0t>1#d|2}@>
z5uEkbr9gd)IY<ZrWxQdTmbsJVKP#HFACk^@0`FYGtf6cmU65KC9~hD43T>hY1ctjJ
z)jV8GssS3L+8tL_{>7ZywKdHJ=$lVx$u+t$Tidn;PEwwJ&878)_VYOIMo?L)BPAS{
zXb{RoHexsH_nbH9IlPux&g+!EM2LY~I@g+__ztu!o*|%I9cVxoAToFLo_*g9@i@C6
z8EXTfle1P92#h`leKx$}H>V0dmE1CpV}LaCts~)L)67T5#F1$_CdERBESXKywvKR8
zkla`&ZtT=Wn04pRHBdev=GcrlO<Qqu#r*dW1G0eA>qs0Fr`eiZrgZ6<`u7{m;7jVy
zEQ^K(+LDAb7i9<;I5}JzcKwY=I4KDBf)i&3bDY`>GuDJ`^L!>K;9{sR00o_2pP=?c
z>d-wFoKlcIC(XLkfve5<z`y~++kbLd4Ix8Uwl}_jo6=us`SfzlWLz86qY{fEfa$zH
zhN9gO*i0!*@9x3W4e6rVRg_uSd;Dmh2}y_dex8Rx32q?V7~*++k8i(m_;rwg_1O8X
z-n|Xbv<FzFX;6T)(#cHdbqmyX*9{6>pmRhi8t1sCy#C$=uF9+^8Ui=Y4ve4${J_GJ
ze<NRoTlhvf9(*UaBlC#|>3Jk=48w^pq(iA}<D>U7W2Q3_n#pzXKj*lQBk2W~UZP?U
z7p}}Ub{uiUk%KHmAv~Y@0oz=CbkBMhlqalcnCox>CsC#_E2q$|?sy_bA<W7&kWVRt
zTloK$LCEJ;@R{|F+`dCkQUo%ux3|^mrhJsuqzE`t5*GHFtQG6ctV@wUQLIQUhG9kY
zx5KM=tDaN{xLpV5!u^vgTM{_xGi76udq9WQY|s6D0Mcq%jl5kAUP3qL<CZrK@G=Jw
zq7cN|xx`TPDhE|<?lXS@V6DL@4YTjR*3)y`7Z*EzcR>(v{j)~BH5^mm-aRDH&NrCs
z!>HOK7s%q)B}iujS$1cZjwd%Ys-y?xkDEWUU2{>|M*1k=@_6OuJT)%;M}f?f9->QE
z1@p`?ZK;epoV8huE(hM>x!ylxQcs$owN2~cqkGh;_kOGa-SL2HQnIQYfb%0pQ7T^0
z5}1Iv#-f51fGdfv?!RXc0+pLJ=Du~a!STD*F`Rad0)3%fRg@fd5g22OdWnGR>h(3F
z3KCc@CbA)iBgaWo4f*YUmBWzu$J=2XKeJlXW|));so^0VeBqB7qxT5h>-@98OJ`dB
zwlW$k0m45MfW6jxc1UqENa6JWcy&9L1P0&F^Iu76;HBtV44_im|K{&N<W4sd0J)#u
zr+;b@6pNpq6bbqoq|kD=J9J9?o1iAkna?h|MO;5!&<Y#aV2fM_*u$#MXqO@VkQvKc
zsEA2NOM)~Y{`-`S`lto3#8iio9^8|7a~tP6YirbSd@51C!Rfd)(=`3S4$HrR6F(!M
zqaMvFmFu4}HdU946*13zgI(D1{rw{}SNXJ`Cubj`REJkzvo<r1f}`iw^BzI`#i`Lw
zMR|d^7fGP_GlS#3rhnZKwWOrRNjJO(%|Gd0=w#+-1`Zi+6Vh-z+kBOfwGK|EZg?fS
zugi{L!xv!i`1=95$J?bl3w#W)r2AD|L>=#xoQf>94SkHANLpT_M>-DeV^rKjk5vK+
zz~r3S7!~iCK{3T|VI^9*ek?8aPe4M7yVHZ^S=Fp_!J6OdR0AOoA3FzX#mv`kVmIHG
z6%ppfeWMP@J)AVqkl7UwE|F<KJUZn>v(n@CaIbsZdgipLUUzj|Gm^^fjOACuG>IjI
zR^P@hNI#H{4rvqV#LHk5urp^{?RHuor%C&{*8x1FF*j~6;+VvP6hUK(X>{PS`|e(4
zbnVug_Q*jr!81rtI+ds{nugb&Zod9?zOBxWvI|F+0srK#0x|(U{|zX+_kH>UYquh<
ze+*{oqS3EFoW(|i!3Uc~@bq+auj{yty0BT<`G0j1WR_`d0Fn7J*qNYy=YOSG^#L3K
zPNFQ@2Od{29Wxx`y{Am|9(I4L{s54z+PBPdkh_g!j&gK`e&#Y1bU3!D?*hmrColwa
zyK=IH%sEhl|B?88GTycN29W_TzlGpM!wb94vgzv~`8OfFfst$S*6CT(o{rz5KC4Nt
z$A`1pb9ddyWxB-fHjUk->DTyWlc^4KC>c*mMxQc^Km9YR3Dj~VH~OAj@dji?caYGY
z!CSp)BwbGGG%g8(`Y)l%HEz$i2W!4@RYz{-+-GDLi6#lP^9YKwo2c9<T9;%G!c+NW
zXd#9X!wgF*_yDART{9F!rn9_M9xJepo7(X@a(q6#8AOivCzBf~-sZ*=Pd^R7QZHH#
z#Iy8>)uk%pG-_AA)y7fD-(9%)I!D*&o9A|=Z196q;Tf1dMWj4yuTPYEOdu(h-jOI1
z(7qs)z_oBQ+eM4T`h)=QY#f;XfGj-UAf_4#nXwl$k~6{%IlH$XR}p=x;!K&!2Tl5_
z0NtFXx2_xq$x9Av9Dxj4FPC)!hV_cOH@0nbJ*nR~o)qw+lTg#iwNce}tTz>%Im_|)
zHPVX&G3VI?Hw1WHVh;r*W$ib%oIvTXsZW;-Rwi4^p02`GJ6h6+b38u?#KS$V*@N)M
zQ{_ueBL1g#bZIqqyqOqYPmwwZw&BHq_J+fX2kK4QL$75vE5)33ZB9lRu#HgN5zFOG
zC!_$US=(%5ruLTOL5#tY|6V2lL&_-2h<pb7-se+?0Q|Tz9QM->yoP)Oh~mIY{TIiu
z(ke(Hln$;~-z<l(?OJP-jMo4@D}noz0REx(=R0T1pKN!h;k5x-t%4D}JxNEa<)qc`
zChgkJ!*D=@{~=DZVrjR^IoM~o6+dnaU@5~(a>W}N-5dS)-&9kR3%jVKwDg=~9Daci
zNiBx5a@)u?pTV;uuMs4*<&R)A;5l`mWDsKiic`k9%<b5Ubf`hKlW5HUFZJ@%-&+VH
zmUE0m(CUC7PT2bb4!uiP#5jaZuSCJ}4WY%^xu$`)Sl*~64RSv!24&zb$;j@Z_)oD1
zsUp(cr)%cuC!@8`Sy@;~8Xa@sOfNI@3p9RdYxScP({soFvtU;n?bm;Ip~sP9H3$Xq
z2DDLtTpV<E(9`DuKk-dg`9M1?gVsj{*51OMJsX4mvmeJP;w2R^zEJv*n}-<tej<h&
zFl|gNmRzW(+62qf_NX|+T<Z=$<Rb`$sa)g4yY4U6|K0*H^|GEA-W_^6NzX0}ZawO<
zVg{wGG8jdjnrjDQ@XJDd?ksm#wk>sX1!c#Bk%=GR!Q6~+TLA`3D?f6}?H4T&J1SVl
zmXTd>x;%nuwSbdX1U@O_ha7!rpD9DCdP@V`c`D!=+K1y0PA<7|BQYX(X*)=EI>TG}
z{Y?{^7JTU4#e4s4{fxN3dRsmB`iuxS1Ej&q1o0!w2TbIhT!uPGC)3pPMdg8qkxUtA
z^veG1+j!xq!~E#70wFk=&)+~x>$mju=Ol)XuqxL%gvB{P9aNVKOX2~TRpwr*fx6?@
zO#J-~Jmow;HIz^&bs_`3CnRub({2JQ!U>cKyG&u(k60Du*WW%bXz*e!%hVIOO#Kve
zkOyP^SQ*r{3b>zq{6?NL(s8)pK+4jUqXP%1tDd;+lt?bG1s@PB%wAL<01ffczU6?^
z+-L3?2zkjgNt+0W#p-Rbr&Zr_cSpRaT1R2$4(=-pfcT-_H<Mf`LV}3mAH)Iq)s<~-
z@c?{Eoh#<yt@hlkCDu0%8g6#qnrfxrMUie66`1C<Gr#WK^sLjlVoZ?|T?WEu{&T#h
zB}Xxe9>|t0zF~_}#ywfzg_O9HBQg7?inr8F+p&k79!m3m20S)(lo78AP~_9-2dBJd
z-Zid?fdAAY&X02F#j3zj5m`E}xai)BW^;ZlT`5ct#9yvgtINb8$0o-t0E&%kmQ9g7
z6E3N2Er*kUD750&!566G&0&t<nh|O`00^vk{~qE61?+m}*WKp&zrH1xxQAIXEDV)f
zHZ_~0E1_=o1XgU5%otGn4rs(|>{2%9>1tCW>Hho{{_iLwp*pd+Ij;BE?IJ}1CUH;H
zv}D&lgroZwihGpj`q_?|XQ8YsFuu%sjx<8m?(fwD=ed6lw+9c&Zf;ZBV2eBs$jJc3
z*7L3d2YE^x3zq~x&yeq3HmyLOcPW5!(<Z&R|7#|hV;IO^E}E!Jy_oK0czmBWTGE3M
z2o|_(vc^!l$H6vy!F!ypEP@v_$%{$fg@N3SpD4L;)|!fWjSZ1*c}X1&m){jVS+(Li
zGu~IWE*?SJw4ZMd;i-lk(AN2>D+7J!+Mn_p;#Tn0lmp$a!MB&Z?g7ftsckuc58;jN
z_|0j$zwrRyo3`7(3!5qQq!+JuadTGzK*NvHMmO{CbUb;s;g_nc^W#jy=39BornhAv
z|G!8Tye!Qnozpb)DEOM1Go2Zpih&>V++hZz=xNVo$lpH_adoop@*slw{%Y$R{0{)Z
z%sFx}dP-3iKj+}3YH{1jA(-$M!$Iv!HdBT!ari*GeTkAtdg2zavva~y-jQ$FnlZMH
zKTx0R1xFf==8Xtdc*Zj42u8X`HItT}y|n(n9y#8VhPsaa32(Zr^mfSc{zjxuKU1k$
za^{gL>*^WMojCnZpZA^>%<ecnX~t8212Mbtqhi4QkAB`H#Vn&oL%xyIdn?b%;Ko?W
zryO{4U!wR0UXK4W|New~_vEDF?;jcbC-g1|KAv@|r$vd+9@epna%x!w@;tsFlCkdc
z0EYrq)Q4ji%lLmo+T{|fG$=Z~9IqCuN-Z4_78w~jHRu0uHjP|xllit#1Ky~91_zn0
zKd<Fg?ggVVd;vf%45{v~<a_wo!!Ei>S4k`>AofM0a@5zJh=fuS4U;Osx(HJUT12sQ
zUBKvN4JlhH&B?e2RiWCaMKS?SfjwoKWL0{#S_y!;sV4FJ1|^3+s}^E#l>C=Hh!RI@
zzu~n%II)gC^0WQ&JLRb-@UI`S&8IlxT)GD41;m3sgfGlC$8K70EBv(5<gNk@#xu+!
zh06)qO(vH(H5!^8;-IEa-Tt))8ciPTKujwoh*Z?wY47vN3xGxbVR;<bU9HeFN4`Kw
z<R7`KoUY0DEOX@-k(~3CFR>CqK-xic6k6QCaoXyLN*6$$QlcrT%wNg&`xEk<?irVN
zUrzbRqRa#~zGWWQZO<7-!&vYDLG@(*eRwV=Yoy8w;L6Y1WYY!Dh>`$*=DMCU2~qF(
zR4^JxXvNEkGI_@gN}dhc>g6>e%dXTulh@AA@zyN(IGZKk4X9%j3EU33oX!urWl94%
ziC2ChUL7lHS{l2ea*+Bev1`vPAk(>@WoP47(KMv%EOteuelY7nf?uDbyaATm>;BWS
zbD3}85U1YXxcDCdY}HR_6X-j<gT8wPsy5oR#F<aJ)ep)p?C(<1Jg+RwW4@{x&B8Md
z!N0C5%aQ)G3o>dNJwFM6IXE|I`i&e&lFY=C%MDu46aNYBlGKp`Ug^0ey|ay)-`evn
zIJci>-5L=H>1m4OdS^D$FvO-D8j{RJk=M^Y4B+#5-N=1G^S7M_x_!Fwn&b4l?pg^F
zbh~i0<o67aU~;qmaoe@{Z$NIbLgDq6qIZB*PY-N#>QbBa_vQUQf|ZjaL(yJ}6kR{{
zm1yu|&o*vNNL(G+M0PRx9rxCkX}21lrh2^KR@dZ()Z$p<ISAy^aW!@8d^Rp$%HT9d
zHLi&VY2l7k>0uyy-!S!L9L`vD_3bdmvBAL1)-v)X-TQve0E{a%o!&i727@3da2GsA
zJHWtkqb{#;l#aNm*BByeqC*C!J7B8+S$cm{TUiN&LqZzm?T3yBwE13MYX7*W^KPR_
z8m=2@iHZSGGjN#RLI?veFv@yc<^)<Z?(cN6z;%%N{T<#<J$W4f?_-ggDu~O#Gd5dE
zE4ZGer@2C;m#VIzcz2N0rD$9Z9<a$wcX4_^1Ua}o49N2tVA$Cg$xNU-9DOy!vuBDQ
zO7s3wmSJl1wHml4EZzUIce3lQt0PD}e!l21H1s&pqRPT}3wGJ%v7#vh-7^0<o3>f0
z_NevuN<{j8g{Yfo$!%;|xY5&J#gOJ|RflzC=X;NcZPuO<Y>YiD&OSavz5%=5K;Bvs
z<XmK`{X#C4YmHTvFUan<Ju&IJO40oV0QKmD^jH?&S1nfL_&N^pmxt1P8#<`Aa6$k5
z8#4ut@FuK#O6Ep6DmeLhC*7#Jb2z+7S;O>oB6!$!mW<c9pH2aw`P7#QY<aWS`g;q%
zv1-HGaA7OuR(>}=rZn0Isp13tQ}4Ye7V2^Tz0P}5E$jKF)J#7`ot+n`WPMwd$5X-e
z?@7c@h(R9Wp%TQ@6^z5#+4M>v4gYO1J(dYPFt^lgDIpi4?zzqy*fkZEM(SlbBRP(T
z1mb$6O|%Zsy&iD<N!t_wfpvniRinq5!boXK+})Idyn2KmQQhN4zU6a{;hK@EMMt11
z<a>|1i_`T3Kd5?~o|3~3&VE2!m8Pw7VL3eRK0AUqoaaq1(($+*<KkBr<?*Fag+K25
z(DRAwCfspZ_`yHefYy!2QTMB^{M<C?)2bWS$W(NH6$s{z1MM?2nvIs%QVI)&l7*kk
zgu4~PcxzW@glrAN0F_zD`JIF9%9$UtEFj1H9ELV<G+q8oNpwvA*2^=99p1J!XFUlt
zO6uPDr@GH}T6m^C_Hz&@1mwDsbqZZb<R@I8DCuM*hVcavD&MXJ-gVZQiPo$qiOy1U
zKuar{o#8>H4<U9TBLp6;2%0X}=cLP%D26fD-w(j2&gA4LxV6^#xIG7UX{T(<xQ#<^
z9W8Oo!KU&PB|-iVpQ<k6t$TKroTs|hEDPBV(NYS23zQ33K?BXm<R~4O4T71oIf(=G
zAADKbg@+4uI;e&Va4^NLtEE{e`e5)u8tKXi1*JK0*fmacc&%?G8UNKB-gJ4u+A=7q
zjI#RWo6{l$v^5{Iyq0N?dzt0)diosm-y|vkK+@{Cc)GNwlA*JO=lPpz|K7&cI$qH4
z12Pd^Y1;2=<`SMWUc7YuHo~rf@1P1sngE*lV*o%`g_hn#_X+IWnd{sKsK`^`O?d#+
ztL%L4q@{o~6LHbXHA0R!zHB*4JrQYs?V|1i4*5YWmW?4!cnve)nDJ!sAf@Ekag?q$
zj*G3=+wapLJZ^eZN4nWBKtnkyCxcw-LX=0cuTz>d$M4kLF)m9bcSK$(HGy8Qj|@V;
z5kX40bEh-RHtap$vz>cp%`Um&#)q}_P1)05KtbR@kTocc+A&4y%Isj&p}p640IzQD
zpX@8UeSZPQo;`#o>0NrMc+pxuul2NBd;$TD+OUT9Rm$#&7!<NXtzK(YH;(=l5uOca
z#1V|I%Smiu{2OrGr++J1CobTY=dnwXM(gtgDuq}p9gfaNror~SNRDw!nQ8(*bt5_6
z{KDIn{Wt{iTR()u_ds*M=V^jphzR^QD#t_fBkAXP%EU)K9k?eIssy35c=I-E&yFwg
z8OsJ@;Zn3V?TGkVPqM@v`Y4!b;RZ7Lv?#%$kL$W9dk+`;&Oaq8_V0}x#-(PAOy^TO
zJddQVGd%;{d&Ic5!3863+o;yI#bs%gTxQYj!XAgi{SW}umfPKYgVMOtE6OefsTp8Z
zJ;XHPPRGCfy-wYyzbK83TzZoH{surRkh50Hjw$CUD`S^}Vz%#GW-R>)JtGT_?e*I8
z=*{D3N}FiTieq9H@E3xb-*0n`c2?RX38{_Fi4v6;p!_jK*&PO_nx&dI(x^oP4B%FT
zda3zx?!71D{}(w|e&@d`2`HCV!vr=sIXwdaj-Ms-4U%VXU5*N#IS@tEt+IR(lpi(6
z%W}c&&(8`x|I8*5{`zQ9Z*CWV5Qrt*#Na{vOnM*lP+aL3`F*Ij>4*f@iy!f18Y<lk
z&0HE)%3aCNjnlVTv;n}cR9IiLt_EB*(<T}>N9u42JHFJ3*A-1<TVQR`<6L7+XBHqr
zju#X`X7lI^bDZ9+b0B3|Bt-`m0KBPW<xaNn+Ol~CytS?0Lc1U|(#k{d-`hyTARFO?
z-lq*ug&-YN!G$7)g@32yF8r5fI&iQPbspgWCAdx-4Ck{uNPr-yL|qCaY6@-*m?c{p
zF6LakR<md{1AAhd^&IZbnnjp?Jc6Rc#EAg(>AB{Bh~~s|B^NwKX9!2e`JmzX?>YBO
zcWtd^kr$BRTT+PyLD`6s{CdHw3%Ld0qE(}=BQ>s$%UzA`ux@6)fp5LMCJlmS-+HJE
zX{nAURz(+U+#DnHd=IsQBy}L7tdEr?ecn!w|M)@y_WlnY#!K_M-#5Tb@;@)?|4Tc=
zBaFy7Al=x;>na1qrzq_K#J08LQYW!>9Ioc1fifDukXb`<Yzp+}H3?#Rwb(UoVg>FK
zp@>r&=Xy;6qEp*d@`Ae@6V+Q~jMyhX={T3eFzW{iw2Tfszx2Mj;H67pF@;`pe=5lh
zA7DCN^DK^fymlcT`Ta<S0dln^aK9kyfaw2yh`R-r6Q9t**r{pmoW`QGgN*v%o*+4z
z_P`xKk4t$AX@LfQHmYul?%9Rx<I}W;Ah;`eiK<DVG&^vTx=h_U_X^Wzv_*f9zX64U
zyk5lXLdwWI^F#Yuo%QMS)()0$Y}<T15kW&@BCx;+dfXU)AE*DVD+l^LSc73ldBmsq
zg}B?I?y+#eBTN~{<~BxI&FE<$WR@aYk8Cc+py$$X{RtBvN*moz(`U*XKl<&t{zf!E
zxiR0k>N5aX6a-C13Sv1hF87{u^xbE@3<MO7Xz}d6srkCiQEoexQe_bp0go#ox_&SY
z%czf4;?qL?`w&l0@!tvtSZ*CZnZo}gg@~7~y>)6z7@3*v#s!&IL)n0>*?%@HUAXg~
zem`ZJlF_POjt*E-@Iz|Fb<@l>-#-5tK@{Y<8BL2sq*o-pvqZeN7Co<pUR**;dk)b>
z!<i~2EUMTfuEgrMMkwH_)LfOHP&;xP<JEu3AOKM!e~5}f%-hYV%Ze%CKX{`efIt-t
z)?)5iDFgjWP>Xs=pZvm}yO;4a0G@rj843z>a7$N^#HLNFo~T)_<M9cBEfu&anyKSZ
zc3E30A<iFa@#vXfhwM2XlneLvU?!`Ea|yRX>QOxmo+(9KSln4+{!;67B3SuN4=oM=
zf9Vf9@cg1jHPa~E6p=>^s@kim$@S%9I_W{BdFw}>b)-X=Dj~3I-D*=LLVL+xmX47s
z@@-mX2l#d3D$54{#_RS**VEHbD$78O|7}5OwdLQs&y>34iXc+c$n=hyBS7vO9;Zru
zcltzoP_wtk$*|T;`?<M&+7ZPJs>{x-1*3ufTnOvmoFia|(LRs3lXPX1*h&`=EqX<%
zjOo+=Hn%U*g-H*-mQ){c0p!TKw0Z&_e3rK3c6eV_<Oa+Qm{4k7piKvmQ*Wn%sLb^5
zAhqxxKjGxna715I4K%Cj+Xw*Z^AVi~;1#wI%n$$_80te30hsja(X3K3P37b^R*!dX
z3Y$Jx&RU3-!C*H=?}FeB?)d_z_rJAlTgce^M%hbVsjpT(8g}$Y0;T<Z1LQ~C4KpY?
zaSYymIzZD2<FlQXK>V|SwFusTGjBlqjSZPtx&)vgAnLjvbrGYS)FGw^kt;?509Xzm
zaGnSOf`-@MAk|!4mHoI<jyrMueG4tL-^TdwZ`6hGs|_U@&OW%zo6AldSu}vPA*lxU
zX6T~-x-lTN{A94@F0_GzW)`aulyeX(gH-@0qlO8iuKiCix+VO=Xtd9{ytbT3Iw6=G
zZtbXp1P)L~ezIUcyGvtGd-D0Wca(o^IX#MjliPQecT_=;va|Ft(alS+4C2BFA1_5p
zuB_(^f?V52w5D6`*VU7v8I{M1?h;&%^gs1iJmNEpIm)>rbv#9ngXkK=XQGDIa8m~4
zz?IuwrrDDhwFo6>Map3u-RvnGxT#OOY(|7Et9k9F<4*SPD1*aLQb4~2WV74;xeU@J
z$2buzpsg$Xa{&;5hv@b9-03#?1mJqiKcj;`KY`^^>C*2}5<RNaH$V*7N95Z9HlwR1
zr0p_uxWaq_fKhJlGp>40@^6E`v1?}l1_!qKkliaVbczb8h}2>S?Uf37<!qLphJ%N3
z?~?mABj9(^dl1nzI`_O0LJx9kS}i+pG+Gc!4)gAz(>o$SqI|!gJtX&TvNM<)c)Uow
z;WDveqq6f4FT9Ff*o;Xg9sq#2mG-}d+c<}wDx!A`&Vf)n2k02>H;DMyBfJA>l%mkO
zhkrnrisY?%s4in9?7318*ep{!1t0fY=KS9WM8EqRUvCaMr&z=4!T}H|t>Tpz7xW-R
zU8$Yr-ahZ?p?1?f_6<-{THI7B>qAc&0=IH`PL$0iy%5Zn;sz`_&ogU~{(X`wLOwv0
zjH{9Z0neC{8Wk;_%)1W!wY>Ld^?P5W#@{Kq3wPU_4Svd3-0=LIbD{b5r`?oj$t5*8
zzorXj@*2E_qe4<f$UC~CJLrx2I9aAm5u9>8&1|o)JX7q?bDKL!AN4d|&!@tasGZ)-
zB1Hqj@Xsd*OcU`#Ti_wl(XvW3hSugXiRm8CP<#-myDpB}(Q+8IE%5pWG=UR<vP`?l
zJ3x@9D7g>dj3#eX5JU2NFL?p*8z%x_68vl#h2$t4xU7~U1o=E&K7g{#Bbk|B1b~)f
zf2$G&s5I#Lwn)KAnXt>qp~sobG(xER37>FiIL52HMPt?0o=hOe{kEC;O|9bpO0@-$
z6XY@KsEi*+i-zA@C}0cDiX|f#mUo%hODVf)4$dLJDmW1kkb*--FdDqnd#Ov}8CP0(
z>;5${SbRbeW%zEoMHDjOOzH1M0YiXrXchhiB;MQ`5g7F>Z*pTsKCW*Mu{CO=>V6ge
zow1&vbz29p*eHI{+oi}^Yo~P)d-&fe84<7URfp-`cFnTsB060`8q74v9vWmZ1|?UY
z;RT{ovwINjw{RuCAP7i^i@K0e5NwW=J>vx|FUc&Q1G*(I(;C!~Ipd@2$>wvC@^bJ6
z2<JaqZZw*ZQiTJI!~fNVj2UBnIuAXuD`XPO4zA`U=U};<sR^x*vb%RkKxz255fe<`
z5&;0LMnc-X;Nc(U%0=fU7zqan@7bU<K&S$GD!B*rAm^(}t9O9ZPHD`>l6E|H48dRe
zT+6@-SQ|pGN-Q*%_oqB8&+%RJ4N571r*9VocXwUAGYnMZ+nci}pilRjan;7n11C#G
zzWnNApLv!}Wk<0_-BctttDYBxp(If+1+)j8*JDXQP25lsZXX8+$qd*=K&sE$q~YYV
zv!dHg8~FIu<O;6#Pg?y?Ow4osn}7FrP%BEm1@NIP$$ujp(cAj(2UH}+F`kyha3Fbl
zxvaE{sQt_o=sIqtARGv-6RUu{26&^^z;}NB7WjS#onv0jth>gI+tj2kiBq50zEvj?
zZ@I)J|1G{sO4sDZLaE68&k-u@_UWJpptK}0`yy-fY~*nOaeDqY$AH|mKSjM5-L76X
zx2JE^@ijBQ{qUpTXx8y`zg8cRaT3-WoJMv>;4sCw`|~rCavP#ii}6$79<3)S{VrVG
z(@bS_vgaJ78xsMC)7GQg?2&<die6|14k*sfH3d)%sph2vK=m0@Y;2+xnf1)W#hA=k
z60mD5Z{77!XsPS@_Z<L#*OTkO`>sF#+dlwf;~~k+FWEf><rT!CPDzp3be9r063liQ
zVA|TU3F+A-h#wQaf?)NwRcmuO4%5S@$}eb@R1Ez>M9@_ngt$1eOdZFSCOF;SZ{R6R
zw1xg7DdA;z?JGJDz^*L(%!+`rsyRpiLH9`VnyX|w`Kk}7^csDVrv)L|8P0?=;C*@<
zaLMQF^g~>(QQ1{OF6(mD2s!$5Z>dR!E$Tk2>!4aT=Pab!n31H)HAfl$`la6K?;HSV
z;9cu)kidYvEQYVm&0LckeI6q`FCyU7mE8U8Nh0k$SMp5pt!ZxK3d!N^$OwNrV|=uZ
zcR$|0si!cJD81<(uX#8?Deat|Vmn%!w)@JtC5egUa;exPmX5IdwtlV;>}jdw3aDG>
z+uO<%=n2+7{wL@rXt*XyOKGIKJ?#r#X2PLBW-;yOgX`pED7Oqwx9Uxd)<Gn@RB?V|
z-TRo`Fnq3mO+VL90$0@$X*;lC(f{EXW!R<=g`C}~fg`UGWIbw_cR&Jbd`1G){u-tb
zg&>4vcAx&<=0J*etfHZP79E91u_@d5^d*3A%Te)QiRrUo$I**9gm`YZGM<w83G4t(
z0rcyxjQ_75B6xK@`Cn%j$G{opip1E<tKWO@&OP*$p+6^uw*xTT#HBN&tKlz}AX9wF
zMdk>dTo<>VpKSMXjL>GXsubLDVTKF2F@MBuT}HA#Z>cEEScci3XIe{dUzXCZ_%&K?
zo6}TL&Z$S*bHN~#iiEzZj0ID~wQr{vDaLMX)HfK_sM7K`Dgz_pYnHdPbNMrMdIulb
zN%kZ!GFv^Srn*wX!yW%DXb)8(bzQkrpF#pkXyD0){@0W*h~bMlyWFMsAh>M~&~x86
zSRCN}3w06KdwU=&(gR!%0RWZ->gWD0`z&!!(;he*gy*Rs-jr6%T8N>ITzq;F3GAzH
z>&DP7?#QbUj8%@)AAnl|N<aQJP~yynbU9omM4`tUoty6JN*0CA-eNe|OW^L!-*15D
zmc1xy<yJ2!pavK-o%6cKA$rC%gVLJA+mU6BhU7e*-UaD7SN8^bS?k<=njU@x_KWhO
zV%{+ht@st3JHyLJadvb5hig}GlogxLLS|ghOD#E`sDu8B#t7g*`$oII|HQ7IBp3dE
zh#!UENU!ks7K+>6uCvrIa+Fz)+W_}JQc)m!9%)^AKoKD|8GI0q5A8{}#>*{bJ#iaB
zQ2;jOt~%FUH6wbs?TE@x7;SW<$)Y#2kf+=f_z^vl@HO)+H_ULG0L{{onXXnf@l;}I
za-G-mF+_t<C_@JPDh2@f04_=^gpxQRBhTO<<#<>BruVcQ58smjh<mTk{5#E7lN4d<
zaX!WSH>h$Sw*=V+#aSIU=>CEmd*cqvOZE*&&$#q-$}k=w98|KwpV6#s9xB7gh91>_
zmU)fc$LwEj?BRx!^g&`L^3?M@7Jvu+`5Tc|A2dLcL5N=HEvA3MqP&f$AdbLIQUfq(
z@YtV-Aw6vF2ku8Y%uHGI7@PK0W|;)&mO_XEbrFt2)zf9P%SJ?brsDptX;lnX$k&ZG
zqIXy<(rb=@`fJNM@a1w6%}iRZflDsDap4$6r<abm2PG`=sd2f^6(^IK(mGwFAh_Fe
zKSP3NrIM-~<>~6;ZnwdSyW}e$0F2eg)!g|8s%^ch^Nkya#Pk;s1M@#tG}qZp!@P`;
z548LCIETl{wjxC_ayH|4+6%6m*A_R4t*$FNj9?|S2{eY)AgirQ@}f0V{w;U^?<cI|
z$CkTFb+q_XH2+hC@!oA|&)-!B-l$eR+rW)e)G!N+!g-tY{u9ZRMwM?daRyj7uJ@T<
z7Q-7AzpGJ(ZME}&NNs%~z;-Py+i8$n1;c?1P#fH|joDT0<DsD3xmBdn`@z+yvfob$
zwNlJ3NKa$eCiAXqf)|~lr6glU%9gbzWFLetBiMzMz%5;A%dQpZbf#-4RGSn0GDqbq
zs1;`Ez_0O*=q+Tzp@+vim0o4M9`7)Cn^-EI@_s7GF~?519u2bMrRvV_Ag!ND%-;`4
ze%ElN`+qriv$eeLDZ$Ow-a#4@;n#4cAJ~>^8Td_ZQFG_yM?laN^l%&AxG{$DfITP3
zJn5ps&(}{fBQaiKl|3gQC}T+idhLNUU!`ceaP)K;!2iLwkRM2k250(>4$y17ZBW`O
zBKm9YJlxt|CN$2-T)#DNA2BsQ&#a#B?nN(FAx(8$Ch0eV&H%g{iD6)ZodgYo9q+XD
zkl^KReSY3)=W;yPbiRjo!AsBr-or`kx@C&f_dik72Kw*KIdJLHjagVx$65X8vR;I<
zf2LrmlYkkVcq%eU6><56mwtYdT>lr579|dzD7*JPb|YRFfCQs^$#uK*@fr3hh5Zb*
z@!MwiW>XVHXrv+PHggu5DeLwCAl7*@%Z0HsnhpMo?1_{qq8|?6dX*1KLzGVQsU(wI
z8MuGgl7G$nQE{D;zD$$j4MRfO&tAwI(v{Mso{LNe9{lT0Z*I?#SYDScMbLDPtp1IO
zV^CA{?VlZw@TeWHXFvP7J=2K}?AbiTf<T#*)RAUt{v)GUJU!{e&9VPbmQ^+J;p``X
z6LGNt3O^w02FkMk4pPE(KSun17hI<$3;4$!0CH{COvCGX;%g7gdXCuv$g||RrIX}b
zT<N2B6{#-ygkyR<p%23sdIy;rveE-e<7(EUb%>YsHkk%O*t$L@(;gtzdp^T{)6-9{
z_;uvA@jBn`=Z0a`EJ8qFmm10mleHerojJQ5URyg>KrFKlGdVf(yj2sT5r=NoPjG8e
z8~+D&E1gxZB^-24sIMRiX1DZk-^?qgEtRb75!b7k`2~>~z`zo7_T16yK^9=HLCrh4
z&KX(3uy-VVmrr<u)9f;Re8+LoniqcoZgqoMn#y*;g$t6r%6522RZjzX+yyTu5lPaW
z9L;NVfkVKu?NKVSpB`WD_)l7vtt56}ZZ<<4o)G2LkqYwgIoi>3?E=aprE$E&I){-#
z@SD>}Zw_Tq_fgxj0Bul;N@8|xoBp$Zp8=4r^YR+2n|Opeq*b@tNixXd>jDt51CEG-
zK)W(HRtD|C^bm(bwhs9TMc^iMYZw;NMNE34ru4Ja#4`Xyt}UJK-MGhQ6hR5Fkg=rC
z#QMM-`Xu&+Fef+`kth3MsyMq*&06MAXw;sXZVwy|c|GYGI>+K9nr2<b|7q@-AaJ?o
zQ;f@(hT3w_BW0hBq6fvYz?9zFGk>IB?J8jZ^NBE@MH4rx1bJ~b-cg|d4r0p3?HSy?
zzv+ZiXV_*+6dw<mDBKz725ei`(tz<eVIeC$tR^OtnW%*ZN-ovB;R@#i)lsJUuah;4
z5yJpnGMz3!)iI^}zb9KHpEl8GfQJ2_Oj4)W)nBj;qIRAZG(a6kF0@8561J<7{D&_o
z{v?pUZy|@9){`yGCH&FXq2Sk%@&t%C=!TI9+7bAC#20tLNrrZw3&3@$NaCBwn<@X-
zRuXp~<TClazS=U2gCX~=<I;qt8A}p>>2f5w@#mJ2^|C2I&yGg|Udq&@zJH@Kf>h~S
z-Za3$&MST5K@QXZdq)>s-24RZsbU~;x3E9y^xE?PsG#r4?=7rIOG-1lpYY=HTV!nf
zpY=RaiXm}K^!F2hk!CRJHo&Rtc3HqjyrB_{o(4)D*zBKHHI8DKe=id=-ktN=ZjQdT
zUhT@Qd&<cQdf32Irh?)7Ps&+vB4_ZkHpc-KxUGr$-Ps_3zhUI>ZQO{JO`tAYg?C3?
zjLY~<|GIrG@9>KjUz|uN`M_+7+#u5QAHZ_{+ne6K$CQmu^J!o?Pe6C#Edz?`ZPmTA
zds85x9pnwuyboNe+fNPiQuOTOVbEGY%-rua{>*^>KE#;t_C?8o>gNDyx}q6Y;o{Zr
z8w489nI=tg=d>ncWrYu^>IOx<;U^X&SlOR?%w=N1a`-2p3;uJHuHsZg?0e-dtl|?u
z@!x|K3%K!?%Jzu9)}vcx6Cu`bDMW=B+Pwy3)lB!jA-y)_HQLpxlQ<^+B`Jxz&|~w>
zI8DXlasH$^p3eqI(?@ww@J5JnJz$;N2t60>IJhS_!S(X3jbVZtcty{OqV>3JAqs##
z{@Y&w>_vpsZqGo$l^zAZZ!pqrr<l}MN(9k(?D(g}_mR&-syR~Qag?cvX4y0({O9*P
z&+SyG*Py$;;ABPIe~`BZ;)4k&)A6T0!Hdn=IK6^_|1Isu+SW|j8WkrW7oe96eHWJA
zj(UxOV(;|{IaaQsn+-kZYDcgW-8K9i`~v*}0B%5$ztj^;0s@2kIW8EPq?kuL`K>t)
z+>Fmrc4Gi}KADF8to6QN`y3EG5xk)IUECV(uhUtrlSh0fL7>4%V4dYPZGqZL{E^%L
z`}h>|YvsiT<i3m+WdQzO^Iyx9cEh@UFcP3{dj`X)rkTz5`U1NJPL#4M-a%XUBMA~g
zqhvLpcZM{x7{{7Ks6wxuKZv|n%Pe1(S!HeRr-U`GnaK)>Gmm%ziQ*vW=6ySnzgw_!
z+-#&-)w7ez>m+4L?SD(6-Vq*4#01d(kG<&tTz0!S2=q8c|8)Bt%{6@ary)Q)PNR~H
z)Cn^9%58{R^&?K>S6@ly)<X$2l`@0x{nw$BS(iW&LS2aB!WbB@jDP|%E@z~o&QJGH
z3Vs>b{%&paJZN9J<ojhj?q=olK(k5=QuxK04CmuJ?h^sRKlk8O=p6g^HXe|@H_Dpu
zLRc|TcLB+;#q^Lg?Y4}DfV)V#Lx#S0#Q)|s@!V;p=_D%iTH$e-^#kM^fM^Mu4ouqV
zZeLw}CNE_wJgL5mH7;KcFZ->2-!@0knF$AvyF9OK4Nf>rpUET60vE`D0JtS?%cm4}
zXU(swI|9Iz;Y>dIMI{pX0N})rEXqV?JzFZS<qoQk*vWa^^C(fd9*=XVPh#S`f0ME?
z_FIA(WN~*iS|9zML8h+Dhq1Wk(`!%w(sSO^uIl;*o*@mve&%dj=f;vwe3k9Wsp4P=
z2jF+g>-l{(@N2K*0WM;6UVt#j&|!W5?`xcRidlv{nTlJ`>Ne%)EGtdrd+2`lA4{T*
z^8*r*?xmxGehX*C_%x8F-*kxo`w&YTyC%5{{kOrW)$c$M(t5*(^suJ=$=_#yKarha
zB)=%3?o?u_an2mObfx)AkGV_*x9_f}vjnIRKa%4#!47X>3s<7m6wNbO0C)2|XPGp8
z(8jXJmScCBQw_UuaL07I=wGn}sRC^H@DZ!(4XL+>f4*;xQPTj7nPw2qgdg1U)o<bA
z->6xjZriLmTj4g~qv^_PjvxAyYBkK-atcC-Sj$M;NXwSor+>3=NQ`HCy`tG?N&Sg1
zbLbn${qI98v*Jt3!t_`LkV<=|gJfKGf`4xTKpqFlikcq$=i**NyDo$beHR*nV0m`m
zz(Uh5MCAo6TinCry`-YK^NDk?T>X0s6@==TUR#(q1IInbPh^Oq_guqeF)qBiGADJ-
z9t-7OYk6W&i28q2j(q+#n+4{zONUki_gQ3<dEl_|N_*6^d0;HKp|U|yGWX9+1%p2^
z3e=sKn|!)q36$6XPes`!9LB%?-!cdT;W$4LeO`N)^fn6B9M+ZN3TEeVDUF6*2Q7}W
zV7F_$bL%QV;-b|SCFHz4B{)rVUv2{mKg;aM4d9Qwio0&hOi$f3yfR}5tGM_N@p3V=
z4b8z<PXQT6WOi;I3{-!=fe+w*av*UWuFO*YA1@kw3?e+@5M-TcGnBbE_{3ACD&R&s
z!!a<<Ajbh{98B3v5g;%j;>Z$Tzqr&+kE^;!wj^awoYix-(NS2Hy0Ma^dvvWNeJLA7
z_4|6dA-~}mGf4pmweRcF-`;%G681=*Cq!wv;SC|tXQPfX5B_}t?Yj=(Q!RGn3cl5l
z^?U?IfErUB2J-?`JI|dZ&v|qiVbuHEXpzX<xmaS*9?%%hm(=KyTYy<~Jqj2kcF8Z`
z-z*atH%Fl8@wCt5I2|-X#})VUyA(x9ZU<TO_CpJZAm1STw4-%F>##@mHp?B2R+{Y^
z-UYxc^`7HEeVShVj(#?z451C92Oq3n6BUrUFdzPnQnl~+On47xJUQuc#x}1J&?+Eo
zi_$;hJm{=O{hW|H0#sPQuiMli9Hn!EAf2#4hFAV<Aza`f`F`WZk()EJTRm{p;H?QT
z#_3s(e1R2Dd6JowG&VrRM{vw6>Z&x<rR0EaGpy=gKuL+0&RAL`Ad~*gS-HROK66dC
zhOnzl0B!_7JQ17aE0Xjp*CYh$t!H`)js{MjR0V-X$~8-dYtw@7opu+<|30Q$F`f1F
zq$pTfmO(mh;af}Zc6Gc(-#&v;F_tM>5@ClZf>hsU0Ki>>)T8J=kEru;@uRn(l$YB|
z9kI{a1S7R%0V)TmoE}@cd)%UXNxFntTrtYyKwq1xlD`l5jm&%oAt<#RWs)KxT)Jj<
z!*ZAt$4~l#IdDo?{e+5h>WfIjl-XM>w(Us&qbP*}B-4GJ*Rvdv8q2TQgEJLounRR5
z7k}+0{4e>_B}jYWzV9bSF#!~^nRBeWyDPhx1N=0ttZ_yjt3QRG$)!za7O!zzE(b<_
zmnj_*Ej{nbRjntBvga9qD#nT6)ZpK?YRW#cccr^U$+sfc8P_1WX^Q+mjj8^6H5r6H
z={W|#Ph2jUA_yGQSm7^$rBXQltVHF_e)>m19^iv3`GOush}D!<kxpkmkADK(`ScOJ
z%2YFZx6zUNnY!c#JOHkcde3B6L=TISxc4guDdW=iX~$6pWgey7RGs%J>7gKps17dh
zc7iexlc@qYgnKT~3vr<$k<N{Pk_-WF^{o2at%_bfVAfKqpa_HC{xcBcfor5DS9*%$
zKlUX3NaH*lM)QWC^)y_|u0Jn?4z{1HDQ8KeP!2*OKP|I#13YrApxj4XSi&^D+f`FR
z27St+`{2^+-faU;{WlGJIXpH^as|1+H@$w)a3$tX;}c<IKP|&q>)ypU)YOjjo1Yyd
zS5I_2ptk`ve}1QghP~O$x3O>A9=jT#$e^ei>H=Kf7N3<tS*x2d1TdovH2iOU%+LGz
zfQ47T<r^S;1CN>I^KmXWr(_QTY053#G4pt+)ZP3A{gUvIO@(}I{%+xSz`3~0Ra>7O
zU*mc^0KN>0OPhmK$G`da<>}&)wOKO`0z#f3RlgDSjTj<gGKiB%R^vVQ67^J3Ng1Cn
z$}X1?bJxG|U`Jp6Y1}$w@aB$|D$a52Et_MA&ryb1zt5m^Zp}T3T33_TjO7AFvV`+{
z#PmVKA29uEpv?8w2<t)w)5~SKC;ZL%3N2x-WKFyGJ)_9R?m^}Nu+>Au6r`MT)gmGj
zu7c6q+DNWX$=B7oT+#(@4^+b$|KG>A#w~`w-vHorBzIo5B~aU2XJ^hec$uUa+2NI#
zkT&9FCr+lj2|%jWRRPLvJ4mGle<tE7m_CIAxlF<r0GCSN`Wb*AjQ)gzxzd5#Y0Aq9
z_+rcE6J-PAXCtRk-F3W`-<k)NcK@El)b|X6(r~Z98nv>^uNjp@z|Z#z@L&XD5fBmX
zrHH<gOSte_10Q^8W(oR*b4k%C(Bsj}=B4o&k^RR<qIMtPha=0doksP=CRaQIoW7@l
zUq;*-VDz0&e>(s@GKX0;i_j|_%^o+!i_nCFN^R$VX3fpDX&PQMb109oY+#X_^@1JV
zQS(JcNnKxijAl;a0c-3sPr5;U!_l47^qW@|7)r6O8*TfUig;e;n$l!^*8M8*;=Z3L
z7}6%!d(DE~yk%tBkiTqlegyosFZsN1bLZqnk72Hy*N!q}*gC*&shax6OTpA9nF$^n
zjBD5CK=$3wz-96&shF6Ny6KetJEsA;DHubEg1DYfeD`g)+_ZrFVi)h8H!3nC>9?W(
z9LL=6z5yOA-6g2^=jbL~43MkRj65s#wA#~8-4vo}IwFOfQ++aukut;C*!)Zc-IhfV
zt7L%Y(RCT<lpf#enLpHyHZ^*htK->7=`v(TeK?JkHxN{Q;_2Q4KN$D6h9jPyZ>P__
zIjy#gzdt#j`FlqrBEp;gb<DMmhYtcbMYEo3Le4<Kl>)@VRjFy1x+Frx%`ZDsttaY1
zh)v!)=W{aLm17F#AW^R}KB4~QPtpUk8J`D2u-{cXxcNrRlCom=N$@1VnWU!(fd2}&
zMSsUE^s}qs&LdNIP+nB-Cxcb!#j5ZVReQcA)s0|gISztocqMk<E<%uA`CZfHF{QK`
zZw}e|$E^V(^(vaJZq}-_(a;6sd93X>y&et3IWB>1N^WF<U}U|WHhF`Vdqa$6wPgHd
zSFdb7$Vo(A3q{X8(;g<3r-(gQDOP3It=TDz`uiJ9?nD2C7J*QnDqEvlWFJPl96>vm
zXB$3-=aQ1fNCP<Yb#`-%`!_=P=NaHVF8P4S)o7>Teha`*Pj_vM+?O}griXKhSyTet
zIY_^{$X~%5`%|K-Ah>&4<8sb_J%DlB%A8`;<Qs|Y^;LnsIGb+D!nNOWMbRU4_G9#9
z745Y46>U7+ON4JTJnm;5xk<~-rPadJ8+wSBbUu}s%|ZBWrU>XcpI^}vSa|l_bX}P~
zhHsvwfm+kL^6x`zIl3V;JvizEBuB&jdD%`9(uGeO&P-N?v0G@b*ws$&`O|);)b~sN
zJzwN!BT51&JHwXZ_Xex#)oI=s7h4}P^NX8=k1#>iG4elKEzn+n^;%Q7hf^{F#dA3b
z;HEu*$juw`i-}>d?5YvU@YF?-W)E&cJf@Ph8ux(x+c%*$l_uX{V9`&R&!=GXviq_O
z0q2QkX9R|F>ZdgBBGS7+@jLK9^55*dE?(r6{`KA?P(fQ^r1C2>Ng0U3V9pws=bVA<
zgrE0``0BK4*9GOjQl3C`OGvhVk20t3E@+FSHjsm(1Ip(1Tb1kVV#n_>7I???yvH*?
zMV{SW8x=RM|Hbl5`0Cis%zEa_{<IY15dCn}^krJ!MFcq+;Nxh!^$}!GE=AEnzG<c}
zzyRX#XYc11<w25-nF4*R>sxFN$g|69#sWleQk8|^8C;#q9Oc~`&ih-jcejo3nYaZ>
z$x|Zc4S};`rq2X&?4Lso1L8fpIG=ZB*Fx-~-Ss$$hOszs{ztFD^^<S<95f)n^@hiN
z0v~C%x_?T&<2=#x652;T574{hhonmZ8jGeJ=&7qbqy<q1-;`!7H?4jCk-`ALXuZ?e
zo(6~zz00&pb=v+7Aug@)#?uy(cQg-?+ccaw7uJU85<h}n)%Eel>o@K-=!aQ0<)rgD
zZ(+q#$3Ty(Qq3g^pW#;PwPF;r%oeVc9KmlmimuK9$GP&5Ne|?RbnZ01qR1s&ZvMT6
zO*4b6E%54WE(>D`9Oh5vG7-w|HypOP*HM!mOQH=?kit30NF27mko)Ey<5Plklrqwk
zr&VOmD$gLF<Z3Z<j=){(t`|_i4@T9C6gz-J2)FOJ+GQG{=iWd!pFGaUhq4Un19GKn
zmy8U7QsNbxK9i#{Nfyy_oC5#~JsegOXZ&7MnS5s&qhiGDMlWGuZCpEYnsB(?PfxET
znnUkKQq+S76(>Q}bIsD}9?QrSF%(8M&WOp5CEZT(IsfX)6|nB()`X{cpGGkr;02Ml
zev%dWLbPQro;Q!BdJBtfYf*8&z&dT3IR?*hk|J7^E&h5cda8)-?MaYoj6dy;zlnvc
z6M^cj*dM&qrfwtBS(^PV!#3p2W@_scyP&hK0F2$an4w<dq1C8xI`-(n%#EQ$0A(7|
z^(`PYxIB7*AvC<Y{QyuZ|Dp8MsTX^mJPtmf9W9^7<<c^xdEl3e>6k@|QD|k{pJydO
zQrFJ_rzpke69mc<y|Mjj0fE+uIje8X#(IdO;AD>{fy`n^od&HZ=W$2Yd(L5;^${&A
z4sle51TTWi{p~RR%}gGr_YL8JaC99|@RjK&B7J9MkP^*^9?e_J5`DYmMxVWYMm4Jo
zZ&Wi~q?TZ&KsMoVdRo;K2@JaH%l~9#DV%pUOowUS--~1rMY@%{qA}>nDjXaf@BMOj
zrbw(A8b%0<P4*xXG6x8@b`$~2K~($az}r(b+A=?l054@A{^Mcx5Ak$?gFL^>o)4P^
zX4cc=ORw-;wWs6gwLXc*=O$iGpp65}?e8<#D>GP1gJQ&+vi=Exb*sKXPW+XQOm1Ai
z@#k-QQ+zX290^^V#|1*>l-pPnwXRK7x5a?REP`Ek1WInJm>4!E_+>_9uh6$uzv~4d
zZ9Fq0A1DW{LYj{q?_Vk`{&Iu=??cQ0ZnHiYoSkmX`E!uiM3T#N@j&n+O;E+>hxT0Z
zdPb`Js9ibkB)`4so!G)LZ=tt&!}zx*kj`hdE7Nyjp0@+g=YMp%DpiD^v-n&+<*Ap7
zaL5seggY<LH=hjs$91{){1YXa#Vt)dLumL_Qj|r~<OGAM=1qS~dREB?2f4P-B+L!W
zkH2F!fr7p9mqpNGf$Fu1_H{+Ki8v@dvz&u`@rK(q<hy{JNBIe%#F^9hba@u{IHi`>
zyW7iHUM1Xr1PT#*SgS2xwNp{=2T|%x1QU*#hj=N)5}xr&ao|U~Fx~LOLy?kb46N}Q
ztW0=9&&S_$K5S=bKaaeeTSMG+kTqMg{<3xPcZou9q8P=xnsg0*`iq#^)!R%RDRENy
z4UYq@0J44Lb=`LD$WAkO0|nAeZsd@Jm#V4HoT3ie{*CpoBBR@E%+q-MFUUfyKS?HT
z9S&QspCtmk7({KMJOg;pmVrFNdMgsN4pM7Q8f4-4hxNSE*nFtoNCZtB)$+J=sXWLZ
zGe);SOhxqEBi1DAbX*sY`16lDb2F2u%LIG^@F_o`m5RJz0tz_DIM2L2pLLJ!vAD{L
zt1wrj3<M{uuk$k}7SRtN$$;ddurf$gDqV(ocG`gJ2B~&H!!c!?h<(HP)nRm=Zj5qD
zA{{<WZUom3eTdNW-H3`#`^WV`ah&$NRckKY=0*zaJ&Xi?x7$Z53Os4VBUcU4Ki_UZ
z76+oH7g^PHCOF>GcL8K5JS&Rfqr*8c9S-o_x`dPP_VZ?`*9gSooeZ7P;<O$!4OGh9
zGfA!LCm81S8iPX+MgFcYsN(ZY-x+ZRDN#Bc1R9{Kx@p@7@V1nJ$mEkZ1^|dL2xG7J
zUQhH>k5GUo&hwlk%ALr9Mk)FNTAnR8eiWL?mOr($_>?Aa+7M&SHVRt<H@->KygaUg
zmK1FuBmFt>CW-->Vq8Qx0oWFtI4IGt2VFB@9sOp04>1MAOEcIuX9lekjbdP#iVx8h
z430#00m7hUYk0f%OdawoJHyVW8K+(@tI_?+^}mnDIn7q2$kmRVD_C@;n7-2UzJ<DO
zd-KX0Ox>#E;<3B@1iQSWwVPHsimm$eZ`riQeoaZVY!3)7VH3w1M_-pj>09H2gtURg
z=7(ANb%mxp&-4=a05ne*BvakMj<T;)5jd{tbkWeKZK2n+y^14!5DMp=M3jWC8^N2V
zExqmh^Ine~XSIC%Wf9|?mzaHHY-O8Gj0R>5Dk0gK20}?!br*F~q8QjS`tD!<;}6&d
zvwblUI4pJ_b*n6rF+CtmhX!x95LmGEbv}I^iZy(8hC@ZT5z!Qys(=rf%61RLqVkx|
zp5uJXS@*c^$T^L8Iv~HM!-1%~pHVTFMcmPSXOIQIZh!4egr{W)M?AniZ^1p{AW?-t
z{e<M}U1AVKGmLW$dmp)bn%@dDyt8ecSSoAlZM?N-Jmh4SO%K>Q{?j+u)=G~$y`NTh
z^KUYa)8Ey|s^VYhX$zRmL|I*PCOqEXO4#ouBX8no`~?^;Ar?m&sRBE4ZtI9dF$(|Y
zm8q8;mnq6NTriiV^PM~A()38x@X6&M+}=gtsby3U3+T!nZ(6v_1zx2Nl8*&I?X3nN
z@)Ya#%*wWN`3?Ibk$$X_*^1}1?eC`4v9I-7&O{|sPCGcw%6oriwt;+utlKOcbDT^o
z8I~FNo|R?1v$#(+kApe_gadbzM>NfQU@W#WfA@{QXXt6+GMO|aGj+fn97?0d8A4t~
zHWa*zdw-<kr~+NXkO2moQCBmsOw-%3rFy<yq1c0Zi0o>w=R3|FkiPAH98wb%oPNKO
z!&Oz6g#igtd(!g=ok;YiO;k1zQW5jh=@O?EG)jy7Rx;pNI7(@$@5sJVD_v+6uHM#4
zke)lkPbU(9u-w(nH;CJ(A~gz!tBnJ%e?lvMK9R*tYi)0dCw|uT&%O@;B_?f>)R0ke
zjio@6z$~nN{JMiFM~ElC!5tc8A-9gV2$LvZX6wq#MlOrYK;mw9(LI(n2!qT2be38$
zK{cdUuX`#6siyr|ye_%d`zCc9iFq@xk%}K@yxIN1I*}eH%B8WICtjEtC~g|K?+&+m
z%Y%7whOZ7I-d#*`8#h>XtHxM%AMfbX`TH9*ecO7RC?&3}3r=*N!N*p%sZAf{A)Zm`
ziv95ettWYru0c4&8!@bn8b@u)07K(Ilh>7P{ANU4SyJKn7Xq|#Iz~vpOSBqxBzynN
zt?%yBk@iLAPH1#y$uJ+FgEv~Y!5pI&yQarTDKe!(+mP(cB+Q=tX@XF8N<im&TDWx=
z=098W*6Al|_U93*)0Ao4Jr;)v^hrdrA6Gv9H^&mq`g@u9H?j-}bc#JTU5wkoUl%2$
zO@@YI#V9&W>E);(l>$!dCBsEGup*4gA-=K%VDJG#$g|7br-xO(o@a-n-hvZj3~|{#
z7Vz^D>Ko!{j^-IEpd>JaEmBsY0*q`MP+AN0ApBj}n~rZ9t@nc4^{P0ul)KSZ_xIVH
z!TB8(gl(4dbulhb$x3E4f7KSd`aQ=+>Jgy>KyBLPsl?JLQX-71Ra_-!N+5mU@HnaB
zc%ZFZKV#?10inMkPe*g^X`H4epy5j__?LGNy3<9r4c_${>wuJYv#!M$C%%}lW5mRy
zt*T<UVU$-S;+SbR!fm~QVjLMOb0F`WqgR)ybB206r_2jv@BTv)#O-t680W1$>z!dd
z-#o{2jm2eN-Xzz`S@Oq<@Fm$yQ?GH*i}Ohw;x6Fk8W)9;@t&5bWe2>(Ftv{ZLI7pD
zL?PJEdxDW&kAQyn*<~_$AyI2<np--l-tVe`{@rQL0VT9=k^CECqHdKQ9{|3NPqB3O
zQ(5c(%b5^pZduQRxYFWWuVmE<n(~C2keqih(?D#{v>`o=Lh;+J1^hDiPJ#^DxRC4g
z%ee1RAh-(_O_Z7c+2j4+2Qb(OJ~$;;q*^nFa&p~ODg?Kt;y(xl$*_PV$VQc0RHiqR
zanm3FY*Qm%I;V?tdZ(R++{R0rOK(=P98JK3{Eg0;&~&tlL0cRQl_CrXoZQv#L%j5w
zm;HbOMs$`o06?Vi03{;y%sE5505NDzRo-yD2Xi=|pWr7Ft~AzN>D4<^+2;OINYdXA
zG;#<_>nwr9<RJT2-0jL%*p+6PtBTqr;1a-w7N@DxEf?QGclk`K&wKZE+db*lJacO2
zQw9PXE+T^v8%<Gc{Q$`a5LcGQfmGf4EJ#wUCOiY=AAmCTL~xixxwhZ0oS=qL_gD(P
zGU&OKXdI_tO~Z1f2D&L-Ul&6`4A!dYcYzCwomgH7kjWh72Fk`Q35j|IaZ3-nBE;dg
zJyA9M7&pv15(2raZ(HZ)aS@?(C5v<7yT64ffDvcwNQv_{!kNYm0K<Cge7JF2da7pt
zy@+XM3M3+q*Y#Xa7Xrf6`u%(L?f(sN(1Fm5SXSVu)x-h_X&$-hD1_1i2zz~7@gSAM
z4mi@Yoofld*9ZjBy_Q|~h;cX^Z&e7nGZ6&-mkdJdfzyprAwPqGNNbxOu7=B_D2KKP
z1}3D%O5cmEHBe<<=U5zv{OsS(POc3zRfP1zRZ;2A;$+sMXTJeIDUtLfu^QN$$?{=Q
ze^qK7i2k^NTIUz+7hGe!8NcY~F~j4?2B(DQWy~8G^!7T(>49P-uH?r0vN4z`xKmNc
zQQ^8r*3%@trPh;-)7CxPyjG?+y8rR~9U|VB*O86e8~+C6DA#Pu2#Yo4x3LRUhQO%T
z99!X3{y%56T#svZOmVd^;y=KOv-KGkJr$f%>gS={jXVA~G$NK}7X)j?z!kmETNuU1
zA);568SYpKd)z~cAj^xw-{@CY1<T<mhXm)^@3DT<fJz{?5<NkH*IZR=Nl?hLN*N&@
zAG#fs^seFQzHN`|dM-N4yTSGKe?x-!`^(hmk^i{<C}TgnHQ%%!1d>Pg{@;oL{ugIq
z!tRk{tiKO%`-1W6eVDz$NuMa!06~go3;|3drqCZ~57#-pg@A7iOfOgq51?=BL=foq
z^lUe|A6Tn4;p+$$bPoOnCYI=jnXCfPNr0I`4DzX|>#88q#m^u1_YClsksr*QBfcT`
z7k@`3`_;U*%tm6LskgUHiz5}yAcO-`p{bi3l~n7}Xm4~!M;9sm(){%rjoXYM6Q3P(
z1ZoMNRgRV^wk+o$7UzpEW?XgUPNeX=Obgeo>h`k-(7}Hs0{7Q%wg~@5B$|R;DI*}d
z<&*UgKx`$=cUOVkU9!ew-RBdF0M<s_n6+-#Ol<(9$uKK&Z9k@C1}NT<hDH1g2O&Al
zJFf5PY~ch*2@YZTKYIB1FGK)tq}uV=HF@LIRh8OtJ|1t&D9p}-#CKlU1YnLwOVoxn
z7D@2$F8Do*)jl6>c_P+d;7%j%sHe-2!Z{@?|1G7AqS5sX8{lfcbHF#|b>kD%cI5q9
zZo9GUWBQgEF}1(Ugd~xc9s&UJLgtZ!UP9O-nA?cQlx`8I<Tg^DYx)^*B)ZD@dckMM
zVf32Z0n9$qB{+wc0QwnhI<tAH(ckJkB?12O4n&jmyoem)CtWr4PoQC?JRt|ng6C*z
za*l3kG9u41E~u6kVwhYamhyL_EN3+z&^KF)5;AfDo+}zMgBCR$lqb^1_hArk1lOXT
z@b7PAiUjBhd^~r+ulxin!PAb}i)z$6cOpZ?95bdKpvU>ACAJ8&03LKJ5tO+{`*c+h
z&UWwG;g$w}oCp6UmQq}trc<(7$^S&DD|ik57d;4pAevHn3%8R1=<hQCkaxHyPqV`V
z8|tPX&JY_10`m}!Ky_^~XZ5m$+qgjrp!GBo-IvOIoe}^UtMAHu39|DRR;Zt&U*rBU
z+VZ>}PYc_Sw}x+smn&MwY1EVS((%F>s97HIV8tXG-S0k}J5^E#GRRK-BbQY|0lk!B
z4xVB5hPaGLm0zhiwFrt@^xSiH#f2wbGrY%jYW5lQ#vQufV{#!PQ|jSyu6{dNV;BWF
zW}2oS-g^&EWDY>12d^Pck1hHo6+7<MCvP_NxXT6TAs+zHNKt<E4M54cvo2Sy0dQIK
zHFgHF0E|mx$@~$3qr7l^=^dmXE(7;>z87Hb4WxpJm8QMdGx+_I0ypgfTQV)T<`FiZ
z7Xo0ZzrXA9zyEgB%~>g7e>LLF{e6fCn}~^Wl=IJI=c8!}7L=ZxG_Ktl(JU1q@y+tj
zQxnkx-$&2*`EvH#7|J&tP!r>!HzSCz+;~UX%A~&mLN@J<1z>alfo29`PRCOo@(ddC
zJcWRCs|AekK5G*&Sr?2bN$9{%?MXt<k&vEs2fcGO@gY^lwBXHP6ur-OctvzXovA%`
zS6OvksaD~)mav-{TTbiXcZ**XeU+y!=J<<a8pO%a#{(p8P9hHb&acwI2|)_~tDoSx
z0{q&JRPL&VH?GQY5gGS5g*`~knF7aGqs(@Noxx^|e_Z}q)Q6|pfphD%@;Jc%%2PlV
z5DsXQT`s#n%hOlLxHQE$Ixn=Cw`k9;cpa{z5l6*Ea#Qel;SA8wOGPE)*CjzH0Bkeb
zwdc7uZ6KaNo@;4ndzZZE?l|9N3Lp>WG94<Fyry3nyHGevJp;NYw6}$Tke0^%dkzT8
z+>kNA7C>X29tNo%boZQxkpSn0If>jfz0aYh#OmwECfEgF?I1<|!#=g$9j9YkZqIKT
zFe*%4mz;DZoBNro+_;)Ss+m#_Ne)tQ=kB5nW_p;TY*E!DF9_QdxWmRJdpo&nane#Z
zz?;X(aw1)hmza?@jFyDM>2;F86TWc0pCSyXwBPdm@P=u+VQ`|4Al2<{C8c^klN40Y
za9y-z!cXDW48#B^uki|pF;JCKmlY|b%u3)d+@waJX~xsIedc95E#b2AF{syg26DH|
z`0bFX=xdfqvZE!2l++Re(9sgLKe>=3Gd;jc`wU~g76uM-d2<W^dF$%CFu}ILbHtgX
z`gn_#04Q$fASewS*l|5oeZY0KcF79~AI2$dQ=<o&-14TEpTU)nWLPPH98aU)M<1QB
zgWOaN-Lg)4sYNsQM-j9G*SzUB<d2oj2Ow48vB{KwU8&5U!~Fm5D%)ZHJe|mSdoZ$T
zo`>}b;L!NgFD+uo{gG1MbeY>5eBnO~=n~sFzhBumNRk$6IvtGa>A#NvL^;dfpHT3%
zK$|2tviiF|Xx%y2+<4^)Q0r)L;%<1jUJyV^aUsL&gVe(=Z@mp@6m-Hw<sF7=Lq@l$
zpnpDLoud=~EIW}w2LPeT&MU|M_U9wg5Eo$7Ws01a6&Om#p}ovX51^d~e3Mnm0NR#6
z26XYa03z0{D<)@$f^d~_-{di+AMw;HzW^1LIwQi~5#EAXdj=W!>B|2u(^`|x1-hD-
zsN65SvE0<MkwpQ&pk;*Y08r<4?N5;(5vIw1izM22G_961LWs4!O@~HpHm8HCOQQ)C
zzd#!~SRI802)pX*-OjVFz6)RvRN#9!@zRmXv>7<4ljSHk>J1gG2s#(IZ+cG57dZMF
zpc(T|UQy-*kp6v-`X{&q>iPVv=&Rn$!tJGm&wX+e>Hhi}Djpmp|0u`o-T_Wz1bTuS
zI9>g%v%~>dr+ow|=5=LAur)GiBbzp8F7)KG=x*IVjZdW7bzdu}rNE5~Q;-}86jPus
zFe`p>RC$4VKe)q!<+mrpG)0);JaX>qVK77J8cLy==^4*Ncp!rqJBM6r%x`XJ21?oK
z<T}rp=l<i3WdT&1;c?ute*(IT3^ZtoVcHC}UH{3ZAwL_fsfDopPZlL{5oBly0G~%K
z?%k9Oc6bcP%7pv>WD1L?HjLKWs&v46`g`##U~wz6oF=f~4~ON^!rdQdl9OE@A_1`5
z?CTl@dWs+d$4Q+A0Tp0Cor6P@>+~GCi}(9j+i>tSq{Q{Ga-B^tR^j=C@)l}}A2?J-
zq$uK#B3?_KhBokC_pd_$K+3Xgip0xDYUUUa^I8^Zww{x#ap{%cb#T)j5T<u#w#qJ`
zdiw~m!_y2vt{*Ll3zYS&8ndGvgq?e))#iHTHk_KN<uvho5a-f!(4kSX8H|d6iRm$x
zO;>RL>9N!^L1tf(C=BW>|E=oQG7!~7-1fSbyRPCOlplPiw26FouA4=QkV=~Cd6PAO
zZKwN<eclQBFA=jMwOliGyz6M~gqQtd0lU-{&Eaw=vfrO+M7zv>+yeJyA@uhXK;O?@
zdOr>UH`etWGno0zav5!sk(`1cl$x*qY$4#PP|#A?#CFpfO2mf0`UaDK+AUMp(!khq
zJ+coImUF=3Mjh9ey8maJ(LkMbYI9&fRQUaUK*UA0^+dqB?m_E+H$E+vrPMcwAhO|2
zK?cP2V~5AV^kyt_RBCpdoK{CUA<g{n8E}K&3itubgHg(LLC6ADnYx;n%AJpn&?kA?
zDT0c#c86fmT&NwZTky%##!~hq*UmR|vzdkeFvcJf!wXE8wJ-G=OD_nN_px`shMB0z
z=ck1#L6t76MF*75$-*pam?zXSyHPQSAt9EFt_nT~X-c;T_QpYaP#nD3;ZT|_1Q6$N
zWtnr+6sT9dWQc&~t}MR+bqAy%<E7~Q{5N>Sk_)1ThWne+)1tDl(_S9$>+c8TLW!TJ
zTY}u0n<@t`x}|x6U_IZ7|IxgKbdZ~#Y-vX(A4%QD>Aa&Ak(^W4IPhos&Y-s7cE9IL
zS@kt_vu<1vZfRfO{baZ7{`{SIFmEh)GU8~Y8jvo*%moBS3WOL9fk64c=i+w|AA$Ha
zb8WyULyGf-(cc+SQ#`kGpC-5mo=Ev)MG<i}qh!vwxX)syj#G(X4F0+3a_B}gS75;Q
zuT%$W!;X)M%Ak4cZKwH_h|}~ELB>gHvSjFKi`LCv)WR`ouMNYENhCw<(sNm+eTJF8
z9qMgfBW=gGylDim+pbnINVrP)qe48%(XHR~rt8eV`7z*w>vTELUk3m$b>)rp?5?qg
zy>)|nib&v%tA?(bYe2d^qd#G}nPW5~6lnn9m+(e%3Ye)bM4g6b+9mOw;cL2PEUBJV
zXe9Of2B`vX=qAl(x__(RB{(E8D?*TFMt*!fmdm|UJtXMr4sQ#AlGLl3#&xaUr}A`J
z$LQSkRwr>#eeMnPuFhdn>*tZ?n9|4bZ6~BpO?lb{GZlyf7(TZpT@Jqi&skn$pjwsQ
z8NL8K08TQ*0cH@V;m!!c0E2H+lb#MAp=Z*M{`9s&t{$w^8rUyHBr&zhX;RWtb7#t=
zM@f7krLeQfOyTDeeE(H6-6~pIHnm@uQ=S10gYGuud#}8+5PTnZLR{3Z5%A>RHvzFZ
zP;A;n0Y5Bf397&v9JAJM;cP0Sh$soG)X9jRBU_~WHlOOgn>+g&?gM>yDGrd4(OdCv
zUf{Cn6(NQY2Rnj#`Md&syuGM-9N<neo7=_tSfrvEX`dZGR!3Y<eUvOM9GGJbL8#Ll
zL?r;fm`*!gr?$M}8|Xz$2hlc+1u>%RDMzJkmp~#lTBlh@mVk2CUdZoeFDeWwhCdIz
z&_J;DD#r*Je^{za-0QN;wIfos{!m(Xh4a<w12%O7+H+<Hge+F!#|JQK5r<oDb2mj-
zan=Q37vC_tU8ZJ?$9kpLpuqjzGk|x}gDe+#{rOpii7%SXPZ)gzM9Eq)&Fk0D^#i|d
z8gKsH(NOzXUr`5WIb^I1*|#C6XsC;eey`AfMBm`8p9fdyN_r+lv4a~&og3LX=r6se
z-AelplcWf2x}G)pVhGi~E;S(?$ii&}hD12{d!2uV(n(fk4pL0bTI?FHkW%b|BApxc
zznsgC3!y(nEl%KTiQ&$I=UYjh)17^t8E9gWr3-Jo^fYN&fA1C-tCLfbL1Mvg%tO2p
z$4|x!xg57Y(z3Dn)2jT0HK}W2_T#!Q1t|V^+V^ghcG9Ks#J%dLrCqq?WoL2N_HFW}
z!ILX(8Psb;RHt{~@4ua+0W_L}6nn#^7v2aQiLj+jQGx^2I<G7Y;2TYsX9Ye1LF>B(
z$EjBZG#mcyBI0!egoQ1Nzqb*O5Wq}ilBy@r)Xrsi@#TrCowzrWuSqOz<A*=SLVJ;+
zbrkU3ZhxYtR2I*{j8NPFm{ldD4V<VnG+GBP!!wrjerfs?O_#?5WFcb;pzqVO7@)pE
zULigEH(-T~i~ASu&q(8RK|x@#^L$1uPdsx@X<Rp2id2&qMhrEs`%Yp8rqZqRTX4Fa
zY#}6s<ypI7Z4}%)QU+>~)k9s)WBIGRRg=bGF-$eDZH~(9w?>GtADtGj>jbLOGM%8c
z_y_)yu11rx9G+CvqC2eSOhD1TNW{cNOVro+`wYq+`-$70GGhGfh5<w33(Ddbc+IKK
zY$YLcAmsR0M_N8l{Q-xI98W;V9S|xT6M+IjxkSSUKr;gn=o!tj?~3x0YpcLN*OUVf
zu;iAB=@@a2rY?zsX|6P6PXjo0xob)wCvjw2$gQW)B0`b|+rKFn(eL-HK^v!I<lkQY
z8FI~9xn-y#QXV@!{k_6M-!`Ll$szr{`T@dcaZSU#fn<84c&;?+<ez2w&b4va>t93A
zl`>RNo$>a5Wv+f^B*9`=dMbFxGb)~e6X+Ub&65ecUiV=k<Qpl7U29)K3Q-l|b7$Q$
z1xVyzhO9Z#7h@Q(jjK?~>!RSYbBIj$+A5-n7c7s6Kan5J{ydVYJJOb=7`Crk4RbVZ
zYCMMnkWl;y!(4lzW{vb4D>o89x+({+Zb~7l#B@2n^*6Z!e5NNM*l7LynNyv!ffoyN
zJz$63O2d?0J-Oj8DrY}&@bnxCSFxYp2tsl`#cIn`>Z%A@_jsS6c3;D=)ZQ*g=Dl5}
zSqC5+PQLHP;~9D#){)scbt$vDxdX+T5z7i1;k_ts_7Vw)^)wJ59zH<!y1N^xm~!Ag
z=OQkP7UkMI4Bfa+)Z2P`;<zXHLB;ILMlg!=23-+?PuF9ni^FnH=($bM;$SA{=R6)n
zNDgZQ2|e0zEc~WtBxXmDA*6ES`VCSwvs85}%k<6b(fh&GF8A#1<DK1<!dS!s#+I>e
zcgYR)Fc0W5y&HcY02&?p{`(F5IAx#tY!U&IR`_(f`iV`-)=d6*sefZ4U>I0+d0QlR
zuMa-R!{>9J^4p^0l0j*J%6EA87Tj@HJ`RM3GR^Hx@)GWNa}q)C-5OHCSQG4e=m|+Y
zfpcC!!M$p+T|@sfg-hO=#{fA<y2o-0PFZ_{HkSa(_<5Wi@fD>3fG2iDF!O&OkP^PO
zpohXynwcz8^}iV;3G1g*R!N;iP8&Pf+(rVu(Qk7O03>6SvGZBk`_@Z_0M67M7FARb
zvT1$aVjSQDqPUqCwYfFG@Zh!M^_l9e^e{I<O*KUBT?x!9p#*Km;cvZ&^m0>h9nUny
zxa)yo-qO{id3+q7-uprv6tLY9QO7c@4Y!@T1M(A)chb<Qjn?$;X_D5E>b?eGWZEYm
znX;G&dF5*Eoblh)DzkZx#rbGvFmftuyoqVxP3QkQNzC-mkIYv@Tw|6MO3DAsG&dEA
zizZ!XcVr!z)kXBbl=C+b2PgTTRaFEan>wV`T&a^Rv^34a_29ojb<reS(0ZM#e#b~k
zn<*_xEUN)8H8T|khOpzSXigmcJw9TVxPS5S#ykM{j#;$ibYZK4#|v)WaJtV#uP<cZ
z^ZwiDgXuf>*(iG>>9cglvXmkmzj5sNOvM4@m!ZC(1Hi}sc13a0f?fh~;PQYqLjRXf
zaheg!m?x!}Wu=zu!5`~%`Ui$b$qE(LvehWQJM^bbJF5q$(F(x><QuP1M!vW^7L4DQ
z&wGU>GtrGhPvN5gNWtCq)NN=%(~UbXCuKmLWq<)#7*tz5L>kk8%Su-o54bqf^<AY!
z_NRVt!Q<F1{S9yu;~eAZEQK4R$xOf>ow}w1vPSgtv%j#pRVGmUrhA9=9dB{7oGgiD
zO<JgGMNquL`-JK9E_Yuu<T*#--q%|=su}P7Ge&aGO0v_uV(@F4773ob&qewR@gl<{
zU5KhBAqqTg8Dx;vicw9c#`2P(@7&pJ_}DP?*pC;=!_H?-Myv`?aI7G=5pl(*tCx=P
zug84$Q|n9<snIx}(<FL7!ogXHtA~AkZn?zv=9R&BrX6%$2sBBQQ~C*1DATO1jo@AT
zC&~^wW8^Ss7oVQmB*+G?+h>0P2&-(-s&;g3X~y1{#dN#|nZgWIOwx{HtSp2g5R9%Y
z(az$8KxY||3~R+l+yy<8MOjrR!-pOR9+1{(QN~cl>#=}y?tOGQkgfX+^7sq-6JNzz
zmZe66Ejh}7jCkyN{b2OCfT5(ikDJ=Psi_9v!tK&3+XsMW>D@lCu@Lh!EQyFN$FvK_
zI)GUsDZ0anh{IK%#FA2fu4}*wD;m{wW)g%9>F2R36}8<r{;Pw-DVsD2ge69!6pfg1
z%R9;-G&Sm=+Cn(Ej56M^Zadq+ya2WhyevbM1%EMXgpymqqnDQM;1vG2Mg<XZ^gN7o
z8wCgSH|VXbSOs8s%CjF+&8x9Aus#V|6^JQl-k2)^zO2pB2w(=2T<5+Qe?kELPKX&p
zkJ60o*YVGWAr(*tD-GijH)SPyHwy56hW}FxHOM?QC${zvL4Cgg0J-zho}c?CZK+#j
zXHuwACc0e&b2OVY6k@8crx`9?Pp@8>#zi0bDFYPpvuQ3<WzAnWiDxCg=g*$&qIRLs
zk($FCwhUBOU}gFDm=YH<Kf>?$vs`HYy(21;1k>@PUI5~%><i7n4F=tF%^u%Ls?H89
zK2I(S|CbCxIXHq-a7Hc#SMoC`iBDNwo^+&+nKP;wJ#vykYM-h1v_D0?<LIy?og9R{
z+J7+So1k!w?(-^i`?tBO=NQ_$yGfM-%!g#y^eu4;&l6w;c`F%NRvm}Ifpii2K?(<?
zuucSp0!h*niznZHH3RPBf?>-}&@RZZv;9RnY5P(BRYv!1&gr;v0lwl|PkZ(HdW=Gh
z=l*|gPZ~U5#4eqrz2n&3E3x~%;xsmZ1*v!a6TRZfuO3fB-bb1j^41fFj;x0s&SR=?
zAJtPqP8YaKOxs=2qxKAX$!HyeJpv*=->_Qm%0;_!(2cde34E@j+-fT1U~8b@PriiK
zkGh;RDkA=VeihV4soOk68mf9}e0E?>*L6+KO~jon2@1#U<ZfbXpb=J+at#g|9=TRi
z^euHf1Hs(j5c@wg@JR-)oJ7Q})34s2|7~h@>6ENUXgbWaDJ~<qvBVXiV)xm^0EVYD
z&hMa8+U=U69@UNVGakeHOvUNmZRPTY>#qUs@l4G!$zJvLC?^p?1L;o3)|Iz&w?1Ri
z-4L6NlOd4FUeX5$KcPP@T^{Rc4F11wz~a_0x?QwRIe3u2X8`2-b-V^pD@d}k+J!SY
zju{%REu{7a)IlnePx?0c2?#RfHr}7hx)Hsqvw=KG23f%Ted)<-M_HO@;hSj5QK#{n
zJ^-x#X-3}2!4TcQE;!~}eqaDl<GP-yLjd48d5uU`1HeQJazs4F{ie^6eXrGbJqZA$
zzCi<AEccP^M!54k|MNjc#y>`82b{G1TcM+{P`FiH=gXrJr2)>J&(`{X+JY7t{{lss
zcWH&$g_E`Vv$UAeXX}xJctH;bQ8k(20P5&|)nQ9f#+E_t0=KA4HE6Z&o_zascY2Nb
zDZ-V9FrQugEG3wt9y0WJQ^)7T1s1KZ^Fo?<HUm3`0h(wwF+dye?uBKy5>MAPIV6(7
z8IIo%T+ZcX24?r#IlPsbzPPKYCvI0ls2?(i>A0-t4SAccgfw2osfSp*-T`R&<nr`g
zfodJ2w1G;^w=T>g%o}>q!e5=9czwK{-8!|H7JQ{R!FrNYT>trKRw2Zm8AYNt?TpKA
z@`49^0)LfxmenWNksh25KjovxP7xHFX*X?7F1=~aR%ol`J`4DGk8Zuoo)EOHdHVn=
zh_VCF5MB4DIt+4I^UTkEcDvO~C8Xdkxc$m@74Ot<b)6UB;&$VW5Vo1@;IyZS<twQ%
zQR6jyB<vjyvb=?kyI8L=SIH%NpTb*zN7P&QQ&x=l`{yl}rRIWZfaCh(_5V}dJ{%+R
zI;_*VMeru*Js@#60&vLQI6wc6GLZRacigebAZrXbM*-i!s_22;pZP>5T{vCqyPk^o
za>{G=oPzvr<{WcyU=~6U{T@UZ3gRrhyC&LdlkF~-?CiI@>xqI*+DCq>!`;!lSW12=
zH|iDry-dH&#qsb#qDGPKR{?x1F6BRlj^Jrf|ID2wXeng4(|6N@QJv+wBK$bgZDKlO
z0~iM-8l<Tf{WwcAA9jp;kXlTpIOWe2>~Ap#k+VNVNsznoDefXd0qu%JL9ah$LlX~N
z-(8^OAQ1a(qr^fps(%A=E$3loIRLSmo8h0nI%}zVo+Y0H$|Qx?gD+#XWd?Pi!*fq9
zWv8HpLBp<&U2}<vnN!wgSQPO9M^qTFODQk?0o8*IEEx*Qz5Q;+-=KQA=lJ@T3I9XX
z4!0Yb;68bI`V1j>7y<bTvJl)$ZJx_=T4U&ry_PIqQ|py`PbM$q&E~6oNgTHI8CRvj
z)3dkl_g<t4`xe$MPlRBMoxvIOoa0YTOF}M!Gm?~1a;P21XUh6mN#*YHLF>nbzMo9*
zj#S678n^p`tiFeM0jA@p0e<H$?N#ty?bVbKkalux;aQ7;@5J`0jM9}u!cA^@152Aq
zNQlwBCBt+QrMI-g&pNk;=afKdy^LVj#(mx4tv%n`T>rEgA`<7n6+bFwTJFrcr^_<o
z9x9UDr{(5pmY!rD*VWCQijl|ZHRkq8>>EVg?@wJ4V7I<LMe#W-Q`Do$6(YWjEhpw_
zO}-l*PrWa(aF`{TqF%&p0Wp(+;)mlrh>8bcafVmgqHP20n9At94Jcm%O1?-O_Y+W<
zGaf=|ltG9_#@~4m&pMx271DRsQ^yw=3`|LqEB;$14pZDktgW)J0(Jq;qA^l(lz9*=
z-yB<ZMiQhVPJma*ti&u8+(Tt&fDg9d-&#|^X*N5<Y4*(t^xsdQwb{|Rk$&89$(Dp~
zv}rRHj0<wSn_Q-HB672?&9YY%9x--64xyXZSedPg@Uk|?nOjd%aO!Xzk*cV9U*}E#
zdLo8_RLem^c&laWhuBIU{hd>X2h{BBH^qCWG}#GsY1F44VhlK^@`R`eRZ}<H>#lP>
zRCX<p1X!<9-=NovZ~i7d8W@p*x}7U<YrfI#dGh&a%Md26r|eP(g(r-b#BUEtbj`Bc
zjjEywCmuSd3Hin$_p~}T*_n-P=}>RVzptw8AUgnfe}0l}(v<jbdN0(gb3*^UzcV&{
z8|g|8Y$xre%`U7lDrO(h=l1G#2+N-e`J^`cvmpXUzW|-)8w4EIrzKIi)LZqy?8XC1
zLpF-%nYdU+su;irXI-W_^Y$QCdT_d4=BoW>{32yu%`yr5%SDn`$UIgboQPK!pHVRg
z90RB+MEQ6rZuGm(2e38honb$3spX0MX9T=q+D*A4=~kI<LssJ~h@P+uk%V0STl_Dl
z8^W=7zLc=|J%i+K`yka7_<!XaAl4ymnQ>Jhr<p=}jZcu<;M6nNNKO6WmvMgcW!9CW
z`!t^qK%I!=dIF!?$)lvV6LbrrlC^VKalb9VK>6IM*W1oTdcONrFm~<3?8ha}{aq1|
zUum^6^}6ff@OboZG|Ll?nf^7vI0%b~5$A@;9zW$kN2??mYVN14W~w-?m)3KCx@#?s
z@mV_d`0t*pCn8!*%^;LsLUu<sa&V|qUF`#L9G$|YFb&=bm}i{Nw?jV8&se0b_^}O-
zt9xIb4itz$w9}?F4vz82_7|A`PF~@}Ivp~0c(pX*P&0i_^T8Qp&auSddFvHE=!e>J
zPv-&5^LDGZRq&pKlSJfM&UPxs0&b3rBCQtM%q6qEPGNDpC;0{g{O{=c0ZCx@Qd_6N
z2VUdfa}ZeN+cII7XqoAH{Jw?x?5x|x|1wNLa^O$Y?w$cG{->nxLfYI`4R6ZfAWNF9
zB=%4!o$~tzv?~0h_fqZxij;W8frn`=vrj4c2%P4AughAO^-#EQzve*(JBrOD7KbmE
z-TMaMZ%(Io07!P|<s@>Rrkj!|kXNS^>F=l@qSmA<nzvqhFiM|^0z=!(vn<whpPI$#
z9U<~V`}PSf%itCRd`-#p?7;c!ldJ3}42C$}w+s_h=ehXNc*WF_BA#4)O9cCNnp5aa
z&5Hlz%`uQlxL~v>*}<6q`U`{F)JH|6w#j!zoCbFR@W3{zg3IMW2xR(|KaHw=exyh2
zVHfw~j0&QQHv#}i>(yu1x~6@x&X!7(DMR08?Ixr}PCjkH<FiI;0O$%v4U1(+`ET24
z-CQOQ4E0ag^>jKee5h}7KnLYjolkGm3<a^MJf1*LCq4<<cbt}-r@rfq6f?7lNaOgG
zi(J^riNmWqUEJas&poD|bAUGfz6A<?c`rTuG}B7uBT}>x_K##|{CC`H`ui5nOnDsH
z5d^vC8un-9cj5HE^d43OH8!iBxJYce{(iz3xEXpd3duj8A|C(_jmu)Z6lpP6hBU(h
z=oc6IRY0Mh*M3VyJyh;2nDkDg%{M#_IE}cdr%iA2{~T^ZxScKizYu4{xRy}M#Jp1K
zC%sRaL5caxs4-?c>j`X0{kh*WV1G6itpMndZTo&p1Y8R@8@u@cuO~U}mD4><pTt6i
z-#1x>oA{e_|I3+XxVyd`fE_2U&u7*XK=(YEr0Wn{jPN^+2j>t&32GSg<S2jvh|k%m
z-}k#fwI!LlGDrZk`tMEiffhZ>0cf03dkCuEjsN%e9N=tHwpRvXh6l6z)Dwdn?fFfQ
z*?fs+jUnEjvxvZHWRa3}4dsT#)q|&Qb5@IHaN3VK0rZ3sjDgJKb&q9qeN%L2%@ge}
zwry)-+qP{d6WgBHwr!ge+nCt4o!or?hx>Hz%UNAjUEQbmTK#a=soJ}P*VuQ<R)Tv=
zg@t!(Q{&N6b$<t+mm`}~#<4iXHRRj}`|{1Z6a>qA$fIS=*^AKO<0Jh6eIw~=>H{cH
zFzb;oJCMco3l@xZ<M2xbd*uMW$phSl`DUW+w@^x#rwImtX5&Q!^6Xco^Fm%8&P!tB
z6WuJDuy~O@fVTKu0iAAv<>(g(jaAgEO4vXR0S3Pgi$DCUF9f}zsqzvY-F_k&K4}KJ
z*Jb%BQjuKJs`K0BK?|(85ZB{OOuE-pn7&qM{TzX2Am6Kyv)J#oM>Y=XyLTwOQ|fp5
zk;IOgJ#Ty<&H>i0_+L>vDoFi;n{IF{B*``J{7rlu|32A?gEs=ai$;KzApdbUqnmcR
zy9DCfM`%%nc+=~ce@NfK+7tIL2jU8BEgoa=*8M@i5t{?~;awx9e!86R-&rVgj1s?(
zuB?GvHmYN~@p<Z>u+7g&dV-5=TzWbS=Sa%uDh$MI@7y)9>xlmI!OAZ*lZW{gP4=j9
zn*lrN6c5L8D?1hp)8a`%>5femR;IO^&Oi+6UlP9;((8mc@gU589na2u9PE2t23F_1
zzoz=OgP62f0T3M-IfGO;47oqyZ$LFj8-sDat!yw*7q;F(^#t0kMoNUWEf)9&1kIm`
z3fb1CE*afD7W%r`yUuvq5ZCOL_9|i#u{P7W8LE+vzk7h&JTRDecL((XiC{HTgZ|+>
zAPR{~t5DSgC`3EMyz3qdAet*+_wR<u38>xnJm!}QaJZ*8c8Td=gTgebB<WIq53?*k
zRc%`hGnKi%N5#!o?Pmm(=%UBu7R5le!N(O*)UIUtNFzYPI(p*7TNDKrQ3cs_lI_TR
z!kW1_n<sBb5P_MeQIn{8>Tb^hheD|+Tvq!#^!{2XA_*tT*|><AImGbWYOaPbJI<<!
z+%~;uR(`v?HZ34_bFq^J?ADXnJpYMxvx9d^;N8uA@xpK|e65YDeI9BztbRC{X`gAP
z=3eQ}{(ExesG%A1UK9Jm{HyA@-k+y<-R<w|O;S{+oRk3Qcgcr&wO(S4PMk-#btSOm
zE?+vIGDj95i8B`JZ3sM|0|rpBv5~rx*3NkQOmrjzXN{E~*85bQ<G1ZRf>}`R+ef3u
zuzr3H%ub7C@Zy1`&U=2kC-#Q1)~dOaZFYv~XY_|VCu-03YM&kl7_v20NaZvPPmR-e
zpKzn~m4zdmnRQaS{QahPxWoJpbC6ABqWL^1&>A(hHz{B`tVgP=-~?<d5Q!6<OlUgE
zkJR>~InRj%{uvtB#ja|xwH~K4#zOtyJ6P&Svg(WgjbBdiwH8ani&vaK-$0{KQJmfb
z7xAtM2`Yd5P>j4&iEo{pAS9A3z1&Af<*`b+y-umKN1JoHGQ%bxyMHoRY%Ux$HosL2
zggzG}mCoPY;59xJCPnYUs>Pv;!$t{3?qtQHnFCHd3%17JSz%{PhW6!UC(a7A6OAVy
zHCjRk4D$?0f|Q~y3&eC2Zf)1#;)#jsE_@ge6Euq=PwR)IuJZhW@)|SDwJ*!}cra)s
z=Qx7*NAG|?D7Y)d69Vv-Ru`oVh^OaI&#YJ2FL^~!3414+enA;b9I<UPu4_ddwmpJr
zrnVl6G?_zX5E&okk7`&<P>rl~Tp4L?p$O-+R{koqn|T}oa`FW)!REJJ_`O7MiuOG3
z?p$|!6BgHx?!T5S{phhYhw&C}ao^t_k5oFH>P_KVsM~0e8yHsbaV)B_*lS`sxe%b(
zHb8mJusKE_(_HrLTU7xfkOdn_28suN8Jf49!P&**yb>E4LFzNHq6Td&%CB0zfR8Ix
zRNdG+2>4ujK)emX*YDEM^o48-DXf>JMe*`6&4n?g`$H+19d*m^noS-vr4q}nzCCst
zu%4MM!?2K+2~lUe>a!H^SJL!cJagG!pE~BbmsNEcP!KH@8-&aZ6X^>r$RH5?_m-JK
z!;b@rzIemKJ-5|ce2oS;F||t5M<}z{sX8Md{25EKvfn%twwTSeoRsYhiIJc8bLe#)
z#;_P8yqv)MQ`&HD+4;PI6mcPicOcr-HC?MFTazr?Z@pxkcJnO-V{~+BL`zVHcQs<`
zZLAtYd2-}|5%)hIvi%s>zY{^kFY1s3KZ$R|p|A+)$7+k7Nd-r=-K+2attvD1)39?-
zBSJ+9-DP*IAA?vtD#u*gaN0hmg(cl&kmf05qNXch7y=q7&*=o*Np3ip)zGCozAre8
zqDrlV5plB}t~1qb{gwU}x%s`}zDHA9r)tluX8rjiv2vB#Dt03_7j(uZfiHjWbdB6J
zacx3(gN(u+_*HJE)y9~ea_dhXm$qO<*+g$GU(U2Avti`DeFo$uXQU8`G42{fo&%Hh
zFa;gFYA!6p6kUN=CjZVY0e9^AQEuV*M<ZpMYpOIF3@C@&H|=EI=9g1ejk!y>RR^VN
z;5-*RXu6YsoMRE8rWC@Vg|Omr7QdZ*gGWr)k0Nde4oeOTtnEkHGc%Po0KTOQtkr%m
zqx{Tv`MX<#cUImRZd1QZ0O1^(jQc0)9noo3hc~`ZryM>1@mWCq7(I1+sy@5vD<>$8
zZtqdsqB>NoyW>9lHnPhr&`5`kHOIWq#kw8Ze66uoUZXcuN%cD_>DI4nDWUInR6hB`
znzT2s(!<o0H1o4)A0TzB0w<InJ%5()Bc3dLUX#tc-^K(qH}SwS{1J(OO}iBQFL{<3
zF?CtD@NtouF4j%thdx`VzON%IDHx|m=7nQne$Wy%eMqp%aTP1wbSA?Om30z^a!S?4
z1)j;>WXA4sJy>;0I}I>kP*sqDKQHRL63Gx2DpB@x2Ln_}12_aQaEDUL8CIsVJ=tn=
zCCjMRnow=J#mHXGX7^j~Sd{z!E^J^SHqcNcS7{>6m#D(ZJNv=P`_($~?-X7%2*aNr
zg4G3EX0SAy4paT8G6Qq4olz)s^}1VHQDn5BqAY8k-P!%}%2itJT4=wWmy&*qmeAR0
zD{;7#yH-Zu=W-j!Y@w8b2>A3n&I9;saLO`x-W*bhAO8My<_P)G=^WdnuG-2lw0WLv
z5>HZFo#D}z7dV)RBX;|H+-AQE_xa3wLE$LF+26nqCfOHxIG9MA5bW8An2h*HnMM9W
z7}$4WhNqExuez)Yq;IxvhICXa-dQAMA4I@+PMaVli%%c93*k|TU<IfH5A3DE+ox4K
zexySv?uv^$gjfc_wuDw}WUKfqb&7>lhp~y@cbQiaE>aXd;$TBH>Ctz{&NITcv}9b8
z-uP_HS6i8V>@0>&t{b{eiu_%<%+pkUHmtsOxtl8WO{}ba?GE-ewvvN$HR?%sX$`+U
z&ZnHC0;1)YD@eI}K~hl&*@r?YZKtBB{e%{dD|h#ApWaxqk^<Lk75eG{XOVBNe5o^s
zPDl8r6#aU;b!We3KRjX9qSeAnf8(gDwx|XCE3s>?VDJ`#3lSH5m`!)qha8v2(^66a
zjPU5FnrgaLV_U_we4+WSeD4Bw`XFbBk!-07n>=Pt3z^9^b~5RVj&PVbLCPq-3QT4J
z|HNmrvuNW87;|~qrXbo{D%CWAU>&3`ecFwS9|70{2IE2VJ(yd)T#c5nu3o^30U094
z(<?%Yqy*8~4@eU{{C=(n9f&asZRoEmohfhlE>mCbV}rekD_?CoW}I1c?F1EQY`-LM
z0w-NmgoHa~CJI<@>@{J48&2>}iidph0i>K_gsWoNOJ)sk_Z5&F+9cB~XocpntOOk!
zh6|aM-gG|9X~v7R1hQCe>sH%7PV-~1a_br*sYzC~Im1T4LE>tWriUl4TDrKF!%OwZ
z^fgd!`SH{d?euB7>Fyfk5KZ;zWjj=9cFFRZ&uBu#K(pQSLpovtjP6h{`%%lt2ngd2
zrI%(bKmw;UZLne7^!g~bnYJfDFUu}RHs0@XFd>5(FyPSV5J9Mhw?Vyt4NQTr1>ara
z)L+foL)W>TVCK$^+y?z<%z|fhqu52W2R^ZF77Ioc=TtLq{;NDvX7`)!T}%tBUqkIN
zEUsi>N!#9Xs`aVa_EjPfP@DC*NMrx=dpDz~SiK`h3a4c7G#lTdW9Or92Kix=&lmIc
zQ^sJ0%zF4T=Dp3PU4yfWLP^bVpBmZXzdi(~DWWz>szaJ_VV|st-=F3sh$LIpx=v9m
z$+|`0IfVlR^I9Rv13Pwq;?4snaFVlFZ>?4mwQeAEltabFRT|yy-u->;(!~f}U3t!r
zkN*7?F`sYDu|-_`;WUEVuw%<ekuX4I$4Ij;^YUPE$*3BWgchfZn#1zLRA2%%c*Qv<
zw05TrWIqS+C)Y7}D0SeegTeL<#Oua&whI=C*8Y5`gN74@@7SdCLSp+l_PjllITWAj
z)Qn4>6H|5n>XRdUpYv}{e6coZwo)pTr8v!ToV?}n;P8(zg0zOgXV={M$LEqNUr5pt
zV?gYN&j_zLtH}%&*GqK}c6D{^yMakr&boc`a^*un!n)`UROuB!wH5bM*_S*~sJwii
zDxX#L^$yhNZV<q(d&FautH%YN$!%DDd^Il1lbFYW47x=aKo!lL;A#cjp!o?Ic0zbg
zmr-MA#c@H>Q+;?KfZ04Ir=O1f+Uq1hk!j`%8n0;99!M!qwIiixm8)K)Kw7;$V%~4A
zoSKy*%-@hKa!>6o&nv6sJ*qm3kNNlaIVM~u>N6!1ck@6sNAww8lmsXZ12_az^0xhZ
z?x-3HSiG+|84!=(#lGEYYxcdoG;zsqHdc~Nh5PkMtt|DqHB&4Fgzeo_V{W5+_#>``
z<pY&)&qC69#qRNd?-ri#jNGYNHW$bkDS$;JDBk){r8KK)XfC@+p}VpPdD^MdjHi6O
z9-R5uFr}v*b}tuuJix+V@P%jL!D+0WiesM(kcqHt^a`$_>)W5-mqkPusd+7_Mh|`J
zJ*-$Zm=uDU*s|w;COct+D0w~N{j0%c&Nk+9kFfnl#*?={h%<bZ2!bnrc4sDD*aMoJ
zrEiARGcj_rRcSJCv)Dg=GWHVEmARRe>~rfh^8FpaL#0)n)~fI~4=lw^jkTNH&Zk&;
z<m-4IC9yRyF5iD%vYmWx@7V&1tAti-tv3v6&`P0K-knaJm_Jyec7-BdFX9Soa>r#k
zX(}*Ve4JXCuTNRWJXiiXjksBf#J&|E>JE~uGwk7~CnAwZsP1{VLZq6qa#Ch+JAle`
z^SgY6XmW2jc%v}Wm%{`S(Ghu}gmQG--%%bgm_!G}M9>zimQ+PCb)H)w9)q{?H>!34
z%X{MA9U*UL2X+!7qg!&C&uvPk?q|ul420KPx7dzYZ!?3m1*{^m47i1!-6&fbTM>M`
z_au}C5qq}=Sl!bMY24eMz=K(g;RZ{te$smNO5QVJ+_}9RnVYgyPmINZCPF4rgVmhU
zgY9XMGck3*d?#;{Lj4onYmUyFabL2J@+Yjj&mB%7tT}4OuW!-MT~GrAO_jFDmfhSC
z3_9oE^!PhTsLFUHAtd%WGFDN%h=Pxbwt!jz-#d_%-JIm=sF+6s6%DXZE%`+E3XyLs
zp~)#uiN^WFc#RzDW$d89`(Nyyah!mpR(hNSyT4(jsZFj4tpHf{_O$|Jm;|XOC3hF9
zET@Z(^I<$myKLvTgxVIbj!4>qQbtrA&gYEFM;|#)AAcDi*V=Vi&e+8dPd>5wD#H|6
zzjHms2s7#r*pns|hZ>2NnFZ==<crDcJb&eQb|0j9`(xJGNz*`32?^o5>5+;Xb&Ru0
z_-$?TD6Xn~a<iL>Qf@8H4_42Z(YE~Y4@^S5tI8ZF>t2Va)-CWnj*eBe&6*@n(!1|z
zlZ9hKk`kh@t_TetBAhHtlw%6g=BX`T<>oW24bV5L&qs&2r-GmQPpGDo^qbuQ#Lhz7
zx7S&VrBCVZ7uvrSwhJX*HsRy`R;O>}5JYhneFo>oHhGODWe{8N2|HW3hWUWBW!(Y0
zr&>6rlX+&@UT8sRzvsW7piJvc-`<7MyP2Z8ybmYQ<=~pyWlEXdHnQx^F~DCdxRu^P
zAtbF0RP@`Yu4lyS(Im&M3rz?d^)-IX;;d1pQ9S1|q384STVQMY-6x_G&gn?sRCr1u
zi;IQx0zB?b^zgvav^yi8T`P=*8i>AyQ0E+{O&s3sb4z&`7d$T<bV&f%jlqLS2$dBr
z&*+#==D;I!7@*glN8;jbn8EZYX#ODuq$bjClGmo<PSA}WX~m9_=Bt>0=8H8(H&Zhd
zQjXLOsh(kI^zpxR@50)9ucGfcU7*c<rc}p^&fZvpBq`}1pF->nEC>o1iV;k_v)%1}
zGe&d@2$o=?xqT#hVDHy21+;Wqcgci4cs4zAjr!**hG0tP!kced#MtO7`F%M^Fm+l+
zu~1CmipU4S@8x5AE8OmVY99^4{5ua?KChL(^@hg$2pN+}7qpPlYjdCRvCKLV^a+>)
zlO!R|CLntUN5zg2Sp_a~vFs*DWB>i0${C=7b5&9<{kC(4qb%Z2U~Ve=F5uyvKnn_e
z_4b=okhnl?YX+HF;Z?ge7l&dzM+PLB{U(^kttP$T?7AsP@XQuzU}Ah8{C23B=~@2?
z-~M~u7h5<#wxPMvQvXj#Eh>7=wVL?f(6B*zC75C$hEHebZ-gslJfU$FV|KZ!jKRGt
zV4SE}HJ|{CEsopx^Kn70TlXTULbKglx1Yu_d?cdIoLeW3wOu$cAmAtC=VQOdL0w0Z
z)QI?OmdV26mqsHg)>qUY>BIzrb9g3vxq-_3A<7NI;&U+7F8CTgoSvQMPjgY&v=JKy
zpCpLU0&7VBm4lwkvu6<@ylap<aNH$o-%C_S{JG(CgZRp?Pw*zAlBug}JCVKgn#uu#
z%$;ap1|=Hi^fza5iEiB%)W7J%o1$*9^x|u#PLui&0<Dw8V7qS#*}E~gDv?`I5#iEc
z4Zh;vG1fMK@_Uw887-wiupJ$rJ`1-!cj-2$N;mUrSno9!=a<b^e5OsDC3Z>`kwhU>
z0guDcKTs9zh{Z7Y1gtK!lgJ=^Tj3Fc1#PlSAP?EZlY)->bZA6c!n$rZkPAL~a4*0E
z>1D8V?Tr#Ia;+TJC7mNE51+J&adj`h9ShI<5Z}iXH@!G$ORs^A4&o=S{>Hg6oY#=h
z&~-@IPM+3OReEI6xXsYqr2yxhRpSl|Rjt{j6cP~@$C8eAnDg4kTA?Ho>7teZmBwp^
z2PPi5)S6*T<Bnad+PV|{t?I2srXnZ8I~!)Tl=TrrvzN*pHL`iYW^$5Ecj}(M&>W=^
zNbtOSb9|nZwDWk99q8>vU_89Ix?jYFuRm-Y_UBO!x_EweM{nphtXU+l>eqo0(uVA4
z(F-d5Y^Zwp@LXTTjO6Hmli;^FVx1Q6-x4Q%q+T!$)4@3yCr#-FN6tCG*JobYRCN^9
z>r+fU_lDrxVo1qwrG0K^oe~;@;Z6CY>|pG}E$wz`sK&`70C{uS+q~CWcjw0+w{<Cx
zJ`}{DdmcP1luwi}>$j7s=dxbEG|KvSTX+(Ra2#=_`xlyFPU0@H-Fp<7M~w8ubb=K=
z?u-Ng@!TBg;6?(m+xwU1j$zpF^PJKFZR6L~=dU~<ru&Jpvl##{hJC=CXvfENe66KQ
zF>4tU(Z#<7Ts0V14~E?j&;yd!Rkq)0*4V@9L}gZ2OwIDM{iz@~35l3W@=Lg+p*V8-
zvD=x`xK@kst|)1jd>~#o-X?zcaA6@1DZ!a70ozr=Ye2(T-zD4NZJq3AY+h{s6SqAF
zE)FN<#)wbDLq0$OeO{|kv<L`!T&DSEn`r7w(joW6Nx5&oXqr+O4*QmYw_@GN=0pft
zFVk7A`nHqH_xs^RnGXf(D*6mfJ;G271R$0e$pb4WQ?8nr%gW;yWMYa=#}*VrUkevx
z>i^LW1;Bm8UvmCq-m)M5p&JQKm+=9}{t8*-hGC7%q6)wbHBrg^kpYGnkxRT@uq&I#
zm!M18lx?)d19VaX3OE1E%todJuz@@y&1CQzmP^tAG{0<q1Jf4I6df8EpN?I(=6JiB
zHN)7!=_|^4-J#WsA_$Ql1izBoa!cs8IBF&d7SB9f6F@oqsfZ47Ej_qWo-zNDFzc`;
zdT)NqAawTE<zjD%)1*o~nAs&V7eKG>+4Cgfd{CqJ%nmNhEZPwAQT{d75?x7MKV}13
zQ23d-T%cnhENo;%9`hu2(jKH19U9V(AIe>;-rJt+V<M4{d$ymZIg>n`t~cJ_YU8PX
zo_Hd!tH;%_I1ORIv_%OvbE3-dboO98Pn*zq+ib!@J$=eSd-qHMS_ex%pzikld(m^w
z@l|qlXIs9lp4(1ITe5Ht?dutl-gNnaSk&D3@D+wbpX%S^GtQ2(dDMK&1eSCDSzZTp
zngx`6T_ieQNV{2u<u|i<ZRf=dN5pygrQiA^-YvIhVebm{=X6fXWZDCo5`hAG-}!p#
zrdRI4<O?8yieq^H_-muAwy{+8-oExo8px=TA0ZAr?jdPgD7Vlp7(oqqPP<_EP#$EQ
ziY;#^C{tl#{nJ?)2d-Lp!XqA6e40>-DKX_i+ea0doenEctrd!H`&bN5Ywf}JOFOJ!
zd>73#8~L3mqr0&ZK5P+xFkh<h^v+)=HbtZpEDVW9t5t@&x8JF2x_R)oS}#%=)$p75
z0HPM(*11W+`?#znm?p_O?T|Z4b%XE9Vd-Pxz*~O)%6f(rE)+g_nOW#QK`sOK%D--M
z-S(rS?TWEG0Ol44*7W|$SOOQF={i4mVBfPp?`iZ6!UtGmu{#sPS29kleUp(~?oqcJ
zGtA>A>vZRo;#D??@Vr-Pk>l7Ko2v;M1M*l_<hb^5v3aWyoc~BVyhTO|?lV-`k*Rqe
z#6htMS5BD3V{ns4_PL;&kDn^j^Q<R4E%>^ZJXPwiWE#?96@ELQZ?=N8i<wkOKU(E1
zh~2!Pc$RbMX{i-7*uh5h`9u(U*t(JekIi(0p6Bjhe7>Fnfu44~as&G!aHzp5)<dpk
zBzY7Q|GmyD=Xx5HOhn_j9+qw>%BIb1@eUsqhYP_}0m_(Dbw9;bAbw5t8J$XP;8NY}
z&e}ragx)*``Q_?e$@bqDIkvO`v~Ampk{rl~#u{)3E7`MtxdFTlk~G!TdLP`E1{V7Z
zyMXy2_MaBQU=*kjvovaA*5f>1KN5RYxl|COI5T(GI6S~UOX0~bQu8t5lP`!%B`aSW
z*v*~|YEU4!0?a*j_V&wjF_3`KPb)I@BdA`=w&cN)B{O(42m)WP192A0j#{^dC@bGL
zB?20n5<4^I%iANo2lzwF;L74&OHjdYM|gYkme?a)(gSNA@N!)gMBQ$Z(diZ1Jrj;{
zqeNK!wnByX6F6AiE|<;SJe6bj<0Masm+h%O8cBgvq_2(T3cd51O->v%LSK5U01&KE
z%3i$VPnp_*0FgJ%SJ5s64r!sN@{XP=MF(JMY)52y$Y#9i2`Smv7gvChbo%~!NH>B2
zC=sjVpzni-3Oz1dYUVs8g#o%P)e7&^J==4T4;kEjT%DlSS>aJ5*uo_U4j?6&9xD!1
zXCa0-Z*K}skn&weTpvAA2QM%F&r}CAFZ-hDZ~R+}P72#~ul8X@(m5ql2}c{;wKo}v
z5}|M6vCXjR^r7coQA~p%?_%Cw2geBt`Yh*AJ0|vLZlxs-E%F;F?-2^xiG<jm>7-+U
zH=m$Q3Frxx`#UHyQ^voKWOVw@jCAVk&oGuTz0Db5-f^D%kt&eBvPb#BIoxpMpWcBv
zz9X8GB}ac}?&y8c2V+WtbKWbsNmsWg(vfe?xDYqem5`Z887bnL@sEIFVke+xK_xB#
zRAyBdPcUqh*naS1FK5`}xP%SL91EPKNv7}9kL<@pyeVK3Ee|Qg?yqaL9(_JXDN&7<
z;LBU@r`N0m!?WeI3Zl1P_h_`B&g8@a+50(TQ3FHeHIlUtgzeANK{hnaDy`ADV$i5s
zNtTABN(zR&0=Xd|F3EWaED*E5NktJt9fI!`brF0J7a<-Re&{^n?7D5PzsS`i=9ZUo
zo2&u13#wUStxLB?dldplB@4~!x{cwpf;A3EUX^uUIA<7a_3f`{Q(Q2tDNj`L9!snW
zsH#IiWf?xh#};FB{+ge97#H2&jdI_NHa<y-^3;+7P@M;?lgNUSsD(-A$aLn%l{NVf
z8gFqamXVA^fj_W5;Up?VOk0jAJQ9npwq?shHP{hSF5nv|K;WaVK2F7(!#R9#-afcx
z3%Uogb48J$dTva(K%xE96VB3b&FeY1rpN-MnM?~pr*b#X14jLsoqT3Je*+YHyZVOg
z;$7aAm1W<1R?;k-dH6Chv1F)Vux@<a8DNBYETgz`7oCCcX|#p_Kox%|2vLDNkiNh5
zN+iRpX^c%*Z%H2J83kzivQfk1GMp$&U=MUJZdX~Vq0&x!mQQ&{%nkHU!HuwB>`lOF
zy%t`1k6twEgx7F|IX2sDUJWifkii6hI32wldQSGdtDIt}27E@XnzDY{0LTFXm&dul
z^s^0o<C)`*dQvVf_HxtKR5k8tafg)GzJkDy3A@9QE_WzAvx}p{{q}9i1&K>^fn2tg
zmHtdv2PQ&=N>+Jk@fF**<4Qz3I|#-h<I(N4ncHo*8_}Mqe*AfRMSPpcZvAa~%J}jV
zs}#}v-jF-s-~<W~1!IU19Hha(50FDfv&j)=9esP3{B$TBkM1PWsgd~vjM6ifhUKpz
zJ3wA=lQ7{eYx2Yv_zL*C@L6a?k0qro_2+dhG^3R;H+Rp}*GID>=1$zKG4tb8RHq8S
zpY&1#*A>UK>l<GEI%{3o%(r$65ZiFDqaS~Ux#Ux|*53SVbR`{0Ibl1W<=;wt!absw
z^&hq&C@Uy5j$Y2}IjPCw0bqd?uN{vUoh(!_NVJS$6gMs1T;h6@PJDS-zoYb5Ko<KE
zklu|VAD1T$``1EG4p>Us0j*8qjI2uTjRi!HfW55_LUh0%^CgbBl0F4ztkG=XHtGZJ
z(6AQ^VeIL;MD3j2y86vje5g)<p~!fD=T-C6WaD4k1=`1;7Uc4C3^5@!4M&%)%3cSo
z=_C%5Iv(Z-R3Nq{O;v4)DeXYtj3xoLZk|$oEtOHGy<_rCdzcQt_$!h2R=F&;=F7Ef
z@BLNr4S}OIudBL=Bi*uT+*A4A(?Z4IQfoYGM5lAzJWI6GpdK|>0t78+6fgMl32B&u
z#?te~nj6tR7(nYFFl+^<xe#?{x7Yt#&=K33RTpjhOs{x^>y>A|7w78`x+Z2GVfEX8
z0}WIFF<iPR0vlzU4!aoUUVUs33s3<|<Xq(eTE+F^Y*MHdep=|D!RH(@ic7}JRb9>!
zEFeVN9kKD0_Aj?4CHUYE9>yf<;EtDlu|aA}Wdq)mp<fKdFjIgM>Wf&eEJHDyI-^0}
zV>A~h!(j5BOHfl_zRp}OI&^V-@RlGhpgO35#fzH%<b9%)6K8H;iXP9sfu?>tN}8?i
zP2p&|M>eT^d87e=bkJZOfeh4Epu?h+nS6YF34%|yF@1yNlr|}vu0h-$q>Ju&r5SCx
zQygFyP0_5#sXA+5t8!iTAHij*?LO@L8k5c5N+1IDE@Ih%<0i`vhtp9yTRCQan5RsB
zGk@Z}r=6TP&Ik0&Y3+nvPsyW^W&?T4f4zbt(YH`2ZWF=HEH;zFw9h>s12F%#_xVn$
zm#r>wi;5xhj(l3IH(faTG$Cl5yx86WzX<MZ{K#nF6ReJv^5xlHiO%g27Ia)jCxu)x
zYbKmW8Jrxiha#DKNZ;>?s_0H>j9iYb#kGYH#*@>ucm{&%O$4;(va1mD5=<7;_P^QK
zRX`hU-MrC|76HdGS$+<e$PcvXCQCs86r=asI<{Pl$_uCQM2j8iF!P&5p(>-?gA?tw
zoFqNpxa+7GW^oKeeAHPRob>&La&TDv1@bjS@s1hd{*5;Vj;`1(EP!zdWWqY&4H<$p
zEf?46)I}8}o??7gVtVZEVIHg?M`tJKEI)C$JjttkTm;E58#9mmtzI6^e87BuwDF}n
z{scYp7;tIb*Udi7wc~twq6wiEjJv8DI2v<){TQU)D)o&3;g4YGqD|t4)rxTh&d>^u
zSiFnEL`J4hS#s6^2{C=nu<>`0+w6!1)4+1p2;`d{iwSWrY35$m19t1AV)Zdy1EJU4
z<Np1yz_9fQ)oV_0yZ)=3otME{B?cm4EAYTW+x$v{1D7f0>%c4Oe2tYi$RU-=3UoBG
z&^Ah!iU{ZfIW6=6gFpVeS9ku_+3vSjINHtMf22g9{wLwaA(<*iXPqrBh)v!93aYrE
z+$TT#Wg!3DPPG70ta6ow3<eO*VAx(D*GgVrDr8fViTjJVqMjS+U^^S3rWWEs&;L;b
zLGvG@UVYt<<7+B9Gn+Yeb5yeMo|Dzs{#aATP6(eBV0CeXJC~ui$o5C@sQvo7KcC_6
z{Q^^v1_4C{0058x>0AXVAD?`h=2ie8f(jTw2EYZ_*_+xrIa$*((lOF8n9>_Nde}SL
z(VH668@o8VnliDnGIG)xtExZ&KsFPLHT0y*G+f+a06?H8AOOJs9v8YcPU{>AUsw78
z8PypHu+r##&;N2N(%Z||t25Wr$4$=f93`bvB*M8HC=-*6r_8?I+5E{R07Z8VIh7a5
z%91jH2>5_axV!-H)B6P!N2wlq*H9+?YO8*88q%3%s#nWYTff&s@jEBY4_@8HgLR*7
zy7AvqJ)72}$^q4*3r$iJoz9$K@PhZoJrb>|9i;D<Otg}l`Kx8(CZx!{LObgFR7CU<
zyzS`(qb+4)JyKxu-P6<whnY!5&ymjRiQdxaLsPbiGp&(HT@&Zcq~h45nv<<XZ8gV$
z91w3eL=}6IxP*(5UhnS#eZSXy$;t>HDC>!?iir<T{bR5L`mrwb*JYRP%ABm+Uax0c
zEdiX0-^{e*OYP&%F;nR^=b3PQGxBoN@`Bb1m!kDDP#;}X6`oFnj~^?}(hUu5@un%3
z!)6C`wA7kfV!j%8ga+Yd3-o^Puc4*e-w%zH_=`Kt!#+&NXaSx&rRzhU9h9Y^n@x1n
zm7jF9`Oyu)`(j@+CejO22`2BCLM&y(_sCiuA>XM7Z+VfKcBu#L9p0^SKn>Itzk0X)
zX+({`lI$=td07sWM$I}iYI-dfdZaMy*dwQ$KbOL-T~iV=oqMY5PMj0Biq<`)zG&R7
zbjjkzzI%8GZrK$s{*dLp*|ox@Et(g6*{dE|ik_)At}L83`6hSqfy7@*)iu)o%Osp=
zb?HDJ2E&9lA<|)VKx1gz+xrz!gw%aE2$$*5_Mop!i0W=926~<3t?r+!2D%tGjbR{P
zd$)36tA{_z1m;7ZzjPymNDEDQhmTDvqD<g=$}}ay%JbC{GTdv_xPn1Jp~_o(9}H0M
z*E^pLE$#JHUvzO82)cGG`$9|KY?S$Wy&Z|%=M>5wcvpxqADWhC;j#KEVtze#@A)^?
zYH`ns^(>ns%c$S;C>9}6G#uxiVK;I>Kv5JN(DRh}2Ar^nhRX08Kj!|Dnuy`^f|rLS
zr(xyiT1f60W7aUxsN{L-+q#tZA}p?d-<@qD+@XfOi{rSdAI#1yv>I8r^DSDk2FA4U
zk*JYSFNvL$`f1ukDm~N~iPzj~Me$j!ZicsnKf-22^;ZmIY*JKt>_z_)3a78c#749g
zB8Gy34Ko+|Cu76|vagLPFFDW$n(YZKW1+^zLe=(*oQWYm_|~%mM>|cy$QvXPlKM0-
zf$=qCP!Bh>akTo)NG~NcJ+VIvl|A*i=tWLyr|6HI)IrgpoD^_(?hY9XqL$=X7*!*#
zKBRE|thM*o6#E|tW6WQgjzoEhmE^}O*}JC&M5ra8PbSEYf?=^_+rfP@&RX<|3>0-#
ziDN4=Ic9e(i7PXtu+UZGCeW<PdFjAYs1M9goxuA{=|)qimL(F*qUg%PWS)g_&cbL>
z#R}LJ=|#}RY~);*=hLG#)MOnci1mLDEXixq+syVpWeVJ&k#J-J%<fndYtuh`$>$`4
z!{B}v3C^HelriK_JSh<x1XnKjZ*8lRe@4I+tWnoWI~aE%V>l(YZC$%(!-?!U9k++k
zwYI<>C}o)nTYt{T6WHTB!VhJuY>_<@NAvN-PID(v#coXLx?3swzX`8buE&~h)RGWJ
zN-k75_{`mrvf8OEyDhT%zp3uAKRPRiZ#xKE)mKX>$LHR>DRjl}HoK6o{+i`%^ANQv
z;5}ybV#yNDxHq8-TMI3IYQ%u;WkipxJ^nEjiZ4G);GelxQaqig#N${!_@vcg^cYHD
z&tho;onLL|S55EP1Q=91$|dEt$ZhFIRFczMQWqf^Pvu*vSRtra_@Wf{t&ag9)POdQ
zY14J_>C&gv^{Od4*DXsu8Ye1|*Vqjy)%g}k-=+A9X@H={8^$NDvM23VPX_4Dwk9PJ
z%nq;UP5FqBlqH{ycZZu#TNm9O*HcK&w>@CxAy{NPD%8@m9b-)u!C){3?ljMYJZP#@
z=U-_1LlyC*_YI|UO`>~J<&vBr9~4OxV;pDIqeVEy1#(%D4=KTYRwR;~01t*g0j1g0
zpTMwiF56E4)Ms5HDUssg)^@KN*H(ldCtyd;!4WU|<~5Ds;akA}cZ0=_BU2mRzI%zX
zX6D-8JH4uv$VabwL3*}}A+hd%Z5WxD8i(0m=8Qk+@?V~B;t#S}u7tOm*NIFS27|+l
zo;UfXM)(q9)O8$FQK-F=DiyS1bQe{edz0oHBspDnaL@Sqn9|K1VAA=dx~$lp_5s5s
z-v78)o*E>-O*bEPJy#F1I<KZ%yRGL#HQhc__1HMCYdW25=`$aUmvsqBQe~&R&#$`H
zN6fwhtbMGX2xiYS!UchRWQwW9*Bi}-5Pm^?j8N;NdQ^ywrHII(c5@bm60*@>-I;cv
zdGX1m8<~i$1#n4uHV**WDsDyo0E)Sl^0|qXjgtG<QJZtBlFXTef`ZA`ymU0j4Z((?
zSZkutG(70$e=~Z`mN4j(1=l+Kln-wh9{m0ci5ee^2gff<YLhk0k&@EeKOx0T9|)UZ
zFfoxrY+yF<9bO|HW{B<`{wqsL4o_91hNE=YS6&k&>6<x-9S)JrlEkSjr#q`Evq;Wb
z)+YN~WuR{JufOf$e1aib`|s9^SS0d#w(xv+&KB)Q?HQtI*hl-NtFl6Zt5(VAK=&JL
z@dsbHq2EXwalgVxdt%rI3V$a1dwgJ1fC_RsNuUS|<7V&0gmh_UE?SHlXE(Lo=B@Mx
zTsm+KrqtDo1FxjtvD(gOX7179{VlwRQhBwrjBj4JE&o?~(lF!s&z!_r7gRHOInau2
zP*jU<d0<Ga8s`DY`f@Eeohi?R%<Xw-_(fOC_K4e^&~1jfexdt!www7BP-RS&-BLaV
zPEX^<O{Qw-WcS;~MuU*3>ht2s{jwl0a1MQH44HF{dK-OP_1zLW^h9tNbKE~ljI~}u
z&UREW2}db36$?TP?9oAlIPMR`bYJ!dMvq1DUcQRYM}qR$F@HWe0u=(oSr#>2FmoTv
z5$8Ke*xbC-^yLv5t99A)o3Cd7rF6*X19on-{Pc+%4b{|pE?vAF!YjLE$V8P$7e(uu
z$USw(#_h#d+eCU&J+_D5qc{ju9*XOTPczA1yBbqt<hAF~kjH%qcjREYK^1lprXA%O
zQXj1{Opw%b_;lIyNQ1wW_in@gO>9BIZTia>8(=WmHp(4yV}*czhV=AH1~m7{9aJS5
zb{bI!I<wz<Q)`)}&;_Tn><XXy2oV92hr+W;Z~j$9L`msILTa`nr*u}sU~MJc)>z#D
zsj4VgUqu3^-h0xa|GN%@B@6sZzu@Q#CwE9*O=y}p-D;K{jEI@qjFjJaj>;t69u%o#
z68I%%^m4HIA>f)9HATL8&<kYw3(O;x?yNusYN3R?YCdC96nqs2)9Pg=gUfEJV(a2>
zv0e$)sP;AY7-cmiY7o4MI-Q_OGgBq)XlX)2x$U#%n|1{bAsHz}TTcKm>KzhDF#Pn?
z0i=N~o{0>3hBgFNYWUHz;L(_f(>dY2X+gV792nEw2G^)iy2a0wco~*f_y&#tCTbF+
zOjQRZTg;9Bo{Jb0X%wZVLzzOa=1I3`u{fOgu`310GibGfndYqLekFvPMXJ@yuxK|)
znG`G$Kc$2_x7+I1!_>zaFOW)fNyNB?$0!&!cG%kv@TP%QaBW*d!it%R)n?8ygU$LJ
zWE!3DLCY9A69kt?bi@+>)bxtiQ{`M04mPc}3T5Nsn@qCIJq4I+nY<G+z}5L6ravw7
zSwN@W=2?TQLHN~(_#s>UQ$(o*b!zgrh8(3KBmj1VIe`P>g*ib0@`1sG1p<M=ga;Ca
z!Gr@Mfx$!oGKNWm1(Ka&sK#>DVYVitkpSMlGtMy7VumMa_1{7)Gza=5659p_7mf-5
zgAK*}FOg9UodMq{iq_z6InoPD^qRF!hdPu%9e!nV7>EgGG}M0s*i%?w2KY@_;J?Ja
zKHw1HzFA-~;l5Gey|hzcWA&pk#O1lz(#L(gmDp15ShucwcP;+^?}qv1+)?q=<6@%l
z<%PuZZbYFgit)9o2L$TzwViPwCg^bpK<!`;A^tgF525}&V6Y+n0bn94{a_(Ae+r1I
z3d!`X#{P0?-MNT6*2Sa%R~PTJr2ucn2kzrh&1yMf{+EjRA3Th2=nMk)&X^#ryU_)>
zO5%zES90*Rg=GTN<GU`XXeU<(H(U|W%?17Y5zsDfj{cLtcSMB$VKm$5e-hm(ux%sH
z@W;g&?YAzchPe8V_#XW7oNAfNp#h$5aEJ1LzW8NTXC3wUE0wuhIW$XM&Zr-tER^62
zkJTC#Q-#mUsONPjc3l?HEL}LeVmgR7n{oBTb>r1i2hRU*$jW7CWC`uO<`9q$HdtH(
zb6|VA^@F8G73+}!Ui45$(9b@`^~-5NE-dKh@c;8^8UMV9Miuvez7&gSvJuu40SINY
zI1ao?GMl8MI4&t^XLcudykasf%b)W$iMTQUAgoo8e01~w45?-Cz>q$XP}U4m*1%JC
zRH9~6MBH->z5dzD6RX!&T&xhBM&&GQt0`&A$~)OsdT61P`#_~2j3^`=@|Bo_g>|eM
z<s53}7<wcU4NWWX5}Q-b<1kjlWutP{iEuTJ^NQFgZ1XK`D=BIl%|Dq@bf%@0b3h%@
zjNr{K$j3V9A%3Q+d8MimrlO0Y>^MdBL5gr99tud`n-!R2g1Zxlhd_OXqO8%SqAQ{7
zctY)#iAbaziqG295SmMZyHkh{MSVu6tZ}2F>!YNDp!6(3<t2>}<{$bST5yST5KkOS
zc_pr(L!zwHq^KjL@L)#esft?a8c~QgG;I_&62Vi_7AokVE9;Oi?yxF22U2npuILOw
zDJOyIl`5D+dG}|p2jai84G|3$LyOj?7d(s21?O>uE8+@w9(=2ftk1}gy+2;?wxd$q
zig?2XSp)IoF+x{Ze#MmEy1Q}#@1K02m6C+R_8cxaS4gfdLb!8u5^7U6xu>QSW!b4)
zk_Dw&`GRM|d<EaotASpxRF!hcsFi9H6*{`^!otLgY?<WQBS6FL=sT0c3T1P9?g$?v
zII46Nk|5QpWWF)YT}v<8m^a*JQv|#p9Q@UnaF1Jo<bp#AScQ3f+i7v95He49H>6$>
zWGW5FO$cIF8!t+C&G~bcm<ZvQyd$UwIAIY<>%T3zZjEd{0g)~(&rMyyX=<_fw}yXJ
zoDAW<G-xpzYEvo?IoBJvV)w)Rb2EL-6CO%?v#TfQ;g2Dn_4i~U81Wm%BU2F$!NEC)
zbO8M&&d%9o{EY|2qC`qj_IlTx*y`)$;f+zfpF)3pLTHMy#QFqtfxtcRG?vHjK{{j4
zGWJxcgL<M%>!R|g_%%RTvYTSU79z&`=-X~4%%qVmj-OeZ)j7hy6`^glBYz*v_q~r@
zo74G<(3;?nnN=t}=?)wC2gO)c;m==&*eWl4kcbyVp0fsVf<JCEHYT?ayOOEAoWSZ{
zgpJlGVWMVu^`jY^Tj|Z337X<GMM_=)%Se%vIKWyz#{B;b8qEJ0iVwimB<PwfpiMCv
z{yE_O%SbTotBWu{mWeP01x)}mtv!TAb`~Ju{ZnA}57=WUM|C3#;T_O)-!AOWcmaj*
z0cd)3H|l46k3#rFc>%Vzj*2xCBFC)(e7F|)>Hu@3l?6Y`b(u%|4@j#NuZaOK&t*+e
zyAGsDj@zGd$+ir{S)Q9^Ac~quJVTGo`JfLup)~jaP)!1{c7&T}<CKG*2+|CX=bx73
z!y(`W0$&$hgj?lxBCwtv<U)FAE)3)&4d`h>{%%Wtne|pxhByI#$P6E&-Hi9ICEK~_
z0P?Y+hOZ?FAY5Ry$FZ{80dBF(#Pf4qN4L1-(kQhFu+0o|G2YSYgkQGQPJ<f?*nA7o
z!hl~cw<|lx@vZC0Uk)BPUu2(msRK!|#Us{*;5Im2CYon*s*}Upv!(<+z8mhafnVO0
zWm%3v=G2J#fP4<yqY-kbD&qL9aAA&m*-FtuVulwnKt2TY$0)VXVw_hIhY?lz0hBU^
z4AqN3w6erPlh*-@@krqTfznkZ0$grx)RUO5Kw0?#opL$^)h4^3Td^rNCoSRx29*~w
z!iiLLq0r(N?;NsW59%jW1T*>2YEZ$FLQ`0ddsrQL1Rwa2N77!F&>V*+F<!r4-id=k
zmMYaW1FE=5#M3;=1mZNVDE*&39chQ<{NGt$t#C@-9+`I(`g<*}W2tStK6hlcuY7rA
zJSWd?`0iGBK%LX6_1or`)`#nzO;tlzYW20;@7lfPpR{cirlvz+R&?%8b5X{7y5lJI
z3m(MgJJ*MqRsuqD@?#>-_8zQzdw#dHLE-;^(h>P=d;8P3t|O{n!uGqANbwjjP=B>9
zY6`QUh#21<VwUhl&3X^y=dhX@<w;%cE;TY+XrMGzgHaQ%XGCY})W=6=16g|;k~1Vi
zG@M2%C!BojsWJzA!!<T7p^&*XFko(xgElEw50SjCW&LYRYFMQ!CEu4(8LI+Ysow3l
zH9O~QDO~p!W3Unz4nVHl1bvOw25XRGqwR?=q!#6Lttb>J(C;@rBh$h3pq$Edv*)&d
zoD1KMZO)^L9Vgcq!kIE@3~+T6uG_{~{}F9Jq^@|C?MY9~9B}5k#LOh)v%ST)t90Le
zaW`HccPMpqUG<e;%{gkAIO;Zq=~~flImY%Uno-*^<MrIC|58Yt>GT0fesOqntbCMw
zgTz-M=&HRj3>MHOkRXX3<r+AQ!+oo~Gvs`*3iqqZ_;+J5XCIYq_<}MViN2-sXxWiw
z$Cf=7An2R+^masH+bl30<4JC@Z<crw`?}U&>Px>Hl*Ox9ZPS4bY2`D`j!d5Z=<=uZ
z)RtMl$RsJd+P;9GdeAf{-pY}zml;_0mzRMi2HQCTfB%5D^cN$yaqly$t%LGL^aV!e
z%vy?W<yoX%epj_BcdaN2#R|dP0WJv3UZvaJI-=b}D-k5Aua9WWQnRPK=v8MRk}C;_
zYAoYQA*1>irt=g*P))4h%1B-%m^W+(AGmJl;47x{CD_l1cE@=3k@2LW{(tfF{~2$6
zg6e3F{T8ur&~4C9W%53i8nJIVt<aBUv96U8v2RSR&<|xZc9k5lZ^JFn_hkr{m6Wk>
zT2IDJ&x~vDn3q0LPc3$CRT=tKt-m5a<-U!&QR=lz{n~RpQ!4di)Qj&{JTH$tG~?$!
zR}E=wqqip@PLnrIGiwfOAIgqg^h_a;NHaHjk#tXQ#2$XlEu?}f?WpZ6)<Wq-TpA5)
zVuByviT|@E;Ir|S-R|n7Z<pG>;=sCGq>rDxp1(z5^87j&N=)6i9eY-vnbFUQA6SaK
zPqh(?jhcVwLi5VtT2C|&!kQVq$55xwZGK&i3BU{A#z|j}0Ort(nGvJ+Hw`OE)b|-p
zj`}jrH79-!2o#}sHuv`Mi(>@;TnAKkY|x*PUwwTDeR>D*>jw%YlhW}KMSi?ijh*@U
zsv!;-91Yku)?P7=?2>P{xIIJkSW_mEf@|tQqU$1z-EGuFlWR|6oI86M=9tIHdUNAY
zHRsl3GQ-9-<#^wBLG3a-JomSGt!_vjG}b$*6jbxy6>4z@OAwPm2jPGjB@qr5>`Rb2
zhh}$!)T}9C<Xy)%d@nStLXSLMI?vq|K9I58MqO~h*(B(X9$>iMNvD6@4Lkxi3ChDy
z2(vrFEHt&zUcVblOuR!L=Z4&J4U3(7VyiM%C_lgJet%zFZf1~i)=*EmeMT_THvwyg
zLO<VB5{_4SS?82ii<^<ei~R-EN#uzFlhUCIuztT^*wM}?tDXuHXBsajg;#MUQ!q32
z`@Hv5O>}-g&0KdK_x8B0s#v6^=J3BQQS|yeI;LOiy89kC1oypmuIo7YjeqUVZ2Jw%
z$m`LaA4cYBeBY6MAAYfeQoo*M6LkBu^Y2u;@jtH1>vexTylsCC5hlBBJA6*?pO=1J
z=kmL@PWL*tZe4+Gb7MVsbq4r8guc`eZ1|qx5M19B@^8@A<??*)?lt<2_`FQyeq3$a
zDefX*AlPkA`FWTJZ*JH7b-%T?R?hT(hQ3qYyPm%Fe%B3UwMIT5#PD9%8rDQnJifab
z_irY8w+HsNa9w?09@A6r<UXU_O!s!#wM3+@Wb%8z-`eR{YhIS-`g|-cP++QeeV&)v
z>8g8tw!+%6I{UnimEI=GZ+}89thsOY4)I%7IDHH(Jlpkr-B5i#l(sMXxxej6$GX~v
z5X*1#Gq(H8`+bd{_fkN~oV&Ds51vcsn6~7Y>-M_eL>_MHf0X*YtuDNN)iT+3bbnn+
zrv{uqum3ILeD0LK&a8ZVxjawpyct_p4$}WTYRT9`v-^G-o6vOdipEINcYeQr`bA%D
zXXp2FVCwbRsZ;QsNq>xy`+bM;Ei6X&y-#r(L~y+Jb$L(lz2e5U<@$O3{g&=`8kKr|
z+w}GR$$x6sKD<eP?~ONR#%aYp{q{zcBW6|HvLbJ8HIf$XH)WI3IM|y)lFavZ{=9WU
z^{gc|;b|Gcf1I-ydwIfqEA~p+jrTZn{k`lryuPgD6|pkic#yL1<~ZX~qVaO9c$9S;
zdYt1mMxv)2!zSLP8-X!IaK9<KSeSK8d3)W6KQftESzbKV7<*YL&M%IAJ60T}>E%6b
zZJd<gO#c?vImV4=ndEwseYd)I8T)R>cOPblRV!iH<W8@bDINV@eyu#txre>=`r-EV
zlDqziSq{&~@x|fAEq%PXXHJ!x7<*Efm7bY!u4z>%+**atyUCA?FLHLjvpcMQ$ai0g
zy<LCzB`$Z$GkrOHuo%mnd;6Ex*TY0jME(}f?8CPzl7-t2tFq`hr+rb=iZiCe$JeHO
zsN$euA+7yXYkjo-=*5_Kfk&*P*I&a@@hYiGzp{M@!;8y_s(rF8No59$I$RtD<_Wiy
zK(_Xkr<Iyx-xr>CToVRk7i>;5h6nqsVwJ#?<<@l1!x1J&lcIST=b#_w)OHYh^f>A{
zww8z64*#0>m-L%&;oy<w$gb+L(?*(mq5DDcODJoKE!{IanXL)VeN^nPTZPzi`LLB1
zm51Uz%bav=bovRai4up0e@Jc^acg5a_c#yuK!m>4Bblv7+I;(eZF31S>(OiukFn30
z4m*5v%km~{KQW`5kyjkDWMhA^`E3Ms!kn<;tFLTvDe>bm??K!v;ASxUcJn<c<Y-pd
z)Md<bwx@ar8>eu^l)O0Q9Li|*iSzzmcH%UGdGzR2W1?n3aaZCAKz~j&WhaJr4AQ=$
zMSpEko55b0=<voj|4_QMk!2>PXeGO{id7vx6n)Ux?!do=yjuAk`>wrTK@7cAf`^^S
zY@3Ha?(pQ;)2i@z>hNq#bazGje*jWIt-rosW=Y0|jvJ9#QoS6+%J^QhkH$?HMEIiJ
zbg;#??Gn4`P;iK69gkB{BCfnXwnO6MQiMnrQR!!5k4Bu1J6O2HIXD=IKyi0t(GW1>
zl67hCUq{^a2oQr?5YeWlqkG%N<sG_#Bku3mo<)f(K3Gi=rQ=XzDaL*4m76f*`wmBO
z&W^+%Tb*$<G=<Vu<AII)os!Fl)ir$lwV?o5BNWGz-u7plnP)65o(0E%o_>zYj3CfC
zG-oV(zH+RqcxwD>+=I9!_v;`>pp8|<8^yVCDC$46cH+C~Xo}B|3(pVkk9zhro6nQc
zIHh^~HMSieK_pCyB{?2Rt1O&4dc^GeXY!n88oYrnA;+EJ+dRiZjnJjIm5;%Ju%EMW
zaOC8DIR~pFj>f5V5+}{*2M;RGSQLckSS)8z#6O7m_lGTUX3P=k$5ZMpLJd2=jMn<O
ze{!7eb2e?xxMlIFS$R%u(le7+#1fCpLXVg8ZE~!hvEyRR@4+D+LE&4Rle@2wGE?l+
zxSuS{xOWddk;)TcKSX8|i34lA$BOVV-#Ht2KoP0V#*K+55fOx&Hp@8nSQ@X34XU*k
z7Z!`fDNk&)-nKOwJ1@@GL)+;r5rfzT@w!@+Qys^MrO9I%C6)jYKD9C<9lKwm2cgja
zUSk3ACt_737QA6kkxlKV`WUfR6xZT@B}LT;b&;R&g=2H}s(TRm7AI7^Peke1QTve|
z=Va4HJLCBgq#{v@h+mz=#vyVXkHxFF+*y<qWhxLQZt;;b;y3SAA~$VSp|r%^S0E;@
z&FwzZiu*c`&P7LT>P?G+cZ$12N|59G_Pjri*qK$QQ|!LD{N^vv<B3-C?3Q!&#YL8-
zWAdCOzV!X$h_fkzm-bAAGxD(b@K_h|IF%5b5qRpBdPhoqCZ)I|=aoCexkGNk@5lF<
z-Z_K2d?+=DaJC;@@mVvnkVBU`V>>685H%j;sRTOC<EtZN{m);lO`hX0iIwE&5;t?*
zD{{KCD?mop(0zyFSw=cf?5|wqcCy75i?m2#kRVvS-e>H7J?YMQw=db)4G|8So_n0Z
z+@lhQxQZm+CoWD~FKz(Ek86YoiRYGF5N?NpZ^X$X9=4;-h`U2bjjt4Mnzkb?mJP?Z
zH+4MYmL16>)y;~LQHweFMnLX|Q!>)ZeT7E&%39Xs^e%12!A|3JirgZ$)PqOLF>BOG
zN_r!jWWq^&Vw5VboF?ZN&m>ByST|0&Bc0+5xPL0~m7>(s4UY1$I;o6c7>_qDa7OBW
z&h4p8Dj%MD#F?lhRNute7B@aCeLN!4IJ=D1qb!cEdB&&o^W=8kUq;0Bcnm5|I2@D{
z%&13a+lr(3#Pj46dHiYWK*_Nw<IpJ1mSPie?V01UDohbBFN(7g-!ozrM_zoJ>CA}r
zleLhd?(R{=KK4u^IW5G0Er3D<R8knHR;$iPdHyT5$C6o@M0{M{vcUK{@k}^V;+as)
zX#1TcUy}nVZfo1B=?IFEUb_^DBSQgn#wj+ss=tUDXZ4bgNPkdUK97jwY0p99@pG0C
zZ@9QqRqsJEt3vYRkURHiR%1_3eSRbkRc(XV2#w!~D0-;2ift1a-|+2?V&>%TpG3jf
z5?d=_9M1eB3dioOeD^bUNgfYAk|;AqR^}D4F|FDo4#o)5I%s$|ExHzGgU;PpPdxQ)
zmqc`?7GQBlm@C|o68Ez=?E#(Wdl4UZq$sGD7RTkOjzK)lsH6E~gd0*ft%t~FIkyL?
za@r%;5r<zTxG5v!#-4GGM>N&ij-VXJ)5XWf&R02;qd*)g?BdsIB*F2=h@o-HsVa(7
z-jOrjn!0iO@{!naPAWBsJ;xCcKi~rRZgD#zb${rIL{O@y&Zbz`4u!G6&ZKTiiST#2
zSrd=K8Dp%}!t0|Ri$vxA!a9ep>fOTb*HWoOrnWtd_?GcTS=oOi7hYBoicV*`&m%s&
zpDX)`6i^Q<wqP8rTO5yvaA;M>o{apso@$vz9y`^riz7cSWlJ?8u0`ReUK(+@b8JQQ
zq-~-;NEA#5t1<%R)PWnXuar^uu_2Du%FR%Bp+|W%6mn@P(fc5Se6%u&k|rK!b|4xq
z(+GPbQg$6KHNrRBjw(JDxf*P-4Qjc+DT%1*Dm|(swKmj5Jo!p-$>U;s&`|Q(8Fwxp
ztD6z)$rVMXG<8N(c>e0?9V9y2hewtW$4pVtT#nOKbKJXfC`*V-iW70a06LUSOE1!h
z)>dbNBA0xC*m!btSq<tcM12_*z(tQOs$pdzh2z4Vz0OAGDa9j?^Z3F25f?nw){2l3
zfl8-bL`KqiKcthhl^>EUte$Zc*0FQ%gD0O)Q#Uo0jl|xh5=x6Lw{h-m$M_w}VREb}
zyeDZFwPTcp-VU+P`&=CkSE}*x#MNy*#LXRtR_{}!ZwF1Y=P2VNR%x@$5pQ)BvLZ^(
zL)lmyf#lh-2-#)oBgbido>~%dXvH&CCnCzuNmFAl;oWp<=g_u~db>G&r1<HNHG{K4
zkrMB5PW9d+RpBh-$|7eNia#_o;t{Y`W<2cfd%c&ikz&PKR@qJVc&uzVHg4X}bG6M<
zUfrw+I;%{M4euutQB1XDgq+x#g$)vWKW^++vB%?%u*g;`vCYSD>Jh7ACMS%MWJLbH
zr@k!?xRYZ%5~1NNBsOYRzcBV<ZjRIO(31KkQM{<v8^=zh9`_HW#DO^!Bx1vn;&_`z
zopfHD=s#4OMC?ks5h?Pbc*t(j(1UinD5{^6jF5|rhjTh$#+uCc&n2^(lj{G-PNpJa
ztg1)^*fl*K^RaijqOLqhx49oDcQoFmbH1s)809GE3OBHKx5pzFo$ANM?TYK%j@c5K
z%2B=c3o{PQALtzIGn>c)2)I0%I2dUImC4>#vJ?xjDn~dno#?vS8dZl14arEB?>?NY
zN1-7_U7=_~CCWN05A740JV&o?lUC(2vCB$}1BU0rI@XR+E7of!^2*4A_bn3VOw|8_
zN_)hgl}$$aRH(-z7Q}<R7?;HTCJTvR)2WP(^_5G~jDjV9xU&%H$581QyXm0ZzdK1{
z(+#yT;)0_J@tTMuwJAfYu@BSO<Ccoxu8Jo`fb3K+Cj&6mXtc!{O>j|hadDbBvyMNN
zz5g3&e@d$4BiJ<+)Um*0!?0DOXpK|#(c^tYTuEwaoZ8^(*o`PtS3@(FF#9Kyj3~(`
zCy!;gJ(UQT@emT-4U!`TAKD!4))|k?WiQ?1M2>S?QKOt10P<N;ggBa$wyGx?HEJCB
z>*M2Q&HI!m!e%8a<TUC`0?C9)$!GQn5VvXXMaRa8cdqU-L}o_RZH$|g=SS8W6^@G)
zI{TVS#i_#lVasje_Y+@VozHsc=|+0s4nl+u+87T$lSoseR$wjhStQl*(Q)PzvnVX4
z+Ci}y)x)7?jL+Os4sxqVMHrYy$ZgJ~qk3>NG_v9d0(*Nr%B|w2O@yr3U8=?!a8?@C
zV|*(e&n0d|<M@og8C!1~G_!CkEm6{Q6`FLob*~wN#CE&?@S)~8se03xO|c;AI|b+{
z&2`jA#^ENLhK?RzGjoXDv-KdEO2(aM`9_{}sLw_1AGh+sWQ!AU^*%{4PSzqVjI4t$
z58?)YiYlXO0uie-_7Ha{BHXc+BUKqZBimk&HGeEM(*C{eNH!5m(Otes8F=?tc(ZHl
z%yf*_A4f{8d?l2mFOfUkhl_~*)hAyZ>Jel33iJ!Ih9DGk<+3LqVV=cH7RKX!qFFs^
z^SmzdRt*+-V13O|>5*;GlDs7L<>BE)yg;QkmH!%CvD=RG!N(EjXT;0tiC5GTdLZ$b
zBjs=hi>I8`<B1nmH|JTvk;NZd2c^>=%hR27wH;~jY6cgpEt0wYP>qwGNZ_P8>j+oK
zCJZYe$A*jd<*7~j-c5Hq(!M>RASg85gUD{C(%@$X?OpA8E;_P?9S}i3BnfvB(QZ^t
za^txV=F^0$&T^kLcn|k<=wOg-#$6@`-LJ^FvT}Ik_E;YjrxmEhV=b*nl%m#mpQ>^2
zasp+t0yP{N_7>KA&TJ#irQ@85N3*TcxbmZT+Q<&lFr|~gtM)#b=UhAw3QfvARm|}S
z566R8sl%`mP%v3{B1*|qcPT;%h2Y)iN35OxbrQ79BW9Q$&p>r{1%k706B>#`Neztx
zjm9E6Ma|6tG7?GF8pWLq(bbBH1N8!zQzpYN^4_?QCk6Exd4j<hkz<gDKlVgYy!ud5
z#F5(Eg(&2WK0jmq%(*&?T#a^bERI+*TURM=UTwGiU8uYdRhykWlnaY&=V*IBJT;Eh
zp_(X8AuZR4Cn{DWeVg1(4xy7Cr(iS@2IA1X58+&$Q4+DotCj+T7vf%}!*c9+A<F;A
zUv>NEXg;hW%VR*Uv**alvtqH5hw5KryR;22G$??Tyl4=ulaNE$Z+X&8J}xT6A1X;G
zt<(;R8^<!C0*K|>xu#CkaS0daJwpctm+GEzj(d5KS=}XG5oMA>My7HqQ->pvo3S<J
z;~PY++6dzDuhXG!a8|2-9LMcyd&OCjhsJkI;)~h@_xWD+Bp~8d>#lWMH{_?%Ye`qz
z1<ac8Gb)<BO5@vSMYQKmA>&;Vr^C=cgX~D#Fd#EgQM+dX80j9Zwy5%TA#o~4n0fF_
z$%WCbp*U65hwf#RMTho&iW)^*d;qwc>X)#c>itC}g4pSA7w4Kfbrm?85d|EnJGKsZ
zRMvEi$T)lQG>>jqF^VE{DiK#AXQ({g(&icu_pAD(GUZXIWte-bE#s}r`)SYm`jPB2
z4bj=v<6bBRk!GmbMKAVb-(~XKd1}EB6?R|_<7UM;V#O#rn@VS7#HFehs1HI^;*QW)
zrC9+mgWWP)pQ?ExOhz`RCmv}rO?e{;BY)q{*odXc1LGoGiqqM+5u*#9Nc_or_=@zd
zX=hSxj6>&EoVsUG5#K7U6s4z;*L1y890F?D-<8abSVt)09#@Zf8HLg)Y(%N8B6_Cv
zlpS$d<T{(xd{;;2RHuw4%0aN;+-U?dHNoN%#*U7u>|<|`L4#SLKY|eZ=dlJ?#EYZd
zCWP^Qd9bv)I@6~}Jq)Lcvmpt12hvLIl}wkKlk_ff#1$zgIB0DX_Xe%qx~IT}EFu|W
z)uNnP0HXrXl$**pSB+4<R?~Kiv^c)n){dv9_XM{x`P1fzjS`uuwp%QF@U=T^tf>*E
zabtGVDtkbt0W+l~_2ATSyF_qMea~y^Hlm52Hl3fqP?H-eaZb<kK^O$X!?Y4h+O>k?
zF#N2mMV5!N?32l&5GD*(({^CcHcv`gV%4s;>B;bEHQHI}d#PT5uyJri`5AFhUCEO-
zVw%TX!*lz{edABsuqqLqD4%=x)lkgt8B5%Ull?a1;`1J)Vs#MaJr++xtLtP`qY24#
zq`z607EwD6)w6goqCw}~LWtB*O-I5&V?y2)*W+5;L;<wg9_;%v)lwlC4`C#(E>ck7
zmD&6AR3|SMTcn-r&j>#?ZMfu!^-+!)Dn<F$d2K9MrlL$oNs#KE=5SQCY4l``9jQVm
z1I0LoF`W_om9#`U8kryeUVyr6g~&6x*y!$afTQTfGDqMm9v%+L@QY6T0GlN6Nc?ZC
zes)T1h2g<5MOhb~F-6vrNflzhp82?cD124~>O*BhDb@Je9H*5A32`h95G{|L=BK73
znhud-6dit`TZdp{v2jjA2|J5Y{l?tR9c@6N*@TD$b-oS*8pn<G4v;!B(yMxaJb&d9
zu?dwI#lb)Qt(gBGU0tT^V<k#|^40B@#MU~zx(%f(tHK&JujzebzwZ%C+d|XVs>Wbs
zBs0Fp>1kDSxF9_f%sRGcB$@&h#fNM$YXH{uZmH>ZELFB+d2GHO`8%fqbFs)ogg1##
zjGZSuUIx;^VvQA?jCvQUnyW7L+^<J1Cm#cm>P?|Jc;h&l_tFq3u;FhruWolz;i7yX
zZjS)L%p~&yN4LWdYU>lkUKFw*@}Jy{s*mHsm==JDk)&QBw^|ZBmRENnTjI3ieBwJp
zAgE4TBh~4G#l@e1MQsNM`ME*o>`JFtQ4&O~IaD;nIeBrE{~&NHvi-x*hsd7dvep<W
zf;(TV(XP`Ii)~brkG)8Nj<NL`I~&Z<m<0BssbgEFs)|IHBm(@!18NbNw6j_w6HpSv
zxOoj?4p5aOT(rau9)~(Iw&v?WLgxl$fd}FYhyG_)asm8cdpspleNB|<jjC;;Q?MVU
zxhDhuo-aapP~u1w-P>yuz{9yZgmc}*I1Gz}evZQZu{<kjvf!d7w%wslT`XYDrKpG&
zG#L)Xx+2ka`hGuRLHBdzDX?0&A(Yp`3xO6LV+Z0g>C^0$)5y;|c5TV30%;;@57E!7
zO*Im*$fhHrlW^pH>dlB)C^G@Ki&ClhrMUyM!SzR!QvO6MrW<A%53Xq#LwnV6H5Qcy
zj)~l{Y>gz)YH`Q4U1BNLRU6WwrNQyU+w}fuZCE+t4eX2bt&O%KawI{Xe1k}FgX#c#
z-dx4T*}DyGfRPV#KZbG#?y6=fN^1c6?2wcQ4L&DgtJBEoaTs}a85LlBAURW~Id4u0
z@O8y}_*XkbiME~&=hWhD)Paf674^vexrGUp@Es*m5Ch~m#ynLPPEv^Q$j4e%nio&F
z*0G(V!b~O)`yybg8^v%l9*6RjcrtMX4|d}<5IfWxYg30>{D66zpneTZ{Hb99qeHhO
zXyR>?0gV%;0TU6>BLJvgsdNi9UX5cQLe0KNBcdOI$i)E|IU_G+k}K|ru!2oPpooL<
zQ?=ORVRI4pS1?W?x>!Q79_xYt7hozH(Z?_EhdV3<I>{XF(<xt47uX-4!EqWFOd~-V
zPvoJKFnD*QfqpfRCr21omJ+G#P}4S^5p~;xn8r9o&+KygyumrRs<Rho4v{^T1)q)t
zq%`+aqkv|#c9(8I^HOCK+wRmUK--#v<h2IFaX4QfQlbJ~^ZZ01q7Y1DbDDO?0HPjw
z#S;Od^vx&P)P4A13|r?yAcN5L-X|t0G)7K*MUag6cNn&o7@Za)x8f_f2|u81h+i2s
zy%OxW#lU*+BR2q&tf?CC>Fh9<PEjr+H)qv6ifaT7spLEz%$@a_1)8X8$XFM?IS?ug
z6^k7c%WGSyvD4$Zx)aEeOjQD(?pS~$5WN>fg2-zU^A`}NG#&&Mr74trOXKEnT`J#b
zZg?@r1=g(<`<wxQs|Tt|K~s~+W((7>*CJQ6u@{XZl{7Op%F9EgWYrJjQeZ1`U%ROl
z3^k(`+~!2&r<1@H=|?O8!+Op*gOdvtGQkJorl+xxGy%%3Vgfs_o(}9$-I2Jxd?j%5
zL*H$$m;eZO!FqbCYqlG=R5V5U%isbpy1xaGg1V7V5xr@cXS=G1@3%4ws7=SYic%`g
z?P#yuc1?;ab0s%?VtEwR6|B{~4+i3ps3!zap@7y*I>JU&0z6V$5Tep{+6V>{Rno5=
zsZY8v9El@q*PM@%t*2X;AfnNu<V3}%zF3{i1=I$Kz}btT2~?%0!5NdYTbqf(t!$(?
z)>`pY5iH(8RM2{vO~`-B_ITH=ng*#*>Vi8pW=IS9T4R$apDoZy4cIS54H!DpoXJ}d
zIp!4ef(3o36->DS2!iKXKzCmxU`32>!E56c)pIw>*w$71FoM#Ufm5gx+@a3yL+-eK
zdbG}&Y7$kObKaj%15b1L|Mh|;ajba%Y2Yhd-JpQ;J&v=}SDhx%KILNIL$_QkBEW<I
zL~o+Oh*yFO=xQN$%W(zaVRcfesABDOXfz{?99V&$80Rr`6dsM9BXs#$FG#F2VvgtE
zsxDL}<%lyHgMfn?d8g>nu^mFlN1~-c{}c2fcO>I_;tz)D7Q&@zF3Mx>Pk-?j1h6Q=
z>Nr=PKqQ3YjSc@Oe7+oXGCWL-<K4Ka2tucj)-(u*C;k+!QvfN(2j>n~fiOA6p^4Z8
zPhHpsfOgGcwhcn(MM|dLuCkssO)1bEeW)p0saTzn!C_oSR*gWnK@TH~1X|>ij`58`
zetf$K4vRGszqK=6BG(W_MAZ$;$}p+8v*|DnD!zBUF@Vl>D8;9Zv||#WwF$rgBC!i*
zTSy??K%|fMU{FJ2;T#?VGnqGvD|Yy(Ml{W|Xwah4@z0&&dyn)So}QGlG7mk(h!s^7
zHjZJ=za2@$^i)Bpi;>`6Q$;9_?PrQBtv@Ius(GOpHGT5}vht#sOx=C3NCk3Uu`;RV
zxrk<wb7?(;zG%l{NsE*!4nWi@)$bNJATP*pK?-0i@N0?BW()%ri=3T=CL7llf2xlj
z{%n=H+QX!tCKV9E+j<T~-6ikyg`92`!uZ`K#o-HwL6rh=LmkO%{6IP=*!FxV{vq~t
zRWwFQqn+wQqByY#_cZAA#Nv@d^wa~2m!20HS%*<fZ)VQ3dxypbKTQWeIGOg27`%z2
zyZt^%)YZl>8RUndQzpPaM~-%M7E0svxfnIhgQRUWCSxTKiTV0*H+&1|c|RDzA{3sh
z&kP7t<g^4(sxAbGI7x{l!?i#YjbmFS<g<h!nwwcq6l$sJIdb{f))%@el_5L}5)6PQ
zgb~e*3sy2L-XEA$h^^*@usQazMmKO+nZp!^ZbYK(sw)Fbzjzq)$f|E(h7JRFA{Rf}
zZJ;z1KjN1=99!O#Lgs!gfFl&wjv;}CMj~D`7LG=&=fenLF=)H{r1YY?s48QfFLd_0
z_=Hi>cACJkgW)r(@+=VMwrzr5hEx_Rj2_PlqriyAcY$~tfMqmuK8c>940TTsVzVYq
zI-aA_(X=lXaEpXZ2e+pFd%Oa=Y0aJtbVHCPGE*8#7n1`P;sU+Kj&`f9N!bFd7st5p
z+Hq@*G2r`@<03QetWZ%7&iG2FVcwdhifIwKV}B6bHEGbVYK`ur!_-i-R@>~TWx6*6
zkx~nke%(dGg=wjDHRhS!=6fED|2T{w^<F-bC{2?l?F_v=grV2pRhKZ7HcK!w7!hPV
zcH6NdAfcx=%`xJ6#v8KaBL`KgR;h>f$*-qZ)f0AFxg1ecNtWkHf>sIH5BA2bz!497
z2X-9*D3&e}6HlL7xw>f;x3k85dvLmS5{0t)7)|Z%DegiCKJNM%yb13c%cWbqqp*0-
z?FfOs+t^trEne|a;&jVCvYC<BvLhqnZF^Oc7l*>Qk$;%dYo-#h(i1O|!71cJ1Btkw
z9~7z<Oo-c`MQL~jtD;RGwI^7-y`V3OCA{E7)j@oUh>ZlAIEN6q(cx8Lnd&AX3w3Oe
z2#v62URN45YgU;zX^dwnj&KzG4cIOkMWe1WEUKn1NH8o0qZ1-PHi?hKu}{d==mY5R
zhOUZChu*MeGw~otF`H(_mC><)Ji8MZ0ZY)Ee{HIuh&v1yhlrUGELw5LvY_3hp6!98
z)|LntfQJi}4@`v%tyJ8?j=(e6o0H@Z$RikIP1)*!3|rT9x2WB!WD6!U69o&V9A(p9
zN)g?YCSKGjQ^UfzVjjM*3XvASA1?lC%a}rdh%LNIHFAKth8qsOD19OiO@>6DBvkt>
zBYO<zG*}Ff>5^ke!-(8;ColpCI8Wsy4d7dqbO}LZ_0y0Oa#5TZ&nhCpMclb+N+3@1
zgE|bP1*kDqy~PHf?LvzxD}Wl3I=iUVvF@vn=t#vqgaCbDakpn$P&<$w=6pGP$t{-4
zg4V{?gA(Z=R)HxzHWH5b?M(pp>PYUq5m~Ja08g%JESW)Y8uui0)w~#!(^nA&B=xf@
zA3Zct0g)9s$aYgAF7<wT+6u|f2N694e<x5EmSZYsK5vy=yWnDhNs4E0rH34aYH{g*
zjzi=6I3Li2xH#1~LDjx#5j!QilxabE!Wl=JC~42Ym1lh+-!U1!Z<imOO!IaqOJxVn
z%k&RxWHWIO9^5CeoAoq-I=PBQXp0p)Vtq)`>6xx$7Ai#bv>M)%$GMX`sg(~^cHjo4
z5Y2>}d{M(Q<U+3LwQ#;g?3w2iT>;@@o&f=7vX2?z$kWV7BbX6v3!=~std^<(Gv*%8
zIej3&9gPb7B6iVm@Y80aIVM!$^2Odq1CJF#uiK4tXgKFZYbnG2F^`Q^BjunGE1D+`
zdiZ#3mq2nm44q({%l%QOI?_~~nn@ET9ST&_>}i@Geal176TT3)k&&I|Z%9C?&09f*
zwu{z%Rwq}`1ypJBB1^Mxli0D%r9~B)M)eUAcH3tk)bc*?PR48oZPMmZUQE?8#=ah!
zBBaUh)3m?=GQ{Bu42Gap6O7X;$|A1ix&^LIkkh(C1!R3AcvIeNQp6b#?hyL?*@F-c
z&8|EUSv#w=Fx9oT3MEg^EAcOgYitctF!)^702tv~@t`@cLcGTL)Xpo&7oDM1SrW6{
z0PLD9p?Y{YxdgXBYhaLJxZj1M-1c<(0hWf$AXbC${BgoZLceEyCnsVjz74@{$ipMN
z<$S9{Vi6hhbh|@I3M^a1>h!_fl!6(ML^%hDn*10GVDAU36R$lDkmkXZIu<5s0fq+w
zJYFDZu!R|@S1YlNcZmqvUySB;?_&ENKCd&RyEP*PbhE=#VHj1bk9PDN#IgY|ES5>6
zO^(BHI7~@)Fzd+|NJx653o1#6au^IA8>VPl-r`H8U1}1Q5+Vc5-${?2dzly9nemU<
z%IGO&H@_IN7&nUKX}cI*5M>Pir*hO=lOLTAG8a))n!5cU=LG&aA^teUiA8o)x6C7h
z>$)GzfHpW!)LwCul7@Vh2WoLIRE8XRBmX+`cCa>KFF7RIw1y<AQ#U3ta}afTP%WH?
zzokY{SJ`iMg3=)ri9d=M+>+zz3}3e0$>`KD48-Ad@y`tbyK<{C=o;~a(5Y3N;3niv
zyMu!jT}mB$$mmFVB3Yz%s4e|B5aBamECOT%ia6i9=^`Z_vWH6~qFyD4B1#kT8EA6U
z*xPwh%Z<5_=}(HEiuQ`|)d(@vxesF@&rfmGI)~Y?FkcosDU#@}QzX8(T3Lz@urer|
z5riBYh*@=s7U;>S-_v8-v%5Z+SX$#WipMlz&&DFGN%0UwyM?7-mJ3@>8ggDJVR7*$
z$w!nJYgoVnZ>l{9TlvA=lJp5a<%R}1;va%4xB4E0aO;0%3oOUNY_yNJ1;bEWea4EQ
zDyj3#3#S5k6zSEAl;`M+P%Y_)?kt>4$MPS@I`@@eq|?>liSp_;Phw9+0C$^?SlZkk
zid#+JP0EYCl#4tA3hO$G6Z{PcH_}g5aT;~bnnw3nk!ml^C`6*_*wenM*rQI}pxdF&
zOh44t@BHrZAmoc4whjPJXsg`}&XT2*l8XT<3|7-RD01CTI>7OfeJrgnbaT{)M4Q{_
zwYcjM4fnH_*=4;UZQED?QiPf`FyvZ{;)|6S=Po;X8Wnt>WDrQaF_>C-??r7%mP@^M
zDMv-%J=;P`FeB2$xF*B#Voj|UKxE6UtC)=^e2SgKuWlXKf&l4ZNu~HMS{EmBjt|x)
zKra@1SkFL(Gi@*luEzZ-5>{ry)I7)(>SfCWY4P;5&L#j``Z{?^_n4Yrij3R+h_Wn8
zORKefYwE{t980QIXmUL&C~#AulxEgG@nsU=%`Oo}D^DIwT(iXnff{T_yc8YgO6sKL
zk&yQ4CJ3KQvvfAbF3OUYi5NS_RaL@Z)5xs2p<R^tIc_Ke>Lbdvhn`5Mi{z5KiV^x+
z85C0oC9el)w(irF0I!oK{?K=oDxh(K=mK%g4mPxwmux6=;EQBbBh2RZycgj!2buJT
zqCT1iGtmX_wcO-mB&L4%NFo=FZLCTee#%@3?AqMwC@kE%?-3qbTW3HbOI)L#Vc@@T
zocYFr%SIN)vx;PG#|~51Pj$sBdh$)kLoi6fwSaAWY@5(p14hH|PtA-ZPcJ-)*&kC(
zfU$&%5#C<ZC$xgbHqLr(gbekqQB#+m2ZZy!w`CzK()%LYLzv$Zc?E=prXxV^)yu0>
zeIhkEw2rqZF5xaZi2X>?TmVMF9{{AJd_h5p<$?y+YY~2?(ASBQuH>aj&<}C;kTOq3
z^FV<}yU^o_P^2^=V>#rgi!=`-t*0^oZt>_yk=vQfj78)@eG|aX+O<({SB>?bGujpl
zuL7WZ*O*SINeL|mjQi+j_Qq;f^&I&o>f3v!HJPKj5MA8ODc-I6!YFJz(>UN|3$6j#
zahKanQh(CSC4!t;+EKs6+Eywe-GF`SPZM3O7NiHwSCdafccUypZ=6zljMVbX7K5O>
zx2cQA{<Kt5oEnFE+2sGjbrP-+4~owtAYxPw6bAvNk&4sLV6Rur1tX|*_Z$$|r*N7F
zJLCSYlp8IIkj%JT^e6E07h)<6{Q!Y;^3mKGCu8nv7^5DNEtiM?hWgRS0Q3z*%}wi;
zPO9MHs<~c+QJdkV5a6yL7;}+(puO=d^5{#$kTU$xzyzUI>9P0RmKGo5w7NCdu;}O}
zWdkofl(JK4m8<d956(&;N);2~X({WT%yDSNMPM(AR8i12D-b2bk3C*!5<S~9F3{N;
z^T8#t^}{m)d2Pp1o$9z+oD$SlvVsJx4ekjmUtKToI2Obq3!HPaX(0L(4_i^L)Fx|$
zAWg&@z21F`MhRM7LecW+o?IfI=&}^Em2<iX0I4yAa=WnZpcOkLU`RbJN@sk9apv_W
zQnClTjg7VFk58J^s8sGM(<$^0v|pq_Fj^ify{{VSZrzO0JsFJfBLp^QQa%hfhK`o6
zK-_G~<0fz(5z-tUat*_EI5SLqLb15}ux43r=(b5VH2g%SRo4M>m(}5qjgWWUh}gq<
zB{NV9+@9!6!KNox@$268=!kGDP|!KH=7q>p!sdwt)E7wqphK@jb)seWSnk^*Rb5IQ
zN%L<H-4Vf7ZzSS~8cc)asR;B@^NmRsXV<O-r1VPBqo5b7_l7Pr>P4PKU+hqJi>%Bn
z))4_NrFKp{E*p&ik1NLAYMJD%7y?G%?l0T|%cL;1uXK7=tue3UDoAFgpP;-~jO>q#
zk)ToJBXNtf8rn-S2Jy?X>52>cXHiTZ<3f>~2z3i)G2kRVh!;X;u`Ai67M3Ozf``ow
zei#tO=^$LwJe4O+%~t@ClLkO_h1!~>*=Yb4_fQ+;;r*^8I8iqp^Ne<OwY<+1>l>^_
zl|c&V+p1a`Dc!O``{B(Q?;Tg))oPj=Agin;KJJQXaafm|`N3&9>?u^P)pkyZ?+b3(
zs`?j%?PHgg>666J1%Gq*g@IMR?d;<`9vktV2WScv>QM1*&x6o(oeMeICs<)+0ENi{
zsTn=OE$5MAPa135ahz_pQ(jF0rIPdjFMz=jp48|-v(&OAz)M7yDqxlLXe;=-b3yIK
z#i%BZBKl{=?GQR<+9s5XRPT|U^pbYu_(4ozpJK_gWIutwJ7uHRmA8r1&rNtoTI52c
z7XC*YHCfu#>rq3{vBb4<+`9+a@$_~m_}!_1KwDPM6gAo@+lZV@N?F3*>N-d9w_O)7
zSV>r^5o6&YaNDN$KnXi8rX?U7r=@H`vUS@XOsfB>9`sxyg;){@E)~b_Q8uh4u>7ux
zo?yJ*((+Z&&O(3~4%G$Pl0?l1Dkcl!@-)uAq)ZR53Yllcac0yZvKVRKC|MFF#S)Ek
zG$)_PxhP$YH6L&F7=DP^%`tBV1RV%~3f;1feiV|cnxn8JYg-W1W0z9~T7Iycc`cQf
z1+FK6yu%t%WJ5d4f&Q?M*+K*OcBFy*_DPW3{Emo9GG<x3&RpW+3WjM8_>-wQ1LCeq
zUyrMveP0#?$01lw6nTeGge0O+*Op>daw$vOCkv1PDtZ^dr?FqpWv>;x&(iBj)OKau
z7!y29GZh(;9CV<6D~%tCE*9sq0NAwZTDCZDD(*CI$ww0qK*}CfrVbI~r_o{PAw+Q7
z7b<udDX352Bt?)g`tf?U1m`tA8rI@OU1{#Z#Yk3w;ZT<pw;E;7fGCm!S{#kLH5ThI
zYB?Rv&}D`Zcb$f5TA!NhQbdOo)lCp6N4|h9H9*jO7!sVu+aDP3q=k{_&`1B*OO>h}
zVv@r-*7Sx(xYZ0%q*PxrSx9T86x93oTe)TFR0?R4g$1P68v0Wl;PlBZ0vV#g1|H#T
zAgi$x>1_`x(fl}VYzWP79E&c|Wa)VKklJBKpaDTc=R<}xdszSAD3TJqD3%a(BIAkN
zwYdEqkJHE{$SzJ;AcPs%Rgomx4;X3(_xTDf$EJm$@6@Gn3WV}8q%aKcG8V%<K1~4d
zUUh(KOGZh|jYeB*VU$>Y=e}$+((7U$s^6V%k`7bz^=CS)=S8O+-a;{JaPoWA>9>-6
zM8D^a$ai!NhM!R>n>*j5a?o1xE&g3hyC<QnEkmYwy?;6_|M8-c90~2xfn`o9=}~JU
z7I8d$ml12b7#%fq;*>j0&&4E6-OX?lSMR|PhLZhUn8Cy;Rc}3#yx7SJ30IeJ<>nbc
z|D|3S0i7JS=V~4o`rHBv(2!C~6Yl#C?!r!Eni#=5tT77SJkoc7ATSolM-(q~NyM(%
zsyI;i&BDybvDER1WPODJ(&P()JBX%J7b{Og7qPLcZu%`?GWAv{sAjhfqHe$N^T6t=
zYmOGR%Q7oH(Va5|k2LDxM?-yf&K1O25t6lt)mzlS$*Vuc_AhHp8g(@mS9ezx=SLGR
zG=U$m15Sl*A{}$S)P)TYf@gXqWME<EJGzfcxtBP|N{I4LNEsx65X#=iY3(**DB~3I
z5?`gG-;~^kd^+|DG7@&388jD!T8e;!XDrXCVqNAGtr_h79EVuME&=6{;MqjHB$P#>
ze;Pts;540&=EM=nTd}q{GTKHy=DOrx#0*fGjQCKOR1aTFPNnyi3cb2h*w5vTn3x=T
z3KX?})K=T_JOP|qm|qaLey*JS$ipHXEm_VScH~&xS3K(WiEHJE(?TyA1!|&%VqINo
z=A~TmT{QeR0UTvG_dnzJYxfd|Z&CeiB5tpd(x{L??ymq%sA*(93_WY%04B2500Jlv
zld_?8-rnjqNK68pS=s`Ods@uSdY+5Q2PkS6U%{r01q6JvkRYRw(3XG{^!IXQsu9`l
zI=SOmDTV;3oOUY-qQz3+iI**d&XfN51q2dV`C(<CQ!Fz|;5HSJ;iZm?NlGLEvn+G0
z!BEI5S%rR|5l;9<EU7rYhn7h%A`abO!Jtvg{X{uhZ*`Kzo(muVhV#MkZ)96dXR@>>
zS7~3$I<u0bd?gD`L)g9w2VxJqeFIuX#^gof;Io}1SMrU>-OqiLGLc?gG-&Ln`g-b4
z!JxksL24je57UDH8IFzq0?xb}Er-_kNEVYFxU%U<qQQM!d7X4@tEv4X-7_W$MH)+s
zCW+f?1I@YIo=^7A1waGfs3zr6skPOeJr0y~9Qh?#{MbAtb09e-uR^HOU&41xl7=U2
z2Lr9ZM*4_T4}a@+pqikWXRNa7BNqCZ3lHj_e1RkCpjo7wAU3XLJOLUD9DxyQT4n~3
z>nS^9#n%lT0d0FOqiMJ@2GmCi<1X`vo11n=k0caTUE81cu)G)bYd0At+r;bCv`Ldk
z@ERNc=9Du64`Q6ciM_T$wM1#?R<^6?^+T140<flfCiA2PqEDyqSWN=4(Y_dxUVAS1
z8tg#?Z{+2^Ql-hOp-6R~0Qt>y;a)Weq&{6x4EEr%523S!78Pn2tMY}m$^@tl+I3R8
zXO=idRfj1XN4D^3#2l5R`(CN})`gJKBN3P+O);V4U9!SwnROZF&<fffjHEBR49sM~
z?ct8F<kquc7}t--_6h((_XB_}jkQJ55R@Pvy=|}3jzo(7HFEd9f$nGmp3?>c_2$79
z*FJA;;DYVtZf}A3>#7nKunm!@;cr4-nQl-xx>#U|ju!du-m30!%t$?%>AF=zKvNn<
zAD_n2McGJhrvtP$iQZ;Rp%#q0rDfU;bnNt?g#5f*;H9yvF)U9YuUJEi*57b)DGxS^
zai2d_<1kE|Y8}xgwJ&&g<bEPAUjnw0U`(6aUF_>9b!@~IRkV$-Y3!A{Cc_7I<J%HN
zT}Hk)R@w9kizE1g86%8fE)gkLb#o9i#0^G`q|-8;rO|8|nP&eO`hmxVcofpN+5WKz
zge)W2fsO5JS+bpCb)M)GRx46WFkq(_%{HKa#%C-0DkYAry9ks1!GnYWfhhrn9kn{+
z2mslD4E-LVt0PuMh}V$bvSatHIAr;>r>m-bRk31}=zTQ9+bV;T$9+h>4(?T5Mrrh8
z1VxR{N>Xr@F^vVRBBktO0}>?(7I;pFt%~5^D6uCq)DJ05Zp$Hg0<A<(mIK1Vvqp3R
zP1+hZYofc8-A@~r%G*eoO1kU0i48(+#HlMv5~jG+m=BgH1E`DH$3Qa$?SsXToN~m<
z)6Y1blO>lizuo#OF!-9RTjC*RX>MlWeYqzyF817^T};sPw1fzLIj720+_r^sKx?5H
z4qDPeB%<7u_6#(#IYVpMRHr0$pOMb9_B@6pair}8)4>F0$jz@w0}~j~v|t2{SI;|n
zz{R_U);>hoy=RXbXPxG)D9F+qY<Z2tOMh?%jMfG7fhl@@t!0gqQ3F&mF2`$O0Ehir
zo`p#}FDhtI?b0;q=sO7dfl62sy+&xC3+Bgxp(|Sx)10&tc(OgGPEi)vYXYOj$mfg_
z#sOs)y~(J&R&M4=K58b-B#w7cTJwcLDgF9WBB0N>5vl^gC2c{<P9(gWOmIkwPoIxz
zE0<Y-#(I+h439uE0<lZ@Uxd~4XhVf%;cAA<Tayb0BG!ULs(Xy(zo$E^;DIT^1&xq)
z#^Fq~$qd%S*r=(cIdalVym&D1(avOP3NO}Yv=dHaCn4@7gN#n?6h__0UdIEbOkP#Z
zC{0Z{k>^`I$)2x_W9cIt_EnzfIoSrM_ciE~tB)F#dVfhx(l0Ih$N~rQZkC_&O4Tzw
z;^LH;4CX<oaKwz82`0iBM%hKgI^B!~XJn&=94YN#MLOn1Wz%0)S9)1F(DM^*h4!1z
zdNj`a4w*nvV`^Q<zR$Ke%w&C*BLdVdKEsVt06`RK?yzY96Qb(zm4;`Rk^yw{a!`zK
zwb4lmJY2(*xd`&j_5pJD`Zje|r)f%R+-Dy=%Y9YgKP$)`d8y{eosOSYBto};Lvb=`
zsY^8{0qED55I($6Xs2ZTJwyb<Y$y`6s$Gx=NnJP9Vaj-hh!;SfcA>`Y>@PHjdtSa7
z3`m%R)L{$N$Xu$`XP8!>i&e;wUgMSq7U=#iwPZgIEwWUXDo4cqv^y15-gd>$(~ZbD
zrJDV?Q07Sjf5n3bwd-R$Lhsf};9Q@oPEf9?mh++Iym~^BtQ_OPb|jREVht0<N>UcZ
zt^?(Mne!xJ8DRfab)Ts22Ziod9x$Wj`kCOUBY;!fp~b==cW*b*`dgjI11)ntkUt99
z4YOw9I53l5I)xG0^A_2q-e;B-4e2#g>Hz1Y<b!+1#n3ZrR-y<QnXl3u(AHH9{nBC5
zYB)yENHSSq-upHNN5SMwZ<}?V-o$5WG@sE(d{DQ(BFV74*XdlUm%`c4pKwZb5MZ^d
zUg=o*snrT{YNKBR^PN_*C4#O=8OZ#-r}9jHa^W+O@bUbF?uJv@_<qUG=TxV1AQJSd
zUX%nHd#l9|&v((I5QdX1FXYBu<|S$-L98V$a7x#wv=tuFvGUo7aKRdWfZ>uV)7^)6
zs!R3M$CR77e(gZIY09jXwC}MN7x|440Vp>2WqpDShXM?w1wjX(TG$yX!tuGQxe2CX
zmMhqeY_L}m(olO1WYKOTfDU*S#4N(~)Hy({wT84T+&))(!bTsXqJ1I&0;q`XIuIsr
z!f#@i)O1HXgW!E<fK9bPE_ZA7(rI)`IztrECGkriQI;%-h7!i^K2r_+!$}a}R!J)%
zfaadT(cf1n{VNB%EWpjg;&Br1(F7hZjW*4nqP8u*S<k2=rVYC-L&attfVeP4v{)a>
zE+EffNG|;L<ODS&zKvr4tPAIe8IuGa)A7P_Ir0sy$?<>TriS&MT77aUV@u7O@&nY2
z`_D#N(uPnB(bQN3r(W{01{9=k?rF;)*@Kf}wEg{uH&wYNcFw~cAcimk!=QigC@d8^
zqS-dEVvDudQM<6ys>D&q_oTHTcJdsWOHVO5_XrMoQpjmYQnPzfDHo&*RbRBoEPV~;
zS+WS=fDbiJ4v9jk%SbPV3zAv7H}HuN;Lg6r!O-xEaY`$VeHS}?mt${TzDpv8+zcb7
zS|@f5Braj6Vq3e7lcXjb2k40t)%_!pAdewng}!ZdX*eEiX8|hC#!1um?yGJfNIAz7
zkkn}Xcp|55>n08QeP!Z7vCP9sVufDUAW4EqfI-{2n=0c8n2n2$gu2_wIc`w4)IZA7
zrw8U_0fJqDcpn%3xrZc8*TFN2@uVjP73XpT$4u%XT)}U3eJ>|+D<+{o`VRI}a9`X2
zywN+h-xm^PCq_i-RWl`7X!m2$zCp3}_F&asqS_a0u}ZqcYBRCWT+&70zMW2h!JB4;
zk|W<bOR;tp(gth|9>w6^aG&sy?^pa$5^0@IUAR!59`N<DdW>-mhNeu!&9lJ2Oe}Y<
zGkQqL<f(MpkeD0-2qih%K_~i(LQ0<DNhZBSu_#ctkZ><YK^5VFhCL!!XoTUJx`9*B
z?mE}dO%AC}7twOb)(nCac14i;p+W?CSV38JhGy%SM&{70DcWJpIQt~ukqCnf6Y4%J
zkUZ?Piz}T6rF|L7bQ3Ne!TTLgrEY`!jmaKK0G3gL6fcy5O*gws{@bw*&+i>j1#iO)
zANq2JGg4Hj3hdG?-F2bh5?B)=qF3y@B3F#QTpGIVenIrGB&}~G-M4LmhXd8LR1O1Q
z1sJN-C3}V)!GqQ(Rmc)y7i!6Foea5OA9k2DXjJ?h_E5u;W&>qDlXZ5RLNl&WJ037#
zk#^t|Q2)XS21k1XqhWuWM0fzEaE*!Eg0{?%o{hp02&P?^T?%LNrHF`GtpXIgewYJD
zTVrnn$8k9X#3hF_H8=KSvkSl+Q)Cm}l_l3jp{mEHNmbhN;8-ZbEvG`}B4`F<rTkb~
zNOZD(#?(Yog^cWDi4_f0x8iB8@&u&vT=rOz=w3MMicr&CW=3qPqAAf08)@&#Bfef%
zjZO<}XoA_`OzUpOc1%koY+5xxwkvUFuaie?Z8hKvv{R$T`#9>7rxB-R2i7sB^wGgI
zsCm9CFsIdyqr|fcIt!#rulo6<V&8<5$=6R`Z3D_>5G#UaK8C<q&>eiNA`t{y6Dy#T
z!?614pc;p7gbFE1H1QVr$V{RydLK(?JMNHl&K8Y8t4L036T0k<;5vXGOW_<oTGq2B
zj2p-Vv&W8BteUw-9z%1js~psWqE_a)L_{fHwOk`%oIPFiZN_=rlEOhdFB_|Wnl&)!
zl&K9fQ1SQj0MFBQeh0f@-TemGRnk@Q5KCKv3q$_l4?U8J$qqXJ%&T3Ni6s4ov}@;5
z<&+V}vOYF=WRF_~L9en9&j3OlOVf?6f_C~I$SKxL6oivxoNFdrrKPci8J8{rH;2T9
z6(ZCH5L8FK3SCkSRe+#ivt&t<=zF_Oe4^}?GEJOb+(osr5XVwGhpDa0F?I@BOg-D`
zy|W|J){Y)kJ-UTeFmO+Fy5q6Ls~{)2$W!s_RU~f99VyRN$6qO;CZMau&@PxjlZUHP
z4ZxP|G|3M^86tzl`E#XMD{Q<IVz9lc2VzzAb)=rf<!@m&=eB!%PTy$8n!$-upD6v@
z(<PZyV~D<J+Hu-aJ~bqcp%YGWn52TCl2mH)<A7r|hNb(OWsPGqq9AeqGyqY%mdJ~P
z1V#~r)q`m;aeFG3Q)ri^mn(-5`klj_J%mG~Wb%ycc-jhQQ0Iqq0PysbLMwAU%>tWL
z`*)<FV5v@CPn?5|NP_!+x*{tg3?hNi4-1C~G<o5aG;Yr6@yO^qc+t#ZPd<*RsH?9A
zG?CNti?!oXFs)%)lI=+~U@)`{Y=vjHb)OGq0LA+5u^Z4&M6PY-TSpJdSAP&Q56xpG
zmIZ#b=poX8QZ7hkD|`UNd*>|hQpTpb+4Ra&T?_!(HlKmeFS~-cV;3wn*+VaE7lQZc
z#;qgO>0&TP%|}NDx{Zx5JH|X)(uq{UO;t;kjT#ZWST}ay27ZCCj1b=p&BDITVlD~D
z@zUa)aAQ^VGNdUh^Q(1N55}cjLmmJG7KP`@j%fi)96hc8!9R@MnoFL)M&LIdmL3`e
z0(Dp-0TWzdAP}^i<`8M#YH1|S)~E=P2}>{Fn<(Ab37B?AfRZy>$2m!B)c!Fzg;<5E
zg3@tI6q3DI^7Ke93Tc|7Q%jbd-dbaDV9RRQO$74y)T<-CXK7I+(kyd1EpkmJnhqQ2
z4B9v*8W2vlz6y73L{iOLp$lVgc_306XCR7tJUCMXLx?89Yiq>F`xStnwbVIavD;Pm
zXJ}J#R7alQ?hD1vQnS_>P*WkoXb2nLGRQD5$~2smC73sdT3$HtS%_+$*}C??wvx{_
zL?I95`fiEbCwvD4RHq1sM5&cLal~JYm(O^;Zrqud;Z{bMSArafRk+3j+`l|km~FOQ
zT#@){Y$R$pYdU#=++RG#Sm5bFZ7xaoxev`aO=IgU(?hrAn@R?KKrB0>l`(EhyG3TE
zb0GdZEi?-+BRo`eA|WDtrQ0wu>=yGJT^8vZp3=5`EnH%=VE3tXZ|VA;bzzLiNH-9u
z&~$nv7&DsX7dJ5$+P*(yImEJ-z63eG6V}mcYYX+*hY36xiFkKlKw%%7(TymO2Hc{;
zS<YKZhK+5K`b9+O2VJn4BPWAl@N>1{ZfCo$sT~TXF5U_3ie**Z?~MzEp40L$VnA=!
z2(ll;KcrV(uPlJDt5WN4%6H6%bvy#X6$Xf9F8=b+d?-oTshTmDcdMC1|MD<i5#s^%
z6Cg+Q{jnf-5s9K}3UmxkYnl$^6)e3%o~sZ>RkA?0xS3u!$<}JiKTyb0{6mX|EQX4|
zJ=#pkQufgYWs7P9XV%Oa(#UiMG&m7`9?mHt1eqF_3+*&YL^t=*I}?}zh3@0RAb@2$
zR}~0Juv$2d$i+dBNul#nP2{*+qKvVhF60R~@<>lx>&rS7`wTsq^BR}}lV({-7l1Jy
z3Lpfi<P-fHHM!V$I*pjmd14Tm!03A$l#XSV;92Cr@sS=HV}|yqa4>pQM$J7}sUE17
z=+w08If2UPCfkm=BpK%wjez=coX6_qf`KZgmrVC5h-hWjD|$&>_j0SQa5D~b3rm(+
zrZk7dR8eFA77>Y$KqEpvZbq_5Jgr1Hf`)}=$E59eK`(}Jq-+FXNXwYAPn`M#R?r8X
z79txf?V?=VO4K-ZG;8m1)k5!D=0uwhC|Z8-RF6ape*+fQfJClPN%pDAt;mI06m%5S
zmKy0i&<NQc2z^7HjzjZqmv+bPYsT-yW8R+!R={Em$8vO!>txg*BwoeX!{9s-tE_65
zTuPp{(!LMq)Nzvd#uL&SW@vn$R}3slREZ_ajMF0*y3qYLBum3upbd<j?IaNyDmzGs
z)5n0~Ls^7VGMd)Po)M^=kGe1o*-9&wr|mFZ8DT-Gi=pvjz~d<iP9h?w^wyA%TXj~A
zDu`)^iSMW+3#4&?vA96f^)4EyB2_$qC49g)Srj?M5EjRo|I^GfBm1>&(t^xwu>=8n
z9Z4;?TRcB;=)KsWstb>`i4oBuRvsOc>H;k?4N=;N-7otdAkMj0C(PFuoduk$Fd`ZR
z`Z%V=HuD8Q`v-?68RJVG#8H(Q6T$Xy7$wviG=*z!QVR!Pv0YXUh)(yf!x7Q!6txtK
zq{x6K@75;I07XE$zf%&|Z$<r#eB{0@Z|XUc`(FrDuBO>YN}nOv?oPWn5*hT3NR*~a
z34@ikKOZ=$Hg&LnUpC})0i2%^skVSQl)yt4EzdNN`h`eY!sKcZHbJji%&nq)AYr|X
zW#Xff^g{GH_Tx0#TozBD1<O$yD^8s}6KM%y$SZL2`}$-#{4va~-hIsHglAy!v^|P}
zhOpWJ8m#uLh*L4@U=cAZc4$ThG-Z{jyA+5-_i-JIRP`nyx=K)qKI)=c<M=T5dY(x_
zOXsa=+a#5dfy<b>9y#e0eVh?wGAskoLb^CtpxCMcVA^HjNsuI#1OdK!JnDtbDsg3A
zn@n~T#n7mA0*Y46SVRNhHK*t0bMD?{&nU9q3|nIb8(D_O30r597+$EGAfSB|A?%_1
zX-rGmuN43`AbS#(hbfFqHLM{<IyJVjyc`powY>y{YC<V6AU`hp(FMab6^)Ft49o0@
z;3=}6=%TvV!Ex&5$Oy{vqJ+=t2*y`#V%nUTSI`=KQUH0-YlhU;el9>6Y&aEnHH(En
z*C_j371hCl3MJmXZHJxIc9T#ql#~D#ttnDa+Fohgv6DRbBJ)_r7ce^9NajZBXo|Hx
zq!|Hz2QI7cUD-_nV2GYZ-Dl3*B}RWhK$ucsM+RdrSykOC+7?!a<=jZd{rqe0wrm_E
zC97y8v)=CjdS1!L(ScLE9f~_@-=5?Yo1i}mK7|2hVOW|do*75*b-N0#MRE^n$iakp
zB-{7G^JN;iqpTWXPw7SylRd`+;&n0VtLpv<Tm|6$Tv8rQ@(7Wb_Ec@PBHbBP4M-C0
z0gQ~{JeF!$Le*8%Fu-VZiDE$!0`_`-$cmZ92!jP5L{Z>ci$oY_mOb`pD`^JwxQz->
zJsGB{$5Tt$Y{SBE%KiFI<L$ABlJsfRX_NN02X!OKN_ilIX0f_BcBD-PXG^UYB168Q
zQYIR$)x>_V1a>!WV9qa0fKtL8ez9+rVv!XriF^cIEE9Bql~OiGsdwz4nFzvD@Cz7|
zhe!wvOsciO5I(&Su8nuic1vmT=2kvt_Ht_62$-rg?LN@ZhY#98BYOt{zyz@hAet7<
z4Qhbw0)?Uabv}BaFd(jNDH+iyQ;O51yqEnbhUts(xDmq9zYft1_G6B=Xm^TT*GbUJ
zazBk{dt6~f;J?<T<-+viv?v^~V?#qQb2hOR=W~=6RUbzz+L8>;rk2FgLFB5ahuXns
z+eq-BleAp|$ls!k^2{1kr=pz^?3S#I;8Z%5NTQ^JcgPKF-=}!aE6c<YQSusb8<$NC
z*sMocatsp7vL$7zCXoeP6ngUvw^Mx4^TeD-9kKXpKR56p!ghXYRY!r_n9bTn1%CSl
zc3#XxaubwFBsP<}LZtY+slDg|Wexe5!o`7iaiYcIUaA+Bv_z#2awJ0-7wIa^3pb56
z(;6>ud@S981K)<U#BtE;NGf1@k=OxE`(Cz5QbmJvm6*9Ly9s)7b!lYDrTK5DRR#uE
z!z8aXHTKBE7$a>Z32_)!SgZ<;oB$-{ZQCFpt!_Xcn!d?7-O_lHh})B}gNBFJL7ef!
ziqo>EP<@Loz``;#L|o)GGQ@31D5U4@=$C$Aabu_fdbKwV9?};%7&5WzsnXe9r6BZi
zHR@%oERQA$xeDk>&unZ>9srLF;~4H!ML2~a@uYpo5T-qLs>C9Izu=mv`ffKovX&QW
zY1SbFfuP|AJmn?!E7aY6R@&9XQUQo9qDTAXj%%ThMi9`VbkYeM;<y(PwWYjJ+FTk3
zz4zuhU=!4FYd&E`;z%3Cf)%FFQd_!kNCf7Ksb@mvR^6m2n6pL(DlUpsQTq$WE{cUR
zjO3WDZo#WD$g}N7r3$dF70u>+6OpR<QTk#bS`a{J`t<I>QnJx?thK&K`%JqH#f$6d
z7e`9Lwr^TBDHl&KkXc^p^WYwK@T0UcZuUqXxiTxS$!dqfQt6;=gL;MD*l6bJlWF!%
zahd*MUcA@}rYy@roleL0IIy}EQ(S`Tf=kM}ruC(I)nv3IZO}z17Zh)colqa_<B~;$
zCRqWn;dYf8Kl4HPAyNdpZnXjU#i0+2t7Q4GytqF#cD9;S@}t}_JXKmbnnA~jJ(e5E
zkvz@L945P%uv`|8MfOCj&K7j^-F%L)E|zW%ctC^5QBmHgq!3_kewc$BIfQ-awov4-
z+G8cvz1IMWjp|E2vk<ETbz4td&lX;k(_F|syB8=p3{%q4-0(~)S5@2#&_^fZL6IA|
z$gm*<Uh*4MnNLc*7SD4|xQ2m8@$IpF#MbVL%F?PS^u>foIbUpJs--UXBfbJ+=$=(Y
z39W|H1f^}hz(m4GsbF6UCGqCCR@{F)xvm8f;?SC6BE`d@CeMOyayVXmI^#5XL&Fzv
zqkqCRRQi8J!jmms2Fga_Z6Ja7v-7~DP;lK<<#Ut_bv2&x9&GhNNGhnt<FJk>UC5%4
z)ub_nQ6^J5!Bx5qlb8j!d7)a{3*zz~5Z0qCJwjx61R)%1$L}nIE|U!B4rtD)SAL@0
z>ER%lH&uX8TP2U5WM;qnM}Us0riUB^*o7lNN`FacGl;stY-3ey&t^cqO)`(Mq_m(2
zWgcO-lP=$IK|l=IOR}hK2>FvDp{~3gzJ$^gS&}_Q%VHd6lTeyOdF@ydW3_&`0ke2(
zfWNkBRg<dPo|+Fhg2taSae6V$v;6+E{A15O7lqze1O%f$Z$ha=&y{U}FeYM<-$)ma
zCULU+2yz7*N&~g)X(ZZ7LxodkGT^=_SCJ9SZadP3SLCX8Qd;Sx75^iF737Pf!E=MO
zJizWg8}spORRheP7724Ae*CD{b=)H3hKS_$x~AkR3%ECm+&citR+(1E5igI#eUUPZ
zQ};!>@HcNv)Gmx!oB5*GbYRD<sUa<TJ|0g}RVYB`Od;iTZx+iE|3uw^Sim@O-zUCR
zC+gB_fP!E)YDVOE-=k4a8V-$EjUDZ=2sTB#l-VUifUJz@5$t4S;Vx!+Wm%~*mo83x
z4@}7owq~f^{)P!kf-koMcxyh?aaKx}(T4eO2u+u;RJ%zd&5NjxhD8&|79eZt3*1f=
zuv}oofVw{*32q(cwH~xv#Mi3uL9~lIC5|>M>R)Oa;|I{UC_*vYglLYuG4{5*y66uH
z2aT3q-!ngGH`DO+I2ANBe#V#Fqj7K;r&|NHxu}$nNHdN5JT?_1@WH$f_l^$wvWY{g
zG1td(VMd&X)n(Y_!%U0V@>Wvn*?Jms+F6%W?SFC7oZpn8KsO)mmZ0UX$qbB!zKh-9
zcOnc9;h;-qFbQ|bw}_7|)1dkWp0P?MF0cMCPrPk}+t~EI-kir^X=&ZpLpJAo_yPrd
z8n=VXXi+~XYB6hip3<k*c5TNJWRm31+$WA%#HZ%m;OG|HK$5^vhAfcyW9NLNcHM$&
zvAU)vuFP>Pfb(1c$l7@N0ED+19Z*6p_#bmRL#Mj|?!uD?d@|I#s4~C4kcGmlM!7#?
z`wNplS=%P5LzNfAhj6FHe#DFFdK!nIZQyxQsV@nEoXY|Rz-+nzn2BAdAwUw+I}WTN
zSZxAib(2Po`*D~BUFECyq|RyDa^h3Thzm4kf(l=<6?qg%6h*mq1*F59+CS1*X5~S~
z(0YL<bm%%^R@MtMv8e%v(xwXjLWS^Qr#*h7?8K86MY6T{>2W3xvO&^wq&H4l)o<iG
zO1(0vs*N0YNc#rCHt5ArRK+}qS3uNzp?EU1)K);`(?CIZ`NeZ@`ipJ`pi9-Q8aMYy
z9Zw+g#$>EyoEjd))pY}glwlvswg#PaSK|W<UaetHZ{fTeV|}-kvS<M0+z>#S#Uf5p
zw{x!1^sr|&ZC$Cs6axF+R1!?HFA1>Gt$mbb!M3<i2!sfm2t;%)4VpydwbMF@hs#%0
z<FD6?$|*D~DC(=}fB<CO3XJjSoBR3|#eesKJ1(s1J!5!nP9*J#jZHxFSK2p(%W31U
zreV!$M;&(qg1@pq7~xuz433})0bm9#txaPg*$}%<UDisY#&O|7ZnrF{?DJ)G3*$Xc
z3k{y&i!a<T!6atcVbOQ(N|$jv0>4Gg*fcUNRDn0;@gm7v*&l7qlnJ@ePIUka+>8K9
zd&SGD_y-*;-JQucZQ6UT!E9iq?+hMMEjNkQ>^Q24rlRf{L3NpS4>d$+MN0$iv1gKt
zg1wjo%P$tQ1$Qo3lSj%6C!!i(KpkLn7dUq4ib9{0PEQY?LHVANvWP%-!GCUG^F10R
zIniuIbc5z)P(A64)8jVSDN=N}C=@+qlRkoHM~KD_lX-Z)S3p1f8B84@bMWvDgz!xt
zG46zfwV-64OM)MtudN<I&mcRU?8$U^nHLt1pc%wGDtn$pQ!}UIM5k>mw%%AwU#Q-0
zqyisE#-t4iXm2?m`o_y$jvli3Dh)lmHPNr{vy*fMNn+z#R8^qVxhO!29Rurf+kFDS
zR6_$`<lbRpibL!9wdLe3C>Qm5gp9E|MA+zEu}?5&GQBy{R2|8x8jU(a_)~K;x=Lx;
z5@}|*E3q=(l#(+dFx?g&J)`V#N^=|?hrb2gh02_oxv)AsPga?t4UC8QZJrFQOF2iA
z_4;<yBS=^dCr}7nh#di;gruS2)O|Hn!WT{hl87Jl{1kVFCA-zdKUKT6Ly|K>>h!E}
z4BFKfnNQOIk|~C4&McBsubey(&os#&YPA)FfJ^74K8nPox^*2ag-J#zif&dSN%Is1
zoLRGlfyk9ou||-lmXGZj^<RxzQVUfJwkQ&ykAzUt(s?_IZ?-UsZ5te%K%!Lj^9VGR
zu8lQzNQeR#jEg9eVfzb6fKaWDRW7|OtR28UGYOLlKvg*)3-`wWaZi|$F#z(zzv&dA
zlAnpAEA4q7t(DkM$^4XBmZ4NVgw`1N!>dpnv=X%%8k%WJB_|?b+W?Izs|WIO&(#J-
zs_#+T2Gn5}<%nv1+^+uA^eEy`<WW|;PHXK)b`K3}%Rn=@e^?1XUe??T{-TmeG2!y|
zJg~(vTL=4FZOBHe#e6rpb~to`6;Pdoos(~ou*5s6iv;Xer@BoEzN1~>g()F!{Ktlo
zicQd&4QlG$8Mvg?wZiU}?HX%kL-RjFzOF`7!>%~oG$^Bc+)P@QA5^ZxT=8^>qA@Ez
z08o#m<%z7f;W+V?j%nmHsMsyt!A192CX^@rROt<%LT7R=c%0*6tk{pVB#?3zdwgxc
zMQBB;+!h0TrDR63R0%gC5_uM4vT7e5$$r5I8P27lqh8OhSs`fWVKxvmEi>y14PoQz
znugQbq=lvebKHch);6MmLwGn9X(V5i$7sWx_7B7D{;`-9g-|R?4Jn%p$X*N75r0HU
z65XaHA_&h%8Xb{>NEvv<>2k%xAzL##F7@R_3vqm(n8cbxkcoxBpd&A4Ez}#2JYu_h
zz2j4)qqs_Ye#`n$CQ$lF6jI>EJSQ#ljrfM=&V#2txon+J`6??EWe~LPCEJx1fJyBu
z5oIIq4rZ7(u7%Ujw1nzAinc1bD~#&%u@M%IQ%jwTZ)^-M`el+p6aCn<Dr^jjij3Mo
zPj5RHZi7cIFodf`jgMsltfcUQXFyJKF1PL3`U2W{F9_q(1dY$b-Vh9)5p3CaXgq~t
zbT!T;hBjoK?`_ex0S{gTE*iD|(wg-uX6HkW!S))px(Lb&TA1++ackbo003`->Q>C(
z^u4nsgboiZ(tJ?mk)rAb8DJ81y4?ziW|*{qx}*9%%*SL9$pOCk5M>%F#T_XQW4;q*
zME8&k;>g}2e}?nr@_<gh)CeJaFKIxWq0a7xd|@VSwL<7qTg(_!ZkS4N5VLY~4IO`N
zaZHiMg?L*WNL|PS=G&S&PfmKDWKq8x*ibMk)X003WFR|}sk*^3P^LU>YcNT4+_6L`
zXFiBcQC4CoZ)B>~hLhYAk;r)LI<l(V8zc_P97hUpV+hG}A3lUx6yB&o`=|P=Od9uI
zA8v-GTQWKq;V3eV<)kajxD3kbnymryv}qc+s&pYD0*23IQ+B1&3}(+4e3L9Pg*@v}
za}a-PK(aC99>X&|2>eiW$RL$+LG`XsK{Po$3~Z0W6tNI4f)?C)#bo%wTI2-hU>i#+
z5p6ieb*2S1x;COo9+*BEb;63<=0{Lz83k!k&}loCL>|owLrFQGcOB=BNrv=F7#Pw*
z!~F7emW3vh3JZ3qD`>hK>_9S!3u{d9+Rj2I<om@107beV>}<Vamsu!w-6|JR)nhzk
zkP2cF_NJ#v*_UoB^0Aw720nM{><_rfroqp-#BN$gUf{vVm4zo{b_3N+el-X*5Sxwt
z2J#~5?;$^1gMQJ`y=benBoz+$J3JD~L!EDhHt>~6D3q%qL@%f{=^IVjCdxHb;TVv0
zNLZR-tHcbpph;Rz$vyBY6=(-`fjj|`1<1Q@Grg-~=D;(yiU+ygB!OXn#RHIjN)|Z(
zSVTg$f;9`$?rsB`(Cw`%gF;5b7{Rp1TJo?M`Vy4I$xrj#*qgFSiyEm47zeh_GQQx?
z)JBT+THEf!jq68JLlECRo18_FfwkDyMHxDyy>^IG>NS$_Dd5dxk>hDZdM(KN;zBSQ
z_mbrqTJT;Mu8ww_&1<Knr}v17VTbzfQ@v$}fF>C-_z|b*@eEfE`%@v&mbW1t#5e$W
zYW)%F%ldeL7gHUGN6Ylc#k#^MD*rM%iwGWP?<#0$=V%^_9Dldg1GVau9I>*K`{p=c
z!Mq3=<5>LcNYKkgPaLu3EV}1FmW}5Q9;Gjc_6zW_oXM2Ph<bD{?>`h^<8Z4NT(-b=
z4c81l9)#q+7UEo~22(Qp(~bl=)BQ2$v2F`JoG8;5X#8~N73+shf|Szrv|$PzJONyo
zFm<-tV<D<X_F@tzPTCfXgH+n={|i1~E*FzgZBu~kRokqkk>rVezSK}#9<CrKl5(24
zN6@(7*3!isc^T6I+px*pi77*J7rMJEkHDX$q+uH8O%fLa)>8xcj_ylaBa-3SVC8-G
zCL?pE!*o}q0@QY+*Y7%6jD%t4{-~!?J4Uo=^XY()wzQ4tyGyY^PU=}#OqeLgqlgsh
zWAVF_(8z{RbyS@Cstyl3RCTE+yq2V8pBKm+!if7=OhnCbK4oaq>~whH2g|(hFoFnj
zQcKpNVMbqkf}ujt*f1P0vErq;6%l$D3_%~%Z9oMzd%MYXD|>V=j_zKUV%mK!WU)ja
z@Y87#;ZE0cL)~D6KD$*DPIBW7^Q^6D$9GLzT!j?Ug5vy(p38%e<y5oK9=}vQODhQR
z<m{<t>$#bbMH|8G4gRt0Og-dmtU-!Nw4jm*iyvm|;+8osNDSC|IPJ$0)w(Gt)h`c9
zjSQ+M;Kwc2PwAE2KNyIDGN?gcMk)rFL#WX}xp(27OcG{MpHjuL)b?UV+T2X+c8-z@
z(SnCGK<rzfK*Zc~x*c~sVhUWbW+^D(&5t@-pOTbFM#&%6jbtq4$xFv%Y^g>fBH}|B
zyjR`(IUU^~dmpmHZN|vhM~+AxwDg500jg5!3?SQVCk!C|Ch5>1uzLkUPV+XFLRov~
z)1tdl3{Fa?5BFFQfL5)6_ZO_2E6N2{s<J~R0;5R@68QX~vjr`JYLpiY;j#NcP?!~4
zHUVsD5(opg<`yd8TO=+1hO&fURyCo8z-13T=ml2gI^-Rtdri{a>|=qv#a1IS@oV;P
zLs><R%BL*42~~|w)deJBYD}*&TqL4R+T+7wE(~wHhX4+h(}P|LR8fLv-}Sa5*;znX
zFiVymnAnhB;I=Z|CnbIg{+>+Z6x=PPcw`GLqUo`8w~vF>xsOzZ<!418A}y0f>B8Bh
zT&KZ<A&d#d6pVm8y1B@ibZYuytcxtjj8zhta=<RW(Q^E|e<l&irzovzyEN?|AU=CP
zUZzxrsO3SQR@pU^a0fK>Qi+0*;AXXRD|i6uK~rP5ZPE-z%itU^MD<wsVHwZuAj^oX
zwvQ3$S2M7g7g8w+{^5-p&$rd3g)~q_+DFXdu^IcvKv^*_zSn8tOPK~g$W)}-YHRR}
zqgP%4kAX$3zF2I^dD9~0ttF~m7-;WD3a%H$lKk0T9%`%}OXem{mwX}5MUZPrl0xVS
ziNq4SG>QriFklTDtzv2D4sBxIS~ovG2r|IS76L=2d)n3!Lu_H%5x2d-&7)1ImM?B(
zlBsQCbg&DlU9#&e{;16=<;Q)>+yROjhnK}B(@|e>dQ=ERW$Hm51GI!u>=1`OoZ`n+
zQm!3OH&Tf@ENL0iKWm&l_o9hRA#vR_c7;!YUACkeQ8q2RJbyzXQnsPVmZxM~$hiup
zyE<i%1MG}~Achr|U{lm>`mdgqk9Y}j_&}U+{dORq%2BI5C$ts>m}6L`)Sr^aiRlnC
zPmv6zr!5`EO;)&RFwc33%N7uCv@hXDKPo1eNqoJ}u^p4VD?n-a{y<(ah*AlzG+QI&
zC!|Y&%4wEx7dNz&tmq(LmRksk7_#%t!EY(o2D!d;2xyJ_SgwEz4F^T_NQ5Zho>NW`
z2$Sze2nD%yO{s6S_Zya37uiLUgqVitmFmnOQ-;fyDI4ot!ECJA!g&;{vfQOy$bVU(
z1UFOlVlk*>is|43Gx0&XJ8TDa4<H;?rJIo+Rr?lU3}zN0On4dgJmc!Q&)DIR&GiK)
zg>zauHMEq@RmXx7y}*Sa3Gba4CH3^&C=y?i&W6r}8Bb`#c(mKb@;5n3+l{_4?(nFB
z@aNnB&$YBKhf&i~Du}INcU@^Us<gr}+VBOm<TQ|=IJ!b^!Dh5W9ERklY<}>+T_`fx
zyzeV6{gvkt_dAKHL97&IG`X2*KpMp??IFa3-5^CZ`y$JzRRbn1>te1agpR{?%31N`
z+d8jtJTS^K6OI<1{R08~G#B+0ZRbL+_9n+-6rj>pEF!;Xr#ra43R82~a1I;Gs7fz1
z!Q_?F9Q7H5X{WOBhPx-lg$AE(E){}^V6(3bbr@kb(R7oo$Phl(8_;HHk1-QL>;iJ|
z+;DjtH!uipZ^m&tSE3V{BPRn>XO>SzL})wLIqe0^Bg+x%S1HcC8XqD`X-~4);@K!X
ziZz)&gLp7=%jf~?PRS{53m5%FKKivmh(p2-3G_};zSIucfM2va(S|u!l~vlZs;dmj
z&F7wd>DP<s<0ea$Q1zZ$PDJq5ggy4Ha0-!~6@gfJigDKc4Tg${)0s+(iow#`oC2#@
zfhxYmLP=CfyuFq%5@5=G8zVbf7k<`GAW#dBMS8<1efO@wzF;M;aI&YE9fUN~lb1m$
z6Bmfi>h7EXh4<zLFo9!Hz6+2NpGhcPSi_sK`jrdniPneE_rL<GYR!%&j@12N0WUGD
zCOLFUFOuGis<D8NQl?^TxO--ni%06}L78p(C{b9k4b+4*2?K#XjTX<fRrDaTQ3ZuD
z=DuA}5Nmy%>6ly}k^(OFs%Ca_p+11dmKkh}cdU~Q;vwrsK6hclS6dj3tVNB-R^`4v
zhyw;aGtW8&&INXQEE8l<;JZj|r`@O8Nhcn+9EIXuT#Q9gYDs=Zm5Zum%uT#z*T;Qk
zdCPqDSrAJX@Bl#`J5L}N9}6=MJUp8!F{e~!J7WCZgS6hPC5D6KHb#4<xtOfmPvXYO
z0sx`v<d(72P9$MSVKFhu@Oo3g(>VMmbq0K}F%mfaUU@<e*mvg<zrPfx@XK6EfnBRv
zjb5Osdrt?|8UbUmI1qg|LfP`R#2!4pg2f`?yL+y7I7i*eWAq2vR1-#nnxC?w%tqqj
z%J*Q-g)f|eTF7Cw<(-6s3b`O|+Tx`#fgje$I@QS8t5<BA#>(F8yGsirs#d<pM2%{T
z7y~aLcWH{0<(Ox}EF^TvGa=~@(x}x;LdZ}Uj~Iho0M~E8dJqaDS*l&0b35a!Vhb)|
zB5bD*GY?Rayvb)p+R@dkKw0zUM8P2HF25izkg`XVwwR-Mm7#28SvN)w4<=mz5Qk{U
zkuqd)G=VEk&o$e*gbkUJdIH{Ig74U9d5ERF`qN`rUWZCqNeA{I7tmYW2lSPN?^FU!
zCzdmXo#ySMbKtbDP{O)u8(^j6IsLP`JbGY9L~aYuMJ^GGBJF<345!L6`yoVY1dXT9
z(10!;%PC+4>SV?(#&If~HI~u&BJqM!AgB|q+tWv5L{50Qk3I|l{ydFX@yF`5Q4x$K
zt~r)S0y30}?gDom+XyK$%gy$`I=Z}^voJEE2H_WY?wh0JWv1Lwcu?sB)>bD6tJFzp
z{3I{Ka#<8_$2nqMN%P1yHEDk>qxVB&Fgh|9**AFq8<mFs`5GfM6XuX4QgcoUGOPQQ
z4V9NJUE8`im>G4$mC@G`=b_;*@}MHEQg_KD2n4+nA=%wziL)l#cBs~|{<kXE{qUfq
za_fsBm-<RH7Q2}o7&h+Z*|R**?K~XII4#ZXxSj6OHOnP)aFW2T%!yvpZvM*DCf`Ct
zKkUSHL>_O>0z-x?6$mo^aZ?>iR!3wuH6&(<e8SB_6}1sp-?A9pf~0uohnv#S1T{vi
zQpSK4Ss2DXxILoK9%AF6V^op>uCN1E51wogL<IxVrDk}*mA(%dC!5k4DQSRYN6^%;
z90T_AS2Dp=<`yDvSQ<JJIv6vFofrj+2ma_S5zUu?3b3G^21loBK|Lc)bk3A4;z5A#
z2nlaT2-AY>DGlQ){}z`p%hDgLA~4W5tX9B^1HWuzJ38h{IXa+J#nw0)tFc@eAk0;|
z`$GkZbZ>0<0W7j9)5(I3T49DJRCXi>Dh$Nxs27hX8L2EJk3}R-9ru#T9*9WoUQ{>~
zs*MOw*6QWBl1{-HCOusNuOel#GC$5F%bWzn_l4pn^DsdN(0W(@MMSPE{BNluEAiQ=
zCs`1NV|ej>iwKm8WXJN0j03Ak3;*t8JM8_{pT>_u`5U32cqmyjW!<B&Etsme7JOt1
z=EqVuT8#{DUmr{Ot>yDZnC6ab=;XMU=i=K(6hAEUEsTA)pgiN7eSSpWv1g8A;Cd!K
z6uf{`6qE>B)*tGqa4)w@y0ROUMKo6R&{-TymPXxQbz(Ywtc$rKEo0fbBbDQJoQzbI
z7gMcST`6lAA<!Qfp8NCkki`V|EOz_y{DAghCs*2KsLDO`R2t4ya#JK8E-e{=?n?{?
zu?b}}@hY<pOB1waJ6Sk7JRpVE=Cy{cpGmbm+baop_*LdMA?BvO0QzCt3lLS+f}`Rb
z`7q>TC{3sE8vD2eT9Wn_K$#(yYXj(gC5Lt>li`ZVpX`M_>2rD-3PR7uHh@*sJWa4B
z#wO*1^Us-<oD!vj_t_cChP_h(xIVf`bb?L602q--^NxX5X?}miGSk9O!G=;vEX|<3
z(}TLYvXUsynzE^iWc`aM3?5wjsG>4CCAQ(s?kO7I!xkXSYlKjfTB2)(N^IHGh46<s
zmdpz1bP1jy06SO6q2$~Lni9BKl`0?GgbN?1J2FC|HH$+cePFH%z22U-JxY`FTwbjW
zL_t+;4;*>18ld?;$nueNqd<o24P{;2gK{Ir9Ny0S?;*tOGrke$KJ1R-(x|#;bvoE5
zc$7<JABnN}+I#JMQd_P3;w&b!#FF$jIpG^E!6u9h9gKMR+x!TOp62yp80mONa;+4b
z!k|ukfzZb0U<u&~P1$Woj1V%HGGybT2wvN*!O8w>o2Mefp%%;KB^g;x;jjp8I-X=I
z@t{P<XiH@WTOE4>;vTX@hG@_pCPtxdC5f9zI)RDbNAuKgx+2(?SVC_^t?L|wZ*uMx
zW5KjS-vq(NW>U1&FC_6@OyZ9-;V>l%UBe6Gr3{+9E~%5qiIqu5&2GO2&ub!}UYzqN
zZzydg!(0ZAN3+z)sK(u3GHe-oZY%7|t!q$8uny55%1wH@4K=9Zpr-};Sm>H`D<v8b
ztFbRFoC=*F`MV{5BL-bIQJt{SH$*PWp{;Wmh;<qk9g#7lhdcc7LV}C>Gg+M@J_;3d
zHp=0W>`91TgNlLoc%}}yff{$~AjqX&>O>=QuVSSalo}U{U$fgSy`WpM%qh`kTl^`6
zEV4fjTyOTgNMbAw#ck}$R~Sj%CfXR>D%luRV28nM4L7mJq8CT1yxr9cXoi-|x@4$h
zeM$72lfJpxL=R){%v01<x0nWVdug{F%w>!$j#TMloyz{#YGa4U@2oIzEp`BHXI-jG
z==LQ(zt=Ng%xt)M&AvPWODHv9a()P?9e4Qx+y`pbFdrP7tqUA~_nZ){vE~9v>iN|S
zcxB=doiI4K#~vWs+{QYe<Oq+9*0}Nj_@N2~Q=L4GO@{_z?MVjv>(~UPSv4i3{9jUm
znA`2AEld=1Z-M`t<eBj%vRDE`@ryaU*dkpmzmp&(L<VLghjMQOIMgfvSmqI?VxIG3
ze3iEo_sBi3{GbZW46L0>Y=;QrF>DHM<k7`iI8ytso@(LP>&7EvqOJwn#N@m$=^G6m
z4V191Q)8#=F?!xK;*Sr8umKcQGt!Q>fn&O+osK|l720&0)3Fq*`n+f~z(8I?Pu%1o
z{uHM&JqF<!V>MsI4>S{sibP}v4Mhd;=#rYGt65MmEo35`6J%`n2u9bYu7Us>fYUyZ
ziq5Y{=H3Ui`zFL;M$17RmS%OFj2g1J_eWpW9ZV8ABULv=*1B;uQKdbUn8XDLiK?R>
zi8cw_qRurR^^1*4!rJI1E1gwXB=OGL`?PtrfPikFOLGJPi(MJEQ|Vf&;#daW2ZAbA
zl!|STcIym=^hSv%X|XPJG@3uv(s4)=sBq*`ganMB5NX5x$Hz0p_}wpPzRiG%eK0jF
zjP?u+oUBB)sAR~1J&td6UGr%gm^DGt0*gVLxqy3$Bx8}gjGr7~AKHtqo}u!idu5Vd
zE$d&5(}h>ZgVstt5m08e<R)BiLq;M$IIpx!D##8^3MWD~empesW%1b%N!+`%N$?$;
zO10Z&p(!8@KqflFCMmLCTy2buNYPd*^mBP*KGXS4p3_2j6Goot<W3-^0z;@oZ2766
z`PxD|$siFh_WD%W>h!YOmsBeEffI70Mh1+|Pvt6zH~3(Bv~rA;1qhvzV4y=LX~%7p
zsy%hHjp`C46p2bk3V=7z{msZIaw>^U!d_F9MuP2DH{mW{sGoL0y|waMRT`OThMa1g
z;Rv9iErPkKBp5PI3FS`A6Wc}vYG}X67#UA;sivq*XuDmo{Dh@rODD*x(MkS=ro6Yl
zBn2^^TJMB{)n1-JbF@Ay4plynlX54gY(Tgl6m7=zXa(&e4J<|9NdaYb++$i*anQgK
zzkwFpMihK@#5Lovo_(<~k>@lRCSSRP;cwJ$6sL$x{`mM(-L}^wqbesDFwGV(O{re)
zB^#pPYAE7MQB2MPAnp!zr3tzFJQmboviAl}tOd;Iw*857w66+*do$dI1%tWcF`|qg
zMVmqtQl-Sq39}WTt2Ce=3|WK*f-lF0m|}?m>9D6%((sBPb|5ceK7EsY!u=)D0o8$l
zaiQ&gTAs@)BEIk#7w0O+q1pXFHy8a2MP5;>5i0X|H>>3)Eg6>XW?cgO71mO{C63u@
z&uAUql*Q0O*qfg?0-f4Z2dxte8DQk=12N7Ehc4D=vRW8G=hF=13;XdTQ44NWY@Fjb
zZ<IT5Xpfcf_&AxfR~h7WBlgc>e;??EvH}x<m!7XD(V!--D76bgS}-iNzTu=XXVMis
zh`l~x+eP}Rvj<_|1r?-CejZER#<&3FI(*0{I4E0bkQv@AOl}rlQr`uKgyjUyLA`S)
zGf9V;X9!arOWTU7PaqMRpxx9L4B~YK@}A!Gt|XXPt&ABZiNqBUw^6sAZhyWS#Q#v8
zA`?`BKs!R0l0d-A$fF;GGKAU(#B5eg6H`z;wkR>T!nO#IDb%$@1wHhpd3>P_dkS*l
zW;9G)QD_pVZ!_>26I9D7(N`GmyitkndboCl#PC^zWkgT9`GDjPSHv*7?<<9gN2CUy
zWaK?I#O=W<_D!fNg@cq-|F=lQE;QdWuEj>FO{r>my)$QdkXkAcZBvSq5X0JYK<dnM
zLae1&#c1MFWuP;LGMn$@vs|uKgvsC2Fvc!ZD>gsmtP8O2$w<WACgx#M=wWLqKc&Oi
zmlg-kg+#lwR5hS*jxCzXq-^avir6JKPMw|h-3mI<+M4k@W$7L<e-w~jU|Z35M!q$#
z>BH}a&RGV_&GLE49Sl4si|Qm`P+$fh?b%av5RcKISJFajy=tZuH^y42sJY9>f`vDh
z<M|1JerL@^ptkg01bV0vqW6QC-){&*PU&l)2W!o(B-7uelRTv0t$dn?wCMWhxtFZa
zEXx`WjCrU_j>b(n?S^`w^RzXm6YUi*exM)bQ4wlvA(N>rSc3pSoxI4GccTg-I8xFY
zU?qd;Rbov8Fi!>p4}$6AOv9i|o3s-i6p1lMx11yPPOCFFWkDp;6cEX+w}42H5{0Oz
z(I?O`Sr=9<9qN4VM?FdYVzDDqXh2;;g}YerCMsYpg~n9X0`yS}_FeBNwoE*}MRNlL
zB32^gQ>}CAy?!C`m`RyvdQAof0x5_VyiQs`A|gw~DUohUH4<IiGvbuSQj67R(VRik
zw5@^>q}78k7Q)Gt5I_PQ=Jp?UqMC)n{Igao3A1P25*XR=5=@cY<;Au`l@n?mvczJx
zJ@Sq}1O?{0UkRUu0ugKM3k+SGHIxK{JCC&R)P%aNJKRB&D&CzU5P6Io+0W@M&&)dQ
zV;n}tX6@irn@y#ks0<6RPCa{bx0&Y>^o&}xU-+fTTU)XLm6FO?hcd9Hx(<h%#|jlF
z=7;k0D!f;65o>)Fa9ig(_ab!`X%Pre+oVKDTTyA4GFmvYPi)vq&hFw=#Qx`^1&IP<
zyHOqRpH+lPbrEXt+;mzDIAk3%fGRfi5Nu)$Vs0c#YH~{*>}F`x(~c6RwUrGHv73p>
zfDj{=>K^ce^#+HBup;g6_)Fl__<SIJN~_uM%Xl{2+lg}GW6_I~>nP`HF?Ewq*q|9t
z!q*bLEK<&mg^0<a3R;>RTS(8cnA8IVt7mv~MA0E(NQ%I;v(;##An3RB1(F46S%<|G
zxk7U6ha_f?9tk`3f|GujhunbxiQR;BfsK)9#O)_MRx8s;`BY^{>l;y}1LM;zK32X5
zvH@l9ASiz^FF54@t&qp8+@|eWE^mH+65<E-wbA(=4wWdAubL4TH_M(USsEESfces}
zz92@eTiwK}=*r9{RDF};(P>P&RJ6yoBB4Nq<hFD8s4vEXn^C1C$p$AQ8aYMOhiQcC
z3wl_r&0+5)%r;%I#lAY^+#4A=NVW^)3cB{1+n(ZT`O8C8HoHA7qejlVbELd<A91(a
z9}6Dk3;iNMp<hkSq@0I#_ed8gydNr5kcrg7LEvAP!!@6a;Ca$1cx~vy;gU`U>OvV4
zZ^ouZ^9<R*<akV`v$1)Zf#m%is<?xk(r$`^NKIwDBdzpzfUC5YT?MnKeq3Y3t6Woc
z?FN+uvZfS*V*1uvBLleDvA_qibz2e3Tuw*8f8AA%;LGRBW6%B&y!k#wLNB3+dh$G_
zt?y68Z_q!3)Bm7P7H-`x^T6te`87cJ(A@+Zx^_w|`_*)r>V^Y;8guJh1H3uyIdUFA
zt`=+`HGm7T6>M>)nd3N)YLzpSFIEQu#L<tH_duproqaZ?MfZgQu0yOLS!T$7vvANV
z?&0BgLBEETeGVgt&$>W(@&L#l?jXV`wK3G%4sG0{?9vD*!8B98NyK_x4vVqdrom~*
zML&wagWjTw3A@il<?bY9EUt56njvWRh$COoV8F`1a;cZ9*qU+|JIQr1IFiFQVs2Y4
zA5phiMPByltH~dw<FUwX_|&S5158$}lO5Y?t6Mpq+RdDBEPMe@$O}Fw6QMLOAYaH7
zNR<I=wDWKw9@W5ktm?fF5g0PVF(;@^dT`sp+JPAxbB(~SPz3{AXVFYLYUc;N$C0w0
z7VJCd+Nz2ryI<2LWWY_UQ}f6(>wSNmaIKDF>5S9`t*=<K&qZ6PoWK|OyF(N;-G2%+
z)k5?S7h?FtMu|6rdeEH}XNeYUJCq@Awd6S2Q*nJTkg!=GG`7oClch=bhU%!QY7+-X
zdUYf=QF06qLMb}5r{ov418L-#p52wo0(hXpQ!L+2X?pYr^}FaWRWZe$k-Ir;a;n2h
zY;^K3H`)q#V)OFA<L^1hffpx9A$l#66CeST76<057lcn73>Sr*na#31%Lwu=g+-pg
zqRU}WwGg^koLqQOB6}m70}ZBz4?%Ql<!1iOIA`pMF=|0wDH~i?r{aj{E+u*ifOet3
zj-_Qqqq1$)T0$eI`MOc(O_I}rS0yVcjJ4{+=*T2|ub`Nbhj=~&wsg|l({kl*2>(ev
zXx)sc2H+mw-<KxWti{Id^|X-Y4fgXKxi)$cdma{LyiixbU9$Zl#MN5T^dMeO)ANc+
zJLH>b6VZ~-@-o#RV3~<WIo#IVDIuY~Ee<Mhl}iQb5nn3hpsGa(>M~eGbt)5{;B~Iy
z6Y`>fNbcIA$LgoW<s^v~s*arxvmhFvja7`Fwv)iCqZK+qT}B7R221H&12LvQ8+KRY
z++jE$LS$1U&p~_1N=zV0E;3V0&dx<2LEuBA|9B2Yc)^VH`N}|#^cf97PZXxL{qDP9
zd99m?jf{{6Bw}Nao{|_+%tbKE@O>0GmK(gN{i*`vXg%i2a<O3E=Z?&VtWqF@O81L~
z7+k)g12*Pki5H%=!)S<7B!_(Bd1-_I8`thkafrmV&y`zXZnMjcV70t*)RNq=09IVH
z=@1+_7vu+}seEq?5Dx9e4u-T#JuJIR&m^(RG&LfqYJjbwFzAQq48}5SX~{GD5+@Uc
z<F4`|ft5qNG$@nZ&U0+0WT-}@fQRJfDoA2UVgik;Ti{HB-_6BlqE&y0w-)K@s!oqi
z!}xC)s4yLx_B1Z%N;v>Qu=G6L!N?#P?@<Nl#RRx-@<b=H2!=~7!>1_HholXea3U7J
zJswdI)X+mJ!LVwY#6sR7({?m7q+u%Rk)xbDE{vxe<0uVgrA%a`89h<^GVshVl#!&A
zI9C5OQpaqB5GK)HqAeTF74N{{+HDBtpjS?A-DVgScKb9tbfl{04<JJzhmSQ~z(mLm
z7*<(bJuh^xSnAR(Q5cf2cymBS?EHeBjCi3`%*Pa3PiYY9TXnjj-gh({1hk?;fEl21
z)yRZow<;z*e*4iwIqx1Fv!`|<2A*~zt2Qu=hop?pl#Q;Qh*a!pAfqUKxjx2fp)u!@
zL=}o_9=KF@z0sLmL}X;`clp#)KB6wwVviVLc>o|gALRi@Y)WZOO*^g))(%L`eh8#Z
zWQMx6U>oH@OvSm^@CYXe^w8+_=+<$#s33+Sb?30QE+E333|ZA{MFdNIg_^8-&ZNS&
zYU-*9+JgM2wTD$t-meN~yy^6(kH~`PzkyG?f-!eMTtj?~IJ1;*(LyjQo{}e7rl~4p
zel6QhfB^Riv50kiQaNEv3vDun1*$m@AJ$HV<kVO7%|zRE09is^SgDbvSb6Fh+)#(W
z_I3|SY>?WGf&trqu1-KPT>8|g=VGS8R<{^D)Q+XbC@2Ngl(_pEbH~@y2%RkZ^awxB
zoITwT5K{}gQ)c-AkEmVKl@L0nuihDWmELFzU@nvkqTK0C3q#}9UTXE+diMyYRUrUT
zDenH<Bq^mK8Wgzi{2-tOGWIFhi5y(j0Ypc=aRUgS*0H5`D8Ze6ic{rRT>`vC6Ex%#
zz4zstN)3ErjwJ6;=g>edmdr7;`KsOr)vMfOQO~lDX@iNrEeh;1^I>qu#O2`->*p9N
zcA!<iEr>XPPb-(<@H-anxG>Q27l^y7)fwAh*`&*<=DaYzLH*p$5kT=p(IdzeTdvY@
z9S<t2A<z-Kj{6o7WU9g1IlE1<pc>0oFR601X1%ZjDpK})^@a*nv78QxQ`0OEQKcvn
zx3E<t^=wjhN1{)m5-Yj&Jvi>wg@>xxR|^*3$i4kY^3`q;7@-`L^VpcS)E&C1S98b1
zWCD#21RDVmG7sx%&tr}I#J(*r<<GHapAlP@;03b2agdPabOg6p6F3K?^U=X0WMY|T
z$JQ#ADFJUKv#E))WIv3YpK?S1S-gTjxZW*ahc16EX|tmXQKdG?{zMe_O>?JA14gaV
z5a~9<_qu)IX=O%YMqx65t?t0(rum$Bk+?8BF9Kk5vy%juaWOa;*ud*ku`m(e>|p9h
zFP}!NIs;5GrzMvnc36a2!|Am3B$0AA&?mlcbss-&FSgf@Jq^~m+}9%2Ijdj>VwhWz
zp(k;1QRzJuTbXb<`R8ZH*kLRvge&<Ja#hV3&WXM==@K?`)tezs@|xU5?wT|$G9z&R
z*HRg`cK&l*T-_nV$jkL5>Os*j_^&7|c}YDW<+2|or`QhKSm>b(_k|*H_CW7YYtxH<
zIt>P+AeCj*jJ5!QoUkd+Xmw}nzLKquze!ja$s0lM2vz62NxMa*=e!5Zw@-ZXSew0N
zR_@M_t|V?sc&a3$_<DqFeLeA6uGs64rm9yoTdH_U&JlgXTu`BFA{lE>w8Iv8__3*k
z-XM5zh6GUrA9x#U0&3aGr(o_5twXGw%JQUYQV=niV^WDL7d?p#LP?`-w(Sy(q~lX8
zl)~3A=@I~&g==8IKU&boCh5x~0I6aJcx1{H%Tdd<GzoRfv0yKd|1Wxhh()MbjXk6x
zLNW<Et<u&Qsa~W%i2u0gr6r(`rTjSgu!8LHQvHDbvk0I{em0a(L%pE7w1uoV)taFL
zs1PYDj*AQ6C~l_TQXG+f;X=Lq9K{;FF)@&#_h~l-=(;~vfFIf91C2uu2a!-si<L}U
z|IzF#p?oRwJd0Ut5wE=B>a~qkw>Xx$i;HN(F3dvSVm~u!VHM@~amLtvr;{~|{kFvI
zKi`UUOhI1RV%hsA*629b5sOZRZVQ!c+a+}|%(MFxk4Vc2L)CK?VI2Fh1h#~OaUiRq
zGD2ZxpH>4k_AFLttseN)qA3x>{j@hj>AUvTHbcWk;|q$4SnXQku~+hgYB`)2(<-22
zN)~dR41&fm##Kx2fYK~N5pz;G|KXU~_o3*dpz!|h;C9r~gQ#`o?mMxjx*@|;Sqd!W
zIFrkqWC9_qmRvPFPcl8;j6wm=;0>ir6h(E_CxuqC#>Wv*&s}*WJ_^=@!G-wT+E4(^
zoMmrZrHkUNd<x=>JCFPZ?$;zZvBOp_3_jGoXmadOD33?`AXi8Vu<Fx5<Zp^lx;S;H
z5jRrL8bt>SN>KxG6A`03cXzSL+}Gzd9Ucux>Bg{xw!wVz!;|us)pQZtsyb0gq=)dh
zjdDZw03G*G#fJm3&;^J$k^B;Zu#?H2ndYn677x2wUL2IB#uXf8)gJ&wds+CgKzgwZ
z2ht$>vw(x>nIMW89ED6(91}sgJX$m2#f@W>nkYDGSY(T)e_J9&)k>Z~MGg(&@O_&X
z2n8h7gcKg2LaO=<mI-F=whL>)Pf(lSSr*H>21X<5;Gya?7bOIX<wc0k%Mb);!ZuzT
ztQ7f=Nd%$0RSn>C2g+g|Yigbi`qXLwm|)C)94bR)GdbL$X6OJjy*H*Mu3|CdBoE&u
zGSnd}IJE=;GanQoj55pPKuWzsN(><A+iHEY5%h=<LUZwUGCA6q{1CPQv_rRI5MEpZ
zqcc3jC(XMejRa$@R>-_HpKGAT!RATp38#MP1|fIVeL@`?a^2sUI0L6s;<&>WIzvT!
zp3<()s6=0IUWE(PQ;zR<3YUN;f3=wmO;+`zxwz9p#*K;mZpR)6xAdrp*h3XTeB^n~
zb?n6!eX#uqoNX-M4p7rGt??4#W6F4Fayd6fy-MWZeqjoU8kmh{BWxzEbFd@B4SH+t
zUm+snSvcEb4)2hN5SBU63^+7FnfNK6mU0~e8Q*VEeDHJxO-77a^OxfsCXixAa53Mk
z2*0#j{w>2DNu^XXw9(g8FS#zBBgcF{F94zBXT=OONr`GbA_%Vo^Z<>R{}y|AkdWE%
zm6lnjhqUXHTR;HDSAUYh^kGSLlyEk5x8%lbfryN?aeQ>AY#2t{hyA^0qttCT#btJo
zpx9Eaa9b1f0qbO%d(L5x`Nz)DMn_`0*(AEV=#WgU$o>%ZxN??A2(K))IfQ|du)}Ry
zDIl&*wJ;R9X%mI!wgUp1@b<O_xzH5CU?Emg1=NZItvv{ggm%BAfKDkZXuuz<SkjrX
zTk(SSQ=mI%GM8*9w~~?DCDl_-7OhfNyE}(W8zP6>7Ocbr+~9}<+t9Zx<xHI~9V2kC
zZ*(<ex)Oy+u_zGzw5zd}SuGfij_fxislAe~0>UAuBveL>uBTS%s|M<D7F;e8lT2Gb
zGSjMkn1w62JN)DaP8S>gM6#L(y!K!QOo!U>kAl0KhAH%oj{PH*WwL{DFnv6B64GT`
z4^GGrRjgPt2_{FTo+T@Vd}7o~+XDebCv;Z<f}r2QnbnBDf-0jiKAqu(zi(vS^TK;&
z9LSxTa26GaA_zjcp5IeJqwKLyv#_0!DF~)(D*aJFIAr~umxUKyAEa?T6Gq!?=UFDa
zkrw(6K8Gmo$bq%71UfL$dGt(SWO0acn`|DyQW)z@gE*FLH-HeWN;)t`$By9Tc&N*K
zEmAN;CbIO^mday|tF60WW8^%^thtFXxzmb-I<I7$<W=dqi)7vFKEnOJQYl<)7mb#d
zWpXh0l2Yn3#L2XCQpOZRNjDSLtSb{hUA6^7oQg91waw!Vt7fV8xg9QGAt6)x3h>T-
zZH8!-iU7`B_`yE-WMH(deU3@f6iB|pUNbMc^=>>vtx{)sE$|R_pZlGu$d@U}Wd5Xc
z9zV>gIZP$PEEl-M=@V33v{PuBEX@P~t~*NK=1*&k<EGSsuH;_Ev&5D;8<dU3jAZ2I
zK0qTL?@eN=7f-b-Rvziba$Rb&bT_K4yavrKWhVuE%LRuXbB=TQilf|+Tx;O2=(dFX
z*B;w8hOAAi7<Ze9J<BGr9BwBdDB-yqPL*OhMcSjz%Y8Of`Ol){L$S7^pCy3+%3Q$i
znS92z4pS^*eOfOtUahi@#ztgRhtiI=2=^@HT6Q^<!D}=tLpEY*aG=<|RAP{(zc}v!
zSNKeif)Sw6;iXV~zBc4MNk9+-9?M6uAQW@|`3HtnhxO2o>LU*S9XzP?rKBwX*q-U&
zMf_MQsuKn&0gYp&;zw`ZN5bx2k-LE2-t4G>zZ84bG5}Pljz#6hDSZ5$#g0VpO~K~K
zHcv$@Y`H%Z4+YFk>YABsCW|QUV$XZsaL76{IdNO3I5Kd(Z=ZcOCT|Y?y-6dJ!MHQW
zMj8UDfa=I9g$!!?v6T6hWZl;+L@)Kz8%`@$=%RP}AoUcOW71OW)beh0s4iGdV%szF
z{f@CHMR-bV5mn8v<zgiqwyoAxld69KdgIE68SSg38P5$@_ISXhl%#1PNiYJ76q~Go
z2Xx^S*^c8jZY_jKkGGIHHN+C@;JSO&VEKNEZ+#>I0U(uU`>X=tIMo}XDQatFtiQZr
zSqzar>`w#_6|0p+?a6JZa!~slrYTt4FO_V<l!4qJG9Vt3Qx&_%KcmIa-2=dOY*WaQ
z63euiGNc{(Y9Gmd_gE{;<6_iAlq`oeUk)sXRtq2fNp>t<ReO)hBdD!5z*%+?WH@05
z>Od4VXvUH-6u1qpnE;jT<CHS-Aym7vaK>tan{QAvO8e|#91;gvnHB)0xpDWOG4xwr
zA#}wTfU_WjYfn@%$VXE#?xx4l^yO<>dgKES6J0EN&|CnUKxDtyWL#WK{v&POty&<0
zXmlZ2Ws67nvfMYv@M*{3StG|T9<7srX^TYSXUljJn(F?8JsmoIefJ@@rVojZ+Y^!g
ztnY%Vh(M%lp9>|BXKPguFbBz)hhhbYnkMc;oFlC^hAkrd$Equv%vjW0w28q6G>ji9
zL7@*?&pj4Bu*C;M*`YPAJ`kR7;zu)PlkQiQTB{SAxFbT<MM5wT6S{vWpwd<k{9p#+
z5k%y?hFn$zk9Q(Fni|9Ew(uv+zoqR`SGFI^J_&kvO0!V+r{hYsV~ZGJB!@6W^@ZPv
zKhy<r#OZw=7rwKnEPS2JqJUz;B2s!Q>w}h}{#wF>Ks3sNi|t?X-J%MM6W9%%${PtO
zSE)uHJz_@OLun#K5Wp(O%{V%o;Er;#mlr8{vI#^Se~9hg9Wc02Dgq&Hs`EB6H$E1s
z@w_M*o=M9kjzme&R`x_+L{Asuipgrgx3XpNvN`^-N{+dC(jmgWgsiBt4(0mTM9m8#
z>Ipry5_BsWlReUL<KnIkiRUF{7p*Kc0h-zugXk=lEN3)@-;!dIjgz{$+}%fkkysC(
z%S3!mc^(XI4cmrcfbfmTRE=hChEVvT9j0AcN<%kG-`w<Km?={6Y_S|=xaENYpT#dO
z$W`0y25lXIwU}TWR$%M&&+Zoj-0G!oDc$YjSDvo#!PL>2+@8j~If5hFU(Ofz^rjpS
zf^k!y__=p9*cNaBJ&rBmV?d}4Rh2#I0Wa0M1fs4#stFy%!Kz(hI$GHjJfrhZSRdYa
z8T_yLnIKzt=^&gNs)Hugz4X5&OQg3)AGlqBR0m)fPxGY-BVAT5LmH=$F7-erqJwo2
zp6Q+3?~2%!=qC%Yhp&o}TJTS~q1dkEJr#atj6BuwoG6(tb;pi1yShw61|;;u$_;jr
znIUgzDtX}<QPkNViwy{)oX$c=eDbkb3XUT^FR|rLA5IBjYzqVO5S2?edQeoa6!kO7
zIc^IS2!}Y5<d?cJYD|=P6-%+2?-!<HFxZx0L6%Q78{H=)9(%esj2I=2Ln@M+l^%vH
z-tYG)&Su@o^Z}E`1s*NDYe{=pIAU``ZO;07&3#G43O$)_aqZS9pP+89zz8E5;vMyl
zpy9~+XujX+T|UTdgkZU*ih@Nfq1}cx(QCB=PoYB*{gFvsK^MoH_^?j$cB-B7j^)y&
zWbVN)_252yjo4H?yMiHB1ofSuWqNV2T#vV4H6>w-B`3}uE89FA%i(iLj4;n&5g_Jt
zWu-b{3@;lR!CU5S>%0GkAflV|42T58M139b@m?1Z2d0M@Mc*Q7k#^W+hQshm1p0?6
z6Is_BoLUh$yT-}bF4}fbBpbnuq=&0+E!|6z3C@Xx=srWhXN#LNI0%j#p|s3%J4%3#
zRe2eL1{ui{&x)FW+K}f$4@&}aDw0>4x90}sIb;W+OaQ$`k^Lw+-LqnSoO@M7r`O)5
zoH?g;h7g0~AqnXxEvR@ZO+!>^mAkK#w-p(Yx?AN`iq%&6Z3wa)4~yb}?P%*nw<4w-
zCdthq)o6|5i__e?LEwIIWMl1Ze04NIrgwK2MM}wUVj6d)NCWbE$rh4o9n)%FDqk?2
zXreZpSa7+H#6oAMxiWGvT9+^tg@kGsID1{m`@t&T7eW*treHD0^j$zmRd@gdHHeYa
zi&3kq#6jZw*iD@nc)N0t?@CtdKVGP&Za<}n{n*o(05;YEG)V0=n?rO`vPA%{Or<@s
zuUTsJ5g0kT?*ez^e87biVrY4;q3K+DPk2X1eY`&s2F^=$PS&sD`e0(>@oVJY3nEbZ
zQn)VEuDgCbTD;bEk7}oA3UspK-Re%VVBd=noatBJ%rbwv?6LH`IG5u*^I8CeE`#(8
zadWGIaBerkFiAvFVT5Dd0}lj&9+WNsr!=fP4}ely#Rvl)!-$x%b}z_);wljhrm^)A
zSYv8dCdxwlUjT0R00a=sm1_^g*x?R5axHct=H8B_>C2cYtCj}QtgS}_ct5`o$pkB-
zMbUUdlAVilPZ_I31Fr_0#b^UrQsgxlT#e&`nYY)5ME=~%fH}E&v~wUH?j$2Px%_xf
z_`4SA;oDs)*<U;oq;IH%jQ%MSOF}KU=Vh)o))fB4+SL&TyXYNfhEbLrUEu)MvW%Q0
z^1WaN7-(&G<<yK%YpVM=J_XP)diTTzHAw|W84k@rSR@yAsuiq<8<;}>GX0L^Nd+o0
zpYy_y1?VU+Dc@`6LfX>!nHH-pRcXFR*F$)!*Xm)RKe5G$N*oY`Bn~+}%GM9N$UTE}
zC|4ZQi$@Z>IW4fuR5C%n!|^Wu=m}`Xv_)V_7F?hs4*pzDDfjngp17rpqB4=Oa(l3W
z{Mo`*97b?xWyzX`iyp}OV~LT2@iR68Z$%SCJE*b?C@g9-$<7!wT1-)nqTSaIe6{Uf
z!*ps8A)-BVj&@V+MBrLafj)^TjuMhz+95#vwsO6|no@*osPuSF87B`aIwZhI&pz5a
ziE5}Vu_<P<Hy5cBi94Op=x@5Uf|VTj-9D}`sA-|Kk;Aq23!3YmMkEj+S6CiSrn)2!
zT3*iK7(*`2RXUGZpk3r3RJ5S9d|~<v(@+*SQBw|EMMwBptxsGz%id&665H0&kHaU6
zl?7&S+PVyi>7vx3Rc)nqv`u!c&J*h#_hEIs3t&j36*d5Euliukj?B<F?65m#vp0F<
zf#-0=O*>1ep}>*F1q-F@P8o{|VJIvo0Y%l4kA0Gt$1|zI-jhdn(puVd`kR+o+{x2p
zr5S5-X@o|GZ?()5p5;Di#y~~I1Vy;Sc$mKx3AXb@BHCT>7~}p$o~;v#=C)%s#0YiN
z0b+pk)R}saqYE96?Z%Fd0IfUCpT`xa8)3wgJ`FNK*XnP8cVz*jMeaoXP{={m%X5JX
z#A*{Mr!JzR!qokeol>J9d}XP;S=A?>c0mVje<2<aCsg-Z;07C68oPG53Sn$(v<1=~
z275KBRc<^70E&WU(U3e<Uy}0GW`F`GOWPqD(uhuCs!80p84Sr$B4r>X@dY7?wb>U2
z1a`jeK3$yq>%i?yY8EG2BSw?M87L3x-~gyPoy|iww{iyk62TB;m5^4digTQ{6T-b)
ztrmq@pPtk+=swzMgmI)^eU0QRs*2kkfsbp)qa+yO8e2n>8%lqebxZjS)e8wqKrGo?
zY$xQ;Wmo~0Sm=KM#KVPEgp=MbAl%?n&xJJU)lg7GAfUzTWSDg2by27sYBDt$mhCYE
z)@QbRZ$^0E$UkIcn)vAelOM~7L2EdZMbpJJ-A+$gz(ur9%{&>HSFnW&vZj&~r!3z^
zRe@ujvIZ1sCMybpZ7x@<lxg-{H$@)GRtJJ);<+<w#ka~Dnt2tJr^*uGZl}b`9!3qw
zno1<~23WxrADQaqP8Gbx!4CF~3KnR_H&X(c7}5uy8aB{9p4(Ic{`hp8aCXT@YbA9Q
zu$|i%0_DSmp!m3YuD%bVg2t0m^;ih#ScV!I-A1ESn=Cc9v@jmRsHS^@C{oRFf~nMu
zWx}J_HJhlpx-?j!4617ssbspT6czEc34{}->zZmIYJb6qCS@>4zBe2BK4ZOul?k15
z3?Q#6`T;S{=Swp0^q|T&SQea>bY)Q>)@@Hv19zVsFvE2zNHh4U#*`xCk{!M|VIJEm
zcpgsII&ykl1q#`EzhTYGZKTqzn&0@(2G;;r(?#V&Nqcyl4slk>g><ejY+^u&AARZZ
zP%<SU3c4grl?1tAPIYpakp#!^!l@4vE~`;i!Q%x<>za$GyWHPb&0HT(taCjd2gD(;
zKd@CBNMQO=r79?45u@CgJZyYd$W)fz!fs_O^)nWa+7ZAh9@K%xt-7oIosg?CP!*Al
zd@Ot9Dz7svT&nQfNDuEmHEcI@_*jlmT9U5=lQ)$Yk%5&RUQahCE$uY)%J|60xla)~
zNWYp}f(%XCyoun&-QJ)gpr|Zk2+H`yub33ow>yK3**5735K6*e&x6xX89WqO2_-{Z
z7Rv&$@HB4p<b2`pij#Gk7Bo-U{K5jH*3|G=r<iR&I($b1ni3$k){5uJ9*3MUh(=l1
zozSd(D>>Nxgo}HY-C>|4P{GvuAv80smpb<cLTgE*7&XicA)x)Q1~h0U;Y)kH5mksM
zQ}p#?f{ffX6B<kz^+<(!S(_X0+1*GTk)(Okyg|%mNghDBR2Vz8cY%KwSLtyiEI3}A
ztUII)@c=b0alk5zKMBFUKWKIq?+fzWW!r(Kn+Jz|bsS``qWWE=0%gh#>f6@vp=?Dy
zk-9C?>gE0v8Pjq|i~n3Wh~w6_^hIgPW)>ELjMEZkjeOK%8xY^sjJDwTrr^K;T{epX
z#8qXX?lBjtqrKNf*51x#2~s^P6688|)O3AXL`=f`)Ybko<dVD_H6k;Wlvfd`lUscp
zsYOH9irn)5dUZmscko{EFvNKV1AZJH<(#Aq1}5fFjTgYSU6}+u^gV_FFOiQR>ch$5
zAI%9m;}=~gloONyBOO$f_G-8*Rt5cuwUWC`uO;CMQf0?eWlg0dsR6>Ty48kFV3R-u
zgTcL@Fy%RHOfv{3&jv8877Pu{j&69(b2aP}dwa8N<hk}`k_J=EHxfl;7A86Q@t_-u
zq|_oAUo*z6B??Rauvjz0Do--us*mL?hm7UcoK2prNLr45rmAp2!NPV_D5qD-K=k=+
z-bTFai@|{ws5lmst5zJLXgH@j22j`24uPaTJ*@eR!O*a+li111pE(b&Bomk)ncNKq
z$Ly_yvb7L8III_YzvAU2r)QzeHyIqYGMl@WFc@837bK&llX8M>e-KmOxm)hI9TbbY
zB(}_IM;*spf2{EP762_ufMcJeKnCq?aRi8sYNCl3sAPy~?Ui*9BRK)$K-NkOM~0S?
z(ZUf|3?T$R#cghg8mlWeY4&Y&SKFLOhJ%+1VliO#Zt*h$@gW8o(1qm)6^GVggePgN
zIBOX#jXFG^JD6?l3j$351qCG4%!4FiEIxq#b3Ce@8rg0Y(vM-xg1f{|(qXw$B#$*y
z<{x?X2pL#E4sg&u;9+{Pg!&>6Ih5F!xV`;ijWXV=Ca!lxlBI!RV?I4rnU!+Ka4IT`
z*<IB*zwd-v-%niQ)8d<;?fvOdAnhUr;F%WD2kOGj`I+oW{kH_s!zUtXpg=|d{oAIG
zC2<l7%*38*d3hrONL`Su<DP>4*PcfyZOMNDiE<C)lnkIS5jgGMSe_Ciq7@T)&4mgg
z4G%Z@;q+ThEjF%WFfE{Smuiyp+9FC;iZu-$#2-=X`#94ggfst6ivc^Ud@=4fC~(Q%
zU0AfT<VDGi+@6LReNn^Hjm*pEr)Ymr#z5Uz>E{bmwr8t1NSCl|2s?ymB=ng8{i}$l
zAW3cv5$(uEA9^er=9aYHYkH6Xjq|L6ej<RZAaTl;_*{x-(EIj+jp(raD`-NBGDWXF
zNuYyZ9Y5PeiV_h-*bMr(){r3(<kRjeR`1jbZOgww`X~3}J`rJb)rdmecnhapmkZ<5
zEAhcWQKYsq2pYy}0>-Ra7iMzq2GSKv1~8VfL)uPwp%zC${l-ynibAd=R%Uw-ZWR!Y
z$9lk-$>)lG(>{reQKslTWDYkC_9~v?eGwZ;T5@`61rMuKQc4-Zi3i2G>vM{WNaC;6
zh_bXmRx{a(m@d&0X(O5}2-_jQpRJI_d9t2vNB}{#-8cfl(}MD-wd}iv^QXJCtLWt@
zQ$cS=FyZrDU<FPo3$D|-Vo%+Fyj1l(k<Ca9E9gVD^g(byBkYfMyt0J<GzDnYtW_|j
zWywXQ<5+_3S`KZkoVv?#Ck|qzp@0f>KBCH~K|r(8?4FOtM<u^0A#VB+9;4eveu8Xr
z!xxWi-kMOdORF&nv>B_$gc9h(rdC3_aa`mpWBGibAte}76iao{;~?+o*&=M~zA*ZJ
zzKn`6>ox&~TRhSl#$#Zvu@mfh!3GOr*;hLy{^!ph{@vew{msYUeE#Xvx1WFU&G_h>
zr!U_8CjS1%H?O|_{5M~``PI{>pMCt*(<dM3$?=*q$BVvu`q|SbAI49<d-|t;`dKWa
z51;=2$4}`Wp1yzc^@mT#KRkW$<<pP<KK}iyH{X2w)fZ3SefW2Oe)*(7e);*Yp1%3`
zli$Ai=<7GXee>xzuYU99qu+n^=F=~K_xq<GfAjh&KIQ56Uw-}i>EaUJdFk&y|Ki)P
zzxi-o7uWvD?c(F|UcSdCAH4UHk3adEi+_54di84k@Pk*co?m|TgQp+yS^xNtPbq%!
zy-)n;c=e6m?9<<U`Nvmrp+EZf$PCl`Z~o_B#5Mo&7soGOKfU?Gw;%uZ6(1E3;)5Uj
zm2~$j`G<cc-~Gz@!@qLg{Yv@aUnzILQh)eY>fNujAO4kg_bdH}f2H63%J8rJ`prk5
ze);?FUwLKx^!wlc_S>(&d;Rpy^FMvBAANWED*uyTrr)@|Dwf3UMc;j&f2CLOhxaef
zuXz1-@qM7h9{b_5SZE(V{rKs>{$2dne|+}lt2go2_))BppXAzp{Bb<_pZxTvKjkm~
zcBc4;GyRg+{@16^zkd4Wvo}xw*RS;5W7U5BCbk3{<JEVs%iq@zp8n(WZ$69d7q{bc
zKJ=&Yd;F?y(-*&rpMCko*Z;szp8UQ~|M)YG9=7GX`!H7b*Pnj;+mFBc-M7E}<|95w
zyYYPb@n^4};+?+!=4I>r_+xLucX#ERU$pYe5AS~X>BnDv_5Fuy>!jbOr>|~*$xmN@
z`2Hr={^fgpuFdxAFTZ+v^?BT+<HM)VpZ+njoe!UW@{`X$SO>?OU*z~kpFjQN>G);5
z=+(!+`23d<fu0U_ZK@yMy(qo+qVo1de~$l;2lVFSPd|&7$3MsY{^ZR!|MBL{7f;92
z$6x#^UgrSDtA5eWi&yAYvJm*Ty5fuLZ|B|h$7lWIXK(M&+h6xTJ&kvNN^C73zWvST
z^_xVea{C^>ym#O9FMYG;p$i}D!u6aZrhWFodsm*;l^6au-ZtMZ{=Ja>BjWVa-#^7s
z$H#o&tBkk&-N(QB)vF(U_4+B+&yT)&`*Rk;N8fxIANh)Z`RW5-|I2m!>XYC4*FJb>
z<>(jks~>&+@*7%3FE9Sl*Z*5z{r1wY9`*m88|KjR-{1WHw;zA{=IPb1U;k#sf>*zJ
z{p$~&KL2%`Z9n5FviHBbc$xlqd)aXvH{u^Z|KjOCkJstXKfR9_gwL=4<Ky4I`t_Tq
zU%!sOKK<tP)3;x&0KiuM<Q6CX^yVXN>?c0#>3II+YKtWP_a{HO-L!X8j9;^W|Ly5F
z@jt#T-#z_kB_2=fAAd$}p*!~OU;q401pak=J0|3<@jd^~kH2{O@{e!6`t8TRkAKx2
z`So9molpPs*Z=eBlP|yh;#cwIKKcGB{WSeJ|66Xa*B|QZ{U>j}`Sj&2zx?`}i}(EO
z>OEiHs%&pw^qv<_BBHjx8&BgiJ&j-cPTub0uMgeG<Ch=4`@^IkruToC^~3!B4^RE@
zeE)|<KP>P6u<D2P{U0{{u)Y7ot{?XIe>n8R@%|5|emHMGY$bm9nZD5xxAN8c(Ff}R
zzxOJA#q>k3(s#~3^eWwi^M_ugyHbAWRk}^}hhC-o)_&+!x{>{dUZp!be&|)Y)$<2l
zr8DN(ev-DI<n1Tt_LH*xq;5aiKfP~18QV|hhc72HUn{=bPo7>Sj?G*?_>dJ8ar)Kz
z_ec$LBvcV4=7+rWcFN937ykX9zx@3<|Lf=9C~xt1<qgx_8|Ie-IQjiP<TcMPKf8P<
zR#hym_ur|!ywmyePUp)zo!9Tgnu>+>{yVjocd9S%RA1hyUcVD7Dwfsz?=)WCslU8a
ze|e{V_fEIBVw-ZOZ*NsU&`r6$)uFd)dK%9!KU;4#-n%F^DYy8&cRF9*DZji^etD;S
z{Z4FAZt;8XRA1hyyu4F+d8cyyPHa$a@q6#oU*4&`yi<F5r*{2LY)@|Sd+#(~-f6tN
z(|CEOaraK~R-gSsDe-68oS*$dsqbgWf64kw_Fqo@<@8^Q{!;vxs=rkKrRgutf9d*5
z_g{woGW?gRzs#+^|4xO=sx3ZJaq*isU%dJ1^G|P8_tTf(e)Een3fcF&8Grdd?^h#!
z=l>sXpmK`e_jws7=XdFKT=(mzKgIulcgFw5|9|tl-yiz#^llg74Zo)!-0~hWqFWKL
z`WJdEzkBn$Povg+^Lkw{4P0e%Z+Kpj&EzutS8B8$sYZMI_y74b(n?pOzy9jW-+l7^
zH*dav#dYfHZ-r`l^<BRG`FQoG{9c*MH~B8Ted(Xhck<V`%(&`YBX{MG|D>$!`8oc4
z%g0{6At@Yz?A04;@W^C`sw%z3k8VZ#lW)Yoz0J~Y+2VKWrt+5$?*5G%{-^i<ZQake
z@ACDxpS<$J@T2+Q{$E}m-rIj6v)1Qc{QT`he*5!Srmx;U^zZWBzpSOfXT9_3e|YtF
zjokk@z5gz{p0%*vy&k^7?H>H;?o+>8pXjT)`qr2K`iFJ7@4eYd71vjM|7x{N&iAkN
z<%=EH_lbpgf4zU&ulLV?_t)0JUs?tJr_aBLWc{0Wzsx)L<-7NO`puW#9uZg8ZU4cT
zw8f&oJ;?mk;PO|Zp|1888*aNgE}S6pFZ#82FY=?WKl}KrH^2Jm-`{+Hb-lm;>hnK-
z{LPz}fBw6_e1UJ?eD%@qzy0L5pMUz%A3y%>w{PBF?7C&|zy9BU{^qMMzve};EC2KO
z^M{w;>ec&~`1;)odcA+<2di80&!4?{`uMlMeg0E?2H*1c-+mLN>(}vyU(+}HLcOrh
zzu?E8fBp3F>V$py>!+`O7r*xO<yXIY^VLt^YdHU(|NUS8+du!`9}#_j_xo4A_}5SO
zR~Mo9>HkpBjvKBe;yZr3NJ8#M>nptX6z*@_4<A8)^*O!muD^G<xDoeXyu6?OL~k-K
z`cG;&zWoDR<nE|>@2>w1=Z!!6zAyNr|ML3jjW=dIv;X(a)0bcT_WP$V-o)9!^ZEAq
z(=X#meEvmzGS7yeefsTJe|+N>rk>eP^{9Urq5bo(xn)0o`u1n9zW+)3;O}3h=kGuG
z>C^x7`4^wQdHVim|N8eoj{x#nJni3n{>L|8^Rl1+<X_`uKY#w$57wi;1@d)Y{>x8)
z&VT*uEgUGQ-tN`?Ki<O1+gtc@Ki>^9FZcZYd(Z1HqRxBE;`U40&Ho=zO9KQH00008
z085`xN>Ta)q8CH}0J<0f04D$(0B>+*ZgX>NEio=JE-+;;V{&<LbZ;+ZV=rZ6a9?g|
zb98VuGBGY=Ra6N81KpFQSYAu0Sao;{009K(0{{R7=mP)%>|OnH+cwhvJ%0rzooOsv
zR>W`W++@Z{lbr8TI}<zC>2wkeB~do75~(Ap*uEzJ`@6dUNRR|6F?DZl-Z@XJSitV$
z*#`??0e<-D;Ujj)UM8FSG`haYnK?F$WB72{)lJAQHeq~u`Ify)lYfTuoSkm-n<ULf
z>~yta?@=LR@53xiKZlDE7(!cbqj?x-;eu`BMVPW&F|*=T>;MZN3&F>O5o5n3Tec4F
zS)Al-n}uj6zlk!oj8-8F@8;nqXHm@N$$GPjf_NUX+bF*w<HC$EG7n;w%<=$)0}$Wb
zqbc};l4R`d*~?ewm#<`5mTXh7wurJkjb__CN<cqlL5_MidA`a1^7QHL?d>Q5AF^yU
zO4946T<NKBXLOUVS0MiM(W9qzD%qPPxrSEH;&}%@r<-72dNO4H2-6IKn4@u>s}o`6
zzDihcw$O$oy}}numZ~6U0;TZ>2@!k*gqi3NJY-J=x5t26Dt(AoVV1Ep{MR;0!RgsO
z3pRji9?SsiD!3)KuhS6f@&r-ercoZn*F)%<Wquo^6bxktRfv-y!FN>vsDm(ge0s^w
zE+4ZOr<Z4!L$dPo+0|b!K3uV%Pv5^kJ-<48b;&N?vzHg=Kb~EkU7W+W*X;EC7xwqF
z^B;#S1k#|P@NSc$4*)bmLV2h&b{U2h5X*#v$~NIVT1Ip5F23Fd*CD%3K8I-xPO(jx
zuA>Y)Hv@<Zva^cTQ6A(})^Kek0}Dk@nQI@<qMUGq>oDeOvdhlTF0a_TW5+aDxLQS<
z95BqcFgDpHiQ=5Cx2rrN?omthkQ|#J5MHO;-ffVvJoqh)*)mPm?A1DgFk*iXz_av8
z#%`1JH|(i!zL~~A`^Gfw5ydyVK*nw(U}F|!yeGIesJ#O*(jBtfn`nMR%|vmwk%6(k
z=WtEOF(zn@8sf6o5a$uhHrYBz;UB{FV-QE-iv4ZGUI4vW9!9Z5mx$3FtR;irMe%&K
zU4-lhF_NE(f9FZO9Njzzf#o7xvWs^R!k2HS=NHpgFQ-W9yQynW-@JS|HBA4}`NjG4
z)lcuPewkiD1YN#8#kiS%I6u33^j)}und{MaELz5@rORI~r~mlr5-M1MA<Gv)I5o>i
zO|68Q{C*Q=qB>qgOEOz3rw~iLw&7Knrq!Cq;e5K9uSPeIIW`8^qBvX}Os8+oKfIhy
z2kiUrS@DfMXBPYNMJagp3`#&m6#R5{e(@gVo-t!Ec*Gb?df{h?6`EtN=kp;^j~*Zk
zw@LgY=beHB#4;&>H>)6ruj>r^Mv6|STW}p%p2D0ae><TDVi+7b445EYoRrbe!v>nf
z{^mpD5!>~1SZ%!IAD9DxkI!)`g6?M4$iOiV!Z;)o!5cYN!h2lykaPp<$OZqTQU*~3
zg|1ze%EAl_#TdtBmu7+0Jx&-)i15XTy~9BbT?_*>gqaAY6ZYoyf%yrFj}2Hre-3Ho
zgOxZ6Ryh0u9N*v?@x&(xS|Gq0Hk&Zl1@6$;EsR(`k*$*qute7}&Rzkip#YkJA%ZIe
zG#syB{sx&C7d4<;v<%q**#`(qY;%g5L7E2lV)PX}_;rC_UH7BvJYpAkHbDyG7ue6x
z0i<B4PD`)P-d!@ocaJStD<C_;nd`@qF)~Nas5JIDSZ%>ev^k5ekFl?Un4`*Y`kbS8
z;CBrcqlpcgoYIsuB`n#m&PVo){Z2vl`}l4QfW~*r<$j+K#v5#wqHupT`uv~LLn?h8
zesd27(ErEQ|GM$NKxwXY;}}aE>dc9QpH_&Uvk88>RPIxWF{f^vDLps|sDg}6%wbVt
zl3GBfXD*p=3Jf+Chh#G#r3EQ@^t&@7Gt~ObDwGU@wzR0&r%#*glHf#vxiku;F;#|C
z=@1NqN~}rgb2z8A!$N67ZFmI3ASH)@&AB%VGC;MnvZWbOF!rdDpn7CxLFGOHwn){S
z7fO~b@FENnw4IXA1=YILk~1!qcuV7Y56&gc1rcK^nGvS3EkB_L@01=4iHbQvn}lWe
z&#7IPOqiAkj>22AX7dgw{#@P}M#=7&$5I)3GpCG<B@trMXFv|Q<I-DuQF=?jW)vR*
zsoI<n0_k}rb)i=%Ig`@*l7}vtnUew2D+5m%83BneI0fXe?TZ*JR5`nDP=+$6fFLa=
zB9Mwti<IUh6DsU2IJNbu)bLC8%!z0Tjrrxk!oY(byjOaV$0hGzhdRS2QD<3>5|amc
z$*Vz-7kuz=qR2O!_beYDo^Y=4mPaIs8(!IW+#z1V*|o~yBtnP)On85V<!I;QocHF^
zE|g4C;uFQ(5hH-fNr}_N2SQN##77^WvG^FYxZ9-ayJfdS+XZ`O*%BY7GXgUqUp-Qq
z@bPHWd~(KLAAP0#>sV%=X^8t>b#uwnMv+Wrlw2L}@gsJaKPx6{rud#A#<ZH}X`^P=
zCU)Vj4aqo~gR~nnPuf3=V;#k0*%V~)QT7*pa`E}s@yA2+)0iE>uLl0=`1HGpzZ-@N
zUq+)575P|XLv!q4oh;a9fF@oAum=^}Yy~bJJYe<<Z3XNJY~*K8M(i@e6Bm@k0`5e%
z3FfpNUeSS+BVB;BG9R+pHYcg;G~}C&8%U(33~aPlVSJt647Eu*nj<+t7a~e*ly(TK
zU{jv^tiqt4+zTagDZI<&`P6BRP%<IT9k@e0(SJf2Gx&QEi}NMunVJ;Zd$J1B>yQic
zow(ddoxeT%>BS|RJZf%}&_uaUBA3X*uUzM2b!Wx5jAc8eR5iyZJF_IuleOcK|IcvD
zFDpMM?K*y;W7T!U24)t;t~<?>DdC{q3eW&X@_ZGF%?E9(7~f@J3`0B6TiDY%-<pvw
zTEk5$jtHbO%eHH<1)-5sm%V)V0V%Fnu54>QC()vY=YXS1wh(jNJJ^p!F>b*IkNB<z
z>R_yZj|Ybb2ju(VfPIfb<BtRUO{L<bP%*SB-p2uZ{+yZZdZt#-u(_h$u4ri$O@k}C
z?TWTuanj|Tqt&t8o$k3>Mcdlxo~KoG#yj2f^@@JQJ&)^rl~K$0z7Qo8E;4GxUY=sK
zI9SMdh{}*=Jn)9{I03Ekeg7W{+bW;~h*DzH{Ww&2>i|WD?K)g%VSYf7Jw`MGPDzys
z9^AmhGak@wG9Jo&At4CtAAVqFn<Pf66g5fIZWG1Wl%f`ix~-y<0;Jsv62nj0bGlJt
zz)4ZJ8>KTYMZIp6Jg7+0|0tq~T_udxUp#f@y&L1%`Rz>@vn`$*u@~plS!~Ymf&&B=
zev9C1+z5eHw3%`X*#C#sN$W6znA^s<p24yT>!S>WqAcRD@yzic!a4hdMeGL@Jz+;j
z(V#deL|3AZ+z+T_$IO8LqrxLVSj^|eR1Jee9-O~8dvpHbCowGKm?@pXgLlP5a|#yv
zhqJ<m`cc$u8pS6qHDKtZ>Ug~65-`B2g1aCnhx{VLTwsAc@$WEA!c1o2VhE8*8bn$2
z?=V^Nf`J%Mg>m2utQKDn06mw8mh7OEdM>PRqyuquhCi=fhG}~6>gDwH6bxNmOkclx
z`|775luzGJIVaPL4_DKR*VFf>=WkvK^Z1j7`8JKAN2%m%(Ja`BvS}P%1M#0jg!Csi
zSYv|o3vCXmyM(eD#DZ9?9hTZcu(nPMNu-R|3j~G?%3^|iab5{ZIWO{9tc7S9l(IlE
zb0Eu<(5%n0y1*Q&L0Fr&dHrrSDlt-VxR@TKf+{*>T>fjZeR)lpD?ca4>uI{33O|r;
zt~N;=mV>jA4jHvvXI#r+l<!vUyIuS4)V{m5?_TY@FTQ`(p@sz(hJABZsdruBh_dh%
z&d@qnbBGqSnp3oL)f`jSsKPl~k!lXo(o=Ji)|i^3mDPm%2q^??$6#{GPz+@7^9UqI
z`n-YU_on1X$H|e7lp`H0M><-Lbi5qth&j?RbEKo@NY4#yKZ8^y2WI(0CW`g+P+dDe
zL%!$XV*2<gTF?cOrm~DEO=THcn#wZ9G?itrX)4R8(^Qt>r>QLCP^oN^-i*n8c&|og
zJJW~HbQEh!O>L>AEw#0!j<(d*mU`M!zf#(y3eRl5fh$luD0lV$-x)hDw_=dPaK65P
z>=(TF{N*@`zt9~Pki^A#dM{44AWR{7h1~y>Gl4nL{AAct>MqKKkVtV+$~9XyThQe0
zDHFQ&4DXLx@GIhw>3_x}BD!9^TqU<db{n#6JIm8xp7X1;V@9WFBbjD44_ETr#5LCz
z?pyg5W5A37?L1&-eOxbeM1s&}$K2D7JrMbEF|$b=$J#YgT0hpVmX+GZx>>1hte}<J
z##&mbZLF%5+Q#}?sco#ZmD*xmQKE1WEtfdSiT;FWgc#(#N^$vz!%_Tl)D@Q;#6F?P
z)AfBKG*~QTT(VgRTf{PG@x~fq=)XH&kGcc)s5@fo)y<@)D`xA}%|xdwYU|a_<fkic
z>(y<6i+5{Hzd3qclSi+&XY^Vf(JPQNR<i$wIJVaAgT%45cK%o#Ban_bM*AIcTvY4h
zxTx00aZ#<0<Dyz0$3?Y1j*Du292eDpP8=JiyI%wwrUy76k|!OJtjotlAe5#5;ZQEG
z{{Wrf#o8OQXT`}41YaQ_BM^i{TsEq_u`bFRO}LY9Z^E542f#rIU5tT2eGnX!O^b0b
zs1Jm?h^dNLS`kYXv9%($D&lBG996{CinywXrxo#35nn6fe;hOiN%pTTU12TL<!3ZR
zKAAga_>O^Lc<_B4+#Qhopz@_<d~g_hPV(~mor%X|ceZ+ZCbs9Ya>&eqzS`#1#e_<%
z@bUI@$ZmqqA)t=$**w6@Hn(_}Ck(V(y!MNCvnEoQSh@R1&q@4x55!k0?nTAjM_Ei4
zcHqBc_Bl$n+3KGCbDQO*k|`CWMOpRN<Q9g0I%H`;m-Oi}_adR|LW^WOTj8O!xN}=v
z<!5P_ZC5!?5z-1th9DQptJhJy*+S>%+*0)}cf3J373bYJXG$wykl!!Gv{Ky(RE8}d
zkKC8WuAoiw&TQ@xI%IJGH|h=9s!`uhbXc;wEKy6f-A9KlyNHEyu4^@{ZP=79nDuQ<
zN3%|!X6>$K307^#)X}ipr{Ucw%^fH$Nsd+Dw{>9j`e5AckXd!86(jjj+dp=o^!uRP
z?ULEYC2NOEwxk^$s^uyC_NR3a(Zf3YK9(ik-5$&mm`>?_`(b%g%`!@Hat8qv4{{PP
zM~XF=eUlXCuuT%v^G&N{E}rzk`3onw?S|)a<^4jNG+Au%ZXs$^8p{%zy_4-~!RL0c
zCZ@W3oaA7s#G+soUDFJ@9<kHw02c^lww1=jlLX3Sdt9Atcg?cWP<65$v9o1$jUgj=
z4R)3gXAwRM7Gw#)61Q(jOT3u-Om{lPXek6CU`RTOG=s0pWSfqvbNACjHj(+El32Ax
zovjJc_OP=xG1?w?HU(*G+(ErlMjkW9Dr`dw+w29~>IK{00ozfBlLFgNVVhdmRxj9g
z6?Quin|4|S5K{$WX@S_ifH*sVxaw@A0I^gcwibv}1=4QXrtM;3+Ez_FTGQ?h)1Erv
zDyALPw5v7ksiqZGS5@`2s=m4=G;?<t*Nw#8_`=gOQ@^t{iUi)4MP^ZC?U&OVm89P6
z$m#*$j+EZ07nt=V-@G%m3B1V@e3NJRof)W6EUqTypq)vmDs1dpE{$SNtXbBjtg2<R
zkL5jJn0gqxd{>2G^?|VmX0s1wOOIKXSF4zJ=G7|ZJsdRqIB4~8(AGPs%ivW9cjm^b
zgL|-H_F=>7!-n054M)$0Zd;+Uu`^{=+1P_Rvk!GvAL{Hr)H!{qbM@5eb~`F{JGTZZ
zb$jq^_Tky;!?WFoXQvO(ZXcdKJ<q!Rn#%Le{hG@29-U(L=@hF^r`UZu#p%;2Zl6x^
z`gDrl>=a0!@bwY%WKGXlL~->n6Lvvce!n!n+ap=>EP~OK+O^ZFX40kfm3AxM(Oufz
zct?+EH{>0irad?5=r`>lR7cm{>3X`O_wIC^-O+*KSg(7#R^@Xa{;i(;+dcVrdh+k~
z<lpPbzhB|Mnsn;;w0iPs_vF**$*0?sPp>DReud9!Hmu{v?#YkSlOMMyKVDCM{0cwS
zOj_r!)6-wKr@vlLfBlNT)kIl`-|dOt>xtj5;IF2tIy_!aJbndFHJ{Vj_bc|*JDHo$
z*qOyMcFia3l#_!r#4}Rm-gos9wDKgzXvgJozw>T6^(H3W@c>8Byg5mGIed$cuzu#(
zyp3V;tJ&Q9^ZO;lk$U$dccrY+A#2uT%???sCTn%b+BI3bL)NLuIvuiZP1fy@^=h(S
zhpb<d^)<3GKU2fNuVh_v)vt8Z^XJU*8&~b6&;h?~8lT;>)hF>N+6T&GR?0<OVMYL;
z+l=Vb@uh_Lc~(ZME2^4DvsxSo+SIJSm7uD5W;Q)D_VG+zzqG1#FjgIm*#u)X!I=Ak
zu^V8_b})7wjMW5VH^Er@f^iyPtadO?9gN)s<21q8`+{*BVC;4<ZXJx%1miZrIQxR}
z8ep7uFkT&u+XUk^!MOW^@f%>=b})V&jMoI?H^F${Fi+gE=S)9Wh`YOLQwIL13!GJ*
zH{>eCs=j(Hz82y~joDRow<@OC_4lG*u9r1X{w`2I{D6;dsh;EPURIO;M1#jUo78zQ
zyKR`#MssUkG;^Zr@oKtap}G23CI&Sfqmq=kqUSVAlW3q8YEbh1GtI(S3#G9PBi%Yw
zYa0KlhgL0b5@Dr%c#WTSv}RHD1WL{D)|<*T6@K#-l&X&#swo<oh5A9ub9C$NYA25N
zOFiw#@B)&6Wzf~0-QX&DZWMpUH;l};D|+)^<p#IkkBzV5r5!Ki+csZ^={m@tWb7?}
zKL6?_Oww>IQrqCu29yK!%_dm*`vxrGLynpX6DtC0OR3c*!vJ-6AM)=@q69xp{*T4~
z5jVo==u{u<?$z_WEn-)UB?wG8>KdKIaqMfyq<dz^RcrE*%+k9-TdekJ%c8a(3c002
z{;kmL5?Y5fZRm^6m-gB{ty{D9wZ_4jExakgw>Lh!<gT;Zt<HYm+X3f6>2P&)e6uxv
z)426O)_k&Nw+<&;XHVCaZ4KJm26s?v?`v)H;F0F<H@{f&{(<`2E`0ds=tzAFLU#{!
zgW^*s4<KJ+`ub453d7&-tl>Vqw-%q_%UfL@%w22GwWHNt%Y1luT|Tv0=7YQI+JDep
z*Zvb?+2jMvwI4p3%|AMJ!NS9PY&v|DA-sonS=#<~m%+lryX+Wzq#?YAc3Ik1a)Fvl
zlRv>B)1XEt`?}M*fVH`^V+q@}!y+dXgO=C;J}sXe5pOOZ%0I4vcROdg*C(mFh~M6&
z(K;+%z&*Yj*IvUn+_&sMtzUb^p!&v5v3JU*_%<f-+8h4L!1avZX^!`w(?yXi%<(-(
z^!(p5h%mVyqg$!*FK)0z{`rOO%O2Xx8s$qCC7Od>TR5>>Lq(x7#9t~KU}gA=$l;an
zU7V57uly9p@lMKGUp=qz)bom>o}BTDXvI>av{^j@kww}w5UMmwRimkDbg5dUs@YUE
zyHxE`)oQ9*U8+v0YByEwE>*Wwb(*S9m#SB)x=mHLOVuw`y{4+ydO%h0@FQj`cmB%*
zs4M<*)?B^=b;-=b;%_A2tfL#9{LhO(rFi+OG)51nC0l%QVGF|x=XC*s-cg(KXH;)P
z{x=ci6B+ZHaQ+((Qsv188raYP{R?IUqS^xtat0_~{Ui&%6w$0NH(JWgmU645+-@m%
zTFTv)a<8SlxOH4q93P+5`tRqE{T3&;{AH1(Q{2~0PlO20@wO-;{WiESUo4p?8&>@N
zk3;%v7_*R1nHhG7goA%{W-K2urY8@>c}j1(tv+O2_Q%0N=Gp^Uz+b>=mA>GKnw(oc
zi8V^?tc}uBrGTLmFckq)CtxW8mQKJ{1Z<svqX;-U0ap=lbpoCu;OPW>ML_NJjqGtj
zTFL9CL8^?Lay1bzgcEh@DQ@(C<Xu~DBsX?`-(S&-0JD-j8W-;*f(a00ZD;)yAc<ds
z*dUAKNU=szbje8aI=?+1$y1l^uIg?(d5e7MZr0%;dG3c~k+)CVe(NWctoSa%at4U=
zvu$Swpv}8+Wr3Y9OvaXbQ0mDx<F<q9i_5)LPv!2W>;HUC?>C>XZ?8Z5o1JsCe}_k&
z&8-eCpD;;I-uS+{Vlry)>&efJkc$U6C_7tKp#vZ6-!4pV)s`nWK3nN%i&--#P9<wT
zoE~qx@ZY<JF)d6JhW+LE)p}yA$M@>3dG2YsmoV(FORv^bV?DW7Z_Q^<i>QQQf3<hD
zo*C=uy?SfjdRm$!4Et-SYp!~mugjkLFYT4WdWibW_co_X{&9Q<aPY0;xl#l$AVY&6
z#>?1fNA2UZrFIIfKlz9H9{885*Y=8IxtZ!I6(zbG{eBIhhZhdhctZMpF=u=491fMf
zEiZz;ufcg;puvz561<zz?J?DvAB}bWw5dCM?>3*{p-TVu!-4zFs0FKjg=Blxt&j|_
zdKHq@Ri{ESx$09$_EudA$=Iq#Az4~=C?rfL_>*_dSrp49_;NYZ%jI^tSS}Z@AwTNd
zW{>~7`L#i1YH5j2Awh!(ef&5oLP_sR5_or8<Z--VZ)dgn-P~JFHgCI(FO-ReGPzKu
z7RvNOnOP{av$9=VFgqKjDq{`l8WH|(BEpw)O95S>(BPnLqth9X!Q$+ildAj(`ld|a
ztIf-RnU7jW+!?AaIkeg17Mcvdwq<S=W+s2DF!nfzJPvY7XZAqmQcGpqaTy8P<;Tey
zmE+|{=q=Hkpx7D|pF{CAC^3f;Yfy3yCD)+T97?T0={b~MgEDg{vj%17P<9t;FaY0_
zJ3w#C8~MZO)o^4f=j;BuI<w*6qw;S5$Ia#06ddVc;&AplNQ>v*Rq*p&rkt_uCtEn#
zK2CNJCqIsp@8jeLaf;(O#Xe4P5T`tjQ|{xG2XU(7I2U-N4&v0uaq4}X`XEko9H-gG
zX%6DF$8oCvKVzTr#P1&Np6`zzKwh`(JYV0$;l!i6`ytTGJ4cvL5pbFIn2Ouc9qp3O
zt-F3d)h-|+PdE9)=AX*VzXLQulsC+_u1UJxeDC|aaNRBq?eFeNoLu)CwY!Jw(CQt+
zKhcpMvn@&d;_RiK;{ICy|5i@Fry-UJxzFk8>aJYHG`qT!(qFnw`sx*<8U|4>l>X-1
zKY#s+-GA+$pYARnukIe6zFhtX_3%>E`?mjPI56rmhMP;?b?h<>HyS@b)ssrf6i|!8
zr!!azz1u-1h}J)(5AQcG<s|tMZIwaPON(x9?!M3+&tI;}joKr~D}j_tx6eNN*Fg7f
zm)mV0+ci$tW$#saUP6=<&v%a~|HGV&l+C}i!|dCS*ZGgP`lH1t!{0pZZ-k$hyzZ4W
zhS21|*2b#3Tr)qLU=!2LlYhVY<UfDLM@Z#|zq!Bi@8?^#mgWW8<CmXy)`qqh|LF1H
z^=fO-!?#1*QQme@(sC1Zb+&$0OZFyI<|o9|aiPK2Lk+&JG)P35HCRgyHdrW#_FgVp
z%gd{3jfoXvsolnfr`d+9QgX1_$}+SopqiJJEa&+4Rr|Kxi{W_P+LH#bJ?TD7!R~I7
zX=m&=zAn_8&gAG?2h~pf@i6p;LM&Dn7lfdE*+sFnEV;dKJKNGaj)9r8iiI=6XY~01
zM1LPQnvEd!tI<0kWh24_B9}lu(s7z)*mh}mY<=sfmVUj@Zc?|(?~$P|e=3_W%agk0
z&|Xx*S{306Ig(<55_JR}bw(|8W=pF}V+&^xj$&h1L}oZccVFU$BXLK@O&Def&^0<;
zmyU>D#7A@^Bf3quw?enGSJZnuuas+gcuA&bL89jtaO%{SX<3ozEt2gSkx5^+OxiBV
zR+MFVU*;lf&kEi6IT6q-@OF;@JL<c|0W)x5iRN!hG=Cjs_2Nu6LA`_kpI5o9bltPQ
zgE%!)C#SB=EuChKHhR&3wW=?(8)TNN4;0obwuIDgCi2U+<l^jXW_-`j_8U0gw=Shx
z)4ck&L6dIA8WtnxrJ_4leXOVF)%WYITbxO(_^!myhs>uj&xgFX@qg+ev-2)-d%o28
zc*8?$-yUk)UL3(Z>%(L>nvsSPZXc$}vLFJp-Kyhx$%`68J#8`50nwNrrHqD1A%7do
z<{pG`NuOl?MqG^)mW0WUn0LoDwWM3~Vrcib`li>pzPAlM{oVa*S)Gd4B`vA3_WgCe
zC9urrmAJV~X@2&PKT~X7XEFCK?%73i^mdwp@zgut+HIii+PB$8toaJq=Q1l>d--nD
z&iUQ^NN<47HfFVg&5s|a*Ajl6C4VinFDF^g(xbB%26uq}-s;TbSvmCU75}~QV_DMw
zL6U^NRDxdOOG%Q<Ww?1??`VwvzNCJIRG+V3%JwS)-JHFZH>}DF$`70RwX0Bd5u^;T
zoO5}7o3C%LpI*;DjAKC8^Yd+AQC#2lH_x%&d>S77ZGTlU)V&dH{Uy<fl&KzDSrf8`
z{IOjinJ95PYYAA%r^fY^m5#J7l(UXEx8;=Kg6PWM-zVhC@%f>&Tdp6x87gm|T=~A7
zuUWSkwES-KR3_v;m8<f8ZmUBVn{WQ%&;MA6g3o{c`*xM??Wa9S9)(~??!=hcjo;qH
zPENPkmPx9)^S;sR&hIyN7)u>x;q7*{B7j?H`6-=w<0rns(>_%D(C>%jmQ2UnbXVMZ
zE?QOc<)_N=Qj@;Cv0*K*XwUGS0*~oo*^aTbun)y+c&AGHFnkul<Yo@u*c+=K7Z-=}
zQ?`_}<zYwz+HybPA1gQJCTPfZN;CYeeau>0X_3!N(q5~4t66H~nb9Vda%;&8yQq!r
zH8N$SY&)G=Y)C9MRC!;CR$}gjHfB+>nh|d{(lJn0J3}4NZ>OY7t)Efz=Y^J+jgglF
zh4}@3A0cr?wB7V>_OyWEP-e4=Wjnk+f{dSpP3~ix@lCDqt%+aRuy$BFNXmYP7(NbS
zSS}rTWwoh`i-p0DZM~i%iF#<OJpFZ(Zr}svIyRZNvd8RC<v8bhEpc;iY;*Q_pZe<(
zyA<z1J`Zl-%HPIvwfjw73Y%g1`gbVTOz=g~uocBwl}@^}Z_u0Bp`pK(xU-(<Lg9gM
zqy2j>6nLpUS$o~^g|FuA<Ltt0Lh6dTCh_@PRPvb}$w}vX;uo<WNK45N&E$`q$)4FC
zcE^wN1#PC6xKaAOKI5bgY_4BSj7PUpShG&r{9D{g;d|j$L;YH{m(94ot4_a-Z4V<U
zU{fCp-yYfdt}|R@o&I02PR-T%^#JG87KyedrPOq7#sRlcobn(V@7|4V;p-n~@kISO
zh7NQ0y)~C#0=*LAy@}>PDdwN-R@-~Ht89NE8W$4ttMk2BV{2MzU*LA8;&ukTI(xe|
zp|tMij>_TpG>{^WS7l$v0r{4PU(@8fxPO@0kAG!Hke~Pt=rp-XO8?NJh3`x9{=;E<
zsgntI(2buE5G*;5BT^vu#6Yge!D8>^(cZ~Lp;(-OeI1B<_QPeHoh#(sRCiTmW^FM-
z>`vwla~1XB&U`68KGxAKOkFJ5>;sNv`PC;rrZfBO<NNk=mod{U*P*HlyjhxbYSl02
zLCw?Z<Wn2d9G3pt6w~lBV0-Orcs2ZT!xn06O(^e?d1;2IKHi(zAu%Zt#AIY?Y^%U*
zp7N~$Q{%5EVIF`_!c6}B?Ig?t@Dk=Nb$;0q@~wx(mAtM!EI#Iq9!~R5<q!~>-MD|K
zTVd~?+vfA7Z3ufC68`1O-KGd#dMHQIKHio6?RUALYM2lSKlxDh#Fhz~=f}2lpzc|?
zD{JOuzNEj4?cK9)e1BCY5S~0>{>wj<o1$onXKOP;c>$-)x}*Z%`d%i%t{xI?g=jk*
zQrpyf_5z|{=;OT8w=^>qrlHq90;b@3euO{2c`Y&iv01D(e^e_Y@P90~8w}0X?F!eo
zF}-a5+TO&&-(MS^iLzgf^!#dt&J($-{&c|6(Leb1-B8ZP^74(1<($e{g)istOm)Qg
ztkgNH4~qdfA0cFgVALAaTu-&t_>5|Ey;EBgL~DD5sO?NpW`tsUP}}%y8QC~?{-bbH
zZ`}Bdu;AfVZPpRQ*qa8i-5bV6D7FW+jgMEzfi^Qp^nZd9BNW?%+Qugda<6|&RAXv{
zUc|fI-(kX-uFGjM-QKCKGnf$TFR5;Q>2L1(pPRTsPVefaIg@@DJkw=FU&>bdc-JOL
zKi@+I=yL91mb55+xlQQtX-D103E*ZKN`Kl8deZf_b*Vfo9_r)f`nw8qT}(%}`S1aH
z_JMX8Z9bLjK&tjrm0j~QHT$^oif}>kZ%qGtJH_&sKm77b_kOed@2~Iwu=(9j@ffII
zI%bkdg7rM95Vfu^`*PmrPBZ0Q=XFlCtb^zDJZEoX5<-?4*HSy?kX_W$i)@W)kUGdH
zV(^~HpjvGvbBfZM)OjAF9crr}C3n4+mO*6N%g5dbZEOxaI%}!zURz}o5SvbRvW*PI
zAvtNZ%aLiVs5(Z%ymfu(9LCYgT*pNAu``+pC8%+(l?kzP4t10yNN$XsLzpN~uC2?q
zZQHhO+qP}nwr$(CZQD3ib?TkT8}y|6PWL$ZlD(4rOJphQeXhhr3sahl>5My7Xi7=Z
z7Ev=|ZnLH&MXq&=0Es!L*y#qyx-}Cuj{7#&RWD@A)h&f`sGz?OzL%BCgGdNX$5jVo
z&dU}f)w0%^&`oA)Jg`QOdoUDC+U6;2Z~xBK1=7W#m!<HP{e|#6FFYYO!Lou@38{Bs
z$>dPC7|^}Rne)^Hr2<2Ho09u1XPHPVb!7kr3<-ibG@gpVSljhd$9@2V1;sR(u~6t~
zGTZ?8*(xD|j$50n!s96yz4qDwFj`XU-is~evk9$4_=wG87oKLeO<2|;YFtD{FniK0
z8Yn*RwN|E>$poc1hA{&<bI1d&6WlrkSr7qI&>J?-oGf#?FLrHwPjb<H(8?Oj@tR1i
zw8mtNV^rIAtT*H)NUut|GO<fJhT6<0JriP=qiLW9WW5(qvCvm`MYRFRXO6&Nee160
z1@q+?k_d69f>OrOo(nilYgPGGPAY+LOCu%UM2330aE_)ZItpGlU5=<0QVSZ5`-ras
zGdBh*jOgVy1^{mmz@j83PMdE6IlV?bEW2-+5_Em54T~Vmwey83DMX8!2|yUUI7!Yl
z3OG^ZK0|du<SP3tf#1*zJvTCTr3b=Q0;3h&e=PBp(+GtNWE3ej27ApN7e&I@ByKSh
zA}w<Q=|-WR1=~gd4J@H;S<hl!MEZp$n(hO}?^J?lgA+^}h4lg$3SQ<g?tKbs)P!C&
zYD78LyI#XBPkUDZt^26?N@kuUW<o%%yva=$+;5Yw-R`MRdeI5kFH%Bk&Hz)_K@f``
z6gv}1AO~bOHDNI?qdq91L3NaDz^knZjtZR9bW14YBvM9j-S=V|z}X>F213R~3UWn=
zIWtBnN{lKsb5ci~H$l~^kYFolaEpPlVZ}(LDL(feXBBKY7s^+L_hx<o1uofO5Iw(`
zJ#mEAfes^_bV4t?jFP4aj*LK<#t>z>f-+8;1L2}evLT?>(U?aB8Hv<uHBlsFLRDX*
zKzI@IiYq0W)FM;`Zmx`V<%^Dq*z<si8Y}Ld&%wAg;H*n<G7}cdZB8V^czlasQ35^2
zuuK_)+c3mHP`EWt%>A#)GpOXbXzU_32KZA90WSU9VlY!2251`tAk#}hHl~=FXMHl8
zM^4LqL<p80oL+|enkoB4{}j>Nq}8w}p4EF<2m}KHUJi*bdl9olR@YIcsx#D#Q-mja
z&K;_{*9+xCJ`B*(p#PwHdsxz4a$*9Li&P7oYr|P4c&5Q^3O);HAhZ`f<_=B~u=E@?
z3HFy9QA0pkV)~UKmJ146+tzbpDP$n{I|f@kt|gSas1t8bW<ViX3?$qZIR&LWVcrDF
z2Au{fV7a;vRN?~n2xfwHJuN<HS@{0tqA0MId+=uySX>~ZW}G=@2yl~`cSN`H<oV*F
z_nvlHFzY5vBR0lu?!40Z0kI|M1|EkHPY0`AWNCvQ8XCdYjOme)K~w;2BX7yJ=At;%
z4-pJ^jk`H>9-=&A%!?o~fTRo~FVkqT|CU*1&1>2XiPbxwM)VyCR>w6>@E}`R_$vl2
zeUV6T0lga*Ss+clauoEbCR_o5re24VhX{HH6a#-b6R6u7^gO|jrdx0|+RRmkCV~P#
z(~Kx4%n$~C=*{>CB~is{pE)TFGzwA&Ru=>%!DA)4qcTz(I1~I+h~RtyDxu5d>*S+I
zArd^?E6I^WgP@YX&qc`s1{MasSUyn=!a;Kgh&8$7nym;$W;e(^y@XciT>uQu&Ed!f
zMtpgR!Mq1!yY5PG;dP2?Lm84^Y!Uq>;V+mYJ9<M*FbkDF%aY(1fr;@&t}?l%$cB9-
zjN10_IS63Yz*G*7uV>f<NNd4#SV(cW4ON7>0EUQO4EmWg2v&q$ioEfDM{w;~gX)B}
z#J*w6fJv@zqURIT+#e7<GI;tFu;<l5vTZykT;-UgmZI>G;opcD0v?3Y!Y?F3+qsA0
z-3rPE6R<MCs4AY8ZbY%h1!9;bsKFit6w{0Y6eFU`)|6lol=JwO=|L{XG89kH;0EkL
zy%#_wk);ZZ;1!X`1V0m~Biv+zTArI^Y#^w}2ud!%VerO+Kw|U2Jp!`eluREgWrTEN
zhbiL4g%OmI2r@U#RPc!72nNwAE4|fEmNNxRGd7Y)23WYogkOnH=m-8Z;wS>dnTM$d
z%FTf@xxv0v!ce`TE1^A!76f+(+SGtKkbjSk5?&}S1g?=^i{%3@79Yr}OIq3B>a#)c
zik%Ss5{hBsXIaJ1Qh@(#5@?uBYl7egBNVH^w=+?c4r>g1oSu~+{?J$iUVw42lEptr
zB*1_4)+}<t@<bs0ErKLyNMczhZ9v8B5~VwkXVq75#>7FXInRn=2okYikZE0V@J>m7
ze;8jPQUR;oJ-GJ>uR%zJqFBUa8%c#&K156i!AN}}xUOS{@<4ogUex}R5E5PqfZdWN
zd>f-Mg)$RCti3G+qM!jF%|I7(CQU>KR1E}XOF@5OaG=UUBOFkuZK9?VCLtP$!xLra
zvYKXIUjT$AB=D##QDadjNCexw#Q>FgD2EVFVxfxR8}&ps>`a+U=rw{uB0E9C3beQf
zhSeeDRh}F!ZTO@jdpNP@vgQkh%VEg~#8`=V@QD}5Q96|yq%Z1aWr!Pt*DC~en(zV6
zps-K_CLVq$G)M+6FF^(?*eiIlEetKoKj$)l=^cy!peCRI72|_3H<CgjW)78)08YF>
zW9S}$K837YGE7VfJr0ankW@(?_W-<TBrhkY8E*&%k|h;OiRPsJA(-CdVi8fINa~_W
zFiHDJ?pXpSL}nCe+JRTvNI@_3X418REmy{jx^KnBVOjf`(J|zZg(RQ)aH=9J_^q$g
z%R=cPM+ifc8F0ZBQ!}H&Di(PZG#JFh$ohx-<j#S=OorHTD*d1+#lYe9cX_ATjXm+^
zBUgXX{mrJ%7RTWW6`Sp5GGNk#orF`)2|R4}#j=}wkkIb{JR#>{UtOuUx_aw&V5e}t
zH+cC~sZxbXlC<)$!=?<U_7)@qBIl8SV?4494W3S$;BtMtK+(xb7`GozrUaDOjkB}W
z%EBv97}a6dlIqkEz}p2trgYQ75m|Qw&=jsjRUt|s41o%500>FLn<HddK1<Wewtzun
z7+0fd8mt^*!EJa;4)_*OM@GQ2XBD);EkJ+GX!JY4GWZ0PxeMhA_d=$i*=-qxB)$y+
zdB_Y|B-{+QC0b77MaD9?3~XtA&a^ubN*R0$yt`ndHS1N5Dkf#(U}&uX)!mRyi58C~
z(KxKY9cT_z%Mi`68d%#{yah}wR*7|n0F+Rs&8{U&vV2>P+p-uDiV*mM7<AJfp}mt6
zxdLkg6Cl}55KrQyC}0H)Vgs<~ZtXM7?uO+M7U34oAVxb@AQ})9eC6*J+?1A-UzDM^
zKzp!PmeZ85C3vethS1Uxx#*IJlWh<P%vK*t1$RUG0S0IvqeRCfg2^CZ1GR#rpaVo_
z2Ea6Mm+{ucff8zJUjVco8G-iNQ3>-w65-7&8kVay1SEQLpeD?=1xH}0Wa%r_2y!Ev
zO<;ld=Ao7x1UZZi&W@^u-oZ)Q7(=HU#Fa76g;Wm<_bZE~Zd;N{#K?fEK$;z3;W&Yv
z11yXPoI-Md`iL%qK#Cwz1z-u_K@`E6V<U?oWWBC^P?_rSTZ0#QrK{pgkSA;@58RU=
zG71s~<OqCSX%J0QatQ0j6~U;JAyNum!h*8FT<nXI<qK_ssDLimYUj3{^IK>LK$3Gg
zEO^#N=Puoax9)=db*)x)tDU09n`}?3MhW|+17;((;2U_iUk5&^{(bt97*g+Ju!gSa
zLM>!}Q3N?8be5SRyfoh1LkN=RAuoSRRD&jigngO*gI}<?7rmH!hPuTc&y<Gh6>lGB
zd+wBLhP0Lp(13=jP`(3@g3kGLZid}XP=)))GLeqbW)`T;iYP0GT23?d0<6CS@h!HE
zB;Z%wWydZ(66rM38nsdgvh>oZPhS-vdn5fC^vM+J+192kiNaC~;^;;ei$Y>y2cpUk
z<V6ywOJCl2r;kUW62(VURbSCU)fU$4exyxElb(9bo_f;~C?g=>u+6M!(g&|Uub`#Y
znG^kO6~@E|AkSi=zy$1xjA@FrOEi6=RzoW;TeO?u9&}ijlaED%w@k6;&mU<)))zo}
z2>^e_51&?03U~tX<`pZKE_?9_-8A&zESgbo7RG&q?(!cZkbY?XIpJXW%ORV?h&2oW
zz#b3HSESM99j=n!ZZnD@X_gAsIw`>lea|P8%O9wBI|<c61;B{jtG2ygcsUQ!y^ZSM
z)8`qOHBsOF8ypIfZHu3Who|&X_i4&7%7yKAL^*!Cjn&mHL7tgs%vJl)4ZFy}A&^43
zQD8eOI|zqXO9*_3lrkJ3)AZJY-B%6brwq9O_A=WYLexx<z~hWeAA&m>c}bK3qMt8J
zh#JxMXPyuzuVy$lhC&Evx&}oJyagL+vaq4uAy8}c1H-O=muVz%FYz(d#uI;KGXr>`
zs-r7L#$_dm{B6W0@VwyT8azRMTq#XcPW3%dGMfzcG#+0iz|@UR%c8dL3R&ADAU|{*
z&Ad5Do--!TpE{MXs~x5!L;K8`qkM{^*I>|tX-i+e%^nSS<K9k@s3QW4iKCFrFJkty
zkt7nY0xK!9CMk;#I^ryw(rxfr5z{|GBKUKN{t@+88l&D7yCuL~5#E#;nYvEgz~3*L
zKZ50n;e+Y)V@at5;+{li?wlWORM{|Cx}D8YBo$>B>=(D?s`WrK;4ij^Q!l|>UoUS{
zke5dq%Is_2k-q~O**rT>M4*F}0LO#;#NWzh|C{u*V}7R+nLeRbDKvzjsP?vq_WLCr
zmxss0eFN0-(4At2({aIK?P8F^*mE&#M-2miHTR}zZ~goWi(*nb>b(Rp<;xi;Hk$0#
zeoTK}RHwo===6~f$8H8Sq+@Owv3f&vd|?e?fCr2!D;n{4+xew1V0-z@et8J;&DAJA
zH2PBsl12Rp>c2+Af$>oyE{JM#VGc`%6C7Hx&TR?5+WifVmgD;o;2moYZqho@I$GEs
zam;(7KFvCFbcFkVSofWLy-n`8?z~Gp;Lm9SC(v3N+JoCVH{(9!D`F>KnZ1uFxnw#w
zDnq@Da29Bj|2&NQTZ-e05f1C`;TBD(;?ygA1uc3dpPuT<Uv8GgHl=YoG?%%qo6)ba
z&~%m8mWjHz@E*A#a79qyihb3aFPgMy%n_jsB&9e5-IyqD8JRz#;f|?diJUiB{WNQj
zO;a++X^?o&I>CyIZ{AurAi-hlSxX;=&T>u5Js37^k@O0^J5t7lpx<B<Q7GC;Cn6c5
zTY|6SCy(81rr-{k=M=f-1s<fdc{W)}6`l>b)2WY~4}QbugR>kynG@1Q#HS-GnZqB1
zeROaV!JeNcUiFuKaVGylBFn+MXyS2A-<xpC=2w=Im&J;F=rotOC{Y|LK0l+{;BKYY
zdQrqrK!ix~uJ91o^QSNU;UTqOGn@jwPXBQyHy>C0eIGtf|HW2W0Dj}l^v?L+_r~nK
z%>8lurm7f_pG0wRNDC+o(MnbThj~|8MRC#lgv9bGIC(wX`)m19_3m~5{XoOz=UFCk
zd2yin(uUo7jcA$>H&L#Odffv#NWddXach3XFs`Eqj2bi={>>%)4}sp7#ZgoN?(K>z
zQeZDKqtEX?QGK+U^kS8l_4=VuLv{*62G(nqmZ3@{B^G^{<5VHnlVSW#1m9jG#%HIQ
ztFx2Es=L8zMPQfyu?SRl`blNn`kOghzV1K;P#)L9600#AT^i1+TriprkiIx4PgAqH
znx)3d6g>s#VBTymAZm6sIj~y7hf9ZR`p`xvS3JN@iE_v*3P~#Fh!%UH4ZpV}ibB6m
zhqsa?_tZY-aHAXJ_|15VF{@iIYA5TQidF%7wvw1eRg<3ETN45IH`I!G?Ho51ot|&D
zHr4b#dC`2ls+oxcK%ndyjl8nB1B(NHGs1rAazx<~U@!i%cI4CN1#`0Tijq7lglnu}
zXD0Zbalg6U*-x$PV~!o**q0O4gq&H$Kg>)O45mj2trVCD8pEI2P=;?}@iR(Tl+4J1
zFb+Gk{Xm}%^?Tu*lAXMtkKfDF&B4b7D+d?c{w?n9&3jO?|NZG>cJgx*FD-#nWkWa~
zPHtW<!JtqsBsEA%?J1)~U+U<?oy9=>_fhix;^l>*YgndnIH}_}K!|d@=te5F({lj<
zed)6&L`XOVlaTA`M-SHP$8RNm?*=yr0l9aNn}g^6oyqV7&@g?0uCeb&Xj0gOVOfd-
z!$KWG!o2_0+q<5~XY%Y@2V8sQFLVHUM|Vgwe)!Zs>n#-I=5lCd*BYpRWZg*<R%*_x
zIT-EwtXCN=CsH09Rf4)W!}EfyM%HCU8M4G$L<$oaebZwp6S0LP#63uS!UBK*tdMTD
z5Te3?Vxt2)?!()6z2OINadUuy&qd8kbl4sJszLQw7O}zT8`Xp>)BBf}b^d5Lxk7X|
zYm=ZdWL(*OkP!mdOoKamLtGyU*^2a;kVhDiK7E#P*oJ+6zVOqc^gl_Hwv!&A(nh6p
z8p3L+e)jzlic$cGZmkv|Pil)q{`>|?LhXgf>}36TH~6{zfKb}y=S|}_DBHa-QLj(e
ziZ4$$whEYZ{aPAIQZ*I8F%&^wgLPxTBMvOg-({%3sMGquw($zq-suK_)Q~F>HZo&h
zQ=4p9XRri<tg+|PH?rGk3*5nSuh2*gs!F=x@9$0Siv)Wug9P<~L4U2fa=->ENKb+n
zOZYNUNJbqzjy-ww5@?0nc`C5`oLCQ7r$@V>*4<IjZ>swGsssDL7Vse!NF~XenT!}1
z_Kn$`*S`c=F;b@Ug5zjF$*+2fdr@=W0u1xse^;B|0afnB``_c^-!wg4n%4J$>6Wka
zt-^CVMfP3T21ZXTkqr4n+m1*Gj;R3*aJ>~{0_^=i@XcC4TNs-{4f8Kqa^;X>i$0}~
zhJ5-{a%(Oq<G+3~n2?J;LINIt{%uw9_KLt`xs`HCmTU`M-trfY@dw5<wl8g$`+sYO
zqd&+O%k*rFK0d9?B(<z#$T$!Wlkqm?CmVC%2HGDLz+Z?rG}NnpKEDy}ns8Ri082(v
zzQi+J^Z|Z@ZB4XQJjyT%N++g{1UJ)lv1*8aHL$+v_49EEWuA5XUL9E6*SKHpkk<_2
zLBNVD{2tuss^QgKYKOG_;Rir1$XYb{C?|)Qx<$ADJY%!kxnkW*l^wHM5s`WF@=uxO
z%SX=(w|eRvSqjXE^w9Cdnq4s{v}<<vgBr;FicZ~>Jq;%mEkjAw&S}z?>{QbhY^rHK
zV|dq(XQ&377B<TMw{@kZtX_fv&;<|g*J`s(=C^9a-ETcN;cGmzcV_U$hTlx2922>@
zEtJuVDyicqHuI!(SWJq;?7}blq}Y>RGxn}(v@NZo>);37J#_p~dFv}OMqy`T6qA*5
zYBBk3*#Qlo+CT5Sml%Jdj}!L3<SO3T^P)cUJlx?REIyg-BB-BXz8Ut}tG+f~CW0S=
z)+<}~%xIdR>61}shxBbgB28uUS%Kjmqp7VUV#nqIAI7{N^XZ&kIg5p<E{WZy`mx(U
zxSI!3DwX+Dkuq&VEko{US2>qAaSzL76y9)Q*DMzk61aF4-p-3#2;>XTa&vV<4iJK?
zk^`)^ijWOW#^*r|kKlw8pLGR)c}E_4Wf%=no~<$1pI;<E^arv4q1;V#Sy7Kk_%+D;
zMkU35=lI|kt-A5W1Xow(!;wYEKZ*L_?*&?9InSGLKD8dmk4s~hX4YKCa{<dbA4k|a
z*bZX6uWijYiGF6`Hb(qa(ItT%z2;|z8rI=M8E*F|SHnsk4*C90Vxul0HbP&A8viCa
zBwG_gAPlsZszPV*?=j>Uzyc`OX{QgU)RThN)y)zVwGPHG!(y=tBG?X-JBOP}m4%Q}
znF_W!XWMR!xat$iFcowtjN|ZFkpzj-N){A&o9?%8_{d*6eK|J2bV{#0vqO5-6mGH2
zy#6Ar*3p+I7+X%M(oCfejc6+W?$mp0N9SGJ$13;HYO1Ea6*vlW!_M04&KS$qPFN{0
zVhFm|9RU`UYz>f8L7%cEm?WT9E5B$y$7<22LB+J{ja0dHjLqgBq35?nVef_1DLkd?
zEF&&~9r+_qqjAgASj{7m*b<$x8^^3zxne_0QbDaH+jk&REmQQ&%r`!`e>dQ}FRNt&
z%={m8qq^^LLlzXlW)F?8ip_!@WrMl91%8c<blzCKocuLsmzA0?KFs8_kNsoNWiJZW
z_`t%W_YWe)@VAj|Cs~w7BUTc0PEHnyXXbriQ2WVS**5nya|-0yjA4HRT8>~q2FCf+
zhIVGnjsn}fnM|)3Y`hX;#NPV6!M>PdZK2`?!P~#GhWm2kMEO*UXFxP_UE}ew)A#?a
zY3V6zsbTiIp!;Uop4(wl*fD$*Iku=kHw%o9U8ClxQ(Q4FGvFCqP=XK@?`}Q~qkQ6*
z9h!gv+VGPRgMcCWNG|63q}65iB}56WvndKikMjqr4{*qY!r0<ll^k3O=6&_iAuQft
zvxDt)@uY0Z8`U&&rdb6SUrwt-4&gr0wu8}0!c+_=$5HW7qic_0!Bk&-*AG*|E#Dux
z>aj!k=<vvM<ErRx+1St%$}rslv?;}Eo?ftu%hN2=SgX}m?O}i2G1^RPOD*u=!zQ$l
zFQ0;|xOqHm!Xi*YKm~LGI;l?)-V#W2C#=J`U~Fy}>w$EWRG6)Dw}<mOWhoMA%HEi;
zz5LMaR2LtLqs3<4N-z<M7j`Z-(QPx60XKB>bF^D0-p~@mO|VI6ET<wq`b;-zhJlo^
z{iQ6PhXy2nT?2A3srH?&QL;1(=U75h^kd4?AT^6axC{==u);7N`z?V-tLAynWPB_`
ze#MWOLO4zj%ofIOXAIasi9<_-Fi^P7L13cT4fhf?Qv&1lV=de{l<_t1mcjE>uf~Y0
zF};dRtB}}!W^;On#39a$(qw^9Ip|$6Vag-RTF{4Gp{GMmNM=a~=V=~2{{m(CnPj5-
z`8@NXUezk=gduY^pdQ=VaiqzUJ-T<&4Nqq;#@zFWKZ@jFnAi|b7ip3f7uFqG0tLjU
z)oxEIv7aA7Ep--pYb~{Ss<TMu-W=)ZTfzU`dJI6}?FPC;UNUQ-;~L!s><ZcOlLx<m
za8j=U&a^F*+e8ykusWu6x!uO<kXz3vA+W!%pdiL=unxnzR_)l6LIZIt?plQ({uB1&
zAj9pTzKuZwQ|t`^({l)%Fo4AsT=6goTT(RlLUD!PD#Mnrnc4-H2liT&F*TF9#Rr43
zwiaJcgZ-NGR+e^)u#2nSkw#Hh7$QCj*}1#0(4jF53W$kjMqMtG;0}Qo)@Fs{#)BQy
zaCyavIKrK)$s-^(IYCxta+D<G!z7_L|IL?aTw7y^EAO{y#5{R4E`f5lJVCN1O9~!7
za&R}atCJ3oBI#KQjOH3wVsqN`$prMNo7lczR<6{-Ve?FPb|AN>T$M7dlUI3_sfL3)
zVaYk=5mU_vh9$nKE3Qe#r~!=DUT(z>nuDHUogB^cZL={S$)5&aK~VOu|BHG($SJ28
zhra=cvC@|n%U274P*@)y06L=#8!1J0?!!!{_bfer)-ihL--B}hwvtdaXtEyTv|&N4
zbH%(T(<4DtZMq$IS20CKAM&|7e9ARVkHprB1fHFn&NW{59G^m*;8$BZ*V@-4?hw>C
z!Vz5yW1M0Vw+`F@pk|=Q##T6SY8%)kkk57LJ@mD0v>uMxR^RCJsEb5>zDy_hi?k26
zjJ<yf4`Ud%cOjOY|Ec7-Yg#maz3<su0;%~{D&$6F<{wHoyrvUki<Z7H5e=}=v+B%k
zdFJX=9ca79V7fcy+LqW!#&mByW65NUWs5G~Qy3g^(`o{WdNZS=csE8-&$qZ5M<)Va
zy*TTXZQ94o2O@z>$@LKjO`!~SUe)avs9g%J+6ka$xoLJua8br3KcA&|18rni&~P}d
zp}F>k#N|Edist^J<o;%~VZ@ZJf{}7TZJ+u>^>u^&wRkZUFT>ZAKy%wInEY3iI{ZC(
zge~S{cQsKZQdd;ZcSX7X?!qdi7>WBT?2ZoRc5SX0bFEu$T5fRjOZ856F)2PPcKiFw
zV40Q7cK)!jklWznr({+qL~|Wh7k)l1EmfkYq#iTQ_`=O8m9<6)wvT;;9dR{}!Nz$E
z!j?U?UH8IC#VOHsxs@kQiq6ZfYohRMBQ$ST6U1hh$b@j#fW)sPl=c1L!|&%qV>+~5
z4zb5|$K(1N*Ta~k4RViXI6QO={@NdZFUxKqTlB#0&!w$1j28eTv>+1OE(T2QnC3jy
z=i2GMxX&6Sz6+E3MaH?9{M%=Y((LW^83KP?<ZJP9$bH77<pH0u6IMqW@q5fOzMW@L
z__Nb6F=^LmpV93pR-^KgAu7D~s=+iNN*ZnQ2QiX!X6Rvy`xtT>M4`3?1W4`DQ|kP@
z%zF1PmU1Y+ZYba~*K{y7eZuyj?gp+$dH?NC^|>Il^VKgr%e)@nAOHX4jwmJdIFdjB
z07y~-01*Fo?ufp%t*MK}e`k)&YTDXwvmyMw(;qAmAb_5e2Dib#A`P&%u2mF=vnjXc
zLyVJ|)<Tg?I4QYI`|Uf<7MV&qLU+x8T0xuS-sA1z-aF38rZp+@!{{B!>y}!iN5A*y
z4gK{KZblV6jsRJ{gxDQ9)E|*lw9l;@;@}kK-4{ouN+^Jol=v1wGcSm^!t#WJL~0Va
zHV`yQp|bMf3x(nGph3fHpGW9|UcYes8x+JKdL5#`dpRY&u=ET`w2zBaIsu)4%qP~z
z4v!O**XuHx0?jHE$qcXHkw0hnh?6ExuY%gMkSeojvC)20Njje7fE(NvnqJcA-Y?gS
zaAM3NU%5jiTYNJ7`T6|(tO>zK66udNcE^d%g?^V)yCjaEmfx;*-!t&I4jtrIeg*Vy
z<60U6iF!U#i2<)ePk`#|SR;#r4E`18-^OLvswK%K&kMc-n}nk2`#st<yuNnx>=6*c
z6Lt!J0?LoXF#y^n;@^(IGyY`KfpD}uj?3mr$p7STL!k1~NwNTjPAxNUk&DDtD^Kd2
z<6)=36@i>oR~$t-znkGf)Y!hWG9O+ka^0#O9o<PV{kbKtY5<Uytkff*S_$_^CBTv=
zWWQ+l51{@)4oCIcyJqbo8C4pnQzGLT2`$5{ONC0Foh8Ly=B(7)E&?`wjI`Nate73U
zWX`@&0rF_cwjO2f)*mVn`7;3`3aVjn@<OG21zH&ux=<+LK6NY%8UkpQAx-~~q^gZ-
z7yPs7_itPa8WJ6n2wzZ4l;E>dfYsGvLsO_mxA*}jwd@jd%h+}!FT8DZ{i&W4oul_C
zwRna=O&oE*Y}-pbIHcY7<Oys2njl{<VBcj~2*9jQ6r*~!#~eV41=JtFV@|+4oJd)N
zYB2R$00NUl_nYzMcYzW49vmVaEZ4RT6=&1PptwR;2Yp4v8_(acvDfw&MSMeW%_NBY
zql+CY)=<=*qbpZq2zV444g=T2R`Oo1-l&O$F)*48ka*wy8M5ICFzioqclIX6JfD2c
z9>B8TRp;Ve71{JEEH)jZ_E^Y*ZQHBlh=6M>py+F%#1B%UTgxR%E-%vJ6p<KCPnVhY
zd1%(+L-7%=?+ybj;>3Azebu`Z*#kWgSTDjQ^r#*cftvp@MfK0xz^rQ^oT!2$v2rEq
z<}Xl*dMyJ3_Q8~l#d5JYXUYh956rPRMn5L}E#_VPZT*@F7tZ#_+Fg9TJ=vOz6>JI)
zFA}F9HNa;a`m>8&1mQI{-WKpje)m#gw#x!!csTuPkx2V*Yia(7*`^RVc?H8LQgD!W
zqxBx_?O}{*E|AqC0qObyus}d3yp$*PSy@{8W-ZG{jhpmMl(<<3n1u!I2xZVcpNqyP
z?C2a&=Hef|`+7FKpCA&sSE;^YLqE*#MX@8JQ)9gZ%tO$bu$?X^-9N-8vUh^oXuqxk
z+FS(Sb5?l7%!G1orj$wyFhZVx8PQJ;sUmtcH31E<s@j>O!*OBc8B*FL?ZtpM@#Y_1
z-p<T;GBtx|sk{pF*jj_RgX<7vBd+(_ci(Wg^u3D@0pjh=8G^+VdYk99Z@g4a`y7D;
z1hE`DxFp0tjeu@ryT6IVQQ&%Nk_H<FU8GWJFyu!Ft4doG-k41~478yU89gg=seSP#
zi;;UVc#baH{)pZ9dm;v&@SIteYE+b?qpNo%8KF<=Z_56dEvsi#*{WygsP-%Qa+=4!
ziM^AyF+cmornZ;zyCc8Mm)har?QHg58|n`SrIrF=B1~gOXuteA^(Q~wI$5`dg;-W?
zWwjmDaHZSm>#JLgvdB<Xvmd-FvF3iUZ7<>@I8}m5F3A;kku^4_l3jIRhhJCd4)XHJ
zj<vH-xExzp`zqe>&MFsK@04*=!?Pb8KP3Bl!=gi1jBFPT+i2{6<vAxnqNZ!RnNzI)
zkQU+Vnra}_NRw2m^NGU4lU;;!<>Z1;OB{JS1_r3nAlhR`XWTo%dRIn!KTMJi-X+o>
zo;`UXTw^?<<|K6$A*f*#>k)fvlw^$FVHG<xW+T!rb&nO<U=ca~+@Mcyw@GSWAi}N~
zsRC$S3nGXXz*$Gl^nu1twZZ=3^^J_EK?iL?w`<Z>Povap*zVnkoy6a2^JLPjii^5)
zG4NXTd<ZI+Go;zm%Urv(Q}1lb$9Z-+@@4vCas2lNn<@8&dq<@^EUqQ56UFuEoqd{%
zC3YDv4~~D)Pv`I5KbeT*KImNq<33sUWpRE2nt{7ZjOEthV5&I3H?I_hSu6LjSR3OX
z`j6~$`V47)7R|#>H|RM(_r3l`r;lsa9Y_o^5qPef<?i6ruXjflkrnVH1C-me3Qq2L
z(?Nr30-I=hGuNuz=PD?@8y0Y)--W$Q#OI7&74Zsh!#R5~Pq!WOcH2E$(K(m>mQ2d~
zzPCFFSKHN2fOz(g;B8mK@k7|pZCWnVM8)?#6i?PjK9PrZe)3_()jcUw3KM7Ru6a_;
zHhm&84M90bl#Cpx6o_h`f&m;TY7&hK#boCQSU&~TQAm+gd<nKFm{R&jcoH0QRWa_2
z(;$~r&D=+Xl>AkVZCvWWAb(0jlC6KAN`6dggud}_cuk1;fUxB^KgD8xp|(3j_yTIg
z${D1za>}W~(h`I1W_X8#k3W>FWlWC*_CF{rEJ6kurHnC2SrzgLI<P6DsXCB3JE!60
z6;sfWii8<R#Y7}qi$J<&Ww2`jmuXcsP52WDvsDTu>u4&Li8Sm3Dddv8#DH*fJ?5H9
zHf<1Fs)&tPg$mLtt(4km_gH5XOU&4J|9>_h2@&Z1t}p-qcWeLvr2oAEF>yB3xBmx4
z`|mBtsrI$<wgl4eoIc~Es$<i<!NIT{ou-oLz@d)0%~Y7~Te4Kz*c*+PD6!$j?)UvV
zFTCXo)0pRtZY~v}1s*T&Pu5*N+0Px`WzsW+pVWp^YEp7>adL2S@iG3yY*dn@%<!g-
zNL}&;`&HQqjkLPr5d383eKMuofr%8SEMA2>L`cF~L?_G13bE$JVn_)XroI~@G`4<q
zU_Ezu$TyZLi9?<QMk&cL%4G@l*ksUW%7S?M7^NYhV==*7CURFwjb<0p2r8!Nh^r9N
ztTH$lHv^BKkkUgCF=*rBgAYR<tP6I06G(+;OgUt>Ic2ngpHL3UdF>L*nf=$#tCugv
zARfm%e6h)9dh#DD?(k}s2SX2k`+IvDm!Fy96LJ!CI(YT_ST@lj`Q(yL;;dgY@VM<A
zPWbF?WbzlSHA-bKS>0{-pW)T(US6~^k|0JlSKhmg9NK@U<V)olZvu9N;JhIlFi|e*
zazb5uN#(pj!94k4y}U~gDrE!G^%ldG8!KGebYF%ZoPE7SyWVJgFI2XY@i23@{_uXJ
zx>tM4<#T)ZK}!eUMs8;FVd)J6+>1=S*!mkeO7lrR#PhhDqmz|c2ckyjY`!dFuMs+!
zYf07<nl^$o8J<#O|N4#a@5FlnTgV8!-f3*)EHlXpZNB?d@FwK>In6eY_#5GLEpq#I
zbjVUP_1UO{$L`*FZ*Lw~r8B5Nv_HYSWtujrC(Fe6V{f0cxR+g*#j{!`b@;TVgnv5J
zd&nQpBDFW7*HQ-I6Pr@Lrd#W@ybErQ*1MNBnq);FLojK%zr2`m_7m)|M%-`?k6t4g
zuAI0!d&zc9kxUzv=wU!HrD@Ng(1li{$o>CH(lCl*AVh8IExk;j**e*jFPjhrJ3Dx;
z%!~`&8hf*KboPP;=gHkx`uehE!_wL0K=#Ye*MYGITbAz@IHBoN$`L$Bvak8rbboW!
z`1x`FcpB)-fH8aXbT*o|udgRx#$vGJ=-Um4wbYl*8rPGq(x%#nyV$ZqTS*)0=EjO4
zV>qzk?8<?IdAp*KW*?Ck^5xNNnSqKY*_J+fPZk;6>yD0mT?u$Oe8(VtjJhjv?4B4A
zbxcN}9&-|Gd<Ypy%3aQtq(Fb~u}qKnbZ#$#XqR@yEJX~sFlRv4X6cpr%0E!@7@6w_
z%q>0)Gs8f%r(Z+ar`1tttv-d;tZdj1$9#-O!&DXM8H61S;(!{cO2s?rOsXYv#w4Gp
zHq&1))(iYfV=aN)jEn`~izNWFj+tEdk((}4k5+IP!gF961xFz`Y@wR#IeUQLU$8X3
z<Xo`fp)nmDeDZV#dAPqCGPKfz9}m9Vm~mi2KV$2t_-OH)Zf4J)D@DJ&!VZb-9>kN*
zp1$&TEq~kg4!x`e%`)2k$|X;9-Mgrm443cIlDSRNqu8P?-?j#O;zJYYh7L4GBn=>H
zGSu8FpX-@S8W2fKv=@T{T0Tb9R7yfOKhcz)Aj#dw5aUV=U6#Ypz>$@ObjQJC0?z0)
zh(p*rr{PINg@a}K4OXos9eY;f2?>|hu8W2|Gbot_!dg2Z0DMZ0$?YzQn0K#EQD^nl
zwbNVYjsvp?ebRu~57Sb&hh`ON!-4*JNK<5<@WE{JB8jgGLeB)8%$NP!Aq`=jws($X
z%>e0?;4e$Z;I{!S<~u)jH82HiCs2s-a${i_^0kC?d>HEcF8>vd9K#2gDpK{GJ{n-n
z84U_usT+~FosNH;#e_BD+AgV}PgG+Tm>T+qNmUD)(gV%Z83yId7Ni1Ik*jk`Y$8*&
zgvzE80hMe%9_j)>rF6D+$(7_p%{c)L;*LZiXbY!WD<ACPUh;xY85)MCy&@!y0hVY^
zYNUMCv9s76u<^D>>c1xJniOtDTwuTvn36=MBa+19Me#nfjK>`@wDOj-qL{alBDXTs
zAMusdGoV($p=1ttdw2vHx(ooOlvFxn-Y*@8W{^upnW+PcX~O6%6;dwz{f;n3h)<bE
zmJ_3qH56yBh5`ZBfF)mfoLcO!Dy%TKWldlg7$(=(X*82M$Yk^H>UD^vuRigh7^LAL
zmsDKr;OF>ai7!9KoSl7`nwgh<vn;-`1*}kZ#l%w7wJ)`8nHbyla=TlERh{|0_-2_W
zy+6J9Y!5;cfrK6*P_%O_u|J_J#hKi5DGa)0lml{0;IS;NvLzZy(G}40jz=Ot3fZfm
zhfiNDc}(gdg#t`9)>G=vSpz~Z?hy3tp$!1EU^hh}GuB%e>@=@Lx%RO^#;^4HB#sl7
z+LIA-RdGz;#M{q_W$LI7#zu3Z5uhEbV6wKLmddB~Foh|AHddOF&C0r}^#uzGQ`#uk
z5=XKO7NBX2TU%=$(BvU|S1$}z9`n<va2F&=$oXHOieacm;3*~$A5;fT4+??ejUU=8
z^aPdV178@VM6)<4TZjO%1Gt2R2&&6o8$?FG)^bVY3ty2y@>Vi6=+R+U6cp(Y(19k#
zA`F8h3o&!S((6O~q9$!&0@|1vp(8Ym#lVPx2Ivabh`iSUS%H>gWhl;q-zQ@^k!5)j
z7nGS}RAga&uX@@IH78JZ78qJ)J18G8kXuN?uVi1P5L_2jo@3vMeLuGzcEZNkf}%4m
zfq+~jYsiH%#R$2CO<E>}(xE-zX)8f64v<PCR>&4dd?<GKNTbmN#`zq0p$Z0Z`v(<C
zm$r&E{RNY_#*p7bR?8{&yryi#_yqrK6#jD}ONccSd`82Q8U6=4m5)l|feGGTE-*_3
zG;-2Gu;9<jk5B)o7@@zrMg#%;l%ijlD};WdsFhu3pLtWiJje^#m=@qof%skm@XiMx
zr`LDmb1j<+ka;4ft3#GvP`KGPI%Hu4Y^GrR&9t+J{#XKzrs}qT-PNwe_C}ZXZFGF~
z-0jf?s&UqVBCiVMxvnfoM!)D|aw&Txk@Zhh^A8%k-^`|2e*X0UVH#XSg`mdGX}NQ}
z#aw$ev7V9JtPfjyTHN_&KGWIWak~DX;R2YTKe(NO%mDbeV=3Y<>kwlDf}ZyJ2;IZw
z5sG0Q1Ph5tsOw6OP{E-l&KC^h8M&fHXWaep=8@>(KB0!VD$}2AC=?g#<N}&Os^Tx!
z_ytFiL0XJM5uD8jR`Y5Z8=e6jhll7I{oDL`vG(9ix;(|dCzPU)nP3m@B69o0O~fMS
z2Vt4w3|*WFa*J1H=a8;<vk6rQHO9GU(N%?dVPfy633^>y1k`-Hl*!{(SnE3GY1ESi
zji@-)jku_4biAURfPy9ayaUqwO{vHAN1T4pu3||CujM*?p683&3m(?*fHR<hB9R@q
zDwH<(7DH(A^c}9xGKm`;xO!)sLP!Dore_VOs99n`8D>&NP70~ISt%_P80C>O4sdbN
zVwH9_lg;~ULxmE9)tdc=!bi$ikj!_hH^-w`5p`Dkxm>ADzX8@TLUC*QAA)0)<mkbb
z5zu-foMVWG%$7$C_{#;Q$uqg8cTAsl*Xce{G0F_o;C)=HFh*EN3j?r5($%seMw|)(
zUE;Pq*`?{|mfKZjF*_YgDcn_mwG2NZI&Dh-*!85YK<!EJ^`U_jEd~xLJo;%;Cl$)p
z3@|~h6rz?>6yssa+?kO_xE;`zFinBZJtSd^d8X&(%)+(+1&*QG0CL1Ps~87}3H^Yo
zCrYIjX|+YUn>gopg6$|$5em+2r<?P`mkr1FW0h~NI<R5K(L?JPtI_YfT6|zNh{Xn`
z17V|@U9ox`juhFGPuhf9q2!>vSwF8xDjl=T#6iCaWSY%OYRfOIIj*k-cKhC$Espi_
zX;=AL?-a}}xw(5+T~cZbAubB`C)5(^a#4C0h{?+#h?!6opr?w5_l$$kkSipdu1>N(
z>Co#WoRT(ie~gDWLm$GJv$GPTyc0^E4&pHJ6Jn0XM-ch4B#oiz04_PQ4^P`^yyHY0
zJr8ENLZA>yJ&TQ0`vDJe=xjOkN_<+iReY#E%ny1yV9aj*k|wltL;PA7mh85Z0NDln
ziV{Y!XVamrX9xp$TlDTvT8VCqe~DQS?v|^~wFr~$hxZB<>pNJwv_H4pLRlY!(zxz|
zqLw$2Qs(P|HscEXoVwTL_1d@I>Q+Y)u<2EAX+pRPq6}^Lq*vYIr851Z@0EI8^8Uk~
zQ;nLIJ&BUFtiDN8>2nVp93An?XKDtB2@-G(VgICXVmzw`Oxlk|rwlE9LO0bmmn|zl
zGWJr)sA55B(+Ts>>+vwq<EAj?{Q~^wpXPI)^9ki2hWQr!e~PLm7W&pEX8-+1Q>wac
zmo0$cdrn<esS<dMwJll9#!l&!!xrVNxEq~aB?K~NroACLZ8R?Xbf0VbxGRgC3J$_-
zJ~xw@3EFNX2&zSdE6o;x!g3wUUVqsJoKF-ojpEt99Y{^-XH;-Np`Mta2^)8W!FLq^
z!)Fxc6k!+}!J-}xI>8J>cupv#;LOtK7+4#NP3kaQ3Fw2&N%9w?Lm|Pu!c%30>7p3}
z&>mO@l>shLVkzU3M*xEn74?KvRubt0XC(Fs@&=g)*P6;}aU!V3dCN-QWgA(W%t_LQ
za5}|=z0)Y@i1b5hTvV!bv+g=htT>ARRugSK1gC>+g7$QUD0KwHo%WjaSTH9X;wvi-
z-fHnMr?$j_@gv$d!z%n#?Eq$6VAoi<zoH`ld4NYEQQ%(Jw*1m<yY`)nvanz29EmUy
zCGk7a4sI4ae8n%01yZONrg5G_sN3~>kei$DaW39VAbmIB$9JQOJ8iThtJC|wC$}v3
zIR=)45hRhmkjP0jH0DQ49*}o@q8hD6FYo{}){*he3(NDTrX%LDFJlbNK7PEtU&r%&
zTtQN3yo=gk?5LIRbpoqGn<F54K6g&<aHZ-rLB{o&PqrR+W@G9^QX(^5K{PQiX}{e+
z#mBdSTy^NssQ><cx{a2z%m~7v_sXrzFOn+VN6D(vlx+T(qbXMt7tCPgZ>mUiR-;8F
zTk9OhmkWxG*xuM4Uc;;`_+1%GG_8b6k{>-soL5%4x7RKmH&f+Vs2hGWpxIRl^XZ|j
zqCu)uMHW(SXeC?-Qh?H&hD(0Cp8_Y0p5V{hiOJ&X3LVw^1HvAcHDWAgQDZZnQodl;
zc69<NVgB-hy2e!j>iY6mdCWLR1xWKvk^OS>v%bl4v+>%aq)sv@FGDsX|0C<A9LD=G
zllG&l2J`r9=Zor@moI~V%NmL>wT}L2PvXU|7GcONY8&`K#$PUZv?BM<OerLpAQu~S
zT86_i7jr~6Pto5zyK!ivm&<uW><Y^lA}7h6VAgJQ{c5n!im2UE_?-20i!%ME)Noz6
z_ZskP`2S3}w6)rGeINh;#D59*e-IIzEzRxzd&=c1%f@dpAoQNA%Up)W5^Snj!T$&t
z5$YB;K@t(%<`vZ(liq=GH|2t=y!NlhAwyC4u!2+L&3pSjo84@oZ7>*oh9!$q9Uk9?
z%j>rKglR?*PB6j_Gs<v$g(imh5h{;`0{_qiSAs!g7zKV}%i)NYbdG@-QaJ#D$})g=
z3MXe0TU;AdOWEvl0La$_nDzipk)Qxs<7FZN(vu7atV5h5L4b~=d5RfDG1NrJNIylD
z5eYJazR?(`;#9x*6j!c@nWvc?FAh8l*T+GsIgF+u5OR9bkr+bF6Q*IMOJzpW*L7>v
z;*?n-5IJM$cYvL!opMy_m{IMv*1U%l)krY-R4?hq<g~og?+sB*DV&wmmg&s7Hl4zT
z8S+DkzZ+!lhlmEzSYR_!rSPlRrwmfWa&AltO~g@&3ndwD0oo({yyOjxU7*_A)$F5H
z#2afmKzX|$>b1je0Q~c9(5VOeUj5^&6C0*aRMGRhVGeO8_Wt)9@J3x|p9`EZFW=09
zCcQ_X8^*<3nr7Lq9;F7&<Gr`$!E9QSb2+2eJRY(9#AcRpy}GV7H3C1;(Hz5~{(Hik
zMw>A<D3bklUMvv*bC3q=JXw+<*K-(3U$>q$)y{ewMsd@zH#Hk)y)NhSXYaAlwvB6B
za*+bJ%faF*4V$%lETx5YF_CbKUiw)_U2_-$2S5&Goxudw2i(|wBzbJI%cp8?Qyq3Q
z6Z0z`u-n!uSi#)WyM7LC=X25E4T3G{I)Xy7mAKS#9PgMd^4xr{pzkS5T|=s-WHl)U
z=@m^L3&pGX^TaCtFVKHRZ!<`}b?(1%fdKtK%Z0v!lck-@e~;Z!Ra<*3afH8q{YFA0
z=N!faEcCXPw3{Iv5-8eZX-ch&mv<T+wQ;-4cX%0MpZB@Dz3dPN9e)-48M<~e&GS6Z
zOu6%b@nAf<5M2<dFI>BOoAusbxjUjEb;?6z%Z)n_zwMDIJ0?_SLT!dclLl(t5*(yS
z5UH80i4(@KmLnJ>%@P_h5euvsB71?<@!6b)#hPIsz~>DxZ2}xYGfA+-M^*k&%t0oE
zMU+5O1V_>>g@DlzHIz}YA8^RPBZ0tpQ~<HSE%NMGQ2Z>Uf!Xk2!;&u>IFfmgBiM?S
zAhFD%oL<loC~ncIQ>XH|b6>r7&oY8jB(tMM$GKdeT(%mu$Sn38bJ9~pCE17{r0w=1
zN61uraP!sOVUa#1Q(BJ0j&<Vd$lm*d*>OJD*NZ1}^PQ$t=uPZKGF1Z3)!WzK*$-$z
z=9kid!GEQ|fkE;Fxy}q=d|b2<2^sDE=SG**3;g3gQFA~QX*+U0g1hApM6U`jeHitU
z{t6?I&7AoOVSGdF_HoW<lt72YB8~<Ez~6txbym>0n@*h7&2A^zYT7vjq0=r9I)iY5
zw~Gu0%qH<A&42_?{&?hUA3=%<?Gc)4Sp=tYx4+l|die&&GU0wX3r4hAsR3Xi`Tv<y
zAFo8A-wdxY|KRJ55XFR!6)tJfUOKm`o2QmZ7NayOEs7gzD#f=$Nwk~Dnl+v}GZkqU
zYBfzD;h}oS`tizTNqXZ}BeVS@qz)M^(kL~90;%aknfr!vLC{%`TBX=nqA<)1wDCqE
zJvp(}Rxs<oeu{|YU8%u!#-AWU-#vvSjP2!$C`HGk<f(ruY)IzN?e8job5`Q0e=;yj
zYe(vmk|3}Fa|6O7d<;y-ZA`3MV3E?^eLJ@wmj4Z3T)nu9Vrt={|L*7U{I>gr@88vd
z<AdR6Q$U70Pjic7g-U`MXc`7UXy*>Y4$PjMLfgh!K+ut68<Pu*oE%OLf2oXqyU5#Z
zpFyjvtV4f`pK*`2AWRI`Cg1x0+imiG59Fia?EuxgCC6~KFSov&HE$8CC>x#$UoG1C
z!a(m($-5}>N8k{LophnOxi)j~wLyqkeLni!Dr0$B%Z6vjo}~ioZ5}lze>i(S9y3?q
zz3}VNIk%~tv;R-^*VX1c9NV+Mzk3_mV#;6dz1&)Nl6&rKoyVX`(<ttqo~^ChEQY=T
z@-;I3hj_Qu_IaDVK2RCC_O&jI>bAq0T|eDl(ErSQP5%eR7El0yHFy93lK&xoTl^oi
z?^(6~KYn+d4H$I$N$L=2XVnH!S3@dpGnH^_@I!hL+TI~iB&gib+y3n%rrdPODzjvV
znGPr6+PilCr@q>=7r>%TzvtAkBY~Zt2j3lhAF<M~f#l?v<go{Gn)@e63^gQRkBP#E
zNdna|AsiqHe(*+mUr2mrEku|EjVPEf9uipFAvuG{lJZca&TH`oyw?P<YzU8$pafCy
zI|+l<SO^8&5G6?$V2aSpB4e2#2GXWt-}bmDb43QhXixyFz$x(VQ>%Xzva~i&ZZw(a
z>HhPb=J1NHOvnifErGe^1X0?wEtwh3_Ve%FeZyEI5Lq(z*<}~|Y0B9XD}$_h$By;G
z_WMHj<FkkK5Cv1lawK~bN>Xt#$PwKLp9I-?oV^_aUVpQBpTkr2RrqO64mnE_GeF%S
z%0MSP+wm2DGkEl+!wf=y3b-${)J6-7k%SJ6Od=v{1PgEo5-=n-a*{_HAqaDT-*W<6
zZan4M^R_pX=an%td*wnfX<UlcFdJZzW01)O={#JL%rbQ_%~5%ogr<ukNQS>vC7x=d
z{EAY(c*`53;-7K$zVda62BYqT?SLCZP|pIDYzn6>S1RJCu^NeTMS^%BfwV*d(53{3
zcMO+AV8WAl5fs4$#r_qJ#QLuCNU8PCuFj$<q)Zi>j2mLkk{n`;_AAj!Txe+LtmdYI
zTqn=T_o{{)x^d)$M(sO#6h_LOn3p&qS1b}X78+0(Cs*uwT&*w!|KXqP(=-XHV;*7K
z0>Rn3)k&xT4*F-61Nn!VP_rCR|65QDA~N>je9ogyAel%dj(a@V{mt8=dZ2a;{5GPl
zpt7%9-Fhyn$2%1%5+B}q*fV(3iOF&>T-aw@XeMFtZ|gmQv5zRgzEj!r>5y6=7gfQv
zwlog9|H(!kzcX52d(J$rdts|~I=FexM3A|I9Z5b`Y}NzjCo8NPs+dEC&brs;M@gF4
zx&msYq+@?#iV4#~HUz0*L0Diab_}V6-3j`Vu4B|5vZ8HMqwTiC<JBuQ!v7=e9NL6Y
zf+gLyZQHhO+qP|+U)#2A+qP}n-E*GV&0Wl0RQ-V3WL9KEzDVGV`w!SBXq_52T?K2n
zJ9;?1JzWbppqX8jH(b^Q!TdWOYU5f*4_DN&f3>T9IUlQs?iS)s<_i2;Q!L<14$hBm
zKFr#31wGUyxE6QvC^E@Xu!>#k3s>gn-=nUn&K6f<nZ%$_Y?!(!vGmq((J6Mszf6zd
z5C<QG-+`mDG$19VH2lO{W>v2HH-O!&L!#lsJ=KQ$#?&1uucXA*eyhcP_5Rlac`B?$
zL4ewn*<VsP$+mPI8YkY(9!{;#8lFcNK1TdZy3AvFT}NGnP<LTTCA!!ZOHxw_i~IcJ
zic^)>a2L3&->OK}p^5?cDHks$9>Ehj@HL@FnToZfb=CSRKdW#=tx!Zdr?R+}z+G~h
z4`cD<)qa8NrJ{@5mMKsKB#ehT@%J_nI_Qj<hc7qzyAC{>ovtB#;u8d_Kk8Q(w;-aj
z?93!9^A>{_k5<)Rt8siew?(iu{cMsH_fj#8J#w7Y;imVdB6+eL$mZv9=xxg0jK8Hk
z3xJ#3T*O0EQi<znU)e11CW>1*BYfH``8@AAvEsjXeeZSPR+UOdI6PuJNkvhJ)oLut
zQ>hOadqjy4f2Umhfe?|e@))l&GP#AD<USPD_o#h9=5g_6-BON~w$=<QWh4XUYwT+r
z5`X@pi8Q6uLtst&jy{>>-b7^9auOTf9+3Pk`SASM>SFllB5K8c?PLG3XE)hY$J9&q
z?y|UP=G@GMea72skN5`8s7#i0gjJW6d@dWyHB0aF=mJslraf>C&*8G&sa(3Cn!piy
z1jc7bw}dE$Y!DV@YP3}+r<8~8q;Y!WM(z7j>;0Aq+%WDRDHv$kBz4qyID5`#tPg~I
z3+C9#@6h~9#)Ez8R;nrdB}%$G62e=kdr+*likht|(Tveb+I<oZ@n1^6vH#zS5P>~g
zL;as03l$##faw2U5v>1f2LG3DOpk`G{h<WX?`&PUVGHt*gTVaGIbFszC81oHb`T<2
z74A(O%@)gklBIU5<lxP$e_y3tpYg8P#=EdlXI14@559VtW-!?^uRk(Jv?)lB-P_Tg
z*UnQsgD%s&&#0>}#8LkjeG_rJp13qU#FoQNCj(&^0vV0T0CHA~BEkd~7uykG)<EW*
z27sbm40W48!HAcPhJ7<&uZOip2KK%l$ko4uY>SH!26r8>>k%_Q5IFEH?T=bxr>ub{
zWZKYs4H=qYHck&U6QYL5<KHlm1NcIe!LZ<7uEiA-+UHe3sVq)I6pmFcC!S;Y{+I}R
zOi@3Ng$o{j{x;rbLYSRabQ-S23goOMJuzzZ3GNoHGD!8hdz;W=@XySlU}JE-c1Yq@
zC~by)woyZlkcs`@CzbHX%Bm#&W$h^7n4SO`$OSa>1BWG7b_QelX;Ee~16u)qoPnWy
z{)K1yPZi&J#oh8fyTA$aVS8_#Pv8pTIs_5@Qz31w@8BU@cV6Rr${4e_HND?t+7(>9
zhX2~Y^?}iNoiQu=E6%v}65Q8g^!G;CF0Y-#<~VF;nFdY^<Ct<j7O~6%d3$gz*g4P^
z{$EcUu+yjlxPk-lc8h7>6FUZ#0?s#W6JrUN(H{|S9O0)D(Bbo$v)E01*8VfIe8Hto
zl)Gls`twFI{~19=nsy?j;3o6X-*7O~^hFC6255t44jeWCs6z3ZCIW@~c5dNwH{K3E
zg|bT#_R*vP3#;u|?R+`1(cyN_ZsxGytWnd+Xz)5<I4O3$uheq$5E%{AmH?T;l!R4$
zt4=IsB62Iu6PQE6q>1e*m2DmanFc03N2=ek6#JI-y3x7Iw4UGLpSG9Md5fuNildgE
z^o-w~U2Z1w68Jp=#JA!D{r&z)5}wsyeg;10(-tj^j09t7aS3!SIQ5WdCiG2d<^VFb
z7Zbx7Ve^58oC(}sy%wb|DEag6cud6h7;{V?&8-dP<AGJh9}+lRufnZCbmrly)5`Ok
zbyVUa{vXs#w`U-x04H8vqiVzI{0naqCV5BZc6?sGeYx(<pwf&Ut&OXo2dD+eF7)}G
z9Hgz??Pg;7@_mXARudbtHe>$9po6HPPRH5NhbeHV7RGZYcnyj91E|Zln5O<><`kPE
zN5#Hva-$h{s0n*qq^50+KxH%nbWm$8&pW-xP}QjOcdfM*?O+_UV$)RArNN<SRBA>_
z(hFro2TVW3Sx3rwLnHgHZ0RyS0+RXq);jQ^u}H6d4x}uS>W2TQO2U42)4I+D-7Jsc
zE}1~U>((M(`{bkmX8i^SJccfaN(7HYZu4MmAh1YklM1)fOtO!=r#Pe|aI!g4CHwm`
zayJ9$yse;TJ^pN1p+Pe+QfVC!S_1?H4T5D9^c`|yXAoA?le$Jv&BcinZygF1el_tS
z1?cz28uo#1Px!ziFG6xk3(k4H%C~pjemG4I*(_{qi1B9;Mxj8Y!jWwFGswKUH3M|W
zV!*yoKjI;U$2ctIpbbD<ZmQC$Ym@8-bbiz*PXBrczT0vrqzCG=t>i2etS}dv$hGAf
zDZNP9Fn>dIB4T4Z(5veO7y71xA}mg@EvXDw{8sHm>1J?GXJagmnyM`nB1_nryE##1
zC=--9HJXF9kJkJ#@x6sOuS;n9H8|NSC{NIEm75Q{Ni-fzlMrBudX5g}_yrl=uThGn
z`xQ#5%*PXAP1Rwj=Q}p<cu`;`GBh*tP)mIL*R&};T8t_)Xa(K_Y#S8KY8CKBOV+OZ
zR!TlEvSfy8z?%@8{6zIrFnA{iF>*;j#xjrkDp*fMq5wton&^Hb?Rg!cankTqv2Lhr
zy^ul_c{HohxLo19P$ZLLYkKjd{Zwm~)GyIaxJw(GAX=hkQ~yy5+9%eSJ0kjf*+X8`
zV7N@kyhl$Xd?K)HIZ@L_)%Qiq(?QG>bOb>szSvgv{jsH?iv3_DjA^z%1A!o|zsxC!
z@yr!W7WwJ4gHYWTa|?2cPCm;`>TWpZ(OEX%q4Bjw;<5}dHMBuMOO;DPh>MX3d;}F9
zKiZTj07j~Ljsm~kUhM}3_wR?XP=OSD0?Y7qyqlD&5LNM7p?u$Y--dZpkGZtr(B3VR
z93A|4dx%5K)q6Z<NP)#D1ERYwG>R77G8Y~e%ncL?C}93(7gFfTc;d$Mx2zLR2aD_K
z6WHo*>vhRhiuFba!cFu>nrfF#rpkUondIGA7wIoY^3C5@NqJ+)t9;T_1z{Ho;wx0X
z7f|`-Wdb@_$(WE`vtBzsbCsU-CGIV@^G_ygba2Q1e4m&Rb)C3xQSzVejSd=ZO1n5w
zys#E_<{zU!mtA@oQI=v{{nPqMSFlKR$hqxDenI94WtlAX6~e|{tC(8wqYfntKbede
z7sT<?S{M~&TP(0Np7b%W$dh?UggljiWB6ILZ+hOM`WdB}R<n2{R)Yk%#URD!2PAE7
zFb1)zIU|n|I6^e*J{cw!Ktd54u!n%_Jv}v|;1aFv5KO5*<jJxq(0PZfd(s)2Oog;Z
zSuQ%E)|zcJ9#JEVMqxbV4Q~48;X@RoIOcR9D*a~-LW-!mAED9bVN&n<H+ht_Grfv4
zU4VRPM4-ZYKYkot!U>CtONfN?F0wnC29H0vE0BqQ@Qn`(c_h`7<Foe@B{b`IW-f|=
z@palmbokVg;0eLkzekN=+*0=MU5DXXKu@$zaxb|AZF}ja2LjzN?)%io783XY#t{EA
zAMh{C3%7nqCqhx<p#KMvI)tRDnC|}fBhbNQ<D=&Ff7rs$et>$D|C6I+=>Atpib>zr
z)#iVZq*k<Sov}EP{<DQIJgA-YAB@N(Zf$xTRnidZ?HOJ(y{dIrgdhb6bl{prh#BiO
ze%!6mT7tpC*t=1s6~TbTK1=La@p>&YuM`1u1bK1fLfSJV@8jTeo1V45%C}=Wwc|YH
z@7N8dK>Q8qLfRW~!icH_viHKTEfWM;<2gFcd82|5RhOPU5*+eI1mmF-&|>K82LYkt
zWk!XMK=tcl3`NWkK#&e2lH+hb6P<hWf%Cb3Xau1LV8@O2jsc|&4JQeM+8Mw^OaVc3
zB^sKBt&A}T4dSaP2eQsx#j15BB#Ro-Ak>_RDtYW^coDXu_mi|>OL4~Osa7RT6eAVF
zDjur~F_vG7sT#|fQi$`Z)#2f&#P7ebd(_B5HXi}d@u-I^&?Nexr0nxJIO1i>w)63S
z{glG4#kw7R#*c29;92})_1?vnoC)!cQU+DEM;p`qWzFT&nHggiK6M5~VxnNZaJg+9
ziMqsGjq&a(!|ewZ6*&-jedm6i2jjVz&-dC6jClThHu|phTIw`AGSqmLfY6*P>axQ$
zGqXat8G{dKj47F=mpWTrlOHh0iJ~+K(6yCCGAxPRB&7?jd)J8{4LQo$JX2gxK_Wx(
zillh~KK)?IgpiX8CGZO4IqyM(Dd01G+Z>f;Cvk>6u*HD$Md#Ccu03If{G@CIkX?lZ
zNrs#yTwo6!kRM6EuZYN}Kr3SAYN^BZ2si~2SGonm`PIR|*F<mMyw}Q`YOIgFEQe1~
z!|b^=Ep=YAT+V`y=xB~jS;XL}*Jh^fFre_Vpg@<da6Sw7AdC^Z0nRD{LR*#|0F_xG
z#BqcLWT4;ab+`iNUk7eQi1&X3YEgs}x1Wb%NM{qQW7uAKDnCQ37ONxA<fQHEqoN|(
zZ~SwWc8H~ZzQ>Iwi80dmYLC+`P16S8iBwKIL@B$-jRv{C)*bj@p{fMMA4M9Q&^4{H
z@`VWf{Le@C{ojmUYTjmLOW~{I)mbst6XmtLH=HmKQDm6t{cIiC2Qu(<$#>`H`9J8S
zsY<QykCtK*`hqI@xPEXi^Cd<!G{&}tP|+@DS8sPuP*EVnkt3uZH^23cUjKs2gR34_
z0BhZzR?g>)H;2<nv&X%ts<hU`X5^<VE;QW%D^4CxITA@)tN3yn7e5g5B&7N<dqhV6
z_z4QA3{c@v(%O8dEgQATV&NHFD{`a2&eg67EH~4CvC!VbmxS7f%2CQvGFYK!s<0+Z
z998c^A4NV~M^2i&!m}Se@=qG5QBma=@o`TI?x1lk$WwUXfqH3$Q!9#)m+=E1<}5re
zv?+=p2G&k)pu?EFo}qoS9z8=VpTsR8)C-5|1$r7E(=lYG090lTMl`@5ZqD~kVBwX@
zr%fbrR29PqO~Xr-vRNc`#Lb}ERwq=gH(_K|xQ+RcYD295_@?Yjn^=RAkQJ?qo0@bP
z+*bl@ifWMj**D!KWQX4WQeD^<Gn%k-2mvU^fi~XCQ#flb-nKn?oL8Q`KRqZe(iLx}
zP%bbYJB*ay(5`0OZ@jwf&$^H-!tSPvCC<JW^dQapKYi)P5zwARIVK<RHk60y;Xq{)
z91bIzD{59$c1XP%G3>dhQT#0?hm?sqX}nShaI0!VAe67MWHTPFc%O_>9@oR=f%YEJ
zi<}9$R+5^E3xEmr(2?bHh@Hn#dzz@*%%IIawk;4H!mMpmcSh^7&R;keuAo0XI^v8e
zI}rz?xt!^QbP7g@d^qd-RT=Gy$*Dt~yXN1wEavMz_T|8Mgi}l^d%$R?kCIZzpv4@M
z-_vbvEv2%j-_fwAU0!A1($1{k($KBzy0_b(y0<;gAc5mn)|8j%K>oJtufuwb?tIU_
zZcyFs;{5m(tm*C1&5pL_{+U2vw?^~Qc%ILi<74Yx^W!du?KX)+f&&XZyyWkm#Xk|g
zNZ)~r3D0%S5%g>?B;sa2>iqfJ#ALp2Z}oBUtwpZ*3cHX?Kc-6fIcNq=dKTvkMY(6p
z4JRxBP?!*5LeY>L2K*@w|NBOivO1S)MpZzH@Q=%|uRRYwB$97dP?%kTC(lsfVlH;B
zD^}sbW{7W=Jbv-mz-=Vh=c^=~*zR*_<c8B>%}tL{;SwWN?m>jAfW%INh~Ej<i*F{?
zyYp1R^<5gdS;W0;auMToRG)jHKrO^Q*@}DU=hAFpgH8P!TvbmytHI_#@@}1uV#Otb
z57K}U+-M^o1)~(N(wYz~fmej7J?}vBAd6l~ICv+~BxswNTE&dfcvgob^YExwYa);=
z7`3cw6vJIp2ZZ%pE4c7D({Z7r(`GkMLyx`Uw$(j5Z1r^ZTj{1w7+A}BTE(}|JhSJv
zubs1_$EwLv)%575=}Hz-ud*$eQFrkyY_zBc<)yBG3hMg<lh(Sds%*}8td2^x9R;u%
zH6gzsKcK&X-oi9{x9p0Le!i6wR@7;whxx`7dGNr2%5e8+qVX>5q|N)4EE0N9n|90%
zTv10_$kY|`zEB5lRvec5Z^i2=wsY^(4d))Esiw%sbI$-X|K0QnOH@NUwgUQdkpUZi
z%Z<j5VJu``T!P^WB8RPxOjtr3Q1DPC&t4f5ZO=}EGqpYHZ5WX^ZW#1G8OFc|zM0uL
zVSe{$okPSJepb&Vne>dJ0UmYvI-+vPT2qA9VpF#0qij5j&9WBxOMJiE-Ie7HM$%Nt
zEsWSClTLS+V!Rz_4=`O<>)GU^sM0NA<7I&HFJ1ZQNWlnde08#$Ta9Fm<k+K-s>un<
zjCIYr@~pjCdlyW{mqN^+sKhY*?)cK#f49=;xhN_pWl&>{QUkfUy|XUHKdUU+4Tgh6
zL<XU2sM!alfn*E141BC3uQU~KH^{ynK8ZJe6I8<gk{jr=^Y!H@5d~*#l67U;ruFea
zdQ{W^*-emWagk_Sqh+*Mn<V64Epu^V*I3sOvrCU|c0_AVNqnB1%RdgXgKclA=}MU2
z0KfJ+EjjUA1FjMHR6D0|@>x;^ggCB;4h~Ca4R86PB`l%rP5GwVx<Zj{gEZ$O#Z~;e
z;~d)YA4FR=rAn>4BF5#k(SE8%^=EPs%Z_$G&PG?Ck)R_1>(Y>1&liq83dYg6kBITc
zDH6=5^XfH0gx%(1$$Vd^_JNUdQ)39G>XR3E=JV&<#zvA{)$g8FuRPw?eLDC?MIR_Q
znKPDh3%&v2+r3tSCUo>8`EdM~m2!Fw9ZQrN=)fMzb)>1!^+9+MrcZv-@xUIy0CT_Z
z2}HEJEz6r`PccmL{E6&YUOTv$>L!TqoWdq}YxW)OX1S3Z{%K>;<tP@y<EJ&PM1J6}
z5uN0y$SC%c<0fWmJs%h6taP6bczvd^7Roe<aysukOLgL?(nn6})4=R}7-5jb)aM%@
z&NB&&F0z)Tiumo#1Djb<S;n3Zai_)z4Fndgy7S6`oAGE>{kKYVw_Ce*w`>a)Yo=gq
z^wVcBl&r8EC|O@YmeHY{Ra6EJh^MS{**2&IP)a2REYrC^9lDwa2<#`jS~zWiS=sQP
zkjWy{MpBS3g7+s16o!ohl*?4WtnO!8lY^;}M788glEocDtjl8Da?rm_u;{5V`fPzI
zNJ{lof=F+u_y1s?9c+$E){#=^gev&~(vcZL!!brl7V_9v<=br^LVUJchzS19d~}M5
z(p`hAF4AP{OFs?=OQyZk%BWS?(}#BQlaFQr8>v-5d&*fItp9XH|6~7>w$J;X5~DM+
zQzSFJ2uvxxrxZf>@p!-1_~H~K$_}de`X&cM9{!C_Z0xJI{SBvD%q@Xa3h6uONi3VT
zCJQJ73T*{Yv1Sc%NeXIztG+7oM@4sgpVj?S_QjV>PAn@Z^?FoXkItXcHN%sfMFbGd
z(Qlckk;pYPUT!o#DDYXC3)%!S%3xN{Bh%SQkM)!k?`Y0KI9;=G@8HR)(phzB4Lnyh
z=U)&8`w9O0A2Vod;>A%-Q~-c&o&UAr*Ejs%bD%dmw$9k>iNCe_fRrs-N(H0|SthvL
zkEt@Twz;N~;!+#MmzAYqBowkDv(s?lUK=8BTXooX{Q$y~j!tg}8j+$#0b;=Cc04;4
z(*wI`8^k}|9yCi=Sy9h$@O|D3+}D2MboLaS^cHMbIf>Csf1z?zPTiGuk4_!(ac9m<
z!(h@(#nM{43m1F{LRw`PA!gECq*XRj(n^>nr{9Q{h6i!w?Mu7l$7epGXcNQ}k5SdB
zC>JX17m3r0oTSf&LeWvhm>I{>M!94gA&Fnjorc4pn1UvWCM5XkkScQdUJnt)`{1i4
z!*bw1=Qb!4ji$X+ftxJ4YNlLzs+Mp!(upeTx22U)Cso10UteE8IHUDCvu{t2p8@P#
z2tylv6==@oe)TOcs+qE<Rg|RsG*y<FcYECnqTH5h3ry0d;7N}S<);@Oe`aGAgj^gR
z@2~gXRRvx`<iC%Or}TL=slVV8Ojl}vr}vsLeKe=f#$M{nd5e-fdD9IrQ0Dd5%uarQ
zO*~w&bF)XkWecl~Qk5=1NqUG}8N0*%T0A8-L|XSec#D!+#Vl1|8#LtJrkj2@w!%%P
zZ2Ai}nX|3et!>YYbcsxw&y{0At@RFd6!+fY+b0*v*8_81CcA`+{J$7KGOq>#^W{A+
zS7?EABy*{#eBS&#eVqi}YyZ84UX!>4wRG9xSWL5rw3Ca-Y^|L9gneHET9sTJ$isW4
zS~w#$a>|yiW{<2#_<Q7MGmZBAsV>e-!_LUV{k!tr<5_gX17{3BtXR>&hW9T)XG~bp
ztMy8E@k-_NI3c~K()WZS0XC!d)do+;DNn2F)sF6BkfCF#>(2xf3h!(pC@Sn`=fnVB
zN7*r1M^V0q{|J}z;N@QmP7h&UwE<XK^Wmw1L(pbW&9lb`l0f{K{U32yulL70`tblp
zk_Jopld%sE*VU*3>!p4aArcq((j)bQPXPNTK$vl&S_mW%sHGlLY>FyI&%y};8OkT1
zvA}!c`L1YzBIE42@6<m0S=t)XREH^(VO>P=`{7Ks*_y#*oWy3<pprhtZ-|G>I9(lw
zY~}D$R^j~+A}0&!IHnp8HKi#n4AB*-EeD8VaClj8n_SmtK<;H#<PU50KE>x;)p<33
zh7r}do4!5o2Z|@F81+AS%PaEw<cE<J?b5~(TXCw(c=U%*iX|zVDmEuDf4%Mj|F?^f
zx4GEBeVsZ!x7qhoe)SEeo>_%%`$VKlVD>^Ua6e4heL$L-E7}sDEmrMj>gjp9HvUNh
zmW{xwHb$9^4@nPKpGo?5L#NcD?3&Sh1pJF4BxbV4&BO^XnQD}atL{lihi5HB(G=8C
zzl7<t50O?Ei<Oqaf>3Lq7d`v&Te}AtvxZzkrUxWgM(t=csCY~FVhF*pn>f<v+;|P4
z-k@;_aVPt9aoXkadFmOCHSn?G3pcR>1%q=j7#!H#xqua_$(MtZ{w#_$r$ScQE66A+
zr?n&J;%0%%jMdc6I7d`wm2qa3im%dU=Se=}n4fO9%Z|+Ua!lLN=OD`ht=doq>FvTy
z`1bw`u@$y9TF!b)`W9K%wcj11g#(jsZ>~II@w|oE*YpY0uTRO4N!(z&Jb2usDNwIM
z5iEZB)7LcurC-fcc*9$#)}5^;onW3(ySfjc^4lwfHs9@=SXg#S$_}|ZgVeEjkN~bj
zcoAT*8sNVW=<8v&?YV3%Gb(=Eyxd&j(4&Ei6^2a@w+&_3BMu@Uv%`lX$f)^{fRFP)
zOv{6i)|?xyfA<Bz`g@gSrnptE$x6aC%>Dl4j(=9~#>dYTr?8L`;}bFD;r8Q`2h8sV
zufgmsg6bY^n<||<etE4j&?D_)55}x|n4@7&!?{~xv0H%%K>&Neh#|13T*G20RgN=|
z4zzKm4mwTe`QQw&ZIei$vZO}`@6SIU2<0SC*2w(nTWc-5y~QsBe+|&z(6j}@d?A}`
zF6V9|<&<1#WP(z*10lz)t(+L%23=qttAm(y$k;=euiy+n{Gok@8tF8B=5}HO`#^$r
zp^}Ez$J=()G!4|tfMszr+g|4-9=^Q{)G7%yicv;%z_fH;c!;-r@`vz4hkTkSwCFhG
zuH8JTgK;&|%H=sZ{Z}(_sF`-$vh=gy=Ivu7a@@UA5NBGEcGZAudW>*w<*w>Y_2<6E
zd82iXJD*V--V4Y{6W%5?O`gc7tpOiYqpZm~Tx`qzo@TLj5}>iWJ<;l=?u5o8Wp9VZ
z{?AOk7;t_jO)MPV?r^AjzZYiF%9c!e*~-T|t!%DUFOU8^Mje$r@?$bt?2NqiCX%Ao
zt>Ok^zt7Gw@N^G(_P+1qC4g4P6Ain4drk%S(E9uYr`R9glP7!DnsWYIS942)Zby~_
zCQA?i?UjWP1}{E*rVO?pIDP)^#AEp2bv%DyfDkunOuwfR<sQ>ncL|oWh4)PDR{|c0
zZ1|!-wW8*dl+2>~u3d==ZEbaa4!jD^#+t4=Mta+cPX<`nV0zZ7Two1*=>wyc=4Wm!
z$yotHU`VB`pwD7_t(wv1)gz~h7+T9iq}}YqAv!i_@U=|{&vxB_gw0W*jF<P{*J!CG
zS_dFn7(YJ$?cu(~z^Jw?=*=?BY#NaKUV3|Q@8QT9bt!bv?GlE=9%NJN2V2Rh>o*gA
zcEX0z9Q^B7@0R(KwSJ#sQ7QCY=EuZ++N>>bx-sUFt2!}b34KaUQ`UMkbG<fmKfAJ*
z99WR88hgQg0@H}S>FO3NSjogssz0-j8*kguvu(Qb{mQAk+|%<@2G`nq^HB{H>an^j
zX|tLWZn-Mi{Hcw5*4q@2Q{f}P6F{d|TK8(Y(%4!$jT|<J>tG;D)@=(D%-_;&dl~hx
zv3e};sCxVi<EDNJZ8%un0ip9#-mjl!W@|l`i{nP1YG{F{R`ay=k`Zmi(>5gGRyZU!
z*8CR+%*s7zqyROnX`^&-F7-|Tf}2D}Y4v#14X1nEY34)YR~OUfpxYFHT#m-v%EKsX
z9LsH%qe<mXBgd5(wB94!WIZzOi#*w%UB6@lnwei5k-uikd`sbRE!(sbq(N%{4kC{9
zHgGgme&p%&^6E1G#w$S3^b%49D*%mAt*5QTFasKL7O!m&9uP4mDo)RUJuDnPw75}i
z{Ew(@ynz-8=vQtzGUtjFh=~ENQ_XnlKV_5pbQeBcJDld5q}Q4Q);b>=i2Tax1fPvZ
z!e7HX%+CogtBHDGeB{9bC1-eDfp|=|9x{u+(f3%BnTHpCm<Dfieb`i4Hpv2%)%$3r
z`emL`k!gBGmuG4UR6$UpwJ{hmkx`NcVZ$|Bh&P$ookGXRI{4te-jYQMsM%w8;^F!b
zKFxSzAG)F1l0g$p%nhX67jWG{d@GbpNru`tdEJOB<Z=Zg(YpXX!cE2=frVABi4wF#
z)Yr5Ua=&=T#Uau*{dQI(E2ob}KVenB6l7lPtFJK!?rsy>%NIhS*dAm~n)MeUy6J`l
z-NSQJ+vr6-2A{1m2e&Qy^PGg$%>~4WXc|*V#0r;EA%^55(+8Qa^<E-MAzXGtKemtH
zt-PT7Z|=w!ySpJ?D-33lhzwFBSZL_R=BC>dd(t)O1#IzgwOE}cW2qR$yP!j4_vmzG
zJ&gID9N~5#0W2uT&^*q!TXD7rXgKH2?;dpH30E1rvG>*^Z3($KH=+4u`w3R;;$xxn
zK068{b8hY2!+hp}&^kjB4d@X0=mC=z*e~ReVG!4hCE7YQ>ta*%?~%Nby#fzMPgi4@
zWx-6{<#3}@I9MaL?;PPb9q^vEiZJ<8RQ(_xGkASqN6?@;K6q{3ava};z~(AnHW)6^
zH_VcQpLgJ5gCqYB^VKlck>TtK8WWtCI13XTZ#7Hhq}#22gaafp<7|Ufa`LKHW-0WJ
zcjN1kuZE1hI0fA)l^jxli!POe@n?$A;4}VbVee>R|7U~Rx=XCmhuY0aqW;b_RgU{u
z?Br!K-m^VrI)V0ksfqdmuZWPlbiW;wimqWzPn<)cD;wzdg42^CW`NUNfs6nBYXtk9
zoqp-k>>yqdqw2BHda3*1qT4JiN_cSy#2$nfR?cYpG|zS$HyCSu1Lm0r3{$EsoqEX3
zP<_r`e2TGjx}Nx7>=(l<kfsZU`C=TrvG_i9WOH#<Q_{IEc&bj4r;{s8Cxl78F=<|i
zA=zghrG7R4@&wY-F7V*XAJMD7)-YBmCD#`t7wEwgw8|QGO7%{KL8=mSLANe#TCB-2
zD|C1aVwN?|phN#-?=!^fdr36gA~2$%YvJ#H(8k!&+Ym*i>*7ipr;zS|4!(Yl-e{hj
z5kj7UJ%!d(mIy8tMh*+C35u@U(Uh{zzu%D)>b8o0+K=K(LmClCOl1jUcCdr}%n5cT
z#0JRMPro8P(~$ClHP(QLv$p3s!S%4Bfe*|GyT9+H5r#pJbdwDeG!<senJO%CDGY<)
z@IM=jftEvMmyd&Q5dy{3F$g=5U61#bFs1~U;7-s(27B_$y9oP7G0kQ2$<BUeyadO_
zZ!S4Xa2~r06UBB>n66C`R)CxK5xhny7igkU$NcKCLB`8)*KxBq8;-FYt&W|xvusIT
zr&%|b4%d8zJ3$!X>M%~M=SNgb&`S?V+_tqT&O2>+0<rSexoFEQ^Ef8l1B>8*6YHz(
z)w5cjdjbX7SQGlc`*3Of&>SYdPAwjCmQh$8s{MzodTeX}rd@AW4<A(pEv?cRPIpib
zck4QV_W6>bna!<%61k%{lO-+8bIID<1wivixi-e9B_wM8n(ifW$Wr7$;s!YKW?^;j
zWBGqez9>|0Gc&wfqH&0Nkt(?%C&>5P%&S<h+R!kDVjRf*3Y$U%$?o;yV9bdzX)H~*
zb%5wZ)VT4A6F~GmT$<*QNtts1P{7`^z-ziSdDAFjnc<9Uoz3l{E6gF{6a<qfQVGbf
zdvtbdplSumcaHLoSGi1w;<R?}$?9s5=KEcaJGSy*yo>!9HVbwz$DJJyQGHr;h5zzJ
z_SO}5p2TJVjR}e8q{7iS6;Epj{f<gVQBsiUv$<>#?>A#~W9!H#SJ<RWAR(M6z_a8j
zrh=R8WjWc0i;buWnN!orrQg%m$cnUvrd?Pq4rL-f*x>R^Zzw^h<Wovah;|TpS|+fs
z0{&)Ud$u6|iJ?bzb7->RO?Z6ZHl5b@6KhPwliy8);*onS@y%&`VD_nFH{P`^Wwg`p
zH{3I+LAcHrF}A8IE)UR0Q~q&Hm`@Z>-k>-Vd_rRMe?ni0HRmHZJh`|?Lp@sN?gc3h
z5l(!Wb#pfY6bmHUNR?i&hVspPYmK3r_~l<>7f%`ZtHUvmgK}dwZ-iy&s3~WQ?np7Z
znVe#SXiZHDBJDU#22G@y8fiKm4;RNdlY}Uzc8qCYBaaBy`>4vz0i2TK8)@M8#?}zd
zfeMw==9)Z>VDlfAmaC04lXQ=mKX#=<*@31IIFHiLT|^de?DM3${1;!Nd8>^3GX*(S
zg$h*0!63|E+@<XarAMPW7%%t7v;=7B)U6h$k-Jz1<VKozaiCV{7rUZwKgKU4Jc0;w
z7KV+Uz<)42I=UR-S*(>6^vO!Dh>~lWOdc!P*T)cV+O-9*M$5Ay?=}%j8@yN|sG+e7
zTlzTgz{sf|ua4*}!l~MhpGm9`eTPwqU>Tv`9S=cxbF;Q6Z*S>j0RX5z|4sb02Gv7k
zr7w^A@zMo;TCGH)=4qN&GT-iUK#FhkjGphEP}dE!2a1Me)w-6&Ayae{Kp~qXnW=~G
zHu#QsV4YRs4J(&;8cj#22u;oqc==~&_rdaec8~E|@sw1KSZweT0X_hx3AK7sFfz8V
zfU`BAMh;ygx3nKWB2cL_-XgfJx668gsS`SpP?URqAw@%ex*Kd}WyY+pIxmqaC*~#l
zCq$BA#0WhhB8WqN(+JGSR}2T3qb?#V3m-T_&=;O*m`~Yms*4&6b40&{;dG=QY#A0k
zcAu^QA+I&W0<e_(SBUL-s<EXJav1I+$El8&LroLgB#Qx@2vfAJoT#`?ZIGCr6tKS0
z({lW9CXycTVyLBKZoEXsf&lHnlS5VoROugk;BAb3z_Kb%W|aq4QX`*w2uDllY%hXg
z989*m50$2I<z%-+>(=0yBl2@Fhn{9M)EObLgbDN1O+@glmP+39e!iCHLoi(+xsF{o
z&Hag4I#jBfIjtPfSasbi0~G>+>RS)!jzIjt7$j1=6@O!h$^9fIzHi;2{WMj$dY<D;
zaWf`Z$@G*2BVt-9G$M#6XM8=_J<6a_w5d@yZqTf{X@~3v)7Lc$5b@Z<+Sm`%Q~{Yv
zXE?3Pa$?S?x4dAs&iYM!z3Cmb_F{J)lsd5;<#yj)`!Y~*rdfFDo?aN+AWU#=(OUOR
z7TPdKTHxO7Q*F0+jishz{q&5lX2WoHTj5<4^>tR>752Ef=Er*{hm;dPj4N#X=<8(O
zEmeFW%YS>rGtv3y%Ky@l^t{$nG+x|g=`!!9zaU1uLF+fhG0lL}2Rk-0>v{5T0M7gO
z5Vnt`!&~IH%XHDh-Rm1~W{QF@c2_rXZ~S2BU@v&azv(Ez&DfmP+Wx>XexYO6#x04y
zT=g}fi;(1Vu&SRkX{B)z{gf=+L0qDY#SrglKQa)*Oo&zIZMFg{>~WaNO|+g!L_Bkw
zAnoNo-gQf^`Im6I0!rtiw%QRBXMLeQ>~yE})Qn>~va=%jTdVux`g__-KiU4}dOx|w
z0Xwwgc<yCmPu{H_PUM!VYv$1#FP`;UUzf^6r8<`qLS?rE9$M-Y5`sG8gcNfLs?U#$
z(NfEiwO?QNt@)_Q*d#ZQk9}47BZxOHxJ<YQqhr)@u-cdQ<j@-TXvH`D(HG@=Um>`z
z6hlWGQeUA5#LYnAO{OpBG2;LZ()W^%(^&lK7%Z2&jwYi^f~;+V^#tY;hSq1oRxIx1
z4$y45v<ZboR4y}+3zqmAC+l2l2AsSxH-*G3!;ur%wk@!+=aC2UDOkuyV<k(|35c3U
zy<k!^q-2C-Tez81Cg0AP0nISQ*Qe!X2u9f3RT+)^zGX%0GLN9glg}3E{x@bk7Kkcv
zA2u8%u`BF7767*(jt%Z$9m6ciT@K3;=jS%6>02+9CB3#DkPv3pyt}`QW`F4z3s*vG
zo@n9`swg^F?5l7ykhvfo)^=Fy1?3j&PFKZwOc?4wQiW;p{Z_Mtd)Iw#bJ>bQiS7Al
z94lKJ{^WQ=Yb-XzeOX~s4q!H-KU7ckLhST-*elq9$noC)e*{h2NX449PyhftT>t<G
z|Nm}LeH&vNItx`5NC4oSq!JB1>2eKM4`={Dkn{hNNB{S_;q`akVr%^SQr;(JHrG@&
z(XQb2eULWuiAsE*P328pie8fDK!KFBp->`~*m|7teQSe8Adv_{A!Y1n=9ML56TCL^
zH*C<T-v4=pvrOvk(*T=wK}*~n7&vI!9XMd@$WV0Z$ltYak*fvzQ@08|W`Q#I>+d{X
zcAa1aVsMhhguN}_0Tqe3+HNQxE0-mjD+Po^WvTTL)mncixqUaOlOC_ZPw40%$;D5M
zP#i{{#StTmlZN!IKPMuI6Q}X-b--O}qUdlR#1zLXicHWb75{d$5Hd&Zq)&~2!mB42
zck^4thY<(f82zRIuxT9{?8g)@I0E(&m_|4-Gi*1Ye|@{VyX)e+?@!-)3BKqB*o@z}
zm>ukZ-g$F(d)+!V1<nhS@-jj3JRWQS%A?hkII9+(<$->7@RO^Z+wJYbOt>1baQJ!J
zZ&@Bn!6#skc}JeDzzi#81@2++N7~H-EI*LkdqZl?yGFEWzQA=2)Xa+MxEA}55_?$f
z@5|YVy8}Zf#&BQ1cZ0Ch<moS62oNzpSME(%Ert{VRsts>&{xZnDvDA+{yfM7hvHpL
zGE7Jdp|Hov)}LYg7gtHFu;z+ZV2nr&R7GMu#vDwl`F^|jbQX6}dOdW{CxOA$ew(-r
zE{8Fw!MMhZrMUJ`TFlRU@Q3(~&*xOC|Fy8piisKOa@|fA#a@Tw1ZM(j260Xq9SMBp
zap{qYy^;Kl4{f`K>26-PJi0#k`twjXy4`$l`#?%-iSMmxBVT^dbbAfSCM!^ZJXYj3
z#UPNQzLqBDZ+}J^h;9k&`I3mkgYyEn4;rzSJu52|+z%haX*!*)B&PLivWSUMwzgK*
zHhO{$40G^!c<JN7%n+6~v=klqOA05-yOnXxgUaua*==rNh0N?E%oNEZoqh>Yx;yCJ
zoogS83-tGLPkHP#)`1T|iQ@kPjQxxTq)4z{7R1YRj%`0HzZVy?7R+9DH)kI+^$Qy~
zH!x(#REpX#pLZnS%!~pIw7zvU^`?&deRKI}<1sWA9Nq_S*Yf^#C(fRReh++#J+^oB
z{<VE*gI_MhKUz2fbV^`2yDTgXq#7vez~?Fvo;G@Zee-WPFE|_@k&=CsA)=b$FbSC_
zYwCS?h!BlzKmLr}w|_x^i+}-3Mkd;=e-#p=&7ovp4>2S3Rc7HwmMHEi4h$yp5{lT=
zhe3#To}0sa%Yg7>4NeIJ=hp@-4j+*2H%dmwc`{>Qt(<(<fyi4t#v9S(!N}q1_OXSr
zq=3<}+#379Nl@QJAn6pj&<`M9GR(ZrR38P>kLkSQ7bbq!eX&eZpyJV@V;M%INaSBH
zu>Kd3oh+qQOIaX3EzFqnAn#&gkEFM}gU1=S+ajdP#eYa}J4V!!oE67}N|`)3E^P&I
zKr4M>7_h=qx_OT;vx0HMOk4Tl%JAzMZYL&`0q-YtE>F^Xt;0Vkw%^~NX7mp*=2htl
z@-5G8LVsMWpDcK-30YLAN2058lwxD*bn1!m*vcfHIJ+fEjZ8J33u{<cEVKTVg?<cf
zLh8FZV&GM;tLRjq-_d}7V^G<g?TYlvQ<QU+W`~aM88SQ%$^V`5JdcO2#K^IpUZ#f-
z_1PJU1<4#~)SW0~`Ylad_8bpKeA7eIg4eA%snDP$g6BX;92On4j4?R>Xk!v^vgF3f
zhYn4E^jhcu;&fykGbmrrHM=(I({{J=8G?^%`P56I<`5cnZ#f68t?K1HsDVoawOP-f
zG7G%LP#&8gx@e;g-l#DobV`%v!Bnh7MZZm#)+9wL+|Vi6`{XH6ep9veeJqw^T2ttr
zx_LWUIw&fw;DBUkRpyn!m9MZ<kZM#Wq=sQu7g>>%s-AoIY~}`i$<4%A>BeuSvjnV2
zg8Hx4$$!!*=wo+ac9sSZ-wT8Z;azasR5Q~6L75gxfmCF(C3=ysNPcP+lxF$A=cvM0
zA-0>XL}uRChfAv8=lK+aI>W#S)Ddt|Mr$F3A9SXG6!Xm!9$qFvMJYmc_~o3_3_~m=
z6WsvFhm1{Foipg2rd-h_sf6YmQs7nW(3L(=^BT~Rnl@ChFV-4|+uuUQ=vh!P6*HW|
zD!bKH3ZXmG5L!GBF^`2EQBP^|)V%t()IeB7>J5q4$Q<r24~h~Gq8cy==42t*9eTy2
z&VsW(2aB99gB;318E|p|LrpkHTXX_9Q1}wS)5o~i7c{6|mLbFLf}50-X)tCPwU{WP
zrBLklvO@d>7PNGwO96UwnhPdu3yddP9635u>GH5y(DTf?q>$<o&DT-eFj3va`0Mrq
zwGyzyu&vH*Q%!fqnHtk{9(%gi$p%1g?a`VQ4rXCQe|EE$f)~Fc<!Z7Sl;xysejo<i
zNszD<cQ}J?uZXrK5%GKmg(yV22^NVIi-0btN%y)L;uIS4mSjbGaKwoBokeN|z%M?;
zWc}q9?wcbbzoB=b%Kmb}C33aPO+H;*qRM%dhc<~WGC=;lK}cDCs!~i=s9D;5!`{?G
zs2iFfv$!Br$I!Z`i4*IDu#5%R@eIn}JPES20Lx)vQW$D6UjSQr)Zs-e)6_#DHe<(W
z1k#O8^HTw@FdRJcfW~M{d%<Nb%`(;ww1p2;F6p3Bo$E9zI(+s<fhjXAfC||Li$-9u
zqh;{HzgO-RU`=R}wBBYC_;LL;+3AJ_k%J=h-;hIRSQE;oHBqBsL|@5T-eAMOUn03Y
z+cfCOj`VqS@C<clrDrrm=(dPx+2)KbY#q!y5u@Oc=@a3iIm2g=1gQ=SS3eQdDCY2U
zsA1+sS=2V&op=}?IxdCa++3>xg2t@tig)!8VX-L&@tq5NYH?yUFaS}U7nRv%!yAsC
z*@+Q)*|GoF@G2psB~d|Br9K3WoG2RiPN8$+t=()moG$NW9K)Mw{f)FBlG0Pg*S+gk
z(csjPOgu(|#the|;^gH~r&u!FE%ra;(0~j3)mWhYP_DZUn=w0)Zx0^MsYjJt%~9JA
z+yxzH_c2RaQ+<61<6ve0BEkg15>h)f6d>9HPFJ*l*f?=v;oqF_P!_NlN*)~<a_QuK
z)?V%sN;q@k9R*+%%o&7r5FZKd9$jSQGT;i_mxCeHjDqB(i6BUIhT>8p`4$=X_6r5q
zgS2Lc8``_h6WRNj*5F0h2qYh0Wvv_55X*e-<CFHc60jSPQR0VFfG>P=&jPXu^4&~0
zjngW@Prvh#G}R96d(&N+MWm^Z>mD1I?gv=Q3M!^RYZjR-1qrSgM7?r(o<)j01qbIO
zZt21E#^E2|gui>XZc1tO`4YY`MWRgP^rTdfu2B;N>Npg>VF>6a0tv=pfSe~tMT0rz
zwKjMFX7WEDhYrfp=HNtqWonTG4<Zm@Rv|<Bo$-D8|67iKw?Pd19U_VmY&sI{{4d_|
zo049~@z&-8#Vs@y*pU7zah2Odby@^%2EB1V2z*yabu%5yT7Q(sPyA*7-~oNC$rEA*
z6?!xVe6DX$i0rzyi~Jg~l!^nF!4!>b6~@VD_uxMtq(LJRU|E#puOM!^kRbpG(x*1b
zw9o>Lrr&MJq}Tg5PP1hz{{Ek%Iy2RUD$J=QO9}9g0N$pwf(H|vJ@!=%PT|cf2P_LO
zGA!#(;IJt)AO?g7@EB4G*!HiXm?qiOr`mL1fTHNNXOI#{g1OV=KQyo=T-JZ4jWh&~
z20U;Hj5U~<;U()*0A5u9OkYHMZ1ZD+1k@#o@TX97s(c+7_e7G8k)u}&lm{2}Do*o%
zhfW^E0jC7$vp_T*8yk)(Hj$<QM6QCij4gGa?4v_N!1^EcazxE$m32wh-soQ<c$si_
zo<Y>0>;((^U}`=(_ny_yx6fyS-!zWXvej^x{WifT#MX+-(Wj0Q0r(_f+kiJF+K2ZQ
zMLf8;)ba>x#qt<KCI=PiiGOnGh$(0fPSG?aC@6(Yi>X6-$6S<(3D+(z*;mD4I*#NP
zlWw0H!_Vmh#ltEXrMbuLh>TS<6_P6pnL*+JV%+P_@!v_ovUxp|5`d*VQRf%R3(B55
zvHC;KK{|@H!+LQVBQn2_X+*bwo|0jAb8{;Uh=)$H{~#VZ=oD~zd9mRHh;~sdq>p+y
zdZh{_S>KZ28IOAUB}aQEbT#M*gtrlvBRT4siiglhi-r3G9z|kBH8)F9U|#C%>+I-a
z2f&YBE@mhT;2&Jnc6I-bz8nAC7u|fXq7^!j0;7>ju@+n}u^duT9d&d}I-`Hw`lM9I
zO}_}KFSo9b#&mpWDaibpY5lMJy>fClDoq{e4Zc^y;W}y@`&Y>D-vlr{pu!t~`fvQd
zVWiJ!zdd@xBUj@s(!eX{{wU-iEOOg7t@UvmAE$_^G>&2fDn@pSacQ+Od+SpzcvOP~
zcP>jXn0!gYs<D$Wn7pS!gj?-n4vJF4#A#viUs!BLL`OphgFCH7%cs51`-XynEo8k6
zVdeQSVR23S3Y9nl^r$rnQh-4z=7hi~h(A%v3A|Cy75SAEw~-`J6HWN3NfRh0xWTLI
zhLI-6VY@K8G{IKCv@oomdeDa2b<p~mZbddjpr1FYIG(*g`wvZm&y?G*T4KHqF0e(u
zx;T~<EN63MRPe0I9XgF;7lmVUewb8gVA%BAb)^wcw%F&#<Dp`j=b5z=CuRiJRF6Nb
z+|;b+8VO934Q?G(56m%bl>9U`eL6Pr(c{r8nf^?dNlMaPp&6|aTKPZ=ca_w6H7f&!
zVoh8_O%VSRg3@c)meV7(CN!FycT1K2F-aB6s;;o44xCCos-YgEE>u%Yd?BM9Tf*F7
zkDq_hk5@4b7)fd;sTz-THr(u|wcv#Gs@Qv*vR7Pm;-sv-`QEMgI>HnyBIFjcDY9v5
z*0n*ke-^ujswH0b&?YOK^}B;&mfEr_gqI~MtHrA0Y~i5;pURHa;z+1muh8Eu8jPc?
ztx(r286}XqU7@X`CTKd(94@H@>N;|i4BBD~qFtR-R-Iga#K}nNvI0uJC@7nf7I(gv
z#sIx)&l7-72B>z?PLH9xY4b?xx2`R|RkdYl#)ql~sRY}FCaZe$l~~u{=56}-{NRP#
z>~>pWr7?LWm9{uBDAKRyQ`X@rp@jJ^5iS8WY@QgZJ|Q&eg?dKBdQCN1md;Yzp{B@r
zf&4{6W|kfEv!Nz0^ew7Ttl7$^EnLoAl{G*5R{d!Ay2GNY1N`SsKMBN^wyv4AUJ)#8
z3g?;7Cw^<0By(k19`{34X|epI7H#JGOS#j|0hoHLO#q}0s7?Z!0=CZtUOM>LjEuQ?
z(r;11^jz&#qbu5IR<$kdmE|hx@DbA#A}%W}Wy0DjVPTUZE6!#~SY9WpN<dmP(JHdj
zBgXBS7#@u(V3V_@plF@2HJP``*_LQv&D+sn+;{tk-8Qk~8Bio1N=UqCRl<2Oy5oVJ
zA>*`ywd8i+i@K@Q70@xx-veE)Mk#+4?*IzoVp|cw6>K51N<-E-5QcN<i3%#49Ui*#
z($RwrD_Y>xTLSIzsEBm@E_!I)V~6wRuh|ST){Sw)o`p7R_GXn7<P5NrMse<&=(SiG
zwHR@asYEIL*Q-`c(XRO?plI!fy}z*Q&;W?lLrbN!;goB~r-+?h(ZVv<YUXMkr_R_r
zF)pJ^J+;zZv8JTJq6SY&eJ8cOxbTo^M+x};(?LoD^<AgEC~*RRms))KH*6=VGHiE}
z3Lx5KcTw(M?k=sd)0L_%1?cB)7m3dC_g{vj_)*+lI`Z_d+m5pKc5jrHFsfxo35BZ`
znNIo}sTVa)lK1_rj^zU5Uh&W=CsoUczSo(OjO|b9p;MVejIDrf#P^q27d<eaV7QKj
z0In6$r-~K=fjt8v*$?HmCVCoikK&{q$85hXKPgKQ;R<Y}ctn2dVU>(#sAPgcyqc*~
zGQ;}espnzBFM2xQ_u&J@or`tCBnbz|JA4mcvgbzR*28_TZM@BRZg5Io#;?xY*h~&9
zJFuZ0YjA}mn&3l+G)F@LSkK2a;$NVCKyDutB)*jtIk+XaGWqmg=*fPL>cd`nL@*?)
z%RhD)iz?kiUNIkz44n<V4E51wCO!R3AJ7LE7eGddES)6=D1v7I&EYQ+F``lX9LYNW
zeuYuZ_6J)kTu1EPA^EYnIDeVGn5jPm7&6cC2&LaQ8@=nhB~btscibhY_q?VHTpYf=
zzl(bedOM=yJV5*$e2@|S+}E-99F$+y;Sl_f9xD@CHOxP^lKix}K$Xl%N0vV?Z=V2E
zeU;LlGMi8>^<7@HD^X0jU9;8$Q!~+!hZC9a%-X?NebgQF1&n1iWGR(H1O3?K!+ciN
z@b)V54s<&A8i8MWFNl~RLqE>s@7}kk+=LIiUWmna-*3o?ixIO$_|sdyslAHSE`?aN
zo$^zXw$Vt)A|l$=SlM7vz*>hbot>^z4u&;_jq;6XWTyU)=*uW3i)*7cBqym`7v=XM
zf!5Hz=r6kFQ+s(u?)8aNR)mZ-&?p3Ra&Ku6HplVm;XVNr1-FhyC#OvIN1B)PNkv<t
z+_6bJgrHa!@BwhznP`$8B<#bqnf<*(LR-#U=9D+6)G0_mW;Na6G}Gk=7`k{P=a;bF
zeITWW?S=jfnl(jx&<!mGkNsZ6zyo(U?E-p11!AORw;YRbZCyW$7ozk)FZ-y6Pd5)Q
z$5n8daPIAe&zKIeYb?W6s~pE|a&PjZS9PXZcF&PY0G4sq0!gJ+Qn6afNTS6Tl8k{3
zYT5MpC@MKKtP2@CGomWusEKM!2id+d+)55YDW5zvts{8#FaD8pXe5`?*!EH)+pJFV
zZxvb6d>xNavu+iscd}e5X$@tenzIHDSbQ&W@$kR@L)be8i4wJImSy{tZQHhO+qP}n
zwr$%sPT96y)#vt1bj0nMxZjS99r-KsM@D9DJnveYk$bOs`Uiu}Ea=hVHrWw<+_xkc
zrt3tpc8P0TAr48o$gD&T(-U<3LqCpVB%>*H_qE0t946)yL2KVXqL3~0AHTr=y~O=g
z>31v(69B*@_CJ=m>lrxNGW^f9qhlT`B`k@=-FK7`X%I3C5b^7X?Jfg@pfKypexxxY
zQ*5k1I5Z3Vbb{Lp+kZ_*cXoX>ZmY%kK>l($hy}x5)J{%Ls+pLYq_lcj6^p?wT`|bn
z+Dak8fDM?^qyL0xZ;cvfj!Zp1{&CDK`;9&&S@$EiTk8Hx_!$MtQG^5Kh>GU$L(sbc
z#E-lx!5Eh&;w^%ks^%ao31T{+mjLJUmSg^=;}#YFdJfzXhdaSYGa-bi#C~j}7=LMu
znDn;9Ju8_=J;B{GhbqyWJ$7WIxWl*y6b--_mr9(Ig2)`3@9`ooFaW-h2*`zj7fX6d
z^j<BF=jiX6f^3pIjXOyk^1~4!xpCV{-E>fPeI19#XInxaR;X@W@;<|Q+e}m1<f64h
zm;e5<vGF?L*z4XNIk8LLemt{!o$LFe!wrx2II?=}R-OaUg>%}mpxzT6d0hY0Cux>U
z0qWC{N-f363A39mLnk+s)ed8(kbrFPo<5S}(MkQJwb(VW6jt5!GKLv|x4}TrWnAAh
z%BPnE$Lzz_>CVMt7+;&@?l3}7fp}wt5L`vyb7QZs)7U%Jxs*5YM*j8OH`oWV|HV34
z<biR@zhjJ>il+ouQ?+6HD*i<<ix;ptg@r`N&*^{t7{(o!b{q&Td>?OOp&KX;7-KTV
zO^f$XBKUboV?sM->O?1n7WXUe3tT+TAD8lV2b@VP?V0xVx8+|<tLe&r(LStYFMYyR
zK&EZ+<|WbTThQbR6ZtYzT23H#PHu3585;-eRvR)ODSd}*A#f^C59TAkRK&3<7?8q$
z=U=qgN<fBlcj9;=g6Y_flA-eabk4ZP=*|QGO`4Te8W4R0sNeTWb->O!G>BIJDa?|C
z6C|W~ybo>#W+$3<FskX^_#Ye84+-}wFK+IW)SQu%3wmzwv2AH8iAaB1<jwW>RKcAd
zQ)Y1JJ1J>F!EH=P<l{W5^f*Vf-3>g`LRJDn=LwfF!CoC6tS~ya|Eqw9;5KfB!oI)z
z<Ck3c=cZ26<<|iP1Ei<#@9&2q`>-K<^U>Xk9apD`zZRJ46hNDIh*qy9(dO>hRMnBE
z4Xm|U!p@MV&I!DeI}VyL#+Vwu;~Iq<<C&nu!7+DF;VMcs848Xixd+-q1eQxNMm|FJ
zMijE=7OdNR7=WKUXgUI|X84<bjT=PVQwGtt)8Eh2Bm;Jyx7&q%&~pXxulu3I4}47+
za`wfkNo^+B@PZH?oyKRdIy4wY6}H7cc2pmcEtBV5x!Tb?(X#+G)wNzHu5RTZ<zD*2
zQr%D+LwenOIDi-b%AwBbh?l6@y}SHc{oENivGVky;fJF1N>#G;CG)f`9<Yeb?C5f(
zU#aD8jCh4vzSWDM08~^bNy@m47K?f;^3aGbFYnKe%)ON<R^a!JHj_cJX$PG;$$JTU
z%*!rjV0t*vFHb?u=?^ZC*XM}Pbzz|Yv3x*)lJHJLN(A;qQ2J@$R{8bnQ)Yn|;sn7G
z7buj8Fi_q~3=J~%Bs??dPR?2C>1NJh{9lTOl=hIQ^^2OE@OcK9CT_Z&3aU(64zLD0
zgJ;zUG6BCC!j_4y-lzoxg~~jDVo&yajeo<;?-8uN;&L$hA0HR?<9nx*;1w|N#^P`{
zB|S!VcSqt}x*z6wl>9yZV8MH7#v+@*Go_<n{)Tw6mzf>rz0!$}6}@@`u>*z7Y6$_Q
zlT8JWdQQ7Cgr64uc3{iEiQ$X|x)|g%wmb6rx_KU0Y=o&4%gL4|v2FWa;tovm=tkhu
z?-oXv-_w^O#FC2TT2$BI#K6hD%!zihxC1HO(a@5Gp&gzdZLI|u+`;8G-warE_&Fo!
zM&~ot7ZAa!Kq!|LJCmJew((B1rsrHdo_r>~?lqC`rF>JX0%H1at$)TgX})Y0893|n
zQlBK7K{S}Q;tgKmUr8;IuU8h8!_jV*<5P@U?B5SyJY|d+`dRC*hMKIO()JoBmng(+
zS+c}^qD~%MjwOhau7vWJ&F(56ZdTj%%GxZ?uGOWycz`>n$WuqIaFVCaxki#<vRPq0
zBzOl#f|<~$E%{UaRu~XdG=EE;R!ZU_BgFe0b34lLKiMdQ@I6;5hzivZ_Bp1T7O2pC
zdrIY$iK>*ud=OuBQF-@NKKM4FewUV^nUY=byx6$q$HX>5t|yK3DnDC0RP{RBSjr@>
z3yn+cI%{gVnDpx5c{SH`Dzvros7?1yKer?=4xvEH?W1aa7fWKmFof^ulh3rmjxGRA
zZ(#pZIC2!lX*GWQ)n|Q9X^Y3xt%_~oZ<g9*^L|V5*Z0HqB1@e2?o6B>TM1TGhSo@&
zx3FObTa}3uh4uLu4mD_~vJe+zOHk4qV_2@PamCberd|{@5$(%`x@R*;pJo|nG=~-n
zWsdc^Ofsm6V3JrFw<vPp62%JFM8I6PCL~MpRJ->ER6YdM@RT_`VAm6ccKoi-ZldAn
z>=12}J0XyH4579`r#IR-9~6{FrJgj3R6uBbH8TZ$Q^f!sq8JmjgKs{XoJfAX1_7?V
zgrl6sUoIL<LZCs|udkd(=!mY3wLwX!u6KQ|h?D`;69lzGD|J=_>drNB91(g5y3d+8
z=31n>Wg2|^BCoPL`n5R8A?wIw1<`kW6v4jVvW3C{5#a)G!k9ZO41XA_opvCQ!qz=?
zn8w+e;W_4VQF!n_8HiRLJiU%AFwmusA-fX25}y`;8AmoJb6OJBjYAq4fCmG45<=$$
zKs@iiwN+avcU1D12_yJJ?v`NoOHrS64><X>TWlhk-;{K2wzU0h#(F;wV>f#cB+(wt
z=lVrn8+gLiV1FAYM>{79p@n7?+wvtf-pkrbJZYq8e9sLyTsMA|&{w8JFctQxk(~r%
zCVX!FZ-B{^yYKzTc?rSe-{B~S`@8FNp}b!*5s#`=?06&%EF(BUXV;IeR7&95&1s2h
zZqDh^b^C}uvD2Kli`G+c6Rzj7(EmEoVt1Maq%9!?2e{8x7vyH`boKS{<m~Bca22`U
z`Ovd5CUyakDz62)-6k`+W0LO;&Rq@EuObT{+{vy#kB~gtdCsP)2EIPi<JI3L#5ANM
z^jUj=Wtq@H(n2vTK5f(3HaK!#0;2t7?A5fZYG<)GvM6g!Qco=>wp8R?(>MC{j=HJ?
zf$4FKG$&!Z@fRHwz%3jRDc8dCdJ);cp6#Y{RkS0Z@?P?fJc+!Cp_DqWmL4(XPOdLu
zo#2_~_T5tU(l$W~10(_o-l$K3klU<hGt?}KY8Pzlc%a&Z<f^D@s5f}<O#>T5jMj4D
zu&MYj^qF5>E~!99B0d?{j%aivUjRA=UI=XGXP0wU!godb=Lv4r1A-yTmc;_^{B;oP
zwchzlovXFP$51Z$bb(}}{7ev!&4r^J89484y^v5oZJdzh89~79MX@9nhWz#qNa<13
zgO>U;%y+*<cV(J0hr$gaJVX`{6e<>6Md?6Rp1U*q{s1a_VPPA@Gv~QZ+DcswIuw=x
z<<6!ZR&l5hV(H8K7{5qOb3vnAH<0m*y${Z5dz3q&*Lkum9n?OKWjL?nUy%nd>{Me!
zI-z=vC$&AS<cXDAhg{8&j!W+J(qk*@!H>F`9tgkm71RwEV%Ti<*ugXL#AQ*B6d>Zp
zN7%$Glw32A9ma=HT4KTlBtm{{yE>#pR^gEBw&=hwwR%f^b9r-;*9R$+=Q>q~gKxma
zX1HdUCQX@yy&pM2B%7mj-35`*ON}(iyCENTFY3cU=pO$`=DJ#gd65soeoX<8c;!C)
zE-!qyE4t=paj*IUWX&Qv2b@Vm>?uJe5s^_b$1h$@>P3#RbI5%GuIK8ac0t)$fN(Y~
zuqNYmL_++Ale3n%ZkR2A3rmMI;#TZ!31`UC&vkTi)>&-US<Jua&BjK1W=40nW=4DU
z4D!}6y);;6q*%Z~F@tr_>TfP)eW78ph7MOw_j^{f>;ZXvRe+aXvme+*4Vr7p=4uN4
ze~dlU_>ymnv^Mu}O_<a0Xgb|<3k@?{?NMn17`;y4Dsi4vKUzKYDhTpE1sl&!dnWvX
zPfm882|FpqM`_>H!fst0jP>%a`U=ML!pMr&(2kfeyfME}%0{)(^GsHv-~%%-blNO}
zh6B)W@JXB585RKjnxi^{@g?N6G4oPQTUw<SrqhjLM@FTDhC*swpGqu@_*XFNmELI)
zZsq;+HxA7NME>fh_F?i$a<4V$iG0mZvptR}S!<2^3w1qj8Mti%-+-ZT$dZ#*MDTFq
zoXcJ~b9Vp;D`H;np<Y35JD_0g5d;sv`r~|uWMlFI=M6Gh4Iqvtsas5m;i)lH3FS8E
z`!L8YIe@%VyJACAp1?8u9vD5T$2((CF+uULy&3~&B%pg^cFGHP#5T;nwJC;>P4h?T
z*1$c!l^?$K$xMO9fmS6P88C|`giY<j2&6)vCPuOelw29E;Pm@VvBypRgLijh4$VnA
zd%zu<KY4Ov;0OdwoLT=Gdaed@s-Spv4OFR~{EJWeRb+LG0dP`F%;7#^Jn^pYP1;<|
zK+>%^wCN^uIO3B+L^CnIm5nXVE46`?j)J(ua1ZW_L<iXsy32rDV3~iF{7z!G)mCj*
zx64El?XI#O$Fs=8q$(TH<Wa|6a}1vhI8^VfuEZdOwx2#C_ynF(R{e7CRK<-pcBD;T
z(!OlDPcUFY5N&E;?V?7X)|pmunv7D2y_v8p<d$IE!_|yRFXXqKV>__<bBT?)+$?NQ
zaf<IKafKwsAHNeE<KuMECN|_lyRvXmjM43vV%MFOqZ7BeUr7Pe4=jByfKiwEM{rTN
z&QJ{U+w@`Rhb@N}^=3}#M8V)HJUBZhl80h5;02AUSyqgCpz!F&>0T7boiD;V%*Rx<
zr=Lzl_vQZ{j1W$o$pW~UGh;#|&Q7+!2p5x5^uPoWI+SrCq_X25NQ`Z#(!*m_e|ti;
zT~=0o?Q0>vgr+UPP@j#ZYnM#@l22?ievgk2AhmiaBbAxGgrbC=Lu|H|wjqX;4=t@8
zBSiuY;fVEVXW)08z*GU#CF9l>#xcM*F90&+Hke~z+Gg-FKr5lGP*z4$Ges^AQxp$q
z0(3v^;4!w+TL2FgOT4*ulM(S~;IEVQK-eH-*jxs3xfUnhMocFnZBDqv=0WlOb&Y?9
zLBl?PNnfJgoSf{Qut|^hh1AQF*?rHp)fJK^X$yJe2j%@yUYvnIp4;2jlIxW_sAe0C
zCi51W&MEZn=x{?xNvPYcuHB7({k$kH_!T3h$f6EfZ#>NNFK1)R4eIk!+TjckSzg7d
z7Tn33dp6*$8uC^Rc&|o!TyGoDjy!~o{b@kQjHT8A=zjy(FX39TJc+>Wl`Sx8+T!Ut
za44A+Rn9qUpj9b}pDq_bQ>Hbil_+1yEu1^ML*Q=F^9TW&x@f)sxG*0f(2*|NpZHnN
zN}<H@Fg1E6JV!<PdU}u|Ug@M=xG$*}&jO8fwJ9N*LU9SO?kMEY{s^lZoKo6Y?S8!z
z#?q3Zh|&xsgt6!<zZ=zyTYHwN4XV<8Wfr$zSlRV@+Q>7TX(yC5az>Z)-Qfcy)p%9q
zDXO;49aEU_k@B>HuN!OXQDXIq{|!t%Cp7`j=5K`zJX6prTLVii-g5$g)pQXpiH+S-
zTW0^L9Vj@CN=>de3++%kcEsJ%xa13SrT5ORP3>m#)>y}b=>Eyq1F1bLOa-*$7^Vx|
z6}QNaYW<-rk0CsW5`fZ$QS`aD1uj0lY%JgNuD#{gp>{!7v~RRjcv$HZ>|%DS)Yg;U
z&e8@WZl-LknIza#hKZ?ANKqf91xv@U?a|7*V5|FK<jJM&h{3;$5^hfS4R?C$hiBq=
zHCNCq1ZcY8PN9oc6)VoALZfOB_(@s+5z7$7KLo?R0E3;Apt}tnsbo@TS+daw$jn5>
zM`csU@DAs~sOcm4BB&|7For!wm>EuC-K15t6`q6OGRDC7zW6&a#OHT(FNm4-j?&s2
z_;rq5$(^Q|@TR9>u63&_1+AduV^Tt`E;YxR(tt6USgz_2Gg}+^fmua8&lEcy`^9xA
z@xJEc%{Pbp43e!4Czf8~aV64WYbnaBh9*^j9axr@#hn`SPD(C&->|pldl#eV3B{-V
z+D`>)p6h?o#3SK&d56S{Je_|Q2%_79AFNWKqnt|H@4x4#q72>9t2`n%Rzln(?H2T9
zb!S08T=MP?7<+2VG2Tfi#z_bKl6gozNxBtq(MCS=B5HZRx$&oL!yi&Wxvw#*%dPO`
zn69dJOT~p?)evVr%H_%UVc*2REjt${CUbEQh^&PkSkQ~xmS5@t-WWn%p|URqYW`m1
zqn??&zb>jQ?wF+nVN_93DFVL=-^|?HsSaX<iCIRMOyR?@biECQ(zr?4CaqmN^7_(T
zaDcgyn-(AYY9m!Zi%ADBv_@#S?0MyRL+SNmyB?XSkxQDAmD<OoCGl|aGdYjwvMCwD
zgvo<W61qw=6@Ih({hSJ-qUyYS=hAp>qcQj)U!}+5PgyL^u{RqpUm1$t*=+enjlS6V
zT@8Ss@bjpVVmwy8x0Gjucyn{yt=jF+vWgY@F=hBilbCk1J}Of6*$&RXSQh$zbS(Jo
z5TvtuPv=Pd-C#Me0cAxI5o>=!d+lt4IxAZ-<ZJf!3XH{Ry80_aTTH-~BtTM!tV#6I
zHK$6G8GZH5*(MV^Ag?;pI<SDNcTx7~rC7GeDF^1&b9xo?TIGR$nhNycW7`Z5kW^Fe
z8()v>)hcVNkD9<B!y@%6otJ_h@?Wixw;tp5(=3hV^yLQsgIKDf&>=G}o|Laueq<<^
zQ25KrS|}ILwxLTgRz}^Ujpj-`P$NFJEi~MsJ*q)ODM7A7syd*@s;!(NXSqChU*x-j
z-a+reQj|V40`cmdFok}A<#14O;26Id5gpaG2s%HBKq{^B>&)5m+i~X)`2$N*TR3pv
z_h;ly4eqGy#+Vbua|in)Gkm^}W&HRTw={B&LnZ~`g^NMUp!4SKKQT7-j(W|=R6frF
zC_B$R*m|-%*%0P9aXVF10MHg!XF?Vi%Q>ky?}jE!W1j1_I}p1k<G1(lw+CZo>+IVZ
zMlt++GvoVGl;8h0lq?US5j}S%DVB<Y0yfmVlndS*#|k|WU%EjZ*k0p57qP3YZ`N6w
zKMbgdZm?F<j#cROLhE+wXE+~A9F+9r_KDIIaiWu)D8Yy`qiXBQ&Pkyp3?OOE2XmOc
zLql>R^E+zbLe^{M?Du22`$oK6ctB53RV=yL;R|BYqx$k6%?Uf9WNii}aZQtDH##fC
za;wWJ!X!<V!|KRcQrX9~Jnq$fp~2e$;}CBRd{E#i%H%P^-6dVChWnYmVz;%3Cwv~{
zH+4wWilqgG5|sDtKi&OLxOg=GY?82(b*eGTP&IUj+4-$+0V~@bkmQqr_5;AFc9lYF
ziSckAh(WJzG`;bfdW~?WWNi^Yxf&K6WhHl?JKmQE#?zGb;_lR!N8<{WJ;*@vW`vfd
zfnQl!QYS>suN5oQC4ll~ubS&1_ZI5g=d_J)gHaio&^cUMV|)K4R}MN`R$&5r5g<Ow
z>&z9ms%y5(My_9h1*p>W+^ahsCD{<ho;z8ynkw3;(Z=9gAhg;abUDm<mJR;fyYHCe
zqo#kf(coFOyil|B{cjZqv9Cm$BmUa8;E7tMwzc!A0xECC*4uH_fS<Gx&18m)An6H^
zOASk*4T0CW=D2Gg#s=l)8Wr?(yuxn%)NSIG<OYcJ`v^)Ur~C}0?9l7utE#k#L$sfC
zxb0hjuTE@jbl*nCKJ6^~F7=9)3Qcsh2~1VT-;g$DCsr=^YN@I%r3dK&o?PNS?yPtA
zL5O@dSxD;pm}yiQB>cn6J9nmxGn4O~H4Rgp#?GZeN#k1uI@&#3zBKB1v)lm*mfbLA
zZ<7p5wN2#7uLI+FXCRQ<HjjW2N?AX&s`ds4{r%S3<|hIsn>#r{)23;*jXj6>?8taJ
zYn4y0QH1-^cqUoKI67(5ls)TU_IhF+`OD-;Y6xoy?{X-!O!06x?a_Vz&#H?>oQqtg
zpO6@+&){DposnfABQd5;_a))S-sAg~4|9Mi2F~qCVXEWD)X;0tC0}2S0uS3yCmGo>
zZgkyZk00^di~P1u2{#j^+clDqpH6sBb8QvAhI7PvX^70WEu+bIcMp3;UhM&gT6%23
z$>jL=!qeRN>JQ5zsP4*#WH7>I!LNELb;<!E$Su^eP~>vh08}sy5Scxr;L#jaWZKP^
z)K^7VZ$<@+fik)Q@E0i~Rz|x`Kwf;J+My~`+1hi-dviy9PbKF}ep2cys6Rwm_1i@4
z+c&uHr$P#o9rEwT?--pr6OK@iNWxY5uLryCt-2%l5K*{5x9a9Ui?tLe{F<Csy1Fe4
ztH7IzOL#)&q3Ve<lYL;MncS5o6eR+BNVU3%RHT<JkDi3A&oF6~W82_Z1VahT6v{0b
zEwQ57O#0vTRmX#5RC-%=3S6AK@N;8!7rlZq%;!nna&Yf8peegKr5mW7Hs5JU5+Im;
z>C!CLuO-G%f0ma%7#aO`?=n$#-tf`;SC@C2y(PaUy7S;I981=uS0JpZ6bE)YpcK0@
zb=}US-fa|;$Es_**5NBF;(=vF`<5>X;{gH2-{c&Y#2prx9foP!(O}^cg!t0;+JQ3d
zZYHKuxa*+wss+NH3Pk_xSVjy&ywp@7d1>76Qr<B)YNs4og-n$1@1t9FnuXMv5NM%V
z(yX{Qo-K^Z6DD5r!A3iF>$~5$FuMF&D4$%Hdxi5hRiGy_G@l5QEIPtEQhh_kGJ*$K
zNljGWl^71ZeI1VNzG2<gD83n%kqYMLh+Y`pPXV4c!S&uuKQZy-yGwN&O-RalFf{bE
zB&$PrL@ZSQMY?>UwfO*kw@R~4`c<Y|Pa&M9t`a*i&B=?Antao;M;i5hr(22!;9Oo$
z`Jw3|mr!9Dh$8q$Q<BN9ngNx(9I#u4{B-t-DU}$~JQQt?(J)vwoi8C;C+NlNk3c)F
z+@x)vn*w;CqdQ_`0%<s#vXG$CQ>eZBzeKmXz+m8>kN^OBB>$1H;;#3f2`eL*-*y|~
zFK$1P6jf3FPLT7ZX*QXX$?ZI~{}w(gS9T^DUjTM6H_ft$uULOSd)SzM(i>#NH<mOk
zkmtHRcJmH%TP=%4z<lfBbDl{_dt^^n9(Bt;BdJ-FrGYMHPKg*{zxm2hl747+-VByW
zebz{rxDgUCV$9uzu37N~wTZ?Gb%kvjAFVMH*~3PUwTc6xTmaSWS|Q&rZpT-*{>;Tq
z&=!W1?XV+iaL|%G%@ztsW5=ogu>L<8eU}4RA=-He;?#3QKa4B@YasV}G3C3!c$jr_
z_W3a<9*w9k9f-fyWRXH<9Z@)Vvth&0_gkc~L1)kB=hxRZo8TCQ<2IlBAIW%}C<o1K
z_p6|HOPbgJ;%HkrG80+ktvG!>9$EjW%XFm$W}RiK?eK<c8m(;4TaW^KPdC+%RnGL=
z1*-3!=AN#g6ig4DVBHeMjW(WtkliXw+Eb&fTJ)?t9l0fYpJrz}`!MmI>xg`$haU^e
zZu+ojPl$ay&FGZ<J9yi3VbSzBjN9CFt42Qkfe-+{Z~KRSD)$$1&^WB%y~j7w2_Rjk
z?3{nIhKFy_Nc?N?ooxZ03SIMz-U*2Wd$v{M5k8kL-S!YOo0+kEZ|IyYVCTK($NW<@
z-N5AOzxu-g?=7OHExMt@e>^Ou0in9r?pMbd-NQuV37AUH6s;~6=8fUNYLQ0n%0P9|
zPvuz^scQgKneFxIA}7%9Ad2`t=raa7&ucl%M#6-uC>PKZ`b%<29pt|9H9n;f6Ps_+
zfBrT$5yJA}&(WIDFo%HsK`@347+ot;@Qu4BvRLlr&*08)>+O0Gf;gaooSxrOw4VsK
zcEcY?L~_DVV26sF%$r0usJ7U$z!!<hrU$~@w;Pvv6f_0O5Jo?GXj;gN>l%H2lk}@|
zjEdvUH~2dbKI$ce=Pi&BGoc)0Vq^+4miJk-pHdJ9o>aB}79<FshtN&%BrdkoQD@>e
z(Mgo1?QrzzW=f>7`S0Kx*GpiVP1}Q{k)xe3hI)74W&B~*S!=^gcqDsPgFQi$2|(aD
zofoN6yJyP+49fc`S^#PN7+QFio@*d$a;1CUJubnn_OR6IYzgEsI(gU1CF=)eE|m<x
zHCzqJOv*v*=T<oai7jt|u4p)RoDyx1uP)Umcl$1*0Llw4P!Xpnaw*1<a#4+52eDqo
z)5DnZktWi>mvQN5ODk4FrHnjKbXAfjxxbIMK7N>BM2&vaI(2h&l<=gRqk{wJIb$rh
zy~TqU@aZG2(>-af@<iZmJSEA5Rz6Ny7w5mj1kAi^3oZW>Nt8yRG%Tt}0mC%tyu0^o
z2s1F(@Hli3EpLu?VJK6>%|Df&d%W2^ut+tWPR=j!o)D#|$Ruo`NC_US)SnT$dyNk_
zHN}iDy^>C(1Zh9YlvP{ImH#78DG=Eq4}Q4b#lPU1v9BI$YKAwq^QURMDH{^M`XF||
z(g-+)!Q+)~$muG#@2e<by`w?`rKXZ)99MxvfK=t6+gdT5&_4DvkL;D9*Fxze%hHVa
zld>uQDx-1=(#w$V0X7oYPlc;03QDP(Nr{*T{O5Btv+~bsQUq<wdUd>N_i-i<Z8&>1
zVt@>-i;8ALtAJ39Y!iC@)P*^VM{}lSIVwRKwqr(^^osF`A(~gZ32&;33iqu<r#ox9
zPYx|9dJK6Sg~;K9zICcOXrpmTlYK@h9{8iv>UNVMH+EkhK>z!KZIUM}blZe}0bTUF
zA(#)U#XEhceE|s#>K2s%>dui)j8ka$qz}zclJ-^ia?f9+)BYO{(SRQ8UTwW$PEc;;
zY3l%DXsv<OC&n1<7W@N1(bPXj_l8*w5y+XK%pUUU8e>`5+2UdQumHH>s1)jN!>iTw
z@N<S3pamSw0wH)2f$IAVd=2!dI*@;>t1}Wc(&YvTou(EwBk$kzt13;MkXxH4p-AwQ
zYy?7CHSyk3&h(1Awl0J-TpGVqtZIpF>@B`edJmtjkl^_OgwFOgN+c=Say^M&>%c{P
zEstkM=uvOLIweddZm`Rj6gko+TM){c<%dEsOpiH%Yil?8C|?RDW0Z^v_>YT(u~nz_
zgqxiY&Je@zbSskauobf1f7QJgLsW3@V{ZS#Fe!O(R1!J*Be%^2s^Dc-PnK4Axl*aj
z(W+bw!%#46YdPT|e&pqxr)u*H0J1g`#a+<Ay#s~<*I$jqxCxEtOyzUCJ#bNuHC3SD
zLBOJ-FAW?(TWH+t9J{P8V6-2k3Ml_M&b(a6VBvsBbi%2|B=`Hat2v7iuN0mq>_6W0
z^KzkC0IXOW+44DZ&c-0nNVo-&Oy4_5q`>3J^DF*b6RVde)(gO8d2|k*UY^>PbcZM8
zah6CxAn+rj%QBA+5{CMoDxi2GXKJ+l{<Rcw&A4MG+F66!3xoS2h-PdZTBW)?g~zCK
z4yVLJZE*PX=n$1)m26CM+DweG!)8%Kl9CI#Y4%S2)H@!-GwAUAXg-*yfl+Ti2Nqp>
zU6r?4)rmnHNB!ECdJDJB`MaUtIC6K8u@Ovvq-_+$qdqMv?}(;j#E@xZ$Eee-%2Pm(
zbO#3sX%W~=DNIrUk5a6DOTH3Wd5aZi`I01dex)VgUxX!zKNJxorl)y4qR*aN@z`Ft
zlt_x5_nAmuy-ea<^?kW8_~vZFUzK&<xWa#G&Z5Abt(OlQ%W8UirBcv!1$o7)lflJC
ztN!BwWFKcs5e9ji!FL|zCtEu&($0T%N#@MVZf@UoOe-$6D`KR3YUOgD>fMLhu`1oG
zJ-`bbe_P3H5fhjAfXS@&02DRB-FU?)l!OL-wpg9U6}#;Q7D!|FLh3SjAT1{4r^wzx
zu*}#V4da^A0UVDWtjIvP)MxpMrif%flo)=%^1P^RXza5+FxyQCc(;oq^L|rMTA$o0
zBjD5=-HDVde#oDJUv6#AhX{9CGl`qb1ntBPdn{MYpKKQC?KXkNaRqF|WrRo8Nrgix
z^Y2j|Y@y4crpw{A2Oc*|OonB)DY6pRDwh*mNa``;Ief~~jvm_LDf0UAJ5Y$|<lzX&
z{_Xjq1ojZ%6$T<DBLk`&uxm<=6RR+MS9wU%ELa{W5zKM213AE(#&FlH4Epzmys_VJ
z@!XSx2wWw_oUhZGTp=c#9)|^o$bIx-AZe_Nx$bd_p-Ku>N~k2)5<{K58XBrOaVFjB
z%g&iFanw*`lwo#Wh>Z?1g*T>~48W20{@>ud&~R%kfq%m~UyA>jX0q3_Gx`sp>>16=
z{}Oim&gv~Nk<9=RbgOp4C(UFdg&HS79KmGtES#@0mIB&E&$Mq!bgysi`l@WRx_*Kh
zr=L-i?D;CM9jdLUY&Tz^D3bBG{c&G)9Fb_-KF=QP>q|P1OuP@}Oqz(_^1Q)YJ~|pa
zrCKwRaWvQz9)gTEPgb}Mn9bscuz;mW;*6e+xSg&La}SKB=@Li5+6@EVUCRvicJXOs
z1v>cWJc}m8>1{;UP-i81nkdGSr4CEK@ifv3HBx*qzfZx(O@xd{4;9+NVAHP$9AX1Z
z3`E1G2!{pl`7vLN+ep9k;<vG7xY1zB)1sYz4IgmWiF}0p{A<a>%gd@0AHdLc?m3m3
zy$m&CQTw(Lx?dw%qC$2m=DtX3;WjbsHXdW*Nehi$X0?hBJO;uA6DEwM{mYqyP{Vg_
zrT3Ay0C%+dERQU@6{1Y+g!Z*?$FKOoZ-ZbeYYLdL6*E4QUlv2AN4E4c15zIAIRmCh
zpUrVLm!KK2u%#m1kq~Y!+3{=2QF=W`@lK+w6y>Sw^h{9}1bUfbu)}l})3vLl)F#u_
z@o#HN9gghI)2C%21N5bovq)QP$txMKey{3shGuLpStUSZRHCm;&+4#COHt3Wwhs^x
z&O`s@+MPZ#@nbY(1U{RFqa9m2?#5R9Tfz<j8GqhvwIG>R%+v0JPLb_hspdgjf|cV*
zA<WcKR@7~1KjR8I?dVdbjDWZE?jFQ10NdZ&J$b13MMI<+fLA696BqCiV6yLhxy+ou
z090m4q>Prcs>MFG1z)A1S-VR#w@pzZ)^LZojgxur%3L|qzYuwE?iJe@VORGkQP6|G
zj<T;C7?99*kOZBLJ63tfMIM|1SSs`467`t}#RWtJhg>E;#pFCN$p4@<k~c-iB|NV5
z6Ci-zAL1E{gz7Lr(EKAtb2%v8h+g!JZI|CJ#x(rdPb@dj_ctROq38$X*DR(yuVWk!
zu+9~Sk_Q_I0|D^$MLP|;PVJO+sH27kE_jr8l0*<B-~5)}d`zS3krDuMfExSaX=$+V
zr8@w%?idnB241X=LNCPWiDMid*Ed#FS|40J{(J5!Yfb(01=_>8#|t6C-yx@Ce+Cfy
z>|uFdkOwhKOVtS#STivUEaAtWuw2><gN_IyngqfXj^I<U95!pasT1rBt(givMk0lx
zBX~C+^&#E#hCY%GLp@v$G7p4Purkz^!N-P!_p?J4KW|2LHPG$JuGeHoEV0rWhq#C#
zkE*#hkMPlqVI<aarzhfMqkSGSagq`^2fGG{L(wOf;W329Un1e*g)AG9b9i>uD448?
zN2fy?vGSEd)1A|QchXk82NOUfmuc!g%Tc%+2)1b`XvCqI7TV^WY8V@@a#Q*5(F(o@
z6XY(4T<=hI32;T#HK$ZD6c!~Z2bScm%ceee%9*g$e){E)G9Dal6@6i-7Fz2-moJCn
z+xK07a8b+8h%xuSGIC!QALiT(w2z}aH#AMY>ramJ)Wz+f6H4P!HBQntwYCpqdnc}|
z%RlN>Y`q;J&VGx(FnVJfrvqn(8+k`2S@dd4;6-$3Lj$Kr%n7%vi?rWD>;N1r^H`O1
z4f+KoZ4`LY0Xm~Ob5#N~*QAZNau*#HvJ3!=J6>}xNTws;S;mTCyX78oJ(ji*|NfmE
z&)M0oQ-d=5&9bhm3CUCv$La3$xaVm>7LuvaG4~cLO~IGM=XNZEs<n1=CO4Lyys9OI
zmB}W;C{?aR)BH`1r9t0X<9Wai-VZOKXIjXn-r_Ly!{z-DuELe!gR*b90*>d3_&R!6
zIxsHoI98wSt6k;uD4;D3>gsSZs7vaOVw=&`!47G#kxjk}#8lI8y#j}0#wnsX9)*rj
zSZKH<EA^%@UW0@Pyt9=3bWK0So*yv$^vf<Xy7CW6Hje@=-RPi__W8m_@fl~(Yg$7G
zZw>!!VPOnv@=9xFKZOE<CpH(%4^SWVTH%;fBz^s3{3lVs@Cys7Q$NB5ct|Pdf$Hl(
zqBk`%g~4@&!VuCC{yXkZC3O+(h(WZi4A#~oe{Mv<<=&q!OIY8!^N7MHwjJy?<b6IZ
ztGBO!A895Beqn00;P$o-0s^lzE0Ig!PSj!KI`HE)W*19~WdLjdZj{#{RYeh(%m@_N
z%JaT}2>4c9;)m1R)YN=r@?yt6j!uA9Ii}_n=VS^`MLd9If46_+qOo0s#S4;VjTZ6<
zVxGy5>~ZxspWjDM#jOQ+hMyDb2y?6v$=FoK^e&qK;*OKCZ>eMdY_5<f&mM*<YA5<3
zOjjHp^G3eXR*c!)Bci46lj*;baT5qIv5e#K9y%mLf+~qnFxXhD;wMZT#u_i@m`Dv^
zVDo<F3>_nG0INZ=Lc#6cNeoxWZfUxAhsy0EY7LvuGGtX!xZLi1d_Q=(wk4tvPNxc}
zsGRBfB@A*Hh!3|{96`O)Qjcd7yJSh6BsWN`7F~0A+Z**OXqj=U_^{c4G5jcT|ES=~
z=Qfs0#%Ug?KerE7WrZiXW&$T~adJq6bc(MoEpaCnpz=RtEahmxtpc6>k_}5v%E`_S
z<uF$uK@SBZCG5ykK#_&qN!l(#P598iXDb+D=m%!wH$gLtEi3fqDq9^k0Smt&15+#t
zAxW>3Fy=!&@c%Plf~rn70vXk9+w0!iMhH_zo;!$t#CG#4;9w`YYAM64QwfQ0cM?vb
zr9gwDKqZb+Eq*sX5XwG?EVOsw{-t^hlU6kqLUecrqn|WcTw@3+2jX@KDReDkIPc>A
zq7#y7XA4oY+P}^{`#`X<*zd2u@5||WQ?$@hZMHgA8U58FNm|uWo_I3QD8H_AJCmK@
z*eD6mLIeRtko;MYw(Zzr%t&KBRPAs>;PTI+7K5xs%9*SHcY}r!6e$(D$eiEbDQuN6
zXV!k6q5c}}10XMF_FZ=Iaee{Ua&<dVK2F`XAU?Ew?_tZu%Dj~M;O`LS?O~lwMX$I!
zGK%{kcG@p?7yF5`w%1dUPE`_($m{C<k<?c4Uc^BrO3oWBjX}I(9BqI}oQw2q_ST>6
zS<`rEFd0u1N+ChiOJW0eVVOQj+jYkWzT4nuHJQOj1JB{76`Apx(m?7R#M>Tux)Y-T
z(tik}J=lKg0pF00woLJV7Z(G7EQs@6{^tAdQS)Ho_iS}o0Dvj(|IEiQadiBjljbE_
zTL1VMsJ^dt{l#<+WL9LEHfEjMH!w5`P(~3)iOGN5%7O|+#7{yAJBUrju8;a|IRJ(~
zStg={pmxFc_Ot=-KE|LQh%_4FNo+^CAMONYGw`(W_?n12B7qy}!)@7xb<E*fv&HVE
z4)Ac99&Xa~d_Oj?uDkLg9>>EGo90{BhNTOC8+AmJm0r+E&QTNs{na7FBSsWcxfyPu
z!sD&3Z`IQU%gW}BASWc51KuLKN7L$zht$&4g15xT9G&&V(M^t$8ILA#zmu=N{SjYG
z#tx$22-Zc$*zdOO$HtrTc>b+e5J|Y&iWi1Whm6uP$LYoY180zsX<0d`w5>dLF>{ji
zpS)Y7zQN-cL)<|+Fb(sVYGnT$etf*Yzf%Ts6kFJ%kc3$QcBU?McuvOxGWYeizYV~<
z4NMpv<yoA(FRUE)N!Ae$vCs;9!gG21IeZg!D5z!1Do-&|GqRyp#$55edBvaQqLWJZ
z>nd&M&jWFi+^xc6w3bcP@cQ-eg>*^%m{UG(uD#{8xC*VjV|^XZY)(;*Dxz%8>yb^%
z6xHLrzQlYz9}v!LP4C{Twi;P{MA9OQ5nN;kLQuHIm;Am5eTn{b;@{oYc`MHwO4vDH
zpgUL8uFM=`JwV|$h2LoO$JX`sS^!g<V#4$*Q=1fVR+<n^X1%}7%4`u$sVBY&*=Y^5
z8SSUKma$*dc<KR>{rvg6LgRHFIJh`Xp-<lL5=K<?SjB!nR1I7{i*|eNZL}1^*>)on
zYs__<a1%@M{Fl}v0=%I0LjJSIumZaBT&hSgp)tBN&UTRdBJ8s~ZSrrrmRO17$rsMX
zE``yP)9JJalh$UsRm*HYc*2MNfHihPO+LPjO^MQT5;kx*utez(LGjfT!jo)E^RW-;
z`!JH<?ygzU5JQgxg1E2Msy+U_5;sUm=SM^TepEcqYv6?vRyvxR2y;+|lU=1D3;zqV
zC{elz9RpTqp==;sWq<+|ksSaW>#}eVVhmW7Cv<wq(B8F7)8W!kxi8?x8EQU}rwGPe
z`!p2!r28nzDkRO9@;>XNt!=;4^1ic0E7QDBn_y~>i3xJs;n+exx#*()IS%v+%jUb!
z%hH@PD6fnLEsGAVsI*Y{U%vx6aC?gz+@N*z!Wq}={(R;0ELzY)Q4elV4460xI+oBi
zX8l~&MK&;WG5R@V2{A;CL5Ex&!4yiw+NL$0<Z)ihkHI&HfP5S6Io~spIRwZL(U*uY
z>LKJay0dzV<sRd_%##n3<OW~Mznf_ctD-1ceqw5=4J>AlH7;Zg%Q8c5Pw~QK?yXz`
zuAGtj6&05ut>%hXKB(@!Ych?Rv#icWXS0)k%U65m!D_8CJ9_CTFj~16jgU>l&c+kb
z3b3{Jzu3=Sb_>BV)ZWd{zj)ZOI_IxCN^F>Q1f*)7iGpbIK(=`Ti3;P-ZjgS@!ffL}
z+nz!tLXhqC$kO#-AiAe*rgJdTQj$F~=r>H5XmcEtvrWN*Y5sTrr(BX2{A!^d72i;-
zrK^-~wc$=gzf|EMAf0J7MX&Y6(od-F-0f*{4P`5)WP|lB0@3Gz1Pm{^9=Wo+fhTi|
zo1CpdQaE(i&=w(CYhB*BRw;!?G{<t>ZMobLPvi9bG0p`knGBgdRF^3kiXakUGPj(}
zn8p3qrUjn%TaPiYcrBb{7X%uWU^IK?hj%!7fppY$cT^X?N@W%?p(VsN*<{V@9c+pB
zHR^l{oxp&WNk^QfLoCH9Gk(@NDcJeucr)Z_>1vytz@Y0~P*Axo{%%b|aPqtqg5vf#
zD`feiG~TN^i!woZTOz`EKF2;0QHsSTgVcoe{*{>Zq`aH-C$yQ=Y=^wfvP6^O5AODy
zb-6A@5{pu?yJD!ZE1CFx@mIN|v6|UBWml7eO!htU(#P!8RCccS$ZnQbhLTd<TNh*9
zV4*N1?XG<h2B;O=Fy(^!<)7+M4?P?y<X08m?wJegGH$P$et5IPBZ~`U!ltCMu0fgw
z>gAM@N?5o!9HiB<3l0Gvy)HrEmXCQjmz?UxB^^ETiFXgos)~!)LM$v9jU}v+RnBlD
zR8w1Y93QrPc-xD(gVCiRffMTcvbz(kiiZxnqGJE~EUyY=&ha`~emvb`!(jXl24|_M
zzjsE6=T;)f0+l{UI2EU+H|Cj@iOV9%PO=JVjBa(a$?Ig~vD-G)=fp-WTrn&;hSlOt
ziY_aP*h7}{*uxAK%Sms0xaszx?-me#WZ8PV1fl+@xN$|E-#D%DK`K_;6A3SPS$C-+
z7<)=}h~p>7&U-x#<%Q(cuSUyF_akiJ3_=afT}a7hq!GW%@YFVRaqQ?+`0uWc0T-L1
zyui1!6LNsw7jmBUC>OCEJsMUA4P-p=0Lm3_PY7>Zy&9Y(9DCmrO-+rh3<55^Tv%n!
z$6pGyvMFX;ggJkT6Td2%hYYQy&^y}S;EDbSClpXbiC{?S)QNG3B)yMT^Sh4WswBh@
z>XMYM8H!|$%yb6c<9bdu^kS=V&IncsAHH0<_Q$|I8OffR%3J=O0$*a}Eq4;@!dhPm
zQ`e@s&m(;;J9n!*RyMu~lcUC16s}xX7GQ@EcB+KFE?b_tGv9*$wzi)L7@xQBy^%MK
z7%T`>$VF_%8bQt?_wI4Od44IBC@G)bjV&h=8Iq*P=)+MEc}da0vE0?wk5T-b_0@E4
zXvz{`xuQMvG+ovmjmcFp^TT1fys}-sBE@j|@DZhXozsd@vdxOCpB=@xXirl5P*6)P
zfo(POzS>qj^gm$Fz<W;_7$IQfJG{hSG>sCaIh*6=JcvyS-f0aCyJeSfKaNcTf!}sm
zG<BblC>G^FqT|Tmem@68?YeI<p>*8}L#z5*V@rbJrmA~&(wcCGvuS`Nr2U6#iU6r?
z80<)Y?|!A*mxFXLsA@ZWlL2f8(7LMvrNn}NB&KdaOVup#3oNOXQmMGMd-w=16mmGF
z7!}Hats-oASoqH^0JXp1@FF^sbT`NzU^`Q^Bz_LpYG-g^7xg*g1|tX^{i=a`lmoy9
z`f<C!AYS?9B>fvO$u>Z=mMiSI)V%>Ytp!G?Rff<`FTsav&yVN*^ICya&cTh@p=wz-
z8&nLnLyX`Ebk$#iog92>2}>3i4ErMLw>M-nD+dkUcH9BL&UFfdZF+xew&lNqNKM75
zg>@k4{$)fFvKSFB#12D3@FT7r$~57OU@dHunN+hw7JXw=lM2F%MOYv?dyZdK|1_`{
zqcOtPHq<bCi?HE7T1(8-VOTD>>K>>P-4N{ej?SKuhvX9w8?VZ`$ZXWt2rRULc(|PF
zS!<T(iVLgW7$i+>j}k6Z;a56*XIkp}fY2yNy>|Q&lUhsZ|Af$*U%gfyT$yha?@1&I
zWD%O15W_V6qtSn3?_{`v0s!ik4rTZDvWGRWC^s}4f@ANLSZmD!vYyJp`ic}Zxl`79
z!oIK6b*WBV{@hW?^i&bkvdL(cn07AchddcvY*=xI(vK|I+7BIoImsl92BQ!3Gx2~#
z3&W=?mhuq0O=@b%$3M9iMJ|F}2(aDp02T7$Xw=kO0H+~ccJp#3Axkh@s7m-4V<Jbe
zX;Pv2+TQKO<#Vp3a|jf*TL;lJr&y|SzI*{og?;|v_w1$C7D*cQ*=L3FWeV%c0-Ccs
zdU{V~O4pLbn7B4YH&xGqqLhpc!Z-NZTUDuwMmd4Q&2jn6V;bT3O_}%XT>%T&1C+qh
zsrs1o&;t`X@-L17q2@N;ru~sNszjKy+#Z7wTu*0c#=c3`cp$=A<o2{E`C}q%#9o+)
z&Qds<ATN-F2Lc;?;@VK$;YE2cVP+@in8u8tst?5ISh?k{f5a%<XuGs-u74iSu0qvN
z1TTt<D?YX_K_#FP%`pVQa6!pV3uE*p1p>vmUFnTZ09+SR5ak!k&tFKk%7c{MNoecY
zuRk1sF1t(e1}Elt)#?ZG$YbO@NN7!vYKK|`e-ojB4Q0Yt-S^@J3AMso-Sulm*G&BO
z*cqZAanlnOW>4Wt+svdnnLSnY$2#3zJxI3~vAzf$-g<s2E^4E6&<LLNWW?JY>h_`k
zPi|m-x)NK=6I94Yp3k8FNgC0oH2bKhH=Wo^hJB*Yz0S?HR^}sad5gyYq%*oC0srSZ
zk-Z=+V`6n@0F{QknkH*lroGHxH;-3U`M1G&gMkksYT|EbV8-U_6EI<#xl4Iad&~A0
zMNN4Ccf=#>vO{2Mf9`%EpMHxMa=~-pT0_K<G%fZqbA6m^mTB7#lo1)s{^*yo+)C3b
zI^``g9pyNQduZ7$q-XI@3=1w1TnT7*KjiI;w$6J6v;cJgzOV%+a=|<N>g7Ct*ymI&
z^90lE!7WyB#hAEMKweE{brrSWY~j695e1gPZRkSpJ0Kk#&l2I^fRNn2zIJ{Zky?C5
zhdelFX9)Q7%d+uTTDqT$FKJ|qZ=QWUmjkuTWUKh#K2@qbyWa1^$X`zh-_IEMeZ|%9
zH@e%eEhd;IpuR5`X|0Y5d@MhnIe0uI2t^6;o$r62j)UL-nzBIw{8y98lb8J8C;xAU
z^FJXC4V-M~{twR3`u~eF{O>bCd1<CoAAA4+paTE^hW~U~6C-;)TMH*=PevA28Ut5%
zMp}F8|8uMVA9CUqkDu0N>#84Fo?u$37o?1!HCe2MSRR(R7u_8B7Pz{YX6G_7ST~8Q
zB^R^x<>&e?(L^JOlq*b8ksF;gvFPd9zxK75aLxM;zM&mFaME#U!@0wf$u-dY0doEE
znAP9Y9T~r~$|>_kzc7&!1a}(i=G`6l^XILP{Se|AZ6O6Om}WUob^-AQp^%8oInc^%
zv62^1^7H2Jy`Whj>dr8v{4ipMBEmniq!q(~W>3icyk35WPY^esVAMPy<3b8nA+*~C
zz8Qz>38Etp^NZPIg_V~PxQ}ZQl^|Cs(h~Y6?!z1rR=f>=-Yx)1`)GLZ>d($iRnVbY
zHO&(mAVOBV0do6k)cA9Om;V(+r;f-1w|8&H`}^Z*D*PXaA&V(^S~iQk8F$*6Ds$Ev
z)hfB0XYkOzu{^THk3t?g$I^N9>F<8hrCyv4uM^n<rtc0O*|fHR9ZrGp_hqf?>YwiM
z#4f~^bGT08c%w-Qa?}U9H{N_Ecw(-%fl5rPN|}F(3zpS+dnVNnQq*m|neDipWk?}p
z_B>Qu0BCRDpeqgtU+cUfN9pUi;T>9FaQ%chv=gU2(OS24fWz)^-pzoaBq?f@d6ZVL
z`blmebLjS<mLG-<E?pt6@57$M(D7|KFS1|WuX~X1Wj@XeyzHwUPSG$i^Vd85dbdV5
zcL2X0(eEIF4})9%d49Mv$mlcbQ^4Fm^f!h$Kx1f0T&~ywdC++eXtOyDUi+~Iy*tN)
zz0UI`e%Bzl(tkd8Gq4O--~u)w=eCz~IuILX<#Vl}w@*%g)LyV&|8cIgxs>iU0a2=C
z4p$$$61jST!0+lp{`f1_Siu&rVFll8R`3Y$fw-Q%uK|>&5r;95;BE1H8R!dXO@B_`
z6E;KR)jv>;pS#pEzhZulhqssdZQg|VtWDr@pvms}TXjdZ8#|8GsM`zc*Qjg4Hot7Z
z5sg!CWd!MV%{m9_%9P!30|~9`@CydG24#61>4Cj`U4*)y8;UG+k#0B`Meb`#+}zxr
z?$i`&cBOBu#oOiEAnSIZEks$)=m|f94rdmR^zdI&?EDtaG_9KAe8-}nuo}*z4M%C)
z`}qYB@OI^{uiN(V-=~BUN8a|VgL7qnGXRG@uU}ag^8JWUBq0L+!|(M0INEG6Zfe`v
zbn|U;bA8JD{W87#s%{1oklNPkEa@t*DcEqd5Se+^yl^%9XlR~{UolH)S@G%+RW5di
zH^}2;*DRN<Yy|&0{6H1ip(^2nkkT5%#uNO=1(*JyFU`0HLhdQU3rL$+e+SI2TJq)P
z)-cc_WehukKgAp-0pi=)^@BT)CVr}Wx!k?HZg10-zb9>*>lU4$v-mV~IMlNBfEv%t
zkTed>X9xhmw3~h(yKRhFmIQ)+)CJ*jWM8sBYxvc%wee=R?6mD)YT(p4wkS5$rPYsK
zvRogx?ku)moMC(ltr>^_7%=YBI|F0($*cYf80`9>)$#NqsqG9El1#;rt?>CilGxM&
zd$t6k{1W|O4Jc1wLyQ9M?S$U5&b6<q(#v8>G4U!f@n!{nI7T1#an$aT!YIjBP(*YC
z;YI&5KfEnFqoifa-U({{dPFk;k(TkzUdNZxe16*PE(bsZw*!!_f)32s%ENl<53L3y
zWj0i_Y}UL)P5v=%Za$GJS_uUJO|$W?`CpWMQ><vg66LXN+qP}<9^1BU+cxj9ZQHhO
z`_6f9GMSmL$t2xX-D`Ix`(r2Fsa?HRGv`ae=A@1PB4%ALQ=|TLcA-8{9T>yctxDa#
zG&@$vjU8NmZO-x&Ekkf7JJB_v&7kb^##$an_4REpevBA>MfI45*s|qhZbup(6Zi6p
z@4xH6d>8mIVs;;+{5)o`|2Vhs2k`UI5HvQWuLFNrq_p`3%GiG9DeRY<*C2hdNNfH%
zm%)M4be(|glc1>SI1!g9X}ahfr+GFlEiT`5lks=PAg#jBMU4Fw52&n3k^?Jws8Brk
zm~{y(K;Emcl0)bQX}jRku^~=bsJNW6)H=6R{?XI=Z_M}rH72l{4!=K>rVTA%O@|!l
zJypqn7GLX9m8h(`H^am0^3J}|<~+*3ufp#U){Enl%T>R92nH&}0i)?Tt&G2Kp{}|m
z;aO+L#u6-D@?VxlnErrFJ6wZhan^WFU6lt+aw_V35&mH7fc!)!)AOud=#rBf<UfwQ
z7E1e_fUp;nYwiLR>NLiF9$LpH7EPC`j()f}a(Ftq+cOOenxIq<GHTj?Genv)?p0id
zNf>kdIxmTg4Vxmx1FYJY%c4Q{_RH;&_M3}Ka7P*rNz3Fm-*oHOY+y89r@%QS6Lkk4
z@zI5i-N!=V*#MW^k2>}RtN}ljHR(T<y+OMigreUe>|~?p0nDy_wZUUzPP?R}%y;-L
zVOIoolA>2Y+{m8?1J5{-NI(hCi(pu6bFUkdT$C6fv9NTPNN4(bto6iMC=L;NPN_5Q
zf|t&DwOf>Y#aN$sSE=^xSnY^-2;NI*P*)M1AWBIg?DgH@?sb-^EjE|Ui>^hk75%kv
zz4_<Oge))x1`x2qMT*0n3mcFuxdMm3M!zZvPTP5ZHF#Io$IEnfbv1Wq%Cvc2)2Msf
z(qh|FXU9QD?)%YV7;{!U7h9}1Kn=HFOb#EhmFHF13`HJ*&5Yft494{EDo^GFHfM7x
z<?N$Nv;Aip@@v@p2E-WG!<E`NPtx_#otw+$N@~&4@+5Rc*AFZB(Gz%|KA-Wi_S!?;
zqa%BI3hW^M%0vg`6~kQ`v>9VbNw5{8sVvaa28=C5KPI44s&1wamvl{EUl{U+p{@qR
z4Y^=wuc}<IOMb2geq=m3TPfYUff`kKmjK93a4)~cnUpHCv{6i^5eP&AurE*iX6id8
zxmJ`&Q^<HM+?egle{aDghi16PbHblYC_32^Y{5ba&tRY}k4~r)$T>YA(@;-1_+_XE
zAxZy*T&8oL(g8<U!jBA&gcW%-s+3*8py%%7P_HbHERSmKsGgyow6*?9ZX=$%dv{(@
zPn_Fk$<A-gm0^s;9z4c*&OR(4*42f@yhx{JP{kD_$9ZlX0_+0YTwK^k_98x3KOPPY
zvtOVS49nacoy*uA%W_H2z%3aRQB5q|h569Fdy0nQdYL$gvtP!Ib-N;ac|$tqX+C^v
zY|DRKnTVYTK+ZPOcF5vFB*31XikF944nv4t7+HMLft?qXOQW*O_S_uoW<)ZPrZ22(
z+~u!T8Cl`b8Dcx5i&{+1!kiO>5>}UCtx;oTSpzuf306i8UjPb^=k5;xvm@`<H*V(o
zel5Ly97DQq#UK0cI2R5Z^5nC+WSDt<8Sz2q70QA%`g1_BZkTa<sZH62LXnL&k8^Ma
zrK)F1YIfhPiILUuH%j2k;2_v;U2%To9{>K^UhzxQvJ8QxFU)AfgZyAhs|d+`LRdDF
zm{<&Wi={lFZ0d9`sjO+8MdYAs`=r&ik407Aho%&V1xYgchJ^@?0;IVN5Vj|>pvw0p
z&*;3xsx`_q9X7|baRGF&o0>#HDei;-(P$b6vU(Wj(*35CG(a1Z?DPm25mgyMFfk(F
zqVYXWra26L4s!xi?V+%t0OtcCZ!v9zoGPfoK#~{|Q~e(=nZ(dOU%M0%%CP9jl2SvH
za{HM;_YscrBuEE@906z0Ap!(pz;gr$^afD#G=WY|g(QJ#912u#d05^O91Wi2Dw#5)
zYTb;f1(?l&h2*=0;!%c6;xND8d%`3h_?%N8WBb7G5?J4je2(t)e2GQ0Z({~4;&AxC
z{h5U8k*N(Ge|#Rz`{+MG@R!6E6=e?zTC$ejOMgHix1(;O#CyPZSJ618xddb<0hRNL
z&N=ljpje5)Wqb-&#sQVh%3YlL{tRXQ1%o$Q@x*y!^Llb$gyf!fj*4YJ<`Fq0<i#s|
zM2HH*;4zL0b9RT|TbC2m0W7{JPzE^XDJS=b!83-;hlAfh641dCsWNk{7pi}R%P!v-
z=r8%xT(V4~+}%Iu-7i}2_0w*Z62lGF_iA8TX>)r~WuL0L?jIe-En@)V?L~T3c<6Po
zWYXT2%Vy4Q2@LD&@;02xch)D0?koE?tZS@KIbniUlZprgTGC?OTb<3M<(osBOWJC9
z`tr8AWtfGfqvBAB(NTC%dh<`+_0x62)*s#ha>U~zI<0LbCe51V`TPB`3u%jhvOh!e
zuv*$aNT!~Kwhor5q^_xtZ7jK;K#P4-64QDv0m_=Ei5hjyy`1vbn9B!i5-n9cjKe|R
z1INfRTHI<H+mZwjSPUBjT{D_;qggF@FUVzuc;}Y(8=gobgUQN(X;6I?PLLCj85t57
zo0Bk??o1%0ulxlb+yu<E&=E149@3isE1ea_;S%&DV`Yl$9(1_YXCc3}v%kSDAHk3C
z&=$<y@M6&;*=3zp?YXc+*vP&}D?a5a{u`>(f{JO}LX_O-&Za$p>$H8`cH`K{*zT&#
zh#lo1-o%&#i)bEqZoq|Ih>Nz~dS{(Q#AQY1!K%Y#k!D2JxUY1Yeu+2g5|<S-+^ltO
z-G*dcu|X<5^{2>I(eOl!LhV0>iV<DK2i&dl1MWuk8F#Dtf_tp?gRK39KpF9XKvOrv
zSilXf6iA5qwHgCSJiLt*4zVDM&C0^X=m6+r2vbc0qT=h|TXlb6&gkb~{JWnVQ27SP
zQE{p@xq#!QK1*Dn*mSAh>C<FP;0K#=b3TMs3~LqHkyXQxUOti)4fD<IjgT!&9@hKP
zc$pv{_fexXpX|drao+IX7r7!f>-gZT8~`@UFgrcm?j8Ow$rLMWl2thL)3d$1Gg&{s
z+ihwQQ&nJ0vIk?joK9LynM8&>5I-el2{76GH|i|V`1gfcOF)O}cy}Q|vYJsn(V=Id
z14z(}Hbg&EM0ThMaunl(oVUtw_p<-4*oo<l40nV6FKqgyBC<t8lB*CO@p@28bkO}j
z15y1{sO6V@kU^~9j&>01U>!I4TCxt428m0iNdkg3f$-DYx<@9GpmJqy00C7ro)H0;
zIb5EKpondGnC_193BYr4P>=e&uIdQDZR-yMLFghlKcj(n){((wD>2nUXMQa5I%WM%
z+MW0vyTUgIqta*byVr}@y`D@v-J|kKB{8imS%*U_7S6<WD5Agi&_+f*y&uKWbMwb$
zu(wCN{A7*L(x*a0Yc0+O`qtYXS#$gu?AgkFWWfnxsv^_%76TxHDhKXYof!u9D%Abl
zz)2QVk061xXOJIo)ekZnVxs|XK6RLmFitnz$it)AwPeI6XSi(F1jK7&{kHfu0#^`%
zV|+c^8;88SXId9xe@hBQz2uN3Z~AMWY~{Tq(eU%6A8nH!b76+E@zVSm5S&=GKl%iw
zFzx&E0)F=!S;6fpoe~1(%4f=Qax0fAbaeyuWh^_Z=2(D65DZt4H){fqNVKzlF<!p7
zbIT8|?cqZxj`lt}+?JmNr}NnPcB`;A0Glf>#Xb4?!t>erq5Hc|f{GM9QzvzBTblzR
z`3_sAKU^{S%fLKeaC$0IS>vD@Y6Oh{m4n;45!tsSt~m$hP&le6{*t+$f_r{)Stw%D
z)N)d4v$)(hGZYj1tn6*@!-Ua5D^UZL0>w_;d>$oo5zcm_khMRQh>xz>ccF<$=i9N!
zbSS)nqrDwYC?Cw=fZb!H^pHgKy%u#-p!{b2JAZ*E@WkHEBirTeT4OWzR&6lk0gtBw
z;7PYgXogA5|0q!D^?$L*v8(jQ8ksepm}5Rm+ey;v{tfI}l5lQt@kQoLk@B*57`4l8
zfgo3T!Xpm2^aj$=*e(~=p6;Ne#(Yj&xbuhz&5+)d@?oP3Q}&ad+;3<+((WO3R=ZL;
z5WpOD`#|^Ae_-v5B3dyuBcg76c@Fyb9;2ELFs7LILV@~DdGT-cOs||&`;I*~!K@g$
zVC-B_J|H2B#F&UjC#aBO)?h4Q=Y+_|a0$0^URM+Oje{Ngs4eCTTo;?3Wg2t{MwFxU
zmP$zQm%b{Ty|Oz!!9}PdzAr`z<rtdCbVs#@pu-`N!0aC*GEi>}%wj~|<OHpD_UX+D
zl;Pe4!mp-wY36V%?)44Qp6W0Q-+r&GHg&j`wiJ<qE@}%1d_I(Xz4)mRip~3k*X*6L
zeQP)QbsH0qV$<otVQ9tO;I4OatEBSn0#tU1`=tt0WQs=Hx0JtBt3Kr1m5n+Pix+k(
z#Pm)msZe99L4?8%>DW95Pj8PPO!e}_P95n&y$F}%S*m=3J*o-KAN%A09X`W_Ke)$r
z^m+W}6|s&=1o(28zkY%sPt)ZW4;JE^xv1bWU4&icOv`Xio^A7Fgn2R8Q=mfK`Amdp
z8f;hT>GlijX1*+6Lu8IO%$pR5+@=Pmd?|(*N~4JyG%h8^CtxNJZDug~;9l;1%&qrE
zAtl~6m2c}XjqfDa&bcaw>uK92Xa<m^9_Fd?&Y*aa{N--R4;D(D`(Ak_ExJ0pm{2PF
zwV6t-zt%EQ!}X~_@{Sf-kk`O_ed$>S=+6B7UrZ|9FXe0HvCY@KM6V7pD_+b~L5y<>
z;kN~HYGQx3;bKv>kB-(Q&&I~?&Pwri%7yytyiDX&v6nP+dnfH3n#zn!F6D%29NFWk
z%*daNXfB@bY1UnD7z95rn=~nt3V{1+YRg+}*ZH_ePyR?t)Q;m`)!iy_pU=(9%~Yw~
zkNa)Hl9?O)=KbEHy0M*(WqOBBb?+A3yy3;(o)^xqgRj`ryW+zOC-=aSZOvp(nlj4(
z`15<*$93$mhS%7b)D>pg)?jAu4NR;?H-blDOW6c(J&y2E6D>?ZbOad8egp(Ara*UM
zH8rs_D2UQ%eJBWC%mQ)(b*8|STyDd8_P=lC>lHFdP|_lac%MZ;$iIiG*YY_Ll5<8L
zDh@=+j^Risd67ihmO>zu-$$F}2%;qCJ>*mph!MSBzgi6`63ok;(L9)$WJUK#CgvT{
zBa_Jmm`qsoDxoV0^X~0TO*PRY(y0X*Oqur5TG1;>^X}(NEYf1s_K{2T3}q5ONV!kY
zIe(dBrT9<C3!QS$i=JWJH#h3|8qnG2^x<!~0sGOxNijrhx+2oH2Dy%8BLSOG@*x3u
zLC=8tBmhGJ&WinG0nSSOYXBIO{r{%dGW^9YFr&X-mj-|myq4gtZYoRZqF>(AGaG&h
zoO*Y%YdW}N1@s#Os)+w*zksG^kz&g(iQfWnz!iSmp%hmbMNQHRBF&pfSd;hVO7m<U
z2wc29g;WGdm*9Gtf+1_4*pyX*XVZLecLg!~>QKqQ?;(kv$I>{Aj&Wpba?ot3L=cHn
zosJStC{7(IMp=UTAW_mJgjb!cI#!gj0Oir7q)8Y@whb`rEzl5(-%EU3_*Q=RR7h-w
zr)RFx8(yyCr}%d-EKA4k!gJ=R*4<gC_qhn!^Ie?$sgq>7{=WQ{KZ$u~z}n5FbduaU
zk|#}m8AXFGub9$Nn~zu7xXs%z^`y0H|M6v3Ke9{$DgA&k5v0^TmLz}@k3>>Gl3el^
zQv45;N)nLbc|@Vgx}R&iB@|8WgTFNPe4r+jQ2F>qb(*7awJjT|COMCX*1tuRr|Bi@
z%YCuRB=w%6e#F{HjIa^@LoMIBesI#=uOi6&`dkgA{j*&yw%@6Rnv=IU>SJGSV#=o%
ztoHWIEFbjf@!V4D;^Y1Ia@FH6wU3$YLot9Z*4HdC*S;ZEf!UF-YZLCjZLVqm7Nt1`
z;Dsub7r3OWvZaq;1^$wG^6gLUS-$J0B-ahX9M=UoZrZM-fNhoIsu#xb8#d=J10Q3l
zK;(c%&Bd!B*n4I32zJ3ICfk-p(=01K`K%=I;bV?4TtuI>z)2pbpY`%$g^30@rGY5?
z<?!CK1OJ4GrzqV>px`!w3C83H)Wb7U`)DMN95T~*uQ?J?gDvt7R$Wz9`<>~s5rwH`
zitc5K70cx6WeUwskXTh9aq?QpaCi;J|HdG3Y$I`)LT2kC&bYI=@%bDqX9SIuBDVUX
zxSlKv1tC<&su(eSq_(6np$0@w$VDPXt3bq|J(v@|8WLJu1L04o>{#$0rhWG;vh55P
z1Rek)we}j)FUaakLa`zeu(&$vD-4rUIGQqGa<>Vt))hSy;>BK{C-Z;oYoXWy1M&F{
zY3E*Gr|bC+y^Q{|y0!G$YzeqC`&5Hy1|O=)%1p%Fq<t|E<ZkO*K#71R(Na}QO<BpY
z!A#sVfqvK>Rf`Z$V9FU9@AxZVA_`CX5Zi_90WUe8s;MwTeN0Cnn999dnXj~n0ujA$
zm9qH9K|2J$OUnWw8ODZYolJJ#FsEbM>A_2m^@NfWgEiDuy@rquu4dS5#*1WTCjPII
ze*K0(N}c{MnGlb0PrW|*AH6n?GKuUQ;-o81A57?#cBg({(oYNctm24vvIM8=33a@{
zVN6r4Fcm?u2`@(LDODu2(E9R$zunma!Z#QpT<#!l%*CQOzI97ptJ<q8n4UC)CwFKX
zfsr@c>wo?>`ov`pcGa?ausAu~46nk~<NaMVKR{Z33&jpH#kM2|?qHb3no1TAi3Bp&
zkWq>8L0kUx<2h@o-=CugKzQ^G&1xW58w>bb>RGpKUdhlFm{RjruesB_vhcld&uJsB
z@qV|TQA#QaA41yY;+qIf+{n&S3RCLd_CblaRh~jFfPG12p07!e3;-9vaXf1-fX4&I
zEJ2W+#SgT<b%h9VN_2rRBf3PG9aS#Ofvy;4Pge-H?>I76V-^jedS6!fPNYQiXpKmj
z;87EvJjSCeB4wOQPDIKyi<E$raT+cWF~uxWEE2K-W8H+gX3ktUZ>nE3-6xh65W@zH
z{hQm_fN|WQIXkCPELc+W@{ejdJ1GUuWuEm-N4~X8H(IT{!q8(p0aAaVlGXY1iMX6I
zn(xX*fdhgarU1Ge&sr5wU;x`<q3(9wDB-1JbI~dg@W`sdl8d5&vO2z!r-{Uqqkm3T
z3D)NcgKeJA7xaN;-j|;XR=9;@cH)R(sIC^)4s&_N5ND7JcgZldY@kEOISR9@Mxr03
ztX65RVxVm?Z<gjfRDF{r&BgSF_<n7S4&v4TJD9T-aUdrZ+j-R1dfX;0)@j@%-E;GA
zU^OM$)q=1j#Jb;HIQL#=k{JtfF3cEfwpqpqk^NIZo0zll6x)syEcpX!Zn60-5vt)!
zqIxe?-9fpUA}X$7T0^;o313cag%no`kg<;LTmdRDz(q1lX%D(enkzX_M_*^50A&y8
zG7+vMA5GnrgiQx@Qd}S&)pjP0mKzBFeD6}!k$t0@WZ|UMgEc|a_M@2?+i9^DcRfAJ
z_j+t(>&Z%-?W9zXyMeKFYa`(ch(I7T^~+;CFYQ0Zi_}l|;q?DBJz786Xl83X9?p0<
z@^@l#NzaH<s@=xR(yHH``pd{#n!FzRx<0ru=<|*`UDZJm{HN^LluogeH0@eriI3R2
z*0MgY(hpwZN3Fazlc6R>hxhaMoAc?#Goi+F;G5mLEv_c&@l~MlTxp0T#JrdeCdKr`
zxzRAj#l*zrw8A<7gqU0a@zlb+03J+B;0ofQU;q~lTxa~#n}MZ<QCn#Y+Bu_0V*mW*
zE|_A`-0YRluf@buO6%NI&S^^;KYVkRXURv!OFBPpwpC1fxWZC0{sDJXk!TYSYoWGN
zByOGMKu~a#{W(jQxOl=o(qu{&;8ACq1iI6BTps3V%z)UyFoU`@%BHM}b11Fj8_5{>
z_ywdH<@n?UV)Lf4HW13?82CU1;i@RzUZIXk9UI^)v2JeA%R?#xd~{UY*j0c(Ln|On
z^VF|1^-EKMk*AJsGW5yR^#TnRDVdZvVqMUrwD{}avo4;2Hz-~%FW29adVg?64*9+M
zv_)49TdY;AQlvs;CWeVwzx=Rt4Nyx@CAi#5oNDWXu6x&fjd#C1D*3cxSC1s3lut$f
zJ{m50AU=F%hAdKlAkXEs@tbI+%PvmO>~#4&f57l3{1E+IKInZ7h4c=<57QR#`7Uf&
z-QIe^I$TO_+U*a5;3IGfA5D>((Q!VGWw0ya&#&)_Q}~P^&UlLa99D^o-)>l19vvKQ
zi}_Zv7FnrSuAiBtI5!OPQaHCw#F+Tq?JnXQ)AzGaKHoEKEqa4>6TyVPNNn6u9eks>
zFPo_8xGx*2bvrkZv4W9vORbVWLGhceBFa+6F1TbW;WS>-{qG^({~9ve<uNIX+fb=s
z(APC>@j{HR<v~RgM5C;Q)K&K31@rO=eizD_RfPrSi;k7##wR2E!yt?B)u^%u)<>Hl
z?tP@tR2(E-JhwpOH}nXkh#fRWr7eqSjK#5@goB;t<hwsjv%1RKsCE^01SuUw`ZROG
zG;zUA0Cq4(3XuWswP8X&&0ln;j1cVdEGqH73m_5xFh0krg7V?$X3ntysV!pR{p1;>
zs1*I{qpJQZzIakB=(<3_Z86s^RiqggPu859%~F%|pLX+$Y_$9$*V!z&Isa)pzlbLu
zq3neR2YYNDNjsirzH($Bhj#pS(BJ3Bh_gcHqgG9qw_Xd3Kj}qp4PTvoU+r6Z?Tw~E
zp!=!-T!=w{xRKuT>#K#x^BJoJHS`}3n$AQW4_r%+qVl>?aw6h<qLUcI#3K|-Hzl?>
z#jYxqpZm*P(P=4%Zne9)xj#&~@447-mG_<6ZfU#(L-b|q#&{Ju+Tm!|V>WFe^eR&+
zhkqexzYr3~gdR9Y=r8F0MOCv1f6>P{CL2mpDGnJJ4Q64JXOkB=`NZG`=8^0J8Pzir
z+g*)CoG80U)QwzJqRpw*_YT#5k>G&OKWJgpPD^?Kou@|Nf7KtajBnBkZ%cG&1b0Ra
z%D(a&DrKgGOz4>-ou^bw|J~-;aJ{zy{8q=fVGr4|77P7M>RmA?@mcP%{{2i_4{Md(
z&|?pEw}aLx=Ugn-x^5>&>?)QgDd4{M8XME9P8y$glA?~2(3&sB2HQvIPTq${yLb7t
zy}!EG+uq)IhU{9pxh#49p@`AnW80!8$$9x~5xsT~$rWKuIY2wg{pLV+<8)R30sh~0
z4#r)vKpS)b07WQ(0L=eibq?+vY<g@g|IbQ?PpwUk7JhQSkko~Cg@-$0$mG<Ug;ls+
zg$;PFob63lCb=sAQ!WQfZiJ6EzfWHA78A)-<S?)fx89QBdeWRC;`1)&Se%>hkR~(5
zH9YquwjAw5O4#oY-Upg=-LRc^Q5l-SE0+BQVmo>Y58jfb#zvzDGMJy@!E~INgD8S%
z&7-;3aY`VOqhv9bu43CtUw8&wFJZ2Ta%ofKv``YX_%}(^^?`wyru`AusCYjxW+vB~
zagy+HnnHiFo;xC@2XCn}Z;3L-dop8;=(3(unb2fyk9*L;979P5m>ft*uzKJaTywr|
zFd6$eSj?KkA~Slq8C_!&MFwcVj7w36Gg#AlbO3jWY>Ym-19z<J)=f1vwQ2w`1W{jV
zh}lg@8E#zZOCr3_XV32)O~3q4)}JlvDtgY$p{1|^d#qqM>=(<k6`7n+Gq|!D2E83H
z5Ai{W^Cr#E3I4c0&Z|u9+x}@J&X`V8(V~F~5WqZ-K__s&@hZx4E^AGUVzQhpmSr-#
zLw`H1E_`#|SRy4P_@}!N(A@21vngf1<}mvl-)2ygS|8(uba3_tv_o{SWM{AmvWwm(
zApeHPN>>a~uVeL5MZx-O3E*1e<R%m~!ah9RU7b}CD!*>dZ|3R!`$+xz6(8_)e|R|?
z#`N%!%I)U!@O^qYdxqrcCJ7_|N79Rv!()d4<qgEU@Xj*C2)K{;fI!iMvW;1S#9KsA
zK%co#!2S@*urvNX#aVX5(^k9>5*qR0b|pHtfv9j9x%9rX7M0;FHr(GbM#X=rx9<1*
zLo#<!`XXotF3G|Lsk7Nn+1U&|AK-_th>&49b)8_vHE7@Gl$-9I)VWa79ujpEb>3hy
z5Y9Hfh{8Faro=~voY4aeUHzT(tjZ>y<rc}sc<RsMY%IH@E!UbdS0N$jvU}1wRUx-k
z3GygeRmzNNkad@HAqEe$oy@p&+y|Y<{^t%0n4kw6a9AJ@bZwb~Js#I$lvQa7I&<Xm
zbwZhLB;!W8#P)~p3LUDz&ZNdzvK+u7(+eMY3s&-((OjXy9eY2cM?>6=T6O414X%In
zD_N}GpoY~UY5H*S``2(I`*%`NW9vUyr)7Q~ujXfcY%UMp7zZCq?$YHeo-Vy0>_ziT
zokPAqd^ztu*xsdt$*!3>bd@{TY_v%#z2|$6x{ZrLk&>H)pVPEURV<OCeIhVr+k*ML
zMeVIo1ZI8Ut49`R?WYR=>MYzm($EGyoHbOphcEJS&LThf^sP5Kt7?E<x`Q_u?6->1
z!Y^(}m$NqpIWUYQTOor6v9SqW)t5VqgdGoL0ypGFP1h{BTMSsZtI#eCDlD;&ncD%`
zY=bwzs@C*R0GW-n)Z<~f1hrO+2Y*1K7n^o3pJu}bdn~SPcns6!`>7NdbWpxfrABs!
zuxCeP)JJBrw}WyZ`wbaF7+}sItRui*A%J1_0&xLZ#xMw)(2dBy^3XWpYW!`AN6e+?
zNxI!%zOLd$b~w$m<3IY8^KEO!A&L=IVHp_R_^icpr6DU6MqFqgpi7jS<^%{aE}`$-
zU1bK_<VThOp-rYmnY5liPR88m`ZdVFNjmPt?u$OiWVTUE>FMvqjH&HjdyBsdmUqbX
zBvu~$jho}rA#osQck`pD?G`R^FybUU%@Tn|UX$*{$+7%ED`smwbJ*TLSjA^OgEyvM
zUWf(E^vBz}mp$)(gg*zv;x=#n%<{OiY|aLr2ZCfD6@8+tXAD-(`bSRCDL&bDFZ&CB
zrI4&H?CMIaVi#16v3Wv(WGa_K|Fyjb?rcUeGJw>8)6rYo{ZNznGKh3hA;17E0|JJX
z*59XiudRK3<Kwg4C9wu*@zE=!PW6Ss0(jZKyl?{G^7um&^kaS*Jr0j|($D7l5Kr%B
zi#;Z?gcW1Pw@A}(A}c@?bCS!U%rn}%QlMzb`!fA2U$x|@_v3$8F?Y)NxYfF?J{gR|
z*Sv*&TU#Glu32TvndGc`UMYP)>a)y%ZylF=(buSBn(K23K}&@V*+o+Nm$>x(q&xxa
zPVUqPQkG834F_fXtfkupJAKKzwBxtO98l1}ScgVF=ZZQ2n_#~<hcE+0jm)=#%=Z!y
z13GZ8k^g~9&QZXENSUFUPh7Ob0_~ic8Y>k*J|wxZ@p1WcEBs{Li-+Iq)tn={wz?7&
zfJ|!Zu2lcL0~Y9?OKSl)x@wH9udqT(V7X`;q-uc~XZaew&6Fj7l?n)lzJ=v(hczGp
za5WCNL>@Grn+#|&OgU=}2b|UdhsS^O`Wbgooj!Bu2~D>bx2oG45VNrEu<K-Pbtdy^
zHwR*bVT|>*nxucl>Dzt$md`0!t89mBbnn~!Yyl>h&xlXS4@<$kfUl$RvWTF+NQBJY
z;(MEkh6zsRA*??cz^&R+D~KCg8rCHkCr)zx_QXOiem;!Wff;^8@kcpeNKW%)1@QF}
z67<LyAPcRL@H=RtRZURUg0<LB-2?EmvueXu;vd5Oc+?L^`cO%6RwgDBOYx;?_KHEy
z<ukq2%k*0AG1Hy4P?)mm8h;TnL+<-`zsv4MrbiM6j1LSLo9FKP8bMcIfH(_V--}jO
z?EIRu%v<x`>JA?U_hNO-=f0_5QGN5OWq`Gi@(NREDq~Z0fr<5?o!KWq7T048n0MRw
zD8oBL_0izY*e`Pt3tU0mk&!<>WY=YVX+m0oL8wAvg6HKHJeaR6w^DrmCFSxeE8mw5
zOBT%f&WIFf8CYPEO_yG+tl7LM?B7|tYc7iLy@r<8zBQ@xuo!e1t!_5>0jw#Y8IhGC
zl&th;ta5)WIYyu*fgFyJ9;4ejD=@<d0<=IFt2QFYz~UI%7C?zSu4a*!)|;@MWK<*G
zaw8B4&*&JK4AO!YWfBYJD@wMc3HU6SI$+^gQ{d@%WegDv-~n@nIT$WVmC=+y!`u2C
zRweMz5+Fojf51c|;%h!HG_x?+RK*DnYi_#~*sQpugo>7l(xABLgxux>5oXOrCH+|a
z%sVkx@a<rfCHEsAI-_A#<=Gy$B6RKBhC<!BaZRx5q~<C)YO5BNRW@Cfm8XM}Gy+jD
zRg{82ePhEJ_e9AjrFH?01<Ig($94&<ze`dB84Af13(1yCv_S+gLDV&n_T-=prcBU~
zy?(03=Zyr?>rP~>za9VFX@xdP-k{L&`Q-@m!as`P8s{^T&fEQBeIT+piIhEroNYZ6
zYz8HmQIU@`J7vH`LWHBegjUT}NkDpNK@uzVFM2muJMD9SiL@fVHqq@;b)8))AJZ9V
z=|)X4U&9DH>+;c!&9f%$L)f$_nKG7g_E{q?4%Vtgsreu2D~7N}r?%yodP`SSU@g&v
z2MvDxklPraPooUB<*7>F0I9U2f9E{^B+A0<t3@j~cwHkFjdl}Ofbg^m>w-rG+kb#~
zxRybO3s)K@o6wp%VM9t*C8;~PwGqIH0JYD+RDx~uQ9JrAg<kWnN3clXJ(Li+j&?c|
z*wu%d$9`qN#<5Y<64}jP>1ph;mq|SiySgQII4Y$dMm)R{x+trDjDGJz%MX-!yyq5c
z@A0W2wavN_*pDSg_7Q&W#PrFYy-)Kv0xU^lpr}0z7U;AGlWr;tC)3;zlgqD9kjk$^
zNiwOMBH8K#8=q@%roP}qc9=j4l`4}!tRokl>|W?S%^wo*=;4Tr#Pw&3=jH4p0B;W#
zjMt!bZd`2`tkQM9thuyefZfu;29*We_Oo1S5)6$)3W@=nf7JmhTs0xQ^dO@mfzv$K
z56cyncZkqEksU*kiWVtTS*VZ>C$?;xRnpIh#gr^FmV~ym8gs=Dzvmhl;+^o}&IlTk
z*)saIG^RzcS``=iBvbk?D%1T$cV0B}k1A7);z~2s5gnQWE2pz(MRrC_{m~I9Q&09Z
zC^5)t5S_lD;xyJc<knvCK6VslO+RUUM0y;y<9@esgIpKhO9oo^Qws2EiXLS#E1Zxh
zoCLW|PC2|2@G#F&RWQ*MM@`OJQ2})+b5RupEW~y2?p?XHQoCME+@B0wa0`O0hR!CK
z8t^?9>}=&XCwr4!+(4#QXZXg$1Zp<eOVU7&PLn2gFLxNHp*0m^qyFUC**tc`^<m*?
zH`31Bl0_fUbhZqawxjAXsf0$lg6T44$aP;ND5bdZzMjz6C$UntWZ14X^}Uk)wmR4w
zAL#cwG-|LM`}+F|s^eDy38N6+PnxO{C|s21h{Gk)PC@8raz&Egg0j>Sz9FaGgVU@b
zFl~gz`R{~R!%!a7c*Sze8c{=BH1+mp?sEQ6THEf)3qwNf8Zc#mEA6cWUCcaX3$qcG
zB=Q_(GLI`E%rN9uN;`pCswP`9S{!3En><ulAHq1A@=hN(V9mpF)ue2`e@;+3xR2a?
zYXEK5jD_0JY!??FzB>9|pUJR4cFSL+KV1r3i`d@;m&9jA<M0)X!ykWKP}lPNr%pWc
zoVg{;mn<APLQ0D;=9DEhz+EYVRwnajz&Y9G_-kT?)uf%o#l)<=fkZq3fEd~^*YK3!
z{NUcGFV7eS={3&*l@Fa$IFjY)i;%7tp+NeL_z;7*=qc41U=hGH0u14*|8<ObGQ1Q*
z7So_3?I4Mqpsjr@@>_%SdtLgY(QYkIXF<<Q(hpZKD&3RroJzaFHkYGFKU_!DYRM6k
zshP=GHHlC|tZizoV#>K~N<GS?lmlDabZTp(%E{L_qh2*FBkRFFV`>WxK5bkE6i>Hu
z$~o<671elT!6~A^e!Rou;5r1I4gph|nn{&4p}tt<glJJwv~*H*M3;tXczlm&kg`)Y
zp<WF=BdftaV{8izIxRv56iv5s3`6>Z86=_pS=;cxZ{;3APn8lCU5$#_nK`z$K;@Kx
zh$>o^V5VH+K{*8ke*U0qYoTd5#SWh{epfiYlP4;CwSUzoBibm4!!@oQAp9-H#|#K8
z)XK6h%J@%xEBa2v77J3=R2V>DR-Qu=P(Y~US<zL>-IiSgw4YiI&>A(X<iulrLn32G
z8!YknVDNJCIcY3A!Q9jCl_?WM7CZw+0zUtU>vw+Ay-X9cv86cks@$gZg%}j`YG0dt
z)0v2#S|rcx%?U$B2yt)2wAGc;)eJd@ZKf=x(YT(>^E{J9-gxgHdIVE1a39K7nXObI
zOIzlW61b#s*cq+#uMWYKZEXRe6r~V(Fhwf3Mh&T8lQv=wlN7KuI^WV@ysDXuW?a0b
z7B{@JC!mUQsm+`+IblbxJV81l^KOPj8sGAWx<#lwVeqPwu)7A~<6?PDQkDS=9*5PE
z;&MyJ=Sx0v!bRB{%&?I!)g~29WEoB5oaD$AupOguvpTq2DY(YECbFne4NHdxRE~6M
zxZZ_oh!{DKaaUo?NTqdU8+EiN3(4FB#I!S7hpyuzMmxfBlJb%=`S~IQ0{Bt<&Z+nH
ztv&<y1J#wIYbf<q?XMk0TU;zg-L#aar<7|WD$=;>!9k)eH4MGmZ6hi2m#4Cex(jCd
z1vZ2%e20XLV85>#yiRkNE@s&YbdMIjq`;jM@dl0%6%#dwRv!y_zY5l&Tq~Ie$#&FY
z>p@C*gCdsV%x<#;8>QH@eFF~SuPSKb^+AQOoUm`^e#XXrMumVXW-ZnSwGl@VO}5kH
zJ?TE?^c~IhU6tX0<@?<dLrfQP+EkJ6rBCC2{XH(X=SfrZU}Mya`}>`>1qU>$lH@|v
z<@z$)6i3e>&ozqKZXaklR0E0mRU&OKL$LR>r>G0@?MIFw$54&hj{oc1RGlodUzqhc
zT9;Z2=<c*CYQ4#dm)rc$=FIEvg7L9Q%In@j742q-Q;|CIiBKo>Zgm&*?Dxh1o%T-g
z(qjzdyOR4qKS4)d-=L$fua?9|4@=*Z+2Il<k!2S2ri|i2B}uu(C(9p94^s{<1`r&{
zEm<WLti}na#|ElBbuJ)MQ1PW4bmmf!KTAB&@}#sLRkAFob96LK%D@|LNn&Z)W+_X~
zQOvVO#tx}oE60J4lnK>^Sl4>VSR=#6?BHU+=*@_G6FZ(g7~qhRhT=QskMlswPQ%(D
zP7ddsP>onn(xL{Z6jhcK)~KT7;s$92@jf-q{U=HS%7%tS9rBKDIw5h7rKY^XS@hQI
z!00O<;>G^Y86O8s$&Ovk@rSJa9}7ct7WT6l+gq5UTGUQoM6T6i_fc!jM5AtzG;Khm
zTAs1D7aThaj$H+Z?v;J_rF}aAe~LTw+!FehZ=<6s6(;UpghFqr-l&RAm_u7{qW7;;
zFntkQRgK?7w=@&>J4NBN1NLor2eG+ATbp6*E--fJ7`jO9-3U-MpxCQ;zp?hzWav)b
z3Z-<X?zbM5XPq+>56eHKLNkq2NUvLz=a-dhDB@o!Z(Qyx$TVWCH&t3lwT+-wzG6|T
zN^Aidoh?F8tb0r++5FxQs`){=>E-)p(vE~x*S96dE3EAnC%;)slRSL;QQRy#2jIq1
zk#VSy|L*g}4kEl5;&R3jf}yi;Q)wln$NJum+Nw5_b_kA`5>6{llN~h_8P@YxjAK^M
z>fBY?r8g)@^k<|bp=<o^oOq7m)Y8_*PMy@#HZkR~a*UFQ6hA4Jlr;THSEkNDiO%<H
z0>O3G6_g9OWwB3P;GM?RGWCkNScsics&QseRl~Ru<0uYYscRIowM}5Fzv|YHJ2f?n
zU)1`}Ii<MHZ*vcDLnMC)9#Ig9$Sphz`b;@hVwe`Bfbb2?cyAOT6#J)A$A)el<AiK7
zpOrIz6smX_QMqSf9m!i!BP51O2@u4_$<$%zC<e!0`yOm-IItQMdi1sO*QhqVA5xZ;
zv|A$P+ns@MQ)3O4#p_k1>UCPY_7u%&hgBocsc2Ob47J4TON!R$O4^DPtSL~kJR_GG
z@-Ny>^n{YTjB`eD8Y#TV-2XCV3zENyjy9erhaL^wi&OcbC;IIoKB2ShHkA8i!;-S^
zyz8TJ`?h96OQ01PvJw0UwgXsXuI9ncaRfi~=h%g;ZgfZ7$i58U)~J0}sGe^-pG#}_
z4RxLrF<{hwwQxp-i;$!%d?}N@p{a@J0>(b-%M4y#@iN+t{bLG<@M{mrVaVRIGP#29
zl#q13J{OS7x^X9{t#amzZ>_nbWjSAnDx-HENy4vT07Wp6A9Po%K<LdBtJvdIJEjR2
zE30-jE_kvRa_#W#Uk9-|Uk~o&jjB5-f;b-hY~_el;Op{>`p<-#KT-i=6lI1?LNHlG
zsMl)@bwK<=1CZ885^alS$PNkOKHmtcpI7TAyfICEXWY!<yRp#tC=sM&QMK-IPTLDh
z`QI=rlE(l<v+0jlPa!Ki+(iA_R<XpciPQPp)X}KB%enU_!TTe$AF7PY$1tPU&B%-I
z{-;fOmS5h~WfFSKbWzeN{m=XwkISALK(Fwd%YNFxErk=x$swZ?YP70Vnio`UpR&6Z
zhdbt;NjN$>JqkT>TbHL%ImMCPkOye)h!(ViI`9e}PqJF7rfTG&I0q4;J9IwAhuZen
zWh35R$I;CwaEs7hNIrRB<(~%?7o4P*W+2^8iX}CmhP+&CGcX(qiS?2Izjx|(ldnr(
zN6R;H@brwh`6PeJlZ)y~3#$nm*@B70N}7U+)Jp4u3Su>v;EEdU<ztoTiKAIk`-DD=
zRIK#1KJB@_0kD-ou&X$^HE1m7IzcnRAUd`)D%gp*u~X_Ayu?|~W83tvt$zNkW-z?d
zaA%qsYHBBrFbW^P6UU#SDcyXHw;Gs@il?ZVe+>BiH$MreKaeejE->LV0iHf~GOxB}
zdLYXzCtl(FnWl6emv2|Yv)_QcVeM4dVDSAeFIfJ4!yMUw=#ddgD6|Ze2S(;a7H~jZ
zXjJ$ECTT%^Z8;W0ZSXH8Ky_#^pE#8IoiI~0{w`dwh${+xFaE1({&j?zp&%~|sEfn#
zIyiZx!kJ=JebNH;%36S|%JaG~6KI7+{+fU1=mEEl{!He(R=}YJH8fvQ=F2QUr3T(G
zx??6&7Hq@(`A3FEMe`!=`1S*v9aLPJnhBTK26eVuCxGD&148%Z;2#J4!!a~U=;wSt
ze;kK`Pw9uVe^@>vX;1?R2oJ0&g5H>r<ryE*n5dj6(l(8k)*AldjPd$Skp5B>&ICDG
z-y?)`mJFb2KdAFJZ{J;tzug1B3O9_^3*ONx*fvhxD3TSpegw%X)G&s2<x9^??Kk)2
z`1CK8Zx|#2Coy4)j==ie+itw1t>TQ1R3oJ`3fUt-@E}^f%OA!ydp0*CH|^SEJw#OK
zp`^_dhgW8H)Ae=gtF+9lBa9MOrXYP`D4B1HE0`3&Z2XHp4WXA3LNA}os>GhtVaDl;
zti;^(>;gu!#xyi{CZE*CG@mOdwL7Drmf73}fxnsU$y`mh8^Ni8T8A`0V@{lqv_;{%
z=n1YET+S1HL72Q7{M>~+N62$f@>bYWxs+am;;3(F5+twGr6L=GwIqb1K+q$U!X@Yd
zM-dB*w46|Bkpwi{**Z~3#4@9pi-?z55>~|1HZjw%y=t1cNwdL3wkp+mX;Pb-*GUa5
zSt=nUq<8`KJHQRP+G~@x$??}8bcU=%tejj;_tiIJrkmJ-nXYFAXzZBoF&cb3D(p;v
z99M&b9lNQL>L}t-=;<UlM}&bMSHlK8te_>^3BI2~PRLtf_Z^|}f$il5b&#I%*^b>G
z32%FfY5;Yt0<I#J-=+)r&`wQ@H$b-Gqw+suY%ShAH?<(Mp)R!wK0)QTHG3#@fwp4<
zwdayLbB?*hN3;w1Ziq%PtPcqeRQi1#aY`tteu{d!&yDf&2$X?V$UL5%wR@-|+%W;t
zBZo5u=#cH%)v)1Ry7x6<qX}8&QYea<Py;hHu8r5&OdB^oUV~>2?PWR7QcPH!!zom3
z9!Z>K#FV|*4wn;qxKGeg3#KTtLH`k4PyN+=gfuouHW|BEZ*YXt*muO7o1m&FK&8tJ
zslIA}(!w-h?n_Zo4Wcfx2J2{;q;fV%p7vK$)qt&yZoqt-psTz~QFNv3>sW@kT>exi
zruo&7IeuL6S9T2PWfe%#UbcfZCslRSVRx9<lIpL{1*?b`b9EH<nG`#N1>&B=Ui^BW
zvic5opqR?LkiIMcZbTR#(FivtqzVdURMB4vhs_AkAZ{@RQz!zyM6i8A02T!4kyIa7
zBh-N5upt8voMy<WhihY7)WUwUz*}FFcN!b<hI%gv7N`?t9wl;Sv7!+|XEcosDE%7+
zrIR^PPEazGLdANwg5YiiA>(73o@72H*%evZY)FQMI6<ahEOiDzXb-7FV7}G<@z6A!
zDOz9JEmRA~LCaw{3gs*>gAd@@GTYPIt<KZem<!6oo8D-^(Vm{Z2+S_~x^8`n3M)Sd
zbDJXGSLW72q6yY+g5c_sRj4r)P*)8eROi+NW=nX5HoylG+%0Dg#bTgD17x%+RF!VX
z;)hieVA{U;wArsd#dbt$5V=sWZO&F;+;@@>iMeGj|K0E029WmUFm+lQF8@1|;PIxq
zv&T3BI9S>6=Rii(DsQzd+>sH%$sA@Ng5!1*9O5&i2qz4ktaJPTXe6Q-yFw5mJet-&
zKZxf<xmuEGhQJ+KI8g6^u!QUO5Oyl29bKs2<~}ozU8y2W6XMab0<Q!8fCqkp)<~tD
zO9g)_iOHBF%=()HesKfNL>GsY0lB`1QL|!DIa!s4{N8o<dgJ@`cE1DA*-^HFIkMea
zH#d(R8bf~MX+MlbD(op8W;on=HQYE8uX;=mfyH)F5A}3ASw4#<;yF}Nd_=2rcY1ex
z+-kmLQh6R;omW+FJCwEpNiIHU@RhraI9nR#@Q*>xvr3VxY#Vbc3VTE?h;A1B_n7}n
z5Xs(yIa^9}fw|9)Iu<@tc5t1-`{2vaO}1#>=b1gE!<BJ2`a-DYmP&HfNpOhxZYyXi
zaOiOu`~u<EmQ7m6MfS8E{jk$hb`(l`d$-2_DUgXXK&!WtWQFzYURwj!`iB*j9ER1t
z7Dji}1qMLy#d9hva`ZuJ_UP=)JdOD$&3(j^2PaXH2iMs{1h5a~>QjO~Q!HC}+npzW
zZpj$SWtVA&i~wX0Z?XqkaLXM6=*12tDcFWmogR7b+IUJC^L5;XC%6sRfvGL9oREMi
zS5|_dV2}d|5T@o_Rwb$O$cG1;>4pS_4u#pD1=HU3`7AxgW26-D*bPSmwQ1MP3i1?O
zIXL(}$dMDi^NWfp?I@k{{wVy5fr#;zv6ADQ(U|o+(2bSsZsr^B)`h<##!RwCh~eeB
z&rgqOhwPp`y18iF*d2vjP4D_gmxx|m?8wB{TY}oI3eC-f=@NmiO`6Q;#~b>uxwQCD
zPm5+Q$@T`HaMP}~kk9c9L1tZEyxbW#QHNj;8LOkvoAke`g~T?UA#~MT*{RRF#b~dO
z;wd#_?=<E)$pWh3jiiV+>vHB&2RRp|qM=fb$3?PRq{qdTe{|ap_cpGhacbA@lh^LB
zTs=iUovWOhGI$I@Y;aj&&4d2QV)L-@$e1n`k}|mL^G#mUp*b$C=`kd1C3TqM_HmW0
zYL+z%F2#v0mY;NX+@Zv`!h+tU=_8^8WMfF=7X?9LsCdV7{TJLHM0H(>=3PIKgonpA
z0^WA>?hJ@TBT-9Sa<cS$6>0@@UZAj-F$Yg81zp7Eyb>lmoHBOOkzv?Z;AIyhjX<#6
zL-Ny}kWzZgPdZFXwMysEp*@!&A0<>it#f{jbM0#B@8152&5!Q>B*xvOte1VfgF^MJ
ze=?8>QPh|@*wZXS$BeB)C3Ffg4?N9<C8H|MT1@+vHLEbs6yepFooz|+>_tUlA~p+3
zExpwxS^27pvG8wnSd}n4>7^-@T0BvfU`kL*vz6x|U9D~)3mL<kDU4Nl^1p@hEDNlD
zu!LI4kZGN#&4kYuVG81`|Hjp=xddJW$i>GTL66aA(bV6eA8<uY)|ubgPy~^=6`Hvb
z)<Ec9L|Kw6enWoMdTNOIl$bf9FD&xJp~$x;y?+q1rPRJU2oUt+{RzsJ2Uw~(ldy#Y
zl_9?3hns9;baCW8lh-RRhT5Y8+xvK=@~`p{;i^rQuRPYn+z1lpN;UFiPBk-rzRUN{
z;BpisWLTJ52a8X}us6HDfdF_@I_O2`Dc~pP0rZtfS9daq9#!{$?c!4os3+Gw_CeLw
zH)33K6e`?*8BXHMj@a-H%vfd4U?1H=Hs1gTX6|*>P3L#=y)q>|!`t<W=j5cdSAI(}
zTc|T>_8V_`8c((nnsoY{i1cNM+a(Nmtva|jJk5V_`%(1!cOHhXmk{KWaA{rxR^rVI
zGzTW)aZz{uZ4F~mZAI7S%Zl!}cz{eik>tw~b(^`yx9`}`4qb9$5Oj+s1;VyqYC$ca
zy;!Vi@GCsE426bn+{-|QUp4KiFApZv#(1;ecZcpO_6Y_TpIa=ZW|9W;jALmnI85px
zgAmibnLq~QvMf<NzAEw*Q|R_#f!-!b;udx~0YY_g7uK!JZ0a!+%rruo@<;^{K5N7s
zSO%+=dH(VT>3jZ*WFCJ(9_icRo8ul~qzQLh-j^gVOzmCnSxWsQhpUB5=J-pQzpt$4
z9eHP7O)4_3go?5sJndx{W#3+IGJ5bdyqj=`@-B7HM^R!wwP`$AYu|RgX{ix(fiYzZ
zMPhV`U6}w^{4`#Gp?)8#_z*Gt8TBvYNlu4Xiww5xFHyae5P2GYaC(z2+OoL@_}9EQ
zx^POPBBb)P;!IO;BRGfGVp+@>LJ3qzo5FPQGNbIreu})>JVSj1?I3lCQHBC1DBW~r
z@ay^OeLZ!YNjtqTvE_<n7~{{$GFYSPtp0Vul#3-{D6=>KzFU*d^b_3$tgW(+HiV9G
zg-qnyaxA<Sr)zUW^rDr<5)O8C9j837jr2?A7D1SmYto6%D#$6;Zq;{kw>VQY@=eXy
z+F4s^l=Eiekb=Qg-I4Ijg$+%BEk;{J5{YkZ8MDW<(oI3yCYv>Ns7-BruS#Rxrx1Sj
z4PEbt)To(qbb?y+@}*@sqN(Z&beqm&GBgZXh*-Nq>Y|p^A36~sX10KGZ(N_qde9+M
zR%2p9+j>QBJBk@}T3TV^oatBV;=ICy+!>l&74H&GHZv1L=4;AK$9%aSQW~&c*PI<^
zgeeU>-1z3zf~Xg7inid>L6n)AC>O`Jq59bL+}i<CGs#mG3Y24+m$LRGpKH0KZ|(Y}
zZ=^1?Qaiv^eP9<{(kdul^<NI0Arx4~we}DoIhDmgTHv|!2w__lrO&*r?5dtW6F-yu
z`aN?1`&$Cwo(-Jr3jVp$Gchi@@~EdTNbrO<QV$9e!qGqko-2Z$)4hUc$lgL5@6PG@
z!h&WZls^;fMR7L$43Y%>cgWI|821#;ZZ$AyZA3%tircgyi#9K>M|BNJrnXoT+9d=(
zrPLw5`ODGxG3_<!6pZbr?ZzcFV=zBeO7Yn^KCm|~dwEoZB?6N>*fhX;85Lb~6$EUR
zKz}e?6J<fHM?=vWP&IWK*>q~O{G_hqQx-ZCxd>1HZfP9Tm5#eMZ-I3lVSe(z`E6`#
zly!6}_vqhU1p;<Dy}a@qQ5xQ*f&QB?G;5l?_ppcj&G_(S{7V=wkbo0)9Ai`XAC#R_
zj3_~rhR3#T+qP}nwr$(C@7T8Ij&0kv_HH)&u=}#vq?42Gx9+Y~x=(%e{b?i20o;I{
z^nG9fW0QShK87Z{iip0%b4}qaaZI&l**_SLq`#E8pZ7LJ-J#%25f5em-e{)KNL_e+
zFxae;@Y%-7j1PBNSt#1HUp@HZMZ`+I1+0j*R&!a)Lb=;&h*&Zta=;V;Pw3Oi$c(`T
zMKBJrsevY?Vwi%NhKGf#=p@xv0w$k_g{&wu)T26%iR3_33klUKN)q2J<1I*|m^vHi
zv8)RI<%xF{CY69wOxXrVt?#yh94mCksEUkh&7X{mEM?pt2<4vsFQ|%vx-fBTq5Kt%
zzqQ98_+mv>77Pznd?!3=Jq+T{LekF>#e6iDc4e$eq*a)wC~2v<qsU{nP;oTOqQWQ?
zb*XAOBZE=2Uf%;Ek?ix@RG1`jDlq^=l>wunVjKvfu((uq)pq?N8ZojwV_o;wZ@2aB
z>pUr7Z3<Y*sm48&V6zf1IGzP4PqlChgJp9i1`HSS=whW(y4YS@n#Ik8`HzB<u1!tP
zQ!A+_61-_O+Q6HP>zlybcQ99SH~lw9a9456^}E**BBd);>ldJ6j}^l8aa<ruxInKs
zq8V5T50cKp6)WKRJ%kS2Zg>m?Ln*ArP1$XbhFB*Q)tf{8H--tTLvxEm39k$q<>599
z+B3o<sM|fFj$l7XIMvg_Kk!-8XL=SB?B(8?Tc4yn8rgwg_$=94W(e5zg4a{F-!ZH+
zUJm1YjpJ}nGA!PB0@-FyBViiS6vx=Otz%iR`(=223&umFk&IIYx3IYhH@nMEWags|
z;PSCY{J(<8seD)~$%j%yOyi8edLGReLDtK&1*({jVsUG9C1TUZ0J^RwVV=29XDgtq
zHTi;VD`zE3RUJ6Rf4p?xmaDGa3Z^&u_AXo%C3-eg2etbss`aE<DSLob%DEL5ISP9O
z-KEN4(qf*HlX`YYb?^##?Sc;fvUQZ)n$0In-Vkm5ZgB02RwV)14Cau0{gXN_H)dD7
zp=7m{TuL04f0b1xl%Z86+x+D^&3)4JJ6^G5ibalnQTi9JV26&=`d6fZP*5BNjCQ;*
zl(X3jt|n2~nrOqG-FP}0@i-jnym$L(KGM`9TF0%V>rl0wEXK}$t+pG9huh|+4-wlr
zuZ8{W)l%qqyV4JcJUtlRrHCtMfAHu<k9s0<Y{Nf|6F<k(aAqBg0=(MlXo_F5MLi78
z!0r*Cjw_pZ!zRi|`MeVj=^EyXz+-9VN@;Vl_yvmx$*i|EU;J!R9Uu_<DEWnaLL}JM
zd1As)H+^~$Zv}OX!JwA31E$%_6%j=nG&oo$kxujXO=ug<8sCFsYjvdXUtm^>BVp~{
zH{lVZU}J5Irr9)a_Nmjy)+Cm$Hwllz!P+GE^Hzh7#M65DTr%`s$DLPAId#op$IVRi
z4@Q;d{7MOY5zj;;QMJ}SP<lr@x8nkj-OYO9f=X9yQ&(JW+VRbfEd8n>@b;2h@K_tT
zV{gAxh<G4jgR32uR_)!J7~u>!qqaKNcZztM5vLV)#8O5q16e53<)?aP_-J?P)7CT5
zQ$Ch(=jj^80`KW)LLMHD{AI-@bk(J(MhgPL1{ZDIm4wH}9l21J6OS(G{4fWz=ngGU
z*Cx;ThzrvPQ0`$J2D&|K8`=<1!e6gY+!rtI3xJ7@bC@t42{BCS4%z`%H9N8iW}g*n
z|35W%)Ge9b&DC-l!jB->g@)iTn`5}6nIoi8xS9hLC6(^?pY%SgAP13GiJ;MUXd~nJ
zS?~F4@&O>dLaxtn>_BE>u1N<=YVOsSg~q!zw;$Db(j3SVVDB7@^&G@)1$5F_XwnJm
z?02RjHV{nf2-VYI-I37FY#y%G!Rj&%CmR-uA`K^?sMft<M$^owlQp);QLL+M<>IQ<
zG;AQ&O#_P6Fw&yijVdV0)uGLeXv)>1f+Jehg&NT^BTm+vAx5+%o?nTm)X}g58#WFo
z)I%w%Z8Dl&YdEe!K1~U?qbE5{8rJK1nn@Acjc+56tK`yr7%t?iG!DH+zZ-iw%W}C*
zA;l}XIE^^+)nE_9NM+7HSL2><^>XS-wjFw6O!AES#F}S{ybUJ!cyol(E$wJ^GOyJv
z_k!KcSyi5vw5|(M-+5e=cWhgEe8}XrI<xu9U%+hVZ;!wG2rHUpJn6eX&vpD?Z{J>a
zhPgPf7a3U1Q?%8Gij~uEhBaq9CSL5@)Av%Wm}PeMBRUNTb6TsDR*$_j)Lm?)wIWV3
zD?V^SnC@N^d3ynhVt;CxuqLFT1%GUjTr39;;auJEskd{V*oLI+)WiI<>w|X&kfEb@
z`~iWur%KZ^*bfN`TF8dob7FjV%zQx#{_IwnFPi&$e5`x1V`leEb8&cX_u_r4yfgEB
zw8>fU=QkaY=IOqA>(E?VZz3OFN8Y~-dw3gt&5@6ywQFU{UjODN8(lhhM7F*8;-E#7
zQjYQC&?m23x6*bEQWFDoG=X#B+u6U_U<3*Ji;)kB`y2Bj#i)rXyNo9&sn&2!zJz#q
z3w84n?&KlZ%SW`455I+A<U;Zf2jiZ<tKZBs{58%+kdES_=q;C}-Cg$kOb^aquYI<f
zGwoV@qDl7I60=6I*PezJx6bg!d%EHCYX_Sr?S|a$ea*%1Hq1lqHtZ$w5Jt?MH^r$z
zOhm^cP7y9!fk@quF$mwzok8hIhnRid)MD0>wH2#6pFaCRC0`DhnuFu~tE^!EMb(rk
z0N*Ml;;JNCr(;KU6)aBraDwPPT7MGe)9_B3MoMG4Lqo)<JKDv^<I*2~?WDl-6)Y~!
zG6DB%(A@#Hzo_KSe^@^1mhfTux>zp%8g=)B6K`k9#5(=B81Z}w0R#b83>vH!GBei9
zUCO(lS)!>JGSZ`qCllBG@zT}jt555DURBfFgiJm>rT(*qO_CoMm-hjE_tgVPTI$Dw
z5#`~hu$BH<qC)!{D98@M&y%%4omH>@%~7cM+WA1*{D%65CYRUyao&ZmudXK#N7eGq
zZyi2cJoM9-ccp#}^78roqkJPM)*G2r;w5{U>eNpE1NJFjXE7zZfIC_(YZ1@_@r@fp
zHXo5Re^n-ojPwebdQT`lxat_MD*khqgu@OObQtXQ?~i^l9vP27Ggyu*|Kl4InQD+z
z>6h7wGE<h{@syp6gY}xlYBt`z$qD+j>va_vFa9W-aIrHT8Lr+Ew6|9cHtsbruqeN@
z*pR2wi<ef_-&i~4FZwclCHs7akBLR@;=eo0{%v@P0YB^d5-I5YwmN^V81^*tt28$c
z;TzmRD4adTMKj3l{-V$1@%=7)nDy`Td#nroUbW9#*tC%N3y8cp4ZTia;!8;C_H#kc
zuiNd_@cF;Q@tp31b36Zn8XtE702uzi82$gn(Cd1;Z?-1=YJZ?q9JDvmPLMo1Wsi+Y
zF5>0OBHQQebh+c|<3@$hkfBT@q>!GneP3|{-vK5R$dI}%?C7@K2ZMky2YY@2z@2&T
zCjK)*;mP6NCU~in6clcDi|4%$xSr|E7#mr9)I;lw9ZlyXsRKUG%;+U7&iRYiWZ=*r
zcHoQgI$d=hvARW!TVu`NMQ!w)@D@A`HdLT1X4CLy|AXiw+P}~&4@cA%>RVQckMMtz
zXr`<W-WfH;P{xOy$%&Z9N<(UCv4)55BaZ2TRvCGtlTwjqF|R|Ugoc=S59E!Jv9jlQ
z+QFpmnAuF4^>TQ;e;%$py=WiO2@#rdDd2L?ncRHN@Q|3p>>fGbityp#)vHuz!2yfL
zuiy8N32&V<#uu{3pxf3%UgGWcflYq!xEy78nR>{^@_c3Gd|x+wZuJwx%@9I<kONc4
zOirYs!fpWb%ki?iL+$AWEyyntI{J##S*{SgEj!OeN}N+>;?LJDpz3}dKTekE$NKV0
zuZfJ5EsVH#NC9DMPFPBgu$FQwHUjVcz|_np5!xXG!({ivuoEMc$|OSZehnUQwDw&Q
zKGRQ#xUROd&;sWk&C8S1$<6J5#xUZPL<>4s#EXZTnohykSJc(6<OP8ZZiA1YJOU2`
z<4Az!ojM(gAg+nohNQ8IsREWvSOA{M4ube_=^JnmGQbKCM|j7Yg~%9U=J|OR#Ce?t
zYv705EKm^r#bh>NjF7M4KRzj;d8v<mOvU!_*+_khxm}HrGS$^rEk^vtbEd+(ZYiCy
znmrtlI}7m2C4lfb@;g%?*DMMyaSqV^F_UlPi*k|=oAe8RDP3ICqDKcTmX^i8KRwQm
zj!Nb^FtBxfZR(+c-&|R)E_`1unfXh=blwFou|5#$axyJ?<%P$3OJad_gA16jcF1if
zUyV8;zUE*AgC6(ain`=w7$}g5qK-ch@C9&EOyDbU#(sz}Eyl-tp^UIT^bQR;&MrE`
z((~waS6}!S5W;>7tzp(i`f_oS)5}hWTKrbu0P6;pSIgWdrZ9nE-@*?$qmO~E@t)eu
z_=9hRexoemfgp0HaV7)vLDBm$fqqN!SoJgZKk+;Pdr|+!D&jS_p3eGlasS)idhQAV
zon*-FWD{e*2Su2jhxaZo1)L*oFa|a-oq>aq<(5xVaV}cYhvs>~n$3;n`2?<s)9U?s
zY7f8L+q1^~OaAFs@B9{UwI=swA?`m1lQ!S|eROo(Bxil9?{Ke7{av`q9rDX~mpxz9
z@>+no051*BVHYSmRI0bvir3F!fIq<Ghw?TMOy)($>HWA^wY%e@6`!oVW`)irBM|TC
zefsuH@6WwT$3<%eiVSabA<poJZcZc!*U$SD&##N%3E1*EUhJRbjXbL2Uc!4$B(^2r
zAei@oevtlhI5Y9Z@U>jM9HC=YPev~8a}<R4&EXdC9Ry~MRRg4ba+tMz$+m4FEN-2h
zhB+gr^#ub~41Uadr>hjc$s3-Gm8@tyc}>K=X)aFp5o<f97C7QB0s%p_xh#1)S=i)+
z6-?^{%Gb%;dGu-SiZE)6TJe6kQ<DwX@^xXyb$|7YhYgUOhP~<`zM)?)@Up-SsC3LZ
zDeOLb2E3Kl<BKrco^eKs88Mg7<Hh-8+jZN#pSE_s^)~+0&DDWHopLuoU*9&j2sMfP
z6vNfjd1sID)&1?q&OYfgJ_|o<$5;~}o&gqba7>{J85VfOJS#8W^4;q)j*!HcuZUQ%
zuW$1%zA==f|IGzPR{0W>Vr8y(KM15{H_X7F{s&_x(@wZBo9tS~OJ+L6Kmb_heR@Iw
z0h2PGBr)Dv>9J^;cqIFd{$|20dq-^JVxLzD10Y&Eb`3eg^fEN63G@&Y$7!T$;2uNt
zjLxSG;OlV2AGG;)xw=gj%dl=5vsIdXQE28Y;W?fWM|u6+ZXagOpZC+`^x63gLGPK=
zA%T%6t}wL>jWv?`-Au;N0t*QLnL$U{Db<7!mp6>N^C5Ep{BDyc@B{wl-qxMV=dr1q
zykX^Z9wNnnjFRaSsY?dh;5S&Cu0sKsbw|87u)F8IfM+X${>()3+CxQ)(aoMAw_A;_
zf9weuyNb=K<)OwY_iez-K%6s2yT?~M?9wg#%S-&ri(AXHO;|JEK%eer%rvCbhTkc-
z-sk7cYi=l}z*CgQOMYTnYi}K<^<CWrxtu>d<_}1je|ECk3?W0XqD|QZMbtpL?ST@D
zPY5)h&sg`7z)X;u38)0n6fB{zS$Um)8x$Lay1=<dB4k|dhHpkh?anzIw{GzF+^s<L
zD6i3%a|L#U!MG*5O}Qq?@5S-s1kjv-Bf_~CUmV=wUE<rXn7DDTDp6%YIZ5jG*cM%5
zPW-i6P#DG;^1hLH$cVu!PHbQ5Ui)6JjCdPopE_R%6(tZ&8Xd;Yum!&_=lk_YReB$S
z75Aw)IxgEiNgvj}s)=pu6AesmG9{>wCIkf~CrVL6*Igaf9D$Qo?zXBy*hx{%ZKS)+
zejM3$CKv!qJ-JS|D5yZQHbEMz@zjfroraBIP7V~BVZZsPKR(8=z7Q7eHU<KN^(G+K
zYalDw+YNB}6e|w=AcX)I)Fg?Uqtv<(xj<6c=46E6lq`B@tS<B(RRnipip2&`n0Xf1
zaJ%5F{)oUwn>E2VHVg>=D+Eg%F3d8IdhpOwCYU7za$AAh23#8JXs<iK8HU=fiKrvs
zFYhK00gh1_ETKsQLfAC7rc!tcHM=w!)*h)z350jU`t_dIq%?NT*=zk$fG7?&_RqeL
z5K6<2Jcb2d(Ami7uq)j^z1LJRj?h5!CjqK#B;oJ~Dke5MiSr&F1atO$J$V<j1+|5$
z=U=m6t1F?snWyi?UHMI|a70>9JzM*29-SgsegV^^hSQ(zO=f`DO&AZ#j#+pQDby$v
z_H$Vq^&^)D7i87uDNz88agp=~+w3oJMtFwl9|@WEXxO!fG||B&)qkI_TeLx;5y6be
zU-iN{c-M?20KofVATOdmL;Sc!O$vVmO^$jaZEeHB#a^>SR`EC_k9<JXLkerNr%Exa
z10enmgh4RPDFQG*MnqpC1}qRt;56)QwT~UxhsT}+@Z*J|COMC=ff!K6|3naO=nYY6
zw0<m+7A=vk_>G&{#?pc5lk#hl^MV=0AC*mb$so&v$}KRuG^C~`aUe;GOj`0$kO#8Z
zaFgdW8f~ckl?vpa=;5x;UmL1CV;uLEk!Fv7$X?+xluk%*nTHK!V^TdQzPB5Mepybj
zVq_70{IkV_-=ejk^f*t(2wM}D6K1u-%o$q@#R;1IkEa<epiyMWEt@BWe4}xf5yp=w
zOxCE+>kxZQki<nT6~zx^rQzTY3mA)!tVL4H#1Sc`-$|M3@K{WvA?b(~njUgdnPB(O
zk~SyL>N>yk-I;<1%`Iz6L7?WuT5TjnZgMih)*Xd+_M_nh%SbXz56MCcP1>g0A5yy~
z<T4_-FN_flJYyu~t0uzdY0Y55FN=y#x-Rk2K#EKPhEefZ6Xi2Wmmud<xFhsxCuKB}
zW|1O1I#a8b#pSk%Ow?`@Ely*soT4p^N-UCj23!0KJc;v=7H!FV))?ydeb)#*Uph}`
zls+ABWM_z9GV2vl7Yxt7r`*j6d(l4t^RW{FBAQ|A139$=0-sFAPCP`ktAtb`<6MbT
zG0FnuH8EavuWAmVx-kou+O^Wpg()7D2Q`)al)|axLQ7awnP94ZP&!WricR&bZA}V>
zs30cSp)@8HLKI(>pbq1ws>Mb{CJ|${=sF?IQhE>@#fco8LCTzjtUN}+9V}3P!wz3|
zbWi-_;{th!+`r>!q2=gRnqD1}N9PC`L<-!lZx<$a<b4JBN4U5e`3+rrA0?6{IT!qI
zE0#m#VR&I*)Eg4$E6M|%13G)D5L7gEIBf~Y#ju;r*4o~;w>!i}5-UW~by|Wj<f!SK
zi<VWLh=ith)si0DfRT5X*B=H27Wx_*lP)F4I@I;W=tK8X>OU>}GCf~zlgH<*{}5{}
zG#TKuPRQ`oMBSEG<%>c#e88QjD)bhrU@BOLCRx-@6;L0;4HaILKs{UaHq1@x+<67r
ze%$rP69~FLvOo)|f!cG~Qj3*$-Ty{{XbfdhhjKl{=m%>*5zOOqzY)_4S$zge2PO^L
zd#`Oh#c-7EK#{?_c97@*WGhH?5dD{Fe-VO0D_FEB?xaCO#TXSwJ0Ze$%ugk;((?(%
zY|QcT<w{``@Ysz?fMcsJNX#w*^pW;y$9SpjLlo}=NF~(fQR1TU8M>pbO_<~};xLBw
zc~*5mV$1omc(HpJV+rkp7l!agXiX?%3G9;=hOoxsS0<y_vYij;=vp&&pJ%EDx-o>;
zXD0@+Y>0alWB;MuIU<Pyl|9(1_s7~4o@3@iT>TS9*Adbih?WIyfBN9!InO<{*HL8O
z1=;L%s=Ijh4VG#Q)O!7cU1k-wgKBLP7JOGSq%u%Ve?!_pNre`sVJT$8Mh+>JyY*PZ
zY-P3GL>jUc`@n$<6$vM#&u|cJJEbbG3B06R=wP#6)#k-@6mJseSl(4K`nOT!E?u+c
zoM}R*OovQ+vP`-}lM~&$L^YIywn#iFvZn7Qm^HGBS6dnb^!JGEhLG6pr3P@-?dK~y
zxMY>PK9|}q-a-qD9L{?;XiG)#td?q(nFsgf$K-nO+D)9hDqlz&CZ3WLyUdHevs9{e
zDSei?qAt7ry+mG#lA+SVFkT72j|Gh1SRL`q36a9i;IYR8%u%2J_cOp{q2_rexbKc<
zbE4>hi-ST#mrUN)YAX*$h+?Zxwo&eF&Qt{^y|B)om)Mq>3!3cG10}Vm&+rB^X5`he
zc9+-s<%#>~-GCLOOD4lGqXjv*qz^o9)z)z8-I{h|4o1%TM`AsWvz0d-o?%zFfNOtp
z;~=BGfru{{oQf3HU2$AA0sm84?ZnGH%O<qy3w1LK<n&yo;8dpwbFii~UZumus##im
z-*eh~4~xH9Q75;X7JCBVCVu#65jkIqWnnTNOs~3b{YwwPJ}l`KfU{zG-01N5abSIi
z@TxIO>O;2FFd;)ju%S@7E{v&H5rcKOwl&sTt>^)A?Rqq$rMXJ2udcPa2{*<?1LftG
zm)4*kiEgJr4!R!$W+dVae4nGYB88uYi8~l2Ez@rdDDZmsxYT8OKgP+=ne^s2RHh8?
zWwNfii>_oKH?F1K$1$}nmpuIi<GOBeM1&dA-H`-y5)ie4on%sZpoh<i^;t<ve@g$Z
z&$g*J8p{^SCz8iLmXPvTstVQCE$+N0c(Ikx!T)I@)J!p)<_|#W`W<;&Z8m8m!AyI;
zGiP39zdkxcwOb|J9H#{7F8vlfa@jfv3!;6Q*D_(nz?5IW>!N6!fjn;<H&t_uROMx)
z3MB3sPt0=^NzgFz309+{-oTf!l1LK-V1%8G;&cqT4jy+!?wkuWC2fZgtdk)ngzs+T
z7WOkw*b;1-g*?|XdhzM+9RNETAXO#69+z%rp7Mq0x?iih3JW}77jw1iWZuUcrs5Gd
z4=Wsk3mfCRKjWe^p>L(cB^M9mHenrWL%G{`SZxc<oNU062uF#>@EUG5;;}(j@}6)I
zh`-eghi<L9YCL4TlHhX7*Aw=(?vP;jNj_xgH_3$V9(NyX(6%<z1HvL|bv_^daseY-
zdA*VeZAYYgGS*(pqkSFOw%z*9Tljhcj{xg#ROjel;^K)uoCH5Aii~JRbgkENOUNO8
zig@sX3c&ucsw2NzsiVj{k&N2?w|E{rq+pX${X=U+E?E2S`KZEd<0WA|nsVBbAi}^-
z$dSdYLY5~@F9e6eoE=m_?yb-N*z1@2in-MrlifX=&^=4xov--BC(Lp>W&gCrO+wC_
zQMZvvd+XX>M0J3=t0o-;z-LPln#=P6R|#_KEcU?;xswiZn+|%54tiT2L`|$Q+C5Ko
z62lV!U)8R58vdXVtfbRN=>wm#m<qv81LeN=cQG}Sz(5&GB}1OftB=Ghk6cVYi#$yG
zG}3T6<e9X#g{FvD*$54TDGx(DYeoj?Hc|Y|_U+Damx8ilP<BlJqO7=P+eL-+tKi5=
z=j~WUF7S^n1kr7DJU+W*t!jXrFR?`BW#?gyu6vF#2I$k$h45@jvdTEnhEZ;Cf*ZBN
z3VMOcJK?rOhdw3Yi+lUZ%*yoM2eM9)vk0}F*-;yp7bZOBh`_+r-}4Kjihh0RfuNkG
z>T7pmYq@(|W;am;tntN?qMm`flp%@767$EB(?=EPXD)OgFqEMLrnT}z%ykd3V-G8t
zDlB`IxO!N{NKopORT@g^?`p-qBvRL+S&a{+6kP!5ktI)cfo^?~rJ0ey2<pExJQYg`
zScn|Y1qsALgyJDWjcusNRa5|J^Gb?2IzvMrZ2S@<lpL0f)@ro}CT(vy&vD9G89JoJ
zA3H26axqv>97@fKL3pKIuxx*X1EcNG4I%P!qx7H=j|j~kUlN=h{&~TU!f=UF{o$d1
zzDp^Lu_<0NKc!8}=?CLXK22#bH2E5|Z}}t}Y`tX^fw%t<Pf5t3v&mLDaCqJEsTGBD
zK^T&FEuX#22`1jK3xOTh#lWZ>`Wl-s{P>$V05f5%3WFIVV#fS-j~jg12g67qD+_@6
zGXf~g$hQ;-IP&$`uGF@KoYFwY7mXr)t=DtSo<xEdz<lBSA-i=>wutTKKzm%(2xVg@
z7bH!L?W{{IyC_MU{?l{>=4zzoim)HM6e+qUhF%mwhB>Ik1D&6S63v{?|2Z*+*-BNW
zO<j^|qo516OS5gFE0$TUiFnPm+nBluhXg)8h9fo2epD<|73!Qxv)s`5^%WWJo{4KN
zE5)9a&N%pc<>+&Dm>p)>?!c4P;$U`ej0?VNjj6YA$1qqf$bwRlq4(kv&a1LND-UIb
zPqoBn0U1^?o;H-U5i8Yl8MLv8bm%Ku>gTBDLi*>S8m8m~d%=p2dhx(=J<CjE)LASQ
z^M(4^u;Qt3w;EnpvT{Kxwvlg%@PX`Ke+a&&B;GI8*CO@ftm>)ILr_5x-<R}{)TcyN
zdYqYG6+}wpMxW-=EVKf)=y#Uh>~5KBvG%EIAdRTWm;jZpE~{(mjOKZ;Tc>~D`oz+h
zi>7(kTxRW|!?HxYh656qe9HQy<`*^A%+^)F<_h`RyCtWe0gQFXi1=AG&%XH!lV|Hm
z7|Q%#<Wb`($cHLqtuK>I%*Uyro$@u4TNx7P$EY&it}BHts&{Qr50TiOFh<XNL-5_p
z_M+P8T~70>3hrJaKunX8Qg{0LMH}Y(HSE>`Ms6PP#qqyC3l|`ZUcdgI^?E_1M_9^k
zVYNBR?}2~44<yBX)}O_(KBkXK)Hv^tSZGyo)V61g(x12zcn)khTt_ECTe;mv@mK8K
zZ({h5Yk53I^MTcKd6Mz}O1jow4d?(v2e(y`%TlQ<TCG}~*SqI7twtEkPc$v=7S-t&
zd8PcsMs^Fa{*hy){c=V%$dt4t^T<37u_!P+c=I3JnCeYLOKQB}+S@5Z<WTu2XMFoK
zayH{HmU3G(@1j}{TuG4<bG7wPsA*I3KY#}bLCSVHWVUBZ&7KG?O`6BQhCV&FA=exZ
zY<%-;g?*=t5FQ<1@@>IlcKh?Dz-891&r`T65gm#WZtz;AN7t`gZ)L!X&B4i4?ej<X
zXJ*WI89H6%)XO!|oBC9*Pod$pAd26Z`{$$Ootf&5x%IHF57$3<<LjCF?b3d1*MR#c
ztmPeB<&J$Vu5aJ%E7t0fy?W2S9oN73`VD*a#9n1!w<4?WNwxbb!4b)5Z8Q`d02(3d
zD{T-ea1<Lv>V@O&#aOgpipU^G2~kvr5=WQi9lucWH*J{XR~aeVy7BP_@vHJtU9x+I
z?V<5Q7o<i{D=J&P3$4=Oom*!)v^~4hVZu|1=#n15txCT>CNoPFQQO(%#K|(uA+xVD
zN6<m4IXdgO+lZF_<yht}{jlk^s;SRjc|b_*d9u=ySvAGl?>I<*5%ev_pI{O!&tFEs
z??JF64&L-x@4<rOd(h5AzkbXQ7iWO)WXXt&m%#e%$;wC4>uz~0>TU7Y_EsZ%ks~R;
zM!&%=0-B_L?U*z_dNTJi>41;p57K_LGAC3+6*3%9u0ZQi^zWza>}QXCwa(Enl9`!#
zx%mg{Ht)6qGQbK5zVIB$98KJ9u;X0JPm3Tp+ZU!UPw(y4(0z~%KThu4#0e1YPXZn(
z!89i{i~XC(il9&9H?m(pGA>|yZ^8yVq>>2oKflUw!kBwDhFey8Jr#rhoJZpn{zoMK
z$JesjCVXB1HZw5Aq0@r3ulEX5Dhg4l+$d8p0{ruGc&CtEPE42CYhdwb|Bmlj-hx6l
z(rh$sdmal3_ZNlF{S*d~-h{Bl7du1q_$at=?69MRigHWi0i3UCf~u=3a%W_RJA;c5
z&^{>kIrM1L!-C=#0MjOy)tfAR7I7Ba1fC<iod!DWSd2F=aMf4DjDMuX@Kp_D1!V7l
zTDSs&b?8ChX0}`XrWO5=Dn<jOgx}&t7V6C*D7{GWBk4Wc`aTktjg0gC%+ttYB@)ll
zf&^$Z*r&sSDwwn~K25yGQj$`6aB3M%#A`TanT=}pRY1oqCe~IVw54+%^;Uvti{Q$m
z5L#+@^=WvuI<|=~y-8U8IK1XAyk;NUIGEn}$1x%H8zJ@**!mpwdI67#Fu%#r1_8Dw
zA@ftnS3>N+14{6OH&AmV<e8)l2manNCLRqtvW%B1CZ#YCd??TIRDfi|k(bhJ|KL=G
z628#$Y{->(nONH#_VwOVV=TE>Q*YNr^4#d7Oj?#RWiV41aPqpUSatEhRzS(PyC1G}
zZxN`r-7XO>;==}Q6;h{dgj{aKzx?xh4OH(*jnkd;-k!7}i7vTwUuEZTS!97Zxr?NS
zSiHk*KW(j=ShAx;WdWSYBsuQrr);%?oSi$Fx09p?^^w+Tv2zrSG9}AyW8_GhL@6F$
zoanjkHhvotx||3U1?8A8jV0X1f~S;4{KpKEHk!+XHA_k|pQ}DGm2#7I)CAj-(V5Zh
z3#rV@v#nQ0F!Jph%$dxzBrz50PZ5#l0+TrsuYpqy>C8IAFN?*&s4)naY&9trU9r78
zb)LCx%et^pi<(stEnjm(^GmfVCsQr%{bvnhl_aK^Iqt;-dG`DbwsALJUYM7mHRJTV
zS67eXiI!`aQ!aj`<oGjHc3Sf`h~wwjwj70dC986xkgZiqyk<SzbL0|VS%9FgmleKR
zx0L>GAw)_4_0tRjbe_Tu45oE$atM0rMJdE^avg*q1xWuyP*S7_!kfHW<=#*qMeK(Z
z=Sptei$v%6WuG>Olaclr<Io$&b*|1U&!Fq<m~Ya_GzZgbyx{XytB;EacWA4ebd9pf
zC5m;fmlQeWbB+d@n$hCR@xn`KsSQr57LEY9qSPH{q!Q39GWBqwas<-LQFM9&$`yBl
z38p8><kv0#*WE0BA3ddk7&szBu0k5!=;6?h<u0j~n5Jm7oF|&|lr|B-+YbE-eT*8S
zOj~==5j`pc4%RpEtp%@fvy{g#1^F#LZrp2p78{CdbbxuNNPk5Lgu&lqsS`1zNqhB)
zhZ-3F3g)j_oSNNE%pdca`~NOn7`>_KP2|SUl2s_}_4STV5Hjlppj8|R_=rbt4RWYx
zM~H%s|AHG0{&utKof==IB2OH<_3Zcs5tDP7@7UeWoinfR!<f;pa6FlO1EDud*CtQr
zi6>sw5%e6At_2`y78o8)^lIVxD%0a0_W$+l?&;DXkHQK+vFF^bW)o=M#Sx_Y`L>#1
zewQkqa#!En{C<#|Ot&Vse`h@V)^GM)g%@mMv}NCE!M=6>?XYE6%YOImYUt}dZyjBY
z&NidxvYXnRzNu38bsU@ii&ozPDE=>Gm==OUcc+%FAg=($PdaA+7*Py5zHohiZ6kid
zsjp|-F`a>q^o<hoC3-grfDV>MVn<cv<}M?#1EaBoPryjBV`u1o4}=->tGsA<BE#>2
zTuv>jag4{YktjPi`!acs#Ql6)7+_QVP*S173qw(^o0U=meIn1ADzzk9C3kR%QWCwx
zDNK#JGt5fqgGl5AX~Ow&<(k0v=mNLaG=j#>rFb^e7&pR`nrPzV%-b&Fbx@8hiELuN
z@s#&PTf3t&v^~Ov;~C`*RHw&ql!PK}E2kCE9$!lhy8$E_9xIf7{;M;Iu85Lh^oa4X
zNu$8|nA$wxe)!HqCE(gwa_y-`0bP4n%-T9H_F*7|&01?(PV?eJL-A%1^t9gI64fCH
zff|U4{xJZ&f0LZJq5)mQ<fBzsoX)uH_8|#Q<<~Eq+;tbuz{6DBNDye$<XM!FtjfJW
zB&9B*P4cj90xk`a8qJlqcxOO)FG3zc%Gimih4w_9Y^6wI>O7UeQ8S6vz)PKd^b-QP
z@P`|G=e5YjBOkfua9KQNY{6zt9is)myW(1(M%!8r1VIHoPYmk#`OZkS=krgqRxrpx
z7d%o#LX~lcvS*I}$fLvIc+*z+DKOp1r>aN5!Ufyik(q^n-7A-zw4B)$+Bcf-XnN`E
z9?nQSNWwc$^zbAV+nLB2J^Z^oEwvzv^leDAVw`DFh{0XP^7-1$L|;x>k+5Kv`YX;R
zJnogB)&6s1?>g(8QpV83)i1EVRwb^K>c7pq`_g+&@#kWh!fW{g-cv?CP^$7pHPR{b
z7b256&dJDxSzwxjV2W_@d4wHEgR6I!fnP=X;zySeKDdc><kzDh*flfrzi&e(p6-CO
zP4(LuqSvD+-+5x4q|`Vq6`A0($G#EIeg7U13RHWMNEqy0fn2eA%IX<vUTUM)b;kN7
zr&jv%iBr4-yl>2zxTCwBXKDev{=ylin&6-z4YXgN1c8@nHs&hOIAY_**Qfe+3R+$+
z3|<HA^dJl5heKEaH;f*9!w><^hVJmv(~R_*0=KqF1EXL_<?LS&!8kr{<czD_msVtN
zDGI|6!EEB}iGbWhUai<MUFDa43>$PscrSw#=LAaLAFiux<wliowWJJ6;22wCjUb*Q
z#I*B&N#Lc+ghrDH!}j|WXjd=Zk_}lxI%m{j+#9?)3v$oPv0lPwSqM$QkwX`W96l@(
zUm>ZK8k&SRt~KrGPFqbC;Y{`uzG@(j*W8rtUJ_}!6w#Jr)={w)iR2F$#?peAWkQy>
zgo2o9VN4|oVb21VSHgikIbp|gK!)5E-psMF6!n>l6*w7)KussxBv!4fWQZ$0sdwnJ
z#drY4EC9uw?1(=Hp6xNft(Yb|fsaHl0nSWSmJ($mp%G5L5$dg|k}8%Iet&S2^h+Vt
z&g1gFaux0~xe8k*?sWrk$553^U*0mW9VZfMn0c-p=}uBlM}DSKt`|WYj;4AH=HELK
zZNw<g@*YMyAt*;U4-GOGlv0XIF-wcR|Dxj_u{<U(PRYw96CJTwf-`hv3dyO+OOuj!
zv`HaCLyOYzpfuDghU~bVSSCASwv0x98^J9{5Kg-a4YYTN@}_y)WD~g7mO@BTv^zR?
z>5@sxFxs?aALeiblr&X5=VCLfo=%aqy4>p_DnmlKzwhO0C0lm?%OC>3Itn#=yE^7u
zzXp{yB8Tv0F>53q?*|n9@~Q-~YViDw%XOIX;^iR~hw_A{OSgS04)>#>vlyP`@<YCQ
z+0^wZQI#V`-XbxfHwBJiaV6bb@!DCIrR~UwaG9>~-!d63hHHsV3O_{Esh44s*7^H{
z)WZe2_p>1fK8}cL8XRZa1g0mNbGJ3AXH%0@|IbTz2pIIp#ql)^t=`!wEz@p_!4r#+
zu~c#Q5!l=!RaAI&f|&hKLU(_~?}N3eybHFV--0{y6gy6RNIfSkaGbSNVpY0lk(Cz8
zOJKS;^e_6e@kFihE4)%B<;cl2IdYn4Y{~^K+aEB}yt17;<L)d{TbNbPU`BCs=<lh7
z|A2SYbv-ngYZSa_`I`WXRo_@AOzb*3N7r^SP?G>f-7ldlim^G=jcyi&K(<G1`)Eyy
z!e1U`w22IGeyejw(3Rv!BXad;vrS4-$8(c*&<ef3>o%`0Ob>|?vIjFaFqDdap9CLf
zeLNRRU625?P?Uy9*^ztIN4{iET(ulkmgVh3v~yV0;vTb~7phF$>-jsHYeJ4nfTAN_
zN*tNobNWoh<L(Y1!e7##xXt}HR2gTpvO_*fOU5y<#1lwa!o=cmDCo?3+q-par@Ayr
z5JoY<kUzNYqO&>%P0wT;mSQ4QDG}L$4H*%Tf`8;3#-~I=rV=F3d1cCGai$Y)p|Q7v
z90S1i^nb3)@%zSL{I_5>b)WRfO@75$-epNwM+Ti<N0f-n39e;Ft4#LyO2Egz#H0P+
z``~c*2HguVmhuPnsi6HM$L&<mf*2%V1;??6L_zQH*}^6RQ+4^3`0y_|D;o(-5m{(L
zJisddu(@tFm=j>$`<COWT}z6Ih5yPkT2nsG;XPvTU`p*Wr?hf>!r*7bJ%8wG@Satb
zdBj&sXWhIwgVo(ye7)ih`yXm9n|K`}i1RH9Kt?PMdMx1Pwuty0waj7o-Aei9dOT$z
z+$4h9;9&H8$wg#!(|G=C!UYO1|I?v`0Hf-Cja`3J!mJ#=NTd;^qA<S;63ICj#O|&u
zql@vqd*%7?%J=3ak))kmNT!>jo}q-yT_D-SkM0g_@!?r{T>az;^7+s1$sgYWa^JZn
z$8>DJqAxWtU$x17_FY)$t~?IJ;5hK!A4`AjoEm2t={`jCzwY#^a)>d^S@hrDE&T}5
zdS9h#os#n_Y4RtXP!qAe#`F?R*g8EqHFV__``5Usx2run!A|^^@&6u{ug}`Y{eb^Z
z9qS1}(Lvuojx3@P0D$TL#gQ30*}DCoHdY>M=S{Js{0V)=va^sB0SEy7D4X*Vl9{|q
zoJ~{DOEzjongoobdcgp008+-dhs`=~ynX->3(MoqoI0V%Ize}Nd3k<wuq|&PxK&2(
zoVS1JW_1%$jRn2pei3TeC$s2~jx=4nf$4yreFaC;QDNxlb>rG-z6FaRId#dR!$!$D
z;DDat5R9JU#(!)7n6JDBEKvJP4P|(l;CiJbiV!13NSB1h!v4dNvO~U*Y9<!86Bwk%
zxyl5{G~XCA-vLRV+@#bY?}eFS)2jO2hbT$e{Tlb0Nl_(@FTzN&Naz5%0D3n7NZ(=t
za#pI+`MW)Q?}b`M=Cc49XXBAi<X0l`0lA3nfGna(G)Kn5!`a!{%|L)74*O%)z7+Ow
z{x)Ppn_w<o0{B0G;t8DeW#*HxkR-!$!uP;>VuND88oS8mbycB8&#<V;P0;*>#F$ez
z%9G*qoE+C4D)?R_h&~I`Q#M1ezXr1+TEhAB?kEhey1z|tzuWh|`96ydMMs7QiZBa*
z3PR%2R1lK{8=)Pw5&q)`q-JIfw#87euh@<-Oj4Et-6#_0e|L`~w{Dgy;_QxzpQSGo
zC2%$ZZ$DP2uh;!szKBmDSkOMR`|Y!hob_RrC4!8>N6}>kh<qoEpa93MC!gkrQ|v@S
zm%Rvb?BLCU0q;ei&8db^hA-6;IKP1UI5hmUO?g-x%GVh#{?boEA9^vcR?ZS9$wFLv
zT8o693V%mD62z%$v)j&y5iTyddM@)7GJNy=45rFqv^7Z7{*mYuE$9l4T_}wO6=i}7
zc$ysW0Jvhs%911O6S)F;{#60*;^TME><&s(*p~ZPtaV+md%Y%n`Df(=w;2w6kKn_r
zYCGI)vyn^JJK!3<u<Id%8yt+z%fXW2Y)yQqTxa}t%V9<pDhAhO3I6-oE3y-OsQozK
z5Q3)jBp86WtSOWKdB3SFjDn&b5laqTI^CCLf_lzA4csj=;~t&=%fnI5$R7_Ygqvz5
z(ih$rrh@oTiD|-Lu~R4!h#OC0L3TXQSW|u?snbxVvyDsMtY;?&^oErK$VuoRlwUe;
z`5V*n&q^{sT%8?Von0+g@i+D3#YutZ8d<&svPiEMIXTo7CVL;|MDOmhCBV-;at4N1
zm6~+no!rJzwta+^m(l{bixW7DQ#XO!2Pa6IH}1P0Fu^4Vo@{i^mta~rt@H20#odL~
zQtwx4A8?0x$@%+L$-m%<0@{Uc*sYK}maP1O?-|ocIC}<l!C-lPb232*Y?UUI2^RQ$
zeB(H5dU*E)2}%#XI~cp~%@B}zl*rTiyk$-lE;Oh6pD}iSe|r``a`o7gy5Dvy3b%!O
z>2<&rT*RcEQNHB>gQD_8@#*B#*|Ed>rjI;)xnNceBj5~-E}KpU^jNQL5bS^iK%?;U
zC*g~h(L<94J-M9wc3t*ESd2qkTig%kd@q35^b7BCfo+kGmRewa!3J~Jv$EdTP`oWZ
z;knn4xpONVp_EV9X&%RUe3^MikQ=aXfF51JIRJDpMRHKwS>30T!)(HgYhKh)>4)$4
z*E&6n*i+M7HY?VQH5`pf%;P(N8CL_c92$n{hRJ|<Y_Ug33lI|ogGtC-Ww70Ta0T~H
z3*J-QyrPTMgP~XZUVq=^&Zt-ImFv>w_nGS{F>u@BHGti^jqobhZUS>U<I$j<)+{;g
z?#=5V&R7NcGC>gE2e>>#CI>*rI+c^N1c8k}Y^c|mU3;{>>12CjrnBqK;O`p*;KGls
z2F6jDv!xM5*4F^YL5oJSy|n%aB&TaIzEQmR9iyAUj$s}si}pziSUMCT7*s++wosaH
z2Dbt9kb>|%)|N}yL0|CO<B7;okx$Kev?)&n*&r>u6lyU>acy#)X?AKY&vg$hSq8;F
z+5JB})$4LSP)~2t*r4*X<y%Z13i0W7-2o9#|C~0TC&!nshmZMwUhf~ES-=o0eJ`FX
zEbAlyp$*Bi@V_(9F#|XPHuvd%dqzBA0@g!Af#T?RydDP0i`VD!DpP5;S=)r_6HO*a
z1{|7(3(E(K7MMOj0xzr~wjbmxO=Z76bHS^@z;UX`ghw<0ZNLUVH^76wdk*+0I<jXB
zgP62emyPd$7WgdRLpx_rC_=Hn&8s{7R&9L^cIM0_uHf>Vr?AN2-l1}gwx0;^hL_rh
z+Q#R#1STUqhnb0CuAfUzb^|D5?nQmAVN2~$iKDn{GJ?5Aziqe|MsAg;vK9(`cD-J&
zH|=g>Ir^Wi!4t@y(kudY))|*~kzvCWYa#RhRD+$EBKzHD+gb<ntP&sVgR{)<bA0kj
zB<ljy0KBmp@ES2fUNnxj83xzzU`X=cyH>F}51A*`VR;$BMp0gSRO$#UDGXp+X1yiz
z0VwGP)G;%LaQ&7M;{&{~sF2Fcj&rI5G5#_G{ZvGbs79N43}`ZTgr#NyaDM}j^<vt=
z%0@J#6F`r;&Q8pm2%LD47#2fPs+LU-RR?3rsCUQ?U_-WDX#Z`UaoJlBHHXjh^?=*s
zWXXcmk<NL6tROtIsv5{T44ZG1S#*QxS_S*IVMQ)TblD`Q6-11*|LkTCT36PSPPTvv
zlGNJm!~6YS&R+E=p6cYm!rasE=QNLHV`-i2DJxMpVLT>1Jh#D>^9)sRdvDis=2c53
z5@fDeC1ZV5g>&nGGhyFME9<1x$TX^U*<wbc#pixV5nEqdj8-j{2aGxd$M!A&XzYa|
z8t0%v1zO0l8J!_EDUe8s6wqBHA%N{xrw0X*9G+OnUOHGtK19BB#i;P;?@tzPJ9P9M
z%V>`q+cVjFAM%eID<}7T_`E%mB+MMqX+`tcV{~3pU*yi5Ow&Qp-CY3!Lp+mN<FD%^
z3)C6%j4zp(jD9?n(<U7tMNW|_V&Fd~D0!nA)gbGKnlr`$r$FXNl|HwAsZO+NZW`6w
zI5UYACtebzuZ1ih&gXD?UEsotgOeNX67)&VQh4(gg78CHG$<Q)Wp-*EI+s1na&Y+i
zv*(4iMG)*<LhOQ~!yoKi4O2^<YpOl~%hIj~wwesrQoa|4wWSEQnl9It-wIO#jkjby
zdDa=0=Q=A@2M7CpMEg}4f-pK+(Uzx_gB*dTL|$38dZj|?{%1XC@7B0M?7KQF{(!Z7
zBP-A;lTi54+!n(C&!~58an+!M<0)vK=<@hQi?H05f{qew3p4%x@7m>)n0$h4-Vs>!
zj|Dbe+ptp?aX05cFWE?MR4cjRH4K|^p@l!v%7g*)OcWc1VHak#3vMU1R5g>C>n@?M
zj8VE{B{%%J2~v5C?6$WAeX`4>$I^DV3v;BZ3&pt1PN6~FG8||Z6$c6(OCdFJ0>^5K
z#RzKYo_U<0>r6d_8$8+3lL*Z~tuZk3N=V0|NJ|Dlc)@NRa>bW}G|(kX`a7e^L_64}
zuvS%qKqjn{@ZxO*#rd5necrnfOTd-;fgC>(a0U^y3R5ITw4FmRXtN*hgqcenaAPF-
z#?m>hQQQ+6BPIpHIzdP+D@3L>tk97+CM=<;DC=$O?D%Cfj)F9rM!2CEe%%>L6fKQK
z8q-gqK4|u+sKfB`C3*JbNL0s~gF3hYFMjDh*g)7`5?0F9o=y8WTSRZ1qb{D*J?jW5
zEFlXJZ`Y9-V&Lk5G`$fY077A*;{iEG>QOlb1OQH05*mH?6-CCJ&1f;FjOu7m`AMUN
zSX1Vm(ja`p6#G#u1#lB{JuUKqa}tI6$dgMkM{4AQt_^qe92tk=OpGlzkfkL9s^HX1
zXDiUH`Ccb?LRosONx{Irg2<(UHRwtxYF!zE&ELbW2wc)Ydv&HAUmvEO?Zg=O+w2(k
z-&m9GPt}ko6{O<{4|jJaJ*t00c{c2w*$EFhK+Z>p9of1v8TR}@3Iql=7j})D1JInG
z2Y{TX(BinA^(efZEfl3}9xB&0B#2&?sDqwLQFdzw1q7q`o(hS(WPL+yO5OfQuj2i!
z<mfSUM4wayD>^C=DO45W#RO<T`#N+~5+wP}pDKrs>B&YsvnHSsm0Ki^Y@sP9%`Oz4
zmfxjKXvOVqu5ma=Ox}53_(I&s_PmY`at04-Xq{g57w8ie@&@e}_5B*{(Db~fbg%O`
zi<UOP`K2#=Pi<uZ-sRjBarLndzw4`1B1Kfk^|}dB9gvUYpbXa^7Lh$w#L#O&FhzVz
z7pNM5cQjzsLP$<xa)bgaaOfSLBAg+fpUf^hClBfKzCq>>dlJL}z(0O-qd!!Ns-V3g
zlKkHa705Hg08MVbbL2tEOuEU8Q@Xn1RWuRx(L63mS4kwlYW;x;HowR~6EJoNK8Obx
z_;iqq4Ua8>A+2y;FGLZi0=&~W1Ox(9+AYc8FOZk&bIzLflvQeq{<P)ep*h6aC`wh#
z--_JV-!SUj^O?O|u>c?sQ5g9lVZd&p6!QjSbCOjesC-LKh!`-pwAP%wyfw>EbaJ{p
z6$ec+W>w+AD{sWudxQw??0wE*&Apk!#tM)>8EHi8N^Nc+WHWhMZR>OvN`J;3*OI6<
zn@Z91&OQ~r(JDooFA6FL>oGPRjz@e!VzzZ?`@KN2sqmeZ*hI<WYz}i%)DnR7k1e->
z{M1`5-$ECZ_Nu;W)cbEI*kJn<T%deXSD&HZeAmnN(I*uJ1xS5@fdT_<79mieRRsl(
z!-s$Z3;**>T3t{;t~rDEJYq&*Q(=|BJ3p9w_|R)p`NNc2cX~j5<j(>G%>EZ3^|}Zj
zUVXvzW9ao9%yfS2UmwovA3#j+4=f`_xE_SC#ODVHoqrQnMIT!8ZA(FJ)rA|a#p&O6
zUFeOD3%k`Ix7xGKf0wDjIO9945}1>z!9D9byb_XEF9kKfWi>z;!JCLXx+iewzt!5_
zYa_L`Z)8Y9*Y-$F4OKtobw*{wBdjUcDHy+<TbxNLP~>!IK7j(Ti9b%!y??b9zM0cq
zLSJbdzf1RNOCH6S(gJkRx(eQ#8lVmEkh<#2>j>TU=b#&)HR<DZQJprzD!G^hiOaa_
z!$Yd3W}~qhr~*vw@`hAb#4^)Q9a5pQGn4<T#Q#@0J$3Nietb*|ym|MWbeMd!r#-k+
z1~XkDJ!uo+yyw^}|8NqX**bp`;Rao0mE9aAc5sl*3j#Kj<1<h|B0qQ{b`G=U5c9IS
z!7D#J@NXEyLsBM@T2%17e(b0K;h918F{;G#P@}nS$^fC_qh>F^p@wk1IV$Y%8g+fY
zS?(bz1&F^yW%4|0MLRvSc8L2EA+;hfGOT82tt#0H)Jz~$HT1^7@%yDm=lDp}#~Cxd
z`engKB9KT0+|Sdpq(hUc6NQ6YO3XV)-ux`>y|jNTUd%0^4-73B%dSD(Y%dH{IQ>}4
zWHGk<G~ZiLalcNJP!-wJ1WR|~5=J~VcQBmmH!R#|1R74CxWB&}Lhg?oWr<eoDAR*N
zu<fttj!}t29~vPPns$iq3Fbe-&yDrV_Fzx_!wLcdbUMoK&KV>FirNullU^RONNIG4
zD+2A`OF*rYA4EBDJ&I#U0=ARne^VM#?zmz5ugNNWWvM*3D|8jdq}O0Jhw!<v2Cf~^
zqc{qkhK6+@kUZc3-N66XV*pA-7{|((XF~`lhDmP$nFoq~sLfO^;SNY@921215wpGh
zEUQtIpvjk?tS=DrKR7#wSYeo;OJCczZQHhO+qP}nwr$(Sdu`jAFSDE3{FzC*H`U8d
zx~fxko)b;l)}m|xu%r`X>X8pDQd8z{bVQ3Neu0a)k?|~75+)o|b(83h!SS)ykUzow
z+YpQ(g`pQ_f<2ln%Xa0FO-S&cUe%}CbG<FIQMB#@NXz(Q?#D9N;}>V6e?;37kW=du
zl3t)Ky~UpB^r7_h0w^=HUKeaOW$!Sg!hpu0&?g$nhT?l-e&lL3eGULkC<%B3RYr#5
zRpu}Bt!}?p50$25EHWdLqT@`3I;{x&h69-eL{Z|wO)dVAm#dXmBpsgSS7y4&#;36b
z-H*^$FvizuFPuBmDHAV2+au%6BM~Fw8S9xUYyT#n0{J#20CL~x56zt`M}IhO=QRJ|
z=-2iPjarTIhka(e8;-mnU%}Xn*p~o(fZY$tX@W1+cNBf(+ys~&s_DKc76nSbhg8i&
z$sX5>WBDSt?hot_*W+Kff5^06)c09^S})47WK1Y$^c9H5FpG3-=f%~p_EXx@yC}!`
ze<jt1X`4!DBeMF27n4Jf@6jCpV!K(ip36K^i<iK3l|u$pnSRKkk8xb1U?8JTrqCFP
z{`W5W8&mB>^sdSaJIW6tE#o^t@wWXZR_<hJez7wPlha*Pd2tN+LB$7=_T{qjd~B|<
z$(l}E&1RI%=>)uZ?soz%Cwh=7%yttFl~bjdHwcPD%a!T==@WovJAnr9mjzA*%h-IF
z@pN|Ju_ZJwJQZe=AfHux=$Ud>0@=Q@sl)xzbJ1f4k9%@CVrQ~EA;VzwC_Vjs+;?f0
zI6v?20;&<Gl98haQF5FH8B>ptw75+);`T*^qpuijLh=>dI|~U4mkHfdu&h^nDpqUM
zd>qZ+(h)qbAdr>aBvJ+@m==s~!gUv8qV5SsY9!)%R*IrH!zG0nG-jaP^2f@>6Q^bu
z%8Vy2g`T%(oyl5g@KnboR9%;6omZI8?bNi>+LcDtx?i7qp7KjbRax(=NPVwQy=QT?
z#HAD1aS0mB#2Xg{b6nqfYyO>TbL?ddLwUYjRl%@N{V)?KZiF8AhaRhJwFJ5Ml6J~P
zlhdxJc!{HvN?D-r;G{!1SXx=VS|~K_1Prd!rACg@IOb9|&wR%6qqd8-#L#{@?EARe
z7p8##9ujHAa}`I_GB<Up{^oGtM===PhPbo?!@KPjopua(2IwtJO?PqC3Si?Y_36;0
zxKbN)l3LjO4r4PD)GeH~=*3-}QtIHD-a(Lk-S>!p4``W1XkFvMyh;qms0pt>zMyc)
z8+(ce;=_k7U@U~cbKt)Yg@^`-AdrEO+oVG?$pbhL$1(whGj9BZLSc8mq+R-i?X3fL
zw32T8(IoYpsR@%}{mTv1lNyMr%!y}dPZHVKD2dO~XB*SZEfaJot7P4U6*7Opb&PHy
z<EWU6bgs6(X)s7>`uaz}Y3m3tbe3uN8v{Hmf#_uJ|1jox9cOjfSnI`ZyHQYOr4e0y
zK)EiE2HJy6(W;hk3R}C0)h<SqS<F<Mh19G3p^Lbw*K4U%Wkct&Q*O6Xs%nML;-=jm
zsD9M##pM&WH<zkk6DYPERGY`j`|#W6%WBHiXrYYfJFBC8Ab+~V#TVh!J`d-$i#lBo
z<KM5rmTr!F2YB0X2pdS>H(7qr^hv&Elc}%Q;(P^*a_U>Y6iJ!Nt-y&&)H}fv^>+0D
zZ&#=Vq|xWExeN(e2_Y!pQb6&foG&h}=q4!#1*_k}GswfT^dj5X&#$#{S$u2jSvNJF
z1+3hfPYTwzX0zg2&h*y5a@M!zvu&lV@GWlI*7$BAy%)q|uf@2+KPP`r3eLnoXX-pl
zH?~*`w^6hOO}GSo*~M-?O#ID9GHPbQqq?0lZqmG=pNZ9e)MuC}-3hzHbGDN=uV|E`
zOy-Gt-!=6Tgw;BuE}d19;DL$3_SQwyBlZN=3D&e<m`z@@@=00}sW6PNaFs*qCL<4$
zHs~QDNN1}l+IqI$B$b68vDOte@Ev|tV%n^5En;|J!tjd+`R){jVOT2af-kV|>xFSF
z6?s8e829zUzU6{1s4EKr{<u-rZ9v!*4aC5|&IWB@Y&fW<#4uX>e&z%HBPXy6pnT4<
zZGrNeAkHy%0M`;v9)HWbjclxO#Qekc_hCA!7%(Gq$ZZwaWw%vM_#3rBrFC{@9AuDl
zi8~1(<A#PDzh9Nzq?+{Has~mJ#cr4hFIKHuO77L&px$5DY5lxue=lJt|9v+(dh>o@
zB-+)EASBq2ee@brXQ`tC9HyINYIV{YRdY;jZn`^#`<|X~do=e(DU6dV^^jfJIx3H9
zf^#bvnwsJO+$!Eo4pLqKrsUx<Khcll+{9uHF0c-kSgkaMPpdcf_dS>q8-ICZB&d@i
zEl-#UYonr%n>-R*4|^h#p-jyT^-4^ih-%TzL~)M$+45vQuoM8zr3=jM?=h_dpt#w7
z^Ln3_)ve3h<!ZS;aux^?ljmi$zr^eq1eL!e>Szsj97igEfM_pLE|)9Y-455DY)00Y
zBm{{j@r`2D1}%(%i;Sorl#?PO_PTg6<8KGT3_X@{MNwu_eBPDWzkXg|X>DHA3`A;n
z%iz5fE^EO;i}`X4S3Yhnj!B29Bhuo^BrqKG)RVs|ZbE~E!7TX;_xBc6K@^vhCr5xA
zFwT7;=ofAn_ubYcTOB9l7KGhQ@WQUkPt*BfewfbNzL|8!9C61(7aUtUILYK51uwev
z4kf{0rP(Mxe(zs_ReQ#wZgO)A0@X4%Ol4kUkF&!5$Pm^!B6G1&splFcaczJxWzK9?
zgWk0AZVounCK&}rfS}!RYFXH~aDtjvwgO)9*4FJ(?AKpzuD~7%!ts9vqm~01HZxuC
z%nWkEru}SX3qo8PY>v7xbwRjW9c*v<eEtmI?<>7t0p2bYO#0FCenzAQbQiJmd!F@c
zFAZI@XCH&_e1*P?jgpBpkXhXEtY^0O>Ke54!<TalCbdvV1cgCI8v^3$HpCEqvQ!N^
zxrfbkZ|f^wb;DymELxb&5daMLX+c>${WW|AQ1cV<D?S2q@u$8AH2cd=g?;bL+%WHE
z0GSFb^MxB3v)(%jF<-8l{3LF?*=>eLK8sFI7Sw-7)N0MJte8Cw8qnAP=I?qxT(Cy*
zvIBM*3h%!v8;cjcl-u-@1>#r<d?Rf#;F#Lqn=PJbTRp*g8myaRw_>Du<Po&VGQBok
zstP#=AeDYaY7R!jdSFa2a1q4}fs=@LD?-hzS>xifMxa;n-cq)-umQ;R0ib@aY}q`u
zWm{!yMWW9DxE5gqI;BnbMs=yame+8bDKTB2(qq%^G}yHIj5jSlsA;fke=n!Stj%6b
zm6<QRJlaw_#6E$n$GfiSB(6M&e`P@aEDpu)Ybv2YMiXS&z<%6g^cTbm7Q?!Ev%F3s
zoCqGADA;Ht8tznu4D_ylq{54R^4bRf(h^9%VNNo)H*oj%Mht1?jKDW~ID@t?Rbuk~
za+!Vfh8X>jJ>mefpPvg`9>)l!hybJ_nXPvqX;WKJjx8<4#+R4;Vy4*{EB@m$U30Xa
z9;P4HgmS1rv6MijQYbua{#gc=wYVXHD$pT15(;1)x=9k@r|L2F)6zzW@Ktr2{N`C{
z6@{q~NDJ2lR?(|y%mltYg-?vyf)15NrRXuWAW^n!zz-F?gN+i+D{qK7ipoMnzrD9o
z7lJ3b8~~~pe)2LOh^IlALVA|w5J5<<m_T}l<`hXxxi&hQ<`_xp0gaBKG8Tr$s`Mg@
zWwNsQ@Idk-ovLYxbQAoSy7dD&<2dAvha}}@9;ylF_=h{gj=@e)Q93aC`u(R6Uhx&|
zXx#lDx|kV)$KOKhx+L-O{0rJs!i?<_=LLq_(>fmH(rbt8c#6sMOklqC+`q%uW#7GV
zOyZMWq3M7Rk|n{c&0fbHqL4_d;l(okWdLb+M%9r$;PxDjn#gzsM{I`<AcS0l%<~4O
zO8E0hYn1XKBP|>UMNT7%klef;oUpu;gfZjDpHXa<xtZL<A@O+}$&#OQhi<Cw9ku^h
zTry@Ry+o*ynV2qEW#P>SvCC)p@W=Ebd8(ysNV0@48I(vi-iIAw_F|5QFoN0P|Iqx0
zuP^8!Na9B-Xfb!;pa2Vmhl^ExRD2FKHuhxTAW*n5mtiVmGdOln&&X1AG5iK|R{(W?
z2XQY5X-|NVM?^Z9{rWTQ{j)Ue6ap}ibHhPxiysRPqDG493q#FRne_BMh?4Qpm<y$5
zI&kDfubT(~Kh^0VLLBSrB0|KNRmJsQ)md%y+*bXu74-|JMnX?>78R0ntN3;HXf4v{
z@uTUomuuw?sl}~XgOj!fFK88>^$RX&vM)T?6B_Oh4fBWnO8e)h^Kigu{xi8JfK5P{
z!Ps}uR?i|d??m>9F@MKoB~5o=I|0byobX*C)V&P8d2t~if(;0ZOVOCCFLT<fShC3x
zR2yQ8JWC=%#%v2we2v`ibDYjUS7+QY&ev}W{<qp9#iUN_qs}+ZEfNFPJm_0OXuaGW
zVfN#(5u6KWBovV@wpiUm=!<aRYe$&9EAnH4RBVwUQ}!P8qT#6*N9$&=Bj6AwP{;s%
z44{mv_Z*co1Eud~PlPB6oSz4b$R1nv@a01`VyRKB2$ck2QoazK4&|0BuSfL(P0zbJ
z<Q9<-Fb;7*Q-kyE!;?RI062vg^$LlNcN?liFBa9}4hsQZ?&iqXoiifopXV@L)Db4?
znD?SUlvRs!m@<{{fL?8`)vzozwkG$uix)gtaWNGMFS|FG%F<c_c1eiJ<9FM|PyGWl
zdm37Ts5=cIDsjB<wchep#|8&VaHE{K$klC9%sV)@(r{wb)mAdu@p@>;rNMh|(`+XU
zY~2bWz{G*5LV!c@WbpNs_+hw}xzPy-b|$UbL8zUKE6#il;f{hn6*(bOvpkX|%sX|i
z=>jG1hkH<9=L?_Z;S#S20#+?2^W2l3q^j3H8c}`jBK28x!Q<#w2~$;G*oa`pOc`<T
zE`e!*cjGdf$VmYe!OQK|eXcuJ2p-inU07in25xu<n^b#npH`5g>JAYpw?P=;wWJ5F
zAaa_dOj)%54~MhT1d=L5vUBx*O`8X(5MC)A$v)z5iQE&k1R7BNCg?tv_ZUgx&Jo$G
z#R14`jftX%t4YC~d^|0$9?H8xw0-;<{j5alKN8Un0~<^|rCCgI*L?tLWoln^fF0J8
zX&*r?lihdU1?Ia0M_3fYL12F$;ZCd$=)ht6(|HTt6w9b7m&!$1NUL+4SuNo4Ks^h2
zNlt>3Q0DT(G_J{8{N~@gcsc*w!;CUnR~}R6bI1=Lq%0$W#iT$IJ}}Sg6uvMAB*6$$
z>!o3~v?R3P7dIk0TaW*t^IDAvjws2esJh493-a)f1CPW8l8JxVy}~DM1>@T4yV1{d
z1g!7CPhL6#KNB8qY9=Ts{1@O7c>-4uo6dx^V^KP(T*%?OOlg7wDkBPc5|Hf<ZCyoY
z^+c3@=LIV^8<r)t<hv!-MOvaA_6097uF5Ptpys?V(X@tMYbtrR2TiOMn>4@?8dM>V
z;s!{|{02hgEe2#AecBC>H&YO3a^kYuuZc@D8Sy(KdGQ=MF+#GTbCN_DS$3hHT4{oV
zB`5nal4J(qh11G50EiqwP$?h;2Y?_MfE>(yp;nJ>0}e16!-I(^%6+320>@^94TKQb
zpwWLmsf`)4`;rI%{2Rh#zq-EMEi}|Hxc>ne*`IDP_8k@J-ZHfKAsZ}@C<$V2hvrUL
zNaA6bta{3fdF_qcP_sz0%plv)J?kiYS)tcN1+y1Uegd3Q{_}UGym#RQ;y6k6pGFrV
zgY8fuyhU~B!okdOLh3ky9+ZSEhm$%-DGiCc6C^LM4?@}q&ty9pl7}97w&b}GUj&un
zYIcrUgJO2Uvinu_g;V4eh)HlhOkg(}Dn)5dn?b@;gQFnrYU{3x0EP_V7^Gx?@KCh_
zOHm^olmyPYp(KY|=+cR{*~bjkI`Xr1%@e8?=lI7M3Kr+kVjN|Ism&w$8fBX&<SfUr
z!Z?bX`k+t_e_R$5&gHHY=Za_gamUN)H3nL;zC$H-tPOE`|B;(P<)j|;>Sm05eEWuH
zOaZ1CW9BW)KzgkwiYL*+e7RcL-Y&3@++|OHX6)^Y%gwfB8t;UH&})1Kw?sK3R4~!C
z0ye}tp4)@GvgkkFSWLrhf@I7+%|PelBhO~@OP%fO2)om1A8gT&0#X5e|LCybc$uo3
z{Q(sYhNFvnGeE(RnmMI_HD-Cv;}@3;A*?H{XiB86vP5)YlIyJLT!3S(Nu^M6$;XXb
zgLN662KW;<w_syRA*dH2sv9T^GxKm_Z|>s}DxTXtaodrnvc2sUJ(gVTf%>_wK;_2>
z6s}Ao1Lj^Nk%kd3svrQ*(lsJqI5#-SfaicQG(5z9#Ole!72?A>5w1j7BJ#Rf*Fmo~
z=<8Sy`5O&>BYTH;luTvDb)QDYy$O?#sRS_s$nQ8AnGPRw7MidQ0`Im26E1~Eg}${P
zE#P@!5U~d^M*!QOL>74@U@{RvWtrpwhvA7u0GeF2%_pxoOiNo|dve3+89f%f97%D)
z`YJmIs3;dReDwTMFRu&#DOFyF*OD_|Rl$D;2f#Ufezl(S>4iCUWV!mPLkfTC@wzM+
z>r1}6kzBT;vbY{94FaXN8#qq&x4-qyPY&(+aP0s1yRQEmXFecEdS89re<SdX|EbC?
zBUC4rrz~G*l$TCfmw$%Z7ns%eP=@9w*y=E>23_xE_;_8R`4J{&U1?XM5A!TO+rnDA
zwmMy{+*Xand(?HX24(=7DJz6fWfa1wCaykx`Pq<p5_UfF(7tfm-$Hjx%KCXJJ4T%H
zxw(!?UvTb;d)b1%c41Ppoq7v&&vq!={M5zDjY;hpiW@AF{fGY}XWZyl{^0e(4XfR`
zT+>hKo~CjO@Cnn40d?4q&roB>ewE$rO3kB6w$^uQaB8hM!vM6Az;svscqb)e$ZSo`
z;SHICdCrhxz+W?2RfIL66bktQbO>2I$j8G|Q(l;1w!FwtnZg$@%}3;jJYj3w_Vpos
zvfR(_&*|O%@iA@ZGMr}3x$z^<5@;KJ@>)loU$yORuAPmYx_I25K0Ld#$r1)TNv->R
zQgj@CH#MkMisQA|s@{c@#wKb?bCNpmd;Vn3=Kh2D-kbaV+O99}|CMQrxR?RB9^W$v
z!6Ntv{C|#$g+)088{+~1h^GJljEZsmPtY-5TlH<Rwfq}>Mn=2nL9{dw5>i6#t+G;c
z;UwS#o^H@f;!Wckl{6GdFmBSHoB3Ym;zbFpKv<UTX7e2ljVCA9v%Wn~#r3>|TFw8U
zI(iMF!PH2L8}@aH_(K+m-s#CH8otiu;OV-LenOMm5n$xx^^@Hk-vZ&3oEfFb4013|
z`(MWx+$6^tWGsC}#KoOp33}ebSR^hYW`hx9B&q@LJyA8rhSDrHt}sHsxN{RLnh69l
zlQe|@WVs%YnBIJ(E_@}5QvW%L3|k(1%Q2K3Z%LEGv;`0uz~lym*j)-3gJ+3D2Y~c9
z5(d9~rsM1Na(bqwk{-~284%M;8qepJ>Ot%nAC@fGCY32RwYR$Z`r3vt1du$$GW7jB
z^lcl_h>_%a$(FU~|AW8>c=B&dFJmFN4Z;B_2K7Y$gg$$_kLqzKqJZmHR`8S@GYlM9
z;63zV!gwk>umB5wO`^*TS$~ci(`Cxy^c#za5y$k;F$gJg_`Y+$+xzu#a7k*Fo`?`i
zPDIy1Dp+_48B3uF_!qQ-$8$$6V9FB>n2li&L!t5xDM?`(va;|X&z4tf*b}jIzm!R)
zJyxuU2+;d^u(Ll)Pk!g$>gL8QM9>Kr7hjj>DESlF^)M5OE_3X;sJ#G44*-SQMb7Mg
zNeU??emRoPA}TbKe*@>%9@t^jARtSR-~>Ees(1}rdB8cG0gIkzXwS>+zUhn=3kG$M
zrZ=Q1<;7n$kByUq16UAD0h9xu$A*<%wtBbO{ZpS&G)9^G2Ipp@*tbKUHvP(7^R3^T
zZz)hXb19rTJLLy5TF%(EJ@+Ym(TJ?Wq!x@6bnOwyo-3<JCcu1l-Odggr@KfAtE523
zh372{??-(IXb>Pl2OE}LiTr1muukCa*w~2dEZ6gSFrEyY<dH6z&H#+`hGZYo1#g7J
zT@eHJL0*bzMP0xQr0A~H6bX?`=^7MrJ)@cvW7f?3noF&q&?KJ}$u5`AUQb@}c6DW2
z;LIZZrs){&^TRqBmG|B0>gVg`=eygz!NERP&%Ujl3-@uvEO3?l!$0X_y|cl=y~oAh
zf1dL*_A8WpR>J#u_|x{$(<!&*yeE0#SN#K?;_G&38IOvQxMu`%9V?2w1o)+NVSu51
z4^P{eEYogxG3OP}!;oii-X|G}4~J+`IR0dYyc*NP>$_*WlklYW)$X6$-gG7n6gepT
z6r23UFLd+++aYkqpS29SKo-|!3*JZP$NRn$UJt1c-RIVxJLC)XM)|MY0Y5O8=>xxe
zo8;b-dzjD-3r^Opbz{|R-PUdABEfgf<x=FT*3*08vhEFb*k_Bi|3>Ra4t&9ILSS2W
z?a0#HU$<b@b5}!HKhR1X445kh3~=K?zCvJf+=Br&7)65vMto(%|G|g>gU7zkb8sO)
zHo#AyDG(W+e5_>E2CIP65?PC79q(co1u2z=6m&#s{H2nS#8Se?Jg`ds3~|F60~Et&
z)5YPUfDl)QA9Pkn2?}$058vnSQ?>m?=xsr*7;s71f^1ZNj}N(xk=;Ik<*L@YXZ^A*
zAD}yca3DTKZwcd8V78Jur>5Tk-Um`^)rLg-ZqM)U)aQq1Q{!%a{<GIUclX_>d6^b{
z;K$RPI*SzfF&BA!2Qs(5y%z4z+O3Vw^1bJylk-{FgUoxt`FWUp->HQ~JR5lBH8)@r
z&CQ=zGvMu$jIetf`}8*K2gO(6wcEVN)%{{&P_cC#01|201ugglP*!#_^~jsTkC<z`
zA<!_A5N5!k>;R_5goA9we2kKjgSMBz5lAX%a|Lv`Vx>KT9Zb<&-m|HmAW%yI#rS9m
zUbkNn!xTjsCf<xdieNrEVolAxA4)d{F$=7~ACpC<T65jyt}!)8)K$0)b0(KenLIOK
z*)ts8@9j06{SF+Q|L1u+TfG8KK;v%87%;k9q7b!9dJNxf{+I>~FW~FGEbmT$1|`Uz
z^}u*=JZzrLr(vS0eU%>Sw969XRhcYlue2^6k9f$#Jh!oN&lCn=i@m{id;5;x-kaX7
z{h+IJ(u<YB11tH?hrVDTru{46hOfa5zsU`jZg``vJ8quK+8<ye+t%Lt>+nSSUUpY~
zJ2%!mcW(XX!y~4FZ&>}l$8_Ideo<+<3BC}$#((*z3_2|N8!*DShLNoH_q)1}6<ig^
z=XCyxB3J7SaOfR|OBtzr<jW<x1EbeV@Cd18nMJSoV9y#0-+Znju$aQH>&H{yhedR=
zJlh?GluUq+Z`az!7V)YbcX>!6u7?;3P9~Po$%sh=A(kM=D~{fgl6Pb-|B$L91)+@7
zYr6;{?28MA!kNa~bz$}r<5Tq<%S!={7Z}Fjp1;6>>6wpJE7U_}tWlR$13dPCbI6lW
z65tPPr5mbOF>%y#LagccCwuVXs@>j??CE#&RTMo1nMPaBLda0u-U$RGw-Zryr+%#2
zAYzRTId!M3ZU?U;l*MYM*1p@hdyiMT=vHgKjV_M`d(L8Hs<DDTOVEX(U4+^Bt!UHc
zy|^RL5K2lKxO6mj?h{=DkF{yx1O^CPbEFu9=8%8`1aHK_aMz~{WlOWLHJ0LFxaiwZ
z|EZi6TcA*hgemuf2+0t>u3%33$x+{B-KKgIfW26GI;Ms+bq1r*{Fwu;9Nx4wq|msn
zrl!feyVCx{AWVLkdhDLH`2q9;*NE(e6f-ZmZR9bB(5uYcf@b)MF2G_RT-Z^`&Tv&a
z6sKB@qN$79l*szsf^8qh!}UQOdQ^YjOL73|?5W%WGryD%UcoJs*K#9kb!T#|=76~2
zW!iy$9uq&<J4uf8_C$Ws30|TpX{@fG20&|Efub)teL-wmj6gax7SsLlpT22U2CD&8
zR{M+@7*x;5nvWfzHa}E!A_x~>R(Gq9$YYAeM1e&o_{G$KE=&#hxgMC%cva1<oS!Ky
zex#)<ju!;=F^Bqbc!^*nC1;P8`@6uL3BhH~j#ADf)~_tb@Nh*+@U3~fPuJXx-3M~b
zb(;MCrYlsKAG!zlMN9KVLyzsSX6j^84%WImd-6><^JZV@<ZF{m+aGksjD4<=e)+~a
z<*Vy0IRR%9C<-(L+CujeVD>!-p#Sn_`yFkVTP((wE8@nC?r1pjgXUoBFmg-d=1ea)
zO?Ib0a^uRF0du-3TeTCExE@?ffSA`W$nzs08j#nO1^lS{65dvgfOp<OlWK-ca{}U%
zJma)2jzWQ-o}rPbpEatzt>0I^AzV_~2o4DmQ+O>)lWK34iWE&e$q47w+coqd=pxPN
zMSmVX7crL*fu+QN#q$7B!zdHF6W@|?X&t$SDzNT&V^-M!$2(<eVSKbv4*Y!wZ2Czi
zvjyX13<jIUX|7D47a4cviCk0Q(&XW^ZBw%9EeSS7u1y~wIrrv&VL?XI+d5ukO=g01
zlgA8+l}*+g=Y(OxprO@~NOw-cL}cLLA;!R=m0?bow!S4B1pWu-@!@4sa~2tt?Lff3
zNv*LZ@>K1u%`U?!X>1=rL=vp#V4Vr~jD(}0(2PcQ$1%SAhIyD9EY7lGOk?f`rN*Tg
zYF<GMdE7ny{X7f+#*=6#r;d)E+~EjIpy67$?9_d?V9lUjZRN8i?6!%C?q?;ZFm4(r
zjDr>FO+BFeLnkD<P;cV^U?+dvv0}Q;Jda_>A~#NFBZ@K`RJp)?rKSFJB=i)Z6^eIW
z!A|-A>ZtK?%frejIIHjhalk=FXUaoC{zD^ZI=M9h5L(CRSZP!M&en}GoCIum$iaMY
zG2+<VLW=w00IcJ50})4C$smOQN_@spJFHEa&P3UC>`j)gCC6ZzC&zyW5pne7Qsc5r
z==euz_^WYH5$p%7kh=ed14K+-VG=-S*iQ{g*K7BJ@-_|o56;GV*um$Pf@pNd@#>Dc
z4^VZIxt9LHD`FU`QCMSAK8y`;OX_@6;Ch$zY5pFmErl=+#u7-RW3<p=6w*xo;KE~B
z%KNC{RhAXom1s6!#y@)50GIG23cBcPO|60He+W|A2~xXL2w(BB`z%eoN{hKU<J%3|
z^m{zq&?%F&poXLe_L_|G(RvZ_>!8m~be~haF4Jge?KYpsX~;KkEl<(f15%o5AQ>&H
zGe)SP7XAAP4AXw5;i6evR`X^{fhC?9QJ+{_{~*IpY1(B~^<ll@d$1!eq?FKb-1OYj
zBGUTjn;3OA_qCQZjdoncao=N)JJ?n#uR_{3=!WG%Z=-`pHwu8Q&}ivK=Rp$CPfzue
z{})>vT*BZb))7M@<3%DkRlP6szHl|F>2iPaqE+8qeNn8pZns>V15O4^Ek-NtO*Y8j
zjTHzSjL}bi2+4L&k}rkeJz(NECY<IK!8A#m<`7|oHfcIE#ei|ph6N!t!~s|T2N(f|
ze3_2gcNPAj17t7tJ81V7Wid4ug(YlWDzvDm7Raf^co)lfmwJQROVcuse5g^Uf2^sf
zi)Qp}g`Q+Lo!C?wvg$<QE9SD@BqzJfTgG@?_B_wXp2PRMpu(M2L9N358fM&R&2O)D
z8>>5;Wp!<ZhBs2hK2;Ivk5<2H@?!(GX=IVjE{C6pFyP%QyVGCuxqmS`csn~dH#_(`
z8|dq7u!EDq4*ru}w}J1=Fg}2L0yxAwAJE~B^Ld`4fe3UEFrp?G@qNgs(oWDZriQ^P
zSc5wb9h2Jwz(H|CnW4Pfp5k?%Ln4hG<<RX!oSptShcN-(L5b50G2smXau%sLtC{PU
z*UZ(GlRCSBs;ss-PW6@uONCi|ZJhoI(L9<}F{kf{MBSCg<0FJo7FF%3_;`<&AG*Sg
zL;Bu`D&YpI#3rWvAB?P>s2_#zI-)NPYKLmUoZUJJ+m(4c-y47Hco`>&`X`1O#=nt8
zJ-XXONv`fo)FN&~_-dD$u=Y4G^FiQs3$d>rA(FF6e-5*6-NQX{Q8GSAow0|xx!t?5
z(LPn!c#@y`NT2ne;|5RHi0tdiWd1POd9+}QaW#{X{<%e%`Uz%Jd7P4m>J;-(gSA|J
zIa9+@l9&h|97qMWM`iRAi!e*8OnXa(mitHwk|&zXm9Z3K&b3wbvZM`gMXoG4D^_eP
zkBUs!b;UG8&Y_+jkMbd?Y@1NO8rxEbr#w#lhkSV=E9K!%;D;{d0qsbueKYn}$M>CJ
zYHIL(w|MomvEq=lnG>4meld9*|C(tDDXc2(q+RT)hgP20k3Q2qzC2jUk5KDZl7Wx?
zWfGu4-VE?RhTI66eJH3Q4#g(G9DXo?%P7c%dhm&(Ou-0^2LWu6AgPXbS)%z(2yHRM
z5rl-IClnccRyx>Hwq}>xAdPFlHbacho?^2%#n#nb+GM^>t0rxB<Kq12#rY<O*$Ady
z1Nir25s>tQw1q_aGD1Z`{uImCKPS-x>?RlN?&ru_jTRlUMpW6i%eN|3_7canb!gN1
z*$hoIDNQYe|GiKDS%o&)6p4c5L|ds+u#;wYqN#)^p`eE(f&ZFj;>Z<;p^SS^5dT!9
zkHd)4rL#Ut@UKk}tJM(2TYas<xRV*E4%4nrTa!9tjUADaB4_VvGcj)}kSyPDicZeB
zgH$GE+QTT3GVkF(^G|+jOOqip)S4K{#+vN5&9{_Y>|XY`-A-HP8u!dvvoDd@q9g<%
zj1xXbfk`*wVFMlE8nlmO{tLfqy+%dF@%@GlEm+SGq4a<}MyyPye}hDTFlkES4TzWf
zZq?<!%Rgu@dsbKmuU;Y+*10JpLvt$?XCt~+B>sn4z=Iq~lHons-h|p==lnpNuXlpn
z!GRAwgcsht0!`tcFF0+^E%}Ys7axFsp4u(A1c|5c-;qEMq0s0m#$h))9=zzkTQ#0v
zoKU?4II)A7mkTeyxilMqU!$XJEhtanGtPYyJz$3=TYT5;ejy~FC9c@dTwk7Qdu{9+
zK<;Y$Bf=lnMrXikE)$Vt!|P6gOcK|yesl1h&C>+iq$Nv~F}WCfv%v9J9r}5t`yVVr
z6BBv@jFFWGMY)Z5xQe33Jb>wIEj9DW=0zyTmhj@#&#J|3%Qdz&yEE@K{a1(Ra~q+`
zQEA&~?_02c_g}HL4NLVOM_`jAG0O)uJInU7C_j+fh@=<j;;!6m?fH{ya&opg{fo9J
zG`7TK?Y3-bjUbfxdk68F+dF2|Ge-=4Zik42|59dSL_<^F;$|mHd=Mmn_DqgN@d`)<
zrP}1}HtBFs=OA)i1m(e@Q)-DIRD!qT;3O3u5zv%zLS7>Usm1Jp_M{-l#|Oa_Hv(sQ
z0LWe;GC1D*P(p2(-CJ?DMi+5+L<x9uTvkY(WS(+_eDbRVy6bP%XUqJJvjXCjhb%Mf
zwN0ISL@5uhwe<KxbhI!1)Y<ZNQ{ds$h%sAjPz{yl)-to5UFIkiQ;}*5R-+*#wj&YZ
zY>2~3NR-dKV5{=}8*CH^WcQ&`8$^r!v<=6Ez8pjt!_z54<?Z~5861A^F8RHBr>-SP
zFtPjrR~&6*bXPyH!|lDqoVghFlp#qjJ${gF_Y#_j1>l0h)3u;<P!R_-@%<5`iEQT?
z2{X}1ncPQnIko#zq!%-gj6*@Cf<TyGGxMQJOezk?(MlwHirAj+9}+=}t7n0FtqbU`
zlnQA1lZF&HK#5Vyj|w-oQ;aKJ88CyXYQJ~S?(teHo>b<Um})yZuW!T^$J$dUzttKp
zwDMB@Q)9ud@Oxr{wqqAG8mio{2f=s{ub&~8_GHLqKh7~3h~|^gs;Htnw8osA^j%r#
z%`ZKWNHgJF^Bn1pF{KSfPlEH@fT%D6Y9On@+z95-NpQTDvAl@jv@XkGM27^VP9qd}
z=$UQyyYb8xVpI0>jL(96SY4w}^ffx}kh!#U+w4aCsI$=phOWr&Er^qJ$yV;4^=0$F
z`)AnhJAt%j{66l717}`W!2=q|4NA!!*iWv;nae6GLy7sVFN=23>fgE`dcfxgm&%Yq
zZQ5Jr`qzT4?@I0m;M-%6LwBD}>PM)<2a$=69oE{dWTf+C2B6t#BBk?|77%_mT(c6k
zWUDvzsHWEiT-x1}0y;AKZ*yiY{p_I`d-52$g5zB!uF#YB4J1oME1fnv*(*uc71Bj^
zY=&&CDfV2B?S#x7cC$#}z%#!dweiDNGe!lMj3t-K^w5=6zA4D*(6}~lL5t|GaV4dV
ztsgwGHmM`2j7AnvSsqYX7_eCeP+1z#*%c}y2&k+?pf9j5E4$JWnplt1dfHlwGrPKs
zPV~>F?i@fCqNO^fx+L4xBD>WhTeT(EtEH9i1+9fvpgV7?-DEOIN-IZxrquc9YXP%A
z;-*NB?Xscuc|*%pNpbWQ?|76xYD5SbC2Q3sb@J}=qKau*mEBZ5wkJLvZXoW1LvACR
z=_Q)TCLOHwJxbQmVOe^D94nj^8YdGH=&mZDkxH{cRW?{&9VJVdkiogIIE$mJBA}C;
zS_YpAuSQ6@-QqUty^eydT*%~9h_gD$xoUnZE`4f?#dEWfjGkLZiwmwBM3K+e=Yk@z
zaV1qOak>kPgW!m@fG^_ELE=J!MgVR@QQPFVa&^#DVyzYHfDqzS5!i^=TH4M|VvQ?&
zgcQ9V6oTiG{ty7|D&$CDxI=NnVHP?Ccgd%aE_pyhs-R5=@{+}ssbzU(5<p&ge3-{~
zhxuRs#Z)6$OJ==JHOR*F<MhApXe3g|nI$?zk0zTK!m()4<H;yYIifS<!m}>Rmo{#n
z^+69A<EX!NAbNyNz-b`lIBQGW@}Q>uPrXgPI-Jf1od}%z^B?$DzY7P;`gx}2RhgKK
z0A8BUpH;-<F(Xr@2bnvE(f7E6+R><08r;2|e3Qd?vMK7s8i9$f``ZSj9n-dUiCscE
zp4uSV>G8<43Dp=C75Nv&oytn#Cr2OL&okj0nwO~NCF#f#H@!sU%ay9Gt)okf&7O%R
zWRJhS-PUI|JK%%nN9vUwoSsNnZTs@*f^<A5>V_R4UlQ3Iky|iVoMAV1Cx73`gL~2>
zuTeSU8u-Y-#e^iYiOd6bVkAdFGc3BA+kd5ctJ_`oVq0rS1R-J;l9=4)LIg|g2RnhI
z7yt$<QheBGf)XjqM0x4rhk-=2x@`G5V`fJzY}nHw?<*=ut7c}w0_5(bpH+pdc2ft-
z3x=nH*XlgwhhBS!Dw}LdY2s9nXhz7hT9Tx4l>QgPZC?EGLhl=AyrIOKV`RygqCQSX
zSGd}uV6Xn)1B(dA%?1}mcNmtuppiVM&n^M@*RI$_@~=}h9x=t_$LS)xIT4B2AGv38
zn|Voj5)5P@F}8@lg#A+C?~NEAphl1ZN%crwdZR1Yo!la-R=9Z;L@DiS(JCijDXFkQ
zgX@5))h8ZBX$n{BloqO=tYDD-3fjKeE6u$bvg?^I%;oI-KL2Umx2}47#q{f%h&#*P
z`*L<S<=o0In2LqzCYmB^MSk^Jp<Q@0<?v5uFA*3qk2RA8zcUibI0+>_68fPhpmZl{
z5T;L4mITZ*K#c+-{cn@oYLWPg+w<-PMO99H6Use5!LfTfX%aT%6s1oxGI5v_m(9jU
zn2t5mK|cH+@!7<M-=@cXGz^`wre3$Z#z9x_%dof0DGEra&((r^;@%OBqgXWN<(_5j
zF|a(DZ;iQ3=iCxFyaso>$S4d&(WYFvbl3V18;7fc<eO_M%f{NB1jhmGr?cvEoGxJ?
zfKP8d3e}}`dtGO2@tf7XgyxyL=(@;=Y&MLpSW;!+>`;qYnrYcWH<T!~fs)=p4QSGL
z+<leYSxwqwuuK5p1&-hX#cGWTip_y?mh5mQQg?=8Ra2pGYsfK*fX_VuaN!G%+JU&V
z*aBbX=Y6%1ZVxEkYZ7@boD#;sdz|1Orgl;a?$An(1CpVuj|)&^#O=EaPA=`5^v<RM
zxjnUi2C{>rQOZe#jRgO8&P4y-9h*M2gAd=|7CvP#wcsNS+q?bbya3YkP>7)+v_Kwh
z#E5|VA#}-yB5rHIha;+A&W0h@(8N;%n86+jVk$h&+kXx{>O1sFOj3|882jI;mzMn!
z8M_94({`CL4Hu9xrOAr{W6D>NxFR*LfpsE>P$lX@cBPz3q0}ilCt{UDsg*m3CQ}#3
zlXWhgM}yy|9tk2zs@>&CHG5Ur_Ctl0d{X%Sd-j9Y_GpTP(H#+Tg<T><e(Vr&Q(}CB
zi;N%maz|gvsU@Ej`Aj6UaJw^&*HW}NXKNg_!^`Lw<O^!qT#KZ$OOes7VRQFw49^(k
z3f5rRiVX`K2YuLJM4w?MkRdOHo^X~}io6^X@*0+{6gzV;9E_?Egym*Xj7B1jLou8W
zGlgV07%?bUR1|<ivvgDSgJ+oo);FIi#_r`1jc#q&P|Udy!Tbg7DijSH&;<!95Ks);
z|L9C}LUOH0)=I^Ueh48^qQe4W{0_VW;?w}lLU{z=3*y(8!!MU%QWf&s<f%4=FQnTo
zB>Z`-PKZi&Xgwh;YpoCWXK=xzb^N~^II3a7n@<lMUWXho1hvfmBKO0Oh?~azw9efD
zJjF36kV)@#S6SMH-Zr#o%KuY1x8{M4bn{11GIL4GJI1LvgS6rp(u%80Bd$A<wBlIO
zijNuPXy0)z5p@KNE1N80F&bj&2ol#dAgZrKP}_~9vK&fbJDLU$AW}ZfD?dAKP_oSA
z6dI}_W0~=8%eae0=siI!a(#@Bjv*RlSN4}eEE>`Fd@KXWhJ6}{D7Tjdn;@IH(UZYw
zlTw`y8meo!o33l^;BxJ0FMp}ELyLAd1=rc3N4lBf>+R5?-Avi_b?FjqVI~T=4y&-y
zfJ3jsW{Y@0hCmq8W=*hcWq=W3xSiW77c5%Biacsv(>L6w8DWZzG?0?jB!BRhi`mp_
z?gyoEGK`K)cy1ClF~G!J!%}0E%TN3K2S~ZAMQaXsz1unY*2PcgfPa3Lw`c9?x%hcF
zJDFXb44=+6{B>n|iVr@}=bQzgO<O6#(SNh7jxTBN#@uOnIGgAHeV#sx-}UCtPrki#
z^5^<8e>pk-zZ|5bi^vyXIRF3#836%U{-4Mn&JKo7#%`SdQ$tth&wZ<-=@0W4Dm6h}
zA|}|j?|Hh+ec9gKna$Q&%4@H4+l+Gz!ok{RjSaG;{>|Q>If-U^ER1B<)BY__8k=Fs
zf+SXq89z4U6)&OqKNqQ3oxg}rbrV71`Yv%jkZ9L)IdewFZLxMxdtN8T;^Up5&)`8!
zPWa&YmB`6SraVx?l4Rt0;=4uxk=^BpFm;z2^|yfK%qs={BIBm#aTb!sp^+oalE6q-
zK@IE6kZ)#<q|RP4KZImckw94<XJRHtUa9k`!sv_+KF6SsA!pmY!sD%2^O*L1A`gx>
z`5;9b;6~WvXjX?Ha}txDIXV3vFK&<2645~>5Hn-;C}H=Om>qzq@R7K}4VpOg#pL4R
zt1D~X063Ava`1!ah;&XQ-$nC>f7NP%zwdZ@1E>AM>~WRyV%AQF@$1Jt_iL}|`%&K}
z^k|0n%}XifCP*eAFr(-`IWBA-PX;|9a@~nyW`nG~MTKHx(%aHtM3}`UJ~sX_RrkO7
zXXtmoevf7e3!)}6fhO0V%0Nh6dH*GN)(Gv0t<X<BVP&#u1TAEsc*al|dLqP9nFLU$
zZ}hAAMC3YjM~2q3#Y8`QB@nTCy&U+xJUBW(=I&k*1d6)BkI64|_4v-ZzOrHm%W&(m
zXPyh(8K8A=Oj8Vz>BWDsL@V(daOEswiZysIVZCq>>MrQV7oS4T1;Z|gU4Av)ZOBb<
z!nkXT#Kq;w%5}aAzTskskYpox+tC|hKf#ZJOCURvT7I_T4E$p$8fMnVV<b)Wb!!!)
zf)iw#0G;|2*(?<g46^4rpE<;uAPbL);+o*psZevd#6HkzjF!DB+*~}EJ%C{NJsd5W
zB@-7HmM04g|8=K*C-yDTbEQu1ACA=8w|B{7hxO`B_mNddv)CbcxLu0LlFz-j^O;bC
zCSkcQK5u<E#dU+(>Nl8M*kS54q79dpCP!R#Jk(a;N`ah%KId%g!u4I8z&>%zB5xAn
z@2k=2!O2OS%KOAJ4573Wxy7=9F4371&yUrm&?)#W<}gOg#*Y_lgz-;TUWturSJ*CA
zt#CzJ0W5KY8PMgcE5=P69v*kXp=)1dOxE&%a*<;y{l1swhY#*8UFTnL?IDZRqS4&W
zVGiue=B*59$6O9S4dQltIXJOZu!5tL(fi@@^YdW->lI(Uk=yG9zW;+%Pz$Rusb|Jf
zdr6QR)LLw4;%9B`od|^EY?f(CB|8!^L1nBP2zaQaa4jL}q3x9m<yU#D7>98r3=iA9
zeTI)6H){?M3`2PzfRL+F<pt^nX{uj&&Zs-gYBTrN+qdv`5yf2xht>ftRDHX>81>15
z55`BnqzU7bIHRWWusM=(aG3IV#WDxbr7bXJ@EkmrS~^$}Q)cVA4Tf9aK7Q9X@mpDd
z=kw$Ge7<P<cyNF9)Zq7$x-@3zslyhcrjyId?_ILuM^)9TRtaK|R{H}h?Z5g|WaLeV
z*ImemWT#)SQ0t0#mz1sM2S5dRgN(vmri4AfmVvP1ZXT1b88VlBtksH)qub^6|EheT
z<g#c{$KS3Uce8f#+*o;py#G;tvS^GkJ2vNrX~ooKy);Yq$C@psgw0dySI4Cf;L-$@
zUqpr*I7gqtF(;SUZuYgyxc_>Axz_k*AnKh9T;y)}JO@oWOAB0c6~V>!R^1C0OGp@-
zMmVi77ia8j;zh5$&8S;&Y*r(R0Kj|Y(Fo!NJd)~UjB%lpUSP#uS=FBtHxNqs#&RSt
z8MO9vs9`DUWNdz^M33o_Doc+}AQI3FqEdCWSYN4k*^2jGWhx?ntG$C^;*`0_ERQ;M
zV*#G_jzi7w=l1nx<njFZe7>PxaY@MZK4D^E&>9yAg$s<#^EIbJ3Gx^W>vBe);iSO#
zfCtti>!I;*-4B&4TUGp1IKv97)AlX1<sT=8zcy<TU|2LDURleq5v)NisqG%WDR+G<
z*8|^$hu5rxB1(q**aV&iGRe7RUh*|_$w%&jQkO4T#?n|H|1{tC)o_pJN}tbT4fyga
z_q?yz{H}ksViMHbJCKJlmmQz;6WXR-<^!+W^QhomIeiWC2@Wg9&QH+tZrx*3XP6G#
z^YoQ1Rk%rx=jj`Esqp)Ht>w}WCJTkGwHw~ESmXgSi{0we#$Rg@(_Wt?O93m&w;f0H
z)Js}N_l))Ww|3bG=uh^odA}amPxt+@U%$s=cb_Dv)U<75)%s&u9(K2*HDq=y#2tWo
zKK$Rk3?S5)YVHzAr?Hw;IxvE49~h!<0HXx@BtNuSfjSfE(OX=kEW8FG5-HyU->%b|
zcv-KPT)I|$ZhpPVQ^7}kc&{@c5+^zrDKHHOC4^P-b=cV7fIF|hR&}AjFH3o^p3+Mb
zKX%5>BR?qRi8m!k6p)4(hhnlZ-d`Xqt^uT~{|d?zjsIv>nlh9H$+4n_44a&6{3(Nd
z1IKs>)B(BYq?+QuoCV^u=k??Iad^MI-kI##`un(42I>NMSC(KUY|*rt1cejb7hRL@
zOI}lJZN{T%Ne7}}k*HAnHB?~9Q^9e3MESi}Xf=)>P5CXXJ6vmxL70oCn!|@<zCM+X
zSDW)t8QeY4MhzyTUSwFrwy|q|!Wf`fY6zt)*Oe59Cgp?-evg|{c9JZ$%vdoF=AJ-C
zx#a_;!fw$mrO=SCw2X%u$!a+>S6Z!tqxvAeZV@m}gVKBJ61|c5w{P4DS3rKaWlB}$
zNSK<2BE|kf*i$Uh9!h1TL{d-g(bai6s3Owc>5ZhVbm`h8QIWH4l7ncyMYe!77y-Bk
zMNH=tQT-LskpqS{qLOypp><d?LH983Q?)UHiL{m^g7MUuV<Z3}CIYBq`TRsp&ucKX
z$mFi<MwDb}WHYTXeCVct)x8E{DS`~V{*q#Xmw*l9Z7(2km$5eK3>2jctR{+yHEacT
zt<_MC7vBR`<3(A6fZ-E@16#1YbATs2F@c3kNg5*!2;F4ygphs-<9QfM6h#USP;9%8
ziCN;4n@0eTCdr}=0;N?WdWka9AkmaV2<zwg4*=;{aea6sQBsCXei+$+AZTI4q{BfE
zCO|{~XMtLdIGR>${xg0tKop@q0i@=Z=+_CTU$UECL1WR!Ugra{%4ee=6xNL@Ku{ci
zBVG4O8w^Y%XzEPW4f{m;OoihO2@?jY43UU-u0!-sx}SgO&g^rCfpJg?$tz<)5?Q8(
z`IZVY##~;~K;~=Vw6wj7K_lXx!OpnYrc4BUgOV1JX=bhzU0f0{q_`%4P+2C?XbMHT
zM1!f6Sc!|Nlv=5asgzvFi>Z`e=~E^mV`+^>+4#~<$0+)O3eHwxEt5NUa3X9&LC{J<
z=}Cz!i)m2`nKpAn5}BK+F`LZI)QDd8dUC`sYa>0<c5MO6+s{SwXln_LBPWxr5rWA9
z@mZoSu<0`Lch`}s=*mVjAp&r0)-jEMDdQefkmPcUv!Xj{Y$&~F&QMH3ThAa~5HbeM
zEku>V$|R~>LV311L#a$?r?S_|P|cSdwJ&Skv@0iW(5_Zpnz=}iOT$Vpe>Tu%#%&(0
zm1S)#R*k7I^FVZI>bIr#AfIU}mG?0(DAveqCRUUJsWt~c#MuGF`d<v7ZpM>F3XV#Q
zzmOpxBBKFdWn=V}<s6_ggG^6MgNCi0yl%PJ*e#0Lop{WJu%X892#p1-8a@M{nD`DP
z1HifyZb*X*p!@Mm1LJZjt`L*y0T~Tf5y&i{J6_u#sZcyJBz(lIDt3UO?jjJ)G&W<A
z2J;VaFf4{UwIxvVImXFoQYA&kXgXZ{Dgv#z&DIl$hLIvnRXin_DwVf}PR~N$Wdk1b
zeQj+|Bg{t_Dcppt{_BJx6E6w1#|66wGHJtt_PzKZ#L*HAS3z@#m;g1L+HnTU%-&Dh
zqRITdM}t+ZfdvKr?-fD|m=%28KChIw*R+~I_e10~p)b{El)Xk#sv8ge#J}t%Wrr?|
z>Tx@uIgL+a981ige&H|e`!30^L^|K;cK&Sb=QMFJhTdl8x|4%8*$kP}7+bTohFlF{
zmg;*)4;-ePgk~QLf)QroYXHItY*ilCXBdtMd#k+6$!YA9x}o0bPIt~XSnN$X8<OJ7
z$+0q3&CIGA89nmkboK+^QcPbxLH}k<+fqzhxfcnR;v$T-mL<Eg|CV5{jGoa4^^j3H
z8)j8xu&6bj2#`e3m0lbZ9?{-?S^`Y5^fsM0#r7_jT{W!uCpIg=jVS+ev|m~Hjf~#h
z4}*L#<02TD<>E~4$aUkUkCq@a(g*}{(hrf@jP*ILRfzL6^`BZ!M8}~#7z!g@k(KJw
zF$&Q^QUD<d?9Z$)gOvKd4S^~p4FQ_<4{bp?4Ltzzl{Fz=Y6=h^BPL3aiX>$NQnD<e
z(|-X@#!S>9O-V`xq-0aVvHt?hl?LBw1L&$xU%Ufb-9XFThjZOUQ}`n>+dEUTJW7S-
zo2TS$p5eA(zTuqn?k>Y9c8vd-z1`r}T<g-1U`-%>y$AG|g|h~@1-^Hl${|(!!WcG^
zEmHYaI}-THGAbR7Y4nU8@*i)Fb;tm4Kw9{C%Ng<(q?z1f8CM5!qlwbMtP+mE4KZ|-
zDPT)*=)!Hxq4#Db(n&O!QUJ}UC#JS1Dq(jPGAz?Dr-M#y$(843E&ngZ-YL4X=-C=g
z(y?vZwmY_M+qT`YZQIr_wrwY!bZme5pYh#s$GH#Z+%anHs=XfeW9?e2YR;L!m7^o4
ze&XWHl^+)N!*S~LW{H9<Dv2rxFHq|ttg*t~ezK=DV4;CF{EUuJ%m|rl!}K!@Fcr%@
ziKCHzR^QuiKurmXzgl5-z=6%QCfH08a&80ltJ$YxK+Sc2BOGa@o(!jg4P9R>;*TaP
zVw!woWc$NmO!GPbwXzvYN_;8nOyi4qkHRvZN`Oq**IYImD|fVWWYLc3N&QL3;l3*B
z&}d8ZPlSA#O%7GC@19(i*9s_F2BYda(6xVwVSEdiSSunm(o#w^@)F1(y7U*p#eN~-
zT|T2hCA##E#vY^nqSHBsv{>}pd?|&3Dsw6?W{V<FwJKi>8H!wPTM{3-yW$c@s*MIP
ziza$;tNdSEeX4nBDFYT^Y;Q|7f$^Z;TS6~MNN190J+ZR3iG!z59>lpoZM)MgGi#9c
zv`Z<$l_xkTq_GYe7j~4FMCyu=>f+Q2Lz)U1D@dvHXzZ}W%!07wqce=l2!m_pTXL?u
zE_U(!qbFY^(lOge1KZ;QJ9;^`iD|$+Wy%&MMk)R=h;NZkejOwVWpjqcPC036nrIlb
zBe@<2b>!;jI@1C8&EhO(V$tBd7o^-Jl(X92>E$4jr&~6rj_sg(k-6Z)sWfceK9eOc
zQXmBr(@cbUnPu_FOnRSGZxdrU^02Ty;2)0{WIxgxP(GR{+1?sB!xfZtyc6T^iFr_}
z@E_EK$H8nEj#4$yo?!cr<eBhnjvAxf{;q%bbKbN!#`-HrB3$0Ijqf@VEF;|s0-lXz
zy3G%E@YUb-oA%w4gCYlY*Y_q^5e@glAjN(+7u{(_?sbb|=2iH8jkliT#N*1@82Xf-
z<HY(W2s`2DC^h*B;C}*MtE(n0ELA7^=C%1$qvHW!nj)H^37@%E8U71?^1K$~JI!zM
zq}jKIar149J592r*$uwe>V@%eAg|{kV~0+Y1ttq!=KZMFMYJ<5?)fP8$^Uo&Y4c9B
zsuOGkCIQ00jj6C5^4(b4%Qg~D6YECEO>fH3W)f)<MTQh|?iyOd9cjg261S968ii|0
zF@7OG{)t@TTefc>>fc);(=14k+lZbJytT+nTvD=V*(uWTspKh@M7o+BEUkaWJS_QZ
z!)|7nEM3IB6H)VTA-)2OIkKxj8&KR<RNR%c?d-V0joBLx&=XEpgG7{*6>#SHv}NqL
zf&bYAnQ%JS!|N}dr!1mz22vY$oIXBN10Z`|?Wv7&6-=5^a5;*;uDZd@fw@h+#M%Kz
zU2`fxgT6Ku6V46nhm3y;*Wym3#h{vOAGFg6sF9D#yjq#`Wv<t$Jy}z{w`6^GdW)bQ
zWJQBLIKFET{<fo4FgfPuvYhZ0YivY{)fQ`X`W-JrN`nD5K2+f*-r*FO_@6hbagj!+
zg8vF>{u2Uz!auKb)xLDQK8iIgFx=!wwJQ>Hq8T~Wq>YahQQaS*?lxa2&#%%$zR1F@
zFcA`+aD>D)cW%~P2m|Av+LIvpo-o#$kOC<w0Pv6Qh89}T@(C-WU-{INQE&m3)eP)F
zm5p<2zzXa5bGEP+6}@{3J0kj+x&^%ka!d<YUFrh(>@w-ehPkBQb?}O&0@vV*Ne7z^
z3B?n@q?(?u-Reit;@`Jcf5Ku;)j=E({YjpPxK}8K>=MmqBLe+Ix%?~~2>N|MYPp7q
za&2qP%YxVU`6qNmJG3dEfi|Ok{krJQ*Z&L>=!DJY;<0G%Gx#ZKN<xX`QgqojP(}*<
z6hFygi0DPK;{&L)u%V$;n(5Gg;KnlQ>p@|f#<HYKQ%$U>WbQRonJ*zr)fz_AY<LoF
z#SOcFjZj*30j<igaHN~HCY!2jc6+-aw(|9tsRoea9Nv&r`(1%KD80UbHgyno(%s&p
zP4ySMJ-a=chdC)BHPLuds=mPKYv7n<tzza*xNG8?1>bMnBoYJA!S>&Hw7?k3U)~d$
zqka~L%XjX?z(H~59=7A4@>{pwSxY15@H@IL{<0$WnLVhcNbP>SxDb;G;y8cN@Q#2s
z7<el)&);Bf%Dq(`TZROy`sUC3MEye;7w$!~^cf8^ARdXjpauqbNS}t{L>a4~{=|+!
zZ6o0WM>q=T>-Z1)=`9j5<uC-z!QYOsmZyGeq;T)$5qEo0!K1&OJc@bnAYsAJ%Io(>
zG<LzP-48Pm?0jvk<zY`hJmnR_D5F9p1AtS&b<pY#|80*??vGEVUF*Yv4>qY&)Ztvu
z==b2k&V>ETEvXuf?ZM0q4rJe}+dQJj?A_m2d{S;BcDgF+A2)0OuR0@$3x8>v|Ca21
z;GUId2!oAgO+fSbdOZkx0D8S^)1%bI(d$SU_D9hT^44N(#RK;fS%YA}KvH+13?y_^
zhp4S*`6$vv9GOx2ia@)GFh%dDn4}d^h}QuvB<w&GH}pbE4tfw`4gE`<ue7MT)NJdI
z9_E^`zJ+hWSQCD6qU@*+0-3C@=o-;Pp>xyXM23{Ha&g1CAy(LP*!E9y`p*5uM$70}
z{}1(Pl3UZ4+iTrPf}Bc__~nj;h*|@6<w4AV!0L5zc*l|UGg2|n8o3rzNVRnu7NQ1W
z^gOY4z66A)SRndcG%+747g*+)bCiqX5voPe*m_Cac&4_L4VM&}(XjXxyOm*vKzZuj
z0NewL4&9_Vc+q}M`?5)J32dWjtwena2Be`e%rX<+2MAcN>$8DcHx<Tp)^<;$Q%@u2
z<agQYFhrF@)FoySs2LgUaU<U7PaYL3H!UIm3-LxG4sj{k0l?l8J+&h*3~G4)9g}1n
z0-{SrO<ba>#$m6Pk;2f3TL^ut$mwF50@u14;)vfu&M#P9s7rqje$d?&g(}w`JqYid
zdduFZGpScQdD>sQ7adjI3Sq&V{8}}w@-pd<^X%VnAPD4`bR1UDFln@0b4nWs1tLS=
zX?(7E3R3H=uQ2TNsNej?Fg4K^{{3$s!<-8_gTR399XNzPU^XyAe*iPA8{(QHm}~CM
zo?OcvR@JdK<kqH9o5H?xiD@dU+V$qkq?HckZn8!)M18;C3t*TwB?N#VBwo!M%2&Lx
zh#GxJ1UDBeIEj4uAqtw=S64@7hi46WM0J5@O}E^2EDYo5vS!AbxV#|u%l+Q9p9lTy
zT#p)O+}EwnEc6&wlO=ej_%rx0vb{pGg$_fG;`a`v6)=5_Dv#BW<JQoh_zu$(yTt&^
zhv}#4%>E=pNY!TxBDwy@S47J%9CV>^^*y5b!*BGv^|^Z5_DIaH^xSWVR=smMI2j67
zbR5C-aDuF)Mw^1l)73Synp4<{l%+rtpR19o=3^IO+rt=WDn8NnvQ{Nk=73GGsB8Z0
z>Tejc<z4zzI}5Tuf|if`W7YVJuY8|c^zQQ`4d5k*`_o(Qz4kS?r4TG+-NwiGC8VGg
zs<%@csFU6Iq6tU}Rj`TqKgNRa|5_6SkU}G`ptt#5^S}4nwoe{i`-=9Nxqh%T@LJ|)
zk3n)HXi`S70~r7W*lc!MnkHnIlS==u*fvf^US)kh^5p4a5ZbyPrC!fLm(w0(!99$V
zz11GX-CodBL3L2DkAc{iQ$b;77EQTg-V+2bSs!^WbOa_?rdU4QoxYiSkv=B=>_6@n
zaKRGe3$_{rQms~lAPSA*IIUTUx;yo}pril1-ZH{S!XW}h3wL~-R1bKNJX#T1&o)C)
z7&=4A8;LJ-AWgI(ksstpL!2q354IF(0#9>19IwvQgPm)oyXKQ3Ll3*z=&*4H0r@TO
zBoV>sG9(aee;vNig=2udvgc~9OX4H$Y$UJtM$7AJ%_Xo+m(b}qjgN`+0=Bk*BiT5c
zWIdB9+S($Mla4@_H7F%PM-JLVofD#sds@*uD5ud)FygJSYJ#S<ust5za%%5C`(NeC
zwdb6nEk@}aMvJfVD|je3@TEkL?T-ICcneolvr^faQ>Jyyo^`}1+|Z(>bfuJyfXymt
zT3YGc(5B%*niKWDAL`gNw?8H9WJY4n8bKOlMXA`h^LMXm6tBZ{N!d1bskmE*>z84I
z=OQrB-)X|zV<C)=57P#}-`<etrBP5&?qxhjJlyUdqKODC(UXqu1h<Fro-@vu!~qom
z2}DWgcSn9Ba(3R!pc1y59gTT&(^8@R!K#CXz13G>)B_`|!ka61kur)81i!t1%`F|6
zwd2ny&#q6V&t|v`Sy_8zHl-~hN6)m7vn^ng@XdEOMp|G4&5cLK1=n~gpg^lM+NG}R
z$VOX=khV4VNqBayDEv@D)B2G|MA@q|I;WX`Y*EOA@UVrYu2WZDlkVxk=$JkYE#cIT
zLrw;*sOgV_R2Ew^o6@~+hH%V6Kxj?O!$B08^2j4Jq@d?P%c(cy41aYIuQe_Qb8#Wh
z_RdV6J_riDxO$K|Ba((wIZX`IalML~DP9tEMX&ocZPy&!`d92grDVj%6wQ{)$hX33
z_UxFG{L0{;)oKIc=_wpT`EjYa>om8fstVrrl=U2N$p=QuN%u58;r9l!SWeh#IZ2c7
za?54@->^^o0@qUsZTEK75vEgKv=v;xaXEOD6?ZHQwgpcGx2)ao<5_=^QjhlWruXK^
z4{>e0hNZ4`x1kZWOb?MR{hE?+hPqNf*?k5af80~#dy{+w$^`eTLX26D^HHvcDM5Yj
zwQKDEv%Z!Nub18R*5X5{TB?0l&1A<nMz_i7tn(Z)nyY;WbQc<*pwuNNHz>A9|FfBp
zoJFAU#>aZBr%~|nQx`lG4sX|_BTOGWVySFf(J%S4G^%X7erS_e*)3g<vTh?Rl|QAp
zN+SU3)tDLSEmdJM5#tCFkuR&NSO{WQswZaLA!0HZ@A;^w{Y<5rq$ogp?@~C??&8Et
z)(2HHZ$oC|q?+n#S%YOAo72ntUVcPrtK90k9*f^U?*9$*1t?P+$*q1LLsZTig!_2z
zaXVDigra)IWll(}a~CHiPmpFS3xD{$JxH3<K;-PdIq-%GoW2sLH{v=Y;IVU%=a@<6
z9mlw{k3|vZ^?bIsMQTl5#u$zkWp803=ln~P#XiUi4a%xO3TB#7`D1|#b!)~}+a@|Z
zFbp8=2WGp`tfavVn9;%^=_dQCqyKfZg^5(O2LxTN2(;y7oSaF<NBI|<%;9(!^D={s
z(_xktkRV!0vQ>{-M$gMDw#VB~-o1EX=f1H}Vj$u|HD98VrlgyBzMzuk=4z>)cJ+6G
zPj_Rngip7#PWpM1*$@dNGX)nE@X;pD=nuvC{dp1eiUGcatq6{WPzlLizS+S9!IpRL
zv@!|H3;}H1f>mKsm$;40^T!L!U9~7Iy~;`fpv}Y^y_e6+a_5suCqjLsM-7b@Sm73h
z5T4P*U&<+o4GC5r%xRm3gi!=+t5XbK>^P6DFd}Lrh>6hxtgCYbZsOPhS@!#g#6k`$
zvUtvCqC29T*a&4LgVW7}r7}}7T&Z(GgGEX;YpEdX*K%pqh6^6`LEuvTe6CgVDIyv|
zURaD*rQ&P>Q{_ML=wy>3-|!=g$gQ)$@xFjxn_Cwg_1pg5TUX(I+f}xgyZ*-7+P)T*
zO=Ny%=Vmhr6$o`Nx+Vfn7>a&~RXUPSG<Br!w{vb=7+dbYerLJVy%*EW4r~)pBvtU$
zlPzP}l+%c+<7XzsNj*qvKj{92x$bO2LMM>;xa?X;Uyphq{d&^9ow5<@LJobe?FOHI
zJM7-4pF%h6N~Bpz?SHbCGI;+DWg|czcxmr7PeB>MmWnhKL|KCEWA}TC#yMq9aj%H0
zYW`KVZ>poL>4TU7{2Ey=3EzdMFcXw%319N=y<Y-Uys>NSkZ>;4t8;9Tc#dqC{zS5_
z+=f+1D8VIIzk)b^92N>#i;&mDw~|tLSy`{Hx9nuzD2IJz-UvBCj96B<1xmuTb~Hx%
zsE8oeilV@_Q@pKR0F0zBuuPFTT_<o9{RD1>Xt#Y7OC-UJq`ci>9JF)7!9k9(efy~I
z-ufaXoC`sCdIe&~0x>dk?$?8aw?ErLr02YUG%)`1##VxC@#M+=hsSxXBXdU1>0XYS
z3?WlBHh0DeON0en<t@Ui4ScWx{94sMXNmov#bB1RfnKy8`u7b!>Dp2hSThcKvsKQw
zaH1>*mzjRa*!RZET3?#(_qkIjTG-#dyQMxok?*REZouRHEH}pBI8M|&u_iyNn@l*c
z`F{-rZy1LAsJ<=_cKOyliFvLoW)L-8xUqCmz6k0o_Ft^zTH!gSGfLOWmbcnTW!GIx
z_3Z%&)i70MvKA@qG3$>G=<n6J?_O|ixf~80j>;$B?kUrlPAT0_l}=0rb(s@C2zbIT
zqhTY$$_QX0BXz}JHcPcqa2ln#As7R?@LgvPB|tCWz1_i{pNJ5Bai_lr0?)~X4`PC`
z5?+c6Un$7W=Aw&>6mh^HCdRD_w!1^(mW8^U1H)77KW;&{zJ`pK(9sIusD(C_L)gn4
zT1!{Z+qnp~U-!3EjPTUbn^mzTVBP8#Il0@(B+4m^&?(ANr}&HuQwiIJWcA~#|AFkT
zB>#Y^B@x+G1Pzhu-@HHGV82>b+daFgKp5U^4vdDaquhAFY}aGYFwiekp+6eQ*miW1
z3*<43dd_2p6~213MDjOYnQx(%zR6!L!x+|YoBAb2Eb*yWcnwBSs&+Ve*BEhI=|&dB
zSG%c8JZkHWZPIf7u&~b{Dh-&&f7~1Avd%h>flt8qm*Ru{-WDV5=OPa4CxzgJIdkEB
zabE~`4!spt<ik4&_UVPO6k9c@0x(aP#pd=fK7QRa!X*f>j4{30jfqgGz1(iQI`MV9
z#kS-=bhxwQ59~%j)KkE(_4oTUc`n#C@j%)VG*i9zt(t|?Twakg7|JyfY3EA)+_{g2
zS-_`L#v??Px*U&Wm)OW2w6m#oYUl8XI1?R*Rqmju$&5QZkS;mi^CH4R+VLS5DN{p+
zZ{J3RdA1@I;U!!?CDTq}DHo(C{hgS=Ll!Oe{F4c5uJlOXG#^jt#Juvmq>DNt{h-4r
z_hWtp$UABR7DIL1^LMFk1k_*GNySJmY9{P!tUnO)vcrj8Rv^f7OPK1c$A^~{il&Q8
zU=>DzAf>FZLPfl)h|-Tr<sGQl;0mbt6<iY7;Sg+lM7bEeI-E%_J4tqe5fDaGOF%l<
z@?wgAP&Q(MEvYJpfd862)R)hrp#?2bCX^>)li}6M#DsPP_K8>}yPPQ{zz9JYX^m9o
zi(v@rr(yS~oSul>Nd?$SgQ^T94;Uz$-A4tG{Q#S|^MNHupEjL{=|#sQqEJeMii`by
zG$EVsxQ<Whh|n7Q;&lp_Sm=MnUcdw%&Ju%ZO_ke4r9l2tS!PRgkpS0VP!8`HUCEXH
zQ4S7~u&E6+hL=Oz;R%hQ`Guh^<WAHLdOKxs0)Leu6sKHUKTM@Qwx3KRGq)PT#|Nbk
z9v2E$91DPeq?Y{?>nc|cWhqxdQP-)olcG_r+(0wU^@o{5&QtxI2r;;gy0!!>`8Q+c
z<-P`$Q`z`S7l@um_Y{mVh0jt6)~c^kYUr`+qBJPwWM$X|`j#j2h{irO;?0_A_bZRv
zGiFcT)Su!miIeN~Q1U#$XE<CxG(F+;CM}n#drV%Zc~@5gObD*B674&@;MvVqH7=Hn
z*U&e1dd`*nLD``H+KT?~Yj@#o0tLBfiKPfNVMSO-a%`pL_)Iuaru-y}^vbY`bp_P>
z=Ve$l8UHbskOY>CXkzHgTMNVQK?ThOitDhnYvhtB)6h`0q*^xQ&@3HR8g4RQ(SkEl
z$0N=(r1iwk11@CiE@o-6Q@=26W?%-52dN!kg0+#h@rF(_BXT59WdeD#YbMovg*hSg
ze(N4B1?<L|w;Chw4vhgU8W-!{S^Dr`@+1`cjC2QRk5O*<9R!%E8;%L0_tk8ot(zdY
ze#ECk6E{1ZYKFQ-ESedl$pUKu`E<sp*VJ`5?~iLPgT4%+`D`Ga`(fC8hCC60a0=rH
zsxzES5bFAoYPN@^d_mukC9iu5%uLvPwk4$xM*dU7z~0cS5d>08P~<hV<~aa@LMM$g
zr%>Ew@r?WmLG~#|+I9Y@TqB}DR|0|<!r8;=xOhQ5P<no0ux!Y*i8ru0)8}ZrZ0iln
zdwY)s17Q{E?pGX37~8;J{Pd$#S~gf#+ec{>66uX8MlTg10O7%cV&Cf%p!wG%wR_g=
zJIpkQmYY93Cszh+hk@(6^`%0<zbV}QtFiYZaQ2+wK%9`jJR36=BowxB9;hR}Uly>V
z#T-)}?9Y#uZQ8xheA)C=YK<L$6X5xQq2d6TamyHNLzdWrqMbKsKhGSMKa;Q@R{Vs;
zG;Plrgw0vj@AlXb76NTeG+CJ4=FT19O=~}uOFvY)ugJCRf=HsF(=zJvWnDkF(DrGP
zp(6*1Mv)NO^ak=o(2kqK;d0bnn?Gx~KuRDnud4`Ky$CCs6zK==a&B<`C))YA#ar8^
zxemX6P{z*FTvm4TS-tf6x-EZq)I@Mh#``nvgXaC!#^9%Ughe`{D#;*WkxvM^{%FKG
zBSzUB#aZx~4NN5B_It1ZIq(7#-qpBnUqQ9&fLB1xn6KSLejFUd;N+goqs~Has-2hP
z^bTo5Uc%iNi%7q>xT@}Wyyl*PWK$D@KiQgvx^ilRc6)~M>+&pBPXA2eqh&5ZLq2fB
z)?Mv@V0Z)XU&=u}Dus+)6TD17+?L(-%U9$^+It&=cN@dA-4Ah^erX%S-%Dwy_eN(J
zBP!fn1`G#3kWAW;P^FWKFye$69!uuG3A+62{4?|#rb$IO&_o~9(1l|TQ|#JENn<CM
zjd=7{(gkbyYIyfhTh^NT@tUJtRbY}>)#`iiz~fDiL}?k-ak@^eEX5LkuFdhDOUb+(
zYn`Mfdqi;FH^{t7y4AI=N;cQTa{!WQoi<n~D--zqx=NX~;`7E#rp9<8jw-#-N?Kr%
z*=9N@CU#qyY@KsG*oVRL7tn2%d>XSiK>11)Ezp!aR^gzGJWd$HN?28B6HM34kGZAi
z0TSxy`Y-kw+cZ_Ffu~;MxRa62R~983xqrT1tnJL?ZO!V8Qc~5y^iQZPpJ!STDnfHr
zj8Ri~@NeTAm@xc{>{!6vsC?7=YaXgW1wL1Y$v@}-bS$*+W@yjc$o{?qlYUTY;2ay{
za^Z{sLj}Q`YRw8T-DHK8IO+;pd1Zr^r4{8yQ3UKdN*Bwa4Gc!`xpw=6G9}&M>v)<r
zAh+J&j{#8dsW<4?3Y;|~PPbWj$S1d4jCBVUufvavG2cfri^gbBT{?mt$0`{zZE8+I
z!$zPwnJ??anjS((rr(q4R`+jJf0HFCt{dk=XEhyWIn=Ej&=^)X8LUNOaGGhp1%$K4
z^7gz3NDrwZoMm&^_T2LYY%DJ!-&c;1UD+{|-W=c|7CFY>d2wcC!3fVr+q10gJUIdQ
zXo!7|j2S;o)vBPFq&i1w;?0ixeXfAS3%$8dO2cpgcjBP3#^3V0rhBTaT*iypv5mk_
z^jwPTU+sq<i4B1Wo`0mX<wI6CES$J->qQUm=U>@(b;k*2Y4RnKtj&pB9YONGUOaJM
zSVu8()@IUj5P#G0r*p7tc#l4mN*9@FZC4LSRN?HDMXq$Gsb*T#jF_U-X!>4bO<wch
zd2mY5kmrQ<t-h$Es~;oycj|oIcmXsA{g!?!jM22-dr8+>hkd}74DWo-OIqYtJ5`gV
zcW}`~To1U5aQQ$ANmlGrDIUCUfz$r&Dx$>QOqIa#fO<Y+z?9DjO5JeUQD>5$5j?WK
zk)Wi;H9PU(H{C)^!<rZCI8D+7>J`gC@=+<FR|I1;GYcUufk<6cC=f+d6iiMh>M~G}
z@%wj2r4OUsur%y8)oO)i#CyeKG9x)OJ=M&oORZlMetsO4&~BZ8rLG#bGS%#>Yh`wM
zO4V+FQxVr9evr@X69l`KK8*`x<>4p>o<O3ilC9?sVfiri3w|g2CG&oZ<f_sW;`~z3
z%N%$&BuGEdC&%KMb}uDA!@pwlQM3PDFc0*Y-}M8Aw@1Vd&6VFHbIy*cBfpeR{$?ju
z^++ildgmg!!=*InncI}UrDCtA1#*V05_zJ1NJ$7O4OGXaE>{>c(mqxAAj>r2Wn{~4
z*K9Xp`h*vfbj6biH)d}ld~5@q6YUQ&Wy-EwdH-rb^4}YijGT1i<a-Sdi@k)@XvNqU
z>ZB2G5WfNCn2=juAGSUPho!J4Fl@#S50BgnbP&2D^+3=&no;20!FEifC}E0iG#n?S
zY6E3bV+69#FhzaM`)f?|h~zj!P%Pz{jmy=b=)S<s_fZ?S+<t35C(6N;)-C0ER{N@#
zq_!Gjn;ne?GJ9jm?MdOeJ4n{SS4+e&r%j&rdfvjGCvrs&q|GJ`Qulg_Fsr)RqmJtu
zHq5HNoxSoe@Te3oLtm7z7E@yCQ0pVjW5*E4aU7@<zI*SIk0P6+2iDLW7-48D<M@F$
z%;Ne$vB_hsya+xUv)nc!B)J1pN}m>6gRMhV*h76$O#-K$qh%+bI&AL!NDFjuY~ZE$
z0QkdYtM01u>5iy3pQ`c$t=}tl-OPXY#G~F(cMFcOkSPE_@=?k=7jMboO779(bkrV8
zg;76_a@I*LMIk<vIo>+^?nBWS>{>78ZjUnpZzDl?UlpjqSJt@S7cKN(6%SK$=U5Bx
zMwG%NuoI-X)(S#x)V+2h{6E53M-@%pVqa}&{ony4@nyk!OBD4OWf0O-)kxy{7Nn^D
z4#%?<Ao|u=;B<}%;Ec8iV6FO?6o*SKU|vFuzW`a?)uT$rWL<k@FR%PvEymhR7Q>Vk
zby>f~Wb7UmPY$4*bPL-ZR!=SX^~|5{ITTD?uio87xfNMs`v96c#sqJz2hws0-}(w|
zN{7y^T%~kZV~whp1G-o;jzD4i6W@1W=r77GM?C{rNYw5)A&OJm-T)f_4^;ucvraxx
z0~`FMQ<-{DDA-QnpGsmnoJp9jEv*9E2s)SV1Ha^8U@bHI<lho^8EiC{lm=TnhOMsS
z26PuWr&|u!8#ObWS`pox;I$Dw5~PNheld0<obZ_BA$DvW&q!Mt^zq0G@MiX<S65=K
ztmz)2ni%kb$`7z9mi!eB;%U7f4mNe3KKxnFhM7goJ^#+IJM0PT@=C76$d_1cVtFuf
z1w^R#wPlc`CnSlj(@dX;*i90po$BwLflnAcr@bO_-lpCA7E>8vh&%@Sys?>6`E7M}
z4$-7bB68KzjVi-f?m4V8DfEhPJI{0NR0<B19}(4_63pwa(z0G_uk-)w80@{y(`4mY
zExgZH>-iop)^gumZR9_-TFd<4HkJEwFDv>gFC*zKeF~+u^UkDBC^`#2BWsNU3ad2p
zE#Od4TWl44ErXdIpGK-_6EazaH339YVdcGs5y)>gs#?T+rcuZfHoBe7kE=(Rpqyd$
zX}Z7M<{oI)qwE)@)vof_)o<|$u#;u>du16iMuX9JsS{xcEr&GF`{&AgXajON*yfbA
zrmNfWtWK*9(3TF&?z*n=eDTEvi8>Mp$3mjA$SvqjI1EtW6r*>paR`~{jPBiEx_8g?
z8=p38woip_M0LQ&5^b_*r(4IRY_h7yTF0q>+(@e=T&pZ>>!sq=!kjJN5_hdk=?Ne2
znoyOijXQV}^|>dj#s};9qJg33QWfAJi{^#R!`Q677jEYa6W{J^xIRmj@t+wRY}HBk
zk+h?p(zvH5{|TB8YWV~x&Ye>J2J7XpH8CWW4qh3qk|fuVih51`h{cz>4oPG!(r?73
zltoU+s|?Q&4ogvQBulbo4<PPv!T<@dfL_K}P<IbeAXRcCF`)Sf)uf>Ul*blA)fx2S
zh0UO$Z8`&c^-;VRxZ<}Oq3l&wIW@)hIqLQ~srEVO_PMTn8Pa(tv|fu?WqDpAM`_Lq
z=FlW5ZO#ftsbK|5iv(oPLVXm0kXWz)pE7IV?wwkF3#=JM>-Mb%9Dc=DfZuHOQ%JeY
zm=4>8?(?{=23<@MNR1GfRwVS2VCcJ93q_C_de9*_5Gqm5;alm=Atq^TkpgEd^58i2
zki!rQLmp_v{+VAS!0S{d@z+U?g)GdM)$CPVK4abtc`)zlRl(q^b~H6uyN^&??<tf$
zY5as`a7)W#R?(XN_+jo{e+6^5Mc_4W1C`pegEI8g_@yoJGP+Ztm585zJc-#zdat|O
zR49wuGd2c22UW>tR!FO)xplZUyvLM6jx~rAzli}n*3QvATk|mBkM{<x9)047O4m)l
zIwf7GoaL-KwQY!8#k1kkd-KvetL-OU3WOMx%x3+2D)mPahfVJ>^!1?k&dGws1r<Ux
zvPO_$5uNHwn!%dIB-)Kb#1%-nA3qjM5>*+u;T3UD3o{k3_HpeH%a*rOHp$|joy1uD
z2e3VhWfaMmS$t7b|HW{2pv?Y_IHL>xsM^;v`ZOaucz)<?w)vRUTzZ6OZravEIUM@0
zKU)#jHeNs?;);2<MbJNsI`5Wb(foto5?B{0k@H+IiBLw4_<64mHaUGtjjk!kz+Z)~
zj{f>`BG6Ze28wN{HtlH~wYU6(6ta%$3Vw1vzZMqvE<99G?JgYcEmf-x$U_43TEiCg
zI-ftveU8veGlCMUFw13{0T$_c9U9_(x#g#z_Z@ggQMSVk_XLvT?8eg2J=VineZ4_P
z;&<>#b3W91SpgR<kHV`E3{BUrd$@vgfW8MLT%;R2K<b^B+oHG$zwuuFmdO)dNK*6#
zPhvt?Pl!o;PD1dcl9Qi9@$#jFGdT;uvbD?@0m+2n!avT%nNM}%{r<zDLq$G%;dHOt
zT!L#aFWQg>oF~H)PcL_DWzqoobkvG&n3F79lT14N0H=nf_z~NCA>1cSpXJ-%hp~F>
zIvPq?@-T(NI@U4ETXhkZ8S3OYyy1nXkTScM_Q3C(rK<xw`UnyNNwE~R3Z+U`(W9@g
zvTqK}U;6JEa$6y;8Hd`P!1YtEYv4M$>ML<D#8r>_Wo(DfJH1f5;y`XPlx{vtWmMhe
zdS3nEzpU9t;AQ$fO3Eg&fcMyKGCx(iD_X(4I+1R2?1pTEstkEw3EANohVw3TOW5DA
zA$rW1u}FM&2;w5+48}@j72-x6b(u2g&&260VG1NQ_Ku&KN--n38W@>V_lL=vLwL!g
zYN4*;lJt}IS+)(nfA0Z)&+FCsU-E4TK|W)!6Afm>aE3ydn9$jZmHNt-`S@0v6SVwo
z@^kJbA4%^N0)t}e9fheFpsrCqDE#cSts=17c||+0<chzS&J3w5h$Xeiar+vzyl32=
zxJ)>{?DtoWm?>AohUWkevJbPGdhwK<4gG~I)`)!fTS5_xN%7!+!AxV&B-XyS7t&rs
z0+dxYK1G!X%6`~<nPvpCP2EJEBd6V6&V=~<>-LvlkYOBP_3ZnUr<so4+u|%&MOdrs
zhai6K<X;RyU<MBw1g*y~O%W%ut;4cyUyfY@S<8M<Bt3@0HP%%eU7)g0VkDMhm#(Y0
zVNW);?yOk)?9GnNCH#qM3z}oJOP%dSotUoY#zrxuQqIO8kTqd1uMdA0H~g!8vpycJ
z*mI_wA#GK<Cr{I9&DlGs*Fa8gqQsaa@4$*1u+fVyNC|#bCw;%}x8$58!m;MvkaF21
zq`xEH-NTA=k?#ST*|@Y80EJ)lhnlsby*GcXG2`J97@~Z5NB?c3u=T?(S_iiH44o`V
z-EB{97x#>r1-pk6<dPGdjI`OL#oP^g=0;{nv+#ykXUZ_)A<*Q^ths=DE_7of5S_}g
zTakb6b7nafeMIcfw#}V6rS|ye8E@43DD-F11Xr!o5@3uIe0hP$12MujTCSK|8`I?J
z#%vDX`1W><7^LgOF!7Y%czFoStj{1o{DTd(;cnuR;5^k1@ALm-2Zi%#$R3WVA$i}J
zf%`@Ow>j|yQ~<ADp5#Ns>)#=wz=9p|p~dvwpOrTgFF>DteRv}Sqe@Yvre|ghcy!wt
z;)0fS#LsvddI?o()Q3i8^J)O3&Y2|uzdy{nlB}DmnvGSIX9{`>-?x3H?564b25NDu
ziEpe4z?0qp1za9<6>U{#X8gs9d7edqlU0_MG=F1bec!z3=hgZMDuR+dzd7g{usVBj
zv^c|UT9W4x!O1RY%%8)=+%1vW6`%GlJFjWu0*^k<fpbqzn>;@Q{FfwQt8ui?<M*?j
zp%8;!{1u(d_b?1?{u-v)J+AsQ)wp;xr(f!<WHj|i(8|*JNwiwj^huUuQ>c$6j5??P
z-AP_n*|*32Y|~{8$G1<Szrnybx2IEvfd1gbSLs@S_Ezp9V0|_R{j>SethcEH0O${>
z_itVHV%e>w_8chv%ESF+U&SiN%E#)vwqrVrq#%yQ#MNe;J!Sj`K&JO!<b7Q*Pzdnp
zzx)4pCRu8_cxWe3ARq+{ARwau33_O1tZ#4ZLT{|90tNJIJE=rNPr6*g)dL0y81(EH
z5YT@;F4bl24<rzK?rE%$sh}eSN5T`HND}%vLs9@^>_r*MlMOg$DGfDOZpiEhefBMv
zh%y1dw(0-GE`FuEsXkU!s>iuCsRd%6IWnKxFsJ0}`hEEX66p8mDAgllbHzdl<9|!~
zLe;3q8Pj9WK?~QX1OsJ3Ph4Bh^$Sv`j{9IkVGCk|B?s$3p`66+>Cok(hEXho_dj!n
zW^ja4rp7~89*j|;Fq#p8y`3$Jfc)u?GnX9e9xJ=)KVpT^3!w^n(F48Bd6-)hzBj2A
z+D9<W0Aum)WO9f;WkV{%EdrB~n7L9KH+neTlRV}~VMgj>|LJ!l#9%rj659;<EKKEO
zigL$PWQSVpRI6mNwR;6y_mHJwb6SG>p4@9pg%-0YhU*;}6Ud<a(|cZV?Ptdw{IYUU
zA;_O5j+-Tl9P~t;O~(i-xFB30jr3F-KTREKhu8?)#|80{7nWfO=&H7wu>ktawbPz)
zA7y)kx8s__alI)7qQN<S6tc!j%gjE~u{=WKGEE>T1rFU+4J?v0_Uh@>P-&6mQkT~g
zpzOV#^rKj!C?H@jrAUGPLrN|lre?o~{F_XXbYF!K?3VomxRj!Ta69V=*YM9&r?qww
z(GoeYT#^?Ue0y$NkQVacitCthtM@jb9HC`&u#oD;*=dwf&Rfvs8E47oRilR2RB;V+
zh9v@Hm4&(tV|6{1CsE`HaE#o)j^#uB9w%&1yeC8EXx!Qf{}+>^CgCr#w0o7RhgK&x
zx7(3UMuMp=-XK}$G6C^CZc%Vs>h@nat=fG9+wcodoK{(zgDtI}zCL)Ww4Js-+yXnS
z42q_;OJyG&A7=_x+#a*Orp*K%zwYl;->>_ahI2@?@fdizwpDgGqn2+*msKv<Lxl4#
zkk=NHB16F=-h#@|V7+jk_fVgCiGlU##DA78pq&B1&H>%zK?U>+ctd0ERl<PvUz(kM
zXwj-NzEp^Cif!`iocYG}VdV|6k-np;7M~^4%9fk{JME_Tog7*M#u+Tw@N}DW^A|s|
z$1UaAX7O#Rs#%}^8dER4q>2J!)YsGkcq9;a5DlQVgd%S_H<m6wA2qUiLJ9jCi2ZRT
zSKhvfWOsm`{1y4nHs~id347ZHDnk8>n$ae-k^V7AsSVL?O8)Wf5N$Q+&{-(LYrn&t
zzsz+Ctiw0Ky~nbv=skY{AzLFIKxq|t<XpO1xUJOy+lUu~fJ~b>DThw+wX)FkH-FRw
zyZfDd92$45IJRDNme{n9dD{Hwg#QTCN;V%1?&qv16<)oq)a+h>VSQbER%QynX=1Do
z7~AG39{@D<g}5xOi{sFBd0(&V|9r^oJ5<F~3g7*F6~=R^VwYpMM=$vau66CHEiO#p
z)ZRaQcjIg|5%x1I(0@L-`=*YKL|^<@`-V&Zda-kGg5}CSb05`P^;!<tZ>$PCEW#}~
z4o~v!DVV`EbvYU$=A<g#n^a1O-`lKUWaTtE{^0B<$<%}bh(Xn75hj|01C&*dg?AkP
zJ(>N+xSH?<0|K&!{oj+BvD^QW%zD%e?KjyGKd<y1osnqSZMfVrZEQC{Dh^A5Z7Av!
zZ9hrpkZm1HL;{Ns+C`r?pCu$?7eOw-Q76NP$glCQuX?&B^EV6WV^kZKjdHZG@$lf@
zi;DKCwo9{XVRFOwlkJ+{l15W!q_e1PLAcWr(Psd2K{&P7p2$FBhO(kl&Vwk__aWAe
z-i(c%g~IM@wQ!p`0cXL~RL0s9DJ2UI;l|2_7G$IpUx@buiDOi1nnYle#&S4@$_RRc
zOFw8ZNjkb<reMzoSA~}YTE4XhE8dLoq?4&~rC)SNBUTNxH3~PYL)G`vHFQ&x0E4D=
zP-repl3yjO!4sAWWhlk$NsI)|TEX-^U%&#p3e1J|Q<mgLHB&1Zxf%Gn$4nmSa+Z#+
zuV3uN!=%}?em|`q-Yv?@My6sleq}SdKgu^oOA~hK;Bc1>6YiF6JV)>-ezRnWvKD`>
zF?Oac-PrVW!U+a8$7zQK?;YnzQYm)$?Fjb_mr*+ZNU_NZ$|<}fAit!<XhbPxB_2On
z!>T`Jl7`PyLe4!C2NGykdiQ>Vq$#1Q4WXtfkkN_GJfuRCwRKE@CdK_d^bCa_6r7;5
zZLUYRU)C(^K2kce#x8^H6aHw;^I5>C)R8u$Z1$ldbw2*g#LXn8ou=LEs0a?`&W+?v
zH68e?N>>WJ$}O?WtJmy_JFWq4*|nS*T{JoTxDDr;C9gQckswdg>7$NYcsH`JSvC2(
z9o;D!my2Jo_ow&ye#v;fsO{du=N-b;_<hdO*N$(4Fl_zk>GKiHmBnt6#s3kr@Z@QV
ztUbt2jreqY{}FD3Hd{=P7r}h~pO@d}tz57jT3Qhds)^oVH6`a_O1fY<yFsP+oaAyl
zY!gH)yJ_kQ@2S=hoJ4`>$oOzE@<sqgOZ7>DvJ%J-<A*f79UGcXUGmJwN5IrQ_^)u*
zK4^OyM#1*|0sxQuKlDV+)3Dq_0Jn!^nK;Df{`l`hI_5I5T*q>ZT=mn>#Z$gFYZs@z
z-dqMVKJKv5KP2Cu;O-<oc$dIOF1+Uqp`rsq<a(x~6cC?Z4laB2@_E;~AV$@!1Yp1C
zUgFU7YeZ-f18(^$xP-(GYC)l=<0Iv3^X@4}(_xJA>`SA4VSy$%W(=8oA!nh;P^xO;
zenDL8q6kg<rE{+C|54o4&y5cI1RoTANw9~*=K$-(w{XJA_eIre&HZh$RWhLEfaf`D
z5~&2U2*lV!zpmsoH)9+|wpSs~sYSN$+3kw?UJ^^tv~ydodJ;r9e$Te@i}Xhsq{yxG
z=J#>8ZcJ#v4iUmvf4yA2loD+i_~B7nK^^-7Wr_OsnMd51J`Fw4aqZh+aKMgG$-q~)
z^p7moY%<y)=Nw-&?%5(um9DzE>Ot>k&F|p(Rw)pZztPbuIJE$d&#Q;H>a07Z^EYyi
zuAO)(G`JA`_&r`4)1gGt4ayvkNs!w{Hg?jD&R%g(8@2_-dvG9ZC)vfF{>DpcgZg*6
zAtdc@0U(p|Z2>T`ajV?J-VmWQpE{Oeib*&n8EYh#Hu4h$=Yc9UgS63VC%QB(V6sy^
zBe;NZ1@TOEwpNfl#dlaj?0eusF=?sTg(Sex_u0`G!lGfF@z>%k4XS1pN6U5pw`;`1
z2137kD1*KVpVJzbHQ(Wa3R^!f?+}oSEkqHiR*I+3&%j96_y=lP<K{kRFy2z12b=s*
z<#7yCtaX=}Judek_M+%9o!;Vy9k*{ZczDUo=f0-3`P(A=s6$tqzri+1HC|Zk@Eu^}
zZ0;0qWriv>{olNl^A+zoVz1{kp3gei^~|T#>p>bccz;x8D05#d`QiLO?{~-K&j_&B
zB95a~+Stai7y5OQyKf^zv^Rgs>Xg_2PhKxq4>kY;2Lcku1_C1apNmuneOr6G|0T08
zYuLseup@rW)TM7qp%KEny*en_dsAHgc8iNjqpM%m?b9G)inohU-ZVr|ect7Xm6aHS
zaj~znA}I!Y&!Aw5Gaq?!%Ve_<iVNkrs#!tqOiNR*>q=9%H|Q;8gtBDJg4@q+5-2Cx
zCr`8<5yi3dAt;>?>`#WCXj`%+NjSjvf`<cjC4$zO_+4t@!w2Td=3y9s5yReZjt&^v
z`Q1+{5=4#P@dQfCmk08BFsBfN5irPJaJ?QVyg#0Fk-jyDi98A)Kvx`NfV00Zr?`(0
z8a*BsoXeK0`OX9&j<u<!Abmzpc);9nt}kiSmd1)|%b8hRRL(Ml6?(B9QOC1gV%l$B
zbvh*JR<3f*ytx9)-AZ&ZL<eKM!<`wDljuaE!vuw|9dv+P1Z<DK!j`T~Wqz4GE_3(u
z9a5tL+f;<2+EC@$#3n4zJu+cpp!1~jMH{l7$x<}UHg&LN5?!>f+EIb?I4JfBRs~s%
zGfQKgM_XL9``>_!#_2!{;AC(o-#@+iTAc)O54nFly%nkn>k$FY6B5|IIsXcy^zCei
znFL>x;6!nqth7xz<Fxcy1;oX-KHze)AF2%S%ppGRO<mrc*onQZTuu)<$dUJW(q!Nv
zyd5pdAIYYLY;7tuK9pbMm(KSLg`$}&N_6)psoqP2M!2F4+*VA_0`|4kr(vigQ4AA~
z1qTL$^1)lV2~HN!$~3b*Q^c5KTcpu*QI~aQGP&bGt44pz_VmNwMPd1j@kW;^EW#Fw
z)WDW1t<pA1tiuXf(qM6yo|#Z-0Q{IFuWhN2i$pN%i-iDEs$RM405<PPKhuAewrUhM
z^xALALPlM$iHyou0}NSrL3GC@7w1q$lSv>XQDDn|FKnd1HrL{ohIA|9D8=+Z+^%Gg
zj9G$<=Hr!HE({PzA>+X!T4G?dp`_Jaw%kxlt+YPI<Mawgb?v>QGQi=T?}>{M>G?t#
z*#NOaKE+)kGFP@;QwgT`oXbB1(+7r_W3X1ZNlLc3!y`1<3bBxEYEK~B9@Ickl9+T3
zMKeMzES$w}!W#)DLL6z;aaY`)U7A*)Blr4s*0=gw3B>sQaWBuEPc3SL(KPEC=T?(h
za`;yTSO`~b+@=70I6Uv6&zkbf5!j6@Zn2SF{XPyD8|imwx>1Bd!*Lf57TYbgYtgdh
z8ST#Pl-Ex~8L_0>?1z)QG32&XubrZM9nnIgce@N<_Eh4I=nHSagt3f0?YCI*i7x}5
zJ$bas((vDMD?+qt=};TI87(svhcXo)Q$<vNyKdqSW1F^+L&R?SG_oaqG^zZcg#yY|
z97(J!ojw^PLc)s^n$K9Va~n-mX|0F={^giS?+p-?!L0s9_>vg?lJO)1W*0{j&F!Ws
zny_#;-U#cHI@4RX*~qr4L)Rikb3fvLc8+VKGbK3lDO$MM-tUR8ZgU;Y$cfHRj+fUL
z`-6LSAB;g}=eSBwCUF0Z!$hTrLy3MbCg>}bpdlEtBjNJbruD$ismPg|!!cZ~XE>sj
z_flN4d<o1~B<VyKO_k-re-Q?wmzGZ~fTFpYB2S&EDRo52lf*(bt!L6G$Yih8gHfwG
z@Zn@wQ(;#|caq)mJ?m`_zlxfnGxP5C^nk6nNR@(Gh6f{55dNvusACq2%Z?kJy~mq%
zpEyL@ROnR>a}=_(6(~I4Q@3vx6h{qL7F5e6p19(sdyWi-?7iYfQ==AkIYEDX7Ouzy
z8Ad=~7kbay!HXy9!9Fef#v*f2!^)-%^>r(K*OiH|Voj8i-eO~$A7caKt3kCl!PZ;X
zWbKGpihK4dI_oXDIovT-ckOfD$ks|DHof=FFLtwoSgDs6Ll{hT@|GG&;=+oCxCcx-
z+;lC=L+P)9O%Zyv8a9CbRoZ(Onec9xuT^5Z-Fa%X@)Ni<>yzut@_1?*TI5(=d{edW
z>F|Aim$ZoSPU?NEp*F*5K(EhT|A#Y+sH}hYEpGHwlZNO#zD~|?>P*e`iZRw^Ri5i?
zdhvD7JaRwiBSd~^F4ZOgKco(;N2uC%bCvw&TB7oS^WRSn(#s69HdsJFg$e&Z{xHtA
z4mSVGMF`)g^Co*^-)WuTyP1__f~}<6f_3Im%mro5^+!TOws)$X797<)Is<Y=qKeHi
z+xPqCFa%T(kc5;J!}AGih6ZuKuu;Pr18x7{3d#a;*}fCr>vL1c19#4qU)`dwoShkd
zhn5$>z(H<DbYGxHQb<m1oHqL4mlJbdlC=$Dk~PCqVcgEc&nc+d+5Z5nfrG5d;9Qh6
zp?^vf$#QSd-gDSK3nBz|5KWWQ8aV_?a~OX>(#%ih>Z3!vdo;35CW0VdvRz}wmm=Nc
z2q15U$_X(TD3kr8opT^)3Q@_h3JL9JAPfEP<6pBs*V!L)$Mz_ojitDxF?aPy0-^T^
zPN>!_vT<fVM~|1A8wbPz%mWWUM6u`a>Uko9833*3RKeSR5=A)OofSmhK=Q+w0a`qa
zKXT|Tw_LaA7P&b9^k<$nTPN@HV{$q`=NaPjqVIWkk2l`kFhn>~(qj}7E8KlN7zH5F
z6Ssp4&O&yT3A>}8_@`;{q6*;Pu-JzQv^2RG%r4{*L^a1?pc1$tnVvO4b{O%C{p$NJ
zc-)8WaZFmSRG1+O-mH!d?AD9PnVi6gb~>u>k^J!0#E<d)X&mK@O-|z5#b>_n_4pjl
z60n-LOF!CxkaQh`fq%2te9QDuHcj#U9@0-Cmpzn+*kX7@c7$fAdh?6SepcQOKYI6J
zH@91$4@*C1r+IN<vWeqxlVD`l`_S}=q5C%Hdb&)LiI9@Wks!3{cn#rWNbeB7a)`w{
zXMD@K(26aP;vbt41D3p6J?`c5Rh4>{*K<Nz-DsB)+aRRc>)K;dJLq!;$17u)D?9M{
zTObN1RU7OlVZ%b|a=mi&a)pq#-lCAU+AqtjkO0ge>FAV(4gJ@<8v!pMObO6ma^09!
zSQX8hO|WdI@HZ1JO>G?vmW!56{@{c&OYNMcS6eDa5ClDAoOOP@Ziz}D!ZnQbP1h!d
zq-z7Od$*3-e}8cJZjfUy!&dM{ag_3D3E^*0#mAV`q?y<(5acUbba9YqzcnWHh`#ug
zxQ%AZzQo~>tEXVdiN<u5Z<iKP+ajNm*biVxVe1Q`Zz1e+7TE6uo(3dy!HS(I&kb{Q
z+U9=slfU44EWv*4z;r`e?Xf6B$iQn-7YnA+V6gi1QVWCQ7qrJCNy4O8j~{a8l=R$Z
zghw@h+{ekE=_{yKQ4;O~b_w!)#DqayZ$u&AqW|(ZwLz21lqgS%u8GN%jDGp{yF3VE
z`sTMHwIU1{5TL$@?`8-i^m{a5<X0Yr0q3wCO!t8Cg15Vq-jM6z@*uTjVmCmvu9|S^
z1z<TaTJ{nmu>3=Awq<lJq|yvoT;2jUw&Z@S*biYB?siHVD=1fD0lE1VY`1ZOj%jY8
z#dfU6KZ1z}(Y0VoH>Qh81gb;Iui=Xl<)Ljg?#b!h-_Z(8lHt{E2M_{+q*h@?Re*g3
z@bSvw^D-!mlSHq#Q7uo3h!jOe7-XFfpl=LG+aK%#_I^g)91lEN_D1TG_Ch#Qxk&qe
zMK}8e?c(jF5q2P8;AaVxxD5&bk$A=-!-@4mh`1Z*WOrLjMYF9%!laX@3lJ{4CS|!Z
zf)sr&3SRtsJOAWaC`1UA74!esXU6*!_2I$=-yJS?FWxc7gw`Gkk}pbvaEI36gRpW<
z;4d);J*#tDO|>2f^a^j2iOahaQ@X~4(V>K-55Rjma<)q^Z|pzO92RG!*9%^~UO0{&
zsUG%YonK={93*7@Rqx7>C67+(!Nx*83>{nZLnmj%liY*MPWYARX7+Jk=E#bKNqp@S
zjAzJGJ$-A9Qcmh%i*2T~xV8_M!yTiuGq%iL7{~d5+g2ajDDLSy-?BjE3cge^`H=BC
zc=o!uKAU#UAYr|(hR^wE2m}^DTE@{<%qEGyI1YT2QM4k-6|@pKED+`uQlqao@|*0>
z@!Ec|;3P~jrVA+X4$+b)N!@sY0)P{PQd$k>yo5DX_U;bt@Bbm}9D)Sdx-DF`ZQHhu
zF59+k+qT_hv&*(^+jhPBhi`OeImpO}jL4Jc?7j9{UqO5?rI3{)S4i1Zb{WJswc^!P
zI#=G!a8P5E+li0Z&|SVCGoKIqv@15|wWqi1+e?y@J^oJa)69;#u}~yDu9^Zv{hleX
zS#kVOKAeCpQIn1%M}AuoNS331a-;@(eo?W|Wr&*mM>~AqEC7%Ra(vPx($)eiftq=e
zi4u6UQKUAu`wN_>pwvIv#@Ui0S9B2lREEhuRsZgF300%8L|sARV7DO|Xb)QoZzCD7
zq8!5|GMpgqouP03pf6M}O+!cm%}rFMHczJTc{YdE;z3hq`y)Fx#lMYIV*)1n`qr_1
zqcUZ$qZ|a)&o<8Sc?t7TB>)Kv8dHDzg`ViXfx_tzT@FE&EDCPJl>P2XHYUs64HmKn
zow1@V{&GblD<Sna58lLr{DKrn-%2SO9kc%_M`+Mx)pZdA6v?~FbeX5eVtzV`Dy$J0
z43%XTvjQ&8^YL@ty=nJO&c)D+%Nz&{ojV!}Dru|kC+WeNMmM3<hAE5*)kY$wg$|w3
zkZ0-(MzHB+(-g{CJZ8aZ>ms4eHRdE6)N6O8BN_$-CDD=%m9}aehY-{%l&T;~l-Ct8
zRf!5u*_eL0yzSssR;X732#a+TdT*4gl-~Y{5cPPM{&}=JU^fd|xM+-OoJg9$&hfv|
z(+g_$aB%eX1@)Jmp5D=WL3L0uX6e&JLN5=^pM!9g0d<D54&hZI%n`|&8>3Ff$Vox%
zmnE@GsNhD7(o~ww*PL?v-LKm16+6(yR{1IyiJVy%+HyJz^}_d`>^R2adT<lU1}%8|
zf9PO^K^bD(dy2Uo&6oZEJ!Rsw;%L^t_)LVj5@>K21Cmj_0s-Nvo6<WFY2PQ(ybWYS
zgS&2$(?em)D&^>x*BQrqIB8iH7jWl?&5ePjv2&UA%ld)TsZUY*<24?$2mV&5-#SFM
zyR)7pQ+>H;7s(0uMjkDK&yT;nJp#3dNdocC?%GI<2KW<jWK;bs_UvTG&M+*9<M!e4
zuh$;g2dKX97^(!<D_G-?+`r`8IypMq{!{~DLc;U-AGLPSa|*f)EU3}Zpw{eDMpEpJ
zj|;I(|9CEnZmo@@8lcoO87crQ=&({m)F%r6-pkfURDg-VN?0N^xm1hE!$L?f&Jtk_
z^%qpz8)q3ppG4GAi7P->-j_YsozucQZZAhf!+8`L<cJY(n;TmXUYHb_J-yvnIw)Ta
z_w*H4@5VRA`8b@EMaeOt>W@FB=IbVg)?E=q53GTRY<v1`;thIwA>^?E7Tj4{?_Fk(
zJeX|8ZxTcUri*JChlL=8s9PqDc*mD@Fx8-#$#~JlFq&eR>^v5LH!3A7>g!|x5!5W}
zp@W9rx5iN3N=gIn%8MFfK>`!KEszB#kl^jaK{mbjumLLd?)a41P##t0^Uqfye~+(I
zB{8lOe3wLdmgiXQr8EqiQ+MW~^q@8?593vp&c$z&1wWZlGB0hesh60HTXUBrmlthO
zpc{<_(gKRUY5-|25ucXKJs2K-I_WN&FC|gX#P##o))0!2Yd*>220a}kX*w68&MYy$
zD$_wka|xlRHONKOEs>7jWS<toN3?L0SDp$N>iQgY7-^VKyly2BY^r|SSj|)pce=Lv
zGZmmjsb7$w9xFu3MO6j1|MV46`e!f^IzBUd+>WvokH{z5%RUHLG?ajlN?)=JKT_VA
zr;d(ow3?-T-JLBhJ!Snak*se4Qn0AA9&SvSce~+mKJOmB_S2om+6gAfS7Ao261qHV
zEcx=b1hK-&kGYIm9?LJ5432uHO2Q8Z_Q?+HlrCf+9VOwYSOKC|F=uhB;60hwABomV
zR;&#auW`^flK0JGwFw79eczhluJrFgtnAI`8M=b+wW+#jhn`%NzX=xPmd4xLSQ+fC
z`p4E<T1{;{SyU0(1Ym^C1jT@8(CIKmWI4|Wc)JZYiRiWYr}mH7brT5RIIIg0@3HK|
zQaBJf>|uNX2I5g@Q0}0qqn$l-ZFPi7)E@)pIm-C%phXID0BjV^!bP-7xJ6K6#=qY;
zC)$xnrRnljD$UYlrxY-|R-@s+2t2vSgdYK{xZ!nkv89+VF2iJ?!cYJLN8e|q5ScGa
z14I;dT-2k>-su}eUIwHjhS69TiW4xBAac?)I)Zzz<Z+lq!{p!;Tv%keaqeWy)dmbD
z(oD=Xofgcyq+I;zShe^FWG|aD4rpFOroNytC#0IhP045;8s8Qmf$eVj@d`vN_GA~P
z$V4+?O?BRC&&iS^0(=j#YNXtSCcZ^!aBd%gom8iyT!CbX<+kjmp4vyH5MJ6YzPB{{
z1A8mm$un}P#2CXlKe2t<QdA721txJKs%u}Y1>2>_<Kzu7YEtbal=#t3_@~~Gu9K>i
zQ`Phw#WVtu3zu>rrH0Exi#jh3LGaB?0N!i>-0WS5AMW9w+&#Y;n^;(0|6Md!4<$dd
z^HLm)xx>uPDV=?Ei|N~9+P_<X3|r^BEM;C$yEqAkxwNY+Itm(^{8CTy8devAfIGMJ
z#k{^I+p4pS9^wIW8&J{Hs``)3fksAS%tm8QStp?-o+GsBrLox576}vaVlmky+!YgX
z35M<wcq;t>N{5_Eo<)%EJnr9Yoy1<#c-wppC)bebgk2YdMdBl4!iVG$BZEIA(E>(7
zT0E2Gff3Je62RZ&(4B%Jy^g$rT5RpUa3b$p2Is!}T(F*w*Ev}>uNX={^(jiu5KKg8
zT2JQGOU3jph3<VYTd}wrzgRuvc!OtkyIu5XWfaMprAk@?omqFoNf=F3j&=k8#Kq%o
z)Q_`E2tC;=&)3q&lGjpjM?Nzc;C-Cb>_G-u)KJbs;ED-`ktP+^-^*lIl~B%7U`KX+
z46_Z$U85Ryz%vGYplnT;M%M1^^`~2zGwHh}Mi_IS_`l<0bmu44n|C+Ve)k1}7tWYt
zktd*{X`wAMn6<?3$1Ny`%6>WxaU#d3yGDzky)Pfx)xUXy&hxt&w9uUHx)3M;+TagG
zXVps6{YJw~4u<;`!!663sQ9LYDvW-E;?3iejb%^n#)BUIATHr>R$R{%c`bqt%SX*e
z;ES|FG6scRyB}R_pFe55xWs#mg3~Zt9nmDsS1QINBBAy33p~^cpA^izDH&%7D`Lh7
z8R@l(qDNxRF2ux|5@jj2U~k%|f)uz#=w$|YQGNL#H;ciwfMqFuf1WdxOADfqJVq&F
z=btp%c@8PZxwcOp;?|h8>yfBpNWR;q9>R193yK$T&!_5L>W}Je0fti}fr_He+Jr6w
zwPO{R%=DtYAM31hf5b{|nHN2+6C_dAp?zm-d|b5)sh91;rZ=v@EQ5(7{jMwz!3R}@
z9P@V7_<{<T<+%&6s&$MMkCtbo$W{0J26?;%T7b{sPVrOnSC0DYpiWLB)(qq?krQ;r
z5uA%7fvSX|BO43zFfs7Yc0=HIy}C(wd4y%?VFL3Q%x{X&|Kgx9UJII*xW?J+hb2qT
zaUX8B&7dNE0(xGvjuDPsvT`<{{&6ak&J=kFfD@AMm<z&J!k^73nh4+Pe%s8FQVpz%
zaKoh%{xB>nX!sc%qH(CFb$xv(+lLuWpF^0C{dMKf{6Nb4%mJXnQmTxB>XT}PC95My
z0&I|_CU?*SVZ74MhOk8|vl8h$HaBD6JTIh1p5Lr521AA#e`7nV(qiC*UAjAPk|2_D
z6^em$e9A=(Ttg@XqRoG2JI_dhLb*)@0x$g?DAH>_BVGgTg3Uj*NrG#XYdOroopNKv
zIJ2<&lxW=U1=v$UyRnGe`S@(z1ma`LyIi<Yzf!Mgmdw7`ak#q*oN8tOy1I6tJ-+;f
zBl~k^DnvA>3ihuSW90mniIer4v82&<Jv+UJ|KKa9H&2j$=pWXmR$|wDoF9)w05-?U
z+jJwsd`UtJAJPt^TBGaVwZKZ6d~8pp9xKeSJHl`Anb8b{QvxS5C4x0<HNEB+D5OmM
zmKZDUf@v!BaY^GSoXe93DPbLhV4SyWv251d$=p!{v7h42fM|z%ZaFzxK;a+1U1o63
zDfU`q$yC`g!wP6?h-2(W%>Z4nV(JE(SQcKr`eeQpAqg(=?j1)`PsXvQ@s-EhhZ`a1
zr~Szy5bf%Uy#V!>Kg?bDK`ioh?k}0qW$=job^HEElqo%&iO>H=R!AKxu*-{N8S8a2
zNnsw2&X>3Kcd5piV7~oC&>Gi=m=D*C_5*{aTQXA_uU)!X<>50h9{iL^^!f5Z7($?m
zFi$+G4L<-54<;wDei<A8;ZHCGJ?oPB8CVd-@%=&SfyS+Uam}9v?@JVs#X-J#NlCU_
zGqh)2;ld4vdX*(0tH`%I{DXgU4pi@QV??q9KdP4_dHOD^&!JBWz&qJFI)Q5^!7Om_
z7$4+0Oektp=XfwEr}_xyh6URfU*q`Ovio|@Ha4SN{Vq8O^^eD3=T%C;{)~tFPKEz&
zVFjXv0rBsdVI~R&5lftnJquv0n;x^2+*@FOzMMG~eHFki9@S;pK(=A_fxCPF;-;!6
za6rt8B{a7c`4HpG)xm?v2P)i#gy$tlW<*&%_MJcV5M^jMHV(G##m{C;uQk0;UCum0
zOhh59){#!Y#6|C-{Tfx)&o~hSw1JdiYB!DMT>V@ER^43AUgMmCX&lbA=5o%$)=vAY
z2aU->BgvU41^2tnHjUXr;h?esJZ;$uBq60~rxzyj)0knGU&u5rPrfcj_}lUct`mgw
z5H};bN|&c!Nz9metuEC4shKcbLBfmwEO^{MN9}3HaxiXH@nfWi^r|q=wadVy*PzFt
z_Uz}7rOyJXg!%55xGQ1!L_FIio;`A!?|u22LmqBuo|~*NwAv&rSbA80-PscUyAK1<
zbBpbC253|khWSd|TE=T0oifttx;N>7TSnMJT7Eo`#dJF6H!#>O-$KMb(Us;<ovJ^C
z&Bg!?xRw{PYo1HRe+^>O*g!ZVc4Wde>2`+YV<U^;7&!#{+xP<mV@Yj4W;%zSyPr4y
z3}gp6QnCva<K)0kS0%*$ZtHQBa8p~y@G8=aO9y9ig}2CML#wM5pK3A37Nbz`Mo`^t
zpIos)zEp(@^pP=WotIr(nVd+Nm+h%H0Y;;BXmxAyso_Y%i2lMHq^kRS>R+&@w>C(j
zEYPbcQNR4mfULK1%*L!S+E9-<7zuoN2l)I4xENKNOTYkQH<zm$DyFzoU=`b1avXTv
zWJG(Sh@g}pD+D@IBs-Y`-(X<K_<U!}Bf<LiFJz>P`k&`T3gOH2xlk937#+gwdrjXs
zr4gF}%}uhnl>6aW4_o!HlT~%47Unn=hHd!)_wqx;=rpNpKimToSOihiu{$=!cco0~
zR;ve9UoX9(9Dty9az1QbfCq@-Wlh#5mKVmd=Lvkj<O~JUyY*V~qw~4qixoCveH|?L
z5@-g}#BVU7g=&c-E&X=xG*`$~q+aH276*s>R=ytN!l~K>fW`NfH1ZRpR}WG>l9DIw
zpJ-h6DQsp~E4pWXkAq;4O3@+c^kh-2pM#b4G*YP=c)$8l3cXoPu{~#=an}9t_m&js
zBK_{Zl^!J8542>0mM4h~Q@8rNcT#B<(zB(1-$(lPaFdLAVaQUAXeGApBh+6-50#5q
z=H{VsJ-3;yp>iiduZN^eDBd3L%4CdT*FRE=(Dx5Mb68wJ*hGT;-}nH+?$gF(E+9`1
zWdQh9WRRumjx|@Gk?d#qIN>{d-?F?huR%T9`^%xoRgks~*9#D1D6h8dK(J8Zo{-0Z
z3p5I+23_D>&6O_Xi#eLxt<R(wmtDGsNb4j!y<*Th9daRB?$o+=<?a6L!j2!etkK!J
z!r6{`S6(!V&lj0%GYr_i25ibwDDjM&V+jp9&ncHlwrp`sNg90IgnuWcK%>u*)u&^9
zd)Wz*!Gp!@`N5U$5%n-)YDG&eP}-Kj^NH*@-N^8A-@}(5hsGtG0Y%6luJH}Yz-Iax
zstDhPDbQw3fQ8<M!mWGw#(iBD1<F?Z6l=qnj`}m`uN2TVz9T1@2acHF@!rTyGm5wX
z3!JvzLs;f%wNRvcSW32(!79C0{XJ#u-BlrhAb8dr=6Hk0-<Dq?RKdFoG?ga@kh1=9
zFhd1?!et%y<%MVLH>MZ~5Q{o8zIke;a|f48!A^@%aO)O<ZS1^EHM-)3N*k+^-`~N?
zD5pFi|4YnGfV&;8*iI;*qzY$YIS;KMwp(vP=&aDD-nI|cOv*se){q*BeMsl5=jly=
zqQJEQ2R{m0n0i5d1up&#Q8K|e=TS@PKzRuqWUUiSK%ETs=*gbPwlMH45WFPu^&VLs
z;28l-jxq090yo2p>eL}+5t|B#x1#g1QB;l6sbF{PQi8I3&JB`UmP0&{#T@3c=B8{x
zWk=Wv{NWhkxX<~aaFnvOaGj9fUM+lpM&)z_FSo2Pe2}_MY>PoYtMKR&mLmIVC>bY^
z*+0XRYE2&Z;Fe#Uydv7*sI3#%%vz(meM~$Wo&TY(9;Zc{LhtvZ_}+o}d3SAdnU8FF
zMR!LGWf*&U0aedG_N8?y|JDi0UlkM)aa3kaqgK`U>p>xgj>2zy$ccYH@J;z+%K%tZ
z9*e=>513ZLW)juF(veheKE_=|?85!;P-gjU{QWS1=0{z7bktVJ!3C_%1%SfGmB(Mv
zyM9K(7q~p|@(1w$3puF__15kP005A(|0(1!>HW8mGlgUIE9Bh&^8;O<b|w*TF)5jv
zB$ctl(U5h1vLb1Z*^=ZW0M+VLES8FIS+x58xB?=8<P%VAaZ-~hl<&R%)o{?!^x<6H
zM(HrYDrHW$X^EIlU%<VBzW1n^v=|)g4Zoc|rRWBBcP1l76>w++<8P9PXNZwSc8&Wv
zpl{Z^@gWGSl~xS+%$$%uoX`>_h!4i-=KF?gQFm9ie1vL((rL~@Uj;=Br{iUt>^a+A
zc*R!N4JyO`$H_PvcPhVOxZf3n7Sv8q5WzW5>W!rUPy*1iiAVVqkPy6d=E2F46PLt>
z-$(d6rGpnzgDY+e@Jd*KxKCSXKBR|_!^6XK3C;jM-StJ#$sI2NZprl#Wqt<u+BZGj
zN9XYYlXssOZ*iH#yaEZ_y@#lEkB9jIS2b`(nGwC?mo77A%z`W9i-${o;eWw?&*O&L
z4u?5hCvwQt5^&O$w;BpFFhvC=;O;6h0DBf4DvaSc-9dmc5_Mut2huA97Wm5vZuB}1
zfH@xAjz3%C<iv(2M_;%&vvy_!HJuLo;1&Af?B@!g521|cW#~YvDyBPHRSqI<Nc%fO
z1?TbS>u-1*bU`ZY9dZs(!^<_!8!#Wf^Eppj44yf~UvL7&m9k%JB76b1r~uSSqdwz<
z_D?JfI!brhE$&yuf*{t2p!bP_Y$;-+PF&({OB2>%^17e|F~Lk57WU#EHmUS|(0nd1
zTIfd<esgZE4!<Fxy|exY8qW=V_cB+8kw<Kp&8$20v$HfEouE%y+45TmD;C_etE<2|
z4-lfJS<zZplu-k8+>IQVbksk6nn_Kjx;2jzKKqlcoS#dC*W2(yMHEJ1w1ifXz+G@p
zS=qR4x$1+tvALzQ$qtNZPm7zk*VXq|_=}}pM>LjVxIe(rqb^magmtz$$5YJe>0#6J
zIv9i0>DAb*{+mEBdMp5(ctr-%@(dMV2-8Fpf>sv(|2BYZr>})l!Igs~M+rdWEY@rX
zvtIQWPTZigQ;<8PXN`7fdQ||{mFbNj=Lt9<7o~=wnq-HOKumBzdvTDWSx)%?;Ul|#
z6m|Q%%mfe)fs<k|z%{AsXcT+fHoyi(5xYQL9Y<j$++ZcXazBj<g-%S7Gd6PTXP#~}
z%ym`Mv{)(-Y%ytWv6WXfYNCCl-?^0*YSWNsf=cVa|D6><yddNQ!+W#8@0kOF2^U`w
zwbtM0>mP%3ac~IcGmijFX9qM#cbV_ZQQ%@=#!`!PKw*-hB2<EuF!cro3Z>-#F@oq(
z<5h$U{6S<BnB4jZOr3B&=Ek6$5X+xc7j=tM_EjV?i3^y4+W*M0nJ<Ca`VibbBrSdt
zUI8$09FVdiTZJn%AoCsZ2HQ(A$g%)9`>+I1B%)3@J`^Nno(;a1G$Xl+pQfET@J@)W
zNyP^c{W)P*1Sc>ZE|BXE@!Prd9)>|s3T0H!mF9hs1JgMDNSfYlHF29MO<&e`&ehh|
z5ki170*@zj;)NIBm<tpGVM0dorwq>jkj@IhDKA(S7Grubeom3E^Cr8`4#H(%atgmH
zCccgwCV@oYfA&Se0x<a5;+(&5-Z{-#Tr@c05{dJY=JLq28+$`NEc5#+NuX|Clhjh1
z;PHQ?<?zSh9TE^_XLVcCOw+9BwtlOk-zjKuB|r7ZZL@4MCi1IMXEm0i!!9*;@rbiH
zvMe@={}ZA-{|3j{6t(#E49P4mwSGu#R+AWx_OP-LgGFf!0^2|VJli45U3*yByYadH
z15&X~--?g54j%fP7W#YxbG2jikz14AM*Nu=8IfDxmq!rZg6A|`q}viBU(Ms3$SRa~
ziyDb_hoD(4ANLz-sHqbaqDr6?BGD??fSPC{l4!r?2yOq=2;z_)#z7+tbB_?jG&sRC
zIKedN<`I4~j<9n=*!`0X3DA-VZ`~EhI(@htAbRC`&+HRmdTYy*1viSvd6^jW=$59B
zD&!OFR+Hdn!SN9V3oaa?y!BAUuYp0baIySErmA!MWDJ!7X_`X>N=CgpAk-bf288W>
zuBNG)V^fShQaCW47@rx(Qs{Q@a-wEt?6ySBGAoV{pz^DInc<JsAXh6TfqWl{;WOc@
z4cTrApA~443UV6F19}>lU@qt&fCh&Y%tK^gjb37@`U(ux`B%NQ<9RHJ+Ke`pA0*ap
zC*J%!+^~!A_FcO=u0Ucy8Gjv2Oo?T-;^O<qgG<TIhC5ZYw{&=-0H0=WsFNdCOGi&n
z);L%1!i1NDXGJNP`!FMFFk474Se)9oIe!e&BI=~XBu!>VjoHnTDzsQ$pPKBO$b|_;
zvmS&749(oUF^PgQ?mPbH>gVmxm2GNikY-^j;JDQm?jiEa%f?6W9jyi=Duj?>)FwD)
z3aT|(<m9ZgTvxio{jQL}Fjni-;P7bdk-cRRbqA_mVfU2Lh(R{H$War@5@o32nIB8*
z{BV>pUs)IR+%o_*%bKB3-UCUc?(~MaW^uJNzgbea95$qxs|2(NHLQ-g1@YXUqboKM
zB^j#%OKqC&D!9VXF<~f#F+M_acc_9#hPE&m*(0BO?ZK44Le(PYTSB6T97|k@H0Ap!
zt*&>9$|MgN&CW|2QjuPctkBgI8Iz*+J#uV4u)V`8|F97z-&@me|G2FbP7O!M<4e{b
z{uPpa3v1;^s%P_=2V@7iD<x#6RS|<7o*f2aQZkqK+|s^uHX@YQx3UJrN?0#h3p1y=
z$PS*WBf<5#*b)HXm#KGnHDLK1<HC~*OS)To{XF$nC5@Xi26A|~JbiowqQH%jt0g0j
z32Qi)ewyh<z2PY|2)-mc(_o{W6|WY?GK`604<no6$`Ve3@@z0mgUF$zyty#-kx5}K
zF<#V|%L`G}-#KCuSu;he^p<G2*F!BSCK)G~Hbqj2F?6bQrpf~~>z1HabwE9!qaQwD
zR%*$@rEx}*52sm8PY-{se>oUYypwRz&f>DIsFcF&s`5-uplaS)R7pnCL?tZ>E^fat
z{b!j-L7HNssq#D<XZXjE^-o`~FX%-grNYggMV}e=cccj>aGIt;$)r{LLr2X+X+Gio
zYM|sx7JW>3IPxpv193tvq53$9J~)Gt0!+ZE=b%TYvG!$IU+EEPz#z==uzqHay~P5(
zvY@h+59(o2g{1dpX}m*qd`+uhhk^t<>=L|81Cs97^h*2FZrq2Nj9a3UCn2%WU3Vx?
zz&g43kr?S?e6`T9!H_YnrQpro<H@m2j{zhUdAMBc(^D=@t&5ae2r|8SxuBFH^8#|e
zH8bHzG^ea)Zrqu@CaIhac{mCX;*K-|b_%+xw_VVRsXJ<dsbK01LmshP1;WKM$USPz
zlM<wL<_lvX;G}uAc&dzw1S7eY;dCK_gR>(OAHK#wRMZ&bp;qHu69;I9wGN(4S&<QR
znE%Px+?qLC=AuYeLo<19i}>=e4QKDZ=f`F2K4*LA!i_3N{2>2JxJQ{CfrpOVy;xPy
zYFECFOUK51&)8|2%_9TrFs+-R$pvM4g|61jq=HDCS>x!r7U+yg!Vtrg#J@=z#m4HZ
z@}_D^l25d2HfLoY;rB}$>jxk1jluT<5spla11Ep{nVOAs((?~Tm7?pJnaW$@1$cC|
zvR!dH)8(+DJn`j!a}dTb-0gD?!q-$jx=M`3Thfgm>xSW)TiItd%vn>Rn=Ekcl3|_O
zo})4jqsx2-6f+-vzC$hWjV5@Y@s$w&!u*WnHYJ9PnLsKdc{@EIX4OG2BmR{&Kt`;6
z97??c-Oxd7nb(tue}sK~0eYt0nX?e3h0*JEvAlzF<z-QMWe|oPp)7iv%LiB0++;{$
z7ScNaeBq_@`BuZ<LG~;Id-v1B`4zFpv0JaxmWxIbCIg%5RE-~{XjyU6XjlxKx<<`K
zg$&b*`7H~{!y;Qs2rHOwv8$M{4d*@;Adajy;$b*M^KLF8E~z9Is-}=+mcW?WfqTkq
zv~_e2B&t7cpEDcanTb7B$N~kcN!S20@nS%V54^3Ul_nuxvNeKXx3uOp55CVgg2{z^
z?wL<DE)Ue(|HVjBFuxdRupnnRwIQa|0<oeDLP?n*U276iA(iF<P-J!Od`p{5jpA2$
z(7rgm<L?i~^EB-SW%V%(kMh&XsasUsjT4V)QKR>{S{mO?m8~2^Ya%ouSeh_w7L;VB
zVNl{l|1=(nYtGMWU4(54bb*%si&DN=jfMK7N4<=^X!sjbfP*-xEFXCxc;(@m0+L#v
zCIL`xT~RDASkBS0n{V()m7Seb&P6+BVIO1$TSAdgV*xab@?LI+&>rpOuco_UwmGzk
zWnq(|J7aT`v2YQottrz^)HpLpZ<i>+7@$t2p2Gf<)t>V2ef-O1W6QZuT-CY{&Q(PN
zeWs}X@Ou}zk6>o&ar%A-s%vo@W)xO$vCms9D@U=6EMY09p)l38J3iZaN=H1|1rP0y
zc9h6cM^H{-p3IQ^K+SSaAPBxraXHOIGW-#AWdh#$WyH(kZRt1?i3V%eC4mUet2}vR
zdD$`M>v|6QlV`~Dx-k<j58K$FvmCEmY~`6)@PKVrka%+cM@V}<u!009`DL6s%AhVW
z?_D{kHml~}=ZZ+l7kssq3R;0H+~vH}D86RcXEei!ESuj7(IWUX5otkVsmgtBX3!Ck
z%A`UI52^p&Rrq|c#R-WNSf+|6hex84%eH%N*Z;th<8-v9A|jJ2POXw4x<ab?9kxYC
zp>6PFdoQgcL7^FOXTt6qmfPWhZ&hpY%B{ZDV1Swj#MiZt>n=H_#4RdurQEtxOV^|W
zvha0Ls}^X`3*k*xq?c(OT5y;4>_neChqd2zkDbq2;$B(oZ(DKrHvSa-!w2e`zNnDO
z_-?#J?yPErHsII$53}cx3hTkC=69@y9-0t7>-}(cuasZK5WQW%yH@AMy|<g@^P#kQ
ziTMx0sK&UPvitxq43{wx<fv9Alj;>Nkijkkgvsgoft*M$cNOY&8Fe25G`%~Nyb{kq
zwfO|c^C6b4V+JycWm^CG_4=!^9{Wg(H;FYi#yzQ4GgC~6>b)Go?S*)X`2~_p^=R12
z80->#$f~5Q&0hw71t8&>b#%44#%?Q>Q$-)L=^rwM5MP!dI8U4N`WTKDL~&*G+6|rk
zjfTmH4(W}y5?bg8b4XWU9SeXAO9H7B&3wgVm3`@Vj!weMzsdjN4+cOIe^iC=gw=HE
z%AaN4W2=t%9uPHLD~m|~lwZKbMUwy28Tn`~zq50tFyf^yuI(JZP03vi8_=>{-3KnG
zDYSH3CKBvIdUgP^0jh07F)r8UZgC7n4bJmnx}c4Pyo%iOtZ7LPlo&{`n>T|gRd+G;
zZ=}<>{TQo?e7dhar;7EBzSZVYJwS_ccqCl1LEM$lHYx2V;@b<jyWbT$uP1I?W>g4#
zs=X+wD74QfMyA>ML7rKLNb1FJW;P0D?}hF@+4HM+#E*})Zr%1c+pFP`MY+3?`=yK=
zk~e~M@0DcL3GNS}e`$6Nsr~ievvJoK-3(6)5&3tUs-vm0DaC}-u!=xWZcB{3smjy(
zXFUQyY+2+M<{|Ij3*C+?`EB&ET_N(Qlmh-DcY3)%Hz4`R_Vp+F|8Hu5<{f3;=>P!a
zq5%Du|3S~l#nIK|Kc-W=temh{QocX7^9m1?a}sex#q<CNlQ_Z60Wejp*TfwYGnko&
z_CcFo*+nZPC>qF;ZhSjl>})R0fc1e9Bqdu)DhQm5>TkSsa$P>|qh=E66W{NbHYywO
zb!if-RwjJ&p603EzK3|;o|iuN-yUj{ZffX$W<K2$qIKzYwRLs)WyMZT#u}f&SH>FO
zo<7fS9+F06gl)9+@^EM9Yfi|=E~1j&R2t$<r{AbNX8Arhbw5A%4oKeOCRWBK23p64
zj)**bc<nYcIywHy%FaxmjD40Jyj6-ix+dW0b$h$`y1F~?$ZcoS>b4D6V_F@)-V(L*
zXyUNZ<FnQFcy6#QeTsjST3ud{KRup3l>52*yuDXgTpeC|I=Hw#dOEnSeSTAMYB%+G
z)vI@Qd=I4Qb$dJ<-<dFnU0ghjq^a?HkHvL2o$>hAyL)VRejl0T`MinVk8r=Xc9V`h
zte}svn~kWYt=QF~Kcub1C6c3$O!0Ytx!hll<$Yg${J!|v!&zgGEV(a!_rFd{Gp8Kw
z+>Q)9I<&A6`b?kpZXTUZ&Q8mgy@&UEL(Z!ie6p*7q_>@ulPP1lMB-N0nV)->w`0k#
z%Z-ztyU&j^_L;2MyyZB2(lB)L>o21nk%y=ulcud&4pv`*tAKg9BvZecF9VOK_w)Cs
zy&=Qq7}qtMq;<AWNXyLck2T4Me*;AmJu}T=Z*OmFl|yR|j-MTzDZj^^p}nPz!=<CQ
zji`w<v#=9`cbS*8DJXXO?7SYCZS5RdG#Nd%3-pJThlj=}{KWSmgNL`yH|@{3tjELq
zC-{@!-^#<#=jr8VozC{slw`MUsEbRRd1jv8#%|`q-9}^7!NUsq!=c{#fa~4B0s0SC
zt`8qS9|u35-{-!Q#|+$7+CydK>Cq8-n)uJj?$O>I?C-Gm6kJY?vx~jQmh0o%zD?uY
z!$L9U%*C<i&p~7Ho7?hb|JmB-=VAWWyF%elCNQ5Jovu@D9$yB|=f`dSIGnCdPFFU5
zn;r}FyGFy+4*LDZ0eYBP*htiyiqp?@EIgVWU3GzJ*XG2^!`oQj+vmQ*eTBz^$;XM>
zb=C^{iW$E)3wb{7_1%%h!uZjW+Jpid_~B7W&e+{TP>=W5)dGKW%r|q!GWe5TW|SiX
zrVs!7_}1EUuMP{b#HKO_=gQT_N|dl$a;8;NI69>zsYg9isjKGL*xvpvf1~dGKN9Lp
zNwuFZm4y$%hk-J=TtC0ttw!>lKk)Mgsh@M1pCgWEY&BO!p$IHL)Oe)jUUzwMs=iBq
zigl`w=2?F{`H!aTJo!;gJ~%U5@|LQ;s=%*3mVHgHB~_a879>A3o;PL+K2+G;Nv>q>
zpVtUncG_CXh+oE#UpTAQXC&Vw!k(${Rwkc3CT6amOK-MynYRbxd^=rOwu{_5FUdaU
zoIcXww)on6!kRZkpJ%RIW|}!2{p7Z?it1xqXCxh}*E6s}72>umGTVB}YOdCwwA+#x
zT<u~P%scsq4rFwof!*H4u5a*YUxea>UpSp?o^|LCGO`EEJ43k3h}k0nukJ30s`O`a
zHZv}q;zLf#y_ly8@490~HZH<gr(*kUIC*XO<8<Q4!)%MMZ>Z8zxBecJb8VkfRNdS~
zd^B6t-uSwmzn}f%gWsxMX!qLBMF+N08S(O1lG1ze3=JEoyI^Jy-Mo@HH&uw);=J|R
z@$EQ4mPNY3ru?|fgC*>yHso%LST%*k-To!#J`=YXxh22bHneA10}`4PY=$oT{Oi0z
zet~qrb7Cw4#XH)2kKS~IBUrlLh0}otPJI(b-q2_><n}!`(fr~2%0N80x^h9Vq60I=
zDrDKUbK~>8-f+N^?VI$`vY*~`p`yO(2^M(ZetB8V>4^9UHkaK5#re0*r0#FU9aem}
zu6z7WH^Go+I*2=%y-lz?8IT1isoxS^$Peu#p+k@Gc05VV=vH*ueq%rrPFO<B&e|ge
zFxJ0Sq>{c#qKUsvyEUrF-avCj^ei4raAK>9;HW;1NV3Cg79)#`Ngq3)E{h|aF8(FF
zYoOq>GF*Uda)tp`1v(ChZANYY5w1I6?sM7H#`f-{74R|%^O&`GH8DEnH}2c<l-V~~
zX3$Dr#b;I%J#CNsOyTsACwHBzfx^xd<y}YKNbziphVX*ZaFYtvFzrMFom$5a1)d^<
z2Xp0<La-SisEg5ub-2QssA6;D4KlgU+vLWKcw@?!lecx{gJAk3tu-S%1tyj*e7*Hi
z+H4%qmcQ_4ix#6$qc?ifrjkg;;Cx-!cZzK9x*);+Vm7V9LLGFJfkvGbbfz>u!0Yi!
z3{old5_a=d%C?j^wT>y>t_YOUAx!k2E;)i<cqs&w`NQdT-EcX=^jTGuMx2;|2&+$f
z3J&v(gE~6~0d<5(97C3D(Zk`pI5{>U0=mJI`pjmtrbz+#vpq)(u9BF4?i&0BtaLy}
zifFpowJIQENf_S<_naq@`z=~@nWI%ooRHTMOH<hKhTBJw{c<=vZhzpJfNdvvEGBwv
zbx@?S_pcV^SSWZF9I(fey;QUyG2!_2;NgfP=5xNy>+-uuu)`_MRR;#_p*}{|w>Q7A
zwvx35Ggu6UtFIEQ4$`&Gx2xQ*xA}9$`;#wF>j#37bK7<Z4_CQuA0gbGL~vg!?;nMs
zsNLptX$uV)A*lh^d%FT!{&4urq77=kc;n0=uy~5N*@9_jYfYJ*oA|f*F`#oUe0^Sr
zlvH#`s#7&O^Ba^`JR_%)0SLsC1URKzN5=L&%?y|rX&^+;chfNhFSCHOO2+pgt_OZ#
zuX*vDBc*ztjrcI|H@E)Ff3~3aQ@wJ5ijWUOat*!>Tm_l~K@%fzU@;7jJkn$f#impP
zIFk>nFQSFe1)XiQf;53$515rFng$3E3zvdQ1?mQ`7dLUbfiv-DCh+d{vWEtV-s9pm
z>aGjx{&+%&?u!Ag?sO)u%!q(6f|~Ingd`zCC%}3J1)W9|M$C<5ST6S>Uq04YivSo1
zAK?6Y>;O@IZb(&OH^4gpQddIcW7NyP?Pt7~5U57vLma%f7g`1UV@P(}NWN=bqk<e<
z<OJn70m;bP?-RSZiIAPnTnKmpb{`s07><GzEZ6J1jN}3)nBHPW^d~4hU@xW<QyA2n
zar!Wv0+>5tLa(s~0=Wf<AV!#5+7hae6a|1GmnplnBJ$aB$vUu?6N1{3s4ZOzLB}bq
zI0GV5{(5kv&!9=Q?5dGC8Q{fdCnB@_;|a1AQZVCV9M4Hho->xHFY4DL5ZWGsC)<y#
z%9S@kDOBe&bCO^WgX<5Je2orq`4><=?tp1Cj93<veEP{7BO{_MVV3^dWV%WrLc21I
zg68^x1NsZY6f*`M8)$rL_Q@?V)Fb7tYm*@TN63S$Lf_J=Vw{7D!Fi(#8YG}|j23)B
z?Ah3-&F*hqSGaB5CLYli7Oq%9m>B@RePlhV!^ED+Y<)VKM+ncIHV7%2)G~IYqP{OY
zKP<kQ#^vkn?$O%N#l@5^BK*w^Es%=A8T#GI$8)rQiEyw$%%%w-Cq{pres>+xEw(zP
zG<Je0UHe*yV2eB%gB-*%bFAbc`AqoBIcDDw$U)|A`Mz(6d3awyRCar%IfWsvtPpC1
zqc$yq+e3|jpeTdTT=1F`5&<fM$@}ELL3~s?L@b!C;HKXEp)Bx8D<UBg)P!uT1jAq3
zBM4XmLJOd+8f;82Np5g}4O$T$njRsYVME|nUhs14=H&?kZ9Hjuh0*G+tj6GepS;t`
zumu`loW3Ok!wc;wTGcH?=kKgi)8_E-^)8HfQ~sfdpg}r*H~hYvlKXRmw$7i1^ug;P
z=EAJ);}>bW3!!P06IACam=n~5<b}x(3a!m?1?O1AFawv}o|1ffh;!k%9KXU={OD~V
z3#BS%3Yt&YE9{W1{`X!V%EK>(s_vx#$BYDRdqpM2JI4Fv+(GUg`}g^ZsO{&WUo55w
zpfYO{N)!zhju~1pdrS`FU}N=h)Bbpn6oe@F>Y<i^WNQP3)PQUX6yOcQ*#S#aFRy@&
znRe;tUZFo~@7!LIdFNlll%l_{^?N>{p3L?;cttgkS6q*_#1Tc4H<&ZvxMnLd>0-Pl
zYNmT41-FwTUra1tc(?bRZp2+v_j`IT!IN6}qdup!j=#bddx}JfQG&wmCm19lXzzd#
zd6I=XKSz4=2$s`?f<KwgV~gL4SI+=Fm={NpjZJM3+t1|5@|8j~DTaGKoEdZm*eSdu
z(wON!ZY`3X3a%I%U84-t(M^;Xn;?*Q?D(ZJsq}|~-<P*4knxh^3Lu475nX273$rDE
zg*P2sCV)9`1}6^%`fCf7GmX6a<sCC1oRxrb_6mcVU<P@BEFk?9k%WAJrkJU0f&HWg
zx*x;Zs=`<Mh12yis0HQ)9owle0j>3NSDoDm<6)@x(fWW*bv!Sh;|`X8DC%0X8PC`k
zRowH{;$6Pci_DHsVL)CfTPbbl;r9&=0aG0f66vV`WgCE*+i*;HzB7Ou06zhTZveWu
z-RJh(bZ*=Dwzv2sCfLh9w*kUpk$vdB{R`*DY{P0hqRqOkGJO>v1K$T@byc36_sI!I
zt8I6X_to~`S36R~fHR*t5g9a3$t_T3RUY|a-XD3~Q#vLNWz2KU-Hb(OGZ%jgS|(V>
z?I<p9cpjLW@pHQFq^N@MEI=X_1Yu#lKN;>S1t0qMSauA!g0+(i5}hK+WdTSA{>HFx
zIHDhHOAwgZBN|@#oQr*K<3$31vxB?b<n}~&Kb+TL?FDYVYO=&Vq?-N3Myqigy+)nA
zVURmD$a|(`y5A~zF}@%*hrYZVP(?gk-aFoAUwi?J8E(Y$f#w=Mb8ZPG=jOiIwA`dF
z92+guH+nm3$a?E(Hw5^FH-UWpZnMP&Q0e7+OGbC6!j_jKrFhw^4ul9AE=0q5E>0KZ
z-4D!}TI{x<w0-7b|G><Nnv%6h5^vObzT;&)6LJ7#!Z)Jp(dGP{?LC8r34df4y*z@T
zv9p1q0Io@fapzD=b-ckRarwBAE+Hdu`697lSi<F;D$1|K{zj8M!y+_9h>#Io6~Ggf
z2jF1z;H_d+bOU=b!&re9@;#*+fbTF`ARF<Z0OX#VceXol<N$*w62GvsK|MglY6HRD
zRfzf(#1!4W)PDq<_3~5Q1rKo{PT+H()Xh7!GC5rm+v1eHeH?RRKjKdR<rY_xm!cr6
zCsk=f6xlm&ZUJ{2C;3K)h4?4$0q+{a^DpBjd1;$N>zU3Kwu#fbXX;|-ix>5UB)k6C
z7=)8Qyda_1#K0kM?%=?*W7#Tvyt#C-&&_`IJ*+=5HPZ@eagDulcU^;t%X5m(G9&9-
zJV#{89OOF?C$<;taNJhCsdrn%<T%D$hR<0k5wWQh#dg3sPr+o2mpe)10SSu-4W0=`
zmuAlBE-3J_v}FTq_iKOG>r-O>M;ami(0gD1-OG=`y=j6q)tDI0Ay4~z))K3|h??;w
zbA}J5Uyj(lC3b+KF=khn8^GtjVgt=4hJVNi@-k=~?%&_W<mzU!pE<c@wdO#i6L$th
zBPf*I4OU+k+;g0Jfr%O@akjmY@FH*&H>4~d9CkT;7o_I(G5dJe*`eeGm9TPWithYO
zrU`-|@-QL`c-~dGBrtf-&bQ9-%Ya^b`g{$ug|A?<o9!rC(s@@bskixgYx+)Nzbad6
z<kiscD6`mMgGEG}LnkiPIv2{3ln^A|Cznz|6)v@S1p@#Evn)_IT-1`JYUl@IBzh!8
zfop~pCJgWsAgeP{hK3;Cvn!%-hFS7pxHc4jSv<*)VijlzOAH5Y_E(wcn&ZABK%Yhn
zA8KoOGBO7_kX{xo^&;AR8OrBJY4oM+OFw>!A!2Q!ZULKs1=k^YKtQ^H*vfA6@W*zj
z?=!-{SNC=X%piy^OMqH>ad^-gUAgue=i4ue(OMg2USgGK{N=EtT$2HN5&h6&QaqCZ
zXB0+Qa2U1{1CQe37}6}!a2%Q{dRrUkBb9l(Lqa&n0r7`lf(8ghW<|6r*>(8xHrPTk
z!lrFp*4w)Q!QGlBhikWCvq=ur78!AAIH~KB1BWJ@7?3T)tD)A4dK1^@MYb3V`XFL5
z__cK=!R%%UA;G@zO@FDcFp=O&76Kx9M?Q;Y+j!%8EboYcIo_dNc}!R}{3+=#Nt1__
z-IQ>&H$nVOux9awH_q=!fH4m0Dhc2<VwH(M@RWUSd-ptQ=5<gMoa%F^qpw5KTEKTr
z2!ItjFuoeY>m9?TsBqizBlk!jw@l)QUd7K|@-PIPNV2bDhBqLs6o9W-RgOMLk`*@%
zXHU={6iQA6=q<#F=aJ_lTy0Z(ycCl38kA*#BDw<0fkKzZ<#dfD1%ebtO$3QVMSw{Z
z2^Aa%-;?$t=TMcX`_QL$Z#9@{BWI@&x=c+_!_g-S!mj}_6*FeP5w18TA^(s<UHT`1
zdLtl&bmPK>S>>cCjhM3DEZMni?h66@4+fu+voCix$y!h!9=XqQiOAN2zU{SHhs`4H
z263t$^3Q^-g%MT_KlLbMbFh|nt^o$F>&YL6Ql|B^dUg8v=y6GOPQt%Sj%1KP18wpA
zXZT*71wgx8BAg=Q0<>*$CbgF?3CPCWw}?X3x7n=t9Ezds<W7#PMBoIqlQt#Jy!GUN
z<F1!Ubl+gfFUYX_)Wc<tRV=%#R0#Zxh<V+lWVJDbJc(J$J^i+YIV?)&GBIsaW$5Tu
zPRBw~;Mj>}-Q42RTIKVsCx@FellA3T-fQNrP><Y=(!aoQbb6wMZsAaHzlObu@?Qvg
zkV0cxn2=_g4RBsz!Vm%$8pectL>8|;0H)yH`%VQe!B@W#8Xzu2{hU|;>3tfJ0*{F}
zY-Y3n$f5c9Q9yb4K%lW5dQ_U3gmoEzkZV&Mcdk~5Mqx$3>(TD)XEAnz<EO~(H`bai
z%J?jcVv^XjjIPGCQ5*~cYmGo+rViCNCL1{5O)y!rRXeVlCC*O<@^L*3bh9J5GdrzI
z0rBsix{k6KYKSm&Mo1Xf5GDy&&blJ_>jN~NChG5kw)KGq%fVn4yH^b2nwXfeC-w^A
zY#3amkPKx>`ocHS3Z#sKUs5I{-17Pp9|xU*^Z}lrAM>Be7RC_l`?^q!T2PY2cZVV!
zYe=2WJFsvK`pDZ&XhdbeiA%BY&u1Haj$h}2OcMzs14=@yWencS4Wh1J;vH|lcT4Ve
zE4+9m_SXM>OT{Q7_d7ATC=Dbtvc~WLDqlG=70ReW7?o9;n-PTi^e@^Fgi=mMzseMj
z86GOhkvb&q?0L+cp4TNL<45o)rizv_HBDxjJh)!POQ(|%z?H=@nk3=d`D5VT-@b-k
zC32Y;1U42cfeP>dAmlU%jgW2FkONW(4<vZU&Uo!K=Hhwo1GRqQFU%8HbaZEi#^Zm;
zvJC9bu^M(k`%jNDJ|$L3FhXJ0+nQ9<oXiFLwdxuTe+L1g7R5gOsxrWJecWwcz|N!A
zt!ImS)9p69vnL13M?R;is4GrhTIc5yWV~LD&O+{^djqx6%Q6Nn;<0X2C;vg6IhgN&
zc4%vaA8!YvN$rspsSQ!-$XC=@rY9+MFE2SKRIZSNVKI$pRnYG?a;OYtCo{?1XK!8n
zL4eTlZky=lhEN^bMU|ur?F(M6MWLCy%?XjM7jJUViXx?hYj>GUmH4oau-#8T*DY&%
zd#-&?#+hy+(&udR_9UpO%gXCw5y8ab{-Gqahaj_E%ZvN(K&mq$cJQkQk;$|OK41xx
z#!MD*32&0T2zPlf7w|Pgk6CD^K|bVYM!iw|QYTWaohI$Y6%z?&+Z``C*7TpG>l@-k
zDyc~6Q;G~8*`n|;WNQ@n%t)UI@^sONUT&liZ@Mc~2d`NE{KWyxx<y>uC+x1S%QXi}
zfA!wL`s_V;<uJtla`_2PbO$&h68nc@*MF7@0&bNpb`Xy8n!2i9^Y_;XVR1U9J}b}5
zjaUvvZUFdxq0YA}LN_b?+%`gO?a@OU@LW8|*sQ7M@$i4q7<XTxhr5kVUx6v}MGrOP
zl1`D_XlrOw!N*SklAo*AK~b>$z$CYMk_MZ$Y8p6>4gFfUf(dAg!-tqaMgrmYkN0x{
zVrxY7kQD%U#eUP%lSzh2VQY_q5}l{~cOCjIoq-=_oGPQLqq-TB{grTFTO1-@M7e29
z9$2zb?8Q3)GT6yUcXl-Z-TJr#cmU5kLfMq7M9{VMy0gjc;PianOdWiE%3LgRw0`NT
z$vr+lPY*$Ty3xf;i+r*r02k|F!Hj$;^;f}Y*Ucx>Se`HI4?61(Bw>645HtiaiN1eG
zP%JAnQf`Jshqos8=$9EyWk`VQu)Hq=*G6b$eK@G<HgG@WlMT~mUi49Giu{qJ2WaXp
zloL6CU(t}-5_f`>w)J!Ni@jC@y*4UH{ggG2aPdmyLLxVM_))1`uY9PKFE!tl|F(TW
z-G6R0F8qoK7WY?f3uQBTem=L48=>8%I~-3nq<#Nu{VuJ!NcW@L(cLJIOt4XSz_C~T
z*gVp3ODuRt4H)rs2bp>+5QsNsti?QjliiGz;|PTh#`?xdW{>)vEh~XCjjE9Dq3fEr
zB}Q`{^!r<0Yj5W-$v*dHrK8ihD~z5=AdSlFCu*oBcGzR3Nu_|;{SQFAsOYjEPe{kD
zB&lJUh64d!E0`ClwBG25<ZIVDo+~W547Mnn0hyggI~1B7n_CyMngb#aXSi|kCs=w0
zjg`y-hB@z#dwZZ#9ud)9sDpG8VurUy<s!L!yHSP%Q2>{DQIG_1$X7;yqifmyE}V0b
z7E>pDN5BK{v~juI%1TY@Ah_jeBPiL{v`HOv!dqA=_Aw?mOc_GB#>G#HqM>Tk)?hi2
zc%aiF_blxBkqobm&a=f_76|`G@27Ejv+{*=QSuymj!8v3|E8|=3qRDCK&9mvSHP(x
zlB)OBfj)>jfB(eqgDIWZ>d{{D81=DE2mS~l(a!40YFIM~B;$S{A-P3sJK$F(;#nzG
z<@pj^?D2xA7k^=&iREs~ZlB(Wvv1QHqm)TT(<Mo?V@Pg^Rd{PUssz6#<P;Cy&Cqo)
zwxM^_`yzF0sj>)yhf-fRnp&0j(?C0{HzZfgofF8zlVq6eKriY%l0YvmZ*JuG6Co!U
z7S5x{q$p7Rom#KHj!NUz?vQAmAfceSr0;32C~35(vqvF3!neg4HL&=jb;=BXKnCK%
zaaqj#RTr48X8tOnD95Zg9P%h467YnPk+ZraG?}H!@9L#8VmR{<&J<;ML0wT%)xXud
z2_X)E(WaHwihDX!eVEF7HUmYfQ9{rf^?Y8+|2E_Qoo}J9o5q!fMgu3hO9wPL3G_vX
zX-yBegC?aYDYC$EQOqAQ_jhmtK@}JsN(n5|7&7L3)^Tq@0(Cb%<n6)jSXlbsX`H_Z
zMk-*}WRCLuuIAjhWI8Dvs0ItvA@eoAqx2E()$bk2PCx+l`rdh3q<3^}5(cAADT^A@
zhW7B-RUp2`xwhM^Ux@5H*|1^>z%0reiFNy%fcw6!o(o_TTMOhfJuio4<3FFVi)CTF
zH>Upwa6pg0;<KAQ@BZ(7=Vv|aqzAVf*R4m_>r8g>k&SMZen2M#t~6Ons=t#O6F?a%
zhSs-4R+N4Kd6K=+2Qekf)EYhkc;dC}X*XQ~-j?#XNKOF$PzeI_ks(VhC<YCUa2HDe
zFEof^AG85tf_#qTG#TDGy;+ledQpfNH%(#XTFS?wvE#}GC7s?o9a1r<dUx1&D<S%M
zksPc{Qkf}}i!pUaZ{(qg#IscxjHx?u)i2=GNoWrs6=7l`$xE>lOuI#sez?w+WF`j8
zFi%AeE{A;_uBFwyi~z$-vfB>LOW9o;QFuzJM>FZn`-jL<No7ccSpH@#C_n?Pq)9Ib
z4iU-GZ?LtoQb0ZSH$sfBxv&+oDI~L_#Z+aovk)QtG=WPXavso8<yJC=pm3oqFY`nt
z%fx1gvRe~@v3|F)Y87!L!br}tPp_JI_0;koyHx@19^OM#WtZqP{zP$ZKdxJkZi|qU
z1!@AIo(j`ONvfrOn`LaF_64AO3_$e4eaiGs10`WArBBR0o%z1(#`LV8WEp*fcp;Wt
z!~p|O-1|eH>R8&d3ha{J5IUVpy(P2H6BFB+T#)spXDESX(??-U!&oeF@+^$kD0&2$
z5S>IcNh%g*OoJ$6ma+qWl-|FP6Q@5!+=Q-Ml?y~n$)c2rqI}0rOQf>6*+@0KopC#R
zCnFX4*zgbsp4<zBmi8=7C#Fe^7;+-u-|(@#vkJ&P8L4jZ8E3uQ#n1()gYO8S3ilt`
zz<9UM@v&TOz|MZOsz^L2L>5hq`ZEnT6E{4#{76!y0|WQR9i!i<G+I_jaYq2k0`4P;
z4pJr&WTu=En;l7T%$NKLr6_ge8O8(-*Plv0M9WCQ8pbenr*G6UeND22#-T$%Tq5lh
z647kXRBbD!^mZ0jdM0K;tMAAS!AA_WH4AgF3e^#XobKR6iXmd^!S}>NYL+&&ALtbd
z8rdgs`;K$JS%wgx+cext^IC%vb6O=YCFhN3pEz-A?*qj?nj=Xr`_>Qlst_pIa)d%Z
zeEf@YsJnH0-+`Xr2E2badX9hKcpnF)WK+H&f7WVA)NA(vxdAxe`v?AV>AB>5u-c;|
zTdS}}S-3MuUgikp!Dyu^l7Gjd@5tXOa$7AN7%tJ52)(%Q#c;fxo+ANUjXWu&VReq=
zteD(Gp8(|14MO*XuR$*~)(@%$kGI?%oH6oD`g#be19sN@GYOT^bABgb^)fghTD_dr
zp6pdj5ut_5i&%2i2TV(6U&UV-*{JfFmJ|W#cHT<EsQ}~1#b|<tQVYxv7X|Z}dLFNm
zz&NZ1<2HU*hFh*_+A^u(01vBU?pD8ddY*>+GZJ&X8S~M-Kqk=E>To`RZDZfu$=xOn
z-%t=%5P>YejWMM4+q*f1_y%LhM?g0>X<xgyw}X`YG4X^w+uKTWf3|b$Hrqf2ah{-3
zio{gpLSNDJp}4p=W?q_Agcq4yDnf%;YX!Viu)#`VG@#B!RA2!-6s^@TQ=Tw_Zaf5?
z3A!XT_NJ0=gRvNI6T=XWh~;RV)5F&-aVDApCY5nm84IHthv(%6$3rcBQA)iyi|F2t
z-+I~S{>~BdCYZD)Sp^3WYR(SL#_QY}Jc@Pci_87w9vp@{iT%66zrGOoKBBv&)`F39
zCES9duvJpfmO3XWH<lEL(4xq!!!wjS0~lek;!l8gM&0dq^N9uB-`wt!OmAdCmE=V3
zOBKD!z)g2X>Tu4?Uk?#7^3FkZuviVwp(LTo<+NE;1$KBz2@)HpQt^qhLZ+B2IkDZK
zx_bxGS4+yPT2i3kyO>Hr5gYZ;h|AjCtYjN77q?D`RxZAk#FFHa+$7G1Z9pFkgt_}t
zw#ixvwv8;vb`KFB^;;Mr>WwKV;yVg}7MDZIBwEHIjc9co=E)pjRwMCYv-(uA0b&-;
zk|`gsMVQk4Mj`KXN7!>tAyn0(w`BGx)~H8u!TVH7SX)RWC&INoxrY>4y_?XZEFW%3
zk#*Pl#%&~n;$tI-zbs<^tJOEq8L&c*CG#=}=16NLiG5K$9Yzt}H1N5*mo0&4O}u`P
zc!?d{q!y&z!ggXAAGQI8N?vX^R;za2nFG;kvq%U`&)Y>4k8YJBu$c%a_SH06XA8;{
z{D@INoMDX27G{Tsh`GS8Rj=|P3uAFlF2$Z*kG2u}?B352NRpKS1mS{d)#1EMg>|R(
zI<X&#_l0G@G&i@qC-&8i>c-$!*ivVCy3N?q2lhF+&-U!R|FZePUhVzjc*ZWD-8hz1
zWH8l0ynSjZ**cKY?I09ZZ!s2(ac54$FQ!5<YY{6^F*3=wVIG7LUrEJIS4p87Y`1VF
zvlozU7ppdcEhF9m>r%&KT#<X8PA1+`WL3SutX%KrcNy^ttQpK1wGUOn3b>*U60F+`
z&r>PgGmMoeW+fJO%Q?uHP=~P0ffQjcVVyJk?M}+b`%M-W<-kWJck8kAol*W-**Y(O
zjhc=viPglj!fGI5vq!41jKKGRnRPL-TVZC^p5Y=(Pp&N73{$%~W8-k5kr9z{D(}0N
zI2l1#oVBjQE#~I3z5oTJSQy84%a6>X^AmTy_x5)1O0{aQoCWdF!YkEio7A%a<QaLO
zLb-uxL8e~-c}V~zAQL(Tw1GE=-fL6Z8%ee!g6FJG5y8_?5TX8XJmhTP<XLyldh`qQ
zA$Sr!5=<(z8jgbB8zDS}ha&Z!_reVa?87Dl1;xvP9>!9P&Ae&hWl?(|9ncNy+XH#Y
zGWCLZV&JKZA0t{#nRjwm@kwC+Edm3&FV-$N?bt&5+<1t*h~Rv*ww|w(l6e1~QoM3z
z;vr(-;54lBI6D9MK2(xKMnke^vd-qyI}PUr-?Q1)99XxH7I+8lDj+iF4zCD2!)LLj
zFt>ZQ`~{q|6hjI80&P;QiTKX-?j8;-vzwS}(Hq`ELu^Zl?WG}pgr=a6s=Xbt((d+t
z?L74TxA*JTh~Ia6J0vhM%IrQ%F}s;>FT6<-2;gA?Cmuw;U{;|<YM^9NhYab+aABWt
zqJ1KMgRv(`Cdm^p0*xg_%S>=a!-$J8AN1PT_t0w7kHRN<Eq-n2tjIIWZY+60v9844
zduWoz?}^*kLF1oF45VQo<1mv#%(jLX`;<>S(fQz0FBK_?+skDgEOHdC%+4T_d7l`a
z4^k((dm2uHC1YS5y)Xw*3p+EljeBi<EFA`3%CZ9%V~CtiOPE2iCD2}kNZ{3P6<&FF
zyj2Eb72c~1^v>-~!+H*U8j@t`eTlbsFPuiJ?-$9bCU;BVy(MSlQ;f?<S-7c`VzQ4D
zp0V1gjI6!~FQ87L>o$l+d+heg{^h1?Wram0B#(>bhLXZfi0+yC1;wd->#)cuGK6*+
zK$nGI_u`}cN%ZUZ{3QDQ4BOkmTPl-mjmFX?v+7WS_)57~Ltp<~+B3KW5+}LoU<4Lu
zAq*e0!Az1i$B7244c>x%2`w-)fClRT)BtP{4ivG*z7*5Tgn>>ZQ)Ma45=aJr!I6iB
zv^_#V5LlpCJLJU#*e)~|D)(y;)&U_1F_1MRV7H3)+dSNG9L_>}g+MHp8AjZZ0gqEp
z7ge-@?I>IHK9-3$a<Hy|923bP2#^+s{0yX2H`JpP!w+q+uDH6I@FW>K%NPz4IL>lo
z?vM?X^Mi1SKx@5?!>l-i8LqoCYdMLNLwEoS*bR})@|q&T0hWpQMH^!Y-5JEjBUWRu
zcH+bUXJ>=(;XznK-b^F0#-J-HNepKtoe9EuDqeg5TZH0RuD=L=H8>ZO9s7RgxsyLA
zjYKub!un4nZHWPXcpZw;G>+68#53d-l!;u7h&{<{i=fAvv)afec|`Lj0ybNb`@63o
z(!WviEBom!;I{r9z-_-^6Vk7)J=ERulg#&PZSND@_$z2{hkS>GJ&ncv6f-a>3oz;u
zaWD{BW#}D66}l0>dww^SAYz5LOj31krjl$ZHZdY|BH1CMBANFDP(_l4#~0#gLC9X5
zSZ*i~65M|(+3U^ah<=dtkpx&D_dGTMBlAuq-?bG}8irPpKM9i_O5G2>O=F#k#B@mO
zn0>{W1Q#1%L*x~V@2r5Ohl`^fHkyD7DbdTSq5~q8T8)8zc!GWc*cJzWqf?r}zqIqP
zoCiBPkjfkAtE{kTbkY6*`qkn%G?Q%ImPHrPkM<^EK4vnG>oK4ca|Y36WL_45A|Zj6
z)+P(@PvZT?6`>c-Ln^fsXd71vljJ#RMVNIR*O`$_&75W+{AF#s#N%bDBw|2Q<Yep+
zVEHS<$x^8%13G{+1*--!Vt~4oS;G)8^3^|-W=N76i+03erV6_{k^K6WGKg=7_P&m9
z8u~;3H@68A=SVUz^h(Cs_pbHsblg4M+^KZj25#=}2{+^20AWM<*6f<#`?*Bm7T)U7
ze#?TzDP)VVaJ9yRb4`I3a(m~K>htSp@005DYiw@^??`e!^rUD=CI%_Xc?N;!TSO0h
z&>~T8EcwA;1^`Wv`AU5xB~W-EUR`lOa4q#TEn|a#$FMb+9zF>J$*v5g97pgbHgAA?
z#E@KIR;;2U5Bnz`76yE){M=P^1;n0&ag>sA*s4Sdm{&?Zv|_Euyl0&V)s|OCg2J_0
zD^J)7v-NrldY9@0Xqbod0qCAfAqy+p1JDlxCKk`VAFC?(K>{yQbfYi%Kr9hFOkYls
z0hHbwS4CGT;0Ir;r8L<x>M!vSHlGL|xi55~qIDr7&%&52XDZ4FLJ%gCaoGErFCeI5
zk;Dw3rm>cIrKS=yXeyDEU8aX|)LtzD+eGq3A-qjRl|qf={F=wD2l2P6KCIhJpmR)K
z6A=rEYed<wY=-{Kt=;cja-vPN?2wqhxHFtF#y<9HlZu5X0q!l-Xrgp-F{e)lp*`+5
zqem@>EBIP*G}j&~69#)sQ6}yJeIwdR&MOq;Q6#pS=T9DPN+!NGWZJ<eYN)x_BmybU
z<7YHP%!}L|6e^^;Y)zrEoT90n&~2*E2k`d&knI6xRFdH>)p8J0mdzrPp*yAQTD0eQ
ziL*xoiR`J>S04B!4SSwSxtcuUIaVG{GW&4~%=nUp-&uN$Svd9P1$MXI&Dn-@>nJtL
zeCvO`Rr2G`jO**l4}|%HROpOd=RY3h2a9EFN#0m~0!ue!%&MY6vZO$`x%f#vk-o<=
zrM<qe-dubxEM20Af3#h6m!EL`Sh{yEfP`;>ky$+_A%ioqDc3PZD0ywbAk>SBunTZ8
zOQG3aenLpBrS@d5vYLkH63R0Ss{)!=M+lj{B{p(|mt3;mOeG;^y+h_1WAYLf3p21_
zB?ME5jyQ&bKM$g{14@{RYbA^ZF$Ra<u{Z<{@4mv;+S#5)XHP{vL)&XR1Is-&B$GGq
z0Snqf5O0+|cu#^@ido*u!It5w6t^q=$1xQ1!Bmd*th;3K$4w9=d&k&koJ~Beh)?)f
z-<cYrSg!Rnc7>7by!>s>4|O1F98*gW*G&+8)tbZu^f<8PQZvW6J=XvbzZVEgzM)_$
zm%<!x>M#?FJVtjyQ|xsTMAr`lITIO$5sf8x2^xawcU8Eaadih)8?C4}4XySiucK)k
zT=cS&AojxvMLIK63r|Ed0PCzJ3UT09Sp@{n6odxGB3c}+qO}^a-=1y#HZnJn&e4rE
zY=FIF^+#dl#sZXE4DkDx5cBs*5RoP%O()kDSP37?t)((l#P_OMvXp!9fs$-%qctb^
zpB+Jj*p%V=VPiyEL4D?uV4XIwtM_R6+bROPhT;iWNZ^i@BP&81V;}U|MG(0%-iI&o
z3<^oi60j0*k_BQm6L~K#iD0QP#5@9AHkBu35$2qYI|-uHP6e3gOK?spatT2@%cS1P
z(pDRXz!1=yg|+KTVD>=#Vu7@_NQi_2Bb5TF!KUg!FbMicMfNLXW%F1imkfyz%z;;A
z+iy{ofg{law%35Z4MAk&5m1D-mkKZlGlmiIJJ?ZbX~*uAAUb-O-%Jnt)jMm<EjhHs
zs-`#6#N8Yf->;)<H}UHxO}#)eEXp1}j4~z(HA|I)kTf7)5osEWV=~8p>uP_y=Y?1i
zEF#TUe%PwW;vf%R%Jt>oAwyP@MSx2TP77ie%Wal#Mn+-oG+@r+HbM_5>~=A_%RqyA
zf(k?KrM6im#C0s#tdY2$U432CLe@(_7;{V)!o?U1!CQyjC0&su#Z4KFXDGNfsx4?6
zx{hJHrOi*F3&|^P<;>BGL{u<GdSUZs=h$9(VV&)A&a~PP<L`&v8;N5}Y(uaWlCTlR
z#(t-gw3iz&6Zv^`4<+xj;%2%wOmBw-7JEkBX$@lUDV2Cg{FaKZ_`O>Z%TYMOgH9yy
zmWkSvTgZ9qpKBF^*U75|#a41a#js_jO}rrUa3PSC;r3M|FS83%Nz4gB&LpA=B8bX8
z(;j?+lMW)ANm4S*z+4jIetLpgLNu7cSlCc33l61x!Lo|;avoI{=4qwdaKAzRDeV$>
zkXnnYk>F>m$1KGddQt=ib=VB)-fX6%7FATjq3HpG6<&!m!DP)h5px!D*`$l$_9dN)
zr6ZLhILyQ3XK^*k1oe!~)Ryx;3%kZ`wRAeL3~^nWiJ8xgGh5AA#a-XIB8-_)0Rs?g
z#NS%FXeih%lJ*^^A>D=e-U@Xrx*}h0%0r40z$G+G)GTc6?NCRgB}?Ef3Vd4rl87${
z*QzD6rlKzPrG^;rwq^B2N<(^!Bu2h56;3JzvQwG3_M)^QEB3^LARTl{xZ>VxcI`<R
zJ1+1jr6_gg4qOCc6<31df@h*Gn|dojusykYmFDd5wY0j3FM0>Ea~4(*uLZ;N2H}Z?
zfx_}L>qRAUJcl5HGV{LA9Fi>YVMYol!CH6>u7mh;1K7Dja7JT{>^KYph62ph3%4f@
zv7KnD0RSt+CaFP*o4MuAkoq}>mA?0U(ExaSavIRs4AU*cs#`!S<k)9-P3}D8a2Mix
zD}=L|Mzsg=Wx~j6R`MDgNWkrPCceVkP(MwU;^@tONyHa(!V(=#yt;1j-M|a1Zx%ka
zkkc@7*x^!HN?S;`7?nms%%^LgeedGfL45nZB1_`sKPwxE0zV78j}6*V$_rzT<G06>
ztQY0e+`GJ0yj=xs)3`f{)tECg9dr_3R#Rd$Ac`=ciFe6LmMNQu;rU=KHPVtnVbG8$
z5Y8<7H5G$YE?E^=qe-XaYdH`kN-32L4&0?u<}}nuFy!C3WGH|S#+Y1Ip(p1-+#yp*
zKWeFKr`w2cDuoQ*`E$+M0X7U;4ak7L#|U9$#@aDJ3TqkNeY|(pzmfK4y}{pZgQlV`
zO^d<L1Wnz?h;&nXJD{x}2@&7k-c~dg1<kH7R(!eUmdlN!EcH7qM|oVQLqH28R(!+F
z&$I|+gXiG07`$?CC)TTmd^fXJx1+VRjhO}Y95t1{B^NJN>7f{VrjZMh`5@pa$|?z~
zx7>Bivma(S761D*^7NfZ3Z508@{MS&)?OTo#TudqnFkdIcB>`lYh3sV?{MH5<WK_5
z#v&10MS025H<G;Iy}>&9v-*)cR%W!%G<=SQIit0r$yoIO*2#M`s3Z*rJqqU#{VdbW
zY<Ma#O9>)HIEd>U+le-Zx4V~#SE^t|bU7d13JvbAgSEjg6#go?ownNem)pIx?Mr)L
zR4gipj`<UcG{qq+JKdl@Dw+7k_R^c)?UbK$FJmX3F(DoGM6yAq$|VIgYN&akMwgE^
z6kW4&sp6}u?)(NlaLK)$T;*kvSs0m>2trP;x|jzNwD~TALQ2|C!*P+8rHlc6kzr{X
zS<S~9s(?)GexW|JteCmm<)H_V?K&cSKoGTf>yE@ikyc&oq!f6=G666{3B-Z?^u@S{
z{5$c`hqgBkEmeZ)TW%@|d?>}#X1UdTKRP$buQiZFpjHy9Q-<e8Pb32z+JS*+>;iWf
z2!s;`Tkzvj5?Y0m2D^o#)RI*Smpd4y<#3arw<-<_nuXu-79&O&=xuc#yZ_=`FlWs;
zX-V2~G35l0!r#N#)sWB%$wp<6q<I3pcP4ZjRJ^^S`v5Z*nO%h|#Z{k(_4=KG8L34C
zam?hi|Epy}#t=jX<Eobex>$^!xSk=24SfuwUeIy4(p<{Sr(H>w(OpE>gPjW^Z@Uv+
zco@l8*jXu_EGr2YSC|l_D;Kvc(9c2u31A<q?FTvyLjr$}G!9IGoJoEMnTH_G#QtC@
zR765AeB7v>cUB+|<Ey1oNYUvumq}J`d~pgfw6XJ*)VLrS3jiH%hjGc=Tq<>NqX-p3
zc%!|sKy!$22qv(oes7&n8@Z)#NzT*j^g%A=mgWNdu!fu)Si7YQW}opn@_tJy+_EQV
zWC$-XEKh(FugO|XvPn2+rFWfFBF$Nn=xx|AE1hrEd+r)^TL0eaV6g{-a2C0XL#cp?
zZ6&S|G7*Tf5DOHiI(z?`&~2;(khaktY{+sq_QMk1P8TxQa>=JV5%c6sw4);ZwXz{t
zkA((^RA{E!QCRc77;h^P0OBiZwZY|k@YYJu=2VTrB2WzcbCruH(Km^=7FC;~xK`MZ
zy@S8TFzo!;|91IKAvP%sf3MfCC*NBQbOkjyPi5$*_Wm`=k`1AeZzwv*H>qR|vK+yk
z!7OMkXaQ4YMq=C@N|A+uScM=`(-@FKjt3r;FyEdy{q;q*29PQw(s9LERYJQb5@ut@
z^v+ynR*G1BYb=V9=i)!7KH@!@e;wzFtwT%Zf=Wy5G<z>`xR!esrsBP2l#MX!L0B;>
z3Czt&x3MAEa(%l`#eCMjx9n)#Hqs#Q$w>iNgL!-3C8c+g%WfdMP+0uxow6avh02?`
zP(QnkorJ)F*{pZ7I`nbbN$#$_-A6p`WDvbTI7agKOk_XMY{;r*1IfZ+oW($b5GAdj
z+7oCp6ECeyi4Ib7#N@GPWa2^JlTfL#O7{?Jn3fN<?qDCx+`tf#y=(Qg2H?q!=p;*T
zAYXS!rB@_(bu$%b$kNO5i6^=f@t*>GtRiS`B#xtKLPIf$*WTqfS>|6T!y3){UChO_
z7>y%kS7ogMsqmbd36u#*j_XPC47UaLuqP?;tT2d(W{4wbEanUl*As*&iL(dnfc@!7
zqIfJk7Lkc4(Fwz;C{_FLuw?0~i<lz$GU&0AB$089BWnUfV?7O;f-&M&;6;OE39e#i
z@@X=4&n0%EmOL=Ls|g`3nggagu~ps1m~NmSW*02ON|)lnG?h5yxP}o>?L?S2x(_G5
zFV4P}Uqk>@`YfWmK9ZE2oOLU8Aki=uF)Akudt!FC;q;De4R2&yd9Sz?+u|Zmv!7S6
z)W_1^z{tZ^wq|A8M9a(tEw<D*1H0CV*8nV-E4rAb!N9&e%#(Qe5pBVWT>-E{q{gAu
zUWDIUEfEP~LNCJ}VbB84Asmd)o0^l=%qO+zWrH26)0l~tt0q<vtJ9(h(3q`wMa9Km
z&AV(E-s0C20iBtHUR^7d=4+BD8?6H|GUn`Ua?ACB$#ILUMBX%veh^ou$-^(kJGe8L
zCONh<mUt!$2?mCpinLuxP<t<8;GBnClHX;LA%-33i-*!!0^4Anv2CrCmVoQ6RqsQ#
zJja=&@gt@M-?o07_-+(_ofg~K=2X%NnA-v@bQ*5iNEmYIP5()6rP!dkmvcKrBpj;S
zu%v&*4#~|b*HQ%f-xU%VmkQgoTU*&JOgwut%*eZ3uQ9gTi@^J{RRj`ll=$bFAqH_m
zvUvC6#JBtZI`P7Rxn#tpiA6jDo3RW#?4+P<6N#ZREQd&`=-d>do2T~xS{65}i+OoF
z_YIKlqTU0wL=iyIEY#zIJ-LIB6719?A85PW#X7c@|143<yKC=8{PU*IPFz$?A@-?;
zEXmXb3Jv|_6ja`#uBW6Ib``z=c4mf;Iy|W)lCu;m|1dT^5GvaXzvCv_ZKWS>JjxV^
zWKU>Dbn0eG_j;kdk!0esK1-uG9Wn%`9s%EYq4G{ar;uCBHyeAsM^hC|go6psMZJO6
z^DQ`U-v<{h-x>H&Wu;Ka0iq~bQd$f&lI0^4TyQ9NHs+MjfJ!0?nMF^f!aS_Npxgf(
z2TaC@5(q_QhH@s&6Mqu+)@u7jW;j!u!2U2Mi=Vk=z86$I6;B#VvJ`RCTHI0T+p^rj
zBY+|>grVk2=8vHdwO83$yszM?eV<(<><mh>`*zq_eXbPnWGa$)Ceg8$EJ6INQbnhu
zvuD9Z-iIeyBELmA6P5^9(Bnc<SM}o@F6wn7X*i)Qtd+&CNQM_U{M6UG(6cuQw+t%+
zAOg~zC6!3Sh{uzy@(N&|7%?lU24WE$l6GM%i9(mZQajB4zYf1b6OLAJAfSt-rxj`m
zV1y(M)diTDO0tY%wtoKl;%beqH4|zGmB*hdAKy8YP~03TkXN^g6u|RfHtY93K?(b`
zcPodrUGl=X&xtr^LhwPaOAW6t!v(jD8<A)+6%>6aj5HHr1oDNrKuZ=xg<nD(`0jDi
z@VA84oA4rTspc0Bi-u`N*UPfVz_tbdvkZ1Z7R-ef7L{B7TcHX70VCrGKH{9JAO&nc
ztHXHX%<PEUtfv);biXrC9!c(sLYa%WK-+N+KENLgjD;ACdukXKlQ;@=Eu=h)Gy9`V
zc=ya?$xQegb|C?Q=8)>6j<-V_!Y(-_kUh=SIT16X**#J_NeZe!=0(+JR_5;|PX^-u
zgCNU!8b{DZA;E2!A<goD^YA!~1GbR)gbvHkL40Q<4?R!?F$cJvpekE&At^R&Idx`T
z;)j8CoDYfJFhGs5OAL<{M+4ef^U?ArtrTZ)t1ZDPmi*eBYfF+Q{zg><cjX>ePkK=*
z;zDd#WI{5(I*DsHr{?I+7>tJ~H4QhqCt<l`Nf&HUBAe>+?30%W5l1Y9=D-Y$C9dsp
zDPb#+Cbol85-MA+f?hcD2*H-7C$$yQ@#W#JutpYmid(=aoM-c=6n7SLu!zp3<vK-d
z5#`T(#&9l~g`HBGT-~jcax0dUHwTXwdHU=YVu{arRNYc6`L&@OH(iK(8eb<y0@EId
zBPQg%Ckf4F;(L>cOQ{*J<C>6=E4h|j(Si3bS{``Qm|#WdL<kdcxS(Y2wCI#cxP)jH
z5h~sb*MFItQ`ZU+2Li;Uo`rG1I@F!mJQHERK27l&VpWL#X0Fl9z0<eN%-awZRzPw<
z^#ltUNVNg;bAwdIS}AXh!>mdv|G}CRlF}K`g1tw~nM9&WEiv(sd<!fPk3!<z&{M&n
zEnTut8lr?-Vq!)jj==yKH){gX1)Z)Wt7=@ceJpI(>Who5B<;j!QgK*8lrapc4s$aX
zXGw8v2s&a=Y-f>3e*~AAupO|9R03yF2rS;k<HRa_VFR1W4Pu5;A_wMT0xxJk8naKS
zqkAbi%V0rZ6<|iG+<{EIJXOdm;!I$iT}cVa?F1PgccMEMEXz5Ngg`K2Lo0pGh{W62
zuqHB=6+yLF-9JPltMcjkv5KTnuS)Kn$7GZrm9~C~7g5=>R4@yx4T_+^E{QMd$~_u~
z`!^PMehZE*!in$8SsRJ9EEfNmsnJ-(pmDgv)vf}W*i2D>_Ije?=>EUHMSB*=EWt1{
zNw{gQOA*cI_L-X-w^AbOa`pd}Z+nuUG>v^V#lL{R;Yn8P?e3ja(%4w`x9`7xesBx9
zt>q&(XS>`DNfIxmI~0j_NSt%e!q`@%;=S~|s@aQ+1UiUeL0pS*_*>mP&`N6`YO5Cl
zmdVlXB-Mt_fKZIXA-B>-b?Cu@NO2R8ykxPN8o{I9luhqOLbY#&0)&8N4K)=`A+L~H
zO%>C0|Kz*p^X8(yzWV$8x*f%rUwqbFx~JcMKm9}U{fl{WdFsEs{ChLb!({%`V%}WW
z%ZtR_toDVA=09FtoxPkVC-Wb!=JVw2x_P!}8@iewU%q@fzc^`b)`P#z&(42;GQU2a
zUo0LzPDa<sqUqs>tIOA~Y#I1r(+kZlUNjF}_ibDD<@M{c#o^KUJUP9*YRJjt`RMUy
z?a1#a?@b(4)GSZ)nU>|jlgYbA6!k2q=$54Cj%yk0k-zi95vHAg_nyht`lkdQ4o<hj
zl^<fg`bXPI-g_RGBUZ<QtpriBE$sUVFgA;zG@cE7X5z$4<)#@TcVo$`BXapGr;WuX
z+Bj%wV{r@G*qMa<LyBecxwlE}<E5D&KP~P2Oy}+Ayt{tjM>Jj=^$rCWKBn>ZPVQVt
z-Snv<GH9lHSz$5+&6Fh9hILB9w~+<w3$6ZbLs!pEJ<V>Y_4V8n>o@bOd2)EtlHH@X
z$>`$ZY@Ynb<?HK))cwoh<G1dw|L5$YA)zlDs`=yN7q5SRG`~7OyLfyu|JSy)Swmb~
z>U=UkJ-awtwDi8A^v`B>QdarUchiuq_T?9g#j8Jj`Q@88Zyuk`7pIReuYUOQ>h!q%
zU;Fms#ZQZPc!$mCewbg(uMQW@2ph(7c6!#*^tQ3XMRIj`adP?cQF1YFzG_BsKEH-n
zI5OGrfy<X?i}sg?*U77f?7o~gbT>JgA0NKHZn=hQ$J%d4{&L<>=ZmxJm+fzxB|B|a
z=VFnZUR}Oy-oCuHX|`=&B%`O#pCtc2d|YMlmHQF8kFE~SE?!+;o`08Cy{m4G-!a1#
zNjtqAH<?PN{lc3~6OY$|s(?RX61Cd5nq?@$!G_)_oOsk0{D$YC+m**<JGh3SLEbMb
zSvpo=jCP}#N-CA91RhpCNuIO^wyh|lsnKGL2XE@;4i=vPZYNd`tJVsR4U(9J*_)Rc
zCe=7cF6wF>+At>uBr-|NQFdb8V{u!sa@}|_OL|C)p`V3404p7MuU1|EG^{YlKWk*A
z?(0CU>b#5Er{XIMMrtl8;!ZN~F%rqLvYI%r6me2Z+&U!bA)tiCdXK`BY-@b?ZO(q_
z<Mj26ak`M9n1TBnUo|UOgq`gkDuQ*8mBlBr^5Mr-caasY172QM!Uk^%u0G~K$eo0u
zO}#NSapp;FZxRR&ZCk*M#4uxa9dxFz7)z=R{?4Uds>MjNI(&;r!-2<*H7=cpYdB;|
zkwx)y0sQZG3Xvl*U2Ca8geg8#Nq>jI+d^S5jK+@Ppr7>IH}a8qf1cXMHm~geuYs%-
zH<6WLwy(5O+?uQyhxWGF#Cv)V#e*Oh+x$o!`|tpdlW=iyIY5$HY#^>XaG`3=YG)j@
z(}lDWo4J+VaNA`WchYdIrs8m!i(NL4jsmu;frPi$k`K{J-_ai5!Yz?IybZa73>BN+
zUtTCJWMW<n5+Ke_#GWF^8ijb^k0m7Dd{LxeAr|4WxW(3;x-V;lyDa2}HX(e(n_x7t
z2reJ@nt1%Oj<eI(;d>()Xo!;7&Wb<|LVH$+z{hiTNkc^#m&M~sJO{EBWPU8UU1*se
zV~>5cQkpI+3CH^qBZ%CL71gZ&J`8^gIlKLxi`|SNTlOigpjHtK`A;GtEk!rJGn}5g
zx4w3fxqYRlUmuzK2*+D=kvU{ElqE=x<?dVy>aqM3noAO2;fT!T5?YEPR!jB}er=AF
zn)O}+)cc)e4qss83JALuili4-u(owfJfXJ0FdwX^Qr$T0l#vHy9)Y4DNtV9YC(KH`
zcX>AKB6B^F0?pf5)j%nBlZ)4XCN3UzBsCfXfx$pFi*PEYDuYXI9~c#8mlZbht0i-T
z8^~Oi75hqagIkk1OPqw_z{Dk!0m8Ty39G^;q>_Lqi+#k(KsF|l>d2xIC7rH1=z|$p
z@r$@UNm^Qa1h`AuBl|m^WmP!*c)LNikT6p9!o${$UtG1$-8JK1DISBV_-SfU3Vcd4
z?>VOJ@va0Q6?qq#%q03&i42bIniUb$W+3sQkl1k~y;`Lt_7!4={3L-L5K+chNi;Fn
zJ5CRr55kI?g}*Z;Fy3B6QKUwqKwIt?p9*bxCVLY5Iga{=;q-lsf8xpVP_pnbLzDg4
zd(Hu}Z=|$aU3tk_(eJJ&H3)a6^f^A0Wx}Rj_`4E|LM>TXhEb3N=gP=i9e$BZEWHsl
zPBfP1Je-e7WO?rUj3kLCa`jf_`JQM3XLua$8&o0{oum-hWg<z_Msdk>pbO{+P|w}x
zS?nUy`%0sq$n+|i{u$1v6FcPKqR#e3W+^0?oJ(zn6o>(2dTf_h$s~kp5{MP#SQ7(5
z$}Hy~q)`fQ&myvqYdbiVr7WFvk!e$g0Y{h#bCBp;jfk^QaU9r@{~}4u3K{|ru%oOn
z<_LCxmM|`j!phfc?$(}l5X>?0EV4@)W@o@k{eCY;1oJC}eX!cd<+)F<t>>c-yTRVG
zOYC<oAdR^<OSsP1JKL)^gjq<KZBc(B)4Svq%x)snWwoa?-Nr!Ql1z_=Veud|6Uj$3
z^|@}A3&z2#e0X)@BqLQ|h)T-s!X`^uf}A9ta3o$f;woekp%r6QmRW}jjdIQL)SS^C
zfbSsRR(t@X28t#m0f|M_V9UiZ4I|~v7;NC$SRk}!wi(;iPQ1aya{6&mP;0qbvHLR+
z{U{t(3;WK)$SkU9*hSVi_Vdo|djf5BW5GFbqK1S?9z)B(A}M318$xO;ar3s^YlE<c
zkTQ$d>Z}$ukQA$!yT}t>OZ}!&?8ljqfx;KTQF0G7f)4;n`Yg0M5ddZ?EN1LeuO<$l
zSOZ@QDR#lTrm%AxxEY<<(o4aoVK>Ot01p#U|7YT#z?+siDgs4P0cBE&l(b*~G!97x
zYx!rm)vRg+VzJ+}R7#k2<|9B8ueGg!fg9Mvd!R*WIAvyZ6m3Lv;f=gzr0qeA2xP#f
z;$hC^sj@6ucOR_X#Wwbo?mw}Oo!Q1OXr7(eb|t_Q7XYFHV*n_!q*hYVsItTE+K(iu
z9MlzJ>;pfOCG#M!!Z`F}siBZt0eoT;8(20>N0MwZj;Z8q?-gBagNqK1I+ZLhW)Kxd
zKK8RpJnEco0COyJyAX~-GF6z?lZAO2xtWC%lSP5reMwCW{#%Ofp=B{<ohe%(+ZHA*
zs6SG-nTi=Trx1g!W><-8bRnS&cxT=ka`r8a-!$}qWDeVm-ETRiBSp2vTV-j)P1ch3
zeqtMYrXIV=!7I=9^&2g2@8Ct9&QeTq5U^ZTwOP1+$XdA=*vh!XvkwbRydQ(P1QGi@
z3zyn9MhsJ^xp6&I`W{M&HZ|@U*%Ge?q{fMOZpPR(rkb%No5?!a4M%gT*uBKtSeXXY
z-9b2{wPbFX#5p&JW0s^fAh_7|A>6r0dzOsM8y6ENVXm<WT%<V4mWD^*6}yf_SV_yV
zSlYL1TA3xXS~HQZvnflQCUYN(k#8nmrVw4u8+g6t=8Qlq@P8~Y1~|>++`*0nuCU_e
zg^e_E^1QUiPUM<Oiy6W|CDX}35>l1Z(B3GnIXkm6wLD9sPOYdAO#=drzG1{s91h2l
zO?x23v5xZ{a2_$0vNGHtxp$Ty1g1O+`$PZZXuYQbbZR;&a(e*3n3bR}&n4qSF9Nk#
z%c-Q(OVcj4n2M$}5gnbKnTnMSKnw<Dj&t1NxQr%jvu`(hxtD0L?1rHO6B}K!WGArM
z==_Xi?$8|CwrD+p<ao#EX%^-%iT$1tj9@xbJK5Vnx(`RAOFJ>k=g`y`q_dJi;;c{$
zVl&XpC&Tb$=+oFGPRP(ZgVtJxJx=f5gx<x5_tf4#vEh4X!=KhC>tw@L3rXZ&W|fOx
zl}cy{R-Cc;XT>Rlkk=W#YP68_Lj1C4l8%g3?fbM$%C=w|5`Y4s9*e65`w9?;1V0wd
zHcsJ`iSC45rp&w8Fgs&DJEEOv>SYY-JSRyQ!k?94jKm~!CzT9@0})Dk!m41Hm7LI?
zheefbO~an4-<oCLzz!o}h*$~Htqh%r)(3IYl2`!+c7mFO+91y65^a!)Mr7GF!7;>R
zf8wo?Iv)gMN$SKIoJ!7-LPD@`{Y7-`Z-~!8cr<Ge%%7Vj*3GF{LQ{!uzycUowz3L(
zy>M#lt<}0dvEln*!#BA|<b!=Z*^1k{NB}56z*7MRMiSG82A4^SRm<^(<QZ2&<>*5+
zxh!lSAmS`sB8b9NP<!;u*g<v4DiUvLunG@y>@1NndKPSkzd5oS$e00?qc9rufx^Q?
zi6=qmQOMG;vlX(tYUA^fh0B$M$O1+Vd}^V@J1gW8hhVv5HdI3BNpvK{pq8jni!7bW
zb;MECYdX4~dAI_VWZfG}ya(6Oi2NvAM+kl~THkL7sMTxm5NP84%uG+<6tO1LaH6uR
zi_P!VPO{83hc@XoWt~4P4+04sD%tJ~a23~Vc77u64Y8-A={4-!G^~}OD3WawF~sbb
z0)h4-Fc<B9B9#e17g%9)CWnkM6MX2HPi?oMLo7(uv7!iTVayk_L6H>6<;WNYk=Qm?
zcM2HgIIKt^uEtga0nsK6XEm-8J(2vNc<CVwSweG04~-dwPxjsfz}UeZKp1)iz&Q%1
z-rSwgg0nE<i5LXZX_pwm{oo$5wqQ&!%9+?TF<M}&97~MyV7k8l?1R<c@)p|VYJ<vQ
z>o(&9lxbkQs%VEqXF)|+^_dUXTeg(R87^eKvS_~%RfghFpNfG2iq{h-u1vgd!G5+U
zR{IEfQglXBiBhk`HyYk!Ud-ag!*1pp*%c>#(=(rk6Q0XWvQh(_RLQ_=W}ouCiYfb|
z1)s!}a8W)EG3C>G?!BI!$u%sYHN+M%Kw@oRTO&<mCTz<rg|SgU$ZSvClFXG|Vt1w@
zSk~guAD1*WZ%gr{G#FUyueC5SD?AtbM=Dzt(qxWi;(Kc;ZGA0=#B1+}J$-Kz?GjV)
zp~QS3AtGpeoZFG$GnR6C7FJ;;-~y3`li|gfWEn~dR>K-WV%eq2Zc@^VGLic50=x=l
z5`0jI&nWF7MwxrmES%((a-R~phNjNl;G9eZOUlF`WMZesO*+IBV@Hz1ppx|E6In^l
zuoWg2F=!H(w3WT(*9cmin7(*eSo&~S95>kucQ>3T_R<(-7R_+E+7|9D*i)RK95l<6
zq%7Q}Oq?mfbxH{iL4aC{L!ZQyk6%owZVG=c(|xl%RJRX*=8B@B0@MNbP6UR96qugM
z)hfcq$CdXi(jQ4*{8DRy87<5>51&>Ufvt!EI1U3CfaWuhyaHx9g*`yjm=DAwc2hx5
zrByUO@rJD>>;jT#a|9jn$6d)33<VTI+_510il<n`MTsK=;E!vLa-q!+*1Pz0p*P~@
zKN3NJ-KzAsi`ADyZ#5Aj(A8qmAcU+p;9?PWk<((?-ti$AhKrj<>x~GJiwl(H&j7s{
zgxxjAF7cc#z4!TAdk_IuX(TrEOmy{HGWnbTFl;#vhJfV2Jo<sO;1&mAw-QLKpP&b<
z)k?rfKb(A9vr(5AwsHOTUAHxWd1d|fT{mSJo7QjNbyMwr)B4@CZi&aSdScv&jaIA#
zz6MrUOFRn3;s7~O#s=Cpu~l3%f~6ASnRObixcN{IqI9jOnLzwjimC{^Vez+_y`%G~
z!_BjdHqf3j>?>hz{W$tyIqEt_yTIZE)th=#UE;+wR>P|5iq{kDxF6T0&BE{C0#;Lm
zC!n;@V-fthJN*p-QD%sgHY^ieFRTE2Y5qo%{sBZaE*3Tx5eILttkbC0m*6G@AiFif
zci1OO&fg2SaO^#|6#e#Vwj3XRGc!Nd<+-x_zX+^lSg|<r0PLK1Yi|Hbyzr8WS(Cen
z=&03&W22}h$tt|TYuRcokuDSQ?*f-+HDZ205!%GvhyOuuKxz^A5Z0|crkDhK(Rs)v
z#=hqR1-FQ`zaSY#ysL7Fk&p8-TD35Qe(^0d6^q`|@ElqVwN3pUTSM3ly2!(c>dAeW
z$Qna)03xjZceYN$Mv^J1y8C2lU1Ic}Xx}F>`d2STf7-u~e*e1BOxQlo+Mq6wM7+0n
zA_hs&1u#31*0^Mu2^;J$D}bLDGlYS&uj8<<g*YjfG5SPLh^CNWPL{-0fJb4tgq5-n
zmPjrVQ^6=KDKADc%y(chrS14~y%9ek;?oUkpXG@{z!2n<wm}UUA8KT(=41S}VwQq}
z(hnyq??g`#j%lwJ#s{{^>X`$yC}XG*2>HD@oe%3Lrr?<<1Oo}fMF8WxX>89V7R!Z2
zMrH3A2e%NRUQRr{fltPfUd#^al1qdbZrqkjR@ADApobPc6`j|an624sM7*h_q(K0K
zd4uU|9)V%Bels88lXzi!605PR0k`5RZ{j1c0jE!#L3(1Ouf2emIEQ#W4|Uif1Q$*%
zHyp1ts3;<i*;hEHh3$!+$29B^=%fiLh@g2mchGtis-fKZIEO9fbIb05(jy_?sfhe0
zI3cL(4Ugu_T%by|n7cWP%o@(4t6_EqM8LQPvxK{hy%O_DjQ%Bw(TlgQ<|p%0FF_y7
zj}Okzt``UM^ZCp9#p2-FOVwu=i{#?$1Zf(nI~KIRXoc#PufLgo|8L(;k}n>7@p8U+
z@i2Mt_sg@Bhx(Ee$G@P`(4rN?R|c>u>92fERSNg$KmU6vuD6o4t3pJbqfkE1zPz3v
z|FH7(AFW{DJb#t8`1zyc|7z8N=hOO62j4w=^3C+1dHgJW{GwSuTinmvFTZSyKGKpe
zvedko9Gxw60H1q>K>Nrx_mQpj@ea*rgN;+j1{<cZ(tI}9srgN#Z<^ma`dyl@dOvO&
zebxK(*3nnJU7FvxI8|@^;_TS`rp0NRUtgR}$LHognuF`c<hpUWyw9w(%3<^B;Wd>{
z_+|6`-_zvq;v{)7zc`*RtFEk__F=Yhv4`3A#U5@yiCI=`YQA~AwfW|qP0j!I?DV3g
zSKod&efs?Q*9T9(ZQFkO<oWmC9aP1^pX$0jh-;%*Zh8A=7)3jV=HZ`auMRF664JhT
z&{C>PUtj3+_Wdt+AKm=?dcIHRy?5=$l@E$LDyxlaT~^!Ix~z6NbR<c-`Or1r?{w&#
z!}t1<G>>;#lIFF$Iv8b^ZW>7Qc=cd3k9Ip4&5Ju8jPB02t-_7{EDuJrbL`CqMkffC
zqZI4IXdbT*!?m|zFxyDMN_U<<@_5<bU*jHS@bB19enUU`9rlyu!{zd6Kh5*MrrY{y
zUfQRhP3zY7vvu9}>}S)uwf$^ew|)9)X~m{~%F3-<d!K!2uLslmJ9jq!zvkP6(erN}
zG6cDx|I>csFKBbwnjinh|GJwZthe=Qr7gR-?abwR*#c~$*_)~9Mgo<6<L_!*gfdyY
zxx7hwU7-kTBJ3hf^H{{G|84XvYsAZZyNHwKZtO>A7l&7GH*<B@ezv*&?c(b$?dR#n
z@#pD|B6yze*2$(xG@Wdn#7^y3`HvA@wf3w0&ztG{MqzN5)v7k{cD2K9@7jL0aU$bg
z7}ail3^&hVxWgQVJGQ@RvxhsJ*j?Js@{OC_Jl=h?o0oU$=xTFEH*ChccQpKQ!;UnM
zw@Z`81-jcGY+kX!O)Iw2$6%K^3^p&;V7HUIQy)cdxM?2E<DKTwyth*yo959x-f12?
z^-=cIP4j3T?=+9*y`B2lG>_)-PV?yMW4o|>oV~g@YKYN_)UhOH+oiRwlx(G=?1qlE
zi@AGtl;6<Nb~$&Sj{2(tn|0K$c38T8wOdDvrlVoHxuapaLr23c=WwN?jeFE|w1X<L
zUq>7FsOe}2U1Z0Onmx*TgEyO&u6h2q?aD}Ru=9-8wVow=*j?+{wWCdYw3phmYe$>*
zXfM5Ir#<RtoA;=n?XXAvZ0C;hUa_&G=K1!HnwNH7y1d+c7@FtX4@2|P?lY=3AMfV*
z4l}BDKi-8XAlgx}rh#nesOZoR+H&9Rzb_nw_P5b@BA#6*|M~jj{OrfM1Kb`Z*RSTs
z$&175<ZN-BT)w$TzI`&ePEIec>~-IgD~0XG@!$4Hc;B1DR|jvde>gZhd3i8DK07&h
zvpB!@Q)~M^i08A(p0R~TZ0sVxZ_Q_8uf;tny&F3#?^=#n1$8&}THT{*YGa4}`!QzR
z+~Gh^=V0sUe1|CwwTI!h9yZUR3(e`cdA<8q5;u2yUn=8HM>fqOdXsHg@O=zF0X}>3
z-SdWAZjk=ZUNx$RCr8a&&1YJc2Tvw3SO2ez|5~^<zI^iM>6hOg{&+rrYvcNDzB~(M
zxwZ_C|Lfv&-^SwU<s!L$eYQ9}I-fgIJ*_9tM~~aa|KHd1>&4mSh5Ks$(_(&c-TW7A
z{3hB$H{v25@t_@XvGa(F<%kFOIO5pYu=JhXv<p#j^CfRxc^Xac*{n{=su8UAq9`jx
z)Hn6BxZ{3?*{1olPj~5Oi=|<utm&qHcAL-6{iwZi<>?On+;Dj}_p@O>?&;n3(;6+;
z`)Qx<($CG7(e-{d&8K~Or~SCx(QEy<r#tl1ytjKl8|LGl-fcgFP3O%$-KC$+#^BBU
zY?{wtxAV4pKV`a!9=NAF^iyt;XI26fHuba9d~WEc^$7bdb~Ev;Iyj$S{IGbDeCzn`
z^y}$255kuZmkwI33GLapfB7!?Vt#z^!`0>MR|gmKHwUeLa?tvQJ?QY@didEgcEj3m
z4J3a|p8n<QufOu&efRB?r{5=Ed>1_*KRu|w|M%pJ<Hb+$^Cy3L`j>B#FMKPHk}nR!
zpGV=(pTeJS!=Lyz{*h&D{)L8HSGda`n>TymzuVxBcAXw2uMV#cU$%eV;0xDU7WeR?
zivw4_aIIfA+vMe*(>An(y={MLe`3B&UcPQxcyV}f(sJ--=ie?~oL&6jIrG_R!bU!J
zzx*Rpf4H3S)qL^#>SDPk?QYupZS%=*ct82Slko7t!{iUNVnb~Ec)-rEPp*}R50|}3
zn9Q`EUtK+Dx|<y=`+Pe6+rjMFx8Jzcd6Z0_Jv(@I@XhG!ufJ_x8$J2@FVCjtPuTwZ
z;c{`AG>!1&pA3P?C1Iv~>vydAs(twTfAtUedby3u?^iaKooK#&uyLavK5+g1E=eDL
z<$Ml*JbRVAm>-J6thMmFKQ71em7mD+7d~hxEaoegvXSVrql*W=jigO-yd2>p{nIV;
za>18t^}qj{JUHCkR{Ab&9c^wa+p(>8ItWdFUq2adI{@LF`*YjV-rU1KMu#{w=$8C}
zCq~g#a4xMf{{Q{o<*(X*4}QbXe*drSi@*O@DB|^eao~F5%Vt3yC5Mlaqen?|Ngg);
zWMF$OMe}XE6zj{ulDN;Lb!%{w<7_()aL_sfyZLMia?_EyRoS#C%&m2$co0u)(>CAZ
z{5sV|H}`)e8~-);E?SGvHoqqSzL4dLoj48_Z!TH8<qh6#@v@g6diBuk0@3-7p*sHS
z4!;}!EpPAIpl-aq4}RKAT=I7zRBt!8ReVrF<!Abv<tn$7;_$Q;#SV@y8)2l;;1~02
zceRXkeD^5%=~435pOO36f#n96G_+~q%6Hg=-!$#C6MWOO`=FV`gXX{g^7Xe*|MU=g
zbbNW*+@s5@cbnE;t4%xYV1Afi%&!icUS)yZyqk5t=k@ghz$%fA2iU%~<Qpvi??v)l
zHuAp6MEmIk;k5a#dE*aZVK0A-7tDG+y_y^6(?wYm_5T?O{QT;>hbr##tUdV4r|!wC
zmH$3m`R}8Z|91Pk@@%!uxAxyA54+)h^;tung0>Qo@uRm!$uACH&L3FdjMs3k&;DnA
zut?69I*ql^G`?Jd<uW$EOa7%5S5{?md9MZS9-KLCBsoj|WnFJ;9{=ul52IrxQ8Q=%
z{kZL=xufkMR}Kz?x=EeWMpn+u(bfF$M?EmhDY+(hr=;WmFzx8+=$onY$$ob5m#2Sz
z`t9GI@|JWQt&MaW-67eT=KV)**0z%N`{w`L?%GZ@zy6{5-O=l_^TpW(zrSur8a-(?
z@R8r!i?hZ2<@M@@KT2MnUC7>E`DJM7AwOxKtnc;uhSEsWT=GZ%%MJV9C}#HMA8u@8
z_3*SqbjL-u=4yFHlC^X5Rs5F4jGa@kXu+~&w{6?DZQHhO+qP|+XWO=I+x9;1bobZ&
zxvwKCA}iK^=Bk-hIfr9yPe;sMl5U5m+YEFp2Aj99<M!a(nxwEFntC|;+8HdcOx$TS
z`;!>8b#`~R!)!y@zry8pGYFs8nzpERtQBeZ6@I>AVR>U8wAkWOFPqo80GnRE+O(EV
z3qrSXU;klvvupclxA(7SJ41Uj@FOLdbh1?P!qy5*x?uhH-RJx3&m_NpiU?f>9+*|{
zjMLBR2gqex@cEYDx9tM<WZP_uOfT(MrOy>kYuetgr>_eCWt(+zRG%)c>hsNJMUnlQ
z80nth+m}nmMq9NZ?4wc|Y9VBh)ALr7mi=Hy#gz1iK(+%!sgJf9lUNXUM8opY>UHlz
zesglo&X3(~gBLewKyvYu!_DX**WgB!<u_HRz5T)E)=dk79FF4ZsaI=pT89pO)<h1E
zMvsO&f8{A2exFYZTU%MZ`0XdZPGJEq^Yb6-JcDN6dhMRZ+>^iX|LG==_jMPA2n+y_
z2>!n!^7M@@OpUGoyPJHfimv?<1B&lleLFUiRCO(__kLiLq%M}2NScggbO1WF^v-C)
zX6lUs*kPZuE%}dtwxOp)%9rCU=bK*F-b(>=pa#E0D-Ej-3>f+uda!!Ep_Y=wTFSp4
z@V4YbDjJqp3tgxRFNP|r37Mdv7;5U?MR&LW7_}MbNz`oNsWX+}-GIt0XfI<PTVQ!E
zUcb5G5S2dw9m{eQ7LG0xD72bl0Y6mdYCi{xQA?f1EHo5$nKblnKMR5Atl;()POvkK
zK0gM<H)A3iO<WK|W=O4Uq!!U;4khh|Z*6A34`c_MXX&c-OWEF@4I6JDR!WtZ5ZxDD
z<=*&3s+X#v$KI13gPzI@&d5TLis%ZpynAaKtVq7p26a78yd$ikfL)V|n|M?b+TOR2
zLkqKzJEdq3U+`53$ddd#?Q?wG+Z3>mOj8LKogu>?uyiln9g=44bEwD}_c*r9C0Id#
zX$dpOYafjZy4WO2m$gBHR=%t2Bco-hXjBwdISs)&m7c)~E5J7tXerAypipfg=zHI(
zw{I&^S5Lo|ipSER^s@0T4;N;_0UIV+`-fy-7;cB4Wp1_=o{G{m96i<+*eud34A=cN
zwnfYJO2<zKtnXO|Y*&ze$T7<IFwBiO0uOvJ{8@r&rliCzMV#_;JkbXl=(m8GW|Vax
zkabOe@7o==*|;S;j5;;Kji`ql{O8MKhi4Q1S^HDF)1J9+j4J@i_+rTf(KbaUsWOtR
z1bV}?TSfkoAB+vs6O~ge`F^}5vkLA#V%{J0W=$rzJyA&xGIm2Gvtr9ET*6f~yR~En
zQ4n%B*sa~~nMqgZ-K<(KFvjrs9;ro2$z(Im{3T}ZWdWKzyMjHux>~&E8a05pwwqIA
zQrz#8+cFI$UV_z40hqSXto5S+GK4vp)@Sn6!4n?qDYs^sW=9X3IPj_4l={o6+=83Q
zOk@u;$~OD1H}UiQYkILd$Rp^{Og|0*zqB%n500o}$D<E=-P_j|bhOUh>zx)8LdutH
z>?&uEC9Zs84jaemnehC=e-JI;|ID_EWG~lIXaE33`u{!K9BfTpEdG18^<Y^$Z%RCJ
z_Zj7=lm-xkb*Ep~<sMHCtUqjkr4Lljkf+kX7Q`l~ERM&|eD>+T@swa%nm8nBQ=tyY
zxXbsIca{3JiFTTxki%Ox=rA_1V|4rWuw(R+KB1B>g@`q8aCXQX@mG$G8_udZX5AzW
zF_5T7BqUO2Ej*`vb_qaO=7QtJGF>L~JX%U+h>@Xam&8WXlk7*&(h=$(=G5$fBaOry
zV~TRwpqiK<hNR4U$CJf?AU+(rB7xZ*D>|V!ppw%~ND$>=C%%Vu09*rkJO-5Pg9|ws
zos}0qn6Rl?Yvz;-%)m3Hfw6N!8}-XaP9fNjXe8adeYv~4cQKA9m>$^W(0u__(vNKD
zHo8LW|EOJ=B6u3!DnHU0`yt%b@uf)92SqHfI1Tlt^O4ZN*tx0Gv%q)??9CJrGBZTi
zez6Dd-Ec26&lTk%dlmiwcxAINfN{fp3;a>*lO82b@+pNc5Cdp82T@7!rje&iPvs?9
zE{E=r>TQAW0l0!;*d8a3%<jA*jU8u-eF9NLFyL{Lt1DYeFM-yE+v8Hmu+B2QMT%`K
z!Boa@;QGe!?{%SzlW@O5-xue64?1I#N|-PZ?B+3kz(PQ)8|#li1O@ZGIc|PHUwknF
z--o6m2JMOStukmfzyvI7b6N_@2?hY&+*n|=9LltNo+qRcD<_36V8X-orQ#5OuKyhr
zR7K4|FH6CqivlD>-tOFnt$ifslm%Zy@W!!+^^yQ)SJCh+nd)D7tiJ-L+|ge)6sZek
zVJeAoPCJh2e?%gxQIH4(`ocLuWc7liaus{x|96&;0o=kHMm^Fy3V;Sv?B5*k00O>g
z{*t@OW|HW*9RfobaQ&9rO}-!<zPR50n1UTzw<ZRED4GG}#vNch@1rf)OP+Z7@C>g%
zBrn}BN5r%s(f4Pdfh6z7!?Wm`RA^9ah*@<Jpqw?~!h|+}yXu+-<rw(mhKJzu#|ns9
zQ54y4)N5F0QmI~%lXsmiPI$l_h8DObPS(ecr%<7Qj)Q-G1t#K?N@=z|M%2g6#3sFp
zs#QUqsQ{N>-YNqel<2HINcU0u>_f46dQ<%NMBQ>BNgi>|m29MQAAwc#k({w+dZLGx
zbIFH{8LcX=G_pY40g|9-5<n@?EQ-3gm9Bn!p2%Ewt#sb0OFSmuAwU=YGNT+t&>}+J
z6&M{OL6veOGAzXltVwji7U$g*BXl`dpyb9GDo0hMCX>Yl7EP{Og3?xf=UE_J_!3KH
zCOzem6{B>DJb-Jm?fL@P*;Dsik9BG&K2K`p9T;Vc8K%O2xJRk5->xYL$VdDwAxqS)
zpO06m(>*ZSTXTH%k!o)c;*zN>Z&O%t<ZsvVQjib$?7S@L$)Te!3%5(c2HOkENt&LD
z7bSVA!d_x4LZfjK18-27CH6Xx8hao!H*e;1!V~q`(aXcb`(&nk`Rw%}0$twbg=iCl
z4;-=vrqZUZv*YlR7$nJjEI{&p@)9w*c872!F^BvTXgg%k3j}*f0|6Gw_aSPVLcD`6
zst)02*PDq#7x#YrexXYHVwTyZ?AtCa3TgD^OnBYac^Yh7W!Ed&+%IPDkFxJOK0}X+
zOY%eMB+Jp2ncwiNDWV~3J=2m26rFuD1--%r+62UYK2xHUGJslJh+_HWTLDej0LRkO
zM2<`Hx0uf3iLG*0DaBJ;H>w*HaZ=x3vPbk%%hK+KlCa{3m5Z}R8Mp>E;Gdb?4Ub+*
zMh7xeQq2^azl{F3_7VxGuTZF!eAU;D_r)u=<KIb5f$gW8Iq0$frhH(&5B)$K?gL2m
zw42zz(LY**Kabl+zo-7vUzgxRN6+^c#@Onvg(gg@e(4H!Nt5Bf4a^MgQ<J9uL$^-p
zk1v$tSrt-Wl@kPyl1>%0xD%g8-Uhq&p8AoDLf+FyWfp-E7))^7JV**iHS?H20KwXZ
z_>#u4aG2=dD=u3oF|ROuAMg7RnWsdD{L(9WDgEX(xWg~nUbx0$YIsRmh7mEand;JT
zU>!Y2W(>!ZMqwMdMpslJ1$z%gsII6DdTCx7LA8T61Zvh_thgyht1TIlT0iiNh$a=`
zu!JdAzFH;z{waSF5<a|LPRy>cadF{ltDtG`E{($S=BeB)dPbLR9;BK>aG1GyOz!qM
z`NybCH=Q<$DRp8)e$o^geH;;*LEzXJ)banm?cPBaBw8swmwudyvr<{<(ehqk{;U(D
z>xh4-MoD}9NLs{e#jK>5g-zoUdoOLn@Ta#t28Z@unp>QAQzVLMui$)cAkWINYkG^B
zZz6lYrZd=$x@QvLY(5kEsCIO8jbmRuIaoOuneaG_sjKIU$E~1wwN(!p|3vI@w!_1r
zm$$D(?y%mJ3rlTPJd_w)Je0WC>S9cU_tejm<HOGrHXY(z7+=M0j$zUT&dzH6oGx-A
zO*8D4G@SKd+GIbjn_<Z#<x<hix%J@d%~HJ#tsR-$mm4i?Y=+n|RfTtWfvN3L6dqZt
z0l@1hzIZsW;Ok*ZO@R4VF5jvK(<`@ddT#cwYn7wzCvrfCmZ9v=dspVC2Ib-WY)qAh
zGEFrHTQXWe6X85Vwa3oF$wSX|5EY7HCwf_hVW)+qf-Q3?D6VlU0H$Q#KLcTEozvF5
zRmtn*7?KYJR}h5SSm}MrtlF)iEgZ@|8|nh3zXe|TbyI{rD$2u7=x5vTmG#1FgDfiP
zz<>7Rk;%t%IErk8gO$GJh?#|>F-8kU57}pqgf2i_>o*t}Y8Y0|5u;R$Ai*ZY)I3W3
zbmneTbG>p{7E;x>-4*=)jO?KWGe%cU3C%A{Tgte09aizu8qzZUb>g%emuPKgs+QCS
z*{GI&yhOF!JUf|AQ>>AVeF50L#2Rd-`_t9QWF+^RCwynZ)3$KkI%6)kBiCfUJYePX
zLsM7&4*>K~Vn){dvQg1i1g<<(ab~HI+&(Ga7Q3P$yLy`CAKblWj!ybeTQ;}?*=Z+J
zR~r?qd3xE&W_4g6i0@PW2y@VRBbBeNZ1ixh$Xzih`_$2CUxfEusX3y0unz}Tk(DAi
zp5<x9t#bL1d9_asHhaBv@TLR^_WJt!13YfO>&O2{-}lo$VIS6_W!HuEd;V;~ll>I(
z9iyb?J^l6#(&~EZrMKFN6aPU`PZDQKtJ}^&(pgCT#unkMw<|LjCH~^dBt%%Ay!7FB
zB>6AH>%T9Ah{w;3$^bP$?m>-Pd}WH9I2P^=u)I{rjW3+RMTO>^8fLvUeNR?lowcT2
z9yUm&dt8aemfqc>ytqYJQt7!obm3j{g~^Hqm@&T*Rx)jbgJW(6w6t?f&7|O{yD|5K
zv@$%E6|(%k>yt(KWr%#hB5#ByGiU1k8d%kIW6hNHBv(=H2=06+0QHxJ$D8CEvu6qu
z*9;ns_Lf6RhEhX9ZXafH11O2YbU-1Wys92cEDksZ*?TGyb2>u>+mJ0fOZD>G8EH$$
z$yN>(g^EY!X1re1<0`6YtXlg1mauG{Y9hOTSmgC7yFB%qvka1Q&*4mJbju$%<o_ct
z6bOl4(fYtC#I&{zJQY+jkb^n_{yA#mr~o}r=D`AoQX}m+6!fh=#D9IRDw<&fQ;{yo
zzK3hV_(_#VjV;&0#y5;KH*cNjVEeA(4jw^Vc5#SiOuae5nC-HGB=%ZcJ)LWRd4AU9
zm80C$e{rc&&ppnBSCsM!t=oZ_QWBrHB7cO8xdE)+?L$LI6)$N8r+q%iXQG49<jYH;
z8V-B@f`Re>r9a&PJYn6pGe;Gc(}k$$C1Wi9f*8o(lzilUh@<MIh8caDm;ol!i)sX@
z)kaYC9VEdMq!7C=<v}b=Szt-7Nh!DY`;eRyJiHi1)9d;;X}VNkDypQ;r@~_Hf_s~K
z4BA%;#N?Nahakg$R!Xo1J^eJ>G~hux*%A0&&?jY4R}fD{eSlM|Hzh83%=J|diS~u}
z9qc96v!!@-==#>uZt(FnTGsV9f|?gK6Hs9cU_t>Pb*^s>5_P$HD0t!jPl+&?Pt$1t
z3jjby4gf#_fCFIfU~1>=Y(vXP$4JLuN^k7s>EL2dZ)*H+Iq2J2I=eWyx>(x$cb%}K
zW$V5qhW4AM@3@w;G#+U>Mra~kz)P-Bup2a#G>_!v<~zE$j+a2H${gjW`MLGh!Az{}
zBtt=q-+2Wesb_Y({k6T;QM|hgce5}=qmO3A#q8oSe;5A#Z_uAv(!4`vZZ3cEiO8Fn
zSh&12(=_yU(K2ZsI<Md&bh)WL$q_vyV^tY-LS-srk|hl^6DxDLrzilw^}AoKOWGwf
zl?7c|idnccO=fI5r7Tj4WWqgh8n!Z}$R>|mswA-_l!;k-JNZF`C{c-x4Ja5i>`a<0
z6dTVnk{6f9hlR&qg?C9)GeE2659M+@3)RqfP{@HNv$2!!;uS4gv>h1cAGuCV#+wdF
zUV1rqvs1{hH#ax0Y=y;Snrx#LL9CsCIZL{t782Y~MYJqT&TBjyBiA`)O*X(Un?D(1
zpkBcAlVmS}aFBR2{9waJgfw$#aPh&no;Jewy0TuGWJ=al$MmIC1kWClMBwU)7{O~I
zG&Gw_LWj8%8CRl(F;eBY6=p_gMGd13Y6`&ZQIg|&_yFeyV6{umSUGLy0~a6r-Nu#Q
zEbZ^V*C(JqE}w@Z7xzZ@=Q*=_^Fz%C?!nOm8wl?47cL%>{4imAt`a~jG$eZ`pi=;1
zsKA#px#v2QV93eSjHS+)m61^dx?Hp)DvK;#Nup4N6zL;6mTGli(T%0a6&*~2>*i}B
zS6oA#rHd4l#*%M6xUb)TDWu7FHrg;4B2PkQ^MnD<<i&@Y7mCA+5BC3|`p(}io{tZP
z6#w2|<sNJ}JfCkoMNch&9`pNqO)ACf!GWW5x0wL-1%q~ZFysS^v<nwaCy|+AasFzE
zVV)GDSe%82i|<q@cl9}MxA!@(--)FH{7DkX#;DOMQ-{}P!Xi~%%xzhvDFK*iAQDxC
zuuk_ZQxd`Xo{*3sqe^AisEJUeiV;zP0-JTa;kX;38sR_-`XL7HMd>cHKQGuJG&M+f
z&fq)3n<=2JXpQY36Yd$$7*#3o&%`24GMT_>WYv!ZiC?z}e12*kxEG2)J*>syoCTr*
zur3i*>t3P$>x_e`5iHTbfsGacf$pXT1U18Fn`;VsTC3gGiHJIwRRY*7GnoX72a^Y*
z&j&pQ<h)63M}a1WkW&;RqshRN_Bmb%iKu>kTzX+zI>7J1lNsRGke&9l!@8T&1yWE~
zlQ|cti;lQ9z27ENTn3sH0Zqg0e8l?z7D+Be#yBA|`>-q&8?N<3W$8XBFYeP5U3&U4
z&NrVzq-HU?Q<-TS7?X3RNf>o9sgaSAYSh=)7{O{}%YaiCxkBUaj7i-fKW_zDQ?sCF
z3e{Y+kUXXbP7E%gJ5wyx8i0w5Ihcgo#QbLELHzBrI)|(+eBS|r18%+iJO6Dk$Cyys
zBpXN!DQxLa$Ec<(Dt)m~-!v`&Unq^;HE*7@^}D5fVa~jophQ3?ztmZfFKzdAS5H>{
zTPmXV^EcgDk4#@<oSu?!`0DSA2G_T9LiO`yJ?uw5GW>LgkjUuNyXbUIZvnVhdoMyQ
zJta|s{att4G6yC_UH`44YJ^n6RJ&>s6d1r;HGu%9+Pt23ZvQ6#Q+1D))VI1f@86Zt
zZmmn(zdqh~WtHjdvas9RzL)+v{a1UU`}bIY;iDlzeXLBz_gownz_n0aUQSS}9FBn2
z;=9enwlBLmK{Y!Vcj8Vj$PGZBZw29B?Q*i%s?fKuZ(GlPqNdc=RkNF3w8NX5T2S39
zw-g{g)3sF|?V}H{L3YHa6Fv?8o_z+fF<~2nY56Y?w)&S&kl4j2r%~~a#dd2>A-<>D
zsb}4s$QMmT!;4|9Xfc*R@pDkVg8}z2tvhhECdSGEovRWybPAc-Rw{eSSDdQ#LME~t
z`?m`nzc$MHzns=L+HUwthV7N~-Gi%TfYzXMljv9HAwTl_$ZVd<H?l^4t%o~VX{vAg
z#0K^<x3&yYKY5{cM<Z;=z!=)GHM5ua46U+F*Q}_<;5VsM)a`AZ;<BXd6{gu%I7RV=
z_bR=@DZ{gab}3xlj#45d?5g3gMNQZ&(7$L#J=SxrpI2!2YQLY5##OHucFbtqm-D1$
zt=QQvyG)0w^d3L<C>Smi=xvS*eH#RqCsy}f#0U*#R681-_-$G0ZkN?r3OqL}<z+p3
zvh9XDTkHt!f0XIjS9`iGwNwq4J?b<c(j2c?TjP#!8W7$2HO$}j85XZ9_sz)v?k5j|
z-x7vy16Z^=CDC|SLq2@W`sKTjAeCG(HluA9R?t9!IIojLzQdLTFgl+lRWhJ&&m((;
zJs1cOETS__8d(<aZEJVoM#dmkS2D3VI9scgN)T>(Lo5Z`VwidtOs_`5W|T(f<_Xl!
z2%Bn^S6R}DR@vrlG@_0G0s9t{z3478f*VZS=-Y+6Sya`TTq-3yE0;sB?Fx-9w@Twh
zeA4hU`N?hH%%dDi=|HBgkJiph1V}E{Wo^RC;s4$rk8DgGxRd`*cm`XJ7E!XDqQ}HG
zW)8A;;hA8*HEWfl!WpMV8F}I|GcjeAUZyLxay`orgD;i(o0ulLU109I)CS2pZ`G8V
z12j+ZW|l|?<J%H*jJ*p(eY)Q@aGr49+Ts5zldaU}iBTbU7j`r^++xZA7GM2o7rJ)v
z!YX!76DVN=FCsCuz;9>eOrh}(sRgGJG3s@;IMNiW>%C@Kr8)c=S!2=Iqi!j}2E~r2
zFb;(47*LR%Hps2WWwzm7O*L8G3<Vs9daJD`Q<(NB|3HAiU#|`QY~!~Zy`(T6VW58w
zkAfRhTK6i<H;7))%sP;<z(6+Dixe~~f3OOj1IU(U%_wID-X@vYDWR=TiF$#)jHq14
z*h4an%la_#_-^~ztG*=DNH&7*c*=Y-6ig^SsG6Y>9P%_KhTX2M$}vTb7PN(I7f-5%
zf0xeq!E-kWAjmZYD|4W>{ytBZ2ap5zzEOaE;cw#nzMl&*IeA>8PSA6syiz+gIFZ8v
zNwzC6FzUwHQkZWcZAMqfWBF)_jTP_HjxEu`)Qg2#H@=^V@BXekK>5$rkB0Y-hMQex
zRa%$TiG#Dw$|DMslPxo|GU_p%UAPwdPP9MbYr8EadADXYrbkC@zq~f`+9Nvewbja)
zqVg61@E&er@>KiY;~Yx4QhTxS+92ejZ1|ikb&MBYwBYw|mh2nTxO-_VNa`TbAkJ?C
z#x=kZ=DLqXd0*xzC^=MFlkHNK%tXEjm@na9l7h6RN!ZwLXat`TH<99t5q<|N`tj4t
zLiRWD%&}<a<*Vb;9IP2p407eZeHs20UPtL%slA$hyDDuxI?(Iye@6!9Xvi?%#r9oq
z;&Asl%XuO<TH4(IP@!Y;u{q34STO>Os>k=;4v-&P@4kSTKoNOIai`glER?qF&Xa~;
ziz(2mjG83BO}Wh74*+XB9$KF_A<QPa5Yar}3EIrupjuTa0a}PLsZNN~WE$gxpAs(7
zxQHNbX}+KWV{$JFAPLoLHcLO>>+vq|{V>1<*6C<Iys?Qqt%%aPd7kJ3c$&rj;2+MR
zxNclO7#LWf%GWp1f!67ulIV6VYWDni<{rwqfFT%3dOxNSm9?CUv{{&+&R{z->eBfq
zdmWm5)H%mRRrEzrowS@R)1ZgYoSPuwl9An5(Xd;SOS^K^xvoUblu%g|?+OI$HCd+z
z6VRAZXV!~A(G}S4CM6tL(@F35kQFv%k=O=YZx=Kpk{AI$R&hod42N9MG&RMejX>y(
zpWc}fbInDG(kaY)!ykomna$^eGG|H^5ufgmQ|LROVE26WOb{ni(BpjuoLtsSTe`+n
zOP#*o?(OzgDEp;`FLgcM@3>1!4gGJNRD#o~Y!477glKG?@V8<!oHE<+2-;HWW{!)+
z2Ntk5%ZpzxA74Ko9eg+5(r+dsFj{8bo8!n|X?DO-!7$1u+>D{g-MH`-zR>|v-MavA
zU*k7YKF3lA@?;52H1F4t5x85)0>70uo2r|5;QuI_7xSIa5WY+Jxe93GLRb+y|3V03
z90#+LUV4;}jO43Cl-9PFkf?~>0>hy95l9Y-7rs)b*_;&IAj`z64&X0x$oYUY=j&U<
z1AdKKfe#dY@)WOdm)AdN;pPPF(B4I>^=_>{V`%qeYnJ7H;v!OCb*6CcgUvA7PyDQ*
zuT;tU5lrJ9jUsc5ZvFwz>bA~Whb^p5++-X4caRRmxS|2PmYFNJ#D|CGb0Y70U;9R#
zXK0>md@Xp6>M_fw?NajFYT@c}V`{O<Y?MRC;nv3aYJhyLd9<re#L>BmlH_Qs)rJ7V
z|D(J2%{p&kQ{5hy%8;;ZCQLzk?XL4v>)XMDhr1ya1I<`Bq!6|csJ_u!Y}U3qZmTR#
zW6-b(*(t`n_dV+z9GjW<_f$Dm4fpfZ86;`lJ&=W}au4Vj^Yc}^bE#F$eU5%%>j(j)
z`LKQBGGKjf79YgtRH%z;$5j3R>TL<<Zo!eG4oF}HFQU<HzWnR$A_E-^ej8f1FY1DN
z(e@L*Tu|q?Y%4b1pncBPgS$?@r6q^eA9$d*D#Ek+CoJ^0!5R8OMb_;X`ac!iGu`aK
z0W|=C(INl<`TviC^I~FU`|kqon%7!+YrJXi1GU*E7iWqQYyzHx@EDDdtR2l}GAtP(
zs=~xOCUrbXJ;``F>1oUUjpw=b8)9O|`>K;Fy7uDsV(r-_-ptHBTDwF-E@xt!^-i2`
z;dS{E?z>#BPAugQ`SPvX+(hY>PoZx<j{HyJk(a5Hjb=$O1m1;0eCOVI0Zd53YR5)-
zt2nrc6?}#CHw0!hdm<3uHd?@zRAvIUxzy-r&U&1D8J;ND@A&ih{2z)!cwerENXz72
z<~)ru!#B#z%-;w^bQ6%oUPI*aGi(4GfOnI)|8w2LWOO!@ELOdhFvnwl3DgpJ@lm&t
z{aFV5PRHmojQ#OD?A_AEojo%NH@@$ww&8f^&be5JP|ou>h8A#VXM2N|{}Rl@b3{J0
zTw?jP929;#><CNtll7dJ-3Rl=nTPQ+KTrB-f9W+|skSTKxo8-*%X6!V-L9IG_q?2u
zjA)J_3iS4Yzl85IZyUOXCF4468QSL6Wdw3v@af0vzt$?s8{hssS9uYX>FsPJBk<*0
z49?aVgNg0;Mi<JqCwMijv&4S$g%q<=$j_{URg509oiQaL98g;fu+M^k-x}Xlvav&E
zAKx`&M>((;e!8Oh^%>>EaqAMNtv(}`{)hXxWXEgmAK_d3{wf8h&2AijX0;2caG!3T
z)HkD@0=2=eh+2>(<+(Fulmm+^N7!EI>vaA)c>MKexxM^&_d`q<n}ihkGENrWcN^Fb
zobi{&+2+%x#LLoi$|QGguHkNv@3-flw?62=_DL1%d(5kqvDXeFNbsBTWsp7UGSWf{
z67jeF6h;ES&QNo%{d_@<6uh9aV24Ono^?O-z)!{|A7|j-fRFTrB@_(jQ}&olK4=y5
zFisY>v^L@J<x&JHb|uX$y*8SZu@p5lEb7D?<)J6S2ZphfoUCQ6gfP=gWPGvd36w`z
zr^8wDUgtZk<b|B@8z27#E7!+W6q24B)erB{x#oEIaSlKBn_gC2g-5L79AACBo=Bc;
zwgpj}q0O7(R+?sYJX>?tHyhmEF>Fiywof#^;Beu`*3y5^sa#nfw-77U+x*CZxmawa
z>Nf4QLlZTda88fXl(90k`;?)Z+C>>cfe^a*?Avy!iJxAsqFzB@1B~IP3GZT#V4*sH
zdtH5tuB0Tc-n&0~RToN>TzBq8edtkOrn<%dM3qrU%ts}4p68wawR3rtfVJ2g?4O2Y
zWRg?_ksG&t{y0%BXP|6BAv;=r#b7VtXVOtpA*0vk2A%UM>8zLeT~GpAmUfW+>GphR
zo%*2YztgR>Gqs+|m!}9w3Mc?4gl@uY@xx#X`Y2B*{M!<WQsOl+ww3U{W7vH|R(_-0
zeZzhB(6nQt%WIym*!lTzVcEPAks#laI3;&f;yaM%zKL&lrCI<e*=AsJ`FMePYBYVm
z9>brf)yo-}B3x$iwp@mw0tgcpkI)~6a)1~KR2Em!NnUz6#B-HA8u{D1)Z0rk;=PtB
zCz1w<t1rZ5B)*x8SDhTd0_0$vtVu&n3it@VgvY@QM#|_Gt<9q%@EjfoTX16x!t&`m
zO;125gvr-r;0Zj<dE5U7mLCP4WIb^(oupR5tPn2Qi&PU(m!sAH?jMbV9M~L&(-u>R
z1c9;UcNu6ASdw&@G$X`Q03IcV^FE=2vBFOWtzRdry+c9~BkXIKeGCUA-lYUg62U%5
z0R*xr!<^^$y2RPpb7hqqe|C%9KcVR4xi9Fi!&AQ84c}Y@!&eapH`FXoe4O_x4(6um
z!S^7bb5NZZL+mVs5D*>!JTTHYQnf|2P+<nmedf|1!Fs%;3&rWBFlA_qV6-ydc{awW
zgn$RM^Dno0k<nQLD_P#q_Jm_WWAu+~<N_fAw}wd+N+w^j2*EvtNI74y=rs4ql9Trg
z8LSH2oO#ARQ7VnC0CHtB<@nM}m`l7e-)tF}HTGBt$BpWOI8x{M)NP(@+6S$P*6Df{
zk)SMmA3JZD&#h6rurlbZXN46Fc1CBy>~0ruM;HunM7sOTXUeiOLM#B6xz9ITXx@~k
zSdy55{^QJes2zzbhvw9Iit&_mLTn89?-Z07!sa%Y&E9j=N!ZxfJgLZOF*ARWPv!fb
z#)B*Y5a{6sb2CJeK}+N%`ebSv{0j$&Vw_<hloYt*JkH_F20A@NVaN!O9HPvOP}1VI
zFmPwGc9?J2o<fmc0BsOifB+7vfocxegL3!q67&o3b|6*`W<AzOy`{^8MT0R?AZ4>S
zuLg(#L|hj`jT{I+ai%<Za#JTJr-EmIu6JgtnwZXgK2b6Q8<HmCYTR9F6GLW%HHG0r
z7zYRpg>0cn@VKM2sS{d06T|L7h@cDPc8}1UWMZT4>w|uxbe{PJ4xuk(-iSj0Y!ZwJ
z<XmSF85v)X9QcM9SO+gfoD+sg-ipjhwWtDASVEyP0D!u;)6Ujb6lu{3lWL-ks+wW7
zlkx`C6Key%=*p?}mB)9Wd;KCh`%P$$P0hn#fG_qZ!R%e>TlbiN51U&+H^w(=OPX=Y
zeoLTIRBzFnCpa`C>24dC_c{9+R|IBMOo)@8i!dQfY6wsWeo2a1Y?J5&g!f^BSC{Q#
zI?T>lj@->u2aU)K{xP1=l^H9xIf+B?3^^y;P3i_%=d~yq>wN2~2&l~Mui4Y?`hL$0
zrzRY6xwN008eXlm_x8;T+I!TDm_nL0^A;fuz{ErLp~<y21MVo}%}#xzi$9zm0HaH}
zJJ=bIwL5EMx}Z)s=!>a4V27X;)zTfBbJXrJaSNj{X<e*Se?lLW^=78zf!CUmZddJC
zi+;fv!_tdv5KZq4<$a_`-s`AHH@HypC9d+6q7KCgkKYjZrF2=8LRU0{Hq@HEUm`1u
zmgXBfiAOT3f{`}MnuW|>Xi!`;@!*_naiaWzosTqX<?tP9rLc(gG|B!M&e&6b8HE-A
z&w;&rg{N*Cpae&Zqy&1}2chyx0W$?yYn|{NnG5(1{ppVA2r|WB>E3n5@h|C$;ejjG
zsJ5im-u7r5Q}BTgp!JDU9`}a=y$@%%myjjo7E$#W;0{O&lG5uVbM=8im`Ah3N<asp
znj#Mxryuv{Azg(yRtfDsc92MB?Oe_eLOLLvKe@@X_}kkO74XGRvhUX#0N$q|fJSiN
zgX>X6Tb=DthT-vh*{tLA>}AKFM+-`8e1@I635AcftBwk?xixS)<Wd~=X{;b5bZiG-
zECkpUWKYk580rJo=t=BfA{ja$%-XN8gkgmihGt-42}28AjAWp)h>=PX#z_)7K6$o)
z*g2pdSch1Sg-}xlsg?{vsz%#iRoZA3-Eax0#v7}uAJT$va8us+nyj%$%!gryp7$%E
zTaF;fUXmWL#}D|y%f?l*Y2yO11n1Y|>5Ni015PXv0~|7SoBYcOn!m@OJ1d)(Om};T
zlxGlSI(=T44`_LJ%i!@HGN<~hBg?n;?o9j9J(#b4tM*s{P&>I$<sN>~ie+DI+Op!Q
z&0B4o-*&SnDLqz0AOkZ$N#xDJmbz-uYp<)HaA=%H#;8J41cGuSUSfXrw!CH@$9)eK
z&xBPZCK7!ov(HIIT2-8TJ{7JzudZYm*ug-(F_ol~T5F|NO{U#avl?YnE25R2!DuT*
zg1~CFSpcD^4WgKi@B$K|6O)dwV?p|Zc;j!H3CQdfSpQb!iMp+)u;AuZhEL<;SxOR#
zcZ1zN4WW6Ka#-}prs0RpR8Zd@VXy7n6o2>bt;ZSIf&KmOW?W&rXYqCnY~TIWXlC?{
zDmGb~SK^2(c1f&!fy?rICVJ{=RJ7RDH3l1(sp&it*tv_(p)8?hWD>M3MG*lbGn1n{
zklMu&$XX3sOfA0W8_)GO&nP#}`Ew71o&qO9`Bx7S+0Z1xp{19oP6H3-X$GHNgelI&
zd3Rp-xCiz5*Tp&O=fQ-27soRcEsVM%3vV51Gdn&!8sHRX-;A)I82p{&6Jo1>1Jje8
z0N+0QsWrQ%ReYB$(yV^Mt?_W_ObSh*VLCX=$RYm2L7*lZ60s(Tv6rK=;AmtT(&Cjo
znJ%syTI{@V_&QS*4xJttQm7q=GsCQdhO)rGQw^Yz|3e5k96fpidbJRdCLiH4T{^Lv
z?Ri@?En?!mp+a0G69B<K;gsmasTE_N>RX?th<F8$>g7ufL+Lmh8&BoFW#X}*$;@OH
zG9eR?3p28=#iMa~#p!UWB@009$tX1ozlP89<Hr1<m&>!@BZW(v>r&nuQ;|9A`2wEv
zefm*)6aR^e!FJ_O_%F^_<Y+G~%=YEtcr6|5jun$zxgg7`EPXk4tn1R$g_!Zq^Pt^e
zEvhW`BfvHc_zH51qpop)y*_m5Vjhu!o2csuYcMOGF^=*9`CwnwfjaHCR>u^j{Sb;e
zk{=X>x-eGDy*2N5r$4&M%b-jSEv<<(^v0r4>mSzj#UdL^LT#<_G_<Bt(sigmq|8bm
z6cxHHEFolsk7dfT(_&b1)=9b$F8P1vvi__Bsi+oINvfn4pNi_Yh%D*?+o7l16x>Of
z?Gg5>5ncQu;;Xv`1WrQ1?DMnL0o{@Uvs*c`;@#t8GczKM55=mb*p#S3Aj^akyQ`A6
zghQgM1_EijoL5PMbf5|GK!k#2wTlVzF$p%oVkRN{`;Z$(qL2_TlK|Qa5R{V&fz&>W
zb__$IQ%tZ{NMP7);LX>a$lL;EV?8~dAyXj>ro8Pik(TIg>CZ3-ds!nC(*yiz#^p06
z&C}G+0E1?zz`2$sq}NT*2O1pl7a^Ef>35VN)89g>iAPU|CV(6(k(B29o`})sHP^r}
zseq%*IQ}yN&J)Q_!#OOpsG5ctl~$}d+&nxsPHvFuTzl$Uu%y%cp)nS?3uu)G*d3sJ
zG9K2v=Be4`%$(W{kK~Mpqh`@l0O;%oNwTS*OCJrbo!t3YL#9hD+OwuvC;biL*DV7<
zi#qJQ1Cp+7LsRYnVJ<{*al6EG7W|CrqhS=dh#=FRfM5%f`KWu>6t9+2P%g=XlRyL!
zkb<$^RA^3gS{GK!OA*EklDcZ&f>lk$w-@WV7(<cqoE8!EGuabR`l`R32*Y6uvWak8
zwqOfln+Nud5<?oXUEEYqP}r=Uvnf1#w|8?ErVakkj=8tD*{r4cqblLurjz3j0B@7n
zv+&4b)92aWtL(qDFEf7|FG;B)x4CYWS}!(F!MDa^pe6t`A)=9P14EqF=<Iw>RTzk!
zhkuQDFoqWyl5Ml>{w69&blZ7BT$P14{NDiXBlwVlH9gHkc*`@K8{YmTYh4%KaOwr|
z|3d#8oMjzRjjAx2)xnzA`^y@NEx&>%uXNMgsI!<;dgArpl26+coELL+hX)`gg2q1q
zTRf_MVK9HenN1Q2M3avDyu)(Nrm4xsh~~7j@bek#uW2Tt=khqoXJxeWsY7R{ot&4p
z-KrbK+<w`mB2Ny4?<Hm2WWS!`CSM2ToRakd=4G>UaiXrHb&czjzmM$`P(7_(07H`^
zjb|L?(zM|sx4S6%u1$Rs`;!y`aC|-lHVSi>o~YeyOrzMv4b-`@%3z)i57!gah8F_@
zZY1@7c`8p?@s3%mUb<JM^y(vJCl4GsoHwc~mD)uqyocpI5Dpv`D%2?D(m?#f*cO<A
zMPbOc0~-RutM(0xMm#a<#)Vyt@$%p)QceY=lw~EFt2n@e`0U6jGi>bP87Hip;QjS_
zVUmaO4V7x8>EMktG2rr1H&m{m-&L&V#w|p-D6Z&d&#|V}{(w%aEuR^y0YxgN@8BOp
zmV7dQ9y8IMKcl->toloZPoFSx^So33;L`ZM{e>o)8r@d+XL{50wd(7gbEuhMkz@(M
zRBA98pJf)mc$xP0<{EVt6z-N2DMuT5;zH(`n?-}i;hDT{PJWgz`w5ATlAm4n9~=(K
z&mL*R#^Y{=A?>+HF1+wIT^wyDWk!}a{sKf;o%lwmuH$a5lonA6bN*0j9Xy8l+#}$X
z_Bq^=8oC)V@-~=T)m)r<ixY~kI9D<;wrGHg?kHo&Mepu4#JsKbR5zKbxEIwFRPuWb
zf}3yJAQxUmwm(AMDiMp)$&-}`00;uEi+Zt$_#*88z0T;LSP@sc{(@iRE82i*?x#P$
z^J@p^@Iy1cPw<$e!=prba06BEsBQT9sJ(i6I<GR00r>|&uq)vpY6*2{ujJ+EQH(I^
zA*m_~*_uCE-pEtmMPSX7A4|5Vgw6Zczu@beE*5LpaD;W2%ZTF595csSh>pa#C{-{C
zk4e#P!BYqB3lCzQ)TRh}HTb9lU<*PhSQYH=6xvOAH7#Db$-6=yJ3G5Uet%N5XPw1H
z-x-e%aftKsA_^6OXB1Cd9`y+8!@sI6+t>8Q+aoGTjISDebtbNE%**I`^4`Z)p(4D=
zSfYTY2<MtDA(xO$7O4=~Q(%{?xI!~H&be&N9mmhAb-#g+b^jcB@r-2Q!tEhm@%Gy0
z>APhis?WZ|g_si{Z{5qR#P~_tQh~fZj=bm%$vW~l*AlsnK;Nx!uux!tXrX`%B+CmE
zIgT13HV5mEK@bra6nSUck_&iaU1#7a+g)ye=z1><x!MID`z@EhEf2HqcM%Dm0pV`X
z>@UNcW>3uBpJpX=+J{*To}h@CJ}>T%4>AJ=SQ=v90o&C?43xaZP6)&14u+T#6mRc$
zAOS+nqogpXfs)OE@^!=(mHY|g*%E-a9DJtbq(WqazwQpKgrFxn!2M1w>W+gJR6m<(
zi_C?J-uS}%BE`Ye0G`Oy0^(?uHDYuiP!>s^j_!4!{{+%Q;mkrjJoFfQ;$c^hr3>oe
zf$}T6M$OTX&I5={==u?I1BP;k>}pZ~Q~-ERx>q)R5MbcYfvGp^e+u>lmx9Y`MWC%<
zW`3ZGzK@GgQ(crJGo9rT48o7|PI!&cXj?hak~~;eTa|%o>Fsn=YX5?EREC1u`S#xC
z?J!rPx@Xri9r@}!qLiS4`)TE=9dYpPa##P=AYyXd_IzU8g&eMCrPvXn-1&wml~<I?
zS5h=DjYv-X1{4$Lw`}9S%c?bY5bN>vEp3y3nRUGKB{ocU5%|Q*<q*;sAI`<>4Pg0*
zRX5vvuI2O=)Y?>j&uvHUH6Dc5E2O%Xqf8G<ZB&X>0%m$gOWivkp?7y%?<u1(JX%x6
z^!1;#LqdA<Ym~;gZ#p@cFJ`n-;J>MOcgvFXPc)WsdI95yw&Niv**^r8rw`GT8n8S-
zQL@p;4p+Yunm*?1+bQ}~;$1WXuT(PvinRKW!2s?qR%IyM5oJ8OzD8p;C~D$EmiW_@
zNVW_kYax15(V0nBWzB$SB{XGH<fO7EgZ#oetvJCdjykQVoexQ(r5zl3shjdcg6wKw
z<nK$CaQ@5uDe`h|z?{$FA(mf(U%4s9S4f9h%t$9xUSZ;-$gT9o<^<(x4@)OhUt#9d
z=wG77{s`qdL7|IK-{hk_5>Tqf)-;|J&|;9G*3`Z(Ot&0M(_{jq$skv)sbla*!5UlB
zB-bL5KNtr9`R^u;-R~7<@yI};)*gixh-Hn0-87(G*pd}%qWq&Ok;m}TOi$MqP|$u4
zp@)!eH!^Gi)FC!WM<~KQ{xt=6pD$s{-8C@j_rDegbFvJ}@qi7*prbNniNxP$g6PNh
zIOTM$8m}}K1mq>`2X13-NsnfwjOlw&!0)t9_OR%}du!Q4Z@{991P!A^KEgF}GvaT4
zEQXK5l1kC$HG_+w7Cc7P<iA8zo}vUAv^q2W@-{DUNW79Fn?#B-WHjKRK>Pb;&FA)d
z?1!cF;Tz-B*eszP66KKZsI?*0h=kNubg13*@*Es#B!aF<68Fm9(nO{*Ai7on^|cc>
zY&=bo^g>02MAbnCojg%>4|sIrV}HAPtbc5YBoFsKsKNM5jtqo&{7Az&D5Yi6bR`sw
z+#t8DSYBn42;*!w;MOCy_xyBM?#j)9s$*Tag$&H9s`pfPbXWSA>SLy*CStz?J*LdP
zpPK-tmBQYK%`7sVdAu>I+tF7!N;!mA$7`6V`us)IaAQfui<l6Gj7PY^NRdD-p%|bN
zes22iQTYY=@=rSa1g4U#K$gP}-uvY`*U1At8u!_%(YeH44ROZ+T#3kvewlu*g-?rL
zL6NISr{<DR3?T|?yVBjWxiz5)ma)1n^omz-qyk#(yc2F)=ECn=eDlnM;riPyF6O{@
z%y<Bz?AnmWZbsu|_SSc{Ec4yD?^$ixyKY_^gaJ3dPjo@2vQ5t%yEblt#teJc?A+ay
zGWTu^QsLa3Yi0;+uTN@U73l5J&bqpCcXSKJo7x?BW45F|-P#=ecKhocz1`b#Z(6Nk
z+P9h((45_Hi8)zjYWF}ew%Lb=!VsvUU2;mBYw&tNzh}Uy7CBpbK4lW6__E6g<r^5L
zOQ;g!3IdO)=PRQcSvJ=Zm`9RNX;Q>=ZkOO(T5zsxP}HQ|M;B{rTmpDY5c~?j_E=AK
z1ddf2UfE=|>!yk-YX?j=DNM_-LslaFzyc|6*&Oish#cZy^;e4oxzaP9Qvi3d*5kY=
zGnY~pPE1l}ishp74FHcky=DnHufE@-o({?_kkZ6=c>;+4(C8~A^SN`FScM`KZ8U3_
z>j9-?^OzeO#uXXr#W2(ew}Ej?>5`ebwEOH7M3Ny;t^9kHJtdR;Vo`m^aLOgd_;W2_
zdn^z;2#m;Wo#QVl5pLPN(5?f1^ptAoj|K==k>bAp(`Vq+GAHAlRE>x?1OZZzZ4ik=
zKWo{{G=+JgFJ5Z#4$5(!a{$FB)mK8j+g;)a!a-UE7bgaZPr7{Ue2@yTWI>Lo&*H`L
zpthLO=G5!?)|uZB=CyXWasm0!RUC|`^Tj0r=Pllo{PX(|SyY<|vbpdkTLPk2NEVu*
zMfL;pVSyB@nL>+rJs@&;Or&Os-yyG*S%^nUS(n)zP;B&bzE&YKR5eX@hr0;+i6k6~
zQkuKpz%?m`gyTrCr7JwvhI27p1i76m#*PURcWIAL;T#dO?;>VfTtmT;T<aKWU&}aR
zF~ei(7nG#s`oITAR^>Z){&jQy9$$R?eq2x<$8AnK(6HlM=AO;xY$}bZ2PAT98>ryM
z!O~zIU#35_bLj%U1{hw^)D006#l#Op^<nY0ST$}a)qEb#cX+~}r`w?Uvi910s{v0O
zKruC9W111%4p#gyKCb2Nrz%4{+)0WGa1O-s=%6Q~Tx8_4XyAscD_EE*zYOw<kp1IT
zGLEGm>A2-8+NS#toU~$@=>MXd9{i@=6j2j;nrl$IzMQRV)xi?SbPe5l?pm_2?%`h_
zVJEyE4hX`MNq?S*D8a9{$cee7&WYUZ1WTaVZ;lum;mzRq2#VTt;TmUv=r_*a6`Eqh
zz7cdq>zpy)!J#dCPi;;B8hxX!bLH1ekC%4h7{)V8#p#mayd^cBoZi;-i7n#(<A87B
z#x5)Q@PN!uNqR+0Odqe`R}A<(I|D{ss@(IVRYuj8hY7~*mL`h-H^TCIa)z8)k)Hp9
zor!3rWT7!8zJQ@OgFcfcR2i+9mp5f{a2}I+vdu5VzPyJITey3&+xUv8I4iF{O)p1}
zVhr8K^L`#>)dn>op1BoFLGQ3BnU<&hl7QE!-sL<qT#x04N2K0Pc8@|Kt8KQ;cTaHw
zSO@tLLOD1!z;Mm%`1kJ4Sb+t>8wL0(krok;@5u9Ggr@u<`~LOSg)MLgts)Bz-4_(B
zgy<^J2L!>fS(7h+kQ0UA;<%XzR}{gX`b04dz!Tg^H}Q>taN;k)_<{`H8al?RJKl)*
zl*gT?H~NA4OM@7Oyp`Php`{-jQTLLTo7NmQBPl%qg=eDvaWi>Dztmg`1IdEhAAWPh
z<OU9a<;=MO@pzS6XF;kC&@GGz+mtwTZ5{-WQ6#d?jClhNCQ>)_hJk&#bw34r^RFV|
zQP{-0At1KClIaRb0+&S-H&ye(SpUgmtUMTS7;Bh?*2Rw(Wz_&)Nq+jaa$>9mn(}aB
zs~pj42n5nZAOChrVn#Z5Zb;3CeykCnOp^CcejlXqjOdBqY+&Yv?6>yeWXNS5jc##X
z!02s_;Mo134*4LP6F{6oHbmScH|r#M9IF*nm3q8bGRnBVrwLeh&&nkLs&}x~)sK6y
z8vcQH+>%IR9#qN{4`dfuPGiEhbGqDK>e15N5z0lsG<x^TM|a^5Ty=BMQB8SVv}P9>
zvJ;#Vc(5je7LJQtB-d`6%$Iv-qYKoyU>6Tmi<BSJskxb98_Bd<g9(Ucso!_2&HQQ<
zliy-#rCti2>6xtU9~hIAeC}p~uaL0BECg%tuoMP-RCLgF>wxxGnfS5&SZ2Yw@O}OR
zHWs9YcDzq*@op%ezi*&5{ZWB^4BaKqf6k9}PrIguMP;1^P-nO2Jq!BaC2tfzij;_v
zAm24w<80SY0+fikvTmfyur`zGni-$-mpuw-%SC_%*-RiMl(9q$%RA3Tl1w5GRk?HC
zpcju1=_+Kr#+0!2nl&FUQ@~>_m$)Wt1n)KZ(pGm%E`CGVEdiE;Xd5jaIj^aes}9%E
z7BQ}m*%wGSCa0rCf(iy8rmsN-ry-2+1(Ok3a8V27@XbhqM_yQbzH+a;F&hqjuZVNV
zZw749{@93eFWfM*KL`-U@eaRo0wTXQXGSm@ED<RM%Z-1XuCxar<hW1{a7VaCHz3;E
z+U*8#!>%WGY)Q`?ofmCoH-<_W^RdBv-S4JUVAmY6Tg*8>)nz8?V(b8psW&7HiJcg+
zc`#zXb!ITqoB7m7Zyb-<P>qN@zEEp0)?BTs;rbv;(OJJI9QjUS$EHncV!0RxD5G*V
zqR@j)1q+r7eZO#_y4G!tz@5e_O=ELCiAkP1Ql2)>Zb!Bs80^xFbXPLFvv-;U3mn%Z
z6;^9(TA@r#=vzawhX8~NvwYy&3+Y(fm1L2i%Q?JR&HfNu{6+l3FEc-AVE;{Q^Ory5
zrXZ_9^idGgkXs@2rXQshq1#2u4b~*Y9L5m++rdP^tC!csllyB<w4H9>bokF81CsL4
zc-|g#^Kp0Y(l*@8-DS{^ANm&c`JH=XPtf0g+j@v?<*|AgsvK;t6){Cf*0P+-hD!uB
z{CgF3LQ^Kol-c28sYw&0^nX!l(qxe)H&VVuqeDfJK5y6#6`2g~pX-^`+Cgt67eOg?
zR)}Lltu4IUpIFe|dnzgT=&*?*#Y|C~ri8A4!~4iLF_Jrah$BB-xlhdE4Y7^FhDBqQ
zvaWxq9FL!k)23Eb%AQVz-Iq|ydeG29)2^-Eevi#_22ydo#JpGkwa!<PWUwTtgT|Ts
z*&e&dxKEx>v3|UD#QhJrQ9d1uyoc)~kMWAFkw)AlLpaXb3`|88wBlsDMtyT^jxS6M
z`D7MdF%if80QfXeAnFtb-Y4<Hxw+j}^j3>&QytTCF9c!76<kCa1I!TdR^G!nOQ>cm
z_AL(`gjaHd)Mrho)A30Og~by}iDqQsjo-6lA7chtiTfF`Pcw&E@nRauE$N%N!KEv%
z7X=cQH0vm)m_tvfhMhuh&Wt3r<=fi@q{;-s9#7?+-km0O{T)0K7i%l>lVi{dS)u;^
zm6{l9*JMGa;MWdcFb2i2r%QM^B`tiQc!&oaO-8<eGn9FcsEdmzH`q{}RYl8e(JCda
zu0HM`WHnyM0BM%hF{uzgg6tbjLMZ(o%HA=!m#FI=jBVStd1KqQZR^I#jg4Pyn>V&?
z+qtow$@`zFnR*A$Thmp2sy}q?54(2nUUl|5YXQnQfk#)UJ+-1Hh>oYi6&McE>bTD-
zC@7*UHWTusK+-tJw}9u$ggN=(B>9M(`p&gh!v#k_e)w6x=#qAJteKCVIx?9xON$Lv
zFT5fx>Z<vaDac7lBwrq}mrY?E#|AK1`#|#@iDEpEBo#WLiJ@7(?^*b7G`km+N4>Tu
z$l$y$c?@)eG!CM_s<L?h?sxM98MW{DKi>b-cmBAq?ZW(AU=cF}QMIm)fnQgjb!3-$
zwo=Zu6?kDgD$oa`=g1zsUB9N>0N%0$p@`xCwBj6!vqk8TvTVePaZ#{u1fpD*v!<@t
z&PAaoXcti{PZ-cByRfEF3k|1wm@{<-4}D9N5CO8t`o|gEhAOa4ntG((`G8(NDURab
zIHlGFoI#=M8>7uzLsIs<W6Mb3WFq5s&^;NhF?phD0ij=XmbKu_#^{78)FoC)?rZHD
zqqwo@u!aS3Max(NA$bvKNDmw>Lr#+!-q#hHEw!{HfJ&9B;SCPU<^PeMT9MYGcL=kB
zRdu`;D4vpLQ!`|&iA^6Xey7XpxRv6}Xm70^jP0k9Ki|4M$qdt1qllcMbgNDFYY&<;
z$C8yn2GfcUXOr#$d*rG(GddmDFI!fpfoJlx+MLHKf{6LGz~K{b^BkCRIpeR(-b;>r
zXgEGm-VPjN-<Y3&MxvF1yA0|BQ4c_8h*<7R=UTR{EyiMI4{&wrbRR}hD|&{&>eCx+
zHW6rBt#k_7;wH~v%7AH+VraW}`-fm!dw*^GXSdi+OIF8oobkG|ti{`Eim`PWcaG?M
zUQMCkbER|M)M)kmrCAKB2P4M~tED+k45$Z#0AfKIp;ui&k)TgqK?As7T|pCk03%14
ztL4VC-uCfBCTQ(Eq9T9o+={mU=ZSWAt>2}?eX{|JT8=d2PXen%tDcLHxLmp3FlW|Q
zcH`E`O(*kKm>UGzpgSn@`6N-<T43cHIn&f4P}zBKfE25h7!w=NuX&7KKUMtcGVMyP
zs*>L|5mr2o10Gt{lv5BzxAWI`%5cEHwO)h310OI*Ad~!M>li(4X}3AHgU!Y^Z=^q%
z)5vaY#Y(|-=}mI5_H`qxU>7y(pg?W)#7p3Q%Y`Qi2|aOw$Kgcv-hbd=158$unDI)1
zGJei&02S2lqX*oIJy^0#6N;JI@3Ffkehsvc#_*+z5~*88KC`9Me6Ga{n7l4v|55w3
zT9r5kFm<K?WR3l)(v}jQ)4C+_M>Vq_n{PgviTyZ3T(Cy#B#&B672v(Icve^e+Ozu$
znx-Ubsg6B9EB0=%^D#pFip+j`tAzO5)=_JZ!p?DiSbIJ_Y1l?8Gph-k$juEP!KhqA
zKi!PJOEb2S)u|WRIWWdsJlc`fiA&Ve>?2v#i6a~H>X0<hNYFW#G7i+U0E7p68l!$k
zGtGXkB5h{Lt)_^3^P)Op+@ZYct}{{97v*{!CvI5*EBPgl4iXo$3^^EI5`t6D!p=v(
zni2ddr<tay9bxbnj9EO-ipA>m1LO%KG!ftbT!{lOYY0#jS4{|X7H90l-KLeyCr^tZ
z$~`SK0uOgu=)^$+Eir^n1c=#td;XJy-+>(O+89augqQ(=ckBAls1h^dk(Cp634Q~n
zAkTg<^R_;!BBJ5PRoGL@Gbvup#;`M%M3}=RF{A7Eo`5tV$uy&jJ-g20K$q0jk#EW}
zZ4l^<s_N`X4W1|~>LFz>jlj7QN2pVR4Hb3>?GEO0$}JgNzMZ>nyR@Q8H|FYNjrZpt
zWSjOV*V1oB9#N|{Ci{pSnLNuMV5=sXNOHPusesHag19V-2-R~aFy-tGoVKUE>!+Jc
zzmVBih6Tb&;?=?)Pksz4geYw3Xr-%SO@Ks$6_*lp$ud1&`a<+XE)6p^Y?2<a>mZq?
z2qiV24=01dOm^mHE=_i$BKwle+gH+y2@fY0YrL~UBz=K%5)HejeD^txE$<&r1BaGI
z`sH%;;EII%Rf}}Ti{^p@odFy~t}1Zj*L=*IEgHs)=GW%j^?^eNd&bT;H||?Z2NU84
zTm=L>AsGFd!cs^0^!GIvfD4ci6!3Br-R?fGwBfAv>i|>5u%T1uKy|5P3r;a~bmxRH
z01rm=u*pMl)SY&p7cx)z^XQrtDYSp5iWX>gmRH+Ye@TMAXXfO}I-c&bQniJ0C}jm1
z19*5Fy45OG8P?oB1@X{|!>XpSW0%^+7q4svM`=EYDf#^OD1$ksE?xMC!r(P=?7Y@8
zMct;d$N0X*`jOoGv^oIM=|$r8RwSDw3sw%2vZ5o}F%MCTrmzeKU2gbsR-+xq9F})i
zO9c`OB@MFkFjOYi+dtXuSxB$6wGg!heh1W8XXMW-@*YjNNKkz<jPlIgy>Dt<_^a+(
z!XBowh2xU9lk-!Hf7XLP_t_;O+0Fceidxxsf%&XD*zDJj$aQP8&I(B%Gh5cE-P)Av
z!ckqR7twfzf*la|vaYF^zaHG$x{BSAH<(5n3=6GQ=2=t*bt;D5$j7L&eVlONpN8nh
z&6D4gWx8THN8b6lH_8K$#ha8}X+>ChvIclPyyp)5%8{Rcprp*w(dK#z@jIZhCce(B
zu0yB}Rr<jZM%`cVSQGB)6opd5P4dRcq!Z+RpMHP!Msds_Gy;*Vv2}zGAwxu=^9$_$
zx)FUO*tJ0ORhDkW$5-0CL~fs!k!fm|eYlxsz}V44H4EX?h1pB{-0>lZmRRR4px%CX
z>%k-3z2NgLKkxQ+;vS=7Lr3hD<6V@MHtV3tOH8YMMpQ@&-k$ISqT~BLmuB-;r~x_l
z-c^K})J?e|+&-U}dryo3+GG&~u3#97^M)X^`fB#am}`7N3%h;H75xq2+}o4&JxfQ_
zr5Ae|dri!%fv$(hMZC~NOG)}6LGU?_iP6<groot>%uYLcp?=FaI)_0o%dSGnQ(LAG
zx}{S7%vvj^-%;xk8Fa07VGYdjGHPbI7{Y;eiylCi;TJ9}cd&^s6O_&Kc`z1w3b|8i
z%XH`0Zx_&t`uM3AV9kOMx3t&X>V`IYWC%L#mpqM2_&9ot<R!)Lbx?_2&nb(cpq9=_
z_T&t6TEcU5_*T@IWE^}&lCK;%W13U~pE8d~4R;ieo;yIE*K(ss+~A83o|%VQ*jRg)
za(bb4%bf#<*?oPe0>`FpCq)i*0<|sD3EqVxZG4ppd+m#@NR35=Bzvk<C@&2wq90hN
z3`@eVC{>!q+=15C2rL9uF1+j@ZC96a{|)rt8N^;JSim7LKtLE&KtLq_nL*5A;9%nV
zpUJ~hIG+ydl26Yc=(Sqqp&>|lZTgw^-qKJ~YX_wLQf^CUrr4~#wlQ*-PAH9;?;F=$
zx2w_c6vUb87Sv!q$A12C+?yMLe3st#qbEt_0pivA0=;n_j(ldbxvVQpJdQ^`J*+yt
zR#YW9gsOXsPKJU&z;K$qA37WrBqaSydmJvH96_`A%!DCf!x3qDqKF<#!&}biyOo&z
zlaakY>=0nmU&iC0ST5nf9j$A+KpuTh<}TqnHB-B>QRSjFvs7d)M?suu81^lW@4rY?
zJw<rQ8{|9I&atZxwRS`Kjd5=UUwpA(u82DkQ;GhTBi--5+}vDU)tu+U3GJ%#`8#8Q
z;?p=)s4%-YzVA&>?-68m_NH)3RRfEk3a4#!V~PeEHs*oYt%&ow@-SH%{O;y3oMq7t
zW~{y+L@@11J-BJx<zN$GL)HxyIegvCr3)${oC*ye$9+pB6e?e`B^g7eEi|^J#H&wG
z1-i$kfq`c>Zk-guk2b^#bXo|u@8CYgHHi7Az9MMuJ!K6}=OOB2HxrYBO)A9Fjyh>#
zFkV;w2emHg@64}<;8|xef*iQ~N%5Nq1>$ubev+^F8D4y!-I$^5Bbf_=isX*e15w8l
z7h)vzF;+8Tm%qG$$BX?6paMfdgT#0z`dm&`KyZCwoAtf8wVI$j%d_|Nfu~w|mW8|@
z1+LING}qjw-3Hme=hfW-c04UA*;n%e%wdyQZyKlh;v*N2Q|gU#<gGmM3`X4Ur<y_F
z$_u~)r=(Mw2h1MW6<hZbRCv{-aad5*C0<Jo&oxFDKCEqS{SE+`zf_6781V({TyO=M
z0kgcQXkxM!vt`}Y1X2k)a%D-Dv-e;krm25G|CmS?*q^x!>lzIa9~Oj(L|BJ%Z*j1O
z{rJ1fjqk6z%m$c7x4CLW+-UaAKCa!JOx6mfwb}MDp>%876a7lVr{s0lz~ie=n#3`{
z^6q37VFX&AGrAI$4c?Ll*>1;v$PBL4Sh+bCDFhkbl(0|t4{(fS50tO9>h0+1Qh1i(
z52miT3xfZQ-!K2#8_*fLiviZ4YKa>5)+i@jqLqlrXxix*?|6G3pL=grlqM6*7lzYn
z1t~>M+e%@+0KpZJA{Sk3VV6l(2aaZ{!;hL_vMcy@VbKC3C4-o}!)It@Z0~a*#wonb
z7uLl`E<s6X6(^OiNa<s0`707=?qa2rx)f*+-76X2)O#n^MuVSil3YM&pwDJ*et}5A
zQ`+{xtitLKy&ys~%E<`%nMu2v`J&GyVP@}ET+_w*9RJa>%ZzAoIk7E=`E)e}6Azcb
zeW+8&^A9lf&%ZB+{%V5P|Kc=mHiUvd4E1!&m51<vT});27`-UkANh-ZU(C4Q0tDC^
zU2~EDYP3{S%@&d#CY?|5dPihZy~w>hystMoszjGA1s#r1L@F`XDs3-LwJN=k+=023
zf}iNrRD(cBoOaaYv_mnfRbY^;_zB5?`s)rRlxjdA4`C!;vOp3X#4o&#*1If<oDj8y
zaSM}PR17w%06fvMo@QoHq(|b&D$*zPW*%U%J=)~k6Jkz6n2_UrV|B%?<b@vuM$qSF
z$dG=Way8L@t`QHp<3~&_O8sOMCLcPfHf=2+a|4_n{KzOFnxCiYbYnFMAhk-_*91ND
zeU3ZW4zV9}U_DK}nAo5!lwS;dEh{2zAS<xg|LYG?*A#xT$#U;wIpl6&YPJAZaF$s!
z3(sYKfy_mK!B7+^FPYD6agiA@6+9YRIt_H$VXK#!{iFr$kuoOsb9gV)qASJr;f<XP
zDR{Yj?z&izYBV4NqHw3J&HmZPi{eZ>iBY|U%?TP;_`bi0%x~^AL%hRh$qE25Z~N4t
zv1*M|?eeisnAPf2x<X$_WknJcxOU~oec3eQrU>Y8X)=-cs=vs409B<q<B;%M;wG4P
zh{7pu=BnUxtrydhu^lTZ-~xooqfjQeP7W;ugF>6&q`a~@OrrP18GmqhW{UdEvgj)-
znC->-aCBM9utZ=v4UsFU&#N#1hMTM8Jzj1!Yk?>6t=hEs@ZO_SRLzuWD;9Tq;&>4k
zVMYcLd?tL6O*3?hWCwET<Ei9au8LqTncbyK&KarCG)!#<bT?G)V@P!bE@0}>@mR!Q
zCA5MHtF7_Bm0+uwz!$kGx>9Dk!#CsV_w01@HEzZjsCQw_YuKcf0q}?Id5l31x9*>@
zn_(1WV&JQ-0F#+qVz0MnF4v5i3+g9)A1W_!wC}R$@%9o4dKnRVx%O`80)EP5zkJ;?
zGo8XB>d32C34Av^g+zV{_wL&^^+p*oEHRmj;i=!(GB$>W7>mk-^9sxn7@(UEEfB9C
zkG8Y?Gs&U*o#gqrpT}<GnS_jQ!8NHV&St-<t#K;TW9f{XF$>XozhynmHTxh~+}{Kt
zpwAb6Cj9CueFfTMV0>+_l}jzmS|x@r=;t<36G>wH9c_Ot;V1v`t5;r8qiEBMtP!xb
z5wLiSp7+>%Yk4cWhxaSaP$9VqX`Q{0!Ry@!Gmj|2B*ZXRsZG)r7x7D=6Gg~b(@h~~
zDz+p_GY;^7bisw+d>yb{7yAy{yEORL%}JP<t*t;2PP{`<q(7`VGYLj@3Jvejscc>w
z5v6LWM5Loz2dAWAh@*Mo_N4o*s1@~(k&X;545zvM$=Nl=!3A%G(bGP!V9dpcrEx`%
zrFFi|anPpVK1_9UKBTd4@YkB9^e@lDjF$wB)8(BwL%pXtTF?j$R;C#~?gMR3bXBXg
zwa}U|(RX+GV+wCdxA*nsjVafT<EBJUVphcLBe?830N{>39VK;;Yx`bs{=Ns1<7o8U
zz<H48rPzLg)M0D(P~kyP&@4aFB6@xO`pwWr(NBO^B~rc^P=NTO^Vq@0sgkn>Swjo-
zq@en^?AAYK!2-CpuqGdf9AC-g;|ji;5y(f9e1zaOB5(m%%CY!N+UYAx{X<V_=G2S(
zi>x<PlT0P-QL2VQYmZ*-LR(&>wlWS-_g-t1*|;Z_x7kTNub<@hHzJ#ds7xEwqs3}@
zID>hfzqR*1CY&*l+A25SK}9M!>7vo}>5TSeGhL#|$Y{w-GbW3J<I7a40{r2KF`VF*
zlz)zklhuKfSp7F5XDlp?Pi?c1Xltp^u&0d&a{2*ZJ~h(O@iE5aHw;ixQ+4yMoQ^!2
z|5p^HjJq`Oz3h-GQDLQ_MC*_<_;p><)p?g_RU7I$v(Ysnk=%-wbJ1KsTlJtp3n?KG
zGLbx$JmCfkj{aOqxkbOKWhP}JqcfT12wiJvI}P>Nxu+1iGlK=hene9tFtaZ3da2yU
z)$;kC4?m#3m#20U3+0nAJWD^+CD~PQvilfb0L|1N_GBynS&!pLW{J(u$4lwJWV9!w
zY(z2F#r$kcjVk_c=Vn|wyZ$soNTu7_?|7mbed*s`BD2Utk;&5_-kiy?Cv#HO$r16u
zQYz?B9Ddq@M|)eFS0%Km3^=;WLtZ)Er}UP!^QGB>U*9Vven$TLbp88*NceB>eUs~v
z3x~xm<&z51qG#ZF|D)?a`v!4q4~-QSE&m)v>N*#RqbZ)EdJJB{`(8Xx{QnEz{s7va
zOFCCk`hPwA9}D*XC%!c{XH-*#1_IqoD%P}>DbsZGgarZyJN*$W{a?%f1)2XVq*i!<
zVIl|+P$D!C5b=KsX>4v_Vr=q%Am;xHt^fZFeW|8ov%!S)`?>b78KYF{x|5-aUYf8*
zyAsCw+*NUM3s(b*Ras)fVM+c&&$TIa#K~V1+Tgx)LQ~(JEf0^K*B{|9AwmST`bFPq
zx}uJbS`YDo2Y6pIG<jH>nHkC(u}X(zO)e^WmGwbKBCxDBAW(}%ML&sqtO&f75L6oY
zsr+Q_B|{swevw(XVR^@k2jc)(wSK!6uyVTOFdl-5zk%48Xs3Mnq2LUGWgEgbvM4aH
z_F7^DmLSk$WM$=3v)m%j#%E<WeO~IONe2UkN%w^*Q)SAeI@2*rzS`O~O!^|`dU%a3
zOxKB~^_qh)K1||+(le-p$sz8><__TPlu8eYG9=?!{qMUuvZ30Oe~p+ocJi{%F2t!w
zjF%${c!ykGZf?V5$KX>$8DTfbrE$=Naro29$czAC{As}@QYr30!eiV}G$*O>B$jQz
za7$i%U4i{Xu%={$T1Q{-$w3!~gsBQK`BZ%~rj-b?$dzT~75D>>oVgq=+Mh!}F^+%T
zq$2F<pBcGvZ228AAuRbcr5-xFHe;%Z^9Ns5(0FQkP)ij2o2X%Vddd-;$Jwu{V-0J?
zU4Wz9M&JJPcoAoGdUe&7V>d-xdHnATM{zwMi&HnwFGWYOJ!qc()Y&ui?(dBq6}%!T
z%%e`1_;N~PhDRfrMkHk~*@h-gT~lC0!bRBa{+bQs0>#VU1pnir-^^jz9Ck<Ay0xU;
zTQ@MJHwM#`hgCxzm>tI|ur<VSg5bXcH`GU~t^Pr@O?|$@K6I`fJ$P6^uB4y{;O2Ws
zeGigt9nCkl94FecKUG#f%v5xydXZYbTkN;Bw;R3st4~O`trBw5z`TX%qTg4n%qo_V
z9l|dyE<LT2++g`Z{`X>EFBjkJ1_J^DM){wM-OT=fDs~MchkbFR&np9FxgtD8Q2m-T
z83u9`;^W9f!I1pYvaTq+Mni)byXrI~*Kz;rs;;n@K6Te>)#eHTEU)d(wKY!Gr}-)?
z#bA4^Y5=DPcl^SF$78BctkH!smN;8omCawXJ&kk6Q@S?XhQGl0JK+gLgG>d?W^u0T
zy@Djm%_p-&B`TT_D&qmPMjvQFkxT@VBf-|7y9~Ph{rVzE&YHujgL^fY1C#gEvy|cD
zc%495j>xY$_*`h}1RhDdEYWcLtH2?Mo8lI@TZPR~p@{vg(C%B;8K4uBwoZRdvFy%=
zvb+#wu0lsG3|;zMxa0N_r;e?gtwa8Xb3Ne_XL712tJs(B-G#<o$;t6PfQ%T(Q-9EH
zWg`Cmo8eWz;W+an(=%|fjfmf~M_{SVs&py*7Kk4lo>>Ho<A~-o+z;M4Hj8K|HVJ#2
zyyRaz*?NMshHU1LH!sp7>etAd6D^AcH&O!r3G5oq*_u?(4N|$m38{xFAFYD#jc)_D
zT*vvfC}hzTcV$2FxhEKIe{yWR*z;i-X_>l~9sPE|`@)8&r_}@JfUX-Zbx@H%P`t+O
zz~C6Tz(d?_nb*1`8-uON;Qd^<XX<FxhiFGMqQ=EDj;$lE#tSx%b-tb3hf|5Af}lf4
zU<|-OBe3(AA|7mrXz3R=Nh2vWJB7A7GE!-OA`RVPFQV%&=hUGTbML3NvkYewj4I&^
z+g24V4IEfT#vIc{ge1)8Xl|=6bU~u5Gyr%gz6aM-u5-fQ7`w*m1=(1D89=%}p{&O*
z{7FD)evy^&C9wn*ugu*k$->Hwqlp-Ln|jfetLE4K=~4;#te~%SpszQ@@N>h!m;-NW
z=?r%fZlaPHvce<^(9O>A{oXp0Z{_KaHR*1;limiCJk;jd7>$3FWJ$@r<57epBS?xw
zQIrdyr9`>GvZC$$TZiD#z-bdAlP$%h2d%NKP|ki8$)z?eaugF9E!a1_*1`L6fgD&-
z)Q+uTaDYwT-MHMr^wtVCtjRR40CeN7!^fhA*QfWAzba3d7}tqAyW6XMH!7B<G!(1t
zyYFbO{j~LpJAFV7!&TtpuMJYtu6<I{axs5y)}LD;MT0~!f}i~E@I=Ze#Zs9>DuRSO
zDETZw$o9S9`(IMJT;~0*ZMW}PGF|X$CZy-Gqi&|q)K7<?)^(oz1$Vr=U^uPEr^V>s
zg}1uubmn@tkZrh4>gM|Ew^O_o+BEw!$Vbybb{0C9p>aQ`|IOho8VhOL$=1STsIAl!
z?pC8%9hS0@li^rHkVB>(1bt6pNp=<0L}L^ZII?<K>z=7i#-35}eyRB6Nhf^R3;N8t
zb>?581~0cZJW=QP8w|cA(>BlqI1*mPb&jBJSY+rU&2iw!DAxw>6BU&5B4CbMWpq*$
zQtn9yaC9yGPL1baGDLodqg?3nTUV`}QoA~2&L!jy+?{R8?+Gok(tgaC>K7_ga4(4S
z1HvvpQnF#!Yp{s1&lAYgck8rlBYgwjmqaQh_5Q`s5BwCgG)?>K<v|i&T%Sv-PYbo}
z(N1*NZ<~D|H}oOt9xWenX-5P3WQxZG8}fw4u5tJ=*~4}gT(wJ89a6rG(vtxJ;Q!tj
zYm3}LC4Nvq1^9p3IQsz>KPbS(#?0$K!+@hiC5Lq;w9uV<+M0A#@<57!b!&XE@_(yr
z@Iv4lBB59?5yT#_?xwtERsZ~V+!B>ph%c=aCX)QFZav~$E;}&(I?^_D4aybdyZHHe
zZQFU&?7H+DCNlG9#_Y;RI?&BKCjAqYJnECn=wHNBWHO5!gT(LwW2r(GkEX>CnKq#i
zA~c$B0Bb?UO{w4W1bQY3xBCmpz;+mk9V@Tchob^<Au-4TKT3?UK{pgH0q0(p1fp+5
zBZ=mWM2nxuP3F_WNwtn;0gUU{i63h*U?CTwi$X76OkU$06ErOY)y$n{nO)A=-LrA|
zOUOf!<}qaR<%qbaJvQysPTGB^L7zBo{+Icz29Nk2d2j|<g2TDC*rP`IYPAx1v$aXH
zehG<mSCJAXD_i0t5mQ*}bz0=v(U0J{)vJ{!B15%~s{lOp0sR}a?wrCA3};pe3VA*l
zCxY9lW*o+>Mb;{9swkG+Fk$bMHqo5m@s^ktPmERIgy&`>%tWePp{)bv<qQ>t^CG?C
zOHzaz`m~d@HUx0|wXdT__7M9j8YYAx?myQ%vk!X+xl<mtaM%%Q*<;ocAbC$3MOihM
zjt0cg!cTx*GB>`S>gNiZ32yn~6|nHP0zt%7320n+&Ag``FGaHllH4&CMBv#SN*%#|
z`s_92O}j_c$D2dm8Xo2iJCQ21XT|XJ$z>?^K-qKWHQx0%KcywaF>q&eBwn<HbFLNc
z+3Nx=@3`(D)OZVfieq-gyw)NKLC*PwYZ0us@76@6Ki<*U8~lGSQJkZI;PxNv3kwVc
zMEW0rs+*OqDT9^0xx@d7g8yHjs$Lu~Y_K3w$oo6GhUTEK9ZG%uO+9lE<5lALAJ6bG
zq~HP!<lCMTQQ|~1qaHwDAiQs8Mny$Lb#AnW2`}59Va|QQHwz1j%DXSMSelU_>1p*{
z^o2ND4%}_zZFA*1HngomJc<O&Pu^=@eiJkC(O{@QZlTF)<72Z+{H$U%b`{n2u95*@
z81OFVx<p`FT+`fjzuFadH(nLU$=n0x(?>@`!ALw-XmTtkYV^ki!WgENyIHvp`h^Vs
zds<|zJtwDefPiw`fq;nqV_M7&9IY5E|5Hw)b>-sBIPJIIHGWOfU~_FHQk|0uVk8BE
zf-xr=W=&N=poqz7%wAc$cE#F(y<WRqp%P}L^syN3x@}SFNgeKSlc`<%e@|ULw+eLs
z{yLhNFc8>usQ35^M>B5wT!HNR9I^O(7(m?F`MRI@=U=($;Q!+Nee-s7xpj$1D6swI
z>bH0KMCrG{_+9u9AEJHu?Mv)oA+u&<MM0)#^Xl6nJ?=!KwWs6j*5hgS`s-`!^66xy
zwv}*%u~nh=d1HmMYq-td)2rh$EzWx(S4?2Xfic(q?(N_tj`1Mr^s+SVJ$z)BBO0FM
zVBykj8<K#)^W&azMe)Uv?-lFf-T(8z<NIsCW5(ad=kpD`usW^vJuU6^@#`+~+P^L4
z{jm%2`TeBT-}n2gH21gnb0m9bm!I$R+fnWHOxpH_^S0mL?-%5_p6}z#*7v_XP{*GS
z?meIPJs(Fq-S78yS3RA+-fcTyXHPvln>Q|B{;&e2vK`UO-QO65IEXNIa|a?ts~eJU
zFGyu!(%k;vm-kVm;qvswBeg2mnfov&YpJerzr$3=w2K}MdeXU@(VBn#ma_|$Z06^e
zJ<^T5xX-NOlT0w^p)!&@zyC$s1ry#p-Pmz7lr%$?Wpi5p^){4atkwCZWm4-m!}Wc=
zaYFGitnlJxgximIV&|jda~I!u+@&FB!+-L6X(WvIV(-THD|5L1v8p;+wc_a>#6|Ut
zxX~sZKWTBR<KJE~WGBOhkYXHHxb+D3zI=x60GoX~ImXIBsI-C+zDRijt?Uur{OD#2
z!d*41M}gYXqoXGNeUpg^J9~C$F5_%T)xThiY-(qM^UTJ6GKtueU*xyD_ATq7{l?A&
zbF1aOI=YCkwOk@RHCfuwG0#p4eU*y@e*d!U<oXldIK*rWSZ3JBXaCUSy->}wTi(Bp
z!zpbL?QGXf*jEgiv_=`{oUPi~t=4vh*<c-`Xi7WsRfTfj^84^Y+^6#i@avW=>D<0b
z6WcLc>|{-{l%+XMyF^2)vdE5-&?V~)45rt&?Qd)V<2sn7*GkH*^I{8@85f<p-Sd&Z
zB9KhYg}%N>Pt_}JT4Wb!7W3p6&#3c?o$x%<xF7+_OXxBYhgXCm%3qfO+9&E2hzC|J
zerw|Zmt*b@yQaf7BP@Oc>LZwvt#D}a8jSX=;!D8(=_i-Gy;|7HhgW%%AU~-_h`GLd
z&N{9}j>R;2IT_5f5zvAY2cado_2*AAr;gZf;!!8uwagrL+}YQ;DH*wJ(z#nr_bQLj
z`ujrWi!bB-j(6DY!60+DN~nqrOI&im$%Nj3|0oB$QuBA<2TU!uT;ELWa`p4L)C_Z9
zI!FIatAiw|aFLG{odz;c<(!p|PVJ{IH9rtx^Dx}0)Cipt@GOUYcMloE?g?=S(?moF
z%qI!p9Z&)75#M!5gi*31CxA(Avqf5JoNm`92oPXw>J2Kn24_#!^WuB$83fDm*9S^w
zKe>Ya)D?Uiz6o?$7V~^sMM7V14r^>ho^5r1G!hQO0vgcjmMf<XsL8$5C5}$N(|X7N
zR&{xO!gxm}cO~QsA6HFEzk&kV&^m$M?PU3zI77F)W_R{9gkD@7oy2>kWIZEnF|8j3
zROGvX-VhRycY2TkMdpQzA4s=J{^yo>@S<j)cLpj?zKx4H->Bb?IEjcE5Um2L@g{rD
zOX5pij+UE{)*Nc`%jHQb--RcS41{82ZKQ8F><4>9(W;~@vnJD#j~mj4i5Qh)_?jd8
zC_BQHx<j!*k~HtdH)RZHJxCh`z3>=xF|IFA#{+EA!rk;8c=HI9xx_oi{}BH{)dpd6
zsOZKF@vyz|WameFCL)!PgS6S<{|*tBrsgK3D91CBw3t>i1|-nu0`-75-mT5T%n}V)
z9Rf+=ZPalK#aVNc#6%cpuf6`rNv}_xOycLvxXCAFnQ>zGA+)M7j8R{6^xHpEX!VMV
zv$n<K?0;gQS}D_zm%_7;;U1q3=1(JKm3W<iv0EAgYX2H3UJU4z1tJ~XAOoNZ#3q_R
zr%_3)au9(a0UtK=7o6czHbY_;8yo!TY%BIoN5+q#@TeKb{C+ON8<YASDi$Nn?%D%f
z&65=h38}j^$$lRgRWz{1Wh%8rL<7fUW!zxGs3`f?E0;ybE~JXG27;%Z$2hNsJF^7d
zzUB%ensSvY7Bliu*&I#63y+hl{npmT@L_&rbygnZ;Xdxi>>Cg%ePj3?a?HhA@`g4q
z0D7MMqo91GY>3toWA;<(cy8fa!;i=YkBjcEY&IOr*crgWus=12j5TD;63ZqJP3cin
zK7@Nz`k{}|P+yd0It187#$%_Ttq2D_;ZsCQ%@}|+$E&Gx%JwM|3Mn<amIV9f)yI@w
z2fNqf5ULH*l)J-4xJ$z}Rj_O6xf5q-L)=DIjY6}47p%=C@6dU3?sAy<@ZQUVTTEi(
zTkceOEu`$!u#6BFW>S6f5w2`+Gs{I7&!>d1crHsGE--v7%3ERy>J*HASLHUI%&<Kj
zN+|!5d3aQiBDFXR`D0-|@!Sa~10TVFHxyvUBiYNrh9&I$>Z_9i%$dD`{P<)G%$+?>
z>D{IoG~x5QU?+Vd@jv1EzI)U*#g(bMVAZ+{iAEe~tfuQs*;BiV7lS$%3g>gJ)8J|#
zSEgKKyWm64>_G2K&Th_iW#AP9m=nU8MClaYSmu>mqU-Wqg4?eb95HpN9@&j(G+7Aj
zvpnxt6amjA(bbPeosPlTn1q%>`(Y20#jyx}cYhFCK#45m*9v1q==lwVYzf)RZu!F&
z&(;P{tMJ-Avaw;B$S5tV3ktDHr~MY2|2236tf3bG@*C~Pq^h1b>JTKpF{urgq|1J`
zr#uAm^78an!!_skGppqxY;-k-tc_%q{t#EYt@0VZYEqq#EbCc5jcm*_S#J%!>UlzJ
zyj~#Di1Jsyo`WewS1}-Vc4$uk*4n1Ba)<Pon?V_0pG-4ibDea1YzjCPu75?TO}x!S
zSm}{m_qV`Q`V@RF$}XoZhlEnK_1tYz0C0wrL%-rBxlOt)2&e_qs2ueAh#<u2;awye
zZW|38>k09~fBHPhxn4=_&g!|fK;;wi@)kLPy(r~BhC3V5noq>in|-aV#DT-JPfkhs
zLL52_DMVE^Im_4mG3Sm?Fm%AO;uiaELJ6YlTb2)}Ryx9k7Se`Q{7`a4#Z2D0@W|5&
zYv*RF;E6t3`i(|&Ls~jlpe!cvx$uFJhbS)f4Vy55RT@BF5Jc|%*aZX<Zg<3Ti>7Wa
zW94a$>5U~2?*Cl5^Qz@ZC=sYnIL78#JF3=#(fvH+jleD9VE?L&E{v5Q&Ch=h&LsO(
z8%N+WG|%i-)yiUbxKYL#L~`lHxEsY$H(5$CgK#UAwitj^w`UgxahGJ+P8XRiTY~3Q
zf;6PE)&xipYqRBU>FeiKTKO<7wuo0LG<3W>9``*+XH*^gYMv_+%Y@GiJ87}BB1wXB
zQ^yKgL(@BK5tOZ05k@N?J~nMMv&^}MMS@9#_S|(D%FZ5QeP*3d(E$pxEyA&WlB64I
zhJ;PHt$smX^&zMLhqhN2p4r4zq)s`shi`JR-EK$`|7B-2#3N}9z%XT!B`ux4q9(O{
zm;9DD^ceDn@!4`xXv{|_VDY#E7%z^3Nu7}Hic!13r@qZ2B)DU2NehlbPjAyXZm?xF
zSHcE2;c$*=Tvn~}5QFy-lsa^Hj}XyvCFSi&&r})XRiRmpS@UFoFV2jhwu?HVmNF!v
zU}r7IGTF>4#rY#_3mg8PzK0{NzJ$Hu)zca>N>}VXr_}1JK|RcN=`c=H{b6BHk%Qp2
zXiLPPC7s#Q{nn$n3~nUWAO)zv&V$`OxP%lgQdev3;HnZY9l?GQbF6KwA(4tgBTw8>
zXz=-@Gto`b4;>%e7RRh*ww6na0TW>~TC8VRYY+*wFCNKy+;=v-O|1ot=Jk`ayNoHy
z_=13;;l5P6WY=Gh&S^1{CIHV_nXB{;Rp;^`9aV30^dXnUv--ns%hC<^H3-h|@r>2P
z9M|XtBOaK=)-O`yJr+!x5nRyb7m*!T=?$AYrA8S+EjBFF!>rn={u}t?SM#H@$tB#5
z(lMR2xFpJ(9iz*g{I4YF5fR#0Bxgk6OuGBwsF67EZ|>BZ#scLDQ#EI$+BRu={As7n
z_4LzyqGexwR*V1=;1W>T2PX(sNjg+kiOPH1f;I|l!AwErWRn_}SV3+NYuiPqx9zNI
z2e*7JE9t!D``D^w%@eqo=91&bfl{jrX&}?)N{OwX)ISUAAuB~)w?y)M-d4`4(MSOj
zg?i9N{U??Gx>a&br<z(sW#Q;zMYS60W?B@e);HnYC1+i_JMt7VSsAYLr<*8dRd%1;
zE2uA7q!X|Wr@x^wiru-FtUkvBp6{lp*-I<+R-B{3Em?AJSsgN_d6Z)tYW!{^mN3w3
zYQ?Q^PsmdbC%w!aBD0y~rQ|P?^zstj8$RrG$~95Uf{WRlQ@_cjvxnCFVVirAoR_`l
z%$7H2U=P=wai=whi%S7nq7<$<E|C8eG?5wBVr-5Rdk3=IW$3}(mJ@)4p>e%s*`e;u
z8#kaBni^RtQ~tQa%Ue)XSV3+~Lnzk9*)E&ug|?2nmjr_UTHCPEFr!xEh|cXzvi&rC
zZKp`iqW(3fP0j7qPnF+d=w%(>3bAMX+Fjzq{&d$Jswp#F<j&}~=oG8SB}ru*%PJgp
z`e?OXc}E`?T^3H+`}psExk&I!xkc={`L8Nv6IlFw&3;s_jk@-|mmRAhBU?Rz5>g6#
z)@8hOvAM&Xl;+JvBPB?FU<P}_g7l@S>Mtz+N8zi(!&})5pf-#Wi#)SO+fl)DUhWMr
zA)4Lk>FqcPg{AvQ5qoCH4$L;0RMjjyN&G=FHwzLziQP+=3~ga;F9DZm-n6sJ>`Btl
zU0XU$$Is;IFKBukrn$8Z*+vG3C``yntZeQBPke1=gERJ{NsI}SQRwB1jheO%+bOHo
zJmJovE4K%hwviKXPC74o3j;aoc+L$kWRELqL0;xD=tr$gZUioQE%`_hB?`j@t!QfR
z$6^9mK{B1iTqiTK=_LRzp<p*t`~B7SlE#g!A9HBd8~-ZgBdpnZXH>Z#Mqbc8h^~$^
zGsr~ovAVY>$2)imQ`WEi*wxf~e#V!>q0JbZ7WEO*B>!wSPT-B3OFMj~zbx61%!k%T
z4a;J6VNrNlM1{@p&eHUfCjjxMqi`S)C}C5(Za<X+D`AkFj*8Y#-{Iu0H2;Id?(jan
z9J8U}<yrW4?a0Q95>N-tQip7|$SbAlYO~u()3MNb7LF}!8q?mF;01f+uHj?fI)~<J
z)N3D%DQ-vX?!PRMp3Ib#T&xBjS9JIU>*x*isaAp79>yOqyJ}fo&phHCEM?&%q;-!*
z&zDCu_8up0gk@DwLsu7sL89XWlVKbW+&V(pZlG_S%)CU#Bj-MzwObDfo?W{Ply%+{
zHu@<?qZhaoy8d_~i*3|&x9tUXi7EjZPtRP=0}g+DjWm&7fu^T1t2$&>Oj^0a@LI{^
zT}GSTDYx&et1VrhGIu|?v}??rB-r#QQv>fJ29I?pE!D`}pVrB18aWzhJBec$N)l?k
z_a2|2eH~k1(Vg^<A<h(7Gex1LNXZu@P0|uu8?S(>QFL4>w2%<W1a!V5Bz=@g16hxl
zvi&Cn-Oew@-X(;Qg6A8zKu1w?<gjIIVD{;vD4774U5=f?vdv~T=qFk}zqbn~+`zAQ
zYz4tmr=~mRvs@%5*Hc*`qU_b9&_ZUqvg*2=XzaM7(Bd$3SSnVW(tUIcMUpqfvYCBO
zwtBI%yMED^Jhl$kkWa*-hfOu&^cwDVE@8oSjBe*jc6e7A$^W2bSlh8w)tyHsUDapY
z5UXQ1=cAlb#vvog%{=?U@+J%vRJTjBaIPv>JN+^Ib_WHjjl-||2<vX-oo#BqV2xdV
zz?nSDGpPRq7dM-V-}?T|<OOKOHEV`dhL^!zu2=i<FvNMDfmB-p^pdmAaeif=MY&%h
z3t85{(KwD%$8H^j!CGzY)E9PXR1V8nhw_9_&&l-cggjFmI(B<$3i`XkVx;=>@wA=4
zmj(a~{Vn>0JeH<H(P~GKbgy-p#B1$-t~{Rgz_#5PW(tMBEL%Z<OdrRd)+$ECVpVv$
z$QnF!C7qeS)h~6n_)Ye`4h6-*!9&n|#8NExg0KYQs%fq}^bI71*aWKyL<ZVwKBN0d
z@^YbgyIWxH7T5DhY(0pbd`?v>=G09v3G2Nw+E;{b$H&fn)cF{{D}wLv#Y;?MmC<3`
zl8l*78~Two>5f}y$u?Y9_sRand}Zcd7h%?o-_M{@+bVP2?r;9#ukM_uATR!RC>{Xh
z9HdLx3CtPasR;vRFd~j8y`tM<cPR$nT%!i~4CA3~=e`wBhvW4V*e#B8)nir*b18uu
zJ-)Mfbc-`E;aD%i(!w#6jF$Ez;Q9COWA}KK`KUIb$&dIv<Ef_Y)5DX0x<se+vbEfW
z!f5mF+d8!zWBE_#pT{!@u8C8nK;Pxi+Pyhr_;0_19LTw^v8M!wf_P<jgHTz^pWEos
zui(tsE_^igV)#a!CY5j5IV+KE4ZTk3iwLUV@HuJQ{;mEyqcpC8o{eV%!2|l$mn8*l
zKBRV*#@5>m#^u}(Vb6CK|8AwLtYw$94JvRR0rt57)cb^KwgL{vC;0h0#yE*pe27?~
zeKgc(oT@E<Y8~24B^axus2qM?pBj;rSE|gJpC=B|6*HM1_EI7#=8m`R+C2^auh5mo
zvbW4kI$}QmMKOV?tDdjx)9-?GGfMav@408|<iK_yRA(Stz;37bFxDfV%ueXLKmVs4
z<K;wq6+#_Kj><;Bqv@}}iC;GH6Y~evEf~s+Aw6aW475a1&r`>AZC>q%L*u2zE&~;v
z4f~Sd--AZ>0_T{=$X$+v$S5NQ4jquL4ls#6B=?d{ol7hc4t<%=L|!dFr<RN<*e6&U
zj?z^;e1SPeAHf-1q>EA|WRLm#H1OQ6TcA#xL+=K)hchnKv$BGlyAq$U{L~z6&xkK>
z)3`Rr)ONCF{AG{xxN|<ah?%tzM`aH0@)Etai@F`2lie?iX78})G$g-eT0T%O-+x0U
zdzjr7es4tK-Ldq9DC-=p<mx?w&1}DTv?o3x*|`-QC$@7+Ihf<jsD!^m3)B_{2jeBK
zS6v!P7CAM__BB4|UN0XvRM11H`n2>9_f;)SBPS{X2LSw;JFLMi&L>QgT}CL3?!XxM
z!n2Bl?DvIyZv}v&k3tM)wfUt+bND#_B6QH<8#-kOT=(&)^xR}PDNMxR$<QsVV_4Nu
z7w+Q5u*d#19T-J}-03EG<#qp!iJX0${;Q)L-1dwO9j}ZRO&an#dX$DBc+H04&%Fc$
zAfM!%IiVW%fD>J-ZZeb_+n$hZ@#Fp+Zq)TP3&_Msanyhdcr4yE0TpUSuS8G<m0M5&
z1zg9{%-`(9*R<ikFz_9#x!OQSpO3oyE+=xIxq>7z+JbD7TziNA#vJBSrdS!&0C5dA
zVaz?BqKrKq<(wq>7?6%lVKa2ZjyhpCXnza)hjThA-fd3P9mVh1`M>US?}r4Q805G|
zMX{oXXEZVWk>NcAp=w=R{EUikSL2JEpCDL~b=LnNeQfAU*O|_syeho_Xve)G8T!tM
zd+*pq7Ryhw-zQcQNTBbkOUHhMY#ghTlS7LAd_75sJrOT(3@=YBD+d-7Rz%vSa71-s
zV-&%`1e(`;kW=8)cdvUd&A`(si$=B|L&DQomAMH%tFmUlu5dtU&K7VxFtZexImdvP
z>+M;Ga-Iv6pPNbVsnR+T+X}9_w%tbY>~a6q_bH^ocpfqfisy65jp~=MPt5hPd(yi9
zw%fh>n_cV+SUot(OVDaU<s?tq?jlE3WGoPAUT*103)$7O7bx<hy>1QXm=8xt1hz!F
zdsrI2!MWC6)t}uQ_0&STBR$k};sh%2%mHzAa&Uy?o)0)2RT|Z2qz<J`?!wy`>5qbb
z;IIbsMbJprx%;QB(XuV=ybThd)srwgp?$A_>O}BOMt!st*}gWGcLU>oF()tsTb1U}
z$GR;=c8?{LQp}4Dq^%;C*A;lscPt-~1J9*ik*J@@S<bc`<#i`rE*_I>hfwd3UKt>6
z>q`!^TrY|+|2Uq4&iy*Cc-Ujm`LS?OR0XHdojlF3a#L)nZJ@q_)|TMVkgAzmWUs3z
zx80uX^I`=D5K_X4^v-4f^Oe$|RsEBcv;<y_-ia=WMKIUNtDfs=&$9-=WL)d>8~TQ6
z9UITuDf=NWI{sMjy|=SSmsz3DLe%qKjs*(9(ulZNsaJK03H;@V+y_#kplTf5B2V+C
z{7-9@^9C=^P9oB;+y^R*`0{m%wvP7RWO9;WR?mU0T<)`JUrw#?;|z9A6gUH)Cg!K0
zce-re5RaEN(2(rtGr9@e_@L%u-co}54U0k5sNIRI&L;n{Oj&$yY^9V%j@$<}sC=P`
zUeYfsf%BZ1dGX=$6#i*4;Em2#tqT#(99{DWKR__NB>BJDbiN(o^FGD>>XkQM8f3xe
z*_c*0Z;EP89Ue=_AHgZwUeY-Mr#JJqBh>d|vDPowI9(2)hk*Ew&`?go<Q(Q6k*Z<^
zlxI6g9D&1kAVKDl@dPoSu8WHVG2U~}9*SB#s2}DxTq`=;YyfGP#XP(I9k@7mQNr6x
z3GQn0WCT-FoP|=1614q!ZR^wFGYTimmzU?6@VOjbtMtT4)FhSBLJw0Ygt*{-cTOvZ
z**&W3zpGmW5U<pD9MOW7U<;Wm-PX-{%rn5+Le&_hm{^2d?wK2XK#a_E^wHSgaq@6;
zZp`d69d;nE)Y+Iqlv=;BuePp#nS4pS0dU8EMZEI`S5bo1uv=1-oS0_XP36xWlrF`k
zh|@Z|XcSjx%r3WT%<g`tK9p!3LgLvS<cC7QgQ0|f`Sj%jw%Q~!*Soo}4(HDRg&q-5
z!>U&}80-WAii@Lk!KF*SwYmG=T6f+f&+X!NdCLh3^fS|&lF$^EPh8U7rj}ipqQ|GX
zGk(6(QLlCqU0p?X!f;zvioz2;{$F3u|2uUK?Pp*J^}ncd@x3K=IzJO`h9COR|HN}M
zGco?p18%=0z5g0;hh5*(#;%HiN~0RCv#r~q6y=K)gOMAdS5(lDLGDkjCS3N;HhuH+
zhBQ~Uzf#<J?c8U@k?D^FA-r_{f@+{fdw>Y`IQg`{<|6|a)+C8Kpq>Q(4g&-k6~izT
z!HP%|vp}PeBvZMkci@<6sw5I8rHc$XqvhooohpHBfa%24FS!G!b_Usb0}Z3AqQFa_
zi}q(If_)?yl?O15zO)pPnPK<mlof<=rb8qa!@WosuV-2Ncrj7=F;C-gWWV&$A;>e2
z(dJumCrHPu6+^AOf+(Ba!4yk-?RmX_ZXbC=P?t{(4f9fXO>x=hx2SILO?ZoFidW+8
znV3AQCtt6KV%XolO4(H}$0b`V(recivCU*l)pvTA7KVY8gB555=$J~^deXmOOv|5x
z4;B;I2Je5+!erRz$;zNv7{)c%{^ktKr7Hk3H$oX?0t6CnPh(0U30)`z0SJ4;uX+P-
zndFHOM#i=jGu?h^PbW!nx%3il#}<q&xfxnI?J^cfHH369wMX=X+*`DR!afhX?b6%?
zZzM1<aa}*+-FtP}5qhLJQJ|ZO(d4n>2;9wI=&$q2-?cn0fcSw`NHf*xl+v#kqg<-L
z&%c>z4MXuDH!hJj$l^(x5dzSYOa~skV;%dm(unn`OKWcK@PISCQR(vU@eyOc6w%l|
zR1CCp!y0Y!5DuR|!(}RC8~B^$=quh?pFg_afpP=%zeFziRK{>F1jOX0()Tj@oFQFV
z<!F@e!+!yseTPKZH(h5p-zJy0&fC5deZJHFePxPwn4k6h-*_2RKrC;|KUFIM@jnf{
z%?%vPjXBu<bKS<M*!{T7BmI}39Sw@~Is@YpRy4@GASiJKyqzzggt<6E2UnN3A=`AR
z>3e!jzNHE`$oG!V<9XACQEC`CdM~M}C9=9a@Z#oXX`5~eVHc9zQ5)ImcXz<G^cP8J
zVBxxAxhtGR)&M|m)=`{I37*=7tU(u69VuT5x|u2hgf(w(8$2IeLT{HU5}3ghKGPRg
z7^jTA{#O_aJnb-ad}fd;M0$X*J<YVU5|Sk#Ken^*Ofph8KsV#R9Oi3VQeoh6&qgr}
z1n_gS2%pnan}u5vtqNBgIAo2xgEm)xS<4phP)KdG)DIFg9oMV=8>A%H<7H;Yjop(%
z>NG6ab(7lF!_1*;v(=DYNdN756PsFT!vIULpoBzbZ|%M=tJ)l>n@nV5k}Ha4t%IFq
zR-;s1wStE5lr|ZlOK(J)0AtZaCR=s6xCw)Y+Qv)+Y3FRBrJ-!+yaGtblO$GyR&A*(
zhmDlAN65ig!sy8-7rY;)?`v4c2}N@+Sw>>Qcr?Glu_vS5J2<gPcB%8<8iQxnJirMx
zx5-qR)$L1<IAaLWlLz&DIzZ9c7p;QN4mufN*@<N|tb&yu&q(SizFM}EWENW*9*Ygq
z`SGO3;fy_rsES%hVw^2fv237De>LfmL%Zp|_By@8nLBawzCJiVI?AlfrmL-}`n8$H
zdExB-hzEN9T!&uZM61d8<3esd3+1s-x>2Wq%u3Jz@h)A6PxKFnE>oXaDrtKI(8%hL
zmQp>7oJMfKio9->qQ(Z)06eSwUKr}@z!<dgPG656!X=d~AlgCvP>T8liY*Z)m%rmC
zvFSfEb}kUiu(E8j8p#G4!@IZUAGQH6OM$q$^=X5*&#gd_(3KJo{r(p5jtOe)Bf%8}
zZHn9(@<8Et>6bG&Ju;72x=^IhVbxHY`0WNg&{a>d4%`TQ+KlCadWGZ-?5E`KUt{t?
zK8td{%kc8Qtm6OQInwz5i4bArV)y@pC$02czLom(@7Voup{Mwt!Wx^?vvYAUINJUv
zwner2x5B<8+Be_}eP*7tTHP`q<@py!Wtj(sD0I8WTA742@2IWxhFvMh+T+)g537ph
z1Vd?B6*0@t@V?7yC+v-&se#Q(&T^Gxk9Cj?I+^F8&@*MW6dUw?tD|tB#mr;RUVN8=
zV(;=2C`{@B;0Y(s$`O^=1YIfwL~0-3|EGw|i{iIRIq7_WH<@e%qSk2=m?kt?JjpD#
z$`ra<A@mLPxZza|Q8bn*wGb9ZA+@ZPU;rH-3Tqy*=iD!ZGF)#kjN~aW_t-=ePkX4j
zkhZdm0`E>?vR^J@f$V?J4Rm+(tGuj|$)S!HlF3~YnQ`*HKo~?Cu}z%bY$}^I=`xV@
ziR6OKlYccA$<g-6xC|c$7Eon?cljG`&u9K`jJ;!YE>W~C_{Fwu+t!I~+qUiG#I}<Y
z+qP}v#I{fPa^HQUyI=RX_w}#(Q?*C!HP)`0YwtPNe1Acx{;~Hu__DwA&2N?ye6U<t
zyhI_JS;+X>JMXZs*ibj=DZ3DETpvKF4a=HQJrI!`ON%B?FFkU^(46K}ke0FEmy9hG
z#foA9=lfmsDzaBFaJBt!dXz`mHxH&=4@78$^^eS|oOtiIr#)ZhxrvvD%hr)#iHVi#
z*AwI+Oj*tWeVp+84E<<PR@~}ID_^HK@mSX6WUk&V!p2BXaH5br8NaCc2BdsBC)^!t
z#J`AXV;m^=3=~^>O%y!RF19^~>|#i4-}pIcHKxVo{i;lMu@<^VN&2QXL>AJvSKV|~
zMr!t!vvhH@QQoGz!7I;>l5_@I%-J9ek+pW_dWn*CP-xoXXVr4BgcI-%^bThuD@sN$
zf{`*!YnjHmgKD<icna*;StmSIlh&2Kn%pGB+W5snagl|1`mtitlleya26J}w`m8qR
zZD#0xhr#BU2DX(#nKzfs7eXgrCS+R;k%+w1Y`CeBfBM4P%*8(zeXa4af0ou03q7#N
zyku3jll6mi!+FhFeSl$8h~nggFtC)ZcoWzt|1!Vu(c-4%^B{MS<dYE`pr!tDj$Ev=
zZZhA4UHBUrdvqvNJB<e&r>$DXD28Omyrd6<c(~so@W$FDd<e2RgzAtdth}QdMi-1S
zZ8H(o+aJCma}W|{Q&HLb%9;4v?qkkU+XJ`z7!^+cR=<0!RQC+K4H{?_E|@UVD7Uvc
zlVnj3-w{W=OA9Q79O(KSkL}(5;9Gyd>TV}068|e2xkpdX8t10^iRZ)d(_yqrOW=ZH
zX?BBNgFj`9WpzWw(K5u=G5~0TYUlTli6Ln;M`cV%kB)WrXTy5jznsbUgdV?_iRVM0
zB~k+WF_NE~F&v-qid+QBKyH%bX|YJVu+cWzH;#!WM{pd(azRW=8viIXb!H9O;KCS>
zXP-8Y?8>ALGFrz79Ja>@8I;Q@jt`sI%vBw^L?WZ+_#(_v0dXSd>w`N`15Q$S)|Y+8
z%>VUiX}y}Gp1DS!+irADWhZKCXWl7%Ea<LSf6yu7rtNa$v`w$w1US3(KS?{xT%U@_
zKfH+WQqEc2ZUcGq^%Y{@Ug1DLi+HDqh7sxEm+@*|oaT3&wB*V#MThJm=td1<eYjpY
zLO6+DV(Rcmuhpg8eb%rIzf}gy1G_h8P)$W*mYf%29n`k_+<t-m@9Z*fnImPmAK^&O
z&sXoi7F7QyFVx1~*yg|ImsO`4%Kyki!g^oSvjsD=*_&i3@fahAI^<*`0nL|#L(tGQ
ziyqEb)Q;fGBmRH6WGynJke4)5h&SEiu3o&Jo6p(Gg!QK}kn+N?vx|y?`C6}B_P9+P
zxXhhc?{}${1TdE!Qco2`9Z_aN0ty^|8;%*Fe;Or`2f<DrB#)=d5+<Oa2kH&}K0-xg
zX-mSo){qUbrw+{M1(dUrGO^&|-D3jNW7dgJ9AmeER+u^W`$}T*I^dPu!X^ooF$is2
z6U6wk<}tuR^NcWudg{LgN6ixwM5!VZ*$x=v-Mx!AhkhZwZoGzS%^n=6UF_`@l;6TS
z(q>X;wxr5cUvf?>%z|dNS~ct9?-qb?5@h>g!`|@w^*qqO?`(V8VmPErw^)WrQzt?N
zC)q@(Jr_%XPv17FSugMH-+KYP1%cRpzM%3$W-?Yw>v4v$zogaE`FLwXd?m~1aJAc7
znszySYWrzo*uCzB`@0;x2CkZ;WQ<@T;R2JZ4~;(%;)L4fNJtZy@}zi!6`ZURxYsvH
zmIlmZqSU0BZs3mPk&X{R;iZ|jp)pIfBe}`~9C?b<;f=Ddn%6nfubLfc45%#*RQgb@
zlUhrGvq~$<iFN)FtJX1$Gb^69l;4l=j-j1a|0yUS&<sJ`D=BE%X(kBnt4M?!u3J>*
ztb)Es9n7{<T@&J(x>5;sjWnFeV%=m2?iOWf#Z}W~DaBQjZ0t%ooVI(@f;gV{xC=^$
z7@D~Hz2?ENhmR9O8_L&d!C-WNR(J2-vH5RskNs;!3cL$ZZwp>z&4o<(x`B$(Qm2cS
zF*J*+ARqlZFeuVSR+5f6(zHfH8Cy5&9M+$IIf7vbxU$-tAB>zrBR7ztgn9tj)~r-?
zMP?WqHVpz7h86AwW;&W9)hnrKMHv(Bi6tYLKvV;~rO}BR0Vq{EIEw#{*V`iQk_KjM
z!;<%=#ohFqC4eV<UKXE;Sw}jJiIv@gsl!sBCC9BZ0b79Le67QGdTlx;ul9HS6Sb$m
zWf%F8$3NYcT5G>!e+w5_EC2r&(66t$JKOjH`Yw?FXP|HVe+K$jDmVYJ(mr#0_lN#a
z(UA#IkNhk%qu;WN)aeHLh(?sITN_!{;w?!EL|-pCIiOP7tj~@Mg%z?N*E`*v-m+T=
z`3R#G8dm(~=nI2`9NvSZd;vGn1DZld!^5CGmQP8@Fyh6gQdy9(Apy>52D{nV6*QUR
z5{GT%*$S2x@WoT*;GMrnupxiBw=IHSKN1H>s}2xr2dSV-3FF0?ZuLdOKtHC=4FIPJ
zE)^p3CWZW(rh7P~la>C(3}t1-0z1RlrNK?@<B*VRbAR-D__+Uvhoxd^EY;bVEiW~d
zW@<HFGi|hrZmN^B=7L*kEtrW|$qS!D(s5I6=<=6=2QFxB8)@MbRhRwXLAk<HG!A+_
zLfq+$iyH|l64EAA(3<?TY}RC9Q~Wrtisd%le~7W78mC|@RFAUz`@fR42^*<sQI+<h
zOOhwsvoiGq%?n%A%nfYJ@GfM|M2~qIp;^hKPWn{fq7oSuSOmhu(3cbS6_gD$kJ5HE
zbm0pBWR-iz&!rt1EwSoQ<qnR@bCjJJe3vZa7&Z0tNe!ORht|mm=S}v%A+>Np8eEW}
zK9iPZYqJN0Ax!%4wTJW&MIRUE&lcCLR#Rf-+g!MExL42VIh=5@<{W&@S7{hIxxHak
zm;h9{0X$xjojOnlcEFViB$)MLF2Qa-srqoWSw(QJYxsU+l(&qv@x(eX=k55JF8slD
z$_VZVC}kNBZj{f@YVw_+$-H4Ec#dhfk#mw|i8~e`BFp1!6Xl7rmqbk4x#@31E+~Tu
zF6>a9caPqw2>F{A=mP?>N0N@PPZJzOOvweJ5GtFj9F}MLCEY6PpGg$^yr@p?otwb~
zV~%926VJjQ_M9%T)*}2K4{PnnFI_N}2ztU!SzW$ESsO2cU_IX7-pBe+Q<0WpICdNR
z1rVk2C*7gf+Tr@Uq~E$^e%jlI9g1!Gv%Gewt^5x5GCqk#yZo>J4^p`Fk9v_@@_LTp
z=ig*W4FC}Qm#Ey-L*K;E#qfXC#@qjec2UdLev=dVr#9|C4p4K$<7pq<HeB5X-Wl44
zTaksPXx}NM1l1~}D{d$wE9cy?{(7H|PZk+>+W(`u<*VT<VVi)P_;5ePasc1q{YN_1
zvjzQ*Sn2Sz^XAL%c6G4GKYsFe!b5a11_sK#(5*E(CG&*pQ0QfnVq!cMeZ0v8DGCSe
zWiVkfTLeg|6nY{rTn6C;Qc^n6{@$c7k7Ms5#i4p`5}9sNGEJg%n3D>sG;<t^*qUu0
zv*>;@s80qNlPrjsT76`b1I-9Dl!er*jAFWsp;wET;w_lDm0{B2!QJ|Bn+Js_y`UDR
zG}*ppjS>6>SON5^sFdmbd%r=m))Uv3(8QnFVIu={xJ%c!1TAt#-@4Y9G)}lg-jK=R
zawFp6aYDok8M3>naE?!lUfak>(4vCbJ*{Re`^(&5(n98Qar>8NaIIluY!OiSYzS(M
z=rUJu?i8PKl`a!xmw3{A|2F?$#g~t}g(^rH=2#d~g#b4kB~hr~p_)qbyD)ps-FD!4
zLRa~~VOc{|(fjR>pHr!I8w@3HN(tYWNFK<!^pI##CKBwqLTS-Mv}!?-%^8pb4!dEa
zL}vpPHqNTH2^ku+Jh@+Qd-q!e-<$I5kuH020<((-Yna(EBN7<jE%4!<VjZ`m@H=oY
zPlYFg&1jX6`D{@1ZV_@=x4cl}uJG=8ObUeO0wxdmK;QjOOZ9N45w(H^?O*63th$Vr
zO_pg1vegq()fj0-2l^im?)bQ`9;_K3kor7-U`k?l$A&z;flfx1M}@BFCPa<>E9m{a
z+<<?G<qwsOle5dzJce(MPJSOSXB)151N}UHgy!l=<8@3=AD13FV-Vl5Xj9H%KAay%
zXH1vwUQnCa(SLJtV?NK8GkDHJx7<Zto~MRq1q9ReWFC3+A&_3+z27kLjK@cSu13-X
z<VTB8K9Rcz8<W65K>j?jF+^%_qow9$YC^)Y;mv^QpSS8)2h{GK1K&!CtM!E%FdtY_
zM(mG(px?nsOSf{#6MX~)NUoD?|EAzX`m;y%ri-JMm3l#+es76=zUT$O5W_DcHE9ja
zJ*U}+MUAOF;JV9RKZN5V)$i>99@`|4=#+P<x>4O52)Vu7a{rP)koI?R+b_y`9P{9Q
zD*XzdA0B=M{qteX%EfmlzL;0D6DPD#hiU?6fEvqiT@l<v=`-Mc*6}Nj)%O63!W&_N
zOW^r$j2wmf;$196MQ5rbio5+|>i(IQLckEpJS-xPvh>7oA~`5PM<GX94GH#;8T_(w
zRJWlxkMT{^E5}b4+dAVH;-4l`P$<nXalnCPZhwd>s&#(Q%|Z$UrTQy&+rB7&(q(IQ
zF}3E!i$HEJ4ujn~3UfW_ZU~#_?^45AJ8_h8B2DU+DOB!W{AH(V==VeO9wQE!He#)o
zAQ1=v)wE*v6R0HM8j_QCcT8`~oXvF_Gl124UR;OtmqdVr1mi{Io~gu;0l$w}lq9$L
z_(lo_gHm$oy0~Qz|GzQVT^fmHK~dEHB`6PKP>gF&@a2<g_*5V*wAiolh_TsbSkpio
zGNWNw;5I$Ya5mWYPUJDyhNj5d;EXJ8LcAb?aq_XkFg_L~Vc~cpS9p?lw+G)Wtp248
zKqoL|AQsoLYm-SYY?wMX7rmv$IIdDQh)S!O9j|&wu(}AVJR>>fYw0g|VpaZd8R#-`
zlMqjIu>K8D8-c|_+D@iR<^$+hMBy?h?7Cn8Bd1t!f#V8I<X52{7Jm{{526c{ku%!8
zYK5a0JSyzXDihVZg&alJK#~uptDuA@XXzY)k&_J)#>=e{<JDgLP(bU|8aHXJ{wRGi
z>)qy4%xhyxOx(vlkMn1=`G}39+b#N;;4D)+i1V;R#sHqYjbw(FNmNmD0}!II?h!Sb
z4G=DNvt)d71}cko@Kr+yxP@`_d8ComSMEJXt|hmK*cmoD9^f$f4@xv-!f!v*iYTG!
z{z0F1oeNa^F+=bq<uR=1EM&e>P>P~SBt+RhI@^ZZ7WLus_hj0Z69?rcH<FI2V=c|u
zws*PrBFIKQ2ld+ai2YrN-ES*n??XoIXEyCU(C;&Br`=P9PVkBP@Ht#u9SLvIr14}P
zyCT+Idp7dJhI~V3FkB0bkrH4^b#Btit=M}TF?*-LK|?kgS}qhn(3+*+y{!7F1*_$x
zbex1FCSW8Hi7~DmtmE7H!`|wf3)78kr1)KQ6L|5uBZ6ESODso(U6c@$N@cji9A<3_
z%kvHh?C(8b1ow}Dw0}gG?nlW<(>dLAK<HqI@07H=ik1&r#1I|fcW4p4H!FH|i`l59
zIN(s<csMt%6XTpOb$QX<osZEJddD?#Sm#_!6y!1~B2Gx*%DMw@P1>X54+)<}P%CxQ
z95y-Ub%U{BD1Wi{01@vYm-`Y9rZPiHyf{L8#41Z0m9h-o$T(2O(+k!vO5eBo<KsQ+
zA}_mDXI2yP>$9?u;BG=ORzs<yrTmb`gFge<KqYu^{8>HU`?-PhyrTD=PmVQ10=Z!>
zP^YXT;DY*+?rx%IyXmi*g8DyAXO-pk1fFyQkuj|t47Mj7cTA6USHgs!;AK$48s5^Q
ze#tqPRDcs$&YCYt#2_p}sHlp3_(lZcB1S=kaj+jtm1JjG2KM>7UJ779=4I~2B#c^P
z+T8;GsSb1L=d8ob$MpOa8fd`TV<`sgPt(Ss#I>zqd4pl3u(?x#lwi!@(ZY_l42Q;)
zLpIg4UXckHsn@iY0_wg_X`(}?gnq`$xe_if6Pfz6xF$+xkk&|Bzju%bI343OQ7sM4
zc2reyqgp}%C`6!vt_)j7h0LCs)gKI3+1sNuw1)}jYbdB2b-tm&=?e)_YBK+ou*1Yq
zTQSpP8IPW=*(@u}(n^&`2$LH`JvEh1Jd>*9)2+i^teu`q|2#XreIQ7Qh0X;t^QEce
z7V6dB;YXxFyX{|UJ*-RZncCz4U0&lF#pJ`0AGzW4B@6f8Q$7=lQ&XHm{;(`?Jx1qk
zLE+vdp44uw2zo$`(q~NxlyAh=*%|1q)nBFH5)aU_hp1U|yfeozuqaFJ^3mM>$J7o+
zwB&VC6VojGQnk4>&sbj+eg5aRT8e#I1inDw$&W5=X|JTRS}fBJ<@5}&1eT@eB!ISs
zXzXEmAiJ_o3QVVG?9<Bk4>eYO@R<Z+Ro)3u3z&~!-zx%WVsuNN!n-<Gh1j7!p+461
z<CeTuGp;HX*eTyV4>UuCuaXgiBav3p{cgj%!55n}W5JU*6s*R&7EC3o7va8f$Qg05
zo-D3U`Gj`d`E=OyL^N^_S+r(>c?iR&ui4ALYK|SXBBA^DCeQlyEqahti6Ad_pu6Wm
zQ+Lj<1gCW)ejW7P>LqF$7Cucw@>L9eXbxfQjd!L4@e=I{{DX=;^EZs1>Mf`Ek;|KJ
z!6#P)b_B31*sN`u_H*Ns?1IR9y5q`cdeJI-fy64MuI1I<1cv)Z6$j{E<~L|#wbU)G
zN6lOHm#y~QJAK~SH!Gi{42MNehS87&PwcV|ht2HzP863`(b|MO9hVGFd}#bX!BuFr
zvA~d+u2Saqh+=~3P1<j6zm3+vW$M9rfNnGXjjugYRDQ=8Vqu92$(bLN)2>cqzkIeB
z7a+(jKC=|qU52ueuiw5pwGrEyMzt)ql-+l-H#it(8t^25`J9Is4uVb8xoVmkO2Zx!
zC_v!|IHSk#b&I$^PGyR}nCIPa*N7XD)Nsbv6KU96Uo~&j_>R(H_~&b5V^~LgJ|j;!
z&Mr`JeAInut1q_Tgi5Hgtz!%mgCxYVKYdfZGW_5BME`-qXZ<c|R^b5vMOpv=|G&iH
z_WCZCwx<6*3?J6=R^A*z|IU-ImxXGMVPZ!lbTtSIklf-X50+eDowhKsjuCxycnok_
z^m%#bF;`!ZYN5*EalVlJSmX2FnMK=-VVg%R-TUBosx^;T`!Une=DC{bY0H#!WJ>F|
zU`4bqx)qZ{c1$F1WQ^3_A9@%f!}~p49Bt}ClY@?kR1?UPAViCo03I7HVw8Wklv*~w
zj{^7lX9s!TI34<L4~9_sZ`RZhij4O9^p0HA``L(WiUGJG(#MlrYX}so>n)R!F*fWN
z6C(&>TnhF8+kn{{C^SDrQWBg;dGA3*2JNUpR$%tgn4~eh(g>V=AJWT^ndw9m{O=zz
zp}YGkG?6f_cQs?jj#_w2GiSBtzBk~np7#4Z9J$`P#NDr8duf_zcdbTa<0wk7)uU!u
zALQ-Xr1<ALF4sd9oi4D>qCmDc&W4>{tm;q7t@666#mUORryh5z*tj7f?e3wGuvcT*
zxyrC2I{=A>J%iZi-zsHmm%HoxCW@~&>5urE99Z#BpGx?pU$#()4SL<}=e=i|7`;Zi
z;ITZW3qW@&+vx4Mxjb&j0d+1%PfwH~ULaTumtbFsD2_(rxiS@#vC$L>Jo+JSg1@Sn
z8;zE&JBiRu4GyYp8^7U;UGlR@QJvlIMgKTICrM(8q5@SBrfrd;yY2423^kHy)Ag0^
z&!rJ(FJS$0Tj4<~-EVH9LY>+3uP<ZMs=c6lP9tFP)n2K4>BrX1(Si3;FKjHS%EqcU
z(`@0$TX${Ht3Td&_kQw{gd>cvRPy>wGDf<S_aQcv_|9bu-KGyMMB8^AX-_sx2-k+_
ziyhi?ir{75{jg%qB+8kM=-J0OYlOeP+5=Yt0(lW<3i`Zt(U&GPu#*PP<Oi%6Z6f3t
z^-b8~XYR?|CTFG_d>EiEVSM1i9h#Uwc;^eu7q~JwMqWVDN%r*~@d!p2rM)R_8n(~w
zf;Ydb{ICX$x9LcH@F!xwct42H<O30ft4D$yaZ-sha8HCFRKnfxu<i?xB<7+=6)@*V
z0e9mD=Rd5;&Z3!NL(??i><=zThQrvG*<!IDCD!79MNz|Gjp9MZe!C1j`iR9A3Is2v
z%urtIYfKdbclboY<immK!i99Cm$ujI<-5+qg|kd`^r5g#dd&YA-pSLYtKETcEPY*t
z*;4psm2593#~{|boS_;SdnqA1SsaQa9_b7w!BFf=2Txb$0*wnEk6*_ZIj%HQhEdkk
zk`d>{VIKdCe;BHc^egF~uWbDy=#M4UXB=#4^A`Ton^KRe5_^@hYg_~UF!D2vO{6_n
z(O7Q;57LEs_xzdZ_to;SDP8?&;1!2rd$|3|tQ^G3?!M~xqsgsEW9xo8hF+!du2oLi
zw;$7`rupZ?!;Y!F$1(#+`qZVwE~NNvX^#1OUQ{<PEES*tLIeeM;o3~JUf>did#UT|
zw!+;q=B@WdqUEz27cA(yICRY^ftnZfQ=TU;tB|QQZ=2Q<yRMT4Nb?^S>78(5sbhat
zEVqUgoqiE?Qa82{sD64;<RL4kx<hmQynX?2wZ1NVflWPG4KdGeJ{}<u6ur(h4B^c*
zI*@I*ubhk!Bj%><X8(Lb{w~+(OZKqbc(YGONS&N(E6ABP@t`hXw#x<qpJwDW5bnHN
z+iI~_)ifx<azVuADS~qvgy~+h2)t3|+wlCDrWlmwt!4%FU{Lr4!COj<N`v*SOYCP<
z5F9t-(8`M1o<_F$UT`WbC9xiyKDU{mlvJs1ss1Z41UkZ~^EZv=EB*~9v-J<0D>WJ;
z$!4*;k8i5hKk3B_tx+EAB&uDBP>U+vprOYTpk|3`o&i-31ho{30naTfc9Ai(-gYMc
z5Ti6hu)zzXKZIpT))8~O6nRdY6(&zpN~MbzX9>R+39j-wLOG#QRX%T0P5uzsV|(d&
zgeQc!P=Cu1dncOc5{}n;t!11WLWx_OO=wS8!V&3BSaU#P>h>iOJW<`4qApsv&RM~H
z!w^|QKk+LPl({Ousg1BT+80Y)|JpOUPFgakki!|=0oypfr>+->8_>qM^2UN&j};RS
zh|!&uy>`8@^RCY&5z3(W#fjo>rzb&`s!3Bs92(*g6;HWfV#J0o@^F3b;u%Sg5rmK!
zrpFdXTp6tHQIyNHq+(bUyj&r!nLb5Ij^Z(q^Cw@5PgxH)LOHK){Z@ZKbkV`)H>nkA
z54VH}2^5$lQz{wlj4bvb!Z|CvaBNEW+@c&)6NF@X5JRaRdK-654`s=6VLkFvmB!7>
z6KMx6B*<@6$8F`kvWLKr%nprs7n1zr^Wp*viUMmh;UwS)(G7PLrD}r2(S*cXkm<w-
zdL(Ue&x~2+us~?sc|1`E8j|7W^JPf1Pot)aa%qxWIW;zL`td<2bobi;LR8O2Z3-K?
zvKsMy&;#gB_sABcoqS+&)&!sx)vf$Sr+^#3c4<GFql~K&wX;@*_8=q8nZfbspcn^Y
zA#tK(LH6k}anvEh-NI7G_{1zz)a<P{g~&|o#*B?lhzl0=J=|a4UF%#Hku!UZgKB7_
zp4bUyJ|6nY;yTgf8?ln5xIRGXgb+Z=ikQ-oC2f(RIb1;SR^-F0OKuh#gD$ZP0&eY6
z<JP2f9obSKFY-~vHAYy{CUS+}QFwpcTo|~^WO7a*Y!BzTWCH~e-q))*V)ccrstT!?
z8PiCaJ+Ui!ep^5L)4Tmi&0DQ7pY|pjJ*q4UCw!zEmx@0Zod#*Uf6t(fkMmKkR9Ej+
z#fbLXfg$2KCo6}HaeDz$SQe>cqlG_tT?B&O*@sdvQSOU*)#v%9=yAvJ5JL(*Oxhgk
zNKr|&A`dki(e_>M=UR|suIBU1j4VA%!hKeLcfRX>Xzw9hdRYiUiioP9;zisL;tw|A
zf#`&|8Z`IzmUUcP|I2ggB2l$WiF>A)p;P#GR8t6{sMW8EjWkU|1?xm_19Q|DHCGeG
z6R;OkAw**rPp)#oMXLCQR9;i;mlENtzL>P&=NXj&d!n@6u6k)$qNrBUR%j=Qfha{I
z0mDs_FI__0iP#Rw%~Mub;DQJy;aDYxH!;XKZ_56VL)yeF5mgI%ZUM_%8(FPWKo!>r
zl$o7!8lY)FV(E``YUk$O5}#gCHl~9-4gQzM>~mDkyET)8<~oHYzT^9A@=3qCacB2@
z2>VHnA<Vp};>;CGm+Dw7HV%8+Y|mynK$CSYV(==YU~S*(8*fW54QEA0?XSfzIYpiz
zFjs}5L`$MptjE($)w!!>Vj~B``h6`V_b?fn#{QN)J1)m*IM0+fx%uFr?nt0a?A^-b
zAogfNkKd<Uo-)t8B)x-^&1G5f&_c}}uGz1sfrK`Q)^t&l2LRx9C&AF?2@urp6qKf>
zOhAJe7(Pv9{~(wj<-gx_4;zI}VTme7hzxsE4{n`>hh%$B_wyZ`t^AK(y<f6*bGXgi
zI;qRm5c)V_u<qG9Fryko)PWJD;`_VxO1_slI$z#O+X8abz?&NtzfCSX>rp6pcP@lD
z5(OM-V&KygKhg-htbhDG*t7MDrB`eem(Oq3iz|tTlRSdn9{If8Tul8FP)~a1kCl&q
zi4}PFIB>_1#evu@085X3u=8c-i%Y)j8-*w#4kAIJh%>bH$qX)XHZKO@@0E?pohBAh
zd5vhe&!F(&5Uxj*0}#=p2aRRM=ssPP1Z;mL5@_0cr<vF(Zmxsu`epq+e`E|~a8R8E
z6eeHVD|wx26=mUQgz@`4?e+1#0R&7G16)F4S1`w8iVSexEQIrHF~iSV`J>vE1zH#h
z#7|ii@`rZ{Isj@E#kH#NqXsct1csT;0A=uEf+KS>nOB1NDf~=C*gOjMC649qTlH<w
zyBFSICUU(F$ENT5K@L6+r33>U8vDJCI~bbqOe(haQ*^NtmmU`8NAa!`9~>=YoJ_0d
zm_rQ@_IbU-aYBI>3VjbyvhXRRQll4WwBk58Wg?smu?D9R1Y%}`yPzb-ZA4V-(S0sG
z1jl!~n!+J{W)q69Un>m7-XJ4o<SERFK$y!BF;;e&#j(&AEo<Ag$h-HNEP{xh`&2v9
z24b2ewN`&+_;w?eW|8&9Vl!8g2h)80UCs1<b4}b%4<C`T^5sni+<z$eB3r(hwQ++a
z@F-9_vP$5?sh+61ESI$;5NwZ8(mkyf3n3nBux`T*A4tJs>Hl%%1{$<}8|i6*Hl6@D
zIsUt2*v?|2rG_VmJ)a)t3?Y~vT$9ydt+V*{Ac|jQXTWsKW^tr_Mc{TSWDwc(;ZN&V
zgrcoRx;$2-8h3Yn(#pRp{B_{L1^1xFAHJ<6M?&!{SKT5LFQE%xPg&muFf$2Wx8SrV
zExolPld<e&T{4rEQvRS%#V>YifyyE<)A$&Posi?9;u&bP-+n?)MrWY@-4Fe!Kt%v%
zd)gHb<7qkHcetl>ZfUao8EK`Kd+yheZVUZy!lPAWnsA*`asD&6zSlF^a_2V_1rFe;
zxB?wA$f^KC6M)Ym%E8GHCCftPOweR`_&2nSJsF~Px`UC$4=!@_2$G4UGJZCi?%?wN
zbidSJl{sZdA)j4YSQCi`gd=M<YHdGJs`ct<(wc7`J0`HhV15<ebA1}-O0gW&KGU?d
ztV!GqZf9z;#?9V%ld_Xqj8Z$fbGbJn#cQ6!2eOEPSVr0wo)rF2cjqWQnLSQwUdv9u
zPX1YAx!A<A4s~6#gT`j5`mocdk5V(#zTz>Mn`E*(3Mug<m!`Iuf_=!FHqV>=lgW(G
z=7u{OvHB}B0YI>Maj{gqUg7%u%wtd<hKS}Jjw{WUms#A+tt4(<Do5aL#Ih=C>;4@8
zk2nVpbUjx)f%Qby60Hn7tdh%6@ayKvO-x2%d1u>_fY-SC6JanSHMJkS4qj95l7N5H
z-_FFs?$9Ctn~}i#{pti_q-7J8W8*%=NU&TUXb;l!mA<hWh4-M4!Z_Yt@LGRWf+!Cj
z3<ZYj@AS~lGJqrGur9~3sj;>6pC#wIqSoLS+!a9!Oc#fUOp)blSKYW<MSTG{Hyg*8
zKTqT&pwoNyBEb31Uy%Cyf0oPt$x-`{a`}I?@cf^b|N7X<*wEJ0#>Ud{KUr%3acuS9
zcJus?flXE%>WhCGB<cTfHmLr~I{g0{*x1&_M&H=Q>Ax?@ixcMmgEczx_dz{-L>k9b
zay1;P9;#f#vkd)o>AIK@wRonP-T88izZG=oJ9ay)Ue*F~kK?cJ-y5I2M$RBir|l=P
zOU`~5=62pZIePlNSQ1)pl}c5pRxy7eF-GU1=6b5BKOv@!8XAS7jicmG`F+%2!lv~=
zrP!>3ag6s%L5h^Qa088w&~+>D8yyhEP}#$MMD(;ap(1^?uspy80cR~qg=(;Sgue;)
zK+FQ_v;ub&u7;b_+<gWANh{zR9`Q2pS4HZxRp#6^iD@t!9Y|Q*a40C>Iu_3Kj5iGK
z#as0TH#0ArrRB)1*U3$kr|9L1&eIg6yTA=R5zcCC7e30%{o539(caF7tG1{W1^Gu<
zgP9R^b^(pX;ww&4lJe9}N#iyFG3jATh)(UPw-B2MsmHD6GZ-mYxPc_U3p!(d6V;GC
zTajf1cgOeaAIO_S{XE9cN4S#`^--cVEr6c)9T6nM^TX`4{f;6-6{^zViR}>=m+sN|
zyF-@?f!zRO$Onp)%5Rs*>m>=C`?zp8FJ|RN(6@PaGm8@zU0X;nFaN*q#{_LI%cBwj
z0JT>C|MK8}W!itA2S+-e&YL3{U)%n}x!ksr>IrwEh|$J>Ib)N&&N=Zn&zcW9un{#R
zswfl115#Zh-dq3n%svEZC?r$2Tb`K3^4PBQ?Qg%lTZ8eo`Oj`~$fs3KK3yI*F)1Sc
z(H9X)&ulGS`KW7%;;`3CSHC#=Ycrotk#+3SUK2N!^lz&x6~gLaW5w;WKUEw)zR!z^
z=CZJ*c%4?NlRXB)Y)0FR5Cg$wum5%|U4Vh(n75ZT%G8*>8I5!Ltcrcv#xCYlV@=iA
z3`UuDR{cS<hq9_Yovjp5V}L4=z%b>sacJjwomxu|mi!)G1zLwOo5%0{?^x5jTF-6;
zUW=<T>&d3W(oFj0W8*M}*L{Pv@@*0Vfu5c|HZ?Y^BbR_~l>*^)4utIFw23RP^9bR3
z+uPwU?;Dt(x~P#}kFPa2gL!4j;7xVTW|C_UH`~9$p<cDp$xzq0D)mWMdREw&--EoK
zcLQC1U)wi-dzfnTx;>xY;%0j+haY|B*ZyrmxhBnu_Rw_N(c`IC9KGQZMrUP|{%hA}
zo9s;%Kct{_#7%G&XBmwZUBpG3Eb6VsN4=O-edwc?b9fMP<hH(CuQHA0{a(=f-7#f*
z?IM^jph=sGLowytX))EXacvf|PMx`(BZ|IV0t12kjq&GMC>|W@iy_+CUw{6P?zD7r
zftxw%Ux^F1m(}WuWzb^Nf?u6;tG#8(Tt+AJ2jUBEzEOKV^*XXu*JVauWU9;3Im{nc
z0nM5m?z}7x8tthHO`!N{@GlZK45^La4gZeoa<cW^I&GTw(tkQr5_7H}W#-?;fxU~s
zlmVST`&dI&_pU57><>P+GqkTt7^N*+oWd2hjhayX%Vzw&E-O8H+`iNZ(@W^>jfTqf
z=20jVqRzd!IkW+5g&F$5Y0bezohK)9K!oq>1Dd-ffb*cR0sYQ*G6fnH2kTvdO0cQF
z?5+oZlSQuioSC%Y3}K4`hg8=4;`iQWF0>!>RGlWDy)Qm}di8+B+UjsWxyZ*zt_<Hg
zHUe$hS#ub3I{c(5m-ebG;Xo%x>g!_TlX0)JB|ap3X7=gJtpVGWNnr?2ex61-w9D{y
zC*>>zH(i(x?OKWsR|AYtmVl3;6^L7J_&2Slvnj1nH}mcbXYHB$kxYbt*tBKarpzxx
z?JN+F3h~r(vc4T#Q_}JKe-_)cj|ttI0^1?%e7iF^?3x=v>!1&5SBuM}^%yXKyTqFt
zQ^5G@IBh8QoyDKM>W3TEKEG11Gyh3#pQvfZ$q~4_BSb#@`&b*d^K<dq<s;?ybX?Fr
zuSt1WSE-3;jVWR%X&gaXP&hMP)t{z*ASkXjgVBc9<9k0IpKP7YgP*qdTh#sBONj!q
z*Te1o*n1t%x~c7c`8bL?VaPKa@7BkHXwh~4_{=ID_4j$kmWS`C9G(46E*5@xnBAE;
zp!n;bMBa(<eMk?b&^==CrZrX<92Z`KpLx(;WHs&Y0i(ZG(HjeMvi&REJSxxgV=P1x
zaqI}aFYDXu-s*O~KTnUnrDsfiH0z&}<39a3HIMte`|P<;tMqXhd;ch58TG%sf9t}k
zH+OP~h=+yQs`y}k`MlqaapBb9U4wcBFm3k7wg@_``AWLp5@-+vI6=KCr%3p@U;8L7
zx6)?r+!_3RynJBKn!Y_gD3y*~Ce7|@nqmda&gxNOW`lYxa7Q5opopzEd0l4qw_xE{
zCZD!GxOqQZ9d3{Mi=O)XwsHJCZ$Ata5D*Z8Kt}r*5F+;tUgPC`&--sARX{r+zCN6H
zy_@`eKQ50rX7jpmu|K&s9amB~vNnd3oKGr;y;&IvjGrSXpz;s=?U!TITPpD*T<V-E
zRlR|dw!~i`=v`Lmzpe8i{sjk@Q<fL`OLvj5$A3e%Ya6`~7scb@w+0*;@APk5+3OGI
zcKN-%AE?*nJ};McS3G~EdDC_BfN9e)TzaWqmTg<9{_c6Mbu`Uv<8fa~`!{UkcwNSe
zS{wl%Jji)zIisa=91q>3PgP6lYrh)!(D~%xkwQ1>$_vHs2R`sX*YZs*Vqd!0s(PkI
z_t^U(FYxG*{zM`ZUJ%g14uG8!<h?l<75mN6dmzyJHo;jqg&|hsIjbK76MPMH;|X*k
z(2L;QP!`9^wQsw2K;qNLc&dA==N6p}^s(%sF02E$__YkFPG<3{e()k}pOs7M5-e_3
zHy*bC5sKToS}-sB=Dy|Eg>tpy=zTBO)eX{5&5`Zy^Dyl4Z$8;GX^^UA@AiV=3l%@y
z5YvVx(zyM&?z~zuHi=ZiZ6)NBZQc=4bbcnYte2cWHkflq6Q#FTUAjj(ea7%vy~`gX
zMycSE!XrN~DDFT|3=y~EG+UIJGY%Rnd-E6g$)ZMB4c4TCb4TN@G1AyvxEQlb?%15H
z7&9k9jHv^DoQX%D4Sg^NNGPqdPD?gL0qih&Y5|TKGq1s!3b?(T5f-!oY4C#su`mbL
zxI$k6EJ34En2{M1<c}$-^ITPcG*)&g2^M~xB&l$Q_Jjg|G4rDrxiC|u$!Vrk7=(?^
zm;%0xDJ6Ic><p32Fl`I73;x(`KuRcViVB(V31T%c&bWe_3{#sS{UAtcDKl!LLfAF5
zC1srs_{ot(*u4|&AV`?^L}^=c0fMXvB|8x~Qy8bKEcGA+`ovr)Vw_Y(d;w-MbMjey
zn4OZ5$HJ5;CE$azwuCuZ=0l~y1na3Pc~2T8ghsd^w8Mc~_#_Z^n>4;4K=|i{X%h<2
z1M=>R5(`YwnNcUpVRHs?Jo@%U!0ltJVRK5ElQ~FW8-R7xr$(54mH~?@nLm+%bt^iI
zGo{=G4YnTn36KM%7fP<!H2I7vC3^uZ7{GW%wvUwn)6c6hzMyZ{8Wrb=`&Daf?rCj!
zmBoXzJ7Zj-T$EWQ^YzS?lL-yhucx%ygi^Qwfx28HOpjn(q5qH>Rhp9<K_hug!HF4m
z!;)NhTaH}#AI6vhZD7QWB?YqzU<m-+C!Zl#x%VU(W(4K<RskeX=*E#yfGNV9oLvvQ
zjrgT=lK(f2{3Dj1^=D=a!AZCuE=eL`Mz9Buf%Bd5XLUG7d0&KVYuSlVU`w(;a}yRP
zT*^TNO*V1R1^Q`SHBt_%n>TqI0EPlfZAB)Gv0r*f!R(S$4||05(SE~bgcTY1h8-Wh
zn{RT=jLP_OeEj;)WP~}n-2rVPP9<z6umLz&K>a6PKhY_Z%8W6ggi3$~V@xSHG-qC#
z$`|P2GG#`!%`Z10hWzp2=AU4}tg{1-d7%S5Qred=FP-jfEwLlzq@dOR1pALi-=#>{
zJ)olI4Kzy4CZNYi`6mPCQ1Z+j&fgHLwB1FK3xNg8R=M)2MkES+YJo<JVUR>!h%D3$
z`({wRDKm|rjGt4~e4*#WYVs3BT@>{O2+=TsgY43O=0~JK13m{%263T+>EKyGj^)=u
zp17wCKouVsxi7{fd{>>Eqs3kmJWKZZ;58Uq)w+qyyN+BE4=fiCnGxbZHO8!F0PI%q
z3U`zt5J8^ef>*7Pz%0QTHsLeIlpkV21F_*8s!K8dYE6vD(}LR1MS%SmxFfQw0wY*c
zd`R-5VzWDhDs3{~v)U&gNYt-d&ZMB2XFx7=dp1{V4g4Z77c50i9l%kMW(jLSsRmsb
z3_MJZh!dGO-=-efmc`{DdY7OL5bH+*!n}xbfmSRikr2~}<0d9}s(^r~8v3;aBMEk#
zF9zwDL)K3UoI?rHfZ7-TcB0C#=WY_jTJlO1z*HR<NY?m@Y@Oa7=b)=RYsnz)K39*@
zc<%uW7#os~9~|-qrOmKO(-;KxPJUUiawh_{kC!Oz3mA6>=VwyS4XB-pqtQ_xddsLI
zL0K@o#xW#%*p7S)cw`^ME@>ju=x1#?9Wyz{HYQqJW|A<A%nV{R`@=OZj;<Ai+?@C)
z&7Qji1e0Y7^N_KUw%>w0fe66p7)_)}9+gy>M$DZnl$VaGrZFZ`2h4cv3nnRCqi(?W
z(CJ74ICeo|G{!e)iI3Q#E8Y~WNDY!HG3QFbrPADyAKC(wLMc~=o=Ufise@{)MATp|
zYS`qRsFwF?Ptx`v(>DrBPQoP>F+Rmj%7;y7x~sPo*ml$bT};?bjwejYw29_&N{<$c
z>nhIAxSRJ2+jlDl#3!jJz#S8z@D4Q@Ljy4`V+NwhFicdXskG(vxs)J*1u(gejY*q8
zQ{e#`g5!5Uv4pT+?g8Q)WT9hu!K`BMPyog@c|$YUQ=}D^-|9(vr*0gT>^hy{iR>ag
z_ks1tua-EW+s6m&_Z@783>(}XN$dmMQzf=4t|q{k!WL>Rfr~)DHw?~xwA{ddgxRcv
z3qjPH0_QT|>I|2n?%7w`FGO+vZZ#S*lyGTpk1&OsZjI2l(&(}Qt0K4VjYAnMg^{*;
zuEPk!UpeA<;c~g~SY((IhTAer1Ld=!8}jiOwnPEh1e&fz*w$h?U*!P-c(kFGLbhpP
z0_#25&QyYRD-jFLN~sHLl}JDtS&NXT)&r#KiQZ)wV`bPgOOmlOrLo*h8ODRmFA2~9
zBe{xGE)aBuiWoU-IMj70??OZ|m{$ZawCnd&4mq~DpuEQF6xWQ4K`;pQp~}DT*6Ohg
zXXs^t`4+KJoY{>QW~}Q#logatJ47_b$fY4I8|smnwuM+sBd6DSGF+r4OC*5}Y?4s{
zeLZ98{i!L88L?lZ$tH!{NbXXT{Nlf}E^U+38&jAHVZ`5w!Psqni2SfTsD>B{O++Fu
zL2e?D{PpjMz?eMnNQ`D_M1gdT<%}`h%Yqz+(8y~-=?b$;xCZPN$cO2TObSdlgim_0
za(gzDexno}wo9*A$r-MnA%{h&1WdMqXZ&YV5p3RI%$lWXgyE*1Ku#Kw6hp8_?xOfb
z8}yxzf}8obkhIm(9oQ-hOty&24<YNs)W=9;OJ+KwENUZAK>66QXMYtxO8Nr8?1$^Z
ziQQ$Agk`OH3~0?Lc7b5lez#+vFQ>nSV6&0uDWu6+U{MMu#mcPYDIeFDagj`E8pRR;
zQd6)bjHxn=;Alpt+<*ngH55A)$>r*4DhHqwP02V5O%y+6%cdxw7w8=gQ_=tcnog?M
z(O>if<g`1;5*c9HGcrFNrIvvf58%!bBkPd>b<Yh=va;>~Og1%OT1};5T@iCSH04D_
zfg>47MS9V;8DvWt@rZ^p0Hd0asQD?aKdm!dGA~*{{Qwo_w&JpkjruC6*Djz7<XMBu
zyfw+0eSpinG}Jj)%4G^_ZERQ8&Brx1QI10>DbpFhhtgo_44?7&(lZH9ZWxw>^91Y1
zdof6lNereRA}p85{ytw4D4$}4>%9&d))ykDsO=@Npu8l#fcPlewP;4D5m>BKPBU<S
z3uGh}*uH^OjlZC}e04rg;eK9eep)fayKfCi0YCq{95bI^ZHiD1EE-t@EMO1F_$H8J
z-Ee_Rr1E3%F4QO(zuE40;Wo$!3&IhQ7jz`hpMvy){-TP&>qxtx<HR_uYiht_4JwPv
za<cy^!@28kWuPLST_EE)G5cS<69SJ`s4Usklo|11GxJK%0e4%9<3n-I?3QSleiJT?
zvSd-tWC)l%#}!R;zjS{)lc~zV&Uhl11k7LF1=J^0F7(TL2G5ilg^6X(%oC^p_5EOv
zHA1C@xkhzZ2i!7X!4pYOs2UnG3k$D4kK_W5c^Os1KD%Te7iKg@FSZVFS=PVVyU59`
zu&OB8e&q%ZfMRQdsR?w(X^61A9g!R9`jA>hG{CAWTr2^a@#X#n7H>BFkV5Vrs7i4}
z-aVR}3|K%OM0AYiF!)<O%sj^Og+&83<6}Q63n%wqcE^VNLxZv<2a^)+aJ#H~1YsZ$
zl)qg2Hp0ch1%TVdi#i-KEOQ%Z*!@SQU;@Rdxmz_@2eHD#eCMiwy;;?U{J*WTuXw(Y
zqdL&A{5nj1^0h@MH35d%Jyr&ki-sH(*_&U%TG=z6=T*p~hS~O~kRg%mK>>-dH8cjV
z=EJZjWF7bv%J_`AR~0Ko2h}il%J=hy>V2F}OKi6%J*$EYS{MVXl$Mb2+~N$HK*sLN
z0v|rijv@J^eX5iK4mK6e`BiGb{xv~BKNy5}K+%BHQc1D^qZ;7wTKH#=S1lCi^KKd{
zJUx<qPGy`Jl9D0ejgrQoPl}m!rxh?))Yb18OCRE_Z18&~k}o!NNlGvh0T$2s2uMX&
zGC;I46W~jRC9Y@H`~QU@a6q!_L8ue%n+`f1h>9W@L1w1hmolpcl&Oqn`m?*rsJ4gD
z6F4FmXyC9)^&)}_di!0AFHMlE6BMVxi4iH#uyXR6fq6Bf1-15a3b<rI<7q|#m+H$v
znoUL^#mc%vv$M1D^;8+JRAv&ss5l-XM`SL-s!(DVFn~5{M%ZD1kl+bsBvXSR*^m2E
z={05~Tv%ejht#<EsaoI9Grzt084n>QEI{R&0f$=Dnuoa^MA_*^5wsgG*soNKq-_%}
zA=Jwh>5}TJb#+E<W`CoI!uVjw%Waky3q9}qu){wY<8oDUYPU=<a>T|)NRrfBEYnr$
zEHf@LK$FC89CD#yy3iV?JjFz=rr11z1LAj}vf?r%y!cSx{0$flbHD&di&`0t$0gf!
zY5k|X^T~CU9m-Oe>33~WYtiLk%;qSG!zfYDu!)BDqZik8m!^A@MKE3>E#g=U>!${l
z!8uf^G_)E~u`>Al^?rut0b*l*#7}{6h-xLgZTs_RJj#X`i)-%r!6$d>v7wiS;u|yt
z;r-+!$GrwHoiaHXhd@#I^%j(1&M;~LeKtd=Z~@NX-ZuCw!&h>mv@}M5I$DZ5h5jMz
zHH$ZxXlZZ)8)nm<RiMdqIK#bUsJN;1SF?+(6Xz+(buClGBPhd_P`ef(&7S&;q4U72
zbg8Vu=+}6g5pZBiNh~lP%j2rw{R+#!XmRU-Lzb4h49&1~v6o1Vbyp10>-iy|z^v(S
ztBf+i?v+RMbO@OCz(<HKYHKtz8w)`)(2S{m4)BO~Wru1&n)ppqp{7bMVLTwPqD=_t
zjBUYSnbF+<?51FFYIS^5GvCRMZ4W``$bxeH`@lZbSYv@P&uW5N!`v`g$y3H12SL$b
zU~WhK*a+wpGGw=N>CK=vD-FxRPaV>w<|rfDTZcfLjK-UB<KVM2ScdEICi^3Dj!T|!
zxiCzh#@=y437@{HEj9&KD9wK^!XH`8E^}B(jtBap#W{FWr8MA-l0pno`&g?7u_w3M
zADW;#Aq9DiGoSz@YU~DHBLkSL%~|068qe}wcCK}Bt2R`PsfIWF$3i2?bgVY%EG`3P
z(k+Z1B|dZHx4iGWXW?EBV%3o;aO@FlXTT#UCDwS1PYi8X^|-4Roz>PJ@KbuAaSfUz
z_kG>>UISb_Z1D!;tOReYKVjs9S!V+sVQQqX(PKWiOlCKn0e7y@0D#n)h5`Dx9{B2r
z&GMiywb>Cn9x~%q2_%&DK@6y(P<dI6?BN4g(8t$&2H@qyk3*`Ne{-9mKp)Di&w<#J
zS0x8#m_7wRq2Vy*SgF|P0Sk`J5Y%PVS%3s2q7lBTFiM7G4AUldDx}q^0yUM=ZrmzN
zeIeGQT|xra9q$o(PLNxOAE!4{B|8j7Vj^eP0m4?)e;R`{#j{~B;xyW>9AQIgBWq~X
z6+`+)YTf~YllgQF)ap?Kfa5gRT!q#eF#Cm#Q#T0d3~ix-4ln5q^y)0ZqD!avJCzfd
zwDmPCG~JDUCW<%4uto*S4u%7>)@5LMM(_n{TQFv<`3&y)Yj7gc|6#EAZO@P@PWoRs
zQ_&2tM@<4S$QK{NcVW1{?4TT1oV8}a!)44i>DS#<8I0@4JCIrqFTF9_gutR9LX`he
z-&W3l4ng4N;R^R{@!Qt~-@1``SF*y5dYR-GUI}d_fYxw)r~L})9lwv<kOB)q^Lc}j
zVa)@Afu*Ip-f&2(<$V$K3gn<5q!|s?ci<O@48uAYXa?B@bCsmVp{IZIzzmw5)jS0M
z5wAFaohXVIAnkb#XgR!8aX)4?6$kG#LN|}keAZ;F)j09*csV25L4OPGW~Fd5{Ko|7
zNlRkD?uzp{(#_$R?S20m@4SA(EvF%8mmSSqM6EG0IA@X_ZC`ewqq_IOZ8T$0(jGRJ
zji8WB5w%538q-uQN~h0<p5&~ijGZf1pKn{})skwo$jXUcpfwI;jj`1VQC&|Y)0fl8
znUU%F{1w<G+!K#6oQE$eZtUsUd)He-m`BKX)UY;2ffpO%b+ZZbmdm5ho`Ny@P*Q(V
zDYj!JkVj{B@(SJm90hQ)Z=YFxz3h9&dl6>YW_{HPn3gscs5x#lTA5-n?Wj6R0;a3!
ztv-4H`{!eK()fn^chF;J3<Bm5&0U*rbtRi2N8*0js#~Y}j=I|?#fWVd$8)j!ddI>2
zeZrVaulCzJ-K}<wAj7_vKj>(a?07rWc&5N{y;FgEcvW`8o~?_+Q+M;Byld<4y}15r
z-UbA`X82}!hED~tzK-5unz*=6bC0j2&HK)3tD0LDLhQxvZ5#adH}OmF>+S259z5RU
zwEXsF8J*SK$iWETTpI-Tiy(@?$7Hu%L8p0kCU^RM7`|XP%#Oe##!y4P_t903_aR5(
z>Z5unD2kiGfG(rI?_u}dvmK$ffS*mnkC~QYCx!m7vv-)cnyt{iXeZqm<2J%WEgv^{
z(4#A)jSvkm-6<v3b)Zzub={Qz-$h;Ssj&C?vsWa&C?C9=P4W&Y|2Bkit%PX&Og=`E
z)<+ZpJ0{4mt5y*``kZ>sV2i1N>|?g44i*#?aq;7)=OS1m)dwHneb(4xI>PKwdGi_J
ziB*pKeHSx<-A$U~00L)?Y~1uCtscTd^cDRzt{!CN$x^}F=~(2yUmDq*p!bCiG}}IY
zo)(w$P%Wu1hJ%zioXQTVyRiN1!~0R3*w0s^+MdHs=$&pw$M<8^J|7x-bZ*jK*|3ME
zN-ue}J&ED|sh(}R>-yMEmZx+vHJaFtmWOmPwVK$@mRt0$Yi{=}h`UpstJSL>$2RlB
z)qy%Li?!ylI8jN*k9BbB8ST9@3_2b>to|O)CkL(aJ$`qWuUC2cd@SaJ-mv<7_WK?d
zxCk)^1?9#Vq9(&w`Ws;0kIja_|AVr3j1?t{vURs@+qUg}wr$(CZToE7wr$(CZR?&+
z=iS#gd7ay@GAmW7O6tc-X4XorF}{JzxAf`mg3fck&ECsA?h31W0LtvTYP`wno{g@(
zrh_ahJZ!3(9w1lw9w&BV%eG`LEwJtz3@TsI>9BvKIaS!F<!-VlX1geHWLJ>|(PI45
z4TpEL1KSGn@20ae_bwtN(_g2b4s!?KYvN)`>)V1msqGHp0JYo+Z-VE5C(&cd<0}V&
zPXUUq^R2#R43EWm{L~z)UgA{x!Z2G(e#mE(-Rb752zuVBUdQ80a_f?MhcJmI%!4|(
z68>!9rT-<MI>#H%p;eT+om$f(D#d84weh{{cuLFn>#X_vcG~)SA=fFD{LC%BMQ@nX
zvb{wO+D(N&{{p|`JbZ$7@oxsnBI9zA62$KI%^Y@YC_LyfKM$kcI68nREmei1LaPRb
zTW5$ws}9G<*Y|<GS?|)O-PLuf$EOURU$1dk&zO;E(bgAE+c_Mr!byL&v-6Okm>AB^
zpRm?c{|L`bnZzGgi8-5u;B7R>VRR$ed(hSmI-JkXb{tEy-l<Kyg===Gj&D(e&fMEr
zo}lNeWoETqO*`r!bT5}x<N)%3xg-JiLJ(KisGuENH5SS{5<J&W5rtMg6u;P$p0!$o
zoPII4hBpWJ8~3d+Y%etY|E%5dgU`?F3fn6U@Bb`s@~GQuHx(D&C^??rboVdmmaiwt
z2Gd4Yk4NFf-}V^Um4|&U@5*Z1*AApx{?+6bLAuAlts!VfgFO+>(%J2#Uxp>vjk#pl
zFm~P+<hz!*kbe6!hck3IX)UKuPrJOg;b|MQUL7Z?u5To}-l0wUc86Xac<%ex&Vmw)
z0|)!1>x7c*FqzR+kF~1Dx}=%GmJUY|72CrQ-Cu6+s~Owhhbw*Rr&X_zpV`k6tAe-7
z?iza(7p-VR`U)~#Wn3NdM}~(1%PR@q`y#%M!lhpsjeS+PRbz|XWEqz`SEH@%h15-q
z$G4HE=v`06{@CtsCcEBo`W(7zBFx>aK6gCw2OilYk1TU<^pdTtzM-6!(f_Q%S;T>#
zA+q~3DV`6cxSk`?4_6=qXQP}1&yMuaoW&Pw@|ev?BlcNw+e|a_@$u75un$X(Rc7VW
z$(P2uk~%AI7q8|P5x!J8u)?P$xw)2Ey}U-9+M;u{b!a7Rv@hH0l&Z?-hPq=@+T2GQ
z-$|uF$98l0@LM~6Iv%SjQ<Y7y?XMqnk9QNJ_qpqkW@z8mH2BA)0ioj=Te#^EUIz@n
zx<{!bwPe~kEp6XANB=p#-7Kz~tgIS)0K!wS#}}i?hv5sC8MC=QJ@%8Wm1ggrRv*om
z?>dy8DTVe)F-M2f{(s5lH$Lh!lC|`$eXrTQXe@Dh!X#(&f}&ros|8xqPVWSFqbJ*+
zgSv8Nzj3qIEsssf_SgWnlZGu^E=Z#}t(G9J*oQ`uW(OJ@wA=jEMzU_hCVqIuv2F$%
ztR^kn<+SS$-vakWTf=rEHmP~XfhIPF2X4b(CYY%r*A4E!4GaezE1Ws$yS$F3A~en0
zSRXN{W(J!^4Ub<_7CsklJv@a;yZlo%vt2tYKj5xg<LNIgH%-EhtGElDH}TspVRNNe
z+VI4){rSVBKC}wu26E}8R++gTQd+HK{JaH6=XvG0M4PkWlj!}&hMbiZuyAKBZawqB
z^7ye?qFJ>M!^IpyFBB-c2V-6J58KXs*!Utmwnwe6W)I2#c!fPajI;FFBF)@*9_-vE
z2Ky&IfJ++Vb}S8Hc&+M7oH0Kh<Q0uj&icMDFn^l;z#T!x=HZT1KTT?2cUl6kP~(~4
zyIw5Tn&s}}eXkoI=?Z8%W|O@Na)CZWKhv+=27TU%n=~QX=Ye;fc^tKNy&4z0XNq?)
z5MG=er~NY4ye$&7-0x`*!tk(g;Xd6TV!EZ2AI{(1LP+JXXrXU0qF;h@y6-91k>h!8
zbg&aXF1&oiFDmb!87;)JJM*5PK?|54L3ypc_EmLxyPV8BIN`3=4^G4z&B8K`)^l)e
zV^h3bAwqv=ff4_b-Vcnj23W9rKLIJZ>*z<?A*OxBmj;Z9UF1Sa<_vDdNOZG2T8dv3
zr>YSv@>h4!5xmd5{t5_ephN#W1D^j^io<`%Z)UCqL$3a*diMTFaQ+AK8^ixIsqDWo
zrrXHX+YT_GY<;6*VoV@35-5kl^n1*SlSN!H0X76mR7%Dot)p3nyuEJF5<%)~Jal{A
zX5X53>>-XIyDhH@UgWN@g`Z-J>U)XZ7UDwHh^<IQNaEFfg-wsbPT)0d^xIzIfDvn5
z%ueL|eiWC7%s(InqX(<T14iu{Tx#vVUczMh9FdW=cBu596$6MG^`K>S^<$015=vp!
zw*7;6hu2W4%lbcN#V7!Q8jlOClUh+%e}Tt3#3lJX5tuG|Vdr?B7`IuM=37Y7$~jGS
ze&c;A6HP;GlfXm8v~I#PD&LB<Hx$^$Cf`T+{ue05e+*~tLQqHZKPUzlH~;|E|4_~J
zUnn&H&3JYzEBpr=!*{lpqaRwChSItM!5lvSPazRCMGRTKMa9<90*3acBaY<H_l(5k
zggSS8$va`>VdpKk->Xhw4md9c)iwqnJ#E(0XAnI3_aR^r=|GGqXZn!6)e^5M+Q3H2
zgfd^SkiY>Fm3W=dV|crq037uR<^+^enMo|z6<G9H>|USGmKNv@?gxNdMJTA102Q=L
z2;AsDmSZ3^i1&oN)*cd5^IRZvIw4Ivt=1jt6cmXO($W+YlqpILHn<2j`g-7Sp#e+I
zpG&*s3fTPPu7=QA%SqH@Z2gtv<dusH8i<t1;@UGf6;f}L6TwuJs+z-8S3(M&yRJO&
z+~0oBZ6u6RN}TBS6=l6hpwrNEq_nBcY`Ww>l8l;|CpY#GHMj^Pj3kBhYUdz{=18Qw
z1(PnBq6-BGOG_D$t9mgbY(<j!Qw1Rao<W3K@+f9zbi=gdkdy}p-m;G3R^QU^uUuo&
zg*N_<J9uCk<FtHt%^Y-o(NbpU0nt2rbHbD=GSk|5O?i=KZ1#q=nvdL#m&5dm67koC
z{C#=+XMUFWqxkD&wN4MrPx8m&t5binlf<N0#AOLekKe)r-JQ~!b3AJI#I7*`O(b1a
z2fCW;JsE*IGD&(LC;8~j#i80F2PP@f;Rb6JaN-6myqTj*)pqz)RP2d19B<Y`p-R3q
zRlVuTU1fz<@a1Ooa*auu<#Thqa-uXQ8DsG3(hGU)@z0+FH`6rDCyCwSBKu_X&DI{U
zGKt}TnraF=EwFTl=2^NsV{k+#Oo8BMyTyhdVTsnUj)cmt3^L?5A1g>nbxd}y**Ti?
zAY0yydw<skJ`G(wv?M*C0TfKNld!pF)Ry%Qyef8sKlG06C|Z<0b+UacFFG%MQqwvo
zJQ}0@YEO%~J}I1Ztw#%Y-)_d82S1VjL*DiOtsngFvk?Ec%<q4b?*2y_!lP<uFvEWV
z$%Wbg04)FauKSOV|A&synT6KL-oVkwmGl4M-u*ZIcg^$Zw8^%>ujB`M!NJ>^VBRCL
z=}>F2aZASB-hzC3a*{ceE1VENM2}KVOv#@y`F-6A4MYN%(C}q>izs(F7PUQWxa%*#
z_a2E;75Sx)R0_`0O(2y)9z=d*($Y0^xZXvQVxUR<cAU`aB<ZWW@bvV=`c69glN(Cv
zQBQTMp?h{Dk{Hh}E+5a{l=luA^VE;L_rwKfp*a^`wGe(%WX&j1LD&%1ha210Sd0A7
zyB<jsXq9M6s)35K_V=-kV38v~SU1F3BawsDphca`AwKl4_Q-M8{fRb59D}$78zry+
z9Dt7pY}Ot#5tDAMUia61=^{R8)tD+LL)1aR)ZutVG&8}hggnrC7ftH$e1HG(adA#R
zP$bcOqqnR4JkDM7*`s3u44A*)0|0;DNv(%=3JYnH)q}7-qS%o#xnFD&i1IrR6y4cD
zXZXM^NoI<t<fNTMyy%e#mQIph!x7h8nhrqHX}@E-*>3aDkE+>;w(&gF5<rEFF|$S?
z1Ej#?(dQz*e}FpfJ10#eWNeU{vgj;z;c3h~zUg@oIs8LV4-SnvkgrgQ{^X*bZkLC|
z4p*{M4+Yh%$NeE?`W#8;kV_Sk`YiV!xJ37qK-q#km>KbSB}c^5V=D1PD<m-%+Czpu
zb4q5U!0bEv1{i-mAfv}X8S}V-O9Yp!K&5J-6D0`%GT7QUc`zAfT0fQusfPqztCM^e
z{q`M*;h!H;z^X4#4a-<tF7Q~}bg$hjtC|~k@R}P<@hU`s1m|XeN)(c`6#XnB$Vg6P
zbda+6J2OP|YtV5l_v927LEdOzPgW8?t@%I+s2oH&3GJVJg2^h11IQ{6Rc!jcTsj6i
zLcKl`XtdyU6xG}yS97FaN#G$+@Ip{7JD9J>;6Uh7=0vkS6B-n&Yyl{bWVRBZ+?iU^
z>;Mu(P;k-aB%0xJCr?DPN<(qFQwI)mXsja8AqROwhSRC)R0#woR)i=J1r%ax2E~+x
z0!dJ0O<l$C+6N}9w@U(XNjk<=8pg?WwFR#C3v~Z?F=YeD7dWWDkqyzvM~$e}Ab^c%
zkJib57!r#5C1iu*hB|;gB;rpQr(JZ&e}Mzh)&m2v!9Z!S9`VbFK>q+SN(0w1BC&Vb
zzT}6i@)-ww;;4VD1;~Ykfw$aXgx|l!fB`Iq5YCFd1}b2S+ME(@UDB3Zw?%@e3txlA
zOZMm`(*yw*LZF+pgl#4k=2OLpok^6DA5tE!X+Fo3@+}?#YlCt?sP-2*XQ-f!s~%Hi
z#x~$A;&c}nB%dT%qlHa*n%pG>9xN&l%YX!mHbFTny^g90GYOstJ;9rV&{xwM<{%WU
z8h1?0qiQrvCkWP0P?E(JFfqTWAr%2i`cHZ)+<gV%ttyU~$S>6ZNCTBYM43R2qZyV^
zSRnKp2g@29lMd>DAUZV|#;Q{Fg&k5>#ey0YPX~L@XSO8+d2p^7?E`PcvyBZdaGDi;
zFs+}OPV0{#Q1NGissbHj9%PV#;tuRCJ|L0%mQR5oW`;CTq#=|QjJrfcB&_inNF+ur
zFj40v03`+zOgs88tg()b^N$_q%l-aa_6NP*&c5t^<A1)c-}E!C#~geaukzs0s11AH
zcB=7r<J?^N0_~mR-V3h6@9|r^1RB;i`tgjN@2WD2cMYz1IjGmVonn*#r)mVY%MqNV
zi~?5`96epb^Zy=S+n;Ljjorn@o((??@vP+NFKmVIr{!BjXfg>f%9G?drO*F8kq3mz
zx6^j6l+ErfJl`eu9Le%q^ADKktN_971`AEP%Tj~X2h0d<YM<(JgF11R@7KtysWYxO
zr`7;7^gQ|Q6C6uFclrjLv<1XVm_wX=-g`xUlOLhEh2w)oTQ#<0mrWI3+O<aqc26}x
z8{BpT+!K-a-s0B)ne5IkUB7vsv7eoDar47}j_!AV_<H|$-0w+bg^p7pm2ijso_=_n
zG0aJMstoWql4O!-wuvV?-5KRmWfxOTw}4HI%?kj3hvt_s-jBJ9=gdgUd`2b@pnUtA
zwevGgHHC!Zg8|b<)UaIR)<p0Sk6<#{qm<3&*#^P<1>yug8m|=|TiaOVfC(GQqB4)>
zazZUT&vrm;B9icTH-(Fs9s(b;3`7X}j#y$F1aeHP1>=I9LlqFsX78IiNmA>xyvKo(
zZtN0u=9q*sUTtgxeuOZwTQZ2D{oCybApcAQKHXEk6|lAz$PC&-v1XVnD<c)4B?}7v
zMa_0QWf3)CAkEXNY8bWCLggtJz%2^;3cf+q*+$hUZf<KSPH@DfQtX&ET#}OCw{3}<
zG7L*1<e%2eh5}WqnOl5eq&;pEumw1v@dpwADkhfzMmNYWXhozfSB`ZFuh1as3~95>
zg+{^*&T8G*Rdz6fTGa4#wIpG@Yg!RP$%`tx*Mn;xsz=BSGxPM2&VMBFylVQ<0bS6D
z%^4Dj%~PZB-pZ-P+>pewsQ`+i3k-#6e343NDQ6IdmNVcKg1n3w`$RjXj$rv=X~ar9
zY18)MZ>F?gQjA^0v1n#F-%>-&;JaL<`soIGf~N511t@O;mQsQ}t$3S7Xn7X}V_CvI
zw=z~#L_o?SQ~79>=@dUUOcim=IRZ>Px%MK>?SWVdCChYMhAf~zX>74V9fWVq6(N{_
z>Ij6Fg-jc~-scB|Rzztui|AuzGYCc9BE*y_7jumea2CLX8Rp<l8AbkmW$LNK<e~4d
zY6x33TJkX^J)I%$@`5FAy~lU;$@1hSsmkQ@-MDjdgUy}*y}ngDTTR>&P%WBoeX2VB
zm-i7J>3L5!Q01b_nP+v8-nmA!a==v3o7)A3>5L9{Xaz_mE^yFH)=#X#$`lb-X!U1>
z>i|x~fDxs>g8I!0b@T<$A*KDi@K&)J#<Izf{JyVTZQp~JSR+FPbVy;J2=YFps$}+@
zp0M;*jfOe3N058#89K@5R)InMm19(>V8bRY7TCC9t2qWql<hi$IN5f~zc<^<4F2_A
zIQzYg26tT8V5d@pcXo3OcZNHg4B_`B1_&|z|5|775g5-;{|vQBn|5`EZ_n=G<g~R`
zW|BM?ESRQ-QSjhhkuk3Hn6b<^ELl>Og~u$ouxg`QZa0;i3y$0{EzYF6K5{8pTqk+S
zMm&?z-bHsyC!HMIeEA{UXi3E>oH=4L5dYX;%r$qj&Ins4Ym?#{lYjHVeD+P;g>KO{
zU%x;Qnaf4XAUuU^NLfW9^t9ha)|yooV=t-5BFnicB5*8;WrQc0VO9OX^O(SLrjaH}
z?z{QelShGyrAyTV7<9%eVHdkYRPAh~yoz_gA5RV>{>a3FL^<@>DWHuqFS=nEPo)yd
zUPos#qeR2P;@SHm@FJw)&wF2`W@abthJu^w2-C|wuD|q{;vx||Z8h5Pt?UXar2iEg
zWYWBCGE})Ib4ZX{zSAnk!imyC<1v1<7rcNKtC~s4=Iu?@hM-sMuB0Atek!r<agM3c
z{FQM12yDd9)G2CkOm@%5Vy<5F6r|l8C!&<fp(Z865{`}s(^4&V7u(;<+VeJQhF5iH
z;oqKaiEWWLn_UF?P4oA`nC??pUb42?=oU|8G^nZ1G`GBL<4N6geQg#LKs$n)^uBr$
zoZQ2{jd6?(v?X6<Q?)JdHeQaQimNi8w~W<x-o@=-|7ee8ON>o#M{5k3PwBljB)D9h
zOi^Uet-xC1x4^!Ww#<Lm4|T$p!%K&rHF!;}2_`fahB%is+R3!Zz#jcfB)!e^eQf(4
zxH%3}_Fex+7lGbb+DY!4eQc;6g4#u5yRr8UhE}Tyxc)94r;58#`X2Qe^O5vkGdg_m
z{_yT>BHI0O2EcQ~DJ0Qh<zkA3v;9jbV8EE=Lh;nc;qb<f<79IlL10<)m{z5pS(AE3
zyBCmP`Ycci8#nHrut54T!&i`@{5|N8X86`aZp0ZN`O)hWZbVrKCvGAy^9<UKwgNiW
z>S!Z2?oui_(<z$@J;(Jbrmcjm-eJxj;-F#M?aQ5N7gCbuhHA5-oP%AJ+vKn7t@z#U
z=dT~`;=9qv9NnH*X}g;B!BrLxBc8K6Pwf>J4m0?rW6BH1jdz)&0@F3C;?`J}C-w8|
zdP{@afSYth&r8jr_YQsKR&r3$f**k5D7GOdeac8`Y>E7;y*s6Qtyi?yD-F+Qk5ayT
zPRhPW1>D6|asbpZ6U>&@v0Rlw=Jp<L@3(mP*JM9IT4wn7x~u#dgV~AlIu7^5%|i)g
zX~+!+c>I<_`xe_*TaDw-H$K(mUMbccGLljvlR%>G9Bm#{OyrfLb(dtf8-?TJL0(^!
zC9gK}k<7vFXCu;<uwYq1xd!JFg9Of^9QGVIMpJSFck?&oFP{4mz~}i@0`^crh8A*F
zVN_3N%Q#w55%}zKI~fXJ*X;A9W?*!Fx#_W&64N#LbTF6ddzQZWaL*ppbi~X_d){4m
z+L!ebU2|FD9%r(fI|;V_%@^->RB8NrKLZO9jNgiD=N(79iqw&?hwVFDhpYGV#f|K$
z;F2#xRd2z;eL5LohdOjAa4%FHp;7^q#>>4v!c5tHcJ6IZ&o`+#vgnniX9uVBN>0?O
zYv))pkW?PI27&=Q7m=XWXE*;grX|oZS3}&S?YH)0+}n}aoa-dHj1peLv39N!*i#hx
z1K2yPN}71@$Ah5XY1^-W=Qw=n%k&UG2UsfOWU<58&IY4Z$Ca-(WC?ti0P1gn-A%9@
zXTu7~>IfpNmQK_6(1g+*u6_1s9*2@;`?DS!qR9o`RE5T?HVP1=CNs_prm{zWu;;3I
zupmh~Q#{RqXDVT-!W090bnA89dC%5s6%t!7&@NMjC8pk2dt2S{NT##`>#u2)<zgg@
z(fj_VoOC>jgY<iY$DN}7Ccdg{_h)@Bt;eSo_k)Iw#6!|e-lxFtAJ#XmSu?Cmw1ly?
z=fL&2NbJe6=M2t<<!ggP?Hb3CGGD)QHt>jx*Hm3#)?mLCqiJ^Ul#FyN_zO8{+ALLF
z%e)x=huUQT*M*SQ@sR4>!4T@HlS;kkhd!OG?t#BO<!x^299om@cmkP>n~r?8W$#+G
z22S#>`7h?5s`r~AmrHGzYV>R)A2DOPF<0A!jAf}R75Ad8B^C9mCwHAw$}vuwwz!<l
zZx`n&^90<y?Iq0cDg`gcgjP{J#x5s>mBjEGxE^Dgv%>0@o5fE%yI*5!iLkw&p6#SJ
zTs97`XR4`*wD+_t8~z-4-M<k<p4S^^Jq5NApRzev)(@?Ql3inZvEw+yHWYfedooov
z;vqv{v*#f{iyzsaqN<mK0iApx_LXgxyd?II!T`7m&93;>5mfWD&%6|KuQdK&xQ(8E
zHo_PYmjS+wnHsyV>!BT)?d5vP_L^Slus-@;|9H1QDv`Tr>;l{)#b^ihkFE6@2XOpX
z7`p`bgQtF{U=gdA!lQ3s5%_h!WAk-8ZO=Mg=CBWV$GdrV-s}C=#HXn`6L$4d@7>7H
zL9M`XStYldvQ^b$5(`$HeX1!pTcDaY8#O5Im!W^QSyktnbqcc*P0Y>cddyxIS|^q5
zxjIsFwvC+bp6fbCKOnK69STR+xmM!lt9ZkoIIu@g7_pu$ioti-*k<S6puQ$c?t5((
z&)oR>!GRCOxMCT*bJzjXc8G0oWYoIB$iZ;TXq7e>)W97}Znn5GT3RVTGg5Ywd^2g*
zbA7cqs-HFm*h_Z(nx_v3OK-(&B=88o`7e6z2`5JnudseeFK1GD5C5|YU4Y}dth)Tz
z?>BF;Z|CC5xWzg@KSkSR67sXTN4?nTGhbq9vtmy`d-H?+F}!g}8egclW-ifBuCEEE
zXAp|k_;-Nd+YVhiu>Ofdkq32oX5xMBXLYT~E#*ZtPg<5ozsRa0pHKTwXLBnddn`@Q
z+$A~0n^Ffxhc0!L`^Gn*ca$aXvs$6bC@<NE%Kl!aiZAD%6g$W<NA*IE^i7T^v}BMt
zqs&;m)qAP{UF3WE2>8RFv))=6xS5DuxsZ!~m)U4;hi!A%y2KoQno@a4cd1y0f+blD
zPN9_=$H_1=z0f?7l+StHlW%MYZ(Z#adNjF0DynR1K2;H(6|z#-wXOeDSgv*gFNe)t
za&FKoUDdf-wLRJhUQM%KQA#nymE>c*eVI^C1$(YXx&9TKh-k|J$gqYU-~>y~VT^Jn
zgemffWoxV{J~yHzq!_W1*|zIrQ=AO9sehk7tUV{9n++<+gN8`<hOb5;(-3^;W{U&=
z1^GX{kW7D@D}L|*073%)rT_fT|7X#<|Gx<i|IMGQD{Tw6&6b59nr|p&2gUIcW1ylI
zGD*YE_G-DUl~D(;UA)!#d7({d3I$S1`fcCOPnbT?A`0&51-9;S2_i_0so3=X@VV~U
zwHGFsmeCvU&2+tn5M=jdFY8&oEs&dck)dFVmyCfUTvzY?x?8lFui+?QSB$sXEQul4
zl=%?+VA_^LkE?LB;Hxpn?7fBbmWo&Z^S*43$GP-|WA6(PnuU0G%gAMmIyB%FEZPy@
zr&MdU4g)8C!^t_ojI#mQ_4G^5srDR>sPJ|twtF+^S=?!IxK77H=m_o+q{Fo6lPP>L
zVt_b+o;E<TE^>j0OMSoF^;Y^EQltD{7=P=FP=&qN)PzeTk3Lbv6rDfwL|=wppBEPu
z$HM*$Pny2=J=H7LqYX`T1?g(lK)!c)KSwYMxhzGDYct-SgK$2#rcWEa#&M!iB76MH
z>Yg;uzS2;c?~9~EBr37E3q`h}W00nVkF#mO$HPW?KA*gw6Y1Rj;az+7oT1tgvg^gj
z!9_@dlJ}zOc12NeSqQ3fD<jm*k7ia{U3DMWzv!!vqE_L6plVVOuCK$X=^^9z*_Vi2
zbrcc@>V^K=<gDaH_#Qw1=I#__LE0C51P(1Q$LFPhL3cuET=EvLi1pui%iWx4(^zo)
zE!%GTq@<1Py(xIph5GSnJF*<)g&AW4PC^m6^*6GAL4WRJ1S4w^c|l-#^<R%^a%glo
z0xg==vw#e_+Eb$am-J(tRLK)F?0OBS-4i+Z90iVTy}f#zP4zA3+H~qf%1KeWi|NtS
zfvp>;gqq!vXDw5aXU!k}+lGA6Lo?*arp;HXr47sMt(?8HEgkNxw`wgLD=jhTJB+Q|
zFW=S?QKY;C8x3BYU2&j+c8_cX=gm^ko13byJx_-?%t`k}1D&){90#Zd%^#@qWTs;>
z4E(OdFB|Ov=LN?F1E08eP`;b)&C`*JM{EF+?X6Qbh8b=W5M7S%^}v`@OgkQSn?!Z)
z$&~yF040WB_D5g~l&6#H7&Fo(RW{4&dwL->_Go|uM?6H0rXxB1eW^3iBM}%8aTsCZ
zprXe!MEJUI`BM4i=Z4gSOG-ewZ%U*3VV_=L*wdvDS&w9V0DxmO2<6*Sqn#Fr05LSY
zLl#$XhPOQS=FEm`PIM8l`Vi0Cf{e^G#g+`MA=Aio+vY5yS)7IX;{(w8IflrwK??T5
zTCeuMnAdTG7@(8#0%sdT@P&0FU+utnGxZvjOxikaNzeseE)Gdlgdj)<Tu<vmkN+HR
zqYY$^<7JM6bfT#c08W3xDKLt|HI9JA+5l3}HaDlKg|CTdMjOn$I)@Y}_`64<W-WU;
z0(OgN6oF$!_H>2ptlhUSVb}?gQgUL7Uh@2eUc*e-_PIEl68Hb$=#N)%rF-lk{A@p<
zf~kW-y%n0Vef9xzBWA~DKcZve30otyxV`aK>JfSho`5DE1YgaYt5jl>VSn|TZa%M^
zjLU8Ee>-n*cu?xKvbEqh#FS&hu)Pgl7-H%!<=*&pnk}*U4)5JIAIVfU$Mh<r{R6XC
z-`8Pr@YCzel?M>QG^6QW6P|gyg-d@N==Yrm^+uyjhQsc$Mun+Fid_xgr|$arSuf#@
zCN-S_uE1}%V=uG2#`b*d5Am>C7KNF1t`c^IV(qkv(U(rWr!QCOhNYG9@!~C6&75I*
za~Zw={`ukWE;)yF^W-h#%!j7JUb}VYPri*C#oLKP|ASi*C7QH)MMD7VS%}RbnyIYm
zOb^G+VB_zAUZX!0Z$FW6`i{(m9Ur})`v&7=3lr9Fez!OIi?<?EheX#W8RDwn1S9V+
zU25MFpC_awxQ?Z4-oV)AkdQL~p`bC~0J^%k?+%$IZ?ApkUjQ-}3CPWr*9;XtT}}`}
zH$ISRE1L-juqm&HkYF_t&)sfs+@xN)s$5Jy^VKS0-xw~-x?KUw?=m|>p_&8w6V3LC
zVGz$^J;^J`IFC&$gyli3%f=+glwiT4jWS$0q0bGkU_T@L>K#i9352;w@7nv>i~RWn
zGJf<#sQ(*f0GuGMC=yF6kWorrdPJEhF)PTBQ8Dc|z-Sb2jd1n{L7h3L{w}{5iv25F
zQ6Sj)hse?FhCUYNo@S_1)g{RMj_`B~Ck>vOK_;OCs6MR4W&^krBzTm-&>V^oY@o>t
zUd{gxj4>?jVgtYuTBX2>#WUa%etS|rI~KQYcgpmw-}5var5h~(g7|URq(kTnKOCr4
z+_z@-b{(wSoijuP-UK|wL`hJ&6If~b3ge6%w%pMqx+#qR^cf7v7V)D*<Ew~VjFjDy
z8dS4l5w#xd1@;Z_&Kk;vlQCQlUhWdRF6+%^>4@miVVo8Z9>TbPICzzDUjd-FiiiC*
zcruqfCQ4#m1eI~bm^Y_?ZeqG3gsphk-)K9VwoJ)*+RePT<@ind153<O6XxFs^eSN0
z!~WIIKLv#IyMqoB-d}C2?)tj9*^~kUcEfMXPFN_gq<W(CWcsiT7Q@-HC;G|J>4_1;
zbK?}Z)WnaD@zc~?`yy53I|1B(=Z-OTY8GRLk+F1|870pm1=+quHBnw{9;%CxC()5L
z=MPsaAD$wehceF;j-JL?c^?At^4GH7kpKZ*qWr1YhJphM2y!!giQid7M!=YjxE%Ft
z*E64ucUca?tC(c>vN#cuglU^BJ6!wBJ2LY^#|Dh|#OfisooBGdYK9Wx-VT?JmD>}Y
z8d4}Y(OieEB(s#1ENN)ykyW>ds>;sM2pfxmx^aS4+aau4U1)^5YLO9<ARFp}06|(g
zp3DQtO`;3n1!NzmAhX-WN!D)b?5u?<`2W7MY&veY?Au`c^TC8m;Ts;hNuH<na8Dym
zHnvxByDD^d<KewezOz&<I;1gud-z9Jjlf_j4foMyH=^%^KfJk+FuO55f33$29%gR`
znGGJ|!{;X0#+F~CAULiM>EscqU1BYRn@zq4$MO#{!Vx>sLZ;ZONU_<G);Qv8?@uvh
zEX$Z6&f?3s#6F_M7_@_BM#iJao<rSb*C1>_b;nDhn@E=zXeG-+a8EMA9u&@RH(@vI
z0E|a)A%~KiE^@K@->-XH0!U`ti>imSj}MrRmPiull&dAwrpUX?BnNRMGuc9Ql4%LG
zd)6YcLuGrk!7S~=iW%V)+0#G?`yCWOv^y7KQ=x#)RGXRI3=tmZ3lX!O!4PJ{bg^)&
zHh?k#l5>`y&Uo-p@Q*YgM0?m=rz@sDz+6j(!m^2y@;oTJL@dZUt~|*n9I2G$XO&#k
zlX7KB4iendNghuOhCO<y^O%hp?~(o#HVD$3P#`Y;MZ$6{N@&lbiC^xQye8+8+8s>;
z0}!q-q4Z~>pC?VJ(>gS?3+Ryhkdr2IF4(_7nU2nnq>PPrfil1xWXhB9#s9k+SFPE&
zLPba}Y#_{)e1Lt7Ig=J~rks#`g#ep2+UE*XH67tzQ#u_pSUFEbmIT~lsGl`Ak@s$4
zAb<j1r9>L4XhZ8K>Y@x#Zjnfpn-JO+(x}~5$6{ifFBOIEm!ZdNJ^I0B2q$nxW$z@&
z1a51#*A-roIvsJKU7%0APYB&<zup;i!}|hkr_-1{_-)vScT=O$ja1owcFt&|^ETqU
z?otSB=8LCugs6VMlS=|z5?S^U*$-fxqpr7B{ze&LY-D({Y^|WN&05@m?&4C}rSclR
zoRlL64Bl*55~I_QQ#|>k&fAUwYQ2~}`9}leIW-~0;MKLq!_~g7m-$bHNhV5^-FU$U
z8O5XRqmgvzJCXn!O@|QmRHO+&=AKCX3uTn=L_u!DnO?5Q`>!(EvUBL6s>FzP<-uE5
z>T5Ae-S9Ufh$O81V<AfciBkrC_0+j-k}MirUsvNzmsPH6BP=(}wDRkCEG#mg5{9mF
z+toZeEA8ifd1&QF?29+PZ>c5+N_O8_pLg3n-^E^UH7&_jvMHrNo&N#$XLrUB4`!;n
znbL70Br33@xXYVL$euA{sOC(ws5b;LW9FB#Z!%~|yfC*?P{PE~YruHCrEcl9G-gk+
z?xM~>Q5Owc2#QuB+}Bu?fd?Sm$<&r!WA8-)62(ZG?HkhJMN0h20X;bQjK%^C)HHbH
zW$;IHsFJ316i9lh`A#ZB7ISUU9~<aPb|JfLB;kf;MCy=HNkW<WPVdzvlN2bal)J7X
zk6sqR+~1OnVUP8yMO1#8O%T#f0&?4nw#2MtwW|0?8ILK{{Do$0k+9Spv!}>%LF98#
z!-G}g+o}vH@DLv~YMK@uI$#sq)&fl-zf>*1c#L4pLPh$@&Q<af!|d<kM^#+fZq{cr
zO-)Vms}{|!;L6vXc`BKj-!ZBmCB`4XD2M8`^`=Ep2FUW%CHk|={U)T89|x&py3-BJ
zj<(QMskgXhK0R6#{v05miz>=F=oin-P&Eyyy&&ZaYVe}o5_vu3gx$LB;@Y3L4V~hK
z-HjWn2`{rwYS-!Be@|^fJ2!Oj<x0MmZa@AS@)xi9DMWT(QlI%LMJ_wPl6BW<1N@3T
z4`g(^bk~)<xn~%}6WN50Q@pRT4G!(D!!-UD=%(F>+_qzy{%lXzJ$LTutwAH({X0wD
zh7+3;u44C|L%SJx1qIj9cm8s8I|D5_<@gPMac<@=HV%fdabr(wcRW2@Eu=4kY<oBo
zpR_ZxLmkWXF+imxVgT!Uc4gcc)+N<5W6}zP_ff?A+LI;V<HQz3DQUDTR^NPeIiDnm
zy@oe^VmNo3`t9n6?TQO@Xn}^z^EO~E+Zc(Z<os-PDyT^v5#I{zYjY==9F-9%H{6T8
z^0k#hQ&+1>@nQ4gB=#P{1P_86HDX5w{{7|nQ3w=Th6MNu!}>gTF#0!3gED^Q|I2~V
zKgj>0fM@bA5{|xk=qs_LGXJ-dBop`HAXCGc;TVI}x?mh~&l>xs`(16I*16nhV2_xr
zragueb>Ghsxl0l)BwBZo>G(+aGuJBEw~HF!t_G44E5Mg7?gsW^1}&%iS}=(|4%#9h
z3fF#mb`tz_@AQfU_qf)v@*ShC-pj}qwun8^I~Gs^Co8#_&@mj@``}o(f#Vgn8+KIK
zC!l6s`vtI*)2s2Ple9BhzzTPYiwX%0Q0F$;_kDj$k#{7c!{jPCBJR9q(kP9jR=uG7
z)9|WoJY16BG(*y{EVxG;Wvsh+w8lt=ae!GA1!KHA==@5fHP0)RHzCp*^_hg}Wy#;O
z@6CoHl4sa$U63h-VKiv-=VNBYgMIjWS~5?ch@B{T7tlpysX4u4%c-GHh7C{060@_=
z-hWZS+tMphF;9zu)0gB7&0zh?W>{m3!iWdl+{~Xs6lL`_79al2CdzZ2D4!mwl~%GM
zw(V^~RfB3kvRMB6A?I(wGK)zC<%+tMic$?q^#iSvOuJ$eR+TbqrKE-j0iOQpjP|A0
z0(zL|Ve{Mcz9~b8C*1e^T}CamozIF6V$sL78riLt$c$m$5{;Idum|e0EFA#KXZSkd
zpBKj`TeAf-4A4_4$?(fwA??kduI}C>ggyy*=k>K|iY}3$(-dD>4Xa}tE*=f>G7=k(
zx2C^`@BM{haZ{F_aAYQAKHlF5Q-ctL&8!vqr=U<B`9z_w?_AdqN=gBu9rThCuOijj
zNdvmYTj(<Lw&;}PAE+G<PNfV8NY}9+q5|BZ!%wiCV*(a(bj&bNRNFM;V#{3rm@Ey9
zKd-j-+;(?k>9pP+__;T4u`|m#p1w~So)QXf9=ufvtvKD@zVeQ~%*|!0EB*%|cWsXL
zQ`LI&d^q$gGyFC1T?;3=B1JVlCk&`%RnE!JpXv}%nZ>ve5&yanygFEI-db=sXnQ9r
zYX8j=Tv;Z3`K2_Y4omaXqIpp?%hqO_x7=<&_&}0Gnxck61b)E^m+g9R_oBuEMg6db
z`VrJ^y5K37HRHS2f<+1bwV^-VIHMiycGx>3c>np`!(`VX;XG4W9R2tZ`|;sOYFq1>
z{QVy1#k&-NN~PIY9<b(slxQb*D$YM@ww0u+e^ZoPDj#HEla!&GM>@N;)!j=!JqAgg
z?k{*z_quU{$pTTQPRAIXd>v^BoI>71IT2vvU{G+h!(4Q6gAH6YL$F5Q24gEtJt>%v
zS8_xRVWjlaHSG?r{S3B=WGQTV@}Y%b0kuwv1E@N}+6+2frDm&iP^JfgVy8*XVxGwn
z*5x^oOcFKHqig^W3P?ofw&I>HVB03?9%}~*=w23GE!|n`gmRaWQ&{<}qKO9%#{)Tc
z8ou=TXOo@-k@igSKB=Xo&jR3)1mn8uxe_{3h>H6Kof@`@Uf`Jq+fKy>?&AYPwH=cR
z)s9Ns)!!9jSHdp-U61##vZ`EfF@L*V#J$a1tUa$^Zor?x;FE23i0Mv~{B{HYh!HAa
zBv69L#&D!t6fO_^LC_{D*N2}CcX#FRu$K;ZcV{mi9?u{eXJ;!kqGi;8-5}L?c`nc@
zPa%!eRMuqYm2%@#8zklk4QUO{NOvv9>E%D+I6#cktPz4JlR-3$T}B(;R=>^4m<8kn
zj=EMl4>TwJn~5iqmWzoeo1G~t(l7D_&eiZ4OxGMH8|{DFAGU4KV2*DSis2hrpTphb
zd|ND!!7CTYFxu)&CT*|3kE;??ADj(uN-M+p3mSgThfK~uB$VP(6yZgD+ddP9ww#g}
zNs9q3wmrY})k?<3FCO!wichOsu9u8LO?*1lt4(6KP0C6xsze!FUcPi5oVP0VR4=g^
z5HIx^-d;X~g2*>6%3lT@t<-vFRMFHC*Z0LFf)^}`*FpEgel9W4E&Lb&){?#k8t62}
zh5S*`Q?grGPAs;~9soD9m`B@SUBU>POP7MLrVR<qT0n^Ao#%lM#AYVE)!n=+^YJ<Y
ze%3;6Wd^s1bDx&E+~wgD_Kk*?{skTI74G6VKg#)}*Pl0q1)D6Ve!1phY5RN$J!kjD
z%=~Vcp-iv=1db|QJi=V4#NJIH{v$(T4_pw?yug}1kLQKQ`Fvd(>@ca<TGh3HVr=R+
zl|-$|Zk91s#t70dIMmevE&&1wCbYr+X#y}BvyDb@^GYLDhf_zme2$?47u^}`rOU>n
z+(9O9N-HF}0LTY$<FyB(`^2~fZjlq`jCb+RTkIzx+kiMHTN7Q-*O7j?-vC4k_8d85
zMj~=p82rR5%iJs3B!%n4GRa_LKn`S6Ad3~)22&fOf^mTWc7r+oTbEE<AAiUjCR-td
zAYyL-1i5BpBkj*B8-;<87T+Gmxex<eoKZwvWq^>Jge1{|=fC;3S~>-i4muw07dXNw
zcU}!EYYsPtaXvocbyiEYVGKtRQ3XKjL=h=03#V_J#8e+|kfVNsfM_qJoso8#J|~z8
zB~NoDz-GZmL$>(LxIz{ZAb?-npi0;a@XQt=DhUb%MtaYu09dJ00JJ%X&q1pBH-C#r
zC!T)}$P*qHA(}w%ECF?_<tQd^;A|>x_KwLmNeJ-ILuN2aRZ?!>77o|Jo@6|J9bP){
zj`&G~IQm|&`c)E8KcEL5%J{g$o^^EFMUqm2iobyRk<Zho@zDf8kw})L{Fy(CO%T#w
zN^2%^pHTBU{@aA-v1Cx%0TAL_piC0UR0<>nJ|`x04T!@#O<C+3VKkrvHjRL-q<P5f
zDWSh(#(8idOtJ@aqJh^oOt|S;BjWhKyIajaEjGaSvoCu2q#_9bH+iY3W)=%*+aDfl
zA0}r&!YRk9Ru>q_hsA?0y|;MYIFynOjZIemY_T3iZyY<{?p@sf_FmzM-smSBLLIK}
z%iGBBEI1U#SU5D+fV0HYv@?LSu(eH5hMhUzsZGP8-q5Nz$w3@N*WoBD5B}M;q`A%b
zEpzx}9((WA6z6I&x!4qm(>`eD#t;#KuZM>r&4@P}ZOq+=XpMRr_ivtg#G0x)FIl2B
z#$GJm4v6wM@<UZpWd>s*UZd}jBWc~cXj+fI<otcaoSpD?Q|>KvP{=DGy=Tx=T(D-*
z-aHht{yxJL|MAXLGx12IU5KbqLVc#<mME9?$*46wFBq9!^lr{DJx1ZLO*B!hN|aoc
zIPlEKsgk78S{bI%A(Qfy<)Jlgq$-}(&`}<@EWeN@dR+WmU(~ue28w%UC>WZ`+EFhe
z%I;J4En}p8Zmd64gw7k}SdN7BlJ0_19!(k@a(GL~vU;tIsVcHOJjmS0{yei(IJaLt
z3(u!QJR``M9tx}B3N{UX33+GhIMBK*BQFZI_}<IfHZ`>C-G6uI#+@>P)|<#Be@6_Z
z!g*{L0#l4GNQ>&i`ml194ypO$ktW-;MJCP;y*Le`1LZ7%RkWzr7)7;!YS1yT018J@
z$ih>l3<J$CFS?%z>!CJfus-u#T`fTt?a@^4;)JBHnRe*pqqixRNujB3Su(w#yP-T!
z#Amiqkjkdi)CWh!@3bYA$!ybDNi9M>61v+X5h-PB`)RO9x~`*_ti@A!GZ6<%D(CkI
zxk!*&2d()8D-x$=eVX{Ks>$)z3i&0qujh)BEjFu{>rwy{jDo-|F%sT<<o5^RTO-)-
z8vz#wM7U4ib-EaqhxG=BH_t_z&c`T7-%sQY!!rN3v<Xe<RXD+-4>N@XQZ#0-1RFPF
z2i{pF!MOiTR^3mSh*!*UJ##yB2A8X|6|w`#5#ZaQxp=W75?xk1`uXE`_prB`RduxF
zU+A06;T!n%u2_Ht&Z>!M0LUw>lu@pTExkE=PUJYatx&;7i>KMc%~`C+y|wjFzdBn7
zi#_PA+lj<q-*L}o?f{cWAXKQk5`wu+ZAUUk&YK<pOovi3V74JxEP^B$u2N3BMu2o<
z#lJ!miw&FY*%7h8>)0<*ealq4h49=xPk?5}%-baLRs8xxS&nMg9M)yfe?2<edQ?Vj
zDOvu4r?_^;4+u&8*rrcJXdMMGCGTL&$QMjGK@l=%)9S3Cy6LUU2Lp~>cR$exd+@Gm
zMYsXC<c^m9WMewySEWact*+c#C#jCs!x&sZo#Oj>zE9fm_qx_DDtHj2MwU7NpfD`e
zy8wmah5s=t5iScbq!xH06Aqh5kzt!K7QHxlLH!-Vt;D>5^&XrF=)v#|lXx;fvTdQz
z84WmYZ55Z4kMj{lu>Aw)w?D|?PXm7+4w3M9s`sZ^pU{jP&4;NqL4Ke+4&ebxbCcEQ
z&^+?$&?e#Gl*ofbT*M8iDdLKYo(%kiD^gBbyc>*(wWm|505r|@h{CZIn*a+G5NcwM
z;5*>$+qr;ud^`2HIWhb~gxK>STY<CLNs0SD%Cw~HQToux`gD9(f*4Y$iowB=YTYHt
zb97mnBdDcA<GElmPZC!Gw7@JCR3@_`^Zf^wGp|uyjni<(y1>XlwRBXvlS#qWPH*lS
zCuiMer2A7rdr3PP;BSh1qBXZr1NO+pA29B&Ky%Nl`{06y?nSebAvZzx`99GTO0C{Z
z3WUFuMg~g-Jv>Bn(aN!y@52f8=}Iac7M^}Cjow;v1uikSIf?;>lMZzn8P4Z5k_TA*
zB!oXEP6&WUqrHfaZqEK2wQx78Xx^X+(bKycoR1ZN!`>0;tcZq{?mk2GO+r>6`1TMc
z?_rUqyyR_F`z(f2^N8?Mny3ex=<k(RDvaDJTMdBj9aiX1FntmviK99E&}_Rsc5FAy
zLX8%XKsB%zXlURYO50xHJpP!z%v2&0g8>OWccM_-L86hhMUnRV&n6*~lYLe$-ShGa
zH$t6rlAbBm=~Z~s+<CUR5`kHLG$3M+MG(_HDa21-tav_mA-b8SG9ABn<8yLF@-i&q
zE@x@OEC@{6o_gWPleI9RtsK(QHKU6F1h~G~``=f{e25iMKc?R+{d_<vF@ZqH)ldi4
zq_?#f3<r<|sd228w%Q+kP@k4o^h*oLvwFDA91=8JrF~WJSYz8b2H8LDWyQc~F^a@>
zZO{hEaOO>(y}(%9A_h~Ia{E~DUkdHkkOl6We<jsA^ZG)_gQ4(10AGl?W_J38&Z7$0
zcX;rA40YWRo=kQ2JohsV+yZvBaZFz7@#~J97&{adUwwFkY5lJrl>WSPz~JI*C*$pH
zcFyVmi&cIGuq_;zi-}$$xjy9gXWm|FLVKB-(><FiU`*DqrU!HuI;44d09O{F&_##Q
z1pN4u#Jx7U^M_%(n8tJ^G(CLa*rW%ZYlVitv8yn&2n>1)QdqQf0OP(2Sb8Qrr?@5K
zN2MZmp6tODz9w3l!qed0d+r`!f>x>4ma5ydGrKWog8nRQG^u&PNy%o2>``T9e@e~d
zQNcf~x8_X%hm8}=e8+)>+x<y?jT#rMrW85ykH+EIzbQqLsBD*1kZZ5*`Q>xuc(1f2
z)?J_v<^8Bz1on>;TvQ(8Iw}+-1_9UK*J&y6XXp;AxPA&QX2Zv<bd<3TV=aMQuYe&n
zY3>Gue4tdkCD(nB+4jwl(mj7J6Dm9amjU##GM{`;q^-(-ZM8Sw#K8RyVh&%FN)inL
zBu4eIyHfVC9ob=h;D1^;sd%4EoWsR|u<@q6U33Hn-`LHqWS{f%`@a7tthe=Ce5}x5
zzvk{hKUsBq<j$WR`33qvciDjpo0)HM0044K000>O|LwBtv9bJLEF(wSzix}-iN6{@
z)SfZGYzer{B$JMT0ey8&JZYGC<2Tn`Ll_#C<UpGb5{}}gY44l2O52H~eo@`vcDFaQ
zc72NfEWXdB6_pjs3p{Vo+!^He^9)&d5$CX(5$@U^eY&EJog7^qvgsBWwu>xngEO_D
zpC)7_W@dKlog5z|Uw^Y_7B4AeHLsj`Om8Cy4Q@q<4zLlMsNf0CZO)=Bh=AB~!H7&P
zB*xTT>bY1|nFlNjhu3Q7vt+us*<uvg<UodsRt*M3_thC3E~7Li1}Gm3$E|TZmGtW9
z4LoU0%oLe0d)Q6p8J-2M0=!+pCECb@C@-%sQ)_+sypmf<=XpZw2&5M{aAp=6fV`%<
zP^?!ixTIp^Vtc&b7a|z~NHALq-u}fy;g~pC=#(Zo6a#(ixV<$Rhj;A8kLZ^!?!|UT
zjkxWco`v$>n>KQI>MEX>4}E6=Wd7;LStOwd3yi19Bt*R@F_;gB^iOU6etX<qi!-D$
zjO*Il_73+rPHVtMBnOF*$cyH^yM!)jB??$}+KFyt@ax|^px)va=?yuoZ#7{E--`?}
z*US2rS5Ny=*z&v^SWZ8RJsv*df_5@|+2P30J>F>mC>#EX1QdN#cLWE5W0qAX`eXVE
zYx=7+;CtkS%oqxf*W8mj4(W;*SKv;Bo4NHhgC7;FN;VkJ2Z&p@uM-&(^b%}<C7b{h
z1XkAnL$R1d$_zN6TKNnCqV(%|Fq|7V&dDOf{e2ETx}qyu&(N&K&-ucMk$GS`@_@<O
ze$E!cztpyPVNPa;nPJhwMZj&07(H0yovT6Hd2AkL`YFIYq<1LLv6BelcV^WkLlm7N
z<JeY|Ut^HgFna(eQ2Ll2issCnXJutMA$GRKp}RTau8RJ9*MjwM`fdynM%Y#nrh+D>
zhlCcT5iQRm1K9yI2Px2nh-{haNEu0hHWcqj+MW6}6bIx!oT<&35}IW1nH(=B0oljf
zg$M%&OOVbEn-;7HMrHTGX<#vgqcwxD;xFCClnyCGfIV1p_%F}V8fTkOzG2m*cr0{*
zgzJhnLy^IYS7tbEyJM!Wetpu-Z*lwz1+TlPC_a|Z8~!pY1f_AWP~KhAC}KQo1*eNE
z145JPas#jvda`JRFEf}=J4T>P*|M<SEr?>&lcpU`>|CN4ZF+H?$3#Sm!|*xqM$XlF
zoy)RrS3`E)$m2F5TA*;@8z199io@k9$6=s>dS-=0SDM_1KHZyC*xTWX_~qG(P&YPw
zXG7r-<N(Gp9cNi9j-D=#j{Y+y3jX1>&NY}Ykl|+eO`>?lvK2(KR`V0r#*e}|v!R+5
zTdi0pvoJc66(MBBU9+0_OH2c~5PzFq5DG%*i0i0Wj1pUnZ(PS@0K^=$QSZmKMy<DD
z((-zcpRV$WTEf1)57Y)KV3KMLFE{%apk&AB3z%@+d#q-VE8W0x)Y3t29ZD@&*3sFX
z@WA(bzzXbp<a)lJv=@xyO(}_u@W$au&OR<qmdbiE7qx`sEG(wm<KjMK{^|uD8(r`h
z(*d?Pr+Lanu~3Z{VaMjVD8;b@XF@88&gWlngNgs-#ABmww<kiUpvtJ6+P6LN=dmE_
zjuLcnA4%0h^Iwdy%g22T_IrC(-g&$_k}udxbJ2kRMcF$Bi4rYYqwPLz+qP}nwr$(C
zZQHi()3$A&*6HrocP8E!Z|<A9cfN?KiuzSQs#dPtnYnANeYOsNe(oFuK(;E&h;gha
zTln##n4Il!3;f$n=i3oA(cen3-_jI5*>IBc$W}-yznLNGO2efI1c#@n`(bBw|31V)
zb@>^z=6peze<RIsrn*Om@Cfed6)?Y}`9xyH1BRjCMlz>B(Xo3vN21@YLM4r7YQ%+P
zrB;&O>A}l@j<8Y-X12!%C>qXJE}28~?qy@CPhiq(;^-u-0dKNi<@N*wn-QP%)5|oO
zVYYfTiW-{=uk<rgLkZhB<&0lcf!3RUR`Fx_!@qllY;j!i;PDqAc?1dLJ;5gl?rDi}
z-LmCQ<QWkW-Ssq_NpzBpHkEo^RsNCd@ucw{$BL8j(5oW})s<rZ%6zqA@q9itLwnvR
z8x7cAT|OqD+f6_Ic_GHHi2-ddM-%$=>=ov13e^%56#>IB8Kt9PxY^+VGn@>@lTEU<
zoPZ^)5w^aIyu8Bj<$)a=ujNA>5#_m<a(SIGVWZdP&G<u>;23Jg+6nh%axsV*szAN6
zP=O#9w!lML%&p5*?<Jm4xW{N5aBAG7_vt-_ebp_BW-^x{oD(k9IxFo$?bXsQHn33@
zlI@UWTkK(QJ%RkPh0KV%l!g|PQiQHrgUv5Ypl&NC4bhjO9>)E&-X`1rSj=<O?VFe(
zqAyta>HC5ZEu**d+6dHEz0=JCkI@v1+8^X-*955)s5?e2@q8;3AZ$m89{eOL;>BMq
zDurnIoniOCY1Lz-E0z)=%S*s<6srnH5Z<Dw%8EFvbGNYi;uMMRINi5IXXO$Gsdv>$
zCfWs{%l`^^?2$qS5oY&fzTa<C`vhPfJns1fXHr%u8OWXQQ;MRi*>JX0KtBY!LN_&t
z4Schv?DO7wK3=R2yq!n2)q$P%^?HejXL}7b#3Lupz?rRKQ1pgI%6Yh3Do~xjxb1YB
zl-=s8X{sHXv#+pLLOyh5tZkL)@xFu_Fl9;)X(Sg~*EDxCB;vZ_r^G;yEhrmlW|dYc
z!T7gC>J*nMTCOA}0LZLs&Ug2hfe~5x`_S*B8N91X*DYM?!VTtXjJb+@FlSiMG`|O_
z2WnU-6mAxJS9N#{0*rQ}B~E+35F{l4<j;FwC^ZyplGsmj;@X8$CIJkaJ|1Zbp*U%2
z&!VPnQPN%?H0Hnr$V{?#W=0)Kig@u?9RYYb=Um`EI8qMx(Cy%`N~k$)OcGmC;0%A&
z$Ue*aV(q22x*}^#AjZlr$08T}X)}SVH78fr4=s7p<qIFeNF^Bbzeu}O3_GhYFauQ;
zfiYW>m;fWuD3UXZCZZ!>2_S5QD&z)e7eRuAwMqBBH_b#YeDBbJS2qFD?bR?W$rKjC
z$FKrcd4xkvLY!1hNeO6$B0(Weh~0y;#+o`j`s}XT^zd6T{^R0SGI4R49&1Te02W+w
z55=t<l|!(HER$-<crAkDfx@C;I`3Q+ZGyItq;aAN<Yj-XsY$)?p{m)7-b&r>&0%tB
zfwk}gnq|X1M#+e!fjB-bDC0U`oJ~#jJ5yD34;91%i6FOapipYc16!o&5Oh+cQ*%bm
zwJB$PgITgdf)vIEd4ya-Xz8HkE+WVe7S4jLO%owVSPZjlW=V2iqV-_*(A&{*#*#PC
zuywEz^%&>vY$Y?%bdhpJS~fKK<!7c*f&-cjd&%=?mZ238_b`<yS<X04SEd7j1(S+@
zO}e6nIeBsV>}W~;Ar6#0Y&SwK*B5awuQJCe){+xv{i8K(X}qI0qRa3=DE2rw2?2Q@
z?5A@4M<QXk<RY<O6L&qCC~JLO!<WEFE%jP1-*_jriqxu>srv5wZnQ`wZJ91|0h`y!
zVG6}p1EUsSL;2W}(A&Z4qU3iXAT^O{R4$8U`407V`*Vqp5rfeP<96q$=FD}#O>W>m
zctejq`OCEmeKN)u3#br&D+;vKWZJ>%LNFUDv`Hil=nz=qHK<U*;k{{jZ;yUHL9g9F
ze&YK}4F-8MipkJ-RVD%a_b3an$Lc4`Q0a5M$;@>n24nGeMJB=FTiP<TK!vG!r`IyH
z%!ig`XlYlCsriitGrAWF%pc7e_`e@3&{5b;y38P0kzh_8^7W}uphg|?dnqM~{1sZt
z*d>km<e1UNg#ms-^YL_zFd{;@=i?&BO4|Yl+rKjUmL9h}X=b^l{Cs!Lc<{<kn}&XV
z%?n?DK0QsBJ<Q-9?3W3`y_yUH_n3Uz>t1czJ3+A-$uKGBB6H@I)CgmqHhTFzo(oJv
z9<2iDl`^PVVy{LqtpaI#Ld<Np@CS}`G=iK$bGwqi_TaeLvr)E}m8cDWl~FqP&-ngP
z{S$!XpsdH8mVw@aNz+27adPFZ&~<9Lho6ko+i&O*LH<+JyHu{!=ps62<EmN3V+1NJ
zk0g8VRl_>lVP?Kr7$sI%GJ;72Pc34J!w%{K^sRVVuCw5D9c1vDIK)40`(+A$XQk>s
z9)5-3Rz-YgP8F&BqR8QE)1(0<nXGe;o@5YXWIh6(!OTQS4DnN3M7<?u<?Ki_QSh%9
z8kUqdr)ERMct+kS#xFD~TuoY6&*fcwbM|G%n*tz?3y42PNmkpB5l^?mHm<{_mZRls
zEj4<BmL5y>7hb%_`Dk(ifL162&Gl?CrPQ;J2+_c%pT|N6dI**TcaXkCkm&E_(*@NQ
z-I<!-oXLCjbG{-)@ZMSxcZBDk@AB_54y?9Ay10-=$#7m_T7mUm!9^XMs2g^^1}w0o
zU42~{B`b}*!J_o|rCxbtq7ZwbRrguz_>MPl;;5^)L7r0O!Jb_DN8v%@vB#xt{>U^8
zX2{#CzUyvB-s)C|IE~6s1CfV1F-DcG_#%EipJ<HDE|1&8usW4r`KlbpRQ2Jv^k1ue
zKivQ!R3>f-0ZoduF{@v{Bad`+2m6^*1;$6OGNWP?33{wjp{}t@1l?DyGp}7W+Pk`C
z6iC2@Gi)fClcx_Kd<{K<20l1WnI)aHo1~gg3S;|{WUffEiVYc!APO7YNYGQ7>~_9Q
z79%WMK`AMF*>3r|J-Wze9(jw%M;}Wa8FJeMrX+2r4xg`2FY)|1XI}Ce|86(%>D0u%
zSyEUVvsa^?AS=r^=WXqFz~S$Ljkzt`*+>jflpXD!Fyog^=c;6OXnJ^S_(>2&&8J4(
zT_Z+hFRj)|;cSh2O0Oq{xKH^1sncWnG4k@7#pi-V(?OPssu!Rep3frPsqx-7cGsF2
z9FG*snmV%mlPM|cLm33i-WXlJoF;tHO*6k;FWedn7tw5{huVSenj~yi7TE=YXxRPZ
z24IFkHMpHKSn~l;A06U6b+&$ua_*hRg1@^X<S~VRygE{+A(tT4vwB>M9!qW$5!n<8
z*_H}Q72*_=!y>%$^FPtrPQ**+Q{xT}$qpcXj&4~K<<5Fco8bmQ-y*@Aj+aVrmsYRg
zMs%zR-BR0?%YA7BQjW_xR`cyfF;7{hgGO)1*nzUPR&|$^|Mm$<Da<k>4~W{_a8nuV
z(^kpfX@QX4Ll}wm^@L<OHqzrb*H$QM6GFxNp{y4YppQdO!S^-Y{pLv=lUTc1nJlA^
z)_UE-X0+tqLTJay7pmmhz{Jf-&Fd{qEV%P8JCfcWru8V9jOu>VIO$ffqtRg{|8_A-
zEg|osaTJ;tInyj=-8s{eGvjKC?#zDHd`~;y=2ZrD8O@L5VZ_=l$J!pOBfH5MucP#5
zY*j|XTE0ZiC%v@3FqGS=ey-u$aR$0x2H@Ky!xbj`_0AI@pQ$Z;Ke)@<DY~LQB2ccb
zdA+%TV--I?P=n5Iq|YgovYvRj&sC-R7O@EryI8wNP=1?U3;*o^SF6}Il~}d&&sV>F
z>bP9GYxi$5uN4*FQ!+2g)E>OI?AG5so*_hu4*fIMT5L4nskax?7Z*?F!^~Z;mxa3v
z8JqJOn?Nx&Ob6$Cs}`3irY-Zoz>12Tu!Lbj(rt2zk~D_>S%aBG1G#A5!&8G$gF1A2
z1_=_nUN-@gY|gicWx_KqOZWNnA+EK}foQtSZv$JU1UZ5^;P=?igvGjm!OCL>^IU$f
zkJJGZU=K&%z-S90p{>%2vgON^31RZH(BHEXC;79+NMjl}V`&m-G72+;U88f4HN!j^
zbhe-L7aL|W6E@T1gIqMQa^_=_k%9q&om>^h)i(fE3ZMss8B}KT7k6~v+aA)Lm=Xdp
zB%Or!k+u}!1$V>9l*0|8?;9UtzN$>KW&q<Sp!hR_%VR$t;h(SuK!}F=Dy|m@<kMJK
z<j=AA3xMwdz~AWGE_mycF1pOGkoME_qxIdP$SUQ}Z!)t0p#Y)tALw9$R=S!aui<|6
zGk_);eW4l%eDOm&!$60R66@JdKpJa3h(-_kGgg4n9kK#K5@z-Z2o`X@K}^pCAcU!s
zz5zN-VBd){rirNYBPljW0SE#=a0C43T&(#b@n<fE-`_m`L7ym83oU3kxW!IA1Yv<i
z1Sq{o>a@U93ijcYRxMU*jfljF?t!*cT;XgkOgP9x=9Ccf8@BGac@Mi09;9so@+cP?
zgf=5YlrYJ_8DNrKCJYtP+AisQ{AfwkJ$~g5IMgp)=2z0Sg|a3RGbW&jtdM>J7zlBH
z3OYQiv1wa^515PSZNHfwV@MQT#$awVCR$59-L2(*5?SeIif=oS-xgBp^nrb5?1jqV
zpMHCUHY)?7Z{CaOo!edfR$3AM!NoG1=baDSqHFX>U8`M=AR6E_vt}=1&u729gk0WZ
z#iI-H_2L^mi|1(}8%mt6#`m?S_Ju+_SC+#S%y-{a`!G%>Tb?2+>@uc8tIe10SQh4U
z&ogK4{nl;Jq_Yj8Rcy$MCme=G&QfE{`+i5!t+LBj9?TY+x*mPV;KNKnxbh^dLK|1n
z++<sbu~VXTUgnM1%Xib+Vl=&4o1WTg?gtetGwZl>XyT9d=2vDZvxf9v@3qev%+h-$
zJ9|>d;7>XxuGEy^ebQAmatiD<d<%HzbKo(mDY3GE4-1>vYvpu1r|#|XDt_*zy!a4U
z??X(_0#a+{S93MJWAR%TMTyZ~*HNH;XQy`G4V~{d{D`lsy3@E}iy6A!N2MF(`3ZPb
zN(}VkKUp{HY#q&kPR`Hs`Oo#`;y~6<**@kBMq{C79L&a~GryRIfR0D7{~~FF-#0#W
z0ncfQJ1+OI)h+NNfVNH`>itSanZJRLDp8lI#@(3rUQX4G;QMpWtB4AAt#aMytetN{
z;Jccj2T`?b)TgNSb~d-}{G?XMGmBTa_-1CGg#(8Wz!rVryt<#?F~>n5p~Xcu9Nc6H
z&nr!LvtD_Xbo*O-CG*WEL>7K5mrgy=^UI7ik^$<E1?-ec!9h&E-E#tybQk5f8o<Ml
z!?)(|mk&;csoS>^=8PfbCluF7Z@ABCsl;)(9_DTcrTS^HqTguiRDtL{=jtvS3ge6`
z@|vcSi`UB978jD|QS?s>>V(IltOek@@Z-0>XQ`1cX|T<QSKpxocwX~S-h$kMRc-xb
z<htR*a|d_MfO_rj<w9k5Rok`IRV0ryoK1DQ+0(I_YMnE&88h9^u^;;9Jd=jV=Sy$b
z_N7v3wZ@`&q66EZN_8<|nimpDcXm!;Eoiw#y5E?@LualHFmJavwXGE~Sik&Q{X)oQ
ze#RO71N)fd)9^+>Owk6=#n;JC?3-ro(G59GN$j7`%eAg0%iC`>B{{808AsKdNvc)L
zMAuQsuZW?ch)x69dxZ|wQI)+E7mD+~%g6y0#@@#2q8Rx@`{nVAjF%OCHLQM_$xN~`
zR};ex0^Xo8pn~mx_#u4==8D%e+T#KYSolWD*r_h<E(R=$cHW=gTg^`*Hb5>Ss{E>E
zip;eK2+1|KK9L<B0m|<NIDJCjV8)g75$~L-dEtG4LIA6YL}h4JD6Qod=g*_uSZU?#
zOtf<&v)j2-4D2%;e#r*(k6>L{k2YFoW>K_eq(n-Lp<Qhf&W%!akSAqK4M>r?Pb_ki
zKl`fy3jd*u=p7EK1#HM>Ho!(e>>3L9tq27l`?8z3SvKPpN56Bk9i*cSTfrsXuZxDu
zJZv(A4><w8J>Y@kc7tEB&icB3f*^h+i6BD=+#lhpdfv_Mre2acO)+hbc_j(~rbhG+
z=4<ooxA7;hFp)IZUFS47zf#bYy)8<V>zlF=XTJp4<*!#p8Nj+#cxkIzM*5yMR;`2^
zvr$>MFTOyGDc=Q0##>z;M_^*%>LCyoml4tq0IP?tvbiAkm6ee6NBvd#_@o{W|Er7~
z+Li{?$YM(hc+EOJ3(88K{})KkOuqU|x3wJ3Hb0H*W$1LLECB+EwK#EMk|I+=_?-BR
zaAEVHLAlsEBs~(T5Ofnv61*agOEnERVZNR!ml~H@J#=OXAa#fa2T$o&sVMM^RFHWk
z>kU$8A*mQT%cBEVOjtX6d|(+<G&}p*=8I`by@<RNEbhhgVB&S}++Kmk61xfyc=q?8
zMHF|t427ktQiz+HP&ICzMmaP%H3(%N_M>Rns{PKam~%}{CS%Z22CXPqIp`E(c*L<X
zLVY%+U}}Z*QZCdwttgY_;#oEH#u{|MpQ#8+Dyj;Yjji)=9o%)H!52A_g%>%If1F%{
zFLhDu*n68BGVJ}Tar*#9$tPn##emcYfD6W|JveR$e2{goG=UI0xyxUYZYSGZX(v66
zY&6Wi6>PP3bhViS=OZ)E%QK+dX}L>*OL2({nLgW=OLdxMB{9M=f47fS9&0LbuT`Bz
zmg+LwV)SgKuyP1+v8aS>$l9JCMXBg-JMZ0_YwP9)q5Sb3-duoiL7|;+Q1y&L#5lJ?
zA{^A$5x_i_?8*UruTI@jkad!wAqC+1;sRHSziDMj^9H}R0qC=^p>p;gAMN3zi~Kp+
zZ<Ccm*Gy4@b{37;d;#48GmMPOrs5Imk|ATov75d55gq&V3I``0qFz|IBqxY%xWZUZ
zB2g${p=M3fo$sm~z3;14m)Q2xPd0Uz6FqWCxK<N6V92ZwgC@OlUFq{@$i(e+1iSf_
z@Wh!5c-O;wlNI@_#e8&)fA8kY_)dJtSzN%`fCAk2yBn)pdT~LOm<nIb9d2dKaELvo
z9{hbJm-!-yX6(-DH(*cs@|T=JZt3_nK;f)k7I=ot>8~Q-4vC{(6;6u&39rtx+h!>A
z6iTB?%(=kYHTUP&plsB54BJRh{(Rv^hJ`*#p>EW;j}WXvn#go{Eh<g`p8DSEp#EHB
zJk5umeTd@{Wm`<c`5ihfb~z0pTZ@}fxHc`m+TRS3IDrd_@KT04JdNzlYU9aQ5OQi#
zDZ)abx4s~u>xHCPorg0ExHE5IN51CpqvT1}{<wC>&$|RIw%T++-K`GFGYwsP@J4Q?
zF|k;-ZG830y4`u!!r-9}P%NHyHzqeUqI8CvK$K#q<acCa;&e>tAYDH1;_IrQstQ+>
zI4U?uzcbkAMN<>iBGaNCPqUe_-35&ukGd_5FZ=UZ)J0*Cw%+2v(dM-6n?xr|_(|Wp
zYpDa-*~Ip&CgMz!#y@j(N%0U(<`{dif4fvw*y#V@X=|92kLu{GOM@ER*|t-${zyQ{
zQC&bIx!N`I3~yS!&)gS)%f$?<UIP{hXHRoq)g;U`+s>TZ&(%G<dYyqOmA)1<RPZ%6
zL8jveSnk@4f!Pcm%~Pe_Wb%QVrIFbMoxDjrJ~hra9s-N)^<NPl<T&;c)Z2(#33q6r
z_NX2DZX*a)OT0uZnJq9y9<eT=>4nr(Pq^f|)QSUQ|FIs~Kz`%3io!480RHtT0na)b
z9|RwlS9k;sFmm?hnt}8hZost3Q#Vau>#2gGlw!2~bRo7Mv0cSkXL-D!`FQi-nDaLd
z>+Pgc)C5WRiQWRC(tPh5Jf9fcF#<fVFpFH8Q?9e`Ml=GO<__+*@+rwK*L7wQmaj$Z
z#9~sey=;g~p60Sd+y<MC$~GWV;_z2kM?FU%H6&LPWY&b4dW0?JsQ{O!ayi3`CzAv&
zOy?BRSkR6=?=!dRgRM-)#3Z3%TFMrb#)(7-BEOjwVHp0hS7G{UbQ4k5@)9*+8^@}M
z39<ntN`b1jV>;|>Y|Q5a>)!&`CQ_J3B078OuC$vH=#Q5U?xS7U7EHJY+44rOh&e^>
zwWh187Am>=wC&)-k_{Im3&%~@Q;s*pdAzbZhCV;_kL#C@uotY$7dWl?(|SG6Ya1TX
zxiFFG_(cqzun}25_E^bx!k3|gy#G2`g{?9dJNgk6jr_mx^tCfJ{MTNtAqg|KKO&gH
zx1Ny#o((W+j^4i_OUd=oc|lyV@MlNJf=X8iu_BPiQ&8H@y3&f5@z6yolf-YlvoTPU
zppmF;yc|0fqu;DuA6<F7dIypSx7v(ZvsiGmKP3|z&eSzdov1G`;}rJp#dEh3Cb|6y
zt!hXx<VZM`5`n)%D(1w{M`o%F?kux`wKfY7$k3<GxJ6*8t{r}}1n3gCK-=KkEUsvx
zOPsM(f#A^t3qt~TnIVLVpxenIprAT14y?FMEvL;~tmd}mKs76Rxq9w4v<lqfvtJ-P
zUGAcZ?7nosV070xT~;1YQ--p49F)Qyilp|;i>~NMywXRbDKaaAPj$S%#x0Jf9vv#E
z7T*}2ZZzWvr6aZ;zDkL9DoqtA><5``sz9zjx_Qmihw%^s7gX|CD2+TUND(9V)Fa(d
zvm3&#un>Y8Ly0YPB2NA>=d1vtSZ1()X-SzogOJ2tG!nM%7S=@S`f)&vIM3Wf{%h_M
zaSZQ*rVTo4d&dKbiKn~lt|L;QJZMlj^W;c1oMY;K{rHY`jn0x0xr}Uf=XmeYqPt7u
zny0EIoqPU-H(ruJG+`k=L@~?$k-IcCc0IKCX_9Ep+4=Vxe<zfQAY8A@J()75e&|(B
z3E15`>vP=qp9b{5zL)-T{)nkYf&H(vY5&t2`rpB5CP~h2^T$5r_6u3q%_4Bx){8vU
z1w9^=16k@j|GcD(KQ%+ViUtEQhZ*b7wix9NYqQWQAjdSB6rtaVmmF;<2DHJ!rcFJS
zkiDa`^ZTEpvsYwWm_d~&Ti(0@mpeUqq-ZWi-eK%f7Z|n$_<b;<P!?5=pkS6JOr2p!
zPBjC7cNnGH*gbhxxc9*z0a*J}F7qYSY_c;#$gt>``eqg&UUO@RYT)av*49aj;24sm
zJ)Y7q^W*-s;&ychk1iBsx?;uw)6=B$WAFENG#|8d)phZKR2+@DPe5deJOazZkHR%;
z)($fmhLsMuD#KOfCr3vinVI7sG&RVs>V(`C(9tzp)}JIeJ>J8W#njPHDyS0Q4m(|L
z#PWAQdW$_o%7)oUU6n_2H{Gg&#meoZr1H~A!GqPSkZ86cJ}M$Yguo#q3o8<@mB7VF
z0!;|<Ukibb+U1`&1NKR~K5aGrdB<h_C0e6|9+(nmemktC!H(Wp%drWe=cP4JyxO_f
zfZlut&UaKg-q2~TwonlRN#AVy<Q(-J%jkX{@rR1`m!&fmBhgv_*<sYVwJWc#cka%>
z9d6r?1vQRwjOVZ;`MF2%WacTJ@ouAV*4CEJt}c%XDWUO29@50BftWNst+z$yka077
zT9DqK=cfUUKRUEv+9!FAvq{%uVX1yY>4h8HNU@E=<|(~nmLO<O@vo_@^&qpy9@JiN
zCU6OVt?=g_*>|)E>n4vfYCifdze8$1y3Xnvp27bs$C<wbs=57eT+|Oh{};l^{{c=D
zqkqG3E(ua{hxEuHFK;MfIWk%)#Y2IhaS4^=P{R81Q>9guF0?IX*j$ZvXTn5ZT&`HS
zg7G>xpR;L3WLc!?gl#srOR|izr;klZi*IvG+~R|`sneD!2RrM0#OP76B`&-pf>zW<
z{YDbGTS&_m@FHpzAQ*BioJvW+e!tHSArINHVfM@ufvh$QDm?##;NYZ=@5`A3z91|y
zCi&M&mn#_q>(!{?9t4=gg-!I^v_ab;-8aQl+#`+zRCP~BwkzFpJT^P@t5VF$T5+hb
z9$-<%vW;y&JyL(t$Wkbid!5py>pDX+%$NiT8|R)z;$L~uvszMZSa;IOQ0MaONxj?6
z1oP${b1G*_F^LCbl^AaTHsV$+#=&QrxDXaz?eKd`v%wfh4G!s)3?JO}STl%TpV&-q
z2d(7eXG15YYKBj#PiuAZp<jC0#NTkR&*Ar2T3g3c&!51xwXx$>4?Q>XEUiD&`r)J~
zU@^|GiMfExUTAKz|FF78{t?0c1@I3I=bIxNrIVj8YY6hc*KoG6a5DPW>8mGE%5H=I
z=hJ?nfK!V2N5iB>Zj?p{Q$&$J5uA}yO-0+?F%LzvFomkie0z<>@h`-ylr%P&-f-+b
zbC6=YqwAMGC_c)VBE*O$88BnY-4PLaPf66OLV2%VkTFDA7%-K{_*cNItAYiQU@UM+
z0)tnoL(Pg~N-B&eGhZP^n~R>Qq;0FNU4!?>P}a*xikm2)SF*Dng0*SGpXDmp4v?g8
zoCK03BK+AhW$7MihEEkQZ;{DncX;TomcNmwuv$B?Wc}{U<lDheF&C5SX!!Y?Xe#B=
zin#T`WaZ>U2>s^egTDiMG@SojW-Wb?RW^RT#{S{=<Bt7=Z~`K4>qEWIP2knTa59M&
zBJJ-ci!_^%@DM}7@y^__l9B4=kx*-IF_Sn73vH!^yBKGcChB?g_Jb#u6y8h=6Ky9e
zZ@4nwrt`EnLkE_ax>GiEcJtj26{<HH&z#hdFmUIK^&*)hn&x49Z(n#dsox#_?4Dsw
zOxUrvMP*}W*GD8ImgKfWcaB9!8KasV-!TIt43AqfY{Zu=ys!jTatLS5l*PODnpbCA
zAJ-mSBa1{K#ET}ja%^KI-!CbYS5zY{&%GPF_aj*;d0S=OQE4u<J5j~FmB({~ul7?P
zWQ@g6yG-7telvIf#1TVhEHs%vNK*K}SO*yy{u>~*B=Y?vF!&KSpU5!hh8Sf>ZV&+_
zWO@)dfo0PACU-{T3+u)L@c{01l_=kr#KtXDfyA1vo1329PrxRLKnTZ8XW45KBi0<<
zzC4+_+Iw<{7nqFY%Ko6HU2*yo8mUX~$c`0t(V($J?harT3jh(-f*+PZ(NszR{tlWi
zLlkB3VE9EhN>SfRbI};o5WS*wRIiN7RRZy(BR?b$Hn<X_T7nQ<WVk*AJ`I3S60q%v
zF>DggrXw7JPwA!ZkVe;Ai+Y;fRs+>6>EUX*+1NO6EARLuaWd*R-gtPQzEL0a!r5Y*
zmm|GiFH706B9Kcm!DSL`OEowqkQ>oRiX$p}T!vQJQZqiL=vZGV$Q#aPNX2R#e2Iw*
zVdc#pd2eYqs1ibrLprI=E4Q9Xht&Pv{VsqNTDr$g@c5P{qOdi?mWO5~om=iT_0|0y
zFq}~YO$5y)>r2YRe@%aJ*u<t+i-&uAsHoPI#pgAGaxh(%VCeO<#1<NE*SxICE%Mv;
z?~6XLv-f6~#2DR^;Y;L~&<h}D=eMLU@IMm7f3J9r{XcFmv^F<zGN)5fh5!KmUrAj@
zPj4)S{XmNOC+!gao2S~k*!-JaiaPQC5SB*{$-C5ZSOKZ{C9XM2Do}ta#Eq|FWck7f
z6S{ST>LqnO-dmvD{O!YLLnhN?yxz-u+QlooLttk(ZnkoKq${sft{jM^R~P8R8vP?5
z8J4v8wMW#8G3X;>%ZYPnb=Oy}ugzxd9gb031(~!0&rl$~A2KOTB8a&es9lU0Lq*~L
z9iZGr^|WE=Mt6m4+V8fjU!Z26J1>j~jfKU~h7zC)Rf(}ua2M6txPcN}V$x)COW`G2
zfb%!HCA?+)G9})47qYGTetYIR?fiOI^GOC?-GT_5%WBQD0o)ul%b@m9B$qC2YFf%4
zy=pq_)cbVeMT2oDO0r`3E%A4(03I2U#$2*yW~<4qqjNc@UFG4K%3w#Nq3~A|%aPD>
z#ATR7r!L(6uJ~O>`Y|vRQH9EBQg0+;?nq*%>3!-2-Yp)Rn3&@Z`SQ+te>@{?ov66k
z+8$dCA*?XBvJ;*-8dwi+BlLj`(r3GuDo*twM<=-1amY0IDvxYltQ$`*tJYt<|GKge
zOcGvw`C*J4SO5UhfAfj0&Gnp|4V<0+b?#YCvy0mhg&*C0q$m{@XSGk4S{A3+FTOmk
z#Mgiic@kMxP5rLEZ=I@b>EaD6^nRJGjbUInGharFA=%^h{d4MJdY!{#w-!Xe9qvtc
zPP%CS@%{|QMpxEWw`U}(pMun@`*Eim$tO|0-}^fw-V*2~dH|e>e*nBN+?#L$L?HBd
zG2LDSk=$L7_zWyGC9R)fz?bBz3&~$k1aQ+HPTQOunE^XT0hGc7WV|f>2$MWa-P%c1
z2p4HhAxFbKqypbzTtJvp*dhGE+fLryFd6lP4i`7=a!g1%LXeQAKvD`5B@+^xj^M{{
zwbZ57_o;i^mJQ)dfPxjl@h~N*dvca|Q7hE3Zq-Y`V>&XpAFBk3l5~ArLR_(zBaS3m
zl=Ni%fJSkxC<;f#T$W#1J~cT7K13BcEc{7+mO;D`MXvaX6dj4{$S8qBAr!@tE7=aY
zTpIb;2E-d$FeFswp>^UgsSep<nKsgd(8-8np4HF1;Jkt|04;}$OIu%~yfI122Mbbt
zS`zg)avo&!9WI%{HTaZD{nx8&!vzmS=90p<PQG(_3KCSUGm&?nFSt-@%>HS}_pc#l
zH?KS||1r5J6zC%Fl_oO<SSKV%_H~XEHBi$VoYkE5OJ>k9^OO3&BQH8wOku>G@!qcZ
zV3B9|GYXuc$b6*D+B~mS&qkn}a_s#J?4*6<ZgJ_#hzD!qX}VM7Xb^9Iws4!i+ESrV
zY<pD>W47w*zkz<qnQzn%A>3I5RvUOfV}bs1)E0HV(07LR(X|GyoKO{bOds+`>3jS_
zS9f(%v%<t^#UE9Na-6JBq!kUflJ^$0WWY?MMXZ%?_pXqYN;zR9jUV1ob<ww!L4z%m
zn4({)B&yPMf;mgqfVmhrcbM&=ROmVzEmxW&^IUQ^>ztuWh|Q!$98sls4k=r*>?BV-
zq8<+27O7y?Ne`wklyGA#DgDUd0B@maDcwZ5ff+|ScU7^h-3QUCTmp?<*7gmzx25A1
z7ImuV`fPHk4N$M$F@!5my$q!4+;8s~)((gTbSlpji0onwGmKoskau_LG&eA3cHDRR
zbktxGYe^94o9Cmh#Gcvzk%&y^JMB*p;<b1=8WFxXXRZ>ue&5$IxU2Nf;zIY<Td9_A
zt9(tf!aVfTW+JusGN)RhJzg!=Jd4lB)IUf^4VCfv0zYPr*^V9ySUj<*UNYTK&MInV
z%*4A+OS1oKD?`A0A>Ybqg%f0YtJBi-K&#d&D%AM73foe_>`ETCfJrxJt03zx9Si}T
zIHCW}2-u%1pWkMBXXP_2;D4FyayR?nE2>=qZf5y+^}v<02i39N$YK#Euc^u%re^lq
z@qz8X(n?Sv#zr#)0Khpu0Kot3!0?~>=s&Linp1i-zU?+!5x=+nMp%XrCmIgvbedM#
zC*Yg6F9FynGEs(pr(s44k4c(H7M-<gWPN{bClm@xHf9|d$nj%mb#vj~^15{wfo;P&
z?~7z^N4=U77(D%bYx;6$=M3IOgQjI1rK2mmQ!Q?zPPT7Nj8Z-Vw@)R$i$!;IA9EzV
zQFrza6klP6#hB9op~7VVTtG}ZqqsA-FT>xuhXeSMR;!1;2`EEU<sjnt5&5T&Ljt>U
z8fS!H2&30AmB7A>AK*-dBI$-#`UL?Dd)@*a&(8mFl`FgtSExK#+SlXm;`=rkeS9vN
z-%LJR5?-gqD4U?ij~`)2V3LXl19tiRjz7Y4<lz_}nH6A)iM+|7K5i0t6eN2ZmL4`i
zX=tB4MJ@}6S~eRW{wCu?EqP$&R;_LUANe6&dhIkpIF2^E6pNWjV&GW6cAigZ{Ke7z
zcJ1xzd;hR(ati(z!$~#9-&Zv3c<H09>3n4UM{<zuMpmz?U_I+)an}dknLr}wmvOf-
zM|2)eU|974Wdi-52_VshsVKf#8;zZ!<LKmUSz2I>urrc~n>ip{4>Y@ZyR^mir|0!!
zt20t4Kg05y1$IF*CyGFMTcYaHWQhFD9s|WYQmMG%V@0VO(Ew=A@Kf&I{a;ta$85h*
zjO~!OD;Tt_>|0xf=ghxWUry-&Mzn_LXm`3*h6;Ay76`1Ci6KcHFfzkW_dH&aWF<5E
zf`}!A=;FRj&$oy)cVG68KxTL4%6!M#A4pRu=m|oR#N@x9Jgca)#r%}h*GWB#MW|>Y
zm65MJ3?$(C{8t;T@P-J54~VvUN&KU$K&V+E=vSU<7?MlS<Ma)n4y%r%%Mb*whXcO>
zMp-ahK1oYNQfPwaw1TS}GX|d{AV{oeC0DnmQ}-2S>p;LAe*sEjJdO(tYSXJqQ_<ma
zcu#UC%?gzj-C1G?-?IQ0_G?6#LpHf94(TEgc8B?G0qHlI8}eHz!p|@Scrw^Ju?L{X
z5@@K?_7{Bm;Poa~V?#t7ybF1=P>8KUNv`0Ak&S+!gdGsF#yYN>aX6S_CpqlqC~J3P
zdYvif!4@ry=QYcyr?v+1j27`X8|USw2xEq-RRrUAO}rX^){--?1XeopOA=!K-ZH+V
zthd<WzkdbcKJ-^_G?5i+PKibsi1ni%baUI6NN{#&b0MR0lb%L5edtk)`TXShg*Xs+
zhFgdn2gq&w(p=1wvYdka5Fp!SjGd$9Cd0_$b%v<1_-yGl`7)|3#b)MUTh@nZPA#IN
zz63NO5*CUDMsFDjwb&QIB!CXmQ^=)2+%VbqRG!0uzXY*uLZ?$IZ*qCbz9{`;(pg{s
z4nzajDPB(vQ9nHqL=q%-)$1(U!mY8jnpM5h2!_SQ=84=WC8Noxsnsq_ZO}-<#v-@l
z$7}vYCayZKbT#3s3RNFnMP0miQPRmOd~q)0HL2f#>86yM^BC<|YYLY_B1!!G(E_4~
zlUcU%7B^8K2%exawsG!emPy%?JffwT`F9h35Cfs9%MVQW+wE`q_H?R4t{+`!>#)7f
z7aPzrZAB4s(vR~~p)so+O=5*@zpD*ucvfzb{Pq~*%~Vv=xpV2{_FH7w?u^Tyo83qS
z8jV-5KFk+eDq|o@<KD7Z4CiO|<2f$U-+N08rGXn8+#xI{N~q!XfKCat26Cks`Xt^t
zk{PrwdvI3@8T#Q3T-G1a#Uxs#2e^o+-jf6(9)>tdeO0F5wr@wG26&>%vN;!xmAh>W
z$ktT_fiWz|j-WOq$Qot#RlD}_4ZUdQ#n1lZ+JM2cs-i>6MP#2^m5r%^ssfELky#9;
z_4|bx?x8#|f@O8~^(RCVCl{Jh#9G{{1i-tfXROOuHj2}9D66G@?%I7@XS6bvN~a`v
z6>|(C608<~z%fF-;B2j!OfawaJCNnJf<ypUkFc1^m#M;3vceyHGUukr@%Ha(YX|v^
z)j+jh*Kk98q7Xh9g_c!}RX9RCH3p2I-Cer|CE%I|K<=~<=#aSdBQ;~qI;*StD`BNs
zK8R?Jk=#PFmEC9-xu^q6BCH>sm;coNIJ4O7i&-JFkldIk8sSjURO?%aY8miY0aEQu
z=4_Pkdt4Nqlx?URD{ca`wH94$JEBqZTt8rE0jlIt<vlk8C{?rhi>tx3_1<o@KL2L+
zx2!qAdClk?&7H0++T<SLV6P@4@SF_pw)p6r>7miodir>^r^klNjSB#Martp-o(Ib_
zh1Q7oeQgdIX*Wa)zRYsHrMJxj;rxm=dhoPTXo`8zO3BG7G*}`>Z`~TOk>RC$fiLGG
z5p;>SiuprDwMXHua-0MMQsOaz!Uq$|_cCAWW3tYRJJ}Gv=Si|(ev2V>>B)bM+oso-
zYYzUHx&Ufr#N}oy=8a(;2g-Y6nOkFgbBzocP%GB3shZZ$)uU|~L-<z$$7|Qzf3x3C
z-$=U)f!*Z}M)oRO{=LiuT^9Sr1}rb@92qXe?QxnxKu=AVLI;N)Q*fEUQKf~SS&t4D
z>qwQfcKPt+-BQ{3fy_mt1U7V7GOvj76YCsKHJ|4T){BZC5Z7y@hrtnnx#xn|f(`<+
z#oc9-hfdp|*0YPUb}5n9T{XqLyIj{kIJ^PTOLOQUvV{F6YS$eXOI^eFcqGJF^{sGr
zUY9iZ5s1OLO=o9Q6Ep${?6eem-eg4l`Og}6Vw;T4zGrU@#*)@ZNH+aqKlM#Yu6fSo
z#K4)dq#JM!A;Ae%E6-9|hLu^9JG+`Ai+XaHbFXu1`zZ8%g|EfDyt&W^hx{%4`Su~V
z2wL?akkp#xd<@VZwM%7hAnUOkh9okGVr+NHQ~{twL(x9tDTnBzU~-~aqhXGD7}XAR
zVFz+>a-vDVI04GpNjE=fg-`ac@%=g#>I}_%v0GvZ)%YQqOwp(BnJF_Km%t<S8ZygQ
z{vH5lqx?6+!9@ZzS|Gsf`cGNG%_{c5<zIGC^<5I{caR^~@y~<Dmuk?I&tA8DLp>)V
zwg%4vZMTzZ7dn3EIH+&%ZI>bLrQyL2bWdI<y4q3qwS3TZy$7df7q72+ygpcmZSw{1
z@5p_zeuYId+8m1YFnn>LBd}4@5i9ln-eUWJl0IFIAwFR$=lYY3b6r7;N}e!p2shqq
zB7^(gv4YPxSFh;7a)amKjqY+4?C^i?rI@;!SL#NXTuym&^CNW*fl<`1S1C<ln!zqq
z3cZPBC%c+}D6lTe4Fik;``TaJ?S<FYTfuPAnjThe<}cORd}?~^Z^UiR!*qNk6`SI{
z(%gY=EJ2*C7*vL=X&GrsP)H(P|EbS;K3h=5`qTB4{5k(!ooV>L^8I_fcZO_TUR(q(
z%$_bjDx3^V^sd$a{*7<8YR<f`zKKo?N<KazPCffu3T)wigd~Dw#B)L$;J+?YXAo1W
zmwy@@3qRdgvVU9s{xnbYtc|Q`&HqmaMOUg^-NhXW01)Ktr-uHIOH7hL+#)@E$n6_S
z5sv^dqHBqc#ZQ4IA_8gC5&&E_-V!!C-azBE&@A}Z?TVSYYui=G_Rq)8<Mi<CB8Xx-
zhL^pg7LxYv?rv|Fho29)o>g#)h)ybKb<SHvw*H2qP4=9AB{H{gP#E~rnJalCJaQA{
zgn}3HZ_5DKGl^(U$vaY8U6{S)P3XNYivk1i-=X=>=uYLSxW3{c{$8=E{FZyA4U&vA
z2%Hiwc)Y{V1lbn!ScZV6fNf#uD5wcnLy>b$Z;jdC+mEF#1Tx}svbLIuq^~&ik-eGY
z?{FSFE;^=ya647g?KZy5$3k2hGBJ?uxx^CU7DL&}Gu}EDMD-6KeTctyXT<?4^oL15
z->EY#w-y!bTGF&|PRgTq1dB;0ZYL%X;?ApF&MK)Z4HanA@J{1PvnDF&wR|-E-dnSu
zjl2tJOOFfH;>38U1T2BJS$#6T0!Nb>{}LL^U9(vG)vm6nPSP_3d`&5ZQ{k`Yhh=Sc
zv7e`r8gPEj{mCm;ZzHyrrSe5~u**Otay+iL`yw2TAsu6n0V<OClsgUZAgOGqLt@<0
zaQl-evRt4NeMq8_FW6ab$ppj>JqPVp<hd-)#~A$klz+G@cot)oFP`rosQK@kZJ7Tf
zY8;JN{<GD#lT@N^{r?Bbe??;J#EnAhPi%nvppp1rKJ%ZV;~!7|Z(#Vphz@c|))=~3
z*_tIOFeas>B>!ql9nh4-;lih-M9X-6LkC-L2L;EPKwBDd1xL-q3<zN#-r$Lm<C}|9
z%p>#zOc>-PmKOR&s@N7#%f&DUC`V*vW+3e#Z|oqS!=M}<Z66($0K!>Y-q@P~{M5KI
zCGO<0;{(jSi_<`B<loPr6(St?NL19*{>bC}!~;jg#`(X{{wX@MF?|Uue&Q+){$CZ5
z|9H<or=E%J|J%#{A706|s@6aHkG?;~mPT|XPl#brYw8K4qeINYq<f$RHIhhe3?N*Q
zIf5+ryKdR+Bo+r(gf>Z~#{>$qZneAj4Lmnozr&Ccsuf$qk>l0s{)FX9!R}EO-Z2#X
zeRzQ8EjdU9gWNHtM6AFb*klidvccaEl+2{HU>6kISjB)MPh$>_4r2yYaX><Ye`>a$
zBDb}P1E>`Nd-;NFmyegI{45WbNN-99@_{xl^mq6*?1RXZ2ab%J9_e^G8smWYiajj-
zR(@6F*|<=9CuVgrJG+yYovW9d%1F_O+!G>QnLNWd0<uxIM`eRXkutt|ct12WB(4vm
zI7*a2I~p>-mdq5n<P&{iH0Ckk4sS*f!loD^9bI@BIqr^LHsA}hCOE*1D!?7tifu-r
z{tJ!lV^PNrb2^aXSfEo<nGRl?kWIT0RLn7GT&`g5RbPpik;T6MVK|Tuztp>+Pypj-
z=$z&0)_4d(YvYr?wx785+IwbMv6CORVc&|)gMOr)>$jcbQbnkR70=&zK<>z;ncXZ=
zkuQ1%7G!gxy_lD`@d*OfFx?C?Z=EzGcL%sBszO`5mPrYb*;M-M{{1HXSgB$(G{Nap
zcc9v@i*L*97P(v{d6*W!1Q>Cvp)`pE17JcDVa(q#9~kHJCo<va=0lU!L5>9!ISV;k
z(&A)_=|<t4s9pkd%<#K3p~L8iQ3UJE-kzntwGqAy0R~u2-ZC}=2LM_1K|HT=rc@ay
zyVe@><>|G@a{NYHm03bXVNE8cPt9Ln3FqdLFU&q=dIX>Mz5{95LAA5Ult*NoR@b?{
z&h0CiF7cuoe4O0h<YV1xe9}(=Yn?QIDXThFMj)2a32iiT2*&7*4vuuEIAs_}p^z4h
z6>S6tD1qdjrvy4img4$++a2l`RXhZ-?mr%>?!f7>`1LZ46b%8Cv2nwCA7ZA(G|H3K
z06TVyO*`U|2OWVqb5L`=Le#n?+&5W`=OVGy6NIP)wYiMv0@jl7O;9}@9YqxbR@INp
z3VBpb%ST!}do|e|x(w>DcB<^AY~FB`AF*EcbNWeVnYt?$$A-sL0@bua8od$T?6bDX
z-WT56s2cmhx9#05yS6K?JzD@_qBI`kruBI3n@0OnK345;+uw`V(~N4iZ?9N1_1lnY
z?>B+ex*i{;YDV^T-MViKe~y*Qb|d$0Th?!R-&m1?;x5pQCZSv$$C}>-C=Fx=a|O}`
z*bL~ZvPq5$js?0Ga<l)`N}@6lxPAJ`&%s##jv4>K0{<U>+y99M)NkbuS<%0C`VM*s
z<$*p^kT(VqiWM6xIu+FyZ8&YZ$Yqo=lN>6EdHBaZZ@qFzi7liKa5HR^PUx0q4^Lb0
zHgAoT_^1a6p0Y=htafL7;$`LJDjkI^2i$E3W(Es0S^c$E->fruozuRy9C|RFAp#IC
z_Xfrvs9&O3Y6uVxG1p2(c&s3$I9s&ukeH31AwX8tVFOGW!0zTX27B&7mhKIH{JX~T
zHgTt|4FjIdHKFjVAxoY5@LL6Bpm44IaO1<62_h`y?MZtB^nv%I$V5X>LZQdOK65#j
zmda<GQfV7yZ06jqCl=apu5JVOn|z&i_1w*#--m{TW(GLiaVt1(bbOX8aAnI_Uv41=
zFH073Wn>z&HSKTSlnmu8AEB&`1*iLyB`o0l)|L$WK$`@Ge?{^0BLtH?UvWiFB82Tk
z3>M(0AIv9^gVjU+)d*aL^q9Ty^@YtD$a<HmX?sqK12?Qt<_q4RQ4gU^_qUo_!F+bC
z@rrt1o4L~uzyfPA&>XFtFSbrTCshg8E+F)tK~M51{{4cn8&M3eVPP!5y=8QQ9o#Jr
zW_v!10q=21s9IGnR4l04?q4?J-dc(AxMz9v(9G^`uXgm1ee}=`*U!N`CQgKcFPC(W
zj2|~WFhmrWJe5Qyr`&6z-`hisK$t~W2IvP>Y&a@G%;_M>jp=0DUWot8pb`NNGp;Ek
z-6NGrgO*l41xVdK22$U^!enGHM@PO{*mVF?=0YMw#g<_=Q^!>rXWn(4RgQy2Ar~ZZ
z3^i&lN%Udu0A?Ubx^W$doNm*BHLE$xcE-CE$2sY7-SxN3q|xCr4JF4!=q>sD@A9ET
zq3@}a>HH9PCTGY7(+U-TCMKz44iS#o=@OVY1}F2O!zt{IqfN(LRt1WqV)zVFIY`y-
z9MPe8(06EO$YzWRmGmikJ@RQ|*ZJrnqgR&0dUW3zN1RZlrt-UOQ;P!$X*VxK@VOAY
z_fntDEKO<c^CUI-&Y=`ukG{A2w0lBaFhIiIh1+!|c+~~zkSr~iatmOckMi@rmoOP=
zHE?ivpXIui+^;OoL0c~aqG;RE?S{&vQfhSSxyC}I)q4r~U4Tw3el`$I5U~eD$=erC
z4+Hn2Zrr2O{W=~UI8qE1TI39s-4T2n?u(aEPq*@Cp{p*Jo=`SVwJzUhEkE`%xMi8~
z8qZ~%*pC5WrNhRooYY@)b5=6c-j(+Vo0?-<SO`(o8t?ln-;lK~W?sDSr&F>G6>&AZ
zUP`B@`Q_+4Jikm<2|)h5$SAJcB?r0shL&dwXgEv(#q$641#5~n)uCXUjJWcDL<9w{
z)7%|1PaX1Ox?(PsACDPK*lwfF`;eo{`}lq+nZ!z)D^&6dl`wlA%LUa%#v8eM3Z2;C
zhe9SVwS-W5cKQu}bgd%52OnIjU1AsxuLp5#`*T307;a+5)rNUCEGyg!+fBZ^sC~fO
zkA8w##4jz_5v5?prP-)xe*cyF`=)Hux++xt%$uM&Gr(yYQ|ROAkvXa#xOJ4krSmL#
z(@G1DwMP?tofq46o$JgfE-k;T2F!0mh7xy<WruQ@#3-?I2~E;+m9$hc$FA7TccxcS
z3QR)a_%L;pWLSJ5aUwAy&L9VLLPRmbBjGfL)H#{{yEt>M*+%)MRiQ>^p!|m3Pe|hW
zf`ugGs-*9qe8V@4Z8ukcM!K25{uhjDWNP@MKV$SCCC~rFsLDEai}c7ob9L>Mh>~5@
zcqUkwCE|<C;KLy1hbEb#DV(-8_SfSM3o46WT&uDREf(O12ob!^4RbtWr@DEhnC|rc
zPAPTFc}&0)=jZqP^s=&hSVeavWe@M~h`pB2L5RR+B?gjc1lbUPYN_)5C^Y4@=BS17
z%biETlYyr4lhKy+Sd4|C{cTx2rS+?DfVRpIQO=->801ivF3^Xd)9v~Ew-7Th_7K7}
zjsr>(<kTGovfT+5!s3(yGBS}P6sf0FR3T7W=fkvoxq9Bcz2+~FDwfJq?gq?xsi9Oy
zR^l<o3`P$JI><C>Q}PCIA_RgZrwTHWnXZDSs6bOhb6z7P2qvQYK1#S2j@XTGa{O>?
zq=E<tjk%{HwuY_?+9xFe%BJ~}MtBv(o+((_Mw<CbDzg~b*fJe}j9G(%1*o%Tk{#Kb
z5gqqjB%XH8kRcK=DmfHA;yP-g0j0v{(CM0kg~ZTH(=++0IfYeu^~L=QlREw?EoSf}
z*WA~FgZ!yc3ftBt?qF)CV@Yg75T2YInasI9#>nn*jeAZ~MAXaldyHqc22}yzbH2fY
zJ0K}eLxF$t<<QvZ$$u4TP@LV4Z!c0w0$KOB!(Nn)+U|PUb7symfTFLnEMt@(08|nK
zFm2Q}LL!b{3$qq%up73#VQ#Ck{B?C-1=K79%vTW<%?<Jh5%eu9xBI9#_XhLbgy60w
zYcyuP?q%oR+OmN#_l9;rYrtbf?ro7D`J9IhuRY{yRvPJA%S^u_BaKbJGMt%d-M?=G
zXF0>d<@Y-DD*k59qrp<Y@LUTSj(-JnQn+@~TTJXL?paztT!~zhe$&Rqe%j}<+?t$i
z0LJ@fL&Xsi8%Mdd-Aq1+!Q)>DTZP{pv&*}CzY@y_+MW7de7r3)BjPQ}(Y}^g<YYQ}
zOE!S*x`Sdo?yXwe*5c}LMgFr&5oa|fLwMDNtmb&c<JtF5#Yi=w@#ykT&=~#f5B=8#
z+RrlNXMgd(3z`_E{}VKrh>{z$KS2`>gqZoqKOMlPTY9lvajXWW7H3_y({jV_bVH((
z84J%hGVYe=Wy{GfQ2~I6UFlf$5v3_UCl?n_cJT_NmkCl&in6Yjb}vhnkD}qOp;6ib
zX-JG<Z-E58y*TtD6O{pxqZUfGoVnRw5>+|qdOrLFLJ%CcIRIP%+P;QT{ZuP{QqZLQ
zupt^t-BBQ52SHPF4>4RbE$}o^e$9T0+e2zGF<v`Ra}7Jl37W1g7Lty3AxX!Zlk3~j
zWye5N1#=zJw)!M$(lO)>)A8~ly`{t>i#ThBRCO(gfl$@+|Do(1qdR%qE#cU<opfy5
zPIqkE`lVyrw(X>2+qP{x9c%KOGw&I!`9JectyQb))4l4$eeJ5+*WUX|VwI9w|2c7?
zsqcyc#?V5RPfgij)sHF{ZS=T%y9?ykDla;4K?H?zoeD@Fud9n42T?ZJ{E;MTClkSc
z1d&v3Ik<CR-b+_{2(kpzI+Fu_=y-^C|L8&CZuT2t=xC{yK1uhui>5+QDc=cL)<$0k
zIaqcpAlTWj+`BgzWZX&sX!y($i99Rkio}4d;$ebAi$=HSaP{_m(J4CqXY^6k0TL=)
zv;t0-qekE%j=1*EU?gX5=$#k|N^3d!);jAs^jA-Bcv2B8I%=V>WZp_$C1#<IB@QI;
zCw`TA^eOxlC(KK$rBkpoYY^uq!oxZ8j%(f%0XEIss@e69D=SLdtqp`a92+q%s3+s(
zZCSgV{a#(1l~E>6n#%Mke~9v16ofs}WzPiRVv++k=M-^JA}e6pj4cwWtgEZ<v6hpa
zlsZAlE#{0&<azg%lm!H_55Dk#Ze2<QMADXRxhMu=Q2_;S!rvuX&du_>U2Fv-chF8+
zGs!1Y0FZX0+fj}dM4r~B5@)3B53`nxLD%<CzKbq#;_6pdyw*+VRwq3HdqU%wl}q$=
zreIqCl-RAJKN-!z16+qEZ~Tj=^R{OfWd}Z&qCWl|(GdDepty8Pb|HFUKLynqRz<g&
zK1o~?>UW5r;r~}o!yM=UcKo|!u>Sv)j2^(s#O>d|XOg~4CPNU(^H@z*XB0%Fhfpeg
zz=8V5g9sXjRMZ=iMx59Ud1h3vKLC$r%;%Z_@-w%poCK-4xxOAyzq7!)V2{qQ1nmP2
zhEq}^0XgZukJazHYuih*e7VmbRx*KkLNA8&qb$l6%a90G5l($9UX8srOw#e8bvi#$
zt|pR#)^8;bS_P(Uqw=69+yE5u76o7zMTwzaEPEH~TjF{|4C-;eD(ow9v;RVJpnJel
z*#gCUmr3#CwiD_$;Rfmg*|RoT8BNkye5t$ZY_qM?kRd7sx>nAW8s)PAjkov}EIanM
zA5z5M2?y1RB>Z{oIo5{#gFywcpWb*pNcXWj(ZyazafI|g;EuUAq~1w+T2?5i8<-G`
z1R4Uui#vxr{d*T@TNd$3WFyV2tB!Z&u7TOY=@hAv>PGVSMX6R%i{8med_H<)<TG6R
z>RI1+<9|!ZDoMg$@`)TQEH{h%l^70*!4PgcJ=JV!kO$CBtZ6EY)5+3Jl>Gr0Vm9Wr
zv7-Kh(@{HkUKkC<9p3NVoL;x9_Otv=S_)@*<vTW-Kw@S+1`sS0q4(e5YFQy#5FT}*
zsy@@uePt;Zz@cU;64jy0v6$eV{%%>j<R*-A_Jk1|)r-J(*abdM%1>8{rz(wB2&AVU
zkvarkeu;Wh;+ps@CO2~oId-kPC5x1ob}x2cJcNadTZY$vcrz+6SSYneS-X&udAy9k
zGtM&a?8uu0ZA{S>3kP_Io7&z|l1>Yhy~USAO(;RRryV(GUWJa6WNkSa&lzBV37iB_
zE^W78$?+R<G3e}obou=$Jc9FP8qtKTdR!VjoicB4=y*RbWKt=YCXi9kraqekykum8
zP`9GTBlvJ!Ab9N8EH0Q~yfleTk`sT323N1Fy;Yeb%=<LQOUREnR=gnOy&K9V@V1-?
zT32mhDKUtQQu)8W&FH-GHy~bO{;!4dRX)F$_f7l}f0JGRtd{sMqU*ne-T&}C<`u8^
zukW$JZv|HLn2csnAw2aQC6Sy8Arg9Sa*9QI`9fF4q&81oR<h+@yOG(}3Pb@z+%?y+
z%U9{*x1Jd=pIx~D9W%PR`u8_qcE_NL(DPcn?w^!r(@8`_g5xaAp*ECbX#;dn1R6(U
z#DQ_3@X8|NLVO3O^n@UvKm`|+J9Rv=eSLKh%;NqoE+O2QDTM=9V*KhNl9^xPRUr%d
zrrXr3=Hi^v4DPOdWKdSD6H6Su8(<zD;iWgBQv^-#ta_dr3|CfDPV6%+PFrI($3@U?
z5kte7H(kH4%g<bSlPNBCGO43BRb29@tCV26)p~VJR%y!8&Nz3y>eQ0uWNvR`7@>lq
zm}Qd;ZxB6R2@ENCutsase{tBI!Pi~}v(}d^9Z#5JP8DWtoZ6dF;6%hN4Bp3|ddBSr
z>Fs&zYU?}ghub5@Ea<0hKGs5JGP^^n`06dG)mJX7SKX~B!kc|$=tcjz0k(Yf=XNU`
zvpPVm%AN#tf198771Nd9C3qhkUe`;6BRD187ike$LP&Yzetf08(ap8&Ydq4t{Rd3`
zpXp?Re@p!u0BrsrC}q9}WS+m@J4)tTheP>)UH5x;(XsuHk&gecwSrWv?A9dFKCHjO
z+oOYI?HP-E=1j_9q}s~|D9{Vv<mbeO2>O(phVf%S6*4|9J<P1{?Q>~>)80}6rc<2&
zz#}TB##k136h4Z8u&`@sPA|DkHm8?5w7p*Um2QKUEuyU&m@Nv*v?=QI$SUR@ES8Dk
zpzB(o0#={0t)zjpVjrQ@%)&I1g|HV&37Ib~0u*E|B+3zSP2oHxN|Zb5j$N|Q0iVzW
zm@$<QR&72Nt%anowP!q3F4HruwD8#=zaJYqO^{A58deu3s1_7r0-x-!Y$WJqW(5N|
ze(kRI>`odls&P(#a8~q8dS)SP+v6SRjV2TlDIbT-2lq{5S3g$xj7R~_7lM)&831{{
z{POR5@O~d+$I7FZ%}#*NSF86^%<DR17H}%?p~yV`iBxiRWiw$lgH8W?@RV7BHfsig
zw=r7>EAts>R>B|b!_xWUZ4osV=qSFD?i)aiZJjJxnlCXKE%wP>DPwzQ+l!MGu3dQU
zL<R9k=8&@bk@@R7p-a_tQ}4%>So3y*<Zo!U&WkA@!Vk8bEzh>Dbok9JqNh&FX}hg%
zLd~Q=@pkX6-o)7%B49BTKxBn-m1&D6nIn1rfLQ;!WPr?5vHhF*bJ1)Z5$^9f|M&rZ
zAL&37ytUxVZ`~9*c%h`_C|RNfZtnxa9{ADthx72&+Mf$pOaT;`vu07?T7N}a0ppdi
z);aUyRS*QG-<KKHK@(5H<B^@AD-;lC{mp=hCChQzN0aVJ%mcrndxtoqQeks8>xa+*
z*Q!3%r~))Gt$;c4sv@0qV7fkJkA}ojXPYe7jfhHB9rE%X>+|2|=xxyVAP=l-HKx3h
zPq*UEmuJ&4s^e2}@MX6MPMH!sN#<^x3D?99S~Pj49%*Lsk`nunJ)kguXUWy2Idu};
zN&GRv?r6D$OB{UjEZkf>;9U@?8pyls#tZu~x};yNit>v7%*HB*!;Z2?(l7%mXBw;O
zY<qW_a4Gn%2?-4UfP8N0PKl-xdNDUCpJSe`^H3eU=aO^j4&r5zTz?3>ocMZrhI@99
zO5`ZxtN8CCc~|#8UCU$9vqwgz+&wGgmxtA%^H}MHs=#)FL(_5T9vO>>jTZ8q4<dR?
zg#x-NEyDJj?nzVyZxp6Boq_AeuX1FsFk4L;V-~Qte9!zMB6K>fsF3er62t6ZlrfKB
z8lE0b)X*7dNXO?&F^Ypl^2`5@8s6>?a-W0|+Pg$M#(4Me@$c|26)g_mRF*5~o~;C|
z@AG|X=N$T$mS#6kIBRy`aXVMf)30$wMkldyl4%&0`Ea~MDla*U9vwOR9+e%s9*U}u
zb>q*IA&e2zfx6m${73Wae;8I^hv5#1z8f;<-<{llR+?MbS~&fCN#CWmjomsY%4fD-
zZ*faCKBrW@%L?LXBP@q1%Dy&FP1faOjW3awQ)Lt_w0qdO?c26pFarveQeB<H<5fR2
z<y>gNZifRW8R6026JNZzamKZQtq*2$fiAwcFxiyEND>@b3Q$MfknVXm={Aivxc!4b
zC$F5yICf&A^qJ?lwjVv9t8g7$@F-{TwDuOVia}A+8IrJi1TcO5kI=+9{gIWK@X&pU
z#?WH?r*kqRefLy(dPl6%VVJRQE#aQi&_{`tolc{vu<ZV$8_<%RGWbN!zPxKhG|%8v
z*!4nRb2vX~U+AIhv07Sn<A=6rWjc|%V!{&kT*g_W;_v6@AKblA{1K$~asqEZsJ>2=
zO96GVYW%S|1b7{f{;fH!iSP5Uia3zbKHM=J3TGZHxLcXD+caeU`&3azoy1@4&LGYC
z7Dqwo8w3U6zj95qLWQRo)s<PfMk!L&nBcEEeO2$YRbZ6LSQ{2Xv8Nc3P&?VAbZTlo
zr=*BzD_RQ2Q@N}0g^5(;TcGQ&h2pu(I6};&q~e1Wz#KlJJ32>j2}GvJiLnTb9~HG2
z#pf_Yl_8A8JMQ{h`@>MoDI_kQ3U%z;@O-+mqAyM-SI!<UdQa+jkhV#hA=@nG$~vR7
zN(a~65HAA+5TJNXkzGbsj%eu-x{h_0edPZ-{<_b`Qh=p9dA{+XQUJY=b%{hF+~gj~
zs`n~LgPIIm*z#`x3vn@a<-m&NuoJyLh{-I;B`VMwflBcENK$A(xu$`~ob$#+Cm};8
zaSDCieA3QT)7s=X47oeLScyq3*1)@oP6f=tgHh;6W?<OrGXXy)Qa^@#l<}oS+cF?f
zTeJq!25U;lNDA>st<x3<qG?TxC<t~J5=kNFL*NYQ-N-;ajf+ve4(AZve2GP;3g&K$
z{8S^sgJ+;)2Iw=pm2~-6x6OZ&pFaxYcSw#cB!ae>={$ra^L62t6E?vBb}+Fj{&a$;
zt16Y6d9}2gHmQp;)#&vI`j66I#fl_dWu9D2jRqE%VQwVQ8lDD90^Tw3{2lb>dmb<%
zuTPO<5=igD_9CI`(=w`5ahY^QFN8f~$)gPJP?b50S`*tbifdT|w-qH*<5%6KUOIlP
z^q_eV<_ijrf>~C@5wh}7X~;wFMUuqbpSX6h-1m}X&Y$)=L&=n28@6z3<gIOy$jkA*
z@YY`U@KwV8DAMa_AYVV?|LspZ7ZtQ$Q4}0WkJ;4#+Gg9h&P>>FuRu98r^VNBtZ>xI
zNl{-)o*=y&kN9EbxR@3HYxA~7pu?MdTPucjOK=n95sng05_6Ip6x825dtXG?!EMto
zNe*K|qmii~f-xCEii{?eyZ6`|s*-<8t{91u@#$c|k`<I87S)6MT>rFgXl>+)ydY2!
zg-3p`2khE?#mF)LMV=7b3{!oOc7(<rO7_Cm_IY>YN>1EHwouE)1r>J9W2q-y^D<yL
zFb0dLS>PeW=PT~F(m`iNOu^P>4@zwgqW$Xow}CBJEpV~*kg02v@tJtC0Iwy1b3&2w
zT+m_(QQhn+)ET+yhB^p4t1_<%?G>g(q<fk51FJ3Vmt88^Qp!>zTVt!!qnyi10O8V~
z$HiO^8@(tA!b{sf98DAnnR1KwQOYcBmxw$(*rC`RAL0%_LppXbtZ0&vXV(p3I!Whm
zvlb}?5?CDRNnd%M176h?t%x@Y<e6r%#8bM78H)*eRGD;qH)~pg_5D#e@;*s}41L0H
z!<mALvjO-0%eAO>WIWGA#Wa;|A2SXbw>j?o1!$lxbO8KU@~Il$m_7TS34!|U1PNj_
zxfwCJSTsk#t9^QgvAtiWxWm8qlWiHSjo3q0I&l%iV`0QaZVFAP>bX(q45hVtimFm0
z$uZ-M7NnkJtAZCsq0pN(8VT20QlYLAf&mG;<0Wz`Lgu)xBf_xazZeFR&}C$qza|{6
z(2kar*H^XV)JowAwahS!e3kAbpKQ77hKw3OAwUCr3qqLs&9aenXC%T84aYD%TP$Td
z(UUUsC!T^R<dtf%0?IJseH+>`c7Ku3!Zje?SP|%{tiqEqn{nvuk#zGllQ6E_X5!%h
z`ibeoCk#MHWzY}{Q;}K`Ed};I%iud%xJF5ea42bcG9-ZEL~uI{r#sC@$2-Q5YglHa
zJHlP7L(8sq++&!?*;cUSG%xcb>YCN5((;*q4$upxby5Gc9Bo9gQhQ9m)4nDcoBnv#
zxq0p01}L#Uw&&XI0fgGdkL4(cr|K+^nB>@lCHtZ%ue){^M#CCc6&r+MD@~4Neo#or
z^FU68vqSMsU5}3QPf{gK9ZXCE5O21%d}L;1xDkmRy1Z^#xCU}U<d?%JHdVM~j>i2F
zpvQty?(5GYDF{AgE)$+givHLX$v8!!vmY^SoLgggMm}03;k+5gw8KPhw~~bQ%6dLY
z<&|o_C;w&An23F>BrfC~H<sz*u!iN}vyz_CU;@3O>Oae@fMxtSbViQtf}UVWe%i#R
z0BzLkb|1Ew-(Aa~8Q;@%OLo{_Xtr*1cZo~2rPm8%`t~9BggJgBey!2%yIqkrU?rHs
zf7LI?#d1~p;ZAL~HKNAVcvS`Cl2j^(fJ!6$SKEy&(!)sod>M<&`Bv175aTFQx341;
zK)UWYCmyUKRZ*pB!{q`BNK?y5%}D=Q<L-w?!pTvWm1`3(!m0>BppwXEjFg<D6+N4a
zY#r^oe6;82qPG!^uCQzUbnAvvB`JP7$L?*9GXt}ss-*EOK+f<a<%my(9Wxz@vTXur
zoCb|w*${T9XS8OGtjo+n@G}^C8gJ05ff}&XV<z(0*ltX<`u|=-sON@NAHC?Wj+~9a
zN_Ma{)(~HvXn?V(vUz}46wz_zdUds`yH?xISX@=9s_Ayz89;@xe(&pe=N(Ew=1uOk
z@e3i+Mm57QE#r)W=29GVxoHr@V;)7XpbyHUO;%k&rN~A4n(HM+<RGiC?ovKPk3T%#
zkXr0jeG%m4@}6EMGG4|xkU}myQAdxZrEE`_?w4^3{n5ott8v4WV0pY#uG+F1_E_>o
zK3U_F^2%B?_=89;$T4Xl-CL2unLiFxJU31()mmjgB5Q70nBNiE*+9Uu2G4F?8xAi&
zST~c?#$@JkUclNsCLF(mVixgROMhHX7bszJz>*kECPp=a%SSYD${10f0)xXSX0uS4
z`Rs?^eZTK2D`M@66CjS;BS!JMB`IgcYq~o3N~p+2Sl@Vdq^w14rG>hdiew>ziwGe(
z#v5VeK)dP(<P@*`o=o_X@CkAhMMyvuKruxLADRlS7^nzlz+cpYhPyEFF3lBHIWj)e
zD*@4(Nj$-H*V&r#iVG6{)`N~2q3<6%!M=y3V#07^zMlCapP=7ZPxsuH=;6D|M|OfD
zj^j|rs=W&b(Rs`~!A`9!iuacPbXTBfF17(Gbbr_q?@Jb{FWJEgz&gnVWx)CcqS>M=
z``rNaKC}9%-hPL)eMy4{O>HGfY8&%_()_7Ky-5?tkvMN!^zz*K95XRWOBMm;XNz_Q
ziwc`{@XQA(B_+()iW$jvkc!PRm=1@9IYd3&YrU_^uP{O{1>x<dI1)C?*W39krd6Sg
zW{e0tYmRseny;5p0xs-8Nl@yp?{qe-lTl`5HxBAq#4|}y`)#+)9$=D38K7C#_!wU*
z4V}j>vI~q%Lv&x>-*G*$VO=~43<hHlw5Zsunx^|e<Htuc<Z%o=*0Amy^V5j3z8oR^
z%aLQ((>KnR7i^opzDbJh@UH<`mIgSz*HV+02sz@aY8o-v(+YTY^a>4xw{%O8GO4QV
z-L(QpE0;Xa++z`4jMge<w)-4I(|O?(Y?{kaFJ*7!d!6opt#MJk&y}m*j>#dSS$DTR
zVk(d{2D86)hyk_WAID3=A^PERw+hNgr5}>h<hM*zG4iPh%-e^DQK(4#n%<I7*^mc#
zfB`cU>7Ny}21PlQjht=stgPW(T=#*%#A0`K-i;oc7AcDnaBrd3+~6+8fvFvmj-yN^
z>c3I&ptw-d7Qw9;_T*J&{R|Eo)_w%ZqMrtC4gmv5H&zo&fekUQHxm;X!j>i=Dg~Y0
z==PomUJo(O4&N9b=MJffX;d{>ZW<yMCrh_wpt8e$gu^x&)?A>`PBt+A=HbKqF$F<-
zF;+q$*GRdU)aiPyNx$=_34+n5v#2&#H6)x8zghmC(IUG}OSgu0&R_ygaRhG2)|5-0
z1p==<)_%eR1UxTCq082v&6kmd8I`av_Bi$Tk62C@`}}^@D9QK{cDEc^=WM4HI)+MR
zQcC-{><1q_V@4vG4^rAx^j?%K9cuqyD=PGO3v+sSnLQo3*H%toW1@N*n)4Puu6)E2
zb^C^IBJDC@5Wlc~{@N^!jo>y>=u3_tgtSaZA2{eAduQ}T#|tvS9u6)j5eB~ay(0Xg
zt1Sv-FjIU3=zZ5dIt;0iOmqQp%sr%#It}NQ$MO5M7u6!zv((K=h8cZ~X;i5XQMZ$d
zu5HfEfShUBZN<*rKC|Yk>%WvdBCpnT1oqh^V!v!Op{Miv4b+6{X|qOWU>kS&`odS-
zmIsjOP~!BR+*UD?hW%tpgvzL1CvV7%Z*<VWrt%OC|JxNl)ANVu^C`)-(3U&gMGlKm
z^KyNAfS=cDcW3QTBS}(EH2$VESMcSj;e|vn^Vx&O(aFP~s?mlxN)X5v9{}&KU}mhp
z*a6n89cOyWVZBU7<gid9>j}*%i~Nh$Q^a>F%P`CG?ea}t1vUqgdw7^oEJ2w|2cH}-
zY17TeFOe?q{1W`sef`6~sbRe;z$W~qch#o?5u8xfiq!x!HJi_E^1WW+Ke0i~oPT-k
zs!)NJ#Gy)OF><?BDnZk*gg>bTbf=$a&s;BYL&{+PrAN{?ojjy+Bo8eQtI2HeE5!3M
zMpEi2Ju|i@k-WaId8^gKZQ>RkAqo#9R}mY774b|jEkj-|r_yJFU?U$Jt~~0RVU7~U
z56uv5MRh9%l4y_xB|qE!A$MTB01sx;10PU`=Tj%5%(oQ8N>{+iSm4ugj;J41uj1le
zF<t;)*4lO!NrhwRe%)I~dNhdqNsLrZka{hgzmWdA9q<{#jk+)1ZK)Z|%#_}6)|cCs
zjmAL|#c^SUKm*z)zILoPBla2ORu7bN{hA)HCm_dO5plU(MXK#=<%8twMzk%|_vdbT
za2)j=&NAkGV8Zj4IwnF6{!`E`(+2j?a0{#V5ZfMeb7Os(PH)!@n~`U>*CH0-pw!K@
z>ns)_!0QK^iY2dSgVpeJX_vYE2bLG<0JE;3YFe1csZvud)FI9117S4lh?}yGysnZn
zX6t}_X5;b46XwCQ6_R5QLdQ=|BqA9yIA5C@*RU~CSP<^v^GTxBusM58<ikbGtXn1>
zXL^sS+23ZfDlcPzt2$4DnQ2C`D}_(>G3gH@D!R1HHGjfj>CZ_7&*<E7#EnI~yvF^P
z))%L4Pg&hU=^}yT(64{vZ^!>fF4OS0si}$M|AWE3qyaJFU!gy~-}<tDR;B;<Wxp?a
zCXSB(p4Ny`w6XdQO!%zUb12l?i(fs}52!xxk=sBzS{wX{ZG^VFa;%;~iY;Y}A^iD9
zwtSjiH+PzFedX4Q=}`jq(;yhnq`21i5JPj)((VJc$SDJ-m`U^&#Q)UOAP#lbnp{f-
zXKHF%pu<Ce{|zbvhS)Z?!~&{W@qIu$VEas3^3Y#zIab}@9}ImAl2)74xKTKnRBfo?
z5L|j@+W2f31<uBC1{5+H_C}|nW~!+tC|EUbaTZ-kz77Z2=Xk|jAJ4JY)-w4P&!FFF
zG3<%CQ!?8DNhS;1-gIYjNjj~Egs0Y?A3C3v^B~c@NP#AGE}m{OK5$oNq~TCSljAJm
z*oGZfEfqVlT!&a~i*)pS*ny_A8h(THAn>-s7B+BN8dJ7qF~zJ*x3~VsvzftaGPyI`
zURIw9V}=A0nN(&ESvEx3Z%%`vRZHmGDr^#X3pAww#v%Q>$b!N7^LBG)TCHpz9oO?;
zT?m&FoZb0qF3Y4^I8j+fiYU((c<|(=(l=_M`wDs#qNlR;9RWoV#srfm3wqD`@(b4S
zny^*g8~x-LP^rxxmJ`C&Rd}7ywkNb<-CU$tcza1`8NJ?rDMEhs^~C5hTj&}MZSP6+
z#*q(qNADwxx)`+lc#GgL^V}Gmjg|O|dH_xXZJ_Of(>MaNmVm8Swi}=yB;x#sU{Sgb
zr44l@Nb&v{YIQz@L6xt|rM(U`B}E7I=XRpkuSZC$`4gt?)@KHL0YJ<ap=pDk=%zG+
z8K&{C&;Lzs5L0K_$n>oT7yLf|*_rTPJJZ72nBKzH)b8Io6aFuf@WQ!<h6R#NV{jr;
z{zj;gJ&^zHiSoL;x3a$L1n-;tBmcjZ;D0{Yzb}<TwQmNH9qIE*&q2md*jq(+4Or(4
z$aV(}7>%a})w-V%DpFKq!+4IkjMFymtBaIsv~IspBiNg=m?3$j{W#mh)g}2|6;#un
z8iQukv@AFPk#Nfe@d?p8xFWI7Rp`YDr>6+bXI8SGXt^x595R45Ak0CYF)w_K2j>ZC
zL?4_sUwanIkw6K$4I-hH?q*_7*Pvzj0{ETYF*O0*K95*!Vdo@~N>W|iZ%e`{&(9%r
zz%!1ij}%6xSP53Q2aO1Mm&le?$jJXFBFV20(#WFM|9*bgoSSwzafCd7P}XA9)^QT-
zRfcHoxk!^?fuXBgo8AKiAWwY`&2^uZpjS9A^S~<t=$>`$cTGHG3W|{)mi;@I@GwWP
zpDz8ASs=b5Xlg}{VY9*w4fs8SSE`h?8h#tv-P^$%-5V!6>PNr*^ZKDaD<5GD&>|D`
z#3*0JF<>Y6ZiG^p)wRQG;ctxQ^$saslcoeDAFo`BV*LFGMc9?GpW&WR9$NU8f>fQQ
z7MIr;DiN>qFYFAKhyZPXR8oYQ>yAja1?%z>W(@HCrH01V0INYJf6~b3$J>CeLc#6n
zD{Tjsu3$wAG?z~B->vahLzZZ5mR_@1W8>oVs6X&M6^?Prgd7(rTSA1ENV@kcwl!e9
z^)E_<;>$ua4G}>SPXm4V1s{C$agL)^sKUG#6epX|7(NM8&nV}%IDvYS$zdZ(7qIAI
zW)taJ7q8$v&ziR)%G5<>J=1;6f6bq*AcGU6IH4IJgc$kZry-7eAB@#^7Ex<_ZC?yr
zOew;o>qQmMRLWwRx%y+3-<$l=Ry8xOq-0skoT^O}t$C`pRe`7ddynn8dD$*#v;awU
zR5%8`T!!GDbaLrwdA0p?W0Y~Yy7)b~7wPb9(g3p)uv;zDiLg*}YoM0i_HH4vozR}l
zsUU6qb!<?Oc1Tf-fJq#sf#_K0a60HmY`x#%82NazQ2K3V+#(kF8ej_2WDQ814UNds
zXO@NBKzKj#8PQQKM<^L$`d|1|%!3R8AtoD3Cc(bbgtJrhOqfUbbgHI=*h!RwbVI49
z4bHUf2!9;iyYM2c$6r&WYTr5BQ-}L<byL~W?dO`i8VAnXo$nn8t4usszy`zD{93fm
zZG_Mlx7NolVsN4acxtwpa%a4R_tfl%`nt-4TVF`!pHuot#JQp!6(XI_n;tj}rJE+k
z?77_x3w;2NUfGd)yls!?3tUI$BF(#{(ENA?5uI8ojq|Uqt948bNEZ(Ct83KY>!~yu
zmn!uP8NS_)vE7mg3BS7)`<d72b+nAVN^x@67zbBFG%Y-H^4G0R)STP3R;NrpH*sH8
zE<><>`f)pBF6sOoYkC_heeRy}yJ5vb5Epo5wZF#ZF%@>(`?BHgkS`>35m&a$nez;z
zZ1diCVG%rd?n2%Tf%Yb}y<*grL%3Ipjy4RdVl%_N4ECM5(qfU_)t}_)ofe4E!1gm3
z#D(p!YUVf&HdwgK$3`)4&XM<wIJ@Ky*9l#kZVol3>WoEJeakaafi?4kFVZ9$e^_D~
z1R9QsH*a>R7&^$~EDjm^-<lrH_5o%&C_q5CB0xZd|A>7yCN_G;hGzdB^*VX10PCFb
z+aEMYCGqm%WLnv2S(~mGG{XuM)d~lRm#bw}X;k!LLKxGY_|W3BI-cEL?YKbD@wv1=
zGE7wVPza*LyW4^B{ywSaWc@g$fVEZgkNSFSCJdGc+3&8&KsQUFiuv=W<U%C*o#P3d
zhh~6!^bVN^R>V07)zNtnknMF4fea+9KHqcfFojteipgu#2ZTCCf26<Ph10T)%k&si
zs2|sC;6S1t2M8op6`J}Uh=KieaIaiLWa^DlWUw>HZ+0$N3Dp8p;QOpQ5#M^FUjx}c
z5AW|!$Qkb|$1wGy{yfZfJb?t%Jc0;QgONcrw&y+44dl2gQ1bp;V|@PLp4dZh$BRe4
zdg+(xl-tCj8Achn3+dtUD_{jN0^CgC&=8rdV9}zJ3hwBE9a*$vsg7{K->eps;CYn-
zoz-A_iB1*!3Bwkop)~4QikSMCLw?5V-mvvRW4I3>x&gtY?e+rmLueZ%wcR*{&^LKm
z$;J6JTkm7Pf3oQ9bMoNfk3jpM=_#MqR&Ji03qBKayw9*Vp^ik(TUTV-r$+=yQ~4#w
zUFfOzB+Tu*%&<U<(1fR}m-f*YhO5I!FWcsyre=RiP@8mb)x+V<bYT?tJO*SLx<Q#h
zk|F%L#B^N^S`4;O9%1%4r#q}cp&&?Z`iN3k^cg`k|A6>_gNz<YIdXLD^TO|GK`^)O
zxW(RrhhDPfS@$RSfcTARpoEb5`b$`VSb^8DlSr$d9SY4D^(a*G_IhSZt-|+<+7g+)
zP*e4RmknjI_Uk!(A)rm{7OW%tX}b1-f|v#|gu|7p<$mrKlM;~EfK3AZRam44vjxc|
zF71E{<bZ6vafC=Opd@y?Ee}5A21;Tu{G<XG>A|c)CYYCP6%E5g32TD-D;|vLPm0ee
zlMKWFd^rsaWE1J!@o4C`0Rb;+&&CO{${kj<ig-js1%?|XF8MXmzR%SM@_A?sSgKLa
zzKJ1vEUZ8byCIk(y743P7o*{j7WDr`+u{B8*n)PXV}Rj6urbt=&*-N^fxR}0>g+m!
z0JKYz-v28%c~58Pt7L~#)?6RqRb*pPi&Y^h7SUi9XgAN<Bo56;g3g&=bROdT9o0kc
zuOxv``RGYeUUQzCdt<DJOV7PFQPRr5{p?77kwNZzkJ8Q|xA@D=wO}%i>j5ZQT4aFl
zuC*!(h;KVAKZEUN!-(1xzr98G@C~SJ4Rlb<Fv&U`_YaCPB{`|Nwa5TIs`pU1$=<5A
zR{gK$5Ee94+btcrsjU`FyM<)`L8jktzO91e3AOyMP^;mQh<@dlOi<cQ&XsGBY{&z0
z@<;O0{PfQxDTyM14=C7>G84Vw$HN{^!ycNVXk#h$_t15wOx?c~xM+|E2%cV#E{^s#
zI#YEv@Hk9$KiE5Yzk(h}naSzj+XF`H^-AWe<0vDq`uow*4W?GnT%t3&_A`voev*sz
zb4@~uoSF$q&#Bi!L8~|(8KKasZ)?%kg`eaCx8ENEFKM#MIp^;G2LFhIHzVW+!r#^f
zVegR}-IHkHGGfs<vhn`9y7@&;()+b1yl~bRGpC6)k=@19?hRQy0Ng$Ynq0+tst`DH
zicl2Sgar<1F$}2L;-YK*IA_^WzD{-PiUA-=`+n|ytfD=;4TRdvO%dU0n<TDM@fi0y
zYG4azkY_TPdBw(pCyTfKXw~I#3-2d4Z}8xTd*<QX1*cn3$CH(l;qDFF)dLz8aO;BN
zU@lB39)4n+$g~>?q5{S6h-3YY!k8+m_V`!a1EQEN%o0Ijb<Kmt&4VeUMXh^ER?Z0{
z%*x!#?w7QiPT3i(egW=%<9x!M;cVX}sy{iva=+-JW;%zi##oPvit$JapF97%bvomw
zOZDVi{NOHawH_`ZNyjoJr;O%r10z{~hg3-M2+{IWsR+^-4<rvu4Ay7!8r#OGroQMX
zZp<<$Wn48FXpI#zZsgaAi&s!Mcz+(~NB{g-_S4EQq7914GuT=Czi2~44Mnq{?(U#Z
zCb51ng_6O=3z!-w^06S{VJH5xYd8T|g+w|8bA+ri#1y(kTEcn-fAJ4G$^4UDk6VdP
zK$no-DY91VD}5JQJEuT;!-6n+M~O=Vp8NB%sF?efI!Ms|NIwJQM|r?A8nz5m%V*a~
zTIp8B26K~7-N6X#w%3rjJjv`CC&L+`v7}k*?HTvfZeQg~0I9Hlbx%Y4qgOK`tTs%7
z@K@1-b^*9$vSqda^vGg8W4iI*<3X^Ox%hqX7}3O!?s}Q~b5>At3C}@5%TIC5zc*oL
zVeI}U%Vy?ap;@=~H`Vq#`lmRE7TX*^wuI;c3Q*>oDlY4(cDM#yh23W{))atyBW3qe
z3Edg(4M0IHe%Sj=>Iq_XO80?_UqPe-tNzHvjIRaH4U=Q16pZ8zd*%h^&eKIL?TAX;
zAB3$;ljmN6NN^Z|)OYq(f7A7ILo;J;E7-veaL_2FG8{W2>VM~YUZLokm>{JctE};6
z(H|!o@3kia0l62;50m8r<~_ivg@;O=p_Qr!0tlsX#^o?V{j#4eYNjA;SUcO3AHWYD
zdB2#*A@?8mR87Y4l_u-3LcGY39b9+B(*n;OvK~Fv*1v;yEC^SvQ*MqK>(~Z26;Qtl
z*aXu2BfZsmJj->ogyiFqMl^>j7po+;H3UI3)PTKQ(&nEipLXK+=&K(>BH3R)@q>->
z3k3t~Q$OO($NuWkqR52D;Oi^5cUf;;(ANtTR)Nq>@6ANLAcdjA?@6`YmSYkn>rc%D
zXKxQ^+vtM(?%MhRoFem23h*j$jQrBR-x>1gKl(FA`<OvD>{p7Fjl|%%5p7Htj0epk
zM6UM0yj2G`g$%EFS{4nZ7F!CU<Q<|xeLPg6n?>YGRn7Z+qZgRM@FV5MpX=d95qR!&
zQ3k1rS5!p1D2rJhJxVbKuO0Zi`J=;EG3L@8$bhz+n39~9YTik5>?+$x@2}}d?6;4s
z6S?b(fhFs^IP{19v?8~+ck4`i-g#9(>=j7@*B2eb|EdLI^nJOUYQ3m*L<6($JF=kR
zRudMB^T%<u#O0_SS_OHh4w@;fA%?}4fXq%>Qim;)6sZhe2rXq3UDVJw8005stke0U
zbKd{;X8pde=Yv(BGQjTaJ~p)dl=~o25QG!$jkS*Uk!?v{M`vbKnEf}>O6U8Rzub^3
zmn59`cRn={g5QmfwYc~Ta1c0zQnoq^u!?T^-!fVEZf>r5X>DNkx*c7uJgo=d0<=5>
z-nf;tregmvjXzE~oT{e1!Ao(Fy~G$q&jvYZ78z5GRgJCi`@mMlTThCw%|&eZzEC0=
zE@~!zjw$QXpb#(QT$<$YGzM#3twQO=0oCYO3;wDH=Qw&S_90}CQQUzFTXsuhkX6!G
zxs`iOMe7m%z#oJv4_k8&DhN}56Px;!HE>VIoIT+E))m~+uLgl-ft&Ao{5?T6vW!o6
z*xh|M!=iMWp})HTCJ+RSp01VyDebR{=@P^1KPt-;Q}`s!Ps+-VOc2vbP*t<c6Zw*$
zguYs4HBja2X<iN24Qg!L+lZxbD+_|Es0|FY!V=?68kzKaD>jQH#IQB#F6eu!ai!Mq
z=RZ8a+q*{RvKpj1@A<3N8{92ma&^WgbtFL-9!qD|NW$il&(O?sKR726#SN#3-HvRz
zYmR^qpK5~g?16nB3rc_QiNq84L#Y53#)Wga_+J(3{Tv(mRc~uAaF$Wo!ksJI>?phu
z0iSUjb}55hJq^1dM|5ZGws96~w9vYf%S3c-O3(O*Gw%~19iLZPTEq1Xwr~z$@CLi#
zO9KFOd{YFcnJ%xC_NxXq`ZFxDqM^Ny2Q{u}(_bu|RUeVc&t84yl|3i*ZHS9zzlq9!
zow>T1Tm9wji)(x?rWea(oeb+F7}o{e&|7IAT^vxY0n+|U4!aMv^0VPcJ(4b`ZWtdd
z18w=Z3&;*ZsC$H$Q2h@##6^6MTyesai4o#Cq-?RUT)1J<ec;b3d~|2_&CO*u{isIn
zQcE|v$!y!0idplaV>+atXe#cQ16<Q!r6iR2rCJgje^U8mz)l1~R$n`i&Ps{&0KfFJ
z*805bK#!`Me1Cvo88r{iJ#RK^o^fv}-@S=<_-*go>?AuTu}3`V@Tc4`^Hpz-UmeMh
z<`m<1)sI_wS6LZP=Oh>`Tfe)sj+rmm5Y9`hV)7pNCsgv=)uqJBHAAa^z;Q~`DAczE
zw9yvPX}n?>F2EUEqAXFVFqR^ZML`Z-W*2;$boml1U=Nzn2Jriu3pRri**DRtoPxT-
zInl17V?M|Dad}eOi?RsTRhvh8n<GfA#+W`;*Mwf>s{qDa9a2`r!=!)A8<*<Zj~C8z
zl;(w+KUln(d+RwHzap=iw0&0!@kWg{I{R_67r{H0F_Fk70t(9;pDReZ#t-e%W^BN8
zev0w|N|4O(m;X!`V#|`&m>OUlXvCO($X8I8-FB#d^7He)>Tbp+l*30+iroyyXBDBl
z-;6&P<=KXg*n~kP-}GzFR8CvmI*7a@KLdr6FJ%s27NAP#K0KbLKV-5nY>gB!@=n3`
z>;4{CGb5Na9<aTc(dt%D-KR5W2&NhbnLboPL+G%>ns3~H3>T{2H2|xZRzyJUkLo(}
z!u32D3d7UYM>zQ;)LjJzDareBlm91}L?oMJC?dJa-OqtdaXUP*V6u>p_U)>|00XG!
zwdAgj$>ZZ(>&f!&^TKdQSv+*2f3J(Wm1kg%xarYdaf3X85~v94u{GQxNjreC%}w^M
zp>P${C<%D|>tl6yc2DJHJI8u^Pg)-y2!={qQP94?M@&fjW2E(uDjAwyb}ms6Z!ufr
zt_M__nLr?T+DU?0Ys1`+X(F=5yh1>@-&8#W_jiOg{LT<ms}lZ)L4-A<W923kr9=)d
zEUail;K##2Z1YkW(3$YrX#L-qmH@1SOJ(l1^)(A(N61vjWJ^JiqSsuhH5xB4U!xga
zV%pYtoG?|<_{z5JinZBn)^dB!wZFeeV$0+$6+13;$R<TxBK5<`u?EHcKzJx$3$jhG
zf<sxSnR|?nwTXlvE(T8{{0NqBe%LTEc^FHe`T&#@dM}D}CB<!voX?l8uxxYE440OW
zHois)-`H2puS|38DY8xp=pk1@$VWj<$5dD-6gEnSB+ZjU@xVci8VsOaM!Jjyl87pS
z;bY#N3Mk8qPjyD?<1j>J2;?tCqCcyVWml%EZ{`({uP%UDEoD_nn+)fqX5T`<Dzvwo
zD6kR)9(x^G_or=C1%0H451S6s3~{O4yuw-{!;FtFecPIHYcEt(z9fRP(9M)F(3De0
zZ%P;lPY+D-&W<w7vjbZd=$UDxkFIY0(@;kwM1eyKxezpUyDCc<WCmljebqpk8@~RY
zQh6j7^qRuNZ3hUzcPWCDyGv6m4?kdD3kU}Crfs&|QT1nx*Pkx%wZE?Nb!X~q@3aR~
z<B4|QLXu(e9z{orMOFS3k5N$H@?2C%plC-#-3K9rn7wBmh@V=1`H_-6Fq#qQ=Kpl-
z`KLn>1~@yoP-3rM1m>l#kg|XeTg|UQ0pzN@cB(^-WPrj!cZZKt9lwL16L#`cHM5Po
zbw*y3(kDP>k>|&61x|mRyh{9(?oq4cEl|xuqpEaeu1=MQ`7k|@@87#+%JVX2P+15O
zz&QH*kEjHDMJE$_#)-bvOnVW|JK*8^pfN>BeYU#*7z?_5xps5it&936pcv%0o1-H^
z9X{QBpq+LhlrcZ=IZ?!Y%HKb@phc(pi=b`d?A=wv`1xfpf~F@qez#6BleD#C8*2z&
zWA{qVvR&d7I-<w<zCMXhyujOy7>fHcP#yNmNX6dO7SabhJ~Y*X92eLx(VrrmgtI+~
zpe+cN9{c8U3JsmOe~d6<iVLAPvO{CqerWg-`yy@*T<8Z%xD|Fy)8@qZE62^A?iS5=
z6hyA#mYTJ34h5Po307(`H5qgPW;PK!pRHlKX=kb?Fc}U>tNCCTaL_MBJ$LF>1E>*Q
zah%WaCJ|^9O;B2I*w}Co<kL&0MEo~%K6vjmel1&NPnGbCm-RQO>dUS8)G~P#RhO+y
z*;d<aX=`hG#kR|4HDk_0pNo9fnk7q?!-)PKtaOxQK}d$a?jvP?rZ2d?(Hv`VUxXI{
zHjQRD#F|#Rg1l33*FcMH{_+at1=9d-<77ycfD}MU#3QMTVnuZ%wg!JvJ@X-y9Z*z$
zh$JD9Zgi`4y(>K0Cva=lN6;4Ji5f0K+iAth<LTr+cd0bZ<4J8EuMCb+($2*t?jf>=
zP4pEWzqs>scdH^EJx8c&F|<v@H2=D{<fRva>tvYTaMHg2pHiEoztia(aAf*0zB&J)
zZwtXc8&eD%ZP;0j?0;Jr|9=V48~^7}nxteayFGEVU;z*BL5*C?cyQdhSTO?&^r9De
zXd8Lqit2cs@f70hE5`jSY=9I)cc&Qy=+T^X60LR4xJNd?)LO|0R47jci3M4nDI}Bn
z=b1gteUc$Vn%}r{$#P!~O{y{46@Z$6P=ZnQ&LthIg-Vtp>2Wt0;93KXLr_|5`BN!p
zLBV1Gg_>0^4~a@epPIz;(x1huGRdzIK)91YtB+A7C<z)=OlibiY%s<N-X?2q>kBP;
zKzmI4J&FRHC2gKwMLLQMg~$liz&>#I1t#fc4T8IBcDmVxknozFoenn0kZNAMwuMpF
zu+4u&U(-~!`cHs<t@<+x?o9fdVkg*nX70t{^h6}8Fpd(z<SeMj40c93u*FE<L6Bco
z5bGM_JFaPOn$PWDJYE4GexKL9DLdR=ARH>CesMFwsodIwxV(PNeZ+<j^fHZc?Dx!N
zA{45IViTxL(rX2Ooq5S=|1U`=H>!S<o;WW%-|>O5OB1468@wx@G*&C0K0wv&Ve|1?
z@m<q?odR69Yvy}kZ$IpN?Ii_s(dSKn2qPS1;go1!1R9ND9HXMtkr|t?r$|ch^W&Dt
zaL0D|7KLRJZdg}nJ?8F1=vSY~MCS}d2O@Y9$wX2lmFYK8ZEfexK__aMl7RP89rh#X
z?kFpJyEQz+-c^WK3|X>%S*g$a9BU6~y5``VKeZ8$RO6g2+9Z9h3^SNx|Mr9)E{sEI
zO{*!x{>_28D=W~YfW1s98c}TV{(Om4k)5yi!qV0Pf1bchAhMJ{+i=iRQrlq{?l#^1
z-kGcIadcE=P&(0a6_g-LEK5m{=Z$H0Dn#;;;+_>jviVnyvQradQu;7!N@s=7?yCDw
z6q`;fijGCG^{MiT&C<44*3F-dV`_OTpc7``$0g6y(MBENsHYoQT7!1yVzT4&&^_fB
z$$wyKciRc~X&xQWC^E&LgK2jWD$(mMmAsMsJ*D2y=y>FO0$FvDfJzKGt-nH}HEi)8
ze#W@g<}ghYO6?~R3#eDba@|TyU|l8mmab@ZlpoF4ePGX97qTlVgsKHM?Wv4sGgXH+
zqC2mtYRdmnCXU`)gE#HpAaA;AG;63uH2vt5%iCrge6g@RXN&{&9+w{fGAzq)!FZxh
z2|s`AI8?3eR??PC(iHR9Qo2ZBW7TbXT^FZWaE|Wp(g9JZ_RA1Hb>CMtXqG@wTeic$
z@}InF@p@*>-Uwmg?q{QY8p^(OHFFx(1$vYzy2H3mzoK**B}ak5E{+Q;=K&9)xVO(5
zRN{HQGQGkTL4?n0>^*hPcs!{RKs8CaGPTlXzb&<nQp8_hR~{Dj?{bZ3GTPT{mD#|%
z=3WfDe7b0UJoeX<6?Pm91b#xtj}4T0KW_N!K^Xa;sP=zBPH)Yg6Vx~43_^bU;r@|o
zmz6iRaMZJPv-t01`#%6qql%o}K08w9clcg>KSi*m8D<0lyN!Z|sUb*RVYnhnPRDm@
zFs<=yZYi1g?AI3d*ed5}UgrX)(!oT=)7Fg<^PN6e-qvN5`-=Lrqr>e(2?J)1Pp~H`
z@#?5*D3oHsS7K67ZZob;8xxouC^orM?C8&Q35^)!&>9kz(WV5pzczI6E2OEW>i#V0
zyj)<}nK8i0Z6P+TA*xy@JW`y_1>EWt;{Kl12UGr*d2{PJ1!GO|H-#5NeuVl6L@KNP
zUCrbWDOg?WsA%5ug`g3xBZj@YN8FpZq7^D;QEk^%bE$T@4T;UQ&dXjIvf0_$LpW?s
zIxI^^2Fzq~2#!Oz?KX^_du|CXw%IDjQwoHW<?Kae#PKm>n$X>;276DYsYDywlxdl4
z0rf{&^=Y0W_10E*;fZ+4GZUSbGW8*i?CVp6+QNK)|9JectgvcSRguEtPZaO_nNH_W
zYGC%apxi;9qX?gOUalZV`OVj~sWHDWTAtF5=8^-)hoHM)$xpZ2zT7D)&dW?8+6p!=
z`RP@m?UAz#%wNEopZg3k%MK|<|2qrG&5p}pww!8F73U7B%aiPT3=N(eu|M}Y!RUv8
zHiE~wukv~M_SjM~gItEb0Bbew#;q!j3j1cotw7U5ZDb03>~t$ooc3X}&=AnDMe@cC
zc1EvLSOgri^W>hkAks9E>>ls_JjpL+;O%Zm5LAAzeDdbWJ@T4%RwH4-cwoIkWC=X5
zDSysm+2@{pMru>uu18=6qMweuys+6u>e<iAF~0n!!j9mu$w7d3xMJSDmpSCNJvZ6I
z>Ka`ji`YY6+I*sbhLJf@PS!cLeUeC!E`1i>dETME9$R^gP&XtoJ13Gk+%%<Nv;d2P
z8g2YUu6=A+z}!7I%q*KR<_nP`h9gc5Pq3oD^(mn~_*+2_kv3U_Mh#T8!p3U%ia#B6
zL?m4(BMxzR*@&C&0bF&0F$EONF8H|Z4GBsL5_un&D%6ot9IyQ$GWcbm3EnT*-Yf^+
zDUD=wi>ZX?Oy8qXI_>~t(1~oWgoG6f@q~D5sg{F~b3eppK=3`b+nF}(2&~^#P-}aO
z9%(K0YZ_r#P^yjuo(>{*6$O~nI5^L6vV#z?XQ?MHZPrlVXo)Ftvw>@ao7b}9jvCU0
zEoYnn*uFT@dyPdrjWCKBr$CDUf$geN<4}nSyh1p<&Sa+&uf59r^55dZM&|v=Fc<3E
z(rP|LM1>ecwZv+BgCNM2F|+o*{r41!kb8v+9P!`Xn^z2--3)wiJ#1}h27z2wi%T@_
z>{B-Z;XyC>k>W{SkGq^`wYP2yrao8jEpw@={eOB~JyAtdY!R-zw;JsIf_Q&5MlZyG
z&>XzwjrfSY{l}z~|1@0w3u3+{75{bM{v*T~0Bo85Q%dwNaQU|Ze*aq3&Jzv}_8Yh2
zVE>&w;y)HOakkg{*Ui7jt|C>NZ>#0M<Pl6#MPuUnxpP?yg`&a(YQ)I#pzbB!b?m0S
zwo%Jwe`FLgzPwq!d3(pqGeoBBEH`K8>@>6aYpfZ+uuw#)ng?>Y?e4FtCtJpMd{zFC
z;Z%w7L%3{|+aM2=p|rnZ@oS6-BI@#jFtFKo2e^9cP@?MfJ^Kn{%duis*}j#%f$q?<
z%(}<X%gOLJ8pbt7kfDKrw1<JDA4EZNNRB((d;~I3BsT-}2%s2lc#nR6(OnS|0$gc9
zZfUW(S)5`J!GZ`6%6d%a!&vmVgXqvT{LRmalB8}jM+NmgL1Yy(8B8*_{=U6^Y+<+t
zv%=fNS-)|Y<`51)9@2|Gbs2O(lQ2vy;qezb;zO->SI904k-4GN)?AZ^s0a7fU+OKB
z+`+%nMg>Rp422hxgXZaXWFl@Z9{(7YYjq0x(OSqNs#UM;hj9KaCaQ^wMVvN+c3P6n
zj{_1W&=^7ly-`3OUo_<Yg2Ip6!WqM{?qL;!A?^I+)ZnVv7>|11YM{l6(*LwzuTK=<
zgHF*v@#Ctom5Hp_x0l6^YtOCElcjxD@W*?zLz!YCf~>M(ok>nP!xEE{1^XQ5^FI@Y
zRyyDwxW?>1aZ%QAzG#nt-UPC)L2f`)y~c%Q`Kd4hsDEEqec?kcYJ6Ch8gZcsB|^1b
z4We8>C1ca1;jd;HaCf;w0<_>{asL4q@Bw)#1zn+5P&3o4TdwB&g|aE?)3V4UKvD=o
ze^#1|arNQK=3FB4bUjFV<t!SzimUlMdM`iA(X`ebH08{JdpNvY6%WIP=0h!@lpF0i
zuiP;XFB$XJUcuuombIidIppL4f7|W0ccEc0JWCaESIY%iq4o&3N0wPxR%b<Czfndy
zhO;m2o-qM47uuy3Qv1Q?<euBd+wll>xRPP-pz+v*%gZ&Lty4K)Cl#4#6SiY9XCI+&
zKylP~r!^{2+su1gc8u{VYt*{KzG2_#khcLpI*CS)r$ATi@Mny?Tk-ubnbWh=+_CFD
zK%zN>GL-vj8<jLnQWTN+jjCHbvd>B)2F|Gp_M&Tc=G2(P6N`J2oWzpcNE2C4z*>*m
zVMN*!y4CZqp<8j*@$_~n+62?x_M2qI;*{THOa0<Bh>lE!u=dliG@D5i|BbMBY!d}o
z)-21mZQHhO+qP}nw(Z(w+tx1IHg;9l?U{aN?uUE&M`UDX#ClgGV?qm>TW$X7eDo7#
z-CWLBl3M}5y$FCF?^Q9w)}1e$3`iT??1U<=Wgo`$(zS_pw1Bh~oRUo3hN1*e{ev*t
zR1TG>OgdTgBh1ij<!M#(a;#&k&84KT-}>*ju>x7*UhehHFQUPzgq3=Cf*Q^ZRSkLT
zxltQ!2U&b_PB9RMm){{fnUgTE8p=Rqgo>{blRZ_}d;axsDZlFij}`ds>NqmG{J2I?
z%jjN3ML*j2|JefmtJ0)u5F~y4LW^g=`lkOG#QNWr#!%mq$wc4G;XhZJV`bf6W)a2r
zwZ6SX;flsJYY<HLuV5A#g2Q1_3%oJRA$*70iG)~EcF4j{FSWMZqK(TX*yhj|(WPIG
z_w54j_8(ANj0Yp)GvTrVcfaqKqpOxzxEm%QKf!gMn}OOrXe4Tk6skj^PKI&kjB^l3
zW}-+BlE`QQtf^u~!z2=grVt1PZwAk6AZ=`IvWDY!0DMo#DF@&fY6{W?4ys}#r7UEE
z%M27Kir@_T=$tSbvW6n6>VDW5z(`>*9wkDsa11>g78E@f6VMacu;O!{<#iHz&>~V5
zD#2nU#khAMq0&dDQmFUdP2E~Gx-ra>X<a(JPFJP1m_swGOk<C=rZ|e|M<zlCLRF!T
zY~S@vtrSWkjSP3=MoJYqVs`6m(+r^P3K?ahyiz;gLKEI=LG`GsGKOd1-7Yw=M@#rv
zgPL#JIF47Kr`g*&^4`!=!7-308py@LRdD%WaXDm*!&2bGNcJE$dR1_%%fF4iS^>K&
z!{Khr_1~;<1XcDcZ74R}LDINL3{6eXl)$ph*Bo#<dV^0pk2n>9PvzMJLhGu`hgG)*
zPHwm{_S_6vGeMdTuKaM_6RAtPCk6vb3=Q(J*Oivk2_ol~MQ|#y)=SIyUf(_@LX4=J
zn{s%HcIrz;qklurN>mVx#Jh5;aPllXh14LWEv$IS7X)w{G#pi*m6#;)F{%h=g&N1q
zd|6%aKv21pEWy#%-z~v4#$*<lYnZ>rj9xmGo3+W$%`NhLF;6(-ZOwE(GK<!Dz~mOX
zM`!vUzYH1hWV$~$&PK#5<A63B;76UZjw`eI=x~@NqlB72|NTp=*eFXah+0QY9&>xL
zyx$Ncdzrk<tjLSx)YcXaCfH9OYJetj>KnIXmiweP<+uGoy91Nl^~A`rxph?;`WIbo
zf}5$z_0ge#s>x;*%b7gN(}BIcS6AsztzmOuU-_r7a53Af)Ts~ohVL)D<~HP8z;bZz
zDv4E<pJwCSg*sEeWW@(<B-_(Zpxh7lx$pmmjQ^i#^M4(z;O3khuwTn0v%~-WU^(0A
z+gjS1{^x_W!u!v8ldY-mvtGajS=@<4+byT15qp>8PtwQAA05r}(%Ync1r(FULW#7J
zt9JMA-Q61?0>Fe66YlG7s~apx{OA#*z6OncZES0sU|i9A+XH=B=08i<e!Cmzc6~-e
zl;;03!qd~suZSZ34)sRiPB&Pj7G>QqKx_hVmDu(u<?G%(kO2s5ly?seC&z5?;yeeL
zU}XrZG?1aOn+%IvC)Vp1a%Q%)(Zn#b%W?Kil=)4O`S)V{pFMII`Azg#qJei|d1vju
zY^3^0F(8MXh0$V}(6PGad3r?^?trzC8kUlaciv6qQ%e_k04<F9XOR3^=Dr|4$fsu-
zc3GwlT<oncPfpC3gE&hp8!$=LwTqV0a%N9hvO(v4tZlFH{mwui8O`}iHrC_W%E7e~
z)3-;rD6HNLN0aAa|8yU*%>wziaN1h%9%X1pV#mp9RGnN--CSN^vBS1qS~p?wyt!WW
z!vn__xrHb%S|g+&i|7T6SZlX@-+GQCv)?6x&dSYtHC*U(08fJXoj7YK5zr%KcQNyK
z8-=HzZjQ_Kt3Os#-U)b2mEEwK(+zgMou55))fP8P1DYVUuL*de4NQ_!IwQ}TA%2}o
z!Au-@B8fK;7%_ryg#g8HIy2+A-IzXtG;qW-!NCB8(lsy%O$JO_?wJL+p*0e80-ikU
z?5VN4AsdBDBF$iYIhf->4AyNM%nG9U<pI+K!ZIo10EbvGAxcCLZcOJphIevVj(#_f
z?j6c*huB68A{g8>A2fqHk3of@#@OrGHjPfdZtYbC8eHFmO!|qsS0(&gs_c^OxqXrC
zF53c?Y(;EVoFvRAmRbNwBT*^nfzTkC<{IBe3u3e4%+QBmMV1@wGt+hiSj-mgz`?`&
zcl5N&>PVOyJv6YdDJ{pnEza>Xl?)-8#zCl`+mca{{f-yGUBlvJ%`$i3c@ncdZQILx
z-V94&!Tb?sYI`7Ynm)7y&nwg`s~h-OxA>wJiSrlS0sy6ChkR%UbMvlwwHHfoK4^Vt
zf1kq^jit^GL{#!m3u-`>jd06Hqr1lzb^~nV=;1KryR5Q-=949JPY7ByKrr*1ch@1K
zVw)vUI2H1!QpHIWlmKlcSxmyBgORPk{<6X0j1ea~Fs@?D{wlqyZ@J=#f>3wOKm?>Z
z<`l-vRVl0+?z^#Xi{zlE@~zMa>Ub;>Lt`BK@ecX~D1}sz;k|ahu=6iZQGqX53hIPs
z(wiLQJL7bq?l!juuQkwVOTxoUD7g~@1Y5n}Lj<-H0a>e4k;ZsE431ZCh*=>&HEk}K
zBC-q_LlC<_mDz3;3Q_Fi+j2ASagA@xC#dV@_O{T$!+o9Ge0?)(rzZn2DiB$HvX)i}
z-6s`1@==nD!NFJ|0Tmp2GpUVH#bC1N_koP&6klGMy@iB8Qq#xmCV@DB#8p&Vb}0oF
zSM}vUDyv?4yc)6r@FY)$WrgQ6(N0q!*dI%nA7fM3f@u(f%=FK%OoeZ{QqrQq)lD*_
z7YEL(;`Jx_P}Si~4D9FX6!k8+XTVCuefHh)RyWy<R)y24$|`b*M-a9+a0Fg1j$AUC
z?0uGVgA;97Bm*ds?GhGjwx5%mhxZzv^A=8CjvvMg%i=3QV>&s(HF~k@D?1}K9RwNt
zd_m-3$s|RhB23n#2Q7{V^5ndQ5~XOA^ELo;gXeb-k1*ZcfOF6)CCBcbLnHQVnV(pk
z9ZG;YQG2vSTdFXoI2vG6P?#f%wz1R!G$n<4WZg;9R%140=gxW#uV=8uxSo5GqsS8M
zDDYjIUp8>~HVNMyTuTcmpn#|H-FIMcNPb15QdS^5gIa&eCf3#@5~C>&v3M*RnphSm
z1#^J@61bis3~^%$bw^L1o4C*iTF;<*m%>e4WI1UQGPe3Yz=_xWb+vAI781WNb)*hO
zvXG44byOrli-=EXlaNeSOTjF}$+K14M$(eldx4q#`g{12vaSpb;y~m-YXIY=;WVjm
zN=!ERVaV{<$&3uN@G;5~#9C%93mCUhAjMH(daR{UWo<nZ%!w`%hI+S6tRYeb^-^3`
zR75Gt<(5#|P*5IHVzbDESoJQlACf44y4Y>_t^iVGoRTN@6bUgw6v#FE>JisoL@@d0
zfYg|hMz|Tyz@SJ1?c(74ww_n=(<@6Ue!kFHHe@wL#ciYS5s-SkB6mL>_5e9UN=L3h
z16rIEHSjh7(pxjoiN*@pQ9Vfs=R%TJwG_Mtsxf$UJX!ry9{mclesn8nS@xZKXIXI-
zf-k5{|DY^;QIkrSJ)GCLk1<|wg<E(lld}GD8}$p*Fbmoev0+q;wb_w6zFkCgZ>PUS
z@H@CYZ{MT_;QDUv`tG*8GM@qi(Lh0DY8~b8_olC{&K@7V^4`geEmEk~5OwGOoc42Y
zjdcrk{;^?_n&bIF7H1=j@7O|bfN}F@58NP~kV=^wlRufNcg0hze4vJ6@LGO6Wxrp6
zr};TT$>cilSxe~@e!M&9UOHH^CeR9V?m;P(rnIp|to<2vC8OIE4b1>cdEWhwM~?N|
z4AhrJru_RY*&;BioeTVi2H1aIQwj`3AhARZ*X8^ZRlaeC78r?0(+8_nUoV_L3#j6)
ziL@?<b6#z|#EzH+mxhy4d0eeKw1?F~7A2xh*XYcGlfz|BF3yn4Mz`GwVCcygf!5Dy
zpo^WJbAGBxb*2po!2d6L=l%G&G9m1*+S%>feoi*4yXsj$*UE-vDuIru=CD9bb<Wb$
z=v@DZQpg&a@P5N%vN5=@q&F!T)d{(g>>q0gtheap9I%#+w__m#g+3-443E>}YSVVt
zf*D_d-ZwvYN(l>R`~><o_q3o8HtOJ~vDr_G88CXcwzk~0=!Kr3Fi5tmZn}LP2eC%M
zJ!E%06K~S*#b>q5F{<bEkA(6*85u03Ke5DqG`Sr;5@<F>+mf4=G_hCk%{x<5<N14-
zPf2pvnK>y-g<($1!+f(Z=MxobpXNlv?bE_TUR<;SfG9JZlRW=wZkopJXrG)VD3wf3
zcj@(f!pgE(H`k_fmGXYSzi-1of7ALrK$17_C=~vIy`e#~AKse9M(v!Z1}_;6l2hrx
zIk)Zd^N#vM$1RGD5N>h6_1hh4&aAG<eT_)>U5+or%xnkQd6r|L#DSIHdi_&|2F;)X
z`bY`*)MU@ID%MJfw*cb588G^{&TUr+D;ziPO4IPS&mjG>Dgp<O&!+TSb$sljOxHa^
zCk$L<?`@uGQb1u=n&Erz?rR-$+l<GS?X(btEUknz*o)px>k2$UNjYYU5oYtpqfyz3
z#bTu})PU-TdAjS<Rf#PP&t>-}?Kx~Lug`F<b8Zr<xa@qNc@<D1tw^P~Pmv}zUx;2J
zZTH>gg3R_*&}ge4_3~>l8D-rp-qzkNzbw|RcexgnH~y$_9D&2Hz9r)`R@B!J9mZ=t
zI*2_VOJ4bE-$-O%*;pTz?(J__V3o2ELLKeX8aP!~@3Pi=%rnHmIHxzD%vLb3EFwFJ
zc&b#Ak7`APss!6Gv;JE?cGDDXp#y01EW@DZ$Yr=T2OOT3D7%)7WDXd4!S5PO7e~rM
zk<FPnjP<+}Tp1c%21JO$#|bc$&n;6YwLxJ!A5^jtpDB*>$M3}1m!ryRBjP4~>WA7<
zUuloIJ$)ANe)35ygz7DIyE_55!DKo3LmoemR&rqe*D#l>a>tYp%*cjp(>nHC!FMFY
zVVA%vOO2;`q2U-;1RgE_#@aKjz%x*5-L9S2v_PVW$i9+WU>K*E&lAi%`FWCai1bM0
z{Tx{dZEF7zBCI`!BuG~ekC|YK6XO{bG_~GDb$10Qmf{YGvII}>+bnN^Dn^g)5T>j3
zoDlD=cxL4)7ZH%@IGZ(!vm|2Wu4FTC(k=}^&Fp+2?ah%x$uzejhW1q68?<?me6o{1
zk^-prw{<6Mm^)8u?CPZSmvAA0MqtYAN);?6dcJ8gJ`F5%sRQLwNgl`9?u!DcOv6tr
zUNJ*Z$&po{R)vU(>~hLLrQC~of0~PDuZBsiRVzRy#nviGjY=wDQ>=0*Q&m0h&*3BS
zJ9*%`+5BZe$k4}XBWHihxG=oi88b&er_xs5ue(IscIPe8H_cN6CioteXy|BR!BdC3
z-(RIuX>O}dbZ#jMT_9F&QdKg{v^%yl3ZM*@RDeT;+?@r04oYHS8SdXga})y{?Ocli
zKbD~-{`DsLuY{z!by&A2W}6u3Tto~mBUX5+2wW?7vY&tUjig01H0JZ44v@5RJFj%%
zw7Sph;h9E}786&8(^AAFI^+d(F_AxRa1oH*3qcv2|CW9jy5AUF;^4!>JxR1`Mke09
zPrLbD==gPXp1_4O6np`4zXx15QN+dXcK;Q@{P{!{A6|>5rCvG8rd2IgIipMuPxIhP
z#W(+D&Bos`Rx{x&TsN!awWb^V6YE2r8P8fbI(hoS>^VAnG^xo-8~Rh^2F&WxMJOR$
zuY#z>b4cN~1gnk4a~cF+5&qz~guuwE+^8N;V!2SRYQTQQVcf&p<ptMqtb89kyzA7D
zq{+fY)cFpYBjSMpCyHKisD_}Q`%p+ctY>#l09!go9xt?vx(eZ2nD2{$PlXm|*y;jj
zXS&Ebn}g-nsZK*W!-=j_5(amVl?lbC0RekJ;EvqfI?tATuMfv0cH;^aNf0gy=B5P)
zMF6h_-=xrR10w;k6Q>?P%*{qR6l<?y7{-s1aYG`;;gBb5vn~tF!-)!*@LY6iG9cu3
zYwk0C{1Hq@#~%Xhdn+tZ)g?=K(r}?{eMm`wGXv%h7pGRuRG+9h`Jz|9M<G(#l6|D)
zP@SGrK|q10ns05|Nw8GoWJU?0#UG|TqMsS!i0z3w-#v$jMGlq8b0JN%(LT=w_2aZq
z*qX0)CTNnSZUEoaB4(3HN=Wm8AnuS7_8PIwf6Xoaes6H+a|!FyQ^843Gt=cDRaN|x
z!%#59@Lr#RizlvuizSj!hdSIfEW%}isKCdLh`dz}iWSh>a;&at=>oH>P*!RPj?sXu
zCHdCoTu}P`cfSpM>C=ye|MNFM1!#xOW&epk8xIfOr*<lUx{OX;ph^teGAz6Z`*PI}
zhw$#=`Y{iQgz2c`;s5}ZyE&vM4--IUP~J*HXd@bg^P`oFK_))qSXL-W%(aF(r6??%
zyGEzrA8`ruE6#W^tgdFpp;RPj!_mu`oNR1+u2?XF6*Z`GUFNkQZTgVgSv#xZ50|+$
z+<2@J-lD!VY_Kl?yKh!O<%{yZ9gCIN#cFMb8o7AVU%8i_b%*6yW+3kZ5rOOn)`T+m
zc7kL3IMPsPGn&lMK8zcK3y4N)?Aro#VS<8-h#`tJ$;8C(HQEhJ#*c-P=m%g%^Uc(;
z!9`*f%}dCn5?!P_0E|!hy(+$`NqZf}X=0q)YNSxzE}e8k52}aT`_-!ZsK)?q83lQN
zB(u@WB7T<3YHlkI0vLe7^)|sX2EISXnI94;C#xeH&t3t>ToaG@B&_gh$XxLbdjQdP
zTvJUF%azI1UlS`+dwjENO>E+TKt1lINajQf*C~HvzF{s4aWh-=OhlzYiXJ?(TQScc
z<>PvyR3eDf<4cOs0D6w6L*tDp;zKTYGsL#`sCNq0No^9}xx005-S#6ZJG11-0_q1D
zVj16jaf9ZbY@9N&blLm0{Aq?DIhDv`o|EK{0)j;tT8_yBvd{_`Q<-B2ACy2>_^{r>
z>(+2`v%Ae1&^$8|n-)rP2&5`ADwmS8kgSbV+^wEP=4|QC7(016#o~31sWDzGfelCq
z55(Ji<F{u=N1(Gj4RgFTECb!i?J_DBy#LO?lGTg)i9@S#9n$V`U-;mrhA=Jr%~<-{
zX(KQ(Q&J1dY0}8NN19#kO=yJ)oj9W|Wjy;_JBLif*;iT;uuwZ>QL2P8J=@B0MUC~i
zBa_YIE-hU=JYAfEW~#vyj$U4=tFM+}8>xtVi<^SAfOr{GDz?I8m7XzFscZS%OOuYT
zOq7A+F{r@x5aq86YU3J6?~LT;^0O11I8rHU1LCBFhJN_2f(A-XT8@!0(dr3K!94@W
zEpD|P=Qz``lwFNIHLbBNjr>BOJlZ}#R!*U4dpKCs(VesjDb(6_Yg&>jL~jt`m><r5
zq7>GnB-X@R@GjR=%yf=7EYTa&y`8~cer|C%jeFsN{`A`<iL?xCd<Tmsll`;W2wPeN
zZIUiLESUg^)$uG)Cfs*n5V#jr-vsvgdQ&`>Y*b|FMI8{A0R!MCMX8iK$HQY3LcjAI
zE)>8B&43^SPH{mJ2#P6h*()xyeu2C$zJa{_TQXaiELAG&o)S%D7}I5o24p|^+oF-d
z5-U}yGX)385{`5}u+8$&HVKxrWkG_5bpq7SV!`fEaf0Ba0i3ThQxMY3i>jH$R!K<Q
z<=E$e$U<5UgYdJGAjFSY9I-QqH5Q&~h%zspr`sl6ySC3$XJd+ORKNfMFthR|M1x!g
zC$HR;pMg4UaFb%^U{I=do3=nXw#!`YKp{~IBBLQ@rSwKPX5k(zqpE7qjieoD6`O^<
zS=i%jcWjAFN@?-sigmWmmE!&usDnyswHl4uLES;KrG(hE;=kWnR?RO}`9q-@i0wDI
zQ-EaPTb{zj%s160nfgc_J!K_<;E}fv&;W-l-h#p~HRaIOG(--#>{(#+j!Ld#kC!G~
z@0jYE-{h1F<piOwXzPF8RO=tg{g+oPFFg-ZY^aoJVVHsO=`7Lf1pv01<%dIUtp?DR
z2Lp<wZ3gQJ=?KJaI_q(WS@m(S2GP9nX@k|;?|UA9GArF|M)Btg28XJ~v-PEaO~M8E
z4`SQK=<Rzd<hzpyTeNzFRtlbCVj46-Q7HwK+H0+I7bUEA6uSuvwrDIA`KD8-!oky;
zD$6O!t+H`C6brs})-W;>0O_ISl^057VFWC1II&aF(J^}zSCkZWg6y)6KKL*0xSATC
zrj>YOP7SG@NOjsRR5zKZ(?jd%wt&IeuffCF{HmDeB^-|iz*LuR>6!LcD9hzGH}UL!
zZ;Veb+YQ)ToK1Z9Zvy+}O8H^>4U@0A)s*JOTtjWjCRhxnoW;3^auEeYmn<6tv#=!*
z#1~OyAw5O5nB;yyut9LYOKVPv?I4d^yfkwlkEs=WiwRMw4KA{&^peD`$~v(pDG23N
zGC(l@nzx!+Z#1iLwvtT-+p$&f7o*g=#x38qh9Rian$FwIL-3=b$#><S$zdw$v>5$t
zWnR_GvFsLhk9*$xdAeIIpOki$KFzNtJ5;13k=`tkf^`_?0{{Jz9G3e?u7Euc@5~jF
zC*K|)3Dkzi5v(+UG{+E?bz|FBp#*(v_S3v+7Gx}o%M*~7S*%6}+M%88qKc)KJ>E~#
z0MZ_ut|~#&mEC!SB;-Xmcs6J85&9q57b!rjg<GbeYB+ABOu<h^vLC6b6U8T%Cl#>V
z6!M;zj(N>kB7|?v_cazEeMe^;@r7_ZFZ|gJ_hEfd;f}r#E44wxw4n$}UPZyP*;8Y(
zSvfgj46DI9AR1CNZ>Tb28j;di%f}-bL=g~dSj=WMjB;f$54X1kwR;n7e`mf4qs;9S
zL;j3P$`s1Ak6t~K>I-DDjYJhR#knOEG&H_d?&fMaE0phWPvMP5=XplwuQZ(EnQ&|c
zw<9w478xLGWDkO}3PsU8=2i42re<&S@CWqq{u>@~rUbD`gOwD?Sa{%$Vj}wCGe(3L
zqspD)+j>2p-Y4h0w?JV=5TRVwl7U1-ug?j>!r*5$wj5FY-Se-520LjMH4Gr^lCT+>
zhcg7!O%e%h!e$0+sk(Oy`|=cl?G->QoYGm`Bhrv1UEU(<I2DF|VQa{|NxT7V$pSBC
z1<w|QdxE}U>DzqfLi=`jwT4$#ilu^di1;0NRVZx55~sTjJ|>8r2K03}H|~B9=6>;8
ziiczw8erJV84Vg8m0$Hc%0|Xx#i2h6#z2@}6j@4Gm3e~Qb4$I>SNBU2-ZYRc{Z-V|
z1PV%oD)|c+J&;_UdjeJ3TFS2(plpW&NDO1nxbnU#*6cXw7=~2vhM4HjpF&LmY->vw
zGb%MlyfGe2uT(>OkR;J39F7(WZ<3bwJWW6Iduhj2t;tpO7DSg;31Y3a`7)ai*Fl4@
zwcQZ9q|fCob2|hPJ!QN~B>M|XrDiGkDU#6`xFpgpO1cHBqy6q8Ww<WNs*%G3t%wvm
zU{u7#FU7N}Qbxu^7@p)xxDIZk?nhF_l;oD`D0hjOu>q-i{J&lY*}Xfq88O~eU|&`|
zBQ!XupNIt7wlu34Wr`j}79Q}3@0*u#BUZ&S1c$m~Oui570CY9{jslj#EzB~W5$Lb=
z_qS#Z0ZX4<E`B7ozP(MZgEV<eYa^O38btHUQo2x8C^p5SxdHr)q*-p7ozrcZgAR>6
zr}d$R8|(?D&x2iTB5i6ZKPlz6E6nvSls-eYlFyOpGg%6>eraEW<TCbKh<&P;zQ*!p
zi!o6zwq=5Ls&cRLK7M^XhOxiUJ9_AI@*0;F$^3VNI4^FLSQOUZfOodL+<5fy6+@a*
zysj&#VTHGtf-r+e^is;ak(MW)T>F<2ztA;~8F((rQ<pE*Tn3@{G8Dy*a|=|J0xi<K
z(C_ktt(%KA(=q)i^VEwf5`)e-URK|r>uRLRsKVu!O%TeP0Ei5LVpXSh{BLs*m%oq{
z%Y9L9Dvg#F9ZZnVVy04AAjn>F3)KqFmz|@Y2-_e>IX0jc*<RIO_aL$u)Z5&QZlNdB
zxII*@T2kaGcc^usK2tPDfCNKK8UBUEX8l=}^j}kWPA^~;Ndwhb^)`=I+LXGBh5WCf
z=XyubmhZvuk9OHM0!MPM4Yujm18Ds9!$r1##$xa^+JQr#z#{cJpRa$+B1fs3c$=in
zyELY|HA1l(1o|u#7s~mL;g@gcoOeHwwg!8*^9Nv<qmq;)kg)Xk^9iGgV8%&C^&1Eh
z<^t)!p^7_0dTD({VFoYm<{d&TI6(%ma^XzTBfCyHkDgu2+Jr%-ReBe7T{D4d+!ZU<
z;)-Sr%{_I9{clEcIxTN+U&W1E)XzsI6`^@O5VPeo%gjbA(hLESMG<gA%W?w?SC-O&
zyZHh2xpH4F_Nk^P8Q9^W3T>19oYVzV8`4<QQ5vA~=X~x5L$v%bw76}RCWyq~uir#!
z;1Q9`>&Ge4W%fd<U;O|3^m+{u!z}c_I2qXgh!p=9d}FBZ;_2{z8L{Q6Y5z(@Q2bu&
zIc5R`&~Ws@S~LzzgAW@j!Nz87NHt!K#+h&(Q$<rt4zO&$KP4{2G#8m<;KN+&c0109
z!QH@ZG8W&)$CU{Tp1%KWM(2kYyYGQvpfSd&Rby^3f3UxR${-;sjD9je3Tse-!%0sw
zdXH}Q!ju@zM8p%vwIzsXPYYle4yu5rA?2BdnQ!y;n`ia!a0`imlHgQx5E0<Gkqig)
zy>p-m5Z#^g!9}9KW59`kaCxASK_7S{&d1)BG?LF87DJKhr<B66IhR@V3U$ORg-lpz
z4}ubBiy%<_!}Jh(2NfFra$?}Xf%B!Z-s8DaeqoWw1=HmGCvYWf$#>@BN0f+9rVZ2Q
z)JWQb??WMKPJ)yns>gA+!H7n<@f6HFL@dp4=fQ%6IwvH`ZUxnirM6Kod=XBiBTg1L
zVa2D_m4CbN0SP@-j>v9e;JrQj3O62p)!)<|4L_%svFAsF(cKaBK4h~Riq9`#Im|ff
z;0hXVeO>RWdtHqeCOTL&*ucGtg;VvOn*me$P`cz<W@6och?ECe0}j<2wE}EwWo<#W
zW7fVK9U{h|eRbFhuI_LX3*B?0Ha(sP@es4d9oCp?<dHLtm!huT_3Uzl2h&`o_hi3-
z1nZ<zz;(X#Y{V#>?72}1^c=Q`FooI!^bf9Y;BM0nJe|SDLa%gnTDYx|%Vc9j(HeW{
zyp82i7D@=Vs}!iY)iObYsBy7x8%DAA)vEzX42p18yQ13qV(s9=oyFDKSZ2gv$rdSH
zb2)pMAl3SPPAZyerIXH7*=<*2c)!}B)f)5;vMRO9<)qEv5sE6Wh>7O!!u?Nt9QGMk
z*r~+rNPn75%?>AwDwU*z_+5s{e0?PP%knD|2vzBo0E)5HWK~^KUp)33(JqnjAIepU
z59aA)h4Bk|k{G8Bo>mQewhQ(jJCXodF|=|N#W$ykD?f!Msa5~o<l>5}sZvBD;DR)v
z6$KwoO5+z5HDv=Clc9!JQyu9<UjSH6tKA1tOkU(3EL}%w;j{g99jJsumlcpUmHg<y
z*O(O&khqY%ZEDG!j%d4uho&-t$8heJoc6P_x-PdZ8~@ABk!8{Azo;LFfHUP4l839I
zSi#J;(Qfo3H%DG!e_^(M;p>%R=U_Ctk7n6hnVmnCcw3d1Tdd0t(I-u&%%}7&OGXVj
zTmDw{rwf{#KT5J_y{M~Oo+4AKT?5bCzTT4f{+78FpOpFuv^$<o(Aa+#k64}^HBqsy
zvdUHJ2d!e~B40=E?7pe=xyTkuD_Ax$T~wGfuHN-YO#NgVx=FHhPTJ4lY=|DRL2p%W
zp*Ray*mU#wdoj{GmjfeX>Pnby5fMG=0X3M~Crjwbk7)(7&D7JBKa_=nc|ddWgF#Gj
z_+*Y7MW+^qp-?(u5&1O8$Ka@wvHfC6%h!ms_9w7bb>4o<RTX%4tpTH9p2kXY>;zjb
zf&~2J^!u`?r!PxbuE>w!R%^3#hI&B}<wXY4F{5h`<x*L7)~UB?Mp%JPJW7*lbSawH
zZsO1XZ@t=oVFb&-4f_kflB7&t005%@j2Hg$Id=cYlm0&-%rn~FzYGD=&u%`Dq`6NL
z&4g0fn)UTMvlC5uuj5gS&1<SOD+;Kl4MozBxXJUu=T%#m2Lb`%hTLMul8X`~h#UIn
z7p=f;o0~>-PgJri))t-9>d$_7pS#}E$8O^#sChbMd|e&g`X<YF@FyoW$~%!<GaYsa
zA@*TVOswbVQoPS9sF1`Z(Vb_?JtlP#ro5(I0^|tsYX88g)4`)zdZYef5N!`@^g#|P
zra0F-(fB$K1m~eUpS%;A$aH+VB!)-g+y>P+x`<9vqKFT@(LKwnK@<2=GHcSWFeEub
zH>VFPt}e`qCOR6WVkU@2KG-r5oUukeGySkrG>?2^;QQOE^<uOkoCdnf(W{Fd?Rx6k
z1^t~V<ouJHdlw`TAB}ld&+MHhqAU8)>C6-1m?yT|VOM@l5)W+Y=Ah%!QH7=)C&h-(
z7ZYrXV2&n;zEt8<5AAtdzATXzXf`LL5ufNjcVMN0pA%mfULSs}#`HUDI;v!UOc9K%
zjcl9M{kvyqFZrQcg82UF!pn!xOV;`(E1dh4o4WzsdVg5ou3*iqZokziIE2V=Q_L@%
zr73==Q>Gim27OBm^8$Cw5RKc&J@?Qj*Wu5UUlzi|!d<Hd`m`qSDG#?%Y^$+a^8|>r
zv6C`9hW5=9{4)dmg8HTN5z2fB4#<LxY9W`wrS<%3Typ+FX`8KMlKeU0-MYQ&ymmdK
zfj~CCCzRoNqou=?2TQPn;gS(wxW-cvCME0&7V{l>PM-5TWBiu~nn;_jEW|f8L)0k(
z>?B>gA4jJrGY))RcsYz~#sq2(<qv3M5{i>hiZ_a^z<4uGXe}BeNnmEW_tQKAilu7W
zm~+%pyq?A#8}R-i$`MK<bYJJNwhfgrGaM65FvL+_ohZ^i$q8UpyP302QaR{&-l2K}
zz}**wjgdxr9Z&*OWHZ2+ikmmJ|B{<Mp$w*%5lS;jY&oGm9>EkVtk*sh*c_Q;59!zJ
z+2^@KOi0S;CRfjlX_A!Tf=jM5%K2Nw^G)w<BkJ8=12sc7dv@UL_YvjYlglcu<c4jB
zLK}e~)*C)ho?F*n4T2Ei1;tnhE}>yP6Qail(hn$);U+s*9Me+ZB+wXD3+9`5XtYnx
z5MZxGo&Z<EOvslI<b#MqI7L_jO~e!3^X0R_J;pblBhAsYJ9&gUQN+7~x+BgKx4-0)
zZgeh|&}{<1C3*-%)XVtf!6Ji3)c{g|Q-X(ca&rss7-Cvta*LOF-y^O9fLP5yC9l0L
zJMDx74gFCJ1Z#LL9!k+`S+z^TbC_FaFy{nV2LT58=dCE)rji|;j0lcWx+jJ}3+I9J
z5GRH61hx1C3}Nmoi_$*Su`AXG|K4If@y=<&kcE2XffH&AC-#6sCE2HWTh;}kSXYb_
zqEIbXp&XV)0)>D&ZmF74>E_|wXteWWf_>rT;8Z47db>Y*rvJmJ=YTqj!O)7<9;}t@
zIB~=nrA`UWKp+`c(8g6tGca;$Cxd@tYJfW7SHckjp(vp$KZd3!H<OTMK;XkC=K#%-
z!{8b(>N}S3CnG>A2!SD<4KH~n&llM0yCV<aIcefULnLD+IHvDTX)Uv5g>RBxUIksK
z;u<Y)>P{swqa3jn5<?^vT@0lHG8s`YbzL-@Xwlh2VPKNNnC3Mq&W?tDIY*v|?(<et
z1-AOvRP>7q@eGNYdcry!>E8Y;RL!s?OEB!};utzmAPUUuIm3(_3=#wQUh%(&uiiQo
zuNbYkX5nb1+=i}H?WjxWHx&H-yeN*vk)m@qH-8}x#<X<?-uS1sjjnY?weJTYcjlc*
z;fFD$vT9Ng_{u!=39lnE$<$tS_1V^anej&-dniLN)3Di~FnzF!W_{C|YdcNnRQGPD
zmAkfBc5(@MONxbG8R8uNX6%*wM*lU<{|2`Z2WpdYAz7ru7q-vx4NRFJ2Z>lMK!LMo
zMM8j+fjl$K;<?bminP?(O5W3KV4PI{W1<t#5ylflk|nnhJmVu|*Jz4l4{Gd*GhH84
zhH(bRP@}0ws)4KmPy9=Z__Jt@CfcABAdImg=x6E=%mdAP#eh$1KONl5d)<;hy%K<k
z&Wfv6tQ@)J-vQ|&cdi!!1GueCCoNZeC4VYE(J#7m)8zzdXB(C~YY@m2_bM{k`IP-O
zv>~eO)`INFDr<%E2(FTz7q~>Rr5@b@EvG+O2zPue2`}SX@Pt<Uf$ZC85|$OZ4lF3T
z7T<|c0Dlb5Hhlt3`rS>&0F7P?keKtz9K8fKHM|H187T;wY6)-<&^?uotTY8!vwZUV
zQ&7|#9MlwlL<y=adi;#`tw}ed%9<NUJ0Hj}IGUoWihM2F%DHF*ME!;1Rk2WrkmKNl
z1J(+gsEz?}m%~1doPjQ^6q23TJf9DIocx@eSJ7yfJ)Ha;8GU%$Grrhx^yTz)gW$y1
zW)@3Js=Un7kWd)|rJ%0ijnbGVNYr`>SO-+z)a_5j@BAV-0z#!3NLG;}1Vbv1S3j6=
znBaUn(wzlP;&flCabK2I1*~n^{SZJ5EEdrG%31UwslS#x9gQuG1|mMIIzL)V<fi&r
zGJKxlkF?2nnn^UfX){{mX=!uwDB&eQ82A##S@lP#=67^*4Vr-i9M6yEX)?7yvLf`y
z1xliNo6MTuIlmv>9K4{m-+=3y<!4eZf@W4n!(s9=k)$TPT$#1S5?LXEkdcrsiev#t
zx!!u{WZ$Qy%%cb^K+-oxru7|uf;l`iu=n(-G+C|`YnxOQrHd4!hh&lasXfw`ojIyu
znQMxI1Yka8f($4iAR7?~!(8VAY|Cu0K$Pg5#+9Q<lSJNnfms6)nex~hqFy&^%4O&6
z|2o_1m}Hc6@>`+_o{Ue1+s~Vq>EzSl^xp{eK@chy+-jRchjD9iJDHt%V$n0UEX0<)
z4Hir7Q&AVhK%ONnJ4EpkDTbK@S^^}B!J4{oi8KN+1yPL)P}$`aQb5S%#$hw-^y0?-
zJ~GJk(ga<>#0kbW11Rx=ppuGb=3zXiCLb8kvsE4={ut)3d0o@SmY0-&>eM^OnETs;
z>5IS?*0(NkI!u;O4nX#k1j<~5XMxB;y}fqXlY45DGsbewmy@XV=guR((aw<@Neb77
z{7wI}?PvD7hn)c6MZ>kv$QyAAThK;Jzx1OAUr)|nFml_wa{m7D;N--J(TB&EkP+x}
z?y1(La4B>|lDq4*Qa7D|G|}thIo!+N62@mpjMwenE}2hb63n>B*w0yen8nw+s_e@X
znA^i~d-Ym_r8HtH=3-6tj+9;4;!{#X>|#>3mw)&KJSh7oLjAx+&cxVtSnHNG!He}N
z^6<W~l;ZE`P9ElI>u5L<)QkFFi}F=Rk(6`lI1H)*7c)uz$jVW&z|&wJB#6r9P7Bp$
z&tI7!t~@r_Nh-eDk1B-p(l0YF4MyJ$E|}j<Cuki!m1AfDUtSL<J}v>Bs10Fv!ho%{
z#rZ}X&`v!3`KY}dIYWn|oG7+`9+Z~l$q0Ygnfc&}X2HnSlb!zcNtA`f9hLd8yn!xj
z#IbS3I?doMB?Is(h9!Q2tY-4S)t5xcMvA<>DKCwWnuVPI5egMMKQV1lUs|`*dU<<R
zW+#T`n5{E8+pwzT`YL-;ozqjd2TKT{`nH%L_^NR+nKaqEEp0rKyR9Zim0Di(%BMAB
zo#2z37E>McqGPE-ZCYwGPc6ej3Q!ek=Arc=5N@BNt6$%;tL)YA%f$m1^~la%2$$1|
zX);SjD{s<Jy<#@5{+HSTvQoV1ptERpppOz9IYdsp!kw$)u-J^1M`yJj&Wc4_Un!o|
zx@3Gg$$3y67MVDiY}_TW+KwHJl!`;CLiFo((L^jf#yrSY?}cbPuh2assTDi7g@FUi
zqfWOLO+o>pzg|=fmd;-3GNybjC%(keIRN7VU$jV1f&`M%rWRVdIV3`P6yTOFU1ND(
zHXFLf7=%S0Jg%PD*!wy#t1+52-9?iGlF2G1NmD$fJgrD7BTa44h7@-3LPJ;DY;N&n
zj!hJCKwmK@LKdFAj*!#Zl;9KswFg&MA6kM;3b;KS$liZ;_yQP4##$VI;~$-Zsvsjg
zN<L1cygR)ojiK(*`}uew?57-~GKGJB(-7F*GAouzcEJ!);SaaH3P~64?@qqsw(V_G
zQls$m<SL1jJC6eJzAlbNI8h0tVX|nJv#OYM9@EMsz!O~*b$lIX@mygXtX18)_ktrM
zm@nHyw`&~%zE&I&fLFyB?bVan{^|o=nL!srr5r@1&ZiCH+65*GzI@CNOU?&FXP1Y)
zG17M7#~2IcPKfT~OTv$9s7K>2x>mfE@-#bSsNQ3}ZvyD)BH7_Yq^H^M;$*-!k7`31
zk!FAUJDSvNiRHhC=#zg+%|khyZg9p1r+>Ks-V_Dg(~S^8Y(kQ@FO7FhEgPWiY(dD`
z6GN~=kW@bJ0<@6=n+E&+#Af#mv{e~M&b3_JQ2v>AGQZDTE8`VxqFA&-00ex3*I&WS
z|I{??@xa-TOlCirH&d&TjL?LeDleW*k&&Xk%McAalPZBRbB}V1kJSZ$<9<$?q^mSg
zH!qld-k|0^`21iuuvJ^cnU@12N1jgpgVWoY_r-yeLq&M645XQ;$D+6wiMhJ71@<wd
zzXN0o(=#ysn>9hZ;Eh20%xosjW3Dh>Dn$=#gojmQ1iyTY*XdqaN(SdY)`mkMJ`)?@
z>34<@oHqWoS1~A@aUs#Sr@f^W`XCGCZJ7{s&eR2JG)IyLd4H(jwkC8`;oWS3rn1|=
zGtvoH&i2v~gxiun<bmBLD-4=@aH@L~j`B<l!cV*48%<&3I{Zq&T5X3~ufv41q%EZh
zy%bHQbm;wtW|@p7^f>V>>EtgA8=g6hB2$l5nHwuhIaO(AVs9*i>UaAqOcc^otKH;^
zCGq5AsHk^QxjFrLJ3WKvHc=JOc)(H@$QpdIUE9-wr%)t6=uq+6c{;x9n32juDAsKP
zMvZdO+mVaZ)jWs`Gp@hP+Fh8kbo8?dBn!tD?k=$AiFpGPrI9)9WQ+u8$H}T{*vb$^
z7nm7iN>Re`u12OfP+g(u$1&$4qK-q7kdzo*bp7AOY0mj?8VY$(zF=56vtMJmiiYZ0
zMlS6-|FY0CN&mA|KoRTaaA(uAuCl>|kSRuABCsl0<3<jjMdA`{m#0sG=M^6N9Q05v
zv=B0k*swhMY6g#xXZFC4Tfx#%tG1LD<AUmyG6&9cVDeH@Rvu)zjK`bT0?eQ$nlQmf
zOc?`N8kZ<z%4_pHHzN#O8hM{^8$clzmJUmLk|GGzje&EDD)DQ+k*e!+@qDYPd<vR`
zt^6F1@@jBHW$VaPhf|#X-1r-s9c<ZwgH{rM^qw&kByQjF*3FBK&8FLDw$*TXFtIs`
zqJ1b1J0`xiE3rZgvcwPdx238|*?osW|AcN=uv!<6*98?v1v_nV`;KUWSsT#3zUCWB
zN_SkxAgZ65T|m$yh0HHMo{df=6NNoKo$__%2Du0UslxTT5%3wqvbE@g%VAJ7!&jG0
zErfQa|08*UIOz=y9N871ocOhNNA=rvg%~OFzFZ?eReJI{yR^atCHfehG*z6*y=fcA
zOm0Fq(TuwDK0&RIW#<n**Q#n0?bZ_~P6+O^;6qLfQ6=5LwvHbiRpaeb>yPVO_Fr};
z0nTnpNDVV@C%g);;#4RY(UqpanHOm!A<>W@p#R<u=7A`2GyIKAhEo5hwc7u0n90`2
z+2#NE*Z+rh$%>Y(^QIWwZ)&p9@x(?ck#=gPG;)`#shFfw*(BbkJlTv3CrV3FTbV?f
zu9hP9whh0bizMB?DW$~OIcqgh0sz_|5WGLBb`;Gr0h(VU%!cc*<ln_gb<a@n3$zn+
z@exzO&a-R2PUtuO@_q^OV<x`XXUSowNdycc=3+$Ht4lY0kb+u1=W_H}#_&!?SctWe
zj%PH6hod&4UG`^)&yz7zTl(-LXC!fy(_4(F$)JwZnRz%^4nsW0H;+T+HD?M9Mn2@e
zR1DI=I^Mnb7MKzCcra;H5WWOu$g?;4_JAvU2im(M#NsH;0U`EC&U-&TQa15!%p(Dp
zRV!NbNH08_NMhG*_)?mQ6{Yiwxz7!dr?vGZ<s%L|p0X3tJ>%o6x%pqxaC+dZu9g`d
zIpH}sZMk-s_9?N?X4_cd+KndS`q&t4#5PW60e3kMi`^xLA~dQSS=g~xqPtx5#!B#6
zcQZE$EJ5Y@&gEqN4EFmWPv_`m|Ac9akmPk|8KaU1o!#st@6A}t<gHH|8LVk$b*Lm2
zHxAZ#*PcxC5uXRA)FY&L{KuKh`OUMO*o+(l%Z<cl#yJZ-n`vb4D?jHl+3kL!spwM{
zlT@)(3t$K`yWi=saL)>oB-|c=XN+JFCNiSkuA&47W^{&j8@s(8o8;+7(b|wt))<|6
zF)276gn*H^aY5eZ0xr}eIZ45OjwoVqXrSf19LYWz(AE<NS+zKtp9i`jN5obxbNr00
zIzk~1aU2Nz)`ReHULZ?O4nP29^PYG8qx_rqV-c+X+^+t>uJ$_QI4OcF5emB^*2P)K
z@(If%4X~<W_hC5U0byMZp&|-+fZSeV<IJ`110n`!M59Ci<XwTUc!(oY^M0PZSPITH
zCXkgouSm7-Ilj3VE`tgNhP3<4_1qgSspu6nC`~SNoY0qVByW4*8J9I*(xeu}JVJV%
zeOS+c_M%0=WmX9iRYtm@sIHbZg3!Z$pthymKT-_g$-{Z-Gol*i;fMAlAreZc%<Ln8
z?_dD$il*Vu{W2aSY2JJiLp(bnX2Z9bKBP}YrZZbZ2b^;Ce(Hztc}FBAt3c2V-#5b4
zK>7j>PEzm(v)K#ASQL50b7o0Ay@gdEU9tP4CHe3^a~3h+{t~D|WE@7pzyaI7dJVE+
z1gYGlo<Er%Vi%AP`_Y9|2`XbD7YU7giTjBS`}BL>+t^agHQDj%x&dh2YgP&DG$5SD
z{8L<sa754u0E=JXI@p3~!g2>ie}G$A22}(&5lu>&iNm&xlD|ktxY_zwKb>3YOnwxr
zRE-YdEQvdMPuoFRU`zpe8;AKT69z_(SH><p5JQBk+27{RU-b^1qRMx1yL&v#c~X2-
zcCK2Rr{K@o8!Pu%mhY}&ELe#9E4mJ;9__$;;8kD#J+W_uU%G~`<$lLEJvh)(12)7<
zA;B@NqNPy>7>>pBipUJ#(&#Z%jq(Yws;ME-7Rvaf0fr}*7fDjWIYry5Lz!{<W=Uo*
zk#GwU&p@`rQ(S`V***GFyyK`PgJi#T>|`r6PR)V<SGya@kh7`0#25oZ+kyY!>3nlF
z?C8Mly4$f_Luc{ZlyVqRY>}Fub>-q3Nx;e@39z}w+Z9L$38$y8K6gzO*3Ed{E=KVz
zpvl5OmdYvy0=gyTZ~i!pZO*7f#&mGwXuWvY1Y-GF7-}2f0Cf=YfZ|aa$zGb~Qfm39
zp%vV=_4;Q*m&nGbbMe@9lWg^SNbCjnjW_7uegf>1Ck#n5OR7Gp*d~#I@@K*l@QPYe
zksXpnuHU-vx_zvUbj>z6I|9G8HS*s11N;<Nv7rZ)xb{WrR`CbeEIYGSHx^agBsf=I
z?Y;QAuXiboCtM`AkP;jVgBGTU=>mi_jZ+u2pXa=G#Y593)S*Ccza0W87o`>zl=|za
zNVO=bXjMH|P(VvhG||?tlNTs`>bL0>I@Rg52y{DHmdw=lC^=|Jt4)D4k>n+xc>}qa
zF<wE-G9(x-)nTW%47>-$%F^jrmi%M%qpR->zP#)Wr2$jA$|Wqx@MQC3T<bDx0{|*x
zs7hV^%dPA;PObBhQD)m!QoC9PjhQBnE=JU#@J$-6@}TVnAhKHc+`DwEucu+p)$@Jb
z&?Wh9FG1X7ctAK%x)T!fW%9fIL`7&GpONi_Aqa63@*l-wqnZ$vR`KsJO(G=hCNsjx
z(3cA|>j(Oi`j8p;R3F(O4^V2(7=yT|->t#{ifWEWI|rFA;}R);@JI!N3o1`z!LW2F
zkF5m~jWc%u)|IGLjywn3{2^&#A`-9J^S;=#;hjS<&0m8YAHI|A_9)t!!4Hr2YC@6_
z#cjfVl?qgaw6uu<5mp_b1@cB<X#XRwu*C~ZxJWZ~a6El4L=)<Y1Xc-QY55Z{P~VFE
z&K~fy1aRyxZD<A+Sde_u!Rz#6yqB&gS`HqCtrX@<LN3lhV=otnjHtD^&H4|B8;T-l
zRb;Su&V40pWh$Iq$mc^s+#8@&kQ)Q4RkSjuBaM0WA&gP@l7}2`9o*D6Km6hfpmJzU
zlylh#48Hr`xPHtWOp~hu6;PuKPs;w@Ml;W!pz$7FSoP+*G9jjbMXCu19Qt@_JO5hE
z%&XiBiDoaykebew*sr{d_AE+=E6-TIR-9{eYMM7P==^k=X>3AxVg!a-%Huf1ikL0Q
z*>hK;f5U|+7O0_0OT@8dN5~20q1Esm>q_@}rM2y*74zwHlvJ%ex`k#Vlki-7EvSnL
z@NVN@81k+eQ*TP%Du9AY)1H8k{ZI58r^6l*TF!soVB?!wjQ7LTPLhXE2@=s^JlAA|
ziYykbC+{gE#gBmj6l7uJ*ow$UfjVZV-^0etJBz$BC8!;%tcWRtslWuG$NH7lLj<gl
zcp;$G2rSIQB2N1?2>vYOlz`w=0`CGHY$|6HvTU9QqoMqXO<r~bt*L*1t4C5EF(z02
zx}y$KCH#~enl{pKflg{N0~veFBLCaWab83-i~30UE|2Q{k7}fnN0Zz;?)6M6b;)Z*
zYomfrE}tYSH}PeEu6h{V?3HR@V=oWc=gyN!leB|jQeATO<gMsvr3pH@2g3wJ(Q;BY
zp_xqJZki*y%t-Dq8htoi24PMNIO2h3=XgjteOoaVofJUp(bAQ1*i`yAYj7yP@^n7&
zubg6LlH$woh(oq^p8-pdRtIwFZLppRwny835et5)Z;GU1g0wh>gl%?QIsz5b`<YK+
z*^^5V8(!VR_+ZR1m3#4Yjyk7lb`!|ITpcbyed_^2{BxuXXZQ5|wEAFPowTV_sP5BD
zG&h*~?`=-`y+Yui4v_MRhvW^9e_$znNG~hV^5fxoOh_+3c_O_Sz9Dv+YfZeBld?FB
z)**QmogJOhX|x^jZW*dBlS&`rs#E-s0{%S}*r`FTM>v(QGtuJ~nSG1}Zz%Ir0}Jp$
zJ~^p~s&RSnA(hLsjyTR0K}e{{p0k$-8jAk=UsU_pL|rgW5LCDHm<r=V)bOweU52s1
zefjH*i<6TVrbJS2zN_Lb1G8$Z*cb8doI$wl=J{8L-@T2$P|+o2wudnnp~s#7c28sH
zDSEv(x+W>m^PJp7T@ST1{8z}V+v`-FW>cH5&cVe|ho5%*CBfYDg(DqCnj55p@4qP4
z(ag}%mpVf}>znJgI641~umwLg%EQVG$qW7rch0^u@h~Y}{-$>L<LE~Dz0zIRm1k}J
zy;ZEyOPX9S%RXDW>jJ&M)vP7CCz=pa)vj#?CB){_Ir6hLT5rl1v4U?Wy>pA!uow*!
z8M2sT>1{{n=9Ks9J!&t+OW%ni!FK8vP`zlIAYbw(D(W-@2W+MzJ#^RRv072zB^X#6
zNh7*-I(Th$Arn8K|NZ$Mn{g`k`0FBo{dE!i2SMC_(HtgBmii8^|2Z%{qoQm7_t!))
zSKqE+2^B$ByhxT>mrBu4NfjIsFUuoJ#yG5PCH_Y_OzZozPFTV~w$##l{Q;==HP6}i
zCVaaLRQ4>=gnEN(alW_P$KCJ#&p$jf#85|}cNZ=Y`6zpq`FUAak`ku^>@fyL08r$r
z3ZIg~V3GgD*g1rU0xfGcws~UPwohy)C$??dwr$(CZQHh!P7iwU-r(LI?{R%!Rqeml
z3bq&p8b^gCI3h^OjWONtg0?iMJn?%92ChY*;EtvFRlz7P-kye1sMVzceId^N1wKFs
z4IwrT1V>?&62)+nNk{+*3{W%o?*kb~sLJaP2%8)YcIoOf<z!z?6eFn*`c=Usml*@y
zA%(KGie3D5(sXH9V+Ud(N97W%-r^aZI%1FW4rSPEs$?1tV27pfl;bq)53`m~%(9av
zA*;h0waPbWcFccAB$VByeS@s5T^K1`CrB=4D_<8!u~GFXBwUKVWdVnc?2<s-o*D^2
zG=%MT?RMc)<7evB?M|VslX`KqD8PGU&7&bFN-qqO-iOMVM%8f0Ovfig!V#aZ-%X-J
z^MqwMvcO@fETOI}OjOcQPm8MRZHCm;88GF=X5D?mxHNXN?p2H<fEFg!M3>?%!NLlF
zdR-XvYG07gkTA>8`6<}xX?^H=qk%&gl;1Plm-Q54>Flu5%))1orsP<~usB;c`f=tr
zVEQ(q)-Dr|Mp+7nrY!eTlykUKQCUZp_HiC)ngv2=Zn=DRL#5R~@Y5<Z&J#~B;xeGx
zd_axl(X2R|#f$nHYs}~a^6${ron3d6zkSF!<l5q7k0@Q3gceC6GLTpV!VVH@`6<Uq
zyD{REK~1Tm-%(Jw{~G5k;5Pil%YI3eeHoNlBOB-Nr21ge=B{K-PYT&-2B*hu@g;v1
zQ^Q>E(}BM7Il{Z6)`NE~fUST~Vm(p@&F$`7FrqCA&#Sq3J6JJZ4CcgKiyqVzY#w0U
zH3YG_I>p>`td{V>^j5E$0X2D6Mwoh**{%|JOijMsnx{4iK{L8U@4l&|l2xb0rPcaZ
zn9fQlxa<0&)6Gr4L;lZtLXSQ|E&3gYPf7nff<VVc-`vRHzr+Ws{{6rBfd19=YGP%I
zQyXg-9#ehQp<{s<#@Ja?!k8&JQvIwPaY*2PYgEt26%amTY$8s{krWo98ujzt#t`kP
zwF7**E$Yw<WRDg!yW7+G&XxDgp-HPcQ|d5v=FG?~Z`ikPwr`(GWdZS3FFu5>2(&_K
zT_TB2>W+ZOpv5E)TJdCv)oBArVBfC+cz1T!kCfZg5x_g9xz_H6AQHq<QN(jFy`**@
z5cqk?pbh}nAKhx-w<B+4H#(xpuzJmuG#g8>5rr11LkxEZnaYzuV$71e9aH9bz>+$u
z8Pfj2jS{JQ6AE|l9Yj;$Vp(wT?85rx`nno956%qJG5@f+0?nz3GplJ8L~MI&<0C9Y
zyY>kqv#9?>-o#4}2Gnyv*gOj7R<4%VF`znSbA)hrV*0&TEuZa*wxt49($aY?Gb5Pn
ziD@oAGkIB-b^s?Hp$D{EJsx{>4*wnqb9=yS*UN_?RaORVVd4j_#u}RrO7X841CVq}
z5Wd)(RjBFhvNh0@F*e)t_d2kr1k+s^Hpw)(%lMCBiHEr%X!Jq<8;2Bc<OuBRGc0zC
z*Iq~dA4@R_cO=qgaR`~3yc7##+v>lHtm?C|3l@NkP-?DJ%QUY`i^X>7H#j3}tc_07
z*VyZ1Nmf>4b_C}|s0ot?RkKL!A$HKXi1<EV^cY{9nN#2fH1ok$ov+(rM+%JoeL@L?
zww~HB=6dOc;HG+vRAz2=TLJdv8usR6;&UpEi4n0b(1{aED1u7TK^xM?`j81|!&>qC
zoSObfxzpMa`kr+#N%Zz#5|;ZhU+6jiW(Re|M1etxZ-qVLzQa_88z};D$BW?dZ_$8Q
zTshpi-frPQVfot@deO(FaIcmQLbug@-6rr^vgkqpkRi-Zb8#?(f9{kc#C2`=4-BRd
z(3>_u$FbpQr}s)-7JUbVdRv%0FYs6}Z&kZv8j0%fa-|c^?*fpjatUARi0ulocBsL=
zEU;AXjhbDV(x+_DOyh>89NYiE8{35ZV|2GBLIkv*^H@#hB$DLu8F49i^JI4GNQJK{
zPOw;iw`cb-oFS`h?q|Nr%ue@L13E5vq((mW{&k?u4S$#($XMIC18?ll%vv+QInm>4
z6*%93H}p*{E>@On<q_}%j%qXH`48Y$%styhSv1mO(0h!t(qf!xrU@TwJq43~RCh54
zFo9Y$eFH^nD_ea6J9p!D;cO)m7nhiuxZ_g#Us+HU+yF!IjJ(lj6LRjrdJo*XhXLI5
zi`!^YnP2B7oPQ5yC`9t6Q9jJ89Ntch5gNM4L_x7aGj8%Cl}J%v=MRohOct@=x<)@s
z1aNK@TG@6?v643v2`yfi7&&<L;4hz@xgm{HtElrkL)9V-eC_?gmN<bWJJ3NFC+^}l
zk)WW=a8QEd3Fr=YKYK^-!UHs{a$e&EDNi~!Pq;)TeFH2}_m=ww2fF_RQq`8q;m$_t
zJeu?9o>XnwFVuCzD76_zS1{n<Z%pZj2{WB9tO^{R>Wthn1zplDp%g;W))VTd0G3^^
zss@R6brs*#Ii$v*R|GQTSKArMmmKPURp>|t6Jzv5Vd)xO8SXEUfwUdg72flZw`(Xu
z7t+jIuc!l6(IOK-90BF{P~b0pyw|gBli-J)7*1dr`#m<Mu9M@v-QAJdmn*xl4$@}b
z?~kPK*s1V#ivom{ZqrqiYo-#>i+?g!t7;sdX`R&_%XzL=Kw}yPHnH@{vT!U-3aelJ
zDYy_^-u5{F==!`pj*=03a0#%>;>rOma?bc$UdAJr6+>QH-^Bbu_DTw9=ukEL#G94;
zX)!0sl?lvNF_<;iL8OmZXiq#tsoo@;JcOw9^~5*Ps@ka5Nq5=3W}S08(r;RQ>CI_T
z$*h50;#^PH4JFDrif*84YIXKcLp!>-)!_3LSAo{>_0A}!ov|V<PU=U+Cz_D@8i{sR
zg?t219;b0vn8>2juBAS&Fu46Ip+~Dgk_?5DTxCEWr5=7jaBq-v-J+g$q?D6EpTGI@
zDNSW!o3*^VKC(2zPz~ZmH&o3!Q*0uhVA|2k!*AKuC|o#~?4M6Z7)hA{Yj;#u3SjWA
z%H--t{N`~MI6*eG8vJW(pmlYw@!sf-!vy0p@fHllUB!z~2Q<}NX|lFiDnV0pLO0at
zXjBErOEaiWSFf}p@FYP{j-6tHcsS+p3MhvEJr|B<(iYVg<Aw2woXB3@=7pTqGSCDa
z5@PGO-0>hIWxXa(>vBBxHxsrdyvfd7-a+;u&j)8k_SbF83%fYan{GY@p3O)SOJ}^r
zTv}m+O!hw*Vwzb+m$$&5)UswrcdZxE=d&Tn)Pz0tAT9M~A53SAV`tw&P#}5RcVcSE
z0+e>JKTM^kFdJ5sYw7eZLbTU*h!4C2j*hU@kAyiPEjX$4hsRKwXZzLiqozK6r`6NQ
zQjWV@pGd45N`{@uVt#|-&d9i<PT|WA14MupFVIBZzqUq-xZ(|xmpB?7yX3;ENR9DT
zi`S}$hYH-z%goO6$EUw+;2=1gi2!H5xjX3e>6@d@Sm2kEDx#w51AnN0ugahk*Z7tO
zWgvxBjZl(k5gjdI$y66CU;@m?seyh3I)F&$a47A-{^3=DWJ|>{7l;}kQWRc?J28GG
zah07G5>d*E1{v7Id;EpVr+)8@Dl!?Px@P3BAXKfi+XDH42728G+no8zo^LkY;sQ(c
zW3;BV)ZD8wdvplhAGe_&WKy2sN_K##%R)%YubLx$Tob{2uouBORKFe1)69Y?ew(DU
zl`rlDF4RmwrDzRs5c|7a)@5U9&dJCWrC?gz8K+;1KaT7?q1bmyW>z$RZSm9>YO_!L
z-mjorf%?L}eztAcXqX*wMXo*^V;@;?)YPMOdn4pBz{C8+GYZv*YL1r>h4oI{{H#jZ
z!-=Q?3IHRU1Jh-MV<5jWnA{A#UKq2_)v4s$>XZ_T@$U$6(^1mNBO$ZUzT7+9J!}5v
z&dm-66JSP_+<c9*3=KESC7I(-tw}%O-fOGp#(JV1l>@L=$)$rE(cvK8hOjHIQ^EUz
zfcdFBh<V<m5Qmot0cVn@p=C-xWf-gdqZrsG;-+0B6C}*ppwho0uekY?zDQIRbv=@y
zqzT>oc#imq7P^vk^j}s1%}X~1{5Ea1PY%p>R5hlN2Nx6<X;<f8OYVPl#vw(_;adt6
z-cT}2K;R2mGax{ihG?<L3VX?ARSiOKLh`_G<>AbHO%2Jtw#q4*f;u`!xUH|zV{(GH
zdo;kb)Cd1?f*NZM%M;{-l_v~I{hVlwk{SkA`IFEZ7Ri*t&Ev<=$`%`mV)iUW@OWz{
zvbAZpVMGq#8}?p&&|>GQLOr>5!s3RWc8zt1Yrh3ce;t5I&iP}=$Km}YtzGxz&2Usw
z<%_Ea*z3G{SScZ8)dr1ZQliP58XlCRY0QnA)ujWBC{Ru_E@$rPcxIZo^_=P^{YL85
z<XMJ{Q#H!=6Xm_s@j6!{^5wdCWpY$z6PCH-X}J_Z_|ZWKNtxAbmBUtTqckBuDWM-7
zP>NO%UdN_VKV|e)8b`&66O>yQ{94^QjDe{zKP%;+9!>f6_VR!smA0#AZ<s5&>S7P&
z1Q&G7C}@;!3U}0vE;%w25pPp4viTh9CuH6E>!8)e32#xEz0y%33goh9x_+)1^xVFu
z%z1o<dw>?u-FlBlsUG`x-$MD!Kg&@^J=E_tM3hrTd&u&4_P%vE*q(S~6uz7nO45OD
zME#5?(BCs<>eXs(3i{I8Y=wFTqP#SwK>2TBLA*Lgh1JvG)+FHE+!Nr5&r+_}2ziN{
zTj>U3F)1@)CSeT+#e-gi?mQC1lW{(5eP81_6Q$TP4URdtg*sDMd5w=R7y?!om_|M%
z3vs;SPS}5O&eHLHstiBHTwq>*Jj3FC8tO{=F}ry%3~#5#`DL;F)Pr-+*LQ}e^%i4k
zU-|y$3;@M$0Cj^503agv|M4aE`ypoJ`k#mDA#N*|h1U6<530Y<mg0ixq<OW}Bp$Ll
z3a4AK&#YHK@V1_rYG$46&b2raH}gN<CL-}P6ZV*^9y198v|-$sQN|(<lnoo3`qIuQ
zG&Tl5?%DO)B@1h3PVKU5N0|)`B=92#1Y9u%d~eJ~;1!OzL*f}YAb=gckdPg_kTE^B
zHL#%wE3-NG^n17(LAWvM<#~{UL@FbF=^&LX>ycd%DwccO_4E>JlzX9MSs#!YZ-6GB
z7m0L=$03%OG|7H9!HT~KGDn$F63j5e^I+=qLRx?hfbLFVrCVSE$hF%?Q+iDJMKz=<
z{odm@am<ed<#SPbK4a_fhhwvLsqCBU?aj?bqE(@IkSp@;ZPWzkBj@!8M?`?v>*Zxx
zZ+2J}TobzZ#fO6D&z63<%aE0zx^%o^Zn!O77t9^nh2EUT6P67FHpmXRPfBiY0yCt9
zsHMe*8d=Vs^&ET|&-^O3td6^Wt$j+34&teRyV8qDIyxCqx-62}9L`URuD;D#0~^2w
zCQetLS=`1o{LBJRZqjDS*t`z>I3#SiVMJTbLr7pXy56`UO0lmot8t9^T^YR{@d&L<
z>?e0wTx6t_sRCl7IT!|E{Ek#%$wbxp<jI#;nArLPRdDo_n`!Xry;Y3JnAG>hC2g5t
zy0b8$)}A9|85z3alx4C3;41+l9q165U~syTrBy!5y7>{Xjuwi`p6Y2@@C+b4Eo~UK
zATJ(XOY%0IX@lvtGmMO?ehRy^sa;KC?ngPz?2LBms8xTu{MTmCehv^dB;>I3Lq~S}
zFww$(K|%5J;%^igZ3)-RFgy<OtHN)Rd!A*-gA26GHH1QHFwzS3h+be^*5>bgo>wLn
zAAr~>OHl?{RlCvlk2Qzfp|-HE#1%-AJOPwT0i9gNV&}m{>^U6VaE#R&3@$Ek2L@cu
z0;b)iyEAn&^oFA!V`Qc};Ph>hcfTomP&Rp;pfDetehT2hDA<-q<Z<ifrlf6Jj%ye*
z!EqcueJsSD94hd1<FY^dFazpfSnV*q!J<rV&wBu(dCs|g<^JY{-$0R16sr$`%!AUi
z>b`5!&nSO$^-8Tav!<KQka?Z@IOy?CqgDJut^q3Dv1!!cBU$wibX-TD|6m~X*2*;t
zAg7~qaHqvjo)3|fRAqvBP8$0~WaQpRr@pwM7IB-YPa}DuFl7|3&?Mg}h4Bnz`=SdU
z&-h;$_PmCoW%x^~hl4+2c~8Bqywrf%WZj+pz@Cd)2k_{}@cBz6_DikVR6aP7@(sjG
zT$+w24Y022VBlwG5EE1JR79|7P~ZJb2^5~2Tn&V<@wsG!+F10a4tukvD5bN~!e#m2
zIAcZu4ZxT?(j-ZEs1iPahjzZVHMB6q$+8vSmB|o>g`JHc7A>Wkdy+zI4$?JvLK3*9
zia`xGR~4(_?*WPk9dpk!bC2AZ`NjD9%bh_ZpEjStI>}tKuAN10@joI5!7GB5^lOdx
zN|<vFShWH62Vysq1>gNW!=Cyz15tX3vygB}Ma}Dt!(&=1A^S>uZ!~(z)r(-n2nV-U
z9~HPHodcRHQ4zJ^Zzoopcbz9G=`b{5tL4hJtmfLNu&l!%9K;NFl~it!WPfg+&Gq&3
zSlhPZ+DrzHa3aqx?TS*IvB(<90DvJDz|i^kSO={u6hdx;&c_c?jyYlwdEP1Sjdz9R
zkaDN;m>|2nQ$TJSZYR@s44+-StPQ~9;nrVWU3MDl<xDe1JjZ@NdTT;nFHit0Gx)|4
zobN6DLPd9{&hCz=PM-Q+UDBaR%U~QFS>F%N?+?=kci!G7uOArh#if3vIMDyXFiCyn
z`xjW{j-Z$Q;ivVR4GaXX6B+NLD5!DPgE@jS&~c3fKrGfj+zBI10RnSrizJehVmnef
zfdfIgszV#<MUO0?HUY}X7qCi`X-5DiZ!mRrhwhHQ83FZ#2vwmFw!h^YxQjT-S7SOH
zX61jKni)n$Yz-A~6s{GzJ7{<X6!2ed{DV3%Ky+qqbDWC2lJZB%n>8s-3D3?n-Db)@
z{GFx+AVP^)rEMF%Q^U@hEaaEu=$F4F&&%&GoaZ!NLK_(BF#~N{a#|QMr(MwI`B>Vg
z-KpEv<pun@fq8npaO3A~3^*Jzv?o5fCCeB;(LDPRP4gLL)P7{dnz=?X{isKZs|XJB
z)YxrVHUJh}AwL-0e$;?o*)VMuvGXTCP-hbW4tXCpBHbU&XV+v5_bJV$NbL)R>!jMh
zQLL^lRdY54dixdkui*MWm!pNdx0{?OL9@J5Y3U%<<+aGtaA*CbY2T-t9B<}UI4}rY
zqhkCFDFX@D2~-GK-O+sWr-ekKVpFG_X-XkCiOWgRs?Q2yjicEo*@Q0nJu=W#-FusS
z_HLtV5GmBww8V4aa4SXE;Sw`ji-E+V5GHZ)o*iMj8U9SFNDBh?RNEk6gAlBh@X&Bc
zHr`xD>`Xy|eK&g*@j&m%;GtABLGy5m%1BXev8c7ln1sYx{?E8(8Z~E017a!*uzzBf
zL2$2l8vpDCaf{{AD?f`<*Gnf&8e;4{7;A)Unsw3xp&|y=XIQ)`f$TrUS{_ShB+k?D
z+PUn}gZ0<e@*4EpA)!}!%DPtdmY!FvyYx3uHM$oF`8gE%6{K1;%DZlBCN*f1#c|#G
z{H7#JlV2f<+1ZP<)vM_z@KN}b?MUG(lnRMbkd2510VLhOpFU!ADb2I2Z|=4eN_x0I
zo_23fU2PRQ=oaPw;J<q9e59JRDnU;q<sp3Tj^G09l`x+6#b}lV3`(?T#P<CRKf`!X
z0(J=ZT2-p1Ca;7Z4o%wY*NSLB;jZNq=|`aChza+}wFTQ(`<ag}2gu>R9_VRZ8&3<v
z2X4YdR`<*5IRfKyAz5K@Vug|&=cr-_o|RZNuB;mD@hb1y`3d6V`K|knCH>JIjN#zI
z)s(ZN%@om=0bezb11Y8akuAhxM6VrwE^HZEWt#<Z>|otsRwXZ4-qe-ejho-)e&UAT
zq~OFSRtzatB0H*e!xX-W95Znwat6Vgc82Da)(c1-d<f83%iY%|*qcNwS|-}NTP0xI
zOiU6u43i+cB{*wkajN`M(#T-L48lh;*Ms)amysR_&TKM#6X2-@6C6>knZfB*A*VBR
z3$>25|5z7{+IoZSfVrpQ*C}x*SjVqRoV0cduBxmq{|OaJY(9f{98!4o(ur0)oz*U8
z5ZMugg9Si}Az9dq+j+>8@_xE%91>9-&?5pD5?Y*bhlEy2GSiy2Ib@{)zJdl(1`;wL
z(>ppu0^BHPcA%?Z8ls#p2+bPGr0Qo@u<C3{A#%(%DK`5foTH-4xe1x7ANp=M4-dSO
z_<Avi9JpuO%f<K?_1{<*S|yPO1l1+JE;FXSncyJ=`OshJBTq~A**zH5h_Ks)RZ_9l
zc*P5RjXGV|z`R*_Lb+9FJJL6%ym_uIl{3C4zk#K-HAS)`+)*;Fp7hu(!dU-HXXo~q
zirVyAS?Bg1@>Ofe?>bL}=QWv{f`cl5@KtS>k`|NRWK-qecXtd}51?vQ0im0<X@mT|
z>Q(!AAWdBtogjXiIb{)=0n&KuLd6$kb3uqW9EpzztdF^H6p>``vhdP&mHL!PS}_Y`
zY3W8=C=YwxpV^+gXL&lzE<Nl4G3Kml{Fd9wYO0Gk8>C;2a~0+7zngx?lUPu`^3ftt
z6~gPL<orfKC6$;PL%0K%>6H6$(0eg^C076nqoniX{+nD)(WLAO%MeMUib<fgt*O_g
zHLQC7pmaIh2-dyNeXqbxmQlc7nb2F$f%imDi*M4Hl|2H_iV3p|s9hjI)Gy4-4K@|q
zi5a#F+R!sfpw0~iLiS_DodNb~Y2hwq?eILtV%%IK8LsI?oJoT7(*8iX)ZFc2hpJwM
zDI@!H@b-}S_ywWx3;J+jSnY-}D7GW}CFsm<>?|#qK>R6|b~lU4)hW!~(2>1D+S+m&
zD0XBv#I@$`_Vq0CI)2`rUcu<sCx0H+AVTzMX+AhpdGE4lGuwhzO+36=e+z@+in*JD
z1~wutiY<Re!y&>j&J&5__pz%A-L=q07@Te9;&L&)sKzDyg>Joa9z8b;TRU}2`QyLL
zYY>&Q4ugbGke`00Fupjy==WjR1wm@Wun`JUPBzVvzkpWD5xon$q?J_Hu>9P)L3qA{
zB*-*%{q3CjkHb0kRrUs_E5P-H79eU>JUj14{W^XbX{L1tdNC;)^MAzZY_Ni`X~dew
zw_@9bx7nvG507=but(iDgjM6Pk#Qmg@v546z2abxqSkyjXi*xLuitGDjA?c?%XC@z
zv5rD;OStT2jIbZ%BDoEJy_EJEfT94E5k#dcf8~O%6Y$3?*P;03o2nd*SX8dcD_cqo
z4ektyJD3L$rO$XM_%I_xx1!tR9kXBlO7+*7upz21tZz=R^J}miP|E{RH=p%VdJ=qW
zDX<8tQAs_}o1<|eFf`xZ%)UH7z<gic<^&W-E@z5&H3yo-DxJ^Vdn5+T9Sw0UADR<D
zspXI5sF}Dgzm>`&)xmI2DDrCzlJz2WJ97Uiri-AvhyKZwML~d*M&o~T`Cg;QROlPp
zPm429_e}-0ROqnhilwT(4lHa|$tGR`Qkp)v3f&hm;bx~}1}I}tc6DXx<i^R426MX*
zy+pN$!|Pw~W}rrXx3=^28<z_}X*Q0Qbgi;0co~;C#LnvS_S(&auNh`_|F<JNT|lY-
zm^%<V@dZL?HU0WIDv{In6WO~R^Kj82j$K1!_wy4lsNga;t4;GsL2>&Q$Ml+ldml<9
zI`|~LKPW#LM%DE9e(bBfOgKFdXQ4WuqQ95>pie<C_v$1WY87#ZbHNn!L=81kYJ^c)
zd#F`Kx7v~0o)*jpMGKm3x#PG@tpPWlz?iFc5YDxbMSk%gb~oZfe4mf5$V^blSGQSt
zR$z%!y+*Qg$(dl%)l|}?!gmXK%=cXUEKI~4Z3D|#`RHALva`rHEeB9U7ei~=+Rt^6
z(@*@JZpEiG=OZQHF@$j*D2y_=CrwWJ?Cv;KF9QTk-mn_rMQ_N@Uq_x-<(!~k(s5+S
z_EMaoxwTTy7$ltUL)rU<hF&VB97Y+ZUg*<lnV2$6c~#=4wbRGdJ~n4#6(bdt5}k#1
z2(kJN!1EJoOVnwDW($GzTIk68#}=C%UUZ`fLmBk8Gwq$gpMm9DGzK^+bZD=Tc8wNZ
z+_h&_VkKzli4Tg|Ku<uh=XkmL`F`Jy&SkwK(^no8Shgba)|~tgG*CCMnp&vBMf2n$
zDw*<3a<pVrR=?4Ci<PTX0Q0f23>T#{+fh`VQt1fF*dbJ07+Ia@@~O_Pb_$tmCFGW1
z{(Ujy6Ddt)w3%VTz3(SoZwJ;R6ftcc$|DeApm5ZTg*4BHXz+a&`l=b~b4I2gDh-;3
zYKkQ)d4N^3Wd@qlr@zYkke@*{)xb6S<&LC?$#$pJ(!u0Vcj@p;%ubs7S9Olp`sgmh
zHmgEn+(I)^T_OI9h3)wUENLoDa}lo7V`sXq+}284U=3)hD}$^-9`S1lm4t~bSmEbt
zt&j79Cr>*SpH*%3_oU7#l9$<o2z2g8Xwl^Mxm*pM3ZXYiEPy#QD>|n|(c>ax?UsDd
zqAUq89P4j=Mii(lrWMH2{vdQO4@hbi+9*0s1;)O-vg1W{-$hJZ4w-B9(KhRK$Chsg
zpKo?(s5|JoQ{sJm2lKsfG)71^6T20l1U&-#ah9JPoLrdMQQ*dOpk$WwYjlCSf}F_V
z;u8CDh2h1|g|FZKgIRH&Ei$?1ReT6L^%9xqL0pD`Pdxt=Tc(V+*Cmu?)PiTq&F^a?
z7=OGtjfobDjebxiBDk4Pl_rs|b}AO(KOb3{FlHJE`MQDfTT%??dPr2IC!Kpd@vzkz
z2BC}fNxSc+1ii0{ztL$s+FZwUsT!m>4dz4NQI9pilHwm5D(v2E1u?@XfuFWy>I(uY
zXh=t4m7AxT71*EeC$i7kN0<Ha&QsLxyOIAnhrb&wT-cSg?~;<2p1TpqfC_Lt@R)W#
ztz8I>@i61pmx6m(FJuhvw@0v2o<F+{1%XAW0-x@hKqFhABNNDhZ_GbgDM%d#pF-@i
zEg{5WYa1Z1<+aKSy-bHWRw?^iY@~ywmC9j|$0un}yMkLqjEicIo^$Azyli@P&Qs9l
zAJ~Lv)y^!<T{rsL=Qq#t!SUz9`7hH@h90<wVfjRu0`^cepMn|-wINDr1|T8d^OQ+~
zt`SK;-B$zaA;PY8(wMv9sYs|P?H=`Z&mDfkrUC$}ZdXnf=AxA<{e$!+-W4BRooyLq
z?76VTa1irpL`T^COS?2wW9qLR1Ao`d87|$$m&-EOV8mtgufzB$GVDIB5LVLE3sAH5
zI=vxe8+?h@LM;C$SL5c9bra-uafIuFOqcD%^Bt1V`qDo9L)LooY^crWft|8vGcB&$
zgesDv%k>cg8V%?0>`N$VEJQ_nDgHRpe;W+NGSFipIQKER+N*xr@d?RVCcv4De=|&J
zHx|#(#<P<XONSG@z~!BfUckUcCS)W^A-PR5%BDR<fIH8l_;sASoi1e?!(f;C;pKX2
zP_xr!A*DapM&hn6upMxO7{lbvinHv%7xQNfjgFA=xJ6RxjC!I*Z}4u-C=9V?JF5qi
zzq^aWN|;}Q`z~}hh|X?Loh%kfRt%+Y4_r48D4W<4h?+HScML%>{={{5gUhmHYW?bR
zR1AB#^Zxm1;hhJD+zRhO3RnX&t!v!Z+h?mV%GIjPP3CL+2jG7$6A>WmhBki#I^n-M
zwf_>(vDUG*Fmn6PyTmNz-+&H3g6B((T2KgS=z5+xC5ahT+pY+Cw6v8drR=gE-s?XH
zldY_T-148U3wUw@HQ1(DgbuEO>1kRuFW`52q@jQHM#XxrZf<waTW`0(e=$INa=Br&
zQYG#JNHH%JOav*BFS$c<fyg0B^Y8tNNs*K_X(h>3nS<g>l>E2z#xhVcRr(T|Zx1Iy
zQp1o`3}H1*$x*9Z9fwh<)nxp5Ng8K+*@^X)4<l~_`-v9RrMKrBi6Qs!kJEJ-`tJ3$
z<o80#>q#BRh(@5Zq@}_X2sOqNlP$H)NfGG$PN7oFv`VQa+&w*+LCxhT*@86x!H$|A
zrKV{gsaa!)#M}|nDWa?-Yg~B{zV=Vb)au5~gT5+W5;z*n#01Q;a_>ZBb(k?n6!bm|
zu0)gmX?r1!n=9am9yskwPW!)Mp0=b>r#uJN8n>3W7>N?8)U}hX)ncqNF;S68ssLrt
zWOCj`9FBK6N5gE|X}SufB#m3It%8@}ycN)@efCeJl?cTuB!$`5SMim)`P&HqPy4=<
zTmB+Jhw6(_7sF_)mtpu^+54hc=~cKcy~`LvvhV@&R9CiHI${s}^kFeqt52|*u>Lq6
zr~R`krjBcC-+T9V<}Hh(UN(p&&$gwS9b2n>bB8<S8+7%#<gP@NP=5vug(5Of0^7H8
zBk<xH-$PgRBgTpqZ=pdHp8^4e_!A3!&nS+}K(yF!<DZ3e$uyeYcdkrZ|Ej!judQe{
zDC31u3>#A2#rSTJ@2Z2LyoW1Xs?3Gxcc#}xIDM{2TYEMqE<j)e^ILm!lYj#;OoD)_
zMyA9<<~iyx_@<awyAqIrKU_pBaG7B5Pup0^Cuqa21rja;*?IJ5F<C4A;8}%D*IXkJ
z(U!$_S4CPi%w=ij9tyy=Up^Z1{O1N(mzz5mx?HNRrdZFL+?EIO$6p~vGf|w=+08Au
zwC3YzvrlSYT{^wTvISrmKL4w53WhM^S$_-1>6caXUnm~d4h}|k|G93w;^k$36+1yY
zUsTnrlE^`Ugs^1>_)dLdS?i5NdIqv_8GrUER@1zM$`F3MoH55an<j*acRZ#`JgRZt
zKs-a08<zL;1ph>f6dWuh>|q$9hPVwFrOW8$EzxP?M`~0ivJymIU|MJP^}@1g^4&2u
z;*X?<`%4Z;ni`F<?CPYtFZlaW;Xd^f(Sf{{{c|<6h=s~y*|e)g0=pKT^5aAA6hJ_N
zdRkrdAM+oO&|T{Dkb<X31!?+gJTy6;(Im7Mpy*tCMqDf|v12aMv_3DPCl_H9A*kL1
z7Cfy=z<R8RQl(NMw+1u3m^TkUH;nRR*AInfK@|h>hHog}LJ~3qCYjfNZr`F5ab#Up
zA~HEjaBaim!;NuuQ(Dx4a*#fVFC@RJ1kpU=b24PV3#U?%CW+e1E*<>#a`%|*f5RqQ
z33usV*e7ieKZo%O1PtWSO-3Sd`^K~YkLz|uypIc}!KtZfN&g_6J&X6IpKXlWX{io5
zHSgM)>n3GW&t0@*ZHBbL(XKwzQhyDBPS0NW(%$#OfUUFNzPHT!bI+2J&)pP(L7Y&b
zY0nI5;i_#L)u!CM$%|uS;B)nzZcsr2Gc!g-5C<=A189QylCNuuCw>F+A-3L+>FTnf
zwcE0`+5aMoV`($kz|?(XXpl3BrszI<=KsWIGBC&f;IGBkrO_Ef-_!gt1J|!fjNF^$
zB?p-4dWh<bJbQTVL-D-ABiIhXly2xY($OuwZ^<Y-4@?~M`M<a_Ae0QLkG~>bn%`5Y
z|KfepH?#TwFwAZJlm11^Aa`G==AK20DwwWK=Ydl>i#i<+GL>J|9d?V;VJi3&H=~RZ
z^sQQ7{Cr>UN8m#!DD=P`^^t~c4P7_jsrhoAxrpUxlAKARRkKBQa`Aj!ziyqaxfnL*
z9nu!vIdT%bsNX|t(KAx6l8)U2VhAI;@dsye&t@9yoY@2T%PkXY&a#(CDhx`dBN~T>
z4I-TFPq4+`O55;{rWE39`~(d`5(&%5!)*j|s0SgEJh}-eiu9*a$6H|rd3WX>QW#><
zYKF%NqIpZj`@ZpC0=vEY=kEeiwAGGHExkH(s@&Wcj`FWFPO77UfkGqi&V<gy+6<_r
z=j3E^^YFkT)e_7U2*g*(f-HnFo7C!UK#a<AW+6xSzH$_)w-zxx5HY52XUE}LUxOX`
zU|}YdP#Z?>Z>lR)27yZEyn#e&5#On%Gx$c6493W#oQN##v*^)L@Q_Ki-$#TJd~GdR
zauY4A4NP5$+K$;{<iFFOl!v0bW;n0|!I`9!=nNDkc4_uAX$8&DPsJY&LD|Sh`PCk5
z&};u4ijRNMzwSGpcSRqLG^U>sM<887gq#n{88Kl8@{Prd$n=9FzHeZ8Wjr>n0XV?d
ztf7cx@cClRzr*~5bnt-&3uYj}8(t|G8MBOrnDlY&%$BwB#uajP<_rZ!@GI4q^u9r8
zWuJ3oO^>>}8JKL?+2)HpQFVFIF$c~WE`UD>30|>IhA&tf<+1l+%VN3R+=}L^0kKO1
zHh;)`i=1AoZ3OeB#UH>|2pl_@dAJzasGx|IAmVUHpPB0@l+AgYs?{SeP>SwZHfolN
z5Yw6Bomnc}?ZrB??oSfIJEMSA96YTZM&Y*=z=+ip&J4NulW$vhw?_hF9&PrDMKU(7
z@2fVz#sOnKUO_m4-zJuR$i2^ylBLNnXAmD~)Qj<WtFRE$EDmTRK#-js%c3SN1?I`h
zQBBA<<0dHZmk1bzF(I3%nV(R06F6<ci;#)OX}}9omQeBu)~D(Om#<+`wOP-;ZK0zN
z7J+^pxs-z2V&JeL_}&7EmIJ)dfuz;&kl#{|I51+~I1;JSqY-+ru;;FJUO?^Q&n-Jm
zp@Yq-;dE&awOfVe9}HMavp)NiM1)6JY76sva{U!4c_0$?2O2drGhSTmjUqC$`lmE9
zy?_rFSf-IjaVS%KejjM4N5cX_Zxqn){S~mNSmH=ke)QOH$}1LEsz{;bCLYOm=;u!4
zM`fkM3=S_e2XJi~{=h%Dl2NKG1Zap)2ZT@OEM&zql>#xD^@Lv@PrHOKd-TeIQhO~S
z_aw6zhWlf;@uB+6M<aKa3tQmzMYC}<4;=Ri(CUqLp3g_#lUJz7Jp%r0+D(oRg^k;K
z)#^3$F~4hGvSlh5_6yX(#;4#F#)z3nwVDU0;pNK9gRgL`wIQi<r@%Z6SK<iqm(f7L
zU3aIDrs+C<NLw(_T~`-)>3v7WAJ{}mG_A-N!=<4<Tz6pg0n{`5eQ5g+_O!=FpCW}4
zA?asnmO58Vj*kp&S$71wB4An1Ot)3~p$b+|LdWQ(Jm@=Z`%*++j>t?3<igYjk>2NW
zU?d4wH%~~THGUh7{1vR<JK}!lLlm6)fZ2M`UEm{gC<8u7P&^wOZ%jTZQRECbbVKQ(
zjpH`c3|PUrEzL#uu|03Oq@y;T*2q)Hbp*L^KM``1Djp4C`w|GQaP~q45uw1fxWS_i
zp)<!DIYvz1+;+^6I*4NWXlMM9E3okr%L^e8UZdF}SN5mbrKQ4uM)M;<`fSBwBqO)Y
z{w$BFNapt=c%@WsvNCtewm`g47+jhCEFoz!PPTmmcWKx|-&I`L=}q_{SJ(PP4x-dh
z^#9ZqYJ-MBC7QfVF#upG!~}~m`QUuvy~=QoPEggC@{3Xw<dwPO=<21dbe0E?)<c(E
zG`h5<RhsZiseD<^SM;Xbxd(lNUqAs7wyr5B?^PC(SWlGo`thEUhxK~u@^O6qnOExp
z<wwePgmf3{)W~X!)JPecS}mC^v4%92f66)W^J9_80JCo=>&BgB83>4K{_%Sp{@GE{
z%A<rx)Jw0cra-Txr*f?sPmQ;4<?L_rOBOO;<nbS#DT_6s16fA#RI;AeZBD<IR^D0t
z_@O8@`kNL>m|I&N$`~r#Po+B9@{ZQ5o_&ThQOJi*P^=nFH|}mG!E#aw$=XO{g9Bs=
z!v48E?yN^<mjV6=DVcQiL~mnCaq`4G@b0A^7Tdn$nIy0GZ|yR}nXP_le+mbr_1!Kx
zK$FI*W;){AsjVa)Vj95qfj}&L6NjF&BU7T8ELDh9<`k{T<}RV6VChn5)DAwa?>N|q
zPHyJQsT$qINnMgzn{oFRZ`x~njV3Avh_cfU0mZYjUJJ3h9YkpCW!~ll>A3j%US~&n
zLI$RZ9GIU=I}<^@PyN~V_3%{x5{4d=M*V3}JdrYVf3pm`9BuFzrmlWqaTU&IBVSS@
zIZup69NQ^o0(q1ZNf1UC&(1K_g8MF5h3{=`y{Wh?5lPxAp}r~HBJbY(5~t{-)eaW%
zRfkhnz7Do~pEI_A=pMF*Ym~*<^ro7jn#aT9QQ5O<5^Xans6@~twe4iMiCYu4a~UUX
zRhZ=}#`(%4lI-xLA(;w)da+c`EgEZa#;$@)VA&b@^zDx36VSCoY=>Lg?HQ|e#`}kW
z{IwGZDzEZ1S(3&j`xcCbtn(*!UYW*_FXG`r=tyKMi?SnT%moj0vD-pjXQ)-P?l=?2
z6Rq~-P8+$<{Z|=&p2cY+7k6*Yi!)>U;O6zvW~p3w-TDCXQFSC~eNKmhN{3NYhK93~
zv_5!5CNQMuEE{Z(2QN3RBKkBT7z4&xB%ZYTn!l8fO~~fexsAv1_GUq5KWx&}6S&zu
z&O$);xQg7i-qMRRDo`AW%bTrAgFc}y-G_!{#qd=vw&@KoOn$T|+VAYw5Hj`)IAQ-%
z3b&{hb>+Zx;{NIjpgr|S{eA)t_d|F4^LLROWIm!=lL^NoA-kYr!wHwPXQsJ@WZ(YV
zu=l&IS9?TnIJtF+nkUL?O<Pn;BoW7RaY&lO(8A(5KO}vO%mEZyr@k^tqLTeSp)%j4
z@iD|2kEX~%W8SOaLk^j9xbTDJ(U_}7<$(2v)5mYW>GQp?IrJh4({gnj*xj3pyh68#
zJ0(EmtYXCwtAHQK5sHQjeQy2viv^n*0lXd?Bz`+Y(!ywF&a@JWnfM4C)=26_x)k;_
zL^&L4yBT>>Iug~Ql%jl?W*8s2q62L8%^*eORC7@?s(4r@xM?#tJu6vsk<LPj!6|E{
z!|}Q##H{L6<4Ie?-G}*UIlRRpx;f(CR_<Fh%eb%?{dzv&edv2%JjHO7bH()6BYhR>
zSDz_W*ODi36U)#4iW>Pq)DwvQp6(bB{@0e$@%IK_$J)r{KhHT=>RXEYqi8-SHS7l}
z>b>Oo@Gk<!n}Sgdm-w!LC+CWkfg+5-#2Jo`n>ar&9x^V1?FqqpA};04=5B!VB{MH0
zHC*6Rn9O_Bk=gn;)_r@WTh=#tP4GX!37`RbgZ_7|@TzvNX>Hi;6gq)+^ZwO01EH+M
z^!ktyc&n8`k)f(P4(hSB7=?Y2L%pc1-J1TKJey+>E|@gF8}va%4<G`g1k!)*_Mqwf
z+D@2sbu`iJZh>qEj1E0yb{SnCUj^xBRt=>z$$V|cafqE`x!nm>UPH)18@z8OF(a!!
z)sc!B>@(aTW4g@7yAWPRc5T;NcDW^@;o)%c@H7b4V~M?~B5&XhivuPzm;LFyi1|vF
zyzhWkWKCeUNjzB%9+vn2x+T}K+s5zCb|T4)O@+C|4c)nWYw8eM_;X#Y!Nsk4pT1WO
z$y6oVhIr7n`vs`ovTLkcau_jj>Bc-=yV{!ioIlsln6egtkL(E9fI$`m&^(eZlQ8pi
zs|HNr>C>gMa-xRGU()bg^VF)Mn8v;!xHAp?T``gAEMg9rA0@oU>5iHnJuKhJ+QmE}
zbyBHpmOs;&gfj6i@ncC+_(ZcNe2~I2_X&e2&Cnm-<AJIE_=;A0IF_UPQ%C2&LaT5E
z$mok~%BCVeSYn1fo3fell`@%a(G)=1ls+rW2B^YX2ReDRD9lJI5lyHV*Ie|J#*ikb
zh%wrg>QdS$cN+ARPi#u+DILiYL&>~6HHZm&8FA6K_9xv^o8VM?hkrr52Ol`*CTDV?
zSDI6J(sszXL`;CSbwP$CeTrPqC-+;OT3)LLg6eK-3-oiHZ|v6sK8c&F>!f9E%**lw
zrPm?E;}9L74>v${IdRa<^Jm?pV54Gewwt>}riL%n>TMq>i`QV`aXNb5P@W7rp;w*p
z6*YWkM7?G~s4)QWGYFK)MjM$LITQaH2n0TcPq-4$XAE_v4<l*l>Un(J)4OvXFR6;1
z?FFGaFJP6sLFbsrZn+%=sheW1QlV<D^s%)gHpI91;1{6BQ{yddaJ=a<*{&1ip3)_L
zli*ZYCcb|1MaEFBdga{ae?D#HgbJBUzwF^7Z&c6hSS=ErVcCr>E7H{mzO|o&|8m(v
z;18{3sZC;pu9!4Rvc?&#`rP}D7d){ZAV^~l7$w8PzKz*quxGYj-4A=SGk{1@r`%MA
zCv+4f-&I<~=(Q{b??jRfYeqFL{MvPhjgmyKJ+p4Aajd!jHHMiKInNf3bGoK^!iSTN
z<23NB>D?^Ex^Y9xjVPeB<cv<BFYtLr<OzL1UH1$x%;O>jDWJ6<#Q+?9AWi}b6GkEA
z)u?3*H(dqoVfpp4j(G_Ak91B|a{W7_dr9Z#^HJD#X;|+J6xRk&qMeMts2-glJIK+r
zwT9}Lc{dAcUm`y-Gx34O)+%0Js?}dN+Jpv*?hZ9q6pIc=s?p^>4yzdO27hX!Wpw{)
zqke&DG5+KT2kmIn;CnLKRXaK}!+wtbgqW&MuRu0NO6CiLg_h)-+_wDCC+?wXv;F`G
z{kYW~m#H{NE*>rMRrH^mUJZYZl~(q@6T?SbwSqXFdb*CU@7u}l)93dUq6ic>BPIyN
z<Lr%L81eQljQzb(+vX@VSW%w@$eE@U_Fffuj3wYfS>XXe51u8eiDHpF9Q@M+wu$}3
zLX^=MAwB8fvs7!rKCDG%+-cZnFZ66L*kVextw_*j0OTDQh%ZkS`}d(2ilxD62V7<H
z^W=6ubc(6usC_Z2V^*a3`AwH=q}3@y%}2gb{hI8^HfKt0E%iTk04d$G)aHMwz#hjo
zn>1>@wC|WMSUS@mg9EH}P#bxLo9s#kFexBLd~D#h`e=0dJ%BH;Wo*uXocBOod>2g6
z!l9F=IGtu>>xyFd$~n`R@+$i!r@sWz8Me=QYfv|9a_OqAffuDV<~FJy2UpX3Z~d)(
z9u9|ll;k1V>9ZYYc#mIAySRq&sJ0QfuJ(fBp<zu)U;Z(M_MFxqZqts6DRPN<^=NYn
zbs`=bK^S6cyG>bU_EI9drL8RELD4fp0~-TzyEQ&((yfuLQI@t3+9$;cb?e?0gy4|b
z$Ae_SD}wt`AT3z&Bry!?jd%GT^~F}Q>1-dV_6zRcRm@n-K}!LDjMTU`d?zoRzLkkd
z#s%akZt@o;buIM%)k#TtGSBK)6>4T>O|*VGmJuMB4`#V)j@#Ou&q(Y$V@OZWFPF!b
z$twH#dt+aWGHew39O$423kQv7ZEgMc6_efw`lJtf;ZLS+a4`7GAhfKoKl@+nK#tQa
z>G^m%UGHlyuqVb$5h9Um3I(u`%nh|mZdx!=iPLh$$0at9g+xwuJvH*%Fkcn(E-LdH
zUFqnvd{|#<!AfCX#FqG@ezGx20SpE13kk?nv5*-`B?`6Qw)Ghv_AHSOsb!Mpk$oiJ
zELtdNC{U1hteTbkYl|~ODKBK(KXx3hb4{N8OB3&L+R7b|gKc^++;?HG*2W1ncB8Ul
zra?X1OvdD)s#QVWOY&@>ihXaE_D^0)qGUi(Co_Igzgreky?i>Z|F)x%9C1#+`wz&H
zlsdFz2jl#ZJw@+@w8j#cmy&6?o}EI@MeU|*Q#=Goz3$<XGMLKa*tKq~wx;^wcJEKr
zeD8oL6;>klVzLpRR}ET|*W8V{SRC)L22NQ+ds1QOdpu+{v?h~G+Z~umghC<kpR}&&
z@*1#)`YH=KPg*t8e`Z=C>k*yJZnWRK8{?Hblv<6pKx=O=jS>TK$~qo>Zp!Utm+IJ%
zw@()>9hVd9)Z!8j*X{?30DUS^vdASG@0uU~t4p!?s#QPu?NY$;0RTw<Gf>%<MaRLw
z-p%&ETt#lF|JbZcApK<Z=<85D;S=Twr;u$)VugWQk0<?s<C3pf7-KXBWE*~7gQmFA
z{(i|=)4HjSf-GFgp)EJ9=i=geNUPy;oW?wid`xgm37SA9+G@F>o!L83-LEFcC}DQa
zL`*XrW5cAM->6lNKSD1=7d8wBw`VNkm}++P28@hdA%`)|T;Nz6bokwS)rJkCneFdW
ziNBUR35>273N3#}|L(mqG70gTp&aTVh$K#5e2XIk86e}Ge)nG3a`%7gQB7#q#7O<{
z5)6ku@t^&;w+N_Sfhjl|=4x%$qLnL;#z=v!ALvcg**9wG{T?vxFtRlml8<|wIAdaB
z&>>G_Pv(T<X}I>~M9UrO^e-SrxuS+I=;89GGUH!3GD60N&i~PMK^cfNtj2H(G)t<Z
zOw+2=L?Yk&N9T;(sGSwA=c_yG8e}Znc=mXHw7h3c#+<YQYe3U4`bU!aMlju9)}1_-
z=#W_#IEawud`w?R#yiA`pP#%L#7~V)iUKdB(h(W@Zj<U}L>^;<H%n67qf8v~!2<E|
zjCh|!eN-R0M|0t<vmH{u5IGmIg*01isVUl{5p!g`ru7s9sN?ieOZbD6eFiLB727g~
zo1%R071+)&y61KvMx|IfEx8g3+StrzJX>c~hy)~XF7sVeci6B<cF^1lloz>j4s48-
z3NDkD>U-$CsC*<2kYKNq%*h($+P=pPgxGp!uek23U{J)q$ng3_06g?k30$c^=K{GD
zFx0*mY%d}ucFmb?zVL3ZdAYDRXHhb!o-EgIC6r<bg587qgPPh5p9;YXc%MP`yx5PY
z3m~1uX6$oo4)1>Sjn4%B_=f@N#MnuSGB4Y5zYxs;FuDd>;&XhytE$yT?KCW?QM@;T
z@^0*jyGjuJApq^~F-<d!rCK4*Tu2RyK#0EwQq)A;+_)anV0_zR6k~JyLua%YF=?zH
za6;SVDAExc2_g<;xFy^9ZF?UkYL{AlDlWkdOiTWPWJtyRY5URRYr(&PFlW6V3r^Ku
z91C&TF;^-*%{YFDN4SuC>RW~$;!r2Y$Qj#>I)TYlbK?!Tx%z^XQ!lgkoa4IN{4#{K
z?LjorZO8W|iQtdev02vV)5jSe7Hce!-UE@)NLdDbE|CB}E-Jf<h9SV*UXRom#**c(
z2=Qm64h)wOwa=gpVMsN6g;5U@&{+RSd?x}3c&1+&MB8TL@6S9~K<uJsAj}6KpAPwX
zwlc>Piv6^g4Kuc@@nym5G{ajFD4^7UjM{EG(j-+;F(K&g9;Kx(8lN<v+e1lq0EzqO
z$4*uE1uS^%VK83E$P_+~U|T5q!bmYe$0|DR0%gNL2W?N-e?Z_0lH(pF+HrKjN0a^@
z#y0r<AoUP2euSpC{SOw>WHtyNCo7y7Uii7x`|HxiJ5Z5DhoDaX7D;oDUE6fXRFsD>
z_mLm3OcqTNb$b#k$8Njj3U4jUQfx1TJBLxN^)P?!N3B*#mL0_x_**OtLU+th)J#@d
zm;&HYFeN-5yHn1Q$5X$HSr3S!`Ku-wLPl8*JZ1SqX0lz@)yfqvLJ)|9Sj61dW<TcN
z_<A{DLIS+sX2H%~dGn!MA?RJ$I~wG^?}qB+fYo)~;K1`g`fUerzxkPPRk5@K3Z(Yg
zYgGNw<OAEveG||hVG#-mYT2}<yk7TKd;;E~cdbDd(wIlO*+Ru&-s-*JcA-F>+xTki
zhRmk=+zZeK{)6)IBm(qGWzEWTd|&;#Fkq(y+TRc?;&*&GyVk!!Z27Bx!vT^Hz$M<X
z`#DAlt)L}HI192E2sDAlc$C=n`BK&qRLU@S8*-H}ly09(eSFT$%URr9v2B*!rhR<B
zkj(0*S!3eAC(H|toT$a#w*U~|9>9<(;ZJ!MTkh)P^~L*3<_^f%Hc{KQby1@n<t4P-
z<DW?7Un(TXTU4JR(4&WJPmWwos%=TqKED>pjDOgCLnpP=%5<QJ|D2@LF%pYM1;a{y
z3dn?|cPb7PUrLL}P)+-^fXO8;gnduLsmG!@;BT}@{-jIL>Z%U#^qoa%T827Rwz3Pk
z!xV(dh0;R6WkTFJupg=$BiyC_G07Mb{3~OZ<{EvU(mu+iIs0Id<)egFP9uc6_7<fe
zd4CMcAki}R_UV4jw6pv9&F@DwL6NiY$v{e7(y9Um@l4T=dtf$+QlHazbDK)QGpwE1
zozzowo0)X<e;9iQ=FHkGT)5M*ZQHhO+vXG7cDiHRwrzFHj&0jMnXl?QRWns*-uVr?
z_Py4+7<F_VTjIcsI!5KHTYVh@V=1I~9~06kCPmL}b0V|gM_r#@@-#ycWEd$GJg5p`
zsliXlz!%CW&_=!FjaOkQP$Dp^=-nEarNc+MbC*PuIey-vKRI?%pfnpFQi{m0urijA
z-Q4&D`5;SqACILj=h`U}4ozBEFCno>{+DeOp?s~czPMtwZmpt8_DL_)y4-)~S_q=<
z0!<WJE_jVJDuWgIcQejzI8|uEE-}R(sKoH^B&L$oO}qw$$;vVtnoYQo6;C=dahAu!
z#!{oECbUK+<fQ4vrCSM6b)ik8)gr;@iTP<bH-%8^iZ4DD3hIP(sSd()>rHzKc9uB|
zg@UW?yndI<j*usRxq&zAaWwfsN;!BE^Xm#@V_@$QMZEks+~Rm$@I5kLMGmw}k5a;C
zMO1J#Kc3n_<nz?;P-E=ib?@C{KKX9s?Gp^1Ymf?qQAT;mmr0qXloi>kM6d4><^mm>
zu?3?ttD}s-?k@fQQ>x({zkC9v1${o0rXiFA=h!nN<!xVcZnuO{_fsuk67)C|41+C*
zeuP(Ka5^0AQe(2_-?4r`rPsH6oHu#tFF?NR$J0c=?m%C7Rh!}}fM*s*lF~^6vg2X>
zxkrfRX;kFz1NX}Kd`m%Bj~<=K%J|L94fl2|Og8St=<y2!0m7M|GcIs(d(3?G0?aY|
zXNmpTruADW`einVm8QQWd_&YVx&o1E#M+ltLLtbE5YWqSlva7z&34N^diTdNH5`U_
z)fM9=#;V?wePnN3tPvFXr#za};ulon2R6i-hde*ihn-r%tZScm=>xy?|6K-h#fNJh
z2=vVz0{;)5GCN~u(|=f?eB$-3h!|0Zw(cnD9z}<y{)Xrt<3kbEqYTnT)BD8BI9k;Y
znn>7|*WY)r&uUUF%WXOyWo~h%NOGDm1eaOC>Di(5JwHAkJ;Y?(&}&czAA#AZPVU6G
z`6(jE5K$fp10fq5q`?9uV|<H&X^<!y4z+S&DG0S9@Qz`O<#KX!!n)L!u~B}|)Ac9g
z_i_bdFgQt^{HR$a*w!-;&ZUKDv57oXBRFR%Bkmk(MChY!O?OASBe8?SOrq2D2%gL-
zZV+XC<A<hu6-nTVU2-A0h~EM(Iad~uZKWRHuvKqu6ox3a_f^i8G3}7cv#^TqG&z^j
zHp~}shahR9{=0WnT0)!GvYyzFkHyqZr*bth3zo>U?7&tp*@RJ(Q&O>FsausS|9gv}
z6Qj!1`n7*0_H(kxo8RCIqi`=SzlD4>&4Itw{3^1@DCM$g*){g%c;w^N`>dS%b)SPT
zu)RV_;MA|_urw-??KnzSUY_F8kfKBC5G1I%Kv7QGf|Kjiu?qg*zwb2vPXEZaS^*vG
zAJqzm`X(;+{~g7vQogcUV?g-0?AaYLaH^lM{fXVE3!W#Nw@pS0;6G2Ot8%K$lMsu~
z2%h`$AzyhB#9YI;3ls5ld%Ab_M2G*0(c4t+mR>^zU2u0doil7+K!2@4IAN7IZu%2m
z>!Y{7zpyT8jw~<&q1GN049!A;pZIt9hy!V-03cS77}K(roFyMt@VHkmW%*3}$CfJa
znKihQrUeWap0)!pDLO<eZEbTeDT<{oboS^^!vULvQSS8U!V!|vb+g1wMb9oLl}3lO
zY?`)??5X5=UNe<~h$shR)@kf<)CH@N%8H80s!35CJGKmoS=>m(xVef}+Fu=KB1yW?
zQZYf>xG5nP82#$TnCglT7Z4Avjish!yFyo%)b4nyT?xM~{W+K&_n|0Nl)$A^C+9sJ
z6XcQ`6cKo+rwq0iDXmUpzx|D4jiLZ%5Vk|{U^Zcklr`ULq#r&}EZ(FiKEJ5u8Aiew
zO6h$H73P*(Zamk)BzdptromZO$8%wm5Nvl&q0HnZ=bmEUDDq~Jgkmn0cc3K9T5*NI
zxmn1aKLw`iW#(MSf~kby@C}_8hc<v-c7C{X;_SToYlU^=w{(l1OwJD=6#o`&m$)LA
zWa^Q#BX=8}H(HJR5K0fy`>>Ohx*cy(+FH_8;^iBT2x9wdIK3M`EWE9|`^i=$26OkB
z*PkQx72G)oU0~7)6Sxc?t?u{4(G_O?cNn`4#B=|*EeZ;&nQ^Dp(yu&!8ujV0ljYcm
zr1xzf>bUG_s_Uu=n%DGBO6k8W?a4AdVx>u5O7gm;Vhkg3D7GvuXaKfEVk4dT<=<He
zJCg4*zj0Hja{~ZS?FjL#kwcLlZDS!!qd!aqi8kht^VUQ!5;NUXwROCRTQ<3y4SFx|
zv!JU8ea$!7$WS6qC)ON48$4plpEh%Wb|3X4PcL7#)>qqa3QNelNdm~RzQ)q||3g0k
zsnWU(^!<<Ig8t(hXl!BV_#Ko<XQ8SB`2+a>5jEQtulOBSh4AP54Yb`DSF?%0wSdZc
z^rxVbfI%QowMdVZgt<XGAL&jMo$r1-C%IS!@W2$l?9l&t>dBdQgQVka4Sw77W=db*
z5Xcvx0?CH(KKSXT<2V^hUQ0>1Xc|prAT~!Jm$uokKFw_9G}S#OP3uZ2Bmv=pkA&67
zbigp#rb9E#Fn>xNgXjrbEQO8lsR`zkVqh=@y9Cd3gT1IRsDtGNAVjVP$}z0x0<l})
z5jE~~KLf5*0rFB)dq5B6hAZyxRWrePeo8%p5E80<^dL)(<ir6fM(ylliA|MMz&2T&
zsN|)`9rNWd2gQzg4H`ANb~jVWqoqXzYg$I3NSs{iojE89Z)<}L9N5{WegiXR(m&Bv
zAP1dvdPjMxjte;Il6zK@fcr4C>(-eBJKJ%t(|IDJwn(sbCh_Lh6$*15Al})rWW$m1
z7pszc3qSB>=?+nI$93VMFAcqpNVCgrzV2;Q2mxYuKr6@+ufC9GfwDb~hh;*kvq@rU
zewYi-YHVP3ozO6?s+)K@qQ6G;bvHmKHT(up`WqUJvSc~KM1_?utcv8;_9Gs6)F_*3
ziU+x{Y?`V&P-!|nRj`^OqMU{108CU`8A?_>vS(fwr+li5J`S&5@}B`-uDT@+r&1UC
z&JX5cJEBitZn`D4pN}~#Sf2d+?mhn@7<+R6Ls#@YUeTfcQEB;&QrH{)L$O_#s&>q(
z*#B2-w<3W`&`&z2wrb55Kj5ieIIOUyaxp)$3@l?gyf~o{NcHJ;bcij9YEv`}Kazcy
zb*0nI9Cp(i05tLIc4EYq-oVq%?dkBs<du2Q3uYW?p5oSU=+`s{>Neg`w}Cf^ZMJYJ
z4o7gR@gw?_SiFS83&~L89!xaL0F20QGIp}#vH@)9&XbrQpA^yd5>o=uK;qG;G0Vts
z+VRG{`bs)b1SoU63Wp?ll%dFoUb40T8p(783O1s+ZIS-*hWvPZsIt-bmkDU18m_&e
zILYQn`@WGw3JJmwOcJ4&ix7&Jj+<v^t|+MQPNbJogN`}}tTjh5FNYCQ?{khCNZC8%
z&>dcMOiHmg_{mw=yr0bJ`+JF5(s2os7Jl=$wLrs=CCalmm9qM_<ZfHdwZUd%yOH3v
zucl~S-62dn?<%!0Y!OPp%D8F^<kGywyCbzzD^Y=zzdH4o^ce0uD`GasU^hhZ@wV;2
z&y5-GhQ{m=gtsN>LWi3(hx8)zIWobgKX%;S!_R{rGQjJe&O>~TerEB+qVuq|aYPqu
zxC=(IoC9ztc3+snS1~j_gF#1tByM&4_PufZO;VxiNgWYdq!!CL=c+=KY+_F>_Gqct
zF&t>fB!E48#*2xU{PaQ@X2|P*L?qQ5imEHCzb_=9C61>RXP%cP5^j*gfE7E9X?Go@
zKH|=wm*ZfJ&=i97tv+346(_a#t%eu=!tHelZ`K8dF-8Sa^gexvqFxb_*M{x(E8;P$
zG+&LD2_p$pp~_BehUtSAM#&F3dmG2}bUgaxx~FOKbPb^ph)+$B##M5G+vM*p)E9o3
z4MN?W^>SSDjXbPFXN%~zgpWp&D*8MO!lZgw`%--ADIcnceax*Ua5R1GM%MtXBpXj!
z7l@02lgvg3)EEJzSX%L^L&x$d_x<4k9*YqwPn{WLQwMnJzIoU@`IDLkn?ls<N%gYp
zXAX-gli?P`F7B6WRaQ|>%+N~rz*GtM@}f$#$;;XVYEX;T;e_udSCe0SgjpSt%`nDE
z=`I#q=k4)k<EgI8vJLOgkc#nLv}`#Gag{sle>D?@ORdTq3^nN7pp-@F6Ff^`7iLaO
zRM>6UzLHI~bH{?Q*s+ZruXOGYVJDybbh<Ba*EIXPQYu%`FIQa^H05+tP)dr17t;Se
zrff`H$;DilHjL3v>UiJLOLD>3sNXN1>CM!D38K5H*3YVFwR@)H&`tdZP6=tY20{C+
zv&KgKM>f?^-w5FRk74Fn8vnQ4^1^@E(R<R<?K_%bj?O;?#dXz?0xBpOkWobgNo4cK
zYJRKRNkS^$WE?j+Y>{O8<Mu`&OAHpv9&>0-WC9(^vqq2CD$Chxdgq%|WjoxlVDWd8
zyia?BqEoX(B&~-<7yKb?6w9z5Pj1C$Q$P^Uiogd?n$u5}c?*(AOvWItP%`-^`MPci
z?3r7uFW!bQ5~Y%aoYRt!WJ07jVC#)XjX>zSz!V1p?G=Yjh_=z5dKl_P6Jl0`k;F^_
z&rTABE?fy3TSs4SBeHsq7qbc}kquRe)TmyGNazzJm8d&Jsm^=j#F{O`HJDEVv$4Qr
zlTiluOwKDW87SV(vMER87`%cqOu4L>$dZ2QuIdkw3J;{_%uRw#<xfTcJsvlXnqb&y
zt-48JmIJ~I5aVA37@bI4&%LectKou<orlS_y8Uv!)u3S?WMzUOo<W^w=wt!oRghgc
z_v3}`#UEct)oPL!`<(T$sDOxSeJ=*8p$LAuvSrm#R~5Ehjs;OA1$|^bc0;1XzfiBQ
zrGqH!vx~ly_LI3&+vhO0oA6-Sn~pFwZoJZA_1iESXE=Tn3;jFA2~NkJ*Q|SsLfS_S
z{*$CUl&xQ8_BYAiSW)2Wc9%M2uf!dSvba7sI6xb3m%n|*o`3N4Qqen3)s~<7)D9ox
zSE*@s8m}c%KE{=5&%EtlC;*I+rn>K;#o<F1%#q^)ONn?X->h+tFR1D^U4Qeea)#X$
z#@D%}-T+AVMh%Bkk|O!>P0n4YF>~-tc*@MYU1M(mtb2Dsk@OXq`sYk)=2O+&u(7`_
zP-R&A=`<n@gu|2OGTJ>TpvLEOj6e@iqVKv%z4lt$xo^H2`QxClxtlA*c=`AqOB0}~
zuHvMKJ=2$LtF7dz>0jnzS{{}KEAJ^n_ZrsKy6);0-azCPY@U4Cg65Sk3QQRpEn@i*
zo~$~236L%cvi*pBVSb1I_QG~QnvM}FdlaDXL<@03Z*_A{Jy*brJn<48^4eJx(<$(V
zWS7rV@0C@_V})04?d<5njrnZF-8>M?7N`0)NdQ!s1K^?uTI^bF8R*w22b?xIRJu=u
zy34#aZHL-c=Ey&MP;E@&Hyu@rH`DqjsO7$m?WGWX50hcP`yQ^UJ-!P=ap7KD<{7@D
z_n^&VMkcr<(8$eFnF=7)rGlL@o3}l|u;IonsLa;-HIWwsi|UX4tFIW*SSQr-<mY7)
zIM{z4H3h%XT&n{q<5-Mombn+v*pbsdoy&0tT|Jz7A$Ff|PoE*zKLeF8t;XHJ3i~Jo
zGrU{WXJ=>jTQxCUs(9M^#yOMDS~X@5fOPdqBIc((Y8$KennRIk-%kgy1=g;)aok0L
z?U6#;N0*<Sb%di9svjO`b|zCEsSgkqzfb?}+kSL>Kiu`a_H|bU*)__)Gnvm3rJO*2
zyv2K9>d1jUCZU?GR9R*^`{02zLy#&-ie!!&qS@)JhJ-Zk@|}{fGD(<9ULD41;Y+Ne
zvqJ%k8RG@KW`NxLfmETiEMeB}^rK8=+#HO$Xqq!akMk)2EQBR2Z6z>8l$N^kDbd&w
z>bPD>gXjrpYGb#kIYwV0w@4%#gIf^Qzk2PgiTW28f{neh<ShD5o@%HxB|~C>ah}(d
zeXH@oQJuJ1&o%|qkA?5H(m|;&qi3<ty?C^)LY%hH`oMy|?;Sm?@}}<2y3$kn+L_Zl
zT<tEFWam$xEbzy;g>*27i^!j0VYi9DKI|9(mNEjdt0eu-4GCA3^|MK^a>TsTCfP+v
z+71PYxQ@zOcdsjWST|lMc!u|!!zf;>yUL!I-2VAhxO+I&4ntZq6FG$8-K+gXGta65
z%2c0@ZIRWN7Axz}VtRf#<{Lg1B5W2NwFtNNa|Wsi0lA_vg7}oUVeO0LDND0ira<rg
zW}#x~D_t=2=wpY-hN`^!o*MZ^QKO*R$r+$s+Z#wT-~Ex~FTW}I=L~*1TyhD-W;JUK
zEnXeKZ#d2zHH%LQsIHV9JihzMwt~-mdUaj-;B;7#H<w}%zlHbj5o{g=zUh;s3A&x?
zRNg4%8wT=4Z+HDB%%!JB;$~h>r&b?cM`sR*Vp>@|hcQa`o%BH^wZX7FKx$XB4xGk;
zjN}t$D4WogqiX%^cN&bAfH7OuN5JJ(cf=LREy8DIj6{@NgBU%TN5(Nsj1CWxsYM*v
z>78q#W?UxEsc7&ru;1b~vT`XVyPvLOZajnRfQ<8LbhGY-4sh5D5EL>1lx!CWMk-$7
zuZUb0cAAgV;WI>mO)+G8GS%NHy)r^!KFmZ!ux@qNJB*Qa>82tS(7!b3`OP96CQ;UM
z+zAbZis0`&Yqb7Qhxr>X87~^CnYoSrT#b%DMD7mD0(yWkH#@*2ZD9cCQI{%&B4;6M
zYGJhGim0ufh1!$5OaAbRIqQ-)A{K{qukeQc?|?`VOu{V4w{-*ipSN-6|H1cEq-OJ7
zGmY?Bt?!_`qf(DM4!4*$DIL~2$p##aGziz64-Fz&OzX--8LMLLHsZGxmx%j9Do}fh
zEV*%aec5(o0xk=lejR~MEohz=xETh26)oT1rEidl*h&e39TjR%{mdRu)k>o}9CF@k
znmv#OCecb9A1=;xLJ)U|HJ8XBNv2Q_iI{82(&hu2&F5Spuypmqdxvyl50#-hH&NuS
zG*T*cF7t<GaiM|$W}&y<K8qP;0H|sjVT}b<Jd0T`GODqC<j#<k@{X7|R{hTQyedb#
zR*s||lu3p{8HlWuDCaKdpwu2y5tIiO$nT;2fjThCJ2>=)-oU`}Ou6Di&QS2^yU=<T
zdUBAdqI8ALQ9eHWwnR!IjZE+|4OFTUNpdHv@Y6tlaxKfYkd026v6IAasXH>-j#dMg
zAacKBcJ8M)6ptzhw(2%rN#wE2mduC>J-xUg{pr>h+Queqzr+2}_T4jlZ^@IKvd$lA
zF8ZU=g<yuJu!hvL@t%Ca=NBp*;j8_wJp-sm)<Z1RpDlWR_P~>c7RJJ<gJ8^(<}kSN
zW_7*j2aT}tzT|N~b&i6Y1QV9EeU9|S%~e2WnEzOpER)3agE~+9_j`a2x>Otli5`c^
z^$pYx_X+v53V8E+!{%Khw%a>{q<W|%N_ld5J=q<;+E+7bLwrEwOZ72i@K)!rgjEgI
zE}Op927g+m=CD=dzTj*Id*M_i9vvG<{?ZtP5?_E2-DPQ@W6<Umt;>g;EYlLCIm2;1
zl}b*R>~$#<*K}aW0@0&-4y%L#HP;9`|2xx{d@05qm9F)GwUJ;d+-|c`QFEWyr4D#F
zZq`$Q4KY4`xu$NV%lxi^l6t8UIKx2;q^buPXd~MuSO-<;UQKwEXQbgi);BRQH#GB|
z!TZ8r)l8n`5xJemoC*6bkv|LZV8vt<RAG-!;9bHa|LlL;sfCqgr7xdc32neaF(*be
zD|=W}^oqZyfuk4B_Qg=d+`;O)lVF*0K3r}b=3PVh)E}^G>2sc5f6juiwOzwK=M9oP
zPKR4_#kn2(WUx_x-TzB3o=u@iNn}%ZBo_3Ua<g!ZTE=2ROy6fUa#<fo|Dk1MLwh{_
zxaEvO?r~UfV<sXBO-IHSRkIO>PxcH1C~sp?IzOJ*3e!T?dfHguoxZTZnB3zzDl^~t
zbc&HZul_K@>ERFwhs8a7=K&7`wHs+43>&;rU=?--vWwZmx(h^C^L?y}a!Xp7DlF$V
zB!@I@x42`R4|!{fn0tA|+lFW#e`2LtwA4h4Kl9^Q2%<W<gLOYDQAQ6Vv@tjn>|gV(
z_HEM}ne%2YSKHnx)2w`pJtRS!RYBNI!{4k5Rl!A%dEI-$|Mv$*V=D<;^&3&A`ab#p
z$&KRzur{Fs*qYh>H#o^OzE5s|0Vedy3o6^dA|cjw1#}Py5;7tJIk!|Y3u%>%&|&=X
zkwcDowW>T({xOF?I_s$9ZNRsyyQqg*DI`I>g{!l(i;t&UKbZdszarzLA~<0y*S-p(
zs4qOgK_G-z8Q7JGg_i*%<3Wy)Bz^5gq2B#gQxBf6Mw{4Ktf7i|ss*mpEi<aP&La#!
zVAg^dI7>dPmrMl++3P=`D6e*)^g=OSxRG-0l&Z&lh4whIp2DioO@3QMSjN~fCzN}5
z3lM@iiFAgIW>DDIkL+)WJsmO%Z|i}UuFOY8^Ht``gHu4Lq|z9`1V4vT@~i3ct|i4s
zWv>H&M`C#kQIlu>TNV<^Z6MuucPT>%$Rrq_3~mO?syvD1>xo#wkWAi`nX(J65$e+c
zAr8L#QB{Tx#_;NhreCT=o7aP^*N-`DGdx1ib#vM7T|HgLYb+u;sr~UE2;kl3AH$b_
zeXsAKK=Kbl5|002DkObRg$xOV&#9W!!@>l?L3(oCBo=e&YH1>UoO9;Fc3&Z@<#Zbe
z0*%b)^7p5yT7w|rOV3Y(zRL+_=4l@0$KIJ<f6e$y<~mr?NIH7@X+P}f%^++?jba|x
zOwh{uee5Sv8E8y0&CM_XN?$sTqsCpPIXB)tVt6fD|B=HKFvYIFIRQ39TzeoMZnkQu
zxhMX%v{EnensBBBg`*q?6AGs{DkAvj`JGB&c%MApyhQEt(KU&QMxZ(aYWTE~1Y3L_
zqwt-xyu!0kGU>7rUxW3Z^678K6ap<m+r(gTERo<BOe#r_!WhdJ1ID*u>H)d(+c4!D
zZv#FCP)M4GKQInH1eSdh9rRTJ!TB69C5ZRs;Ka*{(72^Bo9&%`EQ=g0#?NNuDgObS
z{D*kumPd#8i?7ogIH8)yn^?xipf@YL4(4TW1$YDmfzViG9sD`W9I`NNnQ?R{;EK>7
zUh%O_1R6ggE_S!=$j<ZL+n&|%beZ_-&e_2(z_5@TElt89Q`&{mt%{o=n1$8-V}+FH
zM-YF5b%oWIH1xzA;@`1)cqVFZO%ohEXpo5_fe;%G0|aLg$x@8*B)6_+8oQ=u3e!MD
z{XDl3#Nj>lP%dwNlg9QePIPyUuk#Hp{mwR@E|4Gz4B?tPIr_6st{)04jr=(XqMj9V
z2T&mgG(7yfFs2SH+&KtCWGrw*cy^|x)axm?+<O|nFa^{XqVr=|IA=9p<Jp>jBck^w
z+GV-S{Ad*0rmobWE7q+3G`ufQwOwejFKV&-;raL1TUhmPk+h%en!WUFRBVr@S+!;F
zRUbW0Qi2c>09Utk4x6=aD9DtT9e89#{?@?1(j5=ZtL_rW5Fh`%CrkO>NsE(A*EO5Z
zk|dU%9w)NsZAzelCjokYWmnQO#|>L5Ej}&b_&x!XIt&{1FN>U92O^8IUh@P=Z;2TT
znPn?9yE@j!>w~@{Og#H_c2wHlLZFL566w{~hD>6+SeE%6ZnAj_io8-^-i`=L54kNz
zc}VxQl($Hi6xc(tLfob0B>B~0RDkVfM#w13S@}Wr(-V|65K#f$_l2`EZopRZ4=m{F
z%fz^1_(Xs?ec}h?gV<|sD!Dq$r(LzU>qyK3b+fh@`XpX?W3-8i$F8dcJ=}Y?{5AFH
z_0nCP;I44PQ7Ubuwh9t59&MdoRH1%Tzkw_{o#jB*D!yuLy;*)`mWj9>3UoAg*2b>X
zaZ`!zpB_B&s5=Yx{jMCM8YmG+9CoP`A`OH{DFeHPr}LK*_Ru#WR&KNaPl}@TmD?|s
zDKmXKb|KC*4I}^2CCZOgx&akHDWH4?0&+8|uUnr+Z*s9z^fT7t`9Gc&s+Sv>({Ftm
z5bi%dD~9^!rnb&D|3JTKddaUzAbj!X7^NeVl9AO76rfY^DoS~&KxX=9JBzBCoXhT3
z=-=9Ix8iMmn7J-Za{v`;`CmMo+a1;2X}xOGE(a!Xcu0J#==k&ET-w0Xc;Qzc!O$V0
z>FP#p$FO{6wEc`mH^M9F1pg!WBZVbkfOL<h%UBOS0K#g&gJyRkNOZprMFf&eAtzTj
z$VPUV&GU!f5Hv&<c(@S|^b~~ngb$oDzd`S(gC<dLOmEZx$#vF<sr}XOHjpI-tU(u|
zaJ!J8LAZEwc#sf!5z0O>bMlfS^^z5g7<9^f4?grVzYYZ7$U9|wkjV__xa%O_ug}kJ
z^a7Yn@Gg$5hlRp!v=Vl7L;w8`wF-LH>y!KU`&)PC$A|lYhZT$zp<>Muq8$Wp_)YFY
zJe}k52S~)yww~uWY#JUgySD51R(3yiEF|9%Dq<UcB$}wq+^b^v2#EK!%}(9)+?5M%
zp85)8fC<u|tpKtX1hAvYFi|pBz!&|UMO{QVInjBp8k&V0Vt+D(tct~;1G-MuT0(oQ
zcJ}P+?9Wb)(GyFpe)x}LvuD`oZEy{;kLBAxRA0S&JHJM!_*eFKW)gcIdxLR7FwRqJ
z*;RU2n%O55*4q;LlMD19NSXTB2^k3atjqc+ojWhwb_oryPa!@tSs+a%l-iZZ&;TH~
z;|i%jOu_TOXy1_%u$&x!6``@8N1cN8_=n+>Jqtes)d%o)dOv31?c2i}qT(*RS4-hx
z_z6|V;!$|vs;*2m;KF*YPxHo+A~j@62$T+Uo$9%h`Etocne!b5*8j9FnRg4A8w7-{
z;iJB1nMx@0i#8$0y-)PjhiC05Am2M}fL^1WX9)>5V4P^AQ*o9Y3*qXI!SX3}_i49S
z^~PjoGlcI#Ji@wvVCiROJY#p+`EIam_k87I94~@5v%?m^kO6gU44nR`CJ-uM5=()Y
zJ>LmtZmE@a-N;|;M*lANc0G8tGn}WoyMtp38<7JoE{AC+(vgn0o4+4`vTea8ma2u?
zExDbEm>Fv}6?i(TMJA-*-~41Bk_%QIHNN?vbZzvpG~35m+TgU!eg#JlBGUk`n4sL)
zgGh8o8#9HkN_RLZ$K(KSUIKPQe0eblN-{9SktB=jIvTjB483D8?GA6+NYZec0MHMt
zYEP!%cfnZtktRCM9|@vfmS^KxF+LIHy`O<F$l|K=6ZztJy#L@id?kb<VLbQ^zyZ18
zH9J`Ym-!nh704iW$3ZDfaYZXS#3S^;cGh<Z*)k@nxZ3L8m7_eFzwx;dck2a}LIsB-
z`6mUKu?v*7=J&W@T@UCUXy{X$)1TVj0DsPBvAMFyZJF;HwG+YdWJp3_*G{?6Ka2HD
z47n}I97aH^T@V23J#WpZ5e1$sN5AASWl_+czGhf(6_pt`vhujDd{8Z>;p>(+9IJhg
z^QbZ7fg+w{K|X#4_8O6;a*{fdfoZ+_h{{;{r*n%Q&$h$T9G|$ivq`4pzXE2OMy}>P
zl<h}eQoHZ%XeAZ?k5#ISB6G=2dR1U7FzuTazxitmTCrr!@+vcNudd)w$JM&ATk37J
zl@qF|SfOJ;zf3~vqeonPrph7<NVoNGwfOrlFi*4d_e)*EXsUv_zryoDe1!so#>lB`
z@KuFpRG{V8Ih}gkvKN3XMp%7@UQ%X9K&~Q472S|e$MZEyJVdjbNXjq8RwF~iJoCoU
zXA@k$%Im)rkjqZ-MiJ0+$}pMg?Nl}sj%bMLsmY*pUx+6S@qm_&Z<-iRF$0x}g?<5k
z(bteHE<7BpypYdHmndW9y2$R%O|;qCkDS_$(^Y5WK8%%Kep!z%i+LQeu}NEOn$1@+
zJxfWmbKRv&U$7xG$*#20wb58Al<M6NS<m0+Og5*La6A93ywih08N{Hy_pWqgVlDMa
zH`#EV-Mo8MnC)}C--JYkNu&Yu1ZIV%=?@NC9WIi~P+pGH=1vhpW;<mzdcrNBKt6SH
z-!Zf-jINT^H4>WXw9FJkXW3ze1SDQ#%~*EHBfgK)B!WvzRkt}CTW*`JR35BMQ&h&!
zQ36Bi^I61la*cw<QnnXZmjGNuyrhdO2XhJw@hU$9moE?`o2;n>)qznk5iwQyuIm^h
zWup1L*>>)~%gs44@ngi$$rED!eCsb#N``l^%98e1l!td%Oe>Wo^o1zEG6J2H6c64S
zenZ9}$<Q0EO3KVdKwiLFEv?mpN%!clVc@%$ktX7r1*uySSw6I@#F<^qEx(4OSMC1B
zuL{kx$#arh3G|SYqSDU^-|u-=j*;Ejf7%<bm_Hjmc}svdCr_Y28(Xl|opu9<bMxsb
z)J0CtafucbLG$=*#L<t))zPc8{~G3vUsHuvy)kao;#`t9aS71st^>bySD3Q!`#x7x
z-iSMj)|MqtTr&$#F9K|H&?WNA&;#DPQ)e%JkvezSgKkXiaku*z*mgX)w-!sqahC>l
zKsMVZJeU_c<Eg?8xD7#)iiPJ}<pK4$7n0#4&ueV(xMWmlm)drwR_2y?piC(gBct|K
z(ZudByQ~}tPjpDRj|NKHN}L9q_mwO2=eKs;oH!e|-6-F#OdbV2e%C=J*$ZoEvJ)Gp
zd8=<swM$5@3Ta6{F@|z|x9DIy{H=~YWVqeSy;Y35FfoSmuIzQgrg$n(R0?Lije$xy
zkC9X`PP*j*?cDnDUJS*fp4h{t09TQim)}?grnIJK*0K!iyl8M`<d)zhtqiun48f{|
zBcx*CmTckXxa#=1o&JYxV~zD-KBQ^}Qgy}=-V~e@r@_KCalQgy>u=#Iu`hyG%Sj>G
zT~clzd;M>ovnCLZi9fN_uYQ^b*M<GznWeb3u8$?t?g|^avVkvYshOK2OEPgugjJ(O
zowFBGfu4^v-(zTXUNWX%)hlRVxEFZL0sJK=Y7-643%hee!ws#^jiw7X2nmb?Mhqid
zh7@E|#-dt_8v`2V8Fuv=;JpzFY|#RXG@|wKl|1~}UwvOkvgC6LT|DS{<zBAd?Gy+)
zAYpr@*6_<#{uBJ)PwKHeFH!ez{wx&Zf7qj3oQ?l+kJ9i`{`<X0<;c%ggOXTl#EZ_D
z0zo74R--ljs5xz{RFN=SneC)vhISlt>$#M{OV|Ku97AcBEIDHTxXiY;sq6*AAwSU_
zt}#c-oV74_vf%Ep=QO_NGrbua0^u_mRX>#GNFUdXj{w36A<Ufr33Mb=dmai33_?^1
z`J_ps@#Bue08;{%Or@rmz^KOHJPp|2FM(5J6L&BoxXmD#*j%SKF$`weEvE>{9mW@_
zi15iMr;j$J0jJZSQox%&bYIGI<ebpUQ(WO$Ad_=>|NeP@V@OgGd6Y-E(H}bPrlM^h
zvU<8Vq0yGil<Kj$+1Abu9P*SvghQhKjJC<5LcyFNK{5PXo0?kQ<2>xnzppzMNFJ;~
zIEut$5GxTchIHJBe*LzgLnZXxlHm*h{foAR2a$U+M8siW5FXG6)h{5ICY{6PV7fat
zA`o?W%#7I=8cD+<Ml%zHeueY2cW`rXvI1!hayS-)+AA#~@7S|V*ctvON8dXD_!+1f
zRPNLK%+H?xQscyjUOif@)z+eqjSkONyOvq$E4-PR3h_NHr7yGu4}!4SUmHOyHc}nM
z0ZOdagW^gFOdf6<Uwx^6Li2bmHPf6Cqq(eB2<2x=2u*h~v*>NCNhz$XH>!L6GJ79-
zbF(hQ+cpR5qYDwTfo5@Q2?i0^bjlC$Dc$#zC)sDk8)PsCoZe_iE34;iAGz+CyVnvI
zWZ%!=^cj5;>*|bRxMbkRw>>f-x7fIq+*wlMMwNZ2L+Ye^H+9Ur?uEj);?|eXw_4k?
zTb%w^h#^2POO&8`q}RcDMx*z7@5K|c2xJGrXDN(WB;ahB?EWi~gK<o#tha~4!AM66
zD0(_3LiyReFY4!6GXKD~ruUAQ2F67fo!cg3<O(o>hpV-F1iR1Q`B2{QKhjoc>pFeh
zS=Wk4N5>i4?_BG(*mS*GzSrFOHf~0fwacG)iw(AI?(bd-+*t}#J-)EzQ_L=I`bn5w
z6e=>3X{R(Ih^LLmm8hN@eXnUUC4u_tlx3|9W^A}H=rlw3*`sDI68E=4+GH38(|A&e
z@k$H*x~kCnGz<Mmw@V2fKIHA~P?Pa+exCE<RMJfw^y-n97pv6bFJyL99pf5ppi<NE
zwQC*CT{zjQG6x*f_=6|Zxw;+HnNE5er<2i2y#{Yyx1Ydry6DJHTw~-Y^v{+v3P$R)
zt%{)+foZ>r^}=(np|ymtf}elVwzkZfbgLW3@lmvXM!sxCf*<An%r#B-d~#r_BVbs|
zQv^;S8+l%}Ao}fitt1S7o2bqDY%=S<Pk`@;W}fMAqZGyTjOB2hEymN}E#3e#bizYM
zz5A{k$vMJYeJcB#cd@XIqZJ~(USg-2#y8$rM<+X{+e_LLJ5((9gC>5eywC>ntyq3s
z8U<Oe<970xN}RVu;fpWkY*7+nW5Ibee=nK0cpc7>kO~W$GB83_b|B_b_&n=Pqe`-L
zt*i7D!*p5GflY4rEZ#q=G*Q`uhZg+K^Bw(nq31Q~JAXWoPe>^K>H`YjB!<&azXlD(
z0UB{oD%RNW`69y~XhKyw@5-#iH7?WPif1yVhH!&@ty;14R2Tp8<S4Yzj&`Ov#xe=3
zWSx=V#dgxlQ0B%3cuF_@t7wD=1##dkOH{501X%xjIZ~wy0^<81ndqEFTOtEt&NPhQ
zQ1$X~cKbf%E9|#IJUUo|bN5E8hraD29~7BTH|$aOE-`vvHhrTnZC;nzxUytdF&pgS
zB?&P{<cH638l`t#iIMpO6!#0s=!wm@DQuNrr}tgdyC~32nOJ3_YPGp7mheH%emS10
z1?kFafPGuZ#lW!8V?J1o11CJZA>gRG2W&jI0R;loHqDoc@@K$Dd4UGs!Mwlh&T~z{
z-R}hHr~QSSvw357xk4<;ns@&<Vfp9Gl+Z?j9?EjIpLHDD%3VLO`u}#&iUvz9amiq3
zt8Y?~&@oVWa;-WgwwDt%KOQHy>nt$~4g@DE>UKM>6;L)6`pwOK3(u4KbzXnfa{g6s
zR>fPtd`fP!m@2DFmTnHsr-W(uLy3S|AZ$((B{N?)Sg|u)`Rjf>a|;1e#{+VA9iC*K
z9Pr%`pbmIrCx10lY^1hfXfNXp8!n$F6WM;C&7!K?$}Y<h_?Y-BU+9ZP3w?FcS?u?-
zeU!SSxk(bI++R&CHz?BB&F7OaI%7IhZhX9iowR%YGjF7B;iObi6|#aSe*b~XPfa{I
zj0*}A*yCcC!RQbirBXn`NlJ_MI_s1LbrU!0NzOxrLs?@0t@6T@W)Eh_B~)sad9I>K
zc~&{sKd0%(6-$8mFQ=A}JC6irrA&G)4)O8+MW9%>1;TGKTys>#g1_*H<33ML@ew|e
z8|qiX;GPOk)1lDlL8GULlO!otQ$aqaV*9-sXeAtQ?q-Af2Y5wa`Ek=!xUJr7?Ugs*
zco3rU&v_tap!r@R_#kG>3yo6F;W9}2JaD^dI<H#ru53vxT65nA-X@npS1j59l=jJ1
z6R8|^y;yXc)|-CL0ozj^E7u?+p|Ae{${o{OQTx7`xO3Ql1j_$^*`>Ype*?;^)W4K>
z#ZbP|-cjZ6t3`N`I6OUxmYBlHnNetFJRi?Fr0Y{{2FNyOh<HD?-dvFhvimZ#5-<bK
zk9;<tT4F9}Yt7<nha<HUw}d1@?5u^UA<zRi+>y$gZF<U9liV0?Dei^G!UpIve{a*D
zN?1%4qKB8l$ZmxNAcY$U5L4NfX|pxQm5t+!5uf%)cBuHv#6902CjK2T`bm>+>OXD(
zrd<C6Pa;(m1yJ~hD3u}SXP1)&MSz2SAmEs}9~a7rjCV4tmIMcG2O*MFkU`MBRe<ch
z(m%ao4bbE@@OZ0<G653bMiU<xWgZVoLFX@la#sjbKs=s4eRS{xH=L*kCmfqPxeiHx
zEIacxG=ME=*WP4<p%|LtqSog*4Z?8u$p%BonHq!z4nHr0`s{$H5J4uF)7ph=+g$`f
zTnRBxCW8Y{go48i2?Q2YEX}xa6bmd*U_4kSF)6+eP@(m4b1`o$Mr=AS_p{X&UVFx0
zs>>gsZwT0rMQA9N?U-{P)NK(9vdsfh1+^tdAm3I3`P4$B`lHo{fFP*)iiGx8os+{I
z{%hjr=re3~>6hr_#u@dazTa8Qs)S$ZcWB335vp~5QE5fr(ZFo({G0m*mlfQM<6E^6
zb--4{v`(eWFe&DnbNG$;XOk)*N1i)qhvH_vyJFQv;|;l^(pfGwd><^-mRVFmI8X*G
z$C{wD$mHUDM&IYP5OnIbv}~nAMyDx>?xE#=8JcKxG_jaT_SxuCF_I6hS$_DhK62K*
zc*L};^}QrP%pwj}lnWYB63n31<@xP<<%YIaC9rEV1n*dkbIPWra`<39xlnm^9u9f0
z)O-Fs?`(fq#5L%hZWshRDy}gS#5oFR1#maMaFJ&z-^E4R^$^8iRKcr>=9)vPQq<3)
zLM+*W+Mvk?kFbxjm&l(PiBjqJHVeUTUJD7=K&+k2tS?x;TN+DTW4stzPX2u>8rpHi
z^e7C}q~4T=V8gw%sFH{$`aRM3c;xV3s_?V@LV_zmF{J65NPaxzhUSu;OGrO3r+80u
z-dq9z=J<clk3pSSt?b3hEcQy{Jo9HL<&+Md_ntdW1TeIc*nobSRWdAWNNvrNb^5KU
zKcLJ$wjeFcpFTMib}Q9CF+Hm~L~MbyjsfBH$n1or^qp<}oR+Y>05DxNVmH;GCgF9w
z?5|I7ZcTFNs}^BlPlGlk@BCrbO;^o4v6ZNJC4^TP15Wku@8aq8#oLxeGeGTfH!Hb0
zFu!qUFYHsxek|Y-AcntIW+T89WKUG?3@yzTqSay1vBb!eqQ}8+c`I=lSY<Upr%MmQ
zgTfEMJ{}Kmm$5Aiih&G(-UH<@LLBQQLafm!Co3kQ3FGTWxqYMQWL$F7^oTq1y6BX6
z=t<T~^cr1+?m#1(DncG+)K2{~d*Jcr+0<28od%21lv+7v4@{;hG`G+NRQ4400K*tB
z^%5fDR{{E#41qS0e}16B9q1Kl60K$H5R`EfzF|LM5j+}$-fq=Y;ion}gbpn2pqV17
z1N7^mQ&!B_A>AQ_%|TJcz$K{SNgaYMFQA_6QzyI*8AqeW($)b#nf>KdLLRcoifV;c
zXTJj6{n4P(ndfhfyW+?7^M6`5>Oh8~zONo0?0?h^8|pg&%x(WWczmH@<FqRFFHUNi
zggKg^vjsrT@d(4XUD~%T$RW$O0pZ+BDr8hRz$UxCwb{kpl^HA}v6j}%ya2A<zP7Qp
zwqy=akx~eN_G^G%b{xukI9(Xm>R5S&ET)FqgMFZ}f>;XpikRYbZt*?<H^gnPhDPo~
z=noEMX)Th&1%=cUW-HN?z+Lu)gY~yE(rE$>)$qnb<fB~z;(OKBSmVC-hFgn;;`AO8
z(qKsW*_AU73x3$Qu5YJf=H&$C7FknxEg?f<V(Ya%-5NE>7H{V&gyIV!MQLrJcQ3BS
zuLu2M<3ERkcI!XcocS_>?>`B;_3KV{8NhORd3nmWNeHvij!%RAs|-=Mq<hy2eH6QB
zj`?tMqe^(kWd!$dN&RRQ$=r%cZLX+fVvpt8x`h$m75lPY)8|3uoPNd`8Y3#=VU}n<
zX36JwCoOM~$}64q^+ssuEyyXSbsj$6$!e;HChV?@X9wkGtKW*ZYUkdx$dBNmjD`y%
z!Jr8}Pgd@GEs&nU1*m4l6nFI=_a&^R5%*>4Bzxq2^^xT4zE!vz^!-J1IF;)HD0~I;
zIb6MHa)r8$BK$_E#nlBQ6FkbBC{EHvXQODkJfgxiZ|oVW33b;WsDBP!QD3iWMjtvp
z#Y?UE=5_VP)}Msv0M(ufh<KDK-4a+$Vsyp$xlBh-_Qh2QF`JkN%91S)gMF#Ar!%ss
zR2H(05RQ?yp##TjTelX1b&v(MRG&@`ZJMC#OPl)@L=zgjjfJV`1`=6`gG}C(CuVtq
z1`>BLiRd(Uj=`a+G9$q{E@1;VpqS2+JClX@8-hI2IdA@%mIs2Lx&}m;GN(Ub^n|g$
zy4>^d$yp4AV$3*=HL=qY>F1G4sZWIv72jBhXXNOT3B~mt4s8I*8qbxkbl%c~6(+1+
zgOC^cb-fyP9kjaoH!M^u1f>G4c}`{>8eT%*9U<F4SNXfWK{MNJ!xvy?m_E}T+`H?5
zy<{1$2af7}4?r19Lcx~?)o68As@8pp?`VC9ErB&b60z7eiO_0ZM6smS#zf+rlUOPn
zL*hsy3-->IbpDQ$3+r&F40}0(U8zn;Om!YaFSQC_M`;(!w=IwFjt(2ep%VEppIVZQ
z76N1TycGE{$~q?#hT&;hah;7*pmK))$z(&D^!873s!KOqpZ=o}v74D#gY3xc$&U5K
z^$Qi1ZEVG9iwHiZT#?(YtYz?!YW`M3_m>dKqTOq=yt8zA*QbRg+{9;aDjH@~iO2~*
z2DFw=`zdbOm#_+qXy1UDL1{W|RH;OQ7FYLhwH@r}s;jP_Er#UAkd&4f5TcI`Z-FP4
zy5Bi(kD@S#VnT)Gtze&!%pjpKmm0Y&Ed!F`Y`*PnYh{iZ(XAcz40d9b$}etVqk)8|
z;wNN7aOfIS&q!oX`gU<t5e{`H%5Ze4a62}NUsPJeOGjg;8Y_Lj+Q4CE`+&??WF2P8
z$oIfaI1!601D$vD8)_BoExKPq0eiKvs>FS0O-_az;jArKFF#So!Zft9Sduv;4`Bb=
zuBTBMP}x%pqQN2-zClN1*-V*Dn0l*&-f@Dxu6{-$U>p#(O_EN-U?=tVZ!)1Z*9)IF
zO(Ui+HUC^927Rp2UfWP2Y{8smy~U!_@xtsM#eA=}E{jFOgy~56>7i+|j4!i8&2p8&
zf0ZHP;1_l3OGtm4yTHxaStJu3fIJ$>%ji~yTPjP89vq_@WLNtOK?RjKAD-g$G61pY
zLzuGf5Hj2}vl=yCby<-vef|?QUsDgl>~~=2k1afrMkqRBB>KeUfmU#Zs#Y<3FHe^K
z4`zF1jJ?))w6u=0BVDCxPwR*{d~{k>36xy9Gc`e8cb@29aw>W~QL~b}I)T=q*XBI2
zgK~4;M4doV@9abzT&ftKc@&BJ0MVU$4WD->V&z*Lbim7x2xANW_BnT{f?9hnE;A;i
ztn_PQGGaq<!mJ$_$^gT1DV)RGZ&*9sYccu|C$BOZ1*9+jmJAU)beNPd_a5c;v@LD|
z*ByNJXVT!644Q+;PYC+q0>IaRiV(GviQMGnOyg@8FfFyB7*4bSg5vFI&B+Wi{o7)q
zvp6r&1W`c8%%AqQZan$ott#0Io(MNx!Zhz86RIOqv|sk#ET~SgIublVYOa;x`4%-_
z#g$P~v<IcVA_tYH@m7{z%L)V0ayPG)D~KtNLG9fzGpGKo5m)|u^9aYZu&&-A@0{(f
z;N(*T%K=wAuzh#HgSnjP_*`@Nb-l4fXcFLXhYFby=rG`OaNet-RD{lmQJnz2tI1RG
z;6dYF%A_=AH#&m)h8|}RZE1poI@iyz5OO0JZH8&Y*<Ku`HN;L&i%bzszaPBC@`=3?
z^mmQkIO=2srn}4~_Bedjt-`_!Py0*Vl0}-*m`)dGI6xdO`82krD=uzxT|{p|Zc0M<
z8RbvDJ(Sz6m=CW(^Obs3b`4=glfMik*rPaF9{RLB+A2|>CQMQhxA=s--z;v@sL0+F
zR%?cWNyld;nSgG-ZqGGSPsHK#Vg%WIoOw7Xi)mInQw^Lr?>}@?Ui~iL*r$BH_MM;p
z1K*6}>VAIuzJzAJFQI?PG5J^6nvIjQk@bHc_Csol|B@y8KGn2(_7ap-XSS~Slga`u
zIY71i;$4=j<3;=>vZh0-luJS0xBAu19Uon^3_!m(^t8|4+xT-8?S{X=ZP|wiqv}vI
zWNDM@=RM~a!r#+pG-;@1&zU2B9j4}YH`trYWK}ed0Hz7X3`Jo$EM3jc1N$vOA&Rrt
zyhWi(bA&AhOK2m77+HRdzL0~sPAMmdxe}xTRvm@>Qz;559p|v^21ySC0U0s&TV{}H
z$DVp(HP8zKK7J7CZ&buAr`XeOcJ6fu53L3ZUNqU=?4nw^6tNbSRKbv}X>h+gY+YV!
z6Qiid>e<HTW+;>s#W;<M=Yo?UZ;o6mn@8wnm)aRQVM3)8XD6jBl}f9xHZ$pA_qJ>T
z_yy@}H-qd`b8M&;=G&0Wdhpp}o&sq~nBbK!@2AgQ`l41Bacemfv44Fc^@ysL={w3U
z3n=oILKJDWJx!|`r<yG(n~qR~xg2QTUnyklID-|K!e413cgxp5+~{FR&NK#Q$)>0_
zL)s;WIj=HV1Erl37+d&}l~N5jvUKWi7VdYsu=*6UZ4pP{#3OWEwZ0mE;QvB1f82V-
zLz`iCskj?5c#e~$$GtBRbml$H-7-%=pE5N60~^Q2MB;=CIhB=it)jlpkYNy8f*VGZ
zi~xd$nnk{t(a9s=KhXg@A_qP-d&BjMYnv(GoFOOEz6$ttoNmSYhR&!O!<q+^zI`!Z
za@m3{V@iVsS0|GEYQ>vHC$a>2Iv8(KwulsmdtCjkV^9tbq@J4(7|1U7eZsYjS@R&;
z7hGMxyD}j^-#}x2tH_SHoxoCCnNaU<dSJeO*TcoOo;C4bH+Q+yJxC-B{pSQ8D+8AK
z&7w=+kJC}jvom32+e8U$-PS=ink6rvRvT_<qwZA274#rC3A#~tnhK(04UOOCS@!7~
zfIp+c;El~gb<e)i_b{sun-*?QU<F?Og==+3ENf`k3RkYk-tg><k~KsR1?fS&pcF=V
z!j@q?!<bY+0LBh)If>hSXQw&P75<I;4nvIoi*&2Y-PyJ*=-s7nLg=aFeVr`In!dqZ
zwRvC>{xqm2rXhFctRc)H<>!Hbv!I<dvbI;TLa((ci0lcqiS5=d_uFA6mFBOcL8<f3
zIJN)|J87RV4-H19{Sz=(eKz}cY^xEJt&%IgTBXMu((AdFEclLSpygp_`utLxHy89Y
zUS`Ll$e%a_`sm}2@+cqjHJXTL@eMF`O})uop-(??bNZjV4HT}kby|&Zl%SormY_O=
z<2wlgocm{7Xw438p6eve<*)`K%bC!RGEU4-Q|QE4RRdh>s{R5}pOBlCfOrOC;!9Eu
zm;8d#F516-W5VqkT0Ul0ks0db;AE^f1J4G~>u(PYtidZg{<>x<@eDtjOD@kI!3%k9
zoXYx?D?Ybm_*$kp7u4$DCGnerOPSsN$b>DJHE8Y`_p4Sq1Caai##P1{<$c^63XHy%
z`o`Ff{if80F)!#dYIGB4qbvV|PL{U@U(Ut&UR%qKzDqqhw>;QK@0=KDe!>a$dFlOx
z<aeLjK>IALqU#B#b`{YDVE=ies~S{A{HnIDI-2bC)m}Wls7InFg?IV;icDnMmBaFB
zcuyX`3!rw7T_OrOUF%g~!DW&X<lxM^h8JrUQ5=p|ZXi9`742zLLhoz!5b#MXZg;%5
zt^e<|5fS|c&EvPHHwy6|z3*oF0NZ~^HmE|kQeKt1=kD1}l#>>~3*ftK3TH+!K7$#8
zTYbZDNhP%&S&d~_5w)uL`p9mOWS}p{x8>_SJoo6C2dLx%6&U!S|0=4;?dbWcUSRIH
z+F3uaZ$JE8S;6QI?PG00g<&6q6<P_+JL*e>AdzX?-+|R{j6=M^g3fsRjvm{icZZ-F
z8vb3~OJKk%R=K$L;|mO1qmKI;7!-RnBE~TUMBE+c89t*16$1a<py?6h&IYbUs4d-N
zg3Qc_89%ViD0~9J$49*KI)s6>;bwFsJyR1>1}p=ijW$>%FV!v)B9;%NIDAUgl9u0@
ztEHvo;)hM_oE7*^Ju;$;k<)6mmPhzznTj6N)*~A<9Jms#$c!tzGJ*C+l?Rv#>i=Qv
z92!K4wk2IQPT96?+qP}nwr$(CZCj^o+v@Xr)_3r3Px2RJ?%Zod#238>1#{i8I6E~d
zWG6OlnT6pdt|wSy`v$36j$_5UC0S4pKnq4q`y0hvTp8I~dDRv7_eaQ>k1j|$`%=+*
z7jT%>y6-B0-pm$A-st`tYkw-z5ncZg7N~<mquNxOw!9u+wm<oP{^I#!<7kYnK<F6d
zr=s;#`H~o(`w!^T`%kppx7P|h1#8;~;=wfKj#}X)TJ5oXp;+)W@UHByrH0$j$8Xq>
zBeRWXT2^fa+v4cL+_^=G%`wUY-qBy#6&S0qdHRfxKehJ_V+-QUkQHZ;MqXMt^puTU
z6R1+dw}+kojBgDrGX}ddL9qMRpuTmsrL7V!fHdftgX;B>PO9CV=oCBPdW2o1rKSDQ
z9=l;Fm`Xoz8}E>xouFtQ>7tL0rWu|aoh$J!FSLUyT?uLr>=Sg0AoYJ4aH@R+1>GpY
zxXz<qi`e!twEms%PJmAt+a=cXnN}<OiVtY*gzycQjC&rAU7SMQ)@D5nT<k=wK<4wP
zMXt-b>w%=Io*=C!ab>c>BoOs9#Ri3iR48D%Z>JsMzjzBIe#=53F+d_N)pK?f4lk*d
z5-FN7(M|~}rZhrI{1nIOE`^}(NQ?uV2NPLz9)10M2a+m>&#l#?OpCszz(oVn<lkWO
z-z?FqLSw92K}^<ak!ngMK~+HEA?Xs9e*2ADKoI>1te(<bBx~#Kj_n*{>6G2mTV~OP
z0uQSJE}9!U&v4;ws^`dyhH7~jq;C$lsunl4TP<uw41)X9tT#03=%=?x%9va&e$E}|
zs9wx1I_cT-kmzX=+PyUHXtgIB$OVWg)p`)o3Yxjq`e5&}$C{QH;+E{!Ofc_Wc4Wp1
zr;%aCV%@ei)_=DKh~)Pg5Rwg+i#R1ypP>KOfm+2k2sCgYf;+Nc0Eb{Mav9&C&DI|p
z>~WPg%PGWa2Bbo$`(B=b+U4DdAXN~<WpUd8amDh~-6fJ?D^Y}YDfa<wa6&(I8fZG{
z(oiffEZb*yWgbtC6CsKsCsrKz=VY%DEB0kK@Y>;N7pUfya4gIkHsJ6KZ5eIu;|!7y
z<tVvFp#}R2x87oVRhha2PEE|c_03soYHp%<E@MPN5LfroB9$uk2348WrG<BdqoPCb
zlI`*F{)wk5o^(luU{^+0fNlr8(NjK1ln$d)0dFp}CrNrPHf-M6)zg_d%lq?TVes%?
zx-H66wP&fW9XBt=Om@73z$xv1kLhuUQL!_rAqBaVqbZCn%ya%IB^7y8I9E0w!?f%a
zw3VP}VL3Qh2pFjdo#Eh5T{=mC$0Eh5b0qIOBX*peSkvMD#M{<#C0fy&R$6iw$t9)@
z^=9Vu2@Q2-F9p^Vw${#zgTTCm+PK|dEUU*~>-yZgx^~UQCP|Oo5j*PYLR?yK1r&Uz
zyE;j0lD4{dI|9(W%V)(xW`<B>N6rkN)}IAPPV5}55Nes+?W#*5Kteh~v8DBaj>lH<
zq``K){)_X@l{4UIanehdW7O2(Q){Uw<Wc=f6FzITrlZ3U<ukj2W?H4(=Orskww_Mj
zHic{--kjXIQL?0Be95RihI>3mynIww3@c9VwphtN0lYe;yaI-{K{4uu#zdJeY0-dB
zrkCqGFdx<RT^Da-22o^#!f|iUo4=|1xMJbdpZzoL^xXuHKfwR*ALaf~{l(^=PrMKM
zze*PW7mMud@n3){Isao6r~mVltLI?Z%dC)<CXrRzBSGvyNeP6(uEHcE2=n(K0${LI
zg5|nzj+L0CxY;B@e$RW(DGq)YXUG@)gI;EFEP5vldnZP;Xv(eV9=x9bkcy<?5WRjn
zad-GM|Cn2vkrjX@vOg67jMd;@-Om939|_u^4`Nede{MK&ux>#l6e)Y!7_*W?4Lg8(
zS;uwvxIbjrj-tfy@DxE@m<ae>dBxb~FusivL>D8x0W`-2gme~?h`Uh)?;||>SCFqy
z3W^cn=N02HK9SPk*EZA>OarL$qf8%Er_2a%Fx<2b1g8|A%-FVVTLOeH{p!r(jh_a9
zn5kPB!QM!auLfmHB@KATfB|&T;LI4oyOgDg24@ZKf4c{d70uSeFz$)y9*YSRzzZZO
zqi+NFN`p}rfE>k)fIbW@@<ACJsyI&8UFvJH)NZ^@WE*TVW;vpIV9y8U;KKE0FzV9I
zM8J(@YcM<woo<Vr06Y9I@`&Zx=GFYRYq659--QH$JD$pp<{;*p&?^;>Q<HCFwysgN
z^Fm(r93+^p&TkkMMMHmTCpAcvWV-_Mmpo|LCM{(c29GswZT@TzpFwTdJ&B%J23W%u
zZD0W+^_1kI<oa2IszVX2l7d-=4C0MmFBbRM9s7kyCy*5#uZ}DMwM6Cr@;9NDV{I>N
zomiS&u#LNF-k3J3-+W&Js8n6dYGaH->cy1bS)A09u9-*bJ<LzL$h8z+W;^I>(M2ZG
zxPNYn?5Y)Vl*?Y=tTb86#uR(4TkLs8aRAWi)0K56jS6lM#<BBQM6(=-5LCI|(CHuG
zYGpEA@Iq3yOA?@%E6r!zP{Z29EYR=@SFdZ1a1XM8H;;I=Ts`BuKzJJ4VYG*)bc_|8
zHTR2CmLUg3m|%!AtysMggL$;x69x!7*_i0}zd%J8A!5TgDWH|_7q=U$p$ZLXn10?l
zbMPwofegX6tLZ<2t(ULYB_ZZb@>Dng9&4!W5-_V4rAIOg6ZfK_>Pg$=9`mB%2~x`~
z5g*Rs%oM$?FdStPDwM=m`se{V71<*!Mv6u)45Fm5<F%_=RL1UCVJ3$eMA*Xbq#P(W
zgJ+X~MAPmCUsd3G&4Hi|*}g>kr#T<IAUeq4*pk7dW$J#eE7Ub?#^p{7QI#e!z2*tr
zoh#Kn{>OS9d_UWg@ZZqA`R`l)??X3(p0%Bk_5aR&DM{6HI$-_Nzx$5N^$LOu1<7<h
zbU%zhRzgAydU{fu6Dzh3RFyyy*Fq}6^?jo=F^Vn-l<@$R>gxCDC$no60B)4ib7Yu<
z4?|1q`(<G7@Qwrm8P*kDHDU<$+VK-522lirl#_)UT^!t@LQj7hdWwbn3Sq3Fgy3M}
z4iggT0k_^i{s6W4a;HS{R<Q*9Rtqh@0Zkqwk8aD64gpL>z;SmPZU!MJP`o4!RZ0ja
z2ZRJ(M~^~m2=#=B0m+0or%N4)TU{I^LuTaHde>$qipH^EXh4rP1r$R1jg79^1H!<R
z_xW8`R+d|e9-Y9GQ}<b-*auaXrcWu+y=(c*lTLorVTdRiwL$WyCA@yT1F+QaUj(p`
zblME<d{T3gyfB<&2)SbjBBVdM69$_2J~^yhNP3F|h8`4tiB_ZxhLdSuh#ro#jo015
ztbIw>X~c<iWS5&a%JFdS>)o95eY<aS!CKmcoVA5G<_p8kfy0lgn8}jR8!qBa4*E=J
zvNaCd7xAr)*vOd}UC~b&#aZQqv6Z-L(SF>*9Vkp|)mTM${{7n-`3-MqMHBZXUQdJ8
zSwJ$eW`;^PqOoL4RM!C7WLPsHec4inlC4Mkt&iuesR7<?tu+VLm%pzQMRs1F+fJZW
z^F(2IuBCIzRT?MHU-uf^C}dlPrn?+^|6>Z0D)r&}t|<6;55sE#)Xt<YYlm^%F#!r0
z3+^q^feqsZoMUfPy%z%Oq<~J9ra5rPv_+}`HVG6wAarU)bu4B7()@#;<t|&jhTT+=
zR^thxoS=yDPu?gI4S3Kjrs`Ji^$5MDYyNe3l*1h?w`KP%T${~uw3s1DVGl<XMk9@V
z5om~TTLBMF>(6#-e&I`iX@4mCqsq!l{HDdE`mEyCc^fm;{<k@ACr)ea*X6`CJlcTy
zmzBHQ_Rh9TtRUhnc^AvEnV<9V+-`qz8V*}R8?vrq>3TbhV2ZrCRWWp?jUW~lzKMV8
zf-X|9t)x=TPdoOPL_x>f)I<qv`6_{28aJF8$Ek{A(7Um#5XD93QI}O08m1N45cxtg
zj8G*@52^Fc4wbX0uWQ_li<3siBf08M$hOOh*Q3*4O{+L{uUk%r>AU3J8BjwDu{vy)
zRf4EAy#5>rv#pQH_{7t9-Jgln<%L77jl~VE4!h;tDsp7Wz4wr<we6Ovut-~#^KJ2#
z6C1BHiQ3MtZB5r|F`Dg=wYx(MuAxGMEVpc)dRpZS(Sm9_G3(rEn;tE`#FB4=t%3L@
zK73EUoFPtYH8=OyV>CbP`Bv=kdWZR)uI3?MW-Q&*oHOND-eTn%hKdJTFa?YADdO^0
ziO;<ao3yo3h&##pmrowdec8FCT6eKPZ@SnC>N~qHkFIxn!a&VR*I)J{KjI(y=imQ`
zhgd(L0KflB3ex>Mh5kzgqXna}p1sTezVnMwH25Fv)c3!;M4=wQLb38@vFj2sScWo+
zfUrJd9`zVUc$vOft5Rs?&ub2F$u?&3yVSw!O^;id(=vQMypax0^j}oCP&c={T06VY
zJOd5<X)0w4&XD0VJ#y@5OSONITJ#hW>hAtQAev0FX(7f3T_p;6jp+ha4ov%7>q#O|
z9e7vSkQ`lz`c;;zH^5|9d95ej+IUpfM&bTlAS!UhfcdV<WNpac9%m6F-$srMh+2NL
zSS5zChl{<MvjZxurt=~8+>(1LQx}_YnzU7nj1^hSMXbHqOQ=&yFFcXYZ{B6*pca$z
z8CK57!X<WteOHncF#&s$6!J^#{VJD^WrO=`*bDLFd2(IRL2OF3Nos1&TjVl-awWfs
zS$1BP>)_chTWc<he>8>%DG;bQ@MW6ut!xq(Q77Jm0<2$Y^#}C2f;sSJZK}4&R%$5Q
z{N1`r-8*am9H}e>(Cn#<>8|dzAhXHM`K0xJ?gH3iCDyDa5l&0tz@;X3Du^CCeLtAa
z&GJ&TLB7_Z)-zjf5endZ-d+&3a>ovfsjTJ`8QLQm+EbYyIy&68;gQ2sW|_N^diUwG
zU!mMJCEPlxS5tOLGa=^E%f2gculAgJ<L4Y*9u64HRGM|m)Y?SjUiHzsYIyxA7sRA*
zz8)R;xOu5N#Q$uABO0rEQ2PhOZi)T>yQ3PL82#_>)v=D3)0SxB?{1#qRZXJ!g@J^u
zBL~+DD$Nq>8sd3U`EZAFBxryTBmyKpK>3*M*LGc(8CW`+xV&n157)A-G+>a&)06XW
zXIa^O^JBQnx<TTO$-;=q0Nl&Vi|fBfpHY$2Y$!#XoLt=c81;Kh80aN!<P`Cgn}!>!
z(Z8JXtgQQNlNIkqNMwC&5&4nBESWWeockzLO=gDsu%`QC1oc~S&(!+dMBq#i7b+R3
z))Dq41#MBbOc93J7weJ5Kw)~w1b2>z0Jftm5=xqKN42ObA{c|zY!m<#xIA~yP~{#x
zwL}WeGrU*OQf_A&Srm+Amas>H$Y~Uz<lc8QC}^*n2C~J^*ZERbR@OGiX#8o@HgT6b
zrLHGsSd*8=w3+<Zd6Af3)Pa3#y8Vlgt~9B4r`P*rdz#37h=-i&C-eB>_Xk<XuYzN2
zQ{pFHE?uco?t9+-wD%oxBy{e`z?DUJdY)7I{uJ4!($%1QYA{pxH#uD(Ayj}rXc4%=
zz^M^joy=%bQ27cE&Q+Y>6>iS6dRdY#c#}<f7<-sU%;Om$*eC>D5KOMf{R>g+S0>3l
zXx6>Dih#?jSdY<aL}ZGc5q#91p_VgCHmFB04W`_pp_Vc$C#P{veY;JcJvgfF!=2@H
zQoRb7e`DBP@An6DB$*Me9A-C77s`l|9be)G%t^=d$JO;4`WT#2S8%yXO$&%(jm@V;
za35Ly5pB)Rcx*J800Q%c3?)|*6x51*yMGxC<(fn|`dfFBd|Ndp(!!7l6CKpz-tZi~
z-Ylh_p!kHz7b{H!MBkbji@M-BHThfm?kaVm%Jfgk(EP=po@*RG?u*#`@51@e#zrWw
z@)n{Pr2J&Abx|Xq{C(c(a4Z;1(Fmq2(*<tILMz|Acb|Wnj96@KVsX{3o(NvPOnc~s
ze^$uZRHMM*qliPABMC$)#;MVLZ5T{Db)M@wIXif=JhA#wrWx}M_CJ3o6qt^tJ^BaG
z{S31G;QjeoF`xTbJ%%uVqrPgLg>QZ?aQR`H8F*h~+Lhk2m3dsHnU{4~gPA(;&dyfq
zuNO}#ZSPIoXkmfPV~d^Zx?g#k@y7msxmqe~6$h3#I*cEtx{G&TQ=i>R0aWd0o5KCi
z!0b<(>qt@CZdI+1!uIa<)o+=~tHo{KtY^?rF7Ls>hQn>KpE=7r!Vjj49^SJzGY`O<
zm%a+mhwX0V!PrmMj{Wkd@%D{d-}CCb_30i~7;;$Ak3*gJvyR<7*E#O<Z`W(+O%{rG
zmy^ESQ&-Z>*z4^2N7>MAZ^O+*We?A%?`a0t=Qo}gS=lkP3)ADrn~_X}Se^k*#$UO)
zV?=WahecmvRRLy`8q}{DUwto|modEPANP^m>z1wKgIV{6al_WvgM^nfO{KfrIyzjR
zQc!Q~V2wa%)<}U>u%@%TY|wj<pWqcNK<9msuOWc`Fo0`-<)U<{XJ+WJ{b+CvDr+hZ
zpzR>Oy<e`nawzp)ul2<^faC>T|JJ}ukeeb8AXd>)+dyit^0~lAV}<$|`y|k&tUX%r
zPtqNXY#bbep&!>V2lA{|%wW_7Qjeh_<3J+9L`IO^twB{NG>y?iL)Wp{cN6;=r<X0D
z;(6-Mzyla!C2q(@$Sn|)f9!D?G>7n)S=z1W1DRA(dK%($AX01aubg{*!6(7#u~H32
zu>t5?pzi?)BB^UqAge!G#*ZMjU`bZZ^Q2dr^WYcVFi?%th3uf7@+yE*L~yBS+>q)B
zGZu-GU2&DuME+3hm{-1&Lg~`wpfI!s*5{jnzDWd)tezi?Ef-3}i8WFsXuah>sXdZW
z952wMs2%$v9Wc0u+mYuc8L%4K$xiPkMAm95%Ej^OisXuze*&!J{kT3QS^BH$7hken
zRx37>+=RspV)idwFg3<5v_#fV&`oHd<s`7kGj*m4bbwuaM61J0mt!r1D$&$M7jP~<
z_Df_Xf<(i4lxsw`@Tpx-n!37=C*f-4<AVXItBof=02DsMz7bwdfN-simIS=praqKf
zA$vBBIp`)!Kn$I6k00|P=v1t@KHID53PAd^_s10c*w1hyK%f1V>eH5Vp`W<8ry>W{
zBQ!U5$`o#m>3zLe*||dsmCE>EuaGW5qO{8KDP467<Y!u*;p9g5Ig;_6UbX$U3AHG@
z0C+xhkeQ$%mef@J*&KhkILTVi#i*&xnq4%KfiZ*y0=Q4j{rbo|_$qx16Lh{osRJuV
zQPgsnyQQP5Rb?|KF`)59SXt4(njR%%dnjq`_BNMtqtf1Cw*6!U$}?|H*bo?<pe=9+
zE^MX9V<H6_7UuB0ARb~riTD}krZ(&K-f|fQoStht?IADJ#AukDAuC%3VN{?!BlY~_
z!O-#7sFhZ>Tyh@i0fq$H3C+TL`AKY1uYk&P2bTwh<r1;v$G+1`Gypm|j*4NgBMY(h
zfI%}!^sA=xf-p@d)xuKDyhjB<(Hc>dH=XgkPGRI-Ro{iG`l7PuO1o6w%SLxe?7hAa
zkDvtD_PDbuBQx}KATb_XwP{}+Zr@yPXWnK6`g|9Z_LCfb&&pqGy_iuS?KyGbgkddN
zqzWqa&>+J(%~!o2Hr}KfYuBKSECWbm0R&KU#;|n^Tm|fQ?h)HH%Qf&WlvCUa#F1Jx
zNy)?cL)Cgf%Rk|T6N5pC1h<3BD*$uIg1_o{yadZ_ApCYhpY|ja#C~-c%43vc^$Jsc
zvNDO|^KG*3G3jwGbFu;KVEd7SxdadLvSH+?O&u}LABl3f$HZ~_D@x9f7QwhEMq{gv
z#io`WNf0QVNgVYVAH5mS76Fdu?t<(n4mO?4H7dW+td>M+xhL=s2keVo+*tye8~#<n
zL9hp^gGeJil}-mOm(Cxi8justHE)2`kUJhX|FZqLC`%&va$ELk14~#<29~ZS4cJek
zwguG7y>xN_BQf*^2HVHM=Qo!s`;*tnE_#WZCuyT&r&&$n1-A?T8I~HV%855WWc04}
z$L|fH0yeUzZ3a0J6|s2R^&Dn=5T8X=rhH{czz#6GNkmfcI*(f_{VdJ?bw6t|#h-KY
zgpA~#KPG5dir*qm!0Dl0oDu8p(#JyN3MCVoUH0ueXdcs`F&sK<;+`<v(j2w5BtF|0
zvbfaE67zn;7>3Qn4XTUFJ>x@8ol1GB@xkLdUO|~_sJ8u^X@I-o0G0_7y@_yhE#(xG
zZ~Pps_mHs5h#O!!gVX~zM~ulorx<iXx;A}4A?pm!mcZ-E#>?~;l!*-IXJ>OTP)qBj
z{g$DGHt{<msC%Xsy$6a##hq2|&sD=7_i1}WtZ$|hNP>YQ0?`=Vn1AN1+g_4!zG6U8
z$FaGcgj4)Mp%pq%yeT%P62t)!b<8^rIu*mKgwq8epnRCr!Uo<5^o<p4X;N`jvdtFI
z4h)}llhd0EXsJ@-DvO!B^s-1@O(s|fa`G=NY$G--jQ%Kb6GaVVDHpXyJa{x}cD#&~
znQ0D5jrCrky51)bOt2@C%zSJH7!!SIsZyp3+ynX{_k2WTlMwC78(gxN_q`hyr|>vP
z<{uqEWK|-NxIe0$h04hOhShB-E2*BoPgP)U-nw46#84P8V`JM3`(DC?g7Gm5Yqd-`
zRKZ@vVvV_*xVf=6MQsAbKzgNc$QyM5$U$s9ZO6LvPId^76uPljsI*A!Qn5%masd$s
z!}mi8Yp|YrHi9ap{v&1Kfg$aU=+U_3Q~WB%vzh%W(=B+G$QxW|DV306jtbg{x3r3z
z-~<KPwXJ)s<@u%!4Ka)F%?*^@fflHL8SyF$=hWJcD5({TB)F-Rog7-m!$`DguolVQ
zUe31Po+s{v?DqW82UHXLT-B*UegQ5uwyAYI<z4$s9Y4dREZ`x9VJBxL0(}c0ZTH4I
zN;#PCdTw-@uo9gtWx%IzeM*HSiAH>kd2r#t^$Bxu24QN5V#~3Dw<S8ix&TJ`mMj-e
zHyULBz&h`CgZX!a!+ISJ{2`mD7(BQ@aAawQzBqmglH>B!x$0MDEtgkP@<=O?@7ONZ
zdul`!Pcp`qo|PJgF0B*GGMqcs8qB#lVBS!HryrJjF~Qg@{lMCkFJ%4Y%JZ2fE@9Qc
z2Kod12MqbkOxkG)Qj14pip+A?=(qMC4dn7AHwl>8CvIyApNJ_M9*jLh+5+q2miO)z
zy$B_%|8rNyxNxT}P^{$TQS*5@JGra()V+qlW)7@J4$q5RZ>(p(AWY;^B5KX-6pn%d
zotV60w`U58OZOV11|Lorm(jPCbgDH_6k>&}dvAj~(t}oTGUYjvP!e6J3%QYY6$ZV*
zTr8I>i++Ne5{j3gOg7*Rj|!Mu5F0^RA2Ni7dy+kMBFdb#$*PbXEE@XIIO{6XHnImJ
z`U%d#i~NLO?h#=1mV;hLc|Aqg0fO$7o}4#F)BpsPodfN`cowqlq{>Zy{LVrJ8u!Gq
z@A`r68md$27$2y|8k!Ar%dqC7IUqA6WhX43|6Ms5fdpMJ5DC=Wo>j_r97r^R>`cQ(
zN=wM@%0u3;O*oesq=V(+k$;&$jxd2a)=F7phBgUa)l){&Ey0!YWi-B!_@sR<<|o5&
zjgcRE<e@9qQhUl-2PGs;Pi-?QH7Dg?FRombO&>PHO71!_|1nr2G~}3_5<Qp2=gQNU
z__sh~8IU#==nZG>*Uvcx=6o%(P4iNKEKDN&@YM^hSV%{~<N5-)|C(6OK-YrT6&uFy
zC5K*Rqp^yA<}i;%qA!~_5;9qLoGM+2+d})1t%J#pE-Bj=Ced!YZU*O~(13w3bTQ1m
zRjlt=eX;83sQ|Iz31c3>**K0Eu5qv*MKMgIrL`RqF&YE`*rq7EvmX9aioWdofntVM
z(@Za>il0n4Rq@^?qe~3QUF$BFXA$ZZPar__u~%d?lq5TWUQv(z$f_E4>|_4llp=pt
zi(zP@=AFtVs?Vw~6C_?()TV=uZ|y;#{Lpd*WOXClPP079rH*QVFi9sJ7aW=!eMXF=
zDXnah57R6jk0|Q5hly5w*gbE<3HJ2Ik{c3t1LrhHZ-g|@Sh{AO0^wX$`23YlH>%3y
z0*@lcLs*gI@cgWCr*Jk%dq+&;azGVro8GC=2FmoJ<v~q={Ip!55Jrta`6g-#L-z;6
zHN4cer|NkjY?R1@zLWZR)O-m;xeh43<TeA<VLVD-`LE-+vMQkSGq7A%${wxe?6lx|
z$cCs-0!5Iht&-mrl&PYduKRt3*C*xLro|Fzzm#zROjdS&{cKAu46YMZxH^6I08%jv
zaf8|jS)~|w_GQR}ebR~A@jciRV=VEmG|)8xW+gEla(3$208oTWg!N&7#mZJJ1IPjc
zBx8{uY?rpd`(u0B{ZI%@u_yeCY*Js)?e#fovzm@P4SG76zyJJgCIz*J-l{P0Oii&^
z3&xDyH`hM47ileCnwN(DH&qqHrn)!v&(XqbMSKX>$Z(U3!vBJxj28+_j{t-_%k*KV
z&G{B<33zu>tq8cbq%-$wWMsqZ1|=|j_@JmRu8F&%grJnD0e(_QY~6nv=N!y3{9XSf
zfr?nIp6+N4@vVd#QrVDps}9oRDLUgo3N0tIDa=+8hzYKz8=}0ySp!5`g^!$kNb*IF
zAzDcWYIYdYRUeyb5^?fWmYY!3l}Lr|S!mN@axqW!$8efb7i0rQ{NUkU>Hz1S3DHSn
zS))k5N9Ke4#$U)CAT5-lh9MnC&-zNUM>L@4R8xbg2WW8ETFh}J@GkRX;}RX$T`b%V
z;C04H266f#rA0&g(4Y=#v#3|vthYYoD~nj4@7*0%EWyu`qGI~>AYk=w*Jk$*wS_`L
zFlFl@l#kavRg`s<AYrJT{7~5Lh+s^6L<~x{lkKS%c(1iqoV#}TSqt%Zm-8i(Ocr6U
z3?;H$-FTMNsP^*q>O(4c72V&}Tpr5%P!nN^!g9~gO1ZKJBc1Y>p#?^LiZE$I#&@W)
zcaA{oVb9A`rVRXf8qou#;tB;AtUA>49*XN3I6q%NCr5kCa_CN<(bTNNJb%cO+%@bU
z=2%-&c)c5PVqF>Bu`l9N0}POIVef&#E_Z33;iQ*xLiVEhJ^VLJC7d62ho;Sxv8APp
zl!G4DP7d6i(pZXPmp<i(|Et}5Y+;r-wqn6L5{20STW!$6Ng;C65jf3%>)tlD>&V=r
zGaNg-Sy;HU|7zXh<K)tys)tFvfb<A(Vyz=Z`{_h*DBFyd<Rl`0iC4}m`ie}Rnyk@C
zzRO+(DKsK;7ep|>-rlNmVYA~&)}eIzDV*7^`smqC$!d3$jaEvzsI>lb>3<&TUB!5t
z>Cdd%M)+hjOP;a@_6l2Cmf<}L-F^$t(aUG92LhvyvB=d`q%%*?uTQ`45qYn@gr7;n
z*xSY3n+zf((P~-<SVu~Bc(EaL-$Ofz`fg&C5xuR-eNXZ@FAU&=1EkVt-ZV-DoC$Za
z;}x5kY6pbApr=1p^RbZFLJylJ6~v;^h2Nvw0fzE}l79h6D1ws=%S10u?%gA8-tYsm
zoY)3PP$K*_6@MZ0=ULzjMURL`ZOA8?kA!S3@h{pz{BP@cOo>gIvINlb$zba^g8Io!
zWxxM!3PEngu>UDExAYsGwPd<RdE~|^3CcJt<+#4>qjCf|Gw$;}*-hRHuL=c#Btq3}
z{E}&9lSt?5ARz<c=#+6lSR#4*KBKsjZlUtbki01o|4#~1MNZA?XV;&Rbb}gbtu<t<
zS*&A%bu^VB=#}#3q^_Vmn+QIXiHXAO0U^h|d@)l@9ep6YCy9BZ1mb??yvs+q@)HWV
zB`H2`JugLmtsbEbKq2!Rt2&PArE=gF|LqA@0KV1BRHuC7^9A>elABz!!xE)6kgivx
zs~c>eciZvEpj%O%$Q6@{{WG6iVF@3VwAZg_b^c7@A*&EJDP@ak<qjFDSH@$*@_V9^
zTB3-f<H{OIpDafaMFOt_T+7Ak{J0X%^~FBXMD&NuN_6_CJVW6jq|7!lWKxDhrOCh2
z3@n5e2ik4`T!_*tYAtb)`+pUST3-QKwpmT|Sy1SEkOf4y{<eik1BERZD#P|zA6Y=6
zrb8y~bO_+JW9*Q+ZlU+V4hkBx>a#h6fq(aC3M{o<-Zr*yUK=~JoC`63Ae}ovojin7
zRIFPUh@tJN<aFD%2X&|ZMK-%z-QlG5lZ4Pe#bcP`tXPuS1Yp=`gvkb!pD`l4Ky;$=
zlI`GTRbn|@ls17os2~g9v_p+NR5B+wdR24Zm>IN|8q&Ft+*p;mY&E*mNIEs5mSl#A
z8t(n|Waqwc0T)fmH5^*|J;RChmiq`&xYfBeRsrRa?AyS}@ZxZ<34xbPrNpZll3z*K
z=F<4nZh};QZi;bL2p(%G@AfMa1Cx;chr`B|%t&3NJxaWgR?({P2|9^-sQVrLOOD{%
z`19D)<O~Y&o-zG}9=M-smLXXpdtQE819v=KE$3WB(4&Vn8<3ouGn@c59X1sbIWrAs
zxLakuA$zc@j-mnkI=6qSYm}cM!c;eZELBk=)Fiky=PVS_T6Y*7kNVZ%%YjexD?r+^
zSKxdo#)Ygtx~BQQJ8ed6DzIUMGicK-q@Dgq;vc3X_=Ut_(Ebxhp#i^q$-rVEny&FE
z6vUCbE5^op-y({xU)9QMX@w3ObJX!0sON3vX-N|9#VpsZ3e74T`N3qyi&i9+Af6iI
zxg*-?GeU_Q{#>+Wu(@b#+;~nS0n~x^F?Qjne(ziar2&Y=qN2be!x($T@t6`tL$a-6
z6C0R5N?WU6{yI078TT@ybm}Q2<f(!jqV_nP)zG6V;?5JVxSf7bcdD{dbGa77gJgwS
zeFL8%l;5}!Cq-Bgj4~plf0NFUZvTe|$?Ec5UWE*i?7O1hg)qmJjP7+i7!Oz(;F3Sd
zbWoYgq+r#(V_NxQ)VXqn3<dqEC_H&kwq{xEn0qiN2G+g%5voT-Tn-%T65h&V%D4uR
z54c%iDBHP=Kl3Rm9g_)IRROugmq8FL`PU$XDxXvM`UnTVG1a-0XeBoZM%lW@2_|Q`
z%>@Q!<IluWUMlOoO-9UWkZXT&u%DZ*f+M{cSQH>2M#Jl|u=)<(NMuC=Qnli(;`M<y
zK@Isw1y(#I(edDfsKp*R)5MCAKJvFkRf$loY#B|udC?J}-dUf3T?ff&b8HaHmaY2%
zg!4*4t}4g{#;cr(BNM_{YiQ#`)8Nm=k5v5y44~N#hy0p8c4O~z*ul_)C%gb}4p{_>
z6o1>KK^n<c1(M6Wf(TbCY(u8t@fzTTdo?A&dv)i1emCjJh102k38b=)@Pw9PDdIS)
z#dN^9A&s|N4XzUL>NO!sBT6omRZb#IMLhL3OMqHbvXIs|>amWYUw!Jkev!5X&-a@G
zPR!FSQ+qHYulgQuYp?bmDtVvs9xo%G#vU(SpUxg{;x45<o;n`Q9r8S%;@;(wh2MmE
zG(4Jnr-^TQKaIR^K|dSuGYQly28Z$At+Jkk+tOUAaSrWcrl~1ig%@;Au+914dXbFE
zGw7qnx*$}Y7F%AevMk*<@-ADJdr)A0Be>|cM*t@#(gr{x1fdEi&8LPo{TpG;4+aI=
z!ItL9QE}oyQNe{S0EuoQ1jQkAaF!z2L(I%zn>Q94Tad>0AwHA*Y{20y95odK0VT>+
zX_y?6QS?6j&@zH2`m_fuB=f}#jb(BrGZSu&9%gCs1*Dm9#x8NP9DU(dKxxd>+3G&7
zj|?1FIkC8ni3A)AqKo*_OQ{q0bIx3!1<eE13R)5_0`eJ(e7Pk<Ke)BCnN;J)<V$we
z3}2SG@P)!5-b>ZkW=V66L_5VRZqYXM%ky<+bFloQdk+>CpSpdg1Y)Hp-wcDBEoFpM
zAO&#C=GHkxrY)X@Nfv#+&zUzd%Ag2NG|AqJZfW~)4>4oL@yXP(8L$jwT=<6Rpe^&>
zbR(TWg0=>T9845~w^}!D{NGel-bFRLV0ZyysscHqlLO^GNxr~X@iSQnsuZ|GtJ+RS
zBjQ0~Bkr=KZwz=ejK5Nb)iI9l?K%iu7A#{Lx33w(=Su4QEOT(9D*8Ss{&r)`%RWv4
zn(|`w%7J}`Bd)+5LO~P5oTDUcnDJUMJPyuiHX4M*ks1~0Vt69Q0jqFk)Vsid0A0}R
zYB$01FVaUuxMWdLQqi6yb<LI0g!<=01jB$+;MAq^?kx^<b^+QWWR<j&Moef|MFN)C
zq2m%s$)~O1&hIM8l)1@K0KS!*^0rxKA{RvgYY-bN6<tk-l=ev<bXX_uDF%t)Cpv5v
zk|cOF>&9F?zW5Q}*r+Hsbodh^Va4QX2~M{2yi0A~PMSZq$kS>e$Pfiv0G~bA@H_q;
zuO|hB;Fhh|R~4MVT@Xk84zEf|IGwg)-#IK?(P=wPH8m*Z`L0FqbZkGZP=WJW8Yp=3
zG0K5<e)$zi;DIY(8!Kll6=cDdLZQ{Xn4)+_t!%Z%`ijwEqnsp!$Xj{`Qc>h+XNSh+
z)2spbS(bKGhe~2q$0g|J=rt)n%H@`w71yx^el5}<C*yrO&oZYJya>a<U`pap7@}lB
zsrgro9SEmbreBz*I9()9#EOt<PLU)cxQ&v}ORBkl2Z<V}KSCzWLlq*0+wi*$Cs^i6
zn~q4)^t#{*OeyJ{<`s3z)6F$oBFmoWmrw<7f&32Gx*3`n$-z7e3ZcexchTA}`|W_G
zl_c2%c11l1T=ALQu?wUV(_uy1`l7r-b}dt;M^yFmo8$0LcGJI3a^ljjw#58^b^gfw
z*7W*Yd-GQQT%9CBNSce>(4PgsLLjkvQ|3NEOC3UFv=X2T)Qe{qP${Cg1YOS0mlZS7
z^CK<IsWY}xs8_5_)CMv+d1*{m6@0kD$1CL4cYlB_6^<88P!b1`PgIUOiS87+-91dK
z4ec)|+}ba5LmDBm2$C<-8WzBR8mlqE$cK~@K&it4{6%kZsppqS{}ck8%BuG^H8BOP
zPqCCwB-?|uTM`^&SItxIq(eI^N>S*4Jpv&!9*juOr(h|Sfcd8vLpYvWEGU<jcv*X2
zZksn;!_KW$YJq82yQ~B!!UL+|UJ<=$;`bn=!QEaSQU=K-15a!&+zBU}1Cm$-U4<k{
z9<psKv?Y+4V=U%AdZh2Pl=lU1v<@%cmQ%2mTNkK8qggiQ#=}BcY)<zQ00@?wYU1=c
zyZBT<s9wGvZ+2wj5MRPy<<m9<R-~UN572q_Ei#JxZTzkjVZ&pKGAkF6d8JFkQ0(VQ
z{*a^}as=**`&Oo%pgBE|oc2|$Gfa06gVxt-^9vuWblP@F!uo{-a18Rp4+>U6ZpDk)
zkDLk#qymYWoDv4a@o%(X6azfbI^Lh_))JPPjPy|qwT`|QSx{vz$r6fa0`f@|Y9vt#
z9i>&!D8w5VMq6qma9lt;#p;_4;8HOVf7$wCihZJ%l@qMQYA`z*sGv8qc7dPw2KK4~
z{Eo*-V#y+tOUq5dkSgcJ8$R_z{U|0pA7r>N5~D1<9b`Dnh7f~q_hlQaT&3G!idkNk
zXo3Ypk>qduN#2w<t_4YERVN!M!^Q=B@3zk??nQ6AsKBh_S*{F5ce)_npBJ6#4zsAj
zU@(%scO;<m$F~}=lcEwZ=GauFvXiP2POy#I4b7Ij+JsU!YT69x;e38NR2^nr-?@JM
zJm4|~;<Y{x8jXgyyt2XWy~XkMFImJ=2J9c&e=|P=m6sYiT4{kYnOL{HW=}(3-jOUm
zczJetjfp<M=(}~<eR7WPYHs4?CgS1gRZ?|!73B4zev`!xmtPFKS*!yKO?DNp{t!gO
z%%${Lby8+l5WnM`bUN<Vm?60Iwsbf)X3Y-jyrrX^+fYR*L09!?9r{|O5Q*Vd!^;4P
ziI~lf3La0`OH-pC&ob<O-Xs?(&;8UXQo2s3ab2E0RMsO^+>Lwhse$y|#G%kabR}NN
zrwY=}LRpS$oQ{JENHb$=PD{-A(Fm3;l$x%L*XO87r{SzB9B<MT&<Ugsd;I+mXDv%{
z8OAvb002Md|DS8Y-toW1-L)>A4qFj^Z~A~#Pq~w2Q%&4H8s~Bs-p$1#s5=mIjxtTz
zkwGP-%@auqnsSD}x4PUB@F6FcbGFW<tKfMd*LA30Lhx|imN$fOoH5AcEb29poEL9j
z;pINY{DfyQizEVzHmrkfm)^*(keJuwU9wGim?4CiOJFcE4`9mj?h3&J%c~Xk4#|h0
zn<G%!MTC)%9%zjhMpN;vTf88AqS?-NyaW}b=Shc@;WWT8G{Fc&-xkIo1q6b>-gqH_
z=^hw7A;vQy(F}wC>_*9Rli~jH;?Lz)P`C?HWHcz+FX74EXrzf^qY&2u!H@`g4+UYk
zD;p<Dwv!Q0%)!Os;pToaOczQG>0#HwaVRBX$l1yK8^-V3-1gdq|1dNIROE)CL4DWQ
z)+=vQgHOmF(|tECmxqW5_PEno(h!ai+fB_$OONUq-a(bC1a5LN`)=AXT+snv#)1>)
zclLX{bZceG&*HGJW&lRBiaF{lp7k25&i=QQKXegY8f(9L?Am!*AZX)ly{E^yckWYN
zPLvz*O_NT2VJmo8#`__BcA?G-g4d(Xiv?4A?(c?L((T`Y&kP>dPKaPSA-j<yg#%x-
z6<>eWPB%A#R|iQ~!|))Hh~C`nMIn63kJF|e9+RlpOt)aXYB~JQ9<@e@i{f+uG@D>M
z{l*CzkT2__pM#J+EGlT<f&0Zm<LeiUBIwj{!{$?SZ#K-9kdzW_2!yDKKF1Uwqt7nd
z#xf<hiyauzqKOhO7WCMg($;v2(cNN%qzSCN*Jjhw)5jg$oY0d6lgNe=8L|YW<VSrF
ziL86uLTYspdFw%TO$$L)b@qveLvo^VV!84JY+ZWEBw7txQM7rH5d(~nWXh3%{gibZ
z%gHyZ;tJwgC04Z7s9p~+W)+QNexec-kDSfSejVgB$A*dv4_4Mi?y_1X?T9TAI~Byt
z${e&1QOnb17fULKuJRhnq*~VGYOKz`q#=TJXil56XfT1dI-;k7ENwgRWaYq5I<?zv
zK?^xCoH-`#XN<W30K&qZ9vl_#=BOB)FR&LNG9F(oX@#?l4>t~N^T`dRX~FV1MeaS~
zUF8=j>G;Xzk&yjB5@!fslcw{d;7EUC!QjI2jloCw|Hb-2@`6pbnms3IMdPjx7S<f*
zWSzkEs58`U4q{k*L0zm|N+jz|Q@B}rAu&aw7uZe~L{8L73;BV;O@LUAh9Jvb^M%?7
z<Ftw3DaCEM9n5B*ZWbNJg0QqEjDd@sV5RorZ;&Ln0RtFIoRLWul)cm6;fiO{d;YM1
z;^a>qyHGSE`MUr3u}}pIl`Lnca9!WxcyYSc-HfI&Ee}jFg(#KSjQaqcRM^Aa=!@Gu
zl7Dsl74|K45Q@8;3kc*K$g|>UTiRcD0AI37c0ZR4#%Ae><fVMs0~p{7Llg9ebED9M
z&xQ~h+HErAdc|Lf^r3i;ELR(l<uimZUlT*tZ$}@DY@XZaQdw&(2L*aa)^GNs9XdFy
zkva8bat__C#D2eK8!l%{{Lq41+m$0F@}jqGJ0G^-&b0rT%BZ+*a2B2Do-+)CYtXBy
zD9nDKMna%ej1E!lLd+&~`ZP-kz@PhTEW}9L{2W{5eE(X$B6{2JE@RA-)<!<&=r{N?
zfeUm{m(bXgU4Lt`eipnGNI;RNea2MOa8VDCm86@bt9_KL?K6*a%_-OL+BCuKOb5Fq
zD!dACrE1j?LbJ6GX8B_8t<yZ%i=bxC^p}LR(i1u-=HqTtN%8a<sJRkm{Txo&Ux(vr
zH&0Moc*yySc(zd=j%P6VDJX3Pk!&S|S005<WT8J!dtZ_{AQ(!4C0f2Jh0X-j)iPZ_
z?WqY!lUG)qf#S4qa-bA3>RgPko3gRst<cwAe-e<DG3Qb-+Go;-7o7kT@Jt455&|#t
zV$k;9`F+LsA4im<J&TP%6Q>iR)tr2Y;6)<)0<Lt&AlIPl#0C3pJ;gayJkXUO65I14
zqvjAc`5eM;kV4bz-{GrUr}k%>=N_(f<dU~@FG2Xr9azDTk`pCqW9i)3vl97tf9608
zB3(`wojUzF@C2o0G~=C3P`Lb*1ga<HlJU|^o}X=vv44M1CY&C50ruGu_V_{hYpG`*
zEiEPEdyUJB8o1yu*N?tlinycBZ%#`XT>rW`akzh-XWzg9tqWZf8j!dN*N4kgrWPIv
z;Q$uwy$7)Qz8ZZZ;B5mfhRaVjUYN8kXkvHH=BB0#zd>$+Z)4y(yM$wGl4h(R(D_I}
zUWpNWJ>(P|2tg9>xr+g$h4jc$jugxB>>nD8O6mUFHam*_tu~V)bOqngUjcCk&T0uv
zdxWkXL)yods92dQ*h6#6nt$%>G*k3a372(1ZHKd8)SPevHvsjy5d5z|Zf4Ybww$XB
zv`g<2yC#={1XI0qyrhiBO2|U#k~9N{*nCOL5ePSh#8KYavlgPQ?`{NWb+|pMG{kS9
z1GNmZ^|N2M?2U+Pwxpeu(>lr6-W9YmfE66JiMFi=?6ml=524N~fnZ(O>xHmuaF%yS
zuql;6?10;?kVA|^gjmjf3unz?6^e`czrO0kT^oNjIQA(SfIO`v_;8rDBPpT7VRq;4
z4F!s<Vu&#B0cP(4cjWlM7NATRf-y@T0ZyBw6om~b#O#9bq)p}i8BmaDq!&6cb-G?=
zygq|+ql41~rC!asUddl6N!aCWQTJ_d^<QGVn9_ZU;0KDr$<b1X$UieW6`p6Z2aefp
zjwF>TVU>p;O<o*}3Nx<rCsfcT4#4;({axQl)=gMDDu-x7Gq&K)tie!(g~g!5HO){G
z1&LSg?lCaaFDc)$qBDVi6vbEeie<0QA>`f+$^BT#tJZFtn@1svKRCo_soBl3vy95N
zDMFoN&DlLCd|gpGuxxH<Nb6?mqbc0acEW9wc)j{Ghq<VK1ab;->&-UxYazE;SN0JO
zF__UdRv1K?^c9s1k1<$(z5dFtn+;}s`(v&mGu`UTIPvP5I}GhBO+lQ`Y-Rq!sDB&?
z3DwlB&V+26=bY*~syMi{Kf50Ey~s-Kp%>JVGD&g!+w*;iTa`;>mzRNxx>^iiSjaw<
z(R{gK;V8m0<c6{Me3(SgcgIs71KVTL!Beycc10t(pgjM0{Ct<}9TVZ4z<8EhV?;hS
zBn+=%{{6^gv#1MidV`b8-YW3v6<t1xahRyX1zN6UGQp?Ypc2E^Y7i+A#lMtU-Enm`
ze`&v0FXGJ7DY1pmTBQJzkyG!^UJjXD?SZ93dSr)dKufs*u?Y#8afg>yOo%zC6kfbQ
zBMBR`oC1Skt~=L3K44?T<gU!_c&3V03tE`2HK@3P2Za~*!-)!wlKLUA*x+(mt!5(=
z`J~FWJXyAL8H@F?k;{N}T5>F^#FF}Plp}_su^Es!xwuMgF9XA%%xb*Q@ouq9KCw!t
z=?g68gOa;xbR7VCc+cGcaj2)4^LzNQ`dkcfeRfTl;m!SJ-lg_?bNU^-sAY|I*Fs-7
zjlS)3Ez);D6h-}p@+P}mDtus8x(Z9kL^`yJkdK!>N>KNnuT^J{|AK5>-cP|0H*S;;
zR#3ZRiOKTJnmH#rGB;tx?lUwpD55)j?*Mq_lYpmNe;@1U{Knx7Tv0cbN}(&BYh`;v
zH^Ggsp1GATSMFeZ!uws$M@@4@(t>xcLYO>7I4~Dkh3PtN2C}4OeT|qZn>*I@Y;MN*
z93;w}&ym`MQbp$fW~BSE<1RoX7{i5ZTm##bNJ1@5aa=ViBi&a_Vbv)S&fz>8nxt}l
zPb5a5lRz9gw%Ff%cd}K7!H?P=BApt7zR-1m)GDQOUHj``wO03#z>lBQ;+a-!Mx{4b
z9q1#qW&Cq?h+Tnb@Bc#~*}vXPdvsifQv0<b?(o?{v4(h`SlmuzI!OT`&X*#Th-R7(
zAnP$c@MiSR(K$uy&XqgAy|`%^Jt*FxL1|`E7-zHRMeV%4)}#}?3&B4mot`RkNrD1l
z)0{_a<QUP$30Tu!v&m9x)9zEdR_<C}19f5dZIxr`>8-3uPA)NXt%pK_g?CR6{IA$X
zJhSf)eYwXb|IlJlq0F&>0z(&aG|e>$G9fsZ8}&z*^A}ah^u#P+kXjptB$O8|<oaoK
zb#M0rg)RJgHp!yj`KoAMCO}PD3Y?d>n~@xN?DxKNovS-!nUjC7$tnKP4oBMT-6$>e
z%IA~jw)9yG515YFP~QfgWk{O2D_-#7A<b(3xF$FcsPYVyQj!8Kj@H3or5dv7-_kJQ
zDo4ln^AJp4y_+_k`aeOKxN1i{vMmk=-Xy@1p*~Gxz$e|Nj7W4d^g?Ox#nSwYdJCT{
z4^c?I6A&raRj9Imp$8A%6q;D-uHXOdD^IbsIEs8e@VZ+8unJPSd$s|KF7e;~Bl9kz
zGVuJ13;+<U`CsR#e<%@#|7o50-`(Fc+<r=1;*GzL6kxTH>!bbzS=&4i9gL#Hy-ciT
zS=KMDij*4=)loF(5{&U}`#vvg+f0}<(Zo}-jcuo!oBA?ta&o_!xw)zESX$KsoC0qg
z4>x9zT(&K-uW?#pe2w?hCPDMhVnw)Jv4MVFOTjH^6V%}cz^l1)8-EZCS)Gm8Jnik^
z{r@apcqpyKZELkY*=>iDKxJ^?8M1h{69KqgfJc90Qf~~tPk-SXOs$J>PE1E_<gmGA
zd@{QX1$*#jfkoNhaQrNr#OX2;9Rx<>GrD-AN+W{%;{d?(5mCGa#tT=kU8{d5r0_-s
znSd<Y_OM5EPcYsC^~a?r;qOpO489%R-QC~c<NLD=-+$qU-@tP$7O2k-P-{#Be%V`H
z(&h5y(AgO{<mR;}+)l%nEu7M4cqIjG$g+NE%5ymz{+{W-l<FUyt6bK>(>YjQ(zV^>
zoOV_7T;Ofk)%5yoSoN7~ls!8y2g)&IZ})Vf+Oyc~O)2z%41LH4I%tP7q<*2J(@oLO
zb{*=4USD#L!keH6$wH1+F-9jm&lyJJO)*HGyj8#)I?{Jr#zCw8IQ8&56y4W@g|2$r
zpSbY9<NTU7y!P4Jhs|AD=i#tmMDt>eSLj|<y?_&(AFi$%1nF?d?HG3G|2Q%L+Ckr>
z-;P4M>s|fKErN<gEYLqjtN#iszJ$2&_>Qett)e1ce(W<ExCu1dBMuIQT`QDr@fh$A
zXv`)FT53bE3ILgjg}XBKetDqK#~d>LdCU21hI+{vLHkBD@Y<_vpN&XEu9LwJ2zl--
zV)!($f)?%yK1*SLZM~(|#)A0j4FM?&fcKL#lO4tc00}C4!v3cn>F|95m6vJFm1${B
zoX&?pX5hbf1>5HdX5}w~FLfY|jS^)eI&5qC;5!codF<^jAsy^xtdm~QKU2bWhYSGn
z(zB~O5}vEoUMvx6+=X5I%_fWgvExYkGOu+wC!@TS1+fmm%pU$HJ;wO;w5lKOJa3On
zXn*dT%%t~C@bZIr|1RD{^VN?o_gNvnYpp|?&d{_z1o_9z#}s~8a8mFJMoAEQaW0%V
zp57E@SYl_>-Pvjc1znt>SM}j?1h@M}4VF^~8o<8kDYfL4+H#pt(bSigT1v=R01S}j
zB+N$`qM3ERetFr@zyqL=U_S<=4jqSUr$A>9{b|||j*OJBgbv5nmBG|kVq+br*58_;
z@@`3GvLat>n*bC)M=zVr(l`O1nHGU!mP5wYF}~AT1c(4!O=V>GrjYpyKHT;7lq2w)
z$YNgKJCdW302~fzzUX+XZlmR2LKyzn7~@?!4_rF};?>Txr;{HQ*@z9n`YKV#!SSz~
z+M=Mnzn5-9Hw!nr4&H_Zas$)qffJQ*0IYkik^j04Ad&V&1^-=EGMHijxHn#J^U`-e
zX6sn$_m4@ENxNag9X!p29E7wW^2g+Jder}6?4Q~*fwrw}G)~2~ZQB)ASg|X%ZQJG(
z+qP}nwrze{YahMqV9xy?#u%+%y|vNqTR&Qa$_heUjtxVkq9wnrtpg8qKDD=6muq4C
zo>zFn_GTtL0g`r8|H0OnF;FKMM!Di$lXT*KGo)QxGUFz?pXT8FIe3ots2d4m@L$0Q
zNvXjBGVbEJabk~fbjasP{@jS`ggI9Pndp&7etq)z;JPJ@wM@B(V#O6e(#W5yM}p|j
zlGa@eX$)zpt6_9t7ix2*^;SLA5ni|ghJ;iY!tX`jF<(0={6{OrMaL#(9#eTDbo+7o
zSUfxi*R4Fi*IW!9c~p*Ab-HSjZuZ;8u)&EQ3=h?T$4^<GfWGn9y~f)xS1AEib-{g3
zH;pCtaR#*<CS;=);53`s)9&k6z%co>PJTk3>z6h|U<eXp{Kg~YrI@1V6$4AC#)8Ly
zRtMg-qtUU+Q9{GCqBqjbqPj`oUq?+4UF7cJuY4KsAmmS9sD^tzVHuE#{lqx&UxD<B
zChhHIy_A1_RWj1E{WZ8hHIbA~ci>DCcF<Q5>%)P7iEpEAtgtXFegkiiMd>&h^w(Sy
zFN>zq)>t6H8RPZlGv<);>!Oa7(EBO|D6N9DwA>RepfU~gPOEWyH6=&*^0nD6frxPG
zKDT9FaiU#pD+wMQwoD$Ts?(`P7Tkq4M!n)DBTr>gVW1}|91XC<BR<T7d*2C-yc4d3
z-tr~pgOF_Q;y-=s`X}Lv1I-=!If_!E`^cAUCe=DWW|1$b2rPQC>$g`tJ~)(D?QTKl
z0N;ctCcUTMpv!<L`>!way|neYo1?v(g!4b4c^M|wm118Yqgs>&fl(QUn)KRxkM|T7
zb%X|j@ofWOfRd8;x0#)!+R_6c!2H6bgbCf3W#LgP`a$e)0lDFSHyqs`kw??GlY}4y
zUMFu~SRr$)N?(}zqElb4rB<qYHF3+zu*%CbFfd4)eubX>gmH>MXB(w)y1`~C&}mU@
zQ-&P@N?nS|j(vnqzlc@$jraa$7LIuaxIwwZ1i`ewFpIpp7a_u+^@0oYIuO*<-YB5F
zf&+Y})FVhZib+}0SV>2W!pZcZ=DsI(LZu@t?{<XkD4@|1ZNz&6qx?#aZY?3}+Z+vI
zna~xXnp9K0F6v1Jp?RO$ew`({d3a<zeRUyua{I*`(X8;xOG+p*A^S4NV;+Y*_M9rf
zC6xYtn&N!q(4YeqST&&M1VDtp4hw=r4?7V9Vwnf(DF22uu{hvKt1l~1Q?aIN$QLQ8
zdGI3?VS18}xAWvgX!MvZWcupX|8ujo`cdMnPFuw0WKn)c2dE*J9NHHnKZb5JAzNm4
z0)Igi#0TbzUglm9yb6;m8NM<}y`OfCgh|@dh6QO<VaZD)8`(w-WHv^k=Qz2fI+f^|
z2kov1Q|`IYur&XJUkILMVW;g<pq!J$+x2M=1$ISYS7FGg=_lmvj`-5Jq=t2#^VeO?
z!THXz22#^0iH2k1qYig|6P|2aEmbgt1VySrC&Z%IsC6T1WgWO7#)!&Esi$Dq>8UJH
zAc#2|?vr4ayYz%ZOTG+bs-t&saRq2^P~AX6I#ci~p339mN3Fc79ehuTmI(yWL|o=Y
zkGK!(DE_iu*$RJ2h!%&y1gK&(s56vtx{3-Y%OH%wk&=6X6W46aCZ7ez5f=b@vw6QL
z9ZbWL3eIHe^6XWDfs^m$Wh-!|S6gR(3^rQ)Fxx-6L=d>LG3;tr2>!Bx;bv<Q2^cMv
z`bY#e63O%zKi#Vnp5;iy96*-F|LmQJERFxT-#rkzP^>6eAefbf{abPphsO*T^s+>5
zouar$rGnMTsCu*~R&CawYXNeDUpA1F4=Q)qqAfwC#MSK2h0|<;3l%gJuDe`_PPc?S
z;$JsQ8&`BJ@}L!wZ;K83zKLFvn3l2iwI{snH6+jBfpXN92JHThFM-Upsx8s_1d*X(
z@TI!$mMAPpt;7X=W4y~r%x8YuF&vlqk#T&stdchjk)lFN7(U@dF^LZd_ZL%anV^O0
zwtV^K?<Mc;t4+1wLd?AhS|O|jjtWd<1I`3nJtB$?soTh`_9edAx)uP>VKm5Utp~zw
zVmR9F#$<LNEK#hf6h{}Eh}=KJRT1<8m``)!&gdOgq;~3rGu5u%h4La~Z*_7R@j2Nh
z_8qa{{!K$K{Ll(}BoP;Z*B;3vq0qQW8||bPAOZDBzqn9Vhga#bnOPTI(+()%eSvt4
zS-%>52B654XWd0n+Q!gw8xx5J&Wd4VAWbxBFAT0*?3P{>mk_vqkv0Ll@bqBFj_hoD
zq0=xPrKAwL3*}4<0ycY8f+ebxeMs5oK?mIw5b4|gBSpd^ZkCRE{vI#}j%*;r<y?j}
zLfz<W_H1E7ocoWE#HzK!`eaFhL*&!y_QfUoYEf$$HEY()Pv;N$*2=uCxI*zKkv#md
zKux=__)D#wfJi}MiJA;4xJzO@+XWS^<cgnf%_nt$`<*uiWM_hx)U&=k^r?i3I73nK
zm0!D*hcZVRNCZ#@#`EIeJF;5^W;ggyq&f|%*7XWaI_IiN!Bf@i{c%aw@9HWuA&Dg(
zde1ghQ<ZxBqlsY%U)iW2bF&8%C_F@vBd4AfGOb7_xNJK;SZw~A@s2UW0YR-VmPQD9
zq0%5L%go}H4aEe}vG8Hy>h5VdadJlfVk&;M_k)uWD3b$0Znd6(oSPk8ISW;J3mpUN
zWqcRNPp1<t)!BA@=k4a<CGG}p<p%D6ua!3-kA=p?Q*CFS^006SmP~Rk{d1BTr41Pz
z-nWvJ_S^b6H*Gk2U#`jDw~F?bXTH0$tx!kw@WymTGJ7w@>nqsy)W4ip$RH_jZfpU|
z`$$Cmda)F<01BC%lDbC|jy=>T4pUW!e7p901P@#F1V$&_T}39?&9ZwG^kYR(mN)o`
zCWtBB0=9>+w_lSOK4a9s+0ku24n4IMq1)GQDe_Z!Bw#igj_q5~v=c4z=H<=2yHJU2
zJF-y*%pJr2?ZcE6vtXJ)dH!P)R&m;GL|3yUmxgT|@cvw&?ZjLIwa_!+;+c7KWbOOm
z*3RjoJ$`aLWa>m!H;{X;cZa+-*gI8KVyl%NbB)sRCd8L**<wxmE|PQ0df_o^fKzlX
zo7Z^XjBpgCa&1W0F8Q)iU&x1CuF2}(RY7v(rJL}hik8?;G=t^#`{%_d>?-FO7;Z!x
z7>Kri)6f}nl#7_>7X6ZHFvcv2hw;19kU_mC*V*5yXqBndW@vpI$%Xdd6sOTsOGI3F
z@eAh82&H5QtSHD38~@~Zos+*ce79lDF?i(Y6s8YAd6qL__O*m+r6yC*6+%U5V6Gun
z+XM@U1<iSR{0osQyjt}~d)ki*-&S=pB`K=xE_=noT&YAfAN#BESN#XN&fLv$wwpG^
zxS}rJ&OHo+{8g75i=?0*^xUcy({VWTDI4VhNI6fdhB9}#JRKeF*eEez=_>x*e=8E{
zOxvFVZ@jIBzDx~~7_59fDMOB-X=-_EYgmy*sdSR8cATNR$EhQzMf5;fF;v!6`WN9J
zMCPX(D;x%iQoVun7NGXX(@X-SK~|=uCFDWs11AFXezd@O{T^1WISX$wGtTX&VmN@7
z&-9UelP_CkVRs@;{`9vS4MM5b7+M!tPH%uLREr#(4KWsNi=aj^n>uHabkYK8Xu|#q
z__ZV}GJ$IV9m<eTzvFrf{NHWMRW1TpcOLag*e>-;@6J{b?4jj9J+A43^VV_@YnL%B
z;xGE0L0~@MjM3FGy1jAi0Yf$mhMu*^egT$&>?hPW0r%aSnRZ;XaMf_$ELV~3swxl+
z_!UBG1gXth&u!mz^bhKhe#&57@OC+)zp3J?`f7%7jfE%f>Gv*CQNw8D8cLUX;>kc!
zmNC^NbR8<J-;?%GE>#zI$bA;Y^LnT+&+d-d5XBNRtOA|Aohm~=&f2hfi;E=-o;T&6
zJ4^tfYx~p(GP6~BjvMr;i<l+kHC$&e!}+jKT}lDz(p7$jj}^6#dJZC6dTbmrq62Z%
zhUL|6Pwr}{Gwpaz5qXg3xd18FI5PI8kKn5Xha;uX`8EQ_u~R(;5^5bFN&^TWc7Ocx
znKNh5e+qZmPf!D5%XNjUwMo@L$VZvRUsX+>`Dl~LXyR&W+7&E5&(s0}yfiU>s$}=)
z;w$-qJh1y~MlncPt9kbP1CzSZ6|PkY$w57mb$kAte^humMx&Q=)h0?@s}ut(ZLFX|
z&)0DEZab7nT(1*_kyGT$ZP(oJ%+;nPCj-rC9hc(3+*ZNk&0g|{9Bv<W{;slWJN@RK
zM6s<G<LJQ_A|T#YhVwhi^GHE_q{hRG8GK-sMuYiE7IR0V%({P0Pp9R>M9jEdg76-Y
z5Y`>NkMRa=_EEaq+fePa1TdiU{1Z`!<Dj9dgH)GfJnKS2cS_`GKT)B1ee>&lxLtq_
zj6uCz955^#tO$pvWds<ASj=Vi&UBeSy9Y#jtzJD@2dn(}2`_U?&K26KxBSJKnGK#w
zTc`!N!4EWVY8#(}AIXx7H)o=lPRIrSR@M`jwk;P-7C$S;$~litFT!a~F5}zZsx^ds
z2x}r3vS~1UgPnhO2Ad3x>#-7#ISdALl-MUL-z<*PD6}ZtQ|NjigWa!Pf#Nl~;N9_S
z#|{85-=1$53_sXv5ral`o8yI}+(}py@+^MczM)Bb)@K<Zii1ZBY}sFnVJAI+3i4fI
zqTfdp={Yv^rPkJ#&E54s%cC)XecZ0?+<W>Mg<=R#VM^;#$c{4c?$|6gbtQC&mL9x^
zY9@-^W$7s~ez^wi&~EGC9jdY)wi~mJqwySbL+9p{-J!HgU>zS+%1Ez#?OP_>Dml6o
zR);Te4Nm3MDSNF$2tKG<KMaMJalAF?$Gbq}55z*oCgp#`^1dI3)CtLXOP3d;=A4Pv
zDty!7EJdFOO?jytZKO3AF>Eci)))X$n?BG`gbS7Asn2A-z!lZ2o6Z^vC!(WR_po<?
z|68YXT1$(&F;G!{Ou*SWka0W6S=|wL;Jrn5tN&Pg`3yQc^by7^amH4MpIT4VNLrG)
z=%y8^R&r}S?5gKa<-Lstw$sekuAbhY;MM<|?6P-kc2c0)RdY6o1rZgQaU_m<o>(pS
zse-*X$eie4P8NP4AO~NcBtED)de7aPPe^RlQH(B9j>Zy>zwgNakH$1ngn8IhFrw5H
zm8~<1wCEEf`bDg!h(gXwzpkL@r<8_VH42f9mFmXpz0^qBXqfwm=It<&j3K{`+@Wd)
z*+{X<QK)9#`f?9y_xE4B$;G#M8CFqJcid(@{qO~h1z)3gS@kI%E986LAF)h*qk$>5
z@+z{A^skenH+RN@l!BUFrgRD$Bz@zq$i5+RT5_&EjvO#*lad0LBp9G}RW~*TYBk3n
zpO5j3Q)uq(+9)iTq7zi_US|>IkiTrUH-FLU@xeb2HDL?qX9CG`=PzHC@6N;UPVWvL
zds0)T=t#A2BH?|ezFcgPN!zJ66mTGYn`M_)ZMjL)pM5Z%)`+Z7O<Z`Pv|v}~ye)1-
zy%c$F4MtILArZmuND0w)>#tT1V}E}gD{Br%n=E*|PH|sNXK8Yn#iPDnKIyI(?f6Z|
zdHe;Pqhi8~`87tCoiH0mO)}f5^h8~)MA5e!W4YVi>Y^j1LUs^OZe!M$_8AObJdryV
zYB)YWP;rWG^jC2Q8IfG4mSIk(OtW+{S*-nqVy5ecPIW~t!A^2y=>Miv<hdSA5I}%{
zB>sD2i>r=<t%cct-mON($^W#!p$2WgqN%P*DH_d4j}=I3u?eXMr6Hn+Ht-WccI+&!
zjC3XDnSFZ&&#+0cQMvW=AK!CPOcjEs?2MKvTj~%>AK$OOBdE^D#G;}up`qDz1d5Ml
zvkKc<&=$<Gw`BAev6!yN$t<EwT7jOaNhQnYn!z`Yl!EZ~-SngVa}3EB<iuVFLZ}Ol
zZy+QUsx%w!^*4Lz<ph7rn1%L(8ZlJ26B7~3)l+-80cQElO#J&Q7L$qTuIy6oC|~iZ
z#%SkN@1i@yOr1t}93VF6%*Jf?0sYIl3#4`~8@JdDTQdz_!$GsG(}9so7_Yr29;ekn
zeJ2$vlIgTAg}Hh%0B$y?bOe|z5p@im*x$ILf{=RIRtrf<C(A_DVZEW<uPAngG7J@S
zjgOXb@v)}JuKP>%6KqooO_^+d&F~tQe3*xvS^F5ZitR{xZE*5@HWaEr67kBgtTMJf
zQ!6qWS6IF{#?kV_L%1PT-^Hlaj#I|qdwmIk@0<7`Va0(&AS&Nu8K>Xm#pn*#8`7vI
zJh`|HO6l<`t_kJET3b5*a&OBAQ+CQe4UVf=UzP$=eP?RV5GByX;GE+Fh5oUBecm^D
zQBl=9wV?Cmoc$qQ7jMWW>DvZ7LzOkvw+df^-4EqSLeZ!3#%7yym7mO$VUaPuy+hMx
zYUM;14b0+^d6rmw&Vd7ZDs$x5H_-pvH3;$&0%7~p4&?cB-iZG*lipRwS?|9Tf(ONJ
zOZ77%4sXA!;@%IAT4plp<q2h?L1=x>QoSj)JsA_LE5w)Ahkmz@YHU6kZrMM-dfTV$
zj0BLRmXytYL?OWr@6X<zj^4l?!R}TG0g9M5EFPo51=Ua#*Ip2zfn(@(caY%D5NN$<
z?5k2SDB+Uj#*x`(qQx5MI2{MIA)ns(d&<l7k~j#_1g&P=LhV4M=n-$~d%}ICC>P3*
zc~ijq(ooh%cw{K3?4isBTZ0@TRHGDEf7T~;uH0eqtZ$WA$`%$htwfU;Y<5QX*gqIk
zF(tq~p<4BFR~-)~iD%)qKRc@9`Aeiq-=5zwo~?Rln@9_zlKo+QxmD>fS#EOcFX&Ar
z(w9Dy&P<W#-?2Dc1)T>v=MIj{&Ug&c33|z52(t3bVemSZTpsZI{Qvq=AUDkbrx*NN
z$e_=?%PmUSkaUdMQ+Z!I-*PPt{ny4FHY@4G5%KAlq*={&6M2SNRyFIzhRoSpWT)`=
z|0mt%ASLKF{eyCO!}zbRj4hjvt-g^n^M8Ih3e~=C)+CX?GrRTIC>k-5#ADwI*cswn
z2h6<4f<fmjoVeAaJHeWVp6Zto9nZeKS=uc;ti*Gk^Gc|;0IRQ0fY%-GVsJdn!BKiR
zd{tcft!^J5cFyh>Jaig}gh0{zSIi=_k4!h*U@o0Ov!#Ha9_>g}=G5BALY$-L8N^j=
zNc;%qBVqhkTJS0W)FD#C>8=IY%i0OBXM}@VJ5Q)SyxY(Sybd@PZ9pur$DLXqQD{%Z
zvIJ&J+^{arO%h|(1SLrpj^M{n>d9H2cQuac<9B@D$_h5%X@fS)$Sy07O<=?ooA-b>
zR9*l)C1ET4p7ed@+NOD3JCeyzeI;UkxJ&7*+}53@3ts-GdhQclL_75z_G_etV4!o+
z>G8w~(JoocdgXaetFM12x7oeYtOVxG8eQuq&G@H_=<4HhH(?>lliTc(hw+m)?fVIy
zJz$HA)H>N}e<1`iMY50BjsraG_6UDkF&Sz)#NoXUkpA7laT&Lo^<@TM)W3Q&<xBHo
z1G5l=T6a}sAX5M%uwo7Pqm9v(=QCydVaLqUHk?SUYVKZ{E$1-Ebcr*WsUn5h#&Q`%
za$tRZIop@Ea-Sy0k~YoJJiJd8)E3)HbUn78`+2#l%Nhk_QO-*1q36x|tiTAMKch}<
ziWQCVe2j3HXyYX_Ql4NSm%%uP0h-2a0`G(L=^y44&8Q^0Q6C5}^7Yk5<~5fI22_g(
z^uTM5`4h-@(CI~Xb8;Z+5_y0hp_p)Dd#=>5=Bpeqm4)1*Z-C8Sw$=$ay!k53uhOk7
z!L9a@L!L{?>Q{~dIgX^e{Jrae_&d~sV!5V`YlJ(&plD(!BLJY>2OkYL4`fVSq@MSD
zp@^y5VG@GuNJ<y_(*#B}|6OC-U2+Y9QyP8fkk`YZQHSuz$ZRvX1gp8wMG(_IBY~w#
zKp#X~YLF+<X-eQGH+UL}uEV7ArKDK#j%@iQ1MSjZ9sM|nmHsq5So|&Ci!3seYnd!I
zklTh$VE%lo)wjmn9DHXFb*b<WZhkyNt%ePEP|IpH?(Aszd18OD2kzdO{f~%?#`=>r
zgXd`g@bQY^5O~M2vbIziw9`t9MqqG3(;>|Nx=QV3Q9d%JmKkcb9!!)mXd2ZP)>uQ7
zwQHM6!iikV6)ZZe>0~(r;5RXnsWliCQrElNy=aSXUx=QrqS?^`9uhCb9YENQXfO}6
z#-I*MZ?g#YilQb~jj&O?S0%<NoH&FvO&G8URNrOZ%v<DH;j}kL6I~vsmL#x@)OcL7
zyd-O9f9wY8jTkC>t3?EWU}eBv;vDM@t1t1F!TbE{b^Ck^@FE0O2#JzbNzx#45Zbf8
zdvu4K3m}B%oUFg*`kP&Gfo5sS)M1)z_H*ZP5yR1`xi7-#FNK)O4lrZC6;6(WZ>2pr
z!b#J5cWZ?Wh1NFCQ6|u^KhUJnF<DLOM<em+Y2OX(3V+XifPaiyj_$*&Nnr=F;+k@j
zO^^V+rZUSr0D#n5v8vKYjii!^m16hdNSMPY`=gj&|6vNNKM5XrPHs?=KtplbZSWo>
z-e)0SSg`#5t4Dpa8U$>!mFUfp*0*m)$wCQ_Ue9zmAXpC19m96om#$whel@QU4zTZt
zZ7n6~u(mj*!b1eLZ*=bTA=)|44i0eXKBuy1sh7qgaY-cen!)%CErknBiGf(~K(bub
zJn)H}w=B^>UWOFE3ANJ5YvylJwApb*&|Y-5KVPT~n8xNzoI>({Mw|X&xG3EY&&8ON
zjoBVnC@BQbRq+*=RZ;dJ_)v-e)?{XGZHh?JGVEN*3St5tdShcC+7hesR|P6${>vDJ
zgO0xe>2ADkpKj5c$(<p8`<nDyS!lZ6PyW?JOgnNLzRW0kfGF5p_{6%iELn8VU4YTa
z=P;0s3!);(?YIC+md$+=tyMtG=jJ%dwga1U?Vok9+T~u|URl_anK<<;)mJX0;X#0_
zx2HD}uE~hU(EjL1E1t&wJAi6VWz7}KYTAP;4W#*4lgoJfhZuuJU>m3h!8ss>6^<=5
zi9c)_>F&wAm(75***$I_BfsIFPaOkabFtSXtd`&bQ+!@8ucSuT@!4LXNwT6Kv-<(G
zS|#>pFrl$pm~w}~BIIs;#nf+-RcFHXQILYX`fQUbhhCY@qFA?cfxhBO%k^%c=Y6_r
zbZqr;2+m<Cf-f2^-vxJ;L<61UAG>JS*#0ht$+bQmyE5dRAc@AI;v(t&uB+fSZJK<h
z);qn6S)h!J2R{Li#oN&_nu=_g%&L6*d09)_u6|+lNwKq6zG9=*;z7EHB<a>ps?7HY
z*rUBLZS2CoqT`_sye)%Z+m0#v^m?^UNW>n*#ki4QXCx0j8hwM^_8hQO2^v@W65#r>
zrzAR+d*|G$RM@H&J<RQFF<BPfpi!Qrq?el^LMIVR-pNeJW(6*uSS~JoFl|N=OvSM3
z1WwIjh4hYNs)+QkIH%g9-P)H(H86ZMeVT2KJ`T&Em0+?H(Z=xe_S)DdOG_StbnW1@
z<=0?hEF8^(fu?JV5?QHshvQv!2xX@(oV1G+3P&d`asCVmi9M<)--z<1L)HOhrWW_#
zIkb!8mGsJYs8b3<_QW=&VjU~{t`TE78fjx&5=udqNa}9MrMRti64caV6<kU;;s3W6
zGAzYjN)iGH$Pn$nP7D9rGHq;c^q;4NMKw*uburW*8Vu(QmOj;s5dIsGAC|Dl-p~pv
zK-zU~WDeUVj!e1Te<t$VWBN++u8LH8?NnM5fhBd*q5IMWa|N$vmsld3#l3s)#+noN
zX$vmKJNPxchnB4N{O=C8ls5@*i2RhQ#LydKIB^RSEUfh}l2sC@cS`Y*v>D%l$iUcP
zqR}7j8?h6(mR*Yu;+3YCZ#!v7<2S5bACZa3$S%#8t^^6lf#z=oc-CM-^<t#Qecv9G
zLmH|MM8#iFADHpr&v7e%?jF=b`vkxWQQ5I{I2D(vrq$w2DCr6!O&sGK(g=MZ_%S?b
zrWBodF?sp;9#J0rYD=;WpFsy%DK}25U$}+t1dH!cq5>!ppgK%=VMpt_x#y>#kwCKt
z|1fOdJe3;~G517{dkJ2PN+3R}zGwbSfyKbQ<g8$B!d&VehMk1D%@e;)qc=|Do{d;r
zoqC$){|ImoAP&ObQ_~MQ979`<A@JO+g$&^q{5vn0$6B!sn<J714qy-ghG0Q(%|gOL
zGmBLsf-_IOiziY!Zf7lAOaUDYTIxfLT48O7wecA|&Mcd2EAt_l3Gz$BOtk02nv@4W
zwuPQwA3Z>{6!Sj*DENEsnaRVUczx&WzUwcO4Cg<4sao^-fdie_;nFm*?@LAO7R8}m
z^Ba2Csz#2Zk24&cu$v*bor1TKx|rD?4KZ73S&Jz3?l`e$%M2^5-D0@C3ri>Jc%LB}
z91^m|<QknMQiS<qk%wkt6&VBaB*?ouRe}^kD!^9FwZ}FOjAli{tk=Z}<%P3;?Sijr
z0IDC1WJwVFHG^?{q;f%J3m{r}pP?ijT$vQenr|_7N>aLPv>HM7NKEq8FVX&}di7z<
z`{}yzdMv8rnYQc5makCss|)8#E{@o#u+7N%QfrHoxMhmSaxtQ8sX?_icwW)fgbiDq
z0sVH>(uxXg3*`#D9L%J7SUix0ZIs%DO{PqL7Zye&nata#dJc`$ZKASG*mxY0CQ(hK
z^kamc4H@1>^!tQ0T%N;8LITyDiXrNt13kKFEndOAA$_TVRg?{x+2NRnnK*D18wm?*
zDWAE0Xm}};vR=s`eQCU2-@S3Qt$braZao=CoxNDqXitGOjy3`y*8yMj{<z*$w_-H?
z5a4jyI#t~~)o|g@9p+|1N+LZV^(9Ani6=3rub?k?8z#yfZ}dy%hC*1%2#vUlJ0RE9
z&`ID-=0?X{7;T%=m8l2RgJv@L7C8&CCF#bW==a2u8lx--5HUm{lVlE&3cr4g38u_7
zPy%BXH^I)wUkuXqUuHt1X#+N#w6P|Bp|KQ*$gqcLLn8V@uOejQAS}@QV@~S7E@DyT
zYtog9h%zQdNJbeqC4yU;tC=k8=lMa(a_ge{kn3slBC1hR10cV>-<_Xt1b@x2d%5$m
z_#smzz7C(=_lvR_pe~dad&t(Y&PQ?j&vQ~Vsux|XuuUX(EFS~n7Ye?0rdgfTh?miu
zUGl~8zLHLA{3A*-BLp#DpJCylgU3hzOt*5o@SFBjAx<0hVs@QdI~>O9#U-imGOvdp
z=+c-ej#_XGeqLxrZA`b}yYRQYTujoliJ}XwLFTr9PSwe<I7(CVKZ@xiY$b0;+&iW4
zsZ~EMkmwXs_8W?IatS)q5|uAmGFbjVv~Al#M)-G-t>POOMKsp^nI0we`p(X})NOIX
z2-#wsY1st~<tpVYY;Pf-Gmp4Q;O&`gB7pXUkBdliPNH48V?<v&azEhYg5Nz0m94(J
zGP<%{FA)ZP;B0l@J9MTr!ABn}%*mAzyZ(jEVLLM#3sUzAhu{2G%ZU}P)QB8!a*^>|
z%l_FuRF!Z3?PAkkice*^{avap^e^|l!-TtXRyU)ZT!q5uS!sb8L*JFR_+@9LLkT|_
zj=sw9^4W-Lr26QhqT1GJJK~Hsg}f0ZE33(ps*R%1sx!a4u#!srWJ-pD>}+}*?=ix>
z{eIPQFS4j|-AowJDt&ZFOm!~n+beW*@quxy?`>HmfmeonW=>(0=e#R7zw~Boj&14U
zw5Fek0j&3cK!+d2_duq?M`gr|Jru^w@4W~PW+zaWQI<8MH#QZbz8nlRHBF*DPy7Xn
zxqW^w|5`>}JJB0~Q#;lb8OIdOkty(h3XDM!B^g70))US@kR7uByrTGDp>i<zFJZ%=
zM6I6+W7Od5dz$DKI6<p9>$QSL3$nlyC8|O+Iji>YNC%+~ES@?%%FMTImy8%-JjGVR
z-Hc~1Pk!1xK_F1fQ+tbnI@_DCi;s)MF8<z*-z^OClg3cIn4c)E0eXkfR+eDGRC;G{
z=tZWp6-*Jo4%EYTN@$JcN@3wz_#!P8W}bVsX)c10dJwdF!>t6(Ad^I=?Sg7zVZwZ6
zait)IfS1b^po=*B#9H!#n^V#I03e;VkpqzjhfDb<A*xF?2hOZn6GK`PXJd$TC`(wi
zB^fgZ96cG&Xj4f~#L*n-G6kiO7Dfe=%+}I&>wlG6l1SZf!L9@M>c$Ye)KZL6{|r9T
zFQJU(%1aMzSV~b05>vZ-BtHeFsylh>@{Y9ZQ+3|J)D0&@P*2a|PUpVL?w#(h9zTZk
z!+QdkF8q5N3uxJTR#h@h4cxV~hi4rOZyzJXJV>h5mmw+2j6DDWYn;ZN+lZ=424`#&
zY5fgQpQZvd3egb>uVpptG;9-^p+|m)r@g+h%&nS!;X(N5C<dkTN1?xg`Y4QH5IsBx
zZtw-^-S7atT?D~#xA?z9w!zkudKEdaUTfY)a$mn2VroM){yCVb9#my?la5EkRtm{~
zWh>q+Xpbk~x1nIn`a5st&LJKDF7M9LA%kCR;O}g#uOhZMLH>f=useU=ghXBA)eiea
z`_KZb?XO!Y+GIgB3Ag9HZ?x>RY)D7hzc$`jSH-kFHSF?!|1VF<Ou0P2qABq1L8E1v
zaF3U?|Mi6}QmwFHup8JBu0}zH7VXnVT&8(9Hc_gn!A947vi4OCq^3@q<!A+XAI$u)
zhk_g5kNYPrF5o<(dWmQBrKw7BpCR!7F5)f>R+R>RPIxxTe?8@TI?hJ+X2x#+c^vCh
zwX#_g{~r=>YLS8=q93Wk^+K~ashvVIJfZa5(frto#Y(xl<`Z&X<MXzS^YRc(5Lnf+
zMqJ<3)YJqE3lGDk7#y~3TtP%+6a~m%?QU-;M|aOVNLY#=i95_X77~#9%JcJ`l9rCA
zwGpI<)+1y%V9eo~#5Y|L5{pk62N`p~?u!gz1=Xtwdqh&Rzt17$Eolb2O2Cr-1iumK
zp)HP&Nv**pMpw*<0hR%0gcoF%F*v&S?aK%Y)7P${N(JK&F(maQeTw7N5?5)7O$-N|
z|69?TrhmROOeSiMJtQ{B2k1g=P4{5jZHa`k`pjETAK$C^W8U#vldZN?GBm<)R)(bx
ziEmXcYBS>x)W`O<{|lrwlbMR7>n&2cQqqKsgh{g#u!dYEMq|QhB!|4?6`B{FxkS3&
zBI$qcx{O0;Op&wGIk2h~H>)C*!>=1b)jnCnzg31C`y5ssuI9)lB{@Czyx%oN7iC@d
z6eE~R3V=?_zDMz=fwJmn(x#P_*}<#!5OTjVstgXvQ9)oenC;UqCXyh&i>*P#ZZYk{
z2o&bNa<Tz}>n;tO&Lp}G1}*l0i^_;<WiZCFTGG9QA@_!en!#|L?mAESqIk#0K2>ci
zS?;1TZ}o7Hpbyr`K??ojYIA}3_gLk#G7knhD`F28dydQ9XQ<HC6JA4UEf8W2iHM~5
zs`A{N8j3j|<T?6pTF*_)u#LqVC5RN%(u31WlL%4V9Bn=79*tE!kH^lxO_H=;U)T|u
zVJ8oagR=dWX3%yyW$%3vQeT(HDFF@S@as$;QcSSojG$y6$D`qW(*6{7x+=+kK~O_V
zv9VER^kOhqvZZ9zdyVrMnibkJQiqS3pAD)Jz^#|wXHWbtqfwV`nHK5)xR;wa7P_2+
z39Pe#8c@3*zGl@+NAc8S;`)UdPx4j>j%|Mp$M{^8*35UFw@elGYJ5F}TIj%KD<=<|
zYDAh!4d>UT6sd_xSI3NwJB%*G?33117&+<zEynrjJ>5+)Af%%{&h?FjY6)>lN3?S{
z8Le!Ts$STV|ME)o+f))%?$Lr43Q<~UrmD+NThZ{4bE4DeOm)xwZB|HF<SmvLsZd_9
zW>{M|s-2VejwN|^!hJlgR^quDTmrp;*3a4ko{p3-mLqUbeWw{@^e=*nAVLB~Nix9Y
zdiTWy*qm{=olvajZf8=1coAQ4K-qSJ89uq;YaP2QxGs-QQ2@nJ<H#q|bg_x0!KMZx
z^bxscRa$ldd}a|$YVpb_M{>(T+k?MTwH5EVn222Fl<>o3DDP=yzAGL=%|Weu-|dMk
zuI~0Z$H4&MvbXHLpw@`d+~u=Kq&4r%d)2;vOcrgQ&*BJz<thVsvAfAKmkXk#qym)h
zSb>`pSc|Opn5dv0$vMimDrvaY5<3Mx<&j07mvqEG2u#Yx+KO&CRWqW8ODRtAo8gIJ
zy!`l|3y<(XtD+Gdn#x^L*lbYUYK$~qGE=06EY;K5c6UH4KQ{}0qnjND5DvkMc8)ig
ziXV+We7;3`7q`~<K)wQm3O7kgNr>jHB?ombTt>1It-#A|q!4m1m2~N}LxyIZC2*MG
z5C-Sl4bu$fA2KiQ6k$XZa*_;HPqx}u2cKIAN-^-in*1Va6#8M%#h3>SCb(>&gD|6t
zrPClfQ(WZDw7s(-imAG>L#&XN3@WCY5OyAe!*g;BTm5FASo11ua#$Mq<sDs>Udh`{
zMJU^W;e!1uvXANCs=Ajmk=7CPB$PY)LIKqlP{1a-NYXQ3Lrwnm#t(I3NN%R5V1%7D
z$kq0O2fg0pl)K*e4~zuQHq&<c<O<0d!q2@W%)Sc`3S1TD9}nkoS4<w=d%G8vS55qd
z&~5v8N!q9V<z2!}^=AMAdQBNU=csqKH32P)GL^N4@>SyRqi9zOn~PcW^qR;c*JEup
zpOvW(nbBZv*JgTG3c2nsv@eYRS0cux<HIX{Bw`5Rze<F$j)SAUnYGD(mWWD>b?Y_p
zhs<iu!ZUpo`e1Em#dz_=csk@DXobtF_+N0wks;XYcd&()=|0;ILlBl1>~1S=j86cE
z?)i%39OzEM4N?75YSYZ@?yBa>C7c#Ju1Mi4*<#@rRB#$=niK0p9FaO;t?2+LB=J<+
z(fn%9+23LV7L=A(QeD1L-8)Dns5lH=AOXIIV6~R)KwnVoHOBu3Hpr140v(9pTm#S7
z>zUrKLaE9kyFw~$c_hrJ3LA%&7s8_-L=adCfP?(OTCZ*Q8`gxyt_z8yg}sV}0iBZQ
zhM)W^6nbr1-LP(s`d`){*lZmZ3LA<8c9n)l=oW2K7R>*$1~LAJHE3I{K&W{slm(m=
zRPB1eQf>C9UCvE^%XXY9T*TO+%MKUcsP*zX^+D57QAnF`&2lL-TBH7S(vb0O-jxGW
z*a?4W2BmA@2Cq72%=|ZLL8AJbHVAK;D4b^tSb08?0u$Lq;D)n0m@<aVxJvow-Qqb%
z_qW}a*RscUH~sJlHfUp~)wYWylN2N@L`n+d8!v7ewg|<ZIm)Z9nlW~@_o1Cnn4PHS
zc;GdpW1Fa^@wzyrb*!LK`M-c4`+)w|ttY=8RtbnVoEwsIbv|5xz}F+y_s<kO#5&@d
zE}|_kB;L*a1#M-&Ho|~+(c=3hN1i7zgU;|<7V)>pZF@Tpfs>8J=DKlo!AfvGor!o-
zkbq&=$mbHD#=#c${|_z5q+lq`YTb+4j`nQp1YSJ@R@0?E<wY@^^N1OcJ#+LwXhFuN
zl^I161JM0reh1G9+&s^8za`Bdv|xl^qo^H|;g~MHg@nF^Oqg7_kF1owasUIHnt|1V
zFI{cBY5%WU2<C&QNVNfI6J7{qD7&lW8#da3-(sWSQ1=`bV`7F8ZkXL%#C>P;T>m6N
zMB<Tzs<iFNVzQRnhBq9|UAT*#8j8De?naB7(UTDtc=s-(*d>)DWPhD7@jN@Lh2d$C
zdQ)IK{ax%plY<-^kSf`DMPo@Rd~D0%t=v#gqOA?3xr^(PBPD<P9z5|Be9Ne44+q=@
z!Y@PLvPwd#*ow-SDOW3|X2C!Xmx6X8Y>qbgu$&vL<2^9PBe;pzWnl#;H}@(0QCA_m
zQiVDJ5j;k_P!sS*eaMC-8&~9(&A&LJs*alz$<IEvFIJzdE8qL_yC;|=FTagq2Thy(
z;SS3D4|h<MN78i-!Zb1AbYjSlT2|c&Cu)d|(UV(u_a0Ymz^sI-b^{CtYAD(OXGf=Y
zk5Q@Ch6%a_A)}6%P5j4Nu?6UApVV=ww)92Da`)jNp!Ks8che0hQ1+8<;*rZ&4nb8P
zG32@A#AIT;Pw4!jP_2e+>$?q@P<bU%kefgNe=NIa%YHqTQ{H8Or+*)tWzwwSi;mXH
z(d^(PMuH)-#r^a<+i&-N49pJq9z(K|*UI=CZXi?W^z#~1bS{XvLZ6S@C4_CtcSnxj
zHbm?E<^i0kQ_Pk8?hVGrTCTVDh{dNGr36e2U2ji|Weaqj@1H+PFP8uwuU}BCGv{|F
z!Z<k&Mva&|EAon{asYs!0*1*@mX6jr;XNf2iRjhwesK?NU7XZ}KRUY^OwYV!Cl?>E
z6!@c4DzPdtZiNDX97TTTkbXNG=S@6V0ogZWemI}g1pRJ9ul!0;gXe%ppol*vV*`D5
z4K^(cMogz*Um2OZIm_$ArJLA1Tak7Gy{LoPAO7MdnfBcg-&%}J>nC>9hd1be03RJ)
z8aJ;fPY0?Okz$Ow0y8G!{9Dtf-0$YUGuGEd+2eDcZmi6X;rYVHM38aKc8sR*JA|%D
z#S(fSErE~wn-cl^4HL=1RaYCoe8$>DC^(W8GMSTkQ-%eo3WSb<3I|i|YZJ7^AIF?m
z6tY)jiU@`h(pPO6*Dz%CIHRw8C_n!X%X?QfKQ96r2xy(?ze<7L|44zgnc;tyf<bkw
zpAUG*UspOzM2#6Tfxr|8Ac0C;LkFHr!Sxc0)|XbLhGv0{BP`rehJ@-@%{tE$;#qN)
zpqiRaN(#E=?|>|Cw<3>*=6OP%g5iV^);56A!OqEvX>+~L4|RB&vQ?TgT{`%H`mkG3
zfMk<5{Z^?#f+Knq6AcVYQE(m{ZVf0<t$(CgddByFHiv2yHdT#}SmwiC3dXu|E%2ky
zf%zH#*FM%LxM+qYIux=P6WPO7v4j}0m?yvN-iQG|nTtGo!Vb1rzzaT!XPO(~g`ex4
zuiOnV8QF^M%y|s?=N?b*J?f0VxS<*AWPNCWw`2$Gqp^B&=zeEsdwV;32;VQHW;gfx
z;>4#1=e2rE{D2qj{9A5)@1LJAo~Y`Gw@()dw@KN2qziB6H2PRF0F3L`Q{ni**#^FK
zX4Z!^k1SnCc9q*eStfcA0(Oxjqc~ae<;^YC=ev&8%t-i+(MMOtw>@na0fcwDI#6as
z+de8RFC2JT=p^tM5MpKyX{yTdxJ*mzW=XvoK&YlFNb47`*;@vbcvM@Od(A!<T;0(z
z)gl$``bvVCQ`9NYH=`*BQ?@%3X=Do-kt!E^wm#S@9F)V60p?(>B+&~bmMAm*AyW7;
z)~y+J0+<1@xZ=TAq^rMYS4$ctW(@ej`r|9)W36b>!ZYF@8sg|3J?G=X*y#qZd2*68
zsBJ0JhzTGn2`)}k`Z1BrX60y8jw5Li4%ji$qnfm}I2sp6N&faZGJCgE^c(-kxKk=Y
z7LJ_UlwrVv#aif#a`~-r+m_g{4n@?kSicHmtxefVi@RU)9IY$>ihB0R*?F83jfqgV
z02(0H&q&+By4Ommsdqt_6F-2yOH?F;xp`0;;(kKS{1__=1SZ+Wa|#C`BHAM3?v|#I
zJcu9~7$g6c$Mfp`!SWGnP~w$5ZHE0Snnv5fS&W=~d&&zO$1?RrK5C5RC?2@&Fw#!*
zLU_MUw0w=Ap+MIfbtQOycD`eB1B5u6QTH1=LW!CG+Gz_9Ut*LOM!*(g2oL2ICPmE{
zxgs~HoH2DY^YhciobR&6z_#U7;HQ^HKQ};g<}~QAl}hHH>`R;BCm<z0vmn%h&*$&K
zvn1?<5<x!V7?~7SviDvr-RTou2yWBJDb=b?9Dz}5{z>`4a{smlI_L@5ngCVzA^@re
zYkJ>UXe(AY#IipPo-j+z*L0M;<ByQRO$&Q{O}w21qUPGj+1R($+TpzU8TP<NY&5CQ
z!gyVwjAkR@(RjV;{0O2XTnB#hNR`tHO^X3u;@=1-@%QKBH<OkD${@>P8&Yx!Q3`Sw
zT+<=BpF7PGW8iI4$I+S_34#U0HGapio6>;z=l<6UxUBmsgDzLYsGH<>0>;5_wr&!@
zaN;Hq3h1H|P+YHK_{N@zFK-eZC_BPWJZqQscRM|#i7y<Q<Tc-k-~tz7&~HY-5Jwl`
z90c%jU73VKV`f=-5yF+J?NWoG^G>LSkNJ}940F0trPxH=u;YO4{B*zk-fuyN!m(t}
z?lz*5LA>;ch6~!8U2Y*kPw_yq%ntuc`gw$yW5qf+Q%Ml?fN3_Gn^^NafE4b9BJA6&
z8|?O#w?>sV{aPZz4kF0kt)V6;!9OYV$Qt9um|+cG=GksyWT;PQGNI!&kCytVVbBl|
zd5(-{0u;1kcfU4X@Itk(_wfZ9rK{@cYHh8`*|8oIxl97=c0YBh-gX%KF~ok&1jeAJ
zpTz4F1$}`yY~=VMbt{5L7*$Z4i|vDvht}oNc<^nWO3WH4>wC;Z`{}S!oh->3x?zqL
z&9)c9F7k361X5-1$9*>4>*+jR_NXG|lV-O~q|Z10bzOgbe@7@{#ox)Olz0E0LXF~L
zC6RxsQFzHQ=+%!AUj`_|1^Epa%(|=!FDO}}(9ULv0;p^vjOEd*9|PzlkF`<TwGn}|
z!i(7<_^?RfSWOf|E%DIzU90l%uWIhAurpa7e(>7#Rh);<XrEKN9#Djua%?9PwVCM(
z_T`Y`x*C|*w)AWow@!+`P;tdT-s)Lj9yv<vMCk;8L?FGvt{i?n=r~hzCjDSOj%Jyh
z9FhwWBwI<oPZi&xl@8V<S4(T+p%e-d%>0w|Wig2qFPMWyy@3_U*z}TDpTU9wvgE(%
z$aH-72e%2Cmh+O-H3O6a4R*<!yEqkISCvoIbv3v&+k9sD7NS*k&pWGQcYVj_HXyn4
z1<h{hKf2%6(s3)dtLK92xrd4ZwcUg^1Xa4EH~(#H;DJ~^JjpcVsI+7y(Dke^%!d-n
z$(`+yMTpyDN?21m%#ubnI^8L?^s)Mv5-knZm3Jyx-Et(Y!?+OC_#DcG>jjFb{ur)t
zkhph=k1x1uawlfvFH3h$phN#!y2Kl1eT>h;9T-p#(fMnBP>)J8x~%bPkWx=LUhO9_
zke$VJZ6C}_V>UWfyjXC-D1}}((w9T~68ql{pGG>ZtS%i(R}?31qx2tq%0A=xXBFEx
z&cj~MclQFD(+S=#8}A|O?Jf4xe;(g?i@WmjqsNmwCrvJ99hPkJ%sW+6`L)*gT3WE5
z7~b;FyL;}?$Sd%%sqdq3z5L(b2+M!>?d^enneIdU4QtRY8}rk^*46d^dv*oboiC+?
z@RQGA!>>XNj2%LhdDpF(^!w2u9R|rkLA?!{>bBu$@}Mn9eFDZd$g3{Z@S=t3DH3vd
z&V+xb9f5WnQm#MLMi(vyBm|D9TiSC(d;mHELb5ETKuLRcQfGd(Jtcz4OM2l>)PB?d
zadz9JuReRU)czM<-cAn^!WtQirSli^N%SndhQ_8M{IN{kIg8VfLW{Cl@O>rfx&u-W
zGsuYM9W|o|FnJh>5E)6--wH8VI}dE5bQ1<ZKiqsD<79SUW_2r!$3$CEKCR8DQM%AG
zn9fWWwD-V4Grzxit$8;Bq2<KYellmlqdbYT2By){e*BXvxLp{L#u<HE1C?b3xZlm|
z3Q7C4=hZnaB*my_UPW5Hv8nCyi~yegyTou~YP~rijuBq)H;H9Th#~7#ufw%UK*ew&
zRC}x>Mj6YAEf=g}Jx~-WK#_&ervf_EY4_D2Dz_c-e4?D6Dp{*Lew0d$DdzFrxDZBE
zGjXdZ9o&gY>7VV1MV`lFskcW1)M#=t&+5N>3b80mPd$vGa!GeWR2fAl=FIAm>8n+M
z@Y{YZ&r-C*bbG*Vvt4&q)cc|mt&s73H^AiOZfJtDw6MQbvOKaODL@it8(z5}s#!QF
z!?}R0g-C`_=5QV@rL*x_RdPM1bog$-y|>{O?r3aAnOMcH(Otvsk*Zrmf{9lil^6ly
zQ$-2SkHJ+-;{p9l<qptb&XnqY3SG{w{YUS&u)ew*+`MqU-@M>Gmm9qYZV4m8gvv+o
zVD%a{r%(DAz?lbem&X_7<<ZW{1W0zf!;TTvW=l!u0~HMVY_P5<l=i!jYiOMC15mWU
zB7R$2D>P_)GAwp_qj02r==IYCI@x!$)Of{ngMV^&-o2VEpZUN)miA5u^T6OBKN$}U
zbHeuum2+b(`4!A{`9J|I#)Vm{pTKt2pA6r1Jy7w$npL05Sgp4d)i?Bi1FDA|5N};S
zFl_3dX_xdryFacvdX^?O_Wya%O;Xmf$rnfTJXUqIS1_dAixKx|`!^M*hVw@o=>q1-
z{63H|(n`hC4D%vN<?DL6Ul+5-jgwS>QBg}#QOi2m3;cgz*a+Ac2(UvjF+Q6DkwZRx
zZ@+Z`@heR-YO@Cvx0okfJfy5RzWBj6Lom#)Bv`qB_7Gx29RPlR_99<mhxv1RNYmsj
z1!EYtl6y3rfNru55L*clDPZp+ZSkFdF|U9V0pE?2Pz4Y|Foex9+8V_4Q0a#FcN9=b
z@Nxtjj{gH||0OHHiPmLnC}>Py6l{c((nvc>Rre}5WLh(+9;?d-o^sm;YGC&CZ0pLM
z2?4c5G~OpD^eimTN?XmsSwkuEA}9a#OP^uF3*_5y;(65C)-`!aGJLn1A%FOs#~M9G
zU|TP$a-GmPaLAgIba<gRrFU0F-f<n9r|I^3sHRBl8ZztP<Y@d(CJ5?7CC3xY{I-qR
zC=$ZDMV1m9#|)(I<83mvO1V<K<zFR^a;em2XijRKWb>BtAuJqKwBDp4SK-{?nyb@I
zGxK93?Vwoaq;M1g+LU^Cb)<G}TUI*5Bi48;1j#8n0OBrg6GgMkGEq78&Ror+*ms&^
z$+1&S!&%r9CNPA-L@dh5nF*U1Wn3tY0k3Y=Sec0puODA3>95#|ILL2;>&+9KD$@0A
z?3=bkuL6+(1LT((*%<2*YGU|acy|u9QWa;#K6~u`lhQSY@Lgk&?Vy1uHkPBZL<)GJ
z==Wo4Xhwi<BhzGBvVc{j-1z$Gz`=rI_7{hN;)Qyg`J(eq5Y1FHGI2|JjyNO-haB;9
z%_KdnpkRKq)qayz!n9SnjgCdx)%p_Y`j8hT8!*&s#|5K4w?^O^8JOt1s2kl|1*Irw
zf$ybTPY3Cg8jJF0!<4cBT0vBiQVb<}t}tm<d6Grt2D#FdL9Y%E&D4J7&hJv5_{E@b
znz(}(>p;>B&KyhSd_`GRf0gRSNSnC^gf5>WoJq&xJ)ITep2qUWADt8&J0S~Ssn#Q~
z^xqywy~(G*;)Z!5HFz5=43gFV;fr;AN0TE#;%uu<omadVHl|0n+7Wm2sEVx92gT_;
zMj&8R%_FH+Xdu5nPq)u(n%Jr)b2%vb*cnG)9B578ewIfGS3Bnzx2}Z-Z!XvD$;$s;
zQ><$N9$F3q{RXaIpaHi7K`kpw8z>2jBwTD|ap<JH)PlNcRI)J&IjQ~V#*=5j=nMNt
zHHK~3ejmCn9+QdWK!lR7IrY4Ww_$mRbvG)<uzhAGKNe>^*u)h+HRkjGE<`stlh(+8
z-iC*t7}I}2+dBUL@lm2s+2VhE;m@h+mhlCuTq_XMO_jG)N?{ZlN%{G!T&r+t{m}Lw
zwk=C|(bu!qaBk1rOPyzE;ydSahJ)3wG&oZs9aO1NV?glJ?(VL4@uD}VDppX0{~aZE
zuUa@xn(0XrH;TgR%(z1fD;zX^Y2F=&j29TQ8cDKTl_@ltY$;eLaKbuj3;D@HQ1mgV
zCkolbD00gWh{N30aR^mf{jc8^dBaQ(C#k;nLF7$fpZ{qENVT4MY@jV7icC$au3Igu
z+>0JHP0ehLz_0vX>LL*;BswEWDRwG0lobX))A<xLtrBZQT67ql9Ed`Doe_22bbpQL
z>{GYsL&5yp_*+s2Md)G4V(FLFQ|<%Cs?q~e1msp)$0>5}BTL5xQ2+ISrCpVMuVBh8
zZ(b5KH{Lk@q*PlJ8!(v-I%H6J^WW!rx34t{`ue*&)Mw8_0V^W=eG9E7{V=Bbw_DEW
z{~u%T6rNeMZtEtg*#0Z2*tTukwr$(C?NsbkY}>YN^JMLt^Xz%C=eir?zT<mZZ|!Xv
z<u8LBL%HBPj4xa<!^eTPGgLmahw^CW!up&zPw)j5<N7a18R8;$(G!EKrTpJxeUK?@
zQTV-2e(SUsacX+JaiPXc&Xg=NVoefa{FG3exEr@tyQ+<hIJ&v`*={1vlr&*Pj?c>6
zkj`4MBI~w^YrKQ3;!m=X4gr`Jbl{|ZQik-cr*<iA%wf-<q<;47y^0{mPT{I1Bt$rC
z?f@6myY&hW797B=EFP9m*yLoo#|=)_`3+ac3o^${)zRLB%#`-gB1&|p*eP!G6(dN=
zP8Xf_*5`w$nyw>5Z$$yvK|qn58q!KrbMlc}?Ds}sC5uhG!MgtKL?gGG^<-81KaG+E
zg@0;}9h%mhqUM?kQdFg0BFhF+X5R~-&QFykU*!OTj#IDZH4wF+B(uATgm{q5!GX#d
z(h6ao&Zn?Rw%OvMb<OYVY}HFI>v4;TF<?nCeSb^a$mhHn$R=aOk8H;KeCMEy*xL-?
z_030?W((M%2yC<Nd)Voee}mhQx_N9G=U=_nSkm6@bte#C7mXbMhG6X^ZPIpqgZ0nL
zt}l*%g;J!(4bU`F!gt(_r0qLpSE1a;!N-^_6DJgS!Cw{*Y46ki-&;^!6`P6t$DHBy
zzsV}uSsMSBN9$k(?br-HRPSTejTHbr+7ik7K$E2aY&(6i#f){kEa)!9d<>(J$&F$A
z=XEx)(h3VXE$nlS<5jDvohSN(Uf+Ep-nvw;9$UwyZwrQ3ka7s!bUbw`Fcs*xe>g~u
z90p(xI934?j$a@Qc@RfY6b7Tpk7$IbM6MPU>~9EcmBtM7pbXr_3VaVEtsWrP&;F<A
zys(ggKwppy1n0-tj0g_3eV8;r#m|PAoV?d0MV&AJ`=T+3iDl{L!=Uiik0)8D$8l>a
z`K^`Mfv7=EtN>L{gSwkRi>DHjN}fE<xy+3P55LSQCXP+hY$NP&?wloc`8T9J<uRr<
z2%Wr-v`nEd+scdD8B&o<O=?pp%RzW_ZIlB}gu7?ZduvY{)64pb@2lOtqZ1<|=208B
zV9@j%!z0yj;AUpiF=1_q7Up3d2ujHgp`jG-x4Ll+#RPz(*ch>MAnC4%aunuHdO6S9
zQ)zDmyp6coVBL6@OS76S4^g%A>$f`cpi@O+XHAG_?>-lm_o4$p?F&T~^N`v!(2Pg@
zwZg0wy0l@Kq$Ou_uF9(C{9Lo_`<)V$u_nH_!u8UxAexV<;cRp$MZ{Us6JZvO^}f3k
zf)}>%NAd#e^+M)$o8KXSsCiGPSDxvn9@iRPr;oN|&#4)!^!V@$m#Egsk2foGv;v*K
z*^FrjXX0Pv`#vw&6?;~+dX(h-tfNT^t0=t3bv(il!mMaHYFcj|-9h-jS7DIA-X9Pc
zAfPD5|1O9A50A`F|G!L$mzb80Yhrht-3C%)&3HqQ$j4ZmaeZo;wTF7}c4MwO0Af8L
zV`Fj3@TP`8*S6hP7~CRrkiW!TuFqU3dgr*_Hn}$$%Tr*Aq}H16SDBAsau;;EdCC_S
z*C-jZ<Qz`rEa_VCxR<|#NO{buKZ7qlLW_(uieh27=1Os#eT(M>fr4sjqM(|%IEW=J
zCA9Zo^rU!%P%o&!Q6h^41-^`FN3*}u)tY5faD>^u`ff%h=*aUCP|jWkYDWgT9Hj*R
zktA*W`3e9==mF&;X%oJvtLZnwF5%2YLhaa*0>3DjUuyeBeQ|$L3^P*_a@;=TcKU~<
z(lz{Qzb*Khb4$F*!`Ii>>=#0gDbCte#~48QmkT`LD;sLQBDjySKO=3NoY<Dj*J33!
z(qu!Ki7K}(#YTnn%5<1D`gXT~tP&DYX?T1!sx7>DHjP_^+3k*hv%!K5M352jGpZ4M
zbM5c)8A9W1=+a~B(w{C`u0Y`af_i#|3S2;ryrsniG}!dAw;_na9aJASI}KM1tfdL1
zX||*S4kv`w%<}QauD-!p&TuYiGuWP%j28ztS=>j6BOKo1on)zcRNMKiM^rR0Sm9k%
zE7%gV`UwqrD)w)BYfBj^i^)%68V*p)X%n1B_Hf18zk~jK{4<>$jz*1MrdKfC4dK8V
zQ{;wrF2~y&3E<>cDi*^!w@K25gnoPAs4jn;1|`R)%>5rR7z-d9<GAna2Nt%vF5p8x
zE1u*yX@x;K!oW&%<AC6pXORZ=5&N~7qIURy|K$E|$^wx6eQP8R;68-LkD6^!&f2`7
zWR9^YwF0zmdPK<cFlK>z>A`~~SxCB;uf43`nvl(z=CqMi2KLpZ%o)LYuo0(UqSqMv
za^j<PN8whp6EqdL_=r;sVh+`Quq>AzY?u#?F2|uVnnJl4nyK({&A2mlBp6jX2z#oQ
zE3Fq1s9~Gu1k2dNTH#o2Vu>Ac%ONk|=D>cFupL2Y^bz_U@D->$wED8ZUQCF!KD88d
zW#IDnR%69qb4_6if?hM82`9?=&vkNqs)lara_$5rVfcr9d&T%x^b+{B+|7u~e=l^+
zwk*U&1|S6|Q<6sdB~ZJYixR62i@u%*_WS^?Zt!C1d$G3t3H6t?xS{L9Vq%CAeR|m7
z7KrdG1(>lKN5JYm-?DT=p6S&z(>@Dpf_^X!?WzF49wMmR&6|Gryf*|&$3T=tx-7^0
z42)^ibryK0Us=H4+W5czNRiM{jU&`)emxk(nJ(cUIf#t+dBxZC(tv4=<D#0Tnzvt&
za6!~BqZHsd7|lI0AnIHWjUd{56BUZ~z&9=;q#Ot42RRA3)bBa@XengHaiR||4u4T*
zP&zmc-1YD~o_+k?)BD=}B$W?FMSx_aZc6C_CdzpCPUGrBMJ8cAVo%*@l^7t%Ya{zU
zKzEhA*;M8e#;;6;C!O&DK~nJ=D4rH-j)*u`s>7#Ys4O_?mF6N{b!CUL-cdQ|BonGw
z3cy!jd%u8{G3oHHs!|MFjE(kCY+%m>J4Ik`NMnn8?UDW7{6P`bV0Z2Dq4~<8?282)
z?4L)na{N$HoobO?4duvum92^}AG9T)Nhzz-zLOkW{2r}x1iIoh$Yl))+~<dEih01G
zm|Z5x{kKzZN?RBZVEPb_fdqjdO}ycF@30*m$M7<V(tL_$Z2j2rTeF=CBE(Se5ePDo
zFN_YTMI~kITs`{e1WV(MV#%9}<=0@i*ys~E?D5#V$KYC*t&f}_!Sw{$paS?Jl&s9*
zz~F&-7+uS*8urk}#N_~mcqr0+B+fTpb2yAa6!Ft3BU?D6Sey*#vDV=D;_TeXaP$U#
zNf$A=YpDVFEg<ZR60u<#7hCzd5KqwBO^<v;^^uif0!S@cyI3W^4c!&sGqu+AJtu@G
z?UyAF#sLQnt3BQl6mPZkpNOd8#|QI_;Dm4P+6D>Sb9sGqhAR8p`OkFIqf(G8iV$OT
zX9u@C#VpEohpPy9pX(-Sg14%7i{EMc7qRx{Xi3hT$Y=N@EM1avNf}ATCWHN2Ad%fd
z{+rm%Q#4FDV+Ex~bR{XUx{FJ>8|K(mysw6)Gpk`qSBnr;+vYXhI~Fhfw<Hbg{ZkOp
zp|J-uoK+Q%nt*Iy%VVpE2_@okZuMeyt5=orq~T}o<V#}lnFu!-B?mQuom9H*_`O~&
ztHYoyI2!jb#PL9YA_F<!DtL;S<VN@+ud^U%-o+|n;zeFmaBYD4JbX>pT|qC4fey6=
zcvCegq+m-kk-_1RV|-(a6=!c-bRd-vw!eX}x+jCm;pyeY-JO7?^Zf)M8ECJDoA@0y
z5O{$%Q80eb1ZT=g!>zs@RMOsNVSO&c1qbbuA)N1#t7&!fmy{vKkyd4^3J7{ER?%7y
zA!;64+4684Bwf1Ij`am9p$jW;cEDD$J!fn8n$Ahg?*OZsxg@|da)#cO(zA1G^`M5T
zmGPe9bm$w_94>Ui;XfG`)DE5;={+E#$9N?NKc(VNs!f&^7ID~-as!*4&)0k9RS1|N
zIb=@OA?nHv()Zs9s-}FqPI22`vP&f}8`6N6cj7L4ux#o2@8Pep4M3)uE@i?`w|jz~
z)g3G)uWBsaaVX49O<EV<JA0dURhxA)j8(;cGM0yfp$QNApS5K|G>|cPUX{tf#AAb%
zu?r6sIiJLCB5vvDkpQ0BmJW~wR=JT$&&!M~UGI}khD9&JO|RhYNGFn*iG??2xe;wE
zY>MSVreW6vR+>|E4~WRPl*_GC62(Oq%+<OHXRvyg(*&D!XaOM_9O>BQO2hsX=gG+w
zN~w<8P*scH=Bt{Hgor^HyCIT&Gq)-mzOruOofr@SH(k+@b>)f)75biMMxdG`tQeD8
z68PtFMTBLR>5yhRAz;DPPcrA@l^R&2hjpZ*-gKX9WZRgecU3?yBxOr0?~xR^A?<Sy
zyqrpvO--)xkgVZ{$+iuxC4tXw4Mx<YcCmp)PLn5{m+VGT7m3Fj$WY}JavI+_57vqu
z;4C+$%Ps|g+dMiMh+wVh<rQ{$Nrx&V{+LoP-0#@k@7Pcv{uEzP;MJ3FQPi->9a<<*
z`nOU;emjDoV>Bw^G4?Z!_#2z-lcNS2-i`#K#`M6=CS)#mi?N#S?fSnB@?9+^Icd|?
zRJ0R1DI(2ro<J$VRGn!@%Vy2}1{GY5C01`H#TdtoDez)$-3=7TRbc{r517Dae-a~J
zJ2nF*hXq9B*}LkKb1NMab9|jswoYl+KXSNRLdQETj+a9pPxeX4a+ob8ZX!kB#uN5T
zPZH{1$u;&%Um|nDtawI{3MqlGzJv?yCJ~c3`RP2%F)29vtZiSU@jec9-@@$)Z;efE
z2DQFQM~%O*CQNn7hmk?W%aT(IoFecZ349XJv)=j*(})agO~u$AUxr%3w}kUVlb50L
z(jIHkKI(})2#(kCHm@H-Qeit>xEJ0w(KFYUZ)zYLOH?dq6B>v9s6OahR)yd;qwkON
z>z@cSg5CaAcozjRpu06zRC6BC0bk>-X|&PYpYBJ^+n3Omwx`-K*~?fsq;e5Xtr6FI
z)F{qb7#*H!bzxtq-Y=e2raDg6w%#*5qhJJk`KusX|6aX))(I$++E{}IDt5wA)gemn
zI&<N%_~hr}PSXEmPSkhWRXC6#^5RVIf<=c`8jZH5aE}f|l3BNm<6Q{Npzz5E|Fp%k
z1(I7uDEVbeNg)Z-ozN&T7z7BZ{^e^si}9aG3PggSF()V>psoLf-{5}+Y%6nv|F;a=
zscvn%K7#aBtxGQsl>1jL<v=h~%cy;ZUE)l@$G^CUy9mO+KxOX9ECH`<MP~2oX=;LI
zl(;p?8%oYwtY|ZR)!qHbc)3#shQkh1<hf4ER^j)@-MDUB=x494elwCCMz|hFc8@aF
zm#7<gRP!lGRN}ASuRK~Pf*{KTNVleSTzvdQmIT~LL<UgndgKOTaP(bk0W8!!%R$rG
zzx=lQs5e@k5rfFBQ1~6@qNVhRy@B_pP~@Q*fM`3yy-vY%{4~>T)LPIBgWYU^b_ty0
zSA_3Qa)fpf3XJp<8|H5ZowBNkcUeTtCDV)Qw5${{2z+5}B)l@2q7zs<w=OR)`NLR<
z!hI2k&T|aT%pKubPNQQFI#tetVYz(UQSFk7Br$NTWTJ?5w?>%AtGHA7DfW6EJ$1Zr
zi@UV2taAQPz0Krgf(9}WR!w})+=u5U7uis7H<E*GsYN<nMe1eStm*tFI+@3dKL-lj
zv)=g4kxjN{dKLq#^1c(=i^);fy&Z6bfU?=*Iz`8M<w%x#)?t>JyX=&(CSszv%I@g-
zXZMp{RN4qnksi=nFK$^yG3KD5tG=oudb;7?fCk2d?pJ%N2n$i$A`6CGGv^)CqyYTF
zCdRV6q$@yl%PByuMp_%)Sc&sZt2!fs&c+eamFP)=e#!!$$IYjB^6v&|Mrf>&blC2s
zXA9@+LTIY=>)K9gV{nYGhV6zKApYkDnLRYRl&f)Kk*AucQRAR@_Mz{rhqOgT(((su
zhlqt7tUy75c!?l<NALW@-J9tLTP(rmQ@x2%dSSjQT+m+Mt#0PtmPVe$L_TXuX{3A>
zS4aD89Q<aph!<e^L5g{_;Y7D#{%V$w4>8Se!2v%{6u864!#!_<U4kFRhGW7b2tI&t
z(L2oUdGK&&z|sC?$ML6oaYf!#`Lw!vnkUA@P?}JEeD3OX_2OdRjpt7%?opc<NKG{8
zZd4iMA1f$rCOS#{Hz8VG^cE8QO`3J}vGO+a3)F>j-H(n<Ibc<lhijeZNi2l}(X@&h
zlK!zX*2b!63$}@83+1it;sougsPRw~vs~?oqvJx~-chKW3$EbL-rAb-8ye%$n%_bL
zar?fpqPR*`ZyHEsp}d$B#)ze;WBtCN9{9g<1oVIlO&3X;Le<-btH`Dm1UliKz|aHH
zk{3;_B|s=YT<c9A{S3q~AhgXyUl5MU70aiH(AC$ezOp$EKiycmKOS-S=U2PR1()wv
z4-dT@+;6wYxzZj<T)?H|rE|;^5Wig&5p(PGN0gVmwXC$6zU+t*`CGIrUXL2iZNY3a
z=a7?*g6*S{r@L8MB032F;iZwukLedgpdLO3{(+uXpeMMTU16=_)qmX{F8sHj@#{|K
zC+;i!{>@Qz;_&GvKJ}cYjJD8aEs43)i_)ge7Qk;!bAkXDWPhXtjfN2@3M<jsrFDGA
zRB2pk!eVycr(KQa<s&b0)})~6&(b)`A=)Q7kJ<h+Q&4_BAYkb8x}=6_zYy#p;#>H|
z^0aA5jwxJ5mZK9}N}f5l9}b3QJRvi(#_I~TD4=sGze-WV?u2U-LPMe*Ehn}aa8xAO
zW-2M!TPnZaX}rf72BpaQ&4px$p=3y~N0Red`&my7BTDn`2%X<@OQCJ^ME7Tb-7ZOz
zgGF8cP7qYv{Y!OQULsQEB}OyyV$t8gL&`Pz=5b&lp%%D`_4R!JI-JwjSfL@D(iJ<Y
zz!qM-VS9&PVx4u_vrT0UymcTh5pQ*V``4VV4^Li~GaxtmVW!MkieRD3+kxR4QulIW
z@)y9HjE%{eUst{Sz2YtA20K7Vp4hdVx+AQEK_pb8Vmljbmh`oqqukyo;RZH)IG|mP
z{cLrZK?06!xujYzo)c*^XwEB)OraQBOOh#~P~ug!v*4<%BB(8<-jAw#q5_OQY^K5Q
zgZ$(oPeQo3`m6lkj$nhZ&-CEiDaJlvWN9>}$;R$wY;Wc+KZf9+L54*_t8^|%hv3bh
znKMRY9fZqK`JtF^Y{Va?cZ4b$s_DJ%>jyNl_xXj<p3q_+dsD%aVnnWcqLQ}0975RP
zV7_IXJvg?aI78*q*GzK$8G_`T`L4;gw;R<dY*`VP#}98ny_jIN_9|#r1zT){la(n+
zGtMZZ)C^O@wOKR9JWwLIjAg!+8CTGy`}`=}M2vC2z_(u2;g?jN-Y<@R9@*FgYeQg;
zaiY!TL<@6l?%Y5yw7y)_z(|Bd@%cQzgf`MsZ=#t{vFffr&oqh%9sG^2MkHEoWfk2P
zoS9Q6Wyc0;uQXd4=<BEjYTUqqE$VnOFMSDcftB$Do18SSyPHN2K0G|%&L1vn#UCY2
z%U(Cz+Fr%8r3bu;maWli?b=!z(-4#{e-xEF`1R><^(TJN!RstX5F}=hTKFaCc;L_p
z_G%WYb5Ry(F#JkGbQ&n1a=?GlQiDRvZ5h-Y1kWbW#GIrpPuOx^(MwXo;J61ahKM7!
zRmRPw#v|I!X!?PCz9yC|0-GuD{&M>0s}}>5eEu@a$yCK!`P**iWs?f{bd+VL9wspm
zYO<v5+*x?hXUiPb*?HrNLc|{bfCrOd^goLvs2j99owG^|J3L}*YHp9bc`~GEWRI^!
zOcN27_s5(ElqM?BJ~Id>?@T$uJ{9qjz<4Ssy$Nl&f-2-C7rM_zSql5scES0kS`T^m
zW`g*9-SVGfS+$2d_>U5J@*&R-ct6{}6TzlFgktPyXvn~F-qHCe$u#4$f@2jacy%jm
z+Zy=%1{K@O5z)XE^6rkT%h^j4CWGEg?7~x1(zl$lHt!sDu1a1CTU#)SDI4A+1**D~
zP}1k+265bR=GP{C+A*hThrYc~tJD9exeyPz^HOT0-&z<C<QyA=m9VoCpbaM+avXJ7
zH>*hY%7^|gZoNc@D_e@C*^1f5z-|a4`WHl)Q2b`}s@^m)=Vu-%?AsRwj*zeDl0H<`
z%#S+_u=xnopbwX!_L=^K=S{@nPiW78qu9K$ka5C(w{tPXM$tO=Y9{-XAMpwri5;%9
zmzO90=9Fl?$N#e^$HmKPFl!_&9M#m^&S9?xOasQ5VKPM2a6y@vwvJw!jAJi}(^i4n
z);@vAnYEzfjoez1e8wrcSXC}8!Yfa%tSJ}r*tvq*HdNggIDtZ3q2iyQD>uN<5mP;N
zRGNCMT8JUd=NkBxCz~s7IXvohq8RImA5g5-^z|PWQv7<ISCpTyS(?~?)lC0StkT%V
z@c%v1En-<J?u-17X6jM{ZMBrften~wz&8eCun+SaJ`=8$mPQ@Z5KLX+K`mw7uKTmi
z)1)Xp{(w32faX{tpep_J^wjmavA(-~&}G#;i>tWzlfe|icDrkn(~a{bL^?G~o0#io
z8Ll{Eeou5}!9{vul&a^#^~Y`Q1VnA#M3v&UZbR@vo)g@-CE4eq#s5HcEcFEF2RL4C
znzCNn)=e);Tl6TO!-egqBBBVhyfBQckb<&qWpQL3(1j)<RsRn*Xw@)|7ODl5(BI8w
zV9))k&j?ULDhmnivm*uKLeJqmgd)m4zDEFN<`Z{lPDgu(7xGB%=&1E?;+}|eW82ru
z>tfh0gbL=}-lLlq{c?Q&A@!9a==5Dv(-(?>mdb0YYtmu+IP&Xmz%2!Qw)6JF8S#)S
zdc$s8GB<$>_UQA_(mH&@d3&<JA4&>$G&6LMoq^hN6%jDClUlcH>47<<6Bhfg{^!s~
zFiU2n|Ln=Vm2Dt`Q{l()I>_EN;!5-Wt+T;l<;wbc62h(LiM}D)<7<0ba>GP(w}t*b
zHyl|AdjQiLT{1<y4tIxhnc4ol7kM6Rlj0m}A!f`K>g$`{E0R6x<o4Eoai%3$IquRB
zTEhpkYl`5figWjOIS5bJ8zTUBx}GiB6lyI7C@*1Vk{uaf_R$`%EQo2>)%9BjSg(uT
z_%^IT_+-nJxv~qhR7GT-2Tlx8yaP^bZ}+LuhL!xTH0a;noZm02jwabBOH5L#16=o!
zor$P#1<+cI*t?53*dchera}1klM=nq88UwrK%Ozv2q7&=A%Kz+edhrWL;_^y1jh>9
zIz|%6J_CUze;6l~>u^FkfeHK)L>>_wOjghhnG$iy_E>2C^dHasMbfb_CNo2BGZJcu
zZ?IUlZbxqPbe1FDRzvjpkl7c_O9vVmBs|9e7<dklKZAnOuFMYZ4ooI5)Ov3FPeC)!
zI<Oz7mAnwn+V{_A3nwIb_^upA{k-wLK^<acusk9i$ZmTpOzhhMHQ|>SLxU3|x~QMu
zH3a00@O2ORMsUAhE+(~ESr9=lh{^tXB+L@j8yy%_e@yJDJit^G4TL{rW&<&*F_Hn)
z6o@O4ph&k^Q>kDP5b!`MXFWQv*URD7acTVo-RrV?j9lAfIcL~zcUI_t<?oNFjIaa2
zxl|;xHf_!EOF=elcq>nJEfpDk$A7$=8~l_$hNO6E1#-qOy1E+QB~5EWMaW0X2Dr#P
z!B(2?8GP{r6bQ4_l6}Z!&Ib~ojO6zp?-`g&`*D(DlGAo3vm_;wXJ8?i0P0%x+kohv
zrYIRvMJMuSwi#fJmRUu>BS;}znR<}|m-fJ^#L75iS1Ud+SXKB3B06rLEcE^nR`TMo
zShO!PKa5~Q&SR$4{`D?9E4)Av*}oQ55>P(5+z+2vem{i}<eTiT0`|~W1tKQBsm+B}
zjOi)c;Zl_5aX=GP|2k*$IeM<1bKG?{o;M?Xc!<8y(WE}O1&0?f6z>{Ea!sHlND+~z
zbEVAtd=ujjV?sNoq!0m-A>M)DwXIq0G!F4s8kFyo%z@70hlQiJR`pbmjJu>tet-&J
z)*RTc&7g(+e6togVQKZka%OOqaGDFuAUFc0SA2Og!jckhOMV9fi!`YG+nLnF(@C?B
zubYaULhu?0-?vXRBYqNowD!3ByLP#fiu2Wz9oUzhhqM(aR(zOcvFCpo!a_%cm7b8Z
zoyM@Q$U<lMM8x)M^0ibjYfvjt8b(5(UA~krpmo|wuFk6R(4J)%TgZ4g7$}%%3xSPO
z8O=n+%tQg5`u^;aR(ZJQNH;UN#H}2#eWy6qG*O^(4)Dtw9g1{0<F@bZ7hErmd!bRK
z<V9t6JV*w3r>MqAI2wlw(O2vmV}QC>3kGlc++%WATn!`Xm3qNXNJJq0ze$I(aj}Ly
zsCqe|L=ZI+HoNpPxK0D3QW_yL{Xw)v?&b=2(GPHeE2{&q!&Qt+k05rP!QtnIZh02a
z>LAlMq0-iC$=2()_58A@;P5dI-hcpfbFB^9(RJp0?ctUMHpp)i@*ULDj)p2uTms3!
ztKOV`u?Xc0cj1hs*ub+DEXq!1pwE%sOy3|k;JG3?py6{5N$T~}=Xd83QtCL$jcDp>
zKAE{;pc7zzu{Y4$X83vyBClLxFMDo-QMZ`<&H}U8&6wWf4XF?SOL;AbU`MCFb+nnE
zcN$V4D&9P1&ljr}YAHbv#x!04HLOEXt=amnC=d5i(CKzElXU2{X(^z8bf5^^$4B{Z
z5~+DTnQzi5sbq4%EwQ#pWKw>D-XT1Dzc5~GTTwOuL=Y8B55vrQk^q-}9viDSi`5pW
zl-1Tsg=x*3uZQKM<d;7bGlIY@E?!<Ft`B6I0t;_W>zCFVHq-vEaTvU0-Pr_=+_T31
zSRs?_e@HhI#vsZ~<wtg)a>*D-e(1S{wJJdJJF7L_DF`wvW?b3Y@YgFjCDxlu`={Zt
zMY(e`ti#OE<4M9Y3kh8Eb6Li{-EI(<B^YXf;2N_7lu2BCn*8{k*7S_bD1^vP#Xop0
z?aE8DI|;I0tZ<c3D@#HRIMgo`==WTuzq2V(S2WpzkO?i%d`X0&!X}BLk{yUQtD-q3
z{-+Q(4LT@c#^<QLOv!z!felwn;*kM8h6u$y34OdoC-tDIIlo+NkdB%<_=&BjHIMp_
zJ@ij}H6!4oJ~WP|{Aw!2^YHc-vPz(|=kIjFO?04}Z>sck>0Ab`6X4Yrdk}(u5e2CE
z?N_ird$R%1Hss_8r@T9Y-h}W4qWmc)9EG*xBK)CazF>V2C%UjUXi-f3V{za)Qm?ZZ
zwF@2d@xV9R!}H6-)9SUe?^ih%W5-SnqyoSMkT}BXAM`OEcA_%@HEjF-kiv6r!J(>p
zNmM)0zlRQOJaj8-QMU>s+t@+rtfsgDmgP#i-cc}k#So`_Iw1C{_d8vFMBURN#{5jE
zXllJz$kjq*1(4*w1|)tT3XIMT8}Cr7Hy3>#sfkfY<^v&iz1<oLHED3Afe0FZTA?)S
zX*siJedIZUPs9oC(xd-F9cnQaClOu_3A<I^yjL=jCU*P*O}oMAsn>!7pe?uWJ2vF#
zWb*T=r-kJr?hv-iA6p|RGGk@%i&3e;iT0P+rOKoBF`+zQquTi@P%}t6Fzunw)D;;O
za;<;RloEEfna&3xH3k#%c!&T-RhuU~Irun=lr*udm_LQr8R{5E0{A0jwb(+oqT((k
zW8Y>}K-T%m+-bs|7kS~cNpj_oBk2Rc)QEW0Y@~zOdIuiGO#(UuA+S{GK|K`BdQX^s
z3*kLr&KMI}CD?Fh{Nj~=XBv%KlK*C&Qr}JDV44vRzUd_5W-!_BNv$rr*F;QJPdUF@
zv_puDuW>DHGDlOr;^a|>Kp-4A)k7d*r8zcI?p^dk;yc6SaO=gt{e`w9cdMtUe5u2F
z!mMXgWDCTGK^{_;RwrBm*0cv0UB~z1*jotKpFbgi4ozCf=vbF7(&R{^pEo=Rk}LPd
z9@PYpC1?OAk@qMAD@<iiEcS{BoK;)lKvOiO1<BqhhK4*IbUpPn4rOaK82*lDc0X*l
zoVnEKj0g3fD6{!DAeLTwoD#QSmCW4DEvfn&<@0PnbtMTcw5+vpD0E2JC4Eo*7>RRV
zuULg2G=zJq_kApjTW2OaT7OPbm`;*LIfGCk<3eABe29udCHo@Zb0KNDv1F@A5@;4w
z7-YUzB{q+myn5RkN{s@a#@2@nfArKQpr$QT2VU<B(JD(!^<mD@oc<Eb{h@!2sV$?K
zCwwVdjXN@>LNn2nk^#e<BNC~RgjpRpAKr|bf)2W%II}9l?7HoWjNq6>R(>7~SWx3)
zC;@oVjGN(uz7hkJKeql;&~1-ys)~bjDArYZ_4a(KtNK7LTgzC?#2esEVrF>CKo2_u
zlb@NwLZx5ERj4iVWSl8n$LAS;YnN{;Z@DF~iT3K&)IYAQz;T&Dka6lcFRkDR^3Cw&
z1)OH0?aV(HvSedyOz5hDw2s<*k2j}`K)UM;wkD(fka1y9pbWLnHe+=q78np+-Vg3#
zol&Q<9GH<~IZ517pHek4X>2ZQJj@~uOR|K9XQo{5pr4)A_+{Lv1YtqW;Vr+=g=bF2
zPjH=T{af$Pg=f5ACBnq)x2kzqoQ!yNb9Dk7eCJZd8K_CON+S|CxfOJoR94$53d*yc
zFh!;?9+JjT{`6E<=3Q4Av?{vMR|$jqN*^DRIi;Q$eO<Zc%C54r1EhadYS!N^$HvE~
z_o<#19E@OQNCnd^iqkO6m0`A<)#?h&?SbjmRYii{o~K`xDNj4&z)!DAX>JGSo@WVb
ziu5wWxEI-Coo^|x5ND#P-ouUgg4SXn!Gn}t0$lbuIqjl}1FUuaNwg6XmR0!3Xs?p%
zR?{m|b~oh~1&RQHx>UyzQGd+@(YA&Js`qZ&uSLmBXLbd5gFrk1JBX~fPGLO6@L3Zj
zC|Dw)bQbDR2()=3krYDq$ii%`Ad5U+HegWf^I%EVfPp&nv&ghs{1}MvhNz^CnF%ON
z<N{>tiot68%;>#a?T{P-9Va63Hn<e!%e95N(A*=-s00*dt;L^M?Tf6XlI-#Enhx{|
z!J!s`Nw4|vPp`$a=A!SSwW|!3u;7a$aA|UM>BeJ9$T8vaCLW${Zf_@>qNVJN5i5j`
z^+PhVE$d8$&tJ-bU&h7oK{}|9^B-}Okw9J|@pP%d{34r-LOEzUP(_^Sr!qvHQ7~MU
zrC5^WU&!eLPKjEy1ZXq>7YuZwCr5Lq<>K~&;>P4OkeC(#yGfgLxd6n3t5`#CKq|ol
z3{QODx@8I9w90snLoBlY7%Lv#73&-hMuf`8$@4MjThBpR;sX=IGwhs2k_6f1(vVYG
z;$-V+d`a{ejzEYT-c`C1GdwrGJDoPJ<h}VJRrlvW$d)r5<Y`7lPXl!C`RU!vBEpJI
zeH2o@yEY-mZzdg{FQ_frxerHm$zI$Ck?<#!k-`YS7tNG<<?uw4aZc}61!#XhWvy+c
z(^xbR{j^Sp+@qH%Os{C;Jf&pLN6b=+JIiR?yKD^Z=ymj(fv^%<nABMTORogwfQr-S
zJXfOp`di@bT*R7id0Cf)+rC(|Bj}&I8a=ScP%dAG>X$($((t9BXIcdFKroNChcY01
zaS?*KcW@}Zt(H)mfu^jpjt(mSp@a}aj?&4c>`4VTdykJ?qzOt0u8M+mMOT<v#Jda&
zOKHo*7VrF;UW~=Q<{;Apsh5I9ofQ~zKQF4$zYppeL~ISQoFX(4(Lza14sKrFmX*n(
zIXO7BPSCGL%Y#2gwYeb3j@AZeP&=JC@$E^uRO?VZjHX1yY_$ayiOv>Lj=N9go>Y^W
z>1Ao0@I@@nXFp*z<0-2RC;VSBEce_$k+46m!3$^c2b4XjE4J25*b>vN=fX%8C=$MZ
zgp72S%`X5t)R)MqO&UC#Nj9IUIzx#fX*gZ&ZEbcTh9gEt_E?zWu`}8h$)OA6vc0or
zzf`ZkuCiqO>kkdbV<NLH!$jQ`zYZ~kfv|zBRk}*@w${Xq3?=4f+M}d`kJs1f+FS#+
z;L9`&YkB^1ObEZ*1X7!#%);_ZK*s#KgcXwA#!$H(xAjS4%S)%~1jwYO$ki8GT5e^G
zPjvE27f}kuzzH2hBB=O4r-;Fa?aMdVY~o`6lP7{RCX7Z#eos+-HK+H!E<%P^7!!)N
zR48N?QhF%k8npXR#P)O}iyLa)3+}8}4-@#%IK?glCipHAeU@ExAFx|D-<cK>#eY?r
z6lw{vJ54N^SN$Al(k2o+kIoVJF}gzsz@3i;Cvd1#nb%F>7FRrl%l*+;keVoyuzx|)
zk&HU2WA(A1B@)A$al%^bq4ZSn*M4>gEQ3U2GtT8GS*_3bCufsHzJ4MwiQ1@Y9Y7K^
z$yD#=D+%X+IPMH74T)tHBlDwt%4da=^n=J<BgVBTUPI^!)785A?*Eb0r;;G6K~0JV
zQZnxfO=6L9QU$7lnr=3Abgcz;6`fZfmsHb>zGTmidE^tn6Hy&DTUd4VBmLq=1uFng
z64@`i-)d#Agk#%ZmpnFMbDnxoRV~kUy}dkuU4LflG!VQtnVHOLFYg2LqMR3IoqpJ4
zB73h2igP4JJE%zj&CIzzb2>{CVpRrAv2j@c0Y_lTf#23<vqmY|hFuHciJHo)D05t9
z;rS_ku|9F};K0`Ac=Ugs`mN^h^YZMt#IS4P_UZlZ&J#sa$Xpt~qdBWENo0+(rLFT1
z_w>Wo+VBWQ^eBw!vI*U&0}4Dpv)zpwMO0)aq&iLt<(bmos}(SOB3dF?oZk-(<x;S?
z<||QAOc0y0TtCxSR@>7Oho&|$MH^DSJZYolZ_P!?PA{v3e%(<YvdC0cdC-*NSv4;?
zSVR+)LNXU9Vn{(%9Ft|uD4o@~1+f{xlM0+eYO7y|sUwqI%q;t9i|a6^f{Bv+pHY_G
zWnv=OAD=A5Pn6}qfXsecQ+2Iv|66FgSVhxz?}xZ~teRDfVChJos#9dc5>JLtsR2zX
zMxm^1jN#cc-(*TP%|=yzx9vGK0R*masd5M$>i9b4S}jwv=!YI<Tu1xLvPgIF9J;CR
zd-IE{1Qs0(rD745C*_V7-SW3GM{+T=UXpPw5d@fIiQ4N#0+2tX<&Yr>s$?EA6ea(%
z9zz94Y>>3+%EQmIsWF&)BLqIPQUp?rOltt#^zYhfdP*ic;JS&(C{Y5F+I<e@9rz*t
zfq0<SB_vEyGo1@4Xy3SE;7sY^#8(T4ICAymuoSyu$*yXq)DvBSqEXt#Ho0q$&P^MD
z*aUwWRor2-X|@MVHr}Fp$Wf=r{vVpXN{QbcsvNrvV%HW0YS%C>G!A*4EgOKhjgHY^
zlj5)}hW&Fq>#ie;!6WCH>FsCV55S06IDc686rQX_Yl#iz9E%6Fntdfl;H(9Y-{1p|
zL%I@%Cxm<gUr^xAMDK#vcy2mSFbD-Pn((RE{qH7BWQ-x=NT&O^<~hVtd8n#mvI;eb
zGXkW;iEj4$WG*OcBcrJ%R-FmlzSEk>_tI5R4R;41JoZL|y4yd#tU$a66Sfn%kBC9X
zW*UcQ_Do;IT3l)e+ae96;Rw`^;>W?vY@@S(#0hzkm;H8@FzrR1#+}US@9zfw;d%Ya
zG3A?ev#A^%19lr}R}_8lZV_%TU7di)g!lf7R!PO}5rTlvLfjY(S$cnJIDFD?%%)BQ
z7`JQwy(xQ)+qY=+!KOWdjqsKvrCRLQmE4hb4JXq*9IyEe&ej3(NX~VL9YOK$z<Z&2
z-C0Hn$%*sdztKOj@HZM}6#bd=Y;lgyQ*Z&F`XYHaJG?|ZZLAoyK5rO~)xw=JZ%Hkm
zE^EEg`-g1a(<`xWFV=QnN*>I9OtvRRm2e0fu{Q@t@q2WML(9GS>C2T(9jmQbk5kT0
z+lUuUZAV_21Ryy)8q>}~%c^q>3UIwjXc1wlZvPA&B_3rI3hyCPvw%=_oUNm5^$}qM
zZ3C}q1|{|g6Adi+IGG#18}^#e(75WT>6;p=7&U+TMbl66z-d`{Hf(TEhmDIL1tJ+_
zB&UUa*WEQW`&fm&TNu`~3!E@vp#22)FIYg;LTYMYXf>uNYe3eRgiQBs$li5-4{1x-
zlE+di3(?<qNRV}*t;mhd{6jqcO=R&8fzt{{P4d8xnd>T*Jmpf0#LKlcESY|g$S(0D
zxbs%G6<&1zJYli?9_@nuf&EzuD=jm}xm_1dS!)wqFwUWu%rs&d#vASCaG+3TYywsJ
zp73kCHY1q5>(1yx|1XVj0gvtm^YQM~6W}eofs5v8Db!;g7{aS}2Z8cyUh8PS5&KWH
zH`ZQc+S_UFX}fEQeAA+xpaQS+e;zfDoVR8kKd7K|#Q&O%(bsh{xBf3^-|YXNCFk&i
zE$@?b;wH}zPby(L6v_kfC~cn~b+`a)Z|Yp~z>cxJ-?lYb{=NPib1?$h)8#1rc~!h-
z(~o82){XL`iB#Xt-QC@17WV^MGPak>WY&P*KQ_SEBqnHG$wP}sy9Ev;Es+nzF@^4S
zV1ot(X=%V!Er|{=H)0H81WYm`s)tyYPR}w))04{;JhLS*KwJbxh;{l3Rr%ou{JyMT
z2g(Z)8fw3@9^bFGFDdJ9N{10<DB6Qt96iBOKdc$hhp?xlmw3Br*7p0-3`!QPpw)*U
z_&ZG^x3B|9Ga-xAI7{pCr%%0Pd^VH_s!glXQ{!)H>-?k9Z#>VM*^{PeaU1cHeT22W
z!d@z)_(tXj3G+^EDTvw!!3A33vk|2{!JKP1GG}4Pm%sZJ6_zdUbb^_?mLd>h#f9(<
z$MbhFJe;qu8NyO4y)nl+zHi_3s_{8ZKW@T!lp>ly)^I29tw$SZqVOnUiTPL}lz8k1
zth#999bT7C6Mj4x*=d;qe=14jQRo(wI3dH28+!(i-_oh*V7(q{RLA?Lo%uW|`=Rm>
zTN<yS?mgdM^A9%cInn@;cyixRmoE!qDa_!&qF)Ee#QYg>up~SI`Uiw7kt<iGfiE00
z!?=zsZae|fQI9Lx;8>n?L25vhjpGiN)({{#Rjxrn?3@)&;(oCC)QS4R2WxXUET~AH
z*O(@_br}E@OY8(-5g2J(q}VdBPc)W4ciR0A^F{`J%Nrc^IZ*kXZrup2&hJ<MV&F$N
zFei^2TAg_{Xy`>bR{F8<BXNK&_Z+Jou8F<gRh;VdfNnb}GHd!M=+g$t(26D%tYl9_
z<L>`pXlR<iw6umSd!uMjlf`fM0F9a~Vjr?MDYfFns4;Q<EqtGKV(QM0`o`?^BnL&u
zNFL$=iy6+M4e2i|;v2MBQ4SlU@TiZ*D1LISka6rZRlaYeNN4W@$(njRQ5TaLu82yp
ze@G7HZZj?*B_WC)>{NXRCVTDu+sCeK>Rg9H{BOyVd=YdoF57H)U$%3KMfM(c!7;CY
z&2hLN#In#*9bn)>*bJqX)Kp#mY0-74Pk*+y^-r0?wMxo+k;Y4vbDR$p3!#Z!R1tQ5
zf>@SSncp>C(K2-7*i@NY7~v)<jRB$-Xo#}*SFe?;XWZ#D`4Y$GvL0suDOB;-VX+Q2
zWrX-P)fpzAVJ+CStr<f(Kx$CKWBU&o*xuIUMrPB_pH9J@Grz<RJ^M~zP^}qw-u}V5
zBvXoVI+7s-TLsNM59bgvNP4!w;VPq+MB_K-eEkc_h%m-($(xxOVv7P5>=dnITrDr)
zG3wS37<i3f@o=p$uzty{Dx(mi@2hV?#ixtM)vfGJBT;966kE8Db^oKC`qfb?s;I1M
zNbQG6f#_c%nifOZvhD@r41-cQQCiH=$~ctIZ8?4Jf~nws25XD|E=*>-N)Y!sF_PKI
z+l>%|xucPNvGv~=H19F++beo>=99Okft?psNp8xJ=K3%cPJ$@}imgMKr4@lI&SQPb
zki?ks$D5Sy7e+(m^WrMf@)?Si8SmZ>t>BcZku`og$3+)e%2KIqMrX)uBzI}FMQJD7
z?9;7nkhawv)Cw@Eg_*|v%d52_Al^AD5teuKQn0{p4wtJOaKC}cg#0#qdcnRrANlZA
ztLGv@`ZYT@gsQtWFoZ0IEyibSS`HSr`XI_QpmZ|%eOfT~kxN@|h3`JA-^(>{s<IM&
zmQ&Wn)kozacqvl7m6z1eAh1CWxi6|_(wrrAqxwZLZHF1nc!!+zAtjTszE(m?n&LnP
z{^SI_=R4Pf<8arr^rcG0XWCk;KB9B2@{ifoBKVNkM238IpZ`bT5tqZ)_YXV}kPqAc
zW`d;GHFo$fIhSNjO~-W>^dDw>PZ6y>sU_zY$-K=!PC@ac!3=^Xg7me`Q#&%G1U1E?
z6o77X;&<0E5T0AS5P`cG0rWP+&dvtEwy!UL7pW^#zPj8@T;-OSy3p<8SGdXQB0dR9
zrdqS)L-_9Ah`oo~c)?{g9<J}(>HM~hEsqb$RSfbwAIdQOD1qd6(RqNGah+ttM}(QZ
zR0`zCXu=VbXUQ%aB7Q1Hm3cyckumaI6e?Usny>KIe!r{1PWw2e0M2~EMIdWJ5g55+
z1lJ(V*eFQ^d47$h2bow>oO2uRfP7pfxqEm7HX(p1zzCa&NE;0p7GCdV7p`pQSB#NS
z3H=haXid(cc{;G>??YkqDn2pt9Y$o-uywRS{O{q%$MNxTWoXZl`xlDI=4C7=>So6#
z$|ri*?yi;>8i^%)428St4#>g>i|3jl!d|;*QM<cHJXxMSR>1OhV!V&3nvgEdB{9Z2
z$|nEUbphOnli&rIRWH5w_>(@Ul;n<ik{s5xEVt!{k0Qyr<dc1V^!4_>uax0|Wz6I4
zFQ4b#qxxu#vkXJcYeviia|d|$dwwrp`*;99Qq?Nkur}sWHt(!f^bQ@a(CI#r@K-MH
z2<<@)42bVnf~BEhNtX+!eq|T;n=)>DD(*=84vQ6!$Ma)9``_MSjFgJ)Q^}ZUjp>kH
zuT5$yUniV4pk7(8PyJpw2)2JSr8S}VKp&<*+HVxr=3s2tl~3|~pRTYl@1olP2{`xd
za)p0Bqqo;}dx_0r9JV&^tFTle@L%hU#c(<;%wfIH&pfCwW#1csq@hjA5J0;?5Ru0F
z5kb8%HsT~5eqIWozz4YnI|9JZ>q3bu*~~yoVg^kw`DM2+<9bF2RY*M<`egCGR>TuQ
z_ZVom!v<uqw*O8-BC{;}3$F%0+<^}k@8h-#pA;y*#<tLBWP#7RnFJa13J8@0>RsQp
zt(ca1{zW^tWk?G`{evQP^^*qjTM6IM`FnhucvJ<H=KJ+pP!DkVd5_=#p-ERrM$Yq1
z2V40Wlh$}MznB{s5hHi)Hm9Jkvadox{*JXtaY7n^iSD0<A4#X>z139oH_wyUaZj%%
z5=(&>eEyiwJAhGgmX2<-#w;w6Qc>;Awv-I{t$@#-$b?8P(HZO-T1NfsH`DrzAf3?>
z?8$Fel|N~s>%gMa{$DHJY~b(bd&>Sj4KV<1l8EuI0@~<P!#^KV4QBUC2syDr8x2EG
z1w+@WX`#fLyuBM$xdH38#T1jGfffdySACA^V+4y-)RBVfFZyzzpF3cX?aY*(bZn*b
z!R!{bB|5Mbpkj|d_Pm8%z=6AF2R3+LHCvRSFGY;tY!!=HM*|l{PW@D>h5aa(IMkU1
zA&TI9kz`LdWS>8tYIO5w{Nko?{9DDYqn;gG#8dwLu^U0ZDFS#i9X*SHl`V%dUA<t`
zEmFWoo@z3YbS?$P!m{3K+;fhONP+-zWo?2@eO?Ma9R~E|!)0AXyYkT#9~vMA+2XA9
zJOKTp7PVEgLtDa_V;URRy557OWjclu`=+39n)jv>z)NTbhM+bSX*v({ZVgqfxpy-v
z2_BQl&5poiwSc#saiRzwIGx9J;fMffOfiQ3*QS=?f?P`keND4p<~J3;r)Ao<`b$gs
z#aTTx)RMBZDlblnnNo`7;+R6f`GkT21cgQrCZVl{et~i;J8#;uDT7z|TP3fPbPNDM
zK_es38KOkA@&_3v(6bt@co$$t^!!#hkSg3ZQeb+6|NPKVPS{JYhISGyWw<erT*0RC
z+-J3o9cbN36(LZpQrTM@agV?7R|CTgHBY~dMbt>Ci4pHwXtTJtE7f4ntVOF%MQB;p
z!~d-%FcHB+-#VQ@hQ9=MC5gNrZVXj_yzrAc^x1R`kw#emPbs3;&(*S?_TuQd$M45V
zwPh+^II~@<kD(X_%l(-g-0b8e27h%Gw9W>qF7rvSV)O1bwdZr;bq65)OksA7qJ=y}
zK%n#(U*ni<pxD5m#RXhJMR;X*Vtb(L&MILf20b51Qm;hUq`N-dL3-~)+_Fr9i(iq>
zuU|dL?jEV=gL$o^z1%cT@rGkR2V}DkEvg_M#H#%uF-*L&DtKF%%kyfu9a{+-Dm2{d
zB9fiXcjqT%zue3XI6QvAd>L$?Q_&{t^8Ngb`^e;;ymll-vs9L87dt!#b}_|7*E6l;
z+vrnb#Mit~K|RF@2o$5`xLU*2PVoQP`TA%8L$|c?he+)NTAo>>_M8dY^ukLq&CsRo
z`r_J1KDs<FY;H93Y0#JCA`)U*o70D+@yjxUclN9NZR8Wgd{rToPNynhmf}2d0*W=(
znTRU)S~ll~0B7~e0r}hiGpx@Yym_GiodR+&WE8$K{0VsiAg~tlYm}J7O7Y*-M*75z
z>ie(hO|hiJRM-u+aPxX<7w<}R9j+VLxPjSn+rQSCZ6?^V2rEp{=5b!*9a~Q2wD?HD
zay-jYiFHYta9hU3<fG60SkFDfLk8eC=|?+{QE?UYv((FJm}Hvx3C>O{z=t#=;t47R
zF#;K=vm|F|&nwL{_Q0LvTJibmA^o4D9MUt9b(TyIV)BTh?!$$Rqcc238)|L8#EX(t
zaOFgG6)ZKxW@BL~)`fIi80{bowR3NnLm%WWR<Lp5-c!dgAG=JXy_`Tg8o@ExwhZ)X
zwT)2f54pXNiSXSEY(XQfNfJ7^u;waHvV-48JajjB;jbd2hb88Wjd=%9z(r8~k?Z+3
zX$!cqi|DMa`!sRoSk_b~kxPLc1=-0Yl1KuDV$>q##Ox^6HsT5PvRc*B<wWf0dU>u5
zebjd9{m`naXu$J6hLwR)GB8henpFcenVNE~>tH=J@%)KUB{*y@zBYgyorf8FL0`?3
zAT3GXAt##Ep3^&v0#W12(9$s6m~A(ds77JT@#o3t*zBwh+jL8NZYH5<W{_Hm)!eZ5
z%I|D!R>5fa_o;2CHsZ^uubtqh`8pFFrnwZbjMjNN_hhmeAqkIZvJ2lQH~bXtWf+Bt
zV?|k-Qt?bvdIeWo;SBm<Jh}c!XZU9+pR^3y)Y-{a0pU#ZrS58_$e?s@`9JmX8+k)(
z$z$0HxSuk9=7+D(s)EJQ*ECgx$2>I&l+7%VkYa#WRe@;Uux?Gf=`zjFXJSEpM5{I&
zu!oKFD3_OE(M6gxDJdSl^o^F)pTZ^&3sw@5dG=ePxEK%uscZ>dx>3C3O~=oGy_vkk
zns7Hm!k=X9^77x6NbSEg57H`@>r_0jT5n|)?P$Y5o6vI9Ks!>oaja_{`ja+7>v8F^
z9Z%8R+U-UyK8<+fib4eE%f06LET^(edsHsjf5w`S>yyjQd75pQr713F)#)=;<!U0_
zAM$s_5P<RGofL_RaO|pA7@}0paT1>Al{WE73>Ce~Kyqk9+A99*g%yYtaB3BL(R%1Y
zJZAZ{MBiXgtYI_~CwF}4MQtqzjGC~^#ENqhra0eO{MS-a-s8CtURY7i2>K*cG!N&6
z312*ghDC7p7cNAvO(7s6DyKL+SsMyIexM=BzNZT`-OQ_YL+Ti~%5kOxu8)zC19gK!
z1sh7cy{R{gKy)^9KqBBsI=y!Ds;#9QwU<JL&ZzfX9nmKx#>6G5wqKhBF|wX3tXmnE
z+x5+G^EuUN@Msu?6{3{fLY8<&&@*stys83>>|aE$hQE0?v33R%s0mQGleu7Xj~PcN
zh)Dhtsoo9BCAdibmJOnMRn7YU$Jjfy3AQ%Df@RybZQHiHs>|xKZQHi3F59+k+t#T)
z^UTFQ7vG+{^#k(F%oULlVHj<~Nt<`71qdP<ZN)lS=Pw+WKnA6zi8yLl0TCQ+^}Ev>
zKv1xplo&y3cuS-TMbR&m9Z$qvJ?<u1*vFdOzHF*0Wu(CM+El`gR)WCf<x8EKQI6o3
z?}Z92BOfYGHz5U)cC+QRHJMEjf^0&=#?{E|pbEOD5!9I)fS%e@osx?Qwqd7aUpb%J
z?$w+bFUIfK31%H&nZ6(_<GT}i*8Yd&#&6*%CORU9XdtQNn<z_v3c7k5y~oP1CeKQ=
z6$0u6hLJaWDgvPZUP77%byYw8BhP&0A$!wDHqFPUNytt_yBq9<;cOMTp5_vns5Gz=
z{X-y$HhuSvl0I6~Il9zeS0ZI*&JR8w2>Xx9n?adh&4n*;ZSF3DbGS}uSdM3~ppwJy
zJUhY<VF4Y=1ye$#^fnIy=3@Og<SQaxQv+$Mxy8l$cB7X{Gm{)r?m?hZZcL5BjUUMm
z(c4*S-mSAM{o`mI{8c>lQsnYoy~@wL<(0-Q*Ruf3evUITG`zMh#m&E!DzJOZ+*?{b
z#=j;FiUPO;#P8ci1No)(yuV8+Bagz`eWd160vAy(#F5_lC|h_|IhyADO|i$=)|e<z
zk^eyb7Tl`}ZkH<2Ve{pFB3bYJ(?nvfRZ}e;KYv}-Ovw}B!a^7s!BQ&Y%8V@J>O;05
z8#cX}>*!$MBz~!>v^X%D5~h;-MO>5XuxZCa;aCC3vxSU(Wx1t+Yq~Md1K;%GfVJg2
z9I;=za*29`5Uk`D9j>_2<GWod@e%=f=bkI+s8>TV@(uvX<aw{;K=|@(iJ?0J0|oKD
z-Jl*vsz&npnrAA>9~y<>lP}-PE=;R?sYoZuC2BbtivL`@?G0<)lD#Y8PrlMEn#k(l
zMZh`_kon8svIPRD`uXp0zL1>|Jx9cwn%3*5-S6$T;IC*h{f5>SU)I0vW*u#}71Cz4
zTOXeeSV1Z1K3Sil==NgRecs+d{6%+~m}EQGhh9xDNsE*C>KE_QcjNSym??YC*xw_d
zDh~Zh+#o6Z6;Wu*#|AIUe{x<33-mxCUtjJAmm~gf0T|#;Gzi8Ipcwg+E&3l;JNmj#
zjwT%c`&M{UUGblAiXY}e#$gWB3=kWlh_p;al($T&+U3t&$o#1zlSx!FV>{n9m#@^<
z`{c!%UQZ!Ny0VA&{nf<9#B<d0cEcHJX@61VF(iHn)`oh`6qeQSWv}eWPIGG5`8o9q
zZ(L4V&8}6sa9Sx@M-<VE1RN9}(_lO|+aCjhaHl~pG8Ak<Dlr;B9SG!A+S0i_NfTEk
z3!o1|<y2P(1SR2ejKNt#b%dKxz>HU#r5?~1dnEA<WWE5(<vhsjpi%#qYyi#$JS-10
zylG05uGk_-=f|(R&5(1K*YtRE|5-8Z(?EFTNzym+9rHWr#^}X!H4CmRHqxbBm4(F7
z7UL`}P0mRLc_J1YRVseFUGdY<-qtx{x{Te7#W_gybke>EEpMh6r-6{ko5Gzq+?l&X
z+tIqY^8S(x-8WxJQEi9f3B)S*0Ht<9M+17rmJ3bpa)C%eC@}96((IUFeZrQiSCCt`
z7=-v3B72_DBFPZ}T3R$VUvjY{Rs(}bjPcxB^L&cnhMX-o#W6Vt-TUCCWX=f!StPOt
zD&+k%hAc86Oz1ed;8cQO-8Bl98!<4SaN?Df`42d30!iD+6ym4!C2TtFgV8^fg8K4U
zU07BdJBoqcvsC4)r?JvpDi=A9w6w-rbQO%TqafO*CV2ZxqRptOG750S7r43xZe7tw
z3Z&nV=$`(jS|fjC*I`3z^pCC?=e-wGg!CPt2Zw<S6;w(MQR#gzX6^_7Fvn|X;WAdK
zcBug5C>^`%JuP*@AUX%^5$&x?1E}(VOwsq0rJ=gh5bkJXtn6`>rm|mjkH@|?=N<`p
zFwdhar)~JlH2P78^xNwWA~R|HQStURYsBlH-kErlgQYvMefi6?<^EfbaykdQAf-1q
z72CSic^6M3kX@XSU>s=bqcL?{D6g};UcsUtw{lf&pMSGkMj-tDqOVx%Y!%be__t2+
z6&NcAf5=wxWWK_0at;1<txSGfBNybDCpjK}9QY>Sm?>}93&0TreOn8g3|xTB!AYwW
z0Cidd7o4{DzV%gD8~y<H6+oM3e&6PaN(UI|#m4o5CZG@F$+@}hkYsYwX{XH2)AOt1
z>FLw+lzEq@&lz=-B`>68?&L$~=E&~N-@U?<w@%F^7s*Zcq0XG^n{+fb=-nMU?)=*A
ziD_B9lIpF=$I%W79v?C3b>}?A*dBw{8;NF7H1bM8X1`+H()<+NpIHcKj)5;X({J^P
z^c)tg8?^ga>$Nr};Lq*hjti6*{7X<QvHk|Gs$&uIU=$1XNW?*>H%Nr!?5W#n#V*Qb
zLQ6OBiBg-{NC`4C+vSytUsz&DWjXRnot36#Ne67k&Rz%-4~NLBtFIcd!?xn@v3d1i
z@s*sN8wRI|7IRSSgbLQjV&ah@@p_0>z@p-pl<wi@ZNo;l`j&LL1}{~p<yr)CghYWG
zKi6zU%FjW{XcCUgDAC)LXBqHy2Q+~k4e>T5N14-V=Uuy34Qb`gLxmjt?RY3Gc;F~f
zwVg)px3QvT?f89JXS22A)uFNr?NI>xL_r51>vIMju`u@NU4Qd*)mNp!Dddi?(Y9WF
zDCDkx`0ae^(Wf5X+Z<R^kKJ`K?G@O>htlm$o6u40yMypy4~GYG<3X6$o)P#F;}j^u
z7aQcvUcqOW=K}%#Y17jOFM7C2mh|ha;h?6rcZToLG4sNEa^)6Uk~e(wZ+Ud_lbKdb
z(E|Y2b;Mqk_}r!Lzin**&E0Ijeh6dPAIR@NnywL(xvuShfPF=3nl}4v2tQz7s*_(I
z8;(bUGdgEFXh+yz27{667}`6M86+z^;sk$*!E>_LYh0z~nnGIq%+So&BfhpOtcD%2
zz>H8@FVGTn^c=Y<zHIN{GI@OrCB8HmJ(Mu~1=X2|BzmG%zuyQw8q5+H%8~`-XHEzb
zhOnv9t%Z048wH4^NHVcJg2K8>%6;zjz&8X28ga0;c?8KS`xH5n8nwPapQm#Qfcrb)
zsu&D?I#3qHKb&V@ApzYk!BIE?qu`xwLEeq9GFGkN_t0N*HD_{B9K!VB!tfOyH5mdQ
z5D{}e-7<yW&h6)qZNxKRlmXG9$(w;?8R_%4i&O%4)>Ti?`_>2^C||K-hWYzGl+|aE
z)L3>%j+<u4<-U{L-kk$+P$yGvLA2c^^1EN)jLUU#;4Lrlc5UC6$0af7@4BG}CE$t6
z@^Id&iS*fu;}?x4Uih2^9_N5sTbK@Fh#o}YTl2EOkOEdef0X`(qH7rRbc|oxe@TZy
z?7fh7g)y2eY)?S^=?Mj>leQ~)vD<){^Uub#FG1mUv3&X}(h2pU%~&9`bpv>@VbX8z
zfTGlHHv^BgA%(+NMsh~&Ids@#DNKE;OE)rBN?5|N-fA3<H?kkIW?Q~H*&AcgI~nk}
z4aE&%-*hw7QPmQW#c{B}nq1vkzdM0oYqO#B!_;W)gX%Q(K56wh`W$m$a6C>lo|?O?
z4jV>G>h&@ub=Mv4NJo?7Q|D+&iV2wx@qUrqL2rAF=n$6KJ36u&tq-*Bb+UWvR}W83
zbTx<gtWKFdp;9l+w#<jbsVZ4fCIW!8t<4Tl$f~KllIx1>a1xqi?<=b76?b(U01TfX
zZTi5jYg$_kcTfD<TZi+Ei}-`82F%^ootB9`ALZorZXJ5+n%&+iV^J-Oc*&GDQF@|v
z$Vvw}ox#nj;-u%SFwIk=xRkck<#%C2bxlJg<wDu$8jz+o#JxCDKbo80>@p6tSjpj3
zg7M&{ewa4AIk&z@Q^j>3Q3cE@acDse>ABK`$PMuXGV-pVHc`eK>ZNHQuT%I-e%#mm
zZ@xCXt5JoZ9--qTPWIVrE81+qK<m4Neg!!DeO<ZlfK+9u0Ue~j>=>~@5qM$RfJWb_
zXN9xl2ABxst<ST)*VDuOXoHKxHOzH9Mmik;?GXOyk%oi(zJCH3WFzRP=+?tyh;t$&
z>Be6PD*$zX=UXIRsSZp28Kz$1a5D-&?!lkae*LadUkJF~$!(Y@f$r+ERdJs1e!HSy
zrD8B)3+sqi*mV(c1u3J&0nNAJV*|&KX#0d<fZIkmqCz#wcv3=$VQR?d(`m-r8d-^5
z8CsD~#hZPlsd1dV@4E^$96L#n%o#sKAtOD9=<5maMv^wplY%<pZR*yK`U@ISA8b*d
z=QPhBZ(~na1%#P_UA%oyJTlLI7A-+rqt;QB^NLOtxfbi7Ac1>j_qJUBf(iJ^K@r*9
zY&-x1l-wlM<OXcvT0E~Z<C*v~I18UQMJ21yk+iYmh~+fVs&fTT{v#{Esd;~ULii0Q
z8~<Bh!SYh()oXB1AyD$3(WInct>a`JNsG;X>uRub)luVY*h44L1|(tCj0H!&YMuC(
zAD_8+W%TTF74GRupvShO^s?_~f>jM%Qe2#1tQGrdRXqkKcbmn^2Wy(!aJ*~gVt+Th
zF_oo-Z6VW|uPh(U@tnma{=Zx6c!4AXE;s-{5axd~DZ2kOR}<U+z0odeoI9+EA$(8i
z)-{@H`?;-p$slDohDIS5V;BRtyro8pA%SbtZja9CUo3rXw|kKL3G~%v$&_@`ht6MZ
zUD@Q6h!ugLa>VWG43sc~g4gJNEBxFVd_WXn0&^P~aQukTCB8;IK`&d=M=7d>xgqof
zU>IRECi1b_stX9>7x(#)8L|7dBQ-&&h{+ggdh#c;0&PpQ!Cz#jcE>t_2~j5u#q1X%
zhZ%MOft}Cm6#&t9#w!?hs&6o9TGGvT!%{^;uc2bI?f)?{xQQ0o#m`^pbKgvm^I4I6
zHsFj=SW6wI+S}5$3;RH934bw>3cAe@Gpy5CAYDTk7Ss`&57z%fa<pK2_S0y^${NOl
z@F#|0q77M({_=TbtU|q@s^6|{!J&tX_Q7I#JEE8SdOWVm%~~*a-(djdczI-&F5Da?
zKt?RVOK-Q<apbZWX|#sFn>7KgIShqtgr#yj^Uzhf=wMT6tL$zLra5eJhDeb<jENh~
zfOK;BbzQD>DwptH;3qm0t~T%!#rJ0i(1#SvSL;x1O7I0kDVo0~%rJ4Q9jeueVm@r!
zqn;FHavYI<mGx;hFEdi5PL5f%KDa>Ins0Uxe_C#d%H;id$dT{)%VUNZ7eF3MD0dNC
zP-Wi=Q-$_G@7~FTq1Yh7i6)w?b|>@eAQR6yt3F2c1O{xXhY-en)8(*$6dsQw21G+E
zdDUCO$-$s_M4<)>OJL)4ot)QWMUo;86II(l$QBs`E0Bs{-AYKJG9i?4{FmLC;Vrrg
z9)c^`kY{{Ang}22aZ!l_LrFF{$EZR<0KI4=C8Yr$YU=#gL{u)4wX0!N01=HI(Jcbs
z?z-pC<nk!XI}jt{2{v(qd{d!<JSh`V2sNmL<sJKddAXu$jb_F(*e1HFpEOkrtT2>O
z85R?uy*3#zf!eM`WQ8#MzKIApqzbq6jb0wKhN9mNCI)5<<MoJC*t{4=biz0Y6}L@;
z6XevN`mlHoW`0|P8q-KXGM=N#6`#8$+R>_alQ++I36rV+{0yhmt#x&tAjhZu;N#r(
zc~!c8g^2|X?hl2-0^d#FU6^q2x7SQF6M!T&V>tDD5C;@m9RUWj2-%zD^9lhnHS*TW
zAxct?td%!`eUbzUYX57E0YpiLa0#<{K~knXcZ0I;3fvlpT*(oG^j0n}ag^_x6V}Xk
zi4#H>OY->g_cWi~)Y|6OU~U3@>6##x%v(t6hi_|KK%a49Ib*N>5Es`Nl|Z_=$aa&A
zUn!#6Aq^z0tkN%HNt!9B{FL|LCyjm&ANcJ;TN&ck87au{8&vbF${K&^HZ@YZ_V?Oq
z_xN{|=HfqElAZ6siywhi%I9v0^~-xdJogqJUrj8bIJ>S{@)nlfUQDLkc9-jSFQ-+^
z8a*qF)4@%$%Eb9!dkpq1DkAsfIpTF^cjs>}zovE8DGOO?>Ln>=e)(qiKPtYUu2BRo
ze%P__*9`ibjAV?myOcV+BenJ{Z<oqq*A|6v>OPF?^JCnDM6|qZ0Gb}l7*uuEZXRtY
z7in60`P`H7tfsk{yk=WnV{S%eY1OQj#H|?Fa)94m%tR|8&fEFjgoY{R!RUeH0XABk
z+dPc15c4?ZU6lwQ?%)q_gxM~Lhs&&ch<L_9gvT&hLCr!U7U9p$F!V_lmtU};BdZ3H
zHBs&LUpl=WwPCdOkmejbVY7(RELcQgE=sl~j@%PCoggu763}#QpNP&$_fIvtiPMtJ
z?j*w5@zbUAUte6kP1dDpvL=N~3Q6Hk^A<&-&;`j~p9U<~E99-^qM^jsQP>ljtb$Vx
zpVGF7JW_0)v92!BN~YEVVH1s7f@WBb8Lzev3MYri2DgyG$24Kbr5tU)3U)Rr(M*NQ
z1m4PzO_SI^@9LZ-sneJ~R<*Uc)UT|x1nz(r#s1PyZ(lTLh+yh4NKuN7jx;3fI@*VU
zwGnmFrQ!fvjs+dM)w_MCto0g*=~^fmLa$?1i51ymhb#gD`V(gx^m%d<)tFs7>=J7+
zmO#SuHpv2refgilON|Z$$rm5YDlFDbKd@79s;`4gY+!Q%TR8^^yj2^#B_N;m6E~?$
zwwPzYsA%tL^CdmfqD1w5T9O!`kWo|v-Iq+<V}G_05Sc6X@N!L?a|W%(R@bnt6j^v+
z%#MX1Rk5@;v<*f|4q#5;L2|;5n;we?j5`xg<T`J-f8c243|=c<RVI?lrma45%r%71
zZe=GCzm-RDKGOc4vDRRLJOJW3YImU7dWP8K<2=I~@{A-|4=l`_9*5K#6gF|jd|qyv
zL&28W(l%bO)5^pSd9`kKjwP#U*tu~aW#m6R_Zxj^G;{!e_18ayE=e?UrM}7<AJWa$
z6Fm2E6}+GR9jI)XjC<#na((Gr2^^QH26_5*UFGG}JD>B$7)f^vU*rSu@7X)Y4YX+c
z;~C5OW83^6mhO(a2Ih_qj{ke~W~o?MtpE5nU+LPNGuCb{$g#1Fy!kdHBAU&|9gOQC
zSc;di8jVV*%L=c5^NreL9nV_R1nNm1XL?+<+Q*LsKvat~#y@lkoIJjNCdmJ!_N1bL
zTv7FrCt$x24%);M!?2(Um1BTK_O2kIM1~RF`ArxS8#P*+$+ZwU%y`O?=t&2+5<^@R
zZv%WXfW1(%B%VUG2+V|Q;L?=(gBpX37|KzBj1i(651NfR07-|7(*BtG5V?&B8l_^{
z{@Ga^lS&H`T{2+ruQ;DQaPKS$Oct|}LzPN5FYLP^Ei`ijH7M#L9kp+b3_2C0M1ywA
z;ZT}uKt|VK0+#2w20rARcK|YlI#wAN95fj(!3jH{l(ugzkDaBV`#>w8j6LwDZwjp;
zkI`-W44HnKVAf(tjdZUc-*se5iw-HcX3kDFQj>H*(T2MwK*Hi~CkSO)yxsYfm!9W|
z25VkM`01E>6-vyi(Rt4YouHGEar191^h)MRDNwsO?j^AMQ)${Dje_5Xg&%Un7RlZx
zw$RK$JyMwEl-^KJuLu6CbenrG9DyavzfXYtH$|=>r<lV1PFwRbP?wEY$f`%h8)t3l
zGuLXx7FSrehj#S^#*g5vaYbC}KliM>UCuuC&VMFM^2X7#z3a_bLt43K^QZgL5$;a$
zAKtK$bbDn_i8Qin-9UEhUiUk-!J<>`Hq-g7t;Pl8%PG`msAxTA8wt~y&4aCmb*sFE
ztK1kk(HpK)t%iMfm}c-c+OIpC*J|#Sm^*sR&Tr?BX;}D)ZI$0@egRa+`CS&a-dl3B
z-q|_&*warp;Pd9)RN($xWeIP<|E}hYDe^q4pPzK;|4wCe{i$YCYbUG!UCxtg7V_s}
z2%p)yjD<+DGPZd5T4mbRAd2p&lprDik5WlQ{A{;PQ`L>_WQC~To%Jy*auN_JbKpqv
zmz$gpN13amO`TY-Gsmk^Gj930%cqWV9$8oLwkZfLQxF+4Vz$IDHY7^6aTS5kr~RVo
zeN}L=w$dbsF(glj5{6M`BB>;d2Q*|rDxhSI(layo=hlXur@)?voHYKZ4AlfFBKxI*
zQmM0v0B+$D#lB3TFGSMjJw!m#<w(F+dN>j&3_E#Hwhq4Q^+~~f=$-SvQNf?Ru1p#}
z2|VbbXv$?EunwY}L(mY3(b9=y2lAIs_N@<`O9aMe4vaSIxlPo=@(V<RmzP?X+++DH
zF_50|RK*+ed?`6+iIhYdu}#EvV=7X@{AKDy+WyW2n(9^}Xwro9+ZI;mnslhT0%Rxt
zRBsXjRZNwLqq=b2k=Hc@kQ$jvY|pb&iAu2q$!(S@Ck9Mcav}TeKdA;)Lr^5;hkXWA
zGiQ#6hG2vc{o=W$Uzv7-g{ZK)dTBEhfK;o`Pyx)n{fRUzsfBAf0NevaQkP~hegtOp
zz+y*!yAcmJK0$o-oPA(WN>e^5gJAnOUG{YXwWtG}OCzjaeMETY6ht8CUGsco%wrJR
z(Iv=^uCDB!7yw^R7OZ6m41H^;ftF(<fAv9JTQD}^d+z@Z6IkijGn8dAxdc$(l>W)K
z3X(!P^zVS)jhojHo&X`Vf!`XF_n56-$ut*N*r$L5afK+-A{!XD-$bp#>Ui;xZdHuA
zDrsXkms+U~bRYd|ho}`+2Kx?n$)7k6uGr5!qOx!A3X3<*cx3f-MOH{iDK}NM!T#B<
zJ2NH0tJ>CAy#ZGvQ!nq+h5t;BkPq}~kUqJC^Tk3r^jx3_&Bd0(3ouw;z0j3-PGNT&
ziL1_&!DKNFekUFRnK*o+idVD`euDB>E-rOO?xb~|=E3P)*9MGq9gRn(!mw7gHgG>5
z=w7SY_E8F}Z;xm+;^MPAgRlIcMvl2~ZhNvw;`K{Wy<RO1*K9*f16k9I!jgABpV@51
zOZ+(4S+ksg3LU1+nOO2s{`E-dxbmq(_I`c%jIarH0G|9aTk`7V50bday7N;!iE2p>
z>1ROCZSboxfOnJ<5`=WmBVn?YoePQ|V2!1YMJem*?j-+5!hWD8GxV|$ffCw)DY#02
z@(&p8h;F%Ls=kH?V`|IV3L=@<{&gd<dyjNYETSvpNam0Qp&owHKEPFG?ZFd5sQMT2
zFB#XI+gsg%uYPJ{y|7*T9PO!vSGqM;b@y)ZQLvQQU_t`Yd>Z=S-x8Qi44p-pHq(va
za9q2Pm9GYv!8dT+-}5;SxF$APlMd@4ww^HJ*4~=_7@vI~Q-s&D`(}WYR3li)snwu{
z>8jjIC9NY)P2|hLC!3!I7vHwhZpKHJQyW#~I!@J^P<s}qI6+eO$ge_SKF>-jv}m}^
zqq4ti%wTKGRaTb8j|SjtN;rB7VXMB!&SYN#kL`428j-(%{@u%JJa4kQekQZd&t(4p
zp-{2aH?;WQy{t$@)+R#$q4S=)xEe+OKp<1Nh{TCxoG?k%K%9f~A&{YRve*^<lFqJj
z=)3b>)R#;Z{%~Mw%H#gg1b7+{-lTzxp@SAAlAexEZhCr1cPCGvw(^I!C2BE!fHVdw
zZls{t=aU&nG63B{AdX&P9`lkcY$3`d>{Ene9YqA5&7+(|Z5iXJjSk3zzX@2Xm4+86
z^-U)pB!-&M50C~qAr(#nkRd2&FCU;BMYyP=U}-I?Bhi%dtrn%qQa=5Si;~1cAuo$I
zX}W8G%El&VLAGi?0os4ArAKuOqm*YGgn-%&<NxV>t*i-rTqM8B#*o{SypL|6F7@1F
z$7dLy<P^O_jm}x@ZMT^YmI^T-p#_G?t&%@r(T(AVz$OrD&!i?mexui>6`3bhpOb1y
zNLpSpX|9|gV?6GpcbHm<xA(e-?fT{mx<)#->Q&4E9#fqo_LndadNTb-V8VS<iy;Vq
zJ}U#0r3*Jw<3f1Zel|9X?#sR-1uR2W>l#Vq>a_?r=>`#;Yv;s@L8dblnA^#X;|*eN
zKs=-!)grs4BzIL(e@zUr&k>f;ZjM50I(q4d$2+upQ$E}iTZ%b*a5<>>jSHBh6l^s>
z#;+P^$CoaZ@~lKtL9xmZD1%zE>_(-8U18`K27CBW!PiNLxGGh(cJ`=!<92oCm+6Qh
z<{M-_qS=i7eG<qwEZLGuYttw4WQ^&8RafNiFTyVB6ueCK<qh<`{K+5ST+l~OotBW$
zWwbRj1f|ots;HHa-*sX4B^%u7j<wlX&_MYdXusfr-UX2?Mf93_f|^*bG`$@>t7GW#
z3#Qe}q<`%;oz{taeQ7lxzPVPD(?JzEx><xTPcx3`hAN>XjHtd*r%Wbg0;NW4RWc@f
z<<8-ve6Mh=JWdcpvdQ0Ly9&PKyXD0Eip;Zwb6q;?VD=UE-;ZNF9`h9S=V1h*{O98^
zFt^dQHZnH(-;d)`UDjru1EKR>eZtvq0qr2>p;lwT3ZU630-zdqWva;o$tbL;HA$3K
za?y_e>wPLVk!Ia~4piyF*g=BW{)OZIXcA`q@y8|4BJPqzw~CeL{L$Nn|6Jz_?4C71
za%gVV5`<mpV~_|oK)WVL1s8(^Qs&gxpHf-I+r$q1N5wTjoJ@r#oINDtU)@9E{KMtE
z3}Et^I{|#5a9Z}^777VhW9*)=s@EPs0z0GE$pFg}B4yC*>SHmk*mtu1qvI0Mhcd_$
zW`UdKSw}?i{?Tz^>vZEqoAw*XhG`RNO(Z3I##zwabOb8Qw>B=Nxo=%sH?K$cU?fU$
z301c}DJ%!gYo5#cA8m^5t7nTz;xW7KPPFGq(Q}_yFmtzgTl9*4f+fVWQE^KRFSX1*
z>ba&cj<VA%>I3bw_ct@7M$zvsK7y!Z8w>r31u~RLW4dyd?W34&g;Ix!z3FzSjzf*+
zVaAu-OAmqk?gMaR)f-X9JJsI13O6T7n@Lf!^tH%f3tlMU4i(1jQ?swaRE$EevFtnP
zNiOi!2qzj97-vwGELCLELJ&zcRx*m;N1_SZ2*e5;*ZX^p;RDOj7O_=p8$ixT)4>|7
zp<qctjI1>VLqRj+(_uRqpNiD2k4@;JXG^Ry6~Zbly)5A*S-s?ll!Cx9E^8zfU8YaW
z=AxJwUNaYaqR`{0G89o#SpdfvSb~C_AP*Ua2I)J{HpH)xOexkPA@UGbLfvvDr_ios
zFp3J80{OR$F=B}FjR})|?vU<9u4LYpl24+0SJs?RQ(HxV644nw(B4??RA<Pb$#E2n
z=D--?$i;8&rV;QZpf==B?V%JyJZ+lF02fglEhd-`j99bq4PVHQz(9;hl%d{<7rzTU
z=G@zl2OTriI4#ypcJZRete5#qFD{Xsj7-wG-XKJiLiRW0g*c&!SG&mx-Byg-oCwA+
zR&pVq3yVBu*-I3<^i4+)x28}hrks8pJ)=w{zlhp7yuq_@h4+3t<)EIkhXZrk)O%EL
zzLBVFjUk)x*o)45OUI4;)ilB&`x4#}*W+&e&WUC4=%2@FUr_1M6?kH->*>!8j|?F!
zyh$hMr+RH042ciaLQ8A~sq`R;55uT8r#DO1%BPA|N3DT1-xP)}+^9E?NBscuI6O-g
zJ@97y*&&>RHm}Bsd5OnoQ05Hzkbvi2y*D@%FyF6vG+m*4bgqX>?3wOMYAj;G2D8>a
znyLLlGpx*Jz#twxZwA74i4wRk_YXP@`6E%5e)cNwFe1z)C#~Dh_E()S7yEz&M>eP~
zJsVU-Wqm`Gag$MralcD9+XLil!1UbX$-Ypab>UxQ6eD-FKa%IGDiCLk$T>u17Lvb3
z)iv7d@~c_J{DYDqxncS`W3}t-o1%PG>Yhw$@EfuiWU%3<`Ki(^Qi^ZnsB33AKrQiH
zAhi)+l35L7H&qUJk%MSRI1`9u#)x7$05$!~z(@wcOuCFg?lG>xRx^<_9oo38_dw$a
zt9H6N9>`&JhON}=6`IuPcYa%wa<c;CS@E0Y{#DxK>_K-n#lrY>GK}^QFaEh&H+!TH
zQ)KxF3hz)cyFV<^s*SDH*`;gi-iIK=uyc|EoDg?Y1%iqR#~jmYNs`)c@cLaI4DUj!
z=e*+-08uR+SiIJS+}NCymSSBlZSvB5rb#u>hr;S^{xg=gX2GX(6Qd(4*j-y~qTh|v
zniB=y3*2L@a~G`eHV;~>U4~j34NP}^!<S?X;;;2BZn@~&3VZlwgNn(j>6=4r+|a+w
zQC7_}IQH${$GTt;7J_UfHhsRJQ|SL9hdh6{m9+7mXG)UUX%;*-Io&8Eq&$ZnA4lGR
zFFcO4mC@!AIaS?LZa#MrRV<=P+t++EB=Fxes*D$=sFrf}%Shfz{+;DMkFtU~N^ir-
zRA}#RQjJx4FMI?1`_-N;y3H!zj_)zW8?Id?*@&7bKep%fu=IKC#DA=Mi^hewQxZ_e
zG<9joo$B=1|J9Imf$DgDkTY>)+Tdxo@Ldj=<3@~w`1Z}?YKEu6Tgqv_GL~s$Wws<A
z?T}TkHT8e%_|)!=MWKEcvbUd<tN&nt&6$k;lK~Ej*Zn8qYH<6W@+wsYkV;bUOl1i*
ztWHIUAoN8!jC`B~eUEY_?ovQ;&}CZ|!lEr~l3vbp`Za6g+*KAlok8JLF~Z6+Z}W1i
znakypzBUxGm~!mZ6UI-CpRr+P+Oo32E-#0KVH_6B#7yCu(H=6feuzlKoWWm4th85+
zVYC(G@uOA^$^sT$uZU^omRQ1=kU7=Ck_N_7#NW5(#{e@hP~mb;#1@kXCol@yHH?yw
zFeP^>IUzNHhxdrWeKZNwk_YD{q1A_znQC4nBCt-Yl9?LimDM)m-M~Wme(@eIB%q=c
z+z?6qw919e&6wNT(gkvqcledYDAfqDkKK?s@5k5KTLpP8KbhxN$V<kGXvtc;f@2H-
z{`nMq`?~M^Q|B2f4tv$);mPmiH`zha*$iAha-Bc~Z!<@q;ieCy2E(2D%t5oGg_tF&
zjxL4+?4(ILTP8cWSs3hsTg9-8L_&9~-?&3XNqlJ0fFXr2sy^^ku%~%LTJmzEQ+Q$M
zaG&j){8Un;9!n~Jtsa}F{sJhrTz1Kf4E_!zU6vD+WL65NDAc4MU$lrzl5jZLehGOh
z&G7you~q2Nh~3XDi7qMf?-!P)+0epj3VEOCh^8}<w|hzK#_D5k50n0>7@$?%7m!Zc
zG0UOkgjXhr;`$)@!$X(1*@%fjs+;l3_^m(uT;#{-|6XlU%$x2u0098FesBz;{|Z@j
zFgN|*d(B|1;6F=$(Dg@noCD(sV7n4kt2wb|qE<3aCKgd6d7wV<uPT?>D}>?jyX|)9
zmDmPVkMk{)qfVRSsAG*CU;6TbLeVgWjOiM>ZCTT6LOMuGs=fj<SQn)a0?fYrAti~!
zK7Ym)tN?#nMG?OEjYWcft@%h>QTtLiIg%ZK{x!r%S%(Ek@h0dSorPNYm>y7}s?c3M
zNmL#MF<&0zLZMt7rn(voSvRpAfjY|_+~NQuO7OaVl?Y|pnrN^h=mJZ<^CbL0McXq<
zMQPdbG9gJ9R;9d8Bqf$Eq&g*ho@-l<79mrG@KzzT-xham9M)kT#fRC(Ittl!T;w;3
z`f@?PwjQbw4<$(C(^5tagCegs>{)Cb@m<UIm^}}9VzR4?@A(-fDQ1)OwIV1oNfmD%
z`5->^J|-jc7w3ZIZ!86$wI<J=tT(C2V*d(_K(a&)y0@;bC3JJxYas+BIJe#I6UgPe
zwnL>fJp$FBN&4S7bVnMq7OoRSCWt*9@;&S?l0^omiwin%EJ_O6a!rA#yI%Pfm@)bZ
z)@x$pl+0<q9fH>^e*LYfYtXl>;6?WGt;<_6l>%NgUGVw6#nRk%l|=49Z_Q2a^-Jd$
zeRo(RemCTUjpCPSXwJXuCh^U{Z26}(mHc-&r~XfKGPnLOBv;iUVU6woP2iJTW}+8f
z+Z^RvfssxN#tb&{H7ed@h(rXccpSr%78o&kU-vM^HtZEzdrNR~x@v{T)!{4xO3cOm
zIZ~nL0gXC8A3w`*--i;z3xFp??$?Ls6YI^1q%xyTLKpc9M!Oy2=N!wR7cWZ9RzVnd
zbY?deXvC}$ju|0vX!c<Q9m<BLtT$T?_<={WJG$u$fkHz%&oj1<bhKgG)1`z)wF6{!
zgYve4n%J98O;09ou7q?31yMXES{rd=TTo`37sses^P{E+$*PhC8;4jm(Jl{_PYDM<
z!S}0Z$SF~wu)#6y{JjiRDJa#ACIU@vXFq5EC)@oF@d^d%SX;q|)6kZDF%q2hn$I-<
z4>D7~%7IXwL`#=&fo!QKUzOWnra0ETU6GmDFwkBe>jgU*KKSNW>Eq0~3=3tRU+fA8
z;j56|aoMq$LOkk>YYt@ljW)o?L;RLW_eN(R*@6q0)1m}Sm@ynk)-If^v*m0~6HDG&
z%OnF*y6lP1*`srAXqhpIuV;4ZDxCPsb4C`JhR2%#1f?W49o?SZB30(8EgO%i5z2m2
zC{4=jb>_69s)Jd#4Qz1MY~lUPSL6CrE>{+_5Jb>BnMQTejgpT4<D}5i^)|ERomCwz
z@cXc&<z~<C?&zX6YBUXZoAx&Y&EdQO-!<}BV_;2Aze=o;HON9k0-H$Hd5z9~cdG!B
zS;g|uOGbqj-?!yvC**Vrn7reO<z*fpYwfl!4L-!S%PY+_0qxz(!rvm{Xm#UBe<oYa
zyQtLw;=t#)(-jEFsccCPKjNZ&5;Ie8-8!D*M{!(YpgbKHM+!R!4UxoeH<yb1zIVOc
zMmIm@Kd+9b^j6MD+cg$N;OXlKYOMBgMs$6$K{l{a^{>Xp&pNXy+uqH&JR(C>7afc(
zd^$#;GpG1_>7DJfV%!5)Y#mcu$7Ep~aJmAAl_5Ab1c!=K4vS4Z*`kvIV;=2jlIR~*
zN_GwRd+tn38R5OK7@uphlwdT;FwaVxJq#F>-uVwdKj_D(;}Al&qW9ur?%j5pwiZ}P
zk93Z+XbvyU*>t_wmG-2n(UfDOcrT0Mp%tyec^vr#%(3=(BXe?a0Hmme9Z?Y=ZD^WL
z?Y~}{vX|mt@WyPNK2%qo)h~Y2Z<@uI{8cYeX&h_RX?_t<@`QQT`^*|6XWXzVncV`}
zd`GgSVT<EK;g)t};BjIez}UO>6bi<qnNUG!&edis$(*4_fosy1T&Lx!9_88#NAxn0
z2rV(V?z|e-${Jj6)b^qGSOzLMUj33@_zW!u`Ud=W(?~t{i**0lX~ureiT?{^(ls(S
zHU2ODXHx0^1DVL8e?TUGT*{=4g`~>VhU8Ey%n~Izh<<}6f1L*ImAd?o=PMwx20Lrs
zMBurp;SBccC__xWUR?TU|0|`ySy#{dQ+JLxn2f}pzXTJ{yc&>S5h4)tNXm4Du=6wl
zjn=WXWbvWAVOF4pbv#&zWRftX5n%uqJw{GYGPoD4L7iQ&Hv`fm{lpB>3R3xY3`Iyt
z>4*f=h?EEv0inmDV!~*M911ejH(<qpVM1V@5qVT_s%~}*3TJuL)C@M>$8?_0C<z@X
zP_)HJpqt4Ot!L;6`B&12(657bKa0)eBAk*58#;H1wSBtN1<Jil5_hnjq-J6gqhAe@
z;n?NFFY-VZa;`hHGsR$$S_TIqI~s<9U)-0cp818+dUY@#<oqi<RoeV7`r3WiZ;D*5
zG@+Gb2x#+#+#S1T2!vmSGh|PLuLDgoNOyws_mj38H#V=bpMw+{?#%rP6#|dpr_mBD
zr%pIGBr6VB0Y!MghhPa1SJSFD48YR!>UAtAdV_?)z`$Q`Qe>ymWy0kV_Mo%D4=mKg
zl{OtJUT?BCQOs6j%YYh#Rf@~KASjsi=@1d()91@NEP(SWja1#*Wx%(c1n~8d;$)Z4
z`b=dOyG6!jE~;<oi&M{y2=%Wn%iAzLIyC`KHw=#*hdQ?WSspPK&1nVvg0(0x6Z*&=
zRbN3^RS+zWTG8sF-vc^|9W!^6e}XC|PXHPiq{0Cg;?+djW#r#U{1G-EvPWyj_XF;b
zPvhLXu`XvDo0LgjN8i^@sd%<q;KzJ;Y<#?M^Ng-HznjSc8vU}UU5Tq2mr!=f)lj&}
z?eai5EH->hM{WLH*tZ4f3fB+-03QE+Q}q8hYCAbv{>LJvasC4kA$@0e8>HulUA8nS
zZ{XHS&IcG$m$~3_pAYK*;}DD>q1q8g_=}KQSiW~}!$@|1tTaVXPvIkF;J}%B-<vc$
zfzV=vx+dHV3-q=Bu6cgax&FYfg}{(8M4LP|Y>^+ZnMj(MHX?{`0RChM#Ke`*A5u!@
zVXg^?3|&rbr;$nn*F2~LF$$6`ZO#>p7!JN^Sp{@Oz^u%I6%i6jX4)eL&i0=c2D@-c
z8ANggsn!@KbRkOVg--D^uwKC+t48+IkOU9IC5d4lfbu~oGGN1ltsLDLTULrA9huxO
zlX;;^(B63k!I3-$qTGMTU-xozJB3&vl<kj}z-xa~ST3E1Jm3<!yPBP~z-!e%Vsy=s
znl|(%e^K})?fRghyB}vHc@U_>zB<5kQ1RB(+IU_#`?`zU>LXn_Vs`o^n@rLeWoTd&
z(g(}kdpoPx{DUP3)3NWE#!0v2vLd84BHwaA<A#+J<kLJT*%HAAUYEdZ`swxbdrb!@
zcRE8U^_1<qjZ$8AiD|nIO!&Ff$zU}svq8(6@jzb*R{Y$jZS+XqU?T`3PuU~2`CT}S
z=U}dJ`hR)aTgRX+;ll9A&GrzmGX?~X(lDBs5DNM2@pJ1BHPj)vD@gG(nYa51SgdjC
z2-|(A`*bwqE{5N#V0ThV86TFTiA#QQ0DT}-pk)VDlxrQ~q}cEqktp0NA!65se%+mn
zv!D6%JX6d~rG?GRQ)kg`&e_aIov@0N?)6Ty>*X5FrF(-DNt6KQZG%aXD!?)iw)$F9
zFvtz2x3^r?2P$gWilW6?IIDaq;mpAAE8nD!^CtI6??~87$RnsQ+$m!9$T&F5z5KCJ
zlrcjLAlA1CW;{Dw$PxWWYjU^h(Q}(q(Y7Z)NPM6`3Ev+x1Da}{?&7sc5uwoV4&jmo
z!f<MQkthfpLsC&ZETVOy)PMASPvv!Kx~UDAeV=H6nX4tk1W?u?Y%5^GCj*V67$c>u
zUo%sluF_3e0?|=S;~%X>g23nd?0i=K_1S2;RCBbh#|D<*l1PpgeF7;(Cm)h2Kj4F<
zmsIt2hun~P@jO0vF7#Zs=M=Eo|7q}N`inOk&bwFoL`(QWxIl1fSXHL8ZH(Tdr5TDe
zLlh)4vq$i3bf%3mCebwV(EUva1^F}8RRKv>n)3JT)baF9xu32ryCa@52P4#0qz&S1
zMz15MCXP`Q*L4)_Abe*JTkD)cL`@vBXg!L;fUOf~C)tPM#`c_gwyv5Q%ddc!z5R(Z
zcvNz31NtZvNl6;mM^u^QeY+$^FA0YSzDqpzrZ@J?HKRT@jrug+`s+8t5A*E@@%_Vz
za)uh;`zE5z6sv=YtrQ_i;$}G_Hng<hJCeIWWS;pYD7IZ*pt?yI8=xMcW9}7I*Ya9B
zd}-|5!;AM-v%d=D9~c&057;a4x$agR-pINguNf}4WS{bmGHJC|8!4G2QJJiV1Isjb
zEj3ff&0n6@lW0#r(XK2Ms_`5}MJjh2OpAB{FOY_7Ad@=4@uKBBmPP9-2JW_vF8ST^
zAqAtfLwdit88=rBl(yBG;X_yk!Ex0A^D!=Sb)i0%g=v<J*axJp+}t+t*$Z6}O+pj?
zXrs_H2)90RGp-6@w3;#AKvT5>yZ)A?-tzsWD&CVLHIW__5ruHRshX`2zSt;myniyU
zZai>7QL=IRUAggq_v4hKF&=NR*71QjhHe~LD4li8Kg%1T^o2nPzS(gnfzE-q8}!~*
zfgip?Eo3B*$Mc5eje24Kw-MQ(&5T0yOpGy+tRA02!=lM~Ush1Av>|V-(g3wlTeC`|
z$TX1NX_ZaBPwB#5Q@9xn;;l(ii>SY$-J<8S>KeWop0q4IIRrt)i8Emlfg$%#l$4nR
zMMW8&<jzI;%35`hh)x;w7>v^z*52l27-(KA{xdpS?huFju#jxi!WWmjOd*nHe@BnF
zm5(qeWwqI88)P~80oT%AI=)9cUf5y&68@|}9!kh43Vp8N^N-Wrug@^7Zl!x~fj@fU
zpTCl+aE0AX2-u}TI~d$OIFdN=1Cs6g)G{b;*f5y}f4!U38-}*4dP0+ia~=~%gSyu8
zy8&Eqi6dJ;EW;D5Vu8kT0Pk^JE(Qx@$qpbJ)nSqeJzboP=0z8{0mn^2t<GP>LDNoR
zw4#4>WVv)Kx?o&T2Nc;0gOHB(Az&AI$@bk~T|cR%c(7fFe!I)$kE*7!cg!044Ifrl
z6ndW|A%oP27zJb&EYZ@G{>uGz^>(l8+zv`9E7g};+vhl}kR>M$Dhk=i$Uz0HUIcfL
zqZEa0xk;nBWi9_D%7O@ZTGw6otcHp|odyde##~Xu<TNGBdYnFM?NI%T(m<@Zj`FUY
z%>xBv*Q|EjN~K)<PP-oU4=^Hcy~r6jToT2|A9RM+uAW;QL&$s9Flj_)Ojs*-g$Kf(
zS2VQ=C#Jx3^xG!2=@e=)?G<9VMvKTOPygx{H`)V<*8ZdH=-{HipdT6tH9k#tLtf~1
zHF?AU>Xp4f#9F<n%k>P#@6qQ<Oqv?aOObauyZUNWGWG>glm$a}BRafA?HZx#a6rV!
z<Wl`g)8T4R-XDhT)alwut#;W}H0*NrY3bbe{eI>!f{acMCiLX@ho7I0O|`*nTpd<8
zTV39@<^tAN93oCbEB1k+e+l0!ehxJqfZcx?#SIuUWre44n+6QY0>=eq-$p=@agt|M
zdSw@$9R_hFr(ih)@zU+$y_0WHhS&*BOpIV;jZO>kBsf6Tjuy-XWdqU!x&WgL64R-`
zB#J!r5XXP4iXHnr{NicYi%YPym!ot*Vn6AD)#4YjQ_3vLj_kgNV0Q@bV|_f3aPmjO
zYD6+(`v~6*_~Uo8{cfPh`>->&iYdnX#m8;2l%KM+<voMvA52%-W#i2^JFuAO%>3qP
zsv|I<phy{6$tuH&qZBIS%)^GbmN<w^I#ityM7BnqU7irJT6LJ>Ze4bi6rX+|5+6Zp
z9+eZgrzqN`h6gwpTU<hI2~p3nG_;;vQY!F$uU87%ms0Tke{s<n4(lTSU{XH+4Sl-m
znp>OL{O?`LO5xW((5Lrw4Tk|eq*ek`S%Sv06e1Lo78ph4+M5yP@r*08vk|v8*JbxK
z9ARylci8>r)N3XTFh-xqqWGjP6?DPv%hgf;<q5H81p*rD*dkR(ks5!TrUdpcN-G12
zAm2W07?dB_vo=yEc6y9c*t|ASEV;Dz_h2Y8XdXCtmMy{{z;wAEEw8@{8dd<`u-ZmX
zFf<4cLnW;(q>PnCZ<!H<hjj&8N5rWRM$!-J$;Ie&_jXdS5u@Iu|7saOslJNITs})z
zbujd&%bG@gs>V<2x}vgbvV>&y`nk>?HxjXKj(&7B(a~vd%sME6T<|7Znk*e@x4w>4
z-R{xV4@_HYAwE3t)X)l4cX)AUY!+6+R{eYb9P-b>iPe#<3-^=EO~1~FC7(`DZ8uWb
zyKRXpCTKUX?Xgth>=rofiS-RYM3F~^s@(4~gz%u??)<gD-)N%GRnayCmW}WXK4bR~
za%o?M6|WGDaGxnMqsD%2PoKO-qJmI&tdsYHfim-&Un)jAChXm_e<ykTeBL^Fw&>0X
zw)d5MEm;g)7msbPPL_Edq`%mUDmLEM0{bTmeEO`j&~i}RrWt9g%MMd6UiXL}>3N(V
zUSFq3q{O8DoMt#4K!1Y%dkvpQPp94e0i^mF007ATH<+n!W$bA7-(iJSnm@Pw5=cL{
z{ftjbT>g5IUMW?Rf8|igNOlbjQ*N!T{?Hd8%>g(7N*0CSXT13QlLu}h767y2Su0!7
zUV`6!b($Qb1v^I+K;Rj=;u#m4VEvrZpKx_ce_$dwYAo?NdXT9t+WTFa5$l~!<4<uF
z`(-a#tw=z&%u+l{`^c3G;grRk^2Ycmapu876jo?LiH8Us_KvylT`xS6LO@D=?Drxl
zG?$v6ZPaVPWGF3l(ka~^$dJ?0OQp>;>_XXUIO<P5y<jAzJxt!qV&}UG_;drP+KYa0
zFg7I~u<Ob+VQv>ImOE)^hg4^tUJGzQyhlROED_J}b$N1fbybb*3vbtP0W$j`0fB3L
z<%l-==ZF1^8j_!INhuQ_y|&w{%dK}+kAF(bnHh0O7Po#tAd_ahq<JC@yYM9@e~LjC
z{p;%ZUHrcE5%}hCG|zgRCx+ccd7Kn;YL&`wh0{1<DkY5g!4ZlyLM(PhScrf&alD1+
zjzuolrwvhyPj2*boaFWB_A+=SKQ#O_cyly==rIR`w(USP{aX<r3jO;tDKq|BuLs7K
zkvK&?Hh8p^x2vIs{1eP?S`dYsjU7#Nue)7$UF?l<#wWjP*o4gLnjezTMsaN6?zqIm
zLhiY|B;$nK;^bRP_}irlz2EQWubcf%&o+=>yAns;O>L36<-{~yJIgHqV#|h10n5YZ
z?r8FMU5N_a{el$>f(QkqGVUegvRcUFXkDTaBzhwVIWGC7{jed-kIU-G{zBIJEnxcT
z5PTe@n~VaYAIBY_;}-w;n3rY-Gu@UsbA!bi_(*VGziZLb^B6AIxN`VAQxLfp1H#!O
zFm8L4)Wyk_ucOvckKJ$o@th2OKVKgt+@uHm5vg(Xi$g~?&)z#&=}vC9<k4Z{<0pQV
ztWpQ!Fh^>!wkG6SXaL~8d?Us5yUyz<YruPuO0yPH(PKh+)|DS8^SLI34Jt=A`18D%
z+;=qTQ{QrN(c#hYRGC@=rvcJ(L^;Inhy_IOG7l7EBE*J(Ycc_QmL$s4K$EsaQzRG%
z30h-JLO&O)Ac9)r!PfIWpK*;t3M1P;EM+c}tO>i&+knu_xaI8>N<b?@u9urQSp|_)
zOR@J{nMNW(hmA+=z}=o^moP>>OBYqV4UL}p+FPAn00rvrueMlCVkzxIpib1TKSi$3
zy3B$ITs)}WqevG14(Bw=R3RmkpL>j}JHap!OMHf1!~Oo73^5Uk6q-SO4P1ke19t!%
z>xGLz=z##9*9WEihu~>(f?eo<<4B9tkO(=C8oR$KW(A1T<6V<eTuSWUvXRXay(W}{
zApG64h8DuKTR!8Kxg^$-BAYGZ$ONt68^2xzpBN%pea9h)R$@5Bc3)lq_XPFuj2Rl{
zP#+NyIet&YhF&3>a>5f~7^&kjrN^lgdWq^?^$}t?_3v{Ci2i(x<r8GlhhjV#%<T0N
zpV%>Ek^)Y&*Dtu-LYP9LO`3_=DFl;qoInxs!5$wm_{jYxMEJcsGA<8N@=35yi)q*w
zADwE;PVW>Qy!*0m#sh*8+#u`dyDWt9MsRoI(XyPN80NMl6=I=k*F=tFN~&p-L!0F$
z1LwL?e?KMuDXBcT%aT9Utb~~3k*C3gt4v<3z{hlPL&34mvjTMuZRN&b<_0ja{t?Ly
z28}upKu>3&-b+(_6TsObV@D?;Ko@EP>Gfd`kwiI*2FVf>G!{1?AK^ifMzZU635aH-
zto%hGUtF~JR}Ak^O0ubgonf4<(hMs1jQ-cXcs8YA4!~jjTQFkn6xY_TF+M=3kyA=e
z9=h29$r(4I7hrc85~n27ouHgw#lLBR@p6H~KjCnMOBOaF0ENf-o2WqHjSya%S)>%C
z&xD!)LJ*RAR&-cai4VEy`zMr+>Op#zD-UR%OF_cVx_Bcf8jT8X6aFYrAA<2?11aOb
zEW_%pHqeXKjfCmXF&giL1sApi()ztpsxE49P_r;w9&(*R-EWKF*z=74frEoEm~qKV
z*%_%ClkgQhwVronm)2L6(geAiWohEdUarbY0VTShQwB$50d=CzQ*&->WTx({4}TPz
z_T2?YXx8Z*y{_V>mDvyCN{6VS+7~Le&%*Ou|LeWL_Z#0JV;j-H6GlWhL$tTtIWiGD
z6|);dL}h*naP3GCng8%m$ZS@){Ecp(zg_0m9kwuR+&7md8wsvq9FSY2i+AzxHcZ1{
zRHz^wlqb20LAO2ZfwjKv>niTWE$L^8)*{SStP%V_q`hO5B-)lWnzn7*u5?z~wr$(C
ztxDUrompvD+P1Bi=Z@}vxBKgJyTAA1M@0PEBe2HaYtK2?oCniqPQdZ7XIAtDX$3>{
zWnRQ7uO@B0zr!cM^A)I|6@(k5+5jQik?`6gpk`T>K{Lt14c(0S-*qCkf4o#y+Kz!k
zCVVF#V?a3+K!)r=Ar?Of)B##tk;geb(^1Q^>nEN-SSp`esJ}SQSaaiz>QPsNq*DOB
z8gcb~P-B~X+NX^7HW@s^!<wjs^q8>C^KH=8w>XQ*$AgLPi!nYS&Cla7?>@no<#l~A
zUFt@GC1|fJe>kA$#;*rLxSLa?H8lw$$<e2{12CgR=XVl{@9DWXs>;y%m*QqderHMl
z^tiY=UEJ(F>M2ua`=Q1vog397sT_QrLqF`=P<Svj>f!X~Q<l&HF;ojJ$*<yM;jt9k
zjeV|9F?~*PMNeyS8ARAHFrNR={_cqu6xg?ey1`CBmW|4wrCph{tc20RC7C2ko~JeU
zH#xZEG#ka@Z=OIui)s;-%z=phb~>6-NS<i(u>>`Jfq?w6@XTa9its=4>P>RujZkM1
zLyX;9a&F89!I*jF4n##`Wc<YBN@)u;$%PUyb)`wy1pKji(9GTaK_Kd=lC{e#>(gye
z0<wkySuvA%C~W*1nth$;KXBLG`9^pOd`3n&tC=PbCabKNjp5H09n4`{#}qn=SUfTI
zGNPT@jcl@VWH$=a>?)MmvdQZ9seMA9P<*>ix|?b~*^#m4%pDz(g?RiR+hcGiN@J)s
zF#<ZilcKrLJ`)@2VAlo%(D5+r+1g2}2&&qg*m!W|ySmVLGhXl>61_68*55(L*7toB
zZEwjeAx;j}M>A^G#dW6KLB~`pd@3Zkg%$tQD20nU$sF(|XCKlkwo4hqo%GLMVi|*=
zv_w12E+lblS<5J_tz}C&pv~PTc=>#HbsewVY3~-g+OeOFv#qnw0|#_t8ap*J_&I|i
z=i;;6Fl4#irtD3qI>s5<x`Xt}!xDs71XZcsI(B0?D(M);)%Az>Wip3UrxL$VEhB(T
zlTDL^Qkcwr=D+{CxX6Vf-WZkzYMpSm`|u^gvuF@`uf?`tE@Aaflo+W?D?>T9-<M99
zzdh_Gl<SkYZ*<1)XQj94@mm;ojlqI1$U#@a(2tquL1NnV`L8fefs{A0P`c~QmC(q8
zYqYXpG!y&NFQi|`3U9+IbT?8_V)CU&$LC&o9~M*;@ExjIu!H3ki$s+TXf7<~el>6M
zuFtr%$o^W8lWz)kh#^=<QyT|hIu*LxYlh&5{^VtR{Z*AY*W9+bl-6!Oh{R~mW0_g*
zR#RGiAF6$baA1h#Mm>UtTq0E&32w7EJ=xWmZo1OrW_yPQfUCE3IU$X?0YeXQyrm-!
zmcG2DlT?%UaTlAq)N${m|GaWMoV~6UJB%+5O*eJXWJcO;k9D2m<AbC_0Ln%F6Y>jb
z?92U@d~Gb_wgf%<9Zu5Io7547zBb8KH8%Rcdc6#GXqwA?lQV_i6Ak}^=)_Ie%GTz8
zk^`u`*{-o6d~Wy-O%4E!-Y^6I$rsluOh?AB%j$R6vtGii7g}34Qa~tUzfAe^b|tA2
z-K_-VYy?$M+vn+iyBv}!0E1;u9wj@7ED8zymJo6tKl=DrkOoEug^!OTc1j-P&@9*`
zoD@kZW6SJfkQL_Y^`l7IsxOEL8d(kslA%NrAR|ihr%nt$LUD6ea`m-ufw|E$tAS#F
z`@9rmtjtPQ>rEMgozoeGgV7NrRgfI|Lts|6>0s?mMKL3R0qskHQ{d#f)e|Z{^Ct{1
zo4Ijf=)yIdN|;b;M7GXR<{1ByT#zN4DQsEbl&|5;dhpmt!3b2a*DQ{VQ9f<8Tb1mJ
zkndEi`1mc1Vfu}x77^2}jr-Uu9SJljf!LEv{RoeFsqCsuWyuVb$rX}SWx1<J&%M(a
zIiyk4s3s79iLmq;|7nX9h1fTuK%<8lMsa8`J1j&LpNG;yGvqXxro$X^4#DK$z;P)Z
zx>wQnq8A{Fm|)WQJ+RijC%raY<do|kmTB(DgKBkwxtNhS`v8Cyz0Vewu`gt9dS`Ks
zhNblus(GL}N?gGsi|N_@N__NAuwIk}IfM>$MyCZv$ug5>gH<GwfXF(Db^iR66X%$^
z1L%u&ofu<C=E7AZ8991_K&)8t%>6UXIj`%-0JPa}n5OKJLmL(}_z@fL?XQiKMcdyx
zrB@Q>wLcPf)^--JO&EAO@N#rGr5xEqdZHt59?TYksvlaa(&o^I-mdQ$E8)=GC*ts%
zlGJhh4X_%83e~RoVK9t`OSv7n(uxz5D--8Z^($Rs{r8ik7z>p=3nFjYa+vpQwtBEp
z<k@yiG%k}&@CeS^X0)Mx|GD>gKijSh2ZrN2C3Te&npz=-!T%&jc$WXF9j|e`X8n$g
zYO{7T5n%C37>sh<IHmqf$NjaIbV7qV!&SMl)LnhobA0*96$J)9_A}yvs*eBYand~{
zCowXv7=VO72=Bst<bus5R8mx4c$!T-*N&y+mOgVLlHuFw4CgEdxFJ?6oa-7gVS8mO
z1i8}86cwGka+yksO&aG;|L2xv%GDxf!*jrLfU`+eNQ>x>9@%y5akAq;#}(I|7aX2=
zuYG(#zK-@E%`WSp#}GU;lZ!NE%S^+@a3vG{E+RXsj1!jLl3<jmOo(QP2{y%qYC#Rf
zKPX6;VQz-#*vx40ix8?fC*tk-4K1m*Kc}h$(b6n2Ei!SmtZ8>}%saNSEbK&QXamNi
zT4#dM+>&A5M4CbAG|=V)i^`Q2zz*=?H=|03G^I_oDo!+t<3$5}bPxt!(A-d2qPYwC
z8JwgSK;<#-;Ir$x!8bb4eE>5HV_fqaer)6$HNWs%F?&_!`3i_tM<53Z9Vnaa)nz~J
z1jB#uzH5~uoziVx_+MbYK2Y<Rc-Z;oz#I$?SVkH0hN^<tQHxz+#ujAWh-LzZ@(uxX
zE>gYO(^l}^${ID#-F4@!A+YAWg`#F{jQX10#2OZ8Dzl2bg&i8(`{+`Cx?1m)3Lv?_
zRb9Qe+7U-D)V|zOJ`5q6LXX<rFX)Y(3_ZW4iO@uiSy39tGSsm&31zPEcz7^4SvuEi
zd(2lvMxGoSImFP%MusC&7tP;X=xrQL7TFmcBpx^yot1e%TFv^L`!J#2)@z=UE_mdp
zo=4v)lakPDlq*zH-v{tLK8*unM;8=GTp$p!obl1se=D>kyyU`A<+xDBjFutcQa<Oh
z9egCOGmR=r{VvQal$%=}>AfO5+na>n#;U5pEh`F_*H&D&USTh=CiMk+(E8SyH_!Nn
zX0P%$D|y|#1U~8iU$jFqM^1tou(urOn@tD$mTuwxE!tuGO{D+3JIqF6k(!QVshYDJ
zGyovT@i)BokEh^7dD{#Il;EuwRMmZb%|-qc8PBw0ab+y)bhQY9mL}QX{*rc<Rz?{J
zg`dwlf^&>TYuRx%(=X?aH2uu*Q+m~>GI!SI`fOR<zFZmIZva0?`<<hi#EHV1+D9h(
zjSVG>qybU|dRH-FDra*y_3;pX*AZpsv7`wSJ1*#nVlZ0uS^l_(7x<C}uq(kTRRdR0
zH-q7fp>6XIfCgDNRny!?Vp3iVU`{7&Tu<S7_v84<^nE*{A!a0Y-{3%@&8!a<9)B@N
zrio!Lz>;pv#IATLuG5Ow1#Xy9)zHj{)n9J5&ZP)sB$D&MhAX~CAg8b<6~pt`3>ueW
z;pit{&?wJ+=f*1<YYj(#<Z1J1%10)}n)w}cti{`2tg;vf<GQZlbYaU{K}FYc<fLC4
z(eClHyx};5DO01*5y4Csv(;8=OFwp|^1={Xk0~_47+&zSdX+*Sr)(RIB4$raC9h09
zgg?h5!H_>SkV2*=<;=;)5qgQyIaO%nK`p^C%S1wBeJzR3PU({a5BoTy<RdYvOiAc7
zpGp{tL1oTEsdf4UhBh4{nTwgi+cwDlwT6UF595Q3)K&b|u&Fb6WaOx;!d7>8Iir`E
zD?&R;<kmaxWfNpb_a|Quc}cUj@#n>Bla}^`j5lp6dczmzQ6zfSeMn&9XHlZ}%8kD2
zVdr)BKTYZWRai};w#I<pUBEjG0092KC@d3OJ7b%F!(RWUw2D-$|Iq<_59nU_i8$bl
zUicA~rUJ!W6yhnZ)n<VTqC?aRiE0_o5|o+AWPEiKlaAd=Ccq*i2=Q+4JoO)49<yQ3
z1mS7gvUkOjdYScnfgUpY-~1|UNC!ur`XtH=vLQ1Z4hG&J@h_W0Wgrc>21nuu%hTh=
zN>GY}sAnO<F@hzd<n=EKvXvZaX$HOqAJ;>*A}~f`;zx;zD)S?ihKTDCtWWu=2(e<3
zHA4Ukxvw;g)fq&|-%kMA90y1RUfR7$LGhl)!ustj1}oCw9}k&gFBDlCmr2JYj=Aax
zQCJ^Yq!k%kopIDQzyMB&6nf*?!r(COl&MyYq~wYnonwYYrXDmptAvyd7LI*8sX^wn
zGibZ`MA{ktJE54Qei#|X=<ubWjxXaW)DXKT5b#;~cNi1-=Yp9QY!@Jl<kzP{ml~mD
za1a9=JBzZ0c`XrbsiZ0mk;|SZ@HHiZ(<?ed`%P!eZ6gSBxGxvZ$9rFh>lKx}?e5k@
z&6Kru?5Llc72xa58iamc?{L75?YLXZ4$7u$qsNyE_r(Ac<fU*)9;uDu*Fb^}SU?DW
zf|b$(hd;oV(F9~)BC?R5QQ8pj4nARRpB^ykuuoPVzv~}tIQ}d(k1hXTSbmBI0>G%}
za~v@&gG>1r+yEA);XGJK!K?i!UKJ?XT)6tsBB4cDMp5;w9NN;#^V<C50J|u9xI#D&
zVW6Vc2_)%>D98NrM#O|l3Hq2ie7du;1;?M|_P0{|w1%Igk|bU0VoatjEJQrc-9*rW
z0z`Rpz<f)UewjD6%b5d3b(NkxDI8=WT_j_Q5c`sNsesZTA{{1L`E~NRQYCw3yVsLu
z%h*rgpI)oDlbx4d?08K|=C^4fb-dcY>%ec$qfdw+ddh&8`nX~!Q#I{uAX7;3;;lsk
z81Jq8i_D7~>AYcv@MC<gJO;YA-qy3G&g+BddDk9i?`=-N%=y=vcaR%*Mq;4`+R5gi
zgK+GoT8#&Wgwwn1Jr0~}OqYc<YraSWAA6vllHD$#`a`Z3->Rs<_btf0czVvxM>E`q
z5}~he{NgC7uE`*bpfxo#CY#4i*h=mUR5;6)?l{EAwj>4%x)de7bezKfQ1ziDC5p@b
zWKGtAC#HuP@xX!a>_eB7JP!n@bO=kqHC^myMMED7<EbUdERk|FVZn<!6r)*=pzHXc
z_7v^$@j7KBUf`Z|FcA`(gkgpkTL4-&Xccuf*Hrd@iWW>EwSbe;+PA;{smE{Uw_qZ)
z7@Hj3ao0g3Bp+gp>V((~;yGt4`xD8^SNPYF#_=;i8TyWMsBG(^n8KE&&sWRY=-^Z2
zoK0N>YI;H^iFX~c>+;8;qwArkDzUE%b9z+C-9`QyUpi3Kt_K9kUe<suBw3}71>Qn~
zv#kvf^@iu4x=D+x-Es)(HzJ=mzk|%*Q6+DqCmOq(by9;EKOq;(1%y{db1o9608O0N
zj+GWTd4@Q24YIN?RY!z6ghkArgf>`VdY2xvQaH&)zXj1RpKzOIlZFaU`)Q63t!}iW
z{Do+qgGO~%3(Aht&k+*g*of$hoboNhpKgcej$IPnD)q=;V$Krz`0)8QU9@|I!~TUX
z6w}KWtLH)Pb`eeLx_ECs9avRI9aRd<6WY75QwR<v*usqNIw68XEcruKMI=>oCoI|5
z5|xZt@KGXPS4f@nuvltu@8EwO+24%B_v5df^&fBk?FsvDcUD7deM5R>B}f3^zjjrt
z|MS59&wW5XWv(sj_o9ET{`ac7e=KU?Y;I*l_ZMaMAItwY{lMLg6IAo!{5*Jm=0xFs
z{#ZbQSGC^P41wvA8Ox5^+Wz{WQI}Eh{`&La`a%K>L<2zoKG1(TLIBhFoBO{_mU6xY
zQH1~ci~jY&{`DbJrEV>|CWi3&Jr-}LkQ@}(0>4z=sf4quA(RVYw%8FN64OBFY5ym_
zi>{F8+c7lC^`dDHq?8Wd%wT$Liu-QjvU$FeA30`Vh$+EU5%$BTrX$kVCp4qXFBUql
zx(3`1Gx!TacR)VBL?5MPhXP_d0>z*esV=NL(jFT&zRLeTIARC`i4_geY(y%qJAjjC
zoh@K3nypt?AIQ-bl4>DtFyQ>SEJ~jU7;v`_9U4}_AAbtn|2~O+Tj!J#`-e#s;+7&p
zOk-$2UIcxL(Rb<@2{v{nUXGSl&a$a}nvj__jUn!+e7<qmE27)4`(h3H-IlDWj}LFI
zLDoV08MuNDneqk3adX)R?w>a@RgW1;K5<c?=OZ381CRH$&lGV5w+&+D9sLc~WsPA;
z=uYouZ8Mei7o}-GIX~C$#Op%XkSZr{US@BupAW|w{#-YJJ)h|59~eXkUkf(A<no6m
zX+tG%=6H4Ed|%9b*xQJB%wD^FmK%PV8ek4of@fn5RN5*dp^kF}4?UFV1l9B;MBf$A
z5AcEE$4-Cu5s^<n@NJ&TjovbhW_O~~==*<1rZ7MW_^MpU#|Ds3z;J8%dLs_k;ebl2
zxy7gG%q$zR{7fe7@$G*UX2REJ8-R>T(HIOOoRhZh3Ese)2rk*B*$6TzBLO8SBaU*V
zVJKZc(Ydg%Q4zd5+LZE}nqw${$}B=<--FUC<DvEbmbWrCk4wRrmg{IqI{vYY_l+vQ
zCo-$slb<R5nCOpFF1p<T2&mc6WZ4(S_zlR*!5y^pthrOqpq3bWR+gEzh};OoIJ+O@
z7g5T#YBGy_UfwRGxxo`x8>>+Z&GX*fFmDiR)zMdf&u=xV>816g?~CsN`;30-oU(IF
za{lwGxzC>UHcW=x&gTPsP{6Q-k0dgQtlA2JTBIj$mJX~xk8K-ufw4Le_~)l5_(tfD
znjPBDd2H615yL7IPncioEtK}UB_7L_heYer?=U@i^RcO7+)IHw>(C5_4{DzXJB2a^
zMp@KMeZR#X0qA&P!Q7dM@)E^v26!y(pJrq)(ALs`sa6{jhRgNAUzg*^;t@#9@2RwT
z4`aTQ6}~ofsPtIeR??`!%u~qtdZ)zD9t1qBrX;9qXAA8!(yU6YDA=yz;WXqH8#0ng
z1$8RtecNQR3!~dDnIbT0?i^Dlxbiv#bIQEKP8Y=|$Kwy{@+mTpC5#28(7xz)^=tfY
zD$6U39T0+T!Yv#~Gsj|<7-m!IZbKE?Xjq{fxFwax(26XJ6x-YSRUoy`@v@553A>rt
zHBEys@?hj2c?!|0O<&9IwI;mJ{NhAvPIUJ-p!~ZLk82S1{1QQY%TVm~MG`Krr2I)E
z38+cyX9l_q7G>;1Q0)z<huti83oQUi4NJ`}Kn0rWwTg3;IAw{j^q&n(wL1B_*!v>(
zrl$U^N41qRJ_-u$$obUZEwq;B%mj~E>CLkxvluX^5&IVtXTcf-fP=x*==7;zA@~-l
z9ZR;O1*k0<ORqvI$vy&|*!(=9`VD2qBj5Q@&<H;yC=*Ouytk{H7&ojqjL5`}io1H=
z%;v{ws%uK3#GveItara|&X3G7uFy>DP=7_@eb-N`Rmx%m^v8u3UHl>eW^opPpdx*Q
z%bQmgf_6PlZke`uoX?UnIM6Ziab1E-q?S|go=0eK<D{(P5hY~$$1C@<-8?TkkF1@Z
zyBhkE+L#Qq0|M69gpw@LvXxr{VRpu-n~id{?LHKaRL%o-L;%Kam`p3DV2!J2=(w2M
z9;vMbIg>yNmgl!PgV86Cg#OGd>f9Ekh#3*jFnle6BRg`y46TDviPc9x_-yUfen9HE
zv6nPbT9LopiXsZKCuE%(o;;KHmw1_B!Qs?L35B!sbu9Cx&VW2Uh%<Q?IiU!|McZ5w
z&c+6`9MDqWm6i{+sJ9vpsYzZ$jEuYRGx_kaX<>c1LFf(9lVUWHUL|4zMHJvFM-p49
zTN+h|Ib)&bu!D^s?j>H5ppN?SRD_rZw<6)hfS6o1n*4Djd$Tg-gS7CAisWxZL>H=!
zED(0*V+7uKstVNR2(b>t!fLBO(m_r24ZZ=b^&Dmx0N2;x1ww+QAlf7|xJqon%SIDN
zX4uOgNpw|nMmPz~t}Hy{+l>*^xvH9KuFES6tERERBG(H{$=iM>Km;8yeWWsE?8}o>
z<?^P1hAwKJ7-KgXsolLoz6$o^LQ1>nyhdpz-*e5Wf?{6q0+bf~46n-l?u4n!7{_!(
zuoXKA8))6yBN}~Sbdpr!{+u)}6?*XxQwJnWc5(r8rx!3=6DW*<{6$OTMVxa3wk~74
z@PViZ3qEbJ^(qWRn%~<)5f4lQ9+*2s5pDz5DAamzKi3R%BCYbK@Ilv?ult9WdlB%V
z1T@qBGd!#AP*LQDn_7Bu)je~u9q0X0&W<kFt_-vH?Ebj#eE*sl@ml9wpSSEp&=5oh
z34d*)Qbcshs%ZCZ34!_)mf_9(v|LG~vm;T#nj#+9d%aQ7>>&USfo#{Z1~D%_q*azX
zdkS(mXI<eJ!Zr@W?2`P~FE*hSn;aWr<WI|imOsP!C_RG!Cjpn)ut*iNb43y$ZphNE
zC(mfK>cDWItgDCmBUQ_iExsx3FNgbl|G8n|+1SoR`vxxHzJZJXp<yw!*8PW4<6k!j
z&WZmq+*n<Y{*%U^=Um?^5hL<X8Hyag;u{L)QA(@i`S0$->0+PnOhU2o1rhnb0E~?@
zLqvEWj9w{aa#|OTzR+2>`%Q1&elk%t6^f-Zj><+4AsL3IBx-A-G&In4k3fG-meQv*
zVYq#D$3A(iiQX|7)){E2Su6f&^Z^x&M`Axu<2)nsxQJe?dz`Uge{gw%?RZ0B0unoA
zm0-ODVjPeI*3O|ugej6zT1Ijc8J#TdG1~8-*-782gdt9jrKtMVStfn4$STsjOkH5&
ztMPEEJIWaNP{G1=%qU8tB3FCEh_yW-j^yCP5&ml#F`Z?YorXNAQi`uvEvR6Ug#=W_
zrIHA!y6D^M-~wxez3%pFXY5X+cUU53hs^e5axi<xq95~^LGup=I0E69tM$LN%OV%L
zV*eoQmm-R_5is>(>f?%z#^g5|@2R9vX@bk=uD7+OPjv3_6MxSM_copX$j(1}4#9xD
z3<L35UI^n`-jisz8Ld%nZ<o2$m*eo}d&c(jWJy@8-|S4^EZRC8UvcJ?MdM>rP24U6
zzD)j&m48><?S18(okN~weW}+gDI@wk_aN;mR-jXrr6q=~MSHcxLw_Xg9dIID-=^VX
zD^l9<7|!W2-!$)WcwIGThOy9-M;|Or%l*ZCN|0d*rMY3Y+?5(^vIxrUwfVmF^y?r~
z@5jOlGPiVq?|&{j;Uga$hwp;p|8`XVpNr1!FL}_vF1n)cWXxR=gwLs(G=-BOL_mQ>
z3E0#`qW+D%1awe^2VV7zhkzE-KPj%#xvno)SsScA18{AB6e^AX3dY1Vow4Re|910_
zeOXmyz{-Z7zJ9=_@dk56M2;N7x!k+96+zV^9fLPq39TUT1E(d}@fSz4O<xivh-N)X
zf*j=*3mP$y15NAI;TJ_-qcmLmHfn-IUXJ4lljA2!AC~7$t=$C#ZZ4ov=mnjzLk7)+
z7~4*#-tsG9poAa=>L(YDODFJbT#|bhbi}HCv10npvV>>BBxB5X*D6orBaH~9zz3Gs
zm{O%mKo9J@yL03d!Y_n*)$hbp%i}+l*;35_SOKs4Gp#j4aD&mAI<}|3^%a-6szreY
zjRa%X8LQNr^Xk(<5Ko11?t}ZOgG94o<y+QcxK{cZU;|-Y3v8_Qo;PU*+fKH_GB}<E
z6eS{{jKoaPANZ)+Yztg0=n(aVN6gjM_Nz7VKzG=(ENmBrxST*hMzumnubOk7?`q?X
zuUMCcTA8clp$hbQ`{q1Q6vclWW*qgrZ7*t)N0+~(*AcQM_O8va`W~6NQM%VIGca$L
z6}i*}wVg$3CS`oUd(4~Hri%rm0=mecl3W>nj0AH&@ME<*hiWQ6Xx=D)XBvm~G;X7P
z2^ge#MC64Ny_xVSf)^wzjKm_wz1RnpIYo5I94<2YgwX&G<JjV|9L#8yppCFam<~j+
zdLl*OmbUjSye7On{>-1>1?M?MT%~i#s*Go(mHsfRO}cR3ayA^s0S^XbA%bS6A~?j?
z1}QIaV(|8`9YOq@z08WP!<_ZnH?5)<#lCDa3OZI9XX#M#!bu`aP<*9j=s7-r?(o;T
zWh!EAUaU0^T#OZzvI>I~(?K;*eM*+J@Zbk~&+Go?W?RGB3X`;;@XYYIcDNFIY~G#A
z*%^#%Q1{@6kT;T{;+->^!w0cme(F%gD+@=~ssYk{{GQe1nq(k0EY?f1P5~9%>BORz
z1wNx^#FVFbl~6%@b;SjFct^r(t23fVOAzia5OjO~t$}rIsnqIWfqr2$Ag&XU>klrf
z&?g2biCIcjr8XtgcBfKlU6xbKy>E|}7DuRKN|XJw*4fq3^Uu5co!uav3R^Q+277&j
zNzk{RRom+EU$Bi+WSySii|I*=0*3m^IWpNw<blmsK83r9e{vv(eJ27&R7fBfgq^c9
zqZL9@TP`(eT+n+MEucPy!p>V8t1Q>@#a0ps^o!EXDT8_Bew?t9YY6_3A2DdAjP*im
z!R_)75w@?8&agg%kDf9Vu6w#)#5zh9c3Xw6*T=OKCgr(TI#!f07D;-vtwZ&&3xWMp
zx7U|9b%u8;+rH3M-fy7blp-SS0Syd1qR=;D=*+v;rA%D^**YvhYA}1C&XoUS{@|#?
zvIA3!<p<1{dux!F;Q@A+6qBa~<6GgyFK)UN*B>c)?<cB7C)IrUE7J|x)=7Cb0|Rya
z<~{AF7-un}<L$0OKGaG(YSnGTx^s`#T~V6<tdji;OGu=RT&n+8$(nw{_<xTjIR8hI
z_~w5P{wF8Q%C0dW3~$}3uKyH(oJ(j<d<1|A2TUwirY&E=kd?2c4<}!WIfvF}dHj~g
zQceP|HFlD?ZasZWnUZqFY-7+#&#S91f;5a8y}GcacZaTF=`ZG*SONa{<0UF%H>+S>
zDY+v+sTS%N$jaFmOQ8S{RT;criVJ1d^b?w;ztj|RcZM4y3S1n@&Q@a?1=mb)h7$&-
zyeLqC3go@7jxY|Zb%jL&?H92X=^~F;FARc?83VkMo8!)fG`d_j#1vk0nywE0%0u;$
zlqHX}n5YVGBT4kMCI!X5MgDM>(TYolbo5pqM>3YC@pPV*8hMp@K_^dSzF=9K1!(_@
z-gN5)7L&R6X9Qbk+pIBzn<ylZWSRV+J09HyamUylNOm^CCUg$XE&&d1UulSA8Yv!d
zhj;~c50&P=Zi=IeC#tZ*yre8==(j9jFjgdj<Q3E3xAICI){~JV+Q*%we0IeJ!e#ol
z<K=dvl5fZIbjjAW;=wfKedKu5Cie^avvW*`-7#yt)N<y*_4$g!C%*OeqZX(01>h6=
zjp*cHR=&7o?<Xsqk}q`B4-O$(Bg_x5zlW6mo&_?tF*Ua_{=Wc~cGQtcGroH?;%^Y=
z?~luWTh_@y*TGT$Umuqn-+o}L-+o|ks!<A*^@xmdg7CssLW&C_`6N&$dF1=chMmb>
zmKQOCa>-wtD-YmgaTG_@?Asgewp(83*s$Cfy~$Lr8dgjJ<2P;&_8i$>L2ocS#X@Zw
zwA(5bd>F_RRAWhOgcG+omo&Y-xL6CZX+cs(ZD>Ry<_!K4WTpNdEbiVQ-5cDNK+^#T
z+b!j}VJ-xy{Khl4a%3=tM54VV7?MDQget=6kz&ITn*8a+wq{rf><PJe6uaAD1LIjm
zyYSd2ztNUd?+z?BFEN$PO(cT|Y4NC#B5tsV>RY2qS#m@QE?lswrux#jl{}cs`3uOh
z7z&7vuH%oq5tybbf)WMW)S<=oT@Kwth>#d3QnzYS?;bwR&kW#zt@Bxh;VX}sX?$tX
z=Gkae=9Y~h6Ur%EEGd!T(xrH=<Zre@iW0DX&|p2h+OXc8X=CVZe?0i1Z_$(d`Eeic
zad){%sK@Y-&E+1`<^Ql;!0q~Dc`tF_J|@0$49`*8lG$vqn^w7Sdv6FGnm(?+*Lt-m
zo{ARUmMd8d+|9A;7Z$n!#F2L0miQ0M{xsx^lg!q}H)&2PgA4~%;LGw48TWlJE=X9r
zz($#1wtaBLpP#sR;$B4ff!;+ji!ZIPA$gF+^2zhQf5J!0WTG;0Cvzl>H_Ti-Va-Vm
zpZdiCm*R2rH^Lo;i%VxUB+Hd|CirXD^!(>|5lFKr+tAOTo3ZCQo^IKdfUFpmCxD30
z(B9aQgQj>^UGA|qu2jANvrj|&GHGA8{auq`eg*VKH;4eACrrE$^=UBRvr5R24GCC=
z8oa+Ay?>5Owg8W+Sm4^R=v1A4eBTUJ#A?jzMK&odsE>_0)6N6K@%rn2f2jSSYhLP`
zwxmBfAo%zvSI@upRjlb^46|>@7Lf=5fZ}hV%YUo<?-yMseFLk1Pf`CH8mvoQ^Lw20
zudrP`MV1up5t$=>{9oc|HmAkI9ti~E-<j7yK(w>XZ1ogzNgER~pKsX%kwT;Oo@>?q
zy>()E+2gL&SPxu<vUKjBBnbx+@wzgyTbb_;uZOn#`a{2^r|RF{Fxybyw`dfMv`SIY
z9mIysB`&Z1NL;0u>hy0AAPB3}k?N%C(@@kWK;-e#7ii)E@bOlnMY{+IeXj#5Pmo7j
ziGq#9M5~a*(Zt6f-f+GNR1#uD-6L~>hOl_+e3f6Vq=w-_EW}>b6jsHxJiY=7*TAk8
z1`Q_%`>#H`+2T47xoG4H;YK>8K?CmmrTvc7MGh}6EUPvxf^bY?>2PgoF%x<5sHUw7
zXDH3FoLQ;jXhp&>{iNvzL<J`lNV07bi7$4}O0-`VWzoxI_|@M^ggMmYiq$#9@f5;1
zVSy}p-8E63gQ)A^6cTwW+AOt*DSj0_$U&-JJB467?oqY00;JD*!s|Mrc6B6ISkxJI
z=~OL0o23HQSXRh&s3)Xlm%}OP>YCyuWJpnpZ%5z$KQPUWau}RQPw;!=zCl0mfgGDf
zUvF<Fj)+a5H44Y($RZLm!$Hx{0*x*%Kl6VR9UPy~Gi>vvZ<DCURePNy<;K@lg^;jn
zM3^-K<+?nqTmsCbX1#}tvR6h}2mD+Jq9R3U+htTfue|e8`2qZv=@`VLmfNUQ0UBi;
z1!;mm@`O)a6x1@0X$EFZas%dYt+-0)h0&8C%>opUDo0}8<cZ-36=PZb*v1I0&qDrT
zW|P#qBQEu-MB@*?YmeUDgE?&?@>r2HZ7zXEsV#x@+!=&#vR6^Nb@db?0<J`gC<KyD
z!(2sdOn~*P;b?zB4rfayycz6u=a-4NPN5x(W<qsKPb7=w;Q5ARv4E|vpTIq*h)$mp
zA=8&eT;=?%!|GnWeWy#X&wkiqdQGW6gyPvt5e~voYj~jOYON@U_nPZ$yMqGU?yJhc
z1wTkok}U*-vS8!!zQ7yBwZ1vg7H^SRRtsW2@Z7D_CV?!gyMw@C)l+YdG9J6~J;p-b
ziYjmyH4;qch`ddxFP}CbR^te**o<mdj9}-%{-k=_Yd@lu6-QMw$O)8HQndj75CUXC
zaSXV$_Jha%d#0A}ugS;RD{6ubgr?B*rMAW2y-^O-39z*pyvaL6%Os6Z7+qi%W;n#p
z=4i3osd|>({##<B!rQ^ymdIb)D8;Mpjg(F*w?FmHiI<V)aFMyl`WO9y`wpy_x<8$;
zb-IBIi=s?~c`2G|-|X$vIB0g7ynDl0LZ%~}OMP*3{oi`Qt%>Xi`bu&oV32^7ASf=@
zPqx4-fk6Fiz~i8qGRo+#K3lz8A@O-PrH8KuXba)dig9||7UIW;M7$R67*H{k@2M&}
zEWP(x0l&H6VXo%=xS_N?Fj;efMX-#Yl|F=oMJJgev2mqpG>o8A>0N7w1oRGTf`pZ!
zkwRjq%j7Ca7f_1c+bF&ca}Dvj;0y(ogdX>8b@S?N5U*<w7!3Ym%ORj6GCbtyoY}Cy
z>x%wVh?&6x;(kp<+)vUj=sh*q!QS3d#Es@e(E~MVP8aMPA2UnyS*g~!PL2kTFD7qT
zj92BSR@@?@9TX@64n{Ii&#{>8Tm|#YB%$)j%mwSgfSTiM(f8faNpi9v6okE+Bpzdd
zN#?SlmJew;vt@fT#Dqh_^@AX`?FwU=Y6laL*aHr^20;Z=0IS9EQouqd_Zy@zT{mlm
z_m+eASGZPD&t1>|VAVKzk&8G<m>y0dHC;t#7^}jF)*i|LD!_}E$Mr&`b_aZ!H_V62
z*M11Zi$S5!UyPp)nT#OblC;3!sw&umHiFeMd#pr8#{|Pi3v5C{1+b;XV0vPf2Rnz?
zulm!Tp(TBVPv)u%H@&0H-j&T8gg;C${&qE(?<^iUq8)1`(F`z~33wk5$Z^r+mKpft
z%|f;MS%BQ<W3`gIW8d;eAiJ$*z5kA_FInvhcK5r4Xlf+JOXNh6JVizzme9;3n6kkA
zotlaZw<3Eu5Mf*gqCf-mBImGA>H*;yA0nP`Faivh&QI@DXIvm_C-{1eG$8E}z|C(S
zQwxB}Td9ew+?C=k$}syf;Jr=C%p|l47h}4|0v<^X7l0K?$IervN!GU`OWG$xi!Z2H
zWnn{<y}RR9`7#MsNSa5N+LcNYm&T1-(pz_>wgiv;VON@1AftMm+dO=pi=l$(cuBAg
zw7uFc>@Xw{%tNx%AZ;uoxu$JP5QnT;tE5K)^+m>R893OBoMZvXWV6Df@t1TJL>1Tv
zBeez=Uc_2d^N5D@qz8qq-0UuExZB#KzyN;t$}NJa)}0C)+DtlBvmROTF<u}|BJB7%
z4n+U>IEVqA=0XVc&f92*tZLSrvX`M)7(x8%o|cQl!da(LnNcW2keo0c*{(*UnJ}o*
zOXzLZ%XS+|&D5@uzWxq717yC!)uu{*^SD!cIFi|I(%t$LokS?5C-_eU3Wr!c+`vdJ
zfFWUmJQW0k+)%GgC6jJ1NuAM_nx75`Us}G7rQ!q}I2RDU`$V9Ty6@Cn0i5vc3*dk-
zDxl7~n}AFEmoo7Df0Vevs`3sk*Gqr(Xd4iaIEC-2QHUlk?{lqdPA>mO!y>3;4$lP;
z@4}9@@*0ib<zN;r!%1)rCSn|^cN!0NBXXMBfwVSj_)#f)1$S>%;_2D!k)ssz)3;WT
zs-plnD_<2E7yoKdR-4X4d3icOlkmxJvR(cu`Fxeb0@o3^rj)B~IgmdyE4gFpkz%i{
z8c8+kneY``jPfR_Zu+!Jl|*IKN^m|vxeDm@>1?Tca=Ulh@qB=H1LIn(m-iJ0h%j#k
zs*e7}D?`Qp^BYTrM#a6z7isKyn?m-xR_OtF0B!4Szpd%{9od@`g16L^f7HA5WBGfc
z$b^^z?ajJXgch65d1{%*`BYW=H7^zn;Z(8uOqpxN_A#W}wu_y7we-yk20cR>Gv%rs
z6cwSfH0XCCbhEe{;dm+r!aRr(E7i@=#EfY!*kR6sz)A7JIKc;R?q$9bG3spy-U1ga
zKrsV5OF;mbJT`aESI-T#;oAMEp!d7=dNW6&kI7!-maEDOf?Og+eQq3zANzZT7?6kz
zo;?vvs4=22j2a_m!*8Voq|qh064bbwjkVI%D3Juzjcw>2QHmXc5g{wFV!5j#${^$L
zHd9Mor;FkN4KRz726$``%3RlXKj*j_`lHkjk=gFu(6BE`Xl;m5%kqi#of1!q-#%+z
zc>+UM)HBZ^khMnH4KR8BRXzUUA!ajy1i*b@y0LqEKm)lxiy2~~pc00lz1RSHP8TE)
z^dNw=Kf_~j^#(rGP7k=@QEQYvqszb#!8gKcE7jJ3q<T!P9+Mc^glXyH-_^sOKI86h
z{LU7xzY-(OY(gPde=l<PXTZapt5BsB_pNZ@LD1V)U*WHYfZ(BD+y!XJT45t<l3#k8
zw)db?ZWTOQe1z6OC!JI(4I)rvBR^rO@cGYQi}gf0$Cz?yyN>(!1-L5ORmLuAsB{9H
z&M!MvOlSR9grHxX7pw;w03d=E0D$~|)5#h-IsCgX$=@`x7aG=o%|m`(>N4(}!m#_@
z__V@5l4%a6AX_lD0&LlwUP`cv0nZ6XHU5f+Oy2nN*(hj<kNdf4bXI+uQof;=Xa3;C
z_i;ade7hT^6{pF!9C|q%zu)ogJN&hAeQIlT!oUQLp-V%y&v^eeNh2;2@ANJQ^ZWPR
zZya<8Cewi6=?OePf+SXZ+F{TJ@j+`eq_Xgv-5fD+`sM^|%?&_8{EslJlWaTP1Tlsr
zVqDd@rZdKVUQL>~!Gpou7XKp!8^(IaqJkiD10+JUgF#(!s2_^0Jj(?X&%jqo{bYNZ
zhV2Y<mi@5;aV8xCA(vDM)$nJ60;JWBg)oB;2M0DS*w3}#gq{BQHgtQ!siQ7nG3y?7
zZwD(Yx>`2w@vs?&UWV;jaG8HrR*LG!W#RVrQ^SHizvZ_ahOa){tgl3RDIG4faw+38
zPj<1IV;9W?))|o0PQXg#8;W53{H2s)0B1sGCazU%NRiC8_?Hu0dp;64RAEg`(n<Uv
zi9)YNuPo^>NyP#Rn0$(21{^FT=($y+-in@N?t&Us8A`srz^!nX281Pe>Z0rY86e!@
zYkJFU-0d6i>7t}&%B#@?T<g3P5%~t%v!HtLd3eF63OA7Y#B$2we2jJ`zr%XSs!4Fs
zxihbjaZHHSl6dSK+dwbL3!b3w^jW;Iq?0&oQtu$uJ)Mwkc{aGtLB5!2F+IpM#!$&(
zxoeQIi>#)hGpgL5&c`wR;g>t-`=CEsS`$PyZx3NHT}EqqkUls!nBD;|HZRJPpCQwu
z1Z1jhrW$)fewg+wo;9yh>yJ2{p>|R-Da$8)V0v*x<+M05z;M=3Jyo-bPfd%1%b8dQ
z&Y5@!IgL`Uo2Pn>J_7IR_H>Va4w9a1^%x(P`)b*wNd`03+vfmMkGXMCxoIXe!5alk
zQK#4HHWE@e%tg#TwjvVKt;3GA1}xgSR^c*IT|4p@UsaE)8T<rF38a7nIFS=ywFjwo
z$8MDcP^bDC+8b#%Vj+uk4fDHSHW;u8Am7}KzZG$9WWzD!HX$w7OO`vw7NrSj#omOG
z(5w}o1c^>}_kbv*M-|(r&JrGoKfP+7>L3G{yd<*xz4E1XxCHJF2+ajaq7}excbcG~
zL`rBK&;8M#f-XR(SY}9cW4=wzRUEv>MUpOdQKld2eJi}jCD4nHQ=Jf%k?L{qD9u5@
zPb1VCOw54rjnqN#n)-<u-*x^XpOoLZQ5Q;@fbOoVj^%3PZb*U9`Q>Jo;u$<VY-m{Y
zM_80iTm)5C%~sWrPJD!f>OE_Ei8F>Dq6to(^#1pc%eP{O15=eN{2fhwE5*a$mN2X`
z>jA6wCrZu~bp7kY>rqce6dvr7e!kuYbQ6Q#zbRT}9W!#xOL%4Omvava40@!#euVJd
zCXQ@s-7@^}{%qP)7-LR`<DGq@8ip$wl>e2ZoSpeZ#}8#2u~FI<2a~h19?5x|6w_DR
z1~Z@lPm{dfP7f?C(gwCZ6@E=A_pCHbYQ+>fz&lZNv*I*9EKP<_W4NAoZx+lg%EjbA
zuotR<$G(1#Usy`{oW=*9eAPyTZpK*qlw+Q!HEc{W*bqL*)|dz*Yyn(*yEZunyvZq*
zLfKk?k8g6p3Ap2Kc<ZL3a@O-fBoPxn-20Z=fbKQh;f6uW+w-$`Mo-kiZK%1=AAW8g
zZmJMvNH|dZLD_fjuq0@J(V!$|8T?tc#EdW8cZuuZG^{;-!vhXVEJddpO0|NQj6PG8
zZ|!t>e^f+3!Fz^{NvlI({qntiH%7(;YN8u?ETyKntt#MbIS?ThJq2~LFy^BuYsQDc
z9G)<)79hYij<b<;sb4qTOrY?7-o~B5F^!Fi`hQf%>~%e;&Ymu&?*=tf87pA}cWKh1
zbX1P5dpiBFSOlz1Bn|yo6R+wCA13w9EDV_E;=ZU+<gH*+f_0#RDPalAu~UjoUC}bu
zIG2HE(C&ghR~HU%M2o?9XZtfoSdiT^5;5lQ5&#1hm;|CDmL=yWm8YB?l{XwjWSrt)
zTK73@z^)!-v{-t~tD#OkW|&h)d)n9VXY?t9X0)!{qQb!TS9*quy0Ax7v?tfsb8BY$
zIJ~2wlj)^^D%1R3m26h@Q4K}u*bll`dSft&<l$-nMA)!^LF<0_ecBjc9|F~VtnPIs
zZo=J>BFjhdp}nGY3cff(h@R6!G|yzqd!mdYwX~^;HhbHN=#wh@ehqhXmf`R?tQmdF
zRVZ)WN1n%tPL)mY%H`D&HiB$#{_wrh#?xBbV)b;^9w_yV!bVu(x@+?UcfKgJo7A_G
zlM4s#47{LUCVz<YG|pSAb(0Ry4Ed_+V@E4ws-*AsC7G1wJ7<!{m16V!AKx=O1s15V
zh>t{%92cX_+GfG4<+*`TfcNV!(auU$R|l{g(VGbExH9OD8gK-PE{TMFUPpfc=l!a)
z0{R6j#;<tlfw;YeT1&dtv~Wdj1^udOtUvlEPd5zXq%uvI7=e3Y_`B1R<~*K|nBlWh
zSC`wCj|{)eb?T~@;kHU9K%M=a*ygGlXUqGI(uZ9Y1tLZd8S`%B7O@ZesoG#3^GIcN
zbjMeei%E_*mu?egO1RTikF1!Q2q#o?tHj^mM-?AfE*1{;`X*v)P3Kgq;wy&hh~0G=
zxmCUvn5cZ)ZUvjaTdnibie8b4C_~=mPnGEj9<<9)7AsE9lJA}D%_EgWrl%3N@bO^W
z-B=HFppU<}y?)xo@zN|%Cm%q)Dm-QLQcZ`fB^Pau{vrzuIH`b&^WY>?B6e1r)2r~Y
z6PRI#m?6<sJS|l2R*^A!+JoVbw#Uw6oir;Md(fwEMr%7hG=-$B-$Kc&LZ(SV57vjy
ze$%`0+?g?T@gD?ws0j<`h4)wVWEWQ7V^9%7ix~oMFC@jI5STo_0;y9goq_;OM1qhi
zOxPV@H?rNnr$xxcb~C?4Zf95+I+F7(A(n|S+r?%Dl9_G+Aa|2G5k)G!=AiR-A`Ebc
zaR6D6h=UFQ_{=$-$3-w?4inyOcRse=LG)Ag40SZg;ORh{H?Asu5XVI-rCcPt1z7FZ
zm2~#Zmn(;9&@O9~4>_=OEs*RtR4}V7EYhTx#U7<#6!qj-1frphot*)Be$_AWU{~eH
zunc+y6YSjsr7pCLESl%Gv*(?r#!=5_3}v4Uk+I8){wf7H6eHcqg}3q>)k19z4Qy9{
z;nzDj5ov-j&Z>X|rEZ;wDmfyjtg=fE$tbY*2pIA32vBT1J`pAMhxx)NmUR1)?SD(W
z{``WV2miX-=TWX%L~CRu&%)|lI(Dk8R$84*(ZKW&l6{a>pzX;OQ^_nu9d$p!9e@2)
zOFIZ;0gwCbM$ZwiBAVRvcuLmJ+yQVlu-)-K{8))UzsRAJF@u5$s!J><IztCfR3=kH
zV6fnh${^t34X}|V&2S8nO*%KQ?$QoUkxeS_+UF{Ym7T-ZB9G|W5E?prKcyAp!-CdE
zl}yM{2{lS2;UjQ(vyKX#XA0h~p}GLasn_AY_)`y3O(nHhXE_YNdUHErd9nq`+KS5D
z5+Sj<;yK;kUolWjZm3>Z++sa$YH8a?>V8IIZ<e@8Ko>%|mfcd0-hAke&CewP0&1ap
z3!}#&e{%yFN!35)nQS2D($gNPS3B?LLs2$Ug#<n=wE<&-UY;Dd`DYs^s9pWFGMJQN
z0#G%ae9*e;B916!H9!;7lm!c3Ma#-Af|TyQ<Urh5bC@o!IfAh`v)1;H`d*?)Z#eF;
zWUj?Vvje_{uK-7uM}OQkUPasIQrEO?dm1O&eyyN51A>?zJ5iCQL(x>?L=RJhd1a04
zo==JO{t&7n79~7hd!r6=gK+wIJv_gnwy&umA_J+DNtA#HG6B0tIsEjRYVAEpa652E
zfw_K(_qVMR@?>XwczKF-b4&i@iDFOcUXqvL3uWpStq##(k}iPo3D;%pRlra0{Fv5%
zgI^vr`^1A`(cVRYmJE|`=v(-b2|PkAPbjwD{O2^bzmV=}WL|l*Z%IVp_ngQ7>V9Bu
zWB%_pzJGH+s8ZSbOBCUA^eu{@493|J#e1D$NtWBapRp%l5?bU@$7UX0)9iHWf(w;-
z>Txyc0z>8(DA#~=b2T;Xu|3RC_c(%O55?|U#b^_w)p~pjj2!>mR!u8{c%q&to@eC7
z`1mo577{GoG}^(S1SPN;Cm6=@%QVw<6!8sf9HRl}NY2QSMbFYksSSiS+sb3Wqyzd|
z7`+w+`*&k7k?5nLV!9v^Dv(d4y)nND!r8ZLLHrPerMcqKddH27LA<|DeLxgwdJWro
z1en!HX0+&!J|iq8$2K|`_l)s%tQRG<GV>lleRo}p3#zZGCC!>8ZE2iaE$1fn`!Q)A
z*^-RaBBDE;f}4g31LcWu9Fs^fljaOI?C9*saf(D0DAMpA0F4yPfQ?EBv@BISrDspj
z1cP7Sn7mvNP#`3h(Qq9dQ-r`S#)_^3!dPyaZ5q@?3Bwe-(X^R^34aZzBDT)2#BgE3
z%Z1{zxVdG+un4J>XX+`)>c%R)+aoiiUXEt$E$pB0ni{y6jlrYaSYWEr4!r&<(Da{n
za^@WVXO_n;JLfQFDc((4xO_N%ryTV1bGqqBiE9H+!fdW&yh>nSl!bkrm*OgfsC2e%
zA*@9TicVr;XEu|KE#5VbH$OF(yH_1nt6O&75P_a@IKARriQxuxOPFNRi{*kO0ZuBy
z%md||RW;uR^dR-xVu9ax29&+^v7ftMm`Yf%CvVEs8f$?+;9yp3GGJWD_|{8~nqh~P
z_e6{KxB}gx8W-PIeS{N?wY#gvf|!y@xU^j|iN+7YB*-PiDI(z9Bx{x7rppW`p~1#q
zxpd4Zqtz5hpj54`Wb9Izh?|Tf$JA*YoE)~N4CM%;vuJ^Xv`EB))W;cb?ti&Pt!~Gw
zX15lc^asShsLntN&p{x8y$9F+JPU;hg)1=39ygSzy{A|HHtr6Z&q_ZdRluJ_^NY}v
zf5!xk%^-~+b8fGPk05<XytkKctHS}bVMZvaK3GkP%4t07Sa){_n8;-5lWbdztZ|kK
zpOtJ~_n4pAQV=>}Q_?H{&Plrlm0Nlq5-yt}-tEFzpn7&wrJ627XIsNxKw8MoxE>!k
z=l$gk6Sz~QYGRpppC}g(KB(A)<vDA_%~z@Z9vZkLvU*#%1aG>;cd@#hEgD;{Tl2us
z8W}Qgjxd!!>%_DMzjcMuMXk%H#Lne@^}3?-aYp3{7Yv>zHy(EUEf2+QI)kJ*!-~E^
z#oG}6Jg{f#?s-937jZ2ZHG8ewlP;K%6>=SzWpAxQ<P*9SBX;bu34tdzOSUfVx{z0L
zlkP_Or7U<mg4csPdL!fYJ0OEQW~3yZgpAn$Ekx+dKhX~R#>4|YG$&9Up__kNn8Pbm
z=qWKH*I5NQ2zWhjjlqM%-QfLfh8KP$2?qUUguxAX{!Lj@r&SK_1Fy{D(3|yGzilEj
z?y4O9()9gc(s7JFU;9-z#LO;igtBktj5L&9bX|MvDsnzj#Xf=V^U2};pG@rk+Q{^Y
zDf#|y$ZDhiZ)7#{e?wL;{x8YuP?(+Oe~{HO6<hyIR@3(O@?b5<{!6kt_5UENkN%FV
zru<K2^^gBTR#X4~AggUs?j8pIBC7)jzjI;n)MriAKDB6yt<@?E>qe1Cl;zL=D3IVV
zeP{h7?)Jb+lCpjWke)s~SR5{OF!c7m?E%tv>xxy{9)rFeZFC9t>YaXE>~lPV{V|Na
zUEk1)l}#Ao5UHo~oM5e*%td@_R*DaZMc1Y2{5b~HVxB5e-pJi~p+tncJ^5f^p%q4$
z={n>?zF`DmDAQQtxI1_G<D@jqdQ2O(wc?TMApY)xgrygDjuUk?4qpoJ#np}ECfy6>
zF_}~OXpapege*-&S>{WfoUDYC(ZPkqmoC}4U}XcgFga=injBP1)FsS?d<-)qU&NBO
zOeL5Zyw4^ORO0Ptl2h@%P9^=ajo8)Z_?{eO?T`{9bX2A0`JNO4=abpmtff<r<_EZ2
zIX;+U^Kl^frZSTm6i~|)7Hq8~(@`XdWuMmq1xGpxbQNyI%^Ch(=vB)SctX_z=eAj=
z#^M{KrEyi9&b(1{r{aRj%%~gV3OF)PkYW5=osE`NO<>NF&fGZv>pupHzGJ8WApS8>
z6hup<G5(!Q#ew#(9MArVtTwdy_h_oWJHgegZT}y}-l<KnXj`I8+qP}nW~FVj(zb2e
zwry70wr#uf^w$r4@5{OWA=X}VuNg67{Wom$YipEmW=#@Efd4|skkS_NJf#rvSFUhM
zI9i3?uDsLSc5c(o{PAJFc*15Q>5eR>a&kRhbKgnFb<&y*mPX_q^17nt;O6Ay=Huq{
zhL_Im=P}$fWDLGg{~Xo^EfjepO7X@31>8gk48kVU@S5r3143L*>ZD1U3?z9}hp7NT
zF4EGUGu%LE;r8~kCGwAc0LYh*lMv$=KS5IE(eL|q(J1l@-Hnh%u_JfFv~Is=ZS!X&
zs6h^BQ-VX{mcZjhK=}@(U|n@`;LM>NS<66?j55bdr8;&E-v@d#vO~FhlM=o6Vpz3l
z_4enIz<d<#!Yh&iF8qJ3jbp#oMrync!To#(8tn}pW$#`c8XpD>V6~vio}c<9ET_HX
zQB@veh8*vl$&u$HujjEItRI&T4PYX{4#1(ol{!S-0L|GP<(PfCzY?G|H$$_@JMPAw
zLK;WIvukyKF2td4scXgU0Lz*$M$zIQcmMwUHCvr`@&Z)_5l3g}%>Kje5#EzlP69_5
z;A+QZovaF>zv?j=tVtuD>bv?Nr%L4w-obMi!43Em>duA*u96Zr0Pjf0g7L-t!B&p}
zaC%G?XD&XXnGxV@36ui^Js%PX{cc)*=(>S}&`^y_CaCWWM?5g|`zTN+8va-f)_|8+
zcT3E_9cKh!XRLo5*Fh9(qLrHh+ildqB9)M~M3kp?_tlL|@`f~w<FsX$oS7yN`X<MN
z9&IQBDbfZeXTET7ULPK~xyR+#8&lGH=yYtula7RPaprLSxmD++f>Q)^k*hhML<JuV
zMK4J)JRVk-8m7}ZXB;@~M@Y60l~|o)kzs~99M;rOG*E&1lILw9Gp4Y!*m0}*joIQE
z*Iz$-Ks^;@@t%ALLZbmEL6fX3E>BG*0uo1lXL=BnQ}jv7_ZNR&47$;DoUIGZqYzy4
z#X$<sBE$nEe~3)sQtsKfrAeCW58uvqlqaX~9cD&mlpAA@_Mc;BPcKL2UQUFF^7c9j
zP3;XF4zIi<N}edn#(G5s`<JcGhQ5&(6_0B3@i|~!E^g?M2KMmF*Ft-tbooL86DfV5
zle`6NTs^9`6O6M%KA~3KiEXR3ImEb8^Qo$K98teR77Wr{w<!N>BNz~;mpnrzLpoK+
zFcN8={5NN}r1s+%3d~XLp`rYiFeE1>)A%G&2-HVeV^qn->4@@`>psx;N~QQU3|I1n
zra~YQ+mIrsM&Lab;S6IQ+!U2GBG!_S7e55`mIh@!o)eBiWAT{#Mr3Kk;`Td%gZ)nM
z#ijAI^<s=MYo{SD*4}E+b>!+zfxmW=1lYtAC4UIDwMf<sZS-POdNacqM4yTt6mJ*C
z3@u`7Y7lz8mwglt-@@d}Blyst>o2E$df{VE{QK~z*y^bPeVMzPFIFlV!M4urbuh}C
zwjx1P9%#il2EmZDIFZRI-1iMp2YABQpycx55S%v~bV%faY*9G`Cvk27k*{+6AvAnL
zt!Gh?xfLz<Tn8;n&y^8(r?7E9WhEXB44Sw6IP0TBQ0tcfMD*;ZZmxN*Ioq!J-ZO{~
z?kLqj{8tSTKOMS1mrIBm4NgPli&E#@&&fl>PAdjQuLZSk5TEGQaRdLwv%r>BwS=RV
zg@*N8$FMIwUENErBtZp?F%au0-R0MMp`&;Y;7KSMm1VCfX*qDCx3X;8y25O!ca$(k
z;dL=?DF~}xxk|f8Y-<<*ZlQ~pKvqAGS<l#q#(L45+qm4%;UUky@OMOW!MNZhVs8H=
zQh#!5WR%o%lEazHM_&iNKxlDF=2?@gM`DbQMthAPh{=c3&7?&VX=*?9Ciw;jfkQbF
zKGEyZln8oGW{T;gj{7@D#Rp5v5-Qs+RzNEA(&0-_I>%z4ywx{(H6ahvuU4B56^`Vn
zTtq`D!-|1o*j6`vuICiuT<|tCTg-U-w`aD*nC_J`fH6a({Q92_vZcA3^e3=J21?fS
zF_=?ggO7Fl_`$*Y9=!>kO6k-R=^rXLC|fkKZEw0-&D@~dl%MvdL@gr6B7g4HgI&RO
z!AlZlhk4~T<gM$JCej2e4JD!{qCGmmh$DmXu9sTp?SWpt7m~=Hbdq7`-^#?6SNSV&
zlk!=55yu~xiJr3QVrTw^4@bt@X|AtBh$Gh71`)@cL$rEoCFfAYjUK`j^){M8!c18n
zvr)}H;yKXQ;g_ETx*M!bh0y@sr-B|-R?Eo+rwmiY3dV<J;5l=VYGmR&K|y5C%3^4U
zUHOs-<2E~hg`Z=j&zqai>6XN(E||wSrKAIzbhfjxrp9jTGP_8m`TqaPC;l@ezAWAf
zqaXnQ*hv5YQ2k%FVgI2UI6D5fg&2;N?S|NWr|+<ssFGyz-?db<wlc`waZ8%T6j({g
z%nMKu*&2~$FMs$6n~dM<va$2<o|G~ct!)tVN`=VG^rV})v6A~5zm5+(bk69qCOat`
zE|fg9bTIK|ZGP{PYro&ne#~b7*43u?l14h4;ZMwJ`bj+}5sCFQGTx5k2gI+pOL}Er
zaNutWC|j&XMf}|m_405iF68PNF5@%XWST8s1A&Z2id|76m(74`%_ydCom&zUyT0nF
zc#ahqni)2`b66V*ak#o^-@wKqh(2;(p*RVs9zsHx&Y#i5HN%1&QUf$#)(zSD)$S=p
zc974sbjp2B3oO!^*jV<=DFp~7l5kg)kqaY#Cz@eS2gM!W+k?Qs13u3?&~HmJPLoI)
zeYG0Y&@rO~2Y$>t3w?iFI{G!Q_jAK`{f99_CSPVwaqhaY*Utb_4U}L;%0C(eAPF}5
z9^1r?Z@e!8RGC`|323!umzG>Pdi2|LDT$S!RSekpuxXg9dH)2;!1EUBj29%@M&jlB
z)NJ(K)2G(pB`rJm;vW<}NmSgdhhr5qeOBxPlScc}+|Jrt#s7#4Pw71Xyq-)s5nr?S
z?!G8IL}CP4xhJMg(O)j3!|~a=?Y)*PMcv<S-R8dh5HuM@WRt#ojVCU`E?Z}Vy2A8y
z?mldu08;fvF7Lv}gTqZ<;XMq%4yEDR1Q4^yrk{}#&NC*GJh%&mFcCvwPLRxq$*edi
zG4z7|iL0A7ezxSw#LzWg4>7LXxTw>zN%z1R;1`6b1hrD1o}8Zr4?y!s`LoOB$g97F
zASTtpyN9Z`<^{U5=Fp&y1z@YaBLG217yb5%X>J1QZaBQyxYk^+o+DSgQE%gu)5ZH5
z0p8L%;Aa)w*~W!^aNnsPb!OeM2?|k#wK5So=2b6EbPxh@UF2dERmv`4N8LR<yrwF2
zt7~M1emJFD0QGN${lsiy%%_fD*32xG3UGP=wh_l>t3KMOghtyRJUH%A))sb+-1##o
zozbg#KI$F;eo_lw8+&QDhN?yYPl$W0V%WQ-D=A|Q?zb}oSS(G-eM>Mw>IM8wWEO)>
z<S!1NizrVW-%T`Jl0bA8`)u9jzdd`!Sq%MSSw%K?B{yk30a!TokK8_?`7fW{^*XIx
zvsVzAU(ANOaI6*5j832*ZIw>;AQ#ZS<C^7BWPvVIh}FL9vf8D>d${4tcZ?Mo#Bzl6
z1f$V%XljU+t%<^iCogLa*+irj0-YmlZXotev?qSY?p&IYt?b2g-PGcyu-K#+>CtaL
zmY%TvfD!NuqG4g=qQ5pOlh7MNo-tW*m3ErXFHQGv*#Td27>Fg9JcOzG<8R=?L~~Mh
zeZcNVp$doE$2l@ATj+{MALlv1`LK1`96qY=k#nDBK&7L<i)g!Y9o+m>tCEU%l?s|>
z9Z_fO<*IOf>|Q61Di?y~Vp}K!2p|rO()m(ceW{sCibch&*uX7sES##-8F<644gF4i
z0tWm>^6fgpIrpCma!$abPMw-8Y4@h0@AsIKTT(Y5Fn;U)KNb@TPy!#);HP`u_T#*`
z_!&Aqote^!Nb1STr*6+44l6Az-95`&d?VScs>w-d6MbjTI-11ta{p_0?kz{bm(Rr0
zKO=vQ$&HG*FtIVX8-Cljjzp;w(T5I(;m|geUD>$FxB7i2x~$jqHO<Rq#hAOilvApm
zUCke8+J#TyNbxM3T5ouh4z&JVVD`*;I{R(cBvUM$Q#Ti{FAK~k&@w4Z_rASDwG$ve
zutWm0;mjdV%D%3cEud})s2B^o<B!f7Me;$<C#oYC@{AGm8c2~s91Hl|GfV&>*d>WZ
zpsXfL%#1oDH>5!9^u@5N3n%j_+9k9m&h>|Ojm)tr(T;`DN*ptS0-eT16vqJd0FJxo
z6uQ!{UOpX}$fCd2`FRzb$oQQ;t$yGLBk2uiEp#eySHpKm+~OleJeyEPY(HScRbiV*
z3A2nvO2sUZdI}M!<cndU0&ly5DhDoEpaI=*StF0QZiaNTnZ%Li$(ZUFz?>gqxKyRp
z_Eq^0$F33?<3L%Q4zV2{0BnjWM7EF0QZx_JnD&}UdPrb1UfO^<jL|#&J^z$Fb{qs!
ztiMG`dKR|8mz}q6E+~m}#6In$-cq|8rWKzVa*vK2<}G74Cfg_9)WY58@#j)c=_{GO
z5;lJ|V)jY;DuB=&+j`qrTU&CnrqSKm)SgLg-f~7=j8s&hLRl8!_TS6p`)#BvKN7#K
zwkS1`)2%b8rB%1u9@7$(j%VraXwTA?HJ#8-xf?eAY`j~LDM{t(i&c_%yw#N|yN9&;
z3PiA7PA!=o(b;eFRZmNfEP(J}qi$+v!gn(SpgUK%O6qv&!jPO*&li^6CNt(EAiV{J
z1o~^>JjEDOW*FrTl!?zJ839|cyx~V`$XKQ>=yNf&+z8hmg>0IWK@MhcDa@g6V{O8x
znuA8u4!72A6;Z6r3YLVE!JlC`PtLBB5!2nSpg)AvQg~}C0WntSi|s-5W7Fm?{?CDo
zS;+b|F$0G^8XOMOT4*<m3_2g~sSe}GJt561h9nUsC=8RGHng~AhE(u#<JLAV9>f7)
z%$BL1{-8%cw4dFAPE*Yiq_j8&)Bk6_Nc5npeDup{nnJYQKNG8N(0OPC*vr46eh{&6
zhc;6B0*`4!)_^c6ngZ(1!Gq~l!yC<vx9|;fp%g&^i@I_6Q7=)7Cd<n=j!z6nN0&st
z-QQSnzlQNl-UC3vr&7U#d_axQ&=nHI&Z1kPAM9OZMGD`eYGX-Iy;tqEiBb1kiZvG@
zg-cNA{45+s5|f}LKWURz$xoHZTYjvX28^wlyJKFA<wcjpxsF;tWm8qM0uypxGakCS
zV?Yb6YT@s|DP*{Vg~z<YH?C7%;9`VM?uY8*s&@wU!!0S6>8p(&7*<^bS^dC0fvvEK
zm=w)qFe@gVN<q>kk^G8wdc3YMmu*94olWBsRRnyacL<4!6)12@o39;kr-Lng;F$lC
zc%}^0ybS|D^%;ixz>hx@hjgpCOs?Uul-Xr))tXdy4;)oe)`fcQd|3kx#n`)IEjlX~
zkfl>xugIm%bg(IR)n2(@w(QJY7qAOcnHesH%uxiXqhhXnzUbDM_qCg$A9(VJZW#4U
z5S0!gCB(thnwQ7(!O>6~h%_Djb73%IdSZo1_Luo;K9gv4oLe0^wY)IKt}xiU^B<_*
zph`u)t7I;}1{F|FD*dDNLL}qi(ZvIJ(Y2Dde1|w7A!m3fh;EH{N@paKl}WR{VzGko
z6&z7fX<97J!sE5uLSS-niwNB4Z9Oc$9fR<9YY0|uC$_JHAMlwUvD?$@Hd-HtwibkO
zKt8Gnhbp4DbHMxj7L$o&yQZz`>5ioYtQfHGjYe027hY_*MgGgdGAR6DNB~%?nK_lA
z$b#G<vySj{gR07AJlEu{dU0NB_esT7#V~+N?~kiahslA+4rG>E<)TFT4t3BooqRz<
z(Xwli7dj@jYu6wRDn37{X8jLrx%EfFUKCYkW|BcYkrm3cVT*7`UJW7gl7_j!`&f~r
zgJ0HJ272Pj`8XvSLLo+XtqhS(JM|`W&|gw-W7a-mjJooFo530%)o|o!N4f*p5Ppr;
zh579XVy5Eu)N;<KOWqS3LNljzh6D1A*5GSDSQFd+T-Oyc#~-vB^*le6#r#wOuGwE>
ziQkozNGlmgJgZW58>JReu?uJnM0Z;x`qDR998NmLDS&%#;j6PlfHvE;)>pI<(jXr$
zXnu2*HLKg&62XA;;f%D*X0I*FJnU?SO+sjZD78|>16o-VMA==r4Ffb1FL9dMVXq?X
zq-r0M-yKv!lFxw1m(V>MsPzM$y3V}HSkgP&!cHAKci{=pY|qG_<N;4tfE%ON=f{Aw
z2OC#U3_z420ClRMCm<Qn`XVn^mV46BQf$(o^orOFPiN@t&c~6Bk^(R5n+&T8uT+-m
zhv9<d6nFBJ=1~u4)XJ|d4Jzb&U<xT%t-9u0$^W8!ySngxy0CYmh~|5Qw)xB}zQ;V2
zDeFgjRAR$Ik7~QOaKeD_-fYTWC-#M=1y&tK)}kp68l$N2uKNwITTokVtGZFilIwbO
z%G+7_RbwMOI&YmGNB6U%2;VyD2heJEG__LG5}ZiPmToK57WUIzZ!9%|f3BL!N`4x+
zG>2<Fl!9t=P}VIqvNsfIp{WKb9oK?TPh%+zStq?CS9@Ror0DiR3F&qCE#aOlK&cDn
z7yF6MELF%sYB7HJIGfqe+#8+$S%>OX-b!!$F}axj`Sx_4m-EfiJ;?G(I$<G%yk%Q&
zbrOu)CJl>P?f@(&{5oI+`QQ?qNOD7As`LZ^Tm{AGBkJqR#dIo`QYXJYbp_qjpSS|o
zJ_GGc*Y2N=Z7tuLjg$F=Ss#7l8kk@7zhC?{^vtu((wV>|c(nr0s$jUc@w<n)UC#H{
zjGlfwP5xz1867xM+BunI-vY2r2#t@7#|-8BG9O?+4cLoM{vivX*t^1bCj|7Bc!-3}
z62OwXu!PiB;$xFKL6H*S`mMhPG>cpdx98RUlQLq+nLDjp-?<no24yw&1(5=2#PcZP
zWh_-NuVbh3Yogt8_7TpymK&&?6TF%y)j=J{rUXrERg`G^6Z(X!8K`?8Uf0<$iod&=
zzmyz|1o+H?jx<ZlZeffjkT#e~@rqc17WSJXjhGVz1(yO`>g2|f=@wG8PJ~8k+;B{+
zA!S5N9{%#PSXC(_{G-0Y10Y)~1W0S-uXu#E@?B<wis+%zd3~uP6{?+-4+Z5GP4=$<
z?8N+m^m9%TbTfoED;b}(zImz}Nl{^kt_vnB7YAA?W9Ey&hvWx*K9qhA#A##6SpS^}
zfuQ>6CK%Wp`zkRa1EArFONI!i%6O@{fj5Gv@A9v{L@xlhmn5n-5x*rR+l!%MQMH#V
zfx+-vr=cTm388K&^=%@Ni@EEZcJ{xOeTc2bkHzV^=k;-_N|;CR{k+0?tYpk;n}^%|
z_J)QIke1;HbIUW}aq`Oub_wAX+;#?GgMGQ%Z`|_wC1~Tr({f361)EPET*$~+%QvY_
z+l4+BBMw%h#k<V=t(47@zpMBaM_x5_@dxMYSmsYMBI2?)T5O#?#1UZyWv?QzC*QgX
ze=bspm#f7?VUK+^5h&y7vNMv;j=Itzrz<-Ye6WLZ3Iu>PmEDCmP^0CyuRo*ucgf2Y
zGWF-W_5GG=t5C|N{(NK+DV#lYchh08aUoa0%0XmWA$t#jEhVERU>&S~76%x9I=MeX
z*>)XVS6r=O70j~h&Y=856~1iKP)aP63>v3F?zxocnQwrA^xvup%wlNR2RJ<$MMAib
z7z3mXH?>R-I<Cim6jWO~O|T_6u+Rm8w}K#lHxJ@KYgCz<kk`7TgjzW_9`?}5Z`aL_
z+zM%&U$tt$nu^Y&LCq~l^oQv=ePnh8<+ar>z-cBO>mrw7v$5o?ioD!qBf^5;<ZX67
zp8W^R)Bp^hlX@Z{SD@6Tij!TJs?UxC@3Qv*e|cNf;GfExxlvM_MS*neCt7-YW8=^|
z%d#D<DcZ(G&*2&YM8&n08GylS)Q6r_&<U0aLwVpl;aRwf?;sBnSftBojaCyu&JX50
zn~hp0YCyyv@z*_0nuvWhb}qgP{<G`+BeWDLk5Ag-#qpC-G_dxD0`v(pA`IedtozL5
zXeT0^T(f;)QC|U(nywu>1GlS5x)e?rR}Bmoto3!3_`dnN8fmuJp$H8Z*v{*AdD|rf
z=X-Wi>C3W`k4HA$1scdVGNvbvyl7xdIUH=FucNeetwOp$umc%FrM7ZwyWA5F@71S>
zY)JEQr{%r=Q)(;4qU>&ta)Mm1IM)d+Ywxf)ztQ>wvApFZ6#|Os6^j4NKQq@^#j-wM
zbrmA(iaCO*fBzQDH$(HRuaemxCy=X)3XIQsG!9l0R+2}J+a6aT<rv78qYU-xDy_n&
zoUVMutP@ETw$hu^VJgGzw(cEQDP>V<&HL7klKp4-@x}FXx6Q{#nMQV$#wkGAw*MdX
z!>BN#qUMqa&sn=T?oiU$N&z!}*O=rOa_Iax=|KFVC971c;&gq4YR#fuW&QQ@4?IwL
zcL}jTmdVxYlljDx>KW@5`%8pg_=@)F|Dv7z0icFCM+N|B5&1u^XpG(e3siGS`>*2$
zN5ZcO+uyv>aEy4u<=TdS=s<=tB}<{2rqkMlth|yMO;iYJ1tp(Uf;t29=jFl%fJ8vC
zAv<%c({ahv8p)gm>+9aBu$^2S{4z`@;)yL9Z6d0ho0pf{$JOImjZMeFrSW*|>nm-m
zWdDZepF00c3Q;oea;%X{C^AXsK|*OP&m|yX5o-)kjs#u<52X7zQ>09lZao{H^_hS5
zpV<0ZA~R~=38eUXZHJ;nTH>)|g-OgGv|Hzqf*?@C<``mrNRADWwS+J$rVNQ)a+ygc
ze6SA&uWnJrTkseX!-KgaI|qK2nWBG6d1zux(uEp1qCm%`lQVYPOcTrZUt?pYjc1Un
zfl2mqMUlv?XCk(xt&^&ZF#MbxuhK~%_ILxwZVk5uBp0+=%ffDb3q!GTLX=tT{FdkB
zf*m?$x7UOH{g9FmK4+x_6C4@EK3Mi+L~#ImcO;PszoqPa(PY91$aOG=Mvb(8D^P8a
zeNjPac>y4Y2SyL#q~k{oB!frjgWWi$SFCf$0i^^|=CdO?(6H5^Evl5_!>v1y8%m!&
z9foY~m1_r5e2_+Xl3%4veb7J&j-o6~1#lFWmxW{9PP!~6alpoo918<zq9+)2JkYBK
z=&X@~ket^Ff19<MuJP({`C0P3S#IjszSsSo_32v)Eb)d2?7_%k&Vf&!U`0T<M|k&q
zh55|#s5mhKCwT_tPtEx3o}yLo5j2{Lgm(GLG4Rw&@FH0r;(gU=P#G&;p$^-GL);>s
zr>$Uc`uXe91A74q6$aLJFN%D5J09t3!MDGnT{m*SFCm2H3RdtxUIs_p6R~enCvrnm
zeH)LPsgc*<FRK<fJXy*jdkvmDkJk?7z7{Xw!Dc4ETaVWQ=d#&*&iL6sc3fv_Xtr2B
z_+9LDHC#t8dtKn7V*H>a7D2;Xa2lo(0!O9W<w|1K4dHs^VKe%HZV~ff$AHu+l#w1k
z3Y<Vr=+gjy9I}|@eVLy!aKM=e9$3#UlarbY`)@53*H5V)1*pP5XMTVRdJ{>%xAUUc
z#kAgMRPSCgz~^vy@vgnD3i**9JqOsukmjFbw3t^6&n!284!7iP#1iG?wz%MfO*2&@
z!DYQ5nC2<Q2uXMc)<hhiA+F)BIMwfW0gG8)3e_8)Wx~=vB+byJ6K7TiJLgQ0<qG{Z
zJXp+kf%Y@Ed9oOAG2fBAC2CXs>ggNf-a6IaR!G6~OWQp8VF=3<2_RvS-(_Ts0}BDN
z&2x203Orrvj~YI%fwt0f!<{~O=NZtfR~dcTB}|nZB6u3ysZ=lJvF`|jUQr05@(A9^
zna#)Kel+S<;DtFF4ezS=EgPc(Oc1*f8z<Y)E?sf*N%6#4jFNzYoF|+mXsZ$O0|@LT
zbMgb@xnFz^qRCowOHI!f=rX<VVyAjb<-p}mz^bE~Yau}VupmD`H40k=K;sd48a47M
zGK8zVqr5=1UfH3HX-S4v+Aiz$l8w{g<B$s*@<XA<NUG2rBhf<shzPCC&!oW@h--Qz
zg`Z%(qfQWx?FtHJ@Yd_RF<e!Gzp(o;L!#KS1U8X)jIFxSb}J=-&5oRL+>{Z}4!4t4
z7}uI(V~i{ZT#jRCOs%zD*QS+Pl!H!b#^T97978Vj_Ly3rLdTdXAoaKyWF4HT8-DrN
zNFxIU=Z<2&H6q_Xr6?(JZ0RV}=I^I5hTNSJe=^ZfXw_8OZHAQeefA+zwA&~X%3>R+
z5p{`+t6H;!hK|+Gd#8(D@PIihk9uPShssP|6^0f=Pq?Hn_p?J)j^?SoMwb>uV&#AX
zraI(|-nHy|vZjQB_Aw6{Ije^J*-Lmbf1Knk`mT}2DPY$-Vp5{+bApv*Y?eTs2}#n0
z09|yP#xMzT;w3odeYd~HtK6(H1+a*uSSlL|9>=^>hZxSfTv}^%(n`}6;j>eEVW>`}
zy|3{=NdY27xKoL7hUn48bE)1LoAGnncLVb&iVQ%3%t9k=h)BRQw{VVyZJHMcp>>I`
zgvJ3=z>^Ovs>Q*m$iY3#Ac|JNP$Rx6{hH`?XIHz*)cO~FGs?B<)Taa}e3BBFYp94f
z7V!g8dAu_VpD~G@Wmho{Bx)&zS)8mAug3;%>}5;4Gbinr?gfnE4r8e=rT_*m-0eQz
z4xY4r&SG*Rz-ift?zNK=hs>KU>viZKOGC)+0f=l<1_6kZsW}v2hT$dxAchx^8Ni~`
z2~T2-5IUpjh@k8OqpT$ZA_ymW8#TC`9TxfoqYrkkjIcBhzV~W9tmX$rA$al)Y`V(4
z3xX;X@fxr63hZSEK{S_6NdpGaX3}sq05JK-OR~ye36<k-;8?Mq9Lio=jJ}yTt5JNJ
zIEFRloVezdOm4@F>DxfiOx%Qd{O;~VXKm{Ow(aXM_G9VSpV%i-u4K}yhnrJFmKzBe
z6Hp<FH*u5v+4gXK1r#@c%D^T-T`hfd(1?Uk6GFM|`?#<<Z8*iXSCHt+QOqzDmnO9H
zMS+T?uI)LV`SOaQq=0;2i;D)JOOmk&BH@&4I%Z`bZ9)G}VU<pRtL0{Bew`tDvQi8`
zN~^*Lf(AB*#W{6QUo2`6ed(+BNH`f@dNLqIg%;qO7=HD*Vx<^+>!=YG!@KQzQHUn7
zG4L5@p>55ozkGeu9Wh%s8bZAuRI)!vUwni-<5cb*+WIW>kS4Zij=)2ct2AIMU^&_s
z8bUcRN_o5fQb_{>;53*Gi|`!WBf@bQ9fFx=?qD?m*z$3-{!E9!v>4%Q8H(<YAjS<n
zBILlp#C50Upd+!rKW&sTW^=>^+v1N<4K&dD>gxgChFg_>s}<YeUX(YnKH%C1Vnq(E
zrNJzD^1)xIWK@h6!B(?$v$T$Iz3~^;6Q}HS$5(}Uh43INvi-C47+g+;Z43_q2~b+z
zsN_7dvS)|m%v3J?SqZrAsSETvY+aoX*IgIiZeGCoUHn+SJ&n!qDH97p*;vtizQDzQ
z`owfD`i4Cq^=n!TFfmyUe%!4)us(TyNCgJQqrsl5AJ#8iU)P0pjt~OL77ccVuZm0f
zcVIt&Z4<>XU*t2_Bh@EA)s^zZQ|#6~KO<5gUtN%AH$I1TYu*<CV7amb)Cbo9gx*O&
zM7M--<0v(;9}9<}yR7(%2hA1&bWC$$ZSWyht@dNlB<!wvL_Y-JCQ9X&<2xE=62BZ=
z6TqZ|iyf>F!x4n-o?4%6`q;RD6Z_({i0M!Zn1^J%oVrqC=7`Dx6q_OyKb?gYGpcCB
z8@I|1HT(DY(G-c>H1u8F!26yR%(Ox#m|n>Hv;;zgHHa4Jkbv=FHv`n*K~o{3U)gC?
z|8o8V1tGmt>2bj^)=8a86fNxBJV3jn>w~C*-1`3aN2i#!8EhaWLIO&S-p|Urz65>Q
zse`32RS^UcPQ0qHFGaQzft=7`mH8A>u81nfnzpGDlm;>p(XKe5Nw#vx3_7m7<4&sx
z==Yr}B-vDqlhy6_iA1MWV1_Z?T#ZWR@#c5?V}qbpzY%~vNmqf^HCpNG(B0wTT^eB$
zxR)AZ^{CmNd5Pz%dt;v*QO74J5Y1z{!BqZ?o)(H422d4t>*tL^zaZQl=a8pZ#W9f1
z05#`hnwR7kCht!)nz>HCYig&tS>q%X&B5oX%QM3%I$U2}Of02d_u8??1!_Z!@W;Ss
zYyQb<QlB!hu4x~*OaxspOO|#Vj`S$RiqHgP4NGGSY^*?D;+7yuCFWn`=TwMNh*lg&
zz0vDMfT__VH56bfh*)9!0X{N=b~&^H)LKZ(gAFn`nPrdn#5N0&kor6Aeosub4=u9@
zu?7sgKCK^fywgCvor%f?7OfyZ!OyF*@k_9{b4}TzPW5xWX&7?H-mdkK*v;d%OQRq0
zj(R;ml)Yi<lFcI5Wh_4w(=$w!2<vn|I=7j@@Hq3ex@_ysxa+i1>LIsjMJo5n{?c1a
z`m5zjMtyIbW!GKs!FQ?W&4HRN%PpO)P4Bht{3eKM3Ue&CGeLD8pkW0T5MAt5IV5|W
zFilnfeoASoarAj2Bu$X6GTgLk0Xs`k1^)>eDvfW;QW==OSTmE`$^gtI-~>M+YD!&>
zVP7OZ@EYf9IEi1=4IYt$NOEy>ujr;_SuxLXPmQ*L!O<#)6X%+sSqqC^U+(k8KQhK}
zQPe7lH|9zIxx&c<3W3pDD09m&!lThJ<kk+1t>Z{tM25NorRU1B!1Up7Mbf4B>ih$k
z@j{Gy?W<#x&OpwOdA*50CWUdTpahwV#6JtytJB7E$m9JtsP3N;kn9pVSi?-MK%>di
zSl)$*CJCdCIt9S+k?b!aXeyvc$=RKkDQnuysm*L@Sh+z_&N{kFC1#r_)3-LnejKR?
zLAGmJwr5+YGy~VVQ(KW6w&#D@K5iK?42V09RhRN;?n70Nc45UzQcVt07dq<$S4y0G
zxo~(At+b$xx@u5|#}VF<xlL}?G%%At-uD~k_X4q=V|g5;hp1#u!n?CjtExwLT6exN
z7#CMkuQY^000>H8&8$?RXFph+?7LbG{N)n#Lob9ai-pO>SsyqDrK=AxWXQELv_QgB
zIV${A1WT<%i2tU+APej+N6VUR0cLra`Xhd7tT0`yB#~Q)rs^-iRCa)71;1gDC5yOO
z*LXcA+N~`%*d8J*p1~}hDbp(^`p(rU<^aS~+R#aA5i8FuRM==*<z5l+V}1H^u9X<x
z*D%wL_{><WC%$AEabBh)v*5Dd;I{1jqd@*RfUom-_V2#vBI2yZ_%gqj_JyIS_I){f
zc(P;q`{$2brXu}%gy&!+6lhHwa<_W;>{?eXoC_BgVOY}9`?}Y{!-KDykSgL+a>Lx0
z&<_l?XCv9#C2QjkY<RmgRY=1U7OmZH5Fr{h@S=G;)z;V-*XM<Avm2$srmb}xuwTPf
zHRB><@@~}L%v3)+(|4&R$HlzXW`Q!<87%ClKLmzejo=gce&pif+gO0X+R2+6uYd}*
z%@`eSc!S>odunUum=47%`VC5<TpeBi(h<oq{0L!a3Mewyj_It$d`_uaJNZ4#WY?Ci
zZ%+Po;6q`*018x3snQzit+v)JCqS`#P2re=+w3$3z*fL+NBwxKEQhf20c11ULRNyn
z_CnD|U-}@L8upQ%;NTd$$xEfeSNts#*A5xEm<<mZfs3~kIB-uu;Ol!3zGZ6Fr|RuG
zW+3UWhr|#QFstkE0w@?WkNA7HPaJoQxGKR2cE<I7R7d#Uzb&r8FtIshjRzz<A2oF~
zGwhC#e8-@_<#1F8dd2VO94N!Og@HCzt=CzfO)E5dFVO*7A&|=(j^xZ)<O%&hmlu0F
zm};ab8^ot})U5p{XKiL`72d4wbunc)%KNiskAND5G95M0uMwZb+qg>E)&1DJ1WS3)
zU2Y4V--kY%xiL0m+qV;oo#|1%RDT;#dl|7g%M?MOJr60DF#$RBO&miFlnGyyC~F5q
zm8M=z%Bh|hQvrcE``hfCAKVSiD(KIoEoOtn%C3t#$(6qdPr!BU@%D7EoU2mQOcxou
z!^<9>AuPJ-Q0+08AL<o`T#|<kBa}MfmlNC(hpJw1*GYKudJ2CegUazfP<M?-vzOf}
z!_MX6UoK+4Os=r)bb<ZvET@$0{3|uB&g7o{sT2*jK-`0Huhn&8T&SIQheq3>w{&;7
zN+H+x7b9{djW=|*qSl59;qCt2L^3rUC_xQtzK&%X9x?Y3()$rff6ps=V@q}^^5mm3
z)izgId;TJ)R#B;*rV^Ypopuh6@w+m(!j9q!*{2`u^t?6YwtebTh0H#^pc8-Q3GQXK
zm)KIqnh$@J*cla_FF`gu<5{}$=k)1pTsjw%RY_+l;yy2sGtq*NK$x_TLDD~p$+SfX
zZ@$A%Z(PZ|(|6<l8}Wwr?QqyLV;CtIY{LTM7OsIF^qkK2&11IBtz60A;k_KEA|z%9
zt#J8U!kOXYZJ=ne+3(L6M16h@2)VaK>;t^{xfYJnQ5wu;twB|1Fhfr#56gO~#EYhG
zK(547C+G4z2Wzj}?&Z<}mlbkvEh?65R2yHip~eoYF}S+wR0@i+1688IbxoDbm^;C@
zDR-gKoL&EYU<3hhv+%}Be6O&;#UOt|%`6(N5!0&)y{TtLpXFy;$%tir6cw{wQ&C%9
zd<2f@W~|;v;@45xf$`UGgE#V$_^>1JSvCAuwX`kNNMbeS)jUvpPZNJJy`MB%F*tNt
zJ1Uk=ScLX$wCa$w`-QgcTK(mF$m2gb)m;t{w5kNLsO0IIA$7?P26(Ou<OPdFZzE*#
zK|5a{{;GE#;IG#?=?=G<hW^oA%q;zsL&ECZhf%<Kds}}xR=RC@f-J*<`2z??RJvK+
z70BcygC2M8p7KtYvp>m%`et|rB|FI0l@YvEMkg-vN>=tqMTYp$2s1{)>4OE&W-84x
ze%V33qst6XjC6TrFRmN!N)JX+EO9PLKEg57q2N0fMZ%mYS|9yrg}u1w->^EJ&If{J
zodEm%sqn2CJ=nYe$W6nT*Nb-!B;$m?n5^hFybX5T7LkAIRu`q<QdU@6sd?m3sJzWX
zsU^Zjw@o$l1RK_excI0M+uLi7_h!XYooz>@hm(FL4Vf4Sr|XkF-0KRNA^|@vpwQ=|
z(2}@v@Y3>O%zGMqNO{c_7oj6@Y_6k(C3z`5K|~Xf#&($;8V8r+t~p%j!apSoFKIo)
zH6jf=Y&{fVIm?+IW};N3dJ$LVcC1*sQgx*{c=5m+nuG#9#s~$2*1hZP;=Lr?>AK6?
zo&Slj)g%a5Ecvy5oBdKB|7%|B|5o*25+?{1$bcaFl2bq~A-7vn94VA9e^x<@l&BDB
z50fZ=`wYv4Xc*eZ!}l|oyIE6OfwGU0%Nkv<7F=F-Ju~`tzdn|GuY=<T(1{fmq)DO4
zcJDuzCs_ux7Us_LZv+T?6M)%>T1jf12PGq;D@qZhTd>zAq3p%RL>qpHZ=qk2wgFoV
zA}bMZbSQ5b%Y9}H(8G3ta+T=}GqJ@hHsnSx<#E08^?w=p&Og#%uz#_Hd+7fMK-({x
z(7@5=?|*~&Ua4>W$Mx>}n_IIgUPJ(r#DBMIiZ|bHDhm=3_*3zR+=|g^b<mC0GaE(c
zqjzVrrq>>6p8HG}j?};E*Ti?guJ_1Id)gNa;~KACjoQV_>+O2~{CJ5wxq@ROgg0qw
z)E0f1yQ#t;v#2R%4<FJ4uVffzFm8mm^<V-I8edg!=Z^3|O46Soo+oAK^#DP`<&})o
zWBCHmGY-;X4eqZTH<Wc))*RN4%m@BGb(9Z;=ttd}Pp`h~;D%sX9b9UtNJs}QK!+l1
z7;?B5BeKUYQXU*Fj{a<HYGzh1LzL8lQXeryq##7(3nGKKqgl@I-Mr)L=5{LCL>Tjx
z6Q$}sxF|PuR=u<=e(zKHqzO`!OEbrTSA~OEw*9VR|H_v<ck*Ij>#bWLCWQw&dDF<j
zG4ZPDeKiwrrj2;h0(}PTqv;?Aa;m?`58!!k!BU@%s`jUCk6T=N)uGu%9+aeUU5AK7
zQWvRhU7*=C0)!N$WEk#p$3{?6UAmpHSNSLpT|pF$X0EjcF$k(|XmnLeyPe`kkN{^k
zI6sz9TO`0!qCrB{?FVY#xYNW9Z2`4jNJhl{R$?_%fM(~h>E|8S?Qhh?WXG4GuX9M_
zSi0li8Gi26=h05N^@VyvsW!|tuUC6(;nHJ(VKj_ec!qZD*k6l(H_Aj5AtX`HK-xpu
zaq}t@%Ix0NvL0<;>Rn;Hs$o-1M$H9~Exabb1L#w6dC+|E<jV^k+58B%PHrOsWF|dJ
zE1@yd0vx-H8%AH^1C|c<q>@KFQyAqPiW7s>9f7ZaxL||xDGF~F{jiW++)k&R2#XHK
z-_*9d{j3ih{3E$jRQqHR!6nccj_!e<!;3umE)iYyDDQOM;9`DFQmbjFv~dI;3~2XF
zgu%z&(5EpX?Nr4bWQD4#X8?|GWqi=j%m%m4+dD^&wNT|K!}+Wqe3c)>ifKIY<TK>w
zR(VBU{OuU2WL+Rb04)QT0k6X+x1sV-kNC}VI*PjLds_H1(=h>8JsoaZe{U7hPT?c-
z8dB9a3VQ`XvA^|s!Uza1m{mi(J66mc@TY8Xg6C_?C3lJ>Qc7V)*9W`z>eXb&3DCBW
zy9k9LtXmb|jL!{KFDYJ%jA|Q(buq9l%i}h5xplP?6?BW%)+s?L@KVhMVvLS9CrY;g
zmOAEAA2iWEg8Mf+fIAciG4ft1u0>LusnG(LXXVq=$%#I%#xqtPETjTbJkHl-g%=z3
z-hbtepNkzmUl74rLsz4ti+SV*tvlXzrOee%!v@G>h@tu$_-6GT=+ZjNM;QZY=>=9#
z$H=qNLOOMknT@Yen`D;O94qE|Hmc04|L|+(cFF}1<MTW#i!8bYjz&yV;A&H&jz)5X
zl30&e)_B4|#~k^IN$d1P<#=?7VznPgGb^Q%mt|POZ7t6F&k`HnigW~JUhN)rQ*E+1
zRlXZ|+-kotDKC8&e{={;F91Tg<xYUvdugkl*$+E66xgq^iuK*>$GT+q?qkymbRxM+
zL!q{-c)cqOeM{~B>GQKmX%l0x<V#ql(<}~9foGS9C^=M?_lCibBpBhRi~f$6QMD3q
zy7;1@uBGsQqsH9xsEbwte06*fttCYi4m0S~uuI)L4@iCE?y!k8EK{O$6PYhkLjr<9
zJdT8YaYoj<9XBDXglT(>Ab!+MvdNe3W-(CSk0Y*+L;@uv*~LOX6GO;sK01l$3bdgz
zIoTWR-=5IEshR7=MR}JKK`imcQ)ZGx_f{hlTsOiRZ8bf>#MHE;hHZa#(;$ai1m*Mc
zOKc4IgO50J8yIX$sn3k7$Hsnrq-|=!dxj^;_E*20{oJ@RrU)&X@=94xHn!k3WnhPF
zqp5R(k%Noq0tg*>d@F=Ch3=GpNMv$K*k<f1dE4A860*vLaMYiVcBHP=48_2Qt%mg$
z)?qU*!cA@2sYWbO+Keq1t|GIZ{wQS9VN;ZC%GrPoU)Rgtre^-qyl_{RT@C)}8tWJ?
zQgw-xvKNf&8>}z_Bv_~bq;hJky(J&6*Hn2Z)4Hsm%4j(A8IQ+d2a(0`-1C@xljukk
z5@n|25!B6-a(VWew+q*gbAN&#WwnwO)k6YqH?Z4?HV#O!x#9X1sJ>$cM_vt@+<i5M
zinST}+ezgsmCCX@W0~>%=uIfsV^~e)P2sp@o$)&ZNu7(?M1fpK!M4;D`NY)0Kui1#
z;7Ho_AWUGFr#I=(*KOZe4}_R0l<A36gz)E+9ZyfYT}?>g-PWRyhv|wf`a*5%1Gd?>
zyCpn*Huz<o7_QaP1n9#AR>?fo#+IVtMQes@r=msw&|Sozxs{!A5B1~JVYT7mam{rr
zdwmHr;LH1TCE2R+942xuVfm22&(YCh88)bc^1@ye*<Tz`1^p9*I#$cmfncC#!mh<i
z(I2`v;pT7K|2cz9*H+-9|8jvLelK8>|K_6qy?l-T3q}7wSl|r?m|rX~0<Qe3pd~r?
zWt~27!-zVRvBjKIXg1JFi4kmzv4qot{;DtjQEi8X<|7Ybs5(*ZHgP$66b?pzF%`V#
zB~w6b;@IQ<f$=-!HB-<9(vfLn0Cu&HkqkpEh0^*f!;E8FGbEVJT%J$gkQqT_GZLdz
zAfz&rAS{dDSSGRE)v*S)+wmJfuQI5p6F@lxRUld@lK}xLClKF=IuZnAJ=M6j2$R?<
z^!RUWZV6~OG30p;5nK#M7mqr{cU?T|>iId7w(Wq;Oqmq3CJ~H<y<WV0RxKe>W-4Ox
zu_MCei>F>an303tna(T;Xf+Q1f3U!P_IwbSCn^K`^4Bdw3Ax#vG5KL4FnjMGOI(}V
zQ@zzf7^G_{1)gM&pv(Mfl^W=%)D~5$0Yy|1gQ^ih!X?b3?((0lpyfp)xQ=4oIy76R
z$YQ6QzBs$Xt<d39pn>WyU7gM_r&C$IyscQBQ&{@q?lyN<XOgEJqY|n|$Tq;1Ypo(X
zMU;wmcl*@j=o0B_H*5ca0_W;E3kl=@9DB&3rs~6-c*pOAv*8W~iNdM>u^JmZ#!0PB
z+_*R~UB5{JpK1o4J-&)-DW46|wgvmwdm@g6KPGxpE<-N$*#H>Aj4V?~Rr*r~zM#Yl
zVfh1zFKu#V=Hm!zL3;2mnFvHjs3p{je3bQ@v%DZJR~5Yi3%CM>PI^|L(CC!^64UAb
z7J9$c&Eld4d`_Y=4Tx_JE#)|PYu0h<#&~p_E#E8TUV;ha)VjZwd~tqUcj$Az3Ibb2
zL7yOYhSlP;u*gy#qQMr{q-o_J=sbGb$J8lV!|BDSjIrm}z%7QIr}nBcd9m)8UqXo)
zapxE@a_g_fKU%KyfcnhxU>Y5Kfd8Me-!|X($@`T(#jouD>*)O}dlMro6ZiiP#LoN$
zVn0xql%x0`322w|E=rNEi2hYx3EzK=LndNKt4`5r>Kv*s_<otbH`$-3I3bz{*h+7;
z-Ja~x-|quSY1pK0nS$-&&h6$e?1i_>B-T!*V9P|+rhbD)296v*RJ6cH%NmT9owW<Z
zS^_TN1JtNOm6kV`$w#83VgSb2w)VF|ms{^co&j%5L`Av73u2MCXyPC<!(tjiyk+d4
z2SASdS8zy!200Lu-UViBpczMkMsOo5)6W>3>Ip51&(;8@r9(IPM0UB{RE3gXEQ39K
zO+83*L>(4AH4#nuG)k~~<<e7x)pXpWypbmfweIk_iIOz{JnB9nGEkWmAzUAw#^B?#
z&#^ufLW)q+t6MX8>T>6fIzTc-jJ$)K53T;AU45*hOcdPGj3rT7uqqx<jKY-3JsnuI
zf>wkC)jEW!f<m`tib!_KDF-(zT*~Y}1^BD{CT?e_)2Zy8|4;d&Sz2D5+)&weQKBk%
zcG&V0J*4kMvMK(NX1NUEP(?O97Dcz`ydM-S$w)J?IOWB$zIShG&LqPqe?05;!r3wh
zI8nLvIV+{{+0N8QYA$ubEi1mJ&3CoAA^vWo$tE!tM_)_<p1pWU?-tt6asOi>dfJJe
zO-eUJQ``Iu?M{n+A}af$@S-VhE*yR$HBOc|r?w%9OEN~>lA5Gs7Y<(5Vj_)P$HiEK
zMWeVRjW2L1exL4$`Wz|yva&y~LiuM@5d<-^Ob2Jb{$TZS>cMpSlxH+3&9Mv<okio}
zHtdPptqRvxk*xrnZrm2t6Y46C$`*BHBW%({Ww@TE42<{%VcV<Y?Jkyi+Cn&Lw9I%z
zUR~HC_y9z2b;4WuXCz~ME(~7W6RMDBBhXWr8|Dl2u_z|=?0+4A8P$7S;NJt#^V>E+
z_TRqy|Dj?VSpS#gRC0pge}M48H{YnpM51h#fB)r&it!@YX^~725X3uZV&3?*YPwW!
zF`|&Z-E6Uv!B#9*@TuQVvfG|?JI}-C!5it|N3W`av<CLy9$e|aLaL$;REaffn=-J!
zgQtKLhEV;rh9Raj*aN4bnJri&j?Io+85ap3Ckhp_XA!tDJ}d{#r+?<ELmvi^>+sjH
z2PuZciqs9IGB6+}0s5w?Cqsae>aHxNP!6|4P;TDOmLXR}gL=$>0!N3djny6Zc56VL
zC^=x!D>=zninh1ZR%bHYikr3B77+BQA*#4KA>qV<t9QYxO0H+yIAlq3a@mh?nctH{
z(1unS58-wcLc~(}SHv=!QKUYqa-)O2l)^cL9@veBGyl24BA31hYIY$effT_hLD7^C
zUa-pv@IvCPeva$X1sY6u#zy7Z18(YQW}9B$U;|=?R$e}MO4oJ@NgCE1d3LLvdAxvn
z(Sl)u+3A~RT50hOcppmR2vobh1tt`O-HHN_`Oxaoo5g_EKLPz&<I5W6yWAU#r^Keq
zGo{uj`HmrK=LoEJa_k=NH9~gg6(1vB>4c<1vcP3vHPJcDc}*WsuN+6Q)r_PqFqy5u
zlCW;BqpGKGw*u$JtmZ3B%t84h=U@xA<G@Yr<kw&Qu{2vJB(?lKErH>(Y4!0v`Y!B?
zzEak<3ex+(IwKEWh_b|gaWwSs|3`_L8vHjJ&2L3d=5Ln$msTlTjH0y|^RUO4MW0MV
z0EXL-*p_?`iKsrfy$5<lCt2O{^A&>LI}*ahl_cTjnsc(2zLt$E7KjHUFmcaXYEQKH
zd~Evp_H6nIPJ;yWki{_5xEF8s6DL2=6el?{j8I|$Wdn(@izN689UdZ~?6Af{A`=Gz
zg@y>{5KC5FDnJQdi#1sJjj&5et&dveZ-N9RD210U4=A01M6e^AAe{#@V4YmbqEG0r
zMwJ-Rm2V+2;3xP@1Iz+9%cGa7{94#l_0L+G8E0lSD!gj<ADRLor#BtR6v7N)94TEq
z6S{AVSZ!_XAdEKx5w0l@-cp{z!8AjBCCZd|_qI8J>(Af=8ENY-Dh!_aKjwP0gsLDY
zG-yWn7T6kAW^}x^5VN)&nC?knj0~FqihG^|m0dQ>e{l&71hOj#@#qN!YKS~)g7-aK
zxB3>>o1XV*BY~k%F>K0&`iNi&OM8M=>9~h1wXGv{aDC$A15IHJok7EVCJt%ZS71Mu
z0USa-M+|TC7x|zV(~}M`dI)FY#+WGO%IAa_2&k^{d5pqa^G@kt^`|dBj{x``Afn}B
zyB@;#`ZSa6*H+7g7HzutHMM(#T0Z<m?m}(y61{o~$?)V2yD&CnI)@#s%w5Co_hBO<
z{~QnT&yZ$@k&a{AV0kxOk9#g;J6YxqtMI0?7l>#ICX^C9T8p-c%6rA<FO^wlpfk`f
zFf~(i^0Swin_RkUoMdsoyn5{Jy}57hY!AvkUR-vWiQamRuWG|&w%f<3%gaxq=;xq8
zuw5hAdPfqsYb*3UM1%%`1hI^Q6UL-=X$3T*Si7nwUKP>M34tXCD-d>lDX&6jpq7yc
z31xubfQKrVyrj~g=rN=1qDC_#?B%7w+^^nn^M>j0B>Y)%vT9ql(Ac!mpw-$HDRm7n
zdlaSTe8Rie0NIK7Z({Z%!!n|Z+z5M2hJ?KdiHS5ZpCU1z=)@irg&LD*X6X)@o1QWD
z1v^>7AS{loZBn2uu$4VoF078`<Ce=*kMC*pBswcuZX3IqoTxrBJ|5fBdOZQRfQ}5e
zg?-1vcPKSWGtqi$ls~#Bd@QIcRU&kb$26PDMLa=|1KC`!zj$^7lsQa<^9IPD5}}No
zYauG^bXvu{U+bUpbRqV-G!lGo*y(fXZ=DZ(-j{S=w+EWD(mO=2az<94Xiqj4TOLQ6
z_}3`gYVbwkW3ez_3I)K%X~{r=?L*&IJ$N{g7xg~!dFMb4L9A+H3a2Hbx`IBIUI5~a
z(H~{qcGPXSd&b7zbQYG^3vdU|w=Z0|s*Q@aqgmvDr{J^~UU3d8QjYWd-4A58(z4)Y
z1%>B)C|WQ+r&o*1x}xD51J5!ZD|Vzm4;3M-<t(B)^(8s4-@id1zH$FB-s|8wVJ!J8
z{5zo+pPKCE&30G$j!F;KW3~Bz7<&ii(84AQH@5AZ*tTukwr$%dwr$(CZQJ%qa`V-#
zx>Yk(cV>RWuKjlR>ZjN8xV_nzy-Au5lxu&-|F5keBwLb3AOrw_G1mX_nX<Mp{GU6)
zWz0>-4e^)kT6Tj<Mt%eO$2$0XVlC>F#wGo$fi}{|A|yrNZZyl}4%E!_@!ngGZJPOx
zHR4V=DHU%HpPSdiXmH%$47;My=-U@4-=3~4?SI}J?_5={FgJ=R+}zZAyvRSM`GFQS
zFNBFiX(J3(;rs)U5-C0=^AMPbwV?1Cgc=|oNcAvDgQTo-b42>9gsz`N{<|V@VS5k}
z@^MnXmi0MOYY%CFUXU6U{$vP|LRgP~ATha}npdZ2uqTOOkPxs@|2X=eoyV*1(*>8O
z)0{Bbz3-vYQ#`=5i)dFw+c^${E|?*Z7i>}`Prx7EKR!N+=fNtD5XE1QgqmAVV_q*4
zh(0-#KC<NmJK*IzP_MspD-`;?g8UnPz%Ua)ih0T9%wE5E{d~^u{jhOh`$PrnRJRUX
z6VuG0=R@0HREcnE&GOjm`r}r!N5nq+J?PnyGyCt|u}5^^o`1A1v+ne!t#caVGEn*5
zHR|tJ(E^m77u#d;X)RuAh7cW+ua0Q%qZ#;}lUuB>m%4cxzUioP#Lh87N^F$KkE9Xv
zGT(XY_v%EZE_O|s{A_};^s&Z*==)8fsn7EJ%DMaGY#9m6l$*?t%3ax9mAj~^Ijg`M
zn&+)#;m)cImSAPJKA+zgD9=&I1Ul;v;!yZ%;y-xO79OOf+t>X<g?f0ulp;~o6ce7x
z%NRR9b<bYdey!?%$$nfq`dwd{=ic{i4^?D1b{L(Ich&X_!(>yl+{(TqEoG}i+*-&8
zCt}u#x8j!s`tqbH<u5@o0G`ukbiOEMd1eAT=u^p7|16zx0!#dAk2RKhtaSF_CP)&V
zbt;h6#ZIt`iIbOoaDvzHU#JIF5k`Qx1T!MgefKUPB>O0)e5&NA7y0`IguN#R{h^eR
zkkIJv4H>xVKsMvnE<9V>^}CV_{Q-V(L3|_Lk)v3CU<X;_m0AZmgYEH&xzNr%#bQJ|
z5-7T%UL{MsqkD6Y9JZ(&V^GIOX?Y1Q#6}&1iTeYV4box$0S}g_1c}x5zgFvC;8w#E
z$SL@(>kqm~SCC=^q_eN|x0EaEYk^FZuqO|@s8a`y$uWIDN3gJGwt6o<px_Zs?b<BJ
zJ7R-#0qI^G^}A{Y2P4gmnqChXK|IMWPfd*QBiuCof*002c4VcV6zV7#Evi5yaNJKp
z<O9A3DTfHOr0UGxYYW5H0d;Aj8DI9yX9ooX2g#PE9Vv9AUy5vSxqA;R$7(w<d_L}X
zs#bpAb=pJ^bm7)J_Gnvqvw!3mPGb>p8HDOH45=ZuH-JJwBj)?#!B7Y!=@BI;LB*O;
za-DA^7J<}%D(-Q{j2A+Misf<vy-)PgwJHN>1#kw`GvenyP>->P5JsrQ<*((9F%!$h
z33ILxn)ghXOWR}0u?=V(KO_hR4A=J9Z|k=qUJ)k*`c9$|uwKVyHT5)^T>d6CJ3Kr>
zs%9893X&bP*F-uLB~fr*sF-A_W;sKZO}lMEu_zWkt6z!A&@%xz_lBfD=cfN-ew0CO
zQC{h8s(kwB8@E9$37i`2w&=ou+Zq}>e$paN3pR`AN!QEukj{iBhOw9s2VJ^zYg5?&
zK<8f_=;VKIfwXVA<c*qybm%L-#eDrWJTKB8ecC{MJc5*9!=MGtBx2k&oReOo*r68>
zN%BT+6d+KB159Ph=Av!Z_>POL3cN|JSxM{Qo5`Z%8&^EF$qD8RLrC41=by8{5D$4r
z1+rCZ)cfkpG;Eqh+i`w(znxv(vB3umAw$%n<1I<l(A<tdQt9B@YP>5Ko1-^U_cj^b
zSP*u`=w2@0L2Y75k_u8(6X$)W$++z1k8QDpQ(gA=>jU9Ea}BgGiLu-V174M^S<Anv
zUgw)v$-KBwH48AFd2lJC)qC1-d%+I+lGNjiK^7cTXcQRPFEOO(HgDX@*Gu#N+F8AP
z@UsX*t~UKg_SG@)tLDvyQYq*z-ypwJ^&h+E8dqRV=AZCU2fk-4JKX(PI%iD!WR9E2
z6*ZcB^0`&yXevxJRFA<awx$&@WKHx=%k7WYOw;6$YcFFzMS={)bgZ%h%VM=i6ntOp
zaBpD3?&_+pJg;sMDH7FR6eL`2m2QL2(9G>Xo*!%3pthy^wLkOfbKBpIb&nl}r#Nka
z6<~l%%0&WiLU#cz@gld?4O(_|jd(;3;*0{Rfo2+R%!NZ_aTt$GmoXkjgy^16if9V+
zoQB)9t2H-jrgA09O5Inzrq^WOxtpF^P%=6hav5a}p-l?fI2_MU&K0fw8FOuh)U!sT
z?QT?nfn}NJfK=9=<O&nN6`n)+itO6Pe)#Y?E$FNdDWYR4!YV9bkFF-pYCKMN1q|~i
zJAs3iF6iB3W`hpxIm1H7p>?9($xzUKC5_b<!+NyOoT~e%C`S5PYyRHbNAl6Zxq59<
z)%z6w%U4^{y0f9h61ywKHXhX(CuUdcY7CkkRl6==S3`2r^iM%6rR?#?Jf_>?eA6T9
zs^bbBccpozz~?2UjjZ-7bM$zsSFbj&$U*jUF<rAK2fgM;@R=w9Ho$8>lWDDQ7MdCT
z0X~9S94G%cTc;}<U0Uo-%h2p{`G9y)p9|?4)^2atfHeE?d89a?2KB{sb+>mg@ZiPn
z#Lr;xy4mk~o7y1nUi-H+VV~X79Be5%ViCT?Xwp^Tt0?!_In1$mrG%BIJjkU@bKA4C
zTAon5N!@n?Rk%3p_zM5%t~^7rPi`T!T~)SU+|`i2Ys>`e&Nk_!cb}p%d1!(4#D~<F
znmpvJR`9!&kbdC{OtBFOxVc5PT|j_yc0EI4r%yI}`cVbkx(A~BaYoz&MgJ8#AO$UQ
z2f7p)s;X-8r&t;Gsc37ThN<2uqL#9+tw-@{tT(u|qeY}$oS?O=_TC+dp8EQ4v%cys
zwQ}X}oIi{3e-OL=Gwa*`uVUA+TEFckJ3{v*m1!fomN<1OKe~Akiac&HYDF@v1_djb
zV2XJZb_j|%<xbvMFP+412<=9FwoGf-h5p*p-F<hu2hn&vO`XBegqJK@dobJJ{`q+3
z{y9FvDaHs%$)W`S^33;0IY?^)$DtvBtpa}$8$@_r-#<7rV9=s^paerodoa{#dhqo?
zii_U7QuNr2zQS*Sy$lum%q?IOB+3Amzf%$Z92E3>eu~<Xe^3-%wa|$3DMCr&+X3zL
zvErEX`%D=X`Xiv|ZdsB(@`+&8_hP&3FRE8SD%%7n!{f51C?(Q1W(ndw^=M5fcDQC7
z+i~cN1;P#c-UiCqIAXE{Xzid;Z`4<AgG)q`DIC&h5q|HK@ikJ621kYCP|(ylfus-`
zGG?d2P=R#c#^Ha_bAHfYCu&DWx1ihku7dKD#Y*75kx{fOCl>$ywQhdBE-U5;qPa0F
zjOou6HsByR-lo`~N7bqHh&^@Htbz0N=eiIJmQ6utt}x4%fWUqYhB-tpBzaH)3jz9M
z@?q^BZj<b#a#NAQzSjYam@e{_EBL|rE9UmwB3BHy44E^q>CA?;Dw>uSsfjZ6Vo4MI
z;XJ^bB%dE6&gPv*l*US*vCyTK*$vJ47mu*zgHJ1}?V0n?R>xYddjk<+f8!F<yry!<
zy)$7_q@V?g=+f?5WM%~mkk0w$nN}zv%Bt%`P1OuC9P4bogzLq6HQtZKD85*_z8Z**
zVM|K0QTtJGFxL!}VQL9G`IIr^;>UO;iwgs^aU4&KnOTA^s6bwCEqv|A!7MiEc@oRk
zG2(~bj`~t96J!m#NcmvW8|Mq1Kd{xm2Dt~9B43Rz-ihx9-4FV_V)M_$c!h6HN99H-
zS!Ld+)ZOPaP^?l=MWK}W&x%3D#97|-!vZ+7%^3z-6G~%|yzp*$Zz_kP<T#^a@Ly|g
zz<T4n;-|EVnum6{n>~ijcqB{rscQS=FQfZ#uqHh9TwR_O#hI+3s%E^`<0(}Sqvq|-
zU;He&JBMMp8=J0WmMas_a~oGChyT>-ALLvgmc^dApQ5nd6+UP0>f0H5s+4O_GzRy@
zv|irPHc!@`Yk*-lJteoC#q2&+dgIp&Tg6K2xjq6%QoDP1;CA!nG4pD>BN#nlJRz++
zm)1Jt@w%;2Gw$z|u6lIME~<lXLpjZD|CM6Sd+2{YgAMaSzU`ihmDcLD=g?)*&GN}y
z3J^W%Gt89J0LQ?;*m$|{Fcsoe{dd<S%J>ZYj^DRn9})n7;{T%iIT||}*c$)O15dT;
z{~MkBpA->dV<jMh@`8%sMDsmGN+86eqRNfMiC>SwiK^=74+ytWzuV|;QdfJ=cX>aE
zhp9(yE;}ySRuche+d}u+A<{W}kNL~&!(1zO81^Y6+SEx3?y@ud8w-pQ&T!?000WGH
zKnO@`_km^f8#npzrjmg}#(mzRg;OYJ3DPMY{lt0$f7nvsJF}#LmF=Kt<|0TkT-<Pw
z6~d#wTy8uo1f(u=?684kys+#!0a9Dz=<rj?aMcZwx~MyMImI`@F==bgcHG&N!+{jx
zazPe7V$BGZ3Xx!M&>B+RJeRD08`n3kowC6k#1d-}OC_0!9i-W^d94Hkohi?<;&jqJ
zaBN^ZEWNtKtJ!-#nDOR%!p2mYNpYDKGUC(8&V#h6*aRNS8d(L}=c`_AiqCLz*G9PM
zX)F4l-Z2k7(`juV#~XnDx4Ze4##hDfIWoM67&d-d{Ig7lkdUi<Tq@~X;({zmUaVdC
zDir)Ha^_BX>)eE=@M{CdN!z^MS<!3%TKRA$C5O~zm{Dl=b#)kzl?<-v;_tF~1)C~E
z!m?NE_A}z?HX4?7ABSX32w9!;(A%IiE1kDz{28}7S6Zp%odOehE#nQ)=lItl0$zdZ
z5N{AjH8(j>f@ad6<YR1(2J%=%hv2~M_i^r@$ZM2H_6M@W<R)1U<{at8jgJ9QeVh8_
zfXhbiuS(QsFSo%fArc+Ge~5M;s?l$+s~TjItjwBeW?Cexbay$GJ4`r5Qkcg#Ej$%R
z)nUwtT={(e`S1pEi?$rMQG=0|u8*EK!9L5if<lf`^i4|F(v22<p#jnz)kq%-9)g>%
z{`6ZUA8oGWbB>V;5QMahHg=9%!_a)|E%(bLnKK=~OB!UMQZ5~eelMK$h7fGikj;R!
zqWB_;DtnCy#8~E01>E_EF{qUWEQDtttET9q2HQQdW`&AX?z79A01YdM5qwq_xt!S|
z8DegRo!{Axn>w{%?8>CX9{yewmew|uA6aKh#`a(qDOwI!5?8<*WES^3=hV(bSt+gd
z7PyKwbsb1EK!Y^Yvw)Gk&#<P(L}tH(ty|}0$&Q#EX|y|pmr=72^{8f<^?YAyhB=D9
zB_0bKpz}Zzt@62QUPwy*i{K5k*Ir<jKh`;FXYhKvY^1;r@wvG62_;?QX=?}k{6L!7
zzgQ@j0Mq0w;PR-_u0Q!m4slP(zev&jF>ygKJ3T{IQ*A@uHS9MJBM-&D6<;64^{Csq
zNBH6Jlv;+M@~Ln62K}#6NH<m6V9#$<rVqvcu~D$LaQa^)+iOidr9*Zkzf+}fYt+oT
zfIjZ6K}Bs9S`2X;adNJyZSMBqY6Seh#|c;T<(uy}t2E;+SL}VE>zO`n%F_s&)vB+x
zKU$bL_;E&z2j`-~a+A^CoLpRd@6N8@Y>ax0j8Ym09>|V#Z@n6E@di0G?Qx~X7^6eO
zpb2fiQJJRu6!e0+iRAhb#suSuagYfb)`nl<&iAIH2(F%`!QT5E8uPFc?xK$4adIuu
z#2Ug3L|0aQ3(>-mkZ+VRL>VB_UBc^%3~bggiT<R)e5NSj6mg~4#-Qlp<!Le_L}nKp
z!#v|ofLjCNri7kTjp2iy0_LHYDH<sgdf-8+si{hEzgDEVj`z%SQDCCkizY3R0p9lZ
z^z5XmyZenM335Y|$d2fsfs-*)YmzVH?2vtMiI5JXY^_eQZGTVOa<i$LfE`5DT7^$6
zCPIK}>Hxq~6a)|5g#=qn8O%`=#6S~X=}FuU<GCJt+?`Hmf^bU;7kTp~AoxkK@bYHd
zr%TFRW0YX~<P?yGJRnv~#uM>L*3TP)>h{3S<Q<Z@8}Eq0+937fl7JzRk<teO$qk4%
zi(qi1_1?wL=rCagBK)D{!%U?K+3K8vXAp!j0XL5YQlPPr`_ZK7oe|<%MnJs@NeRpp
zIo2U51H2700zg2#V<=xIm?C8Xs*vdIl59`_xB-Wfnj}@n)nNWHc>vL(0IVPl1A(v@
zW0j4<M(B%Bs*eGYlDMbbbA|Au*JMUg`b`r@p(CIh9Tqu*!pX7uxPaaVtd(N`&0NX?
z5<QqQt0S3tGUafJQlq5SxS&X2R!{FBQp;z&>{kwuymJ791nV;%M<C(To9ZzM#LHlh
zlpdk|Jhdjx=@uGGxH~2s#nEy?-d+5u6x7B7;g(};*ee(izLYIXdWQlu)w75Ld^=46
z87pFBX49-ZrfTst7W66<RssXX8r7n8ktl&r93QrFp0I%GScvV{2uzzNmK!IO14?Gz
z%W+Hy4yc~j5fDN(*B=HIq)z3IC0N5aDq}Y_!1w5;mp_7Z6}&W2QM|+;m}13{*wzLA
zlh@zqSQQ8j=>$kmKqq8HI8WYuqM*(cn}2Z-wA1eg2jLAh-7M$NLfc9WwLx?|iR5J7
zO3b~q_7rZa%<u@Rb<aXY;e}4pU)lMmpY6F<U;pyxU@tS7ukSHN7xV_nE*yqOBtT4J
zN)KSle*$V4ZiqA(KA6@=RUmf+MQSX8<cQ)VmiYx*f_<;E2nit6%snK8y80b?t$>sr
zcF^{m3$#caM8gRXk`h>Cmev)}Mq8>{BaSu*r~z1!G<bcq_hmYDd@b{Hu(FcZL3`Eh
z>ofn9Lyecw|Muo?CY`G$q#LXmK@9k-geOCkkCQMg#I_|ZrAG&1ML#*kO7<I1KvDm#
zGz=@J`BO;b?|1<zvHoJqX=mO%o3<ZwrmoOeZfq$V=<?eIjq@D2R=UxqsQkyzI0Wh)
z9gK>}+`Ch<AY^}X>6u{h3~WuBnYFE-dh<OB3=gjC6O(;ty3LEtF(v5zVgi<i2)OAW
zrxK@Cv14-p?QN7eKimu<xtfV!81pc2)rQZMD=Bn}1pIi#kcuNVvj`Ouf&b;Gvgvk8
zmMO}&s5(slPltuQUh-CcLIoqZ_nkszaf`GHN8fF)9k!yET{`v;p=&eorolF8GcH(2
zb?i8e&gDoLDoy70LRrUjUAm<W2AuWdz)S{2<nTeN-jk~+MB8E56@%Y}pqIl6*{P^i
z-7yXETXRh+AggEvj-X>dQq@sjN4Lg$U^1&s`3)G1YJpOFJK(E!az5_+u5!n(bA$8?
z{?tQ_6WiyNH}U)>dmk7m19S?E7vz;5sxtsuG)sw)S{g1|+O-maB@fW$^G@asVos#7
zUXmrEAsxtB<kao^;yMnHG>tcQ2RDa+H9%F!9#wW*3cXoMPBBcS%K7?y2wMfl;x6qK
zs(ayT^eCmWjWZZKhF}z&2wF@C8U{HXm}&$TL)qFAiDkLY)J8SQBir<R%9m>$IpM_0
z0=FK-h&M)^5$b$*${WzJt-7hG3pp_`>Nu`V?cWR-NS#5rCk9i=al)Z!iCp!Q%H-;8
znk$o#z5Gx5XS2olMV<yvKJ%u+D)_^=-L7@7T;v^grytKN&qqS}TYcf&n17f1?hkvM
zo3^UQ8Frd&@t?=OypN}?HB4O(dLSS{2?d?o<*I*fqNSBlb2bMCO|%Z0rBz7u@~Vq>
z?Pv&3#xoD{3!r@G>W57$@_ytKWkUJZ3{|?nE;V2d9IF@^sW{1|;DMv>!cQ9z^L2*A
zEYQ(vDdY!tYWziXJEKZPD+0Y^FCt#DIe#+zikxq34oqon)Y0->o?VlwEMOWvFFUEB
zUy#!K;ho?~n47i~-QH^@v_HgkER8U!A$4AEm;<K1o#ooyvS<0mlrCcWe|V0wbAU2o
z1`$fw;k<>3umu`tE`<PEZbL6;*w`>%r%6-SGOx~M@qOqDN#(pv7BJWdO82&$)*1DB
zNTfMbb>Ep*a|3a{x7Qv=7Bg>eRw@kHb`$HrihNukT4J7mKR2}}N$WtXHp|YkF4B@t
z6%KeAg7e~2z0TtPt5ahveCTd}o9OiGMr+dhXlC27h)0~QWKf8-ARdf6VP!C-h<q9%
z{v`s5J$kQ>`m0OU1=-uz!Ct9(e6Y2E>FdnWBPo60M-5w33WS6Yw>D)8>S`SdXNCFv
z$bQ8Lfweuv?%@84X<b#VUQhcLrpBa(yp}EP<Z(&`Gvs9l+HYwMBG)-U%+F^?Wfj5T
z>EBHl(B42fXWAqmAyIHC9fABt_f~RTNM!|`K`pM{@BFd`WHT<0?y0ayh-gy=?%A9*
zloc|!FJKu{nOl2pv3MM%QFN(nIiw7>>=CDYio|AVH~LUkEQ@M^yK*=bGf)E;tSbt{
zx#i_w*kVaWqKO_-bwX?I5!=mX`o0I9SizTedZ|)9spd0_u8Mf&OCxyoq)@||4E8a^
zpMJU{*<R0~JJ*~6xFiE!krGpAs=FQ?KMeU^2hSNH1GCCZtZ2PRE;c2;C&NR;qxlVh
zN6|+*c}oPyQkDz11lJ>skkJQtjv&#9LGS6KrR><bFtd0rzOe52k{(d)g~%-|NYRlC
zWy^U1^JDJ(S@{0Q#Q~@Aw^|{-D&BOju7&GbU=*~R#X_sdo!BdN08reinb3+;#hY7e
z@8=P}jICS@sSZN(I<DauOeoA?i4<uLDBQ5l)!e-(n5M5ft-Odn#0y2VN4LkBI>5wR
z0B?`G$nq1=U7H00gPO^mcZt-a3&t+Hn-e!zxFEwNk4E*x71}H>Mq9qsT1OJqO{wb4
zE|{^@ySI<$6sQ)ktY&gnGkPtc$+0@`N;oPY9W`hNApI-U2x65IiwfdLmAs~U8C}b{
zCr8k;7J|w$zEh7S{7lwJ@NnjR;q4C@4V&HK_OqD_RLjFgC3_)%@aRLrN?B<3VzrLW
zCx^2@65RwXF0`-uRmMd-Bqs2Fxw5ns{?H1oKA#|@cghoOJAG)#k;KLw1PZ48Mlfyu
zid=>ik~#r+5#ySirvKM5YZor!k;Q~?Kp7^2Z;v2{AQWj3<RXuS<(R@W?4_Jy!%NY#
zEv*0WgG*Y{p9~}>!#viqG%c?C<B0sC^<P!d@z7!Ke{GMsF^I}@ewi8GUuf)qWoCY%
zvHyK=-d6sV(f&hAQia2jU;SxL#B)`z1Jtmx25o3E?--N~uv)AK(_$p<u%N%%6&rWG
zXgXhc48}2x@b-)?(q(?o2SKmcv8bnjm?29%Uw=3Lz`KD8zQj7VZ1(@9B@HF%?aJgg
zg6Zj`{y$oh+W422M4*ri!enL?`lTf)Hi_=8PbARYk%9sElz~+mfXgAUerZW4gFomb
zK)faD$Pkd_6&H%cj3R4LlsN9-ivdLuATDx{;AA+ux6~+pYvSN7Z5`pMm2JCB74y+4
zkV2YUY{V$1R^nqPsKU+f2qK%;tjbmWX^hIA$juT8WMtH3lpNd-U2cLUCW-azNtw;R
zf*Dzk8970`VAns#=IB+o$Jr<hQO@}Fj0CTeC&ZLp^e7GdR7#5~&A_Viifzrv=wDoN
z*6SCS46-O1fo&A+?#ZU3`*Ot=#c=QC-W!Gq9(susX!84Te#D?p^XPqr!SzjL>yw*k
z=pM|$50R6SHdcbK*V3;nAo>U2K?sgN%gf;pRSvOLqk~mG|8O@@X!(Nar&D`*=-7pL
z=)9ZGAU#TNP!C+9MCP+rm0Emda(mf#-Mq^IpKB*pFuC=o+9@CQy&opdFYG_W<mg_x
zx>(d#17@fb(^O(f(N7)zqS04)7T0iWbHfR9Z+l=@e7V<Mk$=>9==?1)$>~YiJf}>J
z%5j%q-MfCs0xud#wpjb?CA2I4LTBqiTNTWjLq-xL=?Ztw!EZ7J(>WL8*^9tvXzabZ
z6ikZsdf2RwUP&Gmq&8PAb6<;vLav21$D@YWNg3_QhGq(=x?j|7kFFlxoU8L@9J<j8
z6TY;joK46RC7so+m#Pl|ZnBw>FZ-4e`+zh3L3T6j*qswLf)}sye@~a1JPa`yKm`B@
zVFdsn`rnizMG*mE84(p_NC4pfpInM!Egh%LF-M<VJ%-^hab<GP?&PhCDyn4j)gCL7
z?=?-YMCD@J^3c9GVGy7$41VUHFP>5_QvmsmZut8kn)p6xx!3cX#qC2mo7+M7m(SZC
zFQ3ot-Ywss-@}53SO&dUmAa^fu!73JKFh4oUOF~5o9<dyo2+m8pDSoJH8#tezPBI6
zHeGZ+7D8TkFMHp$*H`w`I(jTz$eNw6*{z)`Va>_I$6R(g8m_$dJYmT?jgPK}_fV?j
z_cW_7tnAe5YX2%(a$|emAC3nnI!caCMrU5X*6~6O?V?`nt9))R8;2`=*igRa6jZ4h
znTu~P8mq3`Ra8JWZDD)0x;~#Cze?SpspUVKzZM+#_d3bqE3Lz1uCE=={<3rIL=bj7
z<y2?vxW!Zktsks`qi+D2T@3==q7C-5b$17}vAGvJt<^PtYu#qb^LR{n_u0BgwF}yF
zLD>8FscdB5%J|qu@+3`|2<f55HqbTgD21sQ`FZ{x8K1i8QTLn*92kPDE%$%hcWPr7
z67qU?f8GyvmIX^H2ZD-{80eTYtFyd=X&E}yr2Pd09w5xtcr$(VhhP01o={b0i!Ggf
ztlSY$yA+&e3VsU-a>!$wcTwmBn6|Fm2xBYR<#z7B2mPmfA=g9q=k4?5DA&6+Fy-em
zH7xhW&*SH2b@&RTPh(R}?k_;{*B_r|tG30frF@oGHF+$OWU*^7NykiA`76N`+9xZn
z8>8Cxt$f(-NLZcr!}v|CpH)CGcH|%L??WvHS&i$w$+{+Y$Hf<~z{9;yA1zv8M)1n(
zjhc(sFg0-hDP@w7b=4kZL{*91;W?L~$!)q<b`RLjH(Kg5X1q133Zi)?2kFmPQY`^g
zhJK%YEPd2iyGpPW|E%j0w+AN;m!30+ztbAAs$-i5CU?r-wYIoCSfpenL3#+Vj@H%-
zuKtwDl~}=Nr%za_j{cASY7WlGU6&w3?E8tA6|N93M>Bw8U`wA$RJ{tbJro^}@rZ*t
zc@!bgGavHSks;|+b9g$-8msSYBid?{-Z^X|4{`y8Pf9^M!pmQk-WcfJx+A0S>s;Gk
zJ>?&le&io^m1Wn-K2K&4pGkP%dY!tp5!dHdy%OA=x{=Lfxj*fJk9$U459pFm3YDbL
zRxZOBi+BjI_y9HF+w8{orVT{2L*T5ZVDa~ym1jQ=SZ!JVKG8>f)pwrly#n9o7;QgC
z+yXuC&tm9sV&%vx0sy=ha|E~kbVc^?!>_w5wO$kLVE%PId}Bn|kc7bD0dQYagV~M5
zr|!nJbf98;x(4i{J~#kSf}I8|3rFf?Apq^}{`lCRj6B;3_ur<e+I6$hVM0TM+O%YI
z4!mv7fu~(`?GDPt)zar21p-^n3(wIP`&Wweits4Q4FkX|_5oJ6(+nXSsa?gl7t_eS
zBXu*_ArqzC@;vk@nR8fz3naO0F#$aVQSwN(w-qIYqwTbxt4xK5lLmY0XzF+S4~>g8
zgbh?!&|Y_Qc5Lg-(UE-Yu$Lh}SzAF6{z}}RxknNBISzx>d`2GTsM51449BEZ$1AQI
zja$}7*E}vjbAyTPvs%C${l4B0y{qc4&?9o58V*i6xA=tWoP1X4goa>&(Kl^8Uu8)g
zKY4;kW0K0c_A>(Ru924iP_0tMoLoDn9#)zZh3Vphgb50Jg>l^6B4cT{-H9bbAh@M~
z>n0J2EjL~yYtLNLMw2aO5fMdRkZ>HuRICm(3f@RKEAm6r&B_?JI(n02!{?B&0XtHO
zXrXNp7QyI_md4Fv?9ct(`ORUcmP_qZG3SLwAj_}KB3$P{Kthj@3x*|mKM@YJ&cbaX
z`ex?0_tU;8Ko)NX8J4$)74gj=WYw<id750)_SpK%1XYFyTr6iw5$j^CgrvXTrH7bb
zQ5)*ZtR4<P8TEXd8FwBv+<^vs0*VENUYwpwvbgwce26VUpVBZlo5FPciV`BH1WS)L
zrX~6h<4V^VH$_ww@tsbvOhbkBLxeq&Wi-5)o-&eVqPLlZZk%`^klJPkp@dXt=zM=Q
zdt0z3<iG%5)JCT%dksS8Wd2CNXX8SBs~#_zG$6MbA2c2nDl_iHS-?P47ctF%e@U0t
zfepajEmnw+X(g6E1$s=+<(4p_M?Q3L&<l40L}q6P@b$0gvc&UB2A1+>sZG14*Sl41
zzs0qm;QTmaH$$YpjSSI19G00jX&c<H?Q(>g9mi|thKek#t+@n9yF{oGCQr9=f_EhX
zmDjGemf7uf;7POIwyJ-Ql%wVvl;&qB3EDtx0D(q;tGifX*iwt5gvqzQ(!zHSAYs?%
z&jp5|5!mHl;Xe|`4dVg<OB4tyY!r17ld=!j0|$fW&CllT6P5eLJY6P_<=Sg@Py+>=
zy>UH<;yGbevJ1-VwdT5`_ZT*kTa!A;7DW;q+9w`suW<m5AuJ4JCu)C7C1Fiko~$fO
zR0=^&tzcC=#2D-^gvD^W`3iNccgx$2`cU8Us&%%A5U9fR77T52r87AZwC9DV>JUsO
z>`D$6adUEnFbnW44~QlO44u7^Pm8!kF#y1}qs+p@c_k@fV@!y2hhSFPo4^J=<|Ec(
zLyI^tRHkPV!dU|g-C|G10JY#NO6VI}Ecv_4(7`srX2B^3?vfo-e8S&f8jCuezfs(J
zL647@U*7l}$Za7%C!3d&V#7z1+<v{5NRbrqa^6?k<PpuF_au}NYm~_2@c0Ar6L|li
z!cRuR&(yj?iF^@jXQW%~A5p;)C$O*7z|ntkN$rw(#GIuAvfFl`;B+P7q&W94oL)=;
zQHc_5PQzDqCgodZ$_e@bpw#~7?dI}x*3Jp3(N>IWCsG)U+)(JCTvFp%y;Bgmp16O_
zbnLc)F_^F|#yt=~2Q#0pn1#U>Glo_sReh%cr4N{#u4o_y4N@i&0z(d{F{SxQ##3&l
z@;tVmY~|F@(dSL_;6#L5Ym=)#AA_mIG!7W{!AC{e9cmqbwzN#f6V0McHPT}G3FrOE
z=vp64#2_jwG|(3q6VaT@HGC-7F5`t%5;6b+f90|NQ^nF4N7G`3+3Z{hG8_lVOeacO
z0lQ#FV#>JJ=yE8GR{JT1Ap=Ei93ZGM6flSK(T^w6@$hZ|k%&Xw;j=-x6xR4SVtAnv
zkagfP*Z1=-z+$=KuOw`}1pQ<*g?T3sW|wOWupCFNHAo!$p8*{`Y6nvGx_~?K!BAZ*
zW^(~5?lSC1uHdCgOo=SVW{cz5KPA?tCWgsOqENizo?ItU;nwT!@lW;cC2p)Rq}#Cd
z)L+olVfpbIw67t;1LQKdcs|ss@cMl5LV~ej`hU(3JPw6F85PU4d-@w`P7-KVUV59=
z=?fq5eLp_<1SJ8$^6eE#2$Psv%nx#swKotJMoh$6%&b`dq*>>5Q+B`bsc%2n&jMGj
z=nbUkpD=|aP#%k`CX_iIy|oI`>=(OcShYL2N7D>TOEF&5Y!j2DPcfz5-#<<z4&5Vh
zlqCKBA!5O1ouXVU<pRIQyE&wXS5gou;^y-1`k;^>lNXPBmVH%Jp}<tE2*xy1rcVS7
zumNb>Burr?)5C$>L^UmL#W=*QC^_}5_rh#Qmg4sD!Oq9fHp7O$R0mzXfZ{>#bLA44
z`}-bom+xj&y9q@M7HLm4O;}2-#De3-M;FXuuk^=WA~)GPEXCBDT?k)-r|xjtVO}E=
zh_fK8UO3N&nhl8rm7g&4N4d>jKpyuMu?-nL&?_vPCc_T{BWbq0zNZok76KC(v)PL#
zzHXpsSCGvXVnt$(*skm(S92G$2t-`HekZ*O1<&1lkWuSdWmA~m8fh&TFn>eaODvcD
zz}h2YJ-HTP<4{@ca<=erlPNb<`v|NS72AZ1ro_@C@9<jUL=Obo;}Aj)9L6Gv#}w#G
zgRIJ^>BPTdZH|J715;wthG=^rTAmF~juRS*X6ocM*BLT&pDhS8?<S*4<;%h{Ei+Q&
z?1qiV9NNU^jc<%EowB~F;bGNzCU_YMBa&;HhcVyKzZRV|IrYH#u@Gs+&B^Jkul#?t
zP#!^Ut0a>}HFK?fHM)o<gl*}j8<Jg%$4ptE5A~zWH$*Bj=?c+aa)o1~=$i@v+yyZn
zEcBN56GXznuQoeiUXI`RMw19@cpMIMX4r=iwJKIfqa97*gyhB0df$Smo9kXJ)DKD2
zbYU_+WUl;cp$~@XeG2IF^E{W91_04*)7bYGfow@%&dtTid=s|Fxhw7>x;SBu)FrVt
z)}%6$bR=IEdTCJ_D(g4XmtsU>Xfwb>I`%dz!dTmnZ>M_>>dZ(#ip>8i(Qr7_b{C$_
zX$lFI;$`vVsvjh%+Ir{?F03kV)=#EjTd=9yR|SjN!7hwuibfJ3%-AULEoN}mC5>Ng
z#ive;LWI}IMVn&Hh<VlA5r;o8_m;keBCQ3T%3l}Q;7KT5b}d%j>N;Kz37U${L82QP
zM{|@hePEZ!S&&@<W;DiE>z*hj?(a&rvvSG8P&fR^1E669<(6<mm?{5a2#&8?xY3CA
zcYjB9|Dfv8Q_Ga)3MlT)+LuJH0t>gS4OTNGmOCm=UlKP%X`VM&P~3_>ghie-6748$
zIk0Z9^*Zj#LZd-%{pxWts9l*xXkTHaUP1fl<ArE4+wpzRszM;!9A#ezi^BL@@mgng
zJz?IJAJfKZCOBP0*16OIzv#v>^l1M<_KZme1CvY7IKZ>10Q4!%onTpl*N6oFw2R|F
zAEq7(rUE(9(3@P(B4(6vTBH&&NS#rky+)=6&l?9bM{}<*23N`kUC|4NXEvV>-ff(7
zz<eyF5S@yQ4(pY(+`s&BH9F9y82oXJ2N=2DFUuR(K0WjZ37W20Ixd1S8KUkYlX>)(
zeC(}K$6#IiXJ&b$r_eacNQLMQ4vPeC&qOxrqo*=b?6}{^PY}#|ywW&5tLZ)GuWxZ{
zJ+8Q;jIYJSO66dGs&pFr7>kx5)d+M#i7wMAV7M`4-ZTJ)3#3h>Dbsrg1oSTZI$}q-
z(wQ|vZ5}-ovg^bRjBYINk4ktH^a3!GV_Xz~n)sl|T#h=-_SdtUM(>6lvXJ>FQn|VD
zC;0py;P&J}Cz%g9Vqo2iIE=j48mi*vC?v!`USHYcUS}%{XE=0<cll4kSF*(ncc5JA
z^*o-0le2hqGX0bPYHzUK|86BBB6Yf;+7VE{zo_qKv=bLf{vpkp>r|9dZ`a6Qi-3>^
z&<Cegx8zI!3-rbli$%mI^xw01=R#GFY`h0G(>=OC#HNe}E6UeDT8Be7;Tldga{;nl
zqa9aP#Zo1NiwDZs?bZ&|t|QSLjgFUQ^mD}?Hh5sMAmuL5uJmb-O4`(g9ql>34y0=5
z>lZgsl*PeXv7G9s9tu54R=iL9*GxtD#KT2}D;yPQ`Kf5;85}PyIiX1R*F1~{7SoaW
zFOk_|F82%NuJlYb!~6a${*ABi+td5^;+Gn1k%eToSOrD*KC!3InSoZPPMhvTahfyB
zA5u4t3+gVJ@juhXge{_#e?uf;94VA3+?Ss{*4S+__WHFO7j>T1oMbhevE&OMdmw-e
zUa?@X;Pm@T(H|cep#-VQ<K6YFcIb1bI1PV*K2>nXU%8)A>r)~Xl!@XbSd{i3aa6+e
z)oE6elH<ZCMI5runx8r_u*_1S*LtU12<QY<gr^s~n3Y1&(t~Q;c{)d&6cFf9B1QMD
zk&e<s>C&(T&hI{6fBunmpEP7NX{ywmTf6n7w9t)l3wsq7^{pXu97+--_qIJjMnFi~
z$l9odE;EHki8a!3$LRB?^5J|oZk1wn%FQG&mr}gUW-Po)hOI>{=Y&z-xG)<zYcjEp
z`SSICHhl*^euBD)jVmTk?8LAV9$W`#w8h2qGku1iOWN|3fTVn+?2VO|B98KS{NXa8
z+TfUALsQDKszXpOXg$zXywiOlIAQ8k=B>*`D$>zSB%TtyF&?8#{uYMu&@p$&m5JYl
zRhU&AmVK;vq4RWOZEq{7PUlI*YAr1!$8AnJC!I8`kzkE03<SFOoKOj#OH<ded2?sL
z<dnPJm)LcOk*O5Fi07@OH_C3cU2VeYODtJn;J;rebNcX|u!@LHlbEGdM7I23l+d<1
zfU|%pH$hs7XM`LpJfw*}!?E?N^5oMsYOCrqM>)rygIwen;HG4JEiS>ysedYqGL|M7
zV$(wm92;%^f|zV##CY?{3++v3hFNWda0L`{*p8<+oXuot*+ocPO7?%*f-}S~FG@Th
zy}fuoI^B?Z?NP^^V5f1?3hSFz$w!KaV$6|c*iF%SMp^#~fCRoBMO<h63+QMs`v}mk
zxHyiAOyD=J7sAM9OBQ}2gWTQ@y)6kQgHCskId&=JeZGHkVj91$BF+=(&^HK@K?}Vb
z$>KDh2)3Ro(oJ!Ip>>k2!ENYh5=KOgx;bJoPy+IoXpm5GQ{mpxKqS<s*Dct&+sl!S
z3W}5#XL3_4f-ZDbt%Tzd9!kb@DD*=EU8=v~Wjd(Dk_i{8UN;<ls`YSbHDuJDAvU6l
zK+a)si!E2d`<kb8MyiN%F<rbuLUDFHoID+}KN=}4cn|h>0ZpO3AkL|(_rfvBEU3RC
zA#=Zdc`W@$7zmTGqrgfC!)o=s?oUtpG^X(Z%`191iR+I&c`>_WZW<5LL)thG_DCRl
zL($q5%j%5pyXWhoAMGMBT`nE47;S`4=FZ!K6|KreelZgPj!X?Cf#Kso#g_Z|yTihB
zRrSpQPjyq};#NU@J;S|>E~$D2$K$jYB9|Oz;&98Fjb3gdo3W+rsc5^&h_6?87r?xL
zoj0=|`dk+jbsZx7-7G_w;Tt*~UlU2DA%jJ!I#{kg1hCZ^B|agPVyZ5;p47{dB-R%@
z1%$Fl0hV3$zs$F*k`0!@{=a>3XoG7`a;d70;t9hX(Tw$;^Bb2S<7|#1L@Pi0F~_Km
zBofw0%r;nELz%P5s`z2*>*;TN;sXM<VMU!O<w4-r)ei`Ys@+iUHCZLN<!gRjKktin
z_%VM&Q0E;5yd57Q9ji|QhYeWl#Fa#I$X%c}XQnpMD-OLQG!uiih{99(NMBDbBE#fS
z%}@*I`EuFKdW6n9CuV%O2O%G}*NV2R)R>yDU()AKmHVbbo};x9AST6m<2`WT%cq;%
z6^vWNkc3Yt9BDu_|D=a)HrrTijEu^ANUBv}0BX{~OXMi$Xs`^Ji#nyK&OC>xJvBvs
zc28U$zzs&Utf>~;ceAr(!PXgmay)Q?5*%rjPkXc`#vt6ys3_vsQYgFwJf96A|2x7~
zHG+##%N_Z=U!df;V4*i~6=4+YXvOCuKPd<T@-I4rSy?lYF3LzRBws1MEw0OQb}AmS
z7~0Vy5G8}e{zoUSSeS=&>=J^X_vG67_3G~6xb4bi^bPi3mm^GkvV{LhE~fr<ar$4E
zBmaSnO&lHnXR0t+T}SSa9mVIiwk{1^f2gHyp@x}@iz;L#B%HZCAqlivRaJazMJhu%
zVlYhf-)r}(gE>|ni;tyJuF<D&mX{rvp4Smo`yM78;W)D6t28CWLjOe$x`<zPLcEwZ
z9kH`<Ses*7Z7y`Zx}@XF^`>3#KTppWF38j@cdH!G0HG3*Z~R!2ddl{xs0O(zW)fZ?
z$%DrPba?J_U_?g_!V?Y1OjV5mXhJP!i!XGJfiQ5-{eFksxXmuY%CmIic4C$BcrjWL
zi4(%(V7_5*nusy+tlE|G@P@QRF@n@c?M3qh_6c!cG9q=H{)cBK#eR70@-ZAQ@oj(B
z*@-Sne;UMM>LFYV3UF@$!icuwq|1lc{=NJA`rJX>3C8QwVMF;Kun*3!V(sEO@3~7K
zM2##}NHV_^Mnn(4ceTrSQ;a<5ogX5t@aRLo?tV2#Svu=f`Q2A<#wStcKHQ#g4s{pV
zE(&cz`?O02bwF%ncPM@B*%2l;cjnrLH}$V9&B02de+O%)(H(t~a(BCli-$H@a@BoK
zu~2x)9xn_pPr|il&ytuDh?U6#XPY;m*c$mF7a=gx6ZS+J-;Z?f0=_R0-o8CK^0iov
z^VL=|R|MFhJx<<&a0#c>nh|Nk4dU>+vM>F#=4CCQ|75Ux_7X_qqy10E{YUPr6tHtn
z6bu2NdDps`H+B5#MJ?^Vs3cvlt9r9`89QM+yi5lGShJ$jaOpjT!W!o|-OQs1bxEX?
zqWSLI66SR#V9%Onu|l_Ltpe`;;QqO>gIhs-g#!o68AJOlA8D}yPo)792UVbb1!g!3
zeR)dwprIepqF#~GO+$>ng2oEQ4HTw!r<jHqY54);Ll2?Ys^7_597DNU$fRXIlndQE
zN9{II-OH(mgzf)^Y8Y<rIi01ZY-DOVSePS-Y$o-de1^oz)pf&!`mV!=>0e@n3{D8(
zz~O?(ysCZ9EtZd(BIXb9;k>W0K-ard`PPr?E%UTD`P_h_00wTM^#_7bLx-Oeq_4}T
zSii!tyz10m#!Z@%lQ#&#=45pt*et_$1r~`H+&6ZhbO#$Bg$9o5e7arfXZ&u%Z-`Kn
zhautKF0?*CB^HL9^IeHKd;(U=El&^{U73Q^6S4nfuXwxjP%d6jhlzKo%=;4|AtLZ+
zNpK@T5R<tric&y75*p%IQ^p0Q@&lMugP%E*{9?+bYabQ2Sy+cjMI&SMm778JbsYtc
z*;c1ib5P)f%b!*B_tlWPkiN8nfDxw_m&&Pe(*@|4v3cC8_hERn7|g3hI9=DKt}sj$
z&|*fmV|HQ<Tq4vwmH;)~UMN{aKA6EdEq;C2E-I|d>}8|Lw#Ca_Gfe@O6K$o8FNdlm
z2Q`0?rnh-_)$RuTL~n#F;c=#<FQt!aZye{?F49q^u0Z`YIK%`r3k^43zNj%ep`~Jl
z9c$VC<R8o<=RNb>iE~ek03}4wRAUA}mNT0ep--<WpeA7KI3<BWzm)V11lxFnPixo;
zpTZ3~2|cSR!HBV}v4%^a5&#g#1r)w&@!r-sAIz`68ehskgLW=x;T>VIn2BgXrcZHr
z8pZ4V3ltkevpJ6l$2ZQ6WWiRq8?>)6vNKif^~9+5Ipc)E=q7kc2N;f$HtLj~QObHC
zpMZ3tiSwaPIq4QAM<!Oyn#&s9;*eM~f12h}w^>7Zl_|t3P$Q;VbxZ1uul<h9CaM-t
zU<hSoZqp3;F>=P6_RLVqFy`FJ-@)RG?^J2_=CA$?_vw-RX64!CRQ+CLx(V4VHub1N
zV1&#C@nr5mo*?8+U>|;b6;~y!;aYi)O&GVm0x545^Ad*gs54pK+3`!jx<3*|DIU85
z=dRy0ANT2CK~{6%6(|!IDaa536{mDmv4KcZb-MVF1*BZV4f|HxiYGDbUs_+{OqAR;
zGjffaDq2JASVVU0aiU(&fko!Inq&tHLhX^iwju9lZiI;kb%4779FaWnh@rYk?_$Ly
z5Jqv6T=+m4-|}LeDV@iR2#QVQz5pr@Zm*-rS$7dNNiUV&#97iiOLy&QbZv?Nz?lAe
z_-bHjs@^NER%Y*|Z&t`w2Xswnf<|;PCEk*5z?^If-%g!$MzA)NoG98U3A9GA9f;b?
zPP>7RvpfSYxon1T@`Nxt+j6;<l~jZ4CXrtg4zd-?``!ps9*HuxYIf6cOAU3c0*5Gk
z<zSVv#^4=^c|65M9ksna4!-^!qdXDrCLH27kj!KLXD+nT1<w7|TC0kah|jmA@Ye-C
zB6n4YxpUBAS02ZYO{W%H1=ii-CW;S=wvv#@Y}bpf`{%zI9@@YdFAtFe08GsPmdpQb
zllq@hY2@f(?`&sm;`%=q%qtxaw@uN6AHCdyYY!_WsOm{sQsng+d17J%qIk`~hkHg3
z3<UFpZ~=d4{{jwVzt`%D8!#+z_;J^UbyPjVDE{Tz%FBxjQ8wqg*1;Ebt_&I@KW>Tj
z`~Cg<#>2tF+co_G4Z9Jc$qwUHhbJmGrIn1*L~_{|4JrtAd`zU3Q^;7m_EvcQaF_E=
zZt1qsll)Pm6ifPmwqY#y`+8#UuFl!DPxG0QnS>C9i4#b%Eaw9<>m%^2`&ioC;wkua
zY#FnF+hAHVXufQOw&3_bHOLL-X`K950Pofj@^_#VkXH-V*gBK)s|n_Kz!|4x7FY16
z<@kVpQ&}kQq!ye~zU=Jk)M%fGPXrQyU*vfB5GBCt*<TWzu>Sw_%}(=*rb9cWuuMwl
z<FXxJfxS3_bN$5X3=Rm^E>UsvzQaATo^eN|)aJA~?!!C=W(;$^$N|$y&`cwwOwS($
z@w4ZIL<+HrpzbE-;IrMwMHRSZG6aY7VE(aXBqA)1J&N^Q{t->&U@&9Cllx)@^_o36
zTY23}bv`H(+*d#lhUUWwA`zSwD*;i6vzu7Nzk4nGN-&3v5|t!n1A>)4m4MnN$Rw;_
zinirgPw9yKa|bvJ=)@ed3F03{@6ou_T_8PIhRyz+G+IXFs*MVQwZvQi65#9Ugm7~?
zMu@9K=n>DA`#|rKG!NH@hq(3Yv8agmDI0ebIcq3*8|vuaA7a5!>Bj25d4Ub%+k5l6
zlZIP3D7!l-6Vz-AhThF<<-%39eF^t*az356+PcQ~v)<tUeXi88e9<Gue7NnhTSpBB
zbF%zg3`y_5Y3Bl7V!)EVZlky3Jayxd2ncog0*2tOb^<U4)=kPnwvIr3YTV7_YVx#+
ze%I_`shbh>x^$7wac1abM*gSM_8Hvt^Q2+fY?bZn5-*tP2{N9uWVy#WT}>4HAz(cu
zH2r?$3@*)OzN2fY6Y>Yu)5Fp~xO!1asENRHo#9i|%YS>^&njq!zipDVu_mS^q8H;9
z=1jWsr-#CT=CIe+AHudl_OimoRy}-WEf1Am{IkSPJHIOr{PJW8D=jE9pnt}z8}59A
z@x$&<fCgETg%=vd)d*w8+)SRxG%%F;BxnDwoE>%Ilc_7XXs@3W553p6j_bS^v?id0
zR$nA33Dr}_n$40z?GK)V0={t|sh5{Q-!pGTQqzi{j(T4A3qM&9sX%&=p_#@idoS~B
zjO`|WARbUR3yl$aw5g`Jeq_pSOWr#61s4{SagZKW%_eaa<70F)r=4_?-a-(*ddU-}
zqTZ*VrCuli@mcR%KK2wrc~{c=zdu+9V<}g1x>jso2!>S7fxviwzv9sCC}n-QDtj4V
zE^9mQ9aBWz;cfq_4;~T$ykfQRz<<TI{8~VK#*|07Tezk2cnsi`OR=qR=)8@>CFa5a
ziLEJBD)HA{H>NqYL5+2C`5B~hk27+lanv)BFknU!zOP@Zu{Yr0;vy>w4YnOS1ad%-
z>;8MbJG+A*Dc|uO@8KDOzh8Ac{6ZHak4s9@Y1+YX?fm)noV&!Z+XD-e=FlWqHwanu
zw9|Q+x%QnQ|DLDz=aEfiqMhajda<m;Y_3aWP93!?&TyvZb6m`G&K`BZNVZU#rPBkR
z95`MWj>lF72$+Z%U0w+)^RDkX#}Gy9AYWE=5VupjEz>=yvVUi<=|zNwTe49v+{)e@
zdrgBN<qF4{ok_A1s$#i&xtZx5uZ91!<FFO{gCicl3bSR3#!i7sQh{aw-bYCj91s&N
zPdIgWXMBnr-VaPp=*AD~RHj*v`s-UqpWsM}mEeY)lV`OtAML^F%aPyt2hAJbgX}15
zjciQJBlQZ-nAu7nv6{=l@MOAlv6#n2`x992+k3u&_NsD)>vQ4kn-JmD;2@TOo}``c
zM8Z-iT~$nq*bCx>qdZY6SPcj-$GGSF9HbNSIAHRmY~pm(b;9wObKH^hK>lyHVHk(W
zuI0K~+?*F~OX^}EtQ;foOHICH3+=V-?2S6j@LIVEh#TO)o9W|Yi5n}Gv?!S40yyIY
z1}e_0yZ?u=bB+-$ShIcGwr!ubZJf4k+qP}nwryLdZQJgC=iWPc$;^8*cXqNX`>!um
zJE_#Fm8$hiD_w%*Vk@{!LC%KSvf}~Ww;~xUw*SIhQj-9VXdx;7@bt7f^&Gz@^HqbS
zgz14&c+@hS!8{3Pf^n-BPw>Xo)NZ`^Bg_PQFx|YxTB~2yvJvR2SN3Swc-ZfW5ISu|
zQSlMRDy79Mjf3=~yD4fOpltA(pKCy{46OhSvve`6PC93uh;@?RsXz(nI`CHYJ58B}
zagDMPbIY-8=ntOiz=_-`xNx(CM>l*sVeqZ~S}t`0g;-hgA(Vl=telrTWyoGVwqi9Q
z?(Guy&9+uOPigsmZC7l&p2}b55(i#LG}gLFOmgEq`vbkHsFB1BSVtWnf5=WCe&u73
zc}b3t6J5wqCR@jfhIkIj*styLOxzIGsS4|F`<1bJb#+bbXa%FRWW*8zNw(O$Xghu{
z(BPikv~^1y+z?o<s7>~2mxDT*;I*N8@M{vyM~YM<#j1P=-Htnh#*5J50%iuBbI~ik
zOgkCZ?9NPdK5UsT)QD>^R|cl%iN!~)D-{o=6tk}4_(-h>s2MBXrq;3RC$mx1CR+Oy
z3M!~YEm<`b^<(#Pq6VHaR{b>dr5KKF45aF^U%zCmFrg(+F04S9XnmVD|4@CJ*e*M)
zaPeE5BUve)p$;e302k+=)H(v{CC)-e@zLD4BV(r)o=}!@7MEbW;n1U1j4x~HrWD!d
z#hy61p0lVU1REZ+4coPC?}ZoDv#lE!P=t`RrdJ&mrqd9KLv?yD*K>`itF9vB2anJ8
z_Q429cYec$W1c{rpX`x)BN318`2Jnab|y{v^1p|BvpMk}YV*`HFuV;K4i_?~-s#Vs
zJC|*H{hp^|a650I#ho6r<rYd!c*I8QE}zXc8Qi(+xAHfPb`E?k-*Qwj+DCIuH%IAL
z8e5%gz}sSDdeNr{ZbkDeH+{Kg+HW?W?^<_`HfLj*Y*+{v-oU<C@&bLzg(!u;=Obyk
zly*npD6gwIiyRe0QC#zdh)yl!f78!8G{cCcQ?iY3+o%U-%{wPNZdAKh=T2SxST*}j
zyxr}shjG8yfnMxc2u8J5o78WJ8RGdk<kZuB)^P5uqpQ-cC66!J@4TOZ)D)1dQ12Hw
zD-A}Z_J4<3x_=xu+b?sxU&{f9ePQN$*wI>I@_~C^iZxd>LBW39E;^r-7NoF2`-<Ty
zKq<&}Uo{bzC5AVO5{5njc}<`b9VSlk(w6@Ujpo*hT1MYOnkj`uj)d_e#FM1`47ypA
z{3sbt$882njTb<!{nJQnCv#tpXt|5p)l?ZCvw8;B&x&VB#ACzA;BZ0<^163jV?-O}
zWe^<4vilxxW5pJR6mt>vN$i@u$3$sojFw^5z_h^#W{S%&Xrs*Vi2xU8ar!#$(ITHB
z%k?HJ!f%&L6=^_?LdCo$Y@^jV<&=IQeNt6XPJnhCCTHZ*=xPI#*B1B#TNoI7MZ!=W
zl;}YspU9IxvMN+rysfc(VnJR6n}M!@Zk@B#O4bB56FoU_Pe&<Sb#uI?V^7(nb)$qL
z&|F$6OM$K2E1{TSYDC?NVN`Y1hU^7Ug%=lP_aM-aRZwmq#!W{TvN(Y{&lRjxLS8`0
zk+hVi1a^L!I00embNWlmPj^?yN8JJyX>b4@2+eMDw4ZE-HuRD(^-sOyW7*eMr|WA}
zR!$tSB$5mVFJUN5Ko0>PB?JAw#4C#GO*TLGn$G<rVgq!$oMqoHV*<d@QcyWpSzxnr
zNGKFkhR@F33T!oNq8Eb!!a`E~JSB2tU|onrhNoTcBP6`Y{Egf0tnC(U_L>ZE`kyL`
z#K{Mp9ULvKy+D9BguHjZf>$>n;=xh%5pE^u&tW_IOy|_@prx|l7zA3)F8a|KeKgKj
zM<~eL(r9wXvsbyQebGWNpPl5S*ALz$Ab>SH+}X%0r&JzZPM`1njhpZHubr%XXaUBY
z*Iplp68%Rt$tV}I*QMYpj~CyyP(ROmVV4`yO2s9}hu*gmZf-M(Ij+YSt2$~pa6Mv%
z)2tI*@;gvIaYck;VUqJ~qWB7bs35s~h>cSs3yH<c=2_aohAAC%M)I=+o&kj59`qvG
z`z%!V=e^KF>gRZ`D5ckFwqBIs>2o&yZ3UY`t>m{vh5^gloQj)WJ|GIIT52z;H`M&_
z%Z?tH>Pe1<p3mNFM<w#s369EKny;U64g?cd39h56LNeNySx&5h?uM8#WKfO@6!n$)
zQ;WvmDTCjuBsm2>-?u}=l?*NCz{P9%Eyaln2%_iQd+Z1D?vHG!Wrge+jI_i&$eBO8
zeDx2^zZKfcQC)>N1pvzR+KMuX4l#M}f`l1f2sB@>LHZOnH8Agm4|#F{?0l)OH-t}=
zgCUz`rpK=&FKJDo!5_f_!fJ>uQNW}CK_Q{+yC4=++E5ttp+rOnr-TPc=P9(=f2ndo
zOvfL3Wh6B9AoDXvz=nRVjMBy<`W>ecoSNa~RW)5OX$3I<4&V|)HwLt?1y76Qu)n0q
zY!bRhVDw=BO)e8JAW!ah7{JS}G}!<NfFbxGFFs(3)VN6cjta7_R+fE&6xp3b^g`WF
z2yZA!-mgcICgg&yEn>6OTB0L;7vOw26{rLOT@yqm@KoT`P&lTIQA&iRT`&bx1X9NZ
ztJk~#y->wARK;2JY*&C{)*;FmehfHO@8<<$U96|^Z4Z{P`@I3-dh|OBbL`BEzl@m(
zxQ!?y0Ta9;07#e|N+F)s{M3pa(53^^)KiKONbbdt!O;Li{n#HkP=moILvI^~JL&Jr
zgOi_29OUF&ZcYCzFUH(QHVLvYxoG688kr6nT?@SqDm5TYTpzCD*XARLTv&cEkEW%J
z<#!sBIYZcyG9+3OE8L|QWmZyFrC`;&BM4VPRl2nLBdng@X4}gpG()+1!&QMUpihO^
zWKK`UBpI&;*NqHEehHZY3_sO?+2(*jo1rJZns2?o%i{PV)KL2>uuSL?4@_bnG2)bR
z$f$=S8#2jsd?Q4WVPWb!5{afPBS1kW&;(E$!?Q^P`_1X!&a8va0eR(?p@(Eebxo+|
zDfzJ*oN2&O!q0Ezr3dI>Y!y{%L&p-5j!Y6iBGtUco!>=MpcE!(To4La*(MLX8{Ve(
zD@Jg15RWdYH<a-QcAglx<_t(mMp6Z8RKm!EKrmgjA=_H6w}1v2=jwno+}|FQ5s-4J
z91ni6N~o#U3y)lB<yeh~Yj@<9u&G`+Kd73R)|J(<njfbkYHuuT2rg_0C#n#GqNME?
zzNpdMujD_1cZKpMsl^sP=vVoa_ESQ5igF2H<0BNb>*`O!G@qB%IPLI})a35cS6=<q
zQX7}56OtCzxe!X@uTuE|HCCLP$Uj{MB5zhuItf|N?<_;aVz3gG!!Nh4er|$lvpN^p
zXu-Gp;kh?ED_0!SeKsw=A52%T=G~3cY;8xkUUqkpD)z>6ax=Y47c~ySF+;K9q{b1%
z(FK4gmwXf1cwq4#{i4kZzU2X0^Gf=7ept&VfUn-Fh<oT&VgdqXDW<i1ClWrUDC`F$
z^x<b2WhDZ_R~ks2!R|r$7Hr)lw3{Ge3)d!zU!O>7)dmiD38wro3O8%9Ra>1c(R9Y{
z&%oXn7>_bc(vU;F%_80;3_9qh>Ps!YnsLoQd2bpfb58{+s$Jd|KozC7a^Z3Ct5E7%
zfZ&-OjmAQp#>n*<7jKo+N5d0*H%;OM#Ud8djl)_Y%rMB9_XXzz4Op~y#OMfiV~N0c
zv4)bta&(c#fa)31IDB!9pLV>sK*r1q_5^{^c^&<*#>^09zml)<s-jwCUz~!lLK<W&
zX(E8<ab+~>gkwmiGZ!TqRpkf66fpXsY$;4nt+NVWZx73~0?Y@8(Kih`>~+oUmtMC<
z!76x`6Z#s7<17~^D%B3uPDB`#phG>Cb(Cr7394RJQ-_09Hka!G0jlKq-IN=lG~Jn7
z_2tp|gdoP?JtD?K+ksMJs$)}zL%pbh)MAW|K&yG03zFfpL{8tGo0o}8FaRel4Q{`R
z+%%*7E?BA>lTg|@#*ZVV4Wi2vOr$ROu>4ZAuM14SDx?7nP)$)Bb83Inn9U%!!{O;1
z{l<A^kM3Usphex)pp)qr2@A(;aMO|i4;?;Yc^Grf9BD3XCNS4Y`b31>w@KD@#tZK<
z*pGqZKfrHuVZHDlpCpPIxa-jhZja`jJ6kSJ6Af!-0A)ib_p;N#jNXGTHqcVtb1)XD
zxvqR7%hLHv>VXo2skT@kMtfSW7@_fN31#03hNPOQzMbR1lIrUNbx%>{pH~=SVks_&
z*~g(r0qu)D2b+p3XTb+kHOpGOd*H|+o;p@fJafv;_HWw9V3VnPFa-^r3#0sdq5**Y
zp!za5O^KJRWb_?G%M1inydv0q-71}D0^&1Yr(l<pFn`*BQw$`<RS&3UZiq@EtBeJ0
zHzwPyU6%30u}P+0M+2t>s*7wNnvUM0ZDOmCMQUgnMP3Fzm<HhI+#SG!y!0L6cOO@%
zyLHbib2wU=HU#bMuv%3qqIMDODiMqvi3M%yy=V;f!%xoQeMq5bPR-hyDm|p$*E2M&
z^{JSE!Ao#<v6}oa+KakH(>j>ji-<isM4Gr5l3WKQ6uSr6Y)Gy&6z!3o_y(aab3=8a
zSR18;6)_@wXVa{0Z@rkY3C71G5Pz2EyyG;dXhy%Wbi{zq;`!pZHAngu9JHesm@+L?
zEASmr^QoK&l4{GKypRZNL|dbAZb>6RE6rqhGl*jB)Ol#i)<jlKR8(OJ2=(-?WK0E}
z?}U*0i^-7*M>x!EmgES<1qPaBZVTn*`GK%af45kb_>5#%5@N696p9O+ugf2=A9a0T
zsFqp}+yg?LYczUI0rDm(YVL+3iKd2Ue^%l<+txuG+YubgG~Hh{)bp*3Es;r7J-N21
zyR$c#d$X%SuMa!qBT|{4_(WfX3qMWq-(DYbzB(~a8GUGCWY>r*0rf~rq+PX03&DnX
z@co|%Q@%5LbfMc5a&!naP)6JXPP1|<RmpladOpc^bof0UVW**C-;SbAEMTf5PT@|<
zN?b2FYFyM6*NpqBkY^c<^|`pq0Cxy0@cLiiLC&NQs-n$`*}An57Vgg<IsUZmmVup7
zpHDztZeCx6efU71vN*fRep=XvBInNjbh?Xnv;3)>&Hg%~-xmHl9*aXld3+%6x$JY)
zfbFbvkxRis3B~ADRTbNduRY72SgWcxSo^Eh+h@i!x@8`|ckaLV{vr)Ng{F2oJyrwl
zyq|L9ZK}3!aQ`HDIzN4Pg19}`l+Y`6^MSky`Tf){f2;`T6m6?@?{LkLzMP+by+AyE
zHe39o62xOD|BqqiOEqw}cy+fqfoI|RA6W&wlhL1}53ZwMO7&Y#McZxxp7LiT<zD!Z
zxCbk;+Co$1sbLU#-u1C8_9@|<C|@YD&!W<w@?`d89wR_LllI_E&%aULr9^nY&dQjd
zx0J@xva8?{gSnfu*B@%K%ikJod33)L>}i{MsKAw;8$y-IJC^&+_Qmsru7mbOj>PF~
zc2c;se8==&9Kb0qJO758a`7kVpLY7M1R8IowD502w2-E_&2{2QUU&ZSOX5+~hEL&n
z+X5)%nN^2BwOW<8hO}nN(YV|OQk+>~GpulKraI18Emc{LAJHrWhVrvsu7}OZ;IXQV
zv1U-tS1677boRREcgNNGWo&tmGW$ajBG$0JwqLB+CV<E|OB=ha35D@}MKCp}jxQPN
zbBOQgk7F?Snl8^WaR#OPEbn+<^SY9IKHhoW84QtRj=#JEq;$vQ<K$KP$_qu=>auy^
zn(8*38Kp9*<ue~#_Qy`I{agu7&DuFf@^($}<^f(ED*jQ?Yavjl`VmnE$cf25#kutr
zi1MomCuawf1#h)t4}7Jh^<j4nb?ugKV3fsnSj(OQkxQ97nL@I^6HlruwhK3`qB;nb
zJhB1ZhtmC#uh&U|a7j1wue(zHEOm)_um#VRl6>bbhRb$}^rNKlz0EZW-`1KesEU_T
zGqUalMmR7zze3aH1r&JdyUw+;&1!S_@`0L(XCWTGpz%8qZJH(6k|Q~Oh|a3DEzb;O
zoLb7_QSGX*+;Q5sH+|1?jP!-Db9(O@h9tpdoRA|6JQQb!8Onja&>}2P%N1GmAVy7H
zYZolj#Yn*}9hCfA^kBG~el6%66sR`_ZSu$oEb@IA%Z$iU^wpqQ>Q6)MBq+4w`N&Ff
za1_&s4v(+<>(}Y!<Ew$2i@CaD9t7YNyF?1(QDu)*I;uni;8$3D1sNz9^KLyf`+k8f
zje?vx5x?%imgX=}g%iC2e4Hu1FqKJWvF`O9nHF#z+FOG?eeA0o)m+8+$~7Zc0W~tz
zcR2w1?>F!n49|FscC4~e+<_ss0ual-=vD)%2R=%*h|3`Vy&$PykQZuwD2*D1_6pLt
z!xEh2+l!n6mZ8^Xlimt!tcme-C6>Y@f36RV)de~G303ZVV}=$h(Y+s5#N(8^DvOA@
z*#m0Y(>}x#Dr20L+8JJg*vIyWGTXKLh7@8p?Izm1P!Fq7BOU6gg;>&0p>pnJSTpUO
zJ8qyDQS#E}OGpT5I2rtl1krmd*;BwRZvP;lnSMTbl>;%I!g`{cexMTKWH40VeA87`
zG;vthb3R(^Oqs4P%vBZcUD^#)3&J$vRT3yRoKY5qX2mR&@hM~lNIGnd-AY8LJVa+t
z$a4>er8b+~I)jcQ`C&!GQlFn>T13>=Wf(^8%L8kxKKKb1C1KPz8Py({Zpnj3rU!aq
zd|=c!6T%;~2Hu$^Di8KzXDTxrExX99{2}Xd=m8JC+DF=HZnQdJJoD_BA8QeD*x70+
zE<%sV%2x~g9oA&2`g@BSKlUDx!M!ACS5l4nw`B|#^U}2b>xP9N8myowBa}XQ5b4uP
z|GTk0BHN4>&6?~)VYC#|Hs#H_>T`_n4iCjBb934{gpu^C(Pwh9Dpq7_%peQQ4<@^y
z+VJ%nTQjBmEawB-c*>NG_LF;SMKpPKT?}PPyIRjK)ro-{MQc8_VY(fHfqqo-5w@j_
zmS(n7H^iv<)Bb5^s;L<L`NbeoCWU~qO~Z}hw+m-LOK0y``Rq1r{rkHE-z2m^mn8$R
z(XG3{T%`v@(R??+txVv%1K<TXArGk6=phtD^^S_oHr0sHIpPNByj5F6!JE`da;-N^
zR|J0Rt}cbPfiCFY@3vH=$}P}`=iI!taQ8hLG_Z&JLc6;}dL>s7dbab?pS3sNq->VI
z04VjYWYf~-aHg)&3Y7P%3DZNk`$e_~bVNO@*T^>i$6=(6XY_LTh1%Is!0<}~%}nH$
zvPup^v3d>IpcO73ig)HOR!23P&NGRwD!uF>&nqnvgwv3w_Fo|RCi54&#sOjFiZ>1<
z-Fn7clJctglb*;OP-DdOD7H9-1Q^uM0U-Oa=|~`ZT2I#&ME4_>5CNDUbx3XaI*>y>
zog)CC*F`EojW?qVdj6iasMjoe@|N(tyyp$7HeY4len35+PleBb(67+c^cfy+N(wj*
zXC*BtIF6H=BB$W$gX%l>zBvz(LcdE!V(An&f>)S;2NR9H_v5HwfCvoX$I=3;Bz0x|
zLVemE82_|GCy#gYMsj(ObVrO(k$cezMwBdqpd~Ik)4{koj2xN=GF*Czmb>{#Gc=Ew
zB-4~qMat(V_{xziC~?{ewp;n1iOgAohY~OmY8Q_Wn%?eEP>RsyRKf3pc5J#_4m~+h
zQNx#?^3=>Ccehf+-jTC$Tu;cNwQsIbi|&_M7Rcf#FV6Vqd3B9cSRt!@e_lH^(WwxB
zF3T%QTGzY2ChA1AS}7iP|4GV6qM;rpX-oVwzh++jo$-()k+)&6`v}(oI+jJVg3G@(
zbQAo<K@QHl7NkG*6}*&BISk7vQw&FT5o2oNVRF1gf?DS{(;J}Pky}@^6`9jlG>|!D
zF^ahncsgnG=>CYhL7F7eEx{%2qs!Qp(AFhJR#J$a0|FfAnN3^ZI|jFbXDade7p1Lv
zj`^YPbW5n@j`8HH|InaDypqsX3ZXKOa_3%<IQxb>H#T_0qb4!Hw8h!!9f`ehtDAj;
z69W{XFS`?i286V$#<w0OR!kGPq8~{o6Fl!3Gct|l<BwDfn%RqEC`$84m?i?Ki1=|w
zpt3{h&Q1{^Jv<15-*MrlOm+Z~)LunQ9$P=oa#kV;2Qm^0uflWW=8UlWJGwuUSW&^V
z7kQ5r^eCZwV_rpDQ8D-n5b`Ivw1cD^9R776i&apQ0LZMVR!q-%OF-I$7>s1Ad`{n~
z8PM>yu!G8<EdbslgyU``9dd5A?5JnSiBauM&{QJXz1#?!tfdz$if~R*+Gy0@+$M%B
z(<>&Ga%>&wkGj2cFu5ScD?ZzDWD+U6eZ$b|?zO;A&B^vuNXAdq@TVnEU7}|XyU*63
zhBo1PHWSjx0+OPjr*jaL^kto73ljqt2aQAkcykH>c~(f!su7Qd_5S?hOVJ>SlKGP%
zpEwW~f=jtF{Brc&k3W9x%y0VPM9>y&I}hPI$e*Z`mTm{>^WZ|FVP?Te><OY<7utc9
z$e|oW7-(ccpo-cxMd|)<AmlbeZ7oWEnq_VpZhza$A}f^C*@Tx>MT!%Juv0P^MST<o
z$TnaWfU-J8(6!MmtC^$^SabLT??4nv=z-N)5D_6mu@m}RlbzGoTt2f)@z{yl!n;h8
zcV>+{`8rg(M=RNWB%_ue=#9KAYyK$d#mDkm8-<DuTP;`R3QvTZN+_y<A2N?2#e;QD
zHG*jk#M+KN*C25u4iz5;B9*359b8?wS-VM`C|ol@{IA>n(*nK$V%4~FFD8j>(HvYJ
za?SymKoX+ibVGVh`jsRS?4mMB?Q_TSITr#8yOE&RstY7II!utxv3@C8m<b6dCpQnL
z&wDq&!?L;HDjg$NE{!@P1Dt4mw8QdBN;2QqDEN>4S&SAvM2THyH%H`Qr_(L6VVHx=
zR=+4yNvp6XTz&<EjkzlAcpaR@p#z_Lwn>6f9Bp%*l=P39DDJa8y*(L~1E?9Jq9a?<
zXd39#^%m@ESCd|Wt|?#ifiOm8nVoX;VN8I-8^vw<ORc6>v`xUBM{mrJ_sn#19P%ib
zQ!m<5@oS@u_^~S>+G}PDON0%$V%{beB_iV`QdF}om3*({M`~T$N*(%^%8HQHXRmYj
zPCVVCOy)$#&;+-O-?R#4MfUPgT$1>jpM4?Na)DXuwAMGIPAZMXKjx?VlPX?>Wi7x|
zC8F!#$*el27H_Xtt*{E8S2ZAFVkfDx+B^^k9<MZr_#3CfUipAywwiCzCPTHflUTLw
zEt}hdnmJALDZjNjE?l0(Xe(?dmwU~$aO2f0zT2WJd>15_Yvq@3eu_JIw*<~Ouw=&+
z_qhofe<B|}x8y)arA)q{ojmm5w<_Ze=ES9MVC8Oxid=21Nz>0Pj3}!`rH9MKM|8F>
zYjT9A>sE$;jYvPFfTzD~2~1a@F}chaC~;7d70Ln0^MwU6D$pt^^EbqgS;>e=m>#Id
z@*=$va#E%;Lm`4+3mW8JT>1~Xme`&2r03W4)d|#cwXN^??@>juClwY+_z=KDO;I6`
zLi4(`8bpb!cu7De6|Q9hxzTmFE8@iIXA5h;Z&Eo!lBW8l;-GUkp2~m>i*UT@5J&sK
zE;SIZ&2ZMM70iK@Ia5eST%P&W%1O&hNURWvNOG$O9?p?nrx`LhWEC*(=^xND86s)S
z8SF*OE|m*VRTpEBV4*l<5DW`?NueMUAF0S7<l~yYg3bHr6>jaU_?rpr)v=qc6mZRQ
zBnV$y%3u3eMHqvFi~hI~?*XPOcc5JZL`g?{=8dQgmUpnfZA&_b5ZN#dM4IB-M(n$#
z92to5K3|Q2e<u}HwQ{F*wAmJyo8F750}6gyRqHlFK?63u*b?u_+D4d>@Ec>4`w`Vm
zR6*V;B(R~l8V7pl3Qcg)EExxu9$isoL0w|hEF0FVl*Xoem5EYAPHRW|s_>Qxhsh2G
zFSpoRS!076Bl}og1SO*ARWzmqF;H6q+Nx&qKO34h`VCFZnD}F9U@zu%wfI)OZdGP1
za3W^AR~kDnXQ(5E>8`WENC4}eRe2fYxk0NL^%nm5)%<eB;u!HF`*#1Md!&%UN>m;q
z`#90Ffp|}YmRiw#{Lwd5Ze$zeD$BA#`=tKr7@mqsV`QtRL^~*wxEwjZQ*yTdevB5N
z0nI1q>_{o2hZ^&xDNNCqSY^r@>0x3E(K9opTCQsC-&t7ndG`8w_;&H!px^>HcYCW&
z#oG`|z;5me^*#ORaLX!q%ZgN&{Q5w{zqMRyYgQrdNLa20k9~mvctf~+MXH_`-ZcFj
zp~*q5?6V;1<E!4v)>!M5zaC2&F6JB)>ia^x86Y=0-5Z@cjI!01N5|~9HohaP*mb~x
zUu&v3T;VpuqeFv<@*(Vj51Q3zY%mTxeV-3q<I_$(tQ34$y!H^eqZuJj*<rp#t$hWA
z=cPkQedQ<5ovPr%0D{O-ySZ{3xt^e|(_Xw6D&ILfZ{9dB-@Nz>KYvm$UN$@ucUjQu
ze5X9_)x1pLI0Z<4hKsvQ^}#W8VPB_Fv-(8VT+@!h$rW@DaszH@m~=h);3TTX0i!EC
zntLEpH0~KJ+4DtimBPP$4sgXCh+de;`C5|&T1TGEuN~ZIp*vU-HzsCA=j-<1=<am5
zUbcEBJv%>%f+s5NXx>R+bDx_hk2a%nuz_mpOlfO5BB$AZ8~Y(eSqhlL*~4D1M37}X
zdySiy-E#u+ME?g3q*~2EECMe4O6+R*dDBWLvXY$N#kgGNV|_sRok})Uz9Vh=0RmT(
zANyOw=#=V%E;wY411-BqSq|OFjk1P<^SWrP5ZTE)U8np{>&?iiL!0{EagUwjIBRC}
z#m^K78SBgqVf-ZR_K1efEkYhSa5m|^)XBFq8&WEYyb@LF$KIaoXkp|kI{j=9ezqfE
z#+K3KwDji2j9kXJVBp~7;QaX6c(Hv3`to5i@o4}Nm`gJG62>wLZ85HwmzPhB0Fxd@
z?jNBqtSVS1e4^QVRF6(?EZ>DeMAvfiIx0H?EH_#K^BcEMXdTo9`4ouud&W5jrWlzj
z&_|ONo8a^Df(5t5L_9SzMoN+qmx`(#@U^k@-;MmC4I+%Vpr;9=iN#b=#HlgQ()lUT
zzA4<NVIz}ke_1h(2sk$-RDSVQpYHq-I67TEPoJ-HB9Hant=tL2;X8UF)@HvN5Gb}L
zJ&`cBo})<Fe~aci74m)0&AHz_xv{XI_H<&@0W;mPYpHINVr!#cP@@21{XSh$M@WDo
z!UZ9K4(cSbMGf&JfC};i@KRwx@WQW&npZDbwbcE1?DE9UaIw8P1)gsc=getTGg)6#
z=9y<>roj-^MF><5MMiX=2t!8jk(?AL3o~Gaz(Wt5$%Q@6YXCQOa~$uEz_v@<3>5j}
zcvP_$`K0e0Tm72N`(6bkTNX>!%^w<XQ*KgD-;Aq|C!Ld{232HC?6WxjqPkax2IF$y
zZ~NLp_z_WQem&d>cmlTJ^L!_8c@ijqia!L057XtvP_`e~76K2Z!yC47@6QQInV7rG
zW$$9_I^)@Q6yDef4G(AG&R`>yOqdD<p9)iv-p_VVu<C8b25*qtY(lp5?4%qkjJcA&
z!KC)Y8XI`P!Q>J)9^%Z+`qJ>HE@1GOH4xVOlch?p)}6%_)_aPjmkD>U^O*dG!*=a5
zt$CT@*(6YR{C38!bLm{h5q5VD2>gxQ!mpP}N=5~Hv|gJU0?vve;xs;{Z)IDK6U2}h
z{HM>2%u`nPRFrFX=RaR6u$Q597x<f2obxxWnBw1^l>7&s(%jVe-zJi($ozv-_Lop8
ztw{MR>^5EqUL;x=8J!R@z)$IXobef>g{9NX6*nN`^JQk;(h#DkddZNMM9-CXd#cO(
zLS@UJb2IEorD0fMP`Pufz01Otx6dlvu2+;d8&02Q*cFE5QK1_}fh9kcgy9z)6j_-Z
zufb9gKiNuL@EEFS+&u*8sbm_-4$vx1j{0Du2J&vExIU_tKQwH)AhH;JdO#W}#4F0a
z2Jitw#4@KoAUq<gG=1YPYZNRJ7|xIuxDig=n}?;~JicK%C^no;*ZdOoN|HFKNMzbV
z!nEQv$eR>I)19V8w+g;y^|Z+%ic+A0gyNV8wX4ONLxxnh<XG1c`wb?1B6Goh9KF|w
zv!nYlyCir<@NV>bVEoCfM{X$I5^)QEu{Z7%<Ptds4@{``s5=S`6^tUCy+E7XdwadZ
z18$k&^xGK#Pg02eRG|{i=7Ys6m|pcoR}y~%$x34aiFg8I{4b6SVrhomGY>uiyzB|u
zydOOF$o}C;%TC=uuVwE1-3b^?q3lL+=SkScp~Yldm2yKa+f*v%FU!96HB0_ZmAeAr
z;#C&wWUk}*GR5&1Den0po?f<GHchF)*GM^c9?)-XWBT8q-sG0P$(&-Q8cjV}pm)=s
zvEes0dwI?}dC!Jq$u5@K{O^~x_FfBgD=yyLEDx(qa))^OI7Q*#vr)cNQ8VTyO^n*l
zIV%HW4z}EW>__@!&KdyINkt86kVyB@@&)sM)FPBi5~7UIRmY-zAacqbOEl?-x0W3~
zO6?hIA;c{g;{d=!SzTS2tp<ky&@K@<4z2y6D{hDqR|BX}8P_=uy`7oxE`u)qK%kO2
z#p9kA+BZ}Od|W=ufeZruq35L!vB8WyHtPprC9iyOzTDZu^Y1$F28PqS@l-(Eny7!W
z1^2e)%zQss12O3FWv(Qz)qCY)^zZ?DXAIrT8bB2rD5}D%<wlS+uYc3^`Y61aw%Qhr
zx7p{50&_jccRh(V*{<HI$)el%{M7LjnX0Pj+VL(*g%E<<xQ>e%;)d|WVeKG*y)LU;
zjUx80%jQ-}3qUWHMv*Hi%}Z+yKj4R3zLHzU5<5}RsU`)%GTQWZcKWY@;(?{>V4HuZ
zC?U-MZi?DjS{wgcdb`TM=<P4MzfvX3^HId{-{o547gkb*#2}!G6r3w)3}f$frq<WB
z$puzFZ`eA&L8NQEPdC)X`>wraZG8^pcm77oOEy;PU8wbE-o0L3upKnE)<q%KFdaq?
zqZ|``VFQDrw?`-vhT6rG*cGCZY~~5u$L__!m}@Gc5u{=W&IqC8X_zGJLs@ydDL~~s
zh5+a;;;??Bxm6IPmR*&lNrb5d_{9R6Kw*RuY#Bj5xclAqDOp9Onn)7+&k|}=<_38q
z&9<zge9b3}{BgP;&!*ixmo8~1up~^BtW&O0lY9sADt<C3W_+_@_Hc8<C`k%T8fQSg
zkk4nPTErZ&NQ`?OYtUi9BXJiWC)D+fs?_&d!0Dm4j=JT=9yv)NO|De~xW05?bnHGF
z9xaFdx`b=p22;MI^c4a0^;^4gI#*lqo*0m1Jpo!pVS=hnNp-P@^uAR8QR9af>1Rg^
z(cpYO%Si;(o2}0|4~wc)Xg`{eO=#hwT|T1}pF44P*)6#hFfLzs%_mU<VeR3y750$R
zIwcoxUz(GfJE2MX?VTU%)^qnrxokJ;Cj)s=0Jp283$M3nNtw{8ahFwdj{OCp)V|w!
zhDU!9bKW@Xi<-&#h`bU}RY8;SnNy_#XIg@7t%Pgov>e{S5+wS?S0GW(A}IC6LPc*N
zNY!})uweQUaZuP$zl!pRiGpJwk`RnQ%qP3_WB1l<$H4`c8o%fE@=J<kSa*sX;fR}|
zsazqC4*5!j+()nj5o*Z`H{8h(BNZ|D0Ic04BMG~NjoXxI-;T6}&tlXpn7=C<93`)o
zvMs)_#?tA%&g5k*zXqnO2t^mGr6z7s&}=cTps&SWWY9tTDk*Kw;xbRET6G1cW?C`<
zMHYG7hA?8t%rjZvnM_t59m1t|s{1YXTJ>f^``iAjoh#gg6|63G%%9izxXGleUCZs^
z2v*q3HR*+{87pW<{QAQ+kDiCA)Tk)~=c<z@ESMIh0A}H1i`rMKV{*h3Jxr<{`^JT}
zJwtYj+O@@r&+}m;wrQiAtb8Rd#hV)K46s4wS|pb)e%p+>BZC!`S)H1%ZNpX$l-sJV
zNw@hrAQ^Y_q#8=o`nY^RgBv-;XYmZqB9^;T+|jOT=SjylR0tz1%P@;!Pgn@6##%58
zgy?V$aQmE{v?>k^H4|qFIx`4Cf^5q`txLUmM?Axi+q%~fRBnIj49vr&)!xTK*2on%
z)8MC$+s(ug1*o%g@KRP((hwY@t9Ba5^Qi(?#<b03fFg53DE|ZfV`W2it2|JjLXmaB
zdU!!v<l!Q`<AeS`FYpc*6(LK17k38C|K+Vga~mf*v;Qequ3F97mWTuCd#0A+7Zxpn
zpvm#zS<>Zoxc>|YEHGl+2DW)|%9%@`Emr5O3%Nk)+l{JmXJ$y;RE(3jgm~v?n@%p(
zi*YR|4@S8`?XZdE-e9Ne4Lxs{=MS5jHOCb6KZpdI=1;acY8WXll}(s^472(I*f2D0
zd++|Gz#v3b<>GD3+`$SZT7lMmhdz*;k9D{p8(V;Vs>%Z~R{~Vf#d|@9tpogI4sf58
zd%>WDgz}w4=+b03c)?qow*bieNMr)lv_kqJ`@=bTxA+N8dW+)}8MKAx>GH**O-dM*
z!yQe6dp@vJ3q94%!R;Mge-$_mMN@y8SKj0Cf^7%PF-(g~YT>JKrSn?g&NqCnDd8Ky
zq{0AtyqWRy$bI(NpfDLm=ot!HqHJp=DNTWK)2k_S2|GVC)=mIrq@ejp8x;@~VX%>V
zPiPX~El#zh{#8~}S8jjmxY;jVAMKg~dMR#wR;)+=aTHw2Zcn-Oio!HBUKX%zKwIGu
z`Pp4ote8R(oM~Pe6M63R>ivxsY;H#6gk0?*Wx~WR>0iHsnzRZNQp2~=S<x^0Tej4G
znsrW)q6L0_d|Z}oSWL~U7&OI$oQRhRViJkyVZWMQks*aVmqLD8w(Zg*s+4(fXnVG+
zkMH(l&%7QnJu<bb)$u-<4zx&jYAAOPJ0!qjH%ZBj)yAZ!bQ*W6mGP#2e;l$wS_V&M
zm})sr90(^PRgRSwLT5Wd>+z<9)3WU8*H?2~CZVX9!}xRg>vQBYDT7rsiI@X2t*X&*
zz@{$*4XHN-8%-X9RT_#wp=!+Oqwv{|(!WY`!~#kwPDl6eFBMCt!L#%yErh|I$8xUQ
z;IHd6vL;J#3CVv(a1hS9Hck5DPc?o7yihN$;IJIf6{?Av=Ct*bYbsZ$8tnwrxLPLB
zq|F%x4Vs4%>^`#}T{tX?PTpPOl3%zK*Q3C|@wiIP5`yuyF%MhWmm@IRA#M#7zVRII
zvA?_hggewrE-wahnnf|pobx7#ra14-q6NtwZ)Q4sp}Z$&sNOzr?d0y#Hl(X?xm`#?
z__}UqRJNMG$gW+p@mI*6j9uZz<lF=$?%_8d)SlZp%?2oGcC?iS5}@~X`i>K{`NcHm
zMN;@o3*pj#gKirBp=R&rjAiH*!qWMDkU7pwv{CU>iV<&<YS8Cs1;U34-8#8iM?aOn
zX-HO-lr;4&n1G|5ahNsU08qp?9rjSK(poX4Xu+FA_qqYtNvaE$VOuAmM@1%{YnkFT
z$cmu^W%o<8V)1D-4q;BVIl2@?;ifo173;wWpfOf82SrPDh|!8|#$+UkYr9O1;24ss
zJ`2M}_OR}#%nMv#BUVFgTeL;oeYKQpnV|S15Qzdg!G}3Ir17KE?XeyjSK~})HGtRU
zm7JFa!4f7s0q7M5%wzn$<LS#uKcM?Bcr?c5bkBhW$2;bPtyD5juJ!1Vivw{B(Nqxo
zL(7&EA=$@Vbw+1RIQt#`IuWou5U7BPmtiQE4sk9U0!OoD=8b?*HK(<3!wf`bf7I6h
zgXamH7FWm0EylZX@yc@m8u2Cl?=Dv7AcKh}Wso;2RfvWr(@98>`W7G>r1J5`FoQHK
z+_aIg6)rNYnKSSRe4hoc>825FG>^!X8C%agzXm&t(1oi6w6>zpF>{vsaW7LYvwya7
zZ`Axyoq0;AX|x${8rq6JCeL0NnSGR_!(`j+L?6Quhf2Zg+!}_Il0;No!yn`(gd<YK
zf2($p8`)#4Bc7+OYiK$P4Bvml?2mx!^mXatfrnel@$YD2%^J-xcbwLV9rBZxO^Y8Z
z?boVHKH~mCa^^2Qpxr8Cac5{AN(C4)?_oNO&L5qA0*)q5;jbdbuIu7Ysr5oU(^hby
znd@QLB^BesTGobqW#C*&|Az|pMqJupm0KubE7z0e3Vo{HeT=;P)b8WaKsHC$SBW1E
zg{^1fm(2i02=tF>)>Xc9d*@otk`v-OCH?1-F*V_<{usq;|D3mHL&um!nAnSt2M=l6
znUQr|@BPKyg+?l*`kpG$hpGtb!7Mm<E$r2cIR8-BM3Vzjy3GdgYkGpQGN@o}aA6yV
zgS=j9#w;oxO^1)McylqE0OniqCeK|S{g;@B@aZy3tSPYd;6+Ca`Er2+L??7>r&T+z
z-%(`^i#C_)#R4eBMWfu&;eMRc8Jy%n<D^q9i+KPE_mjU`3NXl5QIZ))KbWQwhax_m
zN<(?r*XM1wba7^pku}+Jn(m}F=5q>V*is4jz{et3al!O?sNSI8C6mX~xnNvmzEMi2
z8hRWl@g{#1p+Lwa#b_Mp+7W(Uv3+D(%0xCVp6on0h50re!~tuwUL2W}&9RGfX&yeu
zX8WD6s(GP4DC*K@(a~kN%11l>sVCP)n(pe+Y_ykF6jdaiPHPlogBfkmLeCdC%4$E^
zFd+NP8MmZbki#w6U!~rpl;mq1<NMfpLUCI)lRNT%lMYmK5>rnj)|hMidm5}8YSnSk
z$2TS#iuU+Qq$Oo3<_QX+jI?fXQr;dONZoj`M&#KqJEuz<Zklmw?M9#Z91C-nN5~d;
zh`E!ODdS%^96AT4s!aqOVD=^RfeIvpZ4UEAwP7c<Y-Dp_=|{czobD>K{$a>uE!Qbp
zoz2ltb9<nKQ@cwwbLPSqlEpsW{G)}>wzBAW(HeSm)wpbi;v3Vmg2e4kR*x|=0uDMi
z69N)qLlQyjkWdJC!VU}{@FvmNAs5F62ZJ9==Gr=MfVoqR7T0!F5`rBG%l2HlJCZ0n
z?{KuI(E0`7>N<9VbuZ@Tnk>Y9NH}k~wCC{Lqt3|(F4HM{2M_A7mGpx$y-8h``LQ;(
z5xQdD?5jPNI%tWMvm9$AS~>hk5T}-nPb+&eSU-uPF^wv9AQ%a*^d+Wn^sW>Z5;gCH
zlrLClR?j(x71+&*uI6Mv(99#bn0J`^E5?eA>GGr#g?>F9=DT2JzpWu=UIG{ZRi}Jq
znU3bSkUA;>TkeW2C>07HV-_eitS0noW2`3~tn~N#B?TF?>49dO7_p&tY5W=G86jHY
zM`Av|V&TGfhp~3;1N-+7?=&Ji%qyFzTdeyn%@IoR1)h9*rx8iTEj<9WAKdnU5Iscb
z2eiRaA>d}hy!TvjQdzxc@co4?tXRA2JYE!53o6&|%aa@&9L-)|4kd(LWx6{y5f5t!
z&{gz&YPr}N7x0nTZ`9b(O8w=2%QVk}owsWYyukrY$0}i*UvzV&Dbn{kjDb-1n6xir
zrmOT-5>`B`)i-}ibh^^oUn-RSWluF!wuVYu2al`|qJgRvM!8-ZUOc}-R)4(B)tp^&
z-6dp>|0~W;^ql&d|L=~o<bP=j8JgRf8ULHCi7OSUf0#l&|6vO8C;ZbCQe+b$0s$;v
zN<8{w*j2sO?6OKIpZK$_?rA+mZC#9KNeIYwlWyDNTzkcjT_gNVvPLv-XYb<T<6-ae
z4R;JVU>)Mcirp_9af4xjamb0N;H)24!oUIsRr1#p(pw@G8(9terziCA*AoiKY(nw3
zgo~}(m#>7rl{u_~$?=1RZ5KQcBbOGKQULLS`L)=`9%PVSOtVWk5OG#yXS1b7uHPrH
zdEu7?tT3AsMg4Bb3~gGtm&}&qzMPKKPGXCwsL}AD#U${I1Y~`QRL%6%v#MFGqAkEe
zk?azz^(a}GLtC18YAkuqGwMF+mUfJY8tS#jRMR;ge?Wn2h8DoqgBQc&%lpcHpNHE(
zBXD-Ho0ISkaL_qlcEb)IAd+k_LrO<Mzd)6otSOlnO?y%b{3wSpQvbNXU>BQt&E;3!
z^PoVk08*b4O(2l5;vY4!jiDa_INLZ4Q0z+8D*5#i-iV>a-Q9GLmQ;ES394%H2Wve`
zq(T>Z3UM~Ihod;Ax>~zp?y(klRCL9^QDra!Xjvtdq=NLXCFD5HCdEBB1ly^atNIU1
z2wK&cNBR3=LMKb~`9$O+b8d}mvEu282I4Q*QQFNF7OeUXs2QKBylLYcc)?V0=uW=#
zkH*X0+?1<+{uuWF`<UVvKIRVw=1FM$Jhj`J=TuPsQNIy{{mfv%c@sberM$5-QjrmM
zq3~dRJ<4PNDds#KT|D+TLYLl2K&zH$SLM-S?mJ}_5kbwgkR$^`Q~OGxJ~j<logTcn
zk!};{@3Nl603GTw=039%x#wkCyE?KOZ(^mi1(BBN*paaoD4WO)q4bMFX}!kR28<44
zD^^eF5+kWP4_)%_WxM;~%xekH=r1^{;vP$x;YaKX%URQJBi`UN+Zr=RVCte?!r~Lt
zJo-kI(Zd=ISmc&=lVai|WuI@;o$t2iV^*6|D7L4Yk-^OIvCg{@$D2e{ww5Wl{H`4r
z01YMO=P#@?;{m^+7M`NzHuwSj4cOYgKud8eW<yzgE4J43k^wOpbY-eWq4KoWh_7&~
z`c1e_=jWN~9)k-Mvp9QS)8K!3LVv+ge;=t_Imv&1{6~ZH-`cj0PWpzH^#9z;Z6_A1
zSxJ?tIlDmv0D_$Uo!tLy{_|e(kpQ~!@2z<NmcQ?RpD^>Uss_&HRz`H@HYT?Jx4zE*
zTmRwC394mzaS^;AYpUq5U?L#Ft48l<j=*%)jCoIOV?SZ&(5l;r4&XocBhgD>7vwJj
zKnUl53PS%^KmOVN$F2Q;4D$ceiDmT*+YMHPpX=TL34eZveX$5@{tFVJjAAoZHp+dc
zKfwM3lTK5AQEBlJ7cFl)u3i#F!W=e{fSJ4?XzpEH+h5nkFdeu{BBtgoGviwU`Ge^6
zJvTh~c;9|DXc*eY?CH`Yr`kE+!NeiIp<Bcq*TqWhqiWs&BWivPzX9hw`6HgNkRkr2
z$jK*4-^2M8C_~d4H;V3xx>vI!cKXu9KWP`8kdz-_FcV4(A>xQ+7{n*cZWu;FA(^T!
zJwP&GCh|v+LDdQ+kwRLI)0hw;ls~7MgW7E`DPZk&|MJtpp=Q-g<FL<KlwxwcNslD>
zfddMYuT_txkRCj6*<x9C4=!osi@6tjObFOH`#XTvkO1F_b5<N_co?RTc*2C_ivD*+
zv33GO7P&rm*uC?J0pk_Di}r>@eU<@3L%V0u5IhBRp=YFRd-Cu0Sc;v?K5MAk)I2x}
zp<GS~JOqEg5AiNxb0F+_qAB@SE@*XjDs!_8Cho+WB(EWVcC;Y-EK!H2b6gC2Mz~Y&
zK5s_)1aWrLC3hTu%(jb@)2m@)JNKu>x1t9a9f^QSRFd2q>BK#5*`RSwy6X|FVVbZM
z^}bb}Zr*kdp1<*IXJ7uB9K8?a$`8yr`G&$bp5*s%3kZ&fXQWMzQydi4pv6syIM`HN
z<_dXAI1W=0+<Tk-G|SaVB_TwOL=Qz=Sgqxi)vSKbGBS1uoPvXr5~N@EUv5@$9(6EO
z7A{hIim_ZA*`8U|Hy@|3YB(E1mUF>r<Mn+Qp&IdqC<>C-38Y{k0t|K)HA!GEW#w~R
zdtn=8VI+5iFw0LQ-&*He#WW%S_-EmyI-+YG2@V7pWx5Hy!rlEF`004aD@QQ8D}+q5
zzmBu4J<L<5=|<S0-FPh=9|hd8PYnB6H7orlSBM~5_$HswP2b?{U6A{ncnN-_svrT9
z+T;Oel=*($&&7@<V$Q5~(pPTD50`?i#$xYUOe%}-Ju_gGOI3DRt@no1g^0Wk6n5?6
zKqZR_LkWW56oAIgee?cux9qiF^G(<&nSKLqGa{k99phA?q=i#SW5UF;VJ^BiZQf;B
zy?BD)<X}ZKoTwANY;#(a4cD0U6d#8X{KIXTHU;>RA)g(RJo5L@*PEW98@U@Qi3kpK
zvy*uFB5V2y2UQ$>&1VzL>Y9nU<4TwY11sPqj3`%Qi^+}5o}B37;^%OCMOccI2?ASS
z;)WW>YJAfc=0+vV404vf3J|XL43;%0mmF;3P<9pBCk4E{u`i;Dv@VkOH_TgwbjmTc
zoR-!$h^?$I(}74iYm<T2J+q9RlU4~$ci{7UzHNho%mxi@iGMO6?QiYJu7K`kxCUb~
zt^o&ZhudY~nG^dCAR?SC#cbE+6c&B47KR;EHzCcw@;d8^;VGyn0NhC;6OfK?3Y6(L
zr!9(o>?d}C#7MrG_UidOmwSoqButpR6E!03#=MTvKU)4$rE1-w)#bM2+X^kz_?%9~
z%1SBQOfS+He*(lr2aplzrc?rkPsW~#q(WIIoX(Y#x_FfW@DXG5S1QNy=`{l!ySwjk
zOrhqwdH7e>trs&UTu7I1Q?ToXd}V|3`7A0%*48YXVInVYVkcHTgles-C`2ma>TR8!
zf0?k4seLOAj7^Z}KPo-})ff{t^xkNi<xN#=rz69`4s+Llnx83a(j9b&)6S-s7qEt@
zt;y<({xB0X=dUFiPu%M&d$DI`C&0FS%`pTa>pELWbg>jVWBWn6e~*F4)taUzS5PCe
zhP-9Qi@$3{zW~AvG*(YYc}nhm@(bSrTrNbFidcMzI?O9~Zud8?lythXH%!LRj7)Fa
za2>YfsXBp0Z<r$|n4DZZ!Fe-zOxpq?H23YCHf*Uk_EVmye=X1UC+#!Dq5*y*xOrNL
zSAmJSS3B4!T_<C2vR?hJ_!z|iZkhj$P3%u~qu#tW3mB>)VhY_zJ7D2m5iRG#kL9m<
zwtV>c_<kvK`@Zktfc)vf>Eny1r7fu3&EdIN0sQAtSD{d8_r5|qxGFEQHtvQcvtJT2
zyDtkUGKg->t8)8J$_OsGNp!#_{@6w=Q%{k$4zs90mB&T;nXF#Ov~aV@BC~kSS4Ool
z215gT2;V-(r+Q_hT+^qqAkAI*7&C>VRC9#$M{9U$R{4m#-xDqLS<ivvhaKVUlfuXg
ze!a&cswY3y{`ZGNU#;_>WiQ>_3z28n&28@o`nzlvAuP((`V(mgyPuR<?+u__bfW`j
zLnf%@l0NHuBV@64G35eHmV2i{6VVi^@Q_T61XLF?(R^i3pHCN_>g~a_zyGFp+m!og
zxSOZRFbe5b<5`Yt8t>e8xwDA{n+l-9q>yzd33xL9IvPip$&6sU2QgFz<NODa$L0H<
z`8fZ7`GED`%7?%CasLtz{{W2qTk#NPL3+gYS2)Q3eM$bun*T*Q{5SZLe<K|*=s+pN
zX{i>Z{vsE`IXL801mtsc7}5WWlBgsIn6>&Vc98z6iT?qq@^_$r2diu6VDmrc|3oWU
z|3gW9*XY_i&Pg+JQ^KwQNvy-F?^lDtaMkfNiLgO<aHwmUD-e{Msqg*t5L0qJr{uA~
zWOk*7&TjD-F~aCUur;{LS!rXtx!d2Jhdwl>*6J%0Phq1>9-&+(eL_P6uU3~AFZ|MS
zgoDn^)Az?(=1KVls9r@$EoVlPk4j3#0M4-4NzgPRfX^Og;1}BvEb|N?h-Jp2fuqO-
zi+TX@>gpd2NR}6u8PX_?0)fla41A;S5l4hf;Fu_HC%QKs7+eq?{SVK3+N}lW#!90l
zVotIo+Q8j1t;h>Bz23d~S9FhbLd}JN1dG|UVfjk9tmM1H{<;-=Fu8!;fN=i?(q1$x
zX`=ntVxf6okN_!T4$67{udE|`9`><QcyYJvvv&%|8;9_}In&!Js1>E&Wm&{+sZ~LD
z2Jx&BV?{<K`XwTG3vdJa@nQ&Q3TD6}*_0RxvZ8rwd}&y_6r#HTA=b=LyX~`dB(M7h
z8u@D)aae6Amb<Dmr*q-Ar4OpLKisU@|A(@73f47hwltS*+qR9pZ0=>-wr$(CZQHhO
z+vwfV6<u*obp2I*^Ig6dU(A>}Gsnnh_<r198QAjd8HBP2=%=SoanqX4fM8PRR5!De
z3C&tT+?tmudfDzZ#^E|Si&B$G#w9DG*|)2Eb!kp7E_V*UeXwP30TFBW3I#U-U@;t(
zO~cVLgRvJ05Yv`>Dv^j)if>r93&gJFC+1q(Y?+dIqgU1RTy?(mHo{WZzU=%yS>0}a
zFtnB^Tk+nZ&D6Z0*>Z^L7D_~_P!@$ZGDUg#)wHw{!f=wRNvtuDhb^(OHhaU#c`wR&
zXUbJa|7dj<Li7|C76um3M2OY7N>u$te2C93UqxWeS(!IX@0C6&N2}3PHWTZObj&mZ
z2}JMe_R8OGE!yQD(rcpMBId6alG|*A!`0?+ep10#Id^DIoAQa=Gp&2>BZUD2FH#dx
zCD@&3jQD4ETNJ$;N%3+rsbTo^a`y5P^cW|V5N;_kkFMXSvyHZdqp+%~RUKhl1M_D~
z*AM>N)SJ$kxa)xUXyQ7JlA!{*x**FKs4p&sA?kiufw4|g;qW<yy;q38pW{LNGFA2%
zJ<6qz+I^2Yb$ceEExWj$)#1sV&i^>4B=dG@#8uMS#XpuiNfJKifWEd~7NNFzZRNw9
zO+WhWc4ek@rkVE5m(4fRkG^~PVY!rkwSNVeEC|zWj-8c9p^o|m{a;%G24}7-FBAZP
znt#^|{(rn({<qZ2Wo}E=&9Q{tM{2Gk5;eW3?5U}4<d7{!Juq9GOv6kg2ZwgPhOH3|
zBZ*4zpmcrTPnBn(ixdsDxUB9@KFkqCSLM~p%F2q#Pwv?<I8L~M&arL{(xS)5S^k@D
z8&@BqMO4zlxR1nfzbvtSUqy1lZ5DM<g)JiOSz<$wu<^7JmX7>LGy*{_;MIH|X>^ij
zbQYrUfRRI?B7geUp&{Bzk+D+(Qp?YnHvz$gG@=}%;}N5CkEFR;I9TL^k0HpF{L_sd
zq4Da>DhvmIQ389bT#(11ka0F?_*(>2o;~Rht2zD~SaRNXI=BUhI@&Fc@GbX@Ho!iy
zAz1{QWD@-^7vJBPmljk2c>Am7fHR9+;A?0XjY^~I{-<x#S)I0?!(wPjpYX(B>?W1l
zCsh|GWiRx0pZ)Aha+U{c+uiV+fg#6JX1BkL!J-P!;+V1w^|#emZpL^9kzgnF?j2eS
zWd>DaH8=>ru0X!(0u~JsW!-6@c`8}=G_qGi&SNrrbPx^upbQhFsO$hxS7tjT-S=*6
z=`o*!yC&q@=BZbGFqeNqPaHcIcdRfKHpcMunWVk<>H39Jjhx`n7%`_p3NfeRAR^xG
zF;mj|58`p#S$-TO;Kp-jA-sNu`X6uZJzIwId_memy2;E3`70$_6n{71ZM+BcZ(D9M
zQU8Hm5^<<{B9S|GV4PT{^iOV*b893}{3t(JYQV7MIyjY3Hd+73&Nzf2yS6)>?_fT6
zv0AlH_jSjfay|`oJ0NcoFZJf*VTi-N6-F-N_{gjZIEl6Kt^nZSev853Or_I1qA$s5
z=@q~QJnn?z0P-xwr%>&Q&;tJc7=E7OoKW*1hKh<88In5(EoH-Sa{_U{a1$7itM$#4
z1A6mdQ8A6cUg{LbPkRwPX0ysi@#o5kQ6)Tc>AB2)OX3P~&h+<pY$320CJrF}g;qo6
z_N)STDG|tC1^`NpAKbfF84UZ3u-eOyIqv4q`I4#U^{O(L#NR!#dz0qtDR0+1ZSFBR
zb;gZdz|Enc8-79W&+uc;7=-IA-~*L{DhPdvB*Jzhu*V7!NLo^Jui%&-(jF|&S-Y%@
z*$M4^R_2%arUocGl#d~g;2tc+`h)(Bb5x)Uyw~JgV;3Ul+_DD_3WjIlm*ss%l?j)7
zQN^sBlD^^~n;Sa8bX5<w_K7@9*)N0%0v3uM2*|T@dg{A;-!1J;&X~LH2R^gAetv~Q
z3{-!BbePKIysl-JF^HEKY?r}@LkB<gTg{&RG=d+?2j7YB0dx^Th9NY2>*Xnf@0T4F
zv-^6aXuqem7^-p+8&e7lI|Q3G^bh5*WcryVhWvBjpC0&QlmR&ri0~mG;T#+5d76N-
z*`J1I+DmYw7(HP3Ku)0lWUd%|zE}jUzvbp(PgmCuE$^9BL^vw`9o$(JFcK{LVTcJE
z#Ie4Y>R^fS+M!4w6{Uo~V)J?gQg!2$bh)BKL*Swf20xh3duC?_i@istCzH3YK(>k@
z4T*vilxZa&*x>>4FNhG(DsUNSYu${AR^y8*EHPl1--0-h?4XbS`iPO4zz#<PpgNvC
zBussZ0}D%(kOgh<ZkoZzfh>ejnj%&(k2+*O)BHN}Z~NPDxjv48G9%nB%prnzgng6{
z?2_?PE=KvN_#bIK0ReX~(Rc$eAJ%&}8g(8v`!#$CIKm-DJ3q##BmZG$6Ds~5g|ncw
z;XmNqy`;2P{o>Yi$ashmoEJs<@LubXr?@*&ef(Dago$&Y`}R&Ks0FF_S3<r_0-Z;H
z3L#C%Y;X*lru75b+NLPe?f`JZVc+EtwOtu7a0ioq_6)X!j9N}X;nX*3Qbn5>JRR6N
zFtYv>aAs#a^S_vgb??}@z)*OQd*Nk?0>nNcyPWA`_@Wn)=zx~D>J_79$t%gaG68b#
z@de!)t~D&;O%OF5rtLrcoh8o4?H>vL>IT@xAGp$YjSH72dl!Arej?u{E?O0~XlOuo
zupCv(tUtA4&<7<L6MkWspr+l<Wm>OS-VO?<MejY))VTu|?7+xro)R5A#M^g9{ujom
z+t?uRn?~y(50II&56B3-><kX0wZ#0#xy4n!9fIDB$D#V3T<wH+T>+twX?1zW0UU*4
zaDC6-l+JAsEQrEhF(<S*(Oac&a6q?&O<2m^UaE?L<5G6U<X_<h3{I{_6=trY2UMlF
zj{>dQ61NbRF(g|E6iOH#L%=!SD)PC~dC&8p_u~zwv3p`~NmbN=cJMA8mnRokBgx`4
zH5M~61$R`bM`iOt7>oheHwGL9dO0t&qv8FeYN=3@e+o%U&#GWC(42j1FDVQ&TOcu0
z<v8*`yXtn8rUJi$g&E|I{fZ<EYD6F2_@_(^pAX+*>=->Rj*-I#eWC~YNO187Vmj^g
zMSYr9yhJQ<U)CkOMGIB}WJ%SK>etmR$MGcaGNJ3TUgTK4K(}j|lT2NuMqg%X+uU7>
z>XSp2cSwo0bztW>I;oJMYxQYPLqP*u^oiP<0rp6s0kz6XT&Tw7LopgPRFt{)5Zoax
z?(7ePqwxT;GWYRf!jcy~e%QVT0cJ6LfIOTy7sJ_=V3noM-6qT&``>W~zXzrM&fhm`
z^dbk*MN8Cy<f1UPv(W6(%XX8XJ$pPA*Ic*z)@3M1S`D)BuaRwO$FYEr`{Rrg&q3Ps
zz4wg^EpQ~8Ds2fX2{aTaz)%nFWo^R;<#>ZP`HdFDM~*JzrtdPAv?mBt<~|`8ZG|g>
zi|?ajy2U9pG}zwt0LDzCib6=$nOJaB54?jKpe4=1;*bY7Yvbob@7o~TlArV|V@Yu+
zV9bgiQ-Mp`1IAIxuhwD6wNj&}G<Iu#(utZv89YKFBc>wo0QsUABl)!mEMOG<ZGeS(
zL3e3dL$f4eB4M{NCkLi(pZ&Y4IR({WwHLQ#{>hyV8UZj`?;R!T_l9B!6UWo0|0W4?
zzyV402_;7wHhKkG6CO51@wl`=W)jZJuD)@c+HkLfS7!F6KLB?avo`cL()Mjjd`Fr2
z^6NNc625hWh^;Dn8gVrHngyj~K4^@Bl=|ghw$Z@Q&{;{R`CwItljo+ql}pE=x)qH{
z03+GzDUP*4Y1Gb{Jw}~5u}%;=Fi%Os;2UdUapkv6k|KdAt|;`Em|Q$QOiM<Ka=Kw%
zVbB^Wq(j2s6&{ObSTIGID}+UnQ@&^5TeK!e`7mLXM>At)u6^G$6edvf3D`b>JJ~%D
zi!PzKRs9aiJ$MLh{#SAv;)$>;&O>SiDe)y2Qpm()n{C6P7<b21{{edc*FNS@f!koz
zm)NQU?cJ0tPUO#z5}txz^qc|O&>$!pmbX3qIJM~A(`&i7y9YTH-urtZhK}TH|IH)I
zliwN_!ygoK+y<d-hI<`%Q?jqR>VfS-p=Yx~YfO?R0S-(b<_oK|UAyEF*a(IILl7$i
z&P+c<dRYR`Y^s%uol>aV8ZMcZ&<SoaF1GFB=5#4TsXaD5NTc<1RF2Tcx#lAm>UFUx
z!=c0-N)^ZvbRpJW3z`6Rn<qx8ArfRH=$_2`%*v3pK!fH1mvLr}`pUcGsnS+h-YL2O
z-c&}ixb$sTVqYIDi_j84Zo_#mucY!x6@hP~8$l5CD+BEs6+}`=Z@yFmt1c>|dW3u|
z5)CEKlVC~q&uf$S814O1i<-M^W#-0Bt}gXedO(mcPJ{B`S^y*CWYFN<n2b`M;?jOI
zz-FR213sOtuwt+6xR^ZH%!ZW?3Hu*Lqu9(wQsYZzIr}_e(yPuJJQB7zli~5%!}MOa
zVSm($^rLmqL_G65Tzv${pnMid$#=|K{`k4qh`$xydl#LL3Mc+r*ssmO9=4e+`SU&N
zf}GSDh*B4Efu(b=+g_usx52-YFU@&)G86B=?3=3U`RUvPjl%KX1=+m2Le6r3vjjM<
zmKH^bo2_d2_-uf0Zh7t->5IajLdx?<cCp?-<#2zZbJ0D@<CUo)!SBj-QVa;uqT$tG
z!QoHW%^aAx@nt@G(H)}rY%O^*x@=lEJsBeF)JbGdzu2nAM?`RWEvNDrA+L=@?zreC
z8H_fK5UR&l;071hO2ZptT>)F6Eh|Mz){5Hg3XkBBupn6EbM&M1EE7PG6m*`#2<;tD
z@vP%@eZP~v3JQ=8ZOM&r`}*BSJJ=K`w3x-M<8-PYf<&=MqCVApj|>uztc~AwUq%LK
z6gdQp$sO|t&8tbeKDmt?u0x_OVRC{HhhB7#H>UpTF)!WZyO(=K0y#)qs3X7~c`TVO
zX%Nk-e2>FrdWyGHTW{Ci0XBTkzP$KLo>B}UrCxXc6U0c|Yy#~Byt{0K+WCNYJ1xtL
z8mpoXK@x~eQ6V91Zf!MH+QrlBp`!rS&?VlwvCjRT?R-O*Ra^|`;%-7lJZ}>Kq_Sb(
zoza)?8!*mHBc=)9Fz<N86ZEo?lX??5h8Ka&>{W8C!a?cWMXO>Wt)$ZPxb1uV-%pyM
z$`r<-2>33U)hddo`cA)KR2;CNB%;$yk9Dvp_Y>Pp=W$qO+ogXD0zGmvycvm}r>Iw(
zN($Hv1$qbKnvyu<MSd5Q;cYF2H)(#Gt7I%0_Sq*=h2ERxWPmtOddWRl0JXZ|6%^RZ
z=yVmzQ{`e!gA4cOl)HkGbofOLuS?BnbdR{ps=iT@Q7PVhxIRUTlhezqS!QGKn^*O+
zXBJsfYoENAR^2l`pp3l4aDDJaT-Ycdem|dEJ?M@{t@f=3REsOGr^V3ZPH-MBP#>yt
zWH|<aXm|sV_9s_T@Eq*1mrM>Sv$Qx7jpftAYGEiqA3rYMWGQ<N#nwW~jYT`T;`ZZs
zq~ROe@`y6U0Ib(YF{k_`(S+mLB;KM+qu|R!d%F|~*h5vr%+5ur$jrYDjH@H6OAceu
z)XE409a@zJ;wr`B5f?pj76OeKu1#zsL<>Nz!xp^^lhtSHDk(IG=2a-H5d&$rnE_R+
z6bR1CC(ZjyB2IcJm~94(M_?!PBPd48Y}&CDj^t5W+I-4UTJ+^4P`u!knQO1=LxX8o
zDB_-;K$V5pm1EjPiP@+e?JcBh+2E(XMDw-FC~+9q_-Cz5A^mw2xzyOsh8aGNOY!OU
zVa9t!AE?R2o-gnyY)!*`i3+h_01ye}zi4U9tB9zy#VuM9QB&%bb{b2FIT0v<zj6{`
z?Tr?m59#rh&yUQGVWvi>{t|HplUp83a9V~yQ(5Une<P5QPl6%as;KD6b!~g^xSbcT
zpk*CMrrWneZYv74CY{BhhTE3!MY8QjvUtT0jlQQ~5Rcb`O#lcqzYU@%&2FY%_j>mB
zdSgEN0)!GuO8@x#?l^EWg8)lq)em6?v_j|#zXc>FIuch9ydkX%HX014du2{YqHUUx
zh$k}0tkDOaCXpaQKnnT~19r8SkjN58pkEXe25*=BmIZJFu085V*K49;yQk7Uqn)*D
zG>Q1^4KkWHYe3EUxTHpoZrz*tSxfSt#RJEE%VL6k+~a`oaNvM3Qrnj+ql2ZBpFa$?
z5@%3}3x~s}DM6>Z_h?a4ug){pxVeK@a`)Z5Y+ehVt2+>#H~<s-eh-TPO?3;N5-vGH
z`l6^`1st-|=qTlUtP?WIfY|T@Q0i0DNAff2_oJsaf3poucxF#h8PQQQBm{|Cu7>`>
z)KclZDtbTiKJ=t43|*(0jLJ{yBUpKe`dq+Pq6c4Bjtu-Ta#!4%B-?tJC&*keN=>o~
z5ftjTlgd)55-NhB_pGWD2(H@WpN**z-jDl@Scz6=MrSV|a$9Z(fu3v>za9~+@A<he
zl^ULH2%DROB#6exhdm{<eh5+RQ)%muBQN)8z>JLsI#-6xh30@4I<zmdyFar;FfN7Y
zc+?F443(P|k$TZNRu;b|g0!?Q=37;5kWnJbi)Mgt|LK=GqJ=cxOfXK;f7kmqAsncG
zu}v^EMlnFUd+-(NE2%qTBwDd)l}w2Fkx8h5xWr>QDNCusB-d!L{j;`$U?b}BYsPBw
zTKpBE^0N?#PO-F+v4I)<FRCZxNJ`qRPD--3FK998w<G9M>AO38rAWza)c{((0hPz{
z?mXvpf9}(6CtEOW{%6D7b>j{5h*MH{wLjWlQ@m{9`2#LpB?A;+aJ%NuwEaa0j)VP4
z8udq88Xr)#uhf}RDwgHR#=jC6UBInvij7kBrPfz>{}%JtoEFs{1q7*dreC>vXE{lf
zox*rlyh@SRx9;UK<SOm>CEqF+ylPR}W#p6iO1Vk{f|6Rg)xrJ!L8o*2TK66B2;u<T
ziBVm&AImUDEpkR?+vfrIQ+ZtvL>eNcjXKBd6NVp<jf5HIoh=**Hx@x`B(vCExgXw8
z*|Jrj`SZzAXThX5n`#^2WO?!S==E7}lUS48&CK+td-dj~aDxdYLGn0}gF51oh@V^k
zF{4W*hHWW#*=9M^Vnz~^HL*^UBD@WVhd%bf1t6xY!$*ZGt{&R|L2ZZMd+dFIRR15$
zmL!fj&INf<k<t&_Go*Kc9N`1{XCJopuh+6L!138XtS>_n46bYwliuAF?EQ%JWVCFQ
zq`!+4fMp;x$5^Gt8h1!M+?T0TDMZw-HU{Z0Y~T-fg6LGml16*}hZd?@PZNFP57f)d
zEOhuV4vrcH>8_d_NR1yMp^$9%0cIb3`xZPQA!AF^+K+QouLu{^$x#^B>QO4^*Eee#
zdE7>Gmfm;GTBCj@*9u2_C(Y_;M}+lTHHgV$J*B>wxq<9QhqpWyH0pW)^WlJqcNr30
z4T?&#%dyz)^h(G2Qfvjmv!Qr(I%1HrL~{q3<XAoO3@Aq^7=4L`NXSw`b$>6z-9aq+
znC?2Y57$|DR+xdc*sAiqP&Qw**e-~2Q&(8e(4xRAJAv<)j$@5SqA5mDBgvb|#5z1A
z%R#Q`P-Vt|R3=n`?m0`UXZur2QkN?kHhMLsXQ%~e$(&Ww>U?2lSMKo9QhTzO>UI|w
z$#1s+=P&So9cn@_K6n%W0RT9G0ss*F$D!u`KJDFE>DF?S0pYu*_u#CjiPZVU7@ut<
zkH4XLt|ksm1%r6(p%~4XL@psS==-sodp*3<2JBGy^=A8gCsDR?qC?ECEo3A`06bD5
z`|D8QLM$52X~c3oOxr!7u_caYtL5zGriMJvuqhVKif9YLb-Q9H&*bs_;N!yT{_c*!
zA1ZZ)&|hT(1imSR5C^Yc|NJlP3g9>GMIodrX-ip_4xy?+O4@+I>cgzAowyrvi}k}_
z$-`ELtP3jH)Pd+#RMiu$4Ur;6;S`G?Z5HMzfXSJ3qwc@9@8})oWukz()rGm6Tcsr}
z+EANvl7PIc1n|nqw<e907hl@qk&+6~#5!_9QT3E_S01~8p)R&h$k8?Zg45imYH_I5
zcWqu_buBW34B)Y63}-{cCT}_7ZOKhiYU99%)KPOHRc=pOCPmdx+7!-`ACDYvy|oN0
z=_Qp6tLn~-0@b<gb^UQHh;-g+s24t)8pPvAaOO)~L`lgbpX3LH(M200K0dcs3-NM$
z4lW*ynUNl;oO7M0%6j7aQNsgGGU)Hg##<yXaBws5dvYWBl~+us(y{v%O@R=ji~d!*
zKU>tywAJ(%^uLfcd|kg|^ZrjE*|_9?LN25)fEXJq0xR=i`QDqXKO=-T)~_~~U0sf^
zab|4kO<a+>OWk{;g}=7*nIT$KYo{izl$E>T+w@raTbvjQ^)zg?4ZJr+k%93q;xX4q
zheQJZdPoc+Yk%O(*9hOuVyyI+2)k%Do{q?pIGt$`MrV$Qxme_I=`nG`ZIkvEyfiS5
zC4b5sxkPro_RpYZ#cq5}Zlou}HzF*RQFpjDlrbvP?0|r^9|a(axByK6Mmx+X$>O<d
zn7LDUxWegyL@dP_woc-nw@C6(^^Jv)yBp-|{5NH8I!&mJ=$|sT4*h?k%;{TM{byw^
zIaxvO-|-*aeWaAVQ=D6oN65r5RFs%J^J}tz!jg-}<{lz$Cf=k}GTilc$!v~VqnQ5d
z_1c?z-Pw43>sbd6NRJl4X9UGXPCkkc56_jWmw<?Y79=vy8U^wzf&{v)Xsk8H=Jbd&
zLiT4MO`PZiq?L87uEtz2jRZq7Bpl!wDzR2;j%g%YvaN9ytnHL^Y7PiPRbJA7gQ^fo
zF$0-k7LpQ09t<)Ul~aU<@J?8{B}g?5DuDpZt0E4Kn3f(5tQcIhJxCiqzz5^`cb$Yj
zxI~{SId4%>q2>^j!1#cv80vlaH8&?`L+e&xqHB6Muovo~^16wcb+UQuwM%;<p=$`F
zM>3ew)^wMx1a|@j5$2c=k!U5*rR9+-@8DCsVaC_qayDuGn#BHWl7)0&-?Oo;dC+L>
z1`%l;m&0*Q8_?(`EkI5tRid+zpi!vv^!;sb=sF$0-DN^?R5~{NisJ++OkYgB{^%tE
z>E#b*{iEcCxCjxh#KLx?Ls4201J1ckOwD0rKgEMfeu=Dk{RFvwS_xVf_4fGGvAhd+
z0`$q*kXYALQ|VvOl6S`#yR0ygd^f8ZT+g_ZKTRiD2fVkf;2(vQO;wpe7tDcbNT`-X
z==K2*UJ(gm>ld-3_6jO5@OmK-hmvfg;`zKB+=0Mu?(0RQ#<k>7q4jW@a>fXgteLqM
z{ne~P6kp%Y7paebiUX8>#a`ptGN22<c;GL2{*G)oj3~6?RY$MfS^PzlzHN{_*X{u>
zFWs{-ieF`S@thZC<N5vfbFs@Z^>;R<bf?q3V%+yavv9nkLt)Ll06Ij!&<N!4bKYpp
zuCV{k#3=J(L?!1{qX1tm0*7TR^~U{OJW?hJ&}N{7MBsxGyh7Ke-D@pXuI6X<T#2B*
z4nNGF7VtTw4XR*PCa5IERZJ#6dys6xp8bk-{<)xJI7|5XOrpt}aPT&;&X)3Ip@-B8
zLpbGyY322g^UQUgY&-56MrJcd?H8-Q^Q&!h{@%#I{D?IpGPH5S^z}mYjnL)2!&$9|
zEq!cvvp9k>6c~7E&a1^5=kt%-e_tx4LfhGg`&V{)5dL>+y{(<GjiaL#ow4D6S_%tJ
z)pV@jLh;LeR%KXxRcTrsg-~!D3WD6TnS~ZYY|WzLh}iy@TTx{Pi=YV}Fj*CwT&1~z
zP0Qnr+xSGsm3^~dn3Og9xk-ToXWPUe({g`1NjY}FGT(B~x6pDf(P?!5b8`py(K^~a
zhs<nBy9t`^0@2f?eTQkTUePVKLHXer(MTiN^jZsNYM%Dk@5dAY9(VxRD|4=gK)(Oe
z5MD97)lJ^o*`KF%><N@gzk?XS<tnfH>jXyvKw`fd)_#VZnGIs)Vz+$ZX8rnHI9mwf
zM{<Le?!i1vMz?A01XQshMi(hIU4PE+P3Qef57p=hoWdVwDzo9XOddNgpg|&jV6&C?
zuvK!*88@U&Tnk^A%J+!wlT1K(A{0#+df`pOLEaGr$%t<;rKhwn8lQkfHsoc-@MF?h
zHGBLKjXr3&60{~S%#j3)GoW0_9kaZOE&}}Ly;%Zu0HqwE)Io6ceS65koI@_c%qQrS
zoHIv|PLz}HGMwp8ZlcL$u-7YRJne;Hv55DUT`&y1w^k~CK}o?+fDth|LD)ONan4aP
z$9TbCq_86?&GFP-nYgp8Kc#2Gl<&CY3XNleXt5<#Fk%V==58sLYGLp4hIr>fscM3B
zj9Q8v{~lEXPj*(tm;3*guuizVDQaJ!{3T~+ia(-@X;sAIt2>1VPAd@}^VPQ{^~rh0
zLjEAR8d`{2fi^|QGLa79tV2@Q42Y9$j_oC24Pq->k#YEv>Q}P*X+^Piu%LGD8xpsI
z{rk&^>?A=mWoY0U^lGmQ^pLYF9I5%sXY}Jp=E?Z?T2e`-V!KE<giRS#aTL4ZUfaKs
zz$ObTi<O$9yxV$9<XO9JohstIN)tSta;aE^%_0sa1C^AGrAjYUm!Tup_oZ>FaAv>K
z;dQ?#apfSde=HmuMCo2+vR=0=7t<<AyURtQD(x6G>xJk#YG%DL{^d2Or*-y--B(7#
zqG$d<al>U8R)3rkd;ha9j6HF(VSs~SW_-<y9fsJ`npUSuw+j!H@e2(Nm_*JeOPdE)
zGv=yasgBO5wX@X$^9Bv7Q2oUlMP*jFH3fuSQ_mx{xkR7p&d8r)-;*#I@_Tdgva8j7
z-b97Kc=qABaBG=vgOCpeH7PJ6;l10>pvATYcKjs<#uRXibbpJ#KTBxPRWiU!hN-9F
z5lgWpj!{_~?m7-6H^xi4eSs}<=I`U7#x%l+1CE1B8f#Z!qF;4LO0V;t!Mt5}e`Bjv
zMqs$;0{d;?>Bdb(7Fr4#;;Fb^%W9v}OMxHW8w=9QS%UH3N*C~gD5<&C8$2BHuEc!a
zfCx^LhmiLb`Z#;fz%?5D$WslMP9vPmATm^EjJ-(XN)!51?oV5ZOyK=g&;ral$~f$J
z5|AGQ|D=!_PYvGNk>;`m7PVu%fjM157tk$3OT(<)>#p=v&Pn<kKnNwVJ*l9L@0un{
zeus<Ro<qzuV6xQD$^7oGPGGuU8-Kh%5>sY92Ns&{yu3EEKrRn%gZuTefky(y1C!qr
z1US!ES#-%XcL+!|iv>X(Smciq7#NZsG_wza^Bp|GnUE}fM08JY!C2f{GKM1w7{Fs1
zmmjHI%#xB^l#1Sn?Cui2n~}QfYVvUvSf#JOQ5X9#6_K6;YEQ}P5KOM_ZxGi0_L*I6
z5p1fS&(%Bmd<;cT8+;IzatiFeL+A+A-fz$QU6Xag$$!OB%jNB<vjY?Q|2*^mzui{2
z|I25-8!H2+3-kXEw>GRT?VIbrD;ym0Ke@I4$7fxbb)BpnP5!e{dRx_6Zc`lL=SG)t
zRH8b&LjquakyV~jQii@`?+GdJkL&V;J)2Rv;pfUF!0N-U?aJjV#)jk>pB9Kh1M}n5
z<P6W@6Bm|~9*XE|mUb;D&eLnG&fzAu-3m$xBJ9Z{q}S0t>@x@qay^{;R&f69pfuJH
zLm}g_X2%s#+)xHXEEuD<AQBBFxPt$EGK7<RTPo!ZrnX-tgMYLqyZ{A3c=-^bCE8%b
zJIYzM7%?CX0R5IQpCfSW04?$*3QyqpA0Bo;J3=ib7X{vqRQWd%ixR!W`>}>o6(6)v
zNU<i;NKn&A;W~tC&Njh~>fo@0*6y9_Yisr)oP)L7kgtx?C=Ye6?dG+&vYo}IT=l*8
z@q__;niQI=n%!hEPa1?I@S5GnH*XTJmb04IjUmE*HH(JBDfijvKyL*hT45cGstr<C
zv2Weh&}X%?Yyv4&ae56Jt$v;~?!oz6Bae#Mk{8N$4A~i4V6H1YsjTs=EDfPkFO%~#
zGBmsJIP}n=4yUp7<1aRE_-xqW6}1ekud&Ji7~K6)BN6R*yN^JI>-<R^?=DrtxKcI8
zR$jf?Ty+yZ2fF;j@XlLi3wZvu4!)2Y*wYt2OzsuT{@>Wde8cnPI#>=$ucC|<<9xBK
z%Gi{g9Inztcq5x{dz*D)Xzlbl_R3?1<oh+3D)^PDF(^?NZ{$fI-N#yU!z4A+lxvFT
zeIq8^_(ez0qo~rCuKX{x<krw4hhIA&-G!#Bdr$YAR#4Gu)btX2`;H2C`G+3$ujJiD
zIgjDzx4i+gr`MW=;r=zVCQ0N)zFg@h@GdHuEioqvRX^Y?0__T%FNU@df_0b$+X{f4
zjbpdrn-I9B&<ha+Pd5|Trj!^NQh7=wMCjjHIg#?7zIaH_1-kHh8eei2G|xLdlYwtt
zmm(uiKPdB~?xYUv;kbGmO0k$!X?4`HuOks<dRR=Fqza^p=2EFfFSgF>2<djMV6Vb7
zj(BKe``jE!5iL^a8wVZ;|HZIFI4BUNAF_K;&*;R&JU%V~Fk#Wr?Ko~>v+z;M5X7?L
z<<DQ{yb=u%dWbZO!L;u{SP=HW37+!((3s5gqUcCQLKw{o;x5EF%oi<R0GJrUAL)t~
zkWH;xBmKOUN>$O7{D))7!xCi=U1e_MG)4-m2ZXr>6Bn7_8x_>WGaDr*c8qNle6BES
zLhkeE_WnK_hB}S-b*QI><?)%aZLbRhkCB;S8V+avQ~~icTaH>oqv|8NRCPj<+_dVO
zczS6!1$8S<u;*i;MdUn?TRvcyb-EFukD8K#G}NM!EKDpIHPeuneBkyz6!NxZwp2S%
z#5B83lN}8>FTR8ZKP2UL@pySG@*J^4x8ygDDMK$Lr+ZE&EeVDR_p#}u;7X3>`JY?%
z-@lr?*rO*`wGFWGH(*u76&Y`YYN7%Btfj@kQ`67ja<d+W70q3y#;G+LA<TKL94kGw
z*dbX^>L(X}D!cCC9*W(mR86e416VWTF*zr5U_uVVx0Z|_O{~e|A8ov%tR|HHRw&Gh
z%f!TcyDrSBB%&6PRx5@~;lS(mN}*l^me&B}O9qpZ)znn0d@?g3$3$JZ+ajO4Tk;Gb
zoU=aX=9W^iY{^DHA1Kik=|`7`&CxHo<#TNXefu06M6@h5LNe@?BD=k-{uTr3_6Fpn
zeu6mE^U!wT7=qpzl|mGcaJxDF12!6AME^Oy^vvK&oU)Uz8@}Uo_A%xjoD_v3#ftBp
z3mZ~`f03!aL`X*(b{-E@@u{GnKZ(1Du1S&XJpAZh_ck=z1f~nD21PIR+@R6O3s@w{
zqzGT7L>y;bZplQEu~@j(tVSh_8jJXwk-ud0zyn-uKNI-!-+&F7Gp}5-|6-muk^c{_
zbvr|M-Tw(}_+RY56subPbFHF$-{=Zh^%-DCUl(o9vHk&ER?w)exn94S^Fcxhk7ye!
zqEfVv(*N~-O-QN=y(USUCt`4Szq#BJ@>si#<HL+}O0Dlyi=Ui7n|?n&J78~!p-eAL
zs#W>hFgCQyB0n_#FMy1bKsF(c6fe$5f^-_sj01pRD5Js8K|(0uG0sF-Sr4gEq@(RE
zk@c&bo#3c*Y<y%Fkq%{?R0Ic=S%N4<UJxHRgKB^Sa)?YOZ5CLvMS2)(Yd|fo?^Jk;
z3O~x5LCzHdRCi7>P=?&lwZ$QlmGS{*PLND_#Kv(LBx^RT_D-uxiE0-%bo1JUfB>8_
z(SPhF<YaEHggI=P4DeCEw9thT)?65XCe*?E)A^~hH7#)RcBi?~<zKQ<=Y><vcINoh
zvx=qZ*LvozQzlurtmzs#a*f%@_fWtoX7a|VysCHfGL>uCtWYMCjNrgGECx7HAai*i
zZN4iykm6cAGo7G^sBqAq$;|u9$<{)^bZ-XQwLq`{Lw!=G@S*^H9;AFl{z5JN^?)@0
z&N<Z|?x6}YrcB*VPY~2k3%!6H`CYoRG`6*lC6JImYYIah#YcGR1phEJdB`wd1YkMI
z(hz1PYC}M}^Zw_f;e20<gm>fZMy@!22(Xbzf3mw4F6C`Cv)+$1xIg1RA^i*|;>V=T
zoxJwI<v1$WgV}%YLb-Jke}LCQa>fS$Ql?q;zuuSAWlh*0@y=8Ga*8VSwE#h-KGFsd
z7J$~)em#rV=cVUKgb3ogrjfS-qlC1n%un*J9Im7&*pBDIS%w)?qIUZk)^ql#Xb8}}
zmHK?s(g4$iqrC@;@J#sSul$j~1mow!fE0l4+{92J%>|R=VZ&}rF|bGc6O!q+rL$vq
z&`s;@Y9$_-J-XbeNVl`)<;Q200>6ye`kL=^Si?#-XZ}$K7+Wp;#olM|d~}X-m_K*I
zz7$=j(zUTKGGqapisZ}0Jt-=}0K*8z2;c4`Z0~%Z+m%aKH#CEL7^;Ow_=t$=jcFc8
zhOqj>L@>Q4<}VT(gPK?ZZOLvNlsP;KacQG4@`?z+|HSx{rQ4#t{N$WZeYfaviE>}4
zcQ4P37^~K+CCj2|4<Q6Z`5XAz<vg+I$gU*TGh07e6=}1ApxIMD9I6hVraeVv-;=x6
z@&Z6r>nIh$IT^n=bBQ3?DXcdkEoR*Nm@8JK0Gybzem8~2?$Q;-x{v}zJp_$jrBIf_
z5Cl^hsy1Kj^BWg~3i0*MRdtI*3hdJ%Qefc-U*r^nw)_Zvcs64|!#M*Dt13DY7xFu#
zD7-Qbzmy;DKo<=PtZhq@ED`n4;52>=&m16&P|V2&0~%TrGc-g8Eb0{zN@OR9jc?RX
z>=>DfTGxp}GH1NKHN-PY>EA7(k-~y2;uTWKYDJfOc(LX>eP~QJo2@?q(QE^TtduD)
zhX7}-81AswhCfWv>}~-SiWuRe8?Uv+wz92WmK1<9rFZzYFKSRxAb)c6<ioR+iwb>k
zOsFmo`NLlLJ@>~CkmwaX)mOe`<<4~T&eovKUJ%^6ds-AVpLu*<pqIk)y2U8jbUR(*
zsA(P$7o(W5b1oipR0gkB@Sa;zYr<?ZcF$!ACYmd^w=m8v!3%|Kfqt`9pB*$3O$?R1
zpIq)wtK_MZLS72JB}A|yy*$g|m$-ynlp!_AL$tLoJBs^boZOE<Ib<<~;tQ$|eyM#D
ztf3C+>A=IT2eHEu#REYSTZhG<p}Li=0aUE!x>tE6vrHh*)e;~#xWpU$bz1H^$hkgf
z#hdq?+09&?rXOXkQVpe2xYN8v;GxUzU6sAyk1EIl*En(Vv!-pBHHjWMU*Q|R$JDv%
zZs1b!oNByN4&{08577(juAB+f17(h4_Bv~#Fl|DdiWRHS#lTx4TjJPm8N1j7LV<?O
zMK1ovnL-lmC$Z@9U(4~1bcyER>!H#Jzug?aI*fSg7c?L$9kbGxiDfUh0YHPARfabC
zVwzbBzg7{bbT&&_60cmr`70H*|A)5H;yFvB1+fBs?GbUqngfCFqB>k>$5n1weTV=2
z9n?l<`A?wC{Et{W+~RLAxUSmXiM7eZTAKXy7+QW5d9^@u{oD$+F6ccZ*gq1?7~>4V
zmB4*Hv7OUH=Awo)CC&%@f0Z!k)MpEU|1DQcqW>p2+5c!l{_kpKsBdUy{GZ#9ZZ%EE
z4Gt8aQ`IaN(}oZv@rKm&Y3mSD7UNJL<h6gi8O9a}i|FI#V}Q+R-`&DUYsf2-?3pEc
z$c6b*xziHIC2Q6^P;azbB#+($I~RwC%lq~5^IHa8#IzxjjA_w-nz8AD<C(G7a6%Js
zH$xD2JwY&cLc)<h2rdYc8u3LU1u3AB!XKnPFzK?AKE%M<=DkZ3@IB;7z3XcN1Du8=
z2%Me*N*Z%<KPzt}$2`P0E8NhfNG~Al2~{MmK{JHiNI%-P&;h)NQEtFs{-7cdY}n7h
zd#kwEVj3v~+B{0RGor(!{SOcxx|M2<*u_U1*T!`xj2uFlK{%<KP74K9{L;pQON8Oh
z=n*-Vhe4XY!TGR6l81qs+$#gT1rgKdj;x*~v+ZkJa$hHvRaR#BUNuM3vNWgrQ~=f!
zLtoXXlC8s~QA39?Os4I2|54sm-O-rYf}}w)f5z-QKE8JLZg+SMi>~8lZ24c_Mz{H{
zvbBxZFI4-#1E9R*M)SN)Y9pI-nbC6F`)+(~xLX33{m{$-0MRv1MVR{pszBjx4ZyRn
z>PYfhQ<zT@1Lp}Jc;tWUAxSB@pu~>zA-Ne$va+P`k;DN79vif&Wbi!8?Ph=WZ1}vm
zuU=1p-Q)K4z$lX6d8EX})*Ej~d<5-u#moRTHp!n!dn&3m>P@y&?tBE@8}F5g!grqv
z-q;0Lwfe)c7*Ka_pLb#99~DJZ>v((EB=9Dvg&^7goZs&j#v>^-4&HBulQl1T()UaB
zwjDQN8(Wf>ZU<45EYrmJ%+66j)7!~FNF2Rs*oNzUI&FnnW%2%6rEF?mqMn+%Xc^pb
zDP2HQXbm8P|M6$H&A4j@P~wOvs~7huHcXR3M#<$%cMo_Fww7qCw$iLY1h3>%xGo<e
zHz4}euuIe@LYc{J%z?30yh8$Fff?^c&nes;%ZlEt=8f?fvYKEZcZEr-5wUnU)uq$)
z;)^sRfW*^1oHw5l#`5CnvhOxih4F4~!zL5TH!qHQOA^D+)xnus%F*$PU8((!Mo@^O
zOXUHAyl<Gd@!E5j!U8P`Y(9P<>q44(QCDTIF}Ae&uCTb}kWxkU?43h~BT}OjwMRjj
z6gd^47*}_10s=<{Tkn{h>y+E?rN;2`;=b56VEdWF&QC|xZT3IkoeV-a$J;2r)(cm!
zBAIYwG#QRU+zD7L9wQ2Ap<Yf7)S%iVHx5e6cBMi|CXIh{oOi2|dmxH)4w+?k)P7Mu
zdod14jfY5%P`Z2}KV1K+2`ykIMUUKEOsMK&3Mz}mS)`hK?LK$n=$S@b)v<~^*DRL*
z*>NWP+L;m6kSP_V66+gBnJir&)ArOK^CB<)MQU+M!pit8|6~|8pF_U%VK8hX(J~!!
zh|l!NuSZPv2(c2eDe5x8Vl|v$aiUP0XallV<;*PILF;-f0Eiq5`bwM+f_W0n@UoOh
zOlqxrBT&=TyBmRgl*p)1OyP+WH!~4(sPhxycT{tS2MH=XLM%jXlAS5>6o2g;rILgJ
zGhJG5F&3REk3^#BUr04v!c}noW`RxYrRtjsLuOVg?Y;mpdTX1pdbvP)ed|zUMZ20u
zOoKLSDu~p&>qZ|{+vA-rT<d5U;Hh{BGM!}kyU7Y(E;YY9MdLbPOQKv}g|0^XYB)bG
zky=HSD>9sUn_8OAmHIgOY?FQgTl)9&xQ0*5!1C2;nr?#*CQU?qMXmNz8uf#k=#xcZ
zwTKggXjmF;n&yCIB4{t*4Ua9Rp)XZg3Q=~A(x9<}AR!G`Gx&C5F@te_If>IP5~UOV
z3VF3CkKA)M;Y|ng`9KXRH`}N=+e}?i;~VUvN3Zf?Zma5$e-^eee3QX%_@?eV;?=qu
zLRX`>>m*4R?Zo*(8cc&a){E&Iq6oj{Vz8;X)*v5OhJUrOz@xsku)5NesD=jUf~Ayr
zqpTuV9uLaf_QZ#e^%&if+jO_;tQ|&=^MzAt{!{QkM4d(ro$2)b`y)WHQNKTHHA%Vx
zg{HP)@SrjY;fj8$Ku+t;EE7D%G)xQHK|<SG)#*gg-D4;wC4=id51Y#3<d)juk*Z2-
zE~)uy|1yeiq-S_~qNRmos*-*1_`@}~<T0Gv*OmQjyAAuwDm>D854~RHi*?{QFKq`a
zkxdp&S?>&CA%xp)8)1~!YrD=mf;LA<dpI%Gd?!_F;N$O~h4ngZyr<K-0{>?_WGhP@
zoi{EO<~O;~t13or4m5*Au#Pym7S>y`(Ctga)*RU*MQ&y@nUv%vys`n+SiBXmu(c}l
zG@rS}0+q%R+8pYk9N9_B4LMY6J9&@W_k(er+hDmwQLH%N=I`nAU|Kh?Y1ev`-#y8_
z`#m=BTFV#^*ruN3wL2jD2USJS&e4(I|5jv&;k5Mr`2@;9{tsG0Cw&8_|B2}RU$lhT
zf3^R)1yH<SYulbFhTiKkQ(za0f~#1YG_hjIuyJ7m49Dx)G?@~z;3a=QYmDfnpw|bV
zNG@|cZ#cyq=3Me%*$cKLS|(VYzyk$tzp8!#PcVbaioDn|`_L(U7K8`e7SiJ;LhW+~
z3(e*4#8HziCA~<Pw2)KeYbg99kf{Xl=Z>5qHBRQN{c28uz0grn?%~?z<S8xOoJLTJ
zXiERILejD_z=cyxWDWD=*XeUL9>K~8B@E#VDUL$KAnM$}p!#4Gk!Eh~1}&<;ol1vG
z5@G90O0`t6Ag|FAu9VO(b||F^)U8{2`Qs%`coV7$Y@@Kad`Y8o4gilrS^+VKP*El+
zRvBsep~V@oyc?g+SL?*7ePZTy3X7W?L~{zT9AXI<%j`0h1_PyN+;9A0#OTerkGUtQ
zg$Ryc2!iDA<m0h40^58w4SXKHEa=3);ga=7Z00##2h=iQxjZoH2%$cE?yQS~yqO7U
z`3f@Hr9<0a^twlwxh>E%Yjsvw5eaF7uytjGCEpj4GIv6jYUtCSuq2>t!pPF<x8lp$
ziNUvpMco<jX3^df)-83M9hj1|hNE2AJB-)18>|);JJE1crnwhj?1^y{Wf(_lH1q;3
zJpy;_?8`7OgCXr+P(WAgT0?7Wk$*lb!>V%O(jHtqcf0FaHL+@nvafZuE;uSPFcSK#
z+^yp3{IT<0JNhVbJyYwO<RiM`#&KO5?R8XqK@3O9WlWJ}z`D)5_9b#Nu1UYlL23*7
zYn<q7SOq;lDre$Y^S0U7B{~H?xAk>8dL=B%Bb;mbPCsM&U(c_){W=!Izj-(c*?$rn
z|KCaV|J>mFU!C5Je*=v!RKMO&RfOx*qA>?*uDnaGKPi}Em4fCSM>1Sp1SpX$?Gp(l
zQgpN*yRPC24MyAv4FCc-5vTiv?rwBRvwYHX;4G$$lK}z2XZxVZps_P-{AwxLC5Rd7
zVQP2-%!A0h&m`XCZx-5lk+Zq{-^UMM2eo6G%tpmDF51ZJ>JRuW6mcqOmn4&N@n|Ar
zh(MeUYBLRDXgNUQb<#b0_HcnI_G3&+O$-Xp5V+wZt`&!!hkt`^5|OL}&{4=isT|2T
zhBHph#)(7L9s`O&4;VE_GFc7;y7bP%(JdiWF+kNp7$xx{0Jy;Cc)bxR-o&1g7#8Ok
z?d`Wy$c@38;!Z_I@b%)6;%4RLA=;f4ir#l;W^!_JWRcT^a>Pm{TDU5MW|o{}SBJ?0
zZcG!$J@M!Zn2gSD-4P#-oW5gK5{a_HX*u5Z-WT6bM`I7xkFJ0-4%!6}TyQ1@I#>s5
zF!p(M2P){|jR#4z5|JVW;W01-sAJR5<Z8VN@M$OA?EkrXS-&^q-}JEldVm{l`S2jh
z$<4%eI>4=HMdBFKj3vG~uRkI$8#0YY=IueRFFxZ0PMu3XvM4zh)fFkhC>{O&AbX4S
zl0o?Ruwqr{s48``oZ%o}nK2MvgW>1qx%QLZHg$h`KUBO~oy=)Yv*=mDV0o@C5#YIm
znc%4k`ausy@qr=2@AJ&DP^=`4f=(U~To8ATz#z}IG1V37YU*(+t%iw2-L?@5<;D$z
z>N=#HUxG*n1i+Fp{*Ld6vT1>?YI@-3J!-+$oh@s(UU^2?vJ9e3Qpy4uXZpcMVANb1
zmd5Y9>oin}nVHO|?=Nklk+B@rRb=*z2SW5bmf3UuCAw<Q`(naDBkT~V(Ga{R3Qy%V
zaLiAYs>Qhs=}>#MU{w_y%%W>F5^}V&0*1m)rMtpt&r5q_*Gs@l$#|UfYITPhn&VRr
zEgm$}5F_mCIbEi+22|FpeWP9Wy4`SqfoIFmQde4ZzUqi>zn>f(<n<^+5DR*bIA*0G
zQUW5UgHfiTX<Ot|0Ec#0g)+91I3&3}x6$0|y4@r$hJ4#gMI>I2AuSQG-bSbyNL7h5
z84oz-ltI^e3u%}I!MRi5a^aa12s7EsL8GDm;}1xPQIF<l@4?kM=f2D55QlAzuQ{~B
z*WxGeX*NW=J&4DfC;ZtDF!mkNA7Ik#_7mvOe9nD97iSuB+0PbOAww{xE+FDmVh)6t
z374hx8Up}E1Ox+1br~SvECAwnZyrZK648oQABa&OXB}m$u}tMcV4O5mDKLcN<4WET
z0E)?pNZM2A4+LXwM_sLtU2;U}os?1+E#W=-+`?8`KF?M%x{=m0EflAdOX_a>q^?b+
zW?@{Won(dQC#}!u1d#<oR^YGC64~^s2T;UqQaC^q`2iPk2G@^}h?xUPT7GNcs0Dq?
zkNKy$u}bt?_7EF@;foLi<PtE9vC&chuS6)@I{r~cM(TIP48}U{P^Qr6-f)bf5+&54
zWEF<85eG|n*sm;W%Kv)D8o#eh+y$WN*9hlAw9%SFqBE<*9pK<&(N|E(nqJ~xCP0Gi
zP=*_sk(%10S1IFw%HQ0((FyUrJn>3rWhLJ)2tFuD)gA;1yd}}^dTnoj#I`a=$z_n9
z7XyO&EhyW^fa)hbjXb`vEffS={dpk2`GUHqkdqr=y>It9)4A%K?eWMI1;<;GmFkxK
zBMol^fs*8eaur0Qki`bJ0!RdFAe7^7feO&LO|epy<h*7A2l#WLh0Ka__?DA4j0o*j
zOMwM~Nz7;hNK63vO;;;u09sA6jgad6bExvU9F8M_=(l%Bq8{^~oUb3I60q8d=WZgc
z<j;yiU_$5zRLzt{rk(;<c!4mt2;qAecL%Xgp@9@9qGmm!Z?Rs4eC8_M0etsqLQ+GN
zhGEh#ef1P0p@W=d2^-58NmxHc5{j`yXp)L=)Jai!W!6q*3Dl-SVeQ%p9aiL=>6^=J
z6v(P6T?K@Gn;`nK?rd;{9#}XnEi<oH2$gUrwG#PT5Ktlh#I*cuCl7Q&asr}p+9lcn
zIuHrHBVmNB8?iFIJuit33=|eA`AN;nWEJtWOb|Sm&CqhNbB|xB;luhkZtN(y2i)ox
zL7DTuoWFH{&<X%3RfAq8LcOyTLHYV^I#9(ZfvEaLU+{xy^DIR)$HWaS{Apr!)cMk{
z?Gk`!6PfVp0>FS<C|u?Cw02u)#dZvrxYz9ZS&qq|d~{086Z)}Ya0(p;z{zN{@50ov
zOTtg%SP!tV74Ks7?<fo^2?VVY(ddb*2mSg^IEb3d>EUm}OScu|GHvO33FeH`+jeSd
zkmY}n(EFLG0+s<Zb-19wk9MV(t)*$`F@t9*+2O79YGC{3#gqGOj~fYeo--|I=>+js
z#Hj;TP!J#00JuBwMRfz4r$qKMlq=F`xiRHf$5@Npb3~tJXxzI(XlfB&-wzpFs5w~U
zoTR-f5ZQaqF<ZjRnTc_yN}`~0L}85edEk^g(=!;(G_eH2wv`-DeqfhYa0M|%D8^Kd
z!7eWE%XmdVPOLXr+HFJYbH97w)_DPK>wYEIwo~z1;gvT8TG>%O*))rZ5a=&0Bki?1
zXUwr>J5pzR$f~wvVihOWyA&ul>u+va+4C0)Zwnib-iz-|lDYB4Y7?ekvKE=761}oe
z+cuKtQ>Ft+@yXk&@v+u{hX*SU7Rp_VilJ}OYis}s0Gmy!<CL{Q!$?>lM?tEv_rl6H
zvhrXNgx_%ZctC_U3^*O5F?Lzg+s%rcv6f0kV3^WKG(j1EF~>;A!bWis48pH&C(5V-
z%2lkbvci^Z$5km{BK8O|)-?Ufl95(-^(KfYm2sL?4v27Q)JRH*6_~HgL(W|o38{hb
zU}ewy#uJiSv&jJy#3ZIFOfnEcyscvddZ`1O5{Ug%O(mt9@hAfzw85xLbn;(H#SM6T
zp$fx1+cgd!0RNnUdtxG0-<oz@meiPu(q<V)qANMGtxv&sODW#t`g7&tFr!X(j&PGI
zDpswp5t+MIUn-irPP?kM*JO>9m5s#R2FOUC>^#3%BO=-QDhwSc*ZU9~iLau)|0=x3
zT1qD=vsE7M`M!e{@n}x&;y#&A8yII#YZzbkl7?nMu$~sUewEl+pkv95vs6sog|h`$
zL0#CtFZ^GO{R49-P_wNI$F^<Twr$(Cla&?Qw!LE8wr$&XZqE1By;XZxoxR`x(6g&&
zkI~OCJV~RDp5XBCgMqfXN2T6&x`dx!YWj<h9kVPDf0<}M_#W7(C)UW+0QN;Jmt*wU
z3!VHJBRy~BRvPio@Zda^S0wTB$}xnw8>?B?#_BhyeVAN!Y88+LbzhrsyDQoqaY&kr
z0Ti8WyMaclXP(OW4!4j*FuO%F8@m352JX#?32}u!0FzWuW9LP6BORZYjE5)Z)9dMj
zHDEkd!Ut8%yEs^izjQFRx%T~o?!-4|9B<_GLjB)(UAreTe>Bq5Y2G#7{_Di*_qmrm
z<Y)B>_4k;Dq8VfRE7KeA8~%TtM%{g}Chh<MeyP9!0Hpt$9pl$G@qhHS|G)R`|1ypa
zDappJGaz)Gs7IZG5@p=xSBtb%1+A8e8m&bXq4H`D-&N~ka@Ug!s9gEh2ph0J8r!SV
z>L0&#u`|<$4*&?Ir5DuS3lhMPCyrgr8F+xE?>eYEWS2m{+Dy4mBb1Or8S8>57aOQT
z<5adDxQ#rFVlU}IkF~n-geskE0yW#HJb-LrU1o)4>w(-(CDj(AS_CR^>3!tI!Ce>c
z_rgb^Lnr|=ZwN`2V}^E#II{4sWyxSH8L&z4rh9oQE~#~wrHeNVd8g1U97b^}Yu%(s
zhpO30B@JKDDpa}x)j8N7c=YUu58v!&MMV7#!&daxB1dXf&A|ijqyCpp<qUU&b38Ay
zKft^gkJYxMGBl|MO4SxFQd-Qx8U}9<mbmq*G!8G}6wyRrAjTckWd0X7(Ih*5gXF`-
z9k_$hPz_PnZjbj9qBr;G^Ek@3^=cpwe!+#4<bkG*G-by<(<+@5KT);DcM;}Y{zb!G
zJNvk>kz72c(bRmY#z@0QlO|x~0v&w1O-L)&gYh2uy@$+ALXl||GhO&pEJ2|(bkMiw
z`bIlQJEp)_&pxG!(8R-H^2a-aCoK=HA6J$126XB=#n_T{5q9IjEfWs*iOa*AQSo2!
zrUZ$K`jBW@6}S?{&xP6#(-s>w?$n<vgde<5`Ttr^B;=_x^}qE*_v>aR{}1ZP(Aw0~
z@PDo-*92Yr1qPImn+NKc@hPrgZxnwJpdyL~DUtJ}!LC!)B(iNIhpSPyWzn#om<6-i
zxqa^37f<{XiMtxy)({Q1K%<u`e^G>>8g#)|I0<ROi!zD`lw~QO(kA~h_9~V2z%b|0
zk${jat8zSx1I@WpDNWhn64=Lre5grgSbk9lRycEHj?6y*+G_*dSOOBjT_uGhjWPqc
z2Pmh;vfRKj0<<r<=E=WzW@(nO_ma$#=Td%~>Er#$Lmh@HYZDT9rj|&=I(en(DP8r=
zA(n-!)$B6s-2vlKUCU{5zPDckd%Kbyfy<kT=iB_rpO&~atbgnrcO3N?6(73uZxu5`
zBx}At-C2zL6-cSBSFBE9%(-i_d97vOUz<?e=_7m-q#|#B!rO3oyJ5HaJ29EbsT?%W
zPB*~zFmy$+?@1?+>uGxmY@L`x<!=}K&v52Un&=u>-%?%nz;QJWa`I@%!jeG8kUL!n
z(>hLKO35cKpX*~Sx0H|ikqnc>EyD{@od`P*+gDro2`XM61tG~S!ky63oKMg@SKCBh
zk8SKn>b6m;5Xg?=ySH}JNHFQ9=l)x&Qk^f?=D@EtOX!za^M40v{(m1{eREU0|Cc=V
zf9Wy5p$pFIVhF#X3#+a8P%wa(Y}s7Z%)$b0NqqqUJjlND5NCeYCX&3_mkg5Me_rHD
zQxgf|SSDAU={sh+H?N(+1MQ&O8DjQv3o~g$A0{RyQqcz<_<OgJ(uPQM=t>#P=lBN?
z7^L3Vj3n{J1OcG)<9Y)~f_M>oVg-P#rFehss-Y~8kidHWkoB|{kweU+9?NIIJR+1l
z?c5N=aF#+Ka69uL%Pa%}e4Zr70>ZZiBOG~lr-&XU-qd}lQ9yT_2nDF_imRe`9^`or
zL?ooEi#XWJ^P?*X6sBRv3qj27Qk>BWx&9Nu+bItmp1c@5{QNJ(QG}8KK7(w5GM0J$
zXZCN#e*1xH7wA}Cg6GJu)O&o<?;Gq#^O&%lhWXeqJk61w0_tB^nxev(7_E{X)2vfQ
z6OsK--`VmtA*u2`;a$rXmf76W2RDBPu&}Svzos=b3b_k`S8m%t&l4fj-5)GPi@?3n
zkwf3RY<!=eyBM3fyM%rLklgMqM76HD5XY$vNxh?9e&LSBTEigQd;+^hNko_#lm`Qy
zRwrYyN(Gg9KJX#g%j&Z{?l9I$cil?~)7zLSR}yWRf2?gXnXUgpp7miPJM(F+!h`RN
zi<q;uu-4%PT@z!HLT&{GJsB9$F@QG=4b1DMEmz$(x<g4_GIci~SiujzeH*aa_aNHK
z%3a6oOx0Fzw1k+_h$){q^kzuFfBFRJ_A-f6g9j<erLUL`!eTT(e|NTyIxywWRq*Hm
znr%i;o>2;PH}OO<)uniG$`#zI!|~k_U4o5aJdJOdA1vGq?2W!)N+#s^Af%_mx7KXD
z`F)Wt0m`<<6>B#`Gldz@^g@YSF<x~Q??5Cl6)lAQgQA>OO*$U4B<IUcO)g2zlj+dn
z{3U0faT&#qo+NC`<OXF`|2qx%Ywp;?ATL<#%)8J~XS*tg3c;HtBUjE?FPK3V^?EE)
zSO#NmC>Jq24kyu^yo|hKQIVl@9BjME`O2OfW7E}<va0vwOh<zIVQANQRQ{K_i+01?
zEf6GN8|e^@9U(MDVuv~;(+yjZMjloeLhWR>Y8r<>dgHx$!_qXV4?<oOqUkE8k#uqW
zvERL*=>bI%e`QF9yNZZ)=e_X@S_=@d0UzM5nQogMx5atsecj5ihOX!a62`xJ2)73~
zb&q&|XA#!xb{}hn^n_RW&Z5_D=#M5h@W>yVLs5Rx)9QN>NYlz|mR*S!`k5N7wR5a>
zdY#vMP`%1Q-<KooF;t7c$*|m_4pd7*>N3dQs~*}G)X6dX4l|-LV{K<m-AU|k7f>bl
z6cvJ%VwfmKRQ)%Q{EMy5s;5;Lj{M~qP_O%VtAYBLOSjB?T9yySZilFf(6Ep_%>j+h
z6w^^EQu1XVQg42R#>=Q@*L`%qjY;eq4z=+Y4W0tyK6*h#sOBB(ymDZCI{N2B?)d5h
zDLR~eODa0U!|1hX{RMOU$C9FpAtK$Tc>I$4{nTJ2FZ6)+jt^>uVuJ37)fDpP#J$eX
z@@7KjZd(`iKu$blu{Nc&$d2*P1X>B4dydyb^`b<!5c6IFEGwTB1U{G2KS^mK`+jF{
zWofjjT2&=yx;IB6N^UISgw-8+G%o6_um@n1xR=jxG%Q$sm*;SRrfN0YKLz#6jh?Z1
zi?rA*J(AT&|58B<cP=xDQ5T{cxKEwu@alXhO@S;#*FOHaCsw}JQ^~d4TX7X6_>6xk
z?i(FtIglsa7bwLb{RQRY>)$A*Pzy+S8e13Dvk23CS+LYY)c}k}k1~Ntr?|6iRs+UH
z!t>Qq)mxd3j>rW8$zPHv=|8q$e1HO9KOi8Pu@&_wSUr4hiYn-97y!!8GYN_ik&1A&
z)VEI&4x$WLswgLCaCzqKS<f7jjTgNzH>ty3d035Zl8IO(uz6Ek><PvnO}f+*sb;e$
zNhGVIf>kDIEGWaFP<_~BOQv3{KEC4ruTz7$afUeauW)|%E1dr)Q-iaIo$3EFhfZny
z*sn{V{cQOTS<7_|B?%;KS1p>*BazBYa~XLV6l|W8O!NUyR@cRw%NV#n^z8g$4y+55
zTrXeYPAV}w{`+(9IdjHBYav9hYsbWwDb4Y9yEpKEwDZ{A8BCZI8qDbTTS{qPLuAM;
zo#_Rc#(eA%1`;qpVKR+oBSmb`_)5OqT9I0adlDne(S$S&eZfGuSeU)|EwEShi~*ue
zfdr{hP-0G}X;2x@Nxv#`8%lq221)dZw9v7jKH^ko(#<eNAu>atvp|@54w3t#5RpCf
z0+s%EyO}$&>1UZD&yaZ{I+J01r!nQj8G@ui_EaazY3}TikrB5DJ_y8?1)JqL8QcT8
zKXmAf3GOr(@;vE-o`bvOgv2?`C#fBU#5ocvq=uX6CYi-iZ^D0kRQ4I5xDr{?)i5G6
z6-Y`$?M=Rx-fPJ5)ov<MYMWpR6cT(Y7J?MJbxP8MD7mg@2E@Y+<25rT8Sa^&k;%>g
zhZG%>G7&THgZfUloj-fs#kx%)F{SwWYNZgYO(0)2ms`b;+;4zSw&Cq?e{KS)E$A>(
z6c*<@XHhQDyj{R&Wt`XQ^R9)7IG2@(uAp6vBE}~&qW6XH&h)bHQe84Da(v;Z!gcUx
zBXi?-uD*ydblAOsZ@5}7o=0L}r%X_XO`xQS_?j5>h5Eajmp%kAfqesal7VKr=E<v|
zo?34@{;oJ{&Ek5N`d@Ij2o9IP9>rDJa$BPEcibHRBO`H9eEzwfY>Mn90FL}O1k>`o
z&l&lLtuc}Ztvm_)z-Py+y_UxGdi3pN_0B7XZKbOo+Wo9ha&treD<BWFrx<dB>*8%X
znz>P%-kE^NB*b|3VQwOx-=zzC!z&;H(f>dfHAEvN!Rf-oC$Fq}L~q6&e7j6U>0p2w
zuhC$L={!hXXEh^e$oSQRL}o4VJg}t4s`V>7V`^S83=%>O{oIoYp4no2NXeIVS|CyU
zUBK~T1T~}%C(mHmM7T1RUiQ^SHsly&0_Lp*mI*3mn{6n&gd?=Y5hObCY2$U9&kD04
z4kTCo7EbPtpEx+KqEGQ)4AkKja<Im~j#lD6SSfO@<?eoqyCX>#k5E1w1Do4i+iB5a
zZ~;79Ov{HXpk5vJ98Bu!jx^ad+-IiFm;7{nMk2^3|B`X}k(0+6Iyp%MhHtM3>nYH3
zSfkLZ*jn7xf4Lwz4tJ3z<X-Y?I&HE6M2^0ayaJ5I0cf`JfzO9$g&Ez~DPspkWi040
z?T00t-PWOQ^Vl**({ex0t{-?qF=Py^EfI5!$h&VsGOVSSblOS>-DeDu%=DES7G1UL
z8g=@GMz@SpMmcuoo<;>(L-w2@{1LC0O}hyb`oKfj3sgHqVp5=3h5}iGBb~a^;==Ni
zKLe)3-VL3CDm{fO#HLTHV1CUyGec?{Qfa8Nbml=y47NQ<da*qtyjyGB8!DQ;9jKoI
z$^#|HX#SNsA2@=uTc#hBIaW#pI!4~M0|`o5nH!y|m~6Ry`O!j=I%JzX>x$1mQf=}G
zti+QkKMFdTf#gyQkt_$xd01WM#$r(u0gCG;#;Y0{BLrNBHau9U<s>59$@!m-(t{>(
zDjx3<GOv~d6z>qtT1n035ro5FII}%=cL-NrSneH{fP#TvqKJ807KN@M4fXB2R-ycC
zS349!!0bQ)OsGFI4qQmm0=N08a>EbLZI%+1Y_Ggkf<pNCG8Zah^+2BPPJ0#8vlo!l
zCXhMgb0-#b6Xxhyc}5_Wx;FuAXvWn=gEFQ7<R6<$CnbuH19%VRd}NL?nJ}Zoks0}&
zR{mQ%EkDnJ%PqH$FG2d&>-Mj^Sx>kf?Y~glZw+^Mw8$0A(i-np?pKpmfvH5D<>3Zm
zY~d(_!UZY$1gE8`8JNVcu>?}-5<YRSM4<#VJKeWmP_bumokf~)^n_Xak+a5WqWu6*
zdXTnV<tU1*C;A$~O{yxf!^Kr45%VCK7UAU>sH|QJ2hY$@gB%Lx7IRP4p#U+BMck)w
z_QQ?P-AXtn*^aSNIEWnt^f6~maQIlosQHs_ko@0A);epLe0YYuAAy1bzXx()%0?Fg
zO00EKk!l*YTjvxR#Y~_q_iNr8)@SqA;r8;+)<TVzR!NkZ`5u-9vF*eOx+qP>%v!_l
zpfau>Lm2h=D;0O8-5VG0G5x+po`lV$C{fLTMZB*95Wfvd6!pr>_y$x~_}`kO_U!DI
z77XxKvm0u)Uj3!4rK<k1k>2`Z;XsrbyZFFU8U^T8(xmvf^F`$SJy5&-)IuI!viwuJ
zMkcee0k`)W>HSz|T8c5`l$3w+a#lO($<QxJSLLV_`E6&*!R~fv#g1c!U6!R;AT%R~
zI(8v7v?{(P>nEyJJtY&kVu~H++g-;%#;yAf=;0@!#T;Aoi%)S48tzl~fcx{Gp|6iD
z+Qcy0NOP6?3t#ildPbEZ`Tp2{H?uwUY*&r{rfeo~|7YJeV|%;*<)UUvThn=i1Ig#5
zMxav_Pby`GMB9|xt;&cx+ze%mntE*#IkJEv5>nJjVqARcut%O94v0W7f{zJ1c>)bG
zZ|>{K-wt5g+CGkrGj{)Dut(42aQF1o;>6)+cgLjuc9i0|zoG)LO{SnGCo}$<N?Sy-
zUAkRRV3>n|)R_J$0o%SAIw)?r*S(A3$;<?Gx--ZGD&3D25nA8wJ|?qDSI8$;&E#w|
zkzst4>M2gH`Bs_f1vu8jy&Bzo5I!86_Mq2YXoa}Nr#Wws6H{)`RR~Fz8JvrImbY76
z>DG^zvQF@)lfCmi+}*NK%5QyAzF{!8nu$N)4$_ecr)9LBgLiwQqpNExS|Ef4)~)c+
zD;9SBVE>Y?-V|W#g^lfbz1IeeK0Yeb1Fjfc1(^S#E9v<y6~DdD>NuX=lI@{zYbgDG
zeCpa*{!i0cXnJapT<r<jizC|W!q!j;Q@}&hiP)Y_DXG@A-VMHL+#nft&Lm0Q(=jRB
zmIO1x5a=wE)5E+Qdd|m`8#2PUD-d*v9P>V1R#4*xyIk$P7Wwe6A?cK~Tbp|qx_<G4
z36S(jTzEc5luf`Ylp@!a538Hl_H#WSm%pcRhFpJF)@>zUd9M1qvOy5b+W`P-j*v>&
z`W4Wy6~nFCN|wOGnqW1mkjeZN)^^|U0D4uz5<?s!50@s(1+d<PEyKsdc1z?N<~HYi
zvvl``z=&2%J@NX@{`nMlDfTzg@^#TV+1xPbyj0T~{Ch8|aLP1@?s;VUaNsncF%>VU
zRBT+`R#Y(aE(F$ZY&?0hQeb9<5QKHOsuqA87QV8+TDo~n#8VJOub~YX-qBBkXzD9X
zAPVl}n-$vV)?WdLceOIV;W2Ln;Tt8BLU{HW^XGn;s1Ygwc2fowo!pK<XU&D}dlSJ*
z;86aaJPH3QyNl8(!=sZLj;J(5qmfi55h)9K0tsd5nh4=;yGo4?c(PVX$mr3Digu66
z42(EzfZ3H<4(ND(A1yGUpWW-DB0D71z#~adT7l~R3uv@)G?&v@23{{gLx=drM$}$d
zMYFoHZVNkB+_-~3Y1eW7)n9BQeaeOajr4hP4Cg{M)P{(=G!wUfaPyER+wQ#c?~Z~&
z!TW3X9fJ1XD8YhEKIco{PT6mL8TcwN6K)yd$jCJ-GIM0>A<c?OR``VWWIo*!{uQSg
z*B&!dMsQMt0M@kBJ_Iv^tKg+06XF&WI&e;2(t+>b==2Bg=m-6%sF)wi*A0h9{-K*I
z!xv+DN1y7Oz0y7bR|~5e8L3(|P(Ypbxv!wLCW=Ic_w-lo8LYH9hIZ0k2*mJ;1XFUo
zECEm?Gn$ngE)B0<^mBIub0H40jp?<i{2Hei*-0>kYW?pAY3T-16}(-+;@Nr(vm~2c
zHco}2TcAq)aTX4cy2PR!T!Ajbe|JK+{anmJWBR`FkD0VpV{q!fL2shlSqXntW5~41
zZWDCazX&IRj>&CLteCFhcc^Lh&8O}Sp;T)#9Cq_YxXfw$l@u1B12b+5iBZMtc;$Iw
z`;#~Db!Bc{{k_NTZy$8aRa$Av6zhoXlzEhty0X$>CI;_}+lv4B%P3qFzsf}`GXFH%
ze5XiuHd5f}S3BMK-cCw-9-|9*p4hO73Zw7XUj8Udq_FYeDC&INTt!|NeKh}B`jb{p
z4Jerd8h1>%uuIC+kqEb*Dbp(~cp3ip>FnN#CFhauT)At&OTQ|1<PqK_8Ilgo1SnOg
zK5tnONE@&;SF*QVeE@i4rjzu+-&-TJ>5;rE)-8+lTtiMVvZ(-b<Ra)%CA4}at?yGN
znM_^)%9X77fNcF=0f-<%xyW-s01H>{BN>lggJXQA<pI?Kn#^Ir?XYyxQ&VlZ8DiUM
zwCu#c8dOR$pP@gysaaNjl3m2h5$i1+*-u~utBA;*{;G<Z2V6kgsRrMub{YUY$CBy8
zE_RxrZ2vZLlZ3&A4O}24^kFZHkwN0AIVzzrK>6;Fff41di%bqh2aT$DCNvGj6zUPU
zAMI$7sX^H|Aj2jQI3q68lCt3e6l)rOxkIw5khtxX>n??h4W%z^Bt2+I%ppj570V;H
z<q0?Sy`BOFD&u#4F?`d!LpT{9q3F0+$|KJs*9Ht+Ejz9sf%3+6qY&9A4S;-AAvC{i
zFCNeMr|lj<Vi%#aER~a4#B&ZBtSkpH5k#qDf9EN;99|sa2a`>&>VFM$Ie2L0%ga*y
zCDjTN3bs7O^|RJHA=H@kf9ujp$sv%8nq#Go6_sW~Y22~x^Q;LTRzU#j)l4G+k3nwg
zjmjWK6(iMPG?CgTRwE3v(V1Ngs`#nwSudG|7}xkn#V<dufG*r8<QG;Qc_-%gjVo}e
zMfR_3*~Av*NtP>L1xCihkax}$u;wy20Y%i49N~H76rP>(Qdfia?)d-~8<g+MMVp&h
zR17J3zy$Oa6PL;vA`Yo7-N!e<iw8Awk6kUXqA)mSE+RbjuunKuP8caZ+nQ)frjw_P
z<u#i|R1OG}?)BCEet=kDWeoHb74GF74vC7q*6XAniel`(CxVRib(y!n*ST}!+*rQK
zVHu15!Yc7yn--)tdWzve2VBx|2a!h>wC`{*4Ai`I8QO31rz*2m8aYHp*lM!V>pHxt
z;{dGqrXNYR6`A`%OI6U7T0-BzW!*TmXJ~uRxJc&=%@X$8t0sh!C9I#tt@;fmDCVaz
zr@?>B5j13ngiv6&d|UfBW0hpY#?{arlpp?MvaOPkcSWVz&gYUf-G}lSKvuuSiDwN{
zVV0*s^)*|=cd3?#H?`78)EehWVJuf|`FR~9h4)g)8@oy6od+}Lw8VnQuc;*(r`rGX
zpmax643hUZ5><wB$$Fv|3Nt7BA$Y*_-@kG|ZOrM};vmKb5=aKwSaZEyz|vWpqf&tO
zx<(1^uVqSmwpk`IGwSclX`GL?yLk#-24R`v{61%9Yq9|%{R7&((a>2}mclkVcFn^u
ztjlS^NHf9@(H|Ahsg%0P9TG+<(BJIY1a}1m#uvpP1CIsFd!-aJ6c0r60C)dgaOQr}
z?W^<}q4sQV83GT%ddA=r(D37VNF`4cKXm_F8z{=T1Iljn=nX8bXc5(xiR$}2rX($3
zV-oI2nI2YteDqXutFE$jgI=Q`Tb}n>$?g(9x|cX_*C&1FX+k@53^$lZB_L*=iBe3M
zyL^&=9Nm7ySGG%wtB+px=MUcEo9vejr%xtlhe*R$Sx4f}+~%^+)-O+*rztFI4wNwo
z8O<YI6M`?Dr3(s`+3oE)`2@TwrCb3Wkh;EYv9m?iCkD~EWpV|z^i*_i#q^zbLOTN;
zPW{?SR(HD$5vjY_`(BdAGx<uB096lne(Hw4m7OdV?x81-pg3^A{^*8JP1X4~5e4n1
z5`xigtNrfW=C2#i1D=i4q$~Sg$)(iKN%}!Rv=K%pQ1+V~l#V5H(cpp<g>btH5U^!^
z7x;lXcH}Nb?2ven1aLIFseTu|HRfQ|+Dt-2Ai+oJ1UN6>AAy8Hn70LU_!opAfVViQ
z1FMV%<NcL>sYpwEM<gEjyalWS$_T!D3(734gAS-~Tu(Sc;rvcw!tnR~mO?aiA~~ON
zzv~e)=5xj3tc)9|+6lt6*n|2?5t2p51w?e+w)ocX>-0Oge2LO?ISgrfx9P*dsb+$m
zleYGHXh_TVR_=V!D+?q2$L*)kb$^|yr${Ngh`<UiD5!m?)J|p149rF&IUE(zTa>(T
zV_rySxdP79IOLj&Ke_7gLZeR+2$qSnB3*D6SG}HQTqbyGAzA*}q*$|$nkQ#PLNFxS
z^`+x<P(PaUR1M=n<-1EZ8f3!%dYkk@_S4S!$Y@8~qs0-i404^IGoVRSsF^Lq<kR&!
z_|*TnYVDQJRh>!Uy`ECR1YOti^LHC6pOCXfIUp9x-Bq=B&JQvCG~ay{S@7(8>5n-b
zI_2d0mhAyAODA_AH-WPlCHAQ>W49-r7>$+WmQeGUo5`O+SsT(qGnm6@RS&sES*GXJ
zO<8QDt?q6E|5frB9s^*Ti;0z@o)wKx=w$#}4Pbk%YP_Qgt|L_2Qe-GBoBhcI43@w9
zQMiVVw4cf+SeoAzemM`kbNV56i#$hnn946>Y+YkgJJ+z})?O77pLtr<qJk8a_Y#-h
z-knxfq}qXRZOhWvsRpbayVm-eTEUOOM-?1m$Zf-!%z5gOeoT9&F?>?|iB}pL84#{u
z`b*f2MR<XciHBi%bn67cf=za%gX$|ygc8VLTgdVIYI5jvFl@^@eQ#ax<C;o-L;7qS
z>&dUdc<hs^L`oXjZ(ST7zhIaJByYV%fB1t{9HDp5B+fR_#EKmFM9%-4qZ9k`@FD5f
zk^J{p<oXXZbO$HP|3%+QR{8q>;mdw^m$ZeGZpz%2s{|L|E~J4`m6Vp;T+N0mnlY+4
zV-ik$7+*W?2}?9l%^M;R%UfOUH+s{O2LMJKsZU~eo|bw1IB@WAf4<xubeYnYWps39
zca_Heh{0yDmLy4$JE*BLGyuRdm!xae^9T}6u<j*6PB~eKOrxaXW|YecS_I<iuZAP}
z)ztfguKC4*VNKD*QnrNzsKcyg)UN}e3mg?xb08-5MP$y$|G|<M3J35shd@K7sbNon
zqHms$mmNMSjI5Y5mYEPE)Shlq{H$iwA<_e6L{rC7zId^0*Q!DaXSUEKRhn8rOL})q
zn5Utlkq_KuMQ^ln0vlOB)FC@MlN)6&5{dj?z@!qrb20mBX7}c6z**Jl4HiUhgSY}#
zbY2J5LIQP+N;O6KgaMeL1tKVsNhfyy;mC<1I4-cLL7PCNz}|zVA;8|!E3`d010A%9
z4!1p?ARzY4u@n}OQ^_$z3(k+`iqiVDV4I+lypJlEwKXxzMtiW$Ku74V2kLq96`8ea
zEG?^>L?PrFOF9=i5liF@Jn9|pJD0a=ex>8e8Nq8lCcFIT9Z120rQ8L9y3jn;Cd@w<
zLCnhP9hx$^H#%`9+Qz80SY24HgO2t3*<Obl+D<K;NjI_xc$z#vYj3`K@g1wBvGdk*
zkb?Q6m%zI1Xc9KE!bWW+|6G3^pr*u3Js-Now2NSed_1{|&*?14o>O!0#Qlf!QxAxI
zD*3$}Xs0@kSn~#g1Ls2&xVxu^n;YqKZpQT-XeYkgcGWH2=QRm32Vae-G4}rY8=;2K
z2wv_k;74DvG0^SL2|Gs12KSN{3ARmeFWuuUvZ(ef|HgY+)z%EIGb(d5635?LgioOV
zy08y4m5a;&g_V(!{zoORZ)0inKa2cbTE8x44z#Zv{XRFpVK>~9rfk7XNx;|xnJ(AM
zUN>}H7%(7OMK)|r6cVa%_l%$JmxKb5uJy~yLi~t`*olw*wv&0@Yuq?I%y0|*hbgs$
zg%<lAyzK0(ZwWPRv13H&)CtPA=ppoDDJGdCwZSnzm_R=o2Vo&J8pAu@2QUH%Q`xqO
z{vb~hSY9+_%W%j?l(XI437fr%YrnW15h*tpc_Bi{42C4)79K)Acnrf>x=4~eLdPLG
zC=OU%F}&7Is=f3ynJ{T#qUD5sBdCc&-iQEroqs{H<b`)OoNUJ762@`IcOt{y*-~@{
zzA|Nlf3+zK54Y~_1_lNM{9q-KU_?4OmosCSox!x*pbg&c`uZGWy?vbTQ#Nx0=aI-1
zaUft@4`~#oeRlJ)i|~l~$>$G@YX9oPbRFiKI7$Q>vu}$t?Oyaf7dH_v?5(2a>#wKH
z@bsU(oN$;+f~w-gN+r3*Nl>*(r&R2n7Bcr-=e7TExDV&5PfvL~8Tu@d^6KFG36GMd
z|ILu2zt_#fTR&>;C<Er|jaYY^UqI$v=O=jL-`Qxo)=L|>27L)r9J(_eJ|CyjHJkvn
zGMiGGvDWs!EuD}2C{kYi2Rnu8^E94AGM253d>nL{pZHd=!HU#=IHMD`-M_zT;bbd~
zsi*ri=27Q>Ha+FQl^vUPv1jsb$p~g06_hr{0yh?p=Q;l5GgqdNM7E)G!RJ-|(W6d|
z&E3V}@!n%5i8gfkDpxArA%1f=i;!>}=3*fEy`?&?8!f)DXLLE~`_}O=;l!g8#m7;Y
zseR(LTy0Y5w4<u@@x5>0<jjq`6J=iUvz<P}fyw}pZykI}dB!DB1X8O9yvT^vp$&2z
z6p9@nRrQ3CN3gfMqMI>_*EZ3sHt4rQA^i$P75(SNGOpev50O67vqFmj-;3oLXEpot
z8+?-tw@v-!L@uqBCgtzN#@=J}_|A^}w*?-*EhfJ;Cci!AkM_iCX38CY)!kvt749`E
z@M|`i%Rodv1->&8nzLb5iQpQ~XY-U+A#>#K?kkI7OA|OAqS8}q35-ocAET+G@%34Q
zfU=r07lAn=tQKB%AhiA}@r_nx>}WB4D*MgCQ(J3d;1314!6iJ+W2^q_5u=G3hv#Xe
zn1AHO+?zaq7cI?g=W0E<pfS_jj<R^G<Y5pHgkTR3nAbX=qVb}uaf-;-xm_#DwXUr#
zRq&0vSp1p59DI;AyIyAIh&}-KD)+hGV6WIOt6|4Zba%-_oUWxl;aWq}?r0J>ny7U*
z95<X+-}!9T!CrHwt1K(%88^Ty(*_eoFPRcHBUUYVdtOqfb<0gDvu+`Tk*Cxs9|mc}
z9Ay><=&eX0YI1%H3xXss7BD_Q#Z(8%WuH)(jkyDht{TBppl{6kIO;gpjG9S(JO(g?
zo0Q-j52ukRg|*QT>W)iet~Sm@wX|FEnn)M**J~N;0Xp&Si5R$E{F3K#&8v6#ge&-L
z?lfPerYAe>0006DgQH(yg<gWwUkZ9@VRM37>!0xSr55T6O)8)!3n*<~L>OY@Ev#5u
z5iKBi$P-zU=UjQPG%W4p@(#PVCQ#_2T10b4AphWJKCD|;)X!^rUAB;~&|G-n7lVF5
zZ=S|<bVZeD0OeH{Lu8i0C|8YRlkj=7u^N}e+3?R<-_#iza2aqR<aPGUg-(J^3!x1C
z^ws<G=|YGf^#y8<O(;?|WuKgsS#ATRWOj-4IEPc|F**@2Y;gK?1B+W>ui(h)nV@FT
z1(EhO$bz*)CHG|oqKi38E@YxRzO#0pKeHywy46s9ChrBeijhnOtc4p(VC;<KGgsy{
zd$Qo#x9mvY;G;{Yq5r_EY&3g<Cg4evKQA-Lo7VIDyk+gyjLB-kRi<WAE19#LyzzL;
zZ;m0Fi^DFVsErdT-i}ZjR%uSlEM$dir=Y^qhg<8K!FEHRHBE053)!}?ludKtjdDZ5
zUH+5B<t}_5*VAASd5>@t5iCj%3aHwuGEw1SOl}Z{3n2Aap4vv9A}V;Fu=L}NT5$NX
zN;`smv6>+LGGRlS9jE+7$ai7Z3zBgLJI^AkUE^{|a=eM{+sph@`*i~fn47Gnzk%8j
z3fx}kHm;+X@yt}!t2HZ|YhuZW=|dG#ZK!}^7{Y?45m6Yr+COCY{u8aau$7ZIQGpU>
z*EIta2VJ~&d>$b+>(DwWjYwN?X50#6ZPeD4QY$~2!)xXOR2y<P;VS7u(Vk*dk)J!i
z=7hZBE*g1k6>X7rONV)mWYFXRk!-g{KxH#+pew+nw*$~~A2GJAKTu<<L8BO&p@+yF
zAr*2cgLC$amM_&amOdXhy6xP#2`T(s6&R}T1yn^{8YE|L9-&2;JB#dnzqdK9;g6V`
zC4pzrHul3tVpBJy!}aGW{61jHNc6>nx@1G30Co-;B|xiJ_#*-MZG8gkQvk1Fely00
z!F3=ziE>wKO&GF`D1E=~NY%C4CS#TrS1K<M6>5y&j#dt!AfyKloY<1nNCn6kyD8(M
z=XevgtOyi7kg)<6<dGN!GZ9|d70Na9s0#5ps+;u9-4q}X=s@q&Uo_@c9jKsMc14CH
zTyVSVe6747d;rP$(u(36hocW^r}>sdK~cACsV4)Q#>>Nw2{O0jXz|h%fX$Mi(|^Av
z%N5xJ5#y50eP<?@R7|pzI4ND-QI}|zV)Ui`0C&k7MsntN{PFn|b3E2qouz_|w263t
z<!R^`Wic@esw76gDbJ(vwe`X&I3_FI5-Z-RdH?(5<@}7~U@EbrWY$XRFqyNwNvK0O
zk4@`@F$2KmqV<BrejsKIt8go7)YPNf>?s`tIBq5;13<g9Ypz)+1h~d!CzytJ6ze8C
zVupaNdgq*pCs$8_YCBvr?lLBup+Nmbvr3AFk@rU~v&U+l&mx>kIp)mFn4o~aRo6+`
z&*fa|>TKp>)$L<(4ef4CGGneZe}55KDw5S?)=t#7j1RBrW19%P!1zOiP2M%N$>aUx
zQ@8@Tj<`-yR!!7OZK1AB6)!c1bEWeOHHHykhe<XXWd^I|!HR=I07Yq{fUcTqzQACh
z5<hxPzo1AI=2T(0a0nBObZo%hm_e&9b&bDe7}ths%8T8?i_Zw8g+;=wz`1v1TY`iV
zy&m{6@T<JArs{KZm&t1=O<cM*MJ2sD)17kM-zfkZ#I5tim;sK(K&JuRU__e~DG95!
zFcE6|!GVrZO=YlUf>htOdXeMg1c2xg-&9jT&o&R*r;920^fG#uOMguE&Ep5rzdFes
z=F%mIipanexItdoe0mwcgf=M~Rg`OIM#p*iN5vvord0koT3)bp28SG#k4|qA<}Ss?
zos;biKWzgNE%q^#A>d@YIdhLDP|8LQE<&lpiMNdcQl;Wn_88NQ)1DoWZWK`aoqH5S
z01o$&QuD=(v>+6XIe}ib-9ZjexxLH8zM*hnlu&Pirk9b4-{qX(c(8Wk`D9d=Q)HRS
z%^9!GfJ^n5VzROWMFr`qhBZD7er%HK&x>SC=!y@ck(M4Twf-~fDnpl~)dJNRDc7cl
zOQ*Lzp1s_MIdNU9FVwwM9>&~dsuMS}f?4j9@Ho}-5V~EV?b<|AeHLwCMmyLzb6}yX
z5Ay!fs^8D#`)mQq?m_0IUzUgU0HCN9tgk5th;~is&)YvB7zRxs(EP{f3%=!q<zW>b
zp9EoHz=A}mF)LtLcSs=ON_%=gxK)oU4HgK*C}XU3os5{bw6!v7#kCMnWc2b;DNf@+
z<5FO*F1xGy>RgvbpEYO1Gw7f>l=tO1u{&1;7%5Zk$ce!NoQBft8z`&wa#&ze*EHV=
zcx1odR(h_K-_&4Y*7M1}RS&lAqg9U&f6B}D?H;Db%n!E)%y3R{>V1GYc+3oYUh&g1
zTXAM<Tir>IyDRIV9(KvHIB{gcl~YCII5SG&%sgR_MLt^j4f<c_{~95-+xcIMuf+fP
z1N;XzU*}(&@BjP(7*g}K-xovp+Q~JFk&2IgjYrTe*1;ly>PAZz2+CHjR&8Q>HnKOi
zad*cRaDThbe#$TipqJHB6&)S!c-WrK^z10vV9A3VVA*g&6GNJ&qoZ5zT4=cGi>8=l
z%HWs=vGaHbe<Fo(!YtNtF+dn$PzL~XrlRo869f-OSqXY$L1gjcfusP}%nyG;Nwca|
z1Y@g&>pfu!O>PM$Nsfaq_b?d*q0yA_xAV@BG=O|Pql!#VeMMQ85d-y<RQ|mv2Rak-
z!nic_XjWBu%_D-YAM>z~$Nj@jHlIbT-5Ydh6EB@YloLpfN|(TdjNiWX<h3QK7>M9V
zeq^W~*j}6^N21Oc;tqSjo$~64r|>E`>Q|gy)`M?VE25O+;ka_LAv0_<7mkH0(k9^k
z@cp>I_ld2*DtUVbu%3r42~>l@67)#&V7MzYGir0XPUpD!=JAfqA{vY6DBltUdW?JT
z%|-s4EnRK<a<T@IK^@Trs|D71u8ah;#clEKv;f3^&rwa-=4$zBNkoEEbLY@44N$!+
zT{rK-Lqw!c;f}~FiaeGQb&r<S+!$47t&c31dK^z7{Y&=pdPkd4^*qQiuFD}1Up-JL
zWpAbuEkDWGmLnTJC^od{Yg(jFLf5OTq0^DQQPS56sm3T}I)R+Dn;o7GqPaJvFTkeh
z3>UoOd+)Utykjnrq#(W=DKzvRfVY?YN}eub70<V}k5`iFnw>DBlS@Qs1fpriGL&XW
z{ypMBj3aTe)k4$JMTM=Ga=%K<&$=o4s}fy(2fX^gnVxvjXTpS?5F2=R=w_##DlcNX
zhuVYZ%`+*zg4eLoB-T<KipzAj9gtX0*kp+(t>q+zdPA*L)`-2rU#0~~d0rlM`;!Y_
zW6>>?n7M)PTgNZVJb|8;oHHvnj@;J|qR*JY(y@~0K_}!Ed;WA_s8W&yO7l7O?Gnh_
zO}s+9ALZNR>x)(?!BA=7X+>XhRl~G3Bz72HW~e!nsnnD0w$WYY&xiX1%*?Gp!G!lk
z4Q(9a;H0#<@nw1$EJW%DOHzH+I^xw-=yvK3_5D=wJ$HQ*<0AK?QWP4<cQo%6S?=T_
zSHgS*<sFQiRelPkoDQ^qA%aWNpq{TAeB_Hae|-SDQ#aA5?1~q?w3C3|C#Bv|Q;nr(
zkgK$2xV^pTOV(2#Dj{)1ImUBcCDX)#C%X36Q82Sb0RHT={M);<c|0swMM8Nfb+02k
z2*j%}?}|Y|WINr`vN=Ngx$Vj`7MH$Er6XUex^3q$vB%NZHXUv&ssaC8zVu||u20R2
z<@>*F3=;6;s+$M^02cH9vyNeCV&e2acZ@~eFZF}w`kn`Mi#GGMAXz^EQ*DaJTAIeJ
z2_X2@<`<inBaUz(n3(Jfc)o4j>z!{iv3lCEdgFoT?(QsF(q{`6tf^8Kq>2e>n{-@|
zhLPE>oI#tvwzd@=-OC$B>d4d6W}7{oJccKR4g;Z#8}j>-2x8PWI}fX%Y+<XQu^t{H
z;?#Z+j@hlk*W%uTNWO!@Xw()wcM(mudj%jmHZ=^-u>`+c*Z4QV$%HWC9FKi5n@g{(
zyHLX1p~<H;hO}v(mAlZat&Y2(IB6E7vDrIKhA><JHvsSFu(DlfA*A}mgTR4>iGj!8
zod=--cAFwjdmxD$umwI7`LJ6eM~>)5Ma9d@3pHRAVMJ##L8l&SwAzt_8rj_<@a<A?
zu<Cv<Bf?neW-PA1-6UNM-0E<LJAW-iYuL=P`m(x6Vo%%mth89x7se1VyGHuuSuBsc
z-^_hzWHtW7tb6B@;VVbv*;m257*abI%x7H;?cW0tpPElu8(&t5VPm}Y9bWI2=Yg$|
zXSz}({pY<*u_Geiun*!;y#58ou<^9)?14$0oJaYY_g;oW_3=3szh`=RbuXIZUIX%D
z8aQ13`v@JeYdeW=p+vo(``aEq+#Ecd=9rlm@xnOqx!?o+2eu8<A1wo!UL0Q@envtr
zoAY;Ez}xTFa$iqZNAGv%4(6Kp2L+qP+d&qi_s~*&nE;Y5@SZH(ip8AZhqGh`+>}a=
z{V~tck?P<$rSnLNLwB<T%21-yMeu}qEvBSENdPNlP9#8}u6=S%$1h0uEe)SicvkK&
z7pH<K(xdY=MMPybyqpAdSB?1n2t~<y>7%pJ^!9DzqgoJ&P|kOC$iHq5t{lE0^J3SN
z7>53{Qih3(<8wIrxIUKyz9-}#>X!O9T?QW5eI80uaK1AF@9IAs{5Eq76@`hps>|-H
zSo3y2Wof7p%0@(usRKUoB*AWy%l$xiM+bXn$$tFrE?y3<-fmu+3T1D8YmYPFvgzFT
zOb4|L20b7zHW@JFGHHrvQ#g-YfE_23C%ZHwr!E?&o2C1A$mumb{<<!Ir=R(~TTk^b
zf0liJ&dPk9JTmGVTauq|HwMFZL=G27z>Xb%u(FDfMf+w!|8PoWlW{D66&lY4?sByb
zX!O5~7&2UO8@GVskpQ`0ieERuNAD^A+0$p~KqLt0YrI87jtzn1cs}@A_~OgE#?Sp}
zZ_9=h8a*I+Tsw}zb*cbZ+d#@=@FKt4@Bd)Ed$-)9#Qoj_<^T>;aQO5~*(1Oh1R4&4
zD2;=K6#wGptl?v-@|`j^JrvV!=8+qrAG2s0zFeXc79LDVacRSMe_;_-2Y|k5|Fa8~
zjZ#oW_zwA}uHRShqu=K<{_l>Nz9y!`jkLCS%hd8ZH`Rt&3_npd>?VdW!4H<HW5hSg
zYH9=$16ABTrw7Q)MNq!*q{&CX$pQc{9-;QFJw{ZKf;e4>jW9b{Mev+1%K?$vqDXA(
zOn90a8}~psa=odys+IDf2qs(%Eqnndt&`&ogYe`(bqLfhm-;P6YuJM89F<c1HLQ>K
zWJ>vGl5)53G%Sc`1E`|;UGwqMfi>gE5J?TkeJ-f)XF0IQG>D~D=W62S!R;nRD;Dq9
zIdEpz0&NEwYj|;S8~fO%ZgX8T1I2fV4?(nAT@gJ4()o8yOvTiv?%HDAXZuUZkwM<5
z<BP_h_KC-1dFVHJ1EoP@BcwkSw<W^NONN*QKpRSt^~Noz%n|YP&;3@1<+TNvhDb_t
z0K5KywrQ|&MQpNC+}P7h#Bh=3P_fMRyVapKKn2(S<N~;mpPLrgf2p~Es@{>xpT1wC
zXu&0U#3xlZbkSK7f8^TSip%ra3oKcAm(c$Ka{$x=a6^-Fsh04->cSHF6l*1_)Nt7-
zLqr-PJZ;|scLr;M1&q)hGH84AYDxakM%=>6)O;4Fe%I%G*WZaMmI#h!Z@k&n1e|ZH
z$<`~zY4M$Ma>ySCCZFY35GHu%8<tJNTU)OmJYCjRxA^6EOe}9qp7x3g*AM8VG2#Eb
zp!qkZh(7an#`xK@l+4&&Hw?NfnC}{<+ceh}Zj*WR4PA*k=tV}_4&Wg5rUVC(#E<}P
zL<X~ocBn0hr4I>-7&(!qTD^WhU-4{<)T}Jy$8poWgSuw5F$0t|Q4c;mT+E^Wf+5Q`
zE2)h=sF<Tlbe%K?f6^Uv?D`xCWb-jXU<geW)rd{SmRToNzsJ5BE@BCa%C?GTse|AI
zHSi$Pu52CY;tA8trk!21G0b=5OK2|}XiM}Q$K8;^g#;`ITu(e8$!+4URAqlIOc&|K
zXi&0n*c!5b8HSPg<~qdTm+@;=%`UZ7cQH{(=Rsw@k2EIyyXu$28h<U&3quRe>SL^*
zo=)NQ*R_W(*16{#0b7h$<X`2wemPC((a8)hFD2DGHl1x<XLMRZwMtMiG2;{tSWY~p
z0BO9b(ekiYp*2UJQT&5AjWoB^lOX`fm>9=qJ$8@qzCGu@Je}`Hm%!RN_Z~=5<xTH&
z4&pYLUKh2K_Y`ELOLnT1q`^tHequr!*<@$}B)a_oy@>^Y6vqi6+tM&fS7TolR`#nD
z<LSc^QM7+?H*5s(_z}A!FsP8>1}1TGcWhJAu|6s2hS!JGs_2@rToiAIO+EPET6`RC
z7Up{|L@xZ3%G)!^X}u^))-{b<?8uBLU!><Bp6JbhjkN4L2)0A&>zB!QKv!FBokoRx
zLfpH+wqtu|j?>uBl{?=%@z^eAeSDnOAkNfqE7ikqoNF+*Z>)B|ni!k3S!=t0-m?CF
zIxImr+JAjyY+iXy`~5NS^Wo*M+6Y#aY`{|y6~#pK@}fj(>e8@0Z742qYx7wmx*IDv
zk2uGwxOy<61YAn}KtnqyD#DZzLhY(q%D~b^abqp#rglpZ#T-iO(rcxgi(?J`g*mz*
zV{2bDH`$%!q1Ir(Yh3-Y)NsZOVzlMu&c_Dj!zS-u9ily!Aj7WXM9=I~Y!~zaMV{Uf
znS|Fk+#Qd_-xBV1nX!C$U++5Lpgp$|$c)Ba8DJFJKY9%t^zRD|fbd8T`sJA2p<cHM
zc_WfGq@M&7%#YV&119HVlOT2iod@<_5Tt~$5!fL?&}KR84iiQp5Qur7a{4jla4^mX
zu)HyhA!M~;{K=D<Q=;D=Z6)MDud}lU-OsMmfX<1CVoa|aA%L`Oiw-56MI}@YbQlyC
z0?O(HL&A}Wfbb0+5_IAPBm-TkCY_-fydOB5)M=h+sC-k>Ty~kIti(vA_j$_RzfYAh
z08@oF)^uBNXXw17fCoddH;c>H;h!kr+CpO;KdX$C`wI?1N1~B!Q-{-l|DmMPl1iP#
zN5C9NeQb{kZT95UtYtjb(3l!cu76CcsW(?*aXVECVd8WPTWX<@RY3I4Zyga;=N(Cj
zwU|S+F4yM*|6<VVV<JRMnfOlkqJb8*E$lD7u@_gP;(1nHM5zbb@XwCrK-e9I&Gr-&
zQS*-50hH}v*)Tp*4$Mi6CA*4kUm;5g;(Ptc(J{swP{Z*SxQ{oj^p(#qbVc$wh(*||
zWo<Mm;>4B4s!cYT18mr?JQ?mZJnGg=+k9(T-``dHhhAf4L&?*9*JB{4y!4u!CqyBr
z*%k4P;g-idWIN;8D|m4p?}qebGB79_a3t$uHeHtHNbLsdld$p20*Pe1jDL5&JIxf-
zC>5Qxn@xYRS;JO!M*4(1%1QWKjBBy+S!Pg`))HY94$&(->8n*5`*d|s2R?z#+!E4y
z*rCuE-JJ!0m%R<Eh^1r9Rt4Qi)@|S!Kz{vMY@<RD=Pa?1*zd|sS?3IFRJM<!xI|Il
zQj=hFlWQE-Nb=dYRK?m3#*hUc?2z&Tg(J`Xh!4n*-DS5*YS*3X);+mboa@#M)nNu;
zy9{WX!EdF)ZwIrNm)b#7RGLd)zRfscp>7c5Vh-GJPf&U?<~_@Ya=_w2p5-O3daEo1
z5S2nEq^{&6Lr6Ybn^=WXMX~P4^c9Rat8}WF3SKmvIrpF4kii)w572RQ{R=~cyKVD$
z_s#Bdn@47kcXouw+Oo7GeCSTg`Zyh{e|j*dms+}Q&FZb?<+|b=no(sVep5;r$n0hk
zx=Bl9k{-ChB;mpMA0Jb;;(jP;dLp><A|3lw!ltGvHbVEco}DT14=QjHN-nOoA56;5
zAfB^RDso-9T15e4ahVJLf4wH4R8@@-VtGmh>zs#%qM;UrqH#*Ai~(>$4Z9|Qo{hGs
zJ>MLMjUA=x|0<JDi9MC#RXZ4Ikzs0Se8j8?h>u0mr<Jtm>xyRt+zZmUi3M&6dx7Z3
zCmm6R)Xbv^2hd1gaMlCBz>ME<D_SMUbtM+E1-1CpjSwviX4oL25B$jl{Zv1iI0%?A
zBhIPC%vxyDC`BM_?+-zh4H>f&XbbvzTHL7sRoTW1E~loD{;t)D3Zz^ORSw`r_Y<Wl
z(rx#0B->UjGelF}LQfj6HCq8gWu0JJ@Rm(lNtDr%z*02{<=`$~wOdhW3^Z0ivVA#N
zuRnF}>1^nMR9WumE;L?n@ktn~><ihoD+Wi0UHAl;|JAAj43ac?;Lo4yp)9(8_564)
znS|9452)T1djLXB45`atvc%}&_nn`eoQ*9>Jf3tP6`i%`u*5{q;kR55EO|IdtNuLx
z>5mMA93AHwDS#p9Rg%_P1b4p{WAr-dJ;}(WO@fP~XUwrWAwEWt-Qb6%60;`Mh)EJE
zH+mb0A?5Blip^zDa&>&o0oAET2=ozeZK6*DGk^sN8+@@vz?`qX<h8;{mMEiF(2K9E
zT+~C<wh3B_3vj4P_of8`OlRa%G%9XE2e@$CxXmh$4-q8_fzEZF6qp+-F9)mDcCr{o
z3{`iEAKaD&*LF2g{<yztZN=bL3k*%-ZTjo(C_i`JWNQ#ywItSMbwGcy06>NJVU;y#
z89is4)|Dh10Gcm4X(q`Muf*2OrWU=uYDY;*#gt^cC9{u#Dh&xc3p4)Zz;!_FE*H$o
zGIQP=>k`>jch|7m9&#MnnK1+d?S|M-QA16{ICi*yv7*yAL8|6YRV65}+r|o*vAxcq
z*}T9^tms-&45{i=qM~(KROA;tpwK2>ea<hgApg*W_SQC^L8-<GK8|4^hTbfY-<p%V
zgyF(qB(d<p#VD)?BfC#EKk0+;EKI8HE4X+IyB|^#|2r^JQ$m|}%zuB5JS`MJva042
z1RH^@0q7Z#IBh0yv%&_aaEKRcMbba129_0F<D$R=5zSQ0cYANb%7Zu6GPT-Xpmmbl
z{XdMoV|OS~w{9ETww<ilwr$(CZQEY4ZQHiJV%xdd_k4O!YiIBM3#wYxtT9o~=sokP
zK2t<>d(%xc3;)_;rQAiX{v1aP7+aaq%f)A)hB0QN>zr46lc&z(Dx<?ie)E~RiHS8!
zalLOVzHBRoqLoUONo$t5yfU#|@ZSp9!PNoQ0TKY9q03j@gwbZOys!s}clvlL$ClYq
zk0932hD$j;_b5CIa!5&{zD7g~4eQS+38B{1%u3oX@W3;;97;L`rHiU&1Db=1*7V23
zn3AV4YO+%uG$N`h8BA=r@Egg>pfL~{$ER;T>^Zd>>PQe6TY(4*cM>kRJ|+CUiq`6I
z)jP)HT0{MTTdlC5;qe|wQ9vU~gt*=g$kIeT#0m~$kxIql@!=K+w-~%7b180_q_ZjT
z60@lCqK5T8Z=&dl8`GV@`Q<ND)_9|Q$!+r$8DiXR8CiXRGizhy^z&w>b<238#MirO
zWv*%&Vr!({iiok;c#4~4bgo@kcV??hZG>dC>%Avgaj)8OFg6-%>4K$6GXXWQkAZ@x
zFL-2?P@dj$vq1A9p6*kqi^F1oR}P58P_{t)&{-}+ih~eV$8@ZP6PDl-qOCHQ`p?y?
z;pBQmxozBaen1O9G2VTAvAg~VI1a^$G8*M|IU)e=78*byx&v<v{Zz!EnCt8|LTjS|
zgtEcU-d>88y9}gI%!3$x*o{WAw%(yF>yr%n;oOr8MLxj5*#@$8?3rkqY<6(OX!*Mh
z>)@~l4XCi<DPucC=>GgaMoNjk3@<D+qV~}k16GG?bE91NyAE7uWl97cesp~u!iFH%
zmF>sew#fV6g_dbKwe-V&Q&k-w+f|Jy{prOC5%jN<5S+GMNY2J6!=bce-9HmnGE)LL
zkX{`tx8ja=1+-Mfjj#T5y5*i|6aYr?+`Umsc|q@96TVyt;s^O_OV!@ZY3qDpDj44G
z!EyXj{sK~@k~RW2+{gc9le>dw)OK^bEH6NVXeZGL)SSO+6l$&_Ifsh=d2hlVrouj1
zxJ7e)NG5Ds(kP^B0Dj1F5%bjCbuH~0SaP(RC_vTegAXf3P5lXK>}j08Ix<LO_0Vn0
zC^rf&;y6e;aYrL52SXu6!zY|?8UKWX+yh!2jHPZ*2Xmw)W?G&mppOoAN)TnccdwN^
zsa35%8j*Zgn5J#`BlB9|H*&HC=yhW5l{Ra3&BlkLlR>-=FJ5ZGN(Bsp9Ge0QA>)X-
z`GP->solsAl~=Ea7)(WUt9Nh6?dqy5eW%?eCbVNdK8R2Y2&I9t_vY&GAs1?)lI7r%
z(_rZ1xZ}d$H*+`Q!A7^l)vA7y?B*aWSIiWNeyD*oB(9-~Zg@T7+QVli!<<t)5hX~2
zKA*gG=|t>&VY;(S+>ooSM*pdPAAzM7w}k;N`iK1JTt6XIN=QTsF@&O>m^=5;&SSqD
zNwYLh@K8Xkjq_}cW)ee$%&Jzo9r5>fn|=zh@Y<<dUtU4f*_;A0e4ua>C_-}x!_{OP
zFZW0rozDG&d^H+ao+vfuxW^1tbgRvrCvlL3SBgzl*WdFT^!u>b${ltgZs2HFniDt-
znf*FSYDD@$F;;ixJK=HvV?|rj2oYSO^q6h>$jWvJEJv&C^0w(2<?z>&XQ|e#w3+SW
zQi@BbK<<XAacK7xCqbOHzg@!0$*C(3GigMl4U<NbvNjj^q$1U%11x5bXGw}&G$VAQ
zc>1DY!1nW;W)(ra^oQYvEwr~n`@=HprirGgOt*Z4^b5*mY2GV2=!>$YW0qMX2ia>U
zA|l^7)Pm}IwDkXmGFs_T4i*m?@YM1+)47a9aTgFBMjyme2>zVd3Bqx_TAK=&rhYx|
zlEFa~vQXv!-UFo0@Y@4(^GDvnfX-Lc*eTNqE8|4_F-<k5bzw2lRPqEcL5|K!_XIym
zh?vMHI374J8IwMfX5Hn17h5D!SB60-FHlb$QWxY(#NXX5DdDGw@I>`enhf)z8B5N)
zE{xHsnH~`=y`e?!l-0m_vr(<t=w_N8g%?O7-#MVtGVT`(%a%+~-luSuqn5-8O@^T@
zTfX~S%`Hel>PTSD(rhqo1cR>;lXpf|Bze*uOC){D!3-yL74gFuH1+M%fMxB_OU-LK
zTFX5Y4|=MO-<3s)|1?OaFKs?=b=8KrO3$FM-c^T<*w&###&BJXwr$KxAQp!Fc1<N8
zMep2f#~7=sQ)c}|5Z!MIm68nBur>|r4BP1LB5O!%cS6<->Fu*^nl{1(Mz6a~JLBRF
zF~P&k$V1(@#tAzi-X`Xw*0K5^>f#tm<PJ4pU#h07VaG$I(_tLT{ON%Hn?{pyT)x{m
z=G9UoGBvxUxzs-KIGI1X5W0AiY^mte@}<*7tuuf*&Xc;902Mt{&}fsisDTE3te;Pl
z<Ql))4W5!|1MU#K1%~gqxua`?@0IJDFe|8WvGBY0gFFvzlOHdo)7URiNS;=lWYMLS
zvI*Wdj`vU?b+~!wedO3p>!#<&z{H`nYFSmJ(#DJ)=kD$|#S9-N7Ioed@1SR?n?MN#
zvhcnEr?o<-h}x?JTV`&d<mPL)xhfAOhzd<m6aLR&Eir8vXmF(-1X<?kBdIZ{SI>2A
zA5{J7d-MzWb%$?*kN3^lp-eqMP{ZPFJ;z&gjB1>Na;+FA`dB7f$%6Va!Ms|F<gf>+
zlc^$$Q9dVweKvUp-1jW2Q{fF4Mi8M1Q^t&rngJxx>vq>OOo07RR!Pjb1gnP$6@9*s
zzSHZqdJydlZoTC!2sA)*zUH8HNTO0QTg%1XmSwPAf&~yZf|L{)K?<zWDyGmiPfO-~
zDPdV50|}ZGTYE2MO1~~{R`#Rx10Vh)U*8N}^p(=!?q=?(o(ZD@@Grg)k*5=;=kf4x
zCPF2d!cE7%&M@anb*6gC{E|j}e_Za{mtc+bO20nPDPN=%fsz~Kw@LDprj17uG1{&?
zi`0}5J+ADOinVfu5LcS>a6wfb&Ft?tEs0cy!cIT{ha@+~KzLbK+?J%1nCxr#DTN4t
zGyRFC^Ykue-5I5vzm4oyd3>REi)Xh>1Zmf@yS5@>h4~|G8YkEPisyGq%=PDGU?xrN
z6U9Vz%6YKA00%P(qxIypx>#n$wYi=*inUfF%fpGgG>6#96+l=w!zQbi-W6-;5|2o*
zg2CS54#Au3t6uJVZzPTePMM~k#<dhdKFUj46Y)i~zbQ*NJ}ikyP23r$U>-EBlLAt`
ziH<)$ftJgLVqm)~^rJmd0}&L>`1$oQZ7}Mv@@o+|=?m(W4Pjfk$6SE00iqfYeQ&g-
zBHpQclu;#|GZI%Nsm{e8u&))9;4_jiw45EqmY`?$`hBxivJV*kwCg2{Z)FF=ARJhr
zn=8myq~2aQ4YDZXfeEF6o$2xY_Wpj>!H@Yk5ZJr%UDQqfT!rN^O<!?Px=R~fwB1b8
z#26tb8AX2JAhG*v_d2$@)q&_$E&5e{!K$s$JK9qbR6u+Vt@*4UJl=%Mp&koqQg(x2
z>1Sr@vgU=w%5H%GYUS*DLwe;SJtOC(PxL#<ym}a%5Z>utXp8I~o04@=r$TIg!p8);
zNiFeYuaZ2_Yh)%5SzUGn4h^BXpJOB08L!Pw$aoZ~d_%~4IAjR5XmIzt_tdZsj=44B
z>TDl>RQnFWjpN%An3T>&!sQ6fi{rUt7s5zCsoDAUd-ERzf4DSxVfSlpP0lA;+Bg_6
zo?0QS(GK;^W4^r!v}zBRsAjxM0526b_>bOrcv!pm54k?Bx=oI!Suh&d()IMSx5@xy
zpZY)UwFoCvp_OK5^?Ede&$3pq@bd@W+6_+NyD;mfzpC<%77hPcDG>W;H$VT%h9u<t
zdbliJKNgKc$aL$u@TYVSW`N@h6qAFOugU^UFKL&|AhuWvSB>2K((6|zJ<=+IQhURe
zu?C?I$y9S%6XLHtP<f7%0-djR%~+3;@D^=WU5;bdg?qZ^jS}(cVAe6OUH0uNOhI;i
zGbldaYCQ8L_cmqH2=l+xFrp35a=a5m0n87x)q)^lD&)uf#>Yup{h#18Od>O;#EwDE
ztNQ!om601Qm&t~2mKo;&HT&%ulnvAI2m{~Xx+A4Vo2xHf#?G`xPu5WWGDP+;jMc!=
zhZ+SRTaUa>eg*B$iTR*9Fq=bQo~bq4QVE7@Kn&4%9#jui0*;8vtnA~u9!@?`hyvr)
z3BI;R?T-;Pf`U|=FiKeRz2>lj52^}YAak{*$@#{)NNvfS{|#9@3m;ysg++@8Udu9X
z)x3V*WZHi<8V9a7%s2pozlC(xW?T<H8_hA;DY2FJZ)e2lU!pBzb(m?i1>9r2W*Rlh
z2wQ8DaC#Kl5wmQEoY5s%r+8JstExgcv7i0ux~g}RnG#vd+dMWiXz%BjyscDq%67H@
zV|=rlgw?#B4x9W^&u5IA_FjlF|K$@-9Wr`(mbXsD(u*rUW97>UUxEp#=G6tHLCm01
znxRk!5C+JpfMFduW|$2ZZa;mOf54S<zp8OE>V8poS@+0(pKBxoQr`S7M(k-q2m<JA
zTo2<6OVA;^Js2S}X3$wYHYy}A8rE3H5*7{T^|xEMgM)%$gJ&VWAx~RCh$edh0?>S!
zGBM&OG?=<vS&qToF!7G0cJ<Ln{xZREVFf2|;8{lXzYrfqRSZFIbyv!+jyc|r=|p1z
z>IJz2byg<`tDv`~Z143H*fnhy01yFGQz*2R0{DsYsP0h_6|CvGoU6UKF-?I8jKq1o
zCGYN5U6cr>M5PBLL`Mt~_7~+XWZ}C*D#<!095g9af%wBdgikGWu1{Yvf0;f@DaXsc
zIL~vkk3odY(9~qW@;v_oAqvq^7xy737HmAyN`ob^m)wzIk2rE3ZEgNro*|IbXJBzA
zI1~gwT+D0GTNQyu$C_TDB$*n(b}gP28(qse0;d&ZE?j|dycY2dK5Kl<z8<a!y*?p-
zo1Av594wTVv4WV6TQKgl>^h$7N<rMQyu6CI*}_72?bPBe+!TyoP7HLNU}wqjGLRg*
zuPzPfVwUBhjc->x><C&tBNj26L9t#Fkj=9TTJf;}6EGXY$7&K#B*g}$WB`vpO&Yy9
z)JUOW;1S;HiEuIzPZGf@V6t)@ZBytogm-?5i{@?qH&Q;me$GG^IVPHzI49=VizBOq
zPiLkl>}|HBbv2F8@rXzNq3N2@NXquwtdD!4@+>7(r8U^5geh)_F!SPx>2F0$>8ZNh
zY2*j-hmx|G|CPF37EqSAg43)_WoUfIp?9}=LKi}&)U?M-O%fIE%zi}DsPG>Bc{{t!
z;r(}6+0JP+c4Wb+)C_BpO)(!+#QLwx$bO#uN0Mh_T0mKeE-JqHq_M6!EJNi7Y)4N|
z?#6V{ZgKN$d;04ScDg_Oq8%pw=7il3illNMd8`V1X{(*Y27OZh$&;CH_CpEQ8xK}m
zC!~Z%Fp@-v$I^Jn?+(SogU;QUdxV`tjtf^9L67cpTzwHPweicX9ut43<lqBu(lc%t
zzv=exAGmrD*DrINdKWX>?=Um!I%FR2HVU7P+eeG1TkDcSvHY^ke&ou3xo<eJzCrEt
zjiDXxwNO>|V6BJaqHmm+THbp-|7>|h8)A<9ueWi=q4h?C+NM5viK0aP{?gTFs}h0e
z3lUs=)g`T(#WdvI4m&FGr&V^@NH4;F3XSB=wpP9sI3MRLfAE^{V#bYA1;6>F(@_a?
zln)ZVgH)(%YO<DUbA4HTC_5<+7tf1|$02Fy6`<A8{=vPInr)*|J^*U;?7qz3Ye+_s
zncCC;+Ew}rDUHm8FAXhRs3Mf|+_JX<sizY9Fh%j{d_+(pTg!q_1hATIS?2R93nxa)
zpuGP@f(JCKkJiK3?S3rAX6Wn|`GW?7*jxJn|7VQqK2D1b=(lqS`nPlFe~eL?xI60^
z8#vRN|NrXg{|6c`CP~0<lO87I<_%R?&L)2SDiChcld1y%JHA>783s2}K;D>ag-9w;
zocyjg&zQ?1wkJW(JCEjo13yk5Ms9{pz)mW(bKUxR|L|&?Ts;M17VpZj-CwW&OKA93
z-RTU-<klRfiv+kI8Yz?qO#_5<MUc8F7<8$n55PNsVH;7K{H_AOt79DCyA6wK-QNX<
z#o)lc9Flc|U{B$%*&JGOW!L-yRdCR8L&!@yUO^FPt0`uf3C@d*;4qm?OWp8G>D%nT
z&!U7%p(4~w_EVSX4G}+p@o_aqulK~0ut7qnJ6K^dCxa}vk}f}4RY#KpcU~-uNqv(L
zL6vV!4k?(5WWW)L?7m_oa$7u6Vs1vT&AhIi-5FoG;ZGM*-zl}-+};6Ss+BYAL@FsL
z;MRX|*a}HohMOYcYs>J!`rp<lctNfr7o~;6v6WXNE{YYQ2!9~|+=N6xdw+bkK1mMR
zE!Gq{=Uv+-=<tA41R}Q7kd<=glbFp`w|odP!V#jHtCK02J<rTRF8VB!5u}J`Clm6Q
zjzM1-f{>r6QlV0QE0(R>um*YDUHeM#=%$pp-Uz-A8m>hv3AL(qeEaC03H(mE(=la5
zFB`U<xKElFP<L^LSSaDFKR3C&YQ?%%XbY^{na=xReZ~sGwA{?}95mt#!=JDjrb326
zi5CcikN+3nl^k@O_5OE+o&3_Z{ujMzdiGW>|9$FaSy{(!<NwGq3^Robk^z><nyphP
z+O(7*U<8-1hkx~^?$8p(T;AsAet9`Xe^5GVytI<T)_7mGoE&RwZHVaqrkP^TToXZ7
zCnY5nx;8!`c7+d66plM{`ZLJ+&G8Ger728^0CzaRAmb9~3xfWW!eT{9IL4~;CkqUX
zCnx+z&}x2g4{`3<s0wH$3cN=)ZLn`gAVGQ*Xo-i(0O*9Klz-uGilh!C&@pCsOb!@=
znxr70JFiR<kjL*y?F0IZ%Drh$)jT&AXubDX$2AP^MKs-R2%Qn1y?vZmOqCl%=b}ww
zLMChD)vU>)_)j3bE#aQ46Q+ThD@L5w5VRH1b2O1)MhGe|7)E0wd?vTWk|rUU+}9f1
zJ83+9o3&s=RXC;ZS!7`Ya*HD&EN%rqlYH`U+uQk%#HmycDCC(G8pYx{TMGxK-T^ja
zmTRv*;|Q|ZQmr0!V5L!DEf3?+&Z+|b6sXED+#iry9xrSC<AL5nv}`V7`bF(;PzgdA
z7ippxxP~a%3Ss<wy_R)so^<(~=PoOH;Pw{%a~H2PV`qh%m@R0>W!$N{zhz(SrGgf7
zps)+V;%g^5cuAM!+wlWr;}m8V5PAD*28%B5B!|{#Qj)nrH0GLfIURov+}*|5b5>ux
zG5+mZYR294KegzT@-V=yECac*Vk85;LvOnwP~FSjwPLz@z4CvHk-t+8!;Km<KR?%}
z_SBy^=Q?V>y$9-WpZzw6x7~0ERUKiiXpMC^xk%|ASYn>yxgH^3KEtc?i<@BX5xVjy
z?$Mdr&N_)+KN7t5cHouK#6qpuq>g#$DDhu)Q(CHmDo$oz8{l$;c_!SPUe>FQs0Ogi
zMlwlIW2wdLA-O<B)-Kn$<6XQ|Q5A<Xy3@@noz_GbOpL@{op46J5Wal@Qj?BS%R<Rp
z6g|m_PS9*pv8Qmz<u41oh|5$EKdx}7xWJ((m1VM>4#QpKn<Z5SeKWUnR`5`Tybo9<
zSjK;W{b$J@ro5{5Km`C8QvF|`>i)~|=Im(lKPcX&xh<SF$Le>Vs6}@)vyvrrd?iSe
zuhg2PO;S=whZ9@7Qo0NU`s9N}fFR&-J6HVtwt2u!!GPm=Sy5F?jDVPUczAr=;9Xl-
z*U-468^gGJa?`B+++O@bKRUhqOw*iZW*Bp|wX^FUxW9%56JshJbB~8vvFXq*d1NWp
zymW6rQ^hs`APjPb2<4#g>Zu~!XC#5A1iK7*ykCXkycc#&FISrkC-(wKEygPXiL)K?
z(5=zv*biR_XC=|dX{6KEiQp3B8#~*wk?kQxfgpo|i`7g3f`Bn{c?c+81BfBl#_#rz
z9t{g}Q7uw{n<!`}xO*xl*hAhppe3`}=q9T$t}eH>w{1%6!V1)_OW&Si)0>D}8+qu`
zpfP$H>+giJgQKVdr-voRA4t?MgWrTyX%8x|-jd#*q#$ihzU4aowsU)JJ)Ay(b}{7}
zZw;X05m!dw6uc5a)as~-R5KcA!d7XjB{y&qqSCTWDEHp`CbFH@usUJy*{h-4qYDe6
z$aIM5eX(gO04(bMJQJ_H5*{?N2N-dKPv~Sz&(8XX_sZ_d?s&guZM?vYyn<V!kov={
z+hB>=Cu80s#+3w{-%Q_OZXS5>>f;-9TJDS=rHw;wYTj=4gIWDBm1gI5=hRh`#Ju|N
z=Nj&H7hT$Y$^sl<UOWM8-9A|(YNKD4r+-X7o*I9)p52|vjoQW1mEMe;_;l}_%vv{w
z-G<f{=EIz4SlS&<)~CZQ?)jnfy<CjfRa>a0h{Ux#2iGg<U$_aR-ks`=Cw&9L9zn+k
z?>^xSyz~Ebwc+4@bMtVW$I!{Xl$hCl^Kx`uHda^dk$MeF4_PKI5Xu<{!;Yj+x9kDH
zZ8&6$vlExl5A|X~2+@U-y1}bY={6jgTJ~j=EjNU*KkZ*VocI{=y@rv0Pviu0k60k#
zq|_&JmbLA&JA<zVgb+?|!cVabv8!)mJg>DpybI&8;n~=VcqC+F%>-rJ1SHmJJl%hR
zyuyt(H&lc*4pPmc+EF0_2of4X_GZmA=qiW?<MMLyaB*{Vri+vC?D3D-!Lu@#BG;*1
zJ`Rpc$V_CXspR6E3S<F+KVkU+g0&^=TLFMijpt70L4MU_tYkiZwrgjUMHXdBbmZ>Q
zl*b2RnhQM}0XE^$6BKMo8O?Bf1DFi)8kbFjgyW+lP7~vVp~WJ>F;FV@uMYqghGo^7
z*SwlIl_zs%v1N7wpnyr6`>S1!dI^uZZFP%eYQKPz!4&{&YF8xKzBxW+A~0sgIO@Hc
zOxMDOys{8TVpbVIDO`e3fCh{ap<MM4hr~LTCbWrezJk?batYo?lSF6;{doSvT-UHB
z6~~*AfP7xviD0T1y;pELg_%JFAB-A}!FNX*W@?HSVvf0ysKS_c8qytLV6-RDw~vIP
z0EgBZGVz{VSJ4g(Qre0xN+YpP#4>)Ld_8)-g6J2oUc_PaaPxh;2){E?l@!`Rwgrrw
zREc+T<p8@W-Se5<iaV)$JDfzsL$pS=PrwtH`Oz8Xh#QNRS`K3r$fT1!Xjolx)xtdM
z+z{SJsFNX_oh%T6Rh2;0Bi}<IvUf;U{CR7(sH|afR!Aokv54XL9a$g%0|eP#1o`8p
zT4OTO=3?crfQ8vr6(`c?gb{?26!A@)yy0&<fSZ7#?3|yA-+HbZXvx2NpGkFh{kDVH
z(7$DLGA#U;Z#YOU+DLc2AA0(gh*G&X%clUNvQb&=RzZKWGw;g%z8S|>GUH?u?0OV4
z12LHe&M@N->BVyc%rb~__p*SZ5_`YP1CgQqJ5PU-5CS1(@Z%3au2yQSn!E$^)sT!@
z*A%jW#qFsoq9N!grK|jVd;tKZfS^b*3)1`6ha1^pB$vF8xORu>_adq7RRp@IQhWY+
zaC@a6RO#kzPaoRTj*O1mcn(_dFo3OS(bNRqhCXtBYV|Xzp%nSIlUyMw`054j!soix
z|2er_DuKNcB2xcjS{qW00Vf0P@7_@D6(klCiOy(2?Z%1MhbMr}V6M)aWniB+L!n<b
z1~40B2uF^B2zn<FlP@SUi5}111(-$!ZZqoj0?fLF-N&#Yg*UrofHFi491dppdJrHZ
zJG&#Z6SHJ6I!PL5n2+4Wh(<(8hocP?WNUlVv+L}v`F8yJ=y?C_>|L<bImmygNFNv;
zVJ;<1c#&<$&O;KZm{r58VipF+cP~QF<WK!#plRS9UIZ}|XOO%@dV2pk^5C2wqy;Kl
z(;A!}x;?ZHiw9v(jsRLO!GIU5um!-QjbgYj1@*JU2qilt1PCfWIvv0`jW13G)sqf;
zSWvbX(_cj;E!xbgkAQEKT$8UOAg=T8mJ=MLkSe%b4PNtJp6di5EDdxVzq(<se+s1b
zw3vWsWw{_aO#rvaa44w%&p3m1DS&P<g^#FUbx6((7%n|%)d=>f^XNLa=(dq<>=+Ko
zLfOg%Y<SiA5(@Vlp8fo&-)LUIe#}C!o21QjwxIX=V(DH9m-HQ0uF%rDkk;c;>BGAq
zSLR%gI%L^j)cE`1ZxopY<+o<$!^||LKj#Oi;TeA>4#Cy~Ao__;1V~tD-6#3&r-sE9
zjs$j+&AOkJSl=kB;WTtiURMw;ElU1;4#cAe8U;@zP-Owb@6=;|!uQ5SEi4!t9#J1F
zFoHQxki5!<&z&CjFG%k<w^){jHWJ2U%H)9gwej+SI^r?v;=E)DGy&VOTZiuOM0Daw
z;tg0$l2!5<8{FKcT}xIv06M<%x6gbRA|7@CX!i#A*v6}Ss<^;xxy0*=k&G@yIy%Hk
zl>2v$Nt^h$0A>5sq4h%M`EwHwcArV8NfeL!0)M51b_0!+HsZZ?fAx$ORnwcr5)Kyq
zGdC-hUKFXveQ*?|l$uhwK59hBS;8-Z!u|H}vh%_R+I;N*g7n>A95KmcxNldu8I}@o
zK`>deH;fCV7JFAtmqLZsoIrK~t*}A03CKAQIGh@D0*e!BpVDU~&IPQ}Q5<?rrV-0`
zsdvwb&&&XC-NIQ+w-S_oZz)+hDOkkIIVn7RtHx^^Jhs3rC_h%(6EF3wyVh8lvOU(F
zi>Elz;;FmGc~UiYCvL|09!OS{bJzZ_IZNiioUi+Ri3^k^N+38{!Fi3l$}J~Q&Jk63
zk&|N3#C+WXK|~2=es~sea2af&z0l?(+{jQAWWWy-<i2X{b~zULtP)hj04nDmTzuxp
zfe3kPn!|%K^X|6XXoZkqVy;?H3yu5%1IU&BwvP>mISJrd%;VVdv=#Fo-^?i@oC@po
zTeNQ3N%zTY1nt+p)fQ}DyPNdC66K3O5ty0PiWiawY{2SXg?1e50a8_BV@3l;#YU>V
z`xGV(GY;(M`EM$V=~T~(e*6m{>jfxx@aKVCu`{gZz3!%5<Df!684^F34iXCspkh>1
z6q5gx!klhnTXPh+R&L;c<$4ThTo;(@tdvw`+?_8FsZ;G}%fmPSsh<K9<PAI$K4zt1
z$&X?+59a5l_XN5eyA%}ek5ma2xg9=WJ+>x_?=OfD#n=T2zfViSmKnul3ZF|vaTPPM
zHxD##;}%DYxroY~Lr)-esM>~vcqyxhaJh7Zc`OzXk+SyDP*GiWrc3ruPaP4-+LlN%
zkAtDA7A%xCI;SE$<?+d#PAXJzlR({5t0d7Q8v*}iau=5P+Ry>1MwM42kgL4lSg&CJ
zi{jRA&sSzVG*w_=sEPuPkg;;mr-lLs<1TwWCO)`l<p9R4OZq0#lAFzc_2Xqcaz}7l
zR0K@82hrP)&5x<wVg;=z^VUt)T3O7tOcDR5esP04qxi2aO-@D*#O4@preTAb_z>wk
zvq9!b*VqC{K_GA2DBT>FsM?nZ-TBM&JFy{pgXhuJ^u4o$3{JBM=jx6t5PcKuWM6y#
zGr%HppbeR0`1zi?5@YM8$ioF`16O%1^t&jSXGpyK-&~|;7ww%tB&s=m;4+-{EM2C7
zPb4xT@A8Yf5S-%PsSjG`JqWp7hXvLx=dGD<?|wLLSHNz#$2h2{!LW(FAiZ@|34x6U
zBTk$G;#DCv@D64fSOz;Ud(<d`G5xDlAGX(;b}h?_h+>sw%`WAy7rMMrN)Lq!N24=P
zYRmGiAsS39&9?!_LgPwsr`h8~@{iv)P{&h-x#&e|m+_El`K4gg5atkl$m(vQh5THZ
zY_Lw@djt9cU#vQq2!q*p1^X(vM#+F>3@I28Sf{WuA{Wuv3GBph(d8Qq){mdspUl2|
z9$a6eVRz$q^LIyIB39;G%+`9in6;EAyEWat8dE(AGd+r?nNc;5%P;|nva|S$1g^Xu
zRvrRGJ`k>}vb@nvz`z*AkfGssM1oNY`Hn8qA?n<J8FZucU-_FY>YvK=<s7IOos8@)
z(tZUe7-ER2xg?e`6pGf)!_V$Diy@}-qieRmt=?1b1HSBOwiIExsjPr&y+1rwKjf4q
z0L&uAIc)ZNg+a2kCs!8^T(28g=O8eCQaN)HjqLTwiR|W=iB=t}1X3p1%3Y9Fr0B(x
zwO$!xv*L^>U#dAPH4FUPej$t>mMkmPWzni~y(LyRz78zwFVM)n3=~_B8SqhbD@)XI
z69f3ekV9j8Zo+tJ3y+N1;xGf8usc@KI`H~m>N6ut`%35FT(gx$wBOO{L*+kM+h%|5
zQkOt!{NlZmC#(tfLM3&DL2pS2*|_9{V!IzTa@NSwlM|H@2|R4|Wgw{d*HecnX>OoT
zC?pUwHR<9j$FQ!r)srtH!vs_?La5gfi6akv(R1Iol^e5=1Q#yPE<ad0Jc>Dm1idmB
zg{?LsbG0g+rj4I^;(HC7?XehXn0w+SDG8dnDDY}7>)yL9Xg7+~$L!3e4gPqrlB{Qo
zVY*H?CF&$Ni0UV|$71je<k4w;nf!Txn}NF7w?dSqqP{wox|^kHP}rNpSsbLj?ui2t
zq}?>XZ8P|}n4fC|2Paz@By>U3(p;K^{(%*{aPq}6iT_z)lE+3!W@+Zxbk4OXT}yJa
zhC%Iobm#vLusNy|-=A`EJ-+U<7Ja%who7k6Ws_7>-2WjPT87w=s@N;!K-A=+Ei!#l
z$<*%J<ZhkWLH+EU@UTCe?ei2EBg?%(9xP~wuW+Qb_D!qVod9|8aeyKhI{2(f=?X5y
z0b2wv-(_I3!=q)I2zDmtLh;Uf%xA0hhsPiae!&U#f@SwgZ9M=^Q5o)nv`m{3+Wsmq
z;>5|rk&PP}CCA^9TdO(QUY`ZHgMhuu{khV*bJgRL4(lhXLMxyLA`81lA1Q_as0|E+
zsyTjYwmFydAdB}2wHVbOS4k?o+=Q*GZlGAqzF<WKNt;0-a3Eqv%bu7M1k62V$MJwJ
zu82SjM<C0wBqTmd9F^8ZZsv#*RrHth$<|^;xSu;d!}T!VA;r0UB11@BOxz%j=v$c$
z#%zY6kwQi_49Q)M83fOL0PUC!bXWL?ar&!TSE~7!xDb>G23gA9Rs^QN-Z%!lcSQw|
zoTm!V<ybRoQxPH74Xx+SS9#YOI&w+@v+~Wag=PgEOF{iFe`c6JDdW1RjMg`?6<>8{
zjgd&$fPlgirIx-2{$R+s5o{NeFx3hpn{mBF?1mS$Yz}z140!eVjkq6-ZY5P%0c5#c
zAXDtaFmp=E;;nCNK9O$l6%)aSLJG*U%to6hs(eqpzSYHKCZ>KG4LJp{>P*H~he|8!
zl&|5gW{Bbn(;SEXS|C=a4waP6Kmv?HaYP^*3PbcCH&5RT&NB$OCEqf;y4}|T!^!zh
z-n$I*E6F{49_KxLsM1zg!nF3P<mie&K;WK(oma_4WELXVQ%mi8o2o;QxEeFns%1u|
z1q%MV=t179b75Q=v&5oN3GkwB&=qz?@90R<a)Z&VQ{_SKpZ45fv49ILekh$<h~|Fw
z6#AaHUA0Z%ru|(@s0~_uXmU8i%oN)~*pb3rmQ7T>bj-)ybK99Y$88*f$jHy0sUT7C
zJ3<}bh!{~Foxr{<9L=P2YCP2)U*Qg^ej-2f*xy=MIW#a5uBziVKj${sMdq28D9cNp
zhL@p`QeO3QhBflD$r`?xDsnYY_;;(5wi8?02(+V3&w4_pmiLO>VQEl4L%D7{`{ER>
z9=(-QA|vJQtoA<GrrmCZHZvpU=XR&K0iDNKJ(I%Lvst)p^<{jTAm`Gm?*c;OD<#^r
z(M*a*`~K-pOXD?l9?+xGrFsk0G;OBSi(3LrE9%IiQPS33P6n9buaCwiii~CIM9fiG
zY3eoT-;Go?wJGc}A6wZ>?=EjXG96PoGL6ykYv@2kBH$JAt+53mtxOXo2viL?leSMs
zGgu3$<2x>d%;AC)4#FEr8}MZWb=YE-_!ob*ooG2y=Vs(49fuq7w?-GFZ!6=^emHyE
zlJ^gv-sQC2DvL_c^i-D8cXKO;X?%roWObKy?{0m40w1%aMoq8Vkj5yV;~G3??5pUG
z)Sq~+S~!b3D-`Nm&h}>i=R%i^Wvch)w2uw>^Y`R<%J6$)IJufv7$qFCQf|ZxC_~_@
zBQ|UpkmPMd<f?u$5&NT(mrj74KmQ~tYf{dd_@acVa)E$*56w!jFMbK<VYMob<tpV4
zI6a>{`l1wXA6=_AnpQ<ZTcKGp42vayy?3!#JO-dWOm%(IO^=zy$gzZP*u47!*pBq{
zDj?AdG4{e8$XisCtxRLgT0oujnwN0#x|vB=>>-3(oTxIFw``dqs~lRV-%#RiuColJ
zM=*B?isYitq7E=@^f|m#N&mh-r#EmCBK4c889Q?sUW$`YGK?z$>={1q?M%E#r@e$4
zygLL|@X$)GV^&{(tnPB%%A%iJf-DZZ?Ig=+m!umZ>#?dYeD%8)LinLGzO4({38<Qz
zE+7Fh-gnaaG<Z|+mnb9cbN0*z9=0-`lvr!cy_4cQX^^vCzaB)r@?z^3Jry(0$V_Ti
zVo)PDH2Ct-2U&d_lFWch4HX{y7_0asxKjlQ<PCXH!G^Z=m-0#%p=RYC#wcIpTtGfW
zk97Nan6>XxENenHd(-wk>#FH)IUv}4Va3i-KI*k@&x%QO>Rls6(7kTH#*YX?UYf+p
z9)p;S%V^fDU7i0?hh!*6i78x;Eg~7G5*u<Bv<7Gf78FST=TFf(a17h=D2X+s4?Qsb
z@z+1}uZBz2_M?*Ya|nrcnA+pAj>Bz(v*-!m!r%5~M%!$0tpKsP=kf$z<okYJzm;&C
zmST`$V=0vk|1PnE>~L~;%~>lKooE$p6%yMW7F6+0&bp81M-hW0_!^IPu4ZjKe6=cb
z5s&pY=Jr_g>Vs%lfwdc#zqdbt|9P@YT07CJ@~go!`h}kVZzLp!7S2xpgM_47)h6!0
zL{-;%41X0tgM+*z7IepRjvTcE;iOFnx+^MFqq_T!r?9SS+Jzv0x*L4~jkYF5%K6f_
zGt6}J)>*1MKwVCQD`SoxLP8sVJyl5$i;Zsdy7U+|=@`HMkuVrOCb=NoGZ6|E<Vym8
zRSXLI3`581Pclx%p7$*yK?Z!HeI`iG6EbmSd6of5sH&w*0KX7KnlmurGD5|v*Lmm~
z{SjcW%W)%WSZ#lFS~bAZ0i)ZoCnDF}4v8FhWq$T$lzx=`${2?b?4anJC$F3urgKw9
zR8gevH*JgY(u8Be4XON%wLeX|<-3~Izw!~&a25(wW+4tcQqk(B>|;SX;NVu83v${n
zf_uy^wT%-4Cx>oym9{x)D6A&#c8xQCxvVJ386w!ZdqD;+`Ynsxom|}-I=Gw$avAT6
z7-}htigxhcml0!TSFaiHK&eqYX90=>hVqD=-{Uc7th(Nx0P0smKwdprY<Y%9XP}wj
zn!On*)lE?#b}2w&p(bX4lq$x)cEBdEZh=*b^~8Jq(oX(yd#t$G@L5oFry$7EJk)E~
zGB%1Vh@u@f&5W5P*)LY9`Pjlr0Q8LOZCdw=*uxWmUL2EnAchE>OOQ!tvM=BJ9nH;W
zr$0XW*hrL|X0yysp|kBJ0yrt>;*7{ka=~62J(F;;d6TLMv*nl~LFj+Sr0)Op8eyM8
z#nqxo(<+_Q*8(f#hGJKoB>>98|7mtl60JK)tk3@V;+>TRKZ%-c6Jv?Gkm(oYo<O!)
zJ8%2K9dY^q_Y_i1g@X~Pi@=ltz2g=7wxluyEt-{#H<>zMP{O*t6Zh#L*#2O^bRNYI
zW2@^S5X=|^QcFc7-i3TnDRmP9S)3>wd%0$3k%UvL{>uK?K1vo{v%oGU4y~!4U%TE)
z*tcnBa<&~O@8mmM$)A~B9m3-<Gv=#WK74&59i-lp!+K~a-9!0Zqb$F$Q_QL{>NF+}
zDmwlmBm~l~)VT&f+ALe#+Y&G3YKTdvo5eQuQOH*Tdo&t6zB*EK1s-lOm7zi7ITk^z
z%0^s@;Ozetm{hyUt8Va~e;CUIg{wIAH$=RzFC~z4#O$`k718tASXpU^ZENK{{N$7_
z^)U5>b(H4mnybu2^(itLK0{4qfk|YHKI9{T`tJF+>h+Zo7IUhMnI&NL<5f0eY3mGc
zPa|g}j}=X2hD7ANMCMrYuewA?fw}hbUB+v5uI9CEC+FdCjd<lYxsR}uId6c$-3ai+
z`&@yL7h<)7ri2}a2r_dDlNTD^!tS-t@iC8TY~I>MwrUp#l_d%ciIcCIVzOO7hJV)T
z?f218uuzLm67^6y7Bw6yv2(++SEg{h!9DjdwC?V){-7k~?z2HNeZxP_D<9=uB^Xm-
z`mlps3v32;o~YFP8$SM2S5m}Ilg|ES<CZ4XuDJ3^gXx%QQ?Rix{Ln{0V#hrK9+=or
z+pIpn!ZD){uDqlFXVr3}a2J~a005}}l`j5|Rm;%D!rGYD!q(L8zsnHl#P?ec(jy4p
zd`Ef*cv0}YC&ml?l`k8ogft)?udeITBxxV=!ym>PZOR{9yu3DV!oS&UDZfbb&hD<D
zm$+B?@Oa(0iu*Zoa;jj>+FhMg@rZ5CoG(d-GOedJwk^kp*7T%~*J14A2SRs|wgp2L
zMC^er6o%`mXG1O`AHRfWn>=OahD&d+*D#E5gQyH#Oveu*AaL_-_Uz&}#}ub0zwq-A
zQAo`NfmT=)NqA@YRl+@c3dltGuVW?$YMlF_3C|NzTEr}qpg;Ila{cGy%78t!p8PHH
z_)!0g#Ko`g)ZWPAf6!Alt8O~}f@^$Es5@BUty)m(+>(@ke<L6n`b!u~%tu>43{4oq
zM23VWikg-y`%?48<4e7W>-J5q@P?p+$-JELmd-|F^!(cJZXaFs{#7;yw5Fx)`g}a!
zpM%F+f$poO2)-hyyvwCv+G97asPF)^QV^5`V;QPco=f}zhY(ix%`I<Gl`@|wuIR(*
zN4Y}No*Put*{l2p(67N>EApaf4k%F#Hd^t3h4=W&?=!Wu!mle>!nR2yH!0mu%Vq_=
z)9*~6p&8i2MhRAm(X)+=@|`aZee4tm8py*}>7qoq!B{Jkvdc!cnyx2cNnvL*)#A&C
zbM4w0APVQA1LNF`)gmz%JEL#I3K|OU)xBSzjIOae0olv;%YRa%6n|1belmh;^!w3R
zj_VMYqH;pK@X-XIvr5Vup_qfm$gGyqIbGfXG;n@yTNwsR<7!qm$!lt1D%-$RrZYvT
zL>9DYCsB!T8coaHIx*3_+80pE+OT*MK7Opmmhvl1dlSkn4&LY2q+F}8Ou`Nt+*W<3
z)H@icQd+F2j1s)LcMNGro6JtM6#Uy2!+6uVQUgZUQ5j*os#=nUv9$z-xsHis?^&Cd
zoKtKfMer(6n*S+ll>~GLaV)>i$ZZ21Wh#<sr~E{-xH;?9pDEVC{Ss)M2K)T-)3oSO
zFQj>1wO+PRG+T&$pv-)&<}Mgrao<!1fA7Z$Hp-m)){V`d@0cY?Xwp%?Q}EPpUCevA
zp>bqRaoHs@xVZBqGWwvK5EmZ-rb6o=mtazt5hGfpN;);-lvjwo56Gq|V)>=-dKwH@
z$%MJ2m69+_&q98qVqDYEtf7O?kibOCAB^mAF#=<cJG>8z-^dVs+!hfBMA$A(0?dXH
zgbv1dTqqn`?+=f!9Y9&Dx0uSq-jB1UgTh2e5FMZ=#w$h=9J|f$NQM*q@M%01R1O>t
zBtUU@&~}V8XnZO!0`$&}JOHWPxR$jq=QiX+d(!e3G7T^#OP>dwh%I$X%9|~eBBD@U
zo!OA}c;G?DcY4G<?+ySOxYHm2gu%(@2UKZ@laSMJt%&RXPiA$n@F=%wE{SMZO4x*f
zAMXx1;sg7iHC!P^TW&W__5N>hdI&a1n@inJr6RXGR0De&U8F`UOUz<~@zeHo3yfG$
z0m3f*J6PSp1M*uT0~RR|r@C-w8xP^%unhKUp|CwQE<8!pAxR=P%sU7(w4DOB^~&&N
zeF_H*jaf2f^hvOk=NcuuJ(tldH<?PcC9MUaJdfPQ>IxxJWkK$JI1PyP`2!_1ccrH|
zf2(#KFI)^X)Sk^hEjL>ZvQ*v}XfLZYF)-Il`2e{-++BOi9%xZ&h@Ew^Y=lJdE{)Rf
ze4kP8q%@8BJ)SqG7fGxV7Y`QopZ5@4C*O<1moz@!?!xZe-)x5nmtCAr{;S)A2+Bc}
z<4%~K=bX>?dz0ni_-E<-jOrn^!%gYG3JJA|dWZc}HfNn(j%hez587s_JCY=5EE)Q%
zm+#P|Z!{W=yyvxxb=5H^XlzaiptxV6@<<NxdA&NVJ3S=&rR)J8u;Xf)2L3y5(us8=
z1&ftl3U%Z2?Ft)e&!Dta<RzEMofM(0F?W>4S=>jN%1QD}S_sGJStV7D%>OL_a`>}9
zTZRb$P-*hNER`;f_Wyl$Xo~yGX_K{~_oSA8D??e)WL@?>g<V1{Aww8l>t4KpF2f5K
zPDBvRD&h!HnPz+VrL}h(R2=9t{zyCPg*!)?1g$e_*svGiw(KdqS)DGLwcd|OZf*SG
zWEMUTFYj}T%xNYR5q{**$rUrq&z{X-TZIwcXx?CZI54IzNS~P2{qy$%{K0KAK55{A
zUe>7Y+@=wsri5AQz<PKTeL<#S^>X`>e{x`<2ZF0X#JI<|(5;Vua}K|+AMyeCICRo{
zpDSQ;JtuDpvR$w+zD>4oz~TU)4tQ@KOran6m)G;)JBt-v{g?xx#-RV;oiOz6obpQe
z7?+Wx-|LYmd@wvezrC$P9?Sqye;Rx@op9+~6uOu}J_+iN&*S-+gWndFGP*96;O@JY
z(L1Au`zkPS*r$Qhen%#W_T9w9S7r&PI!Osmcu`G<`d0WPH#*D5$Ao}w^L(;i5=z4|
zh)m>5f<%6&^UU$cL*}qib2!sJy$Y!h%n&{z=02-=acltw*Nq9#-pV=`1P6=0hm;DO
zx>ulr6A~!(8ZsLsd|{-g8$%mLk6G=qWC~XEOx!YxKkwi=Px=+z`)8Z~Q>4hM%<NF-
zUCLHg$_t;tfKBU_t)DFyuV4~b6KR)Un#_ew_jBB6M}{c?Q0S2HeX&?aj1R)b&_GTz
zg<Vih_&J-dpgV;_tng4ntfe!WN@2|HkC>RUWzMm+#3Cx`jC22$#?-H64AG(}CY7ZN
zhMWBP`;N<N_*<sos};^5sJ6lD#K(%>VzMS_e%alyi&xc2(d^&GB>+#ZH@iQ%`2-%A
z+R4ew71n@}m9tHZWboqZQ*d#$Lh!#JqHLZeB)sU}+!lj#|2=>50T-efY2H4OtHJTt
z0zbf?=UrGB)~YDm9~_P{7VXH^pgTlE{nrV2TX7(WpxMqd&7hsr#eYSa&c%B!z$-Il
zmFRn-OkhiuHr$V*C;t*&LebN<C5GpeE>hrdJTD4Ek9CZ$;dn8NW~y4ZE1e{$o3Z@M
zv8~sNNg~5@^qum}R}Ar<N7A0XE<PLbWj6GglM-VAycph~API$^m8C3!?(yV0(9=xj
zWk$9;Jea2G5wiNASx4A95SZvGC5@I|^!0ikUZ>#MnMxhpS<>qWYqA4eY;~9!qZX%V
zknFcU^x=20L@OgglVPwh$cpaGuxG^<Hio%1h5@a9H)Z=)q=>E%vx}c^kMm!JVqz%s
zZlGE<TO3Xx7k)PaD1MU~NP=Cym0-5vXoqg$-SFY3fPhWv_;*8F8Z@jJ1%7#Tly11e
zkI2U%+WdtVG+WC966{%AhH$m~rgI~L;fqFdqkHl46<Y*th`3N43XCSSSfTj$-Bb9K
zh-0l6N}gqj8p&g<ej`|M*cXGV-ZrynGco#d=}&i89xu4*!xD|<I1t|nXBZnvFT|Bz
zrn|$w16LvtvFM(MKUt-i<~n2DEBeyTmH9x+JYQZ*fh5tUDCwv@qwsImp=X*H@oj`^
zz#PRvfVFSus9f9@roqXa*=2xUR&%^Uf9>22<=9$o1Wu02LoIZI&gJ(5tE!{VF}SFh
zp?D?X^s*MiMo`G&fFR_DtP_>E1Ib~%*CRJPKeJ@$>eQHmQ55TIrtw|dd`Ax32>sUW
zY!*e-Cm8q_$FAXPI#0eDt*>&?LhP$%6{vwEjHM=%J(pkO_1LrpI)WWyd8<Yzgp-4H
zTLi!e9js!(7N$faBfsR=u`!s?MTV6pT#A^&E$<R>(_WLnrh^B*ry0)_cc%h@O4l2z
zG1tt@>JQH5Hi~A$PzNg&Xo@L_>>Icza<~|*=CKF8#c3l0>>Hwu2Wg@Wyy>q-OQ*u>
zSElTcHT_-%R)q!>y6u_&2oXk-h{o~b!s#K0*^pt1Jgpq_C#BV16u0QNiUX_pdL&>H
z&xYEls~R)vI9$3Ih@*cAB=L9*F#4y7_+O8jN}xLWsR)xv01@Y)l++!y(B=sZexs&9
zb#<j(EFlxz69}b8;sIEtX-d4tp0GIIqzq9fjO86gSS|=!+cow55_jeMrI#Rd8o`ok
zz7<;~p$q;z)TJWtDtD|DD9JQ~5JP`j)kChl?eW!}PC0DTKlim7c{{MVA-RqwXxb0z
z(UV7_^<2nD$c`Ya4a=bro$V(_`3`>@h2LK;=6lWG6gQF1bK!FrHnusj0u3Mzgj%VV
zHp1}u9XrWQ;0?T!JQFf9g!@pMR~MKJ_Nt2B;u4%#>5;Ir3pWZ(2gq|eO?$QL^fB-C
z#SQ}bmfm9Y_~^J=Il@XNF?Kb9VWiO#Qb25n-u?^^Y6Kk@uajg2sA}Hi$R4ncuJLeL
zF<CJK)w<8~@ZmpSw#GB+#5k9hRR<n^UimyrWztj5TLw@y4!;6H4{5gkVGyNia^6xW
zA3Fg=#TY)c*+U0e&m?hi&0U(UrKQXXJ(o*;b;b^!<8LsZ(Goyv5M&81CnG~O<50Ds
z?T6$K3k?+)(g|IpOcYp(_kA0{yYS{AVBZh}w-r=h@h_m?g3lIHj+Q$C9G)4_aOlSn
z97B6wap4s$1gg|NMre=&#Zn)56rzl_p2!KmIde=Y*-K%D^bE=X>o&Zu-swQ9zv74h
zhSjHWTE3j^3xzZiq08xO-wzcxR&ASAoMjYmPmKW$pJAP)mqH}$wHm{DsAU5!p-M0D
zZ)zCRZbEw40+b4Rit%6~B6Ge3crg43{#<4Ki!@Y+-mcK?*W_oTEJsmbxR!_=hRa%4
z<^|7^@ozrmNC{LCWzHw2jFBV2Seyh*={k@L5JQ-!pUOf9Lqa>__)JmdHHsyxgC7gW
z!{w?=K21Z+6jd}-ixl0=igE%E1JRS3^N!w|NJyPSy&?9)NNMD8hr%7Sr&OhjVtbZK
z`%$^dyctIvT2pDj$@FQalXw!Z=Pm2Y)Y?U?`^EL<V8NHGFF*5OhgH#E;!;mLR||bb
zzX9H!SKE2sAlsg<c5lqZ)F;~?>p2W~<v_zyJKVi^;??{Weed7g_TO&&$61i?8T-aA
z&PN~u0+MHuNQ#WY!uG5W_3Wtf`{VkvPz0ajdcMs%3OF5FVesu}<fAcW8r#dDzMPPX
zR)>JUEFk?jOTn(=0TPCYb6}`#l(Di2paxw<RC-fqLjZxD+_D6bq4Ak+r|N(PS_SAK
zbswr%SKyVT`JlXt%JGo?vn%JpD78xY*F$?&JQ#Ff;7V^><M#mViN#p|CK6}SrV8ht
zeQ)81;I8GawbsUJbF7KfulDl%I3%`hq1-3go+bUmY){Cb0Q`JZK~O3wq556XBK{<i
zLcS^?+Mh%0Hb<<k0h)?v0evfiED1xlKrWz+iH1+=<)I50R7hn5?Ts(yA>MQOp}Bjf
zVovqX;dNi}eEds0Iff`<OSlr#nT^`j-&Tm(J9{`>P)A(QAT>as9ZbQn8`5vKmeNn$
zbK~~co;VdEUQ0g=h2z6Z6Nam3*?H8z{nAG}4tje#Nt{xc0hN#(%adX!eIhO6R8881
zI-%oBExHDG@;e{o2E$&K68O#(+^KYjLyf6b7^J@i`~Mg_r|!%GZQCXl+qP|^l2mNl
zwr$(V7gcQAwr$(CdF!-xU-o@CcmIR+vQ}Gjjy`5LLYDn;hn55D5I|=pJu>$X5l2CD
z&a=2t6ULgEos?7wF@nR7C`I$f!;vEmbp5ll@$MVEwn)38K3Oip)#$J6fwrcbq_#Hm
zeh}fqb%{V;c_bnl0-42U^+t^|SMKit2M4hqfDztCqJJJ~5VGw2>e&~RVLYviQK1ES
zDAF7VA}Puc-TCA2`EiEtF4w#tqMWBN?0wJU^_KWmK13Q~8(;eG-@z=E9W?uS^gK2!
z$iYNV3tLo%BXScGGui?*pOMJR3e&E)DiF;mPOmSm+^Ewq26;cnZMhfQWyWH?R6Lq8
z07@?$EpB2-5-+>SwpXN+Ixm4t0|e=HQIH9xojUZ-TV99HGJy(MbQw8P=gQqDW{Lu)
z9XM*-X}nVWzKsj2-2Q`!L`!&DW6Ce~edS>d4K|_`=gnY$5rL`D%?)I<=TdD>+s@Gy
zSrG{jxHi(j)6QJ3m+W^qb*n?j{g5gG&4!5D_>aQ-9n&jRE1_H+AQ9Oq8}c~oWDuE#
zRO-44U(V$E^laNO-JI2eJ^Oxa%aY6YL#cK%c3V^V78)&4C~^NyWx$u5XxALjUp1Q!
zpH^(Q9SvnJ-^{*EML!@*ap9@V$#<GF?@H3fZ9ytTJrQ%pYmEYl09nG>6&z!HXLC7=
zrHpIL`)d5On6XkAC63Trb@8EATsVH;`h><Uf=;}11*=19nafxRisy{)!O-ikKAvS_
zQ_J;VA!&$N8fMQB7XTUNK~B!O_LKtSDL+fTJlBn;`7|WenV!8s^4|9D#-U9v3)YR+
z{M(Wko{8aeAP!%j{y|=CI^O2sV8nm0-=S%itXNGu@ANXsU@z)z4ckO{1B@@R(s%Tt
z7i1mLd5L|T#h*yod?qxlWgn5k(yCX}IVah^KYPV3wrCY?mo9Qrzey<m25He^>5rK#
zXKP(qWh5EucY!3QtKU>6NMQfe4wtS{?^c<~UNvPe`_u4^4r395?P#t<rK!Re%*OOt
zeHTPmg;Q<a^!3co1CoQwW@mtv;a_AJ;^3jng#v1`75=t^z_>--qvoI5L@Kr2d+He7
zG6KMh&W6FMsp=f>gNo`_7{w3-@_FsC#1!0~7jYU!A?E`<Tp0}Br>WjAOfJf?{SIvv
z(rs3s6^L6jV=Si{sU6$CWqpWIm)=3K@*kB$vBx-`A`6d_H<H2yqQkos%Uh_p!1N-Q
zE^f1us-gn!q9PQ*&b%f?hUf0+=f*LK!l*e#xWwjzE>LRO4I`rAq4-^rwGQ=0uP%;r
z(~sgrvT2BgvB3*dROLd$spO7s34R8%a$24KMioQZ0Y^k*DzTz6q1Uy>?#?^T5-HG<
zPwFj7-*V>|V8*(NH(e4dBg@N3;*a@IQh7kW1{A)|-(i>sqSQuyAP)=_BH$^W{;QFC
z&7Z=}9C~a(%xgevZMHI$;{-(xzbkZK{ElbGWAN$4g!-l#PMh5`<o#)*$h%}b2Z8d)
z(W#?|Xt>yZ4Oq?6H!={vaJT{4(I#sC9pM6zQ;DF~boi*&W;Nx97A?@6k+=cerLm#d
zHUpy_qp!uQt<w0fVbZJ;zwEjH6seLDV~H!eY*8{0Kei1Yh7_LPg4m+0ScxKpZJnod
z`<v0i-IA=j6dZ`!jE6ex`t@zhl!F<PWcv29I-fp{nilU7jM?6(CmBFN4Y^k>J1j8X
zS>Dii0nO<3+U&reTDhr3;CGrMk?lW6&&LUaB$$7u@Hz>qH+ee9@$y)2=jyL)dtNXp
zFCgjN_*-^r<@pwb^g2|MmmM0uHj)vc7zkcQ-YLi0nwNf(U$}SZTsa2%u+DMm5aPOd
zNVz<V{|*lH9th8%uK<)U1sy@o)wEX>vpTi6w6xiX=9m013kJcRfOe<MucE0)YAEB;
z!Dlp;wj2fKU^YK+1DlhAduek?oooo5R3qAMdd5g;^of#>8+Obfc^o)>*V{>-K$M2K
zz-~N^gO}ZNX?%P&MA;UMiNZe%$o%Se)VL~M72*0djWrzSa_?Q&Z`(_|=_2Mbi*(^a
z?W9}DZsMT2Lb{>A*$RUVB9;}pqcrf1MuAM2?+@ra#WYj!1B-1#vWKBH-tN>F0>7(Z
z52e9Is>b8-XtSo02#kAYECWg^1{n=kDBKwWzgn9Hs-QvCK_6ln9Bwdl4IT7h-P1@2
zq2&&%t_vbRdWt%F*67`0aZFi6YM`y%&u?SPG0w<vw)iit*r$wwo0g!<^Di}4N_i=L
z6d%dRBA|J>(`9Qn3BuGk{nBZuLSREafI)NXpc=2;+kL{8#yDXE(9_^)MeCP3r`{)F
z98z_+O55NB%H1AhN>2Nr2UJWv?sd;@sHd~fKxTl&!9Ds2v$XWCj%KoE9BXn=A&ujM
zVekv$WM)p0k(C&q0Qu!NDxY8G(v$W9C!o=ZX;SN=uthCM2qJ?zpt*koITbEvBBR%4
zkFe&pQP?q!g0)Nd`LV3`Q=v|2L&O)kLeq9Q>%>Yt=9&*dUSsB9Yl=y=W2W|}kPoy`
zu0<6>;#L`KL9MG`mv$Av%DhwEkoqHa(kP$Wm-=}TlKw{StFHXq@TkPGDwqkWb0jn9
z|MnJ1)$-cHC}WV%2LAH$y-BSsuQc7Iy?#Lgv*DR_=_M>DDZb~(re5M2FQm%2uqG`h
zaKM9XyhWj1v0Bz>=!=9Mbm2F!Xs*0b{y9y7JgdY8uQ`Y9<M`$cE_ONA&DEG$J2!Zg
zK^0<K#I1fvI=#sRa~CD(2SNCLu=^a;i0^UAC0NCqMQY5ShAZ@(2>guVyRH1G=06*^
z>f0Jy8a32YTv_$us6SoQ{AYZYehS99R$ox#H7{Z^x-=_x>d{dhu44D_c@#QklBXra
z)FuTy+$s3-e~M^G+jI(Di8<i|!uv55unYlaV*=l(wh2DTlCr9<Si|mt+|dI|Q@Gxw
z$U}uU4L4P{(SL<SWB=)?&&cUj9i~UtyKR<e|Mh?M;XJ=4UX~$C_M{wiT~9yso;4D)
z-sz=^awW>&pY^Q1Rbvtso98Jle@hFHdH)$|PEWGC1w)@wHXD}Xm`7`fVO{X5Iy)sW
zB4BJrOProfcO}!oHkYiQp_?5^Af!j@FtpUMaHBIe6nOuAbhd~ApESU-wa%xPw^p4M
z?v=`YPUO=kwXfGzG6|~tm|~(RdF<srm072g4d`Z6K%qg0sH3r1&3-SWkSur1L6-75
z<nu!~(1M_~AdG2&OvRla&B!><I;DGbgisWDJhPY@#IVz~h9mnPm&01BaaVfkF^%Bw
z{Xz%@@iNxY&3ftpeAn`E(9`b!Ow2I)SdIBq<$XL8M9stQ+a8E&_#}r|<sW&xpRA|k
zOE26k@RGhSbf4V|ikjZ)(Le&w3%eT7jQc_Vket=}_J6BKkUr5n?*s@5mXzzyJ~cGl
zcEMkGX2+f26B#Slp7{h8f%NH9GElcV-G&_@FR%Dbl{=>%2r9Uc8uglm)z!h)+_-Dz
zN<?uzZVfcL2dQL$h~gYjH4iTw+nu*$CoX~No37XGPD^u)P|^kl#rGkIk2iO=&Y2gV
zzBH8nyMu1>PNhD%9RrhC9aJE(k0zEkFI~cMZuVF4NJ)R2)5D(<2C$)Y270Pgm_*0m
zH|5=Zt6P}skN1G9@``E^KRaD+q@*kvtLCL#&LYc_g&Kn5E=J^YYC2eud@_M^3g_XH
zyeK?NM^MR;U+I%z%of@P(Cf<^N3PbqX5%5VS+7|Q?cjkspq)f{&JkUE5O-6)SJaQ`
z_GV(;bwJt>ieEbUrT#q-x0xHsJg;CAYL89m^N7+Z8e(`4xVaM&`q6%4dYN>}S~47q
z1u_HHY3KiLt=;K~8F0SQS%{CSxC5o2?(j;!4=mT)OlFQ7M4SG`%|0c_&%GXca5!3M
z7D0wn$+OBY8o(Ix_xR|Ro!>;4+`(9A?kDT1`QXj-xVsVFDQ$B#<kyavj0l#tkKA+s
zPDfX)WX$Vl{sqC@xIt8NV!&olZo3E^NT~~Eet3t2R2$q!3$3@kQ($BJ8(I|gUJ`#P
zrz8`?8Y$E~R4t*sUKF_TmPil8Y8c=FDW&dXU?r(nx#YHpri9C1f#$TX!hJ@$QD_%m
z!Kb{%(Y&}c1-I^$hym=t!2?pF^(?7rT)k-8b}5=6ho|zEDw#@5`=o3uiz%pz^ZV^O
zO@Aaw1eU*1AwE}xkldT-rgL_th#@?NU5cT9mV`L3i|rS&N&<aMtRHLo`~t@LjAKf2
zXi2Kvp%Qh_zFL86rh@!I&4WYo2!^7fiB|D6((cgXT{17!0zq6&WrEKffu1u(*Nf#%
zdvSM`?&KPDQsRmw+qsHoeqS_?iMIwXaDwE_rR6$wGN@Sz3AKz6dfc|!ty1$qql|*I
z*~2NTNyWOC^4y9se8ev-58i(VT5PQ6mXNpV6f}fjy$;RhrC0aD%Ck_@L6qV;)BrC7
z3V!!c3NJJ2QKq1eTy8e^GHi0<6fR2h`MDpDzk$0+E1X$f<RVt#^*~UCH4(|g`4-<u
zuW+MzSC%r=*ZRn{Wi?Nl=UgggZx>@@PTZkkhz~UU;eZIJ`7?D)RoO7wq-Jb0E;98Y
zf~mAlq(>SuRGK`0TK-m?MIeIb`xTiX;6Jufpv<{5ib9QTM-%A?p>EzLT+X!Et<Pgo
zg30webi`w6niem-=w^5Q{@c{3-!Orzy+x*e2|~+{3P15GiIzjo9GjKaKp%E<ZUmbf
z?CAKulQrJ3(r+Ei@^s%za94`6g)Nt$uly}UH9k&I_EFx%pHaAAId3x3J<h(ESF@e_
zF)-t-kPKMWN01RO#r{j&MBQZ8lvCb(QL_e@r!eRd$aM$NA><rC+>cn0!rru-JYNCJ
zORViq?X0#sA=95@hAYlX80#a8gzu0Fdj4v$J?=6nat&5*<dpVhM1l>#eq`&`{Ck-0
z3G8^1vS$gYqw|#SM<KMSUwr<2+=cN}I;F`DBaIMu2L|jaG?5dflU)kJ7q5@#uB&`c
zf|M92pX=N<G_qfgk=2=-X-d|#QUXb3(RV11{gqRf5rEoX!7x1T1QG)EkIg#iFtQAs
z^fleFB>?#9E#tL(#A*;b%~Po|i}c#M)hQ;(jCuE4Mmw<wI7&-9ht)GGGLc}=rRN%*
zs3M(c3&X`PC^6DesbQtcp;~vO0hkuYW3^pOE(x^h{x<adXJkIU7HEwK4+NCY``_h2
zMvng&1Ec>9Fc`wI`j-RUcld!-W{@XJ@-IBoGwe_?XIWB9@k!VM+P3Y@krLe##PKE8
z?pVKXT44N1b(0R=J?9>YfTM=44R`$G*1Za4+8rEoLLWqAWp%r~J?uTb?@|8JQeu&_
zV#j?PQpfxVm2jO^K8R$Rh7~qwCnC|0j)t4Eb`|vz5ejO5*-I8ggB#<4v68g~n~s%;
zqd?&Ns-5E|Jv8bhr}@bic931h65)L#o*bpsRutryvq%Im5-+$X(+csYD>`Bv!-Q(*
zB8eCK3h!rZLg*9p0=$I5_z@F{E?(NN^)JzlG&*I0wGd4`u(vB87(<_^?wqt+MjuGM
zT%4WV+}toh5Hy;3qZi(g^qfgoxwH=}$ovVeuD-~kizi$J#xiIT`d{rGRN>hADN8I4
z8RCl1eEt!+83Q6hnndiJ>BDo<8tT)p8qSLRfQ=HqANSAuXRzrt@jeX%U#ddZ)00gY
zZ}!&IBVT;kF&kX)LLV<|&jn{J)__r33IhG78V25%fx!-E3Vwtc2``a9Lch%7)cFnn
zxZMXdmb{sTMN?#5Gi=}Hui?Sdck2DSl+hxxK3COa-9_IFelPw{BoG6r;(?Jw0l$iO
z>msrkx#$cf4#jz79XIId;@)gwSUo<Zdkf0LdYpFX1vCvy849Fu9j+2(-R%xu$ZSe6
z6g8N-Ext^99YnaXUBZzcpi>;JQvH<qM%i8Zg;c)PC<2kK?zZpjc&$o5(H5-*nsU*r
zl%`U21CQ++Pb~P|z;7y)+`w_Cx_>{6>dnE1N2}?A`$G7!yKI#y)J^4_^~*`%I5a=E
zvR-0y#vvXzLFXw!fe#b)V_7g49$snPe-g}Sk=fuPgzL)lmv9|Gq85+A`pfvq$!g-F
z=;S|CXk@-xh<1@t>Hr+%ZMtXvXzd5nC>2;}LSFZK#RbQ8Ma|vL<8*96eLF)RlCUr0
zz<2i9@9V(UK%5wYd=|3ml_2p5@V)kaM-c<P-)@@hMQ1>sA`a&f+GG@hVhM7V<~CYX
zs~rM-?#qQhKBQi$yK{|Uzo;@0DM4vIAMu}!8327}xiU^#&uQx_roHMUSFVBBU+OlM
zkYKOorsg@tS`Fr4j#Yy?{d?W8qfQWjIWZs^vRTF9-PHUu=uQ(>9!?=X-1)SsRH@H(
z`_T#X@gMbNjP8P^`&A}J>D|;7Wkr}`uiE;eTK>3)H2-5L8G|rY`686$d9v`I6y|>E
z@>}KI-g3OFV{GwbO-cY~wYdr$3px#y=wo#mQxKwd8nu+51-vZvt$v2ZiWDtlWfP%h
z!)hJR9V^%-vL;7{0~`%PeU=(76H#)xzqbgD*zHyPgxkSbDTn)w%kb9n#g!}WsO#jj
z;RsR{{50WbG11gv5H$oEi~MxT0r=5EVHB_TTj2H|7IX&9n)F($sLnrZ8@UayT$XA;
zHq7u$XRt&&Pf+L7e~Z4o!B`E4-*_oteo_)uG8IRunZRNwv9b_`AA78zVaTM#pzF|y
z{|*!W<q>U_@x~X>=i&rud8Rniv;#tiJR3Z6@tf~B@4&yWJj<Y3gBW8tMLJe@G(5Fv
z32wxTpobDwhhIO7+njzA8ze-kY@?TjnFqEky&~y|3)EcjD1}6V-zpkJJ-Oed?UAFj
zcKlpV`{Tkxo5|rn37tyLYeiQLz}Bvx0jq5sY@vV{Md5|Y{Y1k7r2_~lquH39q9jpK
zEo(YAXoq9VK5DSY7UY!Yv(C8eJdtPH^W7%Dy(PV4wPzIZ&wM}KFt2=pI4%ymfRdR2
z8PwDr@8Gw_emeXT>Y4ST^izXsZDSl*U40e4DGK=YjB47B2iLe!C(!L5F%26zHEVWc
zjDg#qd2^#SFl1hL4v~gmg91&Z+Z)hut_J)_axKviO@cpNTQ9qYpv_2U8roplss4_l
zm43WOoB7T~#y>LQ&p<u0Di8dlmewITpjG<!B<T};$u<7n%{r$LvsyGt#ZPG4h04WR
zksE05ffniKgD@3LgnD>})vA8IklRVR&wd<fjTfN~XW@<Yqi`@mlg*NXBLTMGtrb}6
zpC0llpQOLARwZ_Ga_(q0E_7zs`A5F3Ydnt7$=I)f;_ncZMQAi6aw3N&{p2r!=Q1#-
z9X|#yoI_CbvRUGN;~ZRMXo9>@<v)slI?<&fHS)6n*?LR*ESoMmy_9RAEP^d$8lP6b
zj3CS=h3appSB9pEe~fFf<OCE5P1mUy)>qa9mpY*yO!Gou@nHRD@xoikg<OlrNq}i{
z7WW`vPNI_{Ct|SN_V_(u<-1y|3=PG4+O!QNS~ckcaKfoc=y2#Fj|!#7pCY0S)~R^p
z#B3)aCx#O=(oFv?kzE;$2q%n!r_-Zbhuy9&J1&=QkUo3%!s+xeyPY(L5El<m?{MhG
zHu0<6+)dk`Cqtf5qb1iD>d$D6))vbIkw?mpDXCQM44BnV{>B4+7HAYf6H@(6Xi(9J
zmP~0L!g;y3yuZ7ADK)6rVB3W*ALpf(si>!?%&f~OR3+70LtCG9OIoBmG`48sAxJti
zy!u7fi%Oz6U0M|NYrjl4yG7E4!!Bt`z%^z=4D|FRSr?&S)01ds^(BY}*Gx|&3IYe)
za!>%*%rge;I6Z7GJw4a1In}7?3*^|BwkpVQt~*l_6*qiGGND_EbbWR5H1^#frOHB6
zD0a0I)XRII$XHUW$qQ4Z!8=qe0x5C4ez%uU8RW?G`xcG?;?cT>xP53V*f2)YE|J65
z>SV2v*^13?4`0&BHd3Z<P&osFMu$G5N;RgeCfoWVl;oYe!c3FwEVH<s&8J29s$(xK
z&gLS@Vy~#szh+w`<4&nnLrQ=5cZu)?mxQP3nfzKVjnzgn<+U^FZ}H`|K#TAJ33lQx
z&-mg!td8nvo1#L68yHk&wl>R)t9Mfe7gcVjsAk)fHmXa>I(Gc$<~^1+s^C&~Jo)I>
zsGzG4?l2qT1v<^Vc6w#M-%~r6yDHg*oH{FAp1g6~rVYPUbfT7Om@;(s(<WVOGTkF@
zgYJb_I;f3OidbGREM|gE-LDbdSnox*O-gnMT)U!VYy5sYDzqP27I=klFV_dhIx<(h
zYuy`QJfZU2U#WA1$@3NxMs%LZp!5uj{D^K&M&2&SrtKU9H+R;PUCny-Obsx9U6wo$
z>tnZQ)KY|Rb{<*QRSEk~T=#po6HX<T3r3ajy<&-u+>Yb4_5erT9jZt`6NVYd1sj&0
zP><`PObv~?u<>e6=m~BxBVw=jS48{{?f!VEU2#zu^;}Sg>``%rzZ)R)_Be{!^3&}A
zQ7<dRHY_p(vSe5cz@4qj%UCo@>}U`TLdAjgLJ&3`#>>>gVg{c*)g*+<&AriWUj-3k
z#aIDxHDFy<Xbhf(K29c`Km>g3LCe|^19J(Nqrh5L2F@WRS+uK)6kt|5(#4GlsF;qw
zLuIA>qDu`DH!*cX)*zyL4*m7rb?!!9eHS0txm2Xu?+J)gqqoD5rhmUNF<mWyaW<Xz
z0?^!T3K#d1`q$;7)CCZrD60f)yL-pzL}w}YfqqLS*Ahh*9DQ*Q930Yi;=q5{n#mVn
zWz;(JfX6P3?2j5kiZ+eE?=zkDQ$i|@3hhzCw)?u%>iA}7AivL5-=#Ec<x;7dUk$0g
zhQDa;Ew5;fYta?lZ(7uBwTs{o6xn#%qSbo|+QPk#L*vO}PSM>A;(`HhXFq#^IJlJY
z4b_jnA=T8$mv@RDjVOGeUi{FBC&Z;~{$U;{Y%TgezB0il*`QUTQW-4M)Wc0~i`b5a
zv8u7n(aqs6hQ#=*s6nL00;DNjJH*p;;a_F9U5Qdv*RNw|xhMe#GF;$>G9qPN%N5+9
zNcc9cnk6jR@?b33o>c;v^Werh-OCXTN43uujtM?FOHBB6KHasYNG{1LTHp=JbxzI}
zVsi62&ZO5@Te!AvWteIiF2dH0EjWn{&bd*xYvOEE<wo}%zob$-@l2e&^KJk~tMg{#
zNv!3Tim}|TQiLxyGEQT=RkvRKjLr7q_Nt&I(HdW~;C48z5x<>?xVWvQaV{fdScH=@
zXj(B`wf{@SOoZVk!+cmDFaVZRU<`Epc>W^ZcAT`DAe&fa#A7~W{nt)|uF%sI>!?B)
z+UWM8*0V?LUu|t;1qTZgYBUh)p}qMzvm)`YlQ_Rq<4inl3X>0}JI2?vmmQ}))0O8t
z(ofmg^|CUR!F8TID%)vG<3aUeyhEuO<hV!bYGiALDO9r&&M(q7QTekf1=E#3U_LDk
zB#z!eO+1!V<TfKaD81^IHv;vjCeBnCL=gq1&T+u$(Za$gfgFY^U9U`&H<Wp@(@}8k
z1-Z{EWP~%>XCu?u6Xgf?u;(P}j;iP$ZT36EHEqp@Npzc&R!_qM2UZnD-(!B_jT2j>
zBbpD10&NC^H7S@>E6j*QNIEjXjUFt;W&4H#BEvxhcKR19L7oJ9Q{|Q4L*9(JrLCcB
zwZ+^~<(J|;GdscE?X)ZPycwSVN=2BDp@^DuY9R_fEHE-DuyHih+2PKZm8DXbexd#U
zQkENB!Efrx(Hi#8BS=02Kb>O0JTB_8@;!pP*zHkNX5eLy3Vyo^FQW}uqgH;mCzJdY
zekH(^^64q+YQnXr`^cdxV0C+t#H2V`I7utui-@nfZZk=(*B8+}?P7D{1sPu71+v=#
zZfs|a$s^>xei2>Ej!oL)?@C%Ztuq*p<-riP?xsBRQwa<<BDTx{Ve~O+_FYQQYXvB}
zgKUr_GPTs_-3boc$7V#73~uRShUgvtf6kjbPLmSbFhD@|bpPeaG9!!secZg#{Bhi1
zNB-WC3wSM#D5OluFXV8O$l}t>x7IaLBr6-tZXQrXCGE=-hm#n3Zt|$|3h=7i028<?
zu_lYz_*9T3Cx*H-?6Jd$BHNX{@NX37*WMAeu9Ft8+3<O*T=DsKGi0D*T4t@SM8Xo=
zLwiEbw@x&{91;`0^D)d9ke0??I0ebV3m{%(GsK58<R;0`7bQtNTzt)sV7)!cyL4aW
zB|c={j8FEG3S=b8NXySQ9y4S%<0E?<F1QG;^>^R1ykg<FrED`DOQcD)EJU7x6X%rC
zKD`utd7>*1gt#0_j%n;J*Rp)4hvz^t&#2>!Sak-}A|8_LlT)@xC%Sx=FSK=c^Fad(
z;eLo2G@e4{#RfYyN~`iY-{9gp-z&3sl9vFyd!W$yv|0y?Z$Qv{+{V^^zB|Hq!n$#G
z8R1wuU3~Jv9QqSw1SL4bs<)XTzw8}0$W@U&Z&LGm0ynI<3;v+A9rJ|;BjhI{NNWNe
zg0mQ-F-dj4nvVbCXeWDM)Eu(uqaYmFu^-s0>Bq`onGwOW*%wW!v}iPx_%*E~wg<uf
zFFija58Rr48L&d9^?%kMmZub@qio3^qp?_jC`fc+>Q6TH*n{P^+XqE-Ajmg#!}iVH
zOvR<64uByBJGF~qy!%5?J|=n$8D-j+n|)J{7NeN%siLJniOWz%=kMAK{DD7=ixs7~
zK>Nr}gH39C-VX0h7W@opDlSNJ{O%z7<BEM~Q245gi<HGoAF1=pZO91brr}>htupx|
z@Q*;iks!{bs|AMa4Al_lFH)ksKG=22P*}_c=sy5`s6vBnmT*z#Fz`Nc+-ZPSIB1y^
zI99~U;s7FuLTDX^fjt=U<UVKEAm0M5A(qfbmSH*Q^+@rZDo!bgqa#$ztz?V!RQ4*h
z!Xxk*PP>gI1<D2^-TeeZBp9(=wmwP@=R27K!*H>s#vo&aD<8f^E|hXcq^(u?61dCP
zoN?}1iOny~aNE^*&S^HB_BBx)F<}uE2}9ViHp}OkT?MW=(R80NIBd)2*a0{L-jHat
zh2?iZf??v_ATAF2O6Vwf`Vs-vdK<UDckvk`qry&kyG$jE2`e=bm=0Jj1vO?_W^^k%
zA2JZ0dGUG+l7j0B#Bpyo(jlO3edSiPOCC7dP`9~AQ|im$S5_`k6I_zh5$Z16H4*sc
zd`{XqS30b+IsmY^sx*M9UJAXaRsM!PU;C6E4IAaeUbn~&Ye?hmKKm>956fnbG;NGh
z$yu{yI-sr!%M%4H3+u)ohfx*y47g-%mdiAEjFCZs;l8hHmi%T~+1-w~B9jfQt=7M*
zdn&c6k|G+~d!4IRSWQlBy{!C&>jIqGvqZxZC9_y#^$!Y3j}krCFjQFF^{<UV8+!kZ
z%`#yeWRqJ}p#u{$NH8gYff1|%fbA?t;yG>*`+)=9{TuxL(9MC_Xm9Rb=J`AxES~7s
z%8mQn75ClRqq#>KAU;YRqWGngu+^sRt@&dHfgw`zOlE&_6I2CnFfEmLRJ|7eh1l$>
zZWt`Q(`T;~quB`_6$fNK(7OlLj2D-lKC9buJ+>GD?h+)5fiu2Qz~aMSxdvs5kZu&t
zh6#KT@z1<>R;*W8f9c3IQ;BUWUaInZ3xoKCl<oSURy)!^rT|O}-k(qWb}4|bQvha^
ziQrT%-wFi6aevAtM>GO`a)AA;Il}O41}}~AL{|7DCd)s)f790MgTd?A?cEskA?0T#
z=b^VLdoAg@j6MB#71h|d1^4UgJB+7Wg%`mM{--D5hCjVKzuhf<*iPeq9n8c=I5^Df
z8Oa5bGT0c6<7!I(>=mMR;JvjhHsf^zhZVw5urm4L=K6qVHAyEB)sZsWkiA<(Byee5
zvPEd2IUUR~tv-~@)E*wY1Z{>NG&Gz^CJ`#2#rP0BDyAcs2dLN;hvFwxI-3KhK>E}l
z;ya_feI`A+sT}_P^-lI{W?MkgKBMDpRDO+dMK8h55R)~ooL%4=OLi4@XpbCv^kD^p
z0EP+15kJN#TI(d}!p<Co`D@mrBAT4qqA$ZsQ6N@(-tsN6&v`sjKOmGXI9x8ME9uE*
z$<;nNfbAD4R|@Oy+@XhX8Oa(SxlUS8nG)f1=TbYcD!*4y6PA36rt>Q4$ZVU0@01}n
zX*2o>&MmT2ny3PIMi@N(Vr@D1K{xs9T8OA*+VrZwT#1xf;b{qqdJL|KaryY}JXWcY
zdM?B~8yS<fIW8`yev+p+g=<3#0gO2_rvNPHkc4fbE@u~VwEc@9y|p7XW6*C%bD1#T
z_+b%w&Q9C;&~!^*rd9$E&9x&3EXxjD`V4~k9it&WC(&|WXnusNdojhKKyt%xZblJ#
zghH-}M})w4v9?sXPwX4pz%;sFuffPJV)dFvV8_Tv=WB$%ka~%^bHKK`7;Vx3nTXnD
z_BCbXB$U|;QK(c%7Ai&lxo209fOouAzAy%?f*V*g8_*o+qPu6Kj_kYWr$=hjm6MKr
zcwQ819TJv_y~OR#z^8MQB`!D4Qi`aaPm}08>UvRl%HROcg(+SRL=Q>b<}stQ{^H3W
zFfm(~8}e_yYIGvsIx&U675zr^qly5M^LO7<ws}PJNE7!PNp6ahDB^1i>?-@0PV!|%
zlJnY>N+6zvZIwZq_WR|Qm=UtS1T^ShohXwjFYIHR4G{eY=fRr+xx?5%PlqMffW!h}
z<TB>Occ_ETgdqu+UD=ArdXYk}u}zb2@<7^<jtbV}jXws1=&;?SP$k^D9r%qS#_KWL
z3mRGVq_6}_oj02{&JhV6Sk*ECY+r>Gu@hs!HT*<MSLr@H5@ip@4n$@D{PUZ`-cMJ2
zZ_tjjab4FFexKUu{_^oD`6+(2G69m6HwHfT_L+v?@93g&@K(q71!p%p)b_IpuJ^f<
zdJK2!xpR=D;%TT2!;LYxO%jveLIWNk*BSDjokUyh#&;WbphW>LpZbD$cg&lwEb__1
zEio1iicQv7(CJNU5G{HdwRuHHKs6Af^X^L~=d5BY8NO=8!xtze9%JD=C7xY<O$&H6
zJ4z(QE7?#)IM>~?gD^rNsg%3?kbrmDC#L9?k#aM9^9WRc!OhbROttrsvGQR>qT{c7
z9k!RfCpMF;4@Hl_53&v=4^06)l=#pLMRt0uM>Q3-&T*-g70vZ8mAax8HTAkB&np-k
z&L=pOnX`Ers0+oGWS9|ES$+?>{K)*qt$Hg>U#4OH9nm|#=D8>zUA)4SlkSU$W;Hif
z_rYR=l$ZpYK;r}r%({#n&2IogmV3SAOY{w&6BSUsb<t0k5v)_ju1qx@`c=r*^`@>>
zabD{UUCVCy@5qczw#EB~Z1%Q981{6aE9C3-7{l}39BEciMIsgil6iez5=8I{&(G~K
zd(J-7kgfxARz9EfxPZ^t9*jwcWLoh^C*UL-loS{!J|Y2u%c;Bc?&RNmftz176zbbi
zeEsvkk7L#r?58ig=4d}NrhS&00~Wl<(J&t)Q1~G((?DoI$`G>BJSCojn6};bXGJb+
z(bg4+A6RWK_Hod`;gEK;Sk5Ox#a6v$Ea}PGCCk8oV<F047{FD?FV<+8BQfHZX^^V0
zh!E-3n(`(by2#arX1D57m^5+NmyD|05l5Kxr`cYn1mYSVsz=VCFgBBw%+NZF6+Bf7
zwXbyp>W3?+y3a@KWDb|<nzUt-!Eg0GY;ixV^L%wt3n$Qj&KjG=+SCK9Hi1&s7~5r{
zXl(tqEVfEa;%!PVLIGNs;}kAS2kFF^2Hb!V>%GTvj9QHW27JN?60YGHAbnYjzUXQy
z{_!E@HlG>OY0oPjTJ`yGvd9~bH!Me!qHpO;<h2eKl~n&0LYb$q2-9-(lR&o)5QZP5
zi=$~UHa~1)gs}@*fon;T7iIB|%Jv6d0%_UbB!`x2*I5+rBlB4GS}s-H2Q!57>e7^J
zO~r(WX@MHuh7)Mm#5_rYG<v4t@Mjh~*AA{po*~XELAEU|A+4z?pdp6Pw~(YmydCf>
zg3`(;Z@hsuQGS&`&~?S1|IhGH!=B)_iU0&;@cX~0!~W}c+8Wu}I{okC!_>dD3R~>H
z!*@tsEdiJWk<!)Lx-3?lbB{OxK7N8e$I1#UC~cwJ(k)?-?E7YAi=~0*1Bhs-JCi!Z
zpt+=ErzVTlil=f|_ER4%@<L>C9Reck<0@#GhF!y+9k!JNKc_Bg_J<>9xUwS}!xxiH
zeZ^rFl0(>fkOY7GUIPS?sG5c8NO#c8`fSR5)DR?wgrE+Z{+haX%QC1=?mMyVInu*-
zG6hMD_fAmQnjUxh^(zU22?amn-F6ppBg4^^Vjql1%^Wqc?274!x*2#C{8m4tbQj`Z
zU#a0+!jAF!tZ7s))Zd0YpA%JWLjARt-`F+!1Kj~vILq|m`nq}#1VQ1D_4Br!ih~V}
zCr0Fw8)$oT?JeWBc-nDzt%EWfs;7=qHq|u*<6*WT>zGv=td67_J8G+b#PzU=_BGk#
zQ#MOZ?f`cGaBlJC_(<+r55KeR_n?^x#Qs8mK*uLvvne~>wQwC?6jjI5Q1p`RMnAUm
zjMws*J!5us`&XZ_c0fZxnh&Tn0esc=NQBFF#wRzg30rE=*yK6SWgmajoAG_ZQt{mv
zyVfw^ddzP5)(1@7!_Mb4Tj#mF@_1`q_Nj^-8`CHsk1yMJsQQbMi2o(5(iLs-NMoDU
z>vgi_)_caaO~fozKg;2fPB;a6H+4Ig<2+mAU?PX20AG>_o-6Jg%4S1f>2T#QsZD#W
zP(1l;mI)=~-okxx3gqQlWupBK9)jlbt?_(@I^p5>E`}-!ur=FDKmAH<NmQ`DGE9Yz
zQ_b`}c3?xv8sN#626?+_z)3v+NF@vH7M*dj6B>GJ)A;jwGZ9W9#Qnle&vMvY%NGd<
zCZo*?#;oIN(*=4XHILFdv}ymChG#!yi?}q2x=2|KdSIHnqw_cIDkG0!55NHKy(A>e
z#g(v1Hj(=*ON%H+?OwB5GB?QcUhiGYj|PV8-r%np1rJ23nHi5>09n5N=EsSNo&7w`
zd*m@Ok?SUZ4<`-KGFBv|mEn@7D}{AqC<b6(Rn5I$r(M$_Na7}S8<KJhKfp&XG*@No
zZJha2qpQy%V5AckT9XnQm`cJPeg{QGL;-@=Sp@fC&E11cXqr8t__3zfvCJNy9O@iQ
z+F&OrA6;IV{5p`+&DC`@blNK@LgaR<p<yrL>D$qs`3yu~K?tEY756T+@JL3&O)MSp
zD52$%EyRFHU@<^;BO#9cuv*hU5(FTOkTPpB2Anq0dx)rzCIbXXyapIB_4uq-OjaMv
zR6)($)RHN5z8c|kYMU64@1M?7t%MYCzfFO9juqih9j`m0+lr(WO>@7?x8%g6?JuTf
zt)%1X6C%nppL-OLe)^{q2?+Zb!8E_H=D6$J;`UM!F+^D1#+MS{>v=Q8kMPs1^cvjx
zcIfliG3`|_f)fVQLT<bSv%)L1*TZtlEz}b$d=|;QbHR$KAt+?Jnc7HrEfz3%MzvVV
z9f_>Bn-%QPOO#wZKoZuLM=5N(E9oozs7ogcf+eYg=4N{nB~5f>i+LmgOIA&1(On=$
zp%Liqlu21H+P;G=2>e?^>l<hO9A`qkP(;u5oc%bf+63wW+~7LL?1=mV2Et$f^V#ok
z-)VAJ$N#NABk2k;VV);&LD|Br_~6JG<i7~}g>vtX<;hH}?;O9u%@bE2yKN3y>`-m!
z(&FdJbxvdiRV<kM7vzk&Q&}n~1yo>p+w?T)(QoUGW&;~-dnL?JtG==NU=Fo1iZ4SV
zF{$@?D~j}9g}`O^06OTgGaKIUoU<rVRhPieqND{bu~Srv`*+cSAoY;Y_HhFbSP?Qo
zSf`k<${G`@1JCdsI$PWWG;-aC5Zyb``RByOQeY@U`Ihi);$i!Dp<tvAL7;KI%2(ZA
z3#n5;;U7T@5|6gD5K3dxE&f<FU=aq+$#XqtIk|=esudOzPp6m4KUwvm!@<dG*-(4I
zG-1RuL&%e{?m%a%E}H{0F3lgU#oM%x=aYNcyoP5Y`|AfRCh`H=Z~}0|K;&2IV34c1
z%exyco$(bK{T~=vIt9c9bYkklpWV884WZvP7T!B_Pcgd>eHi9?d@ZL9GC5(7ZzMk5
zg)?f8ZwnZ71C8qnpm@zPk@w^qp8s~Hiv9f8%Mpan*LYr2--Pv!WTL&gxOJ|saA%0(
zLvl;MqBJbn-JDL5`9Qr~2Q?W81ZSC$yxD^5RB^swmb0b=@kO%SeobgH@zBTQPObC7
z<zaYx1}SOb4;#`KyG}Ck28eHk|IuyHK)t2n1^$S1pZw%v38an9SrgAEgNWm9B^Ki$
zsNA!|!`93gfcc56Io#w19`N>^!^wJ~0Bn~%<?-`g7``kSNR0P61`1A8-QwY#41s}m
z#Zj20maKhohgjF?gq1yf?{<FF4NQZ@6z2V?MF-T}hX-A(A^tVTC-1Zh1upf!aAfT6
zY{iU?&tNsu0?1)>!5gLOHp2em7j9PU<AnxPhVopF4+r>BwVNLeJ%5P?qb^G;_tr$n
z<O{?YdB!)m3hR_s7n=(yH`c9xrAOo=b@aDS8~=sMwMEylH}<rjGJ-)3yAh!5P`h?<
z3B^ykY!aZ_gI4@O-fuV=zcg$0HD&j>8nTUVNBy!Mr4^JoY~&Yg<sGbKLLr*n3#$mQ
z_Cod?tF!+zqyAzJlfth80xAJNcZRYu`rds%HM^=vSnUSiR1G{^xyO@F^~#NT6gf8w
zSeyU&i#Op$qu-`KE*V=Wp;$PaFgX3SywUO&{x?NlalWh1_z}u^2#z?MtBN^Lu<OtJ
z@yqhkIQFC5A1ar06>yG))0oVua?Io^(8f&4*6WtYzB}r}XBqVEgOG+X{L@)p$Erzt
zKA$aH8kyr&64W$S8hnPls&GLSqTF=^RaZW3V*!gdgRn^`cNmZbP+Ml^pkV0*Ygcoe
zbN+mUsGg56qm2lYxwM(a5H;X6$9VfuO~#?bCFM{JPq9ClwiCuFebzgFt%3V|wos=k
z0evmd=8m>h6|IyJd>8r1f~?1}K6nYx^K57k_w3|Ekq*|3>^TCT*wM*dHxk6n@Xc+M
zEKfQsFOVzfM5Z?GRB+Vqc~tf5{VdKsI=K=SwD3=oK~nU!)_BV3+snY9gPf0<Xh}$t
zDP_0&A$Tk!FLr4pwwzk82}y>*hO8DPsf)@B8j#8w?n~aI(`+D7+Mpm-I-`8O@pWh)
z%SVS_7vtOc@U+Rozt<nGN3Cg`u1$j*_l`jIP%>Ypo%SLw)t~VNdWkLcnP(InUmq=y
z?A_;ZqDRaevm4wcy;<F<VbNKpGLfXZzuQ`>F53NWDGT0ej53J^nVBh1l1P^$n;aMa
z_|BO;{W^Fd&PV2}(!<E4mTUJSLgLyKCA<aJVe61m&!vL{OM1DUYWQWR$?QsP3eUx?
z&BIMOr1)ru=#-uS$g9vEx5O#WP<KC;R*&&|iCgj#!VMqaxo6Y2$k*5qHumn}H*+I2
zf%r9LJ%s*D_bI=g`L_L#rt_8?75^vcPgm}`Hvi!pWbPxv?=$vJ(pj#aCDp}$kMS<T
zuVGExF9^-2c_D_~Gsj7hRdeQNh22AU?-9yFl7``;7|1VU{RWQY9U6^iCoJ(;3Tcly
zE2Esagx~z}`S>7Vs)w2Pt*7<%QdhR$HWd4_k-jnTbg-Oi9DZ?$TvtQv=S(rXOdUF%
z6d-LdWG&6(A(g6TCH~b$uA-YsNqdo*W{4j>Q6~zeslkH{c_avo##U-Fdgy~2LT{6$
z7=5M*e0Ef-7m9pyN*OFAx7%qsc!bvX4I9apsUC7M{P4cmgaacyYu^?Pi)2ncC^ElD
zeqhp7csKRBsmtvEJm)%4K>BO`6<&;ItqfFUdl**S><wIpCTl(WCZg<$@ml5!%M{Bm
zR(!sAsL8Gr7Y#}0y-^714L`_Je@Wkm@(*zY@_td;L{w(Epg#qBe&CL!c(`0bc4#J!
zO*?F;NYmYdGc4@fzfaCYX&8xt57urHa-?WyRCyxV7MVSfFEB0~{mXNj`Ap>@;u_^H
zjxyvnL`Hp>#)RdfV#h_oL~5rW^6xtsoe@-;8>7(6G^x00ckGS{old%Vp2F<k0$TRR
zgA{meB30V1a|p}J+RaL#L>)NVP=?YhXl?Q;*{Pim@e}^^Fzf>u04mh<zc_<5Cfo9q
zJNNczN+H&(i!467+zNz#$T{@IVd{%p5#g|yW=@y<ypI<3(Mx!qSjy|H7^!Lnczkgh
zhcrJ2){htJ2mO64@xYA*JzU*xa8Jba_a8twHzzSClf_(5NdPaBhG*7e1I=bDRdJwl
zG#=IU6#l7s;jybBB$mAwmfJQMFio;}mjrx!_=v*?--{?sZ_1h)Hu8e!AjGgbjSOa7
zc{PaN+p;aPw?{3KZ5O=y6~i0bbhOL<;ENji>a(>)rB|3z67f^S(nt57H!~GQtup2w
zNl?=0a`G9Z?XJFMpO(>fafFry&ACKR!qGjmti7Rqttx+QJpUSkN>i|vkXUdPI}p>3
z9sFS#<|mV6G;x~YR@yc;MOJDmtkNVvEPUeIIs||#vd3me%BXqADu6l{51ziJ5fRxB
zO4Q^lL6<U7@RFI?OX4j%G7AyHHRb&33yo~d_MwZm85XqiSoG^Xgj&`@dLd>+(N|^$
zTM|yGL8kK{qt5s1p-L`;cAz{bNk(kGQ#YL<nocB#{iS55rs$ogWg9_tXD4BPk6QZ!
zvLQduF8f|uU$E$}RwYl3r;!28kesq7gmd})5i&BemHxBPhjf$}5<0L93}I2I^g+1j
zk|-Z$q@XTKo+$HWh|BZUcH@>VGu}8C1KA4;Toum3MAKW`7Ki~!ImVWwwj{`-;qHhk
zg9X<s48L$TL>1?Nf1GC_&j}(YQ5lj6hMwyqX$XADHNeE;Xu{$>74>3$Tf|Q<um(b#
z&Us86JuhCb5h~NL>hMUl8o`NKPCOD@Z@?!GrWo1ww&}fP6-c8pCUYxdr<i1XEml|y
z4EhVqd{-u$z@~bUqo>46F@J)hMcaKj$!6M$lG}!m0ok@?)G8Yu@lO^R6S3F)5Ay(7
z8~NB&nrSanMPx}5BCZ_PBLzCZKF`g&NB-sYXK2J-r*sqmx`3hJnLuMunPRW%bafgE
z%ZY<okI|)=F{Af9PEP6+mrv%A??!eM)+rV2*}rH0v;Qo1X}G(ihE-FYhW}I$9XKp`
zq4IPVAdeRxFNv{m3uJUu`!xuXn0t=1pl1m9E?MC%NH4**x_~~Xvf=8ZDKc$L<aUx=
zhazQVIv^Te=#3+GII<^3XBBc4N)CryoRt8;@cgsg3W}Szq8;4pKwgpHMYB*vs&+#d
zRP^ECE&IOJJIv<F#gOpdEjP|F@}M*~^82Fet!A6T`Hr?LVCnDe0X+MkuHW_kGj-G)
zeK|!30Rme2Zw^EKkJrW8!tj6J8&s)U{f{Z>D_hTDMFJ%+WcHfKhE6=XNT~&~U9jXy
zDG6Mt6O5t(&wTN@XC@96IZ@hYS8niS^S~>%rlvL>oYeqvh-&D;e?Xz+q1t7U>k|k7
z)JG|5%<H<FDcX}Tlb3T#m|qF^#TX3pw|Dm!lW?l}I=XP;L?0h9tPBy6l5oI@xgcI(
z=;r2xzn3Y_F14ioUXcJXJd{vk7(`khY#8KhOq?Nnnm+;EKBCv4SZzPA{2`W%=)M<d
zzST8UEyb<_b=hE;Fg5duwLZeg^8kJnGWBY4nnPp_N-Rl&T;BmR!!ECB4y{#_W)n$X
zKwT}~Tw4*KQd*X0H%h*jZooYzf`D9!2p%Pt@=kD~#9~s&dkg-VeGd>l)$XzLwhHgb
zmT;tnHBmS0dk$?nW}+^0>rKE!KAuH3m|Dc55)%H2ymtL29^U0hfzb>XP0{c-GSV9_
zmV}7Vg-c`<ZVox5nt&{r!@F-_0#*i!HAV|$u%E@ea~>z2F4A2P$~iV>Gc~x;Q+SR5
z=Or|u#N{%l8DvV4$!U<MJ^yFfv6k;WL5g~W49wmQ0uGj9mZ>49%Qnxpq0qtoj1!F+
zExnIVpUj2#457QDU_rF|bMG|DX4yg&2a}2JqwN0PYNIaI{`dX9mGs@<s5*>SF@quT
zEM9uSGCiK+#TdIp^s_m-rxUmxA<fC+nV-wYKt*LIvPe-KGkrUPN)QZuxz;K+@;lwK
z9Mo?@aaNJFq*C|M_a<IWLda3k(+b*F6&<r6c_5;w!jtn+xD){lcpB94FXn*Cgd@O9
zNAGv*#?*15v4S)eD+84b&0l3}`KyR?`7wE`u|GqHWz7YvxMX6xu33Z!nC<;Q4YO@n
zbFSxi<aJB)1TP+KD&TZojDNtQf)N|aJ(Acmw&#R8`0?@E3ubmM`wGo7Ec2&2rD#Gs
zpEZBM6raUt&fr(e=4y78jdZEXnfESSX71n4QGB&t@|X=QBxtDZ?+7zaGUoH(k1Os)
zh2FzYYFIg8?T=@*XOy<_#pRFxz|3I0Fl)3EmK_rO=Uex!G|b6~3Iw$IU)~rpaI*OS
zu;o|3|H+g@Q~t@6)+J+P#uvK))|0DBk<t{E2~-SJUiA&xf_wSlOi=c-xv^8HJvUxH
zKt74NbTbM#%G5{!D>XYyH|OAvtt~>&qaJmg3=J0=BC@fu-CO)z+}|nMQ;Lpl(hp;Y
zft@r_J;e?p)2d6AlxM(P88c&;5c15j7Mk0IW5E9aa}15lV^*0_YPtDDW$1J+KVfcn
zCpDmJR|Lqn8$%KFz29R|k(K6=?&TVyW2_k^q+L-9CL;BjgF}W~GyS~(ux-^TOveCG
z!ia%PR0XtO_K>?1|CccDz|2Mv1q5`8MX5loCPu58pjVYw`rna3(cp4al#}^5xVw9K
zdC3DIBuyhk-oM8qaHC%0PL>bh_9D2s!v6&g6)<iWf1o}*EjIo<&dl_E*?I{MM7`TS
z>l*_mxR*&8c~D7ABrs1l9_qVHcCDDax4PQ4O;NM>8}=~J+Nr1dK+BzWMJ)uH73Pp2
z=VE*>A^u?W0~r50y?znf*~xs*@h~401O9Yez&v`deXNE~j0YarqFS9v((VRvk)aQq
zGXYW*CX!^5s^HFuhL4p<4qP0dCR4#WcD9Ye7xASIh8Kzr8r$vJMi4y-nqD);JzlX$
z?Ii8FM(ihm-|6lsC3qSop78n{vv+2DwP3t{?#$iG0&ag0Xv7NYJ9YV8k$e1kGC@>e
zlBS(vby`O7GI~xZ<ry3=<7^=$`7QRlgD^&p0n$pmHUgw!x>!Rqdj^`(k06E{l_Zg{
z>y4JKLGtssK=g)z9yPxxoPLM%AEPYDEnS)$M@$0UWNQkWX!FEDsBC0@JJGRwzm*I>
zM^Y=T3d7eRv8^x=VP^l=`1f%8@7Gl`N@^b-9_evAh=L0LzHSeG?jCI2Sn?Q=ssQ=m
zCiL+n4I2Hz*qW)!LeePIKoP;>Q&}g70dG3R$3&*q184{^cJ-5yJ+d_#RWwQ01rr1c
zFD4ATsJZBHT%<=r*TY8QJ6hVY?Lb{OH{Y$YKkt`v-_iF3Ye~+p!iPsv{nqW-wbB(T
ze*s4DP?w-m_7_WyLDC6ZJ6Cf%a~K2<Te`pB=s#ls_eiLQI=q0_7d@31DRuYEY|dbJ
zODDYW<mY_yezqzg#bWZAF(_FE(_tFwg<B=RE93P<>tf+4H)eHtF`vW)0?02^N^s0x
z;&Kh<6c-F|UO##d<zyPdQC-MUJxy-5;#R1WibW2n+sfK9Xl(ln#S}F<Ag(_toweoy
zN~iMrJUn>;=jlA==(~J~Jnz@GE6xAt8CR#pmh5($(Yz7-JRPsr=&}W786J8dkrUlz
z4Z=6;>$TG_wg1D|IV}hREy=cQ+qUg4+qP}nwr$(CZQJOw?W)`Jc<#fT`G<|j%*a>>
zs`y$^pK+wYw49K)cuB~$(_@NwB#H-?x*MC0Nl*1gza{!D_2=qu>7(a=nxUcMPt@Yk
z1UFk58Rp?$XZ!eF-w#lTu2t?_?Vlfyt?XA|e!<NAl#C%ag5Eug;pieC(|UEYka*xi
z6zCJCdnXOXkXtbnahiT5Nni%M+8~6D(Wz>P=+Q<Z6DR(J{7sEkje<B^zfLTZV@1h2
zHRBv(Yl<^qK*9U#($Fs{i8y52R%Pz2n2bt2ImlELZzre5S!b8-Td?`QMKxjw`(VG~
zQP#~<m|Cdvi$tF)IFq?|+V(Q2PfPw2pg^#4=?^K;7mn3`S4VMn%OKxzBKYqduAB$+
z@a#LT6#<@w25)yIkq@HB_x<jORKi0(lC$FdNaZuJ($~qqmP57wP;^&CTzGOstvaB!
z{GAReKB2Lk(fE5xv)PZ?dE4Uo&}eC5Tlr|_N~ye^gk-^3Hrf5!k!iQ@>5nqT>_MEA
zOG!dX0`Vb*GK=^Q{B>^#%v-Lr<qi=SN&q&AQLh2M6}fT9kYiL<4htuxDQ(h%%`Jr#
zElPx&dK2MAt~^9v{f?N=3_D1YFyS(WNZ^jskz;Z{jVfv^Lll`<>bgHLqQr@F?gB7Y
ziw1xIVvxF)UefKiHEg00A73Vk^I-OZH1+m89|vq0fh<&248Xa=JV~<hm+`1FuZt>%
zr|0@@k%l{sF(-?E#{`WanO5Q1g=)KAX3S7Z62;k@vASXdM<bcl``dk~KCG^xY~qi+
zN_Ev}&T1}*$i#Qj(jogtl&8p<4Wsz#bSc(05c;C)PWtoy@99c0$Y@RU2zicQK}sd+
zb?kE|-1-G4fQo3MMeWy&65pui8bg-kb^Qq#Bcxlz(kj-8AY9DKA6UcDgI>5HrtY-$
zJ2c}4jx8YMM}$y@6|9Vax>K;aOCW7!%~V)2+R~=RHCv*8LokV=L1}7d7qlb(u)z_y
zzKTY2+@Zx(YA!7!>1v<(YqsitP3V<JxLt39kFLy{S}?!jx1RwWl~9L}?w~Qbc=N#z
zgJkI`L&73|{_+&VYF^p*H-J%ahE^lbt!H1o*9$tix=v4{_o8=dxEb-U6=OZOW7R!d
zn?BpPEm4~%pJPa+rX$ESr@ff%v+(mbY_F%8rSx>K-Z0U&(<YW55JuLT{)nz4&IyVw
zM%YK9xkLL{()U3P`>cQfuxElXRsX9pb_Gop%kWYpnp0{l6wX@r<-{wmUyuWo$P4YR
znN7Ms#>uRa9y|WpOn?akh8jCl(Kt;Qh;8e54E5?so&=&et5S+_y7E;>EdjkI>O8F!
z*s>e8F5)McHJ;JUloFU7U$UxyiV&8f<ScH8W#b==ox<g%u4zBc#*Y)IHPfdFY7$e@
zHPlqkmHh<R^R9xvrek|o+~2=;dqSx;@lZWvW4mqu2Bf)?$hMHtcE6&Z$`Ji3J49_S
zpJ|usLjQ<^0iO`$G5v)iC9?)$NbrvVv4*8-nPB~}O)0u96Uitx$rPvVk(lym*EV#5
z-{z-;VGr9v1xO)6SvH4jvA0EE%SIDbOzR#b3tB*WfIY}gRHGFYekL&tCe{=0-*Ojm
zz?(fn<;Lz$0pA>D3eV!aR3`I-Jz|Nw{jPSKx1r=@do<*Wot8GGWmZA_;<#YI^3Un6
zYA3UqNA8abS))CJBO8n{KrS}o()@z~43sXt)f8Sle<?t<@xg|ETP3u+fQb9TUY(2?
zT^ni_8q~0^i!U4a*tBqL?(XY)AO!|?<iG&8o2#R(oeOR^8;X8A25dAXxRBTVT)$c_
zfGcP~LqI{+lXFZ}I4`|!r3+;dbIMa!Gu{zdJmr>5l!Zfv{g(1oa=c$`w)FTqZ%*1~
zseRZIlcZHfyrZ(dWhr~4@HD&xh1QKId9t7im`@LrP#^s^M6s4+{U+CELbZBjQ6n)n
zog2jthzyIK;W4orzj;;vHCzfJXJMj_Ers1Q)ETz0;u`Y90xdw2Tg@Ui*X5!(DfVUe
zF()T3Cc-*&HgOeO^XV)T`JttHF(-+dwm`RkXa0B^K)oLBV6+Vrs_E#?3B{YO(~S>;
z5I{Hfk~*F+mh($V+H?oT1d3qPy9aUOe>Wq`OwHCF>Rk1JZ`ojTt~w#;{|&Utv3lW*
ziaJH5)ejZWTrA$dKTmWIL)X-!L8Y({WavvyxO64ULlS?bZ1Jx3^JACY*9Xg2q7QB&
zX}e^0cWa_SL%7gEZf+QF?3_v{yh{Y#byGcNUSTc1<JS+`(VIHIgx%?ratAN-eyKvb
zI7EAHg4vmf<f|IkJ*&s6uK7k2WacrIMfR(D=baL0mc)zSu^u3g$25kQfPmv)?coW6
z!)yC@W^p79oyU~qgbSs%eL13Tt6I;K1Bsoz*e?)+o&FFm<Zo@d>q|ZP&C=qLrIaph
zGZ}r@%im}H9m?YqU?;zqaK#%kVb2}Xy80QiD4^}D#^jerdXD+?^3?7uQZ`QPbm#f!
z{pOA{XluGk_LfYV--KWzJi$%FNN}SWOfT*P!c{oiN#~ehih#<ZO(Nz&>a9I?cUpp>
zIkjG-&6SIEQ_kYjK31O0OTCf<gA$)hYIg-Lx6gdj2U+9fD^yD1m*+0>S=E3|*83Ld
z>C%WMfje>7B&^rg86>0p6^ahdiB>*@8F>03`O^e*&6KKkA_6q;3|Rs@H>ymGpreb}
ztARc?xGe3QoL@w}b*?^~o&!p2bP8jynVZ^ZRi_N!C7-KJ^LYwzx)9!H2i4rp){VOZ
z<MI-Oq}|eH{&hv66m`E?s;&emrvO1Z)jvD_j2jMqWzoksv2m+C*vR9IvyiWH!+vrj
zeij5vKyM?nT$DDn-A~1jGOjVKW(}1Wxny35>_yu=kZnu%mj!&U-icw*zP{My|M)_E
zp2n}%ja#ferNv_04khkvzE8t($m8qLDE>6b*h_v}M4RXiMNMrtShD?xRULq{VAbsx
zz}I(CZ9H$7l0hC9=4@OnK+s)ixJ~(Zy+u=CH=R}hILF*ClXD#pPEM}DjY|<?$oKXj
zQh+R6INv-N@O87Ir>3Pp<wz%X+E4DDL!K2;FxhwHZ(bP<xQ<A4Lybr~>?Q~P#ype#
zCQzICQ`&3)0(U0P{l0#-Zhs!Vo_DyH1%Y4qHtzN0HRgEn{xm(6R6oM5*81aNOF(kL
z6Wn*m5N%Jz2FN}%Y`PRPQ6-T34Uk-H^okf2<<B(*nRXjOPn&#kFr;Myb&X=&HNpl;
z%py!bp3*7gya~G;BCec|D%c9yPrN5jZ5Y7lNz5NLEy&d_zB&B8(g{ua><&Z$B$B^}
z?AkXNM8k0}F2$ZBh@l|4-ag*Ug~+U1iUe2v5(h+rJLmEvzh@@hY|W`xz^YB5-sMp3
zB-a<6kaW3%%PP41p!}6Dy(`>~V(eNua90%9FtqBiw&*<@PZGsv(2^bvZ@HCe3~JJ-
zwVm>qUHDl7IjzRf=uuaT(p!RUK38ZnI2O<=zSL!te}K6Mg!@UnHY2gC@oEw^CHO@e
z3y+Z;xrq-CjI$X`q12hF!u!ejXH>5)yw*{ZfzX_3Klf%BR2K`*!U|VAP42lG&dV(E
za&q3hueQ}RADIn$|4tz(nyNR%gl9PRVph8&=dBYMhY*B{sZA45?>pz}C?ockL-Ru9
zMC;HN7JG0ajD;pBd%Vk(RG%GL*|(7|RXW;2`4e2rhrC2k_v=7Fe<Ja%NUf@~<`EEf
zzNwI!GoKp2Kc@N5+!n72onI!f%feCfTIK~d+jx9s5|q>-!DqbFwO%&G5~^X87>sH~
z`{$_ylrwUs^tq{!lC=_h%>WaQU+dL}hd$eN`6TwYMj5nxB>?skcB2%v*#Zf`f;D7S
z!BHHA3WX;v&_pBs7$q^>I#=Dyw*3~7;X=bNo^&kV$1?1&0=xgn_Lk;Z=DDQz81GW<
zsNcCte6CT<uw-nAOsS}8AL<5ztN89Iu4aE7Z29#9rmMwTl6-YI!ULK71vjN%<Dg-8
zm~pE=H<dLS^rxTrPmD+$2b<?`bg*w8&GlS9L$1BnrU2UMib6^k-_v}gcEu0rVi(F2
z-PTKUn)hqkBY30pQ}YfkFg{y0FPhdPowcoO3@pZDeExeyWK}X7HHGmGJx{XG5>%fF
zLWd6`cs-B8+?Ba#s?mc>(MHhtg@Tyw-u>`7wosSWHCVJY{|=*Y%Omrv*6QE*_Jl*c
z6+^BQu(s@JR?*ia{6UY@JG<cqBQ@jD9Tpy5m!uF9xYI|9Xg&v4zog<N8oB#pO2$x?
zj<>q}D(Nr8a!II%ORP;4@q@L>6CJX(@wh-G|1G}}N*{^!>F=0$fkZlL>tItKKI3jG
z2N!S$%|qQeojuTr*8q$!Sd7Uh-tZ#0VkrBvEj0p@h0Y8&#k{(0koS7H46q4B3;wMg
zhzi@Hnjr7~L!;cpS%q(dCa3Y=egjg<$N9-IP&q=9fM#rBhcNYf9#{mf_&o{Z5-Em`
zP8|5a$11%|o38PyU0(qb9hm8QSIsy!Z)9PR=Wi?G?Vv7sAoi}HjOf?5D+f7Kd+)yr
zk6CfZx>%ItUT!ybi44BWJ{sYQ(z-lwVN6I*IYC*Vp%%dPX5HLp{%Uh4mTYw}tWbP^
zZmBk`Uar0~fdfz7Z8gqctC7s4oJePCpdx~B=PoKzh~&cn&)AA8ys4%3phra0abg=R
zT8vFSuxI%S=!5dq!<jHQOv<RBpI2<<r+ODL*d%qE=u^&dPq};TMxKb9a9PA`h9=`X
z-nq(1;uRoxA#pxfMomTwS31{1S6*32(Ecn|WbK(>!XgdzFvIccXBFM}uhPcb>Y)}Y
zu#`6@m#JY<d}2sl(!brWlvI}<wNTEc;$IpGWwO>PS_?0#Mx>D8mu%ikmeINOs<Ul3
zd6OR4|AigNBgP(b+o!bGZuoE{eFI{DMNFnqjgJ+r_y&`R`y2Dyj}VKmF#340?qjG&
zS?bR`>~yKTDlL(q_#|?r-gScdcJlmq`n=k5U|RF%a!mVrl<D<Z_tFyKTKWDe#xu8l
z8(8-T^~aY5OS%@UF6dt0@!i+jhWaB`Tq5v`chp&zOJ(a5C$6~|UQzZcQ;-St9dvPC
zDWKO0^}+oXIX%o<PU9%Fwu>0+s#N5<u`JYd%Cx`nDREeAij6dq?%$u0M0AwOyjkO(
zN0rW{{VC<{)2s33`Gxj99hMn-5rL>Dn#e7}dR$aeNPBK)Rgu-{USoqy?&5807vx~8
z^QTHs%P3vjxTf@RtAx~z?DJpsstVFe#n>C_!4m`k(fg@EYO#ED6e@laX;=&L+3>Ab
z#SX@&7p&(4%Y#${zsaa_)PBxR{o;o_-!NI|tAi=`@~Xi{A@gSD<X%fmCD<HT+l5(<
z`ceC_YYtR<38&A_-)!aXNg91qfC@aKT*U!j{X<4yZ{)2MnHeVAV?FW3)Sr5a-a>E%
z2l5+E)QjPWO~K9o%)Tyi-+3T($)g1Gtm7kg+y5GY5^)qE0wGFk_N!b+;i63YG>uIy
zI2In2Wt&OPANI<%?erzbB=7bM{-1rxSBkN{*niW2#(#TA|COro&qiqY-))4~sycRA
z;wV0+YTGU)sO`h9I4&hDJL1XvI?WhnfMOeEh@lSYIxyjwSHjf4ue!X}_A(`<ih7kq
zQ-K*?v)P}JM+G24^GjExW^xJsQ<s;QQRjaj*zbs-qN2%atp<E@f24o`H3<t@PKoCa
zF|v{R2MV%Jw6J31%l|g2^CQa&Q6$En5OA?L^nf~caG1k@PeSbHHT%c>0!dKi?>GNN
zL_DfDWd!}enU@BTA`oZSnEoQkuQwv99LLTKCAmWuR~r;F!k=kMON7FgoQj-gav5@s
z8N!l_!r2fU{nrQ$(Wg9gx)X_r3Lby^ymxQgicx$Dcyv!bkvqa-vE9ZLF+?tUS5Mrn
zCkc;=9|WfpOpPtva<%A35_lYr8x#0Rj7YB$UC0kIhr{^f>EHp(y$b)SA&^=9=AOGH
zTidEqB7M?`pGQA_M?&w_2W-zR{S`rD*3esLe#qC55(*&9vYil{VRZ?dsy#I?z3zA*
zR^-)2JX#=j8v1l{03U)K8H7-Q)b-1`AF>a*xw9j>bUM;<55*|NuoCRx1SuCgah>e7
zbH<|D@d`E|$kmgZ&s(X%M^7%YQp7X^JdJEqE1m@Wg8Nkq+dRS5c+Unc4*a{W7g)tm
zL26O!BOyJPo|IjC+!RmIvLgKFXY=%;7Mt1WBcI=HCufUSTBd{@vZbP@nWp83k5|ge
zxohzf%a0ybi{0}HZ-<wwt^IZOS~;7|vWM@pU0prYl=?#LfJsl7Q3i{l7Sj(SmgxFG
z7?bg;3(qCdc=ndo$aWpC0$y*k)2vXW?tTvJwksBvZY9H3`(-Fz`C35L0&5Cb2fJLp
zqNklU>D!7M-BV#5?IC}{Hj1b8li6KXB!PUMW>?(nd@P4eCc94=X5G=mYt_Nx9<^I{
zcphlzq~>OgU<!O2lT_kNR<%CLO15Nax+RWf4n80&MX1=!-~WJPn9yma5sfRuqO`?1
zn#?9=xh3;;<rk|D*EqD0jJ<y!`0iKy5=J62#v7xzf4BFVYRDxxXH%^eRuFWRvlj*+
z_CP-=WedG6qOX7|`B<~#&p8wRm7j&SZ(*U<k$Y5#N43LocTTQi0?=snA76Nu(c5<V
za*pL+tK#Gsr@~@FkC^Nwr(WKbnckovjH6gPF0Cv#r=7+WyFOM*PK8S|v_FkpAq&e=
z$2gk#JD)$k1ee*1ovm_Z!a9~-=g9wg-H)D+u-5)vclH14@XyBJzn~6MRBfCN*${qa
z>(-^r6!(G1&Znf4f-uqBxw(?%$6e_1ct+9G)rdP%ar864UT-Af);U-zcmWn~c)LEY
zEJK#61&}|OHcGrvE!r=feXVs|==?&v!Ut>yhrM}2EvWh$_=B>}#Y-z;ZE=R8VNj;i
z4bOq0xBlT^jPMu=)FCn;G@v>GkhKt(&+ll|c&wTMZ%n|f{J;e*$5DuJa2-IU@R;?t
z{7JFe{rPK?(m#px>kqh?_Bo~Dkluj)3VxPf6?rxiQ*6hV0%FH~3{7~yd6yce5^0X7
z$i5RTX&3rH^^$doUkdAR&zd$_NKFe=w9_u77{z4s<hT~EF;;T7Y`STKIG`CiYMZA*
z@wo;%r=6wKZ!T;Id=ZK{weq?6T8Q-^Cx+omHUd*X{@F$}7sv(a`mQjFWHiG<iU_!g
z-z7OP1eMk=mB!@yCJ;O%Q*5%Ddesc|mQXw-yGLD3&@XKh-|Bho;?9XB%RBKmHVK$j
zG+h$S>p-95_l&fle^vX9Y!GzvQUJ6l47FVTsQ|2PoFBK1_Mh(2=CZ%lHV^H6scP)q
z`u!Iicn`0$-s(9LUd=l)0nevIQU;y#r4Q-yoTe5#guKydI~Yu7$<_}hHHFniXZJ!*
zT|r9ob;s#M?ZK2MbydN|zUw~({su2se)r?EfSg-suyQyM$82g%=g$u3z#-F}bkb=k
zYaDG*@M%J|wjZ^#+zPyUz2UD|xA*grMUK8#3jz<>w4$^T$PeZilQw~ciAGiw5XO*O
z($*kW@cag$LQtzby0~T^iP<-OYY|I3Cjz8hvw>v>W=Y=xkpPA(y!`!cl8;BFsQ<F#
zh@4a)7TCF=*I!{Rxg3{TKj1+$@`^?D8-PkNwh<hroIw0g<5v84${ptP^lp~J`uU~Q
zBo&yF1s#*kWx;{Zq*v69p#v92uflcVfbrgh%KQ|vwIb<40*X!&f_&9Mv1XU)MeTyN
z^i)0_V0WzHbK-JN)UBwO+cp`yI8g`m#~J#M+1|x>&O77GKr$I-q5^DBu|jD6gqHS<
zQgs0A{fYRF2O+@_3Xf|Q&pZnT9FLphuOd;|^-10i=H~bP2yPs2Y-p25%9tC6Q|wq>
znlV-7sds!F^ihSQj|Hlhc?Odyl#_DZ8uf#7`(eM~huvM@Mh7J;U&-<8KNP2IrNQs4
zsd2zM+d#tDpf`nr&EEVb`IyO3Ow%Pwf3Ltp+OYS=fVfkGze|tbP;@%j>A-s`(&GyW
zY#)}TXcAw;Q&4w1TlxiY()jS|Y%jBzV&Y#=kv<KoGw30o%5UiZd^WOg#r?qk!KA$Y
zkHkO|cV{b?|J^jOqH1IJk0$j$#6ZcCNqZcGLe(@!&IsbE9Isf3fovp|mC1%Q_n-#a
z+e`$N_uHIjEQaB1M-@Kp8jyi2=DF^<&Lx(7$RQG+$u}R0gQu^rFPl2A59)TpAcx7r
z^X1S>8V~*6U;(-z5@Z_;VMOWVKz~SN8m)%>7~#mN6W%CLXo5K4)PU-F;SUIDQXa|x
z@))*$o5Z0-uRxB3c<54h<8jbwk755BpH#_x#<vNkn0E9}7`zS`=!e8olKUQvMDBCK
zbs_hU;_|yNK{Vr5R+8CdYh$7bW@G5~c+9>jQaO1(U^%KD`AOxk)pH(R-d5yjf$;Ji
z<5%38Wy&FoFh@+nZX*o7`}Md7{{b&T;N0dRc<u$rIMOLY`ir*>B`RXyH8?pctdf9O
z@<XMLvW`CwN$$FSjXxz`y<A&uW2=c^xyq_AgnuS{)Jb{#Pb$YKI~*dMB<Rl39i_~c
z2FMMGy5jAFr1j>OIeUn1PVY%s(qO9anqk~Wlq%tOu+2Xlzqv{(xG{VSjuJR=xQRbp
z^ykEZGw&y(u)bq1pD}i|e8ec~98c~xg7wJaXdhH-n15q&qEHNO4YEfYzUpSnsg8-l
zpx?Uc57pB&hjY#8y1iBdYiFPIFR~S<NYz-3oE}X~v9MNcY<^w)qU@d_SInM$oW}R3
zt+(7q-MM7!c?aD&dcfw?kgs+QzD%TxF({DtMTh{i9pFp<#$h^yf{YSl_<iNT=&;J{
zjf)*dB@<N;ZB0SJn|JP8RaP(NtW1oa!Dp1`(7*ZFz-ud>B4}H4SIZNyYjL>P)kSEC
z?<9Oj*gizyYI5iuMV-t~*e<*CD-_H^57i^^*M=W03R<x^h1RmVmOh{1TYL8Wy1QC1
zc8A*brxl=F0%0#-Ugk#Jqg~#9*ezX7>;$EL6r>$IKl2|meLw2F($nS~g%~>)pT7hQ
zc_Bb+DwH|&vMfjg!|!!lBoF1|kqDLmv(T+%XN;g7#r&X6c{M^YOOb2d!F_`JDd(FQ
zbQ4faC=<8oSKU9d(QBS|yiKQ1H({`u`5e9bc~kpT?OSz>Q?DokDOc2Sok-zdN$V4_
zoi*w_y>h0T4tzHjGkOh^g%dReNF5fgQ?Ibi4>Zv*PqE~e<f^pg`%9BK3)X?P{=r*Z
z=x;PbR;=*W5HitM+BAaggf2gm^GU;JqkwW@L2b6B4B<1Emj-~^^Q8dzM6ObbR_5-P
zO%S>8d7$8WNwwaKtbh&zn5Iv$+7Jq;XtB>(CD-@^ZX%JCJj*=lyz#<jOIQc;>SMyS
z*i*6@tO-|&ME`H9;}S8oiKStzXq8aeCRurP@mfQ5C^F!(5C@taWsh7vdyoK|5B7KC
z?f)xA_C9!EL;k4~DTx0=G4emwBx3{T{{pS^QQorM;z00uRg+dCXowMZT!P*-#pb`{
z=%Rz+Zb8=nB$-D-ZJ3Iul6YSv_}wL>)N0I8rjOt>o1M0wHCVS1K>uh|r*_T5=D2;{
z&B=M)_4eP&9xTo`WWyeaN#rv(B%qR^OMxRe#3^MH7)rLRL}P)CA9svV7Yr$-OeQLU
zk`4;}L}<P~Pypq*00G!DfrK}P6~v-oZQ&s^!(tkxoL3Qq2A1Y0!iSm-7pI`fn85WA
zQA!{Y_Rq!+)DOHfw5hlY6X9xHsOQ6&1IuEjl?t(@ToP^Yut*>F1|44S-cA?vgBv<_
z#1zjKu)-5}!T%_($08q}0Ty##x9l+`IxvYGVl*g63J#0VMF02S#N)3V^ij3iKli>;
zj??Rf)9h}l2epW=GBRn^s;-A%N6=Oq&@h&gu+f*h`p}R_71%FukcJLt6gGe3D~_@w
zcL&_wt2ko|tc`NjjG^t1F`4&0fXn+tW-3NNzj9~B><uUN^}&6#<<1Ds(V+)7vAmRU
z;YGygNH`ew5AK^qghwls*ns9Bhb;EvwUJU6Mkjf}j?JIZ_u`5C4mbG~o$piqxT42|
zt_=-1uU23$|EfK<pS^ho=Ag{Hw5}M*%urqh(AHaGWn?1XEX=C}Jd|Y#{Mq=4QI<}^
zUS6|SE<1Wp(n({^EF6|kE`{ySR?o{nly7zpK{7t<)zktQf{|7C1Ud`6-!V6~IhbMT
z7QFWin}_m&Lh>so6^b6&7zV(N?r_RX0u>r4#71+4W}BiRO?L^fOvo^C+{yp9YWm%F
zitm;89nhp+`WN_Rt88*#glxS>33o`llc`+g<U@`YRzk@XSJ*vhU#udAdQ(1dn!!Y8
z0zC=P>>(r=dpOY}33OLIY|*AtYu;oF{92Q}VW~!1_XmlxzH5}MAglff<#v$2FnuHa
zsGisJs2^kA<Xoi2dJhZ-e~6l7r!8g6GNu*6ecN!pPY*!jsF_Clst``&hHS4XTaLfO
zM?A~h1?3>MFY$tYutRz?^ShAAYHNWjr;|DCdBQIp5I*-AGIiq-&6XOC^z?cMi{4l*
z1Y51ih+)ghhZQ_-d3FSMSD~ucx9tkd@sY@f(>vi~>EOB^pKyZB$F8UAmdMfC*}!cP
z<CwGj_w;J<cZX!tj<2z4VU%XYs$0+Ol-3%h(#J!+@?gU(QU(2@`fm9H_CLkM2er%+
zDj@)XP3ZqE_Qb{6`hS-a|C~^6TO5gdkJS3FT9@@CT9XYs4p$l@sz@_jj;o3v*}mS%
z5F6R@#e#~wo{8VrS}FkI{vf2B6SB8AT0I%DB0wR6I^|R-`9UYdtHxyu54<mRwMwhs
z2VwY|JwrFlY#k?8h7&{gZ`nOjMSYJNlOI)2T#-p|m*9Y1!*GyYe<9=S+SdU2AuhM`
z?imj7v_kOWG%5oihpAP^!nzs{Y>S50=@%ktx4qCrDYZy(4vN=&2Ty$aG5fOaO(wtM
zX9`D{?sn`)H)`^9k?kQxfigM>qe?5FV|2`WyT#=1{%u{=KOUUxv*4ARNi;_SW}cE;
zT*;|b;0yewcTm1`$u5~ZeC_YQytE<@;3Sfq3E!^-oH-MeEp^DE1G4bBKb_@I`1*Rj
z0e5-8h?m_V4FJyf%lYKWC*6M8qgC_F>XKBPisf7)UoX(~=s6xO)Z&-&!0qhoqwUcz
z_2;?Py0zdT)dXpv%*v==%-|9@Kehu=^g8cn;hwRubPZ(V%$1DBB`*K7w`b{eF<KGb
zr^+@uoAFdci4}D1#}Kc;gz8U#gKy5DO>q%q6*pGBb)C1SAD^@Q6aG(fzdIf7Dt+$Y
zU)XuvM-#{PPn`pqYCJA)gU>-+i@TW5dvL>dHDcDEbC(0=_8WX<H%1^>Wbgaz3Ac>=
zyBTBI=nVa*C&D|V^K(w#uNFO6m!=N_G97$)E;$Cj6~Sx869D44rG4EVKt*EEV=|`C
zsN$<C5L{&CE|0^-x%in70;gsxIe9h<9&D`Xqrko93tRqSv;w&&R1vg)>fUu6hRsvZ
z!ch9Z5c&^>1>!z(!LhtO89k4`*7^MS^v4xkkHDyBQ)}TvNr5K2n&697*0DQ&kBr8i
zdBQR=F_L&Nf)ul$5GU4C<Kk$5-{Je^S@6DtIxWUo?G{H8ahn!CA0LT5DZwNlt?s))
z^+10raao^Et7U6mUiuj(UnI5pTf0{hciFM7)Sa!3#q~t^LGi}KFi98z0u+r<^%st=
z{a22wQG!FTK^CfW-~8^(b;~%}TZ4+l%Qlfh--ViCIazb!_qYzIATF{3h~ci2K+wop
zTDX9Ru_fdRtA4Z*#pEf)oX3WZJ0xqFd9<Xb+ksNj%c?kxb>6_{a+jD1lkQsRN*+^)
zf6wxAA{aHT?LE%5x$HhqPtnU}tA6gjzK`<>^{FP4b_y0~=aek0rszTHV4vXP@O)Y?
zqnZRWYL+t#H`I%G;T4D?R3$t{=E2xt8Of9o%*phrbO*FIyiuVr(}x~x@UgByG^jYy
z=rRIjJBf~zLa-r&-Sf#v=Ue8nvLGFr90a>pHViyyOWG?1iZY#+D4=Mfi$*9QyPkY;
z>spOa6N!P<NF-3f-N@5!!MnJYTF)LU{dn29YqC0!XZuVa{0_gmSQtAXUXa3g0tU{$
zwd_U6g8pT{fbq#?w*^gPMKP~x+uINP8FCrt_Qx-Y|M&30#tno(T~i}hgMCD4@9r#4
zKh!o;P=tpx<ghsE#$N1?C-ltHxPe_Sk*m&$`fxgy8q6Ir1J0VB(Y89RW20L%uX+zs
z6!RLw1U&&EV}FMgP3%AKJ4zi+t^RsXP6hl{7^fNe0%vA5OL_hPTh!4Cnsj0d)7wK%
z2NqLsWlN0L^(&L?mz>A}ZWRiZln?(j#L6D+*7K9UUm)fBt6=7GLWp3c7g^f+mHsaN
zlMDNBE7+W(Z*R~G8bhtD?#9M%*LQ9>ovXFy#7kA*-#9P|sPeax1kvCai|D&}mW6iw
zeANkV6!@+qL);ihq#N#UPOv+3KxEdx>Ceu_{%uzAh;}Z<XBh>Nfv|VY?68+!O407k
zDcb<)Env9REwd`PSp&|)*85YpA1scri|&sM4!{UzK}&dFz%+gB+H*!WC*xQIyibqF
zr|@`U;lf3UZsjtDo%$g#praN^;b<{|WaHfH-vvz88spCza&*xrThe>!KD=tewLXE6
zm@nt)-xU3^V0ExjWYZEUPC)R~JLioWnny*}r+H^nQUjT&=DH+eYFfsPErrblkp!s#
z>Z>t4z2ndMgXBm;C_Y3(2dFaB$3dosi&##4r0DD6QzGO3I+>ZbWRRuzrjo)-tC|8J
z7j-<ZHbgoZhnb5YA&+9;aL=F{*2$yPy$uWW*jn3mp^O-Ip@Ya9qHELHuI1luj~)_5
zogyww15k0kOZ!gj;%rHV%?%>$n4=@61Ph{q)dhoSl>Tc$5z@@v-R&Iom3|X0{h~oX
z;w1=iEN4WiBaE#PZ%!o>u*o83($Fg?p-1>=d6V?zvGmGif0rRY4a}8`Hd7krCbHG&
z9Ar9B-ZQS51*>m)cwdEPce8aOK^nfCW7rLU4wr_Ofoy@w!OVivZuO#A`gU-nn$v8v
z?ZK}z4L*VW4X`ZZ8&1U3;hxqBNEV8wGu^H6BPkNq4WV&NIx|mK@s}EydR*p>`5aD0
zajH}Cbq#=A5Iugra@hpy$)$)knE|O9JMfLbe*8Nn>yM3zW~kVGHM(lPl-|d>evaMu
zv*E{*V&Ez*Y(Y;gLj5xgYuwc$d-PxGh|?`_YHDjUut9_w-BKSo6qbgU6>z&IJet?X
zzNQeX=JvImHV9swM_v1YzqPcPdqY`awOY6L#E^{P6SesMEu&h1B)j}e7a~cUISnP`
zZ=4<9^09T_!IZZ7Ai)zWA)6_&s9F|V9AEE#U#Dmz?h7d7oO;uGY~Acy&_^LAEe-=E
z{z`Am_v1~=CBROz*2_4pCVaoaiqKL;@}vEx5*?fS^<7NW;bAfuT)l-9Qo$GnVT$Sa
zJUCO(Ko`%fN*<V{?4q6LQ|a#Z2&dcrqJ*I~g?*Z1-(QFQUYlk7N~Wp&sZgxXuE~oU
zDE*sa+7T`93(QCLe#iQ>mwRL4dFt#7;8OxPX;wc`th^a@ow`;-JAghtS9+f}6_BGX
zBZIEuEJz&RF=NGr+Im)4vW-VfKs)3!jD8}|bWY_OJL}#r00DgCd4||gFt)h<4E#k@
zK4-s`-7$>l4iP)38Uk-3M*k={ivL9#W$T^|OD&ct3-Q3WSJT}yTA0F>PJ74n6`Z*`
z1N$thw3nn^DUA~W)lJno(*Z<X5+VV@QynDTk^(ekaEZTAgNP@$vX9>~z}LF<zAtt4
zso*7H@h_2|y@(t?+`GYf)b9#bgb+X#sG}ioKQwRq-HXnP1O{1+gC90)b$t-D4jKZc
z0eAJKpD*X6sM;D}i({lR*|7tldHf|nc}FOfqLgegA&gxxD5128CQKk9VLY<G3jsVi
zDE~o!N2o|R3a2+YVlRK^7VFzI85xz@uuK)q-dtWWSWr(Z!RTgd@@GA>(uLP*L80O#
z<id&I<I3`xtJ<TCUsKW^N<bdcFn4=!mFY+rkZy(Q`RfB$os7YG!ZH%oIu^S)HovQ0
zO*2-Jp-f&TSWiXoO0CbTIh_VBu~l4*yG?Yx)I@s1Fj`sE3OiAx$ylRU{rCIt%*e6*
z12o2y8oKQ7lQRRJ(VrQf%|ORdOW7?#s>rY(EAxmtTsJT_>W26P5ag_C1skYlZziy5
zGy3>QAh%O%2HqZ=-Ygh;QQ3CQWk>`Tq=aN3bz7K+iwG_xXo3c5!g91n=&JLPsXnfS
zr`w+S*NfUUUc@bFB6>h4mp`Y6&R@0d+l#6U&2WVoQLSQRkp;;1+a7+L%^hJxznQ3E
z8aeSFcnDP^((Afrs2}`IBc$jhVM1|X6@0HA)#u$m39>Ce6ngzB)T)#Mf`Optef-+=
z;J*sXj@~Z>GG($sdE@~291!sWVEFp5^(~3|5wS@s#$@@!Vj@L^kA@T{>+hG<p;!-n
z1CIRcNo*cs0d5C2Eer3+(9|Uu)^<5eAlU=vj_=U<gx|zg*MAix#?7^d<`44rV`2)m
z<k{f0`@BSb?zLc2Yv5#QO2;9@j<X6TEZv%B>nOxht5c`?Pw|$@o%P)ndXYpj0TWl?
z|M;Ft-{QtMegsKG7Iu6wNckdMokK@2w6d;C5E|e<Ebi-bA9|hpoSn!||F(-;7ogi-
ztP1JEh%_sz8MF&uS6U=fy=>D&`4c{w|Ah3S%>1U<H$Yv7q@ZsqH9y=bXP)626oT7*
z4mlyq+}SJgDUbNCD3Pe^g5z1U%XMwq&`_pwDQ=@$q2#pNDcM+q(0C^t=Q&Zv^<T<v
z&&%Bwpyv6E1ECco0ZvfTxJflBtlDtgjQ3I)oXu9=?qBGZtX+Bz7Ef|JJ|UP46$7Fw
z82{KB0V6E=jPf%=Sy5s_*?~^NK{K<T=;7JHQR$L5PPNw;%rpfETe?+|i9OMiZ`t_A
zvY^S6Yv@G<(-4zRY9LZt+Mvi`1d{3EPi!0!gC(H3nmJ*3qdKvAeZ>zDR14c-2rTgp
zATrw-Zw)dQCRfWVg=x|5G2|!fPZh6xgg>fckuO6WuN*lo7I`N5X?HLvuFIR0g(R+(
zWF0m@0v!Gh<Rnkr!i@&5oNPf!a)Dt|98*+-rvM6gp9XlPj2n7PQi?mTGo3j7#<sdK
z+?jN>`R>nbuWzXgnOndZgywe<cW#))Qo=-7ICY?ng-wq!;Tjq3%KB~wCG^Tiz&|nd
zm*`s7VsuZ0K3YF8JYsYUaq<5(mB0wkGZ29aJVOJ^-fa>AVZxhHjO9(i_JoQb9F$W>
z2vOs)ozMm`^V0)dv>g|Z-5m5CD0liB%2iw3KdmMZZ=g(`OaYv-Xo>^&NULw`eB|X1
z$D61<A~N|rBs>5~yj)#O+;@srAq!&SCEXrXW(StfRX6)tm(vs#!R-6{a0Qgwzo2gG
zfX<?{D96RX6(HxlYp5%JFVaQ|1~hU%mY;kIeA@l%Xm3l<*k%?kIcuM=!=Q@>l>P0q
z!Qr=TYh_N&ZA5YaAO%x&7~PJsM5pA2WuKE6>W+K4#0~{Kub&oAU@)zBRvr%Xw;~x=
z;QZ&!nZuai3DE@Gfx5VelKLWoLD3-iwznYT!&S9Xv&x0JDb1jx?8pozA%g>(+*Mju
zxthiVaMi<9mYv{8;cxy1*(jUib~o%DqMQ_!hfY3je^RufhJsMb&Pi;q^J1-s0O-`x
zxYl5^krq?oYFz{R7z6nHIKXe^w<dKNn0+Kb@l3u)&~;O$7I!5ODsg!`5{hCWo*e+`
zJ*^wv%*`X0%I+S0!gl2j*4d4Mz<?^G<#HfB!?)E+g<Yk>o@CySm_^c8D{;B{+(h9?
z$z_Hyfax{8UQT0K&n<jG2~YWRT~1j#?{7QMWmf+O*rhHCSRv9#6k0h;eg9+#D*2o?
zNHC4%&_$R>_Hy6B{y{Kd9Cutb3~C27HTiZl_>HEO={3&`m)x2wn|m9S8ssZZQV0;#
zXumDpShAL~c1G=y*v;-2NCT#u(cMew&D9VshZp3?+F$7}E!s9-+Uk2k&po1&32B`!
z{s|VvdY&7wLB03(NJV~p<OIMoY<C%4(SIc<1ir=_Nx$-A<SsTQ68<(6vDJd@XX&w%
z-=oM3yEK?#mc`GCDXd$x$|C6F-!_nl0sVozrNty6DWVqZk~^h4o+o1}6-4xCkAM!O
zQd0+h6vU#`e!(RylMa?!cy<bCIFnlMw?rbR0X;{yEYFlA{MIs_o?`~HV6P*vUNuEr
zR2mKx9_4kRK{EERCl{eBMH9qRE|U9aXhI(e;pce_k|H>dD={sWzXffj8LDM5W>$7N
zBUIu(Hfbzg2VMnQ|L_Uihx9CT`>D2~<5XJ;s>mZMF*%tgYj{vhDxKP35$dh=0IHnv
zf=UF53-jrkT6r?44_xJ`bYe8fjMp0<m>3GgmFYlmWdFc2YE`6vQW}CNl3}(f;WgDc
zBzE({yYJB;0U-*fLDD#KFO4{jmpH=Nf&-~5u9-lng4IP7@v%{M{t;OmS6F9kRIXlL
zzTb^0gxc~#PtD4{r<xi#<0;2PH8|RhhME-g5U2;bxa{8%n+IEl%R<Da`^D?7&D$*%
z3h7A6$F3k1quJI3h~@<pAe*Ek-EIe6z1l`{*Nb#%57-$ueCs$Sf$-hI-B&YNafOtU
z<DxX{=Q@XHnZ^KQRj?S+hLnb?qg>RKS><a7;}uc}3BstRH1FIG$|{<<9sl%$26fY^
z5F9W$CmINlfd$k+xhI-nIrk1`=G`qP?^nCG>JwwG1Yo=%_<V&D+HpT~<$ihwAf}5`
z$?x9-=X_A5+o9%T(E7EsIZx64*0)&G9S^WkmCu(^aa96Exp0}#a-?a*O8hz!$zL?0
z)5||hg9R;Q3}#?CN5SrXJ>1ObC$pcSV#ga=AmFh-aBEV{-hKv(pjvsiCfceC#LNMw
zDdF(yT_tm8)B9BBDis<2EJm5fz0T_@`bWWxXVh&;m&gx0xW;~7PWqa4BHU5WK(%0i
z^F@tOF^Un@00$^292Id=$YF%o7z)85U1Kvq5+q8xG}oHK=~v)vnr;+`;1j4+Ra9qf
zFIgy3>>}e1XHtDBG(@{9v>OmKi}q0`uyx_FY>`!ERl}E(B}S>48u#ax>(?n=F+{Qu
z!yyKkKCHF5oK|!*NNOoX>A+1_L<%lq$V6|xQpiJum3^lQc}EB;ou8*!X&I2V^H=mc
z+i0neXf_SqZjUhS<A!@#a{l-=5UO<~#?sX@IWb+S(G|Z96oGO_zPFbNdDq0MR5Jq*
zt(_<=XLmZ(boXAYn+grIJC<LIB~EsS6>571!El=XYA70inVY;#8YXc8AU)MJZ?a(r
zU!_h7R7BBQm2~24cJ+H2L6g^Ti4mC?rAJe)d6Ebhv;KrjbjXcm(x@f0+R~upQC$Uz
zUQYjYu4Z&*J9qI1Ma3f{agD0w{roI1yhOB3L*UKNK}bmD0C1Bdqj;*p)84j$(wx`=
zpQAELB2aOFV_Pe5hT(pFCo=|bDj}YuDl#a$yso`XTg$Gk+Pc2N%2IAOc33c)bht*k
z7xTo9P+@Ls7AKrKQ3!Y)^m{j!t~0<=5#^OQerj}7U~e@uW$rSTo2^{ib2NLIlO_>2
zs?Y&Ubn>M+(yyMEP;X_YC~j9mcEd6C<%SUKrHS&O=4bDX;_cad)t1@PIF!9o9zRRm
zPcG3PgBX$%h9JhTn8J##G~%S3X_>|_DlUo2Fkh%EgczDuSl_R4k#%xaJsv#f2pLwR
zQw-PEf^D~Du!QVYp`NNSnibmfw4^rQX|Z1|)SiS7WRY))p*fQvKJ2KLKt4s|VoE9y
z77d|#%T5fADiLboCeNQI(X^DqUMG&@Ehj*%0c*8sfS8%C$<t@`bsu6xmtHdk0=p%z
z>qV~+(MjnUF90ba=3i|IBvFa^8`<;$Re+`>f_WI%(oI*DuQ6DAe9ayaL*=#aE@SGO
z8+4=8PFZ~5s$JtgQA4A>_+ZP`5yhEvg^Qu4rmSq!#GLNJt*hoE@{Q<6WU527Ylyi@
z&<QHE0#GR<#TArituyO+wC}=0#+%XtXjw*qEe=FIy1;%6gTlj&$XTBa>6sVJZknT9
zjxL#Us^)Sdsf{LT##Y(toAstUl^d~o!A7QGl`IMu>FWcpH`E@&B)oDSGU4`h)<8KE
z*V0AMQ`KKY%42*nt4d~TFnv*f*Q$APuOVzg!xMV|h^I*v7-Xw1D0|VMT_V;F2tqAE
zTQX%=a62hiyC$Zk__T>t_28qWQ#<^3#2BAQaWDFw3kb`*Xmkd3CHb93x!^>mVHoKO
zO($7uR4QkH0w=EHCtd^n?X$o|d+{Q{0mZd$5J;o4;yPrpP;tw3Sm>J*+GiR;pOH~_
zrCJBe|M(_6BsJVYXxmDbL#Hv{MwY@Vd{0KnCmDUq9*zk|xQ*7Mf_WN4DO|E}tNE~;
zr7%2=Fn>e7y*Ohj+WG<@wESiTe*M&m7G3s|@?Lq65>sL3=HM#1np<<A!#BG-co9>T
zLjy6e#1%25=xRK#coU(nGxxopTz!0~Ip+<}3}EDB3^h?g5Flj?Y>&lmCSFp&I$W!@
z@Oc$Qvn`0BvwYGm-5C`wuVb^?qPDvY>Qh(r^U#?oo#WCY%P2obD|MLl$mN-V`_=8c
z;C=?KbOPu_I4zH!K6gxRWC7xtk*6`E;c5c&PyUx~mVhon?xh&#B;DG<(O5J84$~JE
zwR|W%av?Fd@+khC+1{&X=}Q7hwc0VPe9yu<oTCumug(P70r>Plmw2jzFh=XdkQ-s2
z<BE{xyIVCS9MdA{saAD@B4cq8ZQ5U($M5EgiDNpw+NwqJ)k(-Nj3`ZCh{`LB<O55q
z)?L*!v?n3z8HL}kvLAY*cMzCeJ@B%mmM$I-*mJpVG$TrBaYsikOZYi^l_8XwM5FQ8
zAghCBhWE`tsfuw)Zq7FcdyNRS*d&0u9I3=9-<5NfB09&aB#CC#4R~}&_;E)Lt4n6F
zR0Mg7;SVA455afPOobZMVwCHfp%nu!6^iic1FuXs7m4NCB9d>ex+N@3wcvKch$`u^
zX0MT%^8v%jKQu~Xg3gsRf&PQ2DNnS|N4T}(I3TsdIj#8?Thaju7GUlqK@)hPY|5c}
zaz*}Q=?U3@+Gpgx34wGCgE80hBX1&rgO*y8-$*=|uPIGh@akjtGOc*};$FCG5l=0B
zxT`2@6FVPKAAwyqbH{0oyHrG*IW0KBcboe0ID%cYy4W4m%={fz8H*H{bZK-lTsDKI
z+0(y+7-d}OAHRzwQfW|XzjYFroVpp%TB(eF8YuOGq59kspPr0Wndze#mmp!cA7*A&
z<l=qJhATvVkae0?@$41{^hGKkTCW?orZK^;;}Mmzh-ahc9}g^&I{X&xfAHm9{?y49
z^-o6YH<t^!)~86?NDaa~h+<V%w~CX(?^PtN^B62au(-b6oIs+g^yAOPTO*c^P{bN7
zy5(29T*v`a`INvWO{tZ|dF|m(8aq=y8Oe|U9XN7g#9flg+Kiw=uYV!k&l|4=a72?`
ziK$i}AAbAlk0qkI+p!1;tNkOgG%?v;%P&RBaE#ET)Gs&C?lQ>EP#I5jC;FDbP#;+2
z%t~Blv$w8H`HUZj$!5`8(&3cu4$GN2YtATguSF+k#9YRCC0;@q`!Z@ym7kSlxRHVu
zcaCrM%(qGj$#a*VtJGZD3M&es&Vr)1xQ1=k1PHZpBUk&-Y*=A??rGoLUUK8GKz4ma
zU}r)<l;v2?+96H}JWuA=W9TJP1(_LJu84ENM)Ktn1Q>~vD(rHm5^MT3oK`&-ct1b3
zPR^?!>&9u2ovO4Io*QqJD}^GAqf(y=8GNU#t6I(m*`#;FYbJf1npVX8E%@O!3C-AQ
z1}}AG$y2ep6MvKIh5JD^iQ@HJscW*>inuX|>L7Txh5z|g-$Ir%wdJTgk}JCYiCR<m
z-Lh%;bJZB;^HRT*`<Y%iO@8T$b9qy+?p*k=Ds%_zC6_m8r*kc%);qz!u#~%6X!hh&
z-Qz*Cr+nb>7`!;oaCF73199rwbo=LHcdD1K^fnF_@&=3iRiIL}DcQu3^B~FurR)Ar
zx4<dhWATt1AFomW<uTRNSUL?5>*Sgv2vUh{{~&5G9*T(c?R_Ws*N8a7pUDaE-I8^>
z+mMuv<f#6=_~AhL&M>&uJdEvh6BN&f)#FX4?n$+vplh77%m6GCp(E<+O2`#=Q9f>d
z=ApxEiSsca{3kCzMI2`Hs}oGYB<uV>Zk9FgIx$|AbgOsr?-}Vmx<$z>L%K_g3CUsY
z(u=cBYM7JyX*?;}(+5-W)Vq=>LadaopzAZ^{NV$Nvp+|HXW}|EClDAr!!i4X@onXA
z5wgPvCTPQ$h~1RpZ&{)KLB|x|a64=jJC`w%kmAkj22$TVM7!P+$aS)d6I-G3MAvB*
z#=xoJQfVO=A=Bo5LWGiqvr%yO_uS#$L0$|&il)$<^g(I*%$;+q|KJ*;$}n0O$a4_;
z3&HkX3UTZ)RN$W23k&S*%N(JS>GQDA%~Lk`WXRpf)d71PvlUdONM!^u4e`V0tTt7|
zgvx>%*z8ejQi^^sMOu|qu$tM`luXUJF?2`Jf;mQ)lT)<HDj%ugFV)9+B81JSPYwJV
zi;8(Cs^rwPq=_XHhNU_>*Bc<SEYxOQBhFXPtxw28$EomnvChcJhkcQUAyIuJiPeG5
zHMQtUSKx<h83VPS&b*PcKjum!!V3?*v8p--5^b<q`q-h<zmdY)Z@K7qKon1E14Osz
zpGg(K-?mxB98?9ARH{+po7QrOLP3=q)syA=Av%bNR(MS0VJ5tnTnM4pP)KMXErDP9
zhtgub&aW3izN&4_{Ok@RA?z7r3<OaS&a=^XHqqd{f<A;&o8+p*+Aru$&2f|weJ4|;
zn)C}9@;@?#-C0Dp2K$4Crt^F5GbpL1ti#zm4_Fw0>;R_&U1RQ$XrHHZ8F`y&!PAH5
z^KOoJS*u_xu+hbxiXDam+Qw2V$lvZds@<f{gV)mBO|fB@zlF}g5GAI0>Xn;fINrI{
z{+|(lZTe3uY|7Y;?jSE;S{sxcliL~<wed_Q>AUFQ{H4pJ!rMS?Bf1bI79~P#qKqvr
zf!{VrUgK1FOif~WyWemxA`_0Er}P-S>#XlvVs)f6msVVf?r<DHct-N_AHS$kj3+G%
zjjX|7|B@B$CtF$e-HEl<Xv}C3o{Ov*)uEY=tmWjo!lnFGT}N{118%iyi>Wc{mKcM7
z-h&-3(CubO_bfB%(oYOGiSunPm&djjb2tNw5q-;x6*28}C^JK4tPyLVWaH#C*uyu8
z>$<qled$sI3u@6*O-ySE%%6&qjm}aMn7`sXJqnS1Fc>0p8b#@LfmtWDGz0k)gKxL^
z5J%hEE<h-k>V2|bt!0f_jr5@;XK)Dmtl5KqA>CdcZA4Qd_F?B%hvt$g*YR)`it2Z!
zwG0z+j%@<isCp^-RoK{z^jCSZwx_5m^>stWmd|Z{Zf;{Pf9pKD^1z`fzP=Q>M+!k4
ze|az@oN*!lc$AKNLYieDx%PuJ@Aium)i%3#0AD4YBPgxRY)EN|heGp+S4syD*O$((
zN72_NL+>7DWTEI*60ROrIhn%(M0NSq54gPV(*8-UCUZpaXl%C|cm@)bf&KBJvhc26
z$FgUcRsFVP@4C*9#47Dr7n`nTm;Xz;F+o#C<^M7EPC=qYO}1{?wr$(CZQC|?*|u%l
zw!O={Y}>lk_ePw!eIEMn#}%<&=g65kM}DJDb+azT!rH!K$r%4skq8`DP+2#sSU_|s
zk>K6L6-aXsXT3>bt}kh|Zx`NH;SEOZsMy^S7dC<lsnl;(8}3TEa=15vf0)clZ^JsS
zBpqL*i^*E60qq<8zk4oV5|b@6ehr)zzwxI3an0kuoK<%ACZ_+h>!Re>z_}su{~9=F
zBokx<2|Liwq=H0{Hx4F4C>)lbl8)A(w}(Awy=SDCzF)F@8QEG1&vc7P>bW1LXPN7A
zQUPh(&F<I=qWp(U+diZ}8olqZr-6Wy(nXfeFs_lFC3xV1qQPk-Z83rg|3QbKTuVwN
zqTbnpAZZw%Cs2^`nIy;~?UJS|=mt>2$v5vtm;(D4V$y8UibM;iA_WWqXAWkEf{c$6
zGlF9UjHNnCY>gAwm-58#Vu=NL*nwOIbWvOudUT^IyoyRl)!&_Zd2r(%n^R69i9A?N
zBEQEwPAc#Nra|}kKXCYNo>i|}XBEI(Vr|f9x+E)!cNv5GU>16eG5je^KsVzHaM$WS
zC|wA_eZ;n7>vQwt_i1|9{D+!G-q7Z1F?_W<%%F7bbY1|B1NjhfKx@2YtT?%cui|=5
zc6x|@;^xF0oXTb2aRSEj*`5DnfH|i`Psk%pl-~WLjK!>7yL|mY=f3%sf~~X@f!Wx=
z3y$oXX;+<lx5ZG}H1I@jem_vH)tp~)nEj8CoXFaFq+H)q=>1S7rNpAP3}%^kACho3
zTdX&UFJo+*(0|da)oK{Fv<)3Dk*PaZu*$;<^T~_>Ti|b1&Xjt{xeiF;dsZ%CpQu{~
zM>~-7T(qcf3F=0mSvP-7GnvuuDp_doLFqk=oUn9OP7tMPZN9JJ70-&u&NnZf^*`dj
z2g=Ne#Kagv><{>fsF11v!7jqRv0-^(#<Z_QKjKd8ZpcV?tHj+z;ZPdgT__Asj<H*V
z#S-3a;3(UyC+4jzCE8cLCX+%7P0Y}_?)E5S;6h~>bXCL)T!Ee_BaU5lIOuySd6QsH
z6YQRl)G4J%Vo=pso?M_%P{VWXMXz0Htl~`lPp&|par3L^RivM<f+P4csg38Cf6BQh
zr6&rZv_RdR!h+1X+<H3=$9b4b^dYmdl;){aixYbjW$-8_aa2a&3r70x9djYM5TP6<
z960HR3nU<)Z#^&-cWh4o-7^+pkHxfh6?qw*fru7xlPVXv3~(qvM3O*CdwBz?y83vN
zuKEYJbMat@(M&CtBdas!m*iV+X!QJq`~GFtbd?RkHMdl#uug%l8=Hf6K-bSmO1X_}
za?7*v*yp0s&-^TxR_#hCXBj|lZDL@d#yxcvgX3BhNo*#UtPISX3U1R2&@B{u8P17)
zkNxWn2>aF4^re}WW)JwPrkD0$7CV=CRM}D9D$vmL7d2B`bX(${OmS4KJXWWsEEqyv
z2euMxYVk<Vf4ze{C)&;iW9E)1*0LD@sRN$y`hd__zWsrWMjHeu#>VL1ndG;K1SEJU
zw_{_ehD97^tk^pEV^58m4&(bIpX7sh>D#%1Fh5Hl=%we94IOPz31ByQq5kMSZiSuj
zOjOJ@ePz&dBn{);z|}X83p!;s)yUjz*xhasbLW@w;~y61Z>)c)l8;x|-HhxZLY%H8
zXi^6^k4dUElUoGaDkt<+um(9A=%PKRN!NO*?A1i1PKRiXh^EDZwO5=N&+mLnx8?5w
znBue~GZIhBCMV{AZ;esj)S~LO$v;5<UHLf0hMi8q006Sk|95UP2PeD#S@&i%{y*KD
ztxH!ZX@uM(y~;t6aFU8}K9VAUDqfW$*NoLPKsMHXM#5@&yJ7z@^0tMsT$XY#uQYH!
zUiaKIH(RP!%?Ilt@QFP28OZnb@$vEaYxM({1R9_y@p<O~u&U@FuLE{M-3n3I4tSCa
z&aOikij9<XnjnJ>G28(5m-LTJY5jc}2~g>PhZ8hRuZC)%Y7^isr^djdClJ3ueI(?V
zAvD%dv=_)YdRj0{IlNsx4Db0XT>z^oG+?a(O8CVq!aqjv5L^`aJPwra-9#Xp`5Vol
zhLq}&f!_^9${0<N8?|V#a{Pdy_U*t1hHI9ri>FS+e0ax8)<BExWGUGrIpcv;yhwKH
z6f;=9uNAJ)F?I`<Az8Svd_2?SVWC6RCtZ71QU|0aN?5F@CYuT=UooPcyG*-B6sEXs
zRy0*v;q`eJV82vl8Ta1ZvpD-#ytWZ3TL|Ld(r=tXfSJ1#T1ICKS4I>Jm!ARnmEIV$
zO`$c9ReV9%k_!wm{$nJ@oR4&M_dO8>;epQiVS2o~3)HnI$&?;|m~_us9V+E&M18=K
zDh3!Lu~IX24ZoQgfMx*ZGj3_8+fxtfX$<Fo;D+DE0%b(o_&aMWWf3tS7F~6ke7V^#
zd}~G0MeJC58~AhJZK;r~$x}JK%Pw?HkJFQ@Quk4ABdaiQR(yjKs$9Uv@O~MT1|n-z
z_bpo`;5)qodY=a72(5iuSUNMobrodq1P=_%!Q{(dTEB<yu2OBrj*2?IP2kuEIiDJh
zdK~%U-0S}B5}zN?8|`PV{u>smZ2lZ51erp7v?mC7%gAnIk(%?CyN3Xe2^hS<0jvhy
z;Wn>yQrZ9c7#4NeXj}(9Xap5*&O`AEDn1#B!_@8i?1O$Ve5ljI)co`l#_MLzespEH
zb^D3#y$9zN8ZnytgC`WzYGGcT6T$F$6^D%8q`PtJUt#yM4d!v0Vyt+o=<CS*TmZ1e
ziKrsFsQ9Wx-9bQ)3lF^mtP1mk5s!<G%MD6sTTp-|L#$u+TFGPhzYgVdr}gYG*R|o#
zYY9S)2rHup8lvGf6wg|d9X&)pDRX*sU$?2pizk}!t4Mcp(P3Q4naJZ`$SmTD(+UsA
z+?{XCapdE4+bh`nJU%Qca~gsj=Zq;&`fYZ;YOIm*hM<`w7lF0NVtwx)KD^c|Mf<=f
zp4@+rVSZ3g{iaei)qdq%Q(WP6Ri56avfFWV`K=@zUcb|H&Khd8@o6MS-+odWl?H;C
z!4RMEOHRY*zlN~^Kve48$syW{gum^YDS}9Z<PvmaJCk{o3`2>ZFjoPL0vu5z$7-;$
zD>2knQ89Z|_d$z754&x7qMEkZisNBKn0c~ky{1*ja&kfmFK;0je>Yqmt4_mCo`$;H
zI1w(jBmWo+r45k=Sml_pe8p$;m@O_V>jMSdGdXdEuB_O^D)L8*2uiu+UnS}}*av@5
zfx_}C=V7~8dh5uKw^ofXC#D}!o^O4IS9m9PNr^wC?)>JqJk%j$F;0rfg%K!KC3M2K
zORPyg)R^W=goWSx{gHXYYIgX2B#hm&3ujjbi};UWYKuveK!~Wo4P{rhVgeZDUf~_f
zA16H8B-*HW5wRMxbM}S^lf_c2De#|X#HlG?9gi198*KMe6!PW8a-RsxM}gG?6q+MO
z1Hx(UJ~h5&zPu}4ue#~o4S$bH#vQxxRg`$Hg5Lg^MLuKSh^>7QP4#%5JJc;un^ny7
zy(RhMTMSNA@O4x%G_#uSZKS%x!3X{JB-t5I?)s;e%H3;0LCPLk(`uXBbeqvz9{uB#
z$6NYp_JK*uTfXe>ln=<M&p59{`gkG6hZn-dh6is2(SBc@(;uG?<p_$jl~`r@HAl>_
zb_i+m=$(M#u{EAlv!a}`M$qZliekEB)cpngqV!z#_)#$1L--1^kCpRpc5xslHqqVg
zg+C|W{A>+vW(h9tAt}@-dbyVO%b%$^t-f+BGfdBNg$-hP5j@%;g<p-Eb6n2NppKvV
zKRiY4gnG)ybp5;gZ)DEgpA0x(yv=p9WB49+hbA`$c?-dG)l<$kVmU;*&7DX0D>E~v
zWC7QQLbVyKB`}K>`-dA52&<8W1YDa>W#MTFp@2*dPWNinK#*uXoyWxcrRq}BDyHMK
ztz}iF6!7R3vd6oJ(?hLX&cxGg>Z{s!9r`$HsSHRv^WF)XPFhSh2hkVRJgos6E4f`0
zG}(`5dl2^PqJApx<t^p~j_ddu3R$)~d^N>wtkml=mIh@@^l5@ckL2ka;;{#_A0{*K
zM`L$+LyGncSlZm%Mm5btC;E<&%p~oT3A4&n+@A=H3=|We{RA?yCx86_|9ctzlE`9X
zgarV=<^SK6Q9~P-|GA7_VShPqa6G$zLxp5rXC@;Ewe?spnuLOtP2mRM#LIE@#EuOR
zd05-z+1@*De%`#~l58g0G6cKSaXZU^1(v*&yi|}k^l1}z9sYg52l_BWO9*PS-??td
z1h*ge5S!>PySDgCj2`fUog-4*6K<x5z$UTjIF0})#8gZOYge%hAQE0>E?<tV6h)&G
z1xAuM&*2kp@mfzsre+N*#ODdk#Eu_+A!>rCG>klR882fShUCRx@JGZZO{Tl!X04RF
z;BYq945mYXI9^63&0{qIGD$Z5nxBB`HINyzQSU|NChqZ7^OP2--)!9wWo<QT{273c
zz%1CIiQ;}}=<BPit1A?oDY#(iHZaQ<u9<$=a=Nesc<F^YrEl$eSW_dp8=83P8LKJj
zQE}Og7^}Usi60X0bG)GryQva{5aLpv$GsAOjQFK4%idnULgLKVM8hn&oXXHd>^azH
z{^PxVi~0S^*;mBPUb_{Mu2#`6^h{&})!^-Qa=vbKw1e;4b)K-x8Oo~V9JO&pnt%gW
zKVeJKrH^jS;ve5v7$e7$9QYUWfpM36#p-yiw>4Kw5o-0OVSD~SlfyU5=;|J}%2f1B
zzVnh>GfhFY4txF_7jUL`+uvJg1jmNe!D1op+`Rz9pn{nSvN^M)3;!+HfYE6f17BHl
z!Had*iM^)Ft9sSf>h5<t{Q^DyzIUP6i5nU0zLzfCbuCyD9r772%eZ%NG56{`Y``3<
z>S!yWq#3V!a^Bsa$<ZZS-)h7zS8EClD6&5`uGW|@h)wTlJ$kxce%0zq-^xi}jBE05
znqeQ1uteTg^3&l^<NPZAH1@xlhz1fPz3IX&zR|=XbX{x?jCp`DR;YF-r<%`-q|)IF
zdvRs)AuQN9MV=xy_p!nHsF<+sjH~T0$R9^jnYZ{p1IhqXv*z0s5#!3-Qf9!)4BTD8
znHqG1-8h&h2yxjTlnZX@EJ&%MyF?2rMnfg;{iO#MKpHZEaYd5{os&Lby2l4Ao$)1J
zI_(9%2SN=)!ufNcrusZ%Zf7Se7wr1y3KG*_b9H?<rmpxxsLUCNDpT8%kGo46amdJ%
zB)gj!(SFNe<FAH;O&SPGjloJ)lKpinl25p|&9}bv;pMJC@PDLQ!s;&kGxg)Bs8Xu*
zGiOvm9J>2J|MV>NSiq0vsV&UYehk7ChSi*Aw{`U#i9~~1iB&by=$el9xErzBJh1wt
zCv@N?$oZ+r0g>@$^dHr0%K?z_>IT{cNd9g%bf8?RA%`<Qt#(kZLasFibJh*S;zArj
z`n!4n4xPFv$@xHtH7M|<QHuIIietHydjn_r9~j?D%if*7Yy}{8{sG8kTLz&o_`*Mz
z1vQ`g>U$rw8ulXy|LJ%G-GN{8j_T=qCz=q!jW?#$2e&`$kEX{%&D7U0P#0?i{IT!o
z*Q3A-O%>t#E_vUVs+Zda#Ji7yRN$T@yq}mdUYz6)>p>{~@i;=T1Z04+P0BI8U)9=k
zs+6b<TZV}pJKQAJ7ge3__H?C}*lYyC3Z>y$(+J!YEdbOXT)7{Xy0tUt7^*dCbE9U`
zh+y&fasP6uE}=`}ur$!7-ZGc4H$ayH9w*z9!=$cI$f%B77nS^+mSd^MY`mZ?^y0&=
zoi*Jwqh?uILr(C?tcF{L=+lgyEQnG58>;b;Vd<Baodv(TM%QjG8!l`#gcM9NAf<By
z_dE9ROi*4g{Vd0%3Ck?09YQx0yxgI%KSDS-O`4}#rwT(8&l|O66F=fSJ`;nau_Q89
zhV_~wr#^#eB~|x5s9yaxfO+?-+g$xomy}8%j}Z>r;e@Oq$cb6ZG9?8)+hemlWt{sZ
zXMi62bueXxoEa~lmsS{W6)WQXI6o#^)UK6pF)gbQVwPtTr;fY>qn-U^^D-ycK(($K
zn6xjS+?V<btmaU4P^<@80nxOv%dzFMx&RDQY15=dfJu5^!Dy3;xwCZs4HN5PuSNFd
zU<n=d>{`Xn#xh4pqz`k7NAQwZ_tj}NPiq^hH$Jf)s)i2m*MYKRqla?n?bJ8-wwK8p
zHMzD1=x`s*l2NUFs>Cw=^Bz&p34{A*sF4N?1-FaJ4X4VcB2#nD?C>y_<U*)%RJixD
z>y9X{zccmqI59R%M(IEnhUIv$732WOBp#(3jQw?TBeD;|ypT4qMPcOwwQtCh0nou|
zY;Nz~#~5qAeWoya&$$JDum&6llPb3LMtPN}a6zKqS+N2{%B%MhL<I3?03!nY;LYQ?
zUKYG#jnbB&rBQsOkv15uhyNVz-6U;Wd?Xesc;Wfh`Nrftot>}})`MyE-9l&TDFH4P
zX&yKD>pA9<K?8BUUR-m3p)4p$ey}9zH^1l<-iZC?)Y#!7q1a(rPoxYwI$qLKxFJ0}
z`U1RY=gLCU?7X<$vBzCOT67?OUWc>_421~<nqs|TfxO)yfJG(E9}RKGYCYWPibA8?
zY$7lRj;j+e!I43y!D<S~u+}r;(r%?&Bs|bSV}D^iT#d|K@{~T7#;Jb%euxMttu=9C
zUx@}0KI_)O)b3{>?*7leN4`#zqm?}NzK7bQ7pa@iL#B!Adg%?40sGM>vgrfJv*T&}
z&ps~C-gA;(LLr%#fcg?LvK^^~_}eJ7vkb!RT!_;?be8CP3q>Hol6nQt{fv%qmWfz=
zp!sa+{y3`5I`IR;wjaPrq|rv4KZ|Su+xYPOfE2n)rxXTC^fa|rZm%3oNBjF`F&knB
zBeFOfj;x3U?<i<3t#aRHxFjuy5x>p_R`}#1b2gNsORs1O2F(FVEj=NZlpPfrce*r&
zI~=zF0{D@$LUgo#_$R;A-F{X?NZ|HsZ+DAyPv&I{4Pj#wPijQq@k>b4e>1mM@uj3k
zculayu+V}x2bFU<b$%c)^fZuPbxF6h?2Ze6c0vD1lI3==h-Y>x-uknod?H{oGdtPs
zg|^(bL`yQmtfepNXiXKP?+JjqB8nR*hKadA`npn;jTA;oGdErK^c3nrIS~XS^akPe
z>(XW&r<uH_hoK(#iK32;CfboYjI_^K6U0D6g0PKrU}VSLC|B@hg-0U9QAaNM@Mf72
zvu@lgwu)HsA%@rridN}uX}GCdd`+^YNwQI^mt_9{t2LabWZ-wlZneryX5DB#E#NDn
zR-h#%IcQVQt~-qWH5x*-F+Drz0Po{T(Y30+fCgb`0xBO`E2J}iTNf1*2P(n9P>Hg`
zN+mRj#lX5I(W3!_k-x31^G?d`r>B2kl!{59xtntv<u4(+?B>QYbU7R_F9{-JF<ek~
z-_;o?YBrj5mAzkQcBg6)WSfz05*wVD7&1*HNrFp=8Du^@<Y_pSX?|r;UO5w-P|S6*
zDxwQ?p#UcH`_dj5h0g_oO*a;KQH1WbG|Jo1(W|hrqrKV09S|R|#IypmhXwd$?33z2
zKTkx*9a!Z!NY4zR+H)*Bw?3jk#mMRfBsSGg15#eNIjvF)*dM%6is68<{uL)K@~bp`
zQ)2_AE^yADR6JE9t1B<|HiU@GIP#5@QcE$rzzuI|C()fVQ)dm~+#k8P0zo@;`r0PH
z({rFFIp*uB{_g%HC&{A%{I*`G=x`{!wC#5FY`=`7qo)HKYS?BR&7*rn#l9gqCvT8J
z<EJZK<drNvS9_7FFH$PrN??y7j3H5REi}FU`nxhw+g~WGyXPUl^jFQ-?U~TNW8bB)
zbxo6$9@TI9G`YLe%DhQ)CX99USQUA_*MaEh$cR@TW)IkMp#9o&E_GGi$lvu(tmNY2
zk@S#u>zLAy+maDwR|eojTXovvchiQKT#9ZtFTI5UG>FGoD+Z3(r2ie510zFpGN5ou
zBM8RtcNe;}f#xVpQ0p-5Hfi@mvqEUF=o6|%;;D|ttep*=Q$DUvbXQQX3A1z~vs2^*
zCjV+Z!yQkXqEVZBvM$<AUAV}ouN>!J?^1osi7c#YwW1FCXIj^zdombK9vCS81qVF5
zmg&HDudlb$lR{pPjZR4e(PN3nsAY#lOJ>|IQjc2!K>e;mn0?xxoRdNFRTm?=ewgdq
zwwzeuZf&f8pl%>&XsqEEh-pHxfx!%>3iacmwj=3A29C-}w9Oa?TY9O0jNs&gdWgax
z4I5CB2hLOp-iGO5uh<ov>h<~b6M{O;$r5wRfEqrH;v$DAa~)vd=w5y-=Z2`eM#k#p
z;X{%zqX1PCM<oc<Y3rj7Hr?F*4vgqFEwA|^-sY4WramZJI^L;y=u&6VKgp5^G<NSH
z`cZQMuX~D>pN|MeC5Ba?P{MSt#wTblfqmr1CyAOL8<2geCgZaNv8_tQ*aM{qgINps
z(J@T}rhUqIry$s(*a@a%{9Du%%aR-qXtAO)V|UjO%B;#EoDsJ|NT=L3ELaUecO&RN
zkyevg<ktRU5PPd!oPP9^^UtR$day^UCREysTe|uEkHsi1(f18LO=PM#{2A%1O0K}}
zf#iJS$-tco(<(ZpKlJ~-AA9p{DJTD>aoBVIFCKJ$xn0H%_BQ_^{_{xt=eHw6`^o7O
zIx5wb!A+b$n_*c$j`d$UNX39EUi$YhdJIsx8+6lpO181<ZRh4J%2qNpVBTgk!+3*b
zeDUMmQ~pNs+OR1!vm9IOrQydiV&N`}-5zd3e9TXLsU$2k0bPa+m?d&ZzXww+2Zer!
z!?Ix3DrD3|FmP0Fe?-6A6B+_h3)t@%G=g2+lHtWD7?g?n8G?1(AV<C$n>M(12&HDr
z8zmT{Btrajw<Iq=r0+i7o&A9*`V(Mg(6#w~%iy>`8=s!iQ7#lYqXQ7iz8*SBHyv*a
zS?M-px_B7utJYM$+J**l38Q@G3uNqDHu4K$Wo&%JWDDtlf|HY{yQjxCBwskOTFdbB
zES{F@@Vq(IqbKkztYu^8)1X!A1n-@5z?t8Mb}q7@6W@Ry?%(nrO>f-oWS=GN#URw|
zt^*nvw58$qux#MLIl0Eq>Gjh>7Jc0~vtY7?+l@a*B7o}+9Jg~C+zK2ZvR?F82)}bf
zSRsPTQxAwvKmZM+Qlgk5#sTti8N)5Y=RqMhJ~O?idyQHY7U=-pv$=tTgCVz@nE?7J
zD_@`iz8>ewScS8t><{Z@!SM#L$BZmXhFfPJ$57O$1;lmd^(MM7FsosLrttfmr(bxc
zVWjLRSUkGH0gG`>8G73nZg9oE#<v63)|vR<>^*MeO9T>wm=f%wV|4cvuMiP^A-~u{
zj9}M4(p#u&>rqK!1tCOtA62vd(z2!G+Qp0O0=p1`VB@Imy0X;`yxBq~`DEVZZN`Rt
z=dkz+$pTsc94snF?hM+s#_ksS9Qa&8)KQ+8LX3Mr?RA9PDu7JZCWC)s5S9arf0tB1
zF`<p@0Yhc5-u7pQ`P|;0|9Y9n7<wWUUkq30!$Jq>!~hmY_t4j6V>SSLMSbUUt$pEz
zP{oOpM~NfjW`r~5YNf%A|2@?@u>2|9xssu^s_A8AOec(;{*=GdeUpU={^M-}0jQnJ
zVD|z`7`_JbVZ~6+>+ckzaqG?k;Mv?*(AJT53Uy)3x09h4M`N~nHnN+;+_0^$>9z{w
zti;Q5C<9m&Dh4vv=&i+Q)xtMjPe<#0K5vSy?&iLMzmXJq=AuNFkgUN}c0?shVQCmU
zfpp%(f3l68`?Gm22dk{9etH2Tt{fqdz$!yZ6}=JEn0-o<S)!$CiRQa<mV^FntTfjX
zl2yx~*j%kg77}q>gTS_yZoSq}7qb*-Mp-8*2AoUq@3m9V;btyphhbRQ$j%U4d2wxS
zzu>`(3HRm7J=8)Kc8^8cBP&8!5y_l6%Ej_<)U4RMBn4n8{M|~<&yO%;ejwgZqW`c|
z5kS>24>s|5nr%07d@{G(hE1R>y$P0YP)3t{z|PbcqCX0f%xE+;8Vs#a*!V(7RYdn-
zOB90&1^MY6S>W;sr7>BLTre5-U82cE7b=5FH%Xqcpz!k$?E8jpy~O0KQdm!CE*h{)
zEYz-d#=@0aWHUdL<4n9N(P}z3MU`M3UGi`CqNR-~h$!$!EefTLLO2+c*TY4{w9rP5
zU}P{aeW>7?!2p=0q``fqKdfUx;+)*T7G$?JxrBOE=)fwiLXfP<J~ohDx@tGatc{PL
zn|hcHufT%HipOPi&eW^{!zCAb&iAgBjbq~>vNuNz@Bjt;Be^2T@IDDKyBv=>XpS6l
zl^Aow+OY4){v6nsvtY42Ask{g%8?-%a766dDG*mpsC*wW{+G<9x(1F-TWKKX?d_4Y
zB8>xRQ!7JOrN~K;H3(<87sJnPw48w7cSP<&T|n2fNG5l=HlP!qJB%V^VgKkL!|tOu
zg1Z8TKz6Rx8b|ShGX!(Icm^SM9RtA#76ESaTuQuZNLZ8WUxFkV3(ksx3$VMZgi71%
z7~>4i@sKY9R0w_odr({Mf*q5~ox;5Dw<M|h&it@<o#O#;Xoo-d4tk?Y%>r-TB4d%J
z;V^TrRw+MlbTr)7MhnprZo5!pcDG5}>WzKvo%xlEOpL4<RAvh%79_jW*`k-8i%c<&
z6x4VV+~bqFAL0>mK_-$2Sc#=UHxAgntWMK{w8j{n!3{;&Y&Phm;0@KfxUz$V<PXW&
zBiP#0-QX~7hYy#;Hrmr~!;~M^ZVstWxF|8}bQE(Xh-5b=ikUQLE207B<xtSf9r4t(
zv3-*`s+0*|$uEHv(di^M+z1PTp`50@mPkDY01|nZvQmudt)Uq*jB(RBw(IaMH@?Gz
z)^uEr1<wm;>gN?OmVzE!M;RjM%3_?diuiTT<o5LN?PPHk2vA2UL;*M1La|lM;Exl8
z7*{RSY>ScmN+fz2vK0y+#magnw^tWqv*nrHMOC!9h)vv;$el%!J;_cUP<$NJvx1fG
zJ&VIcdd%~wk**V-CbqE#juB`hiH<9z7vpcNWvNFRib`(N#ypWMsAw>=vw$3jKz?$B
z<T+(Nw1*xmWId;A*DyG*Tz>^E(c>W!&A~a>@09)|KB$73+cFg;d1&mJ5)opwov2En
zQqv;<t*y<7Yd6TrW!P+7q!H@-O6jV#QM&NVHMelR@yMz*@WmRmE<1CrGmTyAoL6R)
zO;L(m!1e^?`-*}KLR?0?-z*8<q7>_RDA>M<jugFvSN4t4vFuz@7_3A_U|yUh-RQ?t
zweZgI<>JS>#P0O<_>EhanlILN97&Wa$$7Wm(FpMtDpnd5u5i&uxo^Wusdg)9tGh!f
zaq3it^)1EZX`p0@48x{0IE8g;n|`(r3I*H~yLtbaDA>7U%{7g@>|U~-dk=S^kwq_E
zS8cIzr?b=5xZZ4`H#oC>DfRdM<1N0sC3<*_D&NDc<61q6%Fl7Iil|BWP{4nd2VdQn
zpN`n!`=KOeOm^4%n*;F%3KA@RNz0<8RC8}luw^$R0}DS9A|Pg8Wy-FR=3~+d;!b*(
zet(qW(<_o+t&ytZG6g>?vV@zx_Yp4e6GWUg$h073$flfh+YUV`h2jTM%_zNj_6|1b
z@7u5T7CHI@NhYX#MVhcnUPFrHm7yfpdw7(JYi;eCN2#juynNKbntQn=qk?n1ko7mR
zsXI}+RpnR#%^__5B|sw?0=@N8H;)`CG82#E+PAqc4*8zx#qk#j;`9I{IPesO{-(nE
z7bHn(twMgJ*@UOIa{<IyQBZq+4Q}j)%k76BcVpAd2A7IGWl?jXts!+qU1!t!tlOd(
zp^$fe^x>$?(>(@#bVEp^I3$yfVVX+Mt+m@2Qhdnl1u7OSPOG04!o4y7in~w))(Ew!
zU8sf+a>+CD(Ak@#Vp=V(eQE|vN0DP?+X)>3G+9<@oeWRJ9)F4>X<W%)!K*BVU|Mw(
zj(_$}0(7;_ccjh7mT*hqb%4lZC`{I6Zw%6`uAeAhSpUZimksOL8`4v~11NKU8MMol
zLOAK3ss}i6hjV-vL>Gr@yiky}lHZ<;m}(NTGE0XOqc+Olt}E7IsUJ<Lc2F>2kZ1(b
z{B|e576e>h%hgTUi&OKEJhzL%a6$Sn+haJ*?cL0_*Kz%P%MK_B$h^vX_vysIjY@dq
z33KH}5iJ-1SuaSy;mTMOsa1R^Zsrpk%T-LY()PSG_xg0mmJZhde*#P)u&O%?r{Em&
zZEtv`lrS2Q3HiZoR+KJj$<}c0hbG6963Ias>}E+<;4@ys!!@#~NJ!D+K9??iBvo&=
zW}tD({3q@-ZZQlW_@1r*ws}0NQS$BH{-kRroyOEPFD-K&l%`<FrL~%zCGcef{aYF{
zCH=gCk?0h$i>i`xLL1Kg;>?*n1&TwLklNBdmBq57QO*8?h-8Zv-1)Z5qQ6cI)+r2b
zkzc--k~le&1FNPfc7u`=A$~_;pehs98g#q|E~Tw*rx~W?{=|L4M$u~~+YtQ=29&^F
zTq9gCK<*#zg%oXqd9nT>qoX$mll7zt{}j6WgRsopa0FI(Qj`Z`CSzhAnm@x~<Cr_O
z5-J>r9KrL&jFMCZm)-yHo@qu^!{uCoA{IK>gra^}5@&8)OL6~##Il?p;~mU0FB(h1
znlb2}0|h?P03h*Hv9`xh$J7~9XE04=lR6{8j{gWd=V)FAscxwP_hOO^cl!8?W#WQS
z;3I6CmJ}WzfpT_Geb&%hO;WRLhP!kY%2FFP2%n;qSiJsUxn>S|n#L=?$gcVSB^l7+
zKl6kCiws!wO9uQkSU8tJ`26yNbxZVW6XJzy)fk@*eWdtm7^-JlG1^V<qNsje;OOBv
z1`?7gm8>-(+{|(_%(wG5Q}bbiD7GD2A3-0zdoHH_+?<=&`$8S0hb~nBBIA7t>H=y}
zeTI|c&IbZiPZIz}ktNqvtP1ACOc~I@BA*Llc_jyx4}gR~9A4I|Qne<-^&2M-POb}L
zKuREI?m^^{)*AqVcDh>9_=oI@RdE=|ohq#{?49hA%0TXO5sEnP<u?YM-_ZpPhRHC4
zGlv3iWuJ#Nkw|eCdeR_f&nOQNHJ|K;PtT$g$?>^&WzCc#6NZue8jkecpo{Dz%MPMc
z{m*qJ-y=fo;=NFMNd}D-$NFkwwP;Y1!{p{&-{{Z)v)n(`W(r;AT@!E5$8RNwGDYoB
z=rTz+<$Ls3R>u<NYY1|QnSNoDI0HKA8ymasOucE~#t*qZtI-*?0$ES1CQPHryhuEG
z8>znsuOfOI2@pQ~^DFZdo(=Qt+5UhVa{JD@j^a7FY>>+culWSCbpvDeV>iLte?-*|
zP6nF)g3lYcsf^;c3u3`vgP(UBdFClP2CB{>D1ii{&xy40mEDKnb`*Dljm?P@exv?O
z@n#Kk|CKW@QH71a-9*CL_=s}o_ftL;AzJdj@9J}Jy3Ro;jmIeHOwMK)R*t@2sm~J3
zaTb++S!c%r_K~L%TBtu3LZirCf|{Ume#OzszERdgrbdZnLbO*h+CP=rR`QB-;3frg
z$Kd%1$YV4*d_!GI#k@Fo1f8C%!=j1vDFtyZOJp4ZW*7&69eEkR-r-&|Y(EVVuHP}1
zDUn!xCO}sl2Z6e~{|>2s7Zx8R_-H_|b?h`nxAqh~D4<rnOwpYGO>H9MIxAi!Ea`=b
zIw#NO+r%+vv$-!b=VeDGhbiFw7i9RSdvUhhp%n${996(hAIE4iU~h8#2K^T>+?AG2
zQjD!Ru%+lv)q<+TP?SAID(><ZpN*Doo;FIuL<O#bjm0cgZ>3Z%kLuj_kM8bC@H9j9
zHY~#{&_rHwq41y!DSj$XeH{Kp!5(KO?!`%G38-CB<_8UE`|g%%b_Bh>u(_zJ1?#gj
zwY+HE^(DYvfy_{1q?Yvo?(=~)abb7%t0@Ul|Fjz8bpY7wmpjqlQp#8J1UAB6(s|=D
zdy5pMfx$GO6<GbjQntz$DbTc@G;|W+k?}lBmSI)vY98=9gperc*ITQJZB{VYBK-zd
zn6D}`1Yed0{3g?&yp30)ss*mn=Ct!H+Bj5Dif<ny&UnzWW{k&!8V#8(y?5;YKE4<b
zTn$qF^`o}`Z~Umg;|qsh4)K2&U;O`Mqf`l$Z;W1~ruM{|WOYE@3#2Rbzks5V{aoAJ
zFc4_u3pqdD=9)If1X8tEVbqh*-1KvN%-qb<eMJJ`WRCagja{hVz6>1P%iu$K{kn?j
zq%2N2(8rda3GX<gocbe{D?yGJgF+l8_4$~x>@25*@%@eI@<q{L@#2880qO=q6+o&G
z@=`;{HQ)}&C-u*Ggpr(wn5Y~+BTO2N@j$+}mV*JJyJHt5CVGd;?dCqJ{%H)P;WwfP
zJ5KO1ye#r~peS^~rhsM{$U|<?IW$oZC<{QTcgb7F*(0ZUfny;%kq;!^OE)_^J1<7j
zgj0ih+1pPg%6%|pZTlApGar%nyiuPF@D$xM9{u~<=br>zhKOaBhatZFzA_%;cHUJ<
zk>VYKJ5z;({P+K=J~@5^mht}Je0FnkZ^!XDAbI@q<V^k@Ooz!%1D)Eqh#fP_48wNd
z%$<~e%_<^t9XP}=;LnCTUL{Hoec8GJ=CF<s!*@dQyd?J`zhH6k`JDzH#FF1k*i_1y
zJtzBMXsd^U<yahqY*>hwZ-t&^r6Kv`s(-DEs*n+Dl529W`T@jH!Z#!`@EuhI+s#TK
z86WW^wxp5JbWZJ}zv^6?W}&<4qJuF#8IR#1EwR!`N~KxRa%MJTy1ej*x!$cLDpXid
zhIH2Xnrcp>5mQlcjN+?@@-kYXH2WfWH^zE$ww=4_8fd02Jrd~|N6khVbS?gQzPK43
zUhbq9nz+|yjL!{KY;_n;!*~|WamG|iQ2or&Hg4-p3JSnQW~zN@9q!4%wjy*bTj?6o
zYqE5NsfqYvm(TG_`XikVH>yc;w^*;M)E-T1%|^IH?Y*DLylHuSlyxR|(`O^A^jJ!C
z(To;=0is9bwSe7nTB2p;5DT1C_dO|n*ZC&#%7yv;=5?#CT#Y|0-L0V#stqI7ze{V9
zXXQzv*sBJOho#l+Rif%86~54N7WBYUwg}xNjeW(NJ}X&5`WJVOu6uMJ1+MI5#?A*%
zpbn^+#R#;327(?!Dia(IydM8qoEW!lWGDHaC&r)*n{w0s8qK>larn@uGd&iD$}$wL
z)J(&wYeb5_kr!cr#A8oUaq@+<{5)1fI$^<^rkO#76~_*#UCV+Am_>G(3B5hTj?E5|
z0S&sbza^X0c&SqhBc+Ib?nc17if0)l%s&z=ULWG=UA!Q=)QHwvYHgJYANdwnN`4L+
z`t=_4km-J<8R{MNj!%)RWG*nB&1n!?2akx6-eDtCc}YXXLltMZ3<oi5a;~6qM0eU)
zU|Fzpt1qP_APeEU-&LpbqyKicf*{3osh)<($wsTVN&qbaDfZ_ACuL^2+N%YviN(gP
zUtQ!=2faJkdJ{$LdtX3|btu)6n)XStM+D1Qm}kZ?{&3yO-80<JmbqP_2*=n%IZw?b
zW6`J@zGakT^Wsrywb3_QqAF2HmR6<YW`Sp&$`AOzt5(}8Ph2!80Kg6^000>P4uJjd
zQ<}504J{)bBOQY&y|I(0gNr@A2P*@o8#Dc{YFXNu+5ZO@%&(brQw-+2R)4^&pNup1
zs{OQ{MHX-*f!j4Qd)+DC00S=4r*?TVks#-xk@d&7o4aSjDbw^Stw1bL!kr|}M}m*1
zY*j5Ec8H=^{u5pr3_L6>>?7!VU~ZR&GTInRt_&@kd_nx2aembXlhhLZk-#5PUBXaE
zIrHDVCpxU7cIwRnLy5CSm~$pTRXXG$TDea{3S?_DUB7B`Xo@$y;jlrDl3f_>7Yf=R
zfq-pK7PH;3UC}Cz+pYN`hl{2XhTM#aXb(Gx1y*Op-%N_v+^j)#I?8Cx<N5kBvEEd%
z3y_+buVm8ir_49RbMjrL+BOp!IsF%}wzjq{2xEz*d~8yDFQtmKkR{zlRsVfn(YFEk
z9s}O8TQXB;{&TvWRB2j%6Bfv={1eg_M(EFr>qgauakx`Y#rASaG;TXAyvuFF8EyBv
z_b_()i`;o`v17V}6KYE5jGKYK3t@c;cM`a<SBM?+H5mnhoB00_e2+i5a?@u~8Lt-7
zPlpN^b1Ks;p7%)^>2RIQ^7|`*=02L$QLL@D14f;5ZBd~O5M8l`yjo|1nXV|ns~2=F
zc3?j3V>AHQn_x|9VRED`yf3fcLVL-&=i%)C0RXDi11o`PdkoA-4>m!K-LkJ8S9lQC
zo-D9j{T((>HP$M%9q)gv@D-35;~<9AEsvR4C^qR+{!G5vugK(eb|@H_on1@q!${wl
zZCv9S&(%!5zvY0igbjK0gAKa%vijs>zAPw^GIX+%2}6GP$2itH>PR6aCzWM>qLyR>
z4pqD7bddBiI={drzXC@zcLZDrd;_zYeu~!c#7y%FUhXLg^U*w^EQ(k<2eU~iWXRGK
z=3~A=qe}+kH%Gh0=w<>NdqIei76Rs2JF6H|$3=Xhdv@SK!t@y%%HjyTsjEnnOUB;X
z6Mx6*b*~Z5jnX@pN4|OZAf7PNn?q?aXL*hrq1$cgzZ1ZaU!ZfFY8SX#7-xg}b0_^X
z2j@h~H`%kuoUJ!<4n!|l88@@c4}`xh@E&24Cpq{eg_>YR(b86?s+Hg!bUx!H@n~IX
zhVizcSP(*3h$QdbGV+&4{NL&KW+VKO$ZX0NXgNKIgz8!?^7$XC5RdT1I;Puce3csS
z19*%Ig%B#lOM&wr(IU{px<%?UW6`XkIe8;UK9f$Y%OmK2314l5Zg~1WstZYYv2%C1
zTrK01unYz%+MD63P<YUd)k1Upjr<mghdE69!Cx3}c7D+l!7}3+cA5u-m}jM|Ss1A3
zjXpI=3LXk}JSg&>Fgzyoz36!EQ2*G3Dj~aQknINensX_%g*ufD6BM*Udi5}z5C_t(
z3X&IWR@KnFdg6t=qGS<4tjsu&2l>S(gYLhsHQs!Jx{T#wXKp*!TPkQ)sGdCc3W4<o
z{A59*+^ezrjBr;mTXWRixals!)MGRAdV<8FDi<=}I||b7m|BX``u?_P<9^gf-Bg*z
z@X*_zWU<86Ul}OV^$C^%LB_>}m?2Qzty1khn0qWl>vYSdz2OK>Z6I4Xu)EBa4ZtHt
z0mxhK_j6!#(A=d)M0y;-JS{EAXAM!K5$|7w#aqfLpeYCIW0k767U_RSQJB;i;}B*0
zQtVTNcs{r=f1@aQJJdH&QvtVyw0f)q_$wQ@-XnXBQI~Q(Jahq&<G(H-f32)G(~A&U
z$+w!Dwi+o7zH!x>iGpqX3)iQ{{b?u!AwUAdo0{+*yj}yqrKh9#ni;Gt_gQ-9T9ALZ
zQGN387{B(ByUnK9`|)vF284501RksTl&ddL!QO~LiW~S_t-IG94F&3(56JSMReh76
zNs(I0)M<&ZxA`<cZ;3|Uhk*&)Hc;<n6kFgMqnV`thD|Qdw-FpM8IxSqf$ctbc?!t?
z@_#k9B9w8eoWFYmxxb;^{~N70v^Mqp4_dGOe-;Ohi&siPuqwGJ3nGRQ%gj^Kp=37x
zXmLIxJzLqB)FtIxe}ByMzUDk;X1^b~P(bZwc)I<r4j9j0380hRxuw--v4#~L92^Yo
zWfkr8>nf+)S~hFQ>=`5dNczGZMAsdVTn%x+7}CKgr7tCuwXvKM$M<J4<%v<k5<~%I
z0@U>fOM!%Xc;utPPxJMsaRkM*1yLNwm#FOCvPv6{2thq=mubV%0P%0z2p@~`g>a9q
zBIyiSAnZgD^d93;d6)NYK~j7Yv5>C)&DEG4oXjh6OeN6jSIVuwh;G8TLcVRU*LLoe
zl?My@bvgctW-PW`i%ZH1V8S|ec(?9_RP>!c`y3?Vp9X@uQNpWl@8hG!$E^=vBDo(7
z$h&OiF<Je35*!i2XShAEP-Uhe(Zj;!rQ7=ued+7v?Df@t3Ep=8y`*OENOp{6z(c$9
zya|}0kD46o#8=(9SZ2(d4rw##b^1*ow|<29)c3BPjGBXVdr4Q%(RDN{xWH|}jx<Af
z;d-1`1;FawP;WJy5L`X{oKfhSkPWLah;!1@!rO;knkyC>l3kmhzJGpOj(*VJu0S(q
z8gbytR3!^<E^W4n#LH;_l-;KBEH=zVkW=T};VKGYIkp<HD9WiCrYf)IZp1DJ-3@XQ
zwOZ>Y2G>S|NtQPHEKz??-rOsvh<baN4(1+OTkFBvI?tuB4CEZSY<OaP<z2U^CtTyY
z-hFRK=TEV3CVWn+8BoB(&mCq}Ad7S>KqH$yBW9f$N!2zjJILNNM6A%l&DGC&@LKS|
zSh@_Y9+wL&(Rd3Am`q}UD?Q|s&z=oTHPSgpeIBX`RRl<BJ<i`}mspA=CE~({%tl@O
zvFBXz;US%UUDU!Ll9e(~F@--5Q*Us*XQcN*qMa<Bkp6xI4_B<5GbJnFkuKyZRy-+K
z!gPT@f{Q1GRP$^H{(~;ujatOOi->e~5RpFRWJ0B-B++Eufl`i>N_0lleLu);pVk`)
z`&5X6K?g~LD!`FtnYimA3MWl+Ye|$Db>oOL%qUx=j<d2&I|3QI)_-VKkg{n9ae*@t
z1*GsPkZfCPxtL}xBcQH_=5z%*c1i@J47isVusx2UK!+Z08%QlX{BcXU!-#?{YB1sz
z=y#5Ix=y8w>+-F=RJ4JMqF7egVl{i$L>CQ#sfI6&@<^&x5$41*O;&r97{c9_^RnjP
z%%SK}WYj!vC1Q!?iLI5iGKt#B-hRMCmA0R$0!uO0vaRiWdM;v#8;c$QYBGnjjxP-u
z8dy=9@a*n{!ywc-h{B$30*28Y^hiyKNtm7?#+Me*^GDYfUji+2`AKz)8rq~s>8udd
z(Eg5H8yFUT4n&uCzGf*{*(D!}PLFd>ylBHXfP_#5w9f}pRp$*MK(+Q{yar^dA&m4H
zcphQu5>Z?gjCbEML63iE8L0cpdJ9@rb*<%|sRw~t+<I%g%3dyY7To-Kg0Lx$t~6fr
zWh-;elsZjUp?Wu$QN$b+w`^?z+78RC(=yGIYHL}y2SbX!{(Ntf9pUEfmWar-YFg@9
z0p60ic$@0cPH6y%4Q^ixdX?oRXA2@-<Z;#_royk-QeK`a+}Uhck0x~`Tc*0hT7NC6
z!CE!eA|YQm?du06Q!q}-NUJM~LRRyfJsJ7V_|!|>;fys{SH8B-tCclPpM%FL89((c
zLq<=KLWnh<m4q3)8ZD-7@iT}J86pO_naHe?V;|HS^x@{TPIq7t^M|h`oO`Hce8yhb
z_GV5}LRejM*?xNNvmtz<T334eCJIv^(8e0Y=X?`YDp9>@Uv*)+inrIURt2X6z4_7<
z&=On(wuQYbZ|0%nDE8{CaNtok`T`2?l{d48C*v8d!X{w9bP|R}5E=p1t4SHdtAAgh
zQcex<cdZzP`joY9gtlsLljS3JB<h%QlSWq>-pl`I##}GdrqkJpGgr<W*(m^r{$vHd
zk;asTi|3$=R&^oX*_*B#dl@zGPd^f3JyGLI!FeCKg7|PTOD49IbwS0C0D?Lp|KE_e
zucmXPLhEK78HQeDO3Qm1KZ@|AnP((bh?!BZQV=fNjf)hd3o0*@pCyD!=IBbfs#koj
z|GNocDSmZT{hhdyf&cFclc}An?f+bud{zEW6icDLKXE*Ii&CZ@$tq2l>!?_(<h6?G
z%BbFL>u9UnDuT;?pZiLvK)5%WP^S5@r<<Oe+h6v4cs0dq5d9J;yX%{qI=ediKS2zp
zyD2pAK;XxPuVEul(^4fN@xlyEFg~*JyUY{Ap`^kni&}7Tnsk~#s<{k+=Q3p0I`hj0
zCkSh2uz<bjsMTk1_d<fC87qpEY4wMgz`sU#CBQjCx)sw=OFZT^r<9d_@Qfe{8D|PT
zlo5l-y(2m4f&yae-y3l_c04gzlvKXfU<uM^iBh*fFF+*=y=rB0U!2(Hm79hEtdiM~
zP_-DWr3;05dZlaV9`Vp?$cdvGDa>~~)!qn$FOMK@E;X4`W{gn-wd$yTsO3qtBZtA`
z`^D4O@ilKsPbEcx6f#Uj`933pJ0o!~W}@R^CNq)%O``+@Rg}*66T43+KG^Qd(0$H0
zx!G>V!XWJNa3eVzCVYO=xaovZ?;*`uzGhCw#{l@X`aN%B_xisVGdBT-Z|cpx7R|Im
z4QCu8qMybs%=tpYj2lv#2cZEbKRN?BvR31)f|`-i(vK3lVV!*g&Khy^5*GclKr1?z
z(+PK%mQ%1O&O2bH+M~cq6QCRWB{a{*4JsnR`QigvBKz8tfYCdLD9QEWBibjp@QwM(
zyM+T<d5@}I{QYhk9A}m%oSfW|;6cg}6~=Tl&BgH^L)O2Ahe;VPB88A_{6ZL#eA?*P
zV8}M?1ck05u$Cggv{cSJe;RS`Lqz7>IB-9Xo1&UKcCmG8P=m~MCPn6LzuElnPq{lb
zz`Pxqr>C+ETeqUCvH;tm$1J~JM!yFbjJm&}diUUXe_su?F=iw<o<{3CqU50OTXAc7
z`GUY5cmbFl?1{KZm_gFEHn?iE>NtN#CC^n?*Xy3ow(|#VOq~W|1#e}-v5#sgO`vvC
zk`?~nKUS{%XzTjSK6y!iEHgh7tIcOZ=<n6$EHQ7losXJwtMD!K)c2^n&K(7qW)%se
z{k3{zoko>YUa+<ib5`nA20BS6%f_T3e^yU{Eyk9OLw~9n`FziDLyP%)gRk$B=fZZ;
zYwxYLynlbKL~6Hp_BjA17m`v+*<!vEX7WCu=`0!9GA3s=wEz6Sl1)BJjs*Vv9$Nd~
zWE0Z=JURG%Br*G+&uodRpZz8q!q-mTerZAaC6!WkK4_u~;9|chvxj6tv1k|_0Y*gQ
z+GMeS(px~`PLDf^Eu~l{T9yIE{@wLfkGnWkR<r@oSZ4>jlOkvO_0^T_m5sdqpegBY
zHRAcc5!_AmH;ogxcuiGv10~KfYqqj~h_hix2cl@CKrm}shk_c)e5DYE18{ohW?*`>
zqC@m3Wj}vs2x%X932w6*LTpuWh|&tsurA&2T|}@pO_sJ}67-*xy5}tbvVc>qfIfHZ
zEY4Pzci<qXr&s;k#NFkiQEQ{-7M2Kgv8$L~o19fNdq3`o>MW}p|CF7*y>bjrb&awu
znkITOD3|3?Dr={C(ZY?=k*hX@hp8^1s}}BasRR{y^uB9q*2n1bJy%Vkpom1gV^t|U
z&?<L_+R*{GJALcRpKj+SY40K%ptM1*U0ADhXZdBzUC{t2ZWnQ2D!a!;=`yK~Qxak`
z4IVa$%5=SU%|pmTRCb1p-F-8jcP=2GWBWL|?ZMzc`0hR8(y<nXTJ1j0j5z}$^-Wxm
z4(7?fn3O@6`p#Qat3?g#W70Oe6YG>R^_PDRhUkQ;rnzdN?4VYhBgb-9FF&)FGtsBn
z1(>Zmw5r=oA@A&mkCz^;U~mb&Cc(CJFpZ@{7$HS&X!XN=+t*751I9~YGzQ5F<Bu!5
z-_=C{lkgnLb$MVz?Qw5VjbD*{MsunJVK27su#7PfI4_BgBH&gGEcp1ieGkq?%5F{`
zOm<TNG)J*9bBj5c!Q=s95vhV#h52FTXd0#81HnWj_2Gv>LbTP`0Pn`Eg4vJ*5*J4b
z05yUlLP@9cRD7nF@n_X9xrwB)9PjdvRqgZaV8M(TZ_NCdi5=7|njKE3<c7tIMSk?-
z6YC`=e^j+IRyUw3!DhCN`s&5lt67AGL3&&zeqeYXR}B4t5@U)EfPo&74a<QSU^{rW
z92OBK^4PF~(!bU2Un`8!_|YH)oQ3W`1Nk7t?jJkwa|?cWw7#DO@N$2II6BeN*}ZxK
zoy#e`)Oe~1&h~@UBV0$323p|-2CE#H1AM-HBoF}E?%!k}#|0}cg3+9_d%mM6H81~C
zm8$!Gd4i`girL}r1GV79fj9gG?@Plzb4Wb@&cqNRue$mTy(%xgxgZAoe<*tg;M$^X
zTQs)0W9~TFv28n9v2EMdj&0kvZQI;&cI^C|^WVR}?)mSWcmJ$fqvo1bbJVCYW*ca|
z_1<xO0%cvtUE|L&%Jg2rn*TmQ6(JbYH;J|`Q=nPjTi@gTcUq8Dhx7~c8{D1WEAsyU
z+`8uaEdLqYNh<pP1b4Nry-c@ww&f54Bh8c|zvH5+-#%Krk`V<&K=L#)WH_2QRdn5P
zPfTK>^56Nz1IV@gt|vFwYqK{JNKtys2i5uw!GZhl>+-_vm6`@Nr~=zPefUN_qK9Dt
ziMbs~QHGF0N}NVOAOPkF?--TDsL3Fi2#_i?;Fy>T$!LrTvSNdO-wSFBa#LcKo3FVm
zC{!?e_9uW+tpNr2nyHe79wDvtEM6g-$SRdi<F8IJ<`@NJ-Tb0ong5C=wXqIOJ$ht;
zd#m`s2+vP!^F@c^Mx$@#mHsnIX>+IGxklIB$CL>Zaxp~FczA4!kJ#;-16gpjB<K^~
zN$lTBD~F(+r0KL&wCf&QJo;({2aVUX&E<BZ3JH69y?e-K<-ey)`%0v!ULOvJpND_$
zubyA*-D)Icn|KBpq>J{3bGva9ZcHTT298Q9U|YG!w2(#R#Lcm99$I>KaX;;QX<#D)
z5}eY6BV(?J+X-=-#?5{kiJ-@eCT~BRiif)r7c`f=?J>RfP@-_yn6<U|&_-EqeC!rC
z6lPgVuvgh3dMl`mJ^=loqst6sGUONd8MP`MN2o0g`Tpg>SU#&&?*%s#7a}9aUE)}h
zu%KdHc*&(1_%=NFz4flmvE4}-wRPTWQs^K(6LnD28u`11I>Z7q{I_D}ShSF#%uGFE
z67OaYGt~n>Gp9wkCI`Nwy;EU)1co=(Ecr^AEreb|T#zo1y*oVtQ2<SsJkRy<pb~%G
zG+0H|*4o9;tbxH%`mM%WA8(Ve8^PuB8Q(chr_FjU@ZjQ6accEbmb>U}{A}&+2tJC@
zn=j;Q+*vejCt2)7hyJ01z?SCbfvlv#tYz$1;mQCi3T^jy9A1SDeH2oHnqLD$w<i#d
z1NtYYUgY{r=QytP$Z~=$g0S>y2odIKJTiGMTYV5w+$4MuN_KDbpKZ-<wrZc#bC%&|
z2_8HjLe10m@ON?o@gc_`pA0==$JTHF_33&n6)eN6E440W{m@ZIr7^@5zIBe_Pe{1=
zvrZNn_mhk3V@trXdK=<&&p%N2owxM+lFE^n{O8U8DscYol4@vcZTCw>85#(5E1^iu
zN~%=N*$oy580^nCUjJGAcPI~&*E%U80s*ZH0s)cy=SmHAJ*><P{uhw{QMu0lxAG$#
zOUI4Yza75d7n6nYvOYywvcK934_0r5l|;tHr;Elg5q=6_;6%*+MIN$w-|6T8k^my5
z_-W7O2=H!Y^4}UVsIw(3$pT&0Pcd-Bglwru%=&u2+lkJ}%KA#$s$|Epbz{y#Sldv0
zkDO6*i7TQ;CMUljhFb$eMq%B9j^Vo-f<_Y57|@$82>PXlLF+cD_*<HyL=6@)25nd2
zEvOEW*wFGTT7=kGy+2O29R{TtPH_4;g=43XCTvx!l1+bC%yGI|pq+R>B8r&tiG<9g
z46&Ej&-N-7&5Mu}83%#xt-zd*KuQ<`v`Hkk(4Kx`o*&3(@*VB3s(HIac22fU%LXd2
zr+EC0@L)>`%BiyTiBVFu5D*^^yW4l19ePc>N2z!^5c_%$bA;f&N&LvbKg+mE)L9W&
z<J=5nF#!}u_J^S*6cGta3h?+bhM2NmEfW5ah@x<tC`KV#=S;29nA1YIJgvAr?&n>n
zJDvEtbqL;@pl!>h$TaI+fq|qC3wqN|6q!%UxQixxA|O4hu#eZE5Iu9d<3f1qE~j^;
zA_SKtFB~3hxL2>|d7;F*#Mp1_xSgDCf|BHXou}uK5?^P#(1-$gdgVxqU7R7Ax~rXs
zs68)?umZdS>-pAN+wTd^$ETR9*#W~-8oN?{a;kJeRPKr9lL><v!3LjWgXjGi@w==b
zpy@U5sm{X5<2=`Q)OPj?$hW0}bYa~I*gxbJ8!11H55yuzw&x9PN^Q6xOYoYHEs=K^
z_`sIE?}2t*>&>b^L2UUgA~}(t^<$Bs(mSe=@KA<%=FG;B>;C#qxUFchqAc^HY~DTk
zH$sKC09W5wf+jQiz)o9mPC|=;bfW0rLy;bvV~D}g<0F*6y7xqJw4}!Aej50{rqpEA
z2;RKl&N-z!*<Z{z!xxbGX^jY|-g<?Qj0i8?pA8rNUYbf>R));0AmjM06rp?#;HEM_
z1<O#!2+B1=_9PI7t&?fDf{hc9mtTLiQ!N7u|4IgD2wf!-0vkrUXC(&=5M|gO`#uKF
z<_P3M)5q$83B%795b~4p!_>79e}ehL3R+JB!%ag@r~Rq>5k(s2*6*c8i}nd}KP0D~
zDX<B%j7Fp{haIYq<SmHc?Go^ecG27_G=;TKhnk%&-v|=ZYP3tMpCm#J@IMVLd-9=g
z$L`5#UR$ZDe&OS@1ob&pY*92obNvy6!N2wZ8pu_tiJ-b+J%XodEG(+CDm`?U0+$SI
z6DRK{)X}3VI?WnTj9QquZOx7%xMAfCv-NGWS@v*-d>!P3%`Vg%5<=eU#~hd;+Sv;}
z-jz};h8lerh?A!rjoplE^FX2%lHcR~Ls#XCNQLL<+ogZ=)dbs#&@4qbK`*6B*9iP0
z8xYxXr*?Q;$n^>5AiR(~{d?4H+%RpTUw5aT1N^fpL&@xF3R!EE@9t*qsVuOC^XY>f
zqs{;%j!=&Jpsd);N~x9Et|Il+OaYL9)tj_~APzbSoG?)gR)~zV&i>1fwg)d3A{A6r
zQ<I=BPihS~_nm^D3M<?p`PZuYFIRSA7^3bHN?qI0NW<8?A2Y1-eNdI;<8D4IcolXC
z-T7J&o#9R)L+Wd13fUPDm3VRBTGPsX)a3v_fPT^7nVz|*&}{T1vCj8HOE(23l~rt=
zdn|Z?ECYCZjs`j0IT9QQVEO^8>XRZW$}yR2@Y^pQN9Dr;M3(hMWz^Dp39N=fjiWr0
zZ(r5pS<NtGDcP0{s`Eg+7PJ86E|<Mz8}L#(+Co*3(t{KWIr4ZangZkeE)9O^I~ex&
zQt$*Ul3wroLh!|2;dd#RfHhF4dMsENRuGc*;^yr1RBiX(o=5V9KDR|<Nxhf0CKZ$@
z6d{99ao_hC?OT+$aj6UPUv;6KgS_8=Mx|Pc1$FXcQ(TvNy4~11|H><ne^5eCqp#qr
zwCf>`{KE7(15FrAR>;d7!0hF%NybrpgWqj<btrDzRBc|>^8pXFFbsZcdXTkOdKK23
zg~@dxK!m3|eA0Z%$c~oKUOl~G4!^#&KKm0hbN;)DIg_xQ1-rZh4UE2XqIS0j-Uv-v
z0P;n&{Ng7UwK^+Y{WL}ifoRJ1!_C(H1D)o)ON}=%=*8-oK|}Qi{szMrH7!>~Os?!t
z*hl&LbTd<G^_wlpVlNdLKQE)76}94$k3o!e$B#9fT%cf{LcJdg7N}~hHkSc-(EJ*Z
zBm}3ddLdoD>McT_)f&iKo!4=d!WeXV1Y;1_WVIv%yl?u$cgGM-0dYT^L3|ol;>fE9
zw~*_-eS!|Sonk*9rWzrTzbbA}bh5fr97%1HfKxQQOPAQJlQ#C{s8w^_i2N{|N5jnk
zE)xP39^ep))U^mnX=Z4DO%wBI3s3_pCP6B}@<OPfoR6%51@X)+B{Vde47ma@)ev!}
zfXF{krrQEUZGLIU3f3FgGig4exzGy4E;%>mSD2tz@a=0A1UXjc#%)9<C&Vg|Cb3Rb
z|HLJxw0KM2rn5&$;1_ehO#G7XV7c^uU9?L2vy(LSC!s#QC@!R7{^U0zyf)){^{xfP
z$ATP72m2%*jA{=4)=qf;7@TMz4kBJ$<4v=5?{mR9*P1J08-a0aOQZ1^o-Y+{ZVD?o
z0hRQrPO0F?&C4>afP@-~_bAB(>QwN42<e)Mq8#%{X{zmB=44-)Rq2iwel;#|=`ssO
zQ~{M@cTOOMg6gYCL>DB<tir|%$u`-PS10kxm7px9)?5E04;b&G1%2_f=(eJ=c`Uan
z*Il~tgw8a1B~ut{tU>QC3KTH%I&QHBebA5&ux5T|d@p;3A)0o)r+7s94~MvTS1XTV
zq((<4uBApdTvKzNg#M|*@Pa#wU(FJR-rv(Hbm>kEfN47Tgg8>sQ@y`O?Enomw?gfN
zRZ%^xw7;V;-ZSF!Sz{#j>0&kXYVAi#x(*UpGkrthaTvY6<CxS6-DNDk{K#meo<G00
zY*Os3+P0kA!<7f;^Q!5I>CC5rGF}6}IBMi`v&b1I?4;#BNWeug7FctgJfU_KXB^|y
z{H%ZT@4&<qH;o-0dAwJ`c{`y_7s}WZb6kv8Cp1fOMrg9}<(DMNKk*4bg(XbBpJM{h
zdxW`Aw!DT}N1~n-d33@2pHzmT^7s1Lf8{}dZFoB`m6XJIlKFui6#EkcSVBOY`3mTb
z^x*s4HAviiShKsG&vH~B7yEirmLvsUE=q>8FVmY<I}jx64n3rTt!o}JkOYqUjfe7+
zB&##A{qv&Yi|(2LG^}Sm*W*;C`4Gcw+xJ@=EeB&VUy`tu##Q0Eh$5^py1kVh1W{Ww
zzXbxSO#b|Se;`NIyPg`dV-MNCF`)NiJ7udaRtvb5bJwQnvaIX@2u5@f5!obmsdnY5
zPnSbjI-^K;L#GsLj}{3Pt)&l})yNkFmDKm}!M0y?TFd4(lt90fk62i8-Y?xa+XT}#
zBITXMh@HXgZzoTtz7iqIt{~XG0dVsJS}nt-gayt6jv@2SBj)yL0Q2Z2y8^B5X8ZiM
z4HzTqqXD(*wE|j@;;e`44-H*0E~ZiI_M1QumTIo@S#O;u!ijZ}g|c{GR#W%qc|ulr
z-XG%#M;31tGT9Z1kQMA#iiD{@M{0YRyYF`8Z4y9&ldF~*4dfloEKg_QQVduKm>XZO
z0w;Q8UNHe&cv>pBMfGMHG2j{#%5Kk`KI*I>u&lIDRj6uibDiG7G3IxZu_!|#NO$ho
z+xqLtMj0|c_#-TiqmJt9X;<qN*Id4};mIum0u4xXiGI%)rAy~3H1)MZmoPa{$e~9S
zKd0!Aye3v_yd?>Zs(9RE)|S(p5!}{kgC=m|)sRy_7jW3;*mQiIR5W{7EBx_8Aq&p;
zhGcd?mww1uz-TFB`PSXAKcJ5iW;+`b51C!OC;+x3NnEX6e|wosr-Cys3rk5}34CgP
zmds@44d@|-?RPk#^Y5qbSI~$^CA1J#VkTRSZcjDTEN{C@VLJKYX{P6A_!lGn{EdJU
zo?i=nzmB}=@AV3?AwGyrfbSHi#1|h>0Dl^UM)3TH7QKu>vOdf=-#>{fMI*>msvG?>
zS2JBFg@prU@B_SZRu!K;6vy#0qViNE$6}EU8qW6+zpr)-PYP3=eFTQf19XQo1EV?&
z&*#xq<J}z#mPS0a%2B)djbS#UYbB66{}RCKt*b^&+9sw2TC6Z-&LD-|QJ|3)s&{!w
zZ1*e6B+cAQ^S;3`(_j|)Ls-RJfI$qmvxync>&5)g(1Z1%s_yTHk=?@A-Y!K-s0Z5$
zq5dErhp=`$<LjQ>xkvLAB}x6Q9nWNcC-RL2Mm)VoDU)zHx!>wh?AIS5PCBLwI>R~_
zi0yb}Myv;|_N)>SPSi7tT83@}ttp~<hLD-*0Cow>{YtWxSBl6H8d?>{ST|Yi4{0sl
zvSAUbWEQsYLnWPXN#W9)WI|x4<Pg2`ItPMKb9%KC=B48&r%dd|J?_7z5T}Ymz8(ri
z1(wfsEVf{BkL#f~-A9Lv4J_TW2m^`>@`b)Fzu#ujv^u6~Bu4I?ZxM3gdMt^&LlFGG
zU?yz7{jaQR>%?jYL`9n}&3};<#?;#W{4M=AV>3G&PO#}(8p4+zdGnIfamS2RGTK_;
z3Tpg5TOIu9%jUuws(ijcq~8hg8Szk1y6oz(!m=}BCt!Q##O>Z)X#*<#$7<6}6iaX3
zRTI_U*LTSM2g;-RLT?RjJGb|GYvsQWroN<dJvBnAw>54<BX_x+BhFYEW#C`rJ~suf
zJU`$g0Nk(P>rHyUOUH_J4n+g`ymW565R$S{Kag?Ho^<Xnj%+&Q@vX<>^pc&@Qh&aw
zayiU@2+COR9Hk{#$4&$E_$}L;V|RHoIRtgLr9-w0`7U?3cd}Y=unT`n(Jm=lK+t_D
z)!0xfrk-FFqmP-eq<_rIzDj<P$H|LdYU8@q%5}Q6KHi+=8G*`zh2dFpAtfPuP{j{d
zv&jR0l1O)oR=2Jr$aa-VX&lu*%XzKms*;iMyw)QJf$j-l*9|FvI!jQDI>(yf{?HV;
z5K8pxnj04N{ao<uGG48mEceVK;~o6;f`TN-k3+olkxcbE^t~+G-d_6Q^{c&`4Kt+%
zl0>E_Jt5WsK0s)vAfLkn&w>3`c8zcaDcAXv(B)Y@b)Br`M3S=z@?bfTxM{)HXM@M}
zRQQ}nzZ&+9UGPEVjj45(RT6N1WV!SO^xu!`8+RvjqaZ*)+y9Yy`zHtRk3#qVcwnzm
zk&)ZrN9uY5z?B7EB(Ba1sfZ`QfEN;j2S6pQe}}ZqaNC%wZt5Td8}z;QSzEPn;9pEJ
z+L`Q3bLYYr^G1B7*B?qgP@&s9yuY8=UHCg@+B$<g2_t-RN4e?nh*N|zEtSSZC&*3?
zcID*f$3=?d%dcJ<#=L@75(bkfAi*>!z-ku8;$PF3?RWuB)cZ@dpK}ew7)8>bIcBoX
z?<X15tYHKUbgJO^GI$@f46;@2Bz#+eJ*l~%Kdn)IChC!n6-yGQnVb-7SGv~r<S%OJ
z+IZ?_IM}hj`H87zZV2Iv_HBv5?2-9XCa8={fk>oAUg&GNqfMyC4l;?JhwcRQG7@P-
z&s0Vs>ZvgsNPUrX!wlL@3@MZbuvKlV){ByjG(5itNq_2Z-*t{%ys~C*eg*kF{3<p(
z$QXDy`gmFczh4nQ_J6wY_t5#^h!>jCbA#@#iKY)&tD3js{hfm%sCEYX9<(~Y(k+10
zYX-)~SG>?Gd@8p0vt$>?=?{k){W2DM#wS*@qS}I96lJpA?w{QoBm_>;ox-3KP8F54
zcoL(i0TXn+GMdMI7R!e2U)d>)RHTiGWh|ORSm%c{cQ`hpCCa?2`y7(NtBUZn#nYOO
zqt^cKc;V@QT{Wv3&RhlUbn?xlqEoYaADk=%dM89UQ)g7w#w^;?NQDt^z(#6p`+1*R
znT`12!^aZCSL>hLUi(J6*?pOZdu2z`Zy845Q;GIPoCX6(P3by|DxvB)$!uN}p@;Ix
zHE$M$v~}z{LgSTg)>KAq!BlynM&>ZP>H-TpG^bFBs6Aw;?K-`4MtUDw0j#@BRp5x-
zrnF(Ih4~`Y8#|-I01rNuze^d{`W@9`dBF&A-rCo~J8i^u{O0l<ejn|C=b=mb1^UL?
z4wZA0NjtURp7&kXxeXS0o6KvKeJwTU^zQK)@v`oAk?h^SM1QWZ&EDYtrpolcfB&AK
z{wGWfoXxF_=>8#G{V&q&f5U6t{dIzAURqdy%+H)GJj@>ti1(`2`<f**T`^<cQ_~Fo
zK?hDDK0QMl1}S;^Qz*4eM1-F#-pdPJEgAM-5ZqHcE)n^S;LvYb?f;=^|3t8{gTsHO
z+>(^_Z8PYRKBjBfi*yB(1UStT+N%@H2=TB3p~A|o(`i78-AGvLWg05SeRE{Q7oE!L
zUr-;rp02K5YQ1fGIW`R<+{x^LBUu{b7awoQk2ftW>`0&r(70FRSRDG(S;(J~f+8m-
z*lKiQer*eC=!aoTCy@GKney4u^_d$Fwbu5QS%$F)@JE3kBevEi#xBE%N0-S<Xlm#o
z+=fec!S~4%Ab9NdHUf3mVkEC&QzXp7R5}}pfF%|V`}rQV#_>}eTCFXT7I1{1$ElES
zPuvr`i++Q<xHm0;&62i=6?-il{BsZ%)z+0vZ6ZlSAn4F2Pud`2hA1H&Ah8za+T5j4
zMN{m7l;8ZLr=^9o!*-<nuwK<}gMJ!n>b$x4MrSmDzT)-fuoO`HfQ}3Q=gMiYc4lw5
z<3Z?VpFKh!rA;UQVMe@+o0cfO3?m*W7+Dc231g8mPwimN312qESjw?sV>)xJB<~aI
z9fvubcSe+x6+0uea@8@O0@ooET2$8{TFiTsK4_A3j7uwi*vBnWi`<!iAhsUmlvL5{
z4PoWR%ugfcZJl!xZR;8NwY;dLkNd?eTCbK6?xT7PB*~e&ywAib;D?7RBy$9yM50{b
z$*)L*N_OGOfbRjpjars;8+C*P>O`QHffZ0PwbuTe!u5gYRO^<p{7~$l;8BVLmZej&
z{G?j(g}q41;3NNr49&+)Ch*5sytD-5=iM4jgwo8G)E{4!Mwx-uZ%rVMeTcb$<N%?v
zi_Ibp_3Si+;Pudre_TH^zAmnHm4xJX{>d4%GnlK>fs+H)Pa9`@)asfJ#>s8nu1D|-
zhYH0U=v2U0$kngfP+J%8Gx(AEBQ(0|sNaA8#RP0M5F6SL3<SjZ?e_9N`O>Wnt?11D
z69}{71#C0;(SokuBNSv=CG)Bl@y`;Dj*-S>^4UX=jjHz6tiU_Wo{(`=KCZoC*~_%a
z>-&NGt|mt&Z|B(sqtdE0OW42<?ndNvc}Fj)@nQO{WlZW)52n|26B&x(F_&M!7U~DR
z>D@LH$e)DWiF13?&!eJBaDR`D`G55#eqe~||206;i9+3-V=YyNHN^T|(z_?<S?Mg1
zt1ZeRgk#iPE>$Hhx@tkk`Rs>9n8sL3txBv)T(jX9pOSl_cXz(FG_`Nhb8LMOlx#U8
zTZ6r<`i>A0Sff|{(ZalC(-NM9u$>a_oYBZuB$QRSTaM<AEdpYGm?}7FEaIU0GSB2A
z7Au7V(ZV8g^OZE*+V&aU<i+8J=S~oi=y8;23CdZ@Xc?4@K2F41&PfQZ4^xasg2sST
z8$3N$tJ9)AN1`gu6wx%tJ#6Okc3{Kd`5exEu;n%non1LCQil=#OK0vr)_dP@&e$oR
z(uk&W`$t+#cbN6_tuZZ<wZt)Z4Xc>yOW!de&ZUL%Z9{w)-%489r!)eja6qT@$mv-4
zfZ@(bnwrK-#~YKb#ocjpBYV>h!36cO{@ofj8IfqUnls+#KO<HD|21eh8XFt^-v*8C
z|A|4vE^O^H>RZMNf%2c!LjSDvABC=!?SFlC|ET|eGxv9?e%Ka>qkL@nicpel^#-j%
zh<O&sxR3^L*;9jgd67n&n0A4+7+%q<`H`buZh!fxz(-%MX2&d8#L@D;E>!?(GAuZ+
zHEs|pz5Z&E#x%f0**xWtivqr&1JZz8i5PcU^wkc(FzmsP>(h@!)*zT<`U?C|xD_Jy
z8&VtN!dfp#G1Mu^YA4C^{VW2>szUkmLdD>3#H~R$Poz@CW@3-fX`}?WmuM*U(+fcc
zQ`Bgv#2LfxUWjG#X)taQm6;^AXPHUu69qoyMWCXQy4}dAI*AHN8`_3&bE>kFUh4Uq
zB@|UfZfh&!aSvd_s3I~{mh#`*7Ti5NEKbyf)Qc}W-7XddvWhbwE7MD$t{XM705(*0
zRCvLbR~h5ZI$=<5tW%Nhq)acwIv5fUaK{Cs`=(8-&85F-b+FFEX_FLKi7HBCi=jMj
zV~rI4!X@S}S|rrsa-K-3FL39OE|4a_u!O+?!zxTBl=ow4qP?6L1z;}Glv_;PGEe2i
zUm$l)l0kzf4GP*jDtt(<c)TSwqTHTJDrL$cwb4-1h)u)Pi6Xw35}Ar6OOm?nZWiQe
z@cgB`MV{iUqOsLPCHuWVkro-i4N?Ff-7A@)k|N?LfEK6KDBj~kgHHB`VSc6FUS$Eq
zs*oG19%JE%upT-Z+5!18?IbDp&Irqpx%wK69IBXIeuD1K{2}O=nfv#(Je{y~wV|2d
zf<o+$`lXk;fpY~10>mcdP8ZyjbPTW#BF|IulR5$2RUcfS|GEF^eV;>C?*XR%t_Sb?
zXU8eY<E17xF~&k0BrCSZ<P$LH^VICIxPNB$DOlzUw%thm0IzE`Ge3siCeTh44n84`
z9m`^0m>C<&rc|qbHcPMOUBCu+Yf1o}`>uSu6bh8k0&FY#dNJg{EKYm3Q9=CcW{XwA
zPAzYD?PlL#uT2`NA0NH7rwZ|BGgYTv>2zo9_c75Q{jqJN(oa%dSN#t<OaseJ=;Xdr
zpD0`feV1od-osjtAlM#Z-NO{l9n866_a2mN5W2@jNMk;vkJ}z3HxwuYpnBse9Ol&f
zc*`L0?@X_Yx4G&cCin!fV(A!~KWGRC4<dgYPqAD<j@|d@cdH9f=6bt?l;kVJ=e$pA
z&PUVjb+oRt-Nq2jdmvmvLuPpDmD)|>F?rif!Rv`?;!@E+;8-KTL$%l5BRDV$6jH*j
zT4$6qX|GWIR?@B~J=F~<Cd7WIsOs9#sLM=~-AK{DwPX&m>1l!T+Ac?WN=W;d!DByV
zEbW+gNffu5OY8Se^4<;e8h+GWYCO8ldIZ{TFpmv(GvG?svuhhva9F%LiACMbo6SVC
z4o?FNi+Za$-v|$i6KjYDELviwxkiy-c@7SV`l6pZkw_D!(V8d64;cpjGLP5@S00pf
zre+e=h}&as^!-$SfC<^MUbj%#0}J}gu2VP>|4I9|2t@=!Y#I4|&SQa4*DB0ZK_BTi
zie+pmP*1aJIeO;@I2yN(Ls=`T_l1w*-aBrT68dLQmO>Z)lJ7c~#bUwrdEaH-Ho3}{
zyyy&kd`Thppyv2CWf<R;r2DU8BxRLE<&PWx!Vl1P-QtCYEQ$|3GznfbW8A2G4Fr(~
z1mQ9iB{6Gduc<3<%ih<#so^~&U6*B*06G^1?Lg!Y`1hw9-}1huCLVym<#1_9cHa{&
zPF{fy(~O(FPxR4y2wTCz`iP4CgZ(4ty%V}eJAw%14)Qvbswg|rNK+W9d~KzSBSO%b
zOevAjSOjXBG24B`)fwMK^`~!ZMGejTTyjze#QMWGDWy_c_s@4<3$8wYJ}y^BgKkpj
zW_GEzjMbF+5`HW_Gdj_zPmeEHCw2$Vw`dHER^dE>vtC&iT`%w+sh=Uh!<RAc*(xLH
z|G8>XhnL>@4pOBzj4{a$c5dD0k;8hp)7rvE;Vbsx^TKuZG_j-5qx%W`@H};l<yyT0
zpm|qT)IV24tzyF%Qe=^sI@-2(`Qhp%Dc*moJJO}Q_w7O81nM6&&}Cczrf4gV2eZ=4
zsn+iSSzbhv^iZ#XxbGA`pt!iQZF3NX{q(8Xs`Gn5kyT310UXcj+eD@u0jSybh|Cqe
z&AB}sAT1|;C{PUKyToX=0AD<Q3dX%wH$fAGC1~(&0$drbd96H&U7gxG@g~E0zV3C$
z@_3(U_7{?-6}{o9e<o{)^4TytJ7VQmy!D`db$qfXo(xnzb9B5tNE0-E{fm2EN!QB0
z*7pue{QErd?{`@L?^<VU`2U#i|IJco9oHub%77Gd{f5TpVJ@{*#Y0gFrHF|ZDG5N#
z9%tpU&Nr_oZKx9Qa!t5|5t*b-xc(wbFbV_%mA2|~wD^g2F!$%(h?|pVAd-}O$tc1g
z!qjv}g8n-I<MIm{n}#6<C_dBeA**tc0GhVa&r!GX+0+Q!Xa0gGu|Grm3Xu2@O1o36
zYAIYlCd{}+5T%all+*ch0xUupkzBMbRj>tCsgkQY7o1QOuvfuTfaySWuJfs^h}Xu8
zpAz2dMtv=}S?N}(j@HUV2F61=g~k}j(=2`Cj5jV>oAe>Boh`PgHbU!dGL>&NAi1UD
z4UL0rsQOhxO|$zaM$bvt)Kv0D?>0EXhcct=I?_G+u?fgnb*iM@7>T4p{TT;(es0{*
z_w`uTm`x$RY;>k>9<|gg;07Y{!6`8c*7)2m6)&N5xxC?Q>y~y%U*O>E4LtqQ403vp
z6l%`@TD?B}m(6h~Ap&9i_s|Xf4~Ndy<o_^q-m!DG3-n0CJ9mK0<`mYm_-aIYU_oqk
z(qa)Oi(#R(VhZQ#rZhvb$2M(&_v?lP!alIOjO*@e*BxzaF(jeljsj#Z+1k{Zoow3U
z6WiTr5*jXLWA)yuxt%y<EzbS*RWQ1uAQgHwwLFoA5wgFzy;NXA#&y6Y*v$OCdWW+C
z5)|1{{R!qEwaW<WuTYYx?2-OLT578>;eK*(Tp)RVr_BlZs&IRRVNW;6OoD1v{I;c!
z`|A@OhWsyb@{hIqoD)5XFW2cy({36hG+1@^q>WEFrIgR?3Z^?nr+aqdjXQlBX=V*l
zkV>4@33e7mDJ2R{RA>p+0?+j0N|B$8?+1LGRW`FBs*Nl8{){s<R9#z{zv!rxCvmyb
z>8mPxLhB7m-UYB~;0Fb#bdnnj)WN<yRo{Cf`19Ei27Q)gx~s=89DN>|Mu~hHYmh$i
z$sb3rJO@h*(zcY39$Mb@j}ax2s8?hQa(E~;t8A~6e*s`lg*J(zbJh<`c7NA^`HhKM
zJpSO{I7RXWlid;P$v6G)%w48>>;>mH9ijIhDT#k#^<OB7e}mQkOi66)FD{~W8G$3A
z=cH$X8IqCz97r>_oAW|S_*X*WZtd8AlMo1q%@_!X=-(=U{%aEX&qBUSEo(<?)8vmU
z-S0p{)8hCBPdKyECQ89TYl+5V)P+W!Yf+Ht!zQ8_bl)j^8eXnFvmNR7S)0-J%eP+Y
z<6&Fc-`Zxpd7g^=M-T~w5ev5Ww?>ZMA2OU1hwa}om}NEQhBBx)JptM=qU3XtNBg!a
zZPD#)=WLNjX9|m5?Ge)h0V+;9Rpm!BOZUi7;2Pw2_3b(;3xAG1G-wN&NF0l#<^<SZ
zlD3|g_6jIG+FHZ6qxnQvBAuNY%0aRoGG3_Cr)tVeU*%P=m*?I&sW5GKw5LW^jM2Mt
zYIb5<;~0pKo;fw7mkl?$hcB;rArzlUHYE(m2ex;em{&73X>F2oS+i=ECteOscy#qX
z7_n;xzFYUuu|z<?=kxXXQ2=hFR#lBpn_NR+IcJD^GMDkNLB09;+!r{)wa!g}ST^@(
z&2Ev$tyxX=z|4(DlV&HnZK0IPHu>&hr1Y)5osJJ*vQCQ9rLAD~u6+3D*#lb{9gKmf
zKW*&Yqx1boFs&*)CG>vK7baWc>7@Z@&Xm;EPT24Sl?Q-!XL`j_?PAN}@10jf;6uh=
z4Ju77ZQAXb8eO53l?8XTMi}M(_LimBm_2s)#({MzjY(GSq)5uEPW37xgesKMX!6J$
zYK_o*2;yh|%e>hTIA3rN|4A3k2*3$+Ml#^wWy1o?39Tq5e*q>weMLKFN7a8Y^;_M(
zv2bXIfEU=g8UlcXWL70pk*96e6kd8jTPe>KDLuI~&<_48Vf(2%&~rjB&pZHL*QGJJ
ze4U3|VCWH}dR@+Fh9`B>hdYsbZE5b)6ySt|qsxsKoj<qscL;IoP9W$2^Tc!q@h#BD
z>7MaSM~9n-E2h2Vqtw;K!=9JBy_21bK*aaM(lyA__v_7$QvNi%I|{<r$Da4cZ(^Ds
zyuS8~V9>MN*V#I7kOiX5+?QEekD(=U*vO^AC8n5RQ6~ein=batKm>vOe-@JF*6i=S
z?6y54_&US}6846q7@fE~+2J?vAR!7cx9%eKuWt)I@w-~NeeGF^n+O$s+0U|^LT4bo
z!7gslaKr+yAxkjl{+K@<8j%oxE|GF$`*mE+L66zNimwu6BYI#8Bwi{Ywu2aw|2Dff
zn8gVR?8||S&G-DQ*EbRi^z9jxY5h_9&@s~?N4U~gV+I!TM>`ua8&W4PaPDaCkAa)L
zJ40A@X4Zq4KiX&v#K{h*p6HG!xhV<NxdXGAUP2^Y3naQ3Op3ji69=}U>A*r{-^<HU
zWaQr3sXpQT{RJci_@ql+yWB^1mZHh((Z#!QF3!Ec16w{pHiF$JcWHvgIfQmpZr3(A
zu)8O@OEB-R%-Xrr-LbKovE4>CD8LLz9zjS!A5kR>ZZJ;B`b+4Q)VQ0(Uwh41>CkCo
zoJJF7?&$W9>rj994lG`J?DU>YJV?ociEX8YZuhSPNZlDzaqNaa7vS_BPPb?G7fWXJ
zfB4*PSoEqp+kunc&6~2PF=Mv9S{$z|cwY_=Q3&<PP5mzr2Nr0CbT>S=Rc$dRV%j0&
zcypGT87F-^%l-OU_H~1mYN|1gmI~N(d0MxChTkt{4nn1+Ybsdi4Ox32Ou+7SwSK1n
z{T>sW(`I;?#P`Y$d2|0mTD(q7wo&UV6Rm##t9h$Ww4mSwssS)!YKr-5de1d<kN1Gm
z<M!<Nw$b(GF3<WdrzJB=ly8{t!_CgIE4>F{GR1aSs^c5h9TcDR86RjLMct$?PGi6}
zUsoOb(?3tir5cINx7tWM3?<Tc=-hAgnne4lK{rXNW?il^C(PBdzwQm!t-jyWyhl|0
zfJ`pT%4d=t76BcxZ!p7<hzmU^RB0|gRUT1KlW8#Dq}Q<{o4GUDTwF5emWeNf8!=Z;
zJaDTt+>9kNzfzUCGiNftwa7f$V<QVDri*7MLX<!UNWfTZs7Pe%p<hpq*JlnfDf~z|
zK*4eNHEUr^JE9MhZk{PgXP0ph>^f{8b+_)SA<ZQ*a+x%23<u%HA~Vq_>5PksM6;|T
z!DU0PzJDm0$Mz@o{y?39y1w7&u!cS7Fu`S+uDPOKf+1~J1Us5(77eh9nU0C5qV5kl
zqK|RH@B;~;2V>w+17|T-FP;7?0z~!3Q{a$hO8U%!a|jmDH{ReRI?Y4@o!F%{%i7q-
zg*pnQEinx3)3DkY*OH;WpxHJlm8w%g$Wnbf4Y!_6ifT@_SJQ$C2S#?JAkRV<DWrzs
z!Nf-yA-ies;132Zf%Du43lIp6m8#%0hP=hlscs$AnOEts0;vClFLYm*m1$8&_UW1#
z(8;PKDNA4kmf2dP(hw;x4X*>FCHnkYtq9hw?q^^onFx4g$2oUXl<f`FL?<aGOkOKB
zlbH`^Rzg=HzZ4H`@Ct#t?Vh7szoFRTm>!u@PLI(y7LG8Yxdl;u#0~glPkJJghs~GM
z>PzU$Q}3}7)Van98&{oY)K1z1_+(>pYznRS@;pCq28Hw`U4daYCNvxQ+XA^e!KH+#
zcO~s@gdy02bOsPe(!I^Sw1T4Dat4X*<rAr8_kDZ$(C|(i-T{3RK!@yj#GEE$lgv3S
zyNK<m+=M}sru(eXjs!{Ifr4`i(z_h{^nMalT*d5&-X2pWA}~{$g(oW1))J!65Zp40
zxj+BR8Y+`t^WQ~K4q~UqZRY|%M?H!>8|uaY)slG$WloM`y-)2|Oy<I0f>RH8W@*_a
zvKqx9<jD=DcS5xWJ)^MfLU3=A09AwZIiX{VE1kmIF!+y91@sbePi;^KNnmGa8)!+>
za^6DMYO^Co@=Ik8B=*$PJcnLRCPbpe5w{Hw{Xjl@0s-k|lLi%mm<j`_1d5!1Y5n<~
zI)=yq22iBGi*Hn?rQTSZ!VZaeLqR|p3yUo;Jlh642A(6fJgZX+#aP+mph((ERo!bL
zPI|lD3ZJ>6!w>o#BL;K<o{0(Y!xj#@3W~lVfzbn6?6f^JMtEAzs%7s~-ekQa^O766
zVP^N+fQ9CIm&Dk`FKo7g4GW(#<%iF{AOY7RT2jZSB=3cfOsoeH9V4zqV83?&7V|@o
zaC(ODF;X97r1<fOfp>Fo1oEZ!GiFHV#__Jp0q#o~j3`*pC5CmEAdmDD*|L;pkcb<m
zXB~4KC_#r#4e6d1<qqNgJA)dy`%%{omRtRk4rhKWs__(D{U`w;=6fGf2ZbN)wr3yx
zrhsQ3WN%WmfAw?IJIVmEVoX;pMywK`k5_BR!HJ_!XCJAaguY9Qo>M#=HTUQK1Qqcn
z_DOLX<NK>s^d^{uu?!e8Ga+*?!@kBQO0KsHKTKupX(LQ4Fz_Tn1PXTTcphAj&o5!N
zeE#)e28vX%BlJf77i!!7XdOBvVcanSd3HaBimY3ZbYvEB|Mh{D{9P~zbQw1URjln}
z!;7C5y%dM+J(w2=oT|PUV5a5;nZy>Pn5zDQw2BdAXFsbzT55}}z|{S|>Y=!?*e@Jm
zZg5wt#l?jE0*w40>?@%J>G+jB+H$FHXsk(+^^FHM>Vsbw$_t2tZMwRU!fPvyfXQ2x
zDq<UY^N2Kgg^nLaLstFmMNqp5GS$<nGyCgRL3ha?>!K73f)n)=M+~1s8sR;G6`kP5
zYr{r#20?Fw^_4gMudzH1*p#ZrcDJ9)9uSOy5kyeaLt~c-_SouF!tC{=sxW9%1B!lo
zMSW*aw}ZW4IiwsOMFYqDm~Xx8SF^yFCmm?3#V=GI3^HW@LEUs2P2n1jwMV5qQi&6-
zkjYf?w-w393Xo@RV2oMKxToO^Q)-$RWXR7G=iCtiuS{npz%cfFY@hco4HJCkJ)&Q^
zKKq!@V&rO`g?oJKRO7oAp*Rxp!-7mz&SYJ$c)eP%Z<3cqON2<cQ3)R~jAT<WeuG?P
z6PTGOi0zO{of2YL$fQcQp(3tQnb)tvX`x`nEM)XEH29T1M}3hiJtR%&u;up3ZZaN!
zt+iNa-%?0bPnOlX)}!db@!_0~RmwT2UrwLCjW&s)v`7$7Mdt1zqYXd_#!|gXiOpir
za965@M}JKdL{N^kIFjmHKWzU<6_hKeO@!;5S}_hgLcy!<=zcH%U_IAYp7}OBE~|xJ
zk>I$EL(P_69fk^@Wg0Udo1GMC3-CwikUNN2>&S!J&m5?n@$l_{X*USfcdZ{k$g=m+
zd;?b%k~^r>GRxL?s1suOW#Ge<W5inh!d(L1Fa2-?|3Xd<8A4t;-CQAm=!hajFsgD5
zCB+iXz*W!aP~q_KN``4Ew~>OE;m+a-6%&ze%^U<6bh97<>{$I6l0I@$E6>hnk#deO
zAvyLPKswGzKVAb))mD4J5k-!H$4P^><TPTdxu|@JeSxl^U!po=^3ttIUzZQ=D!v?o
z>3@%PwyYvIJ~kiyQg@$&DKb&ONV>3ZsQ^;D_|}iB{hX_ByKT__WvN0AD3d^}8BWi~
zVr5iPSFV3ttM0#=R0!$HR7@qP_q7%`guA??O3m5w6X7{m8lZlZIM%*+!HpO$SDiHE
zux5<f=k7f;J~?BbT(ZUDwX0r^1vuUsWj3_9{6McLsFxme&r{D#swcwlxYST~xHV<n
zzaNTLhn`1-T_WMyGRCrHWarYmb6hS-rd<8Y)h4-QY$7vl3%ABT#kf&d<IGD?5!k{#
zG(EsPAQ3Z!XKL6aJ$N-soYfWQPNSVT()LOo8d^kUFhK0$kgU%U+91BSxZrME4ec*6
zwLV)L;7GX<xgd7Z)n+2AN@Q1VWHv0h5F5&bIHF&j_WK3LR1kg-nj9nKh09y)2WwDU
zim}SH-_#R(L*ozAhZAPq(pT0pjyYye1~8hMy4Q;D{<4mwl-<D*1U$kI6O|m$bvsNQ
zS842$4$DVt*X%)%CvK?V&aW%OsP&Bny+C)c-Jz=1H$5Ay*mxWaZaH9>-X%}0!mr%K
zGT}t($`((-ROZqOuE8%}3~i4x_m;qf%wMot>GJBAE&+Kp>oH7ll&bH!;6okii>Xws
zt=g)4)!EWp9V*XvMmDUb&p479g-wkK2#xlt*O-SZ3GpE=P7X8Dd<Pm5sr57jOG<ZS
z_dH5}Nbg!D$FjLm_cs=rez!0ipez^@6l2lazsMu{Z4aYz5IX}#gXw5u_!4<1B7`GL
z{K3qBM}837;8-y8!qdgMf|eJOpLzcyG;>Jf-9grz+iqE{0+FMQjoR_ksC#6s(;Yjf
zWzmCJHeMR^;&$p}tpF$6PO*C<IQT@5h**L{VRG)O?93A1^o&VMc;r^=)q>bo1wk=O
z{DbsXy@g5vU38mKq*I@=f*!vlqHUeZ#9=QgKVdty+@}zn>8M4+s=gYtxin!znX7C_
z$_)X-0x2geIJnWdd^^%}XguPOUP<oY)+*n|k8{$9V0}F#^?py<eZ$>{jDRh@5=-W;
z((X5;YEw5apgSG_<!tsOy%nSG@15$4LAFEwt;0ikNGqREz*iP6HxERQIE`SicBs25
zwlyt}v+V9GAFQtDD~2Q+r!CY&th0DD;7;SK6=LbCBT=v__pC5xh-buMILXkeB$U<>
zRk8l%g0pB>oO-NN)=tqtVmN&iCcQRnRv&PjRrZ}oG!}})8?VAW(2ieC1jo3X`8T9N
zZ4OgKOyRboJ}FCVIdKD&0e-1FT0y2~QF#fCqMB=JlKM}MYZ(^fx<7{6dbkc22DkOB
z_6|SGXC?R+CWX|clVCZd7cDt=#FN}dCGzP;VnZKljG0{k)8lC#Vs}E1Fdc2bB$VHt
zIT}3B?t~2Jy-Ac>B&W#JDOzF36-=0X^{hoUM;F~U7`PmColCFiXY_rg5ia-IPZK_b
zzk6;iT(7MBAcXt3`l!<=Ojoh{F?9o(W5E!brO-x-d+{;O1=ZvZ`vik^Z940<@vn1>
zT4|2){CJhrA<T-25bn&S>Is7~GRH-ga+_Z6WTl^X%#Wf?B^sH^>Q{Q!#;eor8Rp>$
z@#|ENW$<g!TeTuEZxE64F2gK4dOh>8ChT0ykqwV|Gw1e=Ill|jr&4Jy?yP=2njR}u
za(-~DCWR5PZgu2U_DO^rt4&8(a0GAR)M?w6g~6Yw$1orAWlAjCWixR{Lb-68fInV|
z{!Rew$eDwf>Wotsyx^PKCJU*@u<wX30%t5{wx&i^R!t_TtG~UpwNnhht4f3@R2oDH
zEr-kAg&)I^VU}cw`YUM;Ah|#^sa%{)&aB<3hZw6^qJx+4BAggbg@)mTo4_55TmaFm
z*d?DjrJDN~dKd!MV>>G)rV=<5?i^)hcBL_<o2Lla!x@B+xHsHucm(OI*|!e6%S?Pi
z6fSPFw8F^-F&Z-0*L5<-)sA{4n^l<{K}`P+g%`Yla#1zloirg7FiuU#fPUjp%dy=S
z4QdXdKvBj6`_^b$>-(u9j;KAps*u7oEG@ucTW@`rdF5hMq9=h`smLmBIxW^bWPzrF
zXZ2&nD^LkZbI82<a!6x?@z<NiNobk}?*e__T7Jk!nu6Zbabw&cN`Li)h5eA59K57G
zdM*b*gK;`Ni?F|vDAzICY<|3BiiVC!jE(9scLr{8dP|zkTHdlj+MReuf)dO@EED2H
z=Y^l8%Fj3MNM6nc_2dS{0VH01I~M+Oa)@J`Oujgu%I;;FevX#A0cAP8$*1S2qVF|U
zc^)ZA&cp)u)*Wq*Oo`1FD;X8JLWf<X^aVnx_K0#?7v7TtxlX!I{lEsZ*p>XxX?FI&
z8dFCZaR{e*nWEz#22>L}m7>ZD7-5dzBf&QVdympdSqAbClrb3*D2kS_>K_gC&I+B5
z#m~oog<sT1%AfE;(=3GCTPuk^q|Og(Ddk+Bm*c7qp(B3mMR_o0+fpmNbS;)pVM1LR
zu^7YQZw&D9NyxYKsT9SEx>BV`(y7qt+?D4Q>bp~4(*##?*6>bVE~#FNt2-PaUH-gY
zb~iR`0Z@4*{Z33k|5dKzzNy%A^_X5pl86Z%IHpn*MTD@V(54dnYI3ClEg+(sMO>!R
zZ*rm_<J{ZXK=MA@eP-z9Q;a<#CmxjB=|~)O&`qo2&W&Gje9Ni)Fr~tzax@=OpTI4X
zm3g<V+@^qyA*)tw5@W!TwYFL{zUX~B-CW=DF6@YaFQ<I{9pd4P-p#q3YKH#zQVu&n
z?m+c7%gpYQA|4gschZg<FM##2JI~zTskB?mEO*SGCjV@5jAe;5<lb?Kt5Dtyg#=B}
z_)xWJ>3kwm+0!D4leOBSJoKh1!UU(26MYzVYLV@(wLtplK<WXFg-@l#j3eMh*S_lg
zK$T?)SlqV!^+=@OkSLHbPcx}BgIvbbGK*eb<;Tp15aW((X>qdlqNPKPAbL=zlyk+C
zjxqjxPU&rYjv2;J>(UYDbh$-qsk`!cw50Kw&58nzrSFCnie;Kbknt%O69+3c#Y7&}
zIV9eO6{FocKGZ~@J%~2x_-*-lX+D(Yi+ZEX#4O#p52`j1%Q9QXvoa&@{*}(E*r+J-
zks7URORohakXK7CX?lJS#@}h_J3(V&mGN6<=MDS<=9h$H7H?#bQj|okaxsgAQ?~`}
zv#i_*v@SX71Uc2SXKx)<ZL*l9cTsh@1)8y<?&WiNyiPCvtk8G)1pHIg28I!RrLDYo
z`L4J#;3>=`%SAp8zRWV>Vl5eGhlq5ew`eC%xLs;U8K^@2rI1^lsUkPtmHWAodK1}x
z3Ynx<i%Q7^&ox8s7Jw8Jj`otYxLav>u#xh~o}s$qua{<%-dmw5nx8f0d@-x#-N7R1
zW)T798ZRN`d?Wfr8k%v{rycd#uMjUK#Rt3t7OcM-=SW4-79XetS@N7JE`(qOO=QRp
zan806naYi}%A4C=+@r~^ZjGjnk3!EvJ_Z$;a704M7RDvZbK6#=xBO-(&wd|*dXy8s
zp0O&6{DBU9(&5oWl9>`X3cXTSlfp|H5qi*^_j`p<flZgB!eEYkc$}9O?=BhhuP-<0
z8n;Zxetl7NdAl<94iV0-bY+Ne?AlrBIRNCik5(cm=a5dEsr$>zGV!&f@N_5HS`O2E
ztz7tz(8}a>&YY+D?SFT{OW<*2zpo6j_vie(#EU|M<4fW3Q+_dJz{0z50{(Z0)I}gn
zQMQ#=sTXK2%^m6}T7HsNGiLx?X74as%I8TXx=ZME!^-isJ<S!X=`Q+y?eMzYI6F6$
z_d|9LKtAb(0jjuPt6zvTroJj7l2x9$>G=}7qHmvd2OvFPh^}u09$c3mo-IBYyku)0
zDI3>Km-BBJMgRq4`$Er9o0pLDpY{_j0GJZP`%@rqPkvmT1RuA{$9~H*g3^Z~#q9zY
z=Ux@K0mJQ`^N^KfUuLqFmJ$8ECLvBxe8fK}Ja4%RE-C<dFPd1yn#+P4k3j%d<4jYa
zzpvJi$|32&di8et1lQZ<lNusf<^Y_Vub95zs|?TL?o09GC9GSP);#+4+=27kE{gk~
zzwdRA4~T(oK6;3Lhk9BQ+OHtY4yzSB%S7Z}m$#q5*D+&Darn!#7%zWamf{L?MLgou
zaa}I=U}MUPd@dDWuTSX2mYZXv@eAxm1lMmsQRh!r15xHz>UfaySVw1iPj6D4*0K8&
z0zlryT@s@bD?AUqgktF3bZqlSB}$4y(RlihbvtBn3i)==82}I8-VK}lyfG3BzFxUA
zOl3~gJLfR_ZaN1t*|tl&(Tf*zK(2FCw=Sf<WK-P)&v*DZw+Wy82kbb<N{ES#*Oi-1
zc|5vp%~InakAo1m+y@uV((WCS!IBt<G9(@THv&S=e6lB5JmVV+bho}ZNq3zZtb9LC
z$_?Gwjk${n&Oixea9ka$7Ty_XjSa2g8ztIGp5u4MHQ&YkPhi(3L>D%tl8IZq9p<aN
z!2-3`G+o7Yc||R-oU>s*GP|M+fxGdcKg9E-uwsm4hzbe7r4T!HZFOy_T?R8|<1I6M
zN~tGcn1-M)JxSljL5oaJ?m$Htnp_L@X`U?ND-5#<!ep&y$L|Cku9lQ9#HHqY>~bIf
z0$T`WDn;;KuVe@&?X!`{kL1xS#Z@biUoYZ(X%r^kHZ4^BW@y=r5BM`G+Rt_u+sC@!
znFI9%2guOuQOS<qLSK;y<rWn24D>#}-?3kopsjEIvCnPC^yARp_MC(D)zK5W?4C&M
z#o9IDCpu*dC!b69rc?_u&#un+b=sYgNa$B=&5@bAh~@dxc>is}GwNYnO)<`WBr6md
z9A-9kv4t&~TuXP}WPVsPoBza2u!t<qIG!M%=LXJc#kRbv%H~V6EP8;$s~-yVn)28x
z<SfNd-Gb;sUg<i9F^me{@e6HaC0?hZ4;lhRbRu}r*X;>O3h>)wvDw*R2p_j$0e&@#
z<RS!DXO2Tzy5h0Q6$Tw;bw;$%5?@9OMM3}-fkRPyKDARhyyj^5tXf<A6RhU<-XEXc
zp*!!rC|$-mvEF3`zg}rr=4#uc<~HD6$$sy)xW3k|>8PA{fY}(MD;)5$GK_X8>~g`;
z>7YKg9ZmhNP&m5JYGk(*M?*|)OEngTuH0Cb5|rs9p9>@Q9o7`?O#?!umb)2d!8pQj
zE)Mf_s#*{*RLs4m;kNUCQTC2OvIg1OXxp}Jcki}s8@p}WwszaLvD>z7+qT`eXKvj4
z#hLhK&N)9SR;)L&GJj;&s;ZR_IuhzwE*3(l)bkP=4-Pi?Wb=(x`YX!mFBs8coOPDC
zw<aaeuzm!N6b~gY^UpT1j6$vMgzj?76&EX2gv-^6sE@IqROJ*^i<K_(&eU2ZHU-u-
zG!_dwwG)_?JWIt|jbzM6yCId5%I&0+kaSgESG1@{OML4EbSDdl1YrvpB%Ohlsp|1x
zO=jL&*5Pb?I=8&sB`-IoLzj9Nr>Y6ophPtVa#2~eRV`;=nyU<)yw_#zV*dVqRXvYi
zYm@7C71<6$LTx{v(_Otzpx3Q+Ue$STwbf$;B(w-B0tb(MaDCY7KcSxmd^y%l`;vTB
zyH@u#{-EaK<^Fg|9`g0XN-L?=NU~Aoz*@Ovc$?43-@6ZDl}cEfYZx+XT8$5iUpl5V
zW|7QjG>_V}swbx`dQ}x-8@GHNpkJrIcmH5`^L%8~OtLLMom448?0fO(jOYs2p|37R
zO%D3&G~W!k`uxg$K8RgeTIbUK>-5EPl+0mFm1TS_tvlIfCO=iSLUr+OnW>#siY&oF
zGx<x?X4$HJ%}1u)WPS0;(mGatz45d03GB0Rb3&KerXXis<xA5v@O!O#$Q0>3-CAv-
znzYSiowU*N6ilR5TPB3$*J`7-jH!gpyLr3$rRMz8ybJRCQL*mlUNKkK+=<5Z@MQ`n
z4|MQaz5F^iwDD2BJS-n{@JYQqJ`eOM0+h{4r^ri1Kd9!AGbB3M?=(B}IT#AJ^9(-v
zBc;6Fa?S353_LHJo<^MR;UawZ?fTwvHS)lDa&$T0HND#J)=tv}PtFtF>>qb$UtQ~5
zC+bu1nrFZXZvadDJ6qT4YQjFw+EOT-!rce|m7ais9iwN(hfoT5r|YiYLA2LhI1i76
zd<|L4fOGJ?BrP|DLN$Fv*zyZ8CzZ%s$$Qc899NzDtQ3cLBHf;hZqAHuKl<8CtohrY
z-j9>6^S2%_5PTh-js=}+n(-T3I%+ty9xddb%ro216@$FfVqWn0r(IqLx@4wJ^q)(c
z57+yA+bKS`#vg3YML8S$5YLb^Yo37*<0NL+oxMC{U2*{i*RWT$x86ujPg^^9#M|To
zNY}Vgx>#55!|yyMU1}kn#2lY}^0H6ShY!$!9IIUE^Yk#sM%QjrX6A((Hz-t<E7J2s
zO(^%aw%?hw$+NvUt0bSS>0*@%x8L|T&v{x8>y5YjUc?1jzI^ldH(4Dy8jsk_AXp=%
zx=p`Smt4LFIa_3Q?;`27%g-HNZ#UoSi^e5Y#%D)0u2(B&Z}`A+sx;3mi#@AmZN4)e
zr_Sn&rp~6QOr1^r>&q8eyYoOWZn%D5Gv9$-y4co_XROb2*{tU!UyD^W;x`)bS&V8k
zUBpUVAsM7>X)9jLwM+fc_HZ4o6{6o<M)SlX-kire%{~%;ZV*HJR;~F1nyg`^mv$X+
z_}7kgTcA`|pCMP%1D^SI8o}8-tUIvA%c8lxo`4<J|Kl`CSS>>CZ(*CDTqWR6!<#R_
z$1#9jlkLJK_Mm5eU)F4^l&#!C8#0fJf~BtVCNk=k@VK^zXZ})_S(lKloa2Rgly_7u
ze&aTbpJ3NDNYM5NKEMte%3)57pRQxKT%7s+{mbrE^K2;Q`M)x;#ELaqN`3%5!auqy
z{}b$$p@HFlhE7z)3&i{Yc!IBAQ40>|R7p>t03Z<N;-dyEh}$fZg#;)hv&^lR8i}V1
zHv?X-S0o|;oNZrBraiYOusPC%8T=Pm#Y&pu^?5Toy?Ar9yZk)EYs_X)MBrSfe1v-K
z7V8?K4O-@~l6(1Ugaw<2IiGTS#*+Aj)P*c9oO*oqoOA;e+&VCV(DyO)jI~x&#2AwE
zNMUf2BlHTGfq0>;FcJavU87W!5Fx+^>jL3Z0g0%9T_%&z)pWLSfX8$L>H-hh%%5sU
zWNnSKj?Ej1Tr4*0>b9<P_jVE{U^`{w`*#tva{R@Im#h=E5@GBOM!7BzB~W;jL{FMT
z-MB`O1-mg{ucVDlEequ%o>Uj*jaHp0m-2;)H)?m|YC=AkV9Kg)*HP*m7!*w2t`n@?
zv3gg9&bX3cusSP-owaT1RWu6m>(1re!4kkd#=cyM8^vym?z^YaPpvgJyr#NjKk+a>
zM)ps{#1ybGoR^VFw5zYK&<R%$KNhd;2*ofuawcPDc5|=}oJ1|H2ZeU5hP)H~*?i_X
z6hi+xHrYpgH{bT$NBN3&{|lREbDO0j?dKF+{10JVhW{HF*N_x;QsFr;K}f79TDUo4
zR{HIXj8Y=!^4df#@%u(K!I$d=i8zD6=TZCh`=)ow5aK}W>6O_)G&0T6ee+-R`+GLK
zVZ>zI@;aKGr4!o`2s&JQ>mMaJ#Xc$wn#!5{Rl@`~c|FvCyt)-XC0MLnJ_ZM~UJ{gP
z(cM*MKy^!SYj2Pu$jreWLOL3&VBsFq5L|!x9;bB)1?mtxgaOZ&FigTq)m%1ZPy5Tm
zO~%|0atcp%`>aFVu@Bct3sdeY#N<CK>_}_xunQ<&nWgpD^AC3HBx|NMs$^>ybG?bt
z_DHf-4|mKFI*@~fmI%Cm?iTX9VZL8tWGk>6@=z}u&2lI1D<Z7fjw4-BsZ64AWl~j_
zwuLlmmA-QSEQ1;3nb1qE&C&#X^H6sgiV)0VgB$Rjlj*7%KXG)wX&xZ(ts)0?4~O&A
zh2q_oshhB=xO?aDO??PJ8XT@6XA<157SG1$BvdUmyN;*i33VZusjplw!e<KbgFi#^
zO0z1~m+-I4h9(j_dmw)P@d5m=Xs-S|NxYPweLwoycf5ZKnzGe3G5`NvT>gz>QdVs5
z4}A+|==uXyZWOc}HXhf-Y)wK%vPjZgpa+hJ5GZCX!I1d9RfGBRAM~vZm2+bpnvd6a
zpPZb8NB}y$s*u2==|4N;2CW|#$$#Y;gRJ;9lCeh`-~4HNqezPz!goa>D7<?3{lOlg
zU21{dmqMB;U|sZ#Lx0@7h@-_2JnUI9O%-5n3TZCVfyG7iU_Ia%ZE}x+0DYU-5$qtV
z)?fqJ>O@u?4T!z^q+^@na+?;|9rrK#dkZ#(xWrbDe6o0xPbGehS%{st5KcBHw>Y@N
z!oK1VV@(*xUp&97w_^T5teu-4WlWUbANb?ax0*nZ>bMHE-n!dDvQUR8Q2`GO*%h@q
zf%}a66nl6Dc39liK0U4nS2D4v9QWYG!1#_fq2SU14>SyPUFBNde<N~B2j%mL40bgy
zt~$Q#hw3&VLJf}cWxXvOxmb4a+@8Kh5Uex%J<AgEs2ki7D&POeLX&Uro2*kUYOKwD
zs1l+XI^6wcb5Vw0x86WEe>Q(m8u{y!vEuB`Guu=oX-l*s#^n89fVKq0BQE?ug&z2a
zc8mXSx7*0d%39yt=0DT*s+1M}A$8}o{I`XapV~cq!=(rBjMUEpx)wl<iNsk%0VROw
z#|bk1N9rzp_M-dROhOe0d=PI4JcARj`~B*QOO_l>T959mvv6Iqzn#t2H?)BWVKIn&
z6lzKFLj(#|r+}I;2^!B30b3W8Q9+nDc1{EaxIQ0rHzIN7CSH6-PEXwxq=`}IAsRgz
z`bLDgX8gG)I7AdNuz<Q;PY4t6&Q-tyHc^Psg{6Rl9-={64g3bL7@X1pZcpd<B(uP?
zlTH3bpBrAULhmXxoNp!3j3hrv*<9ipTLyG1CDzjM?_8Veb;*2_wYEP8#o%wk=J~6+
z2D#y?hv>Zbg*rM)dUYiOheS&v_o?FGjpg*&cNkh5XMHbL`FPmF!iM^3ftPhIa6Ei5
zCDw0;&?6ehN~v7zhJLg9V&qcuTU@jXl_zIhF-JZLym{jb&q&)<HF}xO*E{>&j33!N
zG8PU>p=%_)oo6vAcS_Ae)n*8H8rLLh`390@qk6_qG>mtC#3o_Ov1Z^&YBOq0WrCWJ
zx}p`Oa+tB|S(&Mot%pA>5xfskSikJFm(NBJbmpQKL)ii>AjKV8CLzznpeaE2^6kkH
zMjFmp;uJ@gbDgRY+lY!M+xjev1SrF&A|pzxvGMcGKrt4yz-#m_h$H%R!1Uuib~i#J
z9ExiHsMWmS3_`CYT1z{SzMxhv`HJ=esedwrt*3qdHCuv*wxg_sMVsa2<eI@n;ZR*@
zXt}mqVtM-9ovAd7B9c|rP+)7AK$(@XCKe-3HQi(C)<46s{bIkGfa3LV^=S%=w+e^4
zGfYhsG)7HE7JCM}xOY5GJ-YxcWVpmdPPN+vE=zOXi@>>LoOq-ib$Lxjvva%;l0(`E
z)_J3R$}&xy#L5$kmlNXBTNg=^+KBR>lK<*|LzNA$lbMn@pO~tV{&A8$Uk|czuf~=b
zs*K%Xq;z{c6X6uH-c89spB5YBD7npF`{O>93?7KBCo&4I9Jk*Q_UnZFPoFcxG>LwG
zPdHU=rmbAU`!JSk{{&pJXJ-3#z0#nI?QEK!@7`Lc>hapu5T}wRPQ&M~LVf9MA)edI
zyI6M0_`s~89It_a#5c7Q-TzvLH}LsJyMF5M?N1#h__rTSJ3B*NeFsCc|4c8mj+^}l
zk#=bNm0I?)KiwjbB#P7g9Ga+1F`PEcDB&##24`n<CD}UpsCzqYru2LWxbJ!Mv*p^+
z3A=}uL^21)mJ59R)!;E)=h^NA!3FEkCr8j^fxZ%FAn-h~mT*9j{|cPuz-;zoh?6AN
zw5UVSyf#E&$*iZdH>@6nt;>ytMQ2jb&y<CKT9zOwus8p>C0fg@g})~Ssu7qjPq7m%
za};WKM4PRTd;+8_6-0$obn?&I<7mOj4wsnvTcTChHQQg73NWFDbS+ai4)$uZEdWQK
zYDd|1dIcwLJRuRhO4K|iYbU%2GA{jN4}nVsgx~ie(rh)G1Lrb2MjDC(?sc?Hy)5!s
zQXfBRd67cIl=S0T6211PdMUHX?+r6;<*9Uae+3YtZh4`W*5FZ)EbX1f8$?C1pGj@O
zSyp1?4F)NMudhKSVkMmPFmNX^DuDu{Zk}H~7_npur1`)qB!mMW%)@tl<y-wB%c-d}
zSeVSnRULY9#jvBd=)pSchcAXdp{AxM_jdJp-?d`q`{$=+9A?q4A4q(s;MxyA?hENn
zzi$AyZmzdZxAz|3Y<Rm*Dlj);$I{t)|HaJW`MOp>=jTj3{jjY6{kixTp!L7`hK^E}
ziCJSn=sZ?aH-parK2WTpqEap*Tou_f%&1Wzm89LrsA0vgP5_`z{(6!{if0GSo9xZT
zoc6?v(mh%c(ddiq2VT1N44C!V9wkb@W0#!C=@gJSa}3wh5{kG5b(ULmdzi$2@DS}$
zQ|=09Ug}tlv|NQ|X~OxKn|Y-svYRWQFw$=|@NEQ)yh@ecVPaSXd?z7wmoH3}fK=`8
zRb4nn5yX7fkFp;VQpJ#<io`vmd2*&vU+62=8V$?QQ^2xQ6?x)T?4XENhsH3(yKOK!
zB;ruZuIY%rAFYkNQY2!d;ZX!^)Q{&6DI`Bh>?<rZCfb>$CR@!Lo4?3$T*e^)frUXX
zkUqiV<$DmGiRkq%k`g{-Q{(qh5P$>1=JP7omZch20uY?x6hat9)?6b&&{E7nz@(Di
zxwMd*4|%HR!KFJ>3o_L;=Du-nxUy~(^R#F`+R$OHHKxm?IrK;DT2k1#+}PAgj@EM?
zIw}b5KF{KQ;$}Ubn#elIIxGJ!HN&ZTEuM*jXgm@v3YCa+n^hxd-mE>9sWIhQMb_#D
z3nA0#Ki-8`IEd;dpa@Xgh3)c@2B?7d^e@v&*19p>8}f89O}=#hrS><yqz;M<c%~eX
zaV26|+4k?D5?XHgsp@9b96-rP^=PR|%5pBnjp#2+`y&LAQZ|B!5Woe+A7;GxdSGGl
z41KGZlH~`JRUZFUC)#GUNb@_vrfku?=oC>7T2Woh;S76TuddNY*Y{fU7Ar%;mJpux
z(=}gZwM`FzMjziLPg*t4fSOn>J_zBcSQZ!+2FDuTKkC{4of3=nZ|j+(ng0KR5j&lc
zh$RU7^IP>t5rO1C&iOO%|9}s>sAZk7#*XyG+bx)}V0`(fU+=yv=z@t}qL?X70=Cel
z$pO;XiqXu_YK#@oCE@*Y*@JOp#elgzVU3Fyps5YNaiOY2OC5)YhhJ`1f?0R?N9BR2
zecqhgvD^h2wgf|a(w-gTcdo1b1J{${f^OkFg)CJmKFCQr70C$}Ir~?@Clr7}CG_4d
zLocsp5O1^sRWC>fB<8~rG2zQdCBcJM1OG4As6GmjND!q=CrKn`LO@Zs!(I0X@vsgv
zR`@V%4-8rfPU9UQQ9n1EuzdTofEwt%dzRn;XsXd3x+%FSI&jm~P7=)lzoP__s8P4L
zc!&qXgJNad^y2%2l7fOm2aRw&7zrfh{FkRNYTWQ$<>FHsfZKw=z+sYyfZ&+fdy>Z=
zReEXNgR4Q3j-uzn44`LmFAoLwQA=Z>(S@JJYIZC_!TeVZUt1e5Pdi=~yy)=pUs2PP
zlH<?us)6&boyU{CvpdwWZm_@a7cM$CMs9(UAiGb|8@GdtqZ#=)?OEvF>%NYxSTKL5
z>2)!)lTr!J#7^YO@2&%--4V$SScBXk^KZ~V1zd;2s*DgGV5YsE3^Xr^_N9cq?jINR
z*r9NyA%MokrRyu^YObqxH?#^|Y@^z$hu9i2=XO}ikD@)dy93$T*PVYKp?W^}T(wh9
zox}WnPYFy>Ted~z>|cRRkU*Kfv!I`*e@8FkvHx)|bPDVkdp&%u`5jo18A>u~Swn$k
zZTNGA1*#V_Byix3*PFVbfCAiY)nJQeRTyF!mn5>|ZG|`;(2BYS#`L@16yX^e)0b$A
z+^qI4!RtA)(gWq-%>u&Frblg@^*WG0ON@*^68VQcyK^ZJ-$r?h02_FRh-HA9Uy=>_
z2aSvp-G{STUhu1@03|pwZI#FE53t@8I3ScaQ=Ir2BBT;dplghY&m<-w^mKj=lXpXu
z$eGzyqdBUI+N5gd?n3#~dn6MiHp$Jv{ic1p65Xz!a0!o#w{5^UsRe<)nx$;PmPNAE
zf<RxzD_j$~O6(5?(kf6f9r}Jp?x+Vdo0J_iTTq1;e|Er6H5GpCOkqu+bA!K`)}?E3
ztBL&;&2(LHym_IC_R&i!t9gK3dw>w=!gk%=_gA^9m<xEwn%%l=#e5w3!{kU=v_(U0
z_$M4*yGwPg4lawCp{GI2aQ5{fR>q=2B&&zb{H;~a)NL=~`1L2qBrz5OZv+}8*5BE`
zskurixyMq{UMU{|3DZVsDnA$+^^+p~d`7r@QmIM9k(QvN8^~VX@jFDRejN~fFv?d_
ze0UN^sIy{j%KacHfn9`2B_`r<sd*<s=WTrm>4<xaxTy_>4@Una7Ck#O2O)gGrXWGZ
zawnM%N-Vc|_P%=#I4W_NjJ*zK)upw!e&G=PO6dm>Ov`y;-Q7DryGff5{l4SZ7+r=p
zZ$L}4Kl-^d<8x8HJ&+Gr{<RaOPT`x=4PqEi6UJnlb7MwGV)a%_G`v<vFwmG4<khc>
z>it|EPe63t)sy6O)O1YSVU$cm$)*Y}z(Rx>xpE^nt=@*e+T)$nNyIq~$@Y`PnWT&!
z7=<1On0pS@TyBFX$I@v`Skqs5n<rc!;m-c{4w~IG`PwsjxI43WfrIuTfW-21c5!}2
z!Pe;`j5lKV1y_YP5)}_L4GmmWjpX@H3f02Ek($_~hOSEckD{eoDR{Os^|*~65-3*m
zX>Ql{*(myHQ&%QgRt+tU)vI<{DI^C%F>Q9NhIU?CFlV{Gw_{FrXfmX~zu98Ix)-UY
zo^sK;d<#Ur3jUZG|2hd6?C9^-XVlGwx3IT8j6faffo8p@yEgxoCZF%;4Q`Mj{*{DI
z+7P$t;R%K4IN#lM^$ljn%tENQLA^3K$Hc5&fZgDPtY>&IRNG!X(;=cb0)IsmWm0)$
zkdg;&j(VnA45u8W=GZph$%~&^b4ixC$=G@AQF)P<0E7t&x&nHY({3-xku$Sd=I8eZ
zd0%TqE?{c~mJhg>d^d(5_Uq49sJv<k^a(P!S3PvGO`8OJAF*BPci6RWD+|pwV0ngc
z9v9q=+%$}n$a5KQv-OcrNJraEF^*nfsEvJ?p~Wpm$pT)o$uyujUQ5k+=j%<}b%8ds
zPEagL0i;-qKhnui6M}3f6qepZ^E5#p45rvu`tgHgQ6DO^&h+LhceGDhCH2+<tcjiu
zX)k^18{(sr>M(Xt@&y}P3_kLiv*x_b=R2q79zFXPAgtNcCfq`*$PQepd}=m}$0uA?
zDude%EChWCM%#U!;wU%BSD=ADESKyw><l^^nUgAVqHu?O`0PUP2b|J4pZ<fCE9^3k
zzF_B(*f;~VE)k*&19dKceoH>yGWeZ6@+3{>Ed1{QwmKRAv~|?Pt4QWZcZGEa|4CVF
z9E5@rCsTl=BW`MXkqMi^6{vPzPZq5FuHa}|CxbjC=qwF0v%FlXVbwM?1<C=~NJ=ba
zHa0l#irHpPZ_AlxGH*)_Euc2@c`n@I0hP4s$wcd7>tD|8y;g{Eb)W8mQ;nM+BiOG_
z^GCdY(p2ufHiq{U7cR*66j9Df_7s(mP4|!_9b8~5Ffli)!@o9GvSe7aDc0K`27R`}
z1UDu(jk_Sk)4>$`*>?UQHe#MsGy@yj76qX`fa)84)F_nO@jo0$G$o9Z4GMSSl^+8L
zj4-%Oq&hy(E1NQ@IF{)0)=VDoexlO+a<NTkE+wf?C5P=f%hTmk=5ukyvf9$SW)=q}
zaO=YGLYdtdbYM>|7^+LVgTrCT_fy$dXJJWBSS9LLAcj(Rj#g1KTrAA9-YG={tpppk
zD6KtvP200u2m?}0Fl1R&kLnwErZo`;tQf4-w5T*`#m^9_WF5AssMS35u|loo#HlD4
zvPgNa)gGu5L0NCtr^$03<5{H?7#H-FyHHxAb}ZIL`fP&m_0;`XKZI+PQuU)v_Ukl-
zm8YU}EZ44svZ{r-;5qk;_c#Tj)qreLhkD9x<ewKxbG+=ch)u#e<ZaMcIc`t~;<=FE
z^Bsqgy`O~(mgIZ#kkym-9w`j2t>uSq^A%a7Q}~3oDqqd0?`G5PTD+)g`iY`T7gb$9
zaq1`5{zTQ~i>lV2xb+hoyV*7;a#yuHeQn!Xh3cE9zP6m|Bd^Zr3`4qOeVp3c17#lW
z6Kq0V5hGlH<}YvHWM`-C+Hki7sNX2%oBO#^54jFTq<7a@wIsWX)+X<A%hK0fhYu<W
z*&Q%Tiy*)p-*tYuf1rzz05^_jU5Ga=$RMr^>W_(MIb1K27-AKNt;p<665rz6W?8gq
zoyD`rC<Pf1mW}bdv{qonGgevUL%%A5IgEWSC0d!AB5R8WGs#zN*wT(B%d$=f(~tu%
zj(;vCTgUa6pRfWhP`GM|HHpAg6hoDksY@^Zei`v!R1|1Lk(!uFBNkKD0$o&{X-I%3
z;Ar5aDvdUnTr_gD;%K=W<?kz}j8M=Idnp~utA@HuFQ2m-d0KI(;TlXD&f#A`aV|vr
z1qmTyUpgoOB&cwES{v6RzhF;=M-?cKVyX#3LV$vrg7ydjA%a;X!uc}-tL%g<rWe0s
z0rfB%ZT{yuV8I|Gkf2JuSzKg~yb7jfB@u&ia3ES11dIx9-Y_wcu!8&vVpxy-A`;aR
zMZbI^qUHc00m@?_n!R0ENWR?+F`R#1DP}{M5I;pZDD55sLIkHkBs)k@zTgZI9AI84
zY{MDKPk_4W#fBAOv4h_-D=qi)yb%>j`cmnL1K*tv$SCjlD}n<glyvhLCgexK)QM;R
zvv~P3(a+2ykN;e*Oy?g{5-px1hW5xGc>Hsj-~V`%VBC3QSfEe?%KtaQ5;4?IzVQDY
zA^p!0NhghALVBf0ovOWr49f0bcpbBfhp+E9qEc}u*ZtVED#hK774f*jEH5cSPNFe;
zDr(5LZ6`;<m(mMhv%5M9<jBta4c%%D$>B@<4{m?Wc#x|CPb37Kh^6rL_&m|*Og?rU
zuS!bn|7=djUrZ5uu{OUBzdSVFQ{;5H;2qB|UlD)Wf^Qe@V_pzOzd1iBJ7>my;}#wW
z??<E}`Mq!rJP9w<xHfTMq~d~dH_2Ac_xS=%c_1*C@IYiIT)-?c@(6$uE}pv@kNPZa
zm6+Crgi_ai#st5Z0)86`jLr^k+}7l`t}@o@-=?laxAymc5_|gjAAWJ<<6-c<JkJ2{
zhr-kw27izAxWzsFWTuGq^PxW(yD9HR&q~XS``|^;Uf^FwwZ@?@UwAJC+BbTrzHXao
zjax(2iz8QF?LiyF*a{a!f$6x-py~ep&3Z`>cro7C7|)z2dH;=jm?YFkMPd@PB5|}!
z1c%)E*Cmr}n71U}Fpq$Xq3ka=wW;hb_D6Xuutq@Fi7f2P3sE>?HkLM3iTWMo#bW!r
zl}n#_Ih8h{2P;dnG}Ug;rI)wwtKu@~md_&9YQJ?|i$kaugEG>{Bd8XoPoQdbtFOQ4
zb{F^m^mX`g*#v<2r>{eHWoNw8Pp@Jh`oH^s_AmX4e?ttfQq}%Z-9z!V@d*~uD&vkV
zR}s))DHOP&K+=_rc<Mo5BBY+h3EPuzEPvZJCHG&6R)YZ|+|Ar@yn3{^Y5CMyw@yEz
z{oK>r9lTbkW89b>sNGc#FrC~68{snwzDlMiVeE9`*slDva@VyrihSGT(e_&CQ3=>X
z=X(|3M}RygdEyngoM&jWgUDL?m073N*tW<pS}8$n^Sq1*rp9J?@}PC4ceN&G2T*}h
z>-(gool^DI`P9*Z#YK$Wb~RFlh07k&ADt`xjP%NA0=ZQQ_L+Al2;1ON7J=&!&B^{4
zm?VE+DCsi7LAAS(lq3$0oI4a~$3z*6mM^V!r;Ma`8WXoNj89H@3AAe#ES<708d3_A
z)Vh$~dLRHtxk|+GyYvOrLq0%5T~QAXhd8%fZ~%VHj`Hz5c7gygqI21{kK=-Yw41Hr
zJt2Bvs|LKeVX%&sT2?JfjpF=XvgGu>Hm%D@2F1M(xv#o0T9u@ZTXR8s2U0nmrEcs1
zXMWU+M*9hB5HRjyjDTm@$fM0s29Qowm*0mR1QF4L0Q3P%qp)tk<G{O+PQ%B4X!l$Q
zww}-NmSt==R4X+`wb>r4*O-DK3vG&M5tfD;JyrJpZVbw@GM+NI7<UO>R6W80{v7S%
z8{0nJ0Wl4GHe_>a#{4rKZbtW8&hInhlGCkX>W|bD;FS_If#8Ro|0f2Be$eNPE;$7x
ztEB-(N-kHXU#z0Qpip=-5X62&Z}HF|YtOhb!n_1y{ll6QKK%-A-Re+w&h{FY&m>t2
z^tz4e3BR5i^(*g*@{KkN<EK2SewTMzi1jy4I8&A*dH#OZ8Ohhb+>Wi*!7(!YbY&lY
zUjJ>!fzim+(dj>5jXVDzSrQ@7*?{mW3T0u6BJjM@1|9AsW-e=@)rt5Cm(6Cj)#^O~
zIl{E-@6@yr2|#3Z#Z6F8W|;Zck0%Qkp3XqFz#GMaZJXsAtP^0C{(OBQLMU~1@C=-=
zn%=P8pd#`73r(#kUIWM|dPacnxfVxAy1RWd0I?LHoh+<UW$<i_^sv?bAyIbqP`?~3
zOR#eRB^9oU4pB4O3>{uGuy9p8vuUbcs$J(4mDBi9ohBd6>g?u<>t=Bo@uoRZIG633
zqD1&y_G1`F-0LE%byfLvLQ!%GoI?(hQ2U_WG1A{?gDW1F=}5c!Jw<TZlOz-S_>H>@
z2k@8_LpS&iXXg%cz7aB9Jy1LqUF!`+%#jFnRJJDV4S5kA496}$K?P<DQ*kbRe<JAr
zYmdBZj1PeX9RMIe699ndzw7_7Ff#q;y|~cwbX;eT|K834I&U>1)oKEa1sPqD%^J36
z>atH%-rJZ+UM}g2MEjLkideRiopoW_4fe9sZ*OvBa$YTa$Rv{6?*H`&3=74*vMR`R
z!ko1^y`NzpO)+$ZHyD&RUMp&A;_>$N3F^Tm$7hjNkRZY<d%ViaDS`Ab#b9)jHTCe3
zp!!ZQGSU`Slx?D!H>iBdF{Wh@pAY>gz3(E?vbimGVtWcC^J9Kl%%N$tHZnSFACk{L
zE50qkGp@ib!jv@;pDI@*+HB9;)F;JQgfLn{fyx1H0C!ODNepEJQ-tbb@8iMh<*V9g
zd};tUr<{3suTFEv4*JEh*Sd>+{7U2LVrS>+*`5;sr;&V7a-R_xaGI-Z>YFKtM8LPQ
z_C}UHW|YUwNi_;TRv}$7`}Oj=)H{`p==Jq>Ik<XWzk4`(_?kh8)z!-Fsk`eMpXV7E
z!t%qcn*&3^kRS}b3SVh3HXKOEaDqdSt}`Xw#!Eka1$o={b!BRE`{fmUhXM(#tPciI
zj3AFtQqP?|(CxP(=aKEdh8Y3)n`d?&=dhV_?AR+^<kTx5e^41qug;Vr%VKB2F?)C(
zn;1d>xouCv>(}BL7G<_0@Fn}C1Id+RZg$4*tFp!xkB|=H;QT5PeGtG~x|}9X=pao!
zV~(Za6XZ?WR;S>WGQFM;<O2yLyNTu>hJDH2jx$K~I?Kiu6$8JgXLz!)yaK_Cua_EO
zyHY@Tgly3zmKJe9FJ9o7`82?J50c#WW5hNZXZ$@s)0;tvHlV|!wH-|h$0+`&A$j|+
z<q5br*#ysl4Hgp-zYfy0!X+XXS%weVhk%GcL6%?IQMvBvKqPun{VMq?LXPsib6HGn
zZOgCD;q@(Is|Ku6$D(eGw1(9x`21?k`|8nB<N&{^5?v+nS5DJi7wdpY_A+>QR1k(m
zQ2IVdryraNPtcsAOP1K;)B%PUDER!trXCkUy7Ym-I}e|C;ySv^%?V4hnMS57ukM9N
z-rz03Ri_;G9k}V^%JRcoMW=p$cZ3}SI3a4iMUQtd>T}a>cAgvp-N|I5)ie4y!E>0m
zrH1tlk3rCU4A=1A46y-Fr5EK|;05{ukC_CBUJAk#B4-~A5t8br(m*F?`2QU|B@&V}
z)dOxBSrK+RTrP<fc8iAkQ_k$T<s8!5q?4VThP1#$Ni4Q50R^Z3WsUtQB?4U#iK57G
zfP(F5JWaFPn#Kq+;106tY*63|mgWi<Zc+~Q9TbQ5i@49kUJ!U(3!a7lxA$)&_qa&K
z1kk796IN}Ku^mlJ{ch=$rNBLzw}qzB$0)|hPigou2x-S`l0zuKr?irKcdHvV1!d|0
zs8F@jhrjNqBt3k7BSARet(X&5#t2P8{Q9+GUeOmj-*}tX<BW1-v20JjJ~!wnCnMqy
zsltObgx9Pc?Of-ZOittO-!-ybFw1!(PuimI-pZ&Q*K^sxr>TS1+^sUcATntq2roPf
z6fQt2V|+fH%gmY2SiA7DzSWVwyvNP9W48fW98*T+bh_28KWeQs(c(A=b?|0cx00&H
zVKS!=Q(G-P37-fTV`R6wuWY@Qn)2&z*CW|Vwqs=FLJF42`xDem3*h?`BJb7u>(L9)
z$y3O+wo_ryt*rqaLIxo>W?z}7sMAVP`0{aAx8Fi><*#_~b$2bD{_rw1hh7&V5GiNJ
zgLvkt3VhcP62oE^5S9=g!rd3$)oha$z-owhARxzZtqe=X!KKZ|BF2bnmJ{67J_(Xr
zCA3xvcn|0Oc~u}`M1wO=aEH~%4L-l?G4)4Bh;bTG7b*rxRyG{mpnxITO3T=eZSA_*
z@T15hzUsq|RdMPEDYctq#c{PE+;q7jw@B=XaQMA?F!)+g|C~|~S-)E`ehpRLI)#2u
zNffG;V|kC6z_aD`XI~yW42RG-j4e$L;>Z#9r6t~R8xecrSiG2c7<@m-21UNM*K5PE
zV8pQn9r3Ux%!(mLtfy@ure%&M*COFn(4PklBpyoamqb475wXHfX>6o;i!cQlYw9#I
zmXwI#-b*?X--pnI>BSA{y+BBSws=sw_}1726k)~7N8->}C4I3PN!f?F(O62H_E7uK
z)HPU*lMLapR(6&fr(fM3I?vc-x(&0%>zI_feEgO{`f56afM!lXRybB}<5#^f8}Mhc
z`+M$(fv;+*IxMsks3>V>eMMO>P5?YU-Css<E)y|Rs*C{?Srf)%v+QD#BJ(jqb!(Vi
zC)Z{S(0EVVi0p!FOu8r!6EN@6Fo^SK1xEY(v=fQq`z@GDB7P9`+=h{oB02TdD8?#0
zY`YX-X6)QC7C!VbZ*!cLI<!Fl$*9rU=7Rd&$omBSL#{|~XX6Tvj5hz3q14CL{wU_c
zd<p&<*@>kEpib_W$B4-{o^e&G+CBj`huq_7g_`h5_gGlzdjDzf*qFAAmk#h(oVM^7
zo{{4{8LzK?FKl~Ayn}nzJtUhwY}-8oH{$WYWMXXZpN`Dwh^QJSpA}c#ti}*Lc8t|S
z@@@YTG4`hMN6qVqs4wR7Qw3G|uyHhJunY=kNag(Bdf8U~op`c99*BkKP7h~ua<-9l
zbWYnQ1`|urM~0C`uCS+Kz$ePcQ=F#!_xE=dI+pdd#-yQo50C_JPZ6D<2e*b~EZp3k
z8Iq%?g^7|zj>$-FmJrfh<;u4U0FV%8)a?#r?3lv8Q7`HqAI=YrTD<XHPv2s534a%!
zsTZsje5$*{TaWl~T{iTK9NcGcRZG9OaldR^0$=$97+(WSPgKdnTV-G5u#BNg7sd>h
zdAG(9(U08avNUrCb|XoAo5-qAfo(R%Qy=b}AI&L?l-98fR&}?Cy;B94mNxrZwOH4!
zwAH4_Hj@JzGTAsbl+l_ib_CCm;=ErVn$*`<n**Ddz}i#Po7rRIDQfGiFl!?{I(2@H
zc4cvKatgvF_REb&$u>NkvK2W2&Hh#nden3AwoF++EH@+N;{($@kI&!SZ%hDaHmZus
z+*Bl`Wf_lJ(EU?fl{mX5N<%xGr7eP8NzAM*%PF5SzS>ze4&4MuC2dvATFPqQe)$3r
zdMaeg7K?Roo-0ti<8xtG)ytUyV=0>YwpF{zrvB|WN(1}Vk|mC)UUgHh=e{K}!{5+w
z|1r0p&pOlD$KcJiOm00|!_~X|*%zDjx*a`ft7UmSmuE?=4!E3$R~gF(mi_pf^vwD-
z3UI9ow#_9}1<fNSlmF7HhQ>!A$-;_&jy=0FYcsou{kQ1}-QBpj3pXB4*V8??<86xL
zQE}qx<akjgD~X6tlb~e&_!(Qw<9^j>u}RJL&O~=_oD_Q`PWKSkv+3uU@TBC-k6RWe
zB;}2|VjaT|-b09G+6`>n8+lQ)jf%qfHE4*}NOLdscNO*3U$rNyet2|rTIF0=8Mq4n
zGw@M4<L??C5A&}Q(RG2(1!LpM>ea0d9_%h(U&i=wuoMam>YDe@sd{F;jUXI|@A_D+
zvcPVn);G+nZlKmEc%tzhOBKFt;9eEI93~Wkq?jJ_9&;41u~7PSMTp@1e)8z+Hp0B<
z=u~o*w3ji{iR^*6*tq0s2aqTWI$S6@$SY71h$Mu%{=*==gazcdeXu^qfb?-_VnK0X
zkpApGk_)@wg>axTZM?XdC_x2Bdx64|q!M-|Kth2~DbST;ZkU!pT<J|wdO_e}<kXhz
z7!4Aq(8xA8NbWrCDs2Ja)rpz@Ikh<j9TZ5ldAJn0;HSiE(FJsY5iDk)$_9cs7Z80y
z<id&+d8A)gN^)<0b!v_hND*N#)qm8*HBMYw8nB_zfWo80##IVZz_fq!=^>0FJ~qtn
z_95C)i~=EwABLOIoEeOUCw5I6Q=~162%W}CqPY{IroO?ZjC-@$ahPI#ZRBz#lY<^H
zq{`EU@96F;z<kiibK61O;>_Yw!{A&Z##l_IM!1cS@zdo+QSEXj?o{I&T*&K!=_5c&
zW`el`COi?JLRS&P3|-hs6f=U+JL%C0kYK|k4S&YA_?+n3z|0TEN=)Iz0Q^OsNlprv
z62fA_cdSf%YX7mJ_KWUu6adB&i4s$gnMeedQzYx1!lhFKyrPQ7OQAc|Wbrv+-%%cb
zR5^hZ6TziB(!b)u13`~TEpUQ%A7VuB1LT4pYmY-hkkAL(;nuYG>pp@ilPiPa-UHjo
zjy|!ory|0&1JaSK>EB51gfN{5UU4l8v|m0Zbru2eqrd?r<llVhm@X6}P)|FCx^!Yx
z1}R4O1OA2Up2+MjRLd~%r!9M!8;|Z)^uXZK&HwlnK_~TYNC&|g=Y5Amkb<bqEH<`1
z9)S$#hMgv(Hq1pYdZkBz-RLhVb-O=2Vnsf`C1MCm%03iL;SKXZ12zreb&#+Dr0T8F
ziN7t&ZIMb3;lBAWDPW5B0S}_&=;p|C8nB~9i#k6`B#{`S04Pb9O|%2>NIupb3JKKO
zoe<v+o})TQ+H?uxxdBEC(+#jVGYQc5ZH71`fw5jhRFyXQ!X`JqL7slfSXn<#zIh;_
zD^C~^Z6X}S$N7=_4rD8`f1o5-_3T*a1i24_f_$=vUPHB*{TY|0#U!O6iPeK52>`KV
z4%Q#ar*@4*>MQEO!Z{2kCuGXFV`@Lv0QMOuQSC7RM3b&j7!ZdvGj6EBTRrC+c9ya*
zSHm=Z9Vp-ntWO4E^?ijta&>-De~{z1!U}ZQ#2arrSMc^OsPq?y(gQsx!0`1Fo0Y~o
zVj)`QBM@#$v)Nq0C6$R3x=I`j>SjxNHA%VNj~>)UDUk#~X}BVN3SxCkFKfZl%g{I!
z7^cR4)Zb3O&=RVp`uN*69`g`x-nDY_3g5tz8pqb_(aHPA@0H91vJ&wAhTzLi`iGau
zDLCJMq^7TTD+{YcF?$)t$XT6n;p=3=PnRR3N%dE9!6~x#og{a0Cf;669=7A*OTQOa
zJ;%6kfF`ZX#pL<wwrg4Yy0Hp$Ub=IBWAYFNlDoanW=_vM-Fmfy2R?N>Nbh{aT;f>~
zG~c?!ux-TbB|5bGwp5-SBM}2M4t2dLG+dP5ctQvNY8lY>MeW$n(y=WP-8_BH24Yce
zj|o*WYW8}nZ?y&ZghE~Jds9KOBh*8sxG(FWYDze&kewLX`w=W?yXpk7A1|7Qea+Y%
z+{P31HD@!%L%EoUPGQq%YGv-*1zvN-7`nZMdD;vl38rqf`RT-AKQ&z+yolzK%e}Y(
ze8=~n>7;ok;n?_UM88^P<c!XABZB=--}dLxe1^Khr#_CncQ3TOz0`>pJix8E++zQN
zjf<25EZq4^d>4nrIqf9SGaD!5D>Jvo-{`nDY}j<_n{uwao5O#BpMOTpvEh>$#Pk7;
zJ^77*{n!q<1K%)P4B~Ki_0T@M-dw_}#mo`Zx}B}NMlvT$i^}-t(UivN_4lA&y1&Nd
z$<z0XAR8O?hTgkp{np}X3&>1<)0NjzPTfwkfLkSNH+JZ~Gka=qL2!SwZ#y@3r~C8X
zg|>z}i?+!5;OpVxphoLcBJ(6k8&Gr%o1L{Jo$k=ftw)Obx!hr=NQVl-hr}WPgj-FW
zh8B4x<lULpvaN16AMWSzYWrgOQ|NtOnR&%@uk1T4vS<F+hY|dd{?x*H!t@hL3t`se
z>*PR(hCZCPY3)Un^agJ#fn-GXZJl{H*Y;FpxzMUFKV)~_4rPu@Q!HK-QTAbc{~RCI
zB$`B@p6R^h_m#aG4;db2PFi6Of--m@HSP5bUEi{lcE^>&-)5_NN^pb)AaPO|f(2Z8
zW`eE-z~C_4{!B6}EVqh0Qb&=c<0Y!kzcb6#6(Qh_wy&GV#wFUYH%osi-<OLkxnECG
z<^PO-$hR8+DT+!?-`T_SAz&S*oM~RtU!H{IW==JCw)YMb6}YNuA(vwN%wF>Zk6!r%
znelL*J$`h?d}igQep>h&4eWpYJraz7rlpg$w~vfe`>k$&Th&mMmO)?{rEhp;6RV;R
zTi<!k=L`4TP4oix%kWBP2~oLI8UZ-EWuzu~J|f^95cch)Ti*M;Wplk|TQ^>CNrF(D
zbq@6`zA4da|2G74;|h?c*2&3Vadp0!nqLgWpPE3HQtY_E(a(XpoZ|T<rLNmQx2)!w
z^UNP}w)dS!_*{Rey<AZfI@@g{UvTMbt#E%zHr*w)RT&V-&=YA<#!G^z;BjkqKUO?#
z{6<%Va#xT0+mq1ko>G4OL|2-5&__bL@gv!kA0;-5l>e(rnOl9WJ3Nf~ug-4UEjrFp
zAKG{Ak`?^MMW&o3^XId{(4@tCa3>h^yf4ry3qH);dcd~d=HIteK_93+LqL}uG}FC3
zHpFzktJE<pJz<`nNAe;(izy5fG0F8DTy_RNs8iPwu8iqNDTCDL#_*>PGpg{H5A0QV
zC5w(r%<Z^fe+PG*J=7~gojpEOW43uqOyvNF1}S?maC`TFmp3;7Jv4Uo@JG^w7dZBH
zyy^UJLn|;qe3a-!$2*M`nT0?5$%L9mb<pS=GI8h{*9v+~$E%)R9uIft_}hnr<J(n2
zIM4fC!|ZQB16O+T4c9Jgvu~Z%{Cd|k4O}%E7$1#E(Vk`hKqLUkf-P+TTdqyzWzjW&
zmLJiEvzCujBtarJ0N*}60y%8z78s^ItvOw3_C@rWE#$*}w`W<d+GB;}cgLgVGb6RS
zH=<IL@C#yrfrw0isa!q`TB$pYPVZxP8|H8>g-yc5i5BP_XD&Ro9&=_J4aJ!8F4nTG
zj&4t#W{t|cR&C<2j8bNt)s!j7$gC{D$y^7zl@Mq{oT@0{v(oyU2{;#@gAZR|6TjsV
zenocsish<JZ1Z+@wyt`;e7Jueo)51#YG8bOLi+}J+lufYq2p%9uqO`I(#RSUCU>Cw
zz=j6Z-pk?IyUy*ik1jUbgKrOBzVlvfzPH%p?+tnXX@8=$Sv}_N&emHT2$nY5b{=<`
zO4r-mb0Qq8m-!5o^k#8pI9+Dx)*!$4sJPdh{2ZBfBa!t98@@ORb#sFE2|L!Gt`_w1
zN@e96K<>B~q6x0TH<-1Hi2`_Sv3N23+pXMx69I`5GC?im17pa{+|N-?@OvnxMt6kJ
z3=tT$So!w^Hr3mV61QGV;Cz_W6ei2^LPeT|_q}i1u9GLrP_GAz3HpGse=Gc6UE76#
zIR}WnhGw+D@1-OqgcOlO?$-Q~PhZFF*UzWT;&Rr7&JPuvacy_qt8pQB8o9&ORjl=I
zy007Cc6t|)UqBaBqS>}_$E79%Nv5~30+Ac{q``1B3E!*I#dHXZG$+)L8OEe<Zwyz~
z?rcKdi>IFqC9BYBsjOFpPA^f;I?zVvg2QDvM9WxZdIG$B6KZq?A|8&M@NbxZ>bNxJ
z3@L9vk`djaa-Eb%AN|*{)yNG__WI9SS`3Irh5f=qTEk+4r5laP0hOxAU8K>NSmMh7
zrK1XvVrYykNR^;dHFX`5X^hTDl)zKl_`CHtm8Cn4&H$D0rNGFb)6nA00aMWk>YE7X
z6`5!O=N;OzRpZS;Q&s05g(VMylw}v4B;uAhP&j4OP$|oh=QtPVgGD4SgAQaTovh=K
zxCsZ9xU_W&ndQVE7PJ*sUb+UI=^UpOTd{#->>2vS!x)!GVGN@%9C0TZSbvgL7{kb)
zWQxJ%Cpm>NjQL5X8R!rUtM4&~NDU@_40c)s|E$WIk;2uJZ6nfB%4S-bHWV_r-r>&0
z_dSfdN=iZfqS$7nrIgMubX@zk>J43$#d?Z+7y{iElIPp%xVesmGAlH;XKO3LC(P3)
zi<`kn5I6IaAYpDJLBi5Rf{daL4+2XP79^G=%G)hW0<b294L*ts5sVZU%0n#7W7wRR
zPhH@BShbRsKu(}PKs#~!9CHVc&#``k{`Z*9f6o>A2c}cs(fWUZ>)cEQ8s>xp0N5k}
z0HFPkef@vT`!hcyt)tx!4Bmx<&d%zeK0E*B0&!8p+I5~C?aS&LDvm7E=!~-|p_r06
zE4c{<2je6!SikAg1V>8(B>J-PfEkdp+xt4{U;uL0ScCV%!9?-&tn0M(dCX(AO)Q;b
zIvp5|&77N*a+1g~GLz)=hp=8tkiCC#=@z|Cm|`fYQ_S4e;wC#)e}D@M!Z9_-KH4G^
zT@cnG2q>$gAX`rfYwZZl%wq}|#Q`gU7s^bWUr3@TR2V%FVN%I#CHN)nz;t^|A`3Fg
z0m@=9!H!uMhQtYNMg<Wm5i30x_G-^RN{eh*re!(H3B*S>%Ky@H0qn^ME;A!4T6X?A
zpHPpEZVDPj?hZC4I3zLz)~W{?W;%dQz=}q62%kQ=zOKdP4{3+DD#2<&l~$Y`$%B?K
z!tCGujQr)F&c{Rs5;dwP8@+EQJC$H|)h$<i(DS2Q!htn)sdpiU3?;Dh5DSxl`bR*h
zT+n#@MJAph)cu!DoV|lo33I)8>bnABB$2d8*a!Q7mD}U->*4rzv~M@X3p*rbO%M$p
zBEYGO^e@RHzZTI9|IXo^F^1`$3>c>%6fh!L_9CQlSots7k_DJLcdGa}zFnClLAei_
zj>q1f!PnagWQSEUZn=39<gl?aK4Zexn$c^Th@Sf&JMy{FxR0p#yc$C)xXT<=gc(QK
zUjXhz^U*Rr`V7K`;^K7kECoI&lZOz8nKG1nz?WH4DVdqwKKxDXEHglgn5`p*4gnYm
z*0#;XW(5QUYP9Xnh6#K_sRaZ+r<w!J+v{C2It;!Crd^;AhAIadFpS8MnDTQj7DgwI
zgcUGI-Sb<R41nhNicI;8lU{%w0BKC^mafij@SUq{Br|2nn@x=1jGau<gcN0n8Pe)E
zc)Q-7hb}fFC`_<@aDip`9ctCi(4CmLj7~A*l<znY+%X`1tRcdEYe664jM0R$8PGHO
z2_^C!`Xfdxb?lR%klwq*wuvu<HD^UV@If@T6kFV}8<}6!B?#ouUQ--tHK{Ty;1e1&
zaaw4hqqIlW<vtwNLjvH_;115f$A8sf@UFuc2Ut4%K}j)`enk4T$qc`NNlMDA6o8yT
zbizTD`Bjhokl;T?@N2@tIi^mWNtkp^83#~efx?C{YJy(oL6A5K0V_REkST7-CE(JM
zU?3-8l_Xkw53$5|>DzFR69CNsik-NRVPN{C0W`1^oD~?+<)XE3RMC+p0t9XyA<nYJ
z0^AV<u#<hl8UY$?hG{VNl{K5VfN2ja_vDpIfuZ0GhFx+2fW)1|d)P7LJ}!86c?(I6
z;DR&|)Tnm+RD{txIIjT2UBSIcJqSig$b7HApD0wm++19ro5}IzMSxyO^b{9K&|^V5
znI-VkTfAZ;$LCZ2(pQb;;gxeUPZl(HdK4wIqeA;=zn+h7Cx2LvZ)<<xmd$ob?&oPt
zBJIk0@IUZNs7TMrVtdkF{J3LU8Qx=P#syZ1tvJ*=2hdWwM9@+?gwQ6kd(2m;#Z;XU
zS9lnx$W@(TYI-iYW_Gp5NVlV|K4<z!J#m$9yS%m6b(g&1mUM@HBHrQi02gV7sz7K3
zC#uv0lGbB|VTLiD{z5@)Dq2R2s@0ZW?v<5t{e98kJlqeb$&$x8Qjk*O`@@JkDBws-
z@JP~7*)E5xw9r!#s*uF)Ecg<_DWAe<8NF(c(v8{D5vVw2vDnN2_bYLNDWAH+#d&z|
zvALmO;-9W2&0_rH`7EB42DZ>`|8N0ioP{k9_YG)E=HAIOdO<};sb<&1WSGkbTx2u4
zOXrl^>A&be5=t&&08Gw6(IEK?cpNz1oJ520?*#>#%wypKe?}UkHHe8x9bp_s?EAC6
zAo!IHu-&hR1DS#VRTHp1V5@Z-A$_Ap{zEMnT;L1WbNQ-i(8-Omla5Ixb)wT|q5JC4
zSV0V^@0qF`45U-!Jj4?0$8t=yZEIJ_dX_8HuRt-_`BcER^vNWvnX)cwwh2;?o`&X`
zq5!3MTVDmAdz_S6pYfaTsCrQwW6;*Fz0CX{Ih11Oqxi%LZD#5e657Dg)}2LS>X5M$
z>fx@Fl(Cd{MV@wCb@8rj=3@J9h$#hpG&G>^vDQHIZR(U(1C0YeoRlP865m5jnu1|T
zcRnR|`oZqRcUcY)KE+Gw;5Xz*Uq@}p#6zl2o{FRXZ{r%{u5VL4sW>~-4pc8brQ1vA
zMwrTvv(IhdcVLYUq=;#L5pO7G*F&LJ>GyA{ziP(~gL?#H`uN(rWjUbUFTPeW)HSHa
z{jqQox{93Ev5k@Yet_+?mXY8!rZ7X)2TSoC!J(6R=6!@}SC>%{v?tQam9*?Or2dT}
zrp&RP-|<!VCFFYISN_KDccbU%(`PmNmNbvAh}eUo<G(Hy5@Cn}W4xRB{vXE9DLAue
z+rqKcvF-e^ZQHgxwr$(CZQC|GcG9tVyY9=a`*cp#9uI5RUe9~YG1mMhP|D4R`}7$F
zR(9A-%razYfiu6KhxaBwAFq##tHXkyuj^;~_x<NTf^gmka>%*wUfGuuEZopf*R5=n
z&>@WH)?XY_p}h(60GgN4WMDWDP}7NtLv^3+aqVKZz-df{Az!_#F<BBhCFLqP+(y~#
z4A5OlB^<7Nf;cIAy6|7ktfj3cj%($*l27Q*DD@Z9&&}s(s{)O!{RQb-me$J}NE*Yw
ze7!Tq(Dd-KLCK;z#~L`dkhQ+ar01Y2)SBCkH-B6j@26Z=&$NmzYnE93ykf2`zh}90
zAL_PjsC*Hx1_Mce?*M@b5<JoR>BGs>6|X7Pu)hhP*2E6iT@{cS<e9mO<M%{howfQA
z)MSQwLr9skHP`Ss^wx%SBX~wKu+0s1c)rFoe;WN93;R<UE?D}%kz%{N;o2Py1&}q0
zvoZ3cVR<}h9fce_OlzNGN<B?~x8=7^E(4Wgp(Ws3rHvA@L~&ha(pUn|PM{Me{ep%!
zNfR=2;u6?aN41vAxyEoD*vN(zjrC52ojuW+=RBx6HAo=2bd5r_@S|~CJ=)aLKjoLr
zDG(9gNhCCZfzy@!#{>c?rmR>I6um~(s70W5Yy)z3sjs@FQqaXxF`1*u*Ts88RRZs=
z3X0rbAp8-Cs6K%&4~yFtD$4vtm-<>p5dbOL+W;sn>{MYIT28&BU(Mhz5sN8XogF#8
zn`rtzR3Gch(-fEw!{f2m#)JJio1@AeHdS9ZV#k2(U-9}7lCybq;4YYWwNV=euhL4o
z%kGPzNIFy^K!3d`QX-f`peX6R1m16!IRo0SUPmlS^73Q{!B=E76SJAVn6+NJ@$~wa
z%)nQ*hbq*fxgobuzJaJ~N{5AhIPZ1EjNpkCi0WEU(q^?!YIO>`F+dIGH?#v$HJ5K8
zm6)RZ`*6>#yC0rAX5_DAfv9V9D!fiSbX1821Ou@aCe%98;JrFIal62iS_Q4V(pJ@S
zD_6Zs<ij2l>NQNBkyBJs^>#@M+pUMq#CoS@wFpUBGwb7R6@%P8<?zRmoR>I!f*@V^
zZ<O-(7x$5j>h}t>PFPP!g8J(t^nTyo*Y`Acx0TNqdpqTAV1rR9<-DO4%c=%B?Q4z#
zBg3FSPWWmY1NfiTcI?w}^&NVBI+U~9)?2Fgxm-dR=xLyf<yW=1sT(ohMeLnfaFl&8
zPm>cyyKv5&(!6Wn=!mJaoFggXjLePyj6p>wX1>IasV+92Roos+9#W6#F>A^Tal2|3
z$$fdya5pLNNUzz<cAibYHg_*woz*S3D7V!S(*mD1_m{Bhx>0i%RvnWSN5SP|B|Q`j
zQB5s$mj(d3RW#eDt~QO!K17mpM{$<c#roo#51>tKo_>1~E-sngF+wa<Ty4MDj6*SZ
zf)xi#u6odP#=dep*@}ZHTPq6MB9{5MP-i*ea9WF_t~aFwu|#W}jsClSXo#T0iN%Id
z{`}-2v4wTo*h4M|6zAiXthTeK$sr$DUjx4$QB0Iid)$ziiT~vFo_v?%c)+UDE@hV-
z(&>xZ(?`Wqji(xQ*QzCO4@EEcAAaE|iKsVU02F-)FaaJ#rB2TgJi8bUE+gV3Wc<eT
zcyccK<`AKMuLwdQdP^2G*=FV)I>^r5;Qf0f%~C;j^jn3Ghb*|vUI}kjk%$j<2CO|2
z=8ji{X1tzpK)n&lyAi5IoNXgxf1`u_4~4Sc#oO!qGfQ#rGmrAz4RQ%-%8h{lxXK`p
zzmo@k6V*&Rf$F&bh%Z}OoWn1)iwgJTw<PFw#EO0l1~yW`T+`QH565q8T0%H`t|v$a
z_H>WbG44Rwa@rfidv_SXJB%6fk|c5ykSir_8x`&g{r){ML~ETIt7KTCI;fyU5`G0v
z%5iO-(IdjKVzE^Q1RSa6$b4~6e}5W$x2B*fp{8bfH#!X)O{V<Loqvj+s^&*KQhU-G
zUw-a;eL-!VXS6US!bYBXLt|*=HLKOodrDK2-@`&ncb6E-XF~LfZ{5X3Yx6n&vsUi1
zaWzdv=ZkJKbF08l>?~`vZtel7M*2~>vjbHieZjphCw>6bI`Er({<nRbL!WATH**ZP
zYPG?{p5>?!BPm*kb}#yD^@+3jkzR~Cl5&sFs9&BzBP8U`HAVLKK)}{_umK*fL?A`R
z!r!N<`o-wTs9NqE_^F{kFUKM_{ob*h0@Ot?1034LiR0+FRMZL9`wK;bCQDXHqr@4W
zyU{=D2T=tUs~74;q(<!U(HA@LV5q%<m@>|n#w$HrwVtmvjP@7)qhpRzd;Xa|RO;jG
z^WtiF{;Q)v7JE^EF*iadMtB6P<Z|`e!$>lIKX^{Go$l`{->13DK3iW)ou8FrWqxAS
zHqOFV&ENq+AE+W+@i*5VHh^ip%Z%R}dI|LPc3KERhq)@S(7I(SPQ2%0aAQ4GcVmHp
zYCd(0ewhUhEG-W0J~U>12#_Y)mxvj}uiDEC!PkN}yZ?Xj?0HjX1?gXJBly4RLUjLK
zfojag;%;y4;`ARX)W4cGPMZ?Q-+-@3#(hWfag9O$zZ@p=2c~PLaH#Py%CS+%i$I-F
z5lc~w6XbngonE9!vFw+VoNg~f$q5TGeRE5^MXOD`u9#s1`@?q#9d1*pJod-t)%)~o
z0nAzA)z!a`LED$tEoL?CCVKYkhu#Bz<ZVS|;)*&5g2_s|=x_*y$02x*258%)@0sJ5
z9RSxM+hz^s5B{Q9M78Ng9~|k@P);Gp#y6kow9~8)pW!1!kc<o4&>PDRoQH1c`eM^}
z>Bsb`wZ@+4<}?(UNmn9L#6wKHC-TH7;j)DKwSvf>VnT^4oOaEfLuy>;?+!qN))dho
z=E&l)h*!YOBnDaH3ryY~?(JGNQhXdpp|%r<W?_M+40k0gap<)&v1@sIphi0oa;Oe*
zva2#LSFD#G*PEYvyN&86j##fh<LmdCvR^q+pdU&Al?XMv{VhiKzriqBA2hyGpdlL#
z=cP0WbV{89rRF5)5I65dJ9Y2J3?;A`GXcY{-B>|LH77iK*6??7Mt}W#+0vO}K<mkY
zu-L+&*-eN}Q70fl-a<Y(n**Pi?#)k#c>uhcsDksi?7Bs-EWcB_3j590`i`TZIpAJb
zEsngU%9%jJMUR&3`X%id4)GDEp~Pr+<@V6IV8>WN&1Po$n~Cv(tZ`{nkc`O$3<j-X
zFZ2lF*{-6)(mczUZC^Z#zW2Jh2QiriGB3S{Ef79(^y=i9pzaU|v+3J0GQh+zsnmZ)
z2Sd&SRfj)1y~j$;pf04Za1HpNeb{3;f&xUtf%bsid-4Im&tHBc2-AVv{$T}9Q?OUk
zH7cg7n~sLM0oX*w1Gt!cn&P+^1$bT8*!90&>E4Y8kBkB#sz2AknPz)cZZL<9QZd0J
zbxuJc$)OIw9$um#T<xx+TeFw^4@dOt{pEqh4a~!JV#Dz5w*tzWfQ&$e$nTsZ(?ga`
zq+jX0`|&uDhY-W%#V?yKBM|p<?Wck#1vdy&0g6yYOrf>jH#fgBe}!$`Qh3@@S_&}a
z15^Lf?ko)}4G8wnsy8rru{E%r0h&|<llpRJqfY^we13igvTP@HVn&|IBsGezDAq?n
zl^`0+Yyzi%mw<o;2q6ti1Nb$Rh~6~zKs9&_go|GPAUkRcpbhz(VkE}#2$z4*NXT7x
zLZZ-tye2^MArDJKq32U;q?uqj2ho0fcp$+m)`U5kW23D<oC5GRKOA3uUA}yuzV}W>
zJ{CVz8T~XU>*e!Ir}f!zS-tGUq^@0ra=4R@zr2l|OOEEce8_fvoHPwwTJx4@ILXZS
zMC*=W%o88sy3<FXZjdyc$?PcKLKE$%-%<zfJ@>?=dg1*l6A7r^U{RYG(g>;eXQ@84
zYE-DJU}&sv`?M&t1EOgNd#HzAz<M_o3)^*sXPj52#vVU7#2-maFm)~6sSb}ViiQcv
zj+2zmC8UF228OG86C`R1^Qk>RYIPW=psO)y0{am?O+?-HP<3&fZ5CU=*SuzNsrF{5
z&VUsOW=zK!Y#X!1Z&&quu;a$e8&x7-bxDW(%&Aiz_v>9Oowb7QZfXW@yVrbNsuv+o
zX6(r;Cf#|s2-=(vy?H_z0qe>GUEBe~``gQ-C~Iwe(KgIXW4=H*0ZhL3?j$t(tg*=f
zxu2^om5bM9DE7=(WzX2BeX-hqPC9mEOX>a8L+ze?JziQ9(fFOdBF?4!jK+qB=p}cI
zu)WY>Nl;D>=Ckj<v`PqrkfA}V&Zq&KSmaD90~r*BUt<Ieenfc7)R6^~(YiP17cnNz
zUOtxjC_T&}#XyUmy0kz}sE|8Y^$k{}xUoA@e|ztZ*7-TwSAVmQBW1Q}>`a5BQs*IO
zHli$UwaGA19Yaio`b6Uy8|5!~)AWq{1&X|T*X&Sw;2n4LS~7p-hm4RNFL%jKC=e~)
zhOsDQ^^-W_&C*q?6$s(;QEGq=jIIW;hkm2aP$p5r#Ftb5%esxQ))m~z>#a(W{3J}U
zMA(>YbtNuxD%F-r%k`OYfrXi;ZgK2YeogcThynSffLVJN+(T5j*Wj=tPFDL*tBIL`
zl7N+@X2Tfnr*1j3+GMc_Qzj4=NeksW`p}_Qun<D3tOZfU<%@CSCv#{D$yhXAy?@`Q
zrQMH8tMc;k@`fmdXe?&Uuw-g**+YQ<&MOOnzm=LT#WB-jwoW87c;@u;ccL09V_TN$
zO0WWT2MZ%q$$MBuIuhn)dk?coBfjdWRH<ad>fT}>2}%}m3ZqNfWEJNYw^Avs4^lyV
zcPs_a5j~3#u(edni<6jvG?O7tT9ZELCWe4n9n>fF_r&4}3K)w#tK5MHYdt|D*ub_i
z><ejyn(ZjzOEkyRSBWXKp3Fwy$zxbA;kDoZe2b;;hx4FQh+Gq?Y<~p@Q;oi?Y6hi+
zIYG9tC05E2J#&0;DT_C$7tOK+VS<@p)lZmKh+Mm)v6F!UXiU_$kgSx~l*y6AcvJ`;
z-^<;P<N3<PSRk)~^!o91cB5AFw=TRXc&=%WAV{>1Pcsip-DD+MEklneX4F+?%3}?n
zhlFp?a%_?uBf~oJ*o0A;h&tdX*u9|wAc4yVooqLEA+vP5YU30KB&8$`0)tSHcbi12
zcIKB;RR}$zhVI$zHD>p2BNo)Z`b2mApv{g1J@4_LlXXX=aR_n@<ahuU+OMQ%9#Hv+
zLpNOk<Ny?NhXjuwug4NI)3|S~PMjsPPm`=NHEFgRf))bX{vclq9OvRFdi?QRq(gbI
zvk(6-=n(*F+m^FuefD6OybLX;#$v-Ai<fn^!-w<fx`x`Aco`E9>!cyiFN0#DXGtEV
z)J5}2ilNT=SE%Zwu>--rFOhLuvjEvpo?rDhQ}57M;=ozCDl-g5z2drK{#y;^S$dCY
z;o`$)z*6$tUWH^Xsj^`arrPNUmJr!8EfaDOD$5S4CjI8;Z|DUdgeQ=u{`2iwz?L?1
z2fQ72N|rwlsFG7Iu6`EZ^?&`N{R*o)=r7GzKf@@J?1azuzXlhtv|Rf*Cay73HMeY-
zmzVDv##3`lIOj$3QbXfUj;InTY}PT6pX6JS-rnu~yx-?j?=a)-x`g5`&b(>LzK!BM
zj&=k^XcxdshYP!vv_?EPS&3j4h|n#?G)w;>q?>2%XJkBOsF6Y}B%-48gB7BUayG?w
z{jI5akI|e)I&)cj6R_!{X;yIxu}0d>nf)e*J*T*NRTso$8_WL8IpdRf_mRA(OFlR!
z760XX7TNj&9Lr^?qC=O`Y@t&x-iM&re3TLEQZj~bt}9rvX9(p!!_%f^0r%ERj^p6m
z-^(&BZ^Pl02-nOg9E&}+CS9|zwF}#dDoq56ze8OEyzj1NG-7wul#H`P1I|NUVeCGh
zl_q+Va;lTm2X5SUz)$O8V`B^|ge+<41s#Vez2;1&o`iF|J2;bm;Q#-*(-JH|UKI%l
z$o9VtM*cND&^j@5GPwVTV`q)lhtrl=;&;X;jhQ7mg%%Pgv%7Y}R3w3eZBN70{Yjz*
zmxCVRuOKiCAleD4Q@g%vV1d|a(iWE%sxWMXPOta7C-#1S#BVXPt<KB|Z(iohI1}Sa
zqgQ_(T6Q<pUJbTjW$ZlrN#c83%kj$?O?{niV!O(F^&)J?UYk@?Rrv`I#rU>zg`~Dp
zwiWTBvLQ%=bJg1EPPR<zwM~^`hiKHlWRAf}MRN8m8OZle9b_~P;;W{@tu4UJGfZ`o
zsTiT@+NNyq6Kf(VRk8_DElfw`cB!kb<|R!9!<osAzX$;W-cFFI2GN15t5r97d_VgK
z9{lQQTQJe*-L{oFwpra^Pm$pe%c-(W6$CS8?Ck7I$ROpHMp|l7npMn~Mj3Qjs*JdS
zpBsLA{0tBLsyi%ZvPXEF`j_1IrGV?<uzQj>F>5x}H`1=G$`VR7h)9L3F;beFV@!bc
zrjo49ms-h=(6-0l1XB-VzRXDyPnyVHbf1iO<cJnAmhP{&nXa|noS(zOw5kX;!or8A
zK!HTt)KaD+1g0HR?yx64f0~U}5IgGn0(c$D-%2>fPH&JEpMOGGlvn<gQehaW&XxXD
zhy><DrJeFbn-Lv~pqIS+M<|Nf(Lg~oseMrO<P;vgl}^IKexeUPDfyqYtaPpx{#r8)
zkpvM@GgDTJSs20dxJn||FJM$;M?VMZ4N)4-dp9sKTrEW=gyC5Be_Ls_4QKI}?$CX-
zfRGUq6p_70bAMT=p2m*X3wpO8$zO_eOrTLjbt7pEHhWO8BdH`;-x5;kK~p?tMJ=I{
zjF=c39}v=h$KJf$vN2{<!lLwc0<{=Z=+}SUGAIC|+Y=H?EnH*=q1Luz$E460kZH*f
z!MpqQo0^mm#y@asO}izyHmEf8n(AIYKDIj~_b)?mQAPjgq$_PJ1qU#7T#==_^dy{7
z-3$zz8W4@KdQd<5ttxHXCE`;pp~5IXVEl&h>mrW&R`lB@=SRD`t*~=Qs;p+;spdoD
z?`9X6z&I3cH1cg>YN<^TE7FJ>k-WgSluX<!l(&KQ1!>)74N)E@S(dkPq&Ix^<09jF
z(XSqa(mR{eRx)n;Zn`E2(V8lLLQK+OFc}#y{gKkAdy`{k0Y$wtsy99o0+|*zQ37%J
z8LG^mO6UWKLINUt^sGw!f-W(Zd7$;dy8EZ+)b6q8Y(w+uWwWfhrh6EH(2K0bTBmB3
zei+IOk%5S5oT)N7WClTnIo$M+Xsv{Wp2VRLR*(^M_ZU<&BGg8vW<G_e`sAuf7h_xQ
z(F@&Rz`m`5UG!v=P63XQ&uM;N376?br?po(Wk7a)+Wgl-SyGwZH)m#|dZD28QM*ez
z!qYljI1Gbg2HLH<EZ@v5O*p7Fu=-6}PU4!?J(aBGE*N`#|719Jurq7`oz`I4K+TMJ
zSPshIr}o*a8KkT<n3oR72#H2e1tJ-NxhQN2vw&AFYuOMH%h7`GyBpKPF0(IdR{U;g
z(A~&OA5WjJ8+!Jjy8|0`4gx=lvOrFDl%$(OfVyEsXl_hzC8akGJ6srCSY^iuBS8+r
zDEv+6kVEgz-ujq>;VK7$z!7ku;1<i!s6$lA%o@@!lfLbK>{Ck2!o@a@Nc%@ramLu(
zeae9aC)^SaPea}YJs<P1)v7eta5>($yDJOt>zKZ$QTd)bX1mXAoW9%9U5~>wlxPuj
zwPmjNT6mg%2b(YRv#DFNh_0W7h4yW>EE^{?Wga4ZKiT(+zAwJ6ZVx{XClAM`TSre1
zC!Snc!lk^hcEf}yw>iC^ha7g#ZOORz`(}L`m;4i58-F5r4z$7#jTrq+sqVnDsE`>$
zMHtz}N*&--HB*-`rJGqXmnFU0tj5Newl2?axMa~XTK|?Scm=Nv|0p!u?V!7@HG>jr
zu8vA;Ad7h?%^=urZ&(@?Zp5ouq0KD5thiJ->mgTO5S;H7``aU8{c12??t_9;<+(V*
zzkf)BBzIwn>5E+(uSti-qrBsWKP2Nx39&qfE90t=ZFw%5f)COV-=xg9TDTq-SR>&f
zXrVv*=<HUT{&p6z6&XgySieZVLa^JmV_9N+=-wBoe;h$}9brUW)h+$3ZTzq&{a|$b
zG%a&Wnk^es9lhx#N?tjf+@0wqYVHY&hWpV^OuuNHF<y{!!d#PO6rs=n%OQR4DAwD$
z=_fl<;fEW4g0zU$L&y0wZG3sxqipRADP_le@4#;0TRW>oq;MK948^9z28GSTAG&%{
z*jt192DDbTC3=6nZ_KSF>op-sb#?~vP4zU~jxOTR*j4v5+>K_i>$x8ugF!t^u%5;I
zW%GNUVP9KY8-6zXhPP^XzSsatAIOSx(lPc8-e$w%aliGCejp0pUE;N&f!2}u%Vh(-
zvsCqm$LSPnI>|_p$SqKLXrKl!$aY9424d~T`E_MN&j;bXt>=4?xZ%My4afeSh~o<_
z7<6_mYobRL0+iC+>UzAN%&-R-_OPVqF%~b6)-b`PFMPuTj%iTU;!JLcaUG(e8O=iR
zchkPRO-n9aTy&a8l;jqJelcz<5@Ltv;>OR%$LHkC;|`nIvO~m;jw3pu=}q62V}r=e
zAEj{Jal(@AlD!{~zV%wvX4;XRR9)A9L$2{7BC-TGyr2?qHbDS!b2|+=#@_1be&PCY
z!4$kLRna@=XKLo=l~HIioLb>?b8_1CXYXZs-+nd@br{!0urhc}6ZnQcZp|<=d6Zx%
z7)c*+#`_n%O7Y(i*QC2?xo%J8AH>;LtRJ4u^WEx$J8E0$Z7=hIoYpqDUyu0R-I<Sc
z9KTmXcx8UN*ZSA*HssN3+IX{j?afa4w?5{yetw*xr}eowbxt^X`r=U#tcIX#uUR`r
zGFHBopc0s0J?Bcq<!dSa#_aLR$lUFCaiEFzY9JN@_3qkC=a)F$+)Gm3u@n@&h(kJW
zDA8UungcujMYS7*d}P~;*wf5(e`GWB#Ra1ZDu6?qDV{X2P{R66HP{oG7n*QT5FBNg
z$vDcSBH58grUS-+npiP!AudY6f<9O~=zb8ESO|mYof^EDUl3oZLE~44>|`l~SJV^y
zn?y6zv0^z=j5xHwsA5_J_exbJev(qvV$)<1%mH~I-i)w9)dZthilOA0S|=;H3JMfn
z1eY`b=`1Eu#UFv3Ebxd_>q>QTn4Jig6C(3fMl@kGTJhpR!|-42vc#c$rza{Js+93&
zuNX!wr|AzoFA*`0xS)%En_QMqG-!;aoDh8W4_n7fAPb3|y@K`6C*wN`;lzp(qBi1(
zt6odU7cz=KE^U|Ukj0PVRF6=`7%(+M9<T<;h$#9~M?x|M96Ml&Q=1HGiZU~#_U9nN
zk+|<fa?quNFTWPJqzU?f#hmMfln^UK8-l0b4G@oLa1?XLf<})ZlBP)Q3}Gs(NKR`Q
zI1`H)ToNmni1@EWBHI=MoPbeCfdqmAMkAm|cGXy+RgfvB2PG=f9WyyfiWf~ZLrX=G
zgm~dX5uGY-nWGvg%^VW%`p!y+U6=Y=g}DC|8)IV5=F}eaP82Gf_t@{6h=FgWZQHa4
zlU1ZD{SEmjo%$q9C;%7U^=2w8C<Xk1ed(cON`=s*&dFUSUW7KD&}+Yu-B-@L_vhxt
z4rYwWPkJ8onSvMvOQe{z)WtK)fP>qGeWA?;PETs46<?d|HBrQtJbB%AVMA1fn}Eqd
zP}fYpr-c8vsjQ6LIADJJ+?_w*N$Bt<#0x~iq|ljCI1K7Qqg+L_0L4HY%5akG*x?LG
z*kn&Xo+H&OH=fG?%bUX+c)DLmpDWdChXDeU1Z8m_vDS3YNes{0**TFM>)H2YK9YsJ
zDE_<0UY?#0kYy6d&64!4Vj!1e?OY8??K^0r==od_m^nTii^B^GzDF_#xOucjrN#%Y
z6G3?8c7zFmX=m6Zs!%B_cywvSxSpU+Add33!CkyB03^af7V?IHH!OhMpW0)=A_GOy
zzYOx00b64}74`44LC3x&bCq9K$SnaRjk{i+lEsS{;z!*Y7nJj2WzZc{IZ!b}6)Bb4
z0(nV78T&IF_Zf=jN|t4~fS=*0Q2Ieyx+Lb3k%&;{?`##d4wf~IqGgoB1mK-z;@c}O
zBUD1D;R|jN3b6SNA{68<Jbhyh$HR_&!pvPrJ7j_n#pc=yLRSybad>Y)B!_vTvaKIk
z02&Zvu^qx=3Yq=#F+(oAv`+l@8T%2!bDN~Ne7Loj8(JW*`Thk%n@AvtL>qD);Bh`h
z(Z6^iH6r<}QUx|ury1q5M-e8VXpL$}O5nj4g~H7YtBH8A4CXB~hHR>$#TcKlL1E%G
zY+=qJjNrh>_|WCb7|zaE3V`3`fEP4uv6!g~=mUNQrgQQ=h)i)n^uMu$y9ByFcOb`$
zLIcnr2wfr%s+J{$!Gj#7Nf-qvLt~B5fOM5AK`G_}lnNjyfbhxpm>RvLvhP?_vEq%a
z+wJQUsIY)--h_q-{&lvYfdOPy2m>)&t6vfE7s_0|E#2a{cr77^&I>6`8S78czH9)o
z`*f}RXBLRe`0$V}iU5ee%2dA7QH~DFxq>og94AR{c~`SvoG`ZYA?1++>SzyoeIDOK
zBO_H-A4-xDGfz0}?f%mCZBAey_ES66siNEtI0{nxsk*c=?*{U^YNfR!gW1bsHdWmn
zLu<qyf8Zede6eNppX?x9$u&)Eu4UGRaWquNyT`M(mt9**QgRNjCC(4WxW`WY3|up`
z_jBN8RoR$$2(J4EhO~Nj9(TR7I=^h<WPA+#CI@IQk+8vX_65{__vgz1^OaeHiG<a0
z{OwRyKFF%AoDf~;-C^b66~fcuJ<F5UVA<yOenoZcj0*6e_`89OUPjCCSB~Iz84_l<
zdbE$050QZmaW1Tf^JcE}onnKHPeQ!Ma%MTJHCoTB$F@4+-%zQ_Adp;pcRcJZ@lz*C
z0XHxZSh>y(yB<#NY@f}}`;jYVyK913zL%4M{VP~IeEeD8)0v{7jkFyeS978P_t2km
zY11sOEK3nep1RxxWv^0*ys@#Q0lQ(JR@~E_Bm#;ulde|COmTVNN48^#ZyAGoC;jS$
zM^!KKh%wBzwm7=AqNP=y%;z_Z(!ZKxeU_bL0qdOnb{`%)kim23;(s#Epn2TgFj9Py
zZRg4itlnH~AYOWg53Y%r?e<-~p|Ja*1+3ey6d~K6q4tm<UEh(Q{t5b@VEzgApWyxp
z-t}FYqZu+G%=YlAV2#7;jAa)8J-R83?%#6k-;!Y#|Fx=<cmvy66s8xTr2XevcO_rL
z#Rk_!WZqKrr3C^3r{yE|kBY&TB|G-#9Td{u*}<`g-}9fZgZzr&&Q^LzH-3)WZ36Z2
zu4{9=H2LgZQ67Bwvi^{&f&J10vSn#&`PTX|4Ed)kN8iV9Kl)R3M2fVBj5jD1F0-Z(
z%^U;*fhE*8NMUbV{l3;4kIk3n=MXOvzV)=i6h;x1DB50)3f(R7*U_^^zFeTMo-&H_
zmAm1rm<`NUkn0)r`cZq(efHstYy?%s)lx5gSFX?h1%Un^4CYWGX;%GTUKSh&1Vr=S
zWM)jPY_zN#Z2!Tz80Nb4+-gniJ1-NkUJ;L^ig1&3NfC3{9^TUV9I?#w?Pw>2){>!A
z3M=-ulz&(I0QoTC2E7GQYL;KBGhfrkS?V{qW=;pLcZ-W=*W_{?a-TksZZxxOZW518
ze3Hf112`G|`|Dd+bPDUyV|jF#-EC|zJ7$vSrKcs0kn59MvJpp764%)ais>~(m!wS-
z{JjD$H7^)Dh<-Cc`2di01d}2w7smy4f$v=#h>X)ugjS!yM<iuiGeKC~o2DlaMq?VT
z;cK6gMn|MouPRCy$0bxT=sRwMr-Fou8z;7Nf*Zi>UE=hE?Lv(^@N#o<`8v4j#F|c!
zgPZuKA6uT;-ZKOoQx$Lmv`^l+K3sWvJ3Fz-2nA9_i%5GgqgW4xQWu!?MY(lu-*#_7
zEqvvMc+43c?8b?o?Zz#U|IE)#kiEs$u36qI92^5fCx(U^zG-3p9<FJV`h=IjGo#id
zSHDUup}u2hp{D%@sbWEj@p%kU@5}D>eKWcHtPY+Ep9303JcI?I?$l~bPQaOWE4V~D
z`vR&4%R+6J1P+@sAfA*M#auH9BmUXDkM4Oi%b~z<PKgos%R&cU*jNfN<Q|SezG0qF
z#x~EdMq68dTE<FXwx@1&6!d&_-|s2|h!S2K?!&Zqnb4r0g87zhfAohbISv@5F5)(y
zlJSwGvA_!o3uaaWh1B{8-v?{lUgE*rG*WiFGZ54FHvvz<k4-fKx=qR_0h)~W{6D<K
z6>VTN0f>cTCqLuiviJ7j?oDVh@zm>~q*j=)e!`B<Dc12#{yG6e^)gVmxJFP$Ye;@Q
zsC&sDE|^{mq1p_6QucqSdQ5(m8$LyhPLL_U`G^HTVjlxy3>U}_G5H-92OvOvQOYDy
zE5N|kMaqHdzX(FvSg!0c-y;W}8nbb8zLP8bkK!iSIb30!_RUHX`4xB>>c^ANiW8%a
z`>5tYHz_4ohh_Ueh@j`8914E_wL)Ha1nF^qKO}L4wj6hD7Ozy$Kq{?gi2(kE%_(K%
z4~DRog$qPr<2X&{4}sONJQy*Q?TtWUzwBb;i3X(XD8~4XUsB*VAazC<;T=jeh$XT!
zA5u4j<_;QP(hoLszaUZm)5pe`RNZjv)9C)4-tFVTHN83w8#IrC-(32pM20A1BOMhd
zK<|5xGaf*vfr;76R8LuLuMl&V1$}hQP`V(Y;PLQGs9ov{%DoPyTNR;?u4M2VX?>L5
zD}(CWb7b{bh(DD{RYWAIkE^SzwULB7?h-XHF9;(3@IN2ZKmUiayWL=qj>$=H5JW*C
zd^g`>&!s68O5{hhj>y~)>`YBEyC`VCH$gBmN<2skG%h!9xjQ*pIGyNH%_h;hNsq#E
z*5`zDmXS1<Zv2k*$UsGCH37?j;y`nx>yCI-w=5Y7cfM!BFf8Z}?#&g8^uhU-mRK<v
zc1~I7l>ixuW2(~6FF!kn$1mD1k2@7JkWnr!EYgTGl2;L6V=aefS`O!Madaf2C?n1&
zJCYs^UzO=kFRc!=xYz$~Vp14ykVar=U5MFQI5*nK+xXVZnt7MQZyH*N8Ecdt$v0vt
zJ|Ouzg)8eI4zg9<|MhF6zMnzSepRWzBO&xkTmqv1YC&ee(tkl5p+8$^6)Dw!9yJ>b
zD#qADs)+_&G}3UdIReUzWWL{oWyPQq1_IT0+!S(DPzpXEVK^%Z+yi){8mJ!JpE>h@
zpX~xfM_kbw-b~g8E}A+N!Q_!jUG%SVz5`gpXek0Agg+*>l7JmJ=m^d>2jM3u1KmGj
zH!bw>8<7op1CxV5u76E(=P&LfN+5C52RK(E34E)Kq5cZOu|Py1e38sXp!t4O_XW?S
zT9oyqDVA)9MLJAN33|gNG!<7*?2I2lwZreT@2;1_mm7Y#9iO8<M9)Lv#fKs1oh3xK
z)hz1`Kll3si9dh85Q6kwr{WeY;C>8!pnN;HIkqJ?_}Sx)C+O-Cgo|97qns0E5vW{y
z<yOPE+xwE5*5dTPAGQAYD98{k^8q*z4;gM=(Cc!$J<5C(+?vQ*T#PM-Y~jjP7#FsN
z^a-FoC^lHj5ElQO>(;3~;P-UrT7_|!$9@ZgVaM-6=PgQN#(%rNz8+JlxS7w*%A=P$
zAb5;nA|gzr<=|zDNi_D=eg30E-JQG?715i#GOLEAnVcmU3XSr0;f}RWz}HC^`P*C?
z9uD+=U&a<v=C9l(Vem@|i1w0xxsBRC?|+@;K=dI%7#rA&3-(Uno?RlIj7sFej|;wq
z8TvcRK9BPvAQF`1wv*QmuCpBIVnQPL#t3GBahw7QQpV`f&FA_;;b)T9=UeKGijIuX
zB;mR%EMN<7#J5ZW<Rn$rZV0I~B~lxH7NRJNe}ty}I#>=rcs-u4W*&eQ*lyxC-5J=$
z!F>*aeI4I<Zv|a*<`Tk$P3`OuVODY3X~vnLJyR&(?bihRmc%zD!c>Vz=R{xUB8>mE
z8L)CfGgyaRF+IBP35iPNp4XEo#jz7oT{&!Ex5kkQh;Lp3ylV3!H3W%T2Yy3vNV3mQ
zwIfLyMQ}FP5*-S#=EcSn`o7oSwXjcPbf=$6XTBQRswSsuR2wjYvwBTWd9a&4Hfey(
zfXvTG{){LPM1Rn{sxL2M+0oXYP%s+%hVpdE01Cg$WYtap>&Utnf%o?~0QNVvD<&1w
z0zy^50gC1;4h}5u{;3Xuw!o<wyd*P-Z-Au_7!HJr8h6i#ciMv0ICYQl>;2oB)vM#%
z8ZmU>+xKCf{6}i%R3ocd{7%ttdo4tK)u2wrIKEo(9M8vgY}RJa$1qP7;^$)glycr0
zG1-XCEl-ugXA);R%6V*M^Hzt6qO>?a&Nag!hL7#K7xjsf#T&sy(;Zg8e&o^a$j&b^
zR2tO~D2aaD>q;S-myagUKYa5!1-9@onF1;s@=2&fz!8=5VJNs&sUP*(Bnd>n%J^_D
zz|UNIdSA5Q1kolpShm12rI}*?V5~<iq}taJ%{JZ|iMD)ixe5RIX0W(ZG$`(!TWd9`
z0Y7d>I00+mAOM0sRg@TK-v28R+9bz<(%+~asYDamG^4qiU<%5)Q{{khk3NVu%`MPz
zZHg~-uhSQfr^T@+@KF!yXiu=v?DXe4>Pm|<7E@%5=(eeosD}Z4hh;9+FrMH#8DCZ7
zrrj_nRD#DiZ3-MkwigF~jHKAcYY6}Tv#vR1A);5B9lq`8Zq#xd!QDG8C}m-(WDEFo
zKX+K9<$z7unX05whPn2!Kv@F+BPB7`w3cD%mdF{-*FOo4c|6KJ@i0y3Id*C<zGd7g
zT4TJW^=cJpmVov{27Wn;IufWz+5Ip>fh`Gb#--B&hn8l+!I5<~wI`;)wv~f7b=76z
zFw|$+bUmcH8eDz#fXy`FD_oK8t8?5}__8(H93e(*v<kVj^xm7NJuAsLMO)5(&}$eI
z26mn7t~{K5sh7j$Xa-QVv@OI2OGa=yY*QgGlM`_yuGsa54M_F-mF{!iS-s|d3EXYE
z_hSJ^<*H-?qAD2VPs2D3&~cHjp1LoL44bP;Y((N$hk!a!yi%*R_N+@=zqG{V+<6(F
zsxI2=ft(2cVB1COA3Lj;-(uFx-;uOPrj+i&IF+eap;1!XB}f=BgFf>xxxS*O^WqKV
zecG+4M6B>}wR7@}vS?T!?<m&t&q1<R1u=8FuD?cotgZdmIqB18eKME+LDw~@pXDZc
zYFAlGs(Q&E&yUxhn)T%`jku!Mo>-FkkDG}~3&?893XrLzpi3mg_*8N+(-h=I_pn2p
z74&oJk{D)Tvue-GeaT%t9i8pW34ZTC*a)Bwh9s_s#mbkbAl^x!Xq}`|OYV(d8#Hro
z<GCo*7{j_9#AriQ(Z#1~B8!E_stV8+DS?B>-=u-6#@<BwGpS)$+P=CRXTZC#Ux=lk
zPzxdm{C#mT-UO<tluXes+(c}LM*UXiM!IRp|3EUuvoITByX2#{T0uBfhJ|NOruk4s
zqoQOZw3O*o#hgguoVurm_kGDJfUXN*x$rqj`K$m}$UE5m-8Udt7_mvOC@;M%wXyAj
z+^{L)>+baoGXaz$=J(_y$t*Vuym7s^g+LC&PZggP0!EYRL*8|uaC7!prh5?T0e^*_
zE%O8ZGYj()1|G$3_ZHE{(H=~eG2E*U$VAi3w;&8rS8dGZ)oo@a-=l6xo&u_#eGKWc
zo*>a+@o?z8`8PyMCM8z2Yl%XQ8OVsp1sK@IVTd|}&djFB9<Nz+KS=2A^&zC5(pdX(
zp6k>dhE`B&XSbfwk;Xi0aXHLI$wJJn01VffcyK~q#i+>I*NV=6pB^fNvQ;MnV@8}l
zFOM!(FOT2r?LIkeMuW*5$D*#TDp1o5LmlIxKkoH)ho$#e5>EP>*B688ns^eYBG`m8
zBrf?56y750ZGzD=*AM&yeBTQ~A0gHMuT3r9^WY8O^>k0*H%JJ&``OdrN2gOhn&$<a
zH?Wb5zq@RF1>Av|db5hV`Fs>B&z%iDbq;nMwkau^{~Cz>7LYG&eviO(QDyJ)2e55{
z_nZP(W&cN0WpaQ~z^;CNAN{iUMZ&uVubQ7iUb%c$78pHm_JE*Q+xmtg4CqiVlXty$
znV@tygstJ>i;u-arJw$C1y|RMk=j@>1;y5Lu|9gO5dpQ?ORLmLBrKq*WLr78y)g9F
zB<KMpsb*lz=yo=yZ5u-Uk@&GPWvtS9cJNJw3)R56qHNKBp(IZVe6(2_Ts2D7;a*r7
z+~`&^ty$jG5=YbDZ9^4%uVMFUazr4Zv;KRjme=P5;$6i3yi8+K8{S&f=dmo(u;LvJ
zqdCSY!1dq|%_%4vpk&-irR0FQLX^n7K(W-nj&7NyR)n1zbOi+RB2XoqjA7jZTeTgv
zwXgIP<u${0Uk*N%)i!o)umNi=Zj>P2Nunslw3VPCqZayG#E4sHu#j`BR$_?Dwbg1t
zK}uk2r7WFR$IY%v(#975i7KXghC=tZ*CzI37o2)qgjZoS-PV+AJA2eitc6`x|5>A8
z4s7d^VUiKaS=Q0=>d7kUnk9ts=Bo3U8p*lnrh|8R*Wytq*!)04<2aSp@<*&H?r`xH
z%qHNz2-R5D59Kbl$9-}fjl>t3*>ULphVgOR%!33H|2lDoSo~UM4Zg0%qPU+~Z$}tK
z*{vJ!JcsdB+5G#N^`%nE88I)yy2m!&F2)U&GRi{ax(r&c!T{@;o1g#r199%I^LGEu
z-<#8#xmP<m-4EqQKl3fFO}#tZ|EaJ33ZIiG4@=uPN{5FCr48c>#I&>RAwF;W1?}%9
zQ|U64neuoz%AahFRhcmPwddykCy-YY=Cx<t-&Nc|HnY}a%+?sAe>L+jJ^kmIhu}&f
zTK1AUJI$H(1wNE*gs8^gd&(@ku!V3^E97m`h!C_N$a~El&m#7jw(<y5D^8fz5s^$z
z-g8gpBbuQdEX-zf%uk4f(A%doW$<2?L4fXg!;%(wD!uT-*u2@8c_5D)&W1C!l8HU$
zRw(_8t`N=)E|d{?vofbwZ9tDRGCNN>_%1}2WQ-3ASZodE$OG8-=W~ZxX5eKoUu?KC
z&e55wIPqO%aNd?^jm@TUfo){ABgD$s9LJs4=4C}J-uiP02q{`E17ADmBaE$_jW*Fw
z=L@i16rYs;Fn4DRtQgC{4Q0XjC=bD}CtqaS<#5G@%;y?*C=*8Jp^P=TP}_fS<)>dT
zA8lpKu#5>X1(Yx@oqV3>yHySd1+SVf-#g>6RxzX8T8y^=cV^1~j<%Y0W}dbe<(=gp
zbe1DVKB-F3*V?!rczze4WmgPj6H)@~WC#2(Cz&&pwir7KN>kZ$WL&NhbJ-W*^2ck6
zIsi~0A`-MXkJAcLm|2R<=@Q&sAp4DTaV_=o=lp<J|6(GBq|$SLEUXm(e7)tiyRuEG
zBK+O&+!HGqSa*xNS;#1#oq$7QVERvZ>>2L7+lqT((U($pg16o~fkX;Z3%8Zrs%M^-
z(<<K5=ls_$1+S@r?z$K;lv!YFE2I}JyPrKAC;5b)51*ZT_|P8vdVZ=T_or$Bt`SSO
z=6O~=9iE&A&ysmXk}j1ROOMT#mD1^K>Y%SD{6i|UIqi42>=pjc5wW4a0K4Z-#Jq&4
zTI{laua;-T2U46<x6g1kPaSqvXS-cMUh?cX8?RH1t6(&D^+KF)x4N~jlUL$d6nEy>
zq&{JxaDTe__TzOGGL?TO|Cwx9Aw51~L~oNm=~rAux0!@7%#k%s!L6$!nb*QmHaQui
zf-~aMH!F?SRn4`je=Or+eorwR1B<Q|$Q+)Te1H{c1A9MBZ}26Y9hA}j_Q2Y{Iquw?
zg75aJKp+MmDlwHb)hgrjJ4gx+?@EJovd<fx0_)dGZn$0XOi^GZ?I=j)F{%V#?qpq0
zqcg73<}zt~Pz7<M6U5S{M{aj->l5!kCvR7*YVeIxh;sUn29xW##0x~K!(b!*xCn!4
zNi+-EVzB8E6?pp0>lH!LQ|#be`+oKc45Xd#u=SJb?*U^w_N9-<J9w4nAuVV4*-{4!
z><@9Ciu&VNEB)=7#tQ4Xi*~eQ`)9}%keG`=nAaWZ55>HR2-S((v?zEf3Jk*9fgac(
zcs>CBTf=khG7v`mH~@FX(SGV7kQ%w~+X46`zLM|Eeo8wJV^8YbLGT#B)Jlue)fk~&
zOct`xX;GoldZvU`VTJC!yxBXYZr9;Zm!$P{o8SKXv?WeNyLzn4^<7aXGOB8|FnRy@
zrArUW>a{C!^AD`*Wf15cKp>Hm{pd<9Ra@VUW;dZbMo?VF-)^hKuI>IBPaX$`6_=gv
ztZL(MF#S9KO|PJ%-TC!+RXTX`ZnG=y%bavwF~1hFCfq3eX}|6uoM^&wR=`F&e{o&C
zsy(^i0NZR!RZw+NVx*54LEz5(CbhA58_-4TDc#anYd7+IBtcX|QaVd4n_IKIv+;Xe
z>}@WucxTlzct-B9j-V{jZ|NYO?bs~N$!Zx*7QwP<mGWvF-7bc!x!JjB&QgCREQZb8
zM_S!n!);?X-FEAz7IX)F;U^7r$L7-aFR<Ox^WWH5>xIAN6J)9qDPCVEM}Avfo26{F
zgr6Iqky*<lu1@4-+=l{GIl*g>!li#%a_$T8A*>hUv5oC-8HCU5>Rg{%Jv$!W7@%`9
zv5@Q4?5b9zJf9Q7yH7Mvlg6!f*CFzC^WB?1yo1!3K&f5jqxh;jsX%)=hm8!Ldc*G>
z-P(lCkv@U$W`uh8Iu-ZmFo5QTgY!mm#;0B`GS6n*`*j_QGZE8zZ!LzuY;{f#k=H!J
zw6>BZDo7wGU&lD}4!A!c9emtwZsGN#cE1-ldpWS!^X_t2<MKxQSxY{PiI}=QKeh^T
zvTJHwSV09D#_7g3AmUvc0;d=SW`>&N9efz}e`IPuYW}K^9jHJ{c|+v+A?EQ9eIR%5
zkq?U0+|0z$4|_VPqgdeK9st*X>M(4DOOj34@V{+WgLV`@bs)e#^%SE<wd%$}BsIH=
zYfVm_=Yhx|uBZR%PX8R?>F`yUrMJsJ0xSzTS{}$`e-gSE0#Nyp#kku$D+01Y1U0`@
zkvQM%C-H`Mu4k>FJ2abFfhMT-mr#QbBf;-H<fS~F-0SPW8W{K<8wa&hNo}e`2(FGa
z$C41)Zy@7UwSUcdQb+prG<BIzK+z;Al{rc`biH_vB_gYZ|712kBO(MWG4NsK{;+ng
zniedFR@(jmiP(xAe(w%d4W!Ur#yNF_gz1xwA1(NhPEZNND@MRvEk}k__<ulfig~xT
zfFM_!Cuh<m|1L;|DbSLW)aBs)y2_Z%^>FE*uUt^qBVZv~9(5}MvaQw#?H5-@eZjkI
z)g8iq7?F+XuvW{jiEd7j<6)&_&~emAbUoQX{yAy-fNP4QGwcSzBi6>$%sh|Nu42Sw
znya2|RLU_em@Pf#-m>fiTvcbU?R6YCU(f#{tCidWvsvrTk&|}ef_LGf**%Y8GY;u#
z^@#`QwTjAm<P5g_aex<Q-N>TI9n_e+Sn7tElA;1!ZlsjWT9_70^0qWI&#a!VXeU;+
zS*PxNa!Nm@qO<;4%?e%ycK8agqG?ie5ic0;r}=Bb6H~b_GilkpWtL@+WhYnCs8d4T
zlzj04QMg=P{uIj?2|K65HQJ8<UC!|f*iLO$0i$U3skw)*t$=AbFG@u#KURk<EM*~M
ztZnYXx~->Ib6rzDtKx5Q)pa{{wdLi*tDDgvv-7;{=AQ%6uDC1!hj;i&RlRo`NoT<7
zY6|XF%Rll&l5@TfhV`A}OV)4o&bE(}`NY5gNA`Bek9L&2hJimGF<sUT^k0O}CCz=T
zjTP)kf_Wpu&uV{Hk1JNWR*ll91$l;7<MHvAZ#~X0Wb&T~cwi0}ZYVcnx04K4mHy!c
zB>@4#-#INh8wd>OM_9;$5-xEQI}Wh1y<9|JW8vVOa3>=uu=t~ZdV?H>S2VHhUW5h%
zI@AlnN6>SD4q9_ZuW9+UVF!pa=%k4wz|<i{xQK^+@K~B0L|_gQ4ODLZuY+*z7N{U%
zZ@q>mJwPFQ<e-6>?Ze71PPffqu#{T4obtnXe=Y|z%UFLdWmkY>Ai;iG8OR1@`g?2P
zkfCp4lxD{f5b3*y>?&;%1^lrg#IZdFH{h4{S!!~KlvInY5LpAJHXa*REgeP(XF_eN
z*Kg(@elphr%jiEaC&VbC!R)fFfKfiMrt=qUmbLzrGi%I<X?BNZ{ro*Qy?1gsl&2Q)
z25J&&vRYmcxlle`39)yrMR5a?aBj(48oo?1{(%(;1EJS9Zx$?BgBcCc0ggw4cc4^q
z?@(Dj-Q7K8wt#*eXEt6ew&PMPX~+3rmN-n4zfi@~J}Pw#O(gDzouU}IflTWfy6wle
z+FDo7XS7eML&cjXW!Cd667y0txZHA%mxq^e-P=c(4hkb5c{}hCilI#&((-XEV@XC~
zVbBKgD<~xBR9hsqGNdNwghq>kZNhtM7%w<DO>a|x7Q{77Au+0?dax(;7<+fEnqn?^
zHSmVmD#+Oj&Ov2~Sc7XqE;ek*s@A27n&}rNr8=XlOH}A+<Eo`)(Lh~sIw#dqLUCxu
zQ8R1?{<`9d9&kp2KOIPI+#9>Y6@6ECCTP?wAB|CLC>%oUXK@dRc>4&Nf0pN^X~Mh?
zw<B|v?^VFQ@VrS=Txx!bcdQ@HMwHcwSn<jl{CgNhm60zk)7<WkL0)v6IE<OBCc6g2
zo!F!)R2DeN+#@O?offN-TRKw9E^aOeCKg(ygu~+Y1#?HU=U$8|T55|hP?WnTC-qj^
zq`ZkTe1>%^diuKgxX=B<Rg|2=?zI<s+G9K&9QgvHSY|o5pl3;}fys>pkzPQ4`9E~F
zZ_)z=XgQUv=GPMg1;$|VIdeSR8ZOr}h|SbvU}d|VT*0v!>y^II&upl|R(7J2-|T|_
zo-cOEQJdDDv#NawETD`)TE<B(m_<1TN0d@-W2FW*UxAnOUdBV1UkUQ$UWp_(7Jyl!
zZQ7ZCa1n985Rnut^&Il;nY|GAABr78OI(-ynRx=5F1?0i`J{M0d*wE9o4#25Q=@h%
z*i19mV{D8Kiu!tbuO&t@+%LLdbl^4Qkt!eEI-+Oi{*Rws41HBQ2~n96IcS@fKkYG7
z*5I@N1kVeS*snH3Rs@@8sCycDNzjHu_j4D9@L5$34rXfY*!FN*>A<x86tIi(>yZSF
zpZ~XJwd;3RX)_6i>L}%OBSzNc00>P<T(G-Fg%3Eb5Z$m^uuTentEJYu^)GgstY1(i
zfQl!YABx{!N&BlWL)-6Rji*r{;b^aS4~y%{yP3R>K3MPFyPCi2Ji1@I<4t_iJ_G2{
zP~b%?I`Obei0j%-0@QWThi51X79o=!CcM0FN%J4z2zan4slZaV<75D6j))YyBB=Dg
zI_aUVyT7PH_(ujMUTogbZgK{V>Ew4WvnC8Qat6J=UK^?8mdOeXB`q{a3k<aa7Wz*m
z@$-NakGi#hvJAPRW(B|py&<T7k+Ud7c#8!ITc&SjL*#8JNZ6!rZbM}4Gqgy;v85RP
zj=iLQzic8bW%C#)Wr#;6l_naFNav~tQq<Lu68!;zgS0W~K!ubaEMs;j=5rZ9fp)@(
zW_2>2DWXd+HaZwgXxDXtqrXJXHo6cy*PI)^xRWsnd}?i8EJA3KwnW2%uoTf#RlphS
zxu2&D8)}o(3`McH<{B|=h<1n?`cMHwR>kEr!%Gq(u|lq2wxNW9VmG28ymA!_Q59Yp
zC)6vqfh)+%J|VMxknjQNpsS|EWKKTTsemvE|6S!M6cqm&ghZ#-7nWc5Ka8DIl<2^k
zh1<4m+dkc=ZJVcU+qP}nwr$(CZA{<CnU}dME2+O$lGoI~Dtqrwc_H~9CPIo;JPEm~
zh^9<F(Km!&XQXmn;HiJ0Jqd>9BKO4LJup+Z)9N0q87^069G?~_@olO`qvo+$93y18
zB5{^%1oNG)pL3#z90HQ=%$t*|@_tO6l!zt@1KBqcAna#{?Bui>ur073+=BtcY<8Oe
zQbl#rC^i0PpVW^KeXFz0zuqXFI5;0lDIb`kP4MNhLiFe$C4tERXafiadSGue!B?!=
zl!kdazZ%lpCXnvr-W5fF?oZ&`mA~DOaqhgE6MiAa{klNg3U^DINV-Ehe@w<&?m>Vn
zG9jCWx02ypx6fno2LEXGt&-t;BH~cNSeEyL<<~lP3GX+sP#FVR5G%Ar&x6^+GNgP^
zrG!siWyIbF^hfg)L{G^$M%@s72-BAo^k0<_28EL(m#L`N=#kb%1GY%r#yHMkvZ%|N
zSBwPKKJ;&w@CV6Q2Bqib;_FnQX_MX^!Mo`#>Y_ABH8y(IIyzS_E|!KtGyvxb^n(Zt
zjmER`hSByq=-J7GKZ<;|ZEm%Z-ggRR=Mda`db-=``0^UuBl+nN&HiA5q+?qmLRrN>
z#GQtp{A|!e190HdLIQ2l$@`K*)d~S7Q}q4-gEDMnjPL_pZ~ffd;O=Gh_uNDK^d0WM
ze!ZP$)}Y;b__&U-EBAD5e7wE5Xj1<G{cqm|VP~EiGBE(aY%%}<<A1ANu+pb><zV~A
z#`6Ct7%q7%T-L?vbB1b8oy6!?1xiVEq6OKauT~w%#ttJ*nAS2}EdhZNeFw#WHry_4
zdX&FnHQ*WCF55h2wlXncv}3Bve-Cf5mv52u2?|R%o}ROJ>U!G&^&>n^D72P5_O#(a
zrm`*H7`Qj9^Z4IgI3Mrt%uc9)mum*HkO^0;z&L(56XttrB%wo9cKd-OZYHW1-vtMo
z)Au-TB1xaaU=o$oNsiFPT02pK>qS_BZ$z50%{EeRgao5QpbXb@VZ+NQt^IA7Enz91
z9GHMN{bSDWS<)399-~fB^ge^rR}zdtI0A0p?p9ElTU<oUniD?UtWF-jI4k*D7{9gA
zi2Ye?8UuQOUm!MPtn`5^;vY-4nwpv@0F==DG{nFJvJx{W?MO489Azrsogcs--zoe&
z^pR>=u$IGF{H=J^zRTq|gvwE3lRAh1@^FfnF^*9Tj8SyYOc*xT2i-=HqAoG=h23@S
zwmcaTNfR<~f#^6K{1N;->d*HW)t)bV_t$-`ePP2xpz+ZMau6EFKTd)voBnM<Wq(d@
zFhiMif(fJ{ctq#`j1j}MQZVZWqkjzFSwi-%h~UVkdCal+#>0D0hV0QiqWbK4z`mwu
z;HsR#t(YA}C1bO^BIFnuSO&soNzr6ZCylRRB4dg(IRzKh7%(~O1or`yB09rv26emA
z4mwCM5*~7Na1v&-e6ic|0C~C~P618AKCSyA9pLZ$+JnHf0<8~jpRgsz0Re-WMP1={
z|3=IX&#H3-q*dq(PwXXfAaXk7Tez?pAeNY6P_Jhnh;*wyoNKT+{nd{8vJS;Z#wbZ|
zDF?n8e)$pPb1HC!^Ok$a6`f$aEUvkdA2@&N04rkc*(tYJWU{oHVQatQy~04*RXO1`
zM+bKhF?orkn_nC5-YRLH+jC4ddu;4#o?E-o#4V`0x@w8L-0bsp#d0qQt5^akixO+x
zYFQU)f%Bwb<-)3EWIY{kj5{t-4$dE<&=8w5Mj;a$9c}E&4g%?~C%_w3ZJ=NPMp_UO
zmm)dC`lATk_EMKnJqGe&%k9AX7rxQtQqplYtiS~^%USWUWMa({#nVx6xF-N)OJ?UB
zi<T^YDoGcF3<&@d?jp0}kp{z?KvXs+^rB&PuPj!hYq&RJ4E*KUcdy{lB;>@zBZT~<
zH#rjM(OIkp!Fe}+*W4aN9qkT(V-nQP)bX~=kK2&|vA|`9z$p-9l||<pL>{Qjp3^Xm
zDLc5&o=Ka=0GA_V_bD|}V00U6#5%M$LZ2S22X&1~;g1Fc^!#-$`V9dxnQTvqLB5~m
zL3~(%r?@BV8AO*)w7l<Kso<ipF4}1va#Jkc@Y=QoCN0Ks^4!s%%5y9s?ZbDBkZl|g
zwKj)W(1bv4JP$$mZb5|L(I00xOv>kA9&6%kG}cl0yo*UJW}8bUVt2uiG{CTY-D@4$
ztW<1C@@huLRJ`RGSx5<Vt_02tAeJ`LyaU<ZYdr??t!FPB81sx5aoASKp9*{>s-?S0
z^*&3%can7XgV$UI*ks1kj6&M&)J26(pZH_$0(J77(7{V&$UnMc-j$!<K-yX!-X%-y
z@S(3F;(iC3KHhsm4>Jy8!7EuR37+4X^(KFS8rKbxGFF*vmLs=XZqjeIwHJ53$G)$X
zGiHZIp+A(}<;vpDr(l>&eM;UT*Sj|#xl*!J0-7)**5Donht+iBxF*Lyu?9^0ebl=C
z-b_v5U<Aa0vw|;z{{#iF2z9#=DfOyv`La??R;w;0q}1@?;(8HA@!@pU5k(Q2ffRDu
zt4ibRr?Oc0Y7)7?iE}BXSB=1*Dhn^na+LgfjBRznqGyfFZK{U9hqw=_Abp<CIrLFs
zKZ5VdmCp{kjb^{N))M$=pesLuB%j!WUv~X47(bJ7>G5Iv!61kDczo_it*U|Dg^2^T
z_GE#$81*pwCI5b5K}stNn0p5WKG;K^FyB@y34E4?zHr4wMhxQqq5d_c3+Fcq5f}+6
zPgyke@O?T!G`t-?Je<`0TP#B5#qIzGpCCC+1~#|3f;Fzgd(pe!BT|dGqecd-z`LKg
z={e)h8SBV8&#~FQ+WmLza?8pH+jv*&-U8g+>hZn7i16gHcK{%nuDlxskuy!dre!;J
z;*ZsPi!VEQn9%%KC(y?O{&sb1b+Zo;5h!)BFuz<dzkD#ioG`y^QdCt^RAsVS?nT%!
z@G3HM(VMuXJs4YzkYa{K*nC3oE3;2L`EU9HJbihS6eYqX;*w2ox)NyRd-}`v@CwKD
z1tLoK7@9nZYSzGEFoRYMxe_z=Zv%I`-jwrbMvgDQS6f3VpzxEuXw4H0h4nc@<<brq
z^C7dE?z-!J`@agj^Q98^C$Sp5izVc)cd44}^QDIN+@7=<WH_rsxr$+>nqjn0n+xR=
z<6Kp6cEPUq;ea2nE~w;mZa4D<Ux^T-^?$N5^fN!$=TxtVwBUzPE|`%cyU`Dtqtmyv
zX+%_}6w8i1vH&?gJ3(oF4;*3$czcFlF7*LB*mClV*CEr=ULiav(g0{vz^2CCQQAN6
z6F2lR^wJOU&2B$URHwVXyzZzdSZB(rHPKJ!LNziMU*sti-wYUSB0qBl6BClW2d*)_
zG~lRKc$FgQ&P(f6?y9VfKbjBu(JGX{@*qQvFouk=%3$@Fqt&JnMLihasZrnas~o!c
z<_S}771D`%ezQhcj~_1Oe~qhw3D(!FC<*S23W9|ts3^@Sjr4tqibyG|6vhX6g(Wl<
z*3tQ<J^KxPII*~(9zMdIn;JrkC+_|l^xY0`%(3i|>l*PExx$-v?XX{{V!ESvTIh!l
zMo?r%HM%Ux%(snC3j|^cp4wj{LB+X0`HtY;3d+>_<3x#QIE81K-`?O29_jdKh;!#D
z-F89>Sd+|^Tn^^L&c*CH8)<g*{&?3!_qiw!EDmgn+y1=KChmQo6789ZXPecibP#fr
zmD``H=~m9-cF5(86ff5yw@5_}f4-Ls8785UFjU_XKn(1r>jva2mFUe0QTrTPq{6Db
zyebYn_Ci8YB~FM+9wy9l6rmaSXC1I>I9#Y(YStwZ90QM04C&fiP~$+{_!V8JGDQ}c
zO)ZVQ7gl4K5GW~fO~P`r7MXDf4y8}$0B6B`<Lo~N-fRyBMm=dXs2L5A{gJ(E8f2Ly
z4y@<lQEX986eroTDeSNJOF&LBq@n@yTp2U9iJhy*x)@S|;gS}vp90%LH%N8BGm~Sh
zk!jOk_=Z05nwkTDuZ_ma_X~N?%}xg--$fL~yLwVr(L511o+?vCGT|3kiy)YEom28x
zSf5V|1o!CK85#poWH9z+x!p^cGiw@rb)w))jh~g9nVM*Hcsq_Nh3@RGgdBgUiJyKZ
zVAUriN|NLMfH@TBb9+Ebr=yb4e}qm$$#A7Q0=7yqSe2MQFMe>*X+(qSB||?;sba;8
z<?yMAI~wWC3Q^}ZshXOM6}q_`k%C4-yQJY%I|rFvlKjx~7usZ=&5zwf`LfT`n3VKK
zdQc#vrNkAybcQx#GZ=CfbWS|U+qD1{*OXekCqcUNOxtCg@ybn%RHNZ-6H=`STSxCo
zo7vb*Y3Mc|j0K}c1?JtFUGa8vy1)PYd@DLxU7l6f>IRxMM1wKbuqy*;Y=Le8$?frA
z(s{R3m29C7W)4seH`YudIu>MW9MXBwkVEx|X!qvB*;Z=gk9-0#>Pe*xRzy!WKQRe0
z+#N!_`jYDaInD+CgzR^1ja*Sms%;k97_<(gsW~kWl><I~(Y`$D`jPJd34G#lHMOYS
zRzFpnG~h&&W~JF(sEJ_JZdmG=<cED2?i=UR=MsS)UR4*us+Q*B3Ngg$Xm=BwLi!62
zpn|E358#XmkPr2K6AmhlCWN?1391fZp5ku_(j>u83$j*}%jSRBUOKrN>ui@eIBuTO
zFNbJNn@O{yYzLW?E-T3E9=_GJ-(D~PlE;4MX)-((brPWK_z?>~G}CJsQ!_Aouo~EV
z5*Da<LWN0%V+NAW{-+_hLO<767I6??8;M5W=Gx0JBMpIPCP3GY6Ovy?m4lluTAA|2
zT|q`zN~qkFMw)=@BMb}+oN)T#7!YNL_H}h*;16>1KFvEN9V@_4U>n@>nSPo46CDfB
z(7@NQFaWhT`=ss*2^$!wIjA=LCPGW~TQk2f_B6T{4IaB-Zno)b*4UU7<MStC8aMkk
z&XexmFaifCHq9sHvbZH^C1YLZYJex8Gmd}}SiNxO&*YM=t^%qWT5rPy=1P$IiR8AQ
z+DI8_(+fW9!5hV`HfI-|9)Wa2Ui2|xeKzPcgwU<J^C30+HPI$?CU(&F_&lHT-zu6@
zF+ivKTm#U>34a-s*aXl&ihl=aPL%-L)MwR!n6l}?=9(H}yJJAdJutM7n^8%B6`mny
zLY|3b3OV)vJb%CL$Tp$mNd^7`^KdU}SICr7>NOXw1=Htc>j^9GL~6Y`?zk;W6X6v_
z$?DW(+*p-pNM~B-eykf)(mI&i?+l1Ypp8|XzLlFF5`d!Da*`$}${>_Ps6^G0d|_E`
zhNYxaKrMqyt7@iI+KRh(v7j_B!)YGfSVH-Sxt#!dgcZSw>PYhboXV*sa0HTMJ%O0l
zxwabAf*roY;xrXl|K24Z{VFrp=4tl~Ni#2L$m@h|l^4W}u%nP<o`-^CO;|BCeF#Se
zp6aGn>XGaO3meMW_%{(=Jhh1tW0-?>_TDpNlU_+k8|w8rGY)-{<JZ&)LoymUr)cJ)
zS5DF@txYhu>WNC+D&0#@g2{;u)0YU&4u1=k^aBFbqhNAS+>16qaei|5=~K$nv}|Te
zD6S=kVM%@y_vyb$o-AW-2$GN{MItr5)RHTyR)dFR4N;@aMy$c9;EZ<=r3!<g_23r(
za2CymjJ`QVUSaEC)VP_d_-O6j3S?9Iq|TycH08n!>wgo&xTs^5Lkk4jsSN)GJt~RG
z23=OfRzu|#L!BG`RRV2dCXfVeVj|E4UBi@<1XahB^VpIo<mX0$N5|`|N?{8ll*UrK
zx}fV+XHef)3$oT?thJ=o9Kwu>XT{gFt@p{{4O<A~BiQuzxEnXjN%RsRb$xw2#ALz6
z&B;#tL_g{=9ixn_Qk2X-1ehVGpO&4%QIX7Cf?%NKgvkG-A#drX{Z|nFwErxr%ntx6
zXkGMn%NNoAb0tj3uELU4w@#%Vs70=7Fxr22OGIP`Q8~RC|8(&D8$qXTPB!iE(vNh(
z@7Fy7qHrO=dQ{Bgb6P(C{?k-$sP|EzlB6&8`uUNfQr|pS7@CEna4;)1S8qfn>7y3E
zLo8c%r_?u5L(bS%AAn?zLus0Y<czY0t9YQ+cY%6Kaq}FAMGlp%=s)uMr(l>F)JDzU
zgm9aZRR)!(1!P8~li55o4fQEeah<3RmwlXYJt&PKMuHxx!!{^J&cryIhN?XFd@_lX
z-z)XpP3wbbDFoU*yk4TImP=8vh47vUUON@RPV<w^88X?%Y_DX@EPg6Rq9K)S%`*++
zL6t~)8Bgjk^N)fSwE+T|{W8G<(Le9cVc7mkZGY-Fdo61OW9w#aKJ92xtU@&h-E^`d
zvg{P9_Vf!|l%bXVP<??_%Rl((7{6P$LS0mXEIqin#)_3I>bF!WP=Wa40Sz!fU19~I
zMt`AUOp^g=8FDefRQv#|Lx;>dhpDR+#wvjfNJxaoJ4c=KL_0Hjt?6{%Dcg+r!w1c3
z#H8#O&!r<4kEBy!g;jRJ9eiAm(({8}1!TqHd`2CFG3CYKhI%tN2jD#oBp?~pn~O#B
zgfVM#wGG(V;=^%xTsipZBJ=(-EsVMH3{MS(mx>Gepr~sUYly^6iP-!8cJZo;$|40q
zp7K5gv|=J4P(+Ri`7tQ&#o{Cp*-5GGjN0nkJ^^u@c-S9PU~<cl#f`2i0A*_{SV6@5
zg{4YeFhY{S8<U*qU1I5yo^hbc{4pf#l)+-OVr)*b4>H2YCF`g3RU$2$h>6(1i|1r}
zn$^)=bfUM1^8Mks71quaWb5uBR9Enzdr~KJfyIJx$L%)1eFT9;L|jXJ+|My0-9<4&
z|FSdjrp0bD@R&NO;$WhOuVuX8<V9SENR&$pA$;u_vyhzR3<k|wwl*^#r-p`txI78_
zSR~aXl(()n1#{oan_pKD{_4gn|5&dY`k7SSn)G;~+$IU1y2;kabQ`>wZc%&<WNN2_
zd<Fl;Mr%x2q+K6i^Aqiwri^aUZ)zjkhfZIY>0H;O^tDlqOU<D9vP*}m1@sG3&s<j`
zXjpr&&0Roqa2CzM#0^;zm;TbmHZuDXAE+$LO0Z=gGB<3y4aP9rv=}>QL0c7bF)rHY
zoRYxn#pfK=JMq?G%(1(Vl%<JJ3!lzihH2|fqu17hlXY6^<gxXb^Iwa|5;{29JC82!
zSb<U?J&)ESlkSW0(i*XxAEFW~&8TOUvxgAZ%FC;re(f*ayDlB^7V!klw*%a0h2<G6
z(K@K;c=|z9(Y*6Wc^0ugO|Gct?{p(<HuG^<K%!*sw&>O44N-QO>qpc%)jriyCNIm|
zq(SGanu=7&opa=nXCy6qKfl<UTY`G|PS~Vp)enTet+RgVi24Y$(D7@$LhcDqxAZQ}
zINM2`8j3t)PDw1kwO%Rc>qf2hQ+wQoxw@6M%>MSR>4xJj=ysgS*7vE7oKu&9^O#Xd
zLQHt{plhz(7W8im^?ECF#_&s-@ciduuPtuRFl`^XVywCv@kQr01L=s<Fab`-wx_g+
z?tCg&OtL=7mpmnYkkSl5`JmFIzY2CBr3rv@hr7gKEsqFfE(L%!NE9xR_8ASAG$sR}
z!9E?h$NkBw?YHArU{o2YX9ZdkK4XaB*C&cbl0NA~#UIx9FvAGsY*4bo-G?+FFJEQt
zPdP+n$Pr{SdNAJR#3L+g6BC(clp*Su#-IO8i*=Yl%D8La$y^Q-vsua-F&D~kHQ%C{
zOAI8)WvY?ArIKzFI_j%<_{^}C5%<W=@gIqNCdmKnQ&9=fL*f3i2TZ1q5@j~E$nQO+
z{s>!Zs1~`nR$AR$7m5;{6CMwQJKylBx_!rJ9f^-vE=1wEofKW_$2j^wde5ZL{~K&M
z9E0?C@wT6#I6y|;dC6q*Xz_Ce=#b?;rKxy(5Al}N9W&^v2s#nn3ss#B8gW^BVAuwu
z`7WhP>b#FxmoRVBo60F~yTClIQM!pXNoP0n84;Y?z&wdQ$!KZV!j0kjfmk@k9ck|F
zv(pGWsAR5ChO(G2Y42Is<5CaVFx9xDxGKNRe8u&0Y^zk*{v<xiw;^yISS?Vw0eAn{
zGPr-*-qyIeq7`3XN1-U1xitYc8t_FI--vJgqK~PYKE}8ZBg^UlUeYiLd-8i<npQE~
zPMYj+JLa22hsV&lhw^_!g{XKubJOl#(<Qy8OYHL0E$a3nc(A4D_WiB=dXw_fyug|Y
zEz%un-)g+@`Oml^RoX<27QjDL&n6(R(M&&DP%0B!SSjKsT;N7q@G9e9;94!Rfw#Yh
zfHzJ@p`y%+Q_eKJ9BQamztw+~-<3Xp8eOiYqz}bDZB7)WNI93MW#Z$GVSlk~{RLFm
z%>u0(RQ+xyEX=#KBW%s$LENv`CCeKIQGeiQCUihc^?A;dHE7E;Y0bRtN#Xn*nr<0u
zP%CyN2;mPkuwhq$u|1b<D2}rxE;K*9+W<BDE~~q%!<u$;RcyC%Gt2=CeJ$&_v4NL^
zJqftO!A|vZ;?{&AH$wHx4cl^bl{a8V1RBGzcobo=hzV5*K&L1m6|7*${D?^@azQ!_
z??g1pu=AIIg$Ni@1-h7H(OMC8g!Ebo5rC&aWbBwJf;0RWPJ0V5L;2TTsF4C#dMD&y
zR5*gEfi3%d4O^K2&`4+knqTs$<1kcM!v&NX8q`iC0eJY2tSU<Uomw>l6>G6iRe*;3
z4_Tp21GHy}Li~4FFq{vJ02nar>!#~Sl-pIP6v6&Y*e2N32QJR$<5d7)=VIHyt<T=d
zLr+-*&}&dUZB>B|26Rl-LcRb3#wJ5<`0}Fl!qkTJbu#`_8|MZmPjm$QM_4&Pts7NC
z&^-r=_P{}xa)IWt=kYOlOs!9U+x=p7hc1+s(t-iA0}ck<IFkIV%?_qNi%CPwc-m-0
z0hZMqIh4DQ+=t<~&V&^pqZw>4Yc}Bu!(>HD0IaI^H2}I@QG<dsKnyu-i%bJ{6tzBp
zt9Fc61%UbP)X)<<50$zHHqYkI9J=kg29>Kv%nTs7gkwkz2T#+7)`)McnnFuRTrEWb
zVer%td~Qq1HjeAJOn`um28gYc%b<}>L3{a^9nPMYZ)p`8<|)@s=z%gDOjqsC@EeM3
z0YfF;6H%+Y9Ly$Msx1ub8ci$=*bie1DjA)iv<5U=K;KW`1~PJP9$61)Vc)LLxK(u6
zqFjR|S|eD%4`z!bnc;v!R5r~j54K|f<<9~rwdsHjLy=drF1i%~9MzQne(pRC!+(l{
z-{S9Y5qy}7w8GC>S^wDlN5d+)n>0JXmUUd#Cj4Ty&40lRpA4C+p=}G}8=5`XZKG-v
zH8^*!ofO9F?+rM%UoMX_ob64+K*UZ*&5zgJM@HB7&`rn@>SX5J-p2iW?^5x%2j*9X
zAa5&HTOR23%Lsk{*LQ2+#}-%RaK_M5D)_RiVj{#F#Fr%R`#a-o%*59bH;mKMUY&bk
z#Z10BkhX{GC40ySzk@3dUEqk1cy7dsa63DU@m-2Y1NFe=I}UprtkcF+-%p`jGUF*;
zVT$1QjlPy8to_{%+xXCw9^JR({_oUrrGLIM!e3P*bc5oR4XQiJ-=;v9_jCEJ9yZ^A
z!T2d*{OQ%Tg!1pUIx^wSsep?mBNJPI;iq)|VLqb-S(Lo}HU_E5@34+TN<JlTzllRC
z`a7)Rkb=_|7)pcJ#kroGx%j!B7<^5m-`M8v?A4$+9iZv4TSs=(!FBRAB&;@xCC!ji
z9H4O+^M?68AfCYc@N%NTrM4e45#MB92k`#FhvhB62kuU-Oj>TneVSEc=?|aM+Sj>h
z9_U;#G7VcL2uUL2@WJ_^0JZUuYR1Juoe8G~h-L&_pymAL8HhM036CYI1LZ&$DW5Aq
zOaRq#aN=rdIGo~K?UL&{%j|9kHi6A?UMV0SknSOVNlJqzi;U9~wV}YqJK;>CsIi4^
z{GAj5YRS1QH3*~t=S*S`6r{0w>PJQh<cJs-;Yg??`a`ZHf`JU?T8Wfoh>PT-`vj2n
zFyZ8FDf0HE9zssBD3}E@$UQLfp?SPvF=8mFxyUmQc2c=)Zm7j}!ulf8`STC=<0Ur{
z3=xVbzO_0+^`r3oyePXUC5R=%c6c7@NdAGO<Ba!&1G%~LsHkE{@4QvK`&?lH^bubS
zx=12vDMz{QAc#^5lZycck>dSNS$myS2{4Rp@@T?<a>zJ`khCax2cdx!2X5%0#&HCp
zZxIyIT@Zqd%DYM4qlbb@H)*1nepp57e-VJD^5;w5TrE-k&Y7ZtV>jUK>B-wJ$wOU9
zz_UP%;tbV$AG1mV4FMYk5_g%(spjta1wLdUpTZJoB0ZPo#Q(-~@K^F7AbF%Fk7|re
zOq7=s4A4N7WlNTldZie9550?{6mXQ)0=LZ3MzijPUyt7bUT+DqSi~+u^Q32uXwcs&
z&_56u#JC2jx}#2VV?LnYVeQ~!2{hsbrWZYlEz(ql6d0TRA!C)i@GDc-h>@9^cMmmB
zUOrevsJzl$qNx(C{Jm`%Rcy)a{QC@`<#Szf!Rjf4RY?6@qSXkq(U`H}ZO(La>z}pG
z7dM#`JLYpT`n99}Paw^e&bmK86m;P|YOR#s8E-?h2Eig<7ts!%8wCgdW^#HsuK2va
z?^n?2a|Rk7qNh>!n%Apkc)7hF_b=-j*lEK)&JTyq7AS1X&79Tywdb-#>1AeOe7Ien
z2Q}iL+y3zQJYK$5*35?k(qvuF<Lqur*>_1#p-uR2&5wCQIlIR7+UWY>pFQ7?x3qqj
z?BHw3yqi4i@qsVAg;>6t3stC&2Hn-upYQANjNbQszuL2;MxGp*(vg!;tj{aCEa^X4
z=Hf;4sj9sh$1HiYIZI+kN%y|e!0LsHx^4{(Y6|~c9({i?+xdusFQ^xYXK0#&GZ{#X
zH^K$g9pv3w{Cq!5Tw1+3uu*d=W0)}ovaB&zCyuP~Aiwn;q7aIlpk7vJO80krBO*_(
z`Nr7_{Qe?Dt>uyMAkDDk8la&M@$>_waAjSc52)^!^<>q^oWqWMkJqH49kfU)X2GdM
z!l^>gl8Vt3_xur?DJff3H%r16V8=7MGiy!82Ab|qn*v0ZqvO#mxsz`25_6JAFzuSH
zEIG22DOn0GWP;Xpls~K@&Iz4yF`KQ60kBmFK>*H1${%W`*kz98-XH3-VLA;6NXb^~
zR@5OZEMBaEP&}?}6$MQN2=BZ6Ggub<emzb{3r#;LU@VQ-bWk_TU&*?FP13j}pIAw(
z+J>IU6TKX(_$GAn@c2p<srMS1key`6Lp#_V%93l}TR!Ac_bUFUS}Q1!!b;02$m^;}
zk&+&C9R1v%Rk(I|zqlT^^%<jWx?;iSDJPTXmtEoYeEWDec9*vNZP`mj6jo=^LX}M<
z4N`Q2g<4YePR)oFn^5e}5?d%c2zJbP^jf+|ITp84`m1Gg8s4nlQfIUD)Fz(|TqWQs
z4q(KGGrk!=L%vn2|0)C2<!@URE&vLlf^380Oe7bkg6!b0k42dvDfgkPl#tLW@pwN!
z3~Z(z3m%xx-kQ5xDh?X5>$Y_8lpcpPg?nVe@S^yayq4IRki#ejzL*wCzMFjNGcSKv
z^7qf%Ipjo%XMT3|5wb(VC1iV2U39M3?XQ=#?s%2$Wyg}QJqVor%-ZYK<#3=cKyth%
z4!<UW{oNj)`JZ*lPsCT7Q_@T`mZ>IdV<p|U*#ofEE`zy!!~-IE3M$~8c4S7N{9!i{
zyw)Xqo1-uu#r^CMf5K%rPoe{M>)N;GwAEmB#ac;gmsYJC_{XvAgv5PcrQvs-0|TXQ
zBy<J@H0lC%tM}Q_U4yqychQkr^)O@D>8p+?6Nd7E6N|Kwcw_XF@Hz#y1RLRBEE^ds
zVw?{U(=J1&da}Ah#zxc}(xybH78K}~B<Pw;p%r6tiDs2!FlY~3ej#$FKd;mz3|gHi
zke$921_d%(wms_Fv30Sl-8?}!ilUk7be_sL>J>AvMf&9E=+4?~u^}^&%gwd{V$jKj
zbSTy0L09@-+v{&oKCdBl3-{?(A98ICc@6B@f0K?(>Y@jB-NM&4x3Z)mMGy4oT_|_r
zTx=q8R&)7yar@dEd9KAduklH{JR-)#$QC*s>p4>Pd3KFDB5|54IBCC%_zsTR@nk=R
zE|u$QTtyq+7CG$`XD^@lT%8B(WfIyov!<K<T3W7fwp=<b;yV(xNC9!Knu+6e=|{wR
zsq#)Ag}V5=^DDs$>QArB_rE7V-!}u`EAb!CEa9R%@cP*dUz%ESy5H(fbS9rCcS7zj
zp%b(y_Di9u*J@Ru((@hOF0O;-5uIJq00YKqmp9{KoS;^deipZcUG}$2tX<F-eth1?
zZngrvpC?*5xIcqHVeyNJO){RgBi^3-@Ew;IzxuxVP}@SCKQ0po)FH70{R2|mYGHXQ
zw_g^~c9Yi?Go^zA++05N8?Wl;mJBo_lLva0#<%x2;>)oV9_VZ!f3ZI4YcX2^UE6ur
z@Y=1t(7+?D3z)K`=$X*2+MPZN1vB7$&$}cw3h#95Lzj3QKex0d^E^Wz@bO3OxX6NR
zZeQKCs7Gvueb2=%z@uZMq3I*Vk>*1dWUyX9T1tN+qv9G|6YCd`rb-Sf3Dzv(jKtvz
z2vlH-wPryQD6=@ZJG{^}qG3gua2A$*+`eCjDjqyEe}MnD`i73|n@SZD0H7EX0D$Jd
zQQt7q{?g#g91Q*+;Z2p=e}p$kUo_sr^l>Hx$^1z014y2cjCP%5!_YGOQn&hluwo0q
zMd52_GAC_z%B}qZYsqDpaPV7{+O@qtoSn)vYQBZX<#$t@CTJC1#L*U89BRZ?G<n{a
zE%A_)lQY1}D;LL}GUNOF+Y97#wBEM=unNqF^|zgXlg`&!F%7~2V$S=%OPVL!*Yqmx
zFqLA<B?wiEdm$BPu6`m?<}%^~KMWxe=5&Q}tP|UH#R>s}vhQs|jV{(x=D~w$2M*eY
z?QueH%xeY2C!tQK-K<Jp4$NxppXGt+!tO?h-h!+^7<Rv(Y;7Nvwlst490o8iKnd*3
z7tG%0cE~m&v`-D#B7Syg=~StZ!jmC@IFCJ;7;Tr}%oMS}<8r3}dw$@*`en#=qXsXM
zz7wCd9uv3SUy5E;w2;^|4)wo8m&A}7RIkAW2}7JBrnzfk1%!b9D@W4g8(}6+Z9x??
zyskQpe@9{@p3<oqa!*^9ENmka8Mu8|dfKgg@NOIi9V`T3q;(PbTey_@p2*|BU$>4H
z`GQs|MU21tx;s#K+Y2Z5mvZ4AlJZAikqZ0!fauXU9XV0*Coy){<gvN{Ve2`vh9ZoA
z3WB0QOEoKC@2yl*VAh8yr9SqgkK6X{ERSg7i_RL>mz!pr03(L#9&e7a5{?SakBu2d
zfwIg{MEl%=(A3P8Y?ux%e{FdZG~tLYAHj%Jw5gDfh=_eSQTK%tdJ5d}G>)|NGS3&|
z3Za4b9JUb4NgXWB2fnxI0F<ySprZ^ems`!({poLuK)z_QRsG&|0l<K(genK3+8{$v
zbt%kMn<ewU%!EQP!<+!@)vlo+Yc`x?Z&o?2UJ&b6v2gXaDL*W<KJ?NX)~+F1cGa81
zOde?}EH+58zF8fEyNlE9Ua)EKp0G7U1fh(T6=X(4qc}rLu^u(KyL{+?6$}QCp`#bq
zt1azO%>Kxm3Z03xIN{k3I^{~m5z!kndFa>nh|WKRb+;xGAD~i#=;@zR>FU14-j0@m
z>5uJ0FB8`}Y=3d%(CLxwGecL>#w4!oe_j|}g6RCF$15*4+;zhCEY>($c|&YdPgfra
zs|1`}tKEp^g7+IlMTv)2GE3SrOT%pB%G<|{>wAs%&6rj7kr=z!V$&k#)JrRj0bf;h
znl+&cq<&y+S+9<0v0hA1tl;(G$38*QbiFsIW8dAE$WuAOa3Wf#7S;?!-&Qg#{UOfY
zGpZMFXwN{QnaG5hsddeaRGf2BIL4LMkyLW9M#h!^4vb2xPRKR%xApnDC^$Qf(6$AK
zr2a8(ioe7_cGm4hH;2&-5uI^DhgM7b2%-~GOO)->&a&I$@eC}RUQ}D^{agGE&^qEU
z^7z%HK}GRPRL&eS!Sc<Laj)Nt#+bnh!Ti|R?&E_{GPwk@{-9f+Z!?K}f{->6tT+p4
z9NNZ60va#U%|?DxP46Y+LE^g2wiFq1Kbzl^NSU7~KeMzZ0(~y}CnPPA1}9-^29WzA
z$rFMYHRJi~afIoXJxQt-0H)=toX!Vi(xSltVr=xZHbV*5cKIzmxhro-$bB*}r!#<1
zj=tBT$a?Mi<q%w$e$g9QTNqkw(5a-!1AxJRA=Lg?x5lR8c?*)vmG=kLAG7DfGq(~?
z*6x!F)kE>90;O;7+{Ez7D`bwc{6en0<sF5-qVa@rdaxBe<bVrdfsu*ECdVE1rW>lR
z2J=<U>_PbQwkFFpWqs=@!z3M&7iht*EfK_(JZo2LF?<1ikMuNT0#;~yKnEj4+zEO#
zL~fOY=y6HV0q>~7oOk5)TxelwPbKH1-Bfq~vTHCC<?KaoCJxPxaGt6SXyifnU=gZ-
zKa_`({mVz^M)P|+<sZO^G&V&wsSWo5fE9&6Xca(-&IOiX=+vFYej9VjB^$`Y`%X8<
z?lk#(1CXn|^SGJM!}*Up@L3DZG*0g)CMj3Ji)YRr1@fBSavexSWC0W3CpeE6TUxNe
zE4@mJWR+4mx<j0Io*Xe^T@x33CS}Y#A0#a^!IuK+|4MD+JnFGsyMBYKXC1k}zTb{E
z{CcS~xph`>NRp<r963`7%t`djK$B4M9qicx%i+)Vw%TX?(VHA=%le=^`tl(V(E@Y1
zx=V6Po4VA661ZT_;lg6Zdc$(c9bJ0yFR8KVFr{ewN@w)WA&c*Ejv4xtat2tCq^>xn
znEMuU1}N--xIEDcNpgo92v`AGb3m09xW;Gl=gs-3TjJ+6-BfHzi(2E8Jh>ervaSMY
zvMtFq>N3XC_sz(J!~fVq)`0RM)rt&TRp@^s5S-^CfGyadCO=VS@YJ46K<=}0Z~nDz
z3Jh<T;k7g2_y}?hv=tzZ?7*sJdUd3q{bb{vd>Y9=p^Zg#4P{2Bw~Cb+*Ymt~Gy`es
zo>B<)J>l`38>3Z;?*IAn;)v2?jHzjRMHpkFKb=5!^Tx>sazQ9v)&`_D4_hfRK#u|3
zsfXOLMQeX-&$<O1z9USsP)}jkNnE$GtRQP{<sFZ$Dj8$)$+Sv8vCq<?%~s#@a?Bvh
zIBK7otPlFWxfhhSC=IEH;nK;CMDM&8^(7yLpE7PB(D{p_#SpKFqs)0MHkxzTa=7Sg
zGj$L%gqFFyX4hu>DX-xQZ5pn-iD)}eC^JPS&8%m%pB`3CX-1X_HD5}`A{GvH@!6n+
zr6|0zprj^WTdbctyr6V0tEiXdlN_G6q)aSbL?;W!u7uLi-M~9qcn6(tSXMa!hba*a
zH$iCu9f*y`B#RW`J~5rSHK@>LBs#k=r~oPn&m4geNDZhpd`8vH7gw(NqFq+!<U>`p
zplo?6e&IMYT&v67%}E3<C)Eq6BY_k;(u{ja6bt=*vQLkEVVK^j;zk!FR9w7M<)~-1
zT~%hi)<W)BVN7@qSC|~6<V^5HQ`ip7IVoVy9V>#Su;a(l5IcYyN@T(qr5zbR#Nxtu
z9_@ZlS6UCezNEH>$oVlWG#fp+hEC@H*VKy=MYk=Y5{sv2+p~~MEJ+5SYS2mh<{sr@
z>SFKhXbqnv=e>8LhuN(=;k%c*sK?+U<_`Vw&h8xfQ9io_srl)4Ku->D2etdt#?$4a
zouiw2p~x6no^qyiK_Z~=?xJ2Po72B{+R@Ye%DJgE2<zhAzB1*BRQMFF9&j|srj1bV
zRb{%i%XfH(O|$L)HgDj(2$U2s0075C000dCP4o7j*th={mV{;T3ro6hc%&u^l;)>7
zz{~?5yxYFJKlsdtS#zbnlP{QqSOpD>7qZ+je%Pon5kaaqAg|WG@osYfOm_cGt=|%i
zNTHvd<_dG^bZZ?LkTo4T2>M2P%3reL$(dF#)YrEj2niTwj-FQK!HJTYWr+6PqY=(>
z;)>WW^y7*EZASosY~O{9;j`<>>j9A=cNiWB{4m9R=Mgar8xx?-O9xP48kFero1K}%
zqCKO9DnO}1hO?Ys<Kge~>_hC)^GwQj3sq~>qCI9Y#L=EvNIT538*^pA${&@aBvAbO
zZwrXL6)iM=WlY}2mJRE$mPBKucQS|EjOS(fj0fl*V-981*sNV*`|?uj-#>ODIRbIC
zD2nWBiu5e0lwlfeI>)ltZRStFjF&qeX}8c$%|*yBO_oTsmdBM-WOqr`3XXRZ@nn2?
zgsnP;*qX!wta*=#(SHHU4}*UjPSbt%>-;`hwGXpLvl6*OgS$h6B630w9s;J%C`Ke>
zX8?zCLKH#B+OzLc3p8t8j4wDZTj29SE-(ti{6c2*^x|>@9n8kSVcvw#8wU0_l(D4G
znAXgAGEn{IPHPR;qZ{RB>a3fU9KR!iEwFaRDN=k1V*rgP1E7emQ=H<7V(9ZNgc$T&
zECI&_qaiw&vLO=OS}56j!5r9tp>+AtCm>2`K7pZ3<HvJLs5A(V_pd17-J}!=jN;(q
z-svKVNAXszaOsYF?t?<-Sp*i|$oH5SstSMR-vOsmYH!H95B1hfDPVOvUHzu>m57R{
zq?y=jf(p1w(A#V!Wd?-u<m>)H<PTjWL0HGt?rNZjB0Lht&Z&{CLlJ=wf~c$1NtoMK
zg+iGPpJHjvphsB62oeCK{M>RNL0q7MfQDl1usPyBgQ=T0QPt{HEp!>O!OwHKKS3Sk
zqW^Q|)$w_C{j&Qwe;OGcxu`mq>5BIL&_<v0`}Kpqb=1kfF%DE;p1W7AWB+rGJfB;e
zEzR!Yt}6JWRN+_|E`Jst6RlWwlRuBoL7H71w1$MM97BlkOqErv59-N9)5Tb>?K&2L
z*Lf(6uXC?&iM52tRu0KnPFZ}*KNtdupJL^TTv2V|A=wT@S)LFsPb^a~NAmPeXUV`&
z4m@V``_4YV?}?ye4y?=L@8UlMre#UMD@B(Y(V}fR+tmViY0HW3KiTz;cWDDny{Zc!
zy`V$H7PIEge~_g{QqckjG%8ARxw3`)iRuM$So=_?JL?1*ko;<@S_o9~h+aDigBC<c
zrLCu}T{C{V<?-Rnly-TpL43qs2KRH~w|p8Y60mSRwyS@?u&eLr=>5DrbPvC5#<Wz+
zm=+mB79jIt$^@8NO6r&2)qx;l*)|>;j|n;=-6=fio%PC6lt2+|ZX|`LPVs8|xK(U7
zH&)F($o3ra2DBL&+;+KD5HPk|>9fc=kt}+{Ex5q(Rpw|>w&DNfi0I~+_lIiC0NUnp
zEUSp!KE|l_cR5giYP|@QahpQCb9zr8^WQqvy{&AH(3eRt<b{p%J<s6-?yqaUQWHVH
zfbepi>r>Tux%4d6c0}pp@y!I@?E0exe(s1H((yNh7h-bmwX2zrMJFbBV*@|bfs_&n
ziV}a&acqt%9#qhnFEJ)mo>Ex`u0JZczcAJcY4+?TCgjgmwYSI$4F#8pS5-vc?QML<
zT#%edIV>$YXEIII*ot194dLSuJBB8PBN?fDv}|L{lHQHJeRmHZR-^^dUQ|c?BCI;t
zcqg1+8m<2$Uc&%6b3mwCuh|jhy*S&3k3g{v<0!GiKq)xC^<R29zgXWJRbjKgi!XVd
z<oTgHP9+pHq-2<*8?CkQbSz87Ys;iy>Tzhl3xm;3d)AA8Oj#%0fSObCBbUHREb6Q$
z&#9eT)x6C6P1DNK4oJfe-!66Oa=ay?ylL)P6vQX2#LEjjS}x3W9HOsNPk$p|yAS*V
zh}sRc6nHN93quCLg-_5K(4!oBsR<AiuDJztB$`B8UW7F`4=Q*Nf`<CE9EOZ8?v5am
z?W|ggpOBD_McO%{E4@a9r_^HkQ8@r29U$;T^sLHvKr^I?JHZ>c5_)aVav#_rkP52c
z#K%AH3@2)*jg|XqwM`RgsicBR#p6cxf7G@O-|CwtS2CLuROLol;Fqje*_k=;9~zQn
ztAB2Oc=}ugXoNSBi}p_oQxekCE!E;5yUReQhu&U=N|y)o?Vv~Bf|O7f{hY~YL7&J2
z{u1vXz``sbPPO&|MuF%582K`no&0q+=~@kKJQ~X-IL9ovGR{D)JOcEGo-K+MbAH{H
z>MYvsQjfy+V@x8)`lc%V>39z6Nne)4)^mFwRgO1_^&}qy`d%sB!<4!&otx45Lap$r
z{&jqJ(S%dOW2#S@E*ZFCVIq$iNclPkH!DF*6M~RNGqiD(S=Kf`&yrT&Nc2SRNG7i2
zi&$D&Iii3U%kPE43@`bCUuN=)`H`l@950X#v1;th#`+rv@SAsbi}%|Y&wEB_p`Jr!
z_!LR#eM#*gx&fR`H$%ai&|zdi%?Np5zx9P<r&!|H>H;j~g+F8N%07_z+j7h8Qu+qq
z&<to74Qy?;rNC#fY^!Pk?bh2l{4-;TmBdN*jJ5gY+Cyw~6FulfmC=O2oKX@0=c-cS
zXoEfjNJY>V4o!B-D5@a`16PF7@Zo7?!pb;)=>%KHXRrEbH(Q6Z3YDHisT(E#OUu6s
zoN9f&KK$_t^O7Z-^PwAiF?{!deZ{W^Z2r!~%x*{?67t}<h1w{mPrnkaOVqfHT52@n
z@<g9w3LPwr5&As6-On;yMcIkMH%ci`XJU;Py)Rj9p}zd)A+>U_Cv0_eB%B^JLlZ@h
z$Jd7X@GT@t&e6{)o_q>nd{Q6_o8$MtG0sd?B?-Eq52~VnAWkYKgU-_#rx_CT5|yj-
zpj0f*^ab63#gaE&UUHeh^eN5!S_*00jIdV<XyDjM5~ils(Y&hYY1)^xL;B3+FpALm
zf(7R*eI1EG{}NEU*VYUA$Wgh14&hmr#4{(InJ3Ctc)3B{uu;7zdCu&qPxGuW;3=xK
zvHA+@pZ-zP^SPFI?Ht*L@%-8S0QV3o<NqUxPmNpfuqUOu;W<SgOe>qtpJ>cEvfg~A
z%Q`wH!o2b@E4rpDT2^L!lqDcLygc#bU(AC)EJnk6i`Ebbv`8C#sm^qXE_f$xjP~#X
z<R~XK$v#aJ{E$JU61gC`&S%tY@1p>9c>cW&KrIS<`(4Y^Au$B}o2fS`QV0r7+4n66
zQ}rC;a(ff01if9q?-V&-3!SGARZ*!afP+yKrz(DF0GmSIi_~I~D5B@Gc8Oi&rWO{J
z*@}WJ*u2Yv2A|+4yu>Vl+>oz<k5Lq+9=yi>I{|u_rI4On>}1ODxPboyCdMJz6z(~A
zOO`eVxyz=8LS{yq(}u=@lu4{CF@tvKs!nVyiQbK#@Z5yKZvHyVq`3&QP7Az;ox-9$
zVUBEfwFU!@2R+DY<I#L0-yyVYxdF#)B}=n$<%@tMR^Pk^qe0d*$od4)(Dsk)L36c8
z=?ZL~#R^`MX~8@``O0o=dU*0ly+P<W9k0bp)!s@k$Acuc)N00LHLtqWxbO;eut~yj
z)7(QQV+_}I*KWd!a~})b_mWxkDiV`4GHFyQr$zc$Y>D<<gEm5e661jZl*^0?+;aKe
zEUa?N+&*KqSgC7?WYW&lOgu89c%pDxN4I6mw~dtP*fz2&monKaquokh+^cq=bfK~6
zc93bqc!M$_t@=cNy}k%8)0NC@9G3=P=mnUvaLdxaNo*}XI;w1=k+vv6knyPyUNbPQ
z(u%4gz1pl^WzA;s5okMK=uD*aKrKEpEqMiq|FG$TA!GL5ninvcmO~M0E7KX9yLgkc
zmceFS!W9UvaCL~3X}%bZSm-_Emh5&&fgRa%uRVG3H>+pWV0$Z-1cq5wV}9Q|LP7Fv
z%7R&h_Dr_K$etYH8YE@OKlVt$sYTeTq)cn4UTwk(5!ErWZFR7!zN2m=fFPDzZUW53
z&J4-7*^F6^@vL>w3Y09C@vb4<Hk@j$!S!ttsE833`EJtd!E&48=eW0H%KQBGZrTQy
z>en#Q&g(~&SL5pzerPbJokg1;XaXPO^7MbroCrJrCY-4N0MJMN>+R(K%Ewu$`MaGw
zy!=h$J(L)a5{VGsi?Kl%mGIiA<3v}%5!PXe4s8ZNDxg53cR+S#<CF7;n9xo#v-4`4
zu^`PW$15XldWNs=m?k=1aK*;{Cpd`bUV^W|gx?jt?LfR=O8bUIYU{MN0n(&K;QHmG
z<kAVH^TfG7+IWm4R6h#W4euiXLI0UN#?5g6x9X9ZBCDP4#o)R&?dCR=6qG1iOJ6yi
zro{IseR%a>U!-&u_c1tR#t@ESd>D2^+=bon2^&1}@%toPao&kW_taWdh7`zEqJ+di
zvnLu1GITFm?*O-4e<}cI)k1>F2>r*%nikF^5rV@eN7&{bjU8~V=%j=%n|M3}uPK|2
zjZG5()L>l+=v*tMU3wYaI!T&4X`bs1-z&V~wy<@)Z4T_sYTV6c-HM-!i5G<RDls)o
z!LB%e@`xo0jXK6@-X?|g<u;40@$7n(G8?4z8*Gfy@gxoXMwn$nJ#4*ai09r+k4{e4
z`_-v1UqD3K0N{S>cWR$d3o@RaGq^`dvvc2#4}uX(1c5XN7TkzGdPAy%-WY7~r|RiK
zV?hT4<nS_!wfRpPDnCWG+OX~^=reeI*i;s#A(_WiM;3nxZPpWsUW>|Pusj3tjw}#c
z*TD0@cRzZ3SW;~N2tC&o^PabDektQIZ%ie~aRYEjW|C=SWhm_1;1ljL6Sg3`o(j&x
z83M#)(9S(&sD@DTGuU*L5A%)#pRFxGl&W5TL6BX`Em9`XPKUwpb%2pGL7i@?f4GJ0
z?!@)#6D|C$BJ?VPxxR4pEVI}q_AKi4fGC5Mz%d{4W|$-oc8nX%6o9R@EX__6XcbBQ
z=PL1`k|L6{5d?v=fXB_SB0JfQJ#v!pW;k#TkEoiWMh<8JVvPQ<7ZZ=}Fa$q_x#=7J
z-@ayn3FidveV%kg$-&~2?*a9nmxACv0cwAOO<-c_aF{o@bY>zvS&GXPOYhmzx*a2k
z&%teJ3UtSH=(RND-jO&ceq*SHe!$VNJok2LD(*foV98bM(Y(=hGW1Up0bci!KeC{4
zN_u_#rc*rBSO+E}_Bf+hn!VeI>5|A`4TXr2So}h9;*EbnL>kEn{(eK_dRpQ?PEDc-
zI_&jLwmnppSujJJF$GU4Lzz*cr6t7{H>7s%f)P)&3@a3v9<w94K&isq2?nESL2XQI
zBWI%qOmh4(yqJK&cpJTFt;p?}Y4AbW`=1XF?<~2Rh-Mw<8=;X3dLR5X_fQJI0YMA$
zBds!;8k_TJEV-30xi=2%99&awdBhUkJzo6s7o~B1xHZtJPjH@nwp7k>>ja=b*1Jo8
zlNuNo^2*xzeO_2_DY2U@rMU8TuO=-2QaT_SA@<lAm}Qk+NEU<+rHUA;Xw)6+gN_=N
z6BYWT;hZK9cvi=>Gc}C;=t~GpPm(2R^JRu<Jw%LD{Syk(=oRme6|AJKY89XCl1E!-
zpz#d3PdtJQ5V;(bZ5@e@*QL^qb@VhM??dno^skmAjll_d`uI9X9)E9Oh(NsAFQFzg
zSxG=`UffejwiYS}^q>Inc?O!`clO1O(Zk{>E9HO#%CJWZU*(o>|CjwZqlRO@flC;M
zpcf7c;l&G$J5EyFQz}s3Up|=YbHC47PqLK4O9grKIBeZg5Tv8Ap|BK^{G}I(;OlDG
zYlK>_Poj*twqQqz#OZcH0acu<;OL|fZNFq5eCs1l3?4ruHiPG3?`=2KdMKR7|3>AX
z3z-wl{|lgXiwwWwfFfQgm}0n};&At%Qx8;OQeSaMTv5gl2T5B+Cwc**MGkFB4o!P1
zp_d6qk=5mM4J)-!bW~7IlNv*XtUoPM64K>cSJHr^MR&6T(KiLM%;k5HR~Wj^=)l#>
z0e4w2t2U8V0uXJqPXyNzH3n&g$P4)&#=a>=l&EWVY}>Z2Gq!EpI%C_mZ5wB7+qP}%
zpFg?D&39k!m+VTfbh<m8e(0Uls#T?hBqDe$JOd_CBsQ>uR1o1o8VPRpZ7tai<Bz7B
zDE}Ab4%EN5NFdme>@(cyudQ*b`A|AdKe^njVtyd5=qK>6rP<i5Km~+ShbRQ2dP}wz
zn`m90I2sXba~ST-9Q7ax0O2?JkHU0@2qLD*n0jTp6KSaBWif-?B#i=7PM6Ps_1yO;
zisal0`Mk7wsG&3fdc9<MvI<WIAiTz>Wya)agBxXpI7S4}O*=y^KTbH>naYkzk|-gy
zD@!A>*?iH)oQvyOZTCi%D}GqA>nUXk1kdEP|9;K#e5SLb9NjbRxm&Ji4fFBnyeAhS
zHpr}dUQ_eem#KH_m*0C!CMZT(poP}OZ%#ICb}tvdc{<2*2kK4%OrVr!sy@u<91|V|
ztquBY2W`Na@4tsCcpL`NRQ*S|RcBD?4h=h3h+|3*1oGEVG5K`{@$;`On4haLL{E!1
zz!XigCA2=_Qc}sGh=9QjA}dUN3yAvnnowS2tk>{>Ro03>teSQPU9`78(A;8GF06$j
zWagRkqF~ZM`#N6&&Ss@#+KF+2d(qgFhKJ2=Y$&KWb1{CI?x#Hnp~wzM5rE*$85%-P
z7>gMOfuWl%_S*@d2JxTs$BDAwVO}G}0ENRh^0&Z3Zr^ur8si1Z6;a$5U=o>6ac!Fl
z4(b(tpr~zL!?^X9a4+;$x|UN|AA?MzcoVAdL;1$aZr?y?_K&h1rT7g_#&xU_=--b}
zv;$^I7k4(LTgJJ3Cx@V7RjL`yLU9Wgrt4Lff6!B>CMGJ^hj#W`bu9vd4@A2n{;F3r
zjAy-X>bBiOI_ep7ungijIBJkg3{wOfvZ6Gx;>cL-<Ks5=b-g)51^6B8+eZb`M8Ni^
zp4Jcv04jdBJAB?>m72|T*A4%Xve~Q)nZg3J;`%H(8!*x^(lwWRuz0u=I%qGVFizaj
z?WXMQrKU`+KM!78?P*`6bNXDgYEmFAHr$%5msyIq`)6i3>=V7z2)+=c&?8>%gJchn
zUxF=Ccw}=w24`p|{#p1PN&n^qyGt6(=pqvf!v$#o+AHPf6C32AASm<$2U(g)n&n|%
zp)Ke^6ZYaln2sXx{?Z^HM}$1azy_hbI#+PKbY2VYyODDg%a@ze?X56Tb*r&~skvAf
zP_6yit}!{%m68&n&s&m@kRRX@IFp$3w=C~-ca*LIq(O(Dkt`9=1fjw!q{K=zoZ>kS
zy!aML2Lt5+Mb~N4tadxA{AlK~LHq6Fvq8G2-=9$%1KW{_mwv+jJo|gik>JVYHq>xY
z_PFaFIO&H8#0U(Rui$Taz;k+u5vPsfgxG>P9LS@#bSn`j?ToBB&oD2~jBugok`i96
zF{`lN^ig<3(r;Vqo)+X(uqEn(H(E(GL^fVs!in47N|riY;2<9-lcmMt)A;(i!p+Z~
zsyg%$8Plc|#!4jyB4&|NC1-vXalkAfcyIQ#4I|Ugi)NS>D>bL{N`+d?@~B+Xy+k#q
zGTEqsHv-^S7xbnFtb>p7aqD-6%eJXPouY|ZfvQ!_VHv#QAqN)Pr0l*^`On$71InWM
z36BR028^kry$kOxj0x5@>Ec;-sH-M{(9+W6TK80q)C6NkGe3bB&;~hLY}ht__=5=c
zK$0#_I6Nl?l$G@;G#bw84Cqj9l1ND~7d&2&3(*6`ZQR5}Er76*s)(L;m!bIdL8sE{
z`s(IJO$m(w=o?%dJT9DaI3P=jWM$r<1xB1ak2Zp+EVx7%XkLx_1|K6^v!b785i}gA
zzhN3v2BA8$S;nb#JwI%HE6l@JidLh@yrKY-G%h|-uSJ_9l3YbNh>8msYsnZ-^R>Dh
zUUO%!mF2roEN6Mys^|Ox&h`0imI>~$&Bj@J!=4K}`(tkVo2Qk!dCIx1&cMW`-bhn}
zC^<Q*PNU;H|I5+G{KtHT%D3uTWsY#U)oiO$?ZqZC^~Gb}T4bQgGUKdXqmK2eTWtKp
zU0w_S@>~D-qZT-gAo_#DFHF$0QJ|;m=e_d}Q;5(;ee1h_eFj16jdu=Gl$~wl-IR?6
zTWw077KO#@0I{C?)BCGQk1v;fb&7@7-mY_bQFNF7Z%ilXH-MS96#*4n-Hl+kyG)lC
zQ-8RKHeIu1#!>z$wP<M*;wwLvd$hMs=wBTS^ycj~um#;-r`CQabcPVPJdhJz_3L%F
zNAn*|0xEN*OUMyGot*AdI6e2D*n;f#6!r}ypN5r!S84<nP?0*yxX-UJ2&%l(pF$WC
zES~_1db2UK{nKqcB`qo!y#!nD;ar{fg(){<nubcU!0+DdON)P~kcRdq0Pn{<#_B1(
zm&eC~Ms%-|TBt>fwL?C%`r~K8(--U}kdYV!eoi9}3RBl7pg!#AjvYyHS3Gs#jBqm5
zI90p04nK-N1^l2ER=SE5+_&5`Fatxg3=am>_$|y-a0wXe3Z!;sZH?yUQcy_vl#A8a
z+1YGoNTJZ*y}~`suu53<a~AZ3oQ}!un>OM|qZySe0eTrXO-hgRx(qpYfeAr#l_V_l
zv+-WGW;1d}j_jU3WVx`+nQl3<P7UEk7Oq!|&;j;qn=Fn5Y*6GV74q+dmUR-o7f%`Y
z;XIQa1{Gj(+smghgj0%kOAHWqf!age5Ky57iRyi5JY(MVe=1iC@V3x9K7=~evXUGe
z=RO~`S@?L+r{rd&j?s}t9wIZGib{kRPD(93&)(A4bv%4(OobQ1jaZ2_$2XS|y2&Qg
z&*je`0eww?CR%iIh@fP}bT7uwL^Bm#FC&sN!DI_fjvcF=rmasLO}W7H8`=!8K%;GW
zSySg}$q*>lDM#AWJvxy7DzkVnHWf2jL{BY6WwoTOtd+{;es@?M%B(C_-iQVu0%Fi~
z$<IJhZ2d$WL;fLs7PwT1maTXCo#F)4P6oeT&ky49c#oRSdu8{FecHk8QXSgN^L<pE
zoVTlHZx)P8mn%&c(5ODoSXS&f_mNR_zc2XNfD+bPc(&YMwk?ibU56}svNaN#WnyOs
zp@c&kldR`nRV*JoLR_NSYmK%o>@sqKvZdS_g)$0eIV+<SPDV1bv9O6<*34XKZ!)#j
z-6&-x)|)`KubK3C0|Gobkk&W^vyRKshITzEEdFHV;2Y^_=WT767PqCf1n%NAe~s2!
zjh##HR3@MUN@G*nL=L($W-AaZgm>0qhxt@ea?S6_W4+&ugOp@qVv>B{oQ+(JvRNGM
zOR7a;N`*+r%+F7FKNnmF6}5saY{nc|<+jnKwN}^Q=n+IRwUZee$3_T`rg0W`KNF=x
z@ASeeAK7auID|w|Y-KK=n@8ZwwLLkMGTVFHjW~=krBqS3ZiUtGuF0!%UFgh&szrI0
zIG3O0=a}(0vS}(0c#>}S(Z1u2=(6BuOImcHR-Jjng(tB;{PQ<61A9fTx1dd{11&TA
zJ$l>RB7;moLZO?0h9b!6U11(}%$-&$z8d2#qP)nnzE=a?KF~{rOKw>a6I{c-del@h
z5?$EJ29<wCZFDk%+sJ_IkFi16=0BV6re*Y^?k=?aojM=tR?etx3wAC~Et{PBRjhU)
z6V}6SlTB4y*}k5QRpyp8R<j<~UA2RkKTA8z*q$9$ms(cmb~5;t;rqX5E?AzQBR>}|
z3(%OxEhRNTyz7Zh+VpPeipq;=NImP4gC481zLQzH>f%A@A48`V17D-tGgbSG+bbe8
zwY05hYp+mOCXbqJ|4ymvZqR3WsJ{2q{?dgkAsU4Z#e9=dGC@6FZ;A!iao5$;Te?~<
zQYY9Rq{*5URoPsbwfs)39+;|9wK8X*;Hof%G<_?26k+J-s_*-P->diJzL^SzYIOS@
zWse_>b6S$$Kzh#+kEVqwTb*YP2vdy;>lULcc#kfDWZ>rJ9!}MvjR+x2<bhZp4r#O^
zZ;DB@$-HyyS;?z>C@cO2*83>@#bNaxIyBZCvsR^)hX4pguqRcYS;%<<vN>}nt|lIK
zEX|+kN2nQNq{3&wdTcr#-o+Zll|eV{oe30+6?9vIpT5^PD1Vn-O}mZW!l`;t@@BHg
zR0r4o+~qX+PLieExGgH9(oq<HL?*<A9M|FsPy6d?Sq9&rk6RROE@Nj`XEUL>wziC`
zZ_XRtL=Mr)wB$!F(b}-hqgC5lG%aMWu9}&h^_wdR%J2=F+*{Wj?H^sdaKE(Ax6Po!
zsld07T@{(x{Y}oqeK^c9&GselxSAw#x^f8h5?h4&b31f&9jo(9aKX(f#7<y$H(Vnl
zaBBSzLedTkpwsQ|J+~)OV?=&Ya;j=sJf&ZN^bVuH48=BS#Ge6BeIv|!YdAxIFCkrm
zqtd{tmRvoSb@-PWCTyDSYm${VzlkGoC`Cj61)ym|P)I60#z^WbTZ174YKvfWuEWcP
zhcxc6>VYP<LP_1GkK16E^|uLG0n6?|fQL5RW%J_sYNA#)IrOHcq^R(Ui6TJV6LhsF
zzEv-ho%vjx>~6x8#y!zKB0TcPZ#;1+mhe`p8<*4INh}{L6^I1M<Wx~?#G=LE1I*x_
zFdqe*nC+}CE^p_@PEF$Sgt5t=UOK~ehreQUt~Cua(g%mr$UB1bVgeRJP=a?~D)6Nh
zN#h2*Z}gFw>(hM#jqYJgqPq|#y&(eP$TXgGdaCBivh)jucQJjhV)dF*fS>}={E11Q
zCW_13;5B+*B3~k;@~j2$M@G}~O3nAhdb*uDQhc4#(6MuvO)%wFgJ(b31U;D|zCf_m
z6ya+&`?BiTSo3P89E5j_u}rWb{*I}>1Z2lK|9mb-9_z=2>Z@$u5w}FO^uFy?^3>FH
zAM>&0F?#AdEj_4^4$nG;k-*E0;1|f6Bc_%da}}RBPXge**<Ki&<A4x2;ZSR$7X@7W
z0axZ8ZV@Oh^I<|P`)Z?V7dE(M_Gdn4zjwWzcxxcV=q&>*FnVuI_Gi11V5QT0$19X+
zP`pK(D!gAjMdF_yTQ-QJh-cpZ)rn~p#A(wal?>suH-!840wjH_9iq2O@%&svZv9a^
z!dIXe$2|NnN8^Zl^j)xf@x<IzBkglFs16q8n`GZ9->e4Bn#)(4Jh2@p;~6|NxRVjm
z1PmU|bhv-9REvVq;CQ@w`LwfH_jvV=4!@PN+slm`XNV;8eKhYWWMW}M^u`v=uD?|k
zlmdSH#MAB`#_6j^XfgRbnS1fQ()n>+|JU%d_KDh^L^{hAZbRTtcG%J?)8eVyx|LY+
z@h+PvZzL@R2S^vE{qEA?`>_z!t$xpLJ<@d6eVucOWknKQ6mQD%9!29CDiS>2O<h`)
zie>tZm_a)By0>SrLS@U_w;D0L;lu+qS$}vv8>krRRHu{Y2*&L*XdNU$Oe5A#c}(Wm
z?Jw0OtnN=*Ac`Lo!{zBbpWY(x<RO11FC*qJbpx=8oc{#G1=AE}2_83f;{)zQ8?+Z+
z-7wuo>gj0S@Ba-d6J%w^l8-2_sK4m>yRE!QOFQGzgo?%fV}HPXG3l;ccyi&@N#L4T
z95)g+qn34UNs#A9{9HQ6W)Q++s|uPr#*IRpy7_cbXB(i3uK8h80=TQ7Rky7I5i~l*
zbR-ifI$F>ZE<h-U;Z5IC#+>8_8%lu0k^xjQrMK=WJLl{HM4tQlP(TaL7TRmvdo2$x
zySy#vCub@Tzl1T}z6UGLrX_S6zY}>GE<*n9btJh5BRaKT2{+>wX0Fz#5`UVLLZ$TB
zO2{6tm9dx{)G~8Ln9&|*k`QLjM5SDmxJyap)5iP|J~x#x+yA$=wt>-PVMrUChKGOC
z&pld$o%n||ddpy^{Gy>M>7a_5bRv&gC#Py0zFM}4s`cM4nw2q{x+<?wf%%8QB~8kt
zk9lS$6W;ai0L8hp|8>}(8tZ>mr0_odr&cO{&dXkPNHjufIjYn*ok0gMTq!2T%KE3H
zx5QyFaNV7Qg<6d?9|04}_Ncjk?M;(g135`%{w5b11r-)gc8*q=@A%^oi1L}Hf5c9F
zm&6no&M6)19@=x!!JAx5(KVuCeYNs3uNt=$yyYBHafDjb?rXqio7kI=l#Z)&2>yUI
z3SXn4Z2d}hGpA%l#<KlX*e#Z<f8XzVcQDwdn#I5*CE^a$1RvveXvA4oB2tev$Pj@D
z`bA(9JYHruy*{D^6!usCY^~^4eXI+2zU1@eAU}Vbfc4mX;kLbG5+26=FJ11j!Y(WB
z(;RzJZHo>A-2N3VyI@IjT{W)bI&lZSWi-a9G6MX{7?dDf?Pt^1dZiUc(Wcnf$;nuV
z>mimX&YB--4>xOe>6B4>Xb+RY4~3n|O-T$A;%t9^jt44aQ@J{&h|*kFZ&^5al$v_2
zs|uz7O6<`OjMj>=+s%2D&X*k%LieLdSka?7WN7(90Ti5bcSH^W<v>kP)2FWZ%37sH
zoL+38#hYhv5y8DpW!~%0AU+T8=hsAE@dVg*Ce2CiTJMVhPLe=ro}<Mq_8B<O%RdMK
z0vC!g5z^=s%F+&+FLCm-&KU_`y@Vubpd{NU_a(I23}sj6vKv>oIY=boP!B$e=ipeT
zXbt4VPT#ZTN{-Bn_=9MW5Lt?L;CYiwY*k)9>9(7gcA3QJ%$YJiR_!D|gz7Z%>-KFK
z)^EaeqCju4^ivltLib|mK!gl5WUTpXR;xg?aUl=N0z}YoMS#C3ATS^NsMT1`QJ%U_
z&ahOQc9Oz6EgE6=$)9-P_WQoE!jcz@R}GSY2{+P@m6;cq7?CEcG09`rgg?q?)79*!
zI?mK;;P1%q2d?UM`pjf@wEfP<($X<Wf-_XmA&B;5oNf{Q5z8ZTzi|sh2j!>Z#X<7*
zLzjA*C@@qgdZhC5`R3H9XsA(LP<us!X=o;ZcP}&6p#Jg1M#Eq?0DgsDx2K~LXfAH{
z4rI2bheY6190~sZ5pXdRNS`T48<#?a)us@ezX$jI?u1ok<PAwfA(=~x@Rkhobjb=-
z@#ccvSQ=fp@NVxYJoN1+KWmVK;r)8=f2m=rAsFZ&##UH?1@2N`%jvPZsx2avm<8E>
zGbI=nU~!^@%+rElvUq>I?KY2mXz$6O=(=86@D_6(XBTjzGjzQ&z$uvWQY5O^7$!)7
zHMkFV&po5mmTmXG3p3ZEKrP6mmo|iN8?vxO=_kq!UVn?>-vSZ9l#~;)PkQ7C+~=)(
zKh;hNIE}M7Lciv7MbbrZ=eU>tf&2HG929^3V+llr;|+0`#>vP-f4IEF0e5U}JK_@i
zOypHY5H#}L%Y5RL$E^NLcf>({a0pIf)qgNrZt-7#3r6B_?r{#3lEY{*Cuq7_O-38+
zM&iS-h!fi|;V*7np*Nyk;dVmet6((>01y)(!loRToh$LO?((Od-N0n{qpT6W6j4;s
zsN~~msX9-m<JJ<CL9O~%fTn89#BCkt;xwtCcR-{)EBk58fg6Fv9aXrG`^ObJ%M}`1
z4OXr5Id+q9$>Qo@as-i9CM5l57oEE*0S2sNw4>usqjM34)of}(bB}Xn>Pkw0Hr`LU
zIvX8mAK6;c^-zc2NvpDMU{zJ-%K@WF251ImCm%D&XcL?h8G7ApUx=R!O?S-z#-Cz)
z9=FcD-hFtxcg<^@O@%+5!U7$^$b@*y^x3Z7uE6LefirewsZVaKFdf?9+}@h~>#@yk
zxpc5gdAcLvUP~ZG01^<LCcK9j(K?gI>k~Ud>xTR~Qf08m%`M%CN<-mbjgV38i5ypo
zfXT-P6?TO=d7!c=O2zz<(<4Oz$tx&^xCun&(_b8c20K99=*!dxJBX2wWH2bD=~9U<
z!UnC~j^E}nBRPw*P@8q8qYyri?-QcnrNO))db)i>ZvOlj`lIS48^ewg3nPUnZCWKT
zgzf7l2JPWYno=N50xD5~Rmanwfkzp^MgedB%oiXqkTdOZ6o`?DDca8#DJ|pM$Na8G
zdpKoVt3Dh*g|I+}um#4mbI-5Xgo1N#Z84;}14pJ`K&<+=UVEFiUMr-5ZzsFHzh7oM
zY;DtgFLw=zYj<4szTilEurqs+jP_W>>P%QG%PvxX)s^gic@DHWUd_cqCpQuaTu#a(
zWEu)w3ic8}brbVA03Sxqh(W&HeI0OKqWHxy6bOmf7X{iE4cHF`aGXN?4yFMp8;8QN
z)cq}1>n}`#dJH#d)hG!7B;c|h&!<o*gkvZ9gI5Wn7cr4s>gX-t^Kg-j`Zy{f`50E<
z%i&~5dptmX#Qq-Ol{RnXzsBDej|5@}jATtIu**u2-&d3TEan%$FzPdyNiSv$a0~W>
zbrs)^xLy}(;ZGdS1=fWa3JaME4jVrn3Ft|(D*|*R@KJm(xEd$#-iPHbMs{G|e^kbb
z3L<1MSu~JQHBhz5fDr-D4r#n6V_v2q4*VBQaun5T=N|(X&Rl;D;))eGLf1BLFDz$t
zNPG(o+m_nCic3Td9T-RgaBw`hT0A&KJoZFf5E4SnKO#6y_An@l%U#}|HIMIun>^Rd
zV-q+wMxdh*ShzYTGsR*jasWh8ZjGbYlYul-rIx4`hh|1!$d+fPZlZ}onP`c{UgTBe
zKDkdfY%j)3%=15+js2lRvi6D(5Ut5rBkQVO`V57up%q(i=9~`U8bG=9p`+|(V}jb$
z1Gd$A&KIf8J?~2bTX}#+_M#-<yfyP79dN)34(6zKR}}u`%~+Tznn#wc8ot7OkSkRy
zz5#N%i7|ua0xBYy1;Y@v+lAL1FT_l`gNCaW`*0zO7$ym0rKb4?e5{wY=p_YVBH3{;
zv#xNFbf9wq%VZ)msv%hk%JeS?2z$MAIsrzjA6fH+4QmPWp=py!j0p5p%CG@|a|)Cc
zmGK7lKGIrJ`!dRsg@-ts|M*AtQvaYV6GNf)*)hnoe8c7t(7_2E6ClXKm1~#BH+}&6
zHyVM;25BPsU+A@`2C7R)VH$bPkib?HV?r<@6GVL#4H+gjM#9Cq94a&`hlDvqL#!1M
z6$Lj4k0_U*lBrR~yC7rt2@Xm?&NWXiLZ{KlNgCIZsJ-Zz3iH7q`S4mg2^#bw)Jzh&
z{Uv=cG84g|!32{3ek5MFRXGj+SgQqOYTJ{J4@@H&A<Vh1Lm>-iB%dVhG!!AF&c~sj
zELO7=*8Xgydgl&mV_1XN+R?-PQ-hP!+yK1V4M)LEj^*qacO%_f18c2uO{v+z5$Bx0
zQQCvf@}cEl-Gk-zP7PFWa1pzsh88~iFCPN7i8V~WR8)2wQ>vO#S(KNixeJrQnIAKL
zxMg0Hb&FWq+2tw@BrHY?;wD6Xy9{h>n^i*vMDMf#z>|69OMd}%6SLyui^lbi_2gmh
z2>9(-<B>yhc>B~a73(-HN^7BFztS3zKcSi+L3J*zZVH)HNrb3}O)e>agQ!n8lRRNh
z(?yw>Js#uaKy@Z^snvd5ruA~+&FdW>7k4!ud8Z6m?`+VO?ZsAXArth^lL+6;6jH#6
z7_@iYl}(Q;T}$Z3myOyD-kDqn@Ilc9=1jZLfqSbRj;jvpUC_tP%j2`3@GA1W2H+vG
z_e3{q$z6k?ygW-=If51vj-=YSzC6vmAAo#>ViR2w%q^;NDQT+ob`!CrEmHr9I@1|k
z!oB{H&wJS&Q}j4wNw$-Y5V<!Q`f6vKpL+W|Nc==1a}yoO;3ja8ZML|bQ*eVI-+a_T
zAmu5YhbSZeD5Mc89B&M(thIh|1Ik?Nif4weRHO``Sh;OvI0$O+uHzkpzdniIE;Yf&
zwx8rrGH`BhQJP!_3ddjwH;e{<KGM&enLQpe?)iLu=jfcZ6sPeh;84gN3Z^6foIZCk
zB5x8qv@nM80KBmvc%58$gpYDJ^7u9{+Qb|&AkV&)Y_}3y^eO-jT%befsw_t=zf<~f
zoQVO6y8hI1!QxSfqEW(727Q5pZ4=5IHHIL{-+X7q$<g)mBOp}FgaEq5S<*LROY<~K
zfilr|(NvkWNf!Eoe~QMeDb#01q5F%RJlHrF3MsgxfV@c>2veaEDf!lew|m&Qle=@4
zgf$#lML23&LWUIOa|KMrZZVRSN(>Y4n@bS%?n&M#a;Qcy+tCyTNlN~}KI*J|RT&VK
zB{ySX@d?KJ+|xk4Ux1PHcxZN|14A1Uy>41w!`w`R*0maj9<P5b%(%0?7AI9EEH*x}
zWk=LsC@ijs?yubgV^&<l{Qn&zKFsUi5#6_hs`lK#X&Y@3AB(`si|ekeHR@Q^nN@iX
zc6yR|rPYRYmRM+(*swt)ud!$y=d{7c+B6z*nd0N=IO=;GGt}MvbM&cO75^sm+6w!G
z^^>^=*TA_4-=8D%mB(Vq7x~UOgr{m4!-px97<!XZ&qBXG^=-b-M3<v&k6cN0G;6?+
zJy~%x?Y6vmdd@H|=l#mvnb!UJd|Y84^jn0_UbE)q@ny<(PaHDrWX|^Grjl|5W_LG!
z^Ln{_ZEe)k?K$W9IhwMo-T4HX`4pAxIwsG><MZ@>*Y@Rj(LT7ESgG~dwmL^iQt-&L
zn9=Rw`s3qT!e{KU;5VO>!{hnaYaQ7l5Rt&VcnFn_l=Mh|BNVzd@O=&!_;U;@5Z&e#
z7PL23R`?V=|KS+9dIei&#-nuN?xyhVei*YSJFWuk_iJC&r(mAQWqq4_dhlRQl}P!$
zNzD-ioYzCF`H3X*z=^g6^1d2H^1}U0y$FB$NXE2-Z}_)##Tbwg*s>omwo10d$`U?;
znA@zLNi=;ytj|S(GQQrS(=7Yl_IpX*3O63K#pFKC&VW!QC+*4B)|Mu2_kSz~LU2tx
zP3TTM_L~J!2R=sOIDcvHLf#r`yy;)@So`ELl0%VWFhf8fFol{b-SW&xCEOPrekE5O
ztahYVL7)A}hgL9aaD~-qZE%&rGoRPPRQ(N_NjUbk>b0Y&#iJq(Nob4F4jNQ%F(@=h
z7M@NAQ-$5o9f7ffZ|bkZe&)J24gZ54Ks<ob#RnK}h|ZTbLTMa;xCHMk;jeRORzX=M
z|LtA+H<qnwb*)Nvc2cD%vlK&VDFtXI%>?R3E2TXNMzkn`%Cr6<W@D>pU;|7TCxxY^
zCtJ0V#~McG(1M$TfQc(GdT@W|0z?Uwwu!44-2f1kDSQV>oH&7LZ%2YiV-thQ6-W5g
z>$TbYaiaNQ?jyBP|Bqm=tpn4<{h02oth;QLC*mU*it;8HKSjJgck`+a0VFBNcbfGD
z22Zyw9Y}fPtSw6goxdk_jwi2`;$PoI*aY%&VUw$vJ$yC0tW-%Bi<)qWB!!Ulw;usu
zdh&FZIs&;;e^7ViPaHr@w@Gr!o47u4VaIVH8bLc$i&*O>{BWtD)pe^{V)SBoh_`Pp
z>fqZE(}c5H3}6cbcTovB9&|weQ>y(x@ZBJkD@DlR)~pI7gpetpXLZADWKS@P5u0__
z0fn%u|1fUxo$_b+G(*0hmwaDjb$P$qUe1RW)MoVXa^Jh;vI&7@t+D4Wif&RZn8!m1
zS+lA%d)np!6zAcHZ5-y2(awBe(tPH!`xA|ZpUI}3di2{B)dr+kk*KB#!*A2n*S_w|
z@5VB7XN8E#hDsnNjA2@Z6HHiSNG;?tG^Sb-nr0Hke_EfDidynlbi2IY5~8U2dzwS%
zJOwT1l7hT2><a-sP}FMJ19Jj>FlB5z*>jj(`6Sdj7xb^!oWLSdK4U9&-xpEjVDF3{
zO24JKt6!0+e7u0_6E+PaYy_;4-q_Pmpy9#QHvm(c2W(&!zotLYr2nyx(0h2_9GK5X
zKIT(8Z5zi0Sh8Ts8jTiYm-Pq8jUhL(E!3ll;LH$~#@xo19KrTfCL}Z?*dUqh2h#50
z1;w@&nIT?7ON{8pG5PcOKuVA}im9?aUp{`WVPZ594=?2sP`d{-NnJpZKqY!Sa)m(t
zF!2ImFBg4Ta%n_Wl6Ss9u+Sv)4<*-B5p{-s;gWte$?s+g0}?+IDX1?*sqr4)R^S{F
z5Sr_f+lM4%NTxV2n}PppEL{6gq~f92#gC{6GMyw36jAyCzQOLz%-VC5@OYv3e(6;7
z>|tvCGyQzKudv0T#~ox;u<q&T`9t*T*g74N*E?|r<5920tVZ_QjJ-SRvc(nXb?@Y6
z@vTw0y7cv)+pJkE@a^linwJ-#R~opmr57IYRi(CRI|Ox1O8>Lo#p3$I>6|)9R>fEI
z51h!YIm*bso90GaMl5kXrQW2@>j~KSA@VvJ9dA$L5WyR;tqvK3G&B#W&uQ7bF$72t
z0xemf^!1%wb755r=&`BDLY+;0O&4=INuqKCjL;NvB{Ei3!weF)@UW+4$V#m8AUoG7
z3~bw;<qoVlqU;oYd_1*XxBC1W;vVoEWEkG37PFr1f?|EPEwq)w;`Y`IU6z9dE!qs<
z*?&>4-YsHCQJo}*<y7WDj-b@|kdOp@FJwqOW{Bihq?NVVz<;qxDJBsB@J(lWFxQ~U
zo0|ly&2&DSyKeaMDRlL9^cET!`t$(b;Rm@)y?iZZ2XzXOuwDx(P?<}Qx8#Di>^g)!
zAICLoY2VmHKsH31#}STo7}vC||0w@#&6`2<Bsl|+vYR323Uh~QH=Wbt<LM&*&i9{I
z2@vtbimoUC0HqxNrM8uok%`vE!rt-!W0g>)Y2~`XHvdiY1+}PvU7l|O&^e;Q9&=E{
zsX{m6(0E413nd<arX{&3rI^xXalf$x$S;{kqPH$1OA_C!&yePR+~@Zgcr)8qFbW@F
z?9ywNYCiqY^aX%x_He=7mX;J|81S+;Az+3avpxA{&4N|X>i!H4FXhxkL9U_uIH!<N
zpv0KRU)s6*MjHEm1)gV-7UZRR3qfm&IHOQbDWQUX9x>b{X<xe{cKTxNUvh~x)qq3`
z1!p-fp_s=Z!MU$Sn43zGp3jguy%01d7?UEw8Q)G#n;a82C6AT_6NDKyQ!9Y14J}Y^
z^?Lt$_;gxiOWhy>H(pRg@j#-UBmp+yI4Ft1Mmgbr_qwa!rv1#U&aY7PMbpC}Zv<D-
z{78PpV$&+%a|`?JpW%BVp>dB1RWmn7(=KY)_?YpPu2Yb^>Xl<A$D-sT`ghr$0VcPS
z<H_W<M5D=1ggn@vY%M|Wev^MLpxBw<9AoLupi!KE@A0M8%uW}l3v0;%G=d{cc<d6$
zKQsk7$I%J)x<)&@*K4LP$t^yRmGd-=!>I_AiX$~<b8n>9fd|~chljoqnvE9jeP=u}
z&+KsmQA8jk*cU1_h+Ffp4rZ@bjeaNQUGPvw-4w7&7eH4)4W<D%9*KY>nM10C;WI(*
ztqMg7J#el(no)Gb&KG#5pmy;K&tEu(uHPO%N&6OaMgwvhwlNI4$b>AdL401E1H-%d
z>PF;ZvIsn;nCsopGE@H1fK#F$(i|~mx}g~8k)}%&F!dH3L9EiG_cpb#@F65#A1Nps
z9jIR~{G$tyncs?1R1Gi8aXLRe6h;xY9ZxW8RXGjHq7K3Y4dwF(4F`w7@Lo{~-;_Hh
zk-`50h|$kqesuoO5X^<N@vR`K8&_cX-r`87qSF&aWd0nU>}#TaTCUtd{>2OmPQqQ`
z6bywY|0MG>uzZHZu#XjH3T?iMMzx;X<6RL17{?%w{nuqIe}#(4(0M_c%OPDD#}Gg<
zev)Pkk2)HsKWU1<f-n`YaHWUGdrgd93gq>ehMqr30KiZ_af%~@d@naxdOb;?KuB~P
zV6w4597uebDKOlTtz(z^69U`JOW|0Wfpr%NU|G!y=q8YePDnk#^jGBM=imca1O_dG
zNn-hiK{R{ynR=2wXHYyx$>;^)Wp2k{@^HO9B5T%Z=JdBm4%QNL@%jnQ00fv5%pt0O
zBq$aXADb7>Yx7vWa)(?PmResOZ~zKJwYLr^1eKx6&mb5YAD*{6E<T{B90FjWv}E3i
z5uA8Wsh2!NZaSl(M4-!OC+R^oKBPG{(kp~cqdkr=qm(A;RJabWPuU`a7BtmAa7Yf0
z1Twv^pF~D-RJ+a0@5Zm%0WEC!Vnp$cH%P#^{gbLughQa8qe)HHVVVe{0H@U~tST)4
zCM}jX>=E4p2VzLv+U$%7Nh8Zl2@-_y$CP*4J#7$DT*uT8dG!53$ii=RAp<%nEYiNF
zq;rtLgf0^kY!kA;2ZF)?F*CJJ+d?>n%A=x5upjz%rtuBP^nhW0J@mCg=h>h=C}bt%
z>A))NvhzirBKr=3DdlKo{3_rJFxpRCAj8?#+E3m=Bw5?}9(BBti;W)e*Zm(l6$wG`
z9^XI_MmrFXm!S>>CFPs#Ijl<-kn!4u#V*R#@-iYGy_G<1#D-jUjdT&!+%G}`DfP6r
zXBKbQ^ag>4f5?z`#-To6Suw&bf5VSw(4NMq1p?_WIA6??t&m&0RkR-B>j!=P1_{q&
z+tzs}&mUa)STIk8@n^Wok3zGVJb#h7Z3C%1K9K&*WE#+UEmKYeG=5!cVZ)V*kSHHd
zD4_@u`yRqla{A%IK3&8y&Y>;)x>QkWXwiXu`P7mZCH8mtG7PuSEBdg~IM(-mwiVLU
zVlCR}Wou2g-({0PR&Cm(KkQ<LCsdTdi#Cmp_nkT_`iRk8E*XvMoN4~Urlr+^OoDEt
zkWs&u_YoeNC|$BVhVT{4MP9q(&CB~8@GLj`UD~$-yyQ6hf$mO|p06bZ0I@;D*&!Dr
ztJevf*2EQ8TbB;cWkl(A`}b|{;Qn`7H5UH^KQ)#MylY@NwM88nE1SpjVI#f%#gP>x
zixlxyXYc@|BA~|95MH@3WGr$mE7;cs9}XYueE&%ZIKhyCpiAhnxW7S>W(!7S-ap{)
zI8YAUb6!4FEWc1Cvsa1!5)eu;W~I5yc&UaD?cg*Dn24)F#1?Xx!&argJjAHBbldAV
zT>`?hUL0pKle>^8ZuYXEU&oHJAT3JEc2;)3cTRHKKVK$Ex)K<8KM<G&Ch4A5OOimk
zdYFAowD@Qd(r|5HL|}KGcsxrkR_Clk`9kFY1}sjnJJ`@o5{MY;aXs+YapD>V+L>Jh
zc^K}^(c<wAdAODBX4P$-?dz?h>g}#j$D5-K*cDrMG=)I^zx>!asNIACYuGugu=aFq
z8;$Z+2ndfi&(_kcGh7MG>)C3BrM*~K@BY*vN=|(pA4IF!`AKEhzOPiG{7gLV?58d<
zQPWC=j@C{&nAymM51Xf*3|u|dmpovs(gP})sRo8ZHuQ4a>_wd(ftIfQ_m%(~l#?*Y
zf3y+*Nxs3<oElU<SYZ|c|AjB;O*=iyH0z0F#6!kLVCn+<gS=`VEvxS&Scr^?3x}OO
z*T%q=xV<~}DnFJL4(rM_a<8Q$G_~e^{~hRT+uKUpgZp-sL*1Cia0c)5Zo#d3xFF#}
z#AKX3Ghn7Sk0zerc!1o*N7RMirxhDiI{0P1U0HOmqd3rva%wBRn2=NqeiDiwm$n*@
z?)T$Q+G2@N>25=F>g46*@fq34bVhj<9{myGGZOIaVx<9sY=E6YJ$wRm(#N`}J%kjn
zD8VnRuYt}Ow%|j+)VLL}Xin)`foFMzp$8o=Icn9qtDZQ@rrEq#c{0NYw#H&3EkY}k
z#xl5Q{{&0bxGriD+qojxIVYzNn8*4}?(<^%;(4@kYTF|^L^3a8S!(L8$f=@|Z#XB|
zUT-=|)~;D3$c*Z^OHK0w$ycs-)+-8d7^m}mXhBTT|5j-sfeXC_QH_tSYh}~x;n7Kq
zW<?tvCjqRAF^5)#@X)&7p)1p6xmRl*P5-c+_KIfVqLMC!N-iPioM72eW;7aYX@;OL
zk1ZvIl+y6GAQD+8D~p|IKrH}SCnBfzs<$~43rmAEvKTO9YJB%VA{D#-@0`_X`Y11}
zSnA9A`=M2EQ5z8|^J-5eCa*J6UpRkgz_F*`Z{#$Wgw4<)oa0%FOXo9$s;8jR(z^Mk
z$$Ee|srJ#n3&L`K;J*IA0Jbi2ysGmsmvOFsGM~rCMVi+-RQ6&=I7Gu$#Kt31zFOi4
z`&qHC9R2pPr(7CE@Sk4Aj(W&$-yqa2r)3sgYBf85;TK8dYIaW(sVCfR+x<to)2+R$
zAH>CkU10-l#N0BzZgSaL2Xn?7{}7rO6Gqq}2Rb})&`6Hsw{dr^7KnvbA~G9ymNMc(
zcv6)e>SwW3On<~@RUrA6Y(yQLYqqz4RQ*192#uw1fQF1E>QQAiliSMy$NL)cn6is^
z{CbJAUm}&{;mkfix=V@KAQhsw3Mw47Xwml@zx~NqT9<g#vcqA>BV%Xtvh&E7NcTa>
z8W%@zGYhENayJ#P*Ao@-ZC`P`HyO0bTdzW{-X_y@O3&){j`eYt<?U0ljYJ8hr2Cq>
z(5xHvm=eLAl}Qy{3ut8+MdtUNyFFap`Gj8?Oywu7)3^q6p9@Zgl-+$_X>-Qc(=T-w
z;JAR|G=ky^dZ9aKPPe(P&N(-x8rxS=%ns1kxrS|g1v~#3;vUF;%`Z6>j%~R-L1wwO
z>~7~NQbH2941dvR{xbHjbb4h*E><@?O85K3m><V|TZ!-Y|G%sLhs(qD-Wq15@UF6O
zuC|rCdt*S2Fy;Wm$PQliWU0EW`o)D21_8q3;rZ~%oCSvu{FsB+<IBOx#eqtXXq5cx
zwDf#!M<8o5a^FMqk(_VE);wX+4GQVNaQt3T`)LsKv}1#!>WlxW05`jm@}0DYYU3*)
zwOWI0+h!nX$7XU&BX0DpU32Cr+3RtgWc-dBa^yg_c5CK%Uq%P|y1DJJqc>&iTCYeW
zt|bEU!Yc(nu{-MMVwKVO54M>*NTxvU%=iYW?S<E-?bAV)jJp)CkzTMKw`FJzCH1$p
z&G6Q$T9}{DQA}24xXX<@mmt#{hz|EVBE8dgH}|&OK8bNZXdZ1=ByQ(Y`VH4~6&_Dv
zN%0f$DVll}>rEn5tHU21=%M#j?{=*+0^w99yM+GsB<H}STIe-)2>13l$H2Hs=r(o;
z&h|Lhz_@DYH+BdOSl9iK#jX6BQT|~p240!(i8-3gt4No-6A%lR`rUPFQ==B_0`hG<
z3q|&jT0&=~SFAZ=_Mn>re{{p0bI_}7a3mVIp=7sbGp~Rl7u3XOxIxw{@AiS<9o7aB
zj_Z;rNR5gd=5f!_(IM?3`6rxXRnt|29_cf#{EHO<$(}o_Y6)xRWJ+#9c$2NE0*Vun
zyE>h0j~JNnv>G@5buFIrl$+PuamnLyfn_F@je3FB^&HG&)s1iin`R#N%jy>NkjACw
z$URG&ixut4JkrKChBgm$+G&)1T;|!v*G%v?bS&y1Wg&6aND#T%bNEK<8s^_!uZqtb
zHS?}=Zs7{NroiamIRasVU2<N-Na$~LyceIxqLr`cJKVNJ6#0!us5xU|>_Ug!Hs*sh
z93PK)7JUR{(x>RsQ#bhzw2iPX1}u4aW#zhMr4B2%t`;E;!&wOE{pTGlO&MM)=l&QK
z3jCF7M$=*apu8Pu3tN^d!vXEptKlNGx|lMdnur))``$Am3j5W&$x#eI1Us^Jmq!~e
z;5h<$4v3wgv`UlKX^5#uH{fk@abEK;ua3_aUmKGqw$!+y2~#0r6}qaVqFy_wpZpA0
zZzPn_j09}Q^=B{#b3QK_<KM;>p^Kq-;G%oi7!Y;($@!tin013+f_wgSaq=V?HAT9f
z@+x(@ObUWcCJo^_n}%SMO+%3RhA|`{8)gv{Bh^TAyRaba^v!wpl8<*@s=X!|0ItXa
z_2E{bA?9}JFDm~J{<r>r;L{i(qU7ePz|^VsfARStGKTLiwftaJW05jz9};HEC)D)O
z_D{>syi$|j25vt692Eb(Q$?v4lEQM2I?^L*xZ8}t>j-I~nI<>vqBms00AYAP<HH{p
zbW%5#$$JB`95+mNBNmdd9_L7j`I(||kQG|o{6QQW)qT}OdP=0sY#lJAu*?K$2JYXY
z>A`HYpd-(CF<>jP+WDjXATW}Y1YeloC4-uF=pek|zUGC(<~{HTe6bH6_@)DonDzmN
zapA1O!+u;mgLZ5I;)})UsEXEPGj}ATg$jl~*g#P#j(sY6{S(CwbDNAcmD*K0iBp#N
zJAzSSd%m_E!bUfC=(UIP>F;>UDoR)Uly<JV1MMngy3zW)gP}t1dkkAdyMJW5nbZd-
zBn4x!4>eFnp}MAdCK*SBIj@uTr1nBf(ihwSO<ethxVTU*m9Jvz{OrR1kU4^5EMhZV
zKh8)(p`axwUK(Mo4tW#g!f^xy#bX%#%F!#YOIa3s3j@2238#NA<K_Mn#Xd7NiSTf+
zJ#v#_8y%E@y^d7PL=zBBkN|Kf$)Ev&xB1<u(WK%X)F*>+N>t&2!u4Q%48;U+l0%#2
zicyPEMVP1RX&at`IJ6MD(xrvMFkmQ@__<jMtik>~_Ut(`vnq#^_Pz(BN^Iao57(M>
zmpSnZ5jq`5u?L)D;z$gxXog#M0(TP;b6)h~W7vt90D|SdbIfqb5on8`M0TZr;1vY2
z9&)Wx>d;`TA>XVLhoS5t;=aYcGaWN>W}2q*jKzdYJuqi!_zI=%Ut7>c=qKgaOAa_1
zS=KwQ6C=Nl6ScW=haH%(gFk?CHnnAb>-o?*jn0w~MkA#$b{6}r?62HpXpv>ph$Y~O
z>zj*%R^zuo^ih|+%jE;k8mFN#)%4B#2pgq<B{kKK;RAa;M`!C+mXJh|gSW*>F!qr3
zQ~WEsj<6^EOpMS@)A<Ve=}G#y%&4Gmx-?}(%jFci+`|a)GM&dH$j8t7ap#+dnQ4&d
z7dho+P+;kJDh3sl(9Dy#*XP5Fn<oC{EUMZnj%m1x;Ax|C3xx$NnZal#-1FsAv0i@|
z3e}NoIj5o3FVhfL+NOi}L6gn^YRYFE+y{Fzxj>O7fKk%@$#fkFcf<7;>YZd^dU=tJ
zaN}7;L^+<l)NIOGRSZX3fNalm$~l=G+^m)M&o(VKVx~Stm940nb^QL6NS7)nf(Zx%
zd6%=cg5mLlRDP8mtE*ER@WV$lP>x3%#y<4EIG-QIsidsf8&CD+<G!=?3Y-|)Y7QFZ
zUyo*F=&UgIfhm=qjzXI6GH#`1R9-<aB~eW-X2E9d&#%t$C@FCeGY)PQb0rJa(JY*B
zi7jWz%8Za?d2qFgZ5G}ZI~vP80RkWgSY9N-TjjHH=z#+k){F^FV>;vPOKlME3*ZQ*
zLX|39o;M8=9gD^zi{bz;NC1qqVEfk^0#L;2=ZM}9t^O5}MB0ty4*&@K@mI8Y{!!85
zksD-y$v&&)$i@I5%qS|cT?~)Tjt{{4Ls{YE6(%Hpd*LnvKPsa^G=e`f6SM!1^hhXO
z25s%v<|YyrENq4Vp+z*VcNgAJ>-@T%ViLf}D9kAJZkq$vzQXTgHJ*N8u}m&Ox(>jf
zWUPdUyWWJ9p_(yXvM2G}If%+nhKT%1Gt<ps`vQdP=uj{`U7{Ftjg`<)Lc^m{c-d9b
zALA$%p1y9R`I+j{Ij2Xi#kG~aXX<W;zHs7REX@lSEF-iq{P@b(H5*?2h+Zwxn<vWb
zC3fJ|{x5Ho^E*t(RC#soyrW)M*9<*=W@mG)(@O-Mem2>4CH{Ysn?Y<Mvg1eq0M#u2
zrIpzKlAHgfl~}Wux7r5B^3R_)6uN=*U_w8Vo&|#!34;7B#ZkgZ*_S5k7@CQ=Y?A5v
zY@ivJ=SIF4Nf#P&gIo)<meLXZv+c?q@5CCChb`(0w{)|SIb)w+JzjP2WXaV{Rio2g
zmdrIiR3zd!+}@r>EBt)B?&zDjlLc(!WA3l^$yI~9NW;h2xm4)_4AbF4^qA>`=AiJ|
zmEg>Q=#V?LzBy}zsS!$ORM}O-bM>DR()A_2#`4ZWG3&w1GB<6N37vrS9m80)F;jAi
z7m|a5dSV;t{F))xo+DxPh{Ro<ajK#uX247}3l#@~BY_@wAjvB(WOCI+tJznjLXYLd
zf(cmvzJ#uEqPd2&qW%nxF2IJ60?mEm!NJJLNFfT!=);*p#umO+&VgcTVW=US4fT-R
zkDo8W@rkt}ii7R1IKvf>Piw&GebQHgPmAw<h)C*Zr1##8S^^sl>^azFG5&s=COS3m
ziR4Bd{;cqmrZEPU{;la=_^4=HzzffaX7khA&C`3%o3G;3fjWgBN$&UsE$#G9z;xaN
z%rmtmr`HYGFM)=cKhZx*U2ue@)qygZv=!riM>5wao`*i-F=yufppb7eg24Q-<U+B8
z#_5<-4xEeYXZ%Deho_Q44OS=}a7-E$RTu}B_Kv0`kC6lnOKBA63WWz9!N?53k2`RM
zsJXy`%BPQi>XlmzG4D&e3_-HN$@B;wXP6I(%98Ne5Vz6roabx@&McQFG!8iKZyM9Z
z?WYGsJ!d;k?6xaC{Yc=&#m3&$Mx|EWb*@9CoSB8L`gdaTZ6|>BE_Ec2##@wJDU;BG
zPRSV%PDXKDM(o+A9B9!ZeV)qP+!~AjWjr${Jx9T%U(ku7`bb34F4x_nIg<oI7+LPo
z<66YRn(;KW2}s@fl$>67)V8)JH1C*0@V*8)UQ}u%csL@sp($mMc!s{ybkmt$mxqZ?
zac~fsuDP&@7ae1N`;8qJf(G)P{uD`?a-zROTonML799ii-xB|{rUsM-XE^I!xHLjE
zKh+MC__H;LNBP~^pEKgYsw`P}Vn{?7#cwrJN+cTeU0Me5XRk%ufmJ^fJ3Dk?`jjDy
zZw847?~9L{>WZ_ao>)E}pU=nFv)k)XIk8+kc$e6hmulay_2Ie}(bkg{zAYD*Z*9e!
zPTSTOml<0=r#~HbwISJCmATtDTBXa|vMXz6myfq|PcF}TTEjgz{P`cGT$FZN9XA94
zvaandXiMH{PA(k<ZvDADPZWC7i-lgCYVcn`Oz*Gj^dDg73f<aeVsH1NJc|?GXHoP3
zN7rtpjbdGe#F^JOJ)!^$%D}z<abp0$ZL{7p?C)dR<YVuTqCLt|k@)Rk0SGV@ipzoi
z5WUija_Kub3ERNB3IF!iJ${1^<DBon-e@KD+6-S(@=upO@I0Wkk8hF&DQ;4ra!h7!
zp_OW-yRLHs+(@q9ULkG~En8e6-f;r}+zH2_okl*c_3EL0%4AvF(JI@ai`@mB$tBm$
z7!R8m20cnEq}EOcKq&d7#~HP8HbKW#E1$AS$<ozj-CeTwwDD*OXBu5R)r#u5xxVg3
z?%Y1xx45VdmF7Zn6N{V|aiiaFJX60i?{?nV3tLyz_}+!T0)29JTE)${yS@KhyL#G<
z7?}^45Y2T?#kf<MMkYwe#Tc=M#u(||{>|tUT*T~|txwRpf4Q8NY5nYy+M3o^ckZ1q
zS2wun>cV)bo!)V&9k(_4=W4fIquXb3LszTtiDJr^DBip*9AOr`=aV7oweEp<Erm;d
z^|$asIGS-Fd0-qGu4y7`XM!gbM;`66RqN(wx!=8TfpoWf*@`-mdxreQ5n5|QuN$DR
zW0`Q)#iPhZ17FX1OsCS-na6s|iFJg;{|!1!PHv314t>J<8w;a4R-Ci_tBn=I#Rmfx
z9^PQqdnn#9jW;oBrl?tb>9C^!oTHFX6Z<|N#r~TaV~h7pA;gfE%N6Xd1I?XikWjW%
zY(;~j4q?b}2h%OD7J9#(!j|FF&7A$P3(y}AY$v3b4&pKesC>*3%*a{)@7(feA3&rE
znmTukLD%SCl`@X@lap#Ze}aIY2+))~<y)Ss*r&Q02B%uKf3s5KrSfu`z15asn>Z(1
zw^d6~;K~#7FAYx?u5K>O-FPsfUmHBya9lDWUon~_svJqtKGX~2=X_7?e1%5oqP6?d
zwFN^)P|d<<1A^Gax4P39Cf%Q{&1$>wzJbF(;kT|9<>bu#l^QlY^;oo3g=Cv8(?hCl
z+XqRTwmO2^-*q4K*6&ZmZzFR@8yg!FKAgl`&h`S}2n$IgXjPsR`NyYU@A0;Ke)ay+
zLljHz$(n57MwwOe4AxQlc7#G#SPfY+1&y=~o3zH*4V^Lt|HIff1!vNA;f8N)+qP}n
zwr$(CZA@%uVmq1GHYU~tC*S2cH|M|UTJ?18Rl9a|Rd=s?@Icq}@n0D%SNw&pwU6Ee
zr{x;s0niCupyS7~mEJV|in06Cw)SJoy@3w#d!5`a2BPrZs-%NP3{vfEK<HPlw;G6G
zt8eBwi1p0`uCzL-S}LZpU^LA>R9%3a_SL84&4%LXq%CxJd|z(MvMoZ4L%nWA16CWq
zj4uDZb<sU;-a%$eE&X}_u<RqY#ZsFZIo7iIvMFj$b$J)8UYVgDTz&S%yDCRs`!si_
zeYK26+*CzAjg~l{4jY!)Q&lCsYc+Yvjy~Hm+AVa5Qq-!Qo70x~R5Fv>!WoVlJS6zH
zyDF6qeDG9FmAZ!7?AhtfeB}n4-m)l-vaKPV9x_LTY6-nxt0bEkG37<vC!&&(S`k-(
zV#?vbfQ0+6S2qa9@4^$M<)Xpkp|J_Pt2lcrwjL`M)`*Db0%;xAs=p{t(Z=?bZjRP`
z6^(|!sy-$1;x{<YR%Es<n?<(crF}bksq#FPt{D<FIqKc1I}$4Pg!nqp@KWP!8dj9l
z3DuD0ZeS|}V-g)>ltscuk*RN7r7OZV-p^(f%e2;u+PGW1sdXDTFF9BKl}qz%>pLV;
zKiStgFt{}&FN><Q0b?npM9<zq+^&6Q*M=aUb=8I_H##T^y6M_d7jEW2Q|ekE_%x-s
z-YnbuFuaX@e!Vz<6TGw%gVt_^Rc;B=cqmbMAWTnWdjw<rM)B?TXz1zQn6H-GtMY1{
zQO_B~wl)|d$h`fB{Z$xT0OY&=7$<^Y*H#DI;xk($5@6w*S38d*eU_gFg5#ZQ!}nf}
zf2y6}UlswzcTkR_?wx4_xTfLj<)2<sESdO>UF7TR8`S41FASG%HG#Iia4CP{;&|d(
ze9zT*A1+L&cp5-5d?<%!QJ-{mn>}+^6&EVsl&$euk*g8+p8M_`<57}0W8E_-{`@=g
zmBIJr*V315Hm9F!KDT2#t;Zl|R_$B8d}F1On^k`Hb5$!x45VR}1>Uyh8|va7T3dnD
z;amOe@~(TtUC4OEwWEGc&W{6H;C5@x=Tn)hTWQuf#|p~-Q8{j|%Z}8^i}_rtexp^T
z6DeOz%IZyFYH6ga)yvXMElK+-LMSdu(cGGkUwky@*}c7>?fqluto+XDAzhBI|FNd8
znJi;N2xagg{4hs2b26xEZ%5rS==JqoE+Jc@O!>&@tHI*&U0>U8$Lh|%8pp5y75q-A
zlGSIRQMs`ZN2P^k4WwsP%}%6wHZaQ4q2py=>yusAB?GJYh^Kg3r&mr{3F6LY%l0Uq
zX&<*iEhf|2kM($Sj5l+V4ybBGe=jO~Ix1L%x|(igokPI*?b-hjd)^|d18)F)gT11B
z+m+VJsU1^m4C=wpxApcY`R~cbP0vgWs{k~dSgo79xEPJ01o|r`SI2X`+|jOR6{%T%
z^Ko3yZnm7^=JC$?8oC5ijY)8*bx^C-cmPE`%|$G3S*askzN)qKYvo{2@X(IRz%|0<
z>@)s-L~&qKS?es`I?|!qP>zm$*e1oh&w%@&=6Vql#Jbds1^P@}Jlx~@TaonG8}5T~
zp|g8;2Qy}CnataSa$70EG#rN<NslH(m1I;w4WQP7X?q#eKdJfed1O(rsW+-J(RO>-
zH_z2lr{0PB>iZM>w2be;>ijk2PxsSRr?&9ZiT{lJ7mWLTfCbuZglgF(5+L=mqpc>U
zQ(w^4cegdiW|4g{c^9?<RS!p_794dI<Q)x0!6i%GvW<as!^|c|M27*3qO4^!k2zoB
z@K%`CVv35v)Qz@Q%})3GqJZK!s)gU^`}#EYgiY{r-X)TMgdX9Tfa0N}%Ujs&5x9MD
zv*Y<DE8cQT;zioE2hdf|xj}o_z%QkHZ8phSgMeCHKymTA8+t!2@8UwxV7Ar(nbP`U
zws%9|B4~Q*@%}W58@3*xU8$=hicku_*>!<<Q$`bc(WKD5ZmJ^T%CIfc5~tns-c;D9
zRHLEs^@;4dD|<WX+-lUCvgE5$K*OQ*Bx}Y#yS8d62gg3UE(3>MAOb53hrLS$D-8z-
z2he0J;j@Sfuq4^%?$$44OLENK%9O@Au+htw#wAeFOP6Atq*vXGT$7tTx}cnoK22lS
zM!6owm)qrT_Ez>$S0-UctS!%_=pD+ows~B`n>_aZ+`hMnTM_MY0##jaVb-=&5gG2s
zwSVxpjO$2ZU?7{8e%W9RkBu1({8sQZU<GW&{+&T9lCOF~6O!>=#PrvhPIrw<;y8Sg
zd6NT~K5rONibe>>bK|K&=r`3jJ$LbgFwk$SvPQD7{Qcx{!+jj)??%RkeGp#u!CEK<
zdwr~Jg2=O0!7n3ta32%tY~$+4h<&gMpEuCZ1)#rmX+7aUc>f1p7Wy6?xMYA7SqZjx
zTa{r~u0!xv+7LbAY7G}|X_7Q+{z_+2;~+Kpmv>{cH*TVgQk&<ZJ16BMC?V)svh?Bi
zTBU#-m6fWCSc{3TW68~yPAa&a?(nU%Wt7JT-ThHRU^6K!_Yu|ezQ=^-7_kC>tKS$D
z6)TGlc|MJC2$eIq6mgPZJ*vE|1g#J`mbg8x6Gk>DcBm67RLBIpo&qCB@XoM%@OUez
zsq;{%a`v8NlEhZ#{JbG_RvuU^&-@e$Hn$We5lTXZqggD;$W{!fG-wDFeB@l`pQz1Y
z@@XaRp!YT$B-{xnzXP%)*33+k#r`<bXX$fMT14o4nNR{490}(XQfE?@OkZ><j%OtO
z!4FDEKC{TcVdi3}$tIGEFnv+EykbqngnyPg8n3DA^vqD$;!tW$q6cBqFnA$S+(t)X
zAOjK1Meqq}^2n)<AN@l~AQVP*EpX(?f%BS%4v65y?j&r;E|Ghxke1JW^uqg{<wV9<
z%=<+y+lgYKZ_yL`y(pZyBFz+?6nXu)6KF{LjHupB?v@}3XyW*x>WCyNhAI~uNnFa9
zYk$h<hZvLdF(`C-FeJf$7yBKIH)4@H;Q55EO=FyGF-j7P+nL={I*AA%SuROVh6cjG
zk?%_h7lZX!j`2bw7u8^NZy{8M$QH?QzGOiqcn15l#gIeT^B8V)E*TNQ@R<_lN-DgQ
z^G1Rc+yap--WiW3i-sYkpcWBZYcMJV`pl5V4(vGvuefwNVrDc(^KFJp7DsZ&if}X?
z4jbO<4*G4nrMh?>tT!%^zi{p&m1oiU3K(z6#sxwHLaHfW%%%r!#!;CIn2HotC;|gp
zNJ65TDU*OTqDYXXZRZyJi?<$daj8J&*@?_kVNOJW*FaDrNQEH7)s=312Fq~Wi1RN+
z|FG9$sPv=HBWCetb;MS25kC(mdcvx?>CGJ*kq{$CNN%d_=@I;iVyycB;~I?uF>I!c
zwlc*I4*$tAHntWOnl>h0l2qLQN~9D}ig3;>!=7~m+4Y!La6*>E3L|1(mlq{QA_9Vv
zx&nhs*(5>}6|HD=6gv}^t@KTH>hBDxB(jSD=w|)|)+$2YkW!2B;V4p(GZ_AnQN<n8
zA1)5exdp<LO-IhV9A#u-#Pjj**PBy^f^*58L!N8V-;3-=sK_?50!ccoUV;q0g;EIz
zV&HM7oay8xO_EIxtv()Tt~8zW-f|+cA{7^<1w|i_H8!u46}G3K79-jrB7FRP`nH6C
z%m%ZT7_>*r63h8uN2N$Hk#)MDc#gW*AA%(}Q)H<x?(5QY#Po8AnMY$RWk|1Hne?On
zCiO2q#laeCh;vnlJgtVBwLmqmlMF)w4j2FloIOq?HtL_5E@S)*1$N@r<^#bh8>GCa
zin2{pV9es;XLB<a!hQ2UpuR*JO8`w%U`N57PFM+n+OUwf<X%NDiX|2DL>;6|PGSc0
zWPSDx0y1<XBz2b+;1cd=EJ0_B6g+PjU$m(!XkZ-XlsCM8Av-j`A|t+cqz@PJg6)%H
zOQyh$2nS~7+Pd2gES>=W@|ynG*`WF^7xvS)_}UkF;y}lHaF8fIy;o4@XZtcYvrwzz
zyk<fbxCS4mr+tFDzii7a@1zwd3)uepe+Yr3i^weSKZHPXMj#-%|HXd)znPhlvz<HV
z|A!ISqV4m;2yFV!c}LaMk}AzC2ENTx<#YPOdTrG;QR%XI!(9iOTsTrAT19#+(Y!wA
zZvmtnN-*(!Gjqa;%$A7-dvb>Z^k>Ile4wooA-R}0@tA9U+?#EKWUgvPO)r;DXOQaQ
z<Q6%RLq<y9&eY5GG5L30^$WAz#D1Hey4zvm&~o%gC<xq}6nhhYMi$Eks2oF#YI@xC
zc-yq8oVLh>G(r*;@)+Ks=LzC{yS2>9L3FB`Oj{fn+jWzrq<#%)Qby%gODUz4b}dJ>
zaB3wfhFG_17Y|)tylQHxv^MZG$Qp-6Ayj^n(z*BBXY*+QpZCsUwzW=3Q;p?Dmt>or
zQjn*dD2(w`+cs+gJUl%;eJ(WmJS)wwsyX<UX`yy>i}gAUlGfW1j8_P2|H_!QG%~5W
zaic7~q}AmM>5md_3WKPb^16J?Heb2>i|hy?-xAQ{inH2kTbOEk>>S!^7%zI898;af
z3z7whN`yp8mg%s9ujlufYK#a0{3l<y3DO2rF)#6cF$@_k8E5dX8(+PC-`!xUw>E%{
z^?Z^PrY2iy(vO1-yu_DG?I~exJ-eM7`N~Yt!^m&Q==ffqBY(#|mb%}ruZsz%Nwf2-
zO@K-5V<huswXR?^VWPqZ<@G{?<ZAU|9?3?)L8tCiQ&?!SmwqWYZwPkbir^$ES4vrp
z7>qGB-B{N2i2HK9+Mw{pa)P7&)F1Mh42<o?$9>p>eo;k_j&;Ebc##+`CrhnZZvL#B
z?wg)0G|nQKau;`p_uGBj@~T$*<KvHc54xKUB*%ZzIZOm=La7H31;zbvQHW%il8h8U
z<&;1{^LJRh5B-R*fPSHse%bX|OngfdMITp$PXD~Vz*e2~k!~(3G0+Z_qU)vk7ZbI7
zH8m2acOcfT=v|3tNXl*HAf&HUgR0*>h>7MKYNhFL9W6wXRnAR=jLU+06E3i&aE+jt
z)I^Yb=Wfd_)ih`?#j1^?f5Lz7+Frt8E^u0-X9B84tHY^*r!8%gCcM&469_8_1l3jL
zR7eps+b&dq0fc;p=;D8qsAPfDCSB1hNvmimtFq*P6o8~uy~+&{v}c5j!LfxfCoLn5
z>ql8qlrGO{#S(0TxFtvouSYsr7aJGWJ=4n{h_KY`gZm8IK&&~?uy>sUds?@S$*~;3
z4BxA`yRkRH_#!B2k#7m8f%b9E`3!6Zt@Wpx&Gpmzp?Ynio11`KMAw5)#TJR-H8q9L
zf>;`b$VaXgyk!4!{n-2)M7abmiZ#>TKi^p@+ilLYT?@pMr_z3jtw5-p?%!>Ov^yx6
zkM&i)d`=9QFi%8#GZ`gFs4#cx2KmL@9f8jCM|<;WfLSzSR}<%-;=yDA_wFJ)=7PQs
z$x~)O4Ok4PxvC331e@_&5~Wj7_mBg-lT0RQd_Rohf2aJ$Q}F-yblp+VXTW^E0)2&$
zu;U9l9TRa2GAJfrzD-z%4}4`P&L3MdvG{ivmu~OS#FPL1A93&tg~Z6Z_WVeyMBC-M
zJ?|#cy744$j#%3mYU4R)mYk$%iX$Phg)IalBB4_;a=n(Qs$ZhTuWMspsBnK$XYg$w
z3+Plci)f2%;f@*IoCllo#D4SXlP@+E$;fA<mo6&7SUYh!6_7c`V-UH4qxJN2<1N~e
zBhc)JJJuk_k3&|JTFzQ)OB>ASb5c8oYbhoBE2&Ps%@l$SQ#PHN5p(X|+}!wUDmPsF
zZdbrVT>eLu#G|V9nj7xP=6EQsg1^2jMa1(_C7+kMLT@9*-1S8J^HCVzo4vbCYKdy3
z@uHN>wbay}K*aZroj%}83Fb7ZsdSzE=)BtD%U$~X{Fv<3*ALuEX${3l0of;cBV{^Y
z(kFQ{g~g{Smo7h-Up#-php}PJqWRx+Kuy?A|B{2@1&422CjZ+L=IAL>e8JlGuh$I<
zM?QZr8b~6-9w6?DpO>HX%mGa}6k9eSH)l+JFE<}w>pPNcVGnVHoS1!HzVMvi*W;tB
z>GJ)Svi1_`EdcLuFHkmm0sn^j9_g$@r%2{zckI_c*lpw5ra1MMIc~LoAH)2kulZ{}
zA4H^wzg+3ir`c2)6{z~%Z0-~${CW)Y)2nNDL}YocI@Z^G{u<6kEXMoJ<@Ee(A&-tZ
z-!_e+ZDz~`VG-dm?d+RZV?}G8TPuOaZmU^&vfTNRBG&}j9V5T=S!0N1$H@X$70uO{
z`2jlgLHF97^=FG<fP(8G2{mgs#hT?ZL<Pr)5lC4pW&TZm4b@e9*ZUfpQ2a)0kQ<{O
zf!CU3N#xD|x+k8y``v)`tleQo?Xij5BUD>v>4;3V3P&wjxIkZI6?~xm)k{~njI`F4
zel)NQiV1<%Pc&;}L)Abfqf`&ARZ<6nK{6>mMN{29f=1S1ol~`p+JVSxnu^TfT}<D<
zBq}^7lYw^SwlIjwzBdWAhJiOmRR3sHG+0Zg<?eIT>tR4WX?<J9gf~AQFFF{G|8nlg
z8B{X*uS)Ts#I@_PA$R+ssYHX(XdV=2tM!1gp=4n@k4Hwtph{$T8Ibsf4+>nz*kh?o
zLs?t^-7eW0!Wek0RH|2r=^n!2TOGzR#lu%p-ftWun08cm;Fa;DG}Ov6!z)=oTymx3
z$f%B-3k^0kwN-8X!vcK2wp?kR_Br!BstUv+xrFFl<TZiM^n>T$sTs99Fi$m*Wsz2@
z>wIg`$?rp|v)t`_$YOudy{G6zwzruh*Sk33cIO8;S{~wxV)W~c>_Xl1Z7#pJ4}LYY
ztbdN6rgL4onnKTKc=K)=(E6}&FU&FtM8BvQQMg-Yzlp!34`401h7Ts&gm>|X$hk#2
za4t7mCsCX=_tEr52weT$1dHv%iVF$p)_b!cyb_St#ZxQKS^oD4AN4{WhqQMIRZaFP
zKln48u=t&{^v&<apLVs%thysP-+Ptm=K~(yd|vXhTb+H$ewQQGJOtkJe#!MjVSTD_
z)O~f}Bq0l+_~7xV%^uM6MtUDY9R%_TSudcR`Bw4M^8oMD(l5|jG^ApoGuu$E=RiZb
z=-FBPEpYC37PtP3=%7z&xjhc}Zvgc@2jWRNt_Gx`oX6&lRR#u2PZ&ob@JpOo*T!Iy
z8|-PNiqbC`3oiUP+_Pr7-viY(GMCGjKc5lY-cW~^s<!e53AxQ`X*INNxIib>aZ7X0
ze7+;>yw1bW@W0dx=U@}~fn^-ywLHDQtJ>>#`+TpRTL^O3bTu;?Bs}zYvI7th#5NWR
zjud@#ZxNe9JsK(h7Il0PSo>kz?qgCW0^2QCCHORi{Nv(Y&L9rdk*A_NJ@#^?o@(pu
zYGrO!*wW14ZDY`@@`!X9ElKHfRT%{Ob5>yziZV|27jt=7I~O?3rfSMV6{8}*+<PJZ
z0+eljsee;Rq)<E?n<#Y<cq|w}THS8*X;zn@F8*#Qd_LN$tqN?%ER`C8HHF)Us@#4t
z;1Ar7pFGE&8z{BQ^16cuv@Tn9k4M9Kun7k94E$}@+|Ir$BJFPy;2k>wJp8}jwFB}r
zsOT%Gp$`yl_$xHar*gSRn0eh8At(~FQ&k(h8+m*c{N7u<9j+sj4yZN;wE*M&yXJ>k
z?fw-cj`=Kp<O;EiN~}ZgmxLEXPmtn-<$X~7mlul_2<HG!ql5MPiMi%6Q=O{KjPsO&
zYq{1S4o;7x1V81tWodaWAmW6bbjLyUE~WaZZvyXsrgACw2*)5M`TQ(5jy2C~acI>`
ze~K3Bx3em`Wdq^w<-O|CF~EU#^ppm!HWxaJyD2zO<d4&&seIQ>sCT>MbMrjfr#xet
z2jKc@JfNQ@76m$4l!(3&?96831r$H_C$3S!zJ6uGP2R-c!q$_guH)_F(4w~n(~HC*
zUuxzbiiJ1Tkod;9mBwC~-c)gpyn#3fq$c6*^U$K3F@(DGG`g#;T6I;6F8AxHt?c6*
z31j@i6Fm2PY1S7(o>?<VH&!hyo4~WAY7(ZCyHS)$LbJ7UhR}(|UBL5#_@!71^viQ-
zAwIYKwZwscR+po+=;dr>DJ0CVUi#K2TS=i~J8is<Myx~2-G4WFx;O(r0c`G&5@ug$
z5c=F~d~5!}cvLS7!ao~sI;!9guhc%}jhX$Ri($Icfko6U3Hpduaw%vt&Of2aPg0K_
z%DZjI%uh~>*kf9#iUK8cglQ&^he#NOBiiSCPGIw-hNX<Gf+)fm%oxB4ZE+Ez6RGZn
z@=ejq9^0w{<-<oJz>65d{HBxk9_3u>oQzj`0k)vrD7`DI;53TjtsnPZ^j+)hm{+!#
zvmacXH3e#_ET@4G9@%^?*OUrQbo`SQ%;K#-w~2E?>#WQR@qzFeV17O#g*enPokhXi
zq7|H{j|pxM_VD%xFVhM>RtsBHD%IRSIJ;9qW#A7htQhvMAO~8;6efj`tpqP&ugK|q
z$ewW&;>6oiv2b$%xeB0Vsgp)rea0=|P=QI&Bj%Its3NX--E)=#87wd@dR4_hnlJ@k
z8Qu&Q>mxuJJ;EYo{Cy}3hF(UXoKb#wR4Nzv3&OM&AywG4qtOPX!U9ef!(gVD(Uo!#
zKihAlQesCx0I~hBnquad2|ff7nks;qbvm#gnC+ggA?cJWJVz!RUCe(n1a;7uGyo7k
zb-#pBITkj}$f1itJiEmi^Eo_oAH;QA38_brtaTKWBX!&*sF*}bA4;}AD7g?>hI<nH
zIw>3YZ7X}1_`rIfg(1|`G0{)!nLH)QD2XG!-LK+rP7KLQNtw`{imjF5%n)T5hc#1z
z$s4YP0jQiS#0J@wDYfw=F)<VY>qH&jI)$}iggM9rY(0GTV>Dt7Y?b_ZBH2YC%A>+K
zvlw>}5{a};Hl<}kA2;4Fiv^bg>l9R3nl6P2SJWj!QM@x({7o5JHGVHSNg5xt{)C)e
z8pTj#{CnIr52rb`d{0Fn&JU9Jq<NYcc#lvoL5!G9_msjZ8=3)Os6XsHi7T=L_I_(7
zIFup~N!-l`DKIt^I^xeEHOHXjYY@&65Hism=nzg)hPV+}>!dTJQzR9((3_Gx6Kg(>
z4CtkC_BihxxCdy4RQwKNK0*{timW)UK5Px>ie?9wsVuf25Sl$05ll($5ON2?Ec+mx
z=h>vH^gu}9h^5OYv7-;R^CQZyB4B1>6r=PXHy)}$^m5Ca2&@i@2;5YxX`^&C`4B{#
zIAAbROnc}XfZ-$f7&p3j8Dqs6XEFYUJW&bLmejZ<h#OSoUf6U)mV_2^c%mcy(;)4j
zue%p@e+*Qi=6KH<WOU9bbCN0}qz5sIE+H5R%-|AeM=9$AtbmWzg@qwlX~d%^az#G!
z32*!&t{_vYE@o%aFDamg<7n6&QfqkSITNQ;??IR%Gq}1TJ9OKs6)~!fsxR3G)r^<f
zD(bn|6Dw9ZpR;7~A6@c$ou#XYk7a=PCXVR4yG09^&zX(5z)#I@{>b2CsVQE9E&2{H
zV<q=F6BUQ}sb@`GaeXYA#BH!d-_wm-kbTbZ#OE+Y-}Q|iA$=^N#aS3(FS7%Izn%l1
z0h0*Cd|fyd_6Usj{V#-nhT4Evp9ALr^f*OVw`=`IK0x}Qju1)smT-Zs5Ta~}OVdno
zg#hObP*rS1D^gjAH~{GeC;)rSBD86U7xeN9cnel>GfFVYuY45WgJ)+ue<kbh?BI6W
zD&BVQm8a_%TulC7^3$zz2MyPSU9P$tb=-y05rUQ1vu+VK0i|8=!+NesKwkj1KZt3L
zfP-{hmw{SO&vSE?lS6NBA2ya|abJ|$>Ey`kpON~^<&2sLg@XO|f!*G~!vx7cHUGk2
ze4Q@@r>=X=N9!4b{!JuEFxbQU#G|+mElw~j<$nyC!x$O{9kQ9=;0ybnaXEG^mJAgX
zTyia!oFudedqyuW&eU5Ict9kXQ*{uy?q-FE46u0UW^SK&vtrlf;Gd^#&Rmui_UU!G
z_q0rA9y(9G8@^tYIKkG|?(>8HZF?-6IKLO(&S69p?HlOytlQa6N$9>z>0gZay2*wx
zc+TWHWOzJutQ-V+3S*6T#lF7z<j!+*bq|^4;qDXi;OW}j-qA5neaya7(?eACieJ^{
zJERZygWk6ZaAVopa^;{+4B@Dgi%o07p$X&U1dl(jDIU^xv(2IFxdF7X5In54{Kn97
zm${7l47(BUFk1@b`eVEPWc9jNdlT=O@pKzq+&s2ozDfIQ+}tBW;+9jzW6WR>*uXKZ
zK#qL~L>Kd4!sj%<6)=w9AVh(7K!Ae#XK_t8@sJKGrO9FP)ztfieME=B2GI~}2(=HT
zbc#_0H>je-wqI#@8h-qe+?z$AtbsK3+2u_H$b<J8{Fd8EdsG#ry`R`Y>9V(9HQYx2
z^||;{5F*HD&{j43#aI9gGoIGrteA<-9b1qdxa};jbY&0D-e_b32@e)f#5QJvr>Ufn
z5RNf$q}G~sKTvR=-r%La>5xH8Wqd3BaTj$ADzR$8c>zrvt?!D!9naV2hpD&h>9<aK
zYb`tM(ERBUjjUsIUM8g!&)SM0KdE#^n+!uDn;E-}(fJQE?tJZd1n`C_a~cSC!rNMD
zt6n9CdU0f+xHK1V*c8qLYtEv4{Nc}=g%`tYGa#5^aQJZ-4Io^hEhoYTkd|4TJn$53
z4#!B{HdW!1UO!BBx$r(}OwPiM*sG&lOniF#Ain<uRYu;TQc<L|<YnChU5Pdi*2$5&
z&j-{%48TDB^VfYpjJrMBBTK7LF}j>UhVu9WS?BroAReCKt$zS8gw6f+XVmidV%K~F
zh2|~5*fXys3A|^!g^Hc44Xm#O!~JfJ(NUG@tC;vDN<qvnLg{5%2PtD8<Nqe=Z5TM$
zSpAUn0JlIu^#AM7@qfzLx$?8|*=%dNu{hUo<dUXdPn8YCP;%N<qi{;OO50TVW%n$v
z8-X#dP8}6Z$>qNJ*j|98E16hqs^k9WvF6B%4yqq0WMFy^oRQGsb80RB*W$G!<Bs{E
zipgO4&^z6sKQmVWe7u4=pp~{=j_v@9K_T<bcW@K}LLnAo@dz)*e00axJy~`!zL5hL
zTYy-|`eR&~ozKkamp_cPH*@3~r&%Kt!I-V}bc=L2@sy?UK{##4!Ug8&H@S-mYA(*9
zsrj@DV0l^|P`N+=n>8>?%$|i6(uhP>GU13AOJeSeIW6zG-Gr_sff^e}nhUPT8F-N5
zQUTR#BBZ~XGWPOPfOl2h!kVQ})a02sTOQ)bk3%ZR&lZf8m^W>n@_6(79DzW<4dqHG
z7m;V`{hQ9R&CGzCqIscVmZ#ST^t&+Ipgd$fHZJaVYYk`YbTr1)6aOPU7kd|wGQs+$
ze|XGOQh-VddxXNIh{wjMX*>zd2Rq8hY2`Sr2&)X137|%jRWcT2k&ZK*j6Jks%pcGM
zD5c6C4!o{qlBtPobT)p8h@DFb>N#wZJyPP5FF36IiX3s-gYa=V@sY?UNu6o5#|c3?
zDriE&nS*`Jb!H11$Ztzn&y)i_5|B1F7hEk+Ft^Q)<r#fwZ2Vqw(KnyLA_zuRm9S)f
zcIGC)*?m(C5ReRtl!1%}(GcH!g~z_ZoI_UJI21xH1P}5p*;QWj<WR5xNb>BhfK9`3
z*#JlPE}mm17;y&g-)_AoI)c7AI@{w)AT8Z;n^Nu@a)ZEk1S5<N4PXK&<kl%e@$o=d
zLX4uXDtm><PZK?mB7kezu|z%%g%md<QiQ<J$`T7;;|OI>Sd4T^Nb^I)`rFr~fMRER
zrQj0r;{&i`6*&q~9wKdICwJzsvbS;Ja3F|e1A9UweC$y1q5*v&wuJ#El|r1zz?wW&
zG3r>7Uc{Uc(RLf~5G+Z|@j~AH^vq#yupwBJJ#ojp5~(;W=ic}@6u<=Kocnr$K|lH>
z0a$sZQ>71b57K$$kF5JGs7dCNC>DS+3O~auV(zY8JL`2yHiUFyaoUGiKMnSR7prMy
zxkNeY-@853KXWNu^AP86mdrBdA&`DF(7`-4r3iUzq1H8aH8!iwJlnrs$ot<7!CGDn
zK1@Z|NTD65hyCK|1biQTBrdi=6k4i1m1AYKxCv&J_n#o2%t90$F?#Qw1F4kGO>n&c
z;%susNCc`g$zO5#k#G^^OlKxz9ZE$Kfl5F|0y{Q7@=~2>2qd??XF*9Z8ud{gk-ufv
z?*em_Fk=IJKI=tLh7myH-MGZA1;1RaZsDELRPZA5*R=XN5dp$(afhT)Ww4$RSM0E~
z&?IuFvT)f<ShAT7G!?3j6`p|QK!CVys_Y!ks1UKOiOc*hYBuXJ041=QQ(~p8Uy!oA
z5o-NVuE^ffU-L+WnIPD}Y|BPI39L%${nH4!BK<T4(>4g^0EoQ&4f7JZGf8-=7-T5|
zn6(Fq1#qw~cqo|+g_=*!Df(yBNIpklEZH2lAK}KL7^r4N5~7a<6!lERho8wQe*`}0
zJ9t3^h9H*2QHIJRjkC%kWc{tr5hQqa@6i!<kV$Mz5qnFout}ns%fU3c^c+YRb%jg(
z*g^<$LR#=F1C(`>f<e}=qmkk&6>fl@i6EQ|&xnQ4xTTV5HMBT8suKrKyZ;og;=pjQ
zScq{ryi>yq)@4QU^(Foe=7rMws*&H_of*hsP^}ihg={uEyG*_jt3~6FlhKtq0p=lm
zWOa<I=HNu>=w&LCYt^qSM8BC!Oa45NlKF={R9?36Ks;#i2DABGDC{K4z(p-aa2tqA
zoaxt8u*neYf>@*X%>10m>!4d@d&4dQMkSQ*CZpgDStHGLR5u1i`qrcIo3<QACLrJs
z4k1viyM3rEMfi1jZ|1YPKi5{wB5A|>bWJg5w3%cij&@xW(0()GQXBJx!CE@gQi_Wz
z4FI4t)sNr>%veBQ^<8YZOFZ4YP{@`6SOpS<?IS%V#V<xWIAcY*MaXc*@WRzX%-^FP
z<t=Ut2Oiz_P_RH4P_Le;zpZSQ5YeWUod<)lPfRc$)^V*(=Lgu2*E#z@_hH67>87o7
zL!tT`9z%1~LY?=TDLo(!i%Yy*ohiGX1YFJpccywU%SXl(2p}Jspv)=y0o1bNhW(TH
z7}AaY0f=yWJhILZdvLaOu*vD5s7xR%0G8O?Nbo6h_Ehh<5LImMY1a@W2w}tgy?A-U
z6_z#5EP{f}uFhZyxiIu6`y5U5f$72k`d><W2w<aBisFTm*F6OWP(R~-U#;7BFHdgC
z6Dn>&QAVJhhzC_o?xueahkS=vu+>XhSh9ze$ldXrVB}J4w?8?ZZz}O34ZJW1vqg8H
z5S@OGbB6uo<FGZ1c|g6wwUgWlBK!mAW{{H{I*9@q<kEUpP^=1mfnJdn?|bK*Djm!~
z=T4bf2^bs+uzVojRRvpCTR8|3PWL?Xh7LydMuTr4?)$>h3jsoERMrBJ-avTy;uIlR
zoD`xx^(=@SGUSH7{Z!H+MT@z2$1<!6O5@511x6XdmUR^|jOwhb6lbduV19Cw#atVx
z<1Qd3gP&n%i1I4B7KI>)kS|E>a}p)C>=Ii+c!5;3i19T7ndMFJSNn*t8UKn0?l65I
ztD!>4ewU{hMpi(9r!IoBFxvW>3okC8p|%~Haao(0lzBrlxa>{J)gku)Dwl*4Llp((
zN4il<v7o^ZK@&nY;%W3<v)7L@XF;GA3dt57ad#mPJOgL?KTz@yW#Q{6Jy-xl^l4IC
z@?P2zU#Iy^cKl4$=&8-23u6N=_X9FQZUe8J|BU@Zu;V^i0+l%Ltsu~gIPMWRK!<77
zGtr#h==K=273n>$nir1ZK}o?E$tuJy>6`Sbp_rCJm7)R&->!cQj#xQ#*gmM}3}n#p
z!jV1_3_`wMtnKt0^bQGn;x~^4isoT{sgrES>(LtN;2ETKAf%hmV>|Ka$F1S@b&6eW
z($zNUtFJTckr|E*Hpp3Ky4zB2(V)6Fdn178X71*|ADD#Ga!QKj=%lX7OODytcdlHY
zoS4geluMp_L@sYN`6a<G^YYKo6pa@zJLPc75haD;Dthbuh*`L*x8ci*F$BLUB?W*)
zC5*K%-6$XD$R)R~U+0rAr4H=J9&Q(}ITNoG<$Z5A-xy!vw8{JZ>rISo@(FK@sR;U}
z$n}Ken6?j=vLvdN{t!{>UNsGIY3vr|tOdMYN7Hxo7j7OuPV%i(Y&TjD55;eGbqE!%
zuU!EjRZJxN|DqUH*19(YqBr9P`A{w4q+Jr$w`DpLzaxmvsXoIeAIelQ`sB<cgv;SL
zaD`mi(^keMw2@H;#;am_nSp)56V_D(`Qb41f$UjWj{_ckzn7=*<Uv@eUhx_nZ|=%F
z!czLT*pF|(F~lqn8|Dj$Lvx%ZOJ`J?kSoISoaW-1j}3=0$UnJ^?=pkn;$Mx)c_9qq
zVsK1B(mAg(<u)S^26&C0`^x}<IV4lu#5eFaC^ICz6QKU=m}D+sN}u2n(E2UpgtEis
zzV&jl6(sW%qPUDiPsh5y^A2w2;oTGGSXDypTV0U@C6eTkr}aU(Ksza~OU^<5fO#PQ
zUAlyW?>JR4(Fk11^9Civl-KZrrd7@H>g<cX=E%EFzl$i6zQLyUi1;h_+`3Cp6onAd
zczUJH6aFC{8-{I=AQ2(N{f-jq^D*Gk7ANpMU42R?Y;V#XhO3jwykYOoZqT>x|8Uaq
z^se#Mxx5xmelXzLF64e8SK`DTD&^}@atBfBhnn+~OR<s#%kk>Fa5JSWJ{4HmC%brV
zI~3571XJr!Ul*i-h+s$u<#NHnl6gQ<(=H2!*FW25cO~%eE#cpb0QR*3NVA`H3rR^H
z<|Y%*HhxGQ)^)S5i?mGn?lzIbWh?gN(SCD53$rto39G@P``=r+(^hZ-9Xi|!?^>kX
z`~gNboTF~N4Wgd(#xj3JXyH%Fj&}?OkJETu$`5tia;C|k1h}R?kK0F+{H@>vH&<MT
zyI;V52h;Z;bA@MWoGq^KQEuSy63e*p;f1PP5w9vHe@|ms29oFh607uw8Al~ThqoXt
z`|Q|${ky4OV8kT&emk0&Q_zuy4sd4|f%h%cN?P!>t4D<Sw8z+LF%0sLFyMlLb2PoO
zZIf}g4rByMypto%<VS8{YBY%PhrlB^*ThpE!}gG>CC|h-(k)DkKMCvJ8+|Cy&&CPB
zc3{Wu>-BC9D$otuw;{KcM0tKQ2Tk>U*gFO#+}I8kP#$r60H-AWw^)!+vJL0g=@;7Z
zK$$ga3yrpn&G2%=x4ygmih#P;hw$aF8Zq}b!1v3!eSM7u=Vf}-ulcUu_9`ciV0u)f
z`L3dMbE|_7ZkAp46>>y^l;8LjC?qK0c4(Io?)5AR!T1h2)K+lJW@c2zm>mS>YfJ(9
zd$U;IFf^liB!YxrSLrhlB_M#26CZrVKIOgqI@6s&fwWuhAaj@lZxBUAD>;+VEk~R~
zVK|v@F$5L?1xF>5;=pya-LL|VJ(SH-D0m%zm>EhKm`vzY8QD}gSXMF-3aY6X%w*>}
z|CKQPgY+(pIhD-r?R;E;13fPF$Wk$7jod@N6Blldbhy-BC|(>R%w|oDOW1hsD4!&y
z<P<U`%G{#c_^96!HhA9H+ZMYIv>y?Lhf&X=KO0V_tQZws1EK69E@K}tWeCdqeiW%b
z#xsZTkj`e&0c4;QTq}-5p20<uC?f8VHUiywPbS^ulFL^u^()_uJBPo`K;g9L?(m@?
zpAS*6WWDO!D0X(>89?aOjFcTWZaZuqk`>px&dH8LL3c~OOK`meN4v`D`F3~+@vmEv
zth`?!%h>iBdl+T$anC))b5pUjwVS4|RVrp~*cZe4Wz!)czHk(KuXZD6bTb^YcJ;BL
zwl{gGy#noNgOaP3hyu8F)y6^*pKB-<q&96)J2`#)U`!Gw8xm&3AmOq}c%G~9qfc({
zDc)_xp$9EEg*1pTVnVxxd^|^Rw`=GE#x^C_PNor#W<mRKI5eE|TBfPhr>TGbGliVx
z-wD%Mcg^n+En2s@BfVy5JrivmOD=5_t>vmQU<@LLP0=*lsDt9i0DYG*0oq4{FGv>m
z5Cf6^ioS#J5~fkEKolx>7bHRrHeH~-zvMPj@P)-GU8z+K55$#Zl2OF1*+MdIv(&Ei
z^;%4}BHO(GOkb>S>##D5uv&jyR$NTOtB4=jm>4h}u6s$ft4L2PpEeS~*(%qvS_X+w
z_w;r)szScdQ?;nS+CzP?2U_%Pc1TJ?i4ybU=a$C(35C?`3x;{TpDv)Ewb<!VyA+)X
zcZliq7F;&}NOK+&v#Q|Jf9o<W>N2V5G11jt0{`U}SeM<PqMf>pWTBrFUXc%z$FQdG
zx}L0IMj$kg^@dxqs^F`<2jWiQGAXW^M<K2eq#(^ryzG{zLd&9_)CCnAnbD}vk*<oU
z75?<1B9`IOVnS7*zt@*K(0#cl7CR;N9wTeBe9cZnDKhqOW%&L~0t=`hmKNb=VLb5e
z0S#Dp)%E!@{$3v#NGTCAT%^pz?WypHkASk|8$(ch_Z=Mec$j&49YDao_NKsuj~`<@
zSoS*ECTjyuG+y0j)ae(uH-WJe)_|B-8-^&BQAg=Bk!C=rl1~TG6efN1LXOgCOK4Cd
z)HDT7$WuBVZ{Pj1qazd_0<nSpS>E<|+3In)Ya<a1&7XV@oBl4Ntz-jdJHx;xG_Et?
z+6blT8bi*lFq=F<hW#2}BK%lVtpBa>dU!yf^CVRNy|Xyx3iFcFzK0{phAo$l3_=3?
z8Yq57hDp_Aq~q{L>C}wyXEzqEk;D6YL;(kYA7W)j<<Rx(hzRNyC}fP`R!*81y=Jw)
zra_r)gX^IwTA(@ItJnCO_@<LRb@W%p>YxNkSXxuhZ(_py>BSUmdV>4<lq;H|Hw~We
zpCOiBQIF-e?uRZz@<eA4)md41f0oHXG+6WK!veXc7F;=`s|xadRxzWt3JMV=gFW#p
zaww)h<2rInB-k=z3tvRaeHI>_rfo&cwd=V&P<1wLqjLg!E;FbKDo}b@gB-kmvv4Ny
z-QTDS;`>leb{eqVIH}-&hANuc>x-Tw^(bLR&W<@8vCdNO!mN1|DOSv~@uydH*~R?^
z+H$6tA4mH6;;I`xym3`6|Gctm|KJ~4#Y=C_E$XH{i{zhFwnTVoYn1VU*n#9-^A1o3
zb)C?PP3lQGE9?=)^Sm0%atnvzIXibIhz*xU2gwgkg#-;%{MF`(<l}wqZXMB>VXLgf
z!IFpr)<EEo`;B!-U9SmP^{&U`*P)+52dd4*D<=q+qN{IXd;qc+Qf6)4@SSdl$jLO6
zPloyqz6{<NYchk%iZa6_E^2NLK6{Mq?j%)&W?wFKl!#EyFe{sedBtVrjA6jqII0y4
zos>cKOfB&mhJ*OB^tAlT><Kw$kXeaM`%1$kq&1?JU3Wk&r{R=VUfm(RsHR(XPF?rM
z6-~n`I~t~M`dY_n`nbWuTJ|(MpM`GmCI@?w`8ueQiEi;(F3u|JIpn_*Kl?v4sgemU
z1jC%2YE0I1-<8mx<OJJMbpHfXq@0sD%+o8GF1aFwLMh2~krs*qBHplu_gogXD@9}O
z6DJ3@G@x2;y=G@1MGC5y+YWeK@$z!R6aa0Ys{1oHDrvy+pat4VMjTSUJm6@V$09#G
z%yv6b6e#@6chI)bGxosyC9!97Cax|J`+l4DB+LO1`l3zhKKDd?5uSMd{2rRfpZr*{
z{bIG(ze-4&G<9&9G~Bxk2QrIU)O#I{o~$@V-iyOrGu~QkkGsA~eEuh~(+NZCwl*`Y
zG~w9W2v<vgKCB+;Jk0NpTb<ZouKw8*@lp7b$cd{TLa(+TC6)yK=|VIJve+td5!2<u
z_>hoGaNQw~P@rGDFbxnkt|0<oBO$~l>Crc*bGVGtvR96HE=I|ScB*_EQjFkvTfd#a
ztzHb-Yr1K$7cQ$2$JJ+8XhK^b)w3-|m<axQA>V@!c>}IneXpBRUR+q(_GmOph}4Oo
z`|k#OEK_5>*g>cIe5+nW%pyz;p(xL-lxPY5ahFJUs(7ytU2<T!-w8x0Ocq%FDWQ~T
z-aJJ7oy}^DF7nzcaTHX`-xPf4^~)#P1mXn0G2^zWFyVekkZK#fn9xTM3SzM3Tt=MC
z2E}ny)Rs**#ql;2Z6nmKRpLe;(xzfWv{9o*0x)=uuLcaUpb+x?w^XmsUOzhIJ)m6N
zA)(9npv(2G4PT1;ZvK6F(&#Sq){mbfs7ZYK=XXTzsH^B5E&^rM(|_ag>&Q)N_3xsa
zq%-zZ6C`WwXFD!TB(1$k?{YH;%tY;YG@bcVy@W9+aHAq9-L0r1@>mnYx0OM?m~xVp
zx_S$~RHAsut_{w;p+3M#F2pHXNpNEuX0hY@@VnRZ?PGsu5tKIykwaw%wXWROu_h4@
zvNi^JXD&oD=l+o1*C^FmMW9t{*QLaBW)PaaVLa+O@#1!X!k+<t$npmfe6$-w(7SO#
zON8W`ilh6Z)7$_;BvkO2>(8*%FNy2fs1Vs_ZUim?g2OgkgiY(TRd+nl())v0;g04e
zz9#|fjN5k+@WfYXYx?B~PPqCgKH|Z++$DeKV<fY|&;*KZSHM&qS_@KL`0!mk<^Dhw
zOD28?U`)$|Dc7Jb^vypD_tFX8m9E0;0Nq{NgcoA@-9PPrZ{fqyZMd-koiM%5-Ch5z
zyG0*`KOZ818wP$RuEXoHL04ytX99BkBwX6VjT0FwAJ%Se2oC1!ONgwh7aB}#>;=#M
zuMxD}S>kR&1pwZs4XrS|R!b9DhOp6ZGR**3HWM^+tZOAZ3~ks|P_<=Fs4O_!UX)KT
zaOVe-bqg6U0*+zp*og75w;cQY*+BnAgwSrYNjb0v&XPcB(0|9`okt%7I!_MwfjkDW
zYZ&pfr&|nN=*A!Fx}hVaUK?;njh3d++1kaw9(n^M8cI8_Iuz#3pM8QXHjcg1ll20s
z^j2L$@U_|-K#uG&c<aPK;W9T_VNH<Ve_GA+J`Oz6_3o)4;)#cWF^bh|X%77B_{)O+
z?2SEb!KlaCTPLYOT@&bkB+iE+s{#5k?H)-Wx}P1kY+SVYWP6rbONVXDP+CN=_S0+%
zz!8oW=d4kfjsOJQ)$&*C2a`z%d>oMMR@Dg(gyM8h5c`2*5UqXKjh0r?Nthm}KF)uR
zi_TQ|*4R+3uB{MQN*UwPb!JdWu$w&w6Q<%c2|t>ioZr%RsjLEW>7q_66WnP&&V(U4
z3!D)e&t&&{l<~{Y(VP|#zCsHN^yj{dGYlznPlQzyh80b)5Jxdr2Gn6@5UhMJ-+_x#
z7$%n<+jfmi9dZ$G`b9n?)CRrWAJ@HmuhVwwe3ZXSm)8`K2Mw&@R=N1|$k<Bop)=DE
z8a5EYI4KIAo7CfQ0m0GHxEHg*@F*RP&hy;@ri+TkGVr(gub+zff%@r72C~Dp{ZYMv
zO0NjR5yEXflMWN}3Aln5!`M__tixLG(q$f_pE}z(`;_;6pJFtW?M<J2LOh(MF`zEn
zFP4!2qXYpTPA;|T+pN^PV<R{q#$$q8X6&lD0Db)fBhe4jXoB_lQxgB*l*M$1zzB7+
z5L%EmkdY%5eDbeTKR+<ro8JSrTLHJXNQ(S^M(j6uA5Aa9r383apT8NH-&R*{C^H3T
zEJ~CPEr)Ei^WfRK@nUDfxr-+M7U1*JrZw{5)f3Ar+RD;K8Kebar7=<Es~E_+wd==U
zYNGcJhK#ALO>VaBx^qPRB6b-@`k>^3Be#O{Im~JjMKOuh3Hwcd!nN$hf3m*p#W!8D
z>@_?nn{07Hapa|dafs2tzy|xiJy_<kKaNG6usdhddex5<j)}lXu+`U|ahiN(h&YD#
zK*0B5WN;#~y{Ac6Jwu~m<f>pGNae2rmk{T*2l1LL<<0zejE&bEJfn{FIs-U$yW8Vi
zs8LW-6?k@;?(i$5$0x=OlJ7WnoB27w^Of>cW>Mc%n;!sFwdc(;!tJXTbiw6sd^PHc
z{K@W1&{yx2qWC$g;AE?J$t&fFt3Wtd-C}ad`&mbC<o_q;<aUF5dJzfb(yKI40><l6
z(On?buexG}UU4nL%`TJOP8+k#06-bT39y>XHr)`$!P1~y);-t)KTAe)=foSMs<rY5
z6SHW&KG@TmK5804ADa-hAtZQOhC3qp^^~l;B-7NALAi^@=eV(b%(o{FXl^YdIG@@O
zKWCcQm>s=3sGE=J63%cR(ceb9B{uakQ2p0LZa)iN?KEBEl|K@pz^tx1-2`-IRHujm
z)88uz)P^d!0z31k`dAkgw8)P4wJ#O7=GeJGV=72>T!^Wo&^a4-K5c58KtlAZ<(l@w
zj0skAZFa9oTpvBF)z(y+_+g`T_1u-7imgf4dd0eO0lJb3AETw4lnvi!b-1`3_J{OI
zhmYGWYJViG)?L1(yW!4IZJmL%(R8B$t$g{*MeC)bia~$#n(nWRmaypJldJ++x$Zhf
zoZU-PT_VjQ^bTM3b!}#(F*>jdP<FL7bwl}4?o3E=9Ir^ol(8veat#;`I*<bJ3~$Hx
z**^0;DdGykzsN=P;&LA!$YroXuKmDrNKddO8e!u29B5635X@p{x|3*%dulY<-;g>o
zqB{Mv<YSB8`6|<w7hdj6bE^-QO!dD`lZ^2jRSB&f)!`?!!7Cm#Yhl!B@}4h1jA!2O
zOz<)iJG8CAX6+Bj){$Zw$vA}Ehd+~g3iSB{?tT9XHHVe3@?<3hu;~BlP{n<OpygLp
zke9YN6)_*5nmovtBFVZ9yRKVMY`r>)3cxydw|KbOzP9_xy352DS(jo)Y9BcI8^;0n
z(MCiv@@p(-*zm8Hy$t#hntQ{UtopZk+k#gH?C6Zcw1X_Iwfr4*z+~*-1noRHd|hgW
z@gt1mIC6wX+ZCH#+O$dfQTH3)MPRkh6ZoAw%lk`QwTxNq-Av6$2%zXG)Dct&>k-si
za$|LUp%hmOEti^15H>uKXm_UC;P%0pCStxF)+8#-IXY|8s?m=+Z8Vqz<h7_u`Yc3@
zBbs`6W4MpeKh>)tL$%-i1hxNE*}F;!mS5JZMAbU}s9#~WAXPzUY;n>&5;>}#qkL}Y
zq;Yzwv>q(C$od|@rzaDzZghpTk7+-V3D0e`w>-n3$q?&Y&L>Y<r7=@G(;S4Tbu(SG
z*07vtz_`WR#+CdY>0(bLOzD_M^4F>b7jN=3iqlaav12pQf^7|wbUn@SmfPa$YJ_8S
zq9fh(pt0=^!Vr{->S6d&gxfOm28U(15?*)yu3XOy!ZiQUCp_Al=ZKpCHh5ihU{vLQ
zE$VbJEWd(s<n!a-T@p{V6+wsHtW0Id+<f(TNbOWjk?I)Jk5&`UZhnvEkY#{U8pkN;
zb(de<I~t`ZY<EA?IQykta-ntdrA@UTF?t|bo&EC>F6({uVdT~C3C*yV!ej`ZZhLM0
z$w~Ynh@urA`y{iR4i4(37dKQJbRmIgcX*W?sq1LjsF&plY4Z*#@>tbB^0E63-K6#E
z{rbDo^XKJa{xbElp|!XpThE!SLNlZdhGGpxrYNh7Y>_uB^_)w=*KKf}N{O3`j80|4
zdrDt_eua8CjKo2OY%e)hqYT-xfE0!4(POlPh;D}S)hs#CQp{7<y)p8)SQ^^EkV!UL
z<xhn%y6Ducx!c=eLE|drX)Bl~-`-JOZMHSTYmH-@S&Y`FrZM(5bc}p$m9s^RINOUH
z!6wmxkC>txZ~a&D>(zF|463<BYdR5>h{CniPz9AUcdwbN4)k4qEQp8&`nVMS)|sct
zuzr!~v0)8yHch>Hi}$!Pxmt=FZ<KAp)1M`0@s{1GKSz4Pb_d%5p5jErH!^g`Ss#n-
z0cKmv%-AUhroTlv_?tFZ_I_t@T25DMRdGd3mH?tW&%i`tZ)mD8T5`vtMeRmu_UGrv
zhm38a;=!CjK`x9lt|`+_&8Crx>i<x74nd*>YZh+X?%TF)+qP}nwr$_OZQHhO+qS!>
z-}0?yX7fiyRMn;`vnnJ1bIvz(Y08Orn2LhrIAfB$<2J(_awBFuV4wmsQqQ?_0Yva#
zO1^w4$VX`oh5nfqe<6fZZd_9IgnqL+VPLD`GHz?(L+Ftg=^S-#oX@FIDs?MYmIQv(
z5tag6;MS<Qo2TXots9uxPtq0Cg!?j&wKVUNW)2RaIGTXw95kUYT2zG3$H{U%+A4LB
ztI*24$>^TOM+)b6PxgLJf!%cQyTty`&yH2ncHP_qohpw*^COQ_`BjzW*fHUIHnh?W
zg{^|lMa*g2H&3C_;{Ju&pjz(5vlx{P+LQfmqDbS;rt{Tv&dH9;=0J_7%SFHQonF0p
z4UJi2rqAAZO{ROom%jTuk1IC-PH(uRg1TbsqgPXgNH>WwL7rN2u~hnIV&SlTtD>b|
zP;TP1A!}gSL5U}2*5A+V&a~C>I2%#+oCz$Zrsfz>Sz&gMbx|Mhy*6@59Rj>^Aq2=@
zIdVbSO5iM#ALBCY%fhQ61V8S-?}T|{0<d7RMtbq|X*l@=dDNyk9o4$mUWs796vcl9
zCZ>h8092_F^(M0DL2#^HK!wCc<6o8aq(?IOv_?8QzKv?IhrXJx1<mhk1{q7&uGP&B
z&w(UH@7o|0p82KQc(6mSt1;nKosN`7r)MjVO{FS;WM)$F7b|&D=5;8`Nr@`@a-y*^
z%Q1e%jbH_>*RzYd1I<k#Cj`CD9pv3pw=ld4J$2y%e(;u)_7uv==2%*_YR^uV?u}B-
z2)Jli1Ce<xQ(F<kFZ`(a4l!d9FSVv-{6V1CDA8?gtZA`4&hRMC4dgYcZgQCG8~@F1
zhx1j97xP@!!t39fyIFTz(g-R*)@VUEnpctGkZwLUyWMA#bb9<#0v}2FSRO)C(X%hp
z5`A0ymIs?@)3K<*NILi`I>zvWl6Pua{*4y1)AFlt2vV|j_x@boyHM$?-8Vux$xLFo
z@Acw}nDo{pQSl+<Vt-IEt=p<Prz!Q2P)aPO6rw_r(XgVl@>#lqsEA51i;n>O;CSp+
z<A@<D+%DHuzn#k)nU`siLz0^#6y4-3Fw!SAzCh<Mny#DCb(cCr8->F@6dszIm+%of
z`cM2G#*gc@XH^X#h@Le-z;KGU_LZB-b9j;EnFp$kKgwdkIb@e~I?&3F=M~BhbD!SV
z^AI@oDFaAvS2*5?-;#ltH>EC)3$au(Q5+?3Y`Y4e*bxR8?c(}bkr0M#+A#eg#}R%g
zcM0}T{7G^Un(PE1TzLk`98AfPeQ4#KW47ROb8oU{V-Q-Ky=JV!=v$()a)II=q(*Up
zNx6Io^}+(9%BmnM0M$O)J>vv0`aNS>g!ZVE9!k4^lBme8U}~r7YX1Ye-^rWq)wIPM
zdpP#?X8x?joAM}cXI%q9DYhztgYT>p6W4c12vODr-o_>e&7jq3)F@TX+~#heDl#^U
zovYtZV{JwE^VtBW;<3;Cqx1?`eK%|Jhfs~PVr`}g>JfhmUgvgxuZ2U2ARm_ciTSSM
zK522coI7yGNl6G#HP-e?yXJuL+wyx!i-L{R*YHbYb-7?>%lqTTNm`S`g{if7A41i|
zpMAe75AE6ykA`Cg>MZbkL1?=z*&pAiws+jSl3kjW%k!^i7PbUb_wHp<M?gToZJI-v
zj-5%cdi7OPL<`Fk%csm{uOgNz_;#fyv{t#+(kZp9Bk*ixTI*#k5IU`MT~C+FDpw{X
zF(L=m>L4a0H6jOeiAE87(R~ZzZNdnrbe6mXXO_fk!U(T)Hh8el?qa<u-EP4bI43le
z47E04x_B3OCsvfT`5~^EA~p3csq%fapaRZXV~#w;Gn%%@FOrLoXmPV`rAa!CV>99Q
zzwIeLj<j_|d%A{V{T=hM!Y`g&NbV59bf%Qn;wY?mw;{D`J#YA54O*G8bUiz@%YyC>
zJ$*dN@2abIwaeRf?mrUGSlc^~z5^f7h@bC)t+Bh`KkIhxd1o3gPS<R+R+ns@GrjsR
zroUI!tlQy3f52KjR1bdXHT`|h{(wy}dLyC!blOHsWx&Sx>axP@=}a9XU6gA`rEq;)
zpf&Fv9`xR0U@%Lm(OrlQ`@x)JK+i5ri=BN6gSJ>(Lu?-<)ANLhRnMmr-POmC!u2bd
zp5)us?ws15scD{1ve1TT$0SvtXJ#$grR^OXSpT*3z@b_C`VF206{OzX1)8~ml$fCp
z?eHT;_ss3ke6V~UTYXOPk$#6>-0)F;A14iMXn#rYp<jxo;wn1|>=nUN1`ud&!X6zw
zvkabCh0mNL;AN*#vM$yiUhrjr>`Yhlq!~Z`4(0_>)vyI>ZYN>Bl|{GI%7M!^h>1WY
zW1SRu6pp35>Dt%eM7zVi&2k?`71^Cja_)-#N6Q%!if89HB2miBr937@WAC>H(NyIE
zr<yvYPLZa_Fq0X)F*n;wK_5;gl>>8{Xd{=aeF85@*L5fMR2J>G%jif?r~=G$4=Ox9
z#VxGzC(|V+@n1FLoRGL`^fIWS`r3;eolr}Y<*k6Wn)^HidvOm7T;2T~VXyMDKH|C-
z`x-iyDA(IcIZsi=iT7tob~gI(<wNc-YG9x5`|y*=aHNLpOiymUC%4cqg6u2};QRMY
zOlUx}{j3bWIztZAVH;Rs?2ISed`L#u2z{16>@sGSSG%GP`}rXbuOP}G9;9*TMXXIM
zQR_dyr1f8_EX`6zx43h9qAtohVRKUFw$S1tS^?M^gjZU2cC3yoKlO~dskB`6<0q$U
z-@yc#JjILLoekKZd7c6RENiKE$(PPvNl~Lj&b}~-^-=%TIb(Bd{9R42f4#<Wiqb@n
z?$}3r4xBz;Fr1_NMn|^({2uT<V5m^fpv5WNF*EXs4j~@T$g0KBzsCOJXJL9x=Bm8p
z@X+B@-X?T5bv&|L9kPmoVmkIg^IKu>z33TcRbg~*hvdNHK6Uh3OLE@1hl08>xl9*w
zK0|2CLfD!&8G*b3W$1GRxIm7Jjd`PE;xS9xNDJ3Qu}rJ=un_&;Er{&vow`MTDCxWv
zYKF|$QS@BvVYhv-_ROs+2z31%xuh(%(0I<6`|*d;ivGfDdt*wz`B1e)f8&tq?K!9>
z)o9Lb(-F<(ju&}WyDPw$Mk%fLZpzc;j_D00c0~=G$|WT*aP=ujnsF>aDn_{FTOZPe
zU{cX8QEA#@`qgob47v5+y5%mqe1}i#J-eokhf31vtl89aeJ!gZYgwdZDyWy<h9=ML
zTbZDs_qzS<(kRJ<uAnZQuTZOZ8>99~k*?eEh<a-^56U!48$==!`pltD%)88?K60Bt
z(W6oFZirU$Y>Lfs>N)IU5b>-y_hBH3SPM_+KBMl$D!z>*Dq0@jeJ5}H_GZnyXM@r?
zaG_^MaDU}HklX~vNX^9<OUEP=u$)Aqf2h*YR`Bbj*ACJp)D0T<hkeH+VjaZ9atpSM
zvYA+Wq=T4KM>{1rU?`m+YgG}zRD--n*Z>S1DK@UZGMn^{xp@s6cAItd51SosE)6%@
z$XpDgX|P;zwcrn*r4mfwmM&g644QM7C@&B}kd6{aySnSEi6xA{PcRuCtT>t0=)A*0
zqgAQ}NWZ`Ra@RAT9D7@5AUpAMnvBrqoefb_hE~x$*yOidPhDRV6=_CmxO0iu;MJH6
z%RPE?X26qXooN}03b1Tv8`p)l2_HJ9sC-;=X2o9w_rf<tPLa9#S0NOth}jJkUxXH<
zLJ3D9`RMIV+=aWKSh!+IJLl9xeAa**HX*w5IS^?6ipxGi51n=Pw#@t7NdwTXd33a(
zazxtUQY7Q5xoP|Zh?sFLSZ4oEDz3Bs%Dvr~FSi`lqdPNc!|m|_N9RTIre#-UKoDGS
zwGFguLAawX=w*w&xR+(ecwmz}+_zu|$GG9{n$_m&`ktorXW7VJTb*^=#A>8zX24=8
z;B~DXD+~x;kZmgD!M<CMoE2?o+R$pql(1{l_TPMwj`-tGSDlJ{Y6n(^Drz&%OzI7n
z?z{ZgXL;E9Ng9`O&*owJlmr{sUX|B+w{;-(3GkoMhnyjAy}aJ7q0iiHyqbSK!Z-42
z)3X(%<`&W-(S2;~JLfmK9c>YtqbI!W)55yNJ^RAl{54anB%W|v#6GxU^2IC1*GN1o
zcoKQwsL5wd5FtoDa!Go)I=?6SQOEDeG65RcgC@dQW}o{1nCG|ka8>3L3hwRKf|=#i
zg53!AI)~VYQ3*C4$xpT+p*&FLr?0k<<JUbYtdQ}rxO~b5G-elxUzCg0dOLU-e_qfT
zeN4$3WzFn1S(3Xn8FP5}eG_fC2&lhZrmEs>`=TKX7u|yr){P_Y?t`6Zo$1=6hupl}
zCjD+OQObr6ed?{FJ~1%{K(I3+=vEloDW-@N)bN^r|C3Gbxdk?^lX_7-1#>6n6VkAx
zeofut0_$dx9X52U)6E2Rw)-U{w`aVh*1iL0sqR{)P<B54bNw(m+TKmi)EYlhX)7Fk
z|0MUCDM6_V$dFxxL9PWl@M{3Q<@mg502s>#c(-echij|rl&YvItc}sOU`~tbZ?zv`
z&jA%Gw!`qFKzpGzes5RIUOm;7VQT6)=MSqWYMyyw89vBEKM+U*^_VqG21ji<G8iB7
zdwQoa`dRw=LZ`#y^K*UNz3YoQ0gt=ua6pPaAOL<zH~VSz`+19lkDj84n#{}P_IpMU
zo`eURdau&F`hGB@d(rD+W-T!01~y`-Ywk*W!Mpl#Pd*v~2HDKq_wTXc_vrwTDqy;;
z-*4vlj((HVz$ATr#iHuP>xvngc$SZq8EGmg=rebGJg|O!(C5qoAIKa2sp+V=ve^jl
z%e&Gez|f`iBHK{B9Gt>hXBlI}p9(GP16#}>(s2AIkfJ<6q20J)w{sWE-KCzGqn{TF
z6yq%x!F|q==vGKPJw9}3yD#HlY<)lM>P_^H^6t?1*l#kdQK)P|i*5>x+y3pBuop7$
zX14x0RI)dRpHXW&P&aVZ-1iHT7x-&X;NWOe10j2WU8N*=u@J&h)(URu8Ke`WH#|nS
zndZsokVjS~>P3+;$tzV4U5#Rgm>sy4lx(<W2h|=h+NCSr1sLI3Ec913UR*F9o+(mO
zpDWif?3jO?ZhoumQcT2BA>%kq$&#!prZPrTi4u2N!d6vEHp!N1OfEL+aDL9rgsw%u
z9t0XVTrdF8b_sArCUYVuEE2kaBo2^#T7BYsqvHLN=VnId;O{smP+7mmXXE1Kpc~Is
z<|j;BByBp2S4xjjKcvYd?$f~*(>yEqNdSQ~O)~+s(5mK|X!A0{Fxti}F;@S&;YR$r
zBCdr<XoKOgeR{t%HFgq794u2LSpq*oHzk%eVVsIa;1G2<ht-$`K0a?lrA+@UhJo?q
zdJ}5`JnCDx#(+${(-eXz<oVLAc3vA{W27K(E+ilbOG8tq{6eB9H=g9O2fe{)AZ(V{
zL880yaY+|+GS}+tN6<d}9V4;^Dibd~4V;PHFv&Tn!s{$X<>j0`_fF2tAPUr`5bv`3
zK?zA7f%$m2cYM1iB%D3?_|io2;EZ%Ywg#n&;Xi=hs+cymZQ<(bYsdR98TY;WvUtG^
z7dE4>9f^4>J2aZo(7;aiDZNjbOlC2m{2s7lsDEv-vfT|ik|gN6ap!?UI3R#9-^fp5
zQQ%1yEowb-Gju!O++FSNUM`*<t~xM{+Jw#OZA?-Jr3{MK^^?7CI$t);Xcb+e^8^XG
zMwqLZd<Per!NWX4DXgG^Oag!HOSsDTMAC>Lo$?JrZ=>nhvwP)myM{d8eX$v8$mc}^
zQt}yPL_hLZo6_nSQ38xscwHR6;+`FKjEc|HTGG;Lsq2IO&e6ox92VM9dfPj%?oVe|
znd-u10(ZUcCAl4}MXeFNVMKcUaX=Ab9{iE_CXNd|H&?^aa6TM7Hy05j<U|$&s9+|Y
z4)*0C`XXqtUcsrYMKOd-;9jS1Ddm;_-lUA4RQS#ll(4u}(MZQWW$I6S+?>~^y^+iH
zc}qHYJgg6gb~70sF4d}Cn{guR^|ita^itB`KuGi8cCbGFvwSxeknY}(!QxrB8pJ>9
zApeM_$M3>shORW?wL7_9dq2_Sm9I5_9`*o{H32-I_$J>U(;Z1JzPzUDCiVUH{YT)u
zEy|8jl~M0v>OmFHnHqN7K?#tzTb&H3GqqaM-%u}>r)#D<*@H&PJ-8s!q>gSRG54!f
zBY2Ua>AY35$-1iEQYqw01#RQN6tQG8_c^;ps^%^eb{EfaT;0`B206CKG+#mcZp#M#
zL$X&@qLDYRLO~~F^dv5oS4H!+{4Di=R<H}ZoGxCnvzy^1b;QOlBpcvJ+%o`wAFy;2
zcby3Yap70gPM0)931O5X6*P0`D1C?Og>n<yWTzavh~_cDoE1IAC(ICyf14UFVaxi5
z#^XMa?yM@+)%zc;DpQz)<I)p_2ffxG*C}<T4TCbc76A>x*~p8juUV(3X2Ta5s7E(&
ze`4LFGMt}+Cj%*!A9niZ8&2y)XC^+8SoMX{Z%N%#b-YS2C-;>8bfkjCp=A$Liq`a?
z8_$i+wHxo1r{<v_T%0}d@g1>im!B>O#5}b8Wh6G6dh4g}$WM8{Azg+}C{=HTqI6E7
z`^%<XY=&;3lxgd7Z6_q~Z$&$qel%q9^KfjX`Mk{wyr1mN9T%>o58lG~#^yD@TSD=r
z2VJqWKPSwPv&4MoUA858+itw%%gvn5lAX5$Ma#L2yC7qy8VC*scD&i&o*#R)Z*>1{
zXu?P8HnGA60C-jb0HFK78k(H!4IGVJIsTU%rC+k5(*|q9f5?i12_Ne$M8LaU5u6U!
z9tW%$t2|^p7Q<iy@`geQe-a!oUDtPfT>%pbZQc@#Ga_X6>(k8K@<6G#dc>a9jvV<U
zAAC~s5<)ah2R;rh>RQ!{7c@lJi@t$nGsI%eB0F_TKTl8NJGIbys5BCSR9L7|kJ7P?
zF+Jk2B=2=oEIo?%?{0a;Ii-unrBIVpa4Sg4e&H-kBChuK6}qiWT%?C9h9bxNfrla@
zszpEyOVl(HiKdaIPGxAQ5>A9sZ-i1Jw5V^1s!TK;sfrWvgk&Phkm}U>Z~H*ReN42A
z^>BK8KHm>>52nBDJt+jV5|bwB0+kfBS|15v&<#_SCUU>kouB)oiB<scaYiikiL>st
z2E7l)T$KlF_TZ-^zdgM0w;dBr6-u%>P>#_9==<tX+QF0kXl|sap?ddh?dT(EV<%7n
z@})Rp3Qvrn;1I|q^$|PWL8@CW8X88b?oy_vM)6K04df_NX_;_gTqD-bpQo+6jWlpR
z9F_}7Br0{JlDA|4aXnMZvQbcc-GZFJZghRgdd)x<sdz-H^ifGg%A&eWfTNxDBA>QS
zb>$)D$qAn%!J0wFZ$kdQxsIS0xv@H-@g+kAYAWHQ40b6aM`lvKA`P%qzR01BOul8l
z2Ewx8wsK$WA1y#Y4zU`z)(eAtfMur~pEK-BFdxbqh)><~N$I)FvhgKFW&a9lLy_r0
zMimkWiPWKNc4w`T3-gqulEZ>2JYkC0M#+X(<T9xJl?NpX16OOUK_`32OSY)t!=8%z
zz;tib^nQIzE5gsraOYS-fNfNMHOYhs@~QcAARsU#-?8$dQa}@kL&4D*jA?khjFKhr
zCeC_grBaB=+I7D)hv;|1GTh$nCSv4jHyvZi`+^(WByj;WBU3?vWknWzEAL*Qpdbkj
zSRy_)E=yzkk=ACrvT^26W)P-vDC!n~#7GDV6^(y)e@JF^$1?=^4Py=o$S}<(jzG)%
za+K1`OeYLkasvJ&QULm=o-xZMp{xoS<p7nTLat4p23<|Eg@72&63il?w+Y4wPAig=
zGrRV<-tCTAO?sEo`TI!whFX+{!pKNh{3IXR<pBP(&Sz*d5#T9u4DAQpFBe?SL=%zb
zMT?@$5o#J2B+=K4gaoh9ZvPt7?}3x0>o&b-ITw~heG`$pqCs>R0px^@RGi!rmjEp6
zv_R+QMlK@7N6Z8C_NNnUp=4-Sznp?XOyk<Q`LpUg>a2`4q8BvVnQT!<*#HgXJLvMc
zyc&qY-_n=r4N@haAS@iuE{`sUkJ-yA{uM%=P<@WV2-n0Lh+@OrdOl|(6$H#`KtS{Y
z%&sY|UCQ_aA1Q?-|1YXV_&!({P+#BMAJC~@`-p?{903BETxXJ2a+EOow<~s>0W{)r
z&hn37Z(1Kp5<8ebfh!MSM<dhf)di9L1c3^2cKcWUHbu=J!jQRU3>^qfVmC;1@B&>s
z3Med^MaY~I_z(2)lJf<fJ{VwT$b(aFN+3KPovN^*kVQ*L!4u4v*XJe5b^uDWkLA`z
zfw_x+WJ5i)%~8O5_ESMRpGy63`7@*t<1^7pu%n-r)P}yr0AnM7Q_V3XBl1d96?4!a
z{un;eBwDxF2p@VAXb}QhRWVGt#LOTTu3V6YqBW)BLDEi_4uqFw`p?VUq-dT9ifmzo
z>|-h<KfrOEMRYsrp(x*O!+5z@aqzL^VG(4{UE#ap;u<7Sbku3~Xm>dDZVk-3vraLD
zt&Vf6t@O5GFiYdRcQ9`9Y%kk@Sq805{+5;MA`LpfzvXWlUVQJ&g(5@oE+i!oNf9Z`
z=hU<n)^7rYX-+X+R_hHB=u~F0&I4icZu;AYw=`w~I-^ptenFI^M!T=&F!adt8?TX(
z>vlmYk|sxF5HGxXF?_G(6c%Fqn>B4}o`5JtIch2kfI1?=UhYcKTs3O~|85YtdQxF7
zIldkgchTq6D({0XuLj1&E4#g3_d9Uo#7ueMGaIEU>f*Su0yQq&-KAh`Y+l#b(dznp
zUGBOkJ2p^1*ArF7rwl^em(Kl(J$)c<W&Ic$OmBPN>FEzC;5V-~>)QDKLseK%fPvTm
zgA)r~Dtha+d%cS4leb3xQD$-G*?>^`OucCzwM@Lmtr&v{P(RC!!&H6GF!tSsNL<|f
znfB}$96a?#-KG7D0n;cc*JPc#K8G}X>XYQYR<H)~st<%<3_B60M4HJGb@0|;gSxrL
zWqSyKj7C?+?1TRs1mvtDZd#K6K6Lyia~?YYO(j+DvSWYe4IuAT)HM#f3;o(UZK>!p
zBroIFD+(U$_RQ_va@@?_+*};p?c7ov-JXMGb639t9v<G$jIo)seoU@<LCNxI28*X{
zjIMe?+VUx?{vEmkrt^TTb3RDsDd)xMHqz#Xp;y@KHc5T3)?_pLjR>020QL1V5%h@+
z9-*(5F=i76HH=-Hbw5|aQ?`q7kgf3<XQ?>E)L8@X{ZZ-rfU%g^`n*81vo{Tnrj*#y
zJYbVEH4ToabJcXbbq>KAr%=61sPP5N*fM5f6%+BpI?UL0BEi5M!@!^*YJp|<-&eyG
zI?v%UJ@)Ru|MtXHPi_<c)fF)7?J{X{jVs5_Xf9__j^7p~m=x4DBAOO7Dob_re6KK{
z%z@`bA+s+D$9FwI?^Z7UfwV%=AhL)tv?{DrFpMc)HgD$g@CGu3_*^(ll_f>Nv?-i9
zOcINemDTqJz-E07U%sA`TRwotJ1e=y$i3B%e*v?p2G804i+n0j!)89LZWqnvIU6cq
zFErlwoU923`4E-l6(2K18C4e}a8ge8L{REWpci>$#*K!;gB1-;8y@>zi?*cCl`{Va
z?>suBz{sr33i}};I6f47{b@LsirrnG*?16v9;-j!((IAz@bmOVjQ4YOV*}?Kl3Wi6
zEdr~kA4nDY_#Iu#>T=Se=-r2%JQcWW7RIOC&*I2WCpJ$NxVY(0uO!WGIwrUkn-+@i
ztRp?m_qpka+hijbk<Ueo<X{~u!&aDmoGJNh3pSF{jW)7*NB5JO9ewI&Di(*SmmWxM
z?J`U<mxF5!DL3<`U*c`;@tt6yRAH92RpqpBGjLY-NykQCwTp{&+>@vQhUnzEj?RKr
zBbQ4dw3!YYzkCiLIJmkQelOrQrardV<#l)%k*ry;RhzAwF!XaMFozz@dEwdlk!D=Y
zK}X-Un6w*ok{86>h|9GFA=W0*A3OC9F6`6Rj5SUN3p*zrn#QrSg{tNFKhjw@b3FbW
zt2lN7f0jF%!D2YPUm7Wpc}6xEEhaCL1Dj_*7Ylgc*CS#?+0$b5(_+jW7sLCZ0@3*B
zYw%hohPLPK`WD#8<aF_{e<#5<-shwD4GM@5P@Zo)+{0M#SvSs+pL)OMAq&wJXqPdB
zG?)(EfDO_$sh0G$;Il209s1OIL5a)0kJ4n1ZjF;>$qVe6qgdIViCwl|I-_3AjQiep
zyp5a4aNA|@i(TO+pMstD{Y__@Zu95$8$X>D%T~j{d!Na27}a;@Xqfo3+&1sWQ}8_U
zvG13_3F7I{_G69(9#@>4YmJ@ON^{9X4BE^ku)G#tpNrrO*voZ-0w;F1(LAP?wB;@d
zfLdN)$qqPtrp)Jph0<?cl7j$UKJ7&*a_lmcv}#aYgB5CRQ=lodj@_Bmi5^YPHogwL
zbjLT0zjp4lYjTSE!q$YOJryl|qTAwiEra|bm?H39W{Nv9iH`vA^I*ecJHDo%7jWl$
z*`2_n&)+VD#Xt+OTM}g3m|oPk7BPLAuXPBRYE(Zf2u{I2?q{+5?hebz@pENNwK(RA
zimvXN&DNR^&2Ny7en>qx5LESt*P*X}_q!x;LQR|ds&M;K<cA$jROGURu7@|`jzNxd
zykBQ|5Cwz0y@6^^3wBPqeOk|yy>exx^W0m{Mm6)^pYImUVyjQiiW_Lf+dA6~qAE%p
zwQZNwoN~tgpqsZ;h)`3S{GnwQ@48+*hR<xu0qLSPHDYBgt1vmsUuY@?zo^Q(FW&N!
zm>V9fL}yzGqk?EzW%sf71laxqcGAwi8O>lNi{Tv<1UxC;I*WDV%IginlgHXWQyup6
zhx7XWB?Y0@1)}=kc>7xliY+w1VQ*M|S7h>6?3h(H%yrqXgU+^(?Atyp89bkEX79`#
zukWr_vUD#NhP@1;2p?3k1#l(9uP<jKXZ%tmM&+WreA|cB<qh2}D(;22t-il^ZS&fs
zsC5bBt_Ql+Bz}sZ4ZH)^c>^G)`ctOw)7%3*f6;@sJ9D!P&g4|xK0)&hH~7`$_B`SC
zaBK*@lC#`Z;S7D<-&MG>o7wXh1I5$%>q?E5=xNc3HQ}RWv!XiFTg!_5Cv|()({bP!
zi+LcV1ajQewR!?5!$VoA0WM|7s3Vr*lkvh2G&jrEh=#utxyps^HB#%gcw!l>VXfG7
zsp9sM@f^!b0{p20Wv<;h$X|=vAKER9mbLsmalO=_$*y(#VzlE+>6EXhtHpO#7E0G-
z#I6m&Du^xzq*|Nik0u_b?$1fu=|$`YUZ&Pe-SKNyQQW-f^;zbg-Tw0~<=*yhu6vcC
zNb`7z`Z)3{AJ$CsU(iB{N+idBV%*?`aanS~U>i!dTXaW?%8tue%_{>hcUqQX_UyDN
z-}-*FEY*u1O(t9D8mi(KyuRf%e6L|F?=|bdGnn0&UuArg9~WVJt?lZi0$loAbcCP0
zIj)ThRn@*2jMI_coPST?;6dd2dkG&m&6;o62?kC^Q<x)+17|3sH`$S{J=1X7a}RBU
z8*J0*hmpFd4qcJ#_jVh?)16f|*HFP1(fdygxofw=&viEIG<HQLrJTwhjVx;1-nbQQ
zFRd~FV^ju_x)`GkC3yA@8jKB+>31}46lF0y@)z$_kSIprxxI@aD`Sex9u+CllP`3*
zRSD8^pVtw8Be(_4D~yFftry5W0Mrnoo~r3<Qzo>lyWp%zdFYlg6fK?fEd2@wVZVgm
zFLdUWl0_q88tSM%<2lyR&n5QOs++SpxDWGJ)`q@DO9<_oz9L1k*EGA4gSH(0(Ky>+
z`5WTE@T5WQxZ)V~kd=lzUjmV~!L;=yePmDkMW*X35C#pz>`A}n7Q0E@i~yn+;`_*T
z&Nw}d#DsuRFa5gjkN4ERkijmuUQwUMw-0=G?urWOPl!Hir8fyuF8|s`0NHVC)N4kb
z6Bq5`HclKDH##k4N9bp`ixi{?DL6O<)%K8>pCTvor&d|F;zOu5%L)gNh57W)kWQK}
z$p*_IUl1pe_;&<75<*WA0~Q_HFDs4f$@>r#yyEv$@vA0F!QDL^XxQ&m3)$_gLYhgr
z^OVy{jbECNxC(!vT<nhrGr$&c6si-1u_g=GPGYdx3RI43XD~4sSu2k3TL})4MH1c0
z6io_22ag8D8pm2*TP)t(>yiYI)5-IckIr$nmBc$J$qomvp8zTykx3j?@CGLE=aYvM
zP#3G&1G{B6)IAlcJdhJY`#Yb)d(gab1dEXxf$m7RDNInSLo$iTa8n0)3Yi_;QJ$np
z)8)^jfN#X+*dYx(&`oDd&f^ArrZ4R-+;;Q)3a+RQDaRooCMPA1(79>=`FZMyT;77|
zbY)xD$PCI${<l<Em}gi}ig4t(QYn=tWbYYdjr6P@vs{fbAE6y~5DZ|55CUn;3mg2O
zHD&M&S94P#cyqwGe^xr{C-{J}{81ULNux4^x(CBagh5X#Dk8}>V3$Wurj<DoX^3;H
zyh9qpTr;~f5tl4$JlU`^aV|~;Zd_p2{0k8+XVWYaRq3M&HNY+Hh~}v#fP}di)+yTa
zXt2VDljkI~de9JSQBJ3A8OCjq1j2i<7h7d?>#xR~BFh%v{Ln0=H5-(tdief98`1UQ
zFNt0HW4<>zx(==wj62E@H598nCkE~ycX2Ut^CjHB^Z}4t1-4?AtsowWzse|~I>#fA
z{)sMuw97Wg06jXG?eXGWz5rg<VW5JpwYFFwXoY4$60R+3=H`UBpoU5t{#W+rz~?Dl
za6ptc#}9)SyUWce;Y3pSI^Nq?wCUjePM7jyurXj*{$@-=LAo=58_K;z`Z2OOtTGU|
z1Oo)Ho3?!O82o(#@tkc$t#(uq-{gHfaUtt@>7cm3ymv{E)P?Cgp$PR?hiHbBx_|tw
z?Py3VaXEu>FioWx$*xvh`MEU_lP56bl=E#u1hTz%7)pRFh+zMeN?^iCVM>iKSICv)
zr*lTlnCo4>0IWE8FJ1?N*zdmvms%BmBg}R9Skr*)#Wwvze6E9Y($^W46aJZF1#Lzs
z7c%(s59iV;@Gt{N8kHd9iAl1#I?n`FD#68ZFUWlbhY=Lp0)1XnZF3N|M?`ZIYs*s@
zx+`kNk>P}e0A4!;A9Mgdu=&22XczlA$GshZUpbv1-CsW`tyc8hl;_3ieceA~<y=v0
z=;$#QYap5gIg)06ks)d`^X3iyLn3>h7@HCqI3CDK{i4UlkO{Mc&&|Q+_Imz)o0}Wk
zdk8}3vfJVLc{@G571m3g7NkHUyP>8B{_dCx@fd$h6Dxj~Y_S0L?XBV~ncK+%QuTV@
z{~DXC2tos{=Lr#vTGaPm_5N{XAB`Gf(W5P`aXtKr;%F~!PFQVtL#?KBP8<OABXNK}
zOHq7hSZHy5w+|sAU}t9Pn_h)15_`KLt7?3{9wwdLp1MOol34b9s;g)sF?h%2s|w=k
z(;DOU0>7H$0?k!|zZNUpm##;dF(g%?E}e|>X=i8b6W(I$1ymRzO)vGS$#x@EeE^(M
zA%cqlmp$N?84rf`dKp-;t7x1AZg`4v4~C!yJWW5h&NYcTA@S2g4clScn<Ql2r4Hz2
z+M}-R^>2U)91Ujb;-H;jqaQh<2sv&=oD2Ic3t0!x>D$;XBag?eKFh5fwt1&SPMd%W
zVkV6GXyKQ}uW`KilrG(56MT~w>3C#{wGxB4x)1@qgmT4Wj`vH)(C-BC1xU*XbFqVc
z^^dUL>cJEUw!=Q2JTkI<$Bm7=-9HbnmkVoih-=A~REK8$!Nm>Es@|Xn6sh)3O06_Y
z`L_WX;(us!B1VByVDR>l*%f=c)dD{#TmQwP+RH0^ob!O7w$;G>A@s?mKG`LRRs{zy
zpu}tS2RG*hbwb_Y$7-Wl46w)%#Db+oxqvy}qOrBdtJ(G`)T(NWQ@i1vuUg(5sc^$P
zQ?<H2Sn7y#u3&k&JKqZ1vfT3N^n6LMHHoF#8pl>^m-!TTi;B>j`C!|!p=6HpDxn8g
zY}D3aAr80`0HCSkWW-OA5}Hc@xt6l}t+7R8r=#iA{Od8H#P%5C2XhI4Yk`gUI1;<v
z%tXIceLXQYdW^YHz(O2IETEAR2QxlFd}01Sw}1TB*rJ59(RAxTnyZp!xveh)0Poak
z?z4rs0O)Tls1IOKqY6z!wjovp)D3+oND&QDb0dBt&0LsLq+Rk^$hJB-l>%H)NpG(h
z1!*1cMuJcU+I%j|*=HxYL&IuzT~wW=s#@Oxs0+5rTB`tsSp<v_75&H36!J<SG82+W
z)+*s*2hn-<Im*oF1`j2_)!f*R5=qn?#zxZuaPv|@G9=B0kAkq$*~A-7arx^bf9%px
ziKe8Hp7sPU_?^*}sj&(+G7D3y<HMyarC9{>VAudbbx^1{#-36rVq7!dcT+JctzNjY
z1M{?~LbY>opqC<Q7vcaTirF6nzb^{5iXGr|vZ=8Go?a}dIX-jvUl*E+$8QWejvm>v
zYn^?^IMp1jT78@UF88QLyS<q5<?@qQHZ$GM#7xp6&Q!w$>k_l;^R3q`AY(5C*cm7I
zt4>k4L8Q-^a_78=W1sqM>rba{&T>t?Rg|8!5jWtn^d)dtak(rn9$Leg6Lc|8i?9fg
z#$zu{-alv12&#MQ7UTIVV~+-=d*kt|e6VMd*Ay@~;#YCtFr-gSU@;``$^b8<Pf_3(
zlGiFQT=82j?M@4c{e2n*rM;^tZim;+wKMgW^^Tk6NuM{&;7&;q1>=t+Gq(hqT|IFB
zBO!9Lm!KWKjy4ZkMifxJLrgGKIg-1x0O_L*dV_#{oE|r(99a|90P0V`qev*3Jw>z~
zh%7|P37iC-SaG*><e0K~q1zDHK1Ec@CG)I_eM^*S6<-$4lk>hmO-_jVF~@DKwW4p@
zTWSS<)jX99fEveSg-)lA`8xz9lGyF<#2MG9G7;36XS!|g$r;z-q~gUf&SKTH0L5N1
z3nW@%?JL!^aK&83V@Y>JTXhxCVQ1U%<fB;e*D)1Qk!Rb9`lCGY*HsnJv1i*3b@;E)
zb6rj@47~0FNG>ud!cXmps0yUN|82dQd?rMbZ><oB$4vrch2>l2aQTT(O*#1c<%kMl
zTB4!Zl|;YAY>y1nQnF5@x%^sQ67Vw>6Vr=h^I`+g7_hRVb)WktY04&N*~6u=PBN0L
zQ}Y7U1Cg4WIs+AFg{0>K(yN!u#vQA9-yVsNFVZV`+=8z@zx*$wy^YA{9c9_h>r0t+
zJ+~LVrSFXxD-hksYecHSZlqOZETqr=zw*pj{kCivC=os~!+ecpDguNyJJ{>9*UQJT
zAUYX?s@F~)_pn@d_Jcqtc%KMlOw&*uH&-zq8_p?_$xOa2&U6l5Enaxtz<}lq8DBOW
z;~$t>@&<l|jlH3Ki_$PV7&?4TOT{)PJ8e3fV^T#s>(FANO$qU=&DWYoQI+DQ7ji&)
z{L=W@N7OR4Z%L<Qt_|rkqzy-(9XW;nJmybc@RrcHK%1Q?7}xem5owHD2{O&o2XMw~
zP4H@)dtz(qoDgbh(Z-BfzhYqmK(oE}R1*lEtthz44K(mr<ueC(+Fa|s+N|8{=-KSu
zzb3nBll6=)-=Dt;F&}bH7SrU#A+Zn*f=XbxdbKNiowHRqJ7n(-x!o=wG&rZrL{_;q
z6ydujyuDpO5A=woti2&VmW)$QR*%6u2>Kw%L&w}1c*ENICLdJRhiK(H{sB3p=mJBc
z<LMTSsiYcGXQT7_`VSnUn+$nCPy5(XX-N;&*t8;aZwPhRa4b2D)rHax8u_no)dM6P
z#SZ=L8$7q)LaGm>%5fY`Dq<}zSZ3=ZA3%$7)zY;mE9dw3VGK<&*Xl76-aFdGtl%!1
zi(g9Wy0Z9)TJdr9yy)oDF@vXy9s0_K)#CL-H+rWFHNbyWCrwKIQEtraD<+gkvw?MK
z(bTufjj|3&r0odWB?>L<_2sjNj0Rr$0eGhK%qhvozPFudClU)ys5DHNnLk=|9b|Yg
zKHIYPx{LWT?y#3H_P!qM!J}Ub3i|s3T;gZHE5;|U4i5gCM`YM((;z63p|Do$UzP7k
zc~76U%9|Gh-3YkR=4`##V8xa33TEbDM%%rYv6T@~BVg<%Y4pc-@rUPKMCH<^rAOQJ
zVa?*VX~GT~(jNhm64Bzaaew2g3Ha+?%jOh6P-Thmseb+|C%TGN7*|;7U#kj8?QU_j
zYGP86EedG0Sbx=PFplaaE+$>H%7xj~^XbCK`PJpbxIRFM&~bF5L%Qk%7JqU@p$|QX
z#&va7X4rQvarZ$win}?jw0ElSWeY6~@!`4%xPUA)3sJOh0fR&ZnZmvezsDd++eEZi
zKon0yKI$^)fh5e7anLS1RsP)a4fx+Z&1PFm_XaEg03PN4M@ZvuOVh&1=znQxHfsK;
zZM3HTaD1YAN^^o2lZxNJ6rH64ebvXIp`F4oDZ!1_OW%_cYitD6I~{*rdDR$?INEdO
zJZwKd>PxlnJhrL5a3*$tV6Ew(yxB75UYDQoWK?+9-{EkiPvJe>U6m4N&%1{yp~Xif
z5Ry5u@bK}Gmb_i!Nv0b6Da4w3FyMbAL2?L%24<HD9=%ZFSbKvf#*Qe;K&K=QF{^M;
z&=4Rq2{+d|H4tuY;v(EXSPNVa5@k$F){~=zQ-~b|8XrUuo<}J^Bu1AAPhTG=)ul^{
z;0_;&PgEBwGZv;NYA8bCqw(|lfk@oO25T<geFPQ6ort;UF=!p)Q{$kU@XDecxr1GD
zAd=L^j63Rnj$B_43=HUlA(Kar>8I{o|H<95qzzK=U|U-Sc;D;!Ph*n;FRdsu@i5_1
zZb8hEGmATN$MoeeBz@*#t>V%FU(C?4q!%*8Q=(o2+9;l$t@@Ao&(_pD=%kl6yD_tu
z{0pU<csoMUI(k!<C3=KK<edHU!`aZ-#uxkvi;jRIDDj!QrxZY8Si(4}2go2*<H+9|
z*z`mi$68Ww%(B1$2?3}g=2RT{ZzVYkwd1%4M^~!r$gRE}Xz_TbZ`-_&zUmov2~wsv
zEFdD4c7OrI#)Yq(hL;m?VB)WuA?34PHUevQ2Md6`oLDx9;k5jpXkw_&pm3qTTapr+
zfMhL}<&FwKsg9|X{@}v?kMRng-t_)OE^O!=(Wy*Av$H`-H-O5uU_w|x%qtFY0?-N7
z*NcrPoa6#LuimQ3#Dz2Bq)^O2`tY4O#@dO-47r7H+>*Z^7cjbl=nn_ozzVXsLIk&R
zo*W7XkAX;9(5M3cc@m)T4N4$y1i!Zn1a_9?VA%9KL4`?2oWBc88G@_)w`j)M2I@f=
zGziHRbdt34L3Jt<2f*v21FIyU#9$nO_Mo+}>`mcq{?Q8gK?>B0PkhkyZ7dS%_(~vV
zOd0-q%Iz9`AcD;D<`32mT;%~ZF$0|>#c@q$%&c<WF|-<Y%^@Fu1%0azF_y_9UuEQs
zc(cO2nLCt#^%wG?mAdgRie9gsPZmfJ6{pb_kObTEWCnSN$r*`<%(GLxu)fy*WeaIj
zbJ+tXK12;9$)QglPguG;*%<*N>{!13NVo#qxn+HJ&t2f*eYrbtUcj;e-sJf=uJHN&
zOw2ujI*Y7&IyL|7oxTrzukFN5|BbSY{KAWatC^AY5<=7ecwBhnLQzOQGu`^G)q7%h
z>vzu0Hk=`rxi}76Q3-QO<KMv(mig=77;Ol=-aO`InS|bCv)^d5Fo2wed%cdvQ>j@9
z`CY1CApo|hzolGj5>*DGKm@3>!U?KV@(*RD0h_U!;SC*jx8ir2=KLL?!R4qvX}x={
zPl9bpKdBwPOTVV3lsra2;vlx>Oki{c!hoo4$P*GT6gi4H_<DdA)$8eD$D5~14r#xs
z6?lKW6$+_$7<?1CqJX|T^2X<=&WSUd39}DtgFC5ui|;j<-1D{KB_5POYT>~<jm8nZ
zdIQ;Bcr)(Im<i&^8;>w$g&)=<WyGia4R|^Bpi+JACb~USf_Tj(Xlth#bxJ%+=e-gB
z#zJYv{rrfn{Qh|2KzzFbTEL)iVxVD6(X)A^liTiO$n^ENzUMgvS=D#hiSnk#A3;gs
zm<h{tovG!oFhRQCV~dnki1)=qq24na(l+Z<3BdBv@Wr&{o$#n_1CRcJ7FkZt?EZ`O
zb?00S{zVpKUBIWac_v`zQd@|xCa*XV0!Gx74U0j_g2!B*fPsZR27*O90P}D@vZv~|
zbJpYf4lesMdxppH#U}exwcyvnvkAnAX3O~+K1s9;FFO^K0nP@$!u@Z`2F2TAl?^8_
z=XftO%nY~N1LPPn6Z~|I|E15$+B02YIGWKknV}%s<9II%JY0}j!LLqybZx98E^H-P
zmkCdGVvEQ)q;3ISme1jR{;Wh+kK=3dY=`q}?)i3!#Xktukly=l|NW0<*M)cLOZ+Hx
zvff!r5bi}llGi8%(QYW2G0Yf7e9>7U_->H<Yt7oB4*U`U5rVe>Z=ZZAqBXI=j0{bb
z-W9W<U9@%~MOgt!TII?H5qJU3k@57EYtiG<QO(yK6Por?c?{`d;5u_$LVHnj-XF~j
z1(|Txhh^tq_pM}WHV2TgKdr?=@(#Prx^x!n!m_pJ^deGLWw;NgSUX9o6ShT5iCi$j
z9r#@w%^q<q$a$8Gw0b&ki+!JUL8#0>=!sX*hZehBe}y1%D|`Il-+3J{8hAmc*Uf@3
z!qqP621?A1{+icdbFlmGs-Pymalf800yY9J{k@KGu%RejM829*GhaYvE0<REqVhn^
zYIAd6Lt(H3HJ>YHm1b8+WyeUNef`?GGeJec6ZUKYLEST_ny~rNw*xPz_t^kdaDZT8
zNY#hpA%u0rL|z3J;8unsHEGl1E>T@YCG4pI`!>C>0k^^?uxAOSSl($@D|M1FuuJpl
zMHOoC7Sw8BTG^1<1=9xjLBOp0;;)BqyPy5y$7T<Ed*|!sNUU5<KD;NKEL<G#OU}=C
zqaS<W^!MFI3tm`4gP*;<b8H^)XRkoyMN-@dpU^Ufd7$pD4YuEPnmW<SE(jjo0EEMz
zPiIHh)dD?kT*%y^1fiZnf=;UGJr-lzQxAq9wd-=~Ta)!#;_gBXLM9C5d8w`7ixu{}
z1>x7*KXv4?Ny4nuwwK_EACNGn)#xPMQBYs(M$smvB){MXMKm^Q2DgTAXm~J@VMDs8
z1TA9ecS;eOGKl%`x>5rPqCZgiCxrh&KkR8^#A);8mkvD${V|TPRBt`0AC*IaqdX$v
zPBc%KGf9_3Z+g{8b&q7DCXh?c3pH0C9w3ec&h`~nN~whbZG(i~$2VBkPE?-f4~8hA
z6B^dZ_BVD&WS|i@6_^ZKwNg(;CljEaJ6AWEM5dS)3Ap<uK$Mc)GhS1*802G$OOwEf
zN)RjY3D9g7DAGqPKnW2TVZJUuDxo@+k?oFf=W`3A$pz~kLITzVAO+kLN=4BjQ}V-d
z(mbhy`N=y2FrXBTBDF=o*&13z5UIUQt{}?`#G49sAVH8c&JHu*X-}7;8YQ=LC!db9
zk0VWMH!_TUvQHB4r<12B+^P={0*hEA<}Yk23oDSeJ?B9f9TP}hDiR3VVu}J&0Ii6{
z2du=jiUxXcA3OL{E6byn&N9Mq<0>Lrqz5KHPzw>a8k!ftS&jiiPB*5iLm`x8PNUBs
z2<~P3tc0W+nA>I#`|cNO3?RKK2Up)%s6|rSD-{XAfuKSLo{ZB=x7G&o872nl;*8}>
zg5t;g^B8SgJZ7W|Y;{Ts6}cr=N|>b*GL3Ez(6vEC7TC>C1*vqQXd=}3#X<l83a6SX
zV4q_X4Di28?`oUxdPO+W3@U=Diriv>>jI~|WuF-%4>G{EmZ)j%My)>k9xEKZuUqm3
z9|>}Rp#_l;mo8u36H90q%H$38Cq?gNCy^gfEY%GpLl-Mtp&v5<MvS-?p@-y$`ARg1
zml2C%>CojzEJ}&>0X-378MB!tj)Ra<`e1$_@Nha6CLrLhmukm}2x{VgNKhBuGIo6f
zp~DEK;_p+AI@cBp^e2g{hX&}xzoWFz%NdM0;cyucfA%gRLP<~^YUmT7c`!l|6@QH|
zLL?#t@g*`AYRlnypSRW3J32}ur<i2Sa`4(`>~lJJ@>W8HY|E((B8wv|mn&;fZ%Wtj
zg<IHnPa6r0_LDD6Y=k_4PS*j6-p;BZo%{oV2ST&z)Ii~noQFh2JYsHC%o7($FFuvb
zpoFqOZDZn-?xLQQMpB?CZA5nz4U#vjjAs%TjhL-qvnPlthyg+qz=pI^VHBru5at<?
zj_QvTNKcHP6D~0WI~#+}U_r+%lE5(KtY}|^UKm}dBM04$2^T1bZ9~_pb~dR*5^;GI
z>?Nj581}P3kUR`Uk+V40@VzU1RFX?04re~PBc46um~^k~o4^nG)nro*GiHF0R<sj_
zu!T4WJaVI51Rg`uJrbe$9#!;eJ*epWK&^)Klt1T?Y?oiSqSi>dnRPWsHmW3EaBgaN
zS4CPat+bcAsw!4^YYzQJF65ZZm4~PvRZQrZ#WX-=sSKa5FKN_PQkpCkwj;Qx;#C~3
zf)<xk<`fN<<Eb{4N(r0k)J6uRykB_tkdDzYb)<}39ByUQRWaL;9C0GM73)!*Xks?Y
zR^+rTO8!-CuXHjtGi<ESPx&|xelcdb+ADdTJ31R%3t5wJj^)+O{<^&URoq0t?c|=J
ztM=Ht*YRz!fIDaZ?kx8n=>NRFevPn^@ie5l88uJ1X7Y4log9p@DCTgro_YDWS}yAJ
z@L-+K7;crf_~#vMu4!Du+3`>vZ@f~K1m}Gc$~koSFm~vanufh<Tyu(+klG%)Pfy7<
z6^x`dSI)k|!s>}3Gc#XvX4dB4Ezb$V#`MIJ+L{NtFyC4^NT5`c7{V$vriQZ#-)R!A
z^e0po)z9fdvo+kBS^=7&?OW3vPWES4f#ztGHmIyV!2y4|=h0qgV?k8VH1KqGMcsIR
z4EH6xqkp?|uGoBm`*|EJWJAW3kRTTEzE}B$0Y8b_ge3GVtcz`H)L|HDZ&n;lyVMzr
zc2!JT@%L>VlQmY*+dU>qz>Ugxh4^Pd9pqNDu<x?Hc~hr#q|jTs{;9|b4ZG9sd&k;|
zBRf}3h-g<sZXi?mN#9{Ws>F$``RXLw@sp!mD6g-UF)-~os!lFi%k(BC$efCmIH%6W
z3l)ArBXpZ&J=OKW)mS}Aum+Ie7T7o@#6w3CmNt8c)ei6YecI8NdbZ67g7iLk!Lp`6
zaq=Z3=GEcqQKv3T6Ixy1Dm5GDJe8hZsy7Nt7cHJU%3T5#FE&e9&7M0p)Gvwj@&G(I
zqgUj^U5$o^v~J~%4=yK!m@l@3G<9pP75OD#@47Ldg0{3?;bX6^l8gis8r=a7Ou)uX
zAGZ99a23w3wgnlx^A%-l;Y>hJ<pSVOx5lV$6Q{Y`E+IWLd3H%VQ~9vzK*3S-+9Uuh
z!#P=bQm_c*pZR=X!IJGdSHnKJw%1RdewCcM+f&HlCBuKxBbtSaP*=&L-eRba_11_2
zSdg?`GH_Rmvo!WOa%>)(uCLcN!e-V|Y~ITEnllg<{C8mJJh`KxO=wXhG)|>N{`CSo
zgzs4^q%RZ*%b3Co`w5ymvGs0}EkFB`QGJ9>SKzh0j2f2DRJG`SolcrLxmydFg*hC%
z-|98P$_O=RcUz`z%l}xJKJ9wlAI%!GsFO%hF?cb1l`OfQ3m5%Z%!{~Oev(Nn^({dp
zI;!+Ws*mmCTwYUhf%&qPwMdprA(`s@WmbCat87b&+0*8UHZbIbb~|DZr}KP*wSY7F
zD5qNJ1L!%Ibfw?bbvfd~xUFti#D#fPo4NzRWxgEvspf_l2oQ-pfvw3>#;%SJRYO&+
zL<=kl{vXE9A-b2SS^Kg1k9}g>wr$(ClM~yv%@d#4w(aD^wsZ4-v-?f%yH>9n?A?>@
zLGS8%>iHG6{Uq0E7vFGA)gz}5!ZkN-`dND?Sh-sCF(M?{2Jwb<S%{YKvEJ#z(m>=@
zuVujMtf%@L)KhsOw~JOfo6A=UUzxA+93CfaI1U#Nm8W$j#C(^dRyey0;cV9cm(j^K
z7j0|Rw!0kcS`3$Kx5sIEwQYCwnb6IpJ{@c4#AMIYeg5B0s1WFub_Uaxw;eyfhW+}N
zvc`(aG^g{If-kCBO(gjN=+o=CVFW%hW}i;Bnw3&l11-o>R|~DM*>#2$gg5ch^HHQu
z#v1n0$K|H&%w_HcFZK-EBtpS2+Pgov8S3UoevhL*-u9kx{vpe}An2zM?C`#>0<A~*
zz|HoU4DX@9EARsY&HnSc-p{={$mQ4Ym>sS4QAN5({lbEi&n>a^;T`1W?<>xAt6XY$
zdj$TidAr(y_JAFd?vj^Owl5;z5MG!OCZCC$OY|MPTialJVqPxfzef&g*6o7<(zvbJ
zXDb!A2UQbYF=adLe#{qd=TE@SE!`@B&$?zFsI6LN?#OqTHRnHs*^_5K1#ar!v@X8O
z=tWKDQ@5SI;jm+fp^q$LOL>{#S(!6thM}TQlON(s1l26WcRt~6IyDOwh#{O%z1jj@
z<#Z}(99woNnFFl2U3m6m!1uM}U+y)txMz1q2TLxkk9g2cT03jA*f(+c6MVL12-q#t
zE_zvd`g<0KH?G6?>o1vQa|d5-L-O_(JdP-gVcVUYy5E`Ra0+N~*7}JSba9Kf`SgrU
z0|lC@%Q^8}fhMk=CaPtuz{DcNEraENey?V|TX?TDMU#g}x~^r{bi1yfBT0JKMOzUv
zxNWU4Nfu9a3;W!H0gj7tiST)<AfLWrmCF<_AVy^khJl*{ZV-FB=}lRgcEAw2DwL(>
zD<7D0pR4kEvnknqD4Nh3>!B>b=<2k(z5@>%Ptj&)`&G+E!$rR%r=W-XEL-=pY4}ln
zYoS$y`YZ~2;E5NWWC4TqAua5cV+4EYf@czA$l`pdMETR8ZBU;I&lhhc>_Y3g8O9`X
z@2RfaY1237<hvQ&wSI{96lzSXP^=}t<*-$|p$&5}+^t8<bnJ+>>c_3a8s0*uk>bL+
zy=xc8`~wKLPpzmHHWO!J*3(@cL=bgV^+{x3wya26O4?K#VQtuKwJ9@f4Pdix?ob6J
zT{@87EyFX;<&31JHE6jvP*Jv?Y_*`OrF4H+9a(uVhy~u5zfr5vk#M+zv_J>26<_LR
zVN{$+uH?$Kx7vC*Vv~U2y3MCaf4@&nc6)TP5f+b!NvT?enwz^5%pe@BJr;9vNqaBp
znAwpPH8cf*#H}ABThcp}<CX3s?P3LW59RCk=U+`KStJd{7NxAJMy&PTEYLGS84Syp
z3F_vMr$Wst37n)Ta`1-6hAGkJ@#OI+XHZ+(H8*TlJhZ)bf)x0~_G`wo82sQ$SD@P#
z4YXz6emeJ@D*9S79#Z<Q94q?V(jS`p+<vxv`PPI%pI$Ezm|60+6+?eU<c!by1dd>3
z&LH9Az)J2Is3x+TNI(C6)qNFKJ3;@X{lZ1))GLv!qM48zC!6gVuiGC_tUxzoVImBY
z%*#%(sDI^!PRCp!ZUm6RIg1g6e40&*CC|=egaaTrVHJgDJ!!kB+ekAU5`&hUPJcgW
z{DTp$(=%d`ZTm>CsbFMp#=om6$j+SKGw1S=7Ee3BiHTM4!Y}|)XB35{pV!->U^g#L
z;ZHUnGgLh<W;N4#_IBkzVbR*aQz!oe8<)z_n=IeJ)gq>G?LYZ%z@)e&k>ylde(9hp
zI!Fl*vV;ktFk!EJG5^CG!Rj)0B2jW+%>;m`Y`pgOu{<__eqvJ^zGt3GW2a%I<sh$q
zJ&bvs8<YIe_fM=kcE0fjo*ncaXg{8t-K72Vylvvfvt0J3F`R3sk@C?tFFKp4UxaPi
z2D>gyK>}RJpCe+Q6<1H2WHx7OUFd;LE%p9if0s*UX{_;CF(G>gh;)|8#)qrfVJAHD
z7iUCQ(n&}7N$ZuZ`k(y!+3-7DYp|$72t|E)9wxvwEJyeCWx5-o=rNp3<$+G98MJ4J
z26a%)a%pD^3?TBr1KV0@CaMcI`jYu!Nt_F`VkI_#cW?Kvl*k+>1ctK?iQ_fQ=%b}J
z#o`4^z>L7Ij{_p5H{IhEDG3v_%*3LlH>2Vc%D@W8>+%6@gHy0r?EpZ9>C<p4k66lx
z80j{xSx~n0CUC+n?SJl1ci(PQuBp%CUCt~XrEQd@6}4GOC9>SSXiB$uvb{wv2ntM}
zEuiHiV>yQHH;qnpem8T<l4ASCo6R1{D+Bd=W{Y(TI)pUjhU^%u@!oy>eF<GKB(Fc}
z*w`5+uDNk$O|T;szFybEw%%IUhFw>?$u|5l*E)(9r$O7_#YUn7=yW~43j|CbXw;ZX
zG}_*{T~tQF;EyI)2)IImagRWQZwrDTc;;o1D-;!yZC<soLV(q~0bZd0MW1U4Lh8Z1
z;X=~$QOc*Sn+{5T0hjdK+a<M6<HctlxqaLh@^r^Rnz?P;-x{mX(X=-6C}}<B!2@t5
zh#eKn)D!S3Tc_Po+3k`2$CXzT9^A4dd!k$=Stz|OBOck^J-6@@dVpY<QaQ^MhhmC0
zPr_t5wj4j2hJ7JFT9C#{9Of9g`Rfs`oy2u`k_rh%W7Qax;Q|(VZhi}S{vqsmSyn}B
zFL>tkpoN&OXL<ym*L&Itxug$gZ#$|ADg;ROn#4t?&;3zck7J$2qG_jpx`Pj%aT^R=
zW>wN0l(n=D{4WT!K&Czhr<XZRA2|wsIO?3kr8T1uEHDi-AVNhc%+0K!97U<nBL7H=
z#iGmOvZ>3fFmgMv=f>JUx7(+P@ajD1Ds9AQgweYnK0MJVN>BPBT-gh-p{_i%-8}?N
zTUlPL{;&k}{k~8Jdxd(B>_844tB!(1;E<5NPwW)>z)KDxa^;_&h1C&I#N>-UPITE|
z^7Emvk*G50hZi1nI25IhV+xyIo0l(qV&=^YQ#o?y_mLH6Eb#eH{?PRLUuNUIlKR{p
zWE}EKuKXj=sy^g5UeorXUf%O7e??^d?%w0Cdqu?jMij=*IoC;Ivr-n?G<GC1Q`XpO
zs>Hn>PjIc=N42JnS(plz+C0?hg-V;btj3^g-BX9V-8GtkLfpu7&_~%O>JL!TYQAj>
zgFawr)N@=wIkN+kZN<1a${rZeO&eFBz+lTGbrV*o$htE0yJK$pcPa4V{Om$$=)&fX
zrYXp&Sp%ZE&h6iEqX?w$VtW+`;vOA%;|AlwtpnX+ep^`cGppGvCThsXwkN=L`4-po
zsPk~RNo_N|*A3^zZ=tKAWl<I@Q1oftFhle}-Lpt75zry`hG?3bT0*zir_NK2Jy0ZN
zO3JUBPp&gSH;e89)*Eevtv_9QP%tuCG!iY$w1sl(>ZjyhSZOH`qFFZ}>Z7O5p+5K>
zDeJ@Sr_6(aBbC|MS;oOsL}G8p1dR3^hEbU7FD+XzK)H#eB+HtXDCVNZ|B0F7yXsWb
z2!SA_@;Q8rsn0KkJvKxkmD~F#y<Xa_;u_LH8y-=JK&;$Oc&jhevIg6ux$=5RY}ULL
z55nUZomsUN?qC4a0dDrAg6q<hJ*>1mFta13RjFbUJx%};JOgENM&~JDvg)UvL`daB
zRreG^UdI6bQKCZUo4Ff()4?@4X3E@$RgQsSh_Kog)HMI*x`|hIHbAkPR}>}?xofSW
zLK6Id<!UC^M6E1s!1aPy8f;41OYL=tqbnxdJvG{>wO0w>=?1Ia7yjU3QRpMGJ&$FS
zi-&63SY7GPifhD~wRgCTb>^Jsle!~*`(c+fDT}HV(|P@ON*Vi5oMmL;>&YEc^pnLa
z%q$AfZe?@w59%D-9#b>MD=VaHATaX8#-?d0|M)|UlMEZKwn)&}0gpX;XE`0g(Bh@=
zZOqxF-<=~Ppd<d@elG7D!T**9X?3zX<6wb+9tePdDE}L~BO|SY!~dlUc457HZ?OGL
zZu_&V^JvE2L^Bp^GxC^vZ1<T;`<mHwUVDlwRcOoVl_N6Z*l}gg@1M9I25?W?aF;B;
z0S5U61oG?Q0%tzc)N<ms2tCeDvVTFqS1fklB;hTo;#aESs_X=VtrO?JLz=z0p&?36
z`GdGkv_k{3Qpe2G!(ULN);jSCD?A6Mw9hV&SO#2=y7;D>#Eqi|l*rT)fj*Ioj&*84
z%h+6mJwwcZ2Ji?YK{G5!7NawBlMBe~8}2mnz!zl40|sax^tS9tU&fSHSQ>DIG*J>a
zFi-=C-7ydbK^$Px+68rS@*bV+WMfSpY2b`wbE3zbj2mN(TmYHDno2myhIRANeH;D&
zL<7z2fy?~(N>gOli83-oCCtr0&mQFLN9LQ*O*jXv6Ot#a6FwxY8_G^%8ja+<hhOLH
z7A33@g4F1Xy9w@}F-!)Mwn~?Z9)>5gI(z;i6YQB+T6xM_Ga3q4#mWj5<S3q|(3PGX
z{oK#{-Qy?#9Wg#6(o7r~STIZ8U2+n*L}z>p;=^wswc$q8R!QKn5ksO;iQ%^7f1rgQ
z%61k1N~1&uQP9n3Kd%8KyPl#Tbfd{7+u6X4%B$ECM(Fjuc_MX={8DCxUxk9wutC10
zHvJJOK{6U=_i%NK34URaw>pvSt7xkiSXa(hL7YLi3_Q>bh{-^V8kC5hB$(K!yYa(s
zv73QvK;RP8|4<k>kvawnvp!aVh})*ZvPH32GAQ0kAPftV)f3-j9LA<zUlm6z{N!Ve
z$Ed&REcONs*x8XCF5>#IJ?=j)R+3h1JvkaQ$sU_gg^`%Ay_3@lDW+zxdaG;&|Gq8}
z0D(Zf=?2N^{9T)a-%@aEe{wc8|ND(g-nXliwGD39SVh6@hG@2ad0bf;1L_7l5)LQH
z_BdjcU)gKv%lScWxt60A<fDdmxxdsSCzdu|$L>FUdL9+@mwbHIOELOjH>)UbCdF_H
zyxyA?x3$#=^i#%zd5xEU;MC~qV`?bwmBgh73Eu>5-qt$E#XRL<Ao$q&|6O^@lrz%f
z***|EptTH<d*KD<G_U3GqZo^0j0Eq<tpXe#G?5;u0Yke5;L5bW=K4-`c7lSir>-vK
zdQ~rf#FC!^*U4epfjVT5fBf}d_K!w12Y9z<Udk51r*Po?6}U~$)yi}FZT;rjT0WNT
zZ@TYmiyGiL9)3KlBY_%}OFEzfoaLq&h9^?V%~IUir2NqCAeIquC`*6x8k*Th^bf;H
zL(SFo2A$f}2H>hsHUE_Ma2H$fo0#oj9Uc6<uD0T4{_v;wj>L~HG3)jw#=8*$6Y#u=
zU%&t5dyBk7I9l>|^1Zy8Shz}Utk(<PuAi>`Ji^edo>q3{r^sksDt4XJ1i&V96}28#
z7B;K4HOLGnYu7A)t<Q`FwxEsL5WbDZK5Mmw6cG~Oj1h)t+88!Pymn!HufZlO`A%Xl
zy`ScZQ&IJ9ALe@LZxyD(UAWG;Bv<aXhFSi89qQ^|Z;iUG`+7CzPOy_oxKrw*eYaJs
zh?WDx!tG?B-c1T3O;ktn6D*{`Y#Skp7j2FtR`&f9s`fx^W+%W%wNl$}(0OFUcENEB
za^8tiH7*=|U+(@{un7H8{WjYQ2QC6RmPn953WM=qQjMdbs`y8p!h+tnN$;>V^JoAP
zIxrr*Q~+^lm%(al)l4d^f9Fe(i}%gO6rHg4GyO$5MscbjQ<^o-D%<K{7>OOBaebuV
z=(_h*DaHJ-f8+uJlq(xa&`y)#fFx9zaTp3HA`%uk)H`{y?cq3`rjJP<DOGSh$i~ox
zkcez8n>1bwYCBpP?iQ($7~ptiSXz46Ua|7D)3x$}nBQtW<u}(>Thzs7HL6di=*PkG
zBRTH!AKefT1p8TDvEeINa27DkC^s=K{RUyAaqatIT~DkrPGJQlK#2ttiXK;k>^h~p
z7%nF(xu%}rqPlG;q;O1OOpNGg(?yF%kAB;|{9xNaH<hqwWZyw`t(ThPxYa<tQ}ED&
z&a>WND)qpZlAgZMsLVQ~AWT&DeJx5f>%As0o4>iM{6>}9KPz9Z$1j2SuCJGdw<?P_
z%gT*K<)mNv1-C!w!{31e;KStOG26wUAQsDwTdh7s*AA=No0N4Q>rn5&dDp2i4ncjb
zv=H-mhdNFDwP}yoZL5u=-SX^=zw?|gdFJ9h9BrlmLkl%h4My{u!YW;TYTVwv@_`V=
zn9`JIgwAF0*;K5pPKzqKH{1o4ZzSP40s+}k8N`qcEm;X8U^rt)#b<Z(1ulzW$Ip?d
z*ojo@lMD4+O?^WBj`36#ie_{19CPQm`I^P1^pjVvz&ib_s+is=rP?8DTfwKQhFn<;
zpHwp5pb#?cAjY=+>8hB{D8rTgm{|;$Ffx89#mc~^wt*@oos=e3REM%y+NxOgk*k%F
z9?Jb{s{L6YcIx1rlsiwLcUwSh;tk3=uj8H>Qus7mB^LyAcm)?fa9mD_?le0&glw8m
zY<xw1@yK+Mxt2-}hitj)KSyVlbN<fAFzUU)p*Uay;Nz#`uaZjN=(UUtwb@>dgQ~9a
z`du?|5~&U=1n;%gB1o<GgU%8tMKJ(yv#9v8cfnbgm*g#wQ{W8JTdNHJHab22W96M3
z0DBB`HFQm?G&)xWo>PEoOmqyV0g^He$Dn0<IkEwhlkYDnA-940aY2#sjNVCACg@J!
z(1DC!f1ob*wSl1mIl2>EV}ncj-OYie2{G_7Ov^c6;G}Rh5}2xoBqTZ(29w$8uYh1E
z3*l=SJM@@*L!qBBJ3Qw|^?}FSDnbG}GvqYcz!^<&J%BAi8{4}d%%w{LYJVvNj5;4j
zMP6e1cBr_WCK%eNV~vg%RhtJwZ2p3{8f;ep*5=aJG#?-`YzcLPe3<&K$sU)Dagf!F
z7a$(f?L_hCMDvj}%I$pHhoKCHmkNp5liCdQj*GBs?m$B~xDTNBWW8kdL6Y-11)gih
zP`BEpkTxQ$GB%B2GbQ{5=XpW~D{{11M&U6<0olH&LvW&K?VB&Z@z0-x_A#Csl#M(a
zgxX<|;yv7@IgUg9J)G%!#~y-UF$lv~38r*uK2E|2P2c(2P@1vk_HXi3<_$jgbwl?9
z8dvz%60Gcgm8IHdG}YFyUcikbWV*Z`>4Q}KWrBL34Pqz2#CtR4*Tw){pbzQU&#K_h
zYFrz@#CkLZNt?Jfcoo}$ba2^&ny@8Q8@ir#T`Ih$51p`OL<_o}bTPD0;@Ih624*8|
z*5bON@<b3<78Pi2E|1y)ug)SYbFuYYutR)fQ3J&AcO@Tjng)GX&wem!tq)I>PP9`K
z6eu$mXga|lC5H>mPbW;mPQ)*_n2ZU^h+cT`C>}7Oco~et{gI%#xqltF-1bJSVCX?B
zxj*Jl>km^&{-n8n@UqB+o9@}`VdUj4L$*Omn$y+=O&8GY!I%2MJpc2N_=exAnh@!g
zpsQ7z5Rl`{n$E=h|CY#Im@`0Da1ZR#9%(v3Ush9yw|@7~GYYH@QvbLXqW*?l=j4Rm
zWqcTG4)tp<e{Db<f+bX!EI;qelgRDr7X^fziF?F1`=jC8Ts^LM?jkT>dkVbe$i4wa
zP);Yj_hCM_S6!A*xoeMW=l-&vO5@5G+v5~nQTe8=;cz*~&gd2Gyze~c?QG3L9u(yy
zf6@(!chJ1^M#i}*JiVh5T-Kdn?8$QXzp(4mqXtuw^-~VN_}G=;`a6e7RAy_py&h~L
zC(<6PMFDYmM)RO1RiOcKdIrL&?!Pu$20c>+-2_?Q8ea{zGS@e0fAr@peh(6~wJCMI
zj;6FYLF`SM)qYD>1WYi%Vvs1Io8}+XeOQUB^Vf4l?H^n%9j$C>U9FM){t!s|Iq%P}
z{d(HJZVDY;xAy<i{K{O*ym81k3Z)GP!z*V>qv4B&Tl@z4-x<GO`dSg%PsZOv3<N~=
z-(~!khHNbVM<d{+mbdbT1mIiy4Yg4$t1$@4Yjt=KISTZG%zZ5g#wM0FvGoD74xp(d
z23Q?4<9~O39vx;P3%EG2`xD#GY+Rwgu+@`0H)_38H^qdJ^*h<-?l93*XYdSrL%Ojd
zoK6h9QMR$mFiR~hCz^wM(!<H;BO5Q`fff;ljUq~s$|(qbKfOyJG`nk;6C;g>Wsx=h
zfd|GT@jgC9aul2zJ$UdA-FkmWOmx)(EBZ4#)#gH0GZDRdk~5rAOmTX;D4m%P+C#05
z!cdTFdVf?JWV*J{NTh+9G9|iKTH_1@AIV!FS5^=Zoe*!r>(}CbGjkBM*33f-4h37(
ziIkv^t_X7x=m}mI6G=2dU~8wRtBXY`^J~VK7!4yU(Y!G;ijiu#UJAwCFN`1Qo*o$u
zTt1!OG>9a-p@=2d>v~@LX?21r;VM@?#^7+s7~zLgi@+^!Ee8Re5uG9kj9X?1jS}aS
z6Ejc!dn{zSe?H2*FMY@ootPe)5l`>K$HnPoV0YvIOLtlbfy6Lbhv8;^DI9jXboXw2
z3;E<7Uxt$&T!UCZY;;d7yD{6@=?F&uOG<eiZjgm~9@akF9=j)tSa4RbPZUJiSN|^C
z2$s^7^)9kUkX$Jp$`siQ?J(2;gJ-Xwx|dWC`|f(yH$9vPW}DC)IGaJ%V0xY>&gaG|
zfvIl*paex6pKMGpSbR)FAbJc0*SC{~jFg{@ngCIc&76Raua#sRKC;XGK+ukMkJg6g
zJrD=ub~;2lB1794jSGX}+__`B;M+(4%f5|ab!Vc}pC|m_Au?tnB1RAlM+9Ose$7<i
z3=TBMo22F!(%9(x+z<o=dcL#A<Q)?xBfYtN9NTZMAxmxT4Sv3{yRc<MdH$2#ZVF7o
za;KIB#vW6?Fq0uLu&Xk0n>dy0)ui>9s9y{!s?rlg)UZc^-wk{|;`AMH1c+e+-Bu!m
z@-V}Ctal0Kwjz3eZ3V`K+K(_fCLHuw(Zh4$+1hQNE<Ad96m?4Ww`?6eo1-yM2gnt~
z0?QRtXKO00T&6SEvxJ9t8iy&U$z#yp%b8vlAl~1_?FL{6s<%!SNQ1SV-Ea28(gd0W
zW(_Dz?=P0#zP{-HunjvtwQp?OJg$*Hq8u=)bYZjVsjoCCLMJ%Xbh89>2WXhWN9}rI
zCACaYh<6tLO;-<91a1qgSIJx#SjjzE&#k>YUl)X}cGhfUv^a?&zgY{K;qyVjuHgg3
z$>`!}-qi0M^p<TAy(K`45X0i&;6P@%4L!saSR&Ne=JbuSg~j4FPZ^5GwjViI;~bX5
zaFtcCP(j2iGR}r$T8O~GgO^<AwvRf(ylEaR7A}`A7qrOQhON^zYs2fR`WK1sDC}04
zDp@O9E1xTDl(q<0@>MW_{C$C=wI8(fFU)T=F`t-D(0zy1151o8z8JTYcH>>M^{e3z
z5w$}?e+8~#HV3WxL0G$z?xkLMHEfhlvzeNYO{eA%Z&BJ*^k0q2jn|jpYX2vQk2_Y6
z*I4PjU5xF0&9KxUcwoZa8~r0R%o;b)$CEeQPpI{5KRVaSw=Sr?P3_<=)?U|Ek6NbX
z<dfapT427s{Hyl-SS^CtAcoZ4H0mll`;mZk;JB#1KMPXIOzU--D=PV<^%u=)^N8&I
z_9a5<Im*$j!+e&@<z2aF8i9Qh>pr`nt5;#nJNC{1KKnE&CwBfZcbm9PL#{X@t_A@e
z+0+qY!i=2V2BKBplgOmZ@hqe=u{eWKZ8CxqEr@DD)LGHeyVk{$=}C4WZBQs8)p=0k
z<*&^6d=1@)AIKLto<cinOb7Ogc?OSq|H{@Gz!GYBUJtHi(a@)t8V}<xzi2}n724zh
zpZ}^_NuZP_^3SAvNK<aMKi3h<j`XLjKH@{&KekUu!Sl4EKVLz0B~(62P({_zcfCMe
z&bIy2v0bj#YMW;xZ8a9-g(a@SD&Rk`r~A3XS~+;KLXzh#j4<+`B+y@Olgkar)BwjZ
znA6x;X~u!M?7BqQD+m+^eg9zH>`qS0zsE@<pBZuQ(O^1YIJldjeVNj!BF*uO#RDwX
zFed1v@j_#)6lz&AEsM;tG?j@l2F0V9HPwSi8KjM?nv?rkP{59UIUjV5NG*BIaPGgI
zL#2nkLgfVpXw(eEmAyOc{?;9BL#<90M>LH&Qs3bx%%szXb=Mva5}{L;D*fqnADJ$!
zvFMY<on+Y}FqN4ee@p5$-h#omeB&XCxYC$Nm6@Jgu_rTUW8<}<DTh%zXSUGtpWm0V
zb?xi&JCxEjT<l@aRtqc}-@x*a*o0qI741zH-EBc7{-fZv6U*kT$NoiSq1+9yJz@>~
z(rKdnhP9~TPQPh}qFZ0s0o4J5^I)MT8Ag2t&m}jLhip3iBs)A->>n@_-FPFyuHvQO
zll18XWl^-kOD`+C@pCtjGsCQ0-rr#EhB<U%tEoF{Oz*;Zu_{IGY<2+NJlw--{bcXU
zawz%NMX&XR6+Rc(Qf^TaiB<R=*Gz9*<CXZGSzQ`-{%6Jtz!w-iaO`J)RZhKUT0QyY
z?WC~|9R-;y4@Q02sXx5Un5Jf4p`tgVw0!ONcRh9k1$xXvw#mhVCMzk$BRD3kI08c)
zL(<hF%X7%$2+Cs`uX)T`I<_2ORqwMPIO%6#FXDARCY5&8%wDMkEvtM!hVy%Cy4;DA
zSKIAuPH^jdYB!g=;MGl*?9N<0a_5NzWI?x?|IO*@9WfKAaM_%^Cq9jtz(+JhZ`<l~
zZ|1~R+fP|Cmj>-0r+@h%6~S82`IdsSd-;q!+v#Qp0#uPdX9d;2kdsH%apHPe&<(Uy
zNn%Jbpg;NPt^M_st%^pK3NX7J%D#V9(B39k`d0{YSs#E$u0xSL?b9RUqmFJD`W&tg
zlX>AD{9Cj{-We9|Pe2LKUtl2J)Q3g0-~7K*n3h$DQ7j$KWvPTCjjO1k@he~&MovZB
z;$s*UBtJa*N2i^)=4x8(&d6+_Z*u~`WVOTAK>e<Coxq_E1TfNBPfLh!)93^gj+98r
zxh9jN??AjJ2LW1+>vm+72J;2N$*U}9tscWPBf8k!b;7J4EZK>X9)V#hwiI=x-Vk^C
z=e&uS)Q#r6E7>lcxn0d&UAh^rQ^s>`shY-xHo&EHh=1FzHSaTBr_6R#L|p-`UdO4|
zkcJMzDasY?W(6u>slDgx0cdV%v5Ff_780U3YU-&V4pAKe(ld{O*%;kJ820hZ54oWr
zzj9!N@mrVYl{H+mJ35o6H1~T+ZyQOKO~kT^wuje<)ru*(pMxv0X9kF-@TW?M8rl3=
zr;`Jl$Xf*~&`?(Ys4NvvH$(oth_oj73%m3Jq&_L?54zzo-UOu|&}Z;m((!>04u$3b
zf<K$(%ky<5)X}}2nFiv;KkFkpyJCp9<qO@MFJs|od)2+z$P!d53LZ#OfV!cRC}fWD
zoHDPMN;EOgTjG*dqOiZEE@iI?^KT!oq+F`8qAPel+McReFiNjwKc%J9Y1V3Q2BSax
zIfWIyw1nV3#$YhW{Vb+ZI)Y&%6e##~XxX5}yg}Eiuepq>n*n5$op>_ReRx&6G*U)D
z3IX$u#79M24MTd#)d;pMHl)*nI+#HT&Y=`GSb2P9`||J!{tkSt6-|r8P8zI;FvB4P
zUZ8GzFOH1N!|?Fl^R+Y^Ws;(!rv2brBryt63KSg>HRr1aML%{r#itfv9%QGj|M3~j
zpVJem_i{QQCkz5hUw@GFIgls!Ff8{NnY~S_e$bs6FdnG*@OIYo|G99M-!b*@06;)p
zbU;9~|4rh}%E;uv@n4kNYqTugH`tc{!xdCf)#ffG1=>8YlG_~Alv^Mpm*dW{<Y5B}
zMAw#Dj89H0KDGCwM;|AtAv^OVcO`}C#JPIXQFyz9Wzkjtmux;!p`%xjLUX^DcH&sy
zPTM%)8ACy~P1p%`a;a0OPTj`C>l>k$He|1~c;cZu6V;HJf50Pdk18CpJt~!|&XfVy
z113q&OqiA;GwYQx3Rt2gY-<a7THGH6#6FQjeO74{fp>^b6pEco1*UuDs!~ijMI6S&
zS7Dn<lSB?t&8#X(xa2H3({4!BGl6Lr2Cl$`W5xfm69ni`3(=nciy9&4&&_4AR;{NK
z)JRly&A4^VLF?5cQUl%StW{qcIDL3~^HS=CsHDn6{r7M2M&?qF?A|K@F-(B}o!|qM
z@tdZxJym+pe(sj3P4rLHN9w1ZPJ#WJl`49iR_O<5iRegQZ#R=;=E*K?qzQc1G!^7j
zl(i?RG$g5YDtmy1(c)kjElLWE{nz8$WtI5|e>R&7niNSq$=V$tAguPdA^8M-(^fYp
zpu5aKs-3Pc6JSCDuscMnEMAP=+#lh8{9Rhusk<~ps;#mx_B|f;>-gc7@iC}EzT9oz
zdiD3~{sX4&95jM#AwFz9ohGd+G|-gL@sd!3mF{?mj*t=aD%t9&bDM!H8SY?-L40oA
zo;_83@13=qc0pBjbzjw*w}S=g`Qy0Bab<aB^zmP$f`;;Q+^awa!m3J&CAFPV++sb+
zoaO3CDhJxb&bxdtZ<Uu_Qf;dZ)B+ePB%4AQrZ2b~bqZ6}8fy4Ne(mKurPQz?0IIq(
z1OkUn&7esNs5>w+x^oIMc=4BzPz)`-VB{qAsYV(lO8GNdrPDtqV$?$<YSDjCg(%;p
zviX%EDPycJ=ka}|ec51)ns@+gJQ%uooihgcWCS!oNs%>2_=z=PQhrehE%F;;6U<HW
zwgY9=`UP0+vS-a9`CUWsA+^%ww(FFNqwpDM2;J@(4%j1t-~v0@$zzpYZf8Wax;Sie
z6g4!Rj(_U~5)p+aNEYDUhIM|KR5LTsD1}*Pc?BTV0)pe@X)$5ZXV);~Wk|X@3Q8+t
z&^NwQQ-NfkaZGgv$ECluYJAa}i!mgHrhDOQN>z=b=t4VJQa$&l-I}g(2*!k}V@3fC
znZ>L))cRme7`6RZw80HO$@_fem6qie#W$>F4V>bu5!;Fas`O~O^lUTB2i$J2M@688
zu(4)^T!A-@cKPq_%pJ81e;}yQvmdaGoU<EvLb~cbO-)?rfsw9oy28C@dWpp!LZL?f
zIhLE!_mcq!20q{0>!ka?jVDmG`rVwoU#})&1gomeZf{RzYvq+mj}pFKpJ$IY$>c|G
zWedk|=ss`d^Iy4uG`AEFTGD4#oxiF&J=Z6#b}kYRzzyI)_L>6psxK=RxOfF|yAf&R
z{Cu8{9|tzZV;3`)bY<_m!HjBZw58rjkUia5-QMmk-{*c0?|mL#!NZbj)5C`rtzpCL
zvoeP^EMGv@1cb|BUcf|l^N$S8Bo+inSNH=aOd<TNuyt09pI{wF%N@YwpQU1+gf6hQ
z&i-4Kb43e(<@G)vma#qqhQD7+6nk!4;9sCVZy~LqQK^#PE`?dXj22CVlJJp;%Ykr6
za+j9i_|D=#HcUhwf3q>o(ZTxvwL;(P5Mbe%J)wzPxzYLS38JA^Ah{w9+?U;W3pw<B
zn>`Tf$FDCc!1Md<=p`&k(<RMoz_D4VQBiVns~u=Mu~J%br?;evuJIoX9j|Mf4*l-D
zdYZi_LRtWs1gdR0-F<_RI#QvMHT66Ty++}n^{e`nZlTLXj6H+fFuO>X!sC7=hJ4q{
z8L0w2;dUPFs?`rpcSd{~-_1W8A}K=piEtx6k#XQePZ4z~W_nnhUpN+@``|kJ*4X@G
z5G#-4pltdjgZa1JKRv9rB*}6xzPFMtY+15J)d}x|Yi0wm6|MtihVx{O1DI`U4|N6Y
z&+P=UuHjz8=A)CTs=VJmAPG8~fhoVjIE}BO1y%N=OPJ+yZcCVRuV?Uc2q-ge?G2pW
z1fF_`0wUun0Gt`V@0YKyuLk+<nZD9K505KnXH~oa8A9r(XLDw6&vI78yQ-}FM}wP_
zH2su1X2{791q29j32^YwpRY-2s8p&>1)~v%fn*{)M5GuB7YSzIaE}7Prt%*ZJylO7
z6Sd=vq8$Xua}bJesd8INsVg_|MyzG7{6h>~v@CX<C~qqNOCuL>Rz=e^Sc>Sg&yj#g
zg1XBXKjvIDg#IG4u<vwazi**SiKAUqlvimy>I$6~k8bju#kNg#65Tc`_F`e&ed>N?
z*RTsoQ7C*p>%t)ep0IG7#uPhIPX6?YbQ|Pw)o~=qpFt(OEj_N%CXJ+j)=+N6KY6zr
zg|BDUXSdg6746vmB&wa;IG$5{m~Gl`Ctqn)Z3~`L)^lyhS#fWwM6g{!efIv|Fh+0}
z*-1&`V%jm6(rB+WL|0?#Vehs<A#2}1ilqDTpnAKz>K<_G+wl0#E`LZu3dn6u{Gt$E
zjk6+{CC6K0XD4k<W@lw`V;d@yScFC0QH$Ga8TqPpEVj?COp0q6U`b)pWWdBqb7C->
z*qC!r3Q8E*J7fwI9ug>;Z~!3>oA~#O!Qg%t4#U8=*$ILE32qcu;m#inQV^8&-JwV;
zASQ}MUD7ljWD|6QuAod`qea3I`Ma=9xZPa`#Jy7M^#O)K*fDUm4`^C!r^~+&ews~n
zu2p$U^}9o*qDD>XPv0-d*#|iU$7K9?=MjrkRAXTg9Mg?rc9AQ(#7<q3*A597w*=HH
zBFc49rOqG{j2%g<RIM-DKre~K%kvI@ou-AOS>`nmLsj-URq7x5g8$wSLhUcak6A<h
zUfE?<Nps8!qhj0Px)F&M=Jv=rTV^p{vG$xf<!HSu#w*754J_ZGlfRg{o5l|<%n*@`
z7R-tGMLju;D$#p*MK!bd_ocar7s$rS%gwd)<<w{wdk*<;n-eSa`1FTfN%T`9<xYL|
zP7&W35dt$zvd+;e!ZoNunB^<VvQ9+~#^57;k>_er_73d<^wO=K-+b@XAwS(_on|g~
zDo*`}<zXtAVcJ#XZdOZGQ<Ftvlg5w76?RQ}wdpTiuFv&dIL*tstE@uWQSy(`Ui%(3
z&E{@3Qy-hP!1v@WD9vPj?;V;r16OPdG`Xt@KJN%cPY5`v=5GGi4Lozs&j+#p<o{kD
zWxPeTOxd+t3VdC!HBJ*kKb4WRVwRJaNNa**qEmB}{8<V@8|9JU(XcQWC#aN1+>og5
z0+QI2q5*GpM`5-b{#RpMZ)=0&xBkP+zCgn!Ac)PgKk06yYjI~kkE=<0KbNnjem^IF
z@>taOvyzwjd^CSTTGIEcol&iMoGu1-&&zT=lTK&(sfYT7uW>b$uU3??GZ;?ZB;X(H
zJ?<L#-2nU6$P1o*+@BnO5=#(#E}C4=%}iHn^x@$CnjQIli1FjVK=VOS1!V7RHtkpP
z^LHv&skA?QmnD)<JmaXk9mgX-RO8q<9A%mtf#CZq*B9xJ;<b4%$9ay7v`05Ba-&~Y
z=ON&wUM~`=Np~CH&b(#J8_uPak?z!knSYX;)$u5Xnb5w*lJcA%tA~lMG^F~B0CFCc
z{|wxz;Pp2ja;LsrBxzQ31f_P;>ay|=A`Gi3zjM31l+N<!%ujhP1j~r_sf1enelsN0
zR$Hk&X8}lx8x8o*^LPS1oJK4X_M7{zn}3=L*Axj~De~K=sz%uN)pq=2^YBIBaNF`0
zes1*~pWptsT*J>iV=!6Bc7-ostHur0ta&N0Xx1Df<QGDsEsqoBHBoP}u~)=;63y;>
zy2BrL$c@W;hbM>siU1ks6Xq=5Jy1`)v$vRV?Qk;c&f)yC&3Wfd9{aH!Ak2HZeHuQC
z^!rKTKLP3|xE=lt&Lg<R>7R*xXi2D`#QFM;LjDqhKUL^T>eSFffbg$J`K>JsImDpC
zmFu<df?`PSpac20oJ{peFOwX2`f!#9S)qjO1MumRu~XP~hH!?{*FjI9-}5_KLv;*%
z#!#!uE{(NAQNM|9afL;_x-;Zi$QQU7-8ngR2&BeIt;!ymT6E4QU52bHaGNK>LJk}8
z5)^`$G291;6?)r?o$uxX{uAg3O83;yqPSaJJ&s>I>(3zBQC4TA7<3g@;zWCAGlFVo
z`yXzM0C!AQUE%X~=fmN+^%w`G$HgSkdxFi%eDCo9022SrByqZ7)p;SJFxdBE8Y-uk
z0`m=KCgCIM>wrUkx3Q^F_wxzvNxbWj#oZ1oT;74RxzCqfMNhsWfDiwaoz~Ev1GA4a
zSuDELF*(?QkP?rx4imus(3!5FUK&83m{4TdM(;2#N)?jUnq8WyHoPg%aZd~wf<Eq_
zZ?7kSI=f$dB)aNID1AIgMoI+W8}Rp$v@|igE`&41m5@Bmr(0_cN8Fh1lha5L2@y$W
ziEx<E#HL5-%J3S~7bKiJ%kc0I3XYeQl;lbi<w?s+#Vtr+;`q??i?l}Mm2M_2&W9#T
z^Fwzfhw?;%HvWYoPfSv2&jxesl{BW82Sd=1@I?-c^O2>Nm{bOM5y2Z_59XGn=uHM;
z+KnfB&@etp)y=^c^~MO~(d$Y_Dd$UzAl*uk@Uc5pgn<(a1rwswLw%UpM?_aZDe;%$
zF3iq)(L4~v)eH3JVX!*+_A!F?@!U$l(31@Vi||Tm90K+`IumfjYab%yOW*=YOxe%{
zNOqZJTaT3jvwV72OA5mGDgGt54x8i3z$ha-Q7Xg5{%s<P#}sC3&1aMfxfR}TWFXVS
z>`13{XZsBW2CI_?6o#XS1G_($J}elHl^OttgY!$L4)qmZLwsRzFkPw;F49L36nL(#
zNe={HT4|4YPmv5I39%N|kjyT7kk9?+{Xp=U6`Tv-HLy6KSo)$fOmesrVrMsykrNY9
zln2C*2L~Lm*vbe?i5{ZR2ckN*m6#@%F&Tl~1sky6RQo~0f*@9o6wwXK=0cy{Lbasr
zvPAYNlFjrBynxN~-|*6H4I@GWgAz&P36%1YmTo8higgs=-9hw0x8G0o(rEvE_)b_%
zUpo1M!IZg&L^SRx<k83uV3tP$+&~q^g(OH9!>SoHbN1)Av)A7gB2oR4B&PJlwboiW
zNQb?WE=Qzaf0>Ml=mp_9jam(}$ofc;9Lz_QSRqD6iJ9@ihwbZRfdj>0!CC)R$Rwf6
z4$bjz79o@CiRgqBV1*SKz3u}=d<1D1FT@XJiOupmoCi4sIhj<Fu(Dum3`z=KxteId
zt={HMGrCP?Az6{#A)<H~aq^x}omAdLWUu7ZTmXxiJp>gQIC$zQ?AMQIqqGY2*f%B{
zjRmhuS!}`rCGjIrNq`|>5UTPOa@cr5OKYT)1W1sCcAGdcJr02BBnfSgfw9<FQ49%|
zS4IkyIHMTD#fEMlGgn5YvbqZ9yB$DzkK4gv*%(a<2Xd+qCU;{b4(nl)^1u-e>0E?J
zn%u3F1O|X|HdV%ZIikR-4<<@aLJg)%+dV-rN(3r+%%U*Lbq@FBBK-zI7m$*OyX)N-
zO`qpLr+nyAs1#v+jfcS(uy@h~v7aA>4?a%d0N~#X0Tn6G#y-Whi(`dU=r`pOVkd)*
z2+Rr28p>l5MGAk?VCBPPLKU~lg8;VqF<kS+`(6G7<EgFKG$)RUx#-6_>u0@=m%Lhi
z+Y@);GqB8acO3Xa9?KrIoNNm|;%B-mY_@O)ZQ)H`8M^)$$;+`!u6{WoMsP#fxM*%(
z?%E=nbH7+6ZWmfX%6e0*3(6ZO4^1MdJux%{#SDj`BXdiv3il%1VZqXFyE@c{+2iRj
zA8E0i=W8H#ah03mTGdwuDe~H!86-Nkh!!G%JjRy=ag?%ZW}og#BdT+G7_nI@76;+;
zE}rCvIQkETBd|R%6a;|}<Ddg`<@BuFa_4M=Ek8ZW>F?C+q!09#f;PQPK26x-YG*E9
z;d1mdMk{nq-M&t{=_c1qo1yuv->K!j!-;RS%R4mD><k-rw_N3cQ73c}M9bw7Y!L9d
z`iWNk7CCS7qnNb6yiVG2{hiNaHJyB9jaDT3SzMmk-Ld-q$bU^YjepV8kv>j+vTn@O
zl^j*HS2>y5d^#^KoPaUAIYmDf8~P3Tzs27Yx}XCW3Lqern*X}pla+(*|ImInwa?XX
zMjF0&y&_v^OrXWwk@~?#n2^G3jh*3cO_8;|Sr&v)W@w#(DP!-|j=`ssa{g4B7tal`
z@ex{Ix@sUuENm?;sp|WxZY{L=$+IL<*udHTA?&h79-XD!#0dM%0DoEKNTcQL-KEvB
zb`}{`k4g`Env=(mVP5c^#bP`szh6%v<~rw&dm9NMvY!%d;z3*EwZ})o`&af<bRH04
zKBh3pNf>JdK=aa&;YP1=CER|EaEPh6`OqLq2u}B~5jQg7RvL|<4ANN5W$<Npuo+-3
zX{|qCoRBLiW|A2|`C?$3{b4H@z(~Hx;At-3Ck-569FMFuj>-!`HC|94Tp9v4_(H?_
z!x?RGM+6`0=33j@D&92&P&r-sJFUtYV_aw-9WS^-K;8&8`w$0px)ZPMg}7r&$U~Lq
zo~tW3?sF<`=X%ijF$Iy{;+)TT0K|TMqe#dU`b%p8wf3YMt$3$K7dxZYSZDoGaOBQn
zM`e@Zq2|cAdR^Qd9<NP)Ub&A^!K8CT4PDg0)LYS}6ho+F@>90P-Ff-r6wn2-P*|xV
zK`0RtQfx=q+FwKGmg##e;h)q4G1!kC4J3!C&Mh>NIK+TZ&K5(Es87EGP^TV2Qvxw8
zoCr{rJdeUH8@niS`nYX)HbUcM53)WY0DIG}!m^ElLi>CaA=y)ip=Loekz<Q&0hoDf
zv^;ktfRe7>4GP%K(jQrFNP+8X$~$LLM#`Xp&Kr@*NR2T$<Jq>KC@dZkOWov9k)q^Z
z2g@I0L{p1Frbom!($oT+CCh)`Or2njr~9}G#JUfMrWHWEiYSDO7U0Ij!<ELT;Yq)1
z7SO|RO~X?ZbR^@-!f!@}Mq_N9Wp0!vq6hVJjzU*)v5?8ONfde^!pwW(Wt6tM8+dnZ
zP<E=ZCF@4>kNKaq`@@MWM4czAE#p&w*V;rgfPoMnoJB?V0Q!GQl)SQg=N%|J0Yhx7
z78Hgp3R72!WxQCt)vB%y^r6$JN>KseOg+-l>QTh>By!a^jCXjgFm5^Y8NAj)UuYyr
zw5&1F;Ak|W5^K29aVfsCNf0!2UA2}ODYR;ENjZJkZu?fvYVN`dO*NO>5WKvcoR$yr
zaZNS&{G!CXTf-yU(_;VhQaY||>Z0C}!^r9hMfItWcXTN~NJ2kD4&Dte!<r*K$OC|A
zwmwe0DT%^abz4~5$Xsb5wk3vMf;C3M;!vYy`QdyZh+pA?kjWhPOQeaK*v`Elb+0b-
zwIvkw-m~~kWIl?MIWm{`Fh^2GWfOcv1ZU-I0bpqUJ!SsiDuK?$9Eiov@Q`taA*%?1
zG%&xhZP+2Xy;BP8&eT$3*pu5lSS(Btsm!oqv<sPN)F%<un%{nb#tC{vq@&0%JECY+
z0KpjH<SUO7LEC^a5sRRM3V8v>iPkun428w^Qe+v?kb^c9@l!Cr%a^t_iZey!Gx%nY
z68Qz#f#C23{L2{tym=9?R4g>YrraOI-KD)H76pU&uei+j0?_}O@hID!V<Ils{gC9M
zlG!AKh(fkwOvZ(XWR?1Z)zpjtjB9#8vxX0#;@F6HT}s}wHq^EflnE|k8J>nvtC8_=
z&Pwyjic4|6X_V+Z0)=;kAL`cT#P;|{!)az0)Iv6_XmoF>q|-AqaooETB%?2*ZJp10
z<z>_);I6jP*c$8_5Xz3db?2XRqqp$Vt+Pu&t3=K;oWR;j$aGF`ICN%u+1dKx6!E3J
z4YKIf%+e8mB@K{WX33?;E01O^1Mg8<S#B>l%0j1XV!vxkipt1_EGTx=9MUPq3DyWf
zgycX*5L2kc0Tg~#B%@1~T<gmrQd*YdY(g9ZDr?xzo|X-EBF05SL-M-W8(_jO@v9Ko
zFyH==ozz0_tF6-%%<#-BK$SL`2uR|~#QvDcTj`1+ifH!o@}42c7Zb@PN^tb&5U>c(
zbM_j#y;8y8#a+6AAdBG!D&k7|jgj?-qWoY6$fUwl8md6?x*DV!2aD<9$K9`txxa(I
zux`rHgl<4<K<jeh-^kQ^L!r^_T7L@(iAUWa{=1IAt1OosP?aRCD}sVq`lx%mhRy)~
zGS?^rSLyaqI#3D|`J(6+w5v!0&f#K$KYP&vu!dX8h>O98c&s)<2sY!YE`A{MM;1d*
zR|Ei!unx2dEk};n)hzA4oIn;_D!4Qq&CU6Js?`e`3>xPoH88rAGO*r=Kovp35{sC1
z)jEs;?WQZ7l7M{nrq+RvG2s?x(l8Z)vjyQ$a0fUUn)s}5D>RicRpRxTpn{{OJExrO
zO9HCasYrngUzzUk2a}Kagf_*Q_MeDw;wuaC;M#c9c6r##w|@iHm(fCKWRW5u3;eLS
zt_jNFkTBgOroZyOYhMME)tqiYQ&1H<Ru83u1(xMp$<QenlFUytcy$hl#Rb!WIuy96
zbr68J*(Q8I6@KMNHn%{|rMuMO$5%=*R)!h;qWY`@$&Ic4TNj++Q~-w?H0IHQEd_-n
z$k4@xJC1)Zxr#~k2nNJV%(r0?58Y?S2I5_|O|&8d?ba!Qxk8dk<`l6~A;*LETKiMX
zx2)SKD(S5fMmyv33b_zyK)UN->DOTnkpTc9lI%(DbEJMl+H=q)xGOR?8ss%V_S2Nw
zln_mo6s~&eW7s$NI5Fqa32D#0pjnwq-yR$xtvM<iqL)UO;?wvupa@$GC(AWf$cSJi
z!(^rTv!Nl1d88CKQ+52h6$8VA30NT3HRu?lyTOo64hWJ7SuML{67xxBGB}_wkNO-B
zui<>yyGux(=GjI{>;-QD;&G=lqLfz}3uZWuoGQEglaZgUylF=KR0_lqOww7?I;=NO
z{xQ7xeL2BQg<S_Wh<H0h$uyY$V&pxIfjm#q%9d8D_!M;@DZ`Dn8v(IBhG?sr#6WUG
zch#LAcpgaqr9pKh3danTP7hc|yL}2UF<3F;GWdd<7@fdZr=iSmq##y_iWHW=pxAO$
zIk%!_ICW)>iI7~_E!832S+BUZ(xR=|XN6yEPx>wX8Ou~$)veh4R9$wttbN9v6cBnH
zzgokNqkZ`V!EUmdpXqkS9aAGG&iZda|9r`trD1Dz-Oeswzp9~4)7IwF&End@iTC`k
z_6W<yqn@#KS#tnlN97K}^ZQ!3UGagyG=l4yNsf{scPDSg5Fu@CR%ORZY3T~N?`{9h
zhf6_6@ugdoR=L~2+XjippY4kHRs>r^1tks%3Oc4J2pz|Je0F>HB?L(Qrei)#L^}&s
z_x7kZjMIOSpy<sAv($|Z@m}9cRe#-gnPTQq1ql|RW@S=@WkFp;9{7Yl23g03+O4a`
z5pD1b{Fh~t-{L*J^t>PMP<uhQMp|T?fdh?ey99U-OA79R)`X1>F{5<EgmAf?&QAmD
z3cHOIjU_rZ9~K2>rXiI+DNDn_*+9u7*hI&1!^@SFaX&~m#Y(z8U#$;T^mo+h`EPb=
zl#KP0X}EbPnx9|=0Ws8Z@_M*uL-XW3A3BqKi|6nkMWBMjPEkvrLRvoubbgHZV=v{E
zF+KzO*=tZQ;uEY(Ch;_VtlpPX0R};d>|#|kFer|yPRXL*<HMureV1NwW_`=TdEzhK
zpC8CF{_BJgk@|)6`Rb7QL03d6<qxYX42!muk;MusK4?2DXm1j#nDx1d#sdtBI7sqO
zId6d_yP|e_KH*-M<tT`7r?z~{Z#ujlkI&Pao5u1k#)tLh@{Gcxs8G^BIQX;FR!N&}
zgCCCXifxbf(JKa<!wVQahg^<RpnmFf8_iwMJ<If2FO90U<<QbK;*ghK)_>anY{^Ss
z+X#%u4T=w<TBD*rpJ4fpPL7a)gt)HjCFCw7@?dHjP*xLr_S_cw{q~~n%FN+jsY=IQ
zcXfj4$~`Siere8CE?WA?k~+-J{44Y?=oB-%UE?rMI7kXG`upqS(GsoQWqGaS^CVxn
zCq)d1=}85$7{P0&XJ!M@1okFRKC+US<xKv@b}6eo3C0vIfw0wR7n4GjdI+xje;B)m
zU{Q2vL7>OBZQHhO+qP}nwr$(CZQ~wW{r<3f^1CV(3^R&$)^1z0%obzdpjI=lF5#d^
z`2-iWltGXyC4Xl*kq>`2c`PUPX?kB~^liFa2IUj|rgRHNgN35N!tdu3z_}_V_qtS|
z$Gt2y?sXY#1iKQ-Fr2J)iH^#-Xvkw!^&tN_@29!-Z}wGmgVPu|*bCd}c^H-`I}ad`
z;<J7<tBmSQgwRL7jlHRvd$VxhGj&w_Zw+z<+O~ny;s(7{78G`3%aNK~mJZXyx*}Dk
z*YuLSDph<rcmRN2oTAiMi{g<=;UPn=z4=^EU4jrk(2Vtw&cphOBlSCiY(mZtDyzA}
z#bK!iGAR~I!eyjpjwVwul1%(H;VnRPRpOl@@FvG?O`e;m^LTkI@^{o>yhm}GLgqKA
zrJ<-yZM2^-OX?KV2H)tnx@1wJ7iaf?f@Rm*r8-toni2xUh_v26{Hde*pajKg5nTuw
zTY7&sHzF40Oq@6GuVTuDq_EJk!cCFJ%f+}43;hOs;fYSgZEDgWbiu#6RarJ{Yb)Hd
zq@$-pm3oc)FO#=hNn%~M&+}Q$QqB!V@9V$4y*$2VuzF?8<4mkR*2cs28TH!Ss~Kcw
z<U-SGRaLVhWn)cj$u0jl4ubRP;i^>nRB$n8`J^>%@aNhBT29{c8pSo&GjQWYKg?ey
zltG*t4x<=J6<PqbpPXRd>S$Fz_8U(XurC{=4KUvgd^4!FOmC+)D|PdPtZ;EJ1XVyA
zvM@f(D`e&ThHVUZD@ilBI(-P58`mlDGjQvlm0p)C8ClY`sqi_eoI1qitCRGC12#rJ
znJ|2^v+zh(=$XX5DS^zvG`vKG*XkJp0o{|esU1)4CJe6OB3aeR9MP*7CJrt&fW%RF
z?*1?1uS2^nXVN%{EujVGqXkzZ{1`K7CNq)d5k?%{;?)JL$_}Ft`Z{}QvjAOesjYQm
zOFU6Av*TLOy|0@0r)49R9Uvk1pe<1kU*uTM1o-}yA2@|}m`{2GKhWIk!_Jri?ZuZ{
zgSLdFU*iNe_%+iSS|_V+&WoKmWmRxRudt-aFT-xlpGMA0DQkJS*tOxa5tc67W>Z)6
z$@EeGP@n!N7d#&FX?XB6{(!fS5ly-|`LA1xccAY++7mdV6K@UIw=V;^kBsl0ZfS;I
z-1<i>NKUF;XUwI|;s<uIizpI<9;Tc3)FY-$nmDbv{H12i9SW7{TJzv`d+@tGUs|Ik
z(;MIFgAX!E^Rg0p%}yXy$wzbupLbi0eb$0mZG`vz@jrfb6`DC;={UWz7yE=qt)6IB
zhkn}6J|)xW?IHWnj{eCVO9)?c)|uip<VP<m>HYJ4NCoG)F4@wDm!!x1z*8Ymf9g-2
zXp`oircudpdgSN*I<s_*bdAgK+}>3s+eX*W)W>ulHR<%d3Raw~v`&pK9_8Y;leL?z
zaeukoo}Plga@WU4L`Z@%9l)qA-r%XuS@n52GpmWaq7|HwejqZq?D|7Vnh&n=)JNz{
zFT%K0$tB(N6_kUhgy~J)i9rRuO})_gCvageTQ-2C7{GlslD=GABcMT{6k;xRmS$yn
zS2wPRF+YrKNu8Q13)Of=4_5({Nx8beEV{855_$#6oJYzlDg8M!`~9-;;AblF>XhX+
zfL);dSAvk+)ZS8lZqA<ZBoiKuTPZVqt~PT}KLyF!aPf=7DG+(OXIAmvOThK5Ow@#y
z?@0|$%`dM;wVHZNUSKV+=gP&-`XOT64>OFxW8xPN?^h17t;6$Le7_B40EY3U?~J`R
zj4ej4pV#pn9b_-V<YbQulGilSS4kspZu-aa_VfBaGRAnwqruD?;k4F@y?I|!sHUEr
z2Go*D=Qd8R6oU|jwktRJN!Qp5;(in9(JH#07&+$kQV#DY{h6*$!Z#Y+MU#Pa>=~Ga
zFJ|2Ntf|hT=zG~#nm;k&X?=(wluc)zq*IrX4?a=rILRsY=c>h87Stlc>cPWN?M6$p
zUOF>ft*Yot@8^HR?X-=P>~BqZKbrGxSD2gr6M{57BckXcm=OW{bZuSQSGP#Ikt`o;
z1E$qqd0er$Nz1v-+WNf_3d%F5*QI?%H2HUtfmP*xUWy5OlaK#7##ZA{p0##y=8-q=
zbbF0VXESMWci=XILVE$<Dw+)gY7k|YqoU3^9{7~@eX8wjLX-4iJ=Cta0hV`qg2(Ks
zq+bP{^ir?zwRAt5TpM7r)-la9VK^??7oDp$W{F8{e3R{MY1;5lwYR5h#Xi>L>s&E*
zFbxX+hug`a_TkX`ac4@+I^{06_0|Ne`8C!Au<+}w2~JjV^U{9m(tGDf8$xPD(_R$B
z+5^TY8+wHe7Nch~+Zcm&a)-JaP3Ji%=(3yImJ+oaR_9v(qKyaD7g6&{R1M6j^{Lg3
zRkc-blPTu)wF@=<zq`8Vk?66ui#s0QTjd~u=2x<bkOYUfXG;%#68x_Zx2K0!*B;x3
zyQha$IX$-zd;gYiKw(oSucvYSJYi_=rK!D&^vKiW8VgIP4cbWNwS2_u$4vC!u{uow
z^NS3a&sRjFxR2OPT+(Yi6leA_7IhK&-c=_$E<Ipp;?9M?MxSpnUV1fvTT>3y3ddmO
z*92r+aq1d0+ipO8T{a?Br0$^S8}ikh#J$*MJHuRS>qHrIOH;DaJ9v{l3aLDjiC!!+
z?>?CBV0Fb9FSMRwV#}F+8R_fTk=N_z_Vw|YaTEB$ow4!Im)j@vQq)rR9;xSqYctZh
znN_Dah^7rh$VuL#p>r~sN=qK?hgmNT(nbJOQ-_^I>Crw@liUl>bgA_I-BfLNRl7*j
zpHnhF{uw0)5h>@>VRkB4n2sU$f^c7wmfT(mhSI}b_*e>@M}um>xZm(|s=R^3fit{)
zWdCZu42XJB7$uepD%P`HzsRY+`1yGKx->d=>+PFnFEPSt(mvN%WWNH_>_i#$qJ(Z>
zZZcrv@BQatV$?~*!dEs<xN{OD{)@ZmtLMw{w^8Z*Bd?vYE8vOwQFAU~C&vZumr3?x
z{i{i-IH~&8w5ra0O?2X$cX<q!voA}+U+9$*7iyI0=2n9-WXv~_>?NJGFeV$U%uGu#
ze0?4VHk+?W#@203`@E^WT-LiXHt|(+cL{EN$D^RAj-7M2$!NLTrr#Y*Bj-Pqdg0$M
zSAaQD7GE1sx1m4_^09|X^ZCtSB?v&nNJ7hjk%R%c$bF4ztKCPYg{^q>rvwUzVpeQv
zpFnMBF8i~++sfYVh<)ELmv>Y($&8UW)g!9ZP)XUaD^I>GS+2lz#hG*_k!M1UD)~sb
zG+UbA^967R_&1tP)A=HUvgGbT6EJGz-q=s7iMykbtA!kU$g&uQQcD}xf(+$Z$5-PY
z(Aun6s2n*E8&&9$1cQP7#+uict^Y=n`t4tS%n^4z<bTtS`8>|nDy3uCb~UAjZf7=3
zA^A);z5RT|)~k}8Yr-PL)5}o(<><=a-c_x-uIKqt?{k}KR(a@%beBOxEZk?J4Gbc>
z(wdQdWE(Jz2Sg3UuT-E!uK~by!fN7{+7&Q@e_Oc748~hvzPJ-zc|;2%3qvg3!1j`|
z$kb3|gViZ$kDGsUQz6xGz5=WQx{b%ZX$**3pY)&bM9rn!;j0)42Sv^4ZxAg^zK_G`
z%<Y<=S|=i<gl%<v42p3m*1u=E6DX9L{jtV;^_e~;XI2z#=_f7H>?jhF{cP1+b<$;(
zP8oEf9S(UUq35B1EXC$CsyXFJhYQ@n4@EKvC4KxvW(V>j*6bnqY!@veIzF|rUM<^4
zQmty=70O(%tV(0UG%~7{y!w1KTbwib*gQdnW`tQ}RXb_Lb~S74ERYp4d7+vf^vNUa
zTSsWB;PgG36dEa-uN(MI!=DW$k9jJiFt5i*`v6#z+eadUTnYehpai@0Do{D}JpS6^
zKSJF=zBW*d<adC1QBV?uM1;qv3IUg0kbZS@G+VlxssEoQ2y`9#L&)dH5AU7)fpJJ@
zz*4{oHv683>$v@lLfeCqqB>aN)bsbe@XHJ;1HKTnL}U1rxDj8IQozPUCIF{W^>8aJ
zP%2P;gJh5;U`rJPU1(IS7gG~nR`!&gZNViCtU;Y}4TLzC8?g{BRR$I`JhY<<f1AI6
zVrMy=Z*goUqu|bhf#3#0r~=fFkr>JqsQ4C+XcRm~Jk~|Iu*hj7?kTGmrP!Fu7W40m
z8OTslM>J?Tj2z~pPLhX3Oa>Wu7_rti2&x@?kySKXo^cewd^dwpjz`3UL}>1GOP0eQ
zklt^$&*K;u4=jCXChg!DE9>~k!n~(yzInNPb8%}R!EP!iDD1KDhxlm8!0zr-81OEX
zj;^uSVFCQN+e6u2$Eg3eH1>kz{Vj3A&+!2aqVhQT04d&OC=M1g1`Z!$dFjD><6<^8
z1P=-D^#x>jhH)n^kGY`7pWG8119$KWO609Wj!zqvmV|qp2f`2%u)F=Ko3W+O`tHYI
zKRlVQc=DGEm=88wc}g2NdEi>yVccVvLGPCi2Phm6Tw>fKzV5K1c96%Y=MU~{mj7N!
zBmx6#Ne|n~g;?lvPV5B#YsUk_VCtXl^ETi<Iv8|N^z<$jK?Q^B0O5skrWoR9_d-y=
z#P%Jl;bC;NFx?D@F}ezED78WOz#eT76wM>1?0zJ*m=B*OK?S&VUi+jo@eIEYxDnt9
zub($JChV5Q(68Oy@H!Mm%_~0rNwwso6_Gxz{q&LO)VbMInVkTt^8F2wA|etq0vJKj
z=}Xa|sSnt-si;qh)~iIy3vY1^jFs{fo5*H?X^Jg}eYTipr3EWc?M+4<{)G{3XSYx7
zmq%$neq(FOebAaZ>*}`od5OLm=1skfb1t4RC`dVEHU92Tl?`SHzPQKyGio1)Lk%>A
z&pokE$M@kwcs#zo;Z@KlrJ)%b1&ttIxWfF9XStF1_u@f3na}+-8b1e`>@?j@M*#Jw
zqwfPHmP>pGgyK3x1P@W11o04wW`<fJFmSf)kX=clSO}t~ND4_LgppGQ227R!kFhyR
zW`d89CPFjj@<CS~X$R$-@(yE|!-kQ5P~jtAC&Yu|9yvN8*CStJ#FSyuj`2KDYJ4L-
znfl^a7^sfuKJR!V5lm{qT_7k<akmdod8*S+0leOBUC)=!9YNd9e_C$#`h&Qu)lw=_
zan5V`8FCc#pr0%hYY8c50qjD71k#S!;{CN)f+}vCgOY9rNx_J+YZJf7yUZ1qnmw4C
z`%+9fTd*E@7Fr{q<{O_{Sx63M2jasJp?Cdw>XBVW+sc;*i_f`5k85%#7kRhVD^_{5
zSJ*U8bi&EmLn~FhNLp%#hSS447q`GsD`EP{OW3Q9BUGOpBux)cBL~u9+5RXCA@A&R
zc+{$&a>N$blvW!q>7=6)o+0OZx|l70Wvr5}J3<7Lo)VaR<P4LY5}0_B+pwe*Xuif!
z_~e{)Z%%y*v!3TCbu#|-*4l$-sb<21stOTSdGO+l#SZHyX|Y=IPJfEKE$``xD%7Wx
z;7@FM|00EYDaebcOR%8(JuyCGLx9H~Lhq9toFY>J%2g@Xf+<uY<r$mZ96gZ&Iy(zS
ztm>li<C4uH29wu-$)<Xipud}-9S0|wIb!4i|IBtV6>5=+4Bw=|9_5NdTXC8$j5hP4
zf7wcsm0Ho;lLSeLfrO(u(<f~a3LAR?N_;tu5M}ET%x|$vYNVx7@|_o=xR3!Kn#?fd
z%i!3Bya&279-GsvB2fyInI_=r+Sm%t52i|nF%&~rUnvMdPN6-9Dy8PULV-_e+#;CZ
z!JobGjBnTwk>n#QG5?4)V}S5isswOYa1Zp?iN3+EzzoFJONIep*wrDyUhJ5o9!f@9
zrc6nqiR+*UhL%}6$FP<Q^2>x@Rvglo-&C8gjaVMFTPsV}`Nc3t%<M7<9XIm&1~Wz6
z@&vrwd%!UY2eVZA=&KqH=|t<0*aIPUM@FH{S$08A?9ir>yJ!?r;qSP3PYh2+^oiAO
z1NT9TBZZSf<5!e7t}$5Kq7M~q$1hFn7peMe1f0~j6j-V38cCk{O5cL@qCNwlwJIWh
zxJ_I+)(^l=;G&#O7r4#l_~xxw&b`nJj>(+-Y{rTvkb;>3lV{M$O~hzg%l(QI4QCnJ
z2qpq`tXV;W?PlHZ0_J|Liso6N@3;@xE0uPy^4D<9-yEEq-?(HsjtP5){LC2l0k2f?
z@>wiNUhZHWhTNf{X};ci6Q2YbcwAqwO`qCY0#pf95F9QX)ex)vEVL}p%w|q|XZ+jv
z(_zQg_JQx6uM~t<4vRI&@s6k;6rH;xo_phlT`cGY2hOv77_#zA8w=+=SvC(Cbj73}
z%)ISs$5U*X%@2<yhy#JIZskDIYVZ|ve-<A=Xjqt@Z0vEyCKS1c0z>lhWWk$WoSMko
z!N>=PcHi!>_0;7R^oV&jTYn2%51hKKR`%HGKPy^kKSghZ=o3m_f(P~YO|918?^Tv?
z5?3}?0c-bcn&jLyWf1L-Ro__JZ=X_&)xyg>B&?$;W|gKvQGB;1BT-)jV>l9HAlbU|
zx!1`_$6~N@IJ*E$Pl!la)}JL!cLFD6iL=Mu7cgE4&+3rLZr=ZLh=pJtL0rGAnduB{
zl9Q9$viBQqC!|wat|^pcN<2F)^7A4kMmGl8U15eQ)yCMKgm_=q<NR~mZcEmLl<BPP
zLY-WQ8joq;f6&G61ip;e*Eo3(o2Vq|E`*vsc}PsoK(KS7Yl1Y4yyUk;(k){=q)J+`
zk>>1wZri#&<1#0%FvgIxoGyR8Q%QM>k}2YL)Gj||_XgGt8;(!sE-)3C2M2##`V-Ro
z(7zA4bGmBOZTbeOP+HIMxwC!hQ1S%`op@7#10O82Qgj+s^viiXJdRurk5?5IUsAyo
z7Pm5?6q{;<idsa24;BP7U(eS33>-hdxT;EOO{;5JG8WT*=x6Z57AAi9J;SadcpYmd
zj)Ibcj6HeY!xc|<WXVQuhvF1W<ZA;FPHKiuZVTcef=APYbvUCXj0pfyMKP={jq*rb
z>I$?<slUpc>C+XHwtSK+`~87@uDR6|5bY_)4U}6%>^SMco?6J#66*tflq8>KWxv8|
z)-Iy<#BTbSf<nc;Alg4lL#+ze?3U>rT2UAYkU<?y_x9+n8tuXY?OF&GTXe#c%H0r1
z^iYad=hJL6A-5&DmRvw*Rs~cy-C4*+_rOUO^w5OrWT(I12(BM6^LBWh#u$vTfVibo
z&cMe+M9fp_L97^Uy*|o`W+i{pqJ1Ni?FN|clh8iGlkJX^-mRqbu5TM*y%J-$ppj(Q
z5s!k5yA>gP5EV-CfK6sCxxG|xg`Nn%<xZ0wYFhYrh1YW3;sOMPQYH=IB_Z2lp?Lyp
zHnxI5!6wc!R&LdUem~BeH>5{VpqU`mg#{_s4OCzF098t}d8blOfdNL(MOl(ir@ei2
z8pjIgY{%5{hHP3-w30Phv`f|t)^}K<k&1iWDXIH)la4+=2;kEvFX)d(`q%kW_d#p%
zIB&ghr+5DRyfO^*_=_=2<n@k*UxmJ4s582@jASU7R-hP^-@ogQYMe+#R)h97-Weg%
zy<6Rzm#HM06qm@JvKn!jv>O?K{GgztPTYvQNb%gDUzjG?J8Qu$Dw@MyRs1R(+zyw2
zw>zX_PTX`He*TT149>IPSVhl*cYqTf1kR=2TV1E&+sAXddPg8{K|LSfWP18@s_r*i
z8mSrBbhOLV>==FZRp;Svwd~D!&akh3Z$*lx<(9cB5MGy&w2j>DiNmfpAl|bzi}Ggg
zTgd6I)w9X1zFRe+l+t;kQeY+=$#xd+RgtPn#Ff;^Z3`Z!(-ksj;;x{^O0BCQ*{H_W
z%PC`UCeNe^t?pyIX3-w6lrv34be2mz$<6SML}^$`J!oSZV<L@1dSpbRPpify%JsE-
zrFzPr>pK(Kg^t@2iS4r4r17UQXgHKb?_tMapD}~&9{sUj7%>LosHhiUrt~RqOFqhk
z^M^ay801uWs^x4Qq)K88frn2vL$)cw#2;Hy^{7C<$1gAmh~X&eJz-MR@E@?PjX)Uv
zJsgDYSr1Guy3Rw5c8!mAB@i<47YFuCE2F8J>t>2L>pHEAz9&*BK~K?+7=3%HCS0Ff
ztQbPnZKwyXtyfHX;?tv5xla0ZZ*l5dA;TTd*&7X&#`GjZqm@vzTNw3er<yqJbZ#2G
znc^^qTze&VRxwhuD*M(wXmwuF(e&C3RPMJcpYk(KKcb#ojY35CjRU<X_g`gMyqr7W
z1-XN8xFGh8gLQq=vt6i<yIBk{+TMQKyN&*e`FD(t0)MfgoGW(8x9(FJPA-j~arK29
z(MeL5-)@2PJKxRjIM8^HB>4AODoR9Iha>(+or+AJW1~zW8%2nYgq5Hv`ARw;+Mx%8
zJ5jS9#qFKhLx_^E$nZ}C%&b}ClMq;TF+!T^!ZPnLq|0{9)fuTG#0~K*7yrC=O6Z6`
zDRdxUz$*w`pP)qXk$}12s8aH2Ba6O$Dga7`H`aR5Za9z8<kCOPxLK1WojhIiPCDWO
zZdlb5s5n#Nk(4Q%&#~lo>3!?6Td>~gHH}S+ZN}}>&L~9#%NBc&o{zbvHZK~LyJKA6
z75I_5$No-}gEqKZH7f1MF14w&L%Y<5@}C;z7pVLH6#ww<)bD<ze{8Ch(C*n(Em;5c
ze0g_lt1{_3w#5f`AGv1MM|P`PpB&n)GI@4twaDPzz30=XwR{5bC<?|QD^5v~RzQxb
zOi9|7MNYDEy10ncZ$*imWG(*nLi$h$UQnIt`dau^3CiQA=QGl&c5xI9%e2^G;Z?U6
zN8_-=lUu7Si6o>qWk@A9Sov^R3FXt~(fz^w@x^*RwdyWV1<utXySdtf`IIU;yyb&{
zsk6|71TYJow1bCqvl|t^0Qgxe3+%+Lg_4T|K}9sPiH~GfKU)e|ZZfy4ZtQZ2R4y*a
ztX=^$wtnJ5u%$xumNGh4HXGVn?2s*!KG+k5;OM2+*+D+rWHVP2Fau$-)HnPj6>h*s
z+D>mHz~kkoZ96N#iEC@m<?wQJ{ChyKs4(Qg{LU=H@aVFm9Ms43Xk1FJg~)n^U?{*b
ziZ(Q-z9w5sb2O*K$ZX`FYYQW$-t^cMXd*@FVO8Lv#{G#Om&f!9c+%Kf`h2Pp8l7tc
z#_;wDQ2cdx>agkts8d}Hn}-{GQAtquNa9o7S<M=9j4mjL9a&fw<2Bt8MJ>!@`WG~%
zAirrhtFxlqhOg|-Z`Q?_es6?UoHx~*wPtl+F1wq`c~8DkDes(p)*b3pAdwB6tTG4?
zTY2jzwW1j2v0x}Jv)%U1NnIR*muniuC{&6V7D>#>o_3dvMj1&hgDNS0&wEL9+0jd`
zOM)v%k&<aU27iP$1&N?@yQ&7<&ezOQQ}ZssOhe7j<8Vn)n=>)^J<#7A4)Z;27SF0z
zN*viI0^s)uF>ne5AiA=JkF`JH!KB9VagO_-2k7rlZ{s<8e0;36sV<AZo@F7@dt8Cs
z)!I~F1j*LhN~X1LSH66ENUx9Pk1Fes5WgnEZsVcbzFv{)``;KLVGZQ>G3l6-55*1W
ze8Q4L_It}IE_dPbV7+eHndqF$)W)JeBa%M@b5I|iJCwgBlK&>Mc{7OL1_hEUs2{*z
z2l<!heYn!e<95ih{qJsy?gxvCwsFFXJ8MS~V6|wqVw3*wp}s%=?>YVM@0IyCYF?59
zPhPA)FLrFvfeRNWj*Pt=B?l~ax3?Dz86L*@+uc2Y?jV0&|L1xB37z{7^#2ZP#IWx#
z<AVeMFhK<Xp#J~)TFXf5%*@H)@xKH%&T7~?Z+9U6%KSp*%#<X_DwmK@tD$(_aP+ao
zdcTfzvaD~U5+Wselu5t=YAG>I+TS%3RHBb(TGz8LlQE+;XwbZ#ZjJ_V^Ea5$HJ?$$
zWE1t7S56Q)hv$-AGC`9ok80I@+4P@!>Au=gZHQ7GRaZN^Ws>$o={F|p$R^8h-H=3W
zXm1g0Y7>gO(F2X|1eQE4pf{obP9F=H$k;+eMv<zK8`YZBu;PsQNjk9|OQVrTohk{$
zWQ8Tg4ofgJ-iuagU@-G%mMTsd>o<5-lxew9mZls&Wsnk&4$chb(Gfx#8?7|W>F4MD
zxVWk<nk1PcpoJ)z9#W_q2Hj#FLv5Eyl|FhlbLP+If`Cb2a!RsUqIqYP($1;O5-o%L
z9l*bXGy2a9m5R)WNxLC|OS@%?Nc*MlG^6v#HlKL(xO`K_n*j+X97V(?)8Y#YX@yKJ
zK4g;$!gUK<Hd`{GzY#TSCOlO{iK3QKiSWQdz}owF`nW%wC->|AXP$!s(FkJ5W8|>p
zN69ph^5}VSk9hJ6r8?#bX2UQ61%^s6QHH#p64!lK$y$AGGO136%$qEK6yrd0s{3<3
zY*0vjb2~-S2jNg9cbjyd)BWeHN;WerMbI~RQ!+8kunYn87q@+d#DW|N@`1IG_04a|
zWy^}tFx4IK@<Rsnrgtt0PJon~C^-W}ffyuHJ!d@9WH?h0Jh8|!^+LfD${_%iGY8N^
z@e@XFTw@TOEidE)%}u1a2vZKR!wo83TDYw^!l7-|M3^HZd|Tq}OWN+~d*(dZNP@jW
z0n;m?&N;w*C6oigEMR}oOd5|SF=j_<0{zOwAnN6iw_0T;{Hh?txv&wcJLM~ZzLMI^
z+$ADlDSs8FbQ<LIq?Z~}6)}Wa(;3NXY~o8nRFXQj)HK%9mc#CL>Tqh18H?Iz{p2Tk
zGh!P;u1?TC^Fwk-0aEtzTN8JAVkC}_-N>0VMo`^Jy~kJcOTJS_9UN?-q*^7JHGyFo
z526YJGVsA4`wa3SiDZW)mgS!r^2piQ0AOt|i%dC$d<Pa%NY`v{;)h-pqECoJNJiWk
zwFZ^8p|aA9s5oum)iz4VbjYVd-iv!V>biZCs2M4m*_ILs2%##L4Z)8W%3IxgOe*D7
zF3cm|6YU~WWD+!XnkWW=jMl65zgqr1Kb~g|&vlMDNSrFCG?4Tlc@YvJGoLh=<Y$p%
z-VmrPU9L8YB6#znD{bNonFmQTfRxBvl9#k>ZBGgfu`_{!#x9i~w;<|V)8&93^SpxV
z?QaNP<_~aXrT0NVnINr~)i*lgpax(waKesP*=HSQtgfHb*KGb?wAy9CzHYMARImSW
zVE19Wd}7FhwQB8u4~c{**wNsnMI&pm%9h{}>D6mX)-CD4K6AppK2ugp@cY>6&GYNc
z*T31j)#qM+<gMBqbkLKbvb(+fTOFOhyV+8lgsm)lF}vs*cC%OTPU>vsYu<yQQp!i;
z{&%0L_dH<xVI_F1R%@?8Nm~3^PCD2!#8K*)J(d_@xw9yqvv40UL2tQIx=0zDw|IdX
z3uoyfR*YwY-;cjii@fb+sa@XoGSxPRrJ+{0HcYB^ddW!X`faFC?pSTMEZ_ZpxndE$
zg5?RW1zQ>9IA(5i;OZ_7f9L9UXk1NDkMTMX(2>D}UpuvE?%Zag#!+Epefi1d@nFP(
z!-RX`z;F-eP=P4BHrJ>wbgfWkcyn{3LUgUy4!B^}{KGR^Hq*f8<6>{~ZM&P1U}Xkm
z5HEcw-wSrws09Au9&aMSR5imjKPvRjIha|eq@tGaT^c|29#KZ`;8Iz^_p}D(&fV@B
zWl(99au4tnW@(~0cxJgeuw!R=i-+jVLUBSzMr};RkD;ArJ*aKhrOVyl3>^~gT|0&>
z(Y<O%oJg&T&xFTk@O@@uJG|BXe$8vAHmbhRL(A7*gs6{Lqb3<-TM<o!;rRE@yUvr*
z<1ER##A^qEdWRv%<fKtd>*qZ<myFU63sx5xBAK3E??;I8>IF)}sNL3a8*4MoUOUh>
za_qokV?9DQ1h|%jz?x_G-rrwZ+G1>y!cf~jN<q``67DqdCV0r=RERG}2kz&E4OD-W
z)U$<*eu&jwK?*0a%+}qwzFKy#<v$JM!ryS$V!K3~=BJmeFbVIQKO?0^b_pl%EMgsP
zl=LNVc9rk+r)_b&ife^G11^3@(#C~5gI?LNM-c}$#@9C|=0eo~?dg1`P;Srx9sIlD
zrDpwl^Is8lP#%UO{P1uiJJv^FeBpdI?LKr@+2KSt11nefm|W+k-*f+^M9TD)fq6eh
z#vF;1SR!Hh4)#@@4@CZxVbbA;;??H`mP$Pq@RMTL`F<ssYILDB!#okNdWx@O<lFx0
zheAJ~PaYh-Yvf3+O}8sUL0jb}3l&6k+;tZP_l4g>L_wHIm|V2{NZ$x;K=>9?ZJJ2^
zf25cnQ_fSBw{GNfm)4n7$Uk!jD*VDtb&JtwOXXQ_==$T1;^Ne!_V|e0uq@9};T9Qf
zF<oI+>rI!*0yr_P#5UR7AX!41V!o?ZP&jKr=33;*5w>Lv)4oGO3tXypO1+a6&ap0P
z;b!&aTynkmPg1%Fonqb+f%2fdb=Gw*f9#y!DVX^^dM_ZVjkWVh^kAC?du`Qyg<UqK
z*=MFKtn5#iuePs*(gy6fM3-r2;C@koTPYFBz@r*TQVNPqsSvFDwG9Dr5IBmZ3JCh!
zIkv+Uz8$ijrrtHS(-<Rtg(&Whn^%c8Cu~&NH(!!i3kU5KlFO$nu9~(QFjIK}ffBKa
z+v73o#r@viu!l@u-F*#}&$xZ|Pn-YjA$q!ww~m92^l-or_POF_F8KMSw{d@$G)0%b
zt$(q>(EK%E@bLfmcr?^M_AO8Bb6nr|u_X!j2b=*Pd+iNm8AP+TcI6h4l_K|p@MYNt
z#Ft?&7G01%SoQ;O3HnK6%CLtlx(H*+vWG1CC}CU$%@LMUO8}@cKNuLLwfiUMRbv<2
zhmS+|Hvi^M1@zAq+N`kkT~x-5CE@2^&~d$=no;$#N5PqOe6H#Li)UOGyv)Mf*8_en
zw8pn0L1`>WFR{_vU*rFM`g}EOcl6yxd8_bAThEEW6v`1IA7!!Me=Y{GpE^2SXa9e<
zXzBc)L(+r*01GJq0QCQVTQplES`Q93{r}Y-yy5;I|D-LyQa{i!g>SNqB51{oduqh(
zdn=D-wvyTM(<ojhv1LSrNHZzvl;&xB|Gz)DLD4xKFD`pI?0S?3b{*Js0tbWo67Hzt
zyOrney8g04>{={%3CRRKkv*F{gkf^CaNn2->(1%lC|$pso6e6^P<!2OLUC%7JP}5*
zIJ9Ud<{}Z3^L964*6WK{@BvHC^KL&It`k%4I}s#EiJ*5xv^G140o=B+3HrgPnp*55
z@JLNjx&+BHy%{>5(CHo6+px$-A0u#SheORi+obDyOy(`1sDi_7K1edi&;hgn@b&>n
zJj4XWFW=+I%jxFjmfAQqL<DCZj!2%%sz;y!c!<=1EuKjs4}$I9zP`1f3;`T^7J@9-
zPC0cL(QNW*(PF>{<8Sw%CVr7UB#ypJy@cX@&cb@2(b(6*4P@~(3^76ENfhyustO7W
z1>rk#Sj>A&4r&Y*^#4t<!)@KJ1j*c#R!O*oP3qS81FmamzQ51wXZcN>eom<)gM%)B
zBaffBpzyjAyYmEWg;wPju>TKCu}%$90vQl?JTy*J#%SF%s%G(+f5W58%>|ika7JrP
z_qMME!bPtJEpk1xuCC6&$DAKWaV6%Ki#j2Pca(!hfjKy0kx+=b2@TpEuu5E%js|<2
zT7pB(D3K%}aCC2`9cf{A=usC*C$Sk{pNBM&8<^aQ7}mmz@c?)R>T)*#DIISJ*bROa
zUCi$MVpf|t6?h1eHU5YA0$k_jc0<iV7QGGzwf=^)(daQ4RlhqLG@4y>P(tyQhW)iS
zZC&lCQxx^Jav0CtpfIi74tRGC|4#_s_1FXwZ{aZjd$rYYUH!GfEM}~%jo;$qSWo-X
zx~vYSWl%uz6|6X%ql`quDJD@25jbG>LE;)R#&;HnYGpwzV6i;H(X8+fUp$Z5ITg(S
zwm`i2hmn=F8J5Ir>zB`AOFShpj)K3=6vTG~!7IYRAtVqE;zy4xb%6u|ED3Om@3`>V
zcx%~3gt7G(;r`QCpb&WM<Ystw=yQMr<^^SEB@D-B0oXxU{9X@#FkU@66xqjxxU{t%
z7W3!OKt>Qo1mNMTfC7U%V#Rxci9*Y9^2Z%<1Ak)j0n*VIje_S+(Rd}(3-aS&4~NME
z<u|;z8UHm-Za#p@5y-`Eq7=dSAn-u5a#3UI9zT2Lc!7+nV_~J0cB1QI26_S+5s)c2
zonJ^nKu>3rhL-G!LSy#qkP49|@Eopd4{lH-R%M(R)ft!sB7KHt285(D3?_)KTV#Ed
zK#5Sr2m`0#RDyQ|-1yR)w-&sOsRi%6!Hyb%s`1+R-a|SfxV1Y(K4E>gntJ~A0F#JZ
z=#yPqf+*7b$spR3Oqrm9cwNf{Z7+3N<!}=X8-{3faH%&>8xp@sO2@XW(Gg=lPO)Pm
zixv|cV*)mk#vg1dI*63<CA>nhYWNQg0hw=w&xR#S9oic92^cfk<DYI|Rn{OCU~Xd1
zXg5(U&OiJT?>g7*6J$xkagtkJlgkgO&u>r-9q-=)_BHrOkD?Nxhur?2hNIJSQj&&i
z!Fp*v|G7!#xP|Q-rbt&CO*ieWf89_2K0ZXhcK0{`dd<)^IP_TTmWIWmS=gZ`ypD6v
z$SuB_Fk#7p^}<^%4~@b*mCvOF64_>oP;q3hhv3(+2YS7^LB$3h3Zw!sfBF~1*p_IC
z4*_akz*-g!yn1c&`h1=)PfnmOzl|z$SuZzAkQ3^T>$>?y2rq30G>zOLBUzKOV#oIv
zr^AX0ocjDf*df8rW-xfmUgj=t^mDB5T;AK)#iChJPGDcHSTBzo3m1RbHl_J7z%1UN
z)34}Z{&nAljNVsT(Bq>H#e^K;=k~rQv9|;E6e0-GJrD;nG8$qINCWgnhjh^p{&#_U
z*rYdf3e-cLj=(Q<)H_LXOynp|4+W}JLZqlgoM58pc~ZNk5C3a748!yF{r!=ReyakV
z-@02F8VcKRid*Y`Mr*~0H(Ww0!hm;7j0|{<^0>UOSIwP2`62goXFu<L&;P{jF{1)(
z%TqJwK7j5%ug4Es@<8{^IYMND>j5_?=`pnQ5mNqy_I!XoUwe|=^w?N7KmtB_d$D_Q
zgi!t>bnR$+EopnbytSrmquQ6C%e`4)3Yk&RZ3sjOW|*17DCF%2;X%ps`cZBArJ&f=
z9b!~zldwxCqa|CwwdaY!xi?q%7_fj*mS?eM0mR2P-m@8iU_L7VlBH`7tmO@4GcHYS
z1E}NNR6NvD6-XUGm{ng6J(3rOaUs7KqdiO9>RH1kzjCJB>bZqxk$sv(c$Kv#+@r?4
zxN0VJxE`R7?8k1p(N}g$e3RU+R|!sqRe_1|XKuVE^Tkcnukehw0#a|z<#@4$CnHJ%
zft=yN7qvM$JQD3361|M57EKa!UR_O@-*?_%gQT+5#7K6h0m-31YH~&fVug_t>rHI5
zzX6>wL%XdPh}<}YoU^P&!j2w-SQ$sK3j7*G$7UsozwI(u;j22`>F2=q`SJWUx%n4!
z3BZC<Uv^T<4p~<xAU%zp;dDTm{f6PW_Us@7kjH;F<T7rFV+If(^BeG;dUN0mZk4+>
zJh9c{J`rdUWVgr@YDNa$#P@r7S&yunzu-I9xB9$NR?1dxwXBvMx8<^ZOr9)Ew)y3_
zyj}eL0nCR@V~`J?HY^R5QC5Ja5!4pT+YHSLg%PQlPK!!o9$T#tYp}l5>QjSMkP=`5
zpt9g_!W9vKLYGt*ygC%9Y7=p7?hsW8y_|W<AS`BbR;$ZT4j(yv3LU}mY`{8{2HMvx
z>4Xsb4Pj8zb0ou~kvWJ22--bV10pzn5^(Qks5?5AOzRj}6#B9SG=+D+1gz%B*88Br
zui%pEul!)!V8192k0Q*v*>1rIhoXGjXm7E|LL15gkFup~ssCLv%WLs(82sHc)|7}M
zruA)dTlK;qMSyf-iY0A8SCTquE>LzE4o4lE--{(v#^WXUF<6{x+TfN#3fg&!`=_W@
z$YH=gBNwf%lp@`wVY@rU>q8hZ7K-H<h-r-_qUa#&e%{r@LMkk60wX9!lgM~2iBXA3
zEHZ|2;#tbXtJP#C1;z<d-Os{bgQK4^$G#3`?x3lC+h?D$8pOZ?w9~!NjA|n&CMsY@
zX^f?BZp|PA%%BOUk|LuC1PP;KZY!PuaF7Iq%CkQT8BK2Jy4{Hp6CDbmGav(g8IX9(
zJ}n3`c+!Y7u9ziXa7_V&*xmj+#ylMfaw<IcNS+h@qc~1DShT=t@1}gkcU+x;oRG#(
zi9wvuB(P1BI&X7=&zZF{egB~cy2?_&Y$%$K4S?)#+g)!F2LGxiUJULyBGMWrRF++k
zB&^EWHD^X!c~vdf&GQ6c#=vonmBR*wMk{U0-u^t7JANU#vb@UBY~X{sU3gAA3FXlT
z&TirW$@|c-GI&vYCDGfI>zT5g!xW^vs<OSkll-j9-}-Naw~Cs*@!a5FVCKho|C-}p
zfbtp~M9x1q``%*aH6}*7f8)~D64^5Z?r(A$mYFuS;Fc}<a#;n{J7{-rF|Vdv-jp4c
zH%#bzp3ujeouPL69=!W*NX=ahC`s25mjQYV3<ct{1n;hpAm>sT2x3}e*pNJIk-KOl
zr0|s@0#wbOiVvqO7Epr%B=cqH9cL7v5{yU-Gdq+rQ-PBIeprq_%t2*T@!!zU-QE1h
zJc+rXo`JY#VZTu8;ng2{KnJL_y$_N#>P@aeg!41pHON=c2#0-R^8E9h%kgtr2KRQ?
zHyNr=!JR?=jhgoFs5!#IQmU?S9jnRIm1$ciby-xq>vO;DsjHokvTt7}BxSFGUC_2l
zaq?O3_K*yxVf4iVSU?s%znT6#WNaU1UqKwQk%IRGqwmr(rYg_hhSf<5w4YSfW8cP|
zeH?d|m&<?lv%h^?LWcXX9<GGi)Ur1|sO^*=F<h!hVy~{Kqj#M?6U>06IYRS2kDo1Y
zlS1GOwQy|P&x*Nb7VYWkYupX?<E-}8ccSDxYBNu&+0${ArgdbOEG`_>V}DG^*URbW
z<?`lxq*-pLad?92Hj6UoQk?EO4D>+mN;P}^o>-kWv&UC$F4TmwKcOyLq#VL!6jgt}
zdew#}qPMMvC&H#>k`*)pn&xjX+;&>~|96Zsxf(3G>8+IsV3C0T3!-Q=ELF=FuYCb)
zwm2G-cueB+GKryE4X1PRyz^Hf18B$vo9~|*rhrr3SsB?)@~AryGyBD`Go00%C2-z(
zy}ZDNb{8;a8{;qusbx@e$agDv%o93RSY=nKzr+v>S6pv|$2HRhUsXNeN5O6$rHj%H
z-l7BU{%qAHb9=Gs_S!IAb9-r|-o>v|W-HNYN!l>nE4831qlsC0BKt>jzNMTHlLZV<
z|FN*BA2gBe+1E+{qvg#9o0AP}7ipf{Zht8Lj@{RMaLZXZXlh2$z-$06$dM^Z5KR4z
zt{*Xx^Cm`VAIS>DijuaDkmEbTs1J%bclSxSqQ(2(+@9W7TH(mMLkoiN(-eAVHezSE
zJiIH~CJ2Z*{6rWAy-<vT^@FntSW|8ng1!5#swmu;PKX{I9t69=44R*rLvvQgvri~(
zeN5|!LlcAnFm3=g5Z}Rkr29DQ8ya~^iboO<PuCcXI)&!^39T+@doFAc80$R(-MAUF
z^`Z0%ImWSG@c3I?#On^UFMA%DT4e9i8(QBokS88Pqy4)TIKPCm?{R8R(4koy8)9wJ
zF|K4yZ_S&i1+ICmT<Mz9nrDU#86Ns@#D*wubjZ>dX42kr1dpi^{&emzkD<|a<O|Pc
zG`F6>L}krU!I4zxEU(0uc=w1-tx?D0xjYsOX~gGI93}|yXP`!qS>^6j_@a~HoZkx~
zQ!RZmrqebP>AIhrtT-I0jz?K8n2CJd$6c-mTOP=Vd6pyQZz7}ALBx*-X(XJpjT=vM
z(io5!9DU64C{)^B4NZgBpn+ynLkiXwLf!@pqZij0kxDF84@n`IE44B`s;V`qa`7N0
z!VYyo$TEi{zI9{bvsgX3rB$<or6nddO|wL`u5w8*Qox;yWppO$ds42=qq*v-f_<_n
zW&!1<Lvb8u<t*@tL?FyXiPA9MN=ZbWtXxta3Upt>7Hkq~8Re1{$Qr-m)5A%rEGIT=
z%!+RV*G##<srb}*S}VV*^WO8KGFw`$a%Q;(o;<p?Ma%WUYbrS2ikkTG6K~0P(yTiR
zLPG{A^IpWRS`(XPip(pQ)KkALZ7%h#JuNNstpRpW;;dlkOF2umx^zrkT38Wh@U5(f
zR#`)k;!V?OPVsg#%}d;APVzskaA)|H(|W;z=xLo_;dDZ`S16tGKPG5h-p*+XmzQ?c
zJzOq{!-j=3+u|O{3>IsH(L8LgXoEH(ZBe_W1)~blDr&S^WzFpZ1gNjiXGxm3_&E7I
zAvF%ue&mSfX8kz5${Nh0-;^IYE4a1{D!k}L#|KcCydI7(J$k?w7F!C}<;O<YEWGUs
zn%yfj10&Ao+G_?tI9Cx%OxOE-)cL<yRC%6r?F&s#zg%2e^1{=@QgEZh5$!J4YT}iC
z9^Xx(HzN|1IliB|P?a;D_PXq)9lAAbZyPMcXgV~}4sXZg4&46WaU+O1sL@fixpTdB
zow2`qR&?moFD+-t<a@|>_R!V;-ouwQ`bOBJRGOc0rYHm&T_9e7IRIA6kTmMSVt_Ja
zS+#+%R{}5r&J<=72gFzn$O1Z5oE_5@xju+Mq)yc{Owgdl!xY0tVs!{}hBme)FimH6
z^d!sS*i=nO{H84wGO>l}oU+vgE0Y|Jk61@Aal`}f*UP))Hr3fwa+;+GTA+lcRRAFT
zR6GGpnLshJV3E{oifp8COIw_1M_AA@dP3&qTOg!MyeB~a%LrlN1`+eN3<an~B0vpd
z5g4FII3T|o@g(cBRF67ap<otXXQePLl#QC_0TF|XXsoBr`=UlIZ&_j{n)eN$E!XA%
zRi~%%q1zVp0xuKO#X_&6dx$69HIzVfp|bU--XIj@$&p<Y2_nbIQ5yo2%q)FNS?r`E
z$VtY06gRPkO<AvmuVw|S#v$5={I-zjX_zirxW~u|fOp_hdT`t`RiP3k6($wck#bD5
zuC>gFKRq9*U`&y_Bd9d(A?8d;@>kuOp~&T)v^X5htkV`lAPdP<zeAMosaXDEdovrY
zmAY=>LsZ$bj;W?<S7N8K_%5QvDO_8zBcY6i26*ZcJ4H>YCUts=-IAk(*KYb^n)@t7
z#{koZzCQWpdd(hb_jXiOt|v4I_}u;TT6)tAKT#oUsTycjJC7D=vX_liS+UfUKoZ!9
z&FMOc4xP(#d!m&bYcLf>he>$NJSE0J%Bvoe;EJ^aAw{iQ(K=51&!U_Q&(Z3Xx)trM
zNO=m5v!UH|g40(&Y`)=Q%DZAk_@le!i?LEuiZ58tTmc#SrHn=TQk>u~lWfO|Os`x@
zJEyg9BF@_1r8r=HG?jP31-eCNaZX2+%JL;zO0b*M+?SR)^K^y<!!?Yxuyp;DtT`te
z#Ay`oGDe*#Tu;Gf630uhT}X43cDKq%#247rp$nfDLzTVcZZ<ev%zWc-4YK8C5Xkcy
zMT<h9kVpkOtJrgpjNtQ!DTF6?wSsqdosO%Dpr>@cr-R)c8;)z(SJQL$R@rcL7lf&D
z)NDFr3ozm(`W|Gc-DLBunI*IA)W0$l9Z0FzGm#dU>bAT^g+l67#<80}csg1@5@d0C
z-YW#9$X8*Yz-gU9ym0f1_36KiH@aJ6W3Yyn;vFq*hmm$)Y|p*4HB@qG<o1^+?IB5Y
zhK{0=r=q5C<m4dX^!guE+Ce7GWpnxxheev(HV5RY`f7FPuK<su{M?_9*l;!}ux%yp
zOaB44m(vv=8qzkgNZO5=3I^U<<IV~vnj35f(z%L}E?uSs_8zXW(_8M)W9@y)6YCR?
zdr&m7_}}NK!~K)gVLN8q`z$5ePpjx~mB1%=xP3k!O9=6s52Qi##8K#E4=YP|-7Jyw
z*9%Sj2{%ON9x|IRv#x1U8>_Re=i_!M9xE8P4m=gqWPYIXDcAu+d0yx*<@Mvnxw=LZ
zj*Fb@)BEm#4FT%z!1vp90CmC`CMWkstsd|S{T-rdLofYUL}p})e(-m%)BYkc7i-df
z*R<|0PLkFY4$YD4i`Q4Vz4dy#*XlQF{)$wqz*U8>O9q!WC$|vaeyN_@m~TzenPa`3
zDtB~rtJ0ItS3Jr3@*h$7QxZQnW}2Xt`9v>&k#pSdXy>>kB4FFZ1l-k+sQdcr_6w50
z6@+{zSX*VKhEhHnWOCHNUu6x`%!mDS{}wviM|RT)Pv+WTiQZbiVs`^ky7y7eD)U!7
zhS-^DxkkI3N*~v@nNm`vtS@<bT$*^eqngs<Mxu$|ufLTtJ762<<i^U?Y1c-DnM;pv
zu9rMtuS~J|45^n`Wi7=L<W{vS>m}dDMoMFbbfq`(f7^Sl?d7z`kNk(r?-AP2mB4Kb
zAtbYQUdjH0COaj`<9Fvm^o(qh8-xRlrbxPP{a#lWx5e556aJGGb0<|M#FrZJ&I$AL
zQ$Q%y^w5Y7M!P5Pz0i#CBOBILaJ0dsdU_s<sNQYL#AcEUJ~FXb>r<4l^M(zmbV-EH
zELXmf5)N)C6C-+ltY=b5a%|5?v~2xI0POPZ^hgFB*7*(36uNv!^5M$3mkFXpB+7#5
zr_MwGV%CTNW3PkC_8U`G4D?`mMM%na>++2_XOsvO<57#A0;no0TX+@bZvs=*R9}xI
z56TmHiN<6AWh*V{jLQavB>_&qjaHi*dKXG2(tZ&)QkuYy1WrKLUV}7FPIc~43T~5Y
zjCQG3>21Jpb0J+QLhnn5qm<K4x$538*K5!<n;Zx1r<!!Hud?mkWuY${uLVa*>#eXK
z3Vohgq_HMqIGY9}_zw;0*r==#c|ic5AQqog9?1+>Fq1eYttJ@jGRM<;Z&Ll*EVVV0
z0)Ug2(|M!wwHBu)o}-Y`eq{g&pxKy10?ov(%WXhHzDbl!APJios5G&+;>y2<9B(t+
z*zo~h{*e&}!%HAYcyI^OiNbip;BQEZFWR&1>YQREixG^xa0FpULNE&73L>&TCqBNw
z(En}*-NwEgMqln|!y4yg3sTIaKX7D-2p?GHTF3hPkKynW{o<~*s$ft9#+x2OJZhMU
z7mPD;2l1wDBHlZuaACTW7mPlK9tmzaTB;(f4W!|9NVkJG0ZuAB4FTxwon2L&pk`~M
zX7w03S05#(Tgd6|5i!_P4gy50>$+_kdR5c#@cC<E@3h1dR+v+vWNjwbux~C-3J445
z!AJ@9LC*lDs#+^OkPtmc%t!$zv4h~%n0$+=)76p^!5pQ8yD&OSnVvpTahxLR?&l~W
zg7rYjZ5B!ADN{WXYK0OJ{wEWLk)v%YLNrdq6@`hqp|H_38Fv^a#&>gKvi4NGFO9A!
zO!~a#Iu6SCL7g_x@M)-i&j<4GGbDt^=}Mu%dk|(J;9>Y1P@uIs8$=)YcK{I9wAD+i
z`?uBe+oo-=uNr{0W$E@p{(C(sykX^7@%iWBi>*qv(SlljQ;t*f*Dx~p2_Ff5&3^&E
z=6?WwO@Gx~Xqv+&(#zIDgOEvXnD<~JONN`7lh4jyh)-IqcWjpu<F)Fc=(S&+cH_-C
z*{9BX<o$y{4^`TsxT4+e8DJZ=AA)zyQQBqWcwG5$qe^SFQ@d<U)Z#JJt8&@>#=n#+
zq~#CA%dPVF1h@JLG8X^TmX}-mhi*=-?NoOXV)(!gZV=IJh%M>2Ar?m5Mu@$;&}k&`
zGP>aIIQA`KJ|pci))hIIk$n+!OTukDYhrH0y@_f4U-!ktd`5EtGug$!tC>gojFYB5
z%tSBtlu-Pvkd@P&V!2xw@*l3!1Lpr>>>Pqb3DzY%wr%^2ZQHhO+qTZw_8Hr@ZQC~A
z+~r-p8_^M!i`w+6yXw#U5+ondN3Z(oPILT(DroK&jKI<s+2-cbzbZFJx$&zIib=~u
zZFwHzGdu4hK?qSXG4feYZqIb)+LdRAsUabfur{YZXM;cIifyv8$Pl@*l%C*)+IWe7
zoJ)1fQhgUwQ^sn<v5J<2XQBn@ANk-Z@kIZcM5{GCAKYy&{O2AYf!iIvG_t)wKG|*;
z926+G+$`H}gJ4rD7Te?d&p7I6^29l5vl6wEP^)6hW}PJ6J@ZmWNeBF8<b~^DtQFQs
znpzQQvps9{^2oq)Sky}?d3NE;3BK&ij?jARkR!J374_JNS=GQo1F?}4lKb(|-Pza;
z?8vFiW(NRm_Y`hUj&>ujE=K0027P`r8+zD{rWx+t<V{ej_8?2IO)#FeraFmAJU0B8
zoGK0@z?O0_(XEkKLto$Y=(Y2^+rjjj^X<#G@%s?2Hr(CCoA(d#X{{T>M$MM3pOrJ)
zWt`Z8KKs#rpY0*(QuS&o#0SyY%S!E-Ktk8drp!ptZ_Q+K8fzW%X$KQ2#U)Qdn~VMM
z^zalRb)U+5b!hX<pW&jSmHawhfuwysE%2M0&CFdkHW&((F2XTut%R<^Y{x@c9aVe^
zs0}jb6!>5$NC9nn1N>)5NK%jockye3!G;6~U!z^uAV8MVfWU4r2F{~DodwwNms);)
zt9!*BrArE?r4e|p^B65k7-kiggt73?#kK?19RVqJ^o3<ZLMjD^*f0V+5TyXXhaGU5
z$r(i+d*v2fv6txKP>}s+=13G-_f&a#7HpN&_Y6X-hQRt0&8*3x2FbmN?YOwmJ#ki^
zeT-E2ZGd2aIA{-Jt?@1wvJGk%9z{&x-*~3_F!W!yOsmn7FIV@JQ`liH5@do&_;qcl
z=>+R+iCzZon^&StQQC{wM)y~uU>wJBGQ3jNbb1=0VM&kFx1z|oHjxg1<LH&EJ_dL;
zTZp{m>e7X}5o0U&hB}g30nZw40qBtPX}G_=6KoUfB@Q0<anl<IY&~wW+g%(SoVM9x
z+wdQUBJ2!|Pl`iGMKYoqOv&gYh3|bzVDSmp^on7L-6mX1G}`+D&gA4RRfF3k3yP}J
zN9$1@eWG79Vn{?GwIS$6ZnN-qL1S98%HE%K00dx+8}vgkD?`K^&XuEuq3*%brI;R#
zQ}}z|rIV3jG7A*h+IaW}4o{nX1TE!i&d$iJHP`O)=oKzEphl-0r>Wn!QucVQ$TzIH
z18{W({*DK87>h{Xaet^X9EB^$6vIo~jsCWuP!^C$K$RpLE=b`<!+P8i6MsgX+uffT
z0K!(!^IY8KiiZV(oh11Y^5BunEgrE5JGbThh+Q~UjZ{5My5MyVFZeNj@I$d1la~*j
z#V0(V13t?HC!`@BvItzKm8BHTgSHWmUXVE^xT7Ds*lzTitnMr{8{m^Ka)=z62p_97
zFXm?GWdGjfeWm>ac%M9CM0^o6VRUi;KB;ocwzUu1Nas@1BJKOfm7T|T88c7$SamzV
zT#vOdXR)CycOu@YPLWB2#GN&ylqEic5XT}8X{sBJ--sY&&JZhqZrr9uF2$6qxI(+L
zu$teJ(XfmvGQ9?<VJ8VsfsQ_tJD>5FyqS6~gT0^B_jW>i!XlBhkT}&iVz5xSnf>I0
zaNuzaV-+NnD3E9xDe^A(QQBw1u5u3_bXYpj>mCvI;R-H#Y7Rr!J=eQ)V_*%0>>y03
z0YjD>DvmH+MB8>}ePUt8?sa6vXVv$BfxC6E&$poy-N*W2q?Pt9&4-FvccEEE5N^kg
zg65mlfO{W@?RgKLLf5U92gE>d$+gbe#m?rcRjW&mZo-snGuY;N9(8*Dv--X!>@Y<A
z;)8UO{1R$eAA9zJpGqH2(xy*mikisxy?7ThQBzM!<k7I>vq_n1`Szzqcj+`8*)RID
z;T&K6V^{a#Im)$@diqoDN$%hK#b~A>s_Hh4XVKhQ>ewtrJjY@V8r9EWiNqQD1A1bz
zQP;~91ek&Uj&Kr!4@j~23B6<!ve<!UVi)i25`O4HM4er@1NoX?Aq{LGrLXe%i6f|k
zux{TfAN?+IOhm*QFuPWxel0kcsjeyU->c(s>-pZ<H-Q>Hm`_Co=105n@fJpXjiXUs
zL!8V9q43E99=6~IZW5UKDKN}4FpndHLK{`6c7Y26tI;Rh7)5rx$I@a!FLn9|eX4<f
zC(L^eX%mi5WW74Davh`$<l|SjCgt@S)sZ-#MEsoNN216fSS#p)K2RK!=|~{(l%VR6
zujd{|e&5Q&XX6u$!5tBMzif74+T$`6yG7O2R7KrG-#WoVgv5U{-PM##`B3*wRj2$i
zk|OR{<SHmux@ZYzYy6a(97Py}<hnexNGB~^m~GuBp-Sdasq$DvQv}*jU{>6H-(d=u
zY4pRw=N>_bIpinkVx_6*UT;4@|81+qws;xYzybjHQT!imwZDxu|3hERCb!kEU!y*^
zSTBG|@{dT8bbJ!^#*!{q>;wBsm5(*~6|0MNWC67;g#sz%#PvnX%_M+#pkhMT)tXba
z(HsFi#w2zxz<6TK>NFLU+wivGh|Xq1G4}ft`6atLZ|L?GwP|QIe0%6L_@(7>eM50a
zYbUqKiNP)1O2pb6RSu}ZqLEnl3~jB@AnoQT?9G-$%{K^rwr6Zd_$H(l4VmreJ`R!|
za~+y0D~W#LmeFNyU*y!4STlrSbEGyu@=RyA49||qb<hE=(J@UL@?>ha868e)RhPSH
zD=AvUKpi?Y#t19G20*trh_t*Yf4|FbA;saxL}C#wlqw-Xrn>@;=Yh&4=q!)1E6kRu
zLud4}o9pt03mpJh!RQU>-d5~s1F^^1)P9>@4e;kF-76q7U$8Dt2Q;g%u~^g?F&F%&
z*oTq*Om|c21U>uY-+OpgSSX;-YpMKFJW4w}Y1Q6FbPH>=$}KOp#Z_aIj|d_pT+;VC
zbY$j`D8C%N>@LptYsP@6)j`nsh?Z6(g8ZjRSe<8x{gi@d{mxYWac5K@7Q)@M*4bS#
zYDXO;;}D!55?|M>TL(;Vw`cD4vo94z5N^A)n_+9yu*4?V!D)Y%_(4m9kL@iWj2E;C
zl}gfPP-&VguGAP{gm7F>TM!CO@z2$#AeJ$WdXQz$Q0ZzOdSiNQY#)Gi1B_m%=d<Z8
z5$i%qKsd$){57635PAPH!56q_SYzI1bbK#<iz?M9)8;w+Mav$e@)_7u@TRS|-oP*m
zejm-yl54XsXVyjFz=wx}E*+f?r>yFw1uxI4g_Yc8&f{Ck=*7BPYlkn33k~dmKHL6)
z=UuL?EzPO{NM|{6`D)}!N&^Msnf0cCC0s8C_MJhIP?;cIfi-<;5;Swo!E0b~Kc0sy
z%!X_X>v=yAE>H*lkEOLJCi*Uj%5#~?0*%^x@;nF_xV$!Z(~+Y1(VTYkG~e5BqOiWa
z4xH;XZ`2Q6ww#b^9tZN71cr269@;E=b&x;wvh<+XG0d2N?{QzfZ{e|ZAc6o^ucQ0^
zI^DcLUG$d51^@wudj(Mf;ek7K7po|Z33H%^k7%{_BiWULC__BTGM5;g7EQrr(5z=W
z15)%RHNSyd`tS8R5=Ni~z&_*b)O?6KM9&XxBZLYH<r3g4H!bt0RN7k(KqqKo6y{m9
zus`9zfB0mB1q^}L1ET73qY43q{ovyPQ;I&;V}lz5NU3Xxj3o*H75E7vdMoD~QUY4|
z|H)2b>%4)lys%tibL?5R-3uJ%9R{P?r>N5h76Sj{pUSF|K>js`Xv@Q^9|KaRKC=Fy
zh&9h>?FRoHUESUm3AlSv)G9DTZBcsL@AuAC%hDl7dR>NL%EIV=$_%1m5JC3W5!dTt
z)&hua`!k%kBhokD8=_BQ987dYg#t~|IAj#9{R!NKtOOCpDub@|Pd^l!IRt&6{L}#O
z<!_Xw&Y}OVzZWbT6-(I%sD<E?o^*p03SOjL1ST#edsmc2AjA-5pJNOIp^lK!#*oHB
zA7v85c`KDO6!+15JgtYe6}+{S_4&Xn8Bkz;D7h2pf*cT3HyQKV%B)uf8Wi=b&kkr>
zFzs2gnwnta%ih$E2?dwu?P}%rbYo=98Plxn==9{W6uvWF>TPKm*~yN>f)ieW?9%Jz
z4N>*mpWArDWFAj>Xi2RpC+_^})8<nYr;j0mRE-5m_IFA5cggwB^Hc*0wG0VL`vI$p
zQM;=FLZ7<-PM%-t(EANQnbY0Y&dJlp@%BBGS$MNXQRwz~5_`iMu=!(<z}P(F9B-v0
zrh3d(wcYT-ck}uA;PUYW{=Q*xjZ=F(2rVY#D{ohK90ZSOwrKth=Hf@4Dw|5>Db*vO
zx|S`8unhK3mGjY)>o!VCm@DJP`b@SfLP9;j2U*D(peO{7pRFDF_w5{>pCzq6r!(+<
zr9<UZNNmdbe1Ec!5DGk`R(+N~EB<1r89L;thtDcDEG+c{qRtw73Qao#CqWE-3A4Jn
zpKVRq_$)GpW>{Dp>vB~c7NWH<^Da`$CjSjS#4-|!xiU?LXe))yGw@HILQsRBGcQXN
z=@PfOzo)7j)qL2$G+cxTVoz%Jdc)c#zDrS;$^ll#D8o_rfJ@7FP-2P(0=Ld{sK)&I
zUD4MJP5%OyZ7#ItoapNp<A@icQCCJ$S3*<IVrM)|L>1o1ikhBJ<MR6N%OT*&&cw#a
z(uoC4&RtBIj{#tZbx*Ma<Ol&r$$kQeG&sn6_4|g*Lf_${4a#WMuo)bI$)wB=UQ7*H
z!pVF&Dpd}!tHF%SA+}X91>i(xK^oI@E<KlvHvv=Y#`sWN7j&`2K@1`M%T;oKj~Y=v
z41NotKxQK^kiP5;X4K~?L$nli28dCB(ZchBjkCa*%+Ekps1cScIB%jL)_59lD^z_D
zx8hyN7}0zPS>~S0pldq*Q}u?`==OS01{xm}3O1wT33t{OCMQ%%URo+3*O0%2`N=<5
z5Xs8}86W@wBdCu6l!%blIVY+BLE4M`P(s5z_BRABb8vC4Hs-TWkT7!46WhysNWaSP
zz%@`6H;k|Q<m<wdM>A$^Xl>(0Z}apW_9p0S2EVU?r^>==s&4rgzbb6iuIW_4a?^NR
z$-~(xfE)m7YWH~6!p6onPi2*-0feG^tJ@=c;nAHV#3M{6A1W)p<#|O2A!7G#Z=TEl
zAw95@hTIx7P7Jllt@*l179Mk9%Q|e+6)Nrk^M0#&<&Qg~S<Sk1z5a&Ck05hHiLd>~
zSsy*1_NX~Z_$)-tKDraedhDNWf`F=CJm5Ho2dcbmh<JtjGE<IA--FQKGn{n?)b%8x
zE)#MbS@At4Q1pIZv!8z^Rz_16D*|_*fApCN-FF-#JrTOiSGCH{Z&^hNC<3|u;lhs>
zP(x;Le*R@s=56(Gf7KRxYA5DhwXV(c5g^j^Uyi1FRE6zVif11%JTkbaMR<^**KXoM
zTxyB7(N;6pd|cy3a1|U&=+d)V!w1>6vU>zzFooWYkF9wE_wn4SZiHiq4{l_fUBt-H
z-A14)lUUNL0Au3+^U8@{7CzJ`dK5K=keqYc$<~sMNj+f&>vgwU_F_+?Q}c4|z4{SO
z*|S~vDQqKOy5ds@SJg*S?lRQ59>|EmoBM7+vp6K#7>b-L8mGnAY8CO;+!bU}=%bYy
zHIFr2K>*ahkevUXZm<cJ1&Jcf4TXR&nTJwR(|?&_07f;L2h;Gc|8as|2z8ih;If?F
z6moc01)~sVKm|iLltCGz3&x0w-pd3*WzvKayCP{qkX4y5)x^4tkv3{oUPL>kHea%p
zT3-p(UZdMI#9NAhG9h*|dCb+BukN@;)0Ur}7F_-DjrdA66%T$mE*6*pIE6^le901n
zp)<tjpn0PhHS+RFyW=QCSJ|s_3(N8f`f6F(O0H2$s>-K)>v?HiZT*VB%BO1U`q;_>
zPLdTO8c83)-`+HUa)x<#?X0mpqAr0%A5jn5Afuh;nwhV$(#*eL0{qI=7X>VHp2XQi
zoIp4`r-vh_<DUsG^tEx*X6f42MgF{a1zE3vH<!#q<&%=eYHA{t2o=bXB32rObFz$>
zCIQ7*NL7inWRVU+*!+-m2fx!YsKrQ^a(yCHm)9)&;)*PJUw_pKyl~FLXPUwLa3)y<
z-l{X$1w?au@gyyo=`ihscMq2<!wVB2N)qEF<7D$es{)BrmMn&F>+O_TI=)xs-DV5}
zY%m8$FT#v|5e3A+2$-o0S}b@_ecKnJ=d=#mfM-U6!|&CwwAUqvweJr7?tUf)!mGgT
zUuh$Yu)32<Z!Y6LXDX!^D@j0uahgVkkZe4Bc}AS}s7}SdhSoC>yaOofD0(8M@{hMf
zDW@O)_drZs837PP=%)Y@!1-Oej4c{Zlia;j`U;@?Xn%wk%ZqPdks1mlvzqJb|CBUo
z$<yYn%u*th_1y(QI5~ih1zK+DS(XkCz&4Mf#5VG2S4R8PDoKdO*vnGP`0EHu)`ugU
zInRI3dyf?%j}Kv)M+v+rT}0FCK&(IRF|>4nT9V(u*I|)4UGuB*xRK+9R`pD<!BG$}
zzNDfaV+hRl%U6h*x)YHg8RQ=FI5SvikNL_P=wo)1gAhJ;8}%I<;&Cz1zO#c?(51of
zE8tZD*i(`|AfWsp+r^{^P{Vtj*3vhg*nT-*PiG$y&oh1}qcM9z7thO5xw7b1VpxjS
z8OkvwLKO(8Lt%2RDs!i(2Q<3g$BIAPgfsobQVe;Gqxu5uxYxfnkwwtTVkGbH4*y8t
z3?wi=kN3|`^zY`PfbD~{Bk3ZVTqn~X?;z&8%W?F}6;mW(+GIAsP-!PGg9q9=zd>|B
z&bidjg49tz>qn}Kh|EmhWuklJ3-!_UFvolQzP@%4h2DP4g*WVe84f)S2@pee<t$9t
z`OHHC?dBJ3sGt$MWL&=-rD3aO)W0Er5CE-p!xF_`b^J#_{tB=E2vEUzxl4Zt;}5WK
z{^lD$2;+<2@{s0hUkJmC<NpYsU$Oij;r%Oy!3mphydVrGn$7SgsyZPM|3)K##7u+X
ztvmz`>A>=P9*nG3onZ~L$5_1&$d4p-m!DzIqF*Q0tE8VVd}tgC&m2wbuZ3&D<GSHB
z{vdF{v!IhhyuMpKt2ms@rDP(dYme14GP5b4JSl1~mC@@c_bWjMt?GF-Q8yIA<|9=c
zhe*<k=xl7w0$p3B3C|}UqAbE+LQ=aEVu?uMZyVScbB`waLD2mTJt-SGu}f!fLkgR7
zf6lapy$@$TJ>aX?_S62O_Q1DEBsCeB44OCIYE&Gv4HTDcsSzl}1S_*c^tG2NksAS~
z%h0GCJ<5})s;;5NUHT7%RsrRYRb;A5+65s>Ykr*dCQ+m&<v}TKw@`^1H0Qo8Zude;
zAJTUt<&N66yO$!(zP3%+02x_J<dV}gIl*%x1wePnoKUr|ozlo3n-}DF3gWNg#|V)G
zjP{(#L9N8#4YD`bi4dBHk5Cp!>n127bBQ;D5+V(=kn8mz-dSCAfk-k<ow35%!wNDd
zb3v5`4(5o8Gn@?eC2u&H6idM{vQb0P(#G|!sVe2mF&-O}g-c|aoQ|XGwDCZ_UBzzR
z5hwoL>xLBj`WXg19H5IN)oSrr#93%=O%MTb0#bBQescF$2*bbpl9ti_y8Cw|5E4L?
z>5M?0A>e5QjF3en(-5akU_FHGRDk6k%#|t+=7tlw6Rd>l9Cc)95y@xyGEOz$y$su<
zeowlGU+0k^-OCq|!oCJCPlt5xeb~DDWLT!Q(=%~|(nq%F`#SX&=w_&$Wazth^$&<<
ziR8{x^c}k5bXqmYwmrP9Ry@Wp;2c|6IJ`q84fwLOVD&@iu%`)m2Bd0`buKNd?H%OU
zI!bc#_c^k-;2m-cQXzi#xX5<ndm`eSFqNNaT_e&9xuM@EtQAQjg^!r^q_p_kZP4fq
za>$*_FQd0m#B83Q?Xe@SQ}{Ew-8f@DtAHxF-PluCCjSsw?XWbX;5~T~Th4Gk%2vE|
z(8GKXOAy>0k3sNPg+@#rH9_&+Tc%v`604t@0$4AfdL3^~CGd?H2!SbC@!hd!u4K4%
zTCi+9TnG)#vy!9=JDuO+aqNNsa?c=1q#K#I!ybXFIELpjq~KC;sAX!I1CZDQqD;`O
zO4TzA&)}ro)H4h$j=}eD71QU;ivzIzCvxdMK2Zc6OI61IXk9(}#}tov7-H~=+ox?f
zoI=6To`EV-Qn9m;C?UtGmp%?vGI_e+=ooqG)0FBiI*HvJ4pZ6YK;m%*w-N|kB^W!h
zK^Q}C6ZGym(L~2KCpJi;djPi+AVFa611kk0NoQpeCj@in#G92Lk{%3`M!HKXXcvSd
zi<q=wL}-7bbLR>NMP(<g0Ex9miEDXiAgzu=l{Vx}X`U$pD}m@AqlV+p>oH1Krl$XT
z_8%A@goV>3xKw;&ks|si_SvdC5S|i58^U#2k(v%q+FQ*Csal=Aa|&n5_~rF`D>1rB
z#2qy#B|Zk!jSk@9w%fFKWu!D;mBUfvPMr)%<HXv~EYQbibO<ON4VNEOO-rLsJuX;{
zrT-y$CqePDg<gg+%%KFEjyEc4oO<lcN6~1X3K($id)Q4b{P8-hs$f@MtB9ODW+qyb
zK}qPaO{nF|cc(Jp=TDqAPa%r;j(bqWJ3~E8>5}=&Z+JlfjM!aFaNnGLQ?%;pJ1Wy$
z#i@kFaNlX?0%(#|4^5$btUj^U*mfp4!za2gE7v?TCFar@X3+SMuhg47@DHfv4QOuJ
zhgHt38qUt`vENopKDDXDYx~N`W?cmvJ2b(|s=>3;+K&c}r0uK89=4&j4UPY3$_1$W
zvQp`GewuTIP%0xS1s;1KvGq#@PHvo84~qRPyUsCfmEcNYI~K3vGW?(Gqr8b&r?r@0
zl3mzWi>kTCpn#9CWF;zjg(WbJ@l*d%{bYa>kGln=0>5gk1t`+*NqOy;i+o|oO&P5k
zOA3nh5aaq6BM3_hEY%&ZN*{Gg%f{u)<N;|J>W|4<q-tFv(RBYkWj{e0a*;x7lbSly
z-sFg*Aq#X~zmz#se(66#?G;zi`*WO5XLj9SBMuD{amfX<qSR3NMav|t5a__t*^%k8
zrl?uNyo71Vsr2-C8sjPtrn<Iq{yxQML9Y;o*+8-hos<}Zntrs=&q*L2P%VP)hDx(F
zv}a`{3iV?&mV)nRDjB(CZ$z0Qbzt;meVvvG&%}U+Wl6Ud#~{fa3B)7glPH5nD-)r0
z&d#wdug^)Q&~g1PlV=&Z>_pU!y^fb-7T%AQ(TfN85v<G&x11n7zHDRU29-;5L-Zg{
z%@ypDXxN8)Kgr-PNTNt4HZ?O_o%FW1&~z=1mC*pT>CNJUSlBRb70I0pmugv&pqOMv
zGGn8HEMq0s;>D{NN|z5hx$+-$_0OM#<eBAx;zijEkE!K_Vh}~hetCjWQV6Ahyr3(b
z@G2z1lUomjU+9}~WmSTq@uK1>sNC`4%%`Sxa($C$`2qdT+)ym1%i@sFLktiztcft9
z=cE<GAM1pF9P*+l`6I1pPP1eVTJ4O6dSF}(XV&w9CX~dQjH?lp?uoXQ`HcItE}LB?
z+54g~Pp~F~fG&e{M61K5JkQ|c;a-alH^`nir{m#5=j=(IgVwq77p7|Q^x7fi^mG<_
z+7(*QEQ{R(jJ`@CdlkK{wL;ZW4e{Akk<&r<5I(4*@>OBbK|_2*A|#yfRGeBzh^~M9
zmDTq9>+j$(GcLK6xlT4EfUZ;k%9r~>pl`byM}<RBJ)4z9)GRbz&}chDwC3Ftw^7@h
zQA{47Y+g`JJwh};A~iiibeRTz0+FX@I4YIluD`p9IY0G~x3}NotWCM_&#?ZbeEPw;
z&ktQvIGz}N9{W7DhF^hePfgv~Uu~ECU;*{S^67Cf-N8;5+a3IXGL}L&j7h!mjtD%{
z<Q|HC`Ceo57>(3mwwpR$otTa!z_K3&Qrw({u_Qpx{@5O_yIxWl?mFG0BJKkg5L$F>
zu^lNvnA@~uqVwkkPn;a&Yzb)zM#ig}*<ItwskEJoGdXpyr*?lcemqTed}tzizkizE
zoB4hpM*eg^lt1eDLABs~>AmW9eLQ0S>srT-Zh3qx?ht;~%604c>3dLl&#Yyto-=#E
zhk5CSbtJ~}UsI*wl&eFLk#bI-pA4LcvJp@3FBZaA5|(qoE2cuzNN-Qt>}rh$1%NIp
zVO;3;|DwQ4QxhZ8r8kGYGeny;Y>=*Q80aSXrpV!8IiBMv&5F0Bu00`wENfIwUHt`U
z%|>CQ|J7gF5|vmlIo4Q4V&ooz9U8Z8td+ob*?O^)K~_%zJud^wH%rf;VxwNisoWoe
z5<+91R{>uZC|xxd$Nl!x;^%goIrdS!U~%Kqt@DmtxbH7-l3LL)zKKps5@=#s&Tk4v
z&SI6npaLc}*ccj&;bc&IpgT7>DM(mtNs*}iG+EHe{^o5n^G_hX<o0X^0-dtVj<Qqi
zl>B1L62v3~wJA!fv%vR(6x^PTcv(zgWzZVi;~UbXAypH79(XRsj?rj^&0}@kkFnq{
zq*~GLO+AcdqvU6|Urb@wXhK`J-~X)Xihl{WvT2{wcUz1yR4FA5_v5s8vM?Yu&eX!@
z;5vvO!4bLFE^SR2q(Mh#s>vwbnpKgdPRK?RfJ3^<I~{TKwW&XFvx#66z5*@lP_NH2
z6xCS9)Mkx$EXFq5)f@wlq%TELE)}2u!ZFkIVK>xrsj>vj4b>E<24^O7hu>;awm}W%
z32KP_OQlHJbQ=ysE14oiSKO9`d_Vl_$tve)AVMa|B7h+SEt}VYmU#L7>&2G%fC=!~
zC#GD?lpE6Ck{-U@mrf8aPLqRqg3!UslfYdlC}h9WnqlSY_=PQ;RsyyY2_;)JsW#yI
zqOZiNu8cQ8NuJDxy6uq}@$T_@x?2^x(6an`@8;~6{6)#Hsy-_F9V0hV%wO)L(pXuN
z!a!@VC9JE4(yYJ+Vt%WI_A;a|PU-qCI-Tuxt1+r%cdxLU1TLVzP-@v%18j#=WTr5z
zLh8J7W^r9@S{?cq1IKO;S<RL##$>FdoRe8`bB?eY&ql(HniOrkmV0UVS+~aaT#cxs
zy<$0}p<adKa?D?HwC6HyE#e1H=5YhCf^+KRET%wHk(<_9a+s*NBKK*R<3$NbFX-zA
zcb%igcm>FfmP-y@)8~u)naWenWLmkS<<GMzZT2wQH&HSP!ELCM&zqAy-q|*|)JOy8
zlG8H8R6pjkE8Qe{!EbsfG3W0%9WV@UsXYeu!n-aGwMSbT4*yya&Qv4o6Sht#i0Oyq
zwaYSw2y;r|NuVH|a{fgwIHvXxmJUz3FqRmN|J{sB$W)DtM2PddnIf3JHTDC11wN*$
z)yMwrV%4+uq2bWrps%~;V5P5gCLxRuT(3J85gZs!xf{cde)EFe+J3p=aIdUSqQ)q@
zkFjt#r;1Vi(1n}9-2h=S3LNaFBX$im5n8!BO^d$iqE+3#<^+4=#$g@*<>BmWq|~na
z=k8zu-md5C^>O?AFn7lr_QtPXkGFGsM%LHY7wUQ7;sdZR6(0Bf_8tGf=VunUW6KyA
z0067v001=qOXiu8g_Xv@(Z-ee{{hnsa#?6?3@_&%=`qyd8iErtCv*yI2_hvtrcle}
zQ~LC}h|NR%`AZ{`pg~L8^TlH(ni-Q1ng23{Jn3#a-970TI!s*8A-6BHk!y3mh8f|G
zvxs%*fuS?}eMUkWTK&QblkGaT7o6yZn2U>ZnfT)H`j?AxExR<4UY5BY8{|+8M0~V{
zd+!d@tw|G@{^|oRmvoc#A$`IqK{X!4F}$(1AxEaNg+=fi;>38Ic8pqjjC;?YEc+Gm
z?$aOHckh;h^gEh;j~U9F)rp<sWg((B+hEL|-C9(T%Y;6?@9`9gUI3dMO8bM4Z^z54
zHuZ&cj~mRmI=86KZbpd@<TkAqrI*YCi&QH!^W@}269R}tA}{3btR#4C(s+*SjJa${
z|N9p38!%(Xh)?D%dNtM9?N~SA#lU`yH^l4^98JWbRmtE;Y(E4V3hY*VT>^PHGxQoK
z_!&7_y5Grn*eJQx3GFa+)Fx>oY)acXMDNGl@AZ1=Iy1;yS5O;HN!!m=l3(Zq8PCZP
z@_btP3b-q^H<B$bAQQvB6$dOZm?R5Yq<Z!Mop7cESx?l$eY|9><T3Y!JLg>@utZ$Q
zIW&4q?dC-S$_R2)NY;o|DrAHwdK+-2??R_=fz%a&Ggm$a&h3PNtit_eh0QEQblX43
z(Ak`2j0{F5gb7GUFB;m=sTKzdB<pt3A-r7UFlokp(qH9PG_^2v?&W+^wjZ_^X;Mj-
zZs^?*12>yJRTh9VY?MUDYM@)%V;Hsee&|wp7%&Kf7tDlIKil8V|NJ-$hZGKYqK9uC
z6=EPQ4rJvg9h?GqskoZZF&lCeGtWdp@i7)g<WLOfog>175ndihf0G^$*$--+<3Nd5
zst;TEI$X(D!1W_AKK?GMjv!RtED$d25=vIrkt?S`-Cl@kVuTRPqO-5}6H-xFS)o^P
z@lh1XVdTX-ELh=O?(2sUv0CNY{Dooo1IX`BTOls})Yd01|MZ>`Hdugw5@YK{`{C7g
zM~gTS0tg5^mWLYYLFr)@sqwf55Zqw_y4h<0ZcZl58cSn;TAtT{w={PO3hiM~SZ*L|
zKjtb-ml!cP6IvSs7pf&+Z8$biSuQQH)POu`{Ive5gdpepl{;X}?F5=Vmk_x>CM96Z
z!KHXRyYSuSHiD#?fPJ}PLe8#s(tI)z0~gBSx}Y1Qe3^<REO8l~ga{0yTPRi?0FMx`
zU4(VxvMopkX$OXp44uANy!BW-3G$9qi&eLnrpL|g#PQhM-PqgM@ab8Et7G@}rgh?<
zc@W+L56;O_o2bjZzxN+5G2rpa)dVqnk+YUZ1cBn2l~sQ`FXo`I_z$t{sc!@6MX-rV
ze9_)*aZQ&YKCRA;UqhtXwAL365~mUq6+T|&?yzTV5=$;d2FSM1l(dRG0LM=TJRhLm
zYcN~8PG<}9Xtmu2CQ9O2UneCAWHy3-TB{q3+daS|fr2i8XKI~!0T;sHi1hr|t0Oeh
zI>-9<qTG6LE1r7BB)Z;C<|KH`O5^z!aQStR%g-`r`BcdQ^0OZe)#IMto9Crn)+$)O
zG(cpiIB9+rFmF%^A!oVuQbyP+qew2LR?{&pGqp8$kSI9zO#a-^Ftqt&Z5?<FFRQMg
zk$;SuxR|_O3=K)!gTbohb;XpK<wM)LcRuUO;;~fIo1{&*?Lg;ZZ$w~>o+4K-op^Jz
z({8S8I<GaNP;rSR2EE3!!s$gtQiUk^M}oJmT(M7bnh5@6;VhecIh+qmxWN78RutcG
zJ8ucD{P`mi&a7Idw9UHZf<k8X`l025Qf8^8(|l;z8m3*LBZCu+->U&P9`at}H+&;B
z2KKE9cW7^L?n%wa0e)ClM!gUao9I@>h`ImY^;#5A&rDu2ReKyi_M+?zpbt_|^0E<$
zB3AR8au%eAl1pT23<Gx5e~=h(z4iyYODK3mhC1|POYG6uek{d;v1jJQcISmXmQYSQ
zphtl}<%GAg%VBn_BWOxCOBTp<U_h-m5d>8#^ir45Wig<O{t~_xcg+amhhX_3U1kRk
zG7)d-@p!&a)7Ym&>6Vv@Y?cE!N9}K_u}spUv11shKAziR`E=0-S-8TLU=p*ZbU}rG
zQ%cVbsjj~1s+uD;2HJZ(NWgcSp?N!L24{*!;{SL*p3&9%Y3a>GGbr5oNje$f;C>WJ
z1Dgvd_v*>~FkF3uYL2ECG5Vq@oCY2x$VAi_D+d&5LQSIwK%4O&gFu6lesZ7=%#hPm
zd!Ac#6j1L;qw1U$cRxucQAcSMSQ>}2Sxn~>PR`HLann~a#Uy?HGe%0i&vk5)I>qm`
z3I^X2NBOrPjN%kmIt}tA1~N4jui;7~WJ(V>{oQD=b6*<tk&f9T-ba4oPC{v~Vh!$L
zy=89pEToTUxXnEz(;=SJ$kpBY3dV>D_)pN^6$+{a$(&j&vT-}`EE;s-$hNvgeUGPv
z%CCr0vscH<W)(<wBRyZ|?=Jbg;>Cc3EIn{iLNexwEBZ3JjyfZtWVtk(ohdzHn4}cv
z-?dN{h58M&Kkjwx0g|z?*DdTebd|itkQJ=M%9(PSwTVl#L>^c<Ca!sk=On4`nG21=
zAxK)N%F20~^e;%1oE5EGQ10zOyyBAXz_276G^1J<&WpN7-=1ESKFN!c){TKNlGdsb
z)fIyR0klfW0dhZ~E(GvNjx`BJe^f)g=pd!Sji(VKblgugB^sKTY|Xr+ZfiIDu!aJE
zCbnzrUY-FVYQnPg;Z71bFFi)6UCGvqa*A;}M{aK+v}OEmO@2;VdT>?RQ^>p5c*e<J
z?my)hcHPq=JE>0EtM1sdCrg_d@LH@i9U)7{pxLW>5mP(pvBMa7nH}tj2AQc=X^E?M
z3krDQY&!4DEvRqh%p^-gyR=xYxTAGMdTOJ2nK}jZmgqbeFEy6^1sAT_+s(M}nBRJ@
zTUjqq5RUT}T%u!Pjj{v8D4!4v_0x2B^wF5pWwPPiq##;qUNDfE%jVd)nqv_{P3C<^
zj>Ag}xp-C>pu=+v9%46ytbMkQSfA|IdtGt6COl`IPkW!uXQ&8TS!z3g!4aKij#X=R
zLQ1atgjdd>9NP!V4p0z6C%{7&L@;TV8{W~3Mk9?bVEE<nb!Me@Oh5<o?C#;NFer?6
ziey_Z3aXvAm_6Yn&AhS&W}G}hgBOn4ZN12%+i;h$<)PD8I^Zrca1WC;hkG%cr63B;
zUYwV22u8Bj!B`OMj(|$5!?azbk(C9dbX>SNFVb<P>^Ds~8|IjO&M~HY5iFTJL-!t~
zyyyp>-E$QP!A-WRLl9yO)_e$Jr*v1&<W+y`W%JGlEPyk%`uK0K#HSmaZCycXP%ir)
zb9DJ<0UK~66&{i@{pG|sU}l|a%<^$cOfH&@)V?A)+l>mVsjr_g8-jT*0}kk+s}`@Y
zJ1;y?>FVBhop4MppEOFXpp2erN_Q@l_PAmf7GS&dH04{`PCUZXG;nKy#m4gOdZp!F
zRa(Tnd}jQ^AAT}L;+q3{9C0GW|G1N%%&0?&9o`oygRxo%-Y))>MIUh&^HbmSc=fzI
z@9N{vk1ZM~;6+7s9lT(#`!X8vdr()u4AV-jVUX>2<-j};6<MuYAgoi%+XBbG?WQO^
z)v@JrxT~min1I!~W7BD|$wu-~N9mR@fVu)nT37rnWPL9i-T+1M;spDLApIjI;{6YD
z@E+{M(Pa(oXp~_#WXDji&Kk1_+#HqQ?fdH+kCv7cqZcK!n^{7{4p{wT7Jq{4FvD=B
zwcsjBs-~Eui$Ry*m`RvxgcPmCe@3}Z1&xMV(8Xb7V93NB<-GxgZqhyqNS@?T|1I)X
zoyo<9Gy<<&%{^VQ4?zo?A!JL$JBCQwrz9Lwtwq~HTM9ZdC>aXMa`*2zvp*;zp&<e*
z%>L`Dk7dM`v%i~YZA0D`;=3<K;DFyz{vP%;WXYi#o|>GGna7M#I1fOUp1~ic#g-u&
zaPR7xmgGN*TbRAg&L=|HH=siydR8YvSRsg?mMwRV^cxAwO+F4(;)k?;7sjePqL)P>
zWim#PO{*`yr00%Ij!Htl<EY;nBzZ!J%EH=B6(j~sd|f2d!Cbkwn?Uv<2mbc}U@Fd8
z*rM((%<w=!%hO#|RPx;;z-+6@nR|ZS^`o}r{<1>&Dpe6Y%VnPQBRSvZe?z;YL4YNu
z-N~Xe=S_-s71yFq`qdn6TEzz`nxE)`|LhbQs=r0^?47ZdV}O>@i4dSDr_@L?CP&8q
zSw%SbD!y|G?}9n`gQzi@`ueUp^fL+qLK8}CZ!g9iY1AHWdRP%H^A@oOschtXEyUVe
zy}67Kk{;1u{}m-jFmR0*7soAeaEnAeS>hdn?|QFHh$NXJKy=d19Zm-y`55Ry8!mvk
zzYBr~8O4tPt=G&^XTT6cCjyyT+>L8Yx(S~mN&DM%;FE8hSjUSPh8U;8AT<c|_NMP<
zRoIG=aPeaEC#TtABQnsU;Ev#jKqSIaK4F?iy}(jUZGX4Ji8-sjOyy@2XJsj++JY>&
zhZ_;U-{AxymNqQD4vw%8SMzouV8Qvzsi%6G5B@gjd_S?j)JlE7K`9j@Lkur2%>MrG
z4zFNAV%QD3z^df{<ep@TWT;+=pPy~t*k!4aj}g7)&zI6xl~om)k7Z-a`IAj&d{{6E
z0r|I@V7~%)(3I?FM-OiIhF{BvV6WLvtvz3^577wZ^5~$3sW9#PRt!lOh?S{I#5$_L
z_kcK#b!bs~;W{l>PrR{`S9?=aTiYVXHuoHBoo*n7x;NBqyom`Q>4&bJej)8mNB&b1
z(zgaobAty^HW-uKJj|Pf<_d2=(1vFLuY%ifMOxL8$o>onZ-&^ec;^z>cO8AU%DkiQ
z<!l#qluCi!NG@pu2&a~np}Nk~zib)XEms{NQPt(?-B<Qdp5)ttY+`nt19IGQRWB`z
zUWPPFtP;-t8THw5Gy(y<tsCr)e~T3J3?M8GMXa;Te|zx5wHYHuoL0>njjj2!P*zx9
z1i&NgE{WR(6>cF5j3<rcV@Ka_w;ieJrO`21uZQfBUJoi>OX}`?u*z=DXm7=CLg3i6
z+A4_xd~)ND>*HVcBI7|BXk1_u)9n|UHMf^|f?LVh;oM~%$bUhoK6IhbxYYMrr~AIt
zbY}$(is&y+Q#CQg;PSH7&#_c~m40KC*H<<_)}0>(x`dv44(@hRG~&wHc4}5bzE-VL
z2*+0cmRM~Cnwga5=aY7XTtZN(9=lg&&@1KleO?jT#~yqHPj?<JGe5WJI>2dBv8wb0
zG`mA-N~x<Vv{0r+<IaCF(!ZPZ&jL4|yP4FD-6!-ZH$-YNpgnE^%Eplen|qK6_LCL=
ztsyM<;b6UvTA*UBCLKU!Zqt+CVP4yeW*|)^LXK9O5{ucCpL^nz!0gcC;l@Q?IiNfc
z7+?QPe7_1j=l=`<yorJt`kG?Z64uc6|L`txea=H0O=m%l0W!9L@PXWfza_ox^AN(6
z+-Yy}kn5e~?HoFu;;luMp>?+?X|f!RRrxY*zSVvS2Vq*dGt5)r$u;JdK`D;rL{$C|
z;aPHP3@|TH>4x-HN}B0HRT<qO$&LQ2$iIRSO_+e5L3M1|`Q<-OPL)NukwzWHbh@@n
z@2Ho+2UDRgQvC$xio6!9kzI)tycH&E`;T`dlO|&!*^No)IM%<~mr%iGP>*<R0LM^0
zDEgaR$Cz9@ogFcSal!NuK<i#ZdL&YWk{thSZ$0+9j6JV-YFx7P)h@kaS+{6G?KJei
zc|Dp#;AI5=LvNf8gyQc)>Ogqs(CSH)aH{EO$~#xo1}$Mnu^n+(Nym#i20E!5b(nY<
z^q2JPsUpVNfOxmuut?i1ef}YpjAQ=XD3Ltx?~{$m(a=kU7_pqCWCz7eO)HXK+5I9j
z^~4|QoSY|Cb(x2PHpYX!OZ<O^Mhq9z^J!^{<#DK}Y&36&Vo+Dxstm~f>Z}8QdaFW^
zqFYf|28+#IO+MPo(kg*P6`m3<!YV6PyAyR_*v!S2mHi>_FyQC+L$69nerbMWM~O)!
z2{yeO-c?C1X*ZO_ODNhWjok&>5!`;+sFrv%aI+g=(Hmfs*ub?Q6o#Pk=xFmp3Z5rr
z4ku+EPRi8zy^1EFB3(N7!Xd@b%D~6y@E|4;)bJxB;u%}*5n47s&cHVX8h~mjFzsKL
zqzOc+Y|Lt?F`cqZq8tR85&+N9q=BZccPTTIQgB_>yMzX2S;2LF=QHa3Aei<5u;^DI
zEMEC~+m;X<dH5-ZpkB($2cQ%}n_6bpYWb%+@+GZj)52wfm~8n}g~#{ix~>%Gsn{Y-
zj0<(2Ac<r9(r@Zie$`F#G?QNS?L;8?1?C^EskQG-+_36RomPLm43qQ#b1Rdz;Oo>p
zYXgee9Lg!K6ygQDrQ%WfrD4;!DrQj7^uqIJiC(BLM3=)H1(;N5IBiRKyY>?lXIfHn
zGU}g$Cy$S)aQ~%8_VYpSI`S{Nb<{gY`;iO4J?r|kvOMiFb1RMd060%6y^YAjXC%hY
zVWJa)t+#Q-GVzVhaI#Ik`xF1c=Z)$oOGeYJ*z?svTp2}3BGqELIE$l#2NsdjD4hD&
z>R9KH_2wMw_gXipqESB;**?s;R&Sh%>M~`*I-X#oy4aMmMkUp(p`bRi?Rpalc`xy)
zD4`b3r-e5&-eAi5?d`$+Z$)$MHEP^lx3@Sx_F0%yP)<^b)*G@D%)4CrhXBA=Pg1hr
zUqZ4m4POM6gsyP9`VTrXPdrkvBee;cR_yJNV-=xgn_G(9QT6FER>h{83f`%no*tjJ
zjLLV_s-i;E(x%TdPSgRNUI0hhRqItT)xW<g8gAP-ofU9TEHU#1Kp$L{5j_L%VXMR7
z9r({Al5^U<;;@}>le_mlSABdm@9jJnRdk7m3u!8LrC20>BJU3yK|+{)6&tF|pI!o>
z8GaY&u~1uY|I#}E>uZL%GW=G-53bvLEQ!6z0c`z4x|+wYR#b+5t9A^!@Tz><Yi+T1
zo-W5y;Bkk|epbd&Sy~_mcFkT<ZAG~@6EG4t*I8`VQ@gIZ;Ei;Up>W-bDj9SZOulX!
zNR09*H*79+;A;6WiHxM`<Cm6Jm0dPdUOc7Es~88J;;I2C7)gA<E<#w;JJ3kCc<E10
z!kNQ21&M-$wMJJ7%vt^dS;A_xE`BMQVw%HB8Hh2u_=@2R@sFzpC;c+6Gfy%~rW!79
zt!cQjBn$?aVvt?%T|0zWVR|cze{_}nSge;G-iaE;4;zm?u@zqGKZ487s2U^!$T%w5
z3@Y@3y)C^ZGb*2{&ZJ@q_kU*IE^1#o0+zWo3tr#Da+15^Qf%>8e57Bnf`!&rgKJjl
z=<4}=WuC8)%M_dj&lbt@ny2Ov7STvfw^NiYYb<o*BWw3+`-=}VQ2+6r8Yj$tNn+le
zXtr^+i#a79@?l^*C*Ugod#eh(T9v5>2GoTONZ>Ii4_4>S;6`yEM;yvS>zUgDmm)uM
z99va|u%(A2voY0P=l|R*Y(DNUm&z59&Epmtp{s&tJdT=R;{vKY7tHKbZzy!mW=C)R
z@DS7X{5{UVgYYXRQ4Mif9d#SLmIqv|uafMzfSI1cWG!GqudK1d3>YJUp@mZuLDtzc
zayPCT;>9MGB%>LlMb@SdOsQJg+XT_Uj{0*j>!h@t)pt%IM@n-J!79t*?g?v6-grl^
zbMAhxIUxM=(K<HEE}*EJ!C<%$aOM;?K%Bw;C@RhEz8UKh@^vH{$$}D-cc0NwkKu$l
zCn91$R0ar?z{W?OmI1Vn#Ot$XNEQNv#jps=jsvxZ8^ekWdn=sh#Q$Dl`O`S2RWy9U
zSaB1d^bfVDM8QM=Q`=F+3=Xpocg+RP{hOz_2*L!=!2kC<Snk|LF^^ip=&r?5j;pSV
z3-43VV5`sE*#BgUQ5BRb%UwOaRz2S%0HEWq(*e#!3yfc5)<7(4;(x*U7V8#KAQ4sZ
zaqKd~(}vPhijMQl6#ZV}HS!|t&xALR;{Tv9sP<ht@p}Hi8&?D3ooA4P!e+ri>b&<G
z{>F!MuY~*TnBzr%8eOR2x+U5sTiK`5g@|54VJklH-vB&Ex7un~w}5Hk98_tQHAyl_
zmuA5QiQL6I=$s$UQpET!*FyveI(CUZv4_;%R*E-7UXhkN_JOnp$w@Cw6VxB?tz4SC
zs7plEZ0YC$`0w#UP5L9VI1B)QBPGBu*8>N@&fdh<$;q0AftG=m-h|G`(Zk-^j?T&4
zfX=|l=07U~jg5u9)BiJjxYE3ETpvaHj>$1hF-I0Rjt3cTiDzk+SVrA1l4dodlc)<~
z_D9NBm=Yg8e7-F8BH{1%m)KwDEVa}joi%UwdcSvhp}+6S6=z8)Sbqtmg02=H4X)WD
zF6GXGvSW`7x5)tKYPMh*y+9<U6GC(Dz`d8eeVL39{}U^!Jql&<#@i+gCPABSydT+y
zdW9!`?hXe{;v|97DjiQjJSbNp4vCMZ)Nj}(IEv3rX2eMf7$;7R86F{;LjpWw7OcZX
z9UYF25Edu2Qy4HXIv6D?=}JYKyf^EA>nj|P2IRpGDq$ZNEU9|(+2}K8Gm|5M2aRy-
z$%v%O7t0NI88{2EDyo1oK49s>n6Au@K~Su>XQ(dYUQteytib%t0(+Y2b_;I!P25Rg
z2zVwZ@yEXO5cQ?>5x9rw*X0f6%blj0h4?fA6G*Uz%(%;e9~4XvsUk9DH@Ssz`CKF*
z>fK+RMjwu?<cAiek!DI*5D;bF`gyQ)kvgME*UrQ#p$$e-jSd6JZoz06_?Ob1`>7fH
zf(KLutPa2iWYiv0`ZYm(IEhZJ_5L4Y`FXen#vLK<gym5+4y0pyPc!xWOWOmW&OSXG
zSn`|>-L#&|AMv|LNQ^ktyiNuLojL|+0Lz5M$=tbV_PlO3m|huOgyC|zs05Bc5s^Hh
zJV)o4nbN`BR~0`ZadDo2I3L-qOe9?}n0U+&TFkjW!tbacQP4NU@t=5Mv@saf(ULj2
zxoR^z7$EWGhTMk;t&qtSn|riM!Yp3k!TOf7qZdMzCY$IuwK(*})xD?4eQ)ZRe9u6y
zhX#i+U2)6;-T*+}{@F9G^n>w2`Etb0F_p?mrS0(n)|=pY{3f-D!gg)875=rzE|PMW
zTe%T4MIc6m#fIQV6O56qiG1oVwuqzxmCXCV#b6fMSw^}-Z}g)R88Px?=qw%UWyn<Y
z$Rs6CgHGvuB2;Q^VyJ;_!mNN&K%;!45kii48)F_JSz;je<7EInaTIw*0EX<s43Amx
zilAVfs0OAUbHEaUw8c;$!VypcL4;D9z~lL`fKkK(b*Di0KxFe20UZJeLXeC=W23Q9
z2z{aQxxMnag8d?4yPpZ)e<5v8nHe8PgC_zfXxT=XsZn>%J!{O9CMAbhFWU`nQYOTD
z1p;D$aGUlj`c%TK(5u0;y*#!(iw!j(GeKA(f1BD#Y9;g&d&vT1uKSwcR{-ZJ1pm-M
z)GF3lMHCr8NcNNNVfB)l=QNwHek4oERAq`{S;rY7#{W4Vp%V6&5-Uam^s3!|<;~TX
z0Rlfr^*02!3F5@t#blI7_PfPZ#ufN@wf8IwzTwBn!$5jMyj#UYRE|X{{Hq_|OsM89
z0-OjINdx#4hl1~#+^LH|5#674KThK3paRG*;Saq$29BV8t|;E24`B$gCl7#tdV^FR
z9~!<EA66HK3eevGY#{Nz3G4?1PaFL{01Y9o?&~iIe9T{<z#!8ZGK9_#!ryPnD)+(d
zsthXbWSGLl=pc@!sD?29=K?HC8RzePM_zC=bY(wiG@?H_XDcM8m0N)J;RZ}U>Gv><
z<0!`_Kr8j;V}M*uUPB_;Ut&9izcaZKe^)N|5!=8~Szy}20o*B*l~F-UVgRZ|w;=Yr
z!-!uk7g>Jo{l6(S$=;pZfco>~G4iUs9#5Y&tL$u+C|Z}TeFZ>)bABBtqH`ge40}MA
z-{f3zI)L8z{MQwTdS0j9h~t{?@&#)YlB&2^w&|RlsHApj(7v}Hm%|pHfUwh#_=jK`
zd}eDF;dpFihU7#vQeqZTVkeSh*c+0Ix}X5#*4=LuQ113^%Na@L#%n-#{yL+$C!J}Z
zigX?KKK=A6iY-@Gt|va5b?vR=ttn$td7?)>jH*zI2?`)CR6>Q*R)^OMc#q~Z-fZ?X
z(^C#nbw~Ewlgs0mIJ>tozA;AJrO6w3`BRXuQuOhDd1O};v!9p**_l`SkT?N0+q0!8
zI_9WBoZcg6e<U3q6wiq-3C{^1eR#Yd0Jv+*TIDQqsTmYtTx%4T5@B-z+W3Erol~=5
z(UNYrZQHhO+qP}nwrZ=kZQHhO+cs{U?x))?-4QEhto#R=bACC7$TAuCKL`u@3*}B<
zFt3Y<TnS=w=1+n5!c^5mw5JC5!V?@%_4aR6W8U5UZF|**{31L9C~M3O=E7EB4*;Bd
z!6n%e90GtgVO!%KoEOK|y2Gkf5C}9+UhZCYtb3`4`d}yXzg^|dmdt8ki}+m@X|KsS
zd6@5|xmlQQ*!cjgLI}4+wua0$po^eg4a9!XHu_+lun!vIJCuZVD_mvL0fMEcQ!AVD
z`n*gq3o>&0*`Kovv)KyZr%~mA0Py9RxzDg0j1KFwsx6)y-2IfFo^tQ_Ii9M!KPQKy
z-FmfoK!0H=mT*1Tpk3h^SFCk&em11tRMXrrE9Wxb#c)rW2Si@PLl1X<7rNcW9zdyH
z2|YyQ2q-$hS%Sog<c&38ukp<4)e;8i4RqzmuRdgdLWVLEudG4)V$}Pna`>2PbNN_h
z^PawoL$5xvHYO5DdHcjHeQIzi3c@Ut$K*Bhm?W?)_NKDTZwKNP`VN9-V7@&8`wuKb
zt&77mMA%&m7NW6Ua@6{^dls&F&t85EzY)!ZArp1g(8#;KV@wzT+C_3I8}~A6&*<8a
zF3l%j5$)X6N;snr#e9*%jaS*+lpoQ+b_<qiKFYV(i_?5lm|gLXdK8%-=@f~~TWlIK
z$=Sr&WpWPpq{%p|w{u+Ue4XrO<eYx_-XJSZZ+bmD*yNepGq5*)Z7Py3UG87`wP8(_
zB>jKK=nl_bMD)hHa+zvpkN()G*?P{Ks*o?5;9YWhd#N|JNWR2^?IvCSMe=H7W-I=r
z{aI6hl|XBSCPyIk3yo%5f=~KKn{OU?-&Iq!X;l9Vt4I>{Zcu*0yT#p-gk8sZ{%d(}
zEAbn+H>3Ia8{`YR)_C(SSXcXSBRjPVcZW)0%XSM@@&kg(l)s(gFx%T<LN2nxUC2kQ
zRX-?%gw3@cV`40W^nk@8`w8}qWk5#bde!Jj%Vyt{I^F5(-E4Cyrt#CZ{THBZ;AE5F
z#TK;D?#1nw9qL4OZTeI0U~IbB6f@yh=3b-u@U54=MB48+F<aPfetFqt{1ZFsazmfg
zy)AhzSFc5{sq@so<*ypBJc<uhSWI2O=wPCk<Q|6)&&kDfJlB2NQ&jt7qjvfE_R8NE
z&D)0Ws!i|t3qJDc;zLm$_o2aIeTn%lx2b*ugUnA+Cl2h)JN2yZgYl~&Lf^4T_3LQ6
z)<th9Pv?yej@uqP{R(5}(Rf`kywXwo<v?^PPTa|fv+=1upQx7+f%#-(DxxmxL;A8@
zHqtsb`V3NPvQudlA~)RrG!sR_J(kRE$dS;=5H-cxRj5ua)3e7O{RCpG=Oyi4JdTtX
zB`P!#>k>6S-X*9%fqBMi3Z<iu5PUK-6!$ck6eB8r6g1$YYmycQe6{CaE-6(hoZK|D
z0XBtA={xlkl%ZUo`U$WDI2qkxGFobJH7%(#Q}fHK^SDQ2ZmWscr(;-`V=qo7-j`!o
zoDJWuCY_uO!LBCHUBS~l+ZV74Q9gqva=S%LNOuO{xrdWxx$wrRnzgC=_PQd)*`?a}
z3q0E!2`9u>)zIe*@g&ynjr>gJuNNB27BqUGB=C1<7KC`Y>E}sxpL5#L*~oD6Xq!Yh
zIdm<&96XaY)*qo#;g1X%7W8Zkmat{kRv!%0U7kC|<i>TzlR1&^_3CrE*eB0)+pUQb
zQxQzz`Z`4--r(Ti2-l|<Aa4TgBDkM}J?lI{xY5nfx$$^^pmWE*hb0+r{Nr|0;w5m(
zTBV8)*~P|$->3!$=_4UbTBk|fTvJ`KKa~{zMP<{y6Xvs@%Zpvq`AyL~4hNo(Ls6$+
z>ALvqJ~Bc-<1WiWms1&f9gIB<MIXDNxtk2l(cEZS^U>_mySs}+UvCEvK(_$N#R~bn
zTmJxm+9=O4xqz(LcmxSUyR*IPNSMhxuH+!+?$@OvnKO}Q*dE&OW>1sE=}6&Z%%)*y
zm*Wc*3QMPaSSEqq)fYq-yV)%kac#1e&!oy$G@2$~*sT6{>GrSG{qNF!t%!-J^;|fc
z_EW)pl5c6f0p7Kz6uuiBv>8?V=y0MM)#i80m0LIv*n)83zAHYo;G?#F-9Hj@{Ws)N
zevy5_-nq6YTB=sTLr^5eO+53^d3+(QQ+&f8@c*Ax@CTh+&>#Q+!v4jj{*MMPLmLMR
z!~bPi8UByKiw)_A<_Ai}jCmn6A0o-i(bkiuSEn|4ixc_NX}k#!RzwI5H_8NJu4Tc}
z|MNPiHtBfCjoBSjz7G@)9<6hh4&>@fz$-(-yOH4H{w$1y2euj435UFrrA<r1NPFdm
zdb0r7sebQ>W`F+u9s7YTwzi#ooFqA#1C=ZzgwQh_8N_oGRNlVL-ikZmiR{jUq)onI
z?36MQHh}@32=~ecJ?gqfa%_}?Sh|Hskw%h?qi;-<V2lTXbKf0Lo&=KUV0e-QM&roQ
z341JbfKCAlCSH^zM-prTW+@q!pr4(Js*1fAC->*_tLX~aF%>8sA0h*+Q3i}rMjkSm
z!IsdJ$nWCW&fb0+gN;DMV&q(vK6jD&#fa{RX^CYH-#^?R;4zmaAxYe%g(!JUKe5%Z
z%_#Q(yJ0qoBo_XZdQrR1VVn>m2tUEI>%>?<;z1#U%5QRQ)?hb~VT`Efn4O0;BDcOS
zMijGzNrdJh5%!j^r<>!`^I`T;Ngg3LI0|1x9VE-8bB~go`p#qj8erv<JDq7(sg4X3
zCU;PPB4SVH-6@*-S4I26^PDR29#uOk=e-*TlH>F@U4aSO_!hZi=+F<0tgw^Ju)%<=
zB1?3r<fU(zCLpo60PSwZ(T{`~&QV~Oi6m!s95vo!f}{<`$QigN!tw8zqybtRs*ZTr
z_j4paK7O)3?qc^;cw#CuVtB?8h)XIE8gNV^C&|tPbpND*gk3d)6(Qu*52(g$8c&i8
zqRUK1NHs)Vf3hQ%&prl|3h6;ADHtG8rN~DDDc>42H}4n2P18p2x!Pu5*hy?QyWCEj
z=i=;N!5x^*u&`?i^nc<{QaL~oXc8@fd7$W*&23)U*Q4#W>8ck!>+my|ymP@60dU(v
zjTGAb#gSP^AC5Oi5d4~j7Ft<;u=4nA^1~LK{ZUGvtAV%uPe<`wjE}^8eC&_N{M-Yp
zg&@PsTC+|9<&<Tk1-w?}k{+BZmB}8wR&w<A7l}m?Hezvea{SU%*5b}1ciVO%TwVqj
zvomJlSD0;fmmOSuxmO2?UcAeG>8QUTQR#=@-{&q;L7X#~@w9cNs2{ndnwNKjwJXJj
z-A!C=pLT_Rjb7`{!q#8&{Q~;Yo22!+2)yd#w^>y*c6wO2)?9v1?E1qIOY`qi{(Q6{
z^(N;I;+!q?wTt~^$J0cSS~$ay$XX9u@~X+qVmr7F1f>i)AFS1y1(LASOa;urAg4&%
z1IDaq5ml!)>jEEa1Vyr*T94G0#|bQstnX{3HLd`A9Fz6bfjAX|-i5h}Q`Rh=HRUh1
zK#vu)_SM~p6+(f&L_u&E;`RaZu2#bW;5`c#!2aqSq(DW!^I3F*CH3P+B<@m0fU~Kz
z!5EwhOu%B41_{Oor1DN(XMpNKXK-6<FfrrQd6bk3tn@fmVgz*>l9)PNnM0zHak!rh
z>)AGEHb`pfWad@Txf5Ep!<xd;Se#zkdpYTC=uS6Lfgd&KPFT5$Uz@aK4{39BoxGQJ
zdJJYfhxr!;JI(Go+^dy-=i(HBgBw3V52=601SQ|57W;YX@l5NwbN+IDur8q=!#6#7
zeM@g1tc<qT1M+`heYGI4ZgrmjfYG@2L~X(x^6sX&lINbz5jC<4Hz00V9j@wYdeFvL
z`zTbPlBRgo$hHa*g8o?G*tD>^{%rKO@NfCjdEPYc)qh!n6g(Ib_dzsf|Jf~>o~pY%
z+aWFzdWl~6A-S+29(A*`DW{D;9U-Ia?GLR6#5MZ!1vZYC&V$E(zBim0B23Ibk}DI&
zu*>tKbg?%(a+3_KPtYe1*DB`Wl>m+LX3DA+-mY#`A%Ld5*NWC$$*CW&!U$>y?xG;G
zKBcyr`I4Ja{rics?J)Nts2KHw4E@;x)P?rln-jAlJQ~ulPHo%6|D#~2f4K6fyx}Jz
z#ZP7(s1St#O5c=iaP!ESAvZ`caU)<z9?``R%zeX$JgGNPYp|w+W5LZcG@5==c2UEX
zS&@i8#X3Fo6fWkl9%V!}S(`FiKC3+41$C&oh6F8Edf~(eD%W7iI5x0HW%bO8Y}W~Y
zW^?@wnH<?HV$_Azh8u`ZK*-;!MBqpZ3Ej}1N@1o;yWv1>5dkOCOxO{&DRO~r2W*vt
z@eMSg!*pM6x~*AbI^AxX&pXF0zn)a+3A`#nSS-_a7=Euh5?Org3P9IjIz4$@SP^v0
z3BYb@Y+#^Ffur6`nI?ZRknEndVhW1+++J*F0VUCIaq^cT4*70dEM_hZng+5(I9%-%
zTK>>Z7bEUrz#*j*rwK>udOPl?0~++y)z49_X|NTIhoFj=!^r0A_jr=-J-e%neobQ$
zZrA-)0xeRMAuW6GRSb!I&LzL`$X0U>D=ao^zl^1d;ZSwA<a+|<nYok=Sk{4ER)K4l
zb^j0VMst-c_E|!l*dN3SuUc%zH5Q?Bo=u1gnCl;2;*ZXy>KF`-#r-hE!rOz$hPr;o
z*ja|;4sd<oI26$dJPyhG#FMt0z+j|Z8@UTS4)DOn4@$CSFCmKdL<H8qgt>LJDp-{H
zM`luGab{8;lO)il%#?Q$>7qKz8$9eyw(av()D+9EqLQw<iblHXDH^M&q${qXk*>Oe
z^@{3I7iws&C^i>GRnegf{&ne4^blItBis}^C&Yp9+0Wc%^FCMqc3;d-cHyvZo4~Id
z7&hPI`#6#%$wvENpDQ9Oj=m0#u6EJIKJzeaZ!IOUM3N{Lt}OL1p!F=SE&r#Ps`f6B
z;}jhLAVUfOfbsu!P5NIMZCV>cCv(&Pr2(1ZwpQO1Tl|;Qu4e?ZNify5F{Yd8m$k^{
zBaxMpK=$f;PAq0sBa)6I0j7h0zrLNil1imV5c1eOLFn4a-kh2Fmo?)xZkEJZ{?Jo6
z>?g&39HXzQN8k6r@<bmD$>``&W_2z6M|R`%W<Kd3AE$m{gW`82H_Vn~f+^H6#@#i)
zMIbc0^_VJ@zOf2r&3l?~_CRn>lLbl>rx{1QA4Z@yHdh2fqsB7!4?$*YD5ZfwW{c!Z
zkPOqC0?V1j>~(wNFx2bIa$tGk<#yocd`KdkPgNm-9fi|aleYnA0rcSkm6{V1D0seD
zMHlbQ#wqr7<cJJNzZ{l4dM1xV2l5)a0+|bwWQu#WYObuLrVW7{s;>>57nR*xI?`z}
zWO{%G4Y23$=O=h%d`Jobui`h&?#pgy&F63C4^O-5!;3GxV<4Y!W`j6IfjKj-m&2mn
zp>QE*u%uU8XXrXe<59}suK#u+Tws-29fi|j33d1H^8GzYo4HIzp);ccM_7fX!>~BB
z8Y7-5$+IiBf`9vlDS#pSFDq5rU;ut&y0g*|6t7?L`%;z#m)rofH_B>L=>pMQWO&Q`
z<!AmQrs{!%I}lM}2iL8h{z_=^&ng_58w+XlD#H2DXY^_xA%LBTTB=CPWaYlWoy+BA
zASAUEOx7I4=VHhx)CQ|_N!;vVV|5MFfg8+02MzheB4h##d0|h1h8M11Mp!w;b4U4L
z0B$VZ<+6v#XOGc!X0xrcyDp;}cJ+o^V^2-GnQ*P`E!!%y0?MWvl4&U%FfE833qmzy
zHQGzY3Cvn+A#}|@h*Cs4fZ;iJvn_Ca74BK%#ihBnwzjSSh73WAOb`W#U=JG%E+y-;
z>v1I@e)Ba~3(b{n6@R<d22G22);i-RiL4D11azCyts@Q=0woz77?egub&Uh2s38%7
z=vIaZVn-x$M^oRpDg@Y>?gnJ~E(t>Vr$t_o`CfR<0gPd@{P&!jb#gs)9o6HY15WVG
zoRx1{XGAj9mt4_E^AffYbS!WkItjv2yRRp|kKXkw;qjiz$l(z7KU3LDRj0gODB2em
z@8oMK!9B=Xo3od2GYUP?oKB+I_(wkX@|v~fbKXoBv=CYyI532z0H_fWM<c$T3<p)t
zeLZ<k2*O6#mYb@;O9fm-*m@d5;8oA5_qd9w@7^g)e<9GOJP#aVB6*zHK~NWdc!~vp
zy=S&!&=C|+z6MiFKEhE+6H9u{6-Igoo&-Yjwm?82!T2HXNHcV703cHSAOK4cn4xeC
zew@bvCxyKptBEKYfR2n9kA%P!fr&ZrZDyw~S|}uKz;y>=yfFi_Ksd&1X!hIA7%;7%
zRa`&9VI;iU-@2h6n8QMbgU9HEkSSQe+y#QnuhP2Q_4X9601XI&Do!)N6NGZuO!o4S
zm4TPqD@qU_d?Z;CROrlZEU!Ej9T9%Gb@j^nnGYN!oD*7Y6Bh;FAv%vf;wIvQ;`%fL
ze$^#8oWYMCh{6#4MmcCP!6Iq}XEc&z1(7!lSZkOWs)8PLfS1*6U0pCWsJra(VUiJ~
z(K%75fCbQPi-W>hBd@+E4OE%YopfRTv<VVwv#{nkLLQ*#LC_%9;sZ-L9u;sjf^Uu|
z^1WAvO~t967B?kLhPu;GQCmR!!G%mu2pKrtq)+pmc#{ey7(z}I6ODNhRcsnUvGauM
zwN_-8Y%89VIQBanw77o3?p_<F<MxcROCsFklLjlYu=0#(rAQk{RZRTneCVQv5Ea~2
z(_Y-}_t*s-Mbwx{4G06d8a6Fi+pFZ7&z8q`q9BOC2N<C;;N2-}<f+%1Vla4ONe41n
zTXIx{GCuqHAuzWrP0W!7Xa!Wxyt>-lHe=y@$R5^y4$=WkE=<XIhJVx`R^?y<$$S<f
z*QqT|IB^SXx-on3@h<m!>oE{WFy^Y%AQhV?CVUX&$(k8U{O#xg$V=}5G|{fedJIyJ
z2r!o5+SHz!`s6;m&O~3p4c_wP@W9$mryVMa;v8*O62{>*#@qO^N_$Hw8u4ahmJl%l
z5D-eaEVa;B(@E2PlEgq9LZt}-65=>OUjRth6D+uNNwwz<GV0pdD@f{=)Bya=@r2`u
zjlIdtWrLZv_?1n};Q4wuH0R<#dwrqe8G?NHZovlqJFu#(mzLg@ncA6uU*&eS^Yxci
zr%GiVwwh2Pxg<B}X6c7VpV_WG^cHw!yC5%6r4y$pAsK2*eg8s@Ikg8svUVOLIrM>v
zZQaFz=~=sI01d;N`hw;sHTLqv#>%?q^;efR=Vvls;1(ZsyWSEV<|l}jS+TW){|;TM
zUEVL+MGci}KriaJTO}~$0M#BPbs|eO7=IgO)1l%u9ug+#DsYD3ZgYkJn|s0=&Wc}P
zUfqK^`K^A>`**k27d|(A>JJYueaV5zV_FArl{Ohmcg!~rI0*DL$?COH(O@f5h>8W)
z+LI@MEb?Ere~SZ8`HG`qz_DO#Iu<PTfRFKRb&fExXlzKhTAfQw2^5SHGB!xTLjz=t
z9M5%;De(MFlcd_T&&x@LsXEO=)C|8K3+AN-UP13MB{qO!w1Nq2XRVr+_%8}VF5NHv
zg0<kgD7&#J2ok)&Y8RRFYZdN`a>Un7PT3__Tlstx=qM&mF;xW&TER*BoF?L%*M~dL
ztY1YIsUpmfvEf1GZ}vsFB~(A!B0~szvj-qTs!&D|8Hjzel+lVF8HvJ#G{$6@Uu!}Q
z*(y!$_B(&LE83McQHG}K2)9m}l&alxQBf9(3Z@##hUwf+JjlH!o}Z>J(F9H{G}^5A
zyFK5<<yXDMjE@JZwW?U}uJz!J(7ycdbM<Zw!k0GFtU<}3pl-~3y*A9JKc<>y-$pL-
zO*%0%N#{B)w7T;`=C>}&{jO@8Z*=oKVUihQPK41d@ivKU8uc`U$!D<ZP!cEv1{@iU
zW%9^g>43&k;WMszl|2&5>I5(rEo0;K`n9MLXJwQzAd73?Ch&s45_ZAP!-0UHcYKwo
z>f2^h%mxnp*|QO&WEv@di+U9F)zmhfa;g%ObOm&pR0|=4U)L%c2!R#f>q^lW^XTPD
zH8i34;j@Q~LD-&io*e=Olfof<!U={h=>-41fZYdYN_WZzemL|;yh^cVE{qg4iP)i8
z0*&ShsH%j7Y&H^`m%&Dd27xVW2^m66;k3}(wXYTq!Zxl}qBMCxvA#DmK^nLN;FZoN
zJSoGDQ>SKZcnfyk4fb49H!e2emG#|(CPK3or^<}_Jg0Z$;JE=HKG+p2YCyK9MW@$t
zmoi!L+25ixsWXT0sz?`!q-Nft27)#)JoR{bKW+YNtmX#C07s|AW&ptXI?Jv+(|5En
zp;7jJUal*NV?dc%`o_QbB9Sk2fhqZ$yvTpg1%A%Kb>{UHT{{5k7YB7kpaic|l(J&B
zdXVCC%h?sXqcHqjs8?~U(Eb4NH!}pW30iy!apxjPSyXvA3d1ecnTT1Wcpj}op$T0~
zcb)G9A>Buq%7^V4E2yAJP!bEbMFxVj0YZSvD(a01f<r2HEStvv1q-MOFHPK7P#iX&
zrn^JobdH}wvwC(KxBf?Bz0CvcZE3A<QDrl0Z}xf1Z-7UWWM%PD9NowGq|(@<HD6UV
zqn(6~CQH7fXJLHHA<Ju`o)PNM!65{c)T6^5aqDhaUSp%yPLFezVpOE$_zONk+fRY>
zyV-Zb%4Lp;LMVy3DQ3KBp+tBV1EeyTDPe2AsitnK@VJiXd_|GDAc+)SO>G_$Hz^N$
zcdMs-dws>%2Pb0j!+jk<#vC`a{3m_9z;bFf=md_<$WD7fOo7vvTugx-1jQ6J0_v{`
z4{e=`Zr01Jb(YX?SNXZNtKc|^I#C38nF2|o|H2=Mpe!UTX5Q)PjHPxKbCxE@nK`2z
z8qD;etKE98$|hQLbNL~S@mf+>9T(0kZHrZ{A>NqB3|J!XA#|e)M>Vm@Zh5SF+X@xi
z_iFmSkB7>_2_{y3vW}pTP7Us$p2euNq@ip;-824ar1BfaG3ifct-Mf@5LnDX?$m*W
zxFgTb#2NbB@R6D8Djj{CB9c(fnRo)>gxCNKV{kB$;VI2s=(~`l8w#Y_+ez*Xc-KF&
zo<Ko*)JW+yXa>^w>zFAVuD{Pkjq24!X2tuY>$u0EYPz~fQ&F)r^VgIcs4!F?u7h?N
z+?}1Bp)^a=Bbi&<$G)2sCUTtE*03>tyN=mHW?hYpqjs5b`)s%6MkkeV-9ZAnRiYKn
zp|TY~+-_aHDMV;E4?5hDR|F%Ewd=NKu+%YFs6<vjFD?9k(ne05TSta7k{HUWc!zrj
zGC4S6lOgp|(d_KXlJq?Bgiv1`Z=X>7`uw{xoU`E!ETtKDIG+z3i+LMHkBw9=P?w#g
z7yDphy+jfEnA5nL;p9Qr(qN_(TxA<c_Vzz7*<i3Vvi%vWj7Icnzd^+`^82}9*^Ug(
zkwrA>na{p{ex@tgv(t{DCV%Et4ev6thdoAQRbA3_TQiqAGJ-fK3mXSug_ZWxXJ|L8
zQj#`uUHwcQWj8lAE0@u@yqle?!@|8J2IA-d@DJKJj+1wzt=A}+xFkbXQv2V~v8p6E
zh)MyEJc%N6$wjY`RT7V7U6n(1VFay*9|f|C_CxNe<l11VmF+0eQ>Kr<=fb~bWffP}
zN@OTSDU|sMvt?oT*gtX#Q!G^hd-T^;>XC_cHE*orc+W(DbZk;u;~|LzAljSd=Nar%
z=A{lCK?05YqRcV+SGVmHtL^_x7RzsnnGRa0sMXak7jS@55OE)*ayP7P^~Kt9ZmyGc
zpj@0b3GHn4>1d3!zmif)mdl5HRA_1*WniF|<K)=-0fG%}>1C(0LrZ}!<yz`rMfeMR
zI;n9Pw!^Rd45HG;+${Fb)R5#X5<9puu||2_aibrHtL8ZQwoMH0{DQ0e7;LV9&i5|2
zWG|};obcVcx#SUg`+H#i<HBB>j^)N5o(wY?P!jkZJZE*WN*NQ@tXzqOf53GUz!{y<
z*w58<Toe)os^iR1W2b#_oj0Qt`*?VjxU0VDR@+}igoVbUr7RuXi$V~g=5Lm{M?b{?
zGDd-h-b-)NPhutsG~s{F*tIx9eq4E`LN;{u@-c_NfK4cH{eYF+V)2U52(^3pt#pT`
zxTTt|^G;szQLCXiZ7JJ#&)Z$T&P|qs49z_n87!z=79psFfTm8+grUlQiC6)g7<9BR
zk5xn7p~eVa`nOn;X71Mh#sp_=*~FFXB~D+<f7$R7g8L4mnEButGdd>KbTVMp->FDm
zW12yy;gY*}fdxkB3bW_$??B_Iqv$+!YSvO@_%7YH#)D_XCTc}z`I@mX+y@75mrMX~
zHDrg}Jm|9I-<oqgrY&|AoF6hGM-bPxip(%QM7udS%(3N6tsELI{Vjr{*9<zT5-;b+
z`(QQ_6PxlOBKK)hQ(t64^U0^dn$5jsqs}uyHe%)z7!cQ_<a86}d0D636ZJ9i4)oAY
z@b+>96SDzdq}$;RrZs-Rls_P>Q!lnCMKz2%;8jKRHD-j>B)fX}DQ989k2mXg=Y;1a
zdiyq5LPeZRA-oJPxCJWB{&T<WBl7gEPP$-!0;nUBc}Ywa>GPEytq~7_|Jz}L^hs@0
z-)<5k3pM_$($u%A)1CUm9v&sG^_rdO*Vh2NHQ`DYcqfA-wxB%D^K_Lb&K5&<&U~Pb
zx05<yCvb-pK>t9G*@&a~6*`47FmyWB?(X6tU~^bW>E`q_37&=U!4RgDo)BZW+?0v#
zJZKJKq_$gG>A7Ggwc$auup7lw#+B*k7W>+*L*xg!UM=d!x_K7C;opnAeJ=Vm1Ra0$
zbVYEEB46~YS2`vS11!H>F}6P4!)vDbz)FTNu~?;^Gjy)hQTauOZ#zHdf8F)*y<?gw
z+Hf`87d0vg9lrGDCD6~mv{t?WYRiyA0a)7k*;)JM4UyP+nif9syuA7a(yflry6^qV
z|GF1GHO#-?M-7H2+Lu|qj2&jTd~Zw9O6<?&t^MyZj+1apZJ8CTb#C+hTs^fX2Q5C$
z*lP`M;&1(v2UjOMI&>H~`*ep#Ndl+sO$+X<$YZ{<>=sw@!WjiVTGz%a5*m43(?ROp
zj5dKl5y4&vVD}5bxBw6l?btyz8bW_wfnb*wBE+$Em3gJUQRIZ^)t*x?I>pRrZ%P3O
z(50H46#Hl^#?(@%LaH30a>AW{UKdK5gOKt^GOUjmObHvj^)bBl8Ph~(*}-=tu0>`G
zK$hy#S^y&h2W+<Y{#B_<SAh8u^}Qz#vAc?h$KJZpjR=Z)j`O*v4zv0x{XQ18!{gz}
z14j-8l}CXGT6|}e3YhomJB7YQ5U`L=>I}sW^Hg@%pILS@b$~zLz1Hb1+VD6fhui+A
z47i>@+~KDrX`+`=j1wFDOWjW{oc{4W4y)mgQ*K$~7DBasjTWgp)rZd=X?(Z<f617v
z>&~-u+ZMAwuLiae<^L>Jx~bn$QYdIY(4RN6f=#eQ&GNPin*m@(pjQIU@|<I<Kj;x9
z1fUR^zV~emfHxh4@ws*andWT4c24oQ>yGa_L(?(c;i~TkWps&`oCdeH%Db&n|Bx8(
zH?-<pd_5f$YjFkPYa9_5CiP}a?~eEIy_52*tTtu4oV|T`o%6LO>23IdG~oBUCCJ|v
zJ?>k?1seh}=pyjfUG(>wYkq^7#g5y(T-uZ0PPS~Q<1SZIVD(Tc=DqWOd*unS3oIl@
zej*;J3ozZm+b)j&d0kS|h-yxauH@cPfO4p+u`qn0kf-^>_PWBxw7+=JFMrd1Od~j%
z<tO~ni+YnT|H58e=$vuqAfhII##DZIV&GT|sF4EJ7ZDXS?0ATMc)~tX{eI8#4T);%
z3X@JOp;RnyTpl$pAOmSM9cUsNlvgk@JB%nChw+9+RS7UxP)u|q#BvPrGu=m;>Nzp>
z6-wUM5f%)Hrd)Kdk%-Fjqs4r(j`?^ML+X}_lm8lTU@e^IMxqNxD}lZphZ0<MT-akJ
zRV>drj!2%f2R+}F8G{+(vlI3@VSDFPYr99xu3W3N&dvUBOx`#y0PZYe{KB6%2Td(l
zIin-Zk@4^)^BG6}F7B7{0T!O1!Zm%+&iEP$`btgUp4HrnO+NBqYhbuv4>^UPIHoa5
zl`J5}W&5z~8kCFi!aqlm&5{Fj^5O%P<;fqgRx{EAd)ZVo?N&rQwTr&}xmlii<3?@V
zkce49V$Gg1VReR~qs};OpX_5Xw*vad2+TV8#o{c$Z8ltU{zO$&m4gkD)|!K}18@D!
zvnVLu?r2W2UW5Gy{qJ3qgXV3qgh1ttOHSCRzuX`Ty=+Rl(Zil*Ctn3!<nK^;u~&6T
z#<jsybTTo0ls}dcf7@+hHrlN`{q@n1zpUtp#79<U?8ckrWqkTmCx{-5(iRs!aLGAi
zG#&#LouYKE0%^6YzaebZ3bG7}sEdp-@}f0VB!1sqm`>u1T8thwcZq<_nn4-92_txi
zC79Aj7Qz6t^twz}d7+!ARD@Jw*d~X4FXEX<-!Bz=dWi_1gD+YYjysj>oma)!5j<b=
zcGrSf&|qONw=Hw3FXl5vjOXtKMV|Ff73h3(kZnGPrWg(`2jG&fcSs&`iUz>b9Xxo)
zs4JigJhueztIq;bv%&IV1Ae*Du#lc=y23ZzLR{p!D8Ps}MQ<;SvUFzI8IHK#0^oC>
z2}z?52uhNf>QU&bMryiZ(Naxl-6*|mHoWhM(`GBK9eB#|Qy>0yyb1&btB^-V7vB|N
z(Cpu61~u#y1S(=Y$F@tmW?$!XCTyNEjKQbC+3eh+0f3=7XQz&i8SM6l3r@ua#s6df
zejgdz;_(^eACY!{=1!B&qUG3W1QN_;6U}e$TW<cTLOmCFI%#IC!u+nv6_2Bv-JSBT
zSm6G6%v>vnYb9F!{)48I-)RG`rLwv2avgbo4*s4A%2bWp^)W|dTd6X2P9Z?T0+Sq2
zLhfr(;Y{()iT@}mWZa?dj+m}jrz2CDMvi3UaAKogc|_8QrO4D+0V5v^e~A&gkY{#K
zW@XR4hHaO5Y<zcB%Q&ERpHsUp@aC%xi2ncxx+lHeVS4J9#wW68tSRI*HD%;8F%Z}0
zWiCQU4=ekm=YND5XeU+GO#g)$7*YPuVFniqS6ie1<t?FF<63!>2kF=57u70>Z!p^0
zhMWX2Q;)LAo!27{&cXS5PDZQ+^`O%Dodk1i@%;O`m3q8B|0!n%B@F&@d-<c4enYqP
zGv-P~>1s%`elQAKi7ByD*J)_-&sYt5l!zdM7b56>f({)9C$*-dqoWib#E*R{g_A}(
zDEb0<xToCAeE`X+43p!a((ZLo@gj|3s0n3xR0?E)mY5SU5%$=X#_&vu{1~}jBB^d-
z5VevdnAs9hvPsTyOkHQlpC}Vh$+w0nW-XGKEi<cpTW#tUF(K#yV^P73Ag^{HX@SCm
z7T1rTvul33ofV#OYQT{N8LGtLKNB1{=pj@bEeaJWpWNK7t*w0E;6+oubT#f%8Mv3x
zy$X|Cu7ds#ApQm?`b5f6s3dxcgG9QC@I3nS^j~3JMW&Q*m;X${Xe|0n5<w=lV_Cb=
zj2aZO6+YR$r1I2v+{t*FciL`)A>s>BC$4lCEX$MyqEX8ZKj(wT>-zBiy=BiNl9**h
znvSvr60Oi=7@C4ZwoS|)yW9axwIF$j2E?WWW2A{O=Nf!S6TenzZb<c1sJ$i9?T7rT
z1pRS3a}H>yJnsd;F70Kh^_26yiv<Nn#nRgj3@VWF`6wK1QK}kHWfww%wh&dHRSJ9c
zDkAq>YIu>FLit*dxyf0(MrRoT>a_Jjz7KdcVw#aj(lPvaA&)FG%<Tls8Q=Y826+-_
z(o{Wf4*ls$8Z`zC=1M{-n4a>fs9nkns*eqRcR1EAJYh(R0BofPSV$foKcCYAp8#w%
zXR>0>9_WK6#V`oP${>KDgZ+Cl+d^9AAp@v|N`z_<=(P_hEF|IXfrt@6DdAcQPd}nL
zs9dkk2e|{hIzhS&Q1C(26@7!GMGs(iO-2A>c`<?1V+0;Ig3EijOO7*9A`DTkp;)3l
zMEUoX_?W#u4<$+j^J-_TOX;PTUzx)9I}7}grRGj+QsI{`9>o(<vPVRJD}m9W6Loa(
za=#xJF1s2AW&qDjK{+PL`U5wwNukA-W6+t;(&q4;I3X29L6hSk1UgHF@`PkX1w<tj
z2|gr-1Yi;*0@g%{K#d|mfQ>?iAQ28{0vAcMD?o;DiPl(INZR%~vWH=$iH1`}7hS~F
z>fyeSw1m{ggn}Gh!P#EsG}KZc#EB<01Di%(7=@Ag+b#OY?kYbYj&0bu9dHe}_EJ`H
z+vIYf@`P`pFqBsV)3|s~p5<^xJ!N<7<mJrV-S6O|n81g}E){D#tx@k2^CixN2_nU8
z6>X2cu6z#XqQ(Bw=0jPZk5<}T05QG(4YQW63WT1qek|u?;B2W{x+KkX<>732L#jph
z-u5$K9R6T*!lesAwE8B7J&Q%R)soH=Z$6qnniDG8!8*2f;_&SJo&f=h!}T2fi&hKv
zb#nE#NCRQEj~8%b*#C*Ft>*te4dQR?-213G+^(!&IvYxdQtdq}FCj|rh&v*y<wdzi
zsU$pV+cWYx)71)lK?s06g9b1-2e1Jr(qHwf0@oBs79X&3>jgCzY|!!<lDC>Dmst^Q
z`^+%Cj3rYl>a3WdS<8~He<xMB+U7HSlX6Ks2^n5<sej5-(!My=t|^6@?Fa~r+oVqF
zt#iVgt1cQe35SvI>88t(_*r(+1C~8KKJpst&<N=Ss~~(Se$o@sqfVyB?vnimhvy<f
zQe`_1q}`e`a`ZiHc$m=65AUR?=CtpF8jNoAG;IQK6;)3Pp0n0?R0D21yC9q=EFB*Z
zx8n9;FgiKRzKA1o<QmRaJ14@6h>`LHR;rSJXj?R=-Y-WSYEB(UcNtlh*w=WCPSGDs
zF#zt;c~mEXz^f<?bcsT;$8y@W)w;rGmQzJ5+$gxwWF~+G*9vBFS-~HwjPESB=(}BQ
zd?l-{;jwK{v0Ea9^Fp+gY}Eg#f;A+@*)p-;bV8DfT+La2{8ZW!Z$yr-!6n9U`Llt$
zIZ-;jocCe1WTM6Xt^kjb9E}%BLo&ILNXn*0ksQRiLXSIBdF@b#3Rh}J4c_vpW*P;Y
zUz)82UWRWA+vDAo*0Kp-Js%jCQ(tFaiW>s2;4-*f-M`deG<m^ZHB=`COU{}l;p`$`
zC|g-5TguFckZR(O1_V6Qw+%6P?ci+9(Z_Lg&Q!=zmg}kiT*-rD$nd<zp8X<F%4<=K
zJJCT`+86xbboq|w`Ewqbfm$6`8pIW#0o%_Nppe$r08b9FBIayzU<s4qw*R#f(;GW|
z+d=(deFfS)D7N~6ZF_4A-%@ye@7C0g3c3g$@tpUDI@F0(`!91~#|C3o_}Mp2@xi(G
zI?V$2gbm(ur&OIBBfjpxX94xuEsDbXq!=Ho|El=6{WLQ}oc}a)#rD|b?J&#Y6#v|S
zyrse)fl`+fBm7$}@*>E#Hg9bya}{&OU}Ix^ApGM{3+wOeE<d(dGl%CD0~-#p-1NEE
zuc&JI&+d1y%*EUuqz&|8AInwBJPsJO8_k<R|E!{5+EveNS@>=m4qv6VJDZMtf>xP!
z&I~%#a}y)z@C}oxQ7rH<+JFO;vUoqbGCve?QWer$lS?ceNH<7#Es@pq3gZ-$^o?hM
z{W!zjP+p0!{MCxf5hORi^M0hF?Yx|I`e(bvKTF@wV)<&V@0!ckv)#!cTF8ij{TQeO
zgdN`ORl|~sZK+=J)VWvq$N1uNgVLZ@YrpSkZ)o)><c-@o2iEoVb^B%5;#e5X_P^<W
z`&rc1<j@miR5G*eQhI(2i7O_F0k?zCuj0pm@lpTFAfu3J{KtU{-JcsK@?BCG^4~r~
zhppe%-A3<bpLz59@Y&<#iacE{7Z<D@r33stBBw(#j(-6|?f`fZv^QkB3`WK&L-E${
z|LA1GTCuN2Z~*|oE&h+4%zq3}tQ>6rODA*1v+lMjmO8tqu0o+jL>ffYr%JnMEA>!d
z%>ANqBj<#p2~Hw_$Oh2|P(~W}t^Nr7XzFZFTSf(ta(u%xm64G(gjQj<-J!i*Ew%m;
zc~!e;;(rqUsplbTL=S1DeZ&!EkNoSDf!Mi;o8h*KmE<lR-xb$=cXdVTnJj|e?I~7r
zX@f~>87>nX&@~K7>3LbK=XBhjy@6)nbw1n8@T}7Sr%O+m5kz93Tof7X3a4T33h_>>
zmHfw9dVqrXatWAaeL;SF0G{Vyd#am**iYhQo(j%~Jj?rNV>T6qeRRNaDmy`>aSG4?
zyzfxE4}_nXVEFmr>1}-WKljjB)yM)TAC{?ajjku+bv%S}V3VnuXr=y}yS+U<HzIuk
znPAxz?OW#7FP!w*rY%rbDfi?0ckp@dr1y<e(BoIBGQzK^U6DcBr^+s(cwCNIBJrqN
zc!{D#k{GF@GK#nr-Ks}5f!6%C$)+yXx}K7M+pNhEG7+SZpqzxzZTGM3?RUEU*nC~d
z_LL6101iI(NdXac>AQ!BTM6vxtnpvGp^9i$AQh4U;8uep2}sLN6(!Xm9<Yzi{d2ZP
zG+oZC7QScn$wUQQUVOOfY?z=6-pP|l<<f)d)KrYv4-Lb!0u?<gF&*O3W^G<k(+Sf3
z;(cXx)3UO&dCvn$+wmf^ZPvpq7x8!qexNLRAJp{H6JPIyf!q%DKM2Rr)Ye>vIfWlb
zq#ewyS}cZA^4_m`0O|+Mg=43?QT{M?PVYJNc|cJSGs9mISboDMVvHR7*uCB1&&g%E
zm}X`7a9Q58+<h9Y+27o>oT(X})T)OqUt@t28(UzO7#_TxpO+iPfQ?v~z=Rpq*<+-#
zvcQ3jtg(50&&-{<avPg`Ekk-TvVr|0crbVg58k+mjR=}E6vPqT+YDmB#rBV#xx-q|
zaR#&lXMGM!H=?G8F<uPdb=MoN<6@%|Eii*uzf;_AOV47&AQ}LC4qCkpf(0y6bIPv1
zI)Fu7YD9dsC+m3&8ayTX{jIscESzzGa2CHLa46*O0&x?`G3;Kx?ZfY$0Vw(P<Razg
zHZ;MRll)t7<Bo9260Jr6hMfpED&`N91XBL6&dd+6TvNax?3gLxwtIp=9QC1z(&pk9
zL-HDEYJmQJqqJQZR+IMQ6KM|5l4%A~g(vri8M+G&bj%gPO17T>m<4j#q)!UzuFen)
zEokMh2Xq3XOrYk_B}v?#PfIyEK%FZ9+<M?*WCCAR`x6o~RIs*HqL26*lbg;f^TErY
z=K*I8KX3v|M9sZVp+fp~j-38aa1G1+2O?h-v;XmLzvVrU3;xy>0aX{=_#fmC!MzAU
z7fCAiiT3<aFyD@N9(}L;G>$P6URwba30l(Kux)T#0U#w1d9a~;TI6J(OIW<QZ=qW(
zwcl0$OgSd~k_|9*xdY%RQKae!R*wKhQX=3!@xImI#SKYFZktLDDJF0=4oawpRH?bn
z$o@ni-ny~Q`x9%9ERPmIS-M2F{0-550AgyYGy9hHPC{t%&_(GTb7}G_gCt_kTM75X
zXpD%y<u~^mm4#y9ohcCLdTz%#G6Q+S*rfRnBs9~Z*Z^fbzDU#fX-t@)&d_awieef(
z5V#JMhKD}v0WGXk2mi%(u{eHD$um$1A&f)<sD3vA_}o>$0%<_o*i2-RG6@bJ|Nd#D
zRbsm(n8o5cOaoigYQ;xrCs;$cYc$q>uJ6z&lH%kkih0rwIj}$+*}x@q#gt)43|HLX
z!e;wkj*BI$Sh@@!;>vF`^Vjd&&)#3Z9k1WOpYGK)eiGPKc{13`I<(qF)5rVs+0kpS
zLueSk>S%nfY~MHZM}oV`=M}@)Mwtr-IzxyfUH%Z?0#~%!MoFCEaMl>(qpR)lOaCtG
zRs4I(kc}`<biXt6>5-@FM*p7MoYqSnci;%FfQo4{EbX^d&U?OOFMFOLUu#&E+ahm`
z!NO&q7y#Ob&^p8DH|T{ec6q(tK$MfK<KgorbN#%R7wzyPYMblr0H=NpIw12C(CH3<
zr|cYF_k(EmXS89#`}yx3(0P;3qcrwuyUv?pMg&8a9a>+u6?Eg~5tY7J(yf2TE6Nx#
zpd~EnSt3Al7}ZsMK=UWki$>puFY1d(--`{TH<5vN3)JVof7F(oBO6!MwNlQifsI8R
zwZrR-09=YLUgSF9*w#}Zx3aqzojy3$9lZconTs8o5;L~qjh!EORcZotPA)YP3i0AD
zK@F!hwPT|2ViZ9Tr?%RwHyKQ|79YCsVvK|<N#Ev+6?oW)krT*i5^Q;gD*4fz%-M3~
z>24DQPP#`bgyy;V4|P14TD8=6t>-f@;FW4M;5R%<yv<l4EbxLk7hVXe1UAm{TsJP<
zgoSBFJIh5{Ly;vokDNF@oK>rHFR?hi+%LEJYdwu%=%Y}da>O@tS81$!B%c`)-H&J(
z4W^bB_4#G<LP!j72b<gmV`BnM30_SL0$~78HIQ}?7NjAd1ahAbK%atA8Q|QK<)*g^
zOcU;&NThml(Mfa~J{dYd%`7s(xao`FD?`}LKuQfe!N%V)nSM_r%)O+g_Mkd3cEI-I
z7|6Hbm!U##5WwM;7H^-Ddl6FBJG6|3OO)}eWo-b-Zs<P;!rH|#>(@7ct>`)o1EAV5
zMf$s+rxjUVDbAI2qRWHdyP7F3ssLHPvP|51Y~3#fzUx9QATsgwQx4@-XaO9MRHZUK
zi`>VT4DUi-qKL5+1%Y`Gn%jSUa_K_F#k2s)xx=v*j?F$ubHAZ<rj`}hmxN+~2;mr}
zQ7nr(dm72ie~u^W=>TfZo2@EHTQZOj^6)b19`}S!f<zS{>Z3>!pxYvN$-@+RD^9tu
zWYcXCzA5C2O<^kF73l;3T1RDCZLsrV*Qtf~le!^WX|5@#wPDz?drJ&N7hocJ^RTT?
zf6LB@%t*b$K@0JY#bC$!g8K>Z3SZicCIyeR#BlLV!P)qAXTmW(R^cBDw4g*(iBCir
z-Ggq_p=uyGv^Ql1cBvFKr}O1ViImTMdb6^6o%q<YU#fWREhob}))gwRlqy}cM0Fk2
zmw471!%CJ9@XCwZYI6UvJ4fKlI;KL?rqf6tjS~eP-I04Dz`?MTj;@HIA2^0VIPKeW
zwQlMQmySVzF$DJCjiq*|YOW}$`#r2xDmm7JlGPMMkW3XE1=72p>PaLiZT0hAf`#^_
z@81-09-hvDPQ$egY73fN(!(zdSJJB@vi^#CQ5xIgIkbT&0HhRetSSYJ+Ckp69eY9J
zFMyrYX0p>3zP~(ow#vRi8dJOr9G$j_F5UJl16j4kq}9R_N8s@`eBh`442G{@1f0F5
z`@ZgbpYwaU+!03L@ilq3oxGPD?qO8*3wDJ0#jm^P9&+SSIKVbUjC%V8$FW6({Pr=X
z#nJk@(mV@}LBw)maD<x@so^`U1G<5Ng1XzcQ5(+L!O5Pd%{5|2;^YI@6PMtka6S<1
zXJg}f6SN%N$;dGb&(My-Lr4#4`zkNg((P-%k%B#-%IplIs>;O3{)u-?tfAt2Ae{oa
z8IEdzwff=fqS#cSEjJjs$uMXO!nBgyH5Q{AkCopfJq|hd@bS#*U%Y!1G43_%kf)Y;
zwOn_pFIw0;!w5d?2~7-sPQl26cB;!sS`xs}mvTB)<!Q?t(uAtQXXPuwV~vGVyIVM8
zw78D6Di_IsTbb>5lJfW6<?ZFK_o9o&^Sj?~XufXd(^+u|d@#~Ga_TVgRIMfRqSx>%
zb)cA*-Veu4AhKc&Rz>w!%6~(y@vuejukMMiy?r2}hv~cSg)U&zrDg9k6a7nfGHFzX
zWLWNez4b$&O$1K^5?zBwL-0o>SXe$Dw;PyOZH<QQ3G(%m&GoaJ?iZ(Cfl)y?bXo{l
zS4dF-#s$(ZPNN6|rHHRO;X{Sjt}HF-POj+g23hfHD|-Dkg2L^l59KTtQIzZ8a|ro7
z_!d=Gtc1kZ1^$<MuRJaaTZMBskn+5=W8S^&uG>hoW*TZ$JK<*yM-nupP&Fgg2eh%$
zTO<*0$M!huspB<*$O*D>5kH2AiSSD?`ULQ(j3@x-&o?Yr{K2{SsUnn_#3Wv7@TO|b
zySL#{8&M1nwAC6$v6oiBBkIjfGkviZ*(nB6=1gwm%1hU?`QmzxqUTSWy87bxr{}hg
z{U&`pMr8HNOX7;W0u|-M!xhBmXD2-s)%taxvj}bf-)XI~jm<%j-j;5SaObYYwsb*J
zWHwLl?;yP=y*=N4(Udklr3b6k`ecquv$T1ZSv!};{YA9DFM}HHB0ibUC^hP$wIg0#
zUB$;qEMoIh*#L19Z1!WLKVL*~cR<00nw+^jU7eoJUSG<#+|LcsOax4f&|h=0h3Sx`
zN@_;XIOVNeu8lk8YpP^m9beV?W(5pJaGwL9ph6&pPAKT%0T}^a$plsE=*@2R3D}Kf
zcGo$A>3G2F!1cFUOMfI4CR6K};iy#!Zn-t8FK5+vxX{AOeS{ZIn3jjiwHCg}W*gGm
z7ssch8+i`F(`Js|@8Qco38IW>#4l-&=NOor@*P}Q6`z9kro<;-b)88z3l+X6Isy4-
zd5e(;u0OkCUoZa9d`3DSzX`<PzpdNG#km$AbqgUDPBP#zgj}%>P0f;UuE8kK5j;Fs
zU^^GTj%fo=T!+w;PJK8}poa2|e$Y>-iduS6l#KpaEC6Ith}_PpHInu6XNpq{&RHTb
z&8b!JU9DL*t&0#<X5YYFEc0qRM&WmFs89SS0DE7k?@FT%i^rt6UKyK52HdK&jyN6;
z2=S#d0LMBoH_~W&spxd1K3&M2RGl5JP}E#((3e|1vs1+*)#o>7zBY)Eyz!aSkB@#2
zWZnCmx{q6zo^vc&m78ic%29!ds8UzPdWreKZYr6AbcgirJODuzI>Mc5A3%^Uf92Ku
z;ZwfniaE^%dTqR_*5Xk^r|ZqMS$aOviISn%$NwAZ1ip(}^$kFYhCTClseM~!og38)
zzNoUxJWZvBatTW>29AwFCBqnM7>}si!`>&$1s)q8f8%a+=RcicsITyfArfey+huEe
z;S@4{=Boe$&<E*Y(L~`f#Rrmjzx*UHnfIeW;IK~31xPb><iU2(LJW8j@O<nktyy=s
z6#lHlM6<6KHYHX@R!Jv)5eDF34krfHOi4h-S(&A(a@cb1g_ENyR6iF3^e5xwREC@-
zr2_S~_7jv$x%Zj7RfU+UYbqK%b+bvvO8>URbTIe4+K%`$xLGZVEcI<O^>|7_Jrtq)
z;IR8W8cRIhm6AM8;l-w5CV{y6RcwG!0BX+QN$KmQyN>2OZkak1&07W2?~Y(u*Q&C^
zf_2g%P9++Wywsfh291>c(kxgadIPp2eU-<8(U}{svWWe-C1t5fiuxY{D|DsfFZo`u
zim~S-Qyb9+a&&cbZ>JuvZEAch*4;(pClB{6)uOU-LHS`8%oHXjU9jOPnY4hZxutU*
zFt37=M}4U^mzO_7vKce&v)L781e#ElXm&gWi-)H|s>vd)1|KsM$eQ%j2_m{;^cdaN
zW%A?EnKH$XZp>z*-o~tC2h@4i@w|ua&kenYgxR(-S*D=)l^Bl&@dYvgGZ1qn8X{hm
zs#XSi#Mq#EXL>S!hd~04A6df7eEVPdr$>0EHee@gt(D63&Y<&0d*#&NRN~nyRSyex
z?A*As6{Tg^_@eNAd<N6d&r$FTw{c#U=W0|C*<u4U-f6$Et8|&oe<C4sKxS;4!ji0^
zOJ6%iQg9NDorH1{N{=u-<EYXBS$gF1obn6?djiv7yw`-tv*FrwtowR23@!MA4(`nM
zNy`wz>FVKZ1`%A1n>5mwlF1|7TSiv1QJ^SH6{^NcY!Tyks2@r08jUfgN9%Su-LbcI
zyOV`;+l^<SPz66EtF#(b{~u%L6x>PFZvAkg$;8IQww=sBwr$(CZQHhO+qP{x`SPB-
z^WD7Xa_?PT-Bn$+yPy56^;?_vr{Q<lY*NYRgH#YXBjpTDwIeGEaxbGBmLTW_#Bg|>
zdmKUno%UYO-?s<~lLnN=9X*oQ9hrn?9v*a7C^V{eeCjjCA?p{>aKgy;7sR#6mA4FE
zQV1$*O72M}2@TLMC+4uc5zDK;M(vB9nTo*M<Dqn7jgRTO<Mg`ZYb1olDQZpvG!1Iy
zP85`i45MKH!}j8n(Ot}WXxz;H+;g9elG!`Ga0@yK!oS&w2tH9IAH|~x9|a<Dh1fcC
z--PI#9>mw$`5p37OCcvYzVX%hf4|P=@oz|*Y;yI`DY-kM;DAshV$Uylbk!R2J@6FH
z)lsq{hCsr!f(lQD#)oXJckXqM#HDKr?)#S5;?W{_7vT7!=asJt)xlVXWe7X0esUp1
z>J>74EOTH4GUO}MvM@SO25i*u%1zXK>>(S~<ZTc*zKsnIZ1a`OZ!7jsx!^ZeVoavh
z<{PI;t8rTHSFsjwstJim)~zxPx5IWn0xgtg3iUJ=V*m5MP~a*;ey=4h;Vfh=;k0a%
z89z#g^{(D_i-F+!_pCWB=Nxt|cOQ8=zJT-DS(H-YmeD3Jwg>+3Uiemasu8cGB}xI3
zL@Uj{{W>l`^=M>E?tH*GNSdHW&ya90AAmHFP`G}hI4X6WP|;6(UM891OH}_r<j7bX
z=P6|kT$}eEo9DhE=33|m5#P%7hO#H~JMZlBRO(7gfx``)qw5*dvG|O=Y=gx+rYr^4
zJ+^E`;xJu7(Cb2y!no#!LNO=yS}rj&XfU%ZtLSW4`$P?amfrx54g4@1h=Q%Wpy#8t
zY-+5=0a56VD4_|*!skff3i)p-v=J+h{9@>8fLBWXa#k7i#hboj=APsS3VD*R;9FW>
z{9<MpYdJ{Ei<u%Togh7EeFdh3n83AB@m^}_O2N&H0xPv)^sc76j<s>|TQB(nPmybj
zJR{zNCpGiT{m2LdZEQCyy<>9_gL84C%9153!w4cnIdkto#r$dZ-?`RduaqG2t9H$Z
z3ds&nn#j>6X305tY8~v1<T_pv3*GIGipBVj6{wGKcxKpwT7W^ubA5%>aMctTKJZd~
zj~6@4MRxr!i!R?uphVa|9606fT08xE2S=OALhB-z$6;wuHb*Tv7L8M@j7(8YcsR&y
zQHy5bu|Cl&m%7{7<JhA+6qME2=}H(AG`Zzq@s*YZQF)+VLdS`aiCdQO<pqV+O^0TA
zvup~O!g2<ibt7RXj<b%6XLb)x>JIkyPVHo!y1u&NvEdr!O#X^JRv7xsI=LhN64XNV
z&xxfR1LZf`)E3&vSeC{I+U@*EXzxyRtrWwy+r&RS(J^H{mGs}mgY4t(7^QuCO?RtF
zVMOi%X?P1@Pu>%H6at>Bz01e8uTdf^kfy}*I#9fXbLBPxCtI7X<OsTFo4B*s9r>e-
z?XB&j_QJ`+2SiMNfkKem4Igl3v=M*kwM<bZF5knfQD2uxgYA^xOQ~fYaB<3NX3>Q%
zr}o>N`Q1BqC2!4gte+HT-`a4W=F9xw!Bu`UFOhcrQHq++Z56ZnAx`Ry7yFu#YrK_R
z6|ZWJn)i(xt%GO|cdbLH=jpP_Bwy0J2;H2bH{PvrbK@`%sW0Js+12?2#1D=oh>AB&
zMZ5Y6w~6hbm$1_P+l@i)&OGvZc%RTQt$!G*fNUM%-P#lTJ-$1odFW{Ww7fEAIF#nW
zZ`b!dcid24b*YTyatYSG&@NIat3b5tClP-*8!p#Tio)_QPbkw-!6S0ZU9d?J5D{sC
zUaaEv5=f)dgA9N}y|`s4@RpU0+ow;KFfV5gOtDAJU&?>JuPY=$%y>AzT|B&=hR-J#
zS4&k(YiD=0wsatl+(_ctf2KSSx*un1I`TzjZbq`;g3__RKRF&<h7W7PO*Zygmp&M0
z-}v+kA6-vxn7^m>w+`P%KfRxDx|BVCYFmMKOQQLGJh#T1&6zC1Sbjx0RCTQty>P%4
zH4s-GwT{SU{W&13S)`zu8@#=nm;RJ$YB>?v$)i+FAQy3Ni%T@Kl`ZcP?5rb`zaemV
zfPmx`&q@+1iR3!_bE+=SLARJlW-~uuDYTS8W)nYWS?Wo3q$0|0GJda5J}fqJn}d1S
z^fA0Z#tLzD5iNjyV|M5t_?Z@UNaj)@JiDnfE{lu6Ts25GZ7O@V8ktxl;JEL#m7cfn
zrs~0L9hQDje<r`}V0Fd0Fuhh+*<dj|)|tm<rJ!p!-dz{xT%nQBtwRe^E68mzU2zbY
z*r9u<2ZDyB5!4dVGhGw+1wnoKeHT|9vIF5Vs?2o*+R?x&!rLR}&Oe1q7)-Fa3hy#X
ze*4E90&{bmGl|>PCs{{()5Av?xoz2*3f(mz5&c-0&sh4#N>iAj_FNqm?5dc3hXk6<
ziW2LEOR0l=gUepXB$W3mP@5B;Ct?Xl;W<vT{&Qccq<!w#iecC=G#u9=@QYhMuWmwL
z-ZB@?tU-unpL6z#-%ic7y!*^Fx^N=+^hRpbV@=EwmHmF77~$nT?nLSN!U}O6PwdlT
zX_g1xZc}xB%ndS<Mw?TE!rQIn&fBf)ZaW=Y;mbWf|3@caPs;V}LciX7DdpnD+%CNh
zA%$c0x>Tyj|LrPy=v8M^Q{-mdWVXqfa_i*YS*L4l7dczTYHiP}s=&VdscrHZr8QIt
z{_v_aB$?)NVC3O*G~Vg5+0)XA%)8vgMr=x|b=G*jK0p54?fIQdlAOfqt%YmO^|$S1
z!3z_v*Q2%lLLnNTSs)jGl=8yX6>>mZf>XSqvYt|rid#h*`CqL?VA<r#AVa&J8;xe|
zZ+N}Q))2$+)y0eqy;bVK3k!I0EF3fk)!GRQ4QBYkxxqg`n(D@9@TJ3CR)!|-Jpy5d
zk{X~rDcpu+Rf?9GqnPF~LR{u_JjBdd2OYav>mokr72`tcq>Vxt{UL~Pfjf5dOQ&wr
z3qu!Ese9(NYFx9&@U9oJ!y6ipY1b^E!c%xjy$eaX=JolMxHD}C(;DHs2Porn>;%Gy
z;~@0TGRD!BpoJV<X2^`gd4i+A&Q8*Bk`R^de3=&xWy;3&GmFMQ8h@0D#fUKN7_Rb&
z33)1QA*(srNsWS36}nmKdqTPu@o~j`<fbB3V47bT?W%R6buyELFgq6yBlR+D3YHT~
zDdy5h_q{9-e;PL{QmOnfQj%}OJEYh1XBho5Jy?hGXfcoM%{L*_f(@N#pY!ksmXHCo
z`r9z9`gY4P*p;HA`!}6!2ZS*!MZfhyr6#awLM!KM4B|{TK5lRz35Ax1h^j(5rLEpB
zB%#%eY`|L~&w>s85$LGJXi)kVgo+9&M9MVRpH=e5oBl*+Gy<e&@{sM$EY3$*E+p=j
zN<C<|j3spSLgPhM#~TjRB|%DJF>-R)iVc6|;JNnFq%IMnGK(p2ppS#%L)ly7o4O|u
zi!7n1yaWtLtZ|f|;zQH@N{X?Iv7CF##5pt??n0X${5Q9!+Ugj5FHnLP6?|WKs>6!Y
zj!YU&F>Hd~IKoMLI<JE`E>)yjEHtV&g>sjILo`W}@0P$nXg1am5en^-bdC*A#I6@?
zSijdfd!y=ZLOskzFWu`tce6^=DxacKmmo=_dSB9lm?>kIbuA+?s&<f03|ab{O12!I
zc+M{K*<vuBzG%EQK|oEaDuX_liHcokzsd+p`Ov0!)Y(?kET~9VOUf)dbGYk023!46
zKx8J+(CeU$kN5=$699H(ppR7_EZ6bRF?yyhFo^JO_F&0<IZr{ohe~*92Z3EQLb9@g
z2n{Mys3;LZzwU?RpoCcG<6vYB$K!CBU<#Fr|0h}uV684&9_|ax<i$W!ld)^&D4QP3
zVR+D%WOmnRmXdt1SVm<{H}xvEY3_c2a9}WLnuW7jqbz+%v`QVsRF{XqCk|Vr>jgF|
z@(U*-exLDI{#AQM_kr#JQXNEmB}-9(z#VhMM`*6mb$gm=A&)><ysb(ckj%O>ywwp)
zxr4gi_@qgfxTBFop)UDN^+otm>`gnu5dtyAprV}l8qH&}H6vwI7_k0AU8H29d)kFf
zr-5r_mPTj?3|-AYAf#SPWGgS?2qZblMMMS*pp}?egOm2@X;5K)f{MW}R8EvCJmnK(
zeSG8i+CybB__Va+^*JAI>$9J@_;I@az<a72`o90jSoi4I?_TubbF$hx%PY%y<nF1t
z*vZT2la%%g^nVk4MCPq^wJ?EzO5}lnsQxcD`v0_wO?6rRTh>{Jx}|gaP}5h0*Pw!<
zG!d4#kAZ5GxYFTs29c!F#nzLCx?*eqF(wh44|cod+xm6A@h>oan+ujsE!BS$<5}G9
zS;p7gbRM55=GA*8+)qiC&aV9c);n|U`hL8Q@Qzh3-6UOyX6pWn+VIx#t)Q#Bj}K;d
zH1O`W_yAa?QLd0ZRIC>scWE5Gr>)4%lcCHeGj0AkbL%}CedjTy@lvc>BGLgg#fpD{
zj;l3W7W7ZqI)kWFIO@Nk)CXw>i0o;Nmb0!Io}KoBpzf0_5UBv$_DM*|o)2;C$<&1+
z7)ZvWezto#wf;xDI7GXw%m;N^-CSH>UmtAL;r@zXy7IJA1lAp59YC9eM?@zq(s6WN
zTUOp5FSRH-Ahs9HekMz(o@;hAm9BL+<{o=bXfOULe+g+tH;A#eYkTe7hPS}KGVk$Q
zbhkNl(ZRP59b9{>{QUxFxshQO_sW|gizp}7!W~)Qc-mO43hGbCZs!w4(8x9MjM<5)
zI=-jd!<&o!S&vQIQzSK+Qr*Te{6l%BHb)GdYnmGxgKwpB#vUpBSP%>(G!<Ux!!?uD
z>jq-H?_L{7XEjs67>yB{)wL(W;2peJYMk6Iapo~Ke|!@`rKlTPv`EIMm8c+<w;Q>r
z`n)L~I<saNNK6v_CpDv+1H%LKnybF597b1?M>VAOAA<0t7Q-*U09Bc6yD|`OM)6Ro
zv7ILv+e}?%sAnX-3x<r&r$SO7>-vGyTbAE9NJQ{;zSAMhR~l5Pv_-lG`gQIX`rw2#
z{Kopudp@KpJlpR(b2%LN+`TsNjE16olt&QG6}Z!#=K)Yw!BJ?Zj!#rs!n=$U$TixM
zkdJmo1~H3lQXK|~I#&jjTF&mjTV-STj*IBlvKA#L_aO?_HhfD95&RWFvH?p`t@L!`
zKt29O@nCm;=0?3VF#sh*q)DT0$x3a9$RDd{$+vI?pI0K?tD>LnKG7p$@0_8&^$?;p
zFzo8{zrDClBqdU6?CtJy`$W^#A(`kU<uhplKObtPc-Qbw1DIueI^J-4%ca_biQd?h
z&7R{&Sf_o#(J%o9>oXc8>%Exg1R*~H`fOBSllo=L{Qimdf4bW>Y8Njoq1fy-Q&e`H
z0FKH`P@zE`2vOhh{G`ABC!m!?Dt7*}FLnlEy6iPpGGYmQ03{LwVq7jJ8P-Seg)3SP
zWknbGXexwOsR%jW`Y7;p5&&ur@_-hBO(V4Eb?d(NyjszXjWO<S1}7dI!Tju=3;6bL
zVWAFa0$c<gYwJ_$j%|&foe$h1CZ@(^5Fe5hAvE>mqFB71)qpjs+b)nM9fl3tj^oNf
zUI4hoH9EwNnu&Dz^2NX*B8A+YpJaOF-PTL^>Kua#IT(_i$!3ee0G8A!UNHj<=E<VA
ztugDg0+$0JY3p%b(WXdVPd>!_8Kc=~2@J%5@CDiWmnAVcJB}-@O3At!iV~60fhzdu
zR<#E`r8B#|(G|!HJPO*zyWIw85SSPGK&Eb%21^x~z8yve*cP)7x3iVbMYQih?G!hY
zwnCUQwpDyV2~^<BY4ub99=jGogwDT;Wt`gCVyGd=A*l8NbeoLz0Upc<R)l@<epF7N
z?Ia9B>x>cmAxKezIfGw^Y2n~WQ~W+owRcF?Sgcw7zpA}=ShfVpC9lRr5DRROLqZ2-
zASAKx!q7h|A@B8#@9;@}b-MBcesqWCQolg;vKXhb23~!(k_xgOtn|^!AQObFeruX=
z%b6R~8D?-#!D`TEuNxs+jOB`8l-I6$1gx-H-_0CPQN*hhV=M&jIJkr?yLJh95GW&4
zwMOC#N->6N#yDKfG{`x_Vo{SiQ#+B&`BwYDKBJzq-6HysXH961p%-m55>)z^5Kz#i
z*dw{fmxUlv;qoCs=-Jwmy5Ft>g3zN@*zI?tj<=Ad>ZNAJpf;a!L$h^z!wpSH>Q#w#
zSCDCx7LfPq`PRoRFyR5-2YVHM-=ppewc%`CqWIAL)<rk@MDod>^E&D?zS3D?I*_d)
z4F*VIh9>>Hl<&b>A*Q~?%U={(#a1FfRivaZ9__uPpVugB`0q_Go8#c7XGe(yN-3No
zGu^SVQUMKa4%?awP>K2v*7%(eW~jRG?6Wx7MnsvV@7swGaO^0^epvS=|FC%<i41%l
z9El(O6L}>cbye7i%B<oH+4RvO=5)1H41iDKpmJ`qNfrt*JY#vqWR+zFqR6e$*YF@~
zVy1(4NvyE%9Yr=g_J*l&3pXygL0y5GXac6iTj~a!o5@EVllW1$@iVBiic<@q=*&1P
zH>s)@B+3_&oJS-Ya1})-<nFPFMo?u?!UD=iz(++AM>>O$NGoL_c`t_MnjuuZ$QV0k
zLiZoP3{R;JwuT>DAp9u~dUHXI6#-cxtOQX8u8WP=6LbJe|G0WZz2JW>+U32ftOii^
z-v$X3%`DYw$+v%{I?$WaFP_tyY`?mly#FryC!-xZc_TeLJina?w_i!WJGQZR_ef@h
zr1#FoYC^;bOs>BFm0^xnqxABoXLIqiSk~4h^78IflPdB0sa%Vs_9ED1O9!2gw=8zi
zo%+wtGpn{%&5Z(!HtE{iR+rmJXd?{8<&7(<>o*<o8#m_NOHO2WgGNp+x@xuG2Q+w<
zE`idM)^gQNgRQpyY&PP!7{$~FM7)Bl>onw1*D17(p{|6a;B3}GH|cP1GC7(T>%cUL
z|I*9Mqn2qYP8Zrj?W}4D9QPV_LPs!$vYuu=pJRCRd@5DS|HR_#W^;S*57hFGRjTFv
zg3qk^^h%=J5?SIl#?oGtulW2x#f8wt)7V@ZEjz#-mAPiq1Jo&;Rby?#Ze@SLVIE>G
zkawCi&{j7^MSZobX}#>ivpdBjk2_2^7TtA_J+(LaTK0*^Y_J42lwaoi&)z-@(?V=F
zj}ip32rV5ww!!*qP<)x4X~|=*jXavLy#B81-iwJ`WDvl!=5qg(K;!N5E=r#)vP=h9
zSo(`t|L_G(nAWNrUr_yP%iEZWrr-<ppdXaRTgr|xJFqSEhwtt@fSR*zJoyLr{mc9A
zLE~bBzSSuItyC@cowEr&83`|WO=gE=XMU=ohh~$++(9R2ey-^Rm|JJ#%s4t{<IFX7
zPe+}!HEVMYEiyc<LTOHVI*BQpXJ^i$5YS3!w7;(f22vgj{;KNqq%OMK^rX&x=c#gl
zbFGf6h129)7qtujd(^dL#fY@K9%{sFEt*BWc6uupUdNX}qYRU9c~>VzG`6=266cJE
z(T(SB9IZUupcpVMV6;cID`HNzU;3w*#Js0E`VXy_UOKua+NHo}QS*ZSg^|#RgL1ey
z4hCkrzBh-(k{Tl~I%k*8^Kv7qVBy6t)iaAy#|kydubsfO)$-f4W9G=U*ItXmJ<?Q7
z`#jVo!DMs!_sm9A7;A0+zL?~y6brEBntZIbMHH=*Ora%)hZ22LSNBTdcO*?J2T64>
z)-(+Vtz6HsA;h|XL{T;2@%7Z_gP|)2W@>9ob}95z5I|mOfIPZs_R}tI!xCG{)@^ME
z{SkAfnd~;p$mE$!H;LGj1tWEAm|>)3e^bIzk*V|2q$#q=A;eSyY}2$^<#H}7Mj$Zi
z`Kw#h%`v8qC&pv2TQUdC-)bD0RV^hU#vPM^x<g3;Nx0HdQ{?x*w}5&)pMD$umNRkl
z5k)Ey4%9Fa1X2JvJv)yJ|3FN2v%S6P+0Wl?seEZdf+NXdscF36ikhC|Z*C^{hN@r7
zpkKl-c}X@x8*pJO!78)JVQv9E#M-5rnV|VY*Wf~535GF4!nWV#f$nZ5D@C}E_HTub
zMgI~}DV8r0W@VPhlT;O!D&gmH$1?STX%Zj93^^5=#sd>1(7K)<A$gV~vzFCXRE5^w
z#qs=jBT8T|o|A{*t>BcAmiaZPHKJ`UcibY((Uy@koNc%V8-vd=s@nS{486_F;9D3Q
zXj?ObIAVHJ{U`hS)bE4?wB9bn`HXbng!a&ki!Gh(S#tJ3-}zYB8sHAA3Exc$$S<QV
z^;O;VvMU7Jkg%i(-~`Ip8l?^68Q(1ue3uh;nAu$zIpnBqohMf<333O9*`U?E-~*_w
z5zOfB8qo$rSLc^`e{?J9osVsJzZW1JGcED{EJU9U^Y;XNGUV5W`WNgJ;(ZRg`hcl%
zN!y)}uL}^3Ho)=oUj)^-?$M<3nwd5(X(_o7?z+omgtw|bkL`qTocCqW566WKGEZ|t
zEjR?bZqGwLr`4#y)Ecd&1<gQnW^$%X7H~_Jo=ny3l+5XwtJsLa)>LZLDUz>ND6GjO
zuuR&mW>TzLR4bS-br&}((zL3RyEcoNFUdDvC5&&CCUnYIIX-7CZQ6}?ij8K9RZ=US
zXWFf{C)Q2cRYv+P6?$k@Sji_3elJ&dg>PUj8sc*bj#0AC3A`v2ChYhjAr6RLcry7h
zyLD;E1l0>~pKeCyO9NSxG>s2BwXQ_LmqU9JnK8!V(A4z{swt-NVAiCngoih_sMG`I
zhw+(_OzmPx&`cG~-c(|Y^k8Y0@M>!`TZ^Ir#w2k`e31K2)8=P|fZFjGv#Rz-S619v
zT^k2=<;%M=O|8Xoa?!gv7VfR0;q?pTc6&C4Kf+6$#WHJQ`Qf$>wNkP`!chBUx=MpD
z9-|oAc1Eb}_l5c%rzx@5JX+4j=X{N5Mzy`XLXPDbXVON6fG4Z(>v}nSx8`p{mC~3_
zg?ZAtpHX1Z|E$SLW)F!ap0G>)H7EoeS#`(Nq{g`_kxfiGD?^r(DfDi300q_*?o<BH
zg!-DMu2q+NR?T_WH<2!9;ZM`JS)mP6J4l_vFtU4^I<e|7jVJYIFwW#j@Sm0Fy(Mlj
z%*6&qv7XYq>5|_mVF1P7OceY^r!N%W5o128Ynq4IvKVyBo0K3%xxKtY-B#@1SrRCL
zzBuRC@`Ad5Lq8A|WYJa1PLWFUYG{j3{eMPFwG=<ct*OIlfMN~jM8PlsO28P5jEVwB
z7oga~IZ&{06NTfjosx>;vTBBWn|nIXaoamikn@nrjbI1mkLo5Zs7s)*((^T_)~<}y
zJOps{O@J1*f(^brL-PRzx!tBB4H>lJ3;`|QE@1WLN8YfBLX+U6EE0QNWs}>`4hZ|X
z2h8~uN^arI&R;^o>I`J*p=tok{q^;cqF74w`eb<xt9#-Mi@4J~#nAmGib?umyDRu1
zJ1|AV_>eMv)^!zMdqcb5t%o!C+Rvj#9Jf=>&|FsOaBXwLS>Asi()U}jH)MwZz*nNz
zJIYormHX-qu8aE`v`>A+S*s`{-V^_{SZtT_{Y-d_b5H_ZDz|ObO+j<LCq^|_)PqcU
z6|P@;51sRv^1`0;LQZ{%fBw!g7l3~0sG~h4ruN=do_{gV_vOxUj>Ud8R%hW|n5Rp-
z;DAQ`cu+nWfLe=s85eOIZHP@dq221n;2+|VU4FKv-D1_)ykJ@8pTklGdJ^ERx=kPT
zD{>KQj-0t*t}iu$Jd!tre@z`l4X&XJ1f>V-#K1ZUX7`-*>nh5#UY<C0#}X*G2KSbf
zh_snEX}Qq8XdCr1isU^#u2_`_K3j))%PpeMy?IO2)hoFEjdbsu9E8Im^q8vXJ_c=A
zjBsboy$pf4R2WDV*9{xAIDqA43xR)^*~#MAzhsRmd4yhSZ);D4m41r#DHrkSl<sg^
zSgmyP7gItKU}_mPNC!S4?CzGGA_!m0RCmV5YSq4(@aw@h@k7JM8!pBR=Z5U&c2>lC
zLUuSYh+?e(Q|TF*nS9`2pAicFMrym>`Z$Ya9*gGW?;QPv0Yf!6lw%^cM~ojxF`O&_
zlNn{kItg2xj8E>wy{PaFcWU-pEt|P{4kI>ht|O69J)1b+P+O(PFW{E)J#nfsOSVd&
zRJl}6{i$5sy5$k+s~lxOlv2H>4s<@MHSu&g;2ZN^o8A67w*fzqrDb^B^zuYWdsYn(
zX519hgNS}TC>^O)8Q%2IGL1C!B{C{~I`#ncVIfwG+-r#^=NXK8;vc=l-*v@iG=>$6
zESOUAYTqL~fEh7zSCZRl(NVd0yfAvzcuu~!A-3MIcVosEo4fb%zFwp)r5f1yZusJn
zsT=q6$a_i>x+PM{tVGE;Jc~iyJN)dlLOgQZ8y79g0S((UL0q9t7U%11q|gnv*+XV-
z{5&u#TdzSXqL2j*B&q6?gVH_PAw#vuvYw6R!t&X9e@*aic&xWHO)BFRs@;v%Ei5^E
z_#^G1%TXH`MObU|>e1_w_IXh~YL+_R6LeKGL$8Qgcuk4f!@=;)2{A$E3}6MtRRx8l
z1u^0nxL|DrDUC9HF?`Lc=v3w5gfj<uPd5jl<IMeAYv5M=mtX<nZI>S2?H2I`<nElD
zuX6ax*Byzh4Xwec32I5g0*I2QlMF|93VTU??$U<>q)H<rjDZYp=2?n>@~=*+lPtd7
zXL|y7qx<SZx>dwk3m_1xj0b!NLZ5U9p?aq39ZKZ{Vn4`cef;>5c5hl{_9RZN^o*;3
zU@9G-prcZ@2(Joxx-%8^bH1{G+4oc7KU#_8BguW}k)QAb22A5d3*Eeg_AjDP7lRW(
zPbj6m$Np|Sy8Z}P#+}i;WY5Ysap9(eo5H47^1e9$L>Zvjmr}g3!(W4&;FR?)M<72D
zdHyKGG{z{e%Wi5m818zP;wZHWf^!QL@pzLl93|7F{AL3oFjd)g6_t-`y-NJd%`p_)
z;-ObisN_?gp_+>~W^zg*R?w!Z`0iBb+91&tU*Pu*5OF_+Trm`~XRN}-{pnWxJWcG)
zL0lD+ZXAZPTNbmp#R1XZpNlqyo^%S}22_{*V?F8eOoUm33Eyo5ux>Y&64Xr%{zg6!
z&Yrj!{Ea5F&aq$ds+)@m4<p<iU(9p4NlD9&xQLJSB6!P+x|omkqOh70dRh%}AC+DO
z9=_1vI&4U1NIe+dH9yZt=8;`F>K_H5+d!`yVi58^QX>vIq~hK(_sR1LlXU?&x?g1T
zg)a=&AMgvw*0JJ3?f=4tNT_<`$+8{NuFdE7@GC-c3vf}0KoP2Y_yD)0Ex%A^Ax}Q!
z^6!~TN(q6x9|v*ap!~|`->We{Ai+-VYtpx+%K@hfIwht1q2pjtFQ-mmaRFFa);OG7
zCm%p-TRb1d_wSC&wS&?p%eB|8BKPZI>$&aG-s`d$TWnFRnP;bPt(Yw}95o(?3Vl7?
z%2$h4I&`g6o`i&py*HmEoM?jt-xg@CkaEQjH8ZUnb-Q8XZDln=Oswyo6uJu}Vbsu@
zf1NSY@IL#ZU(euq&g>SKkGo?QE6ba7>DpydcP?)pnb}t|e+_p7+DSLEp$+l47L8+1
z2}wRnhiG*LvMDSh9^Mw~y0rPpX<ctHRIAm^iJf=96YZYF>K566qOLumq2)ltlc-Ze
zJfkIvR*OXN@O_Jgc^HpE)L8P&%7(eASKmGtkX|ZikN5VRx4)l<wJ*7>kIr4+`;+bU
zW4pjWWs#p_N@#<|1VHsnC&yW~Yc=}Um@Kuw<x2A%hmCG^v9N%iWHD5lbL6NNd)CuL
z4aIa9kCFLGC&y&}mElcFSvD(W6fY|W&MKvQJjF94_wv~F7bRC=iwEmsrD!Dz_P^cK
zKdv=}6b{#2#AIw`gN9SKbW^Y`^IZ?i%8}qN>PM>2&anSGMZivdEBjqq{;z+(MB!%Z
zI8=okWi>juX?^GNqs&FSaHZ;Y*J2FxgiWT+y!tW)CID1enqp)~un?yl4IRL(KL1<)
zm?x-FjgTgWU`buJDiXK69knr@09g3%3m6>6Eb*b>>=R<(Fxt%4X$f1LD7JUfMyGF)
zJjs9&$o|XRFd5FYZ~9o-B|RDeuUbn71ziI6jscKTB+mFPIN`>GgGZ^s;KrAd{?6c~
zK*SQVqT8KbzvihyIZRcTGYxtiS&t*O;q20Rydpjts>|3&CJd@*DOHnSsj+z>>Z{7|
z=gay`TQ=tTZ>o2VkN4N;bx~6jPwwdax5HxIE{}KH)sOUO(({j}=VA2E;`!%SRmrD!
z-mTk@r`!u()~EaEo^K{655dt$9BW=obvb?Ms6l`PY?R~WmWS7;_{-C~UD_hubEi*)
z=~4B~<+rA21-GLsyH00=s!m5A8cdt+3~tg5U86K`jPi>fz`PV33W=t~_H=fk`lb+~
zQZQ&Ql%W37vf&1$i)nRMnSqC5Kb~SSC)z5;;w#`c%Q2*qc+Kr5#M8g(o4_d*ED=(Y
z7lqLKwX*6P!`PG;izUSPl*QoZB<v3Zc`Os~R$`$?6ka0J<8Z2UFitJRHW0a)vcgQ-
zz9ncE%f<kP3?Y=<g0&Z-^%zgO2Bck!N=<@~>KkIsNPR<2lD$Z^hXE$ReI%b;Iq>WP
z4R}=Qa#|@P4LrG(koSK(;QIC#zAazS+EOfz08PeQyNTI~sZVHatFY56$Ety8OjG&=
zg*>$40dunfT3r;8Je9J}KD26C78$eR09BZNGxE|i8b{+*h8K+f<gP;2Iz@RVnm}Xi
zc6^aMTl3D-5sVHSE9^rJ8KeTrG|8HSoxn!X1%T_XwLm8qNKBmU_`BYlRzqqm!def(
z;h2LN%_8^vS%TZp%W}jJH|R}4Zu@Fm56O}2%^87s475*6q4QmNEN3t<B6Mfz*%qXK
zy24=?^9CUcGB}jAS5lA_oqYh&cs-h47txA#|Ngue0$*y_7#m=9FwR2t*z>zaWcOfO
zi!3|@Cu1(#zCI`hj>O{&9%U$#OvKGd;{an}*eVR;gQm5@`%`8}uoY3~P#XyJ^u1Gk
z$xM*hS$=4ob#a9U(Pnz&@UGtk@ceZchM4xq8q@>wQryZ8kz{Hz5wSvIVvn^JD1jo)
z)SQ2W7>taIdko3r<uXP)C+P^r^byp&ji9Zu`<?k>(ag#sFPA{o6^%dCjE}Db=mtbX
z^$l)uR;B|!yg}bJxIUjj-=+U|533!2qAVB&2#6N%|7drlr~VHLn(e>X9Vb;?o##am
zzt!K6xtrn=<C+SRuGzBi`GPW&YYq@lQ;e|)#V=JNs$vhqV_q-RH>tP(K*6}*gitRp
zE-EhaDvAzf$Iwe5>F)&of+Zy@3Z+GxttZPO-I^rhPZFgdeksXiB@ELVWa{YZ5>OU>
z2<5=wz%tG!6LoYrdOu;77nwCrn==4tYSQ=>icjb2ifJ<a(M-#+m<*v+5iuM9(5TEf
z1b9Uck<}cNMKCZ)k*ACbX@v!4Nh4&kGfl;y5s*UbZP)V$=anW$wp?zAS@qZQBf~Oa
z1z5sIAL~F>rQ$U^zOL8bduwFVnwT<4^`x8^s_wxKrK0(|`Ca^85c+X9k_ORdN<Bid
z#1wVm60-))(BE~Q<Wt=kcHKU~y+9ak5o;yQ!owb&P&pi*P~06q{hbBNT>G&$N-uf5
zV!-A{Li)Q=Ar{_WfX8wMX}XgO<(r6+GWCw&tbY+8g%eRD8U)jn2QGJOce+0AT^v3F
zXas4%5td=B;R8%K@}LCmL!5EV;g;S}G%$Xc>m<NfG~hwmc?oj3qujn9;n%}9ajqGH
ztWGhQZ*buR=xtx`7`wOZ?w@vZ@Qtp5NI75~ek$CPIDemh3Ht<2=8}hx=w!*FLLPwg
zWz6^lVI&~p{NWz<H>U$#0284RWMwJ{&Gf~j9q|(nep;D^?oi0xi9>3tB8t2i$XtV>
zUNwat6w)M*48q7S5yn*E3fCW*SJkY0V2C9u&5LJ{ixxfP+Ye?OJ*jX|q6XbA1M1FA
zkJzrTzH9YDd2#HV1@ihq5eEB9A??I6+>E)^|KYmllaGGcyB4R_!9rwRr}H&TC0TaI
z2xOH_kegvjT};z5w2<4kfCoA*Jog|Z%O$tq7QEmH`U_7PA`V}e%6l9tasq!AG{}QX
zO1~oMXayRfA%j^T0fr04gSD!9#dz|9TL2mM2WVXCh)n!~?$OdofgU;UI0COrHpA8T
z83PQ>R(O^zd>8}UFd?EJv8I$}d~Bwf)W%B|tB}w-rO|*mSzXp(P~fs#MyKRWw%FXE
zoxAeh*ZVJ}5Da-$as$d-oMOR558N6JSu<aIeSFRUl-mWG3vgmkE94xIq7$;irqB0p
z?@K1SuDq#6O*lNHol9$sJHlX$%^9HX)m1?C*Xu8|t{kg>uQy%lDiz%u&RsuPr#7#9
z?0|LQ8{o0BJp;xH7u|?N8*CHHMmk2A7COR<ehL%n*U@)V&KmtjI>k5eiX_L(1$tAn
z3}&Q?Rhn~4b;YTgJ7mh~nmcUD<Fz)F@rB&H)SNN{5+w!@Z&W23mclZ;MIE`ij3|hc
z)AHl)XUTf$v=gO2M<R+`6)P$jI)lAo;V5N|*$?Uwg&uy7o%-UOM2bloP8N?(r>5Q8
z!do$>S#cB`TmrnkhxoeYB3@}CHHCjpVsTNGxizTN8B8u&Wmj2tX(Uy+H+Frgy^yo8
z6~!9IhPOb6lA6M{;B^Ggo`FZEvi+hG1lqr9DUWnx-)z1U5IM-z-vju7Y&>2P2UFic
zr(<1s@RC4P{p=E4%&@=WE2rxX_VW}WnqVxFVYEf!bbCDUut1?__MZZ&1VsrfLO+i7
zkn6uw2M_<zg)%G-DN;A{=!{aSoj2uvaZvdL6xKDjPP|7guQOTD{QfTcQ{%6B*@e@*
zE>lu-h?nM(lmMf_WbB}WB=tf_x=^w{;B|&3ddb7c+bnnhe>j@zlpxLB@l{EYEr9aW
z#oVFIygDNJ;~nvE6qTD={*X2l1B_-Jh8y<zdp8FGqtt7EBB1|pgqp*9@U1NKA+g(y
zHkH9D8{rutmh33Jc*>}prcjz=jVC?HhNEfY-|xHRNz=)_G*mxmp?ewL5C6(T9$o^_
z*{bSgAtUiIxO{#UKMv*h`Us73pnG7o@KBtNqpW1#M*@9(C*F6GBlSLQrj#S(4qCU*
zEO=N4bW^%~2evDBwsyVNt#}Y`bJ4KiZhbpn$}n-vOF6a@lyaLfI^UuCp?1#P4$~>1
z<kVlThceCygR3s-HjM7T@R%ZsRafcwba#Py?X1{-i!E7ynCyt3j*xr;Hw<|{XmZxS
z%Yyh*lTGWlWe39r?a%1i2UM(gIU|WNyH@XvmVv(i9K%`E{`u{cDOHG3s{3g-oZkVi
zAKR+z_pAd?Od_{U+DACDFsQA$lHM0R6(P(f&iGXiX}P;DlpWbVqjEwwa+(}3^tY(m
zfM#4SZE$YFY)^G{AQL%lMy`J8otzcUL5RVg9z;)xW@s6H46Gz6C#jOS@%KVljuNK0
z8A=KBze>fV1r8Z3zco7dIx=N?6sjq*;u|R4N}JWB#QVp-xW{p_Fli;&rc~!;?xvkz
zR?F#=By4oJA{KeO`mif2e0OD=DqC~U&8uN51lp$7{+$NZg^Pw(_1_>eIy`@3l5=f4
zrVNIMkoAEghA-&SsaqUXF797c;;m+P&1Q6+8%eDjQ89x(WE8VI25pi1(Iy~IqSSTP
z5-lygj6EuxEY;IlRiYQIKGe;vA7#0Cq*YBJk*CS0S3bz#X^Qz?GjxGp*bmt${{nlj
z+g2Slwx~K})M+}HHfcJ<F+%c&Q|uikqupG&?k;5B6O^nU3(7Q4hv!&jq5%`zsQ7{i
zu2j_CjT>-3@@zv`xta3f)#<f&PQDk^7f)y1Q*cA<@RGicaLc}Nl)~y<1g&;VkjTJ$
z-QB$nvb5)&KZ3vOv8dNllG}(%E)Nm{buDqK?BVE6qma<uGeWiCT>wOEjNg`xt*6&}
zYF-d4FVzSBWc0VDG2!yr(byAI%iJ3LrHJD$Nda{Lue%b^O*?EBv#py}RSWrpXEW~E
zJzgG`*oS%kA;qVlW%E1oB|fR6MJbLd08edi`w%xJT@lq~`L87V0Rp_gfDQfA<lxeb
zHQI$;3ZfX>_ZD7!hJ>3(chwbea3Q6$Np)OeysGPcs%|QGhBC^#!3-K~u$MtQR?}#a
zWu0kzM*QkOV^i#Z1EF+ekWmd~8_s#Hbk8kQ>%)QZ60|t!>9Kf}zSse|GQ5qsa-A#)
zG8z;xB1rjx3;}PBIS%?SFfYx&ZduDZmsldGxmfRI=x9--XA*bqAObSOxNB88w6!>-
zSu$z2zk#4Oj;0A%SUT4(g1QQ5q`Sv9*;yNth$?YZj*vd|e(l?G$fdGO#bVPill;l=
zq1V<l<hD}fEHS%ekze(Ft{x=*Dyq3qfM^!PTyI+8k#PMUD`@pTY%IK=@6ysOhaN8P
zOLn$GvN3Z7b)praQpLing?&EYX+hg*_I=1`0Q6!v1ATmub;Jtv_rDQ*%n*Ye1DJ5d
zHJ{)kxH0<SH0?CK&b80#VpAt)UvkB(#?zw;Y22^+aEEq+X<Dr&FP8r~7w2xx4~By`
zfs4Cs?VWl@SvvEkH@miFa%>rw_GmNR-h?M3UBJ$t4I*iIXR@RmTi>=}Ro_B~N2vb1
z<bO5wWK}z1=xJ9v7Hxu%;P$6@VXvGeEOLgWJ-)SgqL<kS2C-=$e^DP?GNsVDl_8ff
zmc)Sh@@w=GmYIYoVas({mY76z2l0AhR_5JqkZX;ZDjw^hd`bq=eenwZA-nyF$Qg}v
z;UE;hQ0s6#{a`;W#i?Joz%kE+YjF-}Kb`#}`*~=PUiGObQ0L$RDNHHVL5G#+chw7g
zVsv!TV=>W|s*7E40@Mbl3bKHR(4qNe|15~FtuV;JU1@fs$-_;|EE!_evayHNuFptC
zl(se{BB{SUz5rmQ(us1xY&Z1zEA*Vd_B!*q!a3LW7nY;eQxQMSmOnp92TlPs?dn10
zyl9wWJ<_WHgFpu_48>ei?OMv4Tz%75R{+tSCj=eVjrgUaU`TQRR}-V`+Dnu%vZpO`
z%eGnH$sMmNrm6-GA0}j~FCgKE-^19Fgu^RFj%XdMcK83MV;2*bcC`Kg+QRvOfN1_N
zdNq1#dmCLleJA$+7CN`7?(RN6H21Ckg&b~c0yqda7`7G3;D>Cm-kM{91ODUbmp(Gb
zfjScRS2M09(Cg_weKnB^EBMz)>m5*>ld-Y!G0*wt`?CO}_}<YBTslJsvOESv;`<(5
z+LYe6UIujg;#%oCbvdP0RN;#uMSpz!@g7^$mMAL<gephWUIG3eKfaC};7}KQBn)k_
zYS~seiD^&epwI^aR5u1xQz+4#wgC=iC1xGReEflGSrU>di2zxOIsp(#jwdAgJ5ch2
zM#|#S8~$CPc+(xuT*|@3>?n-pp*-6bDY87>GoTgV7l&UGE~I=zj~^#DtJ9>@cTGfN
zdU*FAM3JAmNpA>2!+oOk78ynJ2eS39j*g2VH9ka8n6e(T3i@eo)RDFvP!uRV&(}L}
zGauYf^9n(FY)BBftVqMMboN`q$$HbNQu`;jCQCNMQgpHK0D|X1GPNCgI*G&*Osa0t
z14EVO>=Zq0%~5fT^uF;7yktR|A`JnllUSCHm&cbwT3+lAhq!*?zIdS9j~jrGsIoqW
zI6devbF=5fGq(taA$>`xZ-4v=Bx0<{Xop7c*blTpk~K?m{-iIJXmUuC9?|7%8;X%M
zs}@ji1PG?}gcFw<mZH!CH@(Qf{@cNZTpcZygD~SeL5w02;6Et&Sy}<%Mb`NkjFm<!
zKOCK@i&q-Rd~>q%N_oTY*Ewr~ED)tPBhoQiloc-)D@2v~YS44Xe<3m4MX43&MNySU
zb(8acjbET3kxz6>4;*Q~Q48lAN?-9Ckpe*lA`VCs7&0sqFUB`pLc;dpV}%Gnub*_#
zud^)^3xy%ck6lQBaUZ~6NAC)2Z}-Wh(?5;@$~1#U^4^)DDOg)v<JS@D&?oRO))OQU
z%T=ygmn>IY^r(0Me@UD*ESJsqyKBPdZQQ&t4L*<%9ZJ=csun&Ebev&O6g8}NKi1$(
z{>1Y4o(Fn&#t5C`ij*k`L>Oc}Nu?{w9T)nGX5H_xE-*R0XP`)X!?+Mp)B>I!z6PWh
zv>3+sFw>+kUHH~(q((Cc%#2q33VN^XnPfEKc@8F?r1>6OSJWayE1%Jo+9~v542K?e
zPzb{f_+fidcwZSI=9iyrtQDesLBJJNnv}UD5YQcey&NMzT^i5!*{+x#cI3CX1~<o@
zBrqBY6&4}?o=EF`3BHt02tS5^vILDsR{FoyyqZ~=sP+Sz4oEw~QVD#%yxDvGyDzU4
z0P<*`AAPw4&S66?0Ta_llu%u5F4C37KiE(kR*<4mrXSpD>d-ijt;+`mJsOm^>m*<&
z+N${L?cu~E$Au`a)ZsJsI*vgQl0tc3B!b8SBuw0D8-qkPrVvq#d6dr%u+}os@HT6%
z6c)f_lr*03kmf0e#AVGfTF^S-j^mZ16s8~MZv!Lr*m8rlSl8L3u}dsGkcT`Z<%O^p
zNa$p2<ulDxw!zBQGpdkAkg#mJdVqj3T2C|uR+JdH5!8#(8Y7R$SpW_OBb7#lKIfMe
zFPulq8m^CM40X#_$?K?xNn2f5-iKF72eMUbFM85*PdO|dZo`knD)6YnIY2R#l-aLH
zBn8Y4JPwf}8QaKY-^Uo=gyj`yAmimkDd$7W*f_V4?bDdJHX|MHwZ2t3^Kc#wr}c5;
z*8jp^@?;hK(zfNHp6$RXdAsZ1bIvTl?6uy#VQO^|7L5WTGXu2DpIKnt%(32{$MVzL
z*<P!KQur0h1Rb(e)sv0grxzjy8{wOMLaOhbaHT|65E`E>?d|$FS8;Vdbw;zZ@zAEN
zd9VIb(%U%GE_m(x`*gGD*@3}wR#@Fz<zaUAFN>$eX*3HDO%wX<j3|*OJ&Tj}!(jea
zgh51fh;ZP?pnvIjag^ndjnA?VlsmvW;v{A(rKI>_2$?&d74Y%m=-uh0vy_$6$Y1}o
zP{F;f!(|p33n=78X8Fv8KZ6UD_jX8$L*SzC60-c|@wu;B?r3yrBQD&$Qd!?*c6yd1
zb#5Wv_~0Pk?ASC(orx;{PB=0dn+lFtk8XkLUlTQK{dSJNR+a_=C(dp0Xi_dL%-yt*
zUyi%3SPy{qTh20DElmr^EyPW7TREFmijH!#C>3rN^B{VLvG(h(4HzMM6@72h8hGA5
z)T5iYhlw)6)dK@}jvB7X5^zobJMH!LdQqGmu<z<shT|Cr8(!<JK*E?3*gfm*(IkG|
z`1gHhoji@D@=9pl3RdC1y~|3izD=OqHm%(`li|bWF0WTDq;!wb01zr+O08a0@~`dU
zDwddF2@B9rRjG8ocz^8fZut)C9U@LTLgfDDXEfHM$0k>xfQ{-}BA%56xCUo%8uP(|
zrT0n2hcbP5ewv!9`J?X;2{K5B+uaM;vQ)FobJN+Yf1>e5e?C)+|K@SCU&H)Z^0qf?
zgvkDVnGj^9cAxB?w|LNvZdp2u!`+5%fu?_2UfhLuwZ*N={Cb_A98Vs!X5@aeo<5(|
zDxZT_L+lsn-e(2f(##@jQKpI(Tn9w9ONSbCSHRS@iM%dZTUbnt{r>*$1VLB~ufEQb
zG&E^E)X-UUa+do1^oIKDUsWenOH*5z28%v7T95@ZHJwR1$@=!Sbvg(woXJL~{G>r0
zP|x~9^hmesZfDUVFbDT%FpmuNjw!HU`WLK;*@U?zD|I?C<=x2sl-PO2C);u4W*NHZ
z83Jy*VOHJy2G=!LMJMN9g&Y|Udg%JmnBU|6)KVT}iR|DaAfy=eb#gm#QrIsExG1Jv
zbrq%YZTfW*D97Y}nlBl@6Y|>qf!K1{%*ojhdiee^`P<tOjDE25XF|xx7Zyp?Wh`;A
zaWDvSX3OnU<oFu0I}d~`Q*1XT3*i^jlZW#)CHh_HEWt|?k%7k<ehW~MeITTIqlnsb
zRK;PPFgKOdT@e%zHWoR^WPEJ<f>YTBKsVt3LA1pb*zt+~J@7nSomL*sP!Nj;R;s2I
zR*UUZq!4Pm#jir{jaT$W)QnJQpr9oGJka_?x*AY7PYI<;wl(*L5sjH#!T}zU^ZRKo
z)H6;SThi_#)@zr;x2_dtbV6_qta!z8Mcu3w_HaWSYOWk9PF5=d-#26wU;Z}mG?e@g
zv9HDkJk_}H0+i1Rpc9ic(dIxEn3IxpwSc@3lOO3?BBZ|!WY03AdmQL6Nlv7wqJ-4}
zUw+EX(GjnDnCDP#Z!UU1Vw|PGpXpvNjTa=0*BLVq_Xsd8_$6nn3Lh9lN9@B7pOKDa
zCu}pFyIJa!m!&ffI!P--LC}vo8hFY>osZ{Rm6dMx9Jsm)(xZ|cxC|QGwrle5WTz$#
zt0Onf>;f#m4Z!Co<0hxTC*W9d(%j~nQW>pR`WRb|1&N}hl4)dvt>u8CWWPvW&AzNr
zkzbt5H><vk9)1W<%@y_u!)qX$GmviydITKj%-(FGWXHemNaI#^=DHoNqX@2AwucT3
zLT4gY%Ev+mA=~<mU?I<u)#~;vfPy%-L(oWQK($ESU<~43_{k$pw|@pE*;bsWF8>eQ
zZ_W^3nD8*zB-xMct~L+nfy?rZh<UCZBe%p)L|D;CL!Fn1G>%Il?d>4Bxcg`nV&Hv?
zlo*3NGx{u)GpXPsYiBNd6W{h_(sU%3ZKD8e?@RAb{IRCUWS2i{L_J-AOnKkh+#6m7
zeZ9=70A8=9lHvlyX@pTUp$pa;41hSXZ`6(}gudu1A}9N?9K9A&?rn2d6Z0o}MzQrJ
zVQe=6o5z)O4EEtlNUP5_G*#kL#`NdY83#v(Dz$%C12$*Zs8;yd;E2~x){cH$WdO`5
zGCoVAZ+WaG4H|<04=D)UI4RHtjT8d2=A<AbUbO&atUUFb1b{&^9>@4iFv@HmrHYlt
zyj<aGBspcj<@}lUy(2B|*>P>Zx2$-&US+E-YEq^78^xr=4VXDWe=b?DhAVw3ha$Vm
zhUL>LOES4$na1GScMW3cR~ZN)6o>(3RI8y~s>taix9mOTFN3f@$;twQnuCxtbkkZs
zAS<j>5F}w;VfbCtwUT;*L7kKJ_~HI$`GF=Nw71IAw~?#WYF9HB%`Uj@Owozc{)xdR
zcXx$o10A=?BClmsYSfM<YdzZZkdaxLEg8}&tm_g3HYllk<@2^<?7Xv3OCg+!keM*v
zqGR5i%r9eYJ1ljyB}-5qIfyO*5BI^5$(>Jt=?jndh63i67(Gw9E9H1fw^AY2<3BDJ
zpxNtZOS#{*bwN;5rba@ywLkm-(u3}0#<IX`N6zfVkZ<td5%eRaO*KR0Y|JRk!_>44
z^^zkr_CaaUmVcq+K|k8v8>xgH-btt}p{;C3KkdBV&U=u`v(CaiH3dB0hZ{;Jkk$|0
z?PgRAuTFd2;^m#Dhuc;OtT&e5>MKvQM^l<LIoN2g&c5GUEib%(|0Kt4sFzLUb!}Rb
z8TchAsj(VnhPUdCLU=z0eO8`D(?(lrE4zBs^S_*#xMDfJ^qI7(DPNJuRm~;R!X-5?
zRIQhcP>Th<@0k=lJHAwaW);*l_~$#vN;Wn+6?#?4b4oR|59s8FNcol4|0ch*owvsE
zA_E~61<$mTU)Onsi@ykHJ|$hHb?8HS^R=sNzMbicY%e&_X@8VfI_uF#_F~(-aQewH
zY?nOgW_~%ugo2)QYt}ET2SNEM;rnx}9S-O=4A<1v!4+=Jt81Nr<6h<m%z0pOWM+C^
zQ?QU4FTLyhU*YuLBt@0I)fI2W>2>oqdJX26X#KrevyZ+S*wk~O7GH0>6aOD$?-(me
z^y~|6+qP}nwr$(CZQHhOoNe1W+qO05e=~W>eKT|4bULg0L#02h)#<AGA>MmyYkD;4
zKKB*x;UJWY<|n7qVh$TDUs1|HC<{#*9&fTRS(;c7;{7!3YoLG-MOW&(`#Q&7C=<56
zW0zV>+Qbn#IoRPL-AeIg+3=u>`~&?WKDCq>Ay(u;u3OQz<gQosu@4y}(R#OB-_(P=
zPf78V)!-~unxE5|xP`BZ<qTb;*tPfg>FPQ+7uWeG%A*8SPr$Xboj5$sbXFfTsy!X5
zVs{)1PIr#=v>s+;!VU14OLwcar;gL#l!C87S)lbSe#I*Dacxlu>)eJa)`;`u+d=}o
za1ieI)#=l#SkK2M02y771tuo7oQ;}V8(%OmSK6|M)FJo6CL_|lwA8w|a>9J<;ze!E
zL|mg%BOV5wi2*B{7Z%kv8x+x%x}BrR2%bs^KYKoYXcCRfEBHOIEEG;kHVXKkI=`Da
z1OHvi{8E_xK}<Bccy+ek<FZSWG$_FFjPzwDFw!PDOawq)x3AW>StdOwhoT?Hm~^AL
zws<^JiYN)ME(kI6-w2lQqLD>KCImnE213WAzi&S465lGX-;R!25-_=U-={?C6Fl1g
zT*FOMgG!?ONXPRYC`Da|5baqj<Z!s78*o(l16x&R=W%JkR8Zyl1MRBc=CNs7+**Py
zX<4b0Xp1~Ce(mIzhJso1(DQ0p45SxiOLv93XRXHrX><9kEX$5$bgo)iv7JU~UrwOs
zG+WoVR-k7xo7cCd&~u!P8@1gvUUKNA0o?i)gM_64Mv|c8P<VpXGepwE8dE>L<%yDo
zB%n>+A~zi^3~ICUrKrT0(b5BVvb$_mNq3ibCWh}X?CM%=Kg(|L+}-Ui+A`Qa#Wrck
zX8RI3qARWE=5#gx!6FGG8Q?eG2S8^Gy*Op+13ZTq<kkL3ho`Ctgu}RSfHyf4bSne!
zniiBh7s$aaw?P+}!#vr*sU+-J(&pfb+?%6`4e*J;Q>@Mxio)OyTkymeSpv?}p#daM
z0c&s7F)S0uJ^KJ)y-Ql7Z^X&|+S@I9o`65*_f%SWeR&zD+ZoRT9zT!O&segI7zfV@
zF+*YPYU0fT9<L5}PYrWkY<s=EsL%AdtTM}vdo~8b9!v-gbF7W^Y`yGNS@&J4;j6CI
z-E)LH7eh;;5`&CEt09s0no4zmd<#jXr1LR2&!{d$W9MgdR;6LV&*-p9$I8#>pi0Ni
zP3t^&I4+F&h+U?^SWcLw)fi8}rLp{goto0TcO;2XgBVik(Vj6&7AaUPny-e*liss(
z3F>H*MyNVzkcO!$X&?b<)|lDm(N~s{KbFPWapkZ-yDTkvB9CEMd8=7nDiy?<O8t^r
zqDbd%*2##?e7<*5<(}1r2`zRv83Q{>>ioJFPlg|MXqPl1llc_H$B69BIZi+H4jjnr
zN%(wrxRl!WXGLp%yNI{nG<it9IxnN5^bizB71KPQU!~852THxpn~bwhroj_040e(z
zk)u3D>$qr!$w8GqdQ0c)X(_gcn0*A0M-e7WnkN(i0q!Vg%bca4>})cI+UT%^bO|i>
zZzHBlo=+84n~7ii#mfIxQP<CuT~N_wJFI1-cP_0kE0iC*&n=(|^OJDT^}x!kvd%&u
zPax0OOQzhb!$L)Ofs5B)fcXQqmifS`Uc)mx)YXL~+-<5E0YtP%ksacM6v`L%%F%en
zuQJ=HZj)ZSX2i*4z2MR^xMz(K1;2oPDdyVutHt{93Dm0Uy;Xy8M&Xp-Q@o^%OVw~%
ztKDW5N?(Q5ReOnMJJGYieAWc4UkNCf(Wj;G!=_8nTXoQZ1XlT-Mf4tTG%yBBlQ$bH
zJ%+mkH3eNxhXqGH`B!0Pls}baP3*F~_G5M*eyWAvj-|7Y%xm_8Rl5H%XO+(g;*c>d
zahax-eD)LAwYI4QXd^`~(@Rkdi24G~DTk@>QyU}5li>$={?^`>$Kq7kuLc7@b-|d7
zICGT3NUUhH;4<BQY4usF+MV{MmQ?jGmFmiB0`)$;#?@|K?{i>Uf4jLWA42oXOGn^{
z5yD3I^i+Hh9s5F(6!oHRYP?n@l)k_8idL~zJc^_WeO1trO_bFid)^+<uP_vO6<@zr
zZlQAm+1+31cYm=ypG#}o?<XRtuR$<LS8ss8#T{CR<nfPUGvDo+`%+rrol7Be&+9XV
zYWnl2H|QJW3N!)lQUI1iXWBhlHVcto`9zkzy!!l~mlvNqhr?@6Wj(II3e6d4&JA4v
zth#uBR0Nf#&OSD(^P2aKIkGapfj&Slv(<sRHqA?$gsj@EQiS#_aYp6F#jmUKymAcx
zVVh~`LFXH_?Es>{E~<9zckurXhR6UQongZS05}x^0HFQ<(;)p1q4z&<i2oC#w?*62
zeT%K_KX8bOYnLmPG)RQ)B#!bZ+%ZpA<NWpO5^_ma0!XbKrJ}Hs9vS_IjlEs~N}-k%
z$=&m}7B+}&*#2$==;m)+PK}fi!HikBqpPrK)5PcY2}Qns`o&90(F{}1&*>t%&MXNh
zzVzm)DP||dqu&%oQL$*NB=qBin5LK>(XgbR)KVHd6P_#k;F4yRq-Ld26UJy$K`LR1
zvhZ;_H@lS(ZEs;AzbSMRs+$R#`thO^g0id<QprUbBv14SPtirp$cJ+t=@FWwBeq&H
zDL2~EG{i{EiD4;#Mu3NRUWp(!Bq~kw`gpy*PM?jZ)b}C)Lq{z&Q7pPD7Vwv#2&i>3
zRaW|Z9GvalT{!0q0Zp^vo({fw9`I+Kuw<*O=T8CuH}tQ7jDB=W)d@_<+X)M_z2s<~
zZgl@6_M^;<x#%zP;gnO733ULlm(G_Z1y1{{G3X2zEx2)#{#5oRj06wDrcuP$c&y(D
z&6vWwm-guDNA==-dhD*GKS&aPUEE{=3b!I@NIJngtSgk~-GRzTqJe5C1;l6!38*D0
zOM#qV<MLO0;EMkG=^d{bY2lr{bta6k&`P_ArW!LWi}iJJ5TnMVGT=MuMri)?BB~$6
zJ<`dG!<m%GI9|YqFeW(!l|d%N>-~NYgP$M`Da;8ofIb;V$gE?KD&`SOm@wya8Mgzv
z50nrBkP}I}N~FpK3W}tl{)ZYa!>l`&K?5QKG#c1gQxv%(RL`*#mHLA%;uRw@S#-uX
zDFE}&<ybwb2i!->L4xcRuokpzx|<1U|0dd<_(Y?iBmtkb<hObJX3)&)Tzq`Z0;qXv
zKA(d>29h>(dZ{zSPZCO#j;R4odBj&_ky5~kxZFui5TYVTQRN{n#-~&w^E*?!EE8%N
zsTc-U%^`QZK_fy4Q`p)aozu*$k$&KmluAVLQAWjJ!v)_VVv!_Pf)5;L$sankxXf{v
zc={goaiF6ce00MPUD$MSt|)>mjJKGB%w8|AUobHfsX_&A;(a=U+2c$t#e_-}QV_|w
zWOWG?k#nHj2V|Ae+k)K-@O-ZB*@6^B3F6Q?!<P>j-B5?3SS<QdG_o{<$#%t>m){n1
zJ$}7{3nEc?gE;5$SZ4ZANXHmC=$TbzpkcaMw6v;HF6Y9Y)X?V4EfGUNt{eaugmGC&
zVjAaa=xkoVI7@fJf=QZiV4PNkLNf&fhYZ>UNT!77<%f3pR(e+qVf8Ok86YaqTR8za
zsED<Lxq>4)B2jg%0vIgBvVm?PODfa^g}zA!$(tPn=`zlD8>Ww_qb1`8xQt5Wt{S4g
zdR3Vm<!u_J2`NQlYyPYFvL=|Lr59?*JecrtJ^Fe+x<=V<d2@W1mek$c-Q`sB!y{);
z@KWYD1I9l4_%K7Vdje=GTr=fBWz-E5Gu~Kx!G~k5z9ze;{k1nfxCvPql1OFxF-v#^
z)zT#<li)K+6zs0+ks}y=_+LguN0=YFO9KGLitYr-vee*N1t7{wJHky-z@|$Mf;1_{
zh%R;p9qc?Ks+v|GFicnF;L2FB^ldq(2)Ojy@B|%pB5i^;?&K$j%ctknr60L8e7oFS
z;mdlecWy~Cy9N#XB&Q^@l_kHdgn!M+yT`%styg?I{wsf<FT=Nkm+;(R-UsrH3G@{o
zMO-!$`IRk7!t2NKzUlqaXYwKl<joyhjg%zbhws;t^AEdNIE4pDlbZD)o+-AFgH_qQ
zQEh<@@_#~ZiNkXyUJcwnUq8cx;qdscyT5fmK^^5L<Z{u&xF0HsH%YnN6*UhI)~E7k
zza#}iRdEMATS|P}@>WPq;C-4?EI4=r{vCEG$4~pvL}^HWQEb98KD9;nb;E|#JMvyo
zQBUYQd${<1kF6S>`;UfKXK!!$Y*<fdPW6q!b@C&`J_ui(gCTHmRo%n2LtCF)+IPU}
z{FYwb7dLRgDxnxTgUN)0-Rc;2p|HE_86cqJW)d%4Rg|B*)_p3ycvn<<`PitTwF0da
zmklb(hRYV!Hr7RKw?^gb3)of-E3!M_28Cd#t8(+J7=)dE61D}MDwG?@vWyy4U<~y0
zNWy=Np;>z8Wg&uciFZuqc~)hyYgc9AW{`JW3f`sIbuIEP%D`vbyUu|nj)_R<XXE{`
zwO2E^x-k-#yqlO&*A&vyG+T@Hti$K>V#f~4zjx!0n0oV|y1d)hwtT()p54&3fG1za
zZ%cfiUL)S8&v)^f@^W9jG=IK0kNf2p&F3oMMJ_hh=5X@J&mT_*Z#93eFq;!kpIqz1
zeFuVbqr`bXKQh;tfJlKn%id+-x7h{8;F_A&%X;>L(beFKjqdt#;M-7P_%-mcjkpBX
z+#?Ey2~GrP9)+aU7Ey)UWWW9Bqa6cQp31d2F!(XeJcq%!Qt(VuCd{&Jbed%s>)Ood
z{M7Y~+xsW@`X+$-(u&vNR+%uqso6}oAU?3N9SUO6ArS%UE0nwif2(T1fU8IMO(1oP
z3XmO3cnkeiTfl|YkHUqOYtRH`5p|*kFz_i%b^q~rse1LQm-VP}U3_1xDzC6oT>*qt
zsnYc5fNxEaJ*Wdz-Gn<}y3%Fm1r_xId&+QVMdPp%vznd-g*#I?wXnyj11gk2OElw>
zKhAwW?hPTV1>(rMof2T`USVXgZX~;o)GBOTe4wZA7a{Nc?|jr9qc`psvG2v!+8vq(
z+g#I0^dHz~3lM|LF7(wc_N*X!HMH>CR*MZk(8onH87F%#Ua8*cO^4g)+P>{naA`|L
zDQvOTkPjJcj1PW`m+s%*3)gN-RpCo0q{*W#$M42X-C(Dz7^SH-{N+ggS&?;u*?ik>
ze-Dd1775HuO14&?HI-;rljgotlkVu%-nlhsEo9d1=Pa*eR{pioel9MD?lMMmDTD4X
zQY1<N83~Hdt2>QToD+A&HR@Ar7k6DS+WBCwidJa<ioK{>sr8c<v_6mh3F}KU*47Qv
za^#+0*tebkcLxyEtPJF=dKwA)>W+R|WCH5fRZ6L}SM+I^sZ}sR6G^5Qs9jkJ;m~3d
z<wjYA4H~egZFq4NR3%2q=hmgo2^ssN{cfWMJ0M)2n<zJFv#k;=JXEG!N40Y|sf_4^
z@MZwa4%Qc1abB?Gu~_P;^|HkZ99vnv`)V)^LaEgjWPzd_HElY^jPdvSe4ZR*D(qvL
zr_dUFc7Z})GUi#pkZWIH&<*Ck)sv$iE<~>#M(fkbd$XIe#xDH11@j;M@sr7wx2Bk*
z_hQ%NkrfR`P~WEQ)KuO-xO&dk-^J9`9m*HK#WJ$*b+x9otb&)*ox=%PL9VZyn~hxI
z%k3lU@%{LG-!e|Wl~b}#I9@eKQhJkq^%CCxeQ`-=4M-Antl<_-Fs(g%x0;Y;ul!73
z!ccptQ)1PeigX`4luF&d_o(Nmxi!r80soX*ub9H9aI8?J`b#vd-&!af6Pq^!bN=eQ
z@i|dwb4LMx&(Oh-f_e4nEr;)&|76`<%RTEem^6T|;ob;tJFy<1;f~kJI|~f8Go2QB
zDRQqjg~FAX8lnhP%=EVrw+STE1cA$u0_W_d6911O2BwVLeg~qn5QePHO?ccjaWXPV
z$|4ABXx;H2G+3CjfQ`sGkZ{Gs`2cdk2pOW1L}KG*6lnGrN*gq-vh{Wz!sVP0+YPis
zE4h^SHe{`eNbbC2vO<;&jP}ag5G3)^Bf>{w(>!BQJ)Dh-3CW}cX)^{-niRRKLQlv?
zA$|u`gg(@%1Tu;#xJv8}Le^81(ZpjY_(oTvc&07EvIsCkq0|}*N8l5%ZG$8ph#dl<
zL*PsWIwMwc$mIRJ+aj`j^6A93K@(B}mN<uH_-_g~q0&f4Y9yAZf~`jp6p=b(AjGKv
zQ97<QNDT`{c}B+r$9!nOojR1dqrS?CNFnI}swbmqOQ3!gj7|hCzZjW5*-GQ^va*5p
zQeoUMLlRwfxezzH1hKn_w?BmKn61<6%{1Abh+OP<$q9<uf_P+d`=p3LSW=l9`$EB#
zPNk-ykX{RMp||9TLiBDS=n8Q%fwqtbj7vOIu_4yn5S$KMd`q*XIiNHSi4#a^E~VyK
z;EMa2Lu2DdcGDV36%0m6MU@t<$c*ejuUIlXU;~FB3(g{cG6#xfEw<Q1kVLD4IUIzz
z<zUFx8bi#vbvV^Y>TsoDJE>_9jj}cpPeWxgDi4+-0-aEg^I|~v<75CIF``peQa%w9
z+$<O%(a09jsT_+!wA!Xx^D7*5<FbSpHrr^JCy7Ue@f!yIG$Qc>6sV?n+Z`zcIydQr
zhcB`%L{qMxECFQdWOBq*VIg)48g#;xUvShB2c<?xbdcJLW8Qis$e|%m$|o2PDS@ri
zz!+m?3Cs)JMJUO{&c|!oh)N-+vSC<I@+-=Ls#Kz$I_*7jd{D~yP!1CakY$IfVT4))
zgpi#4KpnXW5K}`rjwT|5!u?5^B***|a*%<wbiRll57~wcra<CRq`cTPNHucuCEF1h
zal8tnc?z|}(*Pe)Dssm4P!>>CYdn1)a<omIS2*NJ>mc*ui}#r;uNqneAsSPzJP=Pb
zX9NZD$lMBKvGz0wWs*cH)Pt{+B~?Cyyb)NGh>6hnpb3#OGOLpTG9;%GCEO(>aM^L@
zy?BqT0%9{E;Fy9T9^}y$;~=NZxLg#Np)BizMwMMr2uat>)1(ol>ERGN6>DrMK&xJs
zz@a~hOh5A?Hdg3Px`{mYsv7W&5juua#n9ZR_W&$#1}%};hh}!BOvxW;e-n_O3yM)P
zMDbdNvQ3p&nC=jt;bi28<E3{*@j`nw(mzg~Ap*Q3_EIR|9R*(MbVC_e(6Yb_Wq>lR
z2mpv5twS#a{P#_-$;kHmt9bNBr+1kEh}68WdaqM&C<x$?Bk=F7B-!-3bkY2X7L1fA
z3~eP#C*mo~U1B8k4JY5TLut}ax1J@;>wSFVoK3n{!`h$6%iGOXxn?_1Nb^&4`aK=J
zyumD2tjPD|K0U75mpJ;DaPwo4fUric7TmESBx6@s0I{#cS;Oz<xol9yodvpxx@H~}
zP5WYyR)b9jE{_x%vx~f{{y-p`U6bu(aO_)iU7AhT{7nv&7X!S(A$)eo?5mZfkR74G
zqwK`W)8AS?#jOS)-%Uq3?gzZ5p}lwu(>2v+qF!(+db(M?A)*}v;Jjl+pc~%?cWjx@
z73{-M{eJXW6MK)cP1xK`R8uFmf#i=stAp7U;GKCj_IeMAICRZ7N)U%co<P_I9QgV)
z?%bf;;-;FnlE77NnvAiwOU9h=D1GNgG@h5w6HMe?B9?M1j}Fs3+}aq~#rW$&63bCN
z*Ea*>ZA|7j4Q{v1<K}MTadw_5=W#q=o$}?Z(<E7b-Sg8aztyMwy2UN(?;b`&lL5wy
z40fh{4A(MO)4SfYJ6%j4`aXce1#|<R51^Pa{eb(9<4c@}evQFm-Z}rqs6C|HVptD+
z+ksCH;N3B5kL-?IAHeqH*hh{HhWL*XY^$Tpt|3kJhLoa)Mj&U0t<QBAtF;Qb_Un=<
zx$<k1DY?F@<<)Ar?$Va@6a~7c%xF)d(#1V}V?bSD*=Nzv&w;l13y(7C*{4bjd$Abe
z9Wh(?0WGVuxOp)R-9}jREDj6?iekJRrza@SC9MsfRj)Ktz28CL;@#KLQXCrCx7}dr
zj+NkYg`aA5ae-5=WBiYcN&g<{9pA23cvKN;aBp}D2Q@=1SNO<q^JQG`L1dl*+O-_C
zr4?v?-{0_=)4AT+oqWEN(wWA3J`S_5!Nz*W=W_UDOXrRn_&7~x?X#8gLE8XSh^a}>
zqYEBS*ibWVuPuXS_C{KJc|4Iy+3Z9+msa9xPX(J#c+Im50d?rZ?3NZ{UD{nT+FdbP
zIsfzX8&&%TC&c~5-qP}&xbo*zn$~P?K;K&HwLG`h@*PxpYoyJ22HK*;eXMjqs*OS8
zKu7d~MV;5$U5E3h@*VHVE`yeDGT+9TF7(1yxfg-Hv`2xS-c4I2^sO5%tCe0(r(iCJ
zwHdgCFQq3i*SnuF?sZah*VZQRSJ0iUK-9QauGMX>b?iE7JPK`PWW&$J+DPo1@v7f3
zTFmL%zWh%kL{%1jn&K+D>aNbVvaI@)m1n6>Elu5e9u0ZdHTx5<s%}5#HRYY>?9M!<
zRr^iB>*GXIx=g&R0-v>Q`O2+qH^S%n3M~$1qY_<x-WFx(_Sid1bzOKG_Vli5>29~o
z?yi>0j=vtk)N$-xfBSn{zOmGCe3Pl;`esna_Ku<s>!??2%(&<CY(m<)Et$>l4VKI@
zwsmc@!SY<p_w;V*8+RHUuePu02X`9MzpxzS`yjWIXB>a5gmd~g5l+joa~!)CFn@P)
z@6<=$tL>v6)%Q-Kmh7EIDi5G|E-K{lb?h?1QC%m-c0Uf|PZ&x#nFGInt3ZAo3;Hk;
z3z+)JA^l!DPDsnuzNWl)KQc`4e684NcLZI-g0LfM6uQARcmf3<A;6ZsnNmn(%->S^
zf4p%OOAXb2y>s>71GcB2Wcn^w{#-nc`p`i)mMGn7K72SmnfTXxmR=N(%9^_jf6JO1
zyj|Q@*CY8a=ab>wF!>uee|;TUZpp&CQ{pS&_cJf=n99N$?!!lzzYsYBOsxh&_g(~#
zeH_YsY5Y?x*Hrc2*w`Xt_XI;Q`Bk4>VJnXXKA3x{cL>@HB(gEVNlIHJeBI34p4kbP
zBV!(vgmDY1H;8~G>16r+c2j3dgE`vm3o)oyTkPXml<GDR9MSy;x7AO67Y@=~x(_=1
zS}JIzWVbYYXi1G-GT_WZcpMb<N29q2C+y}sdTz6gE*9g<di2Z9b$Y=y-*bKe4uCZ0
zcYI+s&&RgHUTC##500fUM226Zg3Na0mtP5?cSUnx`)f0;Ij;F<gVx+VM;7aQ&{a-A
zTdXtFRDb^w28`k0YHc6BR)4MeIxfHuwuV20mPvWbQ8VQL#~(%aa*G{fSR19cah9yI
z_rhy2m{@NL)kShbhK3BfOpT0;0s>ni_H+<5WX@h>&41$X3|OWKA_*ZHM-5Wf-?&h=
zk6)P!QHy+N?%f~gwt015)-A>aa3&7MZSiWje_!qqGnbt%$fh&8v6|7%muW-_MNcju
zw-=?;9={6@_V<d(j?MRoGd8j!VO)02I#sE2f#MHZC;=3V1I(gQ$wIgG6WzSMNlf^k
zV@yXsJV3%tuGm%GIX*^-JHB-MQVfQ!@k1npBd-+M$K8bts!IQ^(O@C7YiS)7D7m_6
zrp07I>F)wmqEAWHb|~&f(kX#lPww>6QRI8wwaOs`_;RTS=03)uDlw{WiP-VTKuSla
zjw&@OTb<Gw68KFK*A{bZMP%)}{lvWdl12w<$I0#bB+UrFT0R0leTt=e9|~PQc}1$i
z(4kaYi$qY^v*Xd`XEi`Vw8uf$V(_;Pol?kE`3%-6Uz^(Ed#600t8g4#+E}~B6lz`4
z%+S;r`Lyg1H7<S9La5|dP#HYpI}C^c$0vY#M2ApsqH5`gRyZ?EAG0FEXWGzs2j`w0
z0gP72K(-LJ!tO$P!ntduIZt3nlw%i33PgkR($mAYgalD-6`Ho3zGJ)GEz4OTFz`id
zJoeq3H-j`yKuA>bb=j~R1uEpxr5De2%iA%IP|LRXO6_OH+!z`z<wR;P9iS)-3g2@+
za=!(!akc=)RZxM#imnyE)v91qP%ujh;GJXRRfDhyM6=0c>Wj@sY*hnAP6$*8wj}^N
z)J)6RHW5+#Da#gjL+@0PD+D5_5o?Mdo<-32U4K!IgVmyF%{$b?ZBETxSy#=S8MFB1
zEv1XD`QeM8k9cu4901CU!@em+@ig#jKCs0)X<6)Ms#t>D+Ia0i%RM?ZF{GK~{$9O4
zvMTl4j7X7Ai`k{;9$)rZk@&S)j$-&S#91*VFGZ-&(Sa&Y@uHpk1_~Ca#dBrN_K$u$
z<@+H`JH;d2%CvS(lV~NC$7wn3t4C-!OD=e!2w)^B&k_n!eBKKX1YDSwy_*Fy;2*Z^
zZnf}7Ftv>ZE+zb&#}OYue1N7^X;i#pHt?6do)c7dI8T2J8PgHz#&f*xn~s0VDo8K4
zU85A!3f(NNxJQ*BYrX4KrRmZ1F1>2&i1euMg>DXtiql^|A$!nW{dDQl)EM#V&8TWK
zl_|G@O~rf&wjO^i<w1A^=_k`BEu2h)oWU+Filw83Rv1u%Rf}Vk1Nma{j2iGQX*+$O
zfEiFf->=<!mb9d>@p!eCo}NAAKc;pI<R8>;hO4@of^BeqEpe<+e-Xk+G1FAjQGemE
zfYtrs4WCkeVTKhxal?j(On-&JVE&9Z*ZQE}ILhY+<^ZI5n$6yo`FXPT-0!i5vCFl<
zm7yWe>atu~iWDy#GFZzk9gG*IWE~(qE^TjZX(MvFGjGpN2h}5@HPN4FiZOC!po?8O
zB1W{EMR@xD;gL6o+XNa#86jp~N?A$g{{gx;?>1LDw*Dse`whVs6p(7r+XmoLZv_TF
z?4iuy<>egT&t!I}aCsW&G<xz%1cD&siZ6epA)1|s=54hg>HQ0<>hn^AC4fp{2cuni
zPL-YE|Gyb?0=i6^wE_YF+yMaqko=Fs8D|SaMtyrbQ#xZ+6-WT!-Q-dYJ?RP!R}W|a
zK#((F0D%8mY!el&w-``D_r9rbxG>ztuT19!(_ImoYG5;3mMLvw3{@l}SxhD*)@GU(
ze*37$cCwgy&vR~Z&ZR~u0uiTmyI;Mk5y;HV%j@_0GJAqslN?s0v{gxUykCW#LNvoC
z-xG$XF*+gx0oa)&{OLvIL>sG@bv6k=UDPDt-%3VtXe5d~m;%T(;qF#k=Nou6!skIT
zy%o*@ux&}k^L5%FHi6t_ty!9NhUAJbroyudLztm&;4lYc?%eRJEs!VrYIJ7NtF7)U
zK-WC2khu!h+;OeMJ>g-D<p|pjd=;<Uy0;f#2s5_dZ5<&{hdDZjMiKN#CZugU&qG4s
z0Ylw7KRif0ZQI8-=d~RA?H9iHprb^I&u!+lrQxSg9~r9X%#%~NvCl^0a2dl2{3oym
z<MO>@$CLIT=Zk!J_5A_)uG;}It$twa`$R969*h)gFP$2@H1z%Q$$0D86WD-e=L}u7
z(=_WxP+2X?{4>$-^PU&2Wc2T^@J~tIc3%$84}Hm=ZK*M&h{gnz*RLX<HMPyo#u*jn
z1pB+n>T4#muqV!lKQwZ-ZI!q#24GGV5<<d{;Q#x)j#PGs%?kzqAcX+{faw3UC74**
z{^t#Gt>taM#ewv@mmjn?;#w=_DAL=yfi~VIiCvS85*dA6xW-Ho71c^D9Y(@FLFbhJ
z9fo4cOVfV?=j|SithJ6c`(?&~GYfN`(}Pife&*WcF<sQH8R#O*9PbLdWx-^8<~5kK
zwZ-_6P|DA&RnTn8DBbK6GW!=}#~~1Bry<8wUy}idAdWSTLfQ$fz!a$g1{F4=14l?$
z&W8*$pOQG_Cy8z$ho^{ycAm)`r#wTH6RJ3a@I_#wNI)^jf=mAoq9ldzt0E)vK9X3F
zLQ=spJp==?fj*BDg~ve-kd4p#$JfP6Ptox?6L1T`WHik~x@by}Png8uv6*P&ct1C1
zXMaC_DML6<ytt*CyAo9H_&-$K2oKmx^5A|pMd3Y@!I}4j9}&N0R!H$iHJP{`h~ts7
zQF5B-gl>3aP|?O=k;E3ziUuF?H}Jz_^*~G#&`uxslB=^<rpQQwfBV(><plXt5LNIV
z7(^at_Gt}<5~?NDWU;;`7M!69Cu;H2+sak*3uv#%Ch$nsapS-@hh5Bp({uwamPXbR
z*3xmtiG^Umma!No8W&bG&#-lDrV~v`)(Lh8t68dXn|0^<&^4oWTxQ{ESV`?1<(Ll|
z67mo0=*b|98DxyqKR%<6w;y+A++6*x+-|B4CUu%-(B1id<qMU^!`^{vwgq0ZZTVbv
zpFMX-r&_&w<&4nq!e@^Z4KoaF@RR4t(7xji<Y&*tdzNW8-Ss0CoG$TQ#NMgulsOh`
zL;FPaex9zLE}5rGx&T%ob5bGtu@;OW{&51~rm^7pf@L65D>oZ_6{-adH0|>-C?(Nm
zVut^X_6vPEFd<T?1qb~6RQlP)p+^lwmWEzI;rqFiV(W08@^MS$_aPAhC~#BMz(onK
z2O=p6m<MX@pE`blrY>B0%V~%bEJBK6b5x#1TY?IkhaA&iySz)f>%zQhw*~(p=h!cb
zmDZQ0C@FG3*<t`6ai}II{1CTeTF6bdY;D>%PGfa-%kQjD)#Yr-&9~=i%g9gJfguXR
zvzd(}8!z9-lP@zbPwwx7hwG=Wi<#pM)tUR7tCt-YAKz!RR(t`pBQ|1oqg=(THN$U1
zpYM+`*6Ac3jGPFz11ee!6$7P$=qdR2^_4hRz0h-}InB5{*(OsVNzFK6#mc=zpD?-r
zs))5IqedFBIS!OFvZ;<YxF~)WbiU{%Z;i@&n&2NmD^Hb}dDDAax-4isILxflSC~;x
z1u=#pK{T3daZ$h@dL@;VP0U}plXIk1sG2)`Xtg4cg*A$J9}Ds?aT6dO3);7c$-;tI
zibTbf>g|^jV<HvnvwWZ34HTHJ5`z%Bf%%wF8squxJ2fa>uo!?j8Y!TZX3&WaUY(wt
z6(ZxY(j{O#759GzLay8U7&3sRIKi*d^G_xP`C{{E<L^XG8YbsN(MKrhl4(JL?>X71
z<>y5Bk$z>ZRkw3~Jo&qFc69Z-LL8@1HC72ldv6y%uC3YXf;i<9xKW2oa^p`953vDB
zCd}q=wRpLOgjZWtF%;i9+ZYG?eJDS=$<1CJ<l&MJO5CzZx1S|)G8mj(N~<ocuA}$T
zhTB)pNj{vS!g&NK?rQ)@mo6A%7YyMkz%lZ^5PqZM^gHME=UOw>*#@uK>gpH$W_s1R
z3y(F%4^)d0z)w|cq*C!D{w5d8UNM_R&Bs$=4{^}#1YdZ4KATMCbf@1j`5|Fhi<Dsa
z`~oW+_K~fV8rj}X&Tg*Wj=qn6vEE676QJ!gTR`aP>gLAF;Ph1**_tTPmbxPWn2TiQ
zFNY~VOvlGAS!ND@LX_npBw1<(X6^RiC&5hbU`^I2a3X?w1-o?rMu)p4#wT?NYt0r8
zt%}!}Cv<3lx#dp-3+D?}<(5xayx25s;6du5YCI9c__vAT>#e$74=(E#4LcqmV#q<k
z!?EEkJvqFeXsbZ`Vx`$nKh_SAJD@3))*NWEt<d)4wD%ww<49@BvkR%8p5pw7`N+_s
zv6uj>J3~}H8SSvr=qERISsI{gc|}@VE<;u*PH}b3)eI!A*P$`shbL`40#|K(U6n>5
z7oUdzQ$Ex*^Xj`+tc(ohW5!*h+iO911GZ9Evq&+Jvex7^$dj`@hfn4xvqmDSE$I^z
z(D+yYOYZ`#H0510Kx=b3hhH05ZUa6ymt}Sdm(qVLJmw^HwbJCU802JOnY<q$iVK(J
z6rL&j!$!l2Z*!4%vjMBQbB`N)hn$mvJlq!tTR8z^z$Qpx+Xe%y6N&BDMjOi!W~$~K
zluUGgY}K7{vAjfGe;HS&+}_wH@+y3Sq%(t#yv0^Zvm(0(+I*C4tPGtTrpGaUK7Cxy
z$*8~e$fBLD7E(3}Q=J7LR!Wv7kkqtJOg5rXM`#9CVExaij3(nS!>KRq+?wxM`#z>p
z%=g?p8I+FDthKLCoHA#7ihXM(6E|!ogGD#Oo$ULd<4;p8m6A?!S6p<pN9po{i=i?q
zcGlbwLrPYJ<zNxhIW@+81ftr#4fndEa75AIlI6<AgCE*4^jXJ{L|a2qGx9&Nkg2rN
zP>g_=hUt-WCSmq9<UHTg5VOjT*2%(D=)y;tbqLuvTa2&neBL5)KTR@+g2R{!n__Ai
z2_^$y5#ltIqUKN-h)u<eQs;e{!dQv#hsikoAV}-r6uQ%axh+j${ywZ&6W|CFslM2o
z6A^4al@U7)EN+k}D+{O(Y%7F@HByVH#lfL(jjkQU702*>mcj>GvvajIsAS}~HTC)!
z))ZK<16Gt`F~r9zN4>c)_>1C?OQ>+?!c&X4iWDaQaCgBsRm%&1c|SYIx(Qwtp}*IS
zVE{1{N2O(4*SmfE*zx7)Yir5y^A+-7st51sR0j6+E52B&N_Z;jxIdrl3i$T3dvfFu
zaszz((ab!`iWNoNs51ql588}1MUcPs^|LRgnO{$sTl)KFI!W)Igh^{sz3x~Hj1(1$
zMD%zj&A?%}_|yvK>dgl_3_A}O*Dj(j)=YK@ma?nZM+IcquuRnxX2CeCCe?y{)e~;P
zJk=9&uCYW49>Q4n(QV2og|~=p2g&S3{jF+M3r0%3c$1&t$1Ni)g8`4{&VRfUJZ#U-
zNHH8$t~JUA+##Gg9lm5;7#7mw3TEryCu=1+(BU0AA8?<2qTFqf+{M<(9NQb&BDpyL
z&LHiUM!Z@ieU87_BI_9~lRa4OFzbin`Q>rT(|_7#^!!h=97t=X5r=%@AK=Oku?C5o
z)#_Yx5)Z)wIw1koAv`jSOA*n&D$|t5!}Q;Pf+mUSTvY_Uqj0`|o$U2)RE_rKEXV7Z
zfXhFvU3BNqv33xi3}Wq|xU`G4gYfDWYz6zZi@AgNk{9ks=ztKTok#hrxtyK9?=NOl
zmde(##HbW~Q>y|emlb-I&0~$PK3Zqf)&UO8Oj5pDk80T21ezE9A?iti>yTEv#jN`4
z(P~|Du4T}+l(#hUYd$Plcb+HeUhWaq^3u5*%Gh6Sx+bb&eL%L_2{(6|FO!m`l%i_w
zw~6Z`HKgtImp8R(*}vypL49!t2d@Q^!`UZYKhWA!=grw)P|@Rxiy}zxA-irV`{f8G
zE;?rMb>e;uvtj)XU&>dO#Y?5<A5T}}DOa*6zRGc%QBek1aMBP91|$#X#!+On+8x~N
zMD@Nv%3!)hLg`KXTao#5ewH7o{j<1%fhzgOKeh;Ui2l+>Xoy(ATksd@5nX5_JX2kD
z7ko#EMOxShvS4{vf^NoJq(z*di8S{LTF?85RExB<5olR=_w~CbM7Tv-*bBCNDnWu@
zi@QjPm_rve6Y?keiL{Hjv=elNj})sDd1)i`4*x}*k_~RZ#;U<ZOX}EU*Jg*~qoHct
z=JMFu9sDp1j6A*>+-ieogNv4>VMo|)3vTe#@G$BOziX2Xsij5Sw9D}1<k9*@6?@ON
zDF#N9H74h;Pjc7><UR_ie9mF`&4lrdkn0gX?c@AH$o+uJ{WN<QcERFyxzPrPTd=&D
z@3b%F5Gil{m(Y5Iko)p4K`mR@h3h{F@o)?0|4A6(5-D&0m%w^mkkdeoc&+;cx7fvu
zdaaELzt}~Md9BO#pNM;{tNx!zc&+R4pGaz3JDn=<nw7YB9VNZ<j|;DE)9!6!wc}7g
z+|n3Sb(XwnZb;kJh;W0pqcP_eZAT;BEy}KzzEgx9{l{)0w$rcuY&2yD?YnqKAd0`A
z;ui|o)=N&0<wq&#_u}opsv0PO|6J1f3R3^|@P99u|DRQjt0n#as%~xmpVjSuFO=*y
zBFIA#003CE0RRa9r&qdK>f2Zv{m*sM4vw|+R>ys}KWLF0u3{qX2KzNQx0`t4v50fj
zQR0<e{TenLtst6p*76<V*qXDyccVuF0EAM>5l`J$f(D6OBmEU!04P^2@3PRh!8b~m
zdo>2Gd$&0F*iLbO(Iu)_GV6<ZGh!E1u>YZFjF)5&)X*8iGY`BhAc2rF&cPkB9uAU7
zfc4RABmM!X)E6k6B2D4_I{9))I_z$PAuiFAb3y_5Ddf9gOcDfep2xA6#km*8!JKnX
zT;gT1=Uu~#&RD+j)7dC>R8H}M#7SIy(AGL(EbgMuH%P@eyoF?9Y}ogp2OGj|5dkD*
zTPXHOp?CHlJAr-Sqdx%cQHQQBi|0Iie0X3X;S>*W!FP4T0bDu%Sf*e5i6^<ez5Ja&
z+tO$ly`U~XI|mm$-fIru7~y?~t|tdeTrb;O!>YnS2fQu~xFTavCLiZ)nskm9KWQB&
zuN*3XSdrG=gWJKguSM&TJDi9q_#<a#7XCOo{uw$2t3dR*f1+(4E&!1Q^9%21EL^(U
z-I+yb9~Q^rXXFFB8(w~z!^e^TazOeno8(i-G*|$|nC9N_PC5KFu9JV!GXMbyN`2z#
zB!bG0z1qWxpWlhu-g9WM84@3m#qO3~E{Vm=MKj{Sz#{@ExJ1gpg!lXV-MV1F)mr{C
zwrjz1zLnm4aAw9u00By19(fN-pZ5w<4SpJu;4P%(|M9r;{HO1S0r!bcpz2kH2?x4d
zs>M%mGejbdaCBZ2v?&mS>>vdR^JG8gG84fm+*lg}KppKCz?*>$R-q=dBvxIArNH59
zLyx0z>8Kv;w;}ux`r&q_0ajwuBERVG42`DHGe)Xj@^8hCBQUtOXuuycVB`?K?mW1$
zTSaO|VnY`J&Ua6TzNegSi0k5s8CH99eL3*p-R^~ggq{<h<B$qdMG!%x$2yWE;=e5?
z)VrczEu&0zox(haGk2SQ?3poOz4wwIr9I@IcWe+mS8pm_;j=hC7z_F=>0WiAL>=u1
z)-AMOI5;ile;l!mPWik?YOhLaW|~WMLP6%SR~S|46e)b6{fHe^L$PS{G$1cYy4sbk
z8`cK34EQ<Bp<*_hjvc}}XqVtkUvfMC^Z=$e*n#S};aJw+MYAuxwVEW8Er2M-pZy79
zd&p<*XOAK<9X$$9nXBS4`1*)EWhE6=8=#2&6HMGp_kLP8oy<aY+Ym22)~t-SMhN-C
zXkIrXjMgmlQd#??_Y-i3fs$J5e0jjNzb=m#ph4$`F^L%Df4R8-Vf~k)qTSNjOb93N
zkhG8wI<!(nL*%G2gNU%pAjSrQ;THUGu!X(JQsP_}{;K-?=y0VKf>phD!^Xi780g`(
zMI30sVAAzR=9}-j3Q|T$e!l_(?CJAX!te8S(8c53Sq@H%`sRqHr9Yl2uKhUBCwKEO
zk{5T{P7LII=D0M`i?z^$fdmE3E0sJjtbDo{8Aax(+zJ|vW!7a_$e%eB(FLfien5Iu
zph2R)#Z4woC1(>|Gbu@feN4PzWIIAy_*jnEZmUp@XY?O@6^hH(fsqEj4*uelKWFYq
zoYW<W!3c-)5Y>TE8o5s%Yp`IGXb(*3Bxz@ayHqL3C;CX0WDYU22A3}b7#fo5><h-#
zRbE~hU^mGOpog7KcN~60zkFpN0}mkPyA@Do9Dfw#S2@&RQsK}CsdgEozMLu-O<>*)
z4WAY9f{2Nq<c9)c!pAw}a1GH34bHLeelpS!iozJ7IjJ2i(Xj~*PR_ahm_?QRf)l#b
zib)Sd!+ZWwMlR+<%B<a%Chef4r<Jc^T;o!BveSz7tX4T3H#uzbT&VNY&>kgL5>61J
z$&TRUpvR1j5c+rOHRC`RjBp|=A^@bjTm)(#O8>X|^8=-JuV*2g+BMCQLq8O1!4}AT
z8sox2p};q5>4_YlUvBi}NW7c9ui>-T(VwB|6CWbjcWAF>o%_l(d6pj2fl4$>B|tQ(
z3g3~!*wk5nsO5?J)+E}zw@Fh4K-m^!g8y+}8<fa{tG0)WZG@bc2b00Y>6UGTW;T@4
zZcrJmd*4&-niYR|G6BOZo~X$6Z1FKg8W7D**FTWIn4^GyHII4hJc(WdjphLlM^T<&
z=v`Lis}a}(%?_e^hfwb?!mv@ZfN=OYq3$Ipy>!bN4H_Hs@5~0%^E5Wo>V;)h+mlvG
z@04(lwxxo(ayQ##?75qiG^z?wu~~7RHPlQFcudYX1z+_{`X})bQnTxgAh`=6KB%-L
zWD*qG#0Pe@z|Bxu3);*AESv%;va|9K)IoHxr8PZN$VPD$^%Oe0`ip~4s+<se9lf;M
z%1nH}mznsvO>yz<z)K0^CuI1|!+9vpi78pSsq!Q})A)we%oHRSsTLYr%q)LK!!N{e
z=DA(;y^U7f_Ym+$^|~gSWD91^!tBKyPwdi+ZCO%gB>L=rlnNn7a=7=kXR}BTQ}TJ+
zap;CshYV#u*VC`QiqaKwQ$5m(s4PgP=$>g%zxvuR6Qu2r?uFM4P?7*L3us=r+;2%`
zb|7o81?$iBXCBtYZQznio~3~@JAAD8@MulUz4yLcCLA^g3uect>EKIa+_$!~_KxIZ
zK;@Ppulr2m5s3mT0`=_9Sx2CH8*;r3w=_?NTd8ZEj4cYD46KvRy_nK$k@$zHLYn;O
zo3jqFd)SF32u>V5`4c$CzyB01soZSyhBx)x`77DL%W(NJLDFE0;K;w~;EBs!AN!p-
zKF2!DrARQ_1?f~+=Vdd_l|;Hv?@DMQBrKVI8IUVP&!4S?R4M38MYXmPOVey(e@J99
zil`uxJ$2NwkhX;mu124>0seBskAjx<NEtq3K;6O3BD0IDR$0@^l2}L`Q~;P>B+96(
z!BLF46(kAbe?L&47cd4ysV{S|vT~Zqo*~tAj=<N9L_VR0g@*e+bXD8ZNtFCEg(UHw
zV6yYTpwj~!l5C#`<Px$+Km>oMAzpo~lOgb=gub$8c^Wf&N>Yg?@GnR}+NvaK4MKy8
ziHqs<gWZtO8_2HD&$<vp#8i0qLqQ;y6GY)=N;XF-J5i2ma30KJP$z)$VhQB4KZ>dr
z1y|cnra(b5jiSZ#Pl5=qu~P7Wec|+_599O3^??3Ji{ETPy;SrBm0h08K?xKlJ%JnB
z!C}?fU+MxOr+B9h3?WUX<ag=Uq7!mi&~}xVj77W!U(?ka7=iB6Ks|mADZxXaU|aiX
z(wluo8a)!+HE3=lHeAl`+f%@!>s2#NvNM}7@pbAEp=Nfi)d@Y#@`=)fnokLpGuT|_
zU0)__ORVa!8RK^(zG1?<6An2%;qw$0#&V}q5VMBlj)L=a)Wo7`rk4W5c`v2_;tjLI
z3L8<78)@s0hr(v}Y_u_HycXA8B|=u9689_;8Qs7UPt^N_Vv`X2;DyGxlR_nu#31<N
zU?C)296`+?XDB{TamVgN%3kKZ{^4e|$=m|Mc|WRDQ7kew5zmG1t9Fh8dTB6OyzBiL
zMUijqkOqm=L^n}1u5;P80Yb>Coo1vr)E1)MwCqvHk2K3><%FPBFEeP-8!GJ@FaVtb
zC%-6C+h1XBpo2StFjJ)}tD~GfW&?-4;`X9NorYWmUQ}^`SrvxW>U0raJ_Hmq^tvcr
zq{_!WF-v%6JE-9tjszDc#{$Mp%M!9oC$s8UE>C`&O97zbaCUyDP)}npjbm>V_OiOd
z9lQ&+tmE2JNkMsS^JGUT><C4;cTJNStk2N2q`Gh-N9zMQMea+(GCa3pl;uJ_xWeM!
z;s~-VZ04aewV26}p{tu5JZ9l`cVtU&t;*Ujv=mIv%8y`wFELBOStS)YNEBVmII=fW
zyjFvhcbaoMj`s7=EJ+{XaNJPd!ZymQCN4f=mK9!t1S*3%RMb=hM*$xf)!bcuUc#R-
z<6$=DA1J#-L0RgCK-$bol!cZ&A$sTtdMb`>D^^Om0e^FxVj@=tEyc#;uaVFxB(N^E
z^v(KPyrHE<<Ddm9o({Efp)ddMj1iD>G2bf|I>!r+Blq4lTcETjNtuwhE(1beiO!PC
zL<2+y=@qJHFCneaSw7^&mtv;v&Ba)#(2NE#MJ6#n?afGZWGIC_IaEiOa}X<sMMLJC
zb1Z=Bl7ImYh$e7@k;87C_7bHkGxuTsa^!unw0$PuKf5p$ffo1Pi*9^yW`dN6ubxqA
z^Qmk5psAgQxPJ`l`5DND?Z7W7+uDM`I;h!sY0hg3!n>35j*oK^Z*r<078)%m|0pnj
zk<XZuay&9>ypJ=lTf-UqHJosh`riZJ%O)c)07y+7nxM*UN+XJJ1-bp;bkOhxGNfuN
znp?3u8%>eCtD*cM!+d}$2N4E}<fzbbdEvG#$^n=IfbCTLxZlsIV?0*tY(?b&EexR4
zPybua0%}<$zaVz!0zkTt8t*L~q?UdLb9rF-tE79?ec<iFdHD-*3CRCkX8iC={ZMd#
z#0v^ZgWkA>2Gqe4NXv)d$zM7qjsE4szHhadOxF;yKWcF-@^gu?V{|1Qi;UIfT-CnW
z(hk~959Gl4gDkr@KSrWcpLcc)drt*}hj<RO$;Efh1#wU9)jk~cX1uyqjQnvm8Yy=H
z3$e=qlgE@ii=D#2);yGvv{Z_)qr)_Te!>0Nc!i2<#4tQ&_$bzY7Qi`V7VX=ffHBhK
zPswI3nA6AP7>3cOGkuGt6N`mTl6CI0A>#Z`UN6HifRfqv{R~pqqG~FKX^meP=GSg|
zVZta=%p(|AW$0wbJi>T0Rxd->rW6M3Eod^KJl~-YW&U;)JC`w~BFJ}75cvY+1couB
z8!=Z+<PNvFAkXP29CXNxI{qITWfs}SbKwy*L3L;8tL%@Wy564F)65cc%9@Psp=BG>
zV<$Bv1e&@h<cilEsG@-6jK(%qLFxDcv=&N!Bd%c+c)grPVe+o56pF1YRg}&xbd>l*
z<;ppgQ+79`_<gFGQAoeiMCD%u<-}`_@l@R?^gpeo<1FEZX<7G2^!Y=Qw@`GXQpnzZ
zmI*ki0KqOFO+aABT9HAy+XRuRhbq|)X57J{6rPy|l#@f3iHp^V>k9?Q&!#thB$+LL
zk&8g3>BD??7Qb)khmg1#4NoNcSB=5p&IF@y&*_O*d}M`bn@G9U=~Lglfatq7i*nL!
za#yAyx#u5hITLT!D~2UgoRk;_6{rt1ls(ONja@+$Ku7o=MsOazYBgAnWA!BXHb;>Y
zq<Wrd;o|)|F`mNly@|cqzD^4|7f@&@06(5vAa)#0UA}B6#mo1-*>lzt<=wZ^W#!DY
z#s~eiZI|C3ixiQt*_)lZD%Xr_*A8>Nj&ZD~g-BlJx1f%&W-GDVVVR&8v#YC}n+IF9
z!2aB(GNlqljx|_5p%Wo{HChUR0oGPK`l^r>T}irb1vH<=vPq5X7Kn-d#egdg3xpG1
zq2ZYWTgX$NpIAew)iZhyN4{>>N~#LIv?^WX1Vq)bRuf7Q3DX;{OeB#D$N+6$;A)AI
zv|Ov=;9UBuJ;2MN73t{4fEKBYWKNY5Tcp>eP%1+oqnKIbHq%h<FdX%0j@eJyqf>Un
zC-1c_J5z!q)-+w0i0*;dXIzG1U|c5Qc2}I8Et$e_C)TGATJHg-M#ug6-v+^o_{4+`
zpa1|Ou>aE__+QK9Km84RV;ee)|J6JBe?bQ1s_!{(av=Df)~{RQ!(l*`z`r8c*@a0<
zOr?auBv^hPA--T;T1oRs!a3xA-L_M2fF!jH=ino0YhBOT_oD{eL3cTnPW2{cPY-?`
z-2L78JQ%rcm_#@stvYrBa~J!KZ47oiX0o-xAN7QT<})x1M4JI7^HuuOWyU0C$`~j`
zYB7LYIWdgZ;(0Gi`&PCD{#Hg!@dq!(O+nLymo6DiDU*1gZgeqF1>v%2x>SL2NUdv{
zx_)I@%BWDFK9|5y@b7V+>H@g5mud6)%8?tV<!VhGjHPsmt5_X1IcqLE0Z#r@4)yi1
zLBo#SXO>X|+pTpoW{7YwSB~FFRL&pp+EwjLrFlx9oS1s@=>LnbcM9?(Xt%xFwr$(C
zZJYnLZQIj5ZQHhOOxw2Y?&)v#ch1e(an8Fhs;(+BG9xOgo?PqstvvI`nK{vHIy1eb
z|I?`U<{Z&l9Q{Zm{8rS;Ty7@#`PdS-b|qWpmF%I)fj*z5=;kT@d%StM(2}N7le`F|
z!c5u>|H~4X--!aw_22R9M}3g`KM94$nICNGG$(voOlLGjd%>)Q&E6h9f?2{cgssu0
z%^0CFM&n&G3PrT&EOl@zc_9|5ScvsAp+k@&P+rAoCkD)zJ&-nF=iQ9V9R)5|N#t)b
z?3z(KgUJ~Zl6ik7Ei3pTv(9N0v7`-PZwke@fQf03FuCA0_}Km`7vg7vph{l^ihok(
zE^;(?rO4Hano&EmECjuLqgl4F@}O_voHLp5Rm=#NL#jO-TQm23_vf`f@_ll8nS<uL
z9Zyao=ax|$zk%jZ_Br<iwd??kODmK2bn<5gV!vF9a?uSC!@y`9z31-hpDY<He3R9u
z)cmlKgphEv<_~3XtzrbER+ZJ)mG=WzfyjtnUw`U3LY?TJWrU^&0f~s0&H`|vQJR@8
zL;{EKBi1a7I&mSp?aZ*fx#78=A$<r;+fj!}#Dq$Spwcps#YAH3i<MQg_9={6tNZ)%
zs6yQLv6K5{<VfXIrjWcmORZAwt#_NOEGeTYi+^>O90ZQH{bO4)`Bs^UnSk-fsYR8&
z3whaQ@tszkG0+W~x9<%?29@kpl5mE1e+k9MG1ay3mW3hGA;B!G5y89*R@U!UnkT62
z!dCjfcRQz`3O@(n;V-I6jiB-uRKiGT^xV9Vs{o(fMk<4<iq|+n9jr+lU$BxwLGk`J
z*OM_IDvyc7$N%KnyD1W%%w_OB!1iObim^$zp8QI!(u5HOMs`3#fDfM+%UiNrz?!}n
zPLv+q{B}i`cW^kNL^=#7mxYi9>2SutU%l%utxK88uW`n#sd9C_@QX|-V0zthnpher
zN<q(2uDP-5@_N#GXLP1rk$`PD{QZ}E@&s>9L#NQL(23xZa?jw_FaEad^o&JK%efK~
z9A?DI;VX&8)6%%e>KjkLK%8v`w$w7Ba`&iBWg1-&LB`tmFW3Ae5>JZ&57`fjr8GvU
ze#np7f@5-%PZ0Ag%#w|O=TqjqQZQ<f$!T0FTMt*^kJWR>{NbpxrOh~h#&JvdFjYm0
zQpSz2?b(XCVhaC?ivL%<f6k6+(V!x`B1aKs&DRF-H~#^qPp<1U=lGW<C4tr2LXT)U
z=^P<3PD`%6^W&#F|4(7oh#AXY8;+oTdrznQtTZuHg2pt6&H{~BPDFC&08L`Z+$K{O
zo5vkgM*rMuf!Vr(snyQC6=(L|540JFjR>!;AbTkvs2f<3bTwT7S*0ew#k%jn)!`Y4
zJ4DH&ks95MIVN9y4jof0ks`M1qg>Q{3a=veXvT}_A85^ahiHl)L>&sYfXJlyUjZ#|
z?*G{O<huE1Pj-8I*P=3Kr6<m&`v^<sj@(b3CB)yM{tMkHT}5&=g%c*shIBR^G5dGg
z_c~*(n1*MQf1x{vO?QW|d~oeIfBsvaS2jwE92OW5(BwZw{D0D_&7Gb9vsN9KYUgml
zfi|{#s*2a*1B?#JW0ic<sURboUv4%1%dyM4vvFZKaMj4gu1rtux$Bmz7{6I*Ph2ef
z@$(ZeFQVAxq#qkD-H3*rE+PUwB^)#7om925hbmu^hz$Cz$Jm6Pze9^!AP1Z4=izuY
zFW@})2Vx=?SeprX3^+FBE6p5YYhk*0!Ok%Tgap<yG97Rcb!>;$r~^Eg{-@oF+PSpf
zb{y?e@=tvXWy`*F6TBm%Y<d|j(t=P$#xgT&t??i%#FgYI21I+H+$<)zqWGxM#7s3x
zow;=q9Xb)AT=Xb)CZmQ1j6=0KIR+fRVC?rQJH2d}HTSB-JtQAlRCn-_mOWrv<Y(uc
zE^VrH7^|6KLq(qVAN?M&n494hbb>#|eM~|-nLR+bairI35nxZZ41=E)oP#K1znU|P
zt@j>c4CRlO1jV=TXj<hzN$FXLN<<1rgkUN4FQBwEuu6}~M)C9TkByv65_{EV(&aYW
zRi2Tj_}EaY-@*k)TgJGDDGCRgYztafhkcd*1=mJ#xW#YvY_TCnAs_pLK~JfBsEY0W
zvw+?Kaz5U`zEjS+KZS}tfx`mNQdr6T4y}7+w8a3nWRa=hobG0K;a(4U4(!yKBVe<=
z2>&C9C3uj7jwr=Cs6l(nd#hzkaQPS!z#8F`aG?@S{BIobBlnamH65yIr6x%#vRhE(
zhe##cUQS|N21ulC&vf;Fz_Vhl^qfh1sxiv^1osfbte|i*l_z;D%?s|!D5(y*l|D3k
zO4`4^IELRfPz<Gcuy8{H@8d4aNs<RePK_DcoI&DN2xjiGCK0e2`&fj%AM^DAKg#=2
z)B@W0DOhjPm|08&kkasq8Rse^uG&{s<lUivx81$LbqS{FS87kkoaBu<0CJb#Ck=VF
zKBXC6w_0uB`&>{4*=aGNi^lw70<jU^Kn2R7Vg5d{A~N>nxG&|W;kkrLw;OSKjQ6Cj
z-Gh$y<L_Iu7m`xq_GA8|Fynv<8P=gCcd4w8q59Jwc~lY0J&BOY0<QRFLZjkP5_MH~
zFr3{3rZtIYyoi1SG>hjCtn=me-Pa<w$Dt3h{eo<{^bOcm?xqNBx2&+sX=8oiWow^(
z@6DRPOFKl#Zs5MKZr}g{7hl4zvuC2OU7MZ-!IHCQHM~2Vb%Md$b-aDkwZ8Bp`>e0o
z;|Cy41P2jk&A1IR5@Gcytq_d@v;+}`>(>Y-8H^WRvv_k4B^v3QhK?FaEg-{fqpQB<
z+p1z_+AH@<oRuL}ofKOS(;Swh$EZU`<H{Qvv&=;|U1Q|4(c~kqMX#OD-$v-~V3lc|
ze$o!|XQMBhU7t1j{C0!K=EovUHyWQln_q4gt}d_+26(2r3Ben0$Ls<=Md{SP10P{e
zN8bNi`6!W9(<l7TaWndNk^U!p%*4&g){Mc*9^mkw>c_`>SD4o2#YM=%?CIj8!pY!Y
zzO_a_e~2trE!p<9HnAAMsi<aR73pafWFeRXVTfYCf|t4v4)CDLn#oYd4?uwaPxJ1o
zHU?D#6$t1<5(tR=Kh5r6aqHk{Ztvn^`=39G*L*hr(nuQfR{KDlR3x2`EgXDWH5PmP
z$K&nICp3SVS|sBUWQNk|se+{u)mY=+I`px6Chm#0W&`GK)>ZwYz~La$U*VW0XHRg}
z$;S9}hOgW+6Ti2&duqP7dkDupWhRIU_br!5F`0h^FUXIW<V*Q5HjkK~#*r|gSc-#3
zUzc_v#3HN4_;6q@lG&cD<WOMc^Gl^bAy?V=yj`*qU-`&cJ%mMa6V;T4ljSmqP%)H5
z0-h~XkT6gZ<_ZHl3M418$yKBDisq&GILW>!oPgKB?<|AL_h3b2%zAE|$^<XcnFkiJ
z>fhzan7gD=M~(gDw!l{9lgUsZd3hh-eX~H}MZh-sdbgEh+}XG{7tJt$-exy8WHG#j
zFH|3rA$AK8Fh4gJ^DavduqapD$u>n`=(74(82xyRiOFY2jFx)b<8$WsoISUQ?We)e
z%>+vR9lkxv5V$dp{tt#IFe2MOT6siTgfu#WC&wF)88H-S8Haz?GomquzSG)*&gU<<
zAASbHXTghnRS6;iEsY$8_v3ugjg+a^T}}Q+$V~JlqRL11$+wbRbQurwv7B1%4M~`d
zn#ycZMSG#Kau)m|<BCEN6%nTNMJaI_4#MKn$xP%Hujo;bLIX7}Pz%HoBYebm^2-Zr
ziypR{I83t@L5uhr-2)NhzThr;B|Y7KUN(B0D(`stWtNQr+mK90LQ@Q6<iMew3}t`?
zM^3>xF)G3T;u7Wsa+;SS4vK0P_2<P{;kv4AZW+iEw^LY|UF?9>fFL>ubcFd&wo)*9
zR0E=~01tL78F$MfHosJSM*EeA<RNPD=#^SV0Wek>_?;?F@bTM&XQoog>^3yBY9{9(
z)2Y4%*9F1{J+)^oGP$azbujEj$b|%1_0m9?)R`R3-cnB)c@CI(E;B>3J(4VUbQk+7
z9d%r%MZ}mX*6(61JUox^(`}aBB_k(WR}O+cNdy4bvkD$dv_=XaQ~1^2dN-^QUBR1V
z18>O*Ww{|FJPcn6E3|vAq!W-q<;+^Ird$@vJ%Y2zPIjs|EH=xr7))i9dfaS@uzK-I
zbNNO@JP=#f{RO%s`~F=`m%UzBn&_yGn+_)-RC4{WH75n0u`wxgw5~SRwCQrBo0_Nm
z8~C@?WZ^mwuB%+N@m0#Mi<g{3;Q+QXx9p-RR-Z0zSU&+wKv%sS6rK7gpbiMWv4zos
z;{sv0Uh8}bQA~N7QpP;csRNfx#3}ECo?i0twmfVhu~$h)4R-ElTL5fY$uS>8UFjk?
z%0K@#c#aA(j>$S9;II|R4p58fqPznN8ZWjWg2`_IEP;x$h%M2O9t|bJ*s04RlqL|t
zL}Ukf*JYKMf65u@S}fMkX(n>o@eO5e%>1o8X+kpx1&pCb>u3Wa2ZJgqoJaX2bZ|<6
zSG5=<3`u0mb!cN;9lJ$GW=s?Y-6d~|36HAaO^z=h;d;KH$_a%LD)~?^gw<CD15Xm+
z#idfe#=-pLfn_!U{?sWswjiTgA=jFOF}(tk6xsZtr|gXR&|!jq5u^-)Z>tmbSQQBi
zu`jRh=+`t&J#UneCc!BuQ2T9_k+ov*g$zY|wd`34vW`w-2*|CpEaVQJ{u7(^I~DMP
z-RB{3xPN?~zD5Y8MO_^2Esp%v?BU5lBZN8!O%ddy8`@POO)8B+zbn608Z66)<(f=3
zOBrn=wvA(4gH4!#@EJne)Ea+6Gci~CR)sv>o(A@@XOVNiAI-KoC9%>-(jfuttQi0+
zn=4!$+UNC4%juG+;edO|9a8Fc<ncT#jMT>1u9uR3aG}|9q<UhO@%V4aS0i3KnT`)}
zyKIfl6y^XRtOpF}?2qLrR$V-~wA*yqV2pNXk&ds?j^t4rJ9Q!T3BFM!XWhwc4{mX@
zKK`pG4uv(}9uoVJ<6gbv;HC|tT^7Q*@yF`!?cXz@+}~4-xFoyRo80qJnZ59DakxTO
zQNljNrW_PBEKkNMPR6FU3YtJFVNGNR3ux8Cu>in(f#dD|RD|uJqNjqK(Q~lRtnb2F
zbs)Pms7eUnllmO(^*5b(Z}ZG>Rr2ha=UNXIVmN%VYxDSrXZOyu5gDhj4?e>4Ys787
z&JZJU&d{#i^h#}Aoit`q+qBsrc!&HpRy0GU3xF<pbzCM-K0_CYGrbEIn0w9)1iYI1
z4-^yp;L~I|+A?)9Wq@$O+R@%_#kiE5D4m;7v`i5bPdFQq!+32<1b&^lvwE{2`-z^g
z696e!Xq<N<J=JMi>XqE9km}=$dv~7uJ+CPSc5EV1*S^j^!X&d|HQU_>zcEUP&bC6(
zGt&$X$ecuus}>a1uIAAo5T_QH!itJrBORpe<%#9nZbQoS;zI$1#ceRZ03pdHb?GME
zyWh8F_C+iuntFCG?Ex*JI-}aYhOx_ruQavL?@ywr%5V-em;XEvc%aB3MNackwoyQY
zFNdjduX%=&Iy7jEC=Mq>ml>-$z4N-bmD{Jqn>tl&d)g?xEQt{Uk$$i}bRj_4^D&+L
zX#)HOruz`Mj5-Far!Z3G;gA_<rg2QDI}lbUjETsx|8e&1dM{MyyPPqn{~~48kkiAt
zG`e3lt(!#0L7FNHj@_h5B<_jPr)LF)vmxXdECVdxHd23Fm%(rD_<kL3s!Rw&I{&S`
z|5xmwK|b>?k|_cXih+s=`H-I*F_c@lD}a+4_7}a^7-V_+29d=$#a9J({*&)DXAi$;
zbE54LT*w&!J=yV&XwRiOD|SXC$whKLYjlIyR4&DhIL?%=j+|KplFh6>Vch;K)FuMK
z*dBwtQp>Y+;oKB9e>)2$aByi73kIVbKGfPe!-qkQHf_6M5gP$=DC9t^Er5q>y!(et
zW<UkKSKk$Ix19~HOp^w6IOE<cG1;M<(+*s*Q&Fe0iEwd3V2gYuJt{Z{VCO9U-mZ9i
z5WnKaf%DE8`g?mMVH`Ip)terYNv+NqsVCI;>bkZv+=Mj8;Nt8B*BHdQ{deS8>*QA9
z^zGUR+_me&6?>5(JmfLvUQjyZ@Aug*?cz@@>s4-V+qtA^9+nBwt&gNBhxYiT?L(ZF
zL(=iIb{Hj6A})NzX<r0=f)ikQ+586BCG&`~z7GH#f<e+py8s0F3Q#VkPE-mGp|Xz7
zkS(WbjOy;!Z~hh-@nUh(2D1M!ZMSc@S0>OM+nJFh><zZ?p_vL<TUo~J*6^lsnA0PS
zCLRIDe%c#n$?3lxK~hO3Y(&~Vn);&ns>6RUlu2f$52?Ni!TU_T@>{rBJjDo6HepmF
zpk(C&8`Z1QrnQ-AhGfY**vv|KX49ZG41hD_oXFy2$+gK{<^J&@=<f^ae)HH0ol8G8
zN|85_<S#gK+gP2(lDC{umMF9vNpqiND`_N*XHX2n&2!Gr_@t$1Gb*r#xgwzQk$J%0
zn2Dr1Il?lRk>W0OV!U&pCyv3Ux!TW%4tnz-t9G<h`6*>@vtTOlL~fcsljWu|OY2B+
z;HD~)bE0GW#ECl@zoEqP`F47B>vCnRq6KRzqK>zf)etvGpH=#0_pM}#glEW=cDN|W
z32W^ok*wf3XF@P*ncnSU8jgsf8Mo89-$+C5MDA($yX|J>GqLKhEkaakK;{>H|6Z;r
zSGGTF`ygm6$`AdKe}DD-n;7qCTf}#=LD_pG>&j<y>}d0NIE5a5leR$ax`Aj?UeGg9
z!v;PaGLE~=4=RrS?eo~%bEWLdG)nW@g>>q5p+>XKKKz!3+eZP5ib$@FI=*6Ux?;kB
z|L7OqO8vj%7vg#Y+jY5{+Fmqb65g0?lz4m>lnk>{QNH!!-A_;_fa3PZp9d0@<rwqr
zsVq$mHY5WaQbkl|3nH$>H9CZ{kW=jm{5$LgG}$$kr*z_$V6=0$7L%VVHOt(dW!l8{
zqbFOVbJs!WO(sH>+m|YLQqlNp<TdtliwC{j2F%Wb-BLhm68W;->*jbN!9$V8EBXas
z@y$yfXK8M~?lMS-Kh)!ci^a6b3~`8&Y=d=bFa^P*b~QsrwxfDAtuOF~@U*StT^}A?
zOVlV3Upaovj%LW~w2H_yq$)Ic@Q!dn7Hr&d=~!2tZ3^SGaz!ERuw%(nL-@oti2uSH
z_<MXFE_BxP_-ZCo9}z7#b18<FfQ2<^{;~j?It(ZnoL#*=M*1LVu(~m~`;Z$AH#MiU
zBr7YlXJ#GlmNgisn~1+(DHShWn3<5p@(Kv8G5T1+HhS`5|J5ungYB~2lQRpJ5OK>m
z3TpA?zQ)bxv~&$8APuD3>OU$7$LPjV1paQ;hf=E?4MtlJOl50fn!Yh5{3ra>Ak|_t
zi8PbQE6yz+v9~W6&(g1V$5w;Bt<x<W{va}*`gE&IF$}%Y_~s9+Q(?TGomr~aiEp!Y
zT`Wn50A*y@uiW<3+!7xhMu@4ME4dQa1+P;hR51HidpD8aWgfoXeV|!2n0i**4bQ(y
z%4&I?YJ^<Gs-hSDac4SdmWHlS>+(*JPOvqf!Eh8UVe#e~S|Ut1udbgU-!5!pRNNbh
zi!*7Xs|`S5jA=x-ulsnf&@~QAYQERWBA7uD9U&kQ8nS*t{9NA?<!m!~WPMP#V_g9+
z#IfY>uQ^hGO8>s4HdWOPUPXc)279-MzB94rA%54l8kt3zB+q3m>lOrh7ZiT)xP+HD
z(orROB3Zx^Q){^zSIDb|h1t~=j?0jo%GjsSc-TpSil!IW$UA+B9-fTLldpz1kOwi}
zQv@K5Ev`rOY%4Aw-Int@idll>2T%X9{qBi6=3e{5DZqu|wFf|-H^&4p73c9-;*=)K
z@6f>IO#Nm29#AKYyRRm#TmJ-w4E0&B5C(6Gzx<4cdqQ}jV|y|7>3GED3g*_3Usvk+
zH8>}FvN#>1zg@&WSPrT41POaTiJq>(#_@o80gq2--qCD>0K}Xo|HR9d>{To~YFa}{
zUsVKGy_Y)*OV!-onZ%-#-xj83%jSLj1Ud9LBqE}ba@ecyASfHSs~6Dpd1_-+u<_^M
z`|to113#Xq>7oh}#bz5toBB)KczNo~xMuRLk6FM0D1z1A1F|j~nWHQ(Bq<Q9K0|0C
z-@Hfs_L{M3#T~w$zUiholCuirgs<18g2AWsqkp@bT}65sV+ZBj?=M^jb+*f<JrOmq
z_9`2=YCs0=Yolh~ho(~Zz>=MA>9v$e#(V}QJq|AXw?V>vc@lWBo?&A)*<3S_H}9?S
zhNtM?AkFnD(h@Ch6#yG(v$hT)$NeymHHXd9nN^p8dm2DT=EzTP#nyyZ2DCvlFwh|{
zXryjd_*XQ(`P(<hS8tdTx;i1FvTOfWdakA`ziQoXMOn$3%AMqAo(u!DpqoAPo6d_I
zlbVyllvR~yO$qO{y2pmktO9y?3P;OUiArGQ(AVzGUgZJ9z3L%LU!6<Fcx_qj{)%q;
zrlx|8DR8HzPpen?rKNUDs`qd^9dCJh)C1-BP?3RTZ(;=vH6$*7T{%l{p+4DoVdsHl
zn$JArowec2jDL9O9U>#_F2}gwU&p3^_I1@$M9R-&1&p4FzJ;-s*29ckvV7Uy)9yc*
zJS#KRdRAL%UG+e>b_VG&SsUb)rpC+Ga}mynmHgMl)iZx<qMHtPjFu`k2B1?cezGs7
zQ5^1bIpL=~y4CUD4h#_d6l-dq!@BF-d%yyIpv+&UJ2PuruWG+rpE#X&uW1WRR-L+>
z4O7}?Xt&Fsrfpz|$4#NOk!qiQbTS9o=k?k*2i?%X8+;=M6%Kv-He{E-TszMR6kXWx
zOg&ZgEYFfsCDN|}{fdk{;+9xiFk9Ep(f#_qwfYcSj5(kXsUQhF7PrxVxEj&$0u0o^
z#*kt445?%{Pnfxc-+hI!-l>1~!F<18blnOvVIQ5@wrIrwrMnT1g`V>ewbaJMe|t%N
z7#WN=48yH{wA1~8IaW;up})KEyR+I^`o2a9bk<?3T9kAGvurnCBWbT}s9VkY<}V;Z
zt{~C9L}f$$tZC4~Pg9%I$tg7w6Wy@im6l!B2(Q1dGk0{RwBwEQmNHzNH*8KIOgy-L
zciyb}`%HSvw5l{x6#0weQg0}MOJqvSyH+xN4+1Qi(Xq@S$z>~qsGk|JrREWuK|kl1
zqA1l=Z49Q^hSXhI7snbQR?E$#n;v!pkpRz9y7;DWL+Q`S)tQ!If+7IauNs)h1DS87
z&xW7){mUPQ;fou9#^W}?Y-1x3Nz0a6u1nwRChgjj{o9}fGvKkon+rY0#p^4_gmz+~
zm7{}nZ&;GWVS~!LHKX~I=9+h!Z6w7&mIj|8D-OzTFV0vNTDZmOgnL-PEVuk?$S<3n
zQ9i32MbIA+8r~A-uOvu5?^7=LNe(`k3oSym;h-sR7?Yq;5t*a72~&aE0EcC@j=pM;
z15BoBJJin{>P1$>SK{BwOn$^^_11x8nCB`NOcoxJ_RP`KZd{pP>1CX6U%RJZzkY54
z<<{yxlwpw$m%09~l0p2oMI1HNssVj_6W`Vv{Jfx(p6=%TMk)o>ob^=K4*XD{rw&t1
z96l_OLhy?&`@=4Wnbne@@^vnN^}@!eDpjH|K#&#~zUCU!@sC{o`EQb9xQv&j#6ME~
z>7SGF|3;Jlmm}@wYV|)Tc5%Np6*h&C!f(IP7Kw-{WwJxm7@&#^BW054ghKV2)y=Ve
z@En}nYxt2=hPymg4E}lkDt?FC>jAy*7Vcx9h!Bp{lRaixdPBA>8F7H*bLg#8C{FT+
zWtvc3YJZc${lPOmDfE7E<^CLbCC3PuW7JaMAUawzXy-6$tlUDd?E$oB<Ts8rmq7zT
zpf?&g+e3cGf&r>#yc||=Y+9r{?g16h!^B8C?fP^|DBjXXm>VX9U&DCAA@S09$=zGJ
zXm-_&!C_NVRhP@^sH%ffg(Y%U69ln<;0N;Ijgw=Yv<p|hoon}?e1a4j5Ms_l9;>Sj
zXy+b!DS?-6($VC>VkirYF;3xL&zNVp7?>n9;hm<**wN&H)91A1hb#{<o6&hY<Cptk
zUXk3!=|`;9dIO2ePjf8k*v0ZKarSM+2d%-q0W;D1N|1MnQ&H<ITKH#UYAZAEvw_b%
zc|VbfM!#L3icobL<EGn|JVKW`WSJ$Gx{Z05S=}2$gzw1|akzmxzkxxw)d)rTyt24c
zk8kduxPguF8G8MFnt!0PX(v!$?cv$uXigHI?}zHq^Bz{$qfMH9YV`NuPu@`<X*2RY
z)G1TNcXb*Q({x<C`Q9doBgCRVtZS;IY8gxH!UW4$&TVI76xv@$gw;!?t0CDey=4-o
z>{8^zlKB~2X4^FcCl!6^=eo&+@~>`jEiPk>BkcHuP5(|m_o}7S+qCy41#}+0D@W*H
z@^Z8wUTw5FvIE__<;%g&>YKZ)F(QJhwmaPal9m7Om<jIxQ&u)Lc5(e*pvm^X7=`~4
zH2J{gADa6|<Kx@>Cnf#=AN0R&hA#iR6XU-I|G#u%{Px?drI&Qx`t%(M&$Sh%xb$z>
zkGK~?f<wX)UWzfs3h9hy<KhFGE07G{3-B-#udOBjhyn%H+4AwIyQ!QWkL+H0|ELRi
zy<a5^czasx`}_4R81Q;Lw1V@K%*x^Swdiqqm>^g~*!TUCl@RduzW8HsI5l<~@cyt}
zmM0kSeE&)4|Mn)?vG+J8SUY!l`qOlx*`Bm@nRPq%asQY}*!RV?I!9=@WB&;H?_t8D
zh=7uSH_e~>s)U4}`}4E}!M1?!xBJDk1VaJFj=8kk-k-0Az8_=1>HzG^GDgDPpEqWK
z@AopoUI)SW=litVK3@;}+P3+u*q6hxvcDz!3Alg1$^w4t?h76<&dv0`-v+#G_Wis#
z7z%!Vou}nFwY`6zG71Ll{+sYOrQXk@<R{6h-|O*|V&2c=s^QNuW5D|b>dyY-=|6Mo
z=}|CXCZ=~~_5GrYG2kz7z~ARv|JSjA{+_<?6UBhn8N#2<+rEL<pSSm^F+%^JYr*gH
zEWy9uyZ4K20Urw=h*MvRn2SFjZ*_z}FI|XVb6+u>U68CpyL&F%Ggo$<z6ySE%-gAR
z{#{xU_5nq!YsYl{?*5t)%*F}<walY+Sh2qUvQ(7+1&1!a!r67v_0g8R3izbVO<@zt
z@vkni$jfv0)=Ja916JO1;)W=Bw>#Q&x&JM^$%XYwf8`QKQ{|pN#{!q)*2?7foDXl_
zCDjA>X?v0Ojhp-(=v==?x@X-llLMEN`Cz+;j*jyW*GD(`rXmK`x!w0f391)g#YX-z
zZI(Rv7~;z(@79$xkEz_x7A#vC{U3(k$A-IyAvq`7A#4qTzBj3|cfT(gs(RfJx316=
zUaEy>*x$CpzZjY`BXUkZ&YWQi@+>Z$AoFznU&`9&H+f#OxHqgi?5%FQXLxMzvno2)
zPyM2&_>JdgcQV-BU1M$+XPEBS)CkQ-F7o){`3EW=-g7Oz6$^6sa~MjLt~)dhX)%0O
zJ1uT=isGs-cnPlcc15*m*P3z*Zm&gsYlAvQ_AO)Vymgz(<U?~x_gzNYB^%DYTCuzE
zYjQm7TH!f27x<wYt4_Uj@15`0^Hj2v<pq3L7GO4A>IMf%XPQ=w$9DAmujoqy>GyZy
zv?QOJa}WZw4OVADQ!e~pnm2QG7{??eS_M+Qaw*?YB;m%=s@ZX6zpI6(=hHamZdD$a
zL%nVB?AiTF4Y}9$6}J0o@0l9;4!v5ze5}I#t!-p|rXL@-f?X*1J@+nZS?_!}@cL7|
zUy5I^^x|c&w~cBDeI842Y~DObpDhn~dX)ypi_!)xLdZdW<+jWgtP8;n<gQ&T2W*6H
zw$<!{f)4o^`eedp6X$rqGsNS~Xmh3~)lK35w2<ri-iD|{r?2$z2BdvE_iQ#%YQ-!^
z2+m=Mg5)3h$U`;Mu0*BnpmU)$jHWicbFZ9?TA#bcLEB)rj0E@0nj<T^UzUzOPVbEL
zEPC3OX&HWTY%OMfMMhg$J*`DbvMy!r?pUztPU8(fm^eFaRV8`En4(^8+;MDJZ2RhU
zF!)@NAFWrG<T+sZu#+Pvq{6lea9q?VLJM;DB3*A3NNgux8UGnBGC81Il@Prjz1x8z
zoMo?d*me9R?Q_}QTM~269e>nxIh@!E&iu|d<c+npZU{Sd{yF-KU_W7tupiYu#b?(W
ztEe(BJUU%7w*^A(`5I-nASUm+iJ)~1YP>|g85`(gU;A=fB+tOfs|DhddoDx>6Nt}Z
z`(N-bn7}1_)eOF=#aEQyiuznGgF{Z+c17IOi@@p<R(Dl$FZ(CVe2xv0cOXc`MJMUM
z*WT*xdZ}YKk~?z$<v6SL_~U_`u%2vAXQ(oG+adr6$JFDX=$c|cY;FUrYZPYnw7wX~
zcB9dj+GJR}N_hZjgX@zwmC@_ps(=dY7l|~?>wo#~K$h-X;Qw~#Z>!^+r6+>Qub!9i
z+aLxXt$>C!o4yn<vvurjUF=#PN_Obq`@9)G+a9}1YG`n69|>`oG6B}n><UG%?$^qZ
z*9~EYy-_9o`*|N`CjvG6W;WnyOZI}3fK_=<$!oMdlE|Zh*qUvF6gfIP*z-a*#XIh;
zr6oA{ZR$`F44Ezy5YI2ZT}9I!WK$om{SIFxf&k1h#$|dPIF~)=(i!NJXE8NJQvHOh
z7}r8<dlM4cy__%yZFuR=3h=HLiRa8UIoGFP7(#)ig7gxrq>$`Y9P(dl&;5=X@kD(?
zD9YFyrO4IVL~5GtOoLVopEs<&aAduSN<c^{x%bZF^^I?E^Gsgpw$aD=%R(-oNX5%L
zT8EFB>%fv*2mR@7;s<f%Dv37(g-rZwYNj1&`z@Qi^<pya*=}>&VyfBjRCJ;lGgNyo
znNq=%?{xETyLn($^AGbtFUGqW%=)yyf3IxANceqg87upN7J(5JErCxC2=VWKVL*wh
z5ud#;Y{8+S>*%|Do{U~!&O#6#0+@O9TelC1+Vr_M)w<%<@XYu=8TA1caEBak7m@D+
zA(=us!s!Y08)5Y=QI{A;ow%cQ%sLg{+Mt^%;zE3LMq5CA2)RxH7F%5`xthc2e7BwE
zLQ>|w_C<r>R&`CbO*7iBo>+#E6n}Sr9<oxBzgwIeH=#qgbDQ!raqxnaz1|xhwb2dv
zE#1B7EbGkfyG$!=;?Cd%$FyKH-nVGG_~oMKF4(o^Ha<qDX0IYuSVzO(=9b4&1L643
zR4<`+5@$e>h(bLbbWhUxX@_#Gg4hIiK}#b>%++eD0@;)c=y5+U`7d{xGA+_hpa!UL
zwYngPg=5!766VqGg)&b3yWKXTB30ts0@2mV3m?5gnr(TpCW4?ubB{+-kZNa&OKR)u
z3G{5ll)E^Ken2MHNBE>nUZGadDka6*TH06o7dTXkXhQ$om4?N@xcpXd`^CCq1X*ZY
zQ_CZvj_F?IFc*Hd7i9NDf<?0ul7y#*YAL1$>`acECzYKIpRXH)%m8A!*g*mEP~&Dc
zLQW1=Y*E8s4`p+J&A*>(j1?ChS*(^#B(W!c(}15$57kl2PJk1eOUJZ+EDzn8tN*tC
zXgeC@!!7{^b;o?J-1>@)VuyHQ9M=akV{S@ZF}J&{BLY#wb7`EKXWi9fEbHfm1nUEe
zTcY0)DPN)XZxe?LBn$}N4%_L1*$9*qg~B)65N<^ARj|B2DTf=xS?Bz@qGmIIo{U5y
zuOBe`eWzW2tAfRj6hCNQQUWeTS&0;B;Z!TO+uY<H=iX3^^3f6k5_p$e9tEVE%|AT@
zgU&4W*i-u2W!T!T2OPomd5GjpTh8Ez8*^NE_;=}xAPO=T?CX(l=z`i@bS2pZI#T*#
zQ>)m7fR{?htBj*>@040~o(m~!F9TW238#A@MEy_Li8(2Sv80H5>_aQNIcpOz@D7Q<
z&6QBxgtts61{o|EPIGbWI<R|b*GuatP{$vt6p8~o!Ou<9@_sWk8(xe0noC%y^tA)w
zu30}cnmnjJ$DB&g_BN9CVRePblRF5B^4|?*W<n^V{Oc!Rkz|H>7NUt^p3bK|yyfw-
z$;t#t;N`xx1DGO&`g}r1arO(hq-ugYzm+>g(j+7Xl7wb1bf3a&f@<dtykYyvYbAk%
z>?`&7q#F`#5DiGDMR;;<sg1r}P(_6hkozPleXyVhKD9Zaw1j$Dlo64lIWBR)G?&_(
z2sOXeDPg||nuDhM6*yT*tC>l7%JVe`-FLMbdk{wvDz)#Y2l#{jC8U?zCRY#?pLbAv
z!XNED8qJ`tabLRyni0)9@=FGh>zTveT>6nFv(;`+YXRwO1Iz&v#0*%GAr=ACVxDA|
zLXjH<e<;Fb{Q#BxdwCH+?e0c=PbLaDE-b_Mv={><FEP(T-ue_V7OW;iv4TQi^?bF!
zFZq8IA6Z7ip4X@%6%e0)Lrc$i0P-ipLD5W>gNrDnx-GW%@Ek2!CiwT6FJxCJ>h95C
z;Smw$bPihz^soYKr+rT36&hjNmz7SSSS5UY58OSV{wn8<bv2~7fYjM{v9yx7VkKnh
z5r8~YV3+R`MUZ7ZI<Y|d3rEgl!VukzUK;>havO?`yt<Xmc~3TS*W=F*M*+KBnlMBO
zeV4LljI09Cg}^U!c|!s2aF~+9&3kZh0(#lH&)tenduieKHmTY{M+rT`qws{~U_A{}
z6bD(NUwZ0?*}`|$oKwkUW@sNEVj&?t_qPu_N(0j;!D$0O1U|4zExaS8TLT9xna9GB
z<7&Ub&7kiO8gifq1F2+uLPEnklnaEfHAdc2YZPtxcUe)y93Ctb?P3B4`qP_Kox*OR
ze_f!;-83kl!MzdLVFR@R@_R_q<t*NF(dEoK-0aFaugjZ*=4aFoP=U(#IO}5J4_tfw
zafF0vzu{!)+eErTE$b#in+VK9cSgNE9qy5sb!M1=cFfDQgo{H-=Ou7`S9;Vb@c86^
zPk})I<|YU6)@-S2o9s#Zi*H{0Jt>FL{1C*tD(EQ_{nGb4Aa)3a^>3PlwK>LYUh3ae
zYFn(db`^f0ah=O|wDLr9_OPc<JOi6cenyOa@6{{`Joi4;73y>JNKISJv`UE$ve;gi
zViiTSu#EX_a_m^>KOXs+j<+$@Y1oWsD?x!?{G)JwY9=SXb-07fZZ++9Mz#;k1OlF;
zBNbnWz+BWGk77UxKoN?rT5iynE+F<enR$Q~RxF>5nf#2ut9BghfPfw$VaXP({n<(E
zMMAeXpv#4k(Vg7ugHYxdQWL+V0fu2W!L5RFD>})~_;TSB{aXnUUF4yUd|7$MT_|<&
zwRUX>>8f@_CGqcXfKYR^=khD(9s@Me_9D_t#1f8uo-vh%<mZw*J+RUzO79_Ra6se+
z0z}1CODC43nLgy|5yj`d&ZT+5?zjX}V6K~Fvj;IVrZNVYKNIKcC2}9@YNwDl=9DG5
zdPsd_e-Xy2sm}^L0sU~oBspjq9yT_W9sH&$I?qI@!7*B3EiY@Owls=@#BL)}4}JiF
z?+vX1hNexxRb@!-ph5W(ztJkvKtaD9IJ0Lid^&IRGEQd0pw1kxP({ROB-<!ZUAuC*
z=pVSTY_H%G1Ope5MD7xnIy)lZlkQv6mim%ds9_kJndu;>d8v<gKHW{Gv?(*)@TiUo
zDZ-kXY06+IDVZoJ<?uF#j0h;_<CYa7D@n_T{Ie#*>BaG;tE`_<fl~gA+c+(~)s#58
z(8<v)m^C%p5<%oXFsbQ$WlMJH<?K1^whLm*Q1B+Kmj=-GlhB`XkZ}f$8Ku3IIy^vR
z<o11SP`(60xLhkxdUxScEr;Zat??oCvMw*M|FwFH22lBW>Lu_<*31%4?v#~qykILT
z#}S4)#TP+w%Dd+qAeh{(hXOMz&&C~?xN&+rcnclM$XtGcqQ;6&)57bKuzGVgnsIN|
z)JngsbZ3A>TQu<EoFk>nen&_v#{$T0$BwtgLDTodTcet7{EzwtgIrf6uQ*MAoIgxR
zrK-y`f-efs)j%SM-fT26zf20HJ7a^UQu-sdEWG^7+u&UlMVy8Kj8QnZdcD6F5P%tg
zFK^Ash>H(2XJ+{WRoUV>(w5Qh9|ei(&DwRk?ydkzAl@C;!&SBp1F6h`TU5yizw=hj
z9t@J3?QVrMTDGEIHI`R1`&!*A^uf;oLlWGw@&?+-F--xQ(F%MzM*AV^B5<4BuhqDM
z31HteuWbSUWXk*<mA{t1oHjB8hiMj0T6U6Jqyh=lzoDw!mCK$Q6ScisBiG8A&|g1}
z1#)w>J_j5!zT9W-1t=#^64o+OC7cW;mn?oZdpi%j2*83n`l8F}<*(5nP=*f)lt*nH
z&Fj8{N|@6IHLk#7ysuVgL5(UPZGPCOLZ5lGjZE&*-smHoxJGKf$>%p(nU;~ko`1Kf
zxu;)NuXRIIsVJQbR4!R6_ay!RcmHSsz3N>7s|kXm8*bx&84e)u+1Aq5tOb!me+sBS
z?f2U9y2Am3azw1;;rtq1+2w(%-;f71yKCcy#$zuM(W6!yE?b&jwFwYdTMDx(_2k+j
ztiMrtva&p?P^O!D_Ckta?TpxhiXpwBvI-EJS#s-#XgHsxeb2)6a-Pj$Z%~+z@)>1@
zkyF&}U+fVe_Og2s9)m4D=fIgxi1mjgCu#}{?>|6#>;-hdZNxBJX{$HYJJx58cj|)c
z!>4tzL1sFXQ_*x2q-e5MA^6fZl!8PfvVZs@4l7UO1gzGp?jh&)hK|H0Rd(Sns&HZ+
z9#e+@O^=&M@{<VsV-Wq}1wY%p+zHw)6QdV`k{qg0Tae|a@xan<+{&-N3H%cwV&NNp
z9n|j@w<%8o>V!r|ZO99xI&$&o^$XmAA!Lr?n_9&*sSjIe!odlFcqx2<N4f3S!AYk_
zdY@s`q>=98sppP`CRE_S4!RWxY$EcojntO(GYm13Z&$0!MOy0Dn(&WENS=+%<p5v@
z)^+2>?eZ{E*2)@#2z|V-Urrl*O;nWi(}ZaMpyo2rUB)nm2Ib6Q&Le#pBpho>PZ8<z
z`b8c*LX$G0S_C0;C18)2mKp(cLHKkdj(h=_y`>cYUmv<hvR=;zU$3FrpJzL!(nLO1
zrIk-)D@oX1?4Ffw3;`MX%QhOyADd$}i&r4EMp~jxZ#SU8yMv!4(k2H7b%8x7gII3j
zwX2i`yc!Ojb$|q9NL(gj=E<>)ee=!lSR<<WqS0$p)A*X&Uh`+eD#{x7<kt}U8Gal6
zu`(le&U27LiLA754BQ7m8}eJsWniS~d?2%Fqzr`Ka>wg!Qu;{-FUoQzHa;0E^w2yG
z{LSVr7KIs>8qV_%0liM4WH?V{xR;p~RrII3-a4STTUwp7dQ74Y)0Als;?$)%F}Q6f
zIRA(kej>hKrpRCsXoMF@y1$_bY8)4z2dc#%k&P!&ysPY@a#F6bieT@)drnK-<g)_+
z3NBNy{LWoqw`R4dx52O-$ry#hq~I+)ZewLH02X*-q?QIVBiCjFL8PgB`YObim6TC+
zKM_KpY$uL%-hGj*n=JsE_l|&ZcM5xnyZ21wW_E?kSJ9=*Yvq?weqknTaav845tLtL
z>Bo4LGBi^cJS*mx2ey9G;sWx?+TgzN484k|=>)-5LazqnCF>R>*Ic4%SA>#{>~wgN
zZlOzR2SB)})mpCfYDqLoGoxtH37y@<$3aH7AZD#s3Y#<vuDdU(Mi#a6oEpJi<AP$;
zM&z5d9v-t1=3{X<EcVp5kH`L0T_`-DMN%$db_g-b8ep)LL`GuZ&Zp!=6toi4k8INE
zoaad{ZfIY5BRK8yd0_*#*dQy^EhlC&b<ZSTGl^lJvmYS!?zJ(})t~MoZVyglO0x(A
zE=k(Xh+bwsIVrKIc2pNYEW~h)tn3WSAD@c^$Ee(=*@QZxeN=`AN|(zMr&9+IP^75#
zaj%1ifi_VXDBP-=w_V|Ac={JJlJt7Lb|aE87BW8iBEPWkT@$(4Mv*T_Vp#<f^da{R
z&#xz~n4`wJ2kwu0+8;PR`$RlnDPH*{Ox_Gx5!v#-R$6d*sZ#J0|M`fkRPm9@eG}|P
zG60Apy~C{0IyDch<#eoL2CBdfV=8I#K8|+^+Hub5EHzVic%lP2R^g2K9QHVy!Vl<<
zH+IiGFY`E7O-=jZ+!2oECCM}9Y?GqeGO{;Dq-(@pyZ2*7?82=G7lxeE-Jp--gBh-V
z-PDfg?J@vGFssKYC<XOj+S#Mq%xxS7a)#jsc!!tS(x{GeAvM%~<K+*kW{j{P?XLzD
zkAl7K?*=t;wqRO(hej%X@RK6GYJg(dOPcem5ZKl!&}apl>m`PFFLt~R;#;L{R~utn
z!Ma?q)(2;5J+i12dsV3drw*vC2_mIgy_^5Ea1Jv9K4H3hw-m}*;HhXYJqd(aa6b^i
zd=-PRLXo<wGZGkqxPT#Z=77M#SWW$SNo{ox{BYLM_mLFiv3t)m0XKVc2CUXTPgX6s
z8?$cKf&c!F5VJEMr)R`$*Jg}~VgSkO$Vc?8zb29R^LC>ap8Q-y+#__@z5Ua*Zt!9+
z3P8p5Few~}#_;g79$B6l>e!~)NNIlBF9_(F{)s(+#F)`Jt-y>H2>pC}BA(qPrtzL#
z9axz)M;c)!JSy)S-K-gzm6v-vU-%U<Qw$Pa03xKErJG`(^Fkr}_F-A1O)dDf-bk)g
zNBr#~P9)qal5aqIo5HzL8t!FS4lzXKSVkb8HR0%}-Q`GIwtQ_WGd}X*+o*>qQ7~2X
zMi$sd)(#h;8K;o4sYd()l=q8Fd(#vDgoPJZz$GeFi7W)<nG2MB%o?<60&yb;{Hkbs
z$1Z4y;$Ho<KiC8ZlS|t-$h(oBA4ry%J-=4i8S1amZT@={oX0!Kk*YWmX|n)yo#eH;
ztyy5|dczn2NLtrs(E9MD)o0c7{=nMG;d$tdQM!JxWR|2|)}YV8%@|((TFZ>EP3Tda
z@m-Z<77|_y;4aUiw%iCb5XUHN`f@>}Cru8FD!{t{XspA|22(zS^{<xc3*t12S2SY<
z6tK+YY@g07>RI?Ml@5FV{<jv^KCub*U!XDlqSIYpI+fC;HWv3g+pMfdZLT`WU07$#
zcN(u*zg6E_oF{Ge-VKzAYVbO1dxf!7!eQS+x%-YERehEP=qy1JgKWvBp-YB*H6Z|{
zx-D$xqUcua__o-?fw>Xmu-pC15uq1_l7<BHW=g^1C$LaW_#5)AsKL7(nj&zZ4BNS8
z6Yw-BwqgNHKs04Y)>LK|rnc3GHNZf{#J<6^s&0$XE3GQ$t#`a3aQ)RW0#1-%+Lf?k
z#1TXje8$y(?9H%Q>c9$IPAgK`NUUz1sqXZ=jWd3&6tNS9%V?jFn8wVr-6%SML(HBA
zS=Sp$nqeSkv-DLE!2)>K9(9DpLlLrH<9lB!J9aZ@1NW?b+lV#GB~S-dm4A1X0*A5`
z3blaUJ+&bS?uDI9$a3t_Temo_*m}VSL-(G}s*=|;y@7p364MWSm1}{P-xh*Y<PU$=
zC~Ab4?txuF&GhGvXNI~gNR?C)gG1uGYY(<6eTr)bB;5a|rJ0q<n(BbS3gmLdrZ@^C
z)JdjYyQ%nXoA17J)$$rCiLUEQI+-+CtqIatRyN3@BC(Po3~Iyvt}&tOg48n&viGy9
zwk`}RIbF97+%O1%;ckO-|Ky5terXy1UJH?VO~Lzx;1Jr}W0Ock9|a(qMiy3Ip2*fh
zs`R145=+aPYjZa@#P!2+SDIKrrUD0H>x(9gcrsIo{S&0amO$p`FztoQL@XFyJ4Pi;
zG6VaMd21`6Pu&ul&B%h>wA8jxiWSFWyg4Z;$ZA}fL?J88s)mk-Hnzd0M#8$tNbAy4
z|IjEEBvxsm?DL*5wNi^fA*c=I#GMgHJ`c<eo<iZ|*nwY}Qjm}W1;g}F#x-I2<rb*C
zQAlI?8oX+H;{{?MTyCF6Y6%-WSEW1NcQPIb+h7S{L#zhj)h4;lfE}oMjH(KA#WAQc
zv^U;NVM(|3bTTdbJ4*IM%+5iS*Q;a@<+tA}Sd!h2b9#?te%i+im@!~g9<)JGmX|fh
zfqGl-T&mVVvAbppNWEnW4C?}uS3*vDXsvA>mvU*v>bm%;_%_Z@M2|cxiEitztw}c9
ziet7i76CWvetCv2E+hFbE9=>GlYJ?1JO+(<d;PXPukOlp6SammB)f0dY-MpkXQLI6
zO6)Xd2qiG*_(C$hP@2CFa$pNX{b@ls{2B3zkcmtY4ynMATI_iZ1y_V}H4F3a>>BsY
ze>8|kY|V10*C}#ICDhM8PI}y(IvatB9f^gkklsMcO=pmLou<Yg_&2~(yfL3^)Kv<o
zSHw-Hc4+n;eRRXGaP7`sM@&dfQ#$DSdPm;nevnn#xp*zLoY}fm1oNH@`AMT$w=2hQ
zN-6a8xo{x+7KJVIKUIBz5ZZ&&9O8S?=<Tc6X{DpqCQ*ztF7xOIJ<|2^om`t@Q3%@v
z_IfVA$g9$9H&MSvNnsvh6RL!tK<o(p^?Q4l%z``axL70~KtD>cfYQ;2UL=xVb&K{}
zMe{Uj6@*gfLq?of-NPPL@El&2EuyfqLYWIw>4%x?0`bb<+M5Cp_`t;O@@VT7J|72V
zHpXwX>7nZ>>QD)5%B9posWO;GJDK<BHx4isdpj-5=OqMQTQ`VMrf^X=EyL!|%6EZ>
z>)24^Suw$h2A)%`vAOz!r49#Vw(?EaOG#mGJs492uGHm>dwBn)<}S7&zn9(%u(^x4
zOP<qCav<cchSz+RBXbtz`<3_WGDw^4$_t%_td{6A$B@$A6hMm3-?*~gtU`Xo$VH-t
zVf+lHnd<ey$dMoWGMsjr`~;clBP}}KG2yBed+Dx}Hnx*)bqct`s!^f0I<$w`u8io!
z0Xe`EF|@Y7YAZW@8NW7?a`IXt(Cf~btLUiyrTVs!%7ksDb`~aBeXaUg2S5YF-L`Q1
z2B(;Lz$r@6+(Ai5A#50{pdub$7{(#_Ll<72N@Dq(AmaqUFXvq#jHaD%NwDeoX^w=t
zWuUPN8C+L+Ep~=d_9#o=(aqp70GNo)T6rye0#|{aO&oA;=kN&<lY;vjH%a|hhuhe&
zf2>NQbyJ9ltSEUWZg5!_Vbbcf?R*IuR%OLl724p@8dQR{Ibg+@`a3818n;S&y^Yr+
z#L>)S1KVSE;~#Z=_v9xdH|V;$^WFYof_V6{z&zutP*LLEeshTIzp2!6x~Y|TH!Bms
z1|@2yxkrFd^>t+{+O1!60hjtX)s#iM8q_Wx7SV4u<YUmES2xd1THi8TzEus+;iBWj
zE>-o*-h4Y-8lFS}-A@86{Ecej0q4wi@ulY0*w5Hi-G&T(N70RSPaZ%vV|+p~vzXwP
zg?)cAE$#sIG{AsrYs~6p?I-eq>VUSvs--(2R)waf4o+`7zCf+_Cy+ht-`<6XbWN;Q
zJy1~=tVBG-4V<P9Or6T=rYc{Un${)J?X?xd#=C&Tz|P-7iyC*lI|hb@Y&tTr{*QiF
zcXspZdvOjkcH_6ernNK)W)C>Awb=@@nA`HG6lw%qL0TKN7T8FIK6Xj}Ybr}Pz^34$
z9zK=!ISw<K{w}44zncZ`V$Dsp<X6wy?|oje>}y0_u$d&ohuciHC9IqVU31GFw6@Tb
zfT=^AGco=Kky%!&g7YW}FJrs6?}|yFzotbEr@+SL^NYbA>^WC*=w@nFPyNmlk9}HO
z7qjXc<gFT|?Q3PdFoT@D+<I3?+ii_I`-<X}<zo_oYHYu$-<qvZYX%3t%t_}x&hRDT
zK|OOkLB7(0z)uE!s*F4m@KeA$7BhHt)=<X*E%@E8dlQJDWK6QFXURXQ$vkJ9@;YAh
zHU)1edFtqcky)~wA`HXxIulGbuI6$#j12ci24=3mSpGlC-Z4hDcw75z+qP{Rt8Lr1
zZQHhOyL+{5+qS({<MzS5Z}!Q%_dYkNnyJ)>nM!4j@gI7A1Ll)9$?#WdVy@;Pk$Zvb
z@W5E};&rn~j|hsrh+1<Lt!a2V>(dg>Y2Q<Z9_Y37rElC+ugEliSA79Rv(cIiHu<g-
z0Kh|!0xFSx$8S`t6ABxvQYzu`#%woeCS-59ru%uaQ<oR!8nF9eETFH~Omxt{i3b&4
zgF$d-MLGi2CJeGS7D=w+Owe}7YX>>cf=@wn#xZ1R(P4AFRt}faGngk-=<t0cMcJ_S
zJKTa(swV5<CdiE!)n=fem9He|7RS#CJ($K5@@7<oSp(`qmxoL!i+Ejl+i#f|5n?P(
z^sX2J`=&+ANP9-E!Ckh;FjsB|(B%+QnYgtDS7lm|h}(a%jsdHp3SBYHJVUNZbl}9-
z5u9~VwhVS_&Ex^kz6zg1Hj0I^ToJ10I~qVLNv|8>UveR_4FUE*&t^Ng$P<2b$q&ng
zjBdAI>nyzS2nCBTd6vcb%1wJd+otwT!6SJ`f#PEWUSDn;L&Q0Si*4v!i<!IeRr?zZ
zu#BN4;gVXx7Qp;wci_QXi>$L#0yaX=`Fm}VTt2lGx4*IGsX56&&iwo)w=QZ%uapjI
zkbS!XARC%a^JvSswXUt;S8Dx3xsqtRQj{isQP$m#vrTjLnKAMhHMZpov%XyT!u_2g
zRXvzR6XeXEl&IzpE<4Qv2>aBWq8R+#1Xgdb*0j{NUQQO|I^^<pxFUN_cYU0-WyUd<
z=4p16h~vOm$t3N5p8qMtAeg~*t^VY{oYf#uE_!x2RfUtz(xhfe&x|K?ipie(_l1WB
zB+>HR=~s|VsGms<fPir?pF~vOHI#O^SU4unwSePXEZYiCbCtn2;uA2@iu>e%2{PN?
zT;o69CZ^T|UswcLZ&<~4pQfXCJBh3ZIOK)WE1AogxW6jPZp6tQysIt=WTU5$ll)mN
z=nQl0;zfme!A}@>Jv|hknCpsX?ct;h%(`tBhWqodvq)3k@7V2|Iie0ipDhr;VbStY
zbAqU;TibSub*t;)srZ2LYMsm<z{1go?!gK*udjzhgkw|Ifs9^*r|0OT5*RHv1d@JK
zG(!1*gxWtmTG37)w!9$T%*m~e3A_=0+mVNe<5%TAH5AnOYhN9)Lc{N=qx$>P{hbkI
zW$#}LHT4gTPG~?c_{Hkw`ekxyocwqFXTuWY*OZxfgBGt$(U<^dC9vs)L$=bUZ;_+q
z_inb5_8LM?;uFG6f+Zy>d)G?J2p(nWChswV@1yF<t`&X?9&3a508?BU1|g^$72XiN
zTg?_2C4zF*siqC$@J3wMHD}VrGjGx1_uAqb;)<FnoJb~h)e3GW@ZPc4jx4i-8!x@3
zH0Pjz(>fc_eY%-89fA6;&V{_+V6W%v@f8?T35Vk~*QSBm`FAZ4Bz*WrT+}wm3F5JS
zxDjpDqm&HKMa>Nugxp3K{Pf&O6~4~V_}mt~yGQS`m47Z~Bp&Ag4%xbRB0@!(GYa^?
z_X;dqaOG^V!VgHLOfQ{pnDB`ufaThKQYa(3ZN=<yJ0P}63vzNL)3xT=ps(E41%<we
zIKkEBvh}5jets+EFPl$%(Vrb6wUNQ|>J>CvOHN>-4$Q$V9)eB5?5)Qg<9g0}4+Qas
zg=kfRaMBA%WFh1J_V+FTD_~-RrWsk;-Th=^Nt+94%@Lw?pIz{I%coY>xQmicj?3I5
z&5GZB@;T1kTiR?-O-do5;gKBETg9^lbk}>yi;8!Wt2?DBNp!K@5=}ZMG(plI)3|!b
z1G=WAdA!3u_i$5EX5h=eh7yoLqIyot9Xz})e>>LhhrgH<5u59n6@$iBFk{=Ks1MYH
zP1pa-b9F1N&)d(?A94qpfuFV3cehFG5mi>JT)(Z2TW>sD+K%15Ys7)f5H~s1T}1&0
zv+ZoAQyn5~!0+xwE0ed3|EwuA$XxohmEIM&EA~577SyN#%*o7W98+KwZi;Cbq{l7#
z&a)=37Dgkh++3dv4P=kXd=Jt-`)bTKowNy9Rg*hM&DGR99%q-DtC=Mx_bEWknwadG
zMV+Z~?41SrLEe^EgQB3B>Tzd5wv@S4ippk7Nx10Xr86UpP(@NF=te+%Y)ZgyVM)R`
z-OBbH7QXmz-KB;U6Oq-L$muVnz#Dq`kvEr1Wn9ai@<3EgJQr6mx+u4?N<|aZzdi6k
zPayF~z<*HG^g78;@8oJ_YP+)9=)}gP?V61w3$ZSxS88Jb1i6_+Wa~Pnyi0RgFG)_J
z*QHtQWucbNA1Jn6*4oYFbOOGNO-+L&Vd_{Rfq(lfd)=jTZhwWGkmGe(u|vgAG0M>`
zaazfMux0-C<2GZ`vPa;ZoJa2?U*|aEUTZU?FFegWbnR;ot|M$pwcSJ-OBMvIwkzA7
z0*<^e-M{1FtiIzy9mpK9Ws3XJ>x?9}@}PYk2t=wYxgHU)1-v?>E(gKSl=JI3zU}i4
z8&3*UsG8xL7z#S=I8BTLJ!wG0F^1IiG(wbWQMN3MP@xp%-kuki1v3Iw&Y1Qut^WPh
zy;1ArfM~bV+(fNq5xnmyh&bYUdQq8I%T~rH_9nR;`wAp%avKewUwdfyA?+xwxNuX(
z()xg5Uq!oUddl5)<TAb4(X`(ElUmLB$CftC1Iw&6*c~4Y`pCga63ELRO!aB*zhCX?
z<=-ykJFZ~ComTc{9PkjXs1%@Lj-0$Ib4C-Kjf3bXIkH_2#~-{dsP~HYbtS2g!QV3{
zqXxnJo;H`;g;^r-!R8vg;5i&%55#AXiwn!@TN7KBm{w{MaL0_-&AmZJC~nLZ!6~cT
z(fb|B;5u`uz4bH$XNrfge$Y786MS>0(uM{y0cui(d%5@S!I*_za)rL`b@*!ArT3MJ
zNV0Lnt#7Ba{3kcfNG>(EDf<e_u4Vt6J9^$q6!UjmqS6|iM`<<?z)3OmO@o!hsC#8E
zUJmyx?d#5>gc_7XGoZ*Vt0Mp&5R%I8ghOnP?r1MKq23K-?z_|gEC}g&M>f?=`1<O)
zi15zm4;5}MeTJ=>TbQK=Pfx{3&XpQ+%yG!BXO~igsN>w3Cdv54s*bpE+Nx6xBF%K2
z#+5JVkENY<+7gv(N=Q*S0RvuZP4$D7CQ8Ihz&Q4z(9cLwYAWWwf#)X%konqmeG5}A
zz6VV!2w(_0RWTrpB=Vav>p$vK@yXhyFmt-qmT<vY8t?V~<X0KxWKme;v(W{>TE2g?
zmA+aWHD|~;(NYuKWjP1;+?7SItd=ZvV{KTTJrz=Yad{`9?f}lEz(~TD$cl8p;po?P
zWo;37R=Gs0=WUoeS%ZIICy78@e%#60L46D3wb9!Ysw&CR{<fChdE{SiPE$_HY|lf|
zi!;K=RuGQOQH0ol3LqL?xRBjaw|TBLAoUy73E&UvIPY7~JnEW^_+X0xDQuRxbJBK6
zqJGtduB{{%yczqR!n%#;#*G9r1f3JrWlw(+3nm(}zhn~*8J+B}mO~P=gq#3t-0T%k
zbhM!BhbJYud9c7LPeE#6B8uPR(`z&>Z5eFcx-hE8_Q&yFcnvgjZ%v!BO@*PST-`7Y
zJb4P$#l1yq8>j?ZbDgOQdKZYR!n+-bNzC)}LR+GeUHw!-Y_3GWG-gjRy~f!6&;ev7
zDS!f*qWiQ3lLz0jU8nZ~wQF&eh5O5MisWONZVJmp+RfOY{Fx54*rl>XPgFWe11Y^O
z*Xi2%5)damNKDeTq^=jmct02RrB2B@R}Dvek8e9+vbK2)L|D?9doWUHJs%+Ji=>Kv
z1|8uHn|EbN92Ud{x^n4^i_D(XF;afcD_ElY&83zwl&n}6W&lRj@OSU<o17#SP*_ky
z+oxLlzK$mpWqp4&QBorp?u3lV_cZ-HwH#$}TAxrtvBa!eRz(Ub-qVF*Mw_lv6_czI
zV@;IpwAIBmvvg<*$!|z`;FIg$l>s4gvWV)U2<tKt!w8UtW{=b6f1f$STXJxGHv4T$
zU0ue~EmjwafKV{??{nP&$Lon~=IP}DrO05`qKue!wGDA!u7guj1gkwS{If&39hY_-
zlf0Nc>EvancX3R?XlrsFP47nbnz2DyU<2ZGH2c<DcDa(FmM&LhDH<vbEQ;dO8?;sm
zUs!CiE}`{}CND63Cq;<GWV2tvbn0V0W?={W54SQ%?eRFz-nX!A`2!c%Ga#*ICnS%(
zKf225fe=8MOoeY#pPX&d!OrLpBT;UoddjTq>L>0d<Z0A*3Jb$%YU})l3o`)1yUNtY
z_OpxXd%y%KzB7R^Z<8x1RW1<yuWY}%#vkZ%4ufapJZ~`k(XofPB7-Ivzg&?z0SM2`
ziPifunNnJt*Wb2Lk)>WvPI$R7=GH#CsGc+Xn#w|lqJHItpjdq01f#}x@>C2(M*pPk
zY&+D%M+{nLp*Xf5`Uml3gC-l$;6HR}R+AAuGokEXbHA;9tI<kth?DbqPaAT5XcSk9
z?Yz#Z+Q}1*&tq>ixzqOR`?I^G<55(up&6_GKBwYJm7rhCMin{NkzbFUXGb}y_M~?2
zn050MeyXy;-T_OIA@5v*)IYAj8-JQi`TMhE?!Z%%GNYVw1KJN;-~+G;eNhI0ixC>R
zD&7E1js2<Pw&rw}?*cVh@cr#(6F8N;>Y*=RB`Vi=R=`r$#2>Fod+Q~NL!<<MqT)nb
zb^e~~_;FWxb*Z7nagXg5pee+%{~N{@uC&U-wV$|gjDooLg$foUulSA=d0pu)l@-Jy
zVuJdt_iI0Fv(1S$q`79%kCl+?Ozt{?5z|nW5#%m)llPs3oyY%Yw~4`{j@(N8pl5gP
z$h=mwsdkAjO}v%4sLcdn#8fySwr90AJ2f-kjqBxjawU68H=gK&!c?(;V?RyOjLrVY
z`Aj1jaBRVrqWZ?%qiD&yLAT|Iq3F$v1WOZuU8V`(%Va^tsRzu}cDJmD9)r<$Idc7s
zHBpChf{`%OA(WvnZDtIpLV2r>w-qb|cKCeZ>GdA#<P}J+931qE-<L|(q}#8qb~mtF
zJMddt#@0&|5b;r(ua&u9b`zIVqkG;pQIR8MRNxm3hrkua7rgzz<xoD^PtBm56e;(k
zH)Kr{Lsr=Kr&%@X1lDwHIh!r|lRCH8g^NiC#=@;{RTueRsu|7f#D|<I8sTV(A4(t_
zM$B2w0=(Ho5TvH180Ou9FQCe6S<x%mW`nt%?6oj1CmY6S)-9kYg^jex{HvZ%mL<0o
zWl_I4Kl%TW>jSFHw;21gjq)4*UrB`iODmygVr%r@P@jJymAF>Zk^5O^=`&l`&H$N`
z*y>Q=9gPY}$Rbmv52T9#greAXZ<#&e3bj1smxtR`lT{2tSZuNQFh})zxaC!QYq6lZ
z{R4m`Iiw^XR0rbXIAhrW+z6?{7<|WQnw-S@*c+F_k>HRu$+n*lHj>;IB!_741A2tK
zVMmQ0xk!Nc>2Aa~@|_UiVpwX+FOIlixA&}rw96{G!<6+QL00r(iH!*N`OCw+aSj+k
z1`8zf#8N_P1n)<TaR9e5ppigflE5=5_ZL9n%dsYR&L?21-)@eduOFXJktHTmH}fGT
zCWR>{3LiT`l*~kx;6%;VtSl}nF)QE%=T8U2Ymrr$oU<6ci>tU#KJp==%{RyGN5R^O
z6vR)zneS_?rg~w`oBqD>ND6-1KYDw(z-tPZ8*NP8ewvx>5$wjFm{TK3k0(3%d(OHf
z=H7Y!`S42z2VP~@ax9AE0{B$`&(t?b6G;Uh*HdE%qO)E>DL#f+=bEg2o25dTvw9fg
zZOY%)=H|Q`tQwRr+FQ$QGK?D^3vCcApT^&eaieM=6?g+qaL}Iy+?pGrgwz!$cmW9)
zyr6l=7B#Ay3hl274P2#qetsmFAhkz4;L=KC5Q=2sgKiyUI;#WV2DL}0!Y1{2rvf)M
zW|u-vO0(V+-g=GVUl9Y~z|(+k&oF4W{B53FUkA{oQNJwz9e3j#cHH%uiD?Qv>-A97
zwBnDk$j!HjiOm>a5ms=O&doZ-8{HIh*DB}Lioyn^VZ*LSk*-M4N<+lt#y4?55%~EJ
zN@FyBlR%gZ&tx%&u>#rjJa*EGr_;+O@A+WZ07JH9hX^ncz({FTLPRnF)|W_gQUgoA
z3uN3{7=@Y(jOP;5&+I#bzf<Jtwa*kyGcj%zb26LDbvKjqG**k5M23}|6OPwo4M~tJ
zo%Ov8FiVqSF<3<xhvm=#Un{S+Ih<sZ=3OO@bjeQV=Ixi6aL{xtP6dIJ)$y|Qo$)Tm
zjj6iU#kS@o57%dG(hnbL3(tg?LY(+EO_{uk&m9^!!XBrShIhccCoOa=6DJcVL9EQm
zl|i&FK;L2-Op@ez(%BH?F1CJv(#!b%h5F3|Qcs1bf69&@b`~?c<9{DF@6l!TS%sMj
z&WUB`^f-4YYIceTENO*2%E`L(9Sk!}`XTIaEBVNuL?|P~&p1CHu6L|)VO~U+ks5W?
zv)Yi~Bu`5Nf4+Ug{-dQoIIM<A{orZKaQ+p+>;I^ttp7hk?LRU0Weq>MLpF@B-n;`;
zaSF-;8=Nx-@QPrBOxX#*Li5G*kxCW^3ARJ!2q^*Xp1-<XkTUr!H)H2)QX<z`qjA@x
zxA5G~o3!SG7EC_UhnwR5pZACTc<1Xr?XeWv(v<jcyzSCS{1yaz#$<&g(_Hog7~11-
znA-EvrLQbk1PMnE2mTMyp$vzFG6KowYX^uJ3+*YuZBuZ4tHxk%U&MF9eKbXhV!{q!
zN$Cpt@PIi`;hZ4j+sVUx@Dx)<h?Ec6WaN<EaO3K45HE;)KFP{&LPV$;ukTM+-tMYv
zjmD`&S{P<TF{8|g<ZJw(dSku`2#Z%rZQOaY+>o_|lj`IWc3n}j+uocx;#-WtZdx_h
z>EPCA2M1>q<6QHpEHZ*z0Z~#oE@v^JdSOMoe0ki(EwG?(9LR)GqdDet8>Kwa<ZDuq
z>;eAuD{Q_IoGH68eTHO5)B1Z@BhhB}v|=q919mb+HW&dNT~?V;rv10H?o|!9m!0_d
zg9Wd(U#{OipW{7dt(x0x*?QV}{dge$Uj(1PCQ|3P$3R{0n9}p(^4JyMimbY+F;d&s
zQHW7lcdwb8pj~wQnvdD*bi}rHxFkZoFhmR&q7RHPaQuM8)a(v+@Gca}>g?GE?*tyI
zl^sX@+vUgSR(JVoOAk0dFG_pZX}*Ou*s(+LT(BcTEFP|hwH6+i2b60I*pqY42nHk`
zF<@WzbX1xoaYTn3M>c_@vQh&Kk4i>2Pxz#W4z|?QMi{ViNno0GG1&UC=0^Sb89EA0
z%C0?n-IXNls4b-5>|NIBTu^QrEwYLl<+4B(Mp}_|Nun2Psc;2J(mzR0Io;-$Cz}`Z
zcD83LtTXYmHTIe5YQy=3YICM>5xOJ~{gTJq-M5oN>YS)0GY*?#=Cv<yibkq(4n<|f
zl;*}6iYcs(^F?DQ+p|fBY*ryF5@qzAWAWbXw`oDb7}zBY4x75^m9LSC=t{^)<P=$^
z#S(_kG>c?(k7*04s8Unmd5)>ax#Sdk7gE*bfL!-t&#kOYYV6Z7F~#nlxE|l`$H$;M
zGCFXGI^KEPAtX&QWQ-cUj`Z5PhcDM3CLY{RPgj%HRwrz29c`~r`o}6o$Dsvb29sY1
zCYV0Rk<+8FBiWtl6NMfpZWj13FoT3%7X?OHku-j@NliJiJ>r==LClbnBe^U{2Px96
zEbD(wkQJ29(qv+p5bG+5Rq;g0ff^}BdLKeiHIKabv`gtJgw?&g;hqGF`PO{y1`$fo
zAcq9MVkojI(@f#R-e|g%o-0UR&&TgPojr8Wo~%h?z}mhF<5JCZG|<!7d?9>snwpP~
zxlo*F!jFRqwSl|*4s9HP*YInpkkS$wvVh&Lv#5eL=nRHaq>n!LD{}_p6`Wq_X8ZzL
zEtI!mXsxo9TySE8`AwVKtS}52`fwTD?8WXef~9ok+Y0urIk)Z^Z(RAbm!IwJPe);8
zBU@f}u(rM&g1CqGUMl-1wLVA=T|?p$OLLq%YBOByrYGZ0ZeMoa2mDUyKip1cQrc2%
zUT?HJghAU53nfvPsH5zy*vl?1npBj|yTi2#i1d*Sy<WeDZB<uF*?b;bDk3<rWrFvh
zsOfy3BIkC(=lWB+MZz=25K6*MsPXAmbNvqMCq4eGVB8`UxQ6Ovh{u!^Wu}b(u^pD_
z8RwvdD@V=4Q}bs7Dscg2C<llzq=8FC)mI1Pf>OsZv(r8DNqO-(&N)Q2U{+6<9%zv;
zRhVsXUQqtZi!>`F@lZi>oa^OW2-x@|UkLB=RPguD9I%hM9{wM~urJ_$^wbtPx~@Gx
z6iE1=MdSaRwfLW&`hTz>|B0v8k&}TA{DshcTX#1{2)|J>6a}vJGy8AYCQBLxhnA4g
zju&~>%dYyw3Nz&u$8MKy&X|&G6IXue6LDQ~E-PJ1-EZ(oe!3HiStnQmzdS4ogqq4y
zm&$k+>8j?UM&n!t<)hp=oMo^*7PPs5$-h-bZb%ah65Jc?V%J7iYjn9)R5PE&-ol7s
zN<gGHBKg2Mq@OromViHjClXchr(U`kr&u~<9B7OH(l_xuq15v7t8d-K{OMkgC{-M)
z>wo+?-Q30NaX)%?6U2Wn?$vX$GV%B~5o_A6-2n%}=<Yl9Nv9%cNC-zSgqT)EW#wXo
zrCZCDP#TU}iN0hki-5#h>GtOLr!~1T8R4;qoF<;;rjcLIi#tyPxEU=+(53lbq`z^O
zC~M}%-K(sogK4Z`aawq?Wo>tqv0wX9D7CKVT#-q9+Ms~mslZ5YQ^<IJhm$=35-T;m
zdj<n(_0VZNp~?DzTOc;;?uyPl=TCq=qTKEex&+aRYoywa3oUtl6Yv~&*8OdiZ-g|3
zWj1?W`+<W^d9|p&`%vOT&;_63Jqw%2JMHvHB$bWjK)XI4|C|gyneL_vcd5^%`X-Ki
z4bnXmGxCAaryQ<WbjtYR!{p}W{Y_98N(A|&@WnX_0vmSxbNNJxu>Hec=jPW2=^_n#
zEc~m#Pio=k6OoF%?ubtl`1PlFCv&WIrHfSWoiOaO>O9RW*Je}Tw(|6O0PbTs@WAaj
z6xhiZF<K()G*rjPcOK5T#HrGxN@crR>hYMAW7;$|D`VSw#j(j2%{2RBY08YdTdq6I
zKg+zH3Je<7by&a1K%EgrtHv&&cWM(UcgOBcN=t=|U2k7{$<vTp3Br91`7bURk?+8e
zAB+e9-HI-ZnH2pqSIw;@spa1FD7@dV6DBXdTGk#mR$FZ$e)Hc>(;o1q2X@;?PkYvh
z>=PdE15%B@kpz}s_JNui-|XS0(7wC2WzYAfo=+#T;dKPGXdvlC#IA_7=#J(@i|g5#
zOTdLIB>B(@V7s8idU~aY_EqsxsXW~9#undH$!pZNg_GsjYgNs+A`;Cl+L$#s_`wmG
z?&!m*lvEl@e^*vj5?f_hO>x^pF*QEyUgM3tFf>6mRWf7^gxd8#@lI6?h^k;LQp7a0
z*@yO}d?l!tuBuuu^_hZN;|4l7jUK{zk8YzQtL1)bWwWa#sH{7pilx}7P5(*>t5u}l
z%<*X8HR(GU2Q}q&zYbWzTrGYQyif^8ldP-l0goJPT=j5)C91$(WrTN*Rx}IeV!Kc;
zSE3Q4^K;f7;fyyZfg!%cOn8n5<s53eYDZf9k)Ko)#gFzZIAEECmK)Aaa-J(2Cysvf
z8^1DJzew)0Mb0A@Ax8&b05cj}iK+a2C=3x$ivWd<lCG(2gl9%lMQaQVXM+DQI$b)E
zX}=V3#pq^slxNwRbd129;i!7wOPA(#H#1Q-!T60i!#!v-!Qh_K6+6BZ<ffXN5IrOm
zs*sYfH*LO!IT~`&V1<UQ^QZWRB~uHACt8+Ow;E{>q3GwyVnA~>5KS>k%Qijb3MZ^B
z7YHQ{rbzfb#=?YoFuX5t^)=DM@Au*|p=`p^B_oCzy%!YCJ`f#-5u-1jYDf~-;E6X{
zC(z`DdxT)NMES-^ph=biC(}8U@KX2jw|Amfnm#FIk%Cz`<>A3T{ysh6J#7lj4qnE#
z;e|5J{?5sNH7r^ipDELGY-fcJJlY#RT$9v>D6I5wV&G`e1gKZ14{VqA;T6HjPUtB=
zDy|rRG*9oyvj&g-T}guHbD7V2LQP2s{7mqk0dd=S7)|ZHw)1Qfnpf+Z{I2L3{~r&6
z57`0vg&%$g6Bqyh$-kx}80p!W8nUtcYiAdubo-N@BYfue9t;&zT1fdSN5{Bi{Y31g
zDhvue1Vi!{?Jex9v4-R&f*-fsn-bVi;+JJxkK0{tx3%L0{(#vPj!O5W%<(zd-W)h(
z>x|mWP-&zoP3tJWDi`piV6s+&$|Xh|s6e&W0io2D7Rz%)qC}Id$H9^^(B&oq)C{~>
z`*{S-djeVR2*UvEm7yv<fE6%HnVNWm?V+IPC}+S0C4h7R<tmi!bdVve>{AJCEVPj0
zq~#ssjGUuSjz$#>^%=3&e-5uc3|)5&G?!5uQMI!oXRQWNSJdLMwML^UpHE3N>Q);D
zFq_dDDpMoqB{v)le+FR|lL*{LNfBKH_NB6N<F&KWeKxys)Q@x#5SxMs#IsFSEa@gU
ze$o9Xup07|6D^gnSeRBRRF<W{M#Y?Lf6<=QD~^SLO;e^xS!F!#GR}i59p}r~(p(Cv
zRBgqWpeQGoR|1r-)K@|Zk(mXS<v@#k4P*jMVz&WKT6!Un))cVCGsHhz9+cXk(C=M2
zyZXch#>U-f^%Is_Z51wgTUbF%Qe)V2ZiLy-C;-@f1P?TTq(}{l?qTXw<(;xK%mvRE
zqCH(deBQv45-Zzfe^9tPhoI^lY}||DK0ZAhaI>64WLkrmKJW~tO1^E#?D{=O-cMIO
z*UkP#Z_B%Rsr+4A_;e@hzu$J)waQ@+2Cqel#U6~iD6v-n2FzVF8*ha800u5m#7kfW
zc$K(gAd_T!I5nIR7ljlw_ZkBg7tsJy!z+UM>|YIDo$(nIa&X5GIC^dQ1|--FxBN1H
zy|ld?%nc8guupuJx|QhGyISnRA0%hnd|Hoc>B;rF(DW_cRtg`+eP!{N72-ZMY;X)u
ze5~a2PmEL=ub~%@`5;0g#E#IPc;6?x+#yfn^S^Mc=aUwhS0zW?$FFL`S?2Ilp80k*
zTbS+JZl9faUjtkI?k^bQ5_c#c|06b7G|Zh?{;?Mdi2sGX82x*DxmLcl`VV`#={*?J
z=difIFSuN5gps5)qG>KVPgCqX7?UiPNr)!lhAsL2E8DnOEDN;R=A#Y~QR4P`v%Nj&
zK<|&2U1eDEo~<Fy@9pl!BfjvnYzCzkii$jm(R=lRoD^+Fax$3>F&h$am9D>!l~q}d
zB`$u<A%?SHVGc(!LkZS3N^}V!_@;3Y#I+N#uZGGXq2?DAbV)(%D3h)J2q@?uadU$J
zDFRCch+GLlgK^r&BUl+BK_*B`OJ<lEhTrO(R6OnCa%^9oz7Cun>bsaKmd2AE4ViLM
zlc*<FW7U&JD`+Q1IP__g;s)>|;o|2W+T_DB+=xxk0s9UJzxNZvnab`eAmb!Vt%vyR
z;$yo!5QK%RkwF^pGq73HL@WrCILjA0#i$~5QPIFNFq11MID;0GDBFISDydT(4FJke
zra7@Q@%zmR<JZjetxa*QWGqBYwV9xrOD4|*RFKk04*Z(_K(O4XkUv7Fp{%cdz_zch
z1yfjnUBV@KGVZ`w*;b7_wfAM~@c1QCMh+iyfN%&~tANGlCJ}6c<*EI$skUa$?+=V$
zP){##yw%9J6y3Ab7NvEDIbf~}<;l^l(_L5`_fWH{$6v5zdv}D%l2ZgYSJN}}cJTnM
zEP-Fy4Db5JHDDr%QFB@kyPSwvWwLq}I{(ns@8i=^1gAAbj|ql%f||%N?!uBMa5gls
zDAgr(@*5}e@bG%mh2a8QU_o?C3{Lp0Qboe89k{UX2#;EAobDwt{YFmO$FMW%{cCjw
zf_?GKh4yyPGr>z-OUPXX9+BP^9SImybIYzp&NL_W%VYzPaJEi%NQ3C;;jA2*pW%;e
zYvq$*bC;0V9MMC6*XoRM`#7<9*Bx5o=+P%wofSVY>KohVZDi>V|5+rh7L40R<0vV;
zE<xCK(3j<)-yZ6>7O5}(r9ch0+jp*qGPNz+wXTDE;@}?V+kaMt{_g-D{C|DK7&zJd
z|A6qAZ_!tC{hV7*KhSupe}Ciu$Yy9+IoRmzt^bp1|4%ZR9CaJFOmUR2>fQr7#UNS*
zKqKAi?cZ)rnMp_HozuCkmjW2Xv`i?W<(o;L*Is4-poUE&*~0rfr+kl7IoyM!DZBZI
zAp%Bc?yv{E{&GNV+5yNHv%sgmQ@=KMch^_4G_h?*L27*tp8uxVBhT3l8QP;XFv1RS
z;dIbFx&MOTMM~TYSbKH^&7i}Lawlvce6U6Wn2c|4fJU)RM#@*N0{##oPEU8bqX?oP
z5g#0pg&-a!{bh=FkI8|j?tIV{d#(Xe3Wp7S6HK~aFAaYdp8>&!cr%*-S;r}FucMot
zt@Avqs3l$mF#eNg1TaUZ3o-HlBpIxwGxGD8vy?7c<Q#wu%+)OJ^&pP2Bz7!~S|6lN
zhWDZd>OA6+KjZ`l?%wlA2S`=GFA?ic(=P2P-sXZ(?YY~_A?Py&69<Xd1R9V95j+UG
zo3I!dhr(c*)1a#`kZ1bi&y5U+K-H{NfdtGugRrA-ap68@D9+{#R_Q?KaQO`QQ-h8=
z)sK%wYnPIZpKRP`c|JE@9b)LzDA7&IoP9wjg(~`ezDpfWrq#8~`bFKcI~D;qUW4dh
zI{2c*rVK_^A*&?%72YdI(qBA-eLXNS4@M|oCIdeZI|9-8uj^vVxa_7diCUQtr#4Cx
zpNLgoD)lOzPy>8!E?&m9RX))<I4Gl1g2kRPi11x>e?K}sR#9oBCtc@svym$rHEHkb
z=>>cMjIUWa;hMZ3mHTm@>G=KTx^`=EEu+zMB{k$0r+&SoLQ%uNvpjpGX1izo-C#N%
zGsAlx6Toijxp=^HP#TA5nEvITA(X}vqA-iiYQXX!s)M2BQPf}N?OyAGI^JwEbsr7(
zhAAq<S2XB^iz}5x^=rT&-^e2J&>gNaFvne$;WdNE<d#H5Xo$*R2I*H4u>CL+w=QiE
zw04NNj7<f1Wr3~Lo0in7LojrN%g`-t+JOXO9mh_g>lo6&EYn_`6z!sl@oYANil|zR
z7soH>5muMqfEml3cDs^htEcHbO<kK!J1Q3OS}8$`a;x2oDSX$Md0)}9;y$aVf^sf_
zWefd)8T+o!(r$a1LI+gGiWMO86o@V%Dq0rHYCj}cO({nOT#?*ixwiiJEhE9$#bnZT
z2?O^&*}GtQ5(@()Y^^H*mSdWx5EDUslm^13izRkor$QDh&fTyOp(<2!`y^DFR$^XM
zX9*dtY<(_i3;nS72KwcT^D^v`iV-Rj-3-oO^kB_U{vQNdw~#>y_;xToNgW*UZIMbW
zhD0*EN)D>)0oe&eR0z~fC~_iu$hX7@=$9FP&EpwLz7(IcUgH#Fpbew&b-nXo25w_}
zQyTfnG|i&U6tU=VP{r9o54V9!GgFWi;uT!Tpp*fpl=Oy+4K(eM+_NDlH50Q-+EWqI
zL@kIa$$>nQdsLHkF(%ciCn%y@atBlms-IDAP)0Q647`ePZfuhWyJH;NdnMpn3~j1Q
z<f&Ii9-+{&;jr^mxZz%Za08@#74NE{2jj8*MEGlK#u2zpD5^BQ&x!K?eQ8ORpibR&
zf`TTO$UP`YvbIrtm9W&+#Qzgz$w*>d|A)m}(}`Zj&8Y~ty?5Srck|46eftc>%Ffvk
zjoOSiWOzbD&Y;0@MM=Fn`xynz%IN2-jkn#Jbe`m>=T4reH{f)BKkm1IXA2&5+-R}S
zT?6dc`w-Dh8}pdY&vel1iAYx?6S0(Y)97|+fq6NAX`cKvAhd0Q`>S?j;aQ_C<I#?>
zwpCfWtcT~A5q{^d`^#g59QUovC!9NohWniKfi-V}{FZy%RDhnyyKgKM&2E3uT-e4W
zt9!|N;Cy8y<fNQci|-QJzwMy1lLtG^jpBeu%<4>$zlUP|nb?_^jvLg2j}Z!U4(di6
z_=mF^hW!~6(-sB8Voy%2Sq@g#_>`HdEi3+vIy|ITxk#dN2*yW9HA2Wn#pFdC>Q_ix
zt#ZjzsWf6mgY*_2PC-g?Fk;27A`J(Km7V9MkJk+y4Usd?+9rSKk1Y1fLIp*XgIZbj
zPb}wsd9MG((z{z*spPF7_JLed%Etpn2Q55RQ}v4-5|@Yuins?#RFzzyiZ`#4pt5&!
zOY@+n*ay>5-A4-O_@87%D%o=2!k_XQ(ogI2pOX>)-?pcb;lIwSd=dq$uo)3TZvUVL
zd1+)#*V>p9x@a<tBr7H*bEF{zYDghV#n8|$RO=xB*`*$ba#<|)Ld<;KVP`hH1PlV4
zvi7pKB!(0{J-wYB8Jq`iPk>OP%{+Dl+|Bt6$kyLTXr57HSjMU~>KkPBbmm4;0T5Xc
zbYQ^)br#JB=ITEy0uiBkX>3@n1F*FL-#h^rL2||;4l91R%Vz=lI$A@b0N%3Is=*pW
ze2Fv;G?Na!8}ZjsLY|VTZwm{DN;{LTA6{MmaOCu>_1NtAg*=g@bQzlr>j4fsoK0f+
zIoi2%`<epF?OsQH$@a{seCk3ap@n<JYIK{t--!%?zOMT?qD0F7t>D?vxS*}p_!`Nd
z*OhL-T?H~#I+=y~@C*g(7M2QS8v|cw{Cgw)Zc3XC4s0TsUaGYyvA=2;F=1@?q>aJ-
z$;2HYaISDRSCJwjs%nxxUkbtP@Gqp43-gMIb?M(EXLPqguQw3Shfppqg=Juris46`
z(d`G_!eFsHr}9HN`wOJEIw^4Ht2{d+rC^Q04ZrcC?@5b4JSX-8z74zokyroUgPwm*
z9dtCXHU6)FXXk%I9ejR_@8<bQK4gE2lmEPG`=2-ckBi>_SsV6GVx1U8z5mEQ{8r02
z7ScG3UAflsC%Np6*n=^<*3N}6hdEwKR!+o46SG3&Z}}t~Bv)IkJr}k=zqWFYVj!aR
zV_`%J>I0YIxJ0n+9-%|*H^Bly4vZlU>eaE1qT9Fy@GU`4(b4nxytA|YLQP`go5vby
z0<ru33@iF>m8V0T`|YsAVFd&uk%oy?YtfiA5or@7Y&II8K+DmYrW-(nl5n2-0uF(;
z?%~*m;V{(ZBv`mAOOaNZ1^UX6v_O*u#@TIzpjC;iD=KT;=@+AtL4kV|L%`6nc5b4R
z;b0abMWQq?%=RhCJ;<9iMM{vIOVWl|^?nt=)Tvgc=<(QfZFg$V5||u1-tXZ`=<>&E
zRml|X;}M!Ar^u)gdZ$ztZq@X5i$6o<dIYjV7wV@}AlQMZ?Rz5%rI$)THIYCt7x{^<
zdX`y<+de^PB#%neB5t5Lr!uj;ef(j|g<Zv^#>L)wYq}M3iuhUjdNJC+wlso#DyNF|
zM*|5S6fLpoH9g5ek6gG?aDL&S(WEo{)MJm{hoN4(j)|R2@~b^eY7KeL?0YL~SX*oO
z<H8oxbOr;AP4gOMqTj%qM0x~aS9CrAr}X=Uo9!jdfIl_lJVJ4L@tbdUfB^#d&`R-T
zRbmLLs%?5UUd34k!eqjA?yhh`ZY7y_Y@fI+Md;<WCw{)zs{WFtYW$geudobW&(6m2
zcB2zGEv*%{EN?vf6ijxfb6E{&=IMLxbHVd%pQQ{Eq*9iFBQFv7{eQH6OTxd`KEMG0
z7O?-9kEWUNzjk=n8a8&=qljNKdW^09f#i=Oiu;A}!l;2I?ZW1Yq!lEh`Uq8BypES%
z25zs#3^89`X0EU9UPlV98{QNfTi{XIIj<h3uCX`xZF?9y$CoiElPRH1Nl8gJ>*MEn
z`aK5>8jsd&*!?+E-!nq6t0B6_iqCso68e%rP^H=q?_))HR75(&h!4{D5Ro(oNX=zr
z4PtX-2UeqRTxWpZQ_$k;V2#>B1svz|)CB}+kl<fRW2;!gU<SFh$o-A+gGqDLMOzgP
zl7guMU-_6!%*J|l;;6oavPIS`-frBv+o>!m=twOhf)<o`P_&N8X?-l?HO;zJkG|jM
z=M`y2Fp{L*+H`+a%WntHYn(F)yn2_pkTlX!5W}QKcij92d7`|ksExyk@dl6Je9~jk
z4#y8(K4q+UFzIdix2E~&P8Kikt(|%CiH?1FvfE<a1JBKI`*Tm^ZCAM1C12s+iPX%%
zXGkWAxGbOJx=@aHq3GDjFwda1cjUxQ$sEz$6E9Jdc%^;x9_^2>Ug{=1XDeha@KDpW
zRjM2Kv<ukAImd92GaX!R)EV2ehWW>~0_lr}2SuHhb(y;_`h*Y<`Gq0Ek?VUP7||{Q
zNyovW5q`75)Y0M}G2Tf_RWlBCNXvkfw^lveF|WoS5iasHZlr@X0%LS8e~^TnkOVq%
zYJ|0hOMMslGw8n&5hA{w2~0`p2quL`h!8g50!S8y_Un7|V?EO#yU3{)!><9JmAPO%
z3ctw;N464^V5KR&B#B3%45%ddfRXy1kOY*RwF_4Zw-c>5wb|7a;=veAwUc}!-e_?#
zknlFZq`3XM7o*cKT&Aj;m{cbv;3QKkke=m;5uau-yZ~;_xKjrP1n<&_3dU)zv=)dD
z(oD44{1UgLaqt&)CS*40TwwxomJ47CL$s%4-1WdfQ#3Rz6pXY!_X;dCC#Pi!U=<Op
zTMD3Llh~4JIid+vKRHKRMMLF<RvV4Y<KP-Hsff)rb)geGijYK1)OH<vSNzL0i>!Ql
z89@R^m`pH+s5RssSwPV+r7nmYm`>7(44PZ}Y#N0}(tZ;_af-&lMK2h5HxeMntfTL!
zBaMOv-=QdNTmP~4QmgE?c<&V+HC3#b!H8`L5^R)akpM}nPUO2o=C)bm<zuP2^dhRH
zq}WXTVy-p0L4U^77h7P;h?peAr|q4uj{=jGRI{4yXMHK;&vclVIdj?Zmj*HK9WX+c
z*TT5m8D`cc#QLz*L}*Ugr4b=iEEQ!-n>le5QYZ2Ri!$Wx-44J`{m60OXq<3b*>QM|
zUgn)#de8abV4gHppK1)GBZ%#*Y;!2A9MB9lWk+6kSlyzi*ctiO^Gm&8;g1tQCb&Qc
zxR@lk4}SiAt`-D^=kI&UAy<#fS-u&xUHDNy9_YO^JuJE2zYN^&F9xp6oZf%7;dkXq
zcYEx=0<S)=*$4AUnYOnCA=Iyu5YhlSS_kvT%B9oAq*&ZIBD%aj@@T2*FSA@<S=!Bc
z+o(R1H+6FKh@Izh=rj0$nxt|2zhs-cN>yk~0`0N0rtK^TB*oH4aKEHl6nwfh4q3PD
z_ckVThA?S^+Ceg};?Vs_sg~4)>&j1-*yFCVDt!|;eKzl0qdj3XNDTiNb0`P|JVtpN
zDv+RyfU(&@rFj>luM?S8h_j)~^L`q&e}y*Q0|RDLl!6RNtGwMm9nI#^dD}L*na~Wk
z_>HFmO7QAo;E!Q)JmnXsVI)?T<(i(^hC0ldni79a3rK?qBg5<+4V0SmyFI-cPUhTI
z3n3RY;X*HK;1m?zScu4rh_knmF5wEU&X?fN^10mQO0J$fZnnK$x8oRzcba34CznND
zzTl4~!DTy7v1N?f{J{fJ<@UKzDG?FV=FDMlhcL1}>&~iB1J;wOt9C+Yo{(JbjD{d}
zmXK@TSpwzO|89{is9l;Ua&V@OGlBuTzA5W$3ef_v>vLPBVt8+<S#h0r(P#5`y*6aa
z+tKyw+X7K(ACftCCnQqKtNdtBKD?Cuo5BsDeV9zOy&YT0U4O}s177><%;i_99Mz<Y
z5gg&3<|eb@+ucIHPrZ%293D<e)1fOzuAJ3xLLmnszTMW`QNPbGPYzoIh9}X8{Wn`K
z5B~0)X{_tyu;~?1_28^HnU|{w@?{n@$1Vi}p*@k=)Ti28(S&cFJ?9Va{VpCac1(5=
z3;3B=78W!^z0aN^^H|h~omF!&@iu{Nrd6_PM`y!qMr4TqdUNgu-nNUpTrEDL>rkhV
z^oO|v)3Na~TxpF5%7mJ&lJ%^wgPxqlw#e>mBNcRa*S4@aFnhEsf|Qln0H0$vS_4?4
z%Tz^Nj-Z<tEqOV3Ruqf&jmzXrH9N4U4!Vsw)~AomnSxU_H#ySgO@S`$CvV=;bBDf7
zQv4wt-Y^HTxVY}Y_M+2w5t4<+WdcqcFv#u%cZ~DCb3m4>+39WhzEETbRLO>wr^J+_
zr-?S?bii>m<6a|}uT4hLmIu)dJcQO(OQbPfv&R>5EPqo1!W!Sx9)kUq20x=;wmIK|
z@NX|41{$E>!v*hNS$*GDS@9+8cxzNqt&-a#%$0Xl-MSUN*RJKSzs};rLg(+D{Azqv
z^r~QM<8MGFXtBS)$m!pO8E!RHOkuZQ7NEb6fA!*|@|&yL0h73%7j^N;gqM5?9r)ig
zYA#4U*)8517VCY$7T>$6Z%qMJU5@p4xEOzbLH}cm3ctfS1m>sAhxs!<`oD>KU2UBH
zJGA(Zp!)wp+b&VFvD*+w_?oH1C{Zv$29m&1S)NxufQaxW_4nV>p)X8rSanbML8rM;
z)I99knc9r9k*K(siGc7kb92+rUcu#<0%y*l-^)Iz<nJ9^U41+qTz&9P0fQZ;i!`kx
zkSSJYROP2t{u(QW?Pdt3q!rhnKqAA>_@U(*TaD?Ukxm7%JfwrDFd~~0F+lK4pvFzH
z^`R#WjI0ZgpcF$Ab5rd>zVR6M^>omv_7U3;lfiW$cfho2gKoInlCd9fA%>SY%C8GN
zyNi|Hg|M_V6fEOMn+5?%2~*8yjv|x3GpT6rc|yh(x&$aXJZP0QZQE`F8Hp#>(;ihO
z(Ow+wHv_joDs(TJJ3E8j1dsZ}VyfTl&30i<1=qF48q?Mjp~FnnN_f7(2=?qJ6k!Al
z4)JIfC@B_K0pLv8(}YYW29xR!N&gYFrFb&5nSJcL=aJ>(CKM-s7z*`sJLB!ANn{0r
zMgCxMgq->9JxI(h%?pPAn9o(b0>_t<NGy0Y2fNviNPE|B#21%t7EPYsvp$#Wld+DG
zz3vV?d%~02o;bRp7*T5!8}-^p;sK}>3zM-Slo7}Cz<P9uUVnWl&>L5mj%U{5pdUo(
zsM;AigGBAkiwEbWbcv;+9-Klk;TSjN<>t_N1ZCJyJZv1Ou@f!~=w<BK2AfWTrE@9H
z%DqH40uQ+9-v#L7fV<>6rfCagNKV*T1d}n^Lnu5<fwZ%NNxnL7XJtHHvon_)T{G{^
z&|<d258U1v_?m_yld7LSRrZ3Df)Dz7r9Lj59+qimN&dmDxawhCH@>4I|3oPIaj|Ie
zwNx^7+o^Vh%;u51`fdFlfTLwjWjK!N2AD-Zd>BIADq%gV5F2ChHBVp!iN^sYh*qOK
zHxT=x-qxu=2EapA=-f2q34y;UYcQGrUKTkV2C98b=BM4d7Z>4T{q5^#6qBdvQqSL!
zr{(tdtc8_Vx#h;QE$HjbmxZ1L-*LR2J!^CDzJ|521{kxS-kMRsh<)(=3ZShPK7ZV%
zcdPl=ccu(j_w3)Z7}g6|aKBgRk7`gexjM8P?j)di(e;X>a~fA{*kUwkuOcgMGy`)4
z_^FXNQDVKL25XTO7863}m#8GP96&Kio}-Gp&SrX*oE>X4%8pA*(v6NGYqeqsZNLWY
zH_?ujE9HFY^(#KFwX|rs^#S+=NY0i<SBNZjgo3ndp^<pAHL3Rb+$u~z-Gbw$Xl+|M
zrCl>e_+;t*M3||u_j>%zLeS~-KDu|ElSE~X#dVsXFApka?scyWY1--EUJNg8cDm{0
zY0%xzVZY<<PUf?2?*hL>vH8?QNG8LgL@YShNm~!FRe`hILsh8O16h;nERi=oz=6@8
ztBDXNAfYo-%@s(AgkJ|27jQ;FMefa{OB^(uev9q9GLYjP&F|gEzJ@9=`u?HZ+^A00
zj)Dffc?k4$)5{1i5UQeFJx{DMB^6k1TZU43tmjZqy04hh#<QpO&~_q2nYW}aPD5c_
zR9fWrU@V+D-YLy^J2Hk31@f>|{-`>ok`vRAaefXx%vOTr$hySC9T$;|{R?zAFd`ry
zDZ_?zBBX!_zR{-ux|Awe1w>BF(c(OCraKZ_HqV?D8|iz12nYCvavhYG5pcz;%NVja
zv4XJ`9sBo1-+3``{?lIFTM>cQU214l2<2P4bKbPc$crU+=Q&iR6=4#lHV70B->O6O
z=%~1|T8m>7AA5}9!L?P5#xSvqO=t9E^Yn{LD}DQqChw`r5l6nVhBH7m{T_(B!!N!(
zg&x;;DDWpLX4(BMVLQs@A6<xQ#lm?8!iE2c_dKusBBrJprlwIS-TkhCW@MQuY>wWd
zPb@cYwH`wbve8F|yMHfvB&T~0l0-aKtuq@7^+g^4P1mWf!)l$H{N&T>R{MJ+_A#Q`
zb;f~5C86B<m}|QKH?CASS}&H+`L@#Gvd~~T&cRSJRN0&jZ_L4S3GU!cO|7l&iCXmi
zm!cnIRqdq%u-`65C?4Om<xf|c``PX2Pl$$gqZj5dGINT8gYJpJ@t#LpKws9C*kJEJ
z9yO)xdQ@sZV{sWj?|*aD{O`u%{ue8f$7FtH2&SawrBneFEHXGN<V|_xIioW)l|jr(
zgO-S%f<PykAN3zfJTg!jTs3SPbeYiq$KqrUNr=?6pDN=t^uPVp|5+BYw)i*2#%|T!
zxGYfw-_yEu-Quy<nUUHh$@7wg>Zr}!qqUXyKXc^JgZixlUFL2bQK;MBJL@KlR(<1A
zin{(e8FoGIkoy$=h+9zyB<qBW3|_A{Y4@{>>vea@gw@bTo7YHeiXTx8p&k{?gv%f&
z9&m9Zzxs)(l4sMUA;$D+HKMf*fJo)!17GwXBtd|k+z(OgLXrLbgds=IK(x&%P_b}w
z7(po~5$~L$L%>D|(ME~P5aSSk7V*)v2RRTp3<+Gh2u~nZppyfO(2Fhx(&FEsS6vtK
zDHSFMr!tg~Zl+~IHl`t1{3Js<<+}rS$Hyi_6ksI}5%FR5Oi(%;Nz(XEits^uu!j!1
zWDvJ0vgzr@_`iv#W8EDb2irx*i+G}sE9N*i<r=YP`#NB@dC_>f4e5z<F*fmxj=)E1
z^pHv+OY3*!fm$cG@!_*<?!dUvD5;a57wI=tX2fH83@Sp7`ED$`wW`0o)oBCmg+Y%G
zmv<*g>ruohshqmKvg`P6V#S|}pwuc41tZN;<yYmgQes)6azI2a#*Mm@j`rOc<lS1#
z%EUYruxQT8h8OiN;}|YHD`kKuG)k)EH|49fNrLb&h%v$RdXNa`RCsR`M=~bB%vuMz
zsk<k3ApW{%YMD?eq$Lhs(YeD0;(5Lt&p{n()DPLS0VF^6%i-b+y{QVzC^HBa9ucwB
zdN&6^H@Jp?Vg9b7=YgLz%m-HleqK`<x8go4?S(a?<0;$W_krz{Q$azu^!=<C=*w<R
zRvWJivCi9ut9E+1P-{0bruOX?-Nvge^|q(W^r_j*FLQZnX#Ww8J*AYSnQaQwjVBxF
zRB4xvi!j+R9d(>7{T6J$$`$SHU8&(}Bm5)r+jG3s=E=C1vb4~2R%(h-v7F$5oPwmN
z`xdDj#7F!Ld6dP6g@iP&H8J2!2Z!}OH=s`4wX8!o$5g%Fa9B7b4b((kFZwQ}M%hip
z>ra>rY0buFn`>S)KgUO@Ir?aej-7WaMk_I`PFc|NNOM?`PsUE*xs)zmFT2}ewagY$
zy==@NS{Fr!><t={!p*cE=xX8@d=I<E!}f{g*^;u|tS{~9Bgw5C)^h$)Brb;!=pjua
zKU>9$!Qhfh8Tn(=r3K7LlR<axOqE5C$J%xszs-r<9bRdk+2Z<=_9R)4pg~6XH~-W`
zokBN~Rnc9H|7C_vD*dN#@<o`m6{t^0!=u-@qb0=`_&@q8m8P0Om7iiT%}>?s-}tKk
zvig4~wx~(ow%z#k(_-+5v>+1kFV`s#PyUjC=psxcgh-O?Xk2;0urqPp-gfcl@o}?J
zG8C-T-s3)*@@6&ztJ$^@Kp)}Rh3u3>eX_F+#Rt#(vsy2Wc;jT;bK9?dw~IlEfl75O
zsL3$Fq@E5037t%l%h1X)R?mY)n1mtJZ-|nwtKazlQ1%YNq5$2J?zU|kXWO=I+qP}n
zwr$(Cjk9f=efsvByc_TS(Qj0<8m*{^to$;UWMC_#?s5b=F7$o^dOaDJzP142g1xdN
zDG9SszfEul&?LdZC3jJ<2n2TJB9g9=rMNK0ojhWWw6kX~)1U7l<5c=v+pAe`H~ge-
zgiJK03J_Rmk&aq){^Sa&l*wcCtzBzYv^BiqX=++kR~6$m*J|Y&rX1Tg%{1nPQsne@
z;xQeNsD)|B?gn&e&9wZ(<iC*T`5jHi2fjZT)7onexNqG44^3SJcX9%tgZl2UgezLV
zw#)Wq@<4L@2xyNiLKIaD{$zIrfuq;pd$6Um_0}5!RaK=2a-!dC#T86=-4rX4H!XR+
z0!t3Y3^J1j>dB}KgKeH+th~pnABX#17a;H+(kQJGbXOv{<$SMe-1cWsC6?ncgL%mb
z(-6OvSRo}i`>oVDJnp(>o3j(g7)*7cI%7kY>*z8$U0Q2;V7XjfI<hY^u%(2|RyP<b
zHV=-Iqxqt>C(H~x%{%7<zWcx@=0bJ!DY~3Ipo3TApMSr|XQq<7=ekd_XS!`S`Qko}
z7O6hN`rfeH;=pcsdcksTKNj}2Pwf(AsrP?>_H2H$Z{|#U&wD)Ma@k|1z?sC^22!J3
z2S{|zefX1+0C(!eJqga4z@XF{ZoF6I{uQgC|G#Ip0H=F2=3hW4ANK!lX5B1o|Fe|a
z`6uPJSP_11^c-XY_$jsfinUs4X8_bxwSj%JikTrp1@cKZPfF3_iVxhaem-N1Nv0&W
zYV^|J1>CuLyS;8YiWYrV0@e19ws_1gV}gIS+V=W*FQ4ZK*X7ggEKWX=)$hLCup}^0
z9Fv?D0t6EM%itjH%JaW+M{z+E)sfK_q~|drsY`K;fyo%O^eGM{&fN{&0B#<D6dS{+
z)8rv4?T<ns)f<9=e8SIEfu;y1muv>b(G=DhIu`axr6G|LU>-_H&ZOsky42*`<#VyD
z8C|zCZdF+m&~X+F$w<tm1RHVYoCp+iw!}M7`CPiXc50K1-~>r>vg^7|<lCgnni4Dm
zZ+28KNv8^n!x=bIB_^2?or!z*CWC3XvXX{gx{zw7B+%Sg`PkqnrP75X9>gA@3_A@m
zV`|=k4qwO%{7%Ez4ma$554Y~lm(pJLvNvkd<n`K(G_r4lJF7mSPB6DIfWPt=cl0S5
zRL8ly-IV*?<;5ip$JH`RgKH(4!F$r+(Tq}P3h@h}%X*Q0oq4cj<={ne!#;SRpG24L
z9!+iw+;%UCWjz482dveP(R4p;-*)eB&;UK>sZFa=dy#zl4&2AxD>BxOfUG$*$|Mmi
zB$+G>csA`7J@*fWSH;vafL?<H?61RqS`OQL>sTw_V%_>1O#>J<(k0)S7Uaovqqzha
z*op=@mmOSO`l1ymAgv+d+=7Y0n-JN5fOPx79OcvnQ~zwD&MisCmyf0IE`g8^b4i*?
zfG-JV>0ee;nJe3qz3SxFbY)ZOgu&*tO8>14M%(=|V$TJoog8)9zp8F9n-+SdRMw^E
zU<mLn2V&7wcWT_Jhw#n@bdSkId4>7>Ig)24j1Z3d%pU1iP)aOG*0QwFYt~E;pg3if
zLo%}Y-VvNNxR5>F%^}24B&2hGZ>n3-!~M+vU1qSWG^f2VPaeB7y@54wD?q=!1wv09
zxmbI=_3e6d3#lOf<2BVh5pIh2VwJ1ebU9I6W521dBX`o2K(nsLtfyh#xTP;^MQ}CO
zpF>n}lXB^CLq8n3W$*DWtiy_dwj2i+I^0llALow^y+!h*J|Rm}zlK`Z83sSoB~K(o
zn2a~DKvvecpJ7fk<VaT`-{gO3%|t2eqMJ|v4`0X!Jz9}eB#n0z<D%KL2R0P@Uc++w
z9&{&32g|_DF{<V^i^JlE-CwqN5l2od8%u`z>;is){i@#CJhprZqN^=f2l+Ttjb&QZ
z=L~`;^9NC7aE9K~g(4T#AmA_zm7<ZJQEq)f{99BoPOJI5IOq3vdlk6!NPP}9Jc0x@
zCCs9TOy)dwk@?ii`*IvB&yOVwB(_X*u82f0(YP|ldz&WMC32{&yJc2t<3fAc7yBRY
z*~%TKoD>~~dILvmAY7tkAB&`({_SAR1H8LZ-$hn#AyuFJcflJ|nT|J--1%f_guvfz
z-s|l3<AjuRTGgBGZlz1q0w62W1=|)4*p5DAC(u5z)xa<{LRa<il|E$(V+x^J2g6dD
z-m@9oX_#UrcJvJqMzw|-E3vuoEhYTfU;_((TxC|Nu&>Y9R<k5qQO|>Kk}4ML!+1YN
zdk2(wEoc}+3Pxl+bbAS5Z&oE3^<3{OZ7$uy{qwNnTZ4c?GF=E~fmhNz89jqqs_diE
z(Uw&bLlWh{;V_sG@mvX8CS!Q;MfEw)?j!!>HKuBle`4tH)a$PKT-EYYpHk$d8*ymf
z+g<CX=8!h<-W#p6t=0**{V#ZM?w{0HU>o{HugJIcH!R9Nddt^c2f8)yb4s2Z`9757
zTlDs#r@&uGc1lQ;VT(e&h1_rM;>yjK{0sC44lM~8MMJ)<W6D5um;FD9=y`F?*025|
zerEtRU?X}L&qFGe1F(d@|4o&IOrtsn{`;~sp!mOf>rE}JP5$#+U!(c!v?+@AyW=;K
zy1P6+qTkii3|oS0m=s!J#K?a!rNf0qNF&-3&wf1_%>2H0`?zcQ44Yk=W5g}0dF}Pt
z>xbNvMC?FBn>0fUd#kFM?f1IFCr39sn-~5r895<3+O*N)o<i0qr59yTswPp{X^0_W
zC<!1bU6Obn1k=ec++Hj6FIogf6a}0Cr6YixAyz08RpV_mbq;k;HZi=p6~Vqhq?CAf
zrcyr47+oB1=hLx36djUR&8BcR(u=YsUx(olOD1;U)gX?xIb;gI#l|HVg1tF0UOSdn
zl(jKlTR|cfKm(B?J0wy%1aen#$2?Heyjxz@v+LS*O|~ykQJz)o#sj=OwQ*ki#5wq~
zyRdL-a3!Vza5AVq#r#s3n|H&?35C9+QuXlVl~L-jsPiqap~wmGnugKbn;LqLTcd*J
zbTMrKOY)*|F*5L%Jj%Kw*&@~vbG#(IJ22jK?dED``uq6!>dZ+2z{KH=wM=PLpq(T>
zUEh|h+vn$G#r))7!BKh6#rckCC9wPp34dSa^yshSSQ1(JVy@}9qsRFeXJHH8*7hSw
zWFpNl(K6*kq5rixp$N4JK~OBfsUejC{FC)Dk2rU71A)TFJaR!kO@Q{&+BEK*Z0CVS
zsR5qV`naq`hw8zrv;`u`eFJM~`=x6aJExA9!mw*=d_IutRapd*E)>(9p&a?;d>O8=
zPh#m^kt(>B4}2(`AS^p3@!>jSj6&k}kj~9ts_PcwUIe<Zro0h-0`X3`{)pE2FMoV@
zcwG#SD0-+C26vpgVLzsd@%$bU60YICM9m@4R0+#&t0a<h3UxH8`1-pqFZ$t77zw%&
zGkH0TseG9Sch~QxAQR2DDcaS%t!HnQBd>_F?1xQOOcexgtgoW|o9nles;II2IpJH7
z#gJ0NSiA{E>cZi^u~qQ58YKItt$+JMYZ!5&wrQhoOCf0Wq~Rm`Yt<t9HI+bIw{jtV
zaC*UX%ND&g+E|DNmT*u#;1HnGXeUklT4aGVPof-i4gl@Sq8vRi)4^*y%DKnyyQVmO
zp_&nRR^JPY8I98XUOwKfzi$5x#{0{cZg!rIw+^*z7@OM7iajs$R2(ST;V+%g@lf5j
zS4tQ6R{N$npLQs3VxZvF#ADJWFTP&fc8qLar@j~>O6D+`44z=1_SNvpnWA=N%2Rwl
zN@EJ74k+(~T9}eDkXcw<B}}jEMle10EwY|YHmx8m`k^#`YWoYbj*VKlso=Jx13t0l
zS;_<p&i4pol+Ua{#j*w#Hk--ECSI%YKr9T$9Evm(HODd>19_+bLStVL?~5B>N^UBF
zXo%Ht7)s<ApA=FNO9KEk0{%qeJa=_Ulz2d~K9DBqKjZVwlp7zu4zX&C?Qvn*WQ35G
z=RGspDaq5#YA$!b@($O)H$ILhs0InOSe@)T_y>FC2|q{zaXC@>Br|Uq$aEetbiXyI
z6QD!_NlBPA^}<q~4AmW{j}S2t4P1wk%u^*7Os<!;{ALgwX&Q;2F3hf$ya^HWIAq<^
zLK@PHRB2){&w+hcby<@E@=qXBKj2in9a}zRXc@9#kkh?#!%w$3DVR=q94bjivau6{
z1w5mOKrjw?R#^#|su6speBH#I;bF<H<^e~M8HEB;r-zTvOf-LN1fkC%#T!f`M3k7Q
zLIzgkzM*jMw)0(xy2(wBYuAMVTrRO*i_{3G&E_!*A+_33HZ@N??{xBtp)snL<n4M>
z#1vOWf-15wBIBY_xNMPs!Hj$R5dml@BzA(_ra(%WJ);g8wqTY1l5<#K+#*qzmmRBE
zJ*I3O*ihES+tzKmT%<V!Zj1Q>Z@`%XaD3REgX|VH#^H7N2d?l*_&~zGTvx#PoB%Fw
zp<bv8MyJ&M9PaGtQigej3a7s~XO^^Eqs%;{@$yBp_qS_3#9{2B)pp6$GeO_O6M?K@
z#FR@Vn3-~{Dli|Ez>u;R=8!n&ILso2hE0~qA}QZF^SHz0A3I|9dn(NxW;jjNDYl5z
z5WD^d>u#oFqzqeaVLJ(Qae_$L7AnyO*~h@$6MM&#1v#~P&0k&1Amb1bMQUX^)H<nW
z%Qd!V4mkP<Qps-rCM6l@=6Qi@&`<TNX64xh{OX?FiHe1T2n@Oz;`<@~Y?tx6g){5%
zpIDFYb?%$Z?}D8;3=hv-VEbnXHshBo)p)TzOqdV2k^n-;+J`)Do}blU^BL*-ax*4p
zi|mw@LOT}0xbVmL*tI~&Fr5X)sxy#6EPI4AY%G4~tgMm%4Od5OG*+4%6;`yXoNJq*
zv>kDB=IZE>9Z7VWGChJKpBbiGBysd_#oseIP<~O<BVAO`=V0w8J8om~KWWosQA{IX
zWJUa#NzJflf@qsj3GzJ<7UcD?#3p`<YzDSPE<G$dU}MMPo@CpT>R}btOM)zef`g5)
zaD_oKh|GjG3NU`+gWIh0y@Q!)7LBd!-LP1CdrZBBjD8}ZKXkgzVe4qgWWst@Pn3#n
zeezLo7MY2rjn-8mN(oHp);3DH0%v!o)^5YEDx|57WnF=)qgq5Gm^(~i&cqikG;J^k
zQFOz)ur?9(E1jCoDXucz9>2ZiepFMjZ$$)C7wh9C*+}-i^Z^A@8#Bz7TJWKBvf#uJ
zholxLSW~Oe#Y4s#A|@~y!EnMToc0EHF6A=7f`U^Jgcy@qWL1Lihr7k06m~b}Tq_7#
z#td7ci8k^Wm#P4sBQ7`6sCAq?Zo_d02UnMNBTA3$ayc@NdxWtbxSZ2Bs(h;VM;(|J
z{p`p?7!m$4fwoA|jrRDNI-oR)B(|@gDxk@-zd|e8XUJ*Aes)uyMEJqxW7T{um)}5&
zqLMcS8(XM`4iX?r-}C=WHhs9#tvW=s$XjrkN;Ln@IbemEWK6`uf2cPj3b3rYfM~+Q
zQ~<<h+?@`hct!hC0BrRq|EIHxc~cvH?Bp-&xPp2_3iGmN0T4*-dovb0pB30_2|lSm
zm9cWnBtGSYebyj3oS9G-AYW=qda$VH-)U%|^V&>{L}~Pj(ZLZvo`&xbeIYKY8U_QZ
zrr~4B!bTEoKe_GRxhSFG1QZiLNrqOIY@OJ#GG(teN~WM#5d$BduyuD&lM4j8O;0XT
zjBc3u)sboubcc1}eMvGBpTx&C+}qocY09;iN63bxt3q=IL7BKrcFl1S-Us}tP(^&G
zTkDyU)`2)aCSfT>yutMTO<|+CTmX?ySVB3=R7m*cfFW3lWRgPye7$)Cu<D3t)WUME
zP^CJRw)<|iuDP58?>%t%X?3W_%=WaUf1QtHYA_LS>U4H*DTp^VQ(_ol4)a3lS1U)Z
zrZ^w)t;UC>H%<35_8+B-Q5&QVs!jE!yK>Q2o91-!ZF$**(F@*$62eEA?}Fx;WZ$m3
zyNK8swL&5~sg*>N;5E=o@k=-<SSGW%+;a1}mGGtPj_)S%X+a(5a@$+yM<*XK?sSe5
z4=H~s%9`=Q0|ws2WHQLQ(-}}(^Sigvj*r7m>Z>^<E1@ofJFy*@GU9S0)hxmR08dRZ
z<6)Z&ir`ncr4I?AVNti$ZFRaD{?N**;~Bq<uKn2*hX=(`ON<v)99k>5W_Xf>1*#WK
z5Fy?Rjr=Yk2*GOPf2ydXKl6A34oL^st~I5wZ3&^6lpu}$JRQ@y&(vF-k7wRXr?`!c
zAV@5pB(ky8OO{g#CwcxVtOZTRWOt|=30nj(MMZM5#+B&QSa8qiYG>u-ydYP|r{ol_
zHg0Zc7pLt1g?Hn`+L^AXZM}7qZriVKPtFi`v8GxerdjX~&h)OR1X`OoVNQf+to&14
z8)4gnEizsT20#?5iS{W?X;1dZp%>A;Om!skXoBfnA)zcmD}>*$esEwIzoI35qR)s=
z7$3~fYGa72AzaYUJ}xp#zCP5=u7*`5{ce0;k3m*XkA0#Z5C)`SfPYXGWtZ!1G+kkO
zOnUCoKP)kRE3sLE9)hMoY2eoN016C_UX2tX@;Z#!YHb#|T1Irgh;f{&%=zRidu`~K
zLdF0KvSApaa1h`sQD1nLQgX160R@~pD7nb-w=mT%&G^8Sxie6dl>}1xqJg%Z(#3k0
za`jB9VD>Fvl-SO2ftcqu4JD=WnnMr^nAxg5PJd&S^E7Dwd9`Djaa=x)PFJ?}hue>V
zGKqP*!GpSXUUtQkq2`uvlSSSNp~$(m8PxUew^@^AOj+bs?N>hm{;wft-F6PJh)c->
zw;eOQwlK;L@TAK4mHp@ZpPYxrR^1K!>h0^B?^#0MZU%;ZQTtM3I>^r>G6J_L*MZ--
z@z{9kRb1NFsuCWl#HVw|dDf`tOe`<8$F!R78KoArwxKs2&Kc=Q@y!>SWGT9@yqQ|<
zS0keeO@WlY>8jMbw7TuJ$J0Hm1f3n(QZ@VIZFyTdJ(#kCqX8+dC%($*qD^%Wjx`#?
z#LigNG89gP{S7(AxPvf+dm~u7pAjjcOwhenOk4&?Cb4g6rWzoWVAOOyX<Z;IB>=OW
zOvhh7v7X$R(z?<lGJHR9zm-ZF&t=}ng{gC6#yb69=ya=5sYUYjIjpdRhH|$QFdV2M
zKw3wE11}gyLvqP#^-SfJ?9-xV0Ie|d(tFfiOF<%qN;mc^G=*QJP;NP0BCgOm1d-~1
z`{d{ZdBPMY)wE|ZKCnRGx~4HMALS5@=h=!dM8n&p2&Ff#SBqkma!VMqD&rJ9nY_YB
z3Nl9F99RK!AOxcuK`b@a4eL%pTXgQt3hN@`TltY;`0GU;Y(n)7W>KGO$UWR&PuFdf
zi@(V5xWl^_I0uVA2qA&1D`)R_&(GT>JD`_&E3yF$sKXqvwUzrZzD35=dGiQ`$SOnn
zg|!ac!BX1IDoc==&GR>OBOKMaMJ__TDl>?peoaghLM{*Ad@v96d(6??Da_VGXNw<i
zX{pk_Q-}LM2Z(~alEXh|Wt%a$!hbD-3RkRB#4l)Wi|D1T0axh5OB)uGFR$1Prt9oh
zr|l%wfwjHRi<ZV5^)}=eqmI^>cbDIeflWOTQ+^xG&qEL=+TJR#D&LKMFp~=LsR|OG
zsc9ukPSANask~gMampCg@GGz244`2RN6samfZpdHE157nCju<jgti7rxkf5#46^~m
zugkGt2`i6nto<0oNOyG-K?-B3@0!hgb3rWJ!%epV=RqLW&s{hu*G)uqED3xl3o;Do
z5h>}ll5bC5rM>9J*2$fE2srQVqEV;p=)j%>`it=9EC20@at{06y!B^NrlH+SNO~sL
z$-iL)z>od!281+u6@))30KkXDe~QBX7maRXtoOgq|4jVuaDOXpjVJa!s!5C6)c3EG
zd9*$2ioZnqPkivyb8Kypq#Y_ZvW!9{idMl#-?ILGy1Y({7r_TjOzG<6R3X)ymX>vu
z^?3=q`Gs9KDIwMv-I``J7WI8!>%r;0#QK^pk(w2Shb2vbc14b;@ycyTq|%CHJFiFF
zHZjnOucwo9_a54U1N<{7?PiC9yQrac@S2tZ4yOoL2gAB74{BEouA0Wx_p3GjD5jF)
z{4JKEGk~5ujozE{NM@unc0v^HJq>o6Rn_ez*@ub-VssNEGpztl!cE7kK}7K$$N;%A
zwBN*+{rJ!zYQ)Iz&`liOrIz9Wyfiu~Znw=SRe0#!(y39!1!N|P*h9RRQKP+}bmW|3
zzBBN2Gdt}-pZ%UbzLH7o%sr#_qu`0`xdY2Xg?H<qNt|^=$ER6uN}WR29p70!gNo1A
zUQe1s{yfxwyC@m?c?)8R`FS}%H2;d57`<<rSm_!tH`L&o(+HU4JTKMlhZMl;+zov3
zgXrz(Zd}e+aHy#AofT>S!z3V=K6d#Bb;hUxxpRhCwh`{Mq(CRz`qN2|p`kNy%pv2@
zuABbY;p}b48PjR31ynpKvk?G{Ugqn4-_j7NhLE=V4+XN^)Gq9G(@z)ttwDq_aTnI>
z99Y?sx1n1e4;?(i2ad#of>6@=M6;b7*zc}dQBPW(YvQs*4~JCu?}6*&9d_FgwZ5H3
zT}`iNzRl~~zWUtk;BZ&Kq48r0@|1=i%o+IA!!$2;_pMy%i-_Nw@5kkHXi31Q$)mDf
zFdO|)ZWOh2Uw1bc$`5wKMT6ZKmuDhXBPOL|`e=S4DfM6W{k$~KSoq}*M``%nSUx=&
zv6r{Qk+Ua!YrWi-^u59AzhO~PhhZlr0#EbX3wO<Pj{dBL08B9g*d8qGE#N}~PwBF^
zNHEJV(qM8K5Z^3XG#r|k6k^sC-fR>EfeFaek?*(&HRofe`asm&ca&ub@QM^9f)L`2
zz^<+*PPrs71e6G^+si>NkU}NuqeLV>Gpp6oyjP$IH~u~J9u4Jofe8M^K;$FA=XHla
z6B#`0RW_d4Qaz~-!?~@Xkvev{oZ_?wbtQZ3wwdkP8<5~yOTX8XVCS4UzJ{NVPrH<G
zzp?<M%x*VM<kN*{ybZBd`4DjFnItJzFJ>EsGDG>qu#dQIk58?<RO!Z49yS0BT4mf8
zDJ#W5;C>NExgCWDK7Wqp5B>ESGEHq#WNX1*&d(k$j3;;NcfS>G%fs@bHsRy~=;F#p
zRo`++GtWKUy&1Wi=suV9#LOHu`v(w%7H{)gCg+NDylIv!VaknIasigMwi2@FD29Az
zeWLO9gE;qAi&4uFWw^{UXFpDZ4EFH+FfuQ8fz(Z^^smJinI+$*Qze&yxWYaGydH3q
zCnzov0HNP2O=g*4{_X1X$Q&sE{K;UpxEhIqDmL3(_1W5BfVa%+EvJ{xEiaTDu<aS2
zTP$3Gztj&QWlp_AdrxQWplFESqZSdGFw2O8>01F|wBKUkE8#zpEpyYUp2Nq(gqQLK
z$6v;Q<F#fF7Mb>-I_+v1;r2lxrRCjtFb7L=vTmxgagFlbecASk5V~<0IGiLmK?O&_
z*|T-sX5VV=9B}AGhu{<57v{gG?^Tk`z@t{b#LSGrE#;LAj9m`C>BZSFt8s%X1r!9^
z6!*JK0aftD;9%3PnIku9{Trf?TF8}2CxT)ChDZnmWd2C7fB^l{I3~WJ0d44vuX7+c
zj0JLYz}3Hni3>mi;$zl3Y(fvD0nQ_f;G0b-+c0ix4AtPASQ6SeKFDDL2nY1)(;%tK
zBsk}y7$zbcC=96RY0xVu<PU3aojbzt@zc}4V>P8c1j(NJ1hYugFR9oVF2Y~rRSfUN
z@fwc9E-E;BjL-~*kzEuNwhcPCm<|qrpZg{#yq}9%kq8=|g)^~0@PJCDuf0yACzbes
z2m|&a?gd4yDh2NjL6U*Z3Edy+a70UDr8>qvoKBvRCt2$?e65wzO-O7GKPCs#h29YD
z8J>g{Xb5zq2Rg=#9A9(iJz^BQ)#)xMX-p|EIab(kDfuo8tSsJVVXDw<pqx1`*lPy@
z5XL;H3~<eyyfN(qdSSofV;u~lu;D#1U<o{qTHX^ku!0recPNd^D`MxlX1Q-lk*C!r
zfzUY6u=X_x3qD3V0!SS}*43N6NVHvQy7=ThB)jZ7fU^_9aU&mty%oMXYSUzYn7gNb
zvv#?aCY{7!Y_o2L>b36{*%R$k908ghYFD|z63;{C-(wg88Zmwt(Z~?(95#j^2Tf6h
z@lC9&9tqJxCTVMKjzLY@m^pBp;{oL%Li=8vTh35#qR1`Vn1MV7ClmdyTYKY51Z2wu
z;f{8Pv$(1KAaS>#6<@`SWA>N1WQcjYtdMJefLpVzS;&Ivi=2o1%M!KGy7Q6E4mJ#4
zFS=RDz-X4&JxaAfUeM_Z-Kl}%{-ii>T4F4Pg7M_vj_(M@R$^(kD;1$i038Som$5{M
zg;cpyWswJCIJ%Ih&Kb^}*vX&1=Hw$h0`d()uEupauxcwXEXa4t3^`bv<9A+2r$4GT
ztiW89^7+Z$WXf?v2JRU7H98J^b?b`6>w!Yne|L90+riWq=H*%l_l@T~3qLYV1uJN0
zg2nw?xEsNzgNlR`0`&muI0Z)*d`+Nkg-$S2Bk=q{pDwI^TVzM9UQ`GZkb#`Q^uM(N
zR8r#y!IjJW!ufXy_idU4*DSmEz+kQo2%+_82&yEQ?B}!$dj}#-jdhzP70m>gq4@2n
z(wU7O>4))vw&3CmYT^vr62#t(<OiA%v13cExBGCuSIw66KCir;9T+~?F?!9)$m2C-
z#H!cFJxga)nM6=V?RMMO+tTajcpY7#Gs$s7;!60G+dG0N(MJx*T!HLKFo)Iiy%f;A
zqFCMoxyJe;2Hex@^~ot?ls3G`8kIRKKt*RoD}#QDiGwuO0Ucui4w>ZJTOp^VUK0zu
z;R??lF;rtb2yW=7sS(Jak=WbL68n3rMMeom=?wx%?+1!za56+935N4=CkXaH8>*W*
zpmGBDx$x?w#041H$7BesWjII0+iKlM29%-kSEEuLgH&@%4}h(#Xn0-)$JkPy7E&fV
z@Nh7YAb^4*DU}35uz0!tU?Me|GY$fd_yQYUz3k^#HkK+&=<0AV;AQGH9x1<!w)5lH
zq=^^ZzEPRwjGN;rB~mh@Zs||*ca}b8$rUlg8cYkg$jTW*LYavMhCyZ-K~;d1c7UZ~
z-9xrt5{he*-Dex@XBDHpq^lkU$e$>aXn=z6j=60xMk%2Ix)8yYv!U?Y1{h)it*W!T
z9I$lV)1wJ()Br=G_p*(_IK>(`DQt-_DkX68idZBYk|uj5r8y50o&L#}U`VUJPzLKN
zxh*~BWN$b9eQy=tva7pPRnB;J6jo-+^?=x7nl6jv^HomQ7A7$x+Lqc_gBih~qGkdY
zeE5o|pbN?i3uDAg9z(Sk!wX*iCejcw*pYJ773ze1k<KJyw!j(O^qADF#0}p}P+TF9
zlV<sY8fFB!zk>yu5({U9Pmj+%c(r({P5~f<oIkJtN;Lhh;E3n|OKl$ogXE{&f<(G8
zX%nHcq`)~dI`o~I7q<HgdkJ55xUgd8wSJrTJV%X58!4U`Y#gs&+b)glA<hCLRL@KT
z;f1rt<GUDP7g=2n;0#jVU)xig9A|t^Rjy2Vi&douzji(aI?=5y>Qv6Xn)u8hg;s;T
z&sX!O?qv!(hxhA=V@6yNUXf)jHu!F)&_Fj@X`|433{c-|mPb$R?941-zMs<JvrPFq
z*DDGki~ja=sS0p73;DCrk1-hGq>wLTK5#rpIa89K^$V)l-z(Pm!cKX#A*ZVB?=3yN
zUvu<gD<vF}5lpSW{i3(UvjW3ScKR1UFcC%OA&5!SqWX;2Cdj+D{X!lb?I$&8fyeBT
zGKZ}n_w^EvI>WWzqy|#nD|b$HQZl%b@RLa8Jaw+j2uF4)RtP&ok5Fb5qab9zgrT%5
zvWZgmXI#rj3CswlI@ys3(mh8);M}Ql6<{thms|sfMNp{@0cp6B;Ay=D^iBsIG}Hvb
zciL`?Q|_p3=Cq3lxrk3q3`z|munv0%j#fySdiyNad;BXaWsdF6<5FqK=4+Mdd5bTj
zt!A=~W0vOBPJe9bHg@>~I(!uh0KgE%xArT2taHnsG4-PI#LL~$%4at<&})Bi5m*v1
zsu+{Y6y&buT3ANDXQDj8!b(LqJ<FjQ8VIkfAv@gj>Wsv9TC0`DSz0d(4fP@$91l&7
zAD0$9KU(F0S1|KPgzqBDYg|F|JE7X@;3-88_VP7U{vgGWR_)9c6WMrhO1P|*6C$et
zC=Wyud)LFL3|)pp=;-Hc`<nP6&M{bc5157&s|m|CoPu!RFz7Y7hEjiFVB#E<?hEUj
zCNLuQ4TWOu;{-_`ynu1>73xv9^$u-N=8j!h@HOxP7{}s#)XPJxRLUf(;f4D)|Idng
zs25^LMb9YSVCh9?-IOHqMHE)L8tSwi7K(qaol)vx-B#sd-4JZOf^K8*vll_S7pdsE
zJvICQL{aMvIWrp)bxZ>i(3fd;ZD@!)opkk-V6nmYY!HdkD-KLFOn*vhKm4C_Y}0+N
z!m~K-kWp@B89IW<1ru_2XQ7H0q#)#OBO)bxNnwIjS^ZChrrYkyFv<u458)IL<Jf8n
z_I+a<bo7+LjiiawzZEhx1X-!g(V4ZqeTKnmsf$7GGT{(DTeP?8>}+o;0)FY3DU^QK
zwo|UK(KTHVuxnPa(+5Qc&eHgzJ&zDqSsM%#Zt-!=hZO!9490|XDHxJ=bmg{XMsDMG
zlotMoV^LbjZH^Ka1WM0U_jf)CRfj2)EOG<j*u0rnQsEV;DC8aE!6nlurAJaXMzhI+
zwqY}{?2p~J8nm!DLu=FvCxwdnjvQw_#FrBunLuC*(DX{C#GT6%uQ&D$RZQ3;rpU>%
z@J<4G6^$+a(P4}VPQZ+O;xvI&DIKQT7ob;|P6vs|)B0>Mdgm9Z?T^~CFFo-WQ0A6!
zfQ;*M;pURobd*}S)s!!KO%xYp$bc};1<+%U$lN{78EG%`y1QhPei{9g6*+}PLm!d(
z#uBN9p=7|)SKOpS5Sux7;{tVRwV8i06YCT3flq)NCjyJiEl&$%Gfh)0@ySSL<o2Km
z62O3A`t?<#8GziTKsmmvbe+tf+?sLFG41Mbj#h3gF(gea=YTa4GL4UI1I4vCe}IB8
zq41mo2n8lU2m!S^4@?jx7QRtYWg`iT>)v@D<HN9Y=w%?cgsjffE>hn|4B@aZxWFeb
zTPtGBmqik4WgSolgOidL7Bd<`2AB)sb5)a;O&4c~Mj=(X10$VDGstgGB;2kQOgNAr
z_mmY!hC8--m2l>~vK#L)`QxEqLW9HI3G1kV!e9d8WvfvyW`TE~EX^T%t_*<C#{3U%
zQsh{LEM7Lkrl#gzK%x!J*!tS5X=l-ltlO6EHbjaaC*^FmBpqsXRd6Gh5dfM6_5IqL
z>-6yyqg~6LYpvyb=F8<`@4d#6lo*+cFV%%YhT?xvg0jM(!#r$?2|9KuEt_=9%-E^F
zg3BXUB32j)ak>6vwb#7-tC3D<oU*dbu0m|W&%_QaYb&xaud;RS>5x8O359b~VrpB|
zVYROdw$*AiHt{U`XiOw+B*%_S0RtTcNURe3sINfaRH<S$@LCS0xiL6D5*HOF&`GWX
zRjvXh4JTx+0}=MpT+E~+It+(FZ>mS4KbUtN5w-#5C!_op>u=vz){%{J#^m$ZdrA9{
zp7hK5Xuiwtq5UM9tlu--8cF`9*=&nL-(#lN@deg&V&|vIi1?aG#^@_fZ&lQ#Ru^3J
zukTb{__68K_MFmYbHr)2*}`HOQY0SugPnRNBn=Dn%XT(2Vgdviacd{N_Bue6zDdyI
zg>|b;*s@k{asK0_GMG8wTNQB%-$8q4<}Cd<cH9LqBk8GLnPQdP`)MgyH2SO8TQje{
zy!Ei$dMk1oR~52a`fYODvTBmLhD<O&#2)84Zo>8)d{g?W@1`U<?3yFfgJtoqsn-~H
zO-wSn?Hxp~tJX3zeFE(lFZXc>|I$<0ggL6(sht{rTh69)zLuyg@JB&So-H*GuMQ(4
zn{wQOL|7>&iVo^#w5uA{L6`}@_dET~Sjnmh3rQ^tu4D4@#n8lXE?u>j1`w2{k|Ag7
z>2T-N!f!Fvq^u#v1=EW?Q!za+Ef8Yqe!a9UnO>>!-d66ie8%;jW<7rDDOXpTX|JD$
z@0~4OaS8dbsq4H%O>H{qX7D{n*KLR8Za(|$_&Tjn;S0bg{AXR%RS#xYV+G92NUww3
zYhK-Y2kGm0Vr1lOnU@b!+Z*GxZMUSN>nm8T6-#r&QDI^FW&-U+^_J7+yvMTR)1cxk
z_m$a}5gbg><%$XBqi2sv7Tx<S$Fk|I&8YkG_33q_mEa~keCz2X?_D<oXw}(g#~m=F
z3|m)$VtV#9<u(R+tZqv$lg|45Q0-0YA~g|N<b$<cL2=cdyE<QAOIUP#oloM3dxWlP
z{F8ZQs}J$+_gL~*6bS#$>%>Dsm+g)3h#fTu-zjhuao^18v$*%#%}oi*%~#P1ln?eg
zMSCXK*}0f9rU!*{ov)w>$P;Rg^+l{TKGm-hr!heP5o`$9VQi?IMTLkwm6}Sk$Bt|A
zBa7qEs=B@silmoNkSLhO{&e=<oANer!&U7JgTV7l{v12t57$YZMxsbU_)_o)?RN|4
z`ze*b1bHoTN#%L0qg@rG)AK7$JyhLI<$CMuMIE13bcUa&AaC>a#i5kf9VGcs({H>s
zh3fWDVBW7`%D{LSM7hC4iI1a)s_x+3Ik~&(U#o_dPv$Z;d@!?@vz<K}SZFeys#&bq
zt9wkSvKFN;Oz`*NQLVqo+HdH0<_`yIKce-I7bOQtzFL`khxi$P`gZJO^SBaxo{vA=
zKVJ`K*aTzjyHvtFoo96SzZ2N()Gy7X{qzJRHQYQUhbl1(By4Grm4n9$tb+ZDp=G-1
zQ?PF#{|>jU_{w2sW!DnL032jFQu(WPTS%L$NFg2fe{RWouq{$|4#Sw{?s-A(?D}Jv
z2B727_oyVGRbW8*-P1B>FZ6_C7Zo4K>iZ7V4>tMTtdqbrg@3e8f*yAJj&Gnay=qw^
zd+6*87Wa}sJBRf|%Ga!KGHY*#h^&5lkf3B&sj}aFp$OO`^n8vKYMb_-_5rm0YWhlp
zhDv6ULc_sdu7JS2Qk-~H&ZY&waFxhE2E^yLfBF44d<!x*f|&va0HBo=0D$a&ELZ!l
z-`)Sh%Ux_O-2XGbHKJ+bw8e__kJW9ExY3?eAldThIN3HHjY-KZi#=+%Dz+dmDiEJH
zlun=qlw4@}xqYSPkIWb5wDn>ugKvePM*IBGZ&3EL3wt?}Nvv(W^DI5vKb|_3`&X!>
zJAW)a{|EKn-COij<3YncGS-PjigBap@J}JMF2T8=cmhrE9x(BV3z{cU>R=i7i-_o?
zA#w(Vqx+qKz+3$i@kja*vzr<Ud88vndR%5mVjw*dNv}JR3d-ma=_51L&N^~4%!)J<
z-8zaiH(RN3r8Ytrft=bj6ufjrMovyICd^onqcoWZn62+06*O5VR5JCvgevzP=?dka
zrae8{v>p&nam?q$t4=$#XJ{8sCYCt<-MtMDlu_N}&%oZKN%*AQE0$4j#NdYfs(XD#
zyq<Rldyd*OyhsTmucok7aSW=25!>b0MwQA!d(Et$+W4Zpj)u9fst|6*i0<%n2Ap}|
zG3#rtBBwKM-mGZ8SaN*XF!Cb!L%8oBu9j&&9_t*R-&&vJ&ph5}T3_qDKCEt@Yi9y%
z6;sWLUd<9gOBL49p$>CQTcWf{73`q^^eS^B>bSp_en#_~l;$YkSI+LwN?{*fBxVwL
z??;}LZbjxIN&+{7u*7bW`<lTSn7ajaJ}=_b!mXOK!es2OcnYMlnZhCKL@z`AsmxHP
z1(YlB@dkiBJQ>l5%4K};=@N)G|I*8QHxqYzM3CA2dEy28fr$=XgSTQv?v-^+nF$2`
z;uDO~brUhQNiY*^WzxliDuZFD#Zkj3ie<`V+h>qk$=!eMZO1#>y_X16=&P&{qhPG!
zvlYKGp=Xas0F;X}?u6tls6J{P6K1<>dNfcBgScg!4;Y)cLm`d&gYKjcCY1r)`r}6K
zkk+T}odRko{QCg3Nu2CNYeA&l2{OVIp*C0$0;;DTlqYCqoF;x?(F-(PAT>mgmVNOA
zzGHo9O9;+@z!i^7*EC7Q&kYHIB@z0Ys`r%3OAtV}mr0gS417VU&Z^8gpnEdVBrKS-
zETd}wJ~Pvgm#+-{GEeLSts*uPiGq;bYY$I{5nC;>t24+k(p04lk7LRM-NG<L0h%R1
z^<YmlwlkXrNwni>HU{gI{@Y6qgf*kH=kG|6&JOZO{pxO&j?$@r`llNa0*wXO3Ymg2
z&OVshMN(j)e<mGWN?cVqxf5UL58kVGjbd7AVPv^kae@F-ZkPl69EZ8@jL;pSTkcV{
zg?~LV@8hC?sXTUXS=8a*iQvas4U&SrjdvL{`b3_?ATbLk{PTv(`MiCOxkkv|%!Xzx
zsi}r;tf?u66BO6;QEp6N%m$^u35g?<>Y;1m;t!^_qESV-uyBB<AEJ@6KQ6w$)oa3#
zic50_kQk%&h<a}XgsWjkd&VTf7v_yU5)$hz%-dP@u{p%M(!%UP_zGLKWn*&iRXVqA
z&jm_|emee=K!Tb?M|ip;jB-)>d}4{960Em8%+1jzH1yEJwu!y`+g+-xG$u}$@eGe#
zpowuDO{<`gg@sdy2KmINbmOwwn;gVF(kF&-XtrpUz{zLwjg$^TgtN$U^t{iJ9fn(s
z4`--`dViyq7(~|yuReO4v=aL}vHp2<?0>>(Xg|f!4x5d$TN!29Fw3-}muyBoCfMyv
zvh5gW+b~X9M#BLe1$p=heZ*$<-8~pMf7vnNz{rD;(;qd!nd0!>&f1<Mv^!_ky)ubq
zH^`4l-VtZybuC(7JoMq9;r9_Ffz8+nt;sUm{Xc0TkDseIem=U;UPr^dfF1ODhy5Vb
zsL<@&t42UfO27qa&l5TRr9~0shpT5<d)5Sg^?&a$gYfcN{k`(C(|+9pfU=})rRo{6
z8x98+Je!B3cPKU7e%XbY#h(w}AIs=23~{-CgA{RF!=HbFf&#(rWu#F2NAAlnCo>g2
zy@42W9e1<;3etCA;N<D#_G0rRl5&Z$giiJ#KGDc1JZ)H`(MKwAk#okPa`=@Eoziip
zEK~|>RWn&Dl&DTP>~Zg2^kFKZb^tEzIrd<vgb>M)c^7^9dNXEhJGh@9PxJ5$6Q+-F
zS}A}r<JvEAzm?>+=V?B4{V{6L=c*yZ6aS56+($jT<S==0W4hHykw3<{#q&MTj{3Gt
zR_pftj_hrrX>280b+$3+R8H&D*8_`2heWsC&{Xa8Tv}`=Z1Y7xf}ix<aTE#*I)qb8
z24gd`S6WaM@_}W&^ctAh=V`+2Sz_Zl75MI@$BZQl!k6W2?&|6hoO8y?u063R+H0XI
z5VIa^ke-72S*?yjf<oBOP+X<oWuiUl>ir7&{?KX(wzUdDr=ulE?VHpSy{h@UZ+$o0
z(C$p#0OUs;=pxcaLC&+@t?08NYO@(`r3b_iyr~$P=3?RQ;;LF{Qdfm$h>EPi*ox^y
zd(w`_nJUtm-7GS!Ig~@xUj=n0`H(UjuaBNWdJd(QL=xB;H4hAt8{+U&B4x)!h|ti<
zOj(#_dLx(|{bswgboHUWF$bMme_nZZv;R_B7KwR-CBw2F2(}gtQ%jLS+ClqH(=b@`
zF9C!RCQwQW(R`bY0g~0R8!X&z8ASSOX-x)@NgG3kPG0nPL+tZT*c+zrv?;&F?ygIw
ziTA{kx|a_ZPtUtMN<d(t+ne3f$>ZGt+FG_n!OV8jhP>9OV^2W(T$`L%%ML32JTY&(
z?0De1ha=B?KjR2fj9QTNAc}>erBSY36u3S-^@|0{{fvdU?-=sOKJcV8lXE=`0{rvy
zj#-Ulethgu8_5zT0Ber<A9lC@yrE!Ip8Az{>BQQ6B_Z3ZgKaP<w|Z|Yt-S`6rtM=j
zNxCK6`A2$)eMY6OtZ9%=yMNT3i<1l6hrlh98YHdQGD)etH=(o$D-1e8Vy7;UJR#fr
z6Jfuj!C1%z#IfIzI1>=KQV1RkW*T3ag?$gG&#9RQ6rK24#OI{-rP%4NX<}e*ydL5A
zg2N=rc<b@8ELXXl35oZ)#PgxkeRIbKrue#qAIXX$moo;sEW_UJMlk?%sqi;#TFL7v
ziA;&$O}RDmY&5C^Im5fRD4=5m#KZrHK!@HrbFnVmj0~W-gdLw1D4macdnp|KZHw|k
z<7T-a*hl0vd~?YFTBVh2%Wgf?rkZre#4x!|CuzecXBk)BuW!Rk<mcAzw$hG4Mv8ih
zlV!mb8djPSMbyq%X<ao^+`V$6vy@OOfc5gEcm+?h9gzi7*I{I@GCP;X`P7ewtVMIA
z&O#60iFD9qU)kSMWC3MIbj@^s_mKD#+XNGcKXLw4`(odOc}Z2aUEyN1s$^@C(~bj^
znhn<)dw&&WX@*FsA`cv$*etDPFFpel7G>>DEs<rh0TY^U$S{tBk)@|%ZnCed@;$tf
zFQjX=)+)7X8~Gt8_7aKJjQ_o3OZTh8W)4!SH`KhV1@2^&o$A$AiSJMf<D`Z0d5Y%R
zWjX|~HKxl=4GWtmpB$x)T`i9k=i!<x>ioWH=3l;b)0SlQU_wABo4I5hFQ((!88u8#
zSbB;+@{gR)jp^lD4ym)VOqgW`L5gSiB#D(_i7C5@IfoQX!OgPJ7-?Vh-K7Ksvt}Ri
zOtIxbswgd6Q|-HnXf9G8K7g3-Rs&4Qe2p6o-7MKR@1XHr3-+kYcHlvc0NF|Y{4rje
zD3*BJWA?Z4;4J0eABg!ixr^iID(<m%JoHUb(b#cDC1n^{L^<!<8qrukcCepI=z!gL
z_&_q+bh}QvWuc-1)^-|CxYsiY7VU*+ud_Z!=$-bJkzh>9n?zFGG_`Jmp^-|0fT%gT
z&^JZtRPA<$$aJH!&)Rfyhb7qQ-da_+UE)iiZEM-7C9BDp%XEtUs#Q4Gd7VT(CqUuB
z$_eL^VCTx3AE>XpQ&|Yh09<U#pX|#RJF3^cIv=OFa{9o=?S|AX#+y!3)2k+1+SIt%
zyrU&?XKP^V))C3g#FNzvWt7eXpyK;@1q8-U4`o){Cok?8QHH+Y1v|JE7(@$67|~K7
zMWVN!pU~QiNYP7LF_8M5+iUbfVYlu^bIm5*;;t_5i#@xI-(dq4t@{L(0<<DmyKC37
zF9CilVXgbt4Hs|cSIM1*uT6M`n<cLH$2Lm8RDpY^RKA|>uaT(td$}n&ikru#bgs;{
zlrdXqqua0l%DMi3H!0%&k3z)R-C57r@c&1b;sE@1Wct4n_Xqs{6i@kouKhp9f0j2Z
zm{xLI<1b#mBNkMsTqGcr*D0;k;>m+(JN%S*o4Y0Bjt7tq7t#L+rhu*~zrNGyHwL3P
zp?OQbt8!HLlWskyS^6{AeCU6jrpckNOn_c|zh6qfLpQs9`<|ov$@IQ1EWvda+-Ast
zVp0rIOV;4Ag%Grmgh5iN4Nn1}T;k#8utSiCn9%wYz^Q@r<H8pZIGf&Cz`ZVR06)ld
z27mbg<3OpIM4gAJr}eQ!Vb%|WNr436lH3!73+BjSR14B24mdKh$A?c5;zHv3c>~Gi
zgrWE#6p^rVar3mbb5OiAx}_5|5lo3-$D|NP!}9{^AneG56Mb-CRI65GqdAQ=nvu(1
zfkT+bS2i*tM1uE&WKVU*$rl*)@1)2A>31`5Gqn`hYi~;k``BJ~L$&LZKNs{9c}WEe
zyI15L1;7rEohKEOv>nLsLeRxkbKH(XDZD#5dN@D7iyz_m1ZN}d-Yjl~%ACHhH$T51
zJ1@%882RjZb7JzbAMmgw0rY6MXYq0SRr*V%`vJALVZuHg^ZM0U2YPf`5J$f7h;(fb
zgx7)jAUyl4YN)^Ph4QuYE%|a~nI?$E@}|E~Iwjycm0B1+B4fL;Jk{3H%+UJ|6bfGw
z65V_q;dGkiDGG_WK*toiIO4}PCLMIx<?U-hid^ucFw`?|(!%Yal0TVs5mRzec3S=_
zZzpF!DWLnJj39^I9aIRhI_sIn%6|(z`Ln@lpcsq8@iiAA;C`9E3EKX;or{%*IeL7A
z1<-kOPx`ut=<B5*PT=6_i7te)I=}#KwoDsnPg6jZsLju|m=o#@v|}&j8hUaSL{mZh
zMYoWKXlv7XD;h2r?uEUDA;vnX!RMtKGYURz4GK2Eei5(N)<qqx1sa7=%xzD>oDbt6
zYJK)`lge2;)SK+-tBaB_ogCOD$o3VMTHL8ENsYA%Zf1)}pQ{P5VJlv2f2&axlQ5<f
zf~Jaen-e~fSMj)IM$jHXrzv3FhGIF`+WHLLM01VIqj<)!+JHxHs$UOiUjKaMtkDrU
z*-@2wmzWkAPm?YZekWcGcNi;;B=eeu`$ni$6A0<YRt&Q18O{@NkITGiU7G3v2%?Q9
z)*F|K!<hF`i32CMD8&MObp4Ac<=8S7TI!8C++3M15w4eus>4>nkHm=XSnJv@K`dd*
zKqB5X{1gEuWYXI#p_^24{-h-d#L84vFYaa;M`dBh)Ozv9uu8VxpC2%Dxmfl4$M>-R
z;M~w9C-_2@XW@xu1-XnCB5VlQrEQDAT*H|<q@{yjZzi8+)v4@T%A>6L;FV@=n9k*f
zvpmZRx(cmn9O5)tznJmsz3k|L%*}2`qjB7b+sGORfK`M%Ev-oEwrvV=HxZrfboYE?
z;_fkpVyp8*{G@V>Dn);aG@H6f!$sj0p+z-Tns?4~?NCN(w7j|9gsNVe<GbHZ_`Mx2
z9Yk`)geXayDMCa#LOZg;qY$7PVEMWaPH^|{H9&2xWo;6%$@cAjjg}qgqbQmkw%yl}
z#EtAiJDAbRQs{tD9m~zL3i;2zn3QVs(6f+<x%Lp9n3`VqLWPl_J{!VJGZ<n?J_*dI
zXH*$>t}K>;yX*b?Q5IWghbY+Y@xn;m=CN**tVydmSfs-4I!K&b%GP=PxeL`}RKh_Y
zpw!B@DAOD>kSqrKYdv_VwO9UC#e6l4*e|OgM;y2_R|kXJGYE8wK22?^s!AWH4yMKa
zGVW<BxDX)c*Fl1koE>ef!HL<QPFF{6&R<G7vZ!K+*cS}`!>zFNLO|6fq%|TD%6qnv
z$=bgx)~K>`y*YW_!KgzFaCP|i$@Dn=>qp?SRRmoSII~IV!_%J-8afo24eo81*Oq8S
z3sM;g(kHe!ey3tXf6v}XN!_RXo3z=5Rj4##0`fWF)-5LbX(|l7J4|idj_wrElq^{+
z#w2uBynEM;CMm`<`3dLLDaUtt#1~vsBfkatao`ukK4H!IdiI*ExJI@YlVx<M9>D28
zv^8bUO;p4-tVk|mtFtvw=&1@SizlMnmn0*4Wdcz({-IC)RB>lh)r?-1qvK}L-Q(4Z
z^7PM)NOU6bm7Ge(-NB>7IYu`Jd|&v_{KKne(YA#=rt0`Kl983MFRworT%#uv102g#
zGo>3uT_3PZC7E~BH1FCD8OZ3yOl%t{q5Y$lzG`IrMd4!1l1E9IAT6!YR%He_>LHiH
z>|=iY3gJ#|Ex1cy7)CGdC7MU-6jn~1>8)0qjH74km!lbmH5TtyhcZ-<HGsdnjA_lS
z_alsDKrw~ujU4nH*QZ0YYqJx}kh245YVovBL<NqTrB0A3UEZ{p7v4IzGEs}zM%KI5
z-gm}9wO%?}NoyWG1s2XQ_m$<mjaKH@RMqENQum&;Nh!^#_qErB38)p-m7F*`o*w~1
z51Ti9nlA|pzM!c*#kBalQsTWCtQJ}O&AM(<Xc+G@n60^<f1rShWdJ_4CY)%hr%bQd
zLa$GNgNFYXW$zRvOT(<|wr$(CZQHhO+qOO1wvE}gJ=?Z>wsCs>XY6zK`p5d#+WR7_
zYScwkUSvi_Ma28Ov!^#yk3mJbI;P@jd%VFh$CEMvc_cC5y9fTLoL=rLTvk@;Tv#{D
zpX$C?pQ9t04+!Cb8-HwSqMOW_pC`czrTlt21hEmTh{jEMEuN5;VF*Ok>P(iHXg<Vi
z5FtjUwe=a91ES2mq79|>Gvx}Og`KtwoQ(SH|J)7R(R5p5pGspC8QTX~*aL;a-P5CA
zsCZO#SyHJ+*9)%3q}5I^CH+2;uP?D_Dq(V(!T^7jiyAZsSY*)y&?D8vV2CJ7sc<zS
zgcpra?#FQSTY{SgUsrcg<iY|2*Y#>ErN21@b~sdyg$PP9&Aj?l-%lG!Z2^Cmg8Iwl
zV(I*sE;`nfd6=`b{qHq9j_j-vD{Ah>HV^w=d+EC)3G)#37eaEmx<H4wL|T=*TV0}-
z)V9(b_6s)W%Abl>-l63;cWbHfg$MutOkgODoHY6o<N~n$9OVB~HT7?dqkq8Z{SS<z
zq^P8q6p|hjy8o@gES0Aqb#z+kYw|-aLi#E72>$U*44rKC4V{cF=q&!_*|GUw6a8Y<
z{Nw*{AbjS@GnOdXS2Rnm2VYjUd6&_|x}Dt{i!N-pxRX<pgtbG-nQ)g#eBQFl4FClm
z3P5rAG0#5mJi#1qpmm1|CfR{#i$T?HyLP3&m<FONW|XFMT|?xG-p7JLUCM|?CV;Iu
z!Z2SE7>bdi?pRt7Bpzcm1UN|wk9kOdmh=9!Z+3;`TcroxMgd-uOzQ91e<Oot7H5fz
z$_xYzqnySEltN*I6KIw&K6nZkPOGFOr?Zes?m9~xPly}iPcO!n4xrm+CdY;Wo9}aN
zaAukStqYN*8a&7}fP8|!NWF_nmE8AO)~;F;3&JXmh!Lfk?U|%G#Yof`v9N2`tl9(?
zq6<XuVjnPjki>^H>jBF#$yGf-)Pr_Y{k}DVC&e9NX&(dwhCO*8KZWS^c)IMri*g5X
zngot|-vf3e!w-8Z&ga~9ync`Xw1|P^2ou-N2)8K^XW=98&+x%YalBA9gunMi6j8H}
z&V~6d4anH;ey7hBE^UIJiAm_<R)TY%PfuJL>LcH64pIUNhy+JtnDrOKhCrrzrH4ur
zbfD_xHyA4^^n;K|ZKugO!GtH0Kw~I#Y#dR>i2$*WkfwZblxcP;y}f4;JlgpVx<B!N
z!lch}WM!6k38IzNuYNQJ0h9T=mr7Io#y3}ls=t&$KVTRb&SoYx{J4<QbX1ad>P+m;
zFxiY(Y)xH5NZOT72IOR%m$=4tV*MDJ$1g9G#Xd{4|J|Jbk<&Qjyih@inJ2p+gYBxr
zeqMj>s)0WX+wWDmZ1}5Y@J&np{%?iJt3J|Ar6Y6o$n@!|z1R-7y7*4T^89lSvupm*
zs2Jg=7-5eWA#Yt`n>uBQ3Pg9oRm>!fEOJ3Te<5qPO1R9NTS<3X@cy$&6~>1DRa<m0
zhufN<0qQ{ImF=(__A?^+lO|1?GZbSg5;tY*malpZ>CRH+K~>i|)MdVI(uTFi!|~YF
zbC=JXKyR(LDA)wSWCj!31wZ~JH|j#Xp*pPNm~VsS>NVX$XDxFt{@KW4AwLQ#P9}-=
zexXJas!ZP9Y%upgWiQl63eR_|yy7)~*wbs4OwL&`M;iLp#)kVZs%uzqdG2oQe*1{4
z_WHrPIEUx?>+4&6`8{=C>*(jW+mpMp`P1RP9YMg*gnw7}%ak<)`Tbz%{eMU<|Lkty
z%*@H)VeH^)X+o#`ulx5OQphiLS^EtR1YYUBppAS{ptVMtak>3PG(mW1jBJ9l5^}*(
zifBktOG&DRhYNQJ->le{jqUQise{{T?4)}XP73!10e4eZ6qh_|l$Wn7p4)WmM_%&N
zUZRgP%V<22SDAVtee2Y8A+J+v<5NX&iAM<%#5$6{020Qwlw>+dD9b#gKoy8E)}?bL
zY<^a_{JNeHpA^<AB;rHTp;nSCaT66Hn5H0!z+|aHDa1Nxs6~*YAU%qy*tck<p#6~I
zM{=aQIRW0TOA5CIys&FebzS!U{Js}9jn$y}B`Q>c?k$C+L(nN0T23WY9hx-T+uPkp
zPXwe7QVseng3)f=dbLo;o!hyo+{c^z03VBNX?r#P5ltY<VyL7Gf0r7F%*)LE%~(gh
zJXfVLww%p7+-5oLb;7Tl&wbForotVGFk*_<Bl+bjU;15(|6uoJOW(FT(FL?e0m!O0
zE?S5`LWPEA!R1c2IO4(xnqUt6W)kVOZEt{~#&)p{)@#eJJ!nX}!Tqj>cJn)Y=Odw2
z9f?@1X+&P@$n@N3J~R;-zW1T963)h$)-O<pHOmv_xG+#nWHx?;x22hZ^b^E{C?rrK
z^JYp1Sp~AlCRYkF(>ZzFx@!%haMwWwH~Rju#4SYEDhA%r0#~4O(1K%m=G+MbNrNR=
z5wRp0JH~Oib4K*O>=giZ16WJ!r%PCwKw-)axTfX~n(?yW835yQ9=-Jruoe9dpYeR$
z2|?3{jQsG@jlGu+=HrjBWwvQ#k+y9vc5ylMO6rw&sbJ^d*m(jZP$F$u{yW09em-Jc
z)CJVX@#7M>oN6`z;mqKZV;{^<vVLe_o>tzN&mp(4BxRqGG3Ds67;B=jN{e#(l!SVO
z9S&KhNZ)L-5G%aezu=Lb#D-X!UZja!{+t=vN-sOzl^u*jMbX3}&PHy3%4*2UIXYm0
z4UAeOyWw++%s8TI+c2L=-f@}}5INYpQL*DogAKLTyRqc7EE@_-JROckB9YfqcANV8
zX|Wz3<cIQ9L};`ezw&wdhQs^W3+ChnW@E)b45{OY#$4l?l(Axdpf?BenV1ygl%zLe
zyECMII+>m~rFB{ZgylsCA#b^Y4>B+Fz~1}Da526lE)FLyULiNN+dK$V8yyx&s~VM9
z+Mm+^H+=_)%Qm*KDZN(>i`lS#sT!PW1w4vlZ5Mm-bjh?x@>xPkaK@)VPA)Sje(VMH
zSID&G%w7umW@KP-3*?J<g@D;_0D0B(&juHwr24+#&!QSv<R<Tz$BQ36dhu`3WvIiU
zrve^19zS&)*)ENJjo8P0Tmi~ikk;`@4q26bHkuJL%~%%AY`0#{wE;UmmWQ{8Ial^-
zO{k{MGnXnbFIM09yBSkcD{H=ik`3}U%sfQuF0!&}uLtGhtF#iF+(uWy_9*w3&r6<P
zIX1h>t9#>^7P<Urv7vkxqZ5`~M+QtMyXZ-9e#95MHh<n)0B%rw8V?lZQo&@3I{?Dl
z*mDY5Vo4QS=wLtUQObVEG&Ffzzk@eF|HY{Kulr5^?A&2%V$Ae^VO6#We7wW{Q*z1v
zw_wSC1^u_8>mQsu{)eIqgASBpOjeRjN|K&#UK)(~;Nd~(Z&JtqR)R_YlwebN>T7pD
zN!%Llzw3eh>#Y9c#l+m%<-eD3)u`JlAN&i))c~t3CMASq9*1oK!K|L2VhQytct$6@
z2$Psvqd$?i)hPk*vCZ9dybkiwOWj}Ma?AWjKwPWt)ORI-9ard)8qp;X*wxq9#f;N#
zzely}favV$$r-qlWHFN&<SvaWBKarS-4NoYMG)%7b0S%O^QM6K%9;oxo$}d`(l<At
zvK=xODgv#Qre4$=z+XgK!-F~@G01eH1s^p6#f<3iH$G-ODg-2r)=<GM$-ymwN&;t_
zT{ZHtWQ1L6xB>j$omAHVc<fY;>`a{8486RQCKfI7<8ibK>AqWqNXQeUhtvkB)bJVn
z=hxt%F#Q0|0?Vc7xb6<dUt6vo0a~GuXIyh>2{bxiIPi*l(IsfOi$aA>Hq*!ich^ka
zirFO9>cVNRys~Um=seh#k@bbg*#KB!b7=dJ!?)aeJBfZhk`PA1QS$V~@!?lWQd=R6
zD;J7s1l^a@-_q(Yk3mQMfS0npD@(rb%cX<t$XX=0aGHrM+sXBl6UEL|jG7ZFo069*
zXdaNHAsSYvPrHt6MRlR~mC1v`hr1iU2(WjqMIMZD2zV>*Qw(k?k@!x<GPlLPqCUKQ
zSaR@meFNAo_Nj@LeL$;f^Jz`cmG02<s31CuiNz&AGuJawD$fJB@|q;pX9{%a3}Av4
zzi_<2RBDXkgjONYeG;8STOqB2FZyARIXyOU-C{5B$<f98=3vKwxHh){WZSjKl<4m+
zQyjnW-gEcAc~!IHQX}Z5#O25kGr}YnXsFEuKzza>m0xsFq^0L!aa8t0a1m5vdf#j#
zdPE@ULpB(Up1m?u{$}t;tCRW540WMp0peCwh@)Cp+{7>vR8Rn&za{1C+{5q;Rdk~v
z%}gRhM&8m|4Ka^iUSP)dGHiPiYfaD0Xe?@_?mJvpLuT`;(x|yGp|$8RStqqTjorIW
z=<AB(4zhj7Mo==>m>w@!1;RJ<&Wwb*It>_|tXTF(v*ntPpr)-#Oc4ES6JvH(s-Sk5
zv$hQJ)UkhjKZb3z%D>=VN4H0wFr%j=1lNAKiqjL)6c3?LeS3K<g6e;#W_kB!mD22f
zA+eu$6WfEJ$6L`C_yU`^%OWSX0IS^zjMmuK+doy(T*%6smkm}ToD*+YTx|H);Mz7i
zTC>%*IM&2!S1B0y938-TTiv$v7u|+@+k?4Upmu@b!P&%dO8#&y6K~`lB_Kj+i)yF>
zj}WGhl!!7fbKk*2VO@6woHBpW=<HjYvR~Z#>s~>pd;9jtLYsXWQ3LpA1;tottvcB@
z+o@)+#}pVQ8;%;(hjOqXb5jJqSr~M(mcmv%DWabo%f6%IEM4YVd(X=Yc@bJZz6`Vt
zR`$lDQP}>1NAC8u#Lmh-@u{ONi~ps2`&djq?*SwHXS2Mzozr>x<J!fg3l8s@%2#JA
zb&`_*l#RVBO4QXzs|r^5jdSPmug}sHf-n**ZqJ#A0omC=A6+U}M&%ya<e%H-veByK
zNowDeAMGRbM-G8C>A21bHD2B?A}20RPX3;^*HW648cjtlGxN;MMKZ2oeAJ{3u6R6v
zKF>$<NF?Z7Sq^yqX06t>qe$!Q`6zww_H{A27V4Zss(wp}N8lPD*%MQi%$~4$^sqB8
zIf_wbvsbQN_voy|mFM8Sa5eSCfMIs&qssV3QP?`2H>2Z!H-`=Akkpv`vHbe}!E*jH
zlJoz|r~3AG{|kBb4_RI}$<Th00U@mKL>)&|NLCd|4YHUP#`1ik9HrCpiUdI@)w*k%
za5V06QcCc{ea5n2>tove<~`?T=9M52Fh;lOp}hiPW@dJ$7q5rY8$4QS(6;ExM{nSl
zJAX4tyH$k~pNWGh%%-?-fH!Wl{}Pq4f=Mbx3#^u)b?TD<IYyJbAU~KlxFP*CKyN3S
zRRiz^#GicPa4ML3u_D3mlukkc=!NB2LBo<TTBYTF_zYkXC}=y;py8mSX}ZD}q*UDM
zoH+8P*F$}p_7!GXLxT9Kw7G_z;QZ67h%AT1lZ`7j=S^V<GH1W!8`;-_U)6<w>Urdo
z(k)6XQ^TGEQ97&N9AN&=B|WKS=)CC)gQ;sSb35Wd9kwJDS;%N%I~aQ=G$P@F<<*TA
z^}4X#hUA(pApm_XNCR>E<W{L>eaHpKKhlpz(-TBr<4GV)n7_SglXvBA%N$3Wa%OJP
z@cGgw%>-DVu0qk#8$KzdS)xaikL1&RS?jq(REVDUC7mgru(oWw9q+#shKoTiRO0|W
z8!jd<i62@zjuSGN<M;I(98FJ_uxQ<$a%*31)x7Ie2KWF7POcDN5zIinLPyzEbmu0E
zGo(iPC;baF{a+UuSpV4kaCUO|znEw>r&e}k{lH+uZ~y>^|J#^9arOUy2=qVvC#%ua
zwBPuFK(E$ia99XXHPVq=&H$wxa0TLyL?ktfA|jx46t)&h7<QzT;C%Nqb#=o_+Es!N
z>df%&OwG`NZ^60j@#x%O{6)k0F`PR^`Q{0XhX%S?CCQMh+Y1Z*MhFi^d=MQg<iqHN
z#|IGx!IuzO3v2g9Au-Wa4hKPWB!tr$2tXftIY+fHx+5XvnSTfH4`r;r#04P?=O7Y-
z)1QMlULqH0h0}D-2jtkZx>DwLfY?;(O&CCCj6@iPBgk>Yj<hAwzX_r6K}b<r`@8V~
z?d+9UD{45UkR?q#b4qi}BH{<ehVBDBvpWCKzx(vmieCt?c=#-Q42!Zz;8@nTON~Dc
z{%gjUOT6sl_6y8arjGWZhxOB8u_OKu4!_&HC6>bg&;~w-P1`ZwufOQzq0jWlticwB
z&**)uy@nTQ>?X>d$=2DRX@}frE?~MaNjF2i(~#XkXV}KYTNrgMHE=t9!7uh@7Yo@D
z8#!DIp5B&zUf{YY2ET~QTDC0ZFhqE~o2~>s4b^oS{?4?)?b5>$or6ZenHw_0bcqvv
zvHvmX@$>d%{It;3&q&AL@$sA&*gUFY#j^41>{Y9q=Z4r%jf_TK9QdwYk4u(dcKyru
z!=P3<&JJ!3^==1&$Aef|)2v~28CcqDQ)gHrO?_b;Fh*0+aA#fFYN*a~A`Bg!c>0{1
zFNW8}FkaKA<aTD%8xtmoIbu>cqrsT9sBhIZWQn>QXE?n@3d1BmZWQTAPPtV`YGv5$
zdhs#tN#mSnY8YtLORC6it_2T*L*!a;X(?>OtQMk&DX@^tFEJu|OAUEAWJC?38GF%T
zDkaQf77C&DqLLRw9qv8-un<3O1X5^<5~u(1hZ|(70YXOk;*}XXqjccs5{=wt@}AkN
zpok2D9JUg;%MA!<rc@0Kt%KN)Via4>khE?=sX<P|)QpvLX)j7FcU!P4zTBJAO0u$D
zt=>{W-`7j~DAmvOSUI=uOi=fPzoJH^+dus{$fF>s$LaN*AGacsgBA}NrQoxPf^XUn
z)}(J$nm!h-TB5`$@}nkb)6%OFQd3$jgihUNO%=`3*vm3=Vc)WgxoV9biOkKW>IrXD
zE3i(y(n=)?;~jbYE1<ck<tTcrdP!|YY>E87ezefMD^BM~<(+$rwxKuQYDwg&h6K06
zbSFV=?U5xR?Ru#BsYvloGLS@!m{ziV7dfqkHPDQ?jC_UgW))k2IF$-jF67oRj(9OW
zk?`aERi=R#er8r51zrccn|TIK;Eiy%P=J*sja8f{OVTd9)q(;Nym~d`;I8GyUgNqu
zZIVYTSkvxnNz@q1E6{wj8L%LxPLXgVhPK)$Yb9mfRT~DYf<dV9ROG89@P24M-@C~|
z=iTI^IiG56w4j5$Atftf30Y1EU1qPQr@5iH#MRp}V`n7d@vLQtje8J_{0o^CP1@05
zQV`QrA!!^fEKNP6V10rw2HIOe(9Wo3i!!KZI4P6Vw_L`h#F1qoz8om>ug`}UwnAJ+
zdKgQLHm&eRSxdCA??5q9<S14i2$RN}q7C`1ycYvkl*$nIB7x$<$P@Rlu*5a|zF8kJ
z_@@2Fdt;zFa()~Xq^)zm;DA<R+?1kZf(vDy)eT;xS`93*i=;9ePn+zlCIOU(I{jS8
zaYyG0ON`WFJ-mJKI+^DBZd9n<(&Q$e-NySm?hM71BJE%-;WPHTLK8dG^maL$_uAqy
z@<z;Y1~(rmpgqR8bwe#KK~`DDrTgxqp0r)JyVz*B<Jnm?-^Fg9`nO?99u9bz?INE2
zcb<b~=8ZJ6B2sv;h`BpfJQh4~#KcuYc;Kh<JZ>D~fyt8o_FoL7VP?}O5h;wFNc}Uu
z<g&c0c^e}Q<w~21hw9XW%DZmo<rSpbB!Z<6i&JRz&|U}CGiZM2<BFR24ZWPJJcK%v
z1H@H}!ZRPTm>KsKkvA)=(QQQ&VQpu_$%sNQl}JJiG=(j_P4}9WLX}utZM}U+c>ELS
zeH!9^?m+z%+`&gI(okgt0~wZ5I|aBPg$}A03lm>bnk9`hJ8S)cBciJ7iEc_oG2=q3
zXV&4#;!X9UV{5OZTH^k(+SsIbHo=3;dYFNY-^|}%LEBWQJ94>kxv`D`J^_B7Bm`5(
zgiT_zNvLQe*3t<dr=*YaV)1y(r}*gOprT@57B83MeolgkiFvU8HQLHV=qQ-49xtbs
zu|7H^|MB_sPID^*sUv@EJp7=u%G9Y?;2t01<b5}Z6Ba@z^X8kOMtX6;M2?QHI9VUb
z8yD;>N-Bzu?&XLaH_<BbOu8Nz-PxA8kSWZWyGcC+`HoQB=V*P+FGl!yU>hL=5lO%Z
z&oMNg6I%UV8Ish;Ppj8{Gau$|_^{&RqhQ8m08X5ut(dKOJPE4hJYpeCc`trA5UrJ=
z&S#E!L*CPpIwKs0g^C+a!9x?4n2yg!<8pm`y0d*+-cYvhk+(s;l1g#)GxfQ&`^8_i
z^MxKmIltJ>k%&eXQ$t-+aD2@(L_5Qq`-!vGayXg8^@4FCNMvi}D`V|$pI;no)&q66
zVgs1vB>(1?LDr<`<XLie!Sh7_KTmYl2{MZqf7%LyKL^Qw``G`t&cZ)D_y32^!hT_p
z2Z1`hCg2d2bk&mdG0?yD6kdQqi$IY808m8!PpS|%Gtd8it7e$n+IeH7W#=!o+6)Vz
zg%pwLYR_sTYZ3TWeJZ7@lF~^h77PT9<QPE!5CJ9WivJDg`@l62LB*k5v<!_AzWMBX
zLl?*CWda<hbkitL){K<X+QswpZXWxgo7lLiSaNnYv{P!?GYiG|cwtV7XM?=leumCL
zNRZBA(6KbuH84SlD<UWhrG*5Vq=d7Qm4VT=D2|N}Ay}`&Gvq6&ZbHYmL{c+JbP!RF
z6B?=s(s0ULcz_vcBob2b15MlqNxlhcDl?c)0HOd8KjB&XqhUS#V3RlqC_P6KU>8O%
ztQb4+x>|8GPJXDO;_<wPq8R1WY^45vx2C4q@J4X(vQ<kS5UeQTP1);XfIJt%;pOav
zC(Izcn_F)*nZRR+j$S_&JNowNLRUxcpI10F=zUQL5phY$hoN}*pbtjs1B-5c?}ER5
z$dfoI%>Mpvn`_DDw7f3sE6jQ_WGwb)Q=cR@XH@u7^f<=kk3fcsLXZfDx_L1(^!%Re
z<mheN!v-K)%76X2UZ*y`HZQI&QA+g103pr%<VNiE(!V%L^{>a?ae-!|^}cVHFZlaj
zC%->##?RJYcLzuD!~H)uhRf!UmUrsx?fl<f@$>v&`TcPKevE}Wzp-YMS>Dz4QlgK}
z_wH6dgVDvgxxsO3X$f{%;ucj?WF$MJ1YgFJjzOVV<OS;?X~(AYm6%Fd0F|O?CIqEN
z;~9`Fau3gN0Jl>7m?R$(pdSS?z=Nm+i$?qece=^SY3gAhm`OYOfCxxQ{c?lBPFN=U
ziI9r9WuGuH`av+{q~Otk<T#>>BT69+etRt5brnbWmEct)Efz<gqL-Xf-~Zlvjctfw
zAF^~9(nB;^B7I)Q1_G?zy|4;{y4iKP|9svbeSba#f4SLUFVy?i)Vdjmubm{=eYhuW
zc7B1#?iN1>6a{ZUx{!+q)<`yH`k8{~146{d@{z$A92wbzGL;<>$&cyj6JP<(Z70S#
zi)=T%(!I(~0~NmR_tUr+(*dsD?@GInGbFCnH{3)Ht{**Bw%lQ!EPZRq<}-TXT-^Z@
z(1Z#+rL5pt;zYhoBELW92TKQ?WEIHKd~!fRo{FZG0n$P>7V2F2+*4001I1(nodDsE
zD?Nth;~||vC|)nGEiq@%r-`LCr137C&^{Lq?;7iy=YJpJjSHR2*j-%__N_8U%6@^-
zm`=Usb~}xCxgW~18ra`_jp<FOIISiod&AcOrQ_fy3qQvjFL-A#=;(dh>3G4Uuli%4
z3jjebcmXDMNp-Y^eiTP16u~phh24yE)0uAZ-B718)RY^t?7rTUt_FF(^oK)>0xx@2
zcJUnTxRjkFn;?#QBTODE?x&xMcbM~ZaALy^D-6CmO4IZ(iJpw^3>2os&D@6>Ea@K2
z6yFTGTg)s7QGMr)QOgB#`fduVxs12df8pKt85A-86)qNPh^k8;AtV5<xvfJm0K^ny
zAcmtMkEH;>lKieQA`6cGDl5ZGAroi&Qo!D^$D$8>%nszioY`cscnpU_n6weVNU5;I
z8s1F=Zj6Q#3l4yf+B=d4DA{+;Hw=pJZ}VGzHZdAd+>6_5k?u8=&Ldv6G5j{Xe9LO$
zKzYG!Yz;VgKJJUi`+c~4*cS{`8ye<n!wutuwO<kn)Wo4;6i~1kb$(fQ!DDmgv(TcS
z_%g`v&5t1$txfl!Gl@b(Us|Rhc&OJ3MYvkHG_Nfo{-q=b3ZdS!YbMUGtFuO!LGQt}
ze|vb^b1<OF3wX=k_MTp-p9ZYvj$(HjF5<EUk*-MlQ6*W@9~x4Na~Mmqjsrykq<;kD
zjPG>%TM$=*9L}v%D`|9u?ID7dYWxy6e$2beQp=v|Tz1k6Iih77Y^p&U5%#61siYPe
zl(y$=Y$1v?D7oR(<;C%Fk$fT34OZ6HYYLKh+z?Fec2~k)5KYGQgQ0YJE_%QS*N?|U
zbg%U^@~&JqYXMl_jq{tK!N8x<7%hS+O}Zq&0gsL;W3SV8y~4w}T?0htR^#%f7A!q_
zIxMEW<63M4WpdhwlC4n`zbA!;kvYOC*B3GLQdd=5@R}|OSTMGts<2_fawW=j-n-@+
zc&>X1_&sRHE}e!IdT{>cPc#6IQ8ZK{06a@v(xBr&e-l)are)P{wj$MPVe2d*G>M09
zF;8kT)OxGtD=C?BAj25-xu+F}fh4!*a$P*se(dE5ZreMEh34q<lZ8en9T&|5VZ%S6
z=kqpl)9AL=AD)Tks1p{9ZtipEo2Id_G3cOQV9&9{9cAP#4Evqf080)DUua?tTDU&>
zFWd_%Ms4%pYR<pcBk`xA$4mPAm&~0k8$0r8$7tA^9HyU1*TPbVmz=?4{LOlmj8~PF
z9|a}&^Kv&~JSfcgF@Zzl3t1j}7sPcfj9#2J@nX}BSC@w(h1-&kox0s)LQr`o35V5Z
z(Q3j$f060`8nyXCNy6dJn78V*vCOJ%T9MET2rF{4;beB~NRaywg{d^|)Tl96xk$8O
z<-!0~iDzMLB{Z9E2ueayB35LB26e>BW9709tLSeO#eTQ3i#$GBlL_jWsesX_NY4en
z+^>SvvtiR*GPPV0Fl@79tY!2k?ni4#<;Z%s##5p+74I&f5|dQn@=Aa=n~l3)psE4|
zxOZ8y%dXyFkY_Y(>e|GK3Jj<*axA&Ex$7|oIEhW}v;+SALtKVaxbLP3mPK}eA;gO4
z@Up0bcaFuF;9N=gBQKtsrGBrJReI)qG`NE51xDl)6~|O@k5I#Hxu7Y#V>^w?H91hk
z?iUhqqVdYx(ZS34p6&iBm~hNgnLo7ZK14)&N;G$NDp7_mMqO4`{;QaC!!B$yqQ1t>
zw07Kx&a7kZ?|lg_Q6{9yV7gy-zL8M6h+6d_1%o<vsF!L$_RGVRpr`;-LH(}w&T(rn
znYSbgpOLh{qXb^12cr{F6H}UJwg6}JXFw1EZghu`T<X4y^|o-mx3=wq?MJ>a)cHw2
zjCmz-AV-<si^M|6_07#>QGnZCgvF#N$<hQ`k|l^OqV~9~LZx(^X_SsY*fBG^39h2W
z5Eb*B@uGbzPYd|0Y(QQpNA|Sf!=#1W-ZFinXfg$)V~BzDFOIWB>so&^#lc^ZCF3zN
z(X@&{4b@9817>cHlUHkG+QhoA63U;hJH_u!QM~f8U$VIt`>)SLkZYMP$0wk)V@b#J
zB!!&ZliTF@3qIGx@H_i3y%%u9E)w{gZ9c-=m=*fU&$jZ|VTRmyCn|sGm+J=NrJrdn
zx&nr0g-p+ekfBE`i5n80h#Vgg#J602FP3$Lm(>vUu5@SbV!YAlnpb@&?KH)I0!@I3
z%uPL05g#3JX{tFVj>H_p3N=ObefnJd%1eR+>2<J~;=|S3KZXh$-6Ng6yR+{vcUKWo
zn5RQ=bMU<~EWYJ~p$F6YEh>>(B%*LijKPwE_UIltZpd?JISYn`eoTZDH$%s-s|#ZX
z&W036lAJuPU_d=+e_K)(d_lVqK9b50%craNZG^(8wNRG#biQEgaBpJ?gWuU@>F|pQ
zOMh!q4_+KU^VwuckZ>>EZ!6FYbCuVd$UXDVQs?SaBmHlJ^5x0Vm~G#)24`*y!N>5T
zhko-7@Pd*HdGOC%{IJcJV3)*Um2H(ocJbRVq1)vw_j=_A+nG)qROMwb$X1C3pp9<s
z@`(6>t}rGgJ`Fh{h-t^Fh-!2Q-9i8<*FNhp_`@d4j<cu9g6H>N(yDaQB1sbku8|Nw
zdkURl2U%s6k^|*>?iZ+)J}}Y?B_?83=QO90dABwTr+M;pVJEJ!Xo6d#-a4G?t4P?d
zw>0Wp2O7(eT#j-&p>DjwY7nyG?z&11=qz@y&?}up-VEA$(Lma^LAHd_K3Q%fhukPC
zGRng{i5oFm2WpzccvvR7mv7okk{c?%u&CBXP)nldgNwF|^l93}Gu8K)a)z*PTE}Je
zh)-6w_9`CDShXE#TgK$b7WiLl@<QFIBXt0x2NZD=;u{hy&M1Jje*ns1It5SQMb3Zj
z0i|*iucL#brWBNUAH;VL?brx|i7S<Of+>I;v-hf%)@pgJ5L>_5rBp6zYO%GApee05
ztS<3FZEEbA;+qOiaZFvJp!C&pHY;<XFiW>-hO*1ja}4?+5l5LQ6sxq1H+|^C8xo)q
z0ASCjYjMYU)A^0rMh>X8Ujm@gdbxm_CA$a*r_{0dqBnx1b^_gkQ!8}AZdsdi7kFn}
zDm!gUaw#n~>CX)@qpBTr){g|)0X_<FbpyG*@PkhXF<QFx09x@}^_RwV)61b$+UKmE
zyz%}sX0M%px}3ffc(t;--M+@ADtd=!7R4uj09#ueK{qiJRvQ;~a%E(CT{$E>qRX*|
z$yEj6n&0EJ*MxkJ-k*4U=!K^|_&U1qGjev|C-#W-YBz!Cr$z7vhk<Q01th<r^$ydx
zvz^j}TKHs@9ISuP#1ry`XFxY=MrlI7&m4mdWS#);4y}`FIRIf6j;H`<rV3+<k->tL
zft;ICO#3p_cVX{xf_nB)of$Y<QOb(~7-b})#H7?L@q(`I=$P~a0{2u@6ac#b#QW>Y
zmv7`KvPj1_D2ohyO9nVpV1+Dw#FH7a#<2XUqx{KR&`L;#wI2xWSZxbCzIh6>r{XY!
z8dmYd7LU@i@#VW8_D1_*yV$<&o<_UU3PdmF`e)U*%bag6pP0`;j)X0bM>n)PC+-0R
zqPsWWMk)f7x#Nb>eQ$QSw34phH`qbP8wxd9hb}AS5dM_!J;y69Y_dU{Y9c%nP7d@C
z6M#2EHad03!w5?6gpfeV^PWp=fAHf09(b?D>>po9m>WJMGK3R~F12tjIs^soP<eO+
zwm2w&6WTVgR{4U1?t~<%dX07{*aANQ{#9Po&2hq$wN!*lE`K})#{OfPAC<Y|zF9jg
z?z|$e39%lSQB19(uGi1bCf^FA>?jvd-rQsQ20o^^59P@+!)n7Wn{oooG0&P|nLE>(
zv&*d5rna|V5m(G%#JUHilLuZdDXkUXX;N6QFwFYMUZzKTqQfHw!g=&_vAnx-X~4KH
zi&?u*1YJbDaBk4<ceVShrghoqqz&F3k{nb=YNu`|y^0dz^6A^b0uM8U#sgZK^veAm
zlErPg=R>S$_j4gUmVwc2pxd|$mSuF&>KRvQ!8&f3rgyI2QnQ%E3Sh&<Tz!MD0o<?U
z{v{*6A}VIm??l9RdAba&th^@BpD_<qVmu6ALHT!XewQFN8L{`d@lL?&@Q>Ug2%R>}
zwS7Al*(h=JQghLXp;+f4En_wxGIN2!BG?qweD7&DLPfi;<R1>Na@FO<KTd_W)|=*5
zX3oOH+AVU~^+&2jirl-6xXJ}GTXTh!m0oRU&cFWxDNMI)1WnJutSr6!DMbzM)WYes
z*!3uH`DMpqXm&A_oLZrAtqRI8z<c)m!XJ`~$Sol{-i%F32TLuEu+w#_aEL2@Mk%+>
z*po1@5Q^bguIuWQvD*Cf`KsfaT}tXU3Gb4I-0HHbCo?;zg(~WE!92@@<7je4GycSt
zCYzTA<T#C9pCzh(g(fL==oFKS7Fu%*oh1?4O?D}Fq#=l<M78ou8FAo8&mI}r&7#!7
z{>~P;MTlAKs~3=jxUZ7ja(!%%lx7yy-|+D%2?k#q+9e-`+~2613D6|V<Y$t4bjAeb
z2n--z?a*d3Rhi<Drz3>g0&xpHK2AjT2nheSyl+E69f-;E)Pt!z93OHQ=4(&3&wU8;
z(!l<Hims-DfS?Y(G>vZkZgT=qAX%&v*e*gX&D_e2buT~Jra3R}@$%}zWj-14iJ)2d
zu&--#Kaz6gozFtjh-wiBxnJ!OkpB|J-ffURdIKA0maQUpER3DpVO9KVwj#yq%H;wZ
zig!zSWS-fX<pBVnC0+H|04jmg+21@>7u%W6)fPJ<^!kmgpP8w;a&)G-*=T#FT?3De
zNxz0lf1yn_?g>A7JWAi6gGoJ~i&dOz_Hp)u;}#ExF-5(M$7q71sB3dEQP<1e%13{6
zNEd)XUbx(pSzOspq8Be9g>DasQI0`|zLM<Bvj8z@39VYe<*w#e3{{W<F-5(v{&euZ
zE9a5YFi0CH;riC$J-*IXjz@NWJuO<q^teCpe>A-Q>)9FJKQ_GVjjT+KU7Y_fc68Jl
zc~Jgir7`&Drzrl%xIghdoJ`H=9Blrz*!T|v+!|F|`+YHluc@!7NJni6Cyv{K9&Yk7
z=?Ai<2$j91${-x3r=T`Q>(wqff!(jCnQB{y!UN%rTR`s<-&|j_O&$Pp<qBrhg}r-7
zq+GFTNOZ?WsbQX_xzF3Z&#rCBXYm&#r*`Rf960;ERhF;hcdQv^+>wg&-<~M_yqpy6
zCsAecJg4<!Vx6db=~3Vb;{j#))`EpXptML@B?ZgZ03V3v^|xvS#;}?D7-Hc<{W2mr
zFAFD;V1)hg=#nHnXU-mITr3Tf6s9mc$q4c-;Ujoi<kT@CHzpQFTTk@0V1rdsrTa9)
z27wA(sEabu7+cD>ES;fR<mW{PJpBCbMm7Q!<;Z2uWw(wKdRzs1A~B3KSQHU;x+7@R
zFLs&t>mu^Rt2su9DBxTzm!T)}<+;Z7vA8{LdoX-?J3Aj?VkvdY`1zfUHiKrtu0%HI
zxgUbSngYBt{Tf=Q>q8s2K<78L{*X!_w}+yb;uID15&JKU(gNO#5$+h?aF8i0mj1UD
z(^%Fk3fXr(J?rha=c^%k9V;Hc{36_cW0gXm(NZ)`p{aB|w6NmgwTzyR@z{=<!ggJH
z+uArc6IrVqPQ@FARP%ex+rq}!w{)rAybTLoN*L|dzVrW4lxuRf;8tlols^0eqcyX7
zhhS>kcIlRBv{EeX-(&x%%}W`E@AT~$)RV0KUP5rzi}omCpzfo2fDOo6>4d8s3=hV9
z{`A1)dq^FMcC2`iIbW&bu2{COGKl5&;?0?p>stv~>ZvzOWr#v2oYZU+_(e{aI}dzG
zCR)5WuNY`qqofpTbC(eB1@F>kq)uAtWr{mu-O$(*Lbah<AAN9ClpMYZU@QNuB}-kE
zazP`?rSRL`fai2z>UDPtB1&6W(%ygKn(m0N%F<GGcAeVkseDx(f^5hM%5}f-{Fc33
z_GC^Fi7BmE$clrvr?bl~(|K$c!H>TW{}G%WpD<$j{vdD;ytsWYsVsMdm#c=TD1*hm
zsWMu_zOkBdM%&gJ=5O8#>)U6xFKjs6wM~zd$8YoIHs&GgX$#glSW3opWW;uD!PAP{
zP=bDK_MjZMOOQ!PqBwRRPuDGc9oaDb8G66WP2D!P2{vOXZ>^WLa+S_wv9kzo4klu(
zB35BPhAh$RSHk8gnYKyFLQ)BsY!&N@)<nM53hr@eH{v?We40uh-cx<KDI#Y2(;vPG
z3!oa|)e%Xp8mX+>(2-6!ZM0B9#d4VP%NcK)2rDa;nz~d|8g@Gv7LSl!Hyfrja*LgY
z=|mM^gA=+ceV8e~M|h}7_+ALZ8nlT$v`JN~LAv*@wUB?9OSbb=fC#akM>{x&$2^Z*
z;u5sLwl)h7b2Nq4txHu2MACympj113H$)~$u*4YWZnBS~P9e>2z?_o10giXeY7_%P
zo+B3Sqc*R1!-2-Y?-tpp9m&fAvi?SC49KOsXKs@bVsB1A4!VH4AC|I|DqHB4yJdJ1
zJ|C7#gri6paPQEoa*J;ynx|;kA9ioD`r!uA^M;lp(U~v6|2!z@7Z8c5{SjQeBm5uc
zH~oJlxc^sp@elc}L|svSUjV`Hrf%(FuW$rd3yM6;n;=Sx#p3r+m(EnF9eStMpVF=z
zqyzsxO)aUwijqX~jLe(tOnbML7C(yw;rlsUxVPX*<oz%b2-Lk=g`MVuByb)#6!-DP
zoDlh0dq(_KB7B`c-e_VE8ZtbhQ*tLS;mZsghua5-Z2SEdF2dLQx0%eMoy<p}4b_RY
zH^~KH5=@6lqu=e?(j9gn2Z13XO}~#A6*;l^9TR<RH>H7};jBVFAk9tAr_fnvNmh9#
zkdtCUXCeKKd6YyzLP8hE(B*z}c%n{dCzP>JLOKIk$a5lG3V5)rs@w{T(~a4^nfLUU
zw>6JDpaEx77e@^*%0wdEGCHP=cuI-h7wh@^`qqTb1*iDY#*qI7QIX%M@U*H7t;P;3
zI7W1T%>dYddGun3@Da(6KuHdOdS+qvh<jXtnTO7!hruU7pbK>(%FDwV@w_SIKb@cV
zeZI`v*1N3B0S_ZgEdmJ^1Fmpl_(d0@&!py$KVH`y_bm9GBd2=-Sd1Ol*%L7QAmQ#K
zq9lJ$nl>}>?3gmz3e`}9RQ;F(MB_2hV8*ycBiQAX=;^Y&H3kmHGgG`m#?4XDQVXgL
z)sYf#RlCz_1)56Wib4^5niwDA++S9^ZdV;@zOpcJH88$Gsxi~-;iXTxGJgYStL<=0
zcy0Ft!tFYJf=#Pc<97Gbuj%KLH7fd-e8wp(P4h=c+LY7Z$X5ZF(>2L)=zu84xmjli
zw4i?F!Or=x7{P&Td?%VzWvAxd8y|%-Nq7vd6-$(D<X5;%(a3l#t|g{eIrPN(;JJZ)
zm+;DzVzt&RoBWd_x|&(amo18;n-Mb<Y`l;JK)>R2BYTY1_e*0`i@`-iT`P|z7_HOG
zT#8+;i#PwI?DuhPOMoEf?Eof89p&oNUU#Fr%aA_2q}Xp==E4;rD98buLlbKKYNt}E
zVG~Qm9f4A*cZE=GjaDuHVOUn$kh|v_?X4M7#qclsx&j0^K$id3;t8W?MwdIPni>{<
zqjJ8Rax+?qS2t^^@T0t-bsG+m7A3DwKhw%Wo1QuPLuXz)5G(hQx@Zb+$GzpHzj5{(
z{)|s9dgnAe()6!N*;`)YruV1!HR_HB&!5K3h%0iVCWP$RwXBGm;5Ds?D~u|5>CGW7
zOQRIq7^G!D<bk2ihWb|8W};>{8C~R~At@^(QdY$y240$G5|@OvB^eocXzKByUD;;h
z6l7YwSP^+@vWVE}u@%z(u+M)pkRBpyj_^bT0C*Jp@1$V=tB(44*EcczANGHbaNeCa
zT3_A2QR}^(B{YAid)jSWGrx?eBh@soHRaN2Cp}O=HDe5u#FZR3hu=4zeLWBf1lK*c
zR;p@iNP%8%d-MUiR@Vt|opQ|DJbgN7#=rEx?nk$RzrOOuhLe(-V#pTHGCp$3ZY)%i
z`YUxxJ?DvmN5(kmD8@KxExvMRya6B#V-F(8Kz}8xGL>;s!ZOIfAj0F@jYn$x#V7QY
zQ9I#oCy~&OSLQ>M>5PDC4#gn75f*An?uUq+xsL2JL{fA_PLhJt^-B;aW+b?%g)wl3
zoUPLa1>tif17pX>g(sgW@KP_R!p$8!Djwh2sE$xp&q`|ScbfhT?Bcz>+1c59P%J2*
zR-_*$c^fR`lNPnpR$)qSY;And$q}`uDLs`^9yqRO^RVIz@7ao;h|%;%O$~WBqLP!2
zCC8o$KiH@>c`j(%Vn~tVd0SzkOJHSTLq!{RfS7+3;6SsFX)ZKE0fOC5YPEva1EDec
zv^T60zBuCz-~c&w6+=!BA~hQ%maU4|OPjTM8I2^Ev+=+I?EZp@9}Rvmba=X~>u)-9
zaPa$J;^6z_^x(TIWT6y5E=%^s`C+{z$f3K`M9?Fz!PQ?T5#7P}A%MI)Aqc?#UVE{V
zLw6J!-#s+(K+1uk0}JtgYe_saao{>6es4)^z~d~Bl@TKc!tm^F0L1DB!iGI@=7LYi
z4A|{scR-jUEcXfjNDpP1;@)iM9$GfU6!)<bvJWE3O(tgYbdB=Hshq!??0+<Mc-lnX
z07l4jc?t8m_pkw`N+Rf-(dkBt=Q8|J*pr<|m>=6i3^{An-iLSyU;*8874*F~OLT(F
z2_r?b|61R`i@?V4ZEIlU`t;=C!Ih)y6|t8AT4N^+ScWvvj|MP9$`9Ab(!sI{j1vY_
zHUbF}3T-mZyH&VQr0M<hJ5WX;z|WRKD~$8ZBmj{Q&QJ{Hn(qiJ93IMHZ$8Q61)*gz
z{SQ`Xs3k4Godjxn*KZrKWa-;4`P_uyuNQ@QbB6O}w`W5xj@0_B7J%pLVH{ngWO7uV
zmyV``3s0+2f84}N*$*`L2Ls)3o~LpAvHoX2P^YxT+w=N39`;kNCv$$`$IQ6kJ86d5
zoM<AE)L!&IFMD%qpL4&<aeY8bT<AdZkZUzGYXIEwXBN62KZGCmzzCMyD!|<*fX3Ju
z-UkmtUnBze9^wh;XBSBNl)!eM5Byj&vk^Z~!;ID}O4h<Evb<_!mVC-#m((8UGHOfC
z_q&#KhN3T%EXaB%BBAHV`euMUTuxWsF!?fkBQXiM^h`m!OiFvPjp_=Hgr<GmWa|>W
z7c@E{lzi@@UevKtdbekvZ<Jj&vo2UTkp%l=N3MGV!A${R(PyspHS|w%NO0{a20+8l
zfBRex<@nMaKhu7QOlAJg>0qeCX3(dS(XasVx$B$qvSp4=Zii{F@w`zEpuGxjiXjKc
zcAdCTsp1Kw1-6X>JjBYy&FX9weQyP?e`fLpG!i8e8#GD10)JpJnPQgF3uiZs2~y@V
zs|bfi(?dH=hv`H3afj3cA@>K@#l%gH&+2WZ?0?+%Vew=n#os8)7i}Z-zhyXdcl!gt
zqX!Id)Y4^r2avJL9jSGg;$>8s5){R5BvPMuGZjkeHY!vgDvC8iSWIQ0ZKXJe6wxjT
zlosaP&<Sn9Wd@~m1f%_tzny>Hx4;t$Q9oc*s_^DV9|4REV(@T=fR~MsU|0#|B!qw?
z3czZOsL6VZ8LOZLV|Ic!yQIFFHQ5qCS_WxARkXu7K-wxg+zX2L1PfAF8-lFbkIJd6
zsfB@+-uwDRyL)FZC)jqU@3cBBnMu6adI1e*i<LX({;pX<!LcRHC@+Lr!vsJ7oNYkA
z$VAFA8><@7>(*=^D|3M*k|oANRSFGXaoP8GwV#JUabD0HIX2G59yxx4a762B$;OFV
zX3pFPjf(cPm}iM?v$cmZ{z~6d-R-9Kpst15zn1wcDxT*rf2C2y*r(}nNh-r|w|;>Y
zjMMv&U?wtNMP)e~L}O?}Ghf<rut5$A%0R;-zE6WaJrFt&rB>Dsk^`N30$O!`r(P*F
z+X-zG$#kM{+aVWCzhtH&E`RHW95e9Cuf)nSsxMpov%7DPtHfJC#5n<DTbjp`@)XcA
zu0TP~s3p*q0eE=Kr<^8O3<^NE@!Jm`4tP26gS&OdTOS6jJ}&%;BYwXuB#RVlovIKc
z*y0ut&|Q$VR~?8pD^JPm-h)@b(@=+<Kj~I|m^1UVGfieyWWO-K=B3A!uY{1wjZDi%
z>MrWZZDff_(aMj7?_0^01FXb!=do?VE5L8tCVS33Z>{bZ4=?SJd%J3yvq*_ln^b3V
zb~SbG+hjphuf5ex|5ztOT66an6OrdU7x$<!v4e;9*p)S%TXG@e5Jhq}8TQw^<1Id`
ztlzqEuv4H(n9J6g7s4V>sZ0ibv8RB|K8bdt`~DzMMeng!m(C8UsVXDmuGc^8SejPK
zyvp7D8bGvClRsBdoj+<)l0V^6lYQfye!e{SP0}J>a5YP4!ND>yqb2VOt~KLvKn!S(
zGY)s$;Lso2mWuUv*FQkO{Hm?MyouSf>eynh&lZ1fMXhn$SLb+1Ft@FY2+af6Ans~6
z$9G;MQaCD~OjM!KFcucOH+O)MHC!B~<2=otTV>X`nWIR<b(Pw35M3R|Kuyz@?i1Q>
z@c4ZD8*kzY$qKrHwd+=gNek7~__Fe(<H}&_nKUltr#8nBpGIM7&wV&>(z$(fjSWv4
z>%{Ec-i#H8@)+ptR#4=9Unz2r7sWbogLx~BDCr@q=&R&o)`;}9Bc+71J;3Zpvs9m~
zLT4G20D{`h5U3OvoHA<J4syeHD7sFJ?g76~W(LEWW<PB&Kc!s$c&y$2p|$CV00B`f
z-~t(4M{%P5S|DOg;5c3<K1HF|kP(fIV(3)$rldQBAlRcFXn6R@M3<iy5@{(Eo!h=U
zM`4b@Hqj3=3lJH8#3CRhQ${AAN{xFwV#b=pwDmC1@W*o7rp1A;EyvK7hDlpS_pwTg
zlMOZMuf+|dh$lJIUT$$ffSox2KEKwRb*&+-bq<z2T4?FS1HVCpzw`rjl2H%-x0Gb3
z0F`u9A{mwCvh2_T8&3u}7(4I0?S(s}gb2RYZ8BlC_dD5o{k&ur50&S$(&nE)gG{X&
z5Eg*HXSY$=@^CLAvoKlH%Ar!l?yv(B%`lk+@^m6~Ly(A-n7bL^E&(5YjFc<~XeRb>
z?v&Rg7X3j$tX)zwxdzApR;6kJL;Ug5R1gsK?!}8~APzW9sufxl8<^?Bxc;9H%O;PL
zw?147uc4rNP&(0_bjLBkYD{Qp285HbR(=TFDaPDE%QH`W)vcdIV58jJBSC+?|1gCv
z52gcn%)6S=)x-hb%HOh-O225;2iN|nOCDAGWl9rg#pr(z58729gSBs%Sa%29BfJ!W
z;OykU#EX{&J2K#Y8lMjHtrM;whsndK9E0p*kPTCn8DJ3ZqNITo>i9`B+!g8GBNF(D
z;KR#oftGpVl6$;Xl*J;?f(!o5w@UaRl$W&?4S8F;@p+v6B39O~(gFT}Rg6sWTZ^&u
z-PzkwX(8H5o`@R=ldt*+JesARq$7dQ^i}<mvej(YZanTB=&04BmrPqXkRhd=$Przy
z8D*_Ir5agra$lm#kwjh_$XvljjhZ-p#YahU+&ENt2k<Ql;osAOl7Id|c~#j7?cHRP
z>Tx}$48am<y1qr=7aTt^Z#VJqR5y*NT|rC+!pH+pbJp)&UmFG&;Up64-iw)JKk|Qc
z+_10P<V9vMfRwrxFP$DYLGlZCN<MV38}EX@;PEdN?Y#M3XPq1bnd8T^{3bKYzJOr5
zZql$OIY`8XF*)qP%9GUtDGOdbJX5|OT(eiXw<3+w8q1<TP6FS*6Y07#G2)#kgT4b$
zX-e=#y16ZCvFsaJolPL4PP;2SjM(kt_rVq93xqigZ?N=E<KHz?9hF+w>Z243i_PJG
z{^jyJ3YfiYBa$6cq1r5!Ca1F{7u@<K0AI`v(G`71tGvH99iHSS@#fvnnI3NLV71~U
zv}L5Y6m4wxP<7sNr{Wpo#NF-oH}t>(ag1s$CRf5TIO$8LdE=d=jJ}#OblYzeC?H0f
zM!*O00UGmhKp$|#H#q#?C%kLmYJ{TI)<8qQmycOt;Mz`qncWxV28UaTQ73cm*@+#T
z)ZPtYDso!dDykwP17li=K{H02%_L^Eply_zI{R$U^atS8g?C-#I6f=j9>U{nterW@
zqUKoeWB(Eq%sevagRVo#gyvr$+aFcCfwyT1h3iv2nxLXzEs_Ji=7wFPv~GC4QC)&7
zZ`quhfbLI+2xRW!kzzPl9G$jpa(k{Jl4>=(e2RPzi|wSRdZ%b?Jb>kCLR40HF3!UA
zckNzlKT(CH^m2d)R$X6eM_+7iVf<D4k&)jstW{&(Y6{xHJA&+0)b%#EP2Q)pZ{cTG
zc0Bm)D2^;udBrm9{UIjo%=60jDMPxp|1DHMd;;b6rj1}j2&$bC^vjR9A4=}QI};Zf
zau%n(u&q*@7;kDIXyR+?T+63_ZOK;F?G>di*xe-(^iSBu|HIfj#floVTe{Q6nzn75
zYudJL+qP}nwr$(CZJd=p>2&s=^zMD}rEb5QN>z<9-e;`t1T!!c-~q)F5wf0QJxW9J
zqr_Oj^0a;EBm_j1xJVE)yv}{vCES7!&}poT$}>g|bM1&`5&S*A%fC}|amSpyeTeAw
zT~kwco@rJ9T)r_RexzQ6aFI07`lDP8{SZW54acE^5A)#b)?uom64uuen%3Lj0NifA
zV<^~!a@$t+ul-2a1zMHBXvoAn1!w)6Nf=Cp<nzU;6SvF*z!htE7@D5K;mg79pYIPc
zXgW$(XvkZFxsBs+@4!rQH|zJs?Bo1kAm%d8gc&Rsa);^;J`MlrBb<@CRqk)djT;T2
z6v=%1fRr5{z;gQiZ2Xp!5Oose*4p&cc@z>LH`Fd8A+UfEOFG!!&Wqcju5e#caYjs~
z$ENQ;hf47V`b>LCEhBIx{t(Q=(P+Uh@~~n~GX7C1NAA(kh_s5-<q6_hYexkmhv80^
zIGJHu^)Nxe0Po|A5v2<o*eFiV!G)uR-TQ>Y(z<k1m0sd4n&{qDHXrS2&1=UbSy-6}
zE%+G|v!eIw<;2@v)+dn%CR=Q*FF})+7L^zkGOtaIfYSM$LEv~X^<fho_mru&^~A*W
zC8~!+k_?U#3{C=dKJ+00>q@hh^K;1SGWcH8pc~sG{7G=*kKebyuUonT?A*jqkC&w}
zbsSf(6pDDB07Pg%AelhxpM6Qk8h%J+DmOxPzic&>#nfO?lj+BLNNDtrC9aG0B+S=y
z?9$#1tRSBjN>kz&>F$M*>U<WbV~_Q(@0kPny*V1H@lA+X|Dc4w*CrjOw$F32M#XO=
ze{3L()6OhINxs(O_(as<@gyJw;(k$KsGhRlaqrxJ#f)%XW%G}%Wk>_(Lk7Ug2+#Am
zTUB%<3pF1~xylgCkw$wZAbWdMZnL)VYC*-5GqtsZVmH5j&R=JR=zGDdz)baH)2<}E
zm8JJ%9q3-<+o$sSGzwA!CrdZR$~f_R{P_wi#7{QKtYsJX?Be^a1MuE0XA-R(ffG0J
zLaL}u(Bt^OTZaIyrM32Paeyk1nhD2EeTtq$_?fHFh@a$e9M;I&)aHEUmRgovym)Z5
zAr~5(7*!ZOxYBeb)2qDCl|C7`?t>t0l8@|A82-m=?h*c3C!lEezSw<+^5V%Rnd|X;
zjB{j*b(3cPNo7<FDAR5XBH9)5R)u&61OIx~+e<z$40>xPu{zJG+=*Bf=wLHy^~)_$
zEWm0FkMrAfiC^%Uz|{*PcBvp2-CiXWT-xSAbjpiBRY0}211y@{n56_k7pU%034AA2
z%dq)wx=xSjbm|S#w-p*TUIB)mrQD+`pgT4od2V3+dt-m$<L;naYt@Vl@MWxTS%0Aa
ztI}&0+OZ@0FAi?;@B4o{S^p6W|Gy}`|BqPs{~9=tot2!Drdg3x8IzrekQJx)Z}5xA
zuUaY~B(E$WXOX5$hyIVSIQy9DLDD}6<1E_$<VXLv1ohurZry5@j*DWb-!;1S@>T|;
z5ynh)EP;@Te;AcoxJ@WSyp^!E8kSpF#u8L$NEo7CTW{O9Jva$Kk(<kbB)4C;U+pzK
zW5;BSt!BIWQ2SYg316alIAIH=uV_>upMBqt*Y^{3er=y@NY1Q@1Mc0#e24aP4RYqh
zGpYvET+WAH&jT=swIL`DEcacadBiY191+C!6)@WfONt1GRyCIngqet#H?<3VLn*4W
zVL|l;%8~yhR&k3%&!Q3AoDxcmL7U;$5bZh!wC7>bsZ*?{CrOQLL6T>Yz=h$&iDHQj
zFd<Q@4?Zq7&c9LXChB7frd^H`znGXG1nb3)i}$riB#800UT0=z+CYF8J$34LHL=8I
zzb|N$Snks6F&U8>P#pMs==(nk@$ItP?}18k(Br>ELkL|F3!M9UyZj|g3#Dx_N4PMf
z>9$0e+k9Nr7A#>B_*1H5;Kd5z>*@8!r%fu@L)*4&xy@z~0Y?`6eWE_lHJqP>#*>h%
zMHrvL1*=}H4v*t8mge!PZ>Yv`y|Vz=W1|qR_o<fAqWu9Ca_G9pI0a^qzTghi6dO8S
zt}Sn!6v3enLCDLqmG3o4_Hs$KOK_(UUwam$p_HC<zTq!v)_a7;s7z*4X*&}`l(jL~
zy>4LjZSpM}74NEwp~Sxm%HN|?O5d7eRBC*)ho8KE;_c_zjYHCe@+Er<KHIs|nd<eF
z<3;m1U07vWBTG+=sfM$EY@Q}ppc;ORf?sbof<=Fx)FHn;OjLD0q!R%)+I{rGPyh&h
ze4xUX<M06VP|p!F42LJV-O3uYR)@=%QXczxEWL#HOm_)hS#}AG6UjRPVw@^*1($qP
zf`&9(w1WiqL>?@G40W53c0dLeS%3LG0aGzss8ti#6Bvd9)1B5d=FCqKiI#{%pfAXx
z+xvB8FVU+!sUCx!M4fq_kMT=o5?bs#Wzhw=7!7XS5XlB7p1KjM4DHSrFoiYYoo{~2
zyoF4*9v%i1A`ZtkjDtW@ACaS;QTjib<B3tWfPbq1540yP;R-&HdW^hc#c0d?(e^cO
zyKeHJ<3#E*^_I4mZ~pe{K{p}JaKpvh+<^6g#I~Pgdh#Xo-mC&eDKP`G35WKLgFYAQ
z#)a*=5Z#^sgin@M<g}1&_T1TrHyMev%$e+jn4aogYCu$CIXKy3Pv*Dh$o9@9w-w8V
z#h0M!V(!io`=NK9Ah~n*D)zUI???4LP^)J&AIyOnDd%*cd#lXvvn_tM{pRwoHHJd%
zC98FGJKjL=V>~8pZ$4ssqLtIMBi6~o-VdX!VR-+6Exl}E)lW%lYimYA<;(U&e^T-+
zLFjLTk*X8!MLS=Y?VvEEC$wyv;*<#49WRGPn2FSi?9>z2$tEGyk`xX#SCp6OjN>PA
zH{ZTYG5MU$0lFBzzNJdc5u)vss!Sd7-3Dx<*s<g>{g^4lqHocPXnnkfF-;qZW-bz4
z<i%)p%^>Qg_j`ZGMH3Cz=A|u7Cxk154I_uyiU@;4dkwE)z(QnU>QWlPYZHR|qy>nV
z%Z#z%Z2Lgjb>*-jUt}1rqm)X`(^7d1#<E@FY$ZqtV5E4YN%<+&Rh$SECwAzWHKoti
z&H5*WVV&|>=L7AY9Wl6eC|B-|%6vm<4+J_GN|&3iff9Zxa<RomRo&S@Rizi;d*9yt
zoIx)4G3;*-KlWSx;y8SW<$?S>pwhit^T%o-%Tc)L!>1``Hy&K|moGAb;WVf<&61Dt
zoWti#Y>nA?f^7cWh&R<@+wc^tB{b<s>$t>JL*XZji*M?-ub=iZ?^5Ki(PZ<Kk_(I5
zfpQAv0#)XwLe?*d{lrX2Rm7v~(D<H=9lLK#1HLRfI+9-^WaltE_PLh8a48{Xg(C_k
zF5k>#WlN33bjuY^Ua9D*_Y(?yjdMDjwWqu5azlAXRUNGn?+QSNvfrN9Ba)}Z%4!34
zErHas$|{_$6tdK-O|WN~+@jPJ4(J^Up}`cNuILa1)eY(uXp3|p;vI|Mqf6)l*+`JW
zbi456)i$fA?2j=6Z>@o-cihB;%<0Z}GRnbrnV_I|mR<OcXvwfCd+x8(x3Tqj#k#`U
zB;E92=`3-)H-GB1=?zLAHqILPIA^5G3gt&ub0YgSrP4`|kQzJ826ZIv<Q?N_H)G{{
z_VcvNa3~{tF!?gclT2~_or|WvRaPrn-nI=r3y$j`yQ_M4lmDMT4V4I|o3FQXNjetf
z>%TxJOW4YD>$87LLs;Sj=ya}fyT7e{_13__Yz#r?`o|76>+QOa5Nwao#L%qMPVPx1
z1h}vuS~xw)&P901)89t5E(y*;w=M`yMYS&pE;?_X_dZi1c^+2j?WjeL^Q4Ym)rN8o
zJ#+v3(Q1Ba<erUj%pW%bqGk?l_dk*hdP><M2E;a4b6pqm#?BuHD^VWT0s}2B={l;g
zJaM6iOsdIfz)p(Z`Q<&vQdwM12n4s{#EAV+#LsD5bPYPlB=kHoCdFr~F^R!^`S4y%
zx#~ei#p4>2y1yh*PiqKJ<TuBNEOT}Rl5N$D^jNwcuuu-yeX!-G+}d=cWbmZFv1)>m
zz#A=G7%mV#{Zmsn{#W!UN2g}0uA%sWOIW$_!e3T9(l?$MsqtiMXsUyN(_?=J9;WDb
z+8^7;7XMoUKNKExp%+Q)_Y>&+7Y|rnrm!}K*mvr!N6ulA)&P>hn0{Gx-FawN6JQe@
zB2F#ux#E+{k5!NkqsCFoh618MqfX1vBYcfIuIDFiEW-{&7YjW^kPL%#Qy5AHa5C*;
z8LiBOg>uB;j~m3t-|x+oj<De;v0c}tDq7@Q{B#BTa_7*Zr3@<e`SjNa__~~Ybumiy
zv6LF7abv_Quf2J4=WI;}@Z_C9F}$&xlYLoPqwwUorMK3WrR!fC2S<Z5F1{47k^f|;
zx#g@6Ed4`7v_S#@Q2tMXM*qJN{|`d_-$jk0leKL#>5)Tf_f@frU*+?}o3vacJ5{oq
z%F>&*)rWW?Rr>Ka&r`lXa319cMxoH+2ksqp1}|UxV7+`dfL7BP^6tYhQAF$J3HsZ8
zfp?2MSoDs>g<q=X**E;A`$ouF?xYkMW|QJBK;GZu#NcY({K+|tH8$8;h!H6O1#;%p
zm|nk?g80mjjeT8f+j@>vOeP8oN~M>SAT(k1E8$EI%3|f~V?hJ8<~Ch8nywpa(P~zB
z5GOqTRd_MuYp#6WQKH+GRl#qGuvbYv?-br^tUhiDn`%#DD<V{(u{`PcvAO}nr-y9&
z+$zXrTR9%|5rNvq_avRha8T;|b=lV`adSW;7ul<_aYHJp;F4T$e3^lmnv&eH7orll
z8&P=5<c*_?7nvPO#htHnApBYMfiz}I0lSlxNoyK6zFC~cLb{H+?-FQuTpO-dTS~Hf
z54j0p>G&3kf9CM&>057e>%49h$_v4un2PAP&y4r$K7!~qPUr(Pk8*QSc%Y-erp;rN
z<jWTM=OxM^6V-Kah7m5TLO$;Vo_`J?zwhv+D96^+TKo-;V8yJfQ`gJCC35xkS)}Z|
z_-NL@j1%vVyM@xs9baa>P*4gshmxMJCDjAEZqSYH1K9}f&G2XV2!_L#rf?yzK*C#|
zjqe2U8T-^Wv@oq;GGCYbl*@vF^q!9LZr26_+@zMQtD#o=H&mk&>R)-8fUdYs&9|~f
zJ&J;UYDgF)<(?y74CSDa5^8zU!yr?d<>NwFcMuR4pE#$0Rl$12EFZDpXI8pV$9(dt
z+Y)=%<xM|aX?=#2M%Zm3^UPIs1QQ#7(G&I>MBG-miom2|g_n*ssA_LSqA+W9rGl~i
zyC{%;$&5mQZLL||X-%7FXw96P&B|6^XnmwsIvstZtl1fBIvTbq<*O$V{lsR?)_QHe
zmA<w6P+o6t;k#KkQd|CQeTsRg@%^9srhUSx^y=Tf*#rBZ8rJ^@a`At8)nqGa+iuV!
zd!MRqF_ufqiBA+sTVRM$%tcTHL!Alc7I>i_P^`sYC*`~Rdau3%L1kAQlZ@YYkDlt}
zT6Qk`p~ARzpg5sWooVU%TKaZhc!df}>180Y=62qZztJI5+A*Ry642NsfS7Rp9f%Sm
z)Dbfxh(B>K7fT~XFrp>|TEdl9p!U!2H^EqArtve)>EGA|I)q{rXO4|14<eC<h}$I)
zN09>~&@F|0Ru|I~RL=Te(9kocJ^u%Wwb6h1qVhXY(G#N^H~NezQ4~^l(m0v|1xQSz
z2!|=OJ*sRps^kf*%^fRN)KSbLDQa33mw2PpW3_q>GISd@OkHy5L~6o2!HO^ks+-$9
zQsW4S6EYX_mU0O*z2WKZC<kD!aBmDeqZLW+xl(*tI<R#I@gZ={j|6A#uSHGPtoNcr
zX<OeIFle*=&B%r&2#!RzzE8<5t1ec6Two<9EDo_$J-f4Ky@#U?6S#BHKgp0Of!o+k
zn)EsX1UO|zXix<-kE_fe6|}^A{>qH{oVWv|CHhhRePhrcrW6n!keQm-?k0CGzUgmN
zkf)y$U0kc}uOYKYr~2IVu^<>De^E%;COJW#;LOn1(M?)+WR^$<ET_Zsg&+i9Z)8s0
z2TMmK(WgyzrY76B?ybk`=?F?G_V}VJI2;=+#pF|t@+5Z;K<ZGcAmG&JgQ-EA$Zn$G
zmR%;>D@~sAZYHtN@mRoiER@M|VjH^N4OnxwW`CJH&#18-cUiA}1lFLy+u&90d}6e1
zUWs(y)rOuBMjdZFEE`r@j)n(FmN-h>tvXOtwO)%gUyF`zuOB*=5ew!04@bG=VP>E%
zB#;TY#NC9G5)fY?QAo<U36o33k4?oSsrGBZY<FTyOQQ|K7L0xy&I1oS7X4jMqqa-e
z%cR)Rb(+ZGN=WYqp2wkqVvj*El~zM$L`Je5s5kE}8_fmfa?f|V5S+O?F}dZ;@_3ra
zdmBXMyx+KT&k%or{;Nj7aYnaJjt>A3t_c7@@jp6*to03PZJe$DyEDj3Q{3~gr9nHh
zH{`J{$#{2&?z+XGJ+TXgFCvI!1X(;W$?$Y_ms1%4T-+ON8%PEaUyfV}2Znb!*rU6>
zzPe^MqNl6fzUqbM*49SrQmu`R4fh*_jjd<-_-9($&*0U0$Gcf@eTj{YK;l~+F7));
zB1W{#1vIwWrPPmar@gYHt#h~Ja`SmwnsL7$+tuo_wy%X^A3t7hp!wm%&FbQIU0!~r
z@TwfQgD(5Ex?;Ss0vqO!+IJl6Mfs-Fw5a;2#9{uj(`Oa!@AMoCtOzuHrO(oFo-o6R
zOfMuAIU($Nf<&YhzW?Q!mF|tD@}E5m{$;!h3yqO3VFJvHZ>h6Puzz+TI8Z=6s0slZ
z6viVtiu&+A+jH}Vs|1d6G*rEE8L#qt%mQTTzlXIL)9HG`=5dlsky3t9(P>6kDc~$6
zbn^K^&&*i}(6~f@+||JH@jnU)E_6*Lah4_V>86S=zV|zvPwiS5pNlBwOLw^^&>KwJ
zi&LnS%9CKqfoOunG6Pkmvb<9T+2D&IZ0?26nasQ0g%W||6`4j7+cQ6u_qzootW`8_
zxlfC#tA`7a=waGq!%lCK8Ij#6>ln2%xPFLj+!#}Vpo((EPNnq9>n}5owB?@e`SRK+
zKE2>O_DTho%HUjb=VBf{bhQSocaFVoAw%Mc(jOG1?M9tIw}gJ9#lIn`QWvNwAum$<
zm>E(cmmFCb(f-_1WrC2oNUA5SFjWPo;=4Z`1y*5J5<a9+QQ-Lgf|m#G*AdVVh8ep}
z+ubO&<f&7bc5+M&vmw-j5m}Hs#@!OK+QMaA`Pm=%vi?5i>1>wdoyeb$70n-Hl}-3+
zOO}}xQ@u@Q8JSJDl})PKp%)7o)ifEiDDBKT{qkO{89Lp$X77dEvP-2^{%avB0HaMY
zGM&B3yhXMbRK?A5@W+<roQUnHc}P_$4n{uO?|*yfaps$pwb$dmhkw>2RA4(o8EC3|
z_~c_v)y(2KC$TMqs9C5k{iEn(s=6u{KAg7hLk*#`OKpzcuq%s#>PNzpvqJ<I<9&P1
zYz#CzRWWo9@W*?I?J-c0B)N^6x=DD2)3c=TA=&e<qaW-feJ&KY#D=KeTWr``UXDW-
zZg|Db=CY$E>%|L?t|zN5;vK6LwG%GzOmLj6QbW~~x~urmMK{Bsus1V7d5*-3i?*vi
zYMKw${8^F&hjpPD(%n@rg7?>o`m6AO&PxqPIVU;ou7<>n&)`5s05O5tC;xPql!M4e
zq&Er!`*mhaSU6`5JAn38B10+|tydWC2Vn;mQgBhhzS?|9|3$z!X9*TcIipqJ7g~8r
zGtgJ9KX1KrC;*G_|5Z7@!G@)FFgl+~!-)vAgSI^;V?<!IrAeqSR>gpU1t_nfG)IKx
z&!@K?i|=P5x>Uo)UudxeYw+c#onDNWfLTYdR^aAVxDqOEpapm%;>Q8~Lr<?{SV`dL
z1D`EtRMg}V94}{7C5jE*K`5FvsLGCvuCJ9n;epExI@a)mPpPO^A2({^@$a@k<_<y3
zGv&tln9lsR>ENa#*ojO$Thzk?8R(dwikK*-Yvw`4Qcnl6Xw32I(SByCZ7&`EMz)Os
zO?;=^x{jM9O=#1_<1}3^H*8zjr{7z^)P?SxArL#kWh`Vgzh0>!iGIt1u2zeKAs`>U
zM33AccFng%fTx}-#JHMx2_yz4JoN@6RYWX{JuHc-c}p0s>^9{<O%)LbE-{m$4WX0V
z18=@FfGVJCD(lRY#F4n*x2=43c`O9z@cDM<);qIdrHWW-Om`tQui*AnG(xY_;h#>-
z5m~qRBo7hnzW{Z)#PtxvGATE<bd(mR_Wc=7t<X6b20qsSLrpzh$4-8h{A`(M@~@<Q
zIG;Zi<$Tej^Dn7L$U%`1Y6=-@kjXiI(=#k$jI)wm_IV9O4?x?>;0wifz3@ikkHiAL
zz(T1}j4?X2Y(S0SzCU0>JUN0mDbhDW<!4yishkidg3ebs4<H7Tk13c^9Wj)+A`Wwc
z8`50soW{Xy=5P-sBx<hABhg4skfaiGijZUz#XHsHOzEgku8-RvV$*0C=1fgN?nU+y
zli{CSW5k^~_SH$Npan6mn_p_8Yq!V#M4aP@18flJ>N>%m#OXvFYT|2i)#Pu$NVowz
z0<ZNR?l}Lye`r8m3-NUzm~+_%hLcKNeXCk$_0+%fxDMA;p`K_EaE&FVtO=Qjma6%0
zXpfFEW%9Up8?r0#Ur-MWoqyL&obRdbBT7C60Da~8Uw>B<*xY66s<v;%e@#>mIQIo4
zw*F0FJbp)A3aw)1BH^rtr{<15@HJcvB_|p`-jWq0HKk*?S+TR*U0Y7`RjMvS#ye}D
zc11S*#V6}Jw?p0UFr7%eULFAKyio|un!|!cKJuY<4h!oM=Jz$<QG$I}h^9Z<S-S_m
z-5rbs+B-kC%W^swS;Z_@ewDVxl_UKT$FMs5XXGDE+sWZfSLgubco&l~7K4~)9C*wK
zm!~h}r2Dnyc*>u-Z=I(x?i`<%5wHTLe4;&=w=ySpEYUISpfSOc+Y9$UWj{Z*4%g8t
zXF0$7n|&2jzYUnJHJ-aaq;S&mKH&cD&l%TjTIBB7-uirp78HrzBN&`^qybSC-6%vz
z{5oN99(hV4DAObUHi-B2BkJ(koK6R$EvQF2@~IUm6P!trASVyq@w0UxE*z052#Rd!
z?So0u{v~dA_xA9<nDB<&gv-iJamU^E+52gl%dRjZTt5Zfk(IO#Z?4yc`pQjFZ%)Ej
z4N~Zrm8=fexirSuyIT+?WYmP*2eJ7B%^;Z2tVD>h(Sh!S_0X0M*G2$O$2X7>bYTA}
zaJvC?Pl)W1<d|XlkPWXc_~Vr0_*s7*BB)h0oZ=prhDDlK#63e2?_Df25E?j>%t^R^
z!w7mFbJrTr2E+}P?>yF94in)?Lp4npbdnuev~FhsiWxze=)0O!ABO~MPW}_Fv>_42
z%tWS5Jq%fDEfjc<(B)|P0H%n?C9-wI(}56MIGh1ak7X^{GzNB}+1bEB`JqxH4kSPR
z>J^!2=;m32uAwfI72IO@icA5%MlCNn5K^^S>2HAi=b#niz<Sk=nb>Fj_QhJGg?+lS
z_<ICv#>Dz>I3SC&qm|6}OXaT*r@&EISPO691*&|y+bRFhSEqVjUN((=<Y!0T#gd|4
zj~-oVhe-|K4&<IFopn%(N>H3sLj?C`91w-ag&7fdB8Xi9#H9Lqf3yQhH}0RNR6<#F
z(r~jwnfe~ZrSe1jV3GsK#v@z#YCIa3#sV{02ofQ(3dO-s;Adu!iciH&*6qBA(on9S
z7~2lljc77*qUVPoah<T>p1-&j@0m`%iO%cy7@9b<F*OkyVNo*VbNfpzJWlD%rpN}U
z7}MXD>p1pPHpmIkPo^qx4q{gvB6zSI3)8mnu?|fzkd=jspU-~N#biqH4;tD7FwNM#
z88dDJP|*NOm??q`?dSNgrwR_xSoBumYbD2LRbvtbS4ftBGSF1aB$$-}1N&#zkyO}M
zmM;;4qDrvXU|y_{&&}PU^L3jjwC2R>#*Ar$KnNF5Dn`X~$dcg2wyjDPon_r{Q@Q($
z6t6m-*Hg%dWuZ606e*fwv~XrzLlkR6>7?N5I1-sbW{`l`!odtGkfrg(qd>?mW+OU+
zpaxa};I&m=)n_bd@$E-q9i={Z=t*9<kp$~f$u+Z7qX}oj8VcIjPT%LU@94!wpbMrK
z!2<NIQZ%4O>Q%Kx=5mka9#a+{NA?q`kVN;~@39Y^&q);d_{JVeoKH6shtMl;rP8SR
ziO@qOmpf}=&jYqgPh$g%$3Ik7Y-gM31`sk&KTQ+LZ-3aex)<JJh-a0#j0yzxW!bBh
zwPPcB)<@k1vc_=k-!~R7t=IRX=8!Hxx~dzzXvIYS*2)Mg`sUjXB>CO2DBcI511`KK
z4)ILnf2Eq-0)Xv9QfMIK(}4mX;zDB)j?n8)EE=E?4jJ&8xX*<^#_wacnO=mIT%Qii
zLA)aCwc*A8B{#TFHJp}B<N4~@@mUspN%zs?fW(=oFFskO%7SorFwiI!h-PMW>=H_B
zFxUtg_d?R0kTQE=HUvUA1SaS)1Hh%WZ)6;>3$N{r=$1#PxtEgCSEX3Q`O)a2R%W{l
z6mWVW?J2&DB+^o>^BJzlRZAVS-;+W}Z}qyeCVL<OeM7Cu^BaQ$2i-CT<UIksp}A)@
ztc;vNW^yX^akIg!;wmsY+OaEi@S{M4z5KAc!3z)Dhx4W$+KsiJj}|gO+3Uh}Q&utj
z2@}{(J_<e}A0PsH77OU^F?b2%+x9)!fN-C)j$K<6p-qW{tg7a{=BI6H*~MeSa}(#+
zI%lA27qHqswE0I0Nrxg77ycPqm2IPKDVH6ss#=|nH<9F(Y&whiTcmwyyVX%-EK3k*
zK#SIgU?)sd#$k!g%t4@$q#AM1t_HV@{;o<(-W{ZlD_l2AS1(r}{(Zo`h~yK5B4~-?
z=>~=*xe_bOEw&3tTQlZ$z%PKT$h?Z<>~tRvunfCpp5a~R<3-5lp~M@H1BGw=p_&jv
z``|w;enH^ECInLnWLKt7?GDAp%){dz<@8pXJ|WZr<E(Rx_{+ihDP&_3%^4oqe1p`;
zAvh1%HKta8D`y(BV3VndPwN=s0KLO8LGuR93{f21r@&DYR(~vWjK1yqW)pnY-IMSX
z-fmPOi^G-@NtPS-FONG6aE}DcT+8**&jjpA$!rj#7w$8*hXl*u*Ca$e1fVGSqhvM&
zG-8HdQfvp}BsmWuMKi3Jk04nEY){jG>5kziDXPV@Zye-JQDHvJf238Otenj2Dhm19
zAXI7u`ys@6q#h|tTzKq?Bt$90F_kDLq^San7D>#(D;9T%nwvI=n2HZ1PKc;}eMx!P
z63$Kk0Udw{eDqhfKgDA8v!1p-Bunjeu*Zh;*^c7nL>l-Gbj@xKoIf$au}wI{ML^mI
zvGoKA317xlh!XdnrkZGYJAe5**ZHc$OIPR<NGZQe*J~HE_DFFEt@XL80%j9s5jNuK
z<iMOJ9~Zx!$_gXtK1I=f`?7RhlDN;m&$Z3znIh(KL_L>6wIc59QjwkSd5w(_=g}wr
z3oBjn{)xNWKc9W4`-B<S?MNH=njnd(_3mHUv<V)pNAZo=plzR)N^JYY3x!Q9xWT*F
z$CofuGIA9>EPB4|{`**bAeB&|%BiOYUslsMq3a><j+@yTJa^vyzUT`?%^N5nz3EWN
zp$cDsHr_HcDDZ_r^$4%%Ndo;LMqb{;XjLK<dC~%Y$Y{wPFywmWJF@)g8O>^O^JkTV
zPsgF?=}3(5o=6<=%6)A;cJP`9*RfgdZ&OBt(dMpd>?;y~Ov!C#R}f9Kh)BJQz;k6W
z`yQaJ*yZ|HHWH2Ev`e%J1qfcIwz{@F-0%^qqO)*9R%Wd`jd5;w3e(d_souA%N~OL6
zO|X?#gDs~c?46O0=f3!8c~#%9bZ3vUm1=LKI}si}&@I)ow0D_BNT^#Qqmu+rinBX6
zj%k4zvT?3yft%7~6v;bsZ)9kysWSa@e<d9hd})DIT-KEp5t^c$6u<vxV#Ifw8yVsr
z1%z%K&K-ZGLECsSc(Q&G3^-C3(c!_UmIJ4~T&~bJC$|Vg?F@co)RkLB2qNgo!dk&}
z=!F}tNoy0}@cp_DNglutz=QIoxTg+alA+e{?1q*GsnFf?BmL;%RsHVb4w8HBBgU>a
zh?|Z$2Lbn3s6slcUWeOIUrZWWPCJKN4uhU;-3Ki$Ro)u6zz03izr{e-IXH!a8TzS+
z4b%TJLjZov-Ed~?8}y-&m5vFRZ7xAK_XhXkB`BsNe`HU`EY~jc`n5ovO+$>=Y?cdY
z<aEGYnyJZ|bX7((%Nk^dy(6>(yDa3U?lj8n!=V$D5zby^LeuMBJM}4bd)3U&{|D5K
zSLG&+7B~BO)r*mL(Al1;OZlf~ro%v5|D=BRkfqQ&pRxRa3+-ZI_ih_Hyyid}FL&d9
z_HWcA{K?sx1G}iHcX-X-mXsGMx+dmnqvG(IjGk_u8HpWgojH*m+TBuiUnl8a%9rE#
zS{laPzr3+27<_7*im{%ES0?PczB2Y-l@ZQ+l>N8-@dWdn=5>j}e2kw$jqcp=D5#v}
zAHJsJbdW+s)NQzKk}Bv==p`o#7?V4}Z{B3Kz~0-AlEpL(j`x5>Hy^0G*4IDLwCDY8
z5Hw<_sPD99P0ZIig)^WL>5(TQ)v9o4x$95ZFLe4gCR!tr!6j5QIIE*ei_pEsoSx^6
zVs_BtjICbVGFG{PXNp%-^4ktqGyUaM^{$|&Dql?g=HzN=UFM`+{O$2(fSIHRpq!Ud
z4$^)hh@V;on-WucXwagQTU3mSvs}6WB?-PZ=TTs2<gQd&v;f*}*w2q_T9E0$mJDyi
zJ+wHfdIn8)ojz@uJZ8q`W{sqGP*GyTn4?4hIKa4*D10R_)~o#1>W?ZSfX^mp6+b{n
zSY~GpU$C<6*M0o&;0^mx5=A(<Ho>g$4$%UkQEsaDRrhW~{VYbC7#rhZxXP)Qqr&-y
zvcb(JvO<qgVOjFbchMMlA3+2D=q0))jQM{E0{!*7fu2R39w&2ubLns|f(2sLCNAA)
z5C!)o2#vDSZbT*}JnUwekHB{ZYiE0g14l`TlOI3j)R2ifYyq+nvRY}4BJ?f1X@rA6
z^eKH5b?Lx25CE1z>d09$o`VNUOIQ~_NBICkP4BAz!Ppg1ph`2mX|;dvA-H)*b@eE1
z9N-ecM|H8Kh`xk3&v9LC^VzV9C9(AQZ(t4v`}|Lp-;&Oc2R*hW7k?lUwRg+mzlZe>
z8qWtWjFT7m_V!_VsVsdq&^?%5GHb?2%~4ifbE~c91@@ISzI-n=`Nv^C3Wu1k<kpf#
zaLwr=+DAzlkU5J<b~E9xdIY|~nce+2zvIpnS50LrKc}5$+Pi)Ihgv80lLWwpvPzJa
z5rzb3)@2B?Z(rU7zv|lg5=b2{WHng6$cc%6gx<=Jof_DU2Xp<_A{QC)XAYL2!?<cu
zfbUP5(eF>2(IKaDx$Uv?$LpyzzT~0N!qEPt5?&jwvPW&6{i*eIH|;)QYL%;D+h`Hk
zXnreFLx+Hq6>tX-IAE^q?J<7-8PfEZ+qM3qv(n^E9jZJ`1M=1J(i^R%?O50a*E3rS
z2(#96HJY<MW5ZW+J=N)Glg6AcEwdP8zF_{ki^r1y+d{DJx&i$pw$|XUmO?UIbC5xu
zR(aiUZD$5>s|5RK%u<>!bG+2&r#_vW{$RRFZ=mA1u_VpFa%zAwe3Z@U>V42*r@g1q
zj%u&n0cJNHuJ-WQ619UuZ#fR3ezjwl1tc`f`>q;Nh0tNfTW??1jFYv5)MJ$ep&t<S
zDsbC!iu*u&Cb%lt{p;@6_2@3|v{~AvV#l;vBK1$ZR-&lzTS2I>H2?d0<}a5CZK05~
z*-R1PV!cwx^_QWXRdycA4B<k~=me=-9i`<m>#mtbF=?@^0@)bnqK+-EDo{p#rC*5i
zOu(s*prQe>Y^I@(O}XBLbCPI%Bg_h6B8Ae|G|AglI|of5g=d^XFF7t4!Dc&gYFS`q
zoyswqOnB{uIA~o3e*u+x>ZQM+kWFiBAkoW~R%4!xP-{Md7im92MVUZw@7TwF%#oz%
zM*L<K;(TN>vOR9^K|;o;x{XL@Fx^OBr!&|{pQOlntAQ+iQUeF-IHQ7xVqha)rL90&
zKdbJU7@BInVoFHuI0w1LOjwg>pHdd8^+}h<`@&YbGY|gfv2LBIHsgfi?!sILGAHLm
zc`w~u2R0}B#N6oHc##`ehj+Sh4@Gn&)xSK3p5fzRZEEj)AH?vp^tIL8=q#-Ni}jZC
zp4vi)#Y*+E^f^B~I65dm9~WWF&vHsL*r=h^rBQu0l!+<YC=>VjR2Ng74flGsfw_7{
z9@^`u*gQB!!_Ew)b#IPyz8}Z;T!PHv2`15Of$6G^;>f_{Fa+TA&;$UjP-M=fS|plY
zD+W`)EduNQ)T^WB&;%?b1`89tM0QT=WAS}I3riM99=eGx&sC4`FT#0=dQ#H)EFequ
zV{PZFOU$If%LHj@iSW<!yPs%e*XoTkO?^!U55n~V53>sozC)re&<mU1`738*F5nez
zT^8c9oiw0yq}!j0ViKptQlZ6wZQ9yd+P*!#@JT$N>G|aQeSZkJpyX%vQ?}hbj;&Us
zx@r=yznSdyL#HSokBrvDgb_VS-v-@2McXJ=1RKo1;8Nky=C5vUh?dnP!4T*?Y_aO0
z`|%u6E023;n4_Fx_u2-l<>t!pvCUi`Bl^t#ip1bMR+{D-8%XFT=_SoPA?pH*tUN5H
zhSG}{H%JRLboT&e`tXcPTC$`AMOat{TcP6(e-7bbX2cbirB$XxBCs@O_*5@nrCSA;
zYVwb>U}tgE7xAe?9UO||nc{Daf_5tzXR$OTEOEy(2qzsNE_xv~R>q190NxRP^4Mtg
z#gI?S=r|a}HB$DZ{es6Ox6z^Hrgb0~TGaQrm=XIipjf_gu)_DEmTq@)`^!ct@s0bA
zIF$wTm@fQVM>;!SaUR%eH@_pku|*D8iN-UxTcU#_tcq3*JNfLKu7G2rq~c?VKi~xG
z=bxf5708(RECt5zso@e%<BgmJ9tabvWW{tu5<Y^Cu5(-lrDc5gaY}Q-dx;`%(D^d=
zV?HY*+q{#DYXvx4EuKbjGc}d7;-XGe%8?T0w<;cjjF?+1I0@c8>m!t_WuZqmVt7;4
z*j3h|_&Vm3HXzf95;bJLVz4t;82Ko$&ec)Lj29uPmUo8?rAK0|;oQEWPEObKG9AA7
za{yvXf5x}zf9O%k?c_J+aiUZeAIY=sYv;~Rcg0bC6Ja#6GwAsQWr~iP|EMlsrB0Hk
zz7sXRq+dm&bh9O#*b?uk2*mH6Y!c&++)-cy$@KbGrD_EZ&gAgESO#(G#%;e0m_(m<
zD|8o5;J;?&ZJILPZ8!>Pqra7^_`Vq3S$h>E*V$^(z_V}_-Q$K>sr%^y%Q4uQ_2P;j
zKfCmVGm~n*xc98p?v@-#z+g1#y2pcCWUN)T`LuOm6kT6+d#eu)VkGr4WKb<&uV|tH
zbw9bohD5FMZV$oVckooTm4t_Q)@&2WpuB=!&+9CiCTBTk%LeT+tG@-oVss~X#9Ugm
zd~Qt`PyfwnjT{zbI~~@t+G&JET!CHh3=6`n_&{fL<6xzn(q=JwrJX?}$Ga$iIZx|d
z2`glTfQ5QwS7fyo-*J6%fngM@0SKKMyoMsEoeVw87Rc$EoNt3Nl!sLxT;rPS`1L18
zL(?}JgG;d>U-eNKgVMP+Gn>!!3vBk$2(&W{4AW8SKtGoWxqFy?HTX=5?ex8=&B)#L
z0V<jwZ#ACWA^Qrj@-?jN7pLaWPP>#2jQ|<B*m1qOVGd+c2e9q)EY!JaQeXK@dzZ-s
zt+4=%7<zhjt@zsxjMfSnAOwm|D1?KriO~9u)q<^ZwUIM_%T=Y;ki%fbORe76^!R%+
zFca@UA}^3qwceU~iml2q1N!p$j>8L?36J|)3k+PLIt!=;QiH*2$67l;ze#^Pa^j56
zhSlhV4uRF!Hm1?pn@w~+k>K2+Wl!N3TuW^<j_w_hi_I0vbvoE+<SVl0-%ki)O^`qd
zCfoqSf4bRd#43^}wnCt`OjvFxM=T9cF>r2f7)PSaPI$`IL>c=x9!69toN9>@C6G{k
zrbAEDe7r=X2A4eyu2*LIr>^U(zwxKT%jP9gdGh&RRwx5C@Rtd3X%wWA6O~yM#9XRA
zkB3l9Fal&eCISSFOT*iYAq^9LU7qZp-?hJW739Rom{iO~n+*rgav38TI}$b;OkoBA
z7Ja&~d-#{<{rMhjGsWcL(@~1+9TW;_hJR*1>A?{C=Vc!nyU(We#LWWQR1ber7#4u4
zZ~puE$`|kUl80vN>k=>7tjUNacq_ErBRYk;T#g({xOtf#jf)mj1@_RjkKP3E;$I^|
z?`=L?ovzx|7{*xds`J59lJmq$`065y7D<fYUnIUfOLk}Xju52KQp+{c8c`AFl)SAv
z8Sm_cIwPWMG{h5q63Fv9@;lBr5@t6#%r<vw3?V-`lp(<8-h9Z$sH!4ACfa82DqQP|
zhl2Q5nb;SFA%ot8<Sbj8(bSP9Qihkn6e)&&2byv*BJ^*;$YTVZ!1<Dk2;KYJg_>Rc
z5Tl7{dX}&E`=A&w0~x6H5^K69HCOC(t804w$9&GRWC;<5EjG+(8L9fkgoSP#lcd?Y
zQ?CGPYwmOg+q4e*#Cjudi3Z2aI#G8Ym0v9VB=Dw_U9lX&1yWm`GMyY_b;egnuGr6b
zSQ}~usqi|eX<v2z=^7iGw~DN7pWf6-ix)e`=S%-uOJ91wyb)2CGQ<k)^AQN<?^bGI
zuyH9TKPo1%ll)Y6yJ3L_MBN?pevNC+joKFj;UEunl>AQ9cp5|X^K_|E2<HappodZc
z@^9>#lP6sx_Q{XL$|{4cC-y`am$j>0O|<!3QzOcQHL0vJp%aILWv%b85oVvI&RKWY
zk>C*M<1t^{+ca9!qA}1^IHL}r@4jZx^pW*Z7x!6XO!PUJxrXOv8^JAlA1Y6=0&DWs
z!3nZto7Jsc0e5ww#Rw=wTT#3Hz1-9))^y+A$chOXq~j}Bb<CbB6RH-Zvxb~*9~Omf
zcB0AXFqe9*d+c~`ks>myS<8-ZD*T3)pk3g0%PMdvfE+pems=bpk}xzGFv5xhnwr%>
zDNNG$yZ}HNKihGL_M-qZb&6oYc9yr@M;Lt}+<rO)f`;&yZK4o}qZh+LTRwG?*(abj
z5RL-L{6|L1BcFyhw#U^Lw+gMmX5g2vN-=&d+o@%}jy3Bz*NY1`75j6Bvbj~a6ehBS
z`kT4)%V=dH&7<G{8bvT@0HC^h003}W0r_t_iT@Ks@!xW3s<Jg5H#rmhc4uqnW+rcB
zjFAw#WS4oz8kj~iBY9M2vbHla6#9v&?FHkR#W`Nq`Fa7w|DXjR^OL|wAZ_Xf@)vf_
zoB84Wd`(`=R_?CC>)Q7IJkwPcsT~V93W#rfLBEga%EwTy<rzJ{wM105Hc;>)$Nokh
zl#u$~BCd7OF?}T-g|Z31s}z3<HZ~NFeZuRl|6FVWR^Lb@*|z4YzAFFqact&g2`#AD
ztzA)X@xbqutHqUzu0TubBFmdKk9xp_<~fF}P=OsC>#(i<iT*mx{lNQL?CsU9{wZaz
zj=8J0{w)^?TEt%Pcuq1g3)V4IVy$G>9UiWqQb-#$dnU4mqv;xbibFrCJgE173nlou
ze~8Yz;~SH0she%h%&gtS`tWtOub`(9zbui!la<!k+pSfpBj|NC%V_wS429?O`Et|U
zGcCKk@|M5mbLxG{_sx0@JrVP`AEfK`dV92ptUxw7$7=(=v8nxSCjHfAs}nce%IX@4
zO<g_b9o>zAuN!#y-3RY^on7{=`MFI+`7!Jcc;>ofdAbk9TBzj(dmHTVX-)Xm3;#9q
zz0R%dto+?jW|6u`8snZFz<c3BnY>jyer;PJ^}i7$UY8N&B<+Ja635q5j4Oq87z?Ee
zEa=HKSj|gZ8wGF($RD(QaIry{W)KAmar(}0^%<S`uG7{Pa=}=C47uryyAt2t>+G)K
zCKUK_fL(ES@NV3;u3?29gChcu5qeQFn#Gb0ALrxY0Ks|h<(Whj>*_g+&+<o(7XN-c
zi~m3v0J~8;(%na(aPMKIE9z3*QL;_!<3~e(W}>Guu-eWrHz<?7QVvBIbyC&;eMm4E
z<b~9+4E!t)r(u~|<inqT5Wh$!U2dsjKr!h(HZL>?4VY%1bOAFoU^NeLMI_fN;i4CY
zWZG=uffE)0JuHD-nFgbsz0}U*h*yW$w09$%(3K0xenKQ?N^XH3nH~x`Jpt+%J<FkS
zvgi<H$EPRzh&t0WAZs$&Zc2|S67d<zi=mKED$H9QJGz7Hu6{)k5KVfV^%C~kH+fU0
zH$Cw%S>u`jS>{6K%kdX}q_<dup!V^2+Gc8_h!nTi+B_I_!!?n`2!#tVw7dC>ROF$S
z`}q2;O7L#Sx>bY=j@5UunNA8J0lN%QS;P;&#*7)^KcX1;UJBNITn>LXrRJ3d&ancZ
zf&0P^#RZKmi;jN!B`EtboO8w*r6y)k#&Ato?r$?@VrLYAXhMJ2cFf--D4J$+Nn9>h
z-OH}0B?IgodwQTOub6#sqLeS>RJLJtg2})4VAXYFQ8)koqC(rxcnTm8I*MzL*2mMK
zqc==6Pv-}5r+47I;Pp$Ry#zbO!Jb0n0vrP>FMJmF^a$kAx7I>Z2TwmK*CYB`SL2JE
zoDUpv29tkhCc&0csWWtkkF503yq;H~&ZZ3pU~jjJxR>p2O%mtZQ9y9H?_``-SQ0}}
z>tJf`)wZ^%rCM}tu%)zMl(ZUvvFI;pvU%?ZLZ-h{gK!!?5g<E!z_V%^vZ_<(V2m_)
zpH5eIYSlJzK-oazMN}RwcCo@`<*S{$Z#{EY;NQ9^>sr@*i{g19r=@&Yvd#|Xz2+A@
zc>yaZ3ite(_QT^2WGdoe;k~r41wEE+_6T2FdLPhhU(H{9U!Y*&nBHq|t$V;bfO##W
z+yXGE6)jnq45*op)+Ivv(f(%!JLWRVgs&@WHmXgs5U%E);{&iU*vO=RJKnsXhAxsi
zdKa}J9j>#7rv8$1vl-*eA{Dwmko7xb9$3=G-5z<B+M`5;-iWptu0Un=>^(?~RZ|LY
zO|e9h2hzL&eAXPLB6}&LEKK7@u~WA0GiGNDk-&DL6j@o~Md=T($?Jqj8W|!-xm`<f
zbfLX@a!(%^!&QxtvIeolht<D(ny7(jUsb$QWT6a=nNfx4w6Vr2Syfe|-1b(!=`$+C
zW+U@Xb0!Rm)MJT?!K^7eMM}w^N~_e|nAnSb@Q%ad_3tW@h}dQdQo|LEAY=+ns3xwy
zn`&aK){=!2YXxhv)hPt~%$(9YEL`nPUf%FZZrXX#tzy2+@EdhKvHMZI3}!ANp70uL
z$a457rFZGPOqS=e%Jot@GfwS_Y93~&8rful!OoWR6CIvb-!*30Ok|U+j;4HXp(q;s
zLd=$5;_SEj?_TNE?C&z56G85acNzBx>AUNy@J46ptWyrFnLEu0wfSMlav1tj<eUNU
z<9id4EzVw|g~u|i>P?)<+6sytgi@eghWgcfQftQMpDb4^WZ}n<vY1LGGGjsBfJ@rG
zd>yxGu&j<}^p)t+_<MzY_V4^3t+kwurmJ>zZ^4i)$k3lZp<SkmzB8c9rUg&$#W85n
zs`48&O4bOUPE5q*$H+K#!r3{qb|1`Zqk>T};n$jr?4tBD7Fn>wTkWOFCZ8cnIK?5%
zo#ln>5nF-QkXN{p+5LFxA7TMh3B;@*Jf~UtH&rj?`@*%+lnV(wd2C+fh?_hP^u2D=
zZ#>@1fzsryw{YR7+ph}%EHlw>OB*lweD=R4{1kWxijnB16ffY=elajnXRKBM8%;SF
zG8H;^=Oz-FLBsyG^KlW_L`7AbPKWK{v0+xjxTYgP*Yt7a*C1QOqZSjWT)fdwvCgkY
z<~h{G4OS+4;!51cQ)QNa6Fn-X<uk9Q@TV2kRqz3#G;T#Tfjjt9AR(~9gk(uEBz9t6
ztMr%YSYjgGoCF*FY95i2SmK6wB(iFrq0EY*AoD0eESp)HoFid?Vriov(b9?`)v<`(
z_6cCaZpVQcp>cppRl73S9>FsAscg8te8Wgww0dU2_LVodtzcRM(jZ#GAc2}8Ry(AC
zO7HVE0vbPqvgg>Y;+UGsXu}{6O$3Wj!F+P)O{N7becVuqjnmOhb_6_K!crvEsgP-l
z;=yC!YxaH!DHrSK_9J8muJb8nASHOUX#*(K#ada!;r11%6-(zL!73dok{7W$4$9=U
z@*^`R%_YRH;k^VhZEPD^M_TPER>7U1AIb;nWfQt-HiM1}{KgI>N9u65bm;cp3ob;Q
zHt&}k3t%USX-Jr!qXBSgie%`BB#V{e2V2u$<2JC^sd;eb^{_L;J;qrVVM8%j>O|2m
zZI{B0>3JeKH-JT?X*9@)6qjdAj~asq92+Ai<zI|&$%bDLwr?)&O1sP!+{RJgL|1&9
z;+#H@UnZx)QtlY07evHNE#RRu!x5^*5G^cHZGT`x23x2l2|dx`SFzQlLZ5mpuL7kF
zd`l`?gj4s3zlNbVp?K)fIb%er07U3%c{r5WNrwYlSgzh=NjO<rb*&<0Zis(3AxA48
z$1TM#QNl4{j#@lf8Ufs}sZk~j)dAQWv#^>in41|W^W@(Z>jUknQJu0ZGl9e=LG&6r
zH?3}`_4otkCmdlS^?Q{IZN0K&wuOkF*NW^P5Ffole3+5-`8H$1j;vf`g&$ZMaG3p_
zHg8=#TR*KmS=rcU3xx0IXEJO4qAo-wmc<nu6s~)vB7?|+pk`vG6uBWzoLDqJ$rj$V
z_W=qE#;o{LOH(~`nWYsx#}hln3<n5Md!`xiti;#f2RN{KrdjeVCzsFF4P?z$!714a
zO{aj2pej${UdDFl*^hceVU8_zXzi_XQae7nu;bDt66q(ngm?U*P_jb9Lqk5Y_bNf@
zYeD`J2KB|xJqOPt8wc@;r^S^Pm-hok{xa;|?M6pkkR(i70hlRu)Lz;fGn16$a@BW>
zXD*TIbDWiogqh9w$Db#S=5#1-`mFIe8!&}VZ|dWtvwm+3S4YDN>NnFkSYr|~Z(qxb
zpg_0!9ju3Fh_tu%@)AwxH;FThuAZ#n<}oq%#-BWi9I6XH0$Bf}$FSS7Yhyp=77xK1
zk1g5)Dm3(bOt^MsueFY?hv3ceF>J8bWY4`$tjDnGyK99f=B>W1#r<V9!`@>B4<_%d
ze#Futv=Rq?W(?ZE;uklQ_A^eKFhm-IG?4-zSt0L5xGa>rPsAv-Ar{cKjx;U;0L^K_
zR!cIKsJqxfQBf|ZBa58*w}u1@n7U%MTX*rRp~kRrta;QP+um(0fR+cNe_UU2+}SA5
z?>LV;<oG1v5GRY8HCIcu1*Ym!saOCys2+nQX#xrd;;?t{%4r=~SSo}L3u3{2w)6?q
z<jr0KRu|hKJejoxYYa8Oc?Z}-AX)9MgMS4j5rvXk$Q9xN$)mG&Zc#XZRZ6ai@y|9#
z_GH4a)JEJ<GmoS`$p+oWAiU6#@!_z8eol2AQW3VEWCdUk%5MBV4q!r2tki;;w}c3E
zs3uEviw)Z7{$6%n(~DMev)M&U8kcnpU%$@Ul)QV+fX)+qO5ug0Zmn-T^GOxAu0DMl
zvqQ`|q4<=hyZ?lhp180hKT6A8Du`D#^+`>aoIYy@!sQg#4_!O&uomv4rl5Qlb!_Gg
zyg>Odko}bRd&+>{AA9&g`<TdL2Jn+jDBuMbQlGY!dM(m$cRD=sD)9KBnDQ?W_o>A9
zLL((Q_~m;xizeEHVea%>X$*v|$js1LK2ef%w*L=~Kykkt>d$0(u!;}q3;H?F$DEoU
zC=AJPJoIAw$o!cfD(pz|64&J8qH;=RgZ*e^KeGMqW_$fBxhcxIzL`#I>j+}zH?T&A
zgA??yG2E1u<S^qK*dvR9<&X#YQNhJ3Al8-H0T>wyECfHq#WI+s4V;mQ=sWBp0nD}r
z<5V&hu=%q6DV@cvYT%FTK_}<J{u1l+>>wEBC6Zm1Ea!U?Ka{6^T|RdK1lbv{7UzmR
zX`)2(tQX`g-GQg+ZsD0iYn+xyTUljQ6i;_gcU8Ji7e`>e_++6in*d4L!)0kbU$g{6
zz1EbtYm{O4usn0%i$-Cn<eHMVMeWsomq=sgVJPaFlD01K7kHt1kvwKC!qFCyByUq8
zvv7S#ytIFMDZy|+YjmTGKQvO>J67$xhXLyzQhhJ&>7A>DQ2@C$^Rs^SxT``%%#x(~
zC{Kxs_{Y>g8Q?2m5f^NW`+xJSK*h3|6^oBErQ8xLRI#|E_W1gONmQgnu{l~Mql<DT
zS!)%`Va5~2`m8Gzi%Xq7$NFUx8zqZ7*lcjnK~*9Wd7dzh>>YY7$>GyR+)vUVOZ6fV
zms{(|>2V?1k;q&iAhkJi%*d`xj;7jdN|wqaB5s$f-5RcrPi8=00&?s0Zm(H?4i3AE
zj0Y^s5qRGbB!-{d4Qo7Jp@g>WNwjIVMlw2*dO_bpTEe{Vc|aVd=f2!5>Fy;k?T9Oh
z?s#)_)4te9bXOcfNH6Yb>1OC_3GIm^*w7Vzd)TUoi_8pvBjd$UEaKX57(YrtUmQlV
zrZxhy>lS)oAkVfE&lves=9zLoATjCc|1m9&2#-}PZGCDW9SKQmWS`?LxjvNSbM+s5
z*lHGt{m{U82Tw`b+~iH#yqPgYTL^~hI5D$<)gCozt{;pHTgg0;E<7M4yIxh189udS
z3~hQ&t$y5>yR;;?Yh7hU{N0Qy*+H9bthZEnYKpu#7N>gqR)0OsoY_;MBN-iW=&Hc8
zzEbYUX;g?yI%T{4Xf^1y`6@3?HHtpv(H|m?vPSVup5VvFnrg<B$A5@52=m)1&yl`G
zQru(+>><P;z~5?vK5TJo8AmU{GBHHrnY*6E#Su6viQzpqz&ClkF){J3!W!9JJb}R^
z-AT3zVOo)dr(vTd6#`srf!QdJm!l>71i07&qsxlyq*e$k)$zDCSmKCRL{N4l_BC$x
zZzVY=X=JFy8>)LW5Qp)E+nkf!xfxZ`THpv{c*^TjSr%1;lDpe$!+w@*7hhdR)Z_Fx
z+&?icInlsN_6vCSG`=gKG2^dgzA%*EJN3JV6+Au&XC^ezQcwr{U>dC-#)vnH^yoks
z&kDVeYb47<1x>p{iswKmj3!;=VBh(aR{Ey6MN6?9h=h@hJLK;$ZKQiUHP9brv@nQ8
zmG199-G1q=8#TzXjIFA}6&6%zziBFc_c3I5c^;Pt#XKW(;SJvy(zw6@j@&--w_Jpv
z3kD3#)#Xw!DU2kMLkycj-|aEF!{}VngVOP``kqupc6*=;d&XrVxV=bD#JbxVylX9p
zzUA|{Z!ihbNJ5b%#Ni4jH+9KABm3dF?frU+6trM>W2%Ls)&zm9g}YPp6cYPn*e7CL
zAmHl)DVZ!XO>F6~Q^C(0E(jreNC~Q4{YBQW8^IA>F7zP8yx1!4`PJY`A&tw$9c@bw
zBxGujdCJ$jYQS9?9?9^s(03()qGw$$;E0cL`*w*_Z8ZG?Rrhic2f@<I<wk`)8fdwP
zT}Od#-tNh6gc(`xUM|=mWOBRj1Hvj{*kDh_Mgq2}U|z$xHFNq~6JqkdC;QUiwfjt8
zi`-x-CMNQGZXk|ch2pd%SNtqMOYx!`ilYaU<c40(tZ#e7G=EQy#L*kx?QnmmeZW!5
z`BShsehFF%mLf#HY>|Mo3S#8%X_Ffq@a#UMh{&_W0o<d;Xdy^G<W!djoDtJtUD6^Y
z<KsEDq-QTUaxq;uv}7QYBZ+JlY_&|u@OW+@F}nqbIao3fo+pkLe*Eg~9?xZy^j8a(
z?1SfvLx!Ej=QRKR0P|$-E+`dQvJhTitH?`q*A8X0ICT9=p}lfGCNH*wCN`+Q<Vlpk
z<x0q1lc=i6yNRTe80YpF6<jV#DHGV<oOJhel~xAVq783-;J7{)s}OFP!FU;1(rBLx
zRtR`6*C}WqT^Sh($o_>|cTbzNN&moh{$Q|IJ-qgT7a(rrG64^$CZT|VZmbn!=yQP!
zj3K}1F<q9dRYS=IFD<@3%zxX5FlK0ZFuCZ3pvmhJ_t=6ggUiFp#V`cEuZolYIIdOW
z$i*&%SQVN6$X%&Mjtg3z<GS6a{o7{ymN)Qq_o5$oZ&YkPY9U9`4Aw~-l^XD|3g+E^
zx;3&s8`b#pVM@m|O_4c@U3Cx)yD|wo=3wBN9L0t@2yAu(g-Pz4UT0zP>)8N^6$Rb3
z5$*Nf3%G1G8*oVw#x;t8IW9|o1g@>%ZmLW_Z@_U`&Li+F1s8Ts^D#qI9hUUA$4QA4
zQu1PRK>GV&9GT@k0zXu>zf0L{PEGNoy}sl40poLd55_0Ap{6lv51r`ewKxGG6TqcE
zn1J@>GYLwz?b3RIfQSi*JcWSvs>TJ}p>iMa<)DmPLjCxH!(K70t(urkb*h_(qL_WF
z-D>(z&j$VEgxQ{4Vt*I~w9;+ivu|brL(OPaLq#TtUO7M0tPzneZpeF6henFyuZ0ts
zeTNp6!u}e8=-YfIt0Q$mROMkl<G;?o)f1C?yK<dYD3%WPN;n<;ppn)W+_1g!EsBgc
z`|1SB>y5|FD|ufA;lY{Bfb;Jp03i+7?z=Z~%uO{7SZ^7&{VD8e+N`2bT0a)suV3z8
zM(;dgtl9VB_AGxGh;+8YX4Hg|=n#<ivXxaj>&n<&Y2+JDTaru+fyeB1NDuTR@m>4c
z5=Jw6Q35+}1%}He@d_KJ`KCBxmn-O=HhI{f>&Y}`yl%;|Z91<gTu%;nP1Y#GkB#`E
zutwZ_7wGMsa~kyCxWpNP6*NA+EQL!EJ(zz?+_UdAo3D<MGJBED3XaOEczrXjH<B`X
z(eN(L1y{9o%Ooj<6FK675ifAbfz{Cfx$pGvF9So-vAF2suFuzeZwV&Ri^96wU(UQu
zXI^^*E-fx<>%iKZ@2aD;dBAbCpPYusc|o#`JNP0RCDo;CvoDLlM0)*QUZ>;|H-Gv-
z8|A6JBIOO2xM37|ThkHko>G)eAN7{8ic<_AqBjL~Sdtuoc;aIl+NANW`BCW0P`sz2
zmqE>GCj)CNin~2samR9!?2LPclA}?l*b#V{zM4)+l~&<H?X^VJ8bC&s*2_ZywnUx2
z&q_%Z7tGF3hRsod6PfmaCsAnvP@)?4fG<<WqeZBOJrGD#Fdi-7`FcGt^=cMpD7{88
zc@ZT!lDeC}i&t?6t1TuZ9E)CKL|&3mml`kG>u%I{1U?U>p&~@}&IY0QW@~LAU_g2_
zlLCeJv}gkz4j75R;^`6pwSeg|COyhEG;$%6U1Q)_bk4WT2rTPKc2R+2(VI>va8XaP
zy9gYco|mS;r9H`R9dPX7m2b3>3z;BdOqz8gOgs^n^(0s`AWgSX;G&)cR}ARdB5-L>
zvKOH_wr5F=l$hLGH#CDCXSjs(P-Oql+S@iat|Mup-}_f6dLwS^-e~oR?__Lj+^}Vz
zb39cpdn})GYG-3YK~uENF1-~gxvFMk|N8~Nw<i-xO0M3X=`IV%d;kK8L;^@8R?5_=
zUvJjWpy_v8PN=u|ZzEH(=d`g;Ea<ITmYfYOSQK6t<I}Enx?VSNfX^;Lc>Bn6+IWLj
z31x1r)=o9G1>SDyugJzbS)HAW)Y`yk>z`caNkENmI%ey40O1RW4Nx1~VPC9wKewoD
zq1^TfP6O4w`AvgeoQ>Ph7oC4L#jTHPermDYA-9)C4RXD%pRdz*^-YU<0jLR}{;H3^
zeg@EEb?rhuTm%c%1lyONZU7oY!gIT)Khi3{dD-sD{N|r7gZE*(RDqWMSyX6~5K-^V
z;r!2{LVI+!L}pHme-^Qy_}%W=!CiLT{1aO|{nX#ZBQ1C6pYcApeunmDtcDA<-phYR
zY&(bU2Dp3S@0WS(y5_->`?UP&7Wkz{Zo?z3J}vk@*Sj$LXk(t|b<LmwAM$moZ$A7p
z;@U?S^SpMTwGY9}YlnoNMec`}*AA~r`{C#9#_m5?@qV0nWSrfVFX^`UPqxGIKJ0$9
zc@bh?;e(RzgY1W!*A6#xIkt&1y3SWu!_)VvZCjY;ymsUrD}6!kX90V$=%R`0+i}-h
zZOE<e9`t>|{HJCjw%qc&5%`>`5vaG;pLRc^(%F*B@4}N2PnY+>^>X01L+?3#+iB^|
zuhaze<!6C=Y4Cl}l>8~)_ks56*YD=D*WKZ#zrJ5}`5_3^&zd0g1laT2k@dQ(e)hNm
z%o@KPRU30k_S22nFS`7MO*+zb)Axb*tFM61Xpi*e<oDrT^|%hh{X>}@Kc@)|az9lD
zE<?UBkFNhLa6eN99s{<cX1?zXt5*Vn-^th}f6Ujp8V}q2pBiN_Hw4|ZX5M*Ae`=~^
zn=nB;(oCSue@+|1R!q<iHZ^t+x4V^z$w05Gy$`zA4c(*F2z~j}P0^3&pdEkdL!Rx*
zpPkD3FpFL|!^xa10o~|l;rlV&Jr}+C{Lj_6AI@En&F$i!gY3s~*bcYq?&6=r?1ymJ
zt<gSR++P1vsBS;L!ghSA`DT|D+SdJPOWOHcvk%fhhZZz__V9hc{Xh#N&^Y&MW=q%q
zoT=pYBQ0!4TI=Wi&&(OH{~5LeZL@nS*8i9EBy5L9-LTUW^ZzCIepE;8uw(0%f2KqG
z5g4^2a0ly(bj@Ah-Ur{0#x6wWKhkY}_~-P!+YiXd@2sI>eP6c0*YEcK#JuXwdiZu^
zJ{^m-zTELow6)i-T{^eP)#Bpc>c!E|g7)i|s2!1&s^>cYn7`%ge-gZ3y+rMhtd38I
zGS6>|ZLv9S{z?4afQb@@pML+pfZwawc*azU;4%0<>|V#lohf?r_>ixRFWk?f_6jy`
z$D@wb^Rr7EuUD!uw?6Od7i~~8!Gn%NE)@NL8rXIKeh+4|-?zorV}4Gw8hWu+Ms80~
z>vxM@N4#=+?;ZiNMGGm~@-<KOh&~He@Lp_S+tZp3_DNZWV@_^ZSF6G;Xzx}1ntxZ*
zNqH#J^>TA6J_5s*&VXXLbD^;}$MvDm1=#2y4fAuQp$)wIl5g|UOd-NEpWy#=rqim|
zh4kE4`Ej+|{(#NaP=EHhk4(035RnyMxNos$JXGljR?@wKeOP7(a?Ap7XMbrMQ&_`o
zs+a5Ua`i?XU<qE><E7-~1VB5}4bkg@m}<1zgG|Ib_aHTC535Y$<>g`MbI)`aQ-DDa
z_*ACb)j;Q->fsiyTlyaK4V{ZmboY`&p7xsd631nbEcge<JncHIFhhoUw_VFUGdn3f
z4Wv6m$h({I4?pcatq^@u$(v!c)9%v>jrPom`ki*6_7cyv5r5yBH%CUK=(KySLMGkw
z+uha8c7GgFJEx?*!SqT0=uN7Jyt+(ZUWgLs$fL*ZEwXPTzdht%PlAu?;1)a<!B5wG
z^zKCi9*`cKr}g7L3yfvLVMnL77M6~#n{9DWH69nZQ3I;M4QCX0`FOb)MjU-(yG5i!
z>{KnCb5vj`^w`(2nmXrb!N?WFcNFy;Js5>D>gQqDb97;BjWr`!qt!h}BgVcYuj5^I
zj&6)&33s%*=P1a8_F49Io|dcmZk69wFT=>^D9A+Ux3^Pbc3MmNvzeeJ-%bvT(^^s?
z%UW_=hEHoq1<X6|R6Cs3jQ-5wnz05Q85gG&qe2ZW)DtaxS}poBYIzvcld^DHIVxN}
z+B)2kX87eCV7tdo%9wjv_4+evk<80{b)p^I)2dgYhBE4KE4Zh1uRo&(Nez3V4NmJ`
z1?$_er^I3WHcSf~4+4+0#A)^G&jO*_P7B0o4Xlu<B{HugwT<JR*1!IYSt2#=s48>M
z(Z19ixl9k)>&0rLJ$g>m`5XmI?Ggk((a`58;fU!=HP1C>-)N(pql&4Ga+_a#Jq!9A
zeN63?hy3N2UAZ|0e2z+HhRQi&caBD8c1jI9TG?~dF*Q>fSstydcaAcqHj0TFx&3;g
zzTO%7*r7Jcby@DpQOq-xu`^?9?W<$G=bf(}FRzE8&rrw?+Y-5Hm&l{QXDDRH5tamB
zM^VpE#*QN|2}V%QP{fWat-clN@XT?>JzNEA8I_IYK2qH?6tQDjD5qi1P{EETuD8dV
z;SBBTPz!}FG)60ZhW>S=jgz-il6Hpnbq4lL#)a(+?duHfnJD1PVdOIuuw!kQoN9+N
z^sf`xtAekiGU1=0ex1->6^yp*_}M}WI<zDh!97R)hT@9gL@S)5e7Rk+KP_VZIl4EJ
z*90S|=jh&8SQ4CQgmaW{EG!Aeo8TPX8xO7rMu5*zzKOgXIMER2=-))>wUgp-h5~k}
zNkR<wQS3AHuR9xD6pYvV3>EBB+oUsq$18n?3U(dArW{8-L;bprWm29Li!&6k%QjHj
z#oTaZgEJJc%eGG*KI$iA+5pjG25WGJCU%*HLeWnwVS+PMvP*51%lXY!QPqx-Bh^1M
z6p}*kdouri(C6QC9q(iq^bBS1f~BHCH-(=1hau0<^DfvZ8ggH3%`KIoGwZX?;(Qkj
zlm_);D<40e8H31o!7|a1hceB+xWkZV=wUaYeU!Zo9EG2CH0--zkhH;6N)jWDoQIza
z+V{^~SMoKjUX@lK#XUzp!5}fX`mFtN$XCIjo-?Mv8ZoGwyv$w)SK86Jau3ExUD-x6
z9*c6|BsMx%{=p(K&<FFv6p13lVb2)=G3z$<?~o^h!92stapTy+)Xp@|!>H$stAusg
z{jY!i&n(@iPsO@85YHu!e$Eg}SkIaDpyUw7!OyUEycz4eN23$Q#qA7Z$D8>=rN;-y
z8Fr30WBqqy?$^&xwY7Jqs_?)h(JuZ=8ZVwBo}nZ>Fh>kxBOAk@XXpqIj1dDm-n!nI
zI>G~M#K5Z7osU&@)Z?ec?0d|p@(=ls$JgWL=>+PiAEWPi;Lw$>R`<hRQ+?>mQ;@OH
zrpxQwKTg07^;ZMydlKyB?7k#7XzcD9>9ZC(mbz;>|Ks)q?vPS%a05@oeUwdw9(G8n
zx3F?`7lk}ec=UgUyik2FWYzt(u@hfP!J(10!#Hrly3W1cX6HZ-xwiUV6mUor9q=&d
zkl45FXjNm!lCqomygJ#m!FYAsP#i6+vTLvMx1k=32kL0SqC2MXCtTiKJYFo-e+O~T
zIgIv_h~r)r+q{(L1dV#m8LZz&iEL3Xluf2qQQPb9dwM&E!=IsaeapFW`LA<%2Qog>
zAoFJlhy0_c<Ow}K(;D*~tIuxJ>Y(S|QZ^qo@`a9X6OG0kR>)SbecHW|5YZZMI9jIg
zq^R$=agkSfwaixJHSuw@-qpLijo>T0qed&M^zP#Nz7M>)xPBxbKhlo!$9FHZ=wPnf
z=7JEpFLYLLS3MKeLD+mUF*T*Mi{4GOtTsyBWUAAa>)lH+5;=4n-0Q)E9{jksBC^u=
zEKfB@xBk-?Ru0zfw;pobAC5pag1a{t>gF_-)MzMD<`&lCL3H!|`41s>H=+?MYU`%M
zuGXiY=Rd9C&{cH<89P|LWxD<GG2Ol#-|+^dL+6?nHzByi_EqV?!^L{ddZ!NhHL9%<
zwpH0WIG`Li^_<Gmkd{g!8!@`suJXMOJ5R!1pQ`}6Yl41v<Gy-L-5?x`zk4qDya(?T
z;A`r|qrrX81;6US+lcN8JaF9q8{pSHcpElSH;X$~^K)X%bw+vv-fgRyHvb8%UI7N3
zNo$(;C$M^b7qr)t>K6S8EWgKUACRgWkO=*$0mO$=5O?ohG+P5JGLNtk6`$VTB;ZX&
z^&VG|?Kb*B3O?<hS?3n9>E3Vl3X?u;a}p@*fR^9TX_iT}9Uyqd!`3P=60}u6B4fu0
z)^Dl|n<oRsP}xpM6xZGM@+TpC5f5h}LLT-%3)xG0=+GFx=R*qX_y)4wVrT*|yZh~v
z6MF9m;7hOXG^m~{qMjeXS9tQr4_m8=p`IVWS9tTs@4_7*YIJ4*-ySt!s6j|k4+=GL
z-isPC)X*1E-`TDaLycS!^_}e+Gt`*%)~-hN--nuT)L29f-iOLoCt(s=GT_eQZ}03a
z8g}20W_EAAFE}>6ywjjMc5l5eI5xey)1bOD5%rxiaLrNe-qNV=l!0Fusuzl=?~?)c
zkf<N|wkC8V_nk7p-V*hrz}AG`%zrN`)2~rz_m&sDSF+ekqJ9^#0qYvRcN92GzebU*
z34PBgc`Wm|U*wKnW^7RV!>DZUIPOWfp{;-xE}?MzaTx|TcyXkGOR#ose5!VXH%3~x
zgu<Pu-Qe=RhKpxdyKwg9RND<5inVYFfjjxJLu=6n&Y`tC*%d?1A}t)&E^$wN?BJD^
z2F``rsTIOWxbZ`d*i8uBNiiNe>TBRUtX&YEtljuoN%!`ZhEvP5Q?(o1UTxrfs9oTm
zRsrM3BC+4s?%+7yNx1RjkT~!u+$p&mS5VzsRR->~z8kzj*uaH8g*&AJPRLz|wF|wI
zD&T~mL_UE#*%c?oY(#5!vMWv~s2FRPoUGm8&Bzump>U^acVf)KTyb!{lU*@*6S9R%
z2;9l87$39AjMOeUS-Wxdnar?u@#&8p7vse73EW8qHLg(-m@5wc?BvG|-ji$KV6M<`
zCu=vZQ4*Ld4ngFctlhXqNnozfa9BIC>(gSM=!$l(Xm)*;#cH$6vtqUUc34-Zuulk~
z?~h=6C$LZSxj$BK{{;340SLzG9h|^EAq~M;y~7jOCqyG0t9Nt)dt4bO;aI)n6WHUL
zIf=&Vot(fPSJT~FU$T79PJoXq?Ia$nxN~asj4wu#c(mp)d%;V4qn<<v-p*d>_J<WK
z3GmL{JWkped5yE_Cf)C805f=A@64xAf?4Y^P;6g|r{W-1wqDwLwFIlbbdb43r}^fg
zPIl(f#U5)*Xy2AhH~D&9r1tAoKY{P{`0dVbkI&z9`U!l$$8S%iI(+M;BeTN4Fh|e*
zv7gsrC1i?dP`yZK74jg{8K_RcP<^Q_-izuc47ELxA}#P<RJOSs%tA+!3-&nEIgJo=
z;6xIL_XE3g1|0D|lb(}0rzt!J99!KcyvKG<Q$!3n;XNlkPj*gI(EZ!Mneon(UhC@h
z(Yam~3b?i8j^@>j<*I#Kx_|Ii)Oh3ZO0a}>lUToZrSzvNp}z;BR9}JT?|^@1L`;R>
zcBVdlG&flCfw#4E8#@<NBMBy1i`%IGFT_7;3<;GbBK5|1zM|v!95gnL;S#Vy8_>JM
zXdy%E@4V<UVJ1-L00tZ|#_DmvL5Gd*Se$F_?t1I%Ce4<cRq#GEm!Y-xq(Q4*)8QTE
z+RH)zPh^IaHg|k;7TUQ`1l|2mWy0L2RrPIGt}fFmU)^5J-w)hJQx6>Q)w%kuhD@__
zKE1h`VVx=jPSQC6ES2F=9rt_f{_~iQ#bl+po^ZaXaJz@J9`gOJD%i{PXZVgJb#?on
zEw(%BJ*p}b^Hr&+Y_~DKmHcU&_m|Yi@DJS9(?*}`E3>T1isCW<e$b99^M{YWyw8`T
z8yO9F_h`&YKZ~emn{OrYZ8#Itfu`{yf~h8&pTq2fk_WCIBBq{WDCY2?i{RYcU<UU4
zu{x6fW}}_2&U#N-SeG~0t-lSvO}keM3hm+Y4rE*FxUEq`U%jP{IA_2z_2afC4TD7=
zrgLD~4CBV)8@<Gx=^R)#)wr!WLt%+$(}_Xn{>`3qyw;e}I#`dd+pFR8QV}rbfC&XW
z(NiKOGs3-AA0XyPH;I@R4ATuP%&|TaF_~r9U3US@ce|cZ7o@;zpM@P1{j)*)b*b0-
z0uKwmk;`BH)=og(Ij$7Sr3Gy_6kdyRz2EJur|JW!ilw0}xb_Wr<E6OUm%9^iqnkj1
z7tIhZ!zT*|YG)}r0@ue9|8-X#9#lU$%fzo+vrU;T-Pz2tYNUb&O<xa;kFkOhOLV1T
zgf?o6iNs>g0Tp)08qii}DbU}P74}YGDLiQloLIFzyRD_@q%~}J$AiG0S65-nw*hr%
z2fDH2N6R=l2UOU}YC$6rbSc=n67b+4_FYdFw|!~d%@BaYp*u<nc&N*+eme(vP!@bo
z?zFRDXV<N^wP1a@+m`0e+U~yGEkEQxZu9DuT%bNt(o8HVmP`7y+ve{p#2GFm7|>Ub
zd3Cr?%XG8IE#LdW62t}zUAcs=!QNBMFM}TvCUR@N_d|Xe{E#R-)$<q2cb6oY<9_U&
zD(Uk5B}vA)59`f=lIHI($rno+&`f<vSMM)LxZx87?dJM$Nq1G2mP<$d-@8i;r4k2J
zxlrQl{Ut_Xi37T!FY)1K{=V;%4sn{&Tv?UAcWk+WZ%9*uXDf*rQ4;SPTdv@%(3T|4
zH>9L@jV)JjJ!(qw!&4=_YizlKS5i|_U{B7hq<4)iR|xUbloZZRmGn7#eP34%z00Et
zvu#hiu=n+r5ND_<Eb`AN?0p?3gso@_6O8xT=y~^$5-!)bWyC{e{Oq6-;#)LjC6a<*
zWxcPXga8V4S>a4l6|AiH^^-r;PvLCHIQ?e?UT}|TigP55VHfwl$$z*w!KODNZ|&C(
z!b-vrdILHly|iy14I+zO?+qvf>$GMNR#McVKQQ#4PFJ`&$DVcj@f0~2Fbp#5L}(B<
zAg$5j4oqV2#buj`p{Q|<0KNlR+WidA+!uM@H%J?zVLY%>6?S0WQx=Vm(Ug@8>hX4j
z(jv~dqt9GL!gfnTzl^<Bt3ER7!DZ&mE89W$BI|Rh){knoS!U(=*WhEJZzC{&^>J}t
zZqn_*o9Pf#;Oq+bZkB18z5aSEFa!Vqj)s9mz&5zV)3GYHxejA<$Y02T7z8Rf^UXVj
z+CIl8zx)f3qftu;WZXmEJwF#&eu*!{0_2%b-vyD^^ws|LM^z|^y2{tZTVDRC;ptnh
zfPdyiV};-7(!<bGzW{pX3wsJQ>OsGc0G{jN6}2bo8t{;Re^eq{Y}56)#E!q(L*N?~
z^qgi@u^D?;8PLys&QGB?R)P{FXH3k_^)HE9pH>pYq*z>i8maB+w<R0!_C{NozZ5#)
zOuibc^XWV2Eo?K|R!V~vb)9dvEA3gblPi3#FHHBo@!mY0tm@kik=y+6x?73h=Q_ef
zt%H|799Obt>OIyTXDi9>!pCvH-<1c|%KQDg2^BlvZFO`{v4FFcW@{R3@*$ZRf4&E?
z+B28kx9tGbnGT=|su^nKZk^v{*>Rs*zDhOX*-E#Mw3%P5tDOjTwz_TIfR9yPw$3La
z;@JweeNI**&U<$%5%g>Y+d11^oPs=C#kR}O^r%KnSsZ>m<ZruL9zQBYAcCK*U=s{y
zQP=hi__H-^>!qBPJ7pd8W!$HQEUssdqIMTF-@c~XEMG0gZJO~%SO7R~L+0$uoj%1}
z>qtb(4x^Dn0QlSi7SEaird<My?aNWWkG&eQ6UN_RA+XITJDT^gZwHmi`130Sv2`%m
zsi84GlaD{Wf}mYM(N3+dU$iv8ZbW@O{`v|5?&h!cAw4a-XFIR=FRyP{FTKz8%Bz2N
zux@YTr|XyH{htpv%MaHde!}G{>_OXI-!!j`d+$rO`3b<N2W$`LTEOh50OKAo==U<f
zDQvk<SMSF)HdBk6Kt&Vx=e`_V<GT0JTfm?Ca%bKHMxyK5&waVuJ59!IxF20n?Y#C=
zUv3m`1K938wtzqN<wnugfC-!*frB0W^7mbzU~V>v({E9<&f>Pe;ZGFN-vH?@6JimT
z`{7R%(O&{d;DEg?!uCdl9SYOzr!NTwNxQ&Fw?D4GAB+p)hy2Iy6%B%SZoIR8G$&oC
z!<Xk%KE)E!1t2x!x2%*=m)=+Bhr8_IdcD=XC#>M|>MqSsxpQ9st=*uKHg=PC?5<w-
z$0xN4*s^t;+2nE2Rk4MOX%%~av+mB>lMe8wy}0hB;0@=1!a!&pfe7f~XFxmA4`=NG
z0e~iU#E)}8{T{U4<07CxRnwpcZKLS)pi)qWb3j7?O$5-Ns%g}Nw$Zf#GzfpHrg0DI
zM*`?i)imir+p7pYsOSEioL=;xt<NC={i&K>_Mnk9qNJc1=YY<8(AXML3iPLHdews_
z)`$v(7&_;Gc7{OMU6&%Dho8~QeeXL?y9|<C%==sKW>TW2f!DYep@LF)Nvla0YVotq
z^%{Oz9adMrnTsi3R?o{Sd(AgIIxAeRZ@OKc`<i0fjb6DJ9XRG)1q}rn51n><cA%gj
zd|yFBZhc{QXGtzd$>jSA8glbf1%+b;DUmu+(6}h{(@OU)ASo!@J*WCA-h1UiaLB`t
zYPShT%6gAb2+nz=wCHqc?~sh^ami?R>_$p^k9b^<i$^34U|QOkj7W!dSLRw+(y6%a
zB)loI+e|y?ZC<@arLf0BB99}32qrf2epgghaM-i4djrRv3ANU5*mAS+Z0z37ah)Ff
zJ<ZXdihA=7o7$zJ+aA09<5(8es>sYPiaskX4nNoi$otFbd$oJb49i&@(nEe%-j}<#
zV#`m@exkU(tKHT%!s6z;<MvRpuR7zVGP~Rpx<Pjv5bjo!h4?wB5kn1mPylNO<{Z?7
zp+;h;ghTm0)C-2%?xIuFP5QnF1`da9-D%0)^7l5ZbIDPy?&2Ff=b+LMo}o9hx=W+J
zvtgZUhU!?|rBUD8ur7ynd4E}3N9Uma!caZlUDp258K|DaQF(V6)OR+l=Q31Z47srx
zyKvm=XS1i%-8zOvh!^zxL{&zgXXFksqYvvfaACi*b;w-nDxL)<Beq~M0n;1L*53OV
zt_9xUf~%*&)$`mt5D~UP9PsCK+@)|IaU7cWdn~&kDrn)3=ODD;s26(Rl5g5!RlMZY
zX#wal?dtk7+n3IHe@oCyb`7*6T_kyTO9+mIq3_OYiO~LH?`#oIY7sXY!(P6qPx(1<
z5&Y~zy!CXtwD+`|;5ixkJ{|5$s*X+p+5^cCSVx!;5W3RKpA#fs>X9HmUC4WyM)1iG
z@tqk{NLK7$?Qkc9n8H1iuzPQ&Q;08RuGTE}>nJ0zLZipC0obllenL7!spVs?(T7Sp
zv-t;CnSR2XU%yS0(wAvQU<am-0G!Xe;q_D4cH;!#Y;LgaCi(f2X7z4EQ<4*%ENS2P
zuRfls|6IHAn!?=h?7}X7qNIL_7I57+QqtwwB}p@9;QP|d`4inEsg3}=#zA%b6uLdy
z1Fro{E7hLqKV1UtajyEH1k?V@e;>xz{}cDqn`CVTtuOh_r%!`G;prfxVbE@t-~IY<
z3TZUtXxLr0S$w+rxEO~DN23{sLHD|19qntOG|b~z&;$b-jRw+Hplzp{pj!gw>DSL#
zOt~;@J%bMG>N!sj<i+$8c)H%~?SnAv+{pJ;o-J=aT)z*_<#1idyZyIxPwu~;fyV5r
z(2Wr7&&T`s!37MidwHvRov#ZzgP#G%Hgv-7mD=ick(X~{n|2Z$+sWy!tyKAT^{_i0
z-iya2r4MetUEP<v??wJouxx9nyRD*O@4k(0RZ4Jd^Cs*cckOC<4k}%%@R5htQTAVo
zZE>on-A?yO7I)Y#2lroY6jm)e7stcv*{ITt(>-WYqkg#JgT=Vagl9S<hf%8;KD%lz
zOGK<QJth@a`yPnzj|8dfH&;!lSFIsubaU0|?VqT%w4T=Km)w1##^$?_n={T1xjWG}
z$kltI5%qg&eeAP-L%6%RL8Gi~532v?yY)KH-v1mRE37~6k9^lIOgr*kZ{PCuZvTHF
zs#||#9l`BoRm}H|nU?;~fB(y0{>v(VF1GpP)9<&-Pd8T+XBIktskGC4HZi8k<YMv3
zSt{P^`Qv1(uOB`AqxxSB`F~9Q$K-#T3jXiE{{HFe`j@}{ZSvRSw#HnkABtvae*d4p
zHDqO#uBt-QJuEIJ<{KAzcGTX>f1BKFv%fc7HQnDPN)7)%)$V`I{-Z<Kf61y5{>lA^
z`Jw^Qq<@=4HAL7$++MjFVY6}@LiN|*CUH&Yct{x3gh59bbcC+c6F$s+O;~1rTmQ`O
z36uZ8@9$rKG%PHk`S?EVZ<C~k@ggX1aWU<`!g^M+|12x3gY!cU*M93ToSoId1wjvY
ze|fEIH@&*nJ@ME5Q(nh6b1$|ll{TGU&f6YhSxc4GL54nu3@pfC7%~tbBk0`E!EC0n
zx>&E1N=@uVmRFPi`uXoF^S?ESn(%KEr$&fff{<v0=HG@^73DUxP}=;Hrqludc3XYC
z)X?_{f17v>7qsNOX6g>5I<79IXN!BbkD6@_M|2GzCUuMn$noM)b5{1DTLU2E^f=I6
zcNzxY)&vZm+yj7s-~G-J()I6Z;vB%~GdnbAHX{Pw47PrV{cYm6lpa+tkrA=xk5-XH
zy@r@YjDEUOil}31e|4NoozTgk4%N%p%`vdi_&o?o>!Ir89?bPQSdKGDkH?dH$S$Wx
z^>~Xk)loz0T81CY=T%3NzCho#n$#@#X(1#Hn%5-vV1Z+|iBVW~o6uxzlP0G}4cR2*
zwKyJddcBl{p!Qd<AMzg;?N*%8Iy^-q(8Rvz2n0@RyX*O-!N{v=o;|h9d8NZD|7{X9
zTyaRb=D&1Y*)wvfUuucl@u5QKb!*M{lp)_!23)MP>#OUoj;kE&xXMXA-I-%?dcf*Y
zUQaW3^fy=67i|TLRh~i(_0PJBj?<O|b*wq-CaF2QHmNyvqfqLm*$s8y?uHuc^e}hZ
zDwUZFHB!Io3Uw9)PU(uPDL`}e_?pXt|D_}Bt8L&(tu^UgPr4(dJ3_kn&1lH#wH*iQ
zufB`ifEo)u^^mb3W%YR8%<6I!Gu6#Z)U?p36iZGRmuItiw8_1ImVDO_iX9mgJ2EI-
z-(#Y42com1qC;C&tA(W16|J3M{_bn#!{nWB(xScGuG!e{j(dq2ovu*pp&sg}UyDCx
zdgEx-%$!nM56Lro*bv&SSrk3~*ypu<f<JpONbhkXn6Eaf;^|9%Wz@GZK3PJKMRIyH
zw6OH_Qfyxyi~2k1&mIZVdz{3@uRH2n+M3R6xpgKOO~db`nZ3o1nk{=x)f#g9lDC&s
z4X%&~z&y7{c4l%fgWSl;a$j>P@*J4F^5%vJT+_VhUPUkxdV&B%_WMB-^|^hCE)0QB
z`Ju|vTDsc5Cv#;gAGghg>q`AB_w8zN+t752Jr5U4TXVtm`ul;x!8KfS2d3(kSBqEs
z(&cS#H(ov8M|f>Lw1c6;H)~TE6CI{D2A2mjC|bC{71Uv`n2b6k%E_ohqGfu8NccRP
z(UUn*6Y2tYR)IUYz&lo;#pu~njnm8?PCr{Xov!u5nKj#V3?uW6o!3hjs;{el0$WvS
z6D_)}a+lCo2UV8l-K|#*Z(mZA*gz~@;D(W;SF!qIrg~xyeOSrrRAm|WrUNWx`#iFi
z^<uI<{&4k+*$?Rcs;46b@@4hx_FRc)wS)to)D}oTs7-|r^Jgv}V%8YYiQ*VA<LZDD
zgFho9R=@S|d$}fPI&D%X60j$gzC4!e9?J<4tH1lp5&Ikox9oB$IvPXj!_#5>`NfGM
zvUIQ%&!^w8&A+KtuJr*XS+2dwqM&HS=&IkFH@Adp*BJv<Zk_@o$N`atMYXO^Nm{F;
z!(J>tPMQN0us%BUs#-5AlfB%c{o#iWskwPLfhqJZjn=nL?vbJym)k}D^{5tnw(Pd^
z0}$9^Ts4_cLPFH}XE0K~Qv>xoF=~s|w5~+^M>B*qcC)4A<2FxoeyP@s{bl^WHv3U;
z-egf{PgMSd5Ey;gyma&>|Dlc6CbQc;(P3-5a=tWILjhZ3wrLtp!yNT*K)^kOvUpPs
z+1@d|&&y)B0=WA+zlWW4Bt{X|*?lQG1eVH%!a}QAF4paC5pNKcQ%B)>%TWm1CP~+a
zM)*2(=+OFn*9O0-A6pv0uDNXJ0JW%6WJNaD+wS_p)}aFQOPw{Lc^cQS)LsR3Iv}IP
zUasp%LjXB{_&Dhj&8}j(Ue@<m0R+SiLV+0dP~=!c950Y<fZ<K5eUsG};lRl5LYWN7
z^hHY`OLfOTB-eohYW4D$c4R(1!?=8Uu9uAM&Ni;n6-%>7S1kP+U9sR2T?7BpQuPLy
z1}2t}qPy$pc1TAprrWD|v)7;XM;4je?O<vTAhwy`Gc;Ba@HHttJ1)l`=Kj>5)msM5
zU(JEW(w~u?1%HOy9O@U{>F{Snx&3N3z+cq3z|G+9ci%%e@huEfbu70yOiMb1(AL+-
zzeTz>f(d_{A=v!v8GT$t6{~vDq=Thca>bMXHqnQjHHb%s*%iF&cE4kzSPwZQm~<5F
z__LpdgZc&@?d4DR_Nh(R%|X}8LCcOhQt8hWbOQTr+8L7iI^aBfC=P3*0^2_{oB12)
zp*Pipmz70#^hJL*Gh&+p2++Ori^XHmN?n##hX91m{H8+}=lYtr8ND@cKY(jq9K%gf
zzW{kZlAEH)AgvkhkYUFd*v1f^RLwO(^I=07*726fBa4E7*dDNU0wdlw>$`PxfaZlh
zZ)@3=JWXM}rhb|gm$girx@@6lFVA{`Oz5J_T2%EF?N4#Zsm{&)_3f1t*4nDr=bKgi
z!>FM4cUN8rON_~<-#>o*Tl>H5G4+Iej|@-0izjy{)}iB~P7Qih84x`gknPFPi78jN
zBOH(&;ehQ32mOw4Kz4+=kZRJqo^(e@iFlrBp@08)V_^PsT|7<N$LRV_)5%Ln?swrs
zoUC#deFT(c8<@nhH5HFwZ-zJx+<&<FY!<`yzwJ`^OYyz$Ak_ZK;Qq32EN}Bi!|`R`
zOP){Fr&^+DV?;AOeq2oc%%9qIjZW4RMZK!)wW(gzXalA1ZB*!4=V*kGjq92SS#vN*
z)X&*&l`rb;PK`NNKPUa~`XG6gn;lUAz@0z6!+c-v4z=%#2DzT<v<XQxouZRXY&4bJ
zqv6Tbq1fb$L%P{F_0e0f6G*6Mk4>&mnK%0$0}sSEmHvvGt(mNE3mrag_k5V>z?5&r
z>Zq2&!dGsp`a_HDs-L(+T%XjiY6VGQ&62Xrig8#a<vnaPqp+$Y6%&PhERWS;Vgixb
zh=+C4AswPa5EsABDOw|Szbfl`HL0VR_i)uq21qVJy8dNBk*?cA&&e;vT7B)0>X2`G
zto*qGERSp@G_~rN`Gb|(HkE2UGSGf9q1u#@1X|!qCmF-33qINz3o1t&O`Qsea1%nY
zJmhIrOD))6b)xA{u)9i=3P=IklyB*}SgBRTmHHeFchjXznxxvmY*Y0fZw_Ff)EA#s
z8{J%Kl*OUkZC|vWE7NVRg!rn}72nm*ZrX})NW%`IKXu#~%!Ou~P$ga#huR^jF&LIo
zHgshe4ir$Y11P>f8-s6i0X>q?J?hBQaC=jw>mSvey3Q@99xTPvk25Vh!rB7r3XG)!
zU9mv-%mUrf0u#CY-0==_hl}e-XhHF8sGyOK8Y!lwV5Q*hshVdmQ=_fBznbkH^`oED
zW1Q3VQBS;hEqBLyVs8NC<o0Zc<p4C!>v|`lf$RTlw-_iJ9;vDk-g32nH3OgW1PM;@
zS(&$m;g5PYZ+-(at~ILkIiJ_ZpH&NCB^e-^3UD!u`sY&3^s9C2%Ef<cAWZ6%YmDcb
z>n6N?t$fHY4bUfa><OM<epf0K_INagouq+SYA;v`9$Hqbs$g(-l4&8D3UKa>)vn&g
z?*Hs+qvwc@4L3W~AX+r1CiNf9D5?4blf)<Vw-<A#W@!GZIW}qL01L<wyhv&o*>BB`
zNuAk~;H;s{(yxbUwl|vz&EEXKDQl;WzdFBfJzkZ``t`6>bUh3z_ZsH7-6=~l7omQy
z^u~Of-$OP$JuDuI)u&mw8Ki#E&7jaHn?Z})o7?N@{K8cHuZw@tKPU5apFS1q;?VCL
z8ahnx+ZY`&TZdEYSgm#}6;IW=EV6!15{JVE5^OLG8wjw@Y&H{Aw>T$>?yP+t$4!Vy
z_x<pYe`Qu(dwi`-pRdQ>u|ivPY9&?XU;Dw~%y0pkcW6Tx9Y9wfJjQP}?fwdzcU$VB
ziMoBY?ZnXR1dyM`;OkQWf-U3r?E%Uj1Q<L66oW??(pAHdu6l-a1q=a{&}}g5=+75f
z*7#cV+tL^ny34Pv!{^;HH7Vdp8lcbXd~vVAnt#oH_G+nr0R!>FN$W!gQ-%4(r2p0M
zW@&TqfJLGYv<8P2qW;O2Bsz(%5S<xLO*aeU>swT<eXsuN1=0kao<8kXKaAPDxSKR_
zs4wdzBZnqssfju-YgI-<%9#GXXc2y22p}qB`TGLI0?)5LC)2?A^nOnM9<)BapOa+}
z_3n!^Tn>ItvQ0-nncq(Szm6%}bUO%&2ZUW4F-~jebQ6RAyKgxqe3T(*83JGkfB|=r
zj56%?C8|hpE_Ug7FqccFn_VmA_`4DI`u@pg2a96`lL#=`fuLju4x*R-J%%S?q$$Bj
zQ;w0Qh~bME>lX^Lez8#2F9;KepF<lZv)UvhO%h5N)&461secm`m4q;n+_D90+QM$z
z0%2kaMs?ye+f=--n>60vOO@PPoQ{(WK{i@WNV6b~dg~xvXFwXKyTX#lCe4CW$q0$}
zZV3CPdYQg?7HXGl0jr$ln}^t*JJbS)YHIe<jECPej_vjkDD2ibs7bdYTE;OJ&L*Zo
z=p;H-coLmacoJdZfq$a#+Eg6-a-<k6ye48_j+5FL^vIVZ#i_#Smq(#E9;Z4)U$N&J
z50csFTsAp~9Y->@HY3`r2m|RHz0E@SB$nY#OzP@YFPnG?G>aDkxloQblU3IAaq+0_
z9bQJC%<-EX#1`i(4RR%8UkzekS=gSWDilcLnJnScEM5lWVmZE~HWb*^AM-_HFiX8{
zXY=wH1(q2|+M)xk_PcGB4;M=E<x+bREH;$%M4Gn4qF)}2=du}pNeQsPNYV`ovTCk<
zeoUY8H7}26^5RH7mKICOKml&n*WdT)cJ*6P>8pagJUg40$SAPPL{bt8v=O%7imlb2
zG>ex7xloQjleC4deD$JqWABAOl4pGtWMff|Z29R6SLuFEuMeEa=S6Z7EY_2BN#9)5
zqv#aDK&uibkgjB3(lomL((I3PeY8Fl(ycaavJgIy6pU`KugBsoU8@=yNv^E+wDYa@
zWF%N@DCwBKxgPZMZLQ<viTr`q>`1WKXh6r*m-0U3Kkm!?Sr8qPDacKqkEO*!3Z`BM
zvrWpA6qc&7h_LWvK;M`@n)5i#YW1u{U=_`2pyXgSpmn-a+Q;3Oe9Mcqa(S7Q01I>m
z)Q`5{s@68USy}yRWm`R~tUI8<GR0MF1F9W^i^FC}6G;?O$&?5S_Xo65^F`ad{J855
z^iNX^d^Qka;lY4H>Y?=|oZ*6-+~Gns0TvhzsVD`xJG`2ZNR~k==Szhm2^Jd-sHnRC
z>RCc18J7aNk1ZOxmnj)mAs$j!3Lb{NQgya|7D=QEFe)rR8BkyvyuW@hRJ=tYl}?GE
z@NhPuz)ah!I-99XESThqZQc=JfzE*5(vbaKis51f8mVwjhE;G!G+AC{kF5%nif8#!
z(MW>D4s54&jX8h#I4<fo%}}!=8CD?}QEB>_#o{d={d$2$ssbm&Due@yt-F3HX>*<_
zP10RHmKF_Ywbffz>HpycK{_u(XX*bz_*m3l>zC>E;_5dYRJQe#7|Z1Qo=eQf(h^Zo
z0pLUJH9nFzSeD9$qN16olN6k;lYYO<DhD#GLfSkm!4VaY0#Y>*3+U4={3Z+GT~W<6
z?IAYOQ0pM7Cu$A_Fuz?4whYa)%7APvYG~tJ!woeN$&v~Z8Y&d`Z&uUwiWShOu|4*s
zPDaQ`8sgRdYi*wB6YP@imfLxJ1HLv~^g(u6U{SF&z6o4^SbidZxXAYGye~G9H*X39
zyDxXU=ey^-vUn+|X*fi|&k0P?ga`_cXObFV&=2C~=K#rA@ekIfXzWP3fq}O#f{#@I
zXvS*Ll3^8GdC!-?FSPe@IaYy=VyyU@2n+Y*O<@9ku~&bnW%*d~Kr>c>mJF-l%Nxf8
zeqQGG;$)a+tO_j|Rsm1sZm*1Y#b(ud6{^4bLr~&brD~$xxZy+-ezwQ`Dy2Tpj5-MJ
zOw%xb1^NAY00y=zP_zsMFcip;xV)14zJhyFxjnK`HQk?Vk~2+nn%VLs%;wHEtr=4P
z)$phvz~fMj({(HMo$jEHf$huhSM5%6{a5=ns}y;tWT#onQ~%X|Ooluj)ka^l)@rZ+
zYWoHv`8f&OZOgiI=?ssgv+RI8u_Z*#H2=QW*AWl>v6hq$V&yE`EOUg_if9r90(!BL
z(P=tCZ?h;m+lOOyOgy>ni8omH1maXBY`SH2Wau<qt~*7i0&Y&D%T2p|2R|Dub1tn?
z0D_&O)d$)cBB0#Y2iqC&vjwu|_>!kuhdmc-ILs9@09EBJn>_3vcQ*4z3+S3q%or#D
z8qu9Oj?e;o(gJ(l0(<1QJK<~NOSLlVLfQyY9$<Ib^#yp+6t3M@42`sgls8-wX%o-x
z)wGQ(W6+=&D+9{t@=O^}fN%Hep<NW~E<EhA-5LrJGohd^f7#|kVS(MlyR5=4Zhiuw
zPC*E}ll7VtAex^5p;G`Nlt$WK3HXf4T9ZQMO(y~t9^5?@yG^c|IctwxFWZC(oU{@u
zK*Ck>*UUT#r}taUm$Ba(29p2<Jv-BEnjTlh;d*;04#vo|Qj7~-wuD5)N(j~=Eno6O
z<3z`PH#l7qM1R9A_%zjLTIH@j!y&&6LYDyiXh>I2FZ*e+*MXca*SqYCMiJ69mQG$m
zG9cmwA;X;>54-JdvpZIcAJwPhrh^qSI&7W?1>lLi!6{9Ya(Xg1l+hKy^RNKunM3~l
z(D^dcUmB`U0Dd1wfDV&?y<K$|q5gVvzsR$RN}`veC?TK`vp^F)9=F^2xVnbwes?f+
z3Sf}QUsGrw?H-}|)$!}!7-0~DEB;|ZBmWiD03H9_H%(3RS*ox4U2ikkyBCr>i+D+L
z0GdtW3PW$Y>GQa>DD}2m)uRhJeE~cZ%1F4;u1^K!BJ7O51eVtq;IfHc;p|I&f?4LO
z?>C!^&U%+~`XYEHl)>hD)7biY>|S3g1D6#s1N(vGVF7k0A5~Shhvw#;kOr__G9bEE
z-yXNsalhY{hkSK+a|P{gXY|-C4+`+Cj;)SQU914=bTXI;B4p=7VZPPLl)iS187i&I
z9V)ISfbs&X!@tzhcdwsvX*}?UGWt?j9u{DAIHlbW6|f&E04xtTwEDly-*nKz{cD+G
zQ}N^;oa6v>Wc7Tz%uo~Jb5U-3a66-iXL(RSZ1r|l)BKqhhc=kxPzH<(ng<0WR`>48
z;^qFs&21givd6d5dw80K=(KOk{AGS9TdTDH)gUzq5Dt~O0Vo1cG5xQepDGiNZRRxv
z=zr0FKuD%FTDCcTOis`BMCi1?3%@HFKF?!?kZdT4x&5|iYFT@)9U|*<K-w<D1guP(
z1`1{y8Gw6HAA#K&rBT`CTKRUdlmtp;r+6*uZfzoX*7pMk(pf287NUz1*{zARKZ=@}
z_!n8Z{Cg+?lo!U51W%8L=UA(&ipnxcr&7J_vH(32$A?))_L|vFWynni;4();efqM>
zE5BW5;qQJAaA}fY^f7}+b8UB>i#K4=R6v9b2uIB998;TDZI(^-UBxyM%t#j2`Bj^2
z^%IbFoX@TpX6iIp``w;`*9jC-r6CZNxoo2<qSk=N3I?r}*zc1r`*Z+hR*mLwBZ?8X
z9WevIX&w~7tePI@@Z(-@oLl&Px&_~40ZhGPbR^%`fE#0ybU3kX+qP}nwr$(CZ5tC?
z6HaXN=J$W^UF&|^`|Liwx>r^Asyb&sPjNCCF-HP;-s7u!M=O(r`!5%Plh-LT^~C7P
z6_H_z?{^XxfHRE=I_F}JUk(>*pBbB#8i?Lu`{6Egsqd@T&R;07Hzt9ce~yo^t6XW7
ziknp<h<7gFh8QL&Xp?8XN6y~Q4gN1RMm+;$K5`eIS_jljqJq35#>UmOO9o{oU(`@*
zp8|0SDEq|Oe8+pCsK*3+y?6<Q{~9q!s?l>U>6xk!aR9*{C%OG)?1Hbbo@1wA!a_u{
z0BXLMtDb^WOeun}X)Ac{Hit<QV*`)`qrjyT&_<h=sE@?!fiB#PX_T}qg!we^N&gi&
z3%oaVs~+ycrDYqibuQp9G0dD$*E6P~mSGJn)^6(h_*K8@x_)4xnMN;Pu`(9ik&pu+
zbgE>RXIswIedB`NasML%R|^-iwjspdM!1|$%4H=9-)C=)WETV~h88|{ZNZ<znk7nf
zv1&mI)MU&*nvKf|)^x1w-c%Zn<_v-lEx#e<G`yQKbb&du%DwLV%uNRv@uS4~-pGT8
zHxnX20!Ph&MSG1`+Ymniv!Yj`tepxQyl~Rh_Ly&3&^PtN>~6j<pf@GK;C71nDrNAl
z$IlH2iRUKwhXj*nU$@fiCEq4OAutvo;6{ryC`}smq;MPK(QoSmo+BoZG%QH&aslAa
z$o0=r01Z?Z)M=Rfas9UGeQDq+-Yv7Mv7!6-Kz1iJt=$`7g69|{zFU2sYWP|ARqUG~
z5D${ZC2AS_4$qcfZ~p5qbA<nhO?GC|<-vLd%HmEN%me`f_BBh=*2uDOr2VRVYXy&P
zFzL+5a^rT5oEq|4z1(YtPVh<;G-Qns>)+Moh9Vhj$oKo`x@hP-efPZrRAy67qV;_G
zsrE4Q>3smmv&!*N=Z*$F0%`tcO0dDnO%J-Gwb^l7nahr^IF3(|RH>eZ#0v;Sa;O&3
z=Jp3mo!mm^Y;H3&s-;krI62Ov?DU8G8V{eF`^?vLu~h4Mq_=;J7Vb<@$T2{?2TxV(
zwmgZ<r!z#B0~q(2djlv3rb%$+Mo0TkXEy70U|BX$oE9FbVXmmncfGzegnf}my_}U-
z{_E=g^68B_0w*u7Gwf*C_Mf#w7yi-Xw2*}a5R}fJMFcdQ_oL<XyqBTq)h9PJo6Q&<
zbX1d+#81p8Eg^lyZ~Wi421|0vt|S?{NV+ZAvQQDBrQX|AptjLgF<oJLEc><AD(P=k
zQA>s5w*m=VOv7q9Y&()(dynOFz-(xF(!;xi+pd_}pX(v^3QIQu+yBf{sa^_RJ9p<s
z+xyqMt)<y^DL>G>?ds%!WSJrFuHOoPW#qdIbr*LrL6Z=`cf+gm=;nZ)xAQXFUcs%+
ziJQ}sS#}G*wV0mlcAm0NVC%OpcB84j_ZKfef4cefzWH$<2Bf20w#7#}t#U#5pjX8@
zd~YRv)QSS?Cgc{WeSVEoXW~{_o9$@PgCuRY_+eF8_zwCHMWL%bT48p{Xj=d4ic#FZ
z2_}@eBr0tuF4UDV4X*f{5>I>$kT&N&83{DC_*#bjo+H?BnI<wJLkR<Y$nmA)6q_v)
z@&f8Hza!mdQb*<vveg)1IF-i}Y9k67KAKwb&}^*|{U~VY-1T82EeAhu1JV4qxfkYl
zN$t)Bcb!s}u`~JoRrDMZkQYNGodp6<d{9z*i~+#Zukz_MqVHBE8Ci8iUe)C;Z;7^j
zSwT0E&}VI{01E4@W$7B&sfD|&&6;zr*qu(mdp0k;S+DbAhQAb_^&)r9o{4rtWCrBx
zO_Rk<<5iHd5lmou4v&PTyTZS2j%XEOV)C0n4pfPfs%0s`J-L>#)u*0jDd6HzVyX_Z
z7Z#CitByQ4F~Y?Fx?Y;wGrWK9-&;MU&CXwR48Ac_DE)cankLF-MRfVBMEo*6<e2DW
z-WH18Vh3p>y2{g>DlnrZ<0_U<A8u?`i((HSMdS-h2pcDj2JG&td1)_Z$IT_<YKBo7
zfe>9vUPZ|q&P8xuM=%G8gQ^dD6~z7`p{R*E0F%Ump~U68GyZz<M1t29`s)ept?(XI
zkbd};!n0qxiP#P%@<NydOWxkGi0J;mIGViMWgCB(&eGQbCFiGrm}FK(nRC|VzFh_9
znmEc-A(hif9LMKAT%xMcYtya)6<(Vr;KMA2Q`fz*nAX{iAv)C2u6sg0e#r%4p_`HS
zsRco4QlWT;7Qh9?9Hbde+HDRqKZa&QaB~E27y7)Q8Gd{egj(qLnI9rgafT->5gaL>
zJS{lE{%ePqfjmM=li0x{ikQ|45nGG~tW|vf4pl;Xg%I7UFr@z{+98avY6%Zw<Ldg~
ztUa3jzf97YBG9a@;a?J3!X<O41ih6sV9o!_gyK;hxK~5{QRn$AqRgSHM7+hyp+qLA
zQL04j1HFItfY@g4t1V+~441zj*;2RzoM8>?G?s#Qjxx%iJ6~6cfDtf0$V@1rZe&8C
z`cyo6j_v8+K<j)ubypK4j_l;ulW6t6P(&8M7)J=h`c4S!&`?z!bW+t7GghZ!YY|`p
zZI-ThYM;3Wm9eqQiU+kvKQ~U#pH*Ed;GY2kM6nqRb!UFl8p5riobeRR>Z@9)mv|5w
z-`lgl06X`r9@~ONJy>+5uJXj7x+f!TXXFMw;MPQLr>w3y;3vkq%f*kF_Pw%Msm+U=
z%Hj~h-Gip%zROvsJnGL)LlsI0AZ?p;fgzP2PbJ@)TocuJ=9Ycg58B;8xg{#T_l?^r
zuQ4&)sTQ!u1>V$f*WChK4J*x9NDLsc4tBAiT+vr%VG3pVqT;II$L1BfIIVswR6_SK
zul76ImyJg6$7CNmb+6}n<B{+hDP3>o?XPXR6?;WAxDmx`gEYy@x^-(cDAX;oVD#{4
z!$)-YYc4YOpYP4Cvh_*QG3J!}28YGVWg=}x0>0^#Eqw`_BzdJycy}$nX(eb7938u|
z1RUWp`&+&I^mTFomfD<R1`W#nf_~KvGd4T7&bLWG@oE;3E9#(Dqqkab@#a2X7fDm{
zS{$6X*iw8Et6j#xF3xC*FJZNr2r!%5c4mC=x%YCe%ftkx{J4NMHgMmn7~PoUZl(np
z#yu#9J;KQp!w&>4Tz!T6SLHRpxv2`@7??YPuic^*W%8f2M9+@7_eM))Ofdma1pZ1c
z{g8npPD&Gz*npqxuB#^b9aRa%OhRmmp>Ps0Vfxq)m+4ISx_p-Uv_6dMf3m-t;{jjs
zJ~STog~cJS>0;)>MDS(q)tK?_X`4K`s&nbJ^r4l-`x^kqN0?L8HZn8z=$HAZ`w8=E
zDB!TLsclF}DSxUVGn>YIXY~G;SdPDa><xGl5YcV0iS$`;T>gY1Nd-NhsXXii*8K(y
z6nw6TP$Mf$uLd+!Z!d@mB6!jUSRmr*o4~twsSUQudS;{|TXi%z!e>>OJ4VcIR(*Ua
z+8MF+C1R6ohCW$=_x{?<W)eUe%r~cM;M=-VJx;Xu(h?G1wCBbkC;}dz!o$9~3j=bK
z;6)x2ev3EjTChfc^22m0`wH=f&JzzOxDstVx@sk;E1~v>kNEoBT7~&y4f<$OVY;I}
za-DA)+%>&+GiWOGS93$-q5GmoTKp2VHKg<FZ11^xJ(V*;ex?WyV5~|$q@`+RSkzJw
z%sj<UjgAk1TE9xupg^hhEv$fqS$FSItK`rb%BCV|HA*QaqLg$#A6Pw=%hex-Ttt8#
z@%Rs?P87wMq(>q-GJyVhJ`pSt3Vpn-C9N^AcW~frwA@!Astjti%8CbKY%~sf_-W^J
zI=Z-B>_QE7@Ywu4{HG+ox%AT}wwNH&pu4f_s-0)6gWGlIzjVljbC2CWg6`M`a$|-y
z+pe3bCVec}qy(_BmH+Y8mhUUmfiF|jemWo^2z}@({r^L(t$>h}vhIaa1Nzz1D-RY6
zrtdcmwX9>YhH=N~ZxnG;5nxD)cOfPJVyJ^m3?U&25Fo4~Qy~5ZWiN0pXJDwc#l^eZ
zP#SW^e6{ebkrRN$7UJ9qWQf`1i@sX&BMLKS*<Q6nlP^L>p0_<)K>RH>@vP7KzU>R^
zORi%irSTby7tvv2Xknup<4SLrxBayu>d1WCq^#=Je2Q2WpX&6MS>_3g0Y!n>kZR-k
z?3w@q2R=t;GJA;9C`IV+LfPMN(^vQUe9B7$FVdN7JI<rVQO4n_mN7-@)M0VmDXN3f
zpfY;g&Wn;ML@qKJ<oL6_N9?TUGtuT@fx_&OCoQ}3A_xcv7RCO5No@KqrJoay?&pMa
z(yL>_UaQ)Q7HYyvl&fvglIYk(T|aE-^9#APdn{_QRYPfbfM2|ryTD;9h$n;GZ*o+}
z1SzNL?JoglU7mV$Qz|I!A>-(SEHSWT9KI!&-59P3?bF&>8ZN%#5SrBJQfltru1oEb
z<^Kw15zxiWlpBAupT09=ZsySp?D~g!Dd93$StI>kWWv^$z=1!#q4Bz})Fm>EjEQjB
zuKjZf%7^Q)a{AI)wW0bez>?P7O+A)Mf7@o24@x<SKi(M=Bn129D%5vtJLb{GjqPG_
zD?=p*t9$~kW*E-#jg`zwyX(WN%Dc+~ZsJ-CnZajd9zUn3Rm1;EBj)q}IBxET_V@*&
z)`)PEmbRUA_wh&MX1W+8oSy~`3)K8~RlcQSJNVbt01$IjI#9<3^r}V9vw~}Ptj}b&
zSF38>oFAYYBI@m{EqP5yh|?e9X}n_{6;cJ5)|L48NbxMcc9qe!U1?kzjIgyY(TXAo
zu%tOWahIuK%>`x%XwO5+Qe^S1@9U(cnTt441c)ICktzy9qh}G>JGFo>ZvRJg{ysWW
zqrM7?B87DpaC^ftM@{%Vz_6lKxG^@eCe{*K!o{L6W|GqCS>-?0o9eQ|UaN<n>BiX{
zDiQo-g1@h4V*inq+`uk1o&*&0ZUz%dwX;}NT<iUiK|hvI&6_`dH=UZwyaLO^OCRY}
za0T#7cEOir*$nu)3HAj8!KP>+UM2NGl4gU9sBl>=bUG0vbyB_q_JwIPmtXMf)h>wU
z#*{74#=bdOkt=*q#1UcRs)12Y!zRE2XoCc_(8lAzIFDp}7Bqbgq!n6m@%EZ50z28S
z%f@5Lxs|-$7+?((WMhLMS%qWlfUgnGJ7*Edf8z|C!xp7)GkxyQY%N<>L0=~XvA?k*
zDkGkPF4HWZ0n!u`H}w$Tqg&0o0UxleK6wUH|KD-pOX$R;9kq3%LW@FtD9fD0Jddd$
z%MA$1ITQeHz5I_2{|!^m^ak?3C6YU#ue+(*EqnLet)L`qe^hA<3F@$7MO4Xw*osqg
zBcn|4iAsxS1DbY4mJoyWGSG6Hu5^CQ%{oOHh71rl4k(+)wI5PkGVm7#kABvg5l3rD
zA!_-UCmp*UkFIW#2+b6JmFDyiNN|Z;*PF==GsXY`WC0}VFFj~l3FK7VaPv*toJ%_b
zRYt=RgfP|pNNG(^ZFp*)S_4)G>ml$Jr0T+WN?M-!#=>R8p#@=!2!4LZ)zxNb^-8Fy
z7=0}oXB+`7!EsDY|G6`Go09Gc$0t^DOS{zOn2REDkY`qMC%e?On9CgU$tmEADT5m+
zVLWYSc?!ghLMd?eP4Cn4V3u$i92rK!NvhDv+Wh509m@W7Qkb<*Y=uOiY5uJNmB5Ef
zyP&*p(>8zOv<vWg!-~PXAk}qNG0uBD1qK;)3WVW+5D+_%L~?`ue=w<HJ^2Wg7Ji;-
z(cwkspfJkGAkzXTdm{mBP>uNU)ck0$3AQ){YTo$*)&})(h=vKs&ID%t@nk0LtpS45
zw*!pTaep(^LzmlfM5Oov$zVw7>%RPLCX68#!K{8GhJ2>PUNnKddH~%s1#Se@>vU->
zH;)uaK?oZ-9qkpxj_!_56pPj;Lz1Ykt0(d>QgpN+V2$Ha$I)49Z<cms?`r>6xy&5n
zlbr?~Xl^VZHa$Arh36Dp*VbG3w(=6!F-CT>@_SY+&BE23r`6IFhNT&nDJXmE%S_s2
z^pa@{lPE}y9L=yv#O+$6f-{!^#81c1$G;nD;YqR0^e+O{N{I^V33ji2<=eY}j3`<_
zp=j~{k4*<!A_0=mf#46=MqJN=kWi~Ce7ef)uISY#FvM!VfGZd_I=5H{t7=F(0d9Tb
z8v~fEOlYfJ{s*i7xk9{Lf>1W2euo`?w9)oC+umV7UO;G)5glF=Wk!O8v7tg_==xb}
zLY2@d5uL(`YUE1&%_JVe01pFo2?97qj3b2#O%CtZ;q)IBEUWOtx(1~J-#Zf?M&gwG
ztjbZ!#n8+ey^&@l{DtH4eV+HtB=vl%)S!B&%Y_(oXaLQPB`F!a!&JrdWH_ylnmY9J
z+bV#^n?d+jD5ePQo;H8r$y9)KK0=8_oNlg?0YJ7ReK7M0aOM4Jf~G|^Le}?aZfgm9
zZH8-}@?}fsw9tTDzm!kcF>KF_UFCm&2z#2!>MoZ!(t0x@jEVxbZAaj0Zt!5zih!bE
zVQP|x?XxWNxUa6UXlSrpX@(MipE1Awe+l;rl?&>c<%{$!4v070CMIX=Q?LDlVCbAA
z<tzyPT(&v?#UIkW8p0Z>212{i8SM9A>2Y87cG`?iOaUxb_e2ngcfpEFmE1qSEkaI-
z7A}hlMg+BT_n@1TU-fad(QhXp=JeX@BDaM3D-|Hsll<BRjeV@9+ftw0k_YkWQKtC<
z5TSp{7M}$rD7VgQJUkm<$axuB=Yrb;2!!i}L70Fm0WoqpuUZvF0>i18`bGRG|B>*O
zS}LC`>nTY=sRa@v+F1gFmH_@(94rltLbX?|RlU(V$CNDoD4{tV7(p@TElj(<)0vTj
z5#`S|oNiT02Y~ijbjcf?Ir<f)29fsf%6F>BjS_`vP7K76OkL}TO2Tbjzuh)B<xxfp
z4C+3*={ycagKy5hV(=ws6y*{Ed3@kc1!W2mOGWZzS>bBo!A_Z~pj>*XvjK@k3fnyJ
zlh`$*JXbrhl}a0=5$1{>#v6v%jpau}&c4o1k%Q_x%gmZiGu7qUlCSlV=o=r@q`UvY
z@=vYpzDwkwr<e+pXM^M~lc6W`cDR0dnC<)a*{;BB@M9);-{*SQw!A#DcBpQPv1?!(
zS*Xjlk=8yhJip{mPJ%X%RcBD>*3(UU1}-LWrdS^ZemP2&o$dRS&ko`zEgKdkE0w-I
zAJlrZ_rPZ_9o4vfCS7J(YP6h6CC%@O-uP&<*j4Uc^C=APw!Nv`OD^llL~T~DRrQ&h
zmmcK)1sCKmex*wzl}8z7v@8-fpeLGCgZwysJqzaxu7iFRddaM3$I(MZgM8iSXIJDg
zQk`9^HKSf;GJTA`^c?;F2BgO{?`=%0A9qbgF@2SUut063Ehw%Yms`a8?^UjDk(@Ji
zq^B^QR@C(`rD`5T3OBmh{N}a7h-;h_o_)5=*0QuBY_<sRq=X)z$7gXncG~LFm;Evn
zIy5Wswt3)2KtubWsWkE;RttcyTn3E+xo^z;g%!|@0i4m*lhTWqadD?lM{6&?^{oA*
zS3a+MJ*Du$hSwSpqAsg4f5D@jzX{B}trF`j&gwiFLqS%Gjp-#3Nm+*A52q}_8Y)Zd
z$`KZ1R(aP6ajXug*^bM>K~ng@foi{>u@^<{(k`_#C_ZLZ_JtP401ls;pgZPv@x2;$
z@vHho<4d&pM_-!+0N8B;s(vx}QXT%$^O>6~_M4nleWRK}<KV`y8)KX4%oI0&zbNc@
z7S#KLV9<AHi!uBm?LuzpNb#V!A5xM{n@mMWZ#5ZUO_qhqW=N9U_}n1dhfHnnjk{);
zX=XM;KUe&15@RQJ;M0J_9@{+4^1sCHy%(qa+K3*ZPam`{zqY>D>#6%J$o}<$y~$@I
zxF|zjUFWKz|M^)s{3}mDTTu{n8-;1w)?*EG`h5YM#e5>HOcdrb_A`x%&4R~?U8rV<
z=^FgFXC!)-!1&7d{V-S;M?LA|jNt9?>p*C$>J&;laDS4VHvjLbwAf!n6gkmbAaJ;W
zO#ENBQG~dZ&2pkB(ZzppQ3Upz$!}m3HjMcPnj&KRNyxi(eqv}J;1Qz#3nRqOuPj0O
zL<97~7f3;W&4bbi@XLc>knks`KPGTR^*#D5eHr=~Cjyh~)og}zko2i{&C$2{G9Ub3
z28MD{H0}WYvs47-BRsVAmN2EIhWzl~oEob{L=seakU+wR1PKTfx<en7jy16vx*ai2
z40-QbjP4A0@=Ll<!=HElTXPP+ws=Xm(n*RTFZfeJD5?D%IY&aOAW}e<X6XHw?4z@x
zS55m<Jz-F9b;E9h7{GhH61nf%Z3{m^RLQv}Y??~fF_uMd!V;R8iHp_vhByvRtG?4Q
zcEw;y&Av$-T2JdeJQf?P_IsYbjZVY<BWX;F;UtlMnOLwf18*E^IR>EPaQKP;n=5Ln
z+Q_)$dHf_cW$g>vbgnf`!k8AF;oUSP1rQ|fc%5fB-|fF>NKCQWOxyZ0&zP|@HYI_q
zU1VzG(=@%uO0TFBbhXE>GrIC+o_@45mbErT%g`B({=~jX<bjlY!q#jQtHQZSROyYH
zrZpN(6w-A(@i~>U^>v<pV`IEe6tb?5XHgf&qHdH5wG68s5Zus5q~jP!L{@bal#2D3
zfKJV>Pej&aTr_}O4T7-pYo0!4qi4b?y_fp=PD~Z9hAG+l6VOyYGm<dqI7ThUsy7<M
zGCU?2RJlx-V<lRUONRhou$9~Y_sM0ckC8H@Mx`Z9IWO{2t9>Re<5Jf@M309JX%jk(
zr;Ckebp>RjmQ6FwERUWq>ua&q<u^F$dzGd7XB5q7Wk^#KvdM?AsE4qqhJqMBly>*v
zQ}^Oh_KYyfdWq1fiO{Kt{22q4b`b%oh_NY%hW`y?QWIfP5d|_1{tUyXBF3d4{_oWo
z)I=CmL;;M2Ne4!(-2A3RM8=^b*>5Oj#@Mm&!q^dmzKBCVJ#`LZQ4S60-evahMbCH^
zdGH%w=?Hj8B1<8Y7PAb<NRB(kJEiYFSb34XPGB652L892Tg(-oD{6s=Q<0Zex60VG
z!I(Qs8m=-}xQYi5-06D;_d0JTIp68Jv)gh?MZ1wb3w<@bRes^azG4?d4ZDc5bhdST
zzTF-DXwr?&Np-6tler8QN$+ja*kx7J%y#hWe83AriEjL!<4+9nxJb_voZ{|6MM1^z
z7S8e8R+v1*R}M+=cDhgacsqR80=!$@w}@@wy39A*sDvJZA>M2v4`IAnL<?l%<7P_2
zTWDq5pHZL7pF;S}U0JLAoO5#+XZ8Te9jyW!+W=A_ov*0ROAzv2t%U$lL$rbQ9}SUN
zIWPp@T0-wy=w8^L4`iHEEE@E4*i1iVY9D3p8-?4yVj~M;>+~PN{~JmMH~RS_iR(lL
zb0LE{i*@s(jv;f`2=^`k`(+2~k{`ib{MP~Zt_OsicX2V0bGWPASGL}Zy*Vl~dQs*5
zSYM2Vz<5-$P9k;tzWB2!=2N&da#T&Y@~r%rqkF-ju1DQouu6hdoXH|$npg?B+|Ubz
zW$5=ND2gPj{kzc37e#I<vm<}(^$n2H^P6m(uP^Z+Jlmrel%A(u72W6<<wgI#(|~MB
zOM7pxrHV(&KPvgXH!_v&L&2s!>to)b^;wV5#c3BDvfK;wKcb9qW^@Umi;2SAa}`nG
z$I*;VK2o%+U#?yZc{{opCDT8mh0-jQF86u9v@<gM{q>kV>%0i2>Se1l{JJl=>2^_h
z(PJM?m0j1PGsc>`l)(l1cT$_XVq`KG%Y(80(=O01e{Bqvakai><_eC89?IOjDDSr{
z%+)MsDuU++|A}mx$f0J=tLF`>0|p<9S;?QPUd4>)bl@6)2AZY^g5B%NLZ1|OUj_o`
z7SXdLgir{^8tMAw3;G#XtOMlrzAuK%P32Vt>J-#MF#U`UCf9K9^ima7l(^UDAXl1n
zKJSkb3LE??3d!GwM}{1LM_h?}$yt)!$x*Z1GUjrZeMPb-A931wmTb#k2I@Y)^eZSr
z3_MhO9;O8v@Jq%Pn4pL53TXBML~z`En;7VFt)>UCW8moM1x^30qO`xHGx6@Xt68yM
zF7-?HJBRL?0CRep%#jgdLBdfa9ArM|mg+FmV)$Jq5R&}L-;gT-je*#0v({EE7RFj)
zZ*<PT<v(!crBN(|v*gy{lxNmx{#q&mWp?^*QmL1bgx@O&SWtZMF)YDHxQ2tL0T5Sq
z4NC5*uR-GiEb%Qp`y~z3i!XV+<1oTAL)#S5Q7s%DEkY(rAexexGfDa{+n;VQ#7GlR
zwO7qkPh9O!Y~L?i$XDOD|Gd2J!8eI4eqF&4!n=K*NnyP&yfE*>GYvHNb>Zan4?%{U
ze^mQ^!}>i;XZS+b7{!_jD}8lV0pKewvMu&ki3(*hWPVf)>F|9!G`M8&$g|&F1X<>d
z(8R9EF`Ae3X%TvCx?vql$#Vb&dsiEz@9s|GFAo+8?{dfu<gDd85rv4Oi8&}?GD4fs
zJuwUM996Y-QIZD~jNkFKd2?JsI0h_SxzG{2lx##c%#JWZMZ*$d`=haVG6%ti=}RWr
zKoGpYG>oL1JZpq~E#f&1Dv+SYoRzc^i?uBU4cDcNvY(EU{#E6bVKxN+*}rrBzM1lO
zr?BmJ;ZdkR$L)NRxoD4&KzqMBV;h!*s7Kc0S4~NEU}4Gke3G};a<aUNy}X**eh~UP
zV6D^5%9=G>kl3C}p!HhV3BL6)YiE61-$4G|AW_U|UKy}|V9@iBt`_#*EX@|R5%wkA
zOH3sWQUXD=QEye(P)I^p;T;8_9KiL&pW(bY6?#?7g7@|`pK8WeL0fECfIJy3xi+L&
zBK<X6F>{pB(!t%wnx<%DsFem)GCf;8^YO7UU9v&k3QUmf=wfP9`=@RuMLp{zdt*yQ
zLsJ&#(eK}~WHDY{j)4Z}+4qGe1k*Q9OLk9FYSZ(oBkA%2#(alQ1w7k*)8>33PF)UR
z+U9J+^6f=1XX;&ug*`tRcx`p8negHy=P62#a+E_3ihHXrswASz0!8QThBzn1O{h)0
z(ob>Q-G(>^<)yXv|5uFAF2<lea(eQtJ+WW7<+QM@&@AY_YntLz3uQl@u#8AV*}&AM
zJ=ZqaFD9!ZiBvYOy4dl@Q{zMmF<*wK$X!z%_V-Rb!zfBVcNF{_7NSf~VJ74@N-jGi
zj+A9A&exD2N@NoCsFY3I3T`4`nUTcA`yvaMTejv0|H*4?(%gLca+N_{kBWC-a}Y^#
zC53o#(6=c30kuOc-zIJ~vXW>8bdNgCfNd;=3OS^QMW8F>z*zF(vH(gxIJMUZ)pa}u
z5hep7lbtI9S=n?44D7s6;LQ~Y@BXVN63&Z&N+t1DvyzfY5SC5yqIywu=$n2p;%fmz
ztemw_?5ePC0*Uj-*d7HY!r7Yj3RcXG){+)v)DrnLRaN(rjeQwk-|?vkLe8QgO>WIF
zu;Poh<M_9h9e_1FYNz*S{M(z*SCN9bPc~c<g91lVWs(j4mD`8V7K;z<{h7+l&W|w0
z?^1`x*FurZr7_eJI!&YFYMW|2X{7Sib@P;$j_s6n7uWo->z&oZFr-Imrg&S>y0<ri
zFf4dWV(Q{?)u_Re&}naWgP=evpt6wZ^Z$euN-pDinNAJ_GC{Y-{KM+ZF6B_}KfbLc
z+TugR3taMiez)0KkyO2vS+e_J)N&~yd~dGjA7@4RSKs6+C&*M>X0OkcJM$_EgE-KU
z#~cmhJB>A$1QFf~%o<O&++MFz`8Dda8x~<9LfFT9QDU`WR&51;tV!#QAumcOfN|DB
z^*7e*{A~g^Q!7Mc1F^i)F3u{jKoK7cZZSUC1_?TA`H#Bd?3^=OrHeAELmd{jiP4Y3
znZCjs{4oWIr8xzV?+)iu(k!o_wrAS4V5`^lMq$FSo$dQeBRqC!mK(2@a(?pD#@Brt
zLo9TUno0Lio0^n#L|HOlIz`?hd;*Sp7WgFo1@`K>>n=ajp-+!Z!TaAE%@!%?xw-2l
zHM@9#$e{Z6Va<cHpGE!~<X!*YEuYO5>Px)Lp$|A%_erg*l~<iqoM#K4`cYpj#6V(U
zf`O^KD3_Khve>8D(I}a3K~{A7F-khEUHX|RUo3b&alz!^LVqkH7~v#MYH@IO?^KR1
zeSPi$>|8xqpn$pawY9EB_7C^*U00VdKV>5YA%L01O@KBv1f9+E?*<smDP!H-ppXKB
zlFPzhyq~-@(d}@>tG*DfsD(kp|29{hvyQ63TSN|x50Z@j;WKmeZd(vJ$^`Ml5wBJb
zOr91P!P*sn+W${-LEdLc157bbE|VLZPhS{&O!2xY3tqq5a&MIvOitgg>n3@83Ts1#
zVU=D=s7**Q@EC<Uw<;r&f=8-UvU&v6EOearNYHYmCR=NUM+I46fL+V#Q)ex%XYCGO
zUli>8$=LIKzi0Zk_a@X-Zz@q!_xH`DLMe^%H#eaX8l5AvReZHxka0W2=_iq2PS#C}
zO?y{bwa#1f{FSm~-(C3njvpvv8GZ(MA|iroF(5Z{(WldrZ%4AlhdqrF)IKO9B&+=p
zW?AkjBx0(UUYt0d1AKxS;Von@UyR~iFw@d2wUI7b_*(Hr@H5G`;EAe4Z+xGd1>fmc
zq6Yp0%z7-Dd&>fyaYbt%)u*82Y**C8%M1VTxxC{oXL7Q{Gdle#Zjp577<!ULaP9;%
zhyh~^kn~1aM+fAfcU;KfN=?VCMYm5Ea5lR$Q4vu|@3<i2*j0C;m-Q-ILxx>r{B*q+
z-4QO<r^~`+-1#-+f$;~y_pKK=0qmx8)6o2JdTWbE=X<U|U{vm=o*zT5X;#|5l@94|
z=zZildH<-9kq2J`U49BGll7A4Ps5VWn5_sJ?>sy-a_`-)xzL)M3KXeWe~Is6=}x$W
zQ-dqHTVIikS0&dmK@yi|>We)Gj=V%I)NOu`$<mKe5jNx8#;>Ok9(UpKx6v|K4ZU}4
ze`{K=jrf@uImE_}Ckp<vm*A+1SdcAeYu)XV*WT;3H#TSLvxDXHua{y~kxkoy502Na
z>!)6e<ow+RS^0O~Q}@)3w5Q&vQX{gAZL-W?DT7w4!DsqIIKu6qg9Tco@+7q?UBfAs
zY3=e|_Mu~9!IPCbNyY;>2!OV4&q`X#xE$fVOeh{4Y|(c@<!)D-L~t?7u-It+-@&Sv
znZyufO2B|!B7Eil5}4SfKWImPoM<|%lE||qz}dTVM9SSSH~uRCa{2=(TRl;Y@EVl;
zqlOg<%Bwd<6lXJkk`V<&_LXudYzt*D0M73Sc1o1rbvjwb0|uAlGV|{vpN}8MX<0u$
zF7-n;n<x9e(gQbpi<eIMs2-PEH~P|L1DD6F`SKsH$KsFIBTHlgL%0QSahe)xyFN!_
z#aS)vSc$~RzKXH@*Ldi61w~h7u#L*ri?K@JO?4%GV?rgmWEW*SGHqIc@MCtRedAu`
zQnIVcN0MUU;obk23#tqTR2p~vQ{J`WrD-urRt@poH+Ut{S{x#Yfw^VBjPQhuV6y!c
zm%>W9c+gyC$%?<-4$rN)(H<VRm|MOcUw@!_D{gUs#3$=jXe!i*hsaYQwyZqAY%)}b
zsRLh9BFP`yimq=Y0cV#b2~>O}=yV{hN&mn$TTBu(iKD}ePp`#Fuit9_x8M5|sNegR
zKj8HaIG`zrH)j5QzB28M{^@>f!Y5}*lw5rpZ&L-U=z6yk3TG=AvhlOF{7gp=>!o+b
zXpRLwkc_e2Bd`~{+$C%5+-3oID@Vb82lIZQG=5`XL}tzpd#X_Lcg8x^vOTeY7c)v2
zUOgLU^0pmga4naApZg&=HK20R?Z~IYi>mdI{{!qdY8aw-g3TYPtn1iKA&v)@_^1=}
zxwfIZS^&vBU_=K^rVz)Mas<<HytpV=o)qUMm?2}1lqV^|QZQYbA6cJpPb)J<6sfml
z*M@jcYdY0v%a<NEdx4w{#E_K86pR5o5@^|aPhr>=FOCpbl0SNQTn)2fTbeAszDbsz
z%>p9deN8NIMO{XswNzpbb0gXPJVf*j5uv2inyt!9xWVa-Mmdt4*`z09gUFMq!HKzW
zIT=&YQZhy&bHS<jE8x-&sZz{*(w3-O$hqWCK#x7<g}5lO%&CXszy481k>;$%bwg3%
z3MW`XJ4sLq=8}P8nF(78WsUbprZ00>-}Bv`jtg*Ss@M1qgQ1O&b^0^CZI|nK?%UPf
z@|=~`TaUod6T9`w01@>^5iR`-zgBB0o`0Z9N^Cy)5MmLAl*+ytg93(YK4R8BU&?Z|
z;cFkF)HzEwB%!#JSsP(X4rwtqL*B$VZLT@W9mqJ|_Dxzit77vLts()nu{Z_!q)>zW
z0+i3yf%Kw*l;jPYCjaS8fVE1c23jkS3tVpKdpf}ASmTJ8<9r1+Y8#1~W8%zYd>C90
z*aZ)wQH3-|-Ly3fnRB-VRRL**yiIltyE!?OL)zqaAG$bhoU~R?W8bT#KHr<>F{w5L
zicVegT<7exrGhwFe>~K1Ec6<>{*}hgwD`Uu-^Mszb`CyULp2FAbWXm=7{TA*!yZdz
zj+!2&mqgFo2_fM?8RDmGH&?5>E{2;W%Vg0apcwtQQLxH{a|8dn5H=g2Z>XP2W&F!J
zwxFj-D8FLG;U_9E;_R#qIeB4ElBMpnqIF;%7F2^vU3gf{a5h^Gb=9SI$@OievB~vF
zLXtphJ^fTZB@?7OYal1m;_!wt!mufWU=rxqh#^dK4+KoLVZmD=yR{&a3KS&!I7R$z
znEz}IJy%{o)aTaIBYnRr6ijilK(h=Jc^K9D3&rVP9EetCxvCqMuAQw{0#hDG6+SNR
zLpxhLd-VF)5&S0p)|ZhbjEHn+Jtc~wy~|pJb;M48bHS|@5=jF7haYQIttvDuG{>&R
z+~-sh^VfniP<iQX+4s()ncK{{!&PWmNDu95Jk2-G8$4NTmfSJH<{Ms2{#W3y{hHD)
zJv>;O`#RDUzo)4*pjkw;JX>DO@7O1J8M`l02ydDmz)t1!F>cnH_M06~_2c!#RR<jK
z`|3(s0zD9Q?%isE;+VWdvWjGEdP5I06M@7jopv&hNp=yyPtp%q4B#b6Q>pR2pr;Pe
zuGy1pq0)2p<i!HA5m-$;v{|-57|=<xD!C6N#8O^V`%40wzhsidTys^j(bE4iddU@z
zu>oS89}Y8XMRp(PgoV>jX8F6T>Gad~bLiIevCF*9!W8M*r*PfRd?C%I6Fg`ux}u1u
zy6RuI&&5|=93EPdUT0or!R)n|Yk2QW<VeO!LnCuK({|b{PhC-v$>V{9*izrCy$wpi
zmzN^nZcQojWs~ct&a%yB-#`^bY9zL#C|w%$wx87VBk9bCeC@YM-E$@tj=}3})cb@;
z>Z6;Gre?4t`%+%qGtLUnfMqRvfSAV^aCrNdqKcYLtNYCA`D>?n^x4RMo5b@}dBIuB
z7aTde5XdAU-L9pSUXgPjX7U?b{>!1@*#EpTn68gj3!ls%I=nz&0Ps0EdNhtP3q>1l
z!Pt7}kRGe+cJy|x_LGGp5I6LQltO%)9CmahP|_~%u5U%_C|BsEPxIrkH#fV0q^^c{
zIyTCttJ$anfot85$DcO*vaGSvMKYPnTULYN9uCBPQ8}5XJ<HgnxHk@u@v0uiUydMU
zj6jfTka;>LCF%J-+j^NbU-PfiVTiF8v%PkL3vAz*o{waTM(AhoYNC+cPmm>b?woIX
z??T92AMec<MPYucSHb+wJbiDModi=&%T_zcnR)yh$ViNm#y6$UQSjj$+iH5~SBfMG
z*7}X=))0>lQ@H{@$R_g8(FJ6r!O7;g_PYowN4;c<eE#BDZg45N>t2kXReaf;nQmn)
z1-*%2KKXu$x^u;q+x~08QzDK@{OFn242Pd+7=|CDGM*}2uviN!Wrc7RZxZ5<ZOa36
za4lbjv==1?<x14Ko*cWk&Q(vbkgRnqa*K1J1$LG~F)=j~F8yz@u3i_p?rg(vZc?9e
zqkVlJ?zejzK9;Ve|LJwQKTW)MI>FdqqV0XOL6v7jrDXITHz|BTK<a&D!_{j|&n^vm
zwd(Gx{o1{<^Lh48iZYonsn?wj6J5IgPq0G=sgwrw^BhsQ)Qd$L0Qjp<lda^bFLU@W
zsZY@>PKc%N*K5DmDL;izHEXBkk~Yg0MhDY?_cX~}u^CcRU^Wihn6!RN#qx>#4O%z3
z@A5A-nNPf=Z-&?1QUEgD!*}WTXWF;h-D*_T(GSQtqDS_9-M5s{tGa4qdTqaeOe{-|
z=x^mNSDEq(Rgs#~tH0V1;n#5iJ*ZEL$S%Gofx@t4e!Phi2mkWwn(~N+$RntayhRXj
zy|LUqbS;kEmHO5Rj87kUd`rq7P7Klklc=D$0v;eE-PNA}C64xj1bzxqfUp2wYlT=(
zTi+Mq5}*UU0NyKwRqr$POOrhnY8chjkm8j~U?4(9T5Bx@N*o3f3EX0Dt~8&<8hH*C
zaA{{qW8DUi?6^zFPvB-so<5Temw`A@9TUQfmDQa$Ot9N<x7-c!iaWu^M2mu(q;2EQ
zZz|4+XWpZoSV8t#E25m_oRQWi?~p}|J28}+O-y^7;G0Rzdu#w-KKZ~BQh|F%l&XiQ
zki!ozs6u3}bw0w0fbZsS=^Ld!5A>UrA8gRP4->+82Ok3fNdK@VBf!TJ911`I2i3P`
zhGSl@D`ps!FC{#n{8b#<LJEag<-h<^?d~7R+NbO#bt`7rwXwm6O_{{fM~vZJ8qWV)
zQ|=3R1?accR{)a6J&d8jEN%jRLyZ=aJ_)FD^J@s8%`8OxP29jTJao?dUQ94gYf&5p
zN|AJ$1T=3VQ!gIIO4Y$syu}^Xyo>8kw3*UXut`!RXY5d;#5%)?=7uIR{mF42&>Uoc
zSRA}ZWl!k95?F-R78c}^E>{r7j!m1Ot@Y89SEmj%?xb@^Z$}_?dQ9z&7Pq+CJ*&m;
z+_U-d@+I9kXHmyeEwl$|g9TwOj35_qk;K0Ria95X<7F1(#$Q#^thb>|S^m?#1>kZc
zhWi>K?&`q1lSeG}V81q;8^i@R=ny695rw*PFQh*F<>#i;nU~Do5OI%pboSB%Z6TE;
zRKkqSg)lm}bD{CLfG;<WW!=ty2Z{v;8h1h)Czf0jpK9H%%F%Ch_tu)CHLgO_1AmG-
z3xd%s=)i?(haE4_J>b6|?<2Ejtxhe@EI)!Lk<jUPC@TtON{uDVI#w`1pPTw%Z@T?f
zb#Vy8z%`Zj3kwAZEZF|+BJ&!m>c#l=biF>XFHc94M|xV{8xlLK?1nr-(5hbnW-=9r
zcA^Nnc1R$0FlLRnZbW86DGmi}`kDlZ#tW^WcS|&+RP*82oeTCJTwcQ)H`=I0>n~nO
zeR%BZw9y&zbL{H84{r!S4>ujeA@KSofI6JWDFP_gf+PJ2=G|s(G^-s*&#Pom9g*>Z
zQ;((pM)4knQA#~?;0N0N_+L#qT5V>-2XP-;x|Eza06`cN7P0E~#*Z-u*=TQ;!adZx
zJRgxM{tLcg2EbC5Z_*s;)=UY(&X#eGKWZwJG%giPJYHz&mejunSF%E2z*5zv(Ckoj
zB=!8*Yv6OtqVruS5KAIr`wEHXrb+biYo&833RQH)lE##N5W6@4{`u=W62iPRv~gwi
zT+o#uLd|yd-_>=Qt=h&;1adO`^b6Q)SY6-t_ZXsN(scH#IHNA#w=P5U_t>K<+oaxa
zk>b2l(&nT&8|D+%rdbKnmaEbr<HFFg^^DES$YJy{m(V*74br{R0dTTO5~vjQaJ5XQ
zNZ_uaE~Glx0k)p)9euq$j)EvM>I&QlO4djQqsb?}bkG{43cneqVC#W7$Sge}otyrA
zI?rOpueehBAWX-@Zv|)fd%g@X65x#e$q~F1RR3muebX4{<%_QI-r|B83jTKvNeApV
zdhcK-3yr>KXLQ8R`})8tj)X4mlja(yB4j)0I1ws@vY<^EfH>{EZL~5+;?vb|b;AIf
zMyue@(VSt>HfU*B4}5t{Qj$>W(jTwBwX-#7IUisWG?Dp-?#dxI{jsOD{}K42Z50qg
ze}WG~tqy5DIAUfJ*uSxr5%BAzJI}KUA~mS*AkmlcwCef2tm<432r(5d#t-7~5l5e!
zA^*;YhZm9w-4j<l;7<UIdjBP%OrQ=>i$tkFu!ejF@n-(nxzpF@0bH&Kzlq|fsAEJ`
zPkY)U^D=?+)OP3KNAK+a51ZtZheXQs>3IJFwP6QGA{zJ)oCGbn5iB0R`y}wu{8tkP
zw=@PBB#L;pITpSkCDW;i8!4lUvoMp33VzUbj>a7M?ke4;!l1%~fV9jM<jsYOt)4}I
zv~#^85*h<RDI2Cmvvc=)Tkqu?TIr8ntkN<S`4C@M>zdWvZ^MWXksEoDDif$dSJ4UM
zX8tAcucg4zC4FVo2mZJ!L#CV;t1$1$s$#9hLgVi|F1qjqMNOo2?d+M0aDh;W50*S-
zkLF2sJ^zw_^_tC{kcRP_Q$D1C&rP@~|KX%Cq~M{1FzFjQ!Yd=9$S<%$PDONtke@J;
zm=JjxCfqP1oR9=W0Ve>)dM86#IG(#=<lJ0?pSZ;x2NWi}7`2W_3pinE-=(|Kcdg&`
zaj`+YE;%tjh%~fE?tCxAmo_A3e|p;{FMHTyr~@^Ytm^~lo+$I$6Z$Cb()$pSB%#AA
z1kcmXoUh;i<ZeDWN{DNB=p+0{j9?(_5<KbpN9Iq=XYiU3^@@lNN4lH!%DijxN-z@F
z-~(`ZPy87EGj=U!>dNcux4-DU{dM>b!j<<o%$4_weHuIS8XSx-(}Q{U85`vZofX}}
z+9jO;Xn%3!l7$Tfo8G;txmOXml1&g%5p~#C?KdPg*d$>Pl4hO#_@hRx>q967PDa(o
zu}K%zeO8oyf%Ef|$*qx>c%P8TUa%UZWrwtZBfJ4ClYmj<wrORl8uJ{Eq(YmjQyds+
zi7+8klY0P!M05-nI$rNs2=eU(i%#ABrPPkdDI^uKU?bxUz@s84hwA)v)3(x7Ypd~D
z9%8kFkSxm)aB@=p92@Fwp14i<&&z(p7YO7)@Z|;64UEkG!pfSFgzr~z?-&pdr1DXw
zb2bx^huWFe)c$EX){U<iO#pQ4i{p0pCom2O4K?_}HHCprqRTa*fNOtaiU~{;>=Usl
z8ptm+3iU%`d?#YY*rNzx7kXm)hqqkKZEoJfs=}qTT78!#wAQ!g`e=#x;{STGV@Z_}
z4~LdI7jkp)gXA4stFAo<JOPd_)gGUgO1lg6VUi4I0+NLI)s2m7SaPel6oSNi4Jo|>
z2KUKf7@&m+5gQ1mJ>-EnEuJc)HzICYSoHal|3Y3tb)T_yF{9zzdz#uM`nmr;&F+;7
zT>5jdhh;(Jg2K=ycZ~Sw_M_(LV_8zr@s6<1iPxWd%Gyhr=dDAJ7L+<9B!GEdjS*7!
zS%ULRub@kFzMH_Ir}#G-WB{xQYFb6*=1B764y@8}PV;XZvROOOObeix>&fO8#G_>J
zTn98e<6_?UXUvth&sVB+En1MHtP4tY8zB)lnBztaVo1@due1{R9*V<N?&<?N2m$Up
zLcJ?6?_8xCMjy45HG0U0SRoA4wZTwsutal%$DR_O4+X5KY*<Ybz{^2CT=^whX^7Nt
z<cJm8V5qD_MawV{<KsJ~$*{}O)=r{xPvR>h#8)od*}g}WM4iuf{l1PABR(Bm%x?7h
za{`YcWbXPmr2OU7Kb>74@*mvv_IKA_B-xss3oHQH^10_Bp|9UEEeQA0eSsm)4&|4$
z)N>9ts9t?jMIo4!I6*hzql_2$@VxAh2h-qZZQBjhfY%gFWN%<$_KMLkLIZpc{`~0O
z<u@_pW`vpCbp%8uuQ^W|f?dn=u4@vt(TsVaz`*Fe=n}X)a7$cQ3I;IrdahvpzU_z^
z!+)k=yaul_FBQ2z?TQlWH01$e<c3?!c_h@cTi+16yOU(1N+?jTO8a>;nE4$B@UKj{
zb$0VYzqJ$d@_S)Tso^o@2!xK-;N0+knH2sbBfc{xd?Tn857sLRCrp3}kwknYoClm0
zGaJPf8xek1JP`7D2J1Yf`cr+W7wT*BAzH{o7^%+y!OcH2T;u`4B`D*eJe=G1bk4s|
zjdA)`Xa?T5^ueE-$o2}UTn-IpAo?o4!9w>C42EU@`Nw-P)^o-B%HvV=8x}S$K89Rj
zcxXf!78%ZO4ECa+_cXGACIjk;KXUoutZk}!Qmw6g)^H7U-_GFqI%{a^ydNWbz=Ogu
z)Xe^m$e$C~KU5LOvZY}h%NHJ1$CQl|NL~NzcmCVs%Q=;<cKHB+i3tKt;EB4oXH0Ef
z(YN8kgXUerF`mxJ3Nn1z3+-W}y{o$XUB5sUgp7J(&{epwACJC?4E(26LvZK&NB785
ztH?TBr`m&lG!{N4XjnZ5m>Lx4M7^l$U&kBV0Hh}4t=wZC+gxn0k~OGZJ{(lpnp<v3
zIhd@1g?nlt5_{O&7M8ipA8Nmv5=LXw*C0rU2t!=V&LNp(!gYJE;xuqt@{heZF|Ap=
zuW7PhC$Nf06V4(N&f;AXn2Od6X2m0>`;eG`Cc}~<$gxItkWlo~{M?8b{9DB;k9GxW
zR?U1N<(4NjVcTYAam3332^+h=pCD|+gvqAuDmY-&cA1!FVH-e%wKU2^m<tDcDoG|Y
ze;7Ma-GS*`D&_2Sm!iq^$)L&pv}Ne}9~kn5v(HO)a9t%39;3X)SZu-Nrv&!Iuoq~2
z8kO-QK@mULYGT6>AA5-SNBr=~T^amo_ME;nOtRJc)l-oT!Gc!F)25)z&7u?2CeAA|
zBgV&2#Lc46bTwXqNc!Etn3_av#Vndd94YS9b$<G7Xc()6nn%AqZ#<WrSyAd1KLJOv
z8%J;wD&75BVf+_P`<J!`c!;FR+ZwacAO_S(zqYf*gI&+N2t<ZOGSE1w?L5Etjw5mX
z=XEX2t>H=NvK>0BiN~^<srBKECN1$`t!Bv|c3>pL%&_J<a9Ny{a~0vJ4rWW+Dik2+
zPt}!7yDop={fE&#k;_^!*=(N9*g5RC<{JXFo*1mZx!~QCGYVF{oqb(mgZ{{rDilbh
z**7F*Sb?}K9-2sxB;>WIGV|22uN{H^G)YinD%D8)uP|U@*^fG<RUW^o0a}gi&)!v5
zOLOn))_vT?o4<1vyn2`E;YxreO$^>1)6@8_?k^)b#XV6CGR#JFxd8R&ytq1~%f)oo
zvc*#cnWeZW*>gyljDDLw6L^j)3R@jF+%Sq`X;V_VJgb(slNaJmfjs9_0F%xd#U=qK
z&`h>SioXV#su~L1$Gh;JyAl%^oWGj_bRikf+*HdUrkI>CQz}>-<&fnwS3lmJowV^H
zeKc`Pv6g#`A$jvBm6WUo33WD`X=}6tYNW`z1y9SA?VhjIHsnH^v!%)mg(~6sYTGcd
z<YR}Rt>Es=G_i4Ew)me<sLLhdOe%_06BM|O9#?+}EGv4soA08ac!wpSX7#upa7>?b
z;!}R-(y<gXOyfCbf0-L;73(#CbPKqd+!m6CY3)$$M6)gSPUks2zE+LI%^ZW6dB(|F
zN2<o4+8|u(O(nMvlV;0%#lSW%Q~zxqEBiA$h#THypPW7Gqi~`1@cudG{C=0-8*gdf
zd7!FvCFuj==_CRu6HoIQz{rtJ%gSNo-Z-eS5ItOs@s^b&m12v$@K#Lj?^A=R!Z374
zmFe&hMTpXWOx<(F1<(E~m1`OH{?9N+?f_k4h+$!P$WTYNbBgk#o%|R~FYCTK#X?Ng
z(J?R+^~(P2kB#1{>br4`f=z-eDP*-XPV=Vhvqy(S8>lWQ?lwpHMAbH{j#ASfIEgGO
zl5i=yv?H0Ox22ma4_)lYZ{^Y@D}fcu9sD3nnhpE>MXTwF7C^68FSVre-+Pd-#h&z6
zgaRblM!m9(m?L=%P&z&{(SH-9tW?b?v!WP<Jw=Rt=YK@6f|1!5KfG$nGyHEI;}fCO
zn42iHj%Mk%5haIVD>C~2AI{z}y0WNk*W5t`l~ioowr$%^Dz=S^ZKsloZQHhORBZF?
zdcSkJ&v&}}Pyc(?)LL`yvDX-LuIst)?P|tpGmm-aH{tSTV#PZ{42L!$mu0;t%<Nww
zGLNvE<#kW+=vGV=P#eop=lCQv)7~51lV{9Xlx<k;QE0eV$EiN5iMM#k43)>~mDO&R
zvcKxi5oXm*^Wg5HUUK7N+i8!n4`z*1Qaqd4x?oA-U^Zv0C{>Ad7Mg7@Cv-&5gU$W(
zn`R1p@I7y5Ygt~U(}hWE&v?k=ju*RQ$F>F+gZG(*^lGRNuvw*L5!!B6=5XPsYnwo4
zW|O9rCXFpRqa|(9zdup^4nk2HhLlxIotw6WUYjZGMx}VCyWo(cIdNV_rJkwdF;|YT
z)JU!3<bvb9I{oTB6(K6@lYVj<rCclY3B)OrZTu*-<|auk&$F%qDnnTnH{DZ`yWMpJ
zfWj?0$5b6p2aRHzoNn53#%`cy6t}h)**phlH^f{08AM4%Q}{W}-=xgz_>!;VS8ztG
zRZ+#QG-g{*35VTo#-k}`ncYTRm=PSP<B=Rr%P><IVO)Hl;am2rDp5xsk1!+u+;iAA
za5sZeySvLX>`WuoR?9xbM(@<dyZ|4~KV!?a#TmCXN;V_?mAG)@F!SNz$)`>CLrrBN
zVA18^YEy;2Otkvc?a*Hfk8CYik5;8ZH2Q3Wc%b8(0*-H*VVEwNpP3uTFRNgX``5W(
z_kdxSLkK26on>spjQFr18i`Ofsa27E5+&kY&-sVKh-!Tq4#cM9Q|XU<iNDP-;aXU|
ztPlMghXZqNlzV62vZq_SSo*M;e9%OV|Fm?yKj6NA4Vl{elyajqs%n!XuF>=d9K(Q7
zYs)TEe<wbUj|!`hU|76q$9gd>#}YTsiOJP#Vvb2yneV^9IgP)7o(#HN2!e@JI36R*
z;-Fkl|JH|q3>Moj7fA4nOzPFNnzt0AlS=55hr5hxLBC4X>Q7B<@>zYg?#wC;12Q-b
zcLNs8H(~2OP#e$mzLLw%tv|p&$jVu$_DsOakAXF$DvxxhXnct|xz?)N#yYexCU_A=
z5*^@sMJX;J=w{3v&)v8+V5Ka`qBmtyj^>_GvzaS=M&;oXo-Pi_P{Ew4PV{OjXqri7
zZ9t=enNzoQDo707JpsxC+$DhLVPJ3!u}yNP*D*`PmX}vi{syTc5h{P$S_HMAG#IYp
zQNK1a7+x8rF_(x|T35e>XqUo}h15B7h6i%fZ0-==s}p%-!;tCZMt0|Z>Tkh~<MAV@
z9}1RKnx^xlS5aqC)@qIg?<QoJT4cCM?T@xR*DR`)s;mbtLWT87nywc}9M`+=S1-NA
z!Au`Bftfv+IsL2MiqKi3UL1@Q_C}FCrJ>xpUgzK8JD*`>Ty;aUPrs41XPg@a>7w3Y
zae7-2D2+IpMUs2vV445im_;uMSWihwv=e^f4lv>FUVTwGt@V~{9`vj8SQ(DiFbWni
zx3&FerDbmzTI66KWC!Ep4<(D1*J`U5%RE?YrG)KxLLQG9F}O&6S#|k`v`bY?vQ|mD
zin<L)=y%?BN&8k68h@E^S3qx6CjCXZn?J(L#_+zYG@1)X6Kn4kYBU^R_2{u@@U;h2
zCBIW9r}n%Z?5P+vTI)*_eLGj%aPL{XZ4#bq>hC<<`!%vX+FNKwOPQ+Tww6GG0Le=j
zNv?ztkjNByBmEMrx|QF-IE!?Vod_*8|E(6fzBx8>OR6^vY9Ws0sc_!2T$Slx*>ZQ*
zf3tnW9P6>$5AqxWF7sfRQE7MA_!i>k#Ww>~mnyp&fH|_SXwqc0)4SnT1E%58YxWZ5
z6B5#;+H2L1t}66>PwP0DxBWKB12W$3fUx65j<<CEGZ4GCMyzzQarwKGFtvKB+~q7p
z4d6UX?@pyXe@7KP&6};gxE4DQ&U)6S>}7xWTRJArimvi%yDFc!85U#{-r0F3ZAMNF
zOj~J{A0eX(?u3y#9qtO$rb?u~<beBtj`iGaT;bvAehiJ95Q7r?;?+}5jl*j~GYof)
z^tO+-qbwu%m&R{q1gCPKC|PFr5#~n6eXq{iCEjgwBs)_SnSDW1WkcxY73pZmca^(_
z>>!MAd5PBx3n>Wcr^@ihTrPkjQcC9xHxY|9<GsFY|6Zm@0hAMd2DnQv(ftsp89c!k
z;r7w?9P67(tU?(6sk;Vjd_J_fYO*S8b@E(!DdEVNt(T<kHy@489g*y+7g9a^uAy@y
z?K=fnpY}H~(4=Prl*`6G9Gr2y`%gYn@r9b)cE7Pqm<aUsMV(1h5a`2`z|M{AD;V2i
zK8@eBnBBAR<bTS#AZyBuuIo0sKTE!|qBp+b08uK-PRX}kNS_+|CGM>K+(=n9H~h@)
z);mFLMJXyTUzVVf6CI7pH-;;0sat{oc<wT?C-sXEIU?rQB!6+L>)nbUP)C*_;us7H
zmQ<@l516Z+Cu}v{JN6Tv7-%ItVh;fwkBou{JnC*epbMNBUAS@u&S;lT11vE8ApJKv
zQxOc~xthvYo@St4AF^HPL)93nBPCquT5`vlL3?;-;4!3@eXlN}tVocqKgp}89Tlj^
z|7>H^>m^q#3PP3?p3ENwVU+Pz7(SX>BAT^8A;PZOv~4TD5kthrcGh*D68cD@=p7><
z?e^K4$IrA65Nc?>@hVR-P89wYHz+r<z3ZpGlo(=2J?^x{#SwzXE0<!#$-fvktN)~_
zq-OtwEp132%8Pw5$io69cbKgl2<;E2!?!c**Az*;GVGGR(*)<+zB%{)b+!Hi&TsGn
z5^jGyNb(h3Axd65&AdK?Aw`T@ps(<gC7bXy?#~9pCfc5NUf>B<4q9Cte2r}Rd&`=Q
zp8<k4gY%O~DCX%k>pXM&Di6tPGd`mJ*|q*rkJF@hDZF&g?LYT-Q$*LCJxMWG>J278
z#YpYO1g+KPRYR*-J-vwDnpsXaP1lWL6HQn$=T>2_tx(qm&W*k_nb#qT@&-<cLS2x=
z45C@ZA+NeY)`~FR3iIUeVj)V_618Op#;c)?S}tyet2YdkY9~%x&zUMB*lh;As`B(+
zK0Hn9mu&6Ejn9guvEp->q_mH1@^q^3zJgS#O36oz9;0_dATTXT`eb;<!xALHUEv0@
znun`fxemI-8uU%87;}&)$)m2uW4M~DLEJ^FyXP>wa_(#(p*Jh0#2h6YiN9OGaagjZ
zmK4V%nuhBwRvQ+bOPCU5wWEVKqjA<O1El*Rxj;bZov`fYW8GaN%)H`-*WPzH@MyW4
z>LklaSu(}=qBqi$qc^IA>xE-kBF}EEzh7#uf^QVBLhr*>Sog^Sn|oGRB2E|WFpkSn
zu-mY*7wv3CnIYT9Hf3aNP&SX(Q?lDM5;#&cPuB;mr_ZV>k2&3xk!7#hiq|O+m8*Af
z*f29WzOcpAAl^l~1nVV3FDc`{|8;lS5xA5oc{K>MQ+G2NEKk8;PVlKVy(elektlXm
zffw5+(i9od=z28vf3K6Mye@$&t+Zvrf?bNlNvM|5-CqyhY9>4>3G8AYnMME&jYsgS
z^M`%!zb}<>D5kv+IzJf{^HE5#t?s@`x3~}meNn9?Rg4m*M=7zT!=o=c?UqP|a{h{l
z^$zMHj@u|&YfCTYa0u<9R`6Zx#2pPElOcG`F9B|9U!yU%kG_wP<U+xjU=t7|4hZJ-
zFuSgCc`fDa(jeU?i~6^t=SsuOwvJ)>daE*psT?>x_zon!b_a<-FQRlGX(Mawe!H>?
z7Li^KV&{^2!?V}}$vAnB)uvgfQWGwY;vA3;ImWvgm}>0a{aoh%G7~#J`i3@3G+lMe
zu0=B2#=4qc4y#B~tGzeN+WQB7TXO!DZS!(`(pzsfHj1Rqo4XU3^LT(kMskWFS#9?v
zz_g3ag1K4seKgB2?e8}HJQrW8<<5Pn!Wp7t2m&zK?KsmEtyDO2O+~2ALb$BJ(@1ZB
zgp7LrJW_gDny?ncipxn_iTfCpG$aew%$3+=smPh5{_H8^l%opXSp{jmp-8!m#q03l
zj)v)hein&vk%%@r#`ZZ%rApL=0kYyC+d*Ja&oxcYM8ENM0h_oPRY`1@;&A_v6-m41
z75DX>x-f4aP`aZ-{-^&>{v1p-y601hOs2r-=@Fcg&(PR6VG|9`Y0Ko8@4Y3TXCqq+
z!{2iV{jM_?eY@T}?Oc(`goA{rUmf4fji@RGS)NrpMnlKdgHknG*oDG#P$YvIE&ni)
zv6>2pPIpeV4CqbS%^>=x;9b*q|4&D8V{pHplS$VQqyr6YAa;}mhZi~5Yy<-+9J@V0
z7B|P$hvi#&0P<&eRDjZO$IF6>p^whQVIy&0?VeNRjFO=TAO3G##DKm0d4(I(D37lN
zm5R%b${+E(WX83Rc70}!z2HK(g=+i&T#yFO7Q%)ub!%>~1y7+-(*p(``C~8P<{so{
z0wgUljGB0b_LQh&vt6eP2izdn!-cFu`E;6acv=fauP*&cI%rzW5?Lrdo=W=C(UqPg
zsm4Ll2CZsRV%EgS29!`zFIG(CpXH`wLUrG^`c6w~J_8ovX)$NZQ$mhQpwd{4ex#Eg
zrvR2s&cSE|nN%KU<PPK!hFlGxp%fCX8a+{=p$iu4X$u!y9kJK;xes{VbW_?BG~sk0
zeB0aGRxe{)tbcd}G`|e0dxW)i>|bht7x(OTI{4j$$G3Fwh&ndw?oWk|w@by>tg8w3
z@L%ZR4T0Ddz1cRz$?yC4`US2<_&tA2CfztGw)~adcSJ0q^xa;9Y*``Jxkf##eQX<1
zmw~DPvWFn6)&`B9^ZnjzHEV(hil3G6FXQy>j>bP)<Jh&uH5l)ror^RpIt`op>-94_
zVM!c0XN&$|I}vi?Fp|6(dDW6;vSbU?F?bb7pxT!OYF0mzAgee&42qn3o#fxnI3V4M
z)(={G`0U^qXLG)!bst)t{Un5Ud2y{Lw=3Bd@uYC-aOM+?+%y0Fx2q))>RV+|t7VR8
zJRZ;W%xA^PAUfl$d->?W6T@%J%k0IZCiWV6>BVi2OkaAo;ph)oWhBjlK{b+Sha+?0
zV;v|rexrtXuD*}1Xm^7t90%qe$n?q_XH@xm;~G3T;VC`F75)r~<omQ#OWOFV!6(t)
zrI~~6%96h|DYK1TTc@FuYHsjLv-L1An6fY7x(JQ}#m=c_qkJJ?`(FZCLs^&;-$Gp;
zvg(O<5lD`Ee)I9vh`}G$a?RM_;-`EK!)}7->c@O@5IFvJ-a^}jcc*>C#1oMIxiV0~
zF9rFC%<vo^*GT|QU2mM6dV3Z$lNu8C8aP<vyS)0S?SV%#JQ)mPuD?S1EXJk>qWV*&
zd)HMNe4SqQs6oS~$V087Xj_GUFCNVrYovjh<WU|0`9Qg`2U!#WA|69OE64^q9&P`^
z^M=F5zd<ciNy~cz^6^t-4a(xT!y1Ogrh}F}Vx*za$D>x#8L#3nBL)+Y2d^Cx0MuXn
zM==GKa+RA%Y)k|P5>Cc3q{QLlga7M;-tUFJ{JnMMC{ez9n~vXiuGsrh-<hPJC^Jo3
zHqqFaO*Z1fux{)BfGZ{?0)WZXiz4zT$l5u(Fe~UeXzYp8quV#%ti8+M^1RBu^0tk$
zq3B)r16Rki(i`Ya<rj1~4O4{~{1b|FwR01%TTde&f1W_g@F4R^@AuDY^_w;nF(CVs
zI;`^H^5*)gKP#QS8!^4Al#QWpNs(TOP2rOhz$6a7JM6qjh`Q_ZzpTt{#dZ)`C_9<h
zMWu97hEE5c{s5W>;V1E2mw{n^jQ_(Tol#atbI_j>P07ejK|Gk2uFs+2uSC6#4$9os
z_N`vEyY%elE)FCizp~?wx1Rx9$sYhbzK$XNo`K<xs^ZtrX%WvU82ytrz6Yu0#%C#X
zzO=<3--$Cf_P2JEiqb23NS_JjtKA}pCEsWu;(9t{CCKg`K^DUA4TKqbT%@;Ne*Z|~
z_sDAB9nhgwP0{5nJ<dmlJG_1GW*0nplOlYPA(HowUol*P_m44|WmpB@kJy>i6+3B3
z{K6{v@}PqIs<i4K?b+O{cZamSin+m?$SkH8wuzqhU1fNsDues@lS`JldD<dIH~`rT
z;ht$J0n~KWlW@(bwk*5dMj(HO&T4Y0>DR>!-Kcbec-0!kiVxQScM1|)9IhWZ{%vHf
zoy4?PD9|TSPT!PFma)PA{>wbi8dGSiz_?l_YnU2tK7C~lj6zsmE~}r?3T1o9+{$bF
z2MI6HH`@-Z>g~!jXQ|SY;i9W}V$8qhT)6FyY$Jj?4~CboHqCmnJHKngeNU{J9v9Ll
z8J}0uMY-NL(nZJcd4yw=GGDywsL3HawYh5b5!9JsXMBHI#krHdANj_cC7xYa_R$3=
zT5Yo~u5?~y{L*_L;%;P*Y?tix&(=xsYJ`ijlD&TuD(YwW!(P1Sx3v(!PfjWJIne&h
z?%wF@NWMKdeD=V;`S1$esUNHEWoKtwP2Swy>sky6>L+dMz4voh+X**=_Z4RT+$MM1
zbep%Fu@DyTafGa*J3wx`jiz46C(ArI;jNW--NkFv;#N9WjZ%l?`iPF<2eziWWQ*Ah
zd{j4T`M$xS(aO!$YJ=I~8com$OEh|j*WOyM%Wb*ux0YEE3h23EH}r_*dm+ZH#LH6r
z2eNsQ?iSl+{Az+H9Lv%2GL^zLF}fyApy=~#*S&$)#rzfijiFi`Q$`?rDF1)Rh!+uk
zf^66=g3FPGymD93!-g)2_3ehk`xt?0G)ZLFdUUnNpekJ%mxQ2|QI1$=eod;Ot`MA2
zm0_FuQ0>y3!_TV`q6Ja>wCk&&&XJg^){zPAsYHs<49$`oqnp}fmn!t2v6z_ekZZEl
z74|o*#GHv_Sl1@LJm=Xri*O2aA@-lw4nm-?{ky*ipBpl3%5U+`ZP`g!rr0I4I{_8A
z)#NFE8<FcR*R32@I$Pf!K#n9Jr=+gvtI^%Jz_#uEUUpB>(N}dwl$Rhq&jWiMfT!~F
zllujaOF1+3)R6DTD7aa)#tV;cY<h1Z8zO<7xu#)m)l~9FPZ-f4MY54f(|?h>Mq}0A
zFJDmkJ7S7AZ~fwWsj@wGRI5V=MS1hqkn6fBvtfq`beQl6vN!zF_96RFI-b#aMfZor
zY3ztRr>F!^f*o&8j)>FuK=$V^c(VrMrLiIh?GkI(F}ZT|$9n*C52FVMTH7@gZc>t^
zlqFtn!RLiRNuizjM?j-VZR0uIGg-V)JF8=Jzr^@6EVAy_aKqUEZPHxq_Bul-TF{!5
z%w3)rd)8(*3Q3vV6r~(OIoIipI&$%tELR7U&<40HBN}J*j^pt11;LP#s=$j_2ovk8
z<Sf5`wkp26kOnd0&_H(;g~0o(^ISSfniNwc43hvfyp{W*{-!lJqGFq}L{GxEbBKVz
z*x!Mjud7eH97dphpPXs&Zzn8&Co@Z2HuE{fNKqquVrxh@KGUw>*pNAnY)0EI9Bd4v
zs9ZqzI}FR*Mh4q&;jFJ%7d+`i#23S%HAQ1ajKhaxUJoTq;61c7&t@p<EEMtUQ7^&O
z)<Ih>#2v+ZZYonc#+Ic>GsE>)U%aJUE8(!X_rk!+C;cda=~T2#WCy{-QHx6mTMLBi
zCLm#zmJ70sts3kw!ap||y2D0Z7c#kE(`U*xl1QQUG-Ff=b=zpPyJ)q?qCo3s!O`db
z%8VF83o)<fz&;3!Uc|w>mv<LdPX79oCV%(k_snCFsf@un`89(yol?r(k|x1Nb?n`T
z5gOtJy7ugJ>$Xk0o(AXZbo&I@Z`n&dsTh5Cz5NoD_fP+Q+kQp|+rzS`M{*d`VFZw(
zm@GPRP{paLELMV!hK>+uD1h-4L&UM>Jq^T@WxhLw!#e(GE-r`mae@A5pGz*&?d;DZ
z!`bB&!1sol@5ne!rLHHB(uZEJ6CmKtNcV?`laQq0^d4&@o?^fPZJ~1opLVB*ms9ia
z5&SNn=MPOEAnGF?z|QY8{8_})Uz}kWTSe;LdnEyiZ5RsGW#u;v$Is$$KK(4$5I+uu
zl<H<gf;jR!Eh?c-4kgTj9D)txLPVU1;P<gKN&#}PkOcWJY8&YuF2*J(4e~YoF|OGv
z(i4&GLft?3&Od!nq`{5w8AtyXu$b>pG=^K?lLEUFg9JP%5-7&;eYg3(Ce8+OLhRkp
zLi)!CWv#OBb;Q<?ZN@v&AC?8a>AKB*K>;8mX`y;iCv<gtjqHVQTAUprR}bP_kzx4C
zOJo)TrjkA}kE+@0zi8liXRR9V24>2l52={3iv|rhlG4-rjg?AOwuZM4t-DM>rv7OW
zed33Ott9o|xs9>`@>b&vtEKOqqlHfa4nDJfL-WkI7RW36iyjo9$o7p29wMORHTLQr
z6kKJeAECUJ^YpE6C^Kr28or|9loPJ<YbXm-x=%Eg(x9GE2)I!3<cOqnqPIVZB2b`2
zXfmWh_frrQ3nYlX3q_!ei=a><hVi5}Ay>>nBMROYpqb5@BFS4ih>FA)puw9n{255p
z(m^Clh(&UxS>mdraZ>z7`s7^k{loND=Oh+=j{)V^z1gMh+X2Z`X6#GVZ+rt^kvkVC
zrat`jml5~~2B)X*{PzqZnov|V<KmE>8aS>m&n1R9weMj;0x*U_nci+_e#9@(<FPsu
zu{$B<qfe%MlWv;65;w-yIl`M=B>c5^H*bmQzhk#^o>_8&(_j*NrpTXjf5*}_Glw2|
zf%L|j;!QqTl;mUBRs)GYY*w1FdU^EbWp7-xUXi3y#u`2J(i)zCO<$?tB0=!ARHfX@
zSOaSZDxfg1{$CUGn;xv_gxMz$h}jvgh+iNKmPEl|vSQ~2P;6XKsI|d)0+t$9hJ;2p
zssiBB1X7}z`emJscwqysjp*NY71AqSNJn>I!l2Hzg$6VH{3BSu1i~v`zSY(&!ve|7
zlmPtRy<nx;BXq6}wg=)9;%{F3SVG3t#!x=Cl|S+X;+VVw5a7JYtb7IODw6%LjPKN6
zCdXaXkJ!<B_Y}%F(;?YiO`)`KLDytsnD<vT(wL<+*k0&{9W>ZV%L2hvEwqrX=z_qk
z_L+ZQu)RXdXjpJW<*k}eX^R6o)_-wf<DaA0*qcFkNv~R!eQy6Y1mc^g46^(<b|DTS
zig%qwXD(epQ3z>PJ{)|?{~~rQl}+aRn{nYm&UW8RjNu9oys-n37YV~vtYjt%`=PsB
z{OcJI&!Ep&j>UQ1w3|AJU&z>wg2XK5r3K{rbU6|BOFB!f;aPlm1WL#7CnP}($5`XD
zF(z9a)m0f1&&=EdkW!w~4;V0O&V9mX4SP5KL*-D{C&PBaH1(X$_h~5#yH%l~KRyW8
zbXrhY!oyao4qg2kG7zi2PaoT{oEPqki1|ct4j<LA$&Pmsb2^!l9$_A>k{)onp@CPE
z;!36aX{c+=bTeStM^(YJ3d)tW3T}dmt97knA<I(^1y8-B-P!>WBOsVbhej#!MoI+D
zW@Nsc=mV|eHIJggJ}m+N^Jnkg!w}+2jIh&%2uD-qK*3};voN5^N3D9^`YG!)KkX!S
zkr^piLIqci#SawbdhrZsP#t`Yg_Gr7rH6j>t6^zKHy-HBJSp{!r?PGtM^zSdDvP*-
zE2CoM;`bnK5L2@sT(j2d_(m`1h9xV#qgU=krKdqfYsWG8x`MRF4dqaP7-%SKx<ieR
zDLDpYhAC*%WEnTV^`5)he|$hKZT%w=@Uk|b@8`qsr3_%(zm@mtaB!k=UE-{31<1xP
zhWzB(iECYRz0@>k6e4UtAJGYS$YO78>;{|h|G73NF`UPjwnY2;Bg=)MzVz~JSo^==
zAR2NO(f666-RkHbp#stuVQi9nI4mSYCs=Lq>5IEf)9&>-GFTlkAhP!`#hKHH%TcQ{
zYB)z;13^qOkDC#m7)Njts*TpIYap2&7b|aNP=62Jkc8n?CYAb%H=-0@IvXvLEfbVE
zLT9}`%e)JvwUPxT!`h>A)oNb6fhs0)ll$SH;;RYHZJiXR!VQX?9&b2E%&<d|uEZh1
zrowy+p$QI#Ir`{fn*FnXv>o5EwTs(=KM*8D>FG192F3r!r1x7{Dsp)+3X?A=n(kK1
zroSq!hui=`g=JG|#N<k%5g$+m<YZlr8~;e%ayCNVFktelV(8Vi@sqI{9nxH7Iwb7*
zJ5dAFs<4~^UiZOz#{$fRC+@XU5w?mJG`UKk(o7RZ!4Se}<{{_~IGd+_L~~YUKN80@
zbG7#=n2MuyAgU6$gV044MvA%(A7g5dZ1r@pXb;Lt0?rI05*vJmH_M?aABtj`<daMD
z_SvvaZgvDkQuqiaS_!j|Ncnz*NQGRyL{OxO=s~2&z0MEoVs)d+p&IfhDYb3H3FadS
z@A|$P_!@TFtV;1e!Y;0NTIgZiG|*b0RoKSizbJ=93JAAQ>(fPqRg8F?NU-wYeK=%2
zHf?UbUIy{;ZH3J15K#l&55(BBtU4}Zk}-7qhRKzI2gf|#2ArFH3A`cs<3_9>s;YlF
zn|Uj*ls8h_PX<+5(BS^2_h+RNnYly!)j5co+UZE(FnqF3Q?8t|y*o|b+H{=W?I^En
z$l{t$*EoB|g^CFRtYh^<!LvK1uj3vqsk1}!tz(<aO$);eKC3apZ>p{-_kqLg0&$=$
zdvG8Q1bV2gPx-%aATuBi)M^%vRs-Kq$9~-y?pGGw8DK}6<;V-kmuMexai%FHw1Wa!
zVMYlZ;8dc|BP~BNal5S5uWFjY?=BFBdN)&pX-lNC@cEDbIcVkZd)}Xw{-69$1kv9(
zi1>w=6_hD^<rc!1A(sBmLjnVj)9%+UNnT1Mzulf@iP232ti@p%_fln_qno^iT>sxB
zSsJt^_d;N}>%YQ~JCC23{vkZ~hs@-8$$k0nX}3qoe72uzMnUx)Kys(ZD<avxZQ!TI
zs5P5Fe+`mcF+3<|3cG-C?M7UfPTNpA<&DPH{pWOO=1J%o{7g@kXu}w_UkFOB=ndEA
zRZVJ1_<WqoVB~?=siL$LvYlI>u>EM1v#gh;<&z;(q^MACAX4~@tq*%aSj+T&Fx+_N
zmY;!x0q+|1k7!)!aTv2KI_lAjZ(3;K;S!n`{lnx~<g-8iVLBRZ?#^3E9<Q}|R=YGy
z`D?2Gi_vivLjD`IwN^-$el!zm2;X{Yvr%|Qv!l9Y?Y*(Rn{2|RY}scU8ie={(czC9
z7smVDtA%ts7V}q&MYO(SCo?D8Dp`XiLXq+lS1+~buBu2UwY02DOTxxNhi&^5i}jul
zZJi$e#5K71ceWj?j4-9Yqh^{f@6loGn|FKO(+5vv%|yLXbv54Y`sxBxrKJ7}tPt(Y
ze`9ni1(37N1W(bsZxhs~8?`!^Zu&KPvma1HKkF`li5wLF8=J#gaZmw|cQCOcz%SEn
z$52GOXy9SmG{M}s(IZPGbeG|mV;gfOTq`gAp&%<-o%~J3!_rb#qrfV2sW7=ej%#b8
zP*cj{G*tV^5~`lgDRG5pk#P6FvpMGPCb3h$GVV1}q#lncvTI+hg8x{S`g}WXG*x9I
zUsOzwtl;?Hz?@;c|1U5{`KjP$Z`jl+fVoqgoK3V`ERqj;y*q^xdMnLd=%RyhMy=j|
z9xtb@-^7bxs!!38?@6@QZuaU4fBs_J_*JN^_atVW?)r9f5_L<mu<R9P>e#t$<NUg?
zFKVP1`z0$$CdC$I^`(F!z^_`ZjCtUiCIjh%d1Hm>k2tk0iv2HokFu+GUi33>tYHbP
zn0PWgv@^#!UA5g|QAYCTwe!Sk8Sc7-MC64Ad!PfK!d!A!FrQ7%FR@0^wRD*Q=bz0$
zAm?cF%~|$>g`Fh2qyejnM<<2dh9~_p`|n`xv;0r&PBfF!y&p^zH_Iu2-}J_ERmrED
zcRv*qQpv#nF*wk0|2Kn^3(`$zCPv=%k!qwJhe|#zmis4?CHY173D1!{t0(<v+iG&0
zBqTL3Nkl6zU3S&dDdZ$Zfyh+i;_)Lp3_HHG8dGzajAlCN*6z;J&m%(aoGzb~nK+){
zC*Mh2bsGNnmlo6EK%dylgQkV{M$Q-F8>%dgJe8c8ptsibI|X7nmL5fIy17e`O`Qvk
z42Mei{_xIy&H$0>&!5#n?lIF)9=%m@b_?*oGfvoKq}_OUhCN*eIDV^msbl&S_DMo1
zG%8A2XXLHr<}4w}V26%xOJIPcy26pC#Bk}TR|t&X{+Wa-i_)>QbHnkRn*9n~3>T3K
zPQCn_FkB+Nj?bymZm}-B$|^ypF3SJ)oKn@eEcu$0Sbno501|4+CGNLt)_3rO>ESaa
zOZ@WtWa1L>VXe;_pcO((#=(M6rRm(5dy+7ff9yfLjW4h9sExSroGo*&rq*jH@vz{i
zv|Xu8lVc=VJ$(ffOt*}~Rmv?naxb_F@xLQ9+|4n@0ahHTbSs?wZ1nUaffH5SGyvAl
z3&cY%N6btX<_B@9)^YZ;vn#L0m9NSYbAQ|A_-;4l&JwgvD!s6PORignS;NWXcw5Z-
zD&p9<$7FkE*xK=ftMiWjRy7QP>Oh9@)Mg!ZTY@|Bec3|HaEXy$3!RF6WXR<4SkTK_
zRrIRfA50HbRp{2(v#GD*@l$r_NR2GNtWHB)$HNP+lm?bzqSW?Y=b-FH8oUy!AQHy)
zx8ut_2^tr0Bi70)6QOKUb_MQ(1ClF?&QOC9?<K@U)JW3wJ{a{`ZYR+IF*AI)!ks2R
zahOYsLQnP=iPz!Np*KsR(a~~el0CU4(_IRz&CsBPD{?!wx(?4a`SfQ`#cBzDd1iVv
zGfww2d#VP#drUerY*#Mx40UrSS}kHxoEsm$o?GE7vcXJ%gN(yf4hi)lWY!3jYZoz;
zc~!HUU1ifhzB+vK_Uie65H&H-kz+gvqVe{d$={$A&LH~SfAYY0)NTk^tM)Y*P|J{`
zy{6IJWQmxUd0v6Jng0i=d0knMd8QFAl#LSQPMjCrk}-D<AP<idS3n<8me;Ak$;|`@
z9*s*LEX^Z7pwJ6&hcmoRkjV&UXdU-hexbH&JTr(YVpHiqpkcvWoV*I5LW@J^Q|4-$
zgiZ{mAvwR~GZ&ZI7Y0r>BuxZ;rLocB#c&r2QXgA0O-bs^A+@=vJAJQugZ^y}s|(C>
zwm6V@W46jD^{}QOHC#*>uw;y<X%bXlh*AEwo?LDLE+T5fUT=}NCMj8AN#PVHmTYCm
zPT%f^tqs1m)87XcFGM$Gt1Mgo19i#VGZxnTE@|_OX#B@-X}joPmeehaJ59RQ2-Jkm
zWz*8CA?AVKSK&SzCi(DGxivO0J~6^NjfU4o-fu<@58<tfT+BK#SILb0rNVoET|_$0
zu2!wu1_Q&OR0B<W!hV#PJL5fvaZ!w;LKuqAcf)n1N!GfN6JoW7?k9DmuKEq~I|I~k
zjlV3OaMRyXzCvRrI8>9<n9{&;6h3oRbQ-DZUQxw+_jy3DLBnO;JsS!37IGyj^=Zeh
zr0yQ)*~VLyy|%OUZ}AVbtijvm^uHtZK&9yEcgd?)w^YMW`*Xzxi~ZvLk(^@|<z;$!
zJ0k_6)NvkG_Ny^r%;cMRnm932FIU0Te(-CW{2uGepZ#SEmzK@SiL~|sX$S_Y_>gQq
zE&?2@&EeNor4_c{J#1TANg()gzu9s;N)Yjn7=2(4x~$ocE+2ImMFdK7qI#$^ko`3c
zTW%$TFke+(4IKz|WgNi@f*8+xb^b7k5vY&`AmJ|KCiG?nWMPild>2^J7(u57Fb|t1
z8*<0Rj_8!fVZ?~Coma|xJ8JM(<R<MKDwP}fkdl*vY=FHly$YyDnKOWBcjxZ6vqD$M
zu+vY^n1ImaT7um)X7Eu$i!EaI<kb;-PR^r7@0<okZkRr?c=kgsytwxMTm?C7C~UU(
zw`*?1v%6qT%|Ldr7EPO#O|kY4C=FLR$>{#U9-!+i_0oPS9rAt8pozS)l@#KmmKbE3
z96AljYxgo0p1QOXZzS*sUa#hPS2z!0*B<21Gasp)VLxXN-$(A`{%9o9y4^`^0H*q4
z_h0w1Gi{2?L01=-&a^4|Top*21E|CPjh{(1S1XDT5sp>)5eRe8=i3NMx$e1n0U8~4
zsw&%=iUl#)`e={=z5KoYVsO@Libm?&XznzTA6(5=@J-N%w_>docD60=>F<QS9K62b
zCXL?0R;tEEPu{|oi#?&ic3z<L?w+qTw&tVHvicn7>iOUF>BD<#9ll=ksTO25Y^yhT
z`O!CqZhNm+(5+rIoQ3M!BIDol;^0k@3k%ja{)@j^A-V3=V@Xoy5PdNiO5f0L%we%~
zOwy7y=wyH|!a=BUEAXjtu%hxP++(iunzu23?_c&Fy{0{e&Qdv{+4u^xK!Z34Fc$oc
zYM3HiU&OLD20jJI@Md1sV=RkPbg?bWnyH5x>|BP%QC|ppIP148fIVN5Gq4H4Ng9Jb
zej18YCxtEdeh8?<Amg)<^WH__!F?Pvt%e*UO+PSTZA-nn3`T?Y2_gWeFXHuU;e}|9
znrf`XZE1elMQuhmuA#plYV;*hi!AW@jZl%_=_{K8X?SbczJ|aN9{GvMHzjDpr)LG;
zUorl~uwD2<BawII?#kEubm9FAzvkT^JU7bWfOQIW?~EJ7*E|_tz5N0{iYh7ucJ+5K
zXqTxeXE`lQo``4bo0hmJQ)sXi-6$W8+qnKw?OBG)f=@&-0C@$4mf7ue8hB9B0-Jv)
zoMU$>LXz{7j3v?beI{YGYdXqg?wThNz~u9eQ4z&I7>O1xoL2NmYBW5^<k7;efJc@X
z1P+Q@%4|`>K4Z?6=q&}CBADKdvM5-osQ%ajM!t8;sjO?EISIFNKh`(OPEDR==xSu9
zZN-Z3%6}sJ2LtVs>o47S%v;jHEkL<uBloHUo-Jr<x9J)DOf7dPJ1C8iRz^529d&eb
z@WDqOC{`>Y%_k&vA_rS34ivvR4$JbtR9v+*^pJmrQbSqX3~mewZ0(lHxf{wXCUS~^
zk*+#D`B@E*@3y{a>Q;fqPqk<(!IfVys24d|h_$aDH&&=p=<zJ+y$(CYU#_YeCI`xh
zBw5QqwBlHDYkf5nHi}r0wQe1C3vw6v{{rejMsET^oe3E-ZU<oQXXw<DVb=cz>d=t?
z19iSN#QX=;0e$)}P)Ba=AE-lK{C|QvLntx-|3RI)QHuWt>cn&3OO&6aKBxhia-}e1
zO!1ZPKue=(#ylu(1+RvEXB<)JaZ*FO{J5h8XwJOBDtC9_cepx<W$(7{;U+luKlwfp
z)OHw<_Kwlw7@gAil7agX8wwM7dNwWsxwg*FuD`QUL;>$*D@UZc-@lb*Mh-`ozS7T;
zf^K$C(L0Q}fG4c0tkd10{Oy==`!*)u-b~CHngK21w}TmF$p|FOtgh_QpkFNO`aeSB
zV4nj=7vBV{%lzUaRK%|+WJ>pCBp~c$9rB4EuZr*ZZEGoQ3PR*C@xxMKXL*gh-SU(y
znfCSB{{zNYlah=<{}&jePL|(JLpZw|>hbx(P?_U`jQ^l=A0X=YPZHf}2P46?GM6nm
z&N?YBCM!E_nWJvh*_}SMDo%*0c-i@g@3*TNwbX_t91w~zmp4?qo~YWkD(gq$Q&1#n
z5|cHX;&%t`yktJSK7I?lAVtSiKl~RGb2XKST?&F5xoYSc@3UyEb;YxxCLyU(A^YO)
z5j}u*u2{))Tb&dkLmTwHg93~TmW#?pqI*U=Bc52fuB|mtC8yT07Xedks$Q!wUx=Yh
zkgJaUp|;O#1pnQ%F^AsoDswYv6d`veqHBXMBTdQ*;fF7(-R<rz>MkkTWwgQ`xhRrh
zC00q4WHeCa$ezF{yfbTi$1ADf-rw)#r{{<sy&5*|%q_K5Q4l)?VbS6bcWFXeyRV>T
z5W=D!Xvl1S?*)3L=BLX_2)So+CI~6qyCY@g;0FiB)a4kc;fU!*A?e`57jI`*5%7pu
zIpM)f#-k5q<=VEpCN`1Bw5Y+gZs?rRZ^%%isahWZXYiTR-H@4Az1oX&#WQHq%=rFm
zp4_V+o1pYT-{NPO`uwAV)*4Mj_+fIaV$TQ~sEdy(GHo1cNcb8GM7Ph^eH+_I8ccH8
z2%oPTx(djQ!IY^M(NbqDJ5!<-Wa#FUa8k|}O=OZPGbmw3(cEFm^ZQ;Q)%Y7sM5?v0
z^74rcmcm#~QvPUz>Lk{}*MN^ItO|3-^9y3E2apm7NOmoss*;ezsZBQ}sr?<ZF^|29
zd)oNt_+ZLukNJFYd1~6ukB1P7?hdq-NDfUK=e~>?e1*o@!hS-}!3ZB8S0-^=XQdm~
z-BOJR+LZkc`f2fW%K+!jyy=!7?2UDG_lCWo_TCS428qgv?Blh=N{tkdy?JZmTN=RI
z{Z&m7+gLBqWh7+K_#_K6VhUEin2C2(AFv4bE9}<JXGGt3H5uD#B)DUht1lwm4qUO?
z^>OggNV*A@C&0w;u_BIYM}<s|g{vob^&_Gfy(GU>AFnD-HRd7>Jpz0WL_$PDQech2
zQDciDPCD#HNgxc#<W?+zhlDKGMmUK+k^Q>}R-6tSl!K(j?NA50&#i@V5=ZhvDrxC@
zSuB-SDCY?JWVGx!DY%*AooC<hJFUJp{HlySn8}0>r^x!D!qH1FAGrwi$8$lr?fli?
zQA_RibgyJLA#D?pMHI6xHqMcdXA%f^1@Xq!dfK<62^e;I934|!>C<(L{%20umzzO@
zLJOkcFCZH;m{?W#qW}XUh3w0g)2J^(dRY~E)Hb>L60f4k)v&dYlD}4(A1>=BZdi9R
zb0FneO;y%O*FYzhhCfb=ekeRQ>@ckDyeyfIGF~$fA0cq^2g`06wz+wr2yuw%6)7vV
zO&`7lhmGA=3*Tj&&wPE1e*j;?ml)al>mR&VJ0|_2DS6ByJkVKYl;9)Gqm7hc#?N#V
z(B!H7E7r@mCimt?^;n318B@`=y%`PA|Ch{3tAcHwhgxmkuB|-)?UCJN4HM~&JPi7_
zRBOi&4Juh8Dpkn<QnX;u|5%SlE|PGAw_KKzmX8)>J&DLBs9}o3CaU3*gZ9-uApGW^
zVC(CJz6#4nv7ejHFcv<@3jTKB>iJWz;EBICH4u;?hLeE{ff8QlFrfPU+vc9pfS$D8
zdiC}G)ct<gy})IBd-Ak?xOv!pO3mgsdl&B;ET|8kiG$5;uVf9MxH-?Ca@xK4WjXR?
ze9KSvwLT|8Wo(f&YqG;%-xc#=8+Sxiwuum%cOh<99mJa28d2bps;PzpmlTPF61smo
za~9Xd&YIpM>p;P-Q+UcO@5{K6n@}e9x!(saU|IH?5pvyvP4bVA?m@Yo5lxP3IX+ts
z*kLaz=wvgsK18IlH{P+tt;@$l2k90<&CAXM#pILbkLcdp4M{*HX8i4S5gujToVTq$
zL5G0}mUA=KR}VtjX<ZpvzUo7+qVZ?^hpc7*^X0fnze(f7Z7tKL9w?}m?qHc3OJGG=
zus6DAqKXFPa4)@$J8zr@6W1f^m(X);ipFx_uit5~*O`Nxw@-tBdbIVG9Kq?iCaLCr
z;lj&Rxmpfpt_i+&!5!F#sv{TE7+)l`=TULL#}D_0^Nj5P2y&nm+FhH>xXjU$!3bHw
zrD|2aR7t?{pova~o8*tm6hz1n#12Qxu?svd)KlGY=j~a8$xKJ9K)uhSjAh6z|E1Qa
z4vd{aF6F~beR^Cf^kD`{bUQ4#Yq7bp$%R$D4u>sYoPMLKqu_@u9b3>tF&WZCY#mTL
z`ZRa-Nam;IMv8i{PLZw^8mn_QvI&MHvx2p2*CPTadhH!|jdAh6UK}GEFzPbcZzm;7
z`>l^P90&BTm4X4B0Mk6tu=-DdQ9|eXo{HF!P;8oC3A$4on<N+pF#+kY2fOXuyiTAK
zCL*<q%_?==U`PJUe)t%pwDn*Ugl1@|_dVyJ%<(n3p^G&paW!$UuncRE<<UrD15N~T
z07D4q$S`*;-yNY*LI!SY6;1dlN7J~PFsU?e#UO^jAW=NyBXsc!OJL+2gSAC_dV~qA
zmC&#mU+V-X^&&7_U|?mJfpph4jbq@V%_o0HV3xpO&BIC^o=p(!E5VJ)#1x(Ywi^1$
zO-uBzD!(pLa480pB#Mq(>5i`~!{DTRJqUP-<rg?T55_E^AyWyuTj```!+?uRwchV4
zGrb{=!J|-;-p>AAJk24cK+Fm`)}-P<uWzSPRJrbBBX95=jQPdXLiran<cxu{CROrC
znquFGI~v}4127OO3#ri7L}Ql1Xq0@G?h|VKS2y%yKEMu6Aat;xd}Z8|i21n2gv?6b
z5OI|u5Kej}s&)xJWThW5O)!+ygooXZYTXAGI0v{=S2udwG|qF<iQ;mYO3y<h?xT{g
zqp+#z#aWys8lX1XTchG4U1slA5m&{}&xEhzW>zT*O~$|*&Ri)OCtTU{hyYJ3Ta9%E
z+9vu)_QDR&q(i;RqzuZo!;r-vxEeN-^AEjh7PRaYcE=-S`Ou>ixa^lIak+)~6Qe1n
z<h3%%J|>#18QAMQMQdK28*nRewCrhrVy^5jndGT03TGXj^2eV{oz1J%rQnyvF)V{<
zm}|DRZ8g5VIcNT~l0#icDt<aWPy-X5yD?kZS$IIF+H!c}MN^bkdP-9=6RT{DiL}I2
z#4s*Aj0srBOta1GLLa;IqA5seM~lzBv~BGza5_H7_nN435p6XbDjY+xvaJF|@%Wki
zV=TZHcPSMzCDXZk`9^1e4YJ%;$i=~ISK>AIP^|I@>gV{ylH=3<x&tsB(aJ-kyJ3UD
z3BtLxK;}`s(Hmi~ayLYh`_`E1Z}p&ZuJib#_#G-6yUe%GsHg;Ct*(R6pM<h&xa>_>
ztkbTR?%lNW%?%h89teFbA}!Ra_C;<3G)t1*h+JT{IZk$Esb^PnYL?>{0JomjhXrEP
zO@~0AVb?5_=EbEfZouWpt1YY2Kw0w!qWy5zy3QhIIp?|C?BRH`bN9R24;<14>=FA3
zVY8ib*R_<E_1`)NWFJ0OM&9Y}y!{(BnNnsuXIGv>iyNi1R<!Kdba9_u)qm|?+O=&t
z$p0|gpII`E;R4uCt_F+O-`LgZ+V<fBxQi;uqG+c!r6a}FS2s_F5SsJZ6C7YNS+twf
zq(M5#;#Ssa&jD^h;SI@)*F%0zUB7NY2`48Wh42@x!?drq`_ZT?JC67jJv+a)t<=_B
z6U0P6J=xC2<xA2lpC^q2U0@TpPc~+zznAQ;=$#3!MnwbJ4c~J7fbHMm??d~Jarn*!
zXJPMarA{s0=+C;D-H$Y=Yt@I4v}d<3f~kJQ4Scu#Ov8uFLA(5le8(24(}=i!XOWcG
z{qIM&nnE|tF>Qf|fkkdFJh{&&wA2Co5WalM&hPg9;dlLlh14TCE~3B)Q+x*+6sj5F
z0K(r1?%H+`?-*C-CjdcE9-;Rw^Kie=#~m6#5SUF8=z0PR2%13-s_9l>2L~t}Kr5~2
zn_+_j7;nKDgWl}H00iP&{y0rfTqXbn5_trXjz%KT77B@9Bz=QOFUSUzn9sjR<}wqI
z08k0^5=5=b<VyhXQFM}cz1>8BK%BQA(kLrWEySNGVATGmDH4MKAelucsqNlj1qUP?
z!z8S1e_(+EB=5gT4n(Rm0VMM1rH%ZWg+cuv7<K;Efvl(l01`$7Cj*yUlLFX1RG4)8
z5&*D%Otdk3*-$WzO#px(Jb)nlAS4P3kbohPAW^j<@vn#^{NN}Wcn1uqgfMj312%vp
zEVyJ4HU(HT)W0%wUG+nNJqyxxqC1>IIIu%52k?Z{{gJ!}Q4-;M!U!EEaCyRWfdf;8
zFNC?PAW0=qJQ9KWlY}IYxT-&s0hc8_mn8h-q6-8NH=r;V?%uBm4!p-VN$ct;*<(Kd
zfP@i+Bz{w-4rB+46spkW`<8lwC199BkYsX7*Zfz2ynlWY0an)UaztQ%b9+}d5GV+M
z08)OyYHKGkHJCq%*zGyZH8F7RB-2xyq`H{E0Ta$e@MQadixma2Ol{Xe4gw&F$DeRQ
z76*qCM9QB<jRXqWgZPsS-A0Hahyb4^s&KWnU7r8nDoEEmdENQcKoEr279j67wZj6-
z;8(-#mj1K6JSOB?ongQ!0V~_z#)WPE^>8)v1M&PfkCgL)%ZyurA4G8j8g<AwMs>iI
zPJ>+wS7ZP8(=eHn$G{drkuV~X#1D_ufCwNV3nF>Yz+wX*j(Y~_&7cNR5Gk>D)k7o>
zIDm<PD;{bAuys61ZTk|x3Rv8LNP-CU5hPfcAQG}9QXvH~I6&u**)NhcLk;&IJr+Jg
zq>A`)od@f!T~Cr306EJVP#px;ucDa<A12JbP-+Bby3ma7_MbdGS77|;{UKjQ+%51C
zZ(oE@rEKpHABTpYP|vLhmY?U*cS^n-ceRfJE@6zs!GZ61dU3#uAAZQv)?xUs(`%4y
z@47t<>G%i3|3Vk*rruZMFYUiJlP^_pyySO~&mYWu;4T|gKk*f0c4DFU@dHA-e`u4X
z;2XYib^z7=(Mx2GLLZ&nzZMUTgIF{1*QR$r%%0m@emcG|_*OXS_3Iz@#hXpT?+<gG
z*u2O(H-h-ue>P2d{@{-d9)31_*DUS~$q^miKkR?5pYpQ$q(jQq@Vh>)k@J4L4IPpX
zdb`ebi8BG5?*yO#NM_cAs;0A2x$F;>KGaJDqmZm^y4l{jIu8872Pg!WF0J~v#oJMy
z1%FlGo`-b9O>-*nS-%A@!MTF<^aU^ho<Xf3+d-a}Uk-ylAOSrtX>vqlCVjU05w_#6
zD?Im&-@n-jbA>OwuiEYqv>aXqGvuDl8#OM-BT4~}0x1~H#LoPl&icvIF`pj{>4;{8
zpXJ%{Lv8;cg2N+}U@X|WdnWEXG;6~X_XIOMB(|-mF_H)~z;?)p(>IbzH^Sn-Ao--r
z8TK6I$ZIoiss)EY7lPS}2o!@8#Vx-U4Rq0zbtE8Yg+giMDCA4<cQ<ZyjD5~_YJ=(-
z=Dly$n}NMY8-qT3&CZXi>e1evTa+Mj1MJ7{pQEFHKALQw?gMsGC8vd1dM;liX$OZv
zdRXT(HCZ{p{@^F!wL^gH-VXx=>gA6wcY%OMpd3=z4ye!wLdI}{9D#s*T|OfrQ&bqh
zm+U@md8Cgj^$-NHh8|ZfG*|5p)J(cH^$V-Zl%W4zBlIT3h4x(S8#v-?wS8LQd?*c8
zHJFZkag)@O$l#2+yWu7rFMzw~y$iQvV?)1%G=p?+Jeq9ho#2=FrW#S#hB?t(>|G!>
zm0PCyUSI6p(;kk4Q#JGw|I`&&w`y1T5&zUSd`K9*dge0z&`WP_5-|Ep2#j9R>D@BO
z@qp1sI(>5nI?2!rvN`|R+ax#K{<{I4xOeAjho(I!z|)_5ibWnW3*b+;6T>{Y4@wUB
z1K%>Z&GW(lx3fo3V`+dF%mD((_vhAUrRN4VGwkWC&S=J$0~pW;J#z4^!u*LPzVut{
zz;^%zh=W!Oek6=R18}}~Ks;zulLPE&u5Bx}l`$dxgXIUF;4;wF<pBO{N12e5nKb0U
zx7f?2;GN|-G+<#kg^wA&ISU{VZ0(Zov33X!kRWn1w!#DB1o40E$(WmPBK+6B6<ho6
z&j>UiPULcEiHFk>6u`zvV>Us`_bvdiM@DKUv`PJV9EI2WCejlv(G@*wCqf5I#EL`I
z`PIXY1jzOH5)|s0l<7(YWTub5;5QrLj<^;bri4SqnphKq+KPo?_x<>#B?L=gkc8hw
zx?*jXCN6r=74{$qpny1CUfB@QKr5eA8h+8r*f9t1+YceyOh!WF0Rd3~+eAk~^acTO
z4jcx%U4aVl_a75%ix)%`0s*lDOv(|7fP$7lw!I=E8i9b^gP}qp5+WiPl;y!dYT}vx
z;^{FF<;D34CGIZ(Gz2V|LnW{;j$X?9A;pgPxsNeE?_iW)+Jj4y_er9E?gM0S9s;wG
z-HJZJ;=h;N{Gs|ftK#Bu@7kw9_Ir_~g>6q-Rbu2e*+;m<s;8}X_%lGxppjz&KJ;0D
z214hlY$Znc4)mBwRYU+0A#ruzpj!e5OYZqYqxMdBdlR@FkPA$8nipuP-4`F{zzpy&
z|GQ9Th#<X42ZlgUvQV}A(MF#GNg%+IMTl9Rd3V|zz!zNpH5KQ4awGzP2=JQkK=ZWo
zqzrNF?>y;ZO%z$%th(|mI$xq8>S0?6f>P5gEH6v@AB??KKpjETExM77ySqaO?hXNh
zySux)ySsaEcXx-4y9RfM;BFyYzH^@b`|zFrVP<-)AEs-ns;jHk8v8tRGa+QWVP+$V
zRZTP5zv2sJ+8Ed(aW*4Lzy81`>=GWau&>;+aM#(+fCEK2521p0w+VBitk>)vS?AWi
z$m(t4jZ7aYh<L2m!1W5n!qgAX*yT2qsnJ6=#UG(Ygy2C}t%ODr)fDy6RSo|6(`HII
z`9Ar_Q`5Arqw%lSr21&WV6?$+2^>MV0aA(tWh=Td2`g9D5J>$|hW2QQzyl;w&wxWD
zGSmN{hokV%YY1>)wLpyQhG`+h4uz~kk~;)XA19l^&xGLH@UjX1JP%5481lFEG1ils
z1GumUgf}&MhkEz4$g!S!0hmRwqs3P?U-*2|bqK5wzGyNzbJkntze)x%3$p}!D*L@|
z*mFS|hij_;T5$&Z$Erm<30UXvDnA#8J6zD%bv+$C+1xs6gpOC_yKH+^qE|M$y_OhI
zhSUTd;|Rz9oH@vFUVrhXz~IQd^|GC{IUgluL`*#hCKOoqL3PkolA_cT{@shz59Eve
z4OtECZ}UfA;Hxzy<vv!(sy1b;M|ic!vPE|X(PHmtPwEzK!vnGKxPXGzT+3^=9;-4+
zy0mvZ7BHtn7v5hlR+MIh?8XfP^>HONKprp+4a)zdS2hM*SfL;s38GPfUDQr2IGvS$
z;)4V0;Gd`FH-cuMgh;2-I4iZh=EAdHCFn^5B1|6=9ogudJ+%3sM$*{L#|UmYZi^L3
z0uaXuH2u96EKvHxOya7AdlWIfw2qmQ#4lni7l<yLpLl-TaHWoJm#a~F{G>lgw8K%Y
zhqN!h<y%1iDgENr!AWLys(|~x003kx4qzp~+WN@)hqV`cpu7)41cDG-GzF<T_6quU
z#fm8?raAeDY=#Qt!>Bi`z^0Fe==>i)YG6N+bp;{9Fj2P*s-x1o_b26}z?NO<7zSPW
z9~jU<g*f#Dk;BsgvNY{a3Nd<;6tLKHUcC9MeOigL)M5Y}Bky8HQ#)W!0S>8wgXvOB
zcnhac8|9p#?BBFbdR(|+2e6-CEq*cPesOc*FWB_)u!GqqL^K3gaT=r0kPVuqO>kyy
z3I-uZam7ZL9=o44ju<-T9!1oqwLS1ho&9dngIi@#+QaJ)V0HMN1u(Tg%M^D*0iBmd
z1aPk9gR;Fo40n%KFq9-w{blbn>{3saDGF|5(u8ZQ+C;sVcoK0Cm(p!H)&!JZo^Jj=
zTG+p|m=J%5J+RyE@GUafnN6<S5k?8eWu6*9rG)E@9&;-CLMiN0XKj}cbY9#~bx$yB
zU@JH<Y;>$;9it4gkV#1_1&xLk^)~VAV@t7WK3koNk=k*1ag2mly^6db51%dt;onq<
z+jBB-F5DBlbfFeOI<tR=PHbW(D2L{>?Tve@dBmwdv!EC1Md+OsVt(6p{aIUkG_8$4
z2#sKf?vYQ00r5t8sHV_K<mD7*6cPZE&9h<MHJD@~>))jc#Nk)zj{qA?ieE~|EWv>_
za8Uj+Ju?`v_>J?hb$kV+nGhII9HukTXd@wl17owSxz)9Ue3{Jb7_J%KN8c<1P5f1_
z2FFQJV?6N%Y2=ib#<Tt8l&p?I9h-}_>j`F$7TdsGiyR6?MvVc1<X|BZZ|kQZ{RYOr
zZ)MJ3r2aUCU(knvXq!}$<<rBkP@;sG#@o0JcmMIr4!s9Pg!fzFf|!BZto)xmRGb_8
z{2dX4Mr9@gBxPS=1HDz!R3OAMT`IR$mNFA+zsDdGT}T-aB0Ox*LEhA+#o!s^$%Ev8
z;_8gZy<rmiO=>Uu!pWt(7@Y>hy>`Oj_IBf*bK!#R?JJn#>MOTz(1zSLJ8tLRup_>H
zqSBX~$l#xjA5!+dHR_jsUgRkE)D{1ci?E+fbiR5$$o1`=knDisfdisuR+8ZKSwc+!
z>g%QVQwkDm;$Y{>9n$q!`RCK8;mjRUF#^BtkXuP|A_q!+L_I?z0fF{C)Z2PmII~l-
zWFSPY4WC<7n4uFZOmLj^U&qu`%8_8EdU2u{qA?8taj9YhZ(3%=kUBNQOAum*u%t(Q
zBmsiG!Ln-s@mf(r4rq6%mvYwuqdfYDmk6^G_9j?NFuHftB~{@Tlf%3^BP;6h@!}2T
zERra3OjFH}g-zC)<737Vb&X^Mev)z56da|)CMm{d5&_oGZD%{AsRm&5Jjh#AlCPa`
z)jpm<AA`k~rdKuUaUbiirHHO-T!bq|Tatci7(18rx|0tyR#!Ych$KOme7`aAhNu|7
zfpFa*I<e+1<oS>*Q@1VQx2%mnJ_Lv6s~Dr*VwAqsoK+}ONYLnaB=4~kX*I-clV%R9
zJ+trpn@ddFYfSY&@U)pgU&nVD&S|!(Gujn;1U>W?E7q6gY9K^irA!2ht=eGVI5&b7
zW;(+)2kq_g4FI7#hILQ9VFwI?^#`JBF?8j2NN*3?E**}CbTGrU7LFt1M$lJ|6&@$7
zflfN-*9Z5zWb;BBfaH4%1VRW5KA=DubibI`&iVc#8Ui56kOXrvaaEvdn_aDLxd#O=
zj+&q;WZVN$rYm6Y=d0@My^T`oaN0j)Mm>H3uV1KPRt5-A9&7$CiTUwt1%b+GfB!q3
zVGJok`Jh%_3U(DI-KDk&jhPFl`6BKt9+}J{SD)Cer&ZV-&Dd@K=3wy2gcTRXLvRg=
z<d^QEVd7ADbLb9AE!E(no7fB<kjzfza%hOuB1AY*c^8~25IOye^q<xRsn^Z#{R=CC
zPe>#fcJ?3~IR|j)+FQkY=(ow7;T^dN(wI0A42vbf+VpHJi-c2=lvAivmH53h53(p1
z2$#x9l3dY@2$r6zK)FZUZbB5QLIqC2G9E;R;_yi7rOp+yXO}ud8-QXpW&-EEJjC9T
zg<`F$u{Q{JD_*_$tG<^VZWcwN-Jb)UQhRBv&29!h6V>=0Ce~JNK4*yk*7A^G3w6D7
z5Et9VDeekJc55$Yl3i=Rm%O<d#LaKySTyb)5_aVv=ZnoJa14W2Jjng1OS%gKS3CkM
zCo6>1z%}l!C=X%gvR?LnYP}o3t5CH#B4i(IfD`^JhXd(?k&2uMW9p*W@kS++@$^x$
zuW739ysR{OkR=W*JojPn%zVh*)hflv84su?m*^lI=PKDPguzu6U;R@>D;*WXB0b`o
z+Qw}{ijFclxv1Z>2QzOvKjP$)04R4sFAo=cM=Ag4-8(zX6MlR|?O<k~1Mi&DYsdwc
zy{_H%_J=Wv0QalCp<Nq`cVvA}b2lNfXY*qsiHEDBt(5|paa=`*lb~lUuQccqzm1ns
zU=OZ5+~PyeJ|$F9{U^chY3pE;3}LLUrLDryO_P$X0SEzZV{2!Xv6OYVZU72^)Sk(c
z^*=udRA#F8?;kRI@76BWT!u6!2nLO>l$;lr8MTe8elvaJK3Aq*l{X>rnZ^o#FldFn
zoN&Onpt=*aY?X<x+IQ&TU$sYZ!ni2ODEJ-k+X$#7gL6Z}g|_6`u|+<T^TEj}3dl4B
zP3P%7O&a+(Xr-o~>pq!c0DmJyJJc#J92mB3*}9Ed-4?yMY$6nVJ!<%61Ur<28=CXL
zPN-2L8TWjPM|Piyl@8XGI3aMnyf~<Oun?*vPl+-sq&`Z=EYDo~`{M1&36__f8KAK-
zpuoCIY&sl#`RST^PG5#}&keNKo%WTeM=!4wR%aERFmMuoODrZf|A<5ZhucmxGcP&H
z@=Mf?5Vzxf17Xj53;uHK<wFN%BUMN@`(bFiZDK3zMwjzi^h!pz{1S88Xp1Qdh%;O{
zeOArYwO6;Irm1lU2f85Kd#zB%Q>{LnF$xo+Yf<;9?++ef!Cib;!dB-WW|$`MhLWl?
zCg8c;nZ|xLe@4w<Q5hXWzW{t){9W!=6Q;TC(=Gr{1&(tZ*7BKl#VE3)k52`KvlI4u
zfBTOv1JdAhc<)cklc@moNa(#a7HOrIZbpMI76QT0EtBHLQt&UOnZQ7gVLr9rZmxAI
zo{8`lSO}H3A%kC}T)D4`Ldb(fVy-O>^K>`_>6;|#@FjGr3KNCnr$vyPAl!?lkc|U4
zQRIp*#_;!MYFC{HD*!N;v-N6(I>jdomIMo~o8ERSPLcYZ#eZg!MSa4)spC|qj2o_-
z*_LoS(`{ZJc&$ERHPn$+B&czM+cwNTp{Q!&{lz3na7GbBeKh?NqkG!X`o&oJMJ2}b
z_t>glclYuPH?P5!m@u!hn(pbbiCjN^I+P&}4FXPIMvHpMudT)j40yphIjK?LQ_;27
z-pcndJFle#{q*a|!Ul8!ZMaM6LW_|U^!=WbP|WC4s}wVX919_$4ii}t)SQJp!Q{^{
z0S2);YMO68EJ8Ci%ryP)Klp{D<vIWP2ZlwJn7SH0IzAnor8nDwI9y__X@RAE&+q?X
zk7o8Q0Quk`MATy%RZQt0hbz^S;vl>Udmz=t2q#usfC1meqhJ$i^&dcm_M@uD?%(qn
z)D!@*ja!nWecW)%p~zCo>FPCn)+d<)PVC}fi46k)HtP2rQ(Q-k1f27K{;lK9o~~SK
z-HERsC^p#V0wKcRGl#W5`sY#LTH%S4_$T(lGjrT#gIxpN8fu@cF-m$D!*yIynP0fz
znxkFw^os~4T(nD$?e?avP=KZ2=fZuKy1uG4f4^YX2k(O1J^0S4`ozB9SFc*XM*$o$
zGT^Fd|Kd^V*3|Y9-`SQ3RNz&^%K(?Rd}EVV6!-6!J_t2p3I5a1Lho78UjmG5xazJq
zJTu)=xZT<P`eDj0AjE>T?)(Z9<69)wxhEAo6t6a#KH?yiFD#VTM&~d6=ckP;X{4qW
z1c)u$t+6^oiX}^spuaZft#yW1Z<z)bf=jzAg#KW8{CEG&s(HaD3pyYezo~B53X{~H
zFI}rX(ZVGhk#d89;JgO24<HOS4hWGs6187sn5n5fIU|~O^!~Fl{L9m-9Emz;+F*G0
z)Vypx%j}UIs#_^|X2RabGflQjjmv+xAOQXt?}Y1=YPp;GN^y-&vWdR2_F9!)W=<Af
zt6Q83+oPV7PP1<n^JJb#hOG|;*EjKOuuidY-z1tKcAvf9SNL0|<X`vZL?s?5(Ad2K
z8`bFl$fjCl7zd6waCalu^!tM2Y`dat+)Y9g8>he%V$yGp$t?P=^cVe6n4?*-Z|Hf-
z2>Tz=SaCQLkO74A?Gh8?(Upb$oCeeCfX*G8Ooul7Mi3SPTSE)=5>utM3rbU9eJCLU
zwc$IBliIJMVgD>fKO5w;XH$1N+by)v+(tVz^IwhUo}v^u>HQj=IzO)e?uGr}{{|8a
z*T$B^$I<9T90;(FZAtImsY^e53fChfaEvs(+%XEMnd?QZHuz#4*24;qX4j<9U}~S0
z8@d*=4DV4xUFiLCOSIb`Vpw#45egS%(cuuc)c>5N#*9ho<%tPhI>ADCN*OhHs67$3
z_tF~0#X>-kT~|Jvi_C|CSV=N+LsYD(cUN^>O;ww7$A?l+O@p|~FJc`yeFCn;tUC1(
z`kaOr?aCT2Y+cG8ydiMgBkpJZ?zKda>sFC>;qvNe;F}8vvn4<<5&mOr*R0ztzHkvJ
z^eToQrY0HIV0GjQ4o?tQ&TLhGHI;08?>d1rWJ2e_Q;1aodQ+804-!H0ArGOJ9YXmz
zP!sFxY%Mi9oVkk4iK5ia!3yq4y1U1YdHXa4vt1Gpt}Z=f&FIiFv`hE7B_YtK6*Sx1
zuu;2YI46ytQ^k*n9kvROv}M2k<7nD7IQr7c&fz5eo|)PqwUL1IL2k26x1&?0%EuJA
z*qYz3J>eAA{#FCk0HGkM;4r8$%?P8aR&hg;30Tq@0uyC6d=}YkfL^8}$-q1PwQhFQ
z2M?3$lQo1v?SYM=Lzs`w-R)sU4lDRl7&?phezpJB3$3a1BW?-iioa=WQ8iQD-I5_p
zA2ncipLHv3tD7&LpV}Pkaq=|8F6-jb;AfGbLuh6k*Q2Fs>b7(od!u0C2WFF<bFf4H
z0R;sc2rcYz_@~l$(!fv7N4n~tTzwF*F)Dv_HN<=UpwS{Yw>ETo{KousBv212C?41q
za=y_>tAC%YItP|Zfx);BeS4S+wAf+|=syUE0#wWoZt?>|t|;%yfG1!DCm9cxZ~MPK
zY?bf>kFok{gp6F15^j9utT_+PzM?X_V2t>%Shy~PWq(v+yB{pc4QCr7)qjD0R!RyB
z-<G;Aw6Vm#dLg0Zg30L6wi}ql1p_I+0RnBWyf_qkeJ5AC_(#zKZalU8%f+OiYGDfj
zA+{JWwiKdE7=br%)vk4%e>i95!9lzwE_pLLK{fng&CtZIs^|<L;kx;nPQ26A5Cy)p
z*FVag<Kcl0qNZC{vJZOYT2h2B@MqvC4_XGWCJSQmokq3{0HHcynjlr_`w|-7tTJ>!
z{tCD>NwU|qe9fOP2oV5e50(b_uT#XfN1mPD!<rsm7)bYg2x$__x<CvV!5bsHubv85
z`plj?by?Md*@MEB%ZYpaHhM4O@6Y@x0*5+6G$x`qvNp~=JLU7DTpbPM<0T|~`?!B^
zEt8D1CnXwa6;40sV7-2o^MM%~W5C)`al5p+^h_?auu$98&QzgihlVsblv%X(usv&p
zC+up`lEJn`A-y*x-bhut)SdcJbf1Z=NH4KeJx$j9-c5GP8XY>Ef3M@BA8tMu;6Ut6
z$Q8i~aM%+y_A`4Fh?uj-7`uH;LM!BzEuVc@yuZP;)GGRwl~7_}w53%sCF9g6CYMmp
zxx#n;y=p}D=cje9T62MyI^xitIUGGww$sG~7=cUG-UcuI%s*+x(cDXUX&Vxk>b)!;
zfQzD8-LSTw`7(HFKyWVmCX9`v+j;8kc`u$N30GeIHrv^sMID^^s$`zp+E@r^jOAqf
z>G`WW50AJO#@}=EoUzmAnss)~Twb&ff#nYP(C*bWTRwz8m)qC=R6VYd#K}Lq^V5!*
zBePwx>@Cvk&B8sbK}=7w&$ol4Top#|IU*`(<=qI>+&>|NMkj(naHHApE*WfW{bdiY
z!UjiyN%DZLt5Bt1xj!&`{!0h(wLbWKg9m-q?L*tBLo3T_1thuQLaEzd5;T+cO|8Qk
zX^?;f&x4Szdla-k>lFN{2>`EyI2YDKZkDfz@1scBwKNLnyh=!!S0yBJ>l%bXyMS8^
zd{-$QR{J6A$;dZXo0zFSzj=%U8MrBwKWIskA$IBoAAoi~?ga)@Wb_^^X#N{!pLpR>
z4Vj{whaLce0J!vs2F#SBUQjD>as%K7Sgjy=qg*&60Xd4~tBS=lPW%a(hX41zKR39G
zSnQ3=2tJDKUX490?9M8Ff^DdaT+R&;1h$8i?Hq#Ns)J@P*onEo?FxQdx@~{g<sbLx
zl(Ujc9L9zuBRsn#wmrxj8hOmgk2Fim?9=#)oNGP9RxSUKB2Qn2CDrUHO3g)CGNKGm
zIns(zunSRvcV*?ufk70nolEOk0_siu{=*5SV3(QP>$0*2Gyata0XWZl#;y1qX#Nwl
zp|-3^>yw`;p<b46WZ||_nTk^Ei35k#FObuwRqYOgC6&f#n8T>a5S6wSDZG1vN|!=E
znIp;GBh0Jbs)NDcEdw7|EMBkBc_Bm(nM?!<`aa(Y2D#%A=g~o}pY~fClpo&UlTs%!
zz@y*mlfqbaS+cu8u0gG@wjm8xDqb(xTdkgkkuAon-s{8EYL+II3a%D!5ZJ@s^bms4
z>;(ybG}-w!?|;C32V|rSafwwX&Rkc;8yHA+mr&<^tT^+|zghiluHZ&Jph(Tfc@+NY
zRz0Ff?PHTGAjL-zB_2W+e>cxS5IMpM0G?pDbV&2}$$8nJrX$h76D}xg9Ziz=98r)O
z=J26P@_wwm>+t7>K!$%)L3^u{wq=5ab^BgHBAC<q+U6oFpdcJH2!|I1b>6&F6MX?~
zASvOXC3FzwBB9!1_azX#Lq<D>$;e!Q%=F?@tV)<rTZVT4US#D%Y^>jk)E!s|1pJ?l
zHr2_%^nx5ieAw&bx8HrY8fOZ45E4KCg+z$`DIw?3v3E@gUfP2AVNW0&+>yW|nm(&}
z(b;C%;J2=6zlmG`vKjL!I*JZFu-Gk<m|e<S{J*3Gs+u-^*^y9t^X2&V9UHa+lJX(3
z1wsjIf2O<qw+NwrxPGCaGzUmWTrPNmBVI6cTEBOq%Z<nvPzH!0`!CqOk?o`sC+bB&
zNpL!-cU`nMTn%Lh1<wn%IcT?!?%#a6yNOBLo(tmi{*VWe2S`e=oJ2wKm<9|;W;|`0
z5@;*5$YrlfLi0Fpe@M95d{%9-OLiDIJ;s_?mZUbnGtR0iI2s^*p%{XEZ|x@y6AGdr
zyz}3+gYSVyUw{^sTud;X<LvES*;KAi2mNHHa?kYozrH2oa;C3Pu_3xr1|}jB5GP}p
z;lmrA`EucCcAgw<*q16`Q4xldOUDdot~?3ISJn41{SzGB8;fJx46h%hLDD0m0*Po2
zyYWw}XZcKnZ>SK&(edxS6vl)$9+h)xT!`@tT?ph-;Pu1@FU1`bRsXxR%#8{@itFvE
zJMj++evA|7Pe)GYk>5fE(VWuy+`ZoY(}Jkvs)wtD+I@=PYq(u5R$oftMhO4OoZ=|V
z78*5J&<>-XBHs2sButVLH&~Fr1bnj05U0O_Ab`U&$zilDt?{5i3J=l>-N9;kR2~L_
zi^_k>YD_lESr;D^?2}L@61})tpZn-LreA_U%RjNpyFDUTp4?k5hcxdKUWkyesA*W9
z`Q75)8lrhO6%fj!ej)dGS3j6_w|xo@o~RON08=luu56B*3Ws6HF`?Cj7?T!XkACQV
zOSZ&(+V7`1HFeVDXWIOwPj#TNL=RP!k3Df@*FhiC(PrJXUIShj1yKcq@&45Q@`yvA
zH7ue9P7#YtxS~0npl4soDbJd`E{s5^<OtC}uidI^6)ylp2oFI2=%N`aMWCsv;;N4l
zWY~4$a`%3Eqm<x12Nk4k8K9hIr5+!f=3pO(IkV%@0oZyVoz{>(oQf4Vmr%+r;+Iso
zv%~mHo|h#t^}MFaktF2B7xIZj2bn34kK`Mi2E8om=MaY$7dJ74Y|N1n*?)}tpz|d?
zTY7jD3QY}<o^eH0;!KZnrGP6sGF7sraDVWv;Fs?kXoLsWcr8zvY<t3eYm5p`%r~3{
zUHKcF8%!2}rc1CvEY8U<@5ycXU$|YZ*`#fC&<<comV~(&UphX%D^s6{UGb(^V$j2X
zIcrL{n@#hWz&J_ZYk-(T`0rC`8J)kU8l;n_k`83>pZ%t@{FSVkK*IxTJZPmxXA(X}
zcS>Fb)@BaNK5dHSky#DC*&A;(>=g;TJx*qls5VQ*C+cNr+68w<3yWmm*(Mqr$Z&4F
z=tYwMCNR^yyvTChNJh3P&FC=M+$`S66nU1?BAw!*tRdpZxtf%22BxWHKK~NDHB$=l
zOI6Z@#CmlQFB@FSP>A@<ji7!8yY1NaRz;(&pPk#11=Y+(p(PHjC^(YI9@;P{>*2DH
z2y1FXD5LM2PnYjR_S67|Kqjm96Gd<c*fVO64_^_fx&UmyH0?%<#W4X8{s~vM-&P^=
za592g#k&_qaYJSv%?uY<_D#i)XUb`g*hd7TQapZe_FuIndNg&pCmW37(L~1&NuA<o
zI)BoC@b7A652l%Nbm8l^Y@aeBLVpQeOOvE_TKtTqh3Wk>FCDO!hOtOZ;=Gjl*AF=y
z_Dr!_&vmTR<=HVXgTBL)K~x|gwFDg^RnjGB!}h9co9M#yRyEpFDXIe3eP5$_7I4&u
z6mNzl#-AW8HK;#yiY0H^@eq6Q(9>)K_~7JA6TP}+^jk|B+G%5<nu5otIM|3xi{|Il
zVUx+VemEvppAyXf6?wQCxL%$gu!6=z{OG#ra&6u$g`S@qROUBoi|VGUZ%+|}Q1rnv
zg5uxmENSf7ymhr;BN{tk?XXPc#I4{%IW!ws%zoAwm3nAKo^Yy9_?Eh|C_p_28Y;){
zTb@k7>pGhqubIIhA(#=V(9WDiBQN_F3w1=1!R0Ew@w-hUC#Fm+SeVg<-qKS3zD(g-
zsdTS9*>+&D7O8lzI@y+NjU#fIP_YP<Z9K6=fB9$9r8ga~2Kr|aD8?9k8LVa|uF?Sy
zkp`|Y^K@=;X{7JGxy&XODik)O+2CcXw1c-*y|MT0K{S^K$?sq50C-PMX!zEA#-)Co
z3e~az_sSaY{^Hu!sQU$2rLe<1=yKncl4xFqU{zod!~P0@w{fjv*}@B`_br9pUYPjM
zRdkIm<cv#6GF;!Kw@uaUv)gxl8&7Ld$Pt6sFqf>SxBVe6u;zL#6|@(RDjj;cuGae%
ziWx#+!&?=Qj<B^f%Nff0PEBvY*6h1R)|ordloR&zARTeQon5YXXbs8q#1v14D~)W!
z_3>opUlc2G!2UPMiiLb5c<B_xE*@*W%ZD>~(Nm3Hy11XWt+%eUaQB-ls&rzbCTG0P
z<*76`xnjT|QKry0q*MQkmUuqZPcMzUILoEBZndPwab$Hz0}Pqw-gloF#_#xTL(sJU
z(c`6h@(uzSi+1YQYd{!&5t%Uon>^n67LYs*icGNOI=mq9>caC!KSxG8KS&i-+Rn0q
zj|dZb1f+5me67w%Bdhq+R}>1uFzFc*cG2^gky?dp6(+gw+mI&y$|f=-zM<4h^Ga>x
zQl{$DrH}!c3|ii9XZtz7ifGU;CSRW*Hq*P`IC*gptcE<V)q^vGTm~5+g$y$Rp)1xo
zWDCj+xW(CT)`qUxRw*GW1Yc+K_KteMl}~SX<sh7zh_kb{S?uWZ*QIZH@eY2j{40(g
zx7f^@zH(WzMY$t;siH%_A9*wF(e+p@*fM5iO!|sCI1+i`W1*D4aDNwbbNlnef`3g>
zJoBzU_{s59%^RSx9{CEB=PX$$l*QSl_OW)^$kQ5@SBssOUT5$-zN+#2<!sT})!EA<
z74BWA#tEL0Ne9a?UV;$J>uf5Hj?H_jUK<laFAEB?4cSr<Q|F#Uso3#W!K?7*1VF0I
zv5e&RH-8m0{1a>V2Mo_mq!B%uKG-9mhM;Kd(=j|uS=s_RgQLYDgH26=BKzI7+4;Bq
zCYruriS8YaKe9P%(Lgqu6<~>6^fGzIqWa?F#jl3j0z<+%>Yi}9qOL+f9}?3-=Y!Wa
zvYisD9>i4|q$}az4W~9x<+QS+11_FUI`$f|3zl7CxbW|8VHL+44~a5q+#gvVmdz##
zn9yXN1@2}>swC0ffia`sT)`}TPDo|nudqs3T9!oRDIv|;bW^Nf{<=7N2@_|0b3r4o
zuKfO?z{lfVe?_9nj7h{{SA44hSqmP_liKV!N%zmNup}Ews&}0_>JJU7xdW0@JL+hv
zQ*BkuM&9Y?`+MCdn1VC}BnAKgfB{J7DM)EDX;I~Z0{|sJ0N@*d0ATN6YUk{1L(j~>
z%)n&IXzb+a;9}2cZ)9a^?Be{NqrRz=6N9m;3M>F(E4f5NPr6*g)dL;?26+kr0Q{d_
ztg^0s788c=iMmb;W5EPTO|zu#iX_`yRO&C7h;_?KI&isLDI1flQpMCyfvkkuwKrzH
zm}~x%P3Jn>=l&pwc9NI~okTP<S_{mYtzkmc0ZXeJV?jr#Kw>i}?&E2xxeY1M-tFxu
zvUt&;e1a<Eepo$QtO3~zqZ0LvmZ~Eu;msdBw4VtHD3U|`-wEkWn#r_Ks9fjMQbhv1
zsFdxMn3zC4MD6ChfFB<4(LTT!S_?{Mp2|YB<7O&BBDe+Wd<3{&3#-hgp#G%FO7v?}
zuS7EQesh|YU7f+K)Wik+;ESO`2ZDUI)e#E&P&L{Lm7tl2g!W_jvD7_PDfYXjbB1*3
z@N=T#YC;CPEyVH54M&=ma`w%ZYTt>dPI_3M#LD8$ie3TuN4Q$<AZ&CWvoJc@1t;WP
zx-YPINJ+GBOmQD1?37PuI`OVZw<7L|VmQMZ<SwRjiW3o_gZuAz$j9`w7k0e2Bk2(L
z=%MCZ0`DAb6?<dbl$3$#BNikQ4BXzKTzF5GlSwq{&8G&IX(6ZJ?|R39Vut)uHd55D
z_fT?s^WY!+0=TRR&g9|zJDk=`GZ&;6za;e1JXphe9&c2)HN2;T=*#AEF+Aa~<-ch=
ztZ~?rCO-4`Q@0P0-UXl2S46Wk4ynxk+mrP>B^I@qG;ZdrT=Vwm5%_lcv}0V%i+Pv_
zS45g`iBVJYINtTGnS0znuDlNlDs`9Z!O?-RRMQI1N$XErxqj3pbNgUMp)`g*sqvzM
zmfPq{QsC2T<GAmD6i*x7gvv?tv1g=rbjsEQsHfISJHAfOhg|YxPFLCatlm#g=ivdQ
zzvAd};9`j{C(n!Sw$u5VJ7F(vUDW0Ce%ROlVdDMZwNbPNQ>X>ny&2Nd?)(3Ve?HQc
zi0_y9zd(MauKqv8UrAI*L{{{_$$qE`$ZmrPfqzsVWDwpeh-b4U*JFE$L>To@56+7e
zC9+~=%Zzfy^ZK6Hm{Yo82nIfuwte6opJMqQqvt{I4JJV0`2OcEPhXWE&BJRLq1ILi
zFXXT@BRAjiU+7~fIt~;01xv5kpALRO89{VU2v}wVKq*pHdIq=xzoC3wMOaIk(o@aB
z={J6b<TOOkM8_+W2-IljQY+hyt17(!2-7EwF?yKY;io1??N8mE<N=!+aV+=8jixun
zrwknGiuFJzz)t%`w}G0|(kg))VyQIydQ;)-kE=R6M!}`uJ*EA^y!GxojC6@E!ZrI|
zYF(9c**L2*W2e<2;bwo$5Ru<lkP{tMTjLkZ<66%Ae4zR46=!h1a=_uT*Jjp$2#z+g
zLG*D)p%~|^JRo5|h@AUhIDU41_!hwDdn0FeZMEU&!8YQfg5TQ;Le{~?AL+ryLEX+o
zo<NXeunp`blQ>+r61b%VnCMokfy-BMLB70D(Nl_}jW>%QAz7J!7Dj)MNm)XzvS!KT
zWSuRY@3#y*f#V`e{x6Kc8&P1pVqOl-VDj$Xl^f#C3sz9!R4F016s=@xE%(@%uk}H@
z#`cuSsFE?})qTp83+YG{>()4AOji^GKj%!G@J?LuXWr)UT}4Ta^@(D}yfPD$MJkdm
z8a%rJVX_&_Jv(i<Zk&?_?LYOiVnGtud^HS1J2O@oboWd%1;z)Y7I_el<TbP)dQM8<
z1NWM{Agam=rIoH#lcv)(r4q|CLZnF1qwn#Hm2RJUO=fXBom*cxHKGqS1d06?Q(lG$
zv<xxSZ;u+$Ge8Y@4oDS@aS~Gd*G!~+%x|_?R!BSPk{jaxso4XcEEPGx0Dz0H?SH4)
zZH#RgEdHBxo6dohf|*dDc6sF+7L_+3%At{;LIlfHi{&by<q;@1l8`858c{vHlhZ1T
zMlU|EIh$aQiKa-Cw(?&ZsM@<adct*M>(3MpJ>lx4a_h-p5SNrJi3dspYtF4!3%`gp
zrrN@cmGlbc#`<Bx;7+j@b;vS0_e|*I%mn(o*yhq8U?dILc*3n}_xkZ6|5n$N?}F2;
zxgj!&hR!)x&c2MrNT|Xkc+=Q+G(Xxor1-WU<4Uh6CLN8tmX;{08S5nPd;io~_XSdR
z^kkMVA`8tu_b^@}YH{|ejP5pK#GJgax5U;!=ZgOfM?f}UHtv&7p~r$Ir};|1r}L4F
zI?~2Ef@hRVJE!}8r;Ednopto^Elan_1@o9T-Igd1E`1iu|09XnBy=;6fOy0a4ZF4b
z<(rRq+6(yq92P9*!H0q`ZIg=(08sxwHO_wwu7{JU*?+gVE$X)R`(h~nuJoCYT*i)J
zP{_8z4<b^EM0(P?VU#MC*c)Sd;<j)$)^+>OB0sm+9w%#=Dblyu$<TOt@257Jnxy-T
z1)-@V-$Vw(0|p(KJp5S*vU|h30{Ug8_J@t2+Sp#R+6fqz`6Q^%L82HS9UP_%bg|Pg
z4}M5AjixzDW^$rx<9LN#Jed^x!0#b7!VRX6fPXT}^-j4Ya$ME8s9bz7xG#nx0VWKR
z+#$^E<213t-`rqreiBLCfR_Rsb8wO<-4)h^9v>tH_k=B^>eo)jAH109P3bh1Mec=1
zEZcSNnS{LIkg(mrPQJg-UE8;9=ml{zVLhU~&CSNXiSqOW)RC!N<Bw!9xfQjD?;00u
z%cm7ORAXmXO=H1b#-R0KH?w_jK&PUBIzU3!)!5XP@oTbYnC5!0iD8J101{#etjcA&
z9kt2$5UOGsP6=IfRsD8J&Tv#HopbD*!(gC4r~-Qtht*f6TOa2p8*)1Z!O~R?kFDa4
z%r1^!7zwo43w&7lYsoMkC+lB~FV*;Z)`YGCKX@~>$q(+AE^WNndwRWl&it${ZYA70
z4jqz)xBY6(MjIYnWPiUL$7Jatd8S#KO!GAoCxiwJ$cULrF)^^f5n!F-VxH?TKY&C`
zr5T!yP9-Y2&d5C%3Zh!*W}0+;Z9PR;z(<gcXT?ZqxaT2QqrD0g)u}cm`Aq^_Q&9Ih
ztD~T1)h%<C7MZsUT5A3Crk#MlFH-q%u>UcYH|h=lYTC6{W#8j_U@7>ppf$nm)6ALY
z0M{lr4bd1l^+AAG0%$(SLRcP%SQqBc)e5ffP2D)QzBL;7PnD%VZMisds$7cJ^YQW<
zoe68u;X0P%N6=)E39f}e60%NoIRpo<_vRXz%Tl(cSfhCt_>V0K6hKAUo6e@lEs4cM
z+94^ZoL4n|Hw{%36`MY<C_V<`pwGi7;Hi+Sz$^HNpEI;({iCVwzJ^T4Q)bi@GAjD0
z0bl+0_gY3zTHM;C&+j=CoKe_cm#mFq4IJtNTk%vjVKGauG<Eaj#i`yqlbhMpJh0A@
z1g$PbJJ{lyryf99{6!hI-jVL$q4S~axQD0cH_oCuj;A-Q<eG|FxpVx4OjqhIzd7rt
z?2YQP2N<O-+GDzP|LA!3i_3|~!XeQEe~JC9LXxzw@2>hG%IZCMw@YdtOv|lLNXD0R
z|5RqVb(;iZZE#D(PFZmC(8!FI<>dKSx1y0)rU$`LzE^5DhTQ!j!{;wbz{Hakz?RQI
z%w?p@S3fL>7t(8NOQVS@>0!fwCd(Uhk{^>Q>QPB%Q?K}=`9?Qb_fpGn*K?+xVeYjM
zRoAg5$G7n@;=&Sx`7eU$aa7GG3X^#MQ*#`^?ApauE;fSC6_6;;MeHx1LHdRtLlP1%
zZl|&7{aibewtlFPsXy?}80_r}12=B@lcig|2>EX9nSXDn?6sjnv;ei8VEG-HOR>4N
zT#Hv=5hhQGF4w-50lm|;{26R}AIE3%ZdTt>TBSw1OD8JHz&l(qre3YBmFTKwmTo!=
z!SBYW`3Rz*X5EKmn|lpqV(b&=T8@Rqezos^sz6|CvKayt05FX9zf^($nR_re*!(xs
zw4|=Bydj3+C)T%5f<b4f&BEuRgz!Bi0fBJEMaE)rWOrg2k2cj^^^#{d=zYW6O+9I4
z6(y+v*%YdNHuq!ZqY?icMaBc`!59za4Oc0Nav6%C!6kE8og9oeR;;LZarGb4c05dW
zX-IBP%kD{xFBt?_I6AWt?(-g#WIj2g!zqef<1EEp4WfwEFoZC7q=7JbQXrEcnlEH6
z#X5J<<tw1C0XAmvy8@NL0PH}7;*=rIH^{N+fMReXI0z28WUgWe@RbIf?-vA=qc|ZL
z8u}q)1Z3Vkq7;AWa52@+4^P{D-E`)-vP@vGhILFF{mG2NR#;(xdib!3cUvUwy}eJk
zc>SLHO&2tC?m?Sa{uCpTrjk$&8z(<<nyp)%S3RF6M=#+wg1dMj#kJ#wwNUfhPfa$(
z`>0)|W=fA@2D6A_i$0+I%<irqVKl#1Zr>)FmhEcT{Z=ly+}&lZrwx~A{vCkA`i>yM
z{E82ua@az48z&PfJiY3XQ;{)u&h|K0xC{3(erMlesNUQ}6tRXLDnr+QBH!%Z1%v-2
z;3ON&NE&lhp!KS%o90t7xm3efwdgyq*PTj@QQ-=a6dSOBqd}rERw-WpX5T*}x?&^9
z`7MH8l5UXh`<%5~`nqfeJ*`7k>R+|j3Bi<7-FhjopJ4@Il49|e>{*$5Zz4q0SeV$0
zM4kf_?8tVoq!6k8Uclk+EHl+Y1NFixb6KK#)5(>$f=a_|IWVkccr;}xYVWN*2}-+H
z{22-fpAyf|>F35+vS<rOsw+Ep*@CY`{)DpW%Qo+BgnNjYQ-!s}4?$IwPCfZESMZ%u
z8b4&5V3|hSPSyf+CbC6s^Ck3DhE4c~zC3K}M`-)CfV-r$!voWji<C2xOFEw|8CDLG
z?B|=RstUcu0L^+?a{v{zwnPjI>+$#yTgRs*^I*mVq;5~E?ZkNBjLB9Vw(F+_{8&qB
z>S)E^thvU!f<|q{j!1FO+XHr>$sC4~oV3~vCGAVf$`xzcP?B;O&5wi<i`m6<c)vW&
zSJO-EJ8ZqMY1z=yM_7g*Pe|u|;g5Zc0&aC5Z@?%>d(oG~Pd|#-LtRY$pY;n`a16Yv
zWLd(wN@9aFJZW~4o7kNDu(Gs<50w`>lVeryr~GM!i8a${x~&t0KI4S)tl2-x_6XDw
z6t#L0KJqkrvtb@pJ?nXRcR%w8X=8Pc;*O3xxc;VT?fjW3+qZh+PxYEWORgNaQ%FwP
z*7Ns}Rp=3!RcoQAkH2@iNki9FmibtuD+Qm~?&H34=@*D0+q9K;%$q-12rY$JYNkJF
zXC87a&dcqqTdO0|M_v=z#6Pm)Ct#5Y0>S7oNJEV3!Fa#7^E?<r`6qo3$5!&^|J^d6
zMRe%)XwodIZou&1vWcCBcu0rI-m>Z0n8vFlO|KcXwNXWo*E{@*W}{gT>?3kp|90u#
zg~Hr&kW7trez!|lKmiZzZ2l1{#32iWzvH3)_ih=Ko%HHS^d07b&K_gPvsN5V*msc@
zc<npQ3Ty?RT%UUcH^0nn_JcwGyLxiTIck5I)b~i~=SoBC=m)*>Pn?lmYG!fehrrBQ
zBU2t-wEWxYIa_g})Z;A%!5OAaX!}ykK54Icb&Ks>w4G<MS7tdBW_dqiJ8Xfv(IHP3
z5zh_f?*fv)dmwm^GoVPJiHHn~RzSIzr!ejxta5nfYZz1Qi|I^J*9pAwNe8*Pu#Q&L
z!tQZ{BRAV3W49w+`5v+uj!LSTqKF#rh;f>sLu(Y%h?4}fVEWss(sxtAU$9X5^RLo^
z&UhFBI0ReMF0{#>MmF&@1hDuak>_LdPM?ATk?eaU)sk9_(_?eVfj?lPG1rDoTkw7#
zSCx_f^77(UHDV7;ZYC*DJmewm?Y|RkR{Z=|7-b*tM1g7k>{j(kqWmOTJN%LFu{M6R
z+fB_8K`t!H7t;`L=$zgb)6tt>_fU-}KwWC)nMtd!>@2f{LJ%@6Ggw6+|Dz$JGgYld
zi5G@Hq+UC;CiACQ0lR+HowoCtz?A8pxo56432f^EbnOvcCrS&2eCV70|Fkwz$?gGN
zZ~y??xBt~VNZ-!T*3|jG``edV+RhssSbi&Y0Xe@yl1yLk=GK-Q%rQjmx>GM>j%<?8
zT)5d_B`v50r32J9m)|#@2?7A1=<e3!UR8NC2M0j*H7_<`{oGX|K4$0-gYkVR8T5|-
zXZ+USNAUI7V^Gp0=F#F=NcZfJJ)4?IMpfw8VF1Eniq0NDvbMZ<jb0WiAI4QyL#Cq`
zcHC2#wUCd!;*1Q8!wx%WV+)KlPed+lo^Ve%QAg=_5td96uJrc;eWOmL5J$A=BN|iG
z`0tvmEprp_?4e0q`y!j=Fd^h9`dbAwFM(hDdxth`y%}+~Ss0#B>u6M}BX&;1kTJ6o
z#SWXo6{&v>?d^N?kRdOGCR|7wUvqJr)osk{6(%u;o_TVxV@54=74EbuLn1-@#p@}J
zSzg*BF9aLiBSw|{nWn0i8;J~L9TwMUoG>Xi*D3QcQkcVe8(o&vhlVBA_`gFfvyrei
za%OVFp3RxCa+u{11<&cUY5>Q$II=asaSI9{bXazyOyxtZ{DOqgC;c?Vsu~*ePkQ@N
zauzbhB*3?q6AL*oWQB$pHh@$@h8f<F=8UmTvTvhay$2ZGs|=+f9x;>N-&dsJKvtNO
zB$1>|F-s&eIBeG0MQUfMF)1dbs>Cr>mXd~DScZn(ftO49@IxwdOJV9h(_g#N6RJBm
zBBr-as#Zp5sv->&MQlCf{XB0#wtH%N)1ZPF+^kBQW*t}Qf!ro8bfu~OobBvK#aIjz
z*~HE|jEnF4PMD@ltbbCIrahe@+IdSKIKtNW;_U>nT!S0t*8wt+(lhFGhJTQ3YI%Re
z$j?^tLJXY0;(B33X>gTD*w2T}ndBQO9g~nj0;HB`CH*E#8qHRC3MsvmD|IdMxAuTp
zm^zX{lh3=Zi;`R)Y>1z(0*FHA<<kHDHmL%z*DnFen9*Paq6uM8fdHo9$OB;idi2}S
zr|073-+9uT@$v~)Jp-(O-?Go;&O4q$$}sedaBpcm@It32uvwagd23r>jfQC7ZRgey
z==);0l(614z{5;f!!j(0HE^a0rcf)pFjJ}0M56*sNsTPRqzNykgh?E7P(fgVH-v{t
zIc{l+T4cz|#gPrxh8g2sdk?xEo_IRFujU@ie8ldO$YrU9og|}&`-3J<hxqdkdzr$y
zj6wr(@O3|Wh{LgoXX1HC@{Sr35gqMdImkvTxy2cT4dj7&$@$?z5|b{HKuiMorx8*v
z+c}7h)^YYZR%1J$v;oRhuPugGRb`xr!{b-tOxeodyu1ZgPs<`Qc9EqaP8(@NfH;<!
zjPrWZuD_)hgf3d++<HNRsC8q_%I^)TDjDhmMPR(V1epTF%jA`93bTW-i%|thVONUr
z;0k~WyiUjT0Sks4pC~r!LL&x)OkE4C%)o(SnI)*afwwH%3`HTC<)#x?29Bm$0XWHw
z#!Ne9IS)<JDeh{%I8f5%*|_{*iVnU43XGGFVa3d!uKp=Z0z<&whQQg?IqJN!n{Uv6
z`e*U|e9}QO-LSfmjoL3Ses*xai#g!^$%e;=6&HJ-=wwm!6bp35Q-0B<zqV$4f~W7H
zyq3!G6tq`j1(88?kub*yGX5ytaL20fC2}dsWVBJaL+Eq50sXCaMLA1WWxyW6De-^3
z0_xnLKKsTIU@y~vPq5avdZ;g<y>ip37s<}vvmtg1$q&B%lk{FaPrO}PI>LO@&sluO
zjGcq4s(~`f8)~&RA8jr?fUfQU`K)PZJV!9yb=GFp=j7O%*~#FFru`!{Dv5v?_bW5P
z^0;x&v%N1J-mr-!zG0@0bzSGB|M)Qa>+Ion>-M)H-XcVO@6~~&gCMkQuxUJ;)<2EI
zM=GY$dz;_!>W{7e9g;Nkg=N#?Rivvbj#3(~Jd;dh5Pq=V3JEv|N5<T9+8rGmjf2e|
zfj<y@ISnTvXc^O+>vBc0(_QbNU6Val0NA_=g|WU5>82jEF(#G8wcDGnMX-rXb1Pxk
zmqw$b;in<~-A!im*~*Ruzx&!pSE^3zUl2N#k7(C79Q`qd4(6Q+U5h~D#_N0FMwVf7
zgY@5SAITtb5gsR_mAM-9#p)YHnbnkU*2KKZk@^7H@|yVf=O|rS>B3nYdTE*&vdf>>
z#3DDAEjnd2T8zv-6a@Ovq1(>Ga63>*Xb2~v%f-t{cmZ!pTHx-!+2k*MgoB(fsrqCc
ztDI$(jxY<9nDg)qf{t9U+u!&RqedX*&EF(icfKi36nbGEu^1NhQdiExHJ0MEcAzJ0
zR;nFu#ag*^=>e)md0!_R3kl_B!jxH4&v>XlYux|naeZcqp3k|OY&?(@wW9n!nx0n-
z=1%1y(qe%sqiSmr@ciykV?hlr&syBPI=%+?<|hAO7n>SYw-gbS#LF8o1IxX7%|YF1
z7*t94Amb6P5RWl^W7=VMh`%)MdytPxISw&ZrS_m@niI_rQg`K8mVD9CyY&C5RKxc}
zPwia(^ukLo-!xC9?0SRR;DiNKAhxF}ge?;^B3RoaY`0Qb7aJETv@KmA(1)AOrcBi3
z$hwr$xzvg6`=b~uX11iSsE=aDO1RZbr(5*)2mjse!6@<AT2)E!RJy0wEe+xhxFEj#
zn3v;<Qx7FJnS635O++P0bdVy)?Cp#a5)?#Zmvk)-3lAx}*JMgzOQ3h^&JNXc3f0X7
z(?P|^QFgzvbo4T=Ru9pSRIiR|BYa25+vitcXy+I~kJgPfkEn5HQqr~-artEQcJOhF
zgjhPb(QA{EDJ7*^(EM?G6LY!2i7}dLLCbM7tZapqyre(x<&NC@XLc)&M#p0{A)yad
zF!~-EIuH5qhmR)@t)>;@OMBNEt+LO~!xI4YGn3Fi*o*$<$teOE>S?av9UWD;5YfE5
zU`}H;Hh7`XZ^hb~thf&xyp7WWkSYfB;fxNF&CTh{i<uq8UMcY0n5!JzTZ-R1y)*Lq
z!oli}oS%JEl3w|3jWhv%+Tga<AE4A9En~JQiE5H$HYNeZ8fWfe=N|-4hd;O7S%M}D
zskL_YI1mK^Ad@jd4$TBJi^0GZfNGu>BBq&Id8?gfRXkc63g4jKis@{SK+_6tt|?D9
z*g{_pasx%yV9DY1Y6s&zr}XWn=j7<?hScg=tE^~m+hzdog6GuwL<bABoqUatIT1j=
zkOthEGz)%W@E}Y^&3M}&2#T*jVZS)8x{gl0yOm;1GQz$aki1E;*zddGhe(EsXGPW~
z-o?G+TRjNZ!{Zj-$s{xWEIn27qKukHSi76(j>zOQrjND1)L0~`YK5ywFtBqH%@_!`
z@8QiVZnZHILRuegJv2KVxOd0RI|mzvOzw=v@H-Rxfc6gR$7$D|S`okWRcaH_&GJlj
zs(d(GrHgX7!*eA-<%&|91iM)f-eLT^BEa0x%>VgY?Z{4`Qm$mt#8KioI5<@NoQ0IO
zJe%|bayPGkU3XL0%Sx<=>ixw$pb-qJ%UQK8Qc_W@GgxaU`Kc&G+f$Llg7*bkoi??j
z{b~blLtBSK&T{BpRiRF;s?9c1<DLmq@h&8DNiQ-5>n3N4raHAi!78-2&LzJ{EG)4m
z$anwGp%~9yh*rY0m2Pz2wM;LEd*3y^Y<Tt;u&~CGK6qvwu2$g_o9b&@@Q$K486D6n
zblG_7aGmYjKj{DI8@u^QShI2f0P3Rv!1w=6F#7*QVq832{#z)fT1VS`gDc4|&JXBy
zSKoDl&^4UJ@X;uqcofI!SlyB`-u+l0Au$rdnVdp6Tem}_0}}w*^=`OWX509uO1J=k
z0f+s@zxKssD1MjOTwGwPG#BH7*}?1g7<c$O!6UU^nO|&tL*Aj%^xEZq?T6{}Z>Y0s
zW!i835P_}u`#Fzf<}0|T2TFTu<}~=fmmkRP`f)@|d<DnqcXd&zInXGxN@e51w<sLJ
z;$$vZ&0O;%ysB$ibg7%pXs-Z@K!i|ITzXzNGq(H6<D`^}9m&y3Ck}6Ufo=QN!@aB0
z9NB=epcjg;Pqmv3XjAIFt(~Ep7Zr*Mb(35DB*c`9y@L_;flKB6S*qa=lu)I07rGia
zM$3gYn_U#N5Didck?eSA(&oZ^p}7o$CsT*QQ!{m>!n3u~?5;oAI#zD?$`eZ~`A8*r
zehIfMZ@J`xD<ZEh?;lrtc2QoWBvFp2FHW}1>CzC17@EawDp{pc7Y^3-?CQb}8~5vT
zp~rwa=qhv=s@oH1uzx4((dpMii?g>*BRi55-z^I?O}yp*d2_s5Mni;{*s}cWeHfTF
z9Q23qR4<*@p6)`24uK<C*9_=wxPsL;XI(7B>5yDwL7vipd})1kY9GAA23?dDPSkQ!
zW|xIQPx75od4~D1ibVc6=<{!T>3--8G^C4QKwxC|1^*2C#9tPczwca`K+7;nPS{<&
zBlxSl(5RNq85$sPPg^m8?2k$a=&bsr!K<mF)at71&2>uiE42TK4W(5Qd+P~#YtgB0
zQWAH}9b78kwsJhYfcZ2(&)cgOMBltY=6qy`co3Tg<?4Bdy%+rh3KEM12SOMgB@QeR
ziVnM$%n0lhQ2(SG5DIiyt#1Y(;j4iw!2W-Hol|sYLEGiye{9>fZQHhO+eXLi*h$B>
zZQHh;^z{49H)}2i=c3kG&&9qvr)pKzvwvHV6{4C>@XB$it5%%Rpqsn;>3b)dP`C49
zAAmlfge1^}7@zf~<UmD?t9EY!vtKzWylRHUdD(D<w9o5ItlnK>bX9Y$eW}UGhd$+l
zr*y{Ab1}jjDeGZUG9LJT8wt(-!|mxr2!ewYi&PK?IT|TRGKJ2LSRdz@(olyKubc)!
zJOW%)1SN-X#T-jIe^n-<|2s)n0yXZ?FR7G~%CnY{=1yxM3<jc20-8!tXfoEE-jh>R
zXEDVBl?7wo>>r@X{%Q_+Xat7C-E?GBt}Sa0C$7Gpz);zJ%`Sk1>Xon5{Af!R{2fP8
z>W+p9SIE5q2YFtRLoKl`>B>l$l5z_2dRK5gfZt8;`;wuztEcB@YvJjE<%qNQE8SY8
z7}mQn(?KXS?d0wRL%f;TNK|PS{df@btoate=#3j$5(TLnX}ByBoT?*L$4(?qhh3i$
z;6bg01?j=GzZJ?E1NDvH0H2@pdNeuc1ZaFpeo8%H<EI61wh#MC52NDaNQ%!^hn~pF
zFT;T29T+H^E0-3WRu&Xf8;Sw(ZJ0^qUj^D<)i_{cBYK2=_YBPSQ`mrZMQz-j-ThU{
zmRtu8u_&}N29E-TU9z6j97hZ?J)7;QrmlSap3_scCEn6wKO^#8aTF3pIaoS)jTAex
zALtX5Z8EeK-Ws{UuBB)KtA}#3Q4;Bf8KAOBhcGQfV>7;1Ke%*OM>&3z0cBQ_uO-V;
zKt-j88w*88WA5-gSFqH=L7W5me%LhsJ9+=uAA4#p84gYc8)0J<Vb(tNq^aIVI?5~-
z*zPv;@Z8Wu;a#h@^I>Ak83s4HW(j>+N0d7-Vsd2+-HB<EuCjKF*_ky^GqU!K>VAE9
z>$}kJ0`TtO!oA)HB%k$Z(taA@hMP*E!x&AwyKs)|ybPw5RY`3Q>w8OE_@2{wc3uOf
zi_WF!j>z78wMEH&eQf%IYzC`{zWPHou=VpO>7Q>M4&*ZJxG-W})j_Fe(Bj1uK}M$i
zl7vrG*i3zTPa8*H?tfM)s8L~-{1#ej)sp+8)6HMA>8R65orST13uS~jF`(`Fq321D
zbuh1Bt+HN`AUqRO!XZ?|hDLoB$+af$&hP7pIHb~lfrj1BbhP#+cQSu_v7;cilil;#
z?S2DiT?yDBG-3@L`NQyk<m|yr@Mu-ne-gI^DPL{x-kleYfjluNim%P}iG$$C8IgeE
zz}WJJ#rafkfDG96F#VhCi>aF6X&BmoW17it{T@J~Xl{PM1*)hSQU|vCeb%mC8XlVb
zBrWNfXyV)dUaNanx8<ZhWud%8eB1kY__TKJ!!KWgo-eo49srr&A^@~RH_1O+epCH&
zP=!sx(_-_?at_lpl!1~oF9ze4lMW3Rr9Bb?$t5QvUaS;M1y(SDny(n>Q3=aI#Qsg~
z^C7y+o*u5OY2vC(cmr-MA8FRR6|iO`@M!N2u%QJorUi`vdix?E`0@7-k@y>)1nfZ_
zkl<tlE7LSJ$zsV45<@LrQu_S48KI>}szd>2WZ_|wSZdL*(X^l4{C=}DLCVOK2Dbvf
z9qn+jd+RS5iYD#=P-W7JTE@f?LEQ&49lFmJZRddnOWmIvGel?axSWLs8LEf@<xoUW
z`V0;dBJG~Ju1cSFN5a*|(L!OeHfxSKB(6#JAQLmJ&bgLk=mR4?u0=Cm0u;agn8f>}
zS+OvSRlb1jTlpA{AC-8hpO67z-d$5I5h8EM8u!a)+s>0L_tkK7gFaHIxgVLThLHXU
z9Gs-GZ{@&|BVh;El2!4Nc>_fGgzD7}#wPvyYEUAmG&<maZFJHPIcXS`=E_l;Tyz@E
z$@V1z9dvdbKb9hDKHD&$!MECku)+>mu1kVdbR;5qt8@P%a3!rhi)Y`OMD%>qfCkX`
z3Xb4kJzhKQlqo3E8snecBU6!1y*H<G5uOJb-lS<+Ye>1)mCI9Ty~%Eyg0U!mwe#9M
zZh$1<=7&gzJFqOsFMwv}k|yE9pS_DQ7X}fl3ED1herPeH4<=>S5VW82VIurA4HFA7
zQR!>L681v|Z}$a<l1L6S;~>Wof*1EO6vRc3nz{XvK&V9UsY<1*dt(WDUO?BBhrX)H
zDRC%5Ru3QtBD17$7*<RJ_=(HF^8Pk<P@tkEqf=xABU`<RiXcTngID?jD)SpiGzTss
zy7T1RNj;qa877&V#%#h2Hl4x-P8Zpm7H9!*SxTU3wfEcUrPARQteW6NW1A$!Zlty1
z8QR~qOx$0gC6i3vljIeiUTcjFRCyCO$YJpa*A3(te!ji0h}W<_NF?I;4M&EHD`L8)
zkSgJciSeW0z}ElK)$)~>XKl^jN7O#*Bw(X$;%{iF%Hn{*h3jANA<(kIK}=|B!NA0J
z?(kNqRM9zZDoUF(rUYwrP<DvZniFN9ux(dqh0LmORwp@3dLoeWZ&tcYWSiA^N$Q(g
zb7Fwkw%|9KA>msLKd9&iCulAmV<kM_;drt&8T~_5>R|%W3@&arL16lmpbWYxF&*up
z53i@ZG<v~9XLna_#dOn5eYI`I?!8qSIFbyrf>xvcEHO>JoZj@VTN1@5tYo;9r41yJ
z1c%Q-9Z0hk7rtXPDupXvB#yQc0}oY<?q?bki-Rs2n-=_I=p%s1#vskRfT6Wn-&gL{
zuBHffI|O=HZilq>w4p~lgI;Rqt=c^h-kFU#6_mlTPijFzA@?z)e<n&*WPXFPrbGZO
z{wJrqnC^$M$kxAtkeDA$6cD?D$Mi7C_;!Nf;L-LTdFn<)3r8^=EXAaWD=!^JLPdMj
zEOjB3Xh{kJ?g#~g&U0PQ6oX{$6L1DsmoI~{q*Z5)G<4O=x8s%Po;UR*nSkI7`Us!*
z_p049Be^s)-9j-|eSyM5G?e(Eca;<aB`6aG;R#4gH1>2RglZuiVsWnF0#kpOS(z7Y
z$urHumBwYqq9`=M>9?DT+G)h2$RK@n6L|P|9@!n|4Ej1HQWL4YC4A9T&YF^G2C_CW
zK(`LAl1UbUE=Udzfl*_Fc+hknd7Yhg-bcj-$>+V}c#DxzAb@3MjCaD>9NvjGLhJEH
zoNfsklHcxn|8a_fsMi;>|8K$V;MG8aR7(UOwaB|q8oQd#ZywSl1{C2ozQ0;&uKB;|
z#<0LRi%UNEDW5EJuTZR<7#E9oJ_zo8?Pd<J7aZW5wI*dF7j}=*J{(t6Y_H*JN{*k=
zwkTjD*A(GxD>d>cC%t0@SXzpBO;jck)Cn|S+v3bywj3pBAAq<vkQW#1ujjWacrmFG
zPDr-9t99Joc$(&JN5hx7*gPIxsS4Dj&$a-td|mJsR8ANeUsg_uYPx&0^lw$eRHG2_
z!3ROF!2-5fdkE5r^zLX4m}tz~qQd@je}9NtKEHbaGk`#Z@nd?N!SBrJTc5uk9}vaB
ztpw_l`gpln7g_UH$uJuZ-3R%&jh}iNm>wqfTL=bO>`O#FXTal`6J+u+jBcW+k@~X<
z4m<acIMY#J6iGRfF2?;)WEALSZfz(vGlqebH9D`%-Bg}vI`&C6H_l^d7@oVyI$d#3
zo}F>QbBZm_efQF82%4Qh_rjoG?Vv%eWvl}pgm1s8prFETO%(=5$>E;nDHo3WDHq~Q
zl;9W3a&-Ic5Ln?w@0%Nf5U?X93i$Z4vc>zd%|?lt+wa1+daw^9EoiViq&^osflx_3
z7d&%+85OT>UkR6R7X9kBU~N*X4K3BgAjnP|-Vmw3E?9d}tmZ@A#E-T^_*XcnTg#|h
zroVN(fP)lR4c6bh`H(Z<dyH=lh{MgFC?B1es$jWmpP@6nnV3?C274J`9>arr@Y05g
zxh}BQ9PCg7bX$)>0;nK%)@+nt0F|9N47MXuV>zLs+J0ZL!7UdiE_Os{L0jtu&E3WJ
zVMH39Z+4$EEAIJl#gRv?U;-*@2Q@-wE$Fn8zb{N>w(%h@+%HhWwi<9NzgOIw7_VuP
zN@bEEls}*scM}axd2yX}(4JU`?TXN3DCaL~pF^dUzH2`jKz(}CGKgB|WIw}GsjBv)
z%EHsI1Dc6tzNY0mJJ;=&G>x(3o(vCgxw1G%G37xjBBJJ;tLjH04{n!%J`D}u^BbtS
z5mpwu5LzeN7PYb=RIM--;TjQ(V1(Co!kA%$TPKA1o+w>>MMew)ECjqK?_>z^%U|+t
zexg{Qe#o=Qk2et^$*gz54c?%ljmw9VHSb-LwDI{o_@w>>^sN3H9Wum+I}qbkY*2aa
zl$!h%S|xq5HsTR&ROOXzwzy@Qx+}@0tP$1da^t99JAJJx<*q!EFSu9Ll*}l!Zut%o
zCEjH}|NW|=YuM<+)yV)XKI%HfYR4ks)*3g<0^-&hVCnbYdDLvf>&Eo5r7x{+;vrqP
zbGt^zp5dO%O>S(!I2rXV(v^0r({Lw^TjFDHr7Lw!Jxq9WLQ#GwB&q=isS|b*aWHVY
zW$trz_<E`8?QwCiw%{-Z*)|{89R0R6*H_#bv!{Lu!DFw%n@r!hn*{d_54u7D^2bhj
zZBq!*ccx&iOFMUW7K87C+mzHo&MJ`#AMB-VV~z^d)Rb?eVz>yD(Sl1>No{)w)u&H$
zK~8P!g(;D^R8rkXS@rfB?ux~x!_muR(_!wM9MIvM7;?x{z1h?nl|#!>FRm4Q>WA+y
z5na-~GAGh31p{hYXv@uESl5%yzapE(`yL95;<`~(t6)|P5n0a@I818n@p{lW%4*62
z=9?OMeGr?hdZT;#C;RZgj#v4RtLZpILadSLH;%6}AL!V82REx)51Mbu*mkWhIW~sm
z`0fkHu1V8*U$3wd7C%V8+8-A>j>X|xuEyL0ex3CRPTFyl4XvX4`yy>R3oE;(!8c4Y
zeB0x3;H-of_prMyD}SrmF23HSl?i;6JB*YeS=Hy8B&h$qi7QZR2{T(KS)g8=n9c-R
zRw6GWJrz{amC08OG$m6+2rE(6x|ph(`@UUF(7e;3;`5hh=m>HyysEqe1Cs%pof1V^
zW(`etg0odyc$kqhb504p0J4Pr(<_SQ^D(gfy3)v|cb_%y>78Wa23Hm-eN|38d~el$
zLk6Z`27hCvR&(XzAc`qoE&{feZEWTsY1A~$XHu0-GiFdj&?~}O+MAq9uONNT4!oM$
z$Rn84hQ+GGJzlNK@@1IcD5{_lDfAF<w`8}zCG(OVgi~9VHFdI<YNfi@;m<c~#sm8C
zG)FKbcG-PM81rkMQ)(PWyJc2)7Tk*E`lYKJTCS7NIxCYu50T%nSowJ8dDFjj=MW+i
z8V+$bhVqp+f(4ey0r@NDFcI|o%sxl;>!pX{97wQac<m)jkpsLAl!*&TOmoPc&AeS{
zEl|=h7L@zL1X+e>m>GmAeTscmi&Gh7+-@*oSoN6yg7o^G5USYRkSAi#V0>{IJcWPP
zomiGb!a>rh0En3p-9ji1;KB%%QE?K@8|4l358MOeYkx_2sLFj;FSceNI)THH<uXd2
zEEwufzG$zifx^iDv?uskj&NfMn*OdSW4F_!i`O2eACNTUqawU1rZkvgyXw3H`3s5g
zL>(#+R*ptI7a88Ohu8H{A?1oya8d<}^N`MB105C#D*!dq8hZa|9Tv$3;@k)`74>?+
zUjRZo^|A770Vz6qG*COd|LwCd2ZO(Oo&vn0_#F(Ifyw6WoqyiNr6>JnCXpH<1uhcy
z*4g_jpRpe(`K-OsTGo&gDA?*i#$CVX!U7sEZXU;p|64Ie0Lv)w5V&pP{d%Mm2c-$q
zI^~?#K7McXNxqhmhb0-G6))s=r<td=j-i>{a?ibIrY{!~ob2K*8zuv=<tdmw&z?mi
zZpb)MDPW>@HJ9Qu0J(qOdq%{R7*|oH4Oa4J`K)f^@=u^e&V8p%)dqNbP`{d1b`Mf;
zq+{sW&WmSHIZz^S-{))sD)nN_C<KOfzAZ{FNE8npq-Ms;y~sR6YS%`Htw|A(gGD_y
z1shB~Gon-)Rtyc4CQjhb!~KuZu8*btN+35-DZ(Q;@CwIDs`JAsWMftxzH)!=BRXg<
zWL=Kg>J2zVq0@6Li8}g$am(-C7EfYZ?KqnaIP2_IK2A+?eOyC!fv1Am>aU-S6fL!<
zNXJ;rB|b);K-l=N9_C^Rw}=4UFvHy=j$p_WVqN6F5OG<+mB=d+axnqq;@dx<?v{-)
z#ZC5w{Zm~Us*lD%s3j>#SMj9vH$VNb<sMEAU_P{doB@V$nzDpEjB9SW#UlQecMRW5
z{LaK7gSVj^4hW}omutNRGW_Fo^|A)XjgE}>`)|lHl{=RA(`~w{8){O@dT5^PgH1?&
zNN5?9xy?J{iPeY&L46E<40AH!8Do9AhFJPAJV;>EWIbm58eaO{2Nn`^C1NoI1ivi>
zp8w(zGrdxBbtnD}q!jxrLX`k_Jf`>*CImR$duHJ`d)X9D3(>ZLIpne%|EuP1H*I$)
z{jvUmRy{Q+RVkd{Id50_B9xXRin1GjJav+jjw-i+KAKb>nPQUn=leFsehV98V<$_B
zxUknAD2`{&@|T~`R>}LR?R%G9W7!>3As@LaF<aPV6r2<MOSKQ0tUIa*`_SY?7K)0I
zkn$s@CShYmW?RSg4QeFXch)oj-nOI9=G^`dhpmS#*baXl6!+C%TQ=Ro@fveYJ1v!}
zjdO3f7=fSuk+SBY5r`H_55=ffy5MDu72#?c$BnSYMr~X1ay=?s8M4Y0yjopnQ!&UY
zKH72NCU;0h0mxse_RFk*`n*ImXQ@0oPs*CXvY<EOSl4lCO|Q{JG=U|4f@;3ZjgysN
zb(zFZPc5R8<;8b|9zt*-U?K$3j<u@>d+NFqG^s`4ZhSXrFrJXMv($@UuR4@Uc7HA8
zN;oVN;b71Q_f=M?*Cs<4dvZ%%%%`J<V?|09JoCln;Rd~VHfu3l;7m+Z`^vPj(;wj2
zua+EEOJY$tNY%<Sb4OAF?R<4+)y;kcl~D}?p@z*Fsxd4gT6#KFV2x)m?+laeNLy1X
zyF?dPylY=@JuL}?<@j;Uj_I<<W|HEE)G!?(2EYyL#v@4XNG_wGtLEzNZ<v`Z&m3u|
z(c#f+FR|lt->67@&tte9t5HfGru3$1;}UW|(8_({Ff?xPl!HY|4wTph@&{C|zS0Pn
zj5xSX!;|UGt782g4ymS@(`XNhr41=%?CWJ!X|up*`dEW6t#(blovXJ?!kEMgqx-0^
zb%^pAz1=WCs5le%j?*iEU~~Y{*phzGsM(&KuY6KJny2>XOoi&8(#v92PGn>5qIFQf
z6cEGAe04G4Ay4B4#tYc!kQ7k#8picx`260oR3x3OBvpKg?YdFJX_hJo;cxN{-=SXQ
z(j%1-W<xMhb8X;k9CQ0akxPVDE+$K)_Cj>qmx&j}bLM6T<ns^o?v%AClbdT@XcQur
z!(Ax7`ntb!XN!n9SSs9)OAQII)ArgMew_nw8kP&*Db1ONwi-;v$c-s17HiAyuL+}{
zZ&t3keJGi#Lpb0^f)4Bs`sYr<7~O!jdF>|CURAy$CxycTdMP)-cR&pq)F`td8u(NG
zd`zH+C+pLO&)$ac_bzCt+R6b;O0Sx-_r70E#J}e*fh9i_aGxmd=<J;#8e!@cde@h9
znurC70SsLAMlp(FSZAL_w1w0<2Dp96Boq&Fb(uZm?Ex#y@8oNl?6GEx_;Sac`Z70N
zs1$kWK3i*MMb+X_i&gFh&O91FGCL2Vl0(n^-Py_-ncC8%=8C(xvMoO?f3$;Rhwc44
z>7N;dWSXdty5RX_iJ3~ggZEz_gZ@Z?B~sqM%&FEv<kaKt4yHtqgk$%Ui`ccWKmN;6
zb8H~CG)Z>%8Z{q1mii_gLlM^JYm7qBp@uH9fnRP<_{82!yL4`?Y$c<+<zxm{fM8;e
zvU?|eIaxJL94`<}_0ZZ;&9>It@iZaz_KQ9kQ<RZ?vTl?8llBNB0<FZbJ5N1sW(1Fg
zRk9gP0$$g9(1;&jIFY6^s{H$uEPD$Bgp(-{Zc<=^<v=#FXPNxowKaJ&&@$?M3A*l%
zC@5ZaodIbgRe$j0BN3kLBaCd{ESJE2U0qsQjE%1BvUEjOG#jw8vK(e3kC&xt4L$=b
z8uY$IhB95D_Nzw&ti>2ak~MuXTbiDg>;u%MB76uM=NHH@TB{h2&%KCZ+XMfj{cSE9
z@ip==J@h4kX6@?Szw6@46Tk7Ngo?#gUd~9$=P0+y>dtpB%IlY3&d2Ckn;)o*g$K@^
z!ElAfRvzpXN@DLd^nA*vgoQ^STS@g~PRrFp%K<z0D98AW%Ucn(`ANBkYK_oF7FL4)
z8cSNA<rx52dKcL4g4@dYj{lq^!n(<bCJ6VHb14ypJNynqeJEAYwf>PpPSp@f-RD;X
zvLgS^(U>9g7FP#$@9?(}vw<)-KP48}re)u{#!FgJ32;fB%lo2HM=zQvG+Ydg0+1?A
zBTin_Yo_=)9qFAum>v4cAQGaOw-gDzk5{Ab3Vh*d2K`CX!|^~s(hX4e#-hODlceO3
z4ur0R@ZXLWjBsJTA%Y~dVe3pXI*|LWgN4a}UwCNj3)5vJ>_DE>#yW*V(W&iXQtkpt
zuBI$5({>M$8YD<J7un>Aw_sU72-4OXa5mF;b4RZ+CCGOh#j{W=%pT}+<P+N#fj7q-
z^;M$cx^%rW#4cn}nl*cHge512OnTv4eNm5-LMb-7GeDDy`)eXF9ibk3rm&rGm80q0
zAi72rV=@7S{gEwK1J}UpvU}={sDrP{Xm&G_5_R9?pnYCwT67KaWK-|=2K3v1jVNPM
zi;dugd>_T*-ipgL|6-yaQ5&{Z4U;|Uas$v9y^Zdm1%s6Q>w0B~fQ?fYp5DmVpG{Fw
zY&ehHg3f+nD>}&&q5M27LElKAM(#)hqg7SOw?!)olPC${(y^L5by8dUa`(aQNV{2Y
z6;J}}LUkA*Bvrc8w9e`txXfZm0r9a9I;zksa~LjW04nVxc$U{pdDh_6#%11caV<}S
zMLV#1wCJFym7M91Zgtybl)#xgH1ryqw2FE|(9WNif(zsuTJa-QeXRd|QguA`H?_()
z5EJkkGAf(F@)G`|=EF4X*W`9=!%b4b>$(C_isiB$y_#yRYB)*8C&3VflY$SbXm$4K
zIR{i0_Jvs5r#pnmF=5H$N6|}}T8>3mJZ3W0`^C&t_>IyhiJdl^E4Di<VTMV=G2C;F
z1wa*ba<U9Oa0gDk7Ac?tABNbRZj(R_r&K`AO!ah|<g@N(4B_3soHio7<WpkjQ1-(J
z@e_AFLqg@?T<)2Nt9NeW?X0$5H1izC9D6S7hpBjEQmN8e4^%#FMWMn;q<s^GCu7@X
zIdwon2t+79Scf*>cTll|t3?lEAbBg|H6fp3z)xfMgVavxE10CgU*mUQY(ywS!D;6b
zEA+^^D7l2jJ3az^iF21|3`ia0-&#DCYtpM($a%NDm>T$WxV|S=7{pnS*M*9cF<`GJ
zBG2CSllajy_vCh`1J6MGkXWa=QU5h1$6Qtmbd{&a)xo2>h@nk7dy&I=oX5(?h@4*7
zwfgGsvB0}*P%@dblCc^x1CMIk7YX0Ccg-+>S5`$ycSMKm-YfrMPPNn1zg~EM*}5|R
z)>&S<EkZc@lRtSm>wH-=`V;9l`c5X`L9?dYU4G1UZtUH^YNpmQz2sEbWH#KF`*GyZ
zKbDFBol1Z`l<x4FjXs>q0`<CuP$KMz@TpMu0wf&%=RL*O#!_0H^iHLkpH;A<T^vE`
zPUpjD8S&=OrE{Incp(krR3l-p&qV(ez&n88Xag+^xkFVt&*K>N0}ordiwEGSsx*Rm
zH6S|+&@%_e#x>2}y!h$!oB2i$v_Nc9#g`i)Ai`RUq!^uddSH43=U)utyep`|t%kw4
zvgKcZ@U^V%f1UrKCm6lw3fWyzK<o`-%Bd?la`Re+crG{|Jpne5#tjLH8MNz}$qJWS
zyWmL-Oc3(&4Z!U>q(ADR-L2=Y|CWGxfs$Jerjvy5A+mkj@-?LjJ(84=l>1e`mhtBH
zOpx|9N)5A8_ZdI#?GeB3laOV|)?zG%l@q|ZB33|83fi!mY$NrP0vf2PG$_Te1o(zZ
z&7oqCJak<m*|(*Gs|iqP>(D%6qbI5lKS_Vnc@R4{oeRMf`+cgvtBx7BB%}cGFf>-{
zI1H^bCHtFk8U=^9)ve!RU0rfEk&xg-D^+2i{$DPc7G;+RgdSKzil)pu?us2aZVhe(
z>2vZB$+6eIz~zNHml4Z1+n?KatgGHxbc%9`J_uBpn?Qwhp_gCatINBa#5B#IF<nM%
z$up@RiT);*ljxk@tuZDlQd80Z#Ak0UDn6PJnSDz9$w71RJ_TON;~h>&$(#o%M6RtA
zq33P7Pk<Imh#D>da?W&?&B{{jvgt6(S;M^h;uYw?{3|?SIQstMRnEiiDNbk{?b=l6
zF$nvM=%BS)e<~&loxHI~OtPj86T6~nT=JUIA!(^~EJ{fFMIxx3e&Hx5+aa4*39*St
za%?^;76Ki#8rf$`Wvm3cz4<{g{b4-?`JX9O8Ww!m3g&$kYL+-SR3&m>?TJvr!YNiJ
z&nRZ_xs#Gq=Km65R;iRFq%<oPi4jhL%2Uof9~+pK%~3Vyei<4{eaDIQvMmqVH`j^b
zaMi5s8{uPL-(3=0$0Z<m^>$~8sdh(yzWPAXLW?8}RVJ39Nko}ki#EF&Vs0_U;;E1Q
zqdB5Z%dsj>dc6}JGDie0J&MVSN5c44z`^1(sl5?Vu5SGT3V}zHtJN&$Pk#3~oiq_(
zjgy==x34lE)()R%?d<b=EI$^?>?$jnQrt=bxjmyk4of6V#Vxjz?;X?emi*0u8GjEH
zVoPgWf>B{n|2B_&^zbPo-b_GUtI-&=l*MtFFL^2si&o(Yog5u=@U<&U3T)(#-N8s1
z3*(u=!Bn@~WY{Xhge0~^?kEZTZ{QvQqU|a3d8X-mI4J_MzL~7#m0%y_QR|*eH~pG-
z=x22}6x&rqnj!c8Mo<kVJE^AY3sGyRl1QMYCD2t~qhhRy&|#mSTdq>fail;imd8l@
zpH{P3;{mH&H1~eTo;IQ`9+7o#y4H?sPGf~1OkLcNH|O#4m77+S{hpzyCOnOU5w|!=
zgLqCc)uw>Rvbj6B?L$J&+H7=na=Plev4Qf9hYFtTEaoNDD>L`YB%(}Ab_iQX!?6|H
z>CS!k{VYH_)R&lse@(>9!@Q_~ymGZAkK_4H-3dq3=XY_!W?+Qxwn@MpEi%(`hrQ1m
zhg&bg?!{O_r-y{(0`R{29!N?SVUKKP|A(yj5(iLT|A*cjZPZ>}SVHb%f09zmD=Rq;
z?=Se;hEm-vhxHDpeG?L>VCEK;i(qBwj)6-=ddL^?{6St@KIA>B0^#Z*J!)S3rrOIm
znar_Kda&Dut)endoCt+U)VE4}_<w!3pvhe80a^8_9NLC@_035DDmN`%TAq?P)e9g;
zy&9w0QkkgvwTCp$!x1C=;wd-KRe((U>O2|e4UU=QZk&5P((p{W3W6yATZjj7sK`b0
zUGX(L?A3D*l#K&puofzR3MzC9PnphHL(HVj^G$G!#Hc{qJ3@)rtCX+h8crZ66oDN2
zk=~1D2>v9O4FUrHk)k@hI@)mm9{_l&TWh6`gK0zTJho)3Ckku7f3sEh#+Av45zjP^
z52_YjFs|+UUOjlP&?X-NbN#P@fIN(BZB74`lQ4MNa%ZILD$)k>+KV`okCQ=>?Zcl>
z=Jj8+p;H1o7(NC6c2A$xa~qExeUpM;Ztw`4&w&bGP=WSN{3P2$)jL-ge=Y!YZPg)I
zUHBcZ93@JplxPWEunp?=J-vi#?%bPZ9F&RROS<v~g5%s-2C}mX27TkPb?(ZiXs)?U
zRn2`SfY?zG{<BckBAP+xrB#pe8<nlcOIzZKsnyb+=QZ;W&ZR@Ex!m1>UvGe@n(Bj^
zvjXZ!v5iSQVd~8yt9u&zqBl&_xG$Wm8iR`vGb`r=GG~T&=hfv66|KV72y3{i>KWNe
ztv=@u1%65|9&a_S%xX6;b^f%=^t}ew>_IwB#XOBoYnQdIAtW8#^+g-pD7Drna8v?q
zx2l-z%cQ(MPbbc0Zq(F(E*x#X8?*ouF#1Mph<>6!AZ>bK*{pI<k3KoBDg9Ku?e(>-
zYWQ1cmn(9$qyM1Q5iM|!>bM|0s{}Y+#b9-EE)4K3$0Kf5x^?zP{YZf<@0@}Bz}8V{
zA|&zHo?jnhIXio<B?)Asbdw76mlZ=*U43Db=iu@ltW3<2TcbgxBM{Hdo&MxQq9_a)
zX=^Er^pbCZ;X1q`*)Mi9x!{W#i6g%4ISehGA~NMBa$$*|9bmmJua4^ZOei>yo_as7
zMoPOOkC8EvAQo5w&Bj_k#gLUl!!6dCxSfc|&`=KYX(^I!=lggYP~TSf3AleWfi&!3
z?|u{0mKf2?5jpKHhomm76;aDTDlN1A<(hl}w>8h<ctuTllb%CP`H-HKpX~!QfWgJF
zb|S^`x>k00+5+dO%F+gAXBXc_%y}k_4X-JYiFP;oX|*Ad@dqNwS(D^QLa+}c7Z?FX
zBCU^rx$2Rg^{3mik#Lxu2-S(oM0+W;vTI9+A=0{Aidi2HuS82!XB8vFs#=Z7Ciof3
z1b7rh_g9a<%e;G?m{gDT@rp$NMp2mSKolw_DD`VUt|f?Sc{i`mJERC_l1&)|Z%sjT
z67up?(eP3*To9TWYxW%ibb*Uftmu8`L_mU<yL}h<q5)=*Og;bt<0CQ5`?;IdvnN`m
zoy5r@*zTgVuqbXu3RF~`?I=8@gMvj}I29PfGGoJezRdd19SH?i_rI6pw`(^NSDxhj
zKyhYEtw`#)MPm?c>sVafwG;v*WdL^;R^m#w4jLHtyFptk5e0xrjI%cYhw%kCHdZbN
zegu`Nl)Hx?v^8^KG-*91wn#pIktIHAM!_7$ItpG;^r50N3o<0?+OJ&<w3)<dJ?0Pc
zov@Ez?<{)?6_ISV^v4pI!ev$LAG9|-<~k1%hMZ6)ve-`RNewboMn>SpYnGCD$mVT}
zcM;hN6X9tBCx-$`>K@ME(Lc?P)JMp<YD-BH8A><(t01dn1|gI~uwaAzxSmASI-n>@
zvA(J!f<vf5l?x<s|8fKol?vc(w>2^AQU<i2ZlKWDP?_@)Ul?Fm&O~D1ZFYD-nF=GT
zX8(TI=J2mbCz?bL<>uOIDeesc8Q*hJM}EY!N+c&1*!rWJ^OJ2xE|*esYbu+3E*3{7
zi9#5e<?$WHD8E+!{7mG6Qf!Xls+hB+N-9wL0do`xu?v8*ioIA~xSEA(Lo&=)!)NQD
z6t3)4JHyEQ<R&K(HY{S~=KekIABMjv4gg30txc)Gf3ue@w0~9Wf|J@&p1lSEr;C`4
zw9XXlNkWh(_UhWZi(7G7Ua~Bf$&~FKsnE)0snG5PQ-=a|1qM=7kilt?zTV>(oSXR9
zludzYbBmUt<p-k?D|@z{@r48^1XIy1-yrlwG9SwD`>4xTw-D?moQ+cYNux;2@OV%T
zQBUlSMOW6Ll;~3g(b|fP@X;D3J{gjb4R{d_7O?*E1a%ET<!ng&H|IBECD}=B<v8TB
zG2iUo0{0Xcl=)gh^_T8aLPR((9|<p5NWu8m7m9sqP=Qo^dot#oP>>$}XHQP9zLf;s
z<RXqyylW<3_2lWDE4o4GmKKI5q`a<iWuz6tb?c`gI#!&P^oK9Q?P}#lt%qBj!<2uI
z?oNKac<tzIbBNwKOEx9>K@^;RfXC;CNFF73m%s6%!~$~j^r2C085os?N#12?xBLPn
zGzC>FAd%>s@#b}Z0ziJ7mHNt5*e1jZbtFj4;}>!z^+7(4V%BFpPBOorUr*(~#qt1l
z*m8ti?Y#VU?8{yBph*elq&|E$a&4M+3na89$Vh@=n1@QD<{Kkf{5L^^6)~a66*ZnB
zMIh<xP%0laKTskI`($(F2fk<xHi;oI(&5-xa$(a?B1yPZD63l2x!<P8y#WM>KnaX=
z$Y5jNK0pHektY1J6H)WE1M(W$&Fwo%J*8fa$?JWp_f48EBcPxfCBiMKBbHWrMBGNA
z6891-`k<A!=7o)y+(Vz8CL<Ti){g)O6G;hv-Rr8)zzIsfR*QhL19@TPGn}<#DZ9aH
ze(}D+R?hP%q>7aWe**PgWeZK>DNDb!Adk*J^SU^M&MVVyr9Z7_iv89Qr)$c6{b-#(
zb}hjFWq)(+6Yr`heZ3Zg1)JqK?sxP;Kt<t@xE1A_O&BImQNr*E!_XR*CM|ma(TKQ}
z=h}(C9;rM{-CNHoO~6mm>e2w`x0bB_BJ5$#dos@*D&CXH?=X(LBLpmcnw}sEAM_#t
z4^V|0+L8DvxK8HR@CD4CT!ltn@3fC&)CtO@DWPHhC8=f3z9G;qH^mAB@Poed>YQ6}
z3l0}<KUEZ=jOh=bwJp5JX3i4OzbRo%I7*Qq$0!(dnsH&$j;Ep%sTm9BDRd|RbGl_i
zx6Sx~o$*57!=>aQQ}L%XsG70u?9*Ajb!-nc11)uRQsu4GEM!Jlv>zQumY9g9mB?e@
zm@7#Jbm2vUZZy$!w6AgW04NEjEs!%MQ^a%R_ydC2tEryC3>v5$$Y2=|S5F_yjzgd#
zPm=hx$dE*yLm-L>R(Jz*lce>+4vGYA?9{$-`q2js<oA!E<o&T^qc!2H_}~+D(L_w8
zwf8vQ_hCxkOu6bLaQZ~607pa*roE@Fa;V?Kd!;YkiX#y<mdPCApUUSxg=o+pdusC1
zDTC^?d=EO!DzJS33`Zjq)wn)AbK`2_+VHM7HZRaF#oJU0=Kblxz{u$;JPs6RBasb^
zty>wV^-XvtZxFP~q>FPfR+}$$bzf0UccuDyu>y*8*sl7g9Kx~)V#@%=Kcn{8yjKiC
zb8#~;eZSATjoeSFepg~c&~+Gfajbee$cQ|(u*w?92jW@=pKlt+?V?|f<CyT>quJB)
zPG)WAm&LM9_8IT1?T#8F>9Rd!sz`*@Me1#phu`f6@nH@2uhZICXe7|d83M-@V*Kk$
zaR8t_4-5Z1JU)lLjlvwHPtl`W$h_AYsE6vTY?a`wQEV--c|sv2)PvtaY50dOw!&j+
z^4z5yf+HQgDBp7Ei{uBBDhfgLpZcw^R(ZFYba=f!-{sk5)>cM%7?Vh$jMtz+skV|?
z<vU~85iXNs!aWfgVFJ~nIQCZ@gr_>5+K)gxcGolnYLpSeno~6HeL4F>&!n#-dk%Pi
z^JiDoXL6^JaXN&zZkL{xSy;qSbuZ__XkA$Qqz4Wm=HI&503RrOqz9%z6MAH%0(m8_
zGZ6OE_D%B!X|(Qk-bIC_dvtZ)RYYm5X6&khlr<(N^k1QTUOp^FQNnn2HrfpaKW`w4
zO_a`p9`6cDBSAVg@IkHN>V>;R_%|&LT{{*njfu>Nx3vM+6qCiXI-zWxJV;N{SyhnO
zog_jmYuCf#p*vx183y6(N1Gju92kvLO%9puzh=pyujn@Ce$pdkf3(T25u)kXrY5+D
z8L~n<yjywzv~>?6U7*KY{S90AbaXEwU8E)7MCN!!B1Wl*_ko2TW4AncdBw4YQPM~0
zNu5OWG<JI?4^fdBGs9A{!bEjxG4T>=e?{Ve)6qK(t%sR%sWE<X{70t|M(RWBzjWwH
z&$a%S4pGTJ9ct2Za>0Ap5BdZ>$uZLKmcJ3B5S_JAzQ5&6O`<>nWzCwJ7Zd$dtO3{~
zJ*=_cR+yg)h9(t703JA#UCAb1zTcZgbK|iI!uf(O;iKl0oLA2(88!ZTv}I4J^8ikQ
zh+aodSA3$d^8D*F38_ht%{aq*-rv!*j9dk@Lt0ROPwa#x{}m=me3?neXZ`m)>?H5I
z3Zj+i>8R%9)!3@Bm0+~Mr#AK+JikgQTiHBa`~f!m9zuGkm#2YYcsCjy*8cs}@V$m~
z(?@!JxWMSMX5bp&Vnj44)!&W@-fAs|=Mb-NS<tZ3b+p+c;5!9Keta_bvYEYkgCH+n
z6ByUo#)e)%T$xUk0eVA@+M@W@P2c~J>~E$sqa>yF^a&ZgUWfGy5Ir<sQ6bB|77viw
zsr(_+@&)FN$>nS2Rk7a$uY*<I-?(IcysP6HTJb?VNS4M4l%=aWv<!m|GMdrFgMphr
zs8x9UTpi0hITWK-v4HligcZXK+2F6b09vox*WBd^!{wGv0sp_>tF;EBYU?|AtDm2{
zuO3`qz+X<EOa6vm319Np$7%PuUtZjuQ0R|~G1<dq!{=^yqXd7^z7iguFeF=B9b1>$
zDxdk^`*xE8%W`)p1`#%Bcu1IlCq^iWL-VJMjGp;N4D6UfXjvES?zP^}0|X%cF@M~v
z!%2XYk-`7U<fR6c>Ait{CG4Sp?FJuDsIgw%k`U0g82!OW%czsON>AHh>}?7HjyYUn
zu(KTeS`a6<Wqgvs+5A_H0+u;|@2>aX9e5uWGv^{bjPDY!kGuS3kv2qlK^aBa?DXfp
zn6oK;as5kX?x@OH1v-InufT&<k$yjye4i1D3xq}pjN;Fh&lV%p2l8sldw1ymH~+uY
za-APQ;1nK<35Ygs9^%Qr)0J3j8vcTLu}2vG-S=EBSlaJTfl`IKZL7qwX}C6x?$J=M
zd~Pnoy`J#^m0giIv@EH=YqmH0h}K+Oqb)mw;hNmhQSaG_meK*u>}4>gd|^F)#HKbp
z;>Q)jSNBen3sQagv0n#s2Rv}nW}zUX$Xm{D>dalvEFBu@WWtFxvf=W$IRd}8ZxV4o
zp^iF?QcB`Kk<%*R{)vn|oIvjIzL>^wCr;T7=*-z>#bZWR8L6omk^!qpp(%D7lls%t
z=T__|Vf|}`$fED~7pxN&3lERu6CdBZ>McU{-V?(UhAh+D*Ch5%s<B|nS-2JVto>~u
z3>zI@W5k;}2z*Fy0OMC^lm^WY?^RW4d0Q*VTI$xxv%f}+MIY8(R!^J!V_ILDTAo1p
z$io8%Qs~cS9MA{lztDuW1FfAk;M}r7Zc{S!%PDz8H$kAs-Sy|*8vC)%L~|l|@;4cL
ze>P9|?Zau<W-phP*g3>mD^7775X~_|)@nTtq^ut#Cxf0D0~ByX9$T>uGj2l`>C6~l
zTh<4;;cd|B4eyKePEF(icLYZgr<R&f5>zbzXE&#M!)J7;H(X$(lj=-ZBZE^G8r_>H
z(6AnGU!|XeWF@8^^v|mrxB>zwEysHLcb9_i9)CRq3iRE>e!{F@f@d|oW#?@YpQ82B
zew6(PI9to@3<mQrt7SIb!e*C?Wr(>T-f@5vsIt(qshH(UCMx{?XLS5nsxEE+5~i@u
zlYP2+Cw{!m?6(Yle?|V%1de+s{NY#h+~eoe{>3Yg+K0UY==~rSDg!dcUC;nATK$X^
zw4mPQ`|xNW-ReNjygg&^CvyH0`u^9BjzF6pU2I*k#jYS2)s+NRjPh!N?nI_&xe-c#
z&?0Kh{x|P_kk#SVMwW?YzUtNPo&U)s{fB7y_elR^lK$7re-GIIPgk0;l>@_n+0eHB
zVMuNNPYmh*cDnsXlij+Mgb)570fPVk2YURErm>5Qfr*2?{eL4M{-geXft+sR*f?y8
z{|ibO9syRCGW?QU1Zuv-N6n50pG+beKR-qhil&Ldh$fY!j`n%}e#u@3w9C+ojq{<N
zAz7i&Sy-Glvox|y9_|32Cr)yDNr#M@$;$`)yqC4!%F7G<T2D%H5-vJ-mAqMeGjPpK
z{^2$lv2qvvFp?zaBqBk{nt#H1P5?qWz=m+aHd~^&94n(5M`I-l5aZ_bqy$3flnC{W
zS~Wf9Po$g~=Prt*Fo3|)0wW@O`phBcf+A*4(2&Axo6kv-`^A9e93)Pd*@+a@y#;QF
z(U(ji3NC<{M1%uRe?7mHW}?+451dV4>V@rj$s1|pFTI6(O83Y+J`<n7kv**h%WJCT
ziCUI0>bp>HcxsthD-0yS&*_OL`sjGA@*tD;DdgMqrG`~#g<W6Zd^HDSOpy~IF)4zp
z7dV7&>Wcs-A2DNjB|Dnl3IM#T2;YPMYJ(u#%kjb$%SWV`9PdSd<P}O8^x-Hw9aey9
zbkq=f8yY>8;UMcClG{#gjBVs~)@b^HK!fgDR{CR1AijP#+P`*gpeF}Wbjfty-jl~2
zLpbdmL>C{(3M%_+F(m}|b<IGQPtb?=uk@o!&9fZP$+6OdS~(u4|EEopJ}@d!8zV#j
zvpJkSz9&&?26WL~!<0}8r&<?pO*Oa2AY!#^WAPR;Sb`-`AWvj4FHj@}ql_Xdh|kTJ
z4M4LYBj-=b$+k-rEJsWz(K@q!1V3<~8+IbW-Yr2N_d2a;H_&HNF~I1T0Gg?ct)Ycr
zAIK7|qBU)P8#mvzU%D%FR5JdZZ7M|n-|-4RbLw{71o4++Skx$>{w~G(Mkyfyyl_)1
zC^F~4yA_yt$R(i2N)(lgk7Hgxar7^FIF%%~T&#2u7KZ*oPVb|;M_xD>&v3J2ov-d}
z{#@-N9o#oVv-3lqL2IP#$no&>m=x$5KMs$$7#JZA#UPy|njw<z8lgH_6yIEn3TeV_
zuXg;yz*>wEEVsAPIm*RSY5~j;P69(r?C0M{wK-Ac@cJPtP{i7S+$yI<etfxW#Sb}I
zf&%L-E$wb|9^`YAQQLXzQ`zf{AWsq`<@t&MJK2Jxt!mu&@8e@Di0M6*hJO{$DqJ-@
zUari2#ne$je&<OEWdDNMw?Hy~Io?Str)BpZV<Yn$D<J!wzotCluthbYum%2gdS=Ag
zB#X;btJbzB0gX~jL&+W<j07w69#*O0Z|!c2$9rp22{3B{P5@E%g27?n)c9K1TKtW)
zNp=;W2P8o*1_Xr;^!lPPosg)3TkJ!~6#?faRA~qT%Dpi2?xj%<kq4`L?mLdi!oTF<
z!ojlkp>?lMB#rRvC|E^or;BJ<28raD$BpQ{PaE-ZeWVjTX2y`fu|S@&XE(O2QR(lD
z`v{7KwF1A0{ekT5^<@8ZUr*A!nAg?#P!Qt<&<3a59GUBm4jbj53#C^(XOm=H|F$Ax
ze?z!%ES9BT>?5XfE1|~#r~K3F>;^*x?OaoT?->i<nt<|OTYIqz=d_xY4*NMxFJrK(
zm)hSENE6*NVaAHy{AS9YLQ`&k?HRugU~dEhI9Vppudh%Q_hxd9CO`vpL8vINg5ZWx
zGXkG<PsaJi+!r_ntd*1zlGKrvG1&2CYONsK*?{SedGnkH<33Y_w3nj+$taSk-z#Vd
zOcujas9>C!>x~F;D5^><V;#l!UgVN&k}qs=UxxFMHD(rku^)M#Ax3`>=OFMP?J#9k
z`8Q>o38y)!r|P+F8AD&qMarQ^y543cpCk-6R;?PI>1cwIw%szaom#C;J{$uCa;FG^
zTCIxYP~7PD<Oke<elEEycy2ptt^b*U>^bpw`L}q|2ZQ*snrHSFnjy_O`*@3aJkY&B
zVbV_v>BXayZ+3Jqabw<83%^nBCF(fqEfA8C&dgbJw_(NeeyV90;=OnsH59_3i~G-Q
zG7tQ74YDh7s1?)@Tc*lmLMrY~@lv1cV@8_aBT*907)E~u`Xrn>Y4!u1IO{L+A07w0
zG8SOR^1nue(DXNsgOwVTT7ukRWB>sgA&Y;>LpljdhFGBdzS-s7wM>A*gf}<YR{Tk6
z_UWQ_3W8`!cAE@o4KJRqc_-a2y#K}x_Jcl+;`MVzFZj%G>w@Me*^b#N8Ki1)eH2M9
z(rQWnW`>>G-rjiO)7-bn{t`-|g_03Nb2fC6r*q61M*8KxV7W^{Zj;u7f4#D=hCU-O
zbCG2(Db2#@(&L^s=d~BkriFIEVO`@KXdC&P?I+`0u4Q(BZ$ypirGV(-z6o;uR+YE9
zbS%<;){QRfFwRq-Edt)xw4(as=@+6TlZv$Nn*-XRKpWIN?4mkikeIJhrAbXM@Vrw|
zkLI@sr;UB1Plb&PX5uWo@n{(l0X4GPBJTA01b08azDCk3@odcO-@Z>~Rv&LeU+u2C
zYDr+9!>I9v*T)e#ZAP8pH}@(Qhx<V^48;l@%J;Cj>Umoy7yw-R20T0-L8BY^-`#ni
z;xv}**ocVEWIht^#sUm&#q8-=2f3)TiumFv?!(MW%=mZxoRhuU%AZE4Sr;h+9)3@`
z_`G2Z`Gc*?J7mMvMrbX~(0>*ep>PI*_ltpv2f;VQvEVi!A&^a9Nh*^9!uRTG81H9k
zLmHzxM%vlL$Q>DpCO&xg@@#?>@Ewp}$8O+i!t4zKubnvI_gx{^ah~(%OzW;Oj~UV&
zBw=y6G8a=?5LJ@YjNao?KvfanE-bA)Za}7V7@RKIW9VBlX;|2;7l>dQ=7fHemjDLf
za@-`j3{IJ5WWGgXrGiyg%H#V|?UB=RY#$MQLMBh(v>edkygf*T7dVMp<k0tPXLJ@E
zTm|Q;74ELV<v-Ya?45}bg41&2>1Egwn;#PTh&Xb-^s2lP4^13;EAHR}GV0OdS5+%0
zlvl4#VC*nn`7#a1+^>gnLoB0&AV_wM0mXuC7!d18AC(*^YVh?U)cBgOyvQy>Sz<d>
z1qEp`(3IfCdsZ>#d2;3|?r?fVrc8U(J4H?jsnq`_ezrDYC^B-yI76LFhb7cob<%$^
zh4YFjw|Z7ZU1CMB8nW847oCS%n;vB+e(LN|eCwp~t6dzTdjv+^ovzM3YSrdmUT8&P
zlvc8}l_SMt3Sb!x00>p}P*Q~Q-X-Gvo8WdyXy`yLm8s+RTz_27+Fv2ei!(y#M$9G;
zl^gFZPf8@)h;OYqRdM6iUWMk?YU$qW8KOv8ExKHHPd-3GLvkdMm1*~{t<mPokIxyZ
z)ZV8Lkg1Xz)%WCfw?$TZle!A}t4+IA6Kr}Lca`bvm<nGr5R~Hg`T4SU<7Nu&7?Gyx
zZ1MWa&+4!hX@<R1f|!!?FFNnazGn6U*|5K(_|&SVnu{W=_2am54J!|tyC-^99?9a{
z(wI|iD!YTCSzcpjbg7(Dc)2x9{6So9KGHct5*H{U#%4Z}*IHspR?5Nn7rVS;Dv{?}
z?KuajDng*I?YBLflXb3r%}(I5hnh`z7b4l09XX{<A<D3gS{<pV(bHsEQy5FOovkwH
z55^^^KA=L&I*FHVZrKifTH*3WELSxd)UV>ua5h&y=bLi3tV+{l-GFocW;HeCWab|0
zxC}N_$I!(6OI7b(9oqV(j<M<Y=hbH!dmWo%v(AMp^Ty|<ZD{4Crt7THAZW=H#_bwM
zhW%LguxlgdH0_$-uiyPO8us7uJlqV&6mxi=wl0$OZq8ev!FL?8M}1%R%9%{erv#Os
ztBOD<pNHs}Tvx%ar8UzpLg|(83vYy5=s~8K>a`O4I#?$XY^7YOj(@SI`@c8f$f}wv
zq<05DN!p@_4!3AQ*UE5>a-stai6ja%4cQ4R(?6O;ddBgvseQ@ov{RB5+8;4dY(bDC
zt#{iY<i~Ip3mJa*UZRCQ2z}gsCRbc<DL{OUWC;CZZ)Z(+Gh_d5$1AoH9$vVZk3*_Z
zs-Ipq07b35*~b<RxTr-@)uLe<aV#|uJx!mRJX4QfC22>cA#a6?%Y|@B(Trh=xE+C~
zw@+LQUy%wyBxPo5!l~(g7~w|JaUO#(oR4Q6#10YCF*by@t`n{uoB?z5>*gG}LgcIa
z&X0gs0;|e-b<L^=m;Y&_)HyD?k913HF|C7ub)X*$Xvw#X^P1Uyla|_rqluirxNDL*
z@%1Z-5e}WuRw6?3l$$X2t1H$&N>@mjKA|x1BVRRtjw^^!QP7E{-8YK=4G2H1(Bqr)
zGApqIur6|AgZJMki|g)*)It;~ScGfzTHQ(;Z^pZFzIwkgc5~T8bb7Zj6u5RD{13v;
zX-g15S+Zr@w%ujhwr$&XRhMnswr$(CZA_m#FEcOa{zR^f$jBZ0+F3c7%vMn+EVz>&
zKwJkBbuqI&y6c4aWpqmz2Td+WSJ}&}3}Iw8rg12vNG6`gigzjRZHrM#uxut3YV@8*
zo_DicpHcYr_Yrnod$~>3#J+1Y6gnoxxFP*&P`*erM|ejGM}K0zsVe$PZB3+SXWZ#U
zkZQNPPGPRHx}Bfkjo5cTQl+>`?}y<o;luDhQ(G&14)Wu&m=_(iA?zo5rwxapV|AKd
zeg$@VND~2&-FmYd@h}(c1acNDmM(CuN!AT@-u^OmWAeeQ<4T>D{I0w5ZoGuoD|Vjh
zeN?Z?$X*xu5^M{&=VAqy9-QvlKcS`BHTx>PWUqcRgFq|rAcS{t?U#AQ?+8{~D)auV
zO*masbWU^JXpdC+{T#FS{4|Rj(>~T#i?d$Cs#JkFBt&LRLmx|QQ|4w5&_4&|+z`EA
zHW|Fx&q-bA!BJ%gjuDvv;~&y@!CNeiM+^olZlOQh^g-0pA|)d<M}l-c<IKy<d)pEO
z_NR~}fh*2CsBWxoOYZxoT7iiC=|vL;OuL`2o~749WKYJ0oyeac>Z^G}IQ)Nbxc`x+
zA+iU+*OUMNEr$RAr2kd!{zsY`n>iZT{C917?c?XR$=Y!C`;H>+Riox;A||_Ft=A=6
zYc>8?7I$6FG2!I;@-Uxd;v|&FMSP;>GvoHh6pRnTpFm{XwqsLmr!!gvD5zhb0b>dV
zOwJX*UdJ_o=62!kg40Z{bKCAU#}!_;Zt~JUn?A^$o7V{4;-OYQqw!G1H@j$^mn(*d
zbpQ$z8&o512c*#lAh>R3zyiUnKdSmbBd$Rk82MhVDulil3AESpmg(h>Mtz9i=mCjY
zB@I9OyGvTV2L>q3n+X<;6WWM%22F~>+32GGcIZ0`Ai6$CTseNDal)tkTG+uP7YHa{
z9SI;8cGgqaVUKqzX(dYD^Z<?A;5ZdLa#=1T->B!RN6(ZluZN?TS7$Ciegn;h+(IRJ
z*8=i<_V=YXqQE_QES?YU$f7w5^cr7-HyYXJYHgF6K*q>Zh5PF=iFB7a*0r7=DE%pa
z9S2u0z}JY`&fV5!Hy&<p$N^1O<0$PL#z=qFu@44JE{{#)uCLKUauw4L`^!!*ZtJFe
z7;4*=iQI!dA_6B(xY>TzU{%FU70-O7k`MOw{rGW+0t=j@e=gs6$$P>oUC(r>1K!_M
z9C%QuefRFeNu%4Ne{r4Io#W9+-o>07`fXd4=EcYPutSAeE|1rhP8@g_h;6+Rokn0;
zpe)$XTVKn@Y}^-hUp#GhJNn(`X4ZG?n3;a3ziWv)`uFb7(7-d%Un2h82CNj=o@_T>
zL6NWYRi<>Jr>Un;{nl0PvpM)E(c7W-H0{$BnMyQ=*(CyZgKeiCOH9iLcOh&TUZdSR
zV_v^s*Z0FBy{o<;aii_{vtQ05QlZSWCA?EpQO9nR`gZLRhYUT2lg#PD{Xir@%`#5D
zGuryiKgRUjeymctJSI7<2Y$Dey*WI~UN-<s51UioKd;2^YL%dRue#-6KkMJ=xVZIn
zE*lCt>&Nh{G`~p`dZ!XN&2hAy+Z^0B8UBU@4O_E=lnlNzrfTKAceaZR@S1!uGwU}l
z;Ks^X$JU<LrPgi@8E$3zU7AhslPrsUxu~eqR2pwqdlik^$LWoK5Zp!HDFXVBP)j_p
z%Ap|4I?`O+0r|Q)&+0Nsvg&o-KFce++1pT?b@WdALcboTW_{HDTA;j9(gO`3N-9TY
zDC#6Jy%Nx??1qjgI~WNnReLFB>Mtc`MI@cY6u8F-la_mY-8{(nxpS~{^x$N{cmH_3
z5fUN-VU=0M!6@v#=RqN;-zwRkg0cx@MJinSqwst5J4ij)<H`CY5eze1eqEW~Cm2zu
zRzFk)s`3Qvx->+XG6Z{gt`-0a{mg$lpdRfwCztqFhec{agPDOw!2b9gidnO*THXl=
z-`Rbp+Wn(wA^LwXO}bl2xeoo%yFg0qK@F~6!gYT_oktDx52pD-J=DHg$pD?v$DKdz
zj!AvJ-fgdIlm@aBlzKRvsjLV<YV-5=ED!?4p7A;CHG$#z*fPwn#09k#29kl43S-dR
z=E?qvl(MtoEdT4qXIP%D9%vIUGff)l8bRyeAdCdnBKRD$I;88x-xJ8$R#tC<P!#rL
ziE6fwS~ac>LE-@O;mY9T{U{#m?5%!8{j+j#&i)p{<kc{d4f=+WCIU0&e_SfU2n~nt
z)6$_l%9`9nKxO(Pvqu|9^H>WM#6a@Ofu!yG;Cjb)fCPH4;%j552;{ELgrxiij{%3R
zqo3xU!*Fk>Gw<vvBr@FVB9cm(eDr%4Nb;)LDQJE9z;5*)?r8{EM+R{3SZ>`@GYdnf
zr;A(??Fd<vh09pYx17MeE9Z0_G}EID7*U(MP*AE)t>c{8;Q>nwxSquWfznegraKTb
z^;+H#X;%7@H|=<n&KK8XQJkeg>t-x_W?x5xq|wU8A5eURv&TX)Veu*$q9DIKRC8YB
zNzWwX0JhjKYRG6R0P#H)K%C%GfVqY`^GE@J<Q@^wSn-#p<p?T;!q%{ea;CJEM@-do
z1TrkNFwxXKy`5-FA6q2JDH+5*a*92=)8ATO6w*aBDyi|VVbqwGGg4Q7^x884HMsko
zN|PL*CBqjfZFnjMT4$VII3?IbOJ+@-=!007X_SwHzVuqeEI8WE<rcZ@eE`yA2(A1m
zmW!McjLILIImkYNnc5ZvuMP68!}D5FV8p?@XTV5@VGXpmsvjhTyvJ>!Z&F81)vj;t
zMFpAZC$nEo6OIX(b}~q~AzSRvjr(>sP7gm0_f0;#)p}D8ak7m#dza=jZpRvM#_}^L
zNVa+Kl<$fr9Pf^=W(*N|CNRuL3mchqzUjftJ+E>b@f&bKOREQ8UtnaH3Eg_Sb>}Ql
z)q-GN@fF6H-;r^fu%Gb2_9PmhYQ!^H>9ZcgakB!zdXH0Vpl!4V1BR<?KMZVVc}u~7
z(b`YKIALk`d!0k%D^^RLIn#zIE#!kjIP6>@;!|?I7y5fUmbmN+8^K6=fot4(!LV!n
zNt+k=M4C4m0~OhY6*ZAYz4NHaKnmz8s;rw5I+CyxafJ&=E`OOHgTf4IT@}UPZ}erG
zMjhx8vyEM0^A~5uCD7mf@y<irQl&YbPZuvu;)DXOIgUAQyvmz<fvt7KZqdg`Kt0By
zToZu|C6||2&x129Q6IQ2u$)vSfXRu!f8{K!+K9=NH?zdZeVKJceDUld*ys5Jj|@mo
zyzeF%rGuowyCKjPk8#1nkGUe&KA6E3r6MqpJ8hzygA3HJ@EtEE*<K)$EpZUR2L@lR
zI<7Jm?*}FI?;Pyxrn{(Edfbd#&ovdVa#A=uN^-k0w=K6w30e7jqq;-7M#w?qbX=vO
zGiaUj!`Q#1|1~>P)n~=q4pJa(6#)a&5<mqx>v_En<z+ZYQY7H~1(o74hpR!=FNTDS
zRJOscwJxwx{XQG3(L>U>{8tF4jCH}vC{-vT8^al+0EtT2h1)pP&K$Sa*=s#g+V!OY
zU8BT)NDS(Hf-?7(q?Sh;XBOgJc_|hW)k*(Aav7=i0PJ_G%p@QVt|vbEWmvIaqM5a(
zuOcHdel@*}>xINU2eKCPe(6y<^+eVHRtC1Em(Q23v*G`lsbAZ+Gki%mIxo!05+1G&
z^b@}1i{$Gh6uc2;SD#DNDOUej$yjetT0rnJR-$I!sm{-aPLRrr#-$xC*o6B6QqNJ$
zeBnO=YHW2)PzQJE3bUu#J^_0=q}cJcCMi_bo;TjpgWLN;_wkJ%nUR%Z!O)%lKPb6*
zyz`xX7wUCg#psW}bYk?fW5&Z?U|5H6bFymk?cITKDymZ2bcl&+#mQMMZ)X8OEq%Rm
zbYf-;hP%B(Gg0B5TpxL55zIhG)`W?Qszg|<7y8y;%KJ?MTuD}_aU(Q4SoM!XnqcPa
z<%e4&(7|HKyblJ(m1`imv;Qc|Zv|a~W1=!rqRr3JPNK5XwfY!t!P84QKCfvWHxdT4
z3=#AjXt_uY18c+@$%UAIZM8n?ndcwgwM<pBoU3tJTolizRj4oP{NDH7mtJLO!1yo%
zARh+d5AmS1uoq#3b#f?3w6cn90%#hlyhM}bnd>gcX69bz)iJZCd99r?DAbS|JtNA`
zU5saHVNX*yYS~*ikgXOap4<Cj=C}4B?BZ*?j>yDoEeyHX^<)t%)G($SHyLtuAMud$
zPk)G_ZeSQE>EwL&whxu;0J@$VEDKXisMi*i&M?1zJ9j{><8uGydEm&vGRY~iwVl`8
zHtZ-4w!$4kJw9{<QXs{v<-&%3%km(lb(8G96bMSsoo3>&e3F7i5l6ULLyjX!zZG_3
zDGZB$XjA-UN@W?A4n?+OOw>}~rIpQ$V=C6@R_7tV^+DVadOQK{@+EXO=-Tco`>x+b
z+cexAvU2>)W>LLSyim&e+deBPR@0MxAl7L9{-!j_nFr|CCK4ea-AyGjXMMz1t%nmr
zGY=UTpC4ych}2CC!Ko4kj3qm(M_-+5u4&Y**tS*a9LAk9uM({K@Gv`2cPFW;pL^OM
zOsp~ry?5>CdprL0@G%xph@|OlF36Gs-CfE@2hpbwh5@;0;L)hJXwoGzkJhmx;$fJ&
zU>l5^mB|CG2eE7D^ox^GNy{1#gx0$YR8k)pU95Qb_*G-`X4=RU<AmHZ4;3#!ihbA9
zu^2ST9A?y8)TK=ZGh^iB^lsJRQ5KeV7i8QZE~ZlVFai&4qj~7LZAwA)Ec8f`V<3S>
zH05{Q>%7&&t>iy#{Ii2Dhpxq;Qw#pY$Y~G>1&p@9%iV)7pWrfCIc}`$@upt0ckS(T
z(Cwe;*UHY!jQV(mGf%JpFwq5RNPSSLGvs;&?O&$G$l*uXfi}pz)xF*ffId83ZNEjs
z)<Pb?)tn!BvtQ+!Gl|f)K>sS~(>0o0%hOH=I&99k-UC7|aSqBKzL3Y^3JlGO_j#5Q
zC>n_2AD%o=?I(oO`YbIb2@Qm_&>`uu#+N1^EPc5G;@@Yka?!JELD3rnlP+vHhRI$C
zc@WPo#~TvQHp7%6)4ZSuEX<c5_?|@e*6Ebi7Z0(+6`)5pC#3?hfA!A&yP$+9?H65)
zB$zIg)8J}4J}NX6pa$&Ynnnv(L#lFfVc~_`mb<T_xt1f9J+o>QPb-6Vqf0;hh~Pr^
ztC1tCm`~ANWDv9z-hQIvstP{;+Zjt(wG^@MDQf|-Al@Gvy*4A8ds?tGh{1nPJAclI
zk*uIC9!?WbLLSu9*q`tDyeaY(>m1W*arXgD*7LnSSW2o*9&oGuvJw^YSIqQ7v_>UF
zN`cYvUr+8?8J6s~fRD@Z&B{U!$CJ3z$>O&<-tVJ^A)S{&A>)SK#ZO8B@%S>YxuB9;
z)4c!a9Z}<GR8M-<Q4Z-?uk((3RbQxJ65X$>2eKwaYcc($1Gv-}7#D^Ur38F;Gs}9V
z??Jib_M=#_=whfsHk)zD@4Ro|&n!7?Y{ZX|^F68zf^?`IAfY%QG1-@y@`XYzof|Uk
z<uKg+`4$=8xJdJsIaw!5;kr;DzQpB)H|ifW!=~27oxUq?snuwP&+#>zHFyPJHr~$=
zpkbTym$Eq#9!z6-*H#&IRq-jn{?wVdn{Md?wXW~I(h3EKNp^h`hX#St%d5{EKFxP6
zV-ZO9yj&@hs+O^9ncIGP?>go$fL}yoisn{nfU<6u1Ly0$?k)1KUIs!Vizw}dbq`iW
z5_3xsO5vp;7{^(GAv-Cq$I(t`j`L=;MgmcfYWjksVc6X?&^8|9Jb*&|`G&&&V@A^I
zLYbPMM;?kbu;!04_jf}PM$JIA%#b6|zc+}duwvifw^S-Nkb1{LQENo81DK+G*Q$`h
z<y;r@NGW8c%<rLxzfz$unuA<Y49?En&#2o)9V)sm`^)rJg_0z?_fsxbba1p=Z`tSh
zxu5Iu&?Qc#!t+gEf%B$@ooEG1oH6m<SOgjSlOkw`@KHR7NXwx~Am0q%AuhJO(T~@9
z<hud&&^uqyI%r&9Rom&zU(+XT%-x%n!`olZN50FOs;$eCt#JDN0~u0tza$JnI_YS?
z`m02tsEh++rRjZpBsloHV-ZsM?kA{z{T&n>?zt4BVwDP+>mgHL2R%W>2-2LxH7L2p
z%u53Y-U~Km*uih@Q;9w@0mg5_M8V~T&rX9GQ%?2EN~7zxp^dcnx0wcQHi$kldgQ3q
zWM23oAVtKxSrsh0>qib<v~OiAwxIiqvv@BD3%x6UADTgr4S|>mHEo>{m?d^C?A`%C
z|CygLMM%?%>LpeWA3pTD;XOJq+=HW4Yw7@r+F6<JQ4_U9F=jhX`K%YW7Z3hNtv4a~
zEc5!;dExfe`cu6;2xuwwN|*;dA8MHkU)Qs=(1<o?_{pTO`_#*|Pq)GdRasPh5L!!G
z=r%w943@6U$9jjE(FP@uK!Cf*>Z?DQGz$VAaep8R0X=UJ-Us|#TS&bET*xvs0EYfL
zQRwb#Kb}C(ks>&+5nRY|ZId_d>?bNhKSRE(ICp#P-v*saFFil;#;28Y*ce?I=~WC1
z|MVRk=16Zx#6Of~jnmYZOV3G`DS>lisz!7QpGw*5^|W{^be~}%&jyc2moaglKeBs9
zsIvPM>($a(k*?I0PJJqNd+kwc_ep--E~*UnOk$c$*g;yc1iHh@L!)Lqmqjy4$=odD
z=pe=gEbO4dkyB`CLbawvp2fZlLcp|zIjmA%ONG2%ErleSKAd3;RT!vpKER#?#xbbu
z$?c$97xafh8;Se6Vw&2wXv*RMguivrZzk~x4f(U8U-58Sf;Pr9JRAL3deC$6QswI}
z!IJmvn(cin#VNPwJjwUj>J-JG-iD0Qj)LefY2I)Zeey%YGD&91J_*AFbYiKmDG<a|
zg<}1^!op*{!uj+=y+Tj7A}=cyDA$P56pa77N!_lOI5wwtFl0R?hD1@@&Od`AorG&w
zjp$zBe$?RP&_y{@Nh_0T*t9?$96_KRO#Wxau#O!eDk-=n3p$`ZfNgzf#?-7DK)eiF
zGIj(RV0G@vsnAyK6y%plp1%&3zG;#!C`xhiEh}>F#^chAMoXqtAZ1!@p7+xpcgQ+<
z{~o|EqWoFwI%dRr)t4;b7&7Rbh(92lpLfW-onq?2AIU#5i`6&Stl^d)rT_Gab&8>h
zE>1t<4PN0ZC8n-=&Oa#<0`fXa36Z{1?3;=US%EQ#{_O?(<!KXrF8HktsQxuORqDes
zp*$;B9$K76RH#+~u5A6^kmGc2PAQ(5k&BsS9>H>B-pameJ{;NYmk}N52dW7DIr$2W
zn$yI(2wcNLg}v(TpgJkCP1gbnWqH<@j&2sLe4SRX$g6Ig?Ucf4<t#U=So}aLFLy%C
zt04UgY+1j6htX7t2Y=XD7fuB-4A90Kneul3agDBu87VSZh!-kCf0R{#|5;~!&w*iC
z5&RK6?zZnj3a5HcLKogt&Oqi)5XP|p3tB&)ABHeca-l#uSRqg8j4b4*L(f+BYP9?f
zTQqRuqzjX(J+>Dn4KmftfHiPEYTva?V437~w(o2nI?T8U&E$s!igJ&>@b{7;IC>p7
zbITy?9EG7KDUyL~OXH|i%^5dlmOe-0tyf&#f<cB~R=(bNCg&$N=(MfICD#x97l)f^
zWmHDO%YnNCr*C25G8cB|Fg+{s5pWv4$E>W7h5ml8BI0Xca!`sX%rDIWRcjl-z^1&8
zWLG6ViI9P!6c_T8x+VQ28?vTpgi5K&g+vFXF>(6<`%u`qF?cMY;_`toljz%UD79e!
zy{;B32$$RBYe%nShw<;gd3I8dr^Do(!Ku0`eRWm$dB)Jt3Mg{S(IgsAuQ8Zu^*QU}
zBLnpW*FlLCN5-ozrpNFr?P4T#X=BhKd{MT+HB$F`Hg=7N_Or6~Y(M>`{V`F)D?^1#
z&u&<*Bj_3+0)JInA=S%zs3R@(ZFd0?VO^p5kGK*>*P=r2?f2U6*_c~ZA)v9MU%G{+
z00DSiSSY=xelr!!C5E+CTnvK~Ip7Qsxa&nD;o8M?@rx)TiQR9)ha!_W7t|jv@AWGi
zEr%2|n#LEh%n^xQPGgxMKS2xShHCaZRmx)*phiomlt<gn_c{G85m%RgF;DzMm$WSq
zrLWq1S1QR{Srv~9?w_oxli#nGz4O`4l2oN!v%e+{th0Z@GqEPbFo(do5&%Ey;C~;<
z%-eVji|q;Cv#pZY-A~-kHh8~g2Z5`l<?;@w`U2KY8H54NK}+k2Dh|17{q}xh+ysjt
zH;6#Hts))d8HjEaR|H9N)9$l8<%`(6q51r`Y^ZS};1rV*j5YLhMr-d8$;l>k!6)Zp
zXHOkFV|scV4+T0ciqM(e0yRM7zzgq>Gk3~Dwk`1+0+Xd;b#2}fE0*%%XS6+$_-N{0
zp?;ygU66&@VVwz2$e@}bd7ute^e@Q@6JOJIiX|ew!`zLRDh1K-b+9Hr<z1IUD3X_r
z=ZV~Bg6GIO@<aUNoZQonjHY&drXbViSJb-l<=!lbAvClD<2c@`u>!LQ!C*YwA(M_9
zwotuWA)~ssQoS2{q}8Co5q?~W*}pV1kO;n8us-Kil@g0b2l4DrM{uSqSxnAoawubH
zergP?ssj%RT3?zfGTQkL(dYR02mQFssqfG;<p98ou1y6n=USBVVJte|<wF~<iztLT
zW~c1=t=M@ca;Nl?CkgP2a3>PDxO;K3B4}f+68wS2Y$j2m3_FVm$5)PifO(EEAkeiQ
z8~CoC#dPhS;%}Rxver{Lnu3+1cjqz9E~=DWg*YoILo%WA;WQ9i2=LWPfW2MU^=G_Y
zn){k__vaTeUd4WJw-=<<)U?4D*pN-FQ+8CYR9rRE7I7#2d3W}P8K4bB<{ejny(8?U
zousC3T`Cvilx>ceS8qO?1BB469(f#=@qTj%+;c6BsY(4RBmC#_Ya&9I<L(^Fia#FP
zA0|s);6BSM4z?nyDk(7Xi=NT9%l7=bhBB=i(n`=>pZbQS)hTnBbB?CH30{;Ak;`c+
zKE<u;n@TJX*80ZDt*x`wZ#n97U2>9;=w#NsXsuT3nz`nrcqN@vX7rcbbtQcmz8Nmh
zG;W9Ma&bcr@WuK$Rf((PO%uTzCEh(cP%F+uyIL`;GrasI&3!OgtK?&`(!6vaY88yN
z?YFRBOihm@!Zg%qx#|yqHeFK9UBHwC3mWiRXcRfvZ_u{KYNBJgUx(znlP#g|WnJg!
zdV~6T$5nhx&#(tElxa#^R|%^)tHCnpOo?2RFLGlgod+AX_C?h<Qn~lYyU@TQcxr+z
zn7C;Y&<6}CQ3X2`)5+V>(j^S{!ckC$j~T=94>v3V7!bEjQuDZERUbKYH9$8^a!6>j
z-V{jk=z#FsfKjEnGX|PPi(@zHDDcq*=eLW`csprLRvMn9t}T^qw_KwLJPlsp;8tD5
zgXJMZ)SqCRb!Ym{I$5$>Xs1oAfQ8^~JJFnM72U+3^kHhobBo9PFOZ-3y0~a@x}U@l
zQS}q6z1bjmRqOtSGlevO@ACNlRP*##Q2r%~oK7GZtfSv&jJ+vZ#9>8d=wns+he_L{
z|JhTfb?II2(AzhxP1N=~%hO(af@kR0A@u6~{qb^*CqteqzSS?0RaN`ETSD3t9H;$f
zkGJ7X^M)$<gY**&0t~TA@z&!Y)6L_SY5;M~_Xapi_zxD`De<?diYIGi_%mc0SdR>w
z!-H4%a9yhX1$&)0e-Q0iNUG-h1m%>A7?(5jO9o9xGvb6ik-!oc1B$6n{=RT<$WZ77
z=n{tHF2Q%r5b2m4#l5G?C5yk7l~5u&@hMb0K8!NdxywtCd{@99qr%sR#!xaWQKEGm
z`Ioiy!d=0S?uvhXdAqv$8sg%?%j(8{-VU?3mOb6d`$ck+jI=B+KNjwN&w)-%#58DZ
z{wUaSC-jgi3VPX2c-2*?{b=L`QhjaYs#pad*udRjrdTOSC+2SvK$ZzIk*ZDxGJ77~
zsH=f2Syu4Yc0O+1T{9wfbUiE&s1;+xEd)mfZMudv4ZUBay_mXL)vXAQJhdICn|K*R
zDq;R6Iq}3uJyt*LC8s|ZSID{R?A?R+#2umcpg{HJM>sHfN_dYnMpcRs^1YP7I0Uc8
zLBmD##dOBrEMf`z8w9NV+3KGcor^E$9z5yKm2pgHtGG!gEkXmKIu64+zGXm;Gj;JJ
z_LHxpmM(VLzhJa{d}~!X;ksPiuRD?*qKS%%@i-fln+dX@PRMj}u6sUvgy(skRS`~K
z^a?T!(Mb4v@OJQ4wCkvDOA^1avR&}Bq=w3DnaR^Q68x(`mk*KqaNF^2&-A215{nIA
z%D387y%dar>M#<-(FyyL;#kP~Xq1nr^nlvKp-V@6j!v8!!Wa}3=x?b;CD7k9sR!Z_
zXZo)SoLTnq4wlyUp0AUy@XzTvlMa<+XWOuAN66L(37x^J&w1Lj$K8ufFB^N$Rj!Y6
zUv<VOKhyD|%Zl^cz!I~wY}CRZ$^vR;Z)EX(&`od`foS}GR#8aVqLg!jplhTKbdox*
zczD%-LBGK)DkSqSuAmPFQQwk5L0WLa<k5WlXm=!9AMOa@mX4^WL7Y@(<`vd$DfU)M
zS01$&JUZ{kkYZjn_CtVm2@MGwf#(L<$iS}d=#>ux=C&)os*R3ltEv%PRiadJGp%#~
zCc3>UD?yH#yf!Cl%dX$5S!ivl4!%pm@Zsc)Fjq)hRfRq(BY0{fxM_7ER7-VKLv=V>
zYZ*!lChNQ?0wFW|{N)lf#kOb0QQ{lTmxFcII7*S#^nRCO!BDQa!hHagN%`K!pE_3^
z)W`&NgjmS{eisFP!IenGj__TVLGog;P*6;IoMGj<nCA%vWw66EI~>sFzLbSY$(^?o
z^XQU%7gcO`mY@lky2kv6$H#At5T+BfETUx!U6nHtv|MqU@)Q|&!XPQ_I)!%HnG%|6
zwc-Re-zKQ2z$eqsej0m5=N|e$sbb`}t(g<5O>KD3tro_5e@b!d&pTag(&v4anYK_p
zPP0yi-<4*$LQI~+9A+Oa^S@3E(+;9?Ixn#H_u>31;|XHqdk~h+L1fP0$IDLC)3m@m
z-biwmhkAa09UYhzF8_TR>G<8mhVCYh70uDF<j7P|6v@h`hrwWHkh3qjq_(Ei7$<_T
z(f8s3E9gHq-1$MGSAxE_He0|W>kdQq?ofbY(W@!bg<GVS)5$IflyfDWl>0S99Av$e
zeoinRiM9Udh?48D$VHt1&DF|qxZhuOo`R+psh|_Gi2FO|?)-|mZFR7f%r6(qx!N?n
z!o5tYNwRgQxo%hEt*D>f9I!*Yy>z;Hu$Cy-l}E1zWTt49ZZp=uBiuoNtl}DsFcc~&
z?x5k7P+EK1ezCh1sHW0QN^szjx}U>_?qnVs*nOS6jrOD;ChZ~`dC;=A2G^HX5tV4P
zqg)<T<&AnJ^BhkT^@N^w|ExPaV~%AzPU3Fs^$L_QMZ{h_x9OdY{)|=x;DWWnU<v-R
zLFqr;Ae<U>8&0^gd^(3&Z!iu=kGp(yc|=n>Fj&c+15|wSik~XX4q|1nJ;opc#>mlu
z-@d;qeWzI*vnMf$?-gprMO7FwJni7mGK8PGZq^iPJq<rLs5SAIs58<|DzMyCL~K?x
z83^)Cr$h3$Q(aqYCILh{Ty(-=bHNe$4Z;Q65V@X@WsPuR>lKWphY2tX^*2H=O<bXj
zNGlufUh@@)z$gz;3}t3eM5cYbNrQ*x)(lo!!JJ4g$iX;AT5%IqJ}@iPF9cXF3z!6Z
z-ftNcC8x5jH~+gSYiw;FVZFTohvQR1b0QsHNWo<RYdkO!6?U*Mz_{-kZ$t%FDOy{5
zUub7OtKe>bExn8KSP~UWVA}sZCtG->&#!#-)n5Mu<AARiiW7+ZrFmg8IT{~tWB*8+
zpNErQSpWc82o6hkw1YLhG-K4_JNsC?)c^Q<?y&9bMYAe_%nEI6%iT3e|5rS|Z2q!z
zacXi(TVfdtMx;3_>Q6$W+iZJ&;cqCne4V0n;xN!BOz@ySKhZSGPjF2D8A^oWzxx_L
z7OuZ<VgKvQ%tK;5Q+i5iiy55{>Uff@ohep2ju7Wcs56kxXi?oF09l_j=gu1i8-CHi
zt*Sl%MI2in7N7eyL`@Bvz?(H`=v}*<v*qKtx$GEJJjwV`R?yqp;~XA4uY0$lbew#j
z9g&_Cnlv&7cN6kF`ltA??ejhOzo}{W#V|nY=@WPAYUm(mVKx#ESG!7%h5sl`56^y;
zS)4H+ukPeJ5ZCjHW%YRGz4cWUS(3&juH%66gm-8f^x@<9&JMX{?_nkE8vXQ9Ig4uM
zCds%A6-G-dqqCY)`j=BoZQp*k*r~su4?O-D?l*^Q5+QK_N#(^xVhR?EmU*p3=A&Jx
zpz5;1L$pN{mBqniE7wZI+2!m-TZ?+*49d)6<lRZWT$-RDQ=+&eia4RqTOxsiZ?c3W
z9<>r<^dE{J@&Up7@swa8CK>ip*L#p>PcMOJA-RiEK-t->x(TruPk!wSl0uniCIyCx
z7mUUI>tx&H_G_?iX4yf0-lNoKJAA>)SijXOi3jkh(|J0y9kk=FG0IM;97D*ABD3~@
z(t~(!kWt3oX>59<l3fc-iTi}K)i>P<y=XUE;6^2?RkW6>TvW<sG*sjfs<%3QyE$oc
zI8&BY!a(9?Yo+Frz#+3ds~$TS%azU9kD_xE&&ZV+BwK45*X>Oi4Skwz+<tRxIqEU*
z<*v1)b`=Me&#-1SOjTvo!@kTC#6-Qc`I@Om#8cfxvVhDOjTI7q&ukxpYQga?7~)|H
zB*z`?l&md4d?zwbF(y0_0i<TEPKbOT;MXIKjxl0Z_X7he{(j7$!B`v{taTw#Y`!!!
zQ3Z<YfEkYH7^_&5icEX>&!}4@3G55zD@?F^A5jN&6mepwnDau$;bW^b|MlDnrk)ky
z@#jf=OzK;!YZb6x16}7ZG^wyOGnmlgCGbziK#@QP`;k9l&D3d)uRrmWxqOoSkXxHV
zV}sxYI?(=YMUg@#IcoI;<{|~6^5Br%B{I*p*TTR-XiSJq!@(CX8(>@GmbEK%U-!fM
z(sAwlsBPuYpJedI%%bbo$3FJg-xlXexrGK+%-`>YMrNr|Lwm<US-{o<8)Fj1=^{Hh
zn3dr3f2=Sv`uHZM#PgP=>}W-Rv~}m=#(7#+<F_N8pe?tSa7TK!1%|rp9X0at;WMEw
zNLiz1#|UlC?0%<1MY4p5Js$11VVi!i#Hz}N{jY6}+pxyRMEq)*z(e`aOCrAdibHyr
zCUA!y*fs8=M(z&+*CZkuxZ@)NkZ)?fsCrqPJ#s#k7ti=vlf<Er%k~CDGu!d(W*p7Q
zVwWt<(dtWfSKQSV2V0(3S6Z_?uFglE^;cb*s`@fqdBtSSaM{zij>1gcXkVb%E4!4{
zg}kt(;)!*;n`BnIMrRM$g(I7IyjoV;oK2UPImm|$Dm1VO!Tz-i-@K0-9`~M(32v8W
z--wDRsZ7$;&Q}Q5%LBBJsS@G1TGk23R^OXiInY&h&@EXNxHcQd-tQZZUCoOVvjNT4
zlj%ei?nV~?W$O2eT8+*h&31g(V^vQKOmaqM3-QVD4iZPvRlb9lUDk$&f9Lw{C!Jq!
ztkd|6$I>$(b{?i>Anz+fBi$<;dclLp7N=sHA{Ms3wgQi3M7K*nM<3D4>qH$%ZgWy*
ziW~Mtz_#eIF~2bZ`E>)X2o_DgCJl&P-e83j;h~iMFLB_LQsc=)4RA&>PjWf~Qb$N2
z%+}d2(mp&@e;W#GRz&9L*CQ5x7eqryo!6Art=kP*+H|2Nfsr1?iZ9W7p4Vla@ZH<$
zUglhiX!1y1`$5RU#=YLfWSM1gWf_w0sllz4CYjKE`UIV|1=eG$`aGW$)j}Cl<$5&x
zUnnk$lpuyhTN{cL|Ck0}jrpDg-}>_+wBq5p&McGd3@zN$N^a!J%LVC<WK?oX7w{=!
zj)ObgG|*P1P>-&pIp}@Uqe=P+Ot_<3+|(_VEG4qi_!!hOwv59D)Cg|Y-tUpOT`%yF
zc2f#nH)%}y`G=4)WjFlMov{8ow;zM8l_Q6KjU+2^sdr+|F=U*k0oItO9YDUkM8&OV
zDmY(_1)uYI+^9yoEQaE|D-)!GcF_EXC(A`+H2EE4c_qan>llG~f+wQ`q?BzFkGi}&
zTii79K?w#9f(&72Ukc>@y_5FbTAT5T-N}hjl2Az2Fb;Icg?_(CE9hq`9kpP89j&NB
z9954sOuhNQCR_0-8hZSZ(T)Ns0!sCvuRFz93sl@6O&TA~dP5%O%19LO6)mYrx{Vg>
zl^Q%%4=U~B3IrS&dNEDfulEIos29jUUe=5+Ex>=3ove~A=+$7~t}I*_1Es5lKkn9h
z6ndP0cm|6i@m;*%GE<ko-1ElG5$d?*MJVT7wPj3jq*ljx`K17$!q2H>=GlWs<BO*u
zen+III#KKl?8zDq8%wjc{kiBr?e0OCA$Wc46d{O`F_#|wzxBAysA(M*&-be2nop^~
zh-7U;vb=DQj501#!`EcV<Ydt3=@XUIOOMRdBksX+J!;6Uf=qYeLTmZBy{Kkz4C7UX
zUid@U-S5BNAA9+{=9A&eVK^&S(D1t4eaG1Ryb|LQh8u&(@BDrbZ*>f8>87mScPhU|
zCiOR6NDOB*fnJbZ2>>E)?hB|DQf8nh8-7)iZ2na%v4&F(jeNEWMpzkf8nlb+u$J!c
zjFXEta)!Pe<4?BLCG4UbpoF{w710xo)FT#k4nz*3=LyYxb)rQ@w{dGdu<zhb{eJlU
z|8I`hO|u={hyVZ`5&!_i|7(`?-@D`gk|gD}a@rJ4*nOrR>8PM7mrokn=%`drX+_C&
zRi~EXRp_v8a0vnG&kx4{X>$)hA^W&p-DV2%(B~J7VQa>ZQArV*lI|_lW11VE2jnue
zYj|dj#ZMvS`n>7<*X~zp_B(!)lC@ps!I`aFAM5b~9V_XokvvI5A9}?ou|`Wru|`Yp
z{xfze^e;qOa}Zt%n%hW~{g{;umL?2SkH^cMgbe>FG~zo!)dJN@GcBo#inE_I*`^=K
zz8~cm^VVVPFi~LLEPKEZ&AvHwoZv6TfFzDmLX(+HC=F-u;Tf5?2R%cgua?MmczLeQ
zL)}0HZvNOt@#wCa>;QJ@gqG4~tC4bfa6CS4+K6e|C!|0!NaM$j7%5A_HE7Z<ssAzF
z-w!FF-*KXVLuNfJpy|}Y?|$_;4!cR?F#~A>#^*S)_|6%rq+hLXplIx<*+OuFxKzrX
z4Zp@HeF`b=+=9v+Mjf2+Xg}k5kDyNOQNu9{52>uIYLH-!8K-e~6ps!Z+`MmqR|@ZM
zj7N{g4@saKN*eB`DI(<>UbbqGg&sx&!l*_d<R7r423jLTk|zR^Jk-cN)hY;?n1~%`
zI{x^Nrxb{0o$`lYnn^W}0?k3#Tf&1NB-S7+xG@-BLKnxKDgpUT?V$ii6r^y>f07h{
z4&%%?-6mKhFVGApI+zA7_y^wsi*z}wQOy9bL>(@*Hrh<0D`IlMS2f9Lug@oRpx^9c
zf1hS1kVG<cQpl*JDHu8Dlof&n;ds*}og>dZ4i(}wk75uBB+ydqj&k=&o?Yy&*zYEW
z&T+;KrVw&z5EzYi5XZL~4LCz#==W%vC6k-3y`4fTazQ6UmAad8od2_pnd)&!{V#GM
z>KeI>KPm7_+OU&r6Wt@(j*AK!tvPhYEuDHuuDd^&MlB~c!}Fy$F+o<FKHNy6nU+^H
zpn6_#z~127O;~2@0zo7|N%cDD=d*u5_~@<g2RqzeDj-j}+erSKu9SkGh{&1USjC&G
zkDtr1Y>YkiULP>H6)&fOCsl;9AF$D!p8P9VQc5fsUVlz*$UJ%AU#>$)b-O$7;9lfO
z9u)0ge*5glh6$yYXv&1gAo3&~T@gXTH+cVLLm-i$NsiYAVUkg3FtlMhy0gnT88jHR
zI`o5n03Ausxe<+Tjslg@+WsmSxpGP@hPzl8R}Xag1(}*ROR%K4Pg;zK=wwXy<otp<
zXqxdOAZb>*_(~;IRenw(<$$CST+bTy_mMgfy{WOlqF>QR0d#2HY674iWd_2xA1TmK
zSFMDAT`Nf(dG1h1YhaQQlzPpm8UhN9fkmE31wF@Wjt1g>9ru2dNRj@@N3#H6B!rD}
zV5ncNQt)Q-2kaHX8E#|led?Hs%VCz#9$==^-?Bc^tWJWj0>(2T8MqD%fRK9`7)sbN
zz(FQJ5FsG5@DtE@@0O6X6;L#F`C7?Hsz3rw8mjPJAFw}=1H662zXOUtV~=!os+h-^
z7*y0S&j?|Jtc`e3Cm8HkZh#GtkK7=L@X7S+sO?4A7M_uXnC>f?v2ji^wSj(tkrPBj
z#9B`=ran(IZEzsFnUvIvOA@utRAvD;?iniZQXAqL6YJZ{C}biUaOrdOsChw0q4Wb(
zlvYM*xV@s@{KM;hfNEx?g?v)>{Q34&=+>^bp8ZVc@2<fIxL+AG!|QY<;SfV~knz+a
zSileRt~P?ffAx*9G>PxV)544-uY@_PK#b0Ey+oJ3bgpjYSOPUEJf(o0p02lcQtK$S
zhS?AdNaY=e+)+v6I)NZfdSKBc-sID?3)FSvAm(9Pv0`b@&^R(<LyEEm1h4{;24(CW
zL(xkxh(+2aRD>2R07Dly90IoO49nU~2WI)BI8Yk+i*W+g33p2;Ko|En6rGPudcVn<
z0p+zogCkK;C!}6Yn%qW32pYD<VQ1V!lZ>(^^A{+L-;nmP5>h<WLora1dnlG|hvDV=
z@_#J*ONv5L15CBl0f^%0-~jHIJGL_7P}YaODkC+=k}%o4^_4(5snVNR&<xj4ePh<R
zrG7!+%HM={Bs-0#;Kv&3lF}bZe1$KR9?VE+;Oi3MhBBtIKbf7pOYr${!*eHU1qB0-
z<Ymf{;70Lu|7ck|`e7?IWy<Dj6RR_7E1^_PGqDw0-N0kH!<v#qWSd>BhSFH3C-(6-
z9FrND8#aMLDXA{(3QtmflOVQ_>1x0{&33QQJ>b01I;ApShuZ_%ZH(@h8n86c53rzY
zXn<x0TsT^c#?+wlBa?EOvRa(d*}+bLVx&3?QN$sLUE0KQcbu2>xX8nTP&k!akc^^B
zZt)5fglA`8D{iRo&Zs0}J4K5HpzHAXXVeBZeZ=u&q42(Qr?^VDp^q`a&Yc%)8$0iR
z#eb-WF<j26bR4N&=&C0U?$9ab!l1*0SzQXl*ru$(TuStrKB0I1188WBu4PL!K4D;6
zm>0NYo|0;vt{ZWm76c+m*ljPz=jfQ^LWGP1p=S@APhzFdBt9Fa|Jk(CEl@7IOLUA}
z<oJzh^!##a(<EO*g2MM_0G6xeL(nykH=~xA;*Wj(2nN-LD2{1Pcy@R4$n}&hn0-Aw
zzJ5OX_?EIv_8b<Tr=7xgZ!l4bn5LEI1rgkHgO(g*Z-Xiqfpp<yp*33;BK*)~{GEs(
zf`mFBhgsQDhH<Lb(I}5s-A93@G2j19thSXvfb`O>R@E8=9MFX?hekE2BR*N?{7W1k
zhl_6{<t1UWy3zLsS01&u{=OLE(l|5e6Lue~jw${!oC7qe0^smXnl{w|=jja0IF&pe
zlBJ7|<xASPPbpmhGHAITMpe9LcLUbcTG17Rwwxx59;i3Dug5;JlvvWrO_ZWCiFk2k
zIm(aCgKg3Od>ipACYxn0gDp)cukQ{P&0z8T=+xnE|G~~j%=@Jbz^)j{P;*vzo!nDJ
zQ)P22<eV#9Ne4#K(?83zN9u2XVEaLGZO+_I(K)E5Yg03&36_99x7NZ|^z>1_?y&=i
z*J9{t35?C3xABz(yA3#OAKSv6>dugnU{s7)H??iOli&I}=L_k9p312&&U^uQ&#lhO
zb*orK^qNrEzX#;f_Ey#=e=R*35g=#Jxe49F%z*l1TN69~WDA3|_P@5W`Qhq;<CEi$
zh7xjst}X@$F(oUZTbq{dCkSJ@F69YS=zv0h-X-;~aX*2eg<<JD{grJ}c!o5~`)=8C
zkCC$<y}pnG;0Z3LUCwny{#`hTJ%iX{v~V+_NY1<Dk?S@dKpiMED#!Fn7Oy_9Wf7jt
zRZon$lsGM^hKl^{<aqW|I6wHe21_QiRBte1uPnSGEge0@Qd%}cu3K6v7gH@{E>Z-0
zOehq0NAg@eUoI>CL7WpkZmo?`)csyJQJ%qPa0%W`dJ+C3448#y0EkNK@$@%lSk2v&
z9_#C5zN53OChve5NDmy88e%_RyJb}#2whbm0--Y$3C>&$k(8Wy<<$+H9qHDI8i#sg
z*~5Po_6vK3Q;$B61!#puq-xQxHm(`mK`T6;XLb77)v=RHr)E@6Gk?A+t;z3m;Gi6Q
z6PW0gNLE^YiDsq|HRsPv%Yf-5cYh{`U`D?X>cJn}Q^8)t*Ey34leaNib<7-sJr+P~
z0h@y{=f~&`n^L<SwOkL}7Lzl)cGl@iE5udt<XpYsW>mW)_20VznYKshN&FU78|HOV
zfd!ix>)Mq&FEh51L#uAr+|0Yn`^Xzq3DgDo88>C-?OByb8Erv`Ye3mjhO*k)?)J{^
zf}0pwBVw5Rw!<Be#ry0ssKDFXUC^?ZRMnbdIGfBc&6Yw@nh7bnnxN0}^Sol5Y}s0K
z9%|Um?Fu;cpVJ4+2iCSOAHQD%Z=Y4f+-LzC^d88g^thR8+&^>d;d;|9e~0Bh%bVZh
z@kDpF?_jAlNvOPL62oRk?lAxZwIz<@LML`_<=g#NgpjY<6yMO?@#%gg*=7P`Qxmmd
zEAk~>h23O<IyCy4Y_uF(=w|0rD$t)Z!|-5F?hkoRtuqFBTXtef-CEiBJlGqFPe?%~
zAm|MN^V^!_(aYmNuL=y8kT6YCM87~g#|eFCWe~yz)1<QuT9>|f18?Q!i2C#z*5|OF
zHR%+aBrR$Ux_W!Ny1RO?V>i=&025yswkJN=6U+ut@|;@Yz(w9Dj&n_*q||I1Ck}89
zxVLAg*T`q`za(4z?j6nBh#HL+eY5PSI}MQVxZD_<c^o@%^?E|^e|_Lp7s!gn1@Y51
zR|~f`6{NJXuyeH5W2N)nzv!#nG{P$<Cvd^`9Cu`Eb`PV6>Xb_r%i<~!)XL3V$v`oV
z6=rBA^FqbLev~H=<2&M8<k(veEyV8ku0KCYHsk7dGCzEoA^wIy(@>owP}4|phXg~_
zFR9JR$b+ur5Ao^zf|W?7Ga3$XN;RAzr>*<n?++r>Hk78N&CET_X%WMbuhX!LkSYJ|
zxX7pX{X9OVc5cFXz3n-Ne|597^X&?yHJ5~O*8<d~s*N;JnQ4^Sz=jJ04u#ft+$9uj
z0i;dRv1k+R&el9z<<KjX-@e-IvYlr@FV&-`Q*rCJ$@gXLz}n>B$_$uN-U8bV(^O8+
zerw^3(UqLaYQ;Vc?n!=*!N?u%YN-AvAPjif5{E=mNcLhf+KD)^H@2f;=4nc^+G?q;
zMqGlwM}KGH^xVZ!J`UN`*cL_cge00am~{wbGUI44C|t$wKUWlFMyE~QEbSt;$pqvA
z>MkiJ%t)e*RFGV>l&?r0@i*1)Q&#8%=xBSx5?WvJtE+=*kM{PuG{NPig&0G%*drdx
zH1oT~Q1r_O{dtr9LIullGCnJ%PCCSd9D53pHHIzpU0o`89dYEBnW7g~;HPL|z8j7A
z^Gg;Cgk@m5bL${m_kbLAX{uW~1ypsinJ<D$gXq_hZ)<K!`P#Tz7botgJNXRB-)~gv
z?0U*)MSU>KQjx!$X=J^dEk`Bgbcx(ZD`wo_kBF@;<&g_KJUdTa$UmF0eYT_$p`-Zj
zfI*fA$9?bvd1}S3&0YGt3fIRhBKjUuVwm}@o(gA$_1T$PmaIu~qNSe`1+v%CL|8`4
zwkNP)p(~>6J*}^!*VHa@t+!5WS>~36Tm}tDcVznjXNUc9^IjBqdb&X?__TF(w!0vA
zbYyF8?0B+qgMddFX1VY2@mX(hF`{BOF!7uJ@IEl@z+LD~zm1K)l_lSAECdtgtioS9
z|0wfWEnzmxKrODoV^@mxWEvTA%~gkQ^oL*P<)(Y>cupG5az%CS);Mfr9q3^FjwsG#
z7}hzjhL*1AZv11sLI7A+(*s>~)SqS-a-oi-XML<Gam(<_M4<eh%PPO*XTm440o!$N
zC}~~7A-yWKCf3ncK;;a@Gh_SdnsKx+5HRpOFrT=Wx+)Ya_{0Jo!r)Te!%}K$kql?(
z^VH3#2Fx_3xSd>x5YHBHDlRKTmA496{3Yd>fBwfIuqZEd>;~SiB<U#CbH2tFBQs3M
z)Z#Nv8$M~@Y0&|Qb_J{;Upe^WrbxGs{>*_lmB;HMC+yfg@iId1$R*K0>1U~r>oUrT
zg`w$zw*rjJX+qXK4&f?{{L%+L8>&KX4*qs!(oKY(dM~>@Xi|7wDHPmN;B<Qw&$G_T
zI3C^PNR1^<+;R|^2?q7J<08L#cZn4I@6)Dl#r45I8!m~@Tp-*hi$ApN)R3t&29D|&
z2|{irGA7NFS9uz(R8*9H@8w_pAMpAndUqZ2$F1;7*wOD&-IALQ)3Y1(MXxy_wmf#n
zCDJ~m;1`5a>p`q^INyjsDV%~TsS}#w<H&Uus<U1$!onq_Neb++Ov;AJO>ai+EbX)I
zoSL-j&Ou&Ffn>mKE%|C<=lJpR(doU`tW89GH<N|Z`%+$BPKVfJ+Yw8q_U`)WCQ^?#
zU5VCl+5(5G`%+Hb(W0Yt?axJUQsUE%9!1G6F=;`UiZZYR-gRQKLyK(Dfdj9Lc5n9_
z`EpEa8R_Ew%;GHr?kCWkS|cv#OYEN<omB3gjA!*!uil!x91G5Y#^%kL{|nVZ`G?Vh
z_#dcNa=XOP%|FH#A^rdA44LW~x|o{&cV}o>^HPqO1L=20Z{L8F43ZF`sdb@m;BQD>
zP*Q*b!1eWXjOMpJ`ObNh*7l6?TF~!z#g*^c_6<p&xZ5VaX*m9I#X~I~omX$Gi04rj
zIXq?N3<zeA*K2I|V9>tYk*(;sjNsws=AZYp2flLpv30>I_YBxE4U~9D*|D);Q|52U
zAV35`O{0@V_Ci37AwZeGb7R64k<N7vT=;F<xCjqidU5Ta{DyR6M1|sFQ|h9EXbOV8
z@63q7!$YT!B!;$EN)5(_WPeYM9f^9dk#8W;!8#eZJ@^&xfW;&Y4=W$%pRdczC*O!b
zEdeKmC%QuPaZXByP}%LsgcESDZ|PGf0l_gFXt3^_J8H?UPY+;B4e|Q#zN@S8)vv@N
z{S$JT5E*#WvMptpWsDjvHjTFaewj0Du3%}<m}7O$_vG@D5E<gR+L;WXPJy?8-lG|a
zE19J;3UKvmZ^!La!8eSg6Z}lcNWg<V9gn&Hxy92eDOrN8NI%Jn`WC59Ob8jPnhdz8
zLM~Cxm4|7rM!I*`oO%$!N^Z0-<AeXO49=7d^La>a^ncpB6}qhWqjR!Yy=@@rR18{U
zucdBZIOg<CPusOuQ_p@Ba~rRl1`v%8gw>Fi5IKLm{{1%de*E*`$n0QS`@=)@_U(Rm
zQ|btveBod5XyE+%a}qd3sjd>oVd>&1_|q7YXg{=li!a8}++)3^8q~5(j|(XZZCf|*
zpJ~RtcY*;+Q8^C~!R%XjGKJZZ@u4L*s-*?H?)m1H7P-=2eQ8U1uSkVvA<fBE@|HJE
zj=eEy^Q<laD4~be!Q1<Ze*S)dU3Pmytp0Yr_744a=nI}dG6?7D8qkq7A-E79Bscc_
z?Y@;9&8Y^?faEur*R5m^lOJU4-)0hNMa%+s5&=A!mE}Dn_UF$j890D1C@G{?(q3Eg
za%lu?&!54s|HIfjFb4u{L4&bv+qP}nwr$(CCz;r`ZQHgzakAOks;zokTkm~8;-1^5
zyH9s9%p)wOT7jhvzcdjjJD7+OS-|YR<9ZSVOKRK$wJw2*YiJ_(^xwz5HGz#fSnX7K
zht2w9%Q?qY;8Ed|ER~L$Bb``Am3_>t3itaoI#Ie?N9bw-Yg6T#j^Kv<_KWg@Q1w^G
z9)t<P0er=L=FjPO3>T^cHSA>;$VYaj0W@2$b~b6RFxBKy@t}$5bN2m!RXXmCbSs8i
z@g-5zh^PL<s7sH9$bc**$D)-`%+$OHiz>6*moe1{NiiwNBBo3L+oXuFzfH9$1A8p4
zyg=H(k;47F#P$Y`+c_$imNn)DzHL-3YA4L4&itNdW8LfJHn+;d*zkk1x@#QMCoysj
z-a;AG@F7IrV)#@OIDhQTL$u7uYD3dh`IMR_`pHy7ghg3ff4*`rZWDLQrjX2U)FswA
zKy=bc>R_j0A%a{44ALX^=EP5ULURzv#`+V~XD~oK(9nw*-jrYQ_Sk4C10y5|yhB)E
zk^49lm=oztBAqo59zyxvoB;vp(!(Qzu;Ahi_!RyiL!y}&S7<>cDUV5kGf{^6Fc14+
zjR5?x)SQ6`N-+aSAH1{JZ>`3X0?}kJN{UNEOuEFyKbHVeMVMNSW$`{m4n+;E)N=|C
z+?--zM9Xi0M(j%nDd||EK09)v5-gl8C<fL6)EkuhOKIR@0<cE@$*C$dGlJ<QKU7C<
z1ARujt0A)^QnRiW{*Z)T*u$~_0Vm{PKI#Pw2moO^hEVPc4Tl)*CH;q@bZ-tAzCueo
zKVJ)69JM!Ht=n2mtKGhi)?%xxT&V@8{9d$xn|&ie)jGF>(V$7tN?z@nm|w6LlQw@w
zJv}zB*Q&6Y5^Pm`X&33bkw3vK&q<?(7(ZMK<$=rLfprggR=({a`$=8iOY~U{>A4c2
zPMYPdrAP5%u8s}3xkejI^vVJ0;JP6=o9S!_GO&nTZV6l9>9JY9@@7(HPz8ZACPB_l
zTQS-hCD|^;44f(_l)cWd`B@5eVHeWo-Io=VQ~|H1JqC%$XJQHFhbAN_GhmT8?V>0f
zwsFAEc2NRsEgtcfAc{y=FX2GJfk+c@w4`6%=A{r}8^>J3&GmUD*HZq`;XNg)Z8W4;
z0dSS%0LXOW5J?F;*HMhc>L0P2byg~~d6!yE1&FE<93vWci^TbZm){tc#rm-+B8q(D
zmdnFXN^hIkD3J<4%oB%al2q(;r67F)z>PUHH?U_xfD1b{4x$A^R7p@|gF&MTG$hd>
z6IdL-df*DF*aUbhC{RXOh60ktT*WDc@2};a8J5{<+;l#$LD(W`)B>cLU1)_`aAi@E
zV8Y3{^ha>9d<^u^VvwW&3^mh<n2n%y1OV>W84KC~T19?J4jM_BZlVE6c#}g<Fmjkb
z-51ImTc^(0?S+brK^v9f;Zh3)SA^adS1UtYCyfMHUg;DerI2KZ|INumr;JR~EQBmw
zL3U!AaO<rZcL)o=vYrI#57xpB4>j~gHzb(j?#GVFojiYic2jmNqgf(mmOin6q1)w)
z);c3(u;zqAEe6LTKm{um-QUgRY_UbtF0bkc%0JDR3Dwro)5Telc(W(w3cIqZ;N*u}
zo|WzF`_qr9uN!Z7DZ)CQoUi9zwqc54;zT1T%r1=_a(%-_L~_P}ndJ&3<Ih*fw)>6P
z+l=*gQ#0M6t@^Y%I{!Sp{9HS$gzQ8Xu9>qf#=YC}K`+_|7F3g-{B?coVh3F$CuWX5
zGrYdNo=6xIMR1)8^+^(7ooepzP_Q{Aj3TrtnhvL#=wQ-3oYT`nL0h~C^*TOR5@r6{
zEEFf^D#x8m?ty8BxOR7qZ3CEgDtm2=`YPMVM&Fs7!|m{JJg=CyIfzJmP8|YYX)`=(
z+M9W@ge2t}RFP-e6dJzWK(nB;0iuEp>;_ipOOwH1s?XRQYa`k)jY%HfAtV!gyO&hj
z0-Z&-zE0TiA**|G^D`2aD>L(EHPb%AX@B~8=b3}Qag%M;aQ@za?*^lv07E-k%sO*a
zE=rmD;}Hy3G;>txlQ6&f#AoJCEY8&V=q(tgxd$cbK{&qeCFv1O@^)>Mn8Nn1CSf%D
zZ|X(|$u529hLzqfXS1`hGx2f%>XX+*qvX&>k*vMIOl{iB4Mfj9ZF0DggdqL!WAkNK
zu;#>Z+wH_B(x&-Z@xzR)ZklVxi*+-TuX(hg>3Pi76??h0!lJ2xMFpyUe_68P$=0-#
zr(&|Ip+@@?YdFhgIit%!+1<58U_EDzVgBTOg^(3u43#$QQ&-*!{RN+T5u%6}!Bv5M
zk#H-3orAhiXs6-mR=H^L9OOh*I(LVU533<%k#uO|#QJ{TNF7`)5eTazTEYh$+rQXu
znG7{#-yf$WTyB_XE?obaYtUqiyl{LdGk_j1-hSrKWMk$1SCNNRLF1;9iDl2?gId?(
z1U0SMmx(p;^RlXWc?8Qp5#{QBbLG(o*!8fD<{d3n`fHvK?;ch9l8OrjzeLhWu`}J+
zi-i$V;&OZq7yH|cH9m<K<!3V$U1w?k+oaatYB1Uh>q<O51nU3>q&l|Nc=0?`cw!m(
z5No#WG(DYjmI`Xm9k}U>fn_zD{@T?*$TiURdGdejH{bQ8G<_No7BX<zC?u%eB8C2F
zqtSVq*Skj>I=Wx$^gvp8aT#C#qCrsfqyD{?rCD$%{8I^vT(gX79B&T0=84J!DUWUi
z!_mJBK%_aKj}1PbwBL7?)c=_?D#rTuuT7fj^zn8l_N1^2u8OPkD!gLdrC7zw#bW<v
z(CLv4^AE^}gS(Zo|Iq(Wk#!>-0(2Q10AK<2e?n<Xdwm;Y8#;^sH>mdiCrY+jL*IV0
z1<n7Zlt9bCxohaAgARUDt4}g#CBq!NzOlud&?2&-O`=FZ$<f#T-?lp(<wVi}3+@do
z5PA4%4*slv5+<ydi2$8S{i0E_*2DX9WuClV@B4j9m69A9X!_)FjE?m)dOQtgI-BYS
z%s9v77%UZr(;)2X3lAO;g3+|dQ1Lz^rRfxFJ#5BQqXa&>zDf{%Tv&*Y8tM3YoP?>Q
zCC9;<3Pw^y4DvVWK`5zElEkqnSw;-UI#f2-9aITWWCn?qEhYpr0=*jqD2NnS-TIRe
zlfK+QmSQnjlLkiRa7U9+U=P_;fu5DEp&w>!%jUI0ApD4la4|b^Elb4~W(nJ@fX~up
zcZ??y33=-zq%IwuUv^bmce;?6CT8%j<Ca-Q|H-QmkTb6<Z)W_>MQ}7doqh3b*$4%~
z$R?9S7@h(t!bk{h)!@lV>=Zg28p2|iYPn*osG=#>f)O*B)zq;ne7^oM(I4=Z15B3G
zj?g?&4T2$e;qu;z^9%UEkl~K8K5A&os6jDln>n$*c`Rf*pG~A31g!u%v&<M|-GN$j
zCh-Qp{o0UJ;)$_Sc`Hq`mp&4e{lWWk+6h8C&Ko&`N>N)9ge3D+N9$yPkVIov$2Zn1
z^;G$zTadFx@FdsUgJDf&2D2&f)kc8Bqkv`a10`-n2v!+|p@&1q%c#y75W<TZ=Ec!k
zgxqu<Hw8z9SM5ygoLkAFZ*d*&nn+!NS#g9V<Q!u=QV9;Kj=E2~=J(kp?x3<ETd!?E
z$b<>t*GW9$bjkFK*7)uR)6+0hWtc@Yu7U57B0{PSg^#~FISJF-@#)u^Ejqsga)ela
z4W;!@B0viiX{Nv`D;zSRNupy^)(5V~Z9iJ5=GvJqBOX$Fap(CF?Uk<!@;M)VRjmym
zS@2Q7(!eOAg)Yq9x!pRAnew{~JUk}(<;>8d<EM)s?e7!(#P6nyp9!6Nl`$FG8{K*2
zo$76C=s2hUac%Ec1e7=`m`Jo|9=C-F47Dk=X=OwRG1YEiUenN!S>^90dr=^e*)Tq>
z%$6vQsT-*@D4OHZRGq@BTiSAspe#&bSiGTGwT?XLYDZzlNSzykpf9QmGA&Z5A;C#_
zg^!cMxyixokF7NW3kK<%Qwuf4=6!&`v~HS)JzZocw;t0xMi}XXH^)F(0KIyDf*n_#
z5(dkYA}opUdBM$h;mWHiImGPNlR2fP=sSLzh4lPD`%SY^plIey3FGe;__Ih5$%-jb
zW?581H~=E6LDzumn3r`mhJm`huG>$YDd1LQK%jwIUX=u8A`Ue@Mxd3dB8rDV6v7h9
zg_Pu94+}|BU&qYBT{-0X^<xijnvZ~Gm)E=!q<_7<7p_12p5JmV*?hw;3Ss_9Aknm@
zn+?{V+PJf8{xL#BI`c))#op5yX=wgI))NGkRV4=xsYECr*?;>*7CxM#0=*O)BRoI~
zmF^TDfwwdmFLRQ<>(mwA*&mqsWi<QUY}WbqQL{S8lOGz}N9F?Cr?WWbm%rQ*ziHuc
z;3s^T%Z->}!_nAA3*DBo?db0NTATz~(3^|%*@i?A?n!<d^Z+jp;dA{ctl$@*NhF&&
z2>2+#GP}<fZe0A$(^f7n(@&&V`=##&mbagk9N>K$^a0Y@e7Hjqf~pLoO0$GX6L&G!
zzKQWE(F}_&i}ECCX=sq%-_4wlvCO>iE`VALP=}W75CNf?;-O>&mkn`|jks6yia{iW
z`59~G^27^r!HHPHx;5XKb_nB974mT+b2H{;-d@Wd0g{8M>k9D#_)M!){3<axANCd?
zWxHAN-Ccd*->CW}t^MP+?JqiOUt4pR+w$(RVjXwlRc2VOP5${|@@(iR3C0<&uI8h*
zj3I^J`K#Q~Y@*y~x7}W0bQHEQDbEpq2@W;bz^*P6FWB3&bBKw@Rl@q>RFbMZ?~0qp
zQi$Kh&1D1QkqaG0R<M)mEpGF!g7$25q#CycU%{g!r?G``fBTV+uZ{4?k=_8E2AR#V
zNHxOR8wD+Ti4*RLu_l;gdLQUTX23vwyk7NF?EMy0jK1q`RhoAXYU566$b>+8yRtw}
z-}WjlYD3b7&C(rSQyAVq!McVO+}{V9s!RE8Z(pIiJVffnsT)Ip#b%n)?o5wj@_>yK
z1T&BS`77UpJ{Y*t?zKEBK^eQYr#wyyx%XGG%ob-HfrTTW1H03^SION}up5?l37#Bx
zdL8$6^>ilyHUAZF8x1CSz&l8NFtqr)#}tUcg1=V0*eUC)#_TSgN3B2qeaJ7q=`Q1^
zf()vSd-idrrLG6)@nQYbAWGOx$Gpu6EK3a297zeB^OE><3_Sr~r}6%Sw7WZ3_O!R#
z_XEnFWfBF?6cGo{Z`rl8A6&PluZ_qU?L@#XY%ss~A^ay)NBD6_C~U+{Bt7<Lpln^h
z<?Rk)`!UesJ{gEEh3)<`$^v>%oB!%If^9SQrcbP3+D#U7Ee@c^Uzv+f#s_287PltJ
zD}`|WL@bkuwSd^m7SP9T^+KX)J?ybFD^?`i)-!F{hGgT4gjyDBE$(dXM(?xVjpX7j
zQ2r)Qk9~)T0)E!8oa!ygN}8pcu*s>k-+m--jtUUgj~Or|42A`y!AyW>8O;JL$AgL|
zJ@?<Srh4xE5vF+V;~^)z6@5jz{qqO@e<FsV+%>0X5C8xyg#U>c%=GR4r!A{meba7}
z1Ht!29i~Bm3Onu^WsNoqJ3$tPB_JCl@?(xXFv%iXI}1gkBCd0~_cozJF)jz1%`=iS
zhtt{YB%)v>7!PJo$P9ZptvqmWHt&b$m4ovW`sDWzFed8b19OY&4L%k&=aei}Dt<4=
zxvdcp>!z&af?QS%!ld4erbK8F#3@k$bR>9x7!72lO`YrJSsY;36pp$9kP!ALOA9BN
z2^M;UaxOf>3@jr+qlRfFB7(9iQxew$QaNZyBp?Px&^+j7eMD$~!0Q(*EDt}u`)RE=
zO`#T$%3u!{Y%xUMLq*g(mNRDZVa2arK1&$EYCR^ZOgbX6&`n|%n+?zVZe4!$i%dO+
z3`DX)CKo<UF)J2}Y&M}YVm@TVFYwNeh2%>i@Wm~YG3SU@UneJxX&@$QH0`W4f8ADQ
zGfcw%UH;Nj0!|#lOC$j#)~$!sR<aFS?g0~(tqJ+Z7R}W}7&g2{3=G6cH_&Vp28ID1
z>=NONx*?E*1R6}C4+A~wv&`>@RZbz9)#nyr)@z{-vy#u9yr0nVX-likIoC)Ho^GTG
zHY|3}HRd%^X`;b_(9DA~AU}?Tv3DD<%L%HRKCjyeEjsB&I+Sqp8S)r0#P5bszhGcQ
zILHyyPb3V{IBp??9#DMjm`K6G(SWe|Xb*p9&jUdD3dS;%OKTAOP!b`&7c6HwgUoH;
z{02}avcv(m0k$5a6M1M>KQc_Lqn$cc`to?F1wTwt_4TVc9G@Vmq09!0gx3&p&|0?j
z-L@{)g<)`g<R%;t958+N*FkI4ncC+`Eq&<iACynCYaqT^QzQ7>g6`GYN`JA!P3mu)
zH*I|>!g$AP+$Sr6|9c^->crFVeDW3@9(D%l_p2o2XdI0*FISTrs(9^CWIzCG>{O&7
zfM7U7v9r4$>c|W2O(=;0uC!=}m}}g<9XzMh@z0)qryKcgQ$;66J=udfjphIk&o#Z)
zCUSE~!wgOP>*4dBCe}O%(#RsU3-#k5?iu?eshUe0+BMZwu}Fw8TDC=q$_uTKEv1*d
zQMYGOjy)+YlU+zz5eJ)@eSkTH-&GQCJ!BOyd03-yB-B{k_wq*=Vdn|q@VKDb*u{bD
zEEqCz`4RB>5Y<^q<qYq1P8C-KZ)f}M*%ZT8p`^bDW55t!F5v@tObh;PLQb!bPX>=H
z@BJEyBd5KwJI<|Tu>i2SaIj8tg88q^p=DJ;T)492)^qQ{7evb8vH|yo7>b{4eAwQ|
zk=T-fHX7T>P;Ju<`VNQ?`mGYXrnXT34|mZ)_fNq;>c~hT2AMlt`Ny9`g@Dx*Da5-E
z_Ps3hK_7C__BU<4z|ju;_S0+8Zq`M5`IN>M04T%M?CGMcNAm{bf3=8?;R&rnpXGQ?
zvP&)Y(laYhcvf^I4^W)xaXq=vh}TMu;SWi<c`X=*+0~=!5j~GlD7N~Eb;8TA<9Lh3
z58G%!Ue!LyNUS>-hba0&l|>a?WNTu-jmjRL$UC#Mr;B%&Z^P-8m*<MsNS*ORZXdde
z)i<3LI)c;Kr>wDYcLwi{UBga(?9lYR+jzF7xl>$+cYNYbb}ikzBa4IHUlw^ge1+zA
zdD@S(cEGo6ho>EL2X9TdH)fwFVlKX1BAPERk?!G<4Xr3z)s?l?Y8)+VW{#L{3f4VA
zIL+0wf8Fzsm6|LyZN$&`|8t_^$dvMAg8~51{+eA${-@E^+1}Xtzv~&P>e}`j5-5JB
z>N3ifpb-KR&D5+-sTM+;7Mc+Zh!e@jlN`C#^|Z5XES=N-yUr&@@v)YTJS4f!KYV$d
z%(*b$CK5G`pXCPe^#qHp_Wu06T^ZkkEsUg>IVEw8B<`aB*kM63(}`xF_{bhf2(exE
zOoTaUd*&Tr0vT44Kv|AiNKCO7f*`163RH^X2bgU=*f5YE5>icWc@tTXi;hqZBQhM3
z>O+v;dH=Q((2xqY%p#u@1CoN18DZ*#&kF+4lV;NMF#PM|@gGpA6OhKV@$~N2;DjbV
z)YKGcN^n$U=tZFc{t5B``Z6MP@?*`!feUv8!{Cq~(Y)tSltYF!$BFg@I!V^MWt9#t
zf}!*r6&-7E{Om`XFOW#3C_<E`Y<EYiY3%uSu6MO+WX?0SLn1kRokD6*nIn2ml2qV1
zCNku!5X1)@Mbz8{Br!j)Sz*GXkVsWs<-J$sEQ^{mXWzBk)%iyz-0&E};qM&T<vh^M
zOG^2<4{^qtXwL|g6;ykZZxGaC0{T3VMnMlMo+zf-i3E=4P8Lx;LLpMY&Xrp|93bUg
zDzwOAqF6f`O0EH*5Sm)_bMGb_b`PQFHvtN1R7)V-8zZ(rNBa`Io=99$`;~>4^Cir!
zQ&%#hGAG{bnN%D<!G|EKv~HYYfFGB#LycET{6K3=h&k|RD&CTU*W?_|L{%n+>oouj
zywtams)c86iUcI0$n#tbuaSXK;n4JDUH{e4L+A~K&2zNCN`5=u%L~NMvc|WSX@@Jh
zkGY}XSfcg}UAHn;*(@@%<mB3`6DRQk&!wcruT(ceR`r=EOpTLZRGk1y?Qx5#fY*;L
zrKO|liBF0Dgd(z6N~5&!Q{4}s@Vs>?X*Z9|gr#r71od1g!z8y&agQg<at=tC4~C1=
zwuJZ|iv^YdB&#9vzHrrD<v+*lk}*)^qSg&37m6Kv#+2l$!8(N%u-7Z(*ih<YHt}!$
z4LpsB=AV(8q`@o;Xgfs&Rb!f=nO=70)#A;T>!cSMJJQ~tFn`1Qqd)$8j+6se32-jq
zT2vqg(Xhrzgwq}5isuQh-Zi;hY@k|eK(C)j8P7WR(>mi)`B`9iNl@HXs_{B!ae_1k
zf_j#GG(3Vr-9oML(B@KVPqYM7Fk~wVzL2gWCPtY}Y-&vg9GrM2A9p?Wni(xV;Kj|7
zqPi~`{khmIHrFkx?Ii5q^VA-GnvYtAJN7gBX;gli8zt(>-dX&^e_*zW<UwVtzTC4~
zlvBR&JF-+L>&U)mF)z3rKmSD%GnNB`|7*yXtUv)@)D+!HIL_jLQ?DT)^Nlce0L9xn
zsavyN)wJ1`XIDp!@ygqzUuQowSxYB&;TSviv^<|)0V8I?4Dc1Mbw6D~5~BD0(+vH-
zMFsKp(m4t|>B^)!dsQ~wzo+WWl)0<mMQtD}KWwV~C}R=CzC}Fvs4uu-mxi?b>~u|I
zWuS^RxCK4HF>2^1`BkpL{^G8VdmumQeJb5KVHe@B{x~7h6id$)tIt7r0iBhHzdKho
z4xrtM2M2-s1S$K`WhJ8;%j(WRR3=Ws>$>*+2{m%{$q-bPziaLRHn8`4A6$0&c;0uT
z&Jb?2=X6Adhc51Xb+%VkA<?)LyBCyUVf@N{hC_*ti?A`%;Sf9+1BN14{TiEZe`mPs
zlfwZY*V(DNUFALlVE>vnK9foBcKLBUJxZ#>0Pf1nimHBAa`U~+9`Ke^Kc(XE7Q5&m
z&S_>V<!HPqrh4OcK;_)+&wb4WRTV&|c6t5m)!aaUHLnU@vbpSLta;EdY4h#r*SV0=
zl1QnGD_r9*b+m2Pt*edaw5^L<#%GTfw^%k0!A-4ehxV8a-ib$A9=rL)-7E+G%Aye5
z=Yxg=8<*@X#QtoZ8ItoU7>10${Hy=|=inccz?mKe1^|G9`9Fcut~NIReeO4_{XbB8
zRUJmhzz{o*9<)W^kW7H>z5sBGL}DwP53)!^b8F$3d~@yI{QQ6`k0uqDQ~LWH%{thg
z!zm2Mi3!FKBAt58qF;(;cDwuI`QXOo4PKejZ#!}{IEZx9^d2sXM(31GWjo?P2(rZu
z4*W93@D)3340B{e>p4_p$autLhGjz>Ly`9PHl=%^jvWKoN0HNJ46djl0sG`&Ed^Vm
z&7iMGoTjmlRKzM7QqE-PH>~s`INfl905S1z8L5TL9M5LE0tJUOzKy4Edz+_*3Rj_1
z?7Wd()d@?hPJS<#(I0&)TQfQG<ZCx>HH~0KqpBw_B@WpMr;+k)2$npMer!78#8DVN
z3~Xmsxmj$gl4hGquars!5u==cSW<Mfi%AiZMedoXIUUCa2jgFt?`%^}&>|z>-qSP+
zp)v^^V3j_SjQY&R;>#U?(>685mNaM<v7~9@V<DiK(1{`1)3ld`_%Mrz4dk(*6r@;T
zEb?N-`(_OO7v-3dFLAc$gFmLad>Y~BGGWzc4erf2M*@>II6~vD=f5@TR^;ZGwg-xa
z0#9CSLH1Fj3`4iAx}2n&X*;@=k!Ga2jP*s_{D?tGXP1ZscEApqWef!jG7Y{FLGY^s
z^3ltqo78IzJYMyXz8W0CKR|tX%o@J!+9B+D>63T2m&aC){14Q;rH<No?8>zYtXW$s
zZ9A-{tLY_I9`+M8NhL8jtfJyllU?I|6dpO?{mBPmH{AEl&$_~3f{J?e&iOy$m0l+2
z^~NtN-346_rJqMR(sqfp>s>1*YJ~&$jjN<VRj^j2k7@_&i8>!M$yDg_f93b8Ab9R7
z%!<zcM(|+fzWN_H=3FZ#09~v%q4AbTjR1dO8GHmwR0<b3X<u=CBCu+uFsdm!#^TfJ
z)%0O5Bs-7yY$CkePQr=ets2GG>~jOb&j4qyVsjzISTr?zp?kr-H?>Cz^F9G~iFT`*
z4*w8uv5a8b%Hz;Mhqd_x{^irdR_(q!1piC32fP8}2dxi!fMy7~v@5QDdQ}wOh+G?J
z<#Iq*!|^DMQ75=2k81aO=B0FIoGZw=M-+4msy=G!;fl>yMW+^hw>W$}dYL_JiF@ja
zwvqB)pcV68;Uk#Y>!GC>Uw1kRc5_nu2%J*+Ve0YxcJoB==(2u}-WYN;fTz`qcY0Xq
z{q}@cFuNrT4oiD-N^gDPY})F;SG~KNh%3V<FS1G;WVTJ8I>J%9E{~^8uYOyT#;tVK
z@CqaT_j*?tZ=*l>EWPi6a-&Yi2L8<dKWD`DZ1VC11OUJQ;s3#mu=zE+{P!6#t!Zn&
z$$|8Jqt7@E6nn+hqP&G$=a?j%#jy#nQ{;ejb=@s62aS7AB^@L(e82tPy9-09xm3B>
zgfAz6otc9Pm*>fWqjV?;59WX=mYu=x2^9BR^)@SxPd@4&2p-?BI~4Ts!RZq@=+7+P
zCrZ`DASdRq|4~N}3W7#sc+c!CZV_QK-98u;(w+cD7cFRE=Cce6#)@YW1pbBCcWVem
zZ4E3)K_H8<j)*63FzyR>HEfs&fER#VLzJf-IA|~(N*-%&#zY*4DqsN(9ZHK5&t?MU
zpHRfY*4v)5y)*mJLLy__bn+lFv?T`$ugDK3osdf|l9CfMdim^ya)6UGgdcjps6iRq
zcpk%3|DfpeyL=A;kIL(Ul}0*vay-m5lc9|Ywx9Q%<ezhYk8#goc@k*gXne0lvM1iP
z>t66p<6t(PM#MZL8A9Id`G6c?GjQwDY1-5n(`DSBpTL3bAOu1n0mhjRGYACcr@$?!
z`fn8AF;CJqO?pB8z+0=vC?&GMMZdOC@iOXCqT6Fl!v~Y=E+W?VE|NH!AH$`lpz`Cw
z?{gl}!Q6crU!DPKo0DmYrZG<TxzHNAwi&<m*mCM?e-=1A8enF{!3LX#xOp7{>h#?o
zQ8)aA)-Iru=w-aqtx0?k$mH>85aFs59$*wZqL9%LmV6yGkitQ$H(o}Mz6Epkw*T?<
z>gvg*o%+b`ot--v<%f+UU+^RRIKM}iT%7Vo#d})#bp3btb_1mblir%0F&wi8^Sue|
zBXP0+LeFellz+uR5dyCwof_J#Mx<Vy7@=%UVzh(>xv51AR=*;qSZRGpi1n`pBNz(~
z*h}Av0YjwFPhJp_IdKFK<Mz_QP^7gxcTEI_5&Xy@N>Z85Y5NPE`BL#8%D(VbuFx|k
zyh$3Aa^Ne4By}94q7g=UUYTeX8Evwq>?-ss$0xD@+47W0es$KJrh+R0bA3Y)>>769
zR-=(vc`~%puGAdMjV|A(?M7On+vL;<XOgQe1_6(S&;gNNf}guSgYNF^H0lVg3rv=I
z8;e9$yu~CWO@Bgzxx)uX-ivqpi|1dmOads}KZ`1tX4)%?o*_D%*yPaoyzQ)+<YUd2
zmB^b7)JzU%^3lMkqm*J4JmUxrZ}Xh+3~1&KJloA8L21?b7R%`#C%V$RUQ#K5+pWgK
zo4)O{7g5=N-b6GsKa35Nqh;OR({cinsP?U>VcubNrN}Sqogl`7b(O;wO;+#FXrgTA
zXV|H9l&J;}qw|18dguS5Q3ZjL{sR^c;#dsmhCpT>^#f&v6Qt~3bO|T;lN=}O9_Z|2
zHZLR6#YhSkR{df$ZXyM&WVD(dALZW(urLAF+4b`%&_5K6B;_OF3IWJE^aoCQq%W_<
zscH;1Bq`9-q807u75J_dzSN?8Hxo!J(%gC|`QLL95x7N^^rMFNT-vr>nJEHp1qJfo
za5sNqp*&8qQwTZAH$MV|{V(s75O;Hj*V#RU4?dqW;Y2qJpf%r;j%OWFcqn;kSj;C;
zqI`4csZy;jMY{q{PCOJL;5JR8b6@W8=2QyLy1U)1z++@#_C3v67!aU#>Va}WMvF3S
zAq5=iI)I<VEh$W*C`+Zo?T?K@pj`$haz+zGoOy!N<q&U`newj%l6ygiNy!%+OI1Kc
zIxim9%>0Q7Qczf2O6?1Kr+gfEsNI>Djj?u+@W)1*C|RPXs<nwowvi8`pLcP~HUDQz
zO*m)jMKNMi3ce#_HfUt__zqEv;oIh*2+?Q0;qluX8vkn^&r=j_Z*G;wa`q=X@9SQV
zw0%`C+Tzzgvx88@mmvpK+-w2rv<z-dHJ$4%l1&ItDBw0AM6+pNghZU*>X0*%#x5!K
zjg7u5OPMXeV^iff%km;xp|evKK<Nwipw<VDrfX9Eln0wFQ=ZYyEq64EvQa9%jjALZ
zg@d%n;gJ(TN^#(#vbETUv6dLDWkI7td}|Q#hxe)>6KiFRr4z9Z{zBKvBR29HxSzJN
zeA_YC6{=Z4-~Ph`CnR$j>=)%`mAJ$Wxb*SxBLPR2cv5_&s{nq+;S%Hn_%F%=QdLT$
zg}rU`+-eL!p1bJGG(rQWvFaElrgo5#%qief8-1kO+X<xo`3jxPx|5PS*K1*<Fu?(g
z?1VMzH0&ZE?xumlgP;pKQ-v|%Z|5%M7adULdVkJ=^`k|2dry~3@KU>ME75z_%G0~A
zUliP)@t{~Attq$)QN$@Q+S-8rsdO$;PM0z9SI)S(78F3>u|=)U$w`5q-59Aukzuf!
z1P98U5^$s4G!%Kh)n#NyuYX<b7lDp$BT~hypWch=lOxlz4Ks=vY3>|C$V3`DP85!g
zcs*P;_3vhHUUnu&Sq2+iwJzyYr}+&UpDa&b)9;$Z3M3f8j$f(*GzUJZ{cYJsW@YRk
zn-|{UL{S!{npa6w^&S7|;$5g*e`tbT;I!|YN!ScQ@l>x4|7d2G`br~vDKadL*a-B2
zV!Wn+CW}5~up21$84lhNl?|-Sg>)dRr7E?MyZ}1BCXhCpuZ(WLa8*7xDmoGAPN>=D
zOU2m|Ppjm9{N6t>H2d~)e8W8SRsy=0jqd%>BU*enTe+=7Y&d7FdcS--{5r*FsO2)x
zy2xyusz$;?ZQZWyV$G1N1ilV$Uq4SHw)osGO<EO^bf;E(bxn6-VpgwTpt+*{K3{hR
zh`0m~C;_w%4`@pQ+kk7t#kTqW6~w1mY4-6us`YsNDA7Wx)q%<?N_#swCj<S&wIGqB
zaLv@n6?+)Bm_!?%cI!yUV)@!_EQ@<y0Vf~1`zcW))~78j3pvNFxj#uK>n@!LTQcAc
zTQoADWr`o)wu?P|9hv=gj`DC_(z&H(-`T}G53`Nc{L`!_bj!bF*=J!*jcM7ihDiA@
zH70NKYem|hzuRAvY}ox<XKHhI9VY4g7iEqJiXq1sQDV7ssC!~JpY0D*<D;9oT~!iy
zhwk~OAi>JZ`oF>d6DC>nhdH$Ua%ghD92(Jo=g{;`Tx}ixJ4&in_qN|;L-^UvJ2)YN
zHJz-jn%v-UOyt6|>XQyy>t|~VB$QSWkxv6jtVn*oUw0>Yet?#Yg7Q@8dby1oRjyPE
z#CjS$V>Elo4VdY4?`4hK_+y;mfl@<+6*EfQ7B>jm44Oke0ByVz;=CJ<P1&~}=7i;6
zB8QABsY`6O7@!QE)R)f~k%Xn6956O*HKD<p1@IFBNmDHjAp{6nsuX{R0iOPbauzI0
z3`hgOts}<Q2$Ve#1u0J{zg#3`Lml8iM`O~G!0VM#aVP3TWm;(H@9@i0c=N~@EuApX
z8L`R#_Dk`BNlS3bM?~Z`X;m&)U>d>Xd`vU+*jwhSVaY8bOXII=r%Fi^GN9$l13Mf#
zKpO4iItlcneb0#4u-ontIc}Gvc?<(>%Hu$l>TuB5cy$|9a+&W>wSJYTi;9JJ(EMd+
zZ|}a!lLvbn8NSY2ZR`z0PmceaJ97`WV8enDZ$3B~-G3ay04yPBg)o2>@*KB|pT|)6
zT{-V%jFAcj4dR2LH=SdGIeo>Mcw1yPtGEIOOt<GehEv9wRwuJ}#m|KtpqPE`XOw}u
z=Aje?sTFvw$+*-8sl*zEl}ax~QbH6NJisx?1r_qtpPL<UKv6)`9BX&H8CDAVDDUv<
z>312*mNQJ?&H%>|?51u@k?(mR7r)aJ%H?t+gD`2~wKM{nw$tQX)Y{q3!E9(Kgi|wz
zv=U230%-mMh(}jE`wz+u^(%@K=w*p)!s1awfeuYXku&MSC^4B1L9>ik1WB(KOz2gm
zhkXv7gF9H5gJthheQoP|iH{|w2Bv$S!D((zuY0Gus~~Vt=Nia4&_ZVq#rCM`Tn|pJ
z-@Gq9s50RO@W8n0n0z%b#ZFFhfwVM;prFKMcWR-4v!}cl$*wzgzsy2u2nxc{e|Meo
zGI?B34b-TT#16#}aafre84+6bI&(Hjm?*t8l+q-Cu&`*qLXRHU*)<l|h9}FApa+*1
ziH2HLq@zk$eI--TfM^yBz5t_gh*ZOcGh0g?e#0J*p;dLrYJ2v^E;wxtY%*&Fwt@hS
zD*_ZukxEvhDm-aWge~UKPy=I*TUo&t;>xu=D&zvMROLJH-Q&x~y3uq5Qj=R(EY{)4
zXq)~R4G+zNzs=5FdNx@BpBHECEdTo2mhD}0EchRHSNPxvVNO|co9%U|r6Pn%i~7gk
zt?(mx`QPNH#|*8X8t(5x%z+*Bv6Iyw4?ku+8M9#cuV_Pm*=J?R!H{ctG{Q4Y`s>t&
z@PkXr9=}nv$n!z=DLrMg+tjM=JbR8KW<;$mGn**Bt<*mh$vwoD*k_-fwVCHzZW+AI
z-JM@mqC6Gz>5}v`W2I7e%5}9M$2qCIteS>a8bkP;3vX#%MYK5z_p|{d1Jrp`QHKz$
zq!R!3@XYyjG=S8as%(c9oG|@Xh;rUJUMI>Kpq^Q4S?4{S;;RCYYorFM3(60V_4$Ew
zgd_0qW2&T$hbLcQa7-VpEmvV_XJdc6F|T!S%9{)3xtv2x=I@&F^5SY|KY|@EAKX}O
zEJ^Oe*8Zq@`Y#`Y>IJ=q0-_8j#My)VT)xq82WckJ*P0!U58qV`gpy`dm!zvsf&6Ko
zZxmx?-@rh%uQjh(5NL`xxXuWO*+eG7dNbz0l3=C(BZ3$+rC83BE%FkdKU>#q?X|@Z
zc*~@Z<@6w8V;sGUGz;Y316lJV6fEsPc?m$9?8G1z_s)i-W%hljP`FDrl{fNEDa;@A
z7<SG2*BSpe9q0p%4dq%WBcg$}TTMN=ow4T<=ZY)I>aVyF<ln1gf<NbtaEVU)tXqr|
z=ISHMl5cF`6Ea}n@73!{u-gxCZ>EMex@wlIiim3PR$W#nf@+mwR<`WUA7{77Cg~-m
zS2a`A!~>2%{C+ST0Z-5+S2M}E2JVyCiub(rm_yD$YnR?9UXUG~SHuM1AKJ(NpVgVH
zu2HV|_h>{3@PFzmu9h|?be48z_W#Y?W*R>YHNb!na_b9~M-cR)hXNl&puwXGIZamH
z|Cv|<zPrPs8C^{n9-ldG_RnX7ot1FYrP&B!hp(feeXAzixHAd=xqD;JaAMvBVGKkc
zfso`q5*C<sK*o-U+bWjgO<#_Rb`BS(3!z`LGiJgwuE-|EiRdD@fe{%$c6QFOhl+W2
zx^57k>#km=(GnD;`7$x8rE2114pV16;+1CB)k^s9JHUT_iv~))MEAd!GQlMOlRfzD
z<Fm0h|L_0ev6ij-1_#=Au73W4jFl3Q=ef&<*#<942AnyBi7nT<9Q)|#8W0a_gE~@i
z)33JVP5K5Z3}M-sm$t}Uf16!Y>3!==Du3t@kCUX9L*vPjDdqI=n?zH%c$i#j!clCJ
zpm4&$>ok7YTTU<OOjpW??z#{|WK<YLz=oRQUnGbNlV7cOrc7oba6<DpXDldFqA?<L
zC<?Jk<uarz`qbov7BZSN6FSQ6hy}$2M=WJdo==tp67&906Dbt$ky10nsUilOc_iYN
z5h=b1d;l+kT$%-xo}xVFxuaTc_q>P&ah6j9T8Pk-BWscY%vX*l(o2~V`MzLYg9hyx
zV}(FOCH}1_KNZW2^SL}nlwfCV)0zTaM>hS))qM|&J&OE?!EPJ^Bn?y=XO@^LEOAIl
zf{Qp%+?)}4NC@c_SqA#B{~Lj4DfAh-37Ofe>23*t6-f%gERX>2Dm>xwK4T0+c7OwL
z&8Xay^O?j8ek3BTJ)Bpwdf(|>e1fEZJRc6GtSoqPWlu=a0r;oOp~5WQuozzWMEo%z
zNk0^3ppDO0l|XSOljyi<f+A*nEdF9qDiDK7lJl`3Y&JbIW&p7vke>_?H#`PxWe>@1
z^1OY9d$jxFpZ1@N9bv3(ItRB7S%B5Lmjn~!SY-U6r6Xq}fza8(B9YMX>qiWr5Jg2J
z$n*OMsUkMGNaWcvD3u5{xdRYksj|IX&x2s7j)3>XQC?gdV<kuPI{$iqH?8tQ=l-XR
zHoMkcT(@lA7pJ*vc<z=<m!FG-;9wWSA=`g{YBrtz^lNu616I>o(d#Fb$}5DBY-LaJ
zBn?fx)IjhHBYEJTS5GxAcE>wnBn;Z5rB!m&RORkg43{S`s;dzS7#g*H_8D%LRBhKU
z51=8pH~zC*mh%rM^{+^@hb{6m_gHRX#DL9y0v|hr-NB%}6s&OHZvvM~_4&%u?686h
zM<`Rx*$a+!e6Otx{0eWRN{FpP8sJ)26`^8BRbE`G8i9ZUKCa}<dLU4jEs4wDh=IPG
zb8MrXmFVz5aOXzH{fKouag1EOa=psm|C8cD+nL=kX1QKsYmV)rb`bdUvE74rFB!Rt
z50gJ--JK`hW%tu6X!U3rxq8#(mtC`;-p$mw-j4Cay2$nMyvqF4_fH8ppVI&Y&)Njg
z62DO#i3xbY0#aa@@?K0qv5o{ni#ULfVwmEHEx}A<LKb)4^3MO#7NFn@x)uH>ECbzA
zbZs+uf?60q3DAKds|^}Y$_kJvY0whZXA~r0XX)?=f$49_(3%gJYGqOSRPkCFn5-Zj
z?yyb4kneb*436z<<KL2Xyu6&Hh??{}pAJ5>Lg>QI8Ej{(5`2$^$+w9e@+l1oS6T)s
zE3>$%Y(?H!2m>A}>+|;n>U@KNK@6Q{9c`O2GE-mvC{S7r06(g~srB{kXE6TwP2({_
z-oNqPD?)ln^c81B-mf<ez)a|@O7n~5ODOc4%wHS+o0rEhTPd<GPk!HEH&gm^{-UYa
z8J8O*@Qrd)1E^{*PduEd&NC6N3K}3)&t|k^4X`+&<u?>OUZ_kKBYH{6k1;^`U?GP&
z2@-H1Iawv9++0xo%z8l8)wNkcQq>7S%a5sVe{6D8@Hq9jD2E8(6;Z&e%m6YrIN97D
zVgI>dl_wY%F26!%#?>T<uH#^=a6dsKG(XeeN7qU^<&K~BV_F?ZH3=rn>=QhYYR6}x
zhYWd&DUt;~eILEP`-sA+omY^|A7P)3C4m@yf4QR7ynZw+(DH<Kx7+;dq%~?0P2G_>
zDrpgwS3mza=T-Fj#~xF1*)y+9-x<4dwf?g7j@g8ggu&{wV@s3Jm6zmHXbbNYzV<Ip
zuIaY)5ynL+gW2oEl|B6LT{mi;#jy9~7myd2du)Z@rfmg*w|zIc)~$A!vTVTo;ORCP
z@c0L%VcA(O5$)gChE0R()t6;1uxi=;R9?YHc9rn%diHpd7KbSKj1d2N9&H7%{D&gj
zLOy*>1*&mlC!o>bCJ%Hmy7XIYWg^bU<YLo}oUDp|FprbNm%A|3oB7^&{NlpXv8D{8
zU`tBmMv-iZOCt|maIZJsiX`yAxyDkjuk|gdD|U5y3Y4kaB!Fx+pN{J_nK~Pd06j+r
z31u_D>*bv&CxL&EZ2EUm_crEQVkc~|1zb0p0VPV$NYV12N{4{jU7&sB6_#b1!q}eP
z{_ICjL2@R<Rd8M%VZciZs9%7wn8xq1+zIw(ad_58x;Hiq9LDzLu-8|x)40}y3WVJO
zNRMQ~`~%XJ&n(W?WkyJ1ZW0fsf?Kog>A5U>mHlIrpLk!o^s`4NG*YBG4Q!uMq?;;B
zo}ZB7en&Q`_~I-p?HUL&o#nX*Vc)Zo;wtUd`10pZW2XIW!!e9466rx>A;!U1xuwY7
z(*oI3p$-{J*!Ac7IlSx_##)6m9gC<WhQUn>clC{EV<{a=6&qHW&;d_7T}q-2VYW9f
zai*AaM@VYI3|B0ACCf5=ibcdGDH07q{ATB>deqHSj9{;ANz54B2#Y`}S(JbhQMpsE
zt;AA2eb(U3U;mFf>-A{${`1=ejzteVP=}Tu3C>KR<w6<!SI{CYis*t|f)wYjV6(~4
z)+%(5So@dzSjb-{j%+jyj!vNNg<tg1TBL_vrR5|?_@B<hTB(o=@EA+A4$QH!2vT*=
z3{U&YF^Hbb(mG3IyNc$z3~;kqiM}ulFDD=9=W?c31qEnumZI+LbhGmBqL`uhz+$1?
zqlZg#`C`_)eW~Icio&>hIiUN(Gpq#z;_k5SM4I!XiaQ<ebh@hwz6yga^QGuIiBtU>
zm6=WLfa$EBz;Uljkb8LgoBX(CjNFCFht(gry7hLTn)+MY^<IM*#7<C>SH9w)eWw)-
zcH;Np@232fV3IDeSK)Tbo{GqTMz<EKyG;T7+{|u~con3*tp%)-u<6IWt!1AR>GpZ;
ztZ@z6`|<wCOLwT{TTf|Izg{8ywHiA3@^Uo}-*quN51$V&E$kKYd*dp1R~aq`?bgF;
zBB&is19jcX4QH@&>|mg6Oz)<;sqQ)Vc?lZ$qf$YQjz}g?Fiy4`kR5Ww%a9d7Qte`f
z@{syAIpNktC2&o~JRRZW86Js~$*yV9FMZ}ck1M8D=VQwlA>)prA$;GENFC2y#_gU#
zdGJC;{e__>e9Mq@_(g`S%NBRbpl|^<frjGU2pQZ)hH{BfNX*Vqx9z6&;ooNK%E-mD
zOK>Khi;!thx$1(ms)_!z)dW;Yyxh?TB&TOXR2ngvP<5~ICu0mzPsQpLPW&SPgU%$(
zHKBM^Fa&lYuwF%5(>>ONeRu-s=oyt1U!$vU7A=PlN#Sd}v2b2ViK$pm!1GU^;#zVa
zq>(=#Fan!Gz`G@?68XLmZBwpbA@m~yWL6YzcM$pAoJ`wD=BsC4^AF??&fz5HpM6IU
z)#FAb#l7-v>HJ;}4bf#R&P@)Tkd9A&A)r1pa&zX1elSHzeo33VzrzdE61F#J(3L^j
zM)?#PF`$(JoT^EyZw+#UJbQqjUo_QT()IKj2;^H#4|CbJJb|Sn?pF&k?9HG$jDL3;
z?vxKFk{_;A_6OKoWTBQ3E}qa=Wr;!k<&%o$@i;s=tS&cjRstsNvVWx|w>kGI<KFFa
z*4^cXcsh9K(#cMlDywpNP5!FLMXz>?V{%1GldGCo7cu$S7k9tlQQE~H>oGUQlxaSu
z!U2E4|3uTqGIP()kN^N&ME?^_>;K<2EvEmDrmrzKoi^G2>FNiPFxMO<ns#p92QS>z
z&@f}lqDm4|Iz9~LOUw;m0dbI6sM<c>dc)CmN%pWY+nTS!GePD$JKUh}J++C(jVq9K
zrfgTCzI|VP2GOjh$RJapMKfj=Kk&1tm?Ts-%lx*IJII|tWG8Y?TX=~V;>`&#8KWsB
z&PN;(6;LXoGHv+~+3NV%0_wYah4>_Lu7hwB6%l!gCB|tr#tg+M3;9D@7C<1Aq-2LQ
z3WTKCWNKL-q{WaTfd!4FLIH39+?j+I?ST@q*56y4$)e?IPnzTcHAk3InO5pBLcUT$
zq8wDGN;Q0+pSyKlOC}IbddQcsmx7%yMJ;Mq!h+u|s$Ie&6V4J#`Aw+|nb?2Lz9X4e
zzGKNM=l4%EuTqow;yvuVyQco#{y|}&@qu}d9d`jcpc(l#xu7o@%+t1qh<5a4eCCJY
zgD*{nq(Rg$3_{YlA1xeS$WGt_IHqY4Q1oVO#^-t|P-E=Z3Ge^D=k-HJjMlDRJVahP
zJGQtmXX+}B%1K}-4lFPrZw%V~!5xQPtFgB&1e`{)gx`59jBLF^`f$k4<C7E1>nvKm
zbY<Z?DAN_PMsWyiQsm`xV0)b-eSf?7^118(OIohNl(O}=oxOm>i`X*Wtntl-^ErJ`
zGrcW6UY$9Z2H7RMDt@7z_8QAF+%rol{}t{4&_Wa!n@pJ2M@<6$yHg~7c7^E_QB%>u
zbcT{|n2FV1W-CF!B0a5s#grnnuMb9~XqWSq5tR<*ROOhGL6O5>q>;fi5(plgfA)c)
zNHgr4FUtojMqGU(w2Ra)26*HVWzdQ$A<dV3!x)lDN>%+98mUa+7?Tc65rigqqrwoL
zq7D=ww3Qc^T&66Fyy<=!qh0!LeSNNr(>Q~@a#ilK6)lh-T+WY({M26CjF!w+eA_&z
z+%3H8Ju=7rN&Qp0Sr1D{+eUi2;be_U)9K1(2Q3>D<>;@lA2pk%k7mH0?dxf8qqfU9
ztSTQold0%Sv(*N!G|W$cvxqR@&fDvy!o4Tl4PP6MH(%SX!wqa&?w1asL%hT5c_re!
z5COEkw!U@!`6p!1B3~daVR4YIvO_A-(8WF}w8hi}76c+pf@rl6<(tM<8v!Fk<|BnT
z^(+I5!*STQ;(o$BHZ34JkTQ0-2D+NcYRGg{WFN`<T1eQDj$NP;KBHX3V#iP8>9jy(
zUKd|cy#Xj-%0hMyIHiblSR`ylTQLhKBuAYfTc4JL@biu;Q}X$d6AZlX17TaS>NF&!
zoElDU-~!)DDm$Lfxv)jVEr9?<_<M#e0qhdn!gwE4dm7IKoGD>5T#7Ov8KKC4m1Q#Q
z37WP&p~5+?tb1rhY@-3*MkWmLv289vpbo`IGs{X%nUV|)S@jU7{Yn0#*b1jLSyr$n
z808rc@r2Anfs66FO=r=(=m_(pt%EBo`6$Ixw<nlKD2<XNQ~04DeL%f}*C0{QWnepg
zn|ZUwu&-Wf`vUqLZWHXIt@(DLulge9ZB=9X!wl6Gz5qQ=4^;wMD%BQ>!qrLidE1!G
zoFqzwt`iBPeuI8_%%+kH4LPdU$N0Q9QTh3mB;*4n7hR(XrQ#nU-F2~j*k*i{+PHD?
zX5~xty-~vN<)*_U&lWo!3QR{`0LvDJu#MNn^OZ8KnTr6viU9%lf5PP_pFNUld=BY1
z8vw6=SD+GmV<)aEZ>LWeJxj|oe2aan(Ka5<QdxDeNIn`Mo1|0aUKKK%6=JENK}q(O
zxu8Mmyu1>-LC(-s*693}s|kxXP^_8^;pXe2`u2#}UzO0pfBqEch-P}@qvLV;=F#NW
z1m*tLgovtcmaT}CR8&Ba2scpy_d!g<AUZ`BvJSAlyt(YllN%dcV@(;EQ8UvEuyu6S
z4Y(RkfLUfb)sTShrgHx#L!+?T?2Eun@~fn=3npbWMBmMn5kKR)K@;?YRR!$UpRXCF
z14>OJHzYCCbGs!pk!d^o@G4~N<C|(IQ`BL>W+J;lKQJqVSX)e>rBZVL*aPRIPvxem
z?00KUx1GQUxQiLUJG>@bIHD~hUyNAbVxS9fAuE7vV1nH*m9cFCUSivLAlY_>W%Z?J
zPl%TbqHH$;>Qk~Xma+0Q&Jh9%#TZpLl8jAlh5cg%Zf;~~Xf<7{w{#aWa!V3>o$%u-
zo9~kw4~?A6ps6+&)l)1)W@avF;bj6bNLZ*Y*x6nfdJA|ovR<uXbqSP?s}dM-b)#fT
z6{c5sLbJO9sn$6Jh(RnZ+omyclrd}o%dRflP$Ix~P!MjaBq7Qy#XPQGMq+-WPR6DR
zWp#zD?2fQW<lkBvl2dUj;0hB*hA_hchwUyImByvZV4SpTJ~5%Gp;$R%np0l(TdW$y
za0wh=J~qPOvtKY!=CWAU+5oRNRkOfbV_PjXD#R#n=Kw)_VNQPT2{TrGNFl?G*k)UM
z#*1?e?r-oqwcS32XWO~ihCQ^84*c_f5q3_Cp#|HvjcwbuZQEI~ZQHi(tk}tlZQHhO
z^XA;Qa~}5oh&ig}sMdQ^-b=gS>)eO1Yo}>h_wYTj-M>DH`IsWsdAOf|!9KpX-z%dE
zJcEtW@%`zd+pYA0yy5kA|Ea>eN8|<gcVvFA3mu5`2}ult=eR7#uQ+)zcWCL^HG5k+
zQnoYSw-W!ZGpvBXda)auAzWuQD&Sa24fRL3Axn1VqpjNtnm-h2!5}P&+Pxk5(O&=*
zeFnDzYLMT;x-6?J8%ru6mx~=`q!+&I%#Pb@yR_sdE*GBSWG$(*V+CU>ANJQP6{GOC
zM)<vcN+}EnH^s;d#~NcN!vp!Dr$f@c{*S|pZAw^Au;#_r-b5i%$3JngcX6@Tl1tV$
zdO|_Jpm$|1L?mx9PFEMCHX3^WSwU+*LlOGgIyfB3MG!}CAK`>5$~>|~pA%@oaP$(s
zFVN$G0N>?-g}(`%4vPxS11U-2_cT4`tM>g$?zF`n!cfKYtk*I;u9pBt3W>cq=mu{~
z%5|m*V%KDoEWIW#>fwdh5+8rulotfw!L>%~1%r3$qntb5kMRaI#}o#TQS(>Sm%Idw
z%3Fk1(!Fuw#(G8*K*@a`#@I5O=u{3gy_Q|YJm0%?P_1tct8!tm5GjhTOLfBW3?9^V
z<yo7(h6%M`ANC%a`|MA@0=!LUeQp|}AX;u$JvM+>w81~7GbQA$1gH%!4$!?=)zzk<
zuXnKER$IfV-TIw`yesvR@jF9=>)unuLk!rtPzzCW5B_vt*d2-^yyaFY%d*?aoW0Wj
z@B3VU!zWAx900%p-+x^Y|87SOjO?BN^M&pR+v*pty6^A<%>u1&-aDSVLR&Rn2+E?U
zR$Q50lSBU^8AY<W_(iMmTpHZkc6^yhNEJy;I4RLu2OvAlMW$fPLI*q&_^#X}^0dY8
zg!gONF*$#(TJ-d~xw!p=(XgdT7-3Hy7~7-^{1n)U2Y5C_Bt3;f1qDpQ;}bDuE$(AH
z$ps)RVtmp<DW4?pJXr`cM96mYB+$X*Kz0>xg5&8G<(j8~Aq%4qDMh)~hULe`;VJ&^
z=wO)*!bf1+9Q3*gr6uO%*<d&biXk}U#EVQ!0_ubJ9)Od8(nE}e$B3^i8{489StOGS
zOg${n+@*OOi~HvxkPCOprVgDAot@dXa7PG)vcSp}82gMT$c1o_XIWzdyjqn03I^H*
zuNCjTGCh2q>piGp=SUzggvF)#>w(!h)^G@~p-`HM7Pxoq_?pR;z4*GmSI>;$8HeC|
z4dAT&Ibx%*{w+j*HVE(D4Z!emV|LN#fsT%^z4r;Tc0LNvY>VM_4I(<OlRu1pNihc+
z8G{z|V9Q<sED8#vl*`4UwZgjNL^><K0z}fp3rzefrv#_BI3UkP<o2y?MjjHSZBSs(
z>kA_TMFuIRSv%V@V#r#Q=f#Ph$K~f`;v<D-qXCC!%F?S}A)fbb%XT;5SF#Cf(m#@G
z?)_h>>k9`ZdjfGN%y39CIV+(Hl^}CyaZd-d=>|R-iz7;)&y-{EuoF~38YS?nfo4B%
z>mNqT_4KsdpaBFsZgu`jC>+oMvN~hVn-Vw=k!v4U0tP`p*xV=y%ak3cy1PU#{v=^3
z?DI&+C<oB0?FypQaCT;q3PQ%IY*w=)>?A$C`Flrs!=o{4^e|1L&F2WPd25rZNL+Dd
z7y;;igbCAtCqfBcp|WJ<HDHNQny^VSBkN=cJh2}jMo^HDh6m0eVMn<B#-f2f;}iE-
zdnd2lmam*m5x+QB1a`EbZLQ89q=36}H3mY4K4Y8W1^wm(Mhf5hGchpSs{^0}A5YX^
zo!{pGLT9q(<14qm#x%Xtx8rF;@(+s*^M($kI7C4-yxSTEKY`iY2i0U=lZpA%ub|Ix
zr*u3;m5*zaKJMISd&yd1cj<%GEovzVP;3htZ6k=%10O>t=;m&C`U|WIn53ylj$9Y_
z`pH-(lH#4?P;LCLc+UCqHz}oi2ne(`=Mig6&U(Br!hFHFcsppsdwF{W(9530l4b_(
zPQ}z^K<lBhT{H~>;ICZM;9w}U{;m+Ksmbi?md+Xwj%(BwpqoL;jpc~LzZvOer`fGF
zhuAgwC=!-r@jMjhKp>o?vC8JGs4O(=z-j^siN*`v?V^%V7QE!iA&A(be;GEO6It8k
zRarM4-W+XcKB8H6;QC_4^sE+k>>WnIMY?v`sYYhRBWv6OZ^p&r7CUE(AY@VunyKi!
zR8Y_tF$3$fTr3e2hh8C7MBc(0%K*L#C|KAsn_~uS{6*n}3TNWLraYaPL(un+9)r{Q
z>xG`C_dN>?((F<pd%Ape6f&pp*&nd4e2EY0B%lkau{t?gvD*ko4vcGE;e8`k9eX@?
zxL(0=lb#$RsJY%0^Q_&5KRC;B0nzm*m`aVfQeIC|Tq&acN(4-i2;CPRvkI2_SMjpU
z`*eV3=cX{PY!R1{y9+Fo32vt<8sOa-ycqq_lXfCRnNH<KPjA%>!kX1#AU1lO($gka
zama>##6IRu?WaV8!^uZhb16QKno=eW6-E_JdsIDTrX|onK$>STMw$xD8_%1w=4ADZ
z2_@#`YxY|MBfcEd$TMU#WjdMwn_M_J%zD|4XRZ)>Vvbyl$(34J2v`p3hQTH1@E5H5
zuQZ*6@3JDAAmNpnD}t!Q*N0K*GZg0}_c@nBsPNu{lhD6<nORjKQP{iqlz8C%VE9h=
zJBUbt8@z*3J}3NpS18plxX61JDDz=JVJP$7*~Gw`d^rd^#oU~-R==K><ES}jM?hPO
zap1TY5P-2L0+T@`y$xMnjL`L^yYCVN?&_`;p1KZpUle)Z<Yr!YLOb;$url&^wS#1_
zHV}8JIiJf^08&L%xv|+u$09j9$g^iPNVR8hP_ZrI(+=z|#SBJRyQ>dKTP+`Y3E#3*
zvkV@vgThoFA73Yf&79M}(*YpYd7$f*pC|D&cZ91~6s}FP`?zSkX}e`f60Gi50b5Ck
ztN02ab+MSRN}eM6d1l5Z;D8Q+IS>BW1u1ZB)1UsVXV1d9hWJn&viUu8gPNTdBJr$K
z1TLZn4-)ZKvzPKLkDsc<ZD=dr{FuIYvBLvyM$pRwRiS+|s55+iYW1c#sHtUe*f4ud
zYX~Ys>E!(GSfkGyCl*Xkyv%(>+#c~67A-ZypWoNETw3bv)s=J2Nbgj;a)vsi6z`cM
zPj$5-T+_4eTwm^fBY{n<Rxvr+cEEw<B;l+Lp?P43tJSKQ=_1)rxis=RsYH8pW8VUn
zL?YQ5Q6Fm{jeHq&e9>e#c{pcB?Di^tbpSWVl0pMCyI*dXiCh@|V8$83zT(VyZaK+=
zkfK{gY1%PMovfK9-%R<&DZ<N;2ARHvf+%(YY&R`I+|sA(lAT?BZL^q6K*u`Df6+pc
zPn9n8aq$c-&7Wxd9yFKTDXkdGg-nJQQ#7ud)b(NUEewNx-cSr7ND{C?p+Fr=R>3rh
zlZu;;sdL}bI5SB;fyu`Dz>H=4>IjG+ZEmYtHa_&GqBaKL#IlDPZ3+1suNsBYSrd)J
zO%&fP^_+uFd{zf&a|T*Ul=NxnE0PGB-tBZkGeh>r=U99aBb+oQ7AkVb_@W}<Ecr)g
z7K9R&@Xovs33IW~@cN$zRE>Xq&x(l#-uAD-=yf!w81VU-D}~vDR-?OWX!GgQif_x_
zzO$j6VxB*uShiJ-G977Y=OH6?cNpy2Zdokc1Set3I#WrIFZWe#$y-|4^J5C-=7pn1
zJP?#Y+GBrL>J~U{x?%#iLwskfFV8y7<s_U<OYxsVSV+>InvRZza|XdM6T!2ZYT74q
zkMCa12-3s|ZwxIo%VX1R-gPzrMxHVs<J}b#5x_UPq^nVxH2<wfz03_NveAGoyX~=)
z-*y4c#5P~Pi)0$;l%N^=^anc;u&!sl?w%JNx<PEg(zQJTbmI4`uFJk$>x}LMpD(1h
zcO#pR)8qLdsv~4$RyVp+5v%lEZXIYhD1hB$vwU(^qOkNDdK|s>B_$8Mh`$T_&~G1z
zBnY=tCw3)sFJIg_+hQV7g%-NTXB{s;gVM!Zfb`8f^bk?<t+caMnEs*4y&|z<ru&&+
zu+e0dGuYq12YdEnkH6q1q@1B$EpYdUh7SGe;5fmBR7jSp;?O$+(8sV;lh;#K<04!;
zNmymfQlmv?7)-E4kr}c6_%p-;4c+9BYrE<UtRiybvB=S)I@0O>DD^MfaqPsaL?@%&
zXC@*m1>OcOL+R!QbI$PxhW1}6SN!Xp0OwaLzr=O<I(*b=^j@=o2gS*7H>^0Hl~B#h
z=%=m)f40Kjq;8p*TCP!ntfN%b-;u4m4b3bOSybgv0GwOSK@AjYOBgf7rLO`LhaQS?
zW?y)SZ-{ZHQ-;ck4g2mE{s#uU3)&;2t}U<|=w=O|6A>;M;Nujh&Vu`IoeRn(_@jxY
zge*82Y9x5z{^WiXrHD9oTpO@{<v^kF5@o*yn>v%PNHkBMJXTwksULjvoXX-7*P1wd
z#rCt@4W+IVun<3oDcEEptL~eq*Zy70Yau;ooTH1?xG03Vn$LS<;|tVvI_&wCsI}G5
zOr`5M3tRBgRWEXI{I5m1X^AIjg6uL^@S;rl>pCh%0}CFSv}^~`JRjzxDg2Lx+xG!;
zq8tI?=J9DehPjbK@!QHvh2$fS{eJXkfTF|D%91Fnr46f6Q{7|t<6;zh^Er3Id_vLw
znJOD+lj(#uPHUnv>_HFQm0a(WKSKtzhWk~2+&{2GXpz9?Mqte|a}n+d*XQh5Fc}c|
zgC7;-Q{RKl01A|Vsw1@4CGLfcAwjH?0Z9_l?QI_xCBQL;0YG#SvO&|S$uUUx;V%uO
zaiGV+gi6=duV7S`W1WK}eN_;QqypuSG%y}$ZiI&IdEw9JZco&6ZrfTfFAwdtjX!NU
zvb3JJU^ZlyFB=50&HYn6x@NB?vV~TXb@#DP=_jb^q*5Q%i%ATDv$NO)4$j#oO9OYI
zws#DPpi{tWHskJI#|Me?8ZNyO{d81gy2hOEZDITx5x<M~yd}}JyAn<J|5A*(kNT@C
z>XKUJez-I!oaYStrirowFU1P=%+25y^&e2*->~7jKK5jO-Gh8rd6^iWgru5{8ZHDa
zBNy9{&JoEo@3gR^u848d&fvapS=v0BYjJn(a?oP>YogFvp*yWPsKkV4a2M*|p!SK}
zg`R5qM-Lg36$<kJ%%11%pD|m@0+*aS!Os?U4=#1JxeCf+3MSPlvH80lK9j(`4m!B>
ztmosF1hmfkm-FwOC;fP`J(3LXy8ckHjfYBC`h81ta)^M7(d&@>lswo_&X|_Eh3~j3
zhPS8>sy(nKQPC#WsIjt?zLl7_ijvH@ysFf`$eCmxSmV10XM4@Vc-0=B`tAcn#(@c&
zOURjw&$ub8lN6L1!a6l6ByWBL8Xt3IEVs^yKr{7Z%^iM)>@DCo*`YSr91-nr$KIUa
z(>)I`a&E_vu|Jod#gIg0mf+C9FVqI)YdcU4!Xq3Ve_t0kt^1961RdUtCqMp$PgpSg
zWHgRbAE1BjVLTaZfC}EvafWTla8|T9|JzESC2(3Kz3Hh1m>}ezf+)1Sk{l)Y_8i<y
z{IVwYHSA+FQT?uX$h7Q-O3CWo4_NMN6buHx1B~Umz(kp}u3umTin90MA1vEN!RFvF
zO6n`I+zSj`%~8fv_WGv&B;B|lFV$|e_|9E=&x4F6+A7nW4lr(fdbX-MP*Y`EL1+Sn
zpgI`&^M4>9aKKai`rnwL-*3$Dzp$~t9bZO<|M@3(N$r0UL@>V$P@l<Y-*lTCw?6PP
zd%koRp};JNT;xC<HcZcGb4{eN#C`py&5uv=WyzRsjpPcp{g;9S%iArXsMKWsP5|Gp
zH!`u2f)%IB`|WdgZEp@bJq?5mb+2I!qeSUbR0$Tni7rHiPn!YkFQWnilIS6L;v0l<
z-7pKOb^?rLE+V8Sa42hDFJr%L<*JL1e@j8AXeSUI%VH!3j*b#2rwPdDNU{nRMVJZ=
zm6%a3lDd+P<}F$YsH71b(HtYyNSSUm42o@Z2`F}4Xx|b|YYL^Jw8%u+d?Hy>3DDJV
z0o`hfrrNnXgF0PWcP~b=VR!scJ|kA+-fOWgg9^Sg*Dq?Tk%P#g%2n7;Khq+Tc)xF@
zF>GE>dO@ZlLSy2)wuPWn6LH9hUF4{0VbyT=)@Z^`poCQihurC}Rw$XAP()Y2VoDRS
zfDJA>D-Mn~TuZ29j7Jtht)2QW*q0`1{Gu2BI~vkb0iK43PNO4Pq$9_#%HUvcu!h!L
z>EtGt*YD0(c(FE9)(G0ne(^E}Sj@da@zD;+qO3sla}EkS1xE&9?p75A?BU`T%9q)o
z)oLCL?yT|LJlxAD-#z4Pr7g&t2b#{Y?t;$OccpS0Uw8%hBq$&AQD-t?!w}}3fvPoL
zJzUA~NqCYuiB;A^wzpuvZQT;-Ro)PzEk0^>G0|>(KedI>2`bD@8{0KZwiA^u0shlB
zEpTJ?PFi?1-fa)y`u=Yn{5%p)60o@(LCn9Qb(}7^pk4PXJ8Jlpmf;bc&eUK6d-<<1
zMre$$zPCXA1~c#z9$kbNW7tFqq@8T<14<Y=x*MJh`xb%63L<wEF^_LoERnQ6YmC^E
z2gy_0rHvj1k)Di&iB7yq9ck42%c?ZYetw!YG9+F4TVtyl^S(PnCX<tOq3#h|X5eis
zOJelkjE?hwN59ZlVY$;ddlvZb4Ps5Him{*9=<cJRN_Y!T-n^^DI@RiwgKw3IZb;Wh
zRfNZ;ltf;+bHKsS2m4Ose=5?yB^OQd)1^0ho-Zst9;udNe@CqOSH+#|;`CVWe40Kf
z_+BcK#P3?w(0L+9x}<E);xNY!GS71S|KaSp$_+TyyuqSN<0ws4N2?`T@n)EPcjWT1
z9|!~%3NatHHFqwM^uuvz#1TO9a0XRg+^udEEN*&5tiXtHlo63~Tje*Dn!kVm|6Ns{
zHjW&4u*T7mEm-?>WU<h1u36pOmZ3%X28ss@x{W^mQ!JZfG?>S&_kX4V2IX<f^Y0`$
zBmb|{;Qv2j{^w~hrD@}|(Tez+Ck$9+t~niVK9sKI{m71`nJf2fEJ8ebozKFC5fwy2
z&fJZUH`&s8-{^=!M=ByAPitPVBujv}q(h4`)2n-Y8w2Dd)XBB2H~)uH^tI*Y$JJ%t
z)I*v?N<5HE+I^FtILu$C5I-$N<B^(|AcvF0$aH8t>6ps<Zw(VdNJAH;p2Uo~Udoh)
zxE~3*l5)PcPgvIdG#l|gw|3O1jt~;vIE6WxI8{;ZSaA}<3r>SdA~`;uzr+EBgpl|`
zf~MG>Rty?4DEPJ<!k+`+-Z`jX7m%`;p?1dwyxVHnv3p!#on~AVO;(L)zc(*IfM7={
zoTZ0{U$1t>4Cgui<PLKN?IiL{+wR1g63>W$pPz#xGLb=d3ge9ry&*i0c1I;_-&_;d
zNF!Bc46YQh)Bz)p7T&;K&eR%@)Os1CH7RU*wOFUt?*IoULFtl=KhB-P5CvGJ3wzzk
z?gN+r7mn;YE-8pOb+Uj{DhN3vX%7Ns*UOoq=)3L%cvQ&>!P}ACnFUWSbnCD9JMmkR
zTsyJ0eeC3S{I-iP$QUpNQ#6B6S2w={c#%}Ep%wVIf;@+phK-y+pKZMzoxQG2g!=td
z_vZ_r&ndj;0Qe5)s3<`JLKW#K7rc40NZ>SwL?>BwrBE!AF^IF6Pu<p588hKd(y~*>
zlI`9Iw*V#k7oiS=U>XlPixf7YyrW>hNqhowuL81uo;dWZc${dt)9nRd0KB8CXP1MY
zJvRwC=7eBaU)PDwm_~9A<KIUmVyAh5-0U#?;(ge#&i3CI#_4_VQ#B1Bn4))1e!{vD
zeu#Q~$O)i634qup5Ic}gz;<D{-T-kjL91F+r*DT8wnH(6mXgI^Lxo=}KH=kLUy&qN
z3(77iKLW#IUi8+qP7=;QEKb;`rg@rp4+E7%Rf`e5(WJmhpAm{3)@Y>HLZS`jx?_Ip
zVQ2B{kCy-0PUv^=v-lL0$(X>1M2HCc4R{W>T8-ofU$3vw6qg$419?R2l?$pCT2;^*
zOygwbd6wYf4#p)%^WgbHtAPQ4LCh`5cDgLm6by&DID#BATCg<kQ=qk#mKB+i7642J
zKs^AB^gXHG5Hpj>AuC?7tX*#v1{PymH(4$21x>eMkYc-$7gVFoL^8O`-FX@Fa1oAZ
zn~A*}&+t)MFhve1k-0X@7~%WclR**y32f<l5E#F=4sLJ!RTgC!?v0yF9aj1+NVz$b
z;ScN&NT0bnNrPYqa$Vt``~2c;@M=^Xm(mMO(zy+*=F-+Td{97O6U*KTc+gMLiL~&w
z+lOI9?d>ZNiv4uN?!-LqtSCv%^LyBX-x-EzBr_ZlB8dsBJp_IX`0fL^2uEu>QbYrz
zG(ofxOBm(n{=+ahvgEXUaxS@XFKEZ2=#Fsm<SSPiDw;^6wb(oXG+u^3XSkiW+#p#9
zmx4#B@N#$$0ee9*0;m#&9f;SYBuRY3-C!Z6BS0>j!ZoEaeGqx*kuCrnyfcPeOqu-{
zKT|pQa;yS?X&R|r2%<R>XRJZ0sN)?dxl=BtMo9ZEt5^avZ+V~{2wEUO@SlTn^Ii7e
zhbUExkRD2$6Z=gX5F9@MJHg6xVG;3&y6e^ZOR&&p43!jdh@K@vtkto|^69{n$1~{(
zY=L>GNN*4{V3O=p`^cFES)dWMh;j~nf8~OFXh|9=w4(77f1x+3&<&vUBwk9CD&|}o
zfF2yDEFQ={$;n_u(!QkX)zm81nR-~r5^qxDZkpI#iHurZrkz*b#vb9=xG`#GNkW=V
zCtmpR@hrOHSfdX)7g48c#}Rdw)aGqTyE(~~jgw%eXkwVz=#t)T#UUzrm5?gFLhzo2
zAOQj^&1{1|a-OP`&eVb!f52zeMFqOZnhTbQ-Eom)4h$p6hC#1>hVpSAVW1-20o2;#
zAVLE(LF5I0n?%%eS@9Tlg+|>8cu|-XNf_@j2JePb$@(0{Y!4HdZ9-AWECAqB{{WKI
z<(1g)0k}^oyeEIbVEaPVL##BIfW{F(8=>R^oq6bP2SWs>3ERUK8ls3B2CaV%<|?;-
zpb6PXS`3#m05+*NOUa2omfaNlv$u!8v4p!I@iw%MbHU0(%gv(;k`c@`=W3zTLR=M(
znOIscB@y8e;-E5goAd{{?^bXqO!4{SPi8|DYDGrLa2<?&l|^i_&R3IAD|`6O(vPPk
z`f-npaX78Jo_o{?{OW}R#*M+(Q;4a}+)ri5?6;D#d_xZtBp?=C2oU}y^NI`6YGEd_
zYMNlCkO9O*uY#&TP!Nv-_Q-;a6x5Kc!Sy?qhVXAN+n`#RXpcyDq96~`Nc^D;|8P_j
z$9;akjn%5k2vk0=IKmPYwO1J=NCDBkYNze#c)-2iunXR&f1k!pVqZD@HD{EA(MoXF
zuMt><y;VsXK9Wuz%N8(c#?xMU0zpBdra6oxKYxF_vJ^CqrYfZ)Z3;L@B}TMTRKm21
zkF$Na<}=TgkKv<NyM8pfIIMp|-`#j8l|jZ=sFDI8pa+h$Gm!0c^W^~f!$nmK1h9sr
zH<*Uz$eVOXZ}lSZQ#q2pohO)ZE^>Orc9E75!bL%cHO`G0EQ~5p(vQ{?XzW%nf|HEf
zra<8bbQcui(2V9^!zE@|Mp61|V@t7&4$-8ippGVh!KZX@+_)=HzJMdU$$WkDYj>7<
ze`q3RG)tL%qAjY=+R-WTCYbi^Gcr&sYdjsrXX&Lc!)b0+Cwev+9gEPrKLtumLMc#4
z*vi7Gb2f)m>@axFn=hhK7!>+9@PBq1m-iR28d<b`5O16ueg|`XSr7K)=SORQY%ZC%
z2)CsbTuT#45Ahx3)}^cNbmsf)-MG3}tG1+wEaAJ7=TfHX)ws#7#^79JHprtFM@QJ!
ztA2EF`wE8Jm{&)~DyToPnq+77r-bndff|AHTN6Hl-*D;nl-2@BxlL7J!^pO}{_%wU
z;6^k_2xGA?AJ4cHF_f{SFo{jOrB}`HTEzUI!;N7q?Kp7TIIF7Jyt!cQ9IfsE&zIG-
zz{w}NR%e5|2LB$ty0*kEYcEx|>-+mmMXjb?5Fkd`Fu#2))Zn=$W(o2yb7M(_;0ZZj
z;Rq7%UVXxf6VB7o<soJGBv-li8YGWz363T9_Izp7N=mKWp4)|PR{UEk63X^+`-2XO
zFiq)9$`6VPIhWa{bF*Um*&?nza6e58qMDr{T6t{msHShx8J;EfUJ6|PO=B+G+|rIS
zLTPQavgLw7V^Pbw^vV$s7Wt~{Qe$Tv(bPTls9I}Y7g>9C&94>pMBz&fDjTyvmg7lD
zr_xEWIujKlajj-qffUEJUB~TlO`@z?v3d`-@;YLSe96oH+?*v+-F&fGjJ@iGZKAi7
zmb$~}HTp$2@@6hkR5)X$8<m2Oa%q2{7d3>w?k}4oV>OiSK6Qoahnv{l1&~9JK*F%_
z<>K(JCdD|RAIZBS5ELGL6)JU1a;5?`6!y{hnvGVMJJae4_CiPO32et>^TNyZ$o2D7
z)qW|&KONa&-1IM*LgZ)sk}RROlFRo+V`5nXn#_TTftdt}pzD4YRw@<rO0Y1cKp4)k
z%loMH%w04h84D&OhdRYMVH4BbRm!&0J+*Dz->VQ8#<O<qgKl#~BwpeZoQiJ3cv?m-
zjuTWL59+h3IP$1PdLZkQ#1~)C;B(e;Vjor)6?8{^t+8n9rX?3!LYHI}Z3=pYQ7#HE
zPF<8sN|TH=k-<dypb4%QQtQV0arFw12?!hUF|0n!frO9hroY|C0AP5{)H0FV(K=+5
zCD|8M#dG2t+77~|=RLv%V-E&3oGZjI=B9f+y?M^Xl|Vr6CYj5EehTB0rCc*ipgXSh
zZcWR0nnIRAhkCbU#2Ru`ZL^E(Xf&|Sv}}XZ@ZR*;Or#Wc3m-gk7jILLrEOyEjogN-
zbva4o#<l*wh6fSyT`Y+rZzd5Pj%w{vu>sU@I*wkFUn=twnYrZOYB$mykN2(>vzhl?
zCBw-}iT>j#G_`%dpz!bhchEWXiraEil!?!7Ccn!?AYLTjo~@XVNT)h1V^jDapQ1e~
zZf>9JU@AW)NQ=cgpB8ahwt$Z9uN?05%L~t|I8=L=^oRQB4aJsv<0o~}()+IXc9R;U
zPowPfN2o+b?=1JET4F>xNnp&$wqQX2^>f2>^njWhJv6FCM}xaWXlNTK{z}Q3M7B#v
zVcl-@r1hNczKEO%%^sY@T1XXK%|Al76rg0<-KG}m1<!gaizln*N?MClR+W7N-c-9G
ztwC%9J*lsWi3{G(O>uT%CGU+Ob}9L(K8qI@<CCS;S1gNpDI6hJJD2reHC^9)yyOQT
zf-TH|^0TLJP&pHN3(=tXsF=a+`lwMz(RnKuzPAJVuM7(Mxt;iJOX;>}w`0#!&7Lo%
z+0T0a8zUf=Dk~R22LNz4`|nt&y`zQgf1wDjaDPSBZ2v<M?8_04El*fvS>ee|J0uS>
z$6iHTS$TFvhZYD#p+_DjB-<3<`Ss{@Lip$7#m;{?X0svQt?FDtM}hV}x;Br(amvhl
zpy|p&)xR8$(dUSNb&VVv3XNGv9Xvc3Ii`~Sl=uq5nGTVR-P3V~6Ws%HA07fvS-8rM
z==@5mV}<jEIdPLTcuFuSSr`y&iDYRu(O_G&bcB56O^wf|B(qVBQ<a02W%{#03`8Ki
zo-8!u8OVH@WD94be57pq4g39}8GyoXhDb0`@mQYoJ-EabZUbpC>kbMB`o`V_Qjf-H
zfXxpW=<DrSsQW?Q%?7FKc8VzGKP_tAoSYV9^<g~lT#_y;M!25_?c0+Ku>>EsmzUuU
zF2x%dNoO7mamcpDpbIIW52za^>5nN{Bbx_W^EEC-yWH7u74@HuH&ido9vZ{@5o_W6
zR{%LVadUrs`8r>}tnK-{Tb_U^9cCWz3dS+%u;K;;3WcJp*(3jEj+V9v(;+#ELf@Yo
zyL)?k-lrB}vP>0l0$LluFog<o_ueKDYt$Pk2bw3;>Z$I%&5cCugxSf_^TX)j>NLjd
z^ToS?|6suU<NN>~7e%iOycA5qfcdeiG&_690M~xuPii;}4V*6UGzx-Nq2mXv*t<yx
zJI@^K+$DpK3LG|OY2oIV?@Io9??^+}{o^c%t4GjS7)W^&{;O(~^oK&3k>r|~2U*;j
zkW3y_du3O)RB)WdNt~lBvw#z#;>kP1j^72u`<oPvrNj78vsmA2Jb$q;p*8}%8?rmk
zNWZH-GG>jUsILIxs%lYS$@xK*5BkF@3FpVn^>(Hh#p5l3S608bku))|S63VnX*FpN
zG2r#dJRWhtUWpm<8b&6OB)23p2hj=sO}HV!K<m#d>$h)WY*s3}7{~J|6b3ryXOl2~
z04xtZR~`c}!LK<(!*jdRbyp{-4zZ~o_}DEGERbe|Nv@j-o20QP|7SoIlo5x#eBYBV
z6BKX?1?En(SOF;8vjs6m8U&Mem0M_=vR>oT3lx_d;B+4dJIj-y)5;DbAOeBDV?02j
z&ac0+x3iN`u)tz^Gg+Z*#cbeV@1id&XyO1GWS!k=8wbCW_vG|>GV?{8JTYDzt#JWb
z;~{D3WVf*DZLNaSht|rM(F#sp{+rMeZ^K;<tl-%0T_R|-V_Y(<6AGG5r7Xf+!MT&7
zQ;0mr^MG-Z2Mv9DH=J%rJ<IFx&1v4wV24FmvX@87&Y=EjAdtlsd$Sy{qc9`gtFI|U
z)E!otLchG1k2^IV^s<X<)!1hB#0)$P826bN*0pD)CnRt7Gqq3l6UcM|vJ14z=$6Wt
z<B3S17Y6P;hyt(+?E01ndu8m%%P{(Y999j4DpaRumZsc%Eo+Y-9A7S`o8QW32bRwe
z#?iyomF;zR07m7^*F#KZv8V1Dl){xT9h7;TX1XnzdP{yfZaWu7xAHnpOU9x%vWBp#
zS0Ic!cJ0pI{rmcHAY=dp?k)R*0k8~lA;JbIjL05=%>Q*K9p;3~THy{%C=mVzK3Oq^
zjH}L4>U~?2H4dYOCqsz|uy4j7@VQ}7ASl*YorFV>bpg$yL|-Vzx3Cy1TWB(pY*S|A
zC&1JE)-bQPHjRW-elLs<)rQlj;MPEH#=K3qvT>M_?j=CW&z3Uz`w-J>k4c}37%I3G
zs5*Ke_)LXb_;P_^S+{fJK7@1SKIK<AcW!lKsPauSp|7%AqCx0N{t+sEJk_RqJ@Nc1
zjRweiYnImnY`I(9Kn@N-A4u8J0W>xR67)?r@}%G6Tts_c`kQxew=lf%nSWL52|%<=
znt+Ouql=4UTum7Chl9vy(j3Myi3L}HKvKtTW$o=fn^k0<SmC@~^e<O@HY!xjK!Q!S
zKKC?jH29aiMG2D$|41MpyL*2VW>{uJRBGurUqLhizUZ7fq=aXwkV^8{j@Vi|GlO$r
zc9>O|rVadvHKEcXR(jVcgsPTY`>~GlQZ;Xm7yw5k9o-?#xIfq;7;H=_#D;B)Z~!mO
z*q_}h=>1jvYLB-CA#{7OO+!`j3d0SQqXD_TW$6jKTfv5Vd~i!elPSyUQ}|)?H%B8g
z7T(R%%SWAPe@4gXJdp2#@g%klbgSu-<@{g&A<%;q@(EfSk~%mhU#d~3eL{n2siv*)
zgeLsD3*18TSKr77gA?TJ!V0w#{ArJ>S{?Xw6isFe_1#{QX%Cl-ZeJ6O@3*SvaGkB@
z1QpFrUACNFExWQTj-1>Oi^*b_U<(%KZ%rKt4Ozk{WdfBAjc?WdaA|HmRxEcucfgL<
z?vKX!dFI|G_Q9QFG|%>Tchc%S<+y^Y40Bc4)v7bE3%(Z4Uh&@`c_^fVG-+H?+<uV?
zg4?}`Js*fVa>+jo@b!Vx4$<wAs3|6lO2Ehy=DyJFtao=+@0z2QtYv6p>j!O>$@w=P
z1ovgsRU8<YHt8|z7-6l66-U56>paHVRw+utd@D<F(uMOA4OAR5b~rfrdYvEko^Q{%
zWY`t)b~()n9MWbJ<p>&hBi^kB6H0U9F%jkOH<nhi|Dq1XzSOYugg(2f?C<P<)J)rE
zu|ylwSVpDqsXZ$Cdoa;{``nW+d2MMKPvZ+WTUEhX1rxHXr_R=6*z7wD=8C0cY)}rt
z2H6jB?2C#5olylr`va){&>3=I`)D2Mu#epIt?MSg6#k?oB_Yw3_6;9BKIb~NzxQNk
zC);y&ZM9~5llQF1p3psZrL@{PEuPf8>Rqz08Xj~YvKl76#bgdqv+V`BCB?$abK~S_
zw<`0!E>dZ(=~;tRG0*LLgrGjk-kbcZ3oei>-pnpj3M(6DMcbHSEbO@;!C4u%dIB(t
zu)JsOJ7~rwjIX6)?&8E7j43ri6nVzy_iZHh<P@0L`DfoQ$F2G*<GR1LSna7`fE~PC
zO?JGo*R@ENrBiEmNb@skILVI=gM^Q%T`TUkX2rNBi`ubc22dH}e-l(A+I?Cd>>A*Q
zdBl2csgvrPgj7}Y!*6R`ui<uMPbkR_mnd-PZpo5YOsNi06?xof9;J+=D`)6Q{W4K0
z^>6GEdzLYZe`E~S^Jd22yuXD-v?V<M{mb#K%*W}(w#|D|=K*W}5jQ2NZ$VTx2j}1V
zt>QiZT{syZ_aQq^wu7u>0)odNV0B0OY&7m<G%{1}$TrJki0?mU9`*t?1Tn;LY)xtR
zeGV|Y4b)<7C=(fimq(W$?c6#6t3TXdj=to$^`&dr(uI|HC5~yoM@aWf<J`_b;H^TS
zsc^|wcoNaN1!RZ<OK=PKL0P1S<vdrVl2f#Nu5`lS+R^xW(*vbp_a8Ii^?M#ktz6QC
zQq^15r{QrU$T9(wB3!<^J-?DEsRAOBwUw84<MjG3oZ?SItsFK$bp>xvHjX|g-djB2
z?vm&W4+%-##D_vZxYfR{QmT1DDNqc#VutEiK|-(+g>Z##-xSyw8;+&6S{J}U`sXSA
zKbjCL=fd>&W{B%xc<N!#dnn#K=JH(BgOGNv*^zno7w0-VUU`)6!_h85#RyXeVuFcQ
znV^b}K{B$vg1P~w+F?W57i-MPIn3f96AYGoaLRXUse9doqTW=3jl{Rz%9Fdk7k^z{
z2l_f=2m2}p0rN`Ad;_w*Ulpnm6;R69XFR;Eao#ly!&SLSV6CVs<qUFSrvkQgdTZfT
za3zI8Ks<ZU+cv*l-PH0mln+En*jbCe^_V=|+$fXKU-_;`UQB)RTqk3_I6Bo8Ts$+y
z7r*e2or`afjFxiBIp(2!ZL-ud+sv36;_mO9a)<D1!NbIF;A6v1S6W-F5_IktO6O}!
z5>BktF&R<SKtuGjL%P$BQ`Ks4_!(kxCdZ$AJ*E-RBTAkoVq#K#6yn_6XntJ4*tlSs
zI~CPGc6&1aZ0i;VTPU<mGf4Co>Qs9scfc-OsRGs&YC;pl4-18bS87FJmKkvTd|3+7
zrWE&lO|BW-IM~E(T!pA;=ce$6+=_NG$~^|f2z{kHUS0bd2B5O}K~g;9eLX(V$NfBC
zBn7F3A&l7$Xjh_o65|_=+a&e!2ZQ+06tDF6c~gy)8gHWXc>d8s9N3cdBg_0te!zB{
z&EfzW8JYtk%NYEpQq{7&F2%>Nh4O^bdhUz@ny&3uvLR_cb(VvxGY!JmSk;1`W?5k*
zAp_n3SF>!g7^;iJt9Q&-8iWjC%l@C`qo2bNsp>#zYFnkr68-9VK-iNrEv*6dyQrd;
z(1Oqf)aR06P`ws8djT*Ha4t}xBj)_*m>N8Kx1UV>#lw=0WM=DDzB(Q0+B;aJ6oHGg
z<YWJ_>~wg<F}5%~pfRSIJ9FDCEoKlpm17RG-sU|L%gW-ma)FOlf$e&manEW(c-uVb
z<!NrU&t`;*b6k~l#UmYpGt*Cf{0^zxog>2A3k`ig!Qj`YDA@gHR)jWfegln&m1(g3
z{eB?(cv$|S>>FKGC^8i^bLLDz0hUEF;@}_2MDz8zbtoYBoTx~aHq7fMhjD)ea|ycz
zO{hT_%5-WhD{oX-x7*KRHiHINN4hpG8I*}U(=i%6y^b{^<f`&CR4U&A^bDV+0|H`+
zptr%x()4iZm23LUj{T`3QD{Te6Db<qZ8z<c@o3a=wSD^o*NJ|BPFlM9N#b@Av@`*;
z_Z&<Obs1&uPq<<SzH`6%NMJX{Y82*TN0H-z!f3AXKTx|FQvQ(^b8SA!CCTj?sK&W^
zYT!KE3$vz+Q5aEawTO6DvOr-uTt=U&1ukYq-Ac*25wjuKN3gErS!V8QRS>1SQfsh1
z*&=&pSL0YEbQ5G%a(J!r`NJ$j+|#{%!G1aZen0>Zg~a23=N-~MQ;qW&e}b+D^8~ao
zL;~KFL>MPjxf;`Vk7j8ykWv+7_bsK8BR~f<n$&DKz1qrSU3D|GQ}hE^9civjl95bW
zc5ZHH1DVx9!pdRi0~x*YwP$sw6x}*UhwiOh!S`A<n)h`FtA@g8&BVKs>fpB5k*0%?
zO5`e>IcK$AB(&M9vkBEXC?I>b&JnJGOYMiWi*I*Pbw}V*D_V}}-prBH$Ktto=oPY~
z5S}a%Rj&!GRsCp}Jf{VbKjAndrG?G(=mTb#;P23`*d&m29V5x&rhy8mb_SxJX&!-{
zirE<G+wYD!cZP0PS@%2ri?xcKR?f|BDJ0n~OL~roZJl@;hDGHPu`$`X%0$%)uO-Ai
zwabi_R9339xe#%~>FgudSf3Rx1!*{@4WJ7T58g;JM2(ui*zc5Xb95Y0;<49zuL@f`
z#bJPq*rz=L?@eGiUUD72=!(mSo3uLV?lbscS?*tb(`KQaPf_P~{d?1dR}cMD>tvZ9
zT)C@2kVp3BanlwV2|<9ENN-NHOb~AywmW4jnH$A&44B(1h_y`xhV~{^s-wR>0#di)
zWp(4FpPv$6!11SiP#uZPRMM3OsC`79EhGA9fQ^a!Ey^iop}_7*CXQ`33uN}q>DY_M
zkjG9@Xm!w+!r$>^)+qXnQzaSJaeW{#$i`Zk93CvLB5?V6%N0P1tUr*?Q8!*iu?^lZ
z4D0BL1QEjYQUx;(IQrfhhg*T*1P>^y7zjXegsmW9rFfA9$Up0a0DM;oqKAA0LexV}
z8)!}{V6bv*06LNKHSHTUJw+%wdR9+bqs@o3JuyzXK0IYKYl4f3lY>lShV-MYOCpbj
zY4gg9X<B~bEAELIL?<LIu}J)$?E@Q_66)cU6aG@8W40$I{7s2bF}8$eBF43V6_%H<
z+^lQrpM(KP<RN2b)~u4LqPbL3xv!=pO~GH2>FLpP`QmkD1L*NiP9%Ehm+&<K?nzYv
zYWYkUK(~M@^?jz=174u@QAcG5uL3Nb3!?GP4#UCF96QOE(}5xLb}YN>9;VPSVzH_#
z##brA$Cz&^t4QdELUUPL`LJ66nsWdKaGD92>HHJjk8L<SWUjYH|L01bS=B_H{DJ~p
z{6d|MKm&%|o@IzWW-t0oGd^<3kXKMAR4U~!7T}wJBWlUp*kvT2y8zuF4v1WuAJTB-
zw6yWWycxicJ`dOo4Zp;KSzhzlo|%Z~E5T6ahIyG%Vb`)_EZaNmM8tUc--eO+Oubc$
z&;YJl;L{C~%XvCPD<%(U5FkT{Jpu?JjLx96h$p((VI#sQ#s&2ehG62$@F|q0(*-t>
zOifpv6#k@fzdksr-4(+`0{sJuDSxxE7Pm7tE&YwCa#SH~LE1^7ID+wlb=|lwSQK-Y
z3!9ZH&+S7zahlcfjelbU&r{=*UM5TwZ#E}~D{@3DHkPedfO+SFFy1&3yfu^eX_K?`
zs|xD;z}?HS{ROZgA&Wkxo1K!1ZTM>Si9V3Gzn#ff@?*W`%3h=fZ5l{54O&Dxi&k5;
zE^pu@PTk)!4aSEt1e+rQd{W-@hT>R345p>X2BuR?=jc?eBf+(f?*e|TwB%ptWOY>H
z0Ntv`Tb>ykrU)EuGl;bjD_y5(@(NJo_E00$nQ#kbYfzivOYPPNQ5zho!%{>S{B!QQ
zE)8jBwBoK|^}_wI>*@%s5p2NKQ@rW|Ic6=D*0VvKu&ooZ6FST0{?r$a_}Lv+yN%Vs
zbaja?lp5w_CKAhMvtFwaMsRPH&u(efH{<fxUG3fvrnd&}&W;iUAbyVx|MX5@9m{?E
z<9Ls^4NO+*>h(rr|BYSoLx9DpOh%TPs0N}fI6{#HN51miIr990CZrO(FC+>0DI!iI
zkLlt8PhcgjPPaANNd`W#O>G<>T2&LgRAb87OZ##+v<Hcb@wrz;_-=wr;DPw={8Y+8
z8-vVdu&50EFcFqUKO}rcUq9PX5|b`PT=Q|$yD)i=$$3|Pg9)tqQy46XalC5E$<);b
zy&su?exZr?<yKOd7QUFUlRICYH=QMgIWco2rTvGTxw4AE9z+@kU(H*cU8r;%3Vob~
zZXaZ5wQRKfsPwV}k6XHL?Ga;pboc#1lXX((g>zz`A0;}K$8wY}p-De9nOJXLE#88o
za(ntXcY7JFJx@)%R2U5&O!gIW5*qoXg|B0)=27L{jQ?rsSqOt*v0)}TO3Mf*@DXGd
zCN$E#7F0J>sURUw8O`3D$2O8E1{>jsptHjfVud=U@2N{kl&c#8e9Er*mIw?GnVg`B
z-`><;;C-&tOeQ&<_R)SNM>lMYCQQJ)_NR^3bwv16gwEV6cM#9_Y;$>geBisyAE!$O
zeD%bSjHMf{fh5=PzG#a5IttQPXZ@eB5@@RN;nNvs4Pp(GU8Y;{!Z8gZasOu0tA)Kl
z@*cLLxSXhgw9(|WJD$@AT^9)V@ApiOi3=^*j<x4K!>{w9Fh5TQ?;-vA7ZJejzOWG<
zRJ)iSRg7Wo{145ST)g7?;V!EhF-nEeRx(k2@jn|nRCNAD`L=Z_PYt42<#NH=k*n2Y
zHvx1R`+y#&4d5R&2sr%^45z5wmNkK++AanmUJ{i3);HMe&wp1$vvC*pG7iY$B<zeI
zYSbkbB8nG0GQ&}%W(-jpwz;Bs>8wUtoRG)DYiSJuk2pcB@ji2-h|&0@oS<2w=7V&t
zf(P>(jYl!<>HFkGj8$ud|JaL}u0X#-S?;80J4{=Y_tC9(5Wl&>Rt+Zq0X=3#sC8QZ
z^Q#be2OR@LY-TitLXG=j;x7%?KRvK>bG?WgKYGKNjwPKx`VvBIrxZ2`pAGFpGTNeP
zx)H%PswB~volTD6v}MXfpN%#2#YJ(;@X%85cZHOG9h}4tGu)7H9Bz$X<_WeyLoPj-
zgpSNM(TJOt_Yw~hzCT<cmzTJnk`6+ACyg(Y&c#XQKnDdO^yBTx*O-pu-m253+2JWb
zPzv{(0*+oi7{lPZxad{yfWQD1!z6F0lvIOeuD~9gm&8O2DIp=cN4sM>&SY&7%&q@+
z)A|AZ-^=;_C#YO)Z~y?yU%}~rfggV}ex}C%8Fxxi|Ail$(SC6!hg6{I!}VC+U0r<#
zEdtr>#WGXye?i*?*dSfAh-w=15*0NqM?E`E5|XJVZFir9h%?wT9`3L4^Byh0I;~O-
z)w^*CfphddpQS$!_K$k%Vlc;;(rD1&*COxW&?wr+R8k>0y(TyVyqprPW{DAYG&uSM
zkw>@wq=_N%<b=rimIj7}KvBVFA$u9T0I%7{b<fT5MNp1o6tR)5!KiVVbvJ+$D7PSi
z&N)My(m-I?HAJ|b5XvBsoghkj9_E*SJ(`OZI0&S1Co^<qO`{|!lPu^MG)Ie(HfK=f
z=k)wbN9mQQlF(01vZhRbdvcYAgH(8Ou}dEcvIUEl88h?Txai%H20cc1V^j#`!RI<M
z!yyyQ=j2?E9~NVR+!1mToIwe-?t(*>KjD(JIj*g*x2Mn-e%cn=wm4T_bx$sy(CSyA
z)su%o?x2u;`ExqvbwYyr1WE&qP7@gnuu-&l6zib81b%`zQYLkVwhOo3I)Hy0)Q*S(
z)`AYAx#e?y4bBf#&Pgl|YPt7@=nwKCaKZAhGX@K?VitH|bQME?K5qZS5y%$Zy}8tX
zGW4)<DibcZB!`LLd-WM!A_9*TFFu_>hC*>x=b;-xd&I%aqh|ANaxScmFjr(npc<N@
z;b~drgnCRu(5gqWy!>NVs33ypW{7xG1A~YBvCSkiW<uamUj4W=LB1mZl2<5;_c8lL
z*J@=*Xs)GWp|cq0W<;<UA_#e-zr5f(6d}l%rI<Z7p)<%(fYMY9D6Jq(!TP=@Ij859
zf{d+UsX%)&g2X$-AC2hynud!n_=n5m{7-SfZX<>mp8)hxM8A4$%7t6#T6vy&^p`Op
znIU;LZ?Uk6!(zyvzTbui(VlV#eHtPjZLP-AsvJlV?g26akamI4b=~d&wojlK2^wqy
zLc&B47#aOB4<7v&_rMLK?B}ir0c}O8mS{*>KQcWa_oO71f`eQZCgTUSfMC;(vFVf{
z_<-UGi$U;Qru`-48MHx~)gV;qS(OZ?$8pI}-$C@*Qacc}8KrO9!&5WYxx#q>b@=r%
zY|;*`yf*EH5Bqagy1Nej{sD*4sMWh*9o7OLi2q^#R(#|TJ)I?1AgbYEQLFlw(722o
z_ghI)6HLeV<IRB0B)jLCuL=3bADJj6|6N>$P*Lw4|8^jA4-y4Q(D)V&hCAN#?ag+7
zTl;0V>ffyyuZ=RDA}i5hCE#C8ScoP|0e=<Xsyfe-#7Tek@)ZxPA1$^9-Q~!CthnFY
z%gf6c*4kpCB2Z?PnXAn)Sn%l5S)EJ2mG$Z~V$vh1`H7T{;x_W73R%9LYM|fjWB6xa
zJ%+w{FFSX^%9#TWq<uC4f#2rjW6Az4plfMNnd)dyTO4UE&@0x{jM;908mXj_2Xv%#
zP<Q)#21u>q7ap<e^_#3EYNnC`9wP==%eRm3H^#}83|l0wb5X3QDVpdDH+$1d0*TwV
zg5@3+xt(NEA-5DDIXOS@QCkTydh>#r)C)SV2x<_!tIo(|3aC+Nx5@!h)fEJ$x%NkY
z&|ZQxCCR{2tH_^ShInU{&(B;_RT3eKECgCI8b32d*ShT(%E`)#tca1%WxQtUw>M46
zlGgjUcyi|VS*KrK#?r~bRC8GbS&?x8tAQp(=n#LmhU>>Xu}h5EawF#Wc|^z^)nl1;
zICw<94+wKl>C7N*9uYBrGWMad2x{qOBA=7o*G8ZdLLA03f#Bi&q@FB2ZdzZGhKxNF
zQw%7IS9!UmUrf(sHiwMwe@he#(M<G-Z{2H+^{98B@(ijuy{*$~uME<VN7~FKZMZrz
z@;J8YzzfaD2ZZjjH$-V9tF{Mx$0~HB@d<Uf7g~ZcyANr{!DOu)cNWlLSUl-+HpI9V
z&3w6E?yAx!51F^s3h=Q$7mK#;SC+O*>U`vZEtDTX-f{P4>wdH)8_iXgQkeB*GO5*s
zuY(z)1{h|9{Akd+5p?CvT5M>aE#zCIUEPINFTy&S<JqSN_Jx^sxgB4}&yW6b+1w|&
zySR-!H4I4G#>gk2vld$d?nS((lcrX+ZyhQ*unq~6USBTIF?K*VP8S`4ZMhm-ax_)9
zjpd8$jNZmbLGLxi0{RI3!QPF+*VUzs`rHP<TED#~RX<vjl{8NN9u0LHyeSgtOWV6?
zbkhAw?W{=Pq|)u7140)wX7*O)USy0K_jnz*tug>4$HEP|C}RKKPZG4zj9LJNhJO8R
z2cP*$&^du-8F@qWWq&SO=ck0PF&6JunN^EicCvDh|6s=F9DfKCNjE+LMGLTjPm+HC
zKY8zB?s*Td7kagDSc_L4`%nVvv{kX`&Ab)rFoeHF<yCcFwp7c^_~Gh1*P1tG)6<<Y
zW9~TC4X1n7ah6?JyYDuY9AImh*qAt*RDqoukG4e@j*B}gFWlOiNqfi)!)q}MtI*=P
zLHFWJ?O&G3`4~HTI`QNat7o=#Rr$gget{O&KY|_t+`~O$UofYi#QFI@h2GN5@J;7H
z001|?XZL@X;@SRJIZ}*@jomr}!uND7$NyvO9HK-Cv?W`%ZQHhO+qP}nwt368ZTpsO
z*Da%~d-ng}y<RJ4Im|)EIVU1Eqa~0Cu*%<(v=*hcGFl}th(Be1LUKkC?1v()%A;l9
zFS*I{7<Xk4pu5g5JTC{)-nn2ddu%gqNj1o@!O_w3=BHl+<{Bg@WSFRro&d_3-vx<b
z**fGEDtKECaLmFA48>8C=vdwqCe1)-iiH+19T62Ewi9=YptQhjRsCk0z#ekW>j}6K
zD#EpY78W3t>y2`NzEBrrfRPbOvtyWvh@iB~l7+gHDny8g2w+(U41)GIW+e&@iJ%({
zTrT5JzwwkU=@e<rq@>YKvP#F(1)BFswahOX*Ea3i^rCnvMtW3gy-6$7TMkLRh8Vlo
zEPM=z4m@S{qZb*adyf7F{Yg1MunMEmeTeXuTms6RSAiPzPTVrhYMO7ymO`E(qR|c>
z=hU|&U26X4$`UBII3gFih(IbLL_V#)O=Y))mxn+~>Nvw~Lh+o<MWI=n%8Uv(gV<Z<
z_R2S(8dz?m>qJERhCK!%mff!X9;pN0d6(3P!R5i{Zi3>XorpV|TC!4LR3wS3z!nsD
z%<g~B(Lr6zj-t*JM*X@3@QL|y;CVqmCNDToTTsTyHs$P#nr2I8lWFFaW?5#OS>`x3
zEJrhyqL*d*zGhhLsN^=5v$BYwWhQkkrrBA-l@6qZU(;Lvv9_e^g{?pSe3X!@%RImW
zXT;zm>`;twwkA+U3Ph`{>+O-?x+kZq54KTmL~ViC-bv+UgPuUU?4R$@v%2qhzNnMl
z6$0+ZliI62`d&Raq-$P;VtgPnCD58>T{CppGOBsghE?94PNVZjd$uP4h0j$Hh_<A)
zswM`ax9H@rJ$jP?=i}-3!Q%cM`3v1E{sIKOeelGVJLhe1`CIXn;|ohq^KG?WhLQN4
zmLD8$bNCM_cI+)V-RFSr>oWds>?l0l+6%D0j5^8bd;3mr)6QBj^{D^L;BvffM#t{b
z3$5PQC>ob|eD%KyipPnb7vli~xzIOjbju&0|EYgt09JrT!2kdffAuf%e=f%V4gZ)r
zIsJD5oGpRyD}WoM`i50!-Q+u^di3N6J#vc-1iDMoxmBrS*6#Hf2sDyTDnDPcH5o=N
zyX77UnLP5$&BHuB?_RG1x=GV{4ozv^qG<3XX+^nqcJ3Q-P$@Gzh8=~4%+(^&%=CED
z4%~<*y5RBsK91KWx?V`O91hTUpn<YIOuy;nNf@m<CZ?=JVpvG|fT#{0qtah|Sb>O+
z8bt@2px|nnQ0XJD7D{H+k8tesTEfhS5DD2mWn1rwC!8cNqKM<SBBH8ACn0~*?u3vM
z6G?W_Dk7RflEDetqq<8iC6hRa-;_oTaDqMWBUBs$)1szZWiCKm-0LPUk=E6Ul1ep%
zlAQX}Nzx)VB{Ws~;>Y0O;fryM{#3f8q_-V{vDgh^+8(iiKHeMLiJ3@h)p5KPCs8NH
zv-v;UwZItrfYAFj*dPSoYcrLmrwRYL?c!tH#)M7yj@1yBS{wdH5Y%rLH}zZRN9v$%
zf^)sW<23!~noBC|dX9Or!s%CELz%601M26>h=~{EV+B&{toP79*+kqwA^P#pKw&~7
zN+c7s(4I5h#w-L3kQ&U=#3Q8o`%Q{3@fH}!f0uh~-eeYL2^!Ec#Kl8!_MjvIhVpG=
zX=LiTY2&6ufKaUpNgip#))glB2X?7MF9M=F3Yn&O={e@x6~gc{8!dE)^JxmMq?Y-+
zU??NZR-SNZ8phWfT;_m9cXR?*+9cCzq4rRr37Tf238qsy`V8MW=qo8~VD>pp+BR$;
z&DSkBK~oQYkj;}clR}P=&~n<z?8Ao`jcE*Ixr6OA;#r6P3OKrZ`J}%!D1nPx1PXVK
zxu)k*PgGaKGH-X~Zv@&XYG`YNPly10ldaE~CStTw_yy{0WY&Pq3~l!FG-h10at5ew
zy(P=-P^-^W+CQ!6kW7Y4hWYoZ<ke*0$H>+1X#3C)2|Ovs?vIz}WZ{5kkhweHN-O4q
z?|*O_!=@vuo(GGI2gSbVC@sCv?-g9B75%Jr7V2%Pd0URQD{Rlxfpg&mX@ar2LPFj%
z@DB4@mum&pcbHNZJv<&c@8y^?r^~lsNGkhT>3=grmTH^EG~NGpZqiQbbZMKV_cj;=
zVtQ>G>ujgpr>RELG|M-IUk%<0wrKYA-53p$t&WydyYEn1=jyi}&zoz?87}k@EpbqG
zDmaK)7%L!^Wa_;(@b{3R4@cU3Sl&I|muOk2jKDh;rjk_lbdJP${Yiw8`lZKB!iQfH
zLZLCP`Zp!k0Dvfu$8f5!vlRfbY5{o%?STU&A(L8kgZaKz)5BMwD_=4>6&Gyy(S?91
zgOwcTxp$$ox$3Edl*3v{<!}^W#3#$eVrCb&8$&1fRB|7nY8La5Z2FW6zu%zt^GsPA
znEHWd2%%ufP!l~%+L{hmR1aQ^WR$bVH5B|^9#k4#PmkB^KITu?UnXFPSVqhZrVum0
zpln@|b9<c+&kFTqP@Y{RIOASNoJ3No^3oI%_f)l<5T-HaA?&tPf>S{{q7dYJ`!m&b
ztb^SOI{TWw5X5CQ8+FAe2a2P+v#OnEiPR)~yEYE@F-YYZW}+y74bp3j+h!Aj)a5s)
zGuCT)0v<)`^pkg_`Tj?cY69eCaNM0>Uja3rP&rEIoLtFCGab_ebJ749l6$s=;i}`3
zKHyj*+V;>TH(i^++clb#_pO_rW~<~V_4wAM4zlv;#jc^hxQw;!tlF6&xMER;O7+tl
zTvGK;q#9J;5`M5>6*8X-^iW;(b4k1)!i<?Kd{lK4bX-BajXvDV1|c(_TNJ9lQjYBi
zT+}Nfs3u?$CJ4$h`GZRqa-8W-&q;QNcr0TO4Muk!Tdwc>l16XPyJva=Ne^4Dbs%pn
z<b%*RkutE9<W1f|SMfqnUvEh`k9!u{V%A$$>>0;)v*$>D)4%RzED+QPn?0Nc^D2R5
zwfPqBRyhMzV=o+rG<+birTVy?jYb<$6E7PZdTQs*5kFc*F*2z7ux36sX<QJ|N>J&?
zj;d)^Ap}a|)W5ScCWm_L>wsc^%5AA*_NMWZkl1SBa?JS%Br#kUF!(g{M^)FrzQ5Zu
z^~XC8w03&KIf=Gb+?K=}Y|dSH&E<MFzxCzAM>KPaXJRS2mNN3!E31IRaj5y>R`{g%
zSRm-RS1q1dW(Wn7@Yip>o9r+(MtZ|rmJcDw-lG-iazMaDsbYX7UcEXs@Kt&C&6iGX
zXyB!o--WPL1NmPQ%J=y2a<$$5DYxLp_b1C6my$mGM7jKAq#-r^eI2)-I}3+b1iqh7
zs$-R&_GP(ljK@MX*Tc=>p5@*D!f;wTfT}wGCgMP8{(q#VnWc^CfBr{qV_7>Ni2WKk
zMYC%fK?efdlXXnpuemq(bg3|O0uF7Cm8b|~1tJq%h%Ghgehr*An7m@}3?Hv9?*_%0
zH+g=uE-!yJxq{HPUI)^+r&K{s`M;iqHhw=>JcB-C2FP^wjF`jR7k>ukfGSRn51!lJ
zq^qG61fh)P_^Y^?YXZUo7AM)GkeT3>W{hx2g5xoY1<Sew0QL-AKRAC_O9SX!JOLc$
zLZq4;MC&1wLB0%{$exG6`(?i?%$!NRV^JzWUV>yqMi}@v5fj3?z@33~$z3P`Xv4yt
z8ABfIV#9nqr&3c6!@(?391i|HCkEnvO%VlzzI#{pOxa;EjNzG^Pw$mfi5-!gIckkA
z$SoeOtG0Q_nz!q!`3dI513ti(QC{0ux@qqP!3RLwEV;(8Gz7=Tc=z~y8VTboTS(%u
zhwkU)n9<uH@sTb^-awlHW+EWgB@MSh$d0Fh1Bt_lN9)|$Jig36t<U>Y1tqOQ;nSH%
zS|23o7(EVlpp6HAyO7A27u%A3cyXYg^AnK6*1g6I$}FcFldWav4VPZb)Yn%V6WXYr
zr3oqlLS+O-=Re)G-GnQn9Yino`DQ}l;^bPwhvRtsKJYB<SA5KBNkhIQVyr-G5faAE
z!yF$|+t0{xIgmj7uvsA6SP~G*p(X;8pGe3}hizJnvI(Jc-4bvI*j|+0sGY}$ZPs-h
z+J6_v8$cD9fSoy(^PRXDVg_&RP;V82MDtjP?0iglUbNanLAJg+NfeMx8-&LGZr2eV
zcG$M~i2_GHeBb-^M9*4zyHaW@rojRCEy0Rm)uOfyHkn4?qa0B-B$J2*^?TE=$p55=
zBjDErnf@rig-Ay2zBX6`innm!91@Vh+C<7h_jG}(zYM|Y5Z84aM5q;YFtpk}eJd!y
zv>S^3Awn;XziQJgoNbe2cvv6O5N;G2Q#!USLK!`Q+C~@W(c#>SiwI>CBeBU4aMcvC
zDJWVv!hOPwyZRf$9P`tvP!Me>-OS*DWNj)JsKe15z>t)}ol1-f)PPbJ0e6lT4DXK9
zOv$o3y2yxaw6+fyrg7=DYA?LIch+HxAs61~#)XS0P7jbIki^K;(US{%^8U|(uegIH
zg(~^(@P%cLXR6^o{8N7aIMdFC(L>rhXjfCW(m2Msj%8JYqxUAu&U{6IFj=-L8Uuv>
z@R<X4VuJT3q$!av@2ttwpTiOlHx!YpQxXhWYJq(#GQ*8GN5FbTOw_{=<YaPhUTfG*
zyWjJ^^Q|l>;>P^gLo{aojlN0{@_?dR7pm<9>yA`;K)JsYb>24(X)LBadmo{oqxG*7
z9`1fOEWR(eF`|E8wdR6xHb{rr;t7o+%JnQ~0162CQ`f-fS4q5K6rWirmm#PFpg-<H
znGC=q{0s0tp)KQbL4JGYK2i+(k%k@0ajr{EcM@Kz`eO2f6qSOWBH3|lNJ8CV_`)CG
zr>B!MiE)uD!aoLD%C^G5c@1Ww(KWu&tno|}09rYs_QO>OQU!%qk^UD(#cNJlK>CBw
zpx~X?SW^g$5sBFgCTs$;!_BZ*S=%~}u?c@2Iyr0yM?w(_JX7*KF+=-EBR9Q$`CeUX
z5fX7oJt7s)GJP`)pDbSG`&R5JP5uT@t>_ZRJUL)ra9ldqWY$a18E~z@P9-sObp$^P
zV`C|eFNtA031XMqVkK0w%Vooc!Z?x&<*sAJkO$xEfG}J$1>e^VNrFkj<F!CB%#>|L
zLaoqr7m`V^6(Zz*$AQN$0){4)8JT;ud(w}h%w|Z3ZySb4U@GS>vt#K|v&<73-2{?7
z(T3+U8C!5<V{k)q>4L#rbZDBBZn}IWKoaw{iJ{q*O~KG@2dySE?Z(ya%shpEEI52R
zKf=0byI^RxQ;wG$T`Bd3PitdM6(QyMY7v|-1|~8g7Ex~m>g2cEo7ZMB<V*(qI388t
z#0QcALm3BPUYaNq>p~D&!Av52%AnpVm12k=JD3?JSt`UFIJKuTX`5lD*^j0qM07(2
zWf&`kRS0T6_)gZXC{mRZ9m4UdvhAc15nn%6I4Mmh56;p=Uhx2-$wl=#%+gT?i<&;~
zm=JqVp@9cQ1glu_mDyQU{)#|`>DYDDOx*=rCBL~#&1rZdV$;Mc+pAVf`fV%7t1Bj*
z5se@l9@gHFF$|@7vYZ?U0i<&d!b%|O=8_O{)k`&^(|tYpAPpt8!Hm4gG~qcukm5=w
zQ>*e5=KgYG&~A&}a^dL&a)D?T-hpW)Fp6&n=FPn>n2|iB+-MWoMHbQ$S1Y+aIOPVN
zpcEPm<Z6T7;{69%Bk;?lMl@=wbQU)x3AZA%Py|LQ2gOk!!6dtUkURN-1|CD{qy2xU
zw!LSxEiRLBzw4fIjSoKWoh4-sK+!aMMR#2P4!*hBDLM70Ive55<ZSw=b97a5kQ0ym
zeY3b1+8!Au@fZkrLAj7FoGTOVyZpxnE;j`BaAb2em&7H0dvoZN$a3u3;VH^!s`XPe
z)rEHMxm?!n_!@+{j<yB-D*sF$Y>`5H@#Wi&lu)YgqNM~)0xxb(QY#z|P5<CZy`=)T
zc}gZ1s32(^$8847^3ZRr=zkP&45WxHg;LX+;B-@R+X&72H)c^{NRH24>bech6zI|(
zouw^EmQ?qQjHIr9dJ@kS)09-|xub6az0kL?ejnd2!=l2~V+~<z4*Scb6+;Bk0GOst
z1AC`yrI~LoAq(N8&zE)gMzO<|N%YENBFR2&rDr{-yc$K)I^2H-ka4rvS*zj6+IAxx
zPd3}12fEeztu<4;^5Mmbxq9Ho+LG%I@?OhY)7<XV2n*o%vc2enUOwJf%o*o0(WpXs
zV2Qrw;RG?aBendg>Y0|tKe;ev8^K~g7w{@0{CyUXX9|Vr|JiZ)y}VwO)<&~PW9EN3
zG3SyGX+n$R%hkHlz?2UGig6)MX~|B)bf-Y0UJ7nOnTO33(R#>~WR?jogmrK^w-I#0
z<?T~pdNd+VxTyzTc5TFdPZ>~oNbA$l&-!2dgQ_K1b|L)OQmH?=O*upXyJM(Xt_+Q`
zRn%sJpwvxm2?|m%W3fUyS4>{*7QrU3OX^5Y9z3AB+PsoYuHQv<+5R+YO~y0$7EXJ2
z0*_kl{by>JdT8#QA%<<MyyTQF_fDANm@8I(r`4=D+3-?yCFoBYr)x){)cMGP^Fkiq
zL_|;I-oQX65_|ln$)q;3D>+K#pPD0|USxP4Z=TGTr~sY<XWD(a|7!Ivm{qhVP$}cy
z^lg$ZG6yBHALbYq30z*)9N`<)IpGV(SVV@stLCTEZm$r(9WM;!JWQd(x`6RJFOB3$
z+d5XC;~FLI7it?tsc257E9*%@q6_#QHLRPCAw!+nxI8e(hfP7YNex5BQv4;VA?qHI
zX`#AlI-v&UTgm=0z>@dI1<J)~yU2#Wy&Fq^9|;Uo%jDgfiPiumrx$V3yT0M)9#eM@
zw)b>X3+d|=|Mz^^2?@$TRa?m=C5voyVg;rRyHp!?uUkxe1MGtxB&?z)U6L2(Lg$&K
zvVp9sYWV8Nl>;vYF0$?913tH5#j27|+WCf)rTVq{&=GF35U}!)(KymP<Kw%MUgP>@
zw}`*2HqmoXa8Npk;0;IAVOgcV;5xRP_m%}g?u)x7VykHCLT@M{q#QlkE20J%gXOwU
zN%iNzG?HUHSP4|dVdaE_SKlF4aIQ%mGbr{5jrfm_;T7}OV{YQ9O`dECWIOKFcps`>
z-rQ)f?NZ<0XZnevtHxU^>Xh2oN`a%%z=2rSp<$dH1Q_P1<24vdLRx;S0m`Bc#Wm@s
z+e5G0ekdOLg%Ltk72hfVg+Ke!W$UWTNft)8bH_^7^2gI01wwhMkt_II;J*@zcY4R)
za73!2<$84gBEX0haBHLg?}Wk6es6WtBa{~G4l!<thRmw!`9~R(Ysx4&B=$s)NM^ZS
z4Fz~B(_`1CsKQT2|129>(AVk*F1Xy!HuuaeBicZ3uTw*hr;Hm4O$4iD4;upD0zRFF
z<GJx~s7;ed_w5hzGF1svHog#3x&V|L4XJh7vg{ax-2j9LU&vV<{F2LeV(7ffIW@HC
zlpgj2v@pFs<8(KhW#3VaMG*zxz@6LnL=S@Dy=(4O2t~_Ge(&q5DScwFOLO|*z;}+q
zIi*N%5umoP?e5Gm-(8lr2<qq0$z__olk{gx{y0hVu`Fq5q|A@OS}>;I+a~QB<EbCZ
zV3p6bWW*2f|J?Zzr5P^C|8fcz@c--1@Au|yYij$S=b0AGUm7L{(hq-r&<tSY5m#hW
zKW)8ZvM`%#Ct$au0XId|b|~RQ^Gvl~!k^9?)?Ht72`LiNw*@>p4V#+%ZjQ(7eTB|5
zoJ6<|=|$PmG-^3I|F`4aU$+RIKiLv0X>rPE@<alU=>#+^M+faI)x?9d6Ly$M3=k*g
zQjS^v`6muaVJ#uFMa~i@<pJjm1p9J`QzVB3k6O&w4JToKQjo|_*f1oysGK6aenSq8
zh6Lmn(tHXsS~5Z8VuGimz(m%4szU8D1!*99^6)7hgLi+PodPNkLAe5(Pdhe`92hCB
zd=yOcjOHx!33?7GK|W%9@mAC$OJ8TZM%~&e<Q3uE&?AYqo<t#ZOYS3TypTa32iH4#
zbZ~u!@&nzeb6QTF9SqV;<2o7c2Tf+EphqtkTLjGsOLWg2(Ks6=d}jQVIOhuobib_}
z5!TEq=Hc?&KSL3&DmojMSx!hbJuxo7hBK(v_J}P%UAp2Oo#+i9&JU?<B+G$EHDQDX
zvX`W+EmHmLZ-&TpA(A~!jYtB0gqbd<jj6PB-3LxX=f%KXe%9*|ml~7nmK?CIG)LP+
zMbv?gv7QsI;nGp!ZQ;Mu&_iyKKFHvIO(qBr!Hza=gU{`YUxIjx6l9&9WWT*d_Tbga
z^Yg&^AH3BS;sU8B*g&4>EZk@!RiFP6ld19>4n851iSQd%|3elL=ih5RS~`4mSm*WH
z-tURJ`Gy5BPE>sG-wKy|x~b7|neSUn&LPK~NfjQBJ_WH&W<eYgug`cRD|PM!Sgj6N
z4KIy)6a7Mf={R(fU24dBuLn8-Ad=j3JPVnGq1Yx08C~Lo(zFZcuZp;+n|r}fX@Iqn
z*_+;gU1kqN(=@0%hSVh8*J*B^)6-BWF-bwkY;MZPS)@45R_?zIVu(}fp}Uw+mqeT;
zyumR7QnBgdJZ{WnZQL2y<>b0Hkn9v^f|!hPE+PaR_usA+D619?cQyi)wnA(P2}(G~
ztYi|eOp7hN&?k(Q_7#Fic|J~t!LNU&F0jfXGIGxvc<vKQxyKYb4zP0arByhpOriF)
zIMFz6`oR4DalAuJEnKXf=gTXczB+gFf%e9a+4du?9t^!qdZn8259M+)fIh-K?>ORz
zK=u$q*KrcXInRSG@jK1~?i7#$9a}he)NOn4?lRmJPgY~lG2rTw^ep2D7<iepLs$+1
zfarN7c-X;$v(5ye!4q(qogzjBX7uCt!to=Dp4ZMxZwKdH7x|qra<nT#N!Qnr<esb(
z0Ysy_>A?zv^CF}GjmDg$Jz__l9%M%k{X9MlnU-o*ZsalK;Emb?epG^y{UWIh94@Mp
zUsIA%VV4$N3-K?nv!33`&OnFtu*;dFG1J2X<~kW5j%_f7Q=^z=+b#E&MTpMuc?Ue0
zFlT$Co(UK8XmB)~b&)f^S3jR&eEtv+ij^QLiabRV=Q?cm>v9pq@iA-)*v*C5nwH5-
ztNoxxZ`!py$!nt8VVCvIRp3h8Z*0i+QoZtMj@5fqRAew`6CwMVDHJdu^g7i#PR$nT
zwA%;^u?D<W@6b~h5QupRuhmSgnP>1)O(GCInI{iyKYGkBTf+0{We-~21bUt}>IU;-
zt(+2-A{Xx4hE^;&vnufBq9CIH>Ey}8O3TTC5TESDDp@gMQ&eL4irS}W)?9m5o@**q
z&hM}+XnnK38|!XSZ!St&t2<!}30bdDxYpTilv07UZ9ApLqP5-EsVSPevZb~#v^n(P
z+4?_B4mPwsTB+DTMoB}ma~{W7atdt#libW@C7-}dbYN(^#U1rV&QLW)(CD)Q5d2$i
zf@Jx)V{brV9XMJWAPGdNz^J<F6+9CG;!aYULutn+&95+ac9qmkmQ6ghpcU2<b)9B2
z)e@2Mzr4ATGpTE_Kie$V-+@aGntBH0cexBO=iE%$e!2SteG|pp*jnin6eK9oBO}+#
ztXQN<DmeuAE^LQ_GkGtK1WBb57$!Lb=&mapWC^<wV~l~vnxuf8)gH(=C&M{RF2Nob
z0Zx@%0V+qF9+uc-tu)hioHV|qZM>g4&rpu!uZ5!JG}lbSeiaQ|XCH{BUQcwzM|vVN
z`MU{~n_Ax>NSI|eH0bWWyLN}7Ni#6Ghod1FsRP@;trp)xgQ@%|^SY|TAA?^S*zxqs
z>{pE*eSB9ry0!cQ*G7YHqWr|!>dh~t+2MTlsK-9Q=)vXfx60{tluIX{W0GDK^3`!I
zuT^<hE0Ghji4KN3b7Kb-Oc}d!4~?=qiLX|qYb^I80Al6|dalY{xAxpVTGM9-{GMu)
z1;{`OFp~VM1dyU}UDCPxY2mI^FufK7PK`lR>=_x|A3P|E>%Mf4pu~?UQx{{z{<lH5
zQ5AokskI;VjBn!TEpvEZ3~Q1Cg{7An;Z~$0eW1rKl3sBIbiBD9e`B}THt^^0?B0%}
z9d~Xt+0xh}8Jju&kAx23wX<YPa~Z`E+VkGo>c(XnmevXCltP`^px0kW!R&4D+P)9k
zbL^O#&7|_#5+^}io(T4~g}RTfn*M%%+WoK-0LG=$`(neE?zxDi$%`lLZ9k80eBbij
zzqZ(E+F_KR(ly$uV>K5glL0gPc`B0M#V_gJ4n)%k=en9}m}d}bB{f|}(t9Xq1`AGJ
z^d_H9M9*Koo*BLjNFOY?`nXuDt7N_G>HH}O&dA^@z&B@h99b~6e+f&9{Q$(sWlg=8
zT4mS7+fTavJw6p)s@Qo1+6g~~{xz-)f1H+Ap*?)vc|K@wpH2zu)E-$qB{njbL)Srg
z664i$!e@UyffMoD{s5Uy`&LWqJx!a-2P(1fz5>YooPG#;a{DQoCug!dG8BCr#prY%
z;d(9{!at--XMKcrSIz9>Zb-@fT;<;Q^`%mQKe5^Xigyl)SV0J1-py^c{d1>0$G@WI
zk(K+2k-xkKTDPYCJsfKLr2-CqblhRYM9zU(Gji;GXz`dNf!?#{oNy@Yv9Hq=!mKh!
zfV^s!2+$wjUpIU{MB3{etN(?m1!mL@rzwlN7Mi)KAGpAZyi4q71XCfaRmI935wh8c
zsKCPd01s64|3ERQ@%>~8z;Zt>l}4z){L}XGfL+mAWzYXd!3Q%I6&S|sc#IOuld+v}
zN8vGb>^^%YE0pklu%&Hcf@|WNO;1)^`}KeM9F90g(-)ut0D>6*t5*BH&)Qi2mv+V(
zt;_$X)$;m+WC7J@IqMGW0&6aD7MHiNE?t2(1?_L63&4LF1kt|?g2v6QUj~6sWXjRH
z?a~fbpmE}m=RNxn;>1!hu#-rwhF8Aml&avY|MwgI82#L=KhYy9=^CZ1SrcQ&#JazQ
zLc&y|Mgt8$VY;JC83zHma@NunGOT<6;scgApsW*C5)-7Q7*wz<O=m=KY<SXLy|>W#
zZ8eGYZ5~NAfvH@gd_$B|V}y~^nXbT6kO(B?I#(<)JtW13$Ve1(x(!Kkzcj=nG<*av
zf&6XauUsQFXT#HlC2uOUn$pY!Y-5;=rg@kmGGgE()(bpT6HPp+lapu9o`D3$e&FFV
z+;~ud;YvNpsg81mIVuMSpDQN$rK2USc_NBknYbFVEYL_>$tIm!CTy37Zo8j}Psawo
znz&l9h)D`I4JQ*HjE~&}vlm-Cf#}-_vCH)*brZZkZ905^zteJRDQC3Qd*7Y@cAAlc
zotOyJ+V`V2HGG7lkI^_hoWW0`!MVA0eF4ki(nbtLf}1#T<GDu~5Mc&N!by3Z9=w>m
z7K(>0RdBodcj3g>)or<_7vEpIKuj+e#Gsj`A%rs{&%g^INpSWeR0dfci1+=<8B@eY
zSs>q2F=sJ!mSTVi9T$tzd|g@pzD(!z_NQ6co<V1mr91r_iwCq`!E?OE^F%mvvhz;e
znwuoln1EDYVR45QaRjo=nO*ttbbDQ!qnmUw$v(;p@`t>Xj&X`FqvCg3G0YqB(9orL
z`k)vuP|~@O)siK`xhuMGVH0_4vE+rE&4;6~W*I=IYMj0)i%7A8aLBM(^={SB&;!yA
z2_qND9{>ying@nM6P`*QRO5A2OoJyDpo>5UGX+WK?x33D{(pn>=N@E(-bb%EIf(xv
z$Y+S_z>jRG=g#kPy_s=kPi|KJU7OtC1SN$ttOr<#&}m_e0}S1#H*Gj@xr;Mn;3uvL
z=)k%O!~!UV-vSQjQ%1ORW#s}3gAtHWc7jzL{%hZ@-D$rq8#0WKzf5F)4fa1htYxVx
zOgmRhp-m1Y%v6~fLnjQ)nZ0rKAE}c(@}Szkj+LngDlZo*<?IHOlm~8vWaMpk;_tsi
zjuyHp&p{J{4Q#;M=M}e1q-+Ot_5e~Ja%WAegOK*F$08(+43u?LL_*cV0cU2xSiD0V
z-sh)ANqb%|W8ob{DtGE4MZ$(n6#E{_hizcRlU<1FNBgND^>S4>9L6x3Tn;tZLcHh-
zex)>Srxnrv`!=~R=(j`qLvnhA3U9CkC@9l2tvkHKgr4>`_|+|nd5*7tXTFG;@bjRb
zW();EG$Evpe;tz|hbp|W3o_D6<%^dfRh&U8ePD5PnPOZC`Zf|+Kwp?Qf(89Ip5q4(
zQDtCqsz7pXycQlmDrlrl3vK1E5@~N)tQNoJ30mf2W&f_c^G<X4d)RE4x~mv|LjP`U
z<E5!IFSigwbB2!(2_W6w%mzf!`?3Sy>Jtvj=NKm>URdt9WQimD{i+K%a_U{;GEkj~
z;#T=bqkvL0=(0%RbLe<aH4TWxzPQd5>Oab3;x@SwPT3QnGj-MD(>b0ZmHVx~K0f=!
zS)DHn7qIB`4HEL(n-f>hCnsK9_`Rw2D743)_tIS%@B-Y}?^^a}e-)`gdJiv=1pf?f
zN7im>l5ixRmzwu#IQRBz(Wr~3A1?HTe_&uia?|1$KWiB(XKS^99ws@>EC_#twWb?<
z%KN)V*LLJ#+$;jOc}Mxw=AE=HNe(%~jVY>V6A^hAZki|xR_&c6pw!19slxl9D|~2Q
znw-ik@B-EF8U<vx>Ld7M#GMS;M+Malbfr+?eCh7#HC=Ar(G?t6hq@2xPWL14<!&y3
zbRT#0?B%72>IrxCTcv!8GO=5=<6GF<oi>rrZfzEHqYesz=Y((Hy66Y$Zw}iB)8~7|
z?chV`uoU37nd=8=Q4~FB0Y2w8J*oqsr*6Tw_rd)9^rLe5j4fMZzuC?oKknvvyo3``
zJ)uytNC{=3tZrsmAoZ>7<bsimqTe2LNv8T0*#_A6vUWl<_6kDQ1i3X0=K4zd`Pd}T
zaV+bio`fION7r)JNx&4((jd=Op-UMOb~mAD+H7D{3nP+|gt4Pow%ucy*uw3FLHfrt
zevRu7B+`O0o{nO265({^{@JX#J}VJzl}04hvqMP?+-l}w@O{WwcA2UT>9CbI<|(iE
zSFXEh&CN@u%93)D+kXq5mg0>TZ!zsRab?Aa`%_?IhLX}B)7OlBPm3biQ575MM^iQ6
zZ_K|a$3>g5uiQrbVxw4{>46mmWtw%NiJ{C5S!1x-3O^WlibK0tzO8JzsqzL*{MThW
zZ@w2Nepg5D>s@`QotR0otx1A3Xto#d6s-hh5B)qDut#-Myx(s!epS3a>!?HqjfQ#>
zB>oIaY>+9o7y!R0gl3YYpZN-BRiti@e2ZdZ!$mnO1d+i08WeLXQG5J-m_9M$Sfw>N
z^#u~s(=w}pB|4!-1<bw2Ygk$c=m3&GLeB%RUPLcCrUnw&5i>AwYFfLFIPWmo^qkgl
z?L$iPjw!1<AgKUGErd2gT#ZF8@b+u8i+_LY%meNk&Fjmd^n$6GSZy=23XPeETIGDL
z2UBh*j;zmNZqgJQNAtAjjq3#eZ$~~}Vl#@JKOnFk0+}6V08I0We_}F65JmVdO=+fj
zJ&kzu?jPXK=4o}V&=u8#xrRP{sz0-|#(3sxr6`Bguszf|Jb&#AGT<2`QSgoD1J2xB
zMGFSP@rTMVzevP~l_2ksz%XDreJ~Z%u@JZbXPiagI7G9mjq9^EHaEO)Uf1hJqU*{H
zrPg2)Xli{;_MAX!g&v>;V>5T2c%*T?57YVYn|tDaS#A>LzcI9U3}@dV+xr?6``4QD
z)yk#3g!d3hxlQuFXU$}j2?ca~8c8ConoA>A_9P6~=35`(t5<mH$hfXXJz)0UoYGg>
zRJ{G&=~bG0^C9BM0U7Z*e!DuYuh^LUzdC~nE>t8ST=(VB?t09sP|2qXt#76#KA>>)
zNl-qRp_&tT(Z~`d54p%(r1)C$%H9T`o$RX><zzgX3DtDUQk$BXk@~rWB_r@gO5ZsT
z{f><cPSwV4-J}<<rf^o%yQAYh`z7|mQB4pAJkaJyoa^Yyt^wgXLBR$m13lVB@xGkZ
z+&Z%S9W!2Zm@!o8vRIYe;auY5V!P#>p^`Wb`J1WK0|rbxqnX)*;jxBkNbD+j^1}?R
zeqXi5&<iY4oR*X?4;XvjK2#3Z5zM<|*)ZBMz=8zl)6#kGh1menGC+^#g|(NdGvRUl
z0N9wwm$?`M8;$6_s_Em~PF))HXq(VD%Rn|u)WZ?+4Xpa;1M8GGfLcvhB90Y7nqq7)
zQVSq;&2d@OcXv>V^<-I4_G~a)ghZHA>cTopW;H>Z61ox`uT<Q_v{veirwhuvxI`Z2
z<=^I(!rWlo5txhp5v(Zjd;yQWY|*nV?WY9W>Ra=_EwReDg4l92CeLiqA3H)uyL^o~
z+L8mcpps;EWEqs{d%a7tC}X4{o;}intr^X`h4UoXDZZ%a8V_F<&QN<bG%}RtloB25
zxpZscAiXyPU{6B&OI2^~B;mHaVHOKiLI1H39u2j9Rc#=9SP**bm4T`oqavyJor(*K
z50Z@=^_#ylGvv)uA-W50p2++}4ldOhx<vf}{d?3(KFZvB_rR9%%~kE9)4_@c>mz6j
zFBmmEmVGy?PJXV~5M_zxW}1wwR7QtZan(juOd@R99R*cY!&)N-s(Ee;#wr{X()%N|
zL`8RU*SHU!b*el_Iw!Aj#(<^d8W8i%TbY|wZqa{^;S`l3xHyqI>UBO?nC;_Leo1;d
zSk~219(<EpHgl~|{lQg1Y?nj1Os|pZ(FiwGTeMAflB*m3o4ESQFguFUlPUID1TUux
zM39DpDs2?xYd2T#7wW3{4=$Bp`=dRbDPQBhh8{-vfq&asb*xuz+2<U`3>uONR~=m4
zI%S!?IbQMq=VmuXv<LqGR=K<U+ExCGEBbd@ur+nD_|L1|)HHkhzY++eyC2Fj$`wrG
zfm1#0=rgQHq_e2G(20)AQ`A%I(%tT6=rwDFPs_JEm_LA<ErD860o$48dAnBz%y?J~
zAr)IUsQ!_xpWmA^_<JKTXxe0H(%^WhpXs4kWSMcLQsNAfNDh>2py{PDJ&hJ2SR{vc
z36UwH36T+$^Q@UA>p;n9b(8&70}y+fX7!NI1SMfKrX|J3d4pNxFzagxwyX|-g<Cer
zco7K$ahDwE^rljY3<w13T>X0hLv7wkgYYPs(VR^cy!wAvw5XUvtq|o~4yt6FBj2Ea
zWIY>JH=n*dx;L-IkT4fnFeU#n(It(N&Qh#qgA9#@-KRw}Ob~@=JD!spGDX$JMf*Dy
zW+DkPtu`159{u)Ejkt#~y5{5egx>l&qAm3qN=$h5nfeh8{p<lx=i{8NO1KtyLYQ6|
z@wMzDjDxOWXly>F?+j<ler@=iY-5e~d@*Ei_I|L`-DV{|VPgRw`UBrtaZ`l$$k+0A
z%%S@ZxSi~=#jDAfOEo9$sPy(>g9QzZZ4CMwW<Aua4EJWKHXy|WNf4!E5@1N(<>5Qm
z)vBu$VW4=xBAHC0uNw4L{F!!##enu3#1>FYqFXkX%2YWSDF5-_$m4J8Gnl%$_NS@W
zU334MLk5Q*@z0pfAzz~lw4PsMA6a}U&TZ5TOvA=|7eqnrb)ti|qw!ED(3pvX1@rxT
zJO+h>E#=0)xl=yE3v>PzcFw_%XoWzj#qmkBf-o8wR0zRVec{H7dTC$36fOQKMT7gJ
zolt<te7u{XlRefyP_TN<Q_i#H#clcZ9%ofd)U(yvIu2sDAl+j+w!d*?QI{m{V4y`k
zI^B8<Rr-(%evBP%$sBK6Shz`9%k2UtV9j9THdVw}Wwm^zyIbRwJ1TKXy10Y1S_oNF
z#h?k1*Qod*h6iJSPEF1l&F*{WQpY*r7ncRnS;$@bks)m|c}}-uR4O1uJE<?!IpgAW
zPU&8pB*bo2{*0+Id0z4RPQr-xLVqyIzg%-JmkQFQ*i9;5urw!HE)^)Unc@f8l4wL4
zn{}CrGj#I2S1J<i$UXk1i8R%2NA8PnXOZAI$7#N#%p!!2M#rg>5bmpjTaDc?Z+U2)
z)*|&(-3EVI`{q&hK_9I>guv)ES?b0gv2gmr>@2yOVDbwu$_bqjPLwX2&xfiO=ySw*
z0b`LkH=332M%}kuW$lu)I+^shp5+>`ri#TjPx-7P%b|v_LcLhi(x_GY>wjH(<X8X?
zKQI6Qk_`T9x>4WI#N@x2yJvWQ%iP%(cfY6=-19V)j@q6s;Ga2_N7RsHaVLm3WSM=r
zaHN80^eB>s(5pJhe!kq$0U!hBqqkjd7&6z%0!NG*y4Kn6+FQo7uBhbHEbkcRHmZ`B
znBCY<Z4&M*SUL^cEI;Y_CN#^(PaU&x8{{w=37==y6U=#hkCuo70uAhfAmf?%Ohs9a
zDW_N&3Oz=!ULEw^w(Rj3pDF3q2lX2$W;GKXLz3r$V`hR9n7_wD$T^{j*doy-F<uu!
znoJYsAlpHR17$uVMh>^aXZc*@)gYk0`}07q%G_73<2x@j(a<RcvcWX-zz&JvjWF_=
z_{SU{dE^@(4-b!>JW+<Q8fkc<mcor0&ot;xE%NAv&iuODUVIT`2aP5-_z`uU99aBo
zc(?Gu8_?wji{E-zm4W#3N~%cWk0UVW?MA`c0xr%*FX6iv_AboF2=dA}ioT6>rp>mz
z&_y`qiTQbEPbpu@^<Z3Byk#C#2T`FS0$;wLztuB7{XAB-r=0lV$pls?rZ!A&%BxX_
zbarsipd*GYfz1q@Ut2m}PVs`%2Iyo@ss-mVJlO67f#Kxm&f#q+=b~ARND*H7qq5Oe
zPm{HFzx<~EJoc_$e;K%dmvlbvz}<YT{bRf}7Qn`|K?AnFAP($Z%k7%wZ2Id6t?yb}
z7rwm^0m%JMqb=&#thHyy?U41}VGoGsRtMJS5}vPP9kKT!`8lraA7f)je`fbOaoK(O
z^!~5G{XFUozW=z9|0-2K#B;?FhWk^q`=hfwo~CF{u{&mRqxZ%)zBo9d$qL^yS(AGz
z+k5xX0&DvDxi&1{?$*E%-#&m`GdhDSjvpQJGowEzN!FxI@TYRBnNJYq*R$h)8GFO!
z-a}otcDt>6b&Z>h){$NAc+U_Yt)mR$$6{Iv(<15jhELFegDS*R3=Zv|Gzw9;^k~Oj
ztazJFccT-C_1lJiz)8h)b<Y1TcorYbFs{ylwW`%m?au|ekUL@v^3eY{uJ7>KwNUc5
zA9=ALFtajb`K2>GRmM116s%JqijanLYF5CAk;DrCI*QICgf;LDP9Q}PWqSsE0TehF
zC_P4<qe2*Pp~^!D;=^_*jWz_eNL=U|r@dPu`L!Lma!-?dM4?2NH^gJ_C4`|N{dFSh
zv*8gFT!Hjj34Moc)3j*t^DJx-Cx-T!J=O%)YZDZ*lwdH5wfvU!@7CTfB`aY*-~$Wd
zsYZQv<JQln>Biv<wg)~J+d$~nw%pyB|4J&i(2*NRMW~=;@6PoE-?W$g5nZqy2#4Fg
z=i~dV)!VfY8tPMEe|=~rb?U*4@-)^e(XR-t7EKCwufh0=<jC&=r+Y6t=9Hm&M((c+
zBIM2#>e~caNgq`vrMcE?zTikuZ8Ti65zH70u;HZQupp2?l8`|WQv3q}Xb)Ucia7+-
z@PIl{VxS7~6ttZ%s=bU!^&eV!aBB){(_Sr_8~2mLpvjeaC$F!Y+}^il3kCH0b+sW#
zRQ=YhO#RJg<(AV2l;ruj)>;1(p*<U7F!N0X1g)mQqu$+*7Lk(Pru0gA+*BiE+Nhf5
zgbQtNccE$HD~k(y-0Ub_kf3X%-USf3;oBNg3o^R(^(o9R)CY^1exk{sa0nM?urSkE
zq*r)MQ`inRBuMT*8|%_;lX}#ON=Mw2QRC8|K07v8>ncYI@+Bg@3dF7hDsx#`y^LlQ
zp(>wB|AKg<$tEh}<g+bBoQYr#e6-f=pHH~XO`y{R%Wvsca*_&z#)bX7h(dwD|KFpb
zR39iLMsEUk7R<l;M6eyiWJm;`BmnKxX|!IA*s6GQ<ype*yl^uu+Rd!<Z^P|j!Vepg
z;$vCTqm>%gU5Nrnw4zxjJRir(TBzLWA=LIDU^Q)$oDx-@nx+Tg9)SH?={mT!9>FS!
z7&WA)UY2_kh!jBkL;az=H}+VB-fEl8kqmwyXe(%bLoKEmb~h$@)$xO}6_#CFT6*~b
z#n17q12)2PTZcx1;}7FvTC?Yi$mSLZ>3S=NAd8|PFuJ6Itw?(Xw-N^%%~%?-HlYEO
zFFi~k2Ps=C9A|E^A{#rz7#m$Py2esIy0z-In4T86x-t#=d!h08kK-kRtpt;_2o6c`
zq4n%gNV$!g2(puJKMLq+SYe;AA8aQl;H%@=Spw{Pa(+&-p%zjYPEAMt!V-ZLl!`j@
z!?Ryh6sUag1Sj{v%G+MYYhggB3cb)BPKQWxaGz^b4?+x1ID=ANfE%T6(|bK}79^us
z|EU2HIU}g51LG=wza%5q`Cj;8FipI29I}#5BoX4-{78jRe-<v!)JH^)T0b(U>@;oU
z(`SV%6~Cj~ej2q^y*NJ&N9QUzOav>iey0F*nF~3E9e|hHq-u3+9s*Ja|JzoXF8|1Y
zCSzuR7CKxQ41U4I8s~V$V?(me0M-YRDz9jzmeuCpi$Ic4Ix7fVTB|6ffFXD#zfQ%-
zoT3K>BsDM`s$jr7<hXjb&!wk`8T&6hkNQ5Ntqb?F#=hOM>%@5R?S1-#`%pl8w08pe
zbW$uRR7voqSA^WYfW`~YuMhZb!&|6wWBq1ujzmytjw7+BVim2)Ljihs-UZXD*oQlX
zzm^nAf10E2;>!r+-(Y^$;le29OKNxuXN-*6I_q_d<%_#+z=4C%V*hxZk%w5_ff*y;
z4S8SoT<-ki#_#O;-W0^HI0^MjTguvZM-*6^;f&={^$8wl>BN41zZIkE4V<_4vac@G
zKc5dxRe4u$;mVuK0mkkP=S7CTV`$yr2t9raR1X6+B^c|si~je~V$^bo_HjHk4%Jxb
z_p;IM0dPM%6@Vp5D-aI>r!gBm(VbNe3SRdEk%b4A@U1y0IDjvR&-Z%1?!R|&B*DNH
z$K@yk#ds{vmGE+p1m41E77j&lHv|xaoui~|9ZjOoSeSxwzh_V0cc~C06OdQ93c4L>
zgH3FPF$wI|-!S}TQwmBvFe?TcsU-)_0$bMp5T0?O`%bNpnnOz=JoF=BP!jjmK-iB&
zZ*my?!_Qfdnen8P(vRgtD4wR!@b!~@V~<cn5r3*#Y&K>vTzS4_IV?%J_sd0vrqEYc
z6fSsZmI%4iUtSF#%fL?Y(he4>N*>Lr*ZEnl$>@u*L<sB#cJv9yt~Ui;g<BvL?DBa2
z2=#(^5Te7aUq8ph2Je?ouiF^>3I2lUW`RWO*IwEK%(wom{|KA%t-(xejkpyt7y!h=
zpC2$vPV4a~L|zuXrPsGwE>a{#a!R<aSaVw-YCvqHb*xXXv~@$3tzB(Bbjxz4oHC|W
zU7KlE&9sM($X{Q$o0LRUQ>0w7+FtzrYvxBuEhSKaICD2Il?-P{@fh3l2Zp5~m+j`F
z=iCtT)%BB<F+a4o2a($#9@h}o%G`Q<3cYJTj_$^5n0;8B{cVp;EbXXM=e{#o-N?oi
zXHwv&vpN_@p3<G!Db~R(!^s?efEXtPitJ>Sh>JehX9Z1D;5FS43^oTltimeojX7>&
z@pJr1Zhoy*34tNaq9X1vGQOM|3+NjNM;Rl~y!%dYm4xwv?QXSx6}p3bMposqNCSZB
zkGkiiMRx%q$v8NXz>TXK_%c`*Wx8@PYUn%!6PHUd-N$;D_gpR45FLm9kufkX19RK-
zIu)HmJ_sX~Gk6W(9`)Vw_#ezVor<DKTy+fARQk5qAglA)?)7Agh|>)+AgW3P*uuK7
zuGlg}mx3e4Ri|+sdUHvv(*ReBp*j(9CM9ME9HWC~8a;=`Gm#=R#t0RcQr$4k`X-dQ
zRtitVKa|~-{ooH?37CNp1$2AZ593p79h$pzwI<-teTo_tXpg<G&~J^g{n6tUbIm$c
zCbfOUsd0I*l8ftel`fqf+-KZs4}t!kh(AMduu*!({PXNc-__ccPJwqfcdVb{{d75%
zI`EB4-LnZ_kLIh%DAtc4ER0U{jqmK)T7X-oPNXaHxm%4~QytQ@f{Ebi$~u=`4W|bm
zSVyqc_H@ed@y5!>8m#YU(FKddH0;8gjhk-{H$XdGJ-Bc;U_09@*P+Ho|GM_m0$<kt
z_G|q^Vyg*)%yuHR!nVu<C&l-@WG0MgG?;{KiE*x38g}LB#Z)F1kz(NqMd?xy1WaEI
zO@=!2xiKNeZ1P`f>1xUFUB&che+-is6J}P*;w~^r`GJ_JOoy+@^^<*;T7pw8(F|oy
z9emBJu;PP9<8EnTpsTr{8j3iHP$sUA;8<|h72RW+B;wEsxHj*6a2}(5MjLGi#YZ)8
zt`%9gp1@osh7wa@=rO$@k0sN7FLIC{?a;CTIW!lQB3mKRGr+}t9J?oO3!elef@sV!
zzTe|2wY3AsOWu3ojFYtq!?t%2aP}p?M!lx1GVuF)W*d`uuaz49Wi=#Na=IinhRDy;
z5awqcWNWbJ8gF3CqcwAIm_%Rc1P#lbPLiu#KeRYJG71Oszif8ycGLTB(~q@fY_P?T
z$x?+kn#0x@+Q6dXeQ@Py*Y0=4rLms6;E6GEi!bSxtxa}1Kir7IQg;U~!Iv-qI!<Wd
zRHPD1Fu(<2{6;~LAC{ME6J9ZT6dVcIciqB@Yu&j+^cgpl&2aLC#)u{ljhIfC%BRCJ
zNq8rII}$;9BK=eg4G+pOUzV3)d){?;Z7w<axcl1JVrGhs1er0Wq=I<><TpLk#KNCC
zR9z%e)2D^IIz?P$uHq#BnBFS%rCk;{eA$DyN^VGqj0~IPu~m}dfBMbabP|`rGnV-Z
zjxxF`TjGm!<Xn_e9Tl=iC<RHrUuZr&lwvlFrjEM=F={J8YoxIf(o!{YaPY4~@?$2j
z8(d1v2iI5PNnRwHVTUy!)(tCU#|7lJT9H>&M5ncKEkClTJM+EC5LSmuG#{d-Km?Nz
znl9clI0S8YguT#lNFUHZj}o#ciDmSFqY^IOZgl*XQA1Rpj4_kNVjyN0@&GX0VLYm4
z*rF^oFpd=nj|y6S^2o)0u2MrQ;Dk~a55dR5wa0f^WVXUVWC21Piers-^`mr_0KJ9D
z`%snSM=BKbVSvMfhJp=*WuRC>{Y9P6oj&9!P9RnlG!CF%+*jCf@;!*bVDmiQQ_oPS
zx9;hqKB$Avo*1MvBwpRjT%!iuG&RqQ$jouj%fFk;TJIXLNmLYvL_2XVStb?Qs)Vgi
z5#{u#g)a*>jTMip0t&S*h~Ol>|4a$1(y_cOuuPWbzi&$raa|F*L?r#SJZVvHDpUEj
zLD8%C?m-JnUidlWhFvx(EW5*!CPg7lkV#d`DsV>b%OD}~8pI=$^IoOwEJ+k`8+x=$
zMxstOyQParKte%OX0b`m&R_a?EP1>0x8pBh+cS`eE_W$)u+YYrc|1to@w?dVz=h#=
zu5Io|o8Cb93ct@mA!gJj`LSE+fb2JSSCn)%_;T<CTjVp*#0sG7EldQ2<4|n7h*G9P
za=3at7mS*+gxI;nb+k(kK2CH;5_ok~R%1We^X+@%M4qFwFvec0y4X!G0?ZgeNd?65
zkFSi>B(!Z9P=v`c%7P>>ZAf^+a|BEZ@Rnu_{{yXN%`Rru6<gP$dazq-IWM)eg;~)K
zwJQQECABEDlCFQQr|BQ!mM=<EKp7fA<|;3n6>6LGUa`}j*G4VfR7kkL`aoaDac5wA
zV*4`X^(!3SniGg~9@<Uw>LSJ2V{IFRNHft=0>=&_ECrP9$ucuo{u8~%O(AvgW)c!c
z8LHpgy?mIzGR;-O)ak7mAIcS|DB)tRfr7XFhBVFghg|HUSZS#MhVK<#gXKdJeyDm*
z9;_$;(pgXSLtPNHyMH*|gV|f^P2>Mi_D)fvM8TF|*|(~0*}7%hwr$(CZQHhO+qP}n
z=z2Z9W~OI)-s{P=@?@_3h_8rqA|qn&-ME01nOw@>1Qf&$k)|xUPlOgiTOZ16Dq0b`
zDixbRJ;tg7ft2!zcf=kDxtmk~Mp{I3_-#Tgs7E$=Lpsc93TH9c504bXje|0DdjAn;
z{nxyV!A`2b_0?4AQ8tBXS@+62X>^&KEQLU0yu20M2q*S^dwq4WzD!wEoCU*?m400*
z>-f-mnRp$GF+qsRxKKj8-Hc>ah;*GnF2H`vYvaPDYtKuk2YoYjINK>;RhjK|5|QN;
zlf<gXA+%}oVr*&YpyLH^YvoaPM+(`lIoQiZZOF+8?~fT?yDwEt5AAD|_;}s18jab=
z=KDOj6s$eK2jbkHLsdmbgOdmI)#7TSI~LGbXJ0B*U-wfi=t2HOe_#0*rC=SwoOMeC
zuvbnLBa?l5x(_ki(o}gj2YJ9V2GmEuU=LcLiHNfN(tqlEb78s6zs#IKMf04feB$Ie
z$Za?8nkwAv9qswn7U9Xnh5s^YAq40EbA6_TcTo+bOcCA@!yU~HdH*1Q@p~mD5!!EY
zQbg<qNS?-$C2vUJ#JUx%A18FL*Gh18=>kWl&d?U{11dg8mT0O&1Oofzn_9J(3kdk)
z&f$gY_foh6IAPdvgT}H-u4|dvuo1S3wFJ=d%gq@mZ1q^<LaJA!lIT`%T2jT5oGL=^
zHbvo0wdZP~S1!1woAs=KRWjvU0)wHb6YDnGdl|E^QgWy%Q?}9rl9fi=2&yY(PYjz-
z6PDy~R1iJln4Dlj;VO!F?p}uM8$S(-oH$!mB+FM7X<Fb6PwC!1d{y0R0PKHVUFo`l
zXG5ovssv!(GH^dyb6b_udtP&CFW^yIz1YJY9RZ-1!>0iA-W+JNC+w+LCd6yIr!-Oc
z=!+G3p<lVBh&g@_$$#9xkG^XVFNaX9VhtN3XP>u|aV=M;hkLv0Cg5OIF%(AONK34*
z@@vT&>59WAb8cVHZkCvvI~f$Im;QA(`eIEHe}cArL1lL5Y3*r4@jmvG3Rk}H1**@f
zJJ*2&4xe$NoP8H+Qu0<BL`PF}LX0vOaO6><FId!+{F|O?H<5&hu=<O{0@Tx?lM}aC
zp&-^k+wi&*IEVPK5BtK$8SCc_Q&3RqhmAT+(_PBd0L7lpk1@&X9N<E3vtth0WFoe(
z215gdYdvwLZaMCKslVnIF0I0`l@I@XPqd7})y9qv(9~K@h(lr=h6mXWZX@skmARr1
z%|b3Sd<#HzfSpGVHo!%SV1$C5-R|9+Zo%3aaJA59Pv<KkJ;WGK6vhC?k%|N>cgc3y
z>S{L!QX$l3ryBnV&hI6Dz<o<s;pwa|gZR9o3oTZ)FTZ|<Xn}o1>6KG?y#sown|EV3
z$MyKS=o^VE{v-{T?=9r%>}S->0z!2*833`9yKLE6E9xWlsSiHgc8pVH#k!<uUwc23
z7j|8Y|K1oy=g^xpp{oKbVNMhEiujSp(B4|8n9=FTCy8@1fCjr>iLe<=0f4LNUY^)B
zBn8^SLfVu37zI>!6Wfn4l*gpf)NO6>=>-zv6-s^HpMV;yaXT+?lbRNEc62PPs}d1d
zk;*tDY#t^5=CQL|oTimF$F#wk*&!q8xa+^K+L+w4;Q+#zp--<}vL4hg80|)0rtx9Y
zdN#s1%-p;WJ}S0AWOIc+u<!~`aeU92T#bqgt$Q#sJv{9+C!ntKnc6JdI_hswXz;1F
zcHjEmY9m6?kPWVDv0+!?(OC>u3rV#Q*0bZX6Alo?BzC|#T&;AqHTe10wo$vlzagUV
zS)6g76KB73rQkpAq_RwB=R`A}=9}-u&|O+=jexOb`q9??_I!e>H4<$;L$6xf7L|M+
z;Nc+S30`Mb0kC9w0q?-~d)_b|GJmk1cOJa`Q4QUir~mBs)<DZpK&x8<ozHJ8let{X
zYC=yhW*=V+F{@Oo;x4qlg3mt<0ZMBFnID7L@ANxbp-`&T%M1jnM$^w7bixUV8qXZ@
zvvPKyr{s|~RdW}|^wE%rS@yx}W;gR^f45n)My8vZdh>{}Shqj(YlB*btcVi2SVbEC
zcq3ff(F&`kFk#_ES-|G=uByP%m-tLhOvLS6BUe>gRA1`V9}w&^TwT#6Hud>V$ohIc
zfHSG4L17iL%?@~5i7mi3AE!!qTv&3e(w#rAXh&}1chZ>;tCrnaI-#LRD}1vOswPe6
z(nvG#XyzYzPDx^C)~Gw!`+^yYo~jx!qtWD0*a@VP>$6&d*|4+ACP7PJqS?{^SeWmg
zS7GDHfqn`1KQ5*Ick7~%(|u-sp*!vlu|>f%-QIg?ROC_j4p=Eco(<d;6lTY>Vyz97
zcluBzIgEd|&`|En>lGN%xQ67A_XC`sPM;#0erPkl@Sa$IocnlWen(1mn@xitBZGjU
z6(cn6_n`*RFgHR&yW%INZCxa0Y}QF@{wat^32#X7a#>RU?;5d9LfIAy_EK1kY%${V
zwrN-ewKCrz3A$0O^YZ@QsLOFoJuhAMwKHW&^<6QU?d?4b7H$K%2@dX#u~nDaN}M_e
zU8%<SZ)c}Kn%EM#eIrpjehkk2n{)s}v<iLMbYNGk=WL|{Oa^I}qAN|Q?x2G?Bjkvv
zWdT9iOX9f@Y-!KP#uT5T?L`!DM7z|kXruv_D;0vZ@H@peQ!@$X({yV!GOE$Azf?+R
zD0Az9u~GJWZM`fm>DjW$wH)LB0ib~b_>W5>M^^m5zx<B{<NuR1$KHUEMoAG80C+p0
zNYzrJRMp898UPUF^tV6z-<SWZb^9MSO^0Vo;eH9N`a%A)*6n}T)ORwoG^94OHn#ac
zt!w|kttTn|*rf9!{h)t`ql#;o`B#Q9O=U)etC-}U=1$d@6{xVD6hR!qRz%$S?BwmH
zl&=YkMt^L2<a~6#xaBQavo7h+!Q1faa6WTL6Re$atr25%28b->!K^j>&JWOj2*ndU
zh*KXcq%hckzKbVojPg5w{rxi-=Ix?GeJ`g3g7(G?%S-hbw^hcWwL;gEOFa*w&+T~r
zOXYjsh<R<j(&9mEpP5}XCbcM{?2w~!8UYC{|32iUM(O{R1?1OpG~XQx!&Y=a>vX=8
zCAuRZBadZ2m@0RDbz(Alwh3n5MAh+aMLSeuC<!c|x-c7atcf{hwxDCoc<VJTSQ0{p
zKExla``y|cD8g_Ycd44&0Y8Ug=8*NgA}VVkMDmA4>d#~GLxDOF_R|Wjr!*>*iVAJi
zHU!!Zi$@c&1UF>wYx@`qcUGCciarYmXZhr6_}+*Ux*Kkb(-IWq03E4i`nFdA?}mFI
z95UKC0<U)C``KqCWS?4N2%Db?r%#Z@!ATI!VGxLA!y%No0XhQ)ak)8HWi_Z!!GdM8
z)l_aC>ZGT>ARQzd-2GBSzn$GZ4CAJ3grd|wA)uF>pOnoE<ofex>5)xt%tNq>{S@Nl
zcf{MXPMQs47^NvtOYFZu1GvFdZQcoY|3xiX&P-RtUcTJS$2<8{(k!Ms`>R|t<)kLt
zquH8*9ziPH%B{;!!2j9VW{3nI(0={!3*tYUD*g{=`@MCHtPTFhn81H{^8douni73%
z7C7NYer76I|3DIHWi(r~@JWylGwbSGnr1yh^rhAxuBR3`8**3y?RPmy%cBT~J#sD~
zmhoJEY`#pppt@+FH14Vrwi!N%3jDl1d`)ZD_yDZ@?KkrGWakQjllL6r9gr*kho1y3
zVh5u#%-4rZo+tsMg+Q-<LdjcA8<-eE%C};;KM&HpwprGTJp%elDzEy=W}AnvWa{WR
zh%~7h>8s`&1~!ZjA3<o$4F|6*DH7yLq!0$e4Q^NB<?q#>uqis%9~-p#wsv<m^yt`C
zB1kSqWhgG;oMKKqs^ec1rBmpXFT8ba-eeD&#aFh9Y`;yF)xKo6DN3W?-;w+jc!wt~
z5QvJrozyoQMGO~=z1|un1m7_iZRDhZjd*hI3egQD95MiEFEx}QR+o!N$Zs}$GBh8H
z+A8lrCNB=H*t^MlEEace0c0vsaF|DPqhr6QNSVT|oAaw-)bD8J0K+47BPk*xbXnj^
zO}OL$h>&tRV#Kh=MSe6>=ip55j~euNcfa*^oAkjvV*yAU%yq{Uy^9O8F^k)egvcN!
zaEcuX_EErxyWQDCEzyXS2o2hF=J0X-_^<Jr&L%*A=T=!DvQx_HAbi-Dg84)-9Pgf}
z5$&k@s~Pm-Bu=Yv9U%Iti<fXZO>8Z&ovWiYSebR(a&(>dj_K>PQ?Oifb(K6B-IbTk
znOMzidgTHNZp8vI$1^*S)gY7j>i#}p$~A-DVfR5`e<{JOIqT{<tE9`4*<lzHBFk;B
z<kC2S?8P$c>bU5ExR=$Poy5<xz<2G%v3bl871ARx6|Ei0{sHuqR$2*B*!dh;l9-nC
zmnhHBW%q-o4ZTbF*;R9gUPcL7p+crBgIUq5;Ai@^Mz;s-Iit4=qjd!Y)_gY?5^K3v
z53yAT_$8w^0K;__1ZTN-U_^JUw;FuLn?(@^ld@PS3$|%GAp1dN<A(741rC;{GUUdo
zC5NBp0{dI$>sw`wOW7JLwki>m#GK-2`0u88o1JlsyfxPS@28#cAI`R;E~x{Jt*zgO
zMSF*jD$oBT=-3Q89#4LE_;S$yYKQ-ipmVS=a{JGt&P(A-W`iB+i_2$7jzmff+6)@h
zj7rF$_Zc2r63Hx`SuyCf`7U`q?yB)o>htD?9THdO+_((4`()FhW~Qm*3cxD!T;Jf3
zz~QvV!=<)k<pOt~`JX0gVetZFH`-T%d`QB)(fTSHiCZ*gj;@_R@?^N+B)_%=fr5N8
zh&a(`Z&&=71w<ZPGlo7zxSvh?ApIJzS;&0+id|Y`>O>|l92qjKJpR%IK}wi7q{Ugi
zcxRlM;JhH;PDkJv<U&ML%6^oIvVKCu!b8Q`o5JMzd~JH{GP;`%dl}mfo*g%hLv`(d
zwM&=wNcxPf6^=#2>9W|?F{|BiGTTB2->q;tBMs<YX`YJ|duYP}YVMGqTJ-|ww7SOW
z)Xn$_NSX37{uDyM^VFGcG4xLM9~Jd*(pPNXl+1sP_d4?rvkKJJ*8d_$PDPN<Q}9(V
zf@W1<yHpp$g^|VET--6G$W`ia0&+LDpOkA^5unGu7vd8S-ln6p>&JqcrOSnyo+c^O
zH-hGfIKVT;S(!5O?H~RjvL23-#--}qAhTtgOyUNbjEO@@=G2ZplpJ;SI1ZFQi*?Ti
zi*z3ft0W#ic@3D<Gpo&B53RwABt4#;+ta_o|1_+1lG|RknS>SKcgL^t`S_9{f7ip!
za$sHK!n}OEKE5?)=fA9=W~tdX=ropPc5(g$Gut@79<v@6I?K+KC@NDU{Z=Z(38~#M
zqVs|trSj1KY}TWF;oj-XKdLERMm3W(3H{+jEw>luLq<Y7up0Hc!uc5A@o<^4t(XNa
z=u-KZn#hj053X3w+l|U?Qw%&ivb6X5B0}OI@3;AM?Z%Udn4v}45kTIGYR+xaRekCw
zx}Lp*{G8$qY&qqcJkfY~#c^R*QZTr&KE%X&X_mX#-vpMhzRD9G-nQgiW}bSJ3aMu&
zCycIju^shc&q^`r7jxN;ozr<ejil36$xhIoyvK8odeO-J&dKZI5%~D?I7)N(-^rN%
z*QpoIf0}yfIavMwNWTi1iI@6+xkTv^007AUOS``TO69=7M(av#Yx$ogVO1)>eBi7I
z-<Drc)#qCc3PR19DePiegs0A^Lr2Yg2SY<EAbyl{^cw0&qU6mAjXht+qT+FgzoXuN
z;L|Yv<fOSB2hB&|iq<IBvlzL>9J>_e#(U6=YRFX*O&q7gynhvJ@$s+|9<UMNLZ$0y
zXD2|DaW4oaG|0~cDdMyJauE&w3HK}vALmF9-iGF7H-Vf&mJ&-VQAF4R*n9qamOJYb
z?#)7INFZJxx<ZJWo)``knav<%9I3#s0!hWF$0jzIze_odD4r}i^QT$B4oxf*k#32O
zbR<{15)g8^)U<Ybr^oAM<ETTtSda{m(nwr_nTiRqRx4h0pt)^1i2eF0dBTVk51`1E
z)Nr}M!<{<Wwi<Pl!7t|9kH`0|#!!7BQ*z~yQfB3l|JLbKXftlbPEOR0T_a?S^B5XR
zP4@9mTG*d>z`WWvC@COR0xEplVjy}{33m}A-g)|CCHitsCARPfq=~(QL;cUam4+Wp
zW%uwxBt`jT6A)GP>9Rt@KZzXe=&K)~nrTT0opHW#@~*wea)}u9Ew*o4fr}D{?Xv_C
zsO6~N27*AdG>+sGs?}0bm}8(xy(|5R@QW+DLW7ZpV*JnjU$^kU9Wn3tjsal{DvWW8
zAEo7>mM@6f<Wfa4)ANe*MWZ#0CG^Ze58NRnnuI#O=0tcTbzr>WP|C8?x_OS1bt}3B
zyDms+evZ84lnsnBXiE4<h;LGxb3;h=KwhgYR!+&ovmmLLTSMA{#Y6{YqT4g0sN@dg
zVdN3~qNl?|t6wSp(z{sk7c+Sx4gBP|w8o6fM1_AcxlG*J2y$pyxJ3EpCBoy680-*v
ziS<126ZI8Hv8ZbC$M(Lj6U`Q+W+{yP|58w*AdonK*}?CWzp~1iNAK}PPc@_NG4z|E
zkgO)ex|C8(Xb||eCQ+=63+ZB+_>r6T8&mSJ?0ZUutC}Y#awa!VBaZs{hDRgs0nvl?
z414`}zg!L7c#BROm=cSj!NTfp5`uOR{Uu{6Q{}xQx8LDNfDZ|7=DSE*i}mykXJtPJ
zCRYP`^&f^pl7Ac-f+Pk1!W~P*5YWYA*(Gd90&JfhQ`P_2!y#<pI=I7*gr_GkpEiCU
zd{~Wi#2MTXv$;`VY&~-tQ>j_%_WbE_X*rnthOBIeyUB6gfjEkd8y?8>_{9j!XiVEJ
zI<Z^Ho#!w9GboYpeh*X3$L)TpPRXfGS?OTmSlN5JH|kgcb=cvwl(uL4ejB(s==C{h
z1YEM1&_DbkE%0hJqv+u7Wg2F8|9XFZejbFTi^&GJpxo!^lfS>a@&^C5`T4TuckZ5b
z%3bB^8WJA`7VVr@whB2C(pAxIxbS*fw~NnB>ZXggF!;Ly;C}&F4G6m8(Fz8li3tt}
zymFfB;_k$B-aD0t+xwKX!*wS;qRhyc{|~8&1ks=`6?4PM5NHHofW1F5g3N|b5dN|~
zw-u^d#>B{)y&u|Oy1vt?^`<Ytpr+_C|BLBk8R!9!04#)q+6-H_&Z5*@9dBj{$T0Q6
z^0(&Z;G06?Q6)ZauA}93z60_FE5B3~m>>qf6yGWj6sP7(Ym&L*q0)fPO5?W7e;w7O
z3&(se$quPWep<K2U@Pm#aR1hgoK4}X2GBKAi<FP%{>Q)aa5d1+plZRm;9D%C3#b3+
zNTTw4WNwHU1_Gvf*}Ub+zftXoGZY*g+{tt9`IR?PeWT2zKyI-rEf8a{br=zKk-=j-
zl`8z7R_l;vuy({3Xy`hMDU79IGEY&)BKN4pbV2yTsj<V%p%^uSnh-2+Y;-0+e|%7@
zz;!GYH29>ta@YA;ork3=?n<SKWi$y>l2F+(wrORrB&McQ2g#s#jrmzp+&(T=vAk(&
z3^&YP<X&01tt;0tu>~tQ)%MmfLwhK&p=z1szwV~~b*2p%y!s>CcVp`IVP9k*wLV4S
z^(S7fzUI=nG|OqqUJ5+I3U@@1>i4s7E+ijCR3Asv2p;xr?FE_fH=Csq2PXK5WdX1~
z6fYNnT{(6ZVZH%ik))#5ea>>wKfg4^6;2a@s!MOFtSv3X|ICR8>@^Y1Nx8Q}jalq<
zV}^6%tR(w*aHe#tK})hx_rr{iJzFh~xxFb4)h0qPAGnL3qu(oX-^O9UyS>zUxUD*`
zy6>*$UaQ<#x5>+G`f{cO>L-zrpgP%WJul?UU`1U>(-9+zDterF+Xt31cg-wqVWXlq
zKF2p(u?KkA!7Bi8rU%6DFWXefIN5MRWbAwCYF51h0t8eX&Y<j}^fD5sDg36&7y?2h
z3K>HP*qp;es7iT0&9MAkG11Mmw40Z<tZU5e4~bTrq(?&-=JIrL6}h?Y>(=fAIGw1O
zq*GD=*6Us|sesk!rh-?ek{jmIS#^DghOXj**76}#pJeF-6+;Ls*jF)pWz<5JPTd_1
z6W9bw{}w!S%oTq){j;&A2c`?U$&<>*Ch-xcfSnUx*~j8J-z^z>X!X13XN=NBy%tbd
zrw*vG5ObClKssh9S@7z9&k`?q&oY#F68OuAG<lnX)rq^y>A-r**lo<xSq)IN(!}@5
zJfuXC2xR})gK5~#$mW%{!mxe^y&4Fn>S6=+k$>No&M(Uq67^P0Pv=u+Hw)?*!?SB@
z*TUuc>;E=i{~tw~i!>K1KNJ7}2p#|civO)F!IhO+hnexeNE0qK&XhMso4=`egqnb{
z@$T^qu)z7-A@evg1t6eD&058xHIgTsiRufJ4J}JTTH0xBb1uC*!2UGng)F&j@tnX2
zZ!0xf#O!P<+2eQ(VJr|@KMKw6_F+f3UaH{K9nh)|>N85KRjh4RG^I<2XvMI3VBYPX
zpGRs9?vY#<U7Dsx53rUs{M#`}X~fe@;oQ5!#$BX{={=Kl<rIDOl?niiQB&95ufT5>
z8Z6IN-Ku7A#*|(g)T+gkTw~nRO^6oi5AHvSoZ-SLk_4HACW)ij>^-m~p07KsYBR;j
z#;mQ)X-~b>cW(qB;am_LySRLOJ^VZ$oQ=1|2w3AKG^2c9Pz+SXVPF}mw@Viu^Ddyv
zm^#Nt5=H3287>G`UzlxQ961}T5gmg23I6e&f~yl%z^VQA#|8}m?SS|S`e5rcnAsu?
zAFv6DXlHT$f($`L`1b!Z5FgivFW+4*0WRI&hZG($XnbHheB)}_(6{&$#Sobj8MCR&
zyJzd>VfXd?QNW^NtlbZWr2s~NMyG1Vd`xEo{X43zq1$tVH*Sj|kdDR)h6U{1k1$<C
zx3YTAQYJqTfhva)y(u<d`ePLgQs5)`1v=!Q;cc;`QN`B5Y2Dz6al6jAUSrj;kVtf3
zdk&|Xqwv^=195v6>OUd1X4p4e3*m7?9Ewg`HouaN3QIdDg}{CG!CCEX7!XU+XFw}q
z)_yl;i4}iEB6}Y#<H~Dy6y(W@l-=9HZj~c_05I8aR^EKrof_IJH8u<1?DF}38vp0O
z)<3CFHnO)L70`rErr29tzi#IjC9_X$Y0<Z5!^#nxkF}6X6QUV@XH|a>N|)N|l`2{|
zOP}|42jmtKwE&M%M#$m*0A+T>hsp9hOdw?VtG0nmk|M$*+dqlNS_PI4Qk??@>+33E
zb{-9nse=q`M{>*~1^T?LHg6K*9DwXhU)7^85|)U2Oq^E^`J$h_uH+15Q-l;8hgs53
z1Q78Cp$79;^KizsUty1koZxMf=t_??vZMAfmJ7vig!$kau&j?+-NS>qn+q&MAvv}R
zWi9dhfSm(h;Jg;10O|XU;0j_CiZsa=7e}@a`z|n+VvrDLfB+Pd;cXXH&e>fwPh@WX
zL`*z9&Lvv@*a3A%%%?S1yQX1fFER_~s#$tfQkast?-Znxq}D#44Sx%05{$UcAv}cJ
zGX4kvhCQI<?>$2pt<A2&bNo&mx<1Y@FHqX9z^bRX@IV4?{9K{%EL&XjG{4O7Dw-27
zyUzH(yR=W~2$zcvhw%o<oY?wPD-el5!s18S$q-&d%7!!sl~tJAm(4(13K@TcG#C0H
z;=i+=xj>GGZjDl1M*m=gSeWezd+nY#w10oSNbxZox_!Qa+`Lb{h@o@Z$bu#UI}F*!
zIq4F8nH_-7lCWC^BzK3g(RT#*A40?NjQ+7+>N<BCB-V|EKtQSr%K}_AjrGDy4ySIS
zK>z)eb>#a+fO>Q~ViazgpjtWK7cX=Nw~w;eZ_t7$Ct%$vF42Gpmq?xQ+3votGTjZJ
zyZyvXw$TEZ1-FMYiRuB`h#j=i-Djs@1<MWvH$oqKA9LnkE+^MC_=NKkNBidY3y`Hn
z_vGm!oEfCD0SV|r<Bt(SB?!VlFfL|8?FqvJ`AZ@!wU%KG(#MYG)J{_GTJ8`3>%}W#
z7Ci6|4<96`FQ%70>?m_=jB1>MkA4yW0R@G-{|Q&<9MtYe@jNEYq|b5;qX!iynUF(*
z)^X;U2RFJ95V{^F9xA703USp=g2-~NqABIM!vMZsnuFz|jhPp1rYr1@RB)j+C0y{P
z^LWlRor4sD326$+gDd#U8?0A2<at1CkDs#e)&t*tVomEDr0GA86Vfe{FKbZPW^o~Q
zRjNUH35P;6`g&91N5kzv-)}8pPLd#JBz9jntvzlYbchsY&U!t_n=CDf*U2k8xQPb^
zR_H=9A7AhnCN`Agnx<Qyrl>|yS;U$>m_kW1A*Cp=c`yGB;W+mi45S?C<~k4&2E6{r
zmrAxyCdPbMmfB4*MzWZEEC~}Y18)p0u*)N3ks8JG_8Tck&RA3YfZ&TXV5P(wp)QTY
zyf2h6Se&U19B|n7yy4ke0_bnE%~D68;OcMyIm9Rcn+6!a`0fJ!ZLo(z{ND;|R=r4;
zD6%DcS;B**QAd!Zs`mvp%=UWNepJ8dy@iJhPwlKPJSKRfXY}x~#N^(&_-8!9xl6)h
zv|xPmXAgdvH5$`T&TiL{?~@*jMKW1;J{NpI+<G~SoVP$YM$L2PoX9reqDrO&KH=do
zGa@E~vat3*abmL00N>IfkT?z@AJ0WI0RnuxY!vusG{CiZbfo8{zrmVT@MKT}Xv)4;
z@5JItk=HBDv#oJC4!aV?0-`CU!c>rd6LXjhsaXIP3EsQG`1o1ixRdOv`~v;u*nHck
zIsTR?pr6ko%iZ`TO^c=N$7ZJ@9f~OEDb8YzDT!KPVep6F9~0BRn&NqsJEG_hbkKN3
ztqd;s^{0voODFH;ZEO}g!%8P~q}a(l3nSEr@H<hD_a{yUwt9*}@bVExi3Nw$>ysw#
zj+y)=gKRICitY1@B?rh^pnSanCp-$g*l(Q<^3|Y9=owYiwmst*{D%x!&?%=?@}sME
zx9O@wR+XHaP&-R0H85+;Dot=)mQ*qov3tcTA5zI{5?3@InwV!eCJDTZdWC@x+3j&S
z#hxCV>pVA28P`DiRHDjue4W)x?8PD%2Ad%X0>HZXXIE2}#-Yz36k~fWynlMOx-jC*
zgnZ<%+sF6$OYwD9MYw4b<s@aKl!UcbAue7n2LGN$UkRHO2+H!jkyx&r{Qzmc3=hJ9
zZk!%Bmf!=l3cM+J1mi;77&f)#*0Y+O{ZF23We;yh7pQywtgv2xb7EKMY0v^{9|Jpt
zA^|!*T@T`3V)C!(?bJV~zhP``cuOxu2aJm99#31t3CG9F)6JKtlobj)2`Xfvu<!Hc
zoOaK&lp|7=>Q?zK=^#}q)Y!K=!}_%IjwM9k(et+YYBQleDhS_B?t(#FAS=!XVi}?(
zE<r`o2V>QlulDC30k_aGe47b^WH`dNEBW<N-ofMYrP25F5ofm|#R(#XuH<|ibXMuZ
zyLBGmNX@fTkY@C$aq4=hW*BZr#|54?4T-M^&!XERCZh);%kn)s5IT%a^+q>~9g`8W
zBxi_;Y?Pwdxr1!dXXFY<?WO$E(m#KWjf3o!l$E9eAV4IGtKz;)+rs6(C>-n5HVEZ0
zBgm>qpoVLKoy0_`*|9|xCFBzT5wsARg<5b=c`Q7(q`80?)puF<&60^W5HOg7yFEe{
zKsW-shG@A;E#V^#YBK%r+mmKKqL{cBF*hzvjE!;V8Qk%19D{>ydh{dGAlR=4jsX{B
zU^Vt$xl=tI6UJx`r`1ZfbbCJI8&Wv*9SiEb0Gy@rB{4LfvR-g8aJfA<y?<=pUdDuh
zHDCliTlcUOn^%Xi#D?K2FnI!=FFH5Q^2o(7F6ELS)iKZ2EHQIy>x;E*c6}V>!nQEs
z9AaU>fVkM%w?`EJaqV|>LO{)OA$fdUuUCKfb1SlZdp+cd`y3&08ao3@sqG3NPdHas
z>*&qx!E%p60kd#bS`P!uan+)I2lOMvWR8PPa|p_aKPnpufW&3;(9F9OwS-+KonDC_
zos5GGo$fuHbZOt@%FDcQRxRH39rU_;*!^N}ot6==ttT7`wuOr1ao_ZIT6{}WJ3?8x
z)^NMArGe9ym`AH=g#C^j$<fwZ`d10`tlmpibAYUuW&on^^7V&E6W=Gihr)};R@Wmx
z9xmt1j$%4e!x--d=8#Cu^2*7Z(d-{pO06q|?kO0XkN8QI`BtnYk6CH`gi>Ir?QI1?
z1N-5QQxW`0?5mjz7W^enJD77CB(g#GHZn2>s0bJ<n(YUgGheTo@;e;FZf2Og4xX1&
zb-cT}nY7DE!55>zE7{a8kB_|`3aY+M=dY@wepJYlXS6ChgyQO~ex=1*lH(5ZMZBb}
zG4HRa<~SWkmqVh`4O*Vr%^|e$OH!Xzt2FGsmW?U%t=fk%O#P~DwmD+uzROfuv(?|0
zO@9@EA3?+jaO3EXh`WhEXAw58tk_UtYJsyt3Nx`0*>vy<Ec3{fbAp{S<k2WBnrXJZ
z0?crVAqf;I38{~{rU>x{*fh*pj7ajuhZhllS?kmr%kp20tvS<#L)kNHsi^dK&>Bm@
zH3^eiiT)h=%8gP_j}BWu02%-_j8R?LT1~1kTiZ=sY&yPGzhodsUl^cS%Tge<bZ^^A
z5JzE6RTdTRH|YOqH9^<#hKgKkbR&ORcR@f0KAFvh_@HMg)6~aRjQ(@i84*JwBkL?~
zmPa1O%IO*I7?1K^JGaEa3%*~UDCAR9;ca<Sdeu|L_JOJYF|ye&ZLBAv&MIskYa1#x
z5zh+zbm-IzAe2!3ZR|)*<RxJ@yS)bgGUz{-ze{uARR+36Ab|<5Y7OXbsWx|J=JDan
zC4ZO^=_z0+svI?dG*p_tgRSDNWg=o=f$Rkesx&;RCyp8f&2D%|iw}vT3|yfBQ^~o}
zp_Vq9fDjs#XI$oMiY1#jbV5*-s4sE+<2~)%(gY@m#Lnu0&WVO+%gz<|IIQOmho}3=
z6M73kVE9~iDlVBMAw#ZA&s2&qf>tB{+}pkGDC7=Gg>>(@Czd3U&EQ>4OI-1iXKl8$
zA`=3Te9R(cSdBkLf{3K+seGY<nbYlDdQjLbD&nIw!li_3bqL3|R1X8g=CJ{O^fqgB
zyTAzTZEHP-3`eOJmDP_k1D9dZtct3l+Q>*pK#>43<>X&^8-=j*BUZ#{%+bT5(GHJj
z^-e17?R{E_>}EAsBi@B^RN-Jx`~5hGkCf~eJ3tdw5TtgIPb0*rB)`=l1~#5ENes8T
z_9o!m%@glXhZ~M)VwG7r9b-ElZDLD$`EWJ_ZSrwZ!n01Xo159f9bUvdv`GW{qdt@=
z4Ty%5U47shbuljd+N7U0xm_-2N|jVxSqGpwn`G0usl$rBq?^bAQ<BhxCR8V$`8+W%
zyAT)VfA5n!O;k~|{2rk61gM(GHDJ=6Iwyp-g-NA#lb)WzG;AU3DD{#Vz#!{Jc0fT9
zDyJ59HQrSxr}pG?M5AQI_L-ATZeiYM)?>irV7bB4m9D@I=zW#~qUADtj?(e3rZK0T
zipHu`^c^Of#bcaYnWKOcbM(-oPzRxYxl=16EO4W8hRY@0_TicLNTQz`n#bors71M`
z(W-_EZFAwQh9@ks(#}KU@fg)fQ;E&d!2QkW0r`&Hp=_JYq{3e(=Z|DT0!Pm-bOIU<
zu_Z*>+j}<x2s<NTty8IXtBG4SZrN0SQl=b!NxGev^lV9>{tLJ3?&NJrG|aHf)d!sI
z&)q`K?LtF*PWG3Tx4Jz9dX9Be?8iosI)7Xqt@)Okl#E;Owy7Dcmz)d7OV$ZvYGu`*
zZSu*g>~j^}Q$KsYID3x@u?aeP*m95jgKtySlcA5^6{NHx2<vnR>uTZKC;QPI@Lh}Z
zNpmi>YEHMgF)m~Ga3vQmS+~%79aZ(}OktJ{O-T&)wgKjq`1jD(CUlZ|Q`U~~*(tJj
zZqz@)_;bj0^ez=vh;e~ofo+({E8}6W`Pao4OzjoLs`)NR`m`kxE7TY|oFR{&mQS$E
zJ%`ssoL7066Eq!vid@gSG`b&|6`ohNmdX`;JHeI0NV1S_<CIKK7N?q7RCa5}w%Vj{
z+vNgxnY~WuR`W7sOVYfY7OP$dP}>Zl!tvcw*3Hjvl)noo9n#L(#Khxtf%J^KQ~dj6
zopkVol=UQ1_S7bX{OZr%k@U60R@kRR3CUF4N|b3yFAE(4l*cP*OW0&Jj)a@BtE#0H
z(idsu?q_N0GA)v)eR(6IV-6D$l=V3}7<n*lp@8+q00eWhn*KC$4+$pVs|0rteYAV`
zbzVeWe1RUgzo4t6HTPJq_n501EqjA8@v%m1RkovHngD;awS9m(phjxpg}kJ%Pe@Yb
znVvC?LbaY@X^Zz!c1rXXi-9eV<0b0-76V`u!dV4)Dspjqj#&%HdeK{G%=ZZ4<x=Nm
zIww>MO3W(z&}qaIF14cKUbb7<u)b&Tc)b$DcCtJSSg1SA<OJr!188^A0dCH;7CShb
zD0#vg7faO*a@E3i%v2I<KXM7PU-gv?YPy!PHV8ypDkcQ?I|QBBCmhaNUKS(ETk4$e
zbkHAB-*;F%Uz=~?K(rMj_6@J;i&d`atK(E4V^+te?#70m&Nd#lD;6puT2x9NDSd`+
z93K1LZjZ+9HYQXa0~}|(U7nvmKVS<ZwjfJZK9}z{9xf7oH==_ez%Iw8u#LH=yNiSg
zZDwZpQrGjLPR|nR4fETHZ6a&Y;I)pyKU0(yc7wa!1SLB6&+hsNPt*!OI_D|6H$aw5
zvwo?CbS@;JtJ%u8dA6EqnLSHVg3qk*zwoo?0uSvE<Cv>YI~gumANnm3kr%*rB~zxB
zNFqg)+)5#Z9B*)fuqM<LVg~gqYcp$~DNQ|X>!X_72AG0+iLc7)epPEOaw;$DWZIpp
z1&uKoueacOlT+c-uH_r3tV91)?~@ql`~BI<F+#hyaMHo9rR{hnAtIY+_qEygbw{SP
zc(U}fdGnyA;*<j9<^}7M^Rbp2G4USzF(O9Gu(YlGk3#U03~V#pj-_|5YxrXMc_$tl
z#-vuH6t#jf(J)#MfDH*)^$wAE<XXX1>5>nR1%_*2NuPHQD1q)vW#UZ9et<CM>#=4{
z{1x-+WebYNaB0iM9G=vrqqH9#vagZ)gPGRHpK%e2>$Mg3Mn7?c*&@Tl?8mC-eO0QS
zLv6GR4aSBDq}JF`^TciSe)i1-HtBA-5RG=@+^5nHJ=*$o2bY>H>}y!AwryN2-tEv|
z(t}S!?a8_Cb>j0=-{A;uQ_!!;QRACwpHnXv=SQ!b&!@S!iiU)V{yRxgp~=JKswK9p
z)_>pgQmyIhlf}+YlUg0Qto3*O6xp|jize>o8<JnrxJ}ZFG$D;_Q;sEWHB68*&-TO7
z0t`LM3OW_B-bcmOfUl2(%6j`^@$FtZga$Z1B2UaW!dF|#?8)YSFZa=l%0R{fSwNjl
z9YuL1LBlRJ3K-|>mKUE}Yv^0bZQV9kl{72mFpBlBv0dbKtZ_fB$jSdYLUqS$Sij`A
z98HNQDoG<rUv5VX3*603WIEOqCODr8F3qg72~kE#pej25Xai-sS4r}26P~YpDsy4P
ziZBB4`MP_G5Z#;~I@QdG^xCq|p_Xx?Rn7|1!VuYgy;nl&447P{?x~z^Gx(hd`E?}S
z1K}BGd2?BEHDo;MOgSN^t=u@w+!I}#ef)Wv@e$^7Hw#p@tLHrky<y%P`&qUE<ACU=
zMdKb&pd=k5_bX#*fcJ`_12w#(kBWv6)Y+~U9N>$#__mQq!CrpS0e{<LY~DZR53{@1
z9G0$H$dU#Du@Ro5Gy!qdC`rNGK-e>w<WyA@;h~zI4Oc}kX=8_F_tT@<KN^NYpX~k8
zVU_502%WN<;xsA7!)Yt&h?AYqfJ^g%+^Z{}M>T?mu0HRc!|VPS@@i`ZwWCvE3kpYI
zpb+o!&qpe*pd45dMcT$*#x(%{D`IldqaXDxh3*aTKTn5oz{n+UVFLh|sR96y{clyd
z&Gi1u8uy@vh0FTz@^_@qP$D50F(6DTt2NdOl7W1Lt}dXpbaa9{Bpn(Pzq}Kj^Ty}P
z%bJHUDy{VVb7zG*ey`@U*R$1afz6;c7MO>^##X|0)UDC(B`1Q_Ob_(sg%BY|)B1yW
zfie$#LJ-m~Z1=!U1_t;B)l4WKSp=E}q9Xr@RbLR3pDsQR#`>_b{Q)A@y_slBc3SXq
z+7K@v3tmJjObdhZJZMN>Dbz)qGWj^mwo7y{4<yx8FGSy(Lw;04;ytcbOV3SWr%q}m
zUf)OrI=Cv&6fOA-$_67%)l$FB2VC@35*l53#?<BgK$;%K-3~yPfg=*g14E=a<jRls
zpQVOi9B%jKhDMdL5*$omp2Cy=1y_@a%!9m^poB>XI?p#QC%^-9ZGmXJzB`HZ6s8C9
zbeAo8fW_!NGMwUqAFiZ@7^4?WF|pXDK{dcYsN_m?O8>(@53`@(GH2Tp5gbAKfJ>C-
zCU^=4BtJ*O8<6^jywkJ=S_AEe?py56^4KqJ0HF-OCV&TP&khs1Nv@*jNnhtG1k5<r
z1PT#hIU`eb+$mjR>7yt|P9L%@h>4W$v+X3I8g@m1V0zVcJyCMsV^sQBymNNiEz#+5
zeH>A;&bC?<VpbaHTmLJ=uDq1eP3Iawk+ZDjddQ${PW3du!TU7Yf!PL2MEIe}2L1d&
z!=ePcK+6<gS*#1LA%uVFVhduF#A*7#kNXe=gd24b;^+~SB-v!_@u0AbxpnZqyjkeJ
zL0Ktj%k`@63?9-q@o5hSWd<P;^tpw_VSBN`Yv<#GQ#h1NiLAlCdI9dgM{Vp10G#hD
z;kqbvgk25FwtW^ZyOrH8P*o<~0*>Ga>)R#+7PoNrfh$EVMC0`&ad&@8C9gf|@nT2Z
zWMVyNripANDZbTfTKtn@D{WuD;yoYH86a2IHkJ;c+~5Aff0*I7UA}SFzl^r{7}M<f
zoUUAM8yHT3bSMLJyCesV4&>ogbls>E`&D#on3|Fx%8}|{V;pp@RO(+Y`%!Z|M1C&c
z3|LOX26SkU2cD}8>?KBej~iVP3I#s}tbNnpx<EYk){+3u^ty={sdIhZD**P}=uI=U
zv+Q*4!-raGoy^2u{_hyN8v3gkQjyO>HB1Nt5p%WxA&ciZ`Z_+dEblcUy^Cx&k0eUE
z!>OmAfi(J_%jZvMS{Fc^k*UMay06xTpRUY*O#-&fzynCI?fZo<3RmP#do?>&=%*+4
z8=bb_>jpl+d>QtQ()(LXuyKHfQNEi<hI8R~W2HT2b0TSF!CDH$+TW_^t`mhU3?s#8
zYeazY@cQ&eeEW2DdJ=l^>uM~(BThetS`+3R*3F&(tRy!cBKEd&uCFd@gU2FoX9oMi
z30fb69CelY;W$|%ikz)i=92)Y*{UQsd52oOAZLh702o4)qSmGGwVw59Nq6y}gGrjG
zQg@obc{)|0Mjp6>d!OX$K`9haJAGE}^<7JNu_D&vM7ui?q8(!f8%*4D2QPwNwR)iG
zZwx+9bk31+qvy-&{L1c%;xNzk4N(tf1X~EZk()N&I9s|WE;`zt5*)u=H^6#}skZ2C
z3Sxw<o%?r**=%j~(DNi)UePb=K?U!q^D1ogKMFtF<JsL{oB`oW;XvDe!a?-mGPf1g
zi9Pe6M&rOk#J@vgo{zxw!2HDIHj~C_r2c{xlkbRn*4r~_`#K6x#Mu!t_s&VVIm7xW
zfaE2q;(b<qGz@a?I!MtM2`;%-a!ka%PvGVUt6<lFX@9sf-ML4v0BY0RvJYNx+=*ac
zoU5vgw6iZS)m2A3jaGh_8eqF|LL~Jq>x6G?Xv}diy>hudNq2m5dvh%Akc?s3Sac%2
zoz(cQ>VV(1^wRYr2U(9wBbnaNIqFT1sw5nh&0VjXriegp*FmTh=Tsi$#z`Wke-@8{
z4==wE)MGM;OY#ljR`t@uQBCRCDi`z$JSHa1iUga5m?J`fz+;PG@QS?4=BW>nXWkQC
zo)iL$tjiHYvOfj4VF$)3=a+GfT7Z<S2F<a#7#Usv3eQ#FhlcW#!A1nj>g>cM`U&L4
z_6$QfuFh?VYlaB{vvoxJ&oeEQz%)@Rv+^^?A9C2sQi!*kvUvV$8^v4*<8#gx;HfpC
zC2RK}BcDlnC#<q+LgqJI!zY2kK)%`s6;G|~M1qze8~JBXx$u>WbJr#|21*7TKji%<
z9)>SV#t?lpxZpNhEm83o^Mq4}_j5BxFAmSFBozdlrE`~G8OcyHD20s27Di?+IF6kr
zv6>R~)7XNSu*~rikSWd^!TO*qY70E?(VsV0j)gb8DK4>ulBX$;Vi0sB7)yP|LC+&T
z?<*9B)@y;^YxNdw7H31y87;OagxP*YKoiM!RjC=Ems1A><{EI0wEuidpeSrK9M=L;
zgmPc*v@x4*ls!6Q{?90h5KM-E1d27PnKBF{x~mOkR-U?Rw|d_-IXOrgjOz6sszX1x
zI8Ca67SNXEpkkFt%QSJbc{*>X?P=H<+pWdLngCPUanKD92v%&UNtSI`0!av-(*DzR
zjJ~2lluEX~R*x5{ehuH1R&)m@e_kR#@iODgTTQl)4f%4y9|PYJnIE-Z#oTjMwe2O8
z%D`gb;$e&>e}6Gj(zUfj6gr!0;d>=*X-G0kNB>g*U5?}@bA|k5O*E@gQ>a26BXcFk
zb}zLdjrKFt9;JYCd$c1gtU+EFYXRUT?t1yQoWfU8avS;<Xg|Y`Rb^W^*dHXOPD~xl
zOh;h-8B4A?wwS98(!{xRm?mr+?uD6q)JuyK`8acW{ME|hb?W5S+M}{aC#gr-U<KiO
zEDO#-9?Q9<TH6DmQ_G%%RrNWt)**cOO`|z}k@p}m7+nL;YA%qV`VL^JBYinO6-=po
zvOF(_UgM9qG)PX<YR|W6cSqS!=}F5*X*EeRcle%tw84|=hmUg9`f|tka)*w=1(d==
zLvZ@xMjIrvB1X^UH=BUh_spqL7q2W_Sh#}^+PiCnHBRDk--#<;Xo3|=E^#wAhLE;8
z;Y*?ASQSjcz#t2j&A<0f!1NZ~T5Vchtxrp!OJaZ<TnVsO)GOQkOWXS=XV=#mHSnVq
zw?xA|MsKz?^IbTNSC^avKY@*zi(uObv?>9dt|XSKLq4-5+;F$ZbFy;Pz$F7@V;|#E
zhO-FdaN)>#4Yhxqlo5Nnl+76V!b(3Rj0N`O;=Q*}WOIkwsZwQhry|*nj6Cw|1>-ct
zb@3Fj#-eGC(_BZnwIvO_mu0WUjie{@Po_s^I9`imYBq5RY{Ym_k}tolU?X){mE)E8
zd)slYEkhc6%8l^f5@cNlLcAX2zXx^V+=cTE>3*e5<1})Sp?>`qQAnJ6_K;oUCN4sL
zJ{iAC^J9+DuR%s<6H+kG1z1J$PFkB&X+S6NQJ&Eg550Q3)WXuENQ-f8C4w2J+3s?(
z{;o<#-sDO$8*+Ajh<{X2*G6?9vPShowB@KuAxYVcHQD)*x#ELJi^F)|cR>v*<ISa%
z7Utxwsu2VA!MvPeO5_RxL4%}fC@zb_+I9%IG-|$qR%3ruxIr;|&sPXIbU>Z!jm_01
zqf)ecQV9&N5P?I4$}i=&<NyV_HWUx?B4rC~e}dTAG_mvaqXIIOWGl#`83WBYa}?ST
z&k>Nu`T3ou#QB=~uX4#+{l4R3JQ%Df+*{~t+cfEBN)?GB<0kIq^9`NS0d}4QPcxDa
zf%=ey#B&K|XpW@>lAZ}h^nA;+#ht~%KT&to<uG}i9mf!dxm8HvtH_5%iw!-(lG}!?
z^VOM@P`4aQ?{G!Sy>FZ-*T4|RcZgYm#h&sGGvK`<ffQ5A*OUcU*9uHEkPJWZFC_ob
z*newlT67Tw{mLP>7RA@kU?a{5U^{h<rj3qAWTA(`qOP&caR+lHP`Aio6HAK_?<;7O
zjAMwFyvvL8lMiC#%qvo{Wu2kG9YE=)NH`&a(vGgxFvG?hlu2S&>YlsrZ4!|*s3D$^
zq;3QZ<bKdAELP0;aDGUg8jO*MHCZXgchD_TPQp-h4$SrIg$l4|HzaWt1n`z8owdCZ
zWv?Y)=|PSyXOQr_9MjjM3~6E}dIF^4;W$f$L_0&CtbamGk9F^{X<k1Zasos3vFb;j
zx0c$XkIrV-8ORT{o^PL8Njx;Cm$T@Ei)0sY6e_yHiDa#0iG5t2FQUn)e>sbAE&;el
zRb<cIXhuc-=*zx!BS@f*13-R+g#8;YztLh~8*?0j=srhw;FBJMBb@L<=`+2E65uW<
zm#>L!O5iByO|t(JzDE0cPP7JRtY^W61bxe&?EG)Ml9NTLRm$t44aS~jcu^^u6j;HI
zNKwkf+0}3IF=w?+sAZ;;(?vb;#P@E|(T42rjiN9`8hIpUav{Z0Od{LiqG<a>mU%jh
zTyGlnDzHPW)lf!*<l|deEqIZKY`?l6CI5XMO@abZ!|bSODSyd6cz)1}G&`Oc4L03u
z_nZV`O9i=h68vqFnYEO+@~n~KuNn^f&FR;b%N35+3Yx>OQkVoB!*j^ybit<IJW8}6
z3Wa5Ij2DI&hCaNwq4Qd3rHL3U-c9Dyan$hzMq3`QcRW2qL57Xs6=oVkq8px1R1xOf
zwX7SRD2*r*kbqqESU!a0OM<1{#HzUFel`1_CiAMc>)>QoK)YP(Q#}Uoj~#5%jFTP0
z!%uqnsZOJ5*4DAM2UXlBgI1*<(-7|{yy1j}zM(?RPi+~Lm|AHQi;;XcMN-arF1jQz
zS?>Ch6DK&jC~B-aXPgo1UAAdtoo9gIzBvpC^MH5-By)7OC<wHT?RZQ<r@Ql{(xm7`
zSr+Va5`hHA(mnxT+C<o^l+e%aYkwxX9hOsm-5hSGGlhVWc(_fpeX;6JH_LcWfWsE@
zx)Bv?1fFOVRx;?Bw6g7<!p<e_VTtyNj^He*qfCFKBH_QE9k^%E?q2l8&rbn-=*>7`
z4-t2PoaapQK&+YJsEVy&GgeOASwa1`l}y)>dps^Q?*)7{E=xF?zNXg|T!=LD9FGLu
zNM|k7@Gi^3CERb~_c4ZxcK3?gz+SIn*RT89%?Y&0MJnX<6_es5iiQSkkbEQ`f=2pM
zk9Jdxq58yWi73MgdZ9Zmi5&qie`V6j4HUbdIoZdhIEyck7}RszCo3w@9^y)c9qKeZ
zal2x|mAcy1J#Prke)gb7xyc*{e#qKG?tb+%Y4XK)yWE|AuSNyZT!_IEkU-7#xuwO7
zEvw!&;hP1sd8<yArVmyshVlJ6o&I!OU#gi(tpVL;ODT9~FDux-;%@Gp)l8epnH!tw
zo0^##h_~za@c3245X^~l%!%$2qo3{7wZp9aBd|EbbroBY4O*_X-ow<<jb$_MX25A1
zd^2L%ZgW|_;*rPh?$g8R5+U;>duO7%s}@YjMRB64$Ps08C=Z`^y#YO1Qd?&hQi?u*
zD3I>g(d?N+&CEZ;2^0pNPWqp&OJ_M4RopOWD6ds@AK!IK)WH$C7^sajot_8^3KTC@
zl+TzVB180&&9b^noPWzMC?lr+(w5dqfb73vkeC0Y?;}uzl)E$s7prZ;Qt=9*nR0v;
zu6h%$XG$);YCwIt$Z1hu>4%XXVWJb^DeIk?dQokq?dI|3yLB^a5>!y0ONvIF<-W<o
z$`^0_aXrr$KnnxV3Uv662R2T83%wheN8PpiQ1~h>s9;6V7(KPN{&;lS{P`t{-FDpG
z`yl*_=p$=MrcK-yQ{;q@H!NklcsS{Yi7EbZP>rx0oll&E4s3HfVkhl=U~SeRNSyJ?
z>vi$y*k}O*92E99`Q9A;`01WV$cL{V3EI@ieil)o>c<H*G6{&93A{WaD_!~D%m8BY
zBr0Ki?**)aZCVjIog=ztK<`$<D3|NHB4U&@bES9uN9z^oR=~@T$$-H>t_$^KHufa9
zrR-SR9!GY>|Hjxk1c(xCOSWv=wr$(CZQHhe%eH;Xwr$%s`~DvFoAiG<$!U(x&J#N#
zR*@1BO|;!kZpR?F&Et+`3EfKvvJ_t$GNak4A-}7{vG;D$;$P6)G~zdO*|z)F<6YUK
zI$L`BA3Gwyv0LdNW%s)AZfniA6m<*v1=^GNM=Vo~9>~a!&&vjS<$f&>E>HGz9a!+g
zZF0v78o0+yO~mE)h_+vn#i`03wm&4~CB0>Zthh40b~SEY=e7?cjKhMvb}jH&za-}6
zC9}A1;4_~JgVJ@yyW;QM=NCyEsmpy<mFMJ+4b@1k3&9&9Ydtozltw|kNrqi1@&|v0
z0)l!7CtzUxXBVVNv{Md_ng20dDlradX#Tw5@TI>bkfNqw)|ByS8}~4!0>ztn#JBVK
zk*!SBAwe}3vs5WuzkSLPhPLVr6os9h#~hTn6XVH1a$;@?Icb`{VZUSVe--aEUPW^|
ztD*-6FVJmQ1hYttbB7+8)F@^+B?D}SklE9U2a+iM%BGt{>a>RYJvB(7gP73r#-LbU
zm-%pIu0vYqOj%drDl^*ma$-v-9k}442Ig^QzOHoU(pwGJ;fq80`#W5(l44W#u@#%3
zTEc7#ot(N07t>5V>5!YpLtli06hWvjgmtyY$w`$}@)q?Xdg_DJN7>@BRIND@1OIde
zep_ApGHO4#|J;B$xZxF~75-S&@v_;Q6d>S~3J)gYeb||s-&Qb`Q===PuW2j&Ci?Fc
z)eZv5|AvmL=xy4)#eTGV0h!D2n;&xj23@Z#7($Wqo})2n$b(~!L+<(-b|uEaw|OSZ
zU764AQjCS>@5qdHJUx5DQShL^;vVgvH=w_pez+LEIoMjV{phmYAgzdvAmkLX<?zRt
z;l#d)S%EbMi;cwJZ~U9`FSljJxbCGERxHdfg(dn$1*h+cT(LMN(JsZ5C|@zcze~hG
z-!c6DT`ahJPs}@C|1@IMuNeB@0oLSsFWT@B8}hhf#k=q$9Xf0Ln`zhN_K)v&Nv74Y
zY07T2q>68NZq9yD{)Px9CvWv&c59mF+7BM5bUSLD=h&Y+BPKc)XW`&z$PuWPuf}<U
zg-jQy*sqSA{OyZa=+1E(A{n4~eku;qfQC~#SHh9s<J}l4?qB-?&9zPCSM5oTm~vt)
zshg6p7yE^*+qjKsYT)z1I4fcXoU0-Q)mZ>Vtw@SUEk1Ca*ic0~nsE&?Llrc)3IRX(
zyz@Ggi4Prs#N<K?8^QUtpu&3wsBh<76lq`T!V@%+Y1)WP{rK`k@gaZ0_Q*X4=%B$m
z@%lXBgmW?5+-toYSo$AlRy>`U4cwam-{hI6Fz{)mFmQ>mV#wZhNlT_=q5x%HRpnBR
zOtrldb`@pr34PwV992>!eglsRpUdFp?|X4B$3kpl&WjuO>Bjb7>*F!EO}3!fsyc#&
z`~;&Y!s8~jq}DM_;<(r$!DtpCf=%jh09r_r?J<gv+Z=29sHD_BuX<7^PVRrt>s$xW
zV(!Jw4d9?VJi`a?^|RM>3yASFg}q_<`p=RNRB>Wol@H;eNyURG{fVewqOmSi2@B!~
zJ1ywe@ZWpeVMx&|lyVOG^X2QKRjz$DvU=wyqB=-0pmZb5C|b5Z*_IV`0)l8Aji`Ka
zXW3E-+2lb5A!|JJX6o#jojDBQ^~o*<{08Ll@_IfVKPSi0^lNIvosqPqsMV1qeSa2T
z$?fI!{Cy-Xhw1I*<>Yj4XR{W6MtdEQsuA15L{sNYveC1dvI6~PDep%W7#TIT<u31u
z7EC#*lh4LI_~^}N6PRO6p5_~rsSg!=f3_5VsZhVnB8yNsqbxDFaJ+&8f>VvYL5-PW
zcua}?1MoAY#C>|%U68-gVZ&qFwH@}IVOKP)h_TNp(!r<L5WY=;R=`{HX&X`aq=83F
z3+YKn-*h47xN<Nv;=+D(W8eTWF}O>`9CjH9K7C9q>`lD~Avi)c6W{OVjl-2bcL<AI
zYQW7)^P$77EKxB!G1$@;S~5HTj>CNp-mY15Kb4b%5PH3PcSDh?eetfJFat~quGt(d
zuFE-)wPiEz)Z+uk)wUJ_r~e`#*OuVr_j!eSI2r(@)j+g0h?ljI1Ur2ykmb-^)9f{;
zJ~>l&U*^AM9f7_nMcu-x1Gwq}RAR<X-1YCrFW!$8`jAi{vjL8TaicXUt+{TF)VES{
z0Gqgn!*&UmEQoeM9&$Ez2FObhEGh=$AoUt@8bN#o#tTp{uRw*Wrf})|a!`SsifUYa
ztm3Yw5=ldSW?#w+6+4n~;ifKmDIWSe0WZA-)NaqT0C}Q_=lN#=Xe%scOVviLb7Gu3
z0D}i2b>!bZrLvfo0r$ciR$xTr(*o-B!3GABmg)-f%#!!%j7*K#+k}p;?EHJh50XF~
z`;Hf{6$Hm70kq>m0#}Xr_bC$LgEhCj{VDI8M?!uAln>dTCUz8X6XO8Yw3>JiF4r^K
zWp6QFGdcR4nH?5@s$HvI9VjAtL(TWddhfZtaT7^w;0Jk~OxYXMdv|VIONKI*KR+OV
zC4)pmoe8lJ-v`IZd`+p0QL;=<{=lKcEr43EEGa{ETg^CQv~%^dD|0Q@Bue!K5S>Xa
z9VwDXG)7Mz6sL}pZObp}aEZtAmD1(5qdUdZ6k-YD6sR`zD>Q}L$d?6wbaTzVyJz!#
zr1Z_bC$Oy-LoD=<I580u$^8vkDc?3}NVeW4H|FfO!o8xzJzb>23P`Pk_O->5nU@wt
zpYgyLVP@To=!a+q#xo5L26&yDw1L^x!@7a(ON#h6uDNABKHd8_wV`hfEIB*f0jJ!w
z2$HIVLFt7m&0)0R4orNMmt1g`cR3JkWbw~p|CwyukLzW^=HcuCEI)S$OkY7MKTMG&
zg!sifa;5`rcd;|EZ3mDtgQo-Ro9V;CMJ$f21*n6fyobm*vp>o-WlACFRx$7#P=8sT
zXLUOY5-k;CWrAa*sGz`SCpCly#hCBuX=Z7LBP=q$;Pz;y<1!1Ua75x_qaZ=7`XH>+
zYdQ4~1Nr_nb!dVj;RUav9xH)HxCR?}_tzNdNV0Nv{6uPQjiaciwLb?BE9nd&F|ZfC
zp>Hw|gTjqe{sm)Iz*l2GEuSDIvvFmpLQ)ERhMh|nYB6%^+z=@P?c^yeld-x-+L9Sw
z2S>Ia5mgkWY^77-z&VuOiE5}$#->hlx8>=!*=t{m*Ja28%|p5dgZQ<}RMvUJz-v4-
zZq)M8#Y6(T67_}bs8xWk?N8I?iNMWX0|-~$j5fOZz&McO2I)Mh*kPK^z=whNB*ta^
z4vEX~%aF3;{ZZeGAVC+qj|>=13i4xSEOPQP47Of;C&!<Z#;-j+jOIFt%hc@cc&lt^
z36r*)Z*9w1@oXrpe$J1d`zY;5O=gs85evy&rQAs9W7lFfWAVbBt+d?VO-NHi$w&wE
z7nGx%Xyiek@zy(Y#N_pN&F*7e`z+5y6d$*x+AM3%hQ00bo@?;&=3GpDJ;}oIrc5fG
zDl(>ANfa$~?OnS*_u%%m5K70FtzrLLC1L8ZTGP8L!DVmSEl&3O!O>+}=k6hlv1&xf
zv~3ozutC#bQfLfJ$P->a_wUL#x_{ag>PoFEpG4KGl+5cfbX+ST1$S`fp{>ZS$l$VT
ze%e}a4esNFx8Uc<+bi1>lwH(L?(N93u1|}Lut^;pBwq?ip*SK~u}unsq8<Pyzjn*G
z@lP(vriB^gbST`N?vWhkYCMjeWyPrzKjA|C^OgXu`z;hsF)a0c*3#8D-qj)&#xJrD
zv7;*64ZB`1Y`^Q3zUYkj<!|)x{kBsR?kQhc<L`F7n*NigYjqc73$-!b+Y+j}>;^Y3
z9p2>jowu|aU>}IJvDH%Z$@&b^I5AR)kTJ;iwJA5@TT_ZU`Uh#kepGq06MKP+WL8<(
z);C_Fj_FJTApVY^eo}lKWdbQdGI*kILYO*jTnff#RnCAHCv3o|W{Et~?xQxwHxS*w
zF%sq1s(_p|?WQ_)v}dM446L+ym;x%rS40Z%(L%Ih^v~bkTIB&<phe|^M)nd03>j*d
z8tjgZ=TyJ=(jUU<Pd)V(3O)P+2jQ`|hW@gjaCtWGb(uMWg6bb;Ohhyjqkga_u|1>?
zH16zyNZ-a`^>erJp*~VK(7DQ4z5X&&=05@26h?EBDb&cx4TwOBC_s_L(;#uz+6VX8
zUaMrUS|dwtM4QePx=O4zggR+UFGJ&ixOBMvAUv&{JsgSVWq4ROfq@O^!_^B5>1<bD
z@c+3#rU_*4^acX}Xhr}4p#87*$Hr_d9u79H&i_kJYFho*IaA{QcG|=~hp!<F{VPF<
z=?-eBK`zS8WRc4>L{K}9q5+m(YJd58@wNvXCh6X3>CTvRq3Qbe+3C5x>RBT`=75?+
zUZq$54Fq9%IzlfV4{|-5ImyPcOuZodS{k#Elcdl8aabe#PWYCym3vB`)x@X}dF5de
z5E21nDclEkRe1-sxM*X0Cca2mbGMN2kc<37ljw_rresi1jKpNdsHtInz$|wV5roC(
zPR!)WD|I$e3P@fnZ_^6Fv-)5wl}48by<L%}5^nn*BHIRP0KM0b#nR6V6k03Sxqbns
zok3&d2r+@feo(+2**+P7hZGHLJL8FvlR7zhtYo?;fZ|C7ZGIf0Ea$6u>a#ySa6cmd
z2F!{t^vC%kc|7y1r-{t>q^3sxDll7H5TTKsQ(G^Yax;=)E|^5Ia%?AvlhNZ^3@W3E
z)HlCCD0}UpQN~1a0?FhZZe_q=3;%iNTzwD*9Wfke$nhI95P|lT<zI&SUe5S>z|X!v
z<zEz#mGI1gg2n?ek^(i+hb+M#%74PG4UQvAGrGL`r<o$CP_T(=V6j?N9bD4#Lh#J1
zu#Y{0A~ysE=~g)=Tb9@*t$)*Gnlf#?q7u>D)*HpBExYptr%*CZ-NZ^%$7AAD!MTXd
zvIiS?rd(b)T3E;SL_pRJ0~!H;-8m}5LBSX$IO$&@0Yke&z`Tp2wmt0&+&PMf#z}S}
zsBXPOtcVq$;#$x;DA1QPKs*;l177-Ng4{8Yu?)>GGTD^b56Z(>Kj73zJ%5{@tCnDL
zum=z{S{m<Jx*c+Qi99K<k8a0YGadPS_HeE+83Hw$=*<u^nAr?zEdso+m@eI@hJkcD
z9}l0vdIM!eMJ3hb=kVl;2Bn*pZpqrsORCYWmx|RD`jeF)CB|FP>Rp8z#j<j9EsDK;
z>H&mB6)HjpZ3%{wo)t|sK!j*h{#71D*#z}5dPyNpY5;{tm=X@KIfxEi*Zy;=l1p`r
zInQWvG?8!Yqw^xmWn-~Z#{tvVtsJQ;KAg6?SQ#sWy;iVc=PED%@(_Nt_Popj$|6q7
zbedhWEV9WO+hRy(=N_{+VlfGY=x|8hbrq(fonN6f;f$WsBu(F(*tpY2<2o#!8D5q~
zZVKh|RtCMQ6;n?hBx|(g)n=oMD{&+XMyAZzc5cD8wAkO(KQYFVNf$#oNxtzPv0-XK
zjYp1WtH-l>w+N;BIub;&;!$I>>PKJ~qVLPoB`S!KlL<M{hgx2mU%>17H*oPcjKlSm
z9$s%=srOD4zzV6}G8SQ4!E}(<H9?E@&Z<&Wz|zMrYJSb25jPDe2`;XSGCcO~nNF33
zdcSdo#IT<^cyscK)<!^R*l61xG?VdH;Fy^VaxwuD1tnF>X`ix>?^0=*>fbB&No&CQ
z37srZqXyGs2w+!N>66p7o|Hb-Htd=;AU^idqdk)M>p={-#|Tq0)*GgCh8mpinT6ZP
z347@Sw_Xy!vyFye1Ak!4O=REo%wFe5RMWx0!3%}+YE9w#;a&^hna3h&wqL-k#D#J-
zB-034|I`TnT^7v0L;0h3(9Fs4wqv7@y-Z?lS?VMfL2GB9>LY7^iD`>)WP=y!VYfkB
z5<e={vzCYQA-Qm@34Gh?<)?6@&6j-J+=F2*_L;MOq1XIeOT(q29ciexT&Y=gGAzEq
zsD>T2Qv_o`F(bT7z7~~0tX6`TefAUhASLyd_F&9lT*ZS~Hw#l#7EF;GNgwz2BEV@-
z6NL1|*6xS!XxjpKC0&aaS|ZsGFMjLH3r1j>d@Pn!6PBhxBCPB}TeMmkuFCQm4mKUC
zGJb+iF?t>f=E^V8(aLJ!o_jVBVax8b`r?EZc+Y_jm#xH|tlNc~vjj)Y-@m9X&m)_S
zWZQ!&xz2&&ISjYjGOGFg%%3sH0PBhoHn;p<7(~9sS1gS_v#3v9_S+A!D|d%q6XOy_
z>Cd0tI-0V*pE5CP!rbg^->#T?UKat>cEw)8qrzA@i&LKu$GtFW)XT}>ZNCerUG&XE
zI!jOK#fr=Q3)GuqjY|p7`xSLzZ}5;jRUTwPJT3Y-PRJD0nX7^TzSNX0g$nnLNN*D}
z<sg&|j^;$ZL_(?hu83sQg)_)o2=MSt(f8PGG+R@zGDd$=s|_yo0|lx7d35sOczU5V
zW(!efqZ!tjF&oL@xoWy;>~M?`N4F=f`{x(vKPQ|4Zj{>zDgc0^0002}e>LH3O;~CF
z%Pg?9`#;FekIXkzb#-x)taO)jR1u5iRqJ}GWZa?IHL|&B0to2{%6L)=ZQ1nCOAcUP
zG!3WZ?)195yS%SbBo@p`SOz#jz|B`EOqwT~!=Ojs0d-O%jn#ERnWR^8Xp^TPjO^;`
z{vaW_vzT5fjo<eNr)MhZZH9UR`J_><iDw>9B#~1Lu9MT0Q<^Sg@9qYm<g9S~Fz4eq
z(~G89R9J!pOClZ8W>UlUC9+c*&3MpG0te+7lQ}_YdN?QKKm=mzgN9ZD1DRf<L{Y*B
z9`ULn<7s0F3guuCqvTc)5Hsk@6BtQ9Gn13%Y#uMK*ZoI%@$onlu%TZ%y5<>OG(+GG
zW&x;67P@FAKL$)~UEL=nN5ZKh|F{|Oyg7mI`E0c4(m|Yj&j5bJyEYmcXmq5vaPH6#
ztY@kS`x8?;5xixl+4x}?ZM;N6wJ1hMnNj|S&l6f?FG$^>4(a1jrf!1_=}(f_u|!I+
z3LHYL?^NhvlR7!QzsJMlWfDC(A21q!j5&yq3$HmQF*|}i<|V?DFMKJ;Buw?VK-g?P
z;e_N2M*LBlz)$ce^Ic<BvxJ#TBK(IwbrivA-DLW`&WW*e&^pL(T%MLUKmJB>4!Ys~
z^d?D2j1e>%ItsYH2<;Q5DkSKkGMXqtF+<urfZp4<D-P+>ZMb89Az$%PpSdSTG`K*1
z20MN+iWL=pdf0hPw%-Lfl@;9yPt^lL)2b|iw<U|TLG@`gj*<^v2jK|^$-#oK@(VFW
zZA39kk-@)QJaj6L_m31PCS7!rHO>o(vFKU91Kk;w4ox6%>;#cmokMYev0!bo=}|D<
z4k=;6q2gO$q{zKS?qIp8%#jOR65%tG46snQCj?pwi36mQZD7mlD8)lZWlX5ykL&mx
z^W78G6x3M585l4oG_auaiRNcjBC~6?A67+zZ~?nGC1*xaci)ZDltfCa3%X%$kwJM-
z-aO|+lxZ}BT&>Fcr{{q#8vEoVCq7Q|Tb;nSA*PrCxdh}GGoJuRICcR@SN1NJozNgC
zyb2J}9;BbI0YV(+9^hNo)On1g^f>F$Akua4?Msjoz&OV9CQy`!L~TEEF8!XpM)@A}
zAX*Zsf;on;oM1FZ2|OFp#U~*<*hgQ4VVuC!2?5vufQ=}GE{BGvCIm+W0=qHeqy=Cz
z5KkGR)U*bcVmx>F&fCjUEP<GECVeR%?HS4d(I}eCMe?l&nj*!~$Xb#|y91%O=!7@B
z9*Ab3+oTO()m9cz5Ri+W0uk>LQiPMGl_^?>ayuYH3OzapTY4tdUr`hyeD@asYgNTQ
z9#Es=F(XxwXr`jA@;{UmGDgGao7>yDMz6G@tDnZEYpW^U1#a*WK75nu1q8?rF(}(-
zS$&KuFF4nDK{S)mpaJPdfZI3N6BronAdCGkt0)DpoitD8W5xjSusp&D97-=V$ey{n
ztQ;<s!ys@8M%rWd#M5<vg87=kX0Vy}olFPM$Fd^ym`@Cyom;4|x`M$nrt+(ti^)Wq
z6iW3qXIq%KOV^rUY`vZ@Azk^7K|&K6FsX{WfbwBuciT)+Uq`@`eNb7>F`o5(P{uy-
z!Ng&XHC%w*MR!n(05ttUDU9L!!CYnvvkKyxPNd1QfjnzX)85~HdD6g+lNw8Y2u8z0
z<3VEV;591;VJ_VHQr7~0FJ!v9%iiEnORxdNC;l0$yF})v4huVgA#f6}^x62F`|2|s
z^vxBfj_Q&_)bJ0bo66czKwk_M!lWk=j+5mAdg)iZP$dD&-~#e*I%p?BxL%zx3g~3A
zAkq@2_D3n9$$%69hrRtKe-;2APoOh(rP^v>E0XaFh1yPY2ny8!noWcrJTXwfvms<C
z*EEplcQc>yO&oUcpT_J_Pm7UU`pj?h?>~zaTyRI?Sm)s;$a8EUe6i_w0GYnx-rTP>
zfFC|@Tfk~jw77%uV6?=ACyeH<Z+m$0v-5f{yT7@AcP?SzATAyUZ5HN-AE|=wxh-6e
z7mK&wVKe!owl+>##_HMXzP|;W67gs{**=~=f#1TRRq9ReEFpCQ@CO=^?(VaK0G<lA
zHgo!LapWH!{vfw}b936e|M+?RQ@&<^;#E@u$POHL!t6Th<lzbyP0;x!M8H&3xeco;
z#>(Bgj6(U9TaXzkQswGncw3McZPJV}-Vp>o5<Xue$IKtJqf?CPrAe#6gSTvVC%@`z
z2Gr?#zEFQ3)NB#NL%t-jle&EY#>*jOkuUR~6YD8XF9f0$z`dkht<82SDk=_Y+d-bB
zN=j8GGU>JvGiEu%^@)Et^_qZm(hEryoVE-rHU!gfol--(IHc3)l-^aCzR%BMuJjtQ
zQK{4vx<S(D3Mc8bAX8(SSTx#bK*BAA4^h`CoCKSJE@bj@vy*gPuHY&trH=1Zq^Au%
z8AG>12ypUs7}pPcApZ3}QSBSfXcxxe|FWD@ZA{>ErDzQ%R@SVIVRr~`28s_dH5Z(8
z-kqJ--ZG8=JT$8s!1L1P1I`u9&N;(C#k-hTr4?n}VZ5a=x3cCqa~~$M;k{FMA8DyE
z9N_}LHR-C0U#z`+6;PXS-(a9Eh4q)jhztL7U{o;UXrDwBj5JtV5(Aq!E92x~wgzA2
znpxIbT3WOjGiPm3WXI}`Vk=FAe#Rl5WnKg8GSf)^wL!UwFQ3UqJjMGk+w&rxu|1P{
z^$AP7lW{JG_4R?F*<JaXN04o>t<;`6-Ex_dVOy~=xz`Yw2H<rIlgr2a!PtI+welpU
zf`tz-wJF#y+E;)N@f*eelso5bnoc}{+)tatXrWQL_?UvGkb=QkZP5Yeb<2QugJ(5-
zv$%rG2w!26ay7=-dwWBJmaz>1vs$qz{xqP5pIH0rGc6K0b-#U|P8f}+V0`9?&lBy{
zdbqaWFo}U3#xTrcfe^!pvIMFx!*#S1FB|pn=CILf9nTB%NHNDVi|xD%ga)#LFluNL
zPqX=IS_$I9VuCgcZ{{&&c!tf&y3OQTn`lX_TNcEPv2l_RtB`-0#lj%NvX%cc$F3uz
zbrOfOi*qR@-*<k<jw}+INH3-DbDsIN^39g_^S+>2JL}B1iW=<_gcG)#79=O%PQp%m
z4;n42cCWQNN*<I9HRs5AQ83li6xl~~{}}T7q^=}*dip0Ed2uhlQ`kkEv^202EDqGU
z<j-3*zvr6+R}NnD2dFk`4PWfuGXjQo%@2*#mc)JpSPeTR^6bUC@z=mA0H<*?$G4#L
zJz9m+&OC=pYs#z4Ie(d55-KgJ?uj$#bS?hkg(CZfc#~iAg?ML49}%dDu&Pk{g4%C;
z)*Cy#mVp<m=6-R*jq<4jIDwnECW$%}xEl^G3`jM!vk!cjdek}+dRTq&fec3rWbm6j
zh>ju3ZzRSftTuAY+qkWWF~nB^72k}PHf0$bV4?QY16;luiP)zAf&e3VIw_!vbC9ZY
zgid1?*9BQhK1*8BU!tPwB$@N<+@9r~iUaASnHiNgcqkOTsZ_)~TyHABD1<9@k{!#@
zRFf)_yd1!ql8}b7B^nO5Wt2&8k*I8sP)M{Vp8YMpc%#L&lR_;l$m$PnRiBm=pq+RE
z))!Y}6|)`iu`Uux*9xr<%6CIruq$*8tj`ZoQ95o{zu>U=MTWeYWFe>oC`FIt(@e8y
zQ>aMz+u<mezEnnyN2J0DT^`_H5#jUNjid67nTs$cfs!QVB?l!jH{Kc9RB~4X>l$}3
z+`|hYW|*Wi!s2!%L-p#|dR3D!y~Y7^>3=^a6$2P`ql!c2q|^|L(oAfNvMdi_Q~@>9
z^B!~MN{eSiNKf_EPF}+R%LAGigP*x$fj+tY6x=>@eC>XSs*~1d_3b;y5tKWL4$v$5
zbO7>zi=wfBvm*R$x;NM@noiZrcpm|+kHcobmi2ior^GZ>E8f=t1J^dvEb{@ujf@>-
zL<{dcl|qDz<vM$X@s<Pb2S>SZhK#$3NYedWI~~La+g95HDuW%Y2(X?`_v>ec*IGWB
z@GISb%nisl3P|=DrUBt5a*v$th4V>?1kz~QBxkaadwSbOEZQ+<(d#yhjM9ds2k*;C
z%DF(wc;q}5AK_$`7EZ^6J<ba}PwQyWtKL8cXQs2yXoopgHuj8wCI*QCQG4CEQs6tt
z8UXa)4Wn!v(^6n3GSC50IM!b!VZHaER^gSnV@MtikKW0ni@@^_9MVv>3%HdX1sB50
z3|@@|k9cOW-W|$6T|;>hNu-7?8Uk8_=AFCOUA=X$D~<mMNbmnzVo?Oe4teaTr5<gO
zQe<2{-Q=gnAK@-4$<VIa*Aw}5<;Z}#?4u<)O9S*!`CHHYINF!ZYuavvY!E%@HV+RM
zk9OgX3ZZ9MIDopM^8<=jZbVPNLB%LRVO?q(SLeD5jt4fb-MIgFd&S2~+!lH(hVO5_
zXzl;SZx%iNOYenbOHFQ)@9(t<x$C&yV*NwA%EuB=noYLyH6l5&ajoO_Z;LMsD%Ekl
zfz<}RLL+E!VIb7=@B7VJWd>M!5scw(+Ru_#d)`!B9aJqbPS;uGZW9XP@y@$H2ccb!
z#g4}3Syn}dpC7JQ4i1?qHD+zfu$i+o+y|k*S?!*HiAq_hh0=>BhP$tPJJ53E3*OPS
zBHc<nQNE!XFz&TNh7s!EeO5$V*(f@S^WWluq@U;qk$e|gmK&hzRKs3c3P8wmuw<sL
z6Ylh*NpJ8+k^G_4Tsl8;yEi>|gFRk<9u1D!jDEBYMSoeUJ<gIp$*X;IH5l0qhHVC-
z?oI2BWIEC+FY9kqU>~gyp}KgM+Kj&A_b2eRi>d|ZxoX$EPyDfJeUL<N`Xad<kEIod
z-bkXd^A2|gH-L`i3Ers$jBEiSmqCyoCj*AEU2s)bRkqb&zpa5IS*-vfzxlyP{_aBX
z!IHQij@|Xbi{5}N)U|Ul{@sTPiqwh!`aO^c#d)T41jU<<J>-ufu*M$!Wz+beSzE(4
zFqW?0Kc(0g;kM|vaDnIA7w(IdYx^6{jvL1+k~eDa<<TFw8+FF#S5ztqrO!)n04er*
zKVCt#DJPfs(ST%%)k5*Dk8B!ir8v?{Hql_Ec=9W|bbUQZ1zC07>;<0Swd2%q^oN?w
zZLvOj=Ss=;-7tFIhB1@YtZCS1wQ>@}F{}5A?QhGykvtk&wWnXt{NRx8+=$v6Sa9g(
zLY`5*YBnPl%$DAi_9#_9qI=+_tgc{P>&AUV%~sTLHIE-A@oLPQ<W!F><?XhUbyEYY
z7O1e@hZzlhlFg?X?W%6B_Y(K?+O%{dOr6?c>36HIlAoneMNoUYx3+zZ(@G6?k+#;6
zTbaeWmyk-(9}cPm^$<93(y-KUQ0$vsE*1oF;kfm^!OLV1W2ktThmrd*Jv$=fCGCl8
zTa)iuWkNqHl9|Jc{1%ZuJR6t;LE_sPZZBSWma<)C%-jbIr<!}1L*-nN31D*RWMF!@
zL{3YUWE#Q7oJ^8gFWf4!@x{FY#l*WiEXg7*9z5Ge=0z<Y{xUO54ALf24;uJELPjRF
z<`0j4F}<#f+h}FCp7>riWc&lcCAjfq2r1W$63LmNRFy7?u_0fxuKJw4lGUm?^MhLb
zq_n>-e;(4TJ+<fQZ`T*I-!zkM!W+&O+L9*e$7=N(MWSZ6j$tZI$+-4X*?7E$4-!g`
zJ*t#w#(cX(kI8u*6$^WaRQ1J@|Bfm3H(o2PUSmTY2m$FOPiQiRE(dm{&E>Pulc&dK
z+SK!`xwX=&!7aDY0}e<{nK1=p{{ikw)u`Mub}2as*J%&<yJfnbdH!_~p!U7=ejSX&
zTKoL3j(;Xks*>mIh)SgG?nGSmRs;XlA|&*<W_-g;k`t}URaWeZoh5a3FTZTqS?@8l
zl8d5p=g<fNq#iV5ixrA~lS(IbEET2Vlf!qv5<7Tp@91KQ^`}zMo`u93Pyom(jWOY;
znGLKA$^;Y(Rw)wARkGGp*}pf#b{Yl+HI1D~L5Tpk0{ezMnnNZT=oY8Wyuc(`6QVpF
zjgvrZ3=#PHI4y!MZW##%0FUK$03K?G=89`YDpa#`)$T#H^^Y6GrZo4kl3O@V4j-?V
z>%-M?^!a|%YMow>U)XH@MbKG4RlYVmK0dFnr;mi2VTZcE=g-41e4J=d3|)HE>P}vd
zkE4@|mylaG$w;&?m6W&B!_#Qdq2=;PxCh7hea!ClFf><N8d##Wds^Gt#Rig6@e<@H
zoS={)avV`sA3!xtbm}>aPVwR)kr(k#U7Ws=!sR64#JY;tdj(=;JD$ql_=kG0r@=bM
zR7m__{Yh%sIMPz6#Iz1TdXxp<M8vN-&Zr2I8-6ajrj5Q9li=0u0qoKmrp3Dvl~l_P
z9ciiTpjsbSb$4$HuCZei40*$#ePm6`a$BF3xh^$5xnO;}z9PwO=<0l%DomfCvZ`1}
zy`)U!E)rI94@oPzyP#&aerYA=AaoLp2&D3@)JknN+{6*ACbtP))ho&_DT_Q~d1?$6
z6<~c{zHz;dK)%Ybdro7lt2C?hk<+!BsDG#0rE}|`LG#Lpv>c1;U45Dd(Xw%JcnMtJ
zNejqkC2`$BayY`w{OKC?IbS_IKe}9fofKmn-++aT@>k36S%m?w*`3nSB&iT&xP=mN
zfwq&i_}_xHj8SJ?KyJtmBw9nL3vo%FLGFK&DAZKn;WzOwz#p@EtIi33T6@I;KTNuY
zwmUT+L!uo}^A0IL&-=gUud{hy48He=$>`y;@o|@Dr-bgsCTuF_Gfkj54Yw9EAXRD&
zaU^9GY&hYHzQ?R!3iWZMRjQ4C^ytRobBCqvB=DeMTbQ!dES+dHwYEFx)%;K)e8r%s
zF$dRb3|O!uMP2!JC@0QozVXg7-CG)+d|+Uk&q2bpyO<`)ixdM7+k$McznX2!Ph=1v
z^UPmR#?k{&SC!X-!kM`;UJTvoxdD}DY3T$?F%ln_+)eoPEh{6zgHtzyF_SY>#^PCh
zza3!;rIEYN`nxC2Z~E+)Jb%GfgOj)5uHAeivOx*W3KKDS!u{4!$$R$J>MIuUaapP#
z6pSbW>2Y<6pVp+{Ygks4v|5#lND((eLMAJv!(-YcgKvOx?Nt3Wnupk+aYgn=nkyYA
z^{4dGD8qvcDXXxRXQTgt_-fxcC|Uq_)9;W!ohWQ*P@<i!FW~Qs5MuKxEqHt^74B^!
zbqc3M@@Eb*;^A#;^s&m51M<;pMCDLngDnpjgUGIIgrI$qD5YZmbzHkbLtl7(HLc2j
zI{C1J_Qg#_dZf0^dnbDodz#IBQ<xWEy@D^iqai&*1T|x@C$|0)-AhwMf>`gXpc+Y8
zSR2X9x#d{k`ar@ba<fa#ZiX;i|FdsAF&bj-hMyFBfYL>%j|U7<k64rFi}iv@266Lw
zdE{mj2Aeh5;QzFB8bn}}Pb1Hj;*JN-#EB09=2sKArya5D*gDZvm=3B~`2Rnc_W!As
z9F)1k3P1z^*k%9#p!l!kWL6Hg|7BO&qIK!EDVFpj%O{$Z)KUzhL?SvLgG-r+ds{v8
zR`_h1gd<u73?z%l7EtPlD0#|p+gw*K->R>AxIoa)kv#tPwq{V&(NXzPrCs!j7jeiE
z7gwg|K{M#xkdU~$g*>}tgzM@4C<4>-Znl8?0&aY7M>l*K3bWheOIS<vEXWnvCXw78
zb&%V3=X)PUHgpghW9mY`t>+A%t>+O3V|*UP;$ljI6dYNnAIS#W$~2%>Mm{u4g&Nq6
zRv;yUC0#FhqDNzvOCPGk>68dTj}ixk)?*$Xhayd%!F(GdJu=uJTu>SbYlM9i&C0Q#
z0g<s9J!w9x-|d?lKTH+dH}!l#@=$7dKq(U+l4G#JBZ+o@_&*5ub!7#DxbNJko4Duf
zLzzE2Jdj^z$WP|}{rL6me#G`^iGN6#P!?O-AhuiDlzujT%5R4Mz8E1^+?rqJGXMP+
zFd{bcq%*5DGI!8CyS})`1DlX7=tS2xs!e;)6H9YY-kg0U-mUb>x|$;u>3V;^*uL!5
z?efW593Ds|aO}R5>r<F)k15s|yvP{lt$xizFijInAOnI|KM2K-){ts7kLC0?PL0d4
z=$2T@!5tdy?wv^Ab51mf2c|@ufCelOkts1gWJhZujw~>-Be&rOeex!Z0fLqwxSwu9
zJlS-l39f)Y^a#j>VHh?`>9aL>2B<7iZjtEfd--P79R7=pNq+E9=*<KY+~-VWDn7F%
zU5{@`GVW>yi6PdQRZO_fbU56WyV=mU6Xw2#$_*Br@!;D6vTpoROD(ZiB3Q(I#!urP
zH90vsGH)Ouj85-w!4fC;3BMVRTZpm0n&7`+A7jvUAJ;`K6HIA|28~_V0Msf$w3({Q
zn#FtLHe~vM&uD`_if2QBw7g}#rT~gyg~N-**9_t#W&-AdvZTg5k1LCJ@SD*Vq)=+N
zwmL%k6<tr5M&(pc;bbZ&ls1+?3`Pz=JQX)C!$8S0uv8-D%TA6az+c0T!oVAVIVhI-
z#w1fbYyIlgOa#c3#4LbH#Dh@HL4PT=8%#ZP@K-Vq1TB&IVk3|n?-?y30@hhw1&t1Z
zs}3Cj8W>QMh@=K2qt$3Z!cU6#idCHEOP=pVu~zhIiuBWn2JsZl!GQ*(c>Ca$7Evd;
z%m4|PRtvaRA?BN#UG_wY9mfXysf>>T;X@y2G~x(&=VdiS>9)zlZdQdP{OIgJJfD?7
zyr)!O@63a)M%G}ArTaY6+)`vmC~&wQO7y7ZP*^rbY0R;?bkQ{kBmO?Uo;5YXRFOQI
z%ArVNyNS48$^q>PFd%gOVMp1L#zL9{X4VCYB1j$eH`vb}V*6F9ceym4J^Mh>zVMr1
za2SHPtesb)bEJ)(gAeNkAE`-!Zg}z!KW5jOLhOj;?a`aX7lm`-fCa|rk-gaan|9W~
z^WvEE?V0ZHo5cWKMtS}`28_2cLqVXwj$VYiTY3E(#G~ceLr*%#g|G9M|L^3_H_NlH
zx^EgHJRYnZJ{sNBjp%!=!w$^6(H3?V_TXm!dy)$Am9_w!CmlA2p2TRDr`#~+_@!zw
zF;-T-c!tClF`@z8b)v259?0V1Ux|uR<wW|t7qZcKuizlz{!E`L134`X6d|(u6@w*i
z-!0qdXbo_9CkhmhR*PxX1*F;99b-C&4!FL%5u`c)TB8wor8Z-6y4g#+auZ=!Aoc^6
z6XY-GIUT(&k6l$l6T?n|GS8Xp72TOt)#(Umv%_WGs8EcPG1S>`qp0QuvR+ef7n(HA
zENzi+>OuRPMBvgMC%&lkuLcH%Vcb(TB!Hl)3Fw7@13Mywxgn3CPfTo>rxk$+QYY{O
zIJeGpi%7*@ZZZni#*gv1uJnNnq0*=u3RT&kpXLc$C~#I>)MQ*zbB6M8{V}ve8mYMK
z$o~BGt=s6PT@i<^8(h6#r>{wR_MFS#{onYP_`C?;)##ZQaQVz=mfXL+y*|%VR@c8#
z{q!|o1*_a6`c$&l92Ty*EKLDaT2<p1!Vz;d<Qn27<3zGEXjb>dlA@s=pEu#Fx4W7(
zk5{OQxCR3?=w6cEzX#L1KaShI4O%Fd^5n(`#@E5*!h13nLEpUpfZk*Bg|1APiyzb9
z%NNz8*Qgjbb*moP55_`8ael>$fAG5<0#Db9%*O<mpuOB|z1%FjB0B=DVzl)uLf={_
zMe5N$cQkok&Bl|jPHA9qC6-6tG<zSn4fAjC@hc&ku)$j|**3uGb6W}JMi0VGmIKRU
zffHEotZi|>?haKu?dLnt#;OzV{XTO<VJ>#-)IPp5cOMsq`11m)6UQ4TL;zA)CH+~m
z?j?$eV*0RFiWl$9ikE;XLe)P;|B~aT7Z8fj{Y-421&;MXoDZI|TmBJf#ch@s2o{K2
zD%=xTrD!b8jV*Q|u4f?=Mq;xjlQxYcX`1_EmTcPi4TAJ=auw-Z4ADd;C}AGXD*W>d
z3{ny)nMR5kt*J2fZ41I?+R}Lac65Y3mJX<e$3bZmi{kOC$(-L8MWsUvJ%bV&R#rY_
z1zPwQ*sC)Q(wQRd$VVUskwf9|_*jJ!2kMX^`mR1WMo4aXD&&AL^1Vq!yr4{2WeEnT
zL_@|Deem@&&yR~(M8o79&d`e={L2=h8o=fuP@nQvDP?*wJ-7E5-fM3VGr?))xAxa#
zmzy6yg+7SDdl4$g?~?Jy_Bo(3Sn$+(=Rmr1KCF5*7#lV`P_*}h{o~n4v=6kGun_tF
zMq#>y(YqATr#`~>7a18=3*?p-$SvF^c7Paa=G%5=*9`erRh@1H;|^<(>-?{0{f9PQ
zU5y&D4bwJ7Em(h1j<ijOi&?y4ncRY4>NJ7*Bjs*%@b5}Cf;D#zZi>uejz+sjW}888
zL!=&txO4<22&-ZL#&4fQVfOHaR*Z}nQyRayo{*0vnqm~riSLvx9z8*u^-QC+&dOq=
zjh@2k(ADZT^0tvJCqEYvk;jt)w{(rZE%*HGry%N3xNZ3&t_vI<>c#pZhH(yfN#t*h
zW>_*5Y05^5a6z=bw&{+ggRsD{-+k`Tq=B}teFy7cDGUx6+l=&=--K=pp2w~l1@xX{
z5~U&gR@k<Bqwa}5La6X&04d4aDrv3R;MvXnA1Ia!szh-sswpY!oi*#Ph!g-vSG7K2
z_34hYg+%BhDXtHPDRp-pweTjEG{)(NB#jT|6Q08+JQ_4f-gqa6sk#G^`}tAT;?f=%
z3!)A+OK}<glEwDa;+LkR9+r+?1tGo!YB`~w8hc{u7VWya++MHGm*E=oJQ!SWNAF?N
zjodc%T<K8NET4nhS%0+f`T)_;b6X-GOf3Yw3_4ijTe_j7vkYR#2;4@tFqZ|ce4{{>
z-W;iBm}|7P)|go0&(juh{Z%|2Pn8Z|KHsFoa~7gJ76vlGuAnfI3Cl1r*b!)~T7$|^
z_(g>ZV4^S%a)Sq=fu8A={*WQz*0_8`bSlQ@Pe(>zKdJpd;4oyGMj<)pi0cfQ6^j%_
z8C;))0Iyd37Zp)S=^}>5>nX;X;4)5?DzJ;(I;v)zBmwTq5?yq|02{t}XvYV(?(nJ7
zZd`jraO^PXMj%bm^2vUidn0NW4@1@pP^fu9ocYqFrM4sM+G62u-Ef|eov8qt?K_uh
z)TR!upv)8EX1>q5Xm(WS8yIM_&~04H;gj;Ey(w$P3#ZZBsl_|vFWj2PcAfCXq5KY6
z(11oE*se3dH5a<GV!?~eyPc~s9L`t`02)!RnGJHfU3k9wj&&n<E0G~$y?FAJ;ZH!^
zWHT(8W=_7_^zrd^NRy7aEX~``*kDT~GL(fOtT;{VD{!yHLiJv^HxfrVZJtyMtof?l
zxsR?vZjf?Uj+I})XGpQ~6D*79N&>1^Tcxx-Q7qA!a-p`Vr0pqMm!N8+X4nKgd9Lu}
zn~;#2CE#lu+y25JATM`nO1fjN1;QgR!AYzb&s#Q+i!D`V!cz(7vzP#)_4PeSq$7}D
z99%$BqhNHaC~}AgSYob=yTvsa36MvUN!tby0(a{38iNMKy=qsA^^C7E`A3OS!&R2Q
zX~MTk_fAR2F0Gf%4W{b0id213-R4u~<Jp2!B~HHKii^ri=#QJI;+WTsOzM9n!gf_L
z^5QN<Fnn?z>-S)UFhLxPY{_7ly-hLY@cHfybul%n1m{!>Y+Rk1S3qfTMHJvL=BRa8
z2QNycW36;6C2F|8EtfcPT*X=A7^(JU&u)-A#6dfpZLr(eX8B+=vcM5IvoBycwhRT7
zCq~2sW2XvUrAA#so=ief_KWbSXGAE#ow${P?-D5&R;`v~(J2Z~^g+UMmf;%dP}8#O
ztk|p+!s@nTXVtkg>ROrfuT5J&|70>ZWePXx7Lt}&#1uC&`*#4A#_HmJA$NYr-|E?c
zjm_bv?-#}luxe07B}R>+XYJAu^QmeOqSpR&yk#nXdkLC9p-ju-poFU8;Xcebm@bv5
z^*}}dNs8#}H-y2cda;X_AyDpy|Gks6z4sNF|C9F6C4=rg(jiy6g)gYTQ^CgysMfFd
zEQ{;Mo>GDF{R-#c2C2ZDx(4?HwRYY5OE>q8>B0%tHI*~JMr5UKm#e*+s_l8)|6X7r
zDrHHAS>T9Zh*U=vZEl;it}!u3yD@RHqyJQ<`HC9U%X8&jtL~F{r=#lAcekbb13GwC
z^eDf$?3Zb$d}UK=2<t6=neEK1ZNXgY3~k%&Ys!7)wM_98?sbwKLBiAtQQlD$O)>Eg
z)Bq1J&J}6p2i{eIIS8A5`b{3POp%}W<(gHOXM#>zznhLV!Cix<Ewrlt<U4-gZ{0VB
z8=EWO1R##c)dLfcy$$~){F>Zy)$v_m1-d=EQ!j64<ia&WAUCGmiffwD%P3@CGPuyF
zR5%$jVioFH+nvQ+=j2fxNfB}<h;vawo@Kk*NF<|20a#L;OeH(aJ!WM$!2`2xo6(Y8
zdNjpMtv>-V>PB6p*^|u563R7lPh#j|K*zPM*Ib<;RJ5%dW`((~b@|YQX1ufYGhJGh
zuGaal385vRQmfxc@$Zw0X4~#s;no0&9IN$Y>YpRcPv0|d{1SoI8N07)GGpIS5cq!}
znCX$&$~CIwj^NC=+JOSG2jw2Sm#<@wr<<@|hglUUvLlss)%+_aK>zv1_f6MJlL#bs
zOGl7(YB&=b!&knSE4=WQN%dQ=fiEii9T`INeQX^gxX4Zw?Y7iS14*n<O~9I2dU>xh
zYO5Co9cI=h2DmUXk_3U1h6s5|uv9YmC*G<nJ3J|>p1Gz79`1dtOW`OCY+-(LIsS~)
z0yKKiBE4i)+MfNi!c}P1wNP62YMKKVwn3sM3D6;6$E*o*Y^f}DZy(e}Uw#`M3&{1(
z%X4T<C)U?`51N^9YTs^ovD~QimJ)ccR0mWuvpjO|AUmIXLk8cem_rm(V>kUcnElV~
zh}T7pEhOm-{2D<(k!cFpPM2Bfy8Jr1)K=RY)wt~#X`DnCl&8;Xdh5QekEA4MLa*ie
z{iX1ZvSkVN=TCpmHBNt`HPi~Di3*`kTh-JJ2#W|4i{Z;JZsYvY3_JSH%E+LZyy&1A
zH<T?6E9E6DqEuvA>W?ow5|=3n4ahp5rAf$6?m0=0`l9%f(T$VozKfT0j1O_EAjwvd
zTyJNd+L;gT%5d2URz*AXLbJq`V!L=N9^H+3Z6|%0mI|RQx<|V_D?H59w2i=`KW@U9
zZj-2qa)e<IBiMX%&)svn<)WQSdDL{oIj1}gI4c(|9W{E>Olb}8o`_>5H#1E~G{K#w
zV5j&w2l<-4*cZVHO}SXrV=9{|hqeHsOpN`d%UHP&5IgsYnU=ZP&m%GY4#9EnH%0?#
zjU&WZt;VClzzeSBFBYPzzGW?(d>Wd~7cbG{6Hq~_uGvO5X>l}<V4MSWJ*6L$uOr9*
zyp*frNLI})B4ilW`Nj0k(_M4Xr#^cTWbo~B`k!74U;h7T7_>fHigJPm0C2_rZ^0oB
zhEA5w|L!^ef4-QexBG?~(y#Uhio0nSbSnU4#3k5aI#QC?<(eLWcJdw;p{_uzo;Xt7
zv?Sl>%v7oXP}%j3q@49-+{w(;_w?h0xWDnTD2f_+tNQUy5-5+$5%J1>u&l-G31gMz
zM*MMRX<kErc2j47_xBHMC;azrJ7&`hQSPUqilObOA@3GK175sG+mV_mACM$_>v(sB
zw#~jKkBOsL1hHNN5mIW1BBd$@_6PI{7WT<IqqYdn(2z5?k@Dt#Or0#=(9}!%d1s(8
zcJBE4MBFI}cVf~Q18n?z@*02{@LDjeM3A`&i6;AM&W&wv)&h|~Vi3b*+`(KfjnQWK
zH6gRn8e9A!ftO}Yty)zSJa`0A*+F<y<(jhWj8evEE%9XE?g!kjz*JoU?&y|rGOV@t
zO4#=2%*fjj{dy=ONP$1=w#rodej83U!o4)xvol6;h(KGV(2ujPHQ;G0aq9Fps{Vt5
z>B@kEl76wBl&*;fnwYS?2Y;LQrr)akJCT{AL4%F`2te_2c6hcez&(g9_ER^Ya%nU|
zHKbtJ@O~(ALxl6d113f9LSm&^8>ErHS({?ZLw5iOXSZDNT)X`r@6~TPP|IH(k8C2H
zp$lI4z`>G;Acv~e`1KIrF9=GJg(()zZY5*poBO#4K$^wB9J%-=Kl#=hvf!{I&fz{#
z5dk=<zBbkPfXj34IBWZFegTd2*c*&lSo3OcOYSrtx869WI-|c48hhf2ynyb*enbK`
z{N@eULC_&aJTO(NEUAJ+Oq-w(f3}YCz-TEl9Y(?UwJA&nD2ob*U97U$>Iv>&MNu{v
zVMSr{2Hp>)MEmC9+bo4`@_qA&j$nO8Ax?WHsS~_I$gG+uVf=dNd;JZ<EI**>!CauR
ztbI-GS~NJ{IV$7C;!EOt=WiE<TE?N$a9g3gkl#w<8bU~nXwjyxEw@sje~A8NzqEnC
zATQzdcDwP*Crlr-0=r*QP~AU!8!t4Aw2bmhD;yTT-CxC$w4ewcsq3Xef1bl{76Bwq
z+q@R7doTIAtzZ4lUjm8|#XonqSLM6CD@yYAKYo0F%~24C(~@d;TacqJu!20?<55N%
z7mhpgkb*Ac0$xHL!J~9$D7p)eZLM%NmN;fNRTdxEYT#_N+C8JyKG6^d(F3wsTCm6?
z0n0d-WzQp6HB1cVLVVB~l-Xcm(WAl<{epDT_I43BKVR=tF!yctl@vn5&;`HvCqjS1
z({@m>Y4}*t<YXK{+TWJm+qa3qlia!8|Jth@7v5nW97vZah5jZj7<}wBGpWzjlv}Wd
z59oFY{75^oMmbc87oCBytl{B{mQnnCxB<u`_>dwZwxLf2=2M|Pt*lb1OxFX{=`rSX
zn?&$CaU>+(y@jeo=9L}>e=6V`iW7p5TAdT9ac$s+qHJ}EWzS!aKLoB^rrh126JVqr
z7l-@+@cxNS79m@kjndaYiWaG)QFoToT(06>u4=(LP7#0HDELuDLeG0EEx`$IVb(y$
zxtTuzrL&>W7ZpZ)m;4t|+glzKu7aTc78eyQEKSLLSQbFA?jTr6(7=GR+~l0Vh&aVp
z6alORt94muE=7NmSjkTdG9ALA!x|SF1=U1zLeCpFS&iVE|K~Clj~;KmGuqF7n-k!l
z)M$+Y?JQx1eh~%s%g!|lL8(ty*Fr~^mzPHXiaVC}YPh?*Q}m{(c+>VzDRD#zX+@Wh
zh619&9b}9eh0vDdC2Jy(qZGQ5u3<?tfy62oF(V~vO|sx8P(tYxM40OnmQYSC1wx|4
zzFv1C1B%GFl745`U;smM0#F2|ULn;CQnKYL@NyhiLKYZwESHo$)1Mn~oMOZ|f@V9{
zD-Z!fL+_A$*&0Q3@sq?+<857X=HO_P2YgOIu1oo)php$u<p(_e2Q>c>MvGtSB3y3;
z++;v;=L!c3qh)MB{h0-9Ki*74qI1Z>q4__QeN&Jq(UNW3wr$())3$Bfwr$(CZQDAn
z)3%M%{rb+l_c8P4-kGVWs)(wOjH=3Ak-2l_UaQapabK?FI6$sMF$wZ~DD~Z6S)7&h
z(a8J=N|g&6nKtm(Cy}98v$17Io{1Z9nLUhonPq^cc7+S5Lt-4(fc@$C4E`JU$>37}
zG-BzH{xaT!er+EpnJPZyQd_tMbk>4{ADEe;Vr7^#zO@Xvn;DSO6c||}`6!glty1c$
zFGYm^Ku?5!c1uNC0gB|Xk}L^A9`C>@?FHn0r9Wn%QuWVUXQwm-oGr5AoM<Hkpu%mp
z%-ltqj~CJpHTvydJC`UJ%==(OLy5b8BhULUc6e>$qAvUO*!9_3SbiM8U)fw}+qiLU
z`}UR8SmFNYqF&qDg)&`U@NMlrfgvSZwRmx#!mha9T-9k_*u>#IJ{F|%E$<0}*{*x;
zc3t$>$$lIkzdz69kZ3-sJD=XSn#8Sac99#OS8)*a2NSUH_FT2h&I4%|KL8~wwRGc>
zMvf`S1Kk#4=rajHn{kZg(Z1Sd`$JVi#SC{REy<6W-0dsxW;TvJ7>+4@pv`T>mi3MS
zhm6DaACS|QR;&jvXDJM%_iID#HKfbaC}~%`29rYFSg|w>)%Wf*NdJNE?qq=Ck5sX!
z4#<T+U{Q4|ppALj%G#3;zHLt>9+Jb<TTg7wl~swPYp7L{wMZo4&nws8n}pD5g)sO2
zUi#%lSC%W23Q{&Tg~q)}1d8Q64?!7#f?+<0IsKH|mp*d__2<Cna>a>Kh((-5!avGP
zv7t*cf+JrjbAvfftKN^OKx;TL5y#s|3ih`kKhh6PK_Hl1a;V?#%1U7(6d)qhoq|ee
zIEx2JQ6a1wo}x6R?BrojW)?HB*i0!0=XH3-kb!rg0~&pK7qB8k1h7zp1iZLH5<kKE
z`gkaAN*xHYVTlfa4oe+0J|Q^ETJbm{#gk_1bw>kcnYU^A1;ykYY!t4TC<UJ}O;JZm
zcpjGNWf+D!HN`<br_v}ZqFoHp9+`lgwd)lHCuF8r`Hh^=$fEBH7scaxOs-Nj^oYqk
zjCfkG6)DXRAGDh?7e*oeIu89{?i>#tT_J<eI8v^nWH&)(P|wC56bf;U#ITlw;W_Cu
zSro-|9grOD6{du#wsyTI8{@OS#KM$wrI}<LsG6h3J%hti{QL;kB#jHu8BfSxZi1Yf
z<=<|CTvvU+zr%ii!z?>##MV;|d-;#L((C9fjn-SK7cvT{t{}1GR@5KkNP((CDHu_j
zG}PNz9pf)=4{1`EQV+1wnQ;r=L%oig@XF0;_U+;gypQrpUHKo4@JapkKa$>Q8JbX}
z0-_?#<fsMTobvrqBsP%Z#iZ_RtD9i;x;;5gDGMKy<B0s)*h+-_nr<}%OLvx?fFT7S
zNFCRfnvH*`_boz?TJ--^8;k;o!W$8aCNMC*F+LrsA~8>dT{JG#ZB^WH(4o(ZQy~Ne
zl8mRfq@Nvjo$up^^4BqO@3X_QhI^YFy$gat^$B<<c#1c+EN~UxUH)SjQWMG7?~xj=
zV@cQ!UbnHF-%YA5%kkOz`hNT95%}fKP)WeYnk-v#Ld9*YZ3FJsPL<zF^qcIo6NArs
zMT;gwcGXy#N%(zHyh-(%?oBOL;0FndSkT&Rt9u+$+tl9n5=^V8x-^NbRX?+My0mcm
z^qkC-^$kl9Vr=P2gbgdP1A`anM&~)x&3T3k<=B%=t!zu{T-I;3$efel7tkhVoygPP
zC%ySn+?UCY?+)D6U)*@&SY~7a+9a`-K_~u$GXc3Nm>?KlpAYV!jK+QU*Mo9zH<xf1
zHvpSnIcVqUY7^f6iVb^YR1-H!&Y}+G6Q`_OnE*A}L1M!3+NVve$uB0|I<YS(x|YdL
zyj{6`S|MeqZcxF6h0gcWhQ*hMGG<hzmqovPxr+Iktx3ADBu2Kf^kz`l<ydmx2p{#2
zYL&udLmXMsk-1_H%^Tner~TyPK=49nDGeV{q};m9Ti<_7>#2;0;-~-t0A_y<l79)@
z{zKB++Rn(D&ir5L1>3~wNDVQdgx-8m!)?dFNoR+1AQ~(W2JaU?j8-j_luaejP)<~|
zeD64`u7{`*-i$f9AMpfm8rS0T;Ia%Ec69f3cIa*mbcwDvo40KO?R0<q8mT{5=f(%A
zjt+370ij^b{~px*H9t-zUI42uY-aV?Z-((;H84U^s>INP0)Sr|WW?(40;AKPFq8?z
zVvKOBWiTaxmdxE6N>zp6Y3LIumkwD-1#LU00;9&b14m5dJ9-GI+HL%H!S=lrc;Q{V
zg0jBUYvkB)Q?TDqma%zDV6yu%I08$EvG*zXm3qh`X3m$1ktV@ZL>6nSpHr9n;HYNW
z)@7K4+U3F&RGu{ASACkGQd)(GS4QpVnbH(9FJ~5!OjFdBk}wHRi~SoqM-=3DX67OI
zKm71tt3qS_Q$JW4oBq2Z^mbB-y0uifx{EtB03gUIFaW^6o&KY5TQ<|3RDM=56a6q@
z6Z}h?=0Ar2uT=X#EbIRNmajCl<Tk}od|&D~N`9+I0}(E`;^)^J5|)=2<O``?sZvj^
zC%L2T8p{D$WPSIV+4hde8V+x!rmg2P?{c1Sr*+Klvg)JH7P=?QSB&YqGrZzn^8l?e
zLfYAl*(d$_MhY7^i}p}RydJ8!84{z*8Wc-RG?v}+8UDjybRN$@N;fT(M$!+((2ElY
z_uXCu;x_H$Prm>I<OOIjte=V$JH(SY82k=0o+NAt#sWePWtjK7K=@Arlbk;_2I&4e
z;jfozQ3LFe1JJNRbUMoZ(KNFn_%`Cdv@xcTg&iy=kUe>fSbLu!)}tpL(IaODec!LI
z?f3=o7Uwr&6V3GGPbu6Vc+lP`H`t?ASX^Jzq_=D)wQ@HvJxPmg!J$j{?4X-3K${i#
z9`@u<z{YrKV6Nul;z+-JcO}pmk<Z=ELmdi3=)ITSuM#0)A-lc&d<}GRe7_!+Kw;oQ
z`!Gc(twnL84JFG6LznI@L0mhu$07!k2Ttp-FV1mXIko>h!<c_1Aydg$Ts7epKVmmv
z+@epB8+fIIH;&8SzIhO^WdFj1^4ow=0u09swC3Y`I6Ge8LaJFnma-0OA%6&w@KJEY
zUXMr$g9+`k7Ll_KyKdU3cq%myZQS2bzhW-U%?uqjh)UPD0D6wbWZStBwGAgDwvUU(
z62Nojl%ELHw1BacPzUXhP33-TnJ53Elvzf>!IavNw%v*ARX20Xdtfk{3rMHFtuHeG
zFRUK&SqQAZs3%{FuT3SGm&Oqy;2Xr>!>F~ZkJ*i_v1`2%lMT~Cl;IMZXDKmp2EwKE
zfx+jC88b!839i>b8Vm^hmC=K|X3DmY#zI*E*qQvs5Ld2cKX?~`JG-yyo1Z9Mz@q#y
zxPWAph(L6?!=12_&0lq?&MlT~{k+ZqoJLDZ_rT#-n-L$7B|<j2;H<u1*Eo-?$dh)Y
z#B(YE=60~R3Nt}7^t5wlf8wuRN(YYpf&`j_KlURL{xC$d$OFE=X9>1!93WfUlhiK)
zy}zfxst3lUhlR468+$`l39kJF`1uNmU5$ZKEzi6=I3OD25<B(jujYdFyHqU%7BCxK
zTL1{1nGf%oA^TV%iS!C%?KkI5&}#R=Ce+o{_z;ingpN&yO80)bO*ry>jk{9io=3Ni
zZ+pA%hBqoQxIGXqja!q_mddqC*0d;k0t2}&$~%fPHO9Dc%1k4G^BPhRbv5t9hJlN>
zT{%dq6?Se&m6Og=(nYhjzR1I7JuSuLoQ<ETv)$ovAsl%)cVomg$aO5GP;+BC>Q%ks
zU~vYZZ9%()w{s-E4i_n9mtL@|0GDFg?52uIH&vU`SYm-XAd?Pj4x(1y{95@ev7DCG
zuMPD1@C9$o?^_$}m)4cGg)W=NJ1lq18~42R(Vm*0cH=rxqXL#J%SBSioTSdkYR=W_
z8VMg&LBX9$O&gVa-`N+$#*q8o_R=x6Onfl}a2r@9?cyqER|C{a8gW$gtQRj{grt@>
zlaJmt^@-h7)~v%%e<JlxtnHpIK5#^A#1el7c+8~u3=B7w-<|}1lVQQ3ge_0kn3n2N
z<7NBVqigpElVO=-k+4jAsx(8>wI8F<GwQXx&tKh|0X4GYl>}3X?#16!>D+&#FE!fI
z{Ng6flwFSLl{cyuRiX>AQG7fCA{G@v{M$udRdx-lQ5fs89jB;v%*;`Ne(ehSA5zeZ
z?K%2l*ME8>G+z@{WWwxEV-8an^m6f9p&EuXunqr)xU|fe3?zxQh1>mpDU_<K!och(
zzPGX;v8K#!epf){$yihNZaCbgAfe)0A9r}E(j{3yOH<@DNF{e9G$DI@8vfLkfd5+<
zc25G?wJr2J#2o{x*Q1FptX)0KE0&5CRaG31yL6*nrCb_)!bWG`(jtL8K*ffU>kd>C
zjy*;lghT>ml|=IPG}IL))_-u*2;#17lNGuP;74+HS5j6&>G@A%n0~XPYVr6)et5?$
ztZlt|){*eY7Z|^)Apc0a2r(wBajwabCd*$Fjpux@rmZ3BeAZ*u{?Ewdr}!MS2YPe!
z57IeH@k+sY!eI!PMy@kc5y!+7%FhMm>rR;Gdm(P?#2L$S&weq4T2(-E{AQOCtCX$D
z14*FDSK}jMTT2d7(+d0|D!4En99vTQDQk<*e+z*q06${H0RQMA3n5Sv=KHx)`Z@l2
zD)NsIXy{^LZA@ojYijpzsmMPGSr2#4P^~LVOW=js)5V8{lYxoewff)l1ZHdIEPLvk
z7<8Z%6cdze(exCOOH!)ivJz2pv{XQiO#ae6#&rKlP{JNF{UZk)008VKl>X~ybGCM3
z)U$W|Z^G#|=7#O2=&g<(qYI#LvdI+7Z@ym*fFp^>1^0jx5=&sTf=Sd-tRhH<i(<&%
zUS_UoFN9MwN{|>tZYO+ht3kTpp7!V9as^IZ`}WS|-#}~BU}=C4Xi=EjAz!=G`wWq9
zlki2r7#(!ekZggRQR?n<m%zn>#-_0&-QgPuUTn|-C*$po(4EcgMF4Ki!2Y{`F;<U}
z-TA_PR3^gevLRAqr~G*}Y5x3i*MGa{cafemy!~^VLQp$SL6mwH;5Q@#!iLD>PNeuM
z7$3N9?a9@lE}hsi9w%IE%8dx0la<cRw;!hOIH=`-_sb3}C@d@t7~dtF=%pXt4jjoM
zf0<MLt|jVEknD-rSku<J=`GuS>j8eXY-0)T*a6L>w3~j29H3iHR?vzpoG>HC*2WZ&
zZs)*t5LjTl(I4=Ii(gxZu_5OUe{74f1>0GqUs|o+bcYS@&n7wWh3#x!xaV)h$Je8>
zwcxkSYo-xA5u4r-IKLT!gb$hQtej2FUSAEG7by%r808Xtel3TZTV~PX#tl4K7htPB
zFduk7zHN^&&%?+0o;!o_{`S`!Geg*FAV-R95;L9|THkjV5AJ$Z>W`1s45<^s`-RKh
z2IKOFZ-j`35icIl!1&!H6o*Xx2mOs6>Ny*&25hrbj>y3p6}nOkyxBiOVjkB+lAAi5
z9^%(Zhqq43dQ!IdkeZ<KOI>Hsy7ic?c6+)wbUS!_f2c<gH0CCTCH~2e(@^C63(W4s
zYKX5?2|;_fw?qS*rRwZq($vzuqcZN|&N_QnNCQ4i)Br3qQ5H3X)P(SdM#eUzrHVjm
zu*2|hBsoAf_z_JxLUD*ei;G+<s9t)F(wqf_vvhH+Yv7oqFr_$=Qo;?*X@p0EUq8r+
zOcvEJTTMV{@F`hL#GiFT<Rq*-wkvHL-A`4Y&ZiRn5$Sh<dg!kfp<`QDIS0?JYU*Q&
zIc1JwObokE)@RMY7KcbYlDOn8+gcO!?OA9(RMdVN=9<&9XUW$v86%Sf!rJW1QP0I0
zCGQbQKLPlYht5@Gy<>=(k;`40hYVb%CXXgEYiyzy|CGnUEoCZK8cX)z-dh5^3GD8G
zCpnA&kN-vJ^$|{Mg(`%%(k8!k<_Mr0EncNXfB2h-%We^V+!$DvO{`xh4mhLEX0kx+
zRbx6}YA{OYr?j)nuLv-Q&Ailas+5!yQ^Vk8e2|bMeC*&W(wsw*Fwx%#Pl~4?AqmeW
zf)=Xt$*5dfW{MuGt3CGtVmuuqSF|w};lQUuQ;L4m5~-1Vl&6$ip49@^so0s*(o+<1
zI_~7B5Oap&GMh;oxG+Zhvw}bKaVE*EHbc2J86QMv#a9YintmQ^sev)KH;<;)3FjR6
zwxf2H)GXLgphbfYNi1U6)8x?mQJw=gB9h+HTWRA`ct=Pjl=`_HR4(`nj)(H7Hz_jd
zE(*n)uy5u(<?U!vK<n#(=Wwg3b4QyCgJ|_QGGEpSM7qUc6EC+Vo<^Y@NA0(yuR=?W
zqHNpYk~>qLZzjn`F;#>EYi8V!H<I2$GYeOtf~1L@YH88AotuuZu$`fyJc(EvZf#W)
zgG<Xt!=@a_3U6OC_v}5ZX_5oUL=(2)j^v)gw;O9@YyQRpN#q~?blcoDy=rQdd(<Qd
zgE`g&r?bmkB#-Bu82pX)G^w68Zy8C4qR&vySm85gL*B5|4VfXfTFl_JTyJn=mo_@^
z&PD@@$6Q0l2h#%|0gZ%fVWJ5})0}LE!E%215v3G;M<1|x%;2Ca^^=ZN+7oAA+)FAh
z)=<rsI|_(5R^3KlfCR_3wh&@03J>X~Hjpb9Cs`M2k=7V8g4dzVIY=&@`H;Nx1fVkR
z@JN_ck!)%wnMj^1Z{vfzQ16?>V<h4+q0xC@J0~0e`}w?K{kYTK-pw#uss?SulBM%i
zN-~+9aLhMpRen_c<;Q`a^PCc7vOeklL;sU#nU*QwN6>kHZW!R3x7eHuN!KC2p=_5}
z-<nXkn0mbk^GxAoDAbCo^`j2f4BFKtpLk>B-xDt3Nwuw<Ym-V@<aq2}YPn3DZSH1*
zvZjb2<xIGQ3-_>XH6O%@ToAw}VH;U^=y=51S}wUm;Ijip;w$oQDygh&ZkxDKHIXe<
zt(}szC^-I3v_I%l=d2O4uxU(}H>1K@cq=`n5C!V=g-+_GMwkjxsg{B_Tv$+-niucZ
zXMj93%A_N;Mdan&#<94vtw-m`CPBNch~F{e$Pet~!1t{g`YS;jIV<C4;$tRl(^d=e
zRAH!<fqU;`Bn!^dR>*WGrL5@DJnSjqn1JN7)LkCwg<c|{GTEeox^4i=b-a?ci%9F@
zW?vlMg_3izW&aG%Z*uJ8`v#U9Pi--=%33@L<;i;?%AQ1blOKCwa`^$XTAU+ePAYny
zxg=7Z4-ko+WP2qsH+&x^Rv&%}tmJ_1RC7wOT0K=+;db*ncG1KGLc(t65Y~mVTw;G~
zV4svdt_3P_J2|vGL;0?+l1ef{xkXvY%9fq^Pnw=Z_|93lFd@gSYW~6Ij_v}C`91w?
z-t8KrM6lfxdMT|V%XWe?O-HK}qoS?EQ!o7+@Aqz?AK-tSMK|V;jl=>00HA^b01*Gn
zS@ch8qG#gh_^&6@F^L9tSquoFeGk;KXKC^#@zR<lwHG8<;=z)HK$;bqR8fJDx)Cwf
zNi>o7yJkv?tX5Sia<A7uc@H^re5`*^j?)cuCA9kw&@?41y`F+O+cL4XAO<Nw=bn^m
zvKvjOCK?kNIQhSyk1pID!7M@uEg57I0noDlj&^{QrJx=R0+rPgu7UwFqNUe47*NKW
zf|86Wmlx8~GJwB9De;%-mj?yuaxl>Pd#w&qZ33AfX$G*0ss0j>u!MP)i^YZv7MfL+
zkzvX-T1U`uxy4%&zW<SkO3pwsliaapmBejs3<CXHhDN?YK(0QDR7D`<^iUQyoSY*}
z`mH9h5q{I!vtdnB>WNU;ilO&=j;zaWtn#o@^+(ZN7Gmb2wf|OlJdmO4{f%lF+4?WY
z4OwoaB00<lN^N%sejxgo0?g9*6H*L6VF{K6<bse(JP1W}ykdD}eqpd-jabvBJr|8u
zX4baDo^)N<JNa$hd<!@B*|NDcUY6mUM4|n-0~yBOeh$1Riy;K2B$69r39OGjoDSJ@
ze?>x8(PAm_y9+=%12g}3S9<iNL`+R>uNMl~L`cnHW)_(P0jFt1m`w6+kw!G+<y)kq
z#I;P0^*Fu(ho1GmhaJUbv_w{4gJ>~?9k79&b-mBFq?6d)=EXRvD#ODtH`za3<4-5L
ziRbshwN05QmKCY$<3&^WoOYii3#90>ms{=?Ycl#G!355bGNVnXsp)=~YA$v?z#?8M
z8)(9E?tOd6($I=nU<HjAou(QA@2)8lFl*5$r41kU8!U;*^EIKq=EbWScRPHaW}u_+
zs%dO{_l;e_8*vJL^hfX|D<W}!k4MUe|587l|1A*n`J>*NJ$N{{j{WaL{l6|k;r`R1
zZe(uov;QyZP%rZA)wDnL#oV92i2T1Z`#;O=V-$3(1{qL%*!l`NKtJ@o5h;yAR?=65
z_=__x3zCtnT0>ei6J0rmzilI9IcI|Q_zrWkoURGSUP^~U?Tah_RB3-IKcU5&V-ja;
z4^;HvWA$W4!mHjq$W>AmHBJ|g!;jtq_(uujaMy8g!iI5M0hw4<u@^xXQ$_FS2N>-V
z3X0C-fUhe<c;4ZrHM8$#nfh%L#UhZAM9Sp&vSIGlnhS2HVh2=C)~(YzqNhaOd%;Zb
z-$O1f_8`1XZJ=uXr3ltEkt(v@uCdNZ89?dM#o)G+5a?UyreDwBxXsB3412~fzb<Dg
zPp;NRmB#3<hEi>mk+JIC76<s<uLeuMYDK3!+~@ip&*S<#V~g#Fabz!KxAz{33t~eD
zm4>OyY?o?|T<3KTAdER@j`*Kf8VUb9Zx}e){4X4>yR$;YiU|NvW(5Gi@INvA??Z{!
zz|qE)<^MH`{FB+-C6ATU&uXB&0X@c26scwb2zo_&<^;C8of63i9aqOTEwnUHp!{$Q
z5Db82;?{@FIxoC_7zp{~#4XdRLUlsU)9bS}=a*@gmWODZ+WSj;EYdIoN8wZhG&k4r
zwX=J^sM-_I1{o`H-}JD<AM&7`o-Pu*#>cXG`tgy<^fC?G_$UrCJ47~eyCI%w+rj?R
zOMrx_arh)2m~kq|!Dtkugmhk_503RC|Lt7CasDM#4fhuk3FyX2VFIP;qU`BH4wAhb
zd^%_((qTFDDUN$2ev&o?#<FHkRN0{yq(oV0cz<31y&Ygu_c;IL)uT4OzW1+fYR1&E
zDwuFk1zqC>XO&-+`DVk^05-ZPQ=gBwx6jY3;)4D>aWO1ie8wDM+Gs|)H2ZL<-jCd$
z02$vig@q8vOg-f2683UC#dkd~ggu1xJx5GZbELYxBu&Z-4EgjK1u&L9B3RV|=M-xb
zJUy^>gVN*!lTjh0!3n_u-6R6+?jLjP{M}!5Q8zn~?b#rN{vZmDG6EuP4-C)~yr)?g
zT!C+2aMjbQnD$A4F$BTj4zl+Q#hKRfhjq%i!u(x&XlE^L<M1)NGEoAjS@ZDdN(gY?
z8zFNP>svv7tr9D)ch6neX&skY3_%H?E;P<fUi@GQ1`7U&k@3Y<fyK;7UK=jrrBxd=
z(-gU-7Q4FIU+(T#A3kgLke}*qyM3O2c?<aAeEjsc2@!HmE?B4syS_#Qma375HvAU2
zc{nh=1NvJ{aFD-@IzmYW@qwEyU?`edSrE4zqmco5S+WB_e1PU#9U8v_1GOOF9<!l5
z^(E)g8Vxaz_X4CKm(IdMDf_`gBmUeV*<l**u&#gQNHKy5Y~k6X=$lb6Xdet04+8c5
zCYpg>%<*8aH|@5-ag{(ju4>N*yWKzK0z`-D9u%&N9Jo2CkFz}{&DXJq<DY&&@mBqT
zFFFDt6b6|-(CU$b!pzK^P17?+;bXyXcodCw5uTSeE>X5pz#=Kty#Sj8P6t;^v-D0G
zXoCT@6(guv=zjRGvh8JSg&|NgZJrg-+Ym5@nq<w~(3B!3!Ve$JRkK|RF*neQiuB;?
zY<Kmxb)UxQYon_+gSLn8-o#x8rc$d6N&06`7qb)2A5LU3gl|6~rr?D)zIp`;k{-t&
zPJY4gTBQS%y}_`c=pvMP=LtynN)+Wo$K$db)k=u=C64U%-tGTg*;`p@fBDjTL><pb
z*d~}1?OMeI-6rpHYfuX=y1o{}_`WoW;=^S~bx1p}<v$=O1}AJqoM3?4!#^gX*Tb<T
zP*8**`hzLmq2~YOLsF|BK#Kqs1n2QG#9rt3DR|>cq_(~7_xGTZdY$s<q!YM$F4)2o
z_d^P@d}%^W$?@(0zK&i`&%0@NiDg=|>JZo?Pb|IMQ~@J;V*9Q>5B)`-kxt`;SYvC*
zT8bZ5=r%z|aK9SsGev;K+W|_UiH(D^n+Z<gL>veR=@0!9DKpUb*7g9qju0&DjjlS$
zX9nM;1Bc`+z<5<4avxRasGLRe<;|Jb``fRwdC?atgTO)K6Sty}wyhh}uB6&tJFL-!
zot_J-zSJ3AZSS)I<8ak+^RZ9^jo0AH>#Ga=zHhK*82$e8iW}LzwXog(%a~bmv(Erf
z_&@)+I#+P~=t?^2<LUwScG7>!<>vK?5t93}$pF*G_X+k)=Iv65v>RaX`n1Px&$d^E
z%=o#@0x>@t@V2!Na^sEbOU{e2!%x2xL{-y}eo5zV2IwQo*jGsKtj^!(1uq@rb%-K*
z+XHFz8eGK*O*rk$5`8IwXCN!b{OK3G!F7LfI66fHGk^d^=;kE|KuBX20AHw+OlS*&
zcyf)hvj_fsFmQw7>!WQmi9C&%{y<=(!R8^6-zhGhDzsdwPa{ou>lMgZh}Fu7I1nGv
zQGqo|;sPS<Zvwj<0fyrVfLx%9b&TmKt(9{U-gH|2(4I}5Hr0G`b!KeWDb@lEjT#xi
zK)LTVu1M1eQa(x39jeGUou3Ot{D%nRB7BDEKDRGzNucGi5QaLmM?bE@3s3|JO)`3t
zNV|BWN3b`CkdC^@95e<c-!eum>etvEZ+SxjQ79IS^&u*%PBz74#zeV65>TUt12z=$
zq58MrZ>?b6MCL;+ieaAgB5}cJj;HeX{zvHX9=?=}g7ZQS-Cu$TVc7_uT{*kZrTLY@
zmuFOfbA~Vp-QrF06LHH<DbcbFbz~NSsAzeZ>b<dv!DuO%0o`#_3Qvg3PXXnPlKsT?
zqEiK)vx6$L&e_3kDZTBI2x@3x>i!gZTcs##d1ajC@K!JsNb(@YFwG;=B3IFQ-SC9y
z^Wcr3%j+5t#T#>uDRXCr%P-uTFPt>YF?4Ek#!~9tvNH~KRm9^&JqyE~YcGu~n+>5}
zkC+K}w6Sw~WvlA_5J1RSoXSYsCkB}+hoIn379a@Zgk*^Wk{0f-LgE@gbjb*@d%sJm
zAVYa`zTpG2X#mhAA<Fih;4Yj9u%A4r1R^kU6hplmZLD9|H$~&ujj=5<Wm@<2<(g&y
z>{($K#hNY#W78SiUikFRxv!&qtla%QTxizgf<z&*gaAxb{RNtBGY%$n8xoup8~7?5
zOd)q9M!a!H725q;1O9^NIM%l)DF)P2E&3NB%G^As&z3U;TsD@;J~<PIX(RVi75CW=
za|P=ND*Mh(A>47bv_%>OhGmxi1+%Ii;6Rcd2^)I*Q>Sz?(J;S5hsGrr9+Hxniv~@-
z_xlHQ7&}&{K=dL&;~N}}X}EQ0-9Ul9x-u+y2v%=5%^I+4p3#@uWC;m2-BczFNO`V@
zEZSr<db~d}2J$M(p}0Fhy*%iwKgw~>;AcPHmK~$WzYPduMha%8;dmiOUQebgeKuaa
zz<A?bE^zxzRgk6RKPr}kyLIgfQ(VW%<}Dp)zG_h<^s{Uw^zXV<ZNf7gHgSFG$(wRe
z+8GbM1?J<tD7JI-6i=tFdl@dVY?9SXH@2qO@xq;bewJITQI@b9#^7dAQh^P4EUaCa
z5(X|#$8SypGvU7^+Nc@mz_jJ$prlglcl?u2#*RP1a>5P$+kdU@+l%SV(HW$_Znyg<
zN$8T2Umbi&^>>5zB3TD7KS*NtIZ(_-k^Lkp!YY6ga<8#d5z-kuV_CKA7j@`^u?l)e
zXD&~<^X^y-h623QUKNv%&;;AG#6ppQct0`j2z>W~)OrGfUsF;I9@MH1M6N#M*3_j5
ztVpHLJHuyg%G>ZferBFpJh*Hs#x2cA6LSZ9te((dSuYy8tnGbtf$-t*DAHt!b38kT
zwJiGSBOXx%W^<K>jTkmy!phJiq-Lm5mDyM*ESw+Alj2d2-kT!`pLGPX-YdP`XqR4u
z%>CPv*_l1h)o_+9l8(+nj}Y!e5I?t6{pZ}}>1F&=cDG^dT>d!r?%m(X<L-Foh}yUj
zq#%y7N<{b1A2@~welcX8*N~1x`6TDWU~?a~7Yj-w92%lHtT*D!vr}dj#7lZC+OAC1
zbAOZ#Vg2=*M@pbe!|q8-<?@0k1n-%OTm{+CH4>R5hglpjD-BdL{K1b%hcu52C0^Uy
zXyp7R1t3;-m&!3xz(;DOG)W+6Npy`vx?tHU95>MV5&$jOel#Gt0XmD$>|*M852V6F
zlW<4w#U>>}a`_VNTnbJ9Z2|xhgvis+lM%1*{XpO`zIsYvPTQ`E7e+Fh90bVmO8-J*
zN`GzC@oInnhFPo+9(4vd$zN9U2YfMwo2YhZ2hlt5C4aZ_!rT>xU9U+=wMq}ileHrf
zqu{B|BCG+pc#mbCt;d+8w%49~Bzf6S;(>aZ2T;Mi?&lv)jK4W~nYP$nfX+Er1)+Gj
z;O)9G;>NQ6fN^mk+!78|L?qKIO(qr(u~I8$6`@L5$f*22Filx>N<bP@bdZ%iTDb(C
zY$6@`%{s!xlv}l5Aee7WpgTaPV9`hs=Vz(_)?j}<!pwt-sqX5Bg?c0+5g6{?yuy#Q
zq#hsU3q_BD2XQ<FOlTbzqG3ykW)8%&+W{Yy`UelK0Ikf?Jx-|;kK=_b#*9Va-TfpL
zafqQ@;n*Vu{740OF2mq-5)ovZ7P9mGHxxDGJ{9%ffoc|O)!BS7060sDQ32s)<m<E|
zLNs~B(Gat`FHvfW#?)+X%}hve0Z?Oi{fLfG*eebS{9N6DPXYqXXdU_R&6c{u6&j49
z+>tHc6#ITKt3ajvn?#LEos;x)^Hw`DHL}4_)L(xQp{<;0G_M+mtdLpH-o7jw3fUPe
z`8a_#8MROb5+52gS*M*sLOkfEQ}-J8kD_jqRR{q!U?89X{Hrlcp1Nk_Hl_?zYoZ{Y
zI9x9sOAi`YE|Z74chn!y%jdDSM5YF@HA;^B<uy17j48o`QAm?E#{sp_jN1o7-RkSj
zg~8TrAT^kCMa$7D4BDOAdzfMwtvX6t(jOSzd~t$YHdEj&SC=59uA__M9!uo#eRkpx
zZ`!BYw@il1bz<?<f@C>QC1;Nm`L?dq2K<R&zWP)H(p|;Na97a>5OMk5nQ4Iv790i4
zt8ow-lYxaI%V>dCf)|4_E3mx3+V4GH+#cRKD<;8NjUqC@E8+PaNMTU($W`LgrV5eX
z#dTo3C%M^<aC49XCMiqy5BSN0e##wG@A@a!cq@zMEj<NU1Pv{FX;JdtA|cUd(b&&i
zsHG}npVW1{balK`F@g<WH`7Kl9%m6&?{o2Ehb=(m(+43Y0uAMAo+H$=wE9+UP)A3E
zDVM3uuyz9P)EQr6Buiw42wTl0$)BLh09x29pp!b@XwOqIpZJ-2?55AhBwN#QgK!gS
zON*o4jP)~E5X<<m+o{uA$^I>r)hK5K6~wV>4(Pkxm?KTtmlrB<c9XP+6{7H3Q*$i`
zo{f)@Z)}^=$NZlq0a3@aWVt8?52IhUEKGB*MQN)DUw#aZUezPkFJ%k1k6Yc`TuOC{
z>$H|EK>f@e<MLD(Bs<~G(c)Jj(m!&DGV`0t_{-2Bkevl&<>;VRg~~!VU(WsXjT_il
zOY9&|swD#byql8K$MZW#n_9vjq3gX0>QWF|CeP;uw0Nm!Z5jj)rKF(I94f!4o?fNW
zOU^Nuoq0=^;aXl@GZRp}p=_zKXu~l2dx;O-^INS_gvaTD^jIr0eI$eLUsJ({p#&$S
zP=u9wYMl9Ou9O2Vhs2ik<wUDl2KjCC_)WHpcEAoCTMVVr5|=NyT1T0XQ$k<GRKujH
z_t=aBBc)5&zwQzmm5(_r7dn*=s#WQ2>%;I)Hf9?lYgQw$tp^kGtTA5@QyHy@s9Y|{
zvREa|Ro^kA*)z{2h*ZI_TQRDyB@+j#cMa={_*eC3pTW2-TGAe}E|0znp0S$Or!3pl
zwi&67VDRlGB&D8JQ>~X4k)5?8oEuXjwSw`Qe{W;8p`y`S=oHlC5#nEp_B29StzWU(
zx;Z4i>*z~?(%I3oUDCDw)}`oOQJk4N`aCAmVJV!i?A~D@(o3dHGxml|W!D6%+vBV5
zgf@~^en^%IL@G+bo`nB%N$vQWQrms|36I*Wq{5X6aNHoc_4fyLexYm0|8sJM#Hkjq
z^kC^x#l44(R@tCL=C>jY7|7KlyP-(5{gP$_{l56U#dv?3)>4XBq-W(Wn0M~|x&E4h
z*7FRC-18iQ=+g#}4m1kwee*aT?yD8%>vL>&SA*R>d90T=K!$uq&GMN=_P8lv?U@fZ
z9KaTDq*s1s-c0)l=FAX*qg5mTF}As8D}TU%B~Kz3J&3p4KrY`?PtH(%6`w^DQV0W9
zZBVCFbl&7)r3^h9k1=zyVJtFW&^&L`<c%PfWQl{udvoCxe<ftnl}V6~+-`+De|G@(
zE{CK)Pt&g;f&WaNbdcCNXPSyH?eYb0{gz^q*XaUan(hzSURIt3*9ytj4BqNIU{IES
zY!a1K)Vs!LI+Y^&k$A3S#nIki0SoBf@8KAwDHW$#V|JeGl75HAyo2pbtOODJ5x|=7
z@U?HZo9K=CUQgUTCy`q#cjRB&oW)TO!;tWdsA`U{dTItis<=Vq!qMU?(4b0Pf`0+9
z7AVb=A57a-xRnnREv|???7-^e<&?q_Hg;@3Hpd2l3KZ@dEqE>f8yUt|F0hxJi=iII
z7XB8&{29SaUEtx*CerM!VX#oa&#1ja_0UdMd)3vh4>$@|s}`Qg?GOowqGwJ-Wvetv
zJ%2ESB!T>aPhzb#+6w5ETH6S<U0Ja7{4<)Z7R{w!rlD4A2RfOmXACyPq(PO=ie~r%
zr5d_JdUqGIMDZ(NE#ckD_Xf0F?w<!m8N!j|ExK{`%vNzAljH~){qmjWo1why{bDaL
z&>vmWpO#2^^^^co`dq2nb^z3tK-yk_VI5d~9ExXP9a(EuS*eKDJe2xyjscG`(@Pkg
z(8(U`I+5UL0zT7oxn|*yeRr!(^==xF{aazymz~HPESds^OqNum7q`;L*^d_(hE4YA
zxnqCL5wf0GJ4-E$t*wuX^&#+#b<W}N(qE)KNkUQ)B1`>++ELuIN<mSUVRhFEsZ-N*
z#ofV7;SH*l<%Vw1q{4;*U2{*ZwrEa}H>&%1{Ape5KU=ujujcQ+LFNbB*#U{ewASL)
z46m<2GWi3}N&zf&j*Oe;XZe@4*`F$Q1|8T%SDRgavudLm{=AY&Pq;ayz{cN|Zz(5{
z8P6?w{XstOED1}7-6hl3nss~K>ix!sO@(^qxW|U(d>HmaoziyS@ow^V$J33LP~93`
zEq$_l=GoCXxp7|I@pe#ZH2eNZQ+<*`FTF*f7wC*4ucUx!uO%+}>>*r!{pa@k&+XBb
z1^*Sb0A<sPH~Co+nB+C(R47a8Xiy?)PAiEuO>ESFv9szFCU<F|rQ0cqhTt<O9@SLp
z)wVgyw&!1yL2rtJ$QP-F1IV4Q)gCfEFA2busWt}1AgVCKp(rcO4$2KAZ=?mN?+uFi
zP1}Nh!++INb!`S!OX?EOkX#XHLuxV}4JnFWgonRUN(>B|S@3sXmZ<q6x~Gb@RrrsJ
z2Sm*h>v$NjV565wrNPp_cPJLGkliUxP6&Hcpjm8;gVp=HSn1HF&{Io-oaP6rszGU~
zlr{on*-ErQ3M|I%?bQ+}pxN%akvDFZ>SAh0{DD*IQdHCkTkWg`+0b;0sTRmbVUe$V
zQIHsEa}J=)znD>RY*g*Ee0>>Ie}TCO*0|BqveVYO(YCVIDJsj;YSBVgs4llz0qUz2
zOPIv(O|xFq(SWGl#kD=H_ti$$bVApZ!v1~mKHqvLBiOPtvAORL)V)L4yfJldBOLd{
z)FNipBVpAeRn;I<#iHE<S~XA+OIlWWA&Oz{w3*ajTP3LvpP5rxTSd;TBHZO@)#qq6
zbbr8=>i0eW*8aNg3f;03^O@{=C?>K#)^MNvb<FSgYOAf@?Dbk_zg>@KY;xx%_?vlM
z`K>v`hRCL<%^K2onX4L{xsi<QBU9HS_F13IVhYyks@JbHx?$#gG&iE$HfnTdYxUQI
zJk$mqAS>$?8wr7soxA1B1O3*y?^noXsy3DqM9<9Hx!EhOZ*3&{@&$O+ip3{oZrXH@
zbpqJ}Jz>vx$r#yv2TzwHdDFC3@EhfW+It(4eNa*fbf^e^6aPf&Lmy-r0-)&Zsh-I5
zY0jL-+t|@<UF#mcbd=*D%?Y0RP_NO8=qs;$lbLfSe2&dS{vKPt_V%oLXB@g7<RLmR
zE0)Y|>PZ_Q>-g^&fvE!CDM#9qOPZT{-2CvUek+%~a7~?&CW_dz86&i>?#M=aL^6>F
z18n=%M76BAbq;Ug`wQ#N0rQ?*^S(UuzIgM#0P_ZCkD+?oo$rh5EmvfaKnCv`IY9~;
z0SgLhi%K7q7A$xbWEfTHy7R6z9ZXl(4L}~Ur{5vtw?hoOpIuY!8^g;&!M}S0)WQ+Q
zroN~SmO4ztB*WLY#)8ka?HmL?_RW>`%xP&qmyZZ4)beG#F%wJ7lS6daBwLBE9k}`0
zLh!P1CU>U7Lf_`w#BnJP%6%iTIpjJ870e=s#`-OXF~iC$f=)4^LZ1CROOng^c$kYC
zJq4l(v`4Ez(g$sn&ZSzpYW?lbM^JBJhgD?o?DG`vA*hY&rjA<&`l!oT=Eab7bb<L7
z<zvC@Pt3v0Re5Is8mLxagfk6RG8c9v<7zUTB3KFQrNUiOa8ydQK_eiGt1Xs;lP#Jh
z3l)o&?V=+fttIwgp;+ZzzAH*DOO7Z#vE@@JR2UUqb}Q2Cxhox>h?uq|YzSjjfsU>N
zb}85%`ZKEqsb}M9ZR{Ah55J>y_eL{Fs?0p5(x<p7(%kB+@Hj2WIf)R-Yo1q$Q-5V%
zxCpC`3N1%O60Tp6ep217Ve<(a1D&Csw^g@(3wn@J7efof$9azlW0o&R(|1pfNBL=+
zJ7iX`!TMOp@!u1tvl5c|U%t$kUMotn-&vmA>(F}}AlwJ*P{M*4wS9A9z-#U3<Jc=D
z90d;;=GsRs?X69;ZTk6~!ENp&VUzbwrJxsQT@^HcHePN#Oh0Q(L2lL#z4GBaJDPae
z*JGG)663r6P9K%vnsdc|GynQeNcPLQd@2Mb0KmmI0086v0-pJgsvrLhpV9XE2R`$S
z{fW}VVv~RdvOf}LJY_|CcdUK1CKAD}m8uFBPymAcgU=+F|FjA9>CM6979X~&YPqSj
zH3|Un{%qSndrZR3-w;?e4X*5vyZEs*>xrdur#PQHn!2UiPa?Bci<pf$^z0tp``6c3
zP_HC1{Pw)2A{F0+;*5dV!tlSp+A%*O%y@bZ0~R{KiRgv$#xUX6so>lv@39iZ*&6r&
zyPz7l88AM?8V#XuGDjq4RWZRcK8dE+d7?QEtn%oc&_<`_(55IJ4fC3+82S*JQBg&P
zUJO&G9pT6E=F`^lgS~`Mnss@;zc#84%s^?RR4Kzj4N}YYtW&}uJIki07Osfq(l!R{
z-CbNvNYVvTMMM*G;Z5=iGNT+4=nG@hU-xi7{ik=A80I{tP1i0d;A%IrNIIYS$kHww
z+O$h2maypM)_E+%F}Bkb6+-8Ch#*zdUDD4ki8}Vvcvdv(?+b;HLlU7tJsbo~Z<qLY
zK0n{biqghFbw`2Vk_n>cFn>9_3@FXk655eoARPRKt)5n+Y?lxu{$n1_l<Gi7(jgM>
z7ybtG_t7(h{A7m+8_SJM1i>>!`+fu_DTuZU=>Bg=nBFFeqL$p4nUPxNC3Y@QGeW3{
zsq2+kIujaba=cS&wPWhE#$m}x_KfNSr<@4CjF<1@e%fBg4f9(1^H6|kO<Y`D9;dMP
zdL}hKOK9HN`{`9(E6(&vv(HctoZHLGjg^=1CL7sbgq)XQDCv$G3uL2n7&oz^kM>RW
zFr}ev%i6u@aUS<ndIH~O^^bnW8!KWXYq+t|;boj5mH?;Aggx)H&;ic1(oiE<H=V58
zEyTSTRv1Xr^@k}WX#GJfXqv*~Yv8FC|0g|N*O4L!*bg>&9H9o#$#8jVM!~6iTrAFL
zed8#SS=K4G>Al*6c^tB$JrH9DGp=+i4uJDG2^8^POBnEOHING}(|ft07VAnxXb$zR
zd$bIC&MkzE2{J@Y+Cy|A&)ZayfroDSm)J%Kjb$$m?6|PBQ}yCR2fpqSz`Z`c!@3?0
zLcp<y+Kg7%i?~_s%wj^k#iIAjx{)gh<S^QUaN=XJ4WV~VM@GR@Msk;|(C7?C>sWCH
zWQ@~>3C5gSqPnu8DZEI(1Xrf&Wq;jZmboBaL|+D9RyX#-7?IIP)|%&td~QAL4YI)e
zd7ue8@EO*v5vfZytAdzC_ikLDQma50S<8pn4G@9T6YWLOiQsmIrT5r?i321XceUWV
zg;hf@@DnuB)6tGH@ktrxUiQEn4KQAm16t<;H?rhQkGEfVB`wRLd9Vi@BicZszNC;t
zJKguPKW+Ba#ruAICk+?fBbw&DZ^=jmm>?0yn$Cl6OElQxfGz+mhz|A?W|5x?Q%Mbb
zu-g0Fq4kGJlR)Az@s1sEnm9TVpq>f(AwNbE+PAu{bF8*^`+IT0?r13`cS)`bH-{>y
zZZT@D{#GPg#va!#_3G_9-WX*MH_6KpOzK`uu$TQr-Oay#JB$IhPOhqt*I4+JaNGXy
z`vD!s0d>^qW!`&uIcJ28qBjb?Ot<y5+aJCct4sL#%}GQzI(&7<UH~TxL<8nybjXc-
zC@E=apvy1vW_t%g7{tJHy$R3dy}B(l;eN>W23cRPSZoWK!3fjEf?eOsDP#m}9h3bX
zV-%qeg-`!+?+OJZfM9qQ-sk3!!7=Z&mD>P_<?W@%tZv8m{p*9?`sOCL*KOk2yEU!e
zpr1aB(RuQDb$W`a{S~6KrvEt!eDx!?G(p<e`$-BmELjrU`#Yzn&Ck=YoB6JVn?S^+
zIoGWtH1nPJVxj<cj!VC5B*;d%T#rP}578YSk3wWYM@fcpLhv+nouAA1tpo_(e}~ZS
zEf){-m?Rw)qR#)F7AMmMj`jhYL)-eq9&w<Y3hu07bZ0Y>c_Oj-hD_;Cq5ec;D}(Zq
zxzF+6FFp9LGcjH7ueXt?HhS<76h3TtGrSNA3{|$rUCy@f5no3LGkT5sy!jga03x{O
z_q4pHYctoytG^FxNpwEYPD3`7SpA2VTxWwI_;}x+z+AX|!{9K9f#RCx>!{tJ<mg;M
zPrjFr6>&SlMLSV{=DqOWT6P|iP`4DgI4<38$^_R}?ouY|^l5v&-&n6Ak0jy7IlMn#
zFE1|@#>U^cZk%Df?@_Y*1iL*y_h}w+HeXWB?B)+e_B^U%wqx&rd}%pPF%*#UtV-#=
z0HNx10cwyiMtwsp&RVYlIL4Nt%d4XNke)gRTL5v3!hWh{keZw#e?=aY?LLK_G7ncV
zW>B~+j(@Mtv;;v*SJUQXTrk>_wQFk=1G%?n>}Br%CI=Xs!AXmwjz_U+D^yn?KChOI
zDR1IpEu6Jnws(-99()J^kJLR5>$B47)lDpOyyQi^@wrT;)e;iz!NVsOPcwLvAf~%<
z&7YDb*P2;hpy%)Ny?Z|m`|?lWPu{NHkGs@CQxsx`_pqlD74wciS_@xK5xep>jIwHf
zD_Jk9k3w0-Q|af&06GZ+hp5MQNf!{yhT1Y|Bmtn#?IP#xyqK&3b%UoJ^+T=!4xxa+
z3eKdyC-+!;jSqJ46Wd*YRFR{M>JR;TwAOc)+pkqOmRmEv*g`g)F}s(-;v`SfbC=SD
z?vXRo3#{GA!vf<O7C<j@y%~$>-@0Ep4~t){7Yzb@^~sDvJZjumH*QW8-{J51I$D9h
zOe(c_Nsm*edPGbK-^N`CzFH0XK)GN!6);2yt9UVO_tp;J<nWG6p}?kL`E&08y80)c
z<NRe7?{g2v^~`h)i^m@99V|p}VHXVJ=j+znUF_nNU)}&jPmQ5+v_09uDL;m79B?J!
zcG)|c-P*k`X}1d7$-HI`mn+~A4bfR|JYtSgiFQ9O&Sxb6P+mU<`Ws5Uo@Rs(4<^48
znI2vMZ|$l5q~(}&_-gt3WY;>9k@0NnmyAIoBa)crE%Qu+Epe)00Bm@p?gH#2jsP40
z(zgK8R>}xCl+lO~WP<a>?5gXof_8<WZcv`JSPLmUjktDVX53A<h=Z3P+>V3wSi@%!
zkBA~f$tZx*0*exF9_a%HW?U}5oxWyRqrcLgJ*j}KY0h!=5)kjG=r-I2&?P)=>Q9``
zshcb_bn<}<m&{uPDgj>M2C;{Ki%*yocRmg#16c{OPZwW?gvLh@r1$QJXfsoR_kW>p
zMKN!@L3wn9F(OEnL0s@AqMq3Y{9Qd+d7qEcoFIY;45t=SsTGhW%qZAtQh`BEfEkD*
zOqmIO4fk9nQ8K1rB;B$!uJ^_pZ763fjvfmjl)ghf5=ChZb4V?t)+2!%mseE~h(Hnf
zvKVGWO{kqYvc((q8gz{Chk03;(&xWVpZW#)@vO^~CLYh&05#(&e!CYmr!;rs^ebtt
zGdoSZ)K~(_0uH@PF!c}Fk*;WPT%+T-CC@pvMABlARptiG5e}1xD&+%lVR!{O;~j{F
zyW**0TFV<!NcfynF?<Uq_9eIM1xkdnpbVM9GJnP#v@SzEmCU&HSX5nIx782<<UcS`
zK-I?8u#Lf(obyLsW;t*jT;;FL!e^Jn$!CEUufm+nMUu+Q>IVNtE)gk(W~j(kfpT#w
zkU1_|E;W{#K+_4*4i?tz{rqB((uvI$OyYVIb`0XY@+!c{(8y>PsvOfSY|Hpy+k}m_
zaI1Gz3!kj~Qa6IK3ET(^#oI=4x|T1AHJ|XDhByv)PL8w60R!m8Cl;QJe3c866|Wr1
zToLXW`TccJ*#W5q-%^BZE+Hk4R-|^F^s=Spe9M<h8Q9;OusaGUIe~?ni$y}W*|eU{
zwruWRN(s-dBEQ=(x|>9jW@R#+Td}=`O?QcEX~A~mSKA=Z!GgZYIJb>&cd5wc&&-*Q
zy4}S1l}SoqsUJ64E1|8ch#-cJqq-k>`o<|_bW6SEJl`ty&6^*l9w;(IG!xdd-#pIO
z$GPg#x<Qxaa%UTgmcEMOEH%uKp#yUJ)Gf(*m5TduuYlL0(H$Jo+&k75%n5A|>$~Vu
zjoNWeUzDaU%{k{B5!~%~eYf0dc*pR%(P<$h_=fv}G&v1J^_K!h)2c3oy7FdMSFRen
zODO8vT`INOIz{Hgl>vogw{<pGCRpXm0d<3Rd1Ok$K%*{322ma$e6<Dy;`gNTRe)+7
zV6E5eqlEm;?UjLH{d0OncWPkiLYKC~Ce;+tfERyg^BUVQurX|rhb#>VEc`fZ4A*5~
zz%f!Cv!R9(Ffz-38faPf3VUFHA~F=|lVc!BrkI1}Ay}Y>2#72D!4nax4S8G1j*YqS
z78;r4qCnik9ItbrrW~xDE@L?jG*Hn@j##TFzSdiT)5+>Dp`z}eu~yx|G>amn)MZ0N
zGI|E7O2jCxEdX&;`V}B?)cPGDvz7ZJkgAZV?(EXsQ<VrcWkG9U?Nko5Si$1iok_A$
z3WgM|$PyF|>6QsktTVV4uS*v3Qi}ZfZT5g^5PX%ughVJUFAbZ|EYw^|1JSs&4i=ey
znfXK8Hp-VZqOH!0L^j}R@t`F?M<`m5U>`dWP!VGRnO_rXobt!NdG0P}R5ejvu_<$$
zr0M=DxnnE*;VHs>DB%*oy%X&BiID_qB3%J$20!F_*I_(OWy(sQTEb}!HL2H=knCoZ
zd1m?!T>3why<?1MLAS2k=4#uv?bWtz+jjSA+qP}nwr$&X_vtTtpPPG6a&xkidXq6K
zbJpLgRE_aI6$`mS%(4|IBz^}1VM7uKc~W^v76dBO0u_yf;lajadFdoB_~ydZPUz`k
zK%Yw88Vb{e#7bsjWJxH2V$wKK&Gj{OT|gJlMXGvR-H+o4w%Q(nO?8jNwN3vo*%=+(
zEABr3x0de}F)5a+nbob_3{_J;rb93yvvgbw!u&z+w+pxZ61mC{^xTd37vrFrD+GvM
zX#8A28zplU0kaTKRrp#!qA7PvL87U4TR~(f_4Wp8E$6IAw646umoPO|hEkLbC(GFz
zEGpGeY*nH-2=t8VKxkK~mO;8*;6@tt6?xnC#BFTW4=`z48NrYEgD?k+B`k$2A1as=
zZJ$$u43Q*egA^djK-NJTHTgn(WuQ;9!>!vOu@USRfubSVZ2-wYG8cUdqX}_Sn`3GE
zl9!Gr5F^#Cr>XnWmyV|pC)G(@lQ>V+IZ-KzD;@HpDJ>}f=n9$s@@P1|0q&&F-m2_H
ztD^&&87;aS5xaq)hKPC>j1yNDg&PXyg^@~~=0GU5nf)Ztq;uzmr<yI|RvM?=^CD1N
zXN94)PV+%&o$~&ujyJ_`+%QR3A`-w;%UoAUvO81k^=VMX3sK+;_zGm3Rd8CobcyXG
zEYotiGOr76lqW??Q$FS1J~s8LYm!Q$C{=K^bUKc6b+l$A@${;sk^9<>KSaj`_1G2?
z4C_#-BiyK5(~p&-46`a$UJ{C*1?5OIaONm!>)cE|X4kv`b)_7v%zN$+rM%W_E8CJq
zoMkyb{Y?r0AEJU{(7DSt*wBPZaE{68`Sb()WVl$~RyKn>OeP*d(~q``^EMbrm{}XL
z_?rOV7gu_k@)dgE!J8iFroy^ivPM3xjtL4h#EOEC=$o0(3`j0^IK}@>?HId&L(gWx
zz_xY>BhJx<t~qn|MAIdja5MZfj_rxoqv+CW<vLNZDxyFgKT{>nU{xRHJZnx?#duw{
zuyW|xD(P`FFXflDp`hoQ70MGYQ#}hQPFK)<j{`-nW6#MuR+-nquv<WAS9e)9x-|4x
z48@)EE={*^4CSG^(^7q{Sh>v5sfMGq_<V1yh`dm-Nedel(KJ2(P{Jti7R8kLjL9~-
z$PuhFfNONkQoLin(1~vYl!}=<)~~x|GVlRc(d1z9%V~}=54FYaQj@r)iFNj2J;-m{
zs)2I$p(P2#gFmWNtrS%LZq}-COQYaQMPDvPCp*K$vfz9U+RhSK!nXGchP(^O6*I%0
zCa1FATiIhR{R)k=yQ)_{!*s};gu`Eh#7QM!on(=Y@GgAL--_yGi!rZeI=7j-2|UU2
zS`}8ZjWpEOM5EYTJ$cP4bI!z9WX?!qYS{M~!chb!5FgX9a<BW*`)58BCjSb-@^Uj9
zR}#TWG9J2)?NJ2)%Yw>RcS(cBQvtMy(37&l)1od^U)dmbC07NsNhzG~!@tB@vT<C;
zB`f*dXlbQFuR$c$fZXvaz2%scxmLFXP3aTO^5HmBP_L|M{m(~4)4D(9LUqtZ{6J06
zg~a@nU00$jN@L5i7)E;w+G|!vmPxBF^uG(DpELN?9ukn}A0dcMRMjoc3;%X=McW&m
zCT-Efx&x00%^F&%<|`iK(XG|z@1#~w&03m)42@bEGO5qaE3PQb0c%dBU^~~ohDolI
zG(WcwTt(2+^V=|wxteM8nFZqM7dQK4Q=C-Jztr!wX9IHx??)hoDDBgbsa*Gu^0vSB
zLd#C?Ceos2%h|of3EY;P(GA5+EEm6^@!S%qLU!SS?CO<}FJ8$o9sVtc!!YZ;o;dbQ
zVcbjEBDf!38M;1#jKf6DlGJAMr(#3tAC8sB97pM&l4+JOMK;F2?MJ&XRCYFh#TSys
z?w=1xE7#UJdFN>!?(*rX>hg8F#wat+ty*MLl{RfMvCMDfdH>BH*4h^qYD#`gEdyeu
zUD;yaoRzoxUK(UH9pHz@F8$RmI0qX#Mad)WXj6BNO#+Wq0A|M6>T`(>^%5;Fjq4u!
zo?5dBcV57>VGHDH0empQqW?j&?tKr3kz$qV&EKC5hD_CE@Ee0c)w5RfRiCx3r=ae&
zQsax;vTgEJC<Tp6xc0RCgr~@DW5enEDOOaR`c~=q304|HpbWBJsbf1Ng;S(ZDv4^>
z@7;)2ZmM+K;3zAuYlcN?l4^72EH$oqp1PiF+sayF%cyUdO1#37Ui(j`DZTdX;(Bb=
zWNg~O)$pTzZPlU1R<-9M*y@P2dOe-Fv9;E-16EnH+RN77fF-RL!DUGo#pP%kBo~oj
zw-Iqo%1GkUJ6VIWx%H%4adq7;Z&4x|x2kw<sQ|jw-gf;hlsI(?FKHh>#8~#P-d)SO
z9O|)LfY(EJKYYF8b-_lSwsd8@<RXLeR;h8bB_cmkv}@3v2e;LdvkL)yNbLEQ$$Q;^
zFJga}8o?*>?c#23!?c4=x996xUHritCuy5X+wP};y`1(|NImj9QTq|)<gt+^$s=7!
zz^9w;y9K;(Md_Y=jVm??#d=0dcDx-_TzxTp5CMK7%Vznc$pr_%z7hPI@J1t(x_!i@
zEVs~nzYFch8b!w=?ls_?!x(3Q$Nm^#*%TdW4V3ZA-tIcAf#GLiyNS6a3VW~NlS(bT
zrQRhMohg@i)pL|2>EJk4TDg2bDg}UC(|AmQI6Uro1^nT91pr^#y@{1BIbw^c_t9(X
z;T+EKOHawVd^7Ib-Nm!5^=o(8)}+lVVxs(8{F(nB+qcVe*A~;KQ3^!kCA5N@j?C))
z-3g57zl4gITs0>PAr0gukwT%li`uJU;&N(-phQZC7=`xHu3SdujyCFgBQA9#4mbWp
zUeP>oikFCR6V7d%LBXVtVgvK&F7~Y2M=GD>BeRK;gX9m|a;3iygV!V}2t!w0;x1f2
z&S#^SCq1;-VFTs+OqeMx=^&WIjp-l+Jt($cdDL4vv1@pYaP+5)H3)acd7zTmza%nB
z^~r0xH`==~3vclb_%2Q^M=EW#2?GSnxl&XVkD2SvenL~zI<cVe)7c6;=$Bs?Pd|K!
zK$ncEoR4DU^%LS!?<jL!ZQLLm^BY|VX$MgG1k8oP6<|>70WJQ;+F@oZekh<ibDe-8
z0V36;t#C%j*e@|%T&OB%%JGU)!Pmqja~G~<E7gE!7Bj5?b04<lf2x8<mZf$u!|)T8
z1S-SurUk*LlSrIpEm=ZAM0vmy4AIj&7#q&d=xd}I!?mBaT9CzdNdzEH!$1;IX}w88
z@TXD}Nz<%dOwy_-)*T#7cO}4*57j1zs52r1iGwOBn=3)U9m!nv5pDG6k8yzKc);GE
zpk#cxdArCEl;pkHM_-I#x=ain+x}s5iddu~Gd5-DZIbgBso952$mJX}xv5ioJLT|0
zuoxkH69E{bED1yp@Br?}BBu1rUY9UA$uAWc=>>s`3~()Mlin=o7=h-AzgOc&Ga-{T
z6_7{B)F;cp_KPG`KwMwXBlq8#G_CO&1^AMIpAMT!yE^`cX~PNB4jzn*1UXuigvQAU
zkdYjC+;%h%O#go3^VmS~bQ`a>j<T{^GyHz)e`coM_JNQIY;b+ZbZ~t}WMoJom$Cj#
zb{xeKMbNGv?M)&$RNws7Zo#8#|G^DxC`UwbJs}sOn<U(f!Bf~n`Kr4g8iQUFX~X=v
zKz44N-pemEjDyxL<wO6m0z5eUuB+udDh!uUwUIa|O!{CCP@n4<K1Vygo#t6OYzpIm
zZ+pckGI)(tVDJzrL*`x^tO2n(C-XXfyccC{F(kVsry)Ym5*ddgoV9!`CVXI8J%Gi!
zHbc@cjiW~{v4*FO3d{>O9L38=6l(=mUda^cm1Fvy(H~VlS>GN-cesch0MjeYL$|Q9
zDdg>DzOkMbx|!-Tv6U-9m8I#j{o@-AlSu=DgGH+e!O1Gt4DV!RW(9eAntE^F)(Jbx
z6r%pe%Z{F3xe3uOQytz;1Cssta<z-2SBwg<<f!)!htF=8a{#ae#diS~u*A66eu-nZ
zk<m^AJQEe5q^Q@N#t!js<)A5I=WAagTUyredBf0^Ra0kYcf0x~w^1I^jCs6T<~(s7
zdx5xtxqu*;=k^J08Q_yU*^_(b-oW)$;oo0JkB>*l`5@Y){@>|Gcece7oC`<QtcwSk
zYsZ#7yH&rxH)c7m{k{h+4>HGe{Nb51aScdOwOxQnhm(PvIp4wc$JeS*P|WaV<fXp3
z_Z&9lXtTTvg!iAUfnX2r(1PkrJKLX<<fve9N&m$7`+j!e4ds}j>Gse@NTdS=!`!=I
zY4ZysIoZbiNqvPI6Kzh8b!XXY#ey8}6yg-ESbOG_7PtlU3n<jo_@RNJDJ}SgX-XYX
zGok4;U^Q>m$n%3~+z65922i=9giU%C$aCat7s<t(hXd2o<rI<5Z6O2yrac{Tt5=V!
zRp%#Hlpe_u<NE8M>ZzkM)E?IEJL>8NU#cRC9{AH-P8DWhCoGw-r2n1nMwqd<OcVbZ
z=%~nWP5Dx&r$boct{^Ns(~y%~Yn8b$f=!%v1z?41Y{u%ZQ-!pUcs2fLk*26dv$8{t
zcNxIMHC+iHR&Q4eiSm3v2Cx3eiq=AY=Qc6|7F_;HO9*k~0#|JeX+qHHgg!#t)TR6d
z28Z@j$=$-w$<BTIRKTC+|A^Ep{G5a))ob=7AcSS!iwijLri{ZHa%JFq$1zY|lzLE!
zPQh+_aEUI(7np!6IjzrIjL8#J(YsOpEu6!0r^GgX$$tO1U;HXRacw()vnHcoviX&Z
zecielP=G5I6$9=26L4gN+W?epW`8Vtm~GsfiOe?s1C7E?CcfMb^~=<^5!Uq|zcJgu
zuVt!_1)65H@V&K{b@Ce;qm{`CUOyY>FoTr8+7N{z2nw5kVo~>%?Boh^N@Vg9QT6dF
za{l9P#BK;4h+h2n|0D$Gu)`?HIYsh0khAdT?4vKqPUgf5yWV(=E~jqr{Hn>c;t0I{
z-OkMHpZqZiu764BA}oE;{$TJM7%Hil7#bST&joOP6(D#m+u(hlHMK#gUjTe~q8cEq
zN6wF^sEBEJ-alW~GObr@qY~fzuqTz*4RG&#GpZpV@9J@MZB#o?*+ZhS-C_~HP8nKT
ztJmJ@PdTGf`*%*&qI=B(-hwyvGp%|}o14*ZqPw--glA$J{B0O`GqdtF5Zx27(w_PO
zJWs+9X0h1vY5T*OUQyqev+rywl1Wc44+Opzk%`(O`J69SjGa&O4Ds$F7Qu0yN8(kb
zzwEhx7CKnd#P=H4QzVt7INZtCr?*ZKpkrWIX>5XU^vTXLPT!vcOKNdQV>rySM0Arf
zf3wmhTE+Qk@rt!5M${#<m`i!491pc5UIW;@01dPLu4+y~1<3OAx5|t(_e8fm=?Vn-
zE2GIjkNyU#Tbt-vUr?ty?xR*50{Z5(*3rfO-&9AvI6Sm1)KXnu#-snP=J4;TTEDCA
zf)+q60oo>YJ5#$`1f)8brPbH4hMI#%G7f2yah=~Rie50FRf+O6;=0ay+~nvE^2&~E
zJ~%CM$&O?_IJtJ_S6o0&68;v%-tSfMd>PC7yivbTtZS`0yLwymCbz+A0t6VPI<Jb2
z)#~SSONIclT>8Q-th8`+8E2ieR4#~&viBKhnYQ+N&=392wDt<59s-dB9`$eFnbUS=
z#hn0AB8Sm-nll(9q9&EncKXF#07Xa`p^>Al(RS8lUiWKGz0vOS6Yd4E<uK{!;UFFb
zZTLC<CpZHg7hZ;D6D#bp;}Y7Q;1u+t7+$5@q-EfM?JS@4*?SHJL03~T>g5Y6Lq^~8
zydjwDkIt%_F5^a*^EDa;h8&9nM-&JGL}W<88XdB-!AE;&^V2FE0C=Ov10#n;GVtA}
zC;AN(4Se%6d7)4S|0tB=AIA!S#-S#71>G9>H$=u8Qm@lOB7hQlaFK@l+P+Zti}YdX
zAhnYJLan5bAL8c%2j}|9vq%aH9Y%Nj7sfghcikAdif)lnFx~Vm-1nIpk98DK1Nl|n
zH1KQL8&A;bEd9p!V>*^2XZNjzgi&ltW689Lzr(N))&JIRP%ecP_+Q*brV=tJGgpA0
zCWcNS+MuGm*yn^K9tdyNJs~v<6n7S8Bkvn!p8cWM73js@?+MK181$#$MhTuqVA4w6
zHhkr#&pPt!O*j|;NTMb%p_$eFbU)Y7>lBldEW(6pQYy#r)yOTA^3@o~I}T&Ar`Q{%
zZ^g}3beM<cLJdW?Bpm)MY+XelAq5oP9Yl_nh<5@pk=jee7Z=?fL5{ZgO_Qbe$`~#E
zrU>_Xk<^H>3l(UF_$ilQckydwNOyCO*l)R03GWoyVSQ!BIH(($kYLwCfmaYKIM6K%
z-$YWK{?w~LaStV*;OO5ojOtNvM;X(^suWf~DcYA=DwajNSW_;+I9cPTNS&@nyH=HS
zAcqC_cc7joW|sHMU>mNu)LDLwm)r^^2QYsUhev#olU+R`n@D1Y*(N_DMQ~>qAm<6U
zhLFu9-XY~B_M#}5%yWm5MpyAOD$IiEa~7?E5ZrDh^5O;NzI4GC+WLtnq4^8Z(EEE3
zh>ZcoO+xeED?bLqFxCoT6^%vf#WQn5l8Q4((u)gp>BYBF5v37dn~9O$@vF0nt35<F
z;P>jNr<=bvlHfy{KWP2peA<YKryawxiYA9nb|aZzv4aq2b{!Xq^8-PEZzVW4oU*Lj
zr&+a4GjxpqdwjEFBVdWbO9oa03wEZBW1LOM8b$#O5p0Kg3#MNrXD}V`^eAK#Fo8j6
zbHf$hDO~Kbc|Rx_+@m=-rCynRm;>GT)9Nd%z&PC>PeQM5V9C*)HXne=;qU%qRC~QY
zcvxYZKlJ@OsF^!Lx8U2&;0OrhjdTvQMZ5!Y#=h+{Am+2rG*>f&kh7a;d%z!yJ*ARh
zI552SLC<Ox-z_^ca`^dW2Y<)R_-Y*+zNKfNAR)SH`pBCU`CVa|x!~jc1)=_RoH0aE
z^@H(B>M%O<Z&BzGoB-iVax333{rl>$;D&B)O*j8RSvQ|4O_6~{e%&k%OTJ(CcIxx&
zFw)$8<*^JO2~(>KKKoody^F0wCulRZK04)a_`_))2Eoz?4nX=kszso3Es4GH{kZsM
z(#5`m^9D`n@;Mav>>XmZ(3Mt-p(D5Qq;wvCK|7F(nw-G55&Dq0<brwmQUdoi&>VdO
zvUB|Gb{(dEe2a)`dmf1{dlcw`9h}-@0S*|oJ8_?{J;|V@H{2DhPwVARb#y~3B}Vlp
zVgKf;;u($2=N^ht&1YEo%vKh!jCSV(czL&E`+gB`LYnCyFXJL2lq%orXwVJ;&<1lh
zlp|s<0S0uBh7%%8rjY4C&2*41UnKlM4Vc+{4E#T;IZ4V>66L?2Dr>jUtJn^&RlXmp
z4zE+UMJ@nz9G@m;svUgGcCTAd>USyx9G?Pu;(MyVA18iI-mhDTYIo5EQm;X+hy%8u
z*u&g<kz$MJgz`Kh#N{J&<mGpu!Yr-1qc?8=*Rj=-_58axK%Dg}NKre^H?HQ77k=95
zJWQsMX-J%--5xt+3@=V6)Yb1yYFh7(YFgeEuu{#AYz?*N88Kd7zrDlGj-AAnNv33T
z>n<*)F-`JH+LzZJIU^)|OUyK1j%sp|H%wX3L+G4Fg8w+CBiDk_gy#W@mQBLsGlv+n
zFp7?e7RjCK5!ft%SR_nDD4+qrw}#076P69h;Ur>`Fcm0CUf`?0S%jew2Utx;dAJcf
zBrX@Aj>Q)|a@#_Bz81)ql8|$hPjA5)nSuyT5@RV3ugX*RWZM<0jWg>@)G3+ur|h@2
z1=0^G+CUnHx1u@g9qTMgrs>Lw0*6Bvleb|Bx=oj$&pSpNDu)v8Ng<$v!2v)y7W-cP
zqQda8yv^LdzXvQF=aGl=-~eMIxZH~1VPMFRpw_v9PET{HQTI7a2U{`vmr3%xNo0||
zYL8VR;|}s5FKO}yn;&T&!ZW0Fz*0Fmn$f6<1EW%*<Bc^T0_h06ko}&UPAnn4ssgl;
znhF7MPITOL0{NEWft*8^#l<0(h4C$~-sCrK3)EI<ZE2fe!d)zL|BO$2Q(p6!y0TTk
znY>Aat3aVRqoPo%B1CHqEFrL98w7GX2{EmdBG21xkuAy#uR6l0iY}hsv7Sn2YbAR@
zjJooRXNX9C#?eg#4q6B;SvUQBQ)Kf1tXCOYxfA}elVTM|9JTlIC$2qsJrv6wxeJ@i
z#(PowWH+}_m;0B=+(S*yE0b=Bnutd>#T3EAd+qpYk0juwD#E+QJXn&iO*-gG+0THq
zpCFO~d6yM!HXZm{IA{F(f$*xSfY<zKxxOtBLH5WUUVT9w{6oWx-jS=YGqd5qrBB2r
zcr}xk^Q2cL#=~4SLGvW*is0JuL!Q+G62XR7!sN}E_^Ls-eFX1|Ou{erQ!ILVHI`&T
zFrm)K-Hb7r8cw=dx}JNCEJeDwo^;|k*VUqh)DZG>)`;2<FFlgvRxlw5qM>Lk_+iU9
z;jD7((MEbWwRYAh5)%5q0z;`)gal>v{|sY{Z0)9|F+|IT=~`AxhXz#~+voDWDV+xn
z0^Mg`kY$;y>dSJA{;o@(*u}}!;6*2j(z64k%H<#YQWyrY3-gxfB}E&YhUE2Zu5?t!
zKty4-ja{S`Q^Bx<1yn&%!r$k&7U}E$e5Ey`e8|a(vCr`+smS(!BdpsVu(w5EE^VT0
zZOjxi?OA*bnNq}7iz3=kS>Iz$=J3l$y`5$RQxV<p=%<UNs5uAIBO!o`u=I<;0{#%W
zF1{hGS=P-6zO%dcC;;RTnzvG{bvjT;7bSmqIH_!hPD=ZmtRSk(h1`VMI$?*nX!?|s
zAZl(WFaWFd8G-jWNA6^7fmE4|-;4LsN2ddn%<L(ilK8W#*OmUQ6%QA?S!CPC9_+c%
za*c8y;E&Al_vZs}jxt1_WN?UmxjmfPj_~I@*){Nscffd_#Ip)3{Zkc+nwnG2vL8#>
zW2ivXuAgo_6n7X)r|XcpO;xtuk2hP;yNU1dlN6z_qTUcttZib4cDk9~Xl2^MRB|XN
z@89@G57C&0Z^y|^JHekj1>(1W4${Aj_XnuNO-qD-7vu4#<Uu-yb9?+uAclZ}nwHk3
z4{6P3O7Js1<cf$7ddz36K*ZH?`OaoKmEFzL+rIn#`}V42p#Sfn5%e>F_tSIA&Cgd(
zOV8)${m_Q4PTFPPn&You%Kf;P_uli8>x<9pb>7d*lIO?3)6`qZ(&bx6|Dqv>^s~$4
z8t=dNi=Cgh1-O}Sxc{$tkb4#>`0cO3iVWWW%n`$piG$wl|Kf--gkherF7n*)NX40&
z1*l167G}v!ijk7FC9!0c*_5?Do~}+^2xfFaS%!g6@zHYQ=?x)HZ^YZ`qP+mtRiWF{
zF_&;7W~+GEC7k-GcF)I{EP9M|PdWAM-m2la|9BSKsmpXvYB<*6>Ux;M{Wa(%qhs^R
zIR%~38A*7LY7Tv$j6&_B=V$#Fkia!>Cf*;^C;^0;tdo#9o_wBPPZFWIot2=c2n*5E
zGrlm>3JT2Nm6LjuF%n&$E5|r95b|z;Jwkx)4r49Yi^hnGLL&Hvgjm}SE|dp<<{2Nd
zn<y{V`DLL3&*$GuK`_c0DY!nr+AX)1m0K#1rwli&mF0B9zI#o}mdzD1tQ>M&)^SDl
z;aOS3swJ*yG5hNy)+aE-&!phAx&W%@JtO4vVG8rQXU+oneg8x~cURTvJ&$@Z3pB7N
zDULDp&5(JmpJGUm@bXzQPwggQ-*7}DSz|(DKqql8z1znI-ObMD)zQw5dAmQzA2EM=
zbp-l3mnjF4XFXfv3;5>`s?z$+!(3@tMj)`zQhZRu{&=!KZ_1e^Cnq0~B~)~@9?xtI
zgb*H6UZ`}tcJLE|fbLDtyEA9d6)4xvK4e78B;1jEk&-pLga$kq7Vz|MOW`EcFYKw~
zvcM)8CY~7XaPYuJ65-CRhit_dwBjcK-x40z;OCn!?T2s+W<4Kgy1dgnvfymD-YnKl
zHj{LL!m*$zhe8CZp)6BZn1)RY<|SC!)~`yJ3nXZ0LIK?$>lxO(lg$kkA0<ql&ECt`
z&iWm6q?oClo<HwXH8)kuFX5Pl=|d*`I^XZ#Q(GA+HC);Qy?-`{bH+jl2MaZVsawf9
z#!kz3Jy)@*{8a~!@rbt*T+;XU_6DtK_KyKRC3+oYa{@warGS3cfvkSr1BX%OB3mwH
z%~PFdt0XU6wwp8?gm6)c(AFBCQZixXrSB#KjIW2RBt&JCg0f+<{iEP17)W67GrJFw
zn(Nl}<JGT1NmM?VHZ*f5NdaqIO6pRa^)jA2jh(SKaGg8iuUu3GpR7Htnp~>Z&*cCV
zTOzne`z@)FE;Jwnk$SuzE@o=_ngsA_Y@5((z0~-7xVo}-$U#7V4GvZKifpo;Kldv(
zyn}VK=dOb`nxcuFSbBi<)c#iXa*XKilpeYQ{+S3tX+3$pz%u{Nvh7Q!Dwx)|daGQj
zw`pUXsRrE1bN+KlCyrpyCGPmiJ1BwpZh60Zl-Cl956V+Yr2~Ih*}D%y0zWREN@NQW
zWbuOC-Iue+pGu?mRtp4rG4KLd2}!U>KnJ1J5qP-kO-xU&7hGEnctP0f7lObIfQ5tK
z3)+j0>x+0EgvhRhEC`<p#;?6CCeNj@t!8~=;SSt%z;`Z2+a(#HMN3;Z8$YqDfQ#-x
z^Ng5$YbM)CF5xY2)62=B8Kf2u1)XN=iYH{J5URu3*%C^Pl+uleBuFxBLG5mcTJp9{
z%1aZcx@<9590zEj-WY}iy_YgOns+6TH!?mVejK!$Ta<`}I{(}+2uTJ#+#<En)JqDi
z&1s^eAa+cn<O%n@OF@oTgu4#qjV`!xJ0wn0QN(434aPs1i2u4#{h~o(hSP77Yty%Y
zT>xAeED*ujBAn|yfPq-N2TiXP&(|UVD0i9X%zwnnSv=Q%o4<MLOGD6dP4lVsc+)`x
z4e`S-9iRkRN|>A8%MZvE1dH55_6lklrjUu7RJtsTE9^}BSx7YH#z!UdnRu#TI>|Xy
zw#MvL?Y?NE0mqI>YN5!(9y_@cY!eY6j6WXjq=|i*H*0$7KApI;9G=i1lKF{e&HmT2
zzizp5w@!Xp>7sspgS0mH)iqbth0Yj$ytBNB0xIlVC|Gga%xy{@lY?_~EBHc7c-O+8
zf66C($1(b=gq`PQ)h8U9SJv2Xe{g1`zSn&+;5rUGYXR2@?{2q`kgQ=>FD5}<uHl43
z@t-DD_Nae20^XSaPZ*4>5&ux2FH2N)D(KLznXGPS>WsczJ;#RqLZhmDd*~mYjv4Rl
z4p{sb3`>BjwJV2&SGO=GYdR>^Fu+7-Omuw0?Qg>;61Kxgh#w60KL;sijXweA)c<B+
zQbh<xd5E<_;_od$V#W9YY_-Sa7n$+B5&rbX1sPU8)nRM$h8F_Ii(QqGDb<<6)27(P
z`42<H^R&Sfw&Usz#lmJmH(=|{?(fsDAq$c3A0b$=H(z!TY7OD?sg$xth6$4vp<qA=
z3MWBnQLMEXaroJV?xO&Zma+(w|CuyUl-JwkSCj)6*CL)fa1t*DNJo~YN5zWi5D_PK
z0+}z|r58>W;BTzsyyoXI$5(IDvL2GT0-3jMZ)FjeAmQ7phk&A{4CsN_?GxLpNo&O%
z$OYnj%kg82Q2`So+1#YIH(Egex67&!9)04_SBYZXt&t7(PAOi)eheD8a4R5c02<bd
zkT0}?Jn*d0Nd72N=@$}n4ibtFgC_m<TTVMgKtr)g+`gD9m7@K{!Ddz;a?`i_+q=<C
zKA%P>j91f3(xjBUct>`WU4yh$4`r{fve0D3=k;>b|I!(}2+R^6veF+UQPU_fHd&3;
z#+`7~8g)IY9#{C<FWMkcMwpZ7jXdmd&a^@`wMuN`{Deu>j`nO|(4gqr33O%VVfZ_R
zLs;59IG9k|W{OB9z}2O{55?BNNcV>0z9+R43~iH4VvMTF>vE*n$bI6%w~*vN0^PcM
z!q^bBlr12O*3#`O5S0kAWLz!8TB4mSNBMC$N(rzKcq<7+oexWctqPCT2ns$4cn@uV
zz5(J4v8(uu1{^8j(?V=O8R293K^c)_^+6dCW92~^Rh9~vug)?l=B~#E>E>XN=G$Rn
z#)oV5p()`cD#(^dN<363;Up_ciUhUOji6)YS8qmTr9coKIFPakcV06`@oHh~ZYpFb
z>qQ3XjGi#(F@0=6%D9f`B9%zsiLZBI$^S8+rWKZwE69r%UBvApLyg7zv&j|(?K{Q}
zmpxFZ$IH&OK{#GGg|~>X@vY{{l(@0rlszN7NDZqlXfGaTg)>TptixKYq>~Z_Mls`X
zr~{B1S5%2ri(?R3ZN|=*g0HYpSnQ-DQ%VVE1!tOEzF7J%E<5x0Coft<SeQUoK~lQb
zL?DV3!00AnEt&_Jn+=>71qPVLSVZP8eu^fBtP4g*z;VcX=K_}#?ZIJ({7Ez0nqEe^
z`-sVDNG184jTs{ds+OEkaWHe3{fK35+`(7=bXG8zS;t=jl316>pJjZIL4n|~Jg5=$
z9QI+K%r2OZ$;lsPb`3eC@4i};gOTKwt5kdkJTVaEZN1%1W+G>7BTGj)t%qS+V;+Jo
zAHi_ar|Wp$3(oU+o)b3AyQXdOLzX;n)VAw8w7X^fcUCUHf9dPd+9_t@&hlP!KDXCR
z?AWP$U6LWzu(rsxMwE17#m}KjGF|fBV)4RKz*<$HMR_3YNviQyPWr+%uR_VlQfyHg
zooym_qHP?B9@@pym0XAfwnYb^MA&XYoMgjuYB<h-!PMIrar;tW+3da48mVftanAX^
z*;v4=j`6h>8vSuFW@h%}T7B^-8h{W`b8r!N0D=z<feL^V4SrvZ<uRt*&&vHm7_0HR
zcO!D~+LWd2E!?*HYn#`wUNN_<KRmLxO&#(~7$LCThbEVtI@__&qCJ=4ed+c3a(VEz
zaD8bAXX-Xz+=Vj0hNcd?0B$}*^R+%6Gw)xvV#Rjs^M5#UD+&oGwW0z5ENK7$(Ebma
zne6QTA0*-be<zdcMsxg6#wT)Veuf%@@Lf^J)jMf)mWyZg#v!rHO&3-Ptgr$rR`_Ck
zA_<%HFP3nZ-ycr=+UD72#%5jt)$|_#SU?(quixt~7NeTUnI7hF0Dd<~1b);a_#w0U
zX3^f0v<&qCc3eb;Z>Ji_-Nnkup>g^rrW*%``Z1e$`q?3I_$bw&$)R#A=$ZBI#W`^4
zA@`#{JG57Q<QG0ko09mTnh{(W4(#QllfZWx_1I<?k$rrEF)AO+n{;ZNIyxw^n&<C+
zqc7EI)Ez3o_6$@H^?;?pRui<c*Tx`T+y<?Owj04!`g_WbU3UH+ID5#^;YDktRxg%I
z!!vQmlu2<<<-1F4<v{Kjdk}VEN3T?&;_-tuQZFPsd-6@fxa~e=d*fCxABpMd<t;tF
zF;6|=mnwEWB!0dbogi*^{I#|_)O4*AODKt__91B~%-1LH)&nkDn9CshM)bfj!E6&(
z>9dZt7}RZ#Lx*G#Gw|J96=iaJnn^*U>*jsCYw9%~gag<QxnluDsj~5B#&^xNt-gR?
z|9}-rqfv|{4dVO+K$jP($Inf-l0P(E&+$vyrnx^{&oTx6iZDl@^w>KZLw*M<<_^@n
zT#17I(F9vsmz))Szjv}jJldP_8?kyZjs>!nq4{%lH64+Avx`HI>CP8#EEA6rw)x13
zzi?!QTG*JGPtKc}*@L0wsk1Y;0`k3PsdLxeCW2e_-N6jOI3t|V3?s;3?ajQ(Hnpdl
z_?Pwj-s!S3s_#W6mz>Dk0QT8>;Wc9av;e^nFVc@oDG_*!)7PJ9m^t?C7n7|Ug<_l^
zQ`z@DDiq9u8VSjmd-)BI-u#bVVd<LM!L~1cjA6{CU;STU`CjB@(&3B|y#pA}y}WXJ
zjnC`Li7MLo-64d{v~Jhmx3@M2E1qK~;_hy@0&Lg%O<kAU=c9-eJFK_M<EaZDLn)7s
z<3~{=kKJ*xS0R6LOJ-}$red77v*cjaq+rz^WlfzWO`Wi0;CqBkynOjg-z-BrL<gtn
zQL@>EH#ju3lbM?AAE)PmG1=TIf$4*p0P<7+RM}8**f2oMOHA@lui6scf1Vtzon9-R
zAJAVNJ2=>J)p*4t+7Dt|L|e{>$9?uC9|&eSsL(aCkne=&xp48{k%D4y`|<_8)o{B$
zf7WeS@vJChBp0sv^}G@j$nR?BB_Lz5y5c*#**))$1ui~i+Iv0)nRWk2h?bZL{QJog
zd-9_Z#r6<u-_g_FdO#~7JE@5gEpm72@pS&ZtTvop!{hikF5IPr8yzJ;zv!co?+)E;
zH$Ro>dr)H0lo=b#h(J4`lbL?@2=|`}GXC`IoD%Rtp6u`S5nWD@=bgCet!kB6j4}Er
z+CJ7V`3W#wNmb5H8I}V%m@yIppJFjs(O2}BU12V)Be5JWVcK|_A;n$vhXwMWOLU#+
z>P%VoMr+tivOJu|1lp`BA-xo$b>~80aJF5)bGBU`-f|1BFKhYfz7f2(tz-3~aH}G^
z+4SPQb;Zy)yE=v>nq%I1LkPG26KY~nN|Fg@3LEMl?ZZgB4Q8W?(tZV+?LSW7n0$q{
z;N`6TqrM}ou7eU)(M)|HU|KlZoy)oN=XO;%-i<Er&wATu+;yHRc|qC4mfzMZ@Dy8X
zDqZVRa$8`G|9rZw(!CD<j0kQetIP?fy`!4gRdUgSf5avI&Be0)#F<_m3pIL(|Ltnw
zActaXkNm^c1QI@gK7LI8JH@1Qvd1azF8vp6m@WuOKpdYoQWr`Uf+Vk%{vU-F1#&-n
zIP^hEzkS|3ag2(-BDEtiaXCJ58c05D90(=8b0jhBfD-uBfxlZ3-xU8tE42=V;zX{y
z7IqDCh4CymZLBKPGJ2!AIln;bajvu^G-7|#pY_H@d;+bB|DC2&C!06Hq*EvGEfU1@
zffh!`4eF=XWIvN|Th~v_k#c=m)o)CZ>ULd9y05vVBt*Hsue!BF00#b@@o+NXFClop
zYuVA!?hDY!>DZP=2bUO$y5TI(2EWi!e!3t}6A7nXW>=-3sI97?pH|+A>c3FKD5see
zd^#_WDtF@Dw|Y|)I~^R7OESO3lV4YTOT;qa)X15-c;5AtRX%PYS5^>2S-3_vA-%!K
zpE>b}nHuwqMora6VyZS2k)AA##$aO@;53;ZWOttAM>1TYPo5i8bB<gaOm&W28bo)F
z-0H<%B#>rVX|iHz(o(HoQgYB9QBfRmM$wc;Sz)naVbM~p-BPmC?s19uXBnFx@7-;6
z=%wtply|@A13hhZIXBkoe-Tb@@4Zhl!45YM1pIwTFU8*<s!23wN?77oAQXP6c&u?W
zF&~9!{|xJs7khOrK(NsjB+$$S9c1-_0=0Hc39+_Efn2{OPj1waBR8tTmKR#3BY>cp
z6-e0p4k2vij1azhPJmpu#1CJ$#Y=7w;W_DuT7u%n7{VOA5RpIU*7y2E9#(_md)j(Y
zgx)$GXk2VkNp|a<4|C^^&*y>qjoQfL%G|Z{%uI<VibBVsG?QRt4|;KgA2cG1Yy!po
zXHIm5$k9p;ZR&deleG6)3{_`l3&@0UvYDnJS4|89FS63#V4=J?RD3>Gl{Ot+R%F0`
z8uz$yI*thniqkW2A)RKY`8Tj>cn>iICz1-?w#i?Fy5=1Lw6P|R(C||4aW?z&4!<eR
z0C5fV9XpJ7h*pRY#fvhZI+O!t?H@tKpHb4Ny9yZT*+{dAZ9D3CE7K6EL6MQnxPyX^
zq-4Uuk|-#j90&xek$`C-CjZQpB=7JSY?{k{#)+5uI&E5Xh-cv`RV6k+K98heZ<qU6
zLfJ$dv-dLelBe(k$1_+2J4(uKY@P^D-0ni8wPGb0tKV&|3K>#0%Z);j_glJeIrqtm
z1BNH)>U?)(G*4sb=IbDCV5`F17{Y<amP2>`i)9uzO(g6kk9wA#x6f=fM{f}(ma$&r
z;8Yk<)FOyOrY|mCA6Cik&}BBR6xGBpdRXSCgff-XJiRjeaY|5ys>Sg;OmNydF#4Z)
zAvWhBYOcH`d2X>)8aC(taGty%MQ*ZHHa6$6OMyHVWp1-o0XApetT+J`8J^rdKLHw9
zhSbm_T!H|7Yq0d3$(TMS?Pi@3J*Xru8M>5Dd;%ocg36idCh6&Auy;B)n7cVW+<vE>
z`y<+>%TICpK-4kZcHIh0OjLo*YZZt8%$GO5AWZ|g)~%G-xgZY9j~?wh4BmZ`6vX{4
z3T(%bk~NT1?zCh(IoOQ3AeOD+0LVyv*<+3dH*&J@NvfLy<@TsG<E`@AV{c}^8-cJ+
ztL8Cg-b_jFh>%|9VLd2krI4ZXpvFT2yKg_d`ez4OJ&TM`-TXPd4ijdzu(51Wy}om=
zp1KUB%9bf*5VWbyQyNs`?X^ly86UK(?Qi1L;Ir`*ZS!o~v0XLweYM!pwAPd5(Q^K+
zJ$}B}q5Sfuu&m#uImIp~!DSVx%EKylAAPQ!FaVmsKA~#hAjI@%GOz&~*CI9Fip4-a
z4cR~~$IW=My{;aSN*HIEB-)r%dq~1B^eNP^t%`}hgkv(0s*#{!3CemfvR(j->7rtm
zbaIli5!gf)1rs(}(G~=}udKy?+~s^KcRu*ZMUHDApMbTb_zm~7*WI@lW^HzyJsrD0
z20;eX{F3sxmog(FVy(VlzSf02eE9^&yf+w+ALMl94JM;NY`&JPj}Qix7N243+0Dl%
zt^`Oe)bJNT`vld_tyk93O;N19+Dxgr?-{psAjxDAcWuq5!X}Pf%K<xvRI7kS##OY0
z0vh2gXKoB?t8lP}Sfizoe5}kU%5p4cpdk{)5ufJlKFruaJ1b<c?)-axG||RaRLNFM
z8Lc!crH!Y!7%iJH8rQ&F4q`NBfx%K3^T32GTg8mR%<s>3XU8~|y?J+1@Rh`dFkaY6
z_5w3Nh5IX^$%M&5g}`}=3!PI_>F$(4%dv(0tuWbXez18vOTRH`gF+kFM^a~Hmjr~O
zt-_uVm04b<tX>dRS)Qh>o>5fG8li8CI<QS0+@Su)v;lqEgdsR%2;By?fVp@o17>)A
z&>jCLM&@}j2G9Ne{dd=%+2stn_*0F9biMaq0rY<d(7jp!U;XEChV2zH35PAr;x?!4
zXQ7V|3q5s_OeblA+AZUo&#rXao&I|0)eisxw%z_~k6A?BvpsXx_}3u-Fg5|LMbZ<2
z9wWkCy95#VSqrn8UTGa`A^WiabgXmEnxPMmm*}U>YkN~l?PIWrjhXGWco_xjYtRx%
zBXl-21#n66Myvyn3|t(y4>3Qnuy9UDJK$}oV*-VjP1i~n9vUkl)eQw8<pK}4Ew}LM
z)yL!81=Sy72Y3sj+<guc4lFV4f8)Ku;JFtCqr`bzpYg)Hk{1I*ykZD0qz@~Nq2N2I
zwdHY16albW5#g)G`+)$6v;f?W7V_^qrK{<doNa7>614Gb&bXTDJ)L<XK8Y*CLGcpm
zEv9Lq2f)*pkWOMta*Wl4VUSHULS$+RD6Plpq}^*b-aH&}|D;Amrm$e^`;I3yf399r
zqi+E*!(4T7Y|`=E@|0w(du~+DpEOtjk`TPkB{zJ!RQYmQs6i@CnHsr;pk064g_h}i
zGX}~Nhc<Pfdb-j~Uuy(+SYljN8+Udjk6mlPx-1(=t{)+br@ij>@0lGNy?>fhn6$P~
ze7~i?eEtsIDbM*)1M^l9DurAl!D0Js!$v<b;Aa~O18p(cJ0$M;u^HNd`g_hvJ(l#k
z&f~U}LG^43udy_`1@?e4zEG_2!^~r&+g0X8@u5AW@3_`Jo@{?X)zy8l7anYTU}&U_
zDrJ32ASR?wX<y0v4q-z0T6TsIWQ2iAQ2b+f*XQ1#obRY>^M!=uro{0C2wX3y=>+0t
zH5fX>I(-4MzxlM1m*dXrDqv-%!t?&}(6!Q7!%Ox|In<bJ#-q!_GvQhgG;*u~8-Kl4
z!&UT@HrZ#OCgnzH?8LF@f2)h@`}7V1g%~P~4;1Eyh*Mw?=JTkm!uy%0oP~M<EX-Yi
zKl+t*_z(t>MSFmij@J_>${XS=lTjd1w#jT`u>S1ycrB%OqdkypXTD<3cd4xWIHw&2
zt*yiWj&k^v;g%@KUf2U*{4L}Y?e$Bc$?dZe9>mO_5tWp1LN%1MaMQBfWnZGgu=uJg
z=O!Ps@}{p=zKqD}6{5}&CX2K}(65aHX{}?`^D{zspz^W@`fU-lD!yn?*WWkbFr1Yx
z8BSK*TCP(nM7G2WsQ%ZSn7^SFbcH;hs7o7ZKoZ1HwF@KHQu3GJ#YzOB(^1j?+Z?(Z
z#w+8lqFo<nMum1F$jB)Lx3Nt^fj0qa^n&C0sNcw{ljx|w=Isb5!BWwjD^^CYXsQ?L
zpeKQjti=%?WqFagev{5;dLlJ{5^t*H;a;Wc^Y^`=^OGrHD2p!EmTn)cX6=xrrD%_1
zu$=#}kvkw0lX|tO<cwpuQlHY?GrA7M#1IqDXeWEzlqCy;T4#%`X+|=Q+G>k!X+~0=
zkn-Q%V$Xc2^}RU&NwAy9SAYi?4=SGzmVH1N$H8mf>WtYnv3}$!&X`>TP>nV7-asc*
z3+3(m-$dn*jgg@{V9|mQWV@R}_6&TXV%|W7(=?EvudRZfAp`)dm%w%O*N$*r|CZ)G
z{j#b}#W2$Sn=*ck4oPoDmH908w!0FQ?cxGr>e`1tQgKUuX>EzU#auu?aMKB1JT!#H
zfj^)j!sBZcPX-K-a;zIlVQehsKyvXk(jL`lho;mbw`3;bCVRR3CfT}VIraDhIYA_8
zLkVDMLD8IVk-`+;=+tA>_;)8-;wE*XlPg%JmYFc7mKtbSPDe}i|LoS)1iK}6D}ORd
zoV!QmGiyeyx^WxcJSK}BCQTkF6353f$f^HyeWAkw-)eU>GjaUsb-iDQJ*5ZO+4@+>
zT5fxp%XHY0U0)(UP%<8g&PoIH;BRV0P%2}^yQW;)1D+_Gilc6sT6Mv+e3W9AP&c@U
zgjPk>laoY70yTm#TnAbO)0Ywjkc8NHhF1(@Vn`|#RRcqE^k+K0r-2%*$Me_YXNj`K
zElWgO@MA&+)li;_-B0rw7U*St!s=M0Q)k{F$6R}&vFK(RTH>SY1{`#4djCaS0uSbk
z$p=;h>KH&v-nzM-DWBZI&R1-{Q-V*%T@JpfZiLm%$-E-pM^3e+%HLw_`K*z@8r|ZG
z^qG3S(1(Z1)=!4?M0&Fo-w-3p0?bVLt3)6?_qI#ce5?cO((*ECUi#4$$ZEQE+CEw|
zgz%bg?plU0HM{6N_oe_%;=ZCkr14-G{!RDFpB7Ox%TyMt`LM{e<>YSAV4h|plKK75
z+an3n)sT1bO)&?j(ny>N0^N;D>LhHHhzUK?1k67)Myal^-?eqESQmM3qV=$PmsrRt
zIAz!*Cy4=AGDQlzaDmZGDUF?b-%2@2oaz@ftYD(=JR^~jsIInVZXVBgA;j6DY%9q*
zt!z6%-4b$copw|mr&l%(oW3t=Ex{4I`2`<KPv)1gwWrT76$<k09D9cZI7H+JC+!WS
z);~!&O3b)MNeD&4Mur9&Zwxol|G1~dOdVPx(tz=9*C9$&dZvM7qWPb398G!(H<;vT
z6Mj^Unlq|^{shu&KpMYhaEPoyH{a()hlj*hu^(i1q^|hXDF!)5l*bJN)DO16vf+(N
zMRlP)F`ZmSx$RX)X^yUY3VCVLl@yI^DMpU}TWzvZGiGNHx<r@&xPgS_a9nHbGi@b?
zZ=sw~k`R0(D|5Ozjv2j5pw+IJ5Z8ep(#qI1jU`SzNu}TBAt8?0KG1JauFjMQ{&$(S
zxP5fo7zytj{yQZx?s~5xC~;~9L5#O`FKLkf!E~i{eZxJ_v@SA#A7TdYZ_^UDD1ppA
zn({UGD9RQ0$ghTfHT0{&Uk&`K|5ts#>ity@%2JH2@Y90kKH5tLY_HeX*w;$VW=bgU
ziR^V$(;c{vGhAK$k?M;>CSLjHpOri(73XtdD0En-z50$D2r!UF@RrvYr`xa6$E?%^
zd|l96^5rv2uo@dQn^^5SC}_4JdeCPkhxddRg`FGERo%IUpbJna6*~Z;qIyT;kWPAn
zz@u#Xx1j{-)aCs(5-FoQCqzl@I@GCr2agLeUh3GF!Y~0{A@wZ-UdlloEI$S&?tzg!
z`=~Mo2H4w+QFN?mzj^dzeXL-831Kf4h&1p@_<uO{0<TL(L97spJGZ?1SRc@-?03Lq
z!it@D>0<G@T3%%kww<K$#N=o_1X~DdO2<Jx2=i;t8p_iD(k>sPdj_8C?-4hm>185F
zp#FL*ED^?J(B#wa45Uz7G``_VpPB?rym;FBw0Zqp+uz)O0W4G(TEbQXPXZo%GEOWM
zh15Ju*~KwKuawee25@`ahssdi88_Q(&Y=3CO$)@VJ7V`TgQ<c-qI2>hfgNeh01JoQ
zIXjhHw3jRCsJu^^_Ui(NQ>2)?ZJDwxpmE1p(ZkT@`~eG(FZ4$wIO0d<Mi(2D^zg9o
zHBG`iG~;texyRLZ(=qvIv5orf>+rr}^xWLoa9_Z3nyTJvYM=H^T>3g;#;>@tPb-Ez
z%u5fpNcGQ4qn+iOWoCO6QXYLJuU*Pc2uH={K<@*D#Xll`+?@@TS*-G3&4bhSmXk|N
zQ_asstO4eAVB#RdGs8LDRj~X&iIpkK8*XX8aLq-t|5@e9e^@N+|Ch>>D;`VL4YB&1
zBi%Vm?l2gEW}Rj~eKs(Mmq}^Tu{8RZYg|3<dg5Bv`Xe#MRN_h7o+a5PTvYh@EhE~r
zxVnmp_VS8~j*GeAsGi(w#;}eAz3r!y6tle%eM4Xzk%$ZS*3{zB(=%@;?x(qnAYPx3
zXA%!2(VzP*<f!B`=5QpKsDAh_e|x0Ih@98Eq8sxlnA1b!-S>yVmsyAFHwK9!8G-fR
z?Qzv8bSgS{mbZW;onyrex5zB*byk`a2GI#O@bA59b&r@ly{HYdW}qLFtG5$Mq2fH-
zMbOh8rz5ho0(dMApRSgm>@6-)e7DZG)9dHb#tC+^&;&Z?gFkUpz!)P8A%09;0?-<>
zG}@R=i>I@5kube4F=P{Y_o+fUEmj1pw5fi;AFm(i&j6cmHrV;aoPseH%&9KRM^dPo
zEY~@b_c?Xy{nIq!3EesO#0C0Tx>F%@qi2)2mOy#%u<+u!B%iYp%KK!QQB!|e#2kFn
zYkj8Iqa534-5>AA2hHdd{26d$x>Q|!xw)mq7;h(-cawHl-yI)6@{<Yl!mvEJnUG+5
z{;(S)X%+H&IL7R1EM2<!)BZFP?W^A_a?bagqs<W)s{v2$(lX#5ES~)OUr!oc*s`|n
zJ44^eP<ef%4i`amT55<?-$l_mM&UUQsI1q1(S)P7HasLwVflZUU7t;!d+i&^%>lbP
zZ5~gbPZc!YL0E}@zl>sK0~gHdeB01rkcXBpbzCRb-vH-)icQkR-b*Y4aMh#j&uf}R
zo6E=rr-0)1V-nQXd*zTn*S9Z6TY)1tE(Bjpf;$!xI$D?~tZWhMiPXOSMRN5c!obKF
zn0f0#)c~)5@izZl&v*;3<;A~nY|CL`rtaB=?0;cT(dCohg~6jQyz?_Obr<zk=p(TJ
z<Rcc!BB`xF(<{~XIh_}dMkFV|Z>ZAC>a*QvNvhRHXY^aS$K_1s6q}ugK+kppbHSlU
zUywmw3Q?jPxxsh?sJ2r{>8tvm4V;I#2NWIZC=RHoNz#WLbvun&z{MM#6`;>Phg#uh
z#!{sMW=Q%R&nP+_5knOEH33hW@p?vyTyQ(l>hrG37WcWgubBC@Q72RUteQQ|e&d-f
zTU%z3m2536G)#}#9-gRFbcAT=z~8hyc8Op$si@6=nOqR{+GM&lO9QMES{ba(J#z^1
z<E-XNfTS-6{oK)B6F2-X%Dw?cl&D#AY}>YN+qUP9ZQI5j+qz@hwr$(??EHBzo9rf=
zmrYJps?w)VcRJna?!x!k!gA(61FiZPmVzXQ{*B_EQuN<+PcK;M!K;{(KW$ulzrrt-
zoz8{Ftg8chKi)VX7TDeiMkkO<L1uY>dVQK$DJ*mqSG?8h&gu~+m-KJBdFXwap0!-v
zk(;;DK#(~f7H8=Ql|#2Zd^5*ya!2>VyoCqx8a$@EBn91V^(uFH!3uW<ltw*8p92C$
z_}Sd-wacL35V!fXRTlsDnqM_^FXDz}kXK%QvshpJMg@I%R(|^TZe59FUFE?QCb+|b
z)ms_Ul-C^iCS()xtz*;mP_vYhIgD$->4bK5T+V7+ew9<AiE9vSkyG_tjHbQt7*Kv=
zo{?_^6TLeI5eg_PymX1^S-GjN_w#-Z;ZyXPowJ_Nd(eOI#Pu;V>{Tfk2Ij8g&eJ8_
zZrw60|INUy{W_Jh?eWKTQ3)Pb&JF+r4;^o&tZ;@I>5<HT&tdOwlIxv^m`92S|0;Ce
zd*6L~l_lx9VF_~7qhy?)ysJS@+2*&ct%RB7*{OiJktnC{c6BDA?=CW&OxT#8oJ`c3
z@2*h8z(a<LJ~2T$RoF<$BRxr|9S1LQe4=QwXo8UGU#E-|nQo^TSJw<^)C$BfV<bg_
z3{Y`6afGl#<iaVF;-*YdxrK8&k1d({5lg!a1v_%JCzdW*dZwfXV@%>?Yip9~0>@Z%
zl(Z)2f4NKl?J~yHJB!s=Vwv=Dh#`t5Namq9kT_6GA6R~JRm|1eYRBLdnzBMAWh_ZJ
z;He*|YsEZQRm^q!u&%pl#P|zOkHFmthOZP{{k$Hy!+`&YF}Mwowld1zo({`h$~9Ru
z%*_(8NbG@kzTfG1e1ZMhZK2QiIp&JG!!~#5-~Cg)3VUUOq%)bd75eOZ<}PJtk|9=O
z_w?1xcM2QoqkUENjtsB{Y*o9!4g+tj(ykjEBy85r`;uyL89Xb`@{*s5un#Dz?)AzK
zfW~<fICzrdR~<dV-{ozDb-+kWNn|TLdlVKib69Q-203j=5`pclka1)$pM0PNQEkET
z3rtm7S54P%jzpE^3)7ut;SW}W?h9D<ZQq@hNI|rqk7v}9-<k*ybqCXwIt}utF?8R(
z4k!_lO?er7cLoi`Pk4tBYaC=Tzqd$+(Lz#P>U3xf^&0l_BG}n;_%S$B3RXn8=m^St
z8hL$EE15+S(jB<*i9d)DE|=k_jpecp-pGc*!N6X!T|sR)ww=lAT(Vw)z1i*E%&$-Q
z5dtU3Gv+fs!iP}_R{~b7{AI>Hj7#7bqZAg970^<#j1@%zJI@E|N*jm^;51$+j2A{%
z4&_y#4od?R`Y1gNG;l>mbTDCH^bR30VGk1o9&HEm`G%C`l_Z`f(3qKojbM41+y;0P
zER@h?S4<k`+Ef{O+|Sp)6m8jW7)wtO70BGt!<gX6?kIo_T?$Oe;@xA{KPo(6QstH@
z7R?C4;S;083r*LucJoXI>50;qWa6#gVaL!U4-zEl#$Xkaov+-apMsb@Z5y;;jJ&|#
zylxI!gu65rrf!CX2mzcE)g)ZFgfyTvQCT~*>?Q5Ie(sdhM5+u-**w(pScN8EOJ?df
zc|x7DOSLM|>+d;ekKB$wD+^eeIypwyWDz)8n>>uM0ek7zeITd!0SSq`!HcR%g;mZa
zqIODrPoHfMzooLjR=%z5!X1{%uW!Je>6fPyfnjXpm7q9U0+_PbdhOUu;sHFyb^A>4
zjAuxk2VYQGDeTE)I^2JHYDghdB4dUaJn4#&E!*24IPUBd7@v+*h>cLoP{y<sPhgxf
zbm|JBv8tXfSBjNL6Jr(nPYgo`lvXv?*fT4ooV=kIN~@e;42_dkRnasdS}jYMqjUq|
zbS=2%R3z9xx)j$A9Edt|2vt>IVvvxVm>sCTX`f_VOnw~)uvSKtf332*OiGBa@^iDQ
zY?qUcEsUA2y{OjudDIy7J^3VjS|a}fcdqxHjWjXQEMi)+&dY+TY(MIqQ55<j7sod(
z%QPDTra2@Md9WwROcLNV7y@9W62RUB3Si|gfU)J6z@JJ?iD)?vd|#AQS#ke|W}@D=
zf9SiPS<v>rLZGcIiJH<5DfKD)k1S<jgvRW*jk_oW?3*MZKB#kx6z=!N8Ar(KrQ&3-
zXN<BmPVoLOR(FDRz9IS~!@=UcSRq~{5q1&FlS&c^3BBPT%yT6HMA=u9#7N&5&s+7Z
z37m2$Q6FX?Q4#`ulY+zs{TYGjVPd_5qJ;*>1&9oHa}*jJiFp;-zCj*S9jir3h^4#2
z2zH_!*6tw>bMgreTrS54-9s~DGJu{AcLx0h86+5d7f7+JFZ4{d`sT#mqtDO1w3mGy
zi*EI2NhvgtGSgJcI&?^5HLW@vN*Z=N6ozoj4YCl8WC%)6tJ5(y$1(ygSkU(7eX%a>
zpoV|mPt$5nV>eDQUq;P?$2=NzEuRS0?h>(W;nF~LnOLCPjVUm9TH58~uLPw7;fo1$
zH|T=zSEX&eKS#&O3v<@F{7(>ah~34wyhH!X0Q+wv7VrdPcjUEeP4I&RU3i=|wW`jP
zv~iVL;i<a>ldL9`$4d~J05ieRB4ezAwrZs&=Z2kL7PqC23LdVvSW2Gyo=0!F;0d*f
z6>vx2#>0}j*d;f#KZ-1J-gn(Gr~K07p5>QChzwqscYT^!`@7g8`l)*nhPKt)4O5(w
z;n7~GhmhHxF@xIP1dP%|dR=pYDSe&|2n-~}`xjZHpI`-`PAa9m(}u#rgCa0-gi{k#
zuG3J%_;HqS%_@{-H~Ldm%ixfSv1r)Za~E{xbEi_b90k&X=rEmuWNS4ffGw$f(SR`|
z#EG*BlP3C>_sG3|GQBEsa*YKLAACEm(47akCc3x=FCJz-Ic`QzU;}ofPxzfklW3h8
zE>ur|pS?1w<0MW5os4i;0w%O2C6fkR!^Pl*HUvhRv}Q-_Jfa<s9)kZqazt>rt0~TT
z&U$PL$P&41D1VGa<(B(iaf_i0y1MYHhlo1$V4v-$R|K7i6Nf`HjqfJw^-r*8`fZ8`
z1~JQcuqIp3J`Tb^63F`qrqCj%qVhq^0Y)g?BV-Gdvoi5gGub~eglEpp%cScVXnSV4
zRg#^GMFV)c0vAXQFw!R)$q}5P#wZ=_>IKuaACvX3d|DDKbJn=sSAXS<cJ4es<Od`4
zU8Q@kPW!6q_AWd=12=%^qyTqD574);3d8NLqXzSe6CMel=|z^~rMCcYL=+{O74rEv
z4)2l03GftDfx9Uj@x2S-@a4FVsy!DO`*f2jh<C~bF*TL&<tuy_-YaGv?h7B76S_!1
zg^md~5H65=qlMIqv+aG9(hRZ78^4ywBPoXno1mJ9SIFZq*;u1sI>_=TDave;-s#EG
zDW4IW<eN2pZTHikM5j`({^jOIn|3LFn0nm^BP}-e0JjsZt=+{Jv0lW{tqb{CA+2SF
zR_jV7O4~|@ey8pEPTKp))kAjL+CcceIM{W#SZ~h?X3uqw`VoA@Fl62I5UA+#W$o9a
zLXGI_hW;A5C~`d+S)2pB`)0L}@mRFHEJL<FYLU20pg7C4l<soYs6cV+lRV@FbCI+o
z3`4;_2}(9G0@~tT*y~f6Gfk))B(n2krQ-k6yt~aJF^@+w)5Ls3<J*uXT@3P0(wx8^
zA3+g0fRAx-?E$!9`_z6-Hryu?FfaxND4575sBU4uiHOlq=d>g%6b_d7dQ=S=S0Krd
zs1fGVI~dQ(`fsl|e|jyG5Z0@nFxD$krxcGON`IZI`xF}i_RyFO+{pPoJ+40K5$9`~
zYHpqGK?2ukZrJ?_TqQRwks(SDZLV3M{KTUD^Fki>4%BvP<RjHOZ9+@b!phmH0R5Jv
zY*cv8h98Y5rNgrxIY?!u;4Qn27>Y$^$ssW+GbGkM8X{_wW9h_Ojoa1iFEjdQzKUhZ
z9#r<g9JpQ1;1h@(#79qn8A2ZM+i2@onEx2fuj`pQFvTXbLXrOzV*6b(w564B&bX<h
zS;tAswsat&p8r;jFfG1lg%arjqHCeEOGAh``*u&E$~WXwxs#;I;c)E!rOD!`I>Y-R
z0?{BuT;o7x!cEZJE`1-$`|?iG)JG;hxDPFF8Bl}3pu}F9d{JiMdW9VN{xA{Pst88x
zy}sTn3`h(QIXVMtOw)|g(8;kCjLL4BwIT}v#!87#P?xT@CclCnTGy^CQmag=n=##M
zP<^#N;WvYv>_~-*DsIY{H&oNEpu%OsX_!@1rM&B<aw92jri|4+Eh}%-P#vXCL6dgr
zET8|Qidmzf#X}^VSiPX0jMlK}BWuAZy;eg>JCD*LIwM^FJi6Yztcpq5Eju%T<7?A5
zR~Fx-V$Wg)9g8!uuMvL5OQwJQ>8;iA7GGr+*yAYwjJKRm>w?knMa<n@#8j$V?YN(b
z=1fS39#!f4jl0Zc@)<Y++^qt*Gk$>1Lv-5#_3Dbpf5K>pUlqQCf7ueXq~4?=Z_Gl=
zQ99jsW!b`(=GyW&ZHjM040j5@8#G-DEO6zcMp@6_YDVkG+n4d@&=csP8)VrB@=`0%
zuD(~tu7T;k3XGa~$Fhp)K3n!_Zui>4zD4D*0ruriT0^zzmVYm`77rRI4m9AW1r+eH
zsoU*ob|S|GHKb$bv$BeJ^9%13mufnMX(;!Ddyx%VzW?;R`Swt+ZmbI^(My!{1xoT7
zHExp{!^8Oo?;v8teSgN-zGV=34el-d#XI6eMJ{B=b0c*QlP5KM!m*~~aUz^1XK}im
z!L98>yFKQYvAV?>xs5DV(+Run`I=tON)xD^Z`%+hg{rvBt^+<=T_>ftIxgz`My#fT
zSjU6g)8<pfkKc2vYfrcx8`ZrsssRIbD`}i(d6Sf{=tC(${7ZMAxcTfTq0cR9vB>%t
zDWNZep!$6Jbqly7LwnyUuqz{T*9u5LOi&&^XR-zo%Bg*FCr}@m;y5W4f9QR;?i|X~
zMnKbT#M>rb(_!rMxi=AU&WW9VJ;NYLadtrcPa?bmCl;^kTJp;ciKS1clx}p;&y@N<
z@SR@X_Kb^P>Y&`7?=7=F9Tv27>6e0)5AkB`1y;H_V0vZf2vH-&Kj%@s@vS;E2pkCK
ze-!%&!E0slSO^%|^ZlG~o#r%*<+iZmW0}nYh5*59e?v<%=?x1nqw#6lvpuQ?a@X9^
zo|o;w6JVOJ?E~>nrM5`nBW(>5NB+QRUH}6pn`?7EB-)X%n^!<D^Q>`-@_Q{3p&=JI
z%b2Wb^DV$61YMJJr2==lFZUr3<LxT-s-riwql<<T=d)|7MP6Iq1R%*R{N~b2SMcjf
zJ|DuH<%IWRsg~7&A-Sk6xZ(EYa}8Z3v;INBpUDc6n!oJL5y+y+3(d0hKeNZ5jf@5!
z>-8UcsK~>wi9Wgdz56vlGB3d2RJ}qx$Lx%?2vMBkFf<@WzBs_pQGce_Nq#=^p~~AA
zh9q4Zt~OeED6i3_&?$xn4?cHf4~~yZ<`5)9j1j>suz#xkl0~L*6LcloOM6=6eYwBB
ztQ(x(z0kup%8K3SKf^ztQO$E2<+HBf&9t+XA=u=|b<Iir0s+_6t`fJO;aFU17+}Ap
znLSGjMeMVh&C-yL_Y-@h_@@dc;Nl(Im8bgYJ^hpjh%VRtHekEtCD-Qyju>VfXh{vl
z$K>{h(g!aSpe4<BQbC4z#(ueRw}5ax^o=>Ppr|TSVPzh3+&bsr3gs8_7G%*J802RZ
z7e4x|%7;y*cPv|AKFu&Q7V_5iv`96|Sk>O}_3VW|Tlh}#vsabbW<4N2G!K6MuM%Oe
zVE#T3EC7J-p#Q%T;a|Rk{~-W+spI9g!B+pH{r+1b{3_K%b4NN>eb8tze|4P0GB)gU
zWznG(S!7d!@-HEYrj-3-?PgaHhyXy!qQ2DaMiOb5$&>*D1}q5hw(!~~kSvoZm*&73
zsaU%)_P)pqo_BiL&BNPAnP{Zm>~td&qDw>k?C6O3k!eOxTrdL9W;~OIe)v=|Ax}N6
zMWCjDXuL&{<9ZvIaAu!CDvClRlO@_w1xg4>N(fkI)hN1a4<o<F47>6EMj<2FTv>#m
zq%#8A8I>F{(p9jLPBE*1K)Wh&RXzw}YxoHE?^F>3W<YL%wdQ;8CGf{P97&(qq=YfA
z*ZXV5Nvgi8iD>hfpaurI2_8MWNtWOf&Ks#p2jzsz-I}qZmlyYR9<b=&=!Q>Ep$i!e
z{bBYas<VVxeQ$q$g5$8?u1yNj3GPP<*qhl2nzjeOspivw9=($_^gufJIaM-EjPjZ@
zftaz=s(O3iuGlEV_A%Q+o1{2}*1JSYl5)Xvuu*y8OR$>n@B0mOeg603`h98z3_xj&
z(iI39XD{R<#CBjWX6=#LZGC~{3R$@ILjvMx|9F(LaH2nwF@!&&@63?*9WLp*9~FO?
zz75ns1b?ndvH5!js(DC3<Lta&Pc#P2I~FiqR#Fw=dTPRz4beNGkxuDkATa!ygw{$#
z)=;HBKe>b^rj}Hb5<RnHyS&~{*W3~>2u|HQCMG6obckqa52nhEW=0mq?*6&pr}Fx|
zqpWt-F>~h3A;J6d<IeaGbjTm;;&EnAuenD?O<%ip-chDJ3#%kiGq9Fu{5E`e_8k1a
zLt)z=>#V%fNA_G6>u5LA*hf@GfX?;5_SvKorq5Qv`WM@G9LjnpH~{fAOe`W;AIV0p
zFZt{d|LU7bN>I|3xTC2JWbbK7f=q3`QqO|2gMFnTb@gnLNTzl56&Fn>Epy^}bCEQM
z<Ys4pzX?KCr*8HI#|Fwmsy(~%ce_I_utd+UlRvD{_c<kCB+<lk=g7@;Y;}jweTS$e
z_Ps9T`sRFoKF|;3ehd2Iy^x=j;Saxw?(p4Ivky(}MwQOs$9aD3<loxVyffg*@8ZKb
z_|~1n&UAP@Zjgb2Uk4xy%(-Vj+H*53UdVdXO)sD5UY4HTZ;;b>f4DAsjY_0lKv2=_
zv(SNmiPv<0f0JLND$=*!?d?FiQX;Sx1b_2>9-yOqg?e6}!L)2#-KbSWedB(bWxLg(
z!*%z{2tRTYkzfz0n=^2F-0zc${F^X~Dvi@I1FSxh2|YQbg=np4vj=r{Uc7StUi&$J
zd+Fi#{Y1<D+>MiKJ|z(#$IJ+xb4>_*nj3?A6Gf~_fs6*Ccg4e7`w4!>Ww<%KIN5=e
zS^effgY$KioA!P4_)G-lj}1d!-_7&8Lhl7~#pmm^AAVlD?R0_%verv-S^CqUXXX(>
zJY0C=xA-rXug~OF*hK12<pzgKcH_u<N?;e_V+2LiFOJFQ+!4DM%H@Uz?ZnrvrK(mH
zl3@Ogm2Mdle;g>Q^~G0G{D^wvz%IVveh>)RqhAVN><PiwTEk5bW*}SjG}H6|w3~Ol
z+_xzGz1!|X(6{5FK3yn!kY3|vUt?s7)#Y@MFT*)_BM-rmsLaHGB7e~lAtk(|N6RYB
z+)lUG<M~F7UYF<H)&u$J%k?>2`{f7$ehxqmLXNxp-Ozs4oKjvNaxZepKvZ%M9?W}G
zp<mm8(dXVO9$wpkqVj0`BSVZUDRKiC6%QcKo))UpJeg^>_y)%Y$`;+H(9i2F%^u_~
zWPX}5jXRIK9AZ80BS2q4W&ux-OUlFQt;`;0P#hh->u$OrVt6gD-eo^?7*QE0b^79L
zl7oDHJ`Ie^)ue{3xUJc=it~{xPf0Sk59u|AzK#Y$Zo9-QFxpj5_w95C?&k*J@Kp~V
z=f6wphd^!T?E(tQ@?jkxBQ!hfT;WH3e0=qou}&$Y?T_cnS6ojvznz@y%QH;Z8Df4I
zLcR|H(3Pv+)qN0{#&C)0<tv<DFl%AcvN-DeLe=IgnAn`pTgP3WNS9xLwuVfZOE?!m
zeqZyy_NOE8Iyz?*Ge|@OITpq=ZP6yQ#NQyB5bDM6g1ZnQ<+H10YJ?_BQ&S6c0t!$f
zn1rc_Y$n08e9g$}zMS>Ab<YVadTdrB@W)(g8=N*w`-;Pe#AEfWhpd^6!N#q`u#rq4
z^-l!fD$5U~+PRK;@hS}~?d8MCpkX@pWz5nxB0|-t=&W59&fBG;Q}QsNTj*a^Ozdoi
zEdwh^)?$|M-LVGzdG~Kv{VH5HfqwX?#rng2M0cr*OsA;vHLX!V&xNFiiS7{=443sT
z*y+pgU-K&nE4L2WLzMqkdE3{E0JrhzQs!K;;5?U1{~#uD9)fO)7|-GS{gE`R)lv@;
zZ?WQkQ3nR6r(TsVKq<I5>3!r14EO_Eim41)u8s)^hf4reZ#GR%A<-BoRdt?SXo6Hq
zXxs!`jbdL}081B8?7dhqKeg(X-K$TpR}UBcXyXz~;6a~mrAdR2u?COFfp>*LR@n3D
z{su*RfaG=qtL_!%v{!;4kKjl)O0ZF`Mp#ql5eEY|S340~vS&waM-C~?OGSsBtY64I
zjQ|CMXJqhzWtXCu(btXmiN!5{dl6_Yq?6j}NgBBNS57GENWwT_cLB1kj`XC_N=^=r
zV{I;8Sk4udiEy&h=tj8)3V0J63rBgnZqaFyL;OGgs<8@(@soQNo`kCg>$X9f9k9o=
zY#duwK@DAOwN+hWwO7KG26Z6m+#%-%Way9^x<!(<trD`KgPls_%dUfKRty_kc8qpC
zLnY-yMVNTSCcfg0DW+_fGlkv(>RWiyQfbC)E?0!o;RN{iEw6dt%@49<QPpj%$Xk!>
zZCQkx1(tLW`w3Js!VY!KuFPJxQ}SlYCYsf}gX?Y8MpK=dMYkMTX1;7rS+g!Ec&QJQ
zDFkL*FTn&LQFKZtEhr(g<KW1{zWo=qEaDk=LOno=ro7l9V2T2~=!3?>3A>gUB#=4%
z1Yl4Z_Ee3SrL-y+D^6*qxJ+}$BC<>C`x(YjUR=|LG6xJhD|=^riJVkHESBX%hl<==
z%;si9*<{{?u?X3*t#Gzq#>lKR40f1Ed}IGywEAJ2ZCK|Hk3kX>h*M%ST%-en2Ej;e
zB@l%t&Ho87#vO6pck07Y#T-*VQH>zW^AT7HZ9`<o8tC&0rAW1in{x@73ApVko+(&?
z;eum@JE(9iX2kUdA!1;+tv{DG^3C$vd@yU_Yh_q&<SKvV7pFJ-#GS+Qk6xcqL<3pF
zV=XMOx99JPDJvaK!b_H+4okvRq>aD_PFW@j;8=mNXbteNmir`HSTeL5TB=C$mGKsq
zcy}Fk4XhB9Y_I*f8O;cmNTIdH(kA0EVi+3roH=Gj<X8guSRe}!xtT35j=#D=<KZOk
zjA@$yE~#}J`k3>CMfDUxSIC!cjLBO*X|xSeJYSx{N~)~}W;2gJmul8CgQwP>I`=wd
zi<35SsCl|;vg*SmHeUt|OK6M&C?2Km6_UDp>PxSA%NU(R_nK-asJ<RApVt_^&?G#@
z3zH#HX!sksh%6$--^j<ab<m#>DO=i@2}g`Ec_>vqms}zypJ9PJb{tz&WDYjs5EIMH
z`ZiU$Wy7Kg+#;lnwVV^wL~bx;EP||X;ssP*nL$=CzJ6Aa+d=;>yWwqS`-r>2#1*&o
z$T6ljEHKDR9pR02k12Yi>9o`UGPNX#iemSQ>n!awSya+I?0$@Ou%==^d0b9VF5ht(
zrTZM>LuRf)oA?Kfz<O`>ob<@fFh$JrTMS)2v8Qvw(xaD&JVz_d6@`a+k(S8j1CsKD
z*PZ{)fz=~yNu=X$In3#SqTQyD!v=G3ZJY5EV;vsmDm2@a*%Pb5nl;*TSUbEZqf#xV
z47R0AJ;9BiH;pQ%pi9#r<TBDn{D$Fhb#$N73K0MPP14T!k(95Qyggt_#8N{!0!+k>
zutYt`(g{cvNO~waq}x9Uc~V?MJgv|NouX_b`kv)E5i~fb-ptB#l#Xd>h3ur?L^dh3
zy#nh@FJu?kwf1V~%^-dYiT_pDAODkZa3*kj<T+2tZw?!_^3FXLm9(jkRLtkLQW1Yy
zE7B_*6R&{pLS+^n+OzEr5%|A{AR~g6hQKY95Lpu-IG_%TP~zFuMfzxr-)km6$2)ec
zCo@buNB)T4Yitlmcs^utEuAf!y7W5GKfAhB*_8wy>Z|nX2$RAHlO>Uu{IZWQVU!U?
z14<HO2ODL<BuzzA2%NXT(8gi{n}2_Y^AIb6>fVGH-kByIF45jVsS204CcZvnHOM4|
z)`>t31tjI9^O^^^#***RVXM3asrBcjnBcK}|5;L~z_Q{Z5hB9E|9*dK#~t<EKMC8-
zWElCC<BB&0)XoW%%_U;<>nNbX`U*3TZz@0^o6&N>83yl|_@Bhw;c_Z3yPIr+;_fv!
zi|S)2VL)ovG71Ej%hT|eE!!z|>!`pnl%+T+$*H-3G5=F{v*m?iWd!1b7|lz!{-=O4
zpWXr0E?5hPRU2djZ4M3-YN`P~8V%AI1Y(r`KF3la>;%s!e}s}1AI`~8Dv&~yjkJj3
zDrzkvvZy{ACO~u!b%7^s9)e=4yy*<qEM3EvhqX6Ic>>9elh+i{SF-=bJd{(Pq|z?M
zKi}&)+?BYEVU#uYUJ%f*_)zb72a5)!nX_@A=%qQMBP)I<5H_cpC1wa3jh6r*&5!KQ
zqW3Zyf+QC_o@wpm6J%@nPm=LDyG+~^IR?8{R1Q+X7lbFv9oU8paeV#|?r1j=lvBB;
zY>jI?Am5*h{Z$nG^BtxXZSILmYOI14R7<o1Mt(tT=?()%)RrkNY_e1S;sWM6`dO}X
zYM0oVX7f663L?eZMYLJw5-d-F8d4$}iq#)Jf&|t)FM@D*HnGxjw@x2XaN60G#{X_K
z#_$tNrit!A^>cV+p>+dir;VZ8khgnrX^bN{dJgEO_}k!$CTip*(iZyhOr@9`XzN9_
zoqD#WdT>;yMZXG+PG6M4+e^L8XfEkYG2JO~S~-BP3Wy0qZ=r;I8bNYY2BF|$RVQyD
zRy7Jjf5*C1Ydah{z63VQHgSQ?!BbXlWRTOwF`-xQ2pXFcDPEMPa#9~$RI_Nl+00zq
z!qd_qixtxhY}g~wfzEX}bqntmcP=yX)$_>c*wa<j@F_n1iCjMI<(HNCW~DT&{b{XF
z&j$B$sd>9XRZg^MOcOPN%uKbUVN5f5jVCq5C8Ja2I?T@qP|KyK9cnE2oa$CvI(fx7
zoq3D5QF!875?Kl&xqx${S9KA|n(9=BCNp{pGCM+5OkIN(E4qF=2Vq~ERF3nYG1*}l
z)2u352qpvDMJ2j@qeXxPQ<izmf+>S6VZ*rSL1Jmnis>5my+b(Y`+7F7Co!;lPF!9)
zTj+MALHKK~8O}wbV`~I7u5lw<$6m7I>_{xPabruzUP}AUi4p(7x$Q4hm~z*l%FP(n
z!CHQfHFcuVPe$!V1KH~MBLf}O_$Px$LzN6dBKO8PO#01|vQFoEZ(t)IAE&^3IBi1+
zanVJWGnuI?rT4DCOrqQ$?X(gdBX!$A&Js+$@r;R-VC%}wU#K69-58f240#vxMII8=
ziht->A9*p+R`9)l9j*d6nW}jW#H-b@5C2{)fq5T#Hud4R>2V>DV9y%5fSQU3VY#9`
z)!BO;kHM9_6lFg#J_GjUIY?M!>>TpIzV}YQ)U9Z)`dEMF2K_kg^&q7tw^k0C6kD|#
zAOn;9Es};A9gLg!p}I{qWck9xT0Vl9ihw9TV*&}8Qbne5B?;vAPCj}q8Q{7Zf&WFC
z^u^Ji<ne@{kP%*n%{#vrV>T8-FpMHfN>(*+77;TsM8(kkJGTT{I1XVv>K%2w(#60<
zc)}flFTxuPzg@d2+YaX|+rPuL37FALqq~o!0w0mv9wE@053*icMcCRI%JZzExZQ78
zAO&|3X!n$4I9z2xrFK0|#l>4KMY^6MvVjGsp0M{^o2mX4sz!fa%@ugXzGyz_W{T&O
zW$9K#gmX^isyl>MF{+bX2#{)YOtqCUVPhYm&3-Ncf608}<n@es9Et&`$BOcLu@o{0
z#3r?mA<-Zb&G>YMJZcwS-;_f(lX7NQfODOl!67I*1&3^MD`zo0wIQ-ZJd5GgIYl~`
zbj)XxGO=pfmO!gs|5SjRK9T27?bKEP9be@h1wA{(37KZ+BHnFm0;A=6ib7Jfh={Hn
zi($Q~%QBM_adaQPF2_-Bn<G-@R4_f2By2x~p#yNi&HS%6*Rx>j<5a)VqNCLOQa!jT
z!yeiL9#`KaGwZg*P<*Xos@O<>f4F}Qd)u_E2B7Oo%^(HQL(w}}f1hp-e^SzMOV*bo
z$D()y0yBZL&JMf}_Rs+n+*havpMoylD1ZBC!7hh@;=AeeFTLfTaQN<|CA)QX<XYdA
zoUO@uq5@>x$ac%Gdv8@2O8@@VPFkzGL#;#x)t2SM<HTDP^^K;q`nknDEw1gbdB^od
z$7;p<s?OwEw<+5A8gAj^u+e_UI%~apiA4cUjhcoo*t5=Kuxa`GQTUrtE%cBCt;G>6
zjVQ9P14{M#C*$gpyjMCam#s3qoMj4LecNI=HcqBFdxYYCIBakQtfahF+)FliCI|mY
zy3-_K887l~oCz8wU=#?~WOz~#`GI(Lhq7oxPRr+xK7{CuuapP*>WDx!n@5kDY&d2p
z>Kf~Q;u(K=p=TegzELf$W|OsMn=z43Uwks81d|DoPh2#CL6Av-aQ6<rJh~@6S}CDS
zTBviJ#<RoJb|L3^ICok0=oW;6?_PU1Z1h<b-Mja;J1$&klH$BdIxE@`+B`DAC&|r)
zZnRRXfw}PB`~|j_bIWoNmUXGS+%W|@!COt@nTI{#ZB;2Y1Q-Ejrrg?cyN<C-*P-sD
zWb}8bvw)mywMT`_dxfDj-RPp$qz8-5dMHin$|K6I8=H83ehoKD7Ol8-+x}(`%AxUE
zQ8WAu?La5x$7t_i2@Q^t%-6);d;m)8zvC*FLLFnq#=EvWlS_b=5Vs`<<(Mj%hhNM7
z_tiqab;s$fafoEjZZQ+*cyE&4*{)!NH7ZGJu*f6$Xs_CQ;LFo}H&wgPM()<1V&gD=
zTR=Q`-K4{yuOUVdogK>V)AoYFH-38o3bJs+Bpy0wDKR3N8f-`=hHDb>pz<mc9aH!A
zz4|U_dNqjM@It=IVwD{A;?twa&|Qdc)aZc)uXc&b%H}Z!mt*`obnEZ5-=32Mz6*N;
zN<M4n62I7&N4OtM8@a`H4M($|9sHOXaev+M1K$37prrLA=dD$pepWd@Ek@4mu-(Y-
zfEM?JP^g3o2`{-}l`FjfKeT)@@M1{berm1b1D-l*3xEv9_`v1zRs6}H7vSd7J7tI{
zeR?5)LV^?hvO9_r1+=4w@IoK#a$Stz!K|1DybzmgWvYFIMp-gk5`L8x{)cD}A)=2Z
zgcwBsh~YOw2zoj28k!3^`zp*Od8D>e|9aAQ;Km}F-0fC##~S^!Qg>mn!j4#}cHxqw
z?)9|fhn41|ja%4-oc8s@4xm#ni4EYbja!CsTZyC_WR`r2#Zw`&0@z#OPTuH80H=dg
z70@r`j0@*29k3f(LdwxfA`P7RJ8QKPNjk>fK6wEIT%A+)KL!N&iX0g(p3Yy3{vhgT
zGM?6c^ZyuPJnmC(H^9L^W5}mIW_@8V*2n}phAe>ns&=fuO77R&`;YfG%(DU#p_<`a
z9H{>cJ!Lb|Y_Wr=zj)jx+&-cX7LksznW&$1noXj0a1{(P6=Q>7uY{sVsDH}#_hl-D
z5#MOazIBx@Ehf{-d4B^J^VuOx{Bu1!x&soD`Kclrl9{Cx@E;WtlG*vc)#iV!&;KYK
z<&Y3N?ABYiz_85Ja5BElPO(cTD`J68lbF>jP2y;PyA&LoTr+IIeOgW}U;<wOx-}>S
zba(|Vfc^cxP!NO_{M@wc3S5F}e){)Y0Eg!o?e-uXT&YcODl?FfpV$2(JqeEEHE@U#
zo{!z#G&6jRtg{6uP_y?&puTjzDhB(K8GP`77J4dHh)&)l6@uGm2Bo0h7a8{h&ea}l
z5IVV8Va44)*=Q)OqsxIn=xg5`P~Oyiy*t3r-O0VXUWj|zkVxI==-tWwdmnSZPVW@J
zK1`GqNCZ1o+a_lk9MND$y;{ugQ;X|!B_d+tbn6QHzCAu`Jx*A+#;c08)HEEwB5_*<
zc1qjuW#{Eq6GQ+50^puPJ~t?sF5`_;_;>KszirA5o%+#NdwqYV-%_3;i}&J<l;cvC
z>dZ&jkzA2I?y^R}T#x#m_b2ZJj53kmv^_>Oqqil-C4-<T#w63fK1MZbx5futqKNXm
zW+_v~ud3ibV(Q1cq~D?4P64n=+~x8%k%u?i2v|2~2pqP`7zYbwEUx?PoV;aY97@hM
zZx?zUj>ibBXpP5o@S}XaB&ZD>GP%tJT<5&ae1N!Fv7v=W=myvEPucxy4@d}0dLk|U
zIhR0L;-HMS$blzD;-FJVBttX_$zrP%@m%f(Go*dN2Q&ZLncwt_lqklHM6ReRi<vPB
z5RmCtn4v+YOc~DRyi^B^!jx)t>iAkMQV7S32=|LhbHdNeT?!oWXwPG_?f(=7ah@EN
zGF+*mrGoWmpDoUzQh!Ze5Hb#Ul2cX>gd?aM-Y_P+9$Ti}1d_NdZ)*-g-&78VxTzg*
zZoh@?zWo%pWb`%sU1YhXX_frve|<Jp=qL5{uZ`_$jrAKYRom+_*Q}=|=l=wH^g}%m
z_W3Qhr#1lqVE+GrqcLJ*aksa2arz$;PQMlR%Gho7xmWu6q*>)WILyp={Qgst!vR^+
zw9qIV<PJxU|LS=C<)cTAFv;!N$LxBlmbFuM)~0N?ijgc7UK+Kk)LK|9BgFatW=pbd
zpFM_gkKH0;k{$@&A$nxT;thXgZe)Sv=o43M1ZTx2><tYua$=YMNVaoEkiFS(O^=gc
z!HjYaO^tdakRHfO*64VHh{S$u8K;r*GGRU^FpjYj0fQ06S?r;SZ+a?`6=lnf>V67@
zTF8-U0vX?L_=;731O=14Y#Apde#bj6bj;=9!*@WwZO+*JWh?Esa6TZE<o19WWz38F
zg}UQW7AbP^etf?@+*e34IWvYC^!%d1f8kE-%<aE0LOQu!x5<gC@5;`e$>mQ~HWx^N
z9Y1?D4eM$c*ih=8x&aflevP`h1vcJ}`S8erkvs_y8Q2Eqlm>^t8+k;2<HU;@KBJCF
z^-H)|jA!WN`-7`Gyxk$~g>3G^PyKh}(dnKNGgZP430_1#Tn-5r1>Q>qc6!6CYQaym
zM-QSi`VmRs>?w>LMC9>}4U_y3@NmjxE9`w6fO;j7(ViI$s|y4mDB4&uFu@t(9=qAB
zl-n2M=uFl-^(v_+6UBns*60=8ouY81>Gm6QVP?TL$2D&%Z(o&$LweZXG0YN_OPx|(
zc;4p}E^mo}u1ugqQp{w@V>A(orF*BVIDDtyG34;8g9Mmp#UZ7zc|=9l3$jfzbc|#A
zj&+_(XbTh;C)F^ijvNWTKIvR<6O$n38$lwPoESqX>4c_BdXyug!C3>SKM_W3RD2y6
z2|jO)qL?_cK0v9oD+$JFUHWU!JRwn#sdLQk9~Z!c4!%;!7v&W-5YCIaQ}qZWsROUv
zjRac&8Qi<uR~lS|V_j>uoMYbepQPC5s7B;5(Tm+jn~KIKdARj;dNh2yg@UWX#D@9j
zyFE#ZkJJIzhQ_b=$1BN;+ushH{W~=j+vMg9mI%wo2r@;Zi!r`VnAN|7p)Yh=VP>y#
z*?)e?JQXJQD_-a!0vz!r4Y1zAgDno(Z`%T9I$mKc{_f7Gp}03fEKuCut&N-j<N|wF
z?=mmHluwmI$GgcC=0(n^dW*3!!~huwm6UTGf-O)8*fPXWje?aZg0A@|sktFEnO6kh
z^)(}-APXWQP|;>w|AFLVe;R(1m=X7U-5fj_9Wi}drSZ0Xmr08o6$W}H1U+B~7sqU<
zObSD48st?-=>u*`?c-JM6h!iqN{fyAGh6A{_IjSWtLM16__oYpd+sgou*vdjx)qR?
z2Gxx@ve9^dAC>FZ-QNCtdB!~)bI}QJ^wG!XhKBZPrVa)kD*W(s^l`FtK6PGh!FL^8
zm2aig)vF3C2Fg5~T|iA1%XAyuWC29c$PUXh<ERDC#y@qtr|L43=RF2<iF>p>oyY)g
zCx$RZJ1~o~-4)WvP~hL$2Y`6A@_0!c+;}lvp*8W``1NG#U&%ahJZCKT694S2_@Ubu
ziR$GmtcqLx1tg8X3d<$Bsh{QH<fYCMhrkJ}i+E^#J%WA{Fhs9%3t=}aE=4z+$#n`u
zp)K6<;*IV5WzxBHI7jQ%fStFcp+aNH`;KB>S2~rHd)&okX{`sB5|i|U$YrGqpbAH&
z;P)4ncuH*x$s^vOKqC`Q2krpFx4f+lg<8yGh04pL^FplpnOX}wNtS+4on-{@gu&3W
zT>4hJ4FY54RzU#t7`HJ8&-ngp{PiOnnXt?l@7ex^ee`(&epCNg{zX^>i(BLn=PiRr
zq8qaM`Q9f!Sgu*&CXd><U8YJoTc}bWMu=giMXciGgwB0yWk{R<`dyq^3Q$q5+m88<
zpwX7$USFW?xZ$p!qb@&LiXdO1M$<5yq>g^Fy&Pgy)PJA<v@bsJzL%;-^@5PLX7$lZ
zV)&(mx{NuTo<dRWqN7Qm7VFesOT0<2LfAa(RE9skYfYBi8N>UHNyacXZ;8%X`LRO3
zFH-Nv({<BRJDjIPx_Gqo9E2|A?aw_kWKMyU2|eyogYUzDw3%q-j(5HwAO5}v*Zqw?
zljv=F%A!#5xU%IWDcnHb7>&3e!~&|hEf>-hsFw?XFyhciWB%hgFVBr&B$rg_N;Dbi
zhy$lzxVE6qC2Fl0AHJW2eH`K-<0whCo_<t5@B>a+5B$O+52^W6357~Lkcu!YfOAb*
z_b@n7Rd?tTGpD0{HatI6HE}D~lrF4ASRl6@R$(lLs+w1s<qIz#2!+pUh}!Jz#fuLg
z3PPWF@Rr5<E7iOp8WtQ3KBFrpG;2(Vf;qh!Vm%!M3|YC5CSvip0#!LuteB*~(a2x_
zt*OQS{&I-Q$mt{QK4`YQXO=WD$2(RE7#xqgmi|ImzsL~rWtyXsA4t<X)f;?gvKq2C
zH-^%mq|H7aOg+kN-uRIXMwsQ*uphwB8XiLWQKK52>RxByK3o7dfK5RAuz&%_Ho9J2
z05`x*Q2W#X?4$Y{Xm|KsUjG+>Z6kYrfZ+2-XE4)+F^*P0$Q*ty4hn%4fuU99-rPwG
zH!1txC{<g3UcE|3V4b}os!{_c)@KXyg#c-%nO;SsoPH{tu=lW+(i70^hn#UrK*-~)
z7ZqE7&J*5bY=dbJ`6Dj3aT0}U%dC#sUPae{{&O5~YvH|pU1u~Dnr(;j<YR;4)BWih
zMJ23)H7Hnv`x-!&Y1Nh}s1B+XZaI|&)i%K6WS8F)@JQB8z5tq|!F(<r5uInKOX3u!
z$u+vN)TM8|Dbu;(>GKgk0!wq+QT*Lu(@iDzb58Aj9<DhAGRo^G-MFpRxOEiHz;eP{
zWAC%kg=PeM5|7mul|q4Fm~!rt4vLT^GDJ=>4puG$)>?F0`H-igBofG?3MfM+$%e0d
zeIAd(y>~)YZ!r&#UbXGbH6*p7(;OqZsS>e|ZXxaZ-)68=i5C^UrNXqc{L%47)>+Ot
zdrJtmMjfn8+9H^iiExdIAQ0qU!m;a6Qr(2{Sz1OTZ8)g~Y{8hu!ARn#2A1p{c4!D1
z75VFB`R`iS?Nsc0StHfsvK%Lk6^>9N=?}U+E7&A`T|Wtt5M*GSUz0KVeTQz%F){Uv
z^1lo%zZ2~Y#gE9cT51a&k*Bp+6+Ik;Q)|-+*;!VRJ)si1gD^GX<Zch-E%28$4p=5~
z7T~3vhxsvN&RWS?&4f<`U>o=ld<s>f`RUY$g|y#5s%B7V6l!<p9Z6jJu%7rE|BVF>
zD_Ocw8ZM|WK80db7tn=Nqj<tUsvXQL>&P`#7Z_A%%7ig%c>X!BZN~m+LoJDcv+90~
zb{<Z0LdO3X$SzU>zqV<NM5Tz&<6PJPMK)gWqhoejKCEOukTkW9Ii5E4gd&L9jkaj0
zy(mG<`n^GA%Fb|M#E~c6STebWD7`v+Ii_om_p2}$9Pd(0wb)%pu(>6L{dn_>Cf=}=
z2Y6ZQ)<&PoL;SI#yESQs^LW2<8<-eU$x{-`p^wpCu@`)nit}jW6xrARa74GGbSv4M
zJ08=dq-br?)Mvxh)XtLA^t5Yk?O>L;{5^BQcz!eWNnV;d|9%c@pD<a5d2S!+V$y7E
zuiHFTy1;umAJ(&>ZD>a{wO>9L#c-d%k;8l!JzjK1Id$f;$SHN3sIgskj9m!z_#2UB
zvO46|pvJ$?dvb0{yV9B7!NQ_Zt)Qm6RhIns<oED5flV&I2$a`LF;@&H)v%MvaZZB!
z^gZo&Pfd|dOUzy_1MDQ3&eSh94YQ9@-K#z4q+5)>b8c70{}c^qBPK&OK1mTP++u$_
z<8EZZ&K@egGG_%cw;!$GkY(AgU~o#I>+R91vzKoR3KHISI%sghj?iH<ZZv7KM5)VJ
zKi}cqCMT*?Du>WkZb)BnOKM@^c|ctrd-qjSx(+kD#+i~Azp5tt9ef!Y?6Y>NXmCzO
zs6&ZeM}t06&8ZXQ#}r=st+%19X-90%n?5SiLk>QjP4_r@Tr@di;q|cPiP>DQhcV)z
zE0WbsEG17k)lH~nFdvUnF=m<7Otj=DxAE%tj_XId^0ZDFvn#lwbZRHxVFpP*@pW_O
zs-A0<8J){Otj$uH=#<8dTDaRXValfFgqaT)BW<3Pod04Gl*|*c3dl%{Qn9Eq%%%LB
zS5j2hE+LC{DUp!HxKRA7w0hSE8CA{6#rg4miD~PKCsGCPjGlPBT}+0KrbMJvh)a_t
zQUq2O8uGi03k}K{3O|0%3MV(}w46bBc!)>%qBT|24Z=T2qmDfyRzquaog%mt%dBE5
zGs;EM!2&%I%f{rPj_^el+!9MF=6sz}<70#J@$_=163fsmtW~VP8CP3FN`JL1hYNd+
zO#|A1#wYtUMlm;zqFJ3SA^>pH)31)}IGLF9WnfiJh0@8&C;PNS%i3pMc9?(jiBle?
zO*!J;qmw`n7$oVM26%oX%-}%*1`6gq^h<tAK0b7rc|}@e1sUe6nHp?mw`7^<`nN=j
zInCi=*z9rNE-vnl_9)rr`9%GmXis*l?Jh|n?Yc=J<3!^`Ti2sPTl>GVJSt>iqVktd
z&Lp2t$ilEp>mW0v+q_^|zzCw^kI|(RP=I-no(AIntR6d9I2D^%C<%fV5oB_fP*6Fe
zvq~MKDM>(vX_1McE`$~;tIqz$5=a#vJ!ZFTid0Pr<hoO&yu?z8!7HC8RacG}fjyMM
z=&#FxrAeh5Ek@uRsUWfZ>k|FC@oJ`N_L`O$c6yod)pp76LdWfcvLDssumjcRAnTuk
z$!fuiE>I;`Dn})ANi0HJx)bx|@f~t~jTPma3}umGvQDSvjdUb6$*fuPo2UsZCTDF&
z#D~Y}s{tKTLTCXIxa}K+>*B?P@_M^Gxl_xP5f{Affcz85=<#LCgUaA%3#z~LJ&BtJ
zXOKnSKAu37f>yGiM;q@r4VFmDW+hD~<j(h3XOP(mLm3ZDqP=O)R~d^>X9X}X`W#J4
zjk?Ozpt@e3MG|Qb^wJ@fZQ7^hy_{WtOI5bnni_!dvUhKZJb6g(Q*sM#MQca$sZIt4
z(nuVPC8dtdN3|Qf)v3OFKwNUWZ5W$UStDHk=@ilwl{*I2bI=k{C^w}Bi-uKnmc=$H
zNZtm46sr#-hB(}NzbgQ8?~TTxp0eCh2u2{pV2=6EnkHjUMm2y%zGZl-M>8c`DgB!;
zBytR@<tWaBP)9X1v{$)Kh#VQ|;ej=5;ykoT0Ve`^)8!l&v8^S8=b+dYda9>yl=Yi^
znp6*x;Y)iQdV>({DVR$&lJK%;!CxijYFN0cxqGg7z^IRn#45e-J5<E0RgeM00?e;@
z526FfmwOM=4B*Mhrvl)VG!o?3NWT~>;A$|TCu?eUI-5<zl;O(<JrZYbH80mn2DfIX
zjE7UlJ<Z2vOq|Qxaq*$sw_)NfvJkJNqMAP{N9IQ(Jwk%*FhneuJgJC%(Fjh0W*NRs
z<s4}<IKp@ddlYFtFhIw1L&VQbRP>AAmPtruGjci0U;0NB#dyRIi%k%_K;YwGK1en*
z;wvmO{``xSQ6a#oXhg74<b9UhbRh29V+pr_(Zp7#(00m(E#g>SnYgf7$k=V|sCwkM
zVLjSdm2c@KZp3nRbI=4>#2g#8rTs3c<%)52!t<R51KIV^>(MKRZ4WKCD7!+;HC+xi
zBm6Z6M^;B1nu#m@J^{9G=MH0jBrKqhBZxjBp7qljegkXNu)-18Fm0Ielgrh4Z<x>o
z=VD%0{rz?0TC#t`414WRI7GOntIb#t{S9M=GMi1qpVR%I7(~y{^yn~9_NHod979;=
z8NCx1Rky)_Wt(k(&f1^KKEKyQwEkTm+2c5Q!&TQ}x*FG`vpS>i=sj8c#m@$|baY_q
zRrrr{6F!{s>lRrR<3-3X-WaoEr3!5y)&3DL_2QE>u3V6ujl8U+%Tq$uOHJTcIApy%
z<%4{1HU32PcZ!o;!|O>+n}KvSnuT;Wnt^sUmcDS{e73Q3aRgxQkzQ%`kzR4;liHks
zg(eoJ6VhLC65?EO0{+S#w#~_Pa3cN4HPrSSYs}dyb$Y<r_Ok{R)4@%A1ifFFjQ2}?
zgla#58l;T|sZPFv9GIpOjl#w02KLO2*-h0RYoz;4$}!_srWFo{*~4X**Ms$(uOV&G
zMo3_=6TB?I)`#}*2H=aYPuNNi{0~sT6S@?D_Lsb1j+1M~F8$UK7BgVMgtWRTlD&rJ
za1ifnxY>^oZULtjGL0X3T>x^v=$Xzon`69~JEotE>8jYyahr%P$fzjH)Ot(~W?NHj
zm)t+oxYlH78!8#y;W36&;mpor(AAw^j4ugn$ac@NHq<tWG@EG}Ub(^lvYWgVlRC(~
zL~Y2?!tXlRp_fDQu#`fG_O7y%DBHxPZ(eEcr1_)PmszQYH^h!c#62OYZ4LRnTpfn#
zX=uARja~{(J-C{y*-e^xY0w<*qiEQ7ES*dhl1&jJCkW1<{C#usImctdOmBN(-mDfz
zEYucSS^zZBM>BH{9Eh&{uMH2+Pd1!;>79?y1+rk)p7l@i&SnmF-HNDFHCoYPP?~ny
zstI%yG#_!PAFOstnXW+rGRJ|w)eTMOf!r0Acu1>*($}@xTR<ve_*0a1Aj}fsEJVde
z)SZQd?6I9be11U3Y(G{wueohoPQ{36Kbs%;r?OMs|2^aB)qWZG+=hFSFwoBieiuJ|
z0o7!QA%P40>1cw7r|&*G$S!MJh<3$zQikFJm_3WKTa!b$23gAfcQpyR4}2^T(4y^R
z+~QLkdfF_Xe%LH8+eh06=i^1kU&Wt-j{)XK<%{J<z<n7c4|wT<6jaXlJYmA`{hKa{
z{J~gs`#8TJ<9ln*IKGq2AGs>*lOqAsGlu86unFyXzL;&Q=<Y__w-yeBruBW`{Bn#Z
z-Re}hE*YQ++i8Eiae=WLU4F#(pg8mE2C^posKETO`CN;p^*Hbh=hegkY|1iVze4W_
zVv&B`VPB>H#{WMfo%}@9;HjVh0IqNV0F?hzq|?aU@OS8&*c#Cpsj5H%0RKNQw~N(n
zln>YtzH{{J5~oozIpnOv;;kGf6=LBh8NgxpgvqBE>#Gn@M;vW9>3LsobjMtYz+2}n
zLJ8+AU)Gi^U;Zv~+V(Q)+!|-rkAwiUTx2!g>En|@L$O1~++0`hu^su%3-o%>q47*v
zbHov0NC&|TvlO01hOz-kR$8IWaugCCI!GuZV9BV+1Q3QyDb-o51N1!Lq!>dpqQ{%5
z?1zI+7)%pEIU~=C07Mb)PLTW|fupEQ*PysXDgl9%fZ0R`Nro&Z*M<xM{`ar9x`vLf
zXIodTKKg{RAcO{)^1-Q(W4%-$xKSJ8e^K_1LArI#wqV(|ZSC?d+qP}nwq3hy+qP}j
zF59-N>pka0_dU1!eBbRAG3WEFKN)L9%$#eEkvTHsje49o&L7u~T0>|et+IJspbBK#
za6Ac<5zAe%qNf=$LrD-@-`vMj#sw4JOCbn#k(vVH0(ydfv3^J_upy%aOFUnFJvn&U
zJ6ci~=BVKav7f~l>D?A|u`L8iqd_;4$&;%gd^Dg>i3nODW6iT4aT~@mg!oCsd0yQ-
z!lW0*!9QTO-CV==!l(1`IKMUMGvM&iUq0JC00p;z^X9-aVDU+!DPn9(O_Qe#j|Z%R
z4A85PMTzJQ7DLYDhM1b_5m;zKN-H*WJ#UOn?d-l;Ft&9wBSFh?9^Bx5$xZt{Fd#Xu
zW%ZfT-}#$Y79yXd55Q}1fF}pSYqmQ}mVE0=*4Ugr@ff`Vor9`W&#@@`f4cbcWNXEY
z{C?K$;mZyZnuQ4i?FRJ+)t|!vp+f`t&V5ytQK(EJE5yN8KwY7G<@m!-vkg^=;Cd6C
z%Bsj1xNQ3IWQz6$e<(5T{d@5yW1fLlD)f<zPYx&us<#IC1(c5faKjaV2Mf^V@H-Mf
zM%s_)uW=tZ*N{l@X=cd;412wp37D78VH&zq{~if??GdF+y_&;l0}?lIxV@zU*>6dz
zC(m9-!lcit1ba6+kQs|uMt+d`;fRJ>nEuOh`Y3PsetUg??3s9RrF|;fdiSZ}?u_5>
zHp!X25jjQi%ddCHw=amQf}xz@M3G^Th)MnEdVhhV1xXB~c3tguKu`ImX-*l%numv}
z_G$?XeHD3rvlgpc=z;a=nH{-=_U^zes$!26qX|{fcc4AkDbn_iV{}*Tso5Fykt^M9
zDcaMX>~jUMcRf3CZFppgG9MpsXH`2C*=;S^L+MV(3b-WI^u-E1E%x)8Ble((8#zwu
zH-Wm;v3R_>h^vg@5(>lSEg6_pkw>hV=Nu}Maq9mtiN>F`>P-vG{r7LYL@VrFcgO@D
zvUtO27~s>Bn|F5p<p+_~38cRiW?0U^Q)u3`r&df6<~$PRj0t%l!puI#6`BW;H)X&Z
zTBNt-;A=nQl}fraGA=!8E^53B%7GQ31#jXs>*13S+`;Nn3U7oEdc=Q+lfcYaOM3W~
z6nEC3U~kfK#tyrs^k(=QK`Wz-d)gCVVZ^u##YO<D!Lo`L%<*B9vx!u1K|?@ol+TVA
znd#NRq2c-U5vD$4O)m9n;Z}MB9N`C8|Fr$ZN}cUH=@EWX@;5i*4kwe$<y^?hR5B<b
zyHYi1A>*kU)RE>Y9qdYfQ6%Ll3(vA4y<Rz#A?3|l5^z=0sPL#9xpsTg@<x=A&8esv
zWS=|k9M5YH_VcGDG1olCR-ZPLPvA!D7&c3&C>#?rUkcA}95|gH>b5RlxH1)@mPJ-n
z<TxM<59-mVQpHiN#ReM1-!>v&>x<czz;&mUgLp69KWLJpE6|2?ou9tlD(d{IS-cl=
zp<71`hSg<nu2Vw*BnhN>z6ByYK!w?6!xR<6C02wd6f#d7Ni}tYuZ>ud8%&n!rj=0Y
zJPUSPfo7lDBhDixq12WiQzVIylkNJ2!IO1@RFuFpi*(p=Qhks`8r!ddGOq_6z@@)q
zSzSx7=H(0NzFuaqL*0oc>}9>)Y_d7Wr2faeqKW*~_kYt<on~}d8-oD=AfW;Pkp0g)
z|9?fa4DFoFjs9I&OU>GL{b$>!`GjJnjVM&M5^vt`Y^0_b5e%TPH{qOWCqY0-Yi=4(
zAe48mcYeR*RQMxQ=Aw!6s-VXoe;4B#dll@;b@a-#D3#diejO@}<Rc)71b*hY7?~Vf
z$D5&ObQaPE-Saf-CNrxi-aj`gl4AcreoN6$nI&pJ&&LKa8%IfECWeIMOOzP$h7)JC
zO{_0KMgdDsBBBHYSx?(Im8vOVXIbJu8%iMz{frolC~PhO5HkG<BK_${aJLgrD(n;1
zX;ug0_4@%r<JD=p4m6_oW&=U^c@b0}eJ~}~55$sewC-X-=i6X$#$Ei+FaYZ<GS>Su
z<s-3NY`i4Dwah6ayA`Wyg)%V^cmj!;&~0VfDRc0zXm)Lo^7eG5hs#TJd5IKC?~KV$
z%1!=Xy7`%p7u!ddXGbp19iGo;&GsE0pZRSKfnQ&u#;az`Ja}5sO;x%<56ki8-8cD=
z=AGX6!}giP%I0!+e9AA|IaIJ*SdTNb9lTCk&!GhieM1@5)4qD!(k2nr?9(rcr-tW?
z_I{%M;k;8$71&a4c90C1e`UDx!b{ju>&f;&2SIBj3HuNXx^_b+ZhO_^f?L!qWP&RR
z+n6<8viD`kNY%zFAZtEI?K_P%B91cCbMXbp7C<4(9COHu+>*YPNgWfD)d%HIG-<8F
zFd3lpJ%7tt#8)JQYMC=g3x<^y`Q<x&b(chma%(pH^t+g&5fnZ-N-Ns7&n~i*5|NLQ
z6WB~8%1vcn@4d7#Hfv49O!3u^mUk~ci;B?qeFy~xZGo#R^ZCk@N7Idw2~mw$TGr5`
zX#kC2BG`qAxJhX-%Mst%Hw1+-w_MiQ^>b!uHL5;RTcyxX%Qz8nxL>^LvngKX>}eda
zi`b3S5<S9-qF$`CFNqpX4v@Y?wdwKkHr(=O?!|HqyQSUH^kml+VOTL}$p-1@LhHCE
zS@i_+M2;wrqPqkP+Vop`*?ZxTG$re0ayPCMx&nqv<UWW0_12t@Ti85mBZW3A@M#xv
zg-<Ddb_&WkW0gHXr0;RmI?3__^>9+;C!1EQ$op(+hOW3EpR#+mg6hj`DyAAFR4mYt
zLjQ^`D`|_E7Om*$+G0{8`?C%zttSZ@;cKcwwXjCU>8V8l_90@8UkB<B992Plr5%n5
zgcLK;uHrHDFn|b#!b1=@sVqD3rD(bZw)vZWRC+g*h@%f<ZK2B>n5#^Dx)SKE??4%~
zDYEs$aZm@rna1>%z!jniEO6pO@Ag~b*^ibLiIu8nMiarOpUh`n-<GznbnjH2E_nQv
zeuU+2UY?uT#&1~EH1-6~fVy>nd=~G!9DSr~?g(|O`E!D&K^pu#5$zBTFLA{mV*n6E
zxC>w{&df?e@l(bPa*|?J3OMtR08k_8-0GieW=a4P$-Ne+Mz~z@I>5CAGb;%fNlPmi
zQlAz+P5|aH>|EOLVcIbp^Jq;4MtyB=Zti#0cMGR{X0&Q_Q3+c+20S<`ShyRxhIe$U
zNws!yfn)nW(?{2C_xQThUf)S^-E-GU)1bi#<{M>W^YDSA@1v0*Hi+i36WGF%Nw@Iq
zOf~vGdQb?`ljM=krroTW);lW|>RKuv%|O&2>S0LVzmTL`8W26mIj=j<)|K0&2-bNO
zAHZ4JS{~7yidEP(AW_qY3EvLDD8~+A=fL&7`~O6LvH}Ab7wcn>tdyYPjqh*rjNIiD
z=*dzL=Y_p(jl4a>X2sfHyxXzk+hz4iQzQ!8R#2rc(LU)DW%YM=FBikLjG>Snl7qF>
zQwCU98{{NxdZP2}g&@0O`Zs(H76r8d$u`G{d1PJBGX-PWR$u-~w`|$cS{HV-o=}D2
zOg6y3y9SYOWL~9A1k%*f^D3WX37nbF)MGf%FBb|2cWeo(U?a`|{%Q!Sj6!t{)RnXn
z3l*meC}Gb>Ob4SYx>=UeauY@u+{DaLiDbL0r!9bW{%Ihx?PIuzFO|W%JpF44OS=``
z-GRW%bDm79=p4#ho6xu8DJOUKyXK*!@}WjFQFurEoYNN}d^tYHEAcTcha`ko>1|#z
z@8)ls5TScX+GDN~RyEFtH+$z~`NWrP=1Byk;)Qbq|KCnSyj@F`Igw>2C>x#|Q;gIk
zE>979ZmVV3L+dh=r`=(mL$;W5Iz!&Vuy658vBv-k!aZ9X(KFwF;LA@7&Yw#nM^55D
z{`}X3`#*lf46O7mjTwLa2V~huEK;+QELC%Mg9ZQuIROR$_>bxTK}G+V%{JqJH-rWN
zF!^cp`9FUf|I6%u{y6>@B>Km`&i~tf5vIA~y4VwEPk!X$)v5@_#BY1OVT8n@5D=)u
zMX9=|3fd-nTc_4Sv=Eq&XYU&LGSUnZ&GY`ycHN$LD>y99LVlV3CB^>hlz>J}o16_A
z%r>n$Gmb6-Rq+q}BS^;SK}MN*GE8v5Hj&joS`B|l;U{f@;Dj9exY3Fx$<+@Uf*_!!
zbDPCr(Op?~Y`VlpbL>R~-h}ei;%JP+L}}b5(75!1xIL^$A!5VOLo56iMh%Uoh7^ca
z%$Sj4MM$!tp?XnzRb|7V@DLP;I@ox#ywYVRHLy$}_3quNka%W5Vt2g+N_!n82~|$l
z0|OsDHlz4Mm|@fH9ei`)aLw$~B@w{@d}<pU30Q8jNpVmF(8O^hh{)0Rx5=#&YC$D2
z7-#rl(CWqH#O<=|2-Sp+WQ`;SqCgLjJ@w2T2dJz|K=`(b5PiOnn6@T6k0fyR<74fC
zNb-d<gP?e`M$&58)#shW(bNyhE=S36Xw;9Wgq2FC+0E#{3<DG#q9=jhlA1CQk)=sr
zvGLsbkC^Uaig)1i+qjyS<=W=F-KD7?dL^?}i0Cda>(w(^Q##Prw1w@_26g;6v9U)x
zxe|!p@m6^x`cm9TI4;u&ps2F4eA{rh;tR5RTp>C&Vn6NA?dGrHc{p$E9Om(($Op2$
zPBNd!O|$qld7?Zw8-8S?AAjeLJ!~xJE#apRu6D&MR`B6u4+A|}FFJW~az;b9#tNO^
zwzxk!?-|$n*Jk%<4xb6ToHborY<hNXY<~)k@AYFx$#UFW^>=_@^K^pW;Pt=H64Ldy
z0ffrz0sYj7vWe|P5G784rj72!Iiu7Im%>j5S%*p^@f+k|B~m3E_4j=96Cq<iwXlIr
zsU{L@M<Z&pF9p>0R#QxdSi|C<+3PHVh|h~YncXwWg}1OLRn?a64O?BI;tOatQ-Fab
zptLB$(hF}?JQ)&^fwRVKV)<<Yc;Et6P0|89B`#W#SM_+d7RC`wN|MlAYy$U4lZ7$y
z)WomRY~~%gDHz>Yz|OF2rMcIJ)<Vi_fm$gMAp)~9AI{oh4}ACsL_mP3Uysc!j&h(9
z#5_1sS0OD2DBVD4a7(q`q=zrQFDj>&d5EN7fIOs<VPC$NSOm}D3LSB95C(Ddo+at5
zxM3lKSIkgj<(7GqS7)P{pnJ5NbIm>8DpOR;4(rBN>dtQru^yG*K~BXdfF2yAN)<xj
z4>H`|-gR7Xuc7r>?zCbq`mYPc$2YM6{yj1lIGSdWphQ<AHX={YP8k#d+M&DT0u&XU
zeb=*>NHpj+i$u}Vm4lDS@)Rx&enPdmpb#lOdzExLl8rbEGJWcNc8<WbrHb3f7h-cQ
z%=n4dsyZN6%cLfcO9|*mi&Ru9pzgZcIHNuwaWHN02SB{wy)@81WHoTAxd;#4wCmCF
zB)WZ?n>q>SH93CJKSOK^=@tm3F=NQ;ph|iye})HPl?yCTk;T~04o)EG&9BDMvd@$s
z(taJpPFOkwdu3zLe%TJcpND}kJaS&H@v63T&UIC!Ts}u=29SYzqRd`L1+sWc<W(W4
zBNYuM?dA1Q`u9=-2>x}+u9N@kqS|tm#oD{{RX2034wW~U?|G9}fb;bE8ano1;==Iy
zuzRFS4E&kIjVb4rw_#$+Pkh1oa30qB8Uz2ikzjRE2*iOt3(f};MaQfWmfYU7jl1WA
z@;*yKgN7hG)U7@<x4v;hVIV$j-d$jb1fYNgK&QTSf3i41#t6NGDml-V@2?2PI`K&R
zRbV*g7<TJz%$`7=Pn{f;CU=zlH?%TkwLt);;Lv%ZJb+aPAqQ&Bi`GMWuX5PtDr8+J
zi6ZIG{5AgEEwl$qb<(pIp$lWd-I`#Xict3_ihKA4|Gk%<0OmYUV^bV>nA%9aKDb&Y
z+6i}|VX6%Moc=>uAOG(b+eiDr;N|<1m(Dx+A$l9WbLe0SvI>%?+T~FOU?dVs%3ObZ
zY6>7PICqLcGVBQSC}=sj+z@#pw^0#P4@Y76(JcF$NbALjbZ|)NkVfHOpaX&6lML3_
z^8_s>v-~*#__xV%g!;92W(c)|CMj=a({J?vUWVdPj=>-lhXV8jM%4Q><mf3SJvkrl
zOlb+nrp$D&BhB1mNf@4}lG5zcY$}xCo)mpilk_;^E(#$Gged!M={f#e4LG33FrPe=
zKz;l=53dpClYU4uO9&QngNP^M338(-`2b6_*3H7nYjif(STGjdy^3;zL}jh*1<tT{
zl_|12R{RJxh#*d**Thbmdm}W_K8Rpb2|V=7tU*N2_Ed?w7{i3qrTjQGe(ZdTtP*%&
zaiuy<lQj<Km&vr&3HU4d;7h_M2}WnJA9se()e&Qtwz>VPrL(8?#nO%7<XB{)L_y*)
zXbgvZD(#DVf>;wo7fOvfH=vVHR=ZCz7gq9X&WAQreBIOl(JfTFW3}^wO;;jMPx{8|
zwALL}<1QVYmnzMihnLOEokq96uxmBJE)M)`Kx<XOE-ZS7z=nM=Yg2$#7~lYIqG!-n
z_kBu9;ap3ZT)9SS5`B*`W?3plz2y1C`W7ACLR${gSlc?Rf4}IQU)d<J9}bj}ph2=l
z!h6YKAiX_O#ewtT<vvzm-|s!($au1uSY>`e4sYb>TfKbWuu$Oo%o%qrmmjxxcYl1G
zdefFAURPjB&pY%oX}Z4rP0A7c0C8R0LCDh%vLn@!^}&-knRYp06=)>Y((M=LuyN&d
z0^j98@*vnH!M&-jn%xYz&JKP@J<;iN-R}R4`12WX?O&9rT8M+<<w~2SR7jH+F4#dz
zd$>YZLzYv#5c&6E|7Fj>#l_v-(b@a!wAhB65i5w{PtP<li4U*hiq*|C+r`WqJ(6oi
zm#7z>uCJFLWqSs%)1^>Lywk0xZB4pU()o>og7*MWr!XylBMn5;o=s)rZxs$~>dok+
ztzijYL*v>y#tk+0prqe4cdrJ=%A{7y^j@gIw}E(7JJ<$}VW(9}n~gp<4j%kGsrU&#
z-L_CG%RqrFuD*uku4q<4(!9LcCH9OdOFEBwt9AR)e3`ONN6EV*1DO`8)ccv3L&oRZ
zd=D|Fg|~fY<J48$4|t+Tg^S+5+z_l99gpKj^^m;vW)<{nI+E{MJ+*dyLD*D|<6dz(
zTHTw~YC+uActdjF9=O3mGdC)Sl`C4sWf=30u-Fd-p*vK#y9c2aDV!oe(faz8GiQT<
z$#Z|tW?xK|Uve-j;RTCmHsy}ir)NT$Ac+Vn@w%AIa_=!I0M()t2IOV<F)Tg;p+>YR
zM-8hTi+y0UbKS8-tbjNKZeEBK`jcbTmksGKm>Qzj5W8g1kKc5T9G~q$v-$POdvG=<
z&#ZaO+}!~m0A~UGqGVUm(s%UoQo6#NbJJ7WG^4~`9P4fdBTy^`v$4eDWKRyg(Cgp)
z=oRrC5wLwMd?svn;L8-m3APM6y@pYj-_j#zM%7GuU8MdnZisJE2y!wItWDi^943xZ
zJ?wpINBmLAy(%QM&5ojxi3!7VXcR(InM~eVD=MVnBdZ>P-ZoKWWF&)Sd+mwl$K<OI
z5#UzhfWpD09rgTnxB~&VV$Db@FkV*!I^^}G^|8re){$>!XL-weoO70{Uo%ncYRQ^s
z75MdpQ81zj{C#ECk&<?vb^Yp^Hr9_$i#PWwOMmMX_yG8cJzVA;+;zDo`jrw3rh_Ku
z{agS;HWAplJBXPu!G$^Q+hBthnPt%w*8<x_)8B@|7}`>Z5T2(ysP@V++g-HflXZpa
znxndy5?J?y=S|rxZ8@~Ln(U<1Mzo%cV5KJb$%w2bam%V!22nwY5+c$4YQL>#gDr@k
zO1C<wk{1)Mo{%D2)VA8_tJ7=thtcTyvBGP8@f-BNAK{7j>_a(!kb&XPApdvBz`)tu
z%81U~#>Dpj#t8o(XZZVDC#dG7g$3~Z%*n!o{PBPUuWG&TSpw6aQ}V9bItCpmh1j_G
zqzsG1yktmygn#9RTM$JQEXpy^|3ba}125>c6diJb002yX0xuN*?%Aw$|BnDhw1T$m
zIv;}9bB!8knZ*2Pas0SoUTIt*b3X}0XgQa<sb_Re({<&$m>Bh!=d~Byj$Gl};dDns
z17`y|3^zu9(26GiH8kk{0K8}|6+$vgJq6UR#!XHt7287jj=-CpO0u0{9g>Y)zMA0?
zHk>5#JWARi4D*DXp9jBUJIaG~?Fx`5F#b-AW$7pyhH5UU2A;AUBs(qQ4dIXmpmE$?
zIUS`wWq(L{KB29-M#3NZop2&BDVWYJ4XS&?cvy9|oJq7fEA&Jy=z(PUG7#y;{EbCu
zg7IZkiKRP51S?kT9Bf#HWFGWqe`+WVcAvcR`Ci}|Xe{tzic$s;hrWv9F?Tl?cI?1j
z9MHAhvUq<~M&a}jZ2lwxurV|u1#=pGf6G5#6;)B9xB!`ACNsY<6?98{s${IkP|=G)
zC)!GJc*R>)evwm#(GaZAIGZN}vSeJykkTeKF)>WrH%J+dClZT``|PfomU@+Z_|-Qq
zrm0gKLxB<-$3<9INu<9B&m1}4<2b14U_Teo>(Chfjuh{!ekx>P?{&UJFZmw78RQZA
zJN2}|W<Rzt@8TKno<1x$d{lxdq7hsM_*Ya|+4t#_qdR>#aS0xy_)LH2^S0LuC<(3d
zQEK>}j=8#?jX2`LdT3|W^Wx@g?Z7U_-6)$R5o$TpguZc!IPT&1@Hh#xqODW+Ci(dT
zo<Fez%zNO$VyQ28s7b;W)4kY200f50U+k(L)<b31fN%M$MRt<bBC)`bnVnJeALUud
z2!5=H^u;W0wLXgMF?xd;YG}jI(3vK<zUraPw3e&wL)-ZtE6lSk=i0p;dmC4e<`fZn
zOZ9!{BWMV)TMzUlRn%<Xs3+G`XH0n>cMi+LCDn81d5>rE)~cf)O+ni;`hWLM3ezM<
z%OC9R{{!Wz{+$Q>=la*RvNg1#Gy7K#x|uBhLqMYhZ+}wL)u${%9H`%F8RA8#m#u)>
zClWdMgNo?M%_|QolYu5goWp)zcl<#aLCUIJ-Ty#J{cyY5?GlX#|HOOP6+q)0!e<2j
ziXC8}VG7Cs62_q0NlfrHu+mdWm!i7tqnX)VuE(;GFYp)~B!;DK*kOQ*hWtas4|>E$
zR@1VxNSDpLGlmVnBa>XK&xtV4S2lN+8f7Ww9^<ELNCRUBShs<~Zb~Gw>X4|s7cE7M
z#01F57^NrTR@b2LFqDwAx_4*bgFBtG+(?63MyiE9R4{KRevC?QIAc7F@^;*(*Rko5
zaFy$PCH_cX3J;rp?w0oVAPC;0i+{=gxs;6sM1l0Ta=acxNBVm%y>Rd{SBd2gSg^iw
zU)A1luAdn=;rgG{0T!P8r_8b!Q(6F@x&E(D7XGWGI@MIyr%}<e(jc*-wZ%7@gd%pQ
z1coerjfmDQG)TL2qxGa_h2|_oXPJ5WGRpTDA@=uxZt_{T$0^?(qUi~cu>^4>sjiF7
z`!&ewqNjS~ezV9(a{OHmwGAyTP}d1}hzHDAoSmb4haOnFE6(1fk1J<_Oj<Y+vgxmq
zS8F#%Zq3EX!gGcbH=H-^@La?BHsM(YcM!7-oEY5P%LG3>(B?wX`s^Sbbg8;24eXZ=
zQ&I`KNh52&gipV<N=FoUvW)&*ctOruw0lrjPd}c)7q~=5e!_Htd%~j)eIyU525y72
z_<@7b`QlXzCtgyMJ$eDMKdH=1W-9v;nC$|n4_b2qyzB_*Kuh<VG|VmpQw|Lddk(rR
z6RyzcrHv>wy13G_-r7f<XFDzCHKs10^Ypt#?w86YEe)}Xrqy+?YuRUQvSjs32R>^$
zjMP0Hf0~o2?&Z^}H$rRjn7^TEjVRClHr{RDA%EIBvX(g>74M5pZ~4ehZ#a~@D^`aT
zs7UBQ8P3A)k1kyVF|c6`-<~Ydi)_+^jSOJ4>Epy^(yK^b{*0OshL>r2mv7qco)3EX
zl=GpFw}HE7!|Pa9zM9aK?2#i2*`Fj5Un$))6=+zCMp0J_mHfw|oudam?6=zt^T-!1
zl1aT#_5ysGfFOKQ*<4uwPS3M|PXXzZ(vM;DyON^W5B}NfXf{Krw~Par%r)?lhrF(v
zRPN1Y^snEZZ`&8Ri(laX-JQ|KBBS(v+_?+p|J<F;t?mAeJ0GfC+b+-}d}jCTF_Zj>
zimx_TrDCN5y8t%$K-h;CSolM>G90%We@TO~`aS(ueAC64hJYk)G*qR{(}$<Wv#qe@
zypN6x^-!SRy_j(AI(A1p<fdK7$HfK8w(un^JY-+ORG=Io<{oDYt1_UaR8GeL3n?^@
z-5Am#m{N&L7}6t}%vND1V@C#h15&{6IX{3%2LK(5DmX;cRH`rP5aNZsPXTy8E-Zgi
zeG)k+{d6*+g_%|y$q_*j7nzOBt&LvE$uKVY;^B26QPq@uA{8l#r1=je?cc_EsaX%m
zI@WW>D#^#%m5Or?6eqBvJGoK!8udlXSY(s-QOK?P&TQo!ObL;IUa5$Fo4bRDmmzTw
zBvXnxl$jF@HG-A8&Dvxs%L97tUUe;{)B);FAygY@(zSJf-uS(vZ~F+E%7ofQ<c5Qy
zxJJ+%NOk6qTO}ort^^tt%t@+jX7g;I0vQ{XBABFjM~QJr3$pM%l(eH;@+g5A4l5a-
z&|8ukg~9|eF&_AaF{<W3bb;W%F~^hxS$+hhzc6MnMN2VO0#5`4>GqruULmcktevF#
zv`G_t-_HQGtwS=>Gs4;&`i=?M@Y=-^h7vl9owvYh{K}vYDA~dB`czK_mhw!QtiZY_
zf~V5;qBl@gYfhkP5*&87tDgNL3h<vmhbC(R^@8I|smD?(ssSA9KV!|x@V0fgzy_c7
zzq#yMo6gsrwZ3s;VgQCWXXAyRMK@=GBV$5-=Zto=*QFKcuTRe1Y+Dx7Ud{Y&$a9`z
zZqZIZwaZFBo&9H2r)A9wM&b!=&Vr+HZ(N7qv7E$|c<If77wEF?7U@w^NGrw-hu`az
zKWwc9KBIfDdQ77kMY~Qp@;aq*3!38`T>%-Wp^C}tS%V(s-^v=#27C(Y@zpPEcX?*a
zr{J%?Vj1tO(5LzFvR+H6PE}DYICfV#+zWlUQpJAPj$;Emvwe;6eGV}!dV@IQ^KOdD
zKG!+kkD3Q*MhC51Nt|t(ENIfoCHy(Bs!ZAaYJ!s`+t*8rY<BpJmxOChxN6eGQm!Ty
z&ojQ$qc#_A`zz{lBc69Stg6BU_q;(|zM8o(Qo+!EuR`r$xIscMT_%nG!4L9Gd9z?$
zHE6OPeeEyuvc2KLtY!U<``>-oyXY*Y>WA|#A^1P$ybb;}=RJkFuCOoilvQ(LU}0%x
z7)AQGo*TwUKV(ut9}J4AtWa&wLY#I3Q(G$`iqPM8+wqO4i6n7yxw{f-z4iT}O?Mr<
z3-_n3?);MC@O27kU1+kTO>&f0wHjlNZd?V;XVxnyyE^&=^91+-NyI2i|ItDEA&sYA
zAAlV}I`mZoi7B8uIpBntes1^y+Ud?-HPFT-9K<V&c48_|JPGY6hiO=e+FfQ4mq8Hs
zo0T#`HUe+7Dq>0a%xDO@q`y|4yqH&d+#)pvfFgh{HzCzaKpfEDq1VucU-wL1$tCA7
zwV+(T7_X|Jv-@A8W`SmCBMp*zIN4UMSOZavM(@qyOrF8-X8n;&Yiaf%df{DM;DW$-
z>Z1Y$#8Qju2pl}@?-tUe8PV#a2=8$Q^%x|fs32?@bx>#sw~*5o+@^@`g1KwGX6qw1
zYXIY(-2-yIVKDG3Kl{qrhKX|)V8lrD(}$3FALpI*9qJ2T6N1hMQ`W`#*wpH$m19cf
zvhd94K!2!jiD);(&*2OH{s{j+AF#3?X1Mfs*+)C@LwfF3m3a<{?{Db}C;mCyRS}KN
zEfZ+wJZe{1X0D_|!hhZnuNqn7-0ew3pS)|m69RwT7TSqM28dDE+JD_&KE&W$ezXbh
zVDhv(u^Co#LgLOmn+}|=@X&Z<bLLrbWXE_(kjFeX)#T!C8|N|A39@1bE3PBYI&nb_
z)CrE{p|aVSCCwUIjt)PO6aqSyxadKir2WR}SSYjggmd(!rpc?aI|E@l3*H*N15(|?
z^RzkvU!HUzn`|a)sNwt-swtF-g>>}6Q{0m5?P}SUROky7&O?aS*&7}PT!Yv-eB-do
z;=h8T)4)>)Fb%}!#0tGb<JT~J5d45jR7bA_@sL*sg7#D1mwz^S6a<juC^d{GJQoD7
z0vIZ7$EdJ%NlPPv024E8a99dZ<E%EH24NMdZ*|9u0y4fV+|0y|Q64<0HJ~D%C|B4i
z2`Vm^G95t>5F$dN3`>o`nW`&wbZl}lzN)p3ieRFw6=_2Tg*-+fu<F4gEi7{!2`Id(
z^i<GLkbJGansIa%Wr}4ri?T3gPe^ltb+7@(#?ptmQVkWQ2_rcV+1Tb1Y@QM_C}eEz
zJJK|AhwCJseZUI(Gy&b#G2WFp-7u*5>vz4rZJwI}>4aLg;hoZMrU0wf4apuPF+3%F
zd6>x%5MtOpZd$)AI=+n$VVAq=(6iS!TPLnSXQKDH-LY`3efCYjLfCg72z=@TAv7`x
z_~9KVgd-olS1^GQZa=@)2d@dk&1%}SJOlfzq~N_$izh{IE<rpTI9h0EP~x+ZhuG7T
zTZ&kaM8qMjC}ot_)b+tFIw_iiFkT)k;W6(7s~<UasV#N-Tq^3UqnNNNP;-z5#A=9<
zcaq%W+0xkKnCX1SJW_!kG$FH31^M<Cl-m{aa(fmvsk?UGef2yxM4)!E9@u0;Ro+lQ
z@kq%mWo5w$q!gI3>rXWYnv+PztX~VxD0<>9qO)`;v%rPnO1iOp)N$PL%0kdIpZ)!<
zgwPHp`sjq(DLA-*WJ9FwlQRb?|1jk^Sr)WkuFdb4VM3I!8}g>YPmRAzr|4J>H{02D
zZxv>Z`|zO6&Smmpy~p!Bsg~6fkR>5PuE>P}@d06+HQ&}ueqyDY8sjO|PqDy0GY$|m
z$s2*txJkMAGrU<-wrJ?4x;&d76+vIa*~}DNrC?pi^B^76k2r`G`2gDI35_myKyOSV
zR{%nTW~H+N7f#XMa`+eI<^WZ47y?ep?;c%3whjY{LB^ydhcOXy0HaDBHpAt0m4;0m
zaSIS(k$6K~eiPO^s1tY0dGf#=I#)K~;HZ&4IVWcE$z;ZO9R}*1bcLQ_2g0n9R)>V(
zxh17CI$+*d34Ul!HyRJ;o$FDb^U*Eb(XD8I?s|Cg6F@NpIt>0s46ml*F0bH~vm~j(
zlFXi&<p27$5EA1yiZ^>E*iJA+hAIfty9XkCO_($=7^03Os0yc8zUx~OV@cDf88W}3
z?DrOo2r~>wVL+*FTo&sr5v3ESEiV0r*IkwCX9qv892E$T!h?~Q`-ktdpm2wQ(`xpf
zgqz@*7`$Xvq^dk6?pf#q`@x}>BXxTqvqn5{BchLo1B5NCCrAitpjfsb%$Tf$c~p4}
zVQC*exrogY(obU?<ea~JA^T@Pecdft(6yaDI(WsTmHeu+hG#shU9Vrv+}|*51k{74
zOijiF6X}zgrYC?Jb1OSC&3&dBHjK?%7&$N9A^64NHNfm)CdrLCk0qS$mkk0LE=3d}
zx7lx^X>@wA_f$PhU`odYT118zasHH4&7VDW2boD5F%KKy2lwh7U?Umu=WuLYpg?^d
zJY+b8?Ep}wd=J==ZMcnFVgZ#N-0Vz*asXg{ts?oA->Pf9zDVlsIrxI#g`nK%)PR&H
zVA0Rgpne05%F7^JW=Y66pPOxN0TPMO$%Hvf9Guai2npX|m7|YU^b{0duetZh_Ih*@
ztw~$*!iD+Z9ZJr#0tIh)-{YI5lasmGbjrG-*%}smGedj38Eaj}dtD_Ro#x8~DCW#h
z2GWcLV8ppM9tcJgW0Pa26~xLQ6JRI9FL)K-_sqz9tHitJ`Z<v9)ioSYd*CGk9yAC=
z>avfzyK3h6?`GBJzUM$k$G~tIfQ+$uynh2oFZd<$$Q7%<7r-5$_3Xw?`2t>MNV!F<
zMoCW~!?`C$!^U?o!%A6}kGygh(?#;y4{!c<Xh?pZ(4)ePWxVR!N;<&lg&+P**&Qg@
zq$XqrO-KXy8||72@X{)@8L=PDuG$aTskf<FfD_^v;w1c^o1SKYSgP(3uq)Nv5!CH!
z|94c%&4}ypydT~?Q^_k9CX2bS@`pEXA*DfeqN|zio;*g6d_7K#j2wzhN%^h1a;$69
zZbIdVCp;cFh+lcQMEt=mvl-0U&xl_lhf5yY>gMqI3J7+i{%UMw(xGzHwCiYFljdIZ
ze4}CFJwVi{Q_T+p3(;oKq;jzwv7mw3q%vHE+S0^mUL~bT-M|{EnJQAfT}!gFJ6%z3
zk;3U!-uBKPZFd7H&ov~aMja#(>DGduAp3^j$JbV4xv{Jfbm-pGr09XlI@x~Bdwa)x
zFZ3hvV7a)c<CU2Zm)AA<_>80ATpvy?74=~tdO+~j{k{1zbh3p_4A4j^3RJjU8p;)+
zk+tovP^sVl!<~EUYjz?cbNz7V@KiX^?vp?<usJPog2{lg?;|(1_!=b9f>A*tu@y>O
z1SRJJ)4Y3Y0PUO6IN%^U7`Az3m9;1|Iz^aMY<55%z?b2y)qnpAULPu+j2X8?&`dy9
z7?2q<i#!@4gGZD3h)Mt?2P)A|BGZR-*5(Eq*(BvNu#zSa1c$_VNzTLilNdY=L7wi0
zXP@}iRnh!i9fFS81eD_L!~t*Z)CGpq>qXi6DURJxztzwx1Nh2E-YY2+L#nzeijTjv
zF3F6Cq5Nnx52jsTQwcb_=!TXM(=QV<M97qC*TOY>2BLmZlfB3zqzV~EEUCN4G062w
zTu;>1C*{f5jOAFV`zqOS%;FGaXCPhMjzNJbORrM|oN=zP_<3|BDSaeCteI+7$`2ZO
z!#5Vm(`B7q-cT?g!Hb}yzq!`Pij{;8EY|qToRtCMyBwS!e?<OsJtbAX?;9+Tf8T7A
zIfU=9hga#_CP!Rnu8GI_rDa%jX0FX5Lwsq=MPePID-}2vD~RRez2H)&*w+7Ryz5*_
zrP}N!tlKxj{TTjdBR$qnO-Damw+S7zEo8o1K~z>1n%B$c2%}caWNi~mtb2)X*QRz!
z9}?J*bXta#sf}a%APwe=3Zxo5Yl%A2etDAg>}faX%J;{}OL{KtXt36(sGe;$Dj1et
zYxdIXw>V2V2co9b`6Y?U4;8zMqk}PqJ$K!6yM&%(FQ@(RHY{AT!{=22JJ+uGKrE7&
zNjOsTZK9{~&imiNK$8ht`~Po-`rp8TXoYo~b$S@@XH^7BdJ=U#SHR}bChBFaWl-nD
ze3{V4v76xProRb<W8w{Y-#p_EYaE+?ufmM(ZljJAwkN#^#rbREE;*JM_&x6c=Q#Sx
zgz!N4)kQD<;UV`L#{yL7(~&?nFe-hpRDZCgwD;(lc_ibgrSgs_C1!t_L1hGVLq2Kf
z+3o;sgkz1HfoqwSqGI7?F@a)IBis=7N&JK3>#5WRk%MR#+y%Gh8%e|m`3E_O?1XMC
zOiNEj2(TG_8M1x_zVZ|c(T39+OGu)vq(hdcAebwrSZbHWX18qGX!B$Jq0%C}=GHuD
za@f#H0qx@+xy1rEp}@ohN<%STFxtz}ogN`z5DYhQ6Je|ssxBzrRbi}(7wilqpt7XV
z3&&Qv`Y(!_%4T|olCec*Ln0?Ffts)kbS8*~))ysGqbHLjRtZjh3OVD5l77v|mCCp@
zDvN=g+$_!LhoZJe{2Z*Cknd1=McfycFKJX6W|6={)gf|CqEov#;!d17VK=I6Cwm6w
z)v6ZYgf7z4^;}E8*e!OrZ|E@=vck(hGx2oEtVIylZ|@rAk{0|!_{ls#Q9w@^=dL96
ze7s#fP@&GI?Hj6}j}JC&3x1MVYB{Dkvu8IK9Ab=B93S&mY+$#?<>Gc8;ovsPl}|pF
z6cVjR2_yXof$|=lS1dI3$jh;fm*DIX+l!<gGQiI$a;7^Y?>KbD&OJ{OO9C_TfM3<a
zd}z$^Ls8o-sgtZ04F-kC>W!sDs;`D@FBsYwj6BuClJ8pCGr%wB@#^YS_P8LJC_kA@
zH9d>ubkW&*f8R8hWW7|J9v;|m!&_~%($z1cW5DfP@-)^E<ORmxyX~>zDhoRDSe|4k
z<GHQ)-qUo|9YeT}GakeL;{pGfStj|vWtL(7j|{bu*?(r0{Ue0=msw^1n54fyhY9%!
zM`ivDqJL%5$c%-7k<QN8`d^7`7M4JP$W>isc|p<Pg8@beM0J14edp@M)zYQZSQa|!
z<w_c~O1iho8=0AyL`b^C+pDRE+3MHYo2kdtxVKlhwE2j~^td>fxa3B<t3`O0=IHX<
zNZ9-5*&E@h=BLSq<t54%d-91zh<b$77>l<X^63PNM)-Op8Maq2p|9ep@}gTc1OG39
zt$*H-=(2Hg9S{Hj_=gK5{MT=&Yv*9|uT@0KahkRT^a#P*uc!qNp!qb7)Rz*Q%+#cW
z@^NZ>aXb%WdyFVGVb*_(#T(Cjbvg5X_pCY|WzOJ%D}opQXzgiE9ZPnvzP?6Uu3KDr
z^|uKNfz;&(<HWzvEnz44UA3t2lfB{FU@1oB^St_oe-lhZm`6+L0|Q&i1$+ga*3jBj
zv0+9d&w#t_0ppA_(O2usnX$JQKxwQI@05w;`7@Tj@;@{hvGm8ET>;@U5Es&6-bkbj
zYhiV;Y5t+Cya$RbcqF4_wN2j(WNr+hqBUnR8<*A*D6_6!&?wdAx8uU|wlR?_e{S=F
ztIpHI8M%JQ`~B2wZ$nY>p2zPd*Pgd=?c*zkJkBhk^2AR&Bk<gK*D+Qy=*I8&Yftj3
zYtBjKcl5HC6|}j@5rsiQVc}}1{22yM5U2e3U2a%hF-etOi+rcQIkm~r@6>v@)NHQf
z9AJ~Ge3as)4~J&^aE~jk3N)>jfZ!&C5Yd&Zh}B<C+%thgKnWvkPdiZc)Ejw!Y+8vm
zk*?~EyFV1;Xkrt%|C%tZ9<Yy%o!Lw7nH^4TD;|yWGuqjTUOryx3+)>FS%5t~s))}!
zXQE}ynI{~1>ykHLEv&YLs}Qv>iS9Tg{f)jm+aRzsJOB7!*yDdz&2-Fuvd~YpEiV-S
z0OEhMYV@s*oy`9Ay1C@CbX*rn*nXrIkr0*~Z`4WIbUdKY^pHdQ%~(`$P^svuN)d;V
zP|F7Z#wXc6_`F`@xy6Lxx45?TUSAnOJY7&yQnI};(3J&SFF0NQQ5I%;AAxgq{e5`2
z`_-pAx|x}9o>|<|qIys~$}=l2ER(#%MLn+VkU(M-ge<|BPfE)(XNC?ySXtpFu#g~P
zlqS+hkOWA!t6dlvt!c2M;+hh-T~DeWBug?yRZm0NUv^|KUTiM_>76;-Nn|fU_LoR@
zk3LK84nfrsOv?|Ek4#^p-X67o2O;EG76Ph!N9-r-#cmmY>&aL%jTYJuZOB-8aNii!
zl)i^RKluJgIVnZd(-R&Zz60|jk0x=mGWGIS+|z)w<K7~^_ogd4`g+ePfrePZhpK{N
z+U1z{yts<3$}B!)Y^%_1yn+Ppdb%YF)4;!Lg!lT}Oj?OsKMik{puj!OC~*+pER(e|
z)(+^!M0#QKK~d*inU6dYDbMDjt|11#pzDM_B(SUG;3MHcACZotmvF(DgWn+eKp#)`
z$gMPLOFtW3U1v~VSUeuEOOY+5l27k<Pv)l2vn>P|+|Flg2QN<lc1LEdF{;Wf$h(VP
z7eV@Q79>E8*!N1t&QZ#jtr2-oi7a=&W{NrHjKWUe7#Gdxv`qFhtJr6v(P<P3bC&Y`
z)$p~I5Em(K(8HbS#%LxEe&VIs7Y2R0zN9K3m01&wLcmL=E>C?`O4e>iMFpP!Bgw`J
zc2nJyAa6xhKOlj#>J<tl(i0c<*U0ani8I*Xu>3A)p5D`yQs41Ch+FWDKy!Zckzp+&
z7oRatc88a18>JG!-qDnOg8W1p2g1iu&$y(WqfJU%jTqP)9T5PH>jUU+%%JRT;8T5I
z=$D*14erB-CcxlJGxBc~GL!SM%Nv5$E^OEk+g#)a@M|NsEUm6KJbug6NjGY2E{v_m
z?FUg9WjQ>+T*(;7yS{T+e&n6&w#^XmR&y)n)Hw@Yy+w4I#;ko`FY5JHl8dl~e3#~T
zx)_-BfI#e#?*SP=FupS^v09yacPSs(m*w~G+iG5}bJwwJi?n-54HR6qHRv4#AvU(_
z9PONEPq&SNog*WsyJp`Nd{Fw^HyjG|2hoD__?=%Lll4@@06{HYM-#-({#0)ucc4DO
z%PG8~`l#a~1pXGs0>(Sr`hSwn0-0uAx)DaUFZ0a^2(#<(zl^)M=}{^JMU|ww>0=VJ
zj(&@p+lGE*CAhzYTTE#O!1@r7RzZv;5me^}z)}S?28i8pr@nwIqh-QHb3d`&eUGxr
zgwCvm2ZO0nLqRjBp25v}l_G-xW0c2J=MltskT^U%0oEf{x;I`KD73Zt@qK+j#S}~R
z{e`;Jv3MnejaciiXwm8d-$_!DAIOtG<(5pN)K*#0a84Qu8lT_I4~(n?{4I7WC>jUM
z9uBJ(%8*(OFbp6AFzx2);Oy*;rj-d(y%qgN8$}owmktmY50-@Q%?z%tNHr)TCH;1q
zdg04-(JE3!sl?AGZG!-YKr5+?p+He6wckU@(VjiTZsc<pK!m0R>WB?4{&;=p)_1kW
z15vsiWn@9RfR((4mEWnA^F=GRe?pJ#d-7t`aqbK<6-yt`3&Jf@noXj*nZ9PR`vwLS
zxlYZGFT*X`=!Wl??6hF9+wf49hW!B*jJ=l=CS!<V7^b53-Um2VOcHcLE!z(nEM_IQ
z+sddj2r0&a07GtIH6V!b&?cLpuEN*ah#|yWwPz0V#eRYclOVy$NBxcWtuvT2%P)Er
zDG4HoPk5C+s0;+lMG_{KD&oa_&oXKN8DRmV!<`j0W|RitH~O?y)DC<i4Tr1h+Pb9L
zH)VEX=_ksCp`$h6r}}+ejeD&%(HF>FeZ6`6$q3i9QP-~dJbpg!4V*KLCcs8Z8oCiH
z|Lz%rydU~H1eYyfq5WMA8jFe-Pl(Qv0@0>XcAg-U40?zrOIx}8xes4|>X^wUKgVe9
zwuz=30kr2Kt>a3W&Y2AU<W5%9*f+Nh62_E14-`T`bTZLem|;22z1~%RDl%KAPuNIa
z5>!B%)_yqR+*lWY6DG5XX#z3P78BZxl$756RLZhD%tBG?;ySIuLDSys#i}}x`Ud)r
z8;o(t68mdBjq#wK1pUU%OoKa&pSp{A<1|Ihxm&KF!sInY3j1z1X8(v!eK*VtaGGqq
ziU()(FSe+CFTc?Xe3m~Z+8r7E!v2Z6=86SByLZS+DBtpiZAG&kd}v+tiaJeeLiAnI
zU8V4-iB=7wP)>E=Uj14I@jESCmLnOry-BX$9o}|Q#attg=H;HSdt%^7ih7ai@&Xk^
zd7q}my%F|ZE+S}6vVSqC&2~76rZr^_4Ounvf?>TVwGo;AtQQL#3&!-cr1uwAyazCB
zu*DO(qIXcjAVYn2G*)<Y4Q&?a23?`@u@eBAUS@{*x~LD5eT0s?Y)1)|BQz{1>;#N)
zY~uC9Cg}Xkg9v;7vjDWYw=ahqlh<>yXTFyH=u6kpSD!eZ1v@=XnrM|Rn_T+Nrj&Os
z@dVDrOs@B%9_l1ddG8YVLW%)j9Ghf4&YLXQnUUvu@6hAzO~DATj8&`Fk(x=V&u_MQ
zqSvXhOY3j0UVRSlHj$_^;wr8pTDC828zh}Cft+S$!izF+SjDuSqsfO@C7z4qT+$o;
zUiRw14T`kuotq?mQF{c#bxQ2UM{jo_j%`sR9M#Qli53s9XuR|ar#6V(HY0ElCnMGt
ze-1B(yS>y8Ju07Kf{`)=l;+&plwZ41F?#IlC*qY|?H#C8B^e+VCbAm()dJ4^h<Hdl
z(1<8kE-Dai4W_+;yZG@<-gXm*ZYo9-nMR-|lz<=m_kO-=kX~3a%xC!7;9Z5xjKOh~
zBDBWTZ7Oi%DZLRmw0>@l#!j*g0Zs-8QJ*U$WW0!VR33vQKDYf^+C*RjJ>=lNCe1e6
zxO$M08fb%o(EclIhC9cb(C+*`JMX6+<ZD8SIWsI#mI)ocFE8F>u^_JRIk&zo?Xazf
z=((<TBk6qFcdGSG!ZD-EbIH_uQy3N(Bqs2}TJpjrc-4yFWRupWJ(h1E0kUL&k!s2^
z+~l30@ldw2N5Y9*R-I(LXyG2R_yDWd4fyrF9u&%1x`z>WshWf|m~kb*37k<ics$%`
z<5oObHXAGvkzlSp`uD1CgolD{Fu!BBLmfIvwL+qsYFxdaJ0`s<0p}Z8ZIliICmiVQ
z9~+;5!s=N}50@T{;=ws&l{ASf!9NV|b?{t35IFMM67euKv4OMl(rS5pOk#6bbY7{h
ziL9zY=uvC&yJDXl@H=$=Hg&#|jcC!MK-`e{o{70SlT%TPv;0*-L;jgjuv%DVEeY`M
z=s7fwDo4<!r)p7k*W;nAeLY6^S%u{IhIsX*R`LA8yzdA=s1rC&K2*~%p`;?M2=o0J
z-9BzZ1rsHOkh51L2Z)uXj1sMg0NCILx@yNdw2h-$URpcjCDV(i4;D?pnB<%>$G~q3
zf>x&mtqFL<5b#w3YJprcCvf04e`Qn>|K@Z98|06uxq736<7#^dpo^n?#0l?Wu5Y$B
z%}_~Qo)q+sbhe_ssn&K$#WgKIz|Ju{TA@7>iAj3om6~;X>y;wwbz?yU2rzM`^HuM_
zt_W9-DlD?U3jye3^YMnh(>un00sN^DHk6yE;SsK{p?XmpRra?DXeFRxJx-^1kWqi1
zV?Kqft{r!+(O*q<X&KUlPmzPq%laNH9An++7gvzxpfP4igGz;20#&6oa+c8q5v%hg
z7Uqebvj%JcZ=>~0)2ed@Jku}{pP77A{~wKF?cp5#uDXfO88pSKzYc<16B)h^_qrlP
z<-vrhBi@cK&)FAJ<)R~=j1AiRoymlWc=tYn;rPolUcyQ}P}Sf%T5ZVR%JH96t9TAp
z_ToiZ8Husf%WfC?d{l7f9d1yTQc0B9I^d?ZwwB#?;qDfd)>nMC^!bTwv49Qy98<kS
zg8&sgfyI|h-GQT&*~`-a3q6VDViuqvYy<-d8Z?)%k$?GRwQdKt$1AAt_beF6vuH${
zHflLp9gqT6CgH)6=S^J;s4rmN26W$5>32sJ)>^X@TbRVH7QzS%le(W~KoNY^F5;#D
ziNLzJyf$OL%n&v{O$>Sh?aBV05^>dvTS<Le*#-Vi=^M+C@6pvf;KPMu1p*u}R=|Cg
z>#NC8-^`#T`EWV1{=T|<!}(nd1FhE!FA>evbMcD(<mpwSd7MHNwxtk@ro_$OKbc>Z
zU8%+-5#ecq+(T5G&S#mios`U|cj}Owy>ukN^ca$A1F~d+Ba(d<i5iP#iPa*&-7%-$
zWD~2LvcG@gGSSPv1NuaE8m(YES9kmR7}4Nk#e4DGwBU1%)8d7{gV%2Ly^{9rIJ2QN
ze({pgXt4?MrxD6Q;+99L?A|Y}AIEC9+=IITD{@JUL4*@`<5U4^rUQWW<n6)svw<@e
z3`_uBJm?FlPA-Y8ismpSE<%>Wi1`x5Mg?YAv(3|zD7Gkykc`S^Dnn<Y^ui9hui4(0
zyB;?}qBc%B;8uX16*me_r_ppDKGYn?*^bSTFEr4x^VSGkDkYLZCtRX_U45hr*CC5c
zmINmyb&^%0q@QFA&kb<@WG|{SG*;aRh2zomI^_5hdh#md4o=F+4XP#TjDaL?jAJhv
z!~x|lP8r*CI~id5T9|+2sIJIcgLV3h^C5)6p#NG7ydYl!w+xkS-+`lx0)VH2ME8$L
zsxTOr%{4?bx-j}Qh6sLTc3r4FRGlT13htcH&2g8pT7wQiR?PaBw%x*Ytl!0V=QE5O
z<MxhppfB%?*J^HK@SX^HJQ28?B{piKhdAhTzg)kng1@%`WGq#`GHPd7KzM;fD3kp;
zWMzj7B!FTlMmp~?VX%f+Cn}TN0;-ot!Q`3OoymDy9VNf}JVhAc_zfn`UaatBIZWOv
zt}`{v>@;^*DDPR5=ZdMTw{`OWMcO+BiPk0EqGj90F5A{F+qP}nwr$(CZQI^uyY{U<
zCvM!oJL2?rBJRU_Uu#CLnVDnc7@6`Cxm>YbeI6)|ruFy>Xbq=H6LTWX5?=?Xy1{pY
z1bFousTw^G>LW`rP}&W>6x>BM_5{`~nzi3sZAdG(uY^lD3Jq+$4wjuox74tj%g1F*
zSS4@XGmlshd7y|*lA;|iD=`agDjk!|DHWz9$OlLVW|6F63`#;zUY&r>pJ#7ykC>3+
zMCZpZ1Dl(WQQVG{#$}kD<~wCy(u4rEK}{#Uj~!}4xGS%%H_zA8r(NU7mQGgW%TeWp
zV(2^d0s7%-vjcvFx-g^*+R6)G8n{VbU<HP0SjGLXp&#aJi9l3x9(p_=hR|`|qQXi(
zEXRTjg|@ZO=EVdoatt~J9L%j^ic@P5e(K(yLM1{L(?<oQ3794%i3TN2V@)>WB|+|d
zk$k(^m|8pkFFm2qVg{)^>i$KTr0_zyR{-KY*h8`^|0D8rsXu-viTys<30-{+Y|HD(
zHL%ZMzWCW&Ah!Kj%_$Xox4g6LFbi!^XNI9Sg{2HBt(Wh+E1539d}xpX>Bq5dFn!N=
zHF^RyS7Y^sgL6q@v0`&OhQm0BV=1Uohz5Ott*Wg4hj%qaChe3xL;2?IAS|Gqkh;CG
zsrCatLjb7Qyt9P%>EGqQ%m#lclC-N`Q8gJ5W>5+Ix?_kmg)N|8&R_3mFHRPS!P=hl
z-uUCTC5!X1fu+$4{oq-|-bm)(iQcx>CGsUmg$o$Ot{GI4YQbYL`RJfpcruF-kNzMP
z1hx-wxuGweql_o%DdRjio=wgsLOwx?TMR@T8#6%zYrM+?P`ay-QU=muqJkDS)Me>}
zyiG=&lO_f7ZUvi|j>9H_?<vTAb1R&Q2BypbOl9*<iZhZCVC18bq?N4(#nr@3U4~R1
z#!}*zK$K-#{qi-_?6{5XuV(nTIi2n03!e|+8Gpb@;3G67UC-<0;@YS69rvXWfq7Pn
zaWtxoL&{**Y5Xo1#NlZohEEkqfyHg#!?ic$@-nd#w{N!m{Fr5s)NDhfGM3?uy6;-H
ztap{yTO*8!3QrX0=Z`JcR8p%UJnW$}q_;WSg<X(%l6u4=%dOz4x`URN_QoIrzrXej
zAxM|Jxu8F}=@=%S7W;m+gni;jo;CtXGcY94e0$lK;a<{=s_+DgWp15XNl0ckQ`=My
zL<u8-X2o;&YMyQ}AM<TNa!b$Q;bp~vjlsMh%O_1EUsEi7v+8+!<bG5Wi<H;o4s5_w
z)^=Omz%I4C{0;Z5!x!*!#ZN+gjayaadP^0@#6$4?C%n=B;a*F2?~BeihjhP+cysi~
zmxk`o!Ji{o3%||13SWECZ-S55kH0(YU+|lbjbyzo=Sr1PjA{}3GjD6hz+}E#Q@bWW
zYn)cuo5(SvM(Qfuqm<V0@Av^^#c+2J7BnubL(0;Y-o1N{<`()7tbbR&6Mh%EYeDaY
zt_ohTIeTd`8hU4btc+od)mkbcUs#$451RmEX)7M=6u+21$0401lO2|lk)_b3Q{JHT
z4dKT*q@SwGpZ^v|0z1V@k9ac6pOL^>c0B8w{ux*ta*8JxK*6Cj>nd~;nVgV~da4SM
zs8zN+UQHu3l)=~|UG+AZ5ZKuFP@8_<#gkq=RFUKoTcg5*twvmRWIk%K9T@j!FZ8;g
zln?NCP4n=D64U@0++}piOte`I+(5o|$cnEd9R2?4M1G7tgM5lA#*%hZ8{Cw4SfKs1
zL9e1a(dE2!<NmGMbp{lNCA^1^uk%?U^afHR*;m4-`6sgybVHV)vEt$4#Q8h<iJ+${
zRAvjl5j+`CZ(w8sVNQFhq^qCI`tq%llOGb=cZqbGQcA~zblv<TgUz7RUc^SVA?j+(
zeiqTcE>5dW&Dx>s{zt7|=7Lz&?&(mlyI*<b#FJa;qrdOkX)$|9!m3R+*gO)8(_T&|
z?qQoCxfK0{|NpUJ{{krUswS_sfAktaKd|;c0F=!196#%(|2uMTz0jUg@EhRwd{*sQ
z)*?7mP=X#1d89!+Zap(FAhwcG;?;#|_-Qa*&+e}80zJcaZQ$K;W&WQ%jL`YruW9y@
z@Hh*irx@ky#ZYNdS@^#WhgMQ&?c;Ih#V#x^cF|KZ<A%U+R%+rCtiRi$sf<b(-9>`4
z&gxxybpHhYzDoSY>XZ?|b@oA`+&?|P?ZMG-j*jkba;ov!ast8bq?4S{GuU<+tw#;o
zM5ThXeZNvU@>vIghgnqoUO=tns7eH=*}}Wz5&i_QUVRu$VWZ>L&mO;wZPyEIP@mKl
z#BjkV6INC*kY`98B}DfUeQGey2^CKexHlvAVeHbbi>k+Z_B$U`{Iy&_+T(p1lc$<8
zIY8;TaY+no7xeOh=GVjlLwGyRU2>+-yiL#HXctjsKMeC6@DQl|B)X5%dCncqNNqPP
z%E87K7EM&4U*9ctReV<M4V<N^FF_pk(9}xsI0Ka!zvf1>Zx<B@{O39C!<ll~xdoe&
zCAr>y)49gska9ali0_tWOKwd;6B@icsDhT!l!1AC3~5+u%Tjz1LZ=<7`Q?gt-E1$h
zz;W1{Ud>2|fCax%wW|511}NUrvegCbA?M8a=yf&vl+20t7aNeHF0&UlR2wI4lI~_l
z4?Nkehn*_J;TjEvzI(J(v^Cr)r=gZFHxErxoCpmwwpt#c0gh7ZHIL`x)tJfSn4*T{
zP^*JQQF@=q?aJ4hQ35B(M_jp~yPBTcANQk?Nf+k*i$n;m4(##DlP~g8eqOD8_CZgP
z+;a}FszV4k1>gtt2Y4nI_`gImpJ4wUxj{%oTvtCPKc8s-OvqT7|Gxz8|H0O+`N!X9
zLk!`2rZ%le0S<w#cp-af&Q1b|Ml49^x6`U@iXq*zPPFx9F@?2b@0ZE$WpnhR(w{rR
zdRJ4E(_?oN*KJ$2JlIuvFR`*yCX6oc56_qBi+=pNXUMG)Vy)^EyHugS2%-JQIdAd_
z&wGpzdgG`HY6(fix#63Ff?F$DoWxS$&>wRoko1F61f_Z7;Ihek=9S>L3>$+hyuUFR
z)=Gmm^?9ZB1%ZK%A_Wb=m_f)kMgW@yL;Hw~d+2MX$cbWb1s?mXP+H`<dF>Qm2S|eJ
z-!45G)TAHPu&$7sP8O0#9`$F<g5Dw5qAuQ|hR@x5|GvJiMbiIR8F<JaJQXYG1}{FW
zv;MyGDZGmak*RZq?2=5EEX?7X2$eA(6GPhI-xY^rfIbtP<zr!90{RNAD?52tLEz}O
z|Ir^X6KmziGiJ(z8^S4q9hN&Ysmt1q&bf?_?0`=V<kR%ux7z_me!O|DnR&&OO$sXx
zP}7haXP`29buGWH0DR&yjpK(zmx>e?gvaVQ1NOAEh_cObmt$Cmw|6|<s`po{WBqK<
ztMf)u2@Y0G^TI86(BmH7dd;>Nm=gQ2J{Q79Q#}npiopeeupBbMLJqYd$7ct?GGTs1
za9Z#Jj|WZqN|6v7?fV7N!Wu$HTMrC*Aezg`D}{z{0v$whNI(|$Nxbo#<fZ#r%Q?|f
z50lNOFQe7VmEb(5evG_59}>d+^x&0ID7`xR*<FBbbOB~_6NgjT-rUw)Bq$)ttC23?
zN^D<>lnZY(=OHYRYSW;8trQYJ#pZPpGe^qAJvmaOE20fv5YuIm77)jchEQa56jej-
zTCBXV;7GY`jT*){csz&FQGtAiT8Yguo#aC@UouXnX~r1I4>6gic}oLr$W0<10MWSP
zh(Sy0Tb|*p*Px{#d2!;v+uPl;qdRl*G8rDR7$!&>56{iw<h3m?z)DQG_Nm}xM?Xb2
zHz>>Q)cxt!+S9zUczonAl{rEdU%E2qq$>GWpwzjB6_U^^Jawc{&c2K96Cr6}h_sF;
zCweLe3(MgTP(5-{2_p=Sa)u-~X2qijm=L~#9y*57uaYTA#$u@{Q&kbl*V)Lpx3bJw
z-t=-tGh%$D89xv&S#HX*6-FlZ92E<l=;bOuePCzlV0}Wi5E)e7zmf(yPGs)<<Blph
z<fL{ziF7HJOr7N+q`sPs!x(>KN^xxpfK3^7C{`vk<*yY?TFt8{=9~%^?OedfipBeb
za`#uQ7&M_>^ljwsx8$nwRaR^wrw*b9eG4AWX>>3Uu4p!$>_v-As3s#c3~CePA)C~j
zierpBZ62r@JQct@fTu`@n<nrIy|iU^G+igx4Xm|ycj#887w;ZXjA4QlF#0e4RA{_8
zG-pt+u2=<6pzP$AojZs4FW{+Wn33|ePm+LvOTkny-+J-J(!^BZs16fn&}gKvN~R-p
zYN*NhZBu1NDR)pJ>ue9z*c{-q$X{-3%S(i5mL3Xu`nXkR#=O9<kU5lP%bb}S_O#he
za_3wbLIXZ=%lJkOBEjr$3#01XYNUJN<&56Gl(^BFLw&+&+>*iUY2`J#?JSWag3rW6
zjeacv@=v#9yA=yY#mp`7I5Lqt7qPBd9;2+5ULHm+SMBjM3REJD0vnsVknNqGBnVfz
zx9v(W`0PbSs`o7}I&Mf;`{)T>q%NFYB2U0Q`PlUf?<llIYwJ9Kx=b`gW)OJUPCEe|
zaX&;xyt&oLA)LX56l<Y;Rg;ziLu2Z$<kq9qR=b^|23(*#i`^wIsy4z$eqfum9?G~I
zsbbzuS*m1Rsi$AH^l%Qjf4hhdxky;0M!Jg*ag&@RyAcd7w$ff{XYpO%i_-P__FEOw
z-Voa<hV{c~-@ZO=3&SDQdx(m$%O}J!$JD8YY7y)(dGAJC4UKI35mRh!)vnzBzSTf;
zX}5vbBje>EHk$0k3acOJmc0D@#pe-vwCSz2P2206N^mdLep#%%84%&jAOiz|Gf&J?
z_}JzEX3+hhI;mo4tlBVO*+Hdw=VLTXrM^${0#zEPVd}t`OkU1Ig=ctFOcz#{SJ5wi
zeA*E{zG^_G(t#B?P-XJjDl*KI_z3C?RWux3Ew%wAdVH;hySiB*E=%DVRb(L|uiSGi
zwKNiA{)eKtLWk<{$Y1HK+<O*GLM9agYD0QPHrJQr4fOLUSG$4Wh*3<fI<f(9y$<UD
zYn-yKmHm;MMUthQ$ZQ`WX`Y!%Gv7$|DY%kJms`mA`QhLsxcV@Dq?$A5PE%3EJ_dxr
zK!Ja!d4_gR*Liq?Fp!Hyku>707K72O{F2{h`V-{MAhbsp1MM*tXIj+V!gi$v%)8OY
z;y)?sgM?xnxSu?Ff$-0H)Y8c0zZ2BWKlZ3t;{VE{XK9pBV^9I4sY3M=f>K=wj{u4z
zN*0#exO#^@?Mze-;eWq6OhdeZ4IPwQ@yXNN-_x&6-;K>#DChiiFlY>2S<&a#&2MZD
zN2$`LFtdcIF=D~(@IrUfX!ghvALvh{+3&eA;sHYu52<?$Wst+eEcZ63_on=b?bKj?
zi5`~Il+7QcfY~f(0^|;Ycv(X7lN0PmxeaX{(>wEkUGA8~1F!*bJrd0}17-FPpgM}z
zm@|i4gCgiaL-(T%6q3mA!wX0>^qbf6;k>9?a!VN)Icm`wyl^7gggrB;1zes82z^>t
zHmgx*5RUY<ufiOvOJX)Vu}`<(@&vU~CZF2qd4><}`K1%u&cK_SM{r8*U*g2#!cXm|
zuYa)55T5VpiL6;k<F7cJWUj7jH@OcU@OwVQTv7Q_R)cxzN%nQx-%w-TFvEGbc`a^T
zG>MRP&s1)+f(Euh&#>pU(n|wn=56_L5Iu==MnwT>4ymBjx0QqRp|a`OeeQhPc^UX{
zcYwStZ2+^g`)y};IO%yEiXf<K0qCsGyRCsK5!MSMHMY_Vf6ab>R_<m3kY(Y51%Ltx
zXwpxyA%@(O)6RKf-^h!liRZ5-_;oe{B+lk&GB9Jw8~LGwF_{VBLBoWbyu{a;JWaen
zxrbbyiHu*Pb(kSuNrJ4mf#pR5zO<Oy*Q}7#-iE6I&qo9>m`bJXvnWeddszNf_CJHR
zS3(WX_o}emq*&4_8<_dBT!MH+W=bOV%Z3Srxvi=+^uy<C5^Z`OPYTtAk>z_5JuK{3
zWZqs9D$m}x-4|{}NPk3W>1=Dvh78oDKWI34(rm7Tx4u!uJDVxbdH2WVq;!wj1r}x3
zXzyp9s@YXrm&cVY&4TQ*GuID=JmH6NO-UUC>laj`SHBfMQWLl<5o+KM3jfV3GHMX*
zPnD7EaLw+h$RXg9hBUFV2vIpqP9{#&AZ%4s!1H5P9x?)}nUQ~i(YNiJ7S53kF%d;3
z&T3-ra9Aqznw=m{<_wu8X#_*ut(@F<E?YH8vzyWWoU)J>)OtGAqpl6|Y-pozUl<Uy
z`U`DVK)mPDd${Q}rrfK+a?kVw{{7PF?BSS}yKIqG_qvNA7VKu`CrrGr@)s)D&Sj_W
zjGQ>VM7>DSdiVh==%U4Zr_-f)b6-f7kS4>7&1;nW2fg?PGUO}JQ}C(KynT?7rv}Py
zP3>{rP1wUa>QuFIJyxO)9l}Gl0;{ea;!W5w2W<(CjaiIcnV0GLJ1cnQ{l)i7j;9AO
zA_qpTvqRgr$0BHQ<^9bMohdGEd6dO>`x9+W>Pe*UH8pmcbpk#v_LLl*yD{~WF;N5v
z#qs>yA64pOuytU-pb9C0Q|<QB4cC!m9BKHQ{V2_ii$FqTinWkenZYqm3^`E8&jWrx
zDV7;NB#R5pHk7MGo4Jf376jwH{Ovh|_xyUF&G`H~l~+3A+d4}!DXZ>LID4ANv}oFM
zCCYM?-vjL#yD>Hr6(JJL-?V^UipV0M{hn$&)h)wub*qqjJ%_D%uWaGkyl!#G{3?9^
z<YQ~5_jj@V?G6L0r!fP-V)#;;)_xi7C0MES^{}%FY0>ehGDc(Z^i?J!iNqFXoiYr?
z(_sUBk}2f+=8tM-wF~pZHq2T<3KcD=Tq&=_L7B$_HHs*#GX?6~NWHEy3+*CR_7W%H
z?~2;dOO19{=wn`Jd#469Nr9V277sS7o14Io1L6E=H0G!JcCUCJeC>pr!^O())vE6C
zh=MCa*O4}MSS|eqPl^bCeQXl-vwr>5#<sW{@eKgQWZDuPX7UbNMMSc9T4|>z4-W^0
ztv_>UA+Bx^wHMfkS1|KF&6o{|{G6T_aSD6E^he3%nr@6J2kO(`H4;gm##ZcqhG3~>
zbBQ|xlG=Jy>Ml&@3uia3PbSR*nT9Xbc~%)3ZB`)8m%D~aN;Yf34<<36HRI)OqElEX
z{2A$BdX^jC6D>Wb27E_YK$Qj1<BRw3DA!9brCwY8yWBL#7iI3Wb0}pTkKco~^3VPR
z=iu+k_xjENjb^KS{}0=We?bkwcnaJqKTtyk$Un{q>KYl_IsErb<DI~7yYU+#_~sjx
z$e}-M!v;=ylQ|xOA2z{IjvzFv%9v-*I#t`!6*r*Z^JQiu1c`(O{V@Hd$DIiQ9tfjP
zP1Tc#wK(vBnB%Wgj@LKPB$B>Lz6P~I8uk}-d!YQ4gtZk25yk!vHuYAa@I#QW5W%bj
zsHkzhp9ZQ~U$&mnW<U?!Gp9aX6abzxtY!;%G42u?&uH?%fQA@|*NGYj0#w_MiUR#G
zqRT)sY}cR@!VJn;vLUevaqTmnFrChN-@>_D0u5<s#&R>E24NMGfihSAxUC<@4OMpK
z<qP}Hl}mgHZdGzTYi1kE@HVIXc}v2PJ;D$$=O!WR>cnZCoStzUlPH_|YQzU7T3T?n
zzH;zLz@ju-FxMQEbs#5l#AL_s*LmrfPBQ&fd3WIemZ_7b$zRi=59Yi%+tZ?wZ5=^J
z9O6ABx{1W%fmSKUiJfov47xk94Z@rnGUfMi(y9HJ5*<!<V58zIr~+)4hSg+Af`w^O
z?dz&C5z0!>GCZM9R8K2zRw%``AZ)GlZSB)+Wpi^B_Ys&a!UmhX(S8$QG$%;Q2%nZ@
zizXO-y?nA7D0BFBq{k6=yM%5^z!)vv{BExUsvJz2^ls*EtLop53DLFQUj^l_ZeX}t
z0?%<J==_RB&@Ug>$pt_A2jK<VtVs45Fd!`oIdkc5Q8D3&G&YChPcv}=bz)!!YGDiT
zSIqf{d%<iEPSLb$jQQsXacX|=ZfMJ<yuRLY@P7CYE*}2n;np8m3>(dtmb2)Y6pt00
z`irqs`))F=`mS3cP!;$;M#cXXvCM^E1s^{~CX(>~TpF1g|HI7Zu*(0o5Wd#6pY{`Z
z{zT%MjwlhY?`nq3C<#t9*i40La%x!{E0R*Mk7oVr?V3bADY@V@?DrO^pXfT<eS6)0
z(Tp`0K$J}rl|>BqPN#F}1g815yGP0ImYd(v#T^PS;yW_d&wq_%ZG{fEfD%%rryqtk
z4LhO@WKiXZncsjRSYyDvXF+dn4+@BHlN5kGP1~o-8CtI9w*co58Fh$cu1~E9@`<E>
z@|!a3ky)}>4sk%MV<<3{o<xio<t!eVm|BcmlOE+uUmV`W$HmFP-o1glk&`V5P4XfN
z=UB#KfsFv?f@H?nrFAuP_EcM%K`qmzIsFl;SO-&v&3-Xy$TM1G)^zW{F11nAKgJQ2
zp(t2riy#UC^=N%4EbV^r4$cV7wrGatYfh$9I0P+-|2{VVfH;bQX&WLaxE)bF<R`+b
zBwjTLdB6y}`FZfrc|U(CC!H`1<T%$aZ67WFF%zT=6$x)bPZvH>;P^v|%@WNxwj)+u
z8IN5aqkv|kMwS&d#y7eX?U2q{J^)!Eg~8C=e@D>-)6tST7L{d?RzUfkfP%H(WX`r1
zKf5pddUAAdhM+ND_SP`3_jI^eC)78mDHt&l@_O9M&|%VWw=6ly00Oe*F5HqZQ|bKB
zqE46~WrM;^jpg=YQB%DIgs%^Kywk;7;yZb~x?k`HoSG^|5vW|!7B<2u{j}AvrB;#F
zF=RLZa}pkf6z5`G#O4=YgeKdZVdp8>f)At7cv9<q9Zzuam`U6K&(z~tEj`~DUnh3W
zkf7!+o^Dh=UYa+T$)aCjIJP(bGc!yD%=T-#{Pn5rKKP@LttJejUpKzy<w$`Ma;y81
zlL-N3JrC9~Xtv!sFYZ0MgH(dPgLVsJX}a<CXtBzr$*57$o@g1QDlUog7f&k0D(x9$
zyCj9k0rfj9>!4V~QYgF@P!P)sD4>dZ-Q{viYwO{m9wg^P*LgqF8rkO8@$mC~0pDIE
zt{>0$?<xvesboj%n(iW0L+YJrl{&8EXEaOOhfE&2!48R_j%T5J!gz`<R3&H6)yJ<7
zYV@B~Z%vZAwG{x2SLuNTxaV7Uh=tUGHNm6t^$Bt=F(aiiiq7+gQt0%BFHcTwQ`hUH
z^##N-qZCL!T5^mc8FE#8x+V^-i&foR%FWVFIU_>l%yer}Wyb&kh~1FFvpZ8>;;#=T
zomkYB9a;`e__#7!MEu)%>L|Ke?|T@D4#p14PsEzHpZrJU>gNW^&=E#*YCuHh<<!!s
zx(s#d>zhWYmfrh?oQ|0-WlDeMUTg{VM$HA@w$%BUM9<CuGhn2E9jY72+m8dy1c_Ri
zfHPxBMNZZCum1M0k$B_fbhp30!fDj(melh1JK(j#zGsvbF4E12y`BA$RdCildptON
z<FMz|MFAgnF0;c+QW_t+yn#ALMV2*-0>V-pg{1%;srM?sdZ(I$tl5Ua>(Gy^QpE_e
z-R-&@Jo%EZ1-)r2v64Y;5Le$RQto@_RK>_|4v2t>d~f|!la!SGBp=^9SA+<-Z*`qI
z%~QwpA-_c(DGFhD(~p8OQa1G*l9qnefW*&DAXb)r<t(Zlj5R$~HSGc8#esp}(Qa|q
zfgc<UH00&N#MA1=Pbu%ZxW3|f9^(-xa~kB|Zi|f-s6P`Z=x5(U!sf0Vc32(z@(}9%
z`Y!ayYH#qdJ?}3A?Y+62DV%w3^_f|}5?xNqNy$a4I=5}jWz$7dI#g9q$d-^?OjOgZ
z+|Uq@!d{Z|unb>QmmFFJhe@S!i7#y0f;OmT{n{(&D82nN^cow?pUH_4-Km`c>GLEi
zdk%WDN{Y{bMmWi=UCl@SWrbD&*K8!tS2E!ni0L+Bm0B5!PmnPFx<kCB>&>U`#i!({
ztdsJ!PzGF+A}zbygovJ0-@=d(c}coS9P&+TPu<QPW!48eUpC!2wo=HctOdG0hxVEm
zVd_ij%eh|t`!y+aptm4BaX-%e<QF#|R~2GZYn?NhHaBxl(vWJSf&y<vo5)*pWIcb?
z_SVXav-kAH%kIAe*M~~s*2X_|kla60E{ycd?Egf$L?`?&%0<|*r@%2r6oi`KEYHt?
zN*yGL1Q<OpUirBe-}C_TJ(#ZR<=Q1TTx_|TPW{6n4_f+&X!XPM210RF7}5YT2l2?j
zN-aKL%homq1PoV+Btn7rw0}?0ma>%0Us-$ja5ihK2Z&HUIK(f)d#Tcd6AQL@J|FWH
zL$*A{1O8;4R)poITx&^h$nxVi`%w*+!Fm0`3R2@oxbNwZ$fAz!h7;Lx24EI4^Wf8~
z*P%*zQb{TJ3x)Mp;|wDo&iU95>y)#fOy#vl?FgAg*ve_-R7ds(h0eqw`GjIll8Z%6
zvRtqfeEb@>n<-uhHB(_h8iyrw-E>B_ms|G|BSAvtxUSh*Z*e{EncBs+akZq=S|%8L
z%?43~fKD_xXTYaO#bHa26ZWnYEC&7B6ef~I1`HGX?6Apcw_F+@1Ia?4sMJ_)iJ$4I
zI=cSzm-MG$4E38YsY~zk5`0`bhlyjKxlx=q-U%tyfWN=~S`40=vC0(NBv(^?1E+@g
zRpPtY?FDYKj86;;HFyyQ_T;_3HOaRdJQnA@J0Et*<TlXS<P;EUU)OXtcOqWWC<OuP
zz+kGFx{{spqp>iY+R#U0mV+U`!=DP~h@Fhfj=+BZDpVW1=jOYwBJG6W+X|Pb-$t}j
z)i!PG;=QLRH=#~CT@zAC>{UzWr0&)m#`BdqeIn0ge5%PHIHvck{tw2A77_=F(Lq64
z{-M>E^oN$0WbxwOXX0jBP7FQ`sF#8AkG?=8dVeTIb3Du8Rj2e!^vxs1Vo2KNi6=Z2
zDP;I2U*$2_w!=4w{N+*lKcY+jqb>r)4uPHdQTjanJpVu%GSD+J|5F58&(<ph(gXPI
zXP2JM*fR_rFo0!{GQ)yp2pB_?6=@*$&lPfeFR%N4w$48IL_kO{EQeGR&(sq{9EI*)
zas0}Md0`&tT$$w@v3Bt|zWY$0scThPfmbLC3ua$i=|I`FI6$#80ut5--JIM5=m1dH
z`Q0ch&}=m=w<oS6%G~$U$StFY=1bkY%v#z##8yE<bvs_M4@qb;`%b}~EpYA=4*J*_
zMM<rreNbZSYBdsg=~3(Y=17Rxtk#zQ$>DTz*%h%8yZi(c>v)TG{tp4jHdf8M<<Bt<
z{?k$Yhfm-Cfv5Vv@#z~6lck<vT9O2-Ur>A?h`L;ofB-H79}t@nlb#8oSB#7xh)P-l
zLV#Yb+geJ133CEOYJ{+`lh<e{&(DWkN=agd04|7w{tx-n{StJM+|M_d{yhI6@M7Tj
z|0VEB3~%(zlQip*?QtxVO(>SNH>xRb@oCE~E|wP-Rw$9xi?J*>t#35UtEE9#i>%Cr
zW)1w0cLkp-wVnI9TnT>`KmEhI>i)ClCR;_`@qiV<=cRV7gpO5^@LUkzqdSvu$Tby{
z9+P14S^RJfsI%EPmIQy)`MTHDc$^^6Zp@vOP^@#;XSa2M^Uxm{I1TN%N1`>{PuKRw
zC(v0yUtXa_V|uTg@;g7?Pn;&9;D9L22$R~FI+WzN>0RIu(LgLs9ZP=19EK&*9CW~M
zd<m`1;Z6j6$BoFZHxldK4!#OO&XLkyD8XT^2ov<3rJ&d^iC^i+I3<L-piWYF!Os!{
z7AY7e0v*x7E^Pl;M_?ZvbKP$muhggRev?IK3AJFD0$urCA+o9O6H0*a0f|uJ`@^kk
z^GXENVvideb=jpVVMJqw9ML^w-*EJe!&qKrl$=&ZOhss&yq$ygo6xfEiu_Hl%6yBV
znzDVL+l$oE_sjhb0Qi%s^cP{&^;Vgl*6*YsR2a3iMM5Zqy72*;m#n`yeWPPhi8woh
z2aw4%CP$iSgg<`3yJq$F$0euTju}}_z%?-6=R6>@jp^V}61;7nlc6O50xY?lr*#zW
z7{+qiTB$W!!mq3fs&n(!*@G=!l$3uW#H9)aB0I{-lL4^qI}4i&bZIHS#hR>;UVY*E
zb!o>FrpOxC4J3GF@JweVbxr?JHhgk{>-V6T!&DDTC)fB_SM#7{J1G5vy+arFYGu{f
zD8;faHK;1U8hr2C)Ze;vQUlXGJ7tcY=-$GWcnH<wBHZYZ+-@oVK{w4fe6%dumu@vC
z@pE!_mK+|CnsaQ++ei}3Y9B_4DwJ64?!j8<vm&@a7eO%w&Zn&jmm|g|cPyRG_6cvh
zV$n=hzTaa&65Dq#V)HLs4xMlMS#Nqwihrg@JDFVPj25Eepk1e$RAVz7eXAi-ILxrM
zOfNGwcX>ec)f3oJ_Lsr)rR(BZ_GBO{7p`1Fojb#ZV)s-`wG+9%={14_5`52hWOjj%
z0D&`MnAZPzf^VDja?uNJDBv2K090J8bP42pJ*;*E!IN!NW6HL|`~{X*g;Ctlbo={C
z;g&O)SEVb~NF6>BK8;$Kw~UfF7fv?Hzcxnys~ewi^==+O5Sxp5R;y|4bwEsKD9ES#
zwm_a1?^%zYdycdC?T@SRp!e^Ri(afezbW*74ew@kA7WGItvwqit#BSNcRupMhaAS7
z#U{xC&MVG^ew+078uoh%$>CsH?XF42Q41Yllip5;$wn>p_LwTvBUCRojPXRaSo~xY
z{8y-X8BJ@A(CCeXMP0*Q<De9M)RWI;!a^C;gEL(>2;R5;$M0m!%DIoxDw8=rWtoC*
z9g%1GD#mH^tp={A3*Ub)#$t-%OWuEqF@qll<e%<}|KZa3f4H8Vm2NCI|F^B%8AcOn
zWGf?><_LkbG<Jq=(fNu`y8LBiu}TWJxDC?C_e-_`nPk@r$iR6{&h-ut1&jv5Z(Ve3
zBF5{z&#zEf`csHRpyjJ8gc1=xgM&O(&YI|}-?9>E?p48<8qBk4E@6X<Fv0;722jNk
z^L|`El^&GL*MT@JH^&74_ZgBy3t%yB5*knJ;lO}`7>E{`8ao0MQZ~8*eKJ8+(4ppi
zMhU5S8c?@gRA1EI@Q9-PUc6?*eja|bZQ*vtaxr0xlA7sIfs??Z5Af8R_g4FW59Hvo
z#q#`8U~@yEG@450Ku0#5Ydf*qnngDvWxR33ZF5K{#m%j4HQLXrEZqsii#=E9Gw8r8
zd|aklPL?DCQYuHKrK%^+qCIAmU+w`70L&pxp{Sy}o5#(gC{sulqQptgV+wPUKtj8v
zcaNkVWr_RGx(Lqw3)j4EB8KIs7W)QvEIru#ayX&ts1ntTab=97opY}P08abEh7PVv
zIaOLivTf(Ad+W0-UBL%@O^CD7?D?yqu+$`zR@w*bc+w*eZG63<1fmY6Sf?88Z8rWb
zG9-n7jx^)ZXhTRUMtCC3#MTx2-;Sq;?W&FPW3`5`c$IZZDn=0}33es~bz$Hd?_rM|
zJ85SM9L#^^z*5cPsI^+>a(Sdq6WKdr={z6s(s^Xk4V7u<ndK>I@q`~P#*LQ^k|Rb`
z1MNWorv=Hm3o^biWZu~j#Im`aHGMlmpDURwXw+Ep)nYuGMK-%YWmxbme6Wnl=IBFx
zI8E*Tph~`}zX0spnzn;87ZnV<Y|9Q}TCX`?Rh%u-=n#}COdS3~ix|lqX`?+0%I5TO
z^qjTG7_D=uG+%wUOj_JZYwhlBS&`U!S57g69|7S}5GLQ(S+NwSnADxXW$#jmMIH91
z5zFsy@E|xZZSr92!G_x;z~PA`#uRV$<aSXk)U-95nc4ME9qj;J^JcmFQ%(PCG)+o7
zm_;p9b$E@!0X6yqy=e2m>Y}gr-~XzD8cme%ADGwX{~`nHJK8Y(cc?d6Wz(im48i-9
z%A!%hh$sNpl6he$Q!FQlI0a`Do6FOa-`Wfq5ez1p4(oWgHN&Q6q!Y6jqe3>jqK1k`
z84&e)@C?H<W>RnN=A{<w>!P;KiDK#(7Bw1j+UP!4Ge(rcNr-*H;MmK4G8OTy1Txl5
zSv3*jX@(mbERuyF)*3UIO8(t2qEp+g01#aVXWy<q6t+VUfl(Z3(gXdfq~6sV%2|H_
zA}}2Q)s|3?C{X0Uj-ibRtvPYHFc5@l6hRsRH>U%o*Zx?P6=M%u2{chEi9Qxl<`oI`
zvkJw7z*4L~ea$H&8VOtXj!*BZV3%ORs|N-bPySNk>b!Q#9pa8+l5Th3y<+BoEo5W2
zoa>Fmd@wpa7WmMO`W=HoPwT>VWJCz_oF=F<%O=a$-2G<%e#9wBxj9NGF=P!UpMnSF
zlnZkV5BEuH%Xvl-Z=kajMO<IV&qh)~hIW?$x&-<GZfL_HfN9N2IA4K{v|9jkdJU=C
zX+DueHee-|4Mg2RHE>8|@WbLepo&pu(2QQ~v-P|M;PC94dm^rvl{t#C{bv=ssgskX
z*Tt+}EbUkMTcegeG)`sk4)|Hp_uX?iXq;1&HC-G1ch+<#%bKC2Vtar<1%8QlfqTHE
zQAVDN^}|YiW^F+-H)gKvP*W!gCLMcn*Q^f*1LgO-d?lk*!DB&r#z5%97dAr=+gomK
zZc$>=Od(|V^Iyh4G*YbY2{N!hmJpT~KA-fiPRE9Nlp`EdCLNQXEO2N$)+bZCbS}ap
zpmS-|d7zzC;8uH0ff1Na)cL~HTv!$l#>wI4qYp=pG`fij%?T#~wuWML{9}VVV~RDf
z{vJNyCUY~r0E#K_b9v<Og{METulHgvjNF^Z6l~~$kpTlFQZD@uJ3Ul$Vs*j3wP(~v
zj4JgRZZsHsIWCW$Jr#pEOdC&*d2~s;J1Xf|?}aOy`&*j4S@>QEfxmem=_7LeaNBU>
zT1Ly%ErfA3@(=Uod!?eUH+n4#a2{HU!(yndF4!xZ)e<6@mcVSPY_tZjk8HL37nAa`
zTrwcV1WY&b;xKo0VHFP6dvRmwD!bP;79-r>T?E+I^&PWN+rO2`SZgo2eJw!(A4Vw9
zF^nn^3S2<Tcy1*q&RC+9=9v4(vQeMRV%%hXc#T>}56*t_&w^Is3><b4_s9FNmje-V
zmTSK>pphy6E|GJ%TGF(pNTXs1zoP1g*W(pad4)J*seOKdfz#K&t@88A6BOpD4MLhi
zUNi>ILh;_Yqd+^Z!|k!XYX#j4uZ=}|meE8_MQ9=$*FIg1x}u@8t>$P^DQnB<O7rp!
z;)ORcI+7gb=UJ`0w`}sLTNIOQ8FIjzFRF+;%OhPUYc4izS9X#k<KOD5jkUB}X-;Hm
zog_89XoWa7dK6c78o;IK*n{$3JK#bh4peew(lc@c8urcX36o!7IS}WVp>!64v~t<q
z6V9hixvOMsB(u++yrOocW&P^BI<X`**2%z8P(}lgJqT4`_Fcy*pb+9{W%ah?+f&?J
z87$Smu+bqA&b}ycqilAZ!=-SLm{*BtDL&JV*r}|RBfY(EpiZ4&stw^fQ?0Z}KC{ea
z=Z-Sai{$2!5s}?G59VONOC6-tI^j62$__86$STOoXvwCfdS#3ipsh{O@$5f09-xcd
zi-131qL)WsUQ!L^Nx*qkI={Dg{U7eq|Dq(WcUi}k{#CF1+^!`5U?|{VV#vb4!2I7Y
zS8s){|5dVV`wqwVp`|X%2&jnk=3Pywh&9gF@WFtMq|l~t3OkUr+n9ay-WYLxVKjvd
zy>54wdfp`22-ks<m1t<HL%}cJ88t}za@|T2e3r@S>dfqyvaF7A<1Fi7Tp+P4K+y^W
z20}ZT*~XI*qcoi)<hzXJui((UqBB-d^^^Mr=CFq$`|Xy5DEEL_b1%UK#-K0sD^P-T
z8LGL*VWp`nOPpj7GA~4`bfumPtJU<Q@RB*mJX+uuoe|M%*1xTfpC8;i1#&2ADjY7j
zQ$=n_3VxwE;J*jGByUPDmY5?6;$<m@*BfuJ6nAF}y(a(iz!DZLPp{w@=y}k}5W?XV
z1TN>%$gWIUcRo(0Mq+T2Kl!B?Qm(q^<7=UD#?}OtZI9?t&?Nnr+jPZ`E$KwJ2%^Ua
z+(Cs&R}-o)0~IINTT?3=c-A|o@4yY+L0Ga{5^%No!P-P2bsNlX(1rIUf!}x|5SO_`
z1qUi9nNVAcmL#$4i_DC^YOfGnMlp<b1V~**64t|#e17q|!j2Co8+bG_iek#Tr75fs
z1Is_7WXEd(SFc@R`w0rtQA;Aan#X~+BXVC>h_tmVxTtae*2c+_82*;$%P&Xn1PCsm
zYQzNPMn0cvoFq!%8~{!A!F`J@X!MtGiKbg^X!{y(l~{<#i8IT49BRYTQ^ZJ~V(4I1
zgf8QxYuYi@$u!qgCYcGF1s6XX4L7&dhA!}NWA2BkV5U^NTY}f%so~#iNv)s(LlkSq
z+^Et<s|Kc++_-bMXOc`A)4xQyt_NrM|6UA?AYaAc{e<i1j|0s=Ij0yq`~&S9ouY4h
z&-x?8KUK`yV3T7oBfE;van4RcYRxNwlo()AUL>L-4snBZIby$(TfXUWgg{XPK877?
z-~F0(?O_UphNj)ifh;kYR!FPPTj0j0&P`YN`UO4;J{#-DemJHEXI!t~6>r}5{{7Xe
z>(kx!4kka+N0$a6h)yc;J%|MBQp{97!Mo-T=MN|Wp*Fq*E%|Xa_Uhn1AQWDZES3(`
zeMqX?8xW(;Z3#2m;q6DJ-p{DxABR<ufXT;sNHXO<<M)+WCjg8dH)b6FphgU%(>`Ny
z8l5>JjszXYgj;AIbuv8BHUMs@&gD2Nco1yVs4^ju-<p)FafeAN{;QT?C1kRRc48Mi
zaCLRHXNV`scqi3@K}|5wgzHO+&XE~kZG{6}T&Ec3o7{QAnD4{UwET{qp5*mWI3wNJ
z(hjio$mbFe5{S<)|0ZtEjqlWP>I~--(uTmP{8X{&w|t*6ZCZV)tD@~%y6Ug<l~`oY
z*Et5htvecL5uS$<*Y#~vpr4ttRe5UK;@7OsOBP$2%BA`facfkO{<Y517~J)}DDsjx
zEI{q=FJzm&X`s(8>!0qNi}MkmY%y#O{C?@GKb^v?7}MLNvhiid)Q>4+&HoEy0n$SF
z(Z+z@RB4D(C#6YF%Z!swL*Ii7w{w22@MTDoi_t4%UVYec8dRIU{(1S@AnXquCYWqu
znLl!pjCz4eFmFsSaRIVGfJrB;2BS3e$Wpzw?VX(w_)xy#%?zKNyh*(Q#jyeH<~DbN
znNYTQB5Q{cXQ8<>u|CUQe6I^&zm6;b#yRTKrD#K>ew?b(kmL$nq1;uUD;7erg<8p#
zoVJ)El2tS*nKP`kw2_Ap?Ce}Du*_X*t^N?#P#U|xv@QHl#kx67&~q^YXU!2CgU7`o
z#X0Bic^B4tR53kY=KX?pvKXg*5b5X$L3&hYBTy`C!mPW`Vwxt{5MA=0KN)?(rhXF7
zO>xz`b*ENVI_-(zeK*WJ1Op57am9r-^AWg^Gg8sag<@H!$}?>>DRL#T6%4cr8jQU;
zwy<-`{!lQUjv}fXzlF<X>dkCoWLPrm0p-?jPZ}h2crzG3tJ8TgE(`>JVD=p6&xk&j
z?VrPUa;$@7<aC)@^%lyD3#`m8RFB8(axPf&qmQNLz>oJMYGaLKWk?N)F~erPYW5ww
z&9cGhx;T7>RMBPFn9=1dr>X5ED>Lpow++BX)n?0^qDiMhj^NF%tD`AqQuIjVaVAy2
z@x2&moWCVTWPREDfBS1rdDGf`{cf7)IglxGHPPS#I#L}lOP#ibFznae<GHUiY^(oL
zMTzo;zT5h>ub5Xa?`3~|eBYb)`fLVgW^xAEEM}fGqVAF#rg^%(yi>JEAF_?yWPYWC
z4?7iuXlZNSto%oBZzV1G2kyuA`H}V?VQO8we+B}tG=2ztcBJoX-F_GUU@P|UE9=PZ
zB8oUtn@sBi5SIosM|Ow?q0x@91Q|N>hRx5HY(k2NB4SM$_>Xg#rueaaI~}|k81bv0
z9#}M{@Ri}tHWd>S7R=T~Byb<wp}FYjSINGWiwJGv8Q;?Mn0yXRA@MeeDF5#gb^;Q`
zjD@2dkIp^__v|-XSj9i_+>d4gjKR`<ongVzbfEi_*R+JXg;`ZuqDUf`<BAbp4aK<$
z!T53l_*z(|L-66))dzj90;vhMJ}pL5pxFIG&H_l&OyFU-1hM$>s9gjkhAu81+&NPt
z!kSpekaiEB%#xq(Id6zjvSEq)ZN@3X=ifU!t+u-^M014Ff!pNm+lPVAL7bhFR;U1P
zI;9VZ_#OP$^7pLM+<Y6_Jye-G@A@K%bCAzlM+`GSzCE2@<xvR8mmKEoQ%&&=7yD0p
zt?zgq_!o)pl3Zb1c|H;DYO}+V+3zuCG1s!#kN)G<ZvE|?o;(is;X|&Eh*j_)@R)#;
zCpIZ$N$KRCQRSlO1<5~{&uyT5s?0$ZxgBvUGqL?$$^ikfKcraJE0qN}Gk2WyZz*K5
z$b<&STf;z7W5JBs=y>|wh>~*0$ei9{3hbkJP&Zzc<KHV`5QM;HAVr6Kv{w(v3!3i7
zDB}a(JUBfK>t-CIrte`BZ88W`xG!+z=<yZsP9~MFx`n=}L^8Yxle!3GUY7~f0`+N1
zdW!-f#ffoTw)%yH$8C{|$jLbC5buTSMrOKQf4#lDggw}4?|C>bwb%j%0C6EES9^60
z0ghTI)3pV0^bS?v(q>%)43zLnzO5mijT;*E-?Hlz{`{;5jS6F3<}VXWGPTb^H0udo
zrd^{D%*%y!2LfJC%^lUfI;^Av&z8yXU!xs`5i=UJxE17Ul)Ddzdfd9q-`odK3Q5cX
z$L#~zyo<+4h?ES&Y-IY7y)`=0Am?wY!_aS~lB**?E9E6lyl8BswH($J0Q@Ax#1V_(
zx*^8%f3u_aD1I)t3%<_I-=MgI;~{D;^aE*<q~WKkE8uBQiwfqAT5@CrA8X5Kc#82~
zHo@SbHU;)uL0-2>3iM9Lz!jE7coFy5!<!@3-UC~Ld~k!N18}9N*FQlYnEDm4S9`ng
zD}RZy8mJA4mvJRf9HN0T2-T+G26DMl5W@spkd1EoUC34fxmA9f*GaN8uY`{I5vbJ$
zxk|x?X0Jv=at#42qnZ;$vD+9HYf-`wnNzV_m;@P71IZjQGqH+$T{8${Ctp}Y+;C|3
z-8tR@_T+%SXh6dEZ|4=D$Rd^!%9`TYW|cD@Y4e-$AAp#0s3lG{OEHyz`G^`P@%&EN
zCRMxG05ff$k*TEJr98&o2p}dizH~I>d37Q>AQ#21xfR6}kY%-bQ|7bZ-ze}O+!K!n
z^Jw<O!SD0h0whpTP==jw#C*mB=a?dMlZEH=Z=-iZJy|(9u~&_EM!Jn=+{CuyXHVG6
zVG8Zp@#dn=48w!K$Q*;e<Z4rmUA}twaSVfT6Zj?jqk_M^*7tVZJe-^vw29Ot)0f=t
zz5Hu>bYfoe?X>l_)vI#GgS{EK7<t|dvb%i>0BxkDcHzffZU}JQMMW$_LUMZPo2Ul&
zRyw5la16UD`48kI9wa4+G7+7*^l3*A%VBMc$=g8lpvmAF8A~NkcS5(3{JXb?PYVJp
zt4USpwmd^}{4TOREImcyYCFDOy;KgLI||A*Z|=b??jL50dR``NpDX28LHadH$;~Y-
z?e>yR$v#+c)UhH&H*Y`Kdnyjs8y~xW*J8&St(TRwRTuTN^;AUHUKOULxKj5hpV^r5
z3mYot<OEZc7F1>|w=BH8Ke&%~DZg2u0aq}kH%BSUCw3`Yn%&yu;d3v#WjOFmu7RpV
zk+%j-2$e8r0y<UbH942tqWRD25N<s3NN#$n${(`PA;yBwc{lo&u37O^Q)FB+OIkpY
zP0yah)|y;n>1dVHyvW2Y7IYX0Tc)&Ct{o(~tqmoB+rS#b-Ze~C!WSn9^EU?%0D?j8
zw7#OC29{Z@QA}TMv{S2Kq%2=6Hs<}>Tozj`u-H<8OakZ>j`xe5ot=awGzsikP-{qe
z2ge~g-56kSsM84h25zWW<Pp`fvOqxYkWk+{79AQgZ*#jX3NHmXgN)5X*O$)T%!hZ=
zm>deoSj;)~iF?aGvIRsu2dwn5?_qsuRO<Om?XHd{cwMvv^1!d{Y6*;bj8pit?n4f$
zce9r^efbB2Kj5Tu7>}!|AUryw#S~R&pXQuqo%}w>+Wuz{x{-t3AkkP<c`;|ablik6
z$8_mQWt)48nM-l@h1Cdg+k)@fF9i?5J#HOS8{k4jh`?eQry+UJ5JNW$6M~Gw^!>&7
zu5g=oj9SMLU;nb8Qq$5t&0>pKOyS8$Y?s7hQ?mZ#?p6e^1OQ%c0PdVklB3Q57j{(X
z*beQ0dH!xsJ<?Q7YvS59)QH*bsWN9AW?Qs&w~B%p_FzBLAJakg_-(_*f!?veda)Q-
zKy91FpsY!-66u+$ltOSg?B&v|nKXqlPJ-|wqsDu|;*GKU!)Oj2{?A_qLGOH-?yN#I
zhnR1&fRu!5m{rNiJ-1m`M~iLHJmX^yF-7SJ5|L)BQ5DJ(uAb5ws^DTSiy4GSQV77`
z+Bw()VQLA2#tUe|`Dijpw}gh_kFhHA<)q{?L~L>O)1!8}j!=o{MP0!jfVK%gic`vi
zJ2u%eM>1BpgxRumcv=ciW{>5FS-Q;EGpf26S>x71c8%)D+@nON@<fAxy17X2r>$d2
zeB$x~@s-I1Chj;Qqn~Y1%EMcGGIPatwODGA{ZR!TAv&%RF{wvZSk#wW?b#$UX<%vj
ze&V_0FOnW{2Lg7#S(jXbncpERdj=wg%B&dIIw4>!MvlZAv|3&hMf9MRZwwWoO|Go^
z8Gt5tCJk?sF{<m52=f;PZHDuV2VwZ4;E$_nemBLdp*o`~)-om0mcW<}d+eXIPRin2
zy#q8hMf98SFR;PSDTlI-lTQTOB%;nMZ^bP*VJY!LUpE!3hAp!&WbBgtl?z%yv(J{4
z;hiV$=e!kkC+GTxLOUxQQq&T@tkCmf$(gxaf3*mlWIfE+cjF;%zudbk4ioGt#c-<?
zC6yO>v4@f)k^q_I{W}827Y~%^Y4jbYTO&8cC1?3Tn7o_57ZA^Mh}#@MFAc)%n0R&|
zJxmeTxbJmDo7lE9e#wQTaccB1iGW}NyD^*tGHw^CgCknro^n{|{fGC9y`6WI(4Lo0
z`>kMT@#RLSOFknncm?>vh@0ojklGK_n(6ndvZmCyda*dX5SbX+M>|de2;Myh=O8uf
z1a?r!By3@sjT+A@GTLdKD4m+drBaeYOiHd&@SEJH7ajT>qCH3u+b{cibN5ZV6FTo|
z$r2XT0(TaBwASAukliyDpIG2lM5he5o`s;Kpbc!viB37AQ&iAGnLc9OgtN^qS`Ws<
zq&NF0pt<PEBALWTGpblND+K2vUtRvbmd=V_A^Rob+neN(^b)M)`GN=sd8hKT9rE^S
zj;l(?6IrDJ0fp*n<+6T<(FsApbgRLvR|SQ-?JsAR=$6~k_s#ZPFVG%1Au4qFx0=;K
zrH=X1ECJ&rrOA>cAOzS+r#M!G{4rln_5yZ}A#i;~-~yk;rlX0nTMEG6qF*2qw*5vX
zO}BJY@7bJS!#;IAsj9y`cJt1aeXE$4xGfy-g2>;OGBbUOL2n#5Wx=OYywq$b=>E1E
z52yG7|9g*5<ZfIJ@<XA8|9D;gQ;%<H?Ec>&sb#eb#|;sLzcae^E~eaJ26aq}GsH35
z{a~9??y#}UZ$*d;{z^eYGGta6uf8`sfs5i}F`Gw{pMZtio4Y-(vdosKW&P4!>+^c&
zOzgfN&#jAWrl-AwOJww0ab}F?{b3`%$f^8P#y(PsU`+!EBU%Lh4B`;mNVWdIaVpW<
zh$X_n&5sbFru-mDpewT6s^IW6Vf|$7p)5_o<);XwAx8Cm;`)9;K*outT48`7w%vIk
zgUK8rxk04S^`S-q*=Iu>a5&!91&*?D!3D#A76Dv1+j0hqo61TaB>l=jCyoMpNCIV;
zP_)BHeZbr#zR8#l4Gk5E;w2Ve3p;P12+o+u4w+pc#IseQ>;;L(F2VDEfqV#P+t)QN
zIwUX%5|LSRI=2}d(A&9<g>5<A)V~aIFGxujW%W6ok{G~2Yx{pFd&lV9x@~JPJGPzd
z*tU}$+qP}nc6Myrwr$(C?WA(*)~)*PX;tU_s*Sc<ThE{8&suZMKKtmS_Y;5s;xKS0
z^jZ}|6{~H5$@@yEdjL4qvKO-i;Bj!I{WsVk%(%0W7(~$J&Gz03xJD_CW{_5B$V&mj
zrCO8tVJRiZF$X6Y-g6Y!E86NY_L)!fS>`jW71sF}S%=kp*AqA}1u?aCQBFFpP(Wo&
z+ym;rsV^AKeW#Zm?Nm*Pw0)xDs^WymJe}%D!P%|#fQMrHo;r|O^QL*>_v$xpk55Cl
zTzj8Blx#$sc{IcAe~qnn?;eFALO~Se&OV7V)Hrs>INK6U;BoZmE9KgnjyZ+nD3)t$
zcNDXC**-Q<_Il8w8c5Eaew?~EKgRsd@E+zX=c-|e1I3`G16jjg6-U(w5d`U!Ms>N~
zGfzKjCZR}&?0lWY4~O3|LJ-ak==85uQ5)1S<Mai^5bZMy#X5{11E}O*Lxne<)Love
zT$tpJM2B>j&W*MyWK_rBS$^^c`m4w0&RAeO_`Nd8nkBQd(;0=O1}G!@SA)Elh6(R_
zgcz!5I%RpVqADPS8Hd50$vfmWJiREie?u^>U?M+g3Z`+7@$)lTODvM{_r@33^J@-K
zf%2Ee9UluGnmH2dDrV$jpb!s8k<&Y!>Qn0<3~3dqD!>}JR+S-(j;I{u{wk^zLVH4>
zyyXRpZ`KSu1eryHrcEn~g+YQ0rsg+E?Fp+oOJADw5?SgYTVAb0jeP6TW$a>5VVjeF
z5&%yR&2G?9CvE*hGs1T^H^edWsRz0fO4xPcd?ZhARRrac{3l&dPe2pTbn=A8i6F*@
zDy$0M?A&CW;_<d7sUYfTK4AKqUnvj{@g0}nAj+zDxf<`(E}^s`GG&AcP11S^AOiOo
zTzi>?ENm50tYJU`Q#*1ZAeRDc@U!33wYb>3Co<P3%VjV!5+Pnz6J)58Z#@fE<jHns
z6nwe=)N!R*BS40jj}v+&K6PnAhTHpuVwpNfSf{gT7{O1+z-ksqvj#SmbEM-^?+-Ls
z{At7bHS#02k;igN^6h#`t<$Y}AHBn(7FwqvN(B5PHQ6qPjvCrF9Tz2u<hu^=Tm2|<
z3)3=)LtQBOFVeMMf<o8vq7P}fTY_{YVJYl0CA;Y;>X~_g`nuNSNv<j6_0VMKv=3=k
z68V_F8HEL2F&`AToKIRNGZ@W9zu%{)ia8vI3_L9J)jF>ljU>xEsYP1tjDK_Fp$`ce
z*__FF3n!0Uu^+i7R9MoK8b#5l4GMh<(4-H^PuXm%TpBlR8M6N3fuq@d;L2~|u~T6o
z7Q<v9Y$5jY0qIBRDwA?&>F#de$-8^1U`=0H-aH+s&?by$?f)`uk|B~GQa9zmUh7<X
zsWL!zIYs`CmI#Ptn1C=6o}#0`IEzc6f~8vdv%_+yPX;RB!F1)l6ZDn4nC``h_-8a6
zb(y9pxCA3-4x=sktvcc}v|A!<O-U;rw~^FXE8=$=X$OPQ<}c%-^(K*e3!*L(K7APU
zY8K*mfQa%M<U6!5ljS~#B2<!t2$nI3AED%Ix*NPw5WRWdAt=*zWqyCSGPQv1B5pya
zA<L2WZrRJXuHctsx52^o)QvBL29s>!(yv7Ww&i!=GTc9~*epKZvMFi?KAlvT7avvZ
zv;mXfj&W9Sn_mR%U|u$feBV(2b9)&-Ho)Bep^zUD{+Y=!Ff}r;_|F^6rizBbx-hbL
zmCvBxlp$42Z7jqj5&i`F9wO^dQI}&{vbmv|6@+1>Y9$@=%Qd%0ER~L8I?He4GqAr?
zR@0Z99*WfoIe^DZ?z&$K`?_5|KAtmdOg{d(B0ttpwsa>wDEZ3+yEBq4B5Ile#y_eK
zvVj>=dOeqc%3OTC@_kOC$S^3e6GTuh6B1b}GN`>S)D2d1fNfJi#`j<RWB6fVHT~Rw
zg2Qm(@t$GB*k17298p2KescgH@jMsUSqWp=UBI8Dtdm*hyFTDa?neAg7~;6RS9X~Z
zH=~zAS9kbKVf4wc&CcTiN{8Z(xhMOQt)4!<#~ei8V=IwksiZ7ygDpO~RrB3@ls^^u
z<LEy?Y>ViyT+Dp!$hY<^AgyW&<`lv$$aOQ!Z1bl$7p^3x--vm+9`Fp9zeTYcd&J&t
zpq2003Kn4{7fPW9V<_%r11BOdh$+>*4F^FNr}RAB1W8)<3D^uwmm+zV^5tXDK2VIZ
zE|oiC92UlaFDU$6iBD7!eOLIj7Wf6}`T>-ucUR=qd#URrnkKi;1Oc%<Us`0oed+ba
zrG)K+Cto6%u1QwKlGrlHP@4sLGn-fKE};rPY>%}t15l63Cmh8g-44IHF_AHio!Bjj
zj%sx<n6Z_+VP_b%sQSVktT?vzZ;~9B7vd=A_Z-K!xt7}I)=b-3Gp$BMK!Ueu5zF&+
zC=&zo&M5@)zD(Z<W^8cj&d~e-d4Qb93fFl<MTBzmq7AIaXCa}`egt}XPKUGsib?3-
zJwwY$a)-o7Gh|{`X4Z%V0i{?KAn96HT6?Lnu`K#oy0q^a#XW8<2-k_ov$5EjNhO-$
z6gqzU43k&1-(srZM(zOz$CI{vbSv=dNPr0UCW1X8(V-B4KyFbK*kQkHH9<^rj~ptK
z2`t6=`z)nXXEHqkM`M}!gqYxaBim+NDeJ7$$oI*NQeb-7q)&%2K4oVPPp^R)pG*;3
zc4m2}mQX6Lpyw!R^tsI6O6JeCd29Sl6e5&vTW=xZS-w$wk67yGj`cr>q=9%FKCQaw
zm+}2<T%7;HhiUZt#uGbs0Cen$0CwOmPtVZtd@dK^CO4duvlaPlj9Di}p@$idM-;}x
zr=qsT&^?b4UanL=Ra0R0sy^9tQk4ro_Us>lPNE4uXK>RiIX6%uMB^kkCW|T&h2^Ne
zX((~u*p>D`UymdTR)gUK=>{FjCihjBC-=#(<qOT(%<954r)X>lU3n%CoW)Hg6HKB*
zjv(F$C%OLKasPtam^$p#vxLaq{H$Cx^BI!8`7UX+6vOs}vDxCS(y5+pTr@{j|0HfK
zJ9<F`m=SW5IMo)|thhmK%d|M+UDRYUE%Gxn>(C;%#6#4UCe5<by^5>k)s!uIjqz>v
z;2mxUHpKCc@l_NQ2`))@_g2xYx}3FI0~XdI|8sF_Urhr9f*0isa0=>MWkc<zYrVZt
zhk0q0@eD{q_4EP3TEB{B1+o?lA9VMO!T;xi$xAUO;ApzivthcrA)4C9d<W8907rQV
z{V~ZJPyNW}8zQdqFtFQ^dRm?c?LIzlP_w!J<ig?{%fHS9h9=!C?yKD<*ytFt8*?e+
zoar5{a*^0lL4$@y-bsEJwZ5r06rJI@iJE?$c6RlQjSNyo$Aer_8!XJ{*T24<|L<uJ
znE&4$V<U(EA8`*etG?TpKV4|^AIMMiAOF)p-$2K}!oli4e~_INe-ggwkiDj>TMQ7z
z^Wz2<Q*=E|LuVl>J;B?+0-GpWif+%=5-*V{hJ3c2E)4x@xfV`4kFzoythTAb@caxK
zH7$53ssC<nURLr+^YpbC+SVH0y}1J?tAFY*^vM}X6iPvg@b@HA(%B9|&r`BU#g5oT
zu^G+PkSp4cF|EKx-H?ZB*%AV<x|8=rmFdb=@KHb|>O~JHZS-)XL9Y-RNkC}=Dn%6T
z1QkHzv`|~z@gj+u;`42;0``LRC0mFD`C!+PU}fTDXXs=z(dSb{St?jp9JwSOLY^}t
zFD)i6(M%RodAPcYqPWuu7l=<Y=p=w}nwg;i?y4bo9>;~7haVM9NCxH+P_yQpjE_DV
zI@*1qY(RD9BXO`U5)_GJHc-N3i(Q~mL%~2Ke**O1u@jZmjgLJMy1pZbPw~>R*B4f&
z*FO%-#7R*yr8C)lS5`Aiw&5O73VX~dXyvRzV+FLYaMYBLUN1xS290-o5qr?yYNKKU
zoAJCS2ad1z!r^)v;kwnDGs1RxG`sb5ZdN3MEvH$O48saesAwB)t-q5B^Izb&aBK-=
zhWu?eItOrezgc(+-xi1*RhdnadIJTnW0fz6cLyce==BauppKwD2{-{ky0U|KaodTy
zaOyWjt!)2@pfj5}AWj2zB)xDB5Gz}jkl1V4OfN9WEO^>kXo<hyFHax08<tMmadHQ)
z%Z%k(C+@kqv)+xOIM~PmNMY>Aeyh)=;O=5`NX}2(?{H<lJYum!+#?#u&Ns%|Xmxb~
zINlb?ztRr<71bX*upRvaW7;5OmJ#4l=f=#sV`y{h)%L`Y(9iiXxfmnd?Ioc!78DAW
ztP&Vw1jhCZ`*vH%s2=ad7&Xiw%J~&5^vZH++?+XrZ6vqpE1{`cGFw__rNP<SxL_Vh
zU>eoVdrPA`#n`w4d%-RyNDgA$KA}T8n=rcDTQXrS*(UCrb>H8ArvQDTEqO2I-yN|4
zFWWh6X666+pU_5%2?bu}XDJo@z?=UtOYyTjjSTd4jI0g*^Gf>3qO_jph5tz+g66~H
zgmgv(mWSY@DCAGf17+^WDGASbB++hLZG4J@m;KJfxIU6s4D%AbU^kh{NL54I1a7k}
zOz%WEU+dl3+uKan^SQz4TE;GdQK?@A?!x$tX9P>$T3lPfrYQ{M6tA%zre@X9J|q)V
zN9t{<>j12#u<pqm9Rc7I@0BKUuEX95d8#3Q&S?O$VLxqAS5<`=_50TEu){;9>ohAM
zL)ouEs<Ix;mqgYp1nhJqj*}>0^@!_3({Iv`PcJ`TUwy<kZe%S{hB%K@bth#y!Xo>9
zxH!f9Bp`R;+^%T=w=|}i?t~B*z9OyN9wq1=OGF!_Kc}*yIe5u$PIBMo5bhmGAoQ_)
z^jK^%Q#b=m1TjCxq3dLp^M2^wGz0Tmf2tfoA@N1zJKQ!05qvr08yG+jEqu(I-uY1e
zy1x5KW`<DvGck_=48d_+Sn)DR_{dxQSG&+qpP}<Jtv7;xAZ5Wk(@4Zw0~3L1j!z+T
z7GXCI^&L72dCE20rU<GWGhnqGIrCYc*fiU$?vyg!iJy)0XGroL|8C_A^QuFRmtn+H
z5)t#aELH|JnkId{jpiClcMh4x-W*O2rQ*I8+?2o?XE^uij%(;k&ok7xxwcz}@g~^1
zMY2CLY&nBx)G~B;SU)-+Xmzm*dogt;>Ruv>MG&sS3bghbeTQ^Fr{z}6hL7qA(~SRN
z4^*B&So*bJq(Q&?r^kUX?sQK8W6N(1^i{mXI<N)8N3_*}1Q7-M5&46hkm8q}KdyAh
zl+R{n|FxC;P&xqM0RIvnP2!nGVE)WQJN{=F{`0OH82@j)tCz}hGC#f~-qY3ScIHN4
z!?j4_{jq|3Y*qaH8xSRBNaBRUTLT(P?XfPIOdww#CN96@+5Ea5bB%CyQ!`(kosZI|
z8`5D+`&v_~?Kvb+0!c~#G;;8{Lc5UrRXg<A*i`Rm(0t+5`q%Rp5+w6v(1Wsa@b<yP
z66yRM5W$Ob5;Eu`7R%Xz80E9-q4NNaX2D5_2CIU*(L(+!M7hJyhaWa1N1jMm7zyyo
zNa6sJAV5{eo{ta%K~*Xa;|ihRKY##6FNeS(a>AoyM)o1#fmu^NejjnZ9?>WjP9V|{
zD4sYkmRr*Ef=y7kFJE|cXVBiMN#o^b^Ed95AiL2@w%s#2yDT!-qkZ;;*KHyk7*}M7
z|LwFlm>A!FLU5v~;!{-rF(DfkE2@b+n}+l7o}X_32|kEnJp%wq&R=P;qu!sK!$i<O
zg&&SYQBTBMg3!n!DK=ChXATvi(h-u9N($2m*frMdn{S2wCGsX!94xbrr&SQt5t;xM
z-Ght1as&c3L^nn+EyA+jrA~fervM>+%{@-_1~}bL<+E0JK@=3ZT~zyTn_C@>U0~E=
zPgiMa<yf_*T<}9WA9yC-Nzw(Gt0hO$%z!K@s#`Rd5oL}javVa{&c}GM@|9k`Ul|3+
zB^Q3MOl%&K@*VjeB_7w5iUSbmG`T$=gvJn2U&ap7E=z4tkHjCHjp+STLrqZj7i}tu
zUgAtUDwPajb|&)YGm?w)kV?gKZ&#R==9HcKI+3i_bH9oq25B*Q-Lc8Xt3=cI4Pf?X
zUv?@{OPc}3&7u6Tkx^*37=beG>MreXK(QS@ME9DW?T8!4^>X(BDJW1QbLQqdHCIg@
z*tMB^-~3)R4cJ|i<+Rd}*b_}|y~{hG2P)gdjJ)T}*v3W54z|J6w7eb3U2{*n&)2&P
z_n7P+f{l>j&|5#cN``bC4y)8H+{<phkTbA_iK>BRtZ!!|nq9xM)J%eE$SNuera@Vk
z8~X!A;qSiEsH76d;2!6<SaVg7f`p-35|O;(6pj>GI(t1jU&3d_Z3Ho_RLG<q7Fyf5
z25ov}{2Vk$jKE>)3c?Asf*Hd2uIqI`tXu-FT!nP@F@eS8F91MS_p&s)z<t7IbC@&U
zSO*Q<wjTSB6LkI7l!C^g-$ye+M==_VfrWhAMdaWyC>IQieHV1-)~KrS6Nl;E#soP*
z9UPl=__Y2A#`WON7rC_|>&{Xo_PPSYr6-GyC{4LPCk$shFYo)$^~`n{-<ZAVth2|K
zn>3*Chh6D3F@SD3%euyZ8ZK}PunHsx6R(ii$TuO=4Tt!piOI!4>lsM*%6LN4Uwn6s
zOkS_h<y`o7fw-Ew{d&zGL=W%oAvzgiirxd~ruA&WG1SGz);7ty0ZO9V*2P<5ov6K8
zPbmTLaB=E?viW4Jeq%tqVcP%R0b$>W_-N4)Y|1h+wFxZP67H-qh+dLzv(;gT-e!~B
z3YT1prCn=mjg(Kpzj^2)>RNRXE<!cl{+&2Yi=un%rK*`fOa^>4RjQ3K%HY{eIDs~J
zvX{FA1?TR;u$^A6t=@<oJ_=mSn;WAK7ZT$5o#>t#r;ypXxhf$tbDe%YJYVid+sgv%
zqi+{1VC&8XhJK!AGn}r)YRQ1|MCB(Lq+>Do$JS7U@EIrgY72*(waEp=VfpAgETv0g
zqkW)LVnh1IM`G{c&E?C2V(=mA+tS6fTj0@t4h8`RNKdx(RGr&SJsa!a$#u{8R2}!9
z=rMyInDC#`w!NOUq0T?@>sEg!f6@x!1Fzk~&D>)nmBT&2)4qV|5OE>V&2*3F;(6mO
z;%g-#56a5a4>l#l#bX7Y2R2h*YsSrE_53uJVYjfE4cxpwZ$CrE4^eQKcReJWo7Z=G
z+ezahm4??|W%U=CR*HCgk^o<`3&z03E23fzfyf<|W5K%nnBoJuU}%l^h2#MLXol3I
z>;BG%`Wa-E>gi<yej_e5LWeq?vN8xv4BV>0*<~~i7S-E*qRLYf^xz~?w2X5IwCdWd
zx^_8FR<q5FVKM^rsJ~umNqL6Puup4+$u29qexDn};x`pPj#)%5J8}@8JSJHyr}D6<
zu;dVWVOXaW%3WanM(C)aAWyB0Y=5kh26CyAVLB*Hd><M`Ld|L!`7#VG#4Zw{aNzCI
z+T31z_ai@WGYMc{d%2W{iV;F^xQ3swu@6z{$m>b3Rz>}$E6r=XM}0NAb<6mZzkFIg
zlmX!+v&VFm=$y(e2075EP-Y#(%2gWw0;oCk#s2<ptQP7#;5qHjbKUsI=lZ`l9GWT5
zXX8(Y-g!^S=DGsAU}!M#n+?w~8aOr9&A!M_K3V8*)g@}wZFe=VLHT`6<lmdF=g#ZL
zMy9agRJb15u0;{Q)vWNLF>Ta)cpBQ1#Bbx(vt7X)m{lOlbzrnmOFJk#Ka>UW)h-nx
zZL}<lzPN{*W!e1oC>--DvQ}Le3h>2oAMZqP8&_)l@#eztvSQe1Zg_SN(mh$kXnSqK
zshe5n=wQ=LD~+kk2KxM!4a@FeBPm_T<6cV5ChNLu+cZY#x<uN_kZ|Be4-#Z++IMfJ
zKu|GC4_n3`o1T#(GN|lb<SlhOOp=Hbd+jeQfGGnuI6}CacpDXMhXl!&1mO4zAu%rD
zvN{5`05e1N(Q#gga`oZOk@)PT8N9<VQQ@EI;^|PkvhVnQrgwwC|E5xn?qNM1`WYIH
zf%qpJZu7r`Z4#CK%k8B~$8Ox0*Zz~BRcm?5&X)ix_?NIc(XZgV6F{{*Y8oc;zX{m+
z<38K5d4|G?e$u#xr;g7Xn-0^n^>P4&Er^GFb5^<dZr@+Yqg>KkeO`P!24XLpn~*$W
zw{W9Oo+Xa>1!;X?Lpw{rWG%$uBWVW;zznLCX$V!Kuqe}Ez?Z!>M@WG~u1DC@dE`AN
za=kR%0BD#LLeSAPCH^o*z#|I6;xGvUB+kV7<kR36r8HD60d{z5V|*1(;Zx*o$zVW1
zv_td$m0ulgU9IibR^p0?v-V{T1?S=lez%D7R(p_@5|8VaP21PSfF82pQb8M2X*sDD
zCh8}@1)kO5KP26T%COVN!`yWV4CeQ!z>Sm81;`GK3h@uwL&euc#C*e;M7nD7v<8`|
zG34-AZeW)b3736PO08E`ViPEH%5uRf9f80s+e9q@JJvA1jToALkW3{_lEZSVBHMba
zkl>lEyM;s@(F#lNX|Hg2=5afZslHu!f)!?wD2Zz{)3ysObsk?`4jZn$pgZ+_GQ5qg
zA*ieQY8lAn?(=y&SgqP0_^eTZQh~t13ltT{@!GNqQQ}B4+-E7#ZFG!ztMz?=U>cH_
zB{}-0R-DmYJ|mD(%7wlXFAfANz&hsWTLg;|F;tN4ihLrC1*q_KwhErDk6&(F!CV*u
zTEj=iSrb5C_Nx3R;ejeQ7Ql?I&1}EwB^C*XQnL$==N<iZrC2+wqai*n<e9fQb)~u|
zx>=fdnjZ;joEPFse{jTQddWTzh`d<WiCagO$W7&at&+jni`jnFV&3}-2(`{mlO4p+
z>Wcxe-Vp%$4OBderY4gul7c|spXg!}tRs}gBQ2V!V;5J_^WPIVxb=iZ$xF1f-r<{v
zJ6XSLnZ3E-ut2=RHqq<Yq0Fot5g(z$7<VT2s?mSejEDZV)|HpuRQ+Em61LbCT+u)F
zWNnEd8XZK?oVAezQo}Qs!A|X6t!<wlr#u{>`3neBMR!qR29jKa&O-wA{g+9$aG)}s
zDkW?A_|1m<pEmIX{`Xxx_T?ZQSRn;YH*5O$ks($z9<nbGvpWn~GvOiyR^(T;#!*GV
zYsbqFGXeaqaQv@wILh{j<Cj=HmcYly&eJ{&H%IWFusqNR*LQb=Ngq(TsY$E9Bhyr2
zM1os-VNT2;trp;w@A6eI)%macq@j;M^w<7O<+50sw_B5##3OEg%e;<4fs6FQ>2iS$
zzu&y&4e>h+%yZm9hnd*6^`<L1W;LwO(TL^;89yDpr~*&-{+ph3W8Y+!@`qUC!TYCu
z*wDy9=bxuV2i3kE)<$5zGrRedrw%U$#BNym*WxhJW+)kv(RZ|~tE=gTw0qDD7@y{d
zsxRNyvl}c71Q78$r!wYgYn9(B3KARE9#`ccqIW3NH-^6)hxoc%YGfkowEcP``AmBI
zyt_d*+1?^rvCkxUBK8iD&-ehi5k+%`5m9~gw#Weyl*e7vQt054a)<SIKvH;N{rCq0
z5^j09L0-_Q^{zGq(Ct)7B5hwLWOVnypjR@-QL#VZH%z<0JxLugHr_l*dK6NSe}tr=
zLmPa?V5?})z(KSF<UQ(><-+aTBc@^vkqDFbNI38N#Lt8YF}=G)toxp^9bBC4ot@lK
zGr>d<()q6LBtcX14$>x`IC$@Br4N1CIkQNv%OyIj?)m4!J_~1>jl$RBv;e2xBRCj+
z^nV-!3Ws-`IL0xsgu?7N+BLBxTaHBpHH$&MUVhO(^`92G24B_^VWs`8%cS8b*v9O9
z&0lT9dE9PHv#D~&Z4ZF84;7kF!}Nj0>|~i$uvh|vtlpHi@%5y7_z)v+?h3Pf<g1^*
z3eYBJE8KGDq=;0KD6A)h1ddsPK*1TDxb1=9zO~1C&xq|;0k}T*@jk%^D2T~RhB+6l
zE@2-}_rBjQx6>arjHYhP$+Z9uF9$gbr}j<D8#y%puA&eL-zys)E~8*$dXa(1a`(59
z5$*DZSzL+<KTE_#Wv)n~;99@RDVOd6k)#)AkBm*3R2!Myl?H^G(0J%i3%TVc8a`3i
zHO+<8X+GJ(S?*KO7y{}<MQ^-gNdmrK&-AOaAORZ}dn5)PI-<zT$k|L?TsKC9KL)Nn
zZNUcg>O#t^`wgh#NgCJ*vzNHD?x&0I|Mje?hd8k95LEkHA6MmM9nZOyz@y7%_f>o3
zwZ}G**Wo^6I<BaQs(&CmI0f};B1}n0Zf-0GC+V65$;pDmTBx-{ko5x?Su-Zvmp_p&
zFBFh3U1tK-Z$G@u_nq!4j1ecuucQ}0#`qTz&t<<<3cC)vGQth_QP1VXZV%xN!AD{c
zFcTlL%+<2PaAs~l(yMaNE%(wb9%S*TnOWspNBdQny%mZw`9?cK1n)Q4**TnwlM^+1
zzX`B`-RajW-5UlzHCuRZ%d~Y6MhEJjmuPKdkHmKumvR$pA+=QZ2{r?(&ZpHx=iI~d
zrfJYdC~BQ<ucxw0Q-3ENCJWBAFRt#?_SvjmRs+^G#*d<F{`F;>)q02cd(xbdhMR;6
zzH6V07#^l|5}Ns4e8c?w=g;!lZcJ_^>V}ujsT>|tGT1@{?lH1ZLL4Z-+gbopRs6^_
z6_xeEW{B^tuYGeSL=Gd`Waa>EpV8E}0PTBoy0Yf?$%N-*sr$7|xz6ve(OTp7MN3wk
zI!CPK$EO@}7*&M{)^Ze-F0XaG*$;~W&H|+hk+2bonix*u*YNjCWVl?_ab>>U5bV;7
zw#-ev9U=!=*gZ1X9TlzjM$f-<E)vGm5^N=dV31QKJUVr5zK?R8WVmF}Z(L%_+@e@*
zS`I~Bt{<y$z<t+uL~r_!KJN0#<2BT}C=Dlfh?NR4r_0OLDD!N&Di}R?zLXk8=VTvI
z{Z`1s&pVO%#K~yLnQxCLZ9FBE6hxlvsivYsG!QO~c74CM`v;<~(XfYW9qhSeHq>sm
z5y3sDfItm&9u)Ur38VS5v{?#{UChb0!jU{mb%)KD5VC0#vX+*UFqbinDs$1$PACmO
z!SS}s{p&0UFk$y7ynGykMO2{}Z`5r{9t;Pmm+Fn8a9M7kN8l`AI@x^hR53~s1ilX8
z2jgYDe5dz>$Xa{H6|}SNaL%&_p<u%i<7-Gi_e>2e;klyBkQ#Mm{VJpukJme>$U3he
zO1F%6n8;_fE=>JBLN#45hSAYl_8dqA3c090cq>7TU=R`D>EpE!#yG`@-mDVxX-=c7
zYW;b)?5T&*Wi7LIb`oM&$a{QgR!|X!&AbddLV&Sefiskd3FuZ294^+1!&)@482N=C
zxp0+8f@&p&X2$dxoE9ESW>M)&8`Lr1%sXAyP&2S_;!j7IEv#}DF_&26v-VoH4{MP~
zvd6OjkV|YN!PHWx$4~cDPXrq-jla`rkUKcx9)%mSP`uNfk4!u-t|m;ppIR1Ac$|9D
zq&j2@EtzDPh>*4t4OyvVfNeWR2)40l56rUZI)qQM3quJaMV6CC97PUywPT|8M$Nm=
zY9hCWUAz6#(mHZA0{GnnK=+FZ04oR3mS&g&bOluvg|1vTsh5sdBuSh`6Ql*86S@tS
z12&DRYQ5AJ!xD%JY622niEeDbA8blex!Tto)*a;m3X{pPk5!W0RHc_Dz{uCkPYyw|
zq@)&+<?l~InH^0Jt>_;lm|n$S?SRTCR7B_lp-8cLha2OftWy3gR&!HaXrS5!?&-Sg
zx|vA75abB!PCSVtTau*9)JW7!RuAwf?^9r##Fz#I3unk2Ay-=I&Ybv)Ryo|j+-7^7
z&*<O%N5CV@bG1&;9w<{N^%}-`(5hPTuJ<%scoQcKjsqjpa*a+f9jR$xPFiP?Sz3%}
zY?m{3ORXnVMV%x(U3jaBo2LkJ*$~@xk*8JsTWoFZ!)|l?**5J7WwcT2X~F&d5=SH;
z{lt)DN5_^SC0}*ig!<;Vdgn01CpRRd3!NR_%6M-*1neeDkET{Vsd(&Xzycn2T}R+(
zXpz3VC4Uc{<ubU$VLdLIa}8yZ`#=Tj10ij&Ggmg`{Sl2q1D(vLmBeH+{z#gLg*>vp
z5P|2l;<nKzLhgIzD{e?t39|L+(GVpcO&571xeiF6H0%p^nb53&gdlSq6x7bSocueK
zw>@C&VzQTyy33vlKJ?dq7&}jol=J}%vPmK!=yDDwW*s&WKMm?wpn(l&G?RckmLbju
z$0b}FN1otZz;O^W^d`wsZcH>9DKG?Y3I2D%y1;`Rf?%868;ucB3?x6jSH=xVXUY9w
zqE@6(<MI6HT)-6K^S#}LhXN?6Z|y{WPySQhDmRs)4XZi<2GDebE!?o_u$yi3vgozp
zkqmqi>QIqSe21t{iXI+It$Rpa%#QSg(T@DSZM@N?xdM1^i#9~OW`=Ew{`B1+DveqH
zL0GSl_~yU`q3tl6=v5}QC3>46`Uq<?7D=>TC|VgsLn6Udc7;ChOHtM-`^g9w;Z5P|
z&ysnRN!(?At1A8b>DvTtHbCgaT5*iZGWD(?f~Yvxr~`NiGgnRU<?H7(E#jHIM;xwi
zFDJ-}b$e|~PX=NG>KV4>p1CoX!>|vv>uN^nj7YXeNV`48-ebEd==mALq1k#Aq%uGU
zhTQITdZ&Yid6Ud~SA_4U;un(nt5bH?#&s)^;MR3k@*|wDDY|TJfd`m&fr!&_mr(XP
zhK`k5r9VDps@Xb;;yMJ|5;1Z4b_bi)RcX86^`b~W_Nv|qEsRIhx0-H_@uqN4d*Wq$
z>(XlLc)B6clq4~<-~VPRrKHMPz5GKQr2m{(|1%-<(=%fH=cZ9&+@|^Zzr1uGkprNF
z7|OmRq0CN%M5V}63I;mK@xk4gYnyPc!#9;Q<=(C`6AyBdcuQ%a9UP~Mx$~uxe^KqK
zH+ROq5Ak{1-9Aah9$xQQ1lX?Uty#0)44zz*VQV^7%?^>+3IV(D=<dQ&r;%15fx0aT
zLn@+LoG3<tZa@p{6M}cPq(nxL{dy_lWK-rQyUeLSVXuls#UaMuf%B^bD&;*fkf@Uf
z+$GXt>>-^1Mo0wgbU;a`Y-;Wlx!uVGvb=wF_o~;*W-jOKZ%|h^IjC}wci7@R^sKV0
zYP_C*aO5CP<5ZOhV|jOkE>y@YuoKbuzyz)?KwMbVtP<9ULrq|cz;m6e3ywLr3e#_<
zkc0TiC_q+MQ*l?jSaJ6)RJ1zQPmySI(1zL>%yz-4p{+EnxoX+G)4hKYYJI^SqB#0w
z+ld$MoyIq@ou=HoKD|s|PnY3UgHF%^H5nqC^SY%o7vSy!R=z^n2Ax$LVhx15;lNH8
zeqKHJ93LzcSzqyfh??=|FMSzQb9^oSD+8E~=dr_NH0{7MF)w#W7${Kf_I(;(!Jmg7
zjPe$AyKSCF@G8MBvG5WDZ1h$5pc#8-H#O~m&)>~og+7_^QSkxk{cjT8+C#(Ye|d6b
zp#0NI^V7UxVKOo_`p=!lOO^lI&vv{<+B^AzO6rVADA}mrH-|b+uLr&$SaKE>EsTjs
zTzclP`#L%fNhog<6bcj={LczO%<~52^@v_E$Zs~e@pM5deweM^UYXC>^UGdb{17+^
zn(6839fQ2DBgy`D$q))Lup6529VGgKo3LW8Q8zkXygm-3$ngZQzoWjSIh1sAe1IXS
zE@M%gm%n;+C<0cxf0Z&Bl9OWp4o5yB*z2jr&@qQcObJhpy&>MOLF8cCA(n*b^Mo)j
z^4hrAe>#NW+YNNatf}9Yk>1YEu3DB)Bo0LlRV39<GRyt@=a&wWPRS#K7bA9+a=9Nr
z)*KUNi6K2zN^l{2fb1}WHExsoHq>Yy74JS^mNemD9$$-s+Mz<?oVbOlrVtIPeX7}w
z5dg*f!zi(YbrR<9lj4%RF;x7E%c($6mTbNXc(C7$`}{N`N<-J6VLImnA&T#5vd0u*
zUIx+1e{GB60QejI*$nVYTIsudGjp?4YWCpYT5q{><DiR(*yBhLIT#{HgA!X2e|^}y
z^Bn%dm60p&+%zj~4B#RUmMzlfi==u$IssoTr_HVHM76|-<$oujLF2f<&{O#^POJM1
zh9O+*km$btYDGoJIrnldT45_Ma***j^Ly<j|Al{ky^<D`U>8b~Xu^Gu{r%>Pbz~Fg
zVCw+Cu?8ku{M}r!FF}-wTiaZBrlAF03)R92?U<W)5<R^ETJ0e8W{e)PnRX*iY@!$6
zX?Hwxu>7xd5YprO;^L$6!an#0M-V8M5G=&x=93}gtVQyhBAEKFcAk6d`hj4YiK%wH
zv3%7?eQmxF92rDUAWDF#9H9%ssA&C6hyRh5I#Yv3HAfzT16dP6^9Zw`4Uiq@(`5ig
zK9g<Wh4cCi20N{xmB(;zfZzh5E*!bBgF`AJRQ?)BHB5C+r?bxXJk)A)4`IbDEyf)e
zLqQxtyzrGO!x0Vb%8_KBW_f%!zRg6n-N~8*N$|NVJt4BsSc<$`e`-d9_4PZx^Y3}r
zJ>sV-HAS;~@+Zy=gUjG}9iJ;wUzq5<O`t3XH5T!x@2)R;V!Af*3R}=(A8+7Mx4*C~
z4b{cg+CMgv^iN9-&$#a^3QqJMaO-QWfD@ZN=c}A6nF8jO6)HsG4k9A-mvd+-T-EDz
zfnFNjl=ga;Ot+z3CK}47dqK_3JS|1ixq${9w++`F3AUNU_H~6?EEFpNWsSmHGqStr
zFlEbw;BO>{<reATn??N3B?KXu5+U-gzkl`=UzK)ifx@1k>7_PwSK{7sgqj>N6Y78|
z5dnA_b)wnc>S)-=&93(CKPy2zww?$N<azdfv6*&9`-{kV`}?;e8!7qy0&n7M6CZb-
zav~bKqi*vq=HvawSoy$Q{<kAbqhonZxkA8=Er~D<{^4rP5RFrwF=uLW>2yM8X^}o_
zEP?~NSSB@L4l904$PQLh_{yLk;V8;WcdL9Ro^<F7{k()nc9D|N49sISE>d<qb+Z9p
z8R*$xzS%at0j#d~HRH)I3;1dfF}Dx`HpB}4R0PX*1QXXM6b97!3s%^AZD`<Z0|cO(
zRW(6Q+>(L=#Mn4#eZntNQs?R4>=b`W=e7H8>Dk_0fyKQeN|~&2(~-8l8S5in$AoU#
zRl1VhALL^w_6u>iL)-=Tzgz1RvpJqP4G6oj*uB05At%D>xsx>AQ9l2T$;Yj!+Liv%
zLdg*P6M6hEX6PS99G9wA|7whXW$Dl#F0kbO9XLA7!7iTbQ4&qS8&TrOtco?T8A%#E
zcVFI>9rU@5boq=M7~rj56pJbZu4BBvn3|}sufM8b)&1?x&=&LhC>T)R-Ccj`oT-H_
ziT*%{s;!mTD@66J+ZCKIC}UW$W=jOD8RzFOQKZUc#E0bvejfQwrAXyV1g#3)222<U
zp2pN-jIyk5<qOB)r*VzLUy3gmY5NdJiSE$r>-D5o;1{wpzAkD@`+%`w$1T=N9SL&V
z34b8!QF4*%?kFSs62PQTQ$N2o`no8_Qe=oosNRzp{Yo~gndb$aMbaL&6#G^?-`d`8
zA@RURKAUvwG>q<4!Fd_hg;KI*#-x2agC^Fq6Qy+ha_d!K<Z;*Zw-Q7WCg?%PqfQx9
zNlp?ds`TI&cD5#rS_&qo)SKPXpKp*QAQ=y=(wpE-xWqqteEvL@+a)lLqCja4m_Ez^
z*(qB2GAX_r>Xy76zubZ10z{aW7Ww)^ci>H{Vm4)jRSbcqNXzZrX9byN8SbXs-@pu5
zQf_Y4dk4}P(CJb8DxqIe2yqhzLOnQOIN@54vV2v|W%gx2{Gc&L1SxT9pd*-q5)h7@
zc`ZX%vms&-!hsvk%AtOH<ocJAA{LPqQ<xJ{6G>au20%~vAuJOS>?d4Uo$O~IM1YX}
zITEGcmE-F8YfQFrqkF6YYz(4|=ttyVIuha4994ebhb6R=ypio{2k;3TD@+ep<zTbb
z;jDdq(Xe^-B*T4RXD_r~w0ZvhhB_qLDyk1^CokX`DY%a5Y#G>#Ho=G`J|5a3*AT8T
zJ=~c0d>XxiwP^u~N!?YWh{Pj&jqV+F)jLU)a5Vn4V`|Ia>iDd2^V{)H%%y{J!4^fB
zc%h<1?o!m6rv&Z+E46MGMsdRaHS<Q`9qbD_9oET7X5^)?u>o`dD7&;n^dVsqe~K@>
z9zUvyC{Z>9Y#wviyKalj^zF?-hs*1({tQ#cbrWolaR2Cp@nh)JiEi$(@;OGwCBKaY
z#+G$%b0@S-^~}0j@Ug0htc?ps*8Y)ub@HCovAc)Ft+PYtXQ8V{Yu3CL=m}~x+c=}V
z>mHR<m`2MU)nu5)%g=qdhP|<wa+CPfftecs$xVYtMtq`jB2<-5h?Z@q32H5m^3V15
zb7d!qJwn$imKA1zR20?>mTw}WRy#*vbi7ep+?+}H_LkF<vk*5DkL@TWc7zB!ldR+?
z!?vU0P}P(6D<7WHdkj#W6^LIOyF;wI=H!yWura}-i6H*6_#k>Y#bLrh#Ugz^x6Dwk
zoLgR}sKm@u5@;|FRfd@@!+*nN7IZ$yeijhgmtRIf`8`>;70Q&obY{t2x@gC8H-apa
zn5SXY-Pj>i2bP^;<F{uIB?wfEX10~JaW(niNGzi<q-0OESUYOXJv-*^=6Od|URl<9
z=H)FNp&@PCqYN<>@HL^>N}Cs?z`Tqmb3@4k3&hf-(8=lU!-D=q3tIenPl;S~JvBV@
z-YQa#`xM;2|MjZ-^0kK^F?jR9x-hbh74kJg8ngDL9_v_P5|}YMvi<<#B*zBW#7rfY
z-UXdF<c87>d%MP4$zE|!Cw{WU$Qcg93Zr66?NLJIue;lr#T8IWt7rK;`VZn<H=j(=
zgioImoDIq*%$qY#`<dB8mf{T@!(n}7`{{GX7vV0Gdc<u;J<BcOQ^60mN~gZde=kK0
zm$@VveBZ<`IA#3lw!@}Oq$2PP`dz2}wD-uXaogEns!Z=nZ(A)Oc>Y`^44sBAA=kKp
zdw`t`YH&36e9-hC!Ruk(GTdd1q$0(#e0ZCpHsIMa#2RQ(j80?`y@N2;b4DyAt0myp
zANuE-Ihl2eo{Akhz$PS_(A~GmC9x|fbz_d;?7m5jGk#<VOa@MM+~9x5*puy~3#?Q?
zx~7P10Hc+oe(-j#Qw&Xq-S$0|@*d4E?X@Ui>a-vzA!CaxuurTu<*zB!VwIwQuBY3v
zOl+Pxa=Mju!wcMLpLFYm(hFuO<dk1Tj+7Qn-Mb3GNeNh-(m)qWIA(RvtE^_Qdh)UK
zA6>-KmJ*hgrA&`*BaMfe(V~`t^Cd-y_6M(nl4R0E#7Bi`WoSie>9f0$C>^=Kh6nv(
zIG-JMPImC3WKQ{aF#*u9m(AHv!?_jgpN;{>2KH{YjynI4oavQdC6mwlW5{z)PQpxY
zIha%kr&7H*K<1)7S1+~BdbAMSM?ePBN3%5avT1`#wm{m1znS_u>64PFwI&6UW{WVm
zKHzf$JQE+kRhv7{L&XIepAvNcie4o4Fk<=Zxb!A3uz80IT$cohZ35k7l+i(*jHq#_
zYm$EoTT~!~81Ko@-xEUd)Dl@YpaH--4|!<`wNI3HEOh}PYr6Ll2=rpmxEA0KFsJ&k
zpG^=;Koo6<WXE4}K}*U&Q(~$>>Vf^r1b%_I)RmX%AUAGS7ap8Kh%$B_w6JdRAY469
zz@)!+S@87VtJXFw>B@o3wm1!W2f3MGjS=?hS*l>6%_xUGaF=*a=#ee9A0>yGxzl=8
zxC|{!$KyI^_35X1eVDNO<9KxeNz1aZ2f?lH8&k~8CO*mWX5>mMWrdYYxj}1bzGaa1
zWqUOvtErfX_SIG3?25~Qrp=JZKwi(qqF3!yr~KQdME#<v4`&8T<rJ641?W=m!>N7T
zY1xb#qWTn(JzzR^BJmnRZqc4#nw+ac`mNy^l@!mqT&-U)lVm9BO~f*m?FUW68OZ4?
zo_npV0g_#{`dX9@iTm7qVRvct5FS0w`>RyTKro0fbP60F!KQa`l-^`Jx14JW%yg%+
zqe(z)Af0&kW-P~S+ms1hC>WBz(eC0P!8X~Q!)dZ)AL-})MbQ0b`@i!E0jm#jG-)Q!
zFW^hvtT-@?znqauxXQBG1L2t|re4y<AKOrtOXts3G@GSuWbHaRxYd#UHM^x_Fo~b@
zm8&)E1JpacM>7}BV8o-(ocx8Az$>psl^`mu!sHV9Ej;uU8)w#v&^-nhoD1t!Cfb|8
zxe9t~m=2XhDHOE9V$*F7l~ScpkD(O0_(FQ{PiU>_hZcWRq#RI^1UP4x-RT1ja^B2Q
z4y8bE>$#yIVu?yFYpL+y){0O5RV_x}E}QkPB56EZXu~)<`V(e^?fv$3>arLumcDg}
z^;Y!nv3Y5&l^(}G9L)R=2lJnGyY{vQ{|xyG<D@KpD45{uH<SP<KE!B6G)&P*4SA6e
ze=+||9DBq$b8M^5EtGeJ<-ngfqbkE;>LB^D{=8JTZ4(pWv3YR$lyd9pR|N|_d$-ry
zkN)>j5UvJrm)~QH=D(iRy+n+6*H)Fy;(Ht6YaT#>B$!IFYe&Hk)S#whF)e#WL77*O
zB2OgX-w#aTqvN1=<k(k~J^qgQGoG+F9fB@t;_bi%XM)i9m0FRy5@Ym5ue0=kO#tX6
z0xPYD51@>;cZ$gEB>rl8;h?ov8N@e9m>0BYsZCp+vKR7(Nqp>DTAR{5e6?;KN1oJ;
z97*v0@tEg{jBj+N6wMNu<)lfqg@GyNRAw=)b9Rg?5F|%N;=!^r>y;2Mdd`ee(=ZdY
zXvPVs22U`^$-=hE6x1p#uk>5!CYk@f5vE0$aZsojgSnFESGUBjG%_g4-T5S2W#Slv
zUc+;WYp@KE@;nkd&i?pRMDJf6BI-=fpbL1Z+_HtK$3SkrKivNm0L%um2j8U-WEBbx
zrhI){=vHcA1)S)fh?nJY462|xZKCs@NMLGuFjJoQX8lXTy@z$k;FI9ZF4A)?^Py6n
zZFe!u2~Bar>it?sIBM=}c^VVxb5{BtzPlFhb#G!=?9~yhkng0<&y{;&@qqL{wck+K
z-QVs%#|HeL=*9nFKK!Gn{jYEFe<oxqlmE|C!@sQ2ChQQU_|sm<VVQWLdb<el*|e(6
zWsrrUJMlpcM7#m!aJD<^zZ)}w?Jqk`wJrC4#9f~*&P(m5jaUmsa&@XjyO&&~pF6tW
zA_DVPZ(L}Ojqtawo_x6T2huO>naHnPV)Zncf(Tx5uozy5siL?-Gl#qkOF}0RY)HRQ
z?C|8rmiq+FL(}RUikUXdoWi<@K)78c!s9c-B}dp^xh70eh5ZNWX;ImO=wC<s2_QRH
z&>oPF9Dr&26Zkx7iwx5|EH7$b^~nWp0~!QtBJN`y*qzI|sL17`Q3KVog69d~ke*~l
z#|yW)rqNbqI=ANM6<BxK4b>K;=GL?9&l2ZPr|v^SCx6n0s-==u^0yDKpY<+8gz!%2
z#slb1r(#+yP(v}Ks)kJBV^sF<|6pE|XAIWaJe-df*WSDBWkgR+iEPMhU=8gp0-SOY
z?crrGZzbzc9ASN@X`fw%mEs2S7?Mph2PH;j)1bMLH)5|t2(pAB{yCd+IruPCm-hEf
ze#RFA;dYn9XBb0D^RVkVg~=D)a7QrGPFT**I3}gCe(Mp)VbV}V*OtD;+uMi_n<f)=
z#W32X?%2q#R}jXCnR65?b`isz4`B*pHx~?<U)QOdnQlvE6TV`^=s(UI?^{nfe8r|E
z^|>m%I~F`^U5fg|;>hd98o<4Loj4g;612#@%x|29ow>^AK2hW$b>$J_<o5_(;yWK(
znw>dIi~)-NUrWIO+xGt{P1}vMegFSaOW0`tOTl1Q9+~d^k75=965;%WvoKP7C9^1*
z%MlNtfGKk<nR99oKFk+LgjM2T`|om}obCPZqVM@B^XOkcHM_0fY_0H0#(6@YGwh24
z<PL2(;)`ma_|6;iiyQPIW#|7Y=3(IfQ5EbYZ2v0M|1JmZ;3%JM+ZZH)uePSjN0{f#
zd0B;$KraK#^&oOwD2SRJv)+0C;zF)ifS(^{z^bCYAVH|ePq{U4(zqEsY@ccKV8#D+
z>t*}4vvSjX-dBszKSX8qvVPONYtz3S+^vOH0#nHXxezRk#bI@V&3g=x!8eKF%lH$I
zFa?nDiw(#YbO&0xCQG&TDU~s+1nptXy{UMxqQ0xg>XpNad7&*S$oCgZhSvGgq%01t
zMhweoY<R~`vYSGmaX6@d<QiY3vc<@;B9RT?2cK!~)-LE}?9}b@+v@Hb)qCmNja){!
z(82BQl!2%3#r*VLM#<+|g}>3*v8}Ka@N$cK%t^?fM%<Hg6?qfk%|&y?T8Yo(ZY|9O
z1otyor72&=N3uChoCwnW*;lt_z+{KN=oCIM%U}=gyxZ7x2foO1PkVH%9TRZ<MGU91
zkC{O}VTQ`i<APPl6lzek<5_V`uI1NfgxgU=Xh>bqLSOo;g4VSJ7J9E@!kc+O&WFhi
zDl!(B8R+LydeW0>X<QE!FqOHQpjXC5&jhN(c4x28jl5G_r23WC<|pcx(C0#lN7vCc
zvgL~b>H=cPsK5CMkE!%m<&G;fO_0UiEZo($$?C5+$TO7&mC}p6t%5x}AvhhEbB|%E
z6CE+$_s;Hs*jMA5cP^uBJ{NW6N7_zgkt;zz$hQ}-PPHq9_CmytriEm0J}-E%tnU_^
zGPQ9xEU`>w*f-}-oAA2@gi?!5SoT`2N-bK!r|p5v>;<^zZ{?Ik77HsLqpXNI7arJ+
zy#hSCa{C1sg0WVb+mC#D&TML(wT8x$%U=(m3Pp?#b7o#^Q?FpuJ3sZz3LssEd??cJ
zhZkC=PX9i=TG&)8;Y7KT-|A|B?q2C_QkvXN>4YU_n^APUCqh(TJCP~OJQRv|K6tCy
zvHrFBY_Qj^Q)P(F*9}jh96F9#**F}Az1%V}(o}kgH$$XKZ<kUFT>Fu+XR17^TM>3u
z;l?s3;uG}S2qRoCF&J9q`1I?RD&~P7P9J~Xg+aM|8#Ak#tja1ZO;(yMDUSvWXR0T2
z##u<Zq{EJ#-rR&f><SlaVjj`jm?no$qR8{;Y_}jgdUh~RweK+_&Tp+_b)9ZV@;<tm
zb$k*(gQB`R;ojRUMF6D_Z*ZxX)vI-t2Y<A^|66wo@BJEZ`sai}{Ex$dKT67<M#Ddi
zG({=M{R{{GYfOZV9)j4)EIypR)*LQWX`To;^v)l?Tz<H+v(VX4N1kH9XM0slTs@_M
z>vhUy+iTlpssxP}j>f5$*`63a?*4w7bf1kqz@vA!XvdtT-CrZ$$068OE^lTCc9&p!
zcZylHWj`rB+(ZD-UR5Q|&d3e4aIEFmMbE(_N+6Bf0y2(}fG?O<AIGNu9C+a&ELc!O
zO#(aE*MzGd9tvG2jeRP`kRG9&>kVkpFTGO0&YpyD1q#|G*l<9V)7~m?ZRu*0c@`5V
zGjQs7)F{maGUi7t(b-3cfj;lwQ7q|`vhko6_qi<Pa+^%%2hbo@4ivZ`y`-h8+QvjQ
z`_5SwNpOR5@R1$#Q?jMui1<nvCy1M|l*UaUaayIs{B4>LY@Ax6z@3^s>PV=oH9PW^
z8T4C5F$3AN1-kS?A#DrBneKNby|zVCp!_zvS`2)m+U79rc*;Jy{d@(9&#Sp@7?PAG
z=}^cIimh3$Qi(|zp4n4J1IHJRTQ@K;I<ZC#I_C8aj7EoJj|{PxCt}RtJNq`vt~31J
z(0I#4jK}6dd)WZd<G5X!8YHgDbHW~%W;@ral{KW4Q=kPPohf9l5KlwxbLHvhxUz#l
zC2_xY47+=rC|;J-XFJQx=Cq_5yDlfDV9($Rj0ZJBihb|wJ`|5(qbklC2o22im>9Ew
zoyzid*d93Yhg(if_PG*J$iwpk1m}oMRX+qPl{zAja7mpqP>`7*@93d2|EM82A&QaK
zB3u<i-p9v-YdcfMOMs7Z60A=)rKPhb1d@T(ba$LS9&YwudI4>DYl&ZmB;3hA%}3)o
zzx+-h{Z_l`xO(2UuWnbMEl6Iw7P&GCly9A<9l=ooTj|7%+YTY}Hwew%r+w6d+3T>o
z(K0D}=}e<=lX>0GbYUefKfz0NjAI6RSbwIp8E(oydp>lUt1lLn@?YMe{htspF~ej7
z<>v@7_2X0dpIf=s20x>;|F~E#mA7ry{<T<i?DFT3(SiH=7k;ECKuk*f4HTC0N{t9?
z!LCkL32d_e2W8(Bq*)MVS+;H4w(*y3+qP}n)n#<qw%ui0UAEP=H5;)H6R|rp`*P#U
z6B&6k?$ehy4^*E5Zn&A1a6oLzd+ofSCcZweyLcnaXM%AakDO5(#S8lRxw-9|b*?os
z!O$4eRb$6Q+u@EKq|tImXcCQ%`ms+OOYuqCi;&?pmOPje<JnC^qa)vuVDrNZoQ*sy
zL3ChgN9&c{fNIU)5EtR0Dv08L#}|WO4CFe&JSNSRf=~pGN03{n2vb#O!6ffd#6pXd
zfgH)o&3i`wor*&UW87eY=HR=52OJKlV@z-jTMERej{o?$qI`*F(p+IuwZzKj%shEt
zNmdg_x04Quv$|PlJLd}VJF+=wt2eF8`Af(m5qyjf*t%4LdnRGu{U$;HuKx&Wu-F-z
zQC5qKQYhA-C^8IzZcQpIit8ZTf~L{tdpX1N-u2lrTzc@%TkXS=>(0;kYMSWh{Why1
zdnim?p->i+Y>QkIAyP+?75&Yu#29T_ecoTH2~=)e7~BbNmVpqUz^N|=ay};MM(<Od
zvjz1^pi)g$VFHRqlw9d1#_i50O7#!Jn7dM=AJKU0FaW9Jc74lRnoqQ|pLj586=5i5
z9#K)Y`TYIb{aK61-Y!_s9-qK$P5N5=qZ#Zpn?>19U`FnP105qv+pSvckNWA?x;)J9
zoo4&C1Mam>6wk?MN;~@|wde}9tJKNuT;KRjV;4);{q_*7KDWZsfF~aTTMQAh*dtO*
zReRymn*G`wkPRgxdd;lXb)^m+Mvv7gc75=)ze}-sHk;T(EtLy<Fo&@@?rwhE)Pu`R
zi+j+sUic2Eo6UGP<ngsmt}k4j;$tV5Qf<jY<qT|-o|xEo)MM?lx8S^w`R5*rapl!q
zzSHJ2Yg%n6y0&WDX<Y#O_;fPnQ_x0J@h2~(#=>`?w_9-jx$mK_58|&I#D7}>?J`i@
zOJ_^Neq$w<zaae1TuWn5$#}*4+|<4&5THJu%9*~VjN*T{-E41mC2!U>a}%~~ok{pw
zw7K0UFSp7jz#V|?rmKkNR*V&JvL8nfUoq0;)%<S@_5Zsdp5VU}uN%48{eOt!u`z6v
z7s-Ku!diiVsQ%k^|IbB`9h;geG!W?jBT(ju&&FkwD>=W^0N5fGpEt=&fPCGpOD9X#
zoW^Z^7@d;vxlETqy2#d^N=Zh!wY%c;<-(p1DzM;k+SK0tB6YYS8|Xa<AlMIqur_7v
zVqm_?$qvgm%ZtDlFfFiEa=A^RXQ10{bYgaw;Huw*x%pm3RfX)6baKh>{(J4CS$b;I
zmHC|T5pgZYHm|nIb)fY^T)R;lm+T~AjTj_9GF%}Z5c}1$)~Mz@yCOc*ss=N(#Hlrs
zu9es5%BjG~KDA=2U(Ml_UVTE{HFb`QqZ3Oqnn`J+K79^`LpkT`f=D`Wvz9pO{qTNV
z)rMI|R!!4N4%a$f**R^#$wOP<Gm(tbxxMsM#>30~b3KHM-Y=wfTwK&Gu<s`i##o%=
zorb!5DGFR-pZpXYt}os{*G*T+`uX$<$?>EB+A3L9<;qV8e9Cw}1%C7GqCcISn|8*Y
zn39hEpru!zNp2R+q7`c>B1CbUA*rBFEkn~vwL+b<O$rB@H7h0EZ^K;#{h7IH=Ir$E
z;7cYQbK;<+5*CYb_8dpNOFxinoki}PUdYH&WcbXh2cp9Ege>)<am~K*iJdmxtrG$#
zLy{;lV$C2g!1Uq6D=#{pv64n_#_;tWqEm0T{^IQuE}-7zwJY19HDHHCZJB}^SdmH?
ztyNN+bYDmot~q3fGobgE{k>h<CH`MN`V8?7l937ZoW^!Jjk8Yk319tGSW{T8H-Fb;
zTaM+ZOdEAOWkqAGGatMXOo*|jYV#($bjCk>K8#TLEUmJRm4SST2fqGz2_Pv9ug?sl
zE4_q*?Ajq*@k2^X_rfGbdq}WPxDpsEYnusA%>$=i+gM{tkfZ(qsq~5*3T$d&0t)Y>
z+Cnh?vcCYB3h!SxjZb{L49d?2BJRrJ55_%s+n?Y%beLz!J-iVk9(RAw%U4e@84bGq
z{O<ObeI#zoS}Q6))WY=oMA7vYpqMbHY=1Ez)YUQw^zsLMU!NZ%e=O#+F(tYBcrSg+
z1Fgpp>VsBY9%0vpecU)WZJWZ%X-majn1xkwj3La*1DV+qeY{<bWoT$%&|C_}1AQ_v
zptYjL9l)81_I$*~9lhW1_aKDtsy(n&oN%s$)O!)lzxaE9A2`%`j~SZbtRdDJ=stol
zX0sJ=3g!iP?oMHLLAc%l3#-)x>34sxU%U-01?qk(I7BZ1f7qJv<LgNFaEx+@!0xt(
zF<6(7g?|3s?s|abumV~&W#@l>+-Ncs==X)i0HUimB<>f1#Q>&jG-U2SfN;{EhIY8l
zA`;5^pn$6X8w3qf;$;~OWI^x)WsOl-f)q4B<A6%0NVY;$vM78YkeT&9<DX7|T=62M
zgl%{fki|6L2mvr`c7csJR(e6@vH(I2H9^6Hi@-u6`xih3g;1_QNJ^nRK)<O-@PSOx
z8W4bZqJJJDFmZ{MJAd}Zs(154fV<_tJLu0JZy#=_l==|;_Z?32I|j{8k1JV00{(Dl
z9Ch|3z6eofW3H~}`jP?=mhkx4Yt2t#`|K8+TWU~ohTZ4Zvx~4DQw%{cs9z=lkgm5!
zqtw5H+Q}6h1}rr=*Bc2M^^_2h(c_c<IIOG-whhi72#Hb2+*kfs7lqJcm}#q3XQT6C
z3-=?|4uUYH))*pLa{`!F$p^{v9wJokADD#kE<Qj`<+&3$rFyG1$M0RWOsce`{-AY?
z<?VIS5VX}eEV_l;o2jVku8?SwWeb+R5RErhVtaa_S!-3Jk<JlL^FX2EYtdQWg_o%M
zCSp!$gJr+g1u~^m9LsTh+%1P?)5{%+T0<3wyod%T`NE;mVq@-5n57$T5%Zk9_}&vo
z8}dm5h_^+c#tq9VO_!#@<3W{Zz_D~C`<>HfSfDztlin4qI_E<vnP@82UdOy_G+(kx
znu5S%Q%rzFDKrlko!e>pgLg<t<VGa`8Io@MTlgStKD@)R6g5i4f9ErqzsZP{q-GKJ
zMZEfiC-Q%M=BnncKz{w6f-z=o)Fh&2k_8l3EK?oD6%oU_Iv$<-(0m-w80A+cn%}CR
zM>3z%x}UpjI#I>-C;GL<f#AN{BGn5ILlEN*+cKGlK;z1;?=|m2O00f>Uu`}R5f~tZ
zDV)AkvfRK26UTs21(($~`+QCzjjAGgucQ3B+&5%-jK~k7MH@$|_+a_$X5g^wWn(i@
zD1v_HHxz}RP-=_##W57lWeYYmn7Q#FB#=O+4SRy-lpLp?58AI{Ygps3O5|wBHH%KJ
zL<)J-v5)@7krhS8T9}C4{4@rSx+G|si3|1>ey?&AJBIu1XLM^G$zvG~>hz3IiPku?
zvzT*<1UI@o!W}w%ac=qh0LqA5X|pR4JiA~c#gG)tcz8|pc3T`$+njiXyi)8yha@Ug
zvZNP0{nS^^mFhj*BY^Mj>u!k`h5kSu+|3b-!_t({kyRM4YC!fq1Yq_Hhq&B-gZUxI
zu*pVW*fcJZ@~|ScGUc_sIR6Gb=@JXqng_ZhTVA%eEFl-;JIG2{H6)XfB|$46l%+R?
z>#@r&asVomWJ00<B7op--*0tq(dnp>A_W1gflv~xu%-gB+Rrwozh3L*54-$TaG9Q=
z0tQxTAzUOkDS(b`xtWIRD*JB2is@*cYLi#80RDiJr;a`XxH3ERVmdS%9y`Uif9TQm
zu+r9$&hplsz}MgV%!>x96bb_01>A4j(pxuiUQtXoSTk_wn;Ulmj_}mMJiD2E4oBv&
zE(!0mkW3Wnjw)F^^*gJ0i*SL|3XAT(^$O{SkQl)fxRzY)z*MJj|Hgq?$Oph8xgQM-
z_K#bKGwx*n3@xvagy1mq&OzUl7VB<a?f6rP+wt-2J+olyPfB3o9Jo)y+f6&EAhDKP
z)Cu=HpL|@j;V&@uu3soH%xfLmufQo%b~?Li<E7{iZ;wo``uAGJ+{007?t7N)5~Nc`
zB95w`j#HQ*Zl}3MIkxVct?wkHFGY2SOxGXnyI9f`kVvD&5W~lK&Gf2{J%D}HBzM}h
zIr6xECGvjhF5u_RYt8oS+TG-5fb8eq6)4cPjV557jt)*Hdo4@62|~^b@n?yGC0d>o
z!yH{Zei&;4?r`##q(wb1ndR-SG1Ulth(#J{AdsLPr`)+jq|G!H;4-ZUj3xA*Acb_R
z?k`G=;tl6!_Td4wOlN_dZKTSO&|JZdj&Yj{f7iS@&&b!5SC-xDpJx;|-|<BdGQAR(
zekJgt%#iyAFc<12$5LO>imS)S<EUvUfOL+d7M2zq+@8?Al<i?vDY*;&0*~g7Ze6%-
z8imbXd}xN`@Y)oi%=Ti*4w;!82&Kem7?I_I3m4g+B!fFw$P6rAviFx#p&;9Yj)g)Z
zLj|8(Dnnal;6bpnwKh~HZC5WAnFs!?^go$N&gg6-?bO6LBsptNzpl^6$PHhw$@T1r
zWR_jpSZdxr;5SVAJz%AzrZQQ|D<(5sX=z<3rtT-ZsY{k7{^XP_w!sCoB{Xcw_HoMe
zyF9+UhAAamtlDS-zWx#MT)ZHdwkK+RP?-2q6ajs#tMbLXvXY+dA4OXpaF6+{$3ron
zT1V(ZlAN-D8;u1(l3eo|%1F*v?ktkC1rxf*M$%_6sTMyD^V!QpVuh;^lVZ%CYAsM8
z{wCkmC(5!$B?bMf*owFb#_sf&$d^NHzmYWZm`8eYkUE8UX-SNfxdQt65gI`?r62_h
zx$r&<nlZxK6$g`4mLb*fJez<4O{3qw^&yQh!_Lrd+vzF`D-|pkB~2DgOhDx!1g>&x
zeGV9gp1VOAjb|WQbGY?a6uBvN30@3-(XVHB!5+Q^c2dXRqrjDYiV(ZX;gTFtc$&)u
zVU%N5MlCA8C5NobrG$0PgOWQ_OHtm}ki3VfqlX_QP=tp%q-#O(2iA&+Z5NTW*+Svr
zwf|w!B%L0p6{W#-s`}WT&^mFof;bFmO1T}n*VfqijsrH)P7431UrKMw{vjRdh-X%(
zS+&HYt~+2|dV}L-_O^>v!7UzN)Qj09_){owXx^^h@@wXV3OTR$fU%4{rJ|`Eo~X%u
zC>vXovQ-^_9IUV@W~fuvwRgD_T37qy_7wp?-mb$r@5{-iuYZD7rj|I{PctQnC8Rzi
z0-V!|DFxMay30!1L{0>CrYLMf2)>pfLdL$sZedWyq!~f<+%GOhEtJD3#+va(I#egK
zlZu@$wLxu#eN0&si~RKc$Zca^!qdR#3pbgEsJMjmUJi9MRP6xaj}2YmABUj}(Vga-
z$FjVN&6>E@_*1c6B%90x?}e+1lZJnME9=hOB;==~i{KkDE#?jj_bkTGTPlYY@r$jj
zkx!YOcTPU8776+AAAh}bHXx#OP1PvPt{lVFefKtm*r}O)|A;<QY~kiSfSVh~ZeopL
z+%%;6(zdgu&Fw5cZiw1k$Lf9p%@<oEFsrd_itt3(6CB5!k^S@LJHElVSuY!J);&t9
zNFjY=(Z7o1uSpN%;INV-@$+*hP_9%w^lz1);bU;d9p;d0H=46msEKCb|9DTGP7CDc
zF**N}N|2A>b|myG-NV8D!69k6{UOUCX|Vkv?HbL@!F(Yp{4>5Hg7@sT=RQ`R^i3`W
z#)Idsh9&aP(m)#1r5s!@19@g0M~^LhT-j(<;;cb<>_2Y(xBzbJKD6(i2Vjl(`wt6f
zJ?qkl$ICgE8Hrtz@tf$IK4Hc0HK<-z=kK9|CwqkkN|u}0i9T_n9qbT~>XIP1aVL1_
z)piTgE?T-9gz=Z~{apc&T}+SfJ7f=u3X$?APgS8OdePIrBYql5ffnc>Ess)m`hfuc
zYK2A$;X2ec9Zxo^+kIG6Ehp2os&UQ*nd1H>Ur2J=TUBAA-bfynoI*)2I|CJt$ewER
zOuL67&L{WCA3mk*eunLpUiJ*B`O>)A#Z0RJavf>ucZONf-GmsPcVP;<Iy~JW<LZda
zNSP{|-Okl~4nJPMw?bx-&zij|yM+tRsCNRVvO`|Fdg)H1Ud4(3p=&{gM=fR;m12P%
zw$h@sS;yyBadCX=4%pd4C}ZfPYo2*q!H#Ml?01Crgr(!;QH*%)7-f?B#z7?&bc<RA
zOtB~SG|}8t8{gd|Uwi^v)26z1&pn9E?AF&MPwAZ4vDXy&KVBA0e^h$5ZL+nDQ#`+?
zO!<YsBDm4BN=<ZX6-sMJw6H_dK%+`(<~hi{vU2Ld9JEQMBf<(XY4XrTaB$S8)v|W#
za1KYmZ(K&34A^Puy|t^w@T=+G^5eDUQPr#%i;2_umF~!VzMel1A<vk4*Nh5tc{FA{
z2nE^nC=KHA(2M)r!tuMWei`ZEj`{qphej@aS#ihcb!K?^lLAmQT{M|`?RQ4A$lel7
z_EAGMzb8;dZ(T%_Lanbd=>G_!9L>vSWSiCb)Kv5mo?1(`ASveu70X|v*^ELVI9+lV
zUi0pym*I02!pD0eD7$N|;>|qMy)s5H8s~J!kEj-3Uo*p-7Bne(-x5?xJK2X;(>f%`
zBlIl7!N)ItgZ`8Gdt80_s*wV;Q{DKRQDJrU2_D^IPKlLAuh634;8m=ISD|ZRJ2&Zz
zK{fWiLtX>-d+L^T)<@10$g$SEg!x_xfZu+7s@GU1YB)#=ognK;x6e#Wl$;jA?(QEu
z=}RPJX36Z)J3Q*YJB15-Lz~8DuQr`?e6Pv?7YYMfsy6I1DUN#Wo>or;y_#iPSm1jG
z%LM1ptnTFWThYl~+=n^3b+cr&4JFI=kaOuk9@#DwPa#P~D~oosQpAY4T7&_{phfzd
zdV-9lyAjZr8dblx;uT>_+61z_FsTZl)gTZny9H@WtnLvdUzB9$Brhs;&z3DOla142
zA1<NF(?s(ra@2IW>6HBhP{g~SK1xotG|H`6>KaZ^Et#UZQ)y<9oUx!ha+Q$faUG#u
z&hv}P4}hMRe0<n%Cwa4cZ7&Ve11S?iek5<S<~1Ks+8J2XRa%BUUqf?nwiQRniR<jr
z?HEthQf+gbxoOgmsdiF`kpYZSp2yPHTA11I06z3OCQVm|yhrL#W~O+oa|xPk+F|i!
zvJ*d&${jkPFn7&2IJsyR>e*QE_uHrnfPxyqsn(Hkst^N&2)L9Jq(twdXdEz?8tP&@
z*A@RVk#)WXQm5zu&M3tAHF_W4L9_wET`9hLhdg+&mUf96{65+)QT<`fobOJ2yO6zd
zy}RK^jJcWEB83tJhx`HI2Fc!2H<Enyf|}9-v^<Hunqxi9_|;FuU`IaRZT{h(^MZ9F
z2&hq@klz!}<uv$X4k6?AHvwioH%eD-C{`-6?PgMB5#lo&IrmT0>2&ZWkGFlD5ijio
zAza)x_o2^6dIOao#Vw4<8xr$e5C>=xGB}-XC{Z^nG6NgmoZGIyDeA)Z3e%vxaOC*&
z{CjHs-3V_Q{P5m8d$YG!t)9erFXSn6C}a2jvh#Vi3h0qz+a=tecv>GASZR%`2q!4H
z=7C<TIe1+bwICG5hhKpsKY$w%ithQZ@@UQpEHRBd{C#TG?Xqn{%5LDn5uRi(tb=Hw
zfJjO507#5@7oVuunV?fZ?G6{S@Y7R>TD~MKn~PC8$2TlGBE7V9;?i`Uy$}^&Oi;<-
zkC&v+;X-=Xw!uJuiy2s&?Bp#XKlD2waYm!MjAX@*de^O;vtON>R-c_V7OO33zirID
zGRQwii`7B-gjuw@of;0EqUWx249<klPY5=_i%-uw%U+G1gGq=LsjEPN#$HD|&p#Y7
za?#0ELqORIS%Q+_B5ejXz-KxJ>OM8wJ==hiIpJna@kU8};HT({Baj>!J1@Q@<~#AA
zH=Cq`qWD9Ix@x;MMAF<5U}Q@O3~77w9>f2ZSXv%h^+~+uUn8IEN=)9QADrr4`&$sX
zDMwRHLr)ig*I=G6k!<7cj4Ep<OF2}&c*}wbwQ*zapF*0H-98(!X7{gdD}oq7<@g&3
zvT@d?IwtNOGrTbp4>RJ<eX6v+umqZUHT1636}!`1V2iOgRbRByPh#j)nFk?_7Z7j0
zU;2n<4SV1O2bQs*H6EW}(%+Z*PlSPTxxP*}eCN<PVe0ke7F)zcnEhgtY`1J^wjH|`
zK`k2HHS9(-ROCBUBDIiv({@TusnpXZ?U_eD&UNXM*m6RkciEZEiUZlV+O$9fBGzUJ
zA+F8<3AKF_%sXdpn__8G?3yEKhr+!r>WRa|Bd1}<{J@@-nX%WYHEV$(1|iu&Qm4Kj
z7#6>N95@EQJ_?kB!>D_BHu#lZaxOTOUUDf|lP#)}5R=IfSQL}V8QA1{37{s88ULIY
zd+w?sc!nF{ejJBxftGeUR&*DJg@2N^8s(<(((HiqL9UbXv7A6lXnv6?6Uf1q)5Q{g
zzEVQ`D{fSLs|dN?31?Z&@V*tebCjV13^`6_NG@cPMCVpde4ld>zpo8}wAwZ4;1{CR
z@gD!XTz3Th4)-QmkjVt!b|<qcV>`~@0W#u!&zAl)p>slpWFG8Bg}qSVP&297=KwhD
zXTU)#kDp}V%1chO1yIB;eVdJProTZ%ij=JV;?ANqtEsC5d1kM*iRR?|+eHTH)!$N+
z053LG9DOzow!)dM&9zlg2yBw^9qVD3&t$OHa8m3L4crCg;~>yp({ihN1Bi!B^yVVd
zu`>rJd9W|z4P58}p!5zLo%G@Lav9I&aGEDt2Db~Xft(NZwmkG1zvUKt!#d6@aqG|M
zLiie;?^CCX>}G($mL_>5*GSlsW<k5F;ZuU_x)Y$9hPQyI<_>aTK+LkqX(gjh)vu+B
zP#ZNEQ+BQew?Nocjig`><33<Z)e3d=<9_{s<OB^gOBCWcBsPb_yXK+}wa1>^kN~6I
zP0{ST@k+XCyTK?%7r<zV-2-V$pw$D)&7GE;9gPRhL=$5uuRTJKs6EwhMjwJ;gZ+7;
zBO~dv*x5mg*h4~no2ik0pDh2?sC;=}Nf*;-{9qdM#M9)n@gCY2U>2ZIg-o`fmG_;-
z@ADD=_iUdRWF|+WLE*05<{v^f!>_hhX!7##XD|G(d-fhZ%h#mzQU_bV7dx+aM<0i=
z#f=fa#gS&bOjiR$y<LhrW3SV24mZ{ucT+f24;IuyY`v)*Hoa?Q#L84)8<@~R3W~Aj
zG{Bfg<!y`-ZYUE0kIN7NXPu^(3fM#0JwC0&PP@y&alAhDP*XCxhYj69et>onIftKj
z|1X|C6<kw<D8}mT6HnL|mu~fsj+a=5#a`7#l+HTzrFg!Jov>lRs{Q6o-LYw_Lq9Oy
z^(J@=EhrqGyV>P;s|Wpz(-z>h`x9ODm_$9v1`eVN?<_q6k%70jo~A8TrX-!iBw979
zF;$i3o8OYJ&z{XZ0&#tW%M5{U!|ErAhRquY?n=7mM3LYY^rDgCP%_TD&N?BQxuB9c
z+MxRN{u#&{<{(C~eTlY`vRCT{inB#s4Hu4Hz54^JVT?HHAGUCE1Y5`wu!>zYlCf#>
z?gu6}C!~@uuwG~RvYD!W>%YR%pcS?2e{VapV2As@ZUoxl0p=(J|E5w|V(?3_JaW7J
zG18Ug4sW)c*<=QoM%;(6cZ=BqDe1K54ze1CSwYd$qn!p+?ayNEmyA;zP>W-?vCN)q
zgHy#-IvcxLd^%k_czx;}AtHLnHbc_}B=bs^DD#ErvIYAegFxv8D}Cn0m>Ari2H7Mk
zRyFVRNh7;ZQMwgqyNgn-kC|Y?(EKg5xh^VAR@KH1A+AH;;2xGrVi^BcU<*DheHK41
zeSX|bsf=MO;NP58__4<7e+wR!c*7L9E$msa2$GQN{c^SB*X5#?Av%@MhVO7&Fn)*M
zf_A}toX?4Qh`H=#9Lk$KbRE5L@*eW`^^}mP`{&&A5b9SnJl2?dhBABI$&oy=g-a-j
zIcDKvpVwv{`b+PdTY&G=!$ICTl9&6yox%HyWB?NWGpEn*%R*!)m=`F3<ClEym)+mw
zj(^`)*Am%#4+1x0WQlWfb7UM>3esIkgE>#1G=9qrT)tWN?<4FF|1zF_s1y95A#}9@
zBT?fc;G5sX6S1@iJ9^vO^DM2if>-x45$!fH97`yOt5J~N<<4y%&0Si%{+b4hG+-PZ
zDnsc<^gDX6Fy6-v2=t+9t2hB?=o(UXjs$jl%!YG!|B&=)=9F*g$XDSI$;fzgcm~CV
z(^m>!7#$O)Y8hri76qb<5j0XieeRYue1mJS3n)AJKVL>F@o?qy*-=lX(>a$|8cIzw
zHSecO(VvdRH8r(w<X)a1@?8Cm8l;Y=m|4s+B&=eIa;9FqE~C1bPKUIWDGDX(F8q1~
z`Z^w?;WpmuL(Fm?-AWex1uS_9^6|BK<*5l7k6hl}(|U^=2FF&TsKxOve|M=l<EQ5h
zBDx49-$yRUaa7ROJ4I|?3QVfGXa=oGby&w!kNZ$-%tV2iagqnP&VHp<f#cF>FpBKH
z-O{Jgu5rIL=JK*yvcMawVjT8NPXsErxhh-ezeD&`M3_GGLy1WEL}q2K*`XWD1dw!b
ziZycWwh3CybOtJ2fF$-i$6`HJ^8}qZxW2R^X+hlBt0;Xw#>iuOzx`|BfzMTI;8@B#
zF62-l0O%-;^N;DQk^PF$*@dqXu@npBYjk>h0w(*dP&Q|G4P-IhaO~Mt!c0LwlTq;x
zOHf<GI2{Lhu_|+px@2<>c6eLE&43u3)d(LX#%4jfZ!O0RbwH`zHe?KH??bR*A9U<%
z?eI#c$3U?0<UVQuQkjQrC=<6t5#IfST0NOFS4wnUOtgWTVpEUm><|xM+2>ZDDD?0{
z1HQy9e+JBB>9=573#gPKZnHhv=IH%+ZQ@l6N;!CkyB7WO5`t)hK;!WX9kmVb?V1B$
zWva&hRRZ;XO*{q%@87AuyQ42=hXa0gLhIorAHsZEgs8eXr-e3~cS@)cQct>H*(rQ9
z0TRxb21kA1k!XIs@JT1c-?>N-TjUFv=GdSQC>KfLBg4gDF9RY>0%ly!4oGkiyqh_j
zvtw3k=Z)VCp{yre_sFR&);i6=aF;So8*;zW+&&T(|K*;<UiNZn+tauqAH8D(+X}9X
zlHx%5>ssj#Ip$*s0x)4i>*@r~@QZg^rajVSl`HC8CDzQZqQ$QzIAOP6Fi$P85)!Xv
zJqhxxGfbcMp%L;m^9OE2or|A5Y_hVf9@Oc|U4E-`StW~n{+ip|ejUn_#ekoq1OHk&
zt0woNm!b-oAS2*l%o%>j3S;Jme!5yOAg>0{8$DfREgSwq;I*#LImuj~tP^ESN?E+;
zVbkX2@g9G#Y-#OIx9Nh6wr~7y21d|9J!{!Mn(K}ydS9DEJe)q=Rmiqu7V2`?pre3%
zrTfdHRBbxV(m|ReL+lIe>#BeGC@F!tX!Q9S%9u!SSdM*^x#VU5u6PPO^=lCYr`0o=
zV#q7IQ7~x5M3639Cz<Vm-<XWQbzGg^wQ7w@{+WE!$tlFdH*Try0tJ3L_3wjTUr6lA
z?RV^oifMB=q*=3m1NTA-MagsN$aPMlx90ts(RxD<^nK>CGA{*vX|d18VrdPB0gGKJ
zlHk-~a<dw+|FadX_Eu^9tnE?qTe(k!8lt3<-3N6giq9E#W#c46+<lHXG%>#kxiM+)
zc<Tm8Sw;4#L)5f<$237=cy_!HQ^FsC9-jBB6#2f%=%n15N+q?}z^wz%2|&DN^%=&P
zwWw)J-=E=<9vUANlRjmAIFSBQsd~s0AzAsFd!@S|=qeSC=|>g~yXeZ4+2}0Vkwfn+
zS|sh1cJBiMwJ8(1xxz_(nF)(C9Dh%Nsb$}l;wCM#CFLe97Q|w@jMS`L`yNzw+SCUL
z+OG9<G^Gih&;935!mgNv(vkaqd4{W7KT)(W#L&gIgEKMU`;q&aZ9)I<j9dJEtaaV6
zko|z(LOZ<un3Y@flUw1NGgG`tBZZ5hzTUU2GCRVv%~KDJ(9I8buKa&P_9y$Fd=oDf
z8kmo6HiA;pyLshl_x{;#cXcrriE8>O)(8)sowp~G23~ylt9=6pYC@-~klmJ!H5$N8
zXStEia-Qh*NeFdgHZdB&E@BM&2z4-jlMcmqD}HML7ynZAw1d|Nx4lSevKg!j{N;Ug
zxpAN-F0*Laji-+u8;Xc|<xr^s>~oxS$c{xCUCAVh%AzG(^m|Wuw{b1HC^%&&XD|w+
zKg8@V7;QEhM&6wWmIX*%)v+<6EK^KrV1gmrm=>nq*IFJ!9t}u-CMp;%6dgVHQXIpS
zs`~eyDW@EB)XyScY$NJu%RX|q=1N>jKwMreRO61CN&}*O#L;sBhCjtOaf}oidT#7*
z>eiyb_~`7EFjVkB6_=tlO{LHRI~UJ~sV<jyZ7I0NS^<5x)|&+_CV!?HLM%(ssm-Y=
zUO}l?QdPdnGT+j|uvQ(FfqM^XHl~QRgA6XV`ikJ=n-D6)^5=s73S{SSTE5V23;y~E
zM|G=<ObCql;25J(m>s^OBs~9Q6K;X~XFmKAuKpNsf*yfHMt1!aZ-?4HR!jhrp8bz+
zOIPw>N)nzeolaJcZPZw^7TF-SJ8HxF$ROwv5#uh54R&DZR(9rG^aZ9#GabA}<4mmM
z8aCSmn&EzQz1tiNLBpn^6|jZBSK3DnR#OG~s=cv^g|)|Cy=3G(1}@s^$(*{a_!Di;
zCd%g<g+^F^O{uPQS49k_9+DgOY(z))ViC1Jm$h$@=H~ea9If?UJ!;aJ+lL{H_m-S<
zfAV7kTOd3)l*6!0=|Q<5Tee&2kHQY?eD7M31jhoGq+#?z7OC!I*U}|LrSsa@nPA`#
zlWh7V3X!qe34FBEG1!^nBw^qeV}5?+irRCB%!%xJ&qH`8XS5EqOm80ZDc2m>tg(_o
zfRwNn8V{u3=(Q7KB_LQYx1yL1BGpH=()dHRockGvEIS7-*87xfLBS}6|Czp}vWACq
zR{Xt8C1ypG09rf;g^du+$SeF-AX&VOEImYJhdnSgC#k>4qI?WyP)7TfXUA311;Ej)
ziYc_3VoUBzz<2%(*U=tRiB00LYEO@;i<7h?G9?*5y^0Ng^a-7BVIm^|8bV_Z-7Qof
zR3U<IhFu}w5RoidiFEI9Bd@H-II!U3Sg`aICSZkNh?7RYSGF4OcIma&fhRj`7}FrN
zquA8yRi&S5_4Xx(s4yGh$OLo6MkrcgD!v;nDoe+dFKpJ|=3tXqX_>A#W{LGhHyFac
z88+oA;Hx-uR1ht13SYiY<PfY$q!3BhUZCLiA5Oga@y-GZgQMKy-QoTDE?>bCuzVY3
z^kJCI&0;mp45{H}&O`2{aOhUJQ3K=J;~D+mP!p6p7Pg{mL%Bya6kZHE)bK-&Ff$B|
zL&9l=N~J;Fr|EQdpvPrv+--3OKaK!K(y`)j7}vB3{*9P<hFy3I7?Pb5wvFGj3Z#Ev
zqOd$`r1m%i3(uL2Q_xyf<zNz$MV1;(P=w$l3(;S>8P%j~=k;iThw8Hc_u>4<d_Qtc
z=+Dk{GadRbK$20_@q2Um@pKo1C^dYA#I`rP&sv>XyzoXjGMcoVwL8iiO)tg$AOgAJ
z;uq0%+`zmel>Ch|eL~@m&f=jH(6;y|!iL+M$ExHgmM4rV^dxv#xQZo?H7e#W>}V3;
zBPGcYLAwg}I5_eWqlJF=8C&|r0iw-wD=ov!q(Z%tV~jpg=mJ{{@*5ob=46Q}W)Ymo
z!UoZb4DeQF$9ErhEHh2tt7hZKi79HKcOM&T`kVlVV=EO8)O;2=abx5hUub1w;a2G`
zO`Ar=DQCEDy_NLiSIV#rsG*X=15TJ0S)5livcRQLcWeX2DrMT{`gV*I0IgS*jDH>@
zH7x^YYI!Pg`L}=a35)5yZE2ylE$!P%9ea)h4q6VTs$3ifOL$1gH^_hHe`@3*8qEE0
zKT-IBfEfNKq%l`EdKX6{XA^gB21ncfiaK_sW9PETf$~rGAB>oLtvk62iMUKPe!0{y
z-*MRuQ{&yOEv{M!65<$(=p*Drx{k$v&pO?TWa8t=sFbVC&z`1PAHgHW9(Qy^SA4=(
z)H54HO!g_B;mXP4e-U`(7Q`|1<FK81++Tq7y-$5*=ekmdEi4@7Kj_{N@36hO%?`<m
zF}$(GPeCyYPC*OFa+3O4JcJfEe{!(MfwM<}Cy;2VqsXAI?jqnv*4EmP-aS~vQM-kl
z2Io>y6o*EM#fzCpBB%Y5S<ptu6)3FG4%R47DNIcYb*z+leDR7+$C;Q+3>7d7pm$sV
zg%?*ji>rOPJ%94&O|yd<iAv~TBUCUbi1LW1g>0uar4u%;a&mBKgP;|0w4~gZ(^>4;
zF>R(PlB__!CqO>~vjfbCO~?R4;ND>tMuC6m9$m1+_a-fX^O7cF0{d-JV>8iFpYis&
zgcuJEgLWwAK@2Ea74PB7t<t-xvc9%ZrnseosoQ~dan&*=xNk|}@+1U*^?-oCUCzyN
zJ&ci193@*gPc#`%5SkzS{S)#T$X%zOUx-Y1u>O%jC_mppTYOKRMx4^$Xki)Kv<G2v
z1f&9EgQ$Nyga(E7>z`}1<fR2{Bv<AUTkwQ_Adg~D@huI+3J|Mrln~C$V62=I8oeS`
zVrG~?Jd#Wzq72neITj#R(syL^F*3&p%kY;`u7wd!5~$}aYaQ0SBmJh`(A56U%SX7K
z&KF03k}PnN>}|<x)@9F4P?bf8e3wIqU&XGFE?b^_xG#t2uwg6Pper351}ZRx3ChB~
zYrKn6B6<|2GP}?IB$S0lC<`@DEXp^|{B3$Ok$cf?cAy2xndZd4i8NIaDqWHK?aBG?
zqrFx*=wUDSyTjuKt84eU2|~+-ou=Nt*R_AIch27j8h33Sn*x9?;mlu`8)N1?rH4J3
z4*uMB?Ct>}5q+HZoaxKq2KrM>zu2A=W@0}*a0aR1vqivW{jr3OP_0XqLJ%`#wRp@Z
zt&$0H_@w66->N*m`5f5uXp{Hug@<{(o^6@10z(GZ63T>Yo%$aJaX5(_hm?c>qe6UV
z9U(zhW=GKyYT-w-i?rn}qF->V0oBCrum=cHA&#cm7^E)dgY9K+xY=}bJN8)R^!A(o
zCiD-j7J{M#<!lA!(OKymssXFaHC0sD0ElVt{;dIaEx2*MFk|3JOzH|jhpX7KhFO^c
ztz!Hvi0=1ZBPdZtiyeocV|>r)h#}!bY8XCS;(se_;cfJh>W5aRAM~aPvZOE|L+yKF
zOJL}~{*d1$@VEt2Ld9FfhI$heLNG-~C=Uyupth&~l`@vFszSCcjbp(A@OA9fPRD7c
z1rm4a7PX~1(xBwYi>w{jqIgTEZEKyMr@5`W>G79N=}5PuM|JkNQxcBoO|GR$@jMxE
zg<y>_;2o-&vVnF?X1MR;bQ$Yuuqs}Imfr^HIazA3Dqn+lIfm%n<yL96Z6V6<LzW*z
zi1s96O;CRtYT)f#uWZgp&`i6~#GhILoF9^;gVdac3(d(CI=Xc{XDc#SPe_kbqhq{v
z^#Gd9B_6apr=Z&hZn`S4)gj*7d&j3Q%ic>HVP7>Zu(mbZj(|@;R}dkFV{vPbIm;_I
zx~c65matS!F#r)N3>Gj9MW#L`iH68<YxQ++S)<x{mf$0#^(x(RHxDvRhM-iTy%Q@k
zmy@Kn72G!={#^y)TA&8y1wH1#5ShtdHC=QDh~o5KoDrWeGcmAjMj(=fep48ZQ!>YJ
zfZ#0%#X075zK?o3J5m%19??J7upxB3R_aP?eU*=Hd*_$Pa;IZv#&WjkSJr(Y0zd8t
zvMg+Xg#gX~>Au3EBr6L^eg1ehOvv3<l>iv6x1M<6BC%Km-Ij8XcEOfF?;lB3-!|1d
zQt`y(TlMz%CKp;T4<i)Cza1)F3l)Qpm+6RC(h93HkTqM9W4iVzNLD|}gqiK>e3bxM
zuHG8fDg06m(lzB64N6JqE|p>~<<Qj`wdiCgo7CFm3fwt07B^U3>cb^^$K`*TZF`Cn
zOY~f-KbW_4nZ2;Wr0WI7W2tPLy|BSVJCO0ty{l>mS7b67|H0+Mf_gxOv2~_Yb>dh)
ztR?XMl<q!eXB~n#!?fDg5s64bEQ_I5cs+_F%ai7~qyCHJ@NO=7&;l8g2)#`AUls+&
zdRcYG*~xj`-|FpR6at|~b(AzWRSn(KJOp!FyhheX;{f6ex~%9)M!0iy?J89Th!dVh
zdQJro`X0&<d;IMr%_%LJjB9P1yu*opEr}Z*7D@FpqY*+rh65d~S~WQ*K&9@4v~iVm
z(TICS2jA5C1#%W+C6#F&jfw82@_OU%p~@X06A2^@Moi9KU2sb(=C1k%4BknlKU5^z
zcIt{SxugW!nqe<y7T4S)Y+j#xS|Bw607pk6?{-k`N330u6KkA<lPJrtZ^x54Y!I1D
zA;f`sA9;9_S2+dw_MUF?#R031Ke;||lO!PcdOMht0Le~_x&p%vJj2G>Hty31O{gmd
zGbunbLD*-^13jST$l0Vl|CxTJ`D}-IC#2f0BZ$T*P8m{dK+P<jyq*RW3%*rprk7xo
z>fjrGlMA;&?ge?%7ot@u=hS@-a5a)0x2+Rmw-jGDzyU*USsy2Yfn!@d7YVUR1y=k6
zJ^cqH{U1=;4<uIh1C3bK$AS3&K=nmG(74tJM`Fw_SnIsm1cdEFq@Dm|m#s*++wB|p
zojgIQ#{vF{fRAxoC*?nECpimV-Nm<}c5|64o$77%_P;JG_2D*Xf7)SJkLb{KQ$jGE
z0((MsM!@8Tw-4k<7;@}KVbRD!L5BBi1W7F;zb-)2@oxJh%~W(SuoV*zn2J9K_repg
zdi<Yo@)V_ihwTIkpftZ813vK&J-lI|;;|>FroBR;o|n^R6AJ$3syMMpQ5}L{cypTh
zvmobwawH-SIS6$A8DKgZH3ueSkF7)M8L*NDamyL66McP3<Qs3BvqD)+RFJg<vRlR`
zl0^n^dIo6@T8K6(CCd#b4x~bD)1x)s1WswZNRh&256Ci*UDFKE5nQZnmm3Ejbb1iR
z)j0FzC47l9A057}wK)l>%a1#NNdBuqoUlHd=ceL;(0h0E-m&q_398iBZwa|Lr8(5K
zV4Yi@qWyZRPIOKCW$(bMxbidVWQbi<qad^gZhpE~{x;&@B-1ndDy)J$_r@-D+0L%4
zbUZy1QDrQ&zU1-V8LO){Zlg4@D8_upEt*@DDBMhHXkviX)u{c_?xbA3w*SZ;32#on
zwkm#|OR{NG>YHToL*tC0(~deA%F`W-dw-x?1UR{5iB~CYU5u-3|28no5{S;3qMIy!
z^}m~^Ym~($oFR$nwreWsn5OfS<@_-;8G9_FvtoFVCLEbDp4}#iZn^)0S6W+@*e^F7
zD5Kgz3(G08R6(;%IW{;REQN6DU8|WI$`|2EXrs*r|LoMDtKz@te2B!^y;m$+!K}N;
zS=H~VcIMmZ`4s>7d(Kg>_M*G4#bK*^F*o$in>8t4c~(iw+fde4dwHFW&=rip=I0LX
zXW4lL<30blh3;B%)=hgV?Gd2@aM;MnMR{L*JV1A?I2)%uRb9*w)W5ad3ypkqGd!Gn
z+1B@(I43?#)A;<S*QQ}lxsvq6<rI^*Ny~})<a#T;eh-b`rXdZGt2#*Ijrw@m)bB|8
zU7oCQP1<_V+M|58&`hCU@ocwj<5Ox}X(iLGO#LrZev=mc-OXurw^!6_PhgW4A7FLZ
z$`$h-%CJdGD1LU(>Wbp_P4H8T{nT6$@1Y1kb3}jUxWc%7|J$G?6gev@a)oHo^SDZj
zFKAZM%@wj+*6}F?rLx<?I8n%-)AA`jEO&D{IXk?*S<v{l5`a?-Vc(sj1nEr3hnl0?
zTm91Pw<hdvz^wBVDp;|Zx=E|{kBfWXrx%G^c5rD`??d0L^nYt997G`2@c-N+G(~9y
z{%-F#g}U_lj3M_=RV?a#@UZ=d_@B=WIEBErmheD8ay<V-u?amp7sr2dVrbE_b6J!`
z`Dgnbt##<e9b=ndiagy|Xy~<GOaogH+Eqor<}#6<3uP)rJ0V5&<4C>wKvH4Bc1Tu_
zi9s^sD!BdixJbJ0a|6k;nKojJUfx92L*}JQ_LDf~l^(!w@DLN-o<P8#>AA#DcEdn&
z&yldu)MVnUY)V+{CZ2ay8B<MFex#M0sPb1adGU8_^b}R@^9}HVQ+NCV3(N!qd~vWU
z6dAIP=`;r9f}<l7`B8$cMC*V>vN`&C8gjoXrjyi97GTn;H~uktluF~DRxcFDGaeER
zC%1tH^5|hrNa_i7HK0-8%#(az=-MpeF&_V~&*Pk?j3@1^D;OZy!$z8e<=SXgM@C7-
zpiObL<Kx+;_2uPdwh)j>mMrs;H`&)|Q~Jdi>zv1d+$8jJYSmm*Erbl94jq?amUkP>
zhLRArBO`<SY5iY`b{L~Mp7=~T$zb3mnx;B|JYBK<w{|GD<2QHZ3QEcV>bKJFX~Scy
zT)?tx#%RhD+vj7+E}^pXqe0`ZxN^asZ>Epi{n?P0@BO|TM2mz8rr4O`!jJa+o5`5F
z#Z`wq-jIDv%}<`+jAe`1pJS#-sha}>hyK84qlq(n-cC?5i+tDxBTv>fHK9r!la;Uy
zFlTijmUld`K?%voJ#nkz>OZ}#5S*q)JQ;yHhgJhTO<C?grcJfCTAs<KPp5ol`9C{7
zo*%OwfA*rbj9*D5t+30T*a-x9zpe~!&hina4DSt{##sVCKZXvAh0#V0`T4@Ck`2_v
z6Vn~rCfD^k;FC=|CK_oN51M(LrMig^A4n$0nh;Yk9TbGfEykvrcJuKG84Y^;KCX`*
zpK?4{PpD(OfP@Ru*$$jR@2Wk_p!I4ix%e>$d*GtEG=ugkW80aaFMcQ}E0$0n>%_tn
z=m_|;$w&Zk$uh9%Bi5{M$w{)VgC@||uIBM%G8lXi5OM{AWSSiSQoI@xx{zeAP7qdx
zRDE>v-QLJl)A2fVU3wBT4K0#p6Ra%#RQLK-LMFFm(`&9qzco5~;(q2^LmX41tt29{
z+)g{_*mm0uJYMD1EP99+rV!3J-(M79GO87o_DVV7S!<RJdN<#bAl8UJR1M&$LCfA|
zkeOq8=>cw60uZGB<#p-aF~}AHP9nujPWL`}7A(j@({_3fTI0XnyB`ZTaU2EcWhuur
zJPC`(b%z5eqmEI!p1a<%wVlzx!TqzCcQ&bF16Y6ey!T@DKR-+_y<shoYU&_mdk2FF
zVYb8!w2R4+-0AZpq0??20gUO4yL^IQhez9)JVPcHo-osq)FDj3Vqsc`-?eXjd<plJ
z8-Go_iIDcVb^+ACOF~XrxPYE|QJJAcm0}MGq+#nZXcv~#YBw*Pw+gu7L3`%MmOV?-
zcbQ1{rhND4&Rgof2zcw3<z1!1Oc38O36;2t4h^<MpD+F;LE@Xz2!-XE-(rQ$AczlX
zHVVWByqjl(y&Gyff7y<P5DozY?bJyP>|d|S?XN<5z`wT)WzDV_d8vw_6QY;+djf4V
z&+29~pXVuZ#wWRUJYiu|h{&$I|D9-zRciN$rP!@{zs8gMya@&C?F&c@HcuSv^Gn=<
zv<=O>^~&C|`YBVsPw3=2n}$gboU%Xd4#~2*W+V%_6#>%mIQc*EEJL#Ji-x$|LrglO
zZv*p-rO`SHSZyfGW;xQr?hlz!Bhyv~)(#0xLfwQuM>Mp9C~?0d^*Ga{;Kp(Fj)jqJ
zZKTIfd1y!Z2ecGEub;R8DMOVQCVu&dCBQ>yOAlFP)x4n3gTxIZ0yfh4D<L&I{LTbw
zV$J{#DaRc$Pr5{3^a@t(nXe1fj{A4hEPw_JF7dS2wktC#Jv_^CUk>zWZGrIQolX{2
zBMmkuxaIKa+QNG~bsOSu%DQ}o>{%&61%yoFz3yxF2q}cRHZKTPN(40Dxgz>j(3=S>
zC_=_j<E2-e++%((#s!=#{j~Cs2}5frs)%PHs2nwoCViJfg2$5cx1fpg>}Xd3097U)
zfEiga|9GGC9f~Oq(--0lBMwq0LixEKQKB(6N3EgGdIUx)RF6DfADSK(J;r}F=?_j)
zSPN1pvUlo|vK4)Jd6`wc1-8M>c{x2)bt1?`P%8|X<q)3K!{P>?)pXYoa7gsuV%l2{
z8+Q_OFIMN7ZT4PR6JL$|k`<F40bguB!SRa-c!ANFcWMuHL7Q;i_Km*`-x>Ttx%+C@
zD;C{UrI3KjyAc5CQ}EsGCFQpe4_h%U0$$KEYTw(TB#9~vh)_MIBrQw~<(jn-KlBB(
zX2%W=gcTM4kBdbUMgRoA5j_WO1N94saSC}m&I@3ypLliyd9^D<Uj=C6W$mBfhF>94
z(AA4K)yZM!5wH(Mim)j6iR4mMG3R_0PiMS%9lta>-E8o(DNO_5SbV0&GmJH;3+Hu5
zj2ZqXi3nDp&D3A?K<vV9o2#_qsgnA-u;q8{)et{73GrZ}=Fl6~Psg_cN}kS^`T%P(
zNU7nMrQ2H`AYJT3Hd8w;u9zH{>V%bK*krUjYmN(&4EM^ZG!$4ZkYeP8>_8Lm-O1<W
z_5N{x1ucLMV$mM_%JjZ9hixBnpTa5|+-R-;{OZyHS*FO_22z1~w;r{fL>Lb>!ge<R
zm+H0GTSah<Z(uw>O!I-j&hX}8ZRLuMUb0oQiu`d9<LA&Bt(iq0Mf)tSh2^l9W|*OR
z3ERpNJ-#fi*x(@n0qPFi0b)&Yv`R&Oo!cF)el$;d=lBtn0VwJlcU<N>5R0cxb$5B*
z(|)vwpBN5(YI#_p{h-r-a^yvc__bJ#FExL=%Z6};>e(H5Tk#5dF3Ht0-aP8WHz~)7
z3nPe|VnregJ9hlr<qfnf%%0{Ft8z^C%(uxrK(5TLHX+lBD8O3ftuYBrR`8({(>9J?
z{x9SaW+FP>Q!mmRmAUFHWo-7?r3->X_?Fyo?JZiDK^l}kWw1r0A{YNGP65)ZehlNs
z>$$pLw+_ohuPKZQi$`$^rIkt3UJgxG>tAIRmzm_OU2PVI<xtCvwyvMk9lxDr^fNUA
z1%D>ZC&sdW8*Q(;h{N=&kNe5oO>ZczLGug1ND*A-xxpO{%+nP(fJ)H=o|;i}=X1kE
zV<}~IdX$xWaWn{q6zs^TpqACWU(1sUcCv;p2~#?BC5Yx&lcWlPeollsVgu^Iw!)Z5
z<%k343LsiA+Dy$-q>VvPyNi)^;E!X&0cednQfI$7%d+VWlYCTHYJvUGSvJ!ozNfHL
z0YAmCy+|>&-;5(!SIDE(S6}cP`3IR_1^l)Ij=Rc)#UNq!vk}eU*$kZ%obiknBO()M
zYp~of7*j|0BqdHYI8&!Gs$iSxK^*MW3V_Ye%SPu_iFAX>?fOuIa56CqJcwi+(wG~o
zO61bs)$X<uIhF&L{_PT>=;hTeh{$ZHo|W&={19~E^lI!l5g^o)Yt%5pDoB)?6fZFU
z%-H&PLpO3=@2Onx2Cl3M^tsDDeT;X+(czOJL0<8EPz3`O$zfPy!X=4UGDt6vAV7_0
za+q(H`<!#~c14HSP#Gy~WHRaYRh8JqR+p6nR03^7-F#x8i=W3;s}`@CtrH|2D|^*h
zdn(j8!rr`R?Lv(#XcOsKuA0wrn`;2Ym9{f~RHOFXH^Rjhrk}f2KxXX+@P@UDP03cn
zW_DUTSjfSek%WAEF6fkSA)_0Gl-VUl5!%5j&5TkjWzl&LEv3K0vzMFo#FEony(BkO
zoqpK?*cnH&H^=cIOaI|oUpGsf4cb|AL=U5^tFuBhMh+J+g_ZQ!c4aqpNicDEF?70B
zTIoOxRWmInUZO{72T!`|xv*~bA~Y+mxide|A^XqlAo<P`skH(VLYF9A2!)9r+Rk_2
zz=JNY;*B3o7w<!zZfGFNx*WA~)c7MVJJhc0Ql{6?4UnkGW|lMkFUGzCxQ-oZ*D+(v
z%oxYaa11dsGcz-@9W(ownVFfHVrHh8nHge;pL6%G|JCk$yLU@<)Y6P}W~N6iX<DtX
zBkOBwtj!P?{Kf-ISuJO}x|QQFne|ijrInk_5=|`<S0Ui^mBMmhcIj4KqO9h;1GfPa
zf(G(fCd&-sZGCAgJ~^Lgjb=cH1(&Sfu2M5EvFhaTI|lu<4dup|E7(wwHK5>)oOH})
zC_yb===o^PT@|&lPMQm%gm<XP^oaylvoNG9>&a(RnpVr$;NT^!EAzr*HQo^dX&cN;
zV%11oE%PCpDoM<vtVl}TSH_xTQZ~LzuDU3%YmiaJRJoJtbKorG{lX7ot@kz??i(U=
zzgb<V>aEc9ACo2Mc7e=!Sj}gjzs$>uFykHVt6uWPbx$B6O(;_Va$1)aNpq18&pv$j
zVu=YnWk)T-ahA+sYjTDvLkg~EKrP}_go`1slP1HN{%C@($l~m2(c*pDEz;$$GHVr;
zeM|*7`dGt7)}7hSsww4*CUY(mF3f9)tVGxNFaBITjiQ>S)jG{gmm{chSYP=NN<p3U
z4ZB?Uv>A-_?R4CRR}}r`X{2I#SXcYx{A(EJI~YXrgHfac^+|<L==hEF%dk0{$<3_W
z%j*SF8kMtJm7B}dO_hzYm~HhnE6>w43hOEvY{|zt;MY~uWzpx9wj<9J3k%zh8lv)4
zywBhN<x6fTlc2)m11=}~11{&kf(<aRbu#;#FS$x3Ys(MFoIhW3=_ug{>KP4dIkd*7
z&!9myK}K>9Ux%ACEbGaMN1XeQJ|J@(P&{*ktlx^}93Ou=7IPtN@G0To4`>NVar+to
z9--`r7c_2P#{2G`p5E5_NAAG9#<0AUrD&3wQ!IZ4kYh|rri)t-+GQQqlz_q0r075U
zeHfqmN-<|K=&QjNilsuX5s%=5^LvYHh@t>Lb&a9Gwm}lpCIk~lO|<xNWijhT!zg03
z_zGcAeIQ=JQ`yu9w;P*tqEPV-Cgm{;yEckYa4!K7md*}#PR4F598HZ%V`=sWEeMj6
zB;l9%XoHOxsT@&+m6fB&G4!N(lb(4U809s`IO>HjUVhuTh^UQ@lz!9N8kzsHnZT%}
zL#rx9=23YTd--<LsYStp80?Q>#Uez;{n8+yd%0DGCSIwBUhhe#lC4Q7(5EP*Y+mPE
z^E8th<Yl*bl%t?DN0Jh#FIaD{)X9N1A21gc#Y3A?!=G+qIY}m+PEa_nP*NZ>L3eA%
z259NXgo=-y;~Op!-^_yx=~@$vDjb<oCfz>TzhifFwP)6aQCWbAMK}JosO7u|qGWFA
z2k}Gf#ItMYlE@5j;^~~9nc_`8tfc5U%@*sD#$oN`LgI-I_|&O)w#)X!aK>K*hR=C4
z@~8&feN%mI<E}2P)_j!7&Sy)cMT3m&*t&Tjv9o>?E7}W`5^M21S+oxaB5Y^(6ntV6
zj0nhvDyT;e@%-fZ^-GGwvy}w<V0FgLKGj5b;ZNyqrHQNeDT>Y-j-~S*tw+od8_dIB
zE61Ii%!cakL~1=%x06gfmM@PS<%J95kQ4eZGmNn|U9C87ec$ic|5;06C&8y0`_Znk
zQ9wYx{_X1KUwE^BucpXUeREu8!}`7Qie7fjF~^~oP9~XLv_wa!d12Pi-=tlA&asjd
zfMeKRhZlEW*X><RwgxTW;Di)f`RJbgsEKioS)z+kK{(wYJFA(1n$)m*L^gJb-I-;-
z*XhyNecHb9sVxoJDK*}S2|EvYtSc@i-<3SuxZ)_+Ros72AeYZj0m(%&Pp2F~N)RWm
zfe4vuE|lR1Yn)J63@ye4teJ}^wD-6K%g`g`1P2uyD2tZ}9NJtUkppI225DLzL;4}i
zfcb|l`c3Lyl^PWgshARu1CjyK%?DA+j@CEM(#_uCLEk~88eM(FmnILwl!cOWf-jSJ
zoZouTUFUW7k{%;M2l5k|@a)*Kv+nU-xta$vudD_L=1877Eb<riq<(U_q+BDK;pRB#
zVtX9%dd&Razn~}TLkC%YfGQG=_XsCV_*pneg1Dt_VRaU>vy*)l3)jJH#;)in{JP!A
zRM@Uh-{wANp-u<*jXCk+a=BkT^){8=?ey)9_We@rjnqgu0bg@No|--)_3dG&Kg>{L
zQ~$cRg5IN(_ce^IXW-`<K_ga+WH0XR#T7`Bhr0oRUuMOg`$+UH%{PlMubh#E<9$L^
z;IASS7$qpQB9_9RO&d|)UvA@H1{eihvTxt|!T9IVrTPuyh0wMZv8rIH&`0pU&<u>Q
z^nMbzy1lbv%8cabHz#fY)E1;dsyo@HuSTK4mNTXVVFd*-jO2_Ze7Dm~_%zF+G5DAi
zYeXz#MLpoSqbAQ*=>GV0j@Bdcg-%hu*_^M+yo^EntKaYR_=L40hO+g~%oVVw`ND%F
z$2I!mo5Vdt?1c~7gI4`GfUDS(6Ce0TL-9?K{D}DVB66RVb5P3S?Tmz01nl;JxJu&z
zvpK94m6Sv6T`muTNF)ysh#Bc%kT2k>J(I_}`Hg{Kul#D5+NAvJq*wGrNK9Yliq)>%
zZ9KR1aOG~#7FA{dnZiKqtN>`N)zDaQ1u#!PJk<$*te&~!m5})Bp&8}!CU9WJ^6#$M
z0eNs{uL$e`egW_zqK*rozu}-Uq(O@6THX*H3zzpfe&~0uA>I~>(GDHvbDxY}NQf<q
z&TGhFyb=_&!905JV%TvqwSolj8?J;+CfZ8c$dpbJQ<nW&>)&XpJ?*47^)}8!@ggC>
zjtd*ZHHI7sF$})2s4|wSy=riQb_>9Km{>^-0$<afn)p6XLxGY75<)4GQd!9@>)X&p
z#p3QSMoz-iG}XG>G8cR5iQ5?#ayZRGeokIB58~B%=duGfd^^(#=}*g=pN32L;U~Z;
zB7Qo3HvYm43R`eoWng@v|7cxAfI{;aZCr2B4pok8tdKlPwQZ5*d83I|v!War02!Kl
zq&&?FZjH4Sxf#kCs{9o&5UC8e;rHXyv?eITOPocHVySmwQ5mZ+3K88t=#w(ctBE!h
z^hTi=`yq_IdTSERQlRS*%wr%n{^hqpYSXdNrsDR(f!dSBkJ~=WoF8gpb#Gm=E)rq!
zrD^IOnao#Wqv0bRw1q3GZHm5)f*ZYF*h|0A#w%+!4=qvYt7NMD(yv*HT%x*qE#j;z
znF7mH6E%6Is%Z~6X*<Jl{>)NK|D)T|An6*A#M3`rPr+=6HIdI3;iXnQC$wYC)=wOu
zX(OHfx|6u=Oz}ABx{glqomml8V4?uBv_iv{w6R&_EhFB;Ma9&K^nUBRN9QVC-R!CM
zbOmn~WDEf}`rPagLVOPM>ubWPCiB@b{61p&Wi>}lkjHxbDsjO|kAB_$V&^kiRv%0w
zXyf+K5a<L0-hezmDM#f{?bAT~0CW)u(CC=8jsf-}R(afPocz=c0Ko0e)&brPfx1+H
z;2i)#0UzL>>_CXa)BRl#%7LO#VJsAgxu89LnT=e`q2UF=_;wh!yX}}Zzg*W~EtJLi
zvb}(8r9LK-%@}l+ArfI^vx*6fymXX9IC}#vWz8U~9S=7r_>xgO;_NGrCKOR_QQ;<(
z#e(9IathHavydv+1>ErD;bB&@iQT8Fz`<I$YBy9CdAS3(IA^&|kkQ3l*e`0{pPZrW
zDS6X#Bz1LRD64c>8_LA`gxsN=X@8`t{ls^gu`B`5gx$9O^e`@iYA0d65u%Hb7e^&m
zPLp`9G3fnn)VrzY#~J)y@TutOjr_av&~4?(li?)U6lXsh=dIy!f(&n>G(}MPh*w$5
zMbVCpO=|BV?QW}O)RU8^XUJM}b2l4{)h{im&`*lW(ue=zCH7)h%6#@?K1T!ncZhEP
z@U!%H@Q3G0+8^+TXx>xREe0qOl4gJ456k|*9~QtO?L!c&6asNQTU?B|zM}7RU#^O`
z`!HJDdZuI>WP1XqI(a3U@%eD8lxpX>O)=skBBF~sIXFW+MYfA_9JmR3D^<Qx*4n9S
z6g3?86e8IjLPK7Z<hJFhLj`3lhN4m-OyneBFX*uw2_f(weU47+%U6Ng;!k9dO(seV
znw2Xy#AavM^#}DPZm8)YM`EQ1mnF}w*-CQ17AZm|E(K?8{EAVmrbCm7W}{VziR;~t
zqZ1uc&YUk1Wr5AEa%*nhD$o@?4<M*-V#sb^A267aUk+f*%XiwS6kjjO{9Nzox4%yG
z)I*MJ96Vt>FBM3V*AMj1IfdGV95t5L5Hp4>Yq*G)$V(0yurGu}C}lFW^I_Y^7`B3S
z4AS5T{<_cP8gQ-nAaOTvf)*)VshIhdN4C?woKNv%IY)|CPX`6k;y|;~xcKM<8v{*E
z;}<8FvMZGQY}AA`S%Wd><r0r_xapNKM^;YmZN0c5#}9`9TXKXc{E!+Y!Spe+N9dPG
zP>znkzAEs<R^!<2om9Fn!3=4MPYUM?OYL5lWi}-f)Dk2OHl2^paGg#5s#A+BLth5D
z0h31u&(uox;L5X`B9@{IW?JVtGKwV2QpNUL3pC%)cot0CnM+CdOat%05N~18fr7Rz
z_gL&?yaCfIK}*i{a0fRy;d65nbIOd*SbQB3Ey5loPRT0v<=s$uQ%^7mO4qzi6ciz0
zVP7a-Qql$DBgh)K{qM)z&D^}5AMHH9^W9z1u&JUO2C;WWhY`T6Q{SBU-i4>U(q2Di
zZ8W+32qNCQ*(-q9jQvIFI=V)Du$c=+v=&Og@y+GBubIcM0AdKK`$x9V_WimoAH;9L
z_d_Ggw_VN^Xo>Ii{7??{GEnZ{WK&wSpActJE7Ggt7KT+&ugU^et#2<bR71E{5I6j@
z|9OsBTQH382>}8!^MTOz_dx0&uxWH=|H<qvNJZXpjswZ(vU)iHY85EHDj?a~k#X8m
zSsa#GkKY2{&k#;K1h5(#b`aEix@@NYVngXfM;}(OF5AB8(>{9j1On`hy%z~nuG+r)
zfYeDg{ZfpHbcpAlrYg_kmm2qeBNVWHqE%)B;v&x{_8B3tWBVkl7z~`GB23I};R<b)
zY9IEFKxziRm)M$j4TqNt2ZY85j(m-eoV5Yr3tnafB$K?|mM*G}B@#MWT?JfkSzy1$
z(NAAn{U#!qay~j%LBrsK``{cq{v=4N9nLDk*7i=3CfFH;88h;vN(_`YbOvdk)<x&r
zL%SB8YA6&(vor&u1&d`)gyv&-2W<>9UTzL70<c%-r&r4T2_h)p`d(};ozJp#A;n*=
zJnTTX$HN3n!BgYNv$`0IP0c`N=E3@~2)YZ(^P5Nv`95RKOBB)0(lgh8Ll29aD4OZ8
zqPZ$F0;!M~K|{C{4*zMYfGnZ;RVIu)?Zj{V5fWh9mfx~Pz2P1~^;H8P^cf37t$tN0
zZ?9DE0M;Z=e>8A*Ci$3E5z?(tO}wGXF^rou%qY}2HJ=wJAONB$Zd(1TVyyKuOKDo&
zLd>32WebEF43XL_7;_%#rkjNku_rdMlrH;cfjR7QwmN|kH0f$wcn{1Qg2do#?fI|W
zhY%_pLHmPyL0YAmIr*)&26rSWLA_kIXTV;d*{_WV+g`-2PW<2|LQfm;Ue@K`pcmZV
z;j=EK4h*Nd{hk)d3$o7#ZT8lmFr?O}TMN&rZFdIX?g;xEF<)%ZdYzH{5tz9mc}#h0
z1qD(k`qhzIF{agzgq?bwv7~0EVGf8b)_m7cxoh+YR@muM2XlE`7{S)~X_{p(_)R<6
zq%4(D(weHsQA86r(V>40{HFR5?p$fmHZ0d#_ypspV4en9E)0vz!4{(rw~&K2i7r$Z
z$tQ+JqTf!pr!3Q{b0cwyX?Vh^k3^fdoGF4)%k6u#m?gEf=yRyRLy^_FKdVIPl%IO~
z0|}~K!0oql=vj;6Qgj&YmlRro%L6u%4q)-Hvj95~en@R96+hn`Ts0yS54z|ZyrID7
z^(_y~VpZe-%5n)(*JUZ$tGYc()21K6BW7nr?Lk6uXzoqHY8GVV%scSkB?>h86>o)V
z`UIF1`Qg)W$WhvNBqLOJunQ`TsDY12XrWfB=XfvrBlZ!6kNyXDO^KFa_v+ySM+nxe
z)^V2%4+A%rpPd|Be0)IJrSz5b9&=@lHB;qZWv&__K2w96sOKVl;KbcLFYvQp4c`T;
z;vJ%~LKH~+G>pre)iS1Glyl8k@{|PyhRu)Tllkr%$uJ&&^YIz^98c;sK}TOwm<^9-
z`f!_I3MvY@@oH}I&TQ|^kR5S*tBU!=Q_y>_oL~(z6_&CuavOX%UM^&9*F`kUJGkjM
z)w-6Kq2r|X9&ufWK5}Sa2rBSkM#8G5{`9%(GB85jin!_5r*9&i5D##osE4DqJ<e4}
zW|CiANU1q*Ol^>vW*~T@gde50hYOHHK?W=QE}_tjG+7OlbBWBL=Z=e~yl%H|c1t8d
zFzw7l1c{ewe%MEBP$rT3lfA#SjNo>Qg7AFGlq;<#TuG-H_VbA(fX+X!Jg&~o6^Ns2
zBJR9o1ycN+StgFw9&X!GCX@&Py3)%VzBC?{ue2%_;4^lMFcb?EOVuO3pucl?^t~=G
z)2~%9Kk2`Uc3QxzLz^@~@jQT;>m@Bel{{9=jdq<36ZYy)ZPLtaMn*K|sB22j$t9Hf
zeP9`PwrJw-bbl$TX$mhzV7WWkQOq#b!sm`_#pF<p?`dUT@wxGT+}@733xdGJ;7(ea
z*_AYFOSppyNMs>0lSWo=r+b>v4&E7Z?fkW_{r>5n`*o5VYsKo1dC>UZI-0TjuaIp!
zmHsabw7Eoi97STvAQc61Ns%}@(I}jNTp`e$I}(3DMl$H>l50&I+I&^oQ;k5N<>lgb
z-8-A>%yT+~In~;sNs3iyXh<|9pWzvl{cF%zWcZ2|tZM74a9Hr1Krxf*rwoVBOGSLW
ztja99Gh}=u{jA1;u)?U6LIRG{2sjrCTj^W;Fx*EFAkB5Yhi+g37L;hL+yG-(0_<Ww
zUFZpxj|Ep=(~JRsIW^`?jhnb4GU8g0)@eq6!$4D9!Jv1n0`m0V-05256v|Q~B%)1$
zUo-24b5nmj;~7|=C{!}vTXSetFZunzPT27qPZm^Vp&5cvcpFFNz3Y&bLee4Q&=Oe4
zkn9V%>$z2lBe&yConWpba-<UL8flO%kmIP7v-)bMO%~;N#2kz6F%29QNUwp)L`*h-
z$p|l$fqF>!(w0gcH(Su-_p-25<)Fxqv3!O~(4A-G+dku~{m`MR88=5>1=Ywhe7ryK
zfkhh#b_;~OBDtOJy4E!OFhM|#>J0yxWJYlz@<`WW=#c!Az+3Mb$CE9hF4I>#PS6ks
z%;p<ip9<E~*_ynE>$bP@6LeQ9jLs=*4D#d3sPr_hYf!$(6SDPo^cYXSEA;7QKkC!!
zUL~+R2mkmPPk(8dyNeXRan_cvwUulQJ<p_K&tAF#IudJ}=VF9tyVph!7dbI>m^d#Q
zI^W8CfB4Zd^M%J+vqZ|&K0c!Ubgewy1#^(rE%4NY3p25`B$0W&>(NHN31r6e6oFj@
zkr282j;hOZeWWDQ>vkjgJ=>~bh}84-nty|*?RR_5Vf;6^)$?-1HW!>z`l?Btw=`c`
zgo*myXT7Ma^lrT-mmvfyo+ApMBQ>XEe)da2%k{$e4hdvx6<X;Lqc`ogrvg9?KknjP
z)851j!aoZGuOeiT<p<1j_=l<gf1czxIyo>|8oU2zS04+?Yce0+V!R(!Bl(0~a_p@n
za3%QiVxZ<5_{r!?END$Tfyo>?W9^U%qus79*73N+XwTDCd1PFU2jc_GhV3SN2r_Pf
zk!6Ost+UI^PG{Un&m&Q^wy)A2ou4yIU&B#ghFT-tC{FC~hU{|T!L{W0>n(BSW5w*9
zv2w$5KJAI~F~=~o*yn;O!mvwh1uH|f>~TiE!H{VQ(3R}OBBLVJrGR#lvn2MQ5P4+`
zj>|#^;Zl%F>&zyQ{gCxVEQr=4+&&hP-xeljRX;o{cxzm$GV(vfu7i*ojzn-6;aD}@
zk~GE?PYsW5@^*AoJWL5dvd=UXY-gw&b2^E|8-i{|FpMWBn*@WcM6rptij&ZZ1{SqN
z`NGm4kX4D|2HQ`lgA|`<6@!WeXYFl-%1HI068j1HK(fxCnL%UctUy~p*F<uGT~RXX
z@bHu1?4@jq;h8~5));Uh%^6YVg9(leI?<G{Aa{dB;hSkdH1zZk=a9bI?jTyQsbfte
zwPh++FLhr%YhOCPDC`Q-#Ec+qa)3ZqjzZO(TT6n?Gdd@1Vs-c(xIWoKhd<!He6Gac
z2+tZ^hAEHM4xl&n<~a7@{C1J;ebS)px8xqu4)u<Wzr#ELIgZ*J4D*mrcc2_g0jaPk
zv_u6yrxXjgq&2dVsdwX!FQ*EF&2wx`ukU-JKVqGb%YC-$A$v%~2_4Le%J#;jeDF+F
zbXIaQ;eVg>r#1T-i~#3jzA__EZW+j2g*pBcRA4w#{p;Ggw)FuT(q=XzwXvrsoQW|H
zZ;$4*u%$*Dm8#-=r@WW#EScW6V79@fJ2!O4{8UOt2^&o+b)m%`cdrZuDGr)-8!HMk
z5fc#sc9@q{5*X9Fon;aMy0uzE5XE#{T%jj$Zu8WQtcZ8As&v8st$>?lW<h{Ya%STj
zpoWfWU^Uh`iR^;9csUh!xAdp?f?K&crL{)LFw@-fR7PhAojon<b;!U#Dcx;^UamQY
z=`o^KlA%?3N^^{-3@7GXSs@FYiaqz_7I%O?0Q7w;ZOwThO>yjE2DEB9fci#PBUl!5
z%6rxA_*eO@ZpFYM=4IGKYm>{=a+@+kJ@YF_A36W5cq>^r`s}>zE^GR#y90CEDMst<
zj`Rgh_051<Qb#NO!vUSA<9lDaq4)ho)aF0S@eZGyA=!r<cl|9~yW4*?sGY0m+s-i{
zy=Cdz!^6zZHrkUTF`%2{pbMl8&dcD;{V1Ef#|bc14V$YHc)9$^DU(cbj1?MvCped}
z$+OvcD7k70H62V^ulB`(KvVB>qjTd@^b8?m0JMuHkRUpGn}u-`qS-EGWtq$z^K+s<
zGI;?5N~u_q!J;t94j@VENNJpCjycwscBaG&MgaE0eM_et&Q71HC9{ej7fzijbZC$%
z2)7hGl#31nqX5#z22(<Y6|*Le&1ElZF#f6(($TsYI*Y`smV&B-xPX-Fw-*aHHe!UD
zMIHEx2~%TO$7BUdN_Nk@f{xWWiTCDdrAm2KFTt#mvozD?zBtdO40}^E>~<%S8y&0a
z3VeEcm{T6S>be^}w1+iT6ryg?l|9Gr6JJSEQz!P;-6by)7THBOT!(zcGu>i`DtSHv
zSyVI0_0nJ|6RuAzJ_$39aspG<Kkac}kxs=&4H?I3ez{y*ssfC!ENNb$Y&y_7z^aNy
zRJ5vH3YU7-PRardG<zsCdu5YTLOD;OLIPrjbY*z`5&<XE>|D!1d=&m$LC#x~WU((B
zVad<jc~MiyQJhYK$y7cedvCBb$>@+et6q&-Z^rMM1QiOjh@hCFGE(1><Gd=zhV$KZ
zgIacAqcrZZZfm94j#pwX02K%AKAHo+CA)dr(opxdaiK@BpIU3@_vsx=;U+CI5_i}+
z=yUzwK6UW$Me)KD<x#IEn-fYniX^8}OIFkgnYG~TLG&ihl?C@C)$sc-CaJ}a-x#UL
zn((&P34MOqHp(r$VFTM+4E`dTA2C;N(OEUgFTbFCG07%!?|u}`;=_)_Alm~Ax+v9C
z2L70?yI1LN3bt&^Bw(8{EPR<`T0LF&zWR=OZn?Wy)2`KYVy_au86fx6RWU`u^Nu4D
zPY@a{b)buIkkmcl&&%762+3ali!1-z=WHVu@mVjva$uZ9RPpspK<%8<bIU}!NYA-4
z&xS1i%zIMI3E-#C<6L+4py@((+SL#JiFeC+lSHwxd>l9He1VnT0HQ8!-5mNaR66H}
zXa$ScI~8|JC?#iZHUxA(p}Il-SpxA#kYzYO+?Yqf{GEEu-q}dk(9+TRKM$puD%Q5U
zZ1BG~bbF1}^bZGW<Gc1}aa~U9G(#HJ)7E_TDPadx49<;4>I;fSwBKJSSHw}jyfJ}U
zlgD|8@fMW0q>D}mQm4|xvB|Ou1@xL1V~UtweJ!+0R%A?#+-?^5Eog{97%5|%3;NW<
z`Ev~n_M$Xz096_kyiUy!LowG3RD`Snq!XfF65UN@xda~92jnW5B_@^}y0n+l!ro~V
zZT!PjGutrDQV-N1bw2|cSy7E46L1Av1R53w!npt*1(S9t2^WNGdE7I&q?*4rVn(Yt
zix!&1PzcAynkLSz3o`SdRpwl^;oKfEKoXM@puin7(4k3iqH+vgI?0jd8Vzg%`ennV
z^6v&y2_MYciv*c4)@~uRAYOnyEy(dRldLkp*nqYWdx$IHR{87N2__G(-J7vcNyZzC
zC>5h?Opb)Zz@kcuv$SvoeIrNASqjm_?g4Q)LI8XrPC`5$GcsT>rJ#vJ^MX+{kR%=3
zGfbV1gKn4*2ik;*fv^XfDwvBMMZy$)rKjG7CQYSAl(+G8e1pNl2r@~@k6^S@@){Ew
zN9bcmDI;i&bdO=9;b&lVtoXq^9&;c>b=2ejSiu!)$4DVu8#q6%Smv|kK&Px{fX)!B
zHzCf4x|^e|gy!@8mGLeVG3)S+C5;<+Y4h#5<?+or;wWZde}4cde_12%)MU8u&1!+`
zT3crjrJTH^g=hs$T~uWNuQc%M9GgwUFSXbwp_Z?${fe+zSUBh+ijuG{yX`>4P8&2A
zC}Oz|bWQQi4Q<0)P^%#OnQvU@*>`!2gS8m`+OL*kH(1|QC~ghT@H^B6YFm34b`#L1
zjY!zr&ZTz0CLJ-0<;&ka3cf&ZJhh-XZYhmBuMRHGJPaGsL@h&DP)VS^A4T-9fH%Uf
z)r7C+Tvr2wWy~4XT4`#>?t6WAy;|Uw_b9*Wn`~JN_(_JoO2by~Jj!wIb5?b#V!bby
zD<Bejy_WK+5~sDY-HrxU;B+N<H)04|%G;8jsLu>`TV^(vy>BHGSL6X6MtC2Nc^_8R
zmJc!3O3&7BumI2@%U|Jtaa?adVf}RI54lA2Yt-QNTG<*%!dk-YkBZDMsdy^4id|Jd
zv40}yJHI_uP!m>CU6u`58-LN6i*SVRB_ybOZL>ZJbzjSH1+@2J=KSm;d#Cp0Vd>}~
z6F-x#@N3*KOou<6H7xk;uHwC$wyNTTe!flJQ4L|;@4vHKX5{B;sRDEAqiwiDc{7dP
zm7wOoYyF+KK`z2a4s*fzw_m$9*Bidg6e85+YSYcBR>Np)!=W*v<J37nA$@wHWj<b)
zJ7V+q$f0|kI{Nd6C8zi5<*?C}2BN1(q@aN4Rn_nWL3Wu^+~5cA`gbw0N0iAEj?RPA
zo}<T~SA*Dv7AEcYJ)H9vy*^*8_T+i`Z(R8szk<7!BfVViAAS4hZmHKW#GBy59c1yx
z?>|rQ|Eqa{babx_DC37aNbUh}dI<w+inJ|+WS$r#BAPTei=+!aONn;#;;NU2rW%n$
zHs;ND@^9IZdZ0m;p4GD9dVqAE^>4gV+4|K;Y_zLo8oi6{vI*d~Vxzx$^laeI9Ef^8
zgFVw*si7DzNk}$)!VPWWN4%3YtfFt37`g@lUSjoxMA%h%)&Pkh#|abwJ@UBVuSv@&
zW^l8an)#O0$N=dR5<->$p+$_Jekb5dFt#rh5|R}3bqjTrOUl1I;pm=?ES-p|5n~%9
z-4R*$Ge|7@;SRNz7?S~kdMUSGd=Rd4KPx)1!5rq#NC${oBZn^uB%BJM3DB^ecDk+6
z9lR*eY@+5>veb&dRdS2@sW5Q{cW<MbF@$a(z9@00e*c#dp}9;0;pjur;QL?tn=&%~
z&m%&jqWnKx=u~q!D<p!$!Z>9D=0nQLi^NMZM|FzI1bf+*Ntfl%0`tn=y-m5M`Q!_K
zef@oL(f-1#`)m)w__M@7F&u(DMn}ho7nkf9;&li90*>NKJmV|Pg02X>mTGXh!s8ZT
zYP%Q1%uO#Xku{%(tWL|2KV?2rfcz_UZ-bcwq5ri17wH}Gd9bHSDm7!=m{GpM)O|)R
zvy_O84{Oy51|l+~Mk<F`@jg9Tc-K7yX+Z%d7z-07sY!;;Wi_gfWhqg%-}a84?5*nt
z8p`B#^10GqO%jn|PbG&VD|ZLco-Mn(b*epKS<NyZm0FKp@_a~(hbE|o?tGBEP~!H`
zh3ylL&8x&VcE9jXyAG-e2GLM~r55B+8GcJ8+b?1;Q!TP5Ql{n5%9slL#G2hJL5#V|
zU?@OW!8mC=^dn0;)sHQ;w!%@liiy2LUXCeG0#>V1Ul|!FB~w<MxveCr#=NC|?$uP$
z^s(HsYC?}<pk65=qgV+ZWZNA7HQ$P3AeU~kcw$<A1mg&omub<$i=%X)4+SYJ5eaSu
zVJo1%oVP^Kv@M1jErYq0;nfg>Yc<ZgD9uiU+H1=#)g?MN;QavGgJ6d?LU=+9bAoX)
z^N;r_rRDkSw{_Q&c)Iyxvu_q-WLnly)*&5Ak?yU$s}@p-H=U9VZjw&cQEqtL?q^rT
z7Km%uEM0&m2@$^#i;j$78O^&CmV2X^kUSA|aVL-h1mB6cFEo|$>paenBJ8wRD9;b_
zq(p=<(;k8mB@hL)dK2e_I0vSt$Q@@olH<fer*=nd7P8+S0<^ZVTvRuQ6e0^R4Qw*s
zJ|hZ}w&|%tVuC02o5Y=$qRwx7;BA!-%@q$0pL0@pd2V2T*g8jppIJHsY?n_js6St`
zA3Kq>E9AyJoFYz(uB6RX;o>a$vG^;BWyRC;9*9?zC;3br=dVo@XwT1lN@?PoI^$l$
z*=sUt|8O(D{2j#B0j&e_{a>U=R;tc@8W9BK2lwA~V2;L4x__&osQiOI(9-&Lq3d@c
zqd1aCzC%pom!7O{y>s`xSj$|yHvR#e9+E_v&MIsnHX7Ex^!^4)Bu0SZ64$02`Q^u0
zZ$JRpjxd<Ci|aC-XQuVV&C^Mn5jXV1<M6Jciwk~jymUfV7D4T!`$M#ueBH06j>#K?
z@dNQbUNgR4ULoOxO_8zMGO;CRH2S=T&?KvLy8MhpIcWvsT0fcBUW`|L4wJJbtFgsx
ze98Ja>j<$WMV%oC%>nTrdGrxxigg^u5muezI}F-FXO3Dr>7&-HO>x30b!T<(%G+}2
zn?H}sl!TI567li7csY1^O6J0?(#uzq?Bx%x_nRV_gQnEgEPgtx+k|IR#7|{^i)J3k
zrHr#r(v_x~{xOTKn|vySo_%&E<?_f<6*?M`eq__3*BluQ5rM{x60e71msuGv!ybE)
zhtS?(*mwJT*k=`2#hn)}Su!zMRJBaL3@Uks1m;$by%I~+Sj^cbi#&{~>9Z}#`B|Qt
zR=L?Q-ELfEJ$IRegQjNM{%OR~7==_aW|@%uzQ>t$1}6DS#y-2f$AC?Khnx+3D&ekE
ztW`3yr+%p{#;^6F@xi6))egcWdHYzS2qUkz{>jM^&xOWfQOuCb4MO}5E)L%Ir?Ht4
z`rCZ|j3m;BgRMJ(Mtl4GbS{IeotMBVqepQDVOQ+RKI=RYtJGTMlq30vf^Z5h;nI1v
zlI_H@uC*dzuf#Gs9jy?~v81sG>6D@U^)IX0S@p?huDij}cZ8|m^naTi$fkXpw7#-N
zqEH$>E`jAo4_)J9J6mID<X7oEq(}jHDNhD^<C?GyQ$gE+tq@tIr0Sg@jW&ON$wDyd
z??O<-^{0|*MKJO&H7q+}(Kiv43raN&unnluw-D6xFBL2UNE6`(A~53`p@Z6d9B1gA
zM=o)o7^bqDvW(osnn_VN^k21`8lB^vE@69#N@W#U6p1iJU=?8*bYbVlieclm{hwk+
z)`3e{n<`7ZN02Het61vk-WymJ<35HaQL#;J2mBE>e=3<Qew@JmsFLFG)Qs5Xmk48#
z59QA~pYk>+g-dFQx~vLH(9k{_`jJCb6ZCLX+hsTDW}GVnxJ}dNF=nt2+D4j<S1{JG
z?XeDyLLlNOrT)3UCmqAr!9R5jb&DVPWkD9@42Aw&w{fPwAE%p9h3>w_@!iYxkS!wF
z<YXzrfQ#$%xP@J55)ikkd@*2KhE<lWzEp!rt>Ow`U#POjUvZ#t$r-T%r?{?*=+nvZ
zMu`4?o4pofq*wNgcIu94vP1Ff_1EOvB(SQj9&5px3H5p4d!4b%!&0`}0HpQH?<+B|
z_6P%l#5HbXFx#h}1)G<8RD?JHm$_?3SlbkhjfD$C{Q4<C5f!ak2?lqgsMreC)MDEf
z;o;fD({4&9jO}ho%~!%9QNzXwMJ}9pyFr=!0hQ(nIj_nGZOu+hPM}1mYKdIPS$F+u
zg16FI8P`K(X4wYwvF$t@X^@W>W|6B!I(iYi$pY<S@;BS~_Po$=d$lCP#!SP2Ii@z{
z$`^8pxHC4Hkip!IwEY>X(fkIB89rt>%zZYg6!b$jsU~?wJk@se#<n5zAHesAi=Exx
z*J_O*3$~N0MWU(;l1iUz82<A(o|PaSB|4|o%MDD~sK?93$9$ao2fkvjY-{<~N*Vh~
z*R53y=dEM3rLO&|#*&dLY&Oqm)GD0E%0u4m%l-!#)ro<_aHEBz=T_O}0hh7I_EL+0
z%1w8lvFp~$Q_X$C1Lf-h)5{+3i^uIp{g;k2KKrarFt3Z|E6x3nTo1sPAF^}Z`{MSQ
z_pDQ0_~a`W9o@;&!)g8f5{0?fx+ffT7M;t=PrOVWs+_FOyKP13CE+CCaxTDVV{oNO
z>|&Wo@?ELUD_uo&Q2;;T{;NV};YCfIm2#Q+MR8{@w8;<3PKA1vg!2BSsmnTU<@f9)
zeO?t*8)n3+9r|bRFlUJ0Khk9=^&Fk`x>Rm&D5mJ*%_?yp)TN)AN>7B63r8|5g$eHh
z0k%o<j3-KL>2ALRCB@R6R4SbtbSl^bT)HBsM8`9>!=JL{oBSKSI9S&2uc!vkse;Qj
z+I{e|y_8V8dANDq`aegf@~8!$7?nE8=7$PLjKMV$94VFnG)^yIR*FKK#-x&U_O6Qn
zUDYhxBnqOt!dc3q2OjQj-><gU2S#4_Ioj|N^PL(9%7k0-y6{S5IlS&IVm^m-BhZEP
zn+Dw5aXjlru@WXetVt@P#0x~hDZ3~B-U$l+9J25T(%AlP@z%P57AX4&f5wh(t<6-T
ztEzjFv#OFzaM5D9Ix}*uE0vATo}9h+tGLt*lc^m_-myb{?4BJQ0=Ho8zEDFq*(0Dv
zUhwFA`$dtWNN^CFQ8y~Vo6TCp-{bWB&}?4F4V`#AmjcQc&+kw8`N<<oC>n)F;*Jvk
zA7sXmu!J`d&$~bv>lz>UzlkIHJkc<M!ri|JxyKn8`6#hGkS!z)4+Ih#9tn$x!Oj<D
zKZY_yh_irH)VBx3?-M8(6s7#<FbA;&L4X7Jzbyp5XnEZIU^10r^wThdStjx&x@&#j
za{<P&Obm_;+(2j_>EO=qfOI;aFB+5wcIY4Ej?#kw!U1g<`J>dwAs{HHfefKp2J{`}
zpK{(GdDy*BPHiGle9n_$dC`lbj|d2Gn2+W96XgT(ocDl#q7qV3{MP)B=<kcU%MKNH
zu4^%LRe$b?oSOfX5&L+*u(s<gqz5c<z#$U-E4cbDgiPm0%RrNM?Z*Bi;WI@_EGqE9
z$&qcb;n<jui~|RX1KHk32Jho23@3`i8R#Ew{$Z6U@Gr)JLw=Ua!~2V$PJ7UQxXY)v
z1@d1Mnug##f1_w*e8h$kQ50boxw(E!f7EdSa=!W*tC7h42`+wkJPvomGo-HEe-Y8>
zj#GIeQ9ry7et!N38J6exlN<gxylwXv@xu%1pSiF(q3a1Hs85-@R2INzH1I|7<B2XI
z6;b-^;p9X%k4y?liM)LN=am0P@qhoHGy6|lFK-9m>@F^>F1fjRZz*oJAlvID>-qfn
zmK&TVZ+S%kP%fL-Vn;uQpmRkxua{G6+*}`ahGV(#I2{5*Az;B>IQ&rwNdpPIhe&h(
zCy}4|pn-qQvzuZ_%9F$QC+NwFUibljg5fh3AI46HMI#GDckR~J!(Uyb^~938ayaY_
z$C8Qye{TOp@HiiMPypAA0!K5K?p~|uwCd9YZ3}E~wa)GJt>wHZjviySp74oSr4D2V
z+--eg)y;jrq7K|B9%Of7N3nR(Ch(-FKs>N<7(5_es@)!zp3Iir-f$r45QyXR$Af)@
zo~ofqRSL&Qq!SKTr!y}^#*e21I*N)493Nm2&)Z)diBYcOkp==L@$q2_(+vaVhCZ5R
zuG9ZiAWN_TA`9Rj0)c_E6N~~SyB+1bs7vQ3KWNW$HLd5mT`p|cmEJD(+qn=Ae@?80
z{>b2+_V^Ty$72xaI7BM?Cs6=*<^^$t{HO7K76o_s6QI<h!2dJ`5f41%;XeUC=kUHu
z^GY7j7kYWL{L7|S^!TGOf7}O<S3>loOTdS5zWc{Xv6B4gS!5Bfj|af_P5?6OZ~;(G
zj`E!XkvC^z<wOY!Nh3k7%rDvHy)QQ22V2`6`OdwnDNcs_b)#V-ow^86ox%MA31D~(
zfOg$>Up|<K>}XZ6ru0WtU^wIY{}L4e;GW%Iq7q}cNt!Dv5dHCXGm9kV<@10j&I!Oj
zQAxfKeqlc8$7=}XWSa#;0fq4k<O?A^p_CU514xMeiT)Iyok8Y7@%Vv<d;BSu^dyu3
zhTG*bd|C4eaTB$)DxdxFpjrHf%W3h!=aFy(z$5rIAiMJi2(Zjy#z9Uys)V|p{ZTCe
z4S5T>MY<aj!dAx{p{A2f{_tp#ily8Jt*&MI5iXS^`*0=?514aCaET7Q;U4267fTL}
zCu@U^Kfus(o~v5wL^%Ckp8kHd<t??o-|s^R|8U|-*2wGj^#~bSefaUwV{P}bQ?f$)
zEZ*F;%I-*pwrW>defmq)ceZJ{r_AGWdD0g!&{t26*!89J=5K`NHX$@3R-6VOfD<(L
z5<GXB!Rs8}6;<o$Ix^myCqr(Hkt$N}D0|6s>}9&YeXgJTt1qWyr0l)p%^cZF+6^uf
zkEvTEegM=}!r3ZAVc%ZR9^&xd&yS9NO-9SNMXDA}M@e`=9vNINFj2+PbUyE8u3hK(
zO`U0LW|}ErCcy7F{lHk%#Mk|7?e{FROs8pb_GVdiip;#QbuV(9R@y0WzlQgQO5n1n
zb<X5!xJe;jx|*=W3jaG-fnJ5}{?MpaEySK_5~JKcu3+Ses@<BtXVAPhtbBB6;W9vq
zeBmI!OTB<h8%sGT6<Kwmn^dx>)mJHTg;d)tm)C@SmcHRtf_NyqwXoUt+nd6KTKqym
zr^fMB^+KbP1p;IMx#!{;xfA-?0G#ul!uva60QWgxG3zCQWh`K7ughbB2nsH~wd~QB
zLJ<$)l)opdlVx4q8%WS9?&julrSIe7=HT_b<$U=Z1)O3mE_*LD4{(rB4!}smlupN(
z&o0AEl5_aQCvNI~%(;DJ^uYRIUFRgZaoNE7*j`+DT$^#RFe=<6opi=zK&&a8t)8c2
z#r3If%zEUrddnicJj(A|V34tMy+eGeI)$-u2e5`onL)-jKQFSn55;lSGcw3PO*i^>
z@*4t%V19QuV2CjvW?4WBz3f>g8jCsR)nl*ZN2>H4X8({yP7&nAl5#~3EZqs9L-h12
z9WY#ex+Mp74R8jWDSygtV_5jSf7O9r6j+5kx_P6iU0;pc_(P|peUNO_)^$Ruozc7I
z`yH)q{h+3#3&e$n%0^ArT>16j=#|36w1xRxH<WUD8UXA0M6CH+f2@2Q_AB`$HN-fz
z$7Cs9#ZUfDu9lhVH_3<XJu4p<2Fm;BGwx!yO?5v-`IUq!lf3Pv^5Wxw%GM#>CKj&f
zVq4jhO4N&j_LqW(hl}Xv;x6j^WvbtG>pcWjs{oz^=IOA^^flH~7Yt^@oR{`o7frcZ
z6^Y;fqU{`j!vb1<*lZROfq)SH$9+AHb`Jm9Ub9e5+jdO^$!n>aWA7`gg88L~eJX~x
zogyhE(GQXNWFlx#brVtyrmrzd_@r0g>APEXMORA@umI++E+#HANu2=A6y{qtF5bP7
zC2#YyboT1+PI^-lx-ZLG_`6Q^>glK4FJCqi4|bF;>O0iZBKmv1N^oIsiRpG;H=kV8
zKP{-88etX-ds)gHTW6%B^x~~1kB>c%U}|qi5GD<JjmsR^yy(qVuoRP2*^hcFq;$s%
zTJ6}jKdGgWv9_OGxQR6#)3H5@x7zk_rF=GOmX>x=v?<@QR`&5K$t@GqUh%Db_wxMZ
z<GAuo)u^~bp#8)Di>!@|ah&p7>q?UIW*1HL0Dbww+uIvcISbl=e(Juis`Xr1eErX4
z*N`%=Ml~&M)#dd2WY^R3P5Q-!*9OW7!sK-N)AGm5G^q4brp=;(;-lMQ$M=<2lP-Fx
z`-R^X-72OO(l$0!MRI}<vi<CKNXnZvKFWkSKFfq!Z%A6-OUBB;&Vy?4p2Lxc8Hs*M
zj>5o%i1R6yj7L!dsG!P3QpZM-<%AYMvd1_i)4)R~h4cCFS@U2geW`up?W8&~;H)Cb
zbQsw)qTD<E)x|Eg*nR-{tcY4j2Q)5rgtGiVCw|dX$(ZTSt)wtl9lkzMxed{F?h;rn
zm@ZHoq?=FV(xJ9_-J+e~`+9vz{lusZpBaP1SFp4Ln@I5qrPFuD+BXo8EM}A+qr;dS
zX}~As+qWX=Bqx0-pM8|L9GhbK^}~~quti^nA6VE#NIfx=`L73X(=E+CE(LFsk$Nxv
zIaj}eFCC=hsx-Kf;Hcm3WPaKY`9!-~Xrdt^oN!oiJRRt@ej#`y0SLP5n*8#<#_ELd
zj|JC^-0vjF2jf9v%}X|(>W_5WurzN~h5+Y4tqygQ<cw&I#Ks-)D^OjP2vg0Of}o3?
z%NT~tJ#N)W`6<t#s-xa?H(Dnh=(ndO=W=((T`x~Gi_;O%L#|=ZcyRF~dj@Rw%7-lU
zrp^<3QGKqPCa@kt0~5xNx%8E@h2ls8qwsU2K8$l90pWm&)#Qr7_8g(4)A1-2Bij)r
zIzZ18CnFKbr<I~lqaJI0s?ll1=<>tv^s}OL?Dv3)i9?`O{h1XrmGropnlmgVk|s2$
z-U^qi1wki5i7N$ii+!BgvYWMj9lB~eLTBM|p8K0-8-L9DjjSaXG*M8OH(_MFULM?x
zgN3i78C!Vzx_6F<$}yITZbScC!B&g}=9-9aFUf7cr7<w@N?jWcn&=pPj#~6>6Ca^T
z>Oexo+(T4m6M4;d2VKqyJEZtv1=1@xMpek*$bhnyWbs5*^uS^V*j?nxed2X=h0jYQ
zTlVcfeF=+Q<zn#WnNKcp(^6140yqj2a}@PN*~3SP#8b9aF%#)@?av$*dH8@t)VFdi
zFF;Z&Y{XX&MM-7G1**~eL)IPrT0ZxK0qDwoS$1r4!W_8yw8Ys#s-p*juEa=%UyK7j
zg%!Y64^wXC3-KLZJaN8PZ1{{~5o>?1d6iRE&~9><y%DU2^0H&t4;#QX6LpvBL#%e2
zkOk55Gk0K(V`iAlfyOF;cpscUC*EmQtq?$E5ZmQ406z8fu~fU!gZm}4Zd-}vh-a_Q
z)#pauj1$!PrQ%=TYyrh?d_9GI8@Q=8y)>$56wxP{Z`^l)?^2g;FWJu}!lj=-BNgE4
z$h&U0H4j$#gGR|Tm&7(j<l@nbeBt*X4e`VWLm@lT8WIsM^X-cCK*xe;135u2?Rh}@
z!~;`?`AG7~OMmLLP^Xk@$75ltvrT8as3s|e&I_X~tDE$InN|Cq3hBGC=!s{9Pc$^?
z8-aaVY#l=mmxmVj@3yDE_8tHK-Jt*bKHSyJ!OG6o*6JUA&^O`>)vP2-)STVmKt6#V
zeHg<075(#4Si{<me+>u-2<*pF*uUTO`M-Z`;B0PXL}zYeV*8g_|DQ|f{J)pDy>^0a
zT9})I%F7rp*vlLBkMpY1d!HsUT{2_YR$IIAe@eL9LFqIKve1S|jQf#yH~+C0OwYjH
z#>-ybq0--m7BjiMJlitHFx1k?-Ot9xCP>G=f>ut4aFlvjUTy~34&lZg{vis{<-zXW
zc>z3}qx~008&rTAZ<fq8v<_cPcfF-u&G#6J<OoaO@@%-cQod&N0*rlM`05%4Fa^GT
z`AR6*q4ZRuRuC%R31qE*QLg{!{^2@73Ifs@`d_ic)lS#I%GS{Gf7Yq~4NJx~-d$J4
z;@)|_3nSi|7&3teAc4k7xztFb*wkEqlA)kaHq=z0UW7y<h2h#*`L$Wy_6=b@=7DTw
z&GYirgvz+IysfQEb!;e_phonJMRRliIOH_WJxb)IcF7FV%7u2>jaFsuI8^&!Wm8zG
z?sw6Lial@gIRYYG%->&Hi1-E<c_}P*k5z)SmP%-xtz2!dqG6flDja_#1iiE7!<6-b
zZLNm9+pxUCC|y8|ci&l~hD;lpf>+o;yUuAK&#G0YzzZG5B|T{=ywxN>Rmf|gu4b<x
zW$xxa(@3~`I5B+1%ni_z^0{d$+$tWmnS*we8-d+84cU9r?dx&Xn1ePqCvR70XQioA
zaGu(H{cAsCDDd9?WNF`le=M4io5QC-iAeeJ05E}hN~2k0siRd~j!3goK{E2ayu>tl
zYT?`VZJ3x4-I3Bj{qEJT->2R>Uf0B9$9s}4V{jM|xV1#R1{h_Iyt`)r%n{i{a#>8{
z2P6C&?hoR~pSFzVtf0#?PCZ5c%OtkeJTvO#tYcE9=46HO`{Waqi+!88c$>2N)Lb|H
zz{w$Hw`TH6TznMCNaM{bD@KgsFhtzKLyBVVc&QKF>D+UPO;bhflC!kJ8twDi=5MX<
zjUkAxmh_Nw$96s8(k)UE0$m9NKZy|A(O*fw9*FF<4^5P<?4??-QBoh_<!u?i?V1p?
zu^T8K%JZNNQS)mJTw5o7r>UyHuU#qO=vtRhdlzln&^Qm2T>A2*?6soVq!KV9xHi{a
z=`mNXGOS@`395;!xqo>YSCL>$$Zn}J(rnYG01L){DM5#>pkyX!%<4`FnDgjW&D*<I
z*yCJM`6i<(o)kYa8%kKcf3eC5Y|eYXyL_GDHmwd;WW(=H={%N&jJz5fdAh%{`q1NU
z%#M9J)t%6Z`l9%7rT<;xl91QvErR*^ofh}igOm7Ff^HWEH%k{7EF|JZ@fNXS$52_j
zJ#c(<V&!&SHz-qOa%RAtf5b~TX|`gerFh1gYGgpU@&v&}C?%u&G4qYzHskOtckyP-
z5dUsKZ`RG*ekN<uKUXgQy^pS%B6;_i&mne*16M{?^lkgsR%G1dl|P$Fz*0a2c6!%I
zw20>riA?cs#EOv^=;)>_TKr7ScP1P?LcsBg9TP|9$Su}cLW0n2l!cWCCkMWS(bcK1
z%v^RyC9-B><50rz@7wUj8BdqRZ<pN#{rKMev_^h&<s(~Ku-rbmBzGr90Nlwc6R-yd
zZeB$NS*ZA>gs;W2D`wovIPGblEgD8D=$n(Z#I)~l@-nofLnK`LBUbd7TH7)ZhA@>M
zEM9|I1OZ2=_o)guPXd{#2`pJ1iC%?F2?$DdUGA(os;H$Zg)Lo5LkVbZfO-`P7_n^T
z)0zZW9bhm$6lO8lIg{bY(S#kKByJ&CvDGAWV)M@YklNkLm?jRPWWQVj%UqewtM}Qo
zIz+*zGs{aKFz+K6U8GuE-SFT%nJ;n0GjL^qs+iiYJ%y>>@Sy}9?>DVmt>B%n&i>{m
zw;>OT36nTR@>Y|#hpc^@VcjNc?%oGHQkIa7KClhOq^%zP{Y%#58|<q^;@dv`S^Ikb
zFV4(61lqTZTd%CD(H_(Eo-Y>${I3YuQ~9So*;DvV5s|Z(Nug!+o_?Jc=*2K!KmA-W
z@^a?48AwC8g=for95KP1#au9VEpEZf7*XR<Hf08+6j$2RRD<1z79=6QpMGk8ACmJT
z0i9jr#pQmb5IMZvt`6DBn0h%hP5ZUv@Jksd)&pw)-JrIFF|iagf@>vjZ%3c5BymM<
z)KtBX=~tw<Wg+>!QMwiyt4Jedn~7yCz2ZWvm5Ns_D?+q6e=UZ5n%o7{Qe+#$ilwl-
z$U@{9#&u};g}+eVK>u&U8x-v*x_Zr6-K@n^=lzw<@-902Wm`+9x8E5K+g?m=oEZut
zDcN`QKJpa5H8cq<QrR{<fDz2~YTfRv8Ig2DyE7f%c#;F}6h>IO3KnevX#xEa*KRJH
zxq*es*-4SrOa6xtUqh2;p`~by5ZgypqNk?5D|0^Hlzmu(yxS{uE131cl{IdfLs&<7
zUivhEk3Rb}{~yZU0w|KESsTS+ad&5Nm&I*ycXwEPad%zZ7k3tScOTqkao54!b@+MT
z^WPJ3BF-20-igV~j-2eQobIlgim9x8?tp2ViU*D3%4&Y)MHQ~LP1+heba<~DK#`%I
z0qRvhSJb$*4b{yX^6nhNZtssf17t33{04nVb`)AO-z?_T+}Qaj$)@nt=-<bNk#{5}
z1{%2+j`5=>9R<@|ww)H3eUlc`of^qbSP0H16FKds4z`M89&c~z0;^WPXv%)B>{pZ^
zBOAUvi(Y&;cA1a2`(s;s*^+o&DMTQpsorCUG20zBIbBlXOlPy&hRj~y1-zy>R*zDP
zUo&MWJo>gXs8+qqJIQ-Ul9C03p-oUqCXjKc-A3xxEc?Ba!a!F&-Ot};pyICLTphOT
z9XPm9hDbkFv}Ty|u}?Gx3h68@tX+&dfIQKB!SUGnjUpu3GoDWx^N@6HG8#+g+58mq
zK2!NVQ|eQ7pHn-g=m`u@Q=<ftBp0YRX;`Tp9o;<Al*j)lWdsHAd*gGjM6|Py+099w
z@l#B9%Uk6GpTlB=ulAPdMsQl*s`KWxQV_1StkYB#WBGll8z?{P{d0{?(Yw)GTDSc<
zuAlIX0DPjLCl(;;nwu6R1>K2aN~e~F1I+=l%5`bKj$ykJ2`QygcnPp+VC2>d>+m6x
zvhL1ey9(sgO=Z!{uZa?|Ub+TPIdugX%#dlHKFf@RHoPb6$J?}x8CFC~c-=@QFPoyp
z!}b8Jq>BJ1;t8?@QrOm)ESeS*oKe(q73M3~J=>_yA6=q07#H7d3g6gMQ{zBY$cB1{
zKOaQ*s6EAArYlNaKgM{RJ$rS4olclfamOPIHO{XeC=fM*iLMq2wu`IN!;8`vw1w)X
zK>elg0wOA4_J$jqiozzsA;hc<KngEeB!N*(g?Qens(D^zO<BkHA$n>Ml!^B8*4FqX
z`-YvGj|X*o8To4ZVMt(o$wq<Cj*FV7a`N%s>Qv;XrM(IF*?zf(uG5p9J6IiE>8)vq
zjVd&7`gfR`rr8g$*+<(5n4jj0119n{@aY?ZYa-Y~Yd`<2t}|%b(y85Rv8`~{>rmT_
zmW3rB%aDYz0S_n3d=!1Yb{RC=rY|7O*{G7pWwSb6@X7qXRPWbRt#KG=jMsZJR9Frg
z3(3og(kb9heq{MAogGuO-9lR@-LmnEGRLH-n(G_afvxt!{AdHw^N&SDKc2D*Xszt1
zEl%3|*JxQ}HKikMDG0sswt!(>+HL6@6DcfePM=n_d-;dw`fVlUNbxFi&tK%b1go+a
zg<KJ0Of`x{f=&i{b9Mz(Ly#(r*R<7TUzw5&zQW?mVY5D8(HVpX*9HHMP{Di}N~bZU
zRMBgyjwr)#9ECdRIs@F3Wgi0IAne;mWb`2iV@58Qk7Ztio*EDSwpc#iaQ1`U{j!m1
zZ%?eN`r2<pK>}*t`J4=hnzC)ll**b`;3yf5YP!qC$|QYr^GSkHSy?eVNy#uTBd{74
zaSXMt&0UeeZ>yKXA)&u%RFk7b`4iOr%3UbQ<x`hXo)@Ys74e{p<mo7Hvp?xoT<$eQ
zj3!%zUj1^LO^TYZVV0>MyMxw5J|8$D)}Orads4&;#ViiBV9(CmtU%943TV?W(*06u
zsu*QL5#b)IsaGPcUFt4t;FH8@(tkrHU_3Tg|J5^Jyp8rmt6P`x@v~57&veJ-COy*+
zwlbTk`59;|UvqG_q?y}P6W+poee%f05cR#7UlbIXDjEjm%wIUZ&@fW1keg#mMy@GU
z(ijvZF(;AMgx~JbM1|ZPi!g{vdsa*k{ASYdqB0zzjpo0XC=HdO>f>-k8ILWrDcV4g
zsh2-}oIRqkp3gUDys=iUz<zEj)sG6&nJ=sNHqe?ci77C&rllL6JuZ2%zw|4Uyezfm
zKLIU!d~9w$HCm;d<U0$`_<VFPZctozi|wLGvo9A|`9>6rbL8|$?)gUyQR91Fn$0%$
zd_wf%_tZ&Z_(V{}bG-5%`9u_pa@ZC@x&}AfpIm%Q%{SSn1z0sDj<?h*dHYQPb+v3L
zg|=@P87gnr^twX^yRqH>5f;s0srJS@^_KHbb5FK!%f5H&tkJ;9F5qM^aC67W-oDMf
zw$rt>v#F)iwRT-d@8Xj25hbMsCAH=8lc&IjjR$uD0f3vSotvr68{`ywZ%wFjtdeNY
z13)e`-D}IQldg!39ULce?tIz{Wp!ePmpbLD?pwh}w6G{b6*pv>%-5vN_ap##QH$bA
zdv3k2@XBh*-DSxg3eCIk*u#5L73A21pqYbEk-IS7nX21Gi4Cz*-_BjU+6Wbw$w{#~
z&!{=25XlE}=Xm(YPuTifGocejI&~h@S^i{7r___z5-r*OH~ZMZyB8F<mx%X5&#~OC
z$MtKimIbd(od_gXhk5^~Z}LQI)06XSBa1`D1zMIq)^0y-5Q0Mi6d~@In<^gb$%eZq
z$6YBtu*)%so0hU87+>Cn1yJ<vK4${UGKiaK=u`q<yyd@$9)d)q;g-*FJIe~;dRa9(
zMQ{Wx!Mb|4yLl1p@eL9Z1<yn{i^%L8s=uP}Loa|Pi=(>#xXsM8TvgASh&o!`>D>u(
zROT&lw8mv8V|&AMn&9{%WS|%s2Rl<XC?y5{6`%I>i(LrF0jvo)=QsbRm)5(h%Lo6}
zbcfO8Tv`YRpm&<3mJ!8oX5d%jkVz5KZY0yYBN`-NsdM;adQ3O1m?S1p@*!d_?16B_
z$*-8!(1_3E^~6c)L+pW$M~jLRIOk_enHg#u><o-Ta&@Y%jOX5iWkp$zLb{+G`^wqY
zd&&K7IQj+GG1&c&Y|)4C=z=xhG)Z4e(taSo)0BKkRZ(Z^y+g(#ARHs6f}MhbEWdsI
zxM$1)tiN}gNKB9ezmGZlI*N!~Yk7OdM0SU_gZI6qzyp#>9wF?5Hil|Mwwv9r$u9X<
zH$W5`n*Voys{Wn)J{2@yHy}YA(rggB&|y`v)EVL?7O=+n6#W}PdEIG9NW*1fG;nX?
zDhT!4P`VI>nX@o6tB0;<pc3Dsl6cn3<2<jhsonO-ioiY_WyodHmL?lya|Vp$!KFk0
zp!2~clq<3)IV<;)1*e8h$DW}T!i+tBXT^iPNYwU4BMHCWYn#2p<~KrtfhOk<WQG!>
zc@7U|R<sa0@~r2Qh3_`>Unqi|pO{@DI*+1-0$pwQsC)S|BmyPxvz|$u9x4T)x!EKu
z`C*CV=d3=UuppFYSUnK&>7%^tK9t*`#r7d2C)`N0>!S{%4etm8O5b{wZ@p`actb8H
zNNmk4dKGN0#2l~lG{ss}KN5D4mMyipUwBQ42Z|a%-ZQm9rK-Kk<L&Wqb^Fm<FeikC
z=lGp5bfGlDIJ*-cWM1RN5uG!UJeHUmmVEcqe+ZyO?Ho*}s7$|Oxeob*p`c7o_41`K
z?tzs!ED9Y-e>Y{?9?|CKFu>(|Tq45$+UQlyWP+#9VKQIlpM`{K0Tatq4J7Dt$$qdm
zIS>vr-Z|=Q#G1|KzR%5T0YB67829+f+ZWp4AD$EnMt~hV5iwN~)xLj`JG({}<&G3P
zR$zg*k8bgHiri!ShRN;Iw$j+S)+S^F36}|OPxpZqSod>SK&VUrygwH3S<&}eOM2e<
z1jU!!h?%W*im)`c{d3o$&;VY0RSrNmXH>k@jHm=;lv!=YzD;bNvb>zk2b7%7H#WLz
z{+9Y3A)?_!ataDlAXrl4K!OP=`%p3z2C*_LMknoPO7nOSuP1E<%(VqNI}qmpeV|m;
z?<`&`Cszw!Tr!Go-Ek<l`h3x@SD+$F!VtCXHEcu-&IHB-D$Y8i6+ZjcBH#;Tiah}#
zk76FVF^a`U_$H>3x3`TCxXyk%pX)(Q><SVO4!4)|UC_w*disYEyRb**Q1bL^3TC&r
zUp<x2#9MDi_cggog1p7MXb6nWR~UObCbaUXo6}`&fBrkpQu1y9-_=hwD7Ehvpf9u3
zI$T1%_hQkyn0I|sAS4VXBX%|qgl7y-BA(SU{{fi1W;Yv~9c@)a_az}ag>ZIAoRO7?
zS=poLTqe6I%z;S+hxIn2$bQ;isvv9{Mj_Z(tzOKCaJWx+NyY->BSP*ALWf(lW7?52
z|7nkk?go+R5N%w)khZ?`4+ll?<pw(@9f2R>B)6ID9~Avy`MR*NnUZp>B3m>(?<6hR
z`g=V1VIM!RXPVaWK8|j;OS%CR6$KKEQQ6P17LYdD9<bkPjPL$B9gt+<&Di60Mrnr<
z=r?AAAQ2$p*ACJQ9h~8hvu-H*A@bLtst--nsOJqW-uCREQBxq1Gml3xK&O@d`f7Y)
zd|ceTik8)ZXZv@CmT;)fp^NGEmEjSEz&jGfEnE7rYJjVRn1O_W(<(|gc=$#@|KSWz
zZ;eRFJ4+_`i6G=R0%AZ6PILB4|K~_RygkB`CPHzJGxel-3Ff#4t>@1Zfb-|W<-zcX
z5u8t>g|^b$?5>E>{lh{Yfzj?N_M4|Av)dxG791*<WUq4DOcYcp^u;rH8+eN)V{ku$
z!)-;6Z0q?Yfqe`C%rIuC0e?VT$K^){)s#*hfKNmGB(P@AuM{<)&h<82>%j+O*0uz6
zC-@RN)5n?+z;|Ji{cc!e{B^#?3`sPYF47tL;uYbvnaIsrw<Umayj|cBl=IEljge5W
zzpAYfnA6ifBvPC1_m{OBv4eB{mYF|^KxRAdSWDGqzq?0b8bat6F_!KZEgXjWQFl*R
zi}or^tS;eteqR*t#jE6c70uBwj3jmlW@%r-D+nnYwm77B8v+B|uH`-^{4+|7k#zlF
zio=4`tJzfE;{;vE^FJ_>%%qh%#I2VfEPpuUv%n-7z6oF`=gj$yc=FzAyE7dHU5m>r
zUQfM*5P_jR_o9g(iK7kbKfc*+bq=Jo=yGZD7VrX>1PqtNkR2RmTX2{AwLfMpz;^ji
z9M;!&>3@MF_CX+2Jo{r;#MrT5T_ZWxy4TkqmX$zV?u)ZO;`<_7#~)7zu;Kg#JrE`b
z^*zw-uOG`E#9j*9X=X|Z1YX!~izqH>?S0xFYhtW7*8B59E->Ld;N0e4p4ePg+!kwK
zY(VNWR{p+Rl~aWHdj1IyG1%x9@4?d^i(I1Hf>cYf*G0YW?_4bDuzr8*8c|o<KD)yH
zdiBB}_>us@F1$dBvtRE9Q(pJ&AlJ{Q-}wVwwTF!)F2x;9BipUeeJ!|0Y)%I?Gawxr
z#7`LUR?yI1WslcXUlt}VAy;b7x71$>@34zY$Y+&3K6!prLkJlcFF!UgPCG15nYxYD
z9d{-SuP}Ngrnh+u$l((ZvhP(tCc)pna<q1f54B*f7q#{HldW;alOe`tjt{)>PG=tu
zPrxiAAjN);@s-Y%udj9YI51C{klUr5c>`ON0}AiQJv;%}Rm@yzo$-T8As;236~~V2
z-1(2sSWpnSIU6g#O#PJ-C#hf!5w%8&oZ)KIz<x_W92ouRltTW_@*zNO7*SK`XIlww
z7&H-Bt?t^Ob#|e-pg#EUeb{iPq4(B}gIuVVu$0m><;mG)7TY5;5AAsx89I*l<M%SM
zBh$?CAfdj#=;Ct$kp+Ph@dLsIu>Pn^&p#YhJL^aoUlH68?sE!!&Bx`8>e*tAG+;(O
zRTQJ=KV2;X?RK*AJV9WwQD05M?U0351r|dGMv9)#P5lW0>lsU9L)zt@plXRm>DPBS
zurM<OL~M8zFM1#5A9QtU1d7*^SEY!rqAVlY+hQD&OJK6!6uy^0vpYiT1i-)>9oj5V
zstDG8(KK2ddiDvI0$Xx(dV913X7k6muQ)SGbb+=@+C~^H#n5bl`5=iG`zucdkyCQ}
zG}&4`&W`=t{{B9!4%e9yq})C>Cv^Wx5fqACDT>1&{WEZH!soYI`PPidz6nQl!rGtT
zFSnE!TX*<3p3~+=@VXK}Vb5hNRte7&2WWjMr|&%#K73GrYblqZd-F}RKZYm5LIXK`
zMiXy~-0(l*&!JYu|7r~WiiR_986cUc-KTpL{=xJ^(!@=C$-l4v*FKTenTaj4ZHGr2
zh{#C`6QN=Rh!sc)%i|vu^_EX$8AZr{8!H)+d!^(cK7q#J=C>RI1`QKIQp?!dcMuRd
z**`@<^H91cbj2QcHC-6Ek`fXiS#XO(Q0*hShV+e#85@-8<6k;g$J;|>wf}b~fxG}j
z^UiEE*D&rA(5#0!gpOPAj-$5xbqaeXyp8lW%LZHOZD83XG)Jo6VrWcK%%6J6->pM_
zfPqoxSP8YRw)C0=4y#q?ktq^QpHV&Ol%!2u&lam~Oxha<d+_&DNSo_6Z;N3-MSA$m
z={t(XQ35+kqvup@QEi`!zxQ;wDoUZGre>6OlIuGe!@$4-1b&B<$NbgqL%opBwsmq`
z_W>HQz-GRlkOq4!k&5DKe%f|l{?QYy4P<p(;UiOlg)&XVmWJ+een{RUQ<S}6wO&tY
z!@z>|L7+)Ef)RFa!R#}vm;x$vMB$DntY%1Z(OcrPc~m2Y)%b{sq0OTBF07CFfagQu
zV>&&AfpE%uT}$5r9Zp;pLTz6f8XwU|uVw$*sWfbALQ8AjSsYJPh4_@u#Kg2&n;$B{
zT3g!6)Iy(*1cY9fe_#`U&h6Xn)yjmkShV`35KM~`h1Eb%9nPSR-~6+v7*qV<Sgf1+
zSr_n#($B~~G$U1PwVeA8Pi5ki5ZM$I!cM*Zw4J^VR!-w*y+T6$$*I|edNQW~tpVk3
zAtQ=vYRv|_<d3UPV{w<a@falsZ;7W}@5Ag|7Z5Bvj`9<cmB(y&khXqh^@p=x`vRN%
z1*0%dUdLT-t>W;4TerDwDz%6nrjF(7k0!u42C-ECVPEWOH~nuAH5*4OxegpYkM0Cv
z#q7ep?3FfzMdo`@n`yG@c*o4Ob7xh=x$vIBaW9|U{;TMuj$00j<r9CJr^XWF5(z5t
z(zcs!D}uySdD=Z_Wx;c`1s50XjB=x$c>h(>23OOAFV9vorX8je`rKcV9EBn74=S5t
z9CDP)+lo4F!GVVpHgMLLsCMptIISwq1_|FFO&u9x@9xpNw#x4?f_gXy!vIx6>=5NK
zi-+^jhw+yEP^IR2OC2tM6`q4`Ya2mVygMmZFWcH_A%jmd^%q@GqJa?X)XaXjNNw~<
z&aKy9P?+f2wJ`oqY&4$vBC2yC<Ln;?gwjIo$y_?Fd7n8BO1<ntiLn<^h-di{`u+i)
zY_00t4wKn>Vx}dJ{^34GSRFOt@t)u*<WcT_pH*?FYjvQa`87BmZkh|?Pnn&YjdCqG
z%<Ep6zKz{SHFY^V`pv}i^Xe@hzf)^)zfDjaZ?pXt{?i2l!B_^S1>dez-GFTpDd}C3
zY%IZFvBxnv2WO{x7COBf+pQvQ#BX-cupQhhypa4emRgFwY<EMXRq`5689u#D!LKn3
z19IGti+rLJV>G@Z<>H{BjRQySgO?$yv27i<>Q^*tx2@kAR>z7qr0~7nNDoc7LS){K
z%Sslado6;QgVdoI3*Ut&8+{M4rF18uI)AQf`uoTDW>o0G#EkGc?S$_Vy1w_0cyhLG
zfGl|$ih9&prQbyNF|eH^SId<oVs}fIm^BcptDR6%aOzCYAY$7=7X4Vw&fgF;o@;m7
zv-V#?!hX?LW<Sem;XD9eoS60fQEb*7vV?`&>DCLhl_P|%G*GD>XCsd`5!}SWJl_`k
zvwQjly5ENsP^6zX40A6oYoPQxX&T0>$$#uwufL9`s%ZLtTvfk1Jw>x4=GZ9`YYDMU
z>uqZAA7FnJgjA&(qK-77%#zq$G&=&^xC7y|jrUme7)`jUYLzQ4+?<dZitqLXRR*Yt
zn7(kz&H4tpht6bn5Us=7vB)^YoUyaE^gdjumhY%QxqEXRg%nDYTavo)w@(XCx&mN`
zuj1`4AI|>HNoi>TD29OPd8p?YW5Dy3L#Y<`e)Agl-gF-t%F4+t?344ojcnfD<!q?;
zjV;h-SEi!I#hdid?Vmm(1@;TS_MU!YTxOy7hS#7(j+qC;%!`emkH-@pO^}@H0K)N}
zR7fsPx3{62aUVU&*oSdlP2zSE;&%6~+)EQ`x~;X*AtC?Hjx6*c_PkUBE=dvh@qUm?
z4{?oPOL|;rw~Ku?=XtJ^_kB`BF|);Us{b@~hu^D{-w^1><KOqP@$0v($IF^jr|0*b
z+wr-|5fq%0R}}x8vS)^|rCWa?gRLtByC<NJD8nwhZ};)!EJaH_7pm`^HE2!bNcJ(c
z`V!<Zlsj#hHBzDR@$^g7sXg_1B}LWVoQ$M>r~9=yb4p0#{h$XJPryOQjO6Ht<cHX^
z&R2~@;aze+d^g^8yUNn=*a+g@8U7ivRSmk|yB_X8?V0Ysy%lZo<&N8xKQ(+VzeYze
zG<jZ4)tZ-OFnmRi@`?cdG&E6Wu6sNAN9XhEN<Wk`{6=njt+)7PDy_Xy7yAgWs>Nb{
zBj<eVA=+(?9p8TXs8e9?$StET|0f}>N87j$@@tEm$Sb|eN8I8W;!KT+SJHDp9nk8K
zmLqW-K9_dZ$!OfzmZvm@LO1s3xN;Ms4c=nP_oiqYyrmT7COMn*#T4nL37hn#6z!(0
zWhWh7g>K*)uvJLp;muuu)ZFYKaof<Hy|$g?!VtJ!T9<CIa3MFssv`OeIrxaBny6X=
zo=9Srtdgi229YS}2z3crb1xKG*+uGSSjCQL*jL{Drv3$*d{Jzo;?D!4{QkTB)Q=_n
zR@b`753>-Qp7V~Vq7$pK0G%ktu|{F(Kw=w(!lEw-ZOgwCuuapXjagdy>HPEFa&EGr
zCv2Z1ZYY4TV<h(2vu=98*d#tBJH<BiGcqn!yZm*jwjB*SEg;Mo5v}{@rfS9|?FYHG
z2q*hLt^}HG2~Lpz*f#<nlK7PEiq~D}xvHEnfD&U!Nqo&f<fJv#>RY9os`bvX$)rpg
zE)_e=@qgXqIN8fTyXgQGk}_$zl<jQBKkZd6gxlV`ZgUQMu##Hdha>9(F5OD;5Jv2V
zGwK44Ip?FHIa=z>8Ma&Hzx@CQ*jD2qEHhRQE)bj@KkAc~q5g&^D{CbCFNykl?2VJ2
zMh6-Nb6vI8`Kzv$TDW+~KTO<Ymd>MaJ21!_-Y!s?3>PctANEC}Vp|wM@sGJk!Ogb*
zz8oMT2pYdChyofGo|v{3S~A2z4elTIm9Q!Z16mRu8FRg_K!l%e;L|+YH&C)-`=3)N
zpj*JoP~+jjKUpMHq572=ApO(41+@${0Uqs>MG6=G75QJ@yJ(}x<K12fo2n`b6QtTv
zxvVmayYNt>I+d<Tm4kUyqdGPQDV2i^^1qw5tJ=)*QT<VkzD(eMMX6<zA=dDV=VzFr
z@zfHMzF`?`*au|D;pD&=07+r!w64jqDm^0LH9F;>={Loo=?xS=r7-lc3_uu~{whwb
zc9-(gi0#t|<C6qF3G$ODun?1j65ur?sFVSbsbxlknWaX9r=ODGQxbei1T_{7cq%$A
zyoUejmwr>~vyHqUEM^se8f{vckr@Z|r+=?c`X?BPPlEXL|LM9@4BEM9`!k}wbyYwl
zm(nMx03vZd{YU+GP+1^FH)1Cam{9`TLQLjmDO!WZ1eH!xiXx8{37Kmu0$N~#{-pyx
zjQ*!n8+?~RS+!cL87%w!Ao*YeztOx3eT}@&!|KoP&xzE&EB{}g<^|aXSGzeU{Hrsg
zTjn^5Tv7!Tf7k3xfNw@>U;Re)uZ~OkUtQq8X3%uYoJZE~8D&OudH-C(%+Dqz{x!oX
zGg|v>=t}Hg9n62}O8+&>|F@wvfqz5$ylDTNTKI1~>F^pb@BTh}e#w_!uZ%Y-8dcl=
zFXeZqZ%Yb*>bNIeixUP$*n~Vazp3AjspkEOQ)Alj7k_Ph{<d+;cIsz@P-h1=xU3av
z`~3CflC9UzD5B1`ZJ1vz()Rny!zo*;pCPYE*YMDBy7aNy^}!K$LKHdzy4)ZUoG@dt
zcmII?pD9!Xj9EPtpXpQOpY)$GA^tms>N8*HGhN8$|0df0hjbzNxbL$4!l)sa&sZp3
zjpB(qGr^HcG60d<BF0Y)MZ2Mk6F2HJ1^m+*_c@6xZu{;>)<h(9M3$YCqe%q>iT<7Q
zdrJ@JuqLVrdZ!BY*pNd-l^{pP3|}eMX6*51)Y?K}kgyrPcojWYq+T9+6aA<t$m+~9
z#DKuSWm{Ybdb4e)o4c<r4|(28EHeP*$CtaRQgmF{!Pl{jK3b6<V!8X-#fhbTfh{Ux
zt>GT7HtLR+qlpZ;^2N**$A;Lg53?E>q?<NBSqWc>LmCAbRYG1Fer8YspG4s}&3eYC
ziYmRS7wTKkrho7M<u*J0eYL!!UC>pPW?P>7d%w3>tYDI7)rPU6X7lvcCY|}<)`wlY
z$Jha@#_hX<$sXneif!RX{M*0K?Eia$+<z|V@ZUGV*xB~~N0MB?%?L<>5De^#3K$sk
zf6So%AI{w!7(KW-4LLdfAMlU=aHA*nyq(u1et%@XVQPtQN^y$sh@&<Zd^K2GY1OFH
zPjSwqA6JIy6&4Xm(2H*@vT@3NFZPciZhQ-G&|Rr;R;i-m#=X1i@Md}2R|M?1Z4hHm
z?#?h7z|yZxh2=t_q*R<X^Yko3IpQiH@3M>q;oxw3wAV)^Chl!(cf8G}WNw4poa=0s
z_O?Mj#QY@$ivZ`2=JTJrF=4r_>9LuAnHHPjo1?~>0TS|Thc!V0?X7c2>nkL%0DtBd
zKv5eq_PBhlzAo3~!Dkg}SN4{`F1mAT434NgJ%j3l80{oZk2xDA7I!XLE=enFK>ac<
z*K+Gl#ZRupek;-g-cS6@*~COiC)=*|X1n@wZTr>YWxI@`jxMB$p$)gXmC8kT6qKz_
zPj-WL=*p$r>v{p9eQ)HBrf6o))LSxazdP7B=ef5oTTX%wxX9COP<}gd4&&j{K?(45
zo4rA&X`K1=)X~%UAazmN*j5PT1c*e{fv3SxQ8yAM(fBY#KG`>FVLQd>n7;?1@2q32
zW0KKv=tPvZ2y<AaZIi_<ug$bpuAK#&34AT&1@&ufQ+YYhHr_5c@d(i$jNec*?9fe5
z)h8u0<oq&LGDvmqph7~fzsqagoUztelka_OHQW3+FiwfJY`!6PcyZ|{J2RO}GWW|=
zv%&j%{e9LZ$iDlT$>SVXrm{}6dHrt?Q8#BQr^nUVnxjL#OM@Ptd|A-&_d1tT`yNu`
zm1iGJj!Z?O)JZQ$Uw1kWgOu-V3PX+#b~w%7IP}{p8NRq46JyHt=~9@qW<uoNUM<Fa
z$w{9ajG&l<ndL4@0K~SrByo<Pdxf3#M)cSqYBS-5sGhqK`ZU=_RF4-WX6Vj)tyNEW
zopTTD7w-MaA(7u`kXoc(6L+Xz(U|-@i5>y~_suljsY><t`bHcV++&!A#5ySt{qqOt
z^{}c3j(Dzp)O6#Av_*znm*X4zluUMrffnvcldcv!wK)Pagi@=XZH6p6tf2(%d9g!h
z)9p}qv(I5jS<srfU=I;@vb%YY+Z^}bJP5@U0(_vQ&ABJ!;%xaMf#}QM-}?s#UdQu+
zjZdy~cFlIhr@a-uVH`$ZiD47BtZ#!YgLs<v7cxS;lPG>_cf8u`8-&6>FLw}2J_X_K
zG6Y?M*2WL8*a^ZjO}jagGtEWiddwylHgua?;iFZ5%r)9+kR3Ip+i!Rs8|>B+)Vehv
zKFO3{bQ>}mIWmvPw|~$-rrWHf(;UyRvDBn0Xm$Wjql!1VMYYqOiya$y7yQnmGqkRb
zG8ue#e$DXWc-7Y*P}e(1!q^-rqK<@OeO4T+$?Q|!Hn(TWPV|%)@o#s^a=+!F|C$Sa
zcy<@wSlD#>?JdL^n_zAO@8g_VOYNtovub<I2BEH`rgL|#OH*@INZ}vntEY#*(i3e(
zdHQyUZ8fe}zvW*ho%m|DcV)w|AP&-rN~!`IS8XFQ4Pqb;-}9zibd^@xwK-xD_AmX`
zc^5XG%hIRa(<tp~8DlVbHXMw@E$lABwXN1fXLdXP$~xN}(b~oSdRn~>F52WHZW;KU
zG*-9s;#Ql(ymbYkExZpy2)V(yx8u-~!?$C*wjEC5X5V_+nD(aQUsM*{<+uI;6;`s>
z|Gu3Y7|jpAzvdm@-}LfU;XROPo=_yY)0NksznzU|$i!rreh*|$Rgkc+zhij<ruupD
z&-!+FxB5@Z<NQq?@9(-kPb~>6DXDod^o#qfgNbqpow@|DTWFN*K-<%FK7_nLdgMK`
zw0O+DI5k}9BHUi}01gNv@|Sif1G-hu-7oOsP&Pi2`nYwF{k>u2l)f=tJEXiE58;_e
z-*)>Z>LQE3ZXdTWOYrqTmGE_J`MbA^`m+xF$&tOlzuj{g-f(-}9~5<;o3({q|9WbR
zMtJ$1YJX=)lJ7^PQgHTl+_-t&<MGklY^ufUUiRD|as*WW##0;;iSIUOCp9%y(wlEe
zw~ef270(FsCO7<J;Ej4mi1s7>OgQM?O_}(-6U%L*+|9T(Hsc5B05Ph^-HOHM>oIgM
zrfU^3Z148DJ`IH>ro*kPJ~~dJr%=e$zrd6`G#w>BI@jHuTg!F{Cs^0kaiM@dPQo#c
zN+9Fm$dsE<kI9hFr3-&nBn)zR1aNGJdFcMvL2M}uvIOShZ{Rr8l_$4Dj`6m{+3c`y
zJ9Cm%xjE*=Y{)xc8v_TVPpX3#Nr`FDi}BHGo^&haf4M+2W@iwYuZ+HxrAR(MCOs?9
zOGv_}$ZMEmf3Dw?7EVK*gZhU7oJ$%~2SKNIq29HBtO5=ES!;Iq#QJET&86DIzQqxy
zd(9_>&*3n3QS33vsHIK*PID48QZ_Zdae(#nH^uGK(dnP1z8@vKQ{5@!3;Ot1eC8L$
z1g?q>3=iy|JL#S%Fj|Y?tWF;j9^MmVuR+k{^>?4uPPrXjTnhLEE<BD3WrV-*C_GAG
z$8SwfHFS{f6P6>$>4w{1?E$S>1c$_nwl<PG_?7Xeq*x;t!tX<uu)3X8n}OpGSaI;;
zB>EaN8;3QRKEOi&BfC4vIA|~A^+{KR1m=RIO~0NS2gh<ix%ER_*k<+11<ZgGwI==p
zw(KGfW4g+sve;PbVUt~tMN)A&!Td2fQh7#;6?9GiBdh6%!4H;XX8I4adB=!CPioCd
zazLy2M#O{tVUN7&wRbqfuTNYj0jDT|^hEbjIfIRD-D|Y&cfPMhm%o#|e*bot&RE}G
zC#q7*aCiSJq%t5U|Hf37PW{a*b^e&1hV7WV?McAh_E&URtuIcg-#f~4?g#UUqM@(w
zvwz+o60g5oKZF~M{CUdVip$3)id}-;h<_h(cq57yr0>1IEyCRdiWY?LJvg67R0LP_
zPQT6D5BcDc*8t-g&5s=I&Y})`3vT^4Tq%zJ#L*Ycwdc3<cyqe3)O@>$A_RvE)n(te
zS(#Q{)k&T=;nMYLy0L2eskc|QM1LNa4|6z}WcOD%T^AEFa$VVlR{HVj7B!O-C}vHc
zUHXypr{B*4(u*Vsqoq8XnWes$Y)$?vWbNs1h=x7m@+#R3=cU-+91Ayj##C|*g1_7i
zns|FUY>QnrBnDJ;|3T+s-_L}<4zyWyX=@;0xViH@oS9yaK%;Ha*j=pVnpfF<(_#A=
zeShlE6og~rPN^Pr&O|vT*DhP<MPrzc9x~SsQn7fm5_->oYpEz6KZmW_KpZ|juqcZj
zg4JV;7~{Qg3&BA5)8t`9u-<c{T-GmL-=40PLafR6nGa;Zto&*tqa~u1%-1u66ql$B
zd!th8up3ZDB*osIa^El84i-NjBwq!2KM|<CFZ{>6<xVcZhfYf@Zp6V|oD2Ki0TCjc
z9iT!!F6Q*3EEMOt6fzlY0+mQxF2Fo4-_JuTkwr=%W!y`&ojU8jUzH_5nD9%AiHXi-
zw6NBFKL!gWq&GCXSWr;{UX@9)CD#)%DYgw8#wyj_K>J0QCI=i?)?OTk<M%ikhaW2_
zHCEz?=y6ya;W?@phN5dIxqsimnuZw!sHt7cj*Z!iph&^NoWMB)g{$I|f4w_cLW6NY
zYw3?s<VmKR?EfMjHX=_Wdkz(ACVQBd8O#HMHOSPaNh~H?`thpsilV^K#2E2l%V&)q
zMU0Bg8btH5j6$&&9ofl|V0`mdK!6J1WtG6}Z_RUTQ<f3#1E*mF6f3z_b_NtCL;U#d
zG@s7OQprUYZEHXaNV<S6rHK1p-gtwLok9nF&@{)c3V?^e7U5J1^YehZC1;U`4)(Pe
zn1qT`if$C64oHXRlqMzgB5&kYeu=G6B_qJ4fw@KCW;9!+bR;0HhR#I2Wt8U+wpYoD
zIHm`CLNs!~VNW9yAXgtK6oU{({{n-<{>@3Tl28)KA5OItnq98W!8!jvdl4pHA_&Og
z{p;R@cu=Yo=2Vg{Z4`KcD^q2j8x#gLCRMA=h!4AEn*5D&P8qgbg$0tbH{ZBNhJvv>
zBU~y#zN<;tnjL6ywVjT_&})Q;B@I_ct>RO&<D18=3ZO&0c_8}9I=c#<*U_8TtjeF#
zibW4CF##6v6BedM5K=ZGUoCz3mj@zC6;#D>4(@oEIsH_Ui;!@d2O<C?6pB$DBme^m
z*9!m-ejUGNp~+O)Mg^fNPD5w*-hOvP6-mmaMNOqp9_l+K(?EWZ!?Zxe7R_S`0+dtm
z!}_Tod&4Zyn3@==PXDEY6d#i`(S|Z|?=^BNMxE8Lc0+dXD2{XIQN#0ux>I+AnFkLr
zF$zzSraK+Q+M?K(f<q@3o%vx$UP&`GA1(-{8b?WP`fEigB>1-m6si}ZMoeu|f5R~*
zL;}Vp1r8!|^c(|j<X?9MT`F=1Bc(8!o7F$&uoYmvf<|Z&qvn0<WeOXX3IQf`xLU|H
z`m_D!)@5*QU=1oP&4}EJ$Pr^2e|+Iw*#W<`&fqWX%TwSrfH}UsCWUIrEK4*ds3y3k
zLGnHiVbJq*xq;sym(z`k9`RUiL}rmcz~VjK!R@u3d4*4v;iFwp14N0i!wC|;e>cQp
zO)GpjQF%?KIOs=GOqQsJeVhZ2`YiO9Yk1<I6iM~HE+9Ex=c~15DZ@8W6{r+NsNhfN
znQwB%eJp+4VD!?I=)GP@Va{egs_DoND2U*AXxN(o8eQmDFj9#jDOHt^aJ3RUL3znV
zWClfXjqt&Qn}n-zFk?oo&!4(0%|hJd8xz)i6dzT(Wz0zM7D&mm$}-`RdrAxzg$U&u
zQa+_X^fD%4HTaa?#vQqBYD|kfF|dgv84t`?#Boa!t6ySDh!cJK^Yu9*Wm>T(@nDho
zMx_?<L_y>g;nFOBPhnXsQJfS@mHtFUh~a|yfr-io)E9ih1v*k;mpLDYdW6~F=8MV{
z+F*r1_D(FJjmovAle4P%!AL*`L_^`i8=GpSR4^5>(^NYrp#GS_Gvz#MPwu7&71=H`
zDw?L*2GN<x=OL3`FJtDgCf$D>%MfN2&VWmym}IMuj6la&MlkZWqi7RRj~%8nF}ebS
zo9pFf4)qR()p&_rg$Cn?f_ZQZf~QmxWD8UM6+{3)t*skFH7`yAqlXYSA3%@`$&|`L
zrz}qEz~x}WiI&IN1jjDM{qh~mh}S5dk{n!2lSYF49&%d>oC}E+7wue(5z7#~H$DIm
z8eg8mfKYVl0uCll%yO|WtP#FScSFVmDd(Hk+`SMWm2=d3a+^H>$9W%t{xitQYa0iQ
zj=|{4J)8oMKUTrt2&@zX1JLW!2-iwc_?#0tU!lZO=shC9RvLaWy`S$ZO}RYJ*MwKB
z6#eTFywrybQ9V|5_Ao++ZhAnyayXvfn0Wq<u6jzulWOVLAH*O-=)iO)DxYyExy+~h
zZ`Xu5Wh*~&qYsFK9ipf8FtU$<eay9SLJHzUz3WPcz41*63B4?qC$|SGT#TqDqyR0J
zR<^IEBm3|h4uQA=^Z|eHMSPL9<z2r;uZ9Tge1Ul#qSy|V)mJ8WAl({;YLK#@ncP+p
zV?}3zgULpKxeV%!C;wfsQ+pq6#)!+`bzjXlcTeY3DmDKFH;FM)e9vT1N{c45ti~c9
zH;-aOyUocf4GOFr8PO~B35jvaHFN{#Te2p)VNYEVy$N^5LB4*k1BxbQn%uLy7(Ccr
zZ@`}eNrdnY^Y&NONIi2^z;^EpgK((&v7H53maIT1C&D5^g?#c<9>N!}@txwYHyz#V
zWw+@vP?1_lh*sEyP9rO|PO@-QXYc}?XpEt4sgdkjq+lvUMpD1>khSi_c)C#6L2ybw
zheLqUD7@a*<E$|VYaj(#)-o4kV9|(033;vDV<0>0*KpGl9Hl$AB5ugnY2QYup&c~q
zFyWHFBrXtOt$YC*98eMzvwY!L6m`O}(M3iyIWzrz`Lbp{;#)P1LCJ!T+ni}Py;%!n
z^5amV8-%Zj<w{wjKI~sGoOQo2HDMn}u0}m$Lp)OWFjL+ctkLZSOM&&J8`&Hy$!b+O
zm95W(Nx=hJTLOwPBgHr7f{()rs?Xz}3_Q<u4<%+}T~LiQ;9v&7oAid(tPOQX#N`OG
za2rO84fm+X0&@fxPrdb|Zj1sQ`irXf(M;lPJP;`{_|ZA#K0DW9D%)qLnaLRK1n6wE
zWsGQ+UIvi$*ZT#N&e?KMn21S62<=L2Jt8Md<Y(;uF2_WS6HXF&l63_?q5O65<x(%N
zJvXw~sVL!d6K-H|h0kuhw|&~Nn=dWD#61|Iyaz5$`5zs7((gh_Q`A9N-E^?xWo)(s
z)?l0@Ta6PhPgQSxP{=IzxR056d7VTB>*!g^mrm5=hF4f3)vh!Y!7u>=V8MSWbPwJ!
zzVS^UfKjEsT1J|H!&qT%A=E^>#u?B4IWjN*hW>qa>8)33ul~YBQVLo|>}&O<FYA{;
zz*gNGCM%o+*hp{SLK}Y&LHJmPhao0IE?lS|7TX$nSt>b<9a4Zk(bs)<_H8(fY+RF%
zZ#aRO-Plp$)J|9e+<6u``EpX*EC@?gx9&Xx+EhV+?__0xsbel5L?;mF7y#7xpCt3q
z&FUPA##v=Xosgj#7>%OZ7{9o#y^DJDkfm~#)sKB`p)BNVphV5bN7*faGFx3{4wSG0
zpK}CUnX-YTCv5O;h@o^pN_Sne)o@y{(!fBn5V0|+qPQf_UPbU;cko~fF()L1tmF1C
zX!sX}=!h3Vy29ZC?b=CE<qgM&BAk+5P%=$wHrUq&<!FeL_E3&4y%uygfKIwC4Tzz4
zu3F5Yf?y<0KPqyZ&w+c!D2L@X*($gp-jxv-9k!JBg<0a*`(REbX+n?DJ6QZa)mjLW
zKvwJrf}wJuUm~OWOROIi*lGHf_<_0uWl1!O6TNuLGsT1e#yyHF6O2F;xsp+qKyO<g
z68&mAf~AsJ(4e0#N&VQ}1!L#5nhQLxlcMQoA?XnO*b1;t#`Q}$3PXTba^&?m@yLt_
zpfzX+=SroWBWw>m?Tf~fA4RJ9nB&!EeT_vRR(Hh|ZGei=85`tP6kV<G{+*GaN!$e}
zPv$%LZ}?DCit9DU^o*_pCGOvX=r&LZV4ke6^k&3Tgh~`xL0IXfs98S6p%kf*+r9?$
z=m7+wxY5-Dy_Qgam1+mLCfY*P`^mh(s*zv&YBgbtOlTltm=R;PvJcHsyJtqR*0CFx
zdrE_@M$m9WI;K*{YdXq|j&Mm0L+GYmUeR5lcwN(n-!du59;cH%N$>j=CdF7bt6)|f
z?AuR6;So27xvuGIiaL?X2|2AHPFrFsxBSG4<9Gq(MSULN)*p0VdU%6PA-koQd~ysU
z6gd;TF$J;8Tn!O#BnbxLLir&=NG|72-_>)YuQ-?InZZl}1*J-%`vd`VhHh;XE2mK6
zt5MeoFa=CU;G&(PFq1V|Wu-BG*kC8xMwW*nB5#5Ln{OiF(qhqXXb^k)-*iIkB8+TR
zpW$)svXY$Kt5YJYh9<%&jl!i+X?iOEaG+m6kzSV(U4WxJBf(~~y$aa)4Z}r?K%6A=
zs$_lN0|NuV;abcrllDTm3?)R80Rro!|Lkzyx)pVxf{LIz3s~+AtPcz;Szm0SrF^Nj
zAVr_{vbEBR{dUj<n-!Hl;oMZAXjo)gm=O|C$Lswk|DXqktWH1aYua>y_dk5ChxFSK
zpA@_%IKk*)w|zs#@p@>|s8cZ&xUM;Jpl(JTOglN+kr!fu4qnag9Z+}?3u8Ot{AvoF
z>1h`2xu<UR)eA)W2c6-b8K2BQ%GI5OJfc%aB0sE&Sv-1*LfK6?>YdNrQU@?HYgXxc
zx=`}4eh54MXIg5Khd>2CJwh*@oef6*%D%5yCh*Vf(4$F!@$T|kz^pdiJU-ege9F@S
zwOsj(y$gU?3FE2p7r|?I-W4(L`JMeGsfg~@p2+Xv?|N2W2PW#Lpy_?=!6S{;?u5S$
zQmQj)9UJDS-&8Qme2E|Q;F=&YuKlx)QN9A;IMAcRWdlzlU%yeI3w<LAkj49WA??wM
zVs5Ou*}N%j;53rzH(pTn(^S`1rE$4Afa{~!g}Xz<q;2_yL-pj__xYq53EKtI-evxk
zf_V2v>Yd^L&PA{gzi|Gd^%eK|m%zc$R;la=+lHA$I?}Wi)LvDxRx935=uidlr!Ez4
zLk`^dd9ALkq^MoI9_ZdRm^RB}HCh&OY_KeHSe7HS9ux(x6D~cY&NddL<q7*&-G_>?
z3{-ukl&2H2`_u2%8t4>OZw5Hc%g-<G;p;uxefF{3l-sw-)46`H`#Yl*7mEY-Ng|G(
zd(%Jf<lMhLw7W!}8cNM`NuY`-=Z$6#c;EOj{H(;mKo|PTOE~p9>(S_sgYnE61nbn8
zw54}fV7y%9AB-A{$Qrq|{=@gS0O2E4Z{M9ZL5%cIu+W5;%#2F-`&t>HWqd+EdVJoY
zA4ffBW4MPTZfE5HjLN&<k-?J0c8o_M-ex_u?~aIIj$h<%2W(tUm&e=P=t}=E^>j`S
zKNWu~OO&<Uno-Ti%X0y&Vy+OPT}yT3)5FtoVvjlP$L_G@)2Pwa_HiOkT(>vcI#VhF
zZ?<6m%0-XI)qTOC1*oH3yXN890`m$1&IQI{Y0|w>bhzVan~$n64olE2k!UBp>s1be
zaHp_~Fyc|ta>y>r7ALr&;lRoD!H4~W8FZaskMp?|#(nIE?R0x`j6x5GxN~i%9!CXm
zh>7zARaK~5h(QtdH*cdgD1hQl_|$)7B?pwok32lElT(=;Cph}2?qU~kI2|LTm$HSc
z+i77#ad`Rad<nATBkC`iGY5h3XP?iu_$_X65WZ=(@?;FA_xwfUj}Vf%YNr-KK6>*b
z7Zf_VbW+28^<&$8LykpEugFyEyyOCVDG+6A&jjZ6P*Fc2JLr{lEE0+F_IgrwQynHF
z&(8t1=D-ygT$fbZ7KKEoq-N(NlrtWp)xs*h4B(`>YjDkWhC^%KE(rz-mKpb2!p23y
z-;@dcqj9w<s%$W+uZKfR{GLoPOGpZ`{j7FF(=H!MMxzCfc$9XJ{UrlpTjT{L{(2QD
zOo?lQ>UR7d#*lLTqO)TK{jHIvDuiI9bCCu8dqs0~U(#zX23kFocr2HE59}4)DN>zh
z0h({k;<pX@i{9D68zjg>x4>N=VQJ@#C29R#kf&>$UoN%7W6j4b8k9A!+s2bILVJJX
z;VjM5!|2v@H*fdHQUkT&mjBJw)9h`_^o=?jH?ixur;pXtx#7fWIf-WPOeaBl^n72o
zT5j?sA#9ebs4Cuz`lBvY+&a<HB_Tv~ABs~VqEG%5o&?9uH2>XCw=0y%p{rhk5|o8r
z$)CJmmMfWUUa_F5@14nfcpaOz(9X`6%@nLW_A2D?j5D^LtmzDSK<ss(3Lnfff#-*(
z<<TaN+vn|v*B=DlvwxOQJ|L0euA+2eod;6Q>zb$+8-XEN-%`@pwHP%qBi2bG<fDs-
zW%;oYG%ESsC~?UtSX3%NXGQQGd%>XKhKr^UOV}U0rPg0zK0CwO5+<zzv9GVj^5>t|
zPwU0qb~p>()tpgYo>XD{?{}JBFFsEXN{3ocss4H?k{_<@bSlS$M>YCW-+MY51^M5N
zFM*FGLY?hh{xAK1d~FW^b}k-v%$G=-RZ%QHxKEq4S<FkE+qtyuTyKW|b3yvF&renZ
z9}Emz@e|ng|MPOCt*yuZ%Ub0^)`t^;q|@*ROs<J&g-0IL@2EkOy4qOx6h>+dB3t^D
zOD0<FlGWU=3Sih_&|<SphgCNap7j$xUKY*L(kZ@&h3J~r)e+h0=f|Lj>6N1bfB30~
z^9KgQ%IWg^QzKQ|R9F(|+;5qg=esx7IAX@!0ug<V=sw=+(1!Nq_YD>}fH~XSrSfIy
zxQC7k^R*n9xRmj2f{r|-?y^<u*LFHZ6hSsVeTGQu4Gpte!_)=N<udt{8yehI5|oaJ
zu;G&LSC^B5T4r2;_7&*YX12An&!jyi<`i|MF52=*Caucgd~Ms5C>wn>z`cq4;N}L?
z2C;ZEa)wW8`e=H3cN;4o-l~FWO%!#mFKD4*dc)qfVJl;DOuS=_>E_*THVwE&x|VLH
z*|Aal{&aTs^77Ki3TwFrv})+$PyA-Fp{-EkRsjTu75cyev9G;(b}XNlyT)%p#VrEm
zuNt*CO=~ii0QL=&=4(DGTUpqeD^BWojExJILG5jnrVafPF0LncKP+r2bi*bVC4_9<
zw6&#ORBC(h)J%2hIU39tU{;#pnOau7Eaua(#2XlKPREUwI%O+LdNSZ9B$hOz&Yk8s
z##5i`X$`vcsy3kz3f`>MtK8ECf}q#lEpi3gpWfa&j9uPXo@l}=Fa9PNGqF2Z8Q<8y
zmN(4_3GyI=k{BP=XXd|K56oVqc4*A7DuAx6YA2c{@H-d`H7H(Rb|V=x-ht{yP;RW8
z%XHNf>=b}J9VQJ4m5#BCT0@KRLEvh*rS8H)Guu@oLU71zfWO(kft4X{=A)}UTSq#h
zxkXvFi@U(h;~GKc>rEYa(+Z7cg|*q?{-RnvuzuBm3BDxF%p9x{hzWC}82ylP0B61s
zk!}3#=h;o$O5ap-vAMRVBR>C^=+a0{x4)-3_E)YOxCiyk+ASoodvkgE*9zKJZY+H)
z5YL;P5M<CDwu=VZrCM_5)elwab-H>wfq)(L2j6DKbI^HyrNRU<%-_?d9cOK`8U_a4
zhFs+cAaM3@+H@^3JNczZV7#A{x2bxZc<2SPq2H|eOTGG!oYW|Mo{ON5m+3?sUA-oa
zWTNTa!kh<LAS%pYmGV?`ok2w-!THjGegBSy;s-7!*Wh0n-yd9)_M4DO4IV98n%GQL
zJ99P}1LhA?_$xzsq3H!ij*(T|c=(GqV|0kdX6KXE4L{v9GBtIh1Uvq=H?4b!6y&O#
z$Dk2wz$ivd-VBZX;`&na!1%qZ3h{1f5UC?2Y6(GZX<|iV{G^H1sv*#_ZIhF}(W%Yj
zbN;vcv@B!A(n<}3om~_xu3Q*Ao}Y#|Ap)46^I&0}-DObdb1(|qdEfhv9%d}GH=0Nt
zY-x8OC&D+Z6kH}(s|D)6)qXKSm7lzIv?iWBzvZYW*btIXbQ`Ab@wC0VDqqEeOZsl+
zsmFDi$lUYBMN!qPgXh*_k}`#5M}JyA0j{NEF@z{nhrNe;2DLL4ni!%UsJuMqAtuL4
z#}PXlK33Umf8;ZId`!EJ>xO8BqXi;}AdkUohMAL?v1i5Bvw#tAgOX|}*~t&C0*nB?
zl$oRL+{ZJKA)R8WskHPjT2ibCpeIAkfwqqp#=$fvl~`x%dKO$1d*etPlXh2kuiI#w
zTa}wO^tjGU`<|~RP`Bo5wznBElfmVjh>Q%j4~FTUDQ3=WKZtAS`YEf8z2~}+Z3MoI
znZIZ1Us-SH!D>$4TU{OdQRkQ$Rkk$^@8A)yNX-Qt?bqvQ>c;DFm;pJI^C228_OA!W
zr+d8K_GdLaclWQC6y=xw+^%m{QsbDI3_!O_hW@X2nbd~9^af|_{Z?&U2UL=b^cWwh
z=LjjBnM65dP=tz;qu8$tj73mgG84P6`C+d{`I!R9{a|EgOKav<D?YN550&x_b;};+
z97@ps8=1i^5@LkUDbd(X(yrJ)GYjFS*6rLmd^XNfInOR0hLqQ#2pY6im;MiB@6@Dg
zw5;2f?W$22W!tuG+Z<)vwr$(CZQHiZQ*+&|h;!!N=MQ`rU(d+sJzKu*@sHgy_*dV|
z->}AX)z6X2!WU(1+o~H;4R;k2-1jwZVgmlszx&DSzqEGy`2BD*-TiSrbobD6+XH`{
z#SL?v6mj*|bvF<&)!p^i`~I+EMkM6Ln~wL}^)z&0f$_nIMSF66Y42_T_(C6*gb%x0
z9Qk44%*5?=wsS-+)=vE-!{p(%_gK2G!3NjoYs5x0q~`)>O<nZYui)^#b-P_)^L->c
zGk{hwa4{8jm+y?(@W$UU6A-ayhwzDjm9$3V@elj#HX(&%{)Y^HY9Rm@EW(}ca&ytm
zk;~QNd7}b+seWlfp<}Y&(ACBcho`gU)yg~=96mY#7Y^*Xhf{Mj=A#MH?rHjyfx)y1
zzMa(1E9gyDM+xH`{J@v80^`6I&A8WM=nY51+dFZgS-81!+kwPT>=;%>N;Kx@(-A#-
z688X&0jK9j&ZdTw>oU36S^bvLE%Aq|WaIdK%M&i-3{rueC%r4DLf>7Ng!{7j>&?Es
zWg_JyM7f(D@7<`00~e=SCC~5FoY^E2oivjEAdy}_)336?y@#eUsB5xfV(9&-WMIHW
z$br+z)@Vwf?l7q3r~9E(d-J>F(B@&F+--{+7hBt=-m3X;u*iLYA32>=G*QXLNs{??
zYX<39Kv3@3j1+3~c?o9o=VNI`_jZjv=7M>G;?+ux7~7gaT|yWAeW`{=sh_qXC2@nB
z2~vo(p;m&OSpZ?dKQ-1HbkVZ_vP%+7n?;mimyAJtP4(@l94BPi_|+MPJ=lu)O{;$l
zgcE-JMx=axg=_7Gpn(0k0~7{0PV-F}&1qpLSS|JZ@WxvjC@&G?GQ?j4jXtN3YrI&b
zUkjH}?z(QGbS6pki$&_qllSKAT$@zkDO`sTqE<~FZ_mgd^_!!)jotnEsk#WkUy??9
z&P1S$PIr4_duN>63<h1h7t#$)`&4pfb9wb2b%!JOQG9cy`&K`wYLK5+W>RNwT|st8
zKjy8iEv-4u0xc|-(u+z@C%T&)>2^mXNU5<Sm_Ft=njYzA1=q%3+dgbPt~aQd4#_U{
zs@o<vv?pK(ya91U-nTqDJW$yfBJOwU8CTSr_{8qu3_Uf?QA+T`sn0+t)U-Glf)bl1
zKA5(ZwVcW*!)IQ1@ujNI!;%?WEkh4i5gW%BR)@`JWE0^xT%X&3N2mLWYlqK-&?yD9
ziv=!F54}*HPRN@LI!tV&CfOk)J@DNJN_`{2wGs`SEvlL$)-JXNTC`f=t2w*VHDqYq
z=|28vfHpnUn}nFP{RbWX%ns~9QaBf5hP-W;q&rF7?C$}0cVC*{7pAy$KSSV;lqd^v
zCLHg*kfiSShuWl<D9JzAP#;dy$QGyv@R_FNq_RE&hHu(Y+@U`-Szo}pN|vPQSBJo+
znP+1SEi-0S^7hY5=8MFI6-i$A2jHIHGY=Ctc0fP4mK`}C6Ve-jVI9ldbZ6C1&OKRQ
zH5ej3{_q=aye~iHX)jpbtK%PSJ)5IR*Y2D@oJlVgd`|;lJ2PLRmtQBuE86t-lnHTI
zCJnkYH-~g2ZM2dtCX*yX<_A6yZ$~xCIWP^K)EQ1ru9XzIFQhUb(*G>NIBUK}9@qww
zjUQ2U`{y<PrPWs0H)sk#*^HTKQfE}c)L$KCC$Ci@6;|vx;@`{M#6QFTgdp#{T+eTB
z9YyFOP@~?2qw0#?Z}QJV6NGWkXw!e}a)o`|#{<kSMHV}9v)846bgO2PH*uwVm(MGz
zxwqI~C;O_K_P6NekEeIY-9@enFPSgF1-IPR+leG?0!npQG%s;ViW|O872BY_@@{PS
zyqgHVn5uSIS71|NVaZ#-Tb+4D98^a(I?&Pt?`7C=oCgy*D(RP{6_F%UEO@&!VK@nD
zuu){D<5x@}kUqB*=IE^AqLVZgm?UAGw_zL`G9H@0jCUvCXR(`G>c-W!H$p#nb0nbW
z56agWQ(|@m1*K<~6j+lniW(=!5Y-24d2wBrgg7H(7|0e~cjjp$Pk)@z1Jw#LIV(*L
zKX*EC1{(8v`O6^<UX)JO%dMq_aSv(TW#47u+b=p^yJoDjE<5pdH720PW`6!-oxY;9
zM@9X5T+bE@4lA+e9P2J=wui0oexIy1E#+2TdnrVvY4Tdr@&iCcpM_pT2~vr!5?_@C
z{{w>uT28Y`*(;w9!roMqpnqOEdCuBsX{y52<d05fnwk<FemU9hI2vOL#rQk~BYa$%
zD5yC`^c<B?w$F|0G{9u1q{4P7@;no^&fNrV1Rx`z9!*b!kYWM_qQVa2wqJ@NcXG&{
zt^#0^VDJl;QBJbdBrJ9O^h{P57Y$|els)eMLPz}ZJ-U3(sw=SPR3c*sh8v&J({WB6
zitg`5rksMTk@K&l%7Iy%lwW`xud@LeLJo5A&SG!Q+eP0y`43nQN@5XI;xso8(p`%>
zc_krE8|5+RHRao*IZn;<60S@QqlSh_s4K9gZ<wqKOFSsO3rQ8YDwSe$p3gMz+-RU5
zG!!jzexW}x#w8ZZ#eWUOPAal?0x4a(W;8MjF}N&syFv)DDNkgUHu*h0Xi;NdUqQnj
zsJK5d#WKWlj5gF}R@I*{wAmlMKtaZdDuRRAb@3iiFMw=}qDfM}VEG^OS_7l6Hklsh
zL6eF`91tCS0N@H-kZKO0!i0R~q@lU-BpoHT@&+^F2>6-=Ly-0if()1N?O-fl+5HV7
zP%SVV9Mnt7JwtCX0M<Udo5y)6c{cp+f2i_U*n}bY@a92m0%3MpywtG%Wvpp*fB8r!
zcu)ClHbB&-6%6wO0W~t40#Cf*8em62|6%=RS+i1yr0+o%&vp@C8W&I}#aJ&kFqR-9
zHEA8EZ22J%i70`XYj`f{JW(at*rE__a9Rn8%-H`h<^JqY{6`cOX*G#EOO7Bs`+aT&
z(Y;=xseU<>ZDOl5jvzt6kh|3a!K>&}bOhYR)$%flOj}b9rv?v(Lq<`2`%dS7x-6=q
z#D@%%(4t|+yIjOX6q=x3f$ePtBykOtn>$k2f8>jFJmnC{mCph*$W0*V8Hl3O-!Ef;
zf01%uE=GA<0n`m6-M!Xbw2z)xXGgE*ay;DX0~tU99D`WtfiD$N08mXh21^;Ymbs6;
z0gtt7F#<WxrVaR?H!h$Y-BVjRHX=Z(QlP3R>`VKkA`&9uP|tHRs>c4Zx-_VPKszu%
z@iV4gH%7>l@mCXT&P&{IU#Y+$PNQ)ZL|kBVlyL&$=bBKb^Wz1_dgoFm=XL_rn539N
zTE@Vpf?;QAzn=PDvLv*KP@dP~Re45Vzl}b53X5^bwr(T;_{3EApi4eb2?gz7yS-A#
z;wZ*GS+X$z0x(3!Gb5BY7|I161_!EsdZnO_(k(Z8(7MF)SvVACxkW~!5L+d36Ozft
zS6?9R!)!jXm7&2wNB}oJd1N_fl=xWkF(H`?g?7Z7(O`LO^0<0sDDdF68bT5W(y7!z
zxi^f+V82L^aDh~qiuiI#{os8Lr@u&0ld)@|7b>o#!TGnV@<B6XwmwDmB&~+2uI9m}
zFk5aU<LSGp_}Od}#8cy&<i!%wp(%OiMbh@d%F`Bq7}2?a_5VuT8*F0YsO@E~2LWOT
z;PZ&f0s7s?k;@?Znnn}oIgBGPD&p-5!5E3y_pXX39RAB+L=i_Dn3lpOE{<^N?N7v$
z2LayT&yyqoET2fi6aPXdQrIn)7d%$tR2Dr#1P%rXf{iOj&4&(h`2YqM#z}OvpZz1R
zDa^CaFfbW%Hs10#^bi?a)vKFv42$_8EFO=ao%?WzF9<ZKhcKGR6)Wpo4`4A2Srp$>
z17sd?-aaO4d16++(BlvX5@GHuZ86VAfy4YbYdw=X5$}!%rieDs&mM)7OLj@#n6%7*
zTljvE=YJrw;EPNdq#!F~4^%+d|3KtCX|FksJEZK2EyA40;%ou-v>7c@js?lAPK2CK
zb_ZL&*1T!IIj3V20s4Q(561$m)DZM$boMCKk%5s?G%K)Zi>JbX!puTm(bXpHe~X>#
z1hqJzK92vi?g^+Sg23Hp4a)yHgWZB57f!^p<41QqC+mdv!zYQaI9qimXm>`*?!K?)
zoO_~RUtH~jgsP1q3~3dEM1uaq`1Ax528hi+HlDO#hzyns2Ra?PlgqY*;jFuuh(pxv
zjV!4;DaIs?-JYvP_y;tD{70rxFBcq4cuE#pto=Xyn5}E_w|)4{QQ-|xIJGdk#7A%o
zX9PVMG}ZOPXp4bSiKfRNx_Fr?oG=zClGXhUXMzsFl3=OaMCw!5$}1^`8%p)aBN_n2
z5Oc~E3-kpJ$)+elBe;Txk+_~`LwBMFmPntj<K(OIBpMI%TtK2A$;o05B5sGzWD^u1
zX7usxY@sB^xa57BLz3txtR<W+dkm2Q2yg^96E2|ROxWfx1Q`P)W<ZV3cg+tO%7Zrc
zbla(^#8Q6U6kOLE2bNS3O;2VEZ)d;9P^u<Mcr`)7l+=Vw(cs*RX+nFT200Ub)sZ;u
zaxRL5PofKS5DhB=maJ51Q#v~<h~Jc-*UTjst}FF$PxWRyUx!29p{((`;8N`T?JJWG
zqJUUP!1SJ5EYH%O?(cGJx+e2?v`g|uB{ObbF%d-Y(1WmO?eV08zvMVP9x`SyNc?w+
z<h}?-|8MxR)IMzUd{#x7hmaSzaIo?lw7*cx97Bl+hr~T8wAT)&QfOg%e0;erN)4U_
z;<tgeuRH7<S6l{k`A3?fS~-IHdj~3()){ihqQ`(x%LO#4VL3Qi`Yk%zl3W#SY%loH
z=b(IB&G;UfO0jgM3Btpj^h9CI&UjCO?Qh#I+yUV`;t**g{tq@Tk?9%zL%hO~s2*U_
zi<1k$y;i@OQ@TY@3noSLG?!=q7%-W*=>R|6Uc%;hT8m*JgoNTX1uq;$xq2k>3ylfl
z7hk$lh4f!J=W+~!0Y>=1;FL?Q|IG6#Efc-u|EG(-D;qU~mZcbgwG87`!@<67z+mkO
zkp^$}6wB<X>qZE}A(w^YAk8Ar$nUGg(nVY>zjgFvQ;|gX^T#dj79nl<fYa2n*`WZo
zJ@Zp9G)p|797JLhv+6ab^M%xtB(gra6v_4a9g1rub+3@HHP{`KF=&cs6H}_Xz9i!(
zVX^%ZW0)d2^YmY09Ft45K)ZD=k;XzF<o6dn93?&xayBN(ZMOvdR$I<hB;JC`w)%pE
zfa$u>5#?GygKrRLi%J4}ap+NTq*=%vsEC6iMc6(iojv@Rl|K{iRZEy>vf|N-nCz?v
zUm;Qy9FxYoScdkuGc%=@5O^A|i=k?-L=)HnoImO^1icKF6eUh7{L<p0_lTyPzF`u$
zy0#iJ1D`Qe%FcxuBZSO1O(XUoCHwK$S<Ss#Y9E8^umGP@2YOo#_8<ZAXJ3aQSjuf-
zC?>Mu=<v@bo_2}HE9!02V>(dbYjF|&#>pi|Z{t{ty>F3J&!7j2(6JF5BeT4MLjPkx
z9f_1<Hk{zL0{b1C#Ca)pxHiq_Cn}}uj`MgRG608(Nj%(gJ-@?8h@91e4qhd46ui0u
zF&2_<4jTE66(lIp>X^VN1jx~dAzktZJiA<xaqJ{gI03ddA!*VS!&r~)@qYlUk$)Mq
zJ@Cwc{+*VF{Td)(D~b!;!OH$aibDeY(S`Mnp$8^+rX?9e!8zLct^5pr@}TzQ3F!U<
ziidGJ>IzQLV{3qp+N^aIL}$w+xsH0MAd7seCj%B^GSbTm4x9fr+x>E45zye5JL%5(
z0;OvHq=90R($6OOqZ-_?$1-FJC#A@gyyu+w(Go@?%vTca2RAoq&wBCexDTbmWiR?i
zSxjOF6gQBdoXv%ck6%nY%Dg&>3($N^Mv)lj$td<tN#k;O&9NuuLI0c8x(LcmwvUa`
z=xJY^&+<hDcCJpg-exA&4L+Nq8<-lVSnwIvf2cB*EzlywwlT@=Z?M;BTcPNrRQ(qj
zH#s*{j7*7VSuS)ii%!bZeB`eYnJ(LD;@Xb>1gi){ILKmvdnJ+Jfv=w)2r&i|8VDAj
zDOMdL5mss{3T#VT3*}bOEiUnGRR5$$S=&!7$$~Cr?o*owobYQxhMJV3&uwVT6|&MR
z9xE{)KG|0HWLB_H%9klzk)m4ZS7eXV(K&4Rg?K&i+ph2x&lB3Yq7P%%8z#*!Ar4mC
zbL4)?ITa&iap_Gx`wt<ezyh@-r)v|>IhO-#o|8K&Z38zXLaTv_d;HYTb5y$IWg_s2
zaCE^<isYsmf%^|2X2=p%aP~F$iNcVkjLf7ltkSIEX-eVYB><l(JdTGY7b20NJ&Y9a
z1NkAgtOS6`XWWVKGdLLC;45xW(vuFX#$vvkl9i%Z(RI{^Uj*TyjvMAdM7haZkokFn
zLu|k2ritf*+=q%QRsW5CrFiKA^^Ge#<!2@)Rz5H7_Yq=Dkkv(j7&Yj`Oy;Fuovngg
zx`vP@LgNgV@>LMh(19{I{DDyzf1Lq88qmNo(@g3(k~g)IE8J6ilIm7gUPj^IIkFGD
z6~h8FwJqF4!j&3*2}Bkh0|jma)jXvw5(oNnft6#DJvC8;Rc_bDWrvOS>c<g3uvsKF
z3cF@dG&x{r6dhZVI4s2Y2M|CG=A#<^P}Ik#pm_FCya-79pbB7b70Z!0jp7@o2E!%{
zski%EF)h$fXf)_H=Ye3%FDu_kugb>KLTKYiy4-``T!kh<e+sjBFZ+|(bbWB+-f1Nd
zC*sz>em1-xo^XFBjhDhLj{CF{fYn-`ZbCCoq6Vu)znhEs@;m7GfeN{8v|%CFA8P!S
zs>oruVbOsP-YhlGI|lJK$Xugy25<IrGsCseKcM*0k?6#_*O1$vmzzHLtj{fpM2JL=
zuLFfAfyn}gJu*prf+EqxvAHGQEb5rl1Z{{S$wdu*YCiBBm+KJrh_dN>)E?_-G|M9u
zK9hMGDZF>G?6>g0a@wc-uD>|EFmQ0;#tSN2J<|8LyFGyan_VsSpV|pP0|2ZO{NH{|
zX=Li)_}|^@OX^m?sU=9?*Shp4`OQY+iCK;8gvn9k3|7cV!dYTNus{PvrAdRS1d!dU
z;u)VW8Ee|zzpp!#E?^0~xWTNf6w~aiHEkDo=Uo6W?^|}q<O*~hY@F{+Hz(Ieu*pBb
z+<MviF#1^UxM|peykV-|=;X65+NraF5F}IvdxRO3rJ;_n*con!8G`#$>JWDPQIx^C
z{Io7byVi<;t~aE$%{&1oBe6n}kAsw?{y_%}dO4P;gS)PJ9~Zq&R5K>Ghl7;WTIF#P
zmJ`4}sG4M!d9Jr<N_+6}hvUKPeApP~?=<%b2u)L2WN=yPNSr*=@O|O`wke_mPOVx#
z9v=%|(FIZ3!f|Oj3=~v@3o7@UBKEhkvaSI`d~-Xr+4C@8yP+v5HQ2Y2P{T|UzEMiI
zUn6}cr%5dP1cK#-yRI)QxwMvz+a!4hM^|o*gy~FUCWS|i=??6ksnmij?b<t<u~?sX
zz!)iE)GvRK@R7s|@jS<=Hn}l1!!82ydgc5uL8pV1YAmw+j;1b{xH(R<&?xgB?4~+(
zFK-<XJ}jUej1rc&8e9Yb#QA{=DPR}$xUxPmD1#Z4>=Ue9OGe4Bq)uOUaz<*pdUD31
zl?G;&LgUxg!wCKof#DJiWT!s)_HxzJd3Y^OMm>hNHGM%G=*9h^gb$mD7d<9Vu9{R^
zF)U4T%K5y-*LdS+WkqqyQGie4&BU8pZxdb=MY{SXkRGrA{o;RkebZofU)mh9<WKh}
z_)Gq3Ohqr*{SymPi&@MB2%Z8sP`66Jm#@t<+91NOFXd<9M%A2{8k9%eu<g_tgljO4
zwQ&w+q#a+7(eC~3!lO{)R)wK=nsRLAlMm#LEBolO9^?*qa$_eK^u5@*ObT{+^8$;t
zvlH@t3iQ(j{?u{@(jckv2x-Q8kQcllH&e*Vz`SG@!15QS1a1Aa9QH&JS)@Iz;zNW{
zesXa`t1DAP;yx``w?B#lL+fDXyNzXW@@4b9$OI{87wPIre={d_U612Z_V>?>bP^<{
zMi~w=feH4y66xyAFNm6@E4^8agB*79VWavTCV{<=W}2Piees+~1Z(_wmO^o&p9QhV
zgOdy;_+a9Roo>~_4y$3CJqmwG51G9uyjUqsR5V8iUGgd>4%oGx?mX7ewGOlD^})at
zBR>UWEz`b1Wo2U)o5)E2sdoJG_pmBWa8V<VLPkFa6SXuiwPG@O9^?AQ-)gJYYR|*W
z6rIJwury}G!NTmd7-;c@8pjXw&i3ISP#NPo2@%iZChHCflMUR>W>ce#m5xw})ymVS
zkLL^AfG3WFmu-TtMg^)WcqM@it0az*g|cNHygpd@4{Xe=|J4eYT9({1o9a>8liD_k
zQ&1iB3h5o~hUs2+{C9<2`W{RdW1+7}NOzfQ8?qHG|IR7jcWt`Aj`erI#fe%JbpNc8
z0W;Fh)0qS2KxyLp=Q~WlU`Tey5c^W@8+c+!@7NI9C`XR<Mn$JSTYumQ&6e&X(jDF`
z{{U1RhUOue%pzzaFw$_yZXb>X=`(tX;<4_=tyAIv=8V#YLN6>Bel^@`!s*WVn)n<c
z+WU1yTciD$C&Cq3S3RckwCRe}j1s1ju6j7*-}qgaufeF7qZh9ku!`a5SuSbkj{ex8
zM-0?&%!YJ`2e&9L05mQL)!`HTgz0(jq64<0^l&Tu#<>NiNwp0xAHqA!6R?eV1F?B*
zlb;8^u!#C075C#`?7?R&1*6m}r~P4>5XmrY$l~LTY=SiJ-r!vl2Qcn7=(BLJ%F5~c
zx~-C39OaI2^A<Y4X6Eg95Em><a(21&lfkIZlip8QxXa_|9L`1T6-(^8R{fT}TG+S;
z@CP(lEUWBW`OClJr~C&HK0aHElt^-On<8MY@-Q*oj3EIYk=kV4F>d(<iwsqm?y)#x
zUo5So>cJ2BgJD$|*E^TW``ou>dTVw9N_>y=;!y=UHTc-5=NaH5Su0Z}CsVSiB3e+4
zoAlg87NGhkV7_kN^;&kXab0CBQaM&ZW@f={#~X5!Jo8b>0zw7MC@LtzGB@|K7=^YU
zD1XZ|MWs)l^afNL-C(d^#et~tB)P^&JdA^EeP{D<1a6H&B=G?eQ@}zHr)7f5NFcb*
z%I@M7CLHiS1sdjwxCInN&Bu2Vj#SRBRKI%~VwW>$8ORr*6P!HvQOXo=xijteBNgtG
zNVTSCiGF2SJ!*KF&L>iyHYa3kcB9K|BthPRhB&?R1fQ6RB_i_b36}9n$j`ewI|;p+
z51pu;?{CuJPI)q%hr(hg*>3()FliTb=HUCc1Odj4+|N`(bM}hLo<VxF=#eFC7GWot
zs03U*GK~h8lu9<w##tgHHC3m67oLrqfpcf0@OQ5&YLE`73y8BLR#!kNa!SQ*00<wG
zAp@KQkbZXYbp=f8$ZLMQ<o8m#<)Jw6ckJVCtS`_;G?)+98dX}i7VW6vK&>@F1M`mG
zmsk81M|q6G8fS{@-F#@{6AaXzx^=ZQw@MuVUXdYUzp!m{H~QvVVP)zLq=knQg868Z
z|8(1AuB4EkchpjX>QfvK4{S+ARfte~2dGhj$n!`XPVx#?R*t2g3@YN(vlQOj%6dBG
zJmQN|vsfpO!01^B^mcqJ<3hw?WC_whI#Z=^B3{?84YA^`s#6V-xK6`(bkiV9yv~{u
z$N6v&xu44@3&cv|3}_Q`^*)}W@O*Z{|FTd)839ViN%lf6A6&B<+mqzjpsFD^DL4aF
zdXN80D=qota>YnJ-F#pUwMpHHt1{X~dTqi0-x-J31{Jt`d8LXmpW0ew+bD_WU=9q;
zWqijdw+WtlYhQ#zyN#F5=9=pD5i9qazhv4?sPOtJr9Gu8+LeXZf}bDTX-0RxLt5`5
zuzt$@<unfE?IO7OAc?r$BQvV2vb;O@d@=mtnTK=j%{hgPtA27c8c#!5J1<VmEB3ol
z!{s(;LQ!(4-sct4i<485d2!jg&M7Y|;#FR==4jnRL?Cfx0Qp<95-{`ez)t&*w8a67
zQ<^HVlYAEg3Qh9|EQB#yB~ur*@VQM*=#IAesrq|s(>N=vlUJRZ42!_=)LAP{KL)Rb
znENh2A@MR=H};#Yqo~%uL#5GYHe+HB^z#yq9*1=ni@5TVi^xiA3q`JFv~!LkClxzZ
z!kgwSu@dLgjYf_S+y#mXdge|Fq35Y66mDf4Z_{eF_D@@Ps%ELBDADz=h@01Jb1QZn
zY!NLk@&)mM0rP>l5{pO)rNKE0;g|2YM2|6@qaU@>?|+f;JWG}b<I6b}W%dIqT?y@u
zToYE7SOY5$ES4QV@5{t}j2%F3BrfZ>b+9p*E^z(!?$<L8wwbs|LlaobP>H&wM7X#T
z8m0h=rCI^JQ;6{xB@Gwg5S4AO0q3|>j|GiS#V;J4K&UfgZ(;BY>g+rzGHJrtUF(8|
zY5e!cb~cPa-pFl3z~qX0i;^i)#%Z2aAlo0=y)HUP!z4Gl)jdd*#WWh4a}*tn<21hk
z;-<$`oQ+PkhsHALs_WLq*;e%4jw7;T)qldM>3%LcxMswe9o5%u2bZVFiCs3hp~jmu
z*u}K^44Z3D+lToBd7zST<&TaZW2#VTC<?#NNNnKzWx&IgQ<F82n<A{|CvPNjh((gW
zpE^ek+;WTJ{q|SFwGa1$oQwV*f5~BMr>%h67j^h-7$>9Meawt2b8rt`%wz_fZ3x<t
zx62DKTtw~vF*{P}>QZ;7qf*}=FPe$w9lICyxvym{uHv-}d#(;dXKtEvWTT=2_5`oL
zvHm>MhnHqy6+INDjrv0yL1~|#tH=Rmt}sX^;(yumpF8^hyK4jU|8u|0m6?wH|A%7(
z8(H1(;Mbsn00IC&^xuEfRoB?n(b)RGU;3Tmx1uxXehn&a;qvatDk!58Rg2|SLZJ;3
z!oFal<2v}LnL|kdh%6aG$~#>w`aVFKM7nei)2t3K(@}t|yASW1vm*-qRTu5JHd||^
zy~KW{B+Bt12&|v1W5ljiRBnWpx99;;ED);*{OP0$t5AjNfK%ecVt`i4v0#UoFddD0
z<q-)wZ1h&X9^3u+oPtBdjs9lQRAs*0#vr5Qq)i|i{L}Ev1?ow^Ohw)K7H2{5z7psg
zkCAvfv6IIl(S2?l4z<z~h2*r2#C3yAgFndfRFINf^&5<#%&RD|>GhoLH-qGuA^>6X
zc&fmGp4|(pBN4p#Fk0U;S9yBfzn2w1!vFH>ek4O9##Sb0llI1iL4N9cCr-60Y`Boh
z)R~<gh8EKFpTD=2{At0NOv@}>MPUUQ(;nw1eXbA9_!0+PFo)z;=J({XF!GcS0dB@}
z6Jz+@XfmtPJeOgY9gZ;IeSaQu)rlGXJ&$oE@eHz8q;2}{6h$XvRFCZ+3gNw3tLHXV
z^eRQC{oa8AxiAUdRl}Ej={v8;V(mY)0UayqbMrteK#uX}?@PS;eYW?mx17)<<^$Ko
zD`bQJOx3LgaW9t1CiqI9Ls3tabFM2c`GSFiBch-QZw)Ye<U}Puf&cf*@j7UXGW@rI
za({!)i2n}-^jn&`M#d)py@HbB_$@H$e=F#N670nQvpxew!B!J0q60MG-_&~GF_F<f
zgR;?if~d>X`5&FJ?ZUG>r^<}uu9q{|@?p?O{qy#K6-;4U#<WeHuC8u3aLS<DD!~q|
zY5lz|coYyPq9aeTJQlEZEQnbHz8*n!5;>EpCO%9#fkq_mS?EZ1ak|L?ejBVv311I1
z{RwzIY<`$j_CiNra4Upcc|FlwYKWGr$YT|}OXf1d&XGriKI&HHJEP;VZEOY#?fM6Z
zjG5x872^jcXqtDS1diC13$gX0PH-9alF;_s?(*jkud{hL{M7k3X(uS<FOH)8D)HxX
zvTZX;sYD1|VDT%7r?VNeT<W}*O{IQZ4hDDa^1cY6pI-4V&i6|0Z5`Qq1qf4MKe^3;
zSC7B-ut*87y#@HoZe0g~Qs%sy?9`$|GeGlqVso14IKUCk&Z;$kpWT+Dc~E+$@j%@T
zHVJ=NZPyzqRa&IKG&X%Mu>YYsPWX5PKO3{y(3}p>UQfRmPHpYSN7v*YXV0we{O^M%
zbv4}hK?DHsQvE-7ivJw6rPF^u=PNB6hmF=bpBq`gle9bWa4ONO$F#QB%jgR-X?Gq@
zLe3cnx1l`p(fu?6=1;?kuJ;ZX7r<Bm2)X!~6&cfUv@kJ%h%H=av<}Hx(Ex51y_2<b
z@|YV`VoaZ(uN=6aTkFrBOOw8}rSOuK6|_sq?63ZU_$=ikf{6%3PDvz|AwbZKd;b%7
zPZl5nu?vD|SB+bYig}C~^|Cl|A>@m_0oMA1jPKAo8}*^&J!Hv-cx6ygjw1q^RW2E}
zgNx7_3Dgp*@#G33xP{P$kyb4PJ8==Du>M5j7GsDk!P9Pc0R`It?y%LNlZUaRCn0Xi
zdJ1s!hE}qN*Jg?XnBfyDD!a{mD%GKnf`XBe5qU5M6k&$(`wl|-Q?YPHjl>C%cHFD0
zFWF2Hapr@|ko?S{H8Z<)E_dV-;+X|H_VD`><+Q<;f+0++z|37T^}wNibamFMpT}zt
zcxg+h-DzoLP26uYxFSUH#NE)YoV(-w^Yf7!-BrF0NQLj!g&UvrP0#lCUNA|xbh?Y1
zulA8$hTxM<uI+-6+lZ{%3R-~IC*j){I`R5a)j^+=wa$>O_b<b9v>El7_w3q<8Z<O7
zcQQyNHwk#m_>d9<dpv4yCL#CzzCH3<>_KAPdN1*KY^++ZjwVsATHT8`l!}K;2Xijx
z27mbMm&OsIhllNLLDU&XCJ<ua>{2bt)mY=!r?ILr&@S^jr?|)90maNpYwOY{uqqv|
zzvM%Vg{U$7C~_qDV^32{j!3=pTQBJzEM$o&Nd6DMZV^`1zNwP4!%M;2RN!6%IXl<z
zAI>tBvuMX709NTRx6I)ql1WVB`_s)1L)Di7MIs$TOL+6AMY&_hcjktl)iIyC(sA|Y
z)NgBsQpo0n0+SQsdLiTN#zS<5OH^u8LEE{1fV^n>(_s4EXt3(>MJ_PjBm?eX2S{FH
zUY8Ifd#eH93~j%O0&wDdo6yl=>dUPWS95J%P~qpOEh^w5?jspCx+ImJ8g}qx`}v3|
zro4WCiuU3qkyL%&HV!|7*FxFx4S!xkf~K%(nOQEPF`cSfV^q6kXpE-ZK!%Cvkn<s2
zx6p@$<?pzB*@)n@*PA)xakyrxX-E1_CNjo!NfmFEn0A^Sb&N4!#93)Xz<(nUs2hvS
zvPx$T9-~hxu+nv49robL8$)jtAn=2#c6gFH5qJpq&P4v!gfx@v+4O0EO9*O&2N5{!
zV+jmub^`UcR|J{006zXfB-HVNRuNExCEi~gEF~LYhz|9FGGMgF;BVA=3XBZq+MmO_
zT*Ulo-S`WWIt^##(Z#>Y%OxzchCis@az7ktp-G2;(MgLJ5r)cv@h3_I|4`f@s0Zxz
z$0G|uO4@2(6U?lUs0WV;dcrnv7KT{%379&!Ys$^lXEXcK(|s=!I(tJ=$jx99;N=?9
z#1ltFd~KHdZ|yD1#DvZdIx=ZXIvb%Sx6&ez_@pA;D+>eCT9rDp!s(Q{xQ`%7egX#<
z=o4^~>5y0M89cqwzmkY+Z55Nq6E`b#1j9f?qGD1@OW8mYq`OX-z^T&&mNku774hHw
z<?;Lus0Z7!<hLJ^g&Eu)P~GWbQ{FfP&G_{cJC6F^6~J>rS)TMy7>{G{*A{h@`eS^~
z+&ANw?i8M<eplR7rUgJxvQ{Q4nWybu)~Ct0%oDCC*EzlFi%pzIpPkc0znF1k;^25l
zN#t~yQgRhsZfQrFdP-3X0ck;M%oVYJW{J0SRVv&A6+!JbJMdrRres^|V_|#2kCtiK
z$b$MCLtKjJmxQ3xg~E{7k^EJ5r15Huy?eabFYA0kUX+w*)A{1#MIo-Kyl2)ts0}(h
znOQ&RT3(AU+dP+9^JN&E_6q-+0S-Uexw&ICu#(ppqWx`IF0gy?v@t?rt9|_j1w~*P
zHiqgJ#zuB0Q1WMYKhH0Yq;I4N$1u;U)&wSH);M1X2-6xaF2){7UOi!r44#1<lRp2L
znKRW@#TeXjO~k!Iwweb6Tk$GUdw||f?6=rFImwha&$vS*gbUh)iZ)ISq`{LWm4H*5
zZM|PM)$VUw<yTk|bHt9C6$={kcsUH!uBd#&lJ(sqav$w5HU0BIJTLP=3@NbSFhAEL
z>s0d+%`*PuYi>3BreV=MH=S%>k1MlY9<2F>DuMa@#qkEdu=FHWGUD}Y%3^XOZkVI}
zB#F;@3pZ>0G7d|zHg(!YW8R&NjBxy5!-%6bK<u7dr~ue3BPNK<t`d{Ye8B%RuBU6P
zKAsd%^mes=tKh)0s&BYy#BP6BOV)tZuSykI53UF$xv8v7<qoHXFId`m+eeto?9_sM
z2bC*W#3XxFoqn9P^NEF*u`8uvoZSv?W>6>m)!V6~F=Z?F&m2=^v$DwFe5|RoxyCJg
zO4(z{VaG2j7<zY>;-!%Qgfe%%jl+gr7#uVD$c=qlGv&Z>g=i|bSL0y)!0<ANV*JQ_
z6zulK?w~vP63yYlT=ke7aHSauPp|4%@;~zFr&+|_B+5d0yxC|}r;}5>44y7&2B(6|
z0urj(DwSS@&Ap+6Lfb>?ghZc3snesDEhk7?CMC?%J5(23@Y%B}#SG0S7_Awl!BbUz
z()COWtyQ90iF`={iv;b96}qD#Akp_)KB?T$o>EbE5fRGhPgXInkX~vXYM6qtj}vA4
zLdA&i+z)0^Vgm$fnW)W10U_>-niIxVz07p;!3+u<Yu~{x?8jkQC~sJLBB^1Kh0mYj
zG!ZI&s>kPpc2TA7^!J8=svyX^MQr=II`%kx4!4Poh3(@OpDo0-^6I8^A@OfO1GLdK
zW?*06??Y3zZ)#1KhNReoWW$Nn!F=vA7mL*+;$KD~db^LozsF~5Gu)&_)F^p?z>4S-
z#8~)LAxgz2mV#jBI2A%wt8y_$VtY%RVeuq~jMHFdy@WFqyq~kn{rz*USJ&sa{R>Bf
zv{cg?LPEuweM?M1n-5$|)7~yC6TEYu%p_^r;2-94pDKC$L)tp>6o$45%kqBQ^rJ5o
z{!P^=o22hJT=PWou7by9_34@s!?vmXyg!@k9nGtePIve+?xHa5Ivwai!*cLXO6;~f
z<y7whZf|^OO=It4F6?Xl#nI;{B*k<fTj`{}(=<Y%Mt%EKz3Loy<`5BdlWB(M-wQcy
zPC1?SBzBmaNtrM9_dhxVcLXXIN)vv%I@&VpK`sbd6`SYT`Vq`dD_puOe>pF9w2fdg
zHkCe_As|t-m91wi=3JZM2ySIf@FjCsOaq1_kvCPGBaq=$$gKisiY)8@+7k~N=3UL2
zjp8-Ci-=!ZR#BMKxfa?da&XIEv>jzA66A;MfpZ|chJ7F!``B^Jh&;8SNt`%qt()*5
z#$cK4&xv&oHOH|<&oNI#*T^lYleW14$6l%F;gmFN_e;s26#+W(1a0BMqnAG|ege@*
ziBl?0%sHD9o9!Sh_DLBhxii_U-{#9)b*9*VE7(T=bO+Hh)g}K>@<P1*<kM<woOzQ2
z$y!8;z4Civ9g595VfMdlg9{V_?=MrZXjl|g>sZ0r?6hB0+BZQ+i~9OCS1h4=n<6(m
z<E0?0rw+m1H*RSrR`?$#86pqBJ^L8qF9P#ld7cI<)f#G}MoXkJ5Us|*jbt1^<k&-P
zf%tN#{zIf5;x_1ldaw#<s)Z+bwMn?@pjb7em`16ZH%s7_c%5t^9ej`Vn`hfDn1x1h
z&hNvM<i1)j7UOFfox3zBR%1><V%-vkE3`qa4VI*{KQ*Z$?8ai&;bV1Y(MwTp3tix}
zRafRHfd6v~GvdKAk?Q&Z!V_9mpC4+IKss47*zu=MWwv-BKW`n_G#EtAt>LV_hgZL$
zPQkxA3!_!hW-0b}&U96n4tKjg9Yy^nq}RaGph$~5Llc@w<gA#ds#E}{yzW)T0&rK^
z6{zH0#EwDaz5(jgs7RHRu$HcAHgf$>Q17}BB2)d1iv>-hIL89Iz>68}59RIAaeEPE
z2k^4c#j~}pY>5ouZlcqRw(U+-!}=2^7FXAgt;YeEo3<&{3Bw}j1EQvJqeR|@G(4+2
zaj5!C{K#$D>Mn*ps$)by8U-5JHu!~j$947YwpxkyC(@E%ruDxB-nlyl*;KaQM9|?X
z;m4Ql19N#+8@rCQ)oHQMj7@|;=8;EBQ2IKufnGX0m`iGJTu9Oz_Y&r-J>!g4(O1G}
zA1xtICV_^a2ZBySCD=F$HPt9CR%P$SrI~Oe)!ac6@3+%)q27(c4V<+j(M_;={ra6-
z&Gj3u76EFFGr;O+m1!mIQ1JoZfNzen8|z-%#n^b&thhwV+CekJMjJ4gdS8z~nw&4m
z2`lZsDb4^(eg00}y@vp>Ql*W1tbbW*Ia;96XbR7*MTm2G#yptV24!Py?nyTx^j{3>
zMFQ8<xMB)w4=uAzB}GO`L@ot~>P(Sn4XHr-^Y>mYWpdbayxypIN{ep_6j#lYuIgj|
z#I_S{;z`X97!o1Ycf9%qkW46`le7^&lY0ctu}4Tgqmx2<Yh}$U8O#*VGz@_BL{x{J
zG5V&^Fg%Zj;djHO*o`;snIXTM>6Fe)lrV${bJMD&KD@jpMk%w&E6EQ=80Zian!B2g
z2GwMfi5CnH(9_i&!ql_I2A;Sj$D9gUzwqbPeVUh(#xMD`Vrp=6PSb?0T4uFxrBYh=
zBc+?odnSaQ)_Y(qrRA_Xb_psA_wj36Tb5QUGV}i8u?IS>b9aaFYvma2`YxyP9wQ>S
zo4J3{oCB517Guk%_y`i-*)2|}PCzJk=c3%^C?1>sqA$O>KYEVbjq}Kcx;0tF=wifs
z3_AAo%g%DO8LQug{A(#7OZgMGg3-1?P~NsozQfmEJA!<DZ2YWYn8aqwku`J1lLuJ5
ze}LoE(f4q5cNv{O2D=yNKV|SOJ43w1KiB2eFQ)5O%9^Tf7MiEMm+Al^BZO6m@c>;@
zu{w>^d=K8>v~~zG>kxYUp!wISn70}q;;+SO#sR*dZMk<l?<?C0OHAE6{X5m={WQBl
zSt*+Y3Tl-B^a%ENR+`s|MVgf$23wCCwV^EUDU2xxL9^-^sH6UYew4Gv?Rn)@(1?b0
z@<{u2$2EU9z2hNzMSS~ZWJ)wFSDD^&`l3pYlywfrs%j@krf}gcSkGPrF>62Sohs;Q
zifjkhBF;NQX_De!Lu7&*G`L6hncT4J&NYLl|EA}01sY50jcFAGt`C<f@YcOa^u*b(
zigJ!j>7OuVQrE*a_Rd9P4Maa{z;|r@>q^PTbxPkuEx~n}vX3P`vd;=4U%++2t)<}8
zJP~(QZH!S{%3)l{Vab(I5zY=q-w9+o47GTtGa?&#FV68R&}l3g$zC)XB&b>&H1lGi
zA4S-9^F<b|DfdkJv&r3IxhY{LEM_Vc^&$<Y(`Ac=TZERh+PF06AIejOev#&gB}Y5s
z$C1SmX#1!>gDMp%U3av?M*+$jwr=B{d8wAbvY53qgb#zTF!Deeqb9ve+79XvI(U|n
z9%_ORbBoUTRolJMG@N1Ydh9Zmhxh`GB-BE!&SLpsEmNSW@?#GXaYZT}0~eQ9plAeM
z;$60cLerP=>ZLlSJ=Zk}qL-J>DfoR%4=}sgia>X!PWHOy+@~jf*x$E$<070N6eI)N
zwsHf@^$5l%)Z?UYu+SuThSVP<X~DtE!0t0jP>#|GfK4j^y98EroCaK0TqjcDb|^ZT
zITDtx%g1ZKyvXxmk6m;PGNljc`YxLOXF0(#14%UakT!=|{4boMz3piO;jbu%f-~Ym
z9&XIq>p%`1-}!5!2Ecl*>+?OOQ_&Mf(IsWuL`?yI?Z`&a@eP4Eg*VIJ!qKvgJCb8)
zx#X7iokDWI6dSU0)&a_V>O8_D1Sm9E1AMSb7xr(vjI=HEo+_9X2O2~E=qd-|gMg8v
zIhmig4PF5&0K<C~G)6{skW>l+jgiKJ6TV@0);1D4{12aG2&i>dX|Dq;O6x_x(EKCc
z{%$ukB6G?@=p%2>UB8vUJYEI)%K0+W-#eJAqO(1wl;C75a%-6^k^DIqB7<{yLN-Nu
z3Ke7p;CBazY2JrYMfP0sqbw@t3Esk7x|aIfD415#u8Yh@o4hlQ<U5+&7P@K&3>kDu
zj+-~x|2<qvwcaI@g#-X-ApO6ZB3kQP8UOd`($-%Kn~l-C4xgbxPy>nOg`q#8*dMv8
z_e<QuEJR1{{F(@fjm>I`g?u!G&}cs|)0Y8S-9&5ud|6-&!aEuo9=xg6s&V<SX#$o=
z9C1;x+HbbM7P-zGe}ED|12+CVj2r-N2KDu<MGDd$N8m+j%sz0T&-p`${BEA0vDn}f
z^fTL<PR6Wa8Td>K?1KH3mGKh}2!Xn-T?Tr^8mx6>*#*bi4@Jc3wk2$J;Rd_>H>`rC
zg=^Ahf7BMuYgp_2CV;1Eh7zB4AV_xv2gC`{y^cWPi6`b~Y3s0t8~x!<1+|Y*H?<WS
za?NyX?Rz0;%T}dn+Z`^marNZB1r__Nh11}FolTBd56@cmr{xB*!NvL<dotDGGQH*5
zcVIQ6risK4%EPuZeNIi|aP*oM*tuJ8ux;4S=Cq=QlT_h|+o2x8kP_#We<S*+r^s=A
zFMFu=M@X-~3xi<q<@}TZ9@rk~{_1U=T0?Fr!Srx-FeYY{d&wfU0Py>`?gVTILKg7)
zyE8!_^VSr=3kOiM?Yi1z!~0p~!|um{<l~GNe210^9KF%{4U$9ExiUSN=>ead${Vs*
z(w9pDb_RtJBZymRqRM~nXCIH)L3}1;35&3ZXx#ehhFQ^A-Fr@TOQ^Fue8`30@Hsvf
zgrhwc<mb+Xu?6Gf_rAFo9iJFsKR$n!-@%<kml_%ba@y~4YKe$_72CIoD<hHv>YY9w
zmiWfCS=zOkz74jb39{MAH;gkYN!#16I~!<S1;$$fZwp1DB|$u1r7?Ak)N~Y2ZCVjU
ztVCXNMmtAzVz-Zb-4k0~;Nu)!&$6FfrhRKX<G*^6tRyIN7uFuD=3ZUgoX{|KIyViy
z5|aWX{^0-Yq^|TYJS@DWBdeC2biV@cz53g^erc!tQeKfH&2mNGmGdm8A1uJ75yHR*
zP7#cfG+gTkFscRLUI08(tfo+`Lzsp3egR1yl3rriK3%{_N+y!DYeM&G!-5iAKEVC4
zl-sey%7{ymG38E{+cnxhHg}GY$EZ>``h!hNUvsWt{TK&1WBcUw6=t6L>u~S270id|
z<D(Mm3T-3;gFvRqEx8ikWHjGoBI$@Qje!~RXhjSa%%hmDJ~W##m>48zSYcLFosGgt
zt>{co<*4oU$s*~qz8msp22!>kxO!mZzLsK<2EzbHnYryvV$7u35~AHjLT{RDI1Q<v
z<{8>Gwy=Q-IB$U&Pav*Z;92<lo*uS)`?aUVwPF*9e}Y;~LNc8$+}MXSK7%Tt&Ev)(
z&I3++AS6z~Xq7fT{3RU;R)mWIOpVczcCZ(iN-AeRiApq1XE1^vAs{pCS$f#6(VT3_
z+C^52;@<j!VE*rPYQ7)jKNPv&0Fhrml_>%rWH~HKgmfD}_fX6b7rj`|7GAVjzwg{a
z0~?IIUz@skAW$1T7p<D1{VV_wx8ofy5$l7sHL$tb&aTi7bK<H5EwB8;`}YY74V2!w
z(Dme9CoBlhH@`BZ0+tU=U2fQ>Avn`kuXupi%hP%+^IUN;8!P-W51<)=ViBo7r-;Hf
zse+glpO6DZv)sGs?l{@C!RK_~N|n1q(Q^8fB~Hq)Mk!zBo0hUj%~-u>gF#2Qeh}U>
z;Y*+Bik$Leup)v|l0DM6Gl4@9wsJ66)+8hiqz}Qt5itvNT0ow1owUB_5`#av9Ebu&
z&agi#4`rZVG)AHXNX0l&4rB_FU5koF*y;=Z099W-XsVt;$GS6GG;eTrsB9T&-|A0R
z_A7FYJuSKA@8_39QHUc7hT%;=(pgPI7-&d&@u<vX)8<2-aide0%e}=%qkXU|sW_|h
zf`_1iBIvNu?0&V}gP7%DnFv3!0jUd0g8@fSXw7ipS2E*@L1BqxM({`1%jfIK%voe-
z3V#xg5Wd%Z8raV-OD~_xmK^UK^^=YA#TKx$O9z?MnxE$Nl9Y4O%ERC<6(X0%O2Ijg
zTX)6L|D8}VhTcn7h_`1GI~hy9l)pvB({_Z^)m=6`${4H6Rg-e*K&YH%GR_=={^??u
zn4nx)x#u^QOHPr(&?H|wA=vcRJQ*StE^*q*3#g>YJg>@j+N+T46zK5-<q3u^kJ|Nn
zqZ+IY(Pv9#q=3bi0bdc#jOIaCN!k`UK!o!ms=S7wGo$536^4k^xfb$OtNM!?*QkU}
zs*=YgprJ}{^G8Br;&vD5y|QyapetCvR^@Rn1b`3)S`d4cSf#AQL2Qsjz$q+Ko7Vsz
z&41ZKImRLtfx4fXNO}b<dV48paKZQ6%qZqErmJuFdA|F43x+4^eOO#5dGaKXM9KI#
z)-Xm)AVu94+QHL!&g!qz{_Pqtyd7O&Vve<>oPvEDW9#&^gMa;?CO}DKT?N#r?v6rs
z;sFJ<s!q81Ne1{|YH{a8J?N1_GAcW%^4ANc%%p3>5e4{^0&ko77GBS0(jM9HPRQFh
zFUHR**4DQA8k_e3%DT;3$$KDqq(FUyaYOe@R`@ZtX?SIJW8aj_Y%WS(l4O@=UY?EZ
zPjsN<WC?H|48o;)ue2-^4YUQBgzqEf<U2w2lWW1x6?77)?mXDLh1-?AtDO+0XW&$&
zV}yeZ!5vmC&qTsc98?wWdy8d=vO3Q%D3vYr(UlgJ?hS>sgsQ6gdcSH0MRKfYLYX<i
zVr3z3Xb!jpTGUXmH~YMDo-!dkfg&}X+71RS42-Th2KNsZ(gLF*bm@<s%QKDiEy*Go
z0awC8Jv^!^;Qqpxsjz0-Ub$GUe;I1l<Hr^WKy@a*Zv255FQn!X`O*{P*VU{zFZ4V3
z2A|yhMG4=fMAwcC{3Qs~^DT1kFuWLYehK9}0#bEU$TEzdjLlCavs*N~n;rLBXx*Yh
zs|T$lFJpX7?o@R&*n|;9s<-*{70NE#Kp1o3Uk;))$g(zj2jFkQ{$AXtUkZbIo(*_~
zdGRlrNF}8KO%+!d<AZC9lKo_5C{ND*ZnH|>)uza>6yx|C&x~_$w+KFJ$?EgVAXCGl
zaO^BqKpt<3lr9~WLALVbJ!?P@C40(09JqF%lWsr@9UTp{Kkgo!*QN!Q0um1b)v<%y
z_*DtpA^bbV@)dl<+Ck23p%K=~+Rz-rB+iLm;`#luN9xMQ*jLGf1cV`{d65+s8jmN8
zNxDs*v=V`<%_8Ajnxvr795Jpuukio-wsvJuWyb~t0AL38e}@8%82<ZZtx8ebVuKFF
z>!qf3B6pRfA%P!UeTDy2i|ipiwy>55V@QR<D%^;uO`PoOCc%hP`ZpL^^2wQZx=mNq
z?vx+G^f&CuU6AP!Jm3Hx*W*i;ju2gh_;}$Tlp(qIp4LF^ypY(RzF7KHHD7;76}9bs
z0tTUE$|Ck-C^We{Ajw%yrb;+Jo2)F7I%FY$m3)8VbpW)#6hYK6Buah$3^1-)2MWMP
zu@S~&Wc%#Ff0hR0SeanOquD~+L`X2w9)C^Kk@}3->h5;QS~3aCB|^lon*2%0jynG+
zV03`yQAHbRmQL7os#N0W7|DhR@NM@0qOcwa3DKsB$8g_pAF)?J!RRK^l!lJ3fUAbs
zM-husO&=96{_5T4*Z7%0&rc0cS(<sSVJ!z4wQd*C*Bn{WiPHKxC~tw3rA&$Eh2G%#
zAso8kIyvDd9j+aj-o2TFV<GQ4C}g?N%3#^HiiCyZmb`at9bM+qw2N^;Na3W=c3VJ7
zY~7NI{T?<*>#B*sdsYsw<LUgu)5}C$u$##pz2it4F6`pHB&S1E&!}E!WFQrYC`-9o
z{~yNQp-Z%|Ng6HNI%V6oty8vb+qP}jDciPf+qQkHzrkIrd(dxB_AkgMcVt9Hq^9QJ
z{ijfkJp{+VC`5!UfRs6JENTQSNutEDLHff7&A+QWTkIFlR2M8mLNS#xPt$A6F~=eT
zvSK5%KO0*z&z~DpE#vOm<Sw4qWL=gn;I12(;NhoD3*4?bXb<(Jn}j*o7FnMVmk?j6
z(3`fV%^U8K=`V+`Dvo@~CDyOIWfyfDIlHH&96lFsA2aTi2Ymm%Dy!30_G3T+0FKfA
zZ&m5S^uJf-mD-N&x;TQ*Ne#M#f-(7?Sb0tof<wU|$B|?{ki!bEdd!+1T}<?)v*6;f
zZ%_7CQ&;l}e*td}9+KLOSI*n<#u`Jm32X*E6zfcWhlb*5c8(7>@7c3Y=uk$llhEgz
z7mV(}uI|1Z`mhsDkUUmM4mgujn4Tyh5^sWWCLqD`s&g1#Jjvj9LJ&VHy6h$p@SoU!
zd-8>_w>)8ceLi4(c?e=4_NVL7yVFk)aaBUBC|Y<~yZQ%h%{K^c4rdvGQs|KTtGpmB
zizdUYOgr2}C?5eS*j8RVjAV{X>X8BLMrKlM1^J#>ifnq{1gj`t%Sko`4KgQZXJt6G
z*af4O;CtmnS)7d7&l$XKlbwncU&rq;f9N2y#GKB+uAYMHi4i#wo3cMPtB6)gh##$M
z4uWQ|&f8k9p5liWVm@<lnOcY5h2Jv|?F)PAzE*jvx*uK%@QAC`a}M;aSkM@}4n&tD
z<RY!gjzH>UVaaZZpdN<o9@jE-Fw6|ochI69F3$b|PFWW|7lK_n-1M&Y>j5NY-nI6n
z-a<h}3*klC6zVGWh`p%bPW)yi7;fm9(5>6q<W`M69eulL_)T|rSQRlO(J|j$hS>y=
zhx@YUK31NU^i0kHWkmh>MAJ3M(gQTxFpMHUPwD*_)21=@=q5kjNf2B($iS@WF)*d6
zV9wFP&HCVh&wW*I2D>tBrNkgl{~N{sK`=|GB8HF%yLPpkO~e+ze7Rw|KSatBVsn&6
z1D{1r;r%F0m2#r1yII9$dym_D`?_?8eT@%DtU|k-dp79bt;c*+`~!n>al>r|Q_s_l
z;F*|O>2FSzU*Ue@uj9bDo28Vp3aNe0+3YHw?H)d>uR2sg{Nw9xoCii{)z76>>$bPW
zHEjv(^BvUx_2AE3>KNIw(lhFz10DLzNoUvi7oDiaq9G0VK?wOXwIVJGi9q;vaDa&0
zw<W>|4SBeMs*B_ff`ofu<xoY~(4QRhOIaOD>)3o{d0c`xuBg1d;fL_;e32OT*`X~I
zShT-eJ6rn*r!!R`ms{Oy#HdI`qrbX4@!c%O$C#^t3{uG7Zpi%eBao%DQ@9l^ts$MI
zp&RbR@nK$2_t~BG(|~p|y<R{S5Y{h0i<pbT+eGn0t~=j73=^X^>TC5OO0;luelc{+
z^r&b?AXCDWJJ0rxbTr5XuzMb0tskEN<4&=`D_43_ftaXDRX&y>N4h-;YLh^+3%g;W
zcsuU?n;e%QNIT^0qExmjqu>qgg!?eyEvE=+vm%Uc;LeS+zB**(ATyofOLm$Wv-w(3
zkeDvv!NFsbv`RuhSGAF1XbUoYYCSoNFLL;dcZ12^qB=14`jdpTWv*XK?P2KB<DQH;
zm9?qjWR=m{;=yamufx-lDl6LL*iK&~x0}e6=I$}wndyx?{hO(e#n{&p)7C>Hr71@l
zm`pz*YC217m)j`c(XT)f)hCG2E~esi51b0vaE{`@IeCjE{l_E!l2;bCfLRsWKVw|5
zY|BDwsJUp}6g77RB8(w_rlVYyJXKV~t?M+SL!5x`bs1V-#EKsIfX{?l2hhb?BHNd9
z%Q2`Qz#Sb#MZWdH<9yT6xsnW3kI1q+M*Zga1S-`}GHVr5{bQLDIK9I09ED#SKE>>)
zpS(uUquF^N+NY&7(T+l)DOLGLSpFPgO*6M~6wT;j5V>_x45h+@kxtn(<GjEk?m$7l
zo(TMNJ;Bo&!;fIw?A!19`5bC`w>6bc%+{2q_0nnX%A6VEgffAf*e+E>Ghm23$~6ty
zcLm{|ue-Nr%ry3us$FH;uf5}^g*@FwMl$$QwWHC^O!>YB&5MGpia7*3IYXS1^6r_P
zQK15)R)K`Fd3yu+loFJ(%l%K)1Ll>1-_QT>E1?zBN8!N%0E998pZFqOLu<SLz1dG`
zxZ7?FBmL~;8XN%mBv6f|EPzBi0z_02TcE7fUShjJKtyOsYAO=f5gTLt-8S`QYLIep
zAC*tcE1eyl$8BhE{5Baa9N=*o4bgWZ8!||*{Z1r{Z6_P~8o9I>TXP=_T(jz@HF_m;
zMPe0CG$ud5#d_uK7=&f$IAln*yngmWn9qO+1!r(o$86QAAH+YXpjhtj^X{_i*)qIT
zOsh}!9toh=H=m4`sYhXW2%5pzVds`igGfWJCe&T^A6TmrPZ8EioD;_8(%a*%)31Y_
zDC8mr<+CF}%!~>xJhMuQ9@3}u&!E~Dj&RQiLwJ@lA#1fwCzki}aB}kW+<@MLv%h>1
zY-3l*jCpkSm@qmTxG(JL(iPr)Et^<tV7C`p)$FDZ$vULnFUt2uB-R3J_B|Z!Aio>x
zY}sUUIc18yWIs(cH)h(yenMiCwZX;VTjOo;X$}69)wuiTz8>6nO$;;aAW3QhP7C^x
z#%jkwMScP@P>n_})Fm{X@8qhh=Na8AF33$%H`3jbJ*PW>rvR8rKc(2ZFQ);x<D-9%
z5fH6Y&N_49wUaewAaJeGHo8Q$aHUYn;H(#I>rcdxd3%QAntxSte)INCU5eR)>Zf?l
zKgM1Hmh3N5pOQdVqJr4NWO`1k9ADdkoEkF#T(z!|X}aD~6J$#dn=UTT##FF6HIQ9o
zA9U*GF-P-}i4-(r(vEvkJqR1G%2uqd9)R`b+jAl=rvzAO6e5*gTg`Vgj^9mAsb+_t
z4c||7OJHy~9vUwcusQeX;*~@Rf)tUopeU&_R(Cr&f;jr!ZV0!DMRmGFxP-G>L!njp
zxFM#xU3*42VS_tZ+%<w})$2kPO=}BVu1>)NPKT=?Dx|7=9{3HNP=DDEZZr3*Di9_f
z_XI~Z*BJ^9f0~hGV!d?@c$bZAuZ}uoXO9_PJ@0sG*W@88!0t@w$2`yo-tSKucgjGE
zCQ9zIu1jdkv{PS`nVh;EGJ5UJaF#0W{N%5ZM4BYr`Oh)ikg}#VK(1}KcP2nm|D}b9
zHY(#j7AhMk-!VwvJ%6fBk5i~i)Ey2p>$@*frrZ^9XXa6kFvW-kzHHFHE&YMGRg4Us
zSxVEx`QvXEX5hI0bdmVK8_pJ!v)LzZI9!KR-#gvRUnm6U?T2d;4W0F-3Ap~%K<A`I
z&`EWAbb)nImTv&FmCZw}WnK{$DrZ)y+_yN2`ZS`xU)zi<j8{<`;VuvhEjayzATVM5
z!^+@TC$<*uu-IP^hHnlLBdmNiC-v1T_Qku{VJ{LuCJFu4p(6h{yEc*I`V_m&8x%Hy
z5NoGY6KOuAZiB_JLCCSgM;<N-%eq;m1ofZhK&FL9O1n${BMG`eFtQnPUp!JwCmTQC
z8`@5wO})n3`oIf}PH7#q&LH#-joWLx(_<JP^cY0HCV~|14cwZ9(h{p=)h4cLr!uMG
zHCMQhr@~Ln*MSMMGaPq?Fux;+Bhaq~)C%NOuh%R8r$k9#KP!eL6k<8QCxntHOfkG7
z9&9{<>UzF3Ge|oK0Os^)A`S@(lnVB9LN3EWB<PNR#3e-zrB1z6I6wigUp_4U&Sgx#
zT58{PC-~fC?I|e8vplYpI64Vw)Oi$k+|c|ZyxcQybkA~cfWUsfaGof(#TPtzqG>!&
zEc9ICe0%hK{W&<&$zEel+u>w5LIER~!PeZ;68Oocr`PSJGV2djvUfG0`z6ATsV&&@
z+Ut{<i}7F4g%wp>m^jiEmRlPw^DwWtWVvtsXCNogfUrb42c>_=?f-7*Cv7Cte$(^y
zlx;yTxB)fc;8p|Qn%7uAs7%4m7DoYc3}@7=`CwZ95+`r{`wecg_MmeqF^#J*USR}%
z?NKa=EF@_kD*3I;;u;fr!K1WQd~g&nIJvWuDA+}{H7EB1SV(3bg<<F>UvxSAacAga
zY>8XXRsZQs(NnR*3AO4}rI<{b)zNORK4_LQ<vwHkeGLxHs+2y0cHq6M`eVBdrrJ+Y
znp`6X%GPw%)^uMowg<c;(QG{^aO>)c<0HgEKVcXh$1yEs=Z=X|CrM_mB_;+lX0m<4
zCQP=SOF7<^@qLZFH!bv4u1R4d!yyVetzsELmp@=>VD+VCgueQL>Q)pK7K-zKi&6?<
zv>^-?(L}*pry?vj1N)FDPegYrm3%b-M`ZtgeP>SasnFdt1Cj)*4^u<fu3-QOB=C`_
zhwz7g>K3*98(EdsL$<F>5{bO$$!n0=_6zzUZaJW@J@J!m1rJx}XO@?E(FvRsP+uaS
z8lD<&ayj3+)azMX9;>1t(y~5Y^t#8ZwK=e1==GUt`BP_7Ybev50izShTC!YmH#CVU
zO?rX{^HbUqBaLM8Lf%7tc%jiiz5yb`(gRGt;VtlmanN$z!K^s8L5-0;`Da4sIdSv+
zq-|N{rTkfWv1|P(O#7nBZ)viX22t6+Y}KzpP?kV?P_tQ7OAia`E8f_R(5~uDyX#?%
z@YN=}htSo$Vc@mckkrR%$9lH#o+33M!b=D*qZQ}~$Dk&Y0*@i<M8He&0o`z{ctwjE
zh`{@BVV%?2T+Kgq&Ph&*Mu2t-<nZuSv`sFqTB8>b=KH-O{g$O+jq!FQsYOnuAYuQ;
ze3d8~j%&4%ftfiFKw|-9M`OLjxuvK;MO*y3U{ac>-6+^MHv{t>JSdT9=9m{;B2TFO
zT|gk;Q@az#oAColp0j7qwTO~N7H)L!xwa~579GFf&kEfhNP%|s)n1admXY-5;z3K6
z&SG&nW0C=E{A&3a{=g?_3mb;+Qux$geFhQQjZGtXGHH&Jz9?E(#pneL`6FCCdNz%s
z%~*G1ntemeh<un(05N-cEP}=TtS8wA9LHYR45<uG+Tu77TIHDuk0KbCR}&B$M|%z*
zzE({2-q`01sZX0OJn3pNri(4NXB#^fFT*sar!<=%vFWyVCx-R2q{Lt9z~kM;<6A!?
zSLHsplGk0|L#xe)2LE!UQ&uFHm$*QQU;iax?VB)(P`$eJ^T2^5A*iE-y8a+-E>OP~
zMwcC?GEk48zvt{VDnkf&cOXq)unF?J5g!hR$WTBns@e0=jhm1>uw=EoE^wwp$b^W1
z1(YT8rhcOcz%bt@T~zUWt>M@ec8|mMb+%jQnY}H<No=5tN4yo%F1ERbI|4%eL1hmQ
zQL9RbD$bM&!B1ga?_Q2U*S<FY>HYrmJphN+DCuNqaxP1$nq!`lA0sCbkl2B6ZysG_
z%FB+K8J8bXpPd|9eOWNXJn5l&c(Ievcv-x*!vx((?WSt(sEDNlH?XY>1Oxz%i5D2=
z?fuii>*+X~b?Xu+0=S(LREWnvA5XTlG0rT-!vmifk!<yE9_!|zmx)UZ%>B$<4*m`2
z+`x`+qIVeLZ>2!@)Z?6o5!M)$pcbpvADpi_sm-kF$cgAMHZ_1FG`*J+I)bDh#9(cp
z&DZBWf(~OkZu0bJN9)RhtFELLmZv#dH#NosUN1U9>?7x=s{D+FgCbeoc+ggY!nY~}
z_nlsr5s0upuhNth5R=d;C3F|%#QBtf49np1m~=-!gfu$f<~IDW*t_3zWqa{vd(G!Z
zFbXvc^YPZ<=IVuL+Ou0}ljFvI3!nmq`)Y{{ANfkl>RO&XVpYP|(Cx&ID~IWLe>X=^
z;^%3I5@)s8T_X_oz!ZsWJ<0epl)ol5@963z5t&lhl(TXMt;<w*6;zKK*ef#RlGpL6
z9!~BTK3NAZYI25H)$g(tXR%<W&)ATI13}06*N?D0Zu;v~3ksy&RRRQ%PFMR|k@S9I
z09=KLe2ETG3D>wqU58q#+i@G=(eGx%78hQdEqbhm44$!b$8fzCt1x&u-MM@s_5`fB
zH{UV@34+)S?DE;oDZSc=&Mdn&dG`!_3v-C$1~cl158`ETE37zi*7C_CHGHuzPB1wz
zF}Gh!i9Vwho?emzdFju1d(m7;zQpIr5aP62(OB&Ql2o9NL72k;dft9<?(*!OOQc~b
zK;?b<jrN^1m&{6~5IT|4Hy~=;V<pi6hn|Y^WOK-=m;)Vm>H#Dn0rLZX>A7)II2Wv>
z6J~n9eVsb6^5&)xKGP>5=~58qGdRpE_)&9ezslECf!LJsWRscI+M|e~zq(?;8k}jS
zPF_Pq;&IbyjdrfXJ4XB{&}h;bN(enkvd#bnJF0Pz_l7SI+ci~vud2QH2*vLdO}<w}
zW*(S!WTwVcQdRg>8z);UZt!5Eq6xurJFikC66gi)_4aDLWX`B~C#eM~%DOgI+2^&F
zg97VOLQpwV_kquv@x&imA{N(qENTHFxeY&fIxqVHk3-%}{Ao@WC&_I=EDNiz6=|{L
zY=N{uWz<~v%X{#YpDU`zMz^fpRSE!YMWBo7?_Fl}XHP@})a_T`ae+m!LhV0CZLx1k
zeUEr`k?y>Jy$guon$1$VkfCM7mX3#!+-R@$bH4x%!|VncF<xM)lSp@gY~Fq7!pSL|
z&(tRUrr0iZ__sr$A8&!9Cd6cn{-B5e8G|W*^?8J+!v6CBq7DA4XdBzt3A$F9YT9_e
z;r${SI{9$Bhmarb3(iX2MCsFAFL~%}sKX*$OwfIVADqZ97)4~WlgG6NxFJg<<zSn;
zwpyRJ0o1(9KuGK$k5%fSB}gDrQ!K|JvMNS=PJ?2lxx2u8?Vg5w;yU@a@UjX+M2^R7
z2HYPXn&;oJwP~4AHlMaabWHgw>=H$Y<zM4u&L;fw#6^V3N%b__c9U=<x9NJ@_`DY8
z%(FQ$7BS1nvLhWet?5qY61qC`b5!I8-IwqG!G9lWIzdtY8s?gQ&3T0XyXVPC*U-W0
ze;+-gm91^}*%7{{YtZW~lI3DjwYSVaDCJqJW{(q~%$&)T>w(yJD=vhaft4!0U$Dps
z(r7P{%1G|GA0|Iqw@L+o-zDBj*SzxcJ$-z>M^0p3=+NoNgD6l7<Kf{M-(qE09vQpD
z|5*scI-+BOf(n(FYR#)dhr^`K6f2Q)21-wsf>_Vp3WCINRHpW}ZvefrjqS2{0LPn+
zqOfp#^q~w!Ddt^J{AHmBTsUMoqDE4LqALEw;Vz+=AWZ}~CM*UKgOJmWLHS8Pnl*{{
z*rj)9J*|`=VU)>GM3QNgK~hRbFfVGG?_5s1e)XH@DM=4j<VF?$;F7;cJ77-pNG0ah
zq4F^}m}JTXr7Ah2Hm|X16?-miMkzA5q4<_!F-=+}vNcZ*+eoI4t=LxBo*e#lGB%hb
zcJ-(F=Q0Z~g}MhF1ImzE6=o0E#Pl!`pSbX@ML<ocW)E*L{(F|JY)}@dWO}RjB@eM=
zN)jx(N%KP<*vkf-fSEM)twTOlNq0G-1|8cJXa!6VM4RJS6;Tm=#96zwJ7jn6MVmZq
z((tt`Nyg?RMyZ+`2D~qAlZUwv3vMiKlXn}@*X}|`CBuw05hzQ>{khvdhCBnD!8{<m
zHw#362VP7kT=?&!J)1?KPO3v8qLgIzm<j<~aF5%)&WG?&)KC-8nB)B+ar$;<+g$6)
zk4%3D;d=fHiqA`T+iaYZI(q%gT`PMQsbKQ&Ki-=?D8#@K>8_3DIy!*14JWFuGOg_c
zTXEE#@VK|-$e?JQFkx1FVmv+W0l<LFwR^inp&{)r(O-K|YGf~lhJyoq|3LY+KQje7
z#i1K(S%&wiN|eG}nL!!dyLOJSIP5$kuS+aWTjg=TL;G8K4ip&s9#iG*dr*ybV<_Y2
zfgRWuDSLV^I;agHa{h#rW>V&t1Bf%Jj&OZ{c>!$XW)r3S@B+cGTo4a`wllKKUB#<y
zgx&#_+8RvT6w(T{Mh|~UW)x^w4^INbczWKn3|zVbMsixeU>zh*1sC5i^Jw26yMl85
zd8F?2*UtO}UAtGrlxK!){UJJhGKxNT%V_Y^Qq(1z-(WYi^3z)atQnvx5T~x4h_iTY
z1^-zZbL9o1&9x=&V!8nO+w)Kywu16WSzU<xgNPwog=S=DrYlYPF7>sIm&^7}<q4^6
z^Zu3SzngG);FVg4Z+^;aigbh9c)~_Ct#v81n|e3ca9h$Z&@%BXcjK7XJBKv>-tRP2
z#thpna03vWslB^UaBbo94NM;vaitH4ol$P0u$_>T?a)5=R6ET|^<hGBT{4qai!|IH
z*zujQw+VOGUHMDGSW-iqCn%tSL|eM*UT9eHO|(6z);4E2*V{M)_51WFJuKFm>;)ph
zDYheQ7E6^}xEiojEwGlgHzTydUTe>8J_9ay4_(jyL-7Dig~Px8-J0Sj{?9C!uAQ@i
zrLp_}-inqqej|I>k-n>S`<nS>S+RRSR(TrR(CiG0E_g<s*QU3x$o!klG^430kWjf=
zroNvu2`Iun>N4}zHahb73F9C7(@!wq%3LzQ%o8T?y}~x9QWCd2T=}xHT|M~{hEn1s
zMt^k=;bQsQ;41brGA}G)`^-n4*hx8jQYN&9(;N<KxuAB@>xef7NAZ0wYC<i=gE0bw
z{fQNe{R`2|INiXY%TwSxV3~xpeB5ql!+IAU(N+B+K^d*w$^h-twnbfrde=7<a#f3@
z1k@*q+Cvml#WY;rJW99Tbip+<H}mKdm3LaW1c*isn@J+qbUQYHw=lUF2hHh$SMQRB
zotq87N`ja!7X)igh0?;5h3)%n@CB}ryWuBQoqhWImNYJ#*=?Um-7XjJX~JBOY~@D;
zhZ*hWmKqjF<GkNU*%9c3wb{MU>kcAL`SFmFfN8I^txz&id0S)l2F#(xZ5%N;bcA-0
z-aEQQB+?1ZXT6cEPZNY!M7oc{nM4e81zTj{Kl{$Uyw_{FA<&-PX|N-?63B=6S*)Yu
zkjr$6p6{*~s_2L}xOB5{N7qn{BVz&$N43hk^h~J$@hQyQU2nwOy^Ubxr_5tb7eXFy
zIdhu*z(7*r<fLCb>S9sx#EaCfPLboQ7Uuhkq$>$hZ$*6Vb+h+8Pa1w)ctH4IA<!2Y
z%-Y*X73H6s;MGDIm;8l)2jUPNR|Y2+6XEgx<%}(MXQ-#}{7#0js2kMXXN*O$hrkTb
zHCX*sk<z5v`O#9WMYC%oa$t~T+(^fOe`7ru+3{4c{a2qkOu6tW2bGV5Mk|q=BHrQR
z96^(Sk151R>=GbGq5HmtQi-)E6K8`8P{0snz4W>}3UXfJIHQdLtp!=|5jQ|zV6sN$
z4-;9A7Kx}M@*vLJm*s1b9b6%$^jIE@FqmGk;`-s_>Qrb$69@~CPxj9Ei=?W~)}LvW
zR>B1I^1}Lh=%WJY9VkraoisDELZ>pOF4OEi#R@eQHCasRLTGKD@SBuGG1HD3bP54f
zjwD_R^eABjGr>VEV?$WGz_VCj{L|W=VzDf}%n95Zshb^S{Iy{v70ldtaMXw13j7)y
zGv>{_HOXtJs~pzM(PRIe=Cj}`buQv!h7eF|X&waA5ZBlYr$+7>akE7()QX$g(ld#G
zu)$X;#7jZ*BmT4?WZX@efgDjykeWd59Jwn9uyw#%=THPW(|I+sVMUj}k^;y<S()$W
z`+;vUbT5VLU;+V<NM*i3P<m@{J}t$!k)oN`UDhjM0^f>-T#hfV(6^w8MVMoDV8{e}
zZx5fvEsp^pab*H((NYGyk3YS{t|d~2h~V|?>7I`?HNBcM){Y?aZ%#RJrqfgkjD>T8
z<3?)?$TE8{O<PH%!2IFUwp5uw!;5CTG(xq;O_D<f053~`->ag=*jILMX-=GtSzTX*
zvekiuF@N;#YPxMEpGAEtB+?i^9~Nw?0>zR&6_lqW<pDD0lu@BV8=;vev9vl?C}VNv
zS+yS2aavY1EGRC7+QZSm`irF@KLf3D_StN8oipb<nxSDXF!=6Mab}C3rVarrCdE97
z{=v))Lp|svwP+5Y@5`K_wXXWLcWPo{&Mz0wdx2_)FP`Zh$OYvKkxr4y{Px&@L*0}0
zQEe!xV<@50lSj0}f;sbe_rb5J8D%6GF%{n3LrW;ywz{Cm4`P`Bjf8m;7mr1Y@g97|
z+gBWXiQ(iCeiBF1H9|D#G4*@aOj%2w7Y+Y6CIhxU7=eG$6H53R?Mf9OE&LeE$J<%i
zEa|MAsz!DuTt(za+#1z89Y}@oE4tqu1UA7fc--mVXVUwSWLv@#8Clu&dB|P0`jJce
zN?uvJv!xcPZV%F$pE2zCoOf5b2<o1y7)U*aBqa%d;-}-pXXQ{ZTJaW<-L#8$YDWPi
zoOw{F>m`@+k~3n=>L2hjxGMSTt6O_~=%D38_?3O7-14y*w6F)YFi221|6^YLdPE(@
zx<S_T0MqK8z6Dg*uOMR&0BG^lu3H>afNbQSW%y@81dt2WsFL@=Sme2<K+xSIS{qY&
zeS|iI2_Vk=<<yTq;QQW1$lzc?IJc`AB@v5F0o>r|oW>U(cB3i8XTjr0A>!(;KxiMn
zdxWgJ0F2lx&HvPF1=#}z2$L)ZLHe(j8eGC>mJ2ek5eM%2Gon8Vp#~y_0g0l44xnDS
zhtkN9i~Ae7xsQxhvX!pHu8Z&Ceax>0(ewIW03i)i*!|f7<H*GUlwbtH@bg+$Nf!Oo
z^0ZuP{m6;PfKjZcoYxo*Egh$|SqfetnY$<f^xCncPc5W~=J*@K{_r>R9NXr7RdZor
z&&NpHlDyI;(OEuikJWKOFr~%8gWHSq|1e*X4!4MGZ#OBx-@|kQg%g27=|bR@yEDV9
z2dbKX-4iqw`G+8*^*Yb`rb@}-+=}$FmW3RVqG}4E752L;cljoXvAt}T9YfD6|6Q!x
zG-}dyqv!y#j&H2*t!CBW<>=<wH4kTvfs{DUTkt>%MsRzbs$HoEx$#{ATvn#$Qaf4I
z-WSvlK_f#;CHkm>-ikoVnfeI80)B-}iUtMVZnfOew`5G$IC%2{`DlZEfXSjF2lV|n
z9pO4-BK($tumkybZ6Pr{PXj!<tVA5a<jadjREmcOAulv?i7UF0CT!MM<I5aMPboH!
z4_XTF<35B%%!h-9%wJd2CkODgQ7;Lezw94ojg7Thi@jyy3;px0S02ar;()9we5lX4
z!~^JXyt{Eu*=^}vl+n>Y1Cok^RjlIy_r6jh2!v7ee;^o#>FAy40$@LdAQ+!55R9)n
z0Z9w@zCv+*Qb<O(CkTV>%+&Uj$teCk3)vc7-iQhR#=lW=Ai{_3i^Wg6W2xJtZ5x&D
z;da%d<gGh~(=Bqo(U-%xZk;wO$z%`0oyNR;C^Z=moV~{CpZk;KPqMR^S@7`MS+Qfz
zs@-4$7fRnr8GoO;bDLih$OPSp?TRv(Ah%r0VvE$>&_j|i#gLtycGEx1SLoL~-xsfB
z-*rTpgH&$kHV8nW9fbq4XEQG9aze9}hD@}$N8o&)8;9q)d@XR7D|TF5{<CoPge?nP
z?nA{rBfe1Xk1?AuLU+FSU6zUYWIT|csRI6<jfzqoPbcKW7QE3Lq}+Sp6mOPu-(h$S
zM^7Vdno-qx9;Y7<3j&21)hC)36)D(EPmIKg5l7Gpps-s^I0qLbRI&4isvs~6zt`-=
zyq}o>6LG1Pt6CErwfRD9x^WR{<q-NSG|e3?XN0jC`=--Y@>8&r3sOnHQ$RG<(ra`Y
zcIECN>7KIlA6G$YEm9#JI)ZXHqjB^D@+|QuGwdI~G*`Lvp}ot42$4;fFXvfWZPfy{
z|0$^=fx)Qb{|>d3zku>T47F~$4#xKXJCcl6mbcv(Meup4Njt`cL+INpuSk+|L?Vz0
z5`_7asdF<{Kjqg#-Qna4D^T+JGQAE4Be5auUc2(({V>JG6uIG$2kPCnPRTk0<3vZt
zm+RYp`VFQZLa&hz5kL@?{0XfH+_h<>a0d6t9!ds1dmDtggjs?^Sg$3NQZUONtR*e)
zUp9ApkIa0zr;h5jd<pOw$3cBS17VK8V&*PA{QDCT>pekH1xxc&qE*crA{1GrPeeUL
z{VS3%3}j?r02M>w)zqZ)Xg~yAzn6FO=HJ4#z^FRNYP?RKau_1fPZbtDWISB?_-AFy
ziWNtK#cYa8VQLHMQ02&pvEdNqnsXYQR3S$e(PzbE+=%SMgPqf`KM#q)Rk2AMV>&^`
zMMX#na#Jm`nnUoKkH@#W_4AL+2Sowf#93>VBh`<r=kuX=B-r;B#OM??nxag0-7&<u
zZ1qFhK!_I`(y<x8goVc0D(A5k6uAP2v4IQ?{2>y7yo3KDxKhZJ8YUJ<u<uE!IYP05
z7qt}?zuGER=DbQ{m9R{iX>Zh0z(n$zi`n?;+BbBh7Sq^4Jvb9O-(w*B7BoJ)6#__t
z!@N1Mm@zWbg8$7TXIpNHk(5v)ew*zHZuCIk=nd?ZDy6QX9;65+)^sAf_9}=p{XnUQ
zwc;x9eYqU8!0H9x<#DH6_n?}YLD*jweb$+fITvDK%H)Eoy^V3i4kYZRW;4psT$oV&
z2TTXCtp(;zDCg;kaS}U<<3{NsaCLo;#yrHd8wb*~;g2DLJp<CE`o;t!s5SzY{%Vo6
z@0QOugT5^|7#A8!5HuZz2YJ=bBdt-Ag^bZEgIA@2B+=xV;JPC44*^Pmo@D@+11Y(9
zi4BShib&M{h)RCUt9cv^ChOArq`}!ig(CS3=1Zoka7sxVA-da+IlQjD!9W#Dk&KOI
zAM0`Wz*)~AG$w0sou4X_rIr2@wW-YM8Nz+HcnwxEEun+MR(0Zb2PlXscf%U+>Y9nc
zLi<C{ox(eEh|F8Z+%2RW-zsHqSPw+h$1Zv=%uQ)QI;7Tc;c53m_a^Z5UqDijDW*)p
z+=gT)AE1-9uKqIaZl5Knw(Fhg=Cc!7Dm&ubWPP#Dm77U?mDdpjhdUy4gVHEk1fPxm
zn(unU!?JPXf6iUU$9gsI((`iK1>Z8B2x>#M>gMpU`&A0KwR~NjuNi@z7rcXO1L8R{
z%RP@%Iw57pb_PzT89Gtxa*9huq<?6P9(`T9vRBqG6ib=>aoxOEaMsytPsjc9T;+q^
z#fnoxe=zqjQ0lky_p`f-(ku%Mw}C3_ipc7HCHo22wsS)xs>|te$bmBdYlnX7Sbp-P
zBO&yq@CPdhh{ym_p%U!W1VI$g{b;AhdcmHdqvR#+f%DjfaeHK`|NDQea}4b(K@0-`
z0POt+3H^r<Ap>V~D<fKS8xvb)B}f3^?Zn?bV5w3yXE$g7K#<el5TgJ0F^-#n>ZeB#
zdHI6s$&(xkj<iAf6M(O#RTf10mw?s!z=?8fXG1KZ9M&KE_r4l#$pLNnfZf_(3Uc7W
zTDXLVr+U84?|m^Zcr=&ODGMpaoX|;wLkPmFxa9HyzOrIj-EmzsEM<t)ZbzmT%ovy4
zzYxesaP$r3jfdSA>#7!XMPW>k(f0{fo`hvdv;sVA5P}QAi*Z`wyb7efxs~I(!Stse
z`Pxli;7&gR9@Y@lULEB{plsdLICNnU0dT8bF{;4PHSoOueZTR(_+nP%w>giq{vR5&
zzSVzV9k(>BW7oxzep$!TzyBbpftVcEHx3<;!vV(f5%lztjQP}k%zN2}pVv*mY?^+&
zKZb0rU0bXf9XYf4FgiMNJkHA~*{tE4;LPZs107E<pBc1zygwc;GAk~62DWhf82PtN
zm_n6Lf3VaUqGIm0;R^wywEip`34&On<lh3W0b7NwW^ke16B-T7HONEQ_eD+E2&8Ix
z#lv{bVF7#|<L&8X^*tD}i-xU+zsP`Sj)?flpg|efao2td?Q({g61X|-^RVQkNkplI
zfOlhHxz+lIf}0vZ{ooUo)xBA9Yg-kcHI4FxtY%yZ+n=V5tlr&yB1EN4Zj9I?d>OKP
zd3j;Kru_!=0`qOcuKm*&G_8$=r^V&HbkgC>Il{FD`H3>vxC8%q36=^E)<?lw=5f6U
zJ{Tf@gmE<sKEZdvajf+vNHfQ6(L{-;!i;yN=?=sNx{F?zQMD!UiPPl#CV3ucAq*d*
zXB=d+T7wOEyk&E!3B23o0`%d}Z{Tqq<1iD&E8bCgKYw^+o9)**iG|x8SOe;+i9OCu
zvE1SW*-{<8c!_UVfOTB~zaJ3PkCL$Z0_?uTxML9R!p;60gRlpUtJQUZ;^QoqIn;DL
zcpAqkKsR|^toukGCKSSvL&N)wE((>Fj*2@bek?TB#v9bN-7%dD`h9U$GlU+uQ_tRb
zpSe0zP3JkaX&hhKj$5z;nnPFYnt5l&vcy&~)36AAy&vm9j)@hm8FxFt2zyV}%0?}4
zJ61~kBqQP)=;?HQkg_kr(DiN%wB9Gfkri<k!fk1HYi)Y5%jyQbQjbz7R}R7jnW!d_
zH91zXI~eJ@e;>oBu-5+w(l=N2ItYF`A&j@<4Gz0wh6m4!z1Yf4Y%xX$rPh&#7{N?T
zmrdi-ZLQzdADcL(rAz&E<km1QB!Y|EZp!JCs#Ve?7Kmbi?5%gV0A$dv1U|I4=x4LT
zuFY8$0?w;;*&ThXTe9jEyM7ahpC`SRIyz9Fq#>&USb5i28h}QT^Fqk`8CmntmSC!!
z(}~A$Q*NGFKdz8!NGiVL(ze!E1C>^Ox`;lZz);AcGXuT9r(30|cFHU8(657%M8cZM
zO=1~I?{oxIGU@0ac}enB7Gt$AopfhCpA9u9CvRg?{+Ex?X8DB}jcqek@I`$C>AA}%
zg?N2wd8mfR%p^qxS9W`FJTkr@&8TaxJ~q1^RDxm%wB6>Kw81!(N1zsrGkSvc)F*4o
z-l;|4*@?i?(p-#)>5h1=Fdu#pB0D=d-O*6WKZ)JQfGJC94v8tD8qY*(b`ouJl$hZk
zMF}Z?dC@Y8co|VedlUo3l4M%qcqN(%vV{3stsOG3@;Q_^YJrv(pn<$D;DO{L7Gnx|
z9J?MRg%te-d5d4tdG|Z__GiB!zwFyBnQPN-YKp}|xWw+AQA{(o7$8xK8bIQ>Cc!Xh
z8v%nrkfONaxHO2;z%OUk?r~<oIAMGrRhfc>Q@Gc(MY0r0Mpj1(R$f-=r$j(m-V!mY
zY@2M~l#s!Yl8ofotE7;kw=8c1NHOc(g|T;mF9qS1DFT*TDR|NsHfQQ|yp(U)NYAKo
z3}nif46eCXpcq;afJzpGlycz7tUcnP&|W5jTG{>n4p?)c;YaGW1-?@!aACpYp|Xli
zjRP_$6zhE|V`K7uZ^(%423{J;hzyysj0{x_v1#lvwyy$^9Qqe*Y_`22Qvw%w8$I?J
zDIte|0;<|4(>OfOW#Y_ySycqJm3G|Pe#rRFDG2&q(q7R&vyjxUy@v$<i~D9GoHn{H
z;5?Whg#p#b!BHA4^^Tg%9+BMp8WI;2`I9`350bPD1=(G!*pOLssVFQFdH?VqIhbjp
za<+DiG)^^0N-{^t(ixu-m`<H)KXn2sYYLwJILjZzzZ?cQVlmkWWR?a<JZ=9fjMI&@
ztMW{`@|5*J)k8E3OVvwG7wnHD|B{@6QV(S~@JAHn#Gtb9;9NL?hu8L=6f{bOnvJ%P
zXiKGESy^$C!ONLs6cIKIij;zBMP!rtL`<ny?A`?#UmcpWr)EaRxnx6ErBBE&jQ@$8
zCNXIMAU<2;cW#hzCg7|;w-h4e0-ih<qWo~IrESUM+#=aTZHI1~(5JE;3MdS}IcshZ
zYW1#<J}^q14~xE6aqxmW#CjEry?iIcs_a5cus-qe3EwrRy;s0o{DE)a+Vom(7$Tdk
zMZSau<@MJ*-hdlYEekA07IRw@&N}a!=uUhM7bSJ(f87GM_wHZa>#Nye(s)GqXo!3<
z5^INl?SxOl-P)n;3NlB=6~LxMOdJl5BUIUaPSJ>d9(Ha4uh9W4`hMr(JkwlR6}g2f
z-r<`T%YB@BtOn=X>Q{#U9`y^sj4JRP+2~t_*MF#)V?ob>jfH?=6Atk%#>2)j+!y4=
z*M0rR6b`;hU=R-$@Q~dau@s*5gP-LzNwi<k%~s%D0L=k+st0;P3u$F8r_0(#&m~Xm
zZv0eoxCFWo<S1LOJ!N#p$l)Q~D(pD7(HyZl7GqQ4VWtSvRG?e@%2oMPXdeTm;K^UQ
zyZz`(<6f`6CFoLrq>`L%4a%E&nfhS3;ZE~PBdS{r6maNpA^NkEFRo=d8GjW&!<t#M
z(8Q}DZ5Lc=T3DGt(t>>aL}$4-&sr0qvmgiga$8|EuU6(Q2deNzsK@k?)br{_w3<)?
z+_)R<5uOD%MRqh%^oi^JbYJ|AD;z-;GPN?)c4n2@1vA(MLS9#OJ-kx)H^q4BG(({s
zNsnU-igu<Y?4Q@KSgTuQx^wD~;su}p1Lhit{7>TBF%$u^!LhT7Ga3Z>gV2(B9jb-6
za()os2SO=cjDJ#Gl3Z3U9~nvb$b_5M$miq-%4B<)?rUVS8=vBHB`#4yWp|acc)(}&
z!Y)(2J-?yjG8P=?@A8ENxq>Pcm5UWW;z<D|68MvKm|P1xd0$=(nh@bf%apg2;)5#}
z#s;0b^gY>*#i-SMP=&~{MKhA)<|DN&RiWW!Di6h#0A!0QZHe}(PP~E&;Wxw<p@%tm
zr7|9s%lfkSWrApm(|O6c(Y=ZZtF3Wz4a|BIBPxkGT}8O-fXT3J*5?fy(|*kx_m(sg
zl(KqBrue*z39F?kl9{`=s^7&&I>nW#tY~Mgz1qTTPM{rP4&oQ|e+Os>q4OABzqTkk
z@c)Qn|0|`{$=&WhnAoG0^ljJa5x#PC?F|(~5TpcIDFF=?z~whk<w3R<eIf)6!de!?
ztx6E8zHYe4{6hpNzLDO3^%mDQvP@W5O!~0Is0Cy4{H3!-zBQE#>}x@w7D)YuH3(Af
z@4sG<f68DCX<=H!2-C_z02K)#d<p&i1tl$oz578R@r?oZ@TnN(0R^-{ElKK%u>j!h
zp<;Ews8iyg3Y?6@L8;Az{VKf^#PeW2Um3znN4$WjC<nAUlPE;IVg<NUaT9p{k)<c}
zM;aU(6khl<<#1%Cg(=2Z0HP)=xKo-(y<u~g-3wA6&#_D`Sr`wp2O`8HJ`|}FrysG4
zlH(Em%glI=XXKLv2GR|NF|!KV(Gg-9C*GTkl+HB`k2>9iuuP7s_mjv;$nK;;m|21w
z)VJGe=7gH7h1xtAdV)-K67ZHqQZ<1r`(Qu@1&ek@j;MIB+?TP*0yiV}6)(2*W$A5*
zeY$T&IuRDct0bMxQ33fQrz_M0e~?=kpA)($pfirKNYmA?DDqr3hNm={se@$RCc!DD
z;a&AdMB*Qed=X_b&Kz<%G;<W5pf^*J6tMK7GdbDwY^tUeXUC~ZQLTwT1xU`sL^fAP
zH}(s210a{!)1$yF31_$n#=7c$%&c1by}0sITaU8CaNsstrsICHuUAXWUZyuJ{Nqz~
z7L%LM6vii+N*m`(V1=Samq*1yMdHx#ijY>KCk8af*JqJ&TeERfyVzaI)%w+gE5}ue
zcWYNck)n?=Kbj8a*fqgr5wq#gay4U6XfZLZ(1rD6Rj1(IC5%nakKLan(1_44k2!@!
zb0$}3<Y_aTMeDNY^t0h^t^<cX4r*VcS*NYQS4*dvNT#E^Z8)8DD>3p?DCNRx@5bKS
zMW7d)mra!mqHp5t15Zz(`oi()-O}6bX*fHba;!~mqSv9|F0&ti|Nb`a@e!w4Apih&
zN&Zi7Ls#GFKU^0%`Y)-H72*5$ZA|+Ky5RKuJN0Az3rJ!QRTHDQI=$|LgpwZJG@3vr
zAKu0K<ISCrKpviujStGYNWQB^h_}u2($7`DwT#=i%dBQC_+lcE|8qQb5jddp<C;bT
zp;aBmmmRaKi2f;p4P_$zM*!Wq_mMko_xHF6G2tFgx+^+@L9|xrD`L9P<%|S`lK<Tx
z75(jAH+JjJC4d*Kf!aFOEijb5FhVHpCPa4|E?~XOXhgt8ATqUTj^ziOzh^2fduvcU
ze$17S-Ct|gRg(c#tRMqEJ7RDwSXuCcGkkY6Q2Wu@V;f<i7tUgv-s4a`#jKV*C)BPh
zmz$d#F2DtXh)x-VZKt7s)k-A|c~Y^kH`iDH&!IH~*%^7d3CkJzGENje8(n&}d8~8Q
z!Ap{F>#0q)Sy_6b<BIl?k?wN%@|4!cvQ9SNL+ncR75Q|roq5jYT5~VB&otr4on##=
z0i(MLoT<SUq`_L0|Non`7Si3{=i0g1?Ba~4O%nIUmaJxjmfPE2yx~{Lh?(KM!)&TP
z(I;Y4huhs7U-ER1Jq)8mO*dA|fv2Ch+%xG^@A?>WaORW|NCF^@967HwQ^|Z`WK3rb
zKKmJJb<qa6jCx?6r-Tm=wruro0Y~V&F{3li92A5OcH>}`@ywJAR>6?d_Zk)5EjW51
zH`v2$ES*=V)|c)3%TOc_RsGS_sknt(SePG4V39tKCJLQ$yg+X9QvXWh;tI(|J+9??
z_=ek%JhP#74I>)4eakoNAa|GS8dZUIG<2oWw@yNdouQzhc=xJT!_@P-(G|pCRfStn
z6;ybf_~Sa{^m6En(k5uozgBNwgUVPikX~{!fPKEoW0>7uqo3>{e2%O0M}#8?dhF}F
zO!rg~#*YQvFP^cH;pPjMzM>yR*hwP|LFP(X2Y%RNwrltzVj8uVFRZo9c5ASV1@h#+
zwAA&Ql|moymxv=4sLq`vdUkVSQx#WBQJwWNo>)ZfNh5^-?PV#NPE$WzR?gh5)2B&S
zhChvE$$*=pO`G`2PDb`w(aY~&ljZ@^XAKYs%qwfI8{fgs2y-4VDgT$<%A_HyY;ovN
z!#(ySkA`Ir1IkroB}^5}RJ%bzfJE3LDOh`GF5slVDBc8PPh3otvz(+}Ynx7_-pFyM
zc)K<*nRasS^nQ_(Ewr#=jGqv@dx<^iiH4Y%L=>~W5(h7t^jdI|hteY9tJY%JaG#U_
zu0du9><xr{QrD@0P&S?FU)a}Z*PXid74;>8#tN2XL5bu(Vh<%Me)h(GuBj$=!HXvu
zF{{-1JgJ$i`idP8zxcGVT$b*?5@GQ(7#^0F6a^BdxP4vD69pY9VcPdXZ|IAuljo{`
z>|Y|<z!a#}eG;!b?O@sqxk)ZT4E8uXI=o|CK7VHfBOzua+dk;pR<w7gm)^Tgr+$4F
z8-047Pc1@hsU%oUHI7f-*)(r1Okm9{l^7MYDTI}6W!J=RcS+6WR=4`dI-RTQSRH@O
z><%%_GE+oE0aOv?wBMB5YtQ9AnFor!eix$;1N%Q08(|7zy9U7<?nPISl#9pr^>7(G
zvh7X_=Zf<Y#9O0pB~e}=)g+DnY{}kesCTG1*CwP%@TivAQlp&9kO3!pXM2g9uNypt
zJF|SVcYksZn@ZZ|n?K<~<?E`iLtxppNS_^|peewFQmPz7DH0m*QV5Ftv^G@aDS4>6
zXDR0v-F}7JsO<b;8AOV2hB&{9QoWQeQd>k%VWKxlDIF6NUhW4(@pV-zYbW2&v6K1W
zI#rd)3D^{^U8}@V5jNU}J5niWWN9z4Bx?ZVEWbKM?_A766`K<$8En&}ky>gWiRRjT
zzSWMtuRtXd5x|ax0aa{Nkr<@kjSS*0<IMc=lz1Y8P9sZkm{A$xp_uxJU@{5Mxf?|G
zF4w$yyZ^eJsH{wz{292*JvMVQ$%Y3nWU{o<DV+=H8$IWWq(KVm?}6W_jRnHJabz3e
zb6sQm)Xp$4J}D*t+hPl!pnVjQM>y@g<g&CD;^9#lPO-#&bTF@zd<l_+oyyig$?Hyx
z13WV!sc}5al3+N3S=4s*NErz$VN&VwLuakJ4w2^lHP}m`UF|?t^0}2n!}|?TRr;zT
z-X}bI&C>i#z>Xh}t<yUc&fhXEb_~uUb7&9&ATHUxBg5qEsmeGHuMwWUAGc)Yo{2^)
zfk{4cz&d%Rx7;#4nVyc#=71wQfc%xRN_8F5UjkCm`rhaHnUA|4QJ?!-?@ONjC$&rn
zL<f|Z`^v>6t6q*CSXZz|@mv7OJK<=FdBHkdpC)ZjgyX|>plPBVkgHpL7FG*+Bqn{{
zZ7llX&LNZkzfxhQ#T$8SfuTQQZYyj64-uD<1$L2lU)Xw0_)(}KW#tjKCjzf#_VAFv
z$iHE=0U9uU(Gq$L*@z*LwzpglV{O*_-;~q)d&U#lQAA%Tj@G-&`C2fPtwQS5sMjpc
zF|Q#D#D*yU$>ZpV$eJ5X==bjllIIUzX<BNW#ejYx_oBoGqNb6PBu2q>@{anwPWeO3
zL0m9{R8>Bp_*~F}o);)<4x8-TRm@ALaz>gWR?pm@`!bbw97<|c-wU><YSM|}=^z$g
zhI7)lD4u(KWo)^a#zV2ie9G%TOyUrj&tR3a@ws+?!7;2f8Dr@Ub(0Av+m|Ln*c-JC
zsHo0twQ?=y!b@<_8=5w^#WT!rcJY7Gr#=1a7&o|mI8126-A{gyW@tY&9Ct;{!Q`S+
zcc-vYqSUpF$>u3^+Dv*-wco2A?AU$RztR2gpyc8_g~;v~tea!}M@H4@KTBRs=;ptE
z@kg$n{p9kpzYt>OqBLtpA_^rFDL@m5O$sCvy#O}RQy!NgW|=?TH&d&_!@vYr*W!@$
z57(Z>8kGEy)m=+nwljYK7k9e7y&W_va{KK1@;VHz^=3nIZoG{X0W$P!Z@qN<ix2p7
z5!fFwOut=OtMCa5mYT^XkF22bxr}*1C>Ue7fudO>5%uJ20KA?B)ihpqJphBU5VQ64
z9n;p}fSYrEbL*O+k!{-?tR}MQTN?s{@p0qB!=$PIblU3?)CTWXcoGKlK`0<twp2$?
z_lCW+{&^Swb-(tujOgomhTR0BB5V^vsC3F#ZEtNUb1(Wkmh8Vhlna-Oo-3jC%?sRG
z<lk<(kjbzc-(tZRH>;{^*)&HqW6|$4Wt|W9=z_-ZR8vP#M1=`BV^5n*&g9ulYdv+d
zk-peH?Y%o+U0o;M)GV6vwk(1xy8DqaIo-mv^E961S-Z3!>%CSl(d6aaLQ-UUAJ91-
z9mqO1&)aBN14}k2b8rOCYtVfv0%)mL(IyR_>~rORP_xsG>N3qXGH4-$oz-(i^R`J;
zFFI+5Mna!Pty|*|6KDwMzIBtnZl;BkcllH>G240=)4zK+*y=>vOuAf1^2yT2Tc391
zEfsWys<9_B<qx*P`~$plYG1j!?hV67L^htZ_&a-XnniEIYq;(fh_ALscFm2F!{ll)
z14VgI*F<`i_$&A!M{PL%VVb(z<Y=8pH=J_km?Q0|??n!XuA+0vihi<wTWY;Z?}8sT
zC9mqP^K4^7XRYB&+rl!}I#@vP-Z^)1BCm7qC7CqRf2(yOg>D>`a%;=KptX)dPo-9t
z>R?O2{>7;yo#t#inZSjnK2~tN5I-iYVpsYVTj%KJp(CB$t#oYN(hL>3!`ISo!_;(y
zC6Hh%Td`foa;gdJQjnk0$j3zP$XZd~d{M_-g*7E4L}m_O*|y-Po=$pq8E^hP4P+|4
zwNBqSjJV9*twW4i%g(Q`G=-+v>@Ps@^cgcRbN{YfRrDkTpVkk8aB&rnmrtQbiks}`
z33x}MUZ=fcKovDF)bFrcg}?2bg2>6o%rnF_KoNJC$_66YK2;Jdd!bDuBwBs;DxLG?
z5r44RLp(4VrLiw!B$b=CaQ!$|J#$FMM!$|dT+>R(6(m#0?06<O1Lu}<ho9syxXsu0
z8wAKHeGY~|hVozexLrVYWF89ZDCo|{39%<g+!vZsV7fA^DC{+o4iW-8eJQPs8^6K(
z*0Hqpv*%lWn`>;7gJQ243wU<>8Y)=mJljkTZ-y2{q7WUn;Xx?;C9cNxWFp7Q`O-oH
z8?x<_Vh-WD(=o1tE;SZ@{}p||;Lz2lGzLLpVVQS8MLN|)OUgRpS^@RD`Ew6`ck;n=
znQ<`;g%ZIh**XD?8xqWie4=%5aj5|N@Rb%xLhT!df6D*I*gLg}0&GjRW!tu`Rkm&0
zwr$(CZQHhOtl}ygxBB)|?}vTPm;WJi=8O>$lkmiASV!^U+_-a@rQWzFzLDItSR{os
z_dYn$3Gv_JBN1Je!EH!5!2l%Gr$ZUdow;>{aU}vy>{o5IqC!UT5+Rn9m^EY3qsu)5
zuc2(f98k==;Vrz=j1n#pM{|Obr^C<=Xqr)~x?JVR`S{hEMXFmvI=Cv5L38%mYu1cT
z{xK<*ZNcuo-rcl>w1{Uzb38cuHT&FdG!$f`V(HxB`SvSVhvCsmf4y){?Vk~RcLA}}
z$f3nPxFKYe^rjHD>o6!)!3uz8C{60Gm%USTS6w{_PX1&Q+wjZ<ypG;RSTd~~n+P?b
zsAoX*M<Ce2tc%L5<yw{_800Rx5ycL5IV$G3+v;}_Dj}<lOzsjCq`)V$NW?rUt1wfN
zYM&Od3dBj*tO|J=PX#iq249bZ(qUB;47Z_-4}Kmy&k*rZ<M2~QLQ%7K6xUf2Ao_va
z?>GvoHneN8okLyCKHS20;3g;;w=MlnlX`Op)ESU`va-u`@=q!opLquJl@8|DZaS?&
zEWV@=#S3)%s-Xex)U0)zq0?%(zMt}nJEPdSD|z9JSi9XGM3Pl+oP+C_=^Rd0hpMWJ
zW1q*4k!m4K^K4-q5Bd#TpMSH3`dznDReR^C1*KIwRzL=eMWO@&RJUtg<yGH5Ue`-?
z2^t;bx`!z<NxKL=_MP*#lbT{OYNxmUa8PD)vrQqq7BNp_<LOY{g&LDIV_n>tbp5%v
zGkw;z>pW1r-`T@HvMsSz)ku6)%(pd1hEeTC=Xz6W6~%lQj94TcR(h%bDKIGRJQRhy
z*IGu|&?F5j?2xyc5E><ue+ZXzvsW;WQnR4b&O`Xdjl6pyV)3nT;3Y=1(@TiI3qrp)
zW|t2q$yabS3z+OWiLN4I(H-<|{9EEqX)W9mbLC`D%Kj?bxksUK_@=JoLH!0mG30WY
zEbD8ykKer8hwXD^QXTz(9G8obb^Wr#o7~RBMoYf3Mk;PgBGO(%ZRprlNRCbo;Uju<
zi1?lO6LF=QfF#fmAjd%+h_3hewdQk&*cZPV0gN}vXz_DYdnfVLp5?plBhS-FrKf)M
zvH-#LLnC!-9{(Dk*o&X~Kp#2$_#bb1n5OP6|F1fFh5-OT{NFtp?t1@c{r2Dal@fIu
zr~fODrW;pv_ZwJ~x3s0O&!P=D4&nmB-HyB!WBsO+Xo}xYkEid<`1Rd*B!ETdSm#t7
zs%QFU-T1zXkY9sYB>C!EgX)n+X7_kJOx;y2HTfla434+!Z&<UEASe9H5{Y=0NIDXB
z6{nRNN5UjZXBZ#mj_4o+H->T>W*9S4Hl;%rax+$N5XpGI{o?V~E|71TX~r^bBvYuA
zq(U522Z=NulMr6v>ID#U;>mSU$xAeb#zQKFAzF;8;=;^{^eCW)P{$)^A_KsRmIgxt
zd>Au8FS4g402YjClD8ri?r@)h@*&<4iXq-!j*T1EogCW&lg(LCD-i~q4QuCQmN`Ig
z5=D2&bA`>(m>%RR(+{@yy}nP0W|0xmrQ`|gXjCUrw)cxi^-!|wJ`F=^xbhh}6+>e1
zec8Pp@5kRy$f5fN5OU_?MQqqPAx-;yYXjx@!8B2sZ0_6m(Y2f)cwEQLB6Q<<u!ept
zLiWs%V@VxyUUR`9Y_2c^`YiCgU`od~R}H@32-@$_@nYGfMUFlChH1aah2AL&Dp0G0
z?>2U?4xiyxtgqadV7%CAjlw$bE9Ea7ueF6<nfK{cH79R&cCS9PjoJjBxe5>IXQ>>h
zNtf_HaJ@H907JcdGbXj*X{&DdU=Q}Jd2pimT*p`7uQeHApxvIwm=NA6v`1Aw23G<C
zK!RA}UNQToaP8R9Vz~F6E3cxiOSBj|H)YySW>pLGH*Yx6rv;{6op?`Y1eU9h;j){V
zA?4i!lwD?&fZ}P0WS|omQKTrrplT#~iRH;udQK95wh`OSYsbfZW{nh&0j_K?7AOo3
z6d6pLrAOsCdqcl;f0Xz)-<w@_&BZ|#i73b;&Dlkw$i87;ku|%YNJ%FD)VDy3=fk0t
zN>gEnd)#I;cU10Newll1UIj#|R2jsV{aZ(q21Ls`Ehs4oq;;n&U=W40Pz7rSXnZFr
zl=p0zy(7T^)!P?sdfSqu4d?cq!y7b_R6`2R%jM&wDwkAD9XPn#2w3`?;p73$)<IBo
zd0_u9_??{Zj?_7Z6jP2s!*s}=1+Gl(Ypw75-84;thS(c(ksU2;L=|NbeXcQ`{^c<Z
zK8#eDC?-lw%v&Op{(Y$~>5YAQoh&$NOnITy2X&i&rZadCBNGnlBA)n+ki@#h6$n<0
zlqC1;Dn$SB`ICRVwp5@Vow*7n>G2=7VigMoR4G8+C3e#N>>s?8h9W+AZIxRJ#%|v8
zr_UvK&U8Q60%uq{pM<X9uXBcOoas}0dWt9JIQd^J$2(e5=Ctp*oDZx>e-rz{@KUOz
zV)E~1nQ&x1e2X#f^>s$PNDcm^xCb^I8PB*d*$Jx7gEKao#{uMhQ;X2EMS|_vOi;Q>
zBt6IDf{<YG^S&<ChsMLqr<oFT{Q7I_-Y%#XtBm1#p-Xv-S`R!F8Zs1Fh{?^`3AtCv
z%^0DK+MLS~kK<bJ3+LQ{szO#=U*8%5UY?$=92J&Wpo*3jbw*{sag~kOnj0RUv$e!C
zRHIANP|lnW301QT4BNfHEdicrtZKWb=mD~(>YRB4l<Xsm?WdnlQI5DU9J1}GzJJ~B
zP<)INLt$X`E03~W%F$mKz%Z2Pa;75I$v`qniUAse$XZo~!!y(HQ01#c%&`U>yaHp|
zDVo7uVuMm8k_omhq$g=OPtZq$cpz>qqNHwV1;b8K=ujzsX;w&PC~qr$aQ%9WaBmq3
zC?puxKoQND`^MmBF;a<#@I#n*=uSf&<~;0wqjm0oZ|rb)OKU09Fv*B1;*hB74bX8B
zQfl-|$5p8u?%2h>-FmkQXNX0S46Hq$D?llushK_DPpPO-l-VYB7y`@OezQ7hX`gW<
z>7=QN{Jucn&T=no6|3rd*0|fJSPw$Q+;H7uoXm#xJC1gkf&`JQ{HPwkk)Cnmft`|C
zU~Co=U!JyLYPv`v=%X+~uySMreK>plweYgEI0v5p@^Fxf{Z{RvQmkcViq+CzYnQSb
zrU*SV5k`y0!{W7by&xJ70+HBJ*Q`3x)&W@7)IPVmcJb|8?_)s!Tix?EIduUY&Cs=f
z#jlq1*?ZFGz=GL2`)B`GSpOZ`Rm~CbILfiZ7)V4zE`Y~f%m|>mUymTL;?OD{oPASX
zoF}-6j`b1;Ycy4estBv;$5I^{kki5S(jQ1)yqt(J2o%ZGR9s@BKt{lmd<)eKQ)rfD
zkHNvZ^a|=Sobeu#TY`1Ea@dE5zCa;Bv0I$balE=kpoop*_j6m0jVR3Od|44fc6@Cl
z&51$O<RB7O?gHqSNpa<X5wDY9r>l<gRoZjA8Y<4*fhI?4U0A8Xr7Bc=YNLX{8Zl4i
z^r_mgiZ8E!71~ZKO~HJmeY8gE$KVU_LWi-6645){W#!+R&GHG6=#NjB3w#1~6o@Gs
z?ydu+jV68%j@+RDJR7D#(dn{?#v%VVdJvw1LEiOx0uGDblB@q9B&(ZSzBgzyB$i#?
z)4CE%@Dc|ZR?ZgI&=Rq`Xk@W(s1C;OW`73c-$?Hw)_&%`_Z}7>Ztt7g*O-XQD!cyI
zo}ks)Pe9d|{xj$$4Uyu-_)$WHaaZZJxpc|;QgZFIYAa##x~IZ&=vVYD^1Kwo5-UgR
z*A3>xlPUc~plF*p$9J8GD9Z<CA}qE-P8iAT40yX_$*vJ|JC(0)Q>rzbaBIlm0LH*7
zj8q&Y!>sKY0<d4$N001hkUbxS6NJ@{4xhP>y5o&UbZ48sPv#(XT@p{s-Ip_`b|H>x
z_F}`^W4T$XchA20mhFpB%?$25ZgQoKxy3wB9JBnUlSctEJQ$>0M~+{%D=@|_@~7*G
zZOzfrHYN-WQC=|T)l0dD;^gpi95-_g`Zox-Xj|WTz?3G2u>u}*QgvH2>Ly$zG6=x1
z8jdaO*QEO3Epqhp$N-khypEXu)j{Hk8nT<w&iYnJpDxxI_rhq;;(ntlLsGjXq0J#L
zcUn7q{d^~C<y2#NRTiV!-E8~meYIvorWkM0%%3*y_MHQk>eaH+7lVr3f_WqYj@OWh
zPmESiH6gg3-W72B0jLlN9EA1zZtysJRF*cTQaJF*`-p=EvQeG}N1GOS6~)2m-#gJ%
zJuHUrlREhQ8S30JLgy7cqa?BAdHp}tpXk6)gs0y{OXzPj-~Yh({h!fH&)UeE&iude
zeKqP@zuod^zj!f5GkgO`UCv`8e^oC9(~>!@RA8~^5xJpo>~MtyoSUh+7VZ1q3l}qr
zh^F!t(4Y8zlDRMMv(u_?%*&<(DpyTg<f&e-pMx;JgFe3|6{7WOgf~YH1E(5a^aPWk
zMKZ}ODOPEvRsyggv_Xh3ibE*~A`N8Bi0$z76b~AfCRoObpW)f_6E@TXwjQa`8<h#B
zUZal2YL>v`bz!X5gbMvb4x|thCbNXeNacHOq$`QdVaU2+WkI4`=9X5RVVvWUSmA>J
zik$ihcNFQgf$toJlF(*#tg4gFX2k$KX4?q*hE@hXJsln%9v!MzeQD2%$LC3A9hDnx
zGFB-8Ul&)`6QX*eDZ;vF>k3dQWi0Gb#D+ktTu5pbycmUqV>AcHT>EE==ItwtNAsI$
zb+uM83(P6+sr`*K{JkHPUC^kzvJZP+Z5TUj%l&w?iX`<umSbWG3v)V3Hk8s9eFcl^
z$zyz?=Vz}`qdx@=S98pvc@zhkPfifn?Pk=>h??DK3qs=Xz^XsmgedMq)kG!5{=2D6
zZF_#`io8koN%u9FEF7aAf&A)eMlUU=Q!(48^*kyNqFIREZrV~RnLZd=)$`+#is+Lp
zGgTT@a>iv3z?BH#LJ85qt&YUR!7ZdSK75HM#T|0f5LT2HEz@95Ff8Od({8(-VhhFx
z6x|G{aYVS?#u}03!u_t(KBn0D=n_C!+9c!7KuV-m9ayopgBxWJ2afNA**>3g44O~s
zee(T{C=e7Nvmvv^jE*su8-D8#U32A@m{Hq_i|YBSicTbctYRs&<Ohx|7;=6gk;0gl
zC-fmEmP78sDl-z$1Ly2>$7~LN6k%`V=o(N|Lue{cY=%T3Lp+Jw$Gl0$g<AYO;A-iQ
zT)WPQafJm?g_mcF+e{*0dR+<4yB%_@-nWbgaS)FjV3e{8X8U^xf((J5aTTcU1-4A;
zMA3qh7RMgegr@?J@wV6z-_Y^}kFlBh-`D)#(Xyz>n#peSm1;N;sM%2A{0#m@#NXdZ
z=M128iA<<`c37cLtym)l7p<VL#$7#xToP8t=~)iHbQ8sHzUony_ZmRIBU8l{`E~Sy
z{852-%xr(s(MT5pw<Jh=TFE?J%m?18`tSf)FMtD|9Wk{+o<oblHn{_<xEUJTuttI@
zqY*3sM7KCvvTlY_MV;OtmXl&E7nJmQQPtNUO|A?+W6b~MQ*iEKL;tdyX(bfx0Mp$F
z6;HC1_C_y?@Hq91RI^Z6#j{&n;+6XU+x73G1k{upVGb!Zp(q@$!j=m~3V*KEp=^*g
zh7$aepO{=ml2tE2-5}DB$<oYdLr0L8D{YOnt~yHu-rbZz4Nt{NK$;aAAFJNAE;k@J
z^TNr<(~(1(<0g*TRYK@bPcQoBAS=(~-5WI|b~<nZsk~)X_sP`>TYFhLxOP_#dK=P!
zCP|PLvU?%S0pZ+ZyBK@mMV!>$#N*nl(tm7xNi;7CaZjO8xhSB~P4w6gi`ut!Mb>We
z)r0nOaNWMtfX%;iM*YO1fvD^}4DABk^k*!Y7xVn`=UT<yo*8<Rv5!lAnYS|76`9EL
zLZJvu;K{tu)uPK4v=C`s`;#$a>zmc}UR&*{%mik@tUD&GtIm8|W-hI`sm^m!w;+P{
z#$I~YLpFIBm8wM%|98+1_Vv&8cxYLXa?7%H2<%$dd~z+WGnI9>18&%c4x#L6mM<1$
zsk<7{bIw^XBpwtY0+C1CncrSK@+po164oBo87jT}wpIajOxjOAJnss<=wHvUjDtIW
zi`UBNHuX6N_jJGE8!~o<LU87;tMbvN%h|<OuF`4Zy@)6jZ2HiEV1D29asaMQ`clNi
zurH{YuMzE<Oo6Ij_q8icNi!$OCn9(n{~9`nDAd|&+yzgShj|T+%&Pjyzio*yzcjC0
z(|+$bGoQWm?ZEZthL!-8>nJcWFR@B6bRTmI2P?=B%ppqQR<J)~N`)Anu(-luf696H
zj9n-ejz_;n%_08LTt~69jJ1Bt7RAVRjn0ZQ)kBQ0$4JG`ZTC=lV|ZBgIA^_wJiO-E
zUH!9MD;U}vfZ&8xvV$En2n*A3QAHq!d`$c#urb}_(*51SK`yAU>|4Br;Ma!>r4Pv-
zU0LjK#TI@TC&a?$0QWPn8$aMm74!5$V6ESDpib!l7xmai7V33pu8mgi!dqAjk>xSL
z?@}F+Kf2osz@ye}DO2AM0Akf}b^fC}9?-ou@9S;{;ZtohF#_jQcNdp&@w~4E9&Af|
zzOt>G?$LaU;^`I=#4teSE@Qhm2=r0G0P6pIWx%7ru3-X8Y}JlbYO!~}WPty2D*N>8
z<D<BDcjk7`YVAY+Otam?J`4OQY59=n&9<k-Q*oICvTk+$sO59zLcuH7gJ$QfNiDZ;
z%ft&I<)p#ZQT;%@s{d#SJiI1@T0{J6cvJr<g9XQBPTLm2+<U?T8mnXf*RLuxiLRXw
z<O<8cE#^%5FVB<O&~Bv~%7sTCmSpXV_sY7Z&O|3k0y(V(=a<$X6}{rX!;s_NdB3>>
zpWe*izLYzUHta&~r*dV9c>`kRtoBl&-lrQA_71~3I?wC5>=qDR-bJ0OiWjtlMhGNU
zC7%!9ZrIw9$g4;DC-*B<5LXq}<A8HZJASqfc;4s|K{fD7{3_SeLc_DA&NYG3JXPeo
z)a&6?!=_SlPt(tT6b~Qt%w$sj^8OV6JK9Rmk;(nPuY6*ZZT?T*?=KObeq0PiTraV#
zEU6T4eym)ce2nAR>D&0pv~M$0+tme^Z}syr;~6uMCZEH%ewpEso8w{X+M^5ZX-^%Q
zV_YRYH1hPcvhV1A2Zx3^=o9dH=Kuz;=shGnRJ@!KKN%vCE2Iwq1*A-o$LJC<Za<?Q
zsBHj6DyI<0TR2ez-8t&63!ckG*RQ59$hirKjwKlqDrP1<kaz;oE>l0>&rV{fb4+sx
zIT(6gO;l%LnMiU-V2G<=FMKdEE58sIQ9W+Dq~-Vh_n(bqa^kvTX|u6IMFv54usF7M
zsY}7G*RE-k1L#V=@(onSJ<WL4lmm0mEamp4^S3_t#1zUw&>|(WEh}&OEan=8N3vJM
zHY%rCLskwx;RS4WdYgU>ZeG+HZo(mYomZ>c&?PblhMKrv-5G)5lI;_xl{Q@(MNHiT
zTLb@G_fY>2^D+_3<;^Yt&jxwHpW+4Cr-7eKLhsirzYyI!TsPUXJh*uy4iZa@flmw8
zE{p1eYiD2Z9$K&S47uLd<AYUaVeL`jonbZI)?nMUdo}ggtlFdgaWD@3rFEsEWY(Xq
z`U)!ty_$+Z0*Ij7DPz{IKG=U`OB+i2Tx_tptdyjDlTT?g{g(ooi~D2=qm~yW-xLZK
z%*>;DDzBmQK@Ne6N_we>6dq4IrA!($f#+joA^7)>J1Ieo3(5_)#n+F8j{DXiLq~;`
z_ife;zM>V=?s59}?0pbr4<SDj@ZZ#8LCkZK=77cHGEvvnA!_Au=O6ax*+h4q!1YgX
zqwOm!vLN!r5`AG%w);Z>hZNUAlfoHgD>?qdaEv)h19t>&&}@~)ds3RzeJ3BaS-iFK
zVU^XUT*nJoU5&Q66_t^S^hEM65haUe?&Vdq($KTXR0`j6&e*-by_cg5l6@K?McF0N
z|FjkNiRnUydo8Y`WOKw%*{qXDb%1^To(9%sy9sq(RIZ(9d1f?OvReF=vr)~+1a_mj
zXJ|f6?fnqX;`#i9G>b9)uqRH_;p$VV5^Y4SV+^i;nd0mzwBRj~@!>x=8Xy1swlAR}
zRfToZEO@5*x%m7K>Jb9>>S*jYb{q0nMExHc<PAOaOf9Vc2k7zoceLLWNAW#VlUA>2
zgbXQGRI{`oN(gpV&<Xb!pGh*g0-PIlufAg^+`Qj=$;QOCHbNSA?dn>b1rEqyKD+lh
zGc4OFPXOyUUP#h+(o0-|$KUPqadUj9&Uj6RA;yXwL+e2Nbi0sTlqsGQ*(TZ{ARz8W
zNJ5OMaL?C;Mk%0+>R^ek5KEjd3LMYQ<i|$@X1lD=-?2t?97Arj&lMjhl`xF-ES@uD
zG6E!ZK3^0^LPJWUFZAaqkeVP)>Q&6Glt^ip6@OLcB)IZ-e+;hN2bZKWQT=IT!+2@z
zNhb$t_Mk}(ltG?g-$ox!aGy(KisWnEii?Y*g<~9cm_Ib!T}|7xV5ili146J{v+S#%
zhee7@lxujzuzNe}pq)T#ZWjuHNSQaSn-!E0`3qvB#x266zm%#srz5dr4&ICWA!4(!
zz>+ajUe2r4%l9VlgR~%WkRMy<x({aFhbAS)gwCI2{BBGf-%2f_?=3`V#s2B&C4^P0
z&6*P4b(;y`i!r3Ohgf_N-mz7kfJ?o9knJx%FFk@CDA|;RIkQpU_e|CYTNi#W<AG@J
zn<so6{aLWQMtkF)X>K1Z#M#bUW3?2dHD!5YU$8?!=pzjG5}yqz`GR6XnB)~X>Py7)
zjbVD|kv+A>kJI+D%w4t!X5+x5BH}$yiZ%v`%9_mX1lP=FbdVh>t}lw?ybypCcQ;w7
zRHahCH~x=MbQIVuS7V71pd%?f9>Z=@0tmC^9Wet3H*=!Gs61{@s4~}i*^V{<k3YQ~
zQAp0o$IxGadB$ulz_miBsqRA+p8HDIM|;bR*)X5O(Y3Th-qg`;sj1F$ZAZ&0@q8k+
zGMbs8z&Z<n9TwmD3ZhrcOcqIet3=S!`gWa#3zXCx6@G>mN7-Fd2Oy;Ushwz^hEn-%
z%NC$Yjj=gvS1kz#FxoUytJT~;=?Eds^|gR!CnnP1CR$%k4RMgzSFe<O2_Q(I%iBh8
z+v1R(oS6E_qPQ`i?=`!Dn+~yA^GB0XUQ*T74EFs4OEIr5QYc|k>Uz#%0^5+kCj;X&
zbr+UfNg&6|r=E%hK3~)Yx_X0(YioySk3>1P$}>$4ab}J0?;eYP)OS3~KF6{2)5xr5
zctI=4v_v7tqIxZ<6=qCl?$dK<2Ti0Bvl0~BKqf5nY=56a=BTM`N`PVo+5H!nLZE+K
znX!<WfPmmyodhpo;oB9hiA|*3%Vh6W3|ZtU*?Ej;eAiJ|gUu7YqxUq2v}JoXVuLH>
zLY3@d_6a6;EoP2vM=}CU{4%06<{F)gU0(&oBf+M(s&o4ZSj;t%ioXGOo)@y$@?~ro
z@Dp?4<1Spb`X&NAx<7+?1s#mDtucJ)v-=`wc=dO_St6TV{u{;3oD{$rx~3!WMfkL2
znIcWv&YQ{xa$^f$++V+hu}>;TO@_WAl><W(QZH`ISkKm@^UR?}UoSi<I(v1Y23qP@
zPQ$I5s!eFn+dBsbrHm1BuA*vh4T|}~rOw=xK^Ct+?Ojc6TzJ{19wOJfT%`%2+&X1u
zvr%SC4t}Ha&Y&h+1U83Wu!Jhc)?4%A4M3J*ElJL3y8X6*hi076zCZ0Z<szL8I~A~K
zrCb`=D|W<NO9a>fKm82#^kS=iE(FoleskOaX5V?>by?t~SbnSQ{%S3Ge_$Dg{XB{C
z;rU#tlHET9gbqM8zjrh0;m+&gf@x>r@u5T3iq@vV%mLE$t`1syxAC>%WpH4dv_HmV
z){~;j8F+HBu`fZmJ)djnV{Ff+Qd~7Ux_G3Tv(YM|Iy)M?L2j>k_Vn-&E7Hi{+}QXj
zuJ5eES9iWU$ogjNFK(}X?VD~xRB<cihLJ=Rm2xD#a~*hO(7-<aMMp>7<l~&%ln{LE
z0)c?j1X+?MVTX2ecX<XXJclLVUE9~_o2Qk7RLKKUqSRPpr#HG}PiBCz;bNF2O{b-X
z%eoDbOQJoMUy%PVX(J=mR#x+CF2_dvA0LVTtIiqx_gSq+&Bl(14dJ`D&rq-gnP6~A
zq9(IgLWGi|<b(j0K!>kpx^}3uZJl}xo4@DtW%JVKp;5cN*rqtRn&)Af`C-~!rtX>_
zTa;$gsS%C@hK`PIcJBq8ub-%&A&Mbqj@*83LvKBaA=;$B{qG<H%z*$GgnK{G1NoI3
zYW!#>0=!ayPk2Qf$2gL-d24<JI(CIY(F*8m(n!64SH83$P5o#BAmXjKAdLIjfjCgX
zeuE4Ok}wa97EurgcZh@lw{SoWiQ=euhL{&@30|`a5Nii^Oxc4&E1CK<YNlN9u`#OD
zU@{*#NsAtV2??FoFY~))LIqAZNOyFZ>u^zW?hM=knc^|$&`Z1wZG=B0C-@%h5|m|F
zAy7V?U08p1=R+dYcmWoZD2A0EmPa&2zsDa4XZ*E#^YJ~Bpzk@QBFCA&B!%)`oF;k{
z7Q&_N3pA^|ibAcBawv&2+>qK2J^`Q<N6B*hA*==#;u&TY4f`-bEI_TIfG+`JUZU?j
z!I)+_B!pzePioLu!>dp{{tl+5rrR_xE&(IBRu5bM%Y%@?OdUI_QvL-arb=c^+!PvO
zArZrz5(Uy_w~Me;6Hxwl6;Ms7q|OPqOPLp}w>C~rk~mzoTo!Yf(>2<dq2KCOLp_E$
zTL$dL`)$OL8#^j9)eE|I+Xj3dXYzN}c4y;ju=St+aYH<=5$DHA+nxEs#X5i+{y#mS
z19kZFki`IB)bdfp3J;`;Jx7O+BkwzVwlDj@BeQODUo`t>4Ek-)HRN&T60m>io$%!N
zrtr8J&Dm#?PoqnE)FrMspuCuVIC3jZtvx!jVo_Zi&c6EPWc~Z(E2F+kM#|}=H5EoA
zN9v>5gEya|5paA%0CWX@C)|0PSd=gx!KZMwbq1Z;(wZI|iq1XmD(e~Q6^z|pYBU=Q
z+L3KDs+S<@)KS4cxju!h)b%*V*<AWmh)M;bLNR6N1aLNytnI*?^usJumkb|7am?2X
zR4u-Z?LqW<`!q7;uWDZl!jU+V&ERUTKPWQiypGXXtbzvCHA5~Hcwzf<9M`24&Sb|o
z)Sx%$6RE%{!A*y16MY1FdyBKqy$;HjDe+wT#S4w=n`FQqk*%KAeIgo%d9_x8ha@^v
zW}!9J1MJGI8b5r=GQgOZ+w5xWM-J(uTYqHbRKBvPwG--C#;F>730qg2b&yslo(`{8
z@T4H6O$!86dQ*SiVl=g<@=wPnXdkPd%)v@^^wI=Mrg}MohJUIsi_tv5Mj$UffFF<?
zHYEF;s)kfOfrYd(x>*cWygDMP@zy%b(-$F5RVQbjjwm+z8p)T}mt_rq{uDKuzVnWI
zm?$So;^3z^V-K6PC70zQr;Qq@bJ2t)EE+pQEBhC!gOrHpG_%wM?aq${4R%+jZfA2>
zq^&@HVeQP&UiKmPig##K-ARb8V=uG3;ifTf`32=t?iF#GqHhQ$u8ltrFGK2Vzi87B
zhp*`_C3?`qtEFH@U9~M8xbSS$dFYwU=uO`@&CuGE`6X!2toa*VInq);o<<$~b#qa$
zOYMs<Hf!arsTq>PDT6f=(_Ep7E6Fi%gaWrh*b^KCSZRC(|9`K-ey&Sc9RvV?2jTzS
zF5K1L=D**C*Em*oN27OLz9YHNuOxXi8fh#db9bPzwB)wO;50g(0!Rob9gXTrBm#8T
zN;lhkyBR(XY4j6kKr?`U;&aD$Jg&N3O<gw*bi=L^lGruM2Cfqm*1*B_{`K)<_z0Ow
zN!B7^$&?{G=8XOn;t`K=XpLI15{wy$+aeGUv#}JN^E`q3LpaC)#ff4*N#MP)kWTX>
zM-ncMq;WYO%G&Xd(>utj-ed|h5_^au!fSzHYJd=uJ_d;)iw1_f-%&vVv)xm8K&&Sc
zr<s!=&Bcgwo6$+T8hAE}D&P7ub2Lu8O}sjCs{U(amjlegH>QC-<$yNymy4J}u$@p(
z?7@V?$HN0-tR|cq6v*C%1D%(rGpjeQLMVmj%IO11KtJUr-7}qrKODHPxw9n?$B-dr
z!|^=lG%#Smr*VTpkPwJ=T)$9ncWyHIn&;M|G1ugKKBxotv%~B7nZ%-g9Tou3jh8dZ
z?t|-z@58%EczOMNcs>2RLO*+dJ$((NxgQr&FcqZY)d4{yUAmioyR+mZ27h0<JFjs6
zbK%T%+SpILyC^e(S3V^0<igWGxICqMW)#-1C#jJudVGPU%#p*+urZfpyUKONZOQ%O
zu#YU<Bu;sqia;UGYdSRGdB+!4$K;^oc4C~&F~x4A(bl=#^I^Pl#$UBw<`e7l+X7!Y
zuCu^95y)3Q1i>53qNp8-Nf9~(=f}8>{QA;=iMCIULx9}NujX{|vG11lkIcB&l;x6o
zPQtv?IVrmRuYA5bFSmU8ZlB*zX!hta;Jkvr8KcC#wM2iCd1fH<Fk-i$8Dbm(`M(=3
zNS@;#FzCgU?xZ4OM}A(P!|DUzdggPBhQAtypIplb+)jV-JcQuj-juNh4^dPbyQEZ|
zPiU8F<5#El;B=q=RJIv|xGyj9a`!9*(m+ThCA`Xn?g91j1LFJrssD_fCN2RQ`|ia_
zyWpoOcge1Z?h@m@c-zP+g0bQ3;^_MvkT?`x$5Eg8*0NRdu_^8mg4KXQCKO<NG-s?U
zt}3o6*3)<tzmG}<d4*|<n70d-PZ@^-j5s%eMGIU;ma!$3>gvMk$Er<`5XR4@fFH80
zE33d1Y}Q8AU>Y{2ernkND-!c}pp>@3Nqb9Cu=r2)88xtpocLb9x*Z59FhhBBd9S?R
z(IB)<S|I_v$qNfCnib~4cfN%-`t)l#6rXndeT<BH{E5(qT?i#s_2i30E}2895csNB
z>M6ok>~Je%mj_!8N7+%+kz3M+0p+-aKY=D^)O^nj%KY5g?8fmcIJWdiAr?WF@0S)n
z&<WD+O<eUFoiVqp_&*DZQGc#i@WBM=EG@V$zDuE3f9Vik|LI}qbVJ}}U+x|p4z;}>
zBX1^Z96d<#(G85E84XbsikT*mZ6q}kbsu9!aN6M16Y5EnB!86*{5Mx(cAX9Z^Pzh+
zm()S<;adCoXhv~sX92}9YH=2#+dwSjy6!=MWf49F*S%wOro+2EQH-x4*rD~yLo_`4
z&c%>u2C6f*;RQoLSY4`H+)O;Wj({hJm)hF!sOyfK9#B4&KM~57?QL;y57A|}Oz0%M
zA<d4U8hWCscR}hPy@A~%CmLr+=8PBr;zh9P2rl!@`#QjJA_56QlSx9kNpSTYfEXas
z0_;lT7heHO`%v!d!QFBqE&!td#k~nuR7NJu`DfA9F=>M4>E|DY$%UY#Uht6M?c==I
zrURA;pw#z6^R@KqPl%5A!5Rke>zmNLLF6;59h4yTD=$kNz+4tFkEI@ipoQYU1M_7~
z|E-`9fZ4?}-e)?EOd-xFv_?DWCv>=>2p6nJ5a%P(KsD;-60zN;f)@oCPZdYGKUp$V
z4JlR=JOb2`kNX!dvP%G`NdQDx1CF!9ta{|rxjzm9l$(N3ktLA}1Kv%ZyoV}=tU2|g
zjlT#G0k@b+Vyhe8{N;!Bgr}hCFeaa7D&!D>wSY-;=mdHJ))2O884okrr!BEzP&pIm
zIXERes!O1(0I5~P5Yy(J!7v`nj>diyPUroNL>$!Fv2WQ?v<*rGme=0N4b}om466vY
zfvpO+l?gRIh)|u>NI;`=Ux|hp$C$=Sg~OijES|tc`{&P{PezwYE{d2I52SXJZ76eX
zB~pM)$d->XLRKiGam7M=2?aF4XE$qR<YnNWlZ4W0zRAnbe?lVZaY6zBu?h_1Z)M*>
z#2PBCTSB4D@V;e&49{jH-FSDld>FX)jFYu5GKG?w!g%4hF$!JVN4A|*m6SJHhPFwe
zI!K4MMv*&}<PbuBo>eR^qMu%HY(O@uSm5F|V4O!%h~Lj7P!7Bx>#uzTR5Aez91WCm
zCP|-gXCO<fG^+?tUIeO9!Y0VI;y+7m9a|SiwoKfIs=*bNgF(ipFFguXgt4g9$q#o=
zIXf3c8~{i~38Df9>92DvD#L}ev|nfH@z<sMuY8oSQ3>7*6Pu3KrN^S8ebJU8Ku@NL
z=2ep6L=K$l*UF5Vt+C4oec|RZ5yDIWmVSP9t8MtxfDMQwyiqfmi5}A#KrIyPV?@O`
z5w*v_LP}yn!l3-|tl`s0mYg6Em`qG#db8G3Y@jOUQG$vTD-j~zrutUv;AFlw05+Ou
zv1$xY*gK@wT^Vt)NQr%cDCa4PNX3Ani3BLASRJL<(Sv)$N?k?$=72lwa@c#RkER0h
zL`S3bP`Nq{SW__R(+vc)sxm2%&-tEV6o1?*oF)_-z4Cg!F|F{IEvKujFHYX)@$@YH
zs46VIKf6H~aw?uyHwVp33P|jDUzP+4L;d6uyXS;+RdgM=Lw5ke4HL{YZ)vR)mf$^6
z)W8_+)!6#ZWUt~g^20SbYNF)qI@)dIVNx1N>8HDS`6!G0&bWfUHnWd_Y7aA~O{ml6
zS4083`MwtJYQE#rs0=MtV-ongqIH|qHs#Yc!+83Jt+iHOwJ&v)RYg{acow$fsCx<R
zke3hz%m!%V2OpX->9d-~J*CVr6I6B}skg>dw&5U=N-f)^iqeT9W>%@KHLYL<X_V~}
zNZnPQxhc+QGh;;YtBsp0_O%VNlfb?3Y~Zjl^uS3REoLK@^V0<IV#O4W`gSH83mI%W
z>Z%zm=CXn(xM@R6iIV_;Uw^%O{V3xp%gX_P=*#)VB9S`eoQjuAdK^q^bt?Fo@e<*T
zINrk*siMrGvIuuzENkwpdYDW_8DqcQk$Nbb&ht7IWh13@siY{0z9g*2rxNhRUtj~1
z{Zk+fQc))h5w%bAC}!gJdSLiG-Lp$lXcRFjd@18A{!)%5)2JV-KOVs}r0|D;Gh@ji
ziL9w0tXi6gMBTSRC_yVSz6bh84GlFbbvRWkc+Z$JR$Vz1U701!B1XA4ClY@{k2~VM
zwhV(K+Gs{yRe7~)#x9J4=rd)ZxmQi3*VK|8lJv5pj?U#k_e{9|0C0nDYD(lQu<bNA
z%J7O$22^@nr#Gtzh3wCdDx5sI7Qsn|&5)T000!T#Se3~lglmJh*c#c}5*mRVsWMZQ
zH>W2WHp?cOUfCp?FnegkHzSCtb5u1e!a052oW4Uj+VHRLw7|!{W7z^DcW-X=1LY}=
z`BTJ6-#5A=A=v1+7SBkP!ZyEUC$6tJApf`_Clu~)@>is*6Pe)}p~7b~pozq&MhE4Y
z^qUT>^m57;dgvtbsA?vt95!SE_bT#JqdUi-oxFbsP`IqlK^cyA;PE?nuOy)t`7=GA
zUTo-{vox?XwIu~WEv{xO3#H6a-4%B`%2KAyI~N&l@o1wb%q7qgE^RQD-(OT)G3+Ke
zo<jeWC#~}{n4bezH^@DEzm8F4T*4161LZm8Tg9(S?zn22o}tI($nwmCVOzAtE!Mzs
z-=BkVBa;BWwFYwOos$W|n|6EtvZ6XYgK%~w*g0YSG_{~0)6NWMgGK9!Iv=0ztsCii
zrjs~Y9kTRQHJ4l7%g8<~-sgR}at>hwNS~Oqjn_KN6S7A$Y?v`Cf5;v5#=HM4qsjkR
zSIMuzS*a~Fs+_xyGZ(2P92AaUEHX7AD;)<20<>`bxzf0|97RUf1SNyNxf8x1>MaxA
zdz>%3J0ucvaMZ>bHxiMfe7?NJNfjccoH=Ifn3@}ga8lZL;(yd=;{|jX$zk*%&d(=A
zc=#s3OP?4Lj*x7kh@HZEYz-V~o-`G*DtX<S*F~IUq#JkcI95iL?mbFmsh#gmaM=AD
zfL#PoR=3ZhqsR;xEpKu_IiLLEGtdo0#aPB#@Vrmr=`v>zw$z}KC+FUJ^JwFEoiMvi
z3Uuj^)fyMPgu+(CDbDLPVc4_zH8SWyu28M{h!n%Eux;k)Ktfk>QC3$|w!ntH*vMH?
zVX7fF0lh)tYe&o;Q5Y5<_%KuGv^~Am7=cW}(6-ofY$SkmcD1&^);D!L9iQt+;el99
zJ?eRL2~a*{x_nYU&S1z#BhmQ`R6{#$S|wkSPE;>I)Yj?$nGID%ft%HUopN**PoWZ7
zYKz56i1!=en7kXfjQHcz7<ijl--3M0b)Ce^;l7sEcii+{;99HX0x!C~LwS>aaE@aw
z{z(Pi2NQ&O(~||}kekt#%H#k!5QDIleg81ca_dtc-ND`gWWJt{bO8$O8#9#?=FCsm
zcZM=9r9CF);bUNzVg|D?9w)!epwa0x>8~n&h{6|_p)@xV^$ED-=E8JQD!=p259y{n
z9XUenK`rb<zCd8?VSQ~s>idPu%^$91OUUKuU8Z+u`bHVnD{Z_zp9F44aaYR6y+b|g
z)dnoDmpPuq4{A&{+s((!>oPlQ$DjvH;AP7N=mPH1wQ*?Ln90Ryp3Sq39D~i{=C>S<
zaf-Er4oYy<nqZ@{QgL3&%>7L3L*}OY+=gZ2D7<tq@-~vLfBd;u(S%zr`cz5DE^?Z4
z{sy1sqgW+d6vWoc&dWxssbJO>`OR`Mt-AhCFeJt0-Ot50;$m7*Ogptk>CBlaTc-4$
z^*XIwp?i^=17B~J)oMBS!^BE?JJ@!iJpDGr(wVb2Ali^C2F<CDB*qmF-UY9OYa&It
zk{nqzLGnCuy*sF1496~o<*eJb@6C0zI~m%HMnt<-JnX}`7QT{@kry{lI@WG<y~w#Y
zFE-9j*4J5<t~RG>it6%<s-;&S%|1s@TW%D6KYUKiWKwXq+9D|g10Z1;JvD0|Yj|bH
z$xG5uC*2sT<|I0-&fr0f$vtr24*^tv$N1wW$bx>w4%5bI@+SK|E}@x3%I22y%7&c#
zgbTkumaI|U@r~@8m$C0b0frzD{S{Zc!y`BRlBA{F<ZN#k)?G5^Dby|<!Oo)eRk<oP
zQBDY=)uwpbwTF|w{E$)>*4lvk=n6W@fqs_Q)W;&!sVLh|I&|RC5yp3;1*-ji2l-8v
zIdHx%QyNmv0)`+;1B1o#9c!reH=J+~pVtade#|ebiQ2FkV4OOz%&|1f&PK&J@5t|B
zaFD%sD#>=~s{odeU;!Vj7Oe7t`omCUt);qu?rCzTc!T^>aA1k&egTEY7Qt!3C;rY6
z{pTMXO~_N0%bsUG(aUUnCnCh2bChRUGn_W+`Fp#;?iJPbZd}fPa(tVax8du*dV3Vs
z|893-;^_F_cNZz@c6M3g$iDyN8Z7rnRAyy8-BLVza)Ym3rbGPW_-u;uWT~xJ8T<74
z>q#0ay<f64zA<pH!}s)4e?|9<-?Ot22KdHb>oJb3W*<l6MuP0iu*rK%f;kG9fhEjl
zEm&3=lbA%YOZxpK8ecV+=l64Rbh1KjXvfZIh^Lt<iYD>s*NY@PF-#`8Ncby$q(g{D
zOep1YJK8}AkC(hr<CQX4pm}l=7K$Pt=Z#~+^-_cE<-kLBL@_nGxRFGIOen^38y=Mz
zUxR1go}tEp-U&5EwmR&09YiLP>sga{2q?u@Z^sKu9R$`xAKt-L?1Pe$W|Yd7+b%fL
z#597ebMv7_^ns9z_{)V;BeWqB$^Kx(<mTpvBCf}m4lqdGh;f)Jr!#Md+W;IE4ea;e
z*9J}>9nUGd`?73*s$f%Lh_-`>@p1q7zG3#kh~kf@>sE0Vlv<=48%kG%eE$3T^Xe=U
z4VtcRA<c#%-ro!&`W0WqoyGBfY@HKQ<@DAmPsV2UDyB4c1wL&but!HXmqn38m0FNT
zx-C<5i*kQo_{xh>Jc#-&IjPZFaj|Ayxeg`32v%#%9wGkoLjNY|3kUJ(tJ*1%fvHrg
z#9B}~Q(EcaE3n&<JEqEwIQ@|1Mvp!wU?jEzz^bN<%Q!U+56}{D!VBAB#H><eZJ3og
ze1!o9q!mHJ4w*T9ejIu}NxKh&OA`!f1AR~htH)D6zXK$M5?H~|Ce9U(1{S=tgNG-E
zz}1zMUs0%3>YGi}?<6$)8MkX;uu^Reyw<YiB6GcczK=SE`6ENldU(?@?gKw7(L{Rs
zE&-LZxhkw7Z%S*c%=-O^ouwEpe{A8aHOLlMM-<l=5PeZL;l3^z3O_R1-)R_WGgUsw
zsKx+MOMMFEz}a|vcddq*@))Kgi0>ytaWq%<MTpOy!|7@bfj&;+?(gS<iY9O9SerQy
zbuVuJ$O_Suvw`umGXo>|TVlQNNN2jRhmByD*2t6$SK||u-({Rjz1?e!)>0>%P@=8<
zL_oc`pxjq5!1h@Cn|#E4hrcih?#s#LM5Ginoi#(n4d?#txdR)t;gU6j21_B01JxS4
zb%2l||E3~j2i?>&k3D#W@leIUHM)&ys_uw3i{TB+6$y#DQd+ulJaUh0CS}hVwF4qq
zwLfv5NQIwSfU*Vd2@makGE3kXm1CR&(zyCk!YQzncGynT;~dWwQ_a(9a}%TpHwA<e
zSxih+QXSj|DkgIQyWo)gp;E&>xuZd2Ng-|@P2NG7LlDYsrtksQ5{ALKqWs&wg&D%_
zUt0#QO=gKqv(${6i4DND^#Y{{6Y^Pso2dr&UZjh2KiHqgWhIng^fB|QG5FAYu^#%n
z6K|~Ah+?E!>FKWz3{zKca4nbk;ZRMx1oS7eqnU@G{L-ih4k{7)7__o#2y>$aliUpb
z+~bcDk8KH}-D0p<!B>0rZnsYIQaa8#AQX~{Q%BBO=VQRDO}Es5`;!&bh~6<avnIC`
z-S(pPC%m#MEcKus|GkGsXu~t~T8t~nn!eM1I>bPrtY)sFVzaC|s);04(R^?SR<3iI
z8Vwh{OR-kn8RrrpE0*+Q4JtFPKk^B1HHjYoe7eU@|MjXC(=1N^#B&X%aSFPSEAyGj
z{cX|bc?v$F4$f}`k=YGY$#$8tOQl9@BzOAc?cc!5_^Mo6t-1}CCR>2fx+QI;fWRN)
zus&y=#CrhOV2X49lhh$Jn>||dh!G~rI<R57(;5)88aOWL+-axCWWV>AW6;$8jb4?g
z2q08ade<e74ZqrLc?6B!@HWD*lxu&04-}E0fpc6Cx-9C|?2So`tym&&hl6nJekyma
z?$h=5^H2yk%w~<S87T>_63tyBp_KA)Zaf^8wK~X1^GwRh)AVNJ@uP@p9lr5IR@~+D
zLPW$~^cP47m7h{`1ZjJOQ~^Sti?BFb06<W3LrhE?URp>~s+Cg5ygKG;A3S#u_)i`R
z<IR-?q6x(Xu;h>yi&mOqADXdiRG|*QuvbEiNgqglhcL}L3jVL?G9U5!w-F-wzUhJ0
zHTZuK(IZ39IY+mYIh3)fdX35UadkU1?CrW1g9qG<Z2BuO<$kk<2I;IRC&+M!S>s9Q
zkrrrU3PkN|g2Y{1TMYcTUs!kT`@+JAkcGFsu;P77-0upYZ)69bkgEto_<!Q<Y)C|J
zc&z=+LML#b*%G;PD!bu|wsYi{Cpaa=Qv-cPTwUyoTxYM_<!L9MCR?XeOY;4emLa#;
zQa%d7bxZ)b07fO|2GxkC?A&7$Ptdt@j90hq36x|svr`sjk_BSPK5yffgE=@?B_6M&
zSISzJD9{!UWgBi?&<uNoe`>$xi9eJox<h<j_S`LV?>lEIH~fs@{^lJomKy(yQvJr>
zd977DkE0tO3}f(wlF0bt*}u1L7Yp^(@=eaKG_%x?LW_7T9M?)B3!q8TxuxneDC=a+
zH_F;O#Zd_yvUR~1h-=+wMet!G93h;G!8TKP`$rkT5~dx8*VsN4z#)LV;m^`p^1}W2
z`J@jp2DZU8p%u`m7D$wq%Ol$B#{24V?}^Xx^(VpY&b@Bd*cautsq&htcANeOck<ua
z@ugbDsK-L^L7ifLHnuVk0sGIQT<70=sJpa9S?>Vh>BM+#AIxr;@Bcvc-cEjPNx$mv
z9qj*ZY;ZF9AHtt{RDUb8ME`$OPw^aN+|0hXDw((=vRGR<4hX2M(_0hME8rS)Yg30j
zf9dOGwsvoIzu3ZyvzX%kYMObj``Ws1Ef8;ebRwbYS~k$h<L%~pr2h?c8#ly5uxP~+
z3L5W6#0RoS`NojW8Y6^|CMCe16g8P|v0s!R<c|q&3<xYi4A7(i7K4E+2rjAhS>$ys
z>@7lB{Yxyu2$G@zYV0;6AU2v}K6oA(k~)ZQx18Xq2yX~EnHv^&*o1&LeV{unkMgrT
z4+j;+r+g-sHD?Fzoa&Jv*<muVW`FSS<1C3*!~-rz)s>SR;lB5ekB4W2ag;#Ve9U`m
zF8bYr{aN-#NcmrzCSTJy{F47*N<3iH^-h@NvS~sw_x)h+TwDaq#^!FzZ#9#^9&&;b
zGmYF~3ss;wZ*iQ&!@$AL{yiqqMfiRi(c<9Gtp+4W%5j2YK*e7Qz(+W=V29=q?M)jW
z8^G^%Fi!B_BCL%s=gk$Orz7Q3?!ei6E}9ibsS@tLgKLUz&6ym=Oip8NN2D9}l3ZbJ
z_}-JGi<`r)2lnb%EVx3W`tGCs6R>?M&e$^#5HPxuFPJBsXW_gqojVUCETlw53gT7_
z=?|iAsu@nhuda$D*<7a~P0oF#-Id7^&^^*+<?3J2B15axP#oh^<%WJr#1=^9mNAih
zIzk7pAkxh09a9rmvE_HdHdXVunQsoWM<#;B$w}i|OH|rEoY-HCp}Cx|X+0X=X%wAE
zPZZ2;Xy&h_OvRpbe(ZJI|1cYbWTy!e35jzY+zP`VkviILRilGJglJw`zQ=<rIVKya
zhn9efQaBh+jE_fP7mI_ahBn1bQp<)^AF_9VCJPLzd?kZ<p>$XHSH>po9aO2p_I*1F
zveL0bJPC2@GNV2(NiLrhc{~ZB)44ZG{GgrvWkAHREoL9$PRn-KmWU-fzXjt^+wSt9
z8(&#``w#O!e;!{Czrh?D>FV}^q1J(7{01pxAj+}=WzKQqG8`Iq=<v~QvfY_>ne*HQ
z@{PoVCMkJIf<a?J?b1tBr7%A9I_*nRm4#Saeoar}XzK@b9XWe*+p=06c113DDV+E<
zsz)VKWYpYd_MqtGh())+>^iTgIPUO4G&DU1F4|f~fMzRvkPF>XQLv3Zra{L0W-`j`
zSQx~2iFJPFXKL&do9}#Y^QD_2z^~t2qPIAoZU?&0HI;SxTjN4flE;i58Sae68K<A8
zZh`OvQQ@GKyWv9J_EtxF({~cxb78|6l~ibk;(GY7vbhSoDO{aj!l(F64Y+=;cYk;?
z<~mJV&IJy)khA2vccn~<a(G5*{Gk|41|U_h4ZAbi-*y$GVhdVTws1%OX&?uXoj#Q?
zPKqcRnyj~nVBtZ$B<)qARsd#Qi3Iudj{o7$FvI;Y_hi${%t)~+&;+mgGBlOLgA%Eu
zeC_*>=yCQGeJ9ahjJWwXobG>NO>(lgviR>`ni3TQxvl>j+GvO**|`W{C~obqESZj=
zq1D0=Bd3s=K1$p|yoFig|I_PqMP{SXW^ozT%F*Zba`RdHqy^WUKNb~|za%{{FflQ)
zd+<HLxNQmo25NBR03kHcmn1CEri_W+2)x4`mLMC?K$IAcPjXF=a0+E1m`*~OOhXE^
z3?*Y5+rKh^3%z~E3GmV#tkDfHikh5gj+deU3C}{#e+o&7^4rmrhsqJ7A-Eq=SxwZ&
zl1dVRc^eUlh(p}1ZcgR>>&c<%z5)GmsE?M=g))|^P!5!p6yZ394o{h#N~Ss%+w=4E
zys*C#nCu=JS!R>ywJA%g(1^9)bJ$f#JvNctSFTLHmv!9@cBN1fu4jKiZlF+>CC{-o
zBOOA!J;Q&Nb1n>W{|nxBr0a$ud~`75LJ|=f>3A=WcC!iCd};&H3s-a?V-H^g1ep79
z1<?B!xcvrab~fJ+Jru9I+yDP#?47zZi@J5~*s9pJ?Nn^rR>ih$J+V`<lZtKIwr%sv
z`gYp~YaQ%&wKo649IcN&uKT`tws}$qjk6XMYXZ+w34gTH8$Q>G^=}{WqN4rnum{W3
z8=Dy>*Bg{~YYK~l1M0&T1C?%!n_Inp)YX0KqQ<+;fEYCbzVUt3&p8SyatFaYzysk6
zTu`D0V4sALc9*J6>pfVuVtwnxpmTooRxt@Vd!IZ@5?m4;_K%?_&cozUFdYwldZBXY
z2D%cjk_=igR$>P*)kOMH*^Go4F%IBix5TqNJaC?6#V)jj#Jr8{V{b2P*?+SL4h$}|
zg?XPbW6)zNG4hxX*Imy^a+<9OpZixI+&8rr!5BEgA@d15J?O*vAJmw9hD}D?hy02w
z7k3UA>(6BAg$ME%txkq@QPnl$)Wu*1g+*h!7WgZMup`y_Whc9~%2PQ9+V440a7<B*
zO$P;W5^Ebqty5F3Zb(51y8G!)^f%k3iM(9KH2gUi$>jI-TJ45&V9mGf<R;S?$q8a_
z^5}4lgsLtM>E4OZ6EennpL3tY=GMcuCG_=zY6*g7E3eEJ^8US;eYRTm4xgUCGyTrS
zl%Y0<VTPJ}RYi0$gR1~-!<S|I7Nh*orOKeM(Q>LUL*c+LeVdWBMS3=Co@URlDQ9Ws
z^}UqdEA$ju2BV$~QD+W}X>>bbr{QzZZ(SNSbDJRbV~YRIOd$9>?koK;6Uo2-7v&DN
zhBp5JF+SAxQYPU*{@%_NYA*}?$7IkVO|6Mu9?ir>F=W4D&7NAQbEh#>&y$m$oxnso
z?$&K9S&(pK2$!n9*qWkMDPFNStuJlVtw;ht2VD@h(w^<)cr(eNe}&(K&_!IpMUwgp
zHnjhDYh*v-#9?9Q!9Anglf?S-D4U$b2%EHq_i(Y70F=ceUn)3sCcu=@lxY_NOW*Yu
zB#wSXK+U;V@CPRSXyEU7!UL0Z#=`z%Jt4E4X{dHL&4CCEBn};sE^*M*gyiAlz!u_y
z@D^6W-C$)*8AJC6|H2*ESk!^HPB}Nmi((temgs=B1!?yS*^~`fLth!nVGpONf`iGg
zFU!U?SVKg~z3Y(M%dV`3nx=Y=V_1UF>t#!Q_keSTlIRZEmj&48BMPy^aROp9w$3Mz
zsXhO<ciRsnhwaRZNqroag^YJrXoMD7+RL`@x<^@X*$eD`jwrLG7?G$=Bf$0Biq<*?
zOlRKnmQgF=Z&+KwquuC^VZop$(Pwx~+D)!o3vU_~_`Z@}&_DDoWHd-uygF~ng}qmK
z{DyFY_=5|Fgl&9e^;DT2z~kYu3~SdBPBYve6fy(fXN_8YR5AgpSx^X|Z3f1!{5klZ
za$cOAnB7*-c5Q{TEd{>yVoTl|j1oOVfdlREJrbK-F@_l!tPunt%eAAjM^S8E1y|q}
z?%tnZ2kG<c#V;Xkzhwc%I_%Nz%1YReJcYY=?{A8aYMuQS4izCW!Q&JwRQui0;s!;L
ziT+hmoK!?vvn{ZlWwIvdEKN+wFlrziS<K=%2o^Kc)kL(xy%`C8Sd3s`&6br0hMa9z
z@Lgm=<>Xct?HDU20^&!W{fh1PpD%Yh-^^3d9Xy!2-x?Ub5&KClS~Obc+`<tC7#m!d
zy3}2CMB?(?;SCyyfo?a!R7FFitr-!zX-aKp(OZdPg%?^d)$iAtS9$X;FoB%p-KT>G
zGh2hI-Hf%+vv|r0YfFcxZkto3TN~EY7e1p46ErhBr9NxdOIC3Md+=hpXfG9uV3V*f
z?C1s4b`aT$*N%*|2$M0q?X7bK(kEktUif1wubx0k-m;9U24L`*f3g8dY>pmszCm^*
zA7tW@yh6;vO3DxjxGa6@M7wav<c9(@#fk$)Bc(<}3<<sJJZqS~)o+)IdX}A6NY2Jl
z&F^|~_;J1+XHxoD+0WhJSg}15nT3m_%jQ9bEYl{snwKpt_7N)%w-oMRWUe)kmtXg3
zDv@eg2*JB4w4GEn84)U(L5z9|+kQPsBh4sv87vCn!=o@L#D={O@PFLAq>dissHqL0
zAyuOU1PPJobi1OlEF%VJ1Gjr{m@4vP2>HDZ$bnSvOo7%yLh5E9Zm52(K(bDYY%gR^
z8hi>EV5c?slfwTCZgaw<3Zzt!>+zh~BNZnyIh`?;Bu1BE3d)HN?wKVjbHa@>Ug=~K
zD{@8q8y!F669+)PVr0!<vM&Dgv!B0~cAGlR0;tIl*I_Maysp~Cv#=LP69^?w6ROE#
zUd(|ai31tw`NnmiOMuo<Y9fJnOIC!pG!B!nNR(#pRkKK20NjjemRRYCtWixPgT_E7
zuooIUKx!n5Fe6yZaGhN|zzIE92)<#|@Z03}KF9jfgR)(sABm$T!bu<qV6&GRy|zLP
zm|>d?9J~v~_hvRxYG+qK3wX&#hrO#ss)u{$p0hnaHAN^8b>ewDfA;eJDEn6&#6)Hc
zJv?UkEk{gT@spHvFJ_Xp2*!_vrnoyR8N^S;DG+2Y#O9g;JD=_|pMNFWmY4Ufdb&Qp
zOwGNwt{&~G+aF1klUztdQ%1xIsg<KG*?pCKii}m33q~E!OP@5n5DcPn4A~cIBh@(*
zyuW1hppnxdNJ#)}k;Lp!3xgV>WU56w5!7fEe902zFeH2`qs8&*13;pE0Q8Ape-L)f
zEV?aGKYm%LfJ+7@D){LXvBsc8-7p%IF;<X6jyx8RTS#^|OUe>b7Ru1|4R?EWs%a%w
zl_)9JPzfe8V+AlliQ(iHhR}lY>W+B3C*Bc`daoqmsD5RtA)<SW!6t1Uo@48|e1p9j
z{7b1TMa?)6PCR*O9;!_`$6Ng;_*Z@QJ${f!ftKqZB6yuZK=!a}N!BZL1_>G|;iccW
zJA@u<Z2n!6Ik~@n#)qjMiqH)ZTggyc5m<-#GWLkt0%~y@)*5H5yH4n@<+)#C>G;S{
zUdoHg)aWMnmrNFiLB%Tm_)E2WmQ1lxBXo26<hSbJ(Y0u_2HTE0^zvt<&`MtcHlSv~
zb)e<9RCya5q)_U}`j+nLk(#tgq1Wr2I$X6wosm1T$O*c4WsY<sCAJR+Q!9MwN(i*R
zQYB_>*OcB`MSg@?T!CU6RJj`DT=*Iy=i%-LbfG^%K5&IPdnJ|tT9J-yJQh{$ykbCj
zsVoaKQbzOxUCS$B>(57JEOhL1*K0;(y8jnfbF|UL?8Bh4()=oiv`?6~UH+t=R-QJo
zRVk^M<^*$$PTld1iU<Z5Q%4ITI#(QL9;p5ml+a|P!CgcMt*J>)og3Qh%yTbq;H5GI
zB$A7Y6V$Vb_9Vi#47)=>jJMI81o_WF1dnLofhzv38SY3@j^y$5wvUu5Q!N60F5Z(;
z3-1Yn_$G@cgy8t0%O<j@6&>bly}SyVMh|*6y==ISKnKW8F?C_OU|MxHhqDW%6nyuL
zN52e?M^ITl1>UjffsA}1x52nou(dv+zD@d2mr7--cp59lRXq#@KWFF#ZYpi%YFR@d
zfW)MzxErR5D2T8CwQV)tQ8~Kk9BF)LEH6dGp1J87|3vI`MgE|&l9<EDG6lMV<{WUL
zl`>tbIF@3%*myco`Ph;5ij4&?!|+e~Jn0Pr@)ubvqiGB8c)Cz+aTR<^nl!vgJbi*W
zHovN>(XGUeWEcLWGc7GCiq7xL3?8b@9xY4-10m#O&TWuG%m#P`+bj$<Z+3wLgO?X$
zt$*N(WkV%B3i#O>I>w{N2i{G#kTtZOsy1cbEE<NqUNnAG;eSn`#K29lb|&usbtf%a
zHZYy&<hU&3PnF>rUg!j|eZ{6aQsJj#)e1Ai;PM2@icisI^;aDV{*$y%*i1BF%6WZY
zFH2pnYSP7pAsUlTN^l3NgVRy0-mLQ<M3r~EZ4%5wMnug-OH-IOjw?NN;c6E53~&bq
zA)I)Q=-8Eo(u*s5hh>zr-^-kRT|U`Fm1KjCD?27p?4Z=7^|=!5a!&$?EP$hL%sg8p
z)mqGx?}yQ#gE~Q@up|(Ovb6VQ3WG)+4o(pdgt7FHTqvvL(j36ngqP+9D~Rp00iJ14
zlH$cRNH<7I5KXYh)(IUFDCoWZT#ya@6LSqC-5QX=jIcP6{e(pRhk5<Se}5G8wRRw=
z0xX;e4@@^|q^zWm_UGrpr{}G<D}ccfNmRxVfreq;iO366&roJS-yo7Uit0(_F~1Vu
z5$iblOL}{=Csl8xPsZm_QPaDwwb204XNp7zs?ZI)WeI@L7ooBq6+1@KPzF9yQ-+Xa
zIw}LTs2?Tn+9vD|Z^i$ERCNb$7!{t`95PG+_E+YVYjVC6jzLk29F7SqVYJ;P>G=he
zrQdwdmujYxdgt4Y>F67R@f*qgmB&E3-%ZNo@E|xhW-8Ys={_lTn=fHn`X=)Jq5akw
zi%ZRGka@LXG6e;js*7uEq%4*CsF`^{hxCo~O>Ws8pkq<%xiDODtVgKFS?IAENeJOS
z%@;AJmcrvb)VmZAIH|x?ZPLrcd{uyP_nVtzgI6Gqn%;L%$+VZXQ?7JvL@f!B8t^Va
z(3MOEdP=VaJso!H*Q2R@l?RsOb#@CL!)Qff*+(0<s$J+{QM+ddYhrzpjmZd{2h)Rf
zuUgWRg>kw2yf5cv&qc^@^^~pbVI5X0)>-l{qq2TFsM>XEHsiJ2iQn{IPC`-`c0!^1
z+FDS9a3|aO^mC!vdJN^09r6{wy$cIG90?Bdhc$C(sYUS1aG%KW)RH&+F-Bhk1B5q8
z3CJA#F{a9-N^!y@jdU9%jyOB{f;9~U+bJZ<<eKh0{{?oYS=RCoshaTZfIrT$bhByd
zeLyB2uI&(B-+A(ng_d#*4HrKQ@uCK0(=mzU07X*7Q`Il2fGL`)hW-H&=O@pI27w{;
z`E$6NfYl6_p@jypbZsmIi?hq{DTR&q3{4y4p>zao>=*hy3u4WX)54-iQ`m5%Knb)_
zv?KGP^Sij0PMBZ#K97Ew!Yh#s;}3-0VvlQI8dgmuFl$L6eP{`BveD_U{m8%G`&VT7
z*1#GJkpKl1svEkhDgd9TA%8trt4!pj>S}?E729ywLu^|<_(yZ2s2*2eWN)3;v;KIo
zv*xTJ7AE_}g$X%mu&W!L*Dp_GFt=!lT&7~!23gMiUHNv%?xcU@UbI{8X?1m>Ed7Cn
zzsv;G|M`cbu*3;!wmFs;PWae#%i64=m&6PZT3%f2oCkIg4w}^O&gyg)l&k5^9u<ZW
z90~JR>sRr~(h0#Ti%7W|I=0C+#W{jq@D{UW(o#UbHv~VFwycu`#S0%Y!w1>qc*fCU
zhg9s%kMUMPJDoEBI(!g+z*a0#a-k;ffYJX_yeTzMuVWzK4}7-0=VdCL-N$;F(5vp>
zI%TB|7&m?EjZ3v_xUH@GTjDdO(6FG>nq5fGV7^LY_eaPKcUchop;r3_d>=T=2mc8$
ze7m388Ove2#{0<F4>@6))mdK9+^!Rl`=}`nEcfc~IhK>mrIq|>&c5o+qEN|mZ6f;z
zu2~OqrIFmW@*(~Mq5fdr{@<Mfmk&fXk1~3o=s@hb+9t5soZMlZlQpXrhBI+jP+4A6
z-QsQaHs`9v2BhpgrjpuM_bL*Os#zCH2jT#Y@OzR#)mg(tInao4GQC)a#E7q1@L}FU
z8W}VLWqVHpXCe~5+NcLXH7uKwf-^^=>R>i?I!r$ER0@S648Kzy0AqGHm|V+xPB)L#
zy5)w23Fr?5|7~OMGTqIc@Pl(!6*qZ`0U^8qyP2HY8k^)eZ$-LF_Iu>k&;V+d%L*G4
zn3}6^@Gu1m5HzH?M?1PC_3Me~nccS$k`#!fLA3*dnp?zfrMURW5XKg*|6Yjm*J9TY
zzxhdy>y#&+^lt3D1kxYdYdd3=Cfx}KKrWC?mVleKGs@}>I`&rqcHZF)hTtxy)^ES9
zj$#&du7wI-zplM=h5JV%<nI}r(fQJ42Rl-<rD;0cJMg12bBTHBl$S6Xp-=|Y9KrpY
z)Hmr>gyJokxQ0#K0&ft6J@o0#9-83_%)L4i9TZ`Xwz}ri)$H2YET0lrK2TnaYA_hN
zOYUyoi{0ckVQ5||<`=CG9#mfZl=T5}NYAc_znAZZ!sSazk`pJx)=EZ;kX&$j*hJAM
zc?@VwLc5(g;VR@kNaEn9jrd!SPhKUaaqUh6+GMlODYr|QQXDMW;8A9S{fAIuYDXp?
zERjqUMo8$0)C$-8+dIA@e{gYzt$_@H(cG2mcf`YsR_)_q)03ArJ0gUcX!&5L`@slI
zIo5jf52SdCf=0Wtl7hvDOzx=^io1r_{Qk#Iu`2El&~G>(AQamFxUTq#M4MRr2S{R2
z%gbq<{lC@~Ag(3sWaEI%OxKJb5w8(V41L{U!a;FPI|3vz(JyvU$CuiR_P6$J`X0!h
zu*$+#9=Xc!9;1KlE5nHXo|k-c<QTp;xOd4YiS-<IzPzuy4;K{7ZkXv{Kkv*#2jmae
z>1c_9$UMH7E~7mzqo|M~CS%0tznR-%qvMy;v?rp{WRa)Mh$7I~t1pNl*zpU4A*<+#
z+<b+W9@5=?WdPwsxhuQBG#yiaJ(>I?B;O!O=|<3z<BLjwkHhQbHBDsxS1SG?Die?f
z;&BsQxdToGUVnRH<j#j<W|NQ`-1DQ5#Jv+mb|M%G3m)Q}ir6RgTtByA&#Xq|7D-rt
z>{pdXI4e4H&UU{9@vyVI=DE_eHDbAwMqS^y=028Eo>-Q#Gc-Jb&d<N}_hN$OJA10U
z;R@I7I^l*~=?1f+AAKCi+MJwt-JG;H^WAulMMe27-uc31kdPMW!LEN)K+chOXKmeg
zk~wPq(9V^S6eh+LlbldaU3SE`{5PS1Cf<eb)BR2CoNA$m9%V}*CSSXuErlitbe>{I
zr}~<oG{EA1W*}X|M2zY689#vHmbmM#r$lF4``5)~l<SUkzDetW{AXvXFCN9w;I32e
zh~poLwHd`|acb5q>-0%TjNFM)$o<c353Y<10?7I}y15jPQOS7BDy?kV+@sG+$a_n7
z(KT44*pSD{u;u$xU1<pv$;hbF%}H+~IsP~bj9iKJ$12D)fQ08?{Fv5cX`8{nRv)n`
zxboz=wssQhk-6OY>ssr0_I`+@0P1;rH0Q$Cor?8e_sIm3YY3VfXBCMa)<JKlPOXxH
z4<}BUw8BG8i9`&R>&1h88VXXAO0B96f0d~NhnBD^HE6MD4RjO1kH~z6D4K<nAb!yX
z%6HC<k%;LcR)-c|&az3b%4~i6xHD0-X)Zulhu+5}N)vlyFN=DDd8Bgp_pX$%3nmcd
zhJ0xq{0$F>13w__CiqPtv8yEQc2;=a_z&kEuFG_(ngm?xVoIXMZg^iS7Leq{yOqG|
z2v~XI&=bq?FbqOkNlsXz)fOijyvjEhcbF68jYNi+9Tt+?WWZ@V*oq7h43B*j1*J;*
z3l(M{R_YMiv=+K5{K7LNX(itV-lB}`IlxK#3jeY){>{7)BtvKdalO-A!i;A+d%EVs
z=K%t(1<g8awjBD*o1{&+GWwbUtWYbPImB8NnP;Glz$CDtmJ&^609=;D)zUF=Yv*M6
z3c#fN?eQ!(=ZzT?hB<b0c+<b*$~)a+5|=a{FVtj^p7u;B8!8O}ok?z+Rf3P=rCrrE
z1achQr8a0ZN2_(_*n39&;k;`bs!mosA<A2i(=X-_vs5t(o4afx2>#3zmu#IH11>-;
z`y{AR8ujX&1;YkDjH44<?Z?ItI?wf#qS1X|$Do>wvyhx)>A&A-UxpSN6+a94`j#&m
zCDZ5W&zfAaP{T4k!TT%5Kp~zYNYv^~sEm#Hi{XeNhTW!7>%`?`FNCHLr0_41M^@JO
z8$!oiq+K9wD6`H#Cw3e&vmolWv#g@F9&AHF{67{r#2|m99r`}@ojF@r|0zyskEG12
z9gdJDJDN~a-gzhF+2(_{BL_6p&~K!-{Q;pDK%UIY$&wP(LAE!AErllK9>dSOt6K^n
zn*Tebz}|Se#A%7&JW@|u&HFMk$~7f66#?vXSF}fK{@F&<ZH?pTSe$;@FlvpwT<(fu
z4`}#Xuw*+!?@g^cebTG4zzWK*FhaU^sggp8_oJ38hgyXK#}NWpq7@z}n+AmBhYVPh
zI+v$N4sM>^u>DP%-IdNBYS{DD53*2}E(OaI=1~A7mHuJ&AI<dx_#EVkIZ_!LLr(&n
zavH^#yWxjO6t#f|<P7>}ai`~|YEfUmpaiYkIR5#Vnw`!9OL5>&9vxY`v!o&TcY549
zFxvcWuy~&3mygprbX2}wQA!5E**up`%amQQVv@I8p1?qxJKE2qA{^EvHAB4lg-1b3
z4KFY$!jP9ojo^Q3bVVjZQ2!uov;n&zaz)fJUVTPpC7eh6FpoZiOR$V)Pzy?}fc+t{
z8I0D?bI_&Y&QfN`0~3hh5KEm$9v0S!g*d_|lZ@p9DKpy(Tm`Xtt2pNP)S)u*+y?E+
zM(a2(zPMQD?JlU2jXe{P+EP7h(EKS>jXm{Z9aF#S3}fiZhS{I9`N4=8V^`9jk$y9~
zU$q+kmgyV?Q5m?}46z@<WC~WV8$E$Ipa~_TfgAA$wT|_V89F%Ft#}zss)IduKt9}C
zUN)H6kw;@>VNfJ*>FDeQ%AydJ^rG!iY1^Z35eQjA0YtGz)OSAN-8$?lr+X~)>*Gt>
zMG00DmeuEWoQxD10o;=O^utZ1YK>WZvdjj;bEDe55jVNoNwG^LY93JXJwYTMO_!5I
z0^VJ`Y(5^Yr9Y5Bc4&?2Xn{LCPa?bb6OAeNO@aGpuE9lbfKrv>=a5a1!`j$WZ%@5;
z1d|CN&iv-p%hJHNs-I9}ds#r65m#&TL;GsNC{G|VY6=QU1QRDv8=@)%cy@Jc1EcMZ
zrD@;~A_GQ4@^!#8fzIVmi9w=21%UcXFHExX>cW{SiTPpaN`p=}%$r++vQk1_T?w{6
z7UxrUfIl4@ub(8lYg7`mK@S)y_wN`gc;=BoRQxNrL(zN%H%N3H>5t-}=B_)Y--ASN
z2(=9yYL6Fc4QxtWc~Rn<u67ZRi$xvFZX{0Ik2X)}Uv7XYV0-h-^6{DEs~(><GPdej
zB}71t)K}n$u;tU)q;@+tH+rZXQWk;kuW#8)JsvuA9;v&_vv+cT%7X%=*R+x&aZlxy
zr~~v~rj;V7r@cLox0l40j2@Ota#K-eAm_maZr7TD?PQ>&yuv8R6G-1)q3A`EpqJ4o
zF=LveE!||>HDJ}Cd-=h3VKqo~ggU!?ojOS&6$-u|>nZNj5wCo`e?xuUT#^18=nu>H
zw>TNT+{h{c8>Z%tf3x_B_1$~x-Dg}u8{1`LMNy}$nDpK&=}(Z%0uK8&9E>PRz#n0i
zQHW?zIJrM+{^KY=Ru+{pih&CSjuLent+`a1R46YehR4i-AJ(*0dc+*U1=-(*k6~C|
z2gfdCG;omV1}rgQM&6(w2ny-4%WOAN*e4F}B|3bZpq!%mG{!NE7ND_3XV-GR*M!dH
z{#Cqw2}nd?K5Q{z$Ep`cs9(G}Rc$5^N%Ir$MqdD08{5j%>nx9Pbf~v^n5y6uf85E{
zfH=z!>GhJFDhrCrVleo(p*_)U&|<ci;s+VjK_ELZg0f64Z4BH6%LYe_$QJXv6NCz}
zE3S+GbJgdp@B2wG4E0^PBoP?g-|cYznB4eVRI(C6vr>J)<MK?m5cvN7<js!1hbDl-
z-YhUaJM9HJM%Av=GF4A7%0W?Q5^$&EKNNBlrnmuOeM9#Cj@>-~E5;wd`NX$G$J0Zv
zp;nX}vifM@86LV^0C6SZ__wjs;#?Y$(p9WpRw(3(Bel$0mMFgk5k+$}ANmV(c$Wt9
zP8T^z_QT%0aw)GfP+4$kDEM+_nAILStl>Cn!A4Q~;|{zY9~wCg@r^JSxh;P~nG-ef
zY|$CzE{&}q!7BnS=`(472+EQ~f@K1=;A7B-6j!OA<PHq_Y-u#zR*taZE*Y~h<)5dV
zT5CLD;z8?++DKs{It0)c?f|I<i7T`ulG;bE_%S8{lD%-JVIVTtn+sLud9@R#Z}L(H
zE5U*JUMnhwH2@u~V{&Uu?aXoZ`j5o7I0T9XEzJ|qG+_aq$49T~pRuzoUaAsBk~v$A
z`ThvSp2;o#uQA~T!`^z*L!lr=TmB*|gQPvWs32#Z4Oi?c+G_C_$0nd|xF%qDRk>ZZ
zyxGXC@<Fe1iDJPARDpK^$F|!$J4D=REs|Td#7W;q`BSa#OX3;_Tbjx^L)I7gW_Bld
z(p6b%NbYTU5j&xWFy?Ccy+Wbg`4X8qo{HyP3-YdAuFlMg#+@Aj+yX`utn4F4OmRy)
zw$Sn^NCe)+zF!Dp2|W{x0G7J=Jf7|^mY<9za9RRSR*XP9eh@9@yQyBSW{*?^{|1c4
z34kQ&JDm2<K*3PuidC)&MCgSj>RPx{YvR35WT}%{oW%U>OMw7%;agE*`{5su-=<+7
zrZKJ<Z8LE(@ZW+P)?fc4eGZ<@_a%q`1hoFYk%${R{s)Qpq}Km!$;Uh{_eSnDIJT^z
zKVMO$9f8Jy!`-pgQP-v>f){Iwr|eugqW`*H=3@bvJ%G3;uJQOu_@ACOpL(=;nQ>1-
zSOD~DS3|EhsmaZ+x4)h5t{yI~O}g?;I{tqBROKf!wv@Qav`Kcr^p(oC<%kz^5)mt7
z&)y_(+ZY6QgjUObhI5nN;$Z_cjP`Gd@^|Cxz;<yuWk+n{;~N{ve324K^G7K3T7PM_
z;gdbA7H6il{Qej8IOIgPU3@SaqaNLAK$5nSA|EJf4g3%MAd{{xkU?TJ4IYxun3ZL2
zJD(6bAah^L;e;Nr0&n0eQHgn6wdaoVxpB(N$JYp2`(xsBMcQ(CDU4+->5N>)k9Wh4
z>2B$|Btsx0$X{^?dOBnNK8-maW__TmF%Daoy=aYkI*VZyhC0zm@I$9zssDSNE4RIT
zGeCsWrFuUwJKSBSyb3q{WG_Y%S+&yGOU3jW*)1Q#us<!f-LQ-^iSQxuna=uZCtI;d
z$n)hop>uLvHZ$DgA|bMGV%#<*W_-|jiX<UiBMMQ!I%)7Qdx2=?<iw00eN+f-!q_>R
z9rGitx}C-`USMI>jFzJx@nc@Z%y#&UnpF?iLTau)i~&3bhSJG_U&O=>so0ezng^Ya
zDxl56oEjTwV>0^C6dQec+uJ0O!@^JACUfOXsM0@hg_41gD@O5*y>N%U;6{sk?iVp`
zW0pajjJ0t&TLcbIh}T-S(zVULFf&o)#%RyMIZcnxcM!TuL~d>W`{^iS7sjrjCzZY0
z>f{yMv;s|GjYN(tFKR1_Oj{oMm~V+|W9C~%ee!8*E1|p9f0Jw!`;6f!z6FfO?<oTo
zf}z#+4);JH!SKgnfT9pUdB8@kzYLt&$o)wo@F<ALeizAsQ8w5cBhyA?i#XJ}lAtsH
zc<iwv6$NO$$bjNN9$MV!FU*B}c<gn)V}p{sj<utYm3O|`$YG@_50Qbe6kPw25y1=j
zYZXFpF&&5Qz5?w_r+UI=^4ygd5LF}kYW{gavnMw3j9~ki!`te~XXS{i_3xAQb~qkl
zqgB&sF1KdjIITz9I)(2NEBDGke^H|OC}t7dQ7Lpw72&BHX|_8U;ci7WJ4xq-Y9M_W
zUFCWw3uHB@2~WYwlYYlfrTnx4==Xj@v4Ang(4uUcX>{ik6~=B8f-+8v35H)a(n$#I
zNYX&WQRI-^@8%p=BoAZ;)7hHMK%@{YJv6Zv^#5K*w>SBXD?jno4*a8@_;L~}{(JoJ
zGd1sEEQms}E9%lci&cQly?G2-{8Bm(@bj@K#rLv66_^iZRK_R>NmvH#6@W;wAdOS>
zZbjbRlnE+A2i~V6trs6|LMOKM$L(jIWXd0e&yEQm)LP`A4RYX^bC{@WoPa7_XRAX$
za>b1u(s-Pnn-Ju_6#@%rq;r&`YrU42gtG_X1-{6Ca&Ev-po}*G8)4#tTQ3wFUeN1~
z_^}p^CRrwKMXn)^SVI@7?A6e2-vUKm%z%FY+mF8<r`U&68==|)P4O!!qvXSe!R9$@
zALNLCh#Q;8v<ssnvdnc9oa7(rc5L0;u6C@y!|Bnfz{>t(1_@NU=os;FhKz)Agdc>J
zLIpA@$lQ&G6^LTP@a5*CpnnyJ<XMwn(u%YYxP7XE)3B5SXWmgZ0TM`8po=0^UwbWg
z@E{8C#}z*gVZ_<g392~K0ic0@wU&#s=gLk)&Zd`{D;3S~2$*nR>!{ecsZxH&Kmh4`
z(59aj|L(G5Dv?_H*U=M9K!9?YgR2{#$fD~?@YTDPr9;nmPEWi|AAb92x$+4Gi~wyj
z!>>-cC=%$$056I;MqP(-o(-9lkB36v*T~7DEEj!Wq`J5GaEbyJer)mPVPUH&P?Q*=
zT0$L^T31cBn@Or=QRk1&qRcQ(H9qp%e^vrFBfnF9AIci;(8S>GuF!LIeDK&yxbi8v
z+f#%F&gjL`4#NX0D}7ux7a2SrKgWCs`xl?Rzwr(!y;#hR9Y4L`b|hYB)4~ze%)bG}
z9qXca9*NSQArX)$;f>X`>Ezv>dP64+8)`oSv2&>x!a*be(&&vI#+C)CQJwm%7JzF^
z-Uwr!jQ%^D<LgkJMPsA;UbiF?5>Akbf>TFlVdn?A2&&_B{R~cdwlrOMEDn0jTgFQn
zEsCVmel<evDom$}QKCH>;~VL{6h~}FpmbYSfdM~&Xw9gs{6nS%eb)fP8yTRyD*Q3>
zWhj2#qtvy*dB6t>zyrKkI$_fgW|{xmZ-fs~>W+)vhI!<Hlrt|t1zq)j+~Hm%;gzB{
zVU*QOZy(|W6Tt<2L!r!4CQU;t746rtwWK+bDYdJz6uoayWeS(^ag9~t>jFAX=LsJ`
z;4D-eqh=oNEKsa8Ey0-`<DP#&#|YP#f!kL)ibt2Cx|)M)I9?I{6mAh17BICQ6AwQk
z_pjZn)9<ay+E=ns1sg*gPkY2l2%dLb@#)T<P>90&YP((X&eM)ZhyXJ{u4r6NPhV>#
z3HJ3LYTe>8|7+3s^C<XfsAW>lxe!H{NVi7gL(Zbq560|6uu6<1ViHq=OLLwe$o{K1
zoCNA)Jh1!^y^5lENQgp^ts9l9(+P6{s_1XU>cm4ktM}dx!d}#aH-zyXW)@eH9)u@F
zcvnl5mo0Q9ZA>A?K8mSyxHl9D8%p?Mf%$SZ#Yr7T>%wq-c*amCR0Bwa!O&E(Uxz`5
z2h=Q18%R=6cJD0z*m0&0#ru9msJYt*n@h>{u&T!eN1~~py}9}<f=fz0B;OdyAA*w}
zuEDb4EeKi`IY<aXY`~DEPx~LD4XU>08`HWEf-l-NfG~1s8tX$npY^n7VAsnJS$`Q*
zi>?TFD{^@<f~}gx988i#B|O&111~1;H`_(Ny8Q4O2XIQ%*lb6g{Pj|@*-k3F?NsNf
z90{h@eM-Tg3Fqw&RM8cqX>bo?r-pb|s(2~yhCh`sl=6fyF+x5{fAQGeRK;*rXH?zG
zr~Dt3pUu83;Kp68eA#UwKcnHNzvrfC^ot}LI($dmrG{IO6OwSA=FpL&S^s)JAX%Hp
z&h0}chkM-47~5L=fqwtu=4#3|q!8jJJO_Fs#_@aBT`_^GuzFp%joTE7)C+n3g_BrR
zSo!Dr24zv4#yN<Tn0F#+UuA)zlSF~WFI)_hl>*3RNFtbI2woveCqIoeaKHx|m;qe9
zyl=g^5iewi2Or+f&TL4<HNUTG`SbTtr!AcoO>DRF{gro)1^xZ;S2wBo8$P+^DZnBu
z1d`lY=UEy{`mE&vQn`SGp-zylwjJFk!`hs!K<Qp>`0QY=;0y1;IaRc<;txUvmO<)s
z&HT1L*|~KbEn`6_c%thQ&+ARVM?wCtaZcRjr#hn$vW>otJ!@|(*;a*#j{IY#a@SZg
zToo+FQVtR#U9<KMG6YuFZafL-sAUSCnl^;C!}7E~2A{$7F@~U4u1tC0fO0!`7412B
z&w}3S-fCb$8TQjNvxQ7yQ&yTTGRm1pJ94Z`{5cTmQ#lKUT_Q)W)$g5%NCDRbP1Y-?
zCNP=u4^WG<VXgT&dHQ5^G9J^^V+NRe(HS%L0&}`yF1Eo>c_z_h`glwFU0uI)d|$d-
z8{v$NBHVq3`g1ciOQZSp{SaoYu7iAeEr*zg&5l(czXZf~Kz!LMTDekh0jve4qq<)D
zPpr`Qo7KxiIQn!UD`Odmc0b2s5f9F;I226O(&ce(M5eH7Qx6hBZU0Y63$6k+ys6Do
zcc)}jh-31|aSA@Siqfr9ZbR|dBEuOdlDj2+6M0-&KfyEZSBH6+;0OHF@1TKp5?dsx
zU(=xn#<8Ced+DE7lRdIM+Y<M$VOBmXf(Y|a^MH=wM)S|cc@H%f%{Q;5imZpQtq|4T
zY@B%)ZZ@7?j(%BO^jhCIcwD18)-)ekWgQ4X%q7oR2w$8LLP9oQo581Y$I;gyW<Q@a
zbt|I8#rwNV(o;)iDs6`eeRbDnbIS;qq|@O$$Wjgcs*8Q~fl3{DO$<L>-r*z@sD0`j
z+L3JaHxr`z&IfD3VlzAXF}L;C`jDiUH|K!OX65e#<}F*wt;0T(KMlnfx^Y_WDN`(#
zyyGieHhPngyRKmErX}k7Fzcme1fPDqNlEvfW4zJJndniweUs?*un_CaS3ShgqZTD&
zX#SyS1ieMC>5Wra^n7w=HSn{SFIww&dA@E<7l*hmYlYMDJj!|>zgk2)dVG6qmyP&b
z|EyO2a?^3ep$g~mfWx2x=3s91zrfAU?#fRf`Nz?jJu!Urfzp8Jb58~Kz^ure8<M+V
z4E6XA4~nv$zs4}<B{^F3wkOsy3M6GlI|U5rVRvri@E6Y(A6-%2hlrtwp<z!tW~B8y
zGvmNLm<)6o$!ZsU4*K|Y{8&@Ubc`FH5OrogK57Be*e;Uoq;V+l*}Rpa)B+yT*oP$x
zaQ`=|R-~#CH;#MC^pd^w9S7oJzsX^1$laEarA}No=Fy_F_asgdvG(8Z_RndVJHKSy
zDOah`&B}c=x0a7DwF-}}=mN)peg^+2vJaxTtOU7Mp0ca~3&C9gc?f}qzJFdJ+kO3J
zUws#-^xrI4ew|M}`usDJ8ma`hPgVaff+JNa^zE_~fVkcz)ok$x<IkCUawN#mSfMF%
zZ!lnK#>*sDzlzk<3E5I1dev=FyO3d}8#v>_wKcdjwvAVLUjgd-J@lK}7*pE_j-T3?
z*Jyz9J3rcqKf>XQ3`d^874=#C8-2-aM)~a31som9(bYuHHM#CN`AciugkX7eDGGmo
ztWeIJc-a&F_fLURqzjkd8YoGbttL-$7iYk?W3g<JQPr;2A9a=3k@N2Vj`@Orj{JN5
z$qC{8puYbL7T@?k=7a`+Y9jYI|Nop&ffAYqOyOL%bGwZ^tu)Qgyd)sso|_+!dBeu3
zx&BwB;_DfQhk=vmV)orJf!f6D$YY4*Y2TtmGl=}5|0HDoQLN9U*-Bs6?Q+}T9}!~&
zROYle<Kgc1K;lf)A^AZ*d?%rQx+4-JN#G6M?K)Ipt=IyI3=)CS5emYbKQw@>cEN;?
zt&(F6XuA)y=?b=1L5McIF9C<zKok_j<T^nD#B?WQoidO99*S4Fb#{kJ24=4nuCK^>
zc1865L{xBBK-02zww51r8uABzHIDuB8x1gTN^24Rg{xEc!LB5>=Tmb3@v(v6fG7lZ
z8DGN_p-izU=S9*CoZ)8K2s_q6_yoNHbvj?$*~%lcNR=4O!g1pMK?VTUZQ^k0Cm}m&
z30wvL(O2k{6NjIP)<u<LJaxPJ@&5|fa<nf5Dcfc6Rz>+-9r-1~&C>^7+&@PCx7AJ%
zsgA9XCT1-Tdq-T|;Bxl~eJHL#QCPk#4h72zLaq6B*TB`~_%<&a<ly%W$+ME0xY<l*
zoQ*lB9vnUdOIX5>IgOLNlGvvzy&fEM!#JWe`5LZMpGHY2Bpli;t(|PJ;iR|a*%U~&
z@nvYjWFJ>_*fkv@HNHszR2|ZcCxGU__@KQGH4THADDi<Vl$y7dkD<kuh}B1lHKDNO
znYIDc3Kr=_#5(%oJ8T7^vcw3sl@;X9(UvtII!G@Y{wu>9-#d_8o}6crG>4oLtcrMK
zZx5<eL|4c{C;zttHJPE5xdK5M4p3CHH0nTn0c|l9-X~2CZXzZ0gtTk#D7`naucv|<
zr7Zg3`^+a0s%<Q9!rsWQlXkZw@ck3Lr}b7r8L1q)JgSPPwl<UlFPWr=EwfWediAqV
z=}ViFc{I_>Zt!*ml6THehXeaMX4sw}CFr|?nOvVtdh%GBe!558<>xBthORbYpgvWZ
zd~jD-dMbQsHiF<SWl&p2c~x_9`ALZ9Dd$kFod=4z{Seh@kTR=i=ku|0j$A}DSaVKs
zn&gM`xvIfYo?4t6$dw!Xwo%D>?(}OHn-L4gGn(dXVssT4UAj&R;S%J?f^*|J7g^C4
zx3R3<9T$W!hx+XvhnqQE42|7URD#3TkyF_)jW~w+EfAE=&2`=OiY~=V5vavBx34d`
zUNxzuRqZxHxNE^Gvkn;W2a(xrK;1w;<*4`Uxt}Zfv!r`a4eZ3WJ+o~RO|XL@j=#BB
zN66Jq5ml5)*`K7+y3_l+WXou=?U02qqlLig^eFt~;qn`MZ(RDUSCH#lP}a;}Z;ddQ
zJ+tOJk79_4>35Dnjjvafs4qny4}a_z8b#difDo%<0?Qng=R-4t_KlfTpeLB{#6DTd
z*<N2tg6MV|o7iX8UoiI0>sP;ID40)|U)2t8bQV8+sW%TlZr4*+o~3+bYxauon&CLq
zgcx?4%6Wi{0nGbUoF%g=c*dgMSYXx0+3{o6Joof0T(YqQ;wiQ`j!_%+8+GV?E^1jw
z=i!?`O53w-o+_)oM~(R&Y$M|?vIJ4(bL5l58qfIVXljr0#q+0a=y??t8IUO}=#iN<
zpCxbjVVbl`Vj3V!(v@F)BIjym+Oz+%$eKdD)nTvxhS8ehyq5!3&bE%%hPC$(?g&%+
zs4Wa8lJpEJ4sCR*RcOcJ5vjlGV`UT%Uixo8No~qlIRncyzWxV~fH5yPlL!I?RP$5Q
z{-4fOeM4twM+>9>cgD#@Y1TGV0LlB9=I1CQgxr%TLoJCp;1qE@H{dWR^AN(EI$FEO
zYvZ}lQ2pw3gCq(q^aXY`H#0ZCY)5ZlG(Ak%w;?igc5(4=b@=@T;t*h<NQ^D&q~Z94
zV~R|kOpA$uF9Q`IE{k*%4z}l&<Rv9xHR%vqD!`?}Dvo;)0avDNaK4uZjDU-{6QNow
z9Vd_;EJavF0!wQU1P$_#^;Zd`IR2lmq`edi7$hw$$<_!fv8Gf&m1%iTSzxL-UD0pW
zx$sHzdBW(x<qQKfbxSUEz`hF^ld?BL*+PfVm{PRQw>_u3%q1b%E#~$c+o;{rElev3
z%$4?%xeSZaAygMky73Vjhg}hHF|tDjGXMUt5^~2=WG{39)=qt6td?_&4GWqxDZeeB
zevZBi<e8KZbN;bLmshd+Tai^Fr*GC~^`3!FiB4fYLin#fgf!blob8y*pfTeJ#|GeJ
zg`zJ|F}7qE9SPDt5mR5k^=3)bSis=rvjKLHww?1Pdx1OiX9De&O;BWRN&slJ07ZCe
z&h+_Oq|}N+{?0KqR7t?5DA$dwwm%B&?1drM^?s-V4|dL)b10t~l2w#Xaoy?+`EH_d
zr@*iRa<H3^a*8Q0FPLE#=FKN{)=<4DW~cCzzgvYVtZ&U4o&Wl$9CNHvg!N+yXyiT7
zNvevY&jis0)>Q9iNuf}zs`ygszC<}^|Dw0AP2=AaZ7jWYX1)&K^=fE73{*U8@y()8
z9-9Fe9S4}EvL#TJ(~IKY(Q}I8l1bOFs<n&ty=j7vFH6&Y=GN&Z{+xaVzQ}$64n56?
zK6d3v#pKHSU#;yv`9Ec7H>5Hs#_hqY(tIwW(9!%79IN)hdQ5mO^D}a7j<PZgOZ@+R
zk^qkLw3UJd0?MZOj|7hM|H1~liT(NGBzSuMK&!6=tR;~O)O502co9cr))o01As1QF
z{2#Zw$3^G{_4j)x2TRkien5lf<!R-nQQUUN^|S-RIZvUS+~=ar&IAULMW^SZclV}s
zCt(3NSrFQzOucw$z;}$C&|E~{kC+B@&Oz5P00*-*FB*dX<N*kYs5*z`FMfeCvWGHu
zyn^6<q`FA|U<O#_DP*ws9Z6k-UBq!1sS)aJFl<;t`o5CTGD;gv#E&SiTc<VlQkJsS
zp$}Y~epZ4MWu4@UvjKPo;%1R9KM*qbV8nA%xxfzl7W=*cs8$va9b$?T29Mwgasa_$
zn;1_0;^gM$=;){i5)0D_@x#EEk{wUV0Req?4*aG+J9``NCxfjlrB`o%_5vBze5y2g
zD}?Rd<i!bXtN!;q8WEk%G>p`qGuDg++oY-Zy5r8pFZ#&vkYRZ`v!;Ce!(FYnXtE;(
zTz-VCBR7D}+=LPAFrBZ0zjk6))2$X1=m2|0qXNjbYE{Z>`4X$}w>H}gcUjG2HoqH`
z4lsN{kMiGBY!1Q`?7a7-cD>^bZai;XS23gJwtRx?jmv{mXgF{Hy#4Q^3BDVl<>#XT
z?I|6vtsQIBYT6SpBI6YKHc%x3f_tw*IAYxE@Di-q1}2Xn!W3~k)(=zkwzT4NZjbxW
z2L>;`?2mLL(XBs7e}ovLzTp_!J`+rJw68<qjdXN0FqTFSc`BCqX5$iLlpM5_t2YNb
zG@~7p<8Z)2hLgW`8aNo?p`m#K2BW)>Fds<RhzI%P7^gs_8XelQQ9|{rKex*`T+BR3
z{s>90W9i_00~%o)#^@%;WPIYXUn4XBv7A(`62@v|(q8y4q>5lR3Z`6{03*teBs#}6
zI}?iVb}3f6PWX<4ykj2^fiq4Hlsm9Bgc3x{7k0hL*^x;}4n1p7MtC?^w`C+nU65t4
z#Qc5yXY9Mvm7>{k5!2RbyRDGTaP$)OOzJ`#a;V1hR26I{b2pip?;@qxp@8`%yALDg
zo7fr8x`mU?vM;30CH&{1BeMsZ$}Mh<3SP+kNai9Q-{;m6e$KNvaXC+&&v>bo;0=uU
z?B%yki?>-=lgPqG^oeaElKN1{D&7N&Qj0^@BoV3KjK3h!?2=~+TWSaRnu#4^Pe4>t
zq=0Fz*SpM3_d7rr+F9IWIa>%_<GRf%TUt5jTlX%h0b69;z4<C7LbJM_M@YAH6mkDx
z?)~bOBOcqIEF=|DVN-6g*kShap{1Au3yUEUBK8vC+kiX21I20CeBJC;$7@y&j5SO$
zgIdXH_HL(pHu?7(XaSp2!hFiFlz+bE>|SgTmWAi&tO(D08P)kVWUIgo)&%4vNr1RG
zxw}rN+rM%lKHQ@_dD)9LQrfqF*(0Sso!K!Cwkv=e%1#|Mu|IiG^BU)v>D`n%JU)?p
zmBHOoQB1-INPE4;R6ltvHLrRoQM`V3c9eeIh2+MjcmSI)NNb;*qZ`v8usO!_1H-=H
z@pJ<rn?R)|p&*dc6vX@1RokX%+(ZMUYI4I&Z!!;j30H44Tv#u0;c)l$be{P=#Vp#)
ztCI&9!TuW+aASUKC5n=whm91P6pAf5nonNq8UT`m%QsswK*a&X5r_=@Dx{w5)pq<j
zB~F4elP}~{D|hV;WXcC--em1oT^Lu47Ml)!UaK>Lj|&Cb6M7Urh5*xuMq)WK<lvOP
zMk=t(%0LroGqicQXi6JcISL<o+4n@2sw}E&y52#W&5c`sxGD|v_J>qfcq6oqHes1x
z^+eRiFZyol)MdJ@Kt8iA>18qbl3SUg0}bxuK9xK9<*XmqTZjmbN`yD*pPzNyBS(&?
z*yaj0mNF|{S}nLyZSa?}<<$LZdhdV)Snf1IqI~R2$*MQ09V3JM7o(iGws->8t>%YA
zA7woij<U>5D?{nml>oM0PES_BvAIDjLVqT%KXQ6fb9%=ppJ~sff4jH2r%tFM=hPU&
zMN!jmFSete^7o<2V->OD8UU`~-?_{P<WAH1q&Jfkuh)(YfGS!c2dxm#?F#g95CExI
z)x>91Vxt}DI^Y}w;E!*nG>N!vzDRQ#0v!}L)}Th^1y<)p=&g`p_$kwHr2_V>wv$KO
z9A_d~M!gT!2$n{A0gn7vMiEP4-)c8VWe*Xre)EY@2Z1r197FazL3@hP5+c_|GLEb3
z{C-?`C32GKf{w<UZiSqZ-eeok2izQH&sDXDW4$%rpvBY?@rF>4d4C-axLW0#QoEvy
zxM;;U!=_WuiZp0mTx!k*GS0f#y&IT)#ef;Wr=Kw+V5$}uBS1uw0jCqv;R{M4P(l>9
zE=C<(W8*I&I~`veqSv}DcE+heL2<ZwR@(N~0>!&oJsjQ*MbLPv8qUnZ-x<r|Q*3X7
zY(BYkAn0&8&${r>6ff1z9zPdq#h^D5w+f*Z`E$RuC8B^F7Qq?RA4SrIN>Fe=zhpXS
zVdeRDD!($8Zp&#SJ7nqL8@{c#P(QeLZr>^;&#;R{UiGj_wQkyV-H<XrePf*MG7ax!
z@)-T~dh)4$*rD9WX)@0QTf_{wg1Fy$$$aSQZ=2D_<L|B1c~9|6)?Bd`{78QhBI(~S
z8-N~-A!t=Ls!>CIao}a<WDCpVk^rJLL0&X8+JTqNSoy)+T@LUltfUTzorIEXy20WV
zi2b=P%aTVbh^&kAZ%}j%2@N4zB6N)`+N=3z!Ke>~g~0Vqlb*olWc-aMd7O^&$V4{d
zE7=Pr_qU+_uJqYjv>h}@T7UWH?I4FZ1xDTnoNG<=n;)My{mX<Vh$mI`+q=`|PA&Ze
z(@q+`sd47SE)H*YV(uaZEiSC88<K;vYpEbRK)JCbpn3$tFC~@$hv&_V_;-5PD7r~9
zWiki9sHYNn=C@KG2~jl&6F2W9T{Ce|MpK@9u^^Lk&IHh@PLe6oVHcr3GS<yH0ym-0
zWFd3t|DfO+k^wUqoz0doxg}of&^gpAiv%`GZP2@mUZ}L3ZNer&17{mYWC<C`FG&)v
zTIgFkxnh4E&d7~p<^@Dg<F;Dk^Sd01SBV#Onxri0l4B)}Aj;a%h{oHheHN-7lC=W#
z*Srmnl{XPmywomaC6L=G81O|RQHZKDn1s_6*=n*Xjmn3999Li3JVPomVw{x*h|&k6
z1S$MqOQ951;bcYF*F6sTUS_-7e<zr?;Dq)I!vqwdRd1DJ$b^ZHzYCZ=`8i2kN}n7E
z2N&Wiu-qxM;4@ea!Uu5;sN}AUB0~^GaDS#=g#$m207|w5`NZr&gI`|HPhf!0W{I?S
z8Po6sV6@DeZ3vGL8=J>e?khg7!sL6DVTy!XN$(1juu78TVTrZK`;(gjh1X1fKtqJb
zTv#hN-0yB{p^@n<|Byg`uCpxPT8L}bK~)ze#Gr8CIZuIq^UB>b$8|NA-0W62t{l)L
z2LAjhY>T6`{Zunls4fXA_b~C>mz)|;?;zD0cQw9%CuPPAU{q;vi39(A1)l^f5jpBR
zr8#nSdz<Ddu|NyQQA(b-y<RE0$+^Y@{5uOCH=V>9mW%cbTv`S#sbVR9=3Da6dyR+7
zfda798-04UnP-@GqW~vSN;#HY?uFptJd%A#y;Fh3Rd$M5#Pyg`^3RdkdI!}5Z3Bj2
zy$Jt&x?Mue*)h1K=LpMsP`xyzAS!yIjzbFXy+FH<iY%eJ$L~Wlq0;VUI%czq8`zwU
zy{tY0ceCF8(G8Jt{j=w}3&N3KtEOC9@PcB*`w=YUqXftRF9#*nlRL6ShB3<f`gbaR
zBHHkgsvM_&QV*vR8ZC;ToKc7V-l<y&?;<-WR8B7wWATRYh~8T9iEMPT#jF3Z@FU*J
ztn+~Z0y-i7&ll7G@&Y?MI{m*dri(v7%6iMMuPgn4H!~&4*{Ezeo<z>4XgM=xOB1T(
z3oGXA|3c-VnMCiP7y+IReqL_C@nBR^P3K!-me!i27>KnD?yeY)H7-J0CP;(r!3^qv
ztZtw8ru(Cd4~7HR!4XokU2AsY+{6={d(zVqM>Mj0={G@vV$T1MuycqKh6!+O+qP}n
zwr$(CZQHhO+qP}@*Y^Bx`8G5A+SaL@q>?L;K#5HAG51XeK)4p+O@lH+Zh6rhA^}ad
z5HA62pNBQLY?hu-uPC+VB0eOMq{1+gNKH2p1Rm2+J8mTDA<<)j3!W2(M~qFU4z)9Y
zfe;@?k|hl_gfeoBD>MiyMb)tAa1diI=O!;=31q>C&UE;s@(*H+JVXkoJ&6hJ-m7=k
zY&li{oG{2Pg~r=UVZLHnchVK$s5dz|-{S(ba(=>_&==2DU467x8BZ!Lgyq6>k}eG}
z-(9_Y4T4$F{_DKC{l9-V1{8cQhfv{p5R#;C0?3jkM_$(*hoXfEC(uy4a`$HKC8hT*
z7TGvHZ1#F43j4%&z-c8<0iDqyjbXI-!3Lg7DiUuvV+#)INh<PNR!mD<ZK=;h1=5N#
zs$lQ;;>HpRA19A&0xW-LRGVOWj(?Ao*tGey7FZIzb&_$hB<Z6t436@*as6-Q$A|C7
z+_(vf2qM^cbdgOQh}9IZK1}8(dmuh32Y69vTAD(_`k;O(Rqr6p$)vHMB8;01s9*aE
zG9}KL3LEttlUd<DxplBZ?pP%;6A?6+LxVVc+gH3m?23A{qT$VpJ59AR2YMIFBY)%k
zg8ln)5Iug>AUlI6XU>0ZvU6Lce=U=hzXO2ZD!h36v10JIyZ{G~?hII5#@Hhx7zG5e
zFhFxckQB#<t=E;%=|Ieu4aNh^=AY5bybwIXMA9$~My)5119P(e9982tyD;`RLu)DE
zV5+`u$0SJu<>QXz{C}&M16|?x<E<CToku5_`e7eMy%Xkj0o?Hd@Mihf0f?x0i6N03
zLZ566QooT6%IEg(b2V4JKp*QVku#nv>c(-!dvl+ypToXHHt~{uV5g+I<78cOcn16b
zy)<dzF)2aMc0STG)<J=cZenw?#SwRAc;C(2zX!?O9|nvv$dqFD8`7+bsc8B`qvT%l
zq%via5Fx_ZxzxR`+zzbsb#!uga&j!Bno*Esy2A>vKMO~dF(oMCtl6pA<R_u@Agmz;
z<#9lN2RG<abjbkBX&$Qlw7Wov*NKgCY<%otOrh;Yd%c9ONVLW%XwNn<x>62cdeHWR
zwH~X$Yi3dOs**y7<l5PV$_G-cHh@{5C;yh>TCLB8|Lk10XKu4=dFA=6h(ox|sWELh
z|B$zLA-ha$n|O~<N`XHVvn+vd%po=~Fj5FgR|C-Qe9nc2PW{M=)p|!w-RIuYG@XQi
zX(7gDn24uFo$SMyN37F$P^afoZ__o>0&Lz;p<jwvQebN&namHh{tRCC_LQozds+Y-
z@3rQKU3Mo7Ca$v*8wj`=UZ0l%jp(6e-}7>AYo(rqHKE4YtCR0yX*M9zDux~l_^4o*
zW4ESmb9rmwwl+aRmMYD(CtP(l(K6XEZq-Te_hH6m|6QeSf!|Ndf9hv>Qw6D%GwBo$
z=j__-JO3Ryp1aT8M$l`6U+mMzJV7<&qkLkT^sU_%DpYQuXlQ6QlWvO^T8&H9{=lkV
zwPFy>@(d=4z<(NCvpU<cR(C18bNrU_0}(AkUKLeMXZAf6>}kK)c<Gfxzx<5hxwpX%
zd%wvlRrO4h=u7K!EqYRCC8$ZP%NQ@3c<!y;ibM1DPu7}->vWFI4<kWam!h@&w-x(9
z+|c&ILy@Oy3p@H4C8bJOZ_#0L4-s1!`&@DLT442CtRmdOB9Jx5I@;Go^4BK$dfnmA
zjAO!lP05b4Wr$^SA!qOyrvYt4RI9m`IFFw5Q3ey9#Cj-`QvRtZhvP+tzL)FM6%R1m
zwop@K1kp4cFvLeNEhul`Gl0pg0Yyr<jgg`RwS6aExOF#m0l@zOL(8HfYYp`iy^ip$
zPou@sBHz%^v0|FY`|CmSR$sq8k|{@+VE<XXXma2eko9SIrIFZ!KPxIiJvFe&t-h7w
zn#Q6X&;S6Baia*%tYKCsV`viz{bl@KWcZEi6Ld7+WN67)57*gRfa4ux!!U%7_q2@h
z$rVHKkdw8UHHT;PAwB^T#)_g)tFCvJXbPeY9k#s#MEx_OQNuMkLuUbcV@Mrny{6B$
zYB&z~59W>4rWIlVx!Lkc!GO3Dek|}zlQlnMTTK%PzV~ZM_=L10+P~^;|KiI&iUN}^
zKuE+=yVeq-RA&;a%h6-XZ#o<1wqr?d07sjJF!d_T7OM;LgZIto?x$<E!pYTB)sad~
z6pc;i@vF9~sUlpeOgPhhT=!ujuLj*x??&Fe4Cxv<e&a@py>5*}bkiwCrz-Fnhipsv
z8nG5SR#3b&hcy(P0SgFtlhucms)(aq4-d1`HtVB|+I9QIv_`41>~?P~wahDfQ<(5l
zsbuJnuIgKbCWW_!V)u>*vBJVk-($+EAbRQ|%M(zR1u<}lhh$%~2pS0jK~!GmfuvrZ
zY}lHn<bi|F&|@Yf$S^GI1x&V`=KzI6F8<(<NJ%x`Dv38uA|U(-oF}S0?aCSec8X)k
zJ#4hiaVP`=1}>NjS%5(tThJ+L_OZNM8OM5hU>Ig3OK#nNuqb$3^-3F()Tv~yY3s~M
znD^u4bzEOJqub{y!Ts(^mpsyn`zuNL?%abODtOnJZpOe#zDRfhQFYlJ5+w|^INZR}
z+08o(&=jv7*7i%FV#!_I+?%Exd%nf*$=~4D+*dY%I{>C(XP^RY#~im!;~<hcg$W|P
zO3O@iR0?yYcuxwI-6M{;;B4L+`C5faE|~+V25{NcV9{KSc&noDqS3b`81o7S`LE4+
zw9Ss}&gX;S${(cD7@X*8w{xvI73#oO^TLYxGW^_M-zXm+CWq4GuA6>g*-#zm8f>j$
z4oT)RWGfiJLQGIZyfSxa;TIMTz#Kg!`7J~6v-#1}O&~6ub4?(@^QTKoL*riwsMkf-
zq}ZZ31t{Ew3MH+>Bw^k?BE}KW1a^njz<!P51gK!X0zSylS3Lg5YG5+of=|72T{M`r
zI7_xS@hdK;t3vb4_4|}nAy#wtak#m*ZoGHn;;h+sf4iq;F)G=(`q=rqRbpinQ<G*R
zLL|ol9=ndH0aK7meH>$e<`9L+f~17~YAeE&K?j^kJ`0OZ9mIcz?x~cg(odOy8I`{P
z(I_$^8k(jq@McJ!NFs_YlR2I&A@+JLinHwukFvxB64G;3hHeH!rzC#HJTTT?vkebJ
zC9iQw-y%|Y%QxrhITd55j4-q6R@V{3YLr^125T;K*txX8fi;}u%GmP9u$}-;pj$Va
zmJT+KEYuys6h6<hD{!_`<I;W-nn5&)R&s#XTLp@j!m1Bs%|nAwdx9mV1qka>&_4p%
z74~K;BUNM5Iu^~~nng3F!)a0z3oR#|JB(Sq*O*>n9sM$hXpF1Zp%*<it~93_79~pa
zF*Vgp^>D~#IugM3KtbN`diZaCqzFPAXg3k^M<>lh{4{M%yzUSw(Fgqh--5Q||Bm}I
z0sz2F1^holm;a}2-ON1ycWt}E^Pje5TiXAjK5#2b#hIkHyz6AE`-vf1j-_imNjzcs
z87UN*Fp^2cNouO?KI`AV10n!SNVzF_o8irpv`PN22)gm6dvRe9kK5pvW3zN%m)V@G
z@Asko_VPIS*KnECtT<FWc@ni-@@URCuW6r4f6T&d(#v3CoRiSVIPdW}@FNTm(oh$~
z8P9ar?0WK)a*CCq&|^gF^PY?IuKShH$bZDD?TL*x%BgLRb9gdMU>r?w62m|1nbb^R
z^yHBm5{N#_=?(Lb6foU@B%u?%(Id^9VI%l(5=?LqpCc(i7xr_`;i$q~vqugv3*W>O
zYi7+8VfZ`6lXFh{%rmK%m&?n?hbP7mUK0&(>~c3T!-b^XxnoA15Qcwi`-?B)>~QNp
zP5{kY@VkR&9q&{yDtrC|OKgpxVFT1ZnEX`ue(0i{@<epJ*=5<J@WC60k6bqKBC<WL
zhm~%JOVjC3_2w6&!R1f)Z^BCdL(@gcpX~B}+`pyov%~UF_eU5^8fJa8uh-rP_8y@E
zx^L5--?+T6Cj`h=cMur9KBG+@IZp3~A=deemV*xlFg9JUM0}v(xn%<QGd&2HbYQgs
zD5IS>K79~Gae})Nek|@ghZTJIvS7dasKN91%aiwvfmzQiaOi+UXRw`U9w;9&ba@Y8
zmiNCg!z<@+m+vRXKo%z1FbQzK;hW2YuAG?W{fNzA8tve3(Y>f(i_<64fyKw_aJCE?
zyWB?Z8$^YGS1loJh(Ht(5y;F@coszVtdhr>?9lAm2)`R$SUQdBxG4Xu?T_Um*=_=H
z0yb0=w93oNHQblnN0pn4lXENwf>*AQ5#ZY;2Q2}tw=#C$`U_v3!19UMcrSc|<(Gtu
zR6nP2dx#}(c#3Pr{P0e328ngZB`80OGmy8T&a79Io^@|;%{xHl;I8RS8{CjSZv7x9
z8($&7Oc_Tl|IbL=nWysCO1}5N@<F4gokfa*x{M}ohZZ<t^b?vK&!;amzQ}v-nY^)C
zNr8orUTKim>of#_4Z+7~j%cI^4=9o+(3BRuDU+>he+TjO=eAk6rY|5TTp<zsb`^|n
zclxtJjV|YmgmM4^|JR-Zw<lNPCzssQ7jKmC2B&pI*dxE)?-c$K0_cXy^STJ2=bc7L
zn6)R&9;b0<PaQkAeI#(g__iq~F6<RrDV?s{hse~yb&a*zzH@B$6L_ATF+Yjmu1QUY
zx0}h=-*d~0q`h6XH-bc!O=H=7)`kmRkT5tvd=knxCIbOUu@z?U1|?uXRJ@WDt49mH
z_7MLB6zU3azn?64Mhb476f_lc{cd;2NB~x1!dIOHrF^a@rasfMLPQ6#Y=~6N2_lPo
zJ^@f@@IGi=+x2;lPN+|`=t1N6bMmdNP_mUZWn)m#Hd^(0s#YQRhXpOW)k#@o?AmFy
z6C2c6BVmpnn>3LfB#u)JyLK~u<GI&g(Th?Z{c;48o%}mrLT7$7c)11GM;mme<HMlI
zW`OE?WkmPbdfi8@+%B#23ju}W09`mfU2gkKhkiiif_}TkEt;d9c@4bayJ^N5?ZWu>
zhaiXCpk}~5#xYYUtuf~_pRS&(pEJ1}N^c#fn3A3x+Fp=cPl%Bmn!_gmiYCB3?TC%)
zfHWsi%10##FhYo+gr;F74(KR!!XRx&0YhLrQt(NMkG>p75&p=grKp-^k~t4(j#}>}
z!*K^D5*p|=udBQ#a(6^8cg(Ls0goj*4UxRz$c&-knC<$w|FDl}JP#9G**FivQw73+
z{Q@%wgr^Hn)JD@dml1tghe08ZKK*hNT3sxD-4_$bHO8MeEd&rTGwP7s#>3my)RLel
zXUdb%H&JS)4iqi0h&d2G!549+)=&c?9R!fHW4Vk1<=%CMxvf&BVN_akr1@npD{F9q
zLI@hF68c3{kH*jtG%i9?A`gz#05Wm%ngf2Oo4wM}!SKXs7Q;{K^;<Xkqew|uRwSan
zMl=m2BMOF{^c+^HEe>kogJ>|KOu#Sh^kqJjZEEr2oQZk>gGzk_4Yyc))i{|z86%P1
z5}tvKyd&U9Q6vO&={#GbKBELcQne9pA+JVKw2dBuGEq%#62j;=yY=$t6-Er_K@<%H
z<NS_nvBgjK4H%>U7y%@8hxvV^wX*l7cqY5`CoQ??34sHE*a-g?aeXfm^4=BogXTo_
ziBAx|2{K$krbXNfUbQN~)~KWC6+dR!fS@<9-ruNhNm?w%;uPZr9kQkn$PoBy4BSP7
z;0VxM|0b6)#DlT(z!$Ud?=-2@Mg^M1*43i9p!OBNp{^+wNk0l*b+G`%<@n{N+n-#s
z{!x^>9=Kjd-bxo5{!Qm?XlEx{!r=**Kd7S`4+(K}7I;l2k>WLge6x5&>Y-uV;ksuu
zxX_>0!GV?NG66ul#P+Z}6yd}SdB^FY&;0j~0$LDurKrmc6dKS9%4Dwm>8?S1j!!sa
z2xLKak`DsX#C~k~kC;vZd*^Ko*dMcynlGt+E`8Q8SW8a%nW<@+1^==vNO!@NGKHBB
z6#J&O>-<#cMqQ!VRjo-48TeWG^-8s%dXFislFA^~9ym0b0ibk@*P#CiA72WOKq&x^
zAbCnqDaa=nC)_`{OM?MohKnW|^8z7m21)!-3|t(5YT2|7jLbZI>w<Wg1>^?D<1!q7
zqYoE&sZ)6XtRB|c&@$GDz^1c!WC=5V*Khvk;QLTcoY>uIS6GpsS)xAi@4Y2aNq}sl
zt4-7aj5i~M{?2IQ#>v!1n-f53iwQSNrsZ7vp%NvOQW$`USzk#Dhhyek-s5gJ+17-3
z%|Q3TO8O|3@j+jx=Nh_b_g?OP*lx*pQS@OXtu1$wPId{(6D_aL<Y;NzZyf#N^)X;a
zvysS4BkfA?i;6|=5eb;JNM%iNAPAx%M6m)rbW?V%8KD78%!H)-ps_qE@RafZvSlEf
zi<!x<16Gjy^*kT6bfhCpXYGzMD`<<iBk5_2m-Jy)@Mh#+!@?g(Qh`p|iACY*4TJD4
z<q&}bq%<9gm?mYt(`pnQ%^VKxZ6=g>f=kluy5O97Ext|jz9E~I_Oa^6Vk?U%^R`TH
zS*SEw1u`WpGO#d<k#-0r-HyR&n}13kz@u5Ax5&aoei8wyTf2nzG0RX@>89ZB<|5uQ
zVZgm{_{or7mF(U4+l%<KZv%jCt3ffgIY*{W=Wrr--_76iTmN5CLO4I>FYVG#iUGOH
zBBKY2pe<oC!k(GU7$MyAafG_)ZE{3iFU^B4WMuTn1e{tG`0>}}^nlMiF~0`N`G1sS
z4WR@$P4O3k2BH73j<7SmV5goNa{*9Ur22{{KFnQM&wmbI_qly%id#S=&0VK}nUioU
z8AI3!G@B_5YK-(bTcY+C4Zt%yRi*!>F~Gx6ZSurA@S{p)#y~K1YCR}^lj7z)9pAxK
z!b^QIiHZ;QGWH$m#f{$FfWpM$R)xifr<P@w3?)+N85F2%mMIr`7)UBdGC(c*qFXI*
z$~-dBMiUuR>O^3=#xJ-$T9i6O_KpyJL5C=wh+yV?9g~Qm`Uh-}UeSHYb{*G^+@Abh
zy<GrTvb%4+@o`^sj$tAo=STEqT9!8Gf>3*t#A+P>Aq@oE%VQMqMQI%WYYc&UC9tBL
zO63W*h)O|~>Ifps0zn||m0{yVp|L-oQJI%Y_WIdnb<g7K%0RS*)I=?>#BTc`9@jUQ
z9wMOkY}@rmScASS2IIW!PVXIDx!v#t9~5s_a(B7Z=U&sEs6kZ7h(#8o^<b5fXq=p=
zs0&N1ggl`f`OUfyiU{KjBYM7}92oA4rHw-#>tWf!xk|Bj?17SXL3iq3^H&w(y4i3f
z#u<Aapw4>LT%xUrELTTf!+75ZlxtUn&tPI~Scfhs!ESAe&QhWGX^tl5ctGdbcOi~n
zXkIv*oG%sA<VvCdI4v`x4d6(6UW8IZ+D{av{v&*1zDNY+8<FdaNj*%r!K@e7mtL9S
z06vC`tF1q1eLvhK1P+2YM|EvAnLf0*XsM>7yu%Kbj)8C~+sUn7h`Vv)=yd!Ho(^<2
z)WBc@PN^PX36R>*l2o2rJ<2n=0Vjmpj8Y5uh?dok|NaYda%AOMr(VW&OW;G<?9cU_
zyXnh1N!e~Fwiy|mbF>oET3dkhozacp>V!+bi0X)RFCT-Js!ONzkTNdzCI={k&xmSA
zs(4>aswlN$ENXfloNFg{OapCB$i6I`P{*b(+Dpwd{Y$e0yq$<Bj)Eo5u3}7!t3WYg
zIWLcaXYpD2xYnbIwRJj`2BXTf=v#3HvLT|PD-dV?MZ<Z#pgR$JoUr;~^eFBEOj!(r
zK`Qc8!p6->!LXg(ur|z`T_pLO&h;eD#&?Y3!jHL`iuv`~oH$%Vg!~DL<-J?AaB=R6
z4wn91{m?YOxGJOqyAMTKJQ+BbK~cjHshi&Lm-cV^j~kluiDXJrGZMwp2|d!V`E%V(
zLNbhxQYEtPQTjro#@4A88GBksVPAMNSb3g8uRUew<lg4DI<2tX4O9_&OQ6Myy3piZ
z{7eL?M45YgauUSCDq7(swiaPoeF@}jv}e&;Iz=WV7+sDi=B8iUQ3-F`byclKS_KmH
z&*Z(vLND(s9bH<3mBtk51t{&eQU$nr$&`6b*}Ix_@{U!%KwfOfk>PmlK2z7P$Oq<b
zm9$3%t|kw66bB4!nsefGXP8d^tTsQ0;emh$p;GZ#$Giuk%jls{$)P;s>97sjQ7jM4
zd4|#?wJS(-XirxsiTFiI+4&b@yg>S5u7mr{r8}+MF45AV{CIm3C5P%Wk}mZ$m~9D^
zXHFcxu&{r!5jwy~;-Sa}2=$kI-kCuflTVkFhz5b%NJ~zkGu8?Xv}fZ^GIzhDtsW`>
zx&|4Yu9hQ)<0TlP$6%u}sKA`fgb91OSrM;<XGejL`|ttZ%o!a_i#uS_@C$9MpIEG+
z7~(54)S0NNN)U=XseVubTrnZI5$=~V$rwIRytF0exi83=31q|kCREGgn!&#Hk-)et
zJczy5@qP<+3vrL14!9wbfn52(pjm`x^AAQlHxSQ=%y6KUi9I|KTs1WPk$6PU5|Pp#
z=_Up26O|8(07V4)B#<Wh9FUf5V2ZR<QF*1b911T9KvG`2s}pxWh79g{7pCe4z;P<*
zv)yDNVifNZf)1q_O(>)CHRYcI{ztqiIMnR0g49|s^Nrs_Q<pKC=@b+_C}^PSjVi2<
zNaoXb4V@Mkzcj6bn_9bF<uL5vsyEMn`!a~v7yo!e-rbH~#n%sZD>#^gD_}KBL={r;
z#P1dJDOQKJ!M<$a@wxvTKF2&}&68%d`;;+O-kwml>Q;<2qM3U*wEj+N3qh;<C}O$T
z#5MbLK-pbgxSxuYq{f4PTj=cd;uq7oJ~R4^b@7fXi?Lv={+TIRY@tq@x6vjd=U%eo
zpcNsdf)2zl`Y7wwOs+vz=)k<guUOu!j%&_a1+5hu{-_*Q2;(INtKLVDT7I__;&ea*
z-&gn_X?W8rP~!(^Md9l*N?#{=*;(dv;XXJIxa<k*Hjj*bBd_H0OP0Q>!QSTel!DCW
zP*s#@4Q?XTIxDU}b2q`ck`rXjfK#*3+mQIJ6}?71YP4f@o7RxJaAP&5rW+aJps4k$
zljsDjW>y7J`&c;u%<65ZE&3qYJ+tvgM(rCmw>C5gEeBi9vwI<-ewa6wMLACbf-;e-
zn&bsTcq&J8tTr}MuUE~=ku*nbwc0=}h-G1EaxXJaxm4+prg_x}Dd>iRAgs75gl<dS
zjmQ`7z%HLHmBtR*3-iKl!L2Azf7$q#n+^Fq+~3W5JWG;9k>7IFSkc54##v$W-LRzO
z(GJQB?<gY=DEqmes|6^ONS)XcDvt(%*4n?)gsp>0wniGcw79RE#M+#E?L8b#byA=?
z=gKRab701Vv2r$8v5%uCBdt2y@8IIz_&ZpW9>dTX8Y`O%rQ#k@ogal}SDOr-<slAJ
zstZJG*f8(&eu!P`2x3S^N8B3oN&j7YNLNX0>jm!3MWvyxWog1A|3-4I{Zqcu!A#}d
zv5y$<$GShXcvnBtyEewfWywWH-B)9J7o!!?1)#oDrkCkYztofw1y6OXejIAp2S(YX
zZrCqkhs5(i{yG>pDE!l^V@!=9LS!{#t%9Pp?Cd6<l`?Iq#L7n1?OGv%l7rG?Mp(yi
z@kya&!oEeJ302JeUho}1KOpNdV7a+48;a6+Dw^q#7~g(Zn9o;$_=0VR0Fy<NsBMbR
z6Lm%4>^grvP-n%vtLF0Cs@tj7v@w6j{&wJd!9713rNWMGU*tKZetw*wO{%ypGhp77
zK}o==*JEvEtHK^%3&oIEkoK3+9Uah>@BCE>7ad*1q}RfwBDfG^CWCZsPpqnAC@v1J
z(yj`z=WL(FP13gMa=qeG1%cWaeSW$=hVypzaC%3!p53B7Sf_zca+Qc<Bpo$KE%65i
zcNaZhqj$1l;~=n_XqMUQdCYSWLn#^UvoFY^ftqJ9Ob1E1YcWjxx;^Dw!)16EgxPOM
zQx~1rngCO&Q(Y-(3<fSNcfZO)Xtg_L;#1GTItfRk!2ZY0_qIlbsA3i%p_w>MIvj=a
zq)P-nAsUH$wAUiU>&TuRq7?9WMYKi`?KcCvll(EO+HWjeOro4)!y<Il*D4%fT<VR5
z>-rT@r>Q#Ef})F!p3SF9O|`nbvtq_N7Q5nZT7NzRq`<B!`v+#O>Psbe&D@&*snS~T
z=~Ky5IW4Nuy{k4{A+x@U?-z5RvOcYPZ4bkW<(AczqwnyvW1~w!WWrSHA}Rwcu%}7N
z(Oz%Is+!y#KrWJYPBe7mR?QBnhad~o^<S?Z)J8y-I;<5*sV`3AGE|SOPctkDB9-lR
z?4jCdX5}SuOd6KGZFW+G_)LuD!4M1>q6)Dsc+z@tp=@~ZHm<AH-IqJF$Z5q(Tco@5
z3giM_R5}}O;>q`OE$^RXG?vj|OOGi(ZXe}M^txT|qWjlsnN0QcS+xkE|C+`z&n{Cp
zg$8=EDWK1n&N`;txIY5O;<3A$vWEzt(3pd9q}+jeu7@XjfaS~2t-_E;9T+lM3!lUh
z*OWFXXNbrRW&+fr@@k#RUeXlfIw(vI|Co&rV@+(N4T_&>YuC<(RHZa|`#nQBJ;N^t
zhVFj_;l+k3s(T{_Wue~0pg}TAZR9%#YbtFRCPz$`9RvHSj#QX#5l7XYV^g*iBP!Mo
zLh&0m5AOMrrrjS}@JcTty`MjV7KOm50u6J}h>EvK)4+?2tD-zu6VOH<fvb&iVNbwV
zNub8ON?zd)QYI@E|2}X7f10%V#vgO@HmUb`B9&3d(jGqJhy7W668~pj&_^p&abb-j
z;}^yBfCb8eDZuw7!JfI0I3)FMR%OyqA8KgTTTsLyee$jxwJ(il&($-pm&X4TXj-sF
z0Y8>p+3}tMNAAr{i&}oVi%zwCFR~S`s%49nJAveoaNZNulUm7;PL<I;m2}MB4={L7
z+=@Gb<xubu5m`G*(rugRsEu(*^+9O(V5l~evhLoTP1I6*iRE_L^ErD&vZ$~3{K}5X
zP21$YLa`JYEx4AE*6j5bdJk3icHVIDw$A+2C(C<HQ;<(M>#<M!d_T+`LwC`R<$v{Q
zGrp*VR_M}jn<{<!(jFvMnM2jT5O0*s=$1k_80sV@I5hqDbj*&)d&UBnK=7N!p}Wcd
zD7aB+IK;)mz{i;T8Fvnq0TdA*J=75&Fp2g6{4*F}{B2~0;EO)i3QwK8yzytO|Bz>`
zj~!?R6zMx#6TbNf4#F(#qKi3fWgIgt={IGRqeygD8de&Iz|~jZkv|wMBnFPnp_A<V
zH)6`G;7j3Mx9PVP5W?GAsn=QVx0Gd3b>Yi6)fKe&79?9m<qWm;lk+y3>gl~-{8w3|
z*-9XR_DPZ3UZCO68twh-7w@1stn_}mra6*1BmZI7JmayuJtWj*^?e9Hq;~yh`(+>6
zlhiPjd&?E9j+U0D2VnqtTeJIEpzNs@p@`3#@_=ThbTMiz|B<2a_I(?biKs~S{)2^b
zGIFIBQclUXv>>3Plq3@6!$RoG5O4Gf|1r1=*s6x<YwT)$F^-d%%GNN~maF^~iB$tB
zMy%*Cg!*>2!b4pQs6)1_c@n|4jlOSepcA>*?$LFNhJN(t&ytbk)rBWp@3s8<Sp!-|
zN5<~^7lhEbI2Vv7nQ{X0^Ohj~UaPAAAKnob?n0dqiv%rAP^kceWR!kCXy;(;R#zt`
zck+Z3!){%I{!?hWtXo~4RrZg1)8;kjdW@TEVueAdcu97beoKW{40;k^BKc=$Lp!aB
zTj5egK(W$~vy1z-Rj(bDCaQ?5DeCe5uCJ9kj#%=!+h0`j4QJ&54Dj`4?&369WZH-p
z5IiA&y}Y~tnxeY9y1ZIDLf6y(Yu3Y5jIXL|Ag|M#-dQZHYHC8=#H0tfLp)b>l83ct
zvqS*?+|yBUmhvuEg#L!wO*!>_jNQ9jco{W}9jNFXuG*&T1;0pC_c-E-4)j&7iSyz+
zyTkrBPm~YeHm{=ER~}XD(QQJRUW0rmucW(s6=A#fA36ZZ!Rd@wFRq$NYD)dJjkoo*
zbz^7n#~h`nH0x-{>9<tCJ6`ZnsJLal1UuL_4d&PaGoxIF^5#gIi55`$PZm$>CSM5O
z&dB4BSk5~wWtgC|4`RpMX7+TpRI{;$`)u!lr1<`s?P`jLM&vTa{ub<tH$HY{=lD4!
z$rB_hm5NCfwIBo*nZZo-zC(XrS>wFudk{MR*jv`EL?JPy&PFy8iVMbjcwDbrdoRWQ
z@jaX$ioj#1zGDivY4`>=C-;Uox6jL%!?SK${2Li=a8VjL-oEn)AGYw0r$Q_x>fYH4
z5RfZ@ItC71Q;rNZvHKoLq@cd3Hjuh9Y>Wjr=L?gPGMYq559}R4pKak+Vdg-&Bby|>
zlswww;ED3TU)xBasPrg^64*#6AYVM>plt#C$NUT=HDM}t*qA$tv7;3R3O8XN*$s5A
z-jLW6<EAXX8lFi?Vl*g#<b|mejx(rqOWx*WAY`e8bSBPi<|I!}`onVY$k26Kwtz6L
z;~>M!Uc!#V%koJSSg8FY;4C89<tc9H-&lz9u*b=Mq{V#I0s*pWMLUkfJU}wUos5A(
z4IKw84Yje9WyDdhj}<G>xv44s#**Ufb`&!2#{VEt?&J<fmg$ENLKTZOa|DP3PZC67
zNSSD0nc@S1Jj+K}eu#VXJ=vS^0X7U_e7g`I7;|LifeE(EvoR>fc0?wW3<-kaOor^q
zh~O-vl@VEB`(0|3cK)KDp0oSFe92zfe!~=%w(S<xxHE&e`AXQVr{H%^&{`A+q_+T%
z16wZP@3siQ0zR=X@<|sVSv^M+T;S>o1-;P5U#crY(KhvCmy#xdbw`|jD36|oc#IP`
zhX+?M&OQ*s(~{*6O2O4VHQl#MhgCXC?@~&I%?KOw4Awp=tee6F7l9>x4q1gdn?BaS
z0E^aoB>#Gw0IqtQ;Na|R{FEh6?#8Zq&vR~{*Nz;bo5g^h9v5d>S7fh91NlARB0BwH
zFzhRi_bwL?E5~5y<9V?BcN&xce9v>44QLO<bZ4fIh&xVVqvH`=W4<y3T<Vk#h?Aw2
z#_BJzG=@{&u~3Q8sckOR`4nW=#SlX#f>Ub(h8F0}8Js5Q+6PLuafZ06NW3O{7Cc>-
zZ;0?S0%#$Xe<oRaEl@k$2+}v(gPCbe5)AZxydUp>G1WW3t-0{S%XdsO8-W9UG#qzS
z$M?b;1|~hrJ~2OVS>4tcmI2rrmhmk7i|?U$5BtM&Z{H#M^$W8pN&pyhR!^56R5jEt
zlA-|@DFdmuCGJ<pfrP4%%?DZ7!JXSpFMBS39ydEBAu>;&PxsQ^?}L7zE*ZW>Ml#bV
zIgEuA8{BqmLITed@&MM6m<Z06wf~iH_qXC5oE8<Vq~ysc4NH!gz^~S9x^I^oTME6_
z^W>fBoAcRi1)Lm_+oRf#7F(f`0Cz2!7~z}|{5fHrW=o2}U<XA>7Go{zftX51Fin}l
z$%ZRrfcQDSxm40|SsFZ6{|9w6yxS9AA!Bk^Fq<A6CB!hW#sY{gaC4a0a=ipqk|*P`
ztW+iZsb(=MO${MuZk=lQIODK^2lU@R78LxxK!!<OE00O)CSZj~SBbUZE_k@ju>17~
zNtEL#Y4;|8!MVTBg$=8R2eTJezg<u$5c@dF=aj&}7UB6dfg=txam7vV-$0-)Lfgi^
zkMf1e>hk?phG?&LtyQvq%!lpH@!sfqyu|x~D0Y$?8yUpN&6#49R21ZLnp*W)h(~#b
zv46%;3pVCKtBFI8tNv16kLm(jmNFPW4o>b4)&Kb;ry_&<O$IrMhN!J8T3slh&f@k-
zxH*pYAHqUW$Dq1!M+3NGj7r;Y4?=a|x`$!CK|)}MnznSknbtXM-&-j$d#GFi&vEVS
zfN4vB;gD5Q!N4JJql^#!v@^xSmQ-Q@cLmuXvr%GaZ0@C<#xbkj7q&6GR@XoNxM})4
zJ+oP8PJzvBw$5mT=BU+7kau|-h_J0Ld4hT(RAvHs&2s?{0+-^q5k%bB1ISUk^yMcg
zVhOwID-$o~QYm&!0qVbeZ68jsNfB<9Br5uS;64}c4gnW4H9ftT_1kII=L$~7Wl$>q
znmRXJ`~ISAhv^Y%iRlyH&g6Gtw#&Dr6*9oQ`9mKqgDz?3i!b}b7Y;B`?X5ZU-}$QE
zOIhdao0S$wsA!gXLDO+Z@!4e7W2Tcoh(2VHb_v8@H}X*~ylBuZT$m&rEpx1haxTO-
zx3^t*<^BdDxbwpPM8+=2vo^aCZ(vBuXy?D1_iPYGqQ|}W<e+r*SVTz>bo(63pcwfM
z9wRGKODFog@X$c)Re3>1HY#;Kz*MrZUVuc1CQQU*1J-gJE<Jm}*9L8LO{fG4a4hqt
zK$h_bcRx6PJ3z{Rd%>B<O*CW0TVUU53G8r8g|?%Wi8Fg!ftNz|9_c4~fKq9WQrGQ4
z=PwtlnTNcSFVx!%4Kl><^PS|62lYdeOg{l};pgqc!@)m!mL>qkYI?JW{SX;q2)9lN
z8H)Gui@42>iK^%#vGh?~CC$}bH0#Qa4~)ye$jOh}H<S=73H>}*U<c_+CUgtc3>7If
zDHs=>dYL0jE?Ku9yXM}0>6>}&bFVxZv<;;l5Cdq#Ut`9ne4##_lk%;596}P$qvSaw
zW3jcoWhhLj=oC=rBiG8$Y&q&23kbd@a0n&HGF7k<-vYv}DG!Dk^Q)?ZGq1L|w&-Q@
zx>qDm?<P;6Euu{_uA@rLMh*0a?+}SO_6^`xr+{D)Vf8maN~t#HNXMBW#~_V(Z4Jh#
zb9?6!C#Z9dyq&5%Ks1tY-cAkvI}AbKltW|Q0jVyGMZi$Nf-jZYGu!eeOAB+J#^<|&
z!zM7g>^U$aP&xF1(d;>@VA5M=XAJ<4aqLj#5K+Pk1K5Fwtra?*H92`4c!9yg&4ca1
z$T~kPQws{cxNp4H+F@nlqr_d$;wz>C?)cMj<u}Xfx7IEeokJlvY8>TR<t`CzZEXX|
zw>i!Iu@x~iG7xrN9sZSa`K(7LH|z?HO5JP-J=0HlrTM&v&6%68lOq15JD3ZZ?^m}b
z24J^@RQPhlII9L;i7-_&uKAwKl~5_od%b*^IenNpd8`6``7x5(8?sX(h14bUR~uxg
zbb)voH#93|+=bMLb?;A4C355G{z7OO7kPiN8h)#FWoqz#E(;;{403qL0%&}a>#MS0
zrvpwMixMWIB&}54W%*5J#NN-Bh)h*%c|d5nIRWIJKY>cZSeLLmzh?%c6i>92%|k<=
zo-RIwdI5UBINt%h5FOA{wDd)hE^<O(ZjhXIoc*;Xonb<YPm-LY)i_>;n!03PAxj{I
z@VNs=^L+&=%ttlFyJ@G=Pg$^>jM}%>R9KY4<xN+xSXBzA!&F2C5U<bVHTQTeqb6)J
z7Wxu_r`X-Iun$<#aH}Jjjj9>Fmj)OZn{KYQBnjBW%ELhp-NBTXVux*KL2~B^cG{S3
zy>5K<HK?0Dig9LZum4p*n;O%)FGFbJ5E_)tGeTo?v1dCdiqV&SpP=DZ3s^mrtilXQ
zT}Ajj@S7>Jihq9J-!D#Vc>f8)k}niv-r(oJ=;dNwLHI{O3sqO?Wg06*Cpj2<(C|56
z<$DGfov5Q#_;jTGv<rp9IU=kf&2Uemo2EIlvOD9{)s)BcXWo5Z2hs*c9f}oK38WJp
zy|F9~$gX|$1>wg!JC<}Ru2_q{W|N7O+TJxZLjIJwTjJ#8^|5~=#b`zgt=JnwEvhQO
z$DeF7=)z&MKP$@U_)1u`slNfM>um&|wl+4QF+V8O8zh$eD(&vNB=}Q^;}Bno8Mb~{
zyTQ=0Gj&($pPW=Itb`j-HJv(~2jceWXl$9L^B7hFVwPy;wEUOyQg+DN!g>qH(xNEb
zx2{vVSpM2C{5L-vH70cfWgR6_|A$EBfDZ(~|9SWRz0=RARuKO2=5au|*D|C4_!{b5
zimO^iY%&7Oa%oU+-)El<BL+8*vYg9MP7w@q3fPq)C-f6XL^l;!kE01Ke=>mX1$QtG
zuZ7FD%E*c@j70BUf@S68xff6tyT(CT@2YW`$JRrj8dQEgds+ws(Hgd=sWd`oGUSR3
zAFcrYzzGIqw*&~!YppuK4PxEkP-HPgE#bYQL>biwePiIRVb`kz+n$#0HzlYK4n8Mo
z+*c3r@YDX!?#l@ZIl#o-|E?|o%fd?<FKR*u09b*&$<se$KDtB=50rO*BCf{g00frw
z+yoW<eFA-5dsCYxA2jAl2#HgOcjQW`pc4R;9+I~o?r0~=imx+cG{vzEmC|-ubu|CC
z-0)PY#7cC>?j1d)F2QybM8)g8m!?*O_W&r^Oi+p~{Rv(11Bc31SrSYs7zg9OJ8Y%?
zGM)xsF2$PRW=~AK?|CVjl%#eLr5qHYs-AoV2E@y#xAe?khd>gyy;Wd0#fTQqBr87M
zkbvk)NSIfK{mzwrj?qh9T3Uc`%hS*B=9JjLsu_nQE!r+I+Q;AX1@=)CTGe%UMWt;S
zLZya5X~0=u=(LLqMb<*;`;!P$$f0B(J5Jn5%wb2);e)85Jr|g5AJ{b2<(9Eu`}_oz
zRO1wAvf~-dh5l64rdDU5!isVFIP75a?!bGIUM9=S|FWl1PKcT2dytkLT}2(@4yZ76
ze}S~cR8){xV(%dSra1g9;?p7$sYIbSH-^5RD@><dvqo)nkER`TAWJW=6z#!C_wUjP
zEskAt2sH`k{@0be`e}QMYv%kMHC)h`le*zuFP+(042>PsdJlnc*7A=?A{BD}O9wqV
zt`QUFs_Dw9kwhcMfw>|B82@QAw16a{hV3mF#e7^j#xwtr&PY+F#RSZw6;$~HT4uC{
z@r2<U$oP<88c~UqV=M^;6FPHO1?NK8EZ}lN&m<#8oK)s2Ij&wyPnQ@M=<?i1Gnv!}
z4wI~`Ag?@uuKc;W`ceE}qTX8Q0w*R32`}5Nwgil!VANQP<FDa|sEgpZY^O3cnPXr<
z0IS6ySDX-QweyFi5A1f{PqZ!`a`?TREffemaR5QEG5}8KuvH0@LeMsbEgFUq+it1_
zs9yAQ06oD=Q%&sHFu9rfIcNi)KrTS!6INzUtc^LfccdJgGp9&cQu1hGl6<mtC~^~8
zJF{I^cPg$dbc@6bBXN1leiI&Mm1e3hHwRA6P48&GJmQdgl{1UYDDJS!QJB8+I+(8@
zoDa}>O%{Qjl!0qNU8%(T@M2B7zk?SW4<8o?k8$VXjllEGPB&($R|UDJ*YOlv9aKuy
z^8F)gLCHtF+s1`(m{ByQiLboY<!QFh6Q~Vf>Mm@n>Dj48*rvDI1<FD%aCPY+R5j;k
zRP<BWo=yDuCEjxHC;32Ao7+m*dE-GBid=Ah854%B-x$ZsE;$8MK^ro|-2SW&Tef;L
zrwTge{*|gAP6P4Uox({->jzMtJs?*%d`euWrRcU=v*+I(CnTOt9!^c}X(zulIeZ_Z
zZfs<fN%siX@CQ5>`*2`6qFo_zbGkASp@F4_gskDjCD5WnLj;L;Yy^vNvrD3d#hCZw
z0cVVFhrdHmRw6|1l3gmKOc+!zh<l4D)ITdf?+w&kfB5(xw~hzk0V18(`n-{n#i)JV
zHRhc!4_obZR-3!}#@U1pSWkpyU<mmr%mMq!Szdb_5eOhAQnJ?xYshVp5)6TTL;dfd
znC(2P6xo2+B*y;cqs3k7%`uC#7}KbgT){Ld-;b7Swpy_*pTQ&`cy!xFbORnH>(s#c
zdk9kwma`Mc`n*M(r_fNOU2zQuyV9`6#Y2K2(EfG^<l^WSL}DI+MyXMjTZfZnt>l9W
z;);Wmw`K|8<s@c%?x@0T{<b+a$a_WGa)ZlW+<Yy~%a%s&RLRCk1}~TQ*Ye)x=43WY
zKHW%r`%*^rgMNP892bT?w-7TfyWr42D_}{BE?W_cQC=XfWH&>WXvR%)@Q|@8M#4rG
z`Hoc*OBkO^?b;<qSteWqCf+a%IoJsp3a01VmepYsE2nl9>v`sHA2jW<pjNn!b{8ro
zn2Ud5Uj(dV+h|ixHDu!M4$j<&_beQmU=@f-=Bp|HP}SK8MwPkoBL1=v7X>YWR_pBh
z3w(yQ1mlcMtE(21Ly@3&Wb^cJ8&R*mDC$GIO`2juENi39quUR4o2^QEZm!_bk+2hc
zUX)mQJ^r?oB?j2_uD~MI7d)|(th>>&`+7IX6^W@1^};8@Jz-!f{i82CC$zy<r&8c#
zFxYi~Gb2j=G2uFRjYQgelt<(FOr$BxHJH#n>#zVp?9XPla(CXx2=fYkvgDEz<9KdQ
z)oPL645neK{{}Z(i6N4|hdMz8hHngnHfqZUS4Slw`2`TG>K<7hF)(NV@J-KLgTTov
z#${2oOIeIt%rq3yoJ`tdA4MF94+YYFOAtKrKjZC3dK2K1y!&QYmaDkp*1Yr)(F!7g
z?c>A8_hWyX=moh;iqLK;9WNMYDVJ4Qv71?){D}QNFVo=D6R<uC*}zV{Cy(5YpmD>v
zpH;t88<t%fr*$QSb=z$gCpK+(KplaWR4S8A9wpNj-Fl8W46*F5T=cXXWace8k&5l+
zX+v1g^0)&0UCRN~QF14;AZiV>;zd5cZJvfJ;SV+ANc)BR(Ni%)r*0E{8h$v}tu?fr
zE$*Wht|*$p^qp~=Lmh}76wHrULL(eJ3v&`59~4!fQ&rW>&2{=502xj8v{auL#DYSd
z*)|xD2(9-JyiZlR)64DUWxdSKQ7*0KbiJ{@e@S9!p+LkpOF!=J_ww(4xgpfI+5Iz&
z99VC<-`lP_ao@!k#%my#(I;fcdL0{2rz`xrSaDfryv6VF<K@7_LFz+@;CGZb@<N2A
zW*DV1&Xms}VR@x<4*G5EAoRL58by+tT(C8}<r{FviC&?!t8(A-z~DBweh_;uShRF1
zUsZRoZ=@h=24y(C2*UV)H)%fo*wD#w=$uR}jh4$;xGnq`;kk-z6Pg9(Umd=Yns^1T
zk9)1{aQgl|-40fFh|3}m4w-Q|k6coEA8t}=kvRy{&v}y&HrRTXRG<tX5r6|e6I7Ta
zX3eZn5mi#Hh1rNz4~3>4jNdi5_hkvVxykKizaVbSyvuOfd!j}CP5=?Vd9V4PnJiiz
zq-47Eb7Xq|z33kFYh$G66LUuhGo%?;*goUR*At}B5G}+uSWZpSI@X3NBk4qaiZDi+
zw_e%k);W4Y8cuPoaOpG<_UHxhM|NZxyg4Aw^VU)DB<`NHW(;Z8hCyi{c|-33Htl()
zSZzHdy_tA0o|4l)QHH@Fro+FYN-eZjV;5%*hUmaN>cgdi%fjuwcgfhl!M*Djb!W4R
z)yN=<D17Rb+4HJiMHpvJ!{BcQ06ez<Q06j4`T5i^*oEMA?xv(;#$m8a!M*!$Pb3<B
zL7vrdPLG6SJ2N-*8?SI^j%UwjFqen?oGvPv;m_0kxtG(4T>M_4K_0hrSD?A;h(?)D
zj|W@VF7<V!K*hvW6-o2_u4T&Al6*%bRSo@z-9@w-GVIo1;*nFMeb;oE+&?j-<YB<(
zIVA+U<y&Q%llxL228>O(kNJj%)J0$+f^)H1*2FBD@$8#DV`R?;+2N=rc81h)eiK>*
zcP>f#GbJUaeZD+v%7(6riqTR`h!WTGdL4>q>XF8^x80#DW9-+6bM8C_s>QbEN6%du
zoHR1PI6jlPs#6ZmMdd--s=#<6cXnTZ(ZY>WC9w&%m5u-5hAxm2@UAfH{AmecYqKdV
zsf$230m16Rwv_o+SPM&*)b{dUylLJLfSXi^p;~(SW{y!0UE@W&cFT&BK-j{&4)K-{
zy>LV}X)5l{G11o`2+tz?Xdy$Rqzc62`ve0ye=Uvwg$uyuR8u&tdLzrTnRMn0+7pm5
za|806!2G`Fo`qy@9=k{%dxNd!isfE~sU)sw!?o7zHxok}=UgPY>-Sap;pU`40O2-y
zxVQaZIZY1~$p{30Dy+orCe%EZ*{D;<d|q1Ayoj#_29pZ%Dd)U+7dr=*AlnY@te{r*
zj9hSZTL>)4H+TlBwQ5vK<y9*D(itscs6{st+8LUA&=|-|tp`mrgb5>-K(Peceg81v
z%bYSFn_YW>VRBR|v-THdNEXA(1H{rv<{*B~BMDK=i?6BowujBSval}#9P7|DT)6BU
z#q|0tIK>fWma=!A;Uu$A5;tvj{=ZjmS6t~$5SHuzbjCu%6FR;f{%fH3d2w)Sn1&{6
zo!z%p)&~lez9|9Y%KCsh9aVJWW<`bhDbQ-;2CA+Wd(H=lN<J3KM-I?1)qb)!wG)m{
zsn9GHm4>|<32^#>r`az*U34ed3nSz7lQtz?P&=J#Lq*QYR!;MqU;ux22*3L&9k0I3
ztc9j3kJ+ebz9<WVR3S*iO7O(Vy!31N994H89S$Belj0lFOg+!7p<((4GB$%_3P40G
zp)awBw!sM@B*;fHG#H`#${I`0g>!)AqXCusME}>HKcDW@q86<lk(P0WbB@FtDER=f
zjK^9Icv(xO&UVx%Q3jps1gfK}q_$vPP)Zv;c)elya7k??VDAM}o`i?>R5o^1%NDvD
zJjY>}tM4nnqwbqtwsi4w6JPgwQ`z$5=R<ag;gdf@S*+-8n-E@J9n<Ed5eATAo0F0f
zS|WcPv1oc~K6`Bsii8xwp(ZbphdbSS8DJMA>OK{@fz%Gh(xE6{<|@*G=?UL{Ffd84
zXP{#YmA8~0G=r1bK}TI9byV=AhC_szO>PN8Jp~>{B!A^6MTehYl_<kFH&*T$s}c2f
zInr;v!tgcqDTnJmlGS7+OI(gvJ$D{iQ=rsP_DUi};nwPIT={aVbK`#ob?>^Ic#THa
z<(XNOXltvDN&(TFCu^NJYRfCNiXKAyahFG5>;#SHCC;^&g>Nj?=0`DC1w;^}OGa`r
z5aj{#oQx9u3m(|Dec9$r&8f$(xFX#-Q!JAJm-OGvfvYhhM@uYM?QdwSHkEZF{XT8E
z@x!bGDHiWt^RGaa?E)~Z4OWs5i%@$!RuODqJy07mW>I#}m<OeEpCV~hV5hOon#>}+
z1O<!k+CkZ>JkE#2<g9S;Lbd3uyNrFF@o7Y;VM-$-ui4R%VAu65&INf*nlaqh`8=+a
zB;m4?SJeaS>EU`dYerQ7l!mu^m61>JO(Y43xR&|8$uhlr6S-!z+G*by?N4$Xwjv=4
z)xjc7u_1U(>V=&%v#dHr1k&<QwtK3j<){h@>bH>MIQdnCY5h!K9Vy8wlpW`!o8!+C
zxFp}+taGa*2gjO2(fC@T6jFym?E#IqvBj+T!@)p+DH~rS$Qm&8ipu%iIgGwZtQ3A^
z3x8UloRZUHc^7r59HcMztx*2Dn=^A+!b5QTOZmWl>v8LW1EHZ0NZmBkFq7@p3e-(J
zTPXX374qTgSyf%$Y0<3r+U-~ZHsNcn3VFUHz8Tt+O|f1>eu{M(eTT|dhfwpbsqRB;
zyzE?hdOCOijo*(ozW;8iKD(Ke!Hs$UOJ+K=60bdAhorIgp~VL)mpx_>CtaEPk&&60
zDc+k!#PvJYzl$(7EQ*O6Asc$?4sJlB`GfbOtYBX!+~l0aR;b2y^mUBd>{VlqaFihG
z0|hY__cai}tgnDuGHrvYgZ(d@@|iVoq%A@~gAd6lAuNge`TuMl1No+WKd(1C|G(L6
z_j@^c|FrgfH06nB^<Q(wq<W=&%RT3#q1itCBQ-&EaKB%4VLO~0{r`^rV6yc87Vo8J
zU$3txM~eRkK9!xiOmG8m*n_F<y5V(^_4lg)0of+|TUk4MewMzVw2Fk{-TXH1GItK|
zVy8#>R-J=PHgaO@zMcIH;QSxP&Y>|BVA<BOy<^+9xntW-c5K_WZQHhO+qRwDOwSvf
zcV_(qs=LsuzV&4(s_LI*tjo(Ly9vx+y&HGow9pmmk7VoBb@XX`aesfWs(y02M0f1d
zlb*v>{r07zUBeZ5{<FS*BVy5mRr6)N@Ox5_w*fBed$^pNiCK=Ds)uJC0N3TcM=y`s
zhPebe9(pb)p^;VO@^Vjqg2~X37JYJemAoL?)NbN!?ug39D1K{Npt4b3G$(0w)+_ax
zP!Cp-yltDNWhfF0V&jtrY`AN8HWB?0?J@vz%3jF<Kxtg0v6j%^TKeq7jtVaWKTgVv
zW2>C|1lT4GW|isfYhl!?*emZbGs@U{TwZ4E@Y0Ow_rORwGOO+1RGM(P{R8&s30k{F
z1HxLs3wUXPFFi>beU5<-xr_e&MCkF@B5H<u=c#juxBe>h(VMq36X|_D_5&7qC<*t7
zzHlDgV3$l@bcjJ>Iwh}Z4FIq=R^ln{;Z}vWO3{2)+1Y^d9z2T5<C<M1<ts~M+ecDH
z1nP(Yp>%i=Uf{}qf|liW3GC3%#a`T1x6&2YQsb~|a3Xt~-&~k7B3kASnS`=!!*Wo9
zF{InRh{HtmZG55{LjTE@ANkpZ)w$zzBUJfwRI$5J1Ei)4e$(^K5|mAYwUj_$1C;6{
zMp&2SCH`kEspR%`XMZ_3@WoXwY*}|g(I<#`?HSB0q_Hebnv*6NV~cQ_tU+s5@gq3U
zGQ#neyc07{RNLjoFD7tp<CN?l<6Q^67vBB!+iA<T23#dGJaY2jD0aUrn|rQ}M{t4+
zHFj(buHEX!-1_`O*5f(Q(1&EM2UXY%!{h8%>Vdso*qTNCR?W{nThwch_(=zB)(xxE
zw`TssPT@ms?N-BO3vs;lbs&@b+-;G~L~xhRBta?~TIf*x-@Sp`6Nc9Z{y{`tC*+4d
zuT7PSvm}BxS=O!#KJ*F`qj-EP<e5Zt5%<h6VbZ7Z(MNLQv=NH68CHg!v>($uy1*T<
ztXt<$ma4zl%$d3x+sOO_`+poewqDW|8<r9Ig=`SUpck$m9SLysj;gGIk3-fwVs@al
za>*7+>lDdpYiJr}Wu;lbElS!3IBeCCm3F!c_z3C7+wY7@VpV<cJvvT3EOv|WG8<aS
z;IjE%-D-EX4R7^VvU!q%E7+FvnpEWZcL~nuLud(fXH=zM4jSc5Q}=OP@O;#y{?U@7
ze6K$_!JDg!Cz)UL_n|`P?iE&Al(OfG1X7L;i{&qa#G8!}<60Ds!8S_lXCYg%HOX9f
z0NbE_!Vk*h^!Pv~aBXv~d9bl#Wo8z~;JKBDFsKD2G$>ZB!E)UEqa!ln*hoe_M!K~R
zH*xOfm3H_Beuz4Lf8Vv$ZQ{3}Tklt42T6lIK(c>-v6>e*Vk~=RK4q-p%bLnm$Oo{d
z9Y9MI9!g<DaN{}{vBBiK)X-IG*s#rW`GDZ0T|UMMS*ktNqLkCu8{)d9o+r4wjEZ=I
zaH3_Ra20av&_)h&(iqu~xaLT*v-2^O9zD(&ln+S<GL%DslHIv7!Ag*qYf1bRDA1tS
z_w10!*$Zipz~UNqeO>G4KY?E;?3EaWk#MSI&y*84ReB)_#RGB1Jz2+8PvwNE4Mo6R
zLGug&_pp%#^Z4Mi3)_U~+N!OZIh8Ei0X>_wa;xe<8R%Dn=Z@f`2aM+8_WZd%!r!Y*
zLI33ISVWyR>zZoe<oVN_*2Tr{)#CDeE?v^L*<y;8h0XbkDs$d)!lW<clFI);*a-L8
za;tiYxoMsaQL}!QC0|6*_biuFHQl*%Mgrr5(Ymt#tXNo#McQ**1uFX;bj2EC*Nb*2
zcBFRkbLodvVcq>}S8>^4ckPwIsblk;z-AC_BvGw~3x>;Ow((g1!P`b!645a30e(($
zD0<FkS9<hML;fSxGSQXOeycdST_Rfou6)9M_h3YPD%n24e3+G6ZY#OA?|ch8`{n*b
z;P})$u<O=mImW?>EL&L-8AbWXIJ<%SFlP#0;h5Y(gb9NHPbnMh6Ff3?nWO7N!t(nK
zKUUyW3uGKU{7FU67LA%D;VP@7VlxY+|Les$*a*Z^eWIota_&V_KJIo!EDQxtp;wHy
zWZ%A96jccQxjqc4hobIcFo_pNS!ORckf^jxco5Q>dyH0Dc+PZ<xX%9ls>v*<cWoeE
zF^QPdn>c07u+#ADt=EjyMs8C(X*jmIAx!^`F3bS1T&qIM{8F%2GSw5@pv-(+@En62
zJLnHA=d<(+AlWwkd##-*3vyAOq@-;JeMKWHmH>~DMRD~sgziZPlkE%N6&z%(8vBYt
zvxG3iM$5~fst(x25@kiPqw3+*;4%;VQ=7d5M?suq_K8Ug@a@w6=C6Y@&w~=4@mgdV
zM?GcAagkPBW)$`6Wl0%EUxEnU5)#Q57z#pXTyZB77#4cEQL@D)TSDj2+4liv4A@Hu
z*606lgslE<ut&d9pkiMoLoPNmr$FR2t0X3v7O627PqhaOf0{JWz3rLO43e})XBVf{
zE`DRaq=7{z+nonlo@|G%#6OlcMW?213d{@R7*QkR&B>bI5=^Y`^QxM&ZYYTjCIAIy
zzhsAhHeI8^rE8PU!wMWz$ogWAGaHE4Azp~u0Es=-+u3Z*$=M2ZXE=mEW_2zjlyoUm
z0k#Rli6|X!duYEEyWwg8wa!#|f$f;FEM5tOd*mR-S)q@XSIw9`?(87(bx6E>5S{Cy
z60mHRAs1l|={73n(f#kXYEkvcKv(nG(&LotbIWOiSaanjPNy_4Blr-zsua*siBoP$
zVM{I;pwwut3C(;i+TBHnBgz~WzlEYm59uE#L%|N{l3W>I<J{+(J#WQ%Fh8T|0A6eR
zWk1l*>p_fcJzjO6IM$=yD5WlK$*HD6Y5`X14?&o?uLoF>zRt>$aM%(X{X;Js(B&g0
zQ@Wh9KTw290PFe3feV5FT>XHtdMdnq<-Z5%WE>2z@n!-&pokCN5D@H?U~a$2nIJzS
zR)jcoYOv%QNUiIqK094Tn1%kxW+S|#tL|PfyF#lWyUMAHs2VJlk4Ey`#PN}QJn9$N
zY7qO9lc3sdHoXhtke7)~`UIfxm4pk7iEz0(`dem(&y!AU{r7n6!3>JhZU-3Q&X;vx
zRT3GgBWs?AV!7c}q{_HRWafX&;6|GirVo)7h5W6^DqID*8X#fNakAoJx*5f2=zxH0
zHpIJv_j-DL=x3q54p$hq$*jPdWOfK~&?Tqi0%>g$!Y7)xWsD_2lEbr>voTN`v==1y
z>6LazTXkLO#yR{@Lg&i_Z;2Lbffa?xzpYCKrXMZ1oj(w^sXV^aDzisF!GP9ia0=ka
z-#d9EFC-df(VKA%+p{!J5tKS|LT4yl{bu1NfbC0;uk5Tk41$<r11-$^_tjA{u(wun
zvHjP;)usMot?`kpeK6!a$xOjx_9~Il%Q_ww6lug_(uH{_LP?$?GP75$7<r*)H|DF7
zR!`(=AvbyQqkwY}cgUc<gBP+9(GuX$mn8*yl%+*od_!lrazkjU+eKf}83EbZKCv@a
zsa`zn-w$K#%qn^%Zx`3cfjo-_AMk@isj+HvnT@X2U}8_olyD<ab}ly`ch*h3&TWsM
zXKJWbGfmp2h(6n<X8`ZiU_2?SCUOW=zj`OJc@|!|RP=3w4TX>LN+H|Qz)@bQz0v(U
zHh+_#f+3=->b@x)C=kHfWegoyDh<GK-9)T+-$1Ack>%uK`|x@jAoiFqVGAM5wI{w%
zcA#SD``(#ye7x7QP%)h(%-pw789~_FLBVywLoOpl;CK9rM_;ojTu?)kVp|sG4mql;
zlKt64)&+txt*$KAlNr7_=FI66b*u)rGya+VBLJu|^L-NP9MT%+IYQGuu)j4h#7&^t
zex5;%fFh83*I40f{XxdQcsTHIQ^M?@vZ4BIr*)b{;e;37|AMQn|5$^B1mLM06PVX_
zvcHwci~Y)0pfHr-xlZHB&;XLm188L<sS(PWP^a9njrOsO>D?isw^OGBhZrAhnB2^q
z)b>9eQYTNLNnG}d4aj5-{bqXQWwn(zPB1ROwV>m7Hk)@B&g>Z%tD2X%4sAmgeP$zF
z!G0XZy-~d=%gMjYV%w-ZFV1{BY18Kq3I`ytwnKEV_9kkt{a&_>T~}-fXw+dAl7C>b
zWA4rNFYpaBu6nf~`OqFH4VQ?tGFWd4_HJ<f#&c{v8>Z>1gzXfhCXW!yX<9z^PbzaX
z`)^$X=%*%A_|3Ngjlv4l8CXn8a^gM>VC_WuGbYP}B&4Kyuhq6kiGqM$-DdwtFF&-y
zbgx{`De?8i>Hy}~;|JoDtCp)iHP%`56zvq+kxz4D!3=iU4%p75gY7j*lsy-^9r#)v
zTF~Qa2e5uNnlZOeIdb5_ll*lv{u!Gd$lmAxePQSG8Iy<v$UqoN6tA?c5t_8MS+5%i
zKwz^PLaKQV-m)Z={Wh^0%^O<_Ukc@FoEdm)aV*~`jmh{p1{u>|`BZzFl*Qz7rr9i^
zDwblCvR{6_7iTuj>99IuGs6x~bOel<(IbCP!V33ZXHLvDR=AM8QjLZ-Un}%$m}h(U
zT*@ugwwGF6?;v*2ybRfLn_XhP?~~WvNwVQ#XYL=O99~Kq4(`c6qyaA^Rajf+FA$#o
zAy1<yuI-dMvquuI48T$#;d@FJq~LdheXplbaOLj8qjpVw&aA#~@Z~E;2aTKK`-q8w
z(}n#6DSp8;A|k{79-M_paEEuh!gcS5KFQZQLw`9j05I3m!LoMN*m~5q|0|Uw)7m#~
z+Z%invm;Mwz>KAq;n!Q=j<H;!@cg7nFS(elk)TwExKBJduDnjB!p&-tqriBlXycUy
zcdMA8GoT2YN=F2KkH9BP9}OmQ93=}m<H$OPMW`?R_-P8z(Pi`fBoENw-DpraLdCWm
z^#SbqEc~yF5nBaEJX-3|k!j#Oe>eIc4g0~H@|+0|dkQS@B(M#Q7_HT4B!K-CeUi1H
zTdlRzYpisp1iJP~>Zs=UqDN@6LZZy#EU*ucc752i9hi*N(kbMS_X#m%fxMrvY!+qs
zIb^Ohz#>Rfait>DsXbJine}XY2&W~5S-ASY$yF?x+|7+zokK0@hAm{w41p#&Eg!l4
zjFFOxe5Y;EzO1Sr?0RDs7H9QW)U8m7Le*35S_%4tbYX;bTlFcl35w;AV1(~{`cgk!
zQ`@$+NtgL6&T@aiANmbd-r<?atLGSFz|nwG&}6t;w`V6NAgeunYod>JOjrxsz$$tN
zmF89oI{cTfwWs=K$bUb74t1rue~sb!ad@h&wW=RA5rXq(=78a2=Asry2Wm-W;;x_@
z3&P<<yL01ZlhW2y{@Mv+dLcOAzjtvG?or9!{_qIQDAop;gVcddW~<!5p}?lhkh~7E
zG2ns>j;#nZ<n2<IisXPIQt&D<Ixa;5$KOsF0}w7_G2n#2-~8QZXcDUc+`TS`G`kyb
zjo?%4#DViaJ}8y9Xc=uU>S)rJKnKSfp%4bfS91r5zw9;!m|FAu^HsC^PK?~*l^Q=X
z8T|{>DLbXb)!Tnt8lssv7wr&ifnDFS)7Y!-3~gL)K05EsCN3~<z*5t6dEuMCI>2mC
zv@An(ip2p+mEkB-(lH-vyq7R*Cme_XLOu}sC{;Y&by@00f6)kgJf$NEGdF;}1Ztf8
zX0#t^GspS&u&9_t4o9&S7jA#HnzmdtjAMRfC6uB=xmBGws0hX8bfM&5rQI=ez1+3T
zUYvqCi8*!Q2@Wn^5o?)l?jTzQYL-E^vWR5?kiltDHoojg)F>N?k>A`_MazgHE1MW%
z*OKiRd#&O#-=wMAvbuTY*;&2<<}%+bBmb77roSJRf$GxqdQeq?o>+)S8w#Y%kIC(d
zQ?t?Z=e2pMX`9W?*}3K=qv>fk&AOxi1+(cbss5c}ib}4Ln?%qbK-gno_aQWIf;BdT
z2rN&1X9ANC<aDtcUd$0PiNQPj!x~c&(I15FlYtZwSYxxV0*iEQIFzOTf~{JEDI+ua
zntQBzAhs8Ms~0i58%I#k8)7C66&I}!)$%o_njYbB)PDut-Hc2RUnq?A)5DDZrbdXG
z&I;rwJb}g442@Olz)qis80hw7VuJj`|BW+z0ozl9KVEQDq@gL{3SNfZ#6nG{F1<o&
zuN$+nn}Q&=n~Vr$4Et+cFKBu@8%`G72E1kx%0K}*Wqu6?V)D1sILz}<%Cnw=(S|&r
ztP#gNJiBuNm&WJF3#<B-1O{F&Z@eEEUi*TtOQVn9>bdNIY4>byv>cebyw{PT4}ZW6
z^fPVNCk<n*oNZ}G-SS1U>8!Jk!uqb}VW#ilzkky;z#J{oeD1~dy>In=W;_D3oRKw@
zS5G|H=_8_ThAW%F4myvk&bszu{1_Vh`7GC;T&MCp$>*Fq^1TFOdJ>whe=D=#CB-&1
zJQYBe%v-z#PUoxN-m<%styzycm%o8v{`jw{K6_(#God@*KJ2a-iJ~Q_TZp3VR#kH<
zP^gdgo%d_`UE6HZU0DH3cGG9Zyv<h1HScxY^e+1}aRoXzwQ~2?_?lhT2C9_VT!zDf
z{gWx#F_yhdXyEaTuY8>NzAHUCc~84Ug%5Qxlq}4=dLoXgoR?eYRJ>EZxt7JgPTx=v
z((smohu9jy^P+Z4(pRtH4sg!c@l2Q#6u?oeaMnRa|FWg>rA={wNxsc^MbVOCVusD6
zlZ@{7s~L-sF133mEm2Ke1*w2JX~Z|j|2IiAS)eElEne_vV@5BBO;<`pA&p8W_s3c%
zPa0$P$$+6EhugcewA`*s88u>}%G~?u)tv!@FI!jV^P}hMWBR8Y8b*BWb7Fb=EB$J_
zW=-|Q;+cg_@fgH@t~dx6#$C5+0#3o1YI@JnBKzA=eVQQBPcm=+U-AN#MP9#sv>Z@j
zX2MKlp2CW9SFaK}IsB4REO-=RgIka?gve1+A9*=~8JY60c9a37fyhq-M^%xXR}OVZ
z>+AtZVU2&5h1fKWrhaAOuGJ)({JjsF`Q&KW3-j-_pO<CUIgKn}3c^LLHIBQ{#3@3>
zRQ=_uEuEjct0SwcVBOyb0~kYkCK1XQrOxSd^XM?QnYMB2z%PEFP<It+{VjxM{sUGL
zur2%zR^~v;kX0A@rrt%nB`Lgu{BCjxe@FdR91Rf*p*kwVVu(Dw2rS_D{B-^=&C{al
zk(jBUkb`^A3&LN_A7Mj;X>A*7L>LE^$J$uf9;F2e*dQ36*bSJANz}0v(<GL~6a)Cv
z9AO6|k*)zU{3_{`jvi;^Cs1_9A#H4iRRgOw@B!EhRPhb<@v`}l8M|rQD#*;TVjFr5
ztUOKVscn^@MX*2S@#yv2#P*0AZ+Sz(P4g)G(g<@d`)-J?G1uDk0PknLbkF5z0**W3
z?BT9lXx5q;{awa)ij#AY`nO#J6q6MN#lezYuteWzAr!Y5E<W}zMw=;}vDlx!h0REm
z!4WHL-v-&U2sKfZb~ab3$sLp^1u+Do7JL;tFU_>5BM_k>^UOYakgtQ1;5ObObu0JE
zeHo32n5-1l)N!VDVyNT{nG<X-NZ8M*h(HL%s7TPlg>S$;Q4bi|cBsT+0g{#kozlzH
ziSL}YbK(;{Evk|g9qd<HhkPog++7Dmir>@TFM@)(5=TB|a|Y!wggFo^swW)l(A!}u
zjt0NY*DJ7y7tG7#KPGXy5#**&gH`O`hMILeSkJ6=2{)fjzmeeeW?c4m4O&D8*`5bN
zT3*2ZAt`%3{8Hkv0~bsOKkW|91k6r(;S4oXu&!eVss&T9o2>V0gz$63@+VuB_jhNS
zH@H2;7CEff_)VE3SVO*++%>*-&d}rC#Ek<UI5HhW`_1l?v1$?`t#WLX`)3FS2JrJd
z{S#Ma&e`T422}ig0lUi*VKyy^oPWDcMl+;}8f?i?5GO(mE~zf!@D|hsah_Tkx27Qh
zw<)*)-zKYZWH4UR$Lo(DtV2-oA&q5H@5rNV>Ka>|=8}EjeM8)phoT2kCtOc(j)}|O
z!uPWQ=wDmKiL&v?b;<igy=mdmg02MqPO-m_1QnoXAa>HO>L2|kfFPa&0HHTX-PD1~
zZTn{Met$e#Q9KbxzM3wx^DH;zQ_MGd*igDK0jBjC@E}r#Kz3q<$8kj2%T|ey{Z|7)
zBqe2z%wOC04SBUqZ3CCQ_^|%iGS===FKwYWU#4Sp$F*UZya~@`CW{jhe<Km<rFJt5
zzV9DgqH!=n9*Uw9sxQ<<>u5A3EYzJbq|5w?rb4_Ghtb5><J9A1lhSzK)Xv$!GWZMZ
z=P34tZ<70MXV4{sRO5s6#P+Mh+=-;L@0FF42mOm10ID8MZQ-v^RMxpzx5~~vAbKs`
zMHotsi2x7EvLZnQwn)N0hbS2`0<8{pSnNB{9IZpna)OCYn!mWu#QS_F;f!Jjgu-lL
z!J9-w8e6KM;v-<(^d1R!5eHul5WNOGfi+5{bnmBxgQwl%!F5+eM91ed-3aqTtqm&Y
zWAFgU;t4X3j2-g|e1myZBj2<R5ka*0xnFW0a4sO8{wLthj-FqMt`wzS-GD}ZlG2Kk
zbrE8S4FOWjc^}8-AINL`u`%ogXhKxHYk-L1C(mP=_*TY3?D=MrKfT=Zt0jC2UIjaa
zSB5rDcBFHlw@>H~&ZX#k)gMG!>$AhWa!aNh9jyTDzyPMo8g`0!e?LxR9JJOWDEdj3
z2MFR%|8mk}=(6-xVAx(Fi3hth-~>SWw(C*2tT{|Cfu!=oc&I1joL+kYW&sfc=S?PU
z5VL>iPw5v3;R9)v^sIX8QII-Y!{k}47~ipM!~hp#?i=oBvS2?9u0d3E+K`86-)2!y
zN%m@A_C{g6m&fIXbJ3tt5O8A?ny~8?v7GZbTv}w}bjJQqh&@gR0HNwJPT<Squ@ynW
zvN*VqQ9m#Q@)J(qLB5SYmUL3c*ka=1OltYkTs63?xlJT=q=F`=&d+&Tvd9I_Qibi`
zX~#fY2t$C1(45aHZXCrH7zqRWHf`-OPc)WWCz#bJKb-Oc-rUH=`hW3xliL!B*&-^S
z@IpXU3*-*6N=3UFFplz9uB#UdIEF1#YUy(=t1Pl>RKYZ&hVp5v1?6<Nox)t-k$b%3
zI0e^^i``;xgNB`yw<9n+qZQ_4K&Z;bDf9h<oeRm-VmeZq^Di_Zi1p*QVe@N!vJX@C
z6K3WJ98h-w29h5L5i93>B`BD~U6|ab#qhbAd9un%C^Vo}7HV~pBM7fn%1X0jyyPaW
ze3^_<h)rQa!&_$Ej&_t^V_oStJiz?IV#aPyJBrn^lMNmgSDf)2EP|PazO=8P&gPts
zTw!jmdkNaW^%nNcD3OH*!=n`W^oE=LA9E>&^JWwvE36EGW0W<ic=fW-s#q(b%lR3A
z0bwGgNLG{xH3pnek^IQQRZJ!eHgEy<cj%28$wI+gb#7~NZ$Zt(f&xZq4W=)V8nDCC
zIpP!56r&6h|Gid5-NB%@NlKmhrES~BB=)B@OrR*zk457nBSz^IJaub80jlV%BlW01
z7ah6g^dXQWX65%ZE9_t(Z=Y=>Ii}lniNanr3;d;3V;py1kZ|_n)j-SQG_{>II@vWE
zABIT;$4c*knHY|&k#*Hr6&7$CHwZP=B&e6n09T^R4Vz-yG$lVQQ-rJC9BYQ7x7#BZ
zW;nE0ABwl9cy=g%mkJxpsHh!DoSBcMeIoC88En*+h$bKk0_+G89aM$|Q>#2&%IK@O
zky#mn*oE~Il?2Su4t}|JPF`_J^#By=<|jRD=&-67-l%^f*om9GG}r-K)An5BIFq9*
z+9XOLa+)RNIDm)gZ)$;y6tb1)boXK9cIWYAb47!7bs)pU&aa9wubB$UPW!;=zngw$
zCD?c$r6sF?srs4A3G>vZ<!6!q%Mf7Rt|oy@`URE78_uEc4@r%^QPYBV!@UiPRi1yH
zd>D|Fo~c%E1$bf?W6(xZl3{qeDwvhpicu@ltfRJ3_KbUn6g3{mfO{-x&o96Oq?uC?
z)7wYNqoMF`9LQm1O2A2n0Ii1IA76`LV-<lM$1RuqoAieqkSp2EmLjVbY9BmHlmM=v
zf>%t4g&iYFD6WJ7W~n7dr~4hjUa<AKVnNbn&zUn6_yslbLL)vH9r7U_6tBuNVjxFr
zsW&h~-3snvsOfmoIz%3o#*JWaHt1&@+C7FC>TR4^#`v@zlPwB9ZUZZ4^3rrH9|Qu^
z!MR9Y2LqLt3ZX@?D=+VdAKf+rMiB_jLBcEmh-kBVU*3&#ldnF3Fn(cUESo3cz8pOb
zTC!|dFUSaX5SW19Sr8w{pZgRD!NX<->{s1m0t{=g;?GWj`k<+SUb#*`zS-?&-%;R*
zaM7K~z-V+>zoW{;aHwADtUKH+9{%?sTwQG9Ev^U0K9+wn^zLs=87QBD%q2sE{V1kP
z+y>Z{zKAz95Zniry)$Pbsg1;bDB01{lYcq_c&HGPY)KHG0u^v<KwJwU%R{u@Sd|?k
z{gkF??1S0rpxy8;B&!Z4Envzf4JPa`(Ryd^3<t!zmj#W?4oK=h9->ATAT>!f&Jv;L
zR+-l<9br(-HlKegL~{$a2A<-Cbi)DY-Ms7^JP$T{!H;ikBIYhQntvVxw##KEX)F=a
z&*iegUOdGd6TgSal(=A3U(Z;G6I#~-p|~?$fnGTrs>%(^Z;o)S^VP??3sY-NO}%1A
z*Exo?Ks*HkgnsK3rZnlvr|@FJNfG)XEf=5(PBK6~sB1^x_ah)2=V9cx8D8yJpcFIp
zDP9Rx0efgH#hYS~aT|h9`;N%uhTVpzCpg|qx*fdEt&%PEvte)eX2wdU^Erf3!vKxe
z5Q$h1(8moq?Pnj)Q}Le6KGUCD<Z}_tw0X-p5L9HI`|>yNN<k3vzKxW>VErhzl++9j
zp#@@zdFYtne&mT9K(-0gg$-^`bs%TI3uq@Yc6)8UG8Mg=_Mq|g#9kIofM{xv({nAA
zsgtNJFe0Y=bZgr{+_@HiHz*G5v|}3V+<3w1=y0u~kTrAllMVH9{Ve^lifl8{O+qi{
z+wVC@065swtp#;>Fax#O9n7Vm3ri6WfWkEAp>P`ips~^vV6YiQq5}e7vo`(JWf}dn
zSGF|n5h>|^uQmkS{E|a0xg>#Ar!?1&VROsHH-wj}OW_suxuxEE;vO;ypHBK*RvA#I
z8F4pajRSSlLz$g;Pe(1ltF4BDLv@nDs4oJ&Xj}lT_}*>bGP#<+IH}pYG1G7g4{!VI
z)R`7NR*QOgLou}FWgGESpnl!=Z7klkmaG<DX^TUjI%Dj~R-Gs#Q5jsy3;=<k(D1`C
zlg%KBKknPZ7|i0{hPB^y%i(d!8H&Sla8$vqZ4w2M#TOE(?CC@FBV6QWcv%5ixK>k1
z0%4p0>HaGVcU%o)1G(s;q30asKh<*tQq5gTDxC~)M?-;j-qlMa;#1y&1hfc26>K6Z
zI?y5-vLgXjZjM};CdI20OJ|jC(C!%|?j9>Pk!<DZj>$W_pQI4Pj=Vm)%~`x06Is{E
zgez-MO5u(yO>($x;pz$-nKgmp5DhJ>{^@#|C|~}}t`RDl8~z6q^NRe)EMRF@TA$5?
z^)pODaJ)%Z!79d605X!98<X+T1Cre;R$F(*t8>chEtGq7rcR7FKg9WAE|;J>w0T7f
z>{wzS9j7#>fYQ2lYpnd5{7?J|tZB5`_gL;ts-(#5<d6lu;Z)iP6!MQ+`b-;FXvyrX
zUh_4-B^WrN5Sj=rpI|%s+`8J9wr;=x!{{x;x9_oJ!pNE4zzJ7%vNT5;GEpi1V3#|D
zLt3Yyl~!`qz5j6lHCLq+8nhlkVQEB<BhjHWg)mm8m<+0j4$fPD&xplg);Y<#Y~t?V
zDxpV?jRLwT5+u+R!@+BMGWT-9L3mEXUQ2)#E9{oUy4maPpXG+!u&bq0tMI^?czJ`J
zDC$|Vv?OgqrT8{va=a`(wg)rd0f`COQ?71lz<_;T9fycQzE(lz?&9Nuwn1NC;*o!F
zgV?i=?d=T2p4T&~`xKcgaj($0)C#ls`@U3R3Q~d$u!fA}o}k$Z0umeQP`CgB0|pX9
z114*?i4)LjBIIlqzY8d2Q$a*LLC^t?IDu^Z6m{Vggq~37>X5%I4FM@`2%lXAP!NZ%
znWbM>CN+QV0FIIeWa`BLYW(g>-ve_52tuq1L<D~8YiA-@LY=g#L6frN5R}XtySF?s
zfHQD05T#dKi%k=#Cj>~HQ^P14JkgomMUSo)Hxh62rJm#rt_!~i+ad#_oV;ZE57Le4
zY}28)buy!9d6q8<5CElN0JGZ%sZ#~78>X*?!Gn1I_vh2oj+YTTs*1pM8UD!3DYG#J
zCRaN$|58RXFl5-V+&y>EjN}ca(pzb$bvqWx(W@A91{UQ>xG4b?iNUDWb2Fy|e{ePg
zwZd9kmdyp*1_l@Y0HBmYU$21*`?%tWLl*TJ3FjKLZ2we({qImDH5StJ7scLKmgWI_
zaLlf{UO5q=msRTAZd%&KkdQJAwE%vl#U(B4*>L%>hQp|MT|cw%2d(~HPuM57u;PHr
zX8t&^Ln@^ZX8-y~-ej)I8o#-W5Q!&n9J9r~qS`H_!*GF`hyCEqO#wV3E9c6@W#!*i
z;BJ3DYhTNX#sALu$VQSu;yU2DCP!(~5R0J9IS7NL-HFKiWlw*XOdsD(UyNdSt1B0P
zyOxKi1rA{^#_^r|!=`5AaV48hE6vesflqsLSK%rit}T_F;LR;#zSPcA0K}WnL|`C3
z<k#Di`;)}fWfLA>wAy}e=Emn)Vp2mTUvc4)^Ap!b{k@!nW;i7y-k4Z=CKn<Nv3&R~
zs7g_tbdAW&DlG6QC1wy|X{P!(_ycz85jXRZBk5t$7q@O+x`DK})zh33mW~h3gtrLA
z>V1H()HWf9%Z~ou0naMyv+<4z)jPf>F6R+ZEMuLIq_|p;cCB_Z3!=~#-J4w>G+2EJ
zs({GtCcR!oZ_(#Zsk^v%83T_ne8Ek`n-gzEUq$<1>*EN16SBx67O)pL-SLHpj+Ot3
zh12VIfK>_L#~yBPi7%7gANmV;C7H=m{sZxF>;XH!nHG!={U}sPPc>><q!Z}9K@%8n
zJ=sw-7sd-fF1VB2C&Iv-5oskO1)1@Ps^aP0l83kj9k@MsBBhdmt$E@5=YfpoHdvJ7
z21dlzBQRWw@MlLJnJlvx_)^|UQKCo0pw*?q?1K68Q8&M6!>GfJH(=iZjh%MFQ^lb7
zRC)QyN-!?;6{osfW*X$D@=YvU_vi1B!wI>%d@j(5b8k#qGS#GvsB!5Q35DtX_=D0^
zCkT9;y-nD#{sB%p+L6RJVv50B>3f5|!`vxs^$0&Db+`cz-Mk!>j%7ubNT*pt)CI)i
z1dOE9oi1vNP7~d$Il)3-p1^GDaksnJWr=QS2vcxHF`QO%y5s}TZJW%p<3SSE>%6oV
zAqr+MnFU3NHYm7ohA`k)n75g0DZ!^aqLJ-YRW@&)+tu*y<3&IFjtj59Jm8Lt%nFI@
z2c?N*S-hyn1Yb?*V>#0RrnpzQz5@uBH#4m;_xeRdMX*RZiM!e2j}nP~;YI`$NL8k8
z82$nE=RqV2sAQ{X5}CQI8JjtRwra|RY_Kx~Jj*bju(QkR`p=-Xm%`mHseIrIh<|6*
za(tah(6qs%CRs3?6`1Mb6#7yeX`o6D+RWA(R28m6H{#zZ@{C)?!LcXVUgDbtEVnlw
zo$~0?XUi~>a3kW>wWins*NSNNSZHa{qJ%tmKjZ~c1ut>~#DuuIL4wAd7aYvQBzL*7
zxoADiCAx3aBk~CxIi#iZm|&(x;LcN19mVo`ogG-cbAO83`q--e#C9_)cd$Mr3!Wj*
zxPu?4tOK$Vl)O%@KOGbsR}#dCZy?r!vzd-rGwX6?FoDMs1^X&63UkkXtayv76tI4{
zb5ZDH@gjI&#n?D~oc=t3pm^l(j6lcm=m~yfQ3X+~<Q2k8om8Y4@K=@?zE@V=4khNu
zw0k-5znqk6i=K!o%mUjuwP{h88L3*urZxO(e$hwa3V@iG2i6Q|uLY@@|3WY4ADb%J
zeL`YJ@C_}`7w5eWB%@~O6$qTZ-%k|ld2)p};u6)N+>LpGT4qn7m^2;iE9ym4{gaY{
z0=qJyosv5T!J)mUC0s)kaonfxa7cbxWB*}$XFI!m4$?V~x~$Uef|E2j>5h@oedU7*
zOUcS@eVu|2nv#vsgf2wJmf`oKr<C^>T7gHSIQI~7Y8Coh_Y|3+9@rgU)*dw-<TZ6P
zj(FpUg?{#@5rkHbHUhc^O1*?OgRV817T9h0LHZeCc_MQ=*u^{b*&Jq3ATjfS?Vx|_
z9N;ZFoIt4q4un-AYCFy%R@;XF!|t)YX>db6ma-l!%L0#u^AYsm%qafW(DsWztoLtS
z796z}OO<k7AfuL$d!Kc(ju{O9J6h%W_wMWE)a^;%7@`rr8xJ?n>$7cbOau<>i!Obp
zEsRjZM(atRUi|zoKKQc)=8nf8rLS+V1(>OOVc{hp!M5u=GrGgke7cWnVEof)EDl<$
z(9sP&TUBOeLYU`o#RFYW`oov*nr_R-+Vphwo5@SfaZXR#PA+QijqJg3$juJy%QhCX
z8`rD%?eiitACUf@?XB}|^+{habR<+El8x;^y1bHFyA(~Z!0X43zWDd|i{&p_*;qo$
zvo2F8c+&2!4!wYC7R<Bd^_K`NG_*iR9}{Y1Ob<i);qVwGXHL{p%50uk4J>$sXt`p9
z6I*oi+R-Pw2ByW>za-y=9ND>|pQMxk40iQ_@arLXz6?syont=>VrEAAhF*`E!M97>
zP>!k<A^73AK;KVX7`?m!Z-(!kjQ5jor`rYbvdj|q27>n*S6?q7wAMke3l!~yLtYx=
z3NmkN+EXsk&X5mK5MRJekfu1Iit;{Q!;cL>)@q1IHX$P}2|eLH{kF1JqVdrz=!gaj
z)C<zi9HDdJgNz6}*+D=!43k0><R{d@KVZfIb!W?%Ujq;S3~R@{(g6ieORLA02-(H7
z|2=_l!N4&n)LAAB-0~BNaIV&CG)3e7c+VG19+;tWWNNChcw3%Rwdano_5>0@pH`Z4
zU^Zi`oIv=&IRF|!$hqViNvUdkOEJ|9Bx<errgQS-q@qn7E?iodcjcP<91uU#hbnMV
zo5Ni3@Jk)|^!DP>mfEz!kMe+M(w0te3W(M9_$0rHU{<q3{(=8bXN`mX^22>V000q?
z|H(DZ-oe=MzdLI*DQMd){Mwnn)Tn_%a;TV(hzUc*O61kc37ZSf6TTb08UDe`yqWYO
zZbtaY;u?Vr6T|bME6G|*%i`g>#lGE5Ua7**P!RZKNb7cCgxKum{e4v+(yThJMfe0i
zhWe+Gq$P&;FR_0fikMnHf7M_Qi|B%djDs-@)Kn!Gz{x=91-TU!`!OmY5B_$LMac|0
zl4=&IDuyyFkR=ad^-zrpAI4s1DY1}RbQMwA`M68kCcXs5wOC;xGyS=}Nu{_pD{JlZ
znl)T?4lqFr`alJt3}md4aPt(jaQs}N$o!2K!nq@BW(rP0Atyq*77g@^)4Pn)d>wei
zO;}CF$?sO6+~2mR^9>vpLXlieB0#ILDWCXZqAx5T51}wV$fTcWfawGA&={%Z$vD3a
zS2i2cplncyHPq1h)!NVaktMD)o(9S+dw|DxmxU-d(<;{_c-jVhlEA_iD^-TTJ98!k
z$0&xs2o%_b+jB>MYALE$_uqE<$EbbJKB)SihXN^rO&4tB24!qgmph?H3XOI0>#{~X
zUe03rXCK<Zly;Bmz#^3Fn^}~*OJ1Ovc)I3cJDHY&3q^fAYY=T;6V_6v=RX_2;`A2b
z`d4foKUJ)2;{rNdzI5@Qkew4uft1{dZ?yjmpw#|?aaS+^fX6@oQvm7O7?}U}0NPTs
zvRM#A_|Dd4K-NBJG}|`yQ^2I4p-oXt&n3o}DXPadNoZxaSkYNHHhsHdYiK@bI!K1<
z&Yb3Kbv-dQ$zF4FmhvhA;j%q<r`pM;17U{$y^<PH$CBuD=rG*Fq6N5~w_8;IAWs7g
z_TB|xIirDv7$NjVfsTC)7ce;qb$K=nxb+kv-V)#Nk=bO3fuc}b42G&CV0UfU0*l&!
zuAv}+MZ5?5;q?A-!K_vdaRah~PiVVGTiHkSMbV(nyIqnx8>C@xhSAHf{dKYtuD%Uo
zE^5$uQM!qFG@`K;!t0X0;(vW6MsALH=1uj#L=|-H%W(fXJ}y2sfD_nV)bi1Zi9EOC
zYzk82EY+b)%HG(t@23c8@k?E|wwjYkX||+IosllFexs6Qe=clZRiNI7J)iD}LB*J8
z8qJbJ@i*AJ5;&+;V}vweI_5)wNyB&*=}SDf15IfL*aJ!r;T4Q}ZSAD){TlvEJJ{~@
zGd88syJk`xMasy$l<Mx!zvEa}w-&?NrQpxx*=YnZP>v8tuTPu8c;q^1XE?p+vespr
z=E?!Yt6DR?DxiATEmEpSEr#dHq4-;NWq+Jo_OFc_p;jjZrvWOC_E=+x2b4WhRbof-
zkh#R_^y}`{W_9mUEL?m;#^;`ry_#vL=dOqJ+f3OnWP(ylS)j6WmHZy#3S&_6ekejm
z5O>uf`c1TAW$t`zgy}$wZ-jmi{T<Jv%aj9wbid$Tt9B#exI%Jq-JDsI?ipUE+uduG
zgTt#N$EqlA8rblBec#|mA&j4z2Uxz<b*p#j<QZlzc!7^=AdZ*S@o|=i1|n9vvdl`H
z%RieMBWJxqp>YL<8M)66*%6db>rb4>+F%(*=9X#FxQ0`e*vw{;(9wq|#)C=N*`|w4
zqd1C2l*o}ua6;GfBJ#0t06nFTS)wAM3hv6Rc%viyq`-7uR^cH!ra2JrpS+nQgUuR6
zRy+yUeA-b{h)m+*f=JU_z_WjgO#gTdO;e$6R(fLHTaT)k-JDzA10GAQm5(@7=7)jg
zQ9WiirMP84o#Le=7;rs2MCD!=UGQ(Eh<h>Oaoq~wl0;5<z+(TV)9myGw;*`3*moJ}
z`IsK-WY`hQqbkYSxTp?6bbPgrUT2&IO4SW6E5{cx!pVFy#y)FoW}9bTH4#Bo8p+0z
zPORT_Go4PSDeqpxp#`jBOKSqIwAxcXJT++cpGLk*13x`2)S<q}p#Xj09Z$!<Krsr)
z!_<eiYF4T!8J37cK;T8>5%3o^`I3VQAFAfpt;mRr_#@CZ7(CLWMNk72E^gy5dL{?*
zvc{2C*cKxbHJ6Ei+o01#g98_^o%YNeVKfouppv*{MKPNPhft7*@%rzg^9r-L*1SCF
zm#|^NcYM95jZZ#vY{_oPzZ916iN64!M{>z7;a>1~Rr+|xTemnMoLOa7I9V|tUPySR
zE7VWTX=&U@Pg$Z&_SRpi5UVtn+tScgWU?-iC@WBv)O#Y`7Ce>qKC`l5i@bqfsuFTe
zm1J#7#%Cs^6u-|a=;~+{8zpeZJ603Uw+YVo!QO$_kAvwU-#-m4k#HBtu@0JZtJcEW
zHx$qNhQX7Za<QCpk(^4u^u(JpWt4YjcmI^1U|W|P&;2uN5P8|RS&<G>K%Fw%GnYSt
zaz9XSX3V(V7bCXBt+zyyv2amEg7yhikLSrBxI-P6i>3v8+YY{uu^0Hzf9x2!^*_$x
z=A2K%Lhn!7auM(zt*a08&{DZK5|}C0<}!Q%zQTnSX*SaseAMZaN2zm8ybG~Rua#7t
zwtg%~>Y~Z~>DMMWAwOUH^i6_b8x{<ir{FhpU@sgIQfh88k|Iu}UD}hxfI@`DtiLD1
z@!s^D!a}~{|D!(r5q&)8Hu6?k9cd!jTu3o9P?it1?*3gI(Pu`vjEgdBhT6s@;sT%f
z!AzTZR=qb2a~mJpLQnR31XdhCA+6eEG+0pbIy|in1#f?M<MjCFJ%yCtJf&bt<j`F5
zp)d#9m09>^BITY`y?B3Pr0`KdWTWwHej|9;%Fy}kkCRTNs%<=Dac8IpL@0L<H-H2n
zjxd1L?bHuI<*BXZ?19G2geP%Pj&soD0gBfEig(XZe|+$mp78aRDXlws^sA8c!zd2p
z3Rc^@!}wB&kkRIYObr`5%QWZK_DCMB_U#$g(+*mFA8E&!V~oU0kq_X1rZvBM!;Crz
z002SU|1GWA8{7T&wAQ8WVY5Dp`oouFke)=T2N@&gQ4}mqEVvm=<3}C4T~(fBd<poE
zq1htlVb;3mgXd)OHH<)9wS^o$HSK}xW+c`5Ae3db7d~6CPD66p>*YEnVL|4F&$9d2
z63Nzv6{~Jz_9tQ^{>iZId7yOYy?UZp455x9#?^Hu3-#AVS8R1NqIJMvW{)6&16|ds
z4wDx5B4FeR)iCEP)vAi@_$_`2Q53uFmq!Pc!t`zWz|XkHu(1PHUCW)(08X$1QmxM%
zYUMVmD+UdxY0K>@NdD?e25HHRjed|8S1Ig`4U|qqh!HMK9R&YK&_Fz2RRojY;QX<-
zmv<BZCx6)dX}hHI*Q!d!f~JKQ+XfHki<o;O3TN6os*vb&`JGUc6E*uV&!o+Y%M+@Q
z3bpFVE?SVul&%v<y?y#7;2f6fzWu|+=xO<YF3ZJZaDe6yuX4l*9X(RM`J!;A)_tuz
z-LB>)`#bPn$?#33z)hhIDHV(70A`HzKhJg+8$Qe&b)wbV5>od02;!=3t-9gmGQ2OZ
z!QCYNAgyO8$z$73Z=ef7ngCv@o~eKdt68pmWdOYsjHVGhb0_I`BbId@lY@@A(rM(I
zKn!>xq)pEn<TP1@ApW?s#mscJuQ^jj`kj}Mf{wC0{kx|7q8R}GD$j*@2!ul#TkbZ9
zH`Uw0d08W5GPD=&NPIC_TCM9Ue9&q2mX?k)wR!)lF`B`5OCxKVm8UBWwqJ&>UDXcm
znKMMU<2MLu7Vc#emXr;FM2J0s{v&CV*<caI5Heq}i4})NQ<+pZr47&Wg|h!FQX7pO
zs+{vAz7BsTfP8TducI1SoC`;IiJus~;3z>iq6dir%-bK21}q{Htk9&CUPB`xYLilB
zf;>YeIG%99L~!Ss@Vago4q0c16Y<1t#6e}$2Z||5MYbFf-GogA{U4{5K$6E#B*3k0
zZ6LBi(Rb=l&2Y`H*uPmmBuKQl$fXWq`I~F;Y4%)8{$|d~yC6|ZWWtRro7<@Z<kvJ~
zQ~C8l>n-BD4MiicTr*{1t>3}*a-f7)s%`AzQ4sINUH_Uu<{MiCuIv_!GTf0Gn?Y&X
zJ(4j~&>b7{n;_bn&WuI5*5=CHL;Yc@qxwW2oH;)ibFfHjtxyekBaAnh_?|>vh9^5Q
zrmf!}`kcJ@E)uR^Zl@p8eY#n62G1U0+}Dvr(v3BgNB%6JBj0m3mD`$Ua1NWb8^GKP
z?<E0Muo}Qj&fPMS8Hvj&(|hk{6D2G6>uC2VtyWyr*UIgU@cw~oscrSi!Q|qddGngZ
zn_(GSV#)T-OW(Qq>bM)ZJM1}NhB^--%}n=~xHu?QI{l0)$FRb53yBxbv>|$hwwkrq
z_t#R-4yDE>BWiBOX0Z@7R3v>&k(v_i*X+wY?|+1}fEdCfiIn_XETV=hQHRW$2t`fD
z5Mu-_`Vh+m?L*?w2D*6PXOgg|3=*ja+l)Xx%&>VM%7r})=mGfi8Jp9$E6Ipxf!?U!
zuMw_{tpT0VvPh359=lVF39OKoZ7aq71={hwW69n53-t~(pAWH8`ovaz^}0au#l)ll
zisUw}Q6f@g+6}|B)>jXDF{A2rtNwjWIsQQkc}UBVTr%7}%)Gq@31M`cM!Yttjsmaq
z&KS`?8(!VXhzw|#g14ijrKb{C;9rmm6lL(&)gU)Un!k7#=M>8Z7V8as?YAlb;lsVs
z3XG|938zhc#3ClVP%20A9n0YbC)j!ASjsz16byZP^5W=hPr)wN7A`VL`mkOrh{UzH
zyeHY_j<NVJI+!=d@MK2fYh5*=^gCPEQZ{-%&+uJJ=P&oA1ridHzjv3QFQg{7c8u7T
zp)=qcw#DRoAMcNWv||pj6R_lgE=BD9Z9Hk!fq;-xgrYlM)Bjt!pT7%83SJ4L-q@C&
za;VsAA+~Ikb^iTClc9$Q2BQ}6Lxv_6mi%fIKk{$*#%0)5ZxKFH*{_~N3xt~OxC#Oq
zNo#n?D_4!+B}6?~)-&i(bAbcpu!GbCi@8F*^h3t!&z#&qo1I~>AB?1w$&+W(HJ2Q+
zI-zd&e*dAiy4?)=b`I_?opxMN>xq)(Qv)a_0`BgJ|1B5{mL>ck>ccKC$k2>K<*a^p
z3i7gGQ3EzviiOfO)Z4Pr2Mwg-9B+UTosnvJCO^dSq&;J&Dig6ct+4?|kUqj|FVCrc
zE&=;+2`bnZwTTE1J~=6WW}A8@XA`DZAqKpGpOT)<-j0B9wu=qYLHb2a?u-n+1+4f+
zCvbbmnsl4?I1JQe@v>xt)G!t1AH5QGvcMP4>s(`@1Qf(4tr_?|LAb3o4FRHHQt673
zZ=`$~wQGi9RLnd6%uZSn3F#xbOT=`0iRuBevw>ntf>P(b1IFp(I+KaPE8)0>db5u@
zGK=zAymr35Y?2AbAx-6Rj`ACws_~$9e`BUG@TcLRJ&M~3>O?f+h)4->$5vvskfU_1
zZxxypjl$3XreVEl%<uggllu>4PW+26PW*;^xFg)2jq+#A)u*e0du#*{Gx!IW)``7q
zDfSxu?2_LLVh`j@#i1fC_(q1B?jrKz%x96mRi?QmD1U|>OLJ#0KWL&cnB7aHxF37V
z_^z;{#vLbk2v?d6ei=9F*-Jfh0@x|0RQyIb<6|Z|`Kr2BC#U8eyC*ja94ut#-MV*J
z@R<#ubWQ}p3;3O<@;5AJOd|g5$4Fu&1fyI|>uKQ;?NN#aBkE)r+)(3gQW^N@{H)bS
zk@hHv>}IBc+J1Hrg-xkFCs&mkzXF7oxocu?GgANs$44(p1i*17l`CWg&ns0bZrong
zO_xaGU5Zzj$QB(?JVvQ|Qx)7-K{#mQaVnCKY0tr_LYBd-(0w~s?n{c?uEZTca!&L1
zB1EvdMV-$d5tFq35->&U5+<NX$rMCjnC^xHeMeIheK*Dbm#Y+)C^cGgtF1vHkWLLD
zR{rz<)I+@_ME7jJ_0YioSPwb6{(t5~Me0_H2kj`|(>1fR@IhJ7n_Vp)HZB`yk#@+o
z49z3XYNu#1w#fPWV%5aJY13afJn=a3zB{Y`{-yj)&K5m6?Ho7Bftw{e47aCQ8&D{i
z(e3f(csn|o>B(~xmseBBCgu$<d}W(rv8U`pR>&eOA(yj6B}Y~iKKhfD0~FhLuP)P;
z@1S(YktBB0i~L07XaokI5f(C10<jeaRW*ufmnUCT+BYXzJnN5wJeQK0jLGmT<)?%e
zag~{4T9Aa^?q$a3*c02d07`(AqFVuj@=i@doqW;4CU#{i{!0RAHJzAz**!1S>mC-$
zdXcP=a=x*)_VDmf27r-BDHG($UV)ayvY$!&RPK9b0uJtDz)e@qA?%~-K0SDLkH;mH
zUUm8nkrclnzELMM%#xIeY|^Hc(ysSXGBJ=vGQ~O_P9i_y)i_n~VP2P8|Apa2xq*i;
z#Mi>-_ICfU@=UhBjUH4Fbm&hNbx#s^x<FGonq6uX;gqac#uTeKI%%59hmGRThwtrq
zy8{e@2YQl9H#dhk>NOc7&y)VA775xRAxL%SGWAWYoN8=tF3**l`+K9Kj6J$RJ@)VF
zQ!#FKV`W7vrP(wp%;kb5Z1>S$MI#rB?(~P2jjLgoX|K#8eP_RgNy&JOXeP7~Gb*e$
z@Pq{*9=TfGB1+p(oOL^F>q~fpn{l9r5I?fjsGI!7Yi`NTh+c6MhU=p=MT__jEgu!J
zI&c}iYY2TE4#S^-#M=D<r9BXvXtMOIfDIGXSL;w|UoW;3C6$-|qwF1Ebc=#Cz_xAM
z?$@@h*S2l`ZQHiHU)#2AyI<S3wQnZ7n@o0hX7(ocq>`J|&CR)|PF0<%@7vuyO{nQS
zeFmh-;m_J*TD-XEg$Tk9L=qT2H!Xo8Jn#cqwcrI?x<ZBm4qo-Lk}mBqjp`!Ct?TM3
zmFhegZ;O*mUfJ*W)pj;RLQcUAyG;^ZNdrGcc-R`^wuyJ2?C0`h*04Td52j#SCU{2|
z=du&RzS#eU#M2gD)EPCd<%0Gf&r-`WzeQjW8URYD*PaoRxM3w(jk$!}dXkFP=`uOb
z+@-90>BAQqo$O|Ocy;~l{o-R6(-d9y=%xoOU1MrDQDln~H1g4Pq1Um2C^)4V8~ye;
zr%)~xsyp|k)Y*SGX=o^H&GPB)+9OvRG2k;|A$}eImGd<F9E_lU5LvzZ`d+h4{7vkn
z^!Yopv%j9Bd(!(-R>CZ_qswA~yZjN0pEg>R*ddfi&4C%Iq-wxlo=Ca*aew5Mq6;V5
zE0I59^m=X|oPEKxW-)NEEyjKfFam|kWsu2_z_5$h17OZ=va2EcEsmKi&_}2}C>5`<
znV2;b#(^`vPbIq%C#`BqUF2(=Xi6?q@IGsSQFKQq1=(!5-;<iMz^7TnpXF!dh9$40
zJnL#q-sl|Eco$>M*zT(I(lAX(tBqstZ8(fJRPMbFeyI~cgZiM4NKxO7xo9o=if4<J
z&nsjj-;QiVr`-4hmOXPfs?0th*gE=;+qb!cPzZ``mCliY$%M`eW293%JsK;81aU3`
zT8r{guJf+N-DoTJwZ_g)6hB%AfX~ctr_0?x#No*Gtb`ay>aGE!Ta4K<u69RWR?FlI
z)L}v)E*u(&0pl5?Xk`u4A6IUxjPYD?k%Jd{5!8THDCEI@M*<b}y*mOfu#V_(I<{oO
z)IxHPT%<UfL(GU^e<KdbPp!9d3OTrQeJ9%m%LsVq$;@@mY=kTkiV2#QqtCe`wy@Ks
zic0K&dHlNl@PgL&%bXS8z^`7(A`&CcJ^Q3o!C0E3z6DQGl7fbnzI9d>K`&YiWFOry
z|CN>0OrAN<9OORzqP;Tzj2bdGw)M5+UF^SN$0rLr3VQ|e+tX5HOL#2g3=1g!45F=3
z@3BM~?;zhYV2jC$B^8?Gg~M!eCCpjzS+vjuL(CAa-L^8xCbIL=p(QC<KSTnSdrlQ{
zjm%i`j}&Lr7W=OId7-}F&lhbpD~Huc7m*ZpR3LW;nK%*E49Bc$X~x0ph79~x4CcH1
zhVK}83T;UYR$l>m@o7ZFfZmRaD`snrKo;C?-~n#!ClDPPxMehR(fsa4yDbZ1Lm^MS
zn9#(bjcT=xylw*KNB4@FGi%N`&#w}TRz3Bp>A03DU7Vn*+Q#SW7Km#|SNI9|AhMVO
zE&0aBnq?(7>n;u>l5PU?79P5B-T0OYhqTcSKoaft?+UinLsK}*U7Z8MKNlxVcD4_3
zF=|gz>oqM0E&U~gQT+SI_3}1`Sk3-o5M!8ym+Z=jIA;&5f-ujE$O1``LczR0&(FR~
zp^@U4#+rCPB*6>&4b_9bN9(6<UV9K8XZ=e#lgk<;ZWudFnx{M{mmO5Khsti7Ul1N%
z;4j36EgVjNOz#G_qkG&~#RIqCVljkQ>}7#W!^Z$1gT`c&g_o<n-{c<%M*XY$J)bL+
z(rq!yL^zT12D)D;6x;y--Rv~OL@oOZOBRNZg_ZWuOla>b_ilJtJt21y6aFyPKM;Fe
zRL&HrV^&gxC73Y~*_;9N(4F}p0hgX-MhO{FN&=3%jtqxgEX2Zg0ZxnC8hr#`EpEVA
zH(Zr>M9$`SvQj73D680_KFXnSqTRU~b2n?2UiP5r+Oz%(X*At{c%j#;C&`P@?vWR6
z{Y$}`x!=z&?-Evaj>H3c(;G%rFEv7<AxLqm>x3=+1euciB~n?^uD423Z4J#RDy50v
zrN3V01PVT+gBn*OK!Bq`+-lv;(Q0@?rfox>dbYJDo*}Ye!7swSRO57+OJSAJJv%=y
zQ6tGrbd4vA#&xn}fUz*biHd<qC7wRUrun+{q@|B3Bk9UKOyBJ|(ESegGvd5?UPk)~
zA%8&sYnJ99(*RWk6bPsY`G1$CG5w#slIm1l`wb?v(3>}ObJ+@*!UC7`qU%3OtB&*V
z{b0Jwx&`rVLs`}mErVetUoY!Y79vJrU}LHgKHDz<8v(v8SI`ZI$pN;}2SMSR^Yi=5
z{jL{+Yf!L1Nb}<+Kmwc}F}%<m32<1L2!D}4jCF|&qQUlI4|${|t>Np!$^`jEmn85^
z#6!tM94hqL7bB)qL2skPZZB&BenBS)YDqw7^r2Ef%}t0DfXVh7&l2}DJR#B5!x`PF
zP@v!Gz}QgevaPEw4mPJM2|P||*f_Xt63V}4xdn>pl)q_6#+oM#$u2uP6xYBO!3~Gm
zxwY$X%T^0P?KAP;P>5~0aLE(pMPzQ<vThrlCyYtlN=Xv3P`1r<NuzfNcWmcX7f_U-
zIG!igjII`txgUeci4@aX%vOz?dHMx=Akhmy^qt>-PN0Y)$}KZGBk^^(m&)K;A@H7$
zw;uGn#2%tmA1)aqr<4->*#{tPRH_}=gDwpwM018Lj%rY-H*<GBb2=`;9u>EUG-(my
z{?LgxKDoHRG@mX3^W_)`yalxhhss{wDh$H_b4SdH7xB)VPI4$`A1+UutSz#<x4z7&
zd96eotmSHrH`fxkvzMp;J<u?kC2y%MAGP+K!ITnd5Vhmcx?K0`Qs;QIV-0rYFQLaV
z)bqen2GVUBT#*2iLW5npol;5JV8D8gvd(_TbUz8O>$MZd{dkKiz92|!wr1W8kY`iz
zxYKFt*@;@*h3##7ZsU#Ub&v}F1zB_`Dly?Bzw8GwaEg~3&NE9`!0K*O6Qf`=ue@pk
z9+Bt>KU_U|!?w|$gPVa0n#rAi0if@CgB#2X5@HC82?tn&w{1YY4@sw69PJ@%Sky66
z7N&%nlKqWy9kDT;qCMGS)@TI)UlP+E)c#}MUSrv~@z+Q2eky1kd^8nkaC@YBS#;5~
zX=Md9VDXLv()+lo-)r^X2CeI)bh;{N+@-hHla(cSAr#;F(7)0(;x2%|y%L?uLgyJ)
zZv}<cOo<AWY`0^^waklE6!>sxqT&08-3f?!WArjOX~Sf9R-D{d9k76Rx2t;CG6w9}
zre6!5j@VUhjeFvUFL@G86DH_zSa-Vs`n9l2GiH-6EMhdR+?qd(TddSS2>)Zr!T|lp
zC6o7C`agyLbHD+@1G0B8wR3j1p=V}bW?(X9G<NcEaIt5!HDO~^Re=Tq-AXFfu#qX#
z0Jy^f0fU|XTkHQh{8uwTd*IMH^Y0Pgzt@ocw>tmn)wi)XwqdaNzqRZAKebn@+A17y
zB7JY`GlQHl1kBw#<!@dDGHha$wJ?^QopV|OQj^+-!i**AMW{#bH|?`AHk$s?r%tC$
z#O0l2+_|4yUM?9xYSCmJeNr$x-0ltDZSQ^eLr0@R3`UO=o%XBNe48c!_cBFH0Pwwu
z4NSms#AO>lV}}8(4SIY8%;lPJA<>!$X2arBt$p>oD}ilCE5P4s;6*MFO4wAajr<gQ
zI21Ze1~15ya1PK3(k%Vu(O9zWQqm70(*tCMC@L0IiPQ^?8O{Ij6jIH)?J8NIxM$PV
z#A5B3S1C>m4cml$5SBD_jbuxHELckxEp_*>n=k+=JFLfrBm10BLq#BGF<Q1+lagr6
zL2(;HfniUFRe?u3+bZ=Twn50ni26Iy2gaQNJW1(t`8)g+zH_y<pm{(bIt^>Y!GvGF
z`vV6DIHHp1mr2)8fv?RF&)WAl3BLE6nd5kWo9;fY0Cssgq`?vNM150IR4OhqMpjgc
z?Y80Ml7Nne0B(v3i9+0Ujnfp;HvzVq84H4Ha0ce+&s?fs$4MK{pQWy)?w=JQ#*A%j
zJ)t>cg9xb`g5z7`ymOxc$e<09TNLa=Bnd47&*KhD*U^$3MBUf!e=p)^^0%HKWfqDF
zbrQE79DtW+#Ty+`EDm~wMcrdw$~kO&whvPrQr?eX9xiQu_nNr7s1?Ubd=qgJ#=fhb
zbCxP8sN|}xpKJx}Y)(C8%g|Iz_58Gp1m2bLv^kI{bhdn;f10C534r>BEPX;S;s+;k
z5Q#chBgm8>mC7Gp=e)@|T%xz94I0P}86HCIacuyyc9gx}4aF|P(62aXd-_@H75+5d
zs9mUTlW4YJI_Y1mrMTHg$qYKt@%Cs*gn{i`sEm6ys8+JMKI=`*=6Km3^R>-FbH+N~
z3^49a=?oFj-v&!U^R-?7s*JjUCe#aVbox>`|C{NPjC-VU&t@`Vh8aWy7tHb+<!GUd
zKv)_*n*1~VNUxxZ@67)&vHp+eV{{?{Wj}w{^--2HYI3hgTD<6XiWt=@@?i8`k%f>{
zcGCwBK*Pd&gt&x&VQZ=m2MdN7B2}K;Yh{h015um=sWM^!%Bb5`Ux*xs0#!(+PB)oe
zmbPf7IXxHE<=#xS26T(adDj(O@X@73eON+4r#Y{K+BsWkDq~}ji+*vvCHGRgaCb+J
zZT&ewc*V0sOTJxQ%6G8u=d_;d^0MS;x1~GU)_KBS7G^d3Zb(}@CoeI`+{0v1T#4IR
zYKYpy)>{L{>u%i_<p!n`;r6=Xo+d!KJ+FNL*g?JV`>(b_vPwcn@n6Bq9LWD<D~te^
zHYN;~c4qefovjG@t*bD=gyz%ITZjlNIn{wlOx4dMK1^<$sA>d9I=Mz+`B!}d80WBe
zbMH7lZjN=j`()eM>zetI|BR$49Cx98v}b`1_|U`1(%lniwu9Y&IO4P9fYCj)OE-Ne
zAe{YI@~<@dK%1l>hB&;LF8btFAh`Mn`X_J&F)_Oq?eN)-LLur!*5HLFEbUNfafJEY
zTPO~&LOz`H_``&PmmCtF^yhUuuIkON0B|R(W8kz>h6gpbaFs(8?(r45>2$bn=MZKn
z;JHzet)`__%R^tV8&<fQRo3SuHv1{T>nU$3k)2Z6HNz8^bC`(z#g80&Ud>;OR1+Z8
zT2O5${1zW}WA5G&V1)TgB4{gCOwww=D%-x!<&bq;oTQB#hAL=rMYMkUx5j(YXL}xd
zX`HvX8(fSWdXJ;PRnEo654d+j6NRA4;s;gAJ6Dhsx-{(q|8=@}&FH;C|CN_WqW@3R
z^&h6)#N7G+N<00>#_|7R+EdbP?e`^7Mt2^lwURjENec+Ko{wC~K^nd0P0iG#^y;*#
ze|HiF-t@)RWrS%@yX{=FyX-@F1Q&D8)ttYpepP11j~@Z)1ZqCr+iLUH;`ld2>l%im
z+%_%jE=DmB65jONZ=UyRu^V()t1Y+mKrBAt@N$OX@SbYf3s?heIh?$<FqP7p)eO{W
zy1}QjY*(&GnOvf7o<ncMSAjnDuKL8iK~0zab*s1drz^?=s8?`KYn6Ig^Qi)=*cmT`
zla+!P#TxIkZd%vvNyMNlx{y~iG#=9I?PxznG~cJMZ_I84_<IDZmY40U-IT?)Y@)nZ
z(NdmvK;}7nRTsOKezIkIyx*L3*YVCheROT}D61Du@@AeY)~l-DOqklJq}#Wt;lEWm
zD#~iq1$r5}H>p~5)SY~~Jzqu~dT&gAJ{ljeWxdI7Y#KcOOpahI+El{3znX?ZiR)z|
zIz#ZEc3{lDTj}v$Y*aM**0i+HW${HXlu)s?eYn3gWh>;BOj2WAPjt95T!mg#coX#3
zLYKm!hF>eB?+|2JlctO<UM9a?uJOt^7ZlBxPMwS%L!nGjDO^Ja724=TPIfj}gkBF{
zS^_g1S=_Dyty%x!XtoP=g4@Mf8vX&8hCZL2jtHcv3n=s}*rOs|wB|f**709d%?`YG
zHS*i9wsx%B%J|zs?BpDeuy+8<Z~s02=q*Nx(NNRg{0f5ojrHPSsQ(sVp?|J~Zg$&F
zvn18Z0Uc+Hnx>|0?{y}(5u653<(4JFr}gKzLOaUl%ErD|Dd=mXtqV^||NUV0?$O|f
zewu;-H$<y36K>EOR+T+(2jnwF)Y;(Rqg(IzAqub6mD&7L3E|{bYg$R>678Pvvm8Qn
z4r%cfRn1j^A@0IkZe*v120SM0q21b6c&DP9@pWn&E}@s78$Cw3_IQ`_#ko&{oA@@a
zhue@2j=_#+lp*u|H6~`rqQTV+wpY8+j^F!hrO$nspO4p%<#V2ZLdUn_C-&jPOwFuL
zXY*6H?atMv)k@DM$6}X{x%OBuU>SRx6TY^_PJFjE{vX9B-}_7HXle1#MS=3{dHsz|
z-VajjrQSuBv(E2BBQftX8xauq_z_)1hu4;WHKfeDu46qkxllqLo&wyobg=^)K(0GT
zgN`u)s51og<%eA6;~B_fj=>l`@cT$MV0oY=SWad4ETnS>PzAz^^%7X1m(KB2>Ppr=
zW?-&(1+<`iV+L4hb5PD^{)ZC3>WG4t(<i~ASV(UP$K%1UMWu=4khoZc-$}9E<NK*H
zO{RRyaxjTM65!5+Ldj$dQ!AWHfro><ibOD6B%P(<1+*>E5Z@D!pdiSjyESt2v?*PT
zDms;j(3&J!D9~qT@u6LeYC4UG@Rr6{!jVQ!LOGe&=J!Mc@x)E3CDz;JqU57p$sm33
zql3+pi*l6k(^5kg7U)WuhW~ZVw8wIva7RX&a~Sg1f>}-_%3oChS`qAAS^Rp0V4Q^w
zP4G<*XI;(}{svo8U`1YbVz>Ja&G~_uc#yOsC3s-w;LoWB!UxJe6@J*gTp}q)QjvaL
z($!U}5akqoT|TDd&>A^qJU5s_x<<1mN>hGavM%KyA+$$McV3d^<5pm)P~V6tfO4D4
z5>*@si{pzRT#_t`n#Vsi9DsHtY(N?9ceu=Z2r9T65vgf1b`XB0@~LY4&WKE6@#kUj
zS71fiA`A*NY2pFplpaf&{K~Nuaf+4wi}iYlM8;2^QclL5Tji6Sctf^8z?PYSHZk_?
z?$6hi-@X#Kpy!UWYgyC8N^%i$60k+)A^!mO+&I{md+`?mIPOZJNy&@9NOPuH)^pF$
ze^r=hD&{nV5?D{s7D`r=(HmurSWdafz{Z!i|LQKDx`HSI7F&+V*YuxrWy-z%wRCr|
zmw=o;X<=vNj<-vWo=6VO!v$Hy0(m&J^IE-zW{xFMEn1lDZQnEs(LeByALh7}e|y83
zw3S6%)MjUT%&(*1d3P*492T$f1Ef`XL}TWcl;@t5zXE)+l35!e0ff786LWH<o;%vE
za;j1Z+IffqXeToD>e6FFYxmw>%!m>t&hr3eZ3rcjVxW;OsVmBEc__7TAz^N4&0e%a
z&PYo1uA=`eIx+<63TzxGFGeJ7_DT1xropO5CRL)xvw`1hBEt6_YI={I^J~j>s=a<1
zqW<RA{UzY-_G^p&<_Gc7=hnwz{+ngj{{K59BKU8^7ei;;{~uw|%+=$RI3f^GC?yaO
z-T$cf-~LJO>|p3*?8?R9VDsO(Jj+@aPMhKl-|)P{!GStO;EL(}DXFLFso6uOTxwF%
z>|8CW1VErD%ux9b31yr!jrK1<`I1^K2hQxJuBzln*=HB4e0&_&-XaL+4V<?JkAg+3
zWSC-w*YO8*z4ZI*T_jWaHiQHS?b)#RG?-_@!_-`~4LhR06Qp#f8w>Fgr4r+vO{m7(
zsl*)V2MRhs6Xg#Ci;AJ7azYD<mNVmv&PaT0E}Mh9`{U#F8#C!%>7^PYmx_Uymw6ea
z&?p1LO^NO!hp3?&#Bzst;lbJ?D%+E{q%BRsc*!&L9f^(wb9VyC+$DsmFCO3S8VMP5
z0k)=Um_&5ZlNI4#9g!>sj8L`ywtA`_Z>PJv$H!*r0idQCaE(T;bGLX+J#Z(>B#Nr}
zgg?07f>Q#KZ55)@pW45q2DP11$y+~lUFBlkb1~PG*pvy9s5XJH)*dM2MX<ZXFjjV5
zbk0q3x5BLzPsyr07QhRm6fyt(dg(AHy}7zQ@4ol<g@0(JsQk&I7qNkZ?T!nP4l#D^
z3SxzJ+zg~uFb(8@e+dKQOG!x+lf}R6zLq|o5K-AZ&}7|-dCVQoB6dO9b5gZ&W@Qs5
z$wVasa?Qm;;<IlrILR<Y?tjUn)O}JNt{UBm@+Z+%gqD{PApYpi1934b*hDn29(xv{
znsbu$+r|S?F}d`WNE1;AkgN8SC&&|Mk1#~IYmPsjP=`Y|{Ep9%6ziw;$LDP?Q+ATQ
zB*rbwOsOri-zM%0@_<vMjo>mFX;H)9M}l+?XD}4$03)`hA#VHwV+y1MP#XRK0uW6k
zzLLNn!|HXBlGj=_l?1y`CKvdlfMkcG+Y(FfirsX55rKMb#KJ8=5xpfX+~gg{2-%#j
z@BG~IOpFD(6@rvDRn^>g;GAgsmKp7i4<C(J<}o~NAGB1ul~pjU88WFEQNX;etOi<@
zTRUc6Xpt=Rx9x1k#QXzqqRFe`;8byt1m)QquF?x{qCplK-FP{O)OjevD1JZ0G?^x|
zrqE=e$Sd*Iy0@Gxjhf9U$|!JGtxPp`=jiY1VfU!89;IA}&p6Cnmjs28Ybp4L&x~||
zlX!u{MCXpc8^L~c=3~ss3JHp)uBcmy^_kV7CcF@;tT&Q1wBm5eK6KOtRN*0fl*DEs
z329_0{Wra#ja)%5`XjO)PB+YX^2x=Rx~uO=cQZiUjCqhvm{1S&JS+f7SUrHdVXH6P
z9qg*_00QCQc7kuQ4$o@98cl0vjJ>SLRXmsZUO4&cEfu{zkvULc^M$%4_L9iuOT6VE
z4o(_7Nl83cMuIAy=X&fHUjU9okEuJHiHtHHP5Kp)hk-_@y%q${_1eHOI}9f24z$ip
z@$H-;GTSB62E3W(QiG!VsUr=Zf>LJz_FDjDIW{^g6gUZTdWm%#agVr~1#ZDfA$7}i
zIk~XZzbY3r(n0Y=LD9d_bH<|plAsV$7Z#JhFudD11i<5C!h?LP#fpD+pd|_xJs52k
zSpvn|j$r%gVN>1<ph#j-NJn4jcZA}6_JX!*=CQ70yw$-hs&})0aSXf$r-sW8ih#mT
zK3G7tNdFcuK*yngL6bj?69<v97|OtvBm{|qY&lq~-owCUUP(9lMIc5R9Qd&tHLiR1
zHFij)5W3jn<Ap{vrDp;r#FW@0MiNPfd9b^lYZ_*lMT7jJV>teaM28eBxYK6&d$LIB
z4->DnhX{Uq%NYzJ_<O-PsafG(beP?kx2)Elm%K%6nLHf$LwA*rlU@7^4RQRt5B&;T
zjdf2Acn1c;SUPV80lSYD@MHw@StqwCHvljKQQPdk+HwBwM+)}Q>>h`JfHg)z7JK^v
z${h~_HDBj~I4U8rNFA;!sYxbtG|pJtyi?=CC7k7UggcPro|>qy*DK~|U#kLMq6~hO
z7?evRsAR&lhe9vTB}Hi-rw179(gIP3($OI8quxfg(!i*PVr8AI`rTBQ1Sk56FR9g;
ziFk-!7p>%a;`lQjwQ8}l40NGT8eEes>05F`vCd9jrXCNIKhyx;G`0y$WQ{Gds^)vs
z-6jImCu~NQ0xw|C_8|wJyg!Gz5Q^wyDa)e02n2u{gd{;pr|Q8&Rt5=v4kwo#t1|%a
zToVC%lR;h|_#zGeVW%^-;qbqN`_|4^5pWT)kp77alKfJkivA!K`mq)k?8WiArTqeV
z#lO`D@2rk<p~{^4$6sZ6mmoFXTBPuD877C1dpWRjh0JuFVNH*}`AeLgOABGm6)J20
zWfN4IfY(3Glo!Ilfxdx%%wG<|4ci_9lNQ0VJq1;_i#hh#e2_lK?7KJE3)?;v*XC!#
zy*FjfZ*#Eih2V)u{U7Iw(dYW=(9Qz&a`_*Y2W4o3_H>}Ey%8{`=f6MUU>b4vW*}q0
z*FUYIpOeeYuyt>2z^*P<r%Nl?-F}Yuy-)|{iaQANJID`JlIlU<jgBeUNH&Zn*YKBW
zFrT)LJsee8-&aGH@k@1oZc?}y1F1h}!yX7OVT?6yBur?u@nGG<LehuZ=+zC}%5Rc^
zZT@kqi#K|#b_IpeB~&2DAnzI`FW{;Hxhm}JNhN~6$7)0p$xl{jECQZCvCzg*!QOn|
z1{DN)P6tz69VqQnO?(UKguTv#vfb(~bYw;J?kv@U3x9_>T~(yZexZ$%s#>yU_he?v
zQc_Z$%rY>Pl+IG@Jn84~ecbKuyU^6P5rFgN<(}med|w4rkQLnH^jvAGuZ1hN#{sWG
zI5j|lfP0MJxt%PgQMSmtnuk`r3S;NGn&VU?nsNPRY_J{{2I<(Ja!9Ll(XJso%;#Yl
zBk=7Fw2g%1O9&7r!$y>fFAl%KAlFrF`Gd#p5(vLu8q%Nu6OetcTyRp}fD0KQA6oj5
z#hnr!g{0K*%z;+6CLq^9=NC+Z+#MY#xpvdv0CVWEIh|`$GNQ&~J4U@}XMa{*?YgqS
zvw21T)uPu}U>^D?R5<G*JP*tDIzWehsHU=$XgeZKWQ^bO%cAZGQeKdkQIyPpH9obU
zIRLMzY~mKe3ArVj;0gX1`&Vo{sTHh4u@3J~p84YB*_~rhgJ}IU#wWqBrOpiSO2a<P
zVSs!K2=x5~j6#Q6#Qg6Cwh4;57cy~?34WA~r}P&nYS9!I2zKK+WsZB$=oI_>Y9bVB
zq)i}zpQ|8_4OE*zQkOzesH2~i3-yDd71m3sc-Ai)9`erQ^_5N2;HP4hjr~R~kC|07
zC9?VcdkSLfJ`2cIGeT>iGx0Su^TkUS4Leu%X+6kOGjnB@XoTgMnUaipgpFzW6{6+6
z&h>Rx9{MqT0VDQBh@wI7E|fJ+6Mv{rESbMTNb1)kD`pHq=5DIEVfeim6LuLFADC%L
z2bhaDGn9;ZXLCSCeN(!6Bi5sZ6;45mq`CM)#KZDUzD{@Ep03}YM~9!QXJ-$SlZ)n8
z1fYm9x*lYtxC^SV-ep&wz_Zq}QbC0TvE61U^*P55#Tiw%aGr=LGFhy{?R;)$^2V#>
z2J(x!E$`$h<C%Z5U9pKbyW-Y}Hk%LV_qM1RQ}aFQ!{A>H4(g4o>y<RZEh#HASE6lE
z=<Y|jpqQZA_Q(kmlGsz7mgo%agsJ*iA{ze|yFD17sH>7ZJ2v+%9=rGijcVWRV)#}E
zaaR(wtPfVH#<i~-H>kz|nz?r~B`+xy=D)KcZ^lIZI{MAFu<ds0@nu>LlF&EneH+GI
z%{!f!8JP0U?{)kd%KLgAhOej;ezSic_`m6%RBC#+o!Bz*xLtd;C2I0OpUFeVJc$S&
zNS729t@HkD>d@g@e`LnR0=KG7(r$Dv3LaE=v}|H}aLm^<Z5s0$U!cwQJvGc%ojblB
z5SZEE4e%#z-2UCfrMejpat3W>SMVjkqXB5m9F(04ylKuh;_(~Y2=X^|CC+M|WG(d0
zST?ZD)b2KRvGG5zzTsKN%zmQmtmI0F<2^{{dXI<L<+x^4iD>O3Bku|QW;_p8FQiA-
zD8iFbqc+*wYwp?^DO`>W21_PceGyEm;qKRo;4tM*!8Fr$E+!k5_1j1;w^MMZn~eL6
zT=yZNjr@zlw+v5|B1R?|`7SQRpH8!K46W&+b&pCWph+pv|F_nG(+!}4QA9Fgz0g4d
zd`yqRyWEMg;VrPzxv}OgFs}}-pgRrbmK2nYc=!%Y_zxu!p>k8l+bQYKjVOS|O|`B&
z((eb((68;Mya#y3))eWd=JB>fEfHxAu9Tc?-sqvk{fc0#*S7X%$L8<OOGm^);-K6X
zu{j{YoLmrnubaP1Fx>D&Z@8T5uB3Is;34N9fVlcNJ#u-M`uE!#_&=6(tq%3`dmN0L
zfV+FOF+#Cj1<G4Uq~)zykXuSLtVFKfktiP|-Q&8>XgfusaQ`R9^hl69m^Sp^yOSU+
zT)<f_B%zJO>-zh?Zr*$(t4A9gv6y$WBK_KvQO9m1D8+PX0xkY(g5*`i2VMXi{iwo2
zskm3ii70I@0~AFz0qb;h?|PuGg0kB%Do4@44k}TtgoDPs-=G6PUQ*XV_PZX6r5~zY
zNFp8-%B8D<_j)N|zoJy=8dwors;Q{?4P?>w45H0h?oGr+J5rAlK3ia;Z(}8xrElz-
zmz782BD#VWRl&I%3QL>h?1*m44|T!AL1wn4kFu;p%xjC2%$f2{tJpTSYq9uu#n4iz
z`VEOUcbc#|<MBg<bc<rx(VnLJ?Uwv(FXL*qm2-Ts@Wu}Cn#{RZEIt?j3!}zKQd|=)
zNHP5RW2Kk=pI_{&Os;@f^>0Hp(uFM{h#5*GgHLGSI)8%QAJ8Fz7D&V?d2+N(#EK0o
zrHQWaMH&*mc4;4F>`C20?L>RmNdlt{2JO2WM2F|o@O8iZ4+)8-chG)r?nHQ5lt1fX
zD3i;k^BoelY3~Kop`CKe`jZj50-<8)hd^i3o?r)6NqQ7J2GsxB$Z#3nyz0G8F|ex=
zEkB1}{U~~{B7?TRFEmq!)Ip;wyug7&xL|@J%(_=k!}wyx+u?K}S+{FT!Ce21M=)<7
z?~)r3eO(+t^tZaHg!|0v6EP@OD$6(BQeGX|6p#xk_q)@Z-xq#89$rrlx5rljZO72_
zr~R^c6%C6w5_8%{_U)@XF)P0`{FM1Wl_r7H9|RFx#`ttWp$x0-;fbD#BE<)3ZewC0
zRv?zd_fNF7@M)=EtOjx@4Pb#6kU^m3;th1|eL<YdzG44so?9DI4M_gq@g)->5D?Y>
zDpqIXWd9%H^kGd~=S_B$Z@MoS6-9h%QyU<#otaX3+wv<wCIvpFtxwW3FA?yF4Ot>N
z^=5|rP3sOwKABRX#>w?DLlQRfP-B$&4iMefA*xFYLsTP^)U1hTn3E=5n8F<IqyXA@
z=O#=7kwdPstj^=HTA_No?7tGsfF8yMeN&Z!C;%V}{fN3lgJC`eg=#*9&eV}|`0N(i
z!ZShi7k#ndg~}L+Dm=LiO9;jJQ5i&RNh#D9pY|X0AOD3a;R~g}%yV{X#cVqAM8t$C
z+T<dt3AMLhdzNJLK1y3wTg|Cj5<|+#A?T1yknZ2Wto@B3R=SKm8Gdi~Pia|hrY#JD
z8Iltfk^_Jg6Cyn#y?`}a)uSW*nVIXG8wD1oe7dw!&AaQVvFzoR>}|EmBL}G0G|l>b
z8L%oLmT2{XcIY(C$M55QH_9FQ?5wve>qokVIYdUi?oS-P&fHwkOL+`(I_rRcyWis<
zfQFP7F+8=<mV*uJRGsID#j`>acUCsP*T=*9tiaDNpAW>ZkM-9}ycjX1sgXnP^xDbI
zam<~rZ0$dHH@Ek3^T&ISk8t0WV0%YaVCS%Jo7~hyE`1PsImeR;T9n%AZylLOn!fxh
zxx%$Obb4R6BRD>K3e-!`P=CoRmE=Y+)%AZ~F@B6<>Px(taizY2((lN5L*6YB6cT*3
z`jX}pmT4%h;+H@x=Gt*|29?Y8f+l@Cj?g>Os8ZqsRYOy;F_G-tm3~pp$V!*o7YK_%
zaB+V=hOF>n>+U50?tkS)pD4q|)JR&3YLj*n(3cntU?Q&D{1ROg9ui&>ZV5>b!Gmqb
zxTibRrt+s|gMR=60z(2L8mfm-m_sL^5n7!xrZ1n5T|vdFsz#@ls%Q=*AeRY+xnAwa
zDCvU(!sT3Ps8JM+(IS;$GoKyfGFzzukC8V9WrjdD*3CD)B3A0>SvNa1X_8Sxx9X?$
zO+v2&FPoa5k0bt!x0YtmGOI&O=M6AyN0^`V=6v<x1OoTw!aiAC$K*K4+ABSCf$%Vn
z!CZM=P(pP60vhBh!$oV*!aOs{{^p<g`OWyv#NFR4m!oMJ)6Rxa?PwAc!uGv_)2mR$
z+*Lj0G}u2*)0uUuqFjM2ZB%qPr;nVxWS6Q%8I{+Q7fsmEn!lfBE=!FYL&uxbA{x(d
zi&*!DW*X9<LZWd14a0H=d<2drQ?L^3V@tj$ZAt_Jm@o`V3aeT}LRKz5rA4b<l)O=#
zRh)@}Q6!&IuI~?#aA5CCO;qS}7wKH^opVJ>>5tQn#Rv46ANGN7Y@H@y7m5pD8YwYK
zPi2u*roO9kZ9Q}`RF@q|J0aLDid7<YM5{V{1e-O=Q!kjHvL}UjyEI&aNU#T3cP@w?
zUc`<ygHXoy@&9s|fAnU;a-n{=54~ni;5HE?z^r2EkJUMgCbS)4Y$iY!*0_!7FfSVj
zCQKNrrz6V8=+g8RWX~qJLHQk~QtUKbfrpS1CMduyWK!XNP_EaS0Oz7T>=69$;xMZ*
zSPm@_KQ^~Gto#qm{Jr7f@xDCd5QSZYvyp_;!v1MlT&lttMo$GQTFfz_`Z233-c727
zVR{d+q1oYgu}zI|e~<K%9?X-8&>itKmbkj7^8G6Cp@NHjEq&gpF5ufPsNdc3eztFQ
zhs^&Iets1-{?p)!h}~rU!nMw*jr4xJQ?Y4#w(--yVtv!HO?e82(s!GEEm7{n<mR+O
zY%ONOblP%#;AZ9`y7;H{xIeTvvPK%+r@5QoEAIN$iGI`ST8Kkm&cQ3H*e?}zdhNL+
zXyvZ@r~&``0b7WY@-(Rf@{H~^N5<tj!t8lEHq=yYC$GYUe3QDW3p`E3_;LH|!r9q$
zQ-H>0!1ku1nlz~PkiC~3&rbM_LCT(Cx=CxWMp@2FLv8LLvBOv-3juy(8~~=S<Wb>|
z30mdL04e)51=;hinGZaFR`S8P)k_s<!GiI`=3suAkF0|3>rd4Mp>ty<#ivbyd-i6R
zD6btQ_)&yOZJ&m7d_He>Utm_m2i16BUCkABpma_kQzHB{LDY*7!^?u=xelw*f=t-J
z2X&6Vw2Y5;_oby9-TblL<=LIm^H;JF^sHLZb9*PR7M;!t$c4?;f1kE8iyZOD=@$*{
zSlv8Y^<pudOq1O92!gTqQdd!$(uugwPUk?<iHaL}S_gAL&EdwcYII+u+)1tn?`qKa
z3EU`%S1mT}K4bw&fqUUu$E-0AQ19vu#zGe*@%k{aHBmkGzSWAjKhox+!pKt8Sz~;;
zQ@7Fhj04PZUhdqXlvoF13`cytx`Rm{>}Cx0UhbZu=5*<}oav9ZkMIf{w~o6}{C*Ij
zrG&pQylkU3cncPnd5vFBf{D3iP(Agh7ZI~1-3{XepsPJXfhmF)4tNWyDMp_AUL*}(
zZcUm6bQuj=dbM-#Ze8FMFoNMeny#B-&3;*${VF3%IyvkkQWqnz=nz#JEygto6Ux2k
zBf~f2Y{Ir9d4ao6k&7RzA;rIrr*N9h?<>?mmq6-B81+D1KbETBqt?Mey$nC#rDo=3
zHjQQ)<)1<IF86@RLp^)v<1N>Hcnro5OV}Aq!p=>WM1ekgzICzk+h_^n+xsWM&!$5|
z!tPw`onhxrIdU2*{pY6=NNPi@o$X;`<vNlX+l_uZ=CZT%>dwY6qxWNY#E-Ev^ZE#J
zMR|WyM##RPWK;|zI<J>l^)7<XUir_{YxucuvP`z9u7iTllHReu0+pzRnaZNWXi$Lc
z*-aAky~F<Pag3e7RDD~h_rbI6pW==Vy26>s4pDL%X)!2`YBc9;{5?i>+>deT>i7(Q
zvIZ}L(cupJ+`$PM>P#gvW^WJq%)`lI!>KF)#fROl?J(D$fjp?`BwvR40I%T_#=ARJ
zwnvv9ZF|Y1&2+XqWiyD)vO@`S)7KQm!jetwFKgg+!TkUa$ZJ$~b``_=$2yb&aCC(?
zM{zzE%X$Z@dq4K<TW8589U&bB<OoQ4dokW!#o}kbor|h<g2Gd6nZ$1?j??`%Cn<`P
z^T31DLtSqf??0~!sDdkqw%HbLfp-eua9F-ZTJye8?=&8DEZaNdmOlkc@X0PU#?AGO
z{zC<0fv8~SK2jfTd>lcL8@qSL!|xnS#K*gpX+Gtn(9jlEYVJOgD87*LPtyNb90^_z
ze!7K&Q=q6<fV$Z`+vmQ{HTGI49rfrKx`hjwHn!sVCobI<>9_}m?qNv1cyzSvQH$)L
zy9%<ydzvRz-~bo&4itCVvz}K9iugBuM9B4)YN06l^;t*SY4t|w{@E;uY6jRAGw^I4
zs7*RjvECq8Y{rWe4Cnq1i`kvudTBt|-hKbF=Q-m0Jb(7<t+y<{+q637VFbj7uB~(;
zm(>W^=n&H73pk6m{_>0~w8>GE-mBG-m*0R_r>y6lq<oJH;I3d=K(0Qdk#OshbZ<+p
z_+s_ztZuW~QKVOKtISgDIV*W`Sd`70Z&_wAVVl2co#uCG%2Mn7*12W;ul{O9)q0p5
z4iJ!s>i^bXwKQaBWl;X_&Xq2CterPG6Z6XT=aW>XHI$p^&W|MQYUEQ*wAnmg$+#j|
zGMp9BOzub`bP^+Ta>hTOFYNruh-B&;wOjSCby%3^;91{8t|0^ozjT1!5w(O~$?tD4
zp;ac1-VKW{Sq&PHnBayzd9V8cXrHaOC>C~!Vo1Z}77S@jh0x5=qI89`Mruk;o;{Q+
z_38a)e5lA|I2pyF{lLKb<pH&k<o=rmptLWrRY73v^+ep`1967ejNsuC3c=8?*0+JG
zZI4^cl)L>37_vGEilV%3@cpcgj&)IkgN&juJgkWkPaV}W27jdt9qS_EH>To}#`5e?
z1p3~P+n}el$)vFI@bUS0d6PksiDT1>i8=%llVX!Oi^UqW_HX|P?@6j31*n?<22$KL
zBFVVAT)P$QSc6(#=~9K-P%gm2YK7gthC}tvI#j51qAZR^nH>Wb{$;gF^mqB4RwL5a
znc{-|4G^{mVy;8rrGPjwg^`DaXj*!E7$wIo$!M7oj>m&=q49V@IbuO)-4Y0<K<q_i
z+vwOVDa{tq^kSBy)y4EoDE^vO)S(SSK(RxM2CAGO!{b7FOio9;OU}#q9aW-Rc#`En
zL=<M&9xsNfGCiC;YS(G(nRPrKgy@b{1@@);SJ`JBatf0UgLETNzm9QCW;%}=JERCp
z!pJ2@x^IPv)%_wT7T6TE)=`?$_zR>uLff!NivFBy&<;oNn^nh&??I~Ywd!}i?Y?}_
zY@lgEssy9B8ab?qKT~Uk@GvZ<M_y#03RaB_LS+Q%{Jmpf=!@cuA<~`arcvRjYz;RP
zfu8I(n*{!8?4Bp9_ol7e#%%@H$TuzSHh@xnFbjG&T+x}SJ!B7@6|(i#+HI}{Hs@va
z&x||VAhOHHYPVgft%%#)`BqbBkPPRjN6;Ran_MrCP+=1BTwtV1YtRD&%-2jAAY|*<
zqjfds?}o#C4qW&#IEw86z?t=|#m;jYS!XA@Camo(GsxAD3C{%*lT@d8@dl29Tn9ZZ
za7O#G@3mt6;!bHA_t1CfvpICN_0RRuGFVM$w<~18Nse&sChra4P>D*Va`p1r)`H_>
zdJ<t4ha?4gj%j$Svl1c5p_}4+HPa<52;{to4Nq2ltyytmo-FIVhUa>14i7L|6dyH@
zG@iumI1(SR+a)BSM64QQh>R!vmE}lzQoLpP9KVuIaS_BE?1;qGz(i9ur%B=%#{;B`
z>Hbm(xm62pYj_lW>L($=>$`SyaNm%WOixx9i<&N*=8z-00`_AVZLIkR=-?L<LC$2R
zLtX;gB)2}qHs!|rx6J`Vb*@HS+4L#*j4G5xXM}Y#W#w=Bx3Jz8$3{PTS{PFcpSx5L
z%)x5LcT=C}KO<d$G+bc$;d35ze0}CyO0^%+Q8jp*>GM?=o9Vt(dgr5#0d5MnSpE`2
zCv~yw3hwW<zC5ijWqdCqgA29Z8e;{yjnwvrB$`^I26L*>^#uZ&K4#Y4^mCCypHY?G
z^8V0edn^m(5DR?gFO@LWBq<SznN$=-#MlC;(WOF>3MPOd&HdUrA+CjTk_DOZm-IT0
zS3;IM>|_H!7M8@|U!3&FP!D^93Y_DdfO1XSAA&_fR{BaygLCR*JdTtA%c69QYb8+U
zY@?0TWp*Y?HPi>%608lku0NYr5+By0T36FnPhvEK4G7S&i>{<4X!uOLqMQTz%1=$-
zCSNCVtxp$Q7KJ2Z2_aJOlTA!0EIT3(6R(X0g?6zS5fx0CKC|sqF6PO%hSC^Z;Ze!Y
z=}^=CykVkD^W=!aV=x971!TySqZ!Goun6cp^^ugs&g&ksBxtKSz}lNI*hF_&<5hb8
zWzFugyTsvUYLY$?)kLnJ<A?ydC-N3)jXm-0z~O%IDhDK;(j;aCt)^3+>`>+*n0n>Z
zvW{3MvWbMU(AWw|6|urtfQo8iMaaNKM*5#AJPCSQCwUf095-b5L|_(D%|&sDqA_`A
zYp!5W?*4OZSsDb)8OnwRB&Tc<4REN5H-mBHKx9$KgxxlM01|Yxp$=q1J{AuP(ix!;
zW&7?lPZU0z`L~Xc(~34sqVu*|e75rj987v;rG9FDw);*(yfS<tgk_a6nNpoGyqY2t
zyh=)bC`3iM;(J|3pyh#*5sr0a`Z1`F7~QIYe!_x@O_}9JzA^ZMcn;OkVZ1W*IJqq9
z6Mn$tra@T$ldVHY|IEL(dg$5FUS+sLn;!M}>{4y;alng^&_w2_2HG8~-(Jr#{ohsZ
zkdKm5Cdn66kW)QjpFs&I15YRsxF3V?YkV*!?;r`R+<v4jMyz}<a8Q>#BL8dTrPZ$h
z%G2#Wpe;-d?`hPspCv@3*Cp70H)Qy?G9po#nV+6YBmWEArn7z{@5`ijuDrEDpC>vC
ze{T2j_ZNkdxf<L~rRG<x^K1@o?X_7t@eR{V<Y~UU_>l{RWv6c#WUO_iRiNi!YRcU|
zB=_^}itNm~c?YBJ_<|6P1;<5=oV1>d=xP^W_#ix1FXI?!0{=hG@xySel=!gLv7`Ww
zh7E)3Y?#+peIoMNld#oqyu+sT{;lPw>5tC4TeGEew7pTny)d}NPP?VZw;8L}TKcI&
z;*LCxk$q^8e)sbnzo^eVKeO<M&VL2gwg?U2w`1(Ne*vRzCtEThlT=2Dmz{cOLsdOq
z2`0_MN>ivcXou}u0uYQ}WSWs8BzrYn!=oPAZI`m1Hwb2qfu*lwjdvz7l%<7isD@`Z
z{symN1C{8U!KkmA2z3u7@|I0OD5>a*mVc5K%F<Pey{|fGyj4Pi%&FZ%0n0du-x{*x
z=i?LwtGn%!rgYZinncWr=EGT*TJ3kHGd2{E`w6y<$uBfZ06zQ14Z5?`uu>^*_nu1%
zmr10tLWDO_EoNRiZ-wpRqeBlIHE-q|_OHWIjeBev>p6x}83LSSe5E_E-siK9fuGLb
zI(M3j%I0#cdA;%`XQM2rFQ^EQW%8myBiH6+9-^yKLZS$};>E>jYDJej(r#E;ufbWr
z9Y>M7Q+W4p8bpm;t{dbVtuhXL-Kt^Cgemv=2b}3vQ|h^2TH-f@M?{G;DAz@;EoRKd
ze$z#nn-#IyxS<i|(Vj`m{bB{QB@hgZHvCI>B%Z6IbEedIF{N~;pX<rmGM4mU23hXE
z|D*bOY23wN!wNVHY_9p;trptfC3J<Y6X!5N6=eKfHs=F^OT-pTdL)W2`}a(#uN{}P
z8N-ciLa}UTqPH}>VJN?7ddZ6!hgG$ex}FWytES@wMVq6Ze%V&aW^kxQwKWHy)76^x
zuYH|E@9@AE1?<Zv-CuiFe#1)<{2PgaJ&1t&-$F-U4*auB3qJ*6h8WD#UaR`n!x$I%
z9BpcXQnsj<L&42Zu2uuT2Nl_74Hu?ZYg)i*QGZwNAKJA<lZbj?#7wcY{arP?O1Uxp
zv!LjegdonPc(yCbl2`i-3j7eTZ~$F`@1&vcQn4V<Ri+C~twA2Cp!4gJUa<_vLT-C-
zHkW>o%p2ho`%_kgY0rSDTgISU6CD;jKM&FqnKQ}ucBXIIh=vc`Kn%r}H(Hyd^If4Q
zn6t-V&%uf$%?e4Cjd|J1&2hlOUtr08H?ouiPe*u>zg64yV_JF2z!DLIXLsn${x8pH
z$MNdU194V!M~`TzR0-NciXW|9mtx?r9Qrq^KVv3RlAQT3By@gizL(M`3>EE?pK$J+
zEhU`T&3mi}rTQqu%G4+0A-IgYeT)%_)mAZ2J`KOg4iRUpIVj~ki5zeQ5bfT{&Eg{I
zni$R(H_SD0zm0n|AO1igbn8PXyS2M9#Tr0YS%GI6qPc&BU5jL+OJkqQDrrKz;3~cj
z(p0PQ3mZ8ZL|^amwh+U=W2l3c&l=MwAxKV|E(>dKXgb=MlRFBfhFRI~KceC;=-5;T
z&RY4A4j{tnv*@`e{_PB>+04Ihl&_{^#%_-OA-_gXNq2`{PpvZUzHPoemTN&;k>G-@
z$~Wm)YI=TWTHUbLku{@&g-vGFL&A((jvlNHiGFrcQzk|k{VaL?+zQPMwK}4bDAa(1
znio<*F~v5)g$z4{TQqncP9`OFuc<BW-+UJar*S!|4zJP6%1jwh7aY(SQl?u|OxB(^
zGYxT6$&BQ%ulhq8PWTx-G1y1fzIdLanJulR!fLM9Ms516W+*i*jw@`s)}+Qw<S?Hp
zPVT8jJG{qDU45#WMBk`c*-gLBFxDy6*5+@zI}>{-M|QnM1ZAok34UbWaa{zGtS5u&
zM?RNh3`5AE?#7xhArnmtygQzwuc>&~Z*x%I(X5{;Iyav~gZItz-5^9pVE6M^|Jq{y
zKEsf-gNo!#^F_)17vt6fF(-f#V%#kqO(XR_qp70Pf(^P%ngk---2XvW)T%SQsey|g
z+QQtwMcgD4rQ9C1ASQ)UOO&86w23D3Dxx0zD#JVRdFq<ck(F9;g<2`?=x<lhZht7G
zkOVIFz_5rXoKomfma%7{F7$2cfG(lktC1Vc?Q3{`$Sr?;z*{vdiokrbe<st;TqUgl
ze*PWxf{~*>(|}k@vFTvwaZV`btV_)P_EF7rvEcRJObU~whf<sbwGwYQF778+GqAsn
zZf$JoHpmOp%#+FOSE15=a2RpEPS4f&1UK7z%IX!S=R2jN=c-JoBjOU|!x}wi#FEOR
zhSPmqz19PGG`+BvxMK!k^QZF}2Z+qyPn%0wUR1OvDH5sr3sv!NjMTb&%%$@amMbD5
z;v@+(T$qUN`^qp&HKBG8(|RvXbC!f)4<2-hg~I}b#fd35UB2`Q=4z2Cu!Fd?K^hlC
zO%rjZ7jh5@tuQWkaiPb4%Q#ls5@w?lmNx5N*6VT7J|h)P&i2zjS&Du*DMaRW>h2q(
ztGR%@AqHnt`cT{IO7KR!Mq@d@)y!re>xqkeH#hdb+qRY5x|*;N8xuPi09q$A8xorE
z1rx!^#29$jUl#(Vr)L$~*G(*BCrf$I(@wjiH!*YNqum}EsFx8%6lpvpR{Xo`W0^4b
z(JjxSTlm@O^BlOh_f*;E;icEEn>hi*L01q*#R>HcAs)us7>~}unta7O5!tY_TSFi$
zmWK~DahTt{3A3I12|W%E)W3}1V?_4m(<E}E21BCGh<B|)-^iCJ65X-_`3VoA1Y}EU
zB=XqT?|0vjs{Eu4>LX4+%7N5y?S&SN^Ln;mS0))><MOSw<(G?C-)rC(;dx&_P0=vj
zA61E+av_}Wy|<;!n1yRdzDriqX13p*%vRE9qIt{~+@<RhQDx;Ge@#?uv!hBkw}Csf
z0H=^>qN3Wjz1-&u9--t6?P`f?yp6?eFc9&%Ips7ZE9|r0Z^WDd>-$1s8*-^8wH`b8
zA6*kaR(?9gnKJL}4FKC|{7r1r+z?asSQiyf`P=Zjr;U@ULR*hjzr(5Oy1q1_bHs|S
zGv)cUl7b|W@AFSLas>72=-?|wvOYjhj{wcKts{}}4$uiXoR}!o2_8xX_K=9Ngin8{
z-gMh8D@7=i308u8gW7@ZioGWohX9{6hA1?WM9>V4Nny&=OYdJ7S4_ThqyvUblVQ4|
z?|x`QJCPUTKukMfH%<ob8K4lMqX!_zJ}8Ew;EuulYJu4{njN=7Lu-uNIK^vYm%R%P
z3PZ;g7elvR*exiQ&fq4Jx$0E}jz5l#1ApRnib_X(4DG+cvNxe>+y}4t2ol}em@6w7
z9a7lOZoi%22&8LsdS{&!Oy@TY?(>D{uLjqA{IFOtnZre>l{2)}=uobw<1dH#W-GM1
z`#d61YLg879d-PFP<Bqyp+w8NPO@U#wzFa<E4FRhwr#A~wr$(CZJRfH-}7?LxO<;{
zA9~Dw=^nFt)TmiCXVv#p|LPb85k~9a8hP5Hv$cig{SnG#Gu1n<cBWSuE1U~8>4#4I
z$&lBVc*FuZ6e#8D=DrAN@cq<=2!J|KIz(!c{ar-60=UGlj1_14!x+qOI@8RfJD8&)
z8FWq=vip7bpuTO6^Rzz|@^~nNLwlM(F53e=Ckit<Wyh*$NyI{zKL1)#5-lm+;PcFb
z<Vhx`grhk!AJ}t=v;*gco_zY(GacH)p3r&~Q`519j?l~r!Fv03mpm?mfeguFg@ugB
z98gcZAhWWo444HjuD(aSzDu;}SchKmo;#3(npq`XA@`q_Xg+?)ReO9$H;*^X8eQT?
zk<<w<-{Fm^Ch@DAO(c$R=>3K*jUf#;CzT!{ea@^*MRYU2&y;^N65>#(A|-pK(qJT+
zD@CA8R~IWb?%1=OIJBn>kqj$MfXJFGFRE2o*HO{nXmJmNHE(yceMH1zo1!Jr>=cEF
z(h_fR*M?X;PMEp0rpSFqBw=#?83;)dT>d#M{A1`q%s5W4wVTCaSwEs}*7Kz|Qz_%#
znJWTMumdwQ%gPkfiTCEBG4ft~Zby)<11H!YLcRSQJ$_yJnpE$F#yy4PqzW}bTN`72
zH;?k%z4Y&kR5vWHAZ54+w4$zw@Q5<{?5_O+8Db!}D9r0vj}`I%Fb|M{Ps6UGL(&hP
zml*jV^pC7miM?~WJ7sQvr5+V=T@d2y<hW`{TE<1p#-C0R^cNrP##4z=Sq<Xoq`iZn
z_ED4UR?1KMc$l2(a{U=+q>`peAt~$9wI7rl_uH~@mtmZQ$;;dW3e^0K6B+-WH6Nm(
zxp+bn*(q)?0(JcrQ7v%OoDfd!<&G&fr74bwV+3L+xn|PbuSrlxO;egF8u<b4K*BPs
z4VtM|&Mtn!@qPfHJ-8T*0?9ppNETy2PN&$LdME0xxr7w&WF)sk(8a!oDuoYtWq7)m
z#z~29+mfqgNJsMaM+|PW=ui4cHm6P}pNaE#UAdN!eVtG%FC#q|5qz2v$?qz3a`jNP
z8QJClDMb=GnfB0U^iYr*Q_If8?<m$D0e$^K#a_ZU#TZ8D3TBi(RY57<X@Q(N<TV~+
z0eHm|Q8<i14mgR?Yua2*`J-1~t@(x1C}Z?a(`Yf~_6YIG@K*_^c&an}^mA&7@Dnmd
zoGjD6y2zdRY|*7sFy`Y^crA{ptj<Fq(@M=21Sq?JyU4S`J%0AC$_X<8VNOixqC*A8
z+-F7mAn<Bc=^cIDW<Iqb1<R{lM|+E6UPJL7t44p<BlCjO^P;dS;05W4>wz8HVIser
ztvVc7dX?ZD9WMK}28~Ts$)Tq0NH?kzR(am5$1dx(y6mWxH4RQOVfsR~aHwhV<4D;h
zVgC{ZGk7}dM4Qel*m*75D4N+uFT}Il2-M-E^vLbvlJ$)={UpoDDbWozvjBSKyUe6>
zLXT|%XTF4^w~Q;&SboHT{D~bISSI_vB6)zexZ*YGK5xhA&8v5u0&8|WRJ`#M)>xPw
zqw9<=MjM9PRSd5D0y@5tX8SY5U&V;i*{MA>WR`x>7X@ndT<C1fO~B`hMdz)~-L9P{
zXQ0aow_}yZRI}J5>cQ{hdu>*>ld7KdL1e>5ll@WyY&CE5?#f5KH3_HL4&Sw@yDx>C
zL=~DiyrAG+-v;V}PPSSBH)Ivy^&@oAx=wVIrA8Ds(nQhR*+uCusSpe|)mP^GLUq&L
zYn&s-gcs8L_Q^)Q(usxBLRZJauz_C&6|qFY(g;ypM)`pvsgSY^zgr$M<bx!Aa!9<}
zVzD|m!nDF8SMv0@XbdDJ5tqVT;e-H5=`V*@zSr}^yZc85x|DLVleVn9<EO@^@7M9q
zsDOz_f*dd^OJ*S|a;IDS(dV=HaJ>6$y50yz5XgT0@|I?G7P-3`?>z;u7<X6aq?7OJ
z{kVC1n(1gX9g>s2b0S_iw9nSyh(RBxkv(PHx{^1lk?`u?>-*#6_4Q@E?@He7r>(vD
z-A~>QeQ&ZOMY&hi6`|vq{v)7koB^C*{T|6?9A_+7IzSEB<7b>EJXZ%m5BTBtJ>4%;
z-n>#5(z^|vdndMYd(JGUQXeO-b9rwvc8r|Bg85IF!d>@Crw#8sJm~KkFL5%{r`=d8
zE-#$z@i)#d@|nh$$Ilxtw<a!oyzU2|?#gYRJx+{6tOx{higmtc7f@SVLeGu8bV$7G
zcYrQ~CzAbX@6ckBfT&8iTCF!%jgMu+l>6Jcg<)smc34OYM$6Q_!mhB&xFyO7!<BHN
zG{!Zv-eYAwt>7RUZS$EY2TRuC-|2dw*3&n(zBVjDI}Fs69^JsIVB7qVy(X&jLlXJp
zJ63Y4GI4}9L~DRcA0;)puzE<<u?KqcD=B(N98M!!q|KHtsuI+a<?z725gAO2X=>pu
zOkz}k5VjlUlT^{;V!I~&3Pd&Z_5Ktq_YmD3p$t*?NdMwQB5WLG)$i?R4R~m(=^(Kf
z@DE!5D;qrRkpEl1S8NL(0PLrH-{1$!atSQGe1KKEgFmS32!)E;XxxIjqh!HY93_Wd
z`@5$ZWfR0xThS(1HHG9p$J_5vY0)ASq?WP2A7v>rDUtvcwFgshO{~!wk_fdx5>r*9
zXRyf0JT%B@G)_Fe5;cba6_boYC<5NUXc-<V9hw<2Kh#qhy|yMYUj792cQwRmXb|5A
zAIb>$?-F-T{oX!luyhS_%5p|#we)Ee`U2_pwz`f4==gnw;sO3&)f@xuZFzMZ`g{ZR
zeN+^eIn<5={J!_~;PT;e<E=!fo<zyIR+N<GM5u<gSv$K8V#`0XGGx1)-2}G~UbF}U
z5i32dA6d@%T?LXXqLu4CD_U6^v_M$<t8SSXy%yh+Hfn{h+`WFl-_RTRhIp{#x5~Ku
zQ8GSJG35Xv6z-BCE;PXOXmi(*qNDy$ULAGq?<cnsv`6(y1qo{49%ymnz{8w{_9AJ~
zKm3M@GKq(wK^Vy!DaV-AhZnBezW0p!$Ru!S@FLU?5rQIz8M<7Aqwq8tW6&uahw3YJ
zTYdPA)xUA$(zr@6U&V9IoCf;5Y=t`*a>1mk_uT-K)zexn>x8L)1R_WSzKa3^Oi&Bv
zjC$homdc(7{1=XZQX~(BC59NGtg;Y5Q|lAlx3#wSp*oWH()aLu+}~HV|0mA(<N;f3
z2nGPapB?~!>OU&4a%E%D`8lxq_nlCU8s94GO{m}OUsMmK9Eir)KHu`9)8sQr4(OMF
zZ`#`!TG5uHJCn8C>wbUQpPRd>MxCL7fv(!31mml#s(9M6sa`2PZt0lPP<{gIcmye0
zIpKR%cRy$2L!q>8{_Z`lKQ<>M(%@@Pug`|zpe@*hX+k8*eILxB*F~#NxS2W$qAE%j
z3M$N4ncA`s1o@+*qXcg$#Xd7R6$_}4YhebC6CB7VDX2`{1%h$fzD51yIbwVeX(WM1
zC6*LngG5ZaQ5K0iYqESN-KWq}x6I;mh?9_z=3@~hfAo+Q1djnH#gR$KMT^z2cZqXO
zC@JY$uEZq@iFzQ!KM@0dgWg_XGV!HC*lUG=wZDsyy*p{dP1(x|=jBZh`6vrhI8Gzb
z=B^8=84s4vo}8VDi|GLgAyAol^B{T&FKQ-4*kelIf1PIq%~eDe&B9D@1JiJJU#%7q
ziv7kLcmO+0B9^L_;}wP2)c3kW{yj%3Bv#)GAD4hyor6LkpI{n!bYjAUUUN5na;ZzJ
zGtMeN?)`N+O?TtO5f*If;emxBuyt%yRSN9hyD!Fne3;y(WKhX^ZrZc+$1K#k#mVwb
z61H|WHQWnZbECFoz-JCfk2f=ML>?M>!0g7v4-|I?j4=%ax`tmkZ7(Mvrd^;k<<$yh
zP6fj9&+lVCUJ1S$xO%^7_7AQ8ZI}-Ti(CLC|7m^jr7wonJsfs<QH*?MCMi0PvtV}D
zRJ2*ytJ~El_k0*8wzY51aOodxGpyd#8CnB9hs2UBayb30Ya~nKuDll=Me2Ab?(j(#
z?H|j?l!3p<);8BZuI(g`M`l|ArHzT&`P*@M<T=7;gUHV-f?(L-JYl&LW19A8J%$l9
zNgY?e0xutJ*4agPnPXN3DdDkParukm-}^Z26>O|eJIzwVArNH#<kiM%uvi=3F<oUo
zz7J|4TqQxBSK)!R`fNgv9J{$NH31>^P<?LN3j08sY<;>;+3J0+0?#KSO;~~#nYo}B
zQJvugpYr<aed7~dQ7(K_g!iJ#VT~}?(d-}LDm;KFSa-#^yR3d7VcrmgY>V*f>PS_i
za?m^qJix%TeD>2S?up~=T5D_ySSXZgNZlXXF1tdyZ2OS8RBJePXbXuLVBkmz*_@ng
ztzUEX4pm3GeTqXwOQgjtR)UB`;q}k%=tXNoiGxh%E23FftnhT%XtcF&a$9KVUpf1v
z0fj%w17gZ-_9_ExWmls=>pX*cx2-L*(BiqCQ#2fGt~Gt~EH(L7K((dG<evAs%q5C+
zpc)BD>hNheywaBO?x&c4f%|7YF1o3H5=A_EjX95Ef6sn41BvAf60;Asrs0X)8(Drl
z!PS23I@~G1X2bpYM3$z*_~gsUcHoebcMQ5G7N3H8SYFfxEi8$&ozRBRlUvb77<xg}
z#^-ahLkKD~1s<O4aY2jn<i?u)&YewVz|5<TI%tt=7}TlnSN^oQjdw#KX@Y2%)0&&%
zF6<_mr)x>^PWSIsX=3N!?xGRi3Fw>u0;f)XqqInk1|1u+G0Cs5r|aMLKHlbi7SZrT
zB9`O1vdH6#v4gN_2`FRw(W(g=_L<i5&`(eAkQ&`%9<WDD*CPoEzB%)%j>(JM;Z2$c
z&=8KX*nt!koK^Sz`-sSguIqm7?0;JG?DnubU)u2mlUe!b^X=I*)YS@(jFpfhwPV)=
zy2<im$T{<_zj)9|U0w<kcDCYy#=WxeCzFT|xuieQrNWqR)kM>JkV%1)UE_}ek7jl`
z^5J-rroACdAY!!Y2)KzK#m|iD_kg%or%?yp6c!$YW;Ky%#Mmc%$xmM+yW$IQfjtoY
zG<H9*J7@6Wli@$SH|t5;i?ijDgdx_OT2yC4PfcSJTO(8Gn~in^bw<%`(;oRqQ>DDp
z>SwA}(^YiY?}TD$6@Z<A8+^U|72ZhD`%+I$Bonj!C~JhzP|zZmSbT(!CV%H-8998M
z$D<Ms+_Dif5@eC%%Q14M!PAG15Wip`<)lyq$k5Lmo#PPXHyU};?z1x31V(NpL9|HD
zj9frs<kR%S6c@y;8o2tYkyFlaptnw)`IeQS<#qL2=n_<SA~5SLI1AChH*(7n$^Lck
zWzxt|6XbS<mGWfD;ttR&*urZl#^y)zNOkx7@;!zpO#w6jM8mWD-t0xtXlIjROwjJ*
z-_jPcC4D+U89{xC&toDzK^$gWNz7f2j@%kCRT1`BgzT4Wk)kcd@|@jahIvF-wp2fh
znkD2~YeG^=PwSXUsH&&a@dVj}ijAFZ12uAz#>O(3w^NI#hn1_W{8ifcBClksb<9zM
z#nxr8Dm(jd$e~WOtsJxjQzgLav?v!g?Z~A&{3)hbHq-V~wU#CWBu=6D0CwRD3>R?@
zPD3UufbHDhf5ZVGO;+Qy0RtCu-cyyE)@1DX6E-;z6kV#7Ey2LWoY!!xJZjF3@-8ta
zp4)oOL;tvu`&-rJ!0fvI$isJaG_IAB4cKYO(0!M?7$>Qh(o2uBBEDy7*ObLJ*Q$Is
zVOFldZ2k3H$^OFe+ZpATke-DHPX(vPARp07!HqEh!VK;P<}!^YT5?6KJYEENJ<*)B
zGMkh#+x9{ZT!KhjhRvpuAR4Kj4#i<2UvSyd<8{9P3_B;M)@TuI!4*DB?ghn&pBe8V
z`J0-W7a2MB3$S6>)e2iR6XE)QED#8vfLZ^{0H;m3(O0$|3it5{9z8gpW8f-S1O-~^
zN5#jfZAb3!b^~=qYJy{L{uXtu2+UcjGAq}>5j-f<fbfZPZ$4~rlR-$CbjP7<1th*d
z9qnu_MhjGz=;gxh7{K0A91d1iDb#W$41E^LAI;&}zOmKDLk?U(LAEj}F8%wFuBz2>
zr;5lDg50FtGQeL0s#W_4KNDJcpcpJ#1&LYXlgysMAJAsyTA-|X?>b#KN8>W@dszs1
z*)7?;DFJFfe}#p)uyzIKBp*t<3T*lL1Yr?LOw2M1r+YXVVCQ)!=Dv|{PcHL4|MWCL
z<_>GmQWlQ%mn@OWe>~Fwe=gnQKf}PK3<6)<<QMj9ya~-!^pf~!3_xB;K;hX@3*J~S
z^tFO0)$D`~np>phTOKC{Kptn*GgKec8F)g%se&sn*v~|_tL40{NpqOURZ&E7{Emk1
zciXNU&Z+=2IFQVBu!xsov7RYM!9RZQj(U|DLY`A^zOysuK$XB`4HWJqMe-S7W9b@5
z3<tWtz@lUTrzRK|C2wI_xmgPl?qVBT(ypw^b#TayLN+?v0!(?jPw0GMbeMqSwodf$
zJP`P!Ryz6?P>jdxCmJ}?o#>sA;i48{ytdOO5n=D5;ieQ}otjjDkl<N3S%51nx#(X8
z83O{lrRGWH=rEEPZ(O2vPjk?*>#&E}PUM9q(Us0W?;;*CMcKqzeeO<FoeKpoD>+=1
zAw#Ce%6($(RCl0)TN~nhr!GRye1^};(qk=Dbzp=Z@v(ZXBaz!-s(HOy4Jk@lv)W9j
zO6s$gX)A3v)OlT|W9A!DO2$!^Z)%E%_8#msB!!{YxTDlm>2OB{YSvMkbzWPW->&XA
zyQXz6ws*JvqkvTTP#Ll4J9yN%c-Pn7Y+C|Y>@Wv1A$ZYStE7+)T!nQHdCTjcwvJ<0
zN-Qb;HSdf?R>zLdpI^5HZo-5q$t`y~DkuUEiQBrqW4CMLTq)H`DrAy076eWbg^7)=
zN=OPrXItu-xhg~J>wiZLCFK7k9EsU5gcYqGv_yX693DasXCtB~g<5)6=lnHKx?81N
ziD8*HLo_lI`^(V?2SrL#fcpAOXdX_io)m6Fa<Z=Gw(kebO&9DV)~SC46@A-Sl_9JG
z_V|!0bA#>75@DdoY~95(bibCqp;7mRxEe}fJbFLa2=Jmo+#z3?T2Y$EdH<lid?{2M
zJ|)LsrcN0^<5k!@*cZB%oozjEew&A;>UYY`m}0DeQ&SrRl4zE0JwKEb%4#RCY=sh;
zo{^YWNqR<FY_zC+>sHS!Jn3E}v?S>O2-yBNM=15EfjPpR+&Hvi^^Eei0(IF@4eT!-
zT6L6h(O6q<H6kmPoy5|l(om0Lp+;!8IxrU?sDTjDji3U;qQReuu0ukJVe&KxG=!b~
zDny%xe$)c?@*BYSK(2HuIPneBBhw1dTAfhbc>sMQr&leoCSxC@$2WKNdf%oC<4~=r
zKa$e@d??Ss@-kub2OVI=KXh~fB52p|6iYuVjCT^gTNNYt<|6-yZ%F|Eya^svxQuKI
zhBwED?9ui9Oqaj;&zvG2A@9SLm%%z?f7Ml!%TKW-Z`r*9pwu_RnDeYj%tk81`pdkb
z*Emtp9x3JOQN1*@)UE_#&OxUJ>3-n~{;i!?CtqSBef<mXMW=s>YpK95YxBAC#|GjG
zjpS*+q$TH7qe+7aw_@xOR2^djUSZx)PxpSrx^~RbhTHy3#JAgM+x=k7)b`=@27ZaT
z$8KX?wQDlemz4R7;Qn32d1$xW9_#>}R*oT`4EeZM=sa|=--k|uv5BHbrBf<2el;Po
zs9>3d*FyZhZGe?RTi<#y19Octr>?aGpdD%~xvALjqDR&y<abTHPF;>y-M9DNyhA7;
z94_5jUczTKxC}yM{BJMSI-}(dt7IzfTvlL;AT69{E;XZX<^8527!k0i`Dp5x_`26q
zZ}?&mp}k`Ojk*6xI>$|Dk5K)AgGKx(;t~DZRPi6gDI05}|I&T=7r-g21U;Gc-|)fR
z$0{3t($cDkeTRrg#ugHR5*hw9h^E7rX|7v!kT@H1o^uTNY_E#7qn^PfdOml_TzNY0
zI|Epql-rjMa@E^9y1U!kdb&P93}J+<$B)mF2XR(<+neXAtV)_8@zG81Zec)gIP^c-
zOc4UJD^rpu2Q!us?_*wol2$9s*!Ok{x1b3F@G63UsQD|RQugBv8~61{9$>%VjY&Z9
z11SlmLJ?Ag1pPp-SW`gx!+@C^fd_#P59e}i_Y-iFVBZ7MXLV5+%jQH4`c!F(5>X&O
zF+-iYCf4RM25<FiLy@0!C2=XZV=NRl8jy^dM&xk8db?tos?kHHhZu76E<C9Uf--D|
zG0in={%%5)B^N&8OHQF@^L@9u@M1=i1yp}V=<%+Eu;TI*O3F^}$A_uGE6#<s4y4XR
znwt8wvzf_}z+^o-`#bf7c6;jcIcpz7qJmBX?(n}C@P5HE-D((wp*$pZxH^_a>@Mmu
zWfcUZm)|}rAi8#@@RjS%T=q>0qy_UFB}MSXRWM&;>yZapbr$dXq#iZR&3PcXklGLD
zR+M>?W7J}Q;`A&ThJt3bp9h`0Nj-pQXeY#ogbd?l$2;k7%2yp=8zp`$KI|+JIy{$>
z>|(?A!)Qhc(lqVYUx_YO9CpD6-xyiInc)AWvEc4B&@X}4-nV$}vDJ7j>sN1=Am7bt
zr}SZ*+UZY!k&yjnQ89VUlpqj`HaG`>%~#&u+7-YoL`rk;pYB<nX$Za-$F~mHZJ6t$
z?cHSY^8p*+{q0GK^;eJ*QOEy(Q0-9UI_mxb$4vj(;~@K&M(b#5Z=`4Fpkw=gZ~nbt
z(WJ7JL%Jw@=RMV$SRzyd<>*#FZk|(F14E)xC81kTL$pI`-%QFXelT<Z3Q6NP_dTFG
zF}_>|cArqm@#8-TF9L8Ls1Le*bvVUvwZ1xZv_1h!ku@W~A3HEMY@g^rfrf%YF{Z(O
zOCzdMTEa?9#PRC0#bSpW3;&XIfX)>aIKVe&3R45pz{pPQF_{9`iAJfpb%|vF6p9WP
z8DI(tB?W&W=#d1FBG65z&h^H`w=4~1b`w*G2lj@%(0)O@kZ^5MP`r!bH?LcD+?(QV
zt~;#QiKi)O-FfJOPZ0Bg?UMDbg;)F1XWOuD{zd9Aa&Or4(m%rnGwujlyF!e}(@=5D
z1QSmv_|h2&_p56h7;AuTQ6HE<m}ziEdqWgqE3)ECvu)pE+V9?htsIqXyghx<zoKfB
zcc~gSnUeQ<il}-1^>J^>ftYbdlyGNgChqXklKwS9@_2sHkt@B+DH&0ID7f)B3BYWC
zsUXfM5g`i0JrSTksb&X9%+7+B0h42?*sBE-Y2-Lmu(cOOF`V};tYL-yGnBfH5y9a>
zpszVii)~8OVFYn?=oa$me05@0`Oy{`M5fWs@Um8fi>Z+R{W*#?L#sFFSN0QiVp=GX
zxh_UC0w2bg0*JUG>sWDk0|l`6P0)^@?;8d;yUXN5!$P{g<I(Y1V}S*~J+gjsF5lzx
z<eht`{dR02ry5=7DR0%hyjFgLvL;fA+@|pa{9&tp`!6Gzm5}Jj=+);>&3w57A_@5!
z#U4Ea3zkOfX3K3f%+A7F*Almee2Q^94zzrCR_1b#G#{eQ@#u}F49E|@QL9&(B+a<5
zlmYRqYtakE;OK>gC`g*-N*+|4(@cAn$cidTY^59yzC(nIwrh1;j{K^8%f-Tm>`p=w
zN$=ruYP9<>C~l+EfU59Kh36;(9*)NjD!sLJHd8~BSD91t!5r~xvZq~t>J3-WPM4PT
zb4bL8c|yjyoMlSsJu&=k;I*~JyI0V-;7{4fU*1wiBt->f52C|d{l3CXHOv+Hu&*k=
z5{yo`-^4WbUghv1l6$V#((9bbNWD9t2uR6Y_yoH6hV)WSnVDD#$=QY#;W4ks@{`7n
zQv{t=S{J#_9TbtHe7*57o8F`GU%Fxo<8Ys&M7wmcFyVQjt&Ei3i(n(MwOJ}egWRsg
zy1dun6*i0CdlO?-?jHl;xs$$Zu&Yt4i;)<zK4{3o?l|N*`O03Hsy8hU@e4dgm_)t8
zW%Unk1kLBf0trK{Dm&*k!PipoX)O#kzS`u=rZ~D2IgY1b<@|S(%jNy`mdy(_8<nv#
zr_{Sub&7aRdya+gO#XXaKi*6d5+Dcwz&1Pp0O7xMB>&_@>HM&wO#cg{yY>I3Emo>n
zDXjm1bhC77mtivt{vcu@<vc{#VT;;@PQyZXCe5M`iwWYa8*qYreO4N#zc6n&N;47%
zJgu5MRy0r*KDUBo^W6q4$I`0MhkEgG4a5LWD8owr8fKJ&d6@CBzd%2b>bUDKfvP+A
z@5LtkoiPI8!+B4ONKYHJ7LCU4u;S`K7RV;DPfBW9KMF^2BTx)=v$@@~<_<C)qld&E
zNv1suj=JE~<5ruA4|?WzS^X<nJ?pZEF-j$at58hLa{SjfeG|MT0hg<h;tQOBJ%d$6
z32RZ>q|g_sU=w@PUM!Eb{#m{cxbnn@vK_Xdj(g|v@o`lQX5Pr<+iqPl+oL@Drc#G9
z!j?rN&m2g&HUL2pEf!>NH<i7R=sD32(_==Nk;PtcJ0k-Y)v_S#kc)v-r((zqYM1w=
zOBvgytVkK3@EgrduPr~!m9-^gEEY7`(*6L$RmuE2v|d}kr2e1<Q(Q=Ye6nJ{cdnK|
z>Ss#r{ULW-*Js4FiWU3-c48(NGavM;F<U0G9T{_rpCf%1f&(elvQ5i8=Eg~SMcT7a
z7h}`O>`~azEGZx?aSIsm((&<n4L`xdIXk@DjdWAD)@gV}2?z_pbnue^a7RC5)=1(e
z{MJu9K3M4<Y2v0j_ZD~&2Wnbr9C^);yGgYI5&S0L0!U)sHudrIGQm-$_bQ-`($PCm
zy(M+5$)~Qx&b;xhy-<@QhlPzN!JZ<n>0oa`O>3_ZBEWv-`nC!i8}StxYZKbXe1iki
z6{<0z>oX)7fww}1GFKRmXy3Fh$H&EhSl_gK(0Ln$mu+r^0OB2B8G-lKeRm)$bA>za
z80>hq4S8;~+>#z5v7xxmBuoQGcFQwgQ>BH^ID*)MmqPx#YbWG4Gp+Dj@Ncsl36zmd
z?am|u=f>bZ->ep8JL3SXzX2aLVnz}KdY)VtPwQehP@uOQj|kJ7jEymdz!_cAhr$3Y
z=)DcmG`<oBdfqKE`cGLjGE)XBhP)tBuNN&81mIE5AKPwDsOMHDVqpEColK^U<GWZ{
zQ77a=E_^Vp0;YTCC8USiIX{`~o$84{E64;FxGUPro{%QkHqvM$q#YABHjW13h<TTe
zYt~~AY^|80hv2K0JfdCKcO(;4);3k^x%C&nPkA-e*qvySX}NugZaZdXe45(S|5zbb
zvust<$uc%!%bffAT)&dlz!e`W0ju7-h3le?$NOZk(jjX^7j;%To7{}_hT!IF&$6^G
z6rt4#7v;y5PK`)*%_!QFJH^`?$*lK@kW2I`pRiw`v;WXj3<9WD9X{WB-qm&-mxDH{
zNZb)T%Kwg^Mxvh?X<Hj`tl+l4bbU@sep}={$+(b~q?ItqaLHXCQ(ULwrtF28QRiFf
zDKg|s9TN1C73HQGuYd6D3TE0HYr8I`GDEp$8O#O0O{|<b9Mir2-uF>tAQE50eAc$)
zv@x;~WMH`QH&ou0tU#w5vbXPy@H#Ef=MGb;vkO~#LhYo>fNoLrM*Wgy=n(UkxrD8C
zELPPES@Eu)(~qW%4=oxas*1>raK&*<bG#3yz)d??R$5AUwV4o#dZ)#T`6d&yp<Jve
zIkP}%<@iuNGOt$G`&g+%r0Q)RvDEO<6}6lXb#+~T)AavReQ?%@cR$3chv|Ouu|W%O
zDw39$Rx!}F;HpCx%`U(vi}GO|81R$vy_2zUzW@GblmGvleU9@lovW>dfdf6m{|D!f
zxYo+<^M{e^hXw#Z`oF!_mYzY!!pQC4CoPw%n=<R7@IKQz^dNTj{scY!r6di-fq`S@
zkf90M<=WHs7gBY-Y8p=*e|W#1(^s{IrS|}ou5l@~aCLc)SUGh#8PARLL1EaU_TB?y
z$Pi(5I$UdA9Bp4XJJNr*gr=fHzuBe=DjZ3en%E<fobojE!&iaF_Mu3qF_`r7Fc4~c
zT`|Vh0Wcuc02_u$l{EL{4blj-C~bqipd0<Zzv2@_tV=+^W8bBSbRF^Ce5Fq60eP9F
zhHWMD1Z~!oMt0~Q`hCj{I4kQedO_gkDN|v~pAfFL&3>5)=l-gWX#`;p<w}XfGeH~!
zpZz0a$r{HX9g{w}zP|nm?j$;I%PT%41!Ios^h9QlO6XRvynfUNSMS>^M)?c(Qbrp^
zLPJwD37pRIZPbfefM+AyG7<jB*VuEvI7CEZW^hY(#=UaY*TSzUg`R+5te{D01mqV+
zZ;BZB%5SWgR`mR=eDDqexy>4n4P@%ugfwzn1vg7hU7|j1%{(Jeujci0&2H!I2cE90
zOsdYNS8%bi=Vm=E@k;h~BCp(i%|E}AHIs-d*SPioB{f+`jB69a5@JAt!+CEJO$S)+
z;^7(OY!;hR!CypA-CvI!ZCwj8V&dUu!%D>F-MaIj#VJH5Fwn>oXCcUvOyJIS)wFS>
zd-`_q{_GoIE~6dKjK1NcwYHC}J<4z25yg#Z^3X{&hBEQfTdB_CKk}O`=e&vhA(Z`-
zcGL4A!g(6E0<O&tzG)VaRQdch=d~U*L~VQMHF4Hh-T2WEII3I;lnEh?*?=0@;H%$g
z?rsFU#7J1uzpPH++t(w()_wJ?A#n~q`1q^y1xGd1MU#G%2$aSxFfgfUr_a3`qsUk=
znhvjY(@)O;V>qML*thmr|EBe_w-lzcoa%YZYyIk(PI|MxX}-JbY!M1@791m3k5+54
zBDaU?iWCqH2*b_tkltgrS?Y=&mo$XZgiyAX+(q0%PnF{hI7(?7U)P#}*HC*e8gXbT
zkYNK_n*G(o2*AYt;bS{;CmU*4hbwqA<y#D1r<>E`%Lkbkeo#FBQ2dt4Xb<Jja9}n}
zlr_C$xSl5Tx+jIQSdAazoBXHK!*(g;dxr1&Zy|@3-!_SKatIqZ$B(a%8eI13*b8C(
z{U78#@ez}FL*K-ZzYO8Bz;k}J+lm?`shUb{&b#2{?2fkw#TLn}%!pO2^H1rUOKQuf
zpv>)2ZVJgU0XF1MQ%F05v^R<qls+}$3n@kuS%xa^-?muhv-Qr4pf*{D*62xG`w@Of
zSf<u5jbzYX=zg$WyQ{GM;rFl$V&S8uH@C?r27uCH9TIjXE5V~G2s8OLfmK+TP#<;*
zK;)j88+MNpEb*Fi(iCc_t?Gs@{1ugcM>nA^4XDPaP%E)DQnSqAYqK4@X`e;T#n0FV
z*eYPG9eS+h&@VLjHKuL+#DVfVT&A9TX4Esfv(gBI#LffOLlj6VB^h`!N}c$EVdX;E
zuav*Se*(tg!7?W<IpX}ZBH|LcOYXVWK|9*QfhHME?93YX%uv5hk^Ve^Y--LhZ92&w
zOK*Waoh~Mv)e}`slL7*}lXKXoy&c5q8R<K+oonVGVKBp-c-07GBh<wu&e!uXtX~>8
zHM<-`)7tRQmppXj{us1+rM;GNW2Sz~_%L;1^v;}-OM(#U<CJ!72)#0d6AoCGA?Cth
z<h!D}$njOk$TS-d3L0W#D}pgb-9>It5wd6qO-f!VIn*w=l+xTM*@KTN9U`L#^bPT3
zS>t;b`sB()%r%XYR~Sg=eF;=avO8&Jh_)UH!6BaeK$48scsW{XWUVNH8GC!#fp}t>
zBmU<dbh*U3e?fxoeKze_NF`)Uc#gOUpa&fRm2-*X6>TMThfhu??{bw6NAA6u_;bS~
zuheapVKx-g(kE~Jf$;6(q4&Vwgf3cL+<Z7Hj3;268+m!ixs`jhE%<{Y@8DANk-=G6
zRh$mErZMUmP^;(%|DM7+Q-rbLVZZV>4oZ5-QOf%<U%CMY+1^sb*;F2iCuQKq3<|y<
z-Q0{`c%z<Br5CaQrF@eyJ{E_N=lH@AeG-7#h$(PmxxN{@lZO26O1FKt%rUf=lT}kD
z|K<ScRfkr?H(!<Wrgy+u)(9D12dk)CrP$T7ydyjt$?NUbHrD`|{P1(N5_AU7F$$F9
z97{hj-kEKX?i%90*YNN{mCU7w0(Avs1|tTvyB_669fGrSOr;bdK&kN@y_nQeLe7Nj
z9Fz+me679m@T8c<1BmHa2a|n^2I10E*VCZlEoUojo62hEGSqgZ2<ffsA99PM5uaAw
z(%8CyjUGy=w>VG2P4)}MT*r>%`yVO~51P<%45v!<3v6t!l{}S=A{MP~;;v(!Z?ONK
z5X}kc$!q*1L_9wdL;reb<-gYKe=M$sMh5o(es%3s{<c{YM*hz1-uvl7ghvCKCoNp1
zl(XevV#UW-C^xH%^a{3^%rwfDn5X=H-`cE?A}An8Ws!ie^}cqvK0of1E(fJSA9-Qf
z9Z&SX8XO!P-*S6KOQ}YWG$1u*1S1Xm81V%8l&mz2Z_33J`n?EAA*nVNKTT~)6gy<!
zGA%d;G$Po8D2tL3s?8^Wx8%_4UJrA_XI%4S%_j<?HpUdKev8bHORuZriAuEt<k=cc
zbOn*!8(f|UIIU+7zm0^CHYT74H@L3>6U5t40O%n6>)qWL&7^b!Q4q?t46$njIk_a;
zx42<Typ+vr@zjzfy-5&nj>&x7aFw7?`byfPa0wyY#k^60_JbS>{Ufc+cl_z>@u_4g
zNI&c*FFJc;h;lFDsZ4uzgzjV@`=eofzN}FiDwz7fU+#B8Ail;h{O<r?f~3@N#zGy_
zZTSbD@EccCnIQPJylAmevp?kf5N$jT8@ZoHM>Jn}lDv{fhU^e)efTcHj=zF!<AMl`
z?RHNi^)2=3q*xgsdXQewXpHpv`sSz^UT>L1?Zz>q;=W=^MDUODBnvz#ZYFfxAR0)0
zpp7@Pu;@}OtSw*U3m~_?J-v6IGMo1)8cyOdx$a^KbIplp8bmN0h)AQAw(Fyz_;>fn
zBe^e?cPL^2CRC#Iyy<sAE7abVIdcLrg0^?whU{o3Eofp)3M53HvXNYVr+rxe)Gd5)
zH+VjRC^^e$^|C}A8Abi(H$^7^vhHi1LkZ`Vh!@TZqhkGLa5HEx;-Ri7R&Y7%I_I2n
z-O+v&nVMX%)=ol~2zv~HceEFANt-Jqoa;JYKr6~HRe<4&QK80wsKO*2rPE1=`@tiF
zB=qOsB~uM+?^R+vrGT7NCWgG0ZsE32B&VYG75%=~jj0lGK>Nj%#e<4)=^ilGzD@w6
zpl#cf-3QY3eo*v5HNR@XlFnK5nLSEfFO1P1MqfBYF0ot$Lf1lT8S!RFwii^a*O%hl
zWk2s-$UFPXDw@&#KIL?Q(^YPZ%cDxuj@U5Siz2g^$@X%_=W-CiNVw3Jx$TNGMp<=m
zu^vaqVQ+Ownor1-nc`yX3L+jkd`GJqwgxUpFqy2ESkfpAKXXlsUU|%pP?sxZ-63VN
z)@~~e!@pm0@8x{Ds@<27?H<9`%%N*<!8d{8Wel+uhhQgYWzSvAbpGIt+D#S~v1(;)
z@;D#s;U(ann9S3wk~3}nI`(4G0Q$RHSn`ku=@)AZpTt|ZZ$m$v3`qEOFFndUCnT`3
zu8+OqP|s+mUwVi^vNd3o`)k@!@@sgAMB`gl3|%NhxSEqU@$K0PT6!qwMO3s|WL?Bn
zqmZ`ux^ux)Xaob#Awd;C+$G<OrBoLtI}0e!RDg+pbv_OxHiOTn<Ja@klA>GqJLyiY
z>b}<ISUX$qeU07%b;-W@lYne<!_KN&qDVtj?iQfL>|~xc0yrxhx*AbajzuDtUt~F=
zH?hJ&@!mz1^O#^ye;)lUkb?ID(FzuaWJ;ZD#4wckd?Wv(Y7QFxJ<(Cv!i;XN$}D@Y
zN7}U5JIkmm2kshYsh6+My=8iMcX>q(*oz<|O#a~#<%4sHX|^pB^1Q4jwL>2JOuN$3
zZfDPAwJDc@PbJrMPSLNoY3(2?IJt05&yH!?kW@<()UEZRYpW(>y_SkA5pT63B};Xa
zbQukI$*3rIf#ojmtt$cLxrz;E*rQfG!aM(Kmk9{8Y3535AFfrpZ!jwlpxos1)T5L5
zjqdSdl&z2}g_94yVOaYoX$J?p!0BzWqDw+|UoP<veYsngr1bY7k%awgIasAzt;>IE
zO(FlNOM(AWYsyL+DyRw!0D$R7wDv#p-BwPHmjB*&Poi5m><Qm-cIRCxw)*z#iaOK5
zwtEcfr^46o0J+(Cl`bSugXRm0QktoTSUz>@JWqgg!_!q)pS}F)m2{Em)`>EQD4Tf<
zP&(n70%4+~qnp-1n_SkNVvhv6k|O=p0`s}uN|RHM?7$m&He;uSj>HdafO~txn7tGS
zKa0u6@=VARRLFWr5Q>bUqQ#dAE5p2FRtRf*O{b?<*>ev<O(g9&uo0$v)Pntz%>oC^
zhP(1bXp1vm&(6iJPa9^zkQQp?w!;e!<wpYyrz{Bh4PQXaa^e!TI}kce=z~GnSc()j
z<E9EZEb;?A=5uu*@INUQ-akDpy~>A{J6QU>sm+bWRL^+Rq}BwsNf6&AP+QlMX730a
zShzjEcPXt`7)IiHpl;R+DgV<lCE(?qHZ*Hfa*loXX5UqFL8Fp;DAlY9;<F-GpSVwE
z+LU6^J|G0)7O<Xv1srn&h#F|BER$fh9kB;hLdakEPzd}2(W)AZyEFRADd_9Nhve-a
z;e2XQ`mpL!L|-dHOB<S3w2%s&Zn?k=^H*xZ&SxdSoVn*bjkxVrPBdFvOS5h&hZWPp
zblhtrO!h_GuvMQ|*~b)<TY%>vr_q@ZxnwYvk9|oDq^qK~5d5#V%$Wg<-Iw*5D`Pik
zt?ZphVW;rlgV0;?U^o)!j-WtzoP(RtZ!X+SqnndIyIvqy`nKMqhy>pDOd}gMdakVK
z4XnCyp+L4=G(#%{>VOZheuyX42Y%bV3Dejy0dDi|KP;8Di=h^iUk2dY&Ekcks(rP7
zn%aXP>VpO`-oyph-@Php8kemodsxcIi^xo0_N~o>6m@t)dZ$8D`5~*aaq&FlVzbo(
zVhA0M!mm)PL<3xATs;1C`};KSwjhh8_aj6I9yUn@-N@bAU0;=2>K;w*n9^I;C(M`U
z9L$;nPpbLZvOOL8&DS<nRT>v2f^<}yL+&7j*{ZBHL_muowK3>ZIvd%Ear@#?FI5+N
zAzf&mdSFzDqJ90mbHqEI0$poG1K}GdsN<uCJ(kHDKb@Ss{n4QFTuesZmWsK<+_>ug
z28sM>id^BD@eC%ElM6em(Wwq-W38hYvpM<POyCuoix;_9p@U;k17ozp3IzAm_6)8?
zjhgUYoH~Xl`DTUzHuOgNC^zER-a*Y{KIE#Z%OAjtZakmHul(g7loXCU1Sr((-}K()
z6f~4Kj(2{<@ALFsqFE6ObPOQ_p!XSOoP$Pfq~*}rT}mJ?pLD{@3ClbLWFQRte{Ph;
z{u(}gcx_0W{Axn3$6If0xRV(yM5-+%p;pqPu~Z?l7|NIAkR5PEKkLz7mi#`!5D33f
z|JX`#5?O(TmNMSj#<XN(SXCOnC^&P_E2FBIR6UEUe!}cY^gq<Qd61h}4>Mim&nyv5
z?koZ-?91#HcVS#`N^mGZKFaDkpuUnQ@RKK>yMsKHTvh2E*lt4+C8n_8<)0eiM)+HL
z@L6+*=S@e2X<EF3k!4oXzB_6Aa81yD_8b{jx^j`u>$9TA_$JMzBb5DtR$pPK;1}C7
zD+U`~5Ovz=7crI;GA}O2BzO0P;!so(k~#A7j+Z9o{3;Ny|Mi9S<hQ@Gq+h909V6l{
zL}MB0=nP6`iht!rn++SOUF<RKPP9-ocV|YLhB$c$W!U7#xw>TLWdIiI$wbB+E98}_
zq0oVQE=dfYiMfAknsJvSWk8zsz>F42{AN75LDOLD>$uvzM%77a{$A(<F&d#Sf>zMN
zPangZsE}(*NcWaSg#KO6mFy)lk-w+Ps4=bt=%^Lsfu?(QfXSS`LNB*SQC)V?rlquA
zqu52`dcW4ouEmStLtrbMYY}EbpmK3JyPzB>>5`H*pi}aTtKo5c`e~I#ktfSxBf)%$
znV-1@&+TMF*?yS+%MZp{ylVRHPINXr1i7Gg_WIzBaCJ}=msKNSBHA}RmS!$WyknEC
zjM9r~==1ztQ!wt7^O|f$^1?3Ovu>mGt=@~<gYVc;SAK;O<OsxIgZ@3gf380ZR-h5e
zMEo(;n@?Q0-k9BLG`u0b4qahaV`(Jy_f_<@%_KrTyA47@VclGcJq-z`P*g{>t$S^a
zDcY1B60L3EJZ_frZD_<d---1VTzqR0c&F=@Yv~^j;y~%8m?17BtX@-V=J`WHxorkf
zPo2dU&D2N=1xItH!&tD_XW-T?M{BOmcJ7gCEF~wcpxhXTjuZ`l7KmQ?GjLP4%MccG
zsTW%l?d)&W>Sbo({cp;d2$WkGxh^)YF&P%kQ0i&}dyhlzwX$#~EnGrLxmdbiILC3|
z$t+v<no<&6EJ$~wYrCoCJ(&cWOhIH6OcXk&N%6v}iv>z7A~rPc92tlfqoa2?OjNBT
zcGe9OaM`UtGB+bi)Z!L|L~{uNz2F}8(muAVEU=a%^;M|%$X3t;l%v@6bREzhrFqq#
z`1HbcWTDv?&=ZCYW2HQ+4EX#VNt&uv=j(?l4{`U8yM(Aga<}%sQs*}s>hq2}%{MT9
zGV;V7x!l-uepx@()NrjHX=l>;_U%hSq`7p7c>e?C2I4sRLKYGPW?uS@lTSLPsAkh!
zxdxGvAGLBGhSTBEs>7Rs7fA){f`M<K|DMW~F_jp!|46@4{T!74NBg9<Y=-|n8i<P3
zi1;b)2-^On3Pu*!*WAuA^2mkvZ%>i>3!gsc#SqOEwMZEsH#8YM_pLqZY>Er1)s2pm
zd4D<~*agN@q3AOEv4U7&m(d}<e*lv})7K=RhHSB7_K1VgTUV@XhSVnyzS8dN$Bntb
zTMI!mQoEFq%e3-`4r}2LD>}V)??zbtD4RwgKulSPf)`*ZxO+gf01fL+6cn(h{tALE
zgk&a1uf-_*RK^-0j~*#_IZ4T{#U)J*4;MRf58ElgrYV)xqLHdJxz47BV63^186*{!
z>Ri%fi!hFR+VH7khms5Ep-|aV1E%0Svy7U;zco)I_u96jg4_6>zZYy#n()5G8EGLJ
zD})9f3W<8*^f=qaB;f=%;f&)KggQ6-%Ua5v-#;WCW4V=IkLFQ7<ScD-CQ{>rch1jW
ztdtI(cU)WmBQY&3tfm|3{lLDzEjewC{p@!?F%elW4&S`n!MaNaZ$BqD>sE*tot2D@
zloH-O4WO99XH8p^%A!SYH&8rI@2*U^BW4TY+-Z7Y5(`ksxU@vd(-NjbdK}K+r0y8r
zHBX}-KJd~tfNw60BqP9km|^g1jeI<O0RFpafJv`dy8gtC_dnPF8Y$}kN5X*jw~mla
zi}Ukfc^MN02YF-u@t#$>-!u3o%ce}bs_W>qAmrq~nZjix#bzafYr^k!E8^n`$r)Qq
za)74-Yvtwt^4*ny8XXz+9n>pO=~YbZ>60@yHxPr3QA>+U4$s8IPEm;hTa2+ViPQMA
z7xWN<Oo=Z_90C204`Y2KC?tgd08qvL4{iQ`jet8<t!&oW5WhTsRvVg`HR+Ev?Ko>~
z*iB1F^kkO7Hjt|sC?NGb8qzv)QAHe^zu(@|u?aNn($0UcD*b?)m@?3&7#ZPKEm%vW
zhB>s1%~3HhJG|bT7%$+qW{ySY)F}Vnz9jG%y~%?HZ=sORscjXy*hzNZ`Db`1woY`7
z)<6kWoGXGbj2ejwA&x~#3Q1jP%l*aUx%Zz|*UI}o@jucR3u93{h<{8GJ!Dd<C3eFZ
zS%?)UpSfpJCWIiSNeHX3uO6a;5af5)2Mz=om?tUkgG*`{lNK2!!y6_$tk*=tXb7TY
zO-(}<HmjHxMb}2d_<O|r=pHecSB@Z%HLR66>257I9Woy^!4>RUJ?mN(k59`l2G$CZ
zcqJ@yE;6mCZ<rL?f@V0rFkn6xm8GQY`m6JSas*63d+mgPF%Fp`jJQDXz*tNN5ydq0
zxF|)sa*}X#k-FC#EN-O4>j`2vN`_7l7dk?a`B&z_P<Ma57O*wAj(+L|%gOF^@EOZP
z>*EIuq<Yk~G6*lFDnaSzP*PAV%e`awZea0(<J0L)EJwi7Si~KL|M*Q%p}Kaq#}&vL
zQvnX<RrLaMCZK4-?6eT}dCus$I!)94?fB{Gnmnmg9LZDeJcH0wIwa)Vd%;N$#zhaP
z_a*jRjnFpMxt5-R&SEP{_dR+Q%v5Imi=AVjj`YdWmxwfPC=~?S9U%+ynLdyrDF`Iw
zO-i{S`UMuE#;lsVLanL~V@by@48^>{+tED;fwt`5a;Vxs8D*pFF_GpdVH`tOdch1_
zLznui8GAHpTptom<r7VeAzC{=QpPkiXr0WKcxh2@0c<h)?40Hk3aKRFqeJIPfnqc!
zSNu(?0=HA`Fwzwqso5aqR$Vmjzp1343w?WnWOe2@*V@CAFc$A;K6cV9ah>(`V_L6^
zdCMT)Xr0!J^EVcqs=3W)p}$H83)cbg-5RMr=4_;Kl(zI!^EIrcHwYz?yU~o>hGC9_
z>3eytDH1V0(j1<;MyZdNIO2>6azDn8pEJ3wEh_fsyQ7Dv!35r3`-^KOIOvd!lTqU!
z3Hz`|6fjCkftm!Rk(kd%hzGE1+(B*HmXHcaVjK}d97&AEU~n;@XAgtyN_sCSjpYWR
zk&6kZE0vXN0d;rgJ0>nA_vGvb*8tezCJM7z?$nL_`V{|eraBEc(e)Ha42u%mQtoLg
z08dA4?WOm@5BjI>imLf_NYCP|(6CgN*}B}Se+vRc9<>MND*e@isiM5_beKBBCzmH7
zn93h8oLk#$B%ET|0`{BY7abn2!ZCT4Ok$YlWm3;#&~QGz^SiB+u<~^jz+VE#h3&=!
zl{=dGC?IH{W#A2eyD`zSwvMA~9zUyT351Vta-siAYHDqhKtsLF=O`@!wym8&n_Q%2
zqi$oKzGY!8nxSz5ok&8fN$yUI7D<^|#KE|dwo%g4Rl5*@prV8%J_Dg)&p#+cs#a%<
z!e{kI(P+nOB8MLZ++skFMJysMt4>1$5rRz`P)3on#!|Ly=Goel3-fWy3p>U=|5nY!
z<{Hn2^ZSZnyrL{MPnVRiMV}RV$gr=CP&U6#(NvFW!^t2)A?*~PQGOoq<pBBjklym0
z;KDp>VT9+PpcgMCXJpjMf|gj|8>v}<bgkY8ppq6Q1|DsnrfxM6t%@bTQrIIVkMw}x
zAmj%Ob0m6PsN%6GCUqbpPZ0YX$RJ@ViasbUr+Aq<P@IDxrgs1IXnak8<5+(fDD&kC
z^9VKII|ya~bl~Bfg%F_{KQ0Lg_34b*a1jVXVcZ`ZVY=TZlz%v`tLsVNm5A%hFiA&d
z4wkCi5t`D(pr;TRm3MCkK8q&Io68IXQAfkQ99N?H03*{Wn-WeL&IVY#TJ#{e0?d(m
z$xKx#V>-^+!z9<bQo|>1oFi7|tlO7W?Ad1t1$5v|w~d?2Lf%X8kgjx^(#UQ|g^b!B
z3i*v%B`RVbbKTFJ%lV#_w_5?V@*EyCqPlNwcy(A;+pWq;H0o&PT!zJUYAT8??L-#3
zaUZt#=hdI17FT-YfOr&PI3Vp}ssw&=tuoqZpL6oE;9<OVid6505Q`*gjCVLscT}xp
z$u~-_^XRd7Io30oOLyye(*7q0%pH=92Iy!w38P4<!0&;5{!t{x)lo>7(8xw<vp9-z
zRDn*>CQDfJ#y*YTrhcAyndwxA2%tk>b*p#nX5ZQ}?QcY8bT~VsIK8?RQ~>peg@sdN
zbKX+;b-Oy>b<5ZLOpSLJC#EwtizEh@#4+dbbZ^VmMe{If(@4(FH3e$xMaqowB0qKe
z@jijJ6?ny5ODMY<Dh%7FS=0R>_pzyuO*})bG$*ZIXSYq}!vebF`FPwjRjRpk2Jcvv
zM67-CL_LlSGIWtm6HTXQpq|FbO?VcQjyFSci;z;AQ*2b0^9oW62`>5Fw|D=CvTqEo
zt=qOucI@ofwr$(CZ6`a%j&0kvZQHhO`{h*KKljvo=R5EJtTk&^tv*KYtvCF&MgM4@
z(%Upu*lM3F^C-zwI<cAOcyILawyRmr!*t+%6)@;DY^-Z0e%>3@03%s=94$lc!LFZK
ziqzO#w&+s1K0ndfj;uPeE^g@ddEV^p#fPDwwOW1O33}Yo$y{E?5P}<n^(Ex+UgOi2
zLJq!K>0l4A8?M~Ab2rU*c~w7PUTcC5!(vKLhgl^EZ$1dondiNIMr=LpqN%8Srh?6o
z?KD%*%sg|U{=Obhdi2!HEI%VHzRNRktWu_oQ&!)ruixX%wD_*XjYzR_pn5{{MeG~W
zMxLC_dg+M-az26+*6lrt<IT(G0x4luq?GL^BH1}UW|lCoh7+(EPpwfxEjtouy_`(G
zZ)IA&dq&?QVW+a)JoBvSf~^DvF=g*Rzr2uC4ngwq^h+^Xfd4d9HJE(NR5Nw;cC2?3
zZn})RkZnhAk1iW+Wf-dOpVEQ&qQHCyY~aXtp(yzL0k-~x8dy+#R}fWJgTK1p9QwS|
zK3i5+I|z?pi^23mb?sn6(~?NA`ru^Bd&FJEd5By((NSS0sovOp*xLaHAES08p{|nV
zPm|)()GZiEH#Y<#(mdR_TVAxLk>qAn<=ov~7<{}Y&#o4s&NsYzJGl#7o)UKS<h^I4
zsARZK-Mg-tC0O+5y3@UYUEb~CMtg@-YP#&WXuEBoe8Bzh_Ogm0LXqufiIn%ls{7~3
z!;+rC*x?^`NSVp<wtH;w!`rV&`B#$akADd^X*@hU6d-*?3h^ZbR2R*S0|)+A_l6=A
zb2ps1bk`c1<!l;Y%jz9{*K_Zu*0$qn-uxy>m?uDB@*PB>=$*Sd@<kCQmDOhgazXLq
zb`UUUpSZK`Rj~w2*6sTE((HD5h3I1rRF`psm+Gag^D(39DI4IR9D`LehwMU1*qM(*
ziDo**6RRttD(V;zr_7r9B?J_|<kQ=V#Wf#fdI{U(rP52X_G=ngi8v9f)`XZ!UBdSZ
zb6yKzAKo;b%lLORITwAcie2Pv4BK7|wNSv&@3dph&_3Kbh2Em68D}65RuvOv--dw1
zJUu8Ug`l@z1o(d}@$c@UZJvMN$@pEIF@{T{!7|P8Hh0d<#+3rIE$c=eI-Fu<f!%2Z
zBC7L>ZwqL10o9<LN#48QmX3?@Z;j39AC40is?~P(D_ut91>e+-FZFD>WQto$sGh_I
zIzLnfnq7iD#pS5$73_2}a`gIHu_=u0)M0X|qi{#MzTIkf%(u?NS}@0UlV7Tb&P>U~
zOLb!>l=ZAdA^`%GN)rDG=T$&N#f;xtOpat|hFF5n_g~wadXSgbR^8kt3`-jHy^q|@
zuD^`j@cUeTS=_oA@G@4(8yfvV4#MoKLbv9n`yBd$!)%D4c{5$agdQi`9{A{wnIwEO
zFydxfR*w8}Jd6SCpTBFhLAZiyy#>fr`2<rU&><>ny^N)!%-xW9V;D5%gc~>_+iR~A
z9V>HAH^ADIVWT8~z^>sPm)(Hm?SbGffA6~9pa@cd72{WZZr1zd<Q_keM~~e#D80_V
zQ^`6DR&k~J$PoNSC!`y&Rix`F!sD%hdk{8{!QV=hj*?aF${Dy(6K5CcZSALH0(U^m
z@4=ymF2;WoI{Wdjw%uvjcdlF`bP@S;_AJJu=lROJ!p6lmI^<w!=K#CP{6?(4ot~G~
z%jE&Ync*RtSW%ESHfe!ArW-z4;Ha7@XNjXTPR%r5uy+<Avhr%YNjHKD<B>?8W|YS0
z(sUhh9qs%e2Gz8IVP#>bB`dv87vp^~TK}0R#QS8_by3&}Wp_M(>UjQIE{<67eppUZ
z@?OdEFgoKPsNE^(!vlTXr2(X44lK3|SXZW|G^jt+-8Zo@BckAXz3R#jK1u^?KLjG2
zv~r}h*`NcmhZZOeYl|bKEkFdwsTstI($Q-)*e>Ao<qPj+OQmGpSehWu7%LGPp+jbv
z!~Y~^t;=qhT^R;~rri4i`2g)|nD`~P<>rDj+*w~V6*7XzN9DuNEo?hp$nb?$NCl{~
zd&x$jvIyE~9kr&snCgFf{~XSpv!p6C!Wfk6xs5%Qd6woOS|{4WVZAe~-MvX!JA^4g
zuO9jb*~~{TNuYsDmYqM$j%U4Dz;r1^WlZ%EQDkdu(xlq*1W+(hPSGv1r!E19;pWd@
zQ4skcJnhb*B*sN^D*8XKe#QfHis}^{pW_5d`K&3LKD9-N6M?z=+WQ<gQSCsdjD^wi
z2~~7(21(WS+OChx$IAz``x^7jv&=}@DDoCEo4Se^?@M6b{JjmZ6PuVWPn*PqrUqd8
zmyo0#U7NJEdvIJHdoL%NvkD73J<A72z|1KgTNBC1!f;y#q4Aa#uIh(wDkBJa%k8}u
z&(6&+d~SV7l_(@N7U<?E#0Q0{JLHtpxQs~+n!G-*Yw=1=z>jqCa8!92d56c5L;1S8
zow(S>vq84o3kqv(Fr(AnzuQ;sTdUzOtBao6md$(bZMyG7eM8mkT0Yj?Z9e~PxxY$2
zR2lYz2Ax6u7i0gwmizinPXBN)FREzUu8AReJy*A+OC(yevk0vruQJ8{je`sX2+Op%
zXTrDuoL-8co^B~^JoCBsL<_qIR4=@=_yk@)&hofUWn_fag3>}e64stmrpWPdcX#)k
zJN*Kbm(WvzM+rhqNq*fXLYb)+N=x1d_D<@Jl-RKoWFzN|A4nDovlKAwV-wFYfFS3;
zm@zs+UZHSZ0EouI-Jz-eaeB~e{TqfjNT@KTFV6VuKvD`4Fo8d#Iy}Mv1+k@=VDSJ(
zS`fhy^i@C)VhBNJAxz>+UQC(=9Zq!Kt|9ccgMwI7pq1=24}mH9l~^zLP5~eC%M^ZN
zd;7gL!}oq-dR$pA&d&sk7x`SO4`|$7P(4E#!q-KMi0OGg{5qF#4452!%CDsYDt0z7
z8|Tu93B+$taiX2{av{&duZ~R-LS;vQSNy<99cLe!CpL`)&jEeMRUE~&kTZ5r&zl+A
zm_P=hpccb|b+*Qb9pi!bFC`;at4c;yidF;LAaM(Hb*O1?eYAmU%1`pbn<&sJ!bP|D
zb%sGMr1Ni-JfUz5>EY|k=DMNVz_6J>Fb0FSR)WWu&n||e*O0f}hH#U9Go)O)Hgs8D
z*S5Ci%ih(v1R*72|Etuf7%8{X&oW07ugx+t;#lu~$~+{cv5r$;Cjn$hGINO4c@Bw=
zpmh?aZgd|Z)qGB-ES;$yYWJ)p5kZ!|hQdm=H!9UjtP7QmS@NROB3Z@U7-U?iGDvdt
zMafJzwZWzo|63RG?X)be6OQ&dJ+-8S8lv*VF)-{VD3O$5*>|cbbW~cVRk*sfqT18&
zF>SaADutrlXT8{-KRTA}UU|v}tMA?A&Y0Ry-i=lfJf&;BMUiE)nV#RNp8n^r=h01I
z1~C1v58Icc%hBCOWJe(Gsj5DAN%P0rPOP}T>k-`qeGlCP6D;$=@;<JCCduw13(-b`
z{_AE3f6M=V?7&OVOOKk>#a2igr=0XPl;1SGlGFN&tXdmJ))YM@t@s=M5h^F@e`Irv
z7sy=Fp0g3o<rG^0sbvjcq8IIs^%O1I%zR4lV5!GIb}1MN`<hsDA6^1nwM!pp$m3kr
z@oaIy0-KuFcjrvy(r`uQTEDY=+lSIVXuiK>cHw5-T8rNVHgSAaN0V8wcgU073zFZ8
zK)yvi7x2PkIK2mk>ez;xHkSCV5?Ukk>TzCj<hUKG^+3r_H8WK$i`)J;AS`fDC^!43
z)WM<un-=U}rS53+pTXZs747JB5hSl;RW0j+F&+6D>O%2(IEek*C2d;g$rcS>eCYi^
zP#}XKs|t$mPDW3E><f|A;>U^B;|-7F3F8G1h%5f+J;l9lS7?&_*^}W>vkyeQ=pG7^
zTyq-zOrdZ1VBaJLT8WZh8t^?Lz;Y|_5^=Hv%51Sa8gH-=<o5V5+HnAuGr+GX&;xtg
zfE}0=0PSRf`Cfi>1~Cc*t|`ZgY%hR-cdPjHK)k@D97Ddg!LYun*>31={E9Jb&fv3I
zt5{Z!uAT@=AHjSkM&p4|(1?kaOcIDwM{fzlUp&U%1N(?IsUi1h;iq8AUS3|x1Uf*4
zz6iv$7B~echh#XMpjcHBbC|qNehb7ml*U!K<XhK|bD6jdaRJUb9HZnWzTK)F?IJ?>
zIcrQ<^(sb<$UaUdu5%`l!-$l2zj}#FpKH7qCRz6(%!=rP3=fJrjABz?tW!^_sTrJ@
z;7e|ez`J|95s-Y?4Q?BBlHM6S2_O!!WA7&eeP@Bzpbxju(mev!zyuDdQeCuPEFvi{
zW}O|7X!peDD^r6Sb00u7Ry9Ua6450UNS*?qt&DSCmu7Aaj8mBR6iS)j6VoVjCb)m&
z5TIvmM|mHm1aH;-unb|<W@{3oem6;VsH2(g{=vkk<#7=!Ugh32Yq-$ROq+qunJhvP
z;S%dNt7+DyO2+yLmB`~o2jH$AUnzakbD&+}mq-ZFO=A$ATp6Xq_)<`0A>_zBa_4HF
zw9%t7Su*{}*&~|ZeTkY3*`Orvfd$hwD~qvZdD0?+u)(Y5V|7$aeq%+&>xuk@vbLTi
zVBgc)Qz1<k=bLE|_jxb4pF%aX8gc2M{-@jW1xnQJYE6qsbp(^{6Y;d=Tsc;wYu+IF
zy(1OB>b>r7riVgA3}qKnBm3U%_jH=DTs9|f-28$!JMVlHPVgm&)J0eGQu^Tb65-ly
zIH&HTyQtLdb5XL8r+0gFv$=e=66LUbH@DmULx_*9fQaV9k5yM=nvZlL&idpe4!-`m
z=3O<0GG}`*6GRs$DY1+|7x!Yd)?AzLq{mwA)nmK+YW(qXW88ZXrly5cw?Qgynr^<t
zfXSY?5}QoF=g+K#_UIiW5qtjJC2}V!DGpN3p3>p=kus1^oSo!Ju%MWWO%1Bmj`g6W
zPu-!J&)*bwJpR*VFLH4f!797xyYhbtl$z-Hs_?k;G=z=f@O>7VX?_Inyx}w|X&ug=
zOTaWXJ^ULLgln;T>R)@GwI4djKTlvk<!{IK55nF|<#n4MZIjoss#HB~-0lmg(=N;T
zuc}<9K#C^3R^fXgG6ZY;ak*dO%zym9-eHATRpwW~&%pef*&R)$@R={zXZ(fLFNxMs
zFn+54#eo6i8|K`vuPl#1Tp+~g6?c+p!csdy0p^DqGC;z|FNK`AZN|fg=Z{<$0V(WQ
zA}m9E0t?-&xsx^+{<IUw3eZAr*&^$L_w(&}prWW!y+QVn4;~_vFj9OfTdEm_1o<~T
zPP2cT>8Qn$Ajz(s!h#jKbS|NhWF|&Isi0B57;c{}%PNTT4yDXTuPi1dB9db)5LL~z
zOPl+5`}_NI1~3x#{1t41S<F_F7|9;EhxY}CU&BKqme~V+5~kGI$+obQX;NmC!V=&Z
zTg#bDUHtd*5NAoyRCF1cvogRxzuX^!b|wNibSH=)c=%}FTEvP1!a!FCy-Kdgep6i=
z!UfFj_(Y8mgnT_3o)}k9lw5Gy?U@qR5hTu(D-^!X0PKY*+H+K(gjs`}*$^s^HAXTK
zBCblM@FcG-{T}Q!y_@YO?!9vl#43`q;ySJk<yg{^)(0Jz)pz}~krIrnqK1#+bI4R~
z1!S`hnKHTKaDnZx&+scHq8cKKR7n1^sk4@;cWLJC*$QWDwg+^nfyw<k9tQDMzpg9N
z^T2157gCSx>RWW{^&`NGQ&b;r-oOQ&8^`XGjRd{8lt^hzq3yENRDlH<*ENgg^*A@N
z`lexd)Hr7dabkb%cPojCfKO|PZT_EbeZ+XTI;?m)*X><`(yGD}aI<=*G7V@WRt6?*
z%f3#)+*`r<0F<iVZWa&BX4>AOiZPJ|3*18)IXg~E<)?}F_s^QnIgi252N9$1vf3XR
z=hTZu`Q?Lay75NXV3Hes=iiA}8vE-I6Io)ya)%y$B(J-*Jyc%dC>5WW1eDf;o_#Z%
ziZff<(_>6mArE79?y>#|KHLndW!<JY*V4i>isdgL94tB-!Y>=7_^+`JIwn;Hyk@QT
zwb5D2UW8eV(@-PoKHC%hc8z$;_jn&j@7NaIqefmUPrD$^yLZ}S%`g0E{P!i7sE$pA
zW?kqX1aGuMpZ`{hyprE6ls^Ldsvm*<e^rWBhF1S0GyH#O>=WaqZPWSSgRZ}j^D_{X
z__4@8_X5akHwv1JOBOO_+|kpm>B5~+IaLzAx72&G>ok6F^r`mgiw;It88|F(<3?qJ
zRLqw4OP>HD(G(@Mp<6_$#E-}gKDl%)ic0}GB)WPH7{-N?rIglzniSIB+JzK;ZIhB7
zEd4MR;AQ9gGDMxt7J%uxAmnuca+n1S>fr-{egP!#m$6y~Jc%6#Wn{lZEPX<$tsYJ(
zu-yt^cGif2h=awYypw(k%$0evh#~tQj%%HY(0Blg#DpawQKo871a~r~;%RkO^Qx7W
z_|IRVMS;5WDP}ow|Hwo+X5;)3Tp?b1ewglRyO7t9?h}QGzYM11@$XXg`#P;T7lvPa
zs003|31i6crxOB+eB98e6;n}($xk$D)Q~t+gvk!L|5)(m9oC3l@0nkl9?`=k^490Q
z=0$vV-ckt@^12CoI~^P45L~S64xL4Z3Dm+@Ahi7rJdEG2deP{P2NKCnigh4$IZb7I
z<v>-GLZ_W{0=uS$pP=k^Qc)}=6Yk&gUuvm<qQ+z<;T-@k87dML^Qap|ORGUbxSVS5
z?w(IGkeSy3nWY@6byH@3=D1T)gW~W!Me)Js^J}(N(-<DkeM9~~ISjsp<}*r|Zo$ly
zXH(JK<*kx2a`#}o@gZsxE9P9cZwrOrcdvbaI~7DMOTJ}eDZa{LH+I;Kkv6Wu*yr~I
zvJ7=$`>|NDo4a)p*_*ttG1>3_ZT@TM_qhJ}xe*L8|I7K$(%jMUKX-+bYMQp|EJ)tZ
z)p`m!F<Qe>Kvv@E)PK*}{ZXe`E*jLbfz|V<X~KwNl(4JEeYV+&{?s2ZnFs3&%&Hyi
zwt626Jg!mCk@T~z+BZQEopyV@KOI~&d=s|9kfjncY0!`wP3`lRl8)jf@=pjSL-)l{
z-TcLaq9FU0`lO)~&_O(!6_d*@h?QlJC1%OpB0!<R!R#|^mmDc(BYwV$5~?LC%^48|
zm5O18BF}}xktWjreY^KgWMp$7UuVo9Hvxm$Kj27+P+b5uKodjCX#_$mR+=I`)IaOQ
zKDH#3;jnYWh|jKB7&mB_g{ZpM$~Pv|asJq}Zp{jc835i+zy0u#n?+xYIr0ua;!(Lo
ziQ=Yzrg#@0!xP@#t6b|eK_KpS5X2pQjeuUK%*sZSN%zZrG?Vnr)U{#JGM-p4d>Q(K
zy&IiI_i-9Lntw6`l2~3$l>x3ImdL&}N5)~9w>}1mY+d}j0!Sw$fJkS@LCr4k1kD0o
zBwr?+i6=kW(bSvqO=#`%AnJ<4$c+<ii>==BJQ`PKd#wQ5BSBJMm!+h}fwgZ=;a*XL
z(3HIerxW)B@;J7HzZvK(f%!{k^T|oR%riY%Cr3>7a0u%Up3MPbHU$!ZSbfbe07coN
z3<Q~7*?~NmqF<z8^>2Y2H%xV5fSnm?{l1k+_@u?P0b2SNn~tI2drS|bVR5IyqXmL%
zFqVIviehY7;?N?K=t~|~VN$DMD3s0-8WhoUoO-Q*OiqZ)8YK9wNzgNp+Xw)JVhinC
z!+Muz)bA-c5Ow4X1o57{V4c@0X)BAUv0?A(>%J6X&9>kYnZ?@m`8ql4K)-kD<hzjw
z8YFieq$>z(`bl&hCYk6Dxq#Lh4ZSD8!VgOzBu#vFBZ_gs;%{kTB_?GjhvwI3`?@CJ
zEdItQcHXI#_<hwmG8}e=8H@Szkj<8`nJ_8e*Ya$&>)22ksAb~sH-^2k9P#*4e4-xG
z`!cQaiBD;P2IuzOVZTbTYhJ@oQua{siSV7q*$<5s%OPLqX2n|fbma6chqDJa%`10?
zD5~<=52chW0el<nNNk!g*r+ocYN^mP5nz;B_3z;f4wCGxP+Ml#l9S;rIbaI<s8y2}
zr(gl55VUPp<yHa!M#Xl2lZZl&8cXdoK@>j)14T6|{W_82YP^J`K`M7Rxyi*>iY8UV
z#>F*q^6VHsk_<evOreH<d)GVh#G)Qr&dxaRb-mN4rvOCEmWF-=VnZ&E#wZGW69s!%
ze)XAa){T>yR;nypGKBq;Vq`EKI0jMKSMU?Cnu0dtYA@TUQ7{b^(&AX-!1jBSLmne2
z$xFS@m;9ZU-k?E^42mRvwTA!QAKgdk><t;$IfN!lB-!@9#NCCjd3DdSD&QjUbgT|X
zVoQ8)VC>-9)W1x+S~r~lgjWgQuUoW?Xw?Hi_#2!8kn&?{O%SV2@s5j1Q>Jg#6g=%G
zG&48~Meq8)pS0WyF1fKXSmO$rkER?Lg@d8W+}JaY94r$R+GAyze^9ouyv^haFoyfu
zlN-$Ojf<reoQiD&urq5s=PI#}Fzhr<(SmygSudd{=b4#+V=$D;1$yND1+s1%`^<9n
zZ_euJ3(lEspazDD@NzZ9I~BF0gaAns&SF57DaS=3U9#Y2$+Y8lFuRuzfxzf-%_XFZ
z^q{d<Jxc{9oWDc`ko6x#dR<y_m7F`bQecfV+MU50iG1L(^8G##g-g9!zk&~Spt2Cv
z#u<I)CNw+tPNIm90C|NuJnXATa7^c|4)S6Zhbl)=#XhWb1wkkr>cW^NKr_>8AIH7L
zY||SP;$u=(hvXRq?6vq=zc#weUF6G+TkX@UVkV9<6DNnLf}S=l{4kr9fpuuA1)m~-
z99D)pSUo#MMD<<J82@r3iSi+w+!(LkR>6DdQO~kuN%A=?$wC2TnbWqCYJcR#>=QlW
zK*$V~G;<S=b{NR7aTc#&k?2a)GsT6m;qP0R4JB-4rmTsRI90kvWB|)h?ZF6T-ZDq+
z^}!3lB(BIh(!9?XuIcaRZPbW#`Kv%i-3VTe73|^pbM%q65-q1)pU<jCbgE*n<EME~
z;7q<fRJzX6r0s7W-7T6S#Tq^A*5`(~59C2BSI)LS40$&)%JXy53NF6}n@iNyYgm-B
zI9klfzx6IP9YqLvH>CN~v>}B_bm}=;73{C7t`I-WP_4V<F{VCuVKyUu$j2E}l!OPf
z0#@q@q^(i|&dZdO_w{fA$=wF~D68YZ={>J)wk`oNj&)m@n#u)bkS$gvoC}vn{@P{Z
z^I#;f{fUD@scghqyt8q=aM|M6x>fIOe4k3mSoh^VGeEy#do1<2-xMkBAx0IRnHZ)Q
z-2t!OQ@%8ZaTKh70^3N`O3<2%VQza;DM?T^S^6N!)-PK6SOCDGV+Dg}pJN0xxvXi4
z;u+6&Eux2clRyTVF@5{ZUN+G4o|+cY3pX*0sje%2R?@-V+J{f{Udda!@aAm(G(_-J
z7t62gx5f<#Sz31Bv7E?+V1+2Zt)#tBDFG1NBV3knN)Y7I3fH`hx@2h`f}+|jyxU88
zqA%Sn0ZWw_X)~fF?;L9{V@x)lwd%>FO+&gyZ&6n<PX>KQlB)Y?S*11Ey{g!`&Xe?^
zJLx<2N#9OH9=eTvQj7>rnu|YC&J>pyCl;h^erHY*{I=v<VvEBF2Lna)eipx};ML|l
zFSm5?3<m@8{cng9pI9Hb+0W7s`bUuPU-h~AM*l!J>{PY>!It5_rm9yY3&%u&Ar+>j
zJwk;_;~fhBMks3YR7P~_>0+(l(M;x+eSexbFAvF)vb9>i{_UV;<h-9?WNhzr4sRGG
zn{0AxfCV|t&dkh&)p_(GwHX<qG8{Fa$G_+LOn>!*W+jkv+#>F0BY}mq+oPMhtEM{f
zBUoS#^-QuuiIGOA$p{HcQ=|S3L@N6*gjg>*BHf1XvXw+siibHR7Y$A*qar^6{yuD)
ziYG7d@jw$!NPCOk8ZAVYXvwS*dQD8E4GG8MQNz8SM}f8@Q)<P4vpOHBJ#p(4@85*C
zM-ZKa`MVG=8&Nh#i%e)}`^o+J`FRt`bBF7y=(Vjlz<n*#hV05<<;PP)M<^86_Ls=l
z4nfGAjcaW>M<_z?-9Wg9ch{s47IpisxUc~3%(#u$7Vbs3$tPgsCmM)GCrhfw7j<mZ
zSjpc#q~Q8k%XXt(j{Q^Q2p|F$w>(vdXBDf{%EHup*?bT)Eoj=y=YGn$rG2p)&NN?}
zGFD98c``g}wjv-k5-jkVl&8~`M&5X5A`a@g2QZNsBFMMQJxjf&E^&J=mX+F{2k*82
zG&RU!K2#B_<|ETXI~{dU$RIk~rjW4nlFpxx4iIfiyf4rs9S3dsh(Ch82^{y&7VlNS
z)?x>9Jlxwcq(+_`+HtiyTit7yQko*Da0y6zCx7crod&L$Ku4r?e#hrU17!H>Sei4v
zvxe%0HsIHSkc~=~?v$h2s<A$TARbLS=w<%G=TlyE4>jYDy$5>n`CaqJ**qRnFX0cd
z<k+J72AD=`lv<#m-H%N2X;yg(t<FMMV(_(nf)kY#FA?}iw~b(}UO3jU<T6nBm#nLt
z0{$lAZ{l(!N7&>FhIyknV-y=E6dFIKcBUtOR^Nx_MIyk{i82yClT$JEX~>v}$&EKU
zr{L*BPm@IfUTmKnwLz*dSd|gm9KM;vmyB`^0!tKS=JVoq`;i*3`nYXp=fbF?)DgJ6
zdOCbVmo27=MQ+W<3_;QU(sIVZKUJbvw-qzHa!xDzb%kmf>TvNd9Q>#*8`_7b+Src6
zX{~Vgin3O56q%A`C>x0{6zegROnY%CW`>LlRmI917VcB9qpJ&zfKtyUHuI+wg=F>_
zL+<XwfQRydm7=S9JhehKLOQ>8l9a&Qycz+}A+VfhtVZcJ!<sIFbzoCGGRi^2b?GIe
zm`<eo^8fr|A+x_46bRi%4I2l<i^G+FpcBr?xJx4l>hIR+=E(0KU7YZ3C02|d!+syn
zh#I<&Zqmr}P6+(=Ijk?v|5o^*=s1!Rv+>u*t}FL8j>%TRfo#Vy<VfLiJn3`Ru1Lq*
z-I&mR_b2Ko_^vHe?SbSYShKtV2&U4t@l_2vN>=CZjG>bpq|4vGN$YzCuqSK&gJd6K
zkZ6+76gKEOSiP)35&KZJT-%S!@|BRXth|Y>A5IW{m<xS(3gS67=j^^ac+M0IHkPTf
zYDD>0uBbP<@^&S3Q1!8F)rgn9dZywHHUyNPUk_T;-<xb))}NGLKH~-l?6J(2hnAaS
zH0Pu`ZV&A?dz&+zwJ%R08M(ShhSi5Nv0K8}r=T@yHwpV`m!gQYj2<opsjwH%V&F<d
z25Vm$5xcCO`P@QdkL@wmouS5T4wJ)WNcV*FJt(R;xt^g2gy<v58U}fwznOgI1!C5-
zK_6AWa^Of>-%s8R>=u5a*YP=4{wk;IY_fMf1b&-G%MkAP2`uxo$U5~ba<Y7YqXTLG
zP4JJN>!r7l5DvtNBpb?zqFQ}BC$2+7x9E&2FG=>J;MApO#gLf0`vXp!>EirVLE&=u
zgN6pw{yq{H3e#xDzkA0=ub!-w{S1kmKSSbwb&eZ4IQ{1taq)jBv{$;lO?-GB*z04P
z)^mUA|E9Bfh-?zoWL}N$@{u86-{*<>39(vI-EG?j6_6<;Wgb9M+1wMOu;1HlvG;oy
z3v(P$O|r0eYeMXG`+R@hnC<w;qEL!dF(geKD>`Hrf9vPs<u|Goy3G>ivym_wk&Q$k
zQ+<!+;Q-(-B?MEEs|hWM4>%A|rKnl|hC|)9=xe^j!S61zyo0wAi-WAALE8&KrX7hJ
zj;PrdOoHe`L@0t&pYSI#I*1KV1YV}YAc97S+X@2+0m7SR0SCbqBkwJWufIL?)T%;0
z<p664K_xhDw(M2hnHI;3u_YE#`Ix!p<>7f!n8_vE(@EQYL{`)-pVtfxMjLsrT;j|M
zxaBZ75X2|QdQ#z4k+gLqP|E_g=bd0p4SBV;eO%g`0eh%_uepiVTAJX^vqvKoEQj~q
z!5^UwAt>ZWnqA+SN~aYu%|2NSboo5Bf<3>V9emk8DP}o!VpySVqprK3Hpa)!v4zX*
zpGk3rh6xzy1bw4H_h~I!&K~NHlX0GA(H>2@DcO7z%!<h7dh;UV^?n`R;l`#$sUICq
zA53wASH1**U}si)h=On<>fD?eA8jqp0c?_l{cJK(M}S-9iQ!)-OJ%H`LfoT72r%<o
zbnUU$@8m!I<(u?~ya-6<`a<}1(5wxyw8deb15oCetwC)}Iyd_S>4*Y;6lkvSS6G!F
zwg@sTPx2y>$W?EBNGMi})TnjkP;}pi2&6jL*B-F(lb<-m0W9EvhHb+KT!6y-0QGN(
z^pJ#4QX9XMpE0d%k)kmGDQq-<41rpm0c$8?8CnUfxnKeNy8_IkV<yrEjqe=cCHUOk
ziLTkubiVG%u_H(J2g{dBq(b>%ehM)F6iveWCu}MsKS2}p5<L>Tm<=LkA;|g<e<cS`
zby-gSNYUL**wj>XD2*6ff|I>?l{%kSa5nAR@gO?x#P$JkeMWeyJ|#2y_~BxIwdOHu
zQ0+qp_~yA+lxC+RjxqFQ4jJLWf>W>N22vjy1(XjYK=*InrUOqG+NKn$QytngRT6^@
zMUw-FnwPbacxbOQEbItoY3axBhEd!g+01?iMF*OaFMAfuXq0^$^3ezxn(m0A9IPQw
z>`CvoSFSFtlZqyUddSRTi6{l=Q?+wfMHsUdgI(@Phc9FXH0je)CIOjp6egSi9|WR3
zmkRhaM8SGBkgnycGPH|0e+HCwO@t+4MYo*9VM+i9qs%@BzX3r}s0xa?E|hVGV|dnE
z&>u6=KIKc_zB3D_<gkRlh+1OtY|JZcF#c*b6mpdrv(~sz@!~!5NU;EK5lC03S{4Jz
zT)_M3PFj7^m-eYm0fM)*SEUUOb>264VS2ai*G(C%{RYI>%Xm71zC&}X-k~`m<d!Ov
zplbIWK<ck;LfHC=I_e6wcbcL~Hx3ZM4wAT&bI@Ev1;t@Dm2_j+mkz~29Qa+Vf9Z-E
znHLiC&%Ma2TSW_YFjiNPIfJl|93VDD1VBSLV4>y(`TGg-(Sm3pdq2$-p@qn-<;Gp|
zJ_F+qkZWB|Tt;&!1@~kj*%y%)3Mja!7jrJPetpe43Sg_&nSnQ!8Os&OWb5y6J3e=?
z3s?KLPUsh|LYjg3P5_B3c~ZvX$1!Owf?u-c(tHB=L)CowZw`pv%CGKHD!q$Lvn9(f
z#;L$4cjEDIil|kVtV3Se%#{r_S*+bi{?QKhR{UOyEtQ+qv|h{Qb*h3uL(jzQyISTd
zo=OB&h-^_%qnINpme|Rxx^!8P3Et>|)>H|UtU%*Oh*euo8*R-{qSSY{6QveU>d(jk
zkBsUk_)2~}LZWdgwbR_<1C(k3nIZ++B*ik5TqVCx6Hu<ZUXap28HgDkhdXvHC#658
zO!{suSOlKQ%we27Q|q@pY_$SPE3&GO?^Oi4v_$+>Jz$GoeyGblno17sJ@e=HM(y$N
zPriAC!y^O&;;nFM$UEtSJIkwpJ#?0qjuv2Fs3tRhB@fs${BqpKCIq=q7i_PUjfr@Z
zLOWsT#i)&|E{*!{0x7+`lLDqzEzk!W<KiJSy3rg{Ozka~2DZk9VLQ%Ts@Q7!toikp
z#&7m+rdEkZ7g80dEj<@6>;xs*fz+?35uTh?2-&2tMhU!Pp!e=EI_OPzpSnkhnbC*K
z=5PC)Ra|2SynsZ-NH+xvJ7~#aO<RZ(C~D47Uuz!f9Be&z2(n4-tQt`?zP*+5N!_4M
zb0sXLhN)L?L$eE{+6I85?H%H4#IP64EmCJ7rY>0~2}pKJx<bK*?Ro&Pt9>$f-wTHZ
zer$A%6Z}GANn}`<&x|lwC}rZ2+b`fUjHW-ecTzpS)*T@ZI8Xic5)m)|GLViWPzai=
zz}r1B28EhwD@1JyVU<vQ-0MVDg6Wo$7_68iIaha&zX)<J5{1T_yAQ0`1U?&Oc*I!7
zISh)m@NP2==HTO8G--hZDXUvv!-0-()o|%nmuUp&3R*_&^3ZcHN^{r^2~#39>lT$m
zRKC78xpNN@t-1p^(;AM9!4*GgcIYew{_?v{F^Ga~CKb-I%cXaY4!HvP`D70Gib07}
zLQ#%H(RH}+$5<;UuXS&WCJ&2G)c;N6G}*a2_WoHS0{#eU{!u0LFS?MSgWW&00+q@?
zJWdh#AGkPWyc11mXGCyOD@`n+h21FtZznIj%%X7xXltlqbCVf3^KP57-IC6nrnIUw
z`(icK_9*?;dBYrZCcs<ADp9Qnw5_<f_(#Rk#@kCJ+(IrVQ!I#9{vjIy^B@s_B+;Ck
zY)n@Rh(S^!UrBF{7&C|whE_NPERmY?%Ml>{l@Pr0w#0$Uq5<&g4nf5eih)(mqJfPB
z83TntuqPM|3P?a8qdH8=4xP{{Kpfi@MA3IZOMr(pBZIvaRTD}WcWK@i2JF*}DbkrG
zGdXMqAvY4?el8?q582LeU%?Ravvz*fisdqc%`CIgvGL+1M@G0fGfi3KDihC@)+i$p
zqK|fsh`_cOweeI;%wOWJ0<qj$pMl=CSQPBHvY(7S?)g<H3=D@fn$MN&wu`LZhb1tV
z=24hgHPfTHA-Y+AWJvD~JAFM!g=1_>$`wRD{7^hmLzBo2wJY>5irt$BoMwYgA#{;u
z!zJ7ZUSY(gY_C8QD;$jl?oyZma@85CmL=+%-6v|nRmh#dVpi-ws~0v{t7L<!oH-m|
zyWs@Fj|?K%_FfQ^%6p3WMi3e#OMz#&&m^6eV+_NLrgc1Nrb9_!ercP(0*A5_6~YUN
zl-+rjE<L~&Vz;%|wp5?k+YI~7oS5Gqz<Mj6pL#E+w2EQUy{(!GBRJN;zYU+eG)tpD
zoB7TO%T(N+o-Rcl4h!8T-?J6<O*HlPsqFA&U;AHWOcQ+*O>P|zDNx|uL3&=<Bf6l2
zBfV5G)JlmwOSDcwh2TVPS1JRAQ-2o=!$Kui_mo0~mMC_W>qjNH((<W{`3*ly?duZH
zO@VKY>Y->eDx)D^5iOXxRSd0maRn<af^I)8y2+G~E!DqAVr!8iOzb>SU^F^!kX|sH
zZEJ~8rAgV4Ab%((J)PIujB`qOdg>ReHV=6JuB>tyny4Bs7R_2VL(!fE(aD3bM8Y)^
z7V@65+K#40uyOTDY7NE4iq|)vYs0<Hg4zgoCpEj_*wpPV1A2mmq0vQDCSLT1F=BlA
zNR%++F|zEXFz+x&YeK8zN*|H|v&x0HzSc=y(8LrN-xqzyUz%RSU$VUhRlf6K+9&q8
zBNk`Js5<jS3fdJs@uBwqZhu#XSys4%+8W-DIA!I=u45CF;a#0!=hmI1b=7PzeQ&Fp
zsI%)18s4$}-{t+~DC;!%vy^;A_%F-b(LmqyKX>|rs+#{|19~5;W=I!8!tWxOs}?ZD
zhAf+}!t?Q!ADJ6Xz{~DORHo)al)Y^~Ppk}qPEZ>+dWY=kPqA*lP8mm89{x(`h3pH|
zi_Y>JIy^jl74E!6jo^m-jJcaFfdcyNSzP7!q~+!tqipuh1KsEwfS;)Jkuy*6%e;cd
zkv!Q6(vhd|mlEhuw6|ZL4p%s9R$>_dTrXBuCddt6ua-h&J{O7pkSFBBVqxyDp<b9Q
z!EE-8!kfMX(;mYVw1Gctz=(%CCSc9MP%weC?!|!T&Q$HJb@9yT6CiogsY-s*M`0jl
zv_0}`Q;HM`xE77c$;lRfdBjdtfo|2pBP?n;m1Vi#TRK(9It(`+j};+t3)AXy&a{gq
zO(Q5NTK1Q<YQYnyNtCat41eRwL1k;Lwx}_~V4@DVcv=4~XFP$M36@W80K+zTyav0Z
z_Y8Qm%-<?GFV-}Rc86i`Mq81?*-$5B@+k;olL*bjv@6Ba!EUs@On)LJlg${0w8-PT
z#?O$J49o`U5tU;`#afcP!POB;zqkAxB1v4RQhrf(6@5*ZgbX~XkY>28#i;6vPSm$w
zab);9e`8jB&0FrRxli0!g)5kEzZ7J*!lBj)K;)SfF7u-bnw;ZER7#CBykCG$kC<*6
zPo?W8qOeIjS8Svre%Xg~&+LYnYo8Sf?W+~+q}{ZkJkO223*MhLN0z>!7W`b#ew1W5
z^IYpgo$qu*+y0v5B}(z^4iV4NEf*F`R)U!sK?GEpc(`)inp@Z7!Dz1Joa@$BEDMOF
znMOXHDB%jE#2A6B(Y7Owb{32udC_A)kFKw@_Xc<veHS-{n?pJJxhyo}PULz#@tt$`
ztNLYTo)BTcRM*wcHY@uWC}ywNz-f>n2ZNul_5WzUxQ)lPohaxuOkq}L;)vR7I_jWG
z>vUiQEsvgYIy;C49h#hT90Fe<t80RfnoRsb+RSbt;Y`h&HkuL~_FDTJ{RN{Xym*z~
zgZF3XiTgKxlX;~sd19Pe{}sv)IfR2*+9E?qYWI7Zz~ayVe;GtW5%?b05a-Y|p=-_m
zqkN`jQA@g7FiyC$ISzBMpX6`GLwQBP3q6gVOo96T85-6Ru+8LSZ-{FFE(S%sQjm8g
z^nL&z;;|NEf?+n4-AbelEn^VQfiVMx6}lNhvSXP+eYV4!f|hxK`+VZ)0>X#Z8@9SU
zew;xYu_fQqj7{_<2Rc)%D9FWb4D_g1`}(EkLDS}`H~L!P(v#nd@fVFGMCh4CzeGD<
zWmu|jQKHR+47C|N%d+iK=h(RGiK`^|#6!G{Sa&Wb1D5=UJ7oSf#)MeNXa)_%+Uqv~
zg<Ji)NJt!@wMPtWxs4-Q?uKU&@?!$LOi7XBM6t-5P;&4&`>+0Eu~!x(L7+;nv29Sg
z<2Y^yslJd<rw{H<Z&XC<%G4B8E5|)+IZX{H=S*yM9AOrP#V-y#71NtloIGsMQR7_H
z&n)WH7JxXI6x=l#-I=$<uu*~SM*En0Yl>R2>J?W+fs;~dKkK1C$wyLgwBv-7B+iM(
zz>$9wBO=;~B7jHdEWTt?MU*8jvY0*5BDNJO#docr(ifWoC(oR?zs1(XKSrhGFz8p0
zXD#Yq{;dgO3B$Qq_;DNkgYsXVk~Vhw|FAP3RJ)X27eV{Z>fXyikeKU$FNg%7R?q`A
z4j__HP+^fyGSo#t9e(mORa<!S*}mV%ysXazxa5e0v+MHM()E7Ex^xd*7&V5sA#iEk
zD{yphnB(HO_>eN8ln}vxES?8M7wsjraGVQ&r3g_Af8dIiit&wwFlKTukbwfut?;!}
z%$5%x=n^FCW2VpIB2eDgPz`u*M8SXNms(m1dI2P*&nFA6))GOf5{39&FTy9SlD*Kw
zcCR{IPvC0xBo3gYmk6<bB}#FG3Zce>V<m&+iBSN@e4vfoT@ZUxgBQh{v`3HLaGTf!
zcp)^fKhU(tshf9x|52?V|AmWitHjf2B39IFo!7W+1UtBtIE*}B*SV0pi?Sbv(I~(F
zNIISh_lP~Gz4wq%<SaP91Y-(ww&Pl<a7^G_hvO72GWDoj^e&vMiocyae2_j42|zKF
z<v)P;Fn*Pk$OG_vF1_)y4{v7?3PH@~!7qeRC>w#y_@l;(*TAzsf)(q&!!DMvt(4JN
zZ@qW46sKHVzjYYN-lpI;X?{J{a-zK~h8^8pUJ`@NyPemTBX{yXdq!nzPD5TT(HG5&
zot4tr`)DR`W;X{<^f=>^X>{s<VXaIWoqA{={gwk1N5-L21S82NZTy!xn+T19vdIl=
zHi=3)A^$@K)W=kSGCMHUy1{o1&Is_5;e!s1>@?LNSEZ!}Z;@M0fiPPUj+kD_AufVa
zkveF|c7MyMjT$Y?z~Cv^rIY^~74eb8b6?(vjgbUCFMumgFGv>laB5j%%LaOLt?pih
zLOq(v0TmN5s+@q$oG&eNt=TPh)pNa_={iFE`)sS@>=6u?WJt0IGW-E{Vm*%Nzyk*3
znMARli6nkDoL@0Lvwlo9lt5*`=oZilU?e&0YIr|{q8-Z&3rIz6LPJhuD;&cL+}-QA
zVnW$34U1gkoCW+M{0jPbApj%>YYfh6;X?9}*hb7*ALYe)qeoXSV&h6W7~9c_ozdjT
ziRBcoI`F;7(0=^joQ@G!g640yN;BD0YWqVeA<!>iA2b(3vf}8YOWLD`@Ag|$Us!Db
zh8jvoa`yz5qCjP7pkf1r_grJ%6cnx7J>YT}i}OyV!X%Uth8;j(NX~H~b9z&_yq&1u
zMpC>_9cSYV@cd;}HPI~xnIwcdl#G^kcTbf%r@OUPm$P>UWoCd1jqXXIz-zOE)h2Y`
zPQbd0H!W^ctoVy3GqC|E6CifI>kn!LV$0=5NkFJLgybPh0p7$5KQwUS^f%`Q2=+fZ
zr2r?1QCvishbbUdM9*;UXAKI%la6YT*=fgo2tstil`guD2Yib@f>i_5#L1(PN|f}+
z@#TT|*Mv;$QdsnhBVnU@hhwW%c)<w<Eir^b=#;wfz$+}dXx37IQy~)?ic~X=SZw?<
z&fC9+kfFD9xY;v*A=Pc175cMSwhp9p`Y}_75h;$TRzw5^ByPS^f0~s}-pKUeQ!<Tb
zF&&Si)+IOTqtz>ifx?*Igwv~Tpi`ym!>5IZC?pQ{k!KxXaz*c~3Rf$HE@kvxi-v*V
z^9&mH`K3Xlm_Y-`F@PfJq4VS_B1jGB^a;YeHz5L;LfrjE(De;^!%`42iq(M#T?bAe
zqAJafq;DPjt8HfNCTo=#sB2)C`BeQ|a%oO=2Y^=F=Xc2&g22vPnfX(4rYV3(oJ^^=
zNPPzT&5&Pc{x8j9brEzp0`6$2o3Ww@^;r^gu?B!vUv03ZI_bQjhX6`crj@D0{;aW$
z@&KDs$Vv;Bq{u3|(qo@hVs#G^tWja|=4|50wpO8vqP`RPh`{f4Mp@|~13M4roS8iT
z_`rdNJuUeTi85mob}O;-&9(4mDf_&or#W8@?&G@R4S@vK6ShFp%x1vZ1%2QWtZ0NL
zzvDKb_${DK@RxOZ>+hK6D@J_LRc%ME)9qB&A?}W`DiOLL=G%-f=P6diQlPe*Z146(
z(P>z?2twlagcV4CSddL%003LAn3T9QQ)!z|yCQN4W?Spu`aQzp{ONvuRqaac`CJ1n
z0k=uV*h>`6Q8m<UKVrIRQ_bP&{>wYq07nGLKj6|NY=1ms0xtOmC91{@)wTeBzc0`;
zgQ*~@BXo}g`Ddk@1_dv~)o60AEB}UsZ%?xwD^U%i>1{DMN$8;_1<zNXJaoV8{zjFa
z!$bw;s_|&HV^C$Jp^9tObLM4<Yt5SNHV}iZ42%DoXkpHe>4(x02M7T4Pdm;<?xlki
zIZ^(_-~u9trtA6w&VRb2D+#`suYy6BfxbK>)P-}@;C5v~p-4;L=Ngnf>A0eHx2Qg4
zoA~6mTL-WH@^3`5Joz;<xgXAB`p<arUm*wPHs=3?94Pz<jp&fPrmI^FXaO5X_2!D^
z<U?m0#*#ph`uek|;<YfEd!ww1p`|~b*+a>17%ug_#V*brqozM^z+j>ENXj~mrUQd^
zCnqN#PxfyZ3qblh1iG|DYGU?47-8l$Pz5O9ii{z|1?6IL1YUz$O#?70LySj|kL2#L
zh))<(>)L-cLp)K{EI$Kyhha21!D*S5AhU3^=|Qqo2=(Zqt6-o7OIel2$!FnTq|j*C
zQyL00jPX}6GwWIGEOx~*1cR=I3GY&cB=^!62~kICOeG{)X<L#&>;77Vsh(+5Fx=k0
zbk3q<CsTG8;CaU$Z9a7k+)4ty;+z5-s;`^+-9?efxQpykEEjDb88<&Seb6;Wtmz?q
z9ifkVQ@$((BbvNm!A4-L!U8;u%Qup0(qL4SfP}(pGQJBQ@y#*cC^Ykn$%~m?URqNX
zh5qC#0KLg_qDSRm#l@RbZ|V1Zr}udSe-q&HB>`P6e4qXC(>q-%Uq@ITkJCpysKlwp
z2~cf19qc?Mcw7L{fjNfoJ-S;;&@2VSTl2M3=n#*sa{Es1r%dwg40u7WVGMlW8b(`}
zhhV8xd(}=nGP{l(V_}$$oc8vqSK!dw$GS_OIuF7*YV%|pAsM5PI-vFlNu0dmB3lP(
z<QnQ6lKqFxZ3Q0c^ns4%g}A9RkEDMB)jUxI?zckKw_KeGH`KgczFip3mWyTRLu31h
zz2Lb*^mnV~Q%sC<hZZ%;JrT@RbV%{*XKSP+)aHFtda)bB^M1WNA!ewVrFkI@=+4du
z;J;?!|GQN^&i~s}-q^uP-_iR2!>it9L$#0o=QSMY|FIDM=XZZXm`#70$NwC{9I5W%
zI4_3qt@(!JPrwHmWrP{F*{GTh500d)6GymVtv$$3ENQ68Up+svGIZ<xbe<JV%ns{P
zN{}k*A}h=5Ll~6>@6s#bf?!HB*%j}X6zVOsbu`!(VR|3-(7vfF^R~HVd1ov$YRq4M
ze*U|a;+_*j<zO-|?U>kcB%KI9JJvULI$`#XGZO0)oaiSM#3bV9RuFC=QWg{=XbK4o
z4<cf+3XbtPhKd8Vj5|bDr-L*obDJ1pk|E12k3m5WWkfhKj~(DgQK*Y3XHTXs6hqgK
ziS<+f;ll!Os|6LO6A_@Xe7L<FEIx;79J&*R=*vq{Hs(@SvWLAOhM>?(S5@u>t!mez
z$;6`RQQJE>oIvKP>Ii47o)cPrBmnOQVU$qm?#cqODmfp1&AS^i^#}Y2EM-R{iVq2L
zJME?WJE&-A1PyI!1kHRILga=<L<B*?gr7mhXY9l%2@+4-D#wi$^y*}hjlm-Z@I_c7
zFFX!SWW+C#{>zDRYA<Xy6)b=bD$X^@t#etBS?Vs8IH)Onze{?LTz+_!4@~7*9XTP<
z6bpTFvWNyRotlJ*R_()Iqp1u3G%bZVWBlkAiHdIr%yoCT&v@@sTH*Oz@$9In$T}nz
zO|b4ziAnz>26R!{4q<a^B3=`5)Ytt^@$8YJGtq$_yckBK%>1K;7`0}xch(9WiHOWJ
zJi!FH1-4QhSRFVS;$AEWLnpju&<UeDCXb9fLJXA47)zkQSPy>(W#A|V(~vG@7W%oB
znM!fwJfl~=$>k_t+D={UGUazU2MMKM1F=Q8la6@ze4KnZ<7g!LiZ<2Fsfgi~s->r=
zh2{ei_28Z|VAI+|bJJ;BXR*olB)ymk2p}bYg}+cH<7UNDbFsPmJooD%idl9VcLDI6
za$1{t+gdShcE+zu+h*Fou2vEjc-xykqD$KN`gRP~^DN@>&y_8|w=!J^0ysBQL~q_z
z=37+lKZ2JVg+FrsXc&=pu9Ij_+YF;8Qy2&gL^d=&OAV1Lth~n#z`c^Ax+riKSy14N
zK1S#4>6eHJ!7?Yb@7_vWU5nq_)s|(@RGoV0LI3WX1_eqRN`$1utXS^?LwFvkHx*J4
zYehjyJK&Kj8ugpJzP^g*qP;?|v|^K7h8;t}=UjNIH;bN-&!rk^we=7bW3Ynq3%G^E
zJ%V4D!6!NA5EY~IU4#{PR3Ww`n?WN(^H2{Irk*mHu&?P4nUJ`@=2Z~@!IG(9#H9wH
z2>bj+!x{+;h)Y_z*|B2XSJQ}!63%9!HDyO~9u`%8RmOSgq{_d&lLS9ttW<krzn9F-
zUm@gwm_ES9%7HRrI3(F^{KmSei3wGnE5WPFV1;AXh}K;qfiJNpE6x~2ELeG<t$~FX
zyvS|w=}MP!V{yV?n$E<0IL`OgKyv*175L2O<8FDm><bR``l~JO@W(;4&i_yAu+KB6
z30CD<U+`uwg0}eJGon}=TYl^yIlYs|aK<7@jBd@*?P?5b5>NI+5JmHV5Hb=M7SNAU
zB&E|%TOQ4IH%JF3Ry|HOM_T|rSPYmCpVCD~Z#e)4RtGI5n<vI}(-XTJEn5#8DSzE?
z-TJMj`M4)*cZiYVdh`(($e-Mv2$KR<Ikvz368w#sf4fRpY2da%p@lj^nt@Llv{|!r
zrco0)U_90ui27}SP<v~5wk@V24Z%hYPRkVfu`Q4J&Bm6rW)cb-;~A{V5F7sYU37Pq
zkQskTNP{xxakMqp)GZ1NUf$V**R!gjcoqJGe-05arSBimnL<Oh7PhJ(&}g&Z$VmGm
zrN8+@>XfF%;Zy@DH>5L=jNe)Wm|9i2FjXNTzjA^!4@S2KKF`{l)($ta^lhBk?9S8w
z4`b)lC0H9Q>9TFxwr$(hW!tvx>auOywr$%srf2Tv+<fOZ?6p_Mn;G#0Hpw>BI2HU}
zN+J6xIx%4>@o)~75YS$?j>djZeqiWjVG9o5U!Y7kF@y28gH3n&d7fcJm)j<kvLss@
zDSwruuR(|7I)oz3*yjfkNC%idwJV@&FDCe-D2qwh&A6Q0C=m+KmlB9!Ey2ka2q)I0
zvvw>Sz)<^&8FkBVGMtqjf0EJ;|IF!qO(#ENk^EWMyF+^g*j<FffLj97NA`WxH7L6k
zhu7FoShKJS2LMK~{%AYQ!jR*p>6<DGbwrab`IK@FqsmBe5cJVaPcvax0oI7~S6^l8
zSfT6T?yKDjcmTw*2I%oAY0Qhx!=7}RZ>eW?B6!<h<ZtJ%{e6B%g<NwgtGvq!0$)j9
z)wKTpQgJUJVRS|-tH<55)(|Md&wI$Cp={R%kTTpo2>cVhLv2bH8&uFh!AzkUUxlS_
zh!yM<cnqkz91>OcfuBhS&W7FK2O|<*a^L1zr?ad^P$K^Z<E_!y-<wUjd?}rlu8vg>
zUm?sEQ}n{^lK4R(<*yH_MRr$ZEx{SzIjzt)v78*X)}Nqm6+SE#HsO@OWUPfbBKyn|
z#2_1pZ#4vED7?8Epolj;^veI^;qv}2J^C8OGt-9cc4eI{_h8&g=qO3tteCfsaEYzM
z+~8L7LeM=;);|*68t*HYCF%f~F_zS)&R9j}!3Mmix~n^|d|gvDo%fm)!=00cZP9pr
zy!>xWT_)gz(|;N$yr~~XVB10B!TBz-%B)h+@(lK`1tsB~UOnjw!>(?;{8bcPauHA~
z?S&><78VV~E$~?`D&7E0G%eqxcfYu%hYrbLjTAsp35bh-4yXi;WzFKYFMRI$cNtIE
zimnFZ&pb70p8e&OK#PMmzo&m>BKrIq$d1dU2fdS`yQIQ7zb7$wVfw)o21FqVsB3yt
zhfn)w-NeY}aN_~i|FqjiTjE?2^j8CM&F*qYTM#AeuXUfQU5w>~#1KVcJ+`2|yOraY
ze&PjO7ZDs*&s*9^NeUa+LbpP(6TYw(X&w~^;G+ORVXfioc~-ulhZ<Cqgvh+xc*I9q
z`cw#MfWQ-b@S$0Gm&B_n19c(4-SZHZ>Fahzuq>!mfg`3@S(p0DTRFn6-|ayCn@KfL
zD3768AY?>-Z(N!>pRl3`)fy>zNnmt&4FWOjrU$%2ng2^T66DSPwwUpG6=!?x9}MOd
z84xVY6@f+CF>BQI6E=VRo|)kH{`37jjQ%^B`8Xf)doWUdyp6TSZw0>2-;9{?bTxR4
z9^_}!5E7@ArYl$lyg|@9oqtbvVj`;8RsxoXwB7W;5H-OQdodce=hC(7_v$kSx%`I(
z-0drmCa9V2LDsAI(G!3}9()7179m3Mhkm|eWOtuGVHu#;e3jP$KrXOA!my7`RgR34
z2Ya{1O#15xX6#hHPi%4|!r*V}m0#tq+<h3k#N*hhtKb{?w9tnT-RN(el<f-t6B1Q0
zJmT`0N_5P0oY7*IA$(;V`%;p*-`_%8lx4B)iS_VfZ5r;y{a?^5y<Xx;{TK$hJ}g2h
zkIvf1bAi>Hg#w!<wL_$Y)tcG19do47pnjfMqKpW6tRm0{ocd+|%{3llVH+bW+?<hL
z(EtDH)6$jcU<v^M(Dd)>L-C(V_n#uQ`KNgQLz4d0uu(pkK>CsK6~$JzDoFG1JoYr8
z6piqz5^@OP?L0-20mUHb^x#g<bEkZ1-OWkw3drep`39JhnO)@F{(gFD>jfW492r@I
zg+byG6fu<F2&-i9jM#oB3P{qrKD?K#_Js-p4bT+{^zDUyb$APsK{BUL62(x)-N*rl
zw+0RY7n1xEDd}j6lhAP!0+K4JgDD{iEdn`+AXQi|%7U86fV)#~1KITmAdu0Qgd8A&
zP92zfhKOGd7J+O7lo8^8_(PtC;O?3PIx45A6di#qz#)f&;;O*oDM<1){jXp4^<<*!
zGIJdVHkC0@RwrZV#y!1_&^E4L(teXjl4ye=`t;O{cL-SF;@p6TeF%@3H>yX%TRyR9
zEd9&*1VqiOv`6^6gakKqvdBb-1?w$FxOo0<M41WlFvXfur(JU$oIZ;K&wVD%y)PBV
zG@uB?m&&~GU(K4T&;fub@F=;7q@)8dd%p2b;&DmQ9(*ncB))_*XQ-Hw91v0`vIXo9
zbeR-}>;PrCF30^JE1fk8u(#H@8O{E{Dx4u#9~Blz;0z8yq4y6MpMnS8Ixx$!)7+QP
zmBwO?4~fd^C4=iXy_tJ!=ORqj;vNQ}R!HoCs~N}Qxew4#aU9^CZeTFBs<<^A)~CVG
z{vgpf73pPoT3O}jooAO_9DgNt79L-O0sEo-mA@!eq@Vl9TxNr%5#p1PFA9is@TGon
zD8kb0k<2yT_=ZfxjQu19N}>j?OG?~T_jNvBxAXI@JHp`8f`!qyt*zD|SFO}?gRVHM
z;?;T-arW+Sal}^EZCcDB+%><u?#=A`Y5V2)yR2A4Zb{bwOc9>S8}=I!pc9xZkhyok
z${4*Um;f^vW|ezkEcd$c0RN`?YZ^UG^_ISzOE#m%5iD7Wy5^~;30q1fRjkegvYM(j
zi?)$-LSyi;azjb|9Xf++@=$F)opnrzeE9cWp$=u%2BJ{Q7YdRxxx>}Hw9wLqrP?9U
zA5%G`O>#bYSJnI*KM7TblEt=)A!FUsTyoXn>>809VDzXtLTk$T4AGez+3_jZF_q&5
z8l%fFZ*C)iOsjjve+3-)OPO5<(*(Fh2}Wait#gu7cxdkNqI>TgeL@sw8SV8%Zg`9a
zFoo$0%#o04d6ZM#_R&`~Od3o542H`9=<egi7?2N8^0<6j;wy|wE+oD&aIA$mGaqs^
zmks+flD7R!fT3a(pyXo3e3A_1V^oI9RkntbF*r?7msBUJ`Mso-U)s`f+3UtU7vjQ~
zYg}08;u4FAkII<)SSO!`1tlilbafcp_;K}0Rnjx2)Q(B_rGd)<Dpdd0d>zB7832Jg
z!)85h6sgwx_p-9%QV5}bwW>xt2k8oCL$j#N@4{^Ksikr5N@JYHyzt%z0FBJbilLQ_
zPF-^3u4xHdG^V1{oDE_lW9C4;uVipLEd$cCaL4Mp7zCg7o;2&S^_?E(^TJzp_TY6M
zYC0gFbhntVN}=Ts$9llZcgT(new%0pA+})y*|-UEgh_?o>k01<p;O1Gkz?pBe-?J$
z)nsfNF5`4Q4sMi@_$_@tj5j5|`ls`()ZCjF?i*5UYx+Chkkbbr+PM82wPcxUf6n@C
zI{l#K&j-?V4+URwx?%u3k*%=?^kZ+L6BzhDoF+U89&4POXwOT{N)vrIFVnUsTv~bK
zJzs+|cXWyuvA3G-rrA|5Aa$Qol+H7A?WQ{cw_5o#?d?M_z!TT6GiyOMwlinlF3!Pe
zQx7`sqj~D)6X}+qt@$gi?ks9dWP$YIirtx_98c;@7z~Do@RHiG*HX(L*PNs1wls+*
z$S4X>npJv8ILxuNS|;3DjZL!Mc(JuLndf5!W;jAo%QkyhI)O?v2685W1Z`2C!>i4L
z5nsl>zSNZXn}IZEL0o#uCe<8&=Q=kI8UR)~MnOV%68C>DNn1kH@~YZrWD5iAr;#YB
zJF)R>f2`qU=u|&8ueh?u&A`~P*5qY<Tli3-Cv;*W9!m<{?pkyJF)qDW4Acdy)8C)h
zW5TDSxK*1S!xNBY%qkEwV?p~z=x5dlmC(8WvL~@z>VE`<)v5!R<w|AK|3yxtBUYGg
zwr&qxd3IY!2+@y4$E?ycYr@J-?Z}3$BR)8$QVoVcBlda2Q=gTK84wX3vuPGH0WWT!
zZie3NTB)j1X1DcxeM38Qvsv}<V{#z+>@k+q3QrHhXm#3+rkp-^vtPf(mr(EC+?=oz
z!0sAj<qPlLqMssOi;pZw0JsSHcM;CK<t&&j4N+ebfBfw8ZX0~rW9MQWv^0Fo@~9l}
z2C-0Ms@8s$^I-ImGY_O+FKeeJKV%H{d#sv(Yec&RJ&;MOoBk+P3a$dtCd;%7i3#5)
zG^Jbd%qe>zO(7kUR$i1&S0MXaTFLPXja@{4eDRNCi^`<cyNhwkL~Jj7!gDfh{)07v
zrzDiA((pGuW28#~%<<w%WF<<-L_JE$$f{$jjd>IPK;lZEUA*8J13!XPm6X4T)eIZG
zwvdU%s<uA*xR26$=j%rQz{WGeKjVkk8TdKRQ=u5qtLR|7qS^9WMY?~_BLGxD_V$>G
zVmQ_30qc2_zcA<9Ztj#Jr)T8qi}@sM*N`iR8{V}$eFu2UWJ@o^`$*2aA$ozlKe_qi
zX?XU-PnY~&mP&2s9!&HY=y*xaB3|`O4X@BKduFWQwD{n{K%a8Aw&&!zfH=pO=gEG~
z0)E5Y=n<rnf;mT2sWgaRTKmzl{#eCeDzkW2O60l`v+HkBg(wp0FaBQTgPNA2nHYs;
zQ5ekELCfw!qYJ6N*F(K7HC=vU){dQCrq5%X6z3ptZ}M(HuF30-uCL9}G3e&y|D>Cn
zA?yfO{M)Qi{VO}6`cEBWZ*N5FZf)Rf@*hfO`rmSGlMU%N^9KcDnyf%J0jYQle%(Q-
zb#XGf_I$~rmc8U~A2=~hfkfKhlf{w$^BO3RVmwh<kJ+gdQ<9+WbFimQ!~b(OT)ANY
z@?a_dJou<d;^k%BBxN?ro#SB0rrA@rb@?XYl~`)$n5Da?hln3_T^!5tq2#ErN}tUm
ziR8%4SpUdu!kjTbp}Q4cLft_^S&Uez1d$d(4^Z+5!9u^Z2Et{L>}Xe0a^xqg2$P(&
z5MWT8kvNDWKX^tc!wIRBWNO3%>C-}DoaKZ#pjrV%?5vaox($AaFaFd?Adn3Ss;aUz
zb@$i(+h=*Sp#h+d!n7+qC~*|C4t?mfkL`fRtTdK6Tkan$L!YL;(eO+HPyF04?u}!8
z6MHs-QQ`|SI>Bi`?B4%X)J*N6>&OM4=pWc*xBK(BySP_rkV}(B0HO|Z>^BfuuxLas
z;$G%93bW^Z|6;rKUkwMTWAZ(RY{Q&95`P{fx19=7)-U8j@$nQR{YEM6-u7=Mew`Q!
z`rePb5N3MpfxU<l6rCw2tPww9R~{e!B8rH7fHOlLDBn@UEVw44sh=Lul6#u5U|<Oi
z@PkKOAGjBP%6aKVkE-28-1(rc$Q|MUb22SI^u%XIQJw&O4$4SwFfHGfdyAV}rv^Ya
zM(5A!=4<LN2WcLz=EgQiIm>9AS!@ZfpIkw-w=Pt{W&vo<(q7VAbQBsQewwZmQ_J7m
z8)@%><rl%iLpsmx;0(A}Y7E$ALN+=2=u$`qdR6;piriBbIIW#a!Sv8JlpY?7+Dq^3
z@|HP9Dlr!Muw!(Oj^p#6rNvf-4@n-G=9xi6#>sQE*j;J<g(7j9&+ks@O|R)jhC9q=
zE$y+#K)Hh|V?&A9Z_(CBepES#Rs+23A>ak~P~j31whIhYly6cyzgt~8Z#lECeyaGr
z7%s?fNfDBaBcKwP`82%Ngy)meT)S%G?5qO%J<Z$Ns8jH|3Fy!gH$ekza26CNST9Tf
zNS7&Eq1bPGl+q{q8ns^k=!TU~eW5>iB^ZGUNl$f5xbkjUglk=a8nS^1*+Snu@ba-*
z)4J*uw7Escr0Cz-XTDsk(-V4cm77wakk$08M)&xamNu=^N*cw<F9g)r5)4|$a{I7Z
zvejsv<(romm@^@^m!(|R`BWMgdCyAY+M*tdx)E)#D9VgA7x3Irs#s^9dY!dPubLRY
z^(DWd^vLHgahh3d&eE;AyXn+)e+%`C;5`TV7+j1j$hYB6vMjmkt#+8EzweZVdwJ$)
z3vIM$k;N2Q+mCbz*Nhepg#1L-R;7#g^9`a6CncCjYb34-c*y>Fdfw+USZ%eYk$XAY
zc-t6KuV-y8-*#BCIGA6XX6xX@?%U^k=Cqj$VP`DP_s&VUN6ip0t}6rDkd*wl@PJ;i
z9xK&x)g3XfPpj7jeB#rukhM@W=cl4*R9zHCZNL~)i?hgN6a@`n*%Tz)d}Kt0(9b~l
zMat?aPp75XEb}<4mZ<^*{~#Djroi#S5uh>nOR0u6p;u)}QFa6rGug<hjHW&@l3-jm
zPx-#;l`0r8u7n3+R3te_jcQ_r$t3?J=8r)-gFR8$O$ZjMAu|`uW#ocG((=wGA`Lz-
zg<sg&Gnj#{SF(Oq6^5B0ZSZ@os5Z3E{bLqSl!s((8f1Fpr1kz0hVNHSN{%nBAhr^#
zBug|@XQSO`ExV12-guZ(Vl|Lm_oJaZM2U|OzGP?Gv22l>-QEp42L78J;^4N}!OLy+
zTDLr+h7ASh7zts>CV(L4W6)jaFG=U!3>QT4eOQY@I%a=}EpWB%9;W-a67aQsgPS98
zVEg*9!IwOufztO=_81M4Z2yZa>jD&!G1*iNnh(aH1|29Luv>fFWj1-C5s`9N<ep)z
zt2}m$*FllmNryhN;kw>(gLEVW?0POoQA8n3E+m^PJI(=IE3_U{%o129p0&)EFayQ(
zW=Frldl&a4i$E6AB+(rPO8I^3d;|5j^EV8ulZd7D{JQ2$*3YkE=hv*}=lVSI){Z2q
znFkP5A91+I-3WD6t<%gUj+O^dUfdqY<T%Y3I8c>#e-Xz2%TVKhF%FR<>$M|g%h#Es
z77ZZG0}3;bH&{s6TDhgJGs9%?PM>6w!uySBQi7J4A>iOSyMhc@aT+vC%#!ccrA{j_
zR=3rn$ftQBiX>9FtcW@sK*3T^egvL}mMm*(k6SNWYLyIALk4b7UA;45s>iO!XYxqW
zje$HV@EzGwm3-G!7tLdY;>{L=8E$3UP49)q**@P^6aY*bk}YhXQP)-?sc1cWXhW@q
zUSvpRxVfy9Q>0(b=fFHv?T@NN5%(GS=_$w%p}k1uDKcnGP5#J${Xr!h;A=sAB8Z__
zbzm(-%Ja8=Dvv0Mv1bL3WEG)RW4CN_0D>rCZ6wghH)ZC+!Syrt!A3QnK^G3pi$Vot
zX3Y5;-Q?<VP#*=ySK!Vaa-V!kE%;!p$!h#(e!DpV5FM{I8Xq11Je0lkkXj0UTUcAj
zZjieXf59{pxe1k}8jW-w73B#6{y_>!Fo3lC7d33Q-tRkhgz`v~QkHi*gELe5_TLPq
zrWO?_D&;5~w@wAMZ6hTq)1<NNabPIF;NzpQY7LB9k3`9)%+uq02VU5ylt!KbM-aC1
z(sFl&)SD(lLTsARYE+YwZB!H2hpeVp^=846m~alQnDDx^Q=UysBxFS7ByvzuH)$D}
zi@Y=yML>THcp}CS2fhN)>IEg5eC18m6J62~oG*yMaVX&r(6<@sS3=f<Thp^DhB|`G
z>j7Ip7xi{U#W-&?cmr4(&ERQF9A*t3=2^|y*RruKk#e>>|C_6-P5~tWz6)#N9AD5Q
z-P+c`tT=;1XxEL}We4_%!tEM|PVAw6bM}XEV8#;eh|O+Qt2adzvBT^k@){1`aVz63
zX`~99@ojfRW^YR-5H!@c>znxi?d+oq)wOzUOT>w&d<rbl<CbdRhkH*`x&d;!fzd}t
z#GGtF^;hHL6spL?Ge3&S$rhH>wz=1+Cq%`>Qmzs-0>wxCZf{81<NR|9xw5W!PJXYD
z&bq433T&*FwspUi-e&mdVIbtIc%cw1agDuq>n&sN*wHC#nv4F6qV|Dnckq`0w>=44
z0s;*pUElQkpi#I4i;yUvNGI=GfK$DcPePM7AaegiYS}~QHc()KXjmAIr$cJ|3^66e
zG8#2ZpxGWv_eEhR2a_gr;bcscp;t_n=@Ewur?P{(#7?aqr*#2^FMwc(hZ*Nb+Ub8j
zu_zc=2WXCNUY2g<I9wWfU{LZLaRLpJiZjFz<N_7MJ6P@zfU;d{hzc*7Q&eHU>>X(v
zLd>`PG%xQYM7U_j7FhwBUA%Val^eH8h#p>Z_m>b#nPmZ=`!qj;nhR_x9TVZ#wvI-a
zVNu$h1*nP(SMUg(<uG#2!a}?To+%=l+VdfKtPV38O%O5KzlWePcLyaHTXbYmkj$0R
zob>iEtC(tyz|FRoL@6m3{FSyPf6emBtjZ!}QC^3SJ8ygZ3=W`iUFbjlz#dMF@J3F4
zBH^$y=F`)Ir!Hg^{VZ{anbT8R8|fEjTQjbaTfrghs98@^YoLZY%Je7$J}~qbMtgIw
z?|%Ld;<hr|)${j1hvIrV007;8s$nO414koQPCXktW0U_nH(&F9yKRg#@JIC;3ftFO
zFr)<c4dKgfb@g~T+Is5AXS>aM%(|8%K%a?8sNl23UjJOXnYxiy2ZOAQL~O?|3g4T%
zxt@BtiV4x{#cxyGxqY^DN^e6m756B6NbYznQt#r$2p3dl^Z?`IJ~+sX|H_nmIX(n@
z9eDkgs7b^Y+F!j3CgE_yy`z$Y9I0a|{072h{7v;g53*5Y&jUtk2fj#B5IVS%HpUK6
zWvtV(LwfMj6(Ku8b?A;40R&~)UxOQ)bEU{<j*=5L>>PR^Qyyj0iAt2_#$nz9is~~+
zr@Q~ihYXU%;OhpGxx)o#`h&mI`+1&A&Ocn&7v(L$Ru?qa`l)E{#js6o3b8n1zybT>
z=Jv10FcS{}0Yq-`QM}W8rY5hL6OLT280b*GWT_#nMU-sEA8aVJdI8c!7`YyZ(*N}+
z^-ym&!Dtt2laPV=fznaiim23w1WV$_JRUIQ7;LGzMn6fH1&bXb-o^VN=TDlP2%vc=
z2TD5Xooc{#7KuP&|8L{DSji#@zt}&%Wqr_CGkqC+AOJ}ZWTW?5)1_ttu#-$FpadOd
z;a(&?+cR$z7+}19x^g3Y^iwDSx+UP`7GnKZrNvo4oPSKh@EIryMO6Jc9L|J$%x4(y
z58}N4J*KOZBrbSFn2k&sq>N!y|AK_Ggb;k4cY(9i8LB->hydN_-TuO)vos(e+b8jc
zwc|JUNf+Da4k#%FfCkJO@Fe^A=barO1a8X-2SDWu?(7FhXM^yj^VO^XGy#OrY^kco
zc*}@HuxPfwijO5+g#^GqYnd##se~Jy&z|#N0L~N(z=YWA1%Q|Sh``^96!1?lGT>2z
zEtV$o7qb#1*du>jq+B>6=yBkLz7~H50&2qx0CRHZgLm~hTZ!*{i-4S82_3Gc{wsYe
zKWIt(w&l~8)=zO`pmrJTIX(bk6#plKXsa0Vl3z-50=eYS<Mw<zpc85X);yWK`9DB_
z3<LSx`xug-Gy(v1&I2&;9^9-Br6?RD&Vm%)0zXR`*R+o3`Ih_tmM85X<}z9H0pFNl
zIgZ6-!pTIS+Kvg42oT0eX=+|W_X70-j{TgEto7n&nP*!5;RIMQZDavmK6XMslU;S-
zM`qY;C+yUJH-3C~*@6l$#zzm`e$T$&e%^{a{pa%S<ji4yZuR2)ej)}PoVx4GH0`gy
ze}9)g*SucgYE%Nt;1e^R6r{(R3;M)(jymQDPr`Tbem`FQ@_7RGAY5vM_VAS&zgyJR
zldXWD(|kJN9l0+shVT-vw;Qu1N7qQ%*+F_{Wa>5=3!_#$pMf1GOAZMvu%;@VM55_*
zSYO~IgyLSb%={!(tfy%zv50|jOa2w9@d}u8>15{GMxD2wZTFc#&=aH7Gqnd^uirE&
zJ{Hs|I+bmf`4p(fV3~KQ@@J$i+Vm-2s$y?iHm=vK!UMpT0iGR(oNtzK1_&I?5$e}z
zegQh~*hAzZGrt9ot?BukA|ne#uSVS85bDwqn=LhdsKGnqZY$C|^c`i;0|Nsf)-}k*
zj&1G$E+RrZw|Y3cuU!J>aXNPO6fV^moY`Dsjqbb%35#i41QuenOG($#V72He0zCq8
z^q|UM8<U?n1@-Ns4rj=qhB!o*p%%+yE2ICUwCxg1!!sHNG=sxU!vj{|wv8Ww_0vZ_
z0R17twI6Id>#>ZlxRg!T?r?`yF5sIIP(&o7POL*FBl;Rf9H8zC!jVpc>jA*%P6NtC
zy*o(>X%iTNZ2(V8^WFnu8peV7dfQl$Fi|g8EvJ~#&!Z^4qJM}iJGJ*H8`y|73l!VO
zDE@6{gbmPPL#l;+bn38<%>lQ<1!Je0h`$E#ZYT$^WlO70>>Th18!f(0Rm?)VLb2un
zXT?yN6fB0F{9MLtQ>|m50n71|_?HGe+@_3PTINBpch)+9;vx_|H(5r|jJyC!85=@{
z&KZZgjuza8Sp)qGgOFM$vLFR6-vuptjsc;6LP>A|Q<Z2>EQ=DoNgq*9!u-aTcCzn@
zw}>$g#^Mu~|GYiR0SB8??pjcsM@4}adf3T(muB52T-dd2Y}&1V2G80(Y5D}n%iiQ3
zY;01W&`+8LPQz))rf3Eh)@gVX9=;7ZK-%pF67c7CKEwWihHQQ>B?FNhMo9AF??hKU
zcRcG=;lot2$eqkLk23}zdrI2;2m^Z}Wp1geqrNR|&P)-ky+Ddol);I1XnDj_JP~bn
z-Z(PA%{u_Dg|#PK7~Nr?=(+|7GYiKy0FoI_NJ4>t!>_Bzmwf4khhsObtnmJ<kR1U9
zz~Le@Lrgymf!~<fAb@H6)~)^1)-?%m^pMG!2O%k2DY{1CibwMr!J&Q8w175P1g|Bo
zfk%U(<MBdRy{N-wxT-jyeK-ga;r&d!C{RV|+>J*xTl752rA8NdNvE|uG?3s0S`fp!
z*a5at8JS=VNQLyAEs%|*!d(otNM5og4>JMn9vVoeR0`*Kjldd>IQbX`om0Bbd2A$)
zqa*@Y^|M7d{#BVmgcDG;^8D-kk&J=U=|xo~IhT#DdwgEQVi0FAO(Z_vUij1c6F7nH
z7kJ?o;Cmx$kT3yEJ#TI{YGS4RkA4qic|8Ft9hCRgVBh?~6KcCPObNImhv=#b5-qpr
ze4>vtr=P5GR>B45Ymh)m$UaUisC(=Icv<jlc9j;|Id&Tudd!~~-bxg$p@QvYG#$lj
zJxu78FSO=fm3-~bbd1rYPIs3*-Gr2XNb!eY846U1gD8_oZ+e?)s>(cNrK~DfDQ^V2
zjD&F?7GhITP+E;LhQ&$8&ta_}N%EwECez$SGB|)KwnUNeQgbEUB?}XH$b1WK9*Ser
zk@|>yxd1J0?%h`+d#ibrxEZZcR7oK^R-x;7dyEG#=s%3Qoyr+YzBLv~pXa5LR#Ks8
zN4zCjZ~hjFxNh#=4?VAkVSZ0LzmMOeVDIKv;htrGAz8LbNYUM&xc4-%6bwaa{vdJ4
zk^3OGy*_|ce*<UD+P<wK<B=(Ufu1J*X&CXg+<D7U?YiLCZAp2qn7*@=LQiqTq7O@$
ztXTd_mP3dRZ+k;S1HB(=+Za*?=#wmzEYMknKpI-zjsU9hYZ*cz+bd2AwPor+Nu_6h
zK==1k_NjM0O6<T6aG&>5@%<YewNxu)nNn`Z+e6BV-_ZxE>5Ox^^vU%T@lx5dvr)?j
z%I0?FnbLrqr@+;HB6brt99#BdX;ci)Y6c`&SK(Dwa@|rfyYiQ_CB;K8z(6_|HMKiZ
z+^<lT-ba#ab)v}D!A2XX*<Gn+=Rg%_U?NKWRR&jGPPSLfK}Ky0Jb9F*o8!<Dwd7BR
zVw%&w<VC*ZDv!&!X7^}FvgEkqC*AD$gSM`&kn}>BEaY{2%AC@nhB%^)5wTtaPBOB-
zMHwwjrHP`8#h(>TBq&50aJzczMdlmCv?w5Z$tpUSDNY=Rev*;=NscEJaVtPL-c;iz
zW1MP~umnkjXbwUBbb+WiS{a0BQb-|gWPzA>kbGL9+GtI5ulV|AsXENZH7+-4cCC-d
z^Uxewb}i3D+oQ)&TfvRI8e-~s=!Qf!Z}UhqH|+au5F`boNf*N(8cF>pFER!oDo~`l
zu>${m>{l5#j8*pYnV>)K$WxXbuj7_z+hR%Gh9ncYc3aLQjcrzPO8QvaLW}V+ePft{
z3AVNIY%XjTi>s~8N}XCQ0pAnq=X#M1dinQbr2Pkxd1#}_GP_2C=*)Vxy>9>7XLUZ7
zJJSl@p1V5J7B;ljGoU+i0>R@lx@TD>+1EdD8(#-(ubIboR+9@0V@pX-Il6sf(?3_O
zx#$OssvzZ0;oLt8!#g8LyZe`T|2hwHGF-YNtEXA0v8bJ?(p*<}Ix^RC5JwGmY>g!|
zXOohXP1)U~Hlv#I>ygJ~T21mF<eLi`>As~bV?EyQC60J+k<GH72=^A(Hj~aG)I2zc
z^VmCR|J+nRi@Uq~hYeV}DlhrF!mMS0mLuXwM|I4~b(XzfIYW8P&ghat4#f5kLPeQP
z33Jm7HG@*%tso9E6gkPygw|njQo(giwbu!zD{vyMv(Kcv1M)$z51i)EAhQ%3Asi{0
zJa1yKeP93m+#KNQ5%Bt)$+m8(U)w}y9gQ0CRo1y;WB${kwX&g6XO_xhyV+1}LF8ft
zWE!Nx2BD}Ci?6fO`d0@nrhgIf1H3$grL4g#+<dO^N~Y8jW1MTD{*Q6!IYM`ca7R1g
z$HH(`#9`esjs0z`QD(P6gIWt*JZ`*R`4L3V5#6Nvc0<qiA7EYDvC(I5+pOu)c{`Iw
zm;U71xt3WC3&o%(%w*Hm9edxGZ&S$%=*bejh7hW2i$wvS4AL}u#LScX+Q7!f8h7$#
zixt${j>@4<Q4KB!0!@E06?Hsn>k?VA`mKjHEk1#!`Wrm=er>@&9vaY{Wd(oBb*D!U
zy!$IN;dkp{8U?xaz%ETI^yRz!bkJUt;C7kAKjjNZKdYaObFD4!W!>5h;jBIX$aD2u
z^8bQZC5iE#vRnk{jFcw+vC)clGiN+899*<zAUhw{*^EjLPI*02v&<deE=I*NPu~}%
zZIaQZUKPm<=?_HHDrBqsZi`cUpmxCeTtffWz?rIgcXk{K-O48n%dFHHM6*q8IdT-1
z&T!<O!rf`5AH`osn=LTJ>N8qH$Q1u-edF+rzS+WlusQfKe1Rs3HlhhlHSCY4fMdPG
zon<+*7xSDCwtas?O9cJh3@bOs+b3mZM1?cwXaSsF+fg&~%5IroU~Q(myF<ebwH&2x
z+ZuJ|!V8FKsq6Vc#i<IEc9Ih5>28rLL8yKzqh$A%piHwg$&2<oe|&NxL{+Gd=gOnW
zd!YN15q!6UNpQ@n1eZE99(^VB1fCgtQ0R=Jd>C4J<j@&OT@J$?iqiJwTqr0ZTPh%U
zv(+S{ShLbL75mGUk-9LRzn4<4=s2mtk0CyoFYM&@d|>~cm_XKb)xYfWr7tZgFQ@l4
zMeDQ#<G1hQc<IBX0hRsgCFFi?3%r{JX`r7jjC1mb3;O-fPtcmRNs|Vh<UL^*3O~e5
zhu47m;9NQ?w1)T4!d||l%<qHjlt(44t#Qex;eE+g63TI$d_6#ig*V-NFe&Op808SL
z8q1@zHCBmyW6mq+!TzetvByCNXj3^RP)FL(Xs+hM5G=Fd!ne@(md_WoFMtSyMe~z>
zO^eCYY7G}W)TARVb-Ddt`RN^%-kH&m<1eGX;-TmfKUUOd-z;|1Lf$3tjPz5PMPhdh
zceFYY+yxaNXAmV{$4r%8%_+?fI}cm(X_B~64>t{-zc&qPTe>S!ACnsySW_3Na{GAN
z?7b3+ue7Z-%zxILYjQ11Hg}9WGG$(+%{nr@Um}hhL)_r4JMP`iMotH|lWa%Kl<T?K
zj!xmxdAdE1f^B5qHx5QnT<RH{IZBPRw`Q|0TSCuf7J42zy#Sm&Ly)54&=vydxp5NT
zG=Ltv$3b;$#xYB-CETE-y%6qgI5z8g_42=ZHs?1mV`R9z71PoI{G^c&a%{V>5v0Ab
zgyB%lyrTJAxD6rk@gj`eX6uVA@H@eZ;;&f4<AE(5NCjJ-Mdv1AW$7#y#z}gXQafg&
zUNjV~S0gd;cQgCA7Z+-8PcODTY9xY4S_a7aMw8QFnYM?~ML&{*UxJ~kw7lU#A23?u
zR%&aOWOZaM)UAwMbFHu&JAdODZmaQ5x~<dVkRO))+zxA(MZUGR=RoP+YWE$Wv2C&0
zzgV{JBKeOJI?HX}yTjihLEVT?ZqJcliF-(TMShl`*DlKj8AIs%&~^t~l^)rV!tnAN
z%Z;>M&;B4@5OE&q-O4lFR*byrfaCc+Gd_Upg+<q5wGL-ilJ5{WzWpl~I52ty(({BZ
z^XTvnfdB+;`*Q(y6*8n7*f&a#Ty=6#nU5XJCN4X$`{Lz%pYaD|L65A5<Kx>u!|;^P
zua?Uzj-iJWOK<yXKdSaVWWI=M=fH+bbpibFp;lvlE&r{@1cT*adK_eB6siH$5T==E
zcNCj#_xqu@4XA<8H=AAIM*IejN;GNv1hXBTL1b%#)8Tx`$)-~A5g3-=`3++!E)kn&
z|KBstW0A1e#tFJ)0RJf5ntHj3<d15suRlW}*0z|aVnzL~d><Mxybk?RWh8(r7Y+m*
zV@O0mnjLvxcTFHYkSRTD=yu=6vhk*wf$6R)W2^~k-E1M&?yU>cehXYOb)T!HmJx}3
z2^Rgnb6v=o+q>n}tBY%E=w|7~%;lq1b^h*(+kFmwOYV-MEb{Jp#s<7NZT7z6gM{UV
z8`g}nF3=Bdel5kXIhUxWC!*A3DKU57tH~j)0SiQ$yrMpCnji3)pZRL9)v)xATC%op
zhyUMX{fkXo4wB`Q;#2q;A(xh7SF@vGH3iWcs(3JSAJpG%fcmg7&rh&%ex9XhY~z)E
zLf|uN2HQ{n`-hZneJsgD3Z&En?yz*JX0@eq+Gx=-!6L2-q-2L672X%v*i_XpAK_b#
z=5_ULg6HFjF{VrrGnN=iBw#JIsxYl6!9vNSsS#J8<H)qF@YKE#CL>IK(JwCUHA%5d
zc>(EGdGQ>h+|~95(`S@+U!6r;z2&E%(n9t(0+`xsy&wY&?tASOW?k<9Ezs)WAE>)h
zDk9#r!Ql}TO5Ui!J}n@;vBGB@jcD8B_%f~8a-gj=;hFtw&MTaqbm7^3FUT+CA?|Qs
zZ+2>K(HTO`Q!r-;Kq~_0I46k}-Vy^2#PyNiUvfmcI;WrS@(S#1I!km9;TC4!a=8~s
zIgU3moho1VHK}TmY>V1{DcyfH%Uzs2-rabOh!=e@r7mWJ?LpJwAu9V9O(_}blDzFj
z+mp~WMG4q3Krxmsj#$qMvQoL%ULf$^{J%vuICDna1TLo4qE=d$uY7O%RtLUH*Um`j
zgR>9|sNC%=8bPm!mv&pT=nni{zU;uPKv>VJ&u0OrkZ)W^#FKJpZPg->`*DC*j4Mnr
zVf_AJ`RF=i`m#Xalx?U%^>XO~os3UNVB~YF(ob&nCy}!BOIyd};rZUd6m#2GoJ8}6
zJ^^T#@Joi@U~~L|Xr&Wg^xL>|?MzbN6d0R>@s#u03MY9>)38M(RtWfkZA4G3s>c(-
z=vU<+%PMa&^wT=hr4ds!UOLL?lp4+NcC)Unl`)owHnqAHra=WyG;+99P)Y9IvP~|A
z4@lF}Dv6BeDmHA|r^6G<XX1a?BB(szwTf0E(1)X5=LGZLJ?x;cFfI$4s5DEWIZ~*L
zHpC;!wA3&;g=gBmO#IAG52Ac$;NY*kE^+>H_K%^e7({B*1ZWUmSd7snh3Ha6T~`}?
z%hq!|iQs%7Ih<J`iLcOB3F2&t+>pc~Au7O_OG;25Hok;&_0o~m>YS>ZI1<{azsxur
zhVe2(oE63W{kW781L|L@AH2Ru*R~1Y#oJ3@TI2on`Fv_^+@0;M&He6?rmw3lzK*5v
zO7wcI>gDBOb>qwJU62m~jD^$<5S2)@%mUptBLpbBUTJDX==5S8!_@91rWXt|J5%O*
zbB2oot0XjzU##AT5v+v*y8>G5NushM5bm)rG-a{8<_d?ScnCk0&P3P&j8!|Owkxn!
z4UpD#^POk$(<7g!Tq#x|7nb*f1~?WDmy;8Yk`$x&cGYZAk=lOA{C+Qn3V3FJW;cZQ
z_of_=C&+;de4L}+9Y(7q0CvCSA(KBkgZwZYYLpg;KI1gSl&3sQG2+90xwXU=h1OZ?
zH(U?T>4U9&*{$p8FL&{+28zurTJyUY+Dt38WhB`a%a6sW%arO537oab(@yNdY}@{y
zgxgW{#>laM*4Z`^005HzT(TP(8vTda<XX$;A3GoU|0cPza4{Y#MpCYewxfC6GuX6&
zK{V%3C_?iYo`g1Kj3whKxYy@yd$<!5DK%RTjlKNA%K(YVJbDlBcihQ~zk$z>H8&nL
zmI~(+NmyW~**x&c<0vzyIURgI&X1n+ZnF|+ouquF&7HlxL~R$|Vn4FFCf|AF8jT+4
zV8+QojE|6~%{z+v>({~L)Tc@n#efsV0c9aq(}Eo%G&t6kf~#*B342F5HQVAyB00yI
zp{(DsOpGUlq|Somk>xZ*zT6Xnr((RN)S_oW?S@6~@3zB-@Z18{Kp&0}Ir{BLP`Ya9
zcJ==3>Y_MlW|j8Q=wr&Kr#hhl^N`YkuVp=we73J@SF4RO;t)&@9CBnola!RsIP#oE
z&9MadVmA7Nuw;t#oXVRYmBvA~Y9t?RkvYr^@5YNU^R-Hz%v!{UEs<GE`eXulpt}=n
zy$-DPlCQ)8ZQ!n!l2S9`kIc)|(~RAm9~SBB-Zb<Bv!mi@3_0A^*Ja&?8i=9TH~?G@
z4qqQ#v|j3s$LY)vbtdDS(%0<zeSDuVHvpkJ@9n8o)&!<(FT6Eh@hM3!JnE6D3Z<Fj
zrP&PDi@!wh2H#qlO&jjoE+f{R+nERhb7fhZu&NCDqY3w4E%^dZ`J1R;+)ZYQk%VJn
zfZ@cGIw1nlks}rhit(@&D)!AuD~H4F36|{HTf%E|kZL2@e|sH2T7e+YA=G6Qk`v2}
z1IZ1!NQ`lewjtITF;DUWjWWgb$^c*8hOQ_c(Utjtbjp=@9BqpCNqkSJ*&5>4ACu(B
zk%qh_aNObcx&8aKZ;h?7Yyx@g)e*J*QTv0E+BE9OY=Z^!VVxZTMh7mPNuQR=<6)(U
zUnHE?tfacc<%&;|`2cSf6BkHj36BXxB4hK0WCgKeo8AY4_}e0s><JI~7BXavu{xNC
z0{H}R$K%^5QG@#^3ge*>H5{prq_<#@iD3Lu_K8?S<IYHl&SGU3&rr0|-JM4Y{uSFQ
zSAy1<I1{|mnh()3vcwRhWjC9TXw|ubPy&Jl;Ji8D?axVTNvugeSldSA?<vFJQwjew
zd;piYLjJiaNSqNfvU$3&4qmD2qaE{u0CQg4&>!7UsP0dRa<`Dow<&By>SzSpzQI@`
zQO+#S^%dh3Zw`P(hI5rV3^C<BZhN2^)4*|_R<D-6=~b#(OEwhnW#+=~+0yXQCelu;
z?Ko`dPw{)|MKjK`6J@u|bLvU46rX6;4d`Y=kUoPx!$N2-jtT&mq~o&YHu$a7<fYL-
zwy^;?V%9C765A$_ut*6gMVi~g52{^OriOhkw$)JKt<-WkqMAxS8_}ak@05mmjmK6%
z+<*qUu}<>n0y-4r*aN(yiZj(rLREE-sN1M3j+Ea{^Bqo$)VGmMQ$VcnO1IEIsl1_6
zN<fg?WWbE<CTSak<Ima$Vq*Lul7eX^0;_TzErP&B2afUv_QWzpVYKY0NAE#>fQ3u8
ztCQ{NmwN}B{X5I4z-N}}JtOy?HF#WE#Q5Y)2z`={ryUtwFOl3Ej<VGLxp)y=BQD%^
zdHlTd_Z?hL=_vPSP{nu0l8-!OSfBnejaH}%!c#^C0YF3^QFN!gPdBCo$Yf?NSS5im
zy&>GhiPY+o6n_h#rcBZ%h#~fPdXBD;@z8c+7?o0v-kKH;!~wUUZAfX==*+aM%JB^N
zHltbLZ#xRJ%=MIV3Xn62?Nb#9D5<#$u*p)KU^Eawco+w5Rbf_PmWl;~dwi?L=pdKS
zJDO){nd8Vtpt_F2gEc#sBYG?qk35QwZHCZqASb5XlNg-pCo%ka&j3q!!$hLB4=Z0k
zApCuMY6Wm~1bZM)fKp%&Uqy}A1jyc>n;?6VG^(f)h(BOkk}CZ6yyKY?BRLq6ou}0(
zSQTpxGVvsC^QLVQc49+OhN8Zq(}>E!#tt{z!_uVv7<L!q5>a-?z{3;M$DfiwF~Kq_
z9RwSZby{Nu1QE!UckYGAO6nnb3{w3{tn5jhqD=cW=!Uo3p4(iuYYQn;7hyC}#7EU9
zV%yEbM^jn|m~j$+;^qaWC_7$8@VG_9PAhC<q7+6b!OXuSw{LcmM;@wXMxBZ&>ek+4
zTq?-1Sl)P47P_m;vv;y@_MDXVm4~y>+A67Rn}FFj%6zbxDtLamkZ$sBH|;S!*|*}i
z>HobBF8b`2`t`x_%|<n|U~#J)zHvDmGVWi4fBjPKsQKRE(HQANE@xCx0$YeLa|`OJ
zE^@Dn4YYZ%QCC+1ya^92YVgeWmeIuXonhuEbe-J%BJrlWOXumZdp$c9@n%G#I%=z&
z!8ZL1BDQFJDpgH_q*he-L)*YroOS@0w|epFb1rxJ*(IXDHNZj38-%1ha>T+!s<z(K
zq2{4)2YIMDmKv#6JL~0OFF&{E9{TzCg?iR>%(sKTLFAQ4NgRA~f~xV{j_Lg5Z=jqt
z-7FMdt6}i{1!mX7D=unJwCO9|D-$B+bKShhhM&VGXN@N>>Nvr_v|VmqiynB(znCRO
zyGe~7>OZ0Mx~uMd2oHZJgOww)3sxnJbfK=YEQ@QcIae%3HP}HaUg+$B)J$|O1dJE+
zoj%GODuCoI`{rE{EBX{^P1KYs)WR;0b?4RsK}4YoR1Vq8P3H(wd(~v;Q&`GO6}a<P
zqEIsKGvUsb?7yLIEU9a*q&MQrh}czXubE~B5H^ADx^nwtTvY}-nP2ErS5sT@bJH47
zwKd1s_^5Y34h|_zoQ{pK#Cc9^-A}T5knBQ+%Fh2P*cjB=<hx^%+zO;)lgPI2M3tFA
z%C`lJyJ*#lSy|d`^`#}bJ@{mLQs6Xb8fV8A?N+01-*Es@ir8uoQ%daC&N@G#xo;k(
zRHyYbGYp#Pi_P|B@c=u0z)WRsr@7wi5x@Pk+R}8Htd1yU@04_Jz+!`c!mPk-7}cB3
z;U%#Ky{uJXHjSE3=kcmpfn76Z;u$?_@X#C0GsM`HoJUXh{=X>wKj=RI1b}p|g4BtE
zT#nB_esm$?|1w}?``-bh7<C)vO$nqQn(xTis%b5Kl1zoAVO<@9;A$yUYz~6f){qFP
zmXQ{X?rKw%LB%b*-kbFKDA@fOQBCub&-9#|QoSuNVBKM9J2W%A$sXbUiJ_~0NnM`g
zdq-0Jr=Rc7?(h9Ggc^028R!%po$P+m^xgV)|3j&&hr~|%EE0Q3C>%OWvtu{3c2oF-
znFG#Aj;Oo|BDKIXe-caRk0x^q!AS?epD}8QLGUq0KvXjbVl~Dv(JTi2S0^=yaOSkr
ze}Q)cHnY0eVJSl^lo&>M<}ouOk$r^WC~%R1Ur7bSY#%<(Z^wTh^k4BTB28pF#i1tY
z0nV~C1ZYKdFvZ*2<H}`o<{>DD{8rZ=PpQ#GHwSehS(!zef%n|~#QyJHxW@QW<i)LV
z>V5gR5hL$|N?ttj#_;LKh1Qvp7FNb+Jd$@F83IT%8o+k+M97ltVkxA*Ok^tt<9r$`
zYfuW6VLu2}QwsFZ$}Rb5e`B;dOpkNFf{qI^mLd<34$=K~=NPUzqCm~0@k3;i)R{5j
zQfZ7#c-Zj?eE_)WPdtXadm_=@VdJfcXce&Tkm>V&OE_l|tl}(j`F*NkfBXoZd$v6|
zyL_Ns>F>VtfqBQE5lioTF}GAL`elPyuJ=scq4_lQ<l^X;Gg<px4#!zE2G0Ai{(gh1
z4G2{N;&S?zUAFa&L3I(29M)3F9Ee7X{7LqJqS(P<?jY@Kd%Zr{d^&M8^E}+w<9qKH
zd^Ao_@iuX>tuwfrlsE!?{&wXtwV<(_>Q~&0=N3nPlq`wSI$;7nd3RGY1e?a&uovJM
zTm~%SL>~u6a?dft@t9;16bWx6b<>#;KovPs4Ln&c)q1jp{dmK38gK1s+9d4IX5CG0
z#Wf3LYh@55oH$i5?p2K1E*@?{`FFHZvK$wQZ%|pNuyca>?1L*T!&xKMjy-z)>5DD&
z8s&#VS^RJfXf3AQcZNi-7tN|Kqc5f;D8wzlA$T>PPPIdhhks|v7;|g__<mR_kW?lZ
z3^ca*!Ez>O8xw2~OP{al8-6Y>e!^O@yV6dQo69`LmfobVty*U~?#wA2@={2KiIM@C
zB*`_fO|=d{>602&EiY6Vr#v@NJ;tDUfvJsq+RVOzecjou__cMzsYSk<S8EbaL8sR=
z5+L>O!#G7qaW|a+S%}?6ZxZ>77-bqzOffhSF=Z9^THWK#wZYgdxx?=EYTCiR-R<IL
zQ;RJ~TbLyWXpJ5!hZ}-+32Sie0ryY|3wwQ~g(4-TZi>+)?R|fYwj50cw{4G1-ZBuA
z>~RP`&Y8$tXe&_s1y^l%r>~AQZb=}H)qw58bctD5v{BStzD>Ak$Le!b5luC6ztZ_k
zMu5G}GxSoP)d1IiW#AEdOhA*W8ks;Svrt@7p!9eMYEmrM)AM{Ecd7h0b&lk{beG+P
z@7ve+T@rekNt>uzL>c&}o>VEf;443dQ!v4o+{IX%I1^wL;F6+_ZOT(oOKUZff7vGL
zqw`%uynS9U9O%;Z7h?0S&ykb0pC=PaT^}D82Tz7sTGxqL-zD?W@0}E)4(mIZmt=wf
zVy0JD&$}DWm$&!p`i%<$?EPwHDGdzO9=J5s?UO-XXvSxqr|y@A`S-5xD}t0?NON?(
z)5pnDJ`Rlr<;Fgowlq*Nh$e<Lr$4`Wmeig&>L4V-HB-#Xr9*abX2n94>^TTidqne2
zk=;jY$NIg3=G~{g7>VgF%TwL*Gv#{?hEqP^TcSW7s-4pBp}NLTJm=D8RjH6%Gv-=b
zg>>1(I%H|ufv@cIZ2f+8k=bNi0Q;q1X>2U6q-)+cJN`oKIfYuUSrXTEEzUF0Q>iR8
znK-n}ut<&dD9V$GYvfF!;UXO)KSpmSab=R1#&{N97~CO%xWtdagU}tr9<w8M%U;PV
zY9wF46=27$V<U~eX#Hpki5r2(b20t9?EA^tH(>D}DF`9#_T|(7@sEs|?iYx$lMWB%
z7e{KTOG#5tUwxuf;{FWBElm;w(#v0Aedn^Z&BBOW1_1crQ^&I0V9Vs;bH(-9?jLqm
zLL)DqV}#L6xvPXyI%dUmATHH2l~U!gPA^Y=R}{NT_N)`_*%h%QBlNYhK~4*BmTYGs
zK2(l8kdCi1-@K*EcU{owt2~5o*UzY{#aFbHO;bq*b4`5xc@=P5lz@Va{o3>yhuWec
zG>(}l9q$Z^Ok%7r3KRndF9d67@5ZK1l7KrS>WuwChua5^%U_<i^p9{bn~a#?qc>@l
zuGsdONeP3RUw#=ScU-3N#^S(e-GHUE2E4DeQb#YUqQe%JDEFL(in&8a5hDgaiOY2j
zQ?{QpMQ%G2_*>}!+ej<d718c$KUoXAj^ZnUYk?v^)Qc=zruU-<Ps`uSBkK5CXKF46
z)ayEp3`LRM<W6m$(4)VkA49*(*^&nKbBWEivm+%VB|<ie+l!fp9&P$r)lI|=OSc?(
zL7_T35P|fg>b;=9Jl$O%-an*oUz8Agw|p?SVV{F;!e3n)z0ZJR?3@ivNm!a%Nr&tC
z4LX&yEEr+4|1)>9Su+NI^)GjWj{CnP+Whx)@7BEb+H67mrTIpsn4VA(>fUg`nRL7+
zk=vY>?BdXA9d&&cAfd=7gbW3s<&6Any@ey7lu|q>+Ae`73g`Z^x8uO+tG<;WPqHwZ
zI)sa|lNea2>k-X~IAS|aDkthDm&a@V2erZT;5IpO890cFVs^}l+)XbXlPoDA`fKBe
z6nX>;7k>nsMAL2H+t~vuVYX#dZ_GDtm|HBODj+0G1m~*7S-5PC{9u=m5WbVBL6Im4
z#$Y)?3h6!uk?BRF7(6<Jtcc`@<rO{EmSK5?LppkAE;FQ|s9(~Tvjv3I^nVyThbCdP
zXvvms`zzbFZQHhO+qP}nwr$&X^_{+s=;-$o&SVcxX0DZ>V3hOoef_*LVzEFbk_wbQ
zS0eeruB6?6pDYhLR4PgGn7@=UV`>8kC63uD!g-O-kfWXUsw`sA1NTkgmG_XGaP#qt
zm!iN0*#<tp<Nq2yrp*y1AZ{n@d92BsR3rA~)o-ZN$-1|(hwR|)wX^&!faXO$Zaz)Q
z?OM$bA*Hl=^9q$S;u}(V2B}ZTQL|=~P*DK<gXO)Bo9|E7*X`r;`gzO&IAnR{NvLXF
zJDw~F)JO$JD<vpO5`&ts4ZZ{p$i73u5Tov1)gy?i&=wJIJ}8Jn?}ag$owWx*l>t!*
zQlQvqjw6WS&o5D`?GM0&Y%rZy>|aEd8GtO@9n-i?k25i_L~Y3M7?{`S00n`QiBJbH
zSk6X5_z*ldPt8vT4jvNt0vcf(VKZ(lejNy4ihuvaA*@H-ua++>?FuPFhB-?j5s36f
z&d<9|$c-P{!@{{~aXKWm&li5({11me8ipB={oqXbJZCRaT9!+u5x-S=+3U@|oeSSB
zGb=<<sLnnLBwgw@^<ecn1~N)xvd7Thi`&w$+S0_nBH&KoF|wo<tK@JsAC7)hlKRkc
zL{Nz1Bw#XSss$HLtB16g4#ILD2e{Nqr^0(&1x7$ENUs8lC}qzKjH2qN%RheCwN2r(
z)kOa`wK0bWbfSN-XzG?lllby`)YqQYVye$}_P_sBR92i`eZ?{uT$W_(FhkMNwn!VT
zbHuK-R>7K1fxip7LOFt+ngKbg`%M#~<!yDg*}?)*PXJx&?YJJ`MSsND5o5!S^@5ms
zAi~5=GXYIdh?k!k{G<4>-U0Lep#^{$0TQs7JD4}>0*aXUw~x9r+1aKqet1U~U#Aeg
zS><GuYwUN+60R{vQDhq@T-EfbOcwQS1vJHR)=X)jdQL@WVj4?W@yB*F+^P6DvGhI5
zm=3la_L#g}P6Q6yBWXSsf{=&%!`Ii|;jsNFeVS9s)#Qw+!E)w@_K>W9AS@xohzfZv
zjl^<n>F>&v-_t=Wq_&T^x2X##NchBY>JH+e=~QEF!E%NPhrTC?drTD&Av@4XbW!vp
z#nGYZyT^<nB8R5Yr6FZW&_)nW36?<IYLFH31W1aAzJlVg1~wqqWlFFishS1S7Ul7b
zuq*l(cJU`dv`b+hmjE!Y{9>4_-%tX?0(d^9*w+n8ryBGG*6kU)T*r>7Z=5t7u8U4L
z#dm_6^4y32)ScY9D@)4?^O&(f(!>0meWMDeY_A?#b{KqqQhH1AIz{ZE7)>ol)uju~
z;o#EyXXpBz)Y-)G`iS_3QZW+E&icj)Mfou~W&$-R)ZAuWvw|#dwHi|aL!3??l$kJX
zqqMcN@m|zi!bpC3#1lm8WjI)(7CKnCFFS_~@mf9C9~)N2Rxz}=Y<pCfrfl4stGpUs
zAhZ&NtmNVbR*$eid~e~`&y@Ju>gZCerj~;ii6WyNptm%|x%mrA+=#;rJd=N4Nb<<m
zW`aCWI5sP1wktKQ@+dh6htHkQyu9@DZ2|naP<}n%FJ1UJUH|Uw%RUxXH)*eTb25DH
zO_;DcpoLUjBSEI$%}_Kc?dwao)F_wl(4k&bQ7-*T1T}AEpbX+;)=)kzbyz=6m?W=_
zs=7*r|8zTA+_R2DvsojS`i>*)Vkvht6aKEE?TmMdL(m6HpLhNK{#K0K-sUb8#JdEN
zmcwAjs9_3U)Kl=hSZl85Ag!r?Fn$AVF|Yg`-14GDV<%HJC&@6s^2Xc#^y2Aq;wB1Z
z1p&#h9`##zX-QTS7MA|@=`b3%^Y3qt>bd;9-QUgSotZ=Z@{7CX*FZ>EMi=b+I%emo
zFcJKa#rh@}=s4`(NX9-o05+&jeqnJMm2K^?S@k)pSNBneh-_%`cO;iOvfZ@g%&FRa
z)j5F~o-D%fcYXa)F{JObQwIGrK5eVQ6ygR~RfR#h3|JpO^N^-f7u>hM&-)Mk$!g)l
zpJ^Ty-|aZ*u2`1Gus6A`j0%uh|7_2|4=Bc7Gr?QKTnt#O9ara4LsIA&PQRF=5AJzJ
zCv7$L(vLPQ)xo$%IPVHr2iiI4S@^}r<n@G^OObuLYqk#7&2q)VRx?Uom>SI9nL`XK
z_K_w~Qj;N-&*;%c3C89xUAyeTCQ1$!-w0u<8M)8tq-f2P+#1qHz_{WdY^?!A+IbbX
zvf0^~r}L+Obej$qSWGCTjEXZDbL-!V*%k92qRF9mT-f|O8Zxn%d;n3XWmF?WQ4vNs
zH4Yjo+l9>~<cO<LW`$4OJ~~!4GKw^agHm=2Oz0eqb_Jj*?w5(J;-Nq85AfgKE9X;)
z&L@_ZnqU<l<9!GZE}!qub^H`A2hdMLCQ#l)N5!F|$!H=tx;jLXo6}tBMj1@NVscki
zXLrVmfPH#N-LA4bu4DjM9LG??h6yuYR4>ePGDq*$xi4urD4EV8RZ*(VS&tx@qLHQ}
z?Hr4iN?I*gkoFq37~!1azNn4&;|C+ZXUAK;SKi3g{?tPUS163@$=0HBx?~%I+bY+H
zQ(DZAb$a}l1Z#9AW1cG(F$S~K4#aJy3vu(U9#1vrynDbaUs~|=-jYMBcAqgB?&<aF
z6HLOi@5*IOIa43|EnOpBT|!|cU7T7Y!E@#y**QP*!qv4ko?q!3_|4xx@nOgQ0g+kU
z^X%d{{;Pun44r>hmGR)#m=rG=<4X_c3k_PMk75YoTx|kRtzvuiCTt1=2+OkK$vO;a
zFtQWaQ-E*X5$VxXBDykZ+qvZ#6j7oYTwTyfXJKg<rMCT^{=*8@(C%a@m(<Zc&3p&e
zcn+~6u$d$%I}+5x4rZGXaVW7xUWW_9XdNc5!YQ;79-`VIKyYHZ@-jT8a#zRL_X6@G
z^d}vmGT|!BjejcOIeL)wGas{0FQwQQW=ic%>PP*m*!M-`_=qV-1Z{(b)~_-79F_2N
z7o??~tNHld4VLW2tXsA-FHnhAwSz4Qq2CJ@tlP|21QoS<pP@I$g|>rB)1e2uRuWi6
z`!+SUIiiea_~ewe=4JH;B+qS$uLx9rzu~Q}iP2xE4s2}!5{ncEIJQGpq;jikT<BpZ
z736cFqA+xmY5Y1G4t^$6kebx*LvJ9bo~i6{|N4HO!FF^v&*}9AY}w*?+r6m6fr?})
z<*TDdDkiL4(=XMG%6?$a>N*ygTwjVhqwPQ-kSWLw>d+ocUaMUrA7!lP{o9H=JDbNm
zEMxn=E(OQHix$-XcsMS6x_*g5uLl?G4J7`g(&Wt3UbP~<_DB5mVMscjD3V?9eo5`-
z>~N3Bau!zUNfkr0NKljhiA*b@GB$GX_mtpy{0#iAg2M_@b*jzQ)$qykPO`5X#|r3O
z;PH4m;(G~0E`D}Sz1D7_4eHa&`}?jQ$~s9)V9d#&V^q`k?s_LKLM~HsR93o9{^E_A
z0OIrv`t<w1oSFG`444T2!Nv7p|2K)EqKJU7jEIUdBmnUL!wesz>i1uwi171Yq8N-m
z>{w|cvE(|`X(-j$g1hP>pj3?!DUeSrSxS_EB{9Mf>hsn^M8f5YlOJI8H1_at`>>Pn
z?<~+|ka-$S)OD7zB0WoLO4363pjm^#7Q{-;n)7UACYfW#vLN_CcGzZ*eS-yPRD~p3
zKGwlX<UcK5y<}D@@V%-dK2#~{Z%lQ`;gRi_!#5(6R4?KBZe+a+k<(BELncOREcRIH
z;tVF8RE1^Ss>3rw*NxS*io_C>0g8+s6sbj0ZQIjvnckjWDRN}WmTRJHY+T=f+4Y?6
zsOa|+aJbBEuUEi-kpGNs7&z5Mbulf2Cz8UI<4n}ryKcG^5K!MUl`xDdSV#wNh+=8V
zi^QNOc)Q<k??*RJd&aH7lhRwQ!`Q=-^JM+fv1pywP<9*DhvxH6i^)<|w&$TZm%DO;
zOiL)m4QGm#jin0*Z(c(l+=XtZ$TmZKZ0U*FbD%K!mr8rZAZqOI>V5L`%!U(fG$+%u
zPCLm|Xs|2M<Y+E<3T4cGezb@q3M&p{rW<?&U1;b%0RyW6eNKMZ*>76tqMF*<3*r|u
zurJ*SuIhDN{vhg#j+_Q91M2LN**fq(8V8z`pntid4?f=HxAP%`jiG0S5~L;d8!stL
z+8Wso%8`WxX%=$}$vcij9NrP|dpg9T%k@!(Zk`j5Dage}qXJqqG}lK%ZP;0Djk$Mh
zo$Zp&DkU6kgejFMZWW+mhG;tRE@eGy#b)ic1Xb_%XL4~gAH^~qZjg*c?GxSYDtohq
z=Yd)hVj<Zfs-M}ATO}|~VsoVgK?qF;S1Fy?XrhXUJ-Xf4%kTEe;;BT8De=*Y@C;G4
zKAMj);oQ75Mbrx_Fw5e}j3LO+DSM!cPjHj37|x>w2P@cU(Po4yA``Ix?NZ@5E>_LR
zlG~0{TpMoCH|5cllzmyT;9IHha7{(o?u-PM@xZOM0|gg3L&M`2jK?^+{@n<KP<HSY
z&w^V7OZ5<!7fYCsKrOT{-{xyyZ>4O*cwf#gMWBF_BYn@)>U8n8KIMZgui9HrN3<GA
zL4c)B#bWQqmZ~iy5);52ACSSq&<UjR-HlTP=rjrn!B2wEtcy`L9OKyA)uSgL&V;-`
zlk2xzG#C|VQSwe0(`JUo!e?*{oT@>9w`aqG(c>;QEp!q^od@-U3WDY^@uk3lpSN`L
z%g1Zcn3G)Ewl;lgwmayQE7-4-!Awitx{F2=KfCN<UM_tkf>utpm^vMMSA@Vqpgd|9
z0dU6TAWp?a_ay9-!~)8&G>DfkK%^*Q8j1xoM-}-Ug?BRQbaM)n#EC;j2xm?F(~r(0
zlhYS<T{xVel39nW`Jw(BT|p4}8+nfx%C6jv)Yw?0;Zo**+~8`L?J?9TbCEFFG+d(V
zdMfNm(?t>Ux~-8Ihzf-{|BS>_*8C@$&gCyGrze6ua0hXtFL0yy$vPsTgWZ|9>B068
zZ}oG}aLgclcV)|wIgc2ep}I#3$Q4tl@KM&ZA@!QVr<cBM0h|PS3XkS1gAvb+FC-3M
zEMf|}NRuAZPR7L7P%eTLBPhBmYYIs6E{HOZRe42bVGm0_H>l~yIY4d=)IhQjDs-=x
z8q}3LS}*DLhJFx}1hRJk<I$0$0&n=pTf6aCPlWw8Q6kx1>MB3@&WM3W%Poe=|8V*n
zk1s-}^tVE_!?7VrC5Ty-z%Wk2%_un_(J9`z&R0@RM}CzSJjX7TN%t7o@~Jz6qnABS
zWK3IHAjn-a&;Q-~E+ip{YP!;4jXTC3z~%QB%+xb(oU#C$yFqftNCJWse%jffZCaph
zDt;)v%gfoa+jGEz`BA3R%HV>9Yh^JBmAvNohZD}=RT}P=3`|K3d{IHBI?|?@dVToP
z?iYC4#kboB*+MRI*QWPtD8^<88ouC)e;j2!@PO4dCZkG~ZN+dFiYt-alS9BQrL=0k
ztzPcbl2yil{kwYpIzU)|IYri5!2Z)9+uA02u{qqn#37ScGPl(9e5K^g3h;cdw1vR@
zEPiJU;DJZaiZDN<@k&0uF^`MELzItx(FOp7^YO^{KhbX+q^@-pGynj;@c;lc|KI+~
zf9N+oR_6Z|HD#LXM{VoBjcC@>Z+MKM<`iP0jku&e3`uY+M;s|deCwM**nfHK@?>IR
zO2f?9&(_}b_2p6{LB|b8+OdCk=6_!1y9^yZpTTH~xafi_>{!1UL9$2I+{Pk&ZQ<K@
zO4A(Gs}I$(72ko`I-J-4h}2C@$gc!Yzs}X^xUxr8_=lWa&)lw&$n0D$?Z`S@t-TK@
z^f~RRM^0m=N_(z^XlL>6hp1Nj`GkO|DrVPu1IaSepie>RG9AF?hg4}z30EA`8CtR!
zOlxMU^pHGj&op5(+wYO~Qq)LcCZE(8qoe>?0C=<j$lOHu2b>;W&fmA!?3hOb%s|Gi
zQ%B>tvPNwF7l=$o>8_|_1ba-;8`h=Z^?<WHJmI6E=|<x{=V}kbTk8PtLbe<YRt+Dw
zQB&w#*Z1F9PH5oQXG2YSF>d!!8QEM(1!3F~(s^E{FjBDS*D08x3iWjDZ(A#c^eGv=
zGTI%XFY7JH4p06$9QXR3)Q-}4@A%Pcu_i!U=A`(TpbNtwu@0=jxj^wzQDD@}M90cN
zH=}!wqdNN)?lsZ4Op5E|P^A9HMR&6s2Ul(Hr)+C&L6~L%clFS>?9-7zvu%WC$HH)t
zLJia7s{Rhcs^I2uqT&$u-tjc<ho4IvQ8VV({+rYKv`lp}YfJ%D0N4-eYoOS>f#23!
zBmwdH)#ISJ^gM9Jh3(pNM^NJHp>9fSXc+!^e7#=~OG>I%_=f!c)8P^vp>P(6^Cr-^
znIQb2=Dk*CP3>Up@5`Nm1g>cArXbbCRSnd#sYZ?hXB?Imvf1~LAtqegxL@@k_p?ym
z@v76Arp(TO%$m$iDFC21fF88Rv?gic|JZAr+Q`c(v;AZ_Dl3n`mmW|h*r955wCV?Q
zGk4LT=o$JX^yPTK8FaXG5oB@n?y+HU(*Zy@W$G6o>ya_%B;L@>GmbH8r>(%(0GMyh
z1Lz7*Vn7n=wJGQU*lMWO1~TwPw}n8o!f|+C6b=5#5X~2^YxTFIM*F;h@jE(SBQB#&
z-f20)TLU%e$ZMem<M3ecf61ox?-F;NJ^+c1Q4jJ&g>3G(T5nR#i+tj87|E0J`)i#v
zSp1A|BfFxhRdVF}{}b-5z8iNi!}Bba6NZnk!_E0Y$ZuqF3TH>%{(=oxR?=rcM<a42
z<Vm1t#;wL$hs<3<i-OD)P2d33dg$&ayv|1=a)ph=EK)kk_c&b_IAN;6c$Lfk<`z+f
zrXB=hmjV7+7I#QLOIM^dM3r|%=NM@XxUH~*Bnh8+U}r!Ri9;_K^3E6i@+B5P3FT@g
zbV8A0Z#Z9e6Qhmxe**A>$h-hOsu0R{?FSeMv%vB1>_S75IWFj(k>*Pc4tmM-3&7`R
z8z@1z6Zk6TW~U%<>rMzYZd8zLo*4NC8aSQbfg<h224g7C0ulfawliEe<l^Ll=g%^n
z@5CNRLfU}F)NwyoFaP~@W(4U0%+%(~mUJ9wl3A#Z_qQ~)xN{EqsXGeB2qfKCEwL88
z#--QOf0!32#2s*?V<sLgJIPuE%Cbi5U|`>Q44nsJ2{0npx&4LC&jc<De(?VS?t?lV
zLrx%7lw^(EcCT%6E4MGV#fxWh=H5*3U0hDbttUN~Pl8#{?SI8Tmq;HrYkdPjg~bzI
z5VYhor&7<1gzlc-$iinhg|5e0uj~<l3l3ili(1Fb?+MPIV5o<|GYCT7%K+i6POGO>
za8gFO_wtP{B!~gawU3!WvU2m0)C-nJe(@rV?*=<G&IY9Ir-q6ienqg}%OUF)bcDj{
zYAXSXymNL<RcGo1SPRrY3f*U$=dV*r4Puj2;dUq`+z80~x0mO~&dI|&0chnx<}mYa
z$OzMYhul9(>aMP`6%7aH+z|(0E-W<Bq0rn)%nQjnfVN-+C2Jf7iL$>npixM3Z-D`Z
z$QjXKK@;r676A6|J<uW+*1FB!4QokgEt7poz7nsUV3J}U0iPoHe59Y>y%8-Frm^#a
z%W0mFdC*+46>!c0|0dTlc$vp)dSQ%nBtVl!qqY?@!wCm~53Go+JW$IMSS*3&9WMUn
zGF=)Zfkr7`+aCp5PQgbwHi9{yRB<~#l;E6#19+TTr@mq)JnVY&xs+H^I}wNXy#T@$
z0&zV+dO4{w^5OXUolJUg+QB$ft>ZiZ$h(4R=S9G&ok?^xfeSp2PfCclq@~;q2b|Fi
z{e7Q{;fml!a+CmVKeru*{#@GC5v~&Q%ewIgR}qsTJ#x;K`d*-%Cw<l*d2=IhS>!qy
z#~+kB%ou#$Keb=fK(3+pfe#zod@fx|%fZdas8RnV!A#evaNg*95_f<cE|3i%Mt=jp
zy-yVE)6VqSMaZO$!kA8ExunrB`OCYnA>e|8i_7on_o$=vdP)MSs|%Q>WE({X7I4DN
ztNK@Xqx_)JAI1^9i(s$3lGxk&QMXI0sE<Yzgmf6ehcs^)R^=KT2w~t*5AX}*Y@&^6
zIY(E@8v(AQjQo(uo-^Dt(zkHjgv=kE-?Qr)(`)y$_DQE{$=cS&t&>IhL{+Lx;24`;
zx3ffVuHICtj7-Xho$uy9V=Gy^PefNyTWi+^L|_rXyiOUTJueez;gb8Sp_qbI8zk4T
zs@9IN(#@?Xtgm`!9UsmWrG8r4zqwdBIypGKe|g%z>^#2*H+N}i*Rd;cdq19D&dzhK
zu^X%4tuJC0oQ<h_FLGCIZaS|hlVC6yF!Zv5K;3)(_)7Drg-gvqymh2Z25%*cG8sOL
zbyVf7EA8*ZL(7u}gtMfF6AbtwTXl6p*LA|ujN-;ka199NzMusr*lp%5?f8x8k)dA4
zN5lNdU|*-$ui(55HCKGY>}Uz+|FF<&YSMzt{-fmN!l>==^R(9>@|e5Y%nx~%Z7gct
z;DGW24N5Tnrn~RsaDDAHpFs81Y8NE%RDz3kZWgy=ReFDc^4<|&&Ly%;6#n3=$;1Ux
ztY-0UecQYLCJ|oO5x4@-`o|Y(99>J>T_nW^xYIg%9qFz|lUOE6T_ksf3=FR<o}aEm
zhsx&%vg`y3HUADKb3-uL7e0hyOq3Pi95j>W!4V8MY{hIED_AWLTsV&NUaC)*_s8DR
zbv>8HV$yo|_N3(zpa-gq`>a4_dM}oZhIF_v_3MovkVYaqC~=+}9FquVs+Upe&d;y@
z+92#E0VEoz1MwYg8H?8jD+fiTQCaQrb(zC1(@sGgjF$2GnPP|+mIIF)OohD9^azU|
zpQV-Y@RvFj&B9}$4{h+TWMP2$d$C6*Py{1{n;6xo3b@m>fyKHU3%*4Zrm798d%m3!
zGl$EST$~rK$^D@udaU%B$b~;s^mRfHa*dl8W=K9<QE+i_z4n2<v}FHXJ>2Or;I6wE
z_~Ai3GQw_T%aQ7Js1<0nZEf~!w!dG`gaWtd3cg@SSo_1LeNHJRi8Af0yCx8fw+z6&
z%UFVvcz=hY8nOuvs^%F3Q?P6L*5rGSgfuWBUXhxTIw2Y8p6eqMQ9gwLfsvOsN{V@4
z2uN}nPLhuKMW$xeoR}{rlB`{UxEU@&^;aM3)~4VthL<EEppsBY+|Z2BzDoEeESFqw
z10XJE03r9qx)M_!@Hw^Xf8|+q!A?go{Iu@$?u8LcmyOfxw(1qvb-2e|?Lj|UVY1>{
znpFc>)qI$1S<TekfWL*8R>#BTE74gKPn01>Gg@~5i@<Z0p2Y^l+7OHWakJbE3dZ_R
z)ubS2CN5o|{D)yp<Px6Y&+5*=rt;QPkQRyhj4M$d26JBK=iH?0>*4bWLhSKt_<|{3
z{P%oxYiGB2a%qH=K<mWJkbq9wsyCjYm`XhMwFu{|{ycN#yZveKC256gqxWK@4rytz
zeIF#b2Qg3*y05vS5Yo5cg&J^TKvJ<9Q?&Ht`}0;5x1xAHX6HLGu7l))uA{ZkQoIwH
zs0Ter(gz0NNw52C2~dV+fOO`PC&iFYf9$|Jln=OsegnVOIe3eQ@~BL?{1?$(q-Uq?
zy-4p@J<X<WGAJ-|%op!e4MjgVmlR0*^%*?@sS)1DXWbkcU(@Pf6@bciX|rO#?Vw`q
z-g%kL&$?S)6VF<!voLxxp<R9z1rm-fUT#kJEO|%bhYz2dkpLfpbq6KQUuwO!WPphq
ztnfzT-|Tk`$`lhYHWUlsI!Z2$SaibJelt2yMTY*P(YLz>Zdt^_*B`vIjfL7y@A{NW
z&8JoT=Cj*<&h{nh=j0#P*lQ0UKTEf%UJCo1+@Xr3ha~#-;*B7~p>X5-lxRJJ-67L_
zc|$dX3%yvud7g?^sarbuj?<(ym66MY6;Z0bX>#JVjuef5%V8Ab>u@g^`x%d$nAI<N
zzyS7<%(>?5K5wjb@8shH+n0eE8jI<mOt*#(%N2S-`#BK#Sg^<Ke|)RdS0L~(Z^ul_
z`o+Y2^^1<#8Uf3d_NUTp^O5*D9Fk1$vM7|qrJ)M)%=x697%bhT=7nQTW{Z(ou+p}I
zWD5w~zEudKEeQq+_hRS5#z8b5=w#7!EVbBMLokGa)>v30?6|urHz*=xQV$iXB~qg8
z3CaI}qofces;EztBy5W%8X*x_w{fM2mjkXi1%u`s|7@)D#m}jiVxngJmhm>@RPEp(
zadK^<I=5;P;iF}@cO+rdV-t<rrp5E$z5}DMoNaVad{$cyhlzBoOdss}J-)M|aHJv%
zSm!+tk2*RK;*1lIHQvwrjbY8bf47r;f*84om&#LTDe^=CM%o&#%mI1#0i)|sAUFY2
zoSmCD>8xSeRdB4WgFUcc3O+VM=7Maa6-uznzED7jtc)9eC&1GH9_~_f*$$gS6s1{z
z2j*}}O{7+E87aEVUXTs?dmWQ&0cwJqw_kbErJZ*8IqU;J=^7qhZfVGe+tHo__hTH{
zWn7rUJe1<rFM8b-JSE`!(i}tuo!um!P#}mc4mYn;Ydz0w{p!~Wu#Q6=fsCggn`Ic1
zxkmJBrRt{j^HN2N2E2Sy<^b%Hy{xIPZ>NB!I^52x^zN?hSURJIheBqOgQ7yK1Mz^&
ztA`av^#jckTzKf7*3z!3BwJfBx!x^pJ1!gs(j!E=($X)FmX2<~lNR>jY*F0X)})W~
zE=8?_wXjn@kBzmXwIia>nkDMjf_bSNhSI{=BHq<6|3CN{l~<%<U=@t*RESvwcRnmc
z6^)W=VMYCCB_S$y>bI$3D1MZv&H9#_?%&lnMir-sku_Le5~Uo%-N1O3b@;}}T;p?<
zPw0W3qduUwuih|oSizp(F9&$De}W&XsIC6-pCb`<ibYEq+oy~3BNYJ@UKt~%c1juf
ze|DZq6w5bjL|~tVreD=P3=E1EXW}H~fF4KunXqq1)?`UFkrBYFVNx}@515vV9UY*o
zg3{Cjz+#w~s5#b_(?*GXsEtesf>$bs%<BstS3~w_pruy-`S0Vg85<mKKspYEii-DZ
z!(+J3oSkoHlV2B8?|{<9?Pj(Q02>U{@77q{R>~_L`N+IHo>k?lnct1Xjk-%Q2s#O#
ze{9N?tO|v_;%Az20yytkta`8bsG#zWf_ZlQ#6~Kx;W9scEsq=4&t_Gc7<#(r#-KKe
z=fxJ>r=t;+^G|!)iQL<UavK@XIZ-n?-Tx*l&5x9v7uvw*LS2SRf~3>ul|r5IG^i-v
zAFDMCR<9G9t_P{_7@ACj%t9pc{$+#6j^k--djMy@z55&}w&i%;L2nS0`4Dj7ID8YH
zqJBJ}-qccG03khUjGFd7G-T_KtA-b^R2+b%>e75cIMRE76WB(P>;l@!CEBfjfoCSc
z>bJ*A7QDXo_P733+#X+|t(0l^e9EIYH3oGgi!Z%oRm4Sz5mjYFOGQz3(ib0IOz9$Z
zHjawIMgc;=qJqP_4<!t0Sm;%mDdVa@Xg<{E-z`OmvC0=M5pgRm9s@2(BHUU|P%K%d
z$Jd6@^wjMkecjE)`gP(6!aUKb-MY%jqNSM^GFXa|STpyQiQHGb6)vX_3aHeOE@n;%
zF=yBlUi(^s*7Kx^S$gchLhb7aM|YWV?9W2&r(q>30`1m<>{^tRd3A|Mx>g=E4GpG=
zyq}%yqRmP}9YCQ++%%>XDmwCf<~`6dxcVIXs9bOEvmhGadX~5l4tPyEHnqc$){quG
zNWou4vTA8H5jm7o*0tjxczC(<zZ^XOD4bYsLkS*&$RvZMI<lrn*nCLK3*k!7f+l^%
z#bxB-z*-8@RUHgKu>@DT|B;Ngb9X7~lYl4Pe<8j~Ev;qQuiW<QNgPpR*rU?B(^{mG
zAlDAVcyHA(9#HDrlMD_{l4^r?XYuXrSdg4`Nu6r5yqOr>+OBM$RTV3k%T+J@)T#Wa
zfU`f*Q{o*=3w0vK@XYo#DQe70t>R?-rX3Ui-0@{+PcZ>?sx=J0`8f3Xo&<*E{;c8g
za@&`LDU+?;RiBSO|MD>K{%o+jJ0fxbTlpp-Cq3T2-zQUiqUQ+K%J)9Q{ny}?1+SVs
z1Ft#@Q%T6xM|^0eaD{(3rSSb1?jovnqwu%_lr^Tax@+W%;HqH;PhF>=MDL>L`Bmdl
zwd2`qb$4yaZdzi*8l#Xsz%2yV#x!rhsS0pXfOC7yztlijP8HV1B+rFQ<$p^_EmkFx
zPq)O7HA-yWl~ShS-@4_Y$uuvUs|wkfQ^o?kGqFS|kauR$Vrh9&1GQ_dfAPrv4-m+w
zp9!VT0Ie3$yJd;}>*nTTLC)*hCK7BBU(uu9=mQtFGr%1DIyL2Iue5w6Nve`%gI|=G
z=l-k{{oP2ip&>Zmqo-NXW`^xd)9Sa8#5dm<RWsVRl&X$O;gLMgU%`P<7JxtBUdHVZ
z@b7Ry_81$I0&*t<o``T9aANDS^H{pocyhc%quGZ+?xvOmrjOb5m;xcJG%7-MOf6HK
zLtfn(?YHK&h7@h$pk(EI%PigSwW;n>LU+wl5j)k65jwQ4`cb|NEr~@xdEM|R8)>WM
z9luS``@J4a7Q`Mv+NriWRY&@E1^8rWY>mt=4j=X1{_}Nh=*ftr4A_D-_ek`@%IS|=
z?zf4C+9C~NrasEo7F(3m#7Ki+BpHO?PE|;)qG*EVZFIcCXhV(ywx@z}!el>_-e3`+
zb4a7v0OOa*{wK7MVsm+neO*2_Q@`Iv#i}B%W#@boBuE4v(C>crv~lJ1^@k)v0(I-Z
znH*Fj$U;Y{#9~B6`(g0+0)vH$BQ0^qp+szUuK_Xc;-knc3bHTi5ycVHXC?;ny?X(x
z!sj)ub!f`=lxH@T-bH?2;N>VIc!k6AOzk&oYD!N`Wv$bcQ4Z}nCy$L=Qe$(dZQitV
z7qGkYH`=p!0b7YDC%ULGTFuFFMzc8$bUorPI~q!C?qn#9T;3!QEqYyjj7y2t$}iq6
zdi-V0gIWY^%?YrMukKX%btp3=Zls^ZXJx<~Zp*m!pp2SDM^YSHaJTbGYud<c@KRh~
zCoD`=%`ejWBP(fuPsD$>sc=IV`R0`|^V@AV^<ms5z){ly!6CvTVuJ&Z&5(YIYb#o2
zMSTdSoNV(?Z>PnrC5HN=Z)5|$fPuI{!@&9pf`9=MnOkBOX&h)HgQMTxSj*q`JCZm^
zg7Imi%~xfoCYAbWd?v%|PCC&@VrOM%Wo6~%yp~etNKs!qbjMa-PWixwCj?-P=9(iy
zR?QbF8#0MqBAJ>nNk69OUNKu#lE7T0qx>kRpu<j4T92G-B@MI0fn|PaOnW*m#BQCt
zTQS9=so>&KOWvMW*x<Zln?u}<SmTbEA+AV3)OZ!f2d_;(jrLt!d76Rt-4-`m%57pG
z{kNOB&3@&$Br9nRfN4j#E|WyW1`b$(t-b*(>#Az<+ZvK1K!-_Ak4(bK?rdJ&&{2=d
zV?l(D3juEP6xspGy#?aa;A-Y;bvMBZ-DqnowSy7TXy)~{i_Pm~bkj4WhV@_TUNfWr
z4q4rso2Fc3NZv)#U>h{8y3-%?Dd6ylAIKB7ANJv#YinHVUD)ftAUc-QldXpo)au`U
z34=sZ^h;32GM}QsR4f`(-#w3d^`KoE5t46c>Q{GWj+%SttjTS7(u(m+9$0=qopL8L
z(UP=VO2p&P&+Nv=W<<P*1r;-v`U0)@r?Dl7Bmg&Zz6W@raRDnYGe5hxxBsG*TIxB)
z7VG;%%3<Zol1LK;IW?D)F8R`~eOZ}t>f8nboFKVu)P44no{JRbk|I8519FaSMcPIL
z{)?KuSWR%Rb{ZEkr|WEgNQSfg_7WckdGer<=2E5=%utJpWW@$&tF%Z@-Em@k&aIg}
zDM8l4|FBHP;cvOThl7C3{|IgQ@<2n*9hFw~O%+j6IFv%nS_h^+grLk*h37(CsM<2|
zZdJoY66bDQeEbG${gxuO7fV(|v>0frRyLbnv{u8Y1?0muceDV0kp8S?HF6_8)lB90
z)b+wH;bM9iMaHdb{|+@($2--YF43$hA131njXpJBWe-PAEUwV;3;rqFGvlNvkiDUz
z0~8Yk|BJU$RZ#MR#2K-_SkZfU{KrHWa5A}bl$emD$PJ4++%xosSk}(VFi+Xu4#5y^
zsIN>ls9&MDP~Y3x>BHcZO`YA%SPJLs-(l2`6R`g2lH9&xx&B56gmX)D+uv7|FNWnE
zA-6-Ns6@1sV~XW{+v$Xs;~jtzFFbWqrTgshai-_y`s?<=%E>9=TAtYXLKUK}e+rpt
zYBHRL_avQyK5GvA*u2Xc6n4>={=o%-<XX{f{vIh_>jAFwQN(!A5s$;YoJXl8j-<Fu
z3NxnM)ho>3_BhCmx=~qIGAN(>voB~PF(b2*z6|iuu3EFYCJSjKs_FtU6R_9eJoOFR
zZmM}Eu%(_8vZsZeTyQ+97woDE-Uod1ma<imW)AdNXr3Gxt7LoJ?)!O1)=|bZe4=~T
z=l5UV#;&otNu#oImagu1NwK#wGi71p&G(96kWkFhmn_W_L`*vgIh*HLT<$t;AzMWo
zbBFx_?XdhvAt^~R$<Dvyx-rw+YL&D_WtX#JS=C8sur*!I<yY8chHM+gO|QbWn=!3g
zM%BvFrvNnegz?T7$04|Z9`Yv_ZV?ME(R^KHVGIslODpEtHx5cZ(muBnLkzeJ5{ar9
zgO^Nbc*P1H@rml3u-FRe19un!nzS7{br(aaz>U3^+!mz*LZ2b<hQxrco+$al7Q10v
z9285;z%fWaz`$?&j6A$%sHDdY&jrE3@<%*mHp*dcBC-rkZAX<e6VX+;qM~TWA?_m(
zy)aAyV=^|{-!m4>0!FE4Ev&L4%}9`>mTLfkvF<49@D>?-I3h5reC|z3G7iWA%Zv8M
zSkEEHuhFl4fNz7Q8>o$fr=H1OW%uX|>(99Fu2Xq<t}HfoH3ZniQs}SJ?&`&MJL;Q;
zRa-hLReD)YISUz%D9oR^fYC~ESgTfMbxq|PpOliea<Bp;2<4$xEWssMyW2J2vG7<D
zd2t#jZypgFa|SeURQ$$-mCaSdP(#1kr-a~8L_&582{TPj*^e7|rAnqA3P%I@lBy=r
z>GRBj{-;3cOZAkO$5+$i!LZ~p=1Tyc-S^&iok!i5@2q>Vj0z@eI#y$Je5fUq&uAK!
z-SxMXq3*Ap;b~RA7Gtz@+*){>;L=i%356hwVv8G{5hQ^q{*g%NUu_l1CQb@N8|>E)
z>DOb%i)aq%9^t;fgTtb>dV@lxsR+x`%zjHQhnlS<c>77x7;moa&^L8;-TSkg&kvVE
zUPX`tpWnFi{^jCNnb5qRcqgAJ=ed$Cr!nihk1wmV0S|U%awe=NWhQKo$1W#!%xLvS
zJfwURfzs2FDN!#@UYlJ;427@9pT;<$KvRk!i1of&4F({z3l{zTyuA8;ksrJnaJ8M-
z-VAuJ*FKfyfBk@`mM2VLyYhfK6j*Mqn-_2y&$6|DZ@g}NdjZiA3PHcR!PT|C@Pg~2
z_)@%4S#T7me#@zPji+lB*0j!efz{>M1g8BoRKazZdyNw0@q~@^PZe{Ux;x<3bu0$d
zOm3^QN}p%lsgC#Hu$*v#f7=3f-0t($Kr)+e3IUhjbPY_Dc2<H(tjjrNbh_0%Yjk*Q
zf0RNTg>ET8pc5$ng)jbk%7q4L=F{`V^1C1d-Gn*B9aecifK=W=Kak6gwjo|pF4B?<
z(mbGDchl>4za&xF2`_B*LwBO9lYNMdfdXwZ+zn0{18N#0KSw6&V&HQ=<qt^Z>@8pU
z)OnCDdfn_?MJr3Nvp)`W1unZ;Uc|PLY9m<mbA4yID%k-XK=f&sTt6Bz*M97tZGC6g
z*Z*#8`s^fXI9RtZ`5?CP4nVycM(_|K=&Zg=Ir|+x^=OwJdcPn3<2kN~EEhl?)SnYP
zR>hm{>ItSo$8ruS^b~lWQPSm6tD?)HrIoOv?$@)_-PMLC^_Cm2MDm3YrIRBMue~Ms
z5eSQ>MA-vK4J^|i{ppSaiWB9|WrPr{e!9+EJ@!dyDai98V&ey!3H%0rvf_{l3$v#i
zsIiHiW}T{m!I;w_Z%$E?A~bE*j<mj%+~6>`V%Sd`#<D7LYLKfy192F@R<hG8@WZ4<
zP`+2sa@bER3ZvW;F@HdrUbKH;luTCAI6Z0=91O<kO?FHs6*p6eYQ)tvu!B=0Q0BS}
zKnlF3gvf1^p|dmg`rMxqUB_i@?q`dZDYPQ^3}&(Xm9nO*yNlEHDKFB)lTRIhH#MCb
zOM&<@WP3MEn2QFL;(K{K>pQ1~@EH{6@+3-YFdWm@I9}`0#cUY-b2W=%)*CBfv5YT;
zznUwGsWGJq;!>0VpIZ_O9vs*Ho(pcNmyIaY_3RKiS8S8_iwGDVd-Sd(uptaZgX!j0
zuY@TZ8qBDa+T;H17m<eOIaY}7YlfIFOw)XHS)iVxy~PM(mIbY_jP)p4W!^!jrHzgq
zP|32#BT!bQ5BDL|cm*E7IP0ih((|eno@WVPd@bWMw@S`&5GdvWzU!z03gd77h)^Ix
zvv+Exfj&Ql<7ayVeLjKX*Sm!t4^;v=cVfurqk#&K$E1dvyco8c`$}6j8Jyh@EO)Y}
zyBv3PL!O2)Y^uFAwG-X|n2Cu==6(Jlw;D?^p_`889hdUVzNnnYC7Gwiy!k9uMS-A<
zUED;i;+=Kz6uPWEPRJko%k(?<8#hUjiY{#$$jDa6P9AoM_nCBHuYuq>l1(|HUi{~4
zzBGjNa}Wl{GhMg1$I0jV&@SkQ{f!a!UNPnRpu8q`lK@KE`j54I9c%x7iRrT?R`k6>
zx5-nnZVMh3TG(gASH0!m>NM~V1)VBRQibFlk$a!A1N$u&BlzHv|2#Dy4%W#>WRqD5
z$%Aw$RSs6Hk{e<=ui#q@K9mFym9Vi=3h~7ZN8vMKn&GdZV;%xRhx!_3tXHBAyhj4(
zHTSh+E>5DAG)h)w*S~`hcd6R2;`vTFj)|3qNGG>URw*K=uHkv{MTNDk9R?gZQYvWF
zNZW11nnDl`t;-nLG&h@IiykQA5*WJz14h|>P)3O%$;vg#F>OX1H`)y%k#Qk&&c3p4
zoCITArHk9q24Y7Epx}SSf}A=Sv?y>KPARg~V0LlGSWFu4#1Aq1o^}dvsJ}&C1iMV_
zr2o;t+WUiPs$vNUX^=EX2JmzKD9;8ADHe>^4bPHiwU{0`+)x=0?Lp;4)IlWQU9*il
zKO_h_UV;7k>*%L5kPm7#j!oqXAT0nubisS@&d`#Rb*NxNU}ks9$gqu`yw-kYw1d5h
zQI*&ERL|-7e<>8U@e$-X^RPY9&jVmy*4XjhoR|rXiI)b0h)^U+Wm6s`z<@Tt`i<aM
z-0#hpA5}<u2j+2IIeEXnoL|S}1ehT_n}O;rzjLdNrcvk^EYd}BPBg`8XCOLu53v=W
z3lH?!OCuh@gYXwI0TQH>0U4s57wgSRe#I24=^*%g=F!R?qFnI!fEbvP@`i1%Lm5);
z8(cX)%p>dd13ibU1gf$>tc0n#g#{%h=0v7}->m2bMkKBymCPhJrANLX!JC_MwIs6M
zIqAY#W#*c56Fc%rdUi}?g9#cm-D7ETgczr1<i<oL_B00M7t<)~!=G@*Ym%g`A@*kf
zl?xhb-jfW6D_ilWQB{s2XTmZQvZxkX$4Co6G7^H`1S`8zaCL?!4;QvTs~-p#_jl3)
zgfJ1a9*!#k{$6*3e(I2F1%MJmLD1}x;X(-DwC;M|8f1D`n<U2ds7#C*fAYb39+Ux0
zr$SQp5^&y(H5VY6AbTLcp}Gs+91XB^KMI!|@F#{N3G@C#U;>Vx&eFG$LMp|g;>Chb
zwZGR-QrqmG3<||)_r-Y9H8)cZ$sjE>0VR<r`yvt@70}z6JHkKRJYj8slT8rYK9xYZ
z2P%;v5d1SYA>WWDtkn(a?lV%cUlc?G|MZ0~+J7bKBSb2D0lpqbm1`dvA1)Gc+k#LP
zfi-M`0`HX-g~Y>#s}0Q~p2*>ApD^<}5_iEVNLwx16U|fUiSkcRzCY!Sm}u5>9{WL5
zH68X(-%=>K*M2+7Y**zDMyWM~L}nV$1zHt2zmj59iyk#(<YdxK*FVloDp;9Ke~sdu
zdD}OX?ix)r&V%9NuG@AwNE%Fn6bG^uv~hvJb3xKLviAV-U?!O(GmZ>i+RC(Ob`y-S
zm}WDO#54q`N+j*Vy8!{L*B6&nlvCZ&v)~eI`%i8GzT$e<l_Pb%9t0hnb5<NxkYC6p
z{HZ%lQP!YRkQRXvD6Y5*n^DbS`NY4N*Gp;$*_Hh*@n8yL;a_YXQ5<!W6&x$kWpN8m
zNaZjo<wQ`B?IDYGBM3p1j5=Op{UZ!3-my%)$bRTJue`8Mxs|&PU!>jSf^?0W2{$sL
zah?kfJZgH4r}v=%@twWdp<e-J@Yd8+-`ra%K%V|P3|v*cMujnB;!l~Kr7B~ZjaIY9
zqY4uZ;x6T+aXyUpavmn03v;kUEHtcu|3`S8%^+c8*-M45$hr&IDQ2|!8O1MtQ8H?Y
zNutmj6Kjc-7vWSf+O4IMmEMMZYT`rFMli~1-^G`C(B=KQGasv_BS|5tNWN6r&hTF^
z19Dt22m$Tk`eHz_%ct;3-7&?jUmAR=xr{LYJ#KqRV-c~|8!w;7IYfyiOnmTzYU|@2
zCVhwES)j%CF|=L0wuYGN(1?vPr;S))jcvRD+rHVc7tswmEAy}=Qtc&FC~>~N4=}oV
zW7V!s%UYLj%fs#6;O`#SH_P+n`AOjF<#!;q3j-AQ?&$V+7kd*lL!Rdt*r%t@ZTa(N
zTt|6(4!HTIXw6Ow-0Tz^GB`eRyDk>29>SP;r_rOf{8LH`{P&ncAhZSF2R(MXrZh$d
zLSuZSY`@swT73D^;Ra=1|6F{pO(Dz@kFEyAC+EB_Ca~^><)>v<@2|MeHEOk-Qu*5B
z)QL?wrKDCx&TpTzK{wDh%)A|DnZ~9kH4wbrW8sClvOzrb%p}BAJ?JzisQAs#00i=Z
z$PVKq&Z{r?r?Knj)cWq`b$8bGsvkN2&K~W@jF3Ec)RsN61T(Rd&siBWC%rR7W{T<(
z>XJ7V-Y&%1^?Uejxk@#fhBsQm?>&UV^uNc`x+&RsiDCgS+tb6rNi^SSD?+}>EkqU&
z#a|=BiVagDOVCv#?@kuZ6Jx_&D?cB);6D&HyA_Z%aI$B}C~v8FToqgi1Q)60fel%W
z6BMJ4$(>5udo~wNU~w1vZ_1QvHNe~pDD-SYA~+SaU-q6DPox1Z&+s?iP(rK#W0d2R
z?UrxQab2E-{xnk2sjc3m*?4qxTJ{CYMC#VEFp`{{c$N~Rcib~>#dmvWT9^mz*%)tn
zjNav%WCmnRIbgL&Gts*pn3Q6s_ne#XEWu3cJvSy;fSb~Lb|l)E$LQ6XVnK;LF4~^A
z`TF77tzDMqX^97#g>v)ssWge>l&NYDQqzoWkkck;sKdpz<}3Stutx_328v}5eBj1B
zwaR9xTvgAWzt?UmEi1aJnmO-jUIq(3`$kT&2j*Zx<3Oyc(ltRP$tMnA8+fH}fZeP>
zx{by+dANld9fBF+E?wCsMF}EQ$-WPkx5|EHcPaZ|9V99KzKRR%aCo)7P5DBVLik&k
z*)YUj#^ywr`+}*&gVM{Ey-img_;HJ=^%jAZ9HSd*S#Zgt(}7)QX6*KFq-P!iOd<)q
zBMA?YgufNLSaC&w2aF^V6|haf)3lH4$A#W@>_K`FT#*GzgntJM4n%}V#3|L&QLIEK
zb2s$xmrRzN%^IJPPNX>Oz=|go#MwuiCdO46D7!6%C+Wd*lFY+%6{P5f9m@i5li>T(
z#`-l-E7-I??${$eKtSq#7Pf?IV46fvbzl1C2V6E2b-UPOC+_J=1S&_oP%van)ao~n
zDOby_xHQ<y7>FQ4X?2bT4L24>+DkAGRXA_tO8}9|%q6X_2koSW2bk^>=zT7b<%DFG
zniePOLBcs8GldBR7CMB(Jo!}0S<f;hWfNGWJY=^Kl&X1IDjsb8hLS$%MW%uv?*uq3
zs&6dcC<caaJ1UJ@WNTmsdJfR4gY{y@RvcMd^z?Q+#6XjuW}zl3j*7$?l1z|MULb_S
zsS#QL^NLf&tXmU&hvt*5jhYhz$OIDh`UujCV}vT&qf%SahG6@Sw&sJlpWrxc6$i$f
z(<Oq_R9u!-&b2aJBWpKZ-daGH(uy<(F@PZJj<49(omt%Ug1gQQLvEBloSNYoJ95N^
zxVxNLcbg9ZU?Z2|(1U=HzRF_@?R~0s7Y0_*w~w|v#2X(9-Ah^|&JmZqIv6phJr_?R
zj#l=zCOg%Z(I)Uj2-44zYmLd>{(%gH1A~NdBcP2$H)Nzsgo+z*8Oc$>0YEMh=vzvp
ziOUOxmLZuB2Q7r($REm0mb(RKL(He&t9x`EFeo|6Pcl|wH$lAi4-q1(RtON%C@Ppo
z)(RMpWD>eX+03S{W|xp7Sy_0}Ncq=WC$dOXg-nJ`2MPq54oJ1A8PZ$Bcd^;R?13La
zQvog6PnZS*GE5SXu@2!UgI6E_(uS1#R-m_Ll%$!OztP7se1XZnvxiyJ1n-vY&fhiu
zW-~g6%;TjaRTrwu(UOuo(h>GylRu$a6rRhOzp_yW-8khUA-H24{UXFmR%QMGPcwGi
z9wv8one&_Xfn{q&UjNiKh8O_gilm}_v0it`Ev8^>CSSCecQNgPE8YM*GwqbhAPE|C
z4xNydL*Z(^)9T3&F`6<_nTu$!Yy=e1)J6IpI(+@BM<NrtHVb*xWF3NQ54`Q(3|?OW
z<EGFxjv%$oK<7p@hZpZ?XdOH3nPBpjBW)yRDOF8RkC@KgFT|-s@Fx4@7As^iQ7*=-
zEb?tuG+3{vs6YNSk`5*&j?2&RfHFK}IsEs6(VTyVK6}H{12ViQ6Z6d5z!bM+YYEIn
zhk7aI<vlQ`;-)5^)=D7~mb#IP_DN<Kul)_wZ$AP54W0%Q!xwvZ^B@sesfA=FAn~xa
zE?(L0Z|+o=U6l@?4Qy92muPdMzJ*H<x!!d!G@PtKX-5x9LYT0SWimSKcb-Z>D2q8p
zwbJni{y+QR9nFD`7XPh}Xb}E43QYq?oBvfAyhQEKX_FP@5Azplq&-3gmn+`J4SFh*
z_Qs`Wil&RSYloIJn}M;MrO|4F80CDg_l+16*rL((1%5bz_wK2eZ=!|=DY+0LG#Wg4
zPFyysd4upwgO_gIolxSf{OO3``&+n{ELr<BSx-kNo-gW}Cx*mBV^TsDBClIo=@AYT
z#6t{}#?<+kO{?E|z;F^2Hz6_3T;Lc?qOvVKC@K|DvsP}LPeY<~A^ToBQBgiW0hv^M
zP*L*SN7_jOgUo?-MhWd9J&}u)EOM(JBbNP;7<&?;AF=<5gMNSu2z6~_>uJqTyQg+l
zSQU+*)ld-4T3s?Vz+He4(h!-#$pHz(&CSgh3=SgUQ-cAnSz6!wfy^<JHA|mKAXfb~
zbLJv@T>@(cKwLH=y&go>fq}|IchVEqVq)c`YO1f6=Sr=~CgB8$IuIa$2|STJeuInP
zH5U|%^}Hte;qkZK3NaPI%&rI6wtDYE%y5R0wNcw<r-=<ct*@uMeNi=ral$=wL?KgD
zC^J&242k;(hy1nQXMuwQXk*ol7hx5VDnE8T8p@H);33!^s)f)ItBIVXF+U+&5zf}h
zpA?ejK94)bI1yFp;Rh{$Oaai70Qw}JIuisBMhACkuGq1w0Y5eFTwe3{E85|#pX+`W
z%r>q%89z9R6$_%t-lBvk^Y~<K3HW_$oy?j!FwtERa4NW94w^NJ7<b-F0{V9^(_7|`
zB!2;3hka)eF3L=S0j(Y4ha#sRT7>IfIYnp!Gy4B9_KiWJ#qfS>+qP}ncX8LYZQHhO
z+xG5V+qP}1+fMstUOVk;KIG&~&YYZ?WRjeJewZqx1dSTl#(BDkw$Feid@Chsk};-3
zaZ?tCipYLSs~ypPY*`b)cn*qX3vtL(<EgG&faiRS8GeP>$HXt1D}57~EFGl5J=~=S
zF$XW<`0HYfxe{z;M6KOf$8vBWhgU9o&{G_r@@%af>ND~>^;!r_1u8jQ16)$Zk_Z<+
zh6psjMWT$BcJ|O);QRElaq+Mt3*ls#4TkQ-qBO;d_3>ep6c6ftO2@G#K}@)WEgvf{
z|E3Hopk52C63x2Gl>C^yZRuw)AK3xeV$e|gf?H+V3_xPs?-`xqKKNiZ@Y+U{@{r}@
zZA$ze9^%;*hk8|#wC*y{c~bL2L+Ks`uAEm86T4(E7Di^o5SQq{bqNP17t*u#u(S?P
zjOAi#SSXqwgq(;z+0R9NICe+8T51~xSkP<T#YlIkdUvob)LalJTTT$m6Y1>B$8}DG
z*eDCX4)JIRk`#5MzTM%KRP2F1+0~5Gd!^yBTQLQCXuy%$q>tE}LhFt<gpYI4W$o@V
z@)V=B+AMS}PKo^>wsOvDAxnkV3_->=S3|UKSWyMMfzx?w6~8$c8wGW?7H5QRdfoSU
zqjASFjypkj2{=GIGY8aDOQL0GR(y8mjdwRE;BK6x1gJKH$OGVX!&NhvXetysz{|@d
zWw$v9TLm}E0<p8XnG-D722t(9jZqn}9YH9R)krE3P<#b;pe7hM34>I&UXjRVJTOG2
zqHGO<u9SA`Cb87=#G*$_Ew>}X_|9?BIXyMEH}iFJ`@+U^*}8ShaH(XuXP-B4y^1@-
z_k3An`m+nRIJ@-85wM)$nr!|vsN9QN6L5z-t(G}`86kX#koS+>^ejY5n3XfYqr+9@
z++!7Tc=2#Jikq}pp*G=2X^ijdNR?$*KVCLaljA&lS%G{^SsPvzuC39Wu5Ej3Vq3T}
zMR4_bL!VoX&VDl{-vf$`NL^?eJ~&G_f0q)%m4EN!yN2e}E5?BUq7&piF$|t&1S-)E
zJ~Sp^gH-D-)M=6<^z922F0am&gQ%PjDi5%!*)6{e)Mh~c^o5=vC9<Z~Ar;-llv8YD
zPOht3Ax8!?mLv#Gb|msC+9Q$-XBj2GR>EoOMrUxVy3u|E?c|y4age*}A95J~>zq}Y
zRz3-ucB!f}QcYE)xG@>wGP8XEZ7&@}@Vsa~sLMq8-}fBJcbSW-TKK%Hrl#y!-#xB9
zRJ9g;)hg?GdNdd<8H`GL<WDO3GRjf}iIP6;#*`y_wt{4KR-o#>=|@H|pC`0M>jF^!
zi0OjGdZCSLn9G{^;u|el0%}&Qt;Li++)F1zj2iMVw(7ia!!)hO^WD$;r3+wh5!DBW
z9RQp|4eW-aG|k+<*a0q=wTRsoTdMIQRLC-Jfi}!{o8#MJ!prF_PsJ}Z&i0^gStbZr
zUoz{K-_ZYgF&n+(dNc+F06_Ycog@6elbiG%%pDEQjs6Q|-YHd0+kG(<AH1IkO8sI4
z&R3)a(kU(^QYTbML8zk6^0+v9;oIfa6y6Y#$}8KO^hoQlYzpjR1$+i((;mlc+n5pX
zUOieV<f%L1=pbyIL=rhTJN^iK<R2f=`tpmDkrJD%y|sv4d+C8Qr!d=uQ*3+6Yhx!=
zQgiH=007xEp$Kvk(y<UX>mvXfSnt#z$~!wW50ZYT5eb5nTS8<ulDatyLoak=H*5ZV
zh5`;L$h3TF{vj!Tf;65sl9E;UdhF_hzE<JX-D+9Y&6Xx2>o%7#;?Q+~7C=1y08$KQ
zf>ze9Yk08*K{}~I8bHIG-1&d5Oy}ZxIeM7^>k;!DU&;$D8`j(bAoDC{;$z)pPAutC
zo}w%M1r$@pdbWC?njG41QXcs%g;B$pw4jp^Iny=6t<25#l&RS05&QIa`sF|H%hOyM
z(7vj2jvTL!3?iczY1UuR0`iU?Un_cy!1Adxt7Y*D@XJ1WNCMU`i%~80wM%PD>rAu|
zyy4Zuq5p!^nU4mMv!fGX(OuQUWZ3V+p3W8w>H(mw_XJ-3&mK!w@blaq*<QIa+0%EQ
z+2j0+_<OJ>Gtco`yQ!sAJqIslh$}0f-@p2uEY9FfbdAG?+*rC41#EAhOnB1s?_jOw
zo!aaUCSTAf^VO^1#2UwN1=?U2l`R<RJeV<G_G)*q;cCTuW9Q7e^bRN+X<<09oggq<
z+gdNu0|qEmaiVH00wj1cI%YafDr+6ObUIiB@HhW)DCW1=h8bOq1RZ@?F>vlG-|>h*
z3gIJZqw)(2O0oMW@q!0vG0icZDaoI()-6CyE?VlDDywBL#44w$17E1<le5-6P*o`c
zGe1&YH^G@I*_*O*pxrBKX`iW0%G!}Ti<ZN7unoN1@hwAkIuCSE$ey<(4nd;$4D9tq
zBFw|*$2WmYK=TP-$n{WPh;Kd$&)H4qHP*Qc2=VdLa>;aBvC3)+30RqR?n9JykDbtW
zJh=~mgTb6*1<krGrQ5C4-;{}?%`2lNb7ir2Q;^)7jW10|L1UJJ_LZ^_(AeW2ML)0Z
zf=l`<bKl+wgRbS5;(2#~fRN0fVG`zj$6yg94ThEGC2<A7$O-$k7>UM43m?}Gbq8pa
zlK_VJRbHxdnV|JIcY=-3Yz{C25K-xZdTv|I7;*}gjWA)><Vk{FOVM4rZ;mmzk_abb
z-gBiKRUEe;td*g?m`4mvD^a%Xh+$s&K<qPm2bO1U`b==4&?tevz3P_EdE^9rjcrX?
zb*Uw?%I$GNE!*46-c?J(6b73rYO=v_XjOdPeZ>^G^+$u}49XH5t|#DjqNLNVWluz4
zbrlTPj2;#=1Y@3PNwL+hM^kM=!#@0y%Zt-DEy<ABMuBCRAbA*-0*PH6Kg+FyE0flp
zgx#vHLQh(g4a;x7VdXa{jfo-o5Gfi3+`k<t<*Z2LLj=y~<w<V1d>~ZEtz?8c>>3`)
z*Oz+sFWP`!v<N`x0W911OX77|)iOX$_&wK}^$gWg>J+7Bjzs(e?x!1RP1<o+y%>nc
ziK8GnH_03y+I#dwy*aXwWDDZud63V!!BZF18q${NVpC}e7Ue;!ck>tL<c<0`bQZsY
zD>uGtGHj0n-^hfLz~dr!^FM9X?sYy9I!)0gKFDAB4Pt{iJo7FNRY4V5DqhATy1_RI
z^jT;f<XsJtJPk+H8INAxx;$@6f#V(5PkJQJg)h&j{G3_iB9EsDDUhr1z~npL2MM@X
zZBs7~*p~iPTKg3BpYXsmeX#E9_U)_atK*v0a@&O*=Ap|wj;u}MPOZg7bkh+W{DY@F
zeuW-_C3=-Z)7_sP`vLv$^Y^ci*l+spvZ4Q@@IN#B|NH!HYvs<!%)m<jA1Vk|Qe|q+
zZqNXLAg90p0RJQV&kF-q4IZlyAOJw(Z#CtA{bB=Wb1Ne{a~l)e|7b$z|7;>TLECbG
z0VSk%s+OWak3I_9aXuP#d3X}_op8zs{jX%Tb5gUVL^Z{}uPzg6dh~3vR@2O%T=qSj
z4W@87{n%QTba5*wRZfEKf8uT){-*EXaxw5z3s+ZLQ@l}0+N$Q&LeH4BF63B2qG%{I
z>(pDk0K}IDJ8pvuitU=SaiSOC5++<bYn65xRMpcMA1#7eetD{wdZ=o24dlY%!T7%(
zd*fo*efva$4C&d(j|SMpMB7#qFw?q*JHlxQGpa|J{dx3}h-x0O6+!c51_)K(H&Rr{
zb{dL^4OUyVO$P!OtOs>38q^}niSNz6ug#U;H2I>UKhVW4di(K5@53L9kiGlH3B%d<
z+-qgb1R?G^WM>BP418Ut>evY*A!TUpV+F5j--#>7`g#6w+lPZei^q&<GqZ_SyE%X^
zp$*KR|C<noUYVpQ85saTYs~*wC)xeaVL)g2|LUYmEo;XOv4rm$T}CNY9EB2!E<_OG
zv1Xl-?fY!QPNGr;&RkVc7%-4&f<91zvGvuDjhnM{KnTCQ%hf+iS4$O=4IB%<>1HeA
z?(7bc+a&g3$~wMkKSDi(lfNH6wL1pXvmJ5m=*aQ8V)RG+HiCCu#a<_g`I$myEw(Ao
zh(AIBWrZjU5OL2V$1XmZ$Y_HG1+-GbOo4T1n1y5BuW&4?UiY3>^P`n!g1Utkbgz8B
z$Vff`ifr4lzFaMVF{hT@eBV^7F0&|t)FE1oc+Y3}KJOmz64=X8s_fREfVAOc29Mv}
z{;dd)`oS8|N?$=m6v?WRWaK^I4YfM5(n8V4)x*Qlk$J*Cq(R!$y`D=s^6!(qiGA~5
zKpzh$C;BnB4p>lb`bq|w0QJv0W)+gP3ht7*ocnzj#Uqy1OdL{m(uhe}S$201%k^O|
zwAh%Kij8Op(SJ1$Bt{1Z9@kV7j^8z15oA_0r7`YLK2Uf@q;46>V^o21ZkOnn9Aj(?
z#Ls87OmCrW6>3xsXK<ip2H5;C2^J16aTxV~EBGk2iI(|%4LfZ417o%k&3<S?;kxX%
z0|JQaoT0a@TEN^$w^c7y!#O8g0srOLe)if9VNbYw4zHduN_`oCPL1DRL0Kd<a>$aJ
zjM=KF_>h*+py1dM@ksA8eyCXA(h~Ypv<Ca#`x){{xMU;SL7LTm0cmJ%1&_$ucQp5{
zdFdP)hx;d4EA&R(8$`>lWh?DY$~UZ|@lo3SN(dYT(r{n={i7b_bJXkpbpJ-5;P31H
zeShbxqs{kGOOB;hDcGWYF%xmn%Z74wMxfZ6btOzOr1uz`@ikgtJv<Y`mq4*3R*NOC
za#L#-6-_Q~(JG|0LG<e<HTUXwnvaSf8$)pPYxu*sk)UA4EL^plz6&^CR599bq%Y)C
zNDvCT9si2FZM-A9eUZw)w(K^W!^V3*d|>Z+XVm3x*k$~Ze#aL<hWwmQJnpU5=x=;-
zGWqccRN2_)#NRz|T~(L$XNvjWb7t2V^sGRI+@Zo>kKuO^6o9A&Xdc%-(7q;!M==;;
z$e{w4N?i)7+4RjInS8_jjkRW<->PXfPtLM}>Q7A2x@yj~(Kl;P5`zm9qNo03aF<nM
zKz$9vTm^q8hq6ixm=cg*2Kk$wR&4?``JQ<peW7b@DM|52K9Nm0%PLN7Q+(?Mml^sJ
z+J$Jl{|Ock+JoMU+`S5lV(2(P94`L3*8_!&xT&Ww+pFI&(9ViG+nnhI?W*v01Hw!z
z%UC=P89IYFxXcOj_wnwmyD#jRWS2*jEyw_-4_V#{Mp*=SiGW`dl3&6WFkw(L8HW+3
z$@O2TV;><Y#JcaAiiQ56Bc_491dW0R;7f9nyQI_DsOGVSe#TB#(Y{6>CMskUTRYm3
zO=t!d*c5`LoWg}9<@{;TBx1Z;Q0Y7IVWcQCCe010yjXmpJ$Edf@9g`_p$5X*IQs%t
z!Q(kp6EZtAA|h6guiX6^YE!hG*-qy}UM5j*h*5qgkZFdH^iB%X&S>BT$xcd!EK7!M
zh0&FwbZEq3*gXsdMjAl&7;||ffhDiuP9*Fb+$npDEYnd;Sdsz&{qEks;zevtbHJ-h
zC`m}sA_h>(Sunjao|+4ZXP21p!^-~Ug*-Ti;y{7eg$N<cftCdFX%KYd@H7y2b1HvU
z=wd{h%0wP6`5w70bgd(i^+rh+l=&ogzxL$GyT0~!1_FY+g|(__aNPuxM4jL!_NMmd
z>&eu$!z6Eh!ymvakyBdg_`a<8=sQ{z$<Xct4VO{yg-vqETq_5M@jo;2l>G!wHTOVo
zdl_&+b-I#0e`Zwr3H!Ue?L^<`(&GlQ=eQ)aDF~HC@u<WG(jl$~uUEO~sgu(pE<wm(
zJi-|aNF59ia7}hpXr609_ou~*{&24@CLjeD9ZW%6!RsSmMMtM_w#0hxE4mOJz_=?R
zh(e+L!KaMB`Y3RCPT{?(FR6xZmvl)E3|<k~B)W>@5*${x5v-WE^_fs~JIv(RV>}{|
z!#l(A!Xx(s=t6k|(*ZFNEpOwQjr<&j|I&OFNKez{``GhD+NLZ^!BT!?wHO~ybD-vM
z)1V(c1pP~jdURHq+vH#KAavT4yRev4_q?dLBPPNBf})M-Y&|y%<GjmM-a-|HfM+E4
zk67Uah|r*PxcBU0b4P&rd$R%)uL3ClZz^~B&~nT4`Rv9-kp(ERVwo|WvJ-*&0%s~r
z2I7Yw&JS=Jfar|MxES*@VEQLG6RR1emkwdGB%Gv6@EGd=(_6m4vJ6uGWOG=4o_k;$
z?E!yVD-xzV9A-g@q|drB`P#HN{HU0Q#vVCkIcsd|8ux$>(jqOeD#0Cs4iF2wi?rI~
zaTna1f*S{kS4NRz#i9s--<}-h(avoJs@I%SM<q@LHRok03TRQryYw(b0O`fG2~%q_
zRCjZ#FdnkSNa_>fmoR~8XgQJT4r8<maF0wxPH{2UUs4pXc_oyC1IS0*KYd_mnIL+y
z&XrBwE&}tNtU0csPUICq<005-`i1NnJqmI`fR<+TtVRF+`b!#<31f+N`pPwLgYV}t
z8qP4Or&Fj3HPB;2P!_kraYHdPpM^f7DIg=!sncQRQ3%S7$m*rRstcq+8&8fdwyb8%
zv-vkBoJ+b$$U=G(=~AM~ftTCf?9<4TJ{`5N*$FUm;o7&-5sE|gmpzj+T#&6gi1?Mm
zl-oB%B&(+AQfXRPq#2^2zG=i$IiuwpO3}4U*M0ZMKxH9M*9i*JaRp!Y0dmz#ra37K
zfj-H{{>fFob**&YSVz5Ef9VQw<hs-MW5UKm9Ro`jU{QEnxjT&rI7D@kF|8jzh!YkI
zbH2QrKu@j3?{@QkdS8Q=t-<4ezZ=mV{$@$5WBj<$W@UO_+mVZ%m6i66>&=<1eZ*{@
z8w|Cos^s<sD&U#SNMs8cLwuGddM0nS<?wkr^tAf8ybIdu)dh~Z7^5y9qtDgh^}NIS
z)u<!Qe-@*sE3@dZ{CY^G|6bRv9;Tz~8uPOxADL*WactpVI&9GV<k+abLRnTDH$bs4
zohk(i#v5<S4qt?gY}_ea9|CI_b<UolchEjbY_0}+bNW-c%U777?B@x3NhnYXY^Dhg
zc!Dc1!U1vW0tk<9G6$H|DH9JXsHk(`+tbwXJVQ{lLf>t#E2Ky{bfF=qz=U1}&4w9U
zOU|loiZzWBLTvf?>{mV5Hy_q9`>b!4paH+m2_sW*A^58to%rc7dyPB$QL2R#lG7^t
zc2`E6o?=b5RQh?(Z7;<;E2iV!X)>Y)L<L4h2BW6`(gX*E3Orf%;bZK4&!E!4KCMA~
zyd737ZovZD=}QPNrn`yp&2Dj{SmtdpW1kyi)TR7+R?BT!&Ge$;K3M6NJJf4=`++nq
zHO$Vpmew$^=}o8EJCYVD<E5D=4WGCI&xn_iaS`nAZSj{XZ@?;KvK6bUh*6qH&+wDv
zApJDGO$>n@!k`h8>4LBlv%w;Z;(k|uco)*sjWG$}uLiG9xe+|w>buN+i;AC#=h2<e
z6Lkzn|7oCD7XknuX5v^4J`Lq!<>VHXJ6~S^8$)yGfMsD`QSmp|@_kh&LQ-tuxoCr1
zpcQUCojNHA57&9LZVURkVP~~rWz)47!Ants&T(cnX?3IKzxZPe*rf=JsiP405d;Ek
zZ)OARirVsOQGAL@D5>=6m~*Op1k1xlLgSq3Efi1e?*Way13af68U`DTa00`Yw&J!;
z9jonjHwgBajX|nr$!J5tm%auOL0Z+;e^m8vHQqRW1cQ;)H$`AW%Ws@(!@zPLK5z%_
z0w=hOjk6p@;s|1eJf^Nv<<;UzJ~60-@N|#1@c2TM6oA>XtL*5L@7R1TV|(wr^GJUz
z?>@YrWj{(!wzBtRuNt2T>ws@&Wi^pn@;@>0f@Gg#m>|r7?&Ivc4$Bq^K+4dbJ_=ZR
z<5BCigBpOuj3Fl%^-6MBEwJB{Gq$-=3Ma*v#g|4QMD_lCN;rSZEtQ2VL{BQ0&E2S0
z49~Fh;vjKNIiB*P&Q*{XpT#?Ejsj_n(!Hg0Oc<eA!;D5UQB5LQ)pX|P8Mm??bNiZS
zoLhK@3bJY@CSW19R}8fjpF>t&NvRJ_e5LCuK&qj%YGajEHBTvgHybulAIdov&IZrK
zOTzCT>9U^-J7=LXIWLI{_CX~|hMU0ZOmg{@yb)~e<V9|WXL)Um;WFUIzK;oZ<>LN3
z*6~2l3{Aw@zf=7RR|U5MIXsr_(9MCFYp~heimqm88CV^+0NuA>?|q(d)y0*QwfsWD
zJ?cm<)I3*HfH5Y|Tu-cW>2EwAo^EG5PUZw5JTNNOR);nJqdyk~R?Dj`qlt9JUrGSN
zRKCJ%Ox8l_+QrnX$@(4RM*J{=%%-F6e4l?78mQQ{u;{{fk^Hk6O~D?M`*K9m44@(w
zIc8^cMd>Kc+w^Dpz)wMSH+2oe2lKNGG8(=?(Hy<$+n;V`(eLf~6UTX|NTv^=7PV<f
z*QWA_S6@P_Lx{K_{@t%WWV?uY4{<~p(LOf33FVP~tlXUc^Yb#8#_Rg#9amMApU3lV
zCD;1m+`=KR6(Bez8=L^y9D6HS_jc78O!XQI%>gqE6YOlD-&Zu03xnYTLv&sJp*#*9
z0nUY?r-P=Y8rayrbLYEO9sj4djM<g=c{}W(bGe{}RV@;)OwiJ-R5h?Aznb^dXJ|d7
z<t0zX68`hYN?)pk3R=^v(2e$T%PqVf$<WxcO8az}ttVT%A6m8OT-(c#tBJq!I$2nS
z*=R}Fh1qCF9d`m!Lw7V!&520$kD6Zu*=22Q=~3Jk%#!xTs(DBjf5Ew!Sy`pczZ~s3
z*lcbsrwLJ+GRu`ssuX8Nj>K*cS^YXJn1t?%2CRYE@^#Wg7O>8Kf+GZtP=+)W@ZiF8
z&geq*hY^*nh~Cf$n;{7ihL72*s_bgv#^-#G?lqS>t=d*z=_F@z`Deg_zI{GkmDrp>
zamJgX<&H#+4}j(fyh@qat-_OC%qi~j=If$mzC}oTlziOcuGs_Kbx3<B@_*)BgwJnp
z^ToPV9i#>d1MX$)K+G7Y(Poae9>guqvw4uio1tfEH2rEH48m;fJBIcdc##ilylACM
zhW1La#hrKfa|WC+HqU)mo&D8#ZH{&RhQ7wYBX6$2Cp)lN!mwFeanjO;p7akf*}mm$
zGkVMInH$ZXx6$p&yx{B_SA9J#7sR1_^j9DA+X(K96^VOK8p7Is+NNeJD{AV%e#;1X
zyZ~nKfLscOMzwzgSMYvXA2Y1BEF0jTGO~8&Ej84;XP$3%A}y2znm;lrD~q9S53eXc
zq`1^Rgle(Xwp5mI8*G=;rZQwJ1S=O<&2vxbqRp09Z8Nu1Ee2s8d)AR-uD!2h<P;~d
zG8l^UCv--6x7<3&Ka}qO%%ii2l#I{dE<mH?U2%2O(+q@m@7`XN?@UZ=e+ixET+jVk
zoa$~e{a3=Z>=mHgvh-@%m(63<QT~M%s(B#;ZPhzrfC;SkafLd839xZfsg|SE)&Bz0
z4H1YerF71^nlw%JCd^f2rDXq-_LWpT#y#g@Iom()aZRw06(A|mK|--@3sQTIZa8vy
z_GC?|ONzWRHnDX-vv3=CZ?7gaME+Q+G(w`S^uh;OAx3hexlQtjb=ck!Q*qriZrS+9
zsk1Q50m+^ALCn<bwqHH4v|U(w1wB7ZxoUQk1U2@|;UyX&eOkXs3Ml)4e{1R=W#`T;
zpLr{N#$0;Ol>1z3Z6lx>QxKccMZH?#BzN;_jq}cJp;7>_t>mHdX8f*s1E8ar=ZbXr
zUiV}o9pEhMJn>Us&Eb8zgtxC(_n6cZ()r;D)3b0<F3MP9(l*1JXo#QAbO$@hhvzl_
z_NFvg9x3<g_Jw2sZqsEh+hf<MqgCfk*XU@d+G=yOxD#cn?b1i?*>?G94b9fHN~`S?
zsFAyTr`T*yf=+;})1KD0Zi<i`I_IYWscYE{BKA3(bF@(L`4a6FT7OLgRE2D9Ay;ht
zqOxZB-u*B5be%wMV>Gkn9S|OsjmA$f)ajwu5cmTg=Y<5E^wQGvzymV)*nx0a@hPE!
zv8G;OPa~5X48)F24T*r?V%u;z%t;E-a-HJTl6Kk4vGOtn&r@M`I{<;wH-P`b@5NAW
zWE-1gfv}@w@{(|&7~bV9=E9+r`CI;bt6ZFisZ>gRVGh;m%SaV3z$T^A^V%sfS0cN4
z13Z_9!`v&iBt<+w7apPrI)BqWa^J<gq(~I}<Jb;!h0nDRICllMN0II+z5{7?({}pK
zzLk8e+y8>Oq7d8LmfHMh^@UsZEJAtb3Wki)^(~#AwRu|OYrO4*f%`&9ZjF6*rgbVr
z)t2F57m$?fIDKB#4SfyX+`Q1{1G(oxkn@Jx0Nu5+@kRMro%}!px#P?f9Jz?q`bekx
z{O?xnMg?EI7p*S-(@`ZkJso|n?w!)BI_0ne<YTbUJcKv6hSbmf*h6V;u2#?W_Y7qC
zdo03xZ6~$-vah;Ie^t1?W?Vit@D-*JS>Qo?NUH3#a<8xq{PpUaQV*g0=XzuqKc9D3
z+Q!7+(OC~Bhs)q*HM*$a1F>rZ{r2MlJ6_kb^_0Cfo1nFJY>nYfhZE?HY{P8_>y<$o
zL2=?}Q$}43;_R>3F85O~gS{zqN1B!^(L)YLYNQy{Y1ow)G2%fMtC`zR3WkBc2%!=9
zg3%}95vP>7O&Bbt9@93H(X*hED~D7~m0eIDBfG&Sv~Pv0ANzIg2BRs~1Z|HG3f-`%
z(`uzFn7??u?Lo4XQof{rPxHxnovgaEFk$bh8i-q+#hCYF`mIN_UpFCw7*BAt7;*e)
zVGLO^JjL|D#hRS5L=n;kv_pm+@Fr7J(A)I;u$AHmwKtAi_BasPv)vB?LwQg9P3cZt
zWTN>DWhP^U#f-3X{A)+;aR(t_dk~}y_Z((ia0c<B2WDeF`x*r5&ELHkb;UwXXr(P7
zBZAdf%J?8TM8YoCwO)_s!wUKug>5-?*Y*4x?SR>LQ;_L`I@L0Ug<ex4n}!d34m%vF
zStK$qam8_G>@Q~_@{m%@v81kPy%!h)IMLBKpsVk!%D`Py0ntM8Pt>Jm*wLlv0bCYP
z<pakN1`bQGL7=&TGz(_6JaQn3{g!VTFpkUcG4Pzm9X>^kpf>8!VupZ!4GGD$xbl^H
z`!s1z@|oeSMu!`tNB85_=cDrCn<;5h!CYzg-26?`boA^sIS>+TGg}6MT@l}MXeZl8
zQu{ibWMbr@PqH1E!&0U&`<{X?u<=}RCW7UHPdrl$Y1)uE8G1oi^+oV74nE@I^n*+4
zQg*@M-57FbzTW=UI67Xx60Sx>YYBz`i)Ln$alp;%TMvqn<PKGaCM{Ce{#t;bgNj#=
zh*g7!6G!Y(FIw7_YT`}AI7f$OL_B3OqL74{HCR<^C~yC?xYBVs;GCfPB#(hHr4Ugr
zeHlamo`QrK9)e*&0*!{qtD55`NXZq6054k}f!-UuS<vzFHZpTJlBhZ$Jp*-e^DZqZ
z{~UduILWTyOt$vIgckYW)9D)w3>#6WBWFDaJ5iHy(mGlK+{|F*zaRy22Ay{*=H(Wt
zD<*-%$ce;nalfHwC74$@;KN?<73e!oJ7uG?g8EJTag#|7pD$j7N_^MVUsYW7MS7cY
zn)T+$b2~l`ep2?34NZqZ`!iBy`Iz>c2<&qVqfbG407oA^pWyhWlTb{6wdA;d5SNSN
zG$43_R_AF~WLKY0BNVu3Z?r6f3EPau^c-UFb~x&3cQ`iSjUT6xuv|YJgdqvluC8QH
zcwuBl-~4@enmag`d-<7|N>|xwDHvSj*A-F)JAX{)(A+;-G*v3{ngsFVdgX<0L5ZOn
zZO)h|EZxX75)&}4w)U@kyrCP#VB4$Hja8*$gJ%CZ_ewVMMn{|1x2MaSyjiOnk>&b^
zRux^dXJ@<1+xb;;AKV5#_x<f>ZRS^zg9}v*49waXw=AIH&w$GPgv1^l-M?^asfu_}
zwsayT+dA6nAeZL$Sw$OpoGzs1smLpEdJW6%4Ephc(n|Y$+c$l!hJ4-XRGROSt0JIV
zKP*QuJx8n}6hs0dz(hq4cYLBStjz1?!*%I$G-q0ghXTh5FccQ-LKO!*B~a(=Yi+38
zKdzY2votU!6>(w&3mHY83kBx|m8SDtWf5L!dTA?TP`eeZmJYzujkiiW>;962i8O`o
zD6qHAV!uHj@gq%4BmnCYA4w5amuVu$^PYcN<*T?a44EVa69UN#LeS(y7@L`@)_rwM
zgb`W;CAna`gsPD=yRKNf))v#<k*nS29Z&nbyEar?X((w9DZ>+CNDk{AV|++sB-j!s
z93lB2{bzm7)lv0g3REz&>X`tS-bl$9v%<#Zc{GgdPll4xI!#70=EJUgXN)1o4YL|&
zR?WAFp=6P<8db_>g@xnIExQ(!&iASjV$|wZ%wX6I7kfX_oPAk@XuQ{4phO)T6%>dS
z67-onI=??d3dBLpLhRI{u*CtN1C@xM&LF*(l;}_iNz><&M+Vz}OQmtgi_2)0FEF&F
zma5=cg(^Ho`AjX?kEXC_W0L|+f4=c8zV&ZMZUR2`mmacLb!qWVwg&H%)+<j`ZQ+yx
zp#SFDH9)X+7AVM2B8H&I2r7vyTg`#+5nHU1^;1Q_DWe$-jg*|Pm!M0=2t$C2POc+_
z7l@2PrB~Z&lca;uO1K9#k|lLa#v{14lfrB)6T0rn{8@`$5UUd9vOFgWRvS|xa@H70
zb8@7stdOA7MfO6uF)r;Q-(T4Rq27aRm#-{u@Ta+xjxVClMpnWEQW{2b)nD8mS7Hvt
zoL!>mr>pKf<CQe`exSsZeOLI@9FV0$1wBRVi7T2UWJn6gPMVxn4uioNA?@zbbQW|G
zS&*I}N^jwcj2aGRj3ww?pVSU0QePf5N+hj{A`eLcp%W$awC*v%_e>BBAwtYQz{3+X
zh2Ub)$5jA!Ed~${MqJf_nT#L`r->*l2=`%Q(mh1-M<3vj0KP3A?K+PeU~2;Um*su&
za8p~`>%I*av~x*E1h{~lUnU48L#9mbHv$Gss@@o607x64W(y)@3%OsSv<TSeG<|S*
zbv4P1eI1U5Ob{EKYi~RP53%c8*g}Hf22ba4zHr_O=8R%IE52PX8TX_Y7TeX^Wm_Hc
z)k*D#G!0~X)#7pAQ!f;E-4I26)Tc{HB6LAj3Cp;Hy-V4et!>A@FCuL<6bm5C6IUn@
zHc@0)WF&_$w1?e7xEwT3&{!VXV4~SL$Hx&r9BoM|961_|(_!C0%#XlcR5z5_uNbzk
zq&iF7ZkE6t9k3fkQRF-qmTjVmnX2|j@;uL&0VzrR-sn6KTTzV0`aR#FQmi>-9M~D6
zT)vy67<3!2p@mWIPXR7L8J6;2=zT`@$3HEHLnI?Gg5po}K!4^X74nh!`TSoKHp9C$
zEZ}GaB=~LqDY7{Me+bs&bw+DeQk??Q1RAJe#t@#c7%RGM#G!zU4PiJW^;<;V6VpnC
znEQ#gY}hzin5U@pwOUie6o5M!6J`|LXYMm+9p7r#cK7MG7|epQiq1Q6Cfzx&H5Z<o
zA_Xz%QywB;h8S3nh%<;_N`{jp{Swd%tzQca&?;Lz=-bIqDI`gXQrz)(qLBvd0PX!!
z?iFA|DfDtO0Bb6bGh1ZP*w4BFu}<eU<r5DTrSp;o%TbX{L1SXxSzsUp^S;sb|8RyU
z{e$mmYJd$haFh`fv=Pu~gUxv^r#2-qkE2vy9bhA=ZXUWQF{1U~Eh810yJX3cUJtu-
zhh|Vmqf&WBL4iw-t4O2Vl%x{pK_ZfIUvwurf$AqE0QNW^2{$RnS`%Q_T8Pg$ph%2h
zBGdS#^+aSm<;AwgC5n)ZI|bP!G|T=ImyC6-fRlKiSH@Qw6r}1VQ%dw-5Jo=(#uA!?
z1=RR!wC|dbTa<HoDQ@GS6%oZHQI>ie?y#&(x<c}A3IH30$zi>p7BrvVEdgd5xlwVT
zkFv>p+dQ%1jzL4>msM$D<_A|Y(9?aTBR&_60Ouqf0RyiFVUk5AWV#nGEz-X-OR{J*
z+DzRaCUJ@&H)SG27?lArr)&{?Pd?}g*esF;L0=@OF$!)cL0K!cF3=&quDKXI4qAXK
zp}U|TWRzo6fYFaR62mgo_~(#Qgy3adx&Zc&zaLP}zq|o@pcQ@!P(zP^0=Ur`0>-!~
z*hR)C6#medQ2G`YF%2IOBVW7@Y=ptMpVuD6vr8uehXN=o4-{<WHZgk)ESlYM8irM|
z3-~hA2?lE)Qja+n<qj1H&f(;)D=1YJd+$T8hLRrVZwgv{AZXYK5Iuz-?dE{V1(@bV
zP#j1rk_5mWfHiBp5_9JPT3fslK`Tj;Hc4>agIi)BNrU)B9@o!7L<|rxG&QLIu2nuE
zg57mX!qBQ!o(pVnaXDCvIYqwT-3tzH)K>t6g#=Ajh&;;xs7uJVKV-1Ls#SQK!znuy
zQ<N~sDK`?``;jQ?J<gjm+uED6$J@QfUFFYr?NouAXH@B?JG8;~`F{6@y6x59uT{mZ
zt;^E07tCcJ{xiMG<CdS=2>J7o4|Uz<x*O5d5`(t$qPLeKZG3^95D;XSBuP$xw;d$y
zF!>U`jKb0$`+01!9iNO@v7``7(C~dNV0v#DQH%>mAqd=_=^vd9`-LF+t5&AYdZ`Xg
znogeE7Dek?#&9jt4pNWtCJY5Qmp(BAVQWoZ>A=Ow<-E0Oe)LjJs~aLIXUjq1z`M6W
zA3C_FM7}EgwwV#!8Cw1t_t9PO7e}YzlP5=yVb|=HGanUZ{B?t7V{aZ(IFd1^{Ijg(
zLV4iJS7i8?#x3I3pPCIk@q(*U_ODHAG<I=c>?*w6q18_$f40KhCr1Y~adGwu>w2E6
zIcvDFhAoVByU!A8CC)A?*Hf?1xIz?#80*jRp8i+(!GFKo8Gd>Gi;VG21<pt2D#q`>
z3i&Xx)!T{(tz2GN%-T~~^(+>--*nkMu*J#DlD)=QimC?(ClK%y#Ft3d7C3(?xWFi_
zM^E^{ZZD0!w|vw-7oMIbv_0B*Z0?wnPa3&VXvKn5+54lhyF1EG<J|rzrgu?Kfdqim
zKvmbC+8TCUaKaeJk?dO{Nr*1$6wxy-&Iintl<32*AqbFq92w)Xn|V%}Eo~1sFL8MY
z(Ws|Ak;FAXM#~U~^L8c4Egq-@8Mi8z0XKySfr7wE7Po@j%rHPkJ0Q_6oAWRd@iruq
zh7&d+5FSvOXgS>T@ll}X@BA${nx!P;<USM<*C%kczF)xgFBzFyqSZGWBdrbT5Ub9g
zIG5Wx&|y_*pzyTMr!fF$0)-ZEkI@{S9?yZvxxzJX?WU{!xPJzt0^rbd8C%JTM^G+Y
zzre%Sc)Jc=Ia{(w&KYsJ7;LmH4@ZXZPSvy^?|W*QtE|KQ7$eN)e}0&{#WVEvc_OM+
zo#WWJ*53Sne*X23XX9A9h5P2tSA$#Io%UaGv~B&;vO00TnCZsYRT?Y=vttHcbQHcm
zFxHVh5&2aOyE^Ihd5vuZolT*B?=pL`c;4LY<Km?ob)&Y@+y>j;Xxi?%Ff9Mr=Fkl7
zaqYUfE8$j?xyH44+5f?*tiFEuIXvz_cgzC!e*kB3%_aVB>HZkJmr|uyrDv~9r0IRL
zyL0k@N_HvqH~2Yfg*Tab(xL6q2)iO~rPS^9acuWtaOpM}S&DwDOEI-RNU!)J4XNGf
zac_DEqm*Gc)ZkbB99cVWxiIw?uN=~?_xx76vzgh6bxtW6ivh;t%i`Vo`r5Co&7qt0
z8p*Zg_4D`n8d-Yyw_}S3+`~EX{ybFqMOpF{Ol0ENsWD?oQ|j*CoONoT=EmdP(`Ep$
z@TS{6jQVxI&z!%l&7)CNTkF&7LEz?QL(|LYz3?y{*uJ2q)8k$50q1(>bnf`&ba(C8
z0gtAO_mOgX_q|TCLF)LdGn4xJxlQX1?Riu0bO%f4VQ2O)GB4uNjIdtDac_o)Blx`E
zUT+^~`{<rC1iD|}WAScppB61_{lnb!Bj-Sdf(<L5j+`BCpX`~XB_~qKG5=Q0n>_s9
z`@`m%X-6VBXMLJqAFf?>u5emBdOUnEJlR6^laJhd7<-nl&J=xaoSOdfapEsGe5J~w
zTeLW)L{5O3xqy8h$~8vcuvypIPW!5z4ZY4UG+-SD4wB>S$a`)^bW+pE)NE9-ITfyX
zw5O;K&ix#JvS-w)sHZjKwQM==t4;dD=oHMmtXt|@x$wBz0ec=}a(T<#FoFHNH+Fnq
zPNDaD{@K^Ls>NvFJI}me@720$U$w0FPd>^s(YG%u-09wodPo)T>@c<%;o7>fz_!Wc
z<-g8wK=rCj-f)F=F3Fv_efo}|Y-RJMSn0oeJ=HH2GGcCphfHi&w+$Lkz27_HXYSDy
zHrXD$t4sg*5ILRX?xOWN*3Q8d>deMJzc-<Xz8X>VXHA*iV7<a>>6Mw`c54#r#l6Me
z7=iA!FW?s4<<LV8YQ_D07|DM}@qcK;-bhHRGL-5duVnbJIGTE@43&lN+giOwaO9qv
ziRnxf&yMKMhMNxWt@n<?$nrcf!SPYSzebx49Km0!Q7PeKym$k!fj_R_BFsC%&4oI5
zUvY)H+)Bi`c(?P5y&74_+t6(l+<I2wUvIlyv-R!dy1AbS9$6Q`hJ9=OdAI$!b@hEs
z)%`LdosLDg`E2pUHBt&qdwbS&?D2H`IuCs;@$$5+oJ!YSVc$ufaQ}x?Y{=UsHT^8n
z)%ZNO-qe+&>AYaYV0d@E)+o;W>;qoW!Mdd|$%86e)1#pc;?_WX?$Xf_-)vabIk*Xx
z6wPUp;GOYUpXj^VKEv^}f43>iUVOn$>|ctetFwI3`sVIw=l=Besf2Hu^U}{5D&P0Q
z9Qm9!`R(BPV%!I==wP$_f?K<+PM>n|UE}ft|DVx<EBx>TXz;&|OsoI^jQ=%S@P7f(
zbj^*8joDdQ{@;MKYRz9j8VB6><tJ1Q_tk36l|<43hfHF&O{-^Sy4HsI{6^>55mSWp
z#`<`IcoLFlYxj;1fW)80$O{td5@(WqKnNfLiP=dX+t{bo3$y0%uQww7&4!Un2g23P
zWC(h?>9r4zcVRb3&t$SliWK2zDu`9^f0ECF5{NqyX9z}lX^uO{`6!AhA&Q8N{}7NV
zkS_ELHGwy_2n~N?6k43vX`+x)B>f!{g6Y>L;X#lsWvh^mLnk9sD*If8W$U>4)#L1F
z#h~vt<3!oRq4m&rD`6u7&_xpJ9vW9{w{^P4){T;e39Qd2NS<xy|Hb<8o7e<+MUtqG
zp?`e*(xL_-h6#)rqW0f<4Axf$G3gSF0dBv#yS*FwNG*DzN+_K|Wd~r9Q$#Msc2`R#
zlW7nc5ZD2;^BNhTz%RxKGeP4sU-!KHgjC|;wQ7<K+>x!CIO=#hNKc-TDFZNF8gim)
zM+*J5AZK#la+vgzrqR7Gr)5`hKQkgSo%q0E_2MG*N9l+FI`p&=C{u`}1@b#7U`vbu
zUR3gq>u(F(Pk$&eo}szuA97a5qmkE4@mErB*d}31_15~}L7h4;3t_Ar2wk*hBKIj_
z=vR&M?=?GK%PTlJtf^YkPsyLz0?;UJL|08+p?5Und`UrLCK9Ho&YA6q&3KUO`vd@=
z$d`A)r0W9oUy*otXxb?XBm_7SKV$S~^XzGWbR~-XZAeYP;t@JAC=@FDHZh1KCO28~
z>I8$A%FGxTGzIb=DJ?+#=eGake#MUm%_fwHvJ9#uA++6T!Po?heoW@Evv7d&{`HRr
zxA&{gQ#gbSM|5tSb2;CuI+Jf5XQ1Cztz63R+}2~sYSQ52Sp^raJOZT?$zaBD_RzkH
z*$I|T(Q8(*WZ}VT)d1igFg-yiN7qY%{os5qbqwanlZEED7WzCM=SBosoV;^%She6B
z9E3#j{Trx<^+jnw5(R(fC^A1H@_n*K{k#lYsB&RvhC6=(XkjO^2+iMyddCEns4~$K
zlD9EuXEn%-AJcr#0K-Z)N}L}l2p1D-ekIy!M#b(D2;fDPiV~+-4^;r`M>qX_H&Kt~
zZzDuJOc30azfTD5UheQ0>s$`hhJhOR4g<}|Jn7z&Cg@RXQZvRlKLUL9^ZV;!aBiLG
z%Ut?q=j;1;Pz{sXm%I~4?d>C|%F=w!cfD_?;fhezR{Y?^jFP<27ban~+wJFk(9*@l
zWw~KQIH5>`PMp@NUb)0$e`a-u3!#ZYxitIYqPO?!_5HnLB8S&-ZQ=~_=9*WZD5jsx
zT5{wTo|rPXat+7&h8J;fF*kp67Fr>#pWc`W_A_&D-^mufq}Z=!*6ADP-Eey#TAhot
zMv>vH7|u2i1o1V6Z~kty=pgGeQl{_`%!-d!j7chXO_huwpU~+h9E-g3^Gn-w$-0>f
zH~8A+^4H;xURTJl)v};(GVJ#ZA5OIzj-EBPzXq4+g{4_!IDC;%jd;z4MwB0m`W@nw
zb9btD+cMZXk~{ChQR(Su0(e`Qjs~X;39jRI0^NiIZU65_vl%ykXBUsJ<Ja*Oy=m<>
z5b9Qy=O;(I*UQ}As%7cQ9YM_)e$~oQ4s6yS{f-P*<u@&$BLug8wkF7c7W0y#1<T6=
zy2A(&=P+xa^Lqc5OqUIB^SjDV`IgTdU-$+tfvawl?RwczJ&^BKK@1WRa?*eUCH*?V
zQOkxZlTK5r0p?Jqi?-q!j{3#N1=h|lxM{|`<fOrR{cszrkf!rzQAiyXk$!!lh0Tg>
z&V+EdSEWW>6UFZ`w~9K19|2Q6();QD2n6f95uCEv?06O?lOOn002-e$#Wnjyns^ln
zsY5X=#A#l%lliHzV|v}+&VviEU^xJV0`ZDbE*Y!Xh3^~<>u3x>I&DDZpqBSiQpUIC
zm8FBL1T33qUpCPp@RKDZq_*w|ij4suzJ?GooWm*5aC5HS1*cyHEhUkgJ%>rHpJ=sj
z*!)y*ANVMx=5tcder`ia3u-;hpjCQ?H@)u|u$6OdQKN<zb8xrnY0t_4*EW;Om=8k@
zgpFU{C7UpIS3|WixiuIRO`^6w74xj*zNoM%@aqk^o2p2^hc)XM+PEG|kBz<RoIHDD
zG`ArqwdzA1znFEean-9~M0JbzXdpve4PK1^4hupXOd(cgW<(`-i0$*_b_dXu2o|S9
zz;KXl&ei^=NZS}unJjPt6y(|t3S)94&YY26a|CRyCf>fE>a<I2M7b=FoArH;gW2j&
zIEq{w2+r+^N^60?U|_h$*)~Cp_?F}j*qzxX?{s!B0fPv**X)v_1SXAdP<Idt<Rz%n
zV=JZ%EIzw-)4`<u#vp&-VZ1M{;9PljAb%Q+EinXX)iMJ$Qbn@qP(XR5_;MerG&G&$
z$m9BzO}2JAPBxMW_1P~A?Hto;d7%>wqS=(;rKPefYpQ73b@>{lpeO%^DSb>m5+CO=
zc^FeSaro_#O$L(Lvy>1}F^$piH3g9wtbw45#Ujx-MhiQc#l-@c`cttFbz<w1&!*TL
zkkQ1#*ycBYCi{@aJ6Ob3h(BZT%{!<zm1a=Mb7a;(xx8SSmRUt@<^`s}>>|9fS|dG<
z^-?x)mA=`<WNEpXXlu`%Y_5IK!da)<=IAmBTdz^u52nawHtG!;lVXNp4Vp^Y55z%4
zPz%&(r3Nqp;#46Z9Z6cG#C2>Tum&!A-m@<58cVIFqbJ^3R|v#iW7tYEh^;1o@k1}&
z+i(7C5G!R~$Md)OVXXRV6UPd?h0Exg4jY9i!#88Kf(`U7FtKYVqY+mawMP^+YH#FJ
zAr{1j;$ShElOYMyS{|(QpJ7tD_{ON*abC@2e*UCeBooIVULlN_Q+sQD{-nM#rnyMe
zCLZI*PJX;e&2%V{hY_zw5hCwB_S^%nhw&zCBA03v+MoF_lDBAycf28{>kya(YL$oz
zhv~3j=>jzdtuwF9w(s|EVw>PZ4k$m47g8%T{HDZ?m1S~Wb=OPZ>vsAzs+tzgwdT@Q
zy7G?twiTT|1aWL2qt6O2KvFlXP#7dq7CGDmRYa$GDpyo;UVg2o^dOBBE`5K9kEuCf
z(OB;8yF~G1#wDs@_<WT+VQhX5AC8Eq51P}E3WL$;3h}bJHaOmHb#34mthANBP8Uh%
zn*pc-J})}2*QT?z64SpkSvj~KE@(dCOT;R%YP<$dVgFG`c1xCNq{1ONl&UF)zK1f{
zV|E0sB(@R;vlYW&$`S)%H;T$Y42cR93o;zVU?+ybbkCp{G-AY9vqDgZ5o5y^aS#?O
z6eM9cV!;yO3W*X6lo*MNFYTb2+A0;>j9<dC91L9v<}V=gvg2J<g7&Gz_>>RU6GnWk
z1FEBx=dXIVEc?W&=+QRT70&1tpHdakMG#b=aXCKU$N|KAKCBPzMHBs=1Lu<wof%-0
zbAe5^c0%9uyThW{2%y6OK3>#Qy6)@hOPsv0d}q3N*PxbSrc<qW9G0^E`>c{h-Vdcv
zYx%H`fW}H=8Oz#~A4V%E4%(D&Kr2Z8d*PuKEa&<PxJZY~Y6f*v>RO|>%pBFUoMk0{
zU;eekM)39=g8bs=&nFn;{^!c=d-6E_;2OG(>s1=!o+M&*JbtLrw{4>svutjJQ^(uK
z3-2@sy!9xdx;3c%V!!6S=|aDfekM>Hgg_5FOAG!fr0NaYD;@YxS1_X8ksYa*+J%=s
zSgb<@v1Yz#=ARuO%h0Yr_cpyf>EKPf4BYOB8m68fjGYghod#SenXf&DKs)$=v2|K#
z2}jGC81@Q>O^bO}qjOsh_K2Iizu4taeA46|;g-Rv9#;@9d5_Z?Y|SK{0rt|PQp6>N
z^8{ZY!PdFx%(9nDGJK(JrzvmEn_DvcVBPgq*36vO-(+}M+i@>8pHTg%xCUc!%pXGH
z#otG5S0GsNYwxeH@{b)WygJ2J-Sk*9Fu+yn#OAw0031*kB^DM7rR3y7YOo3ej_X~n
z{k*n7le>5nkwU0pR55B8T_6uAq6!&ehHsIE6)>dqX`%&Fs>PkC6scEWMinJ{s{-cU
zd1p2m2x=+5Br(MGaf0nxLQ)x02GpPo&0!iAA18X)XlpNrpzeq?2{m>bRnDC1RdMJ7
zcpb=zDiW0bE<SgQtH>P*#EMmpN8&|GF6neTyvsYX6(Y16+BpVp)HqhAXUba@!rMp?
z+31|8Jg^t8is5g@iERFz)}GEHub>(OugO{JTWZ8=`?W2|YGaPTYU`hZwdtI$CUX+2
zkLGJ5`~%xHU0ve*zixO=*p|;xLvpQ2A_Rimpo~o|_f)&`Lq5z%vWW6EsaNp2wN7_E
zCz<ZjNcR~h1`kp~Mrfd8)sgTTad>PfDZ0MONCiASRL^&kpIwVTLrXri%Y9Tcc9Qq;
z6SgN*R7|_t-9N^Anu(g6a{Z2dg^iNwP~{BFAd2UwfW|Rk>lHh;`~oYjmZ$^W`sANt
zfV1&kM81S$OI>r^HgBxneZbL{0?*blo77TjN0Mf8Qford4c~{2a~Pm_{fD++v{U*O
zGlPRod)<yBO}lS(#Zg_D!Pjxj9P_69+3-=l{s0bI$~FIDo=HEYmrz6a^lu5|s#N8q
zf*~_MTI+7}G#n8PyXIgm3<GFr9-_#Ub@epYQg6;r4&K~d=nU|dE`b~$`b^MQ8Dp(`
z0BdNg3Af)zsPB8QL9mmxhMH!KigF*Y7_sld_BaR5D5ZTbSK0;vyeXWIgD`oqjZP$q
zgE%=66PCT4JTknI>*|!GY)HA*W_i`3d1)5!LaGH_m?g5^?O^v=<66MJ*2JKc?}3=6
z^^&8VZ020i-KG!*QJRgw-zf}iQq9w__Rb!Y_CPhF_l#j|2RMwQej~2SA`xIz4*C3(
z-p+P@z9Rk`#jqT5Ag}0*zsJ_zr-*aP0(F2iXt;4u1`V0&j!cai#2#Kpt~&0n<2M@j
zKQKW<J+te-f-=>?du3}iERIW))Kf9P_SnZ(lW}%tnSdtwA`8Z{>flred}lWH1m3W$
ztxO^NixvCQ!PM?7C-t=%*_Cc?#PGfUjk0r$5hV)t{Mfc_+qUo6w(i)rZCiJ2+qP}n
zo}KqL@5633dHd2yovzc#`Ow|TN!6*}zbsvv_wBLVvns61-j}K1UO2a*vdmnCrGgNT
zd&&Aikd2W0N}Se)=&}EI0RI2x0Ez$m0NlXw@Be@WY(4{`14ae_@Du?6VEO-B{J$c6
zT01)<Q@j6$8^7YQ`VH_Ca>w-i<DFZ4Mv)+;>a9n(Q^!4A8jjLi_YX~9$dEIMC?nA$
z788<4P4IfYu%f{MBa{<57FGT(c??IaZkgv{Z$;YxJod30*HYd0vB-fdyo;nL<g9`p
ziZ*W^-yL+4EZUD8PVo@cq$qf}x(eGoT>c71ll)SBJQI<8?l~lftcA3r7iD4hr4*MN
z;Jt@ra0S1)-+HM53i9G%l06ECQ9oS4RnBwd`xk3bwC|K64M|l|5bJSw?Kq7r5t4O~
zxq1?NsQ~Lb8AE<pqWYK#&U-X%kl5Zol5Diz1ke6nZJ=_u*@#3nnW^;EzO5Z8wM1G+
zy);pgOtGaEOw)Ppa-T>UQxgsv+Av@jPwlz>0HX1a4WIVC8!$mMU+!%Z)+nFn)Sm#E
z_z$f#g-J3khwfN5V}Dbuzu?!9-H+*0-JkK-)xRZ7)AJ3?yAP3<M%J{9_n?YmBJtAA
zE>0=OJxR3R!m}VbB^?4jS&U6@-)~xMb-&);UR)EZ2@F6;46^u;<mWu_ju6)Zx`V5Y
zPH(s|#;ubF%pG<S#r!0o6h#m%>jmR`3V8wvcIYN9=k!nlztt9q7(51GB&Yx`$uvbM
zF{qVFFF1*rULrZqZ_rp0ce)97wz`kdK37z*7~wJY7T_y}SjM6E14sMVBm^*b>11XE
zl^IawT8e8&ig&&FW$Sl=StRRO&H>?Psj-D~c=srJnF`lv;0$pT@JM|y`9+H+M~x7&
z_{1!dK1l80>KXQh-|1oth;Gx_-C~TgUuMVxk!Rl61-7=kIk0VTCa_*+&UTGS{7=jv
z96S5Qf(CTI+`ir?>pQ<k6{0b%`}NHV`@*3aI=H1j$!qN$L?hgJsOkT5=fn>{eR5+)
zg$5GeNB(ub(fwX|`og}jbby3suer(jIcahhjRnmD-06P(UT!}JVE{G=1-#zw3_dA<
zQG0d!h{y-Me!kk$<3PgmC00<pbh?_;ToLZNIF4Bn8?h=pcoJ_oX}aVj>JiZQ<488$
z1*EYavv;B!v&}2bOtszK)ZWqixh+kd@dfz%&tCV7PojVh=0S^z1bwj0c#!}5>KH4`
zvZ|ZZ8YB}gt}oT1`;5UbRI(id=Q-BbgWc`r`lK*-`=Ez>tB>?7#NKDgnf^+6e#`Gj
zL@oQ89^m6|8;l&{tR5LIOWQ&^0iig;vJ2MZ2k>j|kWY^~%rnc#av5}3jV}eHI=hi&
zqn|zV37M<y_v86hrtXQ_y!Q|LT31G&9RA;k&v)v%SAPTYfX4u*9zopAPLI3K<7-Rp
zHN}^Xm6@KNZltutySu}|Y@EQOwMg1Cw22D2YnRsr19l4bE}JYm&n*%u&#hv7xr2KM
zGW|Vzcy9NX?gj40_piITIZ|7MQaG#KdiZfZo>%=pmwgpYJQpuI>jT4`Pn(kUcwW;+
zuTFOzkvo(=rLS89H+Wtxke^Ny&S2jCrQ&zFcL+b6_y_z55*}NagTbD6z1T;qN-@0u
zW#mv_fB->Vbo5t5mz@2yfew)fQUTgPRw;VL0NJ4O;uCyA=DEMRPng!=M_DEwtYIgF
z`kvy9GB*e0;%)ctpF?TArM_$h)?rUQf!kNz3Pc~wMIvb%SB3t=jH5-AFNbao>3cj~
zu6=!d6>sUi_VLIOR~(dX#B9+Q%35rEjgVxLsp<{gaYRpitT~vxe3AIbRMmAwb|B<~
z($u<AMLi(k#n4>%(fC;cUR=?<pvV8EHI=l1G)fW_=Xu5}GKkcF_LH&R2teH0?Dnb)
zQ<ZjGH*QPj=KaLSNI?~zFyuW}P%y1kCgnsRZ<yUTW#e>#OQ*&mR7iNUc9x8s4@E62
z02a=|>By=L2+)y>vA~5g<>Gukmp3g-Jje%Jj&^h4LE_k;l5%w0ZSZoFX<{^oO+6*&
z*AV4piuP_^<<ey4)LfPWp4eONb?Aghxd0A<C>gbQj8(cIo4V!~(fY^Xq<-3$n88h8
z(MZ-{f_P|6XBHfMJ&Br2nlG?Kf^C@q=sHhHte!})?0jAym0^O(KH*SeENKWWydv)d
zYI<L>;z+4Qu=Z|bkTk&2QhDhoS&7(61w-e|pyEFV;K`(1B8>x422xPckj@!bQcDN1
z2Y)%zT%QFSVQBtz?l#k`zXnNz8Mzi3De~iUWSxci^Dk^s!XlfZENrpW0#qrmghS10
z`v6#GX>9Mdt4#!-H|&gCA5}y#vx^lUoCUXuT_q?9F@`^I)+or#6C(X&CL&!_oVdF-
z4=l(8YxzX3=nYq2P`QnFf_)EASa0j!v{vW11)FI5MeydD#T5LMya2W9A>2vcz!_X1
z+B>rAcW&E12Ss$r<Pkdp(cM)L2m0zx6V=L+6wSIdawXJZIdOv_EV^1e(Z-5dLk;xP
zJA^sq{2?j&*%KoX&n7>fWuW_j;LBz|uVsul@@T*}ZPArA!(??PSV2LSBjMEG3Ul-1
z@<nq2l72I|2ejHK1rxbnB`r}PQEuv@-ZuP$q$-z9I8fIbDId$tbTLz(Fy>ehOSW<w
zoo(8xcAaXeeRO*agHnrTRT&ly1y@w`@iqz1L|B$Sg(~iOI4f8d4f%r%PJ6&ra&!SK
zB>Y4_&*bQ^ZqR@y+UU?1LWI>&8@6gCT5->*;lH}0I-2RDG2{$@8D4&nv&Ns+pR%em
zAvMc_ixKxKImP<?!zj6D=4!$ZZQLt!%EFQ94%EP7Q`4@7P}2Do(@$}PTr0CY1u{|7
ztc{}xI9-kcnSxU6y2s8Ql?h}PkhaW7vH2knlNkR#_8dSj6sO)az4|Q}y&EUUkik2w
z8BI!u5?GPhY1j0hnq($eaWbvkMqHdsP+^-LOD@)Sw;6o7hYe(u0_~%mug!7Z*RR5w
zw2rU5-bKhf2=BdXLVtw8kV6<%v0f*j!Bhza8n4JT-p%_eAJ;;Xjs&(>u%FfG*bF%F
zuQ*+L!uZ8tk7R3n*X18BQ-r;=r0K&#T#(U1bPg|CZSVFoy<tout_I2#*2SiRoOx?p
z+=7!PXnc?1^67*=DWy$BWJ%(QaotsgfBQ_fhVU%J7h*XS5QnlJw#7WkkT^S$R1xan
zo-M~Ii*vCSl@iWaap(xLe#z_bvp&h|@UmXX>u|Fk$?I^kZprJgvo5){TUut^!Awcu
z)WkS0*_6_;Q5&dSF}y&H<NTdzo<FUt7s}BimR7Jb8oyyNUNdxK!e&3stasoeG0I*>
zy7_u~Zi}zEK3*3KP%B<H9n&#chh=q@F1TtWTUR;K(HhUV|GS=KtHx`26jmZ`aG-wG
z5G7Yr@vA8%l1;`g4yP09K~C)9z{ltDZ2hXQN`s}hP#46;%Cp7ZrrW^?0bLPsSw8&j
z6dp~q9C>++)zLPHhT0tV(^@mew^^sqYq|cnY5vQ(vSh@Cdu3chwkEfvrlNf-_H`SI
zd$Bh=SyRW~w3$(inn>YqBpBpFN<n=&sUtCevH&rovH-8j?<oE|S|tlG>nO_;2cpjQ
zPx7KPs*c)~rH4_J#eYhar6>Q6kd!rB9JHErpQYwzhK-%32kV=fz_gHdh#-_<VQZrO
z2_Sd_eN_xgO3m31U&LV<29t26`I$VLBNh~at0j~<ESjNK`{qVGyBrH*$%4%{m_c)t
z&>3QbB(!w^e~23vh|<I_)fERpfA`U7@W4zwHcb~I7!TgOMr&D&N6oT$SUbJ#_<KvB
z$TTq*;RNfmdtC2Avfe9iO=@?+i`NP%%SsXB87k4|K>a55J^zHu&k4iaeHt;g5#t;$
zi&tcsAQH!N=C{i<iZqC^wIF2~K7M(*s!R&nhbkS?Lw1ek&bW*r=7c{}x>KT}(y6)C
z62vSxYH{*DuLaF=GOlPMy70cmb>7{H6WRIWC(Uw^xM`UZmyQ>z$u>uXTADS!@hMlr
zxL()r=|T}AryqMkS>FnL%1@5^Ty|50Jp?!qHeypc2c|*5a<=X4#=ci~0xS%cj~>9h
zF9@)c7!-ev$Uz_sjnrfo5-^*mE6|Qj1DXfOVjm`_+JCIhiQON7g>|O%a8NnO?Ex%g
zdeKL~`XX{Yv6LQy5ryiJ#B1JdVg>Z^r>D20c|4ZLB?w+Q@2)}4q}BZ5on3b*>@wM%
zf&LV($RtSaG%kWF|K5?!vPZK>!{S8iGE0%QHLI0C_F`jrnwR^pQ!RkxVRg{~ES)+7
zYDep$`%#<c4|V5tJ5LACmr-&5Q?TeCdy=zhjW3}|v=v#ZShD;#@3M;$IGpX=#xVYu
zXFlsk6}qeYO9pGfuzOag%m_48&q6;p^PFN}Zv}U?6zs^AcoU2E$d$sf@l!5Xsqn~^
zCJT$U=Ssk;5w9nf(A=tF%vLmy$(6irH}Gyz>{Eythp>WN2`+e1<ax3COo-XS2Nfi~
zdK<~}fL(+`(e}*3Lmo3i$nyMlF{hG};wFg=dYrpBIv_&MqA;&OX`QC5RFe(j{9g)e
zKzq4KU|zN58bKLGwS%-x_r~y6Om;L{dhh8tA`w>!zjdZGmXf0~Y_O%U1>NuNt+-Tr
zT)Q#sFuK?_o3&8pn9o_Nagt-Xmgo4V>5wZo<V-x0v_+3uV?)-oTX%mx2ch}c<w{c9
zs`>e+ez2ufzv@lNlWQ?!>ytYE)l7yYqapB^CC|QV<)sLlEpzaVY{L#}X$q(?3LTwg
zH5w$W{AqsOZutE<ux`#TG{f>_qN=$go}E9(YLgJ1mgnz=R{!a>PGhvo))jK7zbtp|
zUo*q89O63TnQ-;`69JkvN4%6vPB`i3tPoO9xPb&-GXu#F1@(C!q?AVdAkwQ7eaR2T
zUl;1v4IsTT`*ji1+}9(`Gx76uy|(jjYWHSaxJp=Kyqg-fK0Z7@(0xW+_Q1PrGKvMA
zoSe(9m8@2BG*I-nr#|s~LV4$50Wp9WK=e=RK89giO1JQ`N38}g-=F*G`2bYNUAb`l
z=Ign;4ifhioFO}XVq1JfaA_y8JKh1C26epNA2o3JEFWmZ<focRIClu|EJ@ZorI9qr
z?Oi4Keh64Jd>hl2@$DW8&j6&g^#>OdLFwj9={6emBn~_8LJBvgweAz0a`!{g3C~L3
zB-{Vo4SXcfhPra`OSYWolIj|mERWLFO`FDavPP)F_P`9e-lPqQWtyZ28I+f4+kC+M
z(@**c0DSOxt!S-7UnxP<c<1bR%d$3rgisSidH(SB84nXS#7@364Q^+dPP;9Jhmed9
zH(iY$+EjR&Ut|_bgCe;uW`1e81=s7|J9cwsHLlr8+aAdPM~el5<Khk!L5qcyL5&HJ
z$0HR|6Xd~T7NYtSY}ff<;B1HDFic!0-l<;iT00(Pn^g_9L^pU{E`C|zF&MK*OqJj|
zpfU#dI;Mg-Oc=hVMd{v+dn+BY6OjpmN^5nslHplh52JOiMI}DvZy^;SV=hC^Y)v`A
zD$1R_AWYPE;OJZ*J`+(V-#NX?AYn}N`w#K>P+(Ha8TLELg)kD5bIvs0KS>TjN*)e+
zCV$k!QV2E}sc>h0EAlNYZsIBxa+e%i4Abh}Th^Z8CT`cA;s&x^rmul%wFQ59H2R0<
z?Z!n29Z*ql6cx;Fipkqai2CaW8MRb#9ElhfKd-XZLP>~D<UI5^aanS0$%jvO{dR&m
zSIj?CG^%l+q~06eu(^k984I_O(K`%=ovvSjhD~&xYj<+&hj^F$TLp+c(ZCd+h+RK+
zwDOYZHbzQ#K?4sR9rJ-HW8W3JMIiIi5s6b-S^`y-p!E;HZT^tOb}iXTjfN*H%}6F-
zF#gXBSF8by{A^`{qN2W?0Sb~IqY(IQm|xt?l12ZPMHo%VTS#n>toAHJT#%J-fkH(%
z97x8_g@PL@D==&skp3(S>ubUpdA&r@YNiNN#1|)t;-w^ECRF$g1wjaJO}<~8MWX^=
zS!brj9{Y!1r*{yE=`}b$gr`O)_?YZ&4Z-&Ib~k~Kf=HwV(oxZBNpX*XZ8*Jpl>7Yy
z?PsRo#}HLoqDBra1b2C+$s3TKdOSQ0eR(p_Ju2^8{bq2=%%8x)01p(W$7)ZeB>H_p
zO5l*YApW9(ZzzC|4Io?$tG1Yeq{ll}^%e@r(^S4a@++bA^TAI89-eF-<r?AJ$dFe<
zyywjl6Eoo8PU0V6<+{hfQNzpWK0fP?pV(x4&1ut9_n7a2sPt}roH^u^G9s)dM0e#v
zE~`Q;c-Ha<w(^HMF;?6rd4EA1m4TOO(*dq6bAg?Mm|R0P>x+3@Y{QtBS<D2vX9TSN
zcTWgs_b&4tgg>xL9G>D9^YdN6qMD+YY5dh5XBPoUZ&W6>CNBirk^Je1W)^@p3Ltml
z6@}l|fZt=l-zRV$@3|gnHbZ)8Zf2k1;c_aH%qz!oBin!I!EW&2d_8`y_f8H9UEu>y
z$NosH;PQw?N_(b{SV+b_&ch|ZeCG6^`&j(n<upuGK+aOw0048k003<N!-Siooq>aq
z3+I26a=ZMGl$%&WZl9jN#C?^q5{s!oR~Cn-CUv-W#UP#J*mh3j2q>WZU<Qaf07d-T
z*5~uZwL5U$p|wL>RfSTrb$w~a?^RmriMReW>DyL5o|;JGn|}QA%|v_BrSl_Ox0$rI
zRr&1R8}qfHao(d<@-{V<{L@YIoiW_x+g)xZssa1?@V40_wmIG-SJBw{CsEKAJx$xh
zK10o7zviBV_G{gc30?M^56G2df4Z;t<wv{nQ?&8!q2O6f1<LwdL-lRJI_Le2OD?r3
z_sB<^Cgp)<{9w^{^c?dpMVlm+WBkidQQQv)@ZAA8YnPb_sivaEw)_41m>RSqLIrX%
zp|X6!y1u*tXjGcN+}~PtW#W8kA{8DUJ`f0{to$vH;zk!LBULfAuTpo?v*`6gZ|}EI
z;@{*s*VNb8F#k+q^iOx1Z9(i%*N<qUcFItXR=wBRALx;Ofo>FF*1S0_lrgBr>GE!V
zYP|W6#><Z}s*H+w`M@GDig9G8zzhDK9`Bc_w-$D&n)^f)`2?DthdvSbhDMn$*j24{
zuE6hZFolu|q#{ax@dTlP&ie`$QfU{Ad-C}c6K$ImXM1$o^3*`RsfgZFG+YTxfKM`=
zB2EtKjKtu+c>c(8%(a{2ueYbnkA`kv{G&B5yr-|Sd;EFMX^7XyfsITA*aP3ME6!IU
z7+FvoMM$$Bw)IB?xy>r73}$hVPn)K+B9kL={USHynLaOuK0D+6Mxnw#Y)y~5#Yw*^
zkmz^f1nKDRQkA?jo}NBWU*8YFGl4nbcP|g^Q4-oeR~s#O2Z44!Zx6uch`k%L4{~5;
zn*bp>BVgo!`hd9yeRJ`aTzKz4d+y?a2fYvdeRpxMMrOA9F`_1_eGDt0QygjRM|(OM
zr6$UOxAyUQ;%_EcQzzJqmO#zX=QP)Wi-{~T`amBK5LvCCxE63?y0b-H;KTY+?G&Fw
zR5@*Opz?X(gRpy|y-i5E$<@R-J$(AbECc8k%2mCs3-#)+;#Me0xK;jG!)-Lz7De$#
zS8-skbTROufd~FS<QR*5)86J`#Bod&g8iep#teI1DtyuP3Cd_-ryo+-CSd%O^He{$
zLlh1$0vd!@Ixg@^%@Jt5%roaOCF<IKmKX|DuW53n8d>@3^I#+%5(T+c;KrT|-ycl8
zLGjK}s#6h5I9^~tgwJ;XbHDY~xzo@L?mn)qH1#;7wUY7{8)|Sn-vVeMVe-45AUoi`
zC5+l=q%c&ofdsQdcD=D-IE--iWyop3D(z{L>_yZ}YjI{jsNQ&?^=Z=Y7=3d^>Pw1*
zv!@$Nozrl|7sBxFJX#`0;tVQXLcTx`E8l;1#~7kePnrLqGTqWFK#eLqD#d}OO_Tuj
zV~oBco9%oWP?DkJXW@A}z7dN&z8XP&y`W+H!jotOjMf-r(DL6HT;AE*&~JPDZtT1%
zvR!-0m3?^HcU|9@yw&%x|9SY{W|Hcqe)n9mj`>Lf-?mcEOZniQsqeaz^X12YiGhRT
zLvJ*h-J!<(ba;gY#OG7HZ3~!b$S2IEo=2AD0-ndrn*s0!yKYni&I1#eg4N0IxWpa@
zK|mIe@neD{lrn$h7BUO$Lx|697EvJ&t{udSdEI?N*NYlCnDOk;z?)HH*l?vvL%hTA
zF$-LSt8`goku2R#BN!RDYh|Zc;8qt|nD=xU`RGuAF~Xj~u`};&<&kONd9tzD+0pe>
z>1r0R{duUkt8!i6kUdF)V3F5KLuh9Rlkx08@_D+RdRvNa@pbh4K8`)$@8s=qC*<?-
z_Wr(71Mk|-3jjqTD`{aaBh0&bbR|qcwfAM$DYZ`#rpr@)965Ng-SP8bi9da~I(pgp
zvj17b<(B_?26J@`^UsMn!T|ILG|$;O(jE1L`&5~!DEL_PRHgk0O;HcMY=y7QNkyN~
zok9N6>EiCe$ko%<_H}k___^jarejw#!ixN8;LwcOd69&(&2huuU4ZBTVwBOTWxqg9
z#Gf9n_0rb<)bTE?4Gz=oRByiXK<Mx4OD2AF`|WCE%%CoS^2om%<&GGY5w{S3;(h#+
zmJ+OPa8vk31zK_x`(<)H2ZODBH1ulJZjn%b5TBGYD`&n>$j(Fx`ecE!A}T4-HXQKd
zx8!wA=)=EgJo88J^ij^wo~-bdk|brjL8BSJGLZ6X5S(EH$nsv!p6$7_;L(nVFB5&s
zoI#zz=-&dXK?sgn6&VV1T0TOE?iYO>hLk3FHpi|qL)pdXhu?S?0CIG|6D1Tn09VjA
z2vb9Qh<-R71T~RHqO~@(Gq@T6R^lE(=f<Rf;84^P7Oi$uo(<`F$X)m(J9JVzMl}V^
zGFT)fjR`P}nZNK5DeAo#N`#w?#Gb^5)VlyK1|Co^3#dC>Gt>+uryG%GeYt)5Y<KV}
z)`7Bz8V<KE{fRIEu3j6NJGbZ25CV2*AGBRDg};SL)+09O#w%Y%zcAaGuvQH)wT|(V
z0Xi%K&XcjWa0L7e6CaZwF;FLh0-PxQ0@e>9s>L$HuD~}iZ3WZISe($e8t&=i1p-Ky
zV3$UT&EfftoEqnlI7HG~?9_5!KK6;`+#mB*)E|+FW(bOY{NG65T00=L5$Q$dRDj?t
zRip_{9OFF-dY9?)AEwZNc?*0Uubn|D1hfvu0mLDjt1&Ng<<)43ecaciX>6w%o2_Bg
zw=Ka41m<@@EqQ=yf3uhXY7NphBCIrl|0L)MnUWr-_fdZ`Wlg@9SWD<4UbzdMBd#n$
z#P3Jz#f|*se5Glmn+KVC1G3r?rvO%Qr;t#m5=>d7m06^nvZVgQYD+n>7-30^HUyoi
z)6UZh7Z+#{6=Iqg{O5ZfKhIPR_qzlU3{#H)5HG|XsThJfFHzPIkS<h3FNicTPV$%U
zLrNBLfR0sAl#~l&_*2@{knhBOIbR6kLWY`zKt?DdY%C!jO-ho4pns!Q5uR2cGpRL0
zZY!WCdLwM6;*^BOYyef^OP195Ze|!wDCVp`EC7(!+)7KhK!#R<02?(xLK5D@puIZf
zB)e}v*F=ifg4s~Q&`Aoz>?OMs!%#^Zg~PDmJVZ)jHwgWAxRX+57Kx1EKOc2!rR6WM
zrXsAU4y05Cxi%GBJYC5|V_HEU$OT~Dq^}v70T*W_1&Lgn?-%3{ZcZXdBAip6Z5Svj
z1x>vvfiG|7+d=HKjvwTG`t|q7B%)U3#zhxNqc#HmfyEN@xLd*q-%JsigQAMf1=S?d
z?$2b_>)lMJ*H^rkOplbHLX!_0RmAo$Zu(c{G&WswITRD8yv&LtDNyF<3%TpvwJSL~
zJAL;=wJo8PaTX?l(M(QK?>#G1<00Su?BZLDPr+dUjWD@e7+GV6`4>C@a^+5+;q*&(
z@gP-yQW_&e8Y9B$)eAP)cK0O(_ca#n9^KCiFbrM54IAT74D)9BSZje=iq`iE$Lfkq
zV?~g8OtS-XiPdp5?wDycfw!v4`YeIfu~7Ou(y{RVY_sfgI+{R4Tgkx*n1&2*3b(!{
ztI0CVHciGk>5ls$JJOeFC!TlxpX|ScoJiAorShT^A@Mfo<VWq($0H$9-WD!5-Ll^~
zGTxTc1b^Y;gdFJfM*=^dmh?vo?oo*lYjY24NvHKOU|BjM69?70>nI@dBJqc-1mog!
zGB-M-<8>)_J6+vz6R6`_(Lt0<?6o!8x__$=m<_ki)C&<?V8ddHNMvbHXrv9Kgpp8=
z8j2DD(AN$o&H5|;v>4|jC~8pqEC{q)T*fA}&TUn6t|rOaw3rB)l$h<LHq5hhV#z~S
ziPEII!HP~<ulpCp<H|N;aIYIy(E}#>+Ts{u?Q)*5ED!3K3S42EoUJf9+E9p*tSQ~n
z*Vd-IUG3pje&i_}{)?I?L2#|BU&1t`krdZAN1}M8tx=a3UzagYg$hjvbfPN-0k`66
zi95{_XalgAqlhW@tH~VIl6M5ba38A4V><-dkRqQe2yzJ2BY}sc2wDI{1A#K6ap4+t
zT-g0gkZ=Lnq#FBXtawgInW>2dG?Ae@MhH~b5BObX8aOW|l%&O_`3N6Krf<ahff6N7
zXo!DRYr(KuXozR!hE#(i(KN|W%?+iAS;&-8^(vl|<|!Y_xF+dXrLW1d>XA^o${RUO
zb0fA=%5z4u5IYyrWv`hi;5=bCt0rXTQzLSsVZiXAwm`uWF^G<`;?jVSVj7hvlcnZh
z#KH1Ac8H-1J9Z9Kd&o=luAeIy<o<J#`FBzet&z)g@)4(<Hxw#37G@YtDHLryr91Sh
zJ2of66GO2XoX4_>2p5zL#-3{Cnx~9eqk%66+BqQm2vCvXGxUI;@SFKkVj?sIY=KZc
z@tup5<+RGEvn#5H%-T7P1Ns<rx=JI2Ih2q2ee#UCbcWCyZqIQhG`H(LzZdE@KQH4k
zp962+*KFhwAEU5`ed>Cl?vp4?>il0(&VQN13{O$Ni1zBTi*YAh<kYm*!9h|oI!44H
z5fo$v7?EM5g=|3IZg#Y1Q}bvYy`UkQo{Gagin(M$XPHiFGPg_HGqvbGEEe4Xj><l~
z3wcE+X%b2{fjYnlSb1xd;Hp1mr+ohk6wUN<UCdYP&7aFZKn(0q(cM+l!VKl$jv?_5
zP|4}#at|W>uXoQx10f1Jt8sYP65tL5-Xz{*fnmkxvvE%6M(?P`eeC#wycOtXf4d~A
zzF<w(Z@-Xh1ifeg38Om5isfqt#D-!`(lWd@11ZH_bCFu(^2t@y{{T*Y3*kIQfP#jM
z(2rln%u9*H7Z=YWAwdLTIv$?|_MXqXa@->#zCXL3JJk(3+m|X0722T2cBt^2aco<!
zROQgwdbe-Hr!=-3k!ChgYs`r~$&15oXoL!JJhoFSs7zj1G8turMDCq&=%4@_<5$W7
z-#Pjb8R>P~`b7t@9<)d1SEEoECgPD)vW2ZCBP>x2IZ%lcHew4^Lz=`>0rS%W`V-<=
z?#u55d-(506H8)(KtxafWxi&8g!;QCOjoQJ7}>>KIMvg&EZ(gY7z7be8;-K^4tboP
z|BHoUtC#8LZ>|et1`&UQ@_Y{6(i1C$Or5}zqbHaz5{szV+3b$6@vz(?2TWiTk}Kz?
zi0FN6fg^H?jUT~W&q>gv(<M;>YzO5;4KhJ($yO|Zw5V7J=C55Ypes~7^Xx>plQXp^
za6nIrRGpS%Fpf!B%Sek&nmAeZ*AN{fz@XcH3K?&bax>p)#0USnp1*Fs^e_-^pFhI9
zGeILV5G8YUo$|D;V1m1!z`j<TaR5Qw?61g&OVbtigiNFrL&s24_||?oEbX$uzSNb|
z;cCDc>U}(65>1o{9P~D$M?$~ExqJ{VFgayAORYmMfX+%Ot3Sc;hWB2+G3v&XasMcd
zkSSu0gpeun`Wk5qM4PA^8DyKRxuODNE{cIUV!&9i8WiaegzDsd=s4a}gx0tGTA^-m
z3cqs96qRYThslMiy%hts)+<#bSk;(Zai*cB`evnZ+6F8cbIFV)_J$O@F`0iVg$SnA
z2_nmBG*3ZMU#hS<D}Dtb%haYNp9-)^hHynXr~`+Dgk_C2IO394l}u?Lm&w1ZKGY`5
zs;H8^O}n~2;ejErNN8=X>oNU$E3<AlOp^)kbUJO*>S2(n4yH?`n{g-Il=zB|XK3a>
zn`wlA_+6~R7}1%`No>3hF%Rlnj67e1iCGZkjGIapmo+~VsiXt(R35oys+Ud#t2w5v
zp79|;&ZgL%%o`B0%?3*_WK8PGNZU=$^;Fq7Hw}KF^f9lI4F`er-MdLdMs#NA=y1}N
z1q?UJBN$Awuv`5DgnKT!$BjWhg{Wbx13$s6VVtlRTu_CI2k}rtHbVB5>-`I*;-%-e
zr@p1D@`J*%JVm;xCLZcj^%h;lcowUBDrS9vM*b-SZFpsfXH>Z6ge70J>rzUE)%dgm
zsJNsruNl47_}XT^j9vvHcDNcl=y_cIPwEv_M-8jX)#OrU1+FQGL=~1Ph$dF;xlx1F
z>CmX$7qXiT@vACUL5S=7@R_4Y#ftrh0gT<sw2Ty8m6{F=i_Mmh{V`%xhz`AFhD#}j
z#zl#R)v_o|=k!|=8nU-ey?n!0w_>O>TeWLDTA6+XuF1wEzmga#E0q<XupP%bwB{Sm
zuOj(rMWL%L4Vu;!;Qv@w@zzdh$~h|cH6rL|i`a^Go(=6ic~760qdXEUam}Nb{ckp~
zB(<nSN>l{7smj(|bTc!|aV-T$eKvrZf7T34Y=U>%)?V%UZK*{<<%)3Gh^~+g-s>c&
zr@`0#Q(VQ@U6lVSk2QMJq9?^r!#@o)=dG9hvw+UROt|hnN7-mJnue8h?Q|};!#Qy_
zmuL<$=mbqXcDAsc7{^J$osecQw0|!(8&MU%fg@Lpl$~86ZPCVDS5<4BL^)P9Xx}>y
z3Lz^52`wor0Vr3zoYuH~Kwt44)0oWxbIUzx`15r~{@R)FvvRx0|EcJmpN(dqg!*{6
z7PabNK2t~5%t2n@ogPy(tgn@+UbjB;D+(nOnassIUx}9;Y?&Q5qLl&?J1rtB)&;6+
zo82%+ROl>(7p+lUp*3ib)5VU&Y;_lYH5H$xflXD{1&Lf?5*|fFQ;|s$Z(aWn$m$Gb
zc$Rj#M9%uge`r$^z{t}gs;%kZxZJo?l6G!dPM^kgQ4?FQZu8p#P2W+Q16s?|x(=80
zvTI;<5R!c%%-P)1+J2Y}j&;AA#9-M?N)$*Mkvl}XPAHS8aS%$Yqkdk!c}7Ast$0+Z
zkwa^6-n?0J%Ur6<hBR2rs;h2WCVpsJ+Oei@PP42PE|W%v>#B_AQR{)MU2-p5MLVn;
zF5{G|=|%&3pSmkMCej6UeYmc7dEBVCm=}d@6%PWqIeP$1tJ=W-??`RmI_>0bm9Vqi
z4r^;c6Jv>uRoNrM`f8O_c8RM3wVEd8)}?B3mcm@4ROG7TnuSVvGwN~s0bOw0b*r>N
zHTSh*+C@wU%JI5-O23b*dn4p}rY6-t`&U-k#Xfi)*8wcU`jRIu2zx~vx5Qe5RXU-p
zh|Jk$_q;39wawIcdn2gysT85%y#*ZHsgXs_m~Q_Z#N|8-A|)`+b})}_b)$dbGRcjQ
z*do>yf56whbog)|kG9g~a^V)Uu|`VkfY3X357=$rxo~f&rhSL3ZI<i$D^i}Jb~sQQ
zRoy%R>(ySDF$<F$R-p?s8(5|>uCj)7v9q&|*rhdnI#@1$77Blm&*oB+%%m+Bvir?j
z8vsdwXvEYOuC3qA&5Z&_MTojC7WwE=H=3rHl{QUfvJw|q8|Y%(j}z=p5M%Nnt|p9-
zhBsa&m!D<XWL8e)FB5Zeczx>4_8M!BjTVQjDtxWBCVj8ACvM)E8Qjh`Z9jw20cZ-&
ziFH?tBBP@_%EZCJzn=dt|7kxilhfvZ%Hdz0N=qcUPOJtK`zYaG92FVH66kmG-_O?Q
z$L=+FumDi)55i>g6TYj=v#0;drSdXAnsk2%eHFD6EY`{ks`u&CMdL7f$%?k1{%(jK
z6BTsUq4sL7+%Hsjg?#i{nw+8#{z86&eRobOdwWHYoh=FEY{H!n{=DBAivduehngUh
zvy-lSs1z(V<A5%ejdfnyb^q>5lxw49D?OyO@W)LhhXP;4mTc3tXc`;VVzw0Df}~0u
z>seU)PJ-BiXTCOC%wuBiwwZ4UAvCdHtRJ|XDZwvJV=<x0tG(h&_=gf{!-OTnB`)2g
z{qP;;E8DLZqx(*Tq;7g?i5jL)-E%F9dN}3)(dZ&y>;N<TZYBLLqxMKb()>HgAM0UQ
z8hI=IiJ|>%e9)fxB6+NEM#lOKm)|ibU46@?i`pL#Z@kjy++gfq?e{Y}!F?>iU*Gcl
zZ=vaDbkx#pq4iibu3`=ksfY&hVu;+N0DjV;J0-<1a`M;+MlZ!EyT!|w!yf6jf^89h
zg3qWn{JP>*iAbU_RW0jlhcVI@J4wB3N$W_66p=mvkLSf7ALa&X!>)o<Ppy!(^tJTt
zY@L3e0b<eNTZwy(7wK_m*Xg_K97)~A7JTKY7!}HI5=S+Q&xpjjMQx2LG!?X}Hl!X-
zrN1n>mVYTs&U0#X`d65sqgqI#a4ULOsSPfjp`r?(N1}FtK*W$Mt2TPyp{=yob8l;~
z`${mIxB3T%;ZH3bM(RO6VaI;!sG%2CgZMWmnktdBqNn`}xsEEqyU$Y|@LDHmPiQ?V
zk8&AWe0Fz^DI?+6rj*1SUD%)ccM`G&QqT~jod-#0e~G^WR6;FrTOi71PQQp`SI1Q(
z=1--g1YWuXcbL*Q4gqa(^WHh?aC8lfH_ClsQ;d-}mdAdWXIdYT)!e*fL@B(U_Do9x
zh-UJ&ip(R3Y#@e20&-9=>iz5h^HnN3#5-h>QpX+WKz0-eqUYIih}Se?8zG|*J7}d^
zNh2SldHpBUeYodT-ewu-KXe6hKKLKiwLE*ZgNJo#B}9sSjIGgz_e24K>Iv;inA3dm
znVpE`1B){pVb>(~X3Qd=kIaL-aKOj32_S&r-F)97u%}=%*~D^`hU)#BHD-I0w#vPs
z)`)vc+RYoE;@>neLY*1mc~p@5Wh6#TKX2*Rv?^y4Xx3-xJn<So{(Tx!G5?l=my<Nb
zz%vM0Wh0M96Mgb1?|61+ROF%HDWnq4OdDt<DQuTmV5*293&4#9|01erW6%7<g`9!?
z^huB1KlFl-b726}xb^q6G#A&~BddIX(?abe5QOns@f3}W#OqaC)%nzsT$f)A)~$ji
zyJNvAZvre@lV9p1GE~X=fO@y8!q~tb0y$4v0Y)Gwejtge_Zv$xkz3YQ$=pKiC@W!t
zLz%C(ilSIy%iC_AdIp27|2wdr_tq>6l9)D^;fb}CLWo9+rNyA!*{|703<sLevKyAH
z6!xxgo9Bzi^R6Bj;deWGcLN?^425LAZQt}#gsUdb#U8iWd|>X7IUP}gp(`l?j5pDg
zpT05RhgBdO5gp1`c}*eiK`+8s4RcAZ6Y$xt9?Q^!{=k|4K*xaXnpYTx4j2j0KQ4qm
z3;e}S@SR_!+vGyk^26ufjxR%C=l}QR+l=TaM%G|%%Ca7L4C}9m^1XODH+@rI;saBs
zYBu_oUb|8W#`|DT&FqANtnq!wz1J@6itJ-k;`U-WPc8vai?E90{Dl$<u1wGV1;(qa
z62UNn0Yxzqa5R!ob(~a2YM>L(p(RknT{ME*bfP?nLxcxQF|G36E(HyP3X9ViZ~J(r
z;od$$^Gh=S{|Uk~IG{RpQUL%Q&Hw<g{tr*?+&I|u*jWCXgS$x{E7uLN>fC>Nj7>|r
z6U%|ZiV@Z;Yg24(&NI#nIm3TlW3yLLIO|vCi=-5rv&g=#(0eCuNylTgU#{Ot&^Uqh
zZ?OP?6}P_wU{frZ(m>_}L{_W`6Kb2Ly2H_1B<)xy(oF6Vxw9dk2ZTgyx3g;T6JOc)
zOfH9*GKVDB&FK5%zJh8gKO~EY+R%J@nqWobfc}X5yIo_t7wxY{ikFwG!^PQD^wY}b
zGx~{0wZ7i2r<h)4LKPs(1f|Rb%hxwN3Kty?2y?&lLIkrpgmghRW-h2Iqrl3+u5(Lh
z1Gofw-AAM7V+BI0O1$ZIe|n#y=KU3a0||Q*%pmPEP6uVoBcGfC_?u!9`KZs(+SYb9
zLLiV4^2O1HC6VQyP|QDZY!C^;?-77c@L+{xoF2A%n9>#Ysr77xv)z7kVD;S8p-ytQ
zBi+ekw$NH&AfP89{50nAu&NiZD7bFY@G7PqSv2ukjBP1xPHX|(79VSKyU^pq^R>5u
zzSA>jNBIEi_bTW#Bp}Mp91r0F{jS;$r{DDhrdl!q(kkf}La$FGqd^5?@mnVEo4^B1
z-=<@Hm(2YK{EK{n2!Tr!d>#s*2hkDHzoCGu?JwNgq^wy{&yt%HqeIby&kfl&OqZ`j
zOHJxSxP;<yK<joDdH|7rMP3YVe8D?eOZxp#aDgWyq|ps;UXVS>FQZDg>68vY<4@|7
z;<2m08$*rpfRHAOeD|R!vQ5iqfU(oX@#b!K<jz~lzrA*aLGSZ+GEL{T9}G(3>jX1!
z#$DKl*D^^TjrUhae~ziLdjQ<?!}3-w-qevHx$on^9`ZFhGUh3k<hI6cdOMU8{Maow
zlfnD4gq;ZHZrMNGOgLjN#Nb(6Sj5*CyZr_+aU-I9Z3lnvGw#3(A)s{XfCAWO7@(d%
z>B0v)ln?gdn;Ds5BqCR@+p|x%Lm|pblYwv1D+GumtIZJs=uHGu%<>w4g5mK1p26Vh
zFNvu%TTc9*yp{eVNjF)8Fa^Sb#V+U}P&mXEO)DBrWFG+CE6cho-U2<o6WNQuf1xiB
z{ptM!Mo97&;kPqmfQ%tS*~$KME8@I3fj}GNbpj0-5IVYGlD!qoK{p3UvtJFnt*%C}
zcsq)djrJ|Z>hpsr*(Y6~{Gj&iA}YvW8MrDvEv!>u6hetjhC)zq9yoM3b^PN#MQ8C5
zhK>Obw0)>A_yZwF3{v!FG0pVsr9V&yj5d!+d@E%qjtj&vyfG!LQC1jn-mX8c{}zWm
zvbGoigbi7pg94MC?|fPlRorSMO^$0k;Bf&80GtbHm#9s%%q9Xxh&+seU>s71OgU5`
z{3%qR3P~KP`hD$^<sab}tN=!C!!w#R)6goH&PlXhGe#ttH95c+a_p=ZaNK9`g*b7U
z89YUbtdwj1J|uQQ7KfNg;gV_&twJ}nsh#$-&jTEeZcI+#=Q|_89Mzz;=e$6iOb#ae
z%SYFlY4DR1TW+(PQ^y)!KhjSEPRoaZWjL#vUg4oR)em@#4-#PI*x~m`yGZ5LOe%_H
z|D>jng&X)?{9|WzZ##BSqFwN~1VZm`wP6A>!YwW&2)};4X1%WOqgdPSw?U7d_N{H!
z3-?O&27mf$a71gVWi5YiCC1z!{Vl^)k8ji-YfP~7!;KaGRDA;VqE<+k>B{Zzjfd}a
zNPJIR7Uc=^jumQ#1-VRq{`z;Xo`L7bXcK=$e#z=?g4UXD#gP7r@^qp_;5D!{-@D_F
zKSOrly;@*Kmq@mlqau??y}tw(OsHwPunk|pfID;O1435$E`qJ}<yV3unMT65jtNxj
zEX^HRax#r(ikI1mE%*%upAQe`+tEkNa{tKp_2AGU_{4a4HuDEulln~TWw&9UM@;G<
zPzumxXzrg5E&R1N)sHRynU>qcO;|d|rQWnn*%PhZfDT(ZJ)rqHx=*0ctQ{Z)dM)P-
z!N${OVMON*=#^X$jT3XTi-|$_=Jwn8ad=-*{B28Ub%MpV3+D|4BVNE;&gkj<x+xd>
zK^&l}Ol{hK4sj5CH_hJA-y1s1a+5aP{{Bg>F~`?H=+=7H&aT7WqfxkB!!UWK0IUrp
ze>Mr}$P&`WfYL3BCnObwKoFKqbYBC{)eydWdo5FjYR!;i#!e;%bpWB68^D9YQ}HGN
zT9udm^GjB*75LVM2WR=;-!CE~BL`9#^+I}x(+vDtnH|vyqTIdyB3Q&B;lSA{$l%N;
z^2x1Nfq6AV#U5<PBMKR#kDll(x(P;0TV|EDb@vR*j-z&8c*1TTzEZAW<l*!3g(s49
z1G>1SzfM-l3)=um(j9T0PZA}Bi5}B%+(SwvaM)%>;EMu!8=G1{X;R$hr_aB*cbvq@
zK!7Oh@^-ik6vu&tdlEq~ZV2=&#38IPmzjJPi&q0R^$N`k69`ygp3wmABjwJ{Y*>oj
z>z`y)S_KT2je@A}vbNf{<eq}hM9|?7F+HBU?Fm6f4f#bv`eKF3vk8bL|4MC01y(=^
z!Ko-C0GOFQZwM;~w8$XQ+?HjKH!;G<O?t39WFRCmOA~dYw^-da!OqVNQdu><-)fP>
z-wnjtIe9rcAhtFiwM9na8=O-`k>@K|Z&HkEerfD}5S7O+3mh>T;Ht;2^fIDV0WVP8
zx_2Nf9krkM=F$;6L{)E{cMzKQ)mEv3p5~cU?u%%4carWc7nQ9GiV_+FfbfMSBuM8O
zL26>{5wk8bb-oF;!-LeN++{MnlPh=uwuiRKw>sCkcFP2af~WaAN;u<@(wcI<8Lnx9
zEt$kQaD^r$vRYkna(??9?4$c-2j;OYW0VQF0WgjUv`-)|PA`+ri+T$-eY2zRbU!y*
zDq!*MR$U|Ra*89e-I}RjBu&7-lvilMPOPYLFUF5(rz^eREuJ(ULcuQNB;XW=OJXW9
z2NEB64N`k19w~c+IO%IymTACqz4-z<he4D!v(CDR+V}D@DxW-ZfYT=tyC!m5lAP2m
zJakNh1+*O#z(U4pakE&Li1eb#8Wb)*8}_Kdf<D1gPibw}%PpiN>x0)8bSnaG=NEuB
zuYk98d9gdrq1SVSILc@BMhqLKPs7k~MNEkLj8*N=)6r$`JEYZkFot_0sG4BWwAx{%
z2F_+1Hku4ZgUqIca)pokGq`xCjB;K9sq<6XDaB4goqEh-o-j~(pW6v@O5Fv!V^5^>
z0GB{vTr?4#{X37YcO1{x3|@yCSAPBa<ZS50_X&Jm;txL%tuRK!;)p|e#FNMA$Y}}c
zj2$7T+As#fJrU5pwl>y?k=HKbp`TdhnZx>(;SJ>8ZG!DqA3cPgi8~g!3NLdV6ekdQ
z6oe++Gc)DvEyZL5KDQjkDn(kaL!cCOv7n=<G7-VEJUAqlv&r@voz5o0uXoU!6-HJW
z;sAXLhZ>d><kM+%(4%i23|0p*@M=Pt>QMOGIPasp*4$0ZxVn=mgb0zEl8gHD#e}(Y
z(w!7cbuI0$8JcH5COxwuTo85y$C_5=C|WgTQjYlStgi}+Jx6cD0D3m%=PED(?*$g{
z*n6Q&iZTFci?vhs38<@d8xLRR>~NDBO0JQl`k71S@H5lbshJK)UJFOCO|pB0AT)21
zmOMYG4%CP>C8<h<nOIJ^$?Z-Ha8l~)+h(aHUk!IdtyZOgYzT0Nc3cH*<@9>$@Y`88
z0A^mY0Ynb=627@v{~iu5af~~r2j|lSzy43{<oAZKW##y??>${Xx6U*-$AU^+aT%7L
zHmT4oshbcQO}_xiC_Zn3goK5Fd6~SiS^PAUlFXb0T4p+=^{dqut6C7rk^%ZAzvBSH
zBQ5^TC3F7z2RO{M7Q#@6b!%h~a%8nUS!VUF>;7!=g4$J}5yhWaLU<hE433b8ImXGB
zKL)obVE^0L-;%;~2lb^gydr_=?eD(OZ-4#?#cjg)93|_u<SS+KTf2EM2*vVkas&m-
zjEuBI32^&8Dc0qQ4G_)pXDCin3gvZ^iJ)+qUQhVa^)73g#$BdS_vDKcg!RcwOr(rW
z=2B8X8gvZhN!6mo-FOjmuLI~|WZX+9)-~?qc@^kyI)9r6rdLmdl8$$6N9sjdUJkCx
z!$=O$Q_+UW`$w3O^lS)R-$OM|&IWnt?`3N9QIAA3IJ68POXi?xM5O+b5bH9<+raKX
z=j@^4?@lr%C7~zGg-yUN*&6P=#<$Daa=&e98mERS0(^CNGFZJZ*S?9n{CcF~gIW+9
z)-Ci{5oRfR(MMHxtpd4BH$*Ac4jqv;Ekv_P%c{{nq~Ro~M?4>$6JM3sp0OgnvS{vG
zjdeAnQmCZ!3!3Oe$~gynx$>>o6n(c5uTX4h#6Gs|olsf5wvA))uAYd&-?o)&X~^wK
zmIwcfB`88Ddao2TTr)TxW%I%yZ7$v?*>3Nxr~WI+QxQ?Rg3Zn$F6X38_<k#4wS#N{
zSb(R-E;dUBeMp$7W%ap*djthP5vUYAyp`i%24cBe48hgJpcGC$m0yI$g4MR!iD-$<
z6AJ>bsP6o+{jYlu`Je4#W%tY)KP=2vlYd0?>|h^o)>hlfT6U@Z^WD$Z%E+IC^NTE=
z{8IM2S2uCruzI|slRpLR3Weu<BNHoY?rDi?E8>GWfkv<<&*}6Yw$x274{e0}Fv>A-
z9!|nmO4)dL^V>ApIF*X*L#5=1Lk8;n8oSHt?EE@jt?~#KnCTMCm-??F0!`u%Av2OD
zyl0iXe3s_LQhiYu@I>LMk--w0ndZoj#NvbqlkOYGCK>yhB9`B0n)L!V_J7wpXQ;eS
zuK6l#t6nr(zDC&HZmw#R)*-u2iuuIGYAAgy9d({xui<{)tukHdCa_2Pw{4H?Z51aG
z5xe6dQXC!r#5xH^emI$r`P6&aj30%o2BSQYsBJ~79948oyoZ<j>}w7BBe{>zsLddt
zNWoiNz^5(^7<(-^6Rq~k-kxc@QRjj{_w3x9FxH-&Y9fefU{R-GK{L^7B;4%BGunC?
zTTA8wCWvF$Q@yXg?zS!`t*~<;q-Z|ETa5n%N58=S)3ZIsQT9=k$zXC0^%j6Z)M;Ay
zSLLG+1G%Kj-7Qe2gQJ(7*|BEC21$ULS)^^11lR4PM#As3--#UfkLBOyts>io-F33;
z_FDQ|bJ9onBv%=|;M<17wJ5iKa$cs8J6aN*Dsh1|H+O>rQOrNKeJqO9yl1T@Ao}eN
z4#(~NW?i|s$aoL!I#Uv>B4XZCk!}S4zWr4iF)z;kr!bn6^$}G@0fqBbIxvcT9PW1w
zq%IXouVh;3nWW{fqdbN}4gOhMFP1<caYpMv>toZSq<>#ZuNkQPF(Se6e3q>L4)ab|
zZ9iOjIm<f=71NZCP*qfo@RNtDG9)-ka@mtH7p+fbw7-e*gd}6ADBGSH$_=kFvU3a2
zC=@<td?Yf_;s2x}Vp&xcP<>r6iP4r@%MgIFga6D3^3_B>N?YZkAAW`8dH#u`KQEer
zxc4D8ryW(2Re`+sRk#fCR1{gE3guUTtc4w>&yF1T=Z7!zTCGw(`e~Lpwt=uo&Qpvq
z<MOX8W%TaloYiE>+Tt<9VHc0Wi97M@WXTB4>sMv4JSlXsV1YN$Z%R47&3kLgqd&}C
zeRrlVG^-9FjdpBn8v}l8s8g1F_z<;nD#1Qg*Pe^V`GK2#ZM9nrE}j#}a<x>N(YIXW
zVGa3bHl_5zz-p7zzf!9Dfql#|*@k^gla^_n)?hHb!En->)ni}-;V3j?;rQ=z>Gn8z
z{y?JVj$|pCv;2`L!|O%1Nr}PyLNql*P^VP-ikKc3xQBt<xSx4PBck9^_NXgyYKEB9
z?PoBuu+fb-UN_clmK)Udv++?(VT=+TFw=pHG&^Gnk~?>oR5q4Dz>NZ&ucG8&7qZ(_
zhVa58o-F^TgYZx1<7%c{)EUv>y8^8)X#dH6>o2fuzSoue1;^}wP=`C{a=%u~B@Nii
zv-{+(#cw&{e$l&}HJ1T5S2eq=lwz7eVc5?gF+T2qs(J3--2@g(qv*3|;<lj-@r)Hv
z?A#<bv0Q+FRz!uF@V_Ygrr=J3_3hZUZ6_Ni8)IYJwr$(y#&&+OZES4YHotuTyK{Bw
zO!dWd^-NXQ+|2v*`(O-8GSQ}F9LhCHFUN5J_n95M-Y*Nvx%|PWt`%zEJ)b7shC&tg
z?F#Lq^cuu}|A}bVU3uVz&WVz^3oF@_K^ada_qZ#OqvxPWqmo5xuBhQ~A&vQbk=AoQ
z|5Fj>ph{Iec_sF80SI3lIB`jh)|Qy4rB%gI%-f-08O#6X5yr`+f_HHctlM*U!Obbe
zts#P37b641F+L>pCA<#l;#xmo>!YlGr;6Gw23+d2sU#%yB&IH&@=CwYdZzzI78V7z
zL{Ux#7QRgsr@wmy$%Q_eZv?3*By^Gzes{wtyd5LQCzkjR>@<Zi+%>a^4($FvW-yDs
zE#vT6P}f0WpRKi`GqdM+-g&Aaiej|(RAIu4FYlzKkxX0-i}4n<Wh)uBmw41gP{8Fh
zf-w*0;|0Za_V3Qdo4Eq1V;f3Bf?4~3K3KSpUM!SQndN`_Si9IfJ?h`syuJ?Yc=I=)
z*ba_j3pacS+kMLWRJW0TYVQ%|V|s&=jPFE$?|lf=Y^CY-h54cGwn=dgKw$6vv>|V;
zO77%fc3PmK7@5J5-{xG97=aaf=9m0%-ro>-41bw%Fs~A1t#&{|u0Ee=X{2`UbwtqD
zPHqko<Ka43hZr4l@{TY&;hDLW)zb|E&@lehPvS-C+l-0FhWv$p+sg_(Bv+>mYa*xQ
zN{vu2=_gUo8PMdaqUTaj4^N-kJ6x<<pta7eDQh(+tUaNhtOonm7oqu}e?4Xa`LIH`
z118u*J&}UEtZerC;y@sR8681dj(TO$RtzvpwF(M6g@IFJQVu~s>t*ad0}8OSz%ZE1
zEA-?2dn7&%^IK}RkVGa^(HFcHZQPw;JQkX6mnHa6<ihb$=|vb^43iHH4wm0ah3nr0
z?vzJ_Si+r2fP1u^IVkcQhEar=ZZ7K#k?twI>MBM3DehnSj5qc6d9NClS1QyC{8Mxo
zEZrpI>p%0<P6lpK-c8dX#jQ+_X#^gd<Kz?`ph>P0n_l9XB4g&R2CRWnbQX;OG*w&o
zsPG#$>TKJDm*rw6^eolW_4+D`Vx3e#e?YNQo#SB_sc0cdn9`^qjGUEYI{eZMt;&N%
z+M`AFn1Pk30#t=nMUAaQ!QfF{xA+B3mTOS^6gMG4mqzs?xNl4Il=+%MO;!zcL5=MH
zf2QmR-6BS&wC~#@A11|NlVZBV#YgR9xqIF2;{6G;woe_No%wu%6a5)fXT|EQQ7VC`
z>HMq;S2|I@J#(lf-kAd!a}3wbLn@C>ag*KkFJa|gNUCNf_w~s=>okuGWTjTDxia<<
z*8uPKzsNz0`Ot-lg}?Fyn+i~+V<9HEAm~T&NB|C@YUDSD0P-f4^E`90O!g?9l(ajE
zO;DV)eZ}HO?YpW`@)Aq-vc!_3k=Uz*9n2&0S4Fw7(JW8WDhKsvqc)-L6v<NW>R)AW
zG|HJQD9nmhh=<WXR$}<)gKCz9HfrzUqV}_&q^tkhohSQVSaR*m8ON@}7PNTDT`e!k
z$0l)jmpkf-OwLl}`?Aj_RnlL!pK3bWB1ogY>3t%pg;C%VXCI<N;Gna>codq|g$?Sn
zs^hUVaMmTq5?K=a;@7UbeV)&k?GTI{e)h@XxP5%?_C--o#%sQSl3B;^wGM@z{Fkme
zkOlW(1)WE4`Z*@yZVMw;XLp4mW7>!zZuM~1BVxj-VZoz(LMla3?^HVgV?l#a#PTfT
zyskfe2EJCfaV57W6-j=&sBEz9{kGO^P*Vc>LNijM5)ITsW1A|R=V<ov#mNEBq}d0+
zLxvt0@uYH3t@%%Zm6X9<StZ++2_;lK(VbKxJON85f+JC+GE-ZaS~-H&0+hE*pvAoW
zBgTK-O}SG;G(|?nE@x5}?ANPL;lFG7#8Lk}Zsa6H<)kCQBW>Rs&lv#BnkPgH9|A(`
z;=UEbHX$Xwc=9id^m#~0*#;9SF}!Rr0z8aK(tvw?6{!Fb6vtWQ${&|^H+}a{R&{2p
zEvOZ5F9sj>p6J(8B&YJ7$Mu_8EG$!gayuL}sscbz!cLX~Ic?)^5(iViP~>uF_$DJ?
z(5{T!P9(+43pz9`um-isbAU>M;d57r%!NI3sog*3gNF$_DHJ&H6=qPeZV?QqG5hT_
z%A4I2VX<wq>KO9I^dw4?k332r!nYxoAePcS51jn9N&lWWqfhTQKtd||q_Rkx$nS!!
zKWhYtOS2z(MCj?IfbG71AcLI{VIU_o;XnA_$W(calQcOW^+)tVsoy$u!yFaT!+aBV
z@bw`Whf?XhOXi+WCZHTqB&$0?nWf8p1F~Uu+d#$N_SE|P;>RcoZY)vkPtQ3Q;xL%*
z!aGFQwx3S4Z+sJG6DsT(*oXJ?)hGJSZ=UYSY`0&J^gU>iB0B<CB*jTgYPlr_R<T@g
zU;-<dzO9YZ#iUwM151hkHqy<!{^3~h(Zo8d!X(8(l2n}r3Y=`*TgQqHB2GOu#ck7B
zRZ6^!eI?KUwB}GWen8U!jnqbM{h->$*LGO<*sR;IdQzK$k!ELKK>-jEhbgPW%l-Ds
z=Lg4c2{W~r->Gp*`5F`L+S-Gd-1@@uP^R97W_E{-rj%hIS?in~1IN;{a3TP7Henoo
zQNWBBI8=fcHrj9GN+>V(tAM$q^Ht|gICGX;mOT8y3I7skMo`Q5tmQ=K0J0cs)5+Dz
zvz0p%Cy_^Jc<s2V7@JU)gvMPv8&}T$KVp$3MPua5!@2s7ImgM(+&g2~PU(!)Y1sPe
z27Wm$Nd;QkGzb`|lW~Ar^oYjd=31O)`YKvCXTmIOY6{)d{L;UnX66y4)$~xd8K69B
z^irBIY7BLP=wttO<68!j`b1AP>L#x~`%2o9SE%PIju0?WS|sM9k&6e2-3A7l28Cri
zlLDrkqgPbv*-#;*Iwk{bDkO~&VlttBP7|c1W!?z{^AuSx7kIS)Ku}IiiFG5qpChw^
zKBu`;Ca`QT0$SS!LJsWbFmV3N66625wO#*9GT7~pv9c%yORZlIbZ(vLssOS(XA45i
z2wCz+n5utvrRg`i+$^VRErlh;Q>?zWX+50i<~BJkMIYC1Q@9sLucc)}J$wCoxX!j1
zHo!ub)+$o9vyS;|M*&yOkDH|Llnvo*GK9P9bflCs;vb-*vg#GLeNCSPZT|)|oL&7b
zNI+YcT7WnV*QpOM8X5jZHF|YyOzEV#g9H!KqoyHyV{f-oiG>NVRTX032oB<(rPh9Z
z5r?>RS_&D_!_*Idi<-LQ1>?-e#@{6xR@diPX=mzj{aYx`>tqvn*)SX&*4yO+Ols)~
zXH1i-Q*tbmMN3(R>5oP8H^#4Ds!w=H7c3SnL^6sq0c5QE3;Jn~{w)K)1l1)rsE5T0
zxhDaROaQ0h=JL!*0D(ORuj(jLqPrPL{dkaO6`<)Yp^C-h^3QpqS*_F$0`8+Zm)ItS
z!mzlqm&)EDuj!*Y-|__en`h%qmL-jYBH@(6qq?H45+#FR=NIXg>6$`f%RfevgofBK
zq6#by7$L(RsH$(;OsHb^5Crj3yTIod#7Huht{+Ut)lEuGY2otV$*m4m+HGZ>r2_ba
zUX^cR7YSCVn0l70UY{0gqL-&dHkDsBCm=G7O~>Q<$ED2;^&sv`=V@(|w;k)NeuCw^
z3C)k!7?~SbxgT{8YLz{!iH+v59q;a;$5L~Vs_W^smP*sgrl#s}&P#5?hb6Yd%FuR1
zCz^wd5N*q~&NKp!$h*&;Dg}IIzbBHVgs6$`;Nc6f^fd!4>&q~_76lkk+p4HIklQ2_
zY-t>o_*+QUwly*Rz2e}Gp8@Sm=Q(LEh^CL7RRoi3w*Xgt)s5S`P+i@NLwpa9$q8H!
zkBBsmr#nSP#{0YGCc+X3f%sFHKSJV9JWvsu;cz(dea*rGAVBKfdvbi{gF+-J9}l3z
zv~(XILB3^TW>Mu}JPjvA1nRr|4{31=%b6dDqE!A;!QlbOdWu?W-oN{NM1}GYCH0X^
zllI)B1>6qQY%?(;ifIL5a1Q;w&ejomfPmvl)9pfH7<j7)B7oXK`N&H6{DB2`MY@NQ
zB-j{2#RN~?V<e;}SA0L|V|SSpl`x!}NTD0Pn_wl7v&zCkU;Kw(ouxsJo0tT0YS`QD
z1>9eFa1f4_efw;jk*g536992ey=*;SSK^Ou{5LV|7KtLPeJzaz{8HU_M0&M<CXnb~
z`XJAY5Wmz2wsvZHZ)|M|ind3^V7p&`zW6yxZ<#gyXxRnIOj#8KJ52{GCyi6M&StQX
zxXF2_xXJQM+0XF9^j3CSRe!cmFnhxBGlt?NG{Q##iW%W@G6sqEmRYH+a)9rCWA0OX
z%tEqDE39RK+kGAyia{EZqaY#T&j_viFvbbIPqIM6p{)!wG9iSCOHly^0OZgTQhYq)
zt1kHVK+ggJfX70BZX)#Sc`x8iItO^jSf-UP_f!g83_(zLm2LbSQrN@CPHu2jQ&4a9
zIO1(QQeO`{=6#%MN3BWpFtP>+Y-wA_AN2g1)Iac%12wPj48O_qk18f|GZaE<H6#K%
zfzCjmYJVTVkXOB}yQv#bBXq%&+*syhl00@*K#7%D*H)^lY+V;5T1mB!C=d>l3bYFi
z9506mSb`c>fApV?wtqf|j<!Ii8{p#t(Z{(Zf3{=bo4g$O18pTw0-LkYnu#38nO*Ie
zZR8s2WUP_FOA`A#WiQ9Gj50r-^vzLKZy^mkI0he^2~7H|1uWXHjC?-Cidt|dr;Oan
zM}$5kFChpG*tj6IstKtDjYQZmUgC$;bh(=<^uswd<OrqLpyjX~bKcc7484n|r>-nq
zRolos9d0r`RS37IwsfCr(=5*yt4N)S9|}1)Nmqku(w+d*yQ_smS-Y7?)Fx6s!8(el
z&Yeuv=+3-RlLm13UbH+JLrwVSSs#K53e~vFB3+{@tU1-9@D0aAz8IK~%SKPgf+)rK
zVGXF-g)!-%=xKAjEFmJ)M1txHkJhjkUpWKqFX!ov5#h+UiG=N8LM$mDTn>AL8EmME
zfwU|oCR%F4Ao8-cxR<wu{*eI<U)U%pID&zCY#B^3D3M-Hjo`tuVq*@uY7?sez$TSn
z>|i8vKU*}@@`?&1n&$Hs(51L=JuVJ{wgNlRrkHFXEVQhz#NfaKLx2Ihq%70itEd<A
zKicz0k#DLQL`HQ9TSJ@)^yxMH-LoRNHe-&roSy^yaDMvH<nL+|G5W4VftG+<IPcAu
z<-}!2GPuftJ9|r}S5xpx7ZqCjQk_b7v**oiBWdNFV>U75&Hhska)Qrtc1@gk6IY)k
zEviXvrf7OVm|kB7ysH5qZ7&aPceo#2L6_SHyUWm*A8A}iFQc^H`|*X0U<|6&rFd-F
zJIBCG40mwfVw}=Pz8;tu*l&)Ox^tPz(vYVCkW{j1*cS-@aM?p+*NBOfF7ja9T_@Iv
z-=*=!R9u^Zk_EZ{V6^=c)@zky{2au^4va(*3D!VaRNG-TN!Jjp6869=8opx_k#bHW
znWHG9egfhEesN_R2v0@Oo+4^4q@pUJ%j5|6l;~85N2ahvgNVMM6F^bfpf)w?+QkrU
zh!+fF(hhM`pIS~OfJ7rs@Pu3x&f}(BJ+r(ii!>3ZQrio+eis)ZkT}?}%T`rngezR(
z`W>E?SI7#5xKGp^sCg$K9S(B{#u?Jh5keG9?7vVvn+c<!R<8BV(Au#yu|<G`QZ<2}
zX<w$gL|tgdd62dSy6zb<6FlPUuTc9@PlzP1qLL@Q=&!<M`Tzq|c~>_8bT~%2@;viM
zHPpoIU;imJDv%m}X})9S-=-Nh7=)DE`Uf!X==)C>8_t(FLiFCq1$m)(<>Ny?5u|Mm
zqDTy_N_A#<Z6-;P6FEF57?eX>;$V+3g$jy9aUE&$C^B3sL40;IxLEkKvkUL<-90P%
z6%?{!GF8Y4`cu}Rb!21{^*LXe`)xi9#IYbg+;os+`bnZ@x`0u^ZhBQ<QN7E9Y06l5
zKuzNqYk-i6OlIP8DJsJVeB4nj3u@dHI3Iau*YutAh#~AZ6$6AL%P&-?9Y2|{i4^l*
z-(=Ap{Pl2KS&!B_Dm*NTk<PAF$tBhp=#KGK?Zq&YqaWQRcJXcqDji$%g<&$i>bM!j
zzu4DN(?V-%el3>c@(iX~sN54Lvs~n>+5Lz-XVRSEb(xgPZA~<aV@(4`%C4eu5w&Q8
zAx%kC9p(UZt8y9Vp(}hk9sQvQhLr*E{Idf)$|zs5Hq?tduS8z{V0nvTQtAx|NcpH1
zLV+jkq(2@i77kM=`I^f%oi(|s((Wp4SMx}#OJvzPDsP%C_J<R)eS!dgem|Gna#dwc
z?9<J#C&4ty;mGH));qq?c{;dr1a+?{{}4HIB#Ww6%(1?3WwYOA_I17h{OVlmuygW`
z#ak&Q;_Ea5$Iqr$BI4`Z`t*;}@c}<VR)fo!GH;@Rvgh$Uw?jw`l;@fcVkx2R6g^{!
zhmO0rP6U6yYv7v;0P>9$te=_l2TxMW7ovD2jb4oH+5$lmNu*G~zk9v;*9(!}ISW6V
zh*|B&tmU}X*zymSuQ#jIZfj_P$wa-9`I>W9;25>9qsKVPS{5a*tmDA%(+o%@y;ur6
zTwJ+F&4`n_lY-^n7bVpvvkl*T_`I*T9e(&w-~-D8LnOI9FRtCArW1$GRyn!68$bcf
zENHJ{jnDUmU8O;}ITwUiU(PoVV|{XaZqDNoW2_T}S`6>2TZNSWTnpDd*e!qieHed>
zBWI-|{sXAqixu9UjD6`}9}7BX*^Sb4s5gmNZNn2hKIh=C@#X`qS_ewue6Dtmt-qTJ
zGnwNeW^$MW?ft9&P~xCK@!YeU_5TsZlfoGs9Rj?UIC-<P=@D|POTKdsD(`n6UZdUE
zmXN0>F694JJ?^dV&KCXV&yvBoS7Fx*NO36EPM&f!^oymm3hzqbkNaj4B-~WqBo0a?
z(w<-3utDmuw+nYReBb?r>eV-wqxKX|#lsALU*L!+VunhMaMQDf=*NwlW4w)+#*JXs
zaUMBTPrIZR1>n(!7j*V-|8@`$^$a3maTS(_&gV`aCCQ=~%_WqUFy*v!N|sTPZ-rpx
zOq|xUztEcy0N3bVefj*;E|L3p$}DW+LK%c5LuK7GrP4HwlOESYo7Yj8$SUSzmqRN~
z1|0R2Aa-+@6ONHxMm`S9aJ?A+bjo%@9`<iZ5Y-yXl2CDmdQ|hm`xz^K;%w?wD>prx
zMGYeAHnFGGkj2@OBGgSr<fc;t4<H;`JW6%r@<+<H@`AEt$Wm8X)tV8G<r`IB(U;B@
znbD-)UlCbKv=UORViZSCQ3J=&*HKEqDxliDc7+(UMUrP?8ILc2k$L3};|!VhHEE8>
zpey2cVC(9cvL9z8Q^m?tJsQfHM{~PUXu#sY^OR=7yF2Auj@s;-TJ@3v#-ooPLujmC
zzU#WiBO5F3s5^fP>dT0U%-Hc!xC&?LupLrT4jkTLC_KL*@DFY<szvXhSWh!>sD=3I
zsUmWHX{7U|i{@>3#7ubSB7-of^7aq9Pio9j+prW1{hCzKH@g&;U8y5{aV|8a)cw9z
z=KWe#OBIfB&~t6txnT}&Bhlgo6Mux(?EU9A-q+1b2O;9~`}XBE-<B5y2q<M14T%!E
zDg9fCoAqoCLq=oo;A@u`cVK-8;3SqIGqZr-TtD--?mm1pRrU$3Qe)<wd3z{&^(zY*
zJ0K6nL>U~Ls<j0zwQKB-b;1uxo7UfiB|p})_sJk;KQ$s^Rzv58CX-YAuL~j&f{j~O
zl`d_2)Az^iz6}1BN0zCl3Q@)oY6N-?rk$bO8sqDDgiFTcbVHDJdYmkLO_B#%YhE*w
z9Qb#f2k%1d!k6R)qp2@G{Y5S8y%e9$T^gsVEJ`rrzAEm=(De&TQr7y4X1KY>z3g30
z%bl9A>?p$1TbTIjnDNm_v*+uowRR#;2L3+<SB-O=fU-ItlI`n00j!h<V!;&{FDS>)
zClmJ6e$pUz^5Cb6v9Vr#C79t=)oIDS<Dsd$aSE6gU8^b$-30ZIw;0Nlb@?qq4U!E6
z*f&wzv4PgB5++9jjp{Z)fsaAo+mcQE3XZCo-C1)k(m0to5(AOo30oAyz0ZCFfb@Z(
zI`#_p<`})GNJZLsRCW>W%&pRlZZAyhiIJ8uQ78PDOR+};#EFNBVqC?9-)TgY=GOr+
z6s2jjAH9~dC=&xSh&}uTmVPGwkO^c08XO3pttlFgtMYT4z#m*TOduj3-Ai?<nSMn_
zb=fhRv6+r+Bn$%Nr|FJ?t;cAlvv_S2yfl7_Nq)+zg97u#Tjn&b(8BqXB}eAJRkl8l
zhEFO|S6e0Wo$RS@dYzq*6LyTcU!Gp~LlYgVmAem1Q||Xy5>Eogz6slJCM&-0=YOYg
z_dE2AIrcj!*}LYqW=~(I+^ty{Y`t$ozk6Pi8oXYOn<H%rn%Q+H*$HlTqf72hF!14A
zb9o7Q&A$l$lPX)OPewD100cz!lNrVGKT>6XT&4dDPxcVkN@+vvuHk`};#>y2Zsu%g
z04cE$uKOOno;rvzEy}1W#Z&`d)55OEMC0z|a(Vt2X-ttxA6mKORb5|Y&d=rRHo^NI
z2xkh83zuXq&|t+<Ovjd+koM}_mpI`d!8@`^acm^HC2R4Mf+HlW@nwgTa$v6->!iAJ
zz$EiSV$h0rYs|aI9BzJv3(qD)o`S(i(!fv>lZ^R8lRAn6`9x-Dw@Gmj<}F6C8))ny
zVG0h;a>z+NN+m&^&w>0mm2B)!vRsJ;iYYSreGwk1jfCi2cz^W401Maw(o89A9#}3H
z$sD)G=iSTHYJDL3Ycy~@C$(fMoS8}DfU8(PN^{JFqvi!X#E;3&^e%{K!WvfxUifcN
z4@@s@Sw&Pv-y1MJfg`WfWb&y|dqIQ-cR|^EXJp;O<%4s3Zj)C%R^4vm!cJm?6+ZMx
zfPz;NZ%$uzQa{PQw`?tS!yjH)rDEt}vf@0Zs5b1*_uYq&OFhIM9wm412<p5+30DaL
zk$Yy7WIBN@#U<$MXBc(tDJ=T|e=%tTV){RV)RK-7M1BMBa3sy?sjnuS)DTZe639@0
zoj?^qfI9L~GXv@!9ooAaM28KS#a{mg8n2v68FcyOnj~v|WAJrl$b=@NlLeoPMNxqZ
z`d8Xxi#P7<;W9{CL@7x;8>S!4qFYPcM{5dz8jt@odu4M3Qk4)dB$JHC6`QY<uA!!O
za>N$RN@FdgqYH3M9zoM!firU2^ZGb;_1Eq)OvX?c)fsTZ8-Tyq?7P=FmNG)ckdxE9
z0^^7^xL8@A-g$L}_pJ|-hs>+N{qbUaO676C;?mN)du-Vz>{(|9YHa`)=$>lQd+|Tx
zTzq3-GQi5YeDNj>8yHuRJxVr4b0;X~+Mwvz$UcJJXiW4Bj|~Cv`MlD{VK$&K@S7lU
zvb0v&&q)SC7dxBL){!RjxSKjR?SSlE#l>%s2;+nxQMKMOBEgq|V#k8`POk-$*@X-o
zZ}18}YEvGnfwzs{ap^%%WO`hQjPjS^l*uw}-Sn~q|4EQbgc}R=>gM*56Yyb;!oYYD
zL5Ud)4%G;FU<!8N0H&2rl2Amk=O+#(D>2Aq_`^qUu!|91?GS4JiQ~;-hSypn?H>k=
zi~x@RA^^J*VePN(U(F0=7~Rxs!U-ltx}o0NE<a=MMIl00!~ai1d!vxfL(iA67kf&P
z6Z$X<9Xbxn0|FB$vb%)~ET=bxSb4OX>*N7~r2jeDYn%xW<cw2<6cQy`?9~K<1I;iE
zEVO|vCZtejF7aNpcfD8a?vxJx)x&*ECK9<q9gX}i+KCpG2@>s0AvR1A9QF(mnm0$R
zpx92hXfctrUA(D33=AGNsLWb36p%jEM<`y1CJB4|vRN2dm2cP#90RDJfO!O*aGk()
zVasM>j-%Hu>zy<&6-=o?a<cifu-E|Y-dZdaJ(dPj4xI2X$~dREsb6yFa=gPRF!k_Q
z*#^gyvB;9;jh%5FKHSpSzmi#gug}{3D5rgWH$np0t-ttR`zxF`>}1)X+dUsw3!EpS
zy|x?s{tfrfH`>X!aD;N(cP4GFZ(kR7hR6hd<gE1E;_tfWCj$JQuYLE!|2Ni;#++PO
z$oYjcLo0|uVFyWsZfDmidop<uW)(o{v&_nwCR#7;AMGzuBgTAsOP&Z`6xcgf5fm+-
z<aBd$bMf@>dbm7&ULb<Cb*^_>1SQ|?JM1DlAy!Ed!h5c7vg9DFo`&NHAqe?C8o&0%
zKb}4O>g3)W`Vro)y4%FwICwen9^UvtFP2YP*F^k(%XpdNXOTt-E#;q_Sl3+we;lT0
zs7pi8Ht*Xe!*gD$kq3MXM6kO8ZSy`RHryAsT>q=yVl4W;%{_aOEc}gY6a8@qJ9{En
zB0+veaO&4*@u=6u^Ktdk3v0Q~@;>yCH=?bcLnjce;9>NbWNrDVl&SG)ffbZh8x%~r
z>s&qZhWXoSs^#+X(WT7*MNE~j5qI`6sL8TaJ!EJP=IJRtXyks>{pN8Q6BF~j1Ri%J
z&!Z62G%Cm9e#NLi(jvUJW8-jj-Z#Ku%pNG91sg%yp|9TPafHF!OO-$LAG3Gt@2CfC
zUM6=cZFj2Od}pn|wR)T72Huwux3=D3unS4BGz&gy_>Sp34aNSrxyAw3w#n$;i<--f
zVVP+-PQ33-h!-wDM|rpN(A($@#ndS7Q*LRqMxj-7s>Oy5df@R{1)uDr_%E}0&at~F
z+IE5BlW5pQR$inl)1vym!~HyDBEtA`Ll88me;#zuN)ZQ+vYc~{b9!|7f3dU?fxR;k
zS7SJ#E+1-~P#k2NfSahA|2Wnhdb0giqf(`tps$hV?N6-IcL;=Z;_f!%!jab}sq-N}
z=oYY?o-$|MgX7^q@OIppV9m2Eixmnk8{Uz7q~3o^rjU%G35O1POe2XASVamQ6dg1{
z6NuEm$m|z-0bDPdswDGjIYq@!)Sz>Y|3G4@^9TA5*wkc}`MUhFZq^;5EJ{gGI>amc
zeTdW`zt)ut5XmU=8vWHQsgJ^Q?gDSUBThqbtbN5sc;w}mIDu8JWZf!O6UQKTbDKzk
zHi+ClEsDbA_pEWd$@O|Z=wKOaF^*<F3GEQTx*+r#6(cv5FYJ&TH<d2#&}CjLeRAZe
zQ^w9=yS>=bLcJq-TbUIW@xEA|p!M$=qDU=B9Pg(G0a9sfAqq-_FAnO$#C*kGxP5iH
z2$M!GOcENWF{hW?DUKX_og5W9TdiS<9JwjY(+`Jhr#+R`7_}QF+QYMb5S1#(3IJ-^
z0&oPU0HVc<j%Zmcay}4d&m+`gxF(Hsa-i%lp%jq&8Yu8YIgy7E!mH+py0X|T^5JZz
zNYf;2Rl++Qf6;S!jk^_KC>G2e*-)O5X$UuBb=;9(*vt;~B)bu4v^24q($w>I0Z&Y>
z9L?<MTBtNSO;wz#j&!thlG5C6#e35#8x|r)a`dVq=+J@>sW3$==PWeW=j>ONE6LB7
zid9ey2J@A+*NZJ_5RsL4f9&@A4v6=}=ahj4@gtS|C3&Uu=cCM!n}cVnWlUVLyx1!4
z3|S?@yqG;1QU%l@PKOK2_f$0{FP7rUT=dPc%v$FD{t!*Ya1y-M*knkTpae))^t~MA
zI>n+>c5#?h#jIlMxz$OBBh~5gkQ5PpNfW8>=C&g7aMU|ZS6r&-Usk5_N$%NL%A}Jv
zKO`u}<^V|p&#J>;?}dCI!Fo<G1sd{XHxhX};<94;;aJHcDpad`$4m2M%;eeVP2!Pf
zqHgky^aj=GY@9Ru#(TkWiFp!+*33X$4c=eX7RC>X#0B}Z;tC4#>VAd36#@$Q5H75z
zVIW||3Zk^G2Mrrwy0<fQ19vQkYKbf=-){uZyQ~>7`H=w%G4zA9-?v>ncmA$gg3aj9
z#od_>dO(Ef?rhJY1V}L!(<nsrN4oIKM^K0uu+H(?^U{p7=fT>^DwO_~QSFdYAS&QG
zO1&cV)OC{g3EGcL3TlwbG;uhk<1g6ss2{@P#(oh|PS4hyoNx6@VwKdB*UKF5Tc1An
zD`D3H=NZ`lH2Hw)Huj;XTcknsSb};v<W%tXp@77JI6-=mA<bpn`JY~EifvkOKc;P-
zKfaoA6#}`1r?hN1`8srQZyJ4GwLR7=y1ipvaYr51c)e6!X>)vxAMbJ9)GEV95Y0DU
z`zAW<wI3e=>M1cX!<(2GBL;3w`&bA0+o1&74`VB_M&i?m!1UG-G*yMO+%6eKY{#@H
zgX)a0%FyH$Y~b<UAOa`4!PPw6w)w<<S{xX%wP!PAgDrtOa*HYda*JpoyLlEDZ7b1T
zTiQ8!Y_cyIrd@GMwG`Sfk^R@JsW+eCdM|%$qP?JYT+St1euLknDyLpD`yabFWV6R^
z_j$~Uokq6No7B=CHph3>#ILh_ZD#-`?bKp4>{XtvfM-871)O^@^4>$4!}ph7#esOM
z<;DGLO^AS@Gf}fVj0{P0e@pK@HpD^eJO)-%%l4OYLg((0aSkDK=8%t3`P)fwPqodU
zPJ6#RroxpkN<*aKTHIhvbZk=WBt$T|s>#+h^~qP6^&VMsCmb(N0DjrQg?hvGT#x!c
z$9e5R#&{W%*2>sb1dMtQ0h#mts;fu>&GQVxfoU>hY0cMMU@zl}DP?zG3$;XMM;a@c
zY?WtM%>$B}KiaTh5D8!R5nW$4SBrWKwUj@cc$LeyDH~RPgSd_jK(@U(KMQb%)JpWI
ziov%rF1qbo=#@@0WD9e&0$3^@EE?-5IHpasKB8&ZLAU72sK#Wm+WuA;a%&wDAQD#(
zS>D6Iv;xclTx@-;;o3JmQ&>7nSiGBFs8*XHZEb8_QhY+KyCh9?l}x%dy_2m!E!|J-
z&}^h`hISs10gtpPuQDmGmbVK3cdPS#n?>^uxB8Yc{!x?mv-0z9kYsb;aM0lj{>+ky
zj>LkJ2zki*nd9P<XJ+M*PT<tiRFGsIFihh_{#p#)QiqCmvLh@zli~y&u?N4U^fecc
zxQkf4IG)E(Fv6gc$htFG@k>0gvwUGi0jQ`VVqS_0z6->R_!RI%>o5Nrf?1+7ao)yX
zIXNv>wI=(g9t|&wmut2iT2{^9)q7IXvDc?ING2{;K~$AIxFQ;xD@5aGKW>+*Eo_`}
zdYg+svyz|LGix{iP%Idof)8(4Wo?dRWWs;%cZUK(x9{c)dpm>q;Fr^VbLB=OH{bbt
z2sZhw9vgSa3MD$01ZVkL=Ic+bdSj|wx4UJRN20R{bjiF;=bd#|#jKa;YrCXEB3p>8
z#F0>p;wIy%Oi4j7m1b>0%ip(&dKLWjIZQSw9(H=82~ffhiqi35x2~~r0MQSjpdk+d
ziQ~O0?YE2Yr#~i-i(J<OdCZcs+Ih;|V;W})L0b3VE9uBB<lyyAf?fJrty({cq-~7u
zBQEY8CKTN#rgA9ks~0mNP7l_+aDO1tw_NVf&Om7sA;0g-!~F1Dm>ej~5c+9HkQDbS
zM``r;x0}c&M<FX?*@qqA{m2jaKasN&VXZD6><@A#0RsB<KO$!v3wx*k0-Y~4&YjkW
zk-y<S(A6aIrPxLG1ZShscvA3r7L`+fC(g^3oSMh>CJ1;B=DR`8I&XelZvMv0DM~Ea
zw~H|qxJBsjdVjeD-RUD7EmC#_jNU;{Tubzkxgm~9DOj5{OR_<K>WgiaMt9Py`+9ka
zZb{stMzOU~xzH5hB*9LP!Ozh+4xlAH(_wc&5*^S)Y1F6-jq@5Lp2Q;QZjy+%ash%1
z_nC?L!xO7cQxAla6q%6<=cN-&hOrF@ja1DO56Ljj1I<|Duvd+_*#OmOw4^0m$gna2
z=^!5U;1W0Z&@ok&6KS<Ic6y6mlF2B+<Qa1;TFKm~y$sNcy{VQuWesD-4Xe@MSb1oK
zux**jyr@<aoQqah?E>Eyupa^GJ!8^VsYyer+6QB)ov7YY{NY}AZ1gbHUkeI{TpE!%
zK>=N5d#vnzT2Vz{g})9Hl&x2OClN?Uj-LxGFjwpg--9XG-w$*=+x2v~J88{RCo&O9
z0K7$eg|m_+#F}?(&(Gkdz2Gb8q@dUS#3wMd_Mt08V~bzi?*ALkk)Ue{!JutdO}b6H
zBN-KJ0Z;IgRIE_kFXc$Pwl$lFDYOH!gmP$TWmtx#K+o4#?u_9|hkf<WiOvwBq;FmW
zsi{-E#?T%l^bd*3#!iTJ@^E<kG)5mGx}|tIdGB`O&XJ*%3!M2bbZQ(`r92VLBn0hS
zSN~;ya9E5QbNqE6!6}Y|kZ@c@?1b1oN{IKo1qOE)k+^{+H8}SYq}|y%sO_J8Ke|pO
z0v3Nxl|5N9jBl0CgwC$f|AJAD0!o*}8za&jAUy%x095?T@$)lkg1K!0tbc;4RizXy
z(GA+LSFLDt#x7h#7Wf!wRGJ?o47L~muCD^isXpfoUXKJVd?-JXoua8&rC^nLEFDXm
zMN~r+o)1<m$O0$?`Qhsvuwso<?<nUAhQ}iCGgEg8S9A$q4xsm<6Yy)z@0maB@9u7n
z^4yK=&%l=Ix_f$iBjBN(P|eID)j-uyYnR$j?Rc&o|BW3Hl&`1OSL!YCmjTWKVF$N{
zSy@nOJ+k)+VGU(EfrSy8A*mp%hLJ~M0AEI7ka%xQz?>f0AI-KRg>ODrJUYm^n+q=6
zVTC{oqU<A(R-PV$P{PKG{x*(?*PG)61yY=n9s}DJ1W2~`PF-do`+^ww;|NWLVVGp2
zD91)S(_qUGg@@W57<5+$KrB%DVFJ<8O~9f_*Ja+b0Q;mWR>33Pcq7`5paH4&38K?Y
zr((-*!uCQdU-@O@g4Y#2!v}{Oab}TT`*12|+MI!2)ye(_NuCMDz?o!|gv!Bk*C>yV
zg!&RfBhMc8ck%?et#<rE-tHZ4;_&f?PoR$_%%90Nu*q}OYQv8r%tJ<s=qjI%0fv%6
z2aKsu=2q~o4;}s1-{V{9D+UHr{E|x-8OC_92QGv_JF9iA$INb~_V@0IJ_7!(8fI{;
z@da-4*|@T>ZT&WZ$@6MGcpz9~_YhOgq-T5m$cP3?D|B)cP}V>bvJ^2ERdE4ny*#v^
zD$&(tVA1aDSzT~Rf(uQn$O3YFaRt*sWBC)%H^s$|8h&TClWVM>A64ef-Ws>J!|*x`
z^a!WmeMPXP`|-Hg;>J<i-O=Uc<nW%Rw}bP#Vq8G(9qqr#;G^9iAs$x$b%Jlo)tb|=
z!9!;b7=5TmUI~k*X4SYNW$QQ6c{yr$Bgp(W>Mcv}h3K#uX=yz)h{ON>cHYs!1N9@(
zRbRB$?P3b*V+s1{@jijyt{<Y)<+ejcXU*0M-#5yE(yid9)$lA`6uOQ?T2Nv(zEWhw
z&xG#q9j?;2$!^|8MuEF!PX9f`mT%BTZ1$}DwT#V3uJa4>_MFty05Z-T!CrY!S>qg6
zkI>Eah=-?d(zb0n@bf;&2;^7y_|PU~bBIii{m5XiABd?DXXL&q$Ia2Fj>f$1<pqgN
zhnB~-MJHlP<(;Xcb6A!eCI{oUx0=B#1sHXNW|1sB#I^%M#jd!G`7U=+H!fBgkxORd
zLTKJv9T?=G$O1Bp6I~5WoR9Y>P8*k-X85Zv8cF$2vYQAvT+QzF<M|u^3+xfvh~WZW
z937~MRbp9?6|XXT7>OAto8|hHg=kb(jH{rG(Q<;u^4x%?z0+3X?{UYMtqlu$i_4qO
zVcje%qG8*W;B)*1^)-H*5$>Wa4pVIDhtA*EnZJgL6Pii8Nng|!(E#X3EAMQ63l1Id
zSfTAM9q`Dus-7-?TG{d;Mh3!w)}(Ff$oqHMP6Bo5CaHg7;^u6#CkqG!ISEm~C_JU^
zG1tGP+?H*8YRnPUHkcM`sv||fhuW=KW9!+tsv>6K;gRuFUCVA*(FFohfjxv`ckW-E
zP}WF{%Sv2|9nZ&|R6U@@5VnaHWL5RY<#sfwJmsm91oMLdS6>r4cKOIf_Kq;2ML@C<
zDlBCbAz<B<FZ{uwyZxPyH%POmJiE5f?sbuB|MY^mZ8;#%e`&R?AL)Na**I8E+7d=i
z;zB@(4vsrwaJ?%hAPjD0XmEs?p~P#mBK(T#Ual&OW%g>c9s2EDxSeDgcic={UH-NM
zcMNfD-2LyuQQ?<boj(*2m9l{Wh=QR1F3!LPJj7FMSK%lZr+lw@*EAn<V$=uN^X+Ly
zl*(Au#%Ny0Z%S7DdL77>U+cx!ukTHq+ZF?OCrUlG{a7*#I~s$$Pg#^;QYei&t5pNG
za>MwmruwAdSxznuSstBpty!`{XlCyn?({I-X>Tn}5AE4RZ?b`qn%=@8sNmhRFI|V<
zTX)}jTHTis7EvZRBZuvt6)o86^9$js+8j2l)dri^5V}&UyN%U6z_Wj-;A<n?&-ha*
z80j3;`91q|ugivK&&e?n9;81~g_g(!#Q`iZ%85ZErEw-R<F>gAZ^te}OWX4__#FlH
zT5ic#P!gKT3p|28@}%t65AcvBzel_G0mDpfQX5G)o_{YP>8!wmQyq7P>$vIhTI&^T
zsq*YD1s=uH6}rs6gzwq~BQ_x9sttVZ%0LHlK08d=3$Mn|ngSi=xZs>5u=nL~Y(xbw
z`+Y3~lV^~O(cSg&;X^0J(f@8(g7Qk|xFR%1%yAp>zwp%A<gNd0m$qsWcI=s=jbZfb
z@X>{T>s&j%ABYHlHYG|PkDQ#Q|A?9v25tN65sr97yp<dFQadI5xD%0MUDDx$YR+R=
zknFcC-030LSW@o>H9l<p5_-Y`cWB*pZ#iWBsQNusiLP6?cpa+^QG4Gf%h-8IWt@NV
z*HGG_Y(&jdQ@JNRWjt?|uUu5ci`%A7y(LYb5|+nFlu^9@DvPCs!$H{u#18_r(>QZb
zc|4jtDI{LeT3u1*Fed$s%|7MGW8I!-J!l&LDX~MbYI$s6>p&UVIjcgC@f-%RW;40^
zn^v9`wO*r{j0t?1?9wz`0moKM7pb}9uR<k0Fx=v_2o~#kY|#0iMJN59c`b6tTex>N
z^P3IbC&KafxE<4M9wOX~0O!$^_B}W=y!4*u*epwfk$2L`#w%3c1qAUw#t3k(WmPCj
zJ^6viE@9&|%zrtQ<tN<Asx(U*LTUPmuI4AC6Jj(=-xpz`7h^OVJ}tpx2%}--=v6Lp
zl2+c);M;2=I%^3O8~1VScWQF0EAY4dw>n~*+g-C!aW+(qV{imnR|0>P2GPg+t*N&?
zyGW`qnh3FN<kL(8<fhABciTUw*3Q4kdREp5rF<_wHCZYq9L*~`yr?AML9ZKx(2mS>
ziYQvHdwkwMz3d(~w($RUgamgBNJsFy88M(WD9gWmgZ^hBt~By{U=a=o=!F;vh~s}O
z#EsZl-R-Si{#!9#jbo*>|I^2Mq@_S`8G$e;N?;nM^P)6jm%@i-$eN;P5pOfr(BB+S
zlu9)4k+^EnbNeSunl(kPk`H4&_3+NNN!tAxieEjkXP#;-?(j6I>X4wh4fxS&P$!Ov
z4z=#Pu5OZ;wp4OvN!P5Fjeg^cqr)yOk}!@Vz|JMdAU7NDw?;>mx^LBYgOe;vpqZKQ
znw?t{U{<k&7a2xf?i*@>H0!xwy;JKon6w&b=+?VngJxJJBwr9q7-9HD?5PYTMvJ~W
zrcfAQ3|(-QV~A)eCa@MT8NF7)0CR%fEJ9HAxq*>sE~{ataU@AKsUDq!gij>_XcAZ3
zB^?DA)zyL53My1hzE4hGU)z#`Kuj`R@Ahv0?BGf0a7S5YXcoP^=H7rB^I=G+3}I*4
zsK-xnSSOce-8g*>>V{RSBz$kiAHsW$;$lENq}VHmb+$|%Tg`A&+cb~n?w7XKt$O2^
zjH8ZAj0+mDk1%0<v$l79^11UX*pp|C0I|pc#33j=bq7T!+4b!#&cR-~z!eCV!2c)#
z#dyHsT8xczQb={{kA5fei7V7=sJt4r(#3K6WugZltxY{<8#O~sfMcH(ocnPh33}qH
zyuzV{aq?r#H~<q#Mbblc%1L0L-|}VzJR-3f6Yyt~qi1qNPOvauWvrh%VAvF(O*W7e
zA5x^dG?x>RF%szxkWlv-tH{p6GOOe94Qprzqx*}#X0HH~*lUKWpsWg*VTcnO1Jmv~
z{uK)RUD$S?G0H;rh=zgtB!3_^%)`Kt?c7eMIc3QKoWeU#_pJ%APc4#Y65Jt^N`edY
z!xlo|uWEqW??&4rVTGM%5htWD;S|11tcr{>>;h4k!7}L<SrwX@2tCnCi*L_mW@W{b
z>;}n99)%WwZQH97Do?a-s!_)=i(3TQM}s2*Wy7?{FhUC025{jV=Z7aClxx)#f`c8h
zlnbG?8)<mGwu3kxS9-gc8o1YwZQeW${N3~=ZCNu*ZR&AzcsA0%*4d1Pc-neAjOpTl
z2@R_3P&<CV?6q6J1pb0<f2m&gb%DUT#`C)V3)_R|`}^hbmV+#spno^F*X5@2Wnx_<
zt1is{H`oQSK4O>JvGga<6E#RKO0(2T%?>9-HuFw2uo)a4<&6)>Hs#A^7P6V)0TM(0
z9Ea?W9s2W02PM^37p|Tz2(wve@}H+ZXb?Qo3uX`vFRYNi_sg}V^QRe$XUex}<AMJU
z@)w~gk|v&m&L?gk!X|DH&Yq4QBZT?u2vg(eM{;DZYf94kb}YF=*x<S$1J*YLc2Xus
zEfUF7e%tWc22IZKzG>qK7#iTx>9SMp7N!dIBk+3Rja~<MS@+<V!@H+PCzmX%xw$Q;
z%}-?Qs@RhfZ++{_@j;N*5b`WH?qu;2%zI;$RMWd;#`zS~4Qe-NE)Qhwjx4!(@f$IH
zy^XcCKwe4s?YL^0(M=6-z2n&t6%wT+GHn98U0(wAg0@&`^nA>{9Us0lvvFP`dcHh-
zh50oi=y(BL1<<`vv0L{JortUUf*b<(kNM>>b$o^dxhJ{pBUT3(z5B0O0>|GEc_8s;
z(p|JMCb_hXd47V6ckY;mD?<_`tmokn6XzKr-Ck>HDSIDg_ANfIF&-e=>tM!+6-<Pn
zs-IN&)FEh=Z-qhf$iH_FURU_&kzl=3QuyfY<zo3#ZpOo%jNm7C*{^WDAxutw0Zase
zeS}JOvh#GHFWK`*gS$U&uRsId*~h4NwmWwNZ3N~(iCHZB$cek9{s^G1`+I?1N|@VW
zdfGejSQ^xX|NJhdfRjLIu>wEv2%7}RX@E5G{>&;{+qWP>l;fWpI4AF-;$e5{ak8;R
zM-qIYuq}Wn16$&im*;`iOGKg~hduD_<d_~kD$xCkMEg~%*UI+mAI1?sxv4o=9T?L+
zSp&twn3Q~C@#tdaVZEt_=ci(6I4sv5&h4g+zr){-06A#2!NvB`bW#%O#mKaADIKW!
z17<6ajkT>`6*84o{U`U%I-zm5-PfIo-NmRgVd(-(z#~fRQ}^f(uvWbNHmTKVD+Gs#
z(g352c@E$nHD)0eGp?*K6{w0jxz;f1Pgi3<4s3h^l7`f|mwc#vNcF=7Lj5FYe292>
z36h^^s=v{7+ymIuV+r_u0}SE?0FmAZ5M_=T%_E8$-ksfakvt7uwAWt)BQ~B$IW@u$
zonFGuD?tsYXEZmSJa5iWS@0s96$bOjSzlen3bkPcyr8rSldsH!MYWM_W%ZG0X!q@@
zgn0gvGx(e^7&xSPH!Mt&!T2H2=Yd$6JrzSlK*0pp7Ql5l>u{<wQ}XF8r;bGvGVLF}
zkfWkR|G@5CGYW%^w!&P6fzOid)S;UQynsrZW>;y(n@)1F@gYW@Pj>lO#b6W;HrRt0
z`lf*5v-~?5P9lT)P_o!CY2WQ%0-pM!pytD5k&G;N@v@~5#{%>HA+lkHcaSJ$rE!3&
ziP41x^%6$je4=Rua?W1*(GNDgTn>bm#XqyC$y}2Tga&BLr`>#|cs4lNV89f3iCHcJ
zC}rJWiroDbBUgp1OMf-cRe|~i!QA;iB#j8pxHaZ`A&`-|3Rs+}s@#LH;&OV5Yn}%+
za#33wL))-D9h3$@QUYD)lhnzwS@ng~zjRsPAsRVLIU^M02A*``&(^OfC2S$<T&Ks1
zje*FTA~Y5Xg3qrA0qH37!R>ScbSfJB+2agKwD*vVF|?#$@$@?dYYBUial&(iq7E~8
z;8nb5w<et2V9hSd;B91(U5zDdX4hb^o^p1<5rZJvf?X^rFmi4J-Si0aM_8Hq%zlx^
zD+>Q(ZX(Nr-(G6iTAf9Oo{#7WDs-b8_|6_K1rnl1@|_!uE$72hSn2(VDI^6e-aAto
z3B@8?^#0>|i#V;e>m51}E`fC)E==I?D{c_M6wDa*dWpDHTsEW25bYqpJRb`MwCn}=
znl0S3sDl?4O(C2xOH*T(TgXXXnJ&8E(eZD;06eL;*VW^(Y{zQxUwtGCEdii4K%XkP
zAVezZyKu^r-_E2J3_`+{V3F5!vn1MS9otQ|CMBX0o>9r_=wHP`b*Y$?JTp~LYPK|=
zvhf#w$CpHF`n!2B9d%ebOb>I&jrhkE3PStkNi2ZlKz}#j3Rd+gCB$!iPLF3r=9CKD
zogQB-bh(l2ZEGE1tfp}bZsnRn{+%n@GpB&HH(Nc#(}QuXjExxdOgz?~OrQA4K6qZK
zxuaw<O;4l-nh(=u18TLyY9}x9*OLbW6U3tiu#CZI3w6*o9;hXdLmhwYy;+jeV5IbG
zA19G*(fq7)pa42rD2r?MC+Ammwn<Cmw}Pz&zW{mpURAXebc{`MOsO**gA*2XMRtgs
z2aB0PLfYXjO%;ZE>|A4Ga;xo6pl6JG-VK8beL)<`VT4ff(Lnx%gS_Y>__u9nAObNq
zz4Ipfxl-3`{uv4x$aN#|5l1gy_>QtGx=Ph*#OYp$;C`Fs5jko&7cw98%4$NXEhF{O
zSwkUp+?nGL9+ZGK{DX!1-q5AD%yXZ9wtMjvQh0i&6j<gc*-M$N0@~ND+dC{F#Gz+V
zp+N$U<OEBlni^qePkF+H%Xz<0v0|_gDMqu4HOZ6pKvOlQ&s&G4FZ`R=n=h$L`6<S<
zZ{Ip&>-bNCj$Q`R^z?}+WEQ#s20c^j*yNu!82%CL0S;DAZxqr>dhwM@;x(W<r0~!k
z&!Pgs)l{bj6~?#LKLc$!45OkkS!9_?2nZCUc#j6Hm}>YYDVSO<Ad#U=>D^oTRIBa1
zMYQ0|s<ccAO;fNEz+!3%&c6awx7uych>-qK)vR}VX2_N<{abPzczWJ~#C+PCx||v^
zA>xOuoqpDHPrK<id7FNW=`8Twy@POTW{8}k{@2D4OS5lj@C=eybM*+`do@Z$3CG5w
z7`Cd6B4>mpTyKI5DlKx|P?kCeo7Kdy<Q{7nr1E^3_&1NL=-Q?>>ij}bPD$Z2%yy-v
zOh6npyITMp^g&svk9}9&ZSCkR!ZyWZb2t=_Lsms}P@I8rxIh%or-Vb--X9Io;w$<(
zrcW)*-c{eJ*3R<85aoS>VYNJZp0i?doqBba4Y}_5gf0KXy!q@`2POBVr~KTM=OlnP
z%237J6HvRHn)JMNfL8NQ*+v_l#%(a)LYfkWkeE%`Min*rY^B_~zsW)&GlzZzMHK$F
zU9V?(yZ@%?V;Ce=XL~L#u)ufWMLE9c=50=Qi9E~JA|DriaFdyga}lHN+9|=`;+DL~
z{j~zv2OjEBjo$T<q!!c56B%diZ|2>(Yy=gts^(v+f0A@?$X~P|2!?N;O};KRS$0Qe
zxUY!7-<BWZ0$R%$xhop9d8*8N9;Tm&|B0e@Uk>2(sepi%$NqOB;E!kKf9Ymi@V<Mk
zvnTRP`GHro)>u!VK+gg2msi_mTCzG=rxq<b-issBNGzh@MQO+m#XDAeK22|k2*}7w
zrw%>0-E1#M)BE(97~vrN3B83VDgo(}iPk7)%f{H47T>_HG<sX;V~d?63l9H}vTq0y
zCF;^F+qP}n)+@fUZQHhO+qP}KvTfVd)jgY;+5FL)6DKorm612{e&>EDJsjpC+o3(U
z{QRVJ*E#GR(ifdkS>mCeVC0lmy64?bIsEuVQWqRpFZclQrIHw?#yIiHXv3i8EJT#x
z@q}z}Ap3fzGGqMrsOliDB$Lz)RE7jf(}@XMWacva8w@%szl6Xv`V?~{BYhd01dACn
zXsQ4)3?q_UWk3ROzn(5&sas4$%<59Pp7-~)x0QzKDOFH}$b|ofQWa7Tr#f+Y0X7d6
z8Y%GPiJ6(1_Hf7)lTKOas>s`>M8`}ys*z2zWIpeJJ$_SiqKeA)VkWMKG?CY14?Nw_
z+lMQM4|?r1_w+0}c=3~)aSTqn4x-WN&uH#V0qW#OVN(y8uUvFuBpRUQi$Q-A{>sOR
znt|>79K1!|^l*MWYwahKL;#XXHBbW)b)=7q%3KR<3oS!Ny{PIPIVc0LgU*E+02Gl@
z9;8V&h{pYxJfsH=Z#7KR28eQE`Z7=g<)fPkC<5rQ-x1C9sVQXDoZ!T{%g>~L+QgP@
zI?SesCKR0E*Xia~qcyfsNCG&*-VC4=0r&&}!5ttOvv*bo5z>LqN2+Ip+U7}TnBGB{
z(d_4Gq54hEMU+tq*U{AtYnnkLrfZ?yZ7632yGDiU+>EdN!zWYKZ@Y>9+Pjv$`TVrx
z+6;y_<^RqG8b4u(Hfla?2R|4b-;RGUx5d}Y<#AuQ_%phgeTh5C*1O^uJ1U;Yi?7ke
z_>>+y=wvpFkB@67<LY&ow>E6t4A2a82;k8M2mFTTHv`->NFPbk5#c{ouN2r#>Gy+{
z#BQGfbO^zP$K>a^c)@ufeE7m6*?*1ZuJWYidTD3k#dpf?j>Q<p?*b?kPZb;s@P0Rr
z>5gW^IdvvK6&~{?Op-RzH^!p|(8+KLD6mB=mPqtEshlD9RtpfA?gsF{SxKivC4~|s
z?FU%$$)r0}1VHPrt~;!*1%he;ErdhC8@rFZ49+#Z&lKJVB9D9OKp@HzHOT@`Wf%En
zoMVK_g#gGK?-gEO#6#%o4afCo&bRM-ZmR*Knw;WV%m^(M5QMv~%q=$_wImo3LPFIY
z&RbCE77_>>j$=}F31SmoSY6RurNM1HKvP~NPk@o`mEut(;X}U;#>5Zy8Df*bvQMU`
z58+pXkPso_u4R&|d`Q(Ea=QU70af%M?UYT_Ycj)31pZO;P>u<0kt6s1MH`y+ok>GB
zcy~RSOV0oEX>oF7`Fyjzd>CXUDrw(wl=GNc>A?57Ki*g?7FfNLcef?rgAq%9%U>fV
z*p6|T^*GOtl=cRYg_1Ec>Ew6dhmlfw?vze1_l}`B_7*w1^L1;$;zlA6)(neFmq1e<
zqG`J0`*0wAvSdbp>x`d`7Z%N7b^-YP5HVys-p8G>KlVj?Ywyv4s<o5DMef~{yoVmv
zEbK#!bDVIP07L!}+v^DzIq~){lH3%pTcBRfMRu&y2frT%_5IOv!x*##NvEivMm97M
z;j*wpfCA1`Sa8#xa6pos2Tat#?3c)3DoC}LP)u@5vD!E6$X1Hy@HkstoBQ>;p{m<W
z{J{@e_+{CEpYW9>Q}F7M;QtW!rHKTf3tg8fWLXm1vgP~i*^PJVc0b*S&q88%i*#l4
znsANZ`|kd^;P3nFLT0tin?%S7s?ZiI+us@MI+pVpta$jHy?coq(%${2Xdq3<CSj^@
z4PgC)S7?l%d5#*e1(V;*F45HVWT)n&->83H-7Z@NjfL_|7*;pb93X{W>|=$dFBu@j
z`~7j$)>Y5WHXGoyP|5c4w*QRyb1WpJAKxpFUZxL7Ej|6_coHB54TcP`<M&G|;gooY
zsAZ|FlBr?Z{RZkPx~E9*<#BUfxZow&tDxxXdqr}`EfN4ekvz4GZE@BDL%c{$LJt$C
zKSg1#vK$lcv+kRtW|(b>8J5nCeI@I$gaLue0(!SQ4@_#IS5*(IzcN76C0(m~Hagzh
z1V?*whUX!c0xP`AG?oX6%x`QQG$nB>i<g2ON0sOc5=x^*1ww^L09VwP0gYVinT8gD
zvmp%HlN%m=KFH01|I#)c!dQ>j%L9^DstI2{-_^jSVbF$uUJm?v+6^RY%#gD0*)yOl
z9<_4)NX77oOiMf>=<kOE!@5;65bb5~!^t1f7NRheCL0ugyke@M%aF%0N+DAR>Bn1g
zm;_#P!2(yjkNWUW4!nXNp*4)=02Nb~56eJdsIobS2g&nBtW6m>)DWT@#cQ5zZ)uWe
zBCrkyButDGczKvTd(?gXXG)MC1P1XZ=?F0``15PS_9x(d90oM}sYEykJp~5y`3B)I
zm~h-vL7$Ak3asFWI2AjZwt!e$B<;>DfI|S%4}w9?MCs=VehSBJb&T2cO?%MeqMr?<
zm?-3svB6Nu8VbQbiQM2(QV+33C~mK}LT;!l$g$L|taNfvas2Q%ObA^P%slb;74~Qz
zv{D3%lVamg)|CbZ>k~82R6CCMI*rMM2DLCZ2^Wxwz+3%$vcHk{H>KSr28Gk?8->Cd
zKP{5X3KdZ6hk@3QSJYi5D6~;ud>^cCXI{_fy#2Gc5oqhX7^;P(L2MSC$9i8^?3V(h
z0cA#62in^rWk#7_{OBT!-jB4p)qw$<eYeW1*E82$bKZW^k=)#&-CGf$ug+#zU16Su
zIbdGWlkxuIf0G#EC@zR9u@l0>>E+n}jB)+<M2Gpu99L`(Hd`f;pT$mVjMsQouiXDp
zF^j1cIt0SPsFUomL`9X8X>38omy^w|YdtUNFsRb9QMjZnl@i$KaE<|>jwQv}dxpn7
zK16rsA}U0qB<5IIDMM0<j*23JMv4Y0wT4pth~FSd{et3eG}44Z8J1|_ka&JcUNQD^
zVNi9Un?;gD%zn87i<B42?4@qUpYn<~D4g}A)P0p*x9PPM9oNN}sIn~?Vr+eG4g3~s
z21kA7bgLi$=JdnwFwStNF_ziXO<d<*lWO8vOQA*#Ylp_-G%bXX%3&(liZ+*G0w_(B
zQBR6GR&H#o=^C(&oM}_jm*s<8@&fcrZxc!5U+=u(BRhB4x{#ryX9xJ>r-}38^Z<uL
z<#jtFzWdEJQFbygNZrQsBE+uhquR52$CW0KBWW!B=5Z*#%`HX8EY<^x+-xN!@~Z=R
zN1P7L1<xo$$bTxnAM!PvNv)b4xWe%%^;xin>K;zm9!|8pVzNrH2DRhq@zDW;_uCUo
zGVRJpE%EJBW7mwboetci_0eHiVvC$JSVu1KqSzC~FZdHX9DfH!7P!xjL4e;wSd)84
zGl=RBT9QPuQ$(z#7naKxnn-3O%rzFi28YOU8>Tn6Xgj>l;e#PJ49fNE@!4eDV5K|c
z4mAxWkI1A8T1cIP`(DDOX;ThaX~r9AB_~bz9ApZ9ABhF-b(LwLO~FF@5Hw7%Zqjj0
zBaNQ2c9dsoMWwn)0V|O>Bb$b;LJS#{1&(A3qT<x*Ze={44q^6sQb|{k=BqSNx8$pY
zSw!(ef^H0Ap`cbAnvYmfn4r?Bs22Kbi)y3~=;2wdOlSI+8HV4RFMkWzlbyu5wzxJX
zyN=8HdyPy^;mxx0kGMNpVrQEL%GX~e8yi;5mpg-pEc)o~#-6V>R#zTWJn~w4lN}c{
zl`^1KR23djx<s;7RXrOfli=VLkPc~@ioUuMhyu7(jTq3&!C(`_!g=i-!7(66{`$+!
z+a=F}51UsLZ8!t#@bwEPHnj~#b4{Xu6UIlVHz&7=mOgg|%001r;#)ZcUC7vF7}Qck
zJS}j61#OvA_XT6NbB~R$QhHKdS(`&7Stst}u+F-5&#6844%ZdVWJ%`EV3mwkmQhh7
z&ZGR+-}BmTi*TM?UxQRUCho>F{Pep&AXQuvtOswCV2&RWBgWtjKZMa`!X09S#UU=r
zf9?y6Gtd?@iv2S98uBOlp>ObuM&{`rev}6<Bl?;6GT2GKW3z()nQMw)^*tVT$98SZ
zF6%C+N>o%qjj4~>7D+xd^9SJLedoOn@)F+Y6&YTFEAGBLMXX?Us{U<+XMCh8mr9aF
z(M7eN;tLQ|8E5*l52SAN0`aCzPT)k)5j6%=G{ICp=`~zSP1?3EnBYWf+X*R@b>0u5
z5=<qbguvOG=q_VmPkuw_Ulk{C{|C<Hj=bpO71DISUXFt?*ZY3->w6#0>ZqQ1-Q#kA
zJ=hk$=WBi$+RPKsnx2CH0%Ma7O%om1Wz#;44}iC|hnM?jR!Knc=U@_yo6Z|~RQk{&
z-YCAyeGa?9pg0*<%c~q8eP1xzeI319`^iJt$n2x{au6)vrPwY<1uIzDwE`4TranQ}
z(52Qg{u7G;dtlAz^N^BWlT?*?8LBtdZ{pVNMqv0a<f>`7cJGUx=Xj>2Y-}m9dsBE6
zT|gyCQ0@^n->&A6=$ZXxxvt^M(Gaj09P0tK`K?%Mb$o=FS#`SqHb<CR_cOlvHkg`m
zd=Kg)h1@TJ#)En+oJ?{uxoJv&UdwDt{rSl?3e5J9lZ>@Op%R<7TcLhGR?D`O&w{Oh
z$?RBd2e|rQEl>L#^W^;%)TXtbY(zN-#fq^of)RH}CBvo*Oa+4(cStEimkW%p{%ebW
zUgWwV^G<bgLP@+plP1m@5Vd6yvf=W8i!Kz21eJW?bYR9bI_^Lk70jr~n)OUB{Q1v}
zyW7^o?aIu7-2qR`lskjTaiuhC3$ues%mv5m78|+hlz@u?-qm_G3x{!kJN9*b-xlnP
zy8MlS6uVms<Ykt7H@LRtEs$Y!KXeo;82v9b>u2u}^o5R(^N1CxVN^<lj_@^nV1JCi
zy^iBv4vr?KDmK)cXFhb<d$S`}>E+H9-iSV;yX^F6xjU-^eej6`-<clWv%Mfy>BXR}
zY2=B6+?gKSld}MQ(AiQ;<G>>ec^R4(cp)5BL{%R%rs^UbDgo@-scr>830DSNPZhiq
zwr&u%x)g5rz3vie2*5Y^5Y-W;MTwvEh^M{EZMh$faZT}OLMvg*{hcI&9$Dfn1g7bs
zpXRj6sC85SBQwZKmydz~x^f>7uy#9?1;R0>OAp@J?w=2?;Q(g$Rb%2GiJOMkmI|eT
zxN14W`@}XsxV3(4iJRLTp2N`uD5F)x=g}sqZK_;h4G9LzKXm?3MgQ)ONcqSo2oEOo
z)85fIi&7+)OwYg*YHIVvA)Wk0c!nx353457i5oQb?Q$N<eI&g%wX8%ARWyS9N_aG-
zvbM$?Tu*Y=a+l*pFK%M~Ue<jmA$A%Q%{AC@(1<siEyPEtvHe-eJ6ob*lt%uSB#Pm(
zxX7hiD!9UUy1>@5_}9D86LQO&28tTbOgoG6^kRzOs>1o?+o8@#I^8N<Y{^{gD;mlb
zTVyL_po~;2MJ=L}%*(*~-X1F{J7j%(1%)PEiOf;j81~|_!RGQhoyt+1>4c&SEqOj<
zf~_r(R6AC3MJ3%Zd<7GCIn~PQZh`L3qs8rOM;|7|jaRcvr#ky1vd?nv5sS*QZqfL0
zH9LdKQH%+l<`XTsUCX#5BDToMTeBm(zTb4A8TF;-_t55IWB==*AJN<ebo3(=(0Yy~
z(2ZI;8|x)FHT<rVZQ6RTe!6)lTwk3Q(J^|*qY6lINVTxq=;Sdn64@(>_=K7up|x6s
zo9W`|HQHF2LCnMa_F^lT3*mqghUP;w&mj#yF?v^GeO^<3e{#ca7*9zEkIC(KA<jbh
z!gKY#)W(kfFp}wxh^naACyZz9zolh`K47oH3PZE?;9OtVg_Z<hEr2;ZY1ZbcX?^Td
zo>uncW3@EvQ}UW`{X<qp?Bm@?YPCOm4B@75mDxGJj0SWe;mwya1ZID!E9=MUUzgH2
z0voNM=}Oj=>=)q$pN?LPdv9^Ot|Q#4IWr5+TlNUA?CJ`R^~j|%<i>trY8x3K05<qy
zG-R6)n8f)F7(RG^%LfzsuIJ%SLw(ESz@~^Bdw<1IWDQMm|HtKR`cU%6xNHk}(C$|K
zlov|eDVm_;T*Uh0gVT60LqUi(+FGOGT-EYvo`pbLx~7EG7!wz@x+Asr#<K|0(2S`N
z{1rsgr+^~~lt%0{RoC-eBtx~1&ZJJkO{uq7-FWi$&%4TX!({+kZ1v3Ge)9){?}8XU
zFXX%pWSYb~*GBkZ^rN>gcmn@I>o+UXc3`vVdKZ+Xlt4<zp}~P9Fc>9zEiaqyPrjjE
z`#n*$MZq*#?b_kWANP4pa!VY{;%Gx?_eebL1hic`OlZ4QC(t(K8WZC&#3L#d3<uoQ
zhsmJe%Z1P^=iY9eVvpvP%8uOzoh8uJCn{LFEf-_-DkSxMV@TlZ=sU#L=c3Weg9<(k
zi$X*BV8IPWp5VP^!&j(-S(V16wJLl{EccukMr91&hK%Z&qrDM#ob-p&N=N^M?2j>Y
zf@tERuVv;UitW}I%!s!0`Y`LP*&5DW4Nr#UJ0H72=z{GLa*^(6+c1w$#CV~3xJ`Jm
z_p{9JtR)XsmSkw<jZUJ2`J<$b33`8*$%vho@*Rwd(eU+udO2feG^@2J)2VXL1^KXy
zNSigDN*{bT=1ag3lpK;uKh&TH{k(X?+n(F$Z1#|GBClOs)wf^l#OGs6e2Pu9BW+j)
zx(?>vh{XQ?(Db}L&)Y!NdfDtVovzT=n6xx*>appwqE?b~p4${VcTX?U^wG&0_?8%n
zp_PJYdWf)BB#3&pu~LPJdPXc#^+hwia4K5goSilhFm&$On`*BS2`&D@pe_fJ(kaHW
zW!JP!#djc3mTY<@EnRdJlY=bWQAvlD94Mq9D2`^*5Z1Jit7D(T)Bby$(!(_~cs%?Z
z@+2P&J3<ZO>kZ7)7UcL%hKzZMiJsJc=M8$-vHti9jRC%Q(Ah~mq2HM<RePVbo3#dc
ze#L4@!M~0Z#nAyMTvNtEM(Y*-goEK5UHO@sG4)ffcinsi_k_BPo)UQf<tHEOv7eFV
zxS-g#OHpq^7)k=msSpvTS5?ZbbKCUDG(;9L5mF?}Sazi#byc=tpWDp2@hrOp({C<o
z=Wk<k)!oDNE~5Rle-V^%bgitB1;}a7_1SBJ+wv}$+r;`H>wj*SSLWFoYj$Qm4A!nJ
zFLf}3-A~twoUzDW{H&~hNm&9a_uZqJ$&r52s<p$)w&wggvyJqEsQvsId{`cIJOJo)
zce}=N&S@ER1T8uLDsM6}PpYv_I?gYm(Ra>nz+NKrnfS&NwNnT3rIFs{Vy=LqOUYe+
zPwtW${ce)zW|pUh=xH$<pIhrNuo`dD)OBFoEWg0Ivdp~HEG_z2m_D4Sab*9p!$aPo
zQwNwOdM;&N+bIr|;W1)QBG$?2Lw0?Z7}AKHqDs){T1hr?vtzA!t;7DH_E{nzt5AXv
zo<3*&Lz;=jD30J*|GM8nJEWyBy6zQTmJh^Yeo(FCNV$B@a;0E%dWnBi7JmsXxBqN$
z5==oxyOO4-I>aVsrmRRj&cf*oD|@A=8oA9@USN4-rnA*xye{GPNA_$quH2PAy@hlK
zt91Lf_oYwAt2$Zy!C>NTOO?6eZ5}@BAB{VE)M4V)`o-XeV~@ALt;X!x-tXP{5zEZM
z!jPd?bJojR`d9qQ_h^1lKV7>Gru7MW`ZZ3TNiYpldixiy?{DQwhYQ(vx(esS;@X91
zPRZwIHu7n%^N>q*ac$Q#4IS=1bitImf=p%`ZuO?xrAji}MUJFJxcq8lc4gvH_--sd
z-wl~3ug=zbUT3_HFR;#P^tb7hce0;%Yh1g1ZZ6_2@h*$rQB2D%Ev7j81}RvCCBYm(
z14X9UL7W3?upN?^F>S3FiMVYL*CUTWW*3jk385?63+sthfOXupH`}XN-fKXNjrOOn
z`<*LoYg_D5#BZ5zC?E$c&V=)g?!+Mu$@l`m2p=<K7P>ehdl;!A8aAYIobtxxfv>A>
z@7&gIV&nJX8f20ZcgM!x*w@T#_v7|POuKZ|-YMIhVFRNK%BxbC_2AIX-ks;i(fu>i
zYE^RxH=o7h!WR6>Quu=v^5+YuP$}1>vlv59adZCM7G3PO`O{L<&s^~hb{qbfs}*dQ
zq6pkOU0<7?>(ivy>Z^+jIM!_|N<tWIJ^ZRTUWX&^&(8-z@$j0q!6Nh~e)q;aZ)Ekn
z`4AL;3fg{<Xzn5m;RtRs9DIa*IM67|vb>$K5(p91O+oQB6j!@?2s~GL1(k!b5LpFC
zgGy!u9_T9I6E7$Duw%hZ+_unAIF_!dy)V+PsRL}(E-eMOpT_az7cRUe-%3IrxKK48
z)7qO@;Lgx@E9H4!L}?4X+u<FIGC&^Iq_EsA0H(7f^E{XXEYuwx_o^Z#6(D1rl?tV#
zh5n02!maslKof{zdem(79SKmZJ-^Lq`$Hp!<dd}ya+9>El7hnY-G_p!e**xgQvgYM
z@rpQpv_3!P^2d}dIu|Fg{tXe;Q`2|*MiwlYSfoGl7Mpu!Dc;xu|0p-0XfBhoL5y=m
zWh!u1Ute;8j7hPlX;0i?lJ?30+w2~>&m0lpOp@QesG5aJX&M1LzzCk(3%s|Xu&<MF
zfsJbcp~xS!=H2N)gj0jvT>p58l6wndw7J9hQ@jSgsrJ;+bg080kI%jvAP{Z!DY+6J
z3BkG8AlZt^m!iaSQYboY^fi}~pu^QG?b0P*2M7U3twNne$wLNDM9G5&QxULCfv0{H
z^l?h-lEAODx1Fx_x?5cNZb0(2#iD!J@w30~`uN=Tf8p!}wjM$<PrZAd;tuK@+x7RQ
zjF0K*l^R<yxKSC+^<!&@X~G3o7o`1ML|Djp45AS%)))2#*Y<T|w_^+#K0WrWE`^3{
zkB1=PrON#oj*@OJ&!;A;6I{Cl{H${`A81?_O7A)_;)+(;HXMSLfd5_{elR_5wy|GC
z+++or<%;&<d4gd3Zkp|h{jmBt(NoyvP`q@<gJjf?e}Esw@D&kaAPKT^(49;`I>3o^
zAK(MYNl19kCwfXR;3bnoLKBILek5CkTv1RI2=kKMQT{8*0lDbdHge*iUK?K@w>6uU
z|2vcqG%F_Qec*V@%H+x>_l7&MiJrH?2in8jrRkxZr38Gujxf04*tDFKz;RV)cjEDg
zZQPmrmvx!{C|1?Qd*x{S&Jz#kq`6|F;#E(jn2~*F#ntC<e^d3|>RH>n7~Ti%AMl|W
zb!y0H+5btRN8-{fsgeA!lM?xKIDrw+KKvKf9E=+YdKiXvMo-+Jz)2e-LsFp~rc$v6
zH`%rnVO^o!g=M~xTm%8cbY-R*elMzkB9{W(6`I;~cM{nueO^#hdflO_?~<>+DjF(0
z+4`>pjZL9YQ4cLDnx8>MG(}LOu`G6~`0z@B^%O17BdSCm-B8a(rJnPjmbMUOGR~6e
z)35DFQ;e>UBiefyU2;4PxkoE&ZJ`SC)eh3XkHvr`jeOSdI&6o~8VG`|j~PkwZ9-#_
z;T|HgR`~^|M{K6<UqPs!T8p(*Wjj&1Si)Z??q6rcaA6vl7x=<YDVps8=cN+7$3`yB
zo{7V!QwU;97jK8>6H44eil7VF;?R2TVTGVrB?)n3jd(uSJV`8)wp$VOIDSJH#7**!
zG#h63-jGKU>j8w;eP!-9l7_fbNL8s0i(u&JF0+t4(`~)kJR5?oTr$euRsRGf9$0;5
zf~0!nUHj&FFNx2#Lut0)y$L5e3D0A!18z0p#T_mY-O8SB$wt2e#I<syIk%XaTitRL
z#6GRh?e7nFGGk5I-CH=;x1!c@QMPWtr(I?{PWAV$)rqo6wlb?yqSafNuSXDi4WFF7
zuTMR1qQ6_Tu!#c4J%TP=raS+NPiCrb&Gbzmw0qs(zrWi(rY^^9>HNWE-@U5vwz-UU
z>#tq=-neJX1lw|B#hXcw5xSwrcLa8KBT+ON7~gy}!jFa^36y-~Yg(O^0<thBKKCvi
zDdc+ro^*M|l0PEo$O02$oc@!d+U{>B12Aqyz=6bg!h(Pu{+r#Bx+&0&T5-g&zP8Uv
z*3aZ66R_u(4ifmo1R3*gO%NGeJOOu*QbseS7h0?DmgDHiLNPH5$)y&GQO=a8S2R&H
zTD*BcwR6x=I;w0Mi|NgjxcfK`3j+fAIBxD5P$k|WSt19vBKmG*r(N`a8hgaT2ta#8
z;&-F}yZ9E#`2@PhhTM`%<4nN9<wl77)};um3HcFzJd9$dB*;vb`h>SCQDLCPA}X4I
zFkVaBzyK!z!9{{5gvG*gyy&M_eYb*iyiI)3CyJ_3c+@Q;h6DdZ3~JGJrLyjT7S-M7
z&$`eC`#C*AksewZQE1>|_%kr)S%uLrXly4o1|k6S*~qCdOSXOe<0KA8o@2bHvYGV2
z<+KyO%dmfd6!M;+*0rZudzTS|z~yTKA?g2cnL~G$)Kashi;G}W?x!gE9JPsc8W7=`
zR~Yw8-G<CZJH@(;i1AF^IuYsD!a~z8HV#OalqP=l1nK{T&_-somN*?V*vdLhWi_Y_
zdG?zGyT<RrRIP@_VN72*@a`g_-O}2tpWX7_r!lglt!49GwuUs0^|IeYH5W=Iy3*Z{
zi#l3<uIo^h)crA=P9%~c{zf{z2cC$FP@MZB`z$MlXu3yXQqo@Akvg>njH+(y4|7k=
z7F)p~0gCR2KbeBpwGFtqpk&w&G%vzWe+bSrr=uZY({c^;O$&_~nqSzJ?D?S$_$9ne
z)xxgo>+Ml^)0{H61spsvbb-@b35V-52Nfq_x8xtzsjn}DtW=uJ0m2rCPnSGlPoQ=>
z_N;;-jkqL^u*I>WF^sasaiPuqR(>?QF}64nG=y=sa7i|9&McW0Nvj52C1grtZZgvQ
z2^Sf0nv!W@iT*Wr=m7OSkyr?WU}W#>4haV8tW(B*t0=pIP&f8|n$A$;{d5rNL1xI5
zKvSeFy=QHa3LE<(D1|yENHNk6IwIv(4#lOdgO^YiHjzEobOSXST@JMF7U`JC(_t@f
zA9Fr$2UqXz=}E$y4js6&2|izpFHfVM8q-<exJ{q$+4K3?tE*U@mY??89*pkw3><c2
z%AlqvaEX`;pW5#Ck}-S1{gYPp?ym0k^d-QBpP%7mZ1$bdsbp?1d<Z*F0uV(ywTa^Z
zqnp2NFbUmAUing~f&QVXA7(+FQ<L75F2-2e9Hq76^qLk*ljIDOc+|LT3s&_V)!vHl
z1=iqQmLy#n*Iha_D%Op&{mqR>R|Z_=H*n(gbSGB_#ywIiCRbp(7=4NEjXLk|9z6}m
zzHGS3@28hGu#4$}>R0=1{P#bbftB=}Q2c4&hl3!u^xE?#oAxx(>u`^E{tE<2P3%m*
z=nv&>xWVfRWw<ou@kQ5hH1S4jgzALjQs2oNhi{qB?hdeW+I+n#AlE_<l4lEehts*o
zx?aC>15`#^^xDF%Tsz#Oub>Nx8`aw`J)RAUOti-@IPd1K8mEu)iENvF@AQ9vjy-s`
zjA};z!FI&l2VHT|#B6dswhsuUIn_1AzAXTBpe&1inKyXJaXFh;MdHPe0r6igDjR4&
zGKjYHwJE6vJ1aXi-ztBqs926#cwtw@#4OmmD8u#@BoN$`SVbNbs{@m-6|(_Q{}~vW
z#O0f&YXwxZMvBr|W}l&J2UN31+Ru?z5otiuoC#TmWn1J1UnPe4cHl8f;t7BV+d8OU
z*@Gcob&ikFij}2$++r~+{<wmyqYUSq%k><{&Nq67c_eQDQ3~#>qbR%8jbpU_GQhma
zp;u}2;I%CcKfwV~9V8^H)s82}Hl&LJPqQCLYd+}isWN5eKd+?o-34$55f_gYberl`
zfDL6=;v{&4y_%hJ)^c^x%HGZCRkK;NO=jwC*(tx!bmC4KlGqYUT;J?+x*J6RA)*;H
zEe{L@^tSXmsK;JyAp}0uwtC)h8urQjaOdT>p4GyyvPrpEI`vTeS>TF)h6T&T!}aE3
z(sOj&wDmqcYW5^=dSK9$TXh>ZZM8(!>%zW<jWTo7b*enLwE3$>-`uS=ODCf(&#Ni3
zF&pB5+=Zy2w-5t({N2q#K$DYs)ne^}8h^z3oP(>@AA*?=Rd0A7u|Zh~U_e|&45)v_
z2~Iu2sV1J$zs?B#twn~3Yb09`MMdGRj~OJJ7}tQ0s!u7i7{skl%u?Sql8_^ItTrBM
zs5b?|;_QC*ie@&HJCVIuRF)T^g>p}F5MP2V{D^N~T!Ap+m1ZV|Et@7Ksl?1#1JcIS
zRh6GPPQM6Q6iLwSua9bqpNj&)1hXann=vpR1tzu#=1?V+qb%OIE|8-<)_h*3!u<AU
zvi$riH^~*~u!7S@*%S{QaqoH}d<t7*CbgC9nM1eA_T<8ynY-y|?dagV92WZ$_I&NV
zMW;=5v*iz-IkvJ{wCRO1uJUqAOX<sU8%tyPfqQ`EQZW4$)H7*2Czw#mUJ0~jiIG&R
zATUIV{e;mc7eNVpl{yhB8Nq7;3`CuDmg(7iDii?=qRGE~PD+!;dsk8|(_qGYQUN2Z
zIfFhOGA~k7K!Z(w#FKQhV5r#DzxAp_^YQ~pWHjdNmGcOMN;tesN7mAT!FhC3K=yVq
zyamjP-7HZFJqejYK_8zX^(Y~PI>`w=5t<TFtj1Pu`nQyil$VI)xD(d@@=WXOn4n9d
zxN%<Zp1l;1WNOD0bSA>a{PFLA2~y7t08!BPmu0kJUJryus`It40hqP<gA-C+{QP*p
zRZ)z}sM7oYjwr!?f_Ox04CFh=N(}#1?2FFrr;w0fcF4+R!s49SRTW_PCoY9gE&Q{O
z;)4n@k3%LMtx%YX^qO!L3bK--7h?y<S;OrIEsC}b1Ash}f4^uBM3m^%V3ZBAD$fy$
zGlW-HK-6vw_5pEHmy}vFF&_-&sJ6@L6o7P(zRF+ww*f%iK>^d~@?@?x%O7bHq!2fb
zi$7SUZc<9&d)7x-gHbxB8lDvJYKKLkZZ<*1D%}`ObXew$OhECGnc~Z=7cn{jlUT}J
z{3E&y)eF_hfC)pWdWCKp+z~<K@zG=1dbo)A__7(gG`3HNe_zMd&+{uet$6D|#~hmI
zTG<Dt7kiVM#$aM!$C#hC2D~%)mTq;2W8xD~qy-|pXebSnBQL1YHexn6IISCZ`+3aD
zJcOpsL<OF`L1{^FM6p})y8M^C`Qar~AmoD@dlpixY$frh|Hxb$bfLD5XZ`$d@9}+^
zEKt!KPqB&{)HhS+Ruo-|>c6*r_h-RCR1^s5bXqWBSTwDi6cEC%h{-`HtP)*E_rLpz
zjMameHt=f&Lrnn-yl2@7-0D#$S31?=iIvpY*)KO_KJ`_l5SKWOncs3B`*eduA?^L#
z^#o4jicb@jsxrJO|8!(u#*%evF5@e^w1yAukVuSSF;CRp-b|<Lq$GD4+@6DTvfgF7
zRP#NT2EC}UB+uc-kt9=a6HpVXx=2D~uH*1&{SbBYKLE9uc&MTVOiiM%E9rX|m-Ov9
z#(W6aQH~e<K659!Xm~toQ3ZT44}V6SwSuJg4%$EGzxKz^y}mWMV|LyI8SCojC-27h
zPUU=mPF&@Bz8>&@-n%6ey*b<4%TxKiySvh9RVpiY=r2xu>jEznhS_x1EjoQ%7<H#q
zQ<uxKbTLPYZgRaIuK07j7(eO%UoPX%zm|#|Z~y>6Bme-G|D__#k(rah?LV*?t5vNX
zH`@MZ%#uaCBf&Pz-YsJ#-s4znPM+N~K6LF=qcBq<Az=iBhy&16WwgJutqo8_v6Q+Q
znmCFCNrU!r&(qo0h%X^8jYt#0ly}5iUZ!`=d=FjQQlNGeF{IBz%Fan@OQoTs+e>B(
z`XiwvT4RyyNa*b_jNu;IkkD0_5aF5ecFin*-yva6X)booR2WbegJe=7fe#*AwL9NO
zeyFOG=-fa`s#=tSvRKv?XQa*`bt)`HEgF$f<fUCtM5!dj7Cg~xQ#pJtk(h8BEG57J
zcxM5fv5N`XT(eT^<Nj8Akvg4r*bHE-PMA!A)=b4ggHEDQN26Mia3WZ@X5|G3Co%3t
zr{b@Utfu>^Rh?dmoBIWcFaLnAKp`sKu$oZGw2{!7Wt}MZnbRdvA$6O}-J+F1x)aGj
zQ!7*8mEFxcYjN8Vhd2HfvaPfiUnQ%S_<K<KCm?}I_!mk(T}@~9>V7?R#3zyz5+tA=
zMF@nkaiS(!5pJ_BgI>O{GZ?Ew*NOSXL=Au>iYQhPzljjwH}eZpwIuIX8qos($VC!S
zbO-{l0s?H#vC;xoVa%AJ$V%jlX^qOo%nX1BZuu^fieAb+ZX7J;g4OdAnKuix@{8-=
za&l$ncpNhM2owkGST=+B1c#9O$-t;K6%i?*1g76dW$fCeI0rqalxESTifZgKt9f&J
z+>Qm5ND6}n2?Gs<`)0;4N=|Q3Y`3Qnc#ujGFt>q!Y6$gEhSM-bY!={gFcLM%pur?~
zzzYBlRyDYJ<W0SJuUyfpJHW@0GZQ@+l+$UoswI5eyvBnRz9@VWV#Lwc{Ok02+DUC?
zZ@dHLsWlN7N557T!nB%8_p%{Z<+$j`#3^69d2y?*(3pPY1HM0qEy8@?V@$K%o@Ia7
z3r%e2-^qFo0JM5p66J}%$n5QTdx>^+GA|aa+(=xyJXI4x_ENVMRI0%1(os;+iJf1#
zP?l_=&`ZT!%&veh=-wc%#sBy=V(5F~vTa1Cx3RUQ*V3H_KkE37xC3>hg3jM4ph20k
zrtaWBp7zyQHjZF)`o;5=3*jZ#Ib-b?b;>#%qePDb&z$!m@fQ-!Ob6?y{s%n7x#hcH
z^)HZ>XR^ob@oTUmO5FQglo#IW-l#FpSjSo?#Lk~9q`hAvtqik6yfv5yVgv>320Y__
zPg0CrA_Ky_qI+U40oVmJH1v^K=9z<`M@+ExtbBXqu&K|$A&@3C!t?d<Q1C+<<zo{0
z4lPPOGPznQ1&Gx7+H=?GsgUP(nPE}g3SIbx;p}jk7_9TF#l#~{H1cvRF5c>1d{fo@
zo3s1?Lth32DZ%c0{p<&~xMwF2xyq+c4zH?+pZmUEVV&hS;)WnO%fS8T{ujKMxD&xW
z`24}Mz<P8Ta{S}MW*PH0e*Yk{FQN#%aQ>i=VH@eG^UPVPsjl*s9uVG!(wqkvf2i5$
zheE&TrIJ$3hpSsoj~YajV|lv%L)OH)eizUJK{u={CJ0i?Ve=BDRun@PJcoj#6@YAc
z9P5yER8-6m6dnxpzu;KkPDmBDJXzA!$xntGX#o_8bPcr2isD+GBYwk!ZFWix(I8o`
zm+u|bMv__zWTfG9z3WNMi=|H$u0{r>fh4%#`l!DkfdR1IX%=Pz;t31O8dy0ZmGBDc
zbI@temO1x#oKyoIv3<ZUu~?cQ*29kBrePcg{;IEHXTyv-$#|5^SiZ;*?6v$$O0y({
z_32(DOzA}PB($QgNh*PupM1Cn$%DYuMdI<fDU}f%udmoC?<g(iq3^`R=^u9*9Iq3W
z5M2hfvAc(c$f#L%i!)^&Ok^0MKt3Qw!6kly?MhIK77VV>P*NW=c}E9ULgJ^NLNfAN
zr<{KwxH?ft31zzCP&(^@l{;3JE?|h2Xvp9$m&;gIi1;F+@a0Dib4mUoE!0$ZP|jp7
z97$+9SOSn_=N6PGT73Z?AE8omd45>112)*PKg<ntalZ1%$zr}pW7#4FN3f7~pY)_C
z=*qz7^yfPTXZcq@fLNJ88a>$4|3{D%C#EdF<O~;lsc#D3<*3_359}EV=tJkuQu^ra
zhK)#b{MVdX#mh=eH`Ap_R<RbGm7zFLy_ff$<&PM-3_CFlr<g6nMN3BbP41V!itx&h
zFW5l+O%o;xC%+Y_shmqdciT^V!UkKR<cS_C8w@P$4vn_8x5d1xm85a(oQS<+Xqhp3
zf?MAy!E6qD5UVILezK9MSe>{7;VYR0GGPn9KhD2V6kLyPRgNHX?U`zz+ohuF>ect=
z157;R^x^9Vv2|y>CKK<)g$(>?W8(`gBi#l&R|5-NDr<>Hn4S4~XAnbb><*0eQaaG8
zvM6<<K~b_y)Qs9IC^unb@jJl5?7$KIuMOgEvTPeEvM&Hr+&EaRxHCa`;D%+HD>O5&
z-2mYMUcmYt;&d_lPy?(pf+7&D!0f_jqP1<p?(1pHnw#SRzMal`eDw${mAxxTu!qj?
zkDX&zeA(a5Pl%GRn?h~=X*g%DAQm8V@}J<3S{Hn%DZcE<{SbDa>P{D2fX-s%o-In1
zUcIJ&euNn=y3GWK*1(kV*}&KTZ*U9+@c4rQ0MMZHzuyb!JNyPl{fE846_2^=21i2f
zxUPTw5_bZv5{M+eJ=fQW_a#Z=843N&<qVJJe4)ttehASL$r16{l<iIhkU&5v3a4am
zYxjn%6M_ILR4|vl*^8W2(?sJui<FqY!(fU&T4v{EsFQoH=*mL?CmX+k?J=QeJ51uk
z!^x#`%C{>A_3BzhTB*8CeItiSZN2r3PN;j@R*=8(HBiFIJdMmfgI*;G1ha~ngn`2F
zyILDD_B9O6$ai|p>Oillq(+@G9#Dn>-q9shgfQCn^nh`HLD2NVFjLH@5n97WSsJoU
zxafY`8>Dn;FnqMPSx*<Z%q=c9Qq9S%&+FOnn_LBroGK;(bV1ix!C6I^BEW2#F2HIR
zMatWmnUkldWif*vPi!?yCmv*4JWeDlJzBjau<t$UH^8*7v4TPnWaf5bBT1WS?ZWG}
zZ|ZiP?bi{L^iRS3J#MFzB@WnaaT-OWiETU>HHLE%{2EU;tnGl+SU@s<Wx9M~5!sj=
z5K7?6kJr=jk?yPypX!wZTF@LxSb`-OO-FX9`q;JqPQnV}<I9b}#1a*-1ydhlkUZiE
z4ZQHa5jgRW=mF+*!-sLa&PSw|kvA(HPysuIKm;HG`yP>ufLeU^W;6WS=IqH(Z{y1E
zpA%y3Yl8|>;TityY}kSkwlV9CVRh|`28_+GfFRUVKV~X(8(k4873snVtF+M-0I5_`
zf&=zoZSA2qw#Kv(c-F(H>-FpiTF9pbBw=-}{@1>_aQ=IbJ;WN9yC_H<aT_-aw<E+5
zmp7my(KavMwQ2=dc&nawoqvStT5u^gZ&V*lP8`o~^{>yu4z|D&KioGK8KHokYm+a?
zD$b;!6@TftbH*_t3ojp-R_L!MwL5@$kUJu+7smeL=={KtX?~m!#xAT(Er0ZWSsVD9
zL0=XQ3F2a`<}*SFu6kZ#<lL+(W*^Wl6<ysPty-*n6U<EtLAgEyNQ%(cK<>y3j7&nV
z|2mfFF}eFCI)gC4FIPMk-OTP9Khxxf>e<#WiTsVHg9<OR+ew*5HQ0m2lg;y<z6Il{
zx;t`m{^-cf?k<Jz#j|j<3SDF^5zp7^S^WmC10whGkxyVvoL>`1-oH7@RUUh_KiO&k
zOb=57AcZyH$BggGi*X%5c1{q)1YTw_7aGhUK*AD1fc+fY^X-LwFk5%+NcQH6pU(B~
zkHwfw3~I(rcJCV^7XMlxJAlq+qmQl1CakAI1J3h41Lkvz4?}bWpeN9=^V&}P#UGat
z?~R7d{@r>2wbw>{dddDWxSU7nG5-Pf*3fRw&{XD2<6GXq8_q7MSDijnfLuTyu4q{v
zXb@yiM$bkTh-&g3AMSJ+yv$AorbtylJ0LLryT-N6jGMF)&;aeUW3wPG_X|_N4afoY
zOH)3LBd^dV254V(Q3|=D)-u5oP(A$=40>IEeSTj!2y|v&PIqIC6??Ae=n#{Zh(S@1
zEjH;w5UJ{YAI#;+kR7e+1WZLE4IdnB@{xRXOFIj!#^D75zU}T=8DjbrFt7g5J<yq%
zRR+Ddn?V{>veS`RRekZ!Jvx3Y!++2$WGe$RB5xqc^XVMohR7WggR5<gkPv(Wx-y0q
z!MzyE4<y-L&^P^zqN;*!#xi8HIlT_q<3lX_1iy)cS=<-yk>;KHFx%)GRknaOyAv#4
z76z`Yf^K^LNh#2W!5B_i?|{M$QKBA(c^FsguB!XCCX@7k-(;5z&KPD6v~NV>oF`)e
zi{pCiS$P=t`MqNYCkL?CnyuwaRqdNdq_ZofVw{wLC4oTw68<p!JP+9@h+a7meszN9
z03Aw^b^w|hm{6O{O?ALcTV3x2jloj_mna;9!rGySJmiidJD?>j<(d9bKtolpG)M>{
z$VG~RzbK&d#~KC_fl8V)??*(TR38g20H#2h(3iaG6-e|43V(nKXq)^)8c;gsJXg%)
zv9m~ekym5;Cm6YKt<0fdobr#D4Mbw7Z72Ar#7b}<y%%ZfLV@{&ghM&Cp|;Nxr4o@=
zGl)%qb=6-qP8w2CDDf=QPPl1yaO8CRmf82)?=9CUOn`WSU+3;=3#Ugfs`5A&6*EK^
zc||}_>a<xe)+KPb1D!&Ypm7y=vjJ98h&b;dObbz~JJZG`1JN1r=Ob`ttC3)70JpTe
zWR$e_MNWXM4bSvH)#2=qNHJq92nSjciGK1NP-kXEWYcfkdw6B#Koo5iY^d#0GWPPQ
zP#Mh$Fm&Vc3z~m1fW@0@7%Eg;0x4J-bYNln_e8~d1c_lSki|-|N{B<t4@js)FBTpu
zmM!hr`-|NNw(~$Plk0*Jw1#&@1C!+`=FRB(T(l`WgyhSjL{!n?hi{~i{DAiT`8L!5
zTnsb1&<iL@wN|5AzK?!I3$V7UiqwsN4{Z{Os)J4b7NuKdpf<T;M?<l3Yz?U8k(<o?
zLWm8R#idlDs)?XE!#@f6rCY-1fd90jTq6D+(pPHTaU%e!+;PvnMQ;~oS?^Pm=+2`W
znflHUGS4(nz=-{0nIu4kkut1J;+u=^R=g9y_<)N{Fe%RSv##Qyg@q~nBv7rExT;%P
zJ{GeRkN9hBy^O);FaGdMBv8ZY?O#liM;C?w6xrS#yvdz39<fGgOu~~96)zXurUEiq
z3wU68dWNG@t8X#0_p}}?=hpqa`;R*CFmrq8-T^TxH>v-%5uGg;0O|ek{$G4<&1V&{
zJ;FFKM2j|T<N*}T?f6kCF~9cPnt!n2ln$cf^B}w*$Tnv;_v7_~CoqSAUS5B>nHyA|
z9N;abA1`QLDel+rR9Wfi1x#QYU~Ja(<R_nfB*ky@D3FOd97!OO(Fsm+at4=w9dqF0
zE=FMK-+)mcF%}<Nlr~vWZ+Zd?3<$)Y39vt`EPF=}f7j*@HvNh|iG&{uaXo?KLR^Cv
zWQk2-ngTT929~SV6mf}2jRdV-SuwN$_)a-EIML41<2jt37T^KS-Xsfw@=V@hA|@{v
zj(Gk{$m_yfssvp58{M*nM9ff<eza-kfZ>kAH1PG>;Z+a`=wDZ8kUi)JPN*<u1Ygi|
zi##nq2ha#TylyJ_QlKTz<aAV3=Ny$2sHPa9NDBBf<$UK(%6kwE@g-af=TM;P$~mG5
zVh?4rZm4S6__13@)g@eW=TV^Qm8GL_zlV+^xv&&6zrS^4y#<T5ktC7p*%R{O%ykh|
zqu7(p@bRG><Y|7>juN&O=4V##J#afQD>*BkMa76G^S3k2q3CZ&kDo($KazIXll5b4
ztrLKgJgt%-kCM8vJWC*ht(rE2JT?=k&c(<GLQ|wlvLhBt1C_%KL@LBo+B!&>+d<*m
zUn-PkET(zWt~k0{5?k>mczw_+$NmFLJj9J5DxfA6h;jOq`y5UvHkd9_OGi4qEX0Ep
z@>~NE96I5O{!mL#mnyqdLOT5V|KbE!HAQ@IcAzhC!BUJVb&{lEH^>LzCx<$-A?5q-
z|1LaW));L&kUluq82xdh1_F2z=rQ|4fNPc73f{HdJ~1r_chG^1JfL~LHLg}3;|EZk
zzi7R%h`XnFIeV+t_0Nz~8*dWvH*BbWQ#SU9l_w=9=R70yxJ39aQ?f#~3&7mmXL37s
z*g<X!Lo)CpJ$sX9i_3BuRm+b9w{l!kWA0fxzn1g>4jODc4$X$FPI4W%YSG2gHdmrz
z1w&SguL^T!XH)Hyeo<NJVDRil1YAKjFj4<j0s|vSfy53m1eE*ZJAM5&zglw*D+DFa
z#K1F-Rry??oLZ_ov0*WAL0G}#F#lC+er7PV^jX{~b%}Y@REL-Q_44m59be~CW9Te~
zPc+}#sGUk*rC``dLn|cpr#a39EkZJ<V$n+qztff4F2V=qeZRsC=<S>i!C8!JLu}!^
zvDiouEoVX#hoU$O4t#)XFT(Z)T+g83{G7Qz0Q;WZn&hSX92LN-$2-Yovl$|7jM`@f
z8hXehuk6xHNGLb9(ejN{r4N9At(JA=+9KN*xq(?e!=^c!wo*Yv^S~vT`Nn=q&e>xt
z*4m8@xb%o*sFSOZ3S@Mz5|;1oYOv#Zj5`1H*b1!CfjG)a#mF{fM;s5GFwRrCfkr&S
zB&0TaBOxgHePvzzJs_87(S$ZubPp_~5NMnxmL(7eh?n;9OBezrG~Gl@c{NpGzJTwo
zZc(oTqN@igW&wg!P!!|_ZCZpG{3KI9w@9S}=q2VieyhBqez>AczE){hVrKbJ^SfEu
z>wJcwgC-e64xbDiQgXxJDfKf>W0%D7za$7X6;+NG&LW79+c>bOF416I^dD8GMm0)8
zlM6^X@f12XmF*N)=QD(y|Dd$Ai-)-A!*!*ZQ&^|#<lfqf;U^XGfo#0YXl#6Obo|Jo
zf}Igz&nvgIVgK&odprbt2zP?~m_CL)bNP67`)?Bkx}ejL_Z{V9fjTP}T%}}C?Ttjn
zjVbfZQt_Y)p*tH}47VL7_eQ29s_m@24E6Ll{LPKQX8$1sTfRxWk9i@`Sto}N)x~{3
zj|MlsLqxSC=mN5*juQs5Kl@-rK?X2PO?=)td6d(YD|6G-=t@9S|AdHSpI=g^8Y8Vk
zH~#j-7J|Am4dziNJpjHOM+z0+`(ep?qh`Q$a{%-UWSP2q%;A8gmKB-M2IEoe0s%%X
zruL%|vbULjmqNyML-;z7jRl7UxSnle`1W3>v>#%3g<k-AKc2sa1!_kcOBRrY9Fiu`
z1jN1GQ)CX{M4F1%>jG&+UCl2F>eB)oA;n15YxzxSgq))74}t+{0ciwHv$#z9y{7E9
zTPdX;7-qp5VB5^XN#V}J?}OLY^Xp*yUfR{dok6uzt}a~RDoEj_*sQX%$3<VUZ!S=P
zomkGd3b5!@D0x#*aV(N~D5@GvHc+kCH6>h8>&Lsap!TYXnVr9LcH2jqn9oPa<id4^
z9B@YH1XFxDKn-hA_}<%8YO=mM?p!@S9lV4BUeB_BWONaQv~J;e$G}GrX=*<@6}BBd
zwpLO2$WUt%ilb|3d&gJ_rl6f^yDGO5WuV<|dk^aX&SJyfT(4`1HC%@wl9A2KM>!r7
z>2YZRmXqYDSYcIA&CJ)423iI&wyyD@HQ(X8wrJe2w72=FtKx;<#<~tisGhdAnBBM%
z1$k*Upw%kcRvkwIC3hO?)#$JOQ^hqDII4HarA`%9H5-lqv;f~Z*z9y<2`eiB!vXIS
zDy*IYS4<{Wp(`%HY9hS%n9&>qXQ_0x;w*+rjY{a25$1aLhx3vvI7f&2><0<|`1BPA
zcZUq$<U+nBXni1*5<v&J{EZ=7JOb5iVZuA^=X{rZMZ9gz+np;+6IlJEr|H1DSj#)-
z!{KoTwNQi7A+ug9H`4jKa=#j@Ftl{F<yp&sDZ{a6+i?wRu3ZUS<D#9Xo4n@XK0hb&
zVyn|yCjz8<+Ow54a%;OXl3xe=S?PLmS<n*r8|S5Xx{3@z_pk@WS~fHI&&$#26}K84
zI)R!c=>8;chMjr+&$rH`-WQJTz>JDhE8@Z$ZkO-C(AN}hSL}P?6MLjLzKNtxkb)4!
z9B@y=>YJ6%h1?+1WKUn=C{nsq%+biSe=e;Jk2^DREAWuR1a>Bxk_4B;*iFPxUSgqI
zPz6DT{n8ZLv;=l#VTDUO9x<!hRD)Y7-)T^Oq>4`rx72);M}MRQv%SMeBDy=vk_i;5
z>WO|hoc(8l{9TN{+kbKPPC=ps!M5nwwr$(CZQHiF$F^<TwrBR(wr#zA&%1~d@18gj
zuRpRfx~uD>qqAZ~X4YCC0wjpI!23=Fg*jJ(iYLnyixiGa8C#J^a>*QKtPhFgA}B{Q
zkL@H1K6{3!U?8MHg*rydl!?4GLsGg)tJy{MP>r7C>n?C>s3fNk<>Y{!r1{F=B8d@f
z+Vf_YGAYSR>6yy-MgY1^+Gv|GMuJ4>W2qIwMQj6B2uEO6!3ql^;5$S`TBk!j6;7mg
zODsXljWDL(_`~Q0ua`_gbtv5jqgKt)x0?E*ai18o2Q^Dp6+kRJ-j~@2e9c@n3bYOR
z6<J!6;YHH5<Q`p{Ht-PVwXhPnB6URjm4%2+DyT65b(Q7bM*j%hMzyu?SJVjisbX_#
zL0Z*T$A_(5V}^UxRwc&%IUrr5jJ4xOT1Q&si?s@=t}(9VTDr!dRcfmms8!3XD@9f&
zoslx`v>8l^mn0$X@#`9^=Ojt)Fa-_m%EXJxCSJ5m*wBzU+a0*YEQ#-ON?TI#T0_oL
zlD7n-mwTGTdDkRMmlz_%_BSMAV3=l}W>k4)ngvg9RTvquFqqL1p8+(Uwo=`MtK0E^
z?Z(a6iyQM&yzM03*^Y{_8+&0hPD_XFZJF8#fj8slY{zriNQ|-?%UU!SLUk;JN1F&k
z*5hkzCdJrHu(6fGU_JXo<MR%JmEikUY6%FUcgiI9$1obgCp0Px)NY+ZEIy0)Ni&%M
zk_XTWEOQ{KveNF`U;;!RPYeqhIahD8?;AZ2Q52WA=IP3OTRbXqF=5wTNLwM5-(-Bc
zh0#b?FP+g-l9IpZoD;*!7&ng@^^^Zekxap@Bu!x-rEaSd^ofQpkPKPIE50mC{jiZy
zS1NMKqgGHcS~AbnGS}p|x0btNFSU*o@_M^Dzff6GbMDD<zDXU>-wYhUOGk9o54E7P
zoPFh+`;>DicF{yOr1M<U!fBp@qQ~&oNOf)2>@p2@@#fzFcpBNaKhV-KwA}bsfmHjx
ze=f4;PO9Z~-!{K6CB5lp?7pGR-`=0dyB?ZuX7T5B3&&ZZhGUmq)?R}Mx+b~l=`Jd^
zd7d2G=58Q<*VJBrIfnhZdxZ6wvNY=t%=?9h%tmHsqWu6R8NyrtPQS?G=d}9UO9rrE
z<7qsUrB>^!`Tf<EEo%PqLF-|6o6M`B_HVE&|CQT)();1rGrfKVbYIfI`G^5R4iNTd
zGynF%6c_bBWm?BvP<<N+@CAsC{r7ow9J;1o?dh(9#Sgy+N?ZX`=`fxhI;=sElg%0l
z>7<2+24wZwdOWysZei&kd$?7B6a?W#x=v#uYWn~L#@Fe~jE>vk!y)|nfaKXaM~^A^
zFvj)DUHN62^b4-@;T)NI$AjNJOzw*;LDhw7(7si_tgqk?wAArllB~a706177EMgRJ
z5j-6S;JX<e_J&3_;|{;$($HfBL5Zt^d~A?5tD)goeF^+{0064S_Hi#$HIq@Q*)b1_
zdD!?fn>awLX#MuD8{YZ<bK#ZGC7%Nn|6iij<^Nx@mF2%lwjOa?I&X@l<^}4{rzS^>
zBp_e`P)@ccQ#81z=#o1|<gRBlnxaauNLC9501DvVQ}y}odi(AX99dZDwzRZRC4hA8
zF5h0Pg1hH66v-yw%N{;S6tn;1uNvMl<u|+h<k6#%KI!lo-k}BkbfsOGID+-gGXJGC
zBjw&ro}!`0amyvSLNbJQql8M>4IgiC4;;_(AX^X;u}KmmGB=HpAnID<W4oc~&jAi=
z@HfG3g}T+uOtDdhAW)_|44OF<VQ^$ezDyjU%rdQVMG8BYso!kZL9!JUolg&;oGLYi
z=qC)QyA4F*AtspjdR&aF^UvsBu@!Bd2-HA9H^q}@H_Zn0njJ*?n`+uYmy3_Py|crG
z36oEOL_UQsj&v#!GoqPVHC!5)=NH0H@QClJlS*W|=<Sv(_IhQTx)qk!i2cH(Q}=lF
znMq@Algr8ib7pNx5mwzcSqK}=MfYKou^ow>@T%DiiEImLOJbYP5c3z7?)Uy>yYAQP
z=TT$`l?Dj_Y2-X8Fw!oK2>lB0sm28txX&L@@gxhUcp^}YB%hd4gAl~BQ8>Z>uScxe
z`*-Iw+I}U6Q*S2PweD1-AD92*>i5pTyb&8Vh@63DU-!>5I@9v|@m%)q_Vv)|%vnE|
zTkM#4*p_QwLp9)tpk8Fx!291uu~_~;bogC9W3JXc##hhvY48QB&R>c(ufvU@aPDz%
z@+PMa8ka}H#cW_(j4w_EO}m%40K+7(tBQDZ0#iu<k~m#jOgA9Lkf06>bWuVeMIbEv
z8X@mCo>(VUS&Dfha3CNd<1R_FsWe$lB$H({6GDxKD5?9<g+e9-ewq+yw2ur(!8Uy6
z9TaSmkaoa1uPCa@4n?SI&<8lWk8$_x0$s%lf=~!Hq7goCcj4Z<0D+)?DJb$6qzc4O
z#|U)a(}Dt-OKoxh$5{|1h!>xzQK=X|h9T37qbd3s8i8`KMfHMgazAIFH+Qng_hCWE
zxlKoya?|LqJZ4{9FVFGC@$Gi~+rJswFMJ*Nw(xFnaqH)7=r@xuWj!kg^b|y<HJ`r+
z&>$T?Vf5lKP5kwX5R!mjuG?hTc`x?>W$*&Tgwci>=O~K@vuI-702a*d+D;o6`PVKi
zcF%i$9iH}wmIprLo*<9(>U$_=<zL^Rfws-P-6b_57jt^%{{8@*;41_-$+<CPt{c<}
ztO1&|%8`t52Ki?L4H~&Vfg*(pp#)Fwq4-k{pfHo{^aE)Vpp0^5b$dTw>hC_g|3vw&
zt$)6~!gFikF#DBo_j?&AEpD!vvl49X>}I97fA?_czP=(Qyu7X$vcyaUFRHfh>`uJa
zx_^Au9=?HtpP@F<AkCgnrLC^6?makiNwXn_!z1Y%k8@1nZo2jF_9qO88GLe}&j0+=
zCflkm-FbcvyheGo#N5%$V#ysN0<ySjbXU~c6#PiN9Z(;SbIxy(XtXq{A+#0Vz|f0Q
z)v;rh6SU8ZtU2KjU3>7O&9wctKS3Dd;9ZwXAC6kW+JFr>ZG9|VHb6b5%G4V9(EN4A
zgK?S_bWI(1qJI5+ve#}}-XP+=>4cEiy_M|hx=Atho%2KY98EQBFkv@rM6}J{tK4SV
zvD)8pTePT}z(?$BZ_f=4xvT9-unkc(kyJ(wKi#k(s*hLI9BVyTK<cx+)~1#q=+o?w
zCe9ozdL)~v<&W?l1Qn5ZU**sH#pUzwZtvye<`v^3fIR(9g|ekCfP?4q^My7YI)e3>
zwnD3gWtXW`!|Nv~Myitl=okEPztQ=zY%d5s1OQJE4Hft+7+}l}!5qV|08uWq?oyrQ
zV=?)F({cD)pNBGW;}NC$7X%v-1K-vWgKa++au&LEEw=d#DYi@hZ<X4vw+bCkd`MPi
zw_g-!X5;z$W}CfUk)(Av!-Fna%eKmghO|pHDSjc^62zD`Fb?}btac;=FpuS6%)im5
zql%Rf@SC2ZkVXn?j_&FE`VDIeL1n~-(k##7B{gKCm1vw<{-dVZF$YQlWYl(3(lkv{
zs2Y`&GIhB+GD!u&%db$<^V@7eX~wQe)9JS?-Q$R&D|rWh2&E*SgKZq)8)M?n^k>&6
zEFoBp1}}lfkPUS1pBphEvhElX*LP61I0K%+@i&G|IfElx5;hMA@V@+7L7qPIewZo>
z*dmVyaiN3ZH?mbZp1}ZxS-zbISE(7+c1LOoD)ZN@0P>phat?4VDiQ*b5FkMI1qQNJ
zoFa?JON|)_K~_N4e7R^F5VmT0K~@HXB2nUYMPDPL0g~*xkGRXlr6NEWWlJ2b4shlQ
z8B=(SzWPF$^xSl4wNQ<TNyvUu>V&>5F!d~HdC56Nc8PXIadjaJz|hu|C?qtNerGRp
z(vH$-Ptu8ml+4$aCci{!jsXKl{FB#a3pnZO#^cC6d%?VI=x{qC(SAp*K^}Ni1B?8f
z0{F%}veP+maIqVrpB~+Gj^LAQNY&Kub-iujhAx*+Z)rGscs;)EpdY+5L;5f_g=4)N
zcB<BX$M!H%Y(jJZ6#xZ5flt@un#5XFx(S9aqX7~@E!4!g4e)Ej1Q0(ZjmGBTwr#-9
z97-~Wdy}dSNwr)R8-*4lhri2;E%}@p$MHddyI>v9(AmAb+S++vx6I|%0Efh5gQi$(
zv?Y})TvUKP^d^6aV5%1&swvo=Gpy!O<7<QjC`p29TNPrK4mwIllxYJk?^U6}rcuPQ
zO|2=c?hiRt$6a@QJgbMW3%Mui;xjM-!W${MnenEPr`AXqm$sN%$NBd_DG?~{(&#(P
znb5>9EW!#X|L|<1q?75hXV`!?TnM$ZE#_4X$h-_~ZHB#?y)etjvOOb0>|{;MNeH0|
z{;3tNh0pfIk>bd*Rm0YLl1OPj=JiZ$KP;2<{$eq#h>bF%pe|#mDY2qmy_0kTl~0=T
z&(zT)O%tyu5~lkJ*E#!#&u+NwKp@Y1B8TK0Dg79)j~-G`-fLHBo22?wO8sod(lA9=
z`(4#b(CSWLm-f`n%2DIf`1^hUF;9X{a<^3DI6N!FG2+YcEEzS@Do+OO%AommS7pf$
z<1RWZU7E7h_HrkG^`N)PDnQMhAx{r+1nD8owJF?<Bp(wn%AqN$%~E!Bfkk&jgy$+4
zA*odW=-Mq+;(KjGq?ekgFNo2LV|%jODCe73N{9cY>5(S9Z6)gF%Ly#?R9R!FkK>J|
z*^kN4VF(P?7^JSqeCdE`-C4m|j$V?f<I4c7ucF`fEst_@2A)hAH>CHzbv9i?@c<XD
zI$=k1k)#_SGmRYU5hFyk5{y{cDO*`@tS72EDhWN)@T|dVp4x3q>-5<*OtWmMl_VEJ
zU9e+VH!Tv<Mme0;N~xGmG@NS4H;0MZeQSjnANqlGv;g+A1j|+Gaf2rnDisn6lr@*Z
zGxbE3y%F%2BiN)ciO!|1tM-)lNyvLl0Z4p_DlY8kf^8ATZ^=GXuB^lp1EWa1G~U>f
z5bckVC%RHOtY8;zDhu$g8eM`JD=*k5l>$-k-4$*HxYSVNSj2iR5}nkZv$Rl`CfiH}
zj<pphb1Vy9>TEZcV&=N0K0lZQ&<Zctg;{5sxf`Uu_33_8Gjyqcmv4aS0PvoW0@!ZV
z_N)8S%+6(+-7Tt|`mAf}16o0wY4dI8b*SI!)%Kt~?GdwqzVd3I9nklps(?Vwc35j_
zPAusK^G9>tmv8p~HcZhMOx?qp7lX|N^2U!6wo3onby{#g6kd-<r4rLuYC`J*^xc9j
zBp8Q(CC&`;^zmm3?I&*gy{@HF-Yl}XS&oB1tG|B(sb88fOR3722A(WD62i><h4_KQ
zvapk1yraT8^bZP+qbss}LxqJoR8uMtWN(CmEl5z4Ajl9~a%qhJ^sUC69P0!#uECOF
zT+|Pb`w^mfLMPH+Hfkmr;tVddSgqc4NQ{>?+i!hxSzKdz?~HI`H{lA*wag-`#cSbX
z_>G0t2#y0ulClb7^^j($=pfS&#seisrP^;TIh0Sbdt*75%caQq6*=!NlVtbGblLJP
z^cX-Md8}(S<?OvMn6Be$hpDsrjQVwNtDv}FJ)zv#sI^tr4LYYAphNc14cZ~U>jdeM
z+jE8Na6`hWR~Ac>FD9==W_IiWx>65#hpN{D9HmC^z6HXf&%gf<Q%H1=oq#d;g^Gc7
z3-E;-@ax0({)$F`{}S9Q4W0plRVIK0e;oOv$0@7hbqY3dRgCMN>+5!F$MyI;S}6Nn
zTO_{m_h<1@JjkoIQoJdoN=-<G*AM9xChjHubv`-640#p$$!X<k)ypizy4Aurqq`yf
z>Fx<KZq3KjB(%0TqG=%GC#WpE`TK&HM>VxmG$-TOquK)Py_Zj7QQ<;>GA#X)OZ*Wf
zeZ#oSVw=wdOTEn3PxtIYa>I=|p`3klMYdU!yVty6?gVc{<R{_KwA2!8ApTDUg$nES
z#B$PBL%x-l#@MOZ42`PrhNOd`tpQm!8w3^3QpX_SF{LW2gGFCyXfTv2N3m2%J6No|
z3pI|4eGh)dI@P}9Y8r8-DYjOWfUnwDYv6+v_x|he5I?pxCAyK-`HNE;?x0aA`_(Z{
zo{!JN-NX<%ejW!O=${e9C~6vX$Mk_$m|puk($p}G+`$8|DbZ}GUG_JmDRCNoLr<_M
z?0-|Jd?HW@)bi_nf{!t2?CN!f0j2kL!kYxO4O)kM-rpB|J>rtYdg7*dHr7ukw*HwZ
zpUrjjah&SUdStZ~R>OMdK~|&Xv6g&X-(0ljqPf)|w<l07g`aSSHO~9a5J<f9#}<Zv
z&+tUV_47fW@eskd$^F=ci8kiPo(Z@<czDBOdj;SJZxKdU!w1+3GrhS#+yBkYD+9eg
zgMI=4CY@d#2bX;N<fS<+f}IJXp}AW)vr*o|l^XBk_V~vwuR4m`jsH6N&K~wn@X$;l
znoR`SE%m%&n6&=DmMx?zVnV<5kEaeg)*i3-{Y@;e5^rwSYe*Qh#9`<7UKWSzVw2RC
zac_njB8y3n{GKNHRpXQfSH_SxT_}RY3B^kF7Y{u=7q2!Sh#H!rEMLU{{UP;?`30-)
zG-b-BNn?;F^MG{-A;2?62>%|Nqy^+5GGB;ViigbhL9tPujT)t?dj_j;p+sy?mGDWk
zKp?FH!3Lm5PoKJFJUj*@-8^e+{!dRFH9@ykycmp8=vn*Y;z>yea7vRzu_h&yTS8=4
zB5v;B(0T^@#Sr=DOLB+1mEGuOtAIJF5D&OsXh}0|zvtb<xzjOFX*mKJje=Z;;r?aJ
z1#og3G(86-g|2{Z*Hf&u+dE~5S$Dj57YT3#hd2<!=OL>lB5G!}EIMTVnb3|TjA&hJ
zBs<p=Uu^QY2clO}8SA_zyvjQ9^|U3jb&mPjOGt+^YzgW%7`23urGES)8CqLEF^M+C
zSHY@^AK-{VXTN+gPOSr!I7fF_g4n{H=7f-l{!qFzQ&G1L&CTF47osmN7e|sVNRM>(
z1l`vT>FgZ3-YwGUI`mH0@cYA{DKFT%_<lg5xipzQUC^*(I{jHB7mP7Pz-Kv5KhQHy
zbMMRj4Y7iPfw0NJbNQACzzyybs%wqn(}ZgJKgLv|I98^eVvy?nzZ$7_8&WMqWV&v)
ze~=G?-$Q+$UbP3H!e>Yd6;0O3yO*F#h0n2&{GNP?^-BN@;=>E$fx{4+i-G*P!O2PB
zfe+{I@a#MDF9>ObP2~7g8)%&ol=D^94ZZ4O&N;Y}`z;&3=tVj-r6UpTe(IbV^OK=~
zL4*rbQu5%u2M9rdEqlOM@WxLH+^9ytXoo__j-KM3*h^4w=xGZ*@+GrYV%v#(M@;k9
zaGt)%S{N0T1ua41ue^KzaC-h;Nil+AOBD@h(;+zmJO1D@J0~8&Ut05ePTzsUB2>8d
z;zXdp0speaG46V}7X^47fi((S_GK8VppS~P($WrL7c@fGmfhbV?A+^{ANd(HusT4j
z1~Y{9N2x$5ScbL^EZ-6(FJli=7MR$8PW7PD)LRc|V`~rW1fy?3jYHg73LvC;8?&xK
zX^l;*6dT2MFihBiyUY@Rjz1hk+WB9a^bAh}{@|wugs`8|@wD1!bHO^!DT_aacnffe
zZqBQu8U8JjHyB+utdoURTvnt0Mhdm_tlC?|%o2&AbSVbzR%X8+0vWe~V%#P1xc;`|
zDJ;*5)P$&M=Y)nN>?&b27{cm~y$EwfngxM{$nsP6N@$m2JvD8;sLInrKwz3aq{y{R
zv{5EO&==SkIH=M%nKeVvXl?>{Mz8U*cd%cIXn0TQ%Q9Ir)~*JN-o&T{F>|$07aHPv
z2Yag=4S3-S0M2=NYd;$$uFkULaW>L?CB&jJIAu=z0l3**{9sC39(U}Bd5E1YN~KFU
zgixAy)_z)&Q07&kG_B{|5O}tUOLdP<mA2SPo=ei^k>Znk@Qm39v%SX}e1zMN@M2~8
z79=icsEB;gt?7xgHdn)MOI*Fgh%D>;`GbzTIv=jXd^Q>M5sX1dVOvl0ee%|AcgO;k
zPa|>i9;Dfl0+F;Tq5$l(HH3Az<Yp7wbfSq`?iPQ-(IUUtQ!}`b1@8qPG(~Ngy6&5P
zLi9yqKQ>7VFKs(Nf3ocNulLoPyk{?eWx_f~$88Wps-AXSbdyJk->GcOJJ<gx#_vJu
zoL04{?rGWLND4J(Q~-9P)_YT=cG<d1Of^lXa`8oWnPT<3My$hO*S38}<hGVg`+0}j
zzWD-Iqi<g7vq2(Lgbo;M+`NN-Pp_hdlUL>mm@a<1D(uI*adf%KR>aQ~?b(cdpt>5B
z$evh^M|O7==NXue2mh3U9dO!cy}EoRvSlOzdl+o}$9W5G8>sv*DZtKt6Bf2f>&_tT
z72K-tPxz%*Prmy@`sGKXve~w6A8fz<ck5Jnw1#JfPz|Tm5UFbDJ=J*TBRh`@c@$J5
z8X_#bDrXm%B~js!V2g(KPj$(flirNWlz&zE=kL{^zKg!g_KKs@*tfAK*L>$6pKZ@{
z#jd>HKbr&3z%d@*Bl?uz=cb0d<bPufgD^ooR*L};I;Hdd{sx|!^i%6;(~|8<23=R7
zx#9YLUJTv?pRYEH9tsYJxd<PBh2?29pf!2ax<^Ic;jL7iCFv&<p%OIN{XMLFJO<`*
z>Hnm>-fgiwJ3&;u{!{*uv3>|Hx_K(HIVN(_XkyCV4fM?_7rO?lCu_Z|P-oKf(yUA>
zTcDUzKK(F^OfD;=?!G*xEMLSDBIa9`xJ*p0x*W$ZQ1x+9Te?`Dr}E=-WFh^-6I)q!
zqfF<i9`8?hVAAR)b03aL{d!TO)AsSKCf^43tft=vcUco?hdZG!SW!6VDV*o_DAIlM
zNXF%3@7-uSJfqH4W+e(o1#bHg9(U18cf07TYgh8wi6i#v$~hp5bS^oRUdbeHiewxL
zZt0%Qu5fMJLoCRvZ-H%z^8Oh40WWr(a;391YH6}bJC!bU+LzU}ankHa@P+9Y5_V!H
zAsk8DWtsT`es_LC_N1LpDVe=TIYRmOWufEeb+LA*1l3@+<J|RR(1X@ey;W^PJZ`1E
zgf3QP@><8YTKHS_mb+c-e89QsD=g_scWfo0)wS3b_a8}NYE8FpHt})PDkoM2`>h1x
zK!~cDpQ4VdymRFDx38+-+<MhxtN}^!Eb1QV(JZO~jmbZco?%GrqgPMW=$Qp6&XXin
z>r^|tT+=ZkOEu%F`%;A>#3%*4caCZtCj*(+LG)x<;5_&i#0Gkca}hFMpq~eDEo676
z<!}xWQ3R{TWXh=~lS|9A^=i6?1tRQP%2bdVi|yoS5XbuuCu-PyBPomkSeF@@RqI#_
zv3$tZGrCwdWWzPnk_F=YKk{0^Cxz^(k~q%@Qw1e@{8~ck@Iw+q7TvS>&F+_alghWd
zq$ZqUG&F26S*VAcJ^P8z*J_4S$^hwRJd&mn_}*E_u}U@>UWYReRz6TKpA<b4W#$LG
z<8k1Ytql|QiP=<nXT6Ax^vW3Bqs3zVy2Ph7>{*%h$(ZBYN*)rVU}zi1i$5knvTu1k
zKo2?X{A-JZ;hVtf0n-)zkmFU;*uD1+Q6$v{OOaJS9x?E0XGA!qHyqLMLhxW+n$?Uz
zzdF2n^dK!;UWS<>_Ew$xz9xpa-l4IjaIYh_7>k~uudzfU?REIuBlDNF9cv4n<-22y
z+`bdAyaRyX{Fpy9rDGotn0joaOv*&;q<Y2?IR1V6Y5PAU89HIVuvzS}{B!pYxsfPZ
zh@S7XIy;3Zo~W)NLjEgRN;ZD|y$5Ek8{sv2$7T7LO=E^^%nsu9bgT7QR1d-frD5wa
zLB6mztd$?w^y7yr(JcBc!*f=X#$4Hqt{B{x3}hP4E1KNfmi!mBZ8r5MqB?9Kr+~*x
zXZJlvN9Go~FG@o+0Z&RprWq3v$yB!V#I6Vj4--dBlZDBgON5-f*okR9(+z6CR7_5i
zcAd>9#p_jyG&f*^ba}G18ZCB5Qe%e_6-<%mt)_%W%5_i13ayn8Qh;`FI#<Z`PsaJ@
z4xM?#(Hx|42)i!w3twzCT(T95IYP{*%@-(wbZti<d9<uC;%9bRu9>1`uw@Z0TF(&r
za#NO**;YJ*ev7H|#ay<SGgXU~)E`^UH1^t=M}(u?ig*y_V$sjh-b9^hZ?GL^P+e>>
zQP8}Nl8&X{V3cMXQCJP!Xp0q1ZNjjoiabTCX`L~Uj)s_W;mlJGLen%;f6}ogg=Q_b
zO%9EPbTm>C52hQV5tyZ2(dK0*oVD23-_jA#Q%(PHG|><bca(Suo{iFYinL8r%0;^r
zWTCN#2Ljh2*hXlYS#fW`6l952G^Ddco2Vv#(9jt0#5Yrz$0IA7Y?2u3Nd_SC_J0>@
zq0r|tpdtTJusb+MR1giE{|NbH{dBs=Ui9*)krak7z(0@|Isob8B^*D8#vWgjLXncl
zKE#9+k;D<?jMg!EuZC!$=m6T-Mv}B^GSS_U>)C0%%OoQy{sZLR>YSwWxqjmg5f-;5
z!+}a7{2Ia}Jkc<2AZ{0B>FrZy%TswuAlwlOqJb`u0M~EqP?s8jD;eo0^<gE(8K_F&
zl=eLNcp|x2LX?~m5Sg;DR*9WC0EalNH>HHjnzkuev4-s~aDBb^d7~Q%w#U<8T@T!~
z+Zz%D*;h=6PP><)3GH#r*Z!xNX$YpLJByZ`QQ?5;8ZT7b1N1eFs5|I$2u5$<8!&V#
zIeaX{;)*xUY>hsGUI$6_W{#Ff5WG5Z7~3Zz(1nhfiA5068pIFd$p{DSiKqp_A&@pP
zeIz{uthiDJrUHP<q_A6_=pi1=FGg}zv<UN119f;s5#(M#hz!y#`tfhMkfag97zVoG
zv(?0Nz~e3O<?kL5deov9q#-nGGo^ybRqaJJm;TWyWBE}dM2t}<7Zw2~aAW~S|D#un
zqFrB%W~=~PfQV#1_U|(5X^jo(NIu+?9?9T=Gz`n3G)(QkkpS7zjlgPs-O&1)i(8iz
za_#S|oRksAwBRh9_a%aPnKp?b_Qv`I6J!0TJ2P0>{dRPqg~h5!3S+<YFl&JY|0>Fm
z4Hh>MOQ4HLB^Oo_ptwm_ek$5VckhLH&(<^=gQCiKs%t(_9*kLPwVX`xkB3nn-AROR
zXeRlKq?N>l<&YKnKB7Jzphek<zvvOTIAM_i%<EjGy9ghK$DZ~chBH6d?8VP^z_c9%
z>E8wjmt@yPF0+EzMnczLI)-6i+&{kfEZD;5&xEYznbjwnYuz@aXGFTLVO$d?{IC`I
zK=46yQo(dicu{r6co%0pZU>kpKkuz~lIF8XtsTm0>6DUT|HRRWbPJ{kSxtUNyJe#m
z@D*4b?dFFyWhG9flH-;O{od5TI!brGE;>a%pnd5G+!*@JKENTN&W8X$umQQ1L2i5*
z2p#~@Wb4$!K*G0z=9hvb+D5y>iR^RoChh2)2%DJy^_Vb2`>4XGb0e;2<bD6UNdydc
zN=`iWCDKFmxduci$4`uT!rSQVD6}DzQK?yWG|Uo_XrP}C@#EOKq2d#o(%arGy~olq
zjYBmxK3D1hh_i$Gy51q`oTI&T!IYtg(ilbN=QYoOychT`>fZzt&m?}p7lHS!-FD>s
zWWSx*I^Wl#=_W=G$hzZgF*<5KJ1b%4&&y*>oZ(?VRzYz%(VhK|i3$#q7=2qkKCvhX
zuJz~gV^`qd*l($-EB2Qc|96v|iW>hU<ofF&sd;v#ZFx@amj0ho2l!r<&j<q31<aK_
z;ttP*Jb_%cJ;6(|Bu(yqY+NtBB$AJ}g#rweb|0O6Pxkg~($9yZqU}e|L?gRE$Ud{(
z7a}Zq-iJCqd0r`f9C=<SX&zltk<FXJ%55h_&-+H7l>Dxoe60Qx`ZNFIg-5%ej_TBm
z??Tt-VJ*7>eOzPG52EyBous|qb8LYFxKfmW<&OzDyRc97P#9Jj2W{88cO#!>bvw?d
zZ=>Wd9kZLie_qPhj(ZOJMB2K!3}ZfDC3r8`mRw09sn#yUA6HPSR2*ISewnxWjcXvj
zD)Qcr7rMZ<>{sw&(!Cw4op1F2TyhUMMjU1Y1^~$ZcitKQzdY+~?BJqr>f}Uctf~SD
z0KA=4qM;{UuHotd4FCvo_V4ZgFfqx7_C*{Bp?#0kV%KTKlR{YMavRsr#Vj10%_u|!
zowah*Q2~&>q->2drHU!Per)l2Zkx74<QO}zm~(4*r;|a{8VF({l@f55yeyGwvoF|)
zgSFHS!VrW1q{vCdI1iuo{>oPDeH@PM^2v;@_6aK?L0AtStc8{A{U*u`G%J##FN9jE
z3Yx$m5fMea$vJ5U!%UT78Y+?7YRG|<Bg-s*2L(dvJq<<`z}|(h*UP^4w+D$K4JneQ
zDEy5C@SK*Y31Aw3Ypu1IWCG%@oJ89(_L4|t+Otlva;!Xl-pPLoQ*33}%_<-e8%sZm
z`P-Z=MS7;i9%0=Vpn|Dip+d{gIcwL})KM!qIeB7q=t5RTKSsCQy5Ka{NJlwUNk)Db
zrowsb_I@f^PR?Nlt@oV};aj7XbgVOgtK|WhPXR@o9zqu>8!D}JR*Qx}=Ze@67mQ#X
zA_v1Ig~{l}qYv67IA3qG=0{i7Gza{6;O*{#=Br7zKmLUq6UP5R#1b=PKp;WI`Pt&m
zbAg&ls#<BWLUl;;5CrO0Hi5!LxI#NZmXP@C6Qb?WD8Mg2M}4LGm>addj8qhs%78N<
zia(Qul_Z{BM%BX+y(2hH{726aB`E%p5IPw{EZ}EUZ?7;6`EMx2kfBM~KheLjSHssc
zy;awswZs~_bKfG#-$taQ_bZ`;+W0(##;SeX;VtdaH$8lAVa6M_`eRPU0QTro@5TNR
zKaNiupHfrGDaVl}d;7Im@DDrIysr?vCrhRiW0!4|q(q(zU{|ohCV7@~l=*e?Oc$_0
z=<ed%1Il2gN(Xo8Ji<dn5b9lijj$}|8)0`>J)Q8Mi|4_!;%_gRLys1nP{kmfru3i{
zq-n9{Atg4~nULIjewAnD*+<{z^wyez+P1q5+!9q$HcQY>X0IRHaxY}WPC7WXS9giN
zS#Aj%3ZA(@*3A~Y=k7C(hvyR=q}0X1Mha!yFsj^>x8D_o)`Z~O>=WV3^EBsK1xvtd
z38o^@OT$S~d;IQf?!!8_DvZHv+pc88UDrn*`h#>``d3gR59iw6-HjawjumS@5XBe+
z2VY~{>R*8W9Es4KiDM&x002P$;_1JRL|ao^ePf&dCK6>61?@K(U_x$xP(|F*k&E3@
zhu|*R@+rJ95UK?ir{qGY78}4ckwhwU*{}NI8gXejGnTyb-pZG<fY=;vhcIS3jMr}6
zKC`}WhQvK?5b%II7taC4&io6_+NHPNB~Z6Cq2<>F?*9C_hs}}_$Z%!A!Zie*V8sZm
zV{qdOVq#a1a%iaq@OuO4!5Z)k6-npZ!VFr`0Qo9mWWWI5cpbnxW*IbS&)S1F3$!@y
z?`uSAK=Q<3mWr&-HVCtSh2NEjPs4jh30c87u+T%srvHJ6Y^pPcd#b1nGc4~mA!tmA
zJN05)md>s`+==X_i*z5g%)<IJhj}`y`ubeiMqq_I*3XxR`rO=D#2))t%k#8`ETtC2
zZjX8zF)>vfS$3x+eum7*;(^>S65bf?sS9DaPqBI=+HI~NQZcq}?}4V!E8c;)arA_;
z)-D4<)i^&<2|-G_9pQ;-4lQh6ObF63D#-t>x`9#>S^p3yYwtHDEvLQ5Xb@Zj!T@VC
zIWz6C@5<@k>Xb(yiL=m63uOdZ`3v5QL5J@t_tvOVn8y$&?m4=+FRHEb00GVI&>cTe
zsEzIq6~BvGo=wtq?c$^TMf(HzpZ^Zx_@69UXaE2?VgLY=|8k%Hr=+FN#$xQ?YH9Mn
zTA_CS@0;~Dmi0dlihJgFYKKVP7AG&oR8!5^vS*GCHfFh`h$L&KQ*KyMAta<o6N&NE
z$M)TwZBT)r<RfP<=4+YnKoYdBC|{tic>M4F&MKZuInk}-dst~tw2rtn(Zn57qu%)H
ze@!$kpS<?tJ2V{L84qt47l}QSiSRt}S3acZlBw=%o+u5g67fx|Jg4ih@Z2}VdoGkf
zc&9ujRUAi{NoYwDvJJo>Y%E4a>xNgpjYiVHu_F;CRoTGU9SEFR5#h|ea2`|{;hOO@
zixO{+{p&UH&<8ag7I=a9O(s;n0xy8PJ-~8zG2z3P5AP#Q{(8L3^*oxU{WK^Y)59*L
zqCiKOkEHRm|2n1}+q}KKHzfrEdE&Sv*>0&aYgbB|;-|)4w|g{?cKcztjo*c)k1D#-
zs!ci*tN(;!a#P&<nQvdpwN3Og1bdE7Ur}P(o5l1EAhi+U!OeP=$@qKP1Rv7hKdAHT
z`{_n{_;KU7tgqIQdTSw?y>`wh8>|YCH+ui|{F-uo{rFftq3@gj9P6Q@L5#eznd5ea
zU)$k&Amz8d@&#OLd$!=fgxdhQELIGDcO2hfjv2``=!3<IX4Gi&=BG^v1tJ3OenX!q
zBoT;pB|^a69?<LcU9|EsU5)Aa#~H$YCrfdssR3dj^?C^w&)e(uh!Q@FHw2uHbM?Ny
zWxd}dKPT)3muWuP?aym*Wj@e3AEaKcS0olSa9KQWVtk7DiC!4^7vZE9*dK;cNU*%4
z9x_n&5rtxB)Tjn>>z~ZH&w~k5Ms_D|Zz@j|?&&c##9Y;sWPGg%$3%xtiJdv&VEk?7
zG$A#iO-^ihh)Yg?TwzT(C^j?Y*O1>{S(3UP_=8mkq`l|R3cwi&1bCfivW)afuS_aY
z`kNsHggfOf(|qSo7C-8>31$>a0#B;lSllp=TX#WM1g~3;sS`5iB<;)!-|MQ~DU-Y?
zj~mgAzY_EJir-0{As2RsoVgcy$D;O}7aRuq!7(w0K}K!x2#*s0v5lo&?IYny>_O>j
zfu&Zl0W(I6*JTo7JrvP<1@@o3_Dd6-quG(u8Z5UB?JGrgRkTT-a?J<>ct!-mAX^k<
za($86=N&>VLXe51=>ho02{y%Lrjq1HX<dP*_Q;gX<YSO<F6|K%OIrJ=bkfoX;&4{c
z2C=jBt-gI2z}m}dMU(nYHr|2*2bX|~MVIlnt+_Qrv_@?S)H@1EwZa?oTy&y?1^p&$
zeyxEWxGXn1L-zZ?i^WKDcbWrso(&y@L136QZG3##_d5#*n7wl>57wXALsejyX;P8N
zUVK$F9!TlQfe8dl`2Z#oDa6N9)k&iXsC@<uJY4ut90*{dXwo=0<ib#1j&h;EO@rB7
zVy-TaXSASq=HbTv2I~fVT=>{HFuejqyk&0I2d`EWa)Q;SeZ>N#;ledi%@8LB3?5vM
zp&_BNy|0l)Z;DGPz*aTNR#z_(WY0-pM&v*woHXp`r98*dNEqVi+~=pOFv|f);YTdt
zy2*GExaePkYKSxj@$jgfz)m9hvvFa?-5#HjQlZxL*Q1Ej4s52F>A_S5Y^CT*rT(ka
ziY9y!k*L%t^(o3^l?fQBESTz5v)s#Y4hNJ$GO-3R*?|fW4gcaVSd%@d3AFeRO>H`+
zn=l2we7>_Z0Fd0rbn~E>JeUqx)p%93=tNEqRwK()5T3aL2^BSg_0pPeN{{_u`$s0X
zW9Db`!rND11|$DJS#0rXAhm2;YZ~tPtw2S_n^hQ`p$~)_4v2G!gD}9>n}H>&OM{74
zQ|(W=cH6e`C2BqfqhcP3n<6iv{ya2w5p@agYvbL@qsFv{o#8?rOGlY#*koEG2TVKr
z4#YPuqtvaTF~}FYGU#__57`rco+ANPIP+uW%V%BrNHe5<neZcUi+w}Zi-z!m6Fb*B
zorojAy<_?qs>%_y;_G}VbU8mE_2zNCe_T!%;+tRTw{Hu`cyd3TXZ7@9$k2Z|{I659
zNBxOle>hyEA1lI-+z7C7yEEUz+fz+KVi-aw#++vx?#T0o$UwG3^6u}tnyUJ7?QI-;
zbhU9%Rvx9U=FG;1xir+>Ww~-a+3FH9-(YJF0p`b8giPzrhd_knj73=Vxai)3HU`9B
z9xk?*-{<CRUKREk?(Huof<<oW^j;^W>ez#&;N2c}xQb(3c~70Zj9IXiZa7kZZuPqJ
z^^SSF3uXZ%dZiXgl190Oolo-fhDc6oNoU))&gZdpGN#+Q?@{Ao_;?#ML>Z}E1E?Zq
z{ry&r_<K0W6|0rSO;uGsOweW{gQO7a654l_E^!MU6~`S*@_86ju-gae=9qZ8m+asn
z$qdbvN3tvV<lWHn)Sfle^3`f8rW8ga-9SM?QngSEY=C>Kbj+ryL|AV$!URsT4%*i&
z%cJ^j1l36!WmK619TrZMBrqM7|9&X0%N|uxmK2i(vf|FM&^=K>VIA!u^)<9ADsmrQ
z01V59wfYK&yZjj*qLn_>vTf1m^Q;4K@gOS?J5ftMF-WHBQ;f+=t>A4$$FN<lk8idU
z+h|Ss(GD7VYmSCF{3fEI)9ds9M@C>Wk=EY{5efCQ6JKs%2lfZc%POii(!acjK#r_{
z-uFo*Q4R&Y*<ilN$g*ksV|*LK6}X0_ITi4Nm?lLSkHgHDsa9{r)rikMdF{fXKa#r$
zOmm8(HAbgJu}rt+$b_lE9{&vK9NhJEo~PzDw2kOEy{={UZvg(nAeIgSBWY1xnshxE
zA8oie!d%c3<U$)k7zk%G0dNou%{Zc9EX{a4fiSd_OuR8P6Vdp1P&UHRaH<02wQBK-
z(WaBPl*3%=mU5wY>s2n&PE*Ni^4kug=wEX1x>&6@icuGr&|?mCTA$=c4!Eg%3Eh;l
z`G}3v=W+-?=2EB)=Vf2$TmsLHt&To)MuigxL|P2v7KG2=sCsa(Gyl^-`kRN?TK_q$
zcB#YUQ9+qQgPJjEf7!=eJaIp|5(qvb2NbP-g=sSg9!3EQZhm1*$I=^V@xzz1X16-c
zE{jO#jGENF;R%<NRr)NdBzQ;f6rtOh4>k1U(V$$rXHGUC7ftQLCvA(cNsOz#izv3r
zreKoDJ92pVOrYklWfU~FL2L2viCG#NF3IQ_79>9)q+Hf{8m(h!4g!JclNWCpewdsf
z;VFX)VP459SCPcn8Cb*hcBT916e&X6;|1F0rShs!Yd#&BLS_k%N!X=;ZUa<lle+_h
z#TkH1Uw25&7|5#VYO#gyz?DAsg^yi)t8adE>oBU7B@8nyvILdRU-zIpd69j(ca^0t
zLja(Z7)(BaBr6j&RYE-!#k1630yDrH@ByoiLbbRxO+o40!b}|Q(%wrxj`?0?c^Uy}
z<<;7;+r{n986v@@Worz|j5D4=3S#q-f_`ovexvJFD5+`nMqpg68o|ZkrkJn8II5JW
zqwB8D5E`Wdq(QEN2{Md5_^I2US&-XB$Cnw`K;o=Nk3_+tESe0iy+#JfDSgdbZvXoC
zt<Rvh-PZ4=f-<~jLX9_3e|{x)!b&@O^5-<VJ^nq_5thTBF(DLkAfPg#lNE>2mz2Z{
z^CWD$$~bQ<ha%+~Q1+=U^Fqjz*-^%xz`LFkB^5W}(L2diXs48s3-+9AU(Qe+S)Qpk
z4Nlc+4I0%>fT$W-bPK(uzzU#hn|>>b3y2-Ea9<MpeZBVjv&wTgjSr&AI>Q^oN?WfU
zz%gH$bKAt3lW)(iWL4`F&=KEBn@A2i(`>bnYWBg4(}+gr<>h)y*U!-f?dd%`WrHvA
zgxX*y?{4c^D|Slu#9%SB19jkyBr2BE?0h=}Qcm*=eTcg<A1<>kf8hTE)ur+jq-?O?
zo0K5|0O+v+00{p}s4k;mV(FysZfW;FlPX*PcbtB#q3gUMh2(px?&4Er)Q@3fe!H?l
zDpvzDs8$oNA-U#AN>@uWDu_*}m<Z9p{(kH2MG}a>fuFTewj4DtBk!Mm!@2ELrddSx
zTsUHU<)2>S;^y>_cG#4(*q6wRY(ghuvB?#4aHc;fEvZ@BL?O3P3<9X>LqI4^Li9sY
zYD;0H+j$$ofT*k$s{GF=A)9EcoQ?$R+~v=cb;hK!xZ_hsD`}AhJr^_c7l894knnjM
zB_!e}qR*fQ-iGGpr{v8RKj_HT4m%4+-YBCF(hZ}>RYTF!P^O$~$+OzDXh;{D!q_VF
zOB(<BWqcscjvbZy*rk?69mUC+w`jEx566=Ta!2yJGz#bNWWUhlfFs;4S>-@wy4DdQ
z+5*zppNuLmjF9uog7(BVh4g{116}$Kg<-C92(#4^SVz#ZZ#ztCIFfjxbUWRK*?mdC
zEAq%|VM>LE{fbFrF7af3!1tau#-epJ<cEZxUJWIqIX+F~9f)%|FTylYKoq9n`vIiy
zFP#cQTJJkMC;SZb$#0^rB1Pgs<#k&?O_(MU;bfq#T<nPF{gH`-NlDogd<e9lp7H_k
ztu`}O3vIhbj`j+?oD-eKm|w3YX3!8Sb^vjdOLMsKKa|$f?kKf9qCF*&*(S2YJt7|T
zi;k2Rz3LKd1oYEgIcA6ia;Rm=vT@$qqDYl`<87R_uBm%DKS0Z(dY+!IDbdyAbTPf~
zU2c?Q{Lo;<k?z9aE;Vh+<o{K%$>!rp?uvAjzSvAC*<i~+vm8pO6(p9?h}^fR+$Nei
zJ3s6-(`kj!8fU=uoNp;O5m;c<UU<8aWCCYVso6o*OM#YM&DOSb%I5^j!cI@6@x-D`
zEqWg9G@7@tiILfokFBp;=hdALwd#Y#H%MEuUUnGoRdVs=Hdry<!KfTzOa?B6M$M%{
z@0>g_Y4)8_@`ej*d0z&Oc2Kf!Ao4DLVfg~1qY6^0-c+kyQTyc##bK+cgGrGd*7)V)
zl2Ep{sStj_jbA&2-ki^FC|W47d?CGRwbBjFxS~5Rr47X1taK@@<A`K|rv-pRdh=y$
zWrZv-<ES)^5sx*)f;IUDgBVZ-E&D{WUffG>x=@t8OjTvZW5TBG>`-d3W9&v^4cV^`
z)SIJ>8X)OU4zxWW74BJTkzPKlpfPAH#GX;ZmdG`03LuLqA~JBJF+MFGV9%%>a1(4Z
zag)T3U+7y|`_;jFHn8@5mw5A1=lr;icJqG}rq>8E*E=MWD^gv^?V+SCoo?2a2KNik
zLhlqL*O|Qq<=VIc=z>4ffG>_yKufCHuy00N6<6j@Wdee^Q$YBR;V{99?uQHfRRoCx
zp^D&5qrYY%)Ny2hsAT{p;?;TNWJcT`n-@o1h{1m$!C>Am)HdrT;wzf)^qc(n`>Nq%
zW5L^0SJ(q8nDs+A93*LW6UM0;Y|Y+zljg@DOCst#B(gf?dEBml=6OoijAX(3=Dn47
zH06$&3lIeG2S3tM7hm>D+uJF)n7EE!e<8}q9N-X`Uv2>qh9y9)RZ#nK)1DpFkKb+p
zA@3EFBDGC#<zlshCAokLlggewEDDwD^ZT`tL;6)Lse$=zQw#&z*EK)d)x3!uD4Kju
zf}&?$i+s&HA_8*0z=iA#hq606U+G8pur|O!KSvfUKOa)x;bCD;w*#>DD!9sw;*Wrd
zv`+6II3#{KA$Pi+8e@*a#V)&R>o&Duzw*=|+4Mj5i;!{L(RAw0bDq*OWYNv#G*GJy
zE28(tMX4Pj-Aja`r>7>-0}cAUf3-?AY>o);hz~fT&$3l!+SQ(Jyl{K`FvDCDYkX>!
zCkNlDHmy>lQ=Z9wlG2N9xcg~2$@3%dpJV#AH?&fpQGyh5Kd0;L)A2}^#-1vx{ia-p
zK<M4uURt;5L;B@Um^0bA`qa(ki^4iV+UC#fJfC%3P#=X|-+UiO>N?WNiE7L{cq|o{
ze^P<pOM~HTSkFd031`;rRd^GXmUIAlCVh5ZDi=ZGLXwb|_)3Wr9F#on1`fdErIRSZ
zjJ>Zu0O|7>Qj+IRIYlj@M&WzSFJ_}$3bMOKbVat|9IKk6w8e8MRwGNDp?4R+;mVFI
zmE}j6#TF*Clk@k?u?Te(K2~JQCWq3OOJ?_(B)+4@R5<2g!J6;@s#beI-5#1?#r(ww
z+VWiAPYQmoJZB-NiJa|Ca&CG3D3!Kll~`ko+Ub&F0SB7NLN)(>f!OZUyNb@jc)M<m
z4St8~D2SOYU*8ggkbOx8_yJ}CrCu|=NmXIGhkr;GDM3A$@i2xiQ}@HSy<7y};`Ux)
ztWxTV9?3P$0kFsOTzFBo+5Paj-t)F1p+NnFM!rx2eK+RDyAsN#|0c!JekAhv4y=%`
zH1!IG-O9u1U(L_2Yfjx>kvuA;-XZ3&8rVevQbC|<bg!jJ*%O{0qc14+O+b_k>;#tQ
zx?z-g;29B;6kR(ih-EY0(2=6fIop<hT_sxG`_wGSt{k{a`>%R>B9hQ`Y5n$HgoiDC
zWNvhEPW8<WOz6eMzBIvV`;wF1IB>Kz&~^KiId!zzyF9q~Y#oD<s*=jPAE_UVfqz$G
zF|PXg0RRu4<2siV^}1e!%?$Ole0&AY7U1Z<+V}dyyLuDn73&?);*}^7<nXjK5`*WQ
z4DcnJn*Jmg>hhwVHF~>$kzsQL{;mw`&E4Eg30Zx{nyHrnsqn=fPfTfh140mYfv?$M
z_2}~@N80nEbXPvG^QZH2=;2U0E-`<B72xu7g=N?Ia%b1{VA#tHR$Qq>nUwkwDSoC%
z;Br5dOl0wXr?9L%?$;_FJf0?Y@(QV;<|Q3z)bLOAs*rhLRxKCvjh)Rgy|-a}bvSyI
zeXZ?2fE$jyOO4}93Cv&Pp60c*{n)(kcX)Z1(rMazU*!kRb;P7R1axD@%1fmr$g?Dx
z9sS^{JCeP7U8@<IJx;9cJ=8kH^SHV+Gxq7d4PffT!i{wAiChvE_P$f35{sC^z0ETk
zu}9)_Jn;b4%sh41wf(kzTdyirBuzL`xVG6<*syELAI4J}%6I=&_|UMwqRrD)=v4;w
z<h*wL+63n$x+#8t|4O`qa<?`>_+g{|#Ww;PcK<<F{4N`c`pSc&I5#`*@yUC0dkvzf
z(7Q&Oxhl%-X-*P%*r3(D@nvZ)2(D}Sf79+z0RQ8X{)g87!}*^E=f6a24%Wub?DYS;
z`epO~t$zI<4ER4*eVgLaJ_Z8-u*U!ZAp37t{g1W(+v-|Lx~}~u8%pTyH+A?E86DFm
zZau2*Dqy5&nHKIud~)l$0z#z7n2xPv{8_PP!f&rL#l}ayGNXo_mb4FkV%TXERv%7$
z+EGwhcQ}ds_zdv6R0E!U??WNRv9*!+@UxJRE%|W5B8@-A@U>K;y8X`A!{S_$dS9Z$
zNJQEr3&e?uqRH=_29h<kx~5`mc#9q~J}BwE=R_2DZZyE3>W*+vt-<0=mVM9!*y&C$
zQMvp52s{ra97Lxa+X*r+0!y-q)}!$RYQ@A74d=nW5uP-WVv<?5cP$ai>4~0rYS2{-
z*odNJ6LzMc0YsQNd<0N_hvJ}_97<Q<PH#1{O(2U13R6P6ehJJoXe7y{n&RoH-O<C(
z&rd}#Z;GjB3TnHt6pQLMX03@Ctk5{{V05CG)y+RiyV4oqHq9SJ_Y%mX9w6fSNBV~k
zti4##`iah7`|W=|dQX!o%ohR3JqS|`mPqf>>cb3Xb>apf($o5t6P$47%+zn5TsmYA
z3qCsPOY!CI`JGR*Y58P=SIyrZY?y4Oe5^ooy|wPjrx(ael9+i77${6hM61ET3U1rc
zr(1=h${k^*CmgUef4)PyiFd(4etK`y)L}CjH>=ud9O!hcn5jV)-tVHbNidaP3`*K%
zJqL**z+E0ZUO*~7RvWJ)LMcdUsa)vJ>k|`_tTd8IkY!bT5_Xs<*|q@s%JhNUtZ3mT
zyzjum9h0*J%9h}BGMHP0BD3l=8R?5PA~6Qn!Vl-TKa6Y(AJ3OGIhJ5E4rjaB3ileu
zLFGx2&zYDD3XW^;CU37mX>liP4V#gV5q<~*(0wnQ$CN=fJMslJknKcDDI(gBORkD!
zdPZ1_@^T1Na%(g{s;TFOp9bI9C2-I9L)Yp(g&MB-@nER3jG)S0B}s_0#xxhKrBvo{
zRx{g1m=narn7M0_{~yNQsYwuE+tw}HwrzIVwr$(CZQHipW!tuG`}EU|SUYa)wIA{i
zWMt%=IdhEhwU)?IdAdbR#4Wj*uG(CS>4qN*)n&?lUy3+s;-SNP{8p#LzH{N%#!6Ia
z7##F0iAcF2a*JqTBX3lJH;i9!l{K?)5YFLza8StPd<BLg<5~#7wjVnd8r578mk$*r
zf<c=bA;z4N-s*shV@CV!!nnsXigQ=}_^VmY!V>zp9BEJy+GU(|i3)dQz$)PC(wl2h
z<3H@I2@kR<>)RuTNLFv}ZIr1tK~%+ljWw|9rDtm;EpEs_8@D$VdEgJvivI*Sb)+wf
zy3}&aaXKCrZn56!Y}O_*ALve>#s!VGfyKx#GvPW5b{;MOE?xmXJxRCteO4}>fr_`_
z0d*U%v`U~?7Djfr0a>GUKk}WUSpJ1A08*L<(-Ohb5Fvfqn-i#V)gwXRVIXG90J=ej
zsR}Wg&gm_WDP5Gez5rE*MXVX_<$fouf-*8S&;=%L43PsyUF~vFC6p;-Ayiio*X{c*
zLO#@?SlY^=3;<wl+qLb|Y)m_+GR#-b2%e@ftL4h4ii<ZPS=l}*D_U+Dyx+2%hYhbK
za_3Xva>s*(CvVrJ;r{28_Bwf|@xBGQ0`6YvkjiRfgwECMn0~D8!#-l7uEbtf`{9R6
z)N(Uq!4hR28R%(I?&7~hgfKfxAM0tjG80Ht^ikI#p+Y*Mu<jZA$C}({zY(*S&N5hQ
z3_11Bql^{5?W09bwB47?G6UM03@@UmnUK&T+XAfek~%K-0SlV5Mqz;HGfKIXH(Jba
zVYNe}j~_^(+o&bwQ0#_-OjBj|(PL}3B;UhRtL@%}Ctyp6Rx>xf9&g9JgJ|D--Mh33
z$qWa(j*{gW+(E7EaF@vKe8Z7#q>lsymKz10PhCSFPW0zH6u^jgCNDnThAS@$@M^ci
zg=BEgKd3s!u%D(cBrZrPQ89kz7*F_ADdR6UMJ=k@@$~Dt(CxTLUL6r2Vl&=Hyy^^y
z3~1#$1M1Y=eGe~zcS^jT=g&~?m{uqohjs`HL3mV1yjR3j;fSlaTvD|zUf-|>gH*+?
z)@XN_zkZu<wL-JgwzPY@;?;A84*1bE&<1tISwyNo{Ehpn>!e3pn2q_Uz@jI5XA45|
zJk~s&8w$~N>F03$+GOd}0H!B)-)7`_fO|{SJy-?O)(vah$95!cG;0X#>&)M#2L<11
zjJE9%aO`p9Yu_Pn%Sf+s@s(-%Y|e;~q4*SDHoih$h=XidJd>@{mAc07T)xzk3o7;M
zPJL}j?_9kM@_pcmPC|>#-a^L|9dE)|uKQCkp-<~m_378YC`<zme1@}xs-GhQx%v8o
zAaQ)ILzcL|_nDMuhe(ww>|;3`S1K(M{*My*3h^!A@?cU71~cB}W=SaIQ`Oh|jpUj%
zXxJ6JuQj;;aZotQck>d-2L-3WL|V54hX?-qKmI&Dgem-^fdBw5K>sgAluggZ!p7u(
zm#EYzE68m!Ao$MKv8SYwKtYOZRK^A<OR}K~MnOn#P7<-XVl%JCTAP(*zU-QD0Rl;H
z7f;hm-1OXbeco)56@U{)i?pOTt5}}FhYfxY2K{KYQ$kKr4>Zw)P*dKB7Z@mCDvF~H
zhBLOef`G0HBfjVCtwCtiB%=jW2Ns;9i_hU=t`zsR_3J`kfim`?D-2@U1VF>K5UGl#
zDfcHb0Uh-aq<~EnAY4W&3_$~7S4xrZOf(aL9uS~mVKOk?Sz47$g^6%BICJJsHI55O
zM`&WPN~fecD_Bv%=m9OHs#)q(xJfjwTN@g1Qw$pts!0e*YH~SLtWNbI&u$j|)n_HU
z)3uNm(av=i4B1gV(kK_}AWI}pMRC-!5Jh)bzhv0R9RJP=+IOl6gHilz$E=GqusqDZ
ziQOk!SV^Q9fMN<<Pn0b_RK6X4FFuDA52+_hPmWeVNj~vx>j~%??nKQzhOT@ByTz9?
zL&!2Vrh>t*4ohS&FhN}3Oe#c;>dwc_AcmwPbyF<5UcIa0NYoSMi&fHw3;|qaVv;R<
z1mcP#ma`*G=cHkA-sKy(H}<*S>}P_6Ey3y_f=&Eue9)0!_0wC;Qg+&TF5>6-&vVdH
z)2?ka=KQ>YAd2-pqUg$urFZlQ|6}Hq^`P+K;ET)OJ`!HDlpypE5?#zuh7oJv>zNxh
zyj}4AP}TnvAp=V54CxE*3Db10q3c7PjLEL!5Evx(D+5YwMrv=p_(^V+&9_WC^>d&%
zVAf{gdDPMV2&fmg$vCyh{ArzZUD=7;IQX<}t!r1FF{5{NHm`d$weHtsveep^)nSx&
zU7Kk-EizEodcHFtLfG!>fcc$@<Gdy(i)*yX^8xyw4I_Ym>{!Y_4VDS+|Lv?BIN37(
z?`M5l!^ZAF9O-AK?kp=s)gMD#wKK-Hkr^p~Y?77{$JH@OF0}#s4BJS{l?!Gg>(^Ih
z+xK|*Pt)VRJTHjbveNc(Wm#pWK$}RX@ez1fyj^SHm!p%@<4;=Frd~vYi7_67+^U%|
z;>WK+E5V?;^*6&sQo&^+DV4DCI1yS8V;MYuIP2k`N1~JXH79j(VZad;sp1&;UDCi?
zP9H(t@ARu`;CpX@gK)ywwTJNPj!B45%O-w=8^q0BP`WnmtOOo(Ey&zH5`xxaL_bm*
zgjRlTb^;V{0SU-IS+V7%i%%LyqlEb!+(?9a!-1dq_()RuJF4LX9}E~*ub(~eX5mC_
zw_#ZUidZD0=XS$0p!Wh*&&aRVY_1sZv`BETpPO>;MQ&TjG*2{c`e9-G?cU3~J=EqT
zU|_08+mVT;ttj3NMO}|ldcVGp@Y)uzoyPa0;=kvyFfP}rSKj2IN{1)<!~A&z__^NY
z-HD7j(yW|h@O8rK)bU!M7cr201aw|TwoqU<5jKcnP*4Ta`)~a$XN!h^Sj@TFoz^xY
zb><22OH7h{b<-b1=0*Lx@EksP0m67%AV$27N}ckAC^?pXnnV)eHS;qYylt!&8z|-M
zI8*D95MW#VEK3O(@G+MdT#PuD@k&@WuAZpwiF@wTl`H^7JQo<<N_l-i!2k4_;JG93
zsIoc>NbW0Lhs>NnZ@8Zd%@)K+Q#vd@;5-gd<z8Sd!tK_JEBB@f3u9u);aAwQIA%?y
zYPOjuR&0t+u7)tpeTX)?mu#>vcb+3UK%{@2p3->B0D3LunlVRDbEgq}WwadbgbF(#
zycP7Zga?zh!%7p0-yP31tJ!>^e_?2j5s$~}g*KT<c5d%YJ9_a;=#nfApd^MlcZ}i2
z`|Wt&#M6CRhGfY~kp?dXsFx0sJGFb0Y(t<C>J-m)qa=_EDfQ#hG%wcSvcQfCBtW<?
z?j*XlPQo2!X*ba7o2LAUTADGG;4|(zyaZWL-ZB4;=5qhFI0jzS+Ak2Bvk&`vLHw)B
zsWj%#!R_eeXK5}Svw!BsNtdPAC(pNX68UM5W`eHdb>T2CD%34J5hwC5>}|X^Wx47l
zFb@^yWYQ-D`K0r{!18q6b6u)^6B2xY-iB>cr6w=-^`%B7zN6dDM`}!|G+6fc8Ad>k
z5h@8ljnQMMoGHANe}e^8Ng`kN`A&|LDH1c|Bt}z$z4Q4xT4$^}@LIT@l$J+8F-y_p
zp*kk|Tzhd79fZV`%0<Hb>o0o>$F^eE*c_|vnEO{uh(d0c(sX{Dv&R)8ZsmlxV{r#C
zoeP^noOh_AHJn-8qf)mMS^y%*qi{0kwK%x4Bl#>j$L%oy4ax-7!nTIXVW8<5*(NTn
z8IR-US$3msFxl&hZv_NhzgCjRNGtigf-kO1LBb>;B%cHPXCluLkTV&_pfAB?JR=f#
za1YJYF#gkXcq;J^vBo<LrBSQd+|l7^G%lHxBq_5ql!4m;ErCNWql-tuqDpnnMJYMU
z{n&MQ?=OnCL0IrRox&g_HHytsvKN+#XyrT&4_)OWMI@nX{i%OJK+$E&lJaVvfF%S;
z;o`9~yH#uj7W7m%bOktIF;BSz(Z)x^Wjt!oK0sjB6gh~eZ=)Hz^O)I$UOU438sw?M
zTu6t%UHt4meztYznncj7!HU0yS+B{saDvN(Bc>+uZo;AhT(MKOzWf@J<&{2SgFNsk
zb{6z2!1vp~8s@m^1$T%RE4tzdYov|{B~T1`CKLGwOszruLJInX3;8v<bHRV-eSbaQ
zEWP9<rmvN1M-mo{Dy?(EkbXD&NU?pbihaXIRMV_V1M?i_khQQ;y4|?khw{rR@j;ky
zy5`7v<1Rv#^Am<YGofUO_cS9atM++_BPA+?D~IpGJ7Jb`75!G5&G-*IJIaBff!4yj
zbAhgQ3bPXmW~(E>^a+9!OIVD#sEx_gjMn8ypmEVfIH7|w=HTz>M0!`2^Pr#s4KH79
z6w{W83`_x;A-%JU%+$Wu1icHQnsR#&5n79%ya0`$pjy0Q9sVD(T_PY$;0ca{8nOwZ
zF$th$Q5T8UK-7omO43ki7OSS|4Tn>v;3o?7O`R0A2DD?5^5VRt!Q;&e&qN9YNgg?r
z5Nh(`5o<4J)+e9G1--p(sPfy4J}gJK#n2*vS05t{#J!F4>ikdO&}Qn3`385Dhl3XF
zpdpnux78%8(vMZDh7Hps5GfFPJdJJVl^phN`0k&+ijx@&oYxA;>FGg@oJk&!93^D2
zr4N>*pcPSge_R^2#9k?V@HlP*Eg-O>fumyItv-C~pBN#G5#F68G!p&3O|7|0elHXz
z)^5NRxZYcuzwj!2pdkR!3?TtjpDn;$d0(e+Eh^cB#&?64w4brQGsZH9E&`hm6^t1?
zmCZV_=ZZVrr~Hl>^KoTKGnkj4WhYz|9RLI2b?{}fcNnqBJ=w1JWBfhQz5UGRNxbvl
z#%Q9&2MjQ<P_o6rQuvkg9T85t`ED71bx(7xB}sot-<`s-jNa5epQ>d5^}^PVr(iwb
z9}P>B-;K0$voA@~(c_^;#*dHwr{t5*Z?ha3761T}2LOQdzfOtR^sFrm|M!}|tfl9)
z`3K4GwT$19xuTe=H9I4h+#wrNr4*O7@+cws<zc8mLfue00Vgo>u;Zv}mkuBi;7u&q
zsEvnbji_Dyiq5x7ohH9%2k<;W0cDr`$1*4JaJA0Q<K5E!%dSydi7CpWU0r%i1<9w>
zRx)(c8JF}b9wx|tssWhTX~O&=#51f9!b8S8Ei~HG7~7MDuwsA=p-vneJ5OrhbX!P}
zS46AP;YI?Z#CVe8L1LAcn9Y|T^7~?eozz!+%N!ZJ2e~tO>-{{FIn9~`c@<K^Ifs+~
z3c$nrAC(G_lA~$d-B<=)b!DW`255^ruOz~+Tjm?$gM3J$VV6_J=;h?>?B?c%0SFfZ
z8m`FLg@hAV!Ub;ioDAThC@9G9y#U*qM{=ie>9J_=xvTKJ1HY67GG}j0=H`&)t`2^6
zHU-bozvv80X1clOeX_0>Mt9ZTMcv(cFlnU4U8Z+veKUvvO6}-k(A>eW%L2*yO>H4c
z?n6H{xgEPsj$LMtq>9&JRTju@-|Ka+7aW9F9Q9*|(r+&rQbrE`jkr09nd$SH4V%RS
zR4(W3=(y{Nw^T=>U;k!{^}LT=hX@1jdCa-BnbY}j@XK`<fxa-hD8S~BT~hI2e#v1K
zfO=L>A@u;A+y!p_YOK!%Kuxe@J*B%o^`)Z)Cw52c^u^Gd1DB3(riLv$anetSQ+tM)
z2{&)^zGhO^`lL=UQ!3eqpHUuMWsH=a7?*(`J;teWo=B_M?_Mx6P;-;FNkQ2b>=r@H
z<9#MZUw0tcWqSXPSz9{pdfgmSk|y=>{weW^$W@alN}VjdA4SW4$T1Dc?31jZ8M(nW
zqcwsVhWnd6<1DA=RBjg%R-e;(x?RLP5u$k=z4eVxbB6qTVNV3!3l7<GI&AXZ+7ejw
zYIwA&YTX+W85(x-^)RIS%h?1IDqI5_B__mv71G64j+)=;-92Am!7K!Dyv^=NBZudZ
z<vjHX{Q>_{vOvL#0(_yRF)l#uCg=BTy&@AYZiju7fYvl$VoW<XZV`TQJ#SHv&cxnE
z9}v=fgN*Q1ivUD`p>=$X!gL(&JO`7=gFUHVz6a@Vh!&19!CAO!Km5D@U>;<p;ewh1
z7NYzm%k7J_vp&o5KdJB2a5}A*#5@-Ty`}21jM6Vg4al?|REn@Qf~$fAcxlcOAS&0f
zp2wR~8XRAf{I_60U6aee>{irg)wvfKckoh5Lu;SFvK5}R4UcVRLm`G%wIHk!bYSSb
zOd!uFcqf|*z4==RSUjD3ie1QfXn`4P;(Yum#rkGzZ207j`5zt4#gdCS5$SmP>GXV|
zcQ0TDY{oI2l75BZi`PrL6>~`Hi)XWlfudZ5Vzc({>?vv440C?I2u=PgYWE9>At>4S
zR6)~dkI9%raBgztgei&50FFmcjOeJ$mdEl!8d?qeeo$x{ZFHjv)0uRhLsQJbA#F{k
z=AsjBJ@Wwq@|&bX#md4MEB744J64a$3?YsBkK@h>P|Xb~Q@UdkbH1WwDdkfguPO3p
zYw{;3`jwN_)>1!pWc9V;q0D^R61#L8Cu^IR&7jhRX}bH&HU57L!rW2moBK{gmf59-
z1smp&Cjn-)+*+~p3NkJ=Ot-m(b}rfv4ArHTxE0mpZWQX+lf2qgIa6VdouKISS05DO
z)^Wy-VD=r-w%zx)1x@ah_r`yqk4+wej?rwO#gJaY0*vr)ujE<_#T2zC5r*Lg!aV*;
znniij%52IblpVs`;KhjF7MjmBgwcEMhQA~wC|WfAPU!_vm@LeCQZ1iHPQB&JU#DsP
zR$lBK+0zoUkjC$ZfL=TBFIR<1hO4AJjOEj|up5EM2sYfZcPJ7*ygdq6@z=iY$f%Dq
z#|#h!uq-Av1FDN3I<#UQ36_*<9Y#snHaRBl|9l&D_Gx^l%;FA~I3gjv_NYH~g`uO~
z2svKdk?#+<UlB-rI(D5NSTZAQe@m%?;_0E>Z~jOSP=LLX+%?#)lKYz+lxYZlcdRAs
z3PS<}@c~EgAh}whGc*lemkz>0j<^0k&RTLp4e-<Fd_^H!SDXRRSsl?=T846BU=^%S
zx$>o5GERV?8k~4F;QqpJi@yhTfk+BMUE&B+vV<Z>^2b9btdkinBSKY<%qgnMRNL)_
z&r!M}nF%T389a!akadM-P9SiXfQyRK?E-nOc*FI5`mkqAiM|ZmbHB6KQ2<)>QA?Ab
zDrF!MM;;tyUlezgdaQj9o?u;i!SYgbN*>T^nGp!+ytaic6)RhP=_&`<PbpfX3Y{91
z$T2v&$;{%MwWJw2Wem9Vmq=XfzSSmKZt9`rJlzfTm3Qx{(Z&ja-12CAjkLcC(vSK7
ztyvfwakqY;{nt1+yhM}{TlL`RMT-rVJR1q1Cd>&nOfN;Toy<djAq(mtICqw%Y@_(M
zrg(<&UC4jxl0a>)$)3rC37shmG5bveZV8<^La8wQ<Z?wXbl6s#+Fzb3W#60g67sk=
zK(C6wsTpAxe^BS^uubWXsZO5Ag_~oXHps^y-A0@M%}|5|I~(x9&WkJLV?{{jiz2~U
z`#`-6v~)u4`BqZJ@ZB#%z-j(EfQHud_E%|n>N$}O^3_9!TtT1v@sab`4J$6oMFwe(
z3H=0flXO;1iA*pFAf;`YWk_s~%+*!AC}*qMJIRLiYW=;0-dQ!XhMpuW%$Xnh2Su+?
zHJC9GQPOgSB}7CJDEpZ!Du2^eT3rt`%FNV%=rkFidOM5HyG#EhpW1SdSdF?16l^z4
zzc<}#r5<y<&HfZxCy*|=Pjy+aR2lX|P3ICH&oD%@!Lh@3b6kWtICph|-4wIP0y~WN
zFOA+(#CmkbyBEzS*$Bm(ox^o(8_7aZ?1o9tup;#683*0>cx9d`!7u>)BeLTWJNls6
zk?63Gr>&m9=JC{`EuXKg{KK)(wal-u(BA{WK0$~Z33g6K5^u%bsfHKw^pzNl1#y()
zFUdJ0qYBopap$Z!{_|lxCpL(Ijb!{D3-bgdsQ}F&k(ZN@R!0T>fQpJjx<ONY9DAr;
zJd(+d-o@xvH|CB{6T;Eyo9qp!zGpUWK5K2kB*hMlXG|?vq08^!-%cj8Lq2Ai_Ytl|
z2=_QSI<!_|Njc;XOWm2XYS#$Yu~^_W$*Q*kZIioZkI)nE({*&65mDplAPdp|FM^$;
z?b6FQ?S4L_JgE~9be%3iuZAKq?tF^3jV=_QTuP&n1wqY?zxap{*LIa@<%QRo4c+V{
z>Z?^QSV1IxeOjzyjc}@YI%kJ+5;<MZ0irH)5FI`>B(^#W#;oK}o-u%G$tBzNFE>3v
zMGUl5p`CXjDSwF|vuX{Vs+oED3lzwel1TaA(?tR^r<DAyhFT;-HT)+822&1f?iI&5
zG^$(ak(LX4qixmZ`{mwpaWsATGG5+sQ%EZ@!Ebh%30`6``Y9E#*tOd9zVUobrM_ub
z)B{6BTqT#LW-tGdiRwT45fc0IdPKWbcY~<8u=)+HR8FJr3f08_1gq+zOO4+2U}w)U
zWbry#4O%93sE^&LQ_Ybc0)MDbxg|S^G8D@*WT&MqxsMNcoSUX<=HDdSBuBl4JR|I=
zK(1Iq-kcb@xer=cG4LL#I9!t{r2bCyK(s@;e6O+55v4#Is32LkwMMoGE7;$b2%kq$
zOB|S`B)V3K)kfdx_@-H%QUyk)TZI#awJ(~`5DpYbm7p7aEp#N=_Ldq(OT?W@#%U&5
zP!zL-1ZxX@x0}{o0!|QkIqZ}v4$`uXv;fqoA<FwUM=B|oqgIClJ=X+uriNGmf0_(o
zpvEf30O3D*Yj<%il>#u9qkh)W@uL*|>Lr7~IF#Hs%>eU{u(Fu6YzzL89i!)>*0Mb8
zFqP8@@&y%L_F9E`f2b6H$8$VBQShDe0>UiDZ|+J%!odEr9`!Z7S^GtVszQ3;Iaq{H
zSCTGg@tYn87URi1>)X<A^7VViz^|ePA{rX2%9+FeqTNs?A5KB1O8!KVS+}K}h$Ke9
z$9ekLq3f_Z=dX5YApEQc7pWq%{d}o_S96?kHC`Qob>#bVvyQT<!oTGO{U9o!lwfg$
zmtNyjEVf-H$57ry+&^{`%EQnm|JG*GxvFDhyMoUJ%z2S8pV`?aJO!H(GyAXaZc0Y1
z2i4$;{*{OJvs2r8zca~^fFPJ?bF_^rKR4@b?#D;kX%3f;lzdi@fP43C@2gB|hqaBH
z71+NYUdy~yP4C>R7hGkoa30>#?stVsYC5+T3P5<b>eRi(g1(S-toxD|>@Bzb0+6o5
zGA*wGafMBMhF+YQ9i{4TuA|4`6SL~<(E?+bVPh(%LvvVRU2T01obx?AoaQ<nP&r@l
zkfK*%`PEwTamJl?y5aG)D0id{Ap#u&>qek;^BMl*!eIdtv<os5nP9h|z95aBv|qx*
z(?$ofx;1+zjmrh;A%*w(KN6<R@NWI^|C#JA|E>T2FVCiDZ06+rzdyNb68a^984*Hn
zeIgCI&HIZ{E0u*QO27-sn{~NOn~acUlH#R1x7*k()N1C8PJVmoVFts1F$T8Y>CR$^
zFyzXTF0<y}&~{J;qQts%>GxUN<&r^~geOAA^i5%^p%4s05C`F~Q$>bbmXK_Qz!Gg3
z0CLQy7y~Dnsy_@}h5>eT0&C9tI0I1{+{Mo!@HYtdbPLJn(26%bi$YQ$YRFvTUo&-y
zLO|7$#!M0}d#EeFD5is~-&ypy>(Kd{&J@R5Ma7^xWs7xAfFY=|i5~8AA6soQCb@>p
z)1k3_gWY@Kl$u#PX264>ZAv6y2ZV}6xk~YVMN?XX`=JI+&bTpkm{oERzQJ+ae(+zh
z+dH=ia^YW-=AXO|dX4{5&$IpKlpED(VpH><*dqPk`fuBB=we}QOlM(hYWM%iF8+T^
z$B*~UP_4_0i{ORXQ^iMx6M>1|wfetv1ZJz|Ec@!47<8Z%6k~tl<Y;D?m!!a$11$Th
zj|?A|3W>_~C4EgHlQpulGP0md$WxR3mGd(}Q{*P5;=moB6FdHgJ5$u7Fuxxj0APs^
z0D%1e@KksD@1IfKT9-~6;z++Yy@m%h6HxT`R!#SuJH?Uy*=MQ#(EHYoddiI~eM5qZ
z5<$4Twm+|zxnVmP0^VXOIPs>M+dSWIF0*H6`f)h%z9@Vo);)ViM_*rG!{_(o)J!_^
zOtBW`n?jB$!g>{>5_ZGr3W<1$x(M-*vf|^xr7RsqKZFQ^nnEY@3?;l8A-pmW^zo2K
zw1#`bKCJe=PU2%}<|3&#z>vhUs+1y}-u;S9Mu4PGSz<=A>f(RRF~O%`c_eQz^&k!+
zqlpeW2qSFUp@VcV@c0NQ-vWq18w!@$#9AxrO6I8mEqSFp25eQcMHu)9=|(-EXAYm9
z=jXq_zYRc`iY@FhNFRwg&c!2~+V>^_Lh-M!ad8o{0Hcz%zt`LRIEfvQJXmBj*vXqz
z&IsR?qrW0Tbn71|--(ZTqu|i(9;H5Mj#wbK_r|2~4Dsr-28VqOLJg14Htj}FOCn0R
z+<Fgq+!N)@Xo`=vpN~s88fyHqj*jo&tGc_ByRtp<A!HA<=y{yvb>P0iDgk_P^QJ8(
zU{Q{uafZxv2p2Pqv~I;th8jfEj2z<|XNGrjv50TWtnsk&0s#MVg_TIUr={oBW>@h|
z)AOID@;XQGTtELhkE9vuhvDp%H+P9y=DDG954&}2qDIdEx#haP{Gbstuh0$2{hjs4
zzV{J@A?78vLs=y3X5++tIDy5~fe*udaC@O}$RmqDS?X|hqzt$oAIf0I_Zr-9ztw)J
z-hUpt(l&NNo=}sZ5TA(JeJtZs+Q{G9hi7D!4<NSM6IUrRE#EyiE<QnwgQ#~<DB2Uz
zhb2TON{-0a#3K)wAe+rgGJ9WOuf3fdB@fi@5p^_?Pp@5Yvf>%PMRuuS!!V}?1dSyJ
zjXCC4T{a09OFWHSG2db%SLzxXfWcYRuP+@%4^H3{_q@!1XWzH9fB?Sed)D)%l&v^J
zG8s*<9^p=#6q#4P+0qvw#jS6V6=;~Ak^-bMOb)?F*FV9Z5-6({F+kxxu5HWj+1oF6
zQYb56v5_M;y(NAZo9@1lDOI&o*O${E>=Y0ciUsX;1HK117qC>xG7HqNb82%mg%tTN
zZ=u%U9E<8v^%f<R<UVOQ(Dim5EZi~)XjWfHJRAt0a!W`>WumLW-*&?m>uDD4Hqese
zrCTrgp8qiC)J2*SHfJf859Fwk8g6kwXY2)D;AqlMp(_T+>7*wPnY30oDt}>0?zW!G
zdYPO2<B_&>D`61<T2|i|iw$C8nnJY4*M6sC-24;h*#<&UmR!gXucq<We~C^}L~?6x
zbkah&uRGi)STl$lr;Ck7KU*Q=4r*Q0y?|i9SPH{DxiMf7yC*CiaQ#qKQ+~|*eOTsX
zBVN8NUFl>`B5`RNIGTA+Z@b6kZg2=j&R8lEUgRN=C6QL+J%ZsLYLE$+7jiIhDT#S2
zJ~wO7w_k(WqmvM@?p+y~)3_ozstO<cNdMeUppv6b%>m3qX{^cWDb7j>i(FeS`hG4v
zhuy#p;T2bZor1ilwWBtE3rl#4+u6|PLPiE0<p^e^6!zR2s^4tmcTZoliLQos%Qk`p
zhR{2=FWvz?baCXX`>Ab&gVu!V_+<wL$egyD4=P;K_)VrlbNrv;O3OcT$C=aPDuQm5
ziC|D0sG~%>EJrLi5<fhJC)yta;4|e-%~LmqmZQXN*<ye$wACs`Ik=k`59A2=zRRP#
zP5V^_(y@C<@l>TWZ#nSq8})vbl+x)_n_8^fq04ww66eClDgHw>nlm&=`t9F1Mc()4
z<M9aK<qOJ0FDk{}oNQjeipR7#WQ{Uxk)x;Aq%^ac+tV&Y0nohcJX_VfA`n@>-5h^-
zka9V{?Hs`a%AbHZ{PgdOW80};_Fek8Eb`StncRKC1qjKSNcgX0AwisBq&8|-sJ1)D
z;hf8JB)(m#f=ZlnvXd4YPT<RK3pwnnYOxOpCf_!+YD(FQg);ehH2y$q?q=^`x~;o9
zNlnTw3W6gY6fN4sSYf`YQriPs;rk1u3YbRcj<&wicv^%E)EOclXr<WDr6zMwJ!kaE
z=R^t__}5DN53x)(telAzNZ;vv6&oNT8nEnA^h*USy^#moS-c$f!=I&WLqMyTounWN
z&|1kCvT>7tB=m;ha=4wbs@c$i-kz^D(0Gtb8-V`wsr=`N#=A77hKF7X4}icrwnYB*
zdRwH69n}%bBEV#W?k+F@ij2Sx`khYd9t6ByLO*{J6GI4g_4Yy&&)JdNpJR6^7#RAU
z%IZTfr+n0@qTu`CMk$o%kuFyDf;4`WBF7n;h*T<+8g`k>FI{f3wm>b=B~rY`($au(
zx5B~PMg<s8LnsJBDC=k9{QYctXPr*4k*85LJ)FlT6S@8&W#dYH^%y-dqlmu8fSISs
zlymLaI<cTeaC|jS95)t&rm#Xb)>nEH?fSCA2*{bfqToM!7W2Rc1<5L3;i`WN)D(S!
zpJ0x?J+?)Y%I-F^D~)&0<@ls3aN_)^IcnPMksa-uGE=B&qX~2#P;;84@)f5yI5Va?
ztCHl9()!ob%jw*P<>tix(2PDH!2U^N&YOyGc_+0?Q7@9~CL}Q-Inj=(nP0LlSDUcO
z6O{1pUo)t%Ts7q12ng#XGh*oY!N}!F{L>Z@RDB*8Kp!pqDtiR-Rx6pby6z%wv%o8%
zig6K0d<!x&i7S>NSb}&%fY_dhR2D;5H5|*_egn%46jEl?vy=zSH2j_C#YT!Sd9ua~
zjW_lq$A9OZw*{cBS(3b^G=M%2#a8<^a7+SaAdm8fP+X{mg*F~TAxG$Ts2WHAk_rde
zppSJ26Q@oI)ZP!eVWNAav=uIS{AY=_yi%MdGr{KrcBQ}Ur)ML~za_AF2laA@v7?Mc
zzb#oiD-BJeBJ9!;Sp)|h#p0d<YDr%FHlW<${+zG`0EoR2GxdGIhq~cN9kZ#Nq;$ic
zsIPg}lsU7nnyv%!L80&-urWI~B|QF<qC><vVZIWj<`TBTR!nOx@g-`<oIo>kW_hT2
zGF7FG&cXnc%PNS(@l>@4G1@K=smnubg|H##UOc>ITtV5HUedl=SRB+<6;re=2f8tw
zvBkRz`vO5qbiNx7(HtbCHqv_fpkA<?-VCtAC6$i>zuXgUJ!q1mt7D$fMaBQ@U;37$
zxtrGd;(TF$&PQ$RUyZX!a}4qmeyB=}xlFXBuw2&4{$guy5mXpA!e$@<&j^@0_VvPj
z%sjv)jv)*Boe5Xf!N>ci{ypPK(L46$9aa{riz>x0?>e1|aO$=S(;F%Z$!_`y6@#qL
z6f<9P7V-0cn*A=$nl7~(*11j{m9}V!mi^W00;4SgN$A29RW`^<({fyC&SG;1(<E%^
zR8|z|w|7l9Wf)Ha%jD`JHOyPkC0I3ws4}~5hD#qp=uZ!9ZJA2eq-St+%q~*FKMf(K
z*@2k8iHI`VKHa+$-<6SSB==`x>})-*t}OXT+EQma#Y|KyXI05G=CNZ(#;EDXDZq{*
z$bfiv>QX39t;WBIAi9TG;o-E5_+&0=H0Ml`cp$E#(gZpZNrv3ZMM^|7efCiPoDK$H
zOEx{i;v5k|kWJcKz0#}+>;v!81hsuKC;lR;lh{+T{$2|JjS=X>YpbDoK!H2->1_nB
zG!WuPfO7%RSl+ndqmhsF@}@w1fl*!*auy1SUW5@Nb$tlsQ%=BksQjr9s8sVElIo>>
zIN`i7TT|MKeE~gJt5)nlkWh9JM7Krn4JdlXh{%rvonVLzkRoRLP{W-d7Wr0yZ3}PC
z*Du_3%Ojn!{r78GqxbTpm<*Ls#Z*3^tbaQkcB!s-HmdYCACL$;N1Br>j`9AcE3dhj
z^8;A*{VsiR*WC1AXbhLJkfX7Pd}HQ3dtv`_q3(;-=cDC_GK&RL4O^lM9t>mINJ{M4
z!S((C{Q~A`w7a21wdBnM`=;Iyq`;svYpL1vCClI7qFu5Jscs!oI~i{ZnL+MgdWia#
zTUF`wrfOE&R`2TpuF=s+R+X>7fif@ML+rI`u{)|V{*+d)%*iEv(7+FZN8BaQhPo%)
zZr0RrWl7&=aPRjQBu|#_1G~|fkg$5o8__L>(KV}YY8d&Pydw3fog=`TZg}9(V#p8H
z7CrCO3f|+NHy(&xso1TXraa<>JucttHO(cPz*Yd-_&fFr2u*=mKe~unC(*mL!uEW+
zo)eonQ<=+D`+-)T>l54rV53Yl({wLIJ#zc3@KDDdTye|KSR6VKHdtCV9PNbDtu~9V
z3lPOOZcJO3JF>N^ZSw!U-YA!wXGv+J+3X3`S{ttKm-Q5K?AvOY-ndX$cAcJnJ$X{U
z*SFg|@V<(^kky$nHQjjPw5lfXjSU2VPY((hH(Ia69Ux{v<hCkp*j0_ml|igV18hxH
zdG^@T%%Uq#aC2|O8$Bdv*JNxuggho+Q`j`%nnqn{Lbub%tkoaingdTx;V*GeAgD$X
z@X*4t9?C>y^QLI4Gh`c9gY6T>gK)E>j6e?c(t}@qDdEQ7%62q{2#P=3;$~-EiGJxX
zdjX7Ssn>ZITBz<LTpmJ}dDl!ugX5uUf&;da`6oWh#KyQZsZre4yt*c_g>052+nrKi
zq|7>g0m|*BwtX<+)Xe+)R911Rogjo5ald94s+#P~YQOXmA!EiwRfejJm1O3;Tcf@g
z#in~VMKQa>SFn!@TZo}8oIHskqLP^cRaD?UJfz-~SMfp>HOlq5vJCD7L_Bn###+^I
zt`fug`49IC!DM#eMZ;10UVzRyrQr8)Z27_GT}Hg<a>#`V%Tf$w;-=?qljO$C(L5Zb
z2+TjKY#lIpyzWfq9mYm!Pic9_?WI+Cu)S`|w-ii(Ra9_=Ly*wAyo@E_6$CiJ!6=|u
z)g#yZ%!T#v9C^J{${)A(MK^pnr!lYnn=0}S5hzzugvRgq4AJV0>4D~cD1{-9|L>k~
z<7&~_UH(zqJ>EsChMSsr;F(wTJ~5$nu#AbjZaZZ4MR@m^ws^RfO|&Y#m{)S@xP*KF
z+oMeDT$;d^-x5!yFF@J(P|Q-e4ziT#xESaR+RuUmSI%PDP!@?g1>h3)g+$6^^4V`k
z(fj_&K;~P(-CR05OH<UgMw$jdfDAM-HW&X$`8k|QV0JYZFqO2J526VH?~tcu>tTKg
zQAK$L3NiPgbo`ZjdBhu9grF!=ERZ4(PN{2BafE~Ok&2xctHK7lXefaNOd-#LYq$vQ
z<=vxpbzn*OkkvlVSIYQKybFBplnMuv;JqH#>b6O9O4F@dl9)8L6Is@ntg8IoR<m10
zwbmA?2w9lj7$2qDY^0}Mti6y-GPAq8-OYmZ*`3t%v-<G7^r_gg{-poU*#?s&hC~wx
z06-4hf1hpGTe0aGI6MEB7^fQ5e+oW!gntUY^cxA4K=&GFH5V@eg-q2g#WR7<&To{A
zAz0fac66>u)voVbHdmy?=BJSDLtuTclZ*^A-7DKBKpBk3H$sCSO~K!zqhg<>%U{5k
z%mMDwc}I?r%ivuFwE>D0tK4w7=s*B8NrApVs7&t?UGM;umE;Z<q@^I12XmlCAY@}P
z{qkw}jy>=u;Jc7AghcT0_F!fC5aLzoK3ZssIXk)-(s~GOyb(a+1Sx~TBh8>w299tk
zqCIK}`Sg7Eul#)b0ut6WXQozDsj4+(ZW)AWBSA9j6v+_<K0u<B9nA@K?<-ffESWGP
z7(o!++_!D%imb3jjY$Und)uOW?5Hh*XNoV%;!$@qo@zT#Yn9zeg|4cyfnh*Ih2LZ3
zj!%lxeQ5C4TJ{~Er|Z|9@f+k!l8gL)BFNRekx8R4_gtZ3qA5f|=n5%AVlE9?I<u95
zj48U4Ih5*Ue>FZSFP5L9Df(!?xlZOx-5GQ;7Q`8A@72np<LX<Q>tSQp2=}Mm#n2to
zHhqltU;&kZh_ev}84MVGSLU3|J0B}uudsk4TV3|`+q17N%=L2b6Ph|QwH0^gZ6K=#
zd$gHlbIzQ&oTzzY&!+mRMOtM+lT6{cNmsmQw$24SFqVe~GN-ik;)20g?!mdq*`o6p
zP#I(+tNw!2*KiU$#AIfMh8k+}2ops@ON$fPW4M$G#Hl#*gaTznU}V6iaSuG=i1A2J
zX(p<jKY2d9T$s}<yKF1g)-B3?=HCtTYdQT>=y?-t7e%S2pOY;mNqHg158`_a;f>~f
zI!Pdz4!QsoA;M}?f4PpbSyTkDNUBiZ?uF_$h29aA*fF?a*IDw={1qqblc_adsUa0N
z1Z))}iK!;-X~jltJ0<^-Q2r8|QXs3-sxxx!HwAi8hSj0NmDX+sGZUplbBfut2_j9A
zpYjvIyH}GDLE39eUL3NMN7Rw&a6p3$CP+_m-^R*swV{9rPfh+1$kM(iW!UIwLYs?H
zlNrbxv<(H2L4I9;^pQrU0)4{!A0J(KT7GLjTK%4y`Dqw!cF0hu*tUed4I}?88qn_Q
ziLfmS4RXf0U(N~WP3cs|fiF;V>4j+HiIxx)q+&!3YP8XX)b{bF<Iuk|!HIJ@%6_sW
z^F@5f4<#*M`lHEt`>DTdMCX}bJ_1Oww1{5f!ffZo@mh-Fr)m|qiGvgFRi>!!K(!J|
zW!NnL*n9J7)Uy6r2Fv}n_LetMCt6<1eBATiEYV7;-izzmdF-aU&u&f{Q(QFWxsO%1
z!X9fLdz{HucW{Agq|U=F3nldj%ad2m%LEw57!3-r#dCoH^rWH4^lArvpV{r@F9b80
z<_7a4M^pFpB?PX1!mT(?Y@MQ&5g@;ksz%CY*ZG}%T_ee70gw>2+xzp}=Iij{Ca=dF
z>a(@th#SHka*_Qm%+c2x#(XYjd&B64O+44zE&7+&RGHw<(x&t2Bk`17-P~YTo2%dS
zXsd~xUZu8iwY`G$@`cAA%}GZ!MGqi7tH=u}HCSaj&3v4R97>jZQm4BckYHtqgGHz5
zMK7iL>p)3q+US-)7<pnf;K=B=)CD~g7k>YFC9ZWJc=-KGL3j`Szg>yOb{79-+J4RR
zFSd+5arcorUOPo@fy#GkS=aI)L)pTbv<O$rQA5(yw60aX8Dt$tsxY$nYi;xE^%9&P
zh(KJym8q%C?JItbWX{}~4eJ}od(MN9^MFK`k8J)~hAg({`(?JSmxKF5j<F-busOBr
z{!Ln&<lfFPGh&CVD<a8R?+FdsAp%#?fl?`BYkZv-Kv3OmUb$A0137D1nv96KkLE4O
ze1B4{a=+@O2cdTay8#A&m}+K-ECqtRD?*Vm4oz_^tU}w2NHfCXuQq+5J!{GV?}RNx
zJ5Z6o^k7POT_XZk*qrxwc>W%`wM5?x82R^pd);oyJsF^R6UB7mnPrj)<CC0lx<PLi
zjaHc*JlxIg?W<9`P$u2W;n9ab7jF6a)voa*C<~wa{lRYGvU5X*#Jx`DbfNq2iO&6n
zO7nzqBNRIL;*moRZDG}SmYOI$Yo7p8t*Pqhmy~yiwD>nZ{*U*Y&2w7U@10+gL?FIy
zu|~Rx5`iSyz&Z^Cb7`n`40(4_Uf}%a3OxYnnG9K45I(Q$ht2$XahuLXeWdA^P&(=Q
zp{A=|c;zWwtZAVWI^CZ}pK9>ym@u*aqt&RMGwsRh`L&TbfYG6!gR-RiEP#24LYDA=
zVTq`nh?x(W&tX4g+kf0Bu{Q;8`dENKUub~+>9eq25dJH>y|$H)=}R|=+8WIg0{2Di
z`GEq^psY}W#le1y`ktIpyFiWf5IZ0Ig)>i5vmH4{7jpDIlwY-*HLdB7mTA-Z7U?Fa
zHxlPgVi`8_zI}(E2dad9+F#D3NBgERZ`|1SVY5<kq9&Qfg}eaiJU#Vl+#KnTBz>4I
zY+nRiQv@c?T+=)H+OFl6Ffph3#*7GOP}k;74pB>E<9Ta*K72K26Au3#LpwRvGBpko
z_kYAb=E>pL-6%N$3pf>s@?4Vb&y%BA875f1+#FnN5~|=Asz_jM@2Qa$_#i}@M%KUA
zP`UtS_@Zfr$aJ-=G3Dbbt=f+ei|#3=g}>)S?0l#>$JP0w(Aa>7`9k%HuMk}6;FB6v
z+qQ=^h?KO`ZwP|<*eIC0;9q>MmpQp$WkK-Y_r=s7X=(kW-8|S|b9BXLoHK@i+q8@t
z2NQxv@vq#YRbuKUwCQt~Zg+Co{*rpF(A5p2Ne+i?Y5k-7a)a};LeIHRQ-7opm7&Ce
zeBy0&__zBa)&H4AgcR#U`r$hKNyB+`iTa+&x-BSO4YOX<irH$6PuQcfDE*6X^6xjj
zYafLrGc7g~mxQb+i?UBTNpi;lNWAc<gXurXgQD~qyx||xg;}uyc(PEbSs1$^k>@*7
z;;N_j!$Pzz_C*ys-YR~r?3vy{%ekiU9?sMA_K}~OcscHlYo1ZX0x{7%>0^HAf~3c^
zFtigS1By++4?H2Zx&qZ|NIbu7sgk7az=m|JwG|=5u#gUIWJ6W=GEHTOoUQ!>S5orp
zMc~9Jp9nNXG@?2qZuLcN;-r(gh>;d)G~`EX-F=p55pZ-szW2wE>(G-p|6t|Q%_cWr
z*dEkVCyMVk>5LU@o;BlZ7e1j(rtSs)jiYO;QN`C-8jAm`(;$|84OQ5l*x+fHFceMK
zCySE@I%(e!UPcRK_<)Pex+42R;(?p@Ix{0m-v7C?cXfEITB6J><MEj+vCuQZg=N_#
zgk%eVg8&g+QI?%Fq)N8oJmC^Ss#mNm&VcDpM&6y))>;|xOO-q=-I(3f>Y(asMw>zy
z&bR;7W{$V7q83YMQSN`y5-nDN5_$SOpSB3cK_kV_vfdNw$$rfz!E<KIRSCX)4SfzS
zf}ZDFo*Uc1&^H6j++@`oxU;%GeOs%9Gr_G@vDVC(Jb_*q%}8wZyX_JgZV&9WI455y
z&$k!?gRCl8&69j0KX=D=Mrs$Ow@=)y0Ns(%TJ#KsfpQ?f;ztS!5uPM6>m=p~Xa9au
ztDuJYrC`m`I2uBaV8>Jv(s_lU&N==>geQ2Zw9n~p`qcmrd$i4&E^6ia78x2V7u&aS
zW(9Iy)0<P}P~dXV+;Xp}t%dJ{wQ0F`&v>}BQyq_e$<{?vvs2850SCio$ndqq1?+|e
z2!dYJZ@<9C8h5<afN;<Yj%zz#V2*{rk<{1VL4wYV>u-3IdshZ%?YJi%<sK7IZVy-s
zWY5wC>2L~=b6?&+Ts2$-v3e;&q69dAU!&Sb!NYHrGiH%I0cuUeoDs5!y;f@91_daU
z(fW#t0egLl9YKUK)2Fe_-**|YfTHIwk691M_2hKSEn7U6uLM><s2ofU3p<8MzC&2L
zwuKcmUgcX-Q%9SMjWA42fG&-puQxA`1=k}Cfr6_&aYdHvB7zkaZ$6vLet<#uFLiZj
zLiDsR9{g#2RpWuC0V6gr32|(|UXdP#+uFq(lJBt2{8!w3<ZiS-?t91LcL9<|1T}!1
zxhFVIH-%f}>*E9WZxCuK+Sr0-1;j);E^3^jQLboxxj|oK`QaW3V9|1QxPP~A*g#jT
zK11_+tW~Mfjb>)<0=bKieVd?(6$oMEPb!u*SV$H+fw>V|U-GaGd4drrY$6-v-5|iy
zg5GBtnATl`n{aCXwRO_-*2WA`)W$5qeJ_U2bRSI;WgexUVE?v>#Dy*w?F13sbu+by
zC-&miq5aqWfuS?Ud7dTD8pQw@7VZ*8hJQY4FY>vKJO*IDWs~*1q21sr-*<(L!&eEL
zdM9|6@+zQEfI1k6tl=ia=7#&R7Ery3o!k=a9YU*>4uueoUh44t3r0Wx4}IkFi!bC{
zH1{PupS17Srh~}i8J!)^o3gF;(5!x~n{m~JT!_kOE{%Exlu1l0ANLe;1r#D%Vp65Q
zi3Wo@`;*)nut=T)fZ3CPh~X;~GB$p0!$bZu&c05cZ&*KE5xm0a4bt}Vi+ersk|lZ=
z?iV(U9=5$bGn+uOjma=^FLRFY_jw~5H*75)bA}-Gu)u0THCeXnp{%*OGZxVMoFN<C
zsAyN$Nv~KBqvhVIB8q-0lEie8{*p19xQVpPUv?7jHq?Ho2TsEYD{PN;xFm$=k&Ep@
z{kHk$G5N+2Pwfjuw!l>{Iwi2YS<+_MO5`H~;F{#x*mUEWc>XHWhldV=EdjCYaT?U7
z^uGzuCr}ae3)akeQEhdb8^$A}MJ+nF(avs(R<>cCM;-5;4VAL$3ixT|d*fXCYqex6
z8f<RgNtj6LC5<M5PQp=NmiT<@`*e=HZ~8l<mdRy)=J1S2v~S6OorzhD$TDFR(cWdI
zBB_37W}=adC&V&1c|c!i&}fzDk0q!WIQ1W+lyI9VFDapQ>ysz<ESc>L;A6i~d~mzf
z7-Oh#02@OJ;iZ8^ttOPn;Nw&7x%FqOMI_n>Td7g<oCbi4A_;L`L>k~Cvb<FT5r$Q@
zv3ES1Z1#$2%;OIqE**(x(wI(28Fgw6c;1riQB?ceSx>5>-4R1FQJixQv0i3AA)*}t
z_FnAt7ezqxCP<*rKU7=@<jE(1mfb+1Du#)%0U4?BOu>4hcO{k$osWUbxrZpgr`uuJ
zCaI;5k*_}N{f4#Qe*Yjo<qxh00khq?QYoya7qD@O<qJB@Q;j`7;{AJj`C1|51nm|-
zW7kDi0%(}5K_kM~9%SUewp0Pl;m!4k9_Hs+2`Dm?;~E}>^JZa>eqsd-)-?22;=s<a
zJ2j2`%U-(Xxr(G|qlM2y7U8}&I=JO<5H`9h6RFll`Kd5c<ur_x6MF-aN7+^~P_mC?
zQ;N1oq!FV8ML*<7`BAup%(nzOnxifc;vTBhy2+Z3OaTc}&_~4JH&`<q%3?sRQg7~A
z<+9fbVj>I}7uG3>KosnjGwf?Yy`KE0OX2Am5YTIp;f7kA)ZUPTUcu~XGGg89vFqDi
zUsifJULCI8iUY?F{Z_g-6@|L1Xj;VzVg6+sB7vs@l}0mMUq$sI7uoxl=JHxaQl#On
z_-l+2(9!e5<e;c?JWSs{Ar+%g`?N6dUM;UnjM-eM@;B$2B2bUf`Qjm;a=*8cfi)%n
z*XnAQ)bzr(Pc9}Cs7lV|k6hWIb0f{RJd-`yO`&|f2Gnm!28`LK=|)xYnZjq)i(Y?q
zdFJS>dS9=)eCDmFtQ|)Qc@#-W1T(dU9KTB&LnE;)N^o5aMw-r?&ZW5<fss!65`7w&
z$n#^CQ4LS<4`>*?7f^1d_SIXK*+b``Q>n&vJ!{qKb_7-lr*3Y5nPtj7uD3TM9#KB_
z>AaEZi02*Uuos2{@b`5D2$IPAu+fW*u!9uCJc|!_Mmsn*2cPF0>Z@Wk$r%MeL1c{k
z{NQZj0{VLe-Xx@WA=eYbUY7~B8q6mz&?R2~2{x^Y%GR#%UKowgov86d!wkc)k>pvk
z*rR!*P;+4iB$YO1NcT$oQCvdTZT#yxqoQ{%68W-vcQcU?2DqXF#_a;LYcmp1Yxsdu
ztenwcT@}2(79kLfeH!<zjI8ffTu{=_vGJX+{X*7NAx>nT^rZ!ZSjS(;+oOwJ=Buck
zB0^-12MQAFPH~j#bpf_@h73oEa-v|$oHu7-x#d#h4DACX3RNKpEu!Hz0hRF-h|_d&
zakj+@X(g&g2Y~=gqI(u?ciaP8`k7fTqNvpN9H2LQ&#W6R9k?HMhv$i^x+%BWYI8Eg
z6ObhO0ljH^Z}}95ar_j(jt*=gGIpe!M%n24IZ0mOjBqtWxRJ#`=txD^4c5aGgJy>6
zRC*49-y=&h)9^NW`LH<hUMh~>N>BC?4-S*E4I3#2JYLHFa7?->X9d$q49QOf7tA^)
z`@IA3jzma0Q)#UcsSQhgj(y8{>ajiT6Dew=g+&=!EoVhQk+LDSNo2_r?T(t+y*1kR
z%p|f+O5jU+X0iZ*G}Hi&(%8tT%JnsTsRU(j-d=lAVF3CpdFQSloKY#t5%ANX$DVXL
zA}FXC!=)YU|3}$7$A}Vj?VfGhwrzKxwr$(CdD^yZ+qP}nwsCHMH<Qero4M~d^H-%(
zsY<2x&R(_Gv)1oXA23$%cV|fKM~i!G&oZ6QHWFZ<!Sl|&V6G38^bPRi5ds93i69M&
zo#1@$96Bp7$z{N3?#jPDZVUClSf;aCf}@;Mq)imc9k@H!LAZ*w5K3Q(Err|Qy)a<j
zp@#n|7bUy9p8(}Mk+q&W22oJlK$YS$P&2I=_|yvUWCnbMg*OMzJk12X8R5_}N@3M>
zh{R$}Mnfu!|CrEYFRE}7Eh;b*eJ^e}s5`TmwvzJHyh+GOX_+LNJh$Mjh`@6HLY~pP
zcUzv^)~!|_s^K&%BreU7ira#D{o}CWamnAan61KT!S19UA8Jcb3k&Kr8rAZwtJ+0h
zq7)Cnp3v-c_u?Flcgn#jvaUgIHtZ38&;pR0P1^bT)<)A51Tj#gNp}%ZTlRMPwKPx8
z8VrkCGyB=k@Mq@o)hB{O{5G`FmjTlu_wmPl>vK-c2bYtU^w#=(VP(g0B-xpxycrdI
z-)VZeKO3x3K>=9O9M0>wQ3LjFi7LZm42QppB1K^85nxg!YI-o)dkjY4Lz`Td0=scd
z61iN9V#%A*!lhhss+^0VjMPS=^dU{xwFmPoI)buxlV|j4RqxZ!$#Ic`hlLgnYCv}_
z^F9DJB2rX}YF@yPSbL8#TC85yn5x}TK<UOL9=++rpWT9BhD+_<CJ#Ukz;+Xsnv!DQ
z+O_QC@&xdpKTck-C1UKHf}zZ<;^ubEQ+9f9F`t?wm-geXqE*~KiLZF|wos+557$>>
zv(pfigG2iKWAXL5EOj<_{ms`^189h6VMw_GYCP@m$vcUv{M@kQoIUDRqGzmT`k3T-
zERpb&1k&I09VklZlVuaJy5_(XI*W|acvFMzQai8oZwbVJCpwv51KO$eMsdU`!L5c{
zWz=E;3j|xlRzz~G3jl1B)vfjF1Y+jmEG4!>NNpunJ-Et}>P@5KiReBJQF5yXl%!nz
zd#%o>A$|?PPv`2w-ec1Ph<aTwN9_5td3=@B&f+FXozo0hMkhLKS;0J1WB`AvYDleb
z2i^>NJj6FkdB;vP4#W6b*_FFtaUa?bmi33<j&*)NGR8qlUUI6^_JfBeE7~dULt}f8
zM~Iklv?L>p;5c|koz00Uj=S=yDa~xyyN{YjbjI{R14>*edMR9J6m0brf|qpl6IDVM
z7=4%L5+~JbRinLL^h7bEA39fO;f?sYj-+bV^uKacYH?v*+35=Q2{LlBT!_DazLPY|
z$s37JbIK}vQ;4H=d$rU?_9a-1Xcjic4nK&XL58X*)i^Y8RW5RQRChxig^gmb)aZ2I
zra{FJAr`|b=F3+~9fiMtHN9hAQUMDaln^a7ny5p82~=y0E!7hIoq=*$56}y)=5lge
zodBA0LlTF!aoe%T4X(`otXc{L14Ax$Wj}x(jA>!c*mt!WNL^Y<NTAr%CYKivm3UV=
z^(ec|o<$4JaVkNCGb*YD6_R`E7FoR`Wc*SJzOId_Zpl$gsaG#SDZ3&)AA}JZ(KPDu
z)HJhBwL-3SCeX5irhrctZq-wA#sc;b$a>}sXcC~C2wqlCwIlaW_uyEUbZFN{{U|x5
z%Q76ryV;5FhxVru=SsDTn?r+uRi|g<4Vfu#x|mRh?9fITHGJC|cpr`H>ATe7DoGcN
zVXfPDM;+eByzcURYWQHSw6_7tFbU3zB@oSZGyqXfbxYf1Lt$2646mBrxn1K_9cES>
znGf3bC^UsNUurP-&WQ`OWzuctMEQ5AeQ*fH8Z}2O!yc7b{Q;w==JDX>atFbb6&0l2
ziR6D#frr*CgrwPgS@Z*!%2yf%|9+}o2{CeBc2iRrsCl<GY}WOLE_5>zLYOW2sF{Jk
zo%Alshz9a=b*|{iG3{fHJ>;GWmPnS9YE%j$s<eE@@H9F4COfY@(zX^x!s0ojBpd7E
ze0=E7iEL3~A*#Te0F)21NCrTQp_1#znTj;^yIM~PrQV=!J)MNiHpO9<VD4}u`qIQ*
zJh-rOzAvQ9s3gR`;j>3btFZ!E_jg3sL>pXKJ*Z_<Pg)b!(ZeZ~!e5ZP*R?1axOmQk
zRHX7X?BtiaX6B|eQ2G@=6NJdQ6%0t?c;o0%T{a1w$MxD%5jO$nCno(bqb#sid(b&b
z>yg8B(a@<sfaA9E9G>P$Sbx5{E??Z~1%!g=+z(NPcQj3?obLr}gT31;u_2!`x)<H-
zh~-`p?k&76jMB9=6Ipv(8I5s8r06H~lSOx@G-*Gcm2R($@X@l4(I|jxOg+6@+<~wN
zHO#O~n&u(J9*Z8N8qTTisGaT)v6?cJy_LaKuR*Kcw31;pbS;bT*SvKy+|(ZyD)Hy-
zoGNpM)qR=0uwkXMl6bpeOLrB#V}0H3U79}<Dna#*{<dw4&vF{sf{5)1!l{K(iL&pN
zZFXOiY?G%8KZ?ynMUxjwsT-?r;1p?OiMzn^cF)=&F<H`lMKLn@Hg6*P;Y5w%?-TEY
zFyH9Gd72d<2V2x1mw_0l?Rr{}K5j(O`t1|HzqQimBnEzhh<E*aj+Gi{KV+XBNIp#c
z1^veWq}FW4Z)Jsr0G|b#m{zt7(3UDm9`b~f{Lzci$Go@GGE8`@C0{)#(&pb&9xHeD
z3PK`HqVjP8YX?z_6)3lXE?pHdfB(k(lJW%%9y!I^ri_x&p(V)yOS?p-5gs%zmaFJ1
zjZQ8w<H;eCKW^6Cw|tY+RK~q5tPHvl4_7Y+X*t-_Dwps`+W<8iw9ELi0Z~F(Ln{<$
z`DXwEj{XF=l4*=vnxIf{i;hoEFM8<9FhXR+2A_nq;C-qA7G^uy^U7}N-RzP`$#J$|
zB9iGcS;K3`AlF&gj?BRHJ}%V^ZlAn{y%n6sYO`qOP(w@Siij?)5YTEvT(-FeZBo+;
zZ8sm>`Ks^@9{P4ydSN3xoG0Ju@q%g>AEp#*s0W|u#kp9WjNp-({YwP{*@D$_b#)Wb
zRlSBEVGWx`^;NRY&1*$v1pX=H=_J*gDuVvGDgR=TeX%6_I>b+5(FFI4CXmOoo_o$8
zuAdAcO``L#j4H#86wKVJEu$9XybAQd<n9BrbESc-Mwr=XnB$W6Va*RCFDND%D931(
zW7%++$vr$`lRkjGs-*y@#3R{{Gxm)Ovh~ogV>;#dFt@h^Vj@x%WrM`pcfC#)D|`*G
zb1h?Y_Z)FfWzMiZT-O|3tOsZbBR<Z2f@TFhqSZU8o*#{akioZ(|3om-$Xo`J!~1Bo
zQ1Cru&#f+&?g5kqRC6F<_c=+i;Tj*%cGw&j9QAl21!rAKNp~6Py;aFh_6q-eZZQ_6
zOr5VD%U(8Pt7^mK%gMHe6o#)Yb_CBJ#6w+&kf9ZB_7EJvqns6>hRh+qZzv;@jaQWg
z*tz*9SN$kXX6^mxL{0!eyC<!sP+jzs>KN`e-`@SW1T(Ll_*I^vD5t*dEw6z^`vyN|
zo$01wzDBYrmg|^)zx^*SIhyXJ27}gbn?&8MlUFcQ&Lt@Z@_460N~ja<mCpGTHzI`g
zR6ldE^Y0cHTUohH5I8nIwNoK?M0@><Qsf+>U+u@E$wt(wx}$S@o~B2G@1_D~6ORDu
z+v4NnHh9Gh`=5T13T={ia6iDi6bqDUOJ+t(MV0ili8vL7TGbdR3|j=$w%Lb4Vl7)f
zW0Ea9_hW<oLE%x*P|J$!bWr-<TG~H!$EsIh&Mx|;Oq@nIQeG22R?fS^o|^z&75xqt
z$-Bn>3t~ZT1Wgb%g7xFYV2$8vY~BjQDQJhYTWAjoT;+#u(c6bso*bXI$6V(K)_TlO
zsn|}94>2DmKV7vR*%w#&Vb^H55!?#-0g7G*DYJ-yP6Vg4Ad-F+Z_n|DSla-{O|~BI
z7i-Z)O5>`25S$uS;a8tpt*9f)+fUUL;EQz9k!K+3OkY5zdkjY_JQu|@Xl&@Pw@s!N
z56~eu|EyYE`$ma}%jJqz>@JLWzF6`j%Fic6zqxcP|BOD5XduW6StsHDtINnh4?LbW
z%XBdSXasZSQaLTUZ=IN&&~__QKC9@$Y~@sg<#e*<KUe@#RC3x!zRcu*<e~j$XSc>4
z)!HmXoix~7&pE%2*Lsf2IQT)4_&gvoJ@2&<G-cTlnX0n&OUu(>{$53A{raSraWzNc
z=r+2CH%Q3?+LkQn<j4qzo8H|vcX%>f<8`ZUU3M)ILxLG%52cU!no-C8s}$MlK(q;_
z+-)vnl}~xi`_{=8teH1MI3s(}%@v9!8(OGvyi9icysJ}|EUDeImO}o$0#-BUz`uyU
zlt@d@+Ztoy?{_}$@bo$n-!jCq+Wu0;IZ%HtakJn<5Hc`anvQg-oDE&BTx;F!Rsk2B
zCYv~W7Wk`UHKRx@HG||V%!C{<%G=DWGeJNFy1RvV>ZX1368U@PQmPPw$feov5*>TG
zzHF&6cUIqm5n5_g<!bi}nNgdSFMa**_yXXlFyOS`Mw;kfM%RCbFEF&Q)BCM@_-}e?
zV*70~`B6k(y@##30F(Y^i^MHZBwWgmLp9UNWw22P?HiB<r_WDi%2!_Wx)G2}5Yfc7
zy>1cf;&>tqNLD1CjE3wP^7VdsGwNv%_ypFeP+&~zmmVXhfJjM2FOmH<*&Oi2z*s93
z_>NLJ5)Pz3B!vn@RaeLd^DMQ{qq+;dvj&>|3$dr5c@}{TA)yZohiBOqkkJb9Rw^vg
z2b$ENL`yFmKIdd9`d*YyVnWD|S7vX&Z|{Pod}Bl)rqQBXjGfYBDyn&Hjmlp1-j9@O
zTbrL}u!=zGggWZ8E4Hw$FO4nX6Qw75?<~6{zskk)(uIj`VnrQv2^kAbjHcl9C{XB|
zO7`ByWzUIHQ@*bh%!;o5zM1`LmvVd+e+=L2Yy0X(b7y+Tc2k%5!2+eA+~s@9sw^|Y
z0V0YO852pIM^RiEts-gpcVoM|Q>$KsY3ISEJ9w_!F~EoKDEyD;!ovF)r!;B6>niZ8
zIY}jG*F)y!Q|6z9p9CAU_d%x5ctMP^Bb*U^pIqPBW}@rZ3WB$T@5i72g>U~~Y}0lT
z)cf$?VL$l)Fzo+T=wf1P^xq77{I(@FBZBDdH%g#aBF(w2qIh(oqWE-5Mw)5;W}J4q
zj)kQRv6Ns&bfcZ#`1%L9clrB_TakbWn?DTMic5}a#J(j@&(GWW!v*t~A_P3#v>{{Q
z#AYuA#*L=xN+`}vQ-}u@NSYD<zX+z-f}@Oheq?z;D-zE=;Ar32JsQ|hUJjmFz#JRs
z%MM^8%nkqX!3dx)!f1axAY5Qf1lMbpWl;j_uw~U9E6?yU*tL*Lh*d;49mQcGqSl6W
zXT=}wq<?1pEqog!pf5{J(rhohOIe-~>%o}?Yu0S-(cD3KPM2!KUgc-2<EXVRLy`S^
zz?k`3;di8UB$<`9pYw4rh3w6ALAN+omX54E=1=G-Zx=D1oqcTQ@B`;}*B_4FTn_X^
zQHm^OH{_A?2~!P(UM;-*C!*+gHXi_(>5rQ^b+oy{2Rux?%2MqxO-yI-?WJ!pV<4VA
z{txw<s;|e)#`J5~M}M=pZb)pIs(q6l*S1PNwMs(VXKzS)v#T)WKz7IF<;D8{XRqA<
zI~f=A|Jd?mX#4*Ii`!fu&gS<^^Q%S#03iBLk2JK^bF*_a{?GGfS<S|7>9;<rr`Hgw
zgYDdPcWzsvZaW8nP+4Ij{I6^&az$5otHb?B<(dUW)4y-iEDnbT3yVKnp^<SN^=3Jk
zvplmL(l6k3@U_b)T*&C*0qc*ay}!kZX1#-@L4%>Na<enCd$ZCy4`Y3kTO?GAM(&iP
z-X!3#`0Xd_sIj9E!s_Hi2jwS>M;24e40usAtps_)<jMPq_Aqy?69&^YgeqW;(~zSi
zf`gLca9>(O>|nxB@tSr;`W8d^2xRqpsM4TF^(adV3@oPRJ?&%^-h@)nu8v<H)935h
zttBcsgqk!><3mjBg86=6Q*nBRQ=+|T(h&t1)I5PJj#Ukj66Y-CG0d`4ng#F14DM75
z;wOxFvPB_gl!=KHojVwmDThblt=-bICL|U%cNb4zkK>_>t^R*jsQBoW(ZJ&+n*-EF
z?d1OShWfYyG^-%O`4Y@QMRpb}BWvOU@HI<}z|!b*;qx3PSf0OhWLnUux}qn7GU6xo
zsv)4%@h8spEC%v<qzLX21r@G)&*cso_dace9-?lcu=~rfNCqgMgVwQx07X_W@B%}2
z9_Z?>MJ2H*#Vj#GsY*+NHyh8ZX-+otqdbKVCs!+(Fx)f!`I|TH1Qr@<{O{szalO_6
z;?D(f`$EPu*rY(*JDL7|7aIXfXS=_WbUo$BHt4-8^%Rv15Le#}>sed-1V?Ff-L*v9
zTPaJoi%x@`cm~D({Hjx7hBowCbNx;)kJoFJwkBZ!Z~$f9JYvQGgsBsPy|4{9BbEZL
zXXYt;UDcP~7FC2rb}c6f&*3j8WDo2RkM4$!6-&Oc`Jvy|+62z;!h`}2?{6xU%n;OQ
zRP;2{4X|a)0cknN3~>hTMT8l3In=D>!nqW}8qJ15Ab=I>KjNOg`S{j)Ej3jlFW&&e
z9|DHZ<-;BE1>kZO1fo2lCpGFPvlc;8j)P{3bq{YlqMXu~%>cRm67;sezupny%1UoD
z8p`wS%$`+2=2bX-$6xzT)xlj#L3pGAB4nch_BuOIW8yg`LyppN<{9ggR&O)RsIDK~
z)r#nO3!=AqnX2LXd&(wOWW#PTrRzsvK-FgiH8fbEn5!%^SIa@Gvf2G6oWRz*@_*l$
zr&mv<44gIQ3TpZYsm>e5t-)oAO?>=^NBmOvXGQOYRBq)je8+*qy5EVV+z!+RpD@tB
ziID~1#}@I;Q4>i+VE<w?YrI`Rey5I%pBoEEuq+i3wf*22c<H;fE+{)S(VLtK;zPHJ
z7PcF)Q?=`?EEF8aKR`>VT{wGC6OJnfq|Sjd1KpAzBw3l$`|13#yhk{{FQSRTFT_5l
zJgIlg-+Bj?^B94Nwwl(<!<`tC>!~cKx|KxmL8yWU5`y-TtxQ`$!@9Awop5Rl!4J#X
zOB#u-<!u26)p>FW;Js?V=acD%V|{g`q|T;qJ$M7Um}~%TKRlRjZ6X!Sjc%@qBLltK
z(>o~a^Qt02iLm0hGS;cjI8xRF8*CxT_-&D%4~>M`hfnK=cH0t#6~T1eAG!`L^f{93
z@3pBLb2Uz)!W^LKdVMtEx-B!~xLP#bH*>0mFr|fDqU}%v`o}!+8C;vTHt2pzO{2Fl
zT&tZ0G-lHxBe;+L-HRa4o5y9bO4s-qRL@!(Z^mpVFV~yL7hx}jrX)pyv$woCcrc^+
z7iHR`itY5V2Is=A9n|7Rtn$m&uIaA#gyxfJriV?cl|R?g&E2a5Z@btkGn$^#GvWo(
z&a0-Isc%5XTlGc2=`q+%*E4qRgex_+Bj<=1<-#T3Oxfk1oyKta)3S0&>6>DT9ub{~
zO{K}H&Q*zS<`i97k`7i|wwSE!Yg>gZcYj4m8-4QroGx&Kjq~Q_54iKK-v3?e^<S<x
zdY`~HGzb6yMHB!41pm#_ZfyR4E$sgX)0^T99XnKsgpk{JRML+Ui)VgQRo@%y+N4}w
z+Ia@cv&iL}38pvyZY%2%KIuixYrou9qJjyNC3A#JXpW`wh=`~tcjAYBxgIYDANJ+T
z*WO+2F5W+~q86XzU;Cx0r=jQXpM%Sh=yIjKJKFzV_n#dm@MBI_*;`{vy*)U;8+h!w
zza86nx4ypZUob+@wB+b@@oQ}1%@#u|8waPIx6<2>YD?@=BjJxnLSymd7JK#l(sr_c
z_;hseOW|8XhiC4;4qQE*96ZwC@b&O_@Jk~r&!3+=UsKUb)oS4v?a)V^nCMK0#x55t
z&p(#$QP^`2US50YOYUNiWtm={N;h)5&n}xcFX7qiTwNW!y4u~J_uU<$Pwh$;4<EMP
z@85o2^m2IKuUmKV^o(FzTT^3e?RNO~LvzL)@pAEZbq-$0;qknk9G*WO1~JiIFD{NA
zo{tY7Lp!ZP6E8Q9q3F5=taqem|3Rtg^6+}Rd=-5k-;DSryYX^z`+5J^aRZ~PjSfyP
zpC2Qu>-BiO?Tx!BeNI08Je@pk1MU*)v#;Kk=!v>$YPni;xHBi4ksp_)(oa1N!Y8)E
z+s2lTMy^84E?+ym->jC-=6-WzXIq(Eg}+=Jefxc_J`Fzg!jpZK#oC-HNSBvvTA$|m
z`FuQiY2Waz%sbvqAIPB|H@KKg<wvh~Ry4XznlL6cFM71)Yeo;JkjX`5nPp#N%p_}8
zYQjD<X5hDT+u5WY&d5iwjpS6!Q-*S4co3~>YC_YNLtPrM8e2ov%rvhnA83!v#N~L=
zvb|;{t!_*`2uC<w3ArtHx|u$XRWi6C``E8f$?QH-d}e7*&#*9~_l`iom$FFWioElv
z(Wh$3mAI_dx13nlatn!6B8fd{h%6`T8b0m)`}x|-y<Ok*@<PkL?0GemPLDj7)y2`l
zX<6n|EF;726fFym%aGz?LzUX5ukx^K7&i1udmOV0a;6qCITNPh%S>Cv?fYY`!f2fQ
zWdFz~NX5Dwb^jO!rO_Bd1Y@m|DK!DPzXP<I=*kwgBvWUx_MPKl;>`a;p=0=TSt$gu
zO&(05=!((JW!Z(#dwEl_EMDYjXQBGe71GjHK7Cm!wlvXVsy($_&ag5Kzhh!0gHKvq
zbaTvl5I7|i6V0Y&)8jt-<7zj%r&C5sC{xYesHKMB5@VBw;56P6+H9Hh1ygD?!}!&h
zie+*b-XD33-a4_|!q`!v>0-CKyb>Rm=QIS3Xri-9;I_nSsZW6Xq)&+;<by{#rSkb#
z*@3h=MA5;iaxf*zhW*ln8J?u$V&gUL?=HEd%bKovbPj4kb_9<?M`&RAiZRiWIV*~a
zjX02wq8sCr&&A9}^InH+y(e^l2CpUYbR3kGSs)j@m1rjlA#S@$vdxo?8O4;QLA_|~
zNduJDa*%o5!Q4mHr@2*B%9rpG%|msuhbp&_f)H;VU6Oi4jg3?wg$M{sp1EPx>ViKQ
zKTrczxnTd2uf;ODHhY}Hm?MP`^ow}C#ddrM#oV&|*mUxo^1TXn;Xn^q!i~d|i05F|
z)rEqhQ&~AX4fHs#s*PB39#_`*v{_i~x|+%5nnx<@1#4wjPe*F|d)RQfGAoMBa(FyJ
zsA_Nm>&9eH8W)M4mbMHXw;wvO8FUK;zZUk95o(h)$^-^2&_IspCOJuxRDN^Nk+$F;
zZDwxvYQfbxbY`K3W%Si)av&=yX{ZXoY-W=xDijxuBRdRd;oAwa)HOlzGQ1wOVxbLk
zH33;zoxl(j*iKUgyFzg0kAm9w8a2`Fdob-56V;JhSkBu=is6xy`<SBEzG;dKKCQD_
zQRJ-zYV2*`4#o(Nm{%b1d6D={grvyw+JHd5Gmh64XGve%%6uf{7%Zazp+mvZbxcL`
zS0CGzA*}el%LPeDLa{#toS0r6H+8q_@j|ruN;4I^R*U25N!5cK2xgZnM_5v#s1$U9
zok!m-2m1;HU<cKNWj?nGlFV4!Om*tDE&9$z=>Mu2r7F#>0#d{HOfvowBxkgZhZ8z0
znEdT0k$<*6><Fm{e3c;nGDjS#(NLJXOjL}FGfLd(0jPwo?vt@Y5QV|EN})RrtEp0E
zwXjarl9DIHfWmNiSo2Eq8G^P6tun;GyqrSHGnr%v$m$PTUJZI`eqI1}<PgAn<XeMm
z%%p<T3ONu1-wL6wG<E*NqE<$N`O(nPzI()gBii(#JSX<|#%k~P50<^K-*B$7yQ*AK
zCn$ty8@Yw)tUIOVo1RKXA@pVP%i(8nzoje)5P_-ev4Gyn8;MH@W37^pK<84_Q2Z&)
z;P0&_vC)fxP&`-UQ1uzR$C=A05EKlx2>HOcWF_m5%Z$?lRcCR3MaQilEM!^J1nA#i
z>*2<Zf-Y?gJnj>jEz7(q)>&X)l=sMy!&en0tC}=-!YT2;)!6Q3xxvPkl?({!DiYus
zWqLypf+lnAFVQUQNw}iIN2N9nsP}-J_hX=?`F?D*S{511Gj9ysFy|WAleO+FJ6kT(
z>#1=q5`HXY5HFhOQ=psX>K9pa#|V>{Mrobwq~wwJ3on2B>5?0sOCtuwmOC`q6Cy56
zl9~sy2Mcs3A-ux>dY0Y<It+uMw@U0DhwU&>!&i%Rsb(`!8OT3OdI*MUzc2%7wy};A
z%U2xAJF>$pVe+cdKSYkSoXn2_i;+-Zszxo&^3`@KnzsqD!!JW;qP3e^ikYrqB55pL
zP(&2N*UBGOu(H13dgNj9S5~?)1TpF5`oFlcD8S6^e75^KY;WEA;Vn{;`B2buWx7?m
ztWH}44S@whusJW%+6gV1%b;Dab@;S04jOqC4xhz1m|?TBU{z_!YE)xfUaGPal6A8r
zsn*k*<lY$YCmiA+^cYW&rJIaU=t%Y_<#}eW0^K%KD%U#!;xBYVf)pkQoJj}H86vkx
zpoPj#5#V0;4Y$GO-O<m=Tk#rk2%20|W45N4%n6COz=%{P6l50~i|U!CV69eL7n0#q
z&1^jOg<t20oypK0!t4c(aH&enK~QGQ-kt4Bl*(+<GI8Z&r$LZLd)Wve=Q!xI&$Gl5
zI>55c$YSiqg=5mve{|Y1(|`d!)#wspzG`-ga+P8lNsY-DSKDxguJ~K8%A0b2Epmjn
zBNOuvk0d+Z?nM#70}cnycMBG_=v+FDG-=A)lub2cPtW<vgK!GLMs}hTS8J9d^!qzt
z=+-JhCjoP^o57Oy+jn>xTZJr#1sdXuwtv?cxWmsWDl6L+ud|AB>`ZY?FUl6ar_$GC
zetyFb<3(akDopMlbs~l;+Y1Ur>*w@uwwA9Bcx1)SAxK+#=<S@HaZs(9%mqo7Tz|bz
zJGXs-yic7#&lJ3F9!z+0FsA>zgY-9;#RE`q4tlwQoJ*np>qQ{|0yu99b-T_?&_La1
z1|QHejd(Da6het$hC!Um3r4gX{C>qbw^9%KAx{YjQSce`aV3G!>NvvZh0+AOJK%GM
zX&}%<2l&SeLzoZheSI-+nqJ^f62RZUo)Ez5tI&S<M}h~5y;(en`Xi?AeX<#0^GUY;
zKQt#%LGH4KKZA}#(qXY#F#hJ%K*6e7)PM&*MpVL9s35|(2sFa45WojN1KQ?^@B#dn
z{a%1V&bjgg3hYEe&N>VT)e3WSB?JQjMFxo21!f>13RfU-3OP`a2l)}_b8IWnP=?)R
zJWs6B<|YDFms6qUyC7iq>2ZLFt0;?kwSoeF{l(cpp&ekEfD6bdw8Mte2oZ+W`{r6k
z1p_E#1w+PC^a&bB&BI<}I1#QR>+-q9CkevfL104PJjevL=+odF@ED;A)*$dYh)1XX
ziZ=$q$Lj$Fj@1AVO#tT$92FuIOw;!ZH2De$YtK#vn$r%1o#6rnt!V2I%<Etq6AgWi
zCxu->AstABF#cNWrXw5&+ZR-;f<nz}f}qUvL7*P2F;Ws~{S9uj#YDB~Akz+8A*~8?
z%I!y3Wf&xya3K`hqE17zxkq9d((G>wdl6VeSVz?r?t#D|>I8~v*;hS7cqJqg?Lr$7
zdeVqPd?)e_vxa2ea1;cHH^&wr)=Whp(nVJ)tQ8QUCMxJgwH9tCj0$_rYDZj7<|m3s
z^e?m-LzNu5H*gg0fg(HbF?AMR4Mx7_PQ$hFAj%74k=;W)E{`LMAzUQx5R*qd#W^gT
zrZ*7DBA<#qYwRP^j07O5AuSPkf+G~yibdBJ<|2VO_gW!85P6DX_`L!qdX&mv#0@bv
z6lOGz63z$BRNxLRTEGg$e9+7+wqXs)LZk;mGS3IaTCfH!ao{_<_WSmd8yAvoh~0YX
zNS|YSVV27JNXNNx#4B7S5}7MdT!uczS-%sIyWljKeBLZTtmzL>(oKnZiP%<aIz{~r
zGhaa$a*;46=~tK`y|l$7J)n3}C{Qv*ZxF#ecMz2isw7g7Fe74>@JleE0#7h?JUmc5
zhb&AAn_e)H53Hc(JmRpDJ(3Tat8hJH&JgFsT^Jv<{Kg4bz8DWXgMy(}R4m2M-z19B
zApH4^AW9ov5dfrDk`T!TGvT;1%zQ~>H3XzrtPx2!<s3|;Vdb{pCxr=HA=VA`FpC)S
z8Z|VXSL>53_zFlhq3w%nCr+iD;Q>l0TLGoExI;=9UYm80cuG=)KStjpy;IYK-=Oz6
zzv|V(B)0W3=@+a)${gUB4G6n}l81vK7;ao>xg)(Ino2))0g!6e@{@Ilg(0mYO*9>s
z5RgU$>yv%ZNQbk=aU!3h2$4n<`j>F?8dnHwk`{%p5UGcMAuS2F1W_wU2eaCA5bKBU
z5Z8qpk{gHTAZ|RVgh|XHefGD7f1$PfP7AvOAH%jGpR9nz?SFjCIt6b~4h3zHx&^a;
zv&!g#=;zH0WZiysS!rcvpzJX*LTT+k(!WOm>7!2lQky?Pj1Kt5H$y(Lgvi}`eaP<=
zN#V^Q<BO(J49Gs@XW=`PSrRP4YslB>{$w3`dy6Zx!7RTwd<a{iEDhBgeGN7DRY@H1
ze_2fG1;`}91LcjO=gXjo5y~Ic?vdTdMdh`4qVEVZB7uqAqVN5F8bO7tAP$9S$l#3?
ziZO{Me+HCw)RUp^6i$>^su0<%TbP2I6a122%V$D`CyhGfbyO4)PKvE?Z*;Wg<z#>I
z4mo|4Vev8K<(|2+S^;@#&jMD+7$Uu3UWZy^Jdqzr?}H6fg64Xte7P!k=^{257q33O
z#r>0$4^z*#{fn2u&(~G<(ZO}FQarj=oot;hkGe0i#o5wYyPDF&=ck(|Ke)wnW#5nc
z_1Zs=wJhUEv$C<J4^}c}q3q~t;2p0=S6@fV%dPnMGNG}PcH-6Xd#7@`I$hl#cQ;3w
zc6>h`A94?$@V<PnV@R#%o3v%SycvAH|2(J{oj!bOewzNlxb^(|w;M__&^fw@FQ?lz
zMekQZPTM=Rh_naZnS9H*Q#k8=|Kg<gb)86mbJlm-^R~3K?fnv}M+3b0dt#&{HNiJP
z=4AWzzi1Qxm4(Pan}n=|{_Qp+{ZHPzzd7sQ1hbK|`+rVDOlxW>ZHlA$o~mVWBo8t5
z0F+M%;iLf>GA$uwF&Voxq(@1%Xtt0w6xlQbkPrIpI(29%wvqrpw)hHOES`R3OSNJ=
zyXJwHN_6b+JCg3{+u7OK*R}owt5Jg~p^U7pq1!{2`!R$D9Bo%8<-s0sK<STSGiETt
zJY=83Cn7#@L8Md9V#I$~Gs6k$CsUM~D^A6gS#t;h&`ZEs*#SEc=Fed~AXYU16To29
zcY{uWf-q7ixnzOrcJJR~L!lnmZk(4!(}fw=b{D@Q{DlRnzVRm|tPj7RA3azqc1<Q^
z5wri90)anmhd|z%?MH61BNfi*#*MbMvkQgXh%=dI*q@BwU|BeUQ8UCPd^a~c^}wJn
z*b+M&P-npNnm6xfFAp1dw_j#VIjzU0CGu=#zJL{9d4Bpv!A*j^9{DEBs#!bW&S0E9
z9EM5&;M(2{`dq*1Sp=+?z^v*TevOiDzjseN!kij3$*Lvn!!?!!)4f7&4K@x2vnvWc
zF>gb!GY8J9M#kmw4?t`0l=~zQ@PvD3f-*{xU?fkq?MrO#lr^lEUWu~nh*^0BcoqpD
z9Nvm7IAV)RE#tlkTd$tH>41xP6~@<rMto%YqBexcg$1LPS|@^Gqe$ZLu$V|p3eC~K
zv&18fysagG_G4(rKa80Z`c{*OQs7UUX7}GQcB8DgLbD~efMk^7>@=wNXL<5rVTTIl
zN3a*AqT@L)B$Tc#?R|-75eSOg*oaIpBiqK1oSsWtyxi@VQ%CDXimOi00#%BSlf<(L
zVwiMfQ+CIA-cu{m@VXae9uBh?tue+MX-XuM0Lj<CoJnKjdDZZrS^2vqw|E}x<?@pY
zdA9q5Z77kR4hh2xvZaOGN+3{gj@kkFd@D2pVu>8YgA9yVqhS*9WSm)5d3m_r?8V0Y
z!_l75po<^(vur0^5TBL=^ln@;f51q%EcQyI3~gmH#d0*)y344~<b>LS;v;$mF<XX+
zHR4poV%aP8<1qf`&M7o$VdWBF+g+i?b#Y_-J#=yw|J>xI`KHhA(C{-@*^oaSET?xw
z{Oo!Y<P}2D=WO^&Hp=Y=8oljwH8Ix6#MStY#ai!yM68fvLyoDb!J#st#Qv;0?X=J|
zGRtX*<0sgKo{F|R0pY&hxyG1FEl%ycNaG|d(nR_hE7DbOzmUnPD^MJHAILUgj(#}Q
zfue&HEz6ZiSS_u3W6Zh86ZAL%bL-=bzCM`LOqnZ9Lc5~YRiloEF>;UZyBcl-sks$L
z3a+^#h-q1iX&sYGG{PkNSH=(HR*O&B=RU#l!XzRbLUSK2^CqxU092b_1@>2-ThyAM
z&^@{2yhs5toiOvkR9Nq$NNSVxyM!R7mb08A<3H$!YIK$z+<maYG{5dMRY%c4y#ON|
zr#WBPDzFrmyRAp5VIwc6?T<1=w5XVM%~DA!w<IZl-R+`quLwA>B+jTV9ue0kh7VY9
zwNBV96QBWa7#y!rxmIBlSG01|2J0*%<Z7*V@kn=-)KaE&lajqPnMe)m|Cs@{9vc=d
zFw5#}c|*2rn(J2<t~;%VAP&NCR=;w~lX5~AHI2De&?h&dz6BeFy-A}HNoZR-lZ-Ko
zZyh?Zj01TBQy>=tPh86stFq1uBkT>E=FyW>`vVUw$)Pj7D<{k6N5Rn0*AkU&a_m6k
ze=w6vuk(b8GjMzwsky8;xebK-c6Rk;{b7$6`h&}~b}1Bh@n@7)Ma?x>=zxo(;0?YU
zCiZ&nCFv4=znFws8+XqbIWjL3GAqd)->d`u(@yb}mOx#cS;VEYK%==**|XGGAqp3E
zMpc&nMRykwThZR0<TKB>t`nLbi+H#-zxM^ofr%f`IoBdw#&MJqlC=IIAfbqhxVy)W
z{XVv>5Hy)@=O9WFh->I2IAWX|^rAn$%BX}}IyHZoG@q_a@A${A1+)5rJ46W!#P8?5
zR3vXWojVF0{^JmD7CJAK;pzD^5&q`r!Se<5ylntzuMG0fKD^XvOKvhi(=O&812vgi
zI5-&Xxvx(mA=po_Rr2~p3o?N(kOwc+`kS0Z=fT_4Rh?siXRiY63oseOfB*Wk)`c|}
zPo?*WBJaFE#rImhju=nO9qJkzm6o`&e;p?;6)9;hbnBxs>(CalCw}Poh<r<O@BF=8
z_J86Ig;U9bNzRa}4>|11sH)OE$Wza3sA|n>QrtM--SEj8)484g;OS{g%WXFvK1R+q
zhR1V`(Vy1Stu6$L9CD226F=F%sRX83&bhBt!uLCJc!YZ^<GNm9S<_7_=B+ksTYUHo
zDq#wF*M;JQ;4yVwVEhygn{Duxqz4kOzb%b4M#A4LAEEfnSI9D|A^!7cURh}tN1LV$
zrEQ2?ZELn!=)h!ZEF2#c^AfX?pgzO+cy>uAO~UEvdj!75KRXB2lRsf~EWHR9+E`^L
zS$q_FPR&q#S)uChxRZjwAX})tx>ZOhQrRrOPKvzEpsme!lN#lX!&Sqo=AvWV+_rI6
z`><fAKB%xzU9(G8V4eLW>ZMJ)T;IfCsSswEHK3OwzkDW|C7oJ2QvlW%h0TWzP+h)A
zTUtR8YRBoL^%_369zayibi^ti;K5Nn%pZ8#E6bAJzwJe(i|B8N2$fN1(MnqBKEci+
z#Z{kxMv#{G5lJ9>FfEG{WmSjed6^%wH{8YOz@u}0I4P3j%WPj=q*U#iq^CPsE<L|;
ze;NK>y}$Z;J2G@M$;;pN_nK@K8MYG!WxP8|n|rerEjmB3(Zz)sNv@=NtPbZCSCOfl
zF_S^L80(T#FA?>5Jb{`;42yCPgoXg;0XYNyp%=-6$_`x0_*>mnp$DhT&u$0-ywrjR
z*lr&Nol=o|*xSYG47KKRG|bGD5?Tm%aV4~8uzx2*N?W9wd=e0cl}dm@=>x79Ybl`O
za<RgZXbM029^h>0Y-ohRP-~7AlWbG%Lx%BO@f%<wAoGc;aEoe9&S#iR9!3N?SCQQd
z#P4}^n18ov_n4Ra3&x_%fEmg5pvC$1ExdT2hu}<agGcx$w=e4^A6ob;J8oH;=K6#x
zsI)rDm6;&Y0W<I;i7|{bbIhFDkre$J${`z7;HVZh-fw2DdUEX#<HCT$(n+D^4{17G
zYOPVB4|X2Jq|AH1kzpe)3Zz4pk|DxoT`J&74@r|`9|!s>^gN~M$jJtxCZVtvZN_cr
zlSv;N`UleoQ9fdv{S`{ZcD@P&OQbYiA&58}?mIT^Vfd|&xA_2Eo@OIWJuRire+L90
zHM2J~dJh!viD9*`*S#e1*N3cHbc-?*jCNrXJ1nazl^H8Qc#u9!-=ITYIzn>UHl*c@
zUeyLsvR2Nh274QsEO&!$mFP&QVXWXv+WPwt-m2p(V!gFIzM%MMjY|WGv34w`aB$8i
zg`W9$!K%7sCc)D9vYM(}-z_e2v1EFUDjlYcwp$|@btuhsj14Gn(U3jyPwExJ$Cl)I
z!B|yVVa|<6cDJi_WI>%_gLZ6X@7jC<lz`L-GDpE$E`Agbt{J!gnj3@<7wmrl`HLod
z-aU$K(AP>{G6S?bMvg|lIHicqw|&9oiS0cQ7k-)Z<5%86vTF^xg@+))&8$2Y^n7nB
zdYUhnqhdE71_&zkJ7N=6Xibmq%X5Rx7$wuGc0n(999g<s<WA#qjomgMkQ)so2f{a8
zuDUkko+a(D+$no-)Knu)Ol&pbs0mg~yTy`m|Lz=?MLnhi#HC=bV8Mo4nk6f`z3s??
zY3Mpbr_IxaPr8Ku2tP_22z}pz%?iKY!m{8jY$9!olCStP?G-TB1${I&`9_&f`W(Iy
z8z_>9Pi}LFnAvf&f9s<mR~NO5R}9#ahUsq+Sy=_xdSlC2J;Hg`G@FtO#Eon8vN!;I
z+BC4TNL2_KT5QiBKI-e6;+y7tts<-G*IL)Bj@O_@3KBY6!qyhoME{G!NF)9URLE0i
z@uw2nA}ZnlP&)s?|9|R{r6CcHCclPy@2CI(B>#;bX<_SZ;%NJyHv`S;Hg;H?{}aa3
zqSz4!K-keznm{zqQck3x7%#kBzFIR?1LzbPy;8FIl=07(`K1R?YEY-PGOX@p>M-4G
z<dE@N6c)?AB*m>hZ3ZR_$IaL3VAQEC-Jwm>(Zh$=|Fu5jv5()+#FT1<_Dl>hN?c$t
z%nHwM-vBxQ!ioThjuqa3R0uDSvR~L1iU-R(3yQC%72rpnTD^`tZlX`pX@HSA-++h+
z?#rq#6)Y%-pEf04pJ^`+g1K>zQW^@00n*YM1Bw|%ZwC>jC$0z-TRSHkzIL{ev09a}
zAXqR{JxWcKVktHNb0HJ6afyEOnnXeq%4d$tvfO>cRq}c%du57-2*qyIQZ5LlKqYJj
z(!!laV+rn{vp9UHjnzv#15fG?6cJWsGp&^!#{_-Q(Mm-y)UYr?XgI`l)j4TsHWy5?
z^~)gVpa`sXnLD5^)0N(mfXrSwocho~DGEpw4pXR~IB2AiG3r5VuK!R^o%t{;T|bO0
zVWT+F$QgDlsz>#}-2DW}eqFul{Dgfe7~-m`3Q(4}EC36$pxjMRRssX>41_zV-^KDk
z?qS2DTy)~BQ-+*9VN6$n-G;xQ*gPKDJclzJgYuZM|Ce9BzI1Rsp15;*R3m^!pAMIN
zUKM@}{m_yjRXpnyz#)OPXtV<%<~oab2JR&lQ{vtfi7GTW;k#O5?Xj~KTOLTb0)*+A
z3b2vrduY(xP^TCfw!6=}tNSM$*32vM6gBWTBGzN{Cm0qZyYG-m_lsLJMnj`u2-SW3
zQVp(_R?r&u4jkCFc2<c)ol;a(FlPhX=ga2b^Ij&BPKugPs8KP7+m);ZkgioBJ@Z_g
zr>yd4E{@Eze3ROp!;v<;H)u2wsynV{TRs^8iUVot%lSvovBR`GdhaiePS4k$my@l3
z{wTQp@8(CbUvA(1dlyr^XL@k9VyC3qo+T3${6U6KJq(wJ_vDVnX_FAN81;@@Rfdq1
zBR=~sK&54HyS+j{yzT)d+`+EEt<wFUN?PoOJyG>(5>%`qavoJS3)LE0@7A`cIvdpF
zxq9+s*K#YzcPHK~SMc86-B`(En&cDlL6H2?edm-U+pv{$qt=}+vc9uXV-H}<XUM4B
z+fdPoX0yz&6ZA<lsF|HCIqO(y3b#nI50r&6I?2u!rtI8W22KOhx@pHaA`I9pmJ)-b
zCT0KPRX=A<Fa#xNjL({8uG|z+H-lN=0NG*X1$K!|c8*!`s%a!uG=B&b9W7(!rt<6K
zXnLq05*3~|tq|#V>BIYovDM~qq)Hl85<yLei5^@mP1V~q-NQ=ex1hWJ;z{-MO<eP=
zB)c4wTS_joQA*N*(aF(K(Sa8~aMDZ4Fcs?dKT1Z#T2C0@c{)8Y5z6f+jTL5<MElQ7
z!Jji+b{Fgy@|u^OG&hw+W3h?+!-VFJNn^fhmt++`0xx=I#}~toDc4O|8Es9Rt@$2%
zX%Wd=&=kkjpJRsu4Q&Qf30Dpe!E6o}lQVUaXh}~c-Ef;L8aZM?<q?6_R$}XyzxI{4
zt8YP<Qcjkk8Mpz`HYpgaj8O%yN##K>ci{(2*B@j(P8e;=Ja*m&`F2DPQa*DKggN(?
zYGe@RjjEthXe9o|TDvz4m7!)*r=pFBfwm4c6%e{<FhvJbfiINS<ta-otoNZ>GJR?+
zCF%g*TOTZ4m4dFEE~n{0xr~tCUd^!&*RGM-0*;M)^l`Mzb-8Ip=13knjG7UrLAK31
zjnVM-ONy8?EtkyB<rru%>rAd-XzB9O<)rRxj_&S^k=95}dah&sQ}QX;l7CNE44X(8
zxrm!|+?=p2Lm~OO@EpPrz=Su8zgpJ_!Hm*~WwASF^RLWO-XkOsSRH?&Vh~M5D}mc`
zhCWJC#QSc**<BpB)+QQDYo0QF>$2LVuQ**O)$zr91P-S6)BVhA9dtOQ-qX#D@%Fgr
z`&0B^sP>iRla$Xcj@m3%x!&UTyxBP%qugiv*N;50ftpVvm>rVS&2e^aqO%%H)7H*t
z(H{}vD=GGyAezpXV$CVGTGiV~BtpsyWkxjzc5$2uXN`?}!4gePChfXf_*w}?tw_Vw
z3)?`gh#>lfue|LGNNpZgToAM&7^I<ngZZoZGqHHxRVe0jc8os?4rP@7t$~&MTIOY_
zJ6fyPXb%+KH@=7Mq-jWkT>rezrF&Geyfpqb>_JO9LVI7;>{=eo3%YPUiZ^$LU@nxj
z+L*zGWAs1F7^uh7W-X;XYoDpRL7y(HapdB|&8Ql)WakKsXvCurL%CXJ(wWjr>zj4H
zLx@tv=2p|}y7Ps%HWr)?ze)_1VD)Tf&JOQY`}r*Pw(~shKG}W9j)1Ymc<eQ#EKlaI
zw6DTz$gF~WYR0e-k$hbu%_71-L&b;Qg0G&k|Abb~XI_HSgNv*rQORMsnG)w{ri1Y{
z=KR%DU((r4dmoaGX=xz+E)EfIgno}<jD6527GsjC@;~G*L|?v!_vVXroETke;Y{#o
z3UKCk!uNOz=l}WN{GWZskB*psL%1Ls008lS6T;m&nHlZ>bGc~sZv@|DL-@JTbGY=M
zk;K_lT<u=6@+Z5F04i51!aVU!&qv=_Aq!`c7=~Q=dfkpsq8U#)g`tjENx6v`_42sk
zjFt7Y2TJAfL%4S=?!)f9!Tfmy-m1aSKBf8mdWYhJ{2_-%?V?<YfaVNhmjGffBG?a+
zAiGg#5f(DOq=M5R(*O}cV+5=)C1b43lY`II=r@}|*n_4gc*Z9<gn}9$i_siLLUS1K
z-wvfwLoh>lV39NY1C42I*t{@OjcG;l#Jm^qps*%({}mv;kDjnJQp2a+lj-ZL#+TTI
zU``uRjN~9+mR8sUpclU*S+3oK70s489e0RZBpsqnBPMELT+6Io&LVKHQ2T0=6)b_s
z_$E?8aWc5<aUI{x0M#(^XePiWH(=c6xpEmTtN-$N7YzNkkQ#FkAdk5{OvyPu{B33x
zZb5+<*P3`64a4w(!Tqf@PnZHuDur>My5zQMnDmJ8$;l0%ot;3*>Z|PqM;#)^@XAr|
zjZ!JC9}@};9-&74O)ZO70L@^mDC!pDj$(kHs>N6xg$zV7ADWOCv}^5qmVT?<HEQ~?
z&F_By`>8e7K4BDCT9ynoNzU}?%#f?ME4yE!>}I}L$WQ*^yYu`QbOKEF){a(MY~&7W
z1i0&6ThGx@mnQEYtff5X(>V^$ltTqDh|;f{#ukbwvO715+uplV9=R{dG`qI&M$o2(
zKhsLCG|pQmQka|^d3Vd@<D6WAF9uB0;EXCjq`oKMPVC)%h$4j(+DK%YLXk}m<4m%J
zmr_@&gQj05y>~fEqUFp@bLUPhhJ6&3egdQ6=HOXJa<rcQ70ba+mxfjkB{sy#zh#uI
z@QhQOhJS0D`1p3%_?3IIp0Os-NyW0s*&ixVt{J8Z#`zX8dgTL^A1Uf^bjv|vD_=AN
zv7)srv~lqJg9F~XR3~%>A~yl_X(2V|c4}%QMG9uf#NuF6zjZHhy-al>e#|38-lEHb
z;R7QLu)-!$jA_f<Vy7rd8qc$NmN*aHA6K}xnXZ%9Z26xoz`C12UV_MO&kQ4x9qtRv
z$NIFDfZNHkJmX5MJwvMPGYR1OZZyCkk3_TW@))X{gw>{|UYRXbTu+`cXQaybI&PNc
zah+PM((jjw?&Fg48C7bD&s-)dr`R1vuai%A_aEO@Iw4x@DLCK&$iFfM9ZM#jJ*~99
zXpVK?qKtDDV3)8aiBF;;cZhhi7Hs0T6;0h537WX9()ElS6pkQt+qlamOVpz|o|)TP
zNmVZP<%_ErSIC1HNAoR*%Te&fXnu_6-_Qn#s?du%dtcX_dJ~(VWc0x{d>EG){}#X&
zx-VhZVYkcSsSKWl?`r(UFL(N$qr-`4AElKUzt>&U>+|wP?ot>|aZ0;t!sh3S>cH35
z#^|T5!sir&qR5~ob#CMB3bZk%Duz;D2joh!m6WAAV|XNAB0hn`>EKGDr(!(rj7w8^
z*RlD;7R(-X{Yd2N$VHBOPzw-gL`H2i4ygF={QFd+NmX;4AqXhnIG!dM%w~hj`?7l-
zcz+>dQ-3oT`*bE*!_=`Wc+28C>McX&*iZNAAJtzbKs^>?wV`*wv-&`5x~FGd{z2u4
zvZ02um?w9~T`v}_rykSSRxGH2Vc?#AVYSQb(s;ZM6bpHV<FKv(+K^;IGwmlim}ZeN
z1NDNx#UhD_HOro5b7*tY<cN1l?WaqNf{!k|bHTF%?1=n>zvYEo%aX65K)%_e#l};p
z?dX@i34N%qlhE3o2o$}}?b5R^li`9jB<VV5!2X=7Ni_RYvzxl)&D!TqK&@Usp9kFG
z=Ws#dKkWR+N2stCyhX`qTx7y;mO|)sQ%!wzBB`O1H3nlw$7m3c)jH(69|rK8_Lv*3
zTlh>oqbry#LT#Qo7Lu2;+6s=DVOVy+^}Um<aY2OW=Vag9J6KVgy|xS^e@Uq(J!H)7
zXh2jh&aKibn?{#M(+^i)uWt+A&(G(V{^95A>*vw;%=1)R@!Py#k6H1<uAK`qh?}G+
zMjt_lT4KM!<!3)<mp`I=2pvV!t04E(rdKdt=hRth@A=YEqq4Z;S3#=4o1QapaYoG3
z5}5foGOREzH7c>8`~vi*Z2a8C=WOvt+WAwuUNYmn5JtX#C`gjC0a5;FI3iZ6a0OW{
zx^(mv_lpe%$LT2IUgpxq9Xb--{33MEWyF!Pq0Pf5X2QBJY$CxDuMI%3fEr$ML|Q<k
z)^KC;u}qUQQ<b&Tx;a&a+_mHbF~skLniJ=At4}AgQno1($%=Ic6m)OHtgfXYUE-rd
zo+;6<=uU#GQe>-zE+qunyai{w<U{Ko|82bI)o-)9w*C*s-Z40nux%TR?FlD#Cbn(c
zxntYb#I|kQwrzW2+uA%^-=f~CZ=e0sU42#m>#9EMJm@>Ov4);Qva=2rv-N~fso(I1
z$GXuIx)j*eZucy?<j?WX-mnE4cV)p<EFT9W!CSQJd+B6b7vi@!YpKsX#jEj%;P8;n
zQ(s4{euxhN=l>+vJ`v#XV&H!IZ_NMuJT|no`M;Z!{x>S$%M2}B>=Cq)oyR{AS5p7h
z=P!ahCDuVa4Uq`yKs&rC{0C!=#to<vKqQvzL4BXEGI!*e4C6y_L<AzD@mVvrc$iG5
z4}HImXL;Sd3h^pz+&_I-d>z{q%9ayK%4A_4S0>Ute0a1vy<Vf<Y??ksF1!lTGo}t5
zns`;GmXbX5!Isa4ta!9OEuY@p0Hc+UQy*T<>N7eO8AIo5lGdHZ)ow++Oo;evi1^+<
zm5VzmY-g9Jo=xgDi&GvZ%WHt?l`{h$7Nv%qY10*K7TwbO!;SNb*VBJq#oJSCDfO+|
z!?X@Q?eY^1Q>QPtr!TLMo(+pHd`D6m7a27jdutQ=?^a!%8c`Kp*)?nxuWM5#-8hFo
zdU(SFTDFYyM+|cE>+LQsooG|_nwsd83N~`6tkr!SU7Ky4sGJ-e+)w>(_MUck9wp!U
zoSaOWXu59)C#SoYGL4%#r*2K##rp+covG~#9~XNM$0h~cs${m6n8hKBSJkdm7xU_K
zatogI4GJY3a;=HqF@TyQTT_efFTo<dWRarma^+9;Gp|mGMf{Nv5ni9yhBu$i2})<4
zZ+)-y17`)avjFXptGwlvhWpncuVy@%N0a8%Dp|JuxfBdap6*X-2}EC$?nJqfgce=j
z#|zt?@{!91HCvMmwTcMGh9N42=cUpU(+$LF^c?(8ufk!z^Qlu4A6`y#hV%oIy6hf}
zNCih9_x5#*m$MEGU0*KD+iPEWU)9hwzPFOohq0}iY=ByZspj@WR2yqqTX9$$dQzLq
z9mxb}8(<stE~&Fdv&}-IjA=!<+WX%`(FHlmE5UQU7^x>lQ6;5=aV<WI=98I7bzB#d
zd%V$+=7e|po5L>-vF+9@$+_I$7ip7@ZBJcvY@s4&VU@HfRTp!QMC9j(cO>TCZPL>@
z;biGdVS~yKIiuxa7b!{I09sp!Io1qzj_OPhzJmmQIgJXGFxBd!<AkuxdYsCd4>#mC
z0Cm<xi_oQp3iHeX?~>dVnkjyF;&-J<M#hq0)T<q<ZlP(!jEjNC<n3#Z=|sd9TMnOs
zVY-+5Lm%+S#9AtO4IeVcywGUe$s&R1o1yjz&#1!ED>}!#=1SU|-3PYN$d=tesXP8I
z{T(s~kpnl0LnuB3Gt_hlWN2ZScneYAPaw=jRbvhLQ}so-s9^Q4It5bCm3oU`nKf9O
z8Ol%MgXpB```%U<nRF>=N>5ao@FCMaKcUdy<p<CFq6v+VxpSTC0a0TlRN2{6Y-bzC
zpRV|Z2CNbz#GQ?)ZkWg;EMUk9ozl<z2Jz?p1_o*5OX98Etj15Rup}luC@52JTH-j5
zA4cM+?w0)uyn+USgHT~Tcqqn2VdAEK*{kZ7En-xb%m)E(ok^cgxu)7}aN~z~l#&S2
zgG@XM>n{#LCuw@l({%F-+gYs{>#Mg1lo}PW&g5PhZIhM<-EqgxdKeFcoW*xbMp9|E
z`({M88@<;}FL^1?tRX`aMa`a@IuX6uMvYehK*FPu5!Fmx7Q&r(x;h-ar4y}Z$8c6t
zqNOIUy2Lw_(`WqCTm=s)&62zGNPIFbrMU^bq^9;|1|o^G0~dk#eJ3?<UE!x<8RPp-
zi89u!dbvTFVx97kBB|}ywWJEs^C>IJ$H%WN%gcPeW3PaFi4kwRZs46*x_rm=wyZ|(
z8evUSKkZ(exL)#Ia{J&YH%0I-Vl}QAU!}RW)b`FnL}Ecthb}XaZl?p}W>eBR)<0E8
z-P#t<Xl(*ch*6$8qn}8F&VmPuzhF#}y;!ZS$Wo6z)T$2-0#Z&FG4oNqDt!>k^}~;V
z%k_0G^M0q%E^sMEeIPB-TS6_3Hda5$M>S3_&@53{WRd2q^M0eO(8FwoSYp18vJkDv
z$5{$j6WS83*u7%34S$2I#8R=4!2b(MonmxF*xERuw~S4R`W#NF0AwR$M5&kLv{PI4
z?GsGj{8ATw*vJ|+b(f`?71(w_s8k#GNtk~{!67-D*!5D5OHYv5s@|o2LF9B6@ZM!s
z>L&foRgzbowe-eMd)r-Qyd}`_A$8kvp&7zX;b0`P`#H=5yfE;_zg?_E$0=N0ll44y
zFpJ33gw-*22G_-Cp?3I>DUn#L6v#;A-yy$*i^Vzo4q{aU+s;2e1K5b&38Gj~>{?fF
zB6AF_Oq4+^5WN00NJ@5gIqGB9V;k>Ga4+a+zmzhyg=zOV$~dzO<8B;en)k=B20@`h
zH=PUrRv(ILTk&(?YFnMly|=dN>o=*j1Edu;OQ@9@=jQ8_`byg7p2W1AE8f?Xdfogt
zlkazVZ({s1pTajv#ZU3aLz%)i+Hazz7-c?1@8b~hN8+WOyf-5#&Qm?U52<Yvg4|6u
z0-U6-)hH$_0kXxYh4RZR=UG1ZGX<JAr;VNoyK_D-_zKMC^@|e;;Q_@xhg#%W$m)4W
zcd5aEMS8q<SIV25k?>$3zFQy#P_f!HNLQRn$jE76osuu?i?oi=ps{>`U#s9pAfj@i
zly$P*Q*9fg84n##R%QM}BXgqK7tPM&J26%X&U>6mBk4DrwIM6^2zTH*K*Y5#aqHp?
z6~T`&)I&mD6W&@2eH7i$AKM8Ni=Bfa@RNl@L{U*rJGAs{|H4-Du4B6@$`%S>?|`X#
zUH6*ksi~nY_CspBkGmpt-4L@>k8Telt)L&gN>w+QqaZb{?=9piv`O53MpQf47cDYa
z3YTb|ny#-;F*w)0L_RsI?$26mnx?*<&6}dUteOlfsthV{wXEHLX<4WE)-6R>xmY!2
z;s59Ca@AsId`Ok6dHox_iq%=+>bw^*IWM$%mz*=8br5tJ`o2^O@R3i*AaB*9q6Ihu
z&E&6$hv8-CGt$|fhi~-TDM@OOy0rJ5;3#`>fWf_hoR8yj0$mKxoQAws>;dKAhNY~f
z-GcV1WdK45bR)AZZSfkCWNq)dB0i9!cQ21I20p+cx6vjGd5t}$eS?j0z5)CGOQgRu
zidVFPe}uO@j~t-wzG~~Axjvy%pAXL{Cy{b|??BY<pb)-v+jNNj04x9q5ZNVf4Z=wP
zDwpjt?)B*m4X$;(n_-l?%c4YZg>l1eSHX)`-$1FjbAf4xcm={+{ZjL^S8d%4$x-ps
z-aV`x18lgpM=?>tSk>dXT!IL$XWk*>=^9*GVYrr!+r`XZE6>)}Q@wf_oKYtSco$8G
zuTsrzfqUU0B8NDU?}FV5qRSpw|5}u(fHvFV;yDcxuvk^bKR~XFWZotyr+!|dJqphC
zHS6poRn*IvR2b!3HUE8KssJTZ`dHO~@QL209ej`UPh=yZ;>W(AZrv2T1mWQiBOS_a
z4C^u1XCxaV(Go%TussNyC4QDuU(2z7?0IMq;YLI?3W=GqT~D+_tDN6=pU>vl>$@0E
z7}`MMOfHuu(nR}fl&{)bPtGo4oE}^k5`#-U{6lh}``b@+%EZh=Z_!HU5{pGm!h6NH
zPXX^YO9qS4B7pR?`{(J@;GK^Bj&UYl;t_i$JqqMGjRpIa-7>nt1kH5Hewo_#U*+1N
zZYIl!hGQlR7vJE2ZX+7^Re=9><mq6)jPsv2FaA+ar|(yCOs8jk;~6bWtJ069fjOr)
z)#9;(DCR+?$--mZ@woU6csl-hr%UcbG@yMDI(*2(57M9YZWNEmwvI)lCw)UvHRXE|
zrcpcM(Y(%%aU&Y8qp^n&ntZ;gT+Fy!i_U>Yij0!wZ1H(~41^t1ldiFFsH<b`jQXV4
z+5J;Cl0J)*nLE+Iu6Fqk3wc<%;@$zRgT4vo-Di7YrZHQt7D~Eo{Ym}HCs*yvAw+zH
zh|}>lcc2>+K|og|DbSkrYICu&7IB1D7_uF0J2HG6A_DsT-)6=t5(_<2Im%<A1V4L7
zFsMPx=04P9BK7^IDhA)Q#ko?`A=J8|%&!<%(<xe?e?NNd6SJ;0)iGh_P^P<dT9}P~
zB%1DnD~S_Vhj=){aaK3)x+ty6-_x!l73&ohPP`8sWo&A&uiV=PcM`ZIWV5gX2sc6~
zZ+R|ntKEezo^U!MR{o!wH7KvR3_JZ8CurkVE7wYNBd5^(bJG!iF?Z-4X0E?Cgj#47
zQ;S2qAps$65KJNCe3r)sUb;JSBQuNKk7Pq%i+u2Rz!$y2(k~}PqkrCrEi~~ij%PR^
zW5|^x`h4G|M3GjUNQ}r-vbRx%v)q=-5q<IZKa`%)<{%vNc-3it4`Zz=bl8rurXKGu
zh1m6kyj3lIn7Qq?sNRo%F2DT``f%BOBU}#x2uK3szdO~9-Rv0u8+mB?13jXC{y>ij
zAW;`DqzKrvgSWAT+vvT{5oBxaXjueWPLs+g;Nj&N&9B!TUZcr098DRMP(-Kk+|SOm
zx>^6>4yO~i`fN;4HZkaYY~rflVF6PVow8;>mc>9e|DE};zy;~)R`CtH-@!Mk@Zx(k
zGG#Bq0jwZ@DhV@Y*^7XU?D@e*L8Q&ndlmY<H|%@1A%3DTkzQSq9HBKN(V{c!P>ZPx
z`T69`i2R1=_Y_bV`Lg9xnK%}9(TDw|KQLd^-&WT~uEw(b`w^Fv0^sSUAqyr1Xr<iA
zkZAPEP^~g0hV46nbj$6T{v<q<E~L#ITSxO2ny()HD>j61uH?E*ixj-rE?dg3b3-u!
z4$`3n9o}g8Qf!<tkPx{D$qH+gG8!GeT=U6u$MM`FQLbNa_$#X+y?6Ft#ePFe_l5QM
z>r>c*McA()4&%1BAm^7qU7gc3tq;C-kAE<dj1#A9T}0B$RXd4&221H%6+B6iAE`tm
zF!Uu?j|XH_*vF<aevM8{b!6bs`mV=i1zuUEzD%oif9e?OcLv4^w|q`6iY&ThyG$xM
zfTaSGbw&f{rY)m~VvL+`vNWS7c0UMjuWoT4bLp2|6tgR_nZZG%84U#IWSsdK^X@o)
z2s1cukX*OklTZTuDK8qgKd93yzd~MUOmgdWO54ZmB9S7hMnHI;qP?J&*vi13y$l<%
z5E&Ea>xo1*d$$%JtyF?!nH=T2s$@a?(s1$a1&2Zfe&@B%-{alo^Bd>5@CIbGet`hr
z`^F`@uD%X7;fxxkuVpSiTm(qEt{&RzuNw$o1gDboy~iSza-Y;K>A_v6s*CN^0?fbJ
z#FCjJ*>BV@MQ(N5sa*NeE*CeyPL}sx9qlfl9<`nLnWXv%NO1_qRriQnEb_3#)IYlG
z3K4oVJ!2w!A!d~Srbz0FLvrZvffgvTY|R=3tS;uZ1>EjzO5>R=bHMFxu&w@j^F=V-
zSz3MTzs3Hk*U*Fot9^v=3=W;>PR?rHGAkgQzMOzMw_5c9H}Pc1;z|uqa2{3p6;9zf
zwD-rOR6YY~&nvK+H&D;f^cdPO^mTUewir-qj>>@~MQ5yADp3QUlcmy(D|$D7${Z;H
z&px4!`Bzy9TzaYfAKsyaG5+oe82C45Vc+hL{Wst@KUh1lP?5G-i{Hn&`ngv1<Dx7b
zC1dx-*~o+F;V+p<vbc0idPe7ybC4I!aN;vNYS{GLcOSm+Gt*;1=85QL;AM@Plfw=v
zn0(Dl&mQ?c+zoweS_bQLmDbEMHZs;{Nr$NcY&->fwVN3;OMk-2@|=plFn>xUbV&;s
zopcg|L}Xf>s1s>)$`h+70im`@F|+41&Mmz(!U76?`kYAOVR)PW_HSy<05-Y%2bGjl
z;1ilc*@>zb@Yx#7=jci<KP_cz9Tw}G7!8m7+DKX$BsH-0*4nY-?F5JI1RIOs44s60
zsu)HQ?F8SB+NfESN#L)y^#oig;A0d1+|AUZ`{VxH<{Gh`)T0SW;E^u?d>clI$2yWd
zM{X`sf5<g3{f5LLw$@b$R5?OmT22@9{)ALgZ+BNq*Zy*y=oNTHPmM)~+zy;l_$m(k
zFlMo7`%6|2$i&2dWSr_D3L8(7Nbrsf+Nm3A9bQ39M~eTVe`Bad0KAtezJ4#!mNxXG
zw~rA!r{MVJq6Te~ST=cpYVH)Hvz(9o2<XF`QC~+qcn3@?R4Au1QB;iU{I<-JUpJDb
zD$=cK&q<q1`i1TvX=xRXJKx&f$!HG$vOVlYmT`e!ezzK@ObV%0K^o%Xd7JAUph0ED
zOHUCR!WnnJ;h~!@f3W40MS$Wqu$*IQ#-OG<-ZHREDAi~ciB@oOSN?5w?xRdcf7H^S
zHvqxG#-kqsg%7^20F?G$JW?t&r6rjgpmD2%RykaEH@~Tf{JPUlk1ffCcIQlw%`y{Y
z6|*HK9TiF>;8OIr5`eBJCdIQW2Wn>`b@2Ju=3S|3I(6baq0+bJlPZD-w!7cBF@USD
zGh~VNaTQq7(i#C?T9fjyWzt);V3MR|PEk3v6_sF;9g=@;RB&Fn?tDjFo$ws-cx_*u
zaH*~PHAADkVoLR+EDKe&R<{XNa8hn>qtIqTy+$eaSM*Mk*9G+cVYsS;Nui)xF^uSP
z^KlK5OWa)fp8-AQ+`YlCKPfA0DF1zSIT#!M7uqaIUBh;R9m(gpCe_7H(7~8$+5p3>
zTI7sG1iktf$t4~gvQb!b+LB86-CXgvw`u7>B6UYK9!NswEBiB?p)1#HkbY(*c+M0l
z+;-P{m8%!?3oh>z)+Q;nhZjy?S7=Te`5t4!y?UW{D;$U$K`<(w`uL##t2Y=?CGxX+
zA|rnNs3}Mx#IFM}z1gF4|C^>Y$QQP00;d(EA(Z+=<mk+M)M9SEUR69Pk{hT_c4?3+
zQM>@s6i0BKUQ~i?Yys{#T9gj)>`G`D4B@g~(UyVp+kNM@l;Jdf=A0768woP^$PW;J
zgqP#b*cxn3nK0%P#hqt988I+9mUhXL^`#vE8oQJ|#=vtII4W@9j+Yj;(epIO8vQHx
zcE7TIOX2`Rm)kW>bi~_<&xN=$;A#4DiXS2d_`MF{1b&awa9;)b5=1SX#%wm>PYkR0
zl{BP8T*4rS2A@wA%NAbg%CPNDaB|>TqSPUaL1rKoKtf$(J4!0YWsxD*$1e?iZ08#D
z<c-6jyG0PnV@RCCEc0u6M*qW|nGp@cyEP{a3a&{j_tan<_uqu#8%Uum1N^2&I7n_N
zTLI$q$i&=<jhnZMLaC)VT+wavT8V$%mI*nyd6(4BcRWyI*Gk^uEH$EwlLFsnMq34_
zq^lDCIZdR*v}BQ?;B7{&qsPuig|_93<ns-zwndKNd^(U+yGOfHIx>?~-_6jX<tk@>
z9~a)t*XWL}pG~vVa4QC2`9x7<-TwifQP|Q7NcY#j;L=BDAMO8z>}jKyxE@;UQE@c9
zUVgCirCGUTf`dvNbF26WvN4tN2+QO8>(@BdJlZ@#Yt#-rTMJCqjJnTyJaL2iaBtu$
zef6G-0N4&CBd0p@v*ymyR=N*zuq7~7h|PMv_$Sd@Hz;haLCZiM6HM!)9D!;N_k4G)
zwvXJWnRELgMF*^}iJ1|f>Jm1w;F31yI8T7$tCs*_d}+J^a1aEH#sR;L59*2VGkk>C
z6qCA1C&&GlqfsVi|E2<ecy6Ul1&XD<3Il=qYUF?&7Xo4ouT5V=6EOtMi7a)}igq2}
zou+@ayw?ga$ENO&JivUHIG|_L+~Vv0nJ`bKIS<TXR{%D7HRLdP4TO%4<lAKL9JY?G
zjFP^S^uB+Pzr-9IXL?s$uC#tP39a&=`ix8zV8*Ic%Q8=iW{H;6eVv8RcqYPVdV26D
zUdd_CHZvX&`Fk9dnPys;Io5j@7G0m2G%e5#CgnOrZG}xQfXk0GAaw5_*qz25rBW)_
z-=scR*IqHb4z+@#{;1WMrWn^%v39kHx_9pYN30_$591q&YusLKhmeanrQWzeDKN-q
zhEmXi=I{azB17FR7<LyM^4IjeIq9f+EXmI<v&ioAuk_Z<k<`I4T%rp5^i$SWfg*kR
zZ)0@{WRyr*yFG@EuHis>EI9Av7C6;rsOmMmo@9ZkutFFg^O^-pCh_4keRD_Gye04H
zdpuR<H@w2>ehE#3P?<lcsL(^MfMIuH?h7uAX3GQNtSMC2FFD8GpVhx8@U~Hz8b|0<
z_|MEK6aSRC2B{JkPkLLoSb3<MX-{n(ynDP`n$lDcp+o^0MS#{k#RX5@rSFhQS<7=t
zCsI$5mCNT*bA^fAZy(F-XiT57s3b`%(4}D<Kc<(>-(PA;&+cFLhdv`uM+Nv++k7id
z$v5>v9)BL9(b!(&Uj?TWh%RliX)!-mPMCfHl^nQu?`RD7lc&HxIiL--)MGN<GhhGe
z59Hg0k|j_MfloQgxKSq4?;#r7_}D!jM)RHH9IUll!8EK8^W>-b5!Pl^p?IAc^5my%
z6i=3{{wghK&7Qn5ZW+#_ys7W~`9oxmFH6Ft%#IojrpXUU-AY8wET*=@c1_zmWwih4
zj;>3hUi_2Rv0WgaNTDic*Vk<XIQZ7CRZy2#`FIHfYbGq5GC<-wQ29G2yEyt00Nle?
zDyMe$S3~FPfLeD#%&S2Gp1x3IzRAQW3eQ?hKP#qH@$j~~am61x@6pZz*GbE;5{vcw
ze>kgvFqJMf5rKfb=>NO3%E;X1|9c<0)bv!^6h-;Yk(=8MSM&Ea$f4Rx8sNXE(z64W
z{YSEy?7~tT-ZWp0SJ}3@^V#lcQivr1yQ!kRw6#<=?#2?6ot^FT(Jt0C#j+Y$;O3J9
z*0KNxvE%)mGVS7f15;fLGJQ<c-pL*GEb$SNYGjvcy1*{cVTT!PC-6(L6{$@8DsV?c
zQ23lVHIxF4_aKfAWfYDv?*b&`H``(_d<*Oi!?ga<mJq6GY>EGg(E>qG1_3GouiPMa
z0D->*cSeXGh71^WfYtaQ8kUIBKM|xDCPYY2b}t{f!kZvb#=3>Qxv{mwFdM0TZUGCQ
zSQ82Q=>~$~S7<k^sSJ}f?yb|u<OyT8VV<AuC@NtiJ9ANK<5admBXq#i(sIV%4CSc%
zFAqy6TXg$EK)p9{C}W)PPk1@W^F1}(@YZSY98a|99!X(y(>58t0M1)%@GVL*1s-5u
z!w&S5g#@%_M%2gdxD&6N<NXGK^|OQZWG5`O$^Ka(9ZjYQqNfYuFkmpc+Q)B7;%QC$
zJ;Bo~Di<DkI`U&H{|_?Og^(_*nZZbh<wx{~T(QBOdE$_x>Cx3Pw)ax#hMnCU0q&<Z
z2?J}#&9UZKlsL-SmwupcbO>KlSRd>gi^r$^!}-`y8<7yALn1jcyZ6$Q^AvzEXEHX4
z^@a9AU<VKckz1(ejX%wsnVqgZ?4?K)0?z5EuM6J<!Fo&ZN-y#1IwZJk1rU_nt=5+U
z^_03x6g590O%wWIZ(?rwl~=0hxfa`5s>`e&;o>E%e~PiQ9V<<HQ|RPrC2XS(e#)>Q
z1U!ah;^@M}UagoB>Ko+~%v4WP*WLz794AZOdw<LEPQz$*$*d8}FrefxtwPY{<@AeT
zqzu=hUO0YWen$DOaNPKw>-w(Y^PlA9356%qFvA0Qq)Yl_SoyDm5SXL;J=KTD$UlO3
zp|+3}MN5wRvM`Q7TsXrSnBPTZ@@VqxX@-v5FkTVd|MnF)5RlCwDO3h*&C4&t9*L)q
z7(LDQ8QQDGwF%Ijf{Ba3Zw3J&jMDMXo+?*W7V_%R+Cw%YuQo>Q8=N2RbGoGYEJ-#^
z?!nrQUd&S+oAV|!qvo~0F0Xt`BD|d3zy)7#>t=pCfgprq7H{L?@p|lMd8^?^v?=Ga
zx&w5Fbp+oa4oV!6!nDfv*D(w#V0VP@UHDy6AjwC{C4515PLh4ng#Sidq+WsSz*{a=
zgMW{pJ5kRFha$UPVp$t(VXz61cpZQ6h>lGx%&oni+}vfs&g8H?!OzHsn36k;UQ2J|
zynG$J++0|=8Of#KeGbjg(n?sKJ<UNGj?I}37CcV$eX+tfjDXX1dmq*p#L48Y+g<(E
zvNo-%)nqOs{TxeXu-TGgfT+KM2qhVm7S=%8lB|q_wi2w^Qb^$XOWljS87@w;DjUpk
zJ8Q#K|Cqs@POsV9<QO^NbK}oB45rp8aYRXk%4EOAp~?Bg`Lg>o$2l{z-Kwy&wK1@=
zGEgyL{Vc_7=jnr=Nx10-T%{PRM-n89k7mcwb?wq|MiC|k;1s?lo-a+3i1Fu^by$a@
zzGH{Ai?HT50@Vq<qC_q2GZ(;8fzLzPV>Y_S-t!#>_aAG#u^`zY_$7{}fECN!q_j?L
z#{G2Re(#R*{dm;PmFBSr=Q=Ml<d?a<KX3@YjU?N<6*)`%R%VrQZ0XFd(1Q!V&dcdP
ze($MoGo1sZ!x_+lImDkkV}5k;oQ}V$XAk0a@30@n<f3P|vtfsBgYEl*J@1B};rHvN
z(H=sUpQaaoEV!U$k=>AS&CWH$RUxZRouk@(SZxL6acHb#U~lbqY{<-wgOj_9orC*}
zos*NB=grQ;&DmknP{d4Q-;}vijc(1tdH?Vxr6Q&Pf0_>v>ky;9QDjV6)%IW#+SS0`
zW?B>v^V_Hj6=Gw@g?@J61y85zK-Y~#AUt_FC};oh?YnZFX7}6TxprNI_e}dfpw5GN
zJ!A47)VUQAKDofyD{cTEM`qyCZnO<gEKMdU$lfGfDU#r(BcPNbM?kLJCX?VMRAGgE
zeo!jr0nSvh(iW8CQCSZ!YlbilxbQXbPLqyUG9w(wN+G8ZMoAi4X}p=C^YC;!y*?NO
z@1_=nP#okAEt4BYB;DaCBa|7DsXt>dv|@~;fivyQFyRkTsDQZ}D9v}ZNSPB=T2pBZ
zy}4EmHwGp*vZO?AL|5XAlo1gXbeEXYrlw%T#j*o{^qbtMT_JN)G;(`A@iEw*yG3c!
ziq&=?9%D^<$ydBbX3eF&;&vJG&UrJifX)1+bN=`l`5R%}E1fZ;R0fhIJaXBMS+*0(
z+0XG(l9e%1-p+64?rM@JN5vBBI8U(DaS{;}1Q=TMs_wW!eUJzv)wD3N>4l*mT;?){
zn{;nqK9EVZ{;J;fh-AR3Fq1S%4>T_^ZW|}3^9RuJcK`d^;+PgJ7FU&GoCg7E)1Y<N
z^}8j%4K%<~v6I)YW4;QV(@L6V{bQ%{Dt=Ju4BGTq4N5;mZD3$wuZDc&5v<d;XeSvn
z_I&s)_+XgDfl3pT>1a;oWUCmV0-?^~&BV#c$Hm>5#mn`dqIIq=8C<CKrA83B2E)Q;
zRT)>n5;n!Wcm>N`hv4^etv>gRBD~h>qF|I1@>4jJ8%4f7opA2uj@Gemf$Hd3acO!E
ze^Xs}Vd$5Zg~WLgKmpj<W_+Y<#k!K7r>a+2rTK%exj%5)R^>6oYj2zvChFVB8b<rL
z{7+`-`u;~pd^%u?n!D(T>N?LW$%}18GQQBR?MCQt83w5^D&g#TF`z7O;5Tvc;+u9b
z;u!a_(@E6o%S5?qUd|3`0Gxd#mob{?aB}~J)SFEeiO{Bn`8kT80{}uxi&U3N)kr1T
zH@jXF7;zj*ganp~VM$wyohS4Qw0aj7D|q)8nsTy|064unH53%R%huf^aB-d@x>UF&
zFCu-|t;pZde;+R6w@8Rt=?2miNH1b7sJ|7SP%NCH(p(<NX!2*byW>f^tQ175Y??)v
zWWuL1>puUYZ7?p%DM(Yb<~por%b;a6H=m&@p@{^X->qKqYFsv$C(#C0ok?g>hg!2F
zW8rV-n>6I!A$4eJso<Av{wg4GWRjeM7Si~)ZvtYE!eVGU5~yxG$U%A$1%$KL0$D{W
zxaPJ-1cff8(wRRmPf$nOM;SInZZC-RlQ6A}Vev99*-J8l2WCfuIG_S6gn5deR!8SW
zMTEk7p*cKGqYUMHWoAByP_12{m2JE)iy2ea&#b9bD1<tRQ~@hXA1crc8eX*)-%o{H
zh+}l*UEOeOXi2E*b1H5m9j$=gQv_X-mI|5%h<s%}<TOXlw?Dv+yPa=bX0_v$0bSF@
zc;UCP=;7AbI(&`*HLV>n<!DtEnFDs=l%#o*pflcU<n(!Oe>k~MwcRTv5Cb&X)uG=D
z9a~%Z+TaE)=l3;f#kU&`2?)|Cha^M0tiZqbb+fWpMj3HZX;Vfo;4Nvy4YUo5m%&Om
zEBSXD{58rElN2du%$eqK8aVJQeP|1JpY}`)RCCw?iZ5pu2Q5CH=+|dedzexuWWjEb
z$O1&tBFsdO;W?kGQE|L`ELtAZ-awg8@6!(kZdT13U>}m$<803R8D@@^Aw;V00g>h1
z<U>vtN=8ZdcMO5G&d)V$L%$I11^&Hem5pPxbFB!N_o^(HnSWc){Z>1xoF5#YlyP1S
zC|7F{HBUNqqV8QOuyPPgvR5EE4hkx)b8-#z8N_9s?Ul|YnH3sGRffMj<5}=>*g-oE
z{4IY*jmKGqR@Zt+4pMkpkBRgPP90_PP9%s<M!HHvioObsT3EwRM1^2Xa4(n$<=Gf)
z*=3+lEqi3MdxsL`T?AW@ICm{p%*U5sJU#%*1KUFXjDy4U67MuU-zl~-N134Cu%&cJ
zG--!Poqk+QH&x?6yIterJs&A3$S*rhjcRCVviu#d{iN&~fF`L+aY!>kaA_d@Iw8Le
zKHkQd0{)X$`yrM#&GcRgGp~TJaF$zDUBvQLNS<%kXXJCPn_?*vkl)5czm8S^Bw_f`
zeMyauGS<V@`7zfkg+e26DZnMj=!shOB88MMy<}Y2+rqOHDZLFW5L{S+0q_V{QA`nQ
z(B}BvAgq1d%?`a%XPX_XGO6-BjsxaQ+`qcEAQ;mAO^;Af8hVeMs8kwW?mAHPI5OVe
z3{)|lG_AU0Wv?N%U4yo9a#zLOjx;?}-oR0@O9ie{A)JxBuGRbCfAJ2f-MmNz*;E|B
zwNoh5?<j;j{+ZrTe<^sTI1MGoiV^HEKR|2Z+VcB}pVBXYnI5z(6C>rB3bHuS{k?sU
zHzS*Yb4ISCsX7P&Xz9`>4tlZU0fW$!1+)$$z6W}Qfe21ySlJK`o9*FKQKVNAkoB35
zS)Nk^=pkp)dfX*CUl%WTf<=t84zd1VsuKUUXZgZ#dOlsB*E`4G_GT~Qs&5(4Tr0kC
zcyKAS1)!>~3!h)!Olh^`rxF&ygNB24BxRTV^h+v_=;Zx_Jk!()#y7HOsH%tsd?qqu
zn0Ls4hK99NKvGMBL=;~+cqlznBkFcBlTf@maYT$YKf?>%Lz-2qB)wT==d9g^l5#ax
z@tAig&mOwMF>n6W$z&(eVuO3_S&A>(hY5SgO=G_53e!$+oQLFg2w6D+?dCn?wABX9
zB9ba1zmVGbdzSA7dc+&qZv8?NRj>*i6BkCd#4HU*vDeXNi;V^`XPqg&TXF{v4rgo=
zKVE?)4NJl+Y^A=Mo<g$iZGo~cn3^V{&Mx<@T$Hs`7QEdMcgvHWn>CcS>Nk*x0v^4X
zs1M#PPA{-uFH8p7)Ct1U94AQQ9FLVQ*z&<~1ut+8GBo|dWjqMnk{MBoLTIRMnrRBZ
zNMwhOE6kP=FP@78{JTc|Kt~;=lq{k-du384Z2tbU#Ms(-pj1*3m&DhrKmgHuwvt9}
zd)VDPedfSaD%2d^3wTgho*7w)3`2BSM8wWnAtLcQW!pQTjTN(%_?mIc!&vqzfbR%N
z)uDhk72bezfpS?P?7aVjEIQt}yjq5_n_O~2+WpZw+**YXhCxl&*HVY#y&!`5Z8D76
zn3@dFdrsK=)XFy}J-p@_XQi3)P4O3^UK&`c75G{>3ggzALwFf1+aaseco=1YCYlQu
zh6WoSSf+|oacd@|rQZ>3XHC%TczPtuP%I-}pw^~R&6i26P=k1UR@2f1uXyfE4i0ZZ
z-NXN2F-Os<DnNf&O!^-rnDD<iD2yE({=b*@q@TF$b@Bf=ATf({1(O027qS-5A4v>Z
z2g~cqtmBJIEQ~MUFP17#J>X?3KAtlkVF{sKDDZ(cX6`4a-Ar7XzuQ4;^e4d*@(dUz
zuL;z+Piwjv|9GB*iPEy$02vv9|28i^=NiM10=M1n{@icrd(Ge@RA;nXk$&lhS4#UD
zAp#ezPA;4D&?A9%OON#%VI*UtzRHVTu6G|44i<GpW`eemBm0BjSJv&W2rSpm^EZPz
zM8yq~NF~-(`n;5MW;dA}ZuL2|3e65!p<R=l8x=W#Mr}f{GrmkXU!I>+jnH2xu;#iE
zRmaST&_s*O-b-<3VjhsMImtx&iW87Xq$^m;Y+JU-`ChTJW7E=w>OERtm@+QXL-I)F
z>LJx6iL`y~q+^dv>OQ%9Ej`42N%Otdq4MY9k&69AkM`kH_L~K6Y}MhfTlTr%X>@4K
zlJ2cm<Oxlyl2dO>*}kH1u0n4IfIg}OgK31jYf5C1hPEX5bx--bu8I(s)AVg@&Hb5S
zggE$`vm`!9gA(EX=O0&+C0i^wQ~+`anSB^}Itm4c$%!f?-UOWV`3}B4FoUprd~Bl<
z+R9HeV<)=B#GVF=75;MYbwMAAU_F6l?!Mq$9f~1;C$aF9BV4vhUq<on6A9Ojh4e7V
zL^cyR%QbYunYecb^{2vI-~(fMKlZ%DsjpcK$y5oB-F<v&g`s^`&=rE%K((?BbCB8s
zT=%L|=%#*(cp*#L6m!jTq?JOKddWH6kiW&PA_&tf-w;LF<YCFb%;iOB_Cdw6lerfW
z&Q=%SQLR}WQ$r1n{U}2fb2*a3yH{~6-<iqJtGw>QlMBugw1J8s+i+EdI?mtOzpN+~
zRexR@|JMl4l}Kr)O%$?VXi0^^0rsjKPJ?WPNR#s{J8YSF-5wqx<6|YXdue#qu;v|_
zB~AG4ke(p<RjJPFke-N|xs+omv}azG#3jQvGC9-xAN!;hkruMIYHyK~k+fT<CT6Jw
z_=26go75n_QTc)U^dd8gLk0)@97`{*cuX9<X63L;T}=!Y^0DNPW^h1P0q~c-h3sQI
z#EV#`G*9mbc>Xre2SM*3H$fg-tn{DBY2u-3ZCfXC(~R+CR~@N~$H?@pZ8nR1Tbbe~
zB}m5ThFMrxI#x>G9E}V4HG5_reK`9LR=ONmJ*8a7&E5jz4&^lJ)Z^q=eYqlOY-u|@
zZ)=RziJ257N5&=yp_1U5S3TPFKE$m0Cb8vvm@jL5b!K_rs4+Z%FO6pZ<t0XfS6-@@
zVsWmnH9QuT5}jr7<i}dA;!J~AH)wW_A5+8S`}Ai=ifFsTohR#pic-N7FxRRZ|0VzT
zS9Mj81H)fo;IFSQGwb(4!e(A-Xv?!UlctRz20f9RCg}olt}Wtx78jFWzguaWv`qo@
zuYw0u^5!rSl;|{zy>y{pgSAo_I5YI=DOLT2Yh=~4WW*lU;3<iKI3hOFr%Jb9t;=9D
zTti`j)~P_!i`-)kq6|FzaJDC=|Ju@HKm&R6KJ^%_3wL#{&>eN`DQ2n3@|lkefZeji
zjhX6jC;?)KLVm`}a|^buS`P9RsSH3fyegE+w}WwvR?5vdIPbM$U~aC=OcDyDfZbg+
zoPCmr`_Lhp2daVQS|KD;96<7>OzI6L3K_b^E0MjL1<SR28E*dN4~ED?*Y2JEG}BAV
z%+%SR>OvC;*J83}C6z!u0z=*S(gqiKWZ#D-mcggl@6Y2}V;O;p;Cw+2mPu;jcgTqb
z8WQr4U_-o5;8GIN3V&2aLqxqLh$C~6mA$S{%|&e)1>LUU@K4i6|B}HC)yrQ~mrHYo
zI~J6tsj$6Gd8*k2;_A*);-3J|aIRfR#OM<NN9aou5XQ9j?7gj7s)2^cJedz|&1*0;
zttus~ajw<C_>lWR;}EVrDl!9~jnmym?ZyF;A?V7B0CkJCQ?f(*mivZV>T0xC8dNb;
zZ`5KDd)0@9y#l7Y*A$)GM%e2e45<^<OBG+2VatiuNwJ5k4#QfN>+0U;Cf_$f#w00V
z+imA7uKzbA{GTF_gE-4QhaZ35-ye(pf156j_W##(*-9u<*O4k!cXopX0{+Ry00R0y
zFInp64jauVUo|DGBuW{HB4hJo5?K_oBe!mxSN0c59j7w;bNr}A3V!_PU^E@p+g%+%
z;{NeCT!%&m4s{(bE_H0BD>eey(F+$kq->7xpDQ)r*ziy9HM=DoArX-i6%|Y`J(3vQ
z%XZ2q?&Wv1IMBc;B(VdeGi~jM3$&C(+NKhd#?vM8qkq(Ld06^s1^5S#qi@|;!Cz=-
z^v13PihqY^CgAbNIi!;MgZ4zY7Zb)Il}t#JNDt$vhGk<P%0?-nFhQRRGZ~qTW^W}>
zeh|nOTwFZ79DJM=79N`C$!{=^HA#{M$totQ^)io5HBH~Kb!}TTofVr2Wk=YQ+jyv!
z9#5W5KPnP<)+~9%jjE$6G1JDSQ;iAJsXnKnj}>zHUeU-Ms1N#^Rq0@(Qbz!=_sMbW
z3(B)^4^OXXLcpuG3gd-5EOEkp^c`TJ+eyUo(7c#dL$D_7#rR)bA!`UgqPHXUZfHK_
z#oa!~cZK9{zPvKO^ZcJnc5-|_fUK7U=p;6CNoo=5aK0a?8V$WMn!hZ7c}d!gTygab
z)R9qF?4aJ0<;TyBmj#+ERvC?$nX~U-7Su~LdIiOdLBKU05W-});6O;aMVtv&X-*Y_
zi?#>nNP091?6oPNy`^5Q*y>Co9j6izM$tRUQO6<RvT^-k_PCtBGU6YD-y_YS9c;9T
zT4&_vc6<kzj9{q<*ve%6)Rqe-<cEOdP(C51AZI?gljd>&MM#s%?O?2Zpa`eA<2<vT
zR6Z$t=8!OQFiSypZcxYgGt+pR3vDQCI`LGxButY7SZnr=`-d+t{|4R*BvHfgXK1H;
zAbB`jtGB{73?d_q%af&dr{_A%L!x27eb<1aWZn9}jm;DA8yx#}-adkrWE0YOFbMu2
z?)I$!UG#YT?hhD2!s8B~{R;w?B+d(uG;la}J2FwR5OKeLZakRWiaRkwzF)DhBR71E
zk%AvR{h_YIbS!0nNe4Q!Dh6lLuL-DE6@9r&tcgJIau87Dg~i^hSC1wSn;xl9mI=rW
z#9~B7V0(GLd7=S>t)%^IT9RvR|I4G!Joe~Ew~VVu>*;3$GfM8zm#qGr!+Eu$mf3(B
z1DizN;uX=8oW|p&YgMt2C)mn^(F3y+5YmPQ@b0#(`*c2GRp3F3$|0vwlU%W2aHjF7
zb)1s+)Gls|zB>>lYXH+~2<G_3Bz{Sh<O0L~wr$+8I92-F#ca;$SW)9ktPhoLO%)me
z-%M|jZQgyQZpk>IH-`Qny<p84tV}<G$VW&)#W%dL`n#w~S8%wC@>6_p2{yMgxqNX7
z#VSL(`3Y35I@P0FRWoj4v*3EhRB#w)aE9_3yHL;2Uf&D+H0uD+H_>538hvR>8kXU-
zT|Q=GkuxsGC96!aC4+p@A6xEHadrZEhB(|96AwL}KP0&2EJ-n}%tmN$4jGkm^rXf;
zhx!NBM{otMD%~+pHK$D2ZTIcf1M<e6o=;I{Ne{mbQE7Iy9f$SM8WuVTWKLp@38i@^
zL4&Y{7!6S;L>0a{AHemlYlYA641#|d#bOHCfnf^@dj89yxMR~1p1U!pSao`%i^~O(
z!wi`JC^*~A^sn;^=>ErAQ4Y;)BDs|jw_Jgw8c{}v3C4)S+bX6KApN1w<P6_^R)Cp+
z4Br|a-;E%KGk$*{x1C3761)j5e<Y`f^R$xM-sq~=dwm4K5#ihy*eW)+HAais(7t6O
zzFr9LYY0fLHdD;*`+G%w1DjkXctS!fu{nQ;s6sL12w(uTE7k(9{0U17h3#v6HNnij
zg#KE2Sv4%+?Ru<v1|brCz-<Q27al~?bQxLHoSA7a;Q1p08HMx6q^xL%kgFC9J7;wn
z^=>)#hkgN^wvmZ0M!xws{hk!)rluo9oYHjcO%Wjq2aVj4)7d&J0H2&DGr$+}cvpcP
zQqF&$>-f}gk5$;o?n}6(4PN^<A~vD0FA<S4Mrf-om3ZeQz#;z(*C=r%Pe%72<8w^8
z1BzE-0m>S`y7c%38xUKgGPz&BZ4U`RqQ2OUbob@~`*DmkpGHx-a@AWlEwll0Ar)R;
zyzhQ<D>Mq?81xL2%MWkNFRe_7E-(jKx77#1Iaq_iKfIO!vfkP(#Vc)p%5J3AMX$#Y
zMvxPheyj8h?(D0JHBJ+8(W2#|X7j75g{H$%S~*(G;~}SyWm3tH^wcl)B(VoQ5pMuN
z<SB)6v9xDLe$Hj76!7Gdns`_SaMA7`)cTu50{5FnAR}2mBS7}HJqG+*sA7Qa?qNw`
zkv;XTAn(c2%TUU`!{d6vbBE1mi|vQzvXU&oa*28iv#xMju$ZhIZD?6?9yVtMD^Drz
za-M$^84BhJ-!+y-_#hOJcW7dY;jbd#zr%}-_F%8pSTB?nzdlo+eq9!plz%g~Ae&E;
znaeCbfF9w1f`onUSdt`7?-&ki^vXszko4YA6UhvoBYyhLhC3M1GIJKZ-k6bX-hK$N
zl3I=TFod4Ny&Dg|@-jG6o4z0y75EtIGk14&R2}R~Ype7>%iJiIB5q2cfq>?5{(p#u
z^lko2HPaNPrQ`beV~6jM1gA5wA)ahz#$XJBODLTZ2o^!hlo8`^LYmqpb%jexgcey}
z&zUvtK1rzf4NtzsedPJ8wR@jS^X2GVh?ZN6teaOsf%m0~`-KM8_n-QCxL_)>;eFmt
zxqrU(`~u`E5$tjBC&I{)Cw~Kx6R2PN`yq&k0N!}?gc?v~P#PfP0>9E|N@xEm!M-%E
z1HE9D)IO{b7=V`<1&YzM24clv*46-P{n-WacWVo8r2~OL1kf-$L<|!_dja1nzd~IQ
zzgWnW-UJY^)cagFb78tRuwa!y8^E?HL+2ESkGSyy>&~?WDN?<*uX(w-nGI3|Bq|Wg
z9?3YCnh%*%FER?=9L>$;v_j=G8`=F)8QmZLx2~b+HReDi*CtPm?6U|L|M-(<v98YT
z++5Nh;ZM=xV!mcZ)(v%k(tz7`W4<p=se21_s7#LrrjxglWMq!HV2W$w;TnK=otr!x
z61*>&&W2WVp;)QhS&8@g4s}C^7C!^N&Z_<by;yt-SFLxGx6?Db;Y6Shv!dxN7#!1N
z5bAI`;Rz}zd4u{1z)53bDn-(6?N?HvcdCas0?h{WP4!|sL)dnX-E^&Bc?FJ$O{8?V
zGi6E#Uz_!`_X+sks}E7gQK$HzYFjnmtkzJ6QBim~cZ6@2g#B&ScuhXOLD3ZU7_h;P
zj*(EZi^{YOLx(zZu7X^Q;P3?DQ^|v-gGU3bUt|h)!1zwPh+7v<)-+%NbS#j#H>yp<
zo8CgM=W<58V@ihvM3m}L%%`D8F~^p!rv8#jfG6E7cVNYSoz3D#b;dncFI*$qcC}>b
zd=HeKmx@LNg)lCi<e0#xb(&&Y9w?e2#nF~vKE42>@c0QvG7Il48)^Q8Cr@Hij=VHF
zH4=W(FIqaseyE|(P&Vp@s1~R=dx-{E=t~Hno2#^v&{6KWJKA6a6(%#Okx#8J+gs3^
z`jd7W)ZU>5l?m&6f&299VeJ$Dd#2U|UHh$cj1$z2wfm3xHi0GGgcjFms!Gi;^rlMj
z9vDrX_tZ96qqKkQ4WoDNvC-?r!{J{&AU|q9S5`JrO}GtN8x9yyAePfbl5@0P;EGU?
z&38L98t+4>`<Xd1KqP$yu|~?x$MrYQd3Sf>7!n~nE5|m*$5ESM0%PUSy-?bc^A2X0
zb_iX;N;mPUiEn^7=xD;9VkeT`6Zv1>c!LbHQl}a$R5U`q!)zloyg}KO#h@Q|xBs`*
zeGU4?!2?kM>LhBz20Q6V;3t)_VqOHNj&!MvBr!RG$-35q9DRj!8+!%}IpaBhSTi-_
z=>#f#zn@giqhj*1f9Pu%n-r$w{-%lS9yl!erl*-MdE5qxPM_{LrUoUen-mJZ3et5k
z8<wFTmWSc^Uw3IU11ClpZLp=Hhn5uCi1Flq$;)C}cnf0Gty1F$<$S>g?;#Yjb;NOJ
zF?nt-sYD)H-6kY8z_8RuRbUA~Hd9z_fa<8ZNOzB!Q<F^D;%J_nSc?w+Tr5wge8mR!
z@>*p1h<b13J&XO~V4#mCJ$Sb)_x|Qv<c$>q*&vq_)rm6h^ppk5zN1BvU3Xe**!;9j
ztt=VOfS8Wz$EEGv6xklr6_<__)oNkbSsoP1HDW1s3k;1x*zw19_a@k22CzqZEX)&5
z!PDu%7`%_BKoOiE2ghKeU+wtioFM9R)UFv|-$ryE)I;hXPuF}ES2at+T8;hKQNbbE
z<c4l0m568n+w()p-6VhSN6?@kE_CVRRtnMF!J%Mh9n8ccQk+lymPGD48x@IAEvxyn
zq3R}`<+3Z)_D=YTK^EyJ6HeL6Sm$<@y?)E^Y}WxcRpO)&a71)Xi%wdFNPX#kbL12e
zKU^`v;97-+zl2%tyC~1Cj8pQ`u5@R<zv+i7AgS`l6T9c!aZ}}}Pwt&M;?0rhgTD%F
z?J7vJ-<0s|n})}=2bW(?I~CL|uS)Tjep9Ozx(z(bLdG`y5}a@<&uakf5M8wm9T1j6
z{$#Cxm+<9Ue{5e+%Ca0U{FFt=Q+!6yo;{aoFPJW5!-=fu$oEM}ux|0M4qiFu39rK{
zTb;cKR9px%-sj`DIR$IgrnwCOKz)7Pynib^eHWh>#H0V&S#FH5j;gBUQ<Y&G+U8kz
z`0$h?zkd&Fj1W%uxCu0>=gPp4-1)_+W-R4!99`}i#jc{!GWQqJpVk?DC7HmOkJ?*Z
z@uF7b%#)_RDz$gQiaTILrN4*!%<^hKUgC6SjaV>)V>uW)>&w7129^HzX5ZwoLU@Y=
z?T{|2&mTSz-Lrh*o*zw!#OnO98*~yie-X2u;6B3}Ihml<%xS;4$X{4DrYkem_LhgI
zzY>`m9)YKRug@UvU>B7P@FCp#?F0rwvWpZGI}I$$V=B~PP0GSx)<^bbP>q-X6w1Pq
zW1p$X=?;ih%-<~97H4nU%uwKV|7e92QiV0L@cTsuz~uab9*9gF1}_ir<zW|BCijQ=
zT&FioJv3-PU^mdPI$2)07C1$rm`3;)v`S#+oN5JI)>S#%_n@i-t#2VAV83A(8bku%
z;s54yTd;7WBgF?<T{g7Q($)Jhx_-&gWp8A-;gKCUUL5gh#BD!ZweN?mTq9hO@nP%<
zS%s8JAnr>W#XB>B)^TTdHYQY7ZJI5sgnyZ(QLBfvPkYj3_!wK4W-F~GI>*Cz+*NAH
zHQsf3C{XH7<!`6)u3vN&0Wjk^tT+nl;ahQ2F0qNRwr1@(B0NcO4SfU_F}vMlvgUTN
z)w&0{nf(SCvd6klTpXKLOCwODFV+Mw2)VitZkKgLuIY7CTUu}|ZY(jp3JO5CZV5!Y
zUKr88P%9vcz@*X0*yM93L^4J59;W~>xv{RuB0h|!oDI2j1tWUH{i+<1sS*f&w)1kC
zfz=-;htDLuWc@gdRnT`N<FN=DCHs!$UfuoM&XCID9e6N%@WBBamGj;Bk3M;iJ<fb*
z<r~+LR|ql;r)@?PdQH<64K_>o>AAI-NbxqL9O4gp{-q0(9gFm<idv|@L+~yXTGQ6D
zeL9>#5A)f(9D+S<7Hvn{B2FOW9N6l#^RlQ{egRaX8D>;mn|Ukg3mCdILJSk|sCnK>
zeU60%(hl)FF-4LWwh}+Hi1~7}alvfcZVJLBk|@d)h9O2FN;5`eo2F<T$m;zxlFjdn
zYhT8JS}?1Gwrz1HOZoQa?8V;}@SGeDNo-At&fxa1n7Y{e7ytNP<4&waOfw=-wR@b0
zScjDwp#!XEq-%^yOGeyZ!7irX1C55vxDWW7B?j@&AiiP$pUA}j;5iXHH9SZ^`3_U8
z|0UnS!BO8s_s8}0zxaax4Wcuo>FKyGj`F>elRr@=;}-x79hpUXP6-!Yr3uFi9e-cs
zl?WFwmxWhJ^05lIYS4W)`#%_ary$XyW=pqh?y_y$wr$(CZQHhOSM9Q~%eHNH{SmjL
zZ+FD$(=Y2~&Brx!MP`mMJ`hg>Bf33uqrc|wE3;=7GD;k)LBQr+4`j35S)ll8CF=y=
zR{i=T`Fv)vwQhS8PCvsVfX%1_Q%|3a&D7A$gtr1lybsrF#nJr1|5!$+?$$t1XM#Nt
z{_0oXq9U8y>q&3Yr2^J&fv%1q{caqf^AKg}nS9bSQGuV?O&<WH!AEL&+N6gtnB3`u
zFu>91fsC!$cela7WLfRsKO^#Qp{Eb^by{j3ok=hswnD<pkrv^(A6yaBX&1coL4?_$
z13P}KO73rO<y{rPciJXu-P9l>C<Sxwsq1O7b=Nkku&p0j+yJz^9okchpbrQ+v}gm)
zL8b<|wl|+(Z2e>QTB&hFQqV+G&_w>}`EN8jV@e4}>`9X=Q^X4+%#YQap>HEe>&!k&
z8N?g1&zE&U{IPH4VkkRK*Xjld9o3)V-hctp=5(6vVIy-#oQlSe)>&!X1YhhJ%6BCt
zMSROPha3&mYb(Ee*2ShZ;>FvvFm7w$GSH{{1n8MjqouIk?0ku?+ojiCTreo@KT?BQ
z3=SCsL2rv;lE8pli=!E8&QJ@5*_2a7O^Fl{EvD}DXyga3{^y1@A(}x8#^x{zoy8G=
z2<ixGv@|S%OS<RpQEKp3g|2P7u5AKITY8SQVufuhRX2vhW9m394m?_qkr7+lWHIZY
z*5vM;nI68dQ1DO4!~yS6Yni5q+5g!sfCCBJq<MedvlWXTLMNKN9W66`RzH%>(0;S1
zmkSoxoI%WEFt3S$1e}<S!pA)sHJe`G)i*Z7FZ8MvhOJ%RW$q&nTu&<#$la&psjnQT
z1lVjP{~1gYZQbXpvaSWpvJd>@g9gX!>bIp^8F+Dll70I~DLv(UWRa(<>!jSruU|fg
zRTdeQsad&(<FdTz1~D4~e0&Gqe53mZD2w$dMIN0PJZZ@P!=z2A`2p0|I<r*E*?wH;
ztqRU#_=&;Mwp&>OyYyVYvGB)UO=t<E3P!P|=={o7sz;gA1Q}Wc@F;2l%inkY+|`Ns
z#tLJj<)bH{w2;t8CX5MG#UjTgMINMCTI^r)vwyO#PRo2VxqBPPd&+|98KEf`=sz2a
z6%xbH-Ol?qf|(JGISZZE8HJBQXw+z`s;3PhnGWKTIrH~hX}t2FJ^p|P-@YN8VybmC
z>h4EU=MPS{D|t1^G3z<XVdU7|xe<1h(b>?>i5eNxh2}jJjdBRIuR3!f<em_EoNH8O
z><l2Bjg{I60T8j){cWm&6=={Kt3y!RdDIL^vB_5OJBu+iSf20<d{P}bj+@F8$-0`k
zZr(i~6_=9mT2+_K%FsY>n*wAZTLdW9WTx)F{c%)SG~s{Xq2&35svbm0N<aug6KW%G
z4@PYCAn-~Y`=3`XTcg(Cy3A0Q=XKi+F!qN2W>umFE}EtL%%V*VE$PHd;-g7nzx;;A
z@4C(2;=JJ6A+rS+Wn}OGswLiFu#*~>=^(AY#(9vm(@#}2WG93sMbSIcA9?j+aL?N|
zy1s)g*gS;HQrt+JS<}>?zZ2tHQSKwTwOM$$c4pS!yp7}$J+srzK1bL_!n-KVJudT!
zO2#G1o7Jt{#L(x#)QYtidU~drHO$wS!98y?K;s?XHiYMvI)^^RyfDLWPShwdcy|e|
zhK+m`Y3FJwqYpUm-Sv11y5t|Fy(#_cv6A(VB2YPchj6pddR{da4hHpo0O(6KHyarw
z$Ih1+HqBhpRhOv5moOpj+fIF6?jRn3Mj}4nxH{PXaZ9cE346gTg=~HTN=FYfA{#RZ
zlS4+&5p&2Ls7Wz)wA%#`NZ0V^3et|xKUq9@#I}d!c^4#o7zI4_`U7Z2Kmm%(>1D}j
zt%x2o<2CebuDt0*Hj*Dw(YjJDCK)GMjz!nIYOYL<p6VeM9OK!bUaTG!q;r0SXp1--
zAhWt!C`kpfPj8W&z<asp%WP@pV6T6T;noV6jg9#fcu}u-yPK;VMR-pI{wZu^31Tde
zh4#!8?NE7mD&U`IjIKTp9xzP4+$3FJ%3S8<m2k_8a%E&NVUmx3VE1$m`w6z=@mHU<
zy7w+_u`dO^(u*&X4swzv8G)@hWp|M*{^%!dj+@rQ5ZWn(tDqT8^iI(=?hTr1m*X^R
zsa>OwS53lD!prLQ(k7W4+;bIDSH`^VwZzV1ebT&2I2aM9({k_Cdw#&()csU{lk8@-
zEmM0KL@x+lKIv|ssJ8^n*J{Zw(?4pr-23qZW7rLKU!QldObiAzAmo>hvxfi$y7QS7
z6KLpsfR>N4J~c!yTI!@12rSJAUJ&J220BtREXvCWosrnCeY?4q8I1%Axw60f#Qj2`
z7*xi$35%CCSqGm^js{~C0WYl(Qu2pj=taKHmzy#)I?CP?>Q5@<PMR!)N!+0o?P!Ou
zM1vaJRWz?-(ujf~ULI);<g9?v?9*LAE(`_oD`0Yw;bt2Dv@v=&NOB4{jbZGk_LO|=
zobH9I`=bT=$l%k(aRj=0Z6jK#Rk}HI&8jq$-ZF%DpnDNaJII26Mg@0Mjp+^K!5#Yh
z$U_eD8Z|fxvq88pmqg&jA5lW|+6%rsV5DUPJO>;_<Z(}dU@u5QgGS9d0)*`1=<Rz+
zeGaPIM$SldC~R6Ah!;u^6XN{B!cOEsIQ84vdTX?YyibT;8+BCFjK^wyhUg=GQ+E6>
zpxz_i-S+r|^LZe>U2?w~j9Qo1;0CH%K5udAttYr?rJB{L0&fAfnHF@K%=$s`^v+&J
z7aw3Hu{^sL7ap7}GOBMfu3f)G4Xl{eee+9xpo#><J$BN;JFu#+jNMi3=!2=ssx4y=
zGRlu|S4h&jS-Xwomef{tBC&-UF3Jls4>W5Mj%l^po4~qkjm&!mxShOx{Wo%?XpinZ
z_>p(pz&mmz)PFg_BBp9-Zi8ww_bINZsB06uum23@S7p?HVMc~zRjL!U>q-APLzKdI
zO-;>fI!GAz@?hZ5m{tFp4jGlxE;g~u!Q~W}>=Kup#+dsO_c+zGs9KW37|@+$qdQ~!
z;PJFFtHIw=9j2@IDZy3wT`c`Zc2oSF!~~k3-S+W`4R2EAboPXj&|H)#KCvX+lCwnG
zB5k9%p<$y)WKoplN)U8}iIkq1i`Ng#>s~kWRroL=c-~%*p0f}-HPqC9It87_M!zj9
zS5!12(}P<me20`HDy~vN8;WcCSS0Eo>i`v|h}awC?m)B2!8e}2)8anGDjnvF6TARX
z<Ne(=9B%0JLmTxOTpJ><K_CmtX8H<nIwF^Mde1kAI@!fGjSb-t()x$K58noHyC_X{
zafmCdZ$N=b?mbvR#MsyxlWPI?ckwZrVF%TYH+g#Zqds@zQF;v|W4ACHq1zL9o)Dsx
z5L|V~Q@b!Fu&uZ7_Vg~AdB4M?(<y6zvOeYI397#z%_Nd+O*qm?i|8S|(5L9xxs4M;
zW6I7;6>cg3dAhlkBf3*zcT3cVIGr^YM;4<{)N6qCE}ke+71K3V@qNuWrdr4HWi&u8
zsrMA4HO4{h=zjF*oW>Eej^V@!H;qCb-6C^DaA-!Xx%0KHoV`(o2)3w&d5OWUow8xM
zbkcIl5mn4)H2p@hT`7=P=WP6gEMObOD;Ung-mx|KZQ9xLc4cfMM_-mB(X_%!#U|Rw
zAzi(ezEaKI;n52!anfTyxU=L|{H$0FNRe{X0xO<NtheE>t-*V4Gn}meBL%bmk*a8N
z3S>H~M><63aL>}Sh-R6fT*cT>`G;pxxrwq@D87Bq9>vD!z{H7VCQI?B<&KG!JW7Cr
zR~;#+<yBt?X89mU%<z_+cNHNh=5@CLox3*zMJ*y_B!%*B%|ME(fTr56Qlx@+S-ZH^
zKsG01)J{hZW|?ic5F0u2U7E?d$Jg<%tq!=9Wi_YzcqCcV-eCkmy2w^J8uYR9*8=_u
z*;Dv}#+b}*-Fd&K=uJt$;7>y&MUf;F*Ni|sr07k-JNq<?4$=AR0EK8@J1=*%+m9mW
zJqFv^f-~^^4sCD!A{<BJK;@$J*@w13`g(m@92eEVw(3fRS=-P55$@VKBJv*eYf{BU
z{C{mW%vF>j0f7IDW}`*T??2(LU%wYS9w-FI+%?HXU=9x0SRx`~Jdtcdq6rVdI4ZV7
zqEJ9Vmho}uhFqh;kj#9&1IT*u@a}HA>mUIW+ie$}y1_I4)3svvacew|Z+8VFSPJYr
z@+i5JK4IUERZTzDlEQc%oJodY4hafEec&*Y#0O+Soi?wjTOTsnW01HURaz5XK+O%;
z1}4ta#~({U5S5Rg7C9Mok==3}TKzT|uq&@A1t@n&+qf!u^euY;M{N?y8@LHDW0WI2
zBXXWy^x<Dn=pf&EBal<Xk^7RxJCuT?u#|fNab8L!bT%D<s^_+1h02`)eS25e1@xgj
zvW4E*h5(O6eZit$CAG+dKp7J|@8KdxC@?R|ChOdmhaC9F5<ntV>VCL3B!(JLH|BN!
z_E~kJi|ROO)i?NNKo9h45_QCba9O2nvCN;dT#Q+xHvnjYror+g<VA^}NJXB2N#Q{>
zZ(Ryoerk;B^r?2mb{AE}YL7tJmS~lnE<%}MoLM`Diih9}2@#ev#MlaWaAL3avcQd`
zI)Daq=d7q;0aa9}BHb%(8TQ-=mMT~KoVu=UgOdI$vn3Nk5o6fZWl}lU;Gv@vi(l2z
zM?LsU&NyL(swuNE!<0k>Q1{pif^nAQN}$x=?kV-!ebNN*^dg`bVpM}+;<!b_tf07*
zXN^Y8T9GHL7b~o5emNwlxVy*<)A&)0#f7tH-?ho%<;n@U*bws-F6AE5s1tn`<LPu-
z;PO6zRI=5{$5^o^#sc&u0#R&kXpUtj^<94G+DLN()N@(8<6rt373<0{V40H+Z!s;j
zhYo(^K1N1gm@9ZFv{*3E6WyQ{lRdyjQhy&|tI^OcSU4Idt-3G$9WWDdFSwW(sYq23
z5j_tU9~+nbOqs;4Jd`hhF}DNcKEA!aCxHVwu4V3#tj)d-CVh73?i)ewr_rB6jZ>`C
z=m%t5Jm630-;Ec`VBc|kJ8^e~b_aez8Cq|DicEUCfOvI<6`0&EsgiME8;s09(j`Y3
zM%PQ;&X8Jvrz3ZQxrDRMS^AeCo-67dXy8EMPyfL=0m|b!7fUpGj4Y5?6w8H;)R2Y3
zgIYl6eRW|r&2<j(6&PEX9`rz^lQs&?B9ztR)o$VEEjsd5QmofyX8Vy$<VevnA<RU3
zOiuf=4_6eza}YK6yF$EyCkv9RWKJ+z)J)MRd*Cq4B8q4DvSejTtBgQ>&UvUO{X@N?
z(9_NcdRG)wWLc?zfTtj=9)94mmdZl2{-?2lJASbO#ib=h1?6R^4byg7D4bSebB_~_
zG};bl?#X%A-jOcSr89$a$bY59u7~TwbfqcyoNIHloe>c`q#M={zoiKuO@CcYIB8w_
zFLR-Bl5a};vN=*w4yOGpkJssB_4G3Juvc?6e095T#%rloRA`Y@b#EF;l6q$s8Cdpn
zG}H@a4AQI0hzRX6`<xd^cIze=l06v;<4AAJ&HEAvbYD8NKJtUer+EXk+j@{iEQubf
zHqYtep~!=pyW1G}j?(rmXm2(Re*W<dqUwVAl1C8PQs7DTR#=Y7<jkVT=!k6ZDms~t
zU!a}RQcS3>@qz>Mh|RyCHoLu9*@Is+ZA{_EL(}P{4?M45=++E*WoO%BE9$`*_D0v@
z$UNEQc>$B$*Y<1qhX=2mRJX==w}%VX)cyB;nyeX(yP{TJH<u6I9uK$SOBK29PM&MR
z$kLMo+QEldMkSx@%r_(FESSl|t_y&jQQV@b!vJBon6VxYk`4j~>9U&KRO`hR9OyvW
zJZ{X7$I8d*Uix-p_)pDJxcY?M8?}iJw#E4K;<!c8danKn9qmh@;>kxWU*w%-yLHq*
z!^es7^2Im3%mXZ+kOOGzrM~~OzGsAhBK`Xn_vFF;H}&1n#lqT{*231*?*CffRc-9{
z*%7{_eTTzEsv0fFXqr_vc#1>fF9;OM6EChLX$)f+YFa$Fxa>D;p8N8W*#8z-42I!W
zF5MkujK+-`nUNk8EZ#W7+?_0tnEnJS<a0E6Z8YP;?Rxwu0KaLyLpN)>*jrbhva*cP
zO2Z;1VzRH7gtj@9ApTVVEsR&-lQhG)C!z2wwSxS{p@*c^Iq!q`nE}!p`5ZPLLrO&q
z+#piKG4g5y8imKvL^PBmen+&6@`9eZm7DWJT`>R&Tf=4S(G`Eux|t|h(V=Vco+uJ(
zp!y?;!hYLfyr%QSD`}YkIe6%*I;%*Bl(g<{DSItO5|#*bHkQxp%0^XqwRO}$?3?Lo
zBtzqMD+Y6Ml7@!EdlU7A>4@AZXkFyuXttIV;M8S5wNs;21zUsk&^Eq15>Yem-aaPg
z_B_>$ZD!imlHg({BL>xgfb!>f<g;rM`cCfl1js%gD!!-<As$H$8X-OxyEwTXuP+25
zrCV22kufsb_*0dU@m>+50}hukv`vjX<*L{)GGG2taHe-Aveu#lCo#<dPfll|yQEt!
ze>y;NX0t}x()n4@GW4I+FKkRg&=DV8VobK17c#<Z+~(PQtO--{QnA%X_)?Ml2b&yL
zxpltl-9$}VE>@W?le6+)Ek4U+WTuXGHqQ1ck8)4_zK8A~A7Aa)0hTSHe*@7)eosq0
z(5eMQf%C2_G{L0&GQGkQ^2u}=tFpW}anR#a0m1E$F$$+5EQ+zvFqF!)*EqohU^rk0
zb!GGg-==O*Z4k5Auj>kSk#n@zFWrOHGl{q4l#o@%<p$sq^6{CEglyily(v(NXp`MG
zcL56V6Jq>#T<+Qn7*7@o@kHz?W+nX|Z-OT#|8ULxG=J$y8nSx45<Rj21Pccfr@ji-
z^K&pYS$9jg-X85DJL8$1#<e|Be)QQu``PYNY4rKJr+?yJ5hKe_)0t_mms7FMYgLmY
zaHq%6I&J?taj()#9~wV5K5=SWd6!zb`<Ig2Hf;s-GUw6T4t^pD&;E_$YmFJO-~1t6
zCrNcL5!ng0GI!-Y#noK+J{S+$xzNp?=HqV7+S&d3Ack?6)1pCyd53uf(9A2494})J
zZ_j4_Ly>==#&<p%Ut{6jWLx?oxx5_SiCqX_kFTkm*1yHyHX6GII`3zvJt!COuKies
z@amsH^?pt!&`9!4sm~$jO$Gl@lYQ*c(YPr@yv6*XF|z0x(RR9eY;N5aBO|P1M8g_*
z_#!FGf1yUtnvH?(WF+B3G-KZoZ>i=h<5qL|Bju7~-cU=L*}5O|3je>4pQCN04AXuU
z2n=}tUB$4~vv>Su_Wa++&s!Q7zx2*OKi7SQ3@Pf2zG2fO4ECUZFBMHLX>i@v3@Os6
zV=e(T6eWy+*KYgtUZQb{*6NjA9}MJF<d@6K%JTZIQ`euMmiE{o@Q8S`pig~2UzM6x
z&U(WpIf5L<KBJ-tJ~2VtrcmwMkst6Qwd_wl>}9bG+07WDRHrNmi1t|ySs#p!`xo5Q
zK?IEsDt_}z3|R=OGim&H0!gT=#cqKCC({w}7)}`4H;wvntx=(Nc~=JrAKQ;MV6HpT
zrH&!9f+K9+5Trvw{-P#^#r=h{3s+>s%Eg5jMGJDKflEbnbaJOA<kf+~-Tj837Wg<8
z48ALK{rLXwMahSAxNHeDUslapkKnB7P<I#Ku2pXBu=A1%8_=c3#%(?ZUr(gL6;jo{
ze+`UkuU9?l)labVu;KEA2^lS`@le@F9GlOj)kzZ>u2J&aU&EbOGc<s-Edu>i_vdLN
zd=25z-s$I6=Gxls+REGhxfmK9Dms`AO0w)zv{>1*j!15~t257u+WQ-WUL^r7B27(%
z_jRT|NJvA{_C9aU_~hmEtY6L)E9-}=lOwRjNad#tK(_?!4s456Z`rTL-M*N1VaXL)
zw-ZVpw0Rg9knO?!Hc{ALFRetoSaRsE%>S6y1QTOfW=SbJh6pc#M@KyiZ9Qa(8;&om
zMz~nCLko`f+62xuC&fDN;dsCsT^lNd^gTAih1oz(Xdp}4?6LG=a$5oz^zbnLc6e#e
zj*TZL3nv$*b`lhfrqjd^;{UNUk@SgIsGia3j1P6xq*1G}1>xo@U0lgx^~J{|B)cgQ
zt`n^mbRb!1jnwJ0YtN4gzHNOjDY33qOp+o?N9QU2RRG@x`9#C~vKQ1FKnnvm5sScW
z%CVUT2#KOZeyU7$Xo-I6l7#GB`v!}R?Y{^5J=M)3;|`qzzH){39G|PVx4}lQS|9Q!
z{ip~UQwgLl{OnrhXSV#bIkqbxmasuf+qV+guj0q$UhB%u!sPLktRo$SU>L^p>+Az*
z)ZjTPLg;M)z^}uc-@c8&gCEqIBJ7m(hzyF@{rsOj_d5pL2NFfR=emDqnsu>LQWz39
z`}mk^PsNl{7zUF6Z6}P--zN+ISK5OJ=cjZ&A#ONrkFW^`Y5x5&Q)<Z<BBj-hw1gNw
zGNoW%7@Mh)+6cKGebdLO<W$;XpE5-?vO1x%e^<^9S?dBHBprwe;>dZYwfLT(Rjkfj
z?LCjev~HY<bl)V_%JohuoFX3E6dwtmAITArTD1&`ilpo*S?J?uep%|ixY%-Ib|#%J
z(u)}SruTK!_AyI+$5Q6vT=F`wACbFa5$QNt)V&Z9<d1Fwh1{CtT7M#m`c1%XSJl^C
z(<gnv#MH==9tPI-&LG4ya@-*Fz%+h$ctT@h9u~DlwPZKRrdWuo$dB5itNZ6SXZJ|-
z@E;l8W;3XWxKy{1h!;TXO9@huPisLR98aVp%T0tOQ#=(W`$a)MJeiTB)mgkq{F*`3
zvua5n_>M61;zYOZ-0yK6vGa~m6WS;y)7MsV5As{yBw?C#)~pXtt~@)+VLy!4AU6iK
zHR!GmtGbS;NUhQg;WzuCxwIfY3@lDi0hs0zs0=w7!DP?@to;D@7*2)=^9yY>=TDlA
z(<<IaLi{+T!CO?Q3P_VaIcS*BUbHqObOB;z2NIWIh=#dV!LT&SOdfJGv|WGfSfI&b
z>%v65P@_}l^5I(<!_th3%x6}hm#Cm01Lds(&yEyTD{6JAo+8r+BQsQpIw+aRp{|!b
zd#L@Qs*SJyjVY%L8A_wTXc#H2XT6JRLNx5NJc_c{HB*4zuW3{Fbl?B6o3c<zW0<L@
zueyGQ%djHW*h@w?Lm6nHy@BLg#?mS>vgAUVFqLs@=G42;tzN>COEIJp&&jK9DJzl+
zKBl|UvF_gnio?U^Js6}<^_?<X%8r+ihVEkd1>N?Vbk7?Gen^!<4oj56Sp;5@99FXl
zv?i;ivd6N3ldNFc`r%wE5h28y<bad%&G<V?BdHQEJOh0}E5Zf?L1!V*hF6bR@lTto
zR*pxmE083!CNEZ`H+dN;eNlXfu6Mw^MndN%ae-<`0*s284sewt$e{@Gl&y*sh<31c
z9;VY>5(r;~!-ir8&R$QlB-&Oqo%pP}@13po8U2Yr=$Ld+9BD<7t1CI7y*JN0;X|VD
zM+E$El5twQM1R*dQT)4=d22^b;}^KG$*n1CLa=d@b~jb(ag2F_sGgkp%2iV*a7N+l
zmF^MRQ((I_fD6?FW>{H3n@-wHI0@gbl4~ihITX~x!}!D2zG&&{Dc(e}u|89}2AU(*
zH0Ny=CTeHrgPkEd)#>GdT_6Q#DpGa+mCPM#+UJvQwpD~9jMy{`vXZ2(>;!uRay15d
zGS#~{_9w|3?h{iK8mt{=wKxxOrOC9I4Xs68HjswLmPz7}y{s$(+q2?8rXWB4-eZfL
ztTtD@5#Uhq{4C>uFBXpv{Ri^xhjnV!`CB0VM^5n5c-0f^H4pp?^(p!p`yh7N2eCN1
zS(O1$13F9{!8?ID;-}s+Ap^kvyBO4SC!&Y4-16=v8DZL7CNh9+JrcFP?XR>~VS!32
z>$WC=1?#^qimku6OAKQzmAeCQ>*Iq5&_wAaZh6FmGqM`tuuMoYDp4h6rZ^VRKI<Am
z#xSny1{|@iLri)+x5yV-<G2$8nOST=EIhA2qZU-YB(fJ#$_Lav3UEqGQ!{BylA;K@
zZnne{WuorkFFGziC8D)6ws@AN92af(27$)VM^Ohc6gwV!KK-h?iNtAX9G@h0rX<3a
zkzg!r92_3<<TMe;I%jz{#>ZS!)9=;u?v4&`Z_e4Cva%^iY|OH<VZh~G2IuW9X&LMx
zhQuc=iX%?CRAs@e?B#zdCjwjq@hlMZ*#J~9bVzuT45hL78RsU<y}7aVVD9^s+(}7D
zIi)sgM#dGRE6aTZiRgFsY)kT+3LZUlcTRdei94%6Yt-cPfQq}s3qQi4ks;sIvi^bf
zunDiYOfzbJ%rNahvND`^2hQt#h1P4mht_`_^b$Dto?rzsD-TfH!M+vjj!eZgwOVb-
zzCWGQK~CJ<Z-w7@ucKSPwFTf8zbG~|K(!}<soXQjjik<s;HsRd@vckPsnvGf*frm-
z6P^Q=@9_j2u)0z7+_e)tb#ORd+(d^P5P9^$oR>zTKaW^+J4{&`6}9kl%K4Ge=%E>2
z+!Zu@Q~Lyyu9EJ4COCGh!el&v?nsD{(ADKq{{Jl`|KYWB0XR9;|8|IOLjS#m#LVb_
zicbG4poEr}(+2B*1P4G@(<O<7lX1m4R!hdBkz2Z^hDRf=b<3NZ=H!T}>Pr5x@Km-3
zH@;oa@gNfM$XCQk7b#4MGTf+9Tf_Tp(5Lxrqn?*7o1389jwlU9H+?^@Kd-l^T&^Aa
zms_DxQBiG|cmba&bcC#tMJX_YfLL$5T%&LVTqgwZwjEpmg5no7ZM%erv{50Gz^E9;
z-YUbK>aQ)fuP$!=tI8wRSDOq3M5tldXTnr;#w)qA7=C@bS>YamG>4uCUa{)-txtt0
zh%3g-2_Z!3*<x_auK91ra1sO1t;B|QJKelF+S#Ng1<}Cy$DRhr?howu#E<alNCtf>
z$Tov$;NTlquJ{IU2B+}G_1y9~aF5PlRpwVh4?#UWeeQ;PqqNd9NQm&k2YA$hT{4GW
z4+G~`MV_>#--Dx#J@k%*b^{}JzL}riBc9y4uelo%x;eg@OgC^Z&;GPna;B3a%fzQc
z!XoG;usjS-)FuzS&)z;B!=6#6K5jQJJYaDQ^6;9Eg#;)E?0|8rQmzn1hLH8$>UYD_
z)QMSeaPv5tlMyn7(m~VuznY){L=`V^^Ycm)HmYM4lx>y^{<<{l`-hFT%OP;<3f)fS
zxLHNf#5?>sBO|o@5U{y`48$&%oJgPJCA00-(KSDkS4D}4WBu-v@LIMpaD>kQ9M`oQ
z3XbG@CTTqd_J>OpkwO&5zBJ|)RKY{WnIct2z^n*Nva&}%5IXtCU$qQcZ3X)xP@wHP
z2OP*nzaDvqoyiI4BC|B3w#Uk@6J_;+Wnu*n?&B)K2jF3p9$c*&^;Yd1m2+=khR5C|
z8?N}Nfu*<$lV=HwX8xQ^XZ|ln!||(IIj?!3VaPoelcdB|s%E0IVID%9Q%v|oK=>Ty
zpEs1K6)z|-E8bB0^a-z;<7_)T*WVjc4D)^ie8E<D=2sdt4w`f%`VxA-a`HY9iefuf
zk6j_g0N4e}Sk};&FjmY&S*j|JdURYH&xsZuAI|E=;6O1-&c=_aNh-xs!as06l?%C|
zY?DlxX1BfT<D_u8+l#P-6eT_(pS<>1l0T_oQyy_#Gl&<}C6mHv7<AT9{RB(X+zyjL
z@w36%)4=>*RkC14@2U;!x!eGh1cj){(yJg@5jh(=?$*W?a0Q@kYrN#d(Unj3&{7~1
zruigEIQqaTFgyHJv$^tU!1U!W$%}U&&f!sSqZr;fJzN<*8J`c2pZm$~oOv?aB%mH&
zL~1V?($vwH<z1?c6(zwy=QfX@_l($pgE&JcP`pa7*#jpaylJ-_W>9dj4~k?6$tg%s
zcd3H_Dp`T#PphEF;f<i$TwTvOCgD^FCST8GYZq=wQInHwW@S3hD34=f0CUqXh$%i(
zCACkA9m$Ta^EjEkMHtc%VD@~KgSQ8jkyVwENtKaJm5~-I!zMb$4joALq4o_+m)Z#^
z-W&6e_E-}tUW8bu-46Kpq@Xw2B#c?)+?*`!G60|GFBPnau<E_$m-LjuOv3yr7FN*?
zbzuWyI?t8n9^<4$AnLfRgRT=(nJ?(tO7yqi^YTGYKL1KaePIqYG2(~pPhRnPA5%&O
z{OB$J)|T8%+CTvEj9e{Iok_!Ar5XW{74>TL#u+`=dcp~H@B^2&lHzYnvk)J9E*9^N
zS+mc<!aEA2hU((qk;#?w|Gik-j1r^<GL41L`>8=NG5&Mj&_I^G8(T3PMFBagH_;!Z
zdO=Wq^Yd31V1t6taF_7;z`mcBK`Rgvi7eV(e*vhVTzNDR8kgNy6gp!VN(Q7W?Cz<h
z?Y2GqlMA&LXNOI~CA%Y<==t+D9v19U>orKpuz#oNz~?nB#Et%)6XX?mdil-}v>7-S
zw%02bR@$($#sC9zEFL{c-7Z~#RjQbkR$ybvwlUxj5<WElL4`HF;J;N(=h)6J^{Dy1
zb}cKGkY`YROU$4`wgjzX&$ir2gWb0r#jJ;Itx>Di1cTFQ0cNa@BfzBmrJAL;8bTat
zDVl-OelG~N0{0Yom>d?fwphFe;{w=KIx7Adt#29m!lS^t^Ca`Zu?L^l#9k~oNhT&e
ziINO2iQI0}0a;Um_Ok}j@^YiU-GZXosqLz!0j`pG1kNhOg)2uXEX0!Q1b7WW)9;s1
zTctP?2THIfH&P@bHTywL>w!Sd#NbS+_|_AKj%1Jeh?Y15`+_7kB_X03aKru}WDAt|
z<4$=a$d@TRy_0ceI(@3TRSH<C1E83vEin2F1z)n@_0_clJ2pA}pjjg-FBaAg%2rWD
zzkP=@n-)kj=T~~Gcqki-5`@YSnP@P!w<r-NqWdd^sPa03?_NX-ds{X(Iwlgj+`Rs(
zx+vBC<|=?rZ%|jpMJndLL4+VduKEIlNOS^?Fnx3sJzRT$%z|#K4|xcs4A#GswX#T@
z$S(!jW*Bw=s8#QJHflL+mIi8{Il|Wuh;DRz1Z1hNg(c|Xa26U?VAty7jSfS(0d6m6
zS$fltF>%f)&I?v-AFd14p$+YK<IlkC_Glk8xu!&Q7|~2XSFKIrgFR1G^$Keo&E6<-
zFa%fdtS?x2iFgceXrIknEgJ}i;|vx?yS7T_$mvo*)#ZK&W_sHqz@zPT8%0a^s#QTS
z`KQ#E$-)(21?FZF*aGysW(8^?EE+Xi5ibm?8y4UEKINYjW4K0H{%#WHv4OFien-##
z#%&m^9#S62XxtPYiMo=Df)hl93>Vq=%j!wpZsVMJK+H$IQJrupFqCcLn0`@Yuq+aj
zapJGu1%kKnAg4id7&CYVu#!)m^e`7U<vnZx`qS{Z_sjOU*f))wy?4)|KI=&<LE^hL
z`nAdRCV)ej^Ed`H@bH(zql6f`q&7~HB_>lv3sq5`8cDizSt!;@Yt>Qm`=m70f{nFK
z??>eMjKRV3d4pI~#~7_8$cuhK&t+gMpcBY|x6)V(p?R{FNZF%%;04)XMFCDSB;4s%
z#{6;Ym8oJ4#>g;BARgBdPRmKo(zg#lw@ohoFv}sGG5r2XI%M>f_=eevWn*M3X{gn`
zd0C)dSML63nxltHq)9WxAP{nr;0`q!a!~Eo@XPirRsU42C~`KM7UY@p={66=qxex@
zWA!r_g6mRPQ4eS>)TZ2oV|ru4wq+hfrYy1^2KT2Xg9d@-NTFm7QQ9M%b~T`fOgJhs
z>P6p>7?gT|O2>4w+%5awf`9o8LD>f(^}Hw*(Fs(5`GVToRm{`p>k;^W>TS;tvn-TG
zX>#u6pKWqtG4Fu}u^j|V`Tu-WHbV`2iL#>acaUr&Q#~jsE{BAr&77iUz$~MmWh;aS
zDKLYEB14$898@odrtm8%?1s;|5yoed5n8Z>B(jR-%LJ>iv`=8&D!Oapx5_0eMyuLj
z(O<Qka0U3SkomVk&w?VbPhcv;DaDo^%mtz;edhuFkd(h6M4XP9NFvvDvRcY?>xw&L
z=xguB7i2+Q#8)#K%48D4CBlGs&#giN!CO0AQ`@Rj(CMcf!0CI28AVo)5>M+lQ045T
z1BHas8btaGq#=~=7`C4!8HjCn5)Y3wKWT;{k`%K5`eW2n;yccVL7Vm}+2)75V3EN;
z?wceaL)@J?r&R-%{zF!;zPk=j)XxSF{%XMr!`$|#fz9XvaiCJg1(ujB;@fd}REBdQ
zw<^1nd)5<i6msLv3@s%Z7n@oyZi)3_u_y$WZvWx@d>IXU8L{^yPSj+fHAk;nV?C>~
znP7Q|EVt&Ia{CO<>d=S{yHoQxzAevFgf%sAyso-dHh!QtHOdAx%2g?0^@c26<|xrB
z-U-$~EuL(*2PCR#7w4R3672eGwJ59i>k25J5U7x3)8s_~y9XqTlj!n3rlT1hU>*{T
zHXhuf&>0~=Uvm}p&4&ZZNNEdrLcrwSD|gRvsdRJ}LwV!ax2cr<%HuYWs1{q3)T&O?
zT0C)$qS2~ysX4Mk$gV=R_=njvx7noFx;0NgQu5*)%ZSO^QN_i7a?HclIWKhdE((hC
zh}9-Mm8H^j;r}q>;aXF42FJ3Mu}pMgr+_zSM_oz#lF!0Py?GmQ@=869FbI}?L$7Z~
zsJZXu41lqxLiIi#TsZho2I^fPbT$XepOx?t0@fV}&^B@KC$GEzrNS=w%Oj$)J$^y;
z$1km%5sGW4aAF6fbII+^vF#gu8{Ak?2Q9xOasx+61NsrL{`(Nt?Sqs=#p*SZ1~*^^
z(ffnf?W|rFhZTc<XLG5>47@k^x=9clZuuIL?wotRWy_nzKCo|lp$#)hG}(k=%Wmq0
zdW(LNQ;RM$B_&BBBd0P*Lk4htFQ+nnKLw!~b{?Z|WJ4;p-Dt&u|0FA&QpC*?igbYT
z^$WaXc-h_4n2%%PNQSXiicGXdHYzh?Hsb=VFV-@3zT6cf##KY~eY2rEI&yjE_>npf
zep<9rI_kRhShQw&lf3V^GMY9`WxBqPq)0PG#z*`&oQGQrOhxV|$xOj*CLgu2EM&^!
zqS`_L5|2V_J(;2f+!|J6!H~CJ*f{O-^g2U9rdLOm`KI%JZ4TE<oV3|;`HC^0qnFqA
zc=0!rM8;q=`lP5SXIRhYIvJdjYha6!8<aaLjwUW>)@<wu`JTN5Tb9G`!EE_>wt8A@
zY+d;qAJ#9Dl^0J&_owH)%t9se)$yMF2lRi9|NqkpMigrQWPtzx82*OL{&#5t2FCwQ
zE7<b8F8u#kztjHxjU;a+r~af;p~a_xhP7P8u%SK~0us?BGKC<Kl}0eXzzrgjj7B6c
zQB^>Xy`ipyt-IWV7%(36{;+QKNn;GE^lrbOnXFhczQL9Bp|rrLt}cvE(uY3x^4&^B
z2U;n-+681=iGpA)UB|Z=F<wkUttR5b!b3!5!u>zVCZsG{b7Z&0sN4?T{(SdPjICe^
zROOPguFBcTxADc;uSR3gpb`G`vysdOgopK#%GEI|rj|qmNb%s21@uC9hBBr00*ULZ
zmy2O>4_$Gvs>dn9Rtk!g86YW=j!S9%$Y;ZnC`W7N&6+iz*hb`&OS4Cg#>t{C?7r2F
z$irei+wc((i<E=Ae+t@>sc}Lab;_9`KVSc@!~G?MRT}gx0u;Y`9tQ1<HUl??dfM~s
z)mK>R`*vpP`+)&IGvqH6?gm?BMPTpo^Yq8FXbRbt;?LS9`926dJnt@ZySt@7-rIpr
zLGwAzz6lIaii!ox{f-*vKM5r-RqGEG0Dr;Uv~rkDh38%#!1AbzOU?GQGWPcK@4fqy
zQzqKMp;y2N!$&*A^mFKc@7F0!wCh&5Mz4Q5y&#n`5y3HjAP{`xyzz%A$cF}nu($$q
zKVSQ<VW%H&NLDMq%(%E@4|~xJ!6@Ah=?}=$@4h03>>;RVgnD<s3V@z+;3Rz9i&0hV
zZ@<V{;t)b3OAYE*I^6nJYUUElV{BclFH!Q6F9R1yE(5Np%mR)Px02P{WJ0095-`$0
zdq^UcBbhL!sNcy~8N;LBp&b2d$FAHHDEw<SBajM?!r32imzSDFdugJ3z+#qfFIQF@
z0!xJmlb&dSwhZK3JQy#7Uh5Kui6Wl+SxsrI%XX9WsEXzyvA%{CV%Y+UV_+YV(L@cD
z;14F|S#SCL3!(bipf9*XEdgV&FE5w1Giy5IY7%XwVllYLY88$$5>qZKW8ht$mYAwY
zH*F&yDIq9dr(Nxck>WGKqa!7MI_aeOZ!g55i?>YU{E4#kq#%x9U1Fr<#OA(~)O|UB
zHga#SVUD8EXA=w451YM2^3~hr<-(bWg}+ZehS9Eo)L&^KPqA|()`tQZr!JMF4T;ry
zfYxUutb%Ec0PbE-0yVQO4&o92A$oNjzpDN(5FAC4)K~fe7s@MZN4dwR-=XE35qpqY
zx>QD;w&Y*Hcbv)Em494U=`*l7@DG?~88;vDBOWQDo`nM-Bh~$YgosifC7roW6lWZ-
zCIWz4TY6o{YghZ{&!(N}J|%s2HJlf%`(-?rTvOc#=BBj+w=j0zbhGMdX7^mTQ&l*e
zq2?|SWg~)N7PHNTY3d=O_6WWiYAiImqmd8O2w`@Zxi^9rV;7|Cc1!~vzu%xM8P{y;
zjkKld<OardHKeVX<1eu_XyN7Sxbb8JH)%ma&Be{|oX2YS2>&^K3nPL0xNzMyaoajh
zd@IA+4cF?T87GIj;~FOP>dcKP*RZcnJu=BTSxJpC={)14d9m^=ZW_RG4Gy1gg$HSd
zv*!Mlb;<k+C+ug4yqk<b=5|)+AYk4t?qBQA!cCCeRp0+!_4GWV?Qnl(64AdoDun+{
zLYJ|L{r?P6`7b75Ey)A6zpRGP8_!4!AZqHNge7cLn+0V1=zRKJa?#6QtrEWiQ504t
zvN&a|!sC`3`FQLi^V+k#9yPpKuir7A<{iC1fwXfEi=he!yG-I@(&FLQPJK0kt)+6*
zFwC*&Pt@i>yF&^qYhXjN{RK4jW}(P~zlbpYY$jyvgdt!I<(xlP|JXGI7_a*h8Eyz-
zzuH!Rrj3BbZ#4X@LrT3oRD^#VwiUP_;L3$2R4MzQXnSSIOZqRQ4=9IAbUb?DqDE{U
zK5uQ%ba7mzvweNI+7@OW${+{P;~==y6L{*abE0ECclge<DS~-gzb3j_V^~LFGY(0`
zmWF}{F0kE2e}1Wj6;2WeMIGyKDgn==sQpAs-J)5(K!6?aA{{BaTH(d|Xq3>bCDCR_
zm9_Lbdbg7wfuueY248p5K-j!mo{DcGGZdeKtW9BMszF|xRr$H%hUdDkL)Aptr!@GF
z?eXD=VQS3DqP3$F4<6m#11NEv#681XJn=ZSxZT3#xo7WZCXL<bnIWsLEQMp5Y}x>W
z<hqJIj2FoTRDssB(o_TsFFX$9(HuFck!@>B5@B3r(a?joNum@U3~ia-LYEb~Zs{5n
z3T7i?6)XXG7gCU|a0#5_p7o2dMnn;S?pHkU@&H_aq~W8`*zSAHJ2(v#It)h=quD2K
zFknUNLeaG~`Zcb5E<+PkkR45I>8oRkEN#HaiH<&5IaIs<qb(~Je6EQps!pj1!)w&Z
zl1ZJo98TM8sSMm0c>5_jf%k^nO&l0bZaNfO5dG!}PnJVT4j6Ok#U)qs#ukn%$O8Kg
zbgx%K5)59?Qn{W;7nu3gQz%dj0<Q$`cuRph1Xge)5B`^v7G`!%@Hc7O{V8UVrw=9P
zMusw`a2-Z2-m#0QFFcSR7P-{w_rhoW+jZwH)LV~F$E}_w(>&RvpZWYXLsdoz+YVL!
zPY+aI=Uos7yy(OBBKH@y{haK@$L!{qq-l=Oh3{<Y&i%>Lc^>-9R5_cZk6XyhY09**
zYB;#Tna}HJ^j61X=a5}D<#Qg|7w^>(x(dO>F5myUdH->{eHN9+HX;E4c!~Z$$qj5w
z{_k>wBP}bZ4RP0B#Mk_R@^W!CIAHHrWuh5&8dd9IBQr~u^mHSCBgr5kAQXU%)$;aE
zu9s}l9ijOA%%y2k{Uz#Z+{g7|Th~BR5coO&m*e~1<@DMwr5CdjUphJWeH`B0y#^S^
zBO<r*E+<piZIYN91N`2uIr=w>Tz6*vV$|LP?QNw=m}AJ`Wz2?y$Ax3@+`A&^cTj!q
zgY3JMB%D*5sDVB_dhX1thDVRDisxKiB<JZ#9n61G!#6KL4Wl-oEJjHYpOHoSkN;?>
z`C#a{LGcH%c4@Gy=(0*ZNS5)z$mM9ZWg(BuGlQH@KFPiz`$Lz0-tvl!>5trau`sD_
z{-DFYgqd6?-3`BFZ$4Q>kI%zFRa2B&D=nN_f_&Dy!=JYUmHjYAUPawNhbCf;5jk1e
z<%=f=a?ZbZpX|}Ka#Q(9$~gxbjs7TdxZJO3eCbnaN;SE|<4f>yW^_<0ke52u9;e_D
zu|Rgdf}>MkcXyWt1sd7Rc~c56yTPR)QnqT}hoZy1-^D3xeQ-n#LxLWYCdi&h4dUg?
zn%#KXRrV?5oE)l#<1b8p*K`6$d|$(YV$gIDxWi!+NvaH$x~BjNgr*)p?>*=bF_|8N
zhQ~6)@d>GXdnv!tQ}9!)pky>@sUkEtN^S7-q*z0SLxvc|g;5Y3=13&EJF-E#04iXd
z(U>$l-Mp_)S)6M45D5gb2~~G2l$kx?mbVI5%#g)10*y`V$~3bgJi4E1IMVTx^?`-&
z>(9#tXU$-N1#eAc#Y?W|5hokvG2@uP<e^o$znRw9B>40(ZiwhIW<{%A>!Rhqnc@?I
zi;gPAXdiPFt0Ew+f3OrqZNss2b%r@3{H|a$`zlV(>xeI#;ZqjVeujjOCYq@HHex^1
zI%7Yt#C61SyYAblY<Maz#$S3rucUPJ&cSSm4*7G#^8Y!?`#VPIm249bq3H>1TRcF*
z;vnlRxhSkiMR4%=3K``w?pyfV3Za%0H4zZI70<Y6@I&4@h@dDsZj=Mjp<#B&kAe!J
z!EE7b4vdD#+TywF9>C23<ZK#HCPC}koGyV4u{v80dD__9EZWLfZy5y4)N5gdS`9hc
zC`2Z&&sD(c+K?}U)v>y_6zE_@y66wXRj&pBa^1?0mPn}=|0266%vTEP`dfg9IrUcq
zTyfGHfq8Mrmoav!UY+%aXXsm$(7HQ!|AA)FI-d_F>VSx#sa_8H>x=-ytX|zi*6c1`
zX-L)^qpiDuQ_mTVK?p(!G~iaR2BCP>8_w>jH3w?c<rE6R!+6P8gV*w;H;u9z;|n(6
zO0NMo{T};$G+zuveyK`Uz+b)3)xwAR+@1?{`DPVFbE-GMoBEiqgt_|Mo-ys$xcZFn
zOs$2vei4)b=FwyH8v+c2%~=2_!Rb!~Ox9)7QIr5SV>xT&gQLUcZvh-*_eTPgv-)p<
z&DjFP0^4KzugzJq1#^V$at0d;(PIa$AnY-K<PjiaxxS*n?y?8F3YoKAYDwy|gVYh6
zFi~?bH?2>ZGnH_ZX=N|bgw4{D@tC<!cFN_h7TH*?#Xa;4L++esB>J%b)A9+z^ggz>
zgMCj$CG(A9>Jy2887Y1hM0O$%IcVHwX&-7FTCPo*JZltNS!x6?v46+rqbJb<w<b|b
z>pxxqsx=CjaG7#@B>H5h<>&(8OzTAQz!r>4{?B_<`<lC>@qXfud8lB5Fm__71~wNv
zrBqfLesM<#F~!n>qh^b!)&cGJ0vWAlF7Hxg8%_UJVv-B5($E^8Dx)k^3wRjI2M_UE
zQa_;NMS)j|2wt4^f`d%6R?U7#POxW-D7b@sAv=VYVq>Z|w^P`_)Z|McNKW7?BE+dP
z`BYk(1sCZx(}-;lMhEtbGuXlO<mwxBO&v)AcBjr}AcrY}c!_aO$@vn{&PU++DS~VX
z3k$?0Y@p1=B0SGuagVwj1%#DiBmC7I6BYi~T$5A?cLVs_i#haQR`R7;aXx6c1Dt>?
z(3(NSa<A1vm7EsB74~4xVj0c*Bbb4lWa|Q)&%^@TB>mMKo^i7|v|)a-cCJMfpp5{8
zb9jJaV@h{~|BU}Oy0f)3%$Og)76Nn*pphd#9|B~FvCqy@ec7JnA0X%uxCVL2X4o@u
z!$PKFywJy?dYeRu)&;C!v9P&Q7^ZCW1)^XH3Yi%L$!Dx|kYE-I#z5}?aSHvtdg-sz
zKLk32#mSeWQ^D=0t?60K>DkSl)i;f~Z;<l}{-X`e>7@t+CB|_96$X9GWRB{s8o#Rf
z+-{txd0Hoi6#~Dqq3z^A^s_%WI%T8Fy%ZWdW;`B5h)m7l@rsO)Rt(TVc-m=-#Tc36
zGwY;UOtY6l+qF4ywd3>BiKdOrZDzS^U3PzXco*TW`;C3PaT{5Zs$?jLt-NlZdO<vx
zA=MP0wC{_T7j1OVsyy~5c~xCUX9e8ya*3>=i@OfERmi|6z9!SwarKs(PP`63hi3!U
z@t;6HT457vKgnemwxZ~~K4uAJ)nEcy*Mz%$U7imn=l^ESVm)VBQ;wJ_9h7)w9RoKx
zA)w3%hRhhrwKhRtfv#$RMc`F4w-+V(m0<Eo8%LwCER0h^B|jvyG+bhtjBcby$LWs6
zHf7jKlIm8cJP>0MSNkqZip$wUIU<v}Ipr|K(o_L;6`>{F-5GN`W|9b{dL$`qw-CHX
zl$PHWUK}sd{83_VBVNzYy-B3N$!l_CQl&_%=)M2zz%k!oy=*7Fp=NcF2RzT$4d<Ob
zX{;)DotjajB>E>(k10;K%uK9e_UXjCsWNH57ENw->U!1ox<yN6xWA#mkc(K9OtetC
zu|imns_q{CpBTZ}VM~ZljdJeS=W|U3oz1)yO+HhGMf)yCXjX2isWXab(dv&5TRtP}
z1gkMSLmtJ-h@R#BWJYZB{h=QMW-g^V%?M}Y^tfs_0vk4(&)2=Q7~=6vUraQPt`B>U
zH;d=b-gK8*k(ytr3vaY;Z$~$}PHtWt?RHMDPZx$|#j{>Yu2j7V5HDJ>g5NvRRx?FK
zg6QZ-OhtQ)FA})eIQ2qi>^GOB)l`P(;pf-yPd}=yXh)>fe!>6WP*o_0B4T@@IeuDH
zGPW}_Q4G_AhZhcM!5;=Cy9{x92L`CeP6hn_)~kaDe@sYPQHi1K)O^ly3*8Gt;5*`q
z5?1)3BP1>kwC$J?j4U+iArVYsZjGd;V6$Y2_QMy4bmE1eZ)*Nx=~C&(K(p~)N6TRk
zt7GaKjnMYSP79C}NYx=T=%P#Ks{VMV+$L;NN~i5ZT`GZ*7_tbI&>tDyVRquU`^3<Y
zYEXZV&vt&f?vt1y2(i473I#|m#VX7hHid)HicdA&Y+^>hfJWuN{ctGs*`pzAz=^!s
zzK55N1{GFSrDXf|QEd+U)_mZB?FpXgMngg=wXnYE#f6f^o)MPRB85n3?FO-)|3cyx
zJ?q4$`lEjRz?XEIKH8A?Aez<Wj51$x-^vG_gETOe)Qg6l<hgHZ5sTuxXU10KX8+^?
zQxT>RFZiTjsb}}+C8K@1XE|n2`_$ifm)}aa`AP_CXo#Zoo>TAgga&Dv#*P?$inDu;
zNq8A2edmuk2dQY~<<)3<+LIa9BC_GM&48!V$;4zfHcS!4XM)QHjJlq+#|u});qPh~
z)row|YY{0PFZ4D2znc?<?==Nzz_!Eza2%3V%cKZ~DN6M+tcHuQUI;vD6+73^2e3Um
zuL6yTIwU>ppo!~(g;L#7m0225#eNV4Pv(h@%J#@3yzO{_MF0NH<t(}PmS0kWc;N2q
zTFb%KG>|j-7B`@cha+ct(TS-3w_hoqY5*fcWN~m_F5F}tx>!vUMTNnuL2Y2|@qRe1
z)|dt3T(p)vt?e*)#G!<nXwli3P<LE(J!@Vf&<J;pho!rC+*(NE=AFLICM-u9aXyhn
zY@j^B?@Nz}KQj2ba1N2alK1!5cb85_@v6sA1R3;(lPBZb*>T4Zykfu{;;}hsycr%s
z7;dJ1gI+!RKN$PQAWxd$%`tXtW5>2VJGO1xHg{~>w!LH9wvFG|H}8GA`*Qz_j;_ke
zuE>h6sP5>_dh$udVa+xSGX5T3ey`}P(Nzh2rjp}dk80no*r-STCl7>_EIn`v3wx|-
znzFHXuO0P3s`e^GPh}D1$x$_k>}ypU!Ys_>0DM#XmTYtDlDVlH@obx@><aQ3((pfr
z$qDO)7y;dMo)rxUO?Wu0uWr#ik1=(P^xE47a}Q7WY4Tm(jo}EUu8NZ-lC(J%oGvXk
z7_jTsR;--MG1;Q)dpWdmn7B9cRmgA>gMd=?@JgrjCm^sKwpNct*Jw2(W~JG!wY9Cu
zqa7Di$rIDLW{47)lB%DC&ByWd2|~_Yt@<({2X#1=12P>26K1>vFa+q?VB4Y%g#~%+
z;DUDe{B)JZ$P*zV-<IDpk=-bRJ@6P@9Rn#g%_JX~%*;YD&@`p0{muatG}ud1WoPwX
zk{TAw*t2k;BKzkpr9^<7^tz+Es7J|J^mirHmGwbvnno1c2o_@@(|!^>&u{U1E5sU7
zHWN6O`p?NUhKm5$)ow0BQl{&Mnofzt-3ObP0{P}wyMG@9l@~*zZOgG+koBKlK-^|(
z<BFAQ=1620fVqB5nD=G@wcJ+UYBEkX?h=(q595rb5)XqdIv*0=f=-*-8PpvSN-`&p
zuavcJ_ppR1ZRj}&3Dd)$#8aOv9Xx*gT>M_iYF#`%T|9p5T;FG<*(hGsSV3nH1>OSp
zP<jLg0};;89FdcsN(lN6-A*yLR4Q3lN|NL@S_>%W8D<17<>R^*l0LgeX_I`V*x$*8
zK|I1#cbZVEfMxQulvX~k;Ak3&&h5^1JPucRPqBfC$aVDX?L~;p@z#(u{)FLM%xjTP
zk?3r6tr*z!R@A?1)PL6ozeSJc&$P^w$YddAL;^!u*|oGvCVZ3>5~4J@m#kmA-KI5<
zkB0aX^SH<mb_xd1-c+5Z^4EpFL9piP7}zT{PX>Ct6-XyAIyT&{+`$u*aE0PCdOr8c
zNC)<D{L1Go&`-=rC^Kxdzdm;aTXj}j@a8O6*0vbP{h%DbVRU_(F)f2MwF~&^#mue3
zq5v}uw-KDGiFctsLvQpYpj+olmzRw~>DJTxlSVpWm(~c{@lS`n-BMm^@TL74zrd|k
z*;crrYGk;~3;M0_E5x>moir6jD7Msb@wOI^CKysCUlwJptO^nwHf1^&S4~@eet~8c
zNcNK^<9o$1q|he%t1~Ukt;bGDlzknBR;u%A@>jrw0>q5r)$Yst66=Q*WNoPo7OU{5
zZyfvB*u5KJE`e`?l!w{XdU*q+{(7wlm6_7fvrZ%1lRG3$E;4DuK!vDPArODBBXn`T
z;qP;d&jV0k;hGRK1&ajaZ|e(VVw7<etHLpMQ-2*ikZ|F-H-rOUFoAF^y?*oBC9fQ^
zqYIUK=C~(!{C!SeI!n2K*x%9V#2x7|eTg>m-?>x>!UzWzttZfqH1;>dvZ`s908Q<n
z>z(a<`q2MI{Q#uid!;yKBD5$rZgpm;U@*h3^MigvR`F&+dfetCBKt-!*2*mMZlN!;
z@aSSfEr6=imGNzl2nrFNdyT(H&Z!|c2c%6U#K8`XPzJ;PQ(9nfC#j4fuMc9qyAMva
zC2YG5<aV0Si!jwCNHNS`_U918pZffpi%J&|K~Jz+SAI<zu@WV^4U^Tq`%HbneP1$Y
z$eJGhZS<9QI*xFwMMir^h=|@th5UN~5#p|*sN`!YIqxU+@lDOVI>ffN@7=@>c00e8
zOgh$(Fpb{QS#1aPIdZ*dKw9r!qZt`qb$$e8+tov!06>GSa3Wqc?L@@xu*ur$!h+Rc
zXP}QLPb5&r3N@j-P@61V_a2A3`)QDnc_*-({}DNR2h?uZE<WOgeTF0#RSWg0#4bUs
zz9Xhdez10`i;%xQl_TAq+JKH^A4`={*sthLtAz>gwaKA~V>yhc_Mu-^bO@4Mu6V7B
zhENSh_@!aep<UDPYhGFdE5@Wy_)qs1*vp)<r`}g2TcUH2GiPRs3Uo-O)JG{NH(65v
zqz#3wytvX2%E@p?K2U+<6Rx{xYuUU;VKxX`qKT?JeWs-PG_p0;afWAtsNzX7q*E(0
zDOTo`ZK($xilMeFs((cI_26XOr(<r|i@2p{l_~r(bOVUaE>qbuhX3|eGra?6_SPm<
zF|)U=J)5b|xGVO8B?OdPTaJT0HcQB;-ZVKaO-`};AvHN}vf7n%&3RNdmc?o&;`a5#
zLE<wXa>aAN!;31xv}H|%66qZ>5ktlG0Q~n2=d+`0uBXp^Ea<cEM8i|vWu13JwoV(T
zSC%O$>$B#2F8?Plylwm%3kS5Yg>XgMfVEhIQfz;W3@V3mQm?wr#HWOVau+sEx&}!n
zeUETRHT{{*;6Cq4n+yGMvG6Yt!3$p7pq`UniW&Sbf-Kh+EsVaV8<lUjtW>{|GezI9
z?(f)`)FB;HEXtHL$miT2>e3g-GI(3gD|p)lPT266n3irH|8uTEM%q>_oUSX3OZ$79
zJC$`WMrxn$S@CWf$U(ZS&d-s2?f6!3P6NMp8BDhcMnA;vEnoHylN&FtXCtk@F4@0W
zvwAQPBR7xBlb9N9Z<=jQlaE^5$iJYfSm|ST0Ig6s_FBGEtqi|5FU5@$CwNjfvw4;c
zUL8>;Q=bJr*j`+nZm;+*dK*lC_cl*lxzQn}=vImw8zCsda?d%m1H)~kFN$4VeZMF+
zZZ^z*VEo_iz^E_<wE}b?pc1YBdHd1Y!tnp?47}p`aR#<D?0izk8J~;S7%KsYWsTo)
zhg>{)R_d8sm~F_})j;`37)!+AphX<Co?CZxx}f|Q2PC{svbdKx;=yRpBZs={)Gf`d
zf~?~gtUYr_3K@yBQ|X^KbZVUhY)6pVGepm(rocT?&2kI;<G-S!8@pD?K1qJBaO4rL
zC?Fl>7TV(={;rAS2%9JRHAVwhn8g4pL)0M-ijynZTRLU)$9K%s_|J_*1|t(S(cr+a
zgJ6gQa{Q?jq6}8J60&ik1@Zz**eH*wQH*v$yf{ck!lW6hKc&Ci4HBBSpm@yX{>Q^5
z;8?mD?T0?Z+CaOG=gEv_THjliV!**@xMZj@JNwnUJG&1%f@p0TFc*W_M4Z~lYnlkw
z>&C{GGh`7r*&l{G2h!HxGD0q@g)C>Ns%|59kR;+EnV3!3liNV@)H)&;ZOe~GB52r*
zCn4#2=oMEiG}vC>2<`>JL%nLvLE_96ZLW)$g2ay;6{()IInV+WG=N@}1!RvYb5D^6
z`vil2OM{<K>DHT@87cU^^}73Te%1L!%Sp72G2?ZH=b7UMeBTt$X%{DB+$!~v*0&9Q
zz;X1xOltFI6rYoitZ0FEutaCuc{H=*9dflPREE%GwQ1+faDk5vn9uy&eT&zctG5I+
zrt;#-L7P4gde(3u=Q-hk>nA2LQYJJzRi_&bypRT7KNU+5pXdZqz+5mUe5LYA#th|@
z=MuOWOnvPX7f*vYb7B@g!MYo@84T#brLEqL^NW#U0{~4jSb$aM^@^GZn~@^>`!~8w
zz?OGJ^o#~>!b)lokzo+!)LD@^VZ#`W0c{L=Ia03v(LN}_zq<_x0Ks5gK<^>gsRi<!
zxf|l(sx|6etpeL&t^#rf1)dCC3_ZNBG_FAKg$0M2u)VZQEn+-8Cl?bTKFg3d<T(X8
zo|O`fo1;&}()NKC@7k}x1>L~prb74S`00(65^bngVkivI-EVN?NMG4z2&(X7fI2l%
zmyr(=lH(^-#}SmbmOy(jVt+v&J{vw8oBX;Ur)Z1g<cI?U8=60Rp2EGP<$c%`Ac@6#
zg2Y}7x=qze-)u<002Mv@x&}L1)M{>bOC_kiBejrv7T=lAnkRCe0pHfzKatws;)Gwf
z+fS;+-y_$8DH1{hn{{@XqD5kWG@l;whQ5Z*kL0%rs-OcmohPe52<<n~E(>c<e28e{
z(x!5nX3@ZR7y2~dcz>jC%I5p&!}(U|yG0J)69?y5k&V@~o2>bpf;0>5o(5sUB4K@K
za-Imkc(*u+acb@eouK!~Czv!j;l?4O<HK&{Wux+Y;owOt_HE$+UNiRX{n&y2zbY2T
zZPjyeXXoH6dN_aD=mA$$C@g4Tc<ObgwFh=v`(F=!7hexvo+-POnH1aa0{rn*ay<;R
zoytC*1CxOEyqs24RK0cFLO3LRrr+e`#@~6b@!qj^yjGJzHo0o~YutzCyVb(P@-!qk
z608z_sB2z1X*2I^4Q`#da9vo&c9>x~;okw)tA>VlHx<!3Ze|3H&EMr-?>Fu3!h={$
zo4q+ZG%nqrE3d59FIRGEZ96i6_Zt`%ABj{0u=6AR=&K&{nt!L)+u(XGZZihkh3YGu
zi0WLB$-M0CkAD62R8shT@V`4kUApX->tU7djZ}gy|8#`l)hgmGgQ~+a;@ITYS!?1m
z5VF7zE7-I9FGJXjzaXvr5<f7!wMsIZ)eSHImxE@`X2{Xn3#Gp$(+WLNEu7Ba@bdd>
z6*ZtNis97)PaN}DfyH0E=}&VW=nVBha7+XQ?Z9^9!t;t5gaMV8vTz?wEQchYg-%(m
zz6@cWq!~gWNkRK*^+{15c|>T;#4`p4T`W3-dTfxz7z*d2JiiFed>ndU7y7jpN4}o_
z1fXj4^~}LH1NqGusdHTE&jR{Z!e<1R$0WFghX19__x}F*!zCoNUVd9~7+4J!bxdU@
zDVu=39-|-dMo+*}tdV5$Z^zCT`#K;x4D?z_=$s~bYLu*B@i~{zMywl|7mbZMRt#;h
z&?%Uu-o+{o*o{=g#ph#BEV3WUlK1GhYOIR@6nh-VJ(dhDG5sZQEyFS~&~6aT<_A5C
z1ml45C_?MTwZ#p~vc8K6iW!C19oXHTiN;*b!^<~Md)hTV_XYkQ0nk||;Q$s6GNpuk
zp}YIlt*(q@BAFH!6xupZW(2}3=`nDTu0BXcf<Owcc+%CoK{VsUamSUv$%#fbj`|K<
zckq5`n&e-+bfj-g#TKhJw^0<3;o?Bvv5tVJ&nenHDN<``EWrisIFx;<`+czi8jM*7
zE@bxKCdVz(;-?xA=h%G?Jl*2ejvtx=54XNjP+F92virstF13c%)iMAXwPMvdj-IZ+
z*`Mi`al<)haT$@M7ndh)pA!TS41mkG2ERTV&=8=usJ^SE<S;NQMbnBbqJah`-+##-
zBzO&v=ZXgL!4Ae&VP8xQ+K>@A^X$qhzuFen`wprrOj>a(BaN2yi)wo`KdC2Qv6Xsd
z?8U^1;=+jNI|M{z+a(3~w<l%pPo1)+et{rGAxI{QDyZw4$rw2p6|ZTX3<^f}?u2VF
zZ1<P7LDD^ffsiA&ZqV+|KaZrrc}?wXy?B{T!2kM-j9}3lyiJrY0THHfzrX`}1iyvk
zb>$H?HV5J=qRlAU7Um?sYMhzXc=DGUq}~ucK@Q1OA)e37SejqVUVO~7upTB?tgsE}
z@nkYzFiwU{L);((8XHMk!?sgsIyW>yADP*aLVQwxAD921CAWdgU%2IqFxgU%r<uJ^
zSB8=?FsL=U0u-~+m`5Eg%yU8cr2s#jmsYEh<3*tXxVhwo&AlnS*7k|aPTPCBpQJ1q
z@BZiq_A@rux5qIXn@3YRtsbfDIL`d1azi|(eVDQce;(MzYAAJp!9#AkD>8?4K_M?Y
z{Ig@x@a=nJU`~CiZsR~bYjFk1`G>5trh=vU(HP_;;$;Nr65@=N(B*oq{o|sU$av;?
zX6ENwI-8dc=9q0V$>xf})C*@&PR4&d-ZhB0m*oWhDtU%Fy3f-Bd1G3HFz;I^fgh}5
z5DXFL?!pv&HOW9eA{w(#f%wSDrB(;73;{RX1I9$Z?x}ax=aSj?CsGg4jA$!p0+P}W
zGnn~2$xHmJERkTg7MzJAnRDOFb0VeK0;A2+$H7nneX16)YF<&ZKbCYHWh~UKt*`?0
z+dC|WV8+MWS9^ej8gqMR0uhw$*PV9>XKTXz(MesXeZsKdX4G-KHXkN{#?ApHoHkHP
zVRTRbj&|^GB-6XFLJ&OJc$%q(cRiOtoI%W$x$<a0cO_X(K)N)R0!6O;hO){&2zZ!N
z$MF^~BecW)7ITgs@4=YMIB10481${L163YxB{(BNWU+ay`UI;HYd6k)XyaJ{Y>=h?
zMOHK%-;x>O>i$A0toA5>7~Ws@F>3O4QRG!@k}_r@)hiav7f^Cp6iBWXu3t^d`&mS3
z6H<Jcrbdw*z)gvEbtcU{43@h2(B5Jn=V;{~i+|^w^1(-4ECA>Y3g8-|?n@ZqWLUau
zeao%FqSV=L(FZjS>#Xpd!x}3b=h);r2YGlWA9;q88XyX*7|38{!EUIRCJ}sO`>cwI
z6ei&7-xc7BzP9yxZa$tvxt-lz`y)C8x_3MCZk41OIcPp)OX$`%t&~dflE|JFjM1V6
zNPILBmmIok7+;fTi;ESSKKo=QKzl<#gyZzxm8RBAc)>>!s68Oiv|qq*6)%Hl+S2C#
zn6OEpZ1&)IOJ^{$;(Yp<_BT@kB^sPvTdk8t^~ew=T>A{EG^#KOG$T69y+~wt1~t}L
z>+J*P^$Tk4B@<jKg)7XLuRtoNjI(j6BT2Ez*ejvA0G-f#sffpO+B5B7?LEkxIuYKq
zckcFp*(KC%PfnA6{%=tYe3ADr#!@ym3u`_zYX)*{jKxIrV)v-u1(lG3nCwrie+B*b
zY`%|sIz(F*F%`6=NSt=w9(4OX$JJ9-P>=8=@}XF#f;30HNu8QaL~DN{kx5|C;581L
zXB9lBsOXawp}n}>(st5>k`@BmhPB89fBBUr6g(a@U6e+5{K={QqbewBF(LiKg>G(+
z@7FY1q-G<F=k>#iCq66Z5+TPNPcCAGIcRhv+2Onf#opIQ7z(rR;DjMp9W-_ShXCJ$
z<B#Vk1gzlbF`0dclwvIEj^9pyOiO$+kZM1r89MZ#I3rNfU`c`HbeM*_=87U|;#a~n
zV7?ewy-q&v@)qovzSWG~y^t&@CLH<>Z{`|0?hOc@EUq7$Uc51KcUewNtaVs%Uw6%L
z%u&%dE4KdpU%(|ZnXtcTU~_mVhB<dDcCYD)HLFD{wfEw}UxM{3%w*DfIg#)wgCXi6
zg3b~^pL)u8v(23_K}iF{CoL1)Uew8C8(v5ueIyjw4#N!_32HS<#A2E+`j}&IHkGk@
z7Cd?=%X%)c2X?9<i3kEX+r&MEeq{}wK#1TOLn%a82@OQBEvE~HvX3M+TicN(??mu=
zBkZB;8WOPv`uu38pzi>TG$jr9n8LwVGu#9%&JxS|WaJYuvYK<}*4(d61R*KELXeRX
z1w=IPshcV5s$Msc7udD<H3DsJTwE}5905-V5BJqs-jYQr#+XV&nwlm!R#sUAEe4!X
z)?b~?pbcbs4p7J-BY8KHXraud6m<5=F}ZlmwkDElPt`cK_T8EXl^nGRK%R6FlZmj_
zs$&{K=pwyDi&qs0QUyK#Fe&AEnoAY<qK{Z)C5zRM7b6gCcmU8nA*Gi+i?w&uyNVIt
z-(IZx7Mu!0Luh`TtrcDeOor)*HD`V;C`v`%(Fj@tw479JA$k>_r1C*+%goTVs9J%~
z;{1b5N=yMxe#v4P;E9r!FAAJ8%fJxM^$hyIzF!wcN|meL*qE*QB4cm0weNW%_gS+w
zInn$ybDLStPZ%sbXc|+FQy3;W=FdV`HzA}s-&}DpBH<H;I-1>};V$|5bUl6@Zr3-U
z0RqsPk@VUTUL3$wRd}_JFC#VPluRG%{Tuc!YHjNot0|orPnRe9Qe&V#kAgNCn+0-?
z7Ya?pi|}XP_!Z8o#v6n$Jgqc4!XVvbS7@VN6179D`fkR-RDR`&nbtzwsCU&hFf!3=
zDMTPKTjvM!X+mXFoQ_z9Q~Yvy9JEQ!aBPrQ5Ix?C`rlXTSQnuZMY=Wk$+csyY&8#+
zA~&%LlnCU#LINa<vxhrK1c%7C-?A4h9luujrj>8Z4Wo)IndGhk$~Ze^olFMO*Rv~k
z_EDRC^+SJp+0U*E@%&CvRkR@-5KPFhS`aE%v7?zdAsz&UAI^}%X-sC_8Lzp#>K{hm
zQm<u2$h%Buj)%$Y4`R7|F<}||i;rl+VGbe3&6gIx+p}I9u?`la@7JF~=-@{L4pBt$
z&~vMb<;)$(skTz9vFNXQWU!B$BcCwnGWZ9jFKCO@0$-<%nl)pOMGX&IGp-e<nv|#7
zl|Sd?v7D30cbIH0pp#!GyCfOfHy@`K17gX?$zkvjXV<P|+Y2ns($mDS$(3@_R^;fD
zSh1?d@mlrB_hl#l+-<L`VUN<U^4$&;J5%xXs5NG^?E?IVYTNNgYEUj6h#9W{h-z;6
zt%)pYvNH3#Z|ziYR&xp$<HDr#J$0yNX`~WtBZ|F-*x&`&6o;fdsPsAY5Tl!rA0|mo
z!xvG;&2j>zi=l<^onpHdNdx2L=h|s~ZdAT~B%~}eXS`xq!vnvi;c<f5Nr%|b8Er=a
z=<vP6SYe&GKqm^f=A2pCw`p9{9v(_@O@sGmtI<k#L<6XeD8y`{#&G)!M8nKiK9N8o
zaHk*v)_a)<zbzVvBJ=)WC}5ICA@dvFQ%EjRt??w5MWW{<25I#B<%7Kt&bEMS-f^=a
zBcmfaBsCmU;n;@l8_`7#J+;u7F%{v#)Z)_uMq#`WP?Vk)Qjq;7*TKR^!OYX)QEZRT
zEtLkqjvm7zsgJ3ytijZrYlwFLT{b2XCnGvU+_<BKIuvN6o0Sle@RCcNah59(RO1TF
zJX4=3971`@qAwIS#)TXf9{J;mOT%#ueFE`XG`a^Or-d;7;+BC@#mOU7qBHtptF1-J
zZCC#B{N6_mIAZ=HME~^2GwNdDhY^H~Fl198^-a1<;MR?d^hlY+f(yx*Ns8!Tqny=z
zGgjfxdUSX*X%sL9Ul3;zr>9>zMvg6}z{06qY7#!urwA!Yr?~q|U(Ttm0wv0b4%Dx{
zs+ma%EMw9~{0&FKrQqy@Hut<eYH!>^b0VLS*FH<+LW)1nyvXm|>sit%f9*hL2-+mx
z_E@fQe&YNt+G<bpk(x3{srIU~woLI16PONwIcCo!0;}7lW*;M8jtwlsk`l($+A#M(
z78@dUESN{#6_f`z{VufXV3UgCMXPoUGa91Xv0im2%SjO~$<fu>-rUaV;l<hfSoDKb
z4v_)uXioG;eVBTy(2IbBd0D(DAQJIyG%doiivFf$Mf~~`2ARwQn%Re=LYcfNXJMi5
z;G9yYrZTa37hH^b+pn#8zrrxcVH<$w37S#tozWy(a6DcXT0`Wqc1cU{<+ye_pi+pC
z8tq$e`4DMRh@cwHr_Sc-w{-exQuwSIy{*OO>9%ybWm4E#De9IQeO-mUrNP!Q>B&2w
z*NdYncxVE+P!IO*az`iPQuynBe?5D@{!Z^)RWNP^{3ole?(PrfniMk_FvX?aon9#A
zz!^-FVfN=1=zxlp{A~I4SAfIe+$}x4?sA};ZU@>QT<;aHxoYqm{N;cHyY{6(H_Q5i
z+P<X#0#8=6%yWaA`G4T4gvjwtbs$HiS*+0qBzC-k;i_4AoVZ*t5*z#vrD~4sQK0xa
zOAvFZmV#>$mh_aci}bgHYHAlM;Tk8?GIj%0r~UVZo`G0e$1?GfAxcf7{^PzXOH0m;
z1Rsm-dD~Sq$Vvm*eJ>j_6C+%ae~+Lua?27VV0P3Pi@1igY2L?hHGZ2pu4Mm(nYeW3
zt&+U<WXoiiAPp@-c&}6#4{pmQHo^L4tX5zP2Q(!8B(lU2PT$(7oY?3)yP7eE8A<B#
zF#0!Z_*=ZUTltlBtiR7VCC#Z{+utYg`%?4$@C_T@3zu6EEamcGffk?uBBF+gR^`Y#
zPX!Z<1`c(iIug-h8Bi5mT^^6dyR>gQSA#ES%QAT*mBY%e+jE~`&$=J`7@{1hoUcHm
zrQ-hO?&|TDv7&z~w*=YEIyx`bO|JJm+M0G>N$|mDBBsMit$|oJbOU?J3Z@!CeT$K7
z6$V`;_6gdPA>Jr5C8PN|T)4f=YWdnLRjplO3oO%qQ%;5El`7-03^J|l=>k4s1{@XF
zqYG2oQmTQ>XM=IchZO7e&eFyls~;%Vh782A$`UaT6t<@yP0QLarqrG#y4Jd+owwh>
zeGAD#pdtco_3sszQ1C<NR*St=j&ER0(F`NnRUi}^F{X7M>t$m$$W1olaHKAh2YgL0
zQcFd4uZ31$8Cq+iia%6gtJXky#Uv?Dq!x7uRdl5y7FC8bQDxd>Q<L-6<YKZ0Rg(lg
z<^dEo?Xd`RHE9NP9&pBUkV-#U<n}1YnyrS@P$d0JIk#YTSioh8v<3(gb`8~56~s4~
zVH>lsM>$cGVZCZb9)-vR#!=fBf3DL}_;oQiX0OVOx(de>Pc}WM>JRzu7K>B@mQv3+
z;Qv6O|A&RG*Fh9M{K?{pp8P+f&}}W8{s-o*D;*oB4UUAbYrOyx7c7MoV+A|cf>o{h
zgLIed5oR>*X0H>ea*FVXcH(%=ga~r(v9G5K2w-GF;5g3-6I;=vL8iG=-;OyT>@8Fm
zWqv{zM<g2lzuTdqY0m3cvW*KZkcZcOr2Mox-%n2&AGi?T_T-En{~`zi87$*h?m0ao
z@rVG+(VMr0+%~|(hb~t#+Wd~C#z%5naf2Y49`nMM?st^L-j>Z!ueJIj=+or;kc=84
zbbxSzuCU3jcBxH0@@pot967Q+L(XShzx@O;df&WBESzEE{TC9<5qLyyf$opss$GPl
zqRE<CIyyUB`qyR(^}oF~=OPZL(Q5S=0^e~Qj89%+2PO}I)6=`VdNhA{1r|H-z0ks<
z1tg`?M@0H#0bghP+sS+K`z6#QocF?4<84oOD((A^RX86rUlwS7+JkoX;o~4PCAZ^O
zI?f)fE$yxC=u3?3xh*;VMC>lk;K&m-x7O?u8@#*czxdg*^k=|!R8OY}>akyWnz7f=
ziNJOhkEd>zMUY(z&m0^Ti6*CP4$5kb?$Vc0C$_>_h*7K#{kKXeUr{*;vD4n*D?wNq
zU<*s$XiHYx`8N4uxgN~@SP2VCOs9Cl^(bB_nBM#m^;cVua_szZ@d!dZngt#=J3A*)
zpE+3xJMd6lzE<CFKG%=eZykcaQt6jc<KLu&1|%0wrXZ?VeCS}S;JaZF#-o`dzOc5<
zp3J}3Q}oyp<2pAL^hy?^=9Y)c@_;6R44l^n<3!a8;V}kkOWT&@g;kOViWw1Be0&&N
zC_-@S9~u3jPeh<YS@m4_MocSTKPab*C6BAm2{dIUP_HOF4~?7PloaU;BYZytPWi^D
zG)x@iU;c2_knVzaCez{m(kr6~i4`gxFX*>e!MG36xyl&S9yRQ^h-}wa^CDwBX-M0C
zGn`&q@+B%s_`dY<z3uCvnMNod+axB}4XRMGSr?Edl*U1)qEOq)lKhZseto?F=)6*C
zd^#FLPix7rGG+K!`sKZBdKKpAVasE@gAbXV|Mg_E6v)28K+Rn_xk++T13iDN5md<_
z{W}y;KPo454Q7d_Y!y->rsZo9$PQj;Lp}r_rP)_x-z4BfhF_mE`KaJKgb&E8Hi(8R
zbc^m(hU$Bo5^tClNw#sUJ!nKC7ObS}j4FJc%szpy-I|_;uO(7+__C~#x`9DTu35>9
zZaeeTQQmLaqFhEF5z@9`T`_svEch3#;_8vIM7fj_e8S!dxTC6<(E?PCU$%0as?I$!
z@e|yuC&9;Q<urA{ux)w!Q|GeD;FEfl3WClB4)v*?m!g}fp)Dc7sd?bNbaT)g6?E)_
z(S$M4(Ncy+6nO4us35xN3M$uDlyzgy+IoR(jV&T=3A;kdXi4NEbBzVLIwGsUhWbvi
zOuzq%+&b>8ww*+^-}dG;x0BW?0hu0J3383sgGHSc<~Y$qSoiR~lNUhQ>)Ix7nwl;r
zU0B4FEPi;yQ@u3OE}4HOm70E2GG&LT@ik4JuGC!S4sNm24Zo|*&@Ys!s8F-s^n>gw
z<E2xsf4(uobP|$8sJd*zZik!+!wC@-&#Cz^Z`OwRonrHf^hAmHs$`c!@Ks4*yZtFH
zYIGCSqX`w-<osY&9=b?-SGM7sOE`(=4u`Q}vGKgZA7y)^yQ8BMwcXY2RedW-O2gra
zX|R`1gAj=~1&h%dx<rs>(5FxUM9nFWNoNZO)AEa$26hBcr!H^W*2YSst`}98r-MFo
zt-_$qVwBLk7;qYd)0*BitJQW|)EpbY-VBedoR3rcCzpp_He#<Y_18ylXT>dOL&V2h
zkmS#4`JvBK`P2TXX@2xf<FT($PlQbt4Y<*t3R?Cd7O3oicO~9m<Z%11jNw5h0MosX
zag+VrZA3djx{OXno7WFG<{EPSX<;Uny|s0Pm^@;Wp+?XRaGvCf4-i2bGp%!8=DD4E
zigQ0i`yp)#4OP|bgH(UUzm5a~--d0pl|axhznEhy>yFv?@L>o0IudYknr7~|MG4#k
zG7iFDtq}ZxNdMbcAc&5B0=ZJ{MS!)8ZdPh@LEns>p#B{ByeuWJV$9<2zZ7lYPFb5I
z5`eU_68I(dVA}k`2()#4zdLu&@9#iv5Vz@fNSos1w)f`XNsI$~Wm#Xu9yWv^8|4-|
zmpKvVxj%U#Aa2JMx#?H4`2gSCfg)r7@rmHFIB(TXyDQ9XG^1K6a)UdOUc7<zI!%Aw
zWS*s2eXKQO!ytycIj~VU{XSFLyiU{};{1FIsqF(l{`K<q#LtbeEOqx*skRkk@;L*n
zasSAKBAx^?GwpvT^%G`qqLC1hmut`)LB+>Er4B97OIu|y=Q_G%C!a}66MolUP@~M^
zDEY+{IxV*QL&6$napmdkaesXN2&ao)8!IZy;Q=IuJBJP*ZcC!Z?iPff4*3OXZRn5`
zLsD2+In4Z(=|Y{!yVm<f)`dYU)a&{Pe*;2R?pBo_|1_IYhF}x^73n}_c_&UMFm$MZ
zN*R^FJgZehW_qGrOO_BD_2udU>J-4^C!1sZ1?;r}ejl?x8Y^12K7SOC{@0xz(LqL}
z%q#q>e+$g-%<N8qS1T@eH!y3nWn6vX6U1f29=us@^0fDbdzVpm<x+1FZ=<|bKa?!q
zQz9u{j}wpC<hV9QCoeb~;+aZ5imDE(L>U-gHW-dmy^8x4hIuAi4riPcDNT3tGkcM|
z9u;yI!cQ{mSOb{?b^*duYAbGtf&d8q5_gRaC#D20jz5DeyA*nFd_?A`6;#ml5C0QP
zbGLycI5|U@&uI-xVsdI}a5g32>j<K8Qf@5Xb;+!VNG@{h?ay%K+N}Tx8<q^rs6hQ}
zG;)9L&324!?bkc<C#vhxY3iY4v(fJoi22*>Y0k$x#Ipv$cj$rI%!!K$0xM2zD;c6&
zJ&`mynZCl`4;cPszjhoVK8?`wBmIwi+DJ47{rwxGI!2=`4@8J}K7oc`PM2{by}zQ6
z)e?sqAiB$UC6N-Cp?VtpBmefEKJvAB!)@Ynk=IDi>R_oyt#i07pQ{g`Mu!GyY$R;m
z=-FZ}{;^8KFm?K&R}FLFSMsm;JBr5g4pToSRl&3!DaWYUcDvct*)0n^9rp!YJR`rm
zL|zBM)6qkRms^o~&oPm(nI3KnlXu1gv)~az|C^*Fajx$h5G6wEwCSJImokmUAfjoM
z+dv%pcM(j7F5^7v?*kP`J|oKxd_yt60&inV9VJKN7=sDaG?ZU0dSyF`5R@LjB0a$)
zVrpZC_tY=3z`X<sYNaR(dX>n(5E^$2pxr<a@WX)apH=OCcbgQI`mCc~%cWl!(9m3K
zUR(tzqg~WBw08}8Ryp*?RU~OalGq6=q9?9z6`Eh`CHp5sv%Cgx<^~%1$X0LW#+~(V
zOQWh4F9C18s8%pRMj?tf4kFVMnxS_nmDx3<_c=nHSk?Lr#Ez3?P$ZGwqfW<lPi&Qj
z1h<ZdYvJsa5vo+7;c))j@Uz1TeWj59DzI&UckF_kAE4V<JxXt=2<6rhoZpnpL@nvq
z-e%597lwjzBC$hOzf)Pbepx(BZsYCEVRH<h#@VNq&C?&>2d?%(r?U6Z6g>wE7Fg-w
z?K;j^V^R+z<7@DOXSOH&Amk%^DuM`Vv^?ZQ9F{)pa4OBPHZMT=Qr<l>8>zE>)#+Z(
zV<OEtLt-pG3lc(pKnNQoM)!{DX>52FYPNfV#LS5>jm*C(Hhj(FJ{TWsaZTpGgXlf^
zFB}8(CRHYqgLas3O^mStO|%RSy*50*R-~vtgJPsYhfCC?P{e?TUu7&ch8PKUKltWs
zEZ5LHduXE>7o*5W_AA<vP@VLzDU@f95-Pe-Qfz~NfGt(<18nkOnW58sM5q9!s2g&u
ze?&-;;TQYZ({OGI-NYza$Kv@|lJLR|jl!7Wabw^ejLzvgw{lh{BW*1g`vAXs6Rx^=
z7VrmmO;Rb+^xTO1F)v+C3|6sy41OBrUnl1s>9r{eFVk_|>#o|;%aiGM&vC))E<bI@
zZLxuGz1(LvhshH+j}(IY*HGV{WyW0MO8dzfYAR__rU{lrPkPP>l_O=~PN^mqmEO}R
z4Ioh?Sv1seHaRqX6Wix<keJ&U<$%lPPB}FD;o@?TdI(ofuG4zN2)<1JD#BYRX!Pe1
zU1|Q^?ThSPFOVRvkP_9(p&&TQ9R>sc(cjH!O+*5#W|ZiyB#`+f%VppUNI<JeByyo)
z_+1*(!@0Z40kRYLO}$O056HB_UEWHEb1XwP12F~zUxov=#sk|X11z3%gyiXq9NMoa
z<gU<Q#=Y46LR=DxNDhehj0O(T1p)LB!WMJp6j?r0hc++&aN4_~ouxt_s4`-ApbI5-
z^lkjThET52zUk*VWjup<hk3Qu3^&?KwoV+71<5_3vWbH6$nB8@=^qd~M4-IJrph4p
z<#`c7I$V*qbeWhc7`c>V<JW?o5{ebzcJe)6CZ~%hHkE}-r`6CP#x8Y&rW(bX+B8-N
zFn5d&Ckpg+{|=V0&dX@bYE6#Jq9muq?q!Mu;Vuv>Y9+&J5;GFtxSOuoc<jte=#kSm
z#keo!K$}vG+T~!Qh-{SQei^H~l5FpqG?-bke@yC_&`W=-H=Fi~1Sb!*Xn@GxF3Tv{
zyC<H$QF8otFEb7IOI-u$hm9HlM}gXN@4rZ{Vw}0!tCa0}=?vpw!PfzE&qVS0K!-3@
z3Y+BXeU0K1nTQ0!<O_gVjo_nicncm04|@?T5CXmN2WVKv@a*C#0AqCyrtb$ptqMg!
z|JDcUWrRMRJjoTdb%_(SEAJO`um8}CB)bLz$;*aFvsa8jTq8*r^S)IkbSwa_CD9rr
z-4jPi#)Snlt;cBrD=3t_F4CkBcC)lSkn18HQ%gC7zH7Felb?;7JcQ;4XsDL1k}lE6
z{HB_b9-?7}?#<gP4E>6TIh{7W2Ak<)z>jaVXLP%Kecj*-Mp5$cY*7tm1@=W_ZoK5P
zi)M67a-fxHIv@6!_^7Os{QW(iu`=3&zL57RSj<B4!L7lL<{5a_n@CkYYs73qp31VM
z<mx1$#A`zTpZN5jctrT0h<}n$LT)0VgjwQ4Ci5>OiG7MxCXqV@#f)l`BKb%bhb6m1
z6e8Its^bqtGB4O&rHMRNgB?XshPQefPf*5edSW58j08lpK$8eWGykd>MDp(s<{&Ds
zD}1K1C<hA&mE$70^?EtBqeRzz$ebcIq)~z+Q)=nXEORCNSM=W(1s3P0nH_H>x-}Mh
z?9S!R$chwROA_Yi7)x6dI!2Pk@KPi8W|CK=(dELr+eO%e0J0!Tz}xtlsf*P1_fxX;
zR({KojAt$b&2NvHO|^a3P_AV5GoAjXuET6sJB|G<N|kM6{jyvoD;ZoJ^v;54mbH(m
zrX}_>70nS+wv8xv$*;;yiVVCKMJ~=DcPkh_le@Sq$~ec(PeY%!G_x7#vm}`G!}}Lb
z&I@JaeU@n6ImjkxX(l(bE^9i0iAl*&X@@VJK(Jl@Bq%&sU?WEPB7w$47QbSGl_`S(
zgd4tmf_)n{UTR2CJ;n#%y@5YM|Bh)85NI>dqQ)xK28X$U$<qvuRh|sVg&`J`4zEAX
zV+a%+&3i`ANj%QfN<V-|*uDACssW_z+E&TBs0XC&DsDnMQxPP9XgIIHH7%55=zC8G
zh}(#H-S}<|FGlkp+6a2C<h`o8oKX%Nu4$X0@dmv-D=%{~fE3cDZ$QmOp?Oz}@|iSk
zCvo1HYU=W^eshdAyPp=Nj?^8S{fOIX=r`7v<<Q`VEfKAGvSj#YA6c=m1<xdDPjscC
zzjb1Ta-WK?oJx7Mq~sX0CriqUPihj0N(3n>y3g$Ll%(W~Kstwb&iw8wT<L;+2VCij
z{TrOwtbGj5w8Vf1u#C+M<W(J@Mn%0p1DdvW6mO}Sl%z!}jGM@zGq{Z!v1hlbScFU$
zjv470eE)!HKR|$of|w6I?A>IL9K@kE>gBJ%CM|KxM*CY@{OWY_sN-M+5f;}ryC%uT
zhY`d_Us?Zp1!cnB&F7n@2vf}E24zD1h(QYa7-n|;*O2+7NCVN_u?UlQ@A7q|G45Wj
z2-BLCn;ywQRC3=Kgb34D)<5ldY0r<GpYM{_Lew$y`6<;Eb*`5D>S{}=2A6ExZW}!j
z`c6U#0rPq3wOWfhaizk??Q^YvaC1285eMz9e^m8iw@)1;YneQZ7WAu2`Ve4qI#L^w
z9q6#uF9Y(Yc0X~n*7Ru~%g$*u43GXL4MsU_&zch8tiv+TwSA?DZn6Zy5O>#Bq+^SC
zWcnDIGf#OhWS9av`%f>cMV|}@(#>brIhMhtuzzWxu_|F)NIPwxeo9tnVp}QPY32LX
zfBmumh!&fM{QDS6QHbCgWuoIHOI4~cU7ftLDWq{pGts7yjwxQ0X{99x^r$MZOTia8
zYoWVr01#L;5q#ZN?QrY1*;UxDzVNAvT`E%Zu{D2}#}W{>a+4oYeD=nREG$=C3@zka
z$2V7`oMUSh7ZAHqKmOMEU0Eb8>NG)g0FR!j+sj`Shd0n8coz~Ni-D(Zlqg#-&@TJC
zSvfz!QByEq(d1=t@w9Qv3|Hz0tX&?{l{V`Dlvrwcx$l%-oCc|-Pe){?_7vG(^`)By
z8K@(rEzXS4LQS1YrL0(1%K$}%uugyMf<erCT(iBzE|ewuYsXavw@1bJv%ist;k`VZ
zxB<>`UnKXnaB*-AW6+%DuCpe5q5{=&zlzgBr;==%bN6|n>)+?a(z6>Zz4l8ii>6Y7
zUgTj`lZJ8GHJrW0M+PQ2Ef}Ee>9UGqoC;m}u2Q@Et#JK8WFf@)$-pvD%-8vNwn_c^
zxc>MOXGStIENWVvz?kKj$S~ggo`}e|a{4+l?7yWYy!Py>Cwv%{T<Osr26d3dGXv8j
z3`5YeB#y6A;)SeH<&KPnB3{88E?uzfzswUJ1za%VnpQVPnQKeY?}kQsNV1~?HW1i6
z*+QoHe)kmE<@-+TBN@yN`SSzmJODM2EsImQP0FWf__Ljz8}>f;7=97#G=p|bcdK4S
zhS0UgtKp7hgkC>l3Z}&Fv0FtjNaFvvd_Q!}Vg`zY>4R(=x%r3U>FHXdb*FJjF3tb(
z*Mq23RyO5R_@o|_kq3jlp>3pYVLO@eQ@UceXYs1YVel~XSUD4!Ce64{YYIi&UPHy`
zG-b2;cq|WR9AYviq>|i2y3^+8(8;97N4eu)+IX29s#2D<`W5eBd+o5i`J0AHfTEE&
zQOS!IOr9g*Jus@3F0p_AX`U*EQT*C??&6`pk;NWp(Bqwii57|p39$&RwVr+_`PMk9
z-WM=+bn>NXg^Z&6!&qGsPS#e1L!ln7`gk>e*(h8OTU`_m*x*vz96cP(LC8V@GW%O{
zz#p7X^nd>+chi6VW7ds;(zhS~F&WqYFPFmqGnto6rd}<6yUp;;C*^htyG`7BAwS6w
z*gvR1kvf3}I9DxH5d|>acM`t8D{S7=rkxaTThyO9cc-kd4!Y4r`4o!Y6z5%UN0A%!
zcHdtcc0I3enLFQaPfrI|10yFJ0~;eJJzDg>-?w{v_ZKIjt*tkH-Tz)c?n_T%YrDT0
zzJE5=Peusvb$vbgwW>pU-e1m6W@7z(p1rBl4|2~HKAviC@NK^VXL|!~JD+<`r85NI
z?|W1CSFQYfKb>FCj;>mNT%+AOcsaH^d_26~Uq3^po~Zk|d*9#gS@_<MAlMP`?d05q
zc+{%3`l%=PaNvCH6X<Q*e&5}VY#`M7g?tj^;xBW|+~DWh`gwSN+k3s_vLoc?*u@gq
z+VOqeo_!u%AlTvC^7Hcb7~MLhImNNp@^A9_et&qf`SND^y?MZ~`c<XCK84o$Juk8E
z_&gS0pB=>Jo|xMa<mT}6`+gtXAB?Ph-(Nl6pFdx}zAh}(>iv5=E6vsQ&2n=0^!x@K
zob+@nma3gN>vns689)P;A~9z8{XE^@Z&NuROGkQq)0o^d_C33QU-9#Q9}n&99B+&u
zAhg<jUB&vnJzenoK5kXx`*gYAJ$$^q-c1?53@j{ZKb-NaMSgdD-e39Yb+w)8eJ)Yq
z6e|o<N#z%Hmy!9oaC56vSk*Ml)y);%Z+dK$*SoqfWpK-6rS>_^^0;%m<G)L_W2Y3#
zvq>&h9fLnf7MtGX%NCahl4Z|h_LjME^$CVY{sRFunPpI!m&ZNy)IyT1Rx2GZr4B5s
zRscj1R+JY--^j|Mkm&`bdN(t@j;rA`S|4R78C66ln}>BVPAsd`{LY*kraNOLTSK%r
z@{P7@>SJcU7;Pa?EA3u>U8Y`=F)1v{8M^YWtxeC)R$q=W=hpjaAmqfGiG{do2Qr|~
zy(Hu-hHOT0VmUI0u=K1lADWI%VQ$5xF?KNHh<WPP(0eF=%cLc`B}XT;iqEt@WN~uN
zJ9VFk&!o%XQvGl|$`H?n2^a<p2HJsjAWl+Zay(`Ih>g&yCJfgCJEAIU6!h^3O}4ku
zKhaNfkgjZT8~#^}bgbBu`nScxl4I=1b0k7!5y_wDNu%Viq77|hL?ngeLS%o&KKgYz
zmtjlx*d%jScuJ5ei@Ftd?$3?8oRe7`GH60dr<8IRZ|LjkQC))-m;a<HmX|Lw7&BVZ
z5ocYM;ZvOrwz<$+mDlNDS!a6n&7SPCSae-3Vw%XK@WgIe$OGTFIOt&SnAb(;&-}A$
zws?#jJt1C#0->f;cd%gCOsT=JZh4r}EmaDYux`<BEOt9b5*9=JoCnM!2@_CxgmZ9N
zy9Eax$qMRT8dNKlR3^IQAO$ma{Du#*nS8tqHjc8x4D8i}S>~E}M9-x4T~l&M8ct6q
zc4U`q8qk?>o{~bWncKsLq3vS;-oP{qmzC*Rq}b)%<y9Z|SDAE7sr2o=T@CD|nh-z)
zWkguE?p+mV2}&M7osoqyWH4kRD&hDyZJ7p}!jQhfl5iw7ED0fwDWwWEka<*9JJLKL
zYeH9Pc;>)cA(_E4&Uz4$y>zf1ea?8wQiku0&0_Y@ALqUu@wXi1x^>^f>Ws%N<2HJK
zk>-bU{c?%*Dx!X=L$%CM1&v&j8gy6K>amTBlRhZ5PSXH+M5DfLeYs%eim%j8mmcSU
zZFRt5dH8h79X_Ylr2<oH$V659_%PB8Z0={aS~j4_7nE<|V1K~2XtnCx*3Xa89lQoZ
zkgAs!DV3b6D)kkX4B`A$m~(5C<sqb1rTfQJWXyLEkM_H%g*7j&5s%X8^N6PQHjRtS
zHgsMU>WXlx)M>7DrZ4}n%anV)wRMg76sO)G6GtkjQdrz1G8#42lewZv6Wc2)$MhjU
zJ>Ul!5y5P049(2QAAXgxv2Uo54Uqhi2u?8fYmxG7Yt&GT=0G0mZ&slx$BV3Y)wW!;
zH@;G@<ZZoCHz}1U-S%)juXV9hR~!hz*0nq*J<==<8Drs5qE1bj5zB!6IcUOJtISd^
zXuryrCahRKlm-k<C4>sY6$loY8(qV@_5!e98umgpf1b;}-i&G&%bKYMU?!Zeaszg_
z??r}03)9LHX8Rs_^#O9$IwMeSHhm*dHa1w}l&+~rUT?X9=SfG_`icb4kU`@NosJcO
zIJig)_reeYOE%?si!--@*D{puQUjqWBw+daJy&e`dIP>G`qE|pP&gb*pn;Hki{Af=
zG>J%<4pts{P<*yt{Q&{&ID1=xq&f_YNsBa5P*}E2*&m&4sR1?|?&>hO6Si(CFc1#>
z55WU=S?!PVas{y7kIhi`a~n)Hi29)K&DsOb(uH<v%mhX%G+3^aMM2M8wxvddc<$^I
zZCv0}L8)UCMW(c#BTLTxo!vT9%4JKzw>1a4Tmf4&<r>V_y=}Vm6IZL_G-@c5MW6><
z@tQw9rAt;|a30UQV3WIWsj&2`WgyF40vTQU$DD~8VvNpgs>MbGxJu@r|GmL?aP6s%
zL_2$njkq}rXpN|Ina;n1A9LGRgU)sQ_7(a_8>7L1By6@#J#y8SWH*HnzDN@q$#k~Y
zcy6xRs*Nr-0%_FNVGPy)z<RZ%#>k!diY(s8lSSb~LH)YOtBYAVRsTcIp-6tK2I=7v
zr#7PJJZX?}f#t_|Wbb3aU?8tPLhl@>Cic$lx#IxM+d8W79+ToWt4e-*X6_AX>#`{{
zW2JTd5(fY4Vz(Cl>-+^~05@uMq-BKxw(k}j0>A`okitVx1~+TcTm1tsas(J;d0?hZ
z+~TQnv5HO&<sdC#a!icpX~S5)z#KI7&w3p+{mJgt4ynP>v>jxCXk%*Hgi@{2nP>J6
z2Cjtd(HEcuWu8jNIJD8tzJ&@AWAIOOSk=d6#vC1+^*u=2yIi#Bp9GQ}o(s(XG=+kq
zFmb&)3IX8Mjo)JY*wPMkDAUKKnvA%Ra)%s1goV^M?{ZN6u_<&gRck~m^a|Ib4@Lx$
z#3YaeTmWmPU(ZUE=FMP0nCKv>uTM4rjLD|&;PFT3%B-C$|09H%VHzwd2ndvX3V_V%
z+vhJGVu6`IMq@FZYLCE1r)IPov4;e^YYapV%B(Sud-Z&P++KJq>%FH>%#Y68c(~^7
znnNGYt<@70jSIPJ-c@)3|HttU41H=pSNva;Rqoy~&Jic)EzSxj`vg14T@D~f8cz6L
z>ZpLYtOHK+rd#YzrQ3vZkSyHYLt*r3i!3APZMyHn7Z6A$PBBM#O~=^;lqv4%Uad>n
zFrc1Y4p8z8x27EjP<S>#cX24aeQ(0gfK-kxUgXyHe;iw3kU1=Gc7LB>PR)6p08RA?
z$pT&ba<Yo;;nBKH4`oGfuN~m&xVd`9!f0@1b_WIE!X8>b$82-=nx!mS3xZ7s4{I(T
z01-d}I6AIzeO_0w8B^dmHLvps#Cq`9cX2&s@YQ5&|AK>ZVvYiH$hKXL(V#r7zVWt-
z+8-Zfd2pKP%AVrw<^z3!-IB+^+<<5L>ca!SLHAz?ya(M^5;BE3zHS0NgSC;*J_7B6
z0g;D62QpWdtz?1xMIbr{x&-UMzq|vUgnr;VZ~hCON49zzWKQ@~+?Nr8K)Jq|uM8tw
zKhLE>;`ksULcV(fJ%Tnz`$*#k_xI7^Q`p(BqT;fF%k!@efx;Hb3Zw}%nz4*cG;ao^
zK)RCwy&9-VV_IJX_(B4irLbsNp#x<JtQZYs>31Rk$pYC2;_=Qt+GCOl!_RC%*UUZY
z>;0(xpM$n|!vcw02>m&Mo1mL`dKrF<z2Q-~ME#S!-0X8u1hNVI<et6RC83<X8NC3a
zUF`w&NBOZl@ly$R1BYOZ9Bn~*z3y(B=XC{rdikqEjB^Xn7!jxR(eVM@2I+VM?LwM0
z1Tn7x+hYB^r-9wEc2j=D!FJF=Ci%U-65jLVT`d3909gcQ&pJPZr<)&>*6W4G*I-8G
zulnEkmpeh(UUdoxaX*uzvAWA*4rB(Q^#D{48~3(b=HjnAEJ_1<$`@t>sc;2U3_JU(
zUx@FYV6Xzu{l5r%2OwR7Zd<Tz+qP}n_UZ1^w%vVNr)_<0+qP}nwr!p1|Hhs7W@2LA
zt*F>hv8!@NW=2L<V&z(4hL9ryfm>d={ee@S{u7YD9&fu8aufT`PU$?`63zV8A;P?K
z`v+=_tNs!oK3@V0V3*$RdYe1cv#wT4+Qc`QBQ|<ESn$lA{S;)i2Qthwik1S;AgRxC
z8mIz}>3vtu{HLs1rk4wuecwMd+m|*ycvAtv#S$hDdCun+VU#-sYD-}7*q6=Udo*^O
zX^^zp%C}a9I+&1oK=#W8rIMmOn<$x&fnCP!!lXr^`4lXT?1XDfB5Saqt%<LXa?Dbp
z-kFk$T$nn%no=kG=^kf{+5#n)f{OevDKvv3$CX%_GocFwB^NY>w7-<oW?FB&$v*`I
z8>b(quqB8<{QwFU|J)N;44F>$*L@qbt|ANEPb6Tg{5xnF={T?Jh0M2BeW!E)mWWdT
zz{0P-fU=eRYF#UVP1uPKKm-uGL5)^KuuPEW{km8DNwFyKlapb}5!P^D$~%kUY*a}W
zXbi<#4<{x7-Xz&9S-6bz!M)fXpirnjlJdhnKoNyr(ZC~S0+>v@9W00J!#)3Ej3N7S
zKYZ9+f0PAU1GP!f?G7xbupR^wrdvv+y33TmLMEKu#S2+IBrL(&-0iA0pt%hIDCJq5
z)D%(dVIz_J0<21_wJq34&Pf8%1K^q#B+Dhp`Z%No$INh}>Y<F)>frf)i`|Uo<H?la
zU#<SOli_b>y?7<RDwSc8mRz9ZE=n7G$;>Fs6WhoeT+f?a&s$v2lUtu#dSfVXb1`M;
zIIeVA&%;|cG+G?Yv=r-jUVEz?qxs{OT3q6?mgl{e7qphAySC>FJIOA)vj3VUj~?oK
ztjb;+SrKhKo+r14tb=~^BhD5&o`#?IH;IOq<eJCYG>L*&1fZ^eiIvcNZ#<%O;z-GK
zG>Jeyg)nJ|9PLQqQxrr^@SxD5%4diOu&6H)r&4x1OcRi}8W(7!1CP^(VLm5wO9*NW
zV;RcaPpQ9C;AWi*)@t&W=64ooI6obF0!Xv%KSLeKg5b>5hVe8^o4>d10#Tg3n|3&(
z7i6x<<ufOGGN`ZF^e+ubAg|d>kjSWdby5p%ClcAGJ1?00%0AR7pJ&(C48bR43g=SG
z{z*Narlq0qCTpJDxQmF9mqqPkpO9fGoT$Ly#%W#@8)@l9v221hME-|761J>H#ckPI
zK(@QuyC)KnJPa23LMIkU`G{i-B|ST#pL{ShVZdDfRSpglXr^7g_JnV6VYbr**)(h*
z4;<nyk=0yxI4cBRUUB?);U_uy$6}Za8m6}JTAYP|wX|w`iq6_%`61UBPQke2B7F35
zLp3K*B!(pkG_-mM&0bxyu{*<vw)lgSelgX1QJx7FdZF5RmZ4hb2pJAW5F50Wrm&>=
z+n)5`=8w}eO6QBrsw5J7w^+P1aisL>+D($T#yw0_fqjJ?@hjpXCH<5`vL~a#&UmqU
zEFdlU=zPUfb5N~}`^Gu*sd8E;#y5rmdQ_lX8l;$)x|!35Jc=@&P0r?mLV{hocd+YP
zU#;VMWeQ)+=+-HLLWFUvrL_959_UTMOumVeGC>=aEnoO5LLEMi@(ZI?<Cm$nI=nP#
zqmdKoI09pTm}ox!hnL(^S0qoPktp7HgBo`Xk4uiZMU>BVL-qbFANlyAiK#j}d!kLr
zxZAk`P$e#(R{{C~Q7M&j=ja=)7>ZNhM1JNSnch`9POI;cbSc`YO84vK<k~DrlrR~8
zc-j1-tms%v;}3ywBZ-9Tl62aE_-T=~y!`Q^OHtVs+p706JlU3^)d_iV@foyP(?frP
zfyTyJ?Ng;2&OvAI;xsdxHh0qUka|xC#L^IePEz_H-`i2S+#^A$$ZWZ##tKARJ|!t#
z`k5t)!h6XCYl@9^BV{}hUOy=I)swKIOoe2=t3bkqd2H1NR*#yvGtA3!IzU^VsbY*t
z=hC(m+No(a)09yDB_VyXa7->eQ!%oGdjgalTLREwSs%;6Hq2$8V0lh@%_A%ALRmI;
zL1oAnei*;6nUbipedZR?lxW~eTz2HCDzCZZzyvrAS<f=0V%1H=$rf{;k8w<(=;wV)
z)_=dI`<<`rpp4^@Fk7SKyn3dd^^z2xzj#CPSiUb>ov*p&yCC1iu(^1{7n0BeaOs-k
z=QS+d9<*QJ=g}P^NeOYa^r0MO82@4*E0RfU%He!zPrcZXb@Pn!-JS=;Dvi7A-7PRi
z=Y4pNe`IG}b;3|tI$O1etrz)Po{Ok`F$|wpF9E2jDEY!oYLp5lnA)xPyerI8cu)Iv
z#=#WxxkF!<hB^t-y=>eIHgCzQIaN^lm`$T7=Xel(j;D=XfSJg{DdUwwz=#i*LRXic
zI(<V2+5_SkxR#G-ykw9>^!bNss?Vq$z1=YG&z;bVaqEWH&ilK;^Zx)MW^7MJBI*YK
znOS?H+I#tpw`A%)>(bSX838T;AFa7l7B~PUQ}Diq%Rs|5lknPpzStdEWdt=E=N>I;
zH;ee8#zA$11m-f!5J_=IHASpp`-2sT-ZIB_Glg$Pcadx@1)f>IVKLB9(7+`^D0K&4
zc<TzdRuO=bnf(P&I+oSwy0sM4DHkXEb|6g#ycUz?uKP0dnE!Z35=Cra8nGmAH)z5u
zL&aF%L+4_8Pj|epRM!suJMA-Segc)#9>9hjM=hnP<B6OeDghUbbyBq1!F}Odfie|&
z8_8NFe#%!^38LqQ*_M$R#xfe2*>g(HX>?CW@z0Q#RXNc>KRy#jDj!Bkj%h-w4qb3M
zvj5ME%NCKlCtS)=Yi{EFWF#4x8uv9%&cJzgZEf;}|3q+&Zu0@p?tOiMR>~3A3+=MH
zDG#i2+jM=RL3WVqU3-hZrvJW(TJ@-&^pUg@$_jQ8ET?D31)b_`vG({(D^k)#Mk`aI
z%BVQ^VMBuva*C|7gy+w1jb<i~t<TpzPbXXa>?r@!N!iL1#gSa>sF?aqz~t^Bpv9)w
zRpRKLkRjL|U;QnmV{2oMdPX-<SO4%+oN)+?q4&@U&)2<Z<A^!YBwOqOCn2#>yX{bV
zaA}pI?C_4nifK`|f?>-|m<*HZz7x<4lpx!Z#VZa7LmWb=#@a*={9|Vs>Y#FpNRcR|
zPe$C{Ro%<y;(#8y<+{A(8jPCfKypYUVy>3g6APs)uB`KRDaT`nvgMr;0g2s)0yC6k
zs~_afOWTsIZffQ5j6&!HJU8f{tJX-*M4n1H*Xcro?gX4CFW7h%>aX62KSTqpCqg7k
zeJXxRC-(D(m<ruT(j_mD#<YlXP7<tAB+p}%ILLCk`K4Cr7XKb5&*9hDiTI=S=@$2}
zglJxmC)A1))iBhW5LL4VNITU_=cxY4EDw}&unke;OK7jE#SP-s7xGIMJHPFFUM?|M
zyvRsX-ar|W7|a&+SI<u8tKa|T<oJ&yfS8_)nHw??P>c2d%*kQsZ2RAw9REMu*jIZ0
zOC3(Wn0w4it59FTrsRO5i$az6n(S<A^U#T)+ho2-D!B0QfxT_Uw*!a@gzPnrexr>e
zeYm;zKgw{3bW%uL8(YL3hoKIR_@0<{B8?@ABm6$O@}s;f#OAP+9v{y^pD4j8F-dU;
zru!kvo0KEnirYk@a@$;Ws8x6!hyhB=;pW`Jm#Ze&s|sQ$!cj8}@faKe`$4hmJ|f@9
z3}c(E6vC--rkA;ygHJ{*58k0%|C%$!MLPYp_PqE0NEmP*j?3!OWJd0Z(2)}5rC|x#
z0KM(wi1%R@7WOOXf88Ejv<Md4I<`g$rC$w6AEr$V!u}N`kqGd%OQ72~|MN#vQ}YXH
z7-_^;FpA+BYk`1JVMqR0AnxYslJ6O0;`cfNH=B_V`B}$IFb9LtOhh%NG?m_;L-24^
zaEPAMKV~~VWV#%I&O7&Y@Hpm!Zf5$st5r9@b8<2>yS~fh1$<C&{rJD04!7PWGzGhC
zZZ3D-$w-Jyx*uoYHw1cMNO|q5YAz)r8FJAFp~u$YEI^y2YBSy4rOwQ!9G14<d?c;v
z*qp>5AbA^;i045p54jtg5iMxpLOAe^7TQxrrIVF~bdn)Vcw_&<cw0(L`vNa?@pJqA
z@$z<Z`d(>haPR5#e0s+>?QoiFS6fEC-!aVi>`oqr+={@sfh24nH0Y@|7{pm2kt|}S
zsY;hISMy?Dic^M1R~rs+i5aD`4!eivO5bijVkO!GYv!DQ_jstoiByoh)cAw|`P0=n
zkQKl#fQfIVYX1JuA<fIZ%st7A(-RAGE%{Grr!l%0hnK`BGmTeBKXdEv!tA*9P6NlH
zE>3pWzS&$;+I%9h$>iG>f3S|qg^5KuA+=V%{FIT$di_qmyp)p1d!<gBL)*xm7w}SR
z_>Mj)xUs@j0K;Qq8XDc}>YZT%!@tX`1bdxw>QbZR-JGoi?Q;2&8OY2st>yT2xgJ@$
z7mPBCDp%aIGt-687=>=Xr)%4bhzTY=3$Hf2_JXw-c!=DJtUD{JU>6Nh>Oyw(qpvC7
z^KJWt{cFQ-*8J0V#G@$F;oiR*(<SVQG?Hqn<#^1Jo`MfHo;RG15)6m`9LKYwtSIzk
zl-RFS0?NZvP&RiKfAQx>Q~bV+Nc6q7xmT~D&EZ4F{oVPV@%^%yF#oLKS>hawb^`0S
zQ8t1OP=OVE#JyOt1q_HD4(b*TyoT*i{1GFo+nD^YY^!eo?d`nPAgD~<`XPe0HbNz>
zU8r`bBILfCSA6HvA@UUm8L5*-Nf`Wlo7;lB?{FRGiN$@WT@&omf^V@5QpgeKeVH$j
zy4x{J{u$UD6pA-k7&_Mu7bkS0jYB#|Avs=%u&)@q^Ichjy#*>@5t!*{=Orz-WV^PB
z?3voahekp45#Fd9^*D)zV|3HxtU}FyhRisD#83>!yD%|STL(VG&n#zy^e3^N^`3N{
z(+vW{?(Oi+xqP_2q8Ul7dvw|<Po8`=&Pau<*Ioz$vk!Fj`9VzplNXkBo`(x5Nvz6I
zH!Y51-?YP)x>tZjF11lk@;t(m2NQ2a;l%Eftn^tjN|Mu9UP)HTHN|@p2OUO5ho%WK
z0HM&W+?!+|Zxl`lbS{Vja-VKeViC$9n1yTOmKutcbmUcD<G?t5E(o~5_^>e;*|-8|
z=L8O(O?zLq>!h}SBH=z@9g<`@&JGpW2Mn4^Sc<o#Ftw=6E<6|a!QH_5VL6w76&=YN
zgO8x7o!i#yN9<4~?jSUf7DB)k-*B_d!RU@mTTMcFP#W(VIiBvOB{HiL7U}+s>S>-0
zz0W>9CS&sVRB@V%M!yJYQ6fsclV>TN`@Ou`8jEsy<gzpTozIY7nc0y_-hH>;9ay?c
zOra%`Ec`q%#V3jtoDG_4`%T4EOn1ELOW?RK+j1<$Q-N&{Vb)WD?APhWjrr(1w#*lt
z{fc6DEt`69ackvj>1-$Ch3r!~HG0kbx>y$r^2ZT(-gk%!&fZ)3g?>P0b!SJ=lF<f~
zQ|I6f^%lc6^A>J`<Ju$?N6TW`rqK#w(FVTncu<VW@Cx@ns&U7z%(t)tscj^VC9YK=
zHT!%^X?%B{M7v7C9tJy(UFjTC$=ud)5#x+(OHyCuuy}N8Zy_88<J8BPK{&*l><k8A
z86z_J*AY|IDFF{#86|!0_1=?y+C}cV&?7wBe7i3Fugrf)HF$>~D-mB6GHJXQzZsuv
zXdJIA{~6Z#sh>4`ecPw~u~L}<<z2Z#f%nUg>v(Z{zZiQ%G%wj9TnL`?YEwh;w$)Xo
zv-G%!MA6{ljP^0Tkg^&27!qH1y$IV@lO-I~rZ2E|s}f$BZ%^K)D1;<(i;2<$Y!^vw
zjyggeb9b8B@*vm6=p-wYLE8Gx*wV|+KpWRTZvAYM=9igei!{7!hx(mG5AB8IG>P$3
zI#m&l1`(zZE*dF^P^I0#khF=@U0j-vXzy|qwqdRkjY~nfT<swgV%^AqXoR=i@=xSu
zB&<%!w)ap&on03?9Eq_CcAldw)J2i2t?Hwou5>trTfefB4PB`fi^A>P1ph^SDHDi=
zera-An2*Iz*tvTVTv5o}dU-^U8loKOqo5?A*VU2u(_-3;2!jVr0cx!jhxm*j^6g>c
zu6S4rF|TuSSf13Ver}3aP3hQKd6K)KqLaMr*!2u>UCv$WpGU}x*WwB4=)FrbtyuOC
zF$cc$2I3>y2Z5|7!;krv2%`nA6zdEzb{_n<nys3Cd3vJ2A4<u8GawvupcufF0mlG7
z%c?<~OWX@o!0_Gv8HZdTHIhQ<@qBxAczIOe)-VR7w42tG`n+bQ9ct>!gB{FT+9q=n
z+mVij0_w=QUJJ#1$Eey22pB-@P`{>jt|Ybw&bV+zEyy@*kHd%eUO+@d;?ZT%2^1By
z@hjoSO|$^F19d5lDPl!9r$fj4rEteNgm{Wd9<tFFs{m8IVhN38X5;y(lmsUzb*~;K
zm>O-DDW{5C1u#V4-?(!;fPK7+Sfp~?q2R6Gy6`){3|mV5`<{_hl)$vqP%@A0PtQEw
z12(f}<d%59ExI?-KzfFx?)#aJZ;ga$W3o9eF^qY5u(WnZ@m6<!rv1JBKuBS%vSYBJ
z%6wV2_xrvEQU<|Ll(rbskhOx^*<S&GoMSBCW8FSZF7CKz1kbZ8@+J=cL`xT6C_WUp
z!$MUC6KVXxf_#$J<OIhe*%h5oI4BVp5y=rS91u+~jcAvdgsYirgG<|hEGub6>Z5G2
z>Et+_W0U+>)w@3Bx@r2lVIuaa5Ynr^fNv<nP7jOr6Sw#SywPT-rwG;$v7sl}WZW%r
zAt#OM+aN&jy0$Se;4mL-vu3h2c%@g2h5mv{ahNb&+e_J2IUrjatN1+Gt#B!xxycnB
z+b=96by<{CO;~eLvW9elwW(q>MEx0uqi&^i6KN>MYO374prYlwHYQ4#M}>E+G#tPL
zePE`*QvToH9(AjUbuY7y9QnrFP_x}mO1A;fc*|YelvyDOIA9_9MY{#8hFwi2H&I==
z<kCxOELkD5*<eE*8+KLRJ(1tmOR+g4`=lGfvNg!hEdf}W91joD4gcj-ZU`gbm_YP0
zyMAY5Q4c-$1t=}CLO=BtJwA{?H7T>&VFUuqkooCn5a&Kh<c%EGCub<9^368sAS9<q
zytJ|jbM3I%!b6qYQqZ2NpW38Z5wnv=Ku@dK@1`tS?bF#FrX1T!0!6$~1=H9jmKK~Q
zL=*>(sVm89o8rR=ya`Lj{WKDv3u=nKR_4EbWj_8?tl?rDv@qu2VsxT6nODQ1$)s-b
z&Xl`)82-6(%UA1!4ZLx%L&=%vhs|gHhVNH6|D`I#;GWxnz!658=2uE!kcVo^T9YD?
zM~g&dk+*~rJzh)q<eKJJ8B#tg&3`J&Q4Aj-+;6M}`x@q|B+sVtOPnG-k=x;HU-mes
zT$s^C#lG7SRT7KYg+psqYBa`5p3@9p4OM>enVzWNJ~6^o{BO_pFo0s4#SC;Ow>3ow
zm$UAsG}%JOto@#(lPGuF7q$3?g1mukRhm9sb$Nh--9fll3|`FAlD3RXJ+?+#Ipga5
zn@90G{CI3wbr)YwH|gnDJGFpM+1}II+ueq$cRy)MAg;*A+u4t<tVg^FrOmsq1-3^7
z#h?8z1jJkaf0<lv0fT`PD`ZY)3WvLndE4H5yw0scIr{E*X$eR3q>=+v{GMn<w<GKN
zLKq5cumx>>Z3PbEZy$#v-{Ltzz@Dy~xaXIfaa6h#uWIMxVQ16c0Q~R>#dXHcBvFY#
z`?1L|R7w(M8w*e$F^u>Y7L?G>V}F?0l)mh#gLv}w-Cv0b%ux`Elwdhk?r*eAvmbY7
zkz-*V(&fK8lkxsw0xP{fo~l0J3@O)jXc~ge4t7|_C!$af?>vuTBP_Nu@d=H{euI=V
z@r@&a`8aqN2SPTl4~9u+Vj=fB2xAa;`$C-N1qIuaL76b>b0u>=&;{J&Ps#6uzaOH>
zgD1>mQsu4;fxtlq+*N8~(Iz?WfrTN(X%nwz|E^ynuI1wR1ho<JVnp)|M0=cqBPF6G
zH7c1T5i-FDerO6<wS4ESlom>FZ~}SH4=tU5X%tg^8gt}9s1LBeP!8V)$()88zU<p!
zrtwGFE*O>oYewv^0BZjdvayHY0z85YEFn~p!~Ffbj}b?UN!RD5N!0l%F~kR#0AU`B
zu1~LvwnIO;00z@-5QlG~kxA`Akolokp8;ejwBx5Bntlx&$9>E|I=X$Q6KnwTcvm^I
z6hMyTC4`VCd7?WXh<19R6ZpwAKeNpsoyo1Um?uHUWd!WsZ_au06vl73)f@$$y<*4!
zbE9xSmW%^2_4gJM4ek@T7Cof1S6=Bg@Td`kU#3d*k)u1|@M{Fxd=282BPR&d`!VKN
zit^}hZTGMq_HjTra7ln)w(UY{iR9j7Ll&O%nMbB9O^R-UsM@!`3s1^g++9?I$=}$;
zyC~Mr;O3kIZ1X^u%(Hkd&ZK1N{4iy!To5;&tXt*=458>`@XkAuAgO++2rd~l$k?;p
zA|8*dm{*Csu)?rn%>Xm(eA7~nfq;X*tTx6$EyUcR&p2r9_N2jGfhOZGl;8svZ_A5Z
z^sqbmV5vQ%IG)4$lEo5U6z(Z>h3;I`$)g>x)4%WCxHz|(ClmXFr0EUJU)2j3S%}EZ
zX@FgAY2|B|iY}u`a8l3-N|jo+wPn=0=`_=RJtRD)(hIXE5ew|hI<nN!q@Zk-7Pyes
z3pA#8k4|v+0GISSPY()Y6YfbZ)C9k#Y;TOvWfy8^QrsqLEWzF%@IG;q(x@OFdnEh9
zsLsJWL}!NH4wPWg$3C8%Una{d>)HhLbiC<nSQi$B=&DS)^ac{Aiq@fg!gtiOd=>>}
zNI)`~ZnPSrm8-Txs&9+7Lk@w<y<E=vP-QLPWNL0#`VQkP-JXT0!4^w?3c>^_;d}@r
zN;Y}~NCOD6a)k1_FeSEwAs-tz16Ar;m{4B!tcyj)2AS~+u{5rP19>FW7w6@hy=81X
zdZ*vJoZ12KI9qR>J2waA&=@G*U5;&o3rM1y%B|avf4=Z96rN&Q-+k^kcHE@4ZypY3
zhQL~J9)9&s+MU!r3^(5r5qZ|g)3mQMy0|Vt26;0x;NyM<W#g_ZK$@CChTa#s@6p*D
z&Wa&i1$ORgIGvJ&W;@Esa)*#W^7E^M_l0Z_zVXkhKs`Gn@l^#I2topP{P2MH`67V2
z1=gYjeX&DjiZhyGhtrY%HPsqt!O$KCnJ7&(C8?JKOLi(ri=b1ro2B0lee2gO@)mE`
z=a_@8zOw?zhjMC_9#I^T4pnBFEZmw^BnG7YEU1Q$L@lsKDphVe!tV$*5vfNfKUc=}
zz<%+Zi$nZ7OqP<=-qNFT_N;P|9`dbXB&_WIG{&@#M!*C_wEP49-wQhb!3k<M6>129
z0|9Nr{m<vjt)1-c{?9C{Ng9^1KO&Dml1t2MV0vSBZSd>8k@Cch^K4hk)J{Ou0fV!`
z8#X5ML}jj-Q_n3g(Fn5lJo47PnB1(HX)oJK19qY9E@hm&q$#wL<^^-5ejGUeglaSc
z^lgH?p3Wn_ncf+Zd0|*u=7$leq*T4e5R&y_XeXPbAfN{8s!iw;(V<OgkVAAy<#cS~
zM<OYU_QC~;-c`*T5!?$K3npP=4m9THMT!FkOSEk8q{Zv>?NzYLwPrQi)d@P`R3XAe
z#d(~FqeN5f-SA-iR#_0;o<8r-E|(Uprp_mcbV#aLS;jLLZ#mI;o_}$-)B*M!I<^ql
ztZF&%EgJAJ6b9-u`^KwOQxSQyK2(M*lXJPsGMQ-PLhIISb!iIv&I{}C%RF&PI+wBC
zsL}IWO^#H?g2ljNn%Bwj?tDowRG`zRkIS~a#wlk8%>RWi;I_Bs#w!ZOhi-9dGMdeJ
z<IDx!e;sa}cI80&QR|u|7JXyWE2S|(K&g=JBSjZW6-0kA2h;p@wgA%$Et4CC$|ypR
zB86V;hxTUE34bkM(yv6n&l2$C`18Q)IzZ5bnNN`MyW3ZGYt`qTmlMA~vS9S#OOX^$
zkEqPqswd9Tqbk17vbZoofh22&guBSrqPF%hs2r;loLNGA_WUtda*KM~u8W!@WXty(
zUMPo_$JNkfowRBm|BUQRw)PQql?Dxp$YvXaRK*b<iy~=fMh-fOSM8)!ziEsS%tzDs
z5&!G8dmTKS(BrG_-`=n);q<NX>+3VHXWEgDeq@W>Tb$(yB27w~8^|G?UZ2uzz+(U!
zInG<1$Z{TN2hB%5VRFGBIm#xU!r9%Q$CD5Vew>%rhMjkug)2`=cL@9g^xCXI4gJ%c
z9lfZ}`9>kPn1iSXtnGfTUg4u<6*kV|-y3nTNGaTWf1F*9+-W{j)-C<x6GzaIc0|E2
z8Xz48LImAnJqaAaNb~J^lfBFQU#pDx*0y-&En~@!W3>Wl4dk#!l&A-wUVaC$pg6mb
zTN!17X^q0Eg%~=A&n2Ntg;F1%sEAR388q17?*YmEvUQ_Os=zFkwPo60W+ULkiIVh<
zc1tsHTrC5?HxfM<^QE=Fv|+gVY+zc?co*2Zw5B%+y<)1j=?@I);9<ycZi#OhLFBV0
z^r+!N2Dt-)+U2#P!<#U8ygEqSX7SMymZ=cHY{2xxH|*Fi)6XK5=4{FRfe83U*LuI+
z#-R^aAChoR+Wtc=@%SaObzsIns^%2Khdcf_ZmR2?HYK|nl03*>Dm<hj)Ht2HAXU4;
z-!t6gA`b5op^(MWQvQa#_)y@eG&eI01QP+Q)(rSzsNR-OS!lyG+XNvtSNRu?GGW#?
zB!es33<opurGwuTTLbDso6kC`I&EG+AM({SYEQye6k3738{(~6>6rEF8tgquD8VMy
z&yj&zIe6dj%^K@MD%nX~W}qwwQulxbfE(o<UVIa=+zhUMe~Pq@anh56x36~p!1R{9
z_Lm?q8RwiL$x9i;tFLG}5?~g2Gha71%aWzb(x*IjnARxF%aD~zpS4+&fY@^_1%)6?
zpI5%092IlotEON|K0>B$cU4CR2Ez3MlSZH}wPpN$$<f4OYjtEN`0G?K9q;txHwyGE
z_!&`(<dtsgu?jWN+l@{=>iWOq%=EV`A3fD7M^H2a!M5E$u2rb-DBfpxp*wQ9A&S&k
zNuWs8Pg9?QM1!Ij`QT3?-*`&@jyC-M5oz$?Ma6C)gl4i4GTi>#70yeF7|XGETdPYw
zD?<<c<LPY2`w!^<-8bLzSosS6Xzx0!|Idr<&Q1>h=dSrmcf$^E1li|AQ;w_`2|oDz
zgS-y(Q5{K0HiUeDDZpP#l@<Ukk1|nYN;=(B(xRwZ*jbch%8dwoEMBm6byi)y!L7b9
zAenP5pQCWLe}A%c_Ck3f%~bup`OUl#2{?MZbn^WEeA|0GI^WNkICw&<UZKRSs0gIa
z%##0YYuB3It)ow`Dai1fpfQ}o89$qVai%7jvE<?*Wn!tZn{^7?H=V$yyOR@QdqXg_
z*q*Vvgb+he@dWeY?A@v@&D_Vyi@l47|Cho<PE1P5#o41bPxtHI{iTbeZ)c`{PPO9u
zp>aC%*xkN&`>S1-MIff_>(NX`*?Q>IsKDADKrLH<k@JTgK(}VyhEcI*xnkj_dZh&O
z>U*hC%l?{IyN0pm`~Gz9Vx<O=VV$75dK!U2V@I%GK6cm*L19@ivuQ8(=L|tkHerrl
zk4?tM_2=p3>*em@cGgX@B&KGD{kmpNx}CoKOt(!wpCF&t`{n7I=I`ycuZFtyf{LZ1
zzOkL_PY17V{px8<^VoHegORR}g|mt?VQ(+A9v|gw#T-9@wy$T?f6esHUfteryQdjH
zjQXoNzHg@OA4$p|9}AQ@a(-S9M{}5p*#h4Z5d{STBUt=RM+}%F|5Ok$KKDfUbVoyB
zn*{kS2ycF%_2J4nKE<2gjEETf$Hu=ZeG)kd+t&V>=G~SlcJf*8Z&kNz;pbpI5l0ei
z>)qd82ZXvO^WsIa=e$p$_V7P!sP?eGq<(%LomD*NbQiQt`e$A1Iyam)Pa@vf)ceuf
zH9Iu`j;xk8AGe?0mY$A|hOD;sugs4AWEkodcU3$Y`FL&a?|xc!y?tE_m@5+6lfC)6
zI{J7HrYT7ZGE7&e`28Dse0#j<D$e`Gy{6br@!()2ct>}BoURp~LCY$BE%^C#n$EuS
zNux)fQ2}V)sVa=wC=j12pTV~7@v?r`BYv&rUvEv|>=`CgO%eK4*Os2R`g~d#yz{Bk
zbcTX8@V>d8+{nKUUDW}G?7o)zZrA3Vp4!nWpsAiGYvO&`v8?@eHOE8Q@y5Qf>TcP3
zy<(G3Oh#QUn~OTKIr%ihZPLx(Ub}fTUG1W0f$?F18M#hCpLN-+8Y3&U`=K|6CK9-&
zHLC6SR2(G0ITLi`1MR~wrrr{xm@jMANbY92T8r<l$EmSWZJ&m<M=3DIVDDNfs}vZ>
zc)kynl{o8X3fvCG{oJ89ZRU3)=(n|jTX%bSw@}mL!Hcpj)*Hwfe}5)`Osn;%t+;tq
z>wV{s)$k8E5R1Wf&g=E{^eyssUz%rpPyF=0n=z<~twV%M9n3HuYJAd^Q~oJliDPBc
z^+|naskrk-22;hfUr+T60<Pb+0k$YaR=r=^#o$X*-_TCa8xhacXN|zNVqm<<MN|T_
zW3wOD$VHYtuD8^G3u059<cLgEftI;_eeouS1Id|_^11^}+%;>}=KYj{I9|?4tb9_(
z?3C=e1K^}al?dm4)P1Ai#oaHjHO^BV>M&Kmp(3_J?pTHrK8~{_IadCzC!fm@Kl4|L
zVw{AT`>b8vNlq_+l(tTm5dOj$9V72%l^r{}@H5C*Grr_nZ|)Zv%}lsh67A<8_-Z5B
z0=t$r1xk`}-ABuEo$P+#sXJy0bX(i99>`1_oM;B>n7A^*1h8M9XrQ>^3I`O;k|uah
zwLhvV7#$(&o_ZZxZx&}*z-WhpN<InwNG|XoD4ow~yYd(^k0r;2bHpyt4hIzwF8YH&
zO1y78PeF<vilOal8q2R^PsMR>K!%&i0H?8A(d2K$_tHe_RHqIVii$kk7-#*xLsEG)
zS;OCKIK)6|71ZuU9V*~|`*}!Riq85<gF_Y?UrCQOq`aoadu>i=@!~{0CO|>-SFR6-
z%nKu>9O02&QWiSaPY@9D;tEL*pP{J}sIws?&)u0*!ohH9;`GoXm0AA!Nz*vMNoqk~
zU@ud7T_(h3NXOS!)bU0K;TDmT&4D-D5c9T5NO(yl8Kmh@`$yp!6p)Crw1_F4pLW0(
zQPs8vZda)XktG=)ooc5HY9rudD@Ym1gLyM;_$W&I$5=i_?-usGwB;v&R$H$`Tf6eb
zgEgEw-G>DFOpnGBRQ_mrCE?&TrV+IJADJ%D8G4SiZ)*IlI_kUrb%{h!;R=56oQq3t
zNZ3Bd)o;u{Dt)`{j|1f0Stzv4*5zhDKP$f6<cIKgKe`M-XrVR&v9pF)l+37`>lkRI
zc;YvU(Dtg7I_a7lqB;W{$4oAulKQwxd<7g6*qfi^ncSSL5n+lsGPMq9qL-Qo0p*U$
zJK{FQU++UCs#@AD^3PsJCkrVJT)`m%`Wqw8q3Crys0?a!1caJd+i5m-t5{J%R_Wm8
zSZ@fj02Me(J)*#MK&gE34!m-U)~(%R8-4?5elvs*n%I~I$yGop4;Py&d8?kw7F!x@
z2#`qnC<(G*F&Rol4Ekr}62W{Xcfd%kvUfR*W<9BAODi!-QWM<dOpyRj$YnejEHDo<
z2Euo~BnoH2A_rK@0*C`W$vjvK2T3qXL<#SrxZG;|bg#TTlURN^9?=2^bjwqzLTZ6T
zi3-q)h`(PjFwc+@yQc8dq52t*vLV{crYbQW?IZ8?I5JKW3#uUoISNe$f;+ZFW2sn_
z8?boy(QM1~D!nY)Cp#4Qs6`>`)h=fdOMgWGC@lt_CA}t6xYRkX3EI~th(hXopr<Se
z{=*!clX!tNvPcgFIaJ$QE>M53A`UQ)P+xc>1wRezkt93H?OKosQnRkuj$Q=%q17Vp
zrW1%uzC?7<ud#)bN{bwec&PM4QmQC`p%Rvxst+pj??Of(uvzl!SrF$CWE`8$C}0ot
z+@?`q`QUu8qylOa6ayx33l#@hvGlr1St9mxWpt9yE$04v_;87=*sZ1@V0j$TH5TkR
zJ7^YKtWRCo@_EO3I3G|WXPDgXHPxmzLbO~6$W{ysEe-k8jSjf{<6Q3S-5YI{tI5R#
zm7h%JvTeFZ8<_@aQX}>+$Dz+<z>qK`5dBsngBs#q7J3?|6)*W!-oJ@FR|)FBx*{ai
zzkj+#rnaR{EGj080tN1;0m7eYKt?58d~cv!tG75hDdCT^ngG?NE>2+`B3a?WmIF`<
z+Dss3(C$6u8E2>_i-(kb3hdAIOs&Tw%S3guu7<#fs+JIL2`rO44T6qa)&l9I&Bx!!
z&k*Xx02f*bka7loWFU`FpiBxm-pu`nU6)h(?065CRqpRi(kjdbD^0x1FkBZHV4FH=
z2je#3x;<5GH*%S4@GDRtBA_hU<68)Z1BX+EviAuJZ;U_wJgZN4uK$N#L|do3NF{c#
zAs9m5At4IEb2^;qkD1n*bFcJrsiP}Y5ZRpL5Bx=`84WREpKD3Kg2<xZSdCPKD4PSx
z36?wE0ne6ZiX93pP0l+K2?%)I=I`5F4V2n0S8vm^l?#cIFj;YU+t3tiR*+2UiWZQ~
zUnzd>{H0VdC`DKoA?pd;!OitNkq77|&t7N7q*9(l$VHvu=;X3Je)PIjXskPerq){T
zI86_2<OHwjBf9gpUg2)m^dBPaa#<vya+CcpoXgS^IB~WXS-8G<H0&jtY}u%`!PNgU
z$0!98{3%$@;mj#mJq?4aOix?n!}KYB?oST9W|HA`?571Xa05%z2bzQ$MrfetTKtR-
zntb)Da!BLHBqTwsQk;=ets181c^UoTpqf)sS}?>@Fv6>a1E8_{ECi8>jux`mAo=$m
zNNL`E*fA=Qb16X`$(%D|j+Zo}j+xTdAXw!PrJ?={SPcHXO?aX}%&dld`vK09u(y+c
zd4|#G!Vp(H5`G60niGSGU!qs$!Ilaa$m+3JmK|tP=LK2ob_nU8b~v0nRzy%yr;3M@
z4I86WfdIo*?mMK-dswK`LIoj&OIaIb7S;hLNCo<EVM0$>$D#_44S*W;-L>qOq6#a6
zKBM6xremRCDlUfSni-N=L*!S&jq4?sLN3c27Ca6Xn5*vYG^zC`CrKk^`#aG(&+=ze
z(-iQ_w4-4G^#Of%=Eh*A!vNU{L2%UtYP3L+8A;~*TMaSEoP}XoCE?di;9UV>vq!LM
zNm_{aN)5=IlH}dWg8QP9g7a__9Xk)^&8Y3|=qd|MO0q#kx&^QXQvFFtZdSVJNaR{x
zV}hE3l1y?D4}6y8q?;i}fN?nQ)Nmb5@I?xh=o;Pwm58#-h9P3e1#?0hnwKz22^Tfy
zCZ2~AeJg@<9WEJyiD7_Xv#1B^vnP<7i@w4@mWdgjI>wmWBuW1zrg!5UX<>&vMW5gH
z(>TKZZ+B0bc;i{)r5*Ctv(fg}*H5QiAl~@X4s^s~J_K)xat*2I)1{T%qFc`ECkIat
zg-jc%nLa#vDwF1eh<${Wi?K^n*$=$i@{ha!7P7!-+TJF}->FTIc(VCug>)=~g|ht|
zTkYQ~A|D2WS)I$ZJR(&`V^zW=-<tYx<g(17q9J7`l1URTAf>9QQH$3AonFpx)XB!|
z)W!l^f{Mh;9l)OU-3Ty?7+?GYxfF`)>FC6f;)wa=rC1S0Bn-033K`~_j(R3+DY(u-
zKn(~7);4L=n(H<!g1d(wlZ!*kHJz&(AXk`}h)_LUQf3RsE|g0X;`$+oUsg6vd6FVf
z*`IX5o|@WJp)|$M+|euuM*$lLHZQA}70*mln2ugJp<2%@MyXUIdSp)%RuQryCmm}M
zixmIm&xe=`k)#Z!4b{0%218}9v|1&<D1AYq%q5N~34C#zuX%v0))zet#A(UKnnzkd
zeIW(TT>yfPip)qruGkexJa7vezOw8B^tUuU0)iQ+6-Uqrijf)Glxl+Zu-ss7*$vpV
zfQ0&Q6jehZ&|inOSiaFx)HhLQ={<OC+IUD@1XO);e3mr)Lo$y>4A!@HgGh9s8m8Hf
zUh8ymRr^<)mRDlzll0o7&Ha-5vCaLRn76i}p00@>bF||e>9>*mAES7TA=qbjjPY;z
zv~5U{jr|1U9|p%H{kLsR`mfIoIvcw?d-JfLB=rA@a7_8{h5lQ<#M?dcUvo-~c-i&W
zRq7Wa*5jXFpA!#9R(0K4_>O)pV}g!?@wi>A-&w!5(oyU0S{Qi2zv1uCTLzbI;x&4H
zYkl<qo~lkL0UoiHH_v&$6<_=6ueU~in|?C>XJ!rq^q=cLFu4DE_-}&`ga>5rU~1>=
zY(vk?z|6p8%4qE5>EL3|Xk^FugMnjISAzxu{SO4rMz&PT)dLm?80-`j2<X4e|DN#w
zCv5$>X2;Kapmbp%Ad3GftdSi(I~NCogU$bnumAszf2CvVye@_E4cB9&QA|~fPZ|Vd
z-#JZ@QfQ}oB;(}v%%M3(Kpte1h?+nWzN<U_vQcv)pN<_Zgv8sj=4@ph&Bi|?*TcWX
zTKfWePQOsd`81G?=_^u~0yf3}$QB_;`Mty^`bFr6Cr~^24b_$Q=T!YN7!%X{)D^|&
zb`y?Y+w6f#I(8O7By{2-5;5JiC@bLEP;g8@l=W7PS-cHLKaiG^D+dI9igdo40)fib
zE(!HTs*@l5fE}zHl3WJKw6>`@S48MB+Tqs4CF&ctX@LycjoMD2^R||0z={^K$3q-Z
zoCeyD5H^wn3@u<R9N_xAfA)}qIrG-Rrb7Y5@vuO5S28gfYv2`-30FMTK&L?X>{YRJ
zP6Yx!&&CyzP(hHjVBC&3)gV4=!|{uP=L=Eikw^05X8UEk=U>;yb<W|9aD{t-4yz!y
z?UQ2q9ZQxwL667V<E(|x-xSUtqEnZ}z<;%znJ$Jdis|7mj%SnxB^L+Cojehs2Vl$L
z$=aQhv(ym<uZ7{9Aq?Amf1WNfL=TX02c2wFS?)vyFB-Em|2^H@Ozt55GQ$KdEHlqa
zr<{^iYJ9*#beqEz`~4E{7tYfKIiueN!K#-jug{0A1&EA1(Wv<oU<b6^G2Kb#5+J=R
z*OhDRAiRUERgJ2skE<6Te0%G4Wyz&Y7Z}c(A+Mp#BFh`{4q-hpWP)tT^_2=W@P<m5
z{gxB7_Zf~jagnmDkfMs5DHuLb2QZ0{yBj}sD)=3+)Hn9J22T>^c23|Cge|qywe~u1
z0~UV)mZfn@*ZFgL9XgC-J!N8c=#DGROVgL@4HjR3%<XH<<NJB)ZQ^CE(BwOG#`llw
z_oRnK96Y<uSlJ%;3KDX3GAN<>V*xCo-e=t!Rc5dOWwhI62dq7|`)H$RmY-tnD%(Y4
z&ewChF#$^7bsl>@D4|Hpf>~dkg9ZRet@l<U#in#lUo3~G>aey8<bXReX07O9)SA+7
z3-fo!n{|Z;Kj>$$<)J7jmenP(2jo~CNx7~hG{$)#!RtRJ1+aIbT^{LsY?L4yPh{C&
z!y8#1hRNO>r%t;uixU*(qbzdyM7L(chJIxB)<7Hi%fRyR2eXHNaC_&W$w=1-!1_jv
z{6Me1XN4JN`l>)S<9q2-PaGV=>dAv!pgPkAjO&)V3v$=tmNb-Y1J*T_ZNZn!N`0VR
z2bE&g7m<aV)E46dc#KMugLr=2vcdSMtAAm5H4H}J+;W|Rnx>I&OKduX4SBOVKJICL
zh$XXX`h&3=ZF&t2g|NM(%(Ph^<Ah?JEEooJ>8nQS&;bb(s7qYNrW?i-gSC+0%_#4D
zZ!XN6glB=P)wqLlO!6SteSg)Ra>`UUXpRu09}Typ2$v^~06_}Dex3nZMV$rMEae%*
zq(k4$%ip+gODp0{>N4BFYwM|%Q0K<m!v^CDkUzIgiE-9eh-t@D_!dooI~7<Q1M`0>
zPkYcv1a3nk%Dpr4jxJi~pk4<<SvG|;Ku4p@NvSC@wE?}!<|kjF5jrBp_IWG01d<40
z`aFOLuOzC3bM}NM9BQxVRHOk7V?C$<`p0^9uQk&yoBWjN;(UGdPrha4e@c1Z%p(M}
zUfNzLTe&Mr1uLbMD{-glma5j2AlOR<gUH$)I`%%_;Mt-)l5{M+d7D*DCD54>QYX+~
zoY&;B+6C|S@(b=)=8Y!{9Nv|bWDBf}Q%vceKGOdjSCs-Y+#?#HmjfV`(QreXyA}3z
z$Tg*YZ~RSNq!Dp=yP&0p5c#Myq=0aX5Qy8*yiqjLbs?h5KMB)CsA=k<X@PD72xA!^
z#lYq#?Y8(fwVa`NuW$CGSKJw4?&Uur)qUg40D6&hMHMB7%KDS?;Rid1NUmnF!&6)v
zeP?DQE`fj{ZTu4yeW^lb!>f}C<S1JpLpY<yH10>N&zPTzM$!}&18g~U=!pDz4^37r
zvcxO)EnZ=@D!K6Y1NRes2U%)2p?Rf2umlB)1-J#8@33Jr7o5`YdrzU8#8m$*TVJxT
z0dWV&Q1br3iNVhBC^PH0ji&q3_niKEou<y{QA_rl8N$7!w_U8HZvQih`CtsP7r{%U
zH+meC_BO}y@QCO~eAN0K-^=D6j+z1QR5yRGIEA`+?}wxHI@4FS6|6)=dAW&vGRKnH
zN93vm%3QHKO2WKxZ;3#%dfP2(WRLCds|9`!bG6Vp#E+FFxdjwx{sUB`KAAUc5zU14
zmXY)$E|`?9bpVcIoU{nqyQF;buY~{s>%i+3`WT}IMpb+QizIF<3CrEP%W&#MLCM{w
z6r*)SXMjkoq_GmCK6!9q{7B%&sc5B8noCOA>jmsPRq928B)}r2a=rv`i7yO7Z*d=T
z6rxE#o4w)m!&aPwOBN<l{YcCQZ3uI(Z*%$j55_G>Y<6d9rf-SZt%Pl~xJS38ozyQD
zbH)n1@1aE#K1M15l1sy+)nH_}DbxjWx92K7RG%@EllH?mqLoz9P9_K601rs*a{0k7
zxKK)$`EkpzdkS~|b_MQYeX^kZ<k^1}9V>KEY%XqXnXNqQxfolqYHZmHD>liAY+IbJ
z(=Q?JNH!elYjXUG##qGNj=fs;RCm?9<lohNG;YrxCsqSfrP-)MOt7xtrP>xsJ92t%
zx<VBM-24E?0z#f=H(Km7Iv#~Su_~x}c-=(iqj7y?UQwkLE>YLX)Om!?ILdKJ^aKmT
zQH$_NP}1$BtU|^!N>4qmyZ82#onV>kZNn}%iip;#wTt1Anp>Oy#f#>;t<>jPt}VtM
z?o5A|eIQpJ;j@v|)83L;dqJr#h^D?1^e;Xm=_)NqAk_teHgAq7eApYs8p!a2SW<E&
zZ<2;3{Y!Oy^B}nvp=*MSTRM{1Qrae${6sweqq1mGQo32GyTH}i6wzsWB)_7z{dhrZ
zU!Yubjqw;ZmXtD(`5XHNrqjYQ!aSU>3N%~*TJ+jhl~c00*)AmEizdSO{b@*9r<lsG
zL$ehg+|Jw{Pt()b_AVZYt(pXiht#H8sZ1%)3a#+-MQ8(q41;g6l68+jO2)v<Q4c{=
z*SSCBwXTOcF1-|TC$Ms?Sr8xPiHbEvm1#vyz?o}EIw(uAUVM`=hU(S?9bHo(-J&g~
zP<Z~3lb+@%-Y`@#``pPQT@eFdlS{GI9*DdymF=Wc-SOtSTzlfEK21}CQI61D$?+TZ
zeG;5r*?|UH!4n_@EZsn{X_LlA?f7SW67YMd4jM}zg#{c;en6(UZV15BIH8eYrO0T3
z53l)q-Rj0>MKVloK+5s8>dv9*_eJ}YLRNXfb$*BLf&H~z*Pe_8C%GT`WLHTxgTrvM
z?qNw-XNBwPZqIV3`QRUkMJ5u%B-;eZREL=`KP8Dy)RONsth!g*cYgZqg?)Z{U&=;{
z<vp>74J4yI`G$nM){VF+;INItks!fp<JDie3bkzCB7eCTu30$!Zk;x@-V^c;{W@;{
z(HS@-f-D2|eb8DG#i(?PTzh)pdua~ofw&fH>k7o18(~wkIIq~apGl@vn2~Yl2PP5u
zBY)DerGX2kN&P@al?Ivn0NYh1BqZe__RKrzKt)&@CyuJ&3HSOOtPAi-)drOO_*KTF
zbF+Hgm{p8yi(>Se$QhntsrLkI$g1r&Xay;Dr4hZ4*NhLVF~qm@pt%WNRzZ-F2qa|<
z1u)X*8LwBx7Iz6B%!aek*KsFIp0?QscO)|{GLMqDC_eIpJ=;a>@bunGA%H>l7#-h~
zba%bv<xe|4x->`8WSHb?E22fRt^zb~HB#`NDrc6}nA1EQY)!`4`x>c_#enxr8rJd-
zdB+O-rgsRHmq2+@cW21Ci6!*Fmx};Yq?V|e4$gcelP1qD5n6h~6cMR6craQ@^05u>
z&VT<8CENdu>)&!OF|i<kfIfaU^XUJlalJ7In}>sqt24d18H?@zFuWhq*l@~_Lh=cz
zIUOypL^B2(y)#8G0SV7?t+F@eZi!Gu%Z)bxg=2?HZfyJ1*nTkGVD%@Hb*f*JF;zE%
zK-@A{csUDMYlX}rF~=8_;U(+(8&#{d<zK><QE!3fR13GT-fsw5Edp|aE&cI@+G_B~
zh~iKSOQ4c`VKBn13loaRAg!<pk9~R$L6Ri~EbYwVPlAsG;SEg2KqxFr$3Zh7@e9&J
z6jrK}x-d~R9yMssFmZq>0y<7why_6z23WqH>wez9muo+7uv&>Gs#o^!`=+Qd;#31Q
z$zB&zq88<dBI3+@=#!2DY=}W1)d}4_EP=9%`L3f2EceX)4sX_-N2Mwp(Ts6cy>iLp
znOfZ`v7(VWgzqh?FVsVXcqRbtlX~^c00xsS+w0~Gp6|XsYK{_CmtY`ndz`7=yhy2C
zjWI6}q#(u#UWA8&Gsu#Os<TxiAEOLoR2DKHgJDNkH%qWZ@uNu(0W^RjkP08T*a8nl
z!XV<U+6jNpS5nGUi^*gF$yn%CI8#(1Z1ON&%s2VY1%zXY3*S?Ed(KY>1Nk)UweogV
z4Wm(4dlCu*MOrFi>7wNNft1z}K;l*v4vu}yTO=K%-A_(nI0T+u3MWP-HqNB~hz(yQ
zhUmg|+;em*AOk5BinMU2aau$gUlIi75!uZw!h#?wff~P=X2vH2^$KR|+LcJl=q*tP
zqY6?f<y@!gju~KygsSF%Cm|fBLo(X@?EoUmcv9cjS<hPAy|x@y803j(3E?6HMn^A^
z=Y3sAC3!~%RI(X)Ks_$_NJ0mb14aO$>86)NN`@loSMWU3mAZegEVd7vnaoX%3%gMa
zC1&TMF79=@XvNMPP`L}~i3RV8d%Y9tb+&yn{q%bE^y+o76=?nC)wy=rxN*A&peYA=
z*PNODt!o)QlH^)YQeH(d(O7K0Z)zb=Xue}X*ogD&CTh)PRO>#Ng>~5_(E$mByIZGB
z+!%~&12zs8g|8|Phgy(1=~O>nwjm(Z31^sLCu*I>+ir(_<)-)=98Upp77EZ-(BNM3
zosP&k$PYY7H>w?+MQ_Xs4Jg5L1HammXoJStJxCzq*)wu>a&eh;kc$Vagi#K!=4Rd^
z8F*p$Rsv8j`YP(Or5F+Nc^$UD<~Y5+p9jyoH1bcaC&Qr?L3-{V5wqbh5;Wgk^-EX#
zewMD9&jgjNDy8BWRs9<&dSvYCuxc`}K8^{&#;9W?S_g@br4G{P!&BvmYbA#~3-BZ1
zP*>N_`JJubseCR~@%Ssu^jhw@H@23Lc`-O!v@i`Yo9}{xGRf&Uh(NCCY#J-$U<|KP
zR93gYP&IB8t=OXCJ5*9m<s7Z3&Q=_8UYcWfmWIU9uU`c=^p0u3HCEpttN)7ZW0=)j
zo6qzK8NSC5ouoaX#!t}@MNq<+)b3{zhjJ8?uY{RhNrPxz_#4#BqM3TX)XG4iI-%m1
zENR7eAq7KzywPNb;kSW4tIU^78mwkJ-EpppvwWwldTYqH5pnY4VTZMS-m+Qc|Harl
z1&I<hU7~H<wr$&X_i5WYZQHhO+qP}nHcxB%o49e~pZjpXd8n++sM-<xrJ^!d?p&+W
z!Cfu0`FeY+WA~J;@?|($CjAZ+$k_vgvFzdfmLhGppl;*O<kJ-BGl113+oh@AHOnW<
z>~2<MbW6*yhuJAQzxu?4P3li=pO0w%XM`aIt2UC@sqw%)ZK1fZXzRz<pz`U_-GaBf
z+d4lVzh{%x7(U<YL%gARji>V!-o^~0A!P?gKb-XLCVbHS0;hswDw^rH8*@bY?eIjz
z_`|?05;rEAMV{gCXF0|LZB$^CT)XdO=MI%Tr&wnxg<Aw;kI#K{@mu8pGC84ma_fPe
zF@1ir9xBhQy5~U};mCv4Lgu~;4>GwUs_w-8pHkY=1i8C^Ct^Cv)+8gr(MNFEDQ4Cl
zrXQE7DSxg1nR;p{)&n9fBM3KEe`NqStRN^jR(bzwze;apqF!&Z82^Pv3o$lenSk*z
zGus;L&r!{?l{Lhd#5l-EToXqMX(I_Y8LCcLRvWey^8zgKeU=J&&3pGZ$=$)arJ}Yl
zh_EsZmQGF%S36G7px0PVVAi|np|)zMVTeazHA2ksGAZI^4Wq=nm`rq*{{sI%VI@8B
zsCg?$0043p005Hz_WN;U=45cAQ~v)2l{Bn=Px+yJS${zhMFJc~6~t3qFeYNH*(%UL
z!7LP5@S|+&6HH=hmD9LCr;Q)2roxBQM>b^JH%1l!0;!YS9v^pyhKAyh>zSB9>#}?|
ze~i2T4GgWaeW(D*Iqa^hsp&g_`3cKyUA`%wS<OTfSdG>dUWM+T&4l@^o1A#P{o5bw
z{LCn=b!W3`ThU?P*D4C=Lj(r<MrqaXk5G$q4e{PNvs7c<n0hX`vI?yFs6=09FMy@z
z47?|e8{kvZSwEA<zrj*))p$t0a~#_)7aenquXw!%)E#ocvXlCuNQU_?trh#C%XN`k
zG7(8-lC3`wnaAr@M0+2eDS@l=>-*aEcE^{!iB<KF(cj80i%YNdW|B@-*o2fdn+=!M
zEo~iMK0Yo~UExI(In~<Qw0YHD9J58+$VSychm9*`D~%s@lUMh2|5**4Y2B3?QPa28
z&Q3jBU$@u4bu_mvI`*kmYOb-W-IjE2vz1sI3!#5cF$7tWY@8W<jW{n0G|`y1VRJq$
zQm<Jzf4Xibl8#0k5{UFtnT^klY^yZtcaE5mYOiNZIW!-TY5XERk-9);UFdaJ?BqIJ
zaN#V$6TpaZK3CNAv-$Tj3_+TfLwAtzHn}SrTPmgR;!t!#xHq4@qdnuJf3zA+;^XPz
z=kwor+b9|yGK0DCr?%KrSgkg$v0|a>qfa*}M&jN2wKK*~d%F!bSjsQSTl`AY7bWZ3
zXN5MpbxF9b)K-?T#Dy~Nm+0+fWV7c02p^SOpttOUx%qr@I9pYlA8%SX91W3Rp1Wku
zUF0JUAd5s(mfYa?k7=x;Tw$J%UaOi+At8fK(trXv2!zwIBdY-Aapq+{SQf``*k6Tr
zeQZV@Izu;Gtqn-%0byU34-ikA<g_{fuxJYU5BAI!PH}gPK*cJ}+xK@252|w)AFb(=
z%%<u0!5d<d;G!i23C=sT>saq<;^^Y(G^)a3avS$qU!MI{T&gl%4z^i>j@lh$dSDTw
zC8u1XKZNfwsS{tr3wJ^>li3*IlTN~|@hunKK!oa_uBnjkttpi)sx6n@Y~m|tMMpc8
zfK|w`7xLsvT3#|&@l%A@*N=fP1q{y-ID;a3`A}xG{?#gP^#E_+m0poeLf|Tf5PONP
zZ`<R*ftXt@iN%~jA$w~%pOewAzVXog;p8=3v`pUa%0X^3KDNw*PhlS`mp%S6$d5ZD
zsg4L3OSmGW_9W6dp?zVVd6ssOd%}1gs`^Mu$1cCG%vS|c9J@r3HtE2b?HUgAkf=On
zc|VOO-gfVHeT$`xVlInBG_jXZ<xy6=f(-NW7wvlt4(z1IvCC9|yYI21;5^Jjeir<b
zrH2P|w1rA_134x)<in#}M<0k8<Db4rk}1uP%5szJj_OcjsI0)Z)D={b8pe2yfYOR!
zTZ0Log96ivFa?R}I8bg>PaQIk0UjjJ>&nL+p?L2G2}`a-RbB59GM+`bNLsqAzAxt*
z!Tke{fJKG!a5SoPLqEDmwn+G`w5DJr)E@w^+Cv1h_SwqU=T~Re*Dm6*B^8JFmnjbK
zwwG}+NlGkU1xJSb^4mp-V_1aJ4M`60t<~p=k~Ff(!wwYjMH2mkF{jDYQ=ZAJQ(|}4
z6#NSe87{7pa}UUN3owEeTyPAR;v#gA>Pq;?uR(N$M(``>eKKDuN9LG5v<rDHyvg%a
zvXcfhNCA2|ExuZ<JN8IyXMcVS>=au>AjK8|&{Bu2>H*w4(Rv7ta%eW02(~SKjkIgL
zPTGxMcUY<pErD_hUnAm9I+e(DCDmcdGvdjA?c@*X?AR~sO(@DS;<1VWF$A%G>1usP
z$*yci0VHP?s55l~>6r=iF?uG?D&Q7iibh7<u6rbWOUt|*S$b&B{X@Uy)?^8y2{EO|
zAFh<O_Cgk-o@VXyq5YQoG#eg6?AuK$pkVArwRKH3vcPsCnKsV9$<y*mB>uDsEKzXf
z1dy?vd%-Q5eZ<3KrCrC)n0=KyC;GiFc0zVMoekh3fn9Ba%un&qMDsQBCzZ;Jw7Ie*
zTcISxA!LbB82^42M3j8+@QCg`e&uXbSC<d(RTiR@AsvZlE^Ikt+Dg=OQ0?7_AnlGO
zkuE)TA&i_xY<h!c+U`^5G1>Wvv*&|&LuWitvIWe9bwIM?gU6j*aM~g3huPVXwY)AL
zdx4Ab7!h;hiUhp=9odqI!NYT(izaMNZpra-2fIYjoB!-TFpujo!oHh|X|{SNNv}lx
zGxfMCIkH6D2U`(BOI--1Y#uj**L#4C07+2WG(o~25AvK9pVIW^H?%>9m$2@Ob})(%
z1^l<MZ_+*}PvP_LlibsTNWOz7*UdBBy2oIR)JGS#6=q+9_0pz}kr9~}&z|C0Ayj?V
z3NHTy0f{*`xPbc!hSx2WlGll9H)KQQTlcD`!PuS3{LG&uY#z^-$N$?OgoswQL0H+6
z5OOxoX?N~$!@LUTOn_6Hn;``l(}MuguxWG^inO#}WlI29L~m<Pz+Si-=XU{QeEn4q
zB2`>bKR`j>@3MUim4QG{TBa0U79moG0ccE*I7AVDM7Mmzs(B805pX|rOh7~|K@<%C
z&?x=qXn;_Xa<DUTqqrz|0VE`5;4UFz5?KPMs6Oau{b&}y*S=0ZfUYr!usMi=J_sIT
zkjh#>FAk<BVTn<wg$qJ)g9-!lD$gQ=;@X<hTx}0`Vxw{)BX?j}ByT~Uud@PF#b3Q5
zf`tWc5=H*77xpcRGG2Qjn11_<<lU_UN=yn1>~E^=%Ungp;2hG5xv(;!P!ZIB7X=eP
zS}I=}1s6CA=Mw%-U2B|5ZD&eG@;GPUWst4Nn+O)02;tah?(nDVH1^#YU3&L_zUg~4
zuVvxKKgUOvZQaJji{GCZW*nGFs5zXNRdxs4{QtQ&k5A@d*zxTk74z>?QJ`LtI3OjK
zgOI#0YFH)slXUVf#OZj9K88am9>bVW%`O$|U6H+uG;DU>j?qQ8bA?+E4R|RRJXOXa
z<(XY9(CZ|kV~^Y3#t?L}n5y?iQ|!kkyuTF-7Xha)RPNFw0pyoU_YTVJAfs>_JviIc
z4uy>*@YCH4X8=2%#Q#1*kb!m{o=Y>-iIbnSMf5eF2(1|<Z*I19iwHoA|8)PS!3Fn*
zUoHN`{5NNA_VY{;RxAcD(HIT*o6qArHztR8HuW(JB~<jhd`=9jDgOEYlgNn{`YC1n
z4r=g|002<_w?xjx!jYNQ=C7^Of58yCH4XmLBK)FR{tAN}`J)d_2xyP9d9-r5xh<vB
zAi2KY+0nqM76v#J5pT=V&@Xw@s^=O@0y5^3Af0Vhoowde(V^FSgO_&2Yjn*Lf2~Nc
zp}p0RHaWLtgs#|?(C<{DK5EZR>xNSg&pfj;tgWrnZE$PCa@u2fTAm@wRKM<y(IBlI
zS0|lg=RP^w(hi=n1Hy+6iQlLa)oxr-M6#q@<saBAQ@7HD`C*pS5Zr1=q(mdjQKr~P
zV30^~6h-fiM~wz?A|A;B!?W+`f?kGsKGS5(<t1NdUc`g&BEX~TPv#~rxbS@PJS^X<
z`;`<+sz@cc&LNQmBUTPYq)wM!s=qE%&cSKXdV6zo1%V@xFc)*wRK427tap{J8B_xK
z@O66!Z23(HT->H#h{}zAi0X+SOnn=BmXhsmPg965RnldcXb!Bej(5qij?yK{BG-RT
zP`^ggaoDP@X`SU^fEUIi=I+JAC`P6I{rDB?+MCteJ#mc0c0#}eH<Sb@<jPFPsRg)&
zxdeFi%ACd|NvcjPIGQ#nl2#Yw2-E;H`V+@*qgP{yD%&l((9(+@k$0M1TY%UWV!hJU
z<>Bk&ZvT<+_4TZp+8rH~AqGwN$2vZQ3PAH6PYhq?;hh8YCxJy_2Vze+j^Bydj>!IW
zoUtF83GcHa9fTaT7gz}}S_xkxi6C+mCRk1#N{hzKA9S+&-tAoP;~QYPKR^If7h{XK
zE<A!{?k&4-nyz-HKWT48IqR$c4~$<T9;Fy*U8NQOZL`kDn`oy|Cmj!$xC|&X#PX0d
z3P+3@zbm)R>iN?KZmH|m4JUo9W}!g7&>WHjqiQ3Fj=xOc4?}T*is01<KnT!dqHk%A
z$R?CZlQ*yWjkwYSNem11XP7*hKfWE{v%uym@gj~J&f#HkW0N1JKmTAinqq-a6VP;$
z7Z8Vm+Gu$c@m}Vz*w!n6&|2hlSCR1|mqVQgF1M7<P*dG|9!?A}L}F-7FrYDDpvo`J
z>zh%A^BpHx>jzEDfig1XL=E5P^Y&l-s*OtP1{Wv?<a1h%u;m)QEWJ;gx5wl6&0PHg
zKB&Gv!?)4Z(?29P;zqWwvoj%s`{nKE5d1Qu3eO2^iQfo5W-nD>GO%Pue2gJ14olc@
zzbbwfeuOM9rMOn~_k?%f)<$iecsqklS!pHNb`MKs>k;&-(;JTi3=h@3Jx6?m1_6X6
z>t)cR74&zj%@+nB^o@P>7+oE2Q1E}@dJT-1LAxNl6dz4@S+Jn#ZI@n3pADuh+giT5
z)|;LbM1<jBH0U#?Ps$}#|J2802nB^eLud?EO}4=o$Xze38S#H}eO^y@>iHUgGqp^0
zh%3{{z9Z17BHbzIivVRy`6EI>Af2iG8as)CKeYRKA{_$ZrzHL-g93>~fKnvU5(L0V
z(<Euac*OBCz&<ZwUbX+kwftL44OpO}k&p&A3C=UvioR4Zwqx3Poei-RNTa?;T3`-R
zKoM^-X9;BU94aYH=RqQZPk#)sBr&keTTPs3JOJxS+D_MY#i)motED4xoD~-xF_4V>
z{|+NmVHG1w2z9HAt)b;{4%OjuUnHx}H(c%8!n8jDsBQ-)Fx4^Q<^x;B4*;;U1N=e6
zn{$8sdI%;cVx~tQlIjc=qD%X0G?3;x$r|E879RfN%k&yGxN^uJYWBph*=V+gq4PnV
z5>M>6vw>Q+K0?lh15~OnLVI9krjL=^BVxAhSKA!KYZ8vGCybRy3uX+0B1Tik!1X5d
zD-I!2Om$CNq5o53<H{7&)9+bkub`4wqOQP}7qDL&2rqHkL#HmNSXZaXdI2?&7qC#u
zb+_4k(W7t|0JR|L0N){!MGyN}O#ifS=3=-UXv+TwC@>SX4`OtLRnzVa#&2>05N?z*
zD<{|y)^ZE5^LZetwlPO>1>dyFOkZ45Jl4rLJ(TR?Nf?^BT(L(HoK2JC3vnS@Y8dH{
zrh;Rg8i$pAb)ywlyvT<+8*;u5faoDcq$13F;U9OCzg^L|9qVw=X0%%BvfO7Hv<)eo
zbWviuH=0+|s|~hhqsC{NnjtbFd)POKF#t5-niua@L6Bk3Q8sh9QS7ihg(jL~Z06DJ
zR^XUH>zp+-pxw-_f=Psk$#E!jVN?<h@GDGK5+bA|1x0_skwU(-CeQHVgozv^MBpH;
zoBYGq`as|zF-g(X{j8u$t-!}(WzFHY3;WsHY*E|ny2cJaA=-9uf=vZ;1?IWNN`s{V
z9USxE(QGCAH9=ySPvj5~;(#833TOqmx^YDie5Yweltz*BiUfCO4F-%*crCong*_~D
zs;<{vL=Z5V28ClFM1%m4^r?#W#+a|zZ3~<(C*c6*{?*y$uM0gJR4ubU8ijZoF9all
zFSzniZ1pAL-)o)<h{9R*QpmMC#%QG1h*II1rMG2P%O9V3)g|g_@FiKJrB8!CWlFBl
zTBDI>ZnG98<4`7?a7?CyOY+c5bWK*0n}0bG&9Ix7T4jVO0*B%AiIujOD6{fP6NO^a
z@$~nAt5<&!T(8b0Q^Y8com3N9se}|oSVYL+OWOY(j&QTGQOE#`ffk$9qJ7k0`$3Se
zG}oxXhqo_|z|xD}_=%a=5V}^Dl$LDY0i40fql~^+W{LEpPGsmXx|`?Qj9*!Z>D)Xz
z2IgCH(4Zp_sRnogQ{myt91a|k$Kx{u3EX}ZDaj72d>t#Je%B!wS#Q#uJ&-K53~%>D
zDCe`GX=EX~bjq<IHTAinfK*Oh#`$Sz^m}nGM{I$a<5~6hK8jP=fX^@<=W?wRWn-<~
zxMxuQ5g~_lX;a5g*q)N4ZGI@FT4sOQO*qWf#XJZ9ca8<q9iDi4u59z@kMcQSiv>}i
z4wwAZl!e%Ia8%z@j+u~sz!WhBF0Wb<YW}I->si2Bt#Pja?nQxH(K)+l>>f1#h*Ws`
zJ2|1J>hvAJrz%)D0o2oS%$;<fU7}{H)?RHOJb8jwJi*S=S?k}6wNq=A`s2F>DZi`t
zD%=3piTKM9HB(09VsCFj@6Ep{-Kx=g^Z;z*(wQ$5Bt=;2mA9e;!dutkVU-7rr(gW8
zd##X4lQv;6=Xm+3q+753Pi+Cdog5m3Edqmvf8D|qwP=SDe%Zvo>YjN*(QpCLe_(53
zLXxQ5ezq|qcJrK&kv_YJn#H-1*TginXtutiR&P+R8t)f4=lwIFK{AR0QY;Ti;y=GR
zGmA4)ef1eLU!d5Imt;S(%jy^@ybS|{cEgl5<HC@9Eirk9jOv|Sk$fo_?>$9C%=48u
zbsI}WS=iZI_9k+IQh>dnv`C#r?+6kscely@&m5`tE`$Z4n&ZhU#+5yRyzzQAIs1Ax
z+Wl@K7mTra?3Jkdw!1CBi?scd`JlU%xkql=Mkxiu?riQs5@QG(WSjzIL@f>mQ+ci!
zWF1W}?+N2gm3hT%9F^}(ZnkNe>V*3b0NQ3|Q2?Ed40bP7ZCsreDmr*L{uZ+uwT?m0
zb{E(nck_cyscO#xZgoTEQD$`IktW`Q?l&)|XD$8VU8D=^A>>Y23`tUpfL#ZDP{l-Q
zn^oQb>LF0?^UxRDjo|$PbNExXBngMk+#xHU?nvb`s<Y24$D{524V(%&<7?nJ6lwre
zkBUCEPL)_NP&hqwl^x-lF{7=#&5GuMtR}v8udI}>yIcFG$5i)}L;24%kOAs22zC?@
z%^`}qjx^{FGMTP=;1V*PzRadwaqU{^f)>Do+jR5~1yLFUe{ur!Fx}2i2sZ&t5BlO4
z<1Yd_Kd`B>2?C=*#gK4S*sfkL=1s^U!hToXA*1c(w8v=s;){_}(C6dQy{6x65&f*k
zIBM7&wiB~YTf|PlT?zWMabAB?z5>&3v0Ug@@Us&tyAQ8ovQ)OZ3<La3i@Vw^LyY}o
zz=3_eVD2(UB^C?QwP$n}h`l##wm%TPahIPm4#)%BRH(N~=0$_%WeWraHst5|4MR&u
z?5Es@<3O1#bQ@BU)BK9Px<~;7Ha*h3=)q~;(ocj`4gc|U{65<8@m{y%KR-)GN=(6!
zpbjP^t3KTmxYVmS<FL!A+hFz~35&~`bzINwaCeGq?d!7Q{tXGs#qH>sJNMbhjCB^r
zpy?>J<88_lbo7>XJ1C`0X07LzDo|4<b}hC<(?MvS5Gwg`@;dU|YwLrL!}8bX@1qvI
zv2!c$aVeQ>43-7}pUIDl{@r{%S8gWzxPg)0AOJxZ21|A3(O!8xTiUmoY_Aw@9#~$d
zTK6i*Qv)s}ao@ZUxBR>h{}55$-y!+wAE5se#m4)G_XLXn+d$0$0HFGB#gCocZyWXh
zruw<k`f%J7OZZN&`b0z))rvPx7zivn<Cvg3<OsjS(J&crU3czc(oND21V9H6os|4+
z-CgBnc0)`mAL?v%=KNy}%*@OC^;zPX=k-#~p>2Aek3AA9=tYYrh~><W44*hGi>0f3
zJiruH*kh7rWbcC-RvJmb$L&cZw|L~dcWl@(Rhz(q9cF<NZq`JAJR3kGQ48!l_XU%c
z6Qqk^=1-qek6%Po%MgB)v{u-UE85n`k8tpJTxlvB8<D(S-4t-`=#K%JsR2sZUNt(6
z1LDYl^hqRzlOa7qB}1>_PDJFvK4-ne))rtr@WU`H$9_6Q`fB1RJbrc-?}Cv=gG~Pv
zd?OF+wh11YdJYu%XhS8Bp0OSdUX5C%AP{H+4Hn7yalW==nG>e=@nhL0=-0jY8!(%%
z>>v-k;r>pT#no=uB1wn+4$10)v{}7GVy}wGyVO)dhJU>m;TMbk=`^x0Wbt4Xc};?<
z9c~ftK7F<Xx6p^g$7r}WRIr&ZH?Qx%?Wa&?*;Gh=fN=bgR3J1>9Z(AbTYX!T3xp4E
zXhqXWl!c<beekp}rg%_5?1tf(Ta8>{`fiP*@nYs#IB@*Qh`mSIJy1vV4n>YdfOTTn
zESQJHW%c_lcVKC7W*CAVrhP7rGfqV(-~<XOwK-P;JRNWpn(>DRC~G-`QI)9S!NpUc
zjUqX?OAeH5U97i!Xh(Q(@m=p9IXA_FZp22Gw^OFD?o7O@r0~Tb4;eWqC2P)9|0`pL
zLK%X1@&Q;86k|*m5sJ`9(TLPLt~1C_>>>BD15V7gsVth&L<Vr=joYWE{V(D|@p~)S
z5hD0g!Iszao-rb{^mkH5Hkp+8ST}VL<J(>^MUevU9QzxSNvHS_OinClhx@ln{GsH*
zfN297k|`WtPF<`S1gtnFKzMdZ0?1(lVY6|go~IfQp!Hx}kpO}qs4C2yQ-$+c{rhgm
z>HcC^f4gI6iRpEic{InAe?-DNo_}a`iF$(J)hkHAB2N`_xXely&EP!^5jojKk~m3h
zd!ig8w63{9boctS0*Dd*4TJ{*Y8<-D<kv+pB5c=*G5j!1g#TH#Ks~3l9do!!sOa6<
z9Le=aQUYO%$t0a;f)~LndW>2zc86f@!-8M~FHa<MBtavVKQG?94iHEsS5+sx<7ii&
zumWnQPLc4qd~Cl%hJYqJD$k;AmP&k6;u7fBJ?fJlhhZ|4NPrLv2Y`!D3)Rhd%Ezix
za=6dliVuT8ieSfg2Q4<(%c>%zOU=g*8wKggB?d!~tt)cNAc_Gr0s&nJz)V{_54dyL
z>+{Q+!ua0h|CFFExu2d8OklX8-Xg*d<i>o_4;CipDC6|6%h(h9_xwbt!Ecz$0dfS;
z{VH7eH|D!Y$&a>jp$N|WZvb`~x}Ffu1A59itI1jv1{*?$zVgDNVA}YT<klsFhG|$P
zLk$R;$yp4xLWP(jzbpU`xBk9J9o#{bFzHmhar%T0-;p}3O@R~UD`hsOlj#gklr6~+
z5nCR`l=pMFThvkaL7sg<6eb}Rq!I-~iam-_j><IYV6!2^z1zQ|c6FMrZ=UeSej=(*
zg6N#^K<jfd=&%D3c5tT49xgUmt2Nhrp<$|IYwRs5%=VO-Vr;l&U=kWq_W?>kVlhIa
zD2z$mEfb9Q^-^O8vaukWd64zQFy3<UJGQ%&Cg7Z9sfH~RB;#j*LFDydrEGheJBXdQ
z0Y97p@LMXtiD&ZxK~<u!C>8>b{WmyOQqECPuqq(%SwPg_Il(ks1_7(1<bahb=yNy(
zWN?(zzJ;g>Dz5S#*e$1X0CYPiS@XS64^5?w0)4`-G4y@z^5z-lqc=~ee^6qIM|#Q(
zg#*HNVkBTNg`oW^U~pbe=3YMhOqv?{CZtT3wmJ4^Omzc1u(FWhm!qc{)M8_*))iGP
zgo2*>4*_$t>HZg_DZmipz=#5HlLFycpBZ(wg*-?QSfeFV`xx~M7qMcRQT`l8S#$&)
zB5oQQEB-q9H1$FPhL;?FP9gfL75Jvknk-N#UoG^d7(v}72~inw9$A&&1yK?vgFquS
zoW`~k^b<+jY{i;zkElUz1Q!{)qeC%1S|mzBZY@)=!fs6{-znt?A(s0PmgW@SVi>ve
z1|*O5AXtbgjmJgKrYwX~#{I)<q5w4L6d3I%-ipf333~n6{RDi3Mq%3hE<oysBy)hc
z3$6A*;F=~0O72jhlNcde5iRT_+kvcT(Iw+UG~6UD@@U)#!7pIbQnLuxvr-k*22uJq
zwNddqlIFE3NPEw2C9S4_$<;gn$P90x%;@1jxnk2f0_%pd4d#k1!z1hxV9;bR|Ew(o
zXr_Ty6xMSdChIf0Hn1B<@iOTM?RO95t8+3yu%y%zZJsh8=T64W5YUn0%B!I-Q=CEK
z2u&tcPK-&8i$|H6KRgg+<0%UOCo?~ELN#bd$yD}zS!yf7pFFgO5+^|~31<!^55o*H
zrRFesF{$vfD_IoRoBDaV(y1~f32H+Us)0F>YcKa9$<I<CmYv4w3=;yaJE8%{x|iLE
zypjRm2OjeBBJ(Q|DRWeaB^IP9XPXcye{gV6T$NS90<u$iBxQS6*brrU<&>X{*~cq3
z!#pBAVdkSBV2X$w=8x(J+C7R)#JOoSvnZJ4Q4@pZy^8G{=0W9&0r`!)md-L+;wkER
z{8h=XD)8ZjT(uu-GT+l+Ab&4LBjF3%5C6B*w0P<aInV}z2v+0IA&K>3Sk(@NqnBEw
zRK_3%-}8jRW|xGEP=p)i#tDyr^-Je15^|JnGQ}W~-?`|pvSKe|vvL#H5K?>S`KV23
zbv;9LiWN>C6Hl^F<2!eKP_#}Rx*I9H$+d<4i-mQX#r}Ms9eldI0nE;Re?J|~+mAN9
z*`OT?@Z4Or-4A<V>cl0XHx4`SYyk?>@c4ccn>Knidv!kM0l$r%=Rq5MwJx;{1z}Ol
z0MF&{@qg$p+#sATmX^9js@>kbR6-P3%XZz@(d`sb?HE58-18+yqfQMY64_M7`QQ<|
z9LyP6siNH9=7s604y}5C9GE@%`LBf|5_!cIHE*~R_yn8f@bK~bKAauQkF&>?lHbYa
zKi_{0Qmh3p_@W8l2Q%ai)(DoQ;orc*>3%xBEy~ls>U{?ObhmoG30(a%@aVGQJG%+r
zZZ&rfILzM8WqhF)MS&+Ma#8>HEfXK+y(Di14HhW;DV}OA$Hw1f!dYwjY)l>8=%2Qt
zCScnkh-h}Y%j4~{v-vK1^?fMb?Y)1H4G3QHc8spLFaC-Z@dRD}L3zLN^|JmHDn5Eh
z_-?ZQ#^-M%l~epAGT7w#ZSCRka$RUPdh(_(M9o7k`!~i_3HZ{r5j01}V*(jI7LB)r
z#e8tNbNpF`&&3rNt7vWA`P@Q8o{=~DeY|fGk)QU|Eepl##&K*fohixoFN72jKK8>3
z&9Ie+A*GN95h0&2+vwLN$izaio+7Y-PonwFqwbSABXlT!I=E&lbnXt#PR1Oi=&9#)
zE9h0dn;^sKWI-@|Hx7;j=;R6O%t7!y64Aq4T&O}PO+r%4X#@@D?L^BMt%tGE5gTs<
z>jU9`3?gsC)_Ypjgu|)$lZ1n^MKl~o{v=Wp1>?3Fswd=X_$~o}0zeSwD#j#->=_bS
zO!=#P0;nZg1;#s2>NgCSvZtl&ba_755&o_tF6SKm&l1JZlAR^6@?dq3JZ$X)7whLn
zk%kU8D>ZegX}hhZnwo62!}JoBnhdQhe>2oYd9_7pOF`B~f~_TWMZdrT3|O8(7uP5^
zbKt<b^S$u{a)7t#J+hFA>110!GN&gySqCCN;&xhYSd8}tIj5qWIm)caq;59WP&Ru;
z#?u(LEUm{;bqO2qgD$y<72`GJyrzt&P!mo|=l>4d1vl+64$@l^5nXK`IHdn$CS7gs
z|6jA%Hl3NX$ueXA3aQ!>DaGLBT<iOh>$yG4m91yzryyk#38!mrTxkNV;0kt?<9WEB
z66u3@qOMK1K>wjPjaG)Bq;fWfbPq=wy`|My{Z}Ba^%@Qx9U$Uf;plNVvgiGQj%yhm
z7~uKBx%}ec+W#e|y|+6q=&pib$o2+y1}3$p5J37FH~b@3E3!5&&i`@vPG1`K=H|Y~
z0^iu2mj0po%eIms@YNHjZWmnLHYvKbu7$nSg7Sv>Aja!z)^@)qx+izfOX_p)ZIYgz
zjt<WW+_8gFl)ve4h@E>I@Hub$W{*i~tBg60RMT}&gae7Yum<a`VDtVYQgtoAvFUY!
zFAb-H=~lIsS)Q9i+OvH7oX4C~m0NL5@;XPb(L9&=JELAWn6bi=AL<iVp-`g;-kuMN
zjeVl9Y4=*63CBsPko=Wp)MK*eJ;HUs?l{0Pln%_Ljt9=%y){u(Q+J#|itZI9^h?;I
z{zcCp_5?155-4GP=a;!fJ}1Ykb(ZNir2BiWjejNUA=ubB9xwiI9J(Mk`)zf2cy@ld
zHp_$;5pGV~u}=teH}!I9V`C!g@ge6u;d~(AE}16p2GwMt8&dx~ho;!TmgT-Nfw~T^
z1VH^D+D1(-I4wPtar+qb;B$P{Fg^dVnrSR80pmzNj<$$?5Rcy>e%l};0B#u%YOJQB
zf*ay{hZ^p$6frKMXXn0;paCXmaI^ma4aF2JikhH-bzU9o@E0tIuq?y60K)=^I5xyc
zhJKg-o&<6f8-ff=za6lk!8Ghh6SR?SU9rwagJ9e-b1yS>mm>bLs;OgAwJnSI_`+*u
zpz*e(V;qgg5)KJ<%x~1L=onYUY7LhVd^JL#Ra~Cf6ogk*qTWI|tcz;Fk5{pEd{`=>
zm#k;0@P+K432;G0uD?R6pYJ{(lr-z)Y{+K&nVSBMB#cB4PyAVYTxBz#D^Q+9aMm2a
z^pPVucf6lfETsMCh!?0)SehB|`BHcHGw$XqTq&!wE(Z`{tQ&{pt|Jmy7#|<l-3P+<
zLp9WwXI)$zx1S_tp7~`i_L_N&ejdcGlc*-!98)4;iwx;cLfh8Vo!gYOQK2>#_OTK~
zAfcwuQlU;?$XVKl|G`6ERgas9@6hl(gO^pz`?p_vKP|_V5*t|KMf%~6of0PNbD52*
z7%i`540T}(9xKI(*GYM_6~R@*a8C|HWVodF02SGkz4r*6X;pqk`FenlA)m5ii>UPy
zO#PqwIX<%1hVi&{HXEjeLe|WvXY*+?agV0D@w&OemJ6(yh;)NN?L&tWgW5tvQx>`^
zrDsZ^p_V&*Oft>x!+t_>)9uNG8H#b4Ul?4<C)7;l690KJ_Yc!hJ&FBXTQ7rN3O@8O
zm83Vypg{#^UtppdSO!1|W)1StF&rc4BQ1AdfEYEfEQ9Tzf|lWHDV%01K`jI}Yq1bQ
zV&Ho7(2yJrKj37Xddc~!KWV{}7%5XZIq|v``Vz4f<Tf{i^5w3e)TX#<RGU&%J5VZA
z?P^TW80IpX<CuR!v0-$oQ<xY@4BF8&_S2s8fm)q7CEi8&4^R5$xAU!w^QWpx4y1(B
z%a!Uew1pd%QzXE~-y8`_CNJIGF@I_S+LM*6$^_;9<p*^PK$etHp=&PWEE8%erf-}q
zaOK&+t@T2S{lOB8W+je&GGE3&R9nSW)oz6pZM7Q{2Ued@fUL=;s<G@lvKUZlR32V5
z0G1~Qg`#-#;>GCdF>4)=S2Jz4U=>)515hJcWAhTrI#o5!TH1+q%VpCh#t{~5zvQ|s
z?aZ=U1=f>uqxGjZ`+V+8Wv*Xz(4D|+9nN+bv9d4Cx?kOHPuV}*_Yk=ke}O-Fk8h@&
zCm$&h$z=hmiMskYlzsNMfMFl5wb0B2T5EzLG~J;|q8pNbzc^T?)#L5*IHtb%yGpOS
zkMWsQtB##&wGZ^`sC0hl90#9wR6omP(jNamm;1?(d3|vf<EAxbX%(B+1my>smJsFd
z+hafF8a+UPrE2d`pV=G3)F8w1?-9-9$C?sBxeusT^48l!9Oj01Mlq3c;hM~NeNcV8
z+uYo|DWN*mA=<1*72k13<RE!qk@Z1z+YpJmHNGM9)DQ{J2?33wnHtU0G=E@|Gc|av
z)><}sA5*@plgg|<)|+y5HfLRy73%R}cvx0mBL6PJ$zjN?xG<Zu7q(>XSL8deSF&TZ
zUbkp;l72XAuLWg~g4aLc-HS`@7c=FvzgP^=lG9xO)ih95Q{T938mOqMYhE-D*3mGq
zTAhd5T$WlqMKv+1Wh%M8VIL~>BkNK}&L!VMyQe&H7ghGkvC|qVZQ4VXy>}m=9ZE$$
z5})AGHBeEDV|Ncw!?0CG%&>R_mT!9ZXSMzx_cv$JB4Tw>n*7#_q?MghO0|(m;p*Nc
zEqDs=NWjLsR6L5$BCx6feviDnNUS<&-!s5t@N7yF@k!Kv8ObFj{@EmJ8`LM6@OE9P
zGS15Cv^htc<DiVj?3I6ZB`TWKlzf!E=sb*#pONrSA&CX-MN~z_pf#-PwSTYWr&rM4
zV!U~PmwVe1dv&5?7sh=hqIY*EPnUJS;Z#3MO!xRJCVmc=hmC_gOc!n~SAEK<$9Eq7
zI<s;Yz^-P`heZ0BFY*dB?PCeZHR<4qWomAkE1O~4m|IJFe^KjOL0LM@W7Uw$sg0;w
zgri}MRoLsQpQv?26l*5*2&sn$-&Y3}lU8r4a#p+@s0}PEtbm!U^;CC1{kV$!DB{j%
zYo^C8v3uvmmZQ})09qt@Ci97?dg9lv{=05_yEQlD(~WdpHI*2vR0{mdbbKnbk?vEU
z<C7ie1MG=LT3Ov$61&FlA~Le;a>Op<zNiUNb>rf08@;fU?y&kD?bF)znPPrHZ|wT_
zGAYT)#s*bsr+d}v%%mRlW($CAsp09k2}#L^YE56Nb2v%MIqvxv2ZewFF=D{j1WHzW
z(dv*PeNfo>`b85fR~qw=>MU0~p9?jKp8HF;!-y?z28e`N#rm6Ng)3k3=%EjlF5z9;
zVJV9i`M3V99OGR6O8ALa4XfxiG*en`#YAvmz=H!Xaw)~nAtaB5Nqo~2w?w4=9MZaq
zpSggB<xGlE>UFtom%<mYv|f!VR8RMGHJ@~U?2F1hVUY*mz*5y&HB72moqhJYK3Uj5
zu`8jvSB}&R?C$z(Ql3}ux3fin%{dpE_kF+OXKTJ9-LwANFim$19=>vkET<pqJ*Ti~
z5qI(26wZAJbej1=XY(~ipY|EI{Tp}z9lap=JSfO53H;QN7-ALQd5o!7zgxELQ<xIA
z`Ec}SVu?|Yx{%OCC;k4G5>btH?$ocodcs|2`K?Unuy7@8y~fborE>74rRB!0Q(e8C
z-2AWOC3N*}?uu)TZiDtW8i<ZY^DoV?Dr)$*>-g-h5+Lhe;gD-w-)+-ELxc6;*p~6j
zeesC1PBb%76|Ls7l7qwVvsRJkP^;z>+8J}~H!do)lvb`on*ra?PWdaFiLq+=6?pX2
zUicz@?Z6ed9)tb+k3+Hcc2cJwKufvz57m@;3Tk&t%6+Mntm{_a8vNeNIrf4Z@?d`B
zjEX0kkf-Vy{LdK8_duH_9}`WPl%0RMFEv%IHpCG8(r2**F#Ju;#+P{}gSH!B7W1iC
zY)I(lh@Ev+b9BHNBotJuwe+qpdk(HH%{)~b<#++=!Vd1!Q!`UO_~I(EoOL$d&0v*T
z`oYLWwhMz+1nPpom2!K<U{wo#C|DkFqQF%^e#MXKx-rGa=4v~GOtv)HBaS9Ch%OU>
zIt%)$ho(J(ha}zg#wjO5NS;u17bkZx6iZwDU>qc23Gl8mYBgS}HEg=PahKaQcRV*x
z^3u0O;6xrc0l|bNVM39-b8$McYxREHq?Bx;Ynn7MBa9vxfuf8hG>Xttb730rY4vXF
zl)217?Yz7MHHmF!E{7Ta*rz`;$zo(5M@rh27njN{q~;k4%}tD*Vau`|v=+F`j(74_
zEe~k7n6S)pm8kbtWvx!QdZ(@ukMmi4IcEIDL&h7Dsg{=$SpU}HAk>W1MvcIw$ZLUR
z8`5Jz%%_U(F3Z?=(jZ+>`k+tGV9b7n-EVzFQO-!#iATk0!eoKs558rmlHHMFCrl}x
zTrn~T44@l9BBr7A5OHga3N<?@tTHL^E9yBySGi8WLQBe2i1Z@u{&8#6uIr#-S-jH>
zSA0xw@TMOfE89<r(lk)KKYemmR>Iv&B4P(mW<|h#L?q`53AB^X=R(7lEgFv4sIU*3
za(_jno@<M?%xfMA>&O#S`!eHWTGL!EOwg~adA4~^%sh}^ssF5v7quurt#Io=daj}0
z6@$p46Jq?!RJY9{m#mADPkl-1w#^XHP=}WvxxmDSiwm9)?5&z54Y<9<16(f+Qbz5x
z=+D)HS$33o;OYK5b1?|h1Nf2`9(%_?UQe2518FXAZ=yt&*S{(*-{I`FEfW(P>UC?o
zu^sg1W)0EhW~<XNZ5shnyA)k`<u)CyD|3pZ#A}F|E`dF;k&;!-i*%luuFrD>^$pCt
zRc#8$g;Kp{FCFb`Q}}FHipTeT)bgu^F>6Oi*&L`eRc+IWM1VS}TSzrb|Jb9TM*DVN
zmGT!h7Lw|t0F&#ZPg1VK(+S>3!Ld`hfdO_s>H(S_RC~5}5Li?PF@vd7ns@3$@%6s1
z7UwJZzWK6D_w@b#_wTwgbybQq#Rp4{awsM}ZaGVA<T0BqHiN5(pCzWx*eM$xG{*%#
zDI?@Tpd7xOM`72kXK}=UaBC`6fQLH2vdWE3#mk>SzV8cOHTQfXyDZpU4_;tips7T)
zne4Hh*j#jQ9b1taw#3scFEYe~l}M+9uw*F=F)N=H>w7D#+CFrFEdrel*6cRPcmZdK
zPtkyKH31WX#hZK2zOk$rY)T!PLG$3a`L0MSAQW$%;${3D^+AL|bZfD2F<>qXI$f|$
z#SIb6{ed>D6j7OuR@cfbBGYU@|Gv0#+crn40JQ1a+T<|_wmW5&wn*}<KgfzAzRJUi
z8+re+oHWjLP{cjOtru5!q7igoC!m~1OXN19NlDSE{mFU`L03{Zrf9pqYzGBAbI@{o
zkn>I`gbxfk@DgXkPdo_?D0!2X@#sekhEcU_15wQSIEOaf*wHwlR6W-{f)s8_IF$jv
zNy&glg@HA06bqq@g7M+VpxuLjHYT6Y!Q!%G!zQVld85I#<tlr+!IcIS&`dW#jZ?r#
zvDNNzozYu`R$pI$G+bPG7VZ5pg|W#5h8J)oE{Anhs!eC%a@4-`hqoF++9lp=C0(`%
zwIRxhh+OYzigSUAt6Ear8Og$Ail_{!RVdVJ28V1{%m8aSpJCeH83hi4b3A(vWLs{Z
z!TiG&`*;wKl&SrB$mmoOyz0kXGlxiy`s>}VE*`YWm)Gh{JXWu6G6XL0Rxc_~_HBj;
z>SSFmJ$P#MiM0!{^DRVYq|qT)_|566{!OQA5yl6a3r&3E{cATelE+|++ORQd45)XM
zLGImCs9EAOM+p?_JlkQCe1iReia$yN)9+fK9DVr5gbcp(s$L~bM@&q95@g9A*}n)}
zWZrzZ9HVo#+=|$qN?|O{Or}Y)I)ec*b#y~80sbx_vlI;jxsvcT$6hfZJoZURG_920
zHjze}?>niKJY4}iZwv$fg-DV=_sLIJ{F|h?h5>KEwn4-0kNF(`*MrGaa;o46oJI?(
zR9mO=?IcfeHr22irqQSfvL5nyojw`We0=elIx?<Ws2<{a6&K$>s?h^gB|#1ZS=({m
zqjGk7UHLAEBV4b?PICGA;PPh`84V1|kDkZ5(|{;TEy}daE<g)=%NAoaz6Yl;K)mqk
zdimQ>dqm*m+#ULFP$gn8KKgqGEf6u9t@M<AxLl4eOYp#n^rP6%KQm5cUQ51Yd>6Zw
zAZi5rJB39FlsBSsyynUfZ$XAVH=1vKSzc@-TS(YmG#j{gg=<ART#b<2mJYO{fCZF5
z{85SWrJr?_+}2c#4d;#}qxG1LZLL+Gu<#21Wbp~mli(3Za5<$uXpSRWRxn!|Wf~f3
zt~Zu5Y^vICRXd`kOcl?)2wgkobXOhiW(TxMP_d|~Sm#wNH7iuyGnb|bZajx?S?HY=
zIIjLK<^6p<_yl4}MDNSn=c$)i2=Kvk=k8kM*<9Ue&AQUJ(SqY%>qr@dYbiOd3oJI{
zv~F#p3B68<Ij-AYsKaT|`j<TDBHih*W_zwC*Rq-M8yVF;oWWVB$^}c6I#8)#B`X^=
z%X22HZYC*fG)w<Fng4Obe;uv=IKrG`Nnpn+YUlEByez3KJMGaC=O+A82Oqlomamfh
z_ju{a;G!qY7~WjEFe8hANAg~!Unc5B-XEQ=_n(9qSMck4L&3D@`{=WqoYDuMeC`kp
zvpefl6N4;J=#M-yhC+IGbacAYpZ>2G&wA*ozmqmRp28c+KMeAVH0}R5B?H~sqh1oP
zzDIHE_$_^mgPq;&oFA_@duwfLdVg*%P6*x<);4b5_W0a5u1huIrQGW-EqoD4C;L1d
z-zVSkQ%k>m{|6=ff2NfQh|QN~aRC5SyZ`{G|68Noje||^|FYB0^V?}>Ti{oA^aZ(~
z;GHZXNl4IME_ZNt?3VkBM6UemoY+Pus)U9cVJtC`l3C>Y(b@?B5m#W%8T)cMZDJTc
zWK_R~?t<=j<2~?ilIK!>unm7Gl?Jw<%sG}<YT=TGCl`IHzDjYm{tEczi$`C6k${iW
zeJaOfTyzih%3NbAk><9(kiu}+AT-Mx{YcOS^R0V@*YAnrDS!jst0n4-z$h4u<UrLL
z9oki7Fk3FR{)a@m#jaK(3&lDe9H1mElru9}u`eJQy$BTA=!7(q1!{W@dQDY*3bMtI
zNZ-wND#2o3$Ot{7bQJ(Hr=GCi<MX<(HdekT#l*c~3Lp*tL=;UfRWwcDHL4xdDHB~Z
z1OMgYSNpFUge>k<k$!yUqf1_Is+gS~O|cU6njC)*-|w9gI+7@C{V4-?_?y);MP&76
z@+iT3zr^B~kUak(ZaM+VKi_lWeTn#l7ReVf5zaAjI<az(X-wvXep`Y`=t1IPG};>_
z`1bqp>Z5cQhnF+{+TjFzZV3L+5e%gx16-r8#(yhdi7@JwUcjVf3Lq0k{|!(@gmW^`
z?^iN%bk~B<o4!*n@@Pxv=xZmmfT+*?0(BgvBxGUg_(2j0{dAmYtY+O16O~XR;S_1K
z5rhLDTx5FrZSP9|_ps@-qV_;Qc4#VtZ=P{np^BGJZZLG;2a`I8eSZSxq=T!uw@=^0
z9go-rk8C7?v>`IJSj*sKqe+wi6WuyN(J*S<iZOh4^0+pF6FWE-pX38ju$RBYag7b9
z@D8quVAMsRK0p-Bn6mz(HD-OhbMI&mZJs$`*O*3porPaes4X)ZsU(#4Oag__jXm6l
zf2<?8{(EI{ra^EKAQb`}%0GYOQoeoN+R&x1SEdfIg$*|H>-byt{vci5J$hz^88bn!
zC7rm7i>J<@6hSxwQ;i0FizBo(m{WpWSul_Ae-{C79j9Z7y{A{N^Itu%zHpzgV6TV(
z4De&y*Tl;m-lJGCo!-VWu29;aH%DRDgp{v-9QEvaZR?ZTN{AddI*VN~DW{WNbEYrA
zig4p2$&}|OJ3M=usG|bdMSo+?j-~&?kwroI4}xBhI!u77uBW#vqU4POGUd*?LaZ~$
z85k;f=}tMK6xBm!paP-nwScPujA0r`0|+@*%mCBW5lD3Sw+!e51wWFAwM(z*VgPHi
zZy3$7lUuPLrl_Ss83JFx5Z!lz4h8oTen<0R#Q$`IZ~`O2bA$`(4T!#J0l<D0i$jGU
zX(JOE2BhI58tcJ92}npg3HiM@Ro8gi;j2Duwm}fN92D?=Q9*w>!oiS4MJ?Z$q@n7g
z36?mzBI?I-gm-qKN9Uf_oj6+(F)0lE9EFbZzs7#QqwwQ>!5D*IOKuy&@oqGZbqA3K
z%Bu6hn+*r5VXMGu)Jh4+yQ+5XYW#@S?i$plTXPyTyZ~xkrN4Zmg|tB(2JR1e^bI9W
zuMqIXqL<qCxHSS~=;FeBTuozx=7<Gtxb!{(^l7L!oZY^><n*5Py4i2Ie?xoUwtg@K
z;hQG5eC0JyZcrEP8JB)xP3$;Kt`|4xVqGJIcQVgMIO`keTrOTd@AG#MFnIi!LV)za
z3ug9-ec`f@3px&7Wa|U9P1Ke0d;PuXGN5<a=>7aO1n(_}<VkVzXOi<r=bp2<J^Jt!
zDjmo30zfF*tG%v`_4WEXo7Y<T8fWcHt-7qY9r)+-%bAy|kKRGeu;X5rCYJYHvF83(
z{$(}E5LdU0^OM&cZ`t~>b?)Qyui$knp!N&Sq0^*EXIBrf(RK4>FnrMwtS`D1CsF>l
z#?OU9J5)~YXH<%7i{QY|=5eo#;GXL;VR(C`?qN=Y%$NAh^RBb+8mc?@n$1V75d9G>
z-S#^}mSRcya1d({SXHb`ArYf3{;{~a{@A}oqPO3_XO8}Ec_CieXK^#L;|!|byvy+Q
z9bhDg(3M(6UAvL(NzlY;jn4|c4?>go(%(K7*2Cp>KhJEPj8F5;T8pb;?sgvp3nHdK
zUbD`^3oK>~ljddEwlcdoG5aGO|AwHiHfGkx?epmkyCt>QwDMX>XXdht1ni?wvu(|A
z!m}1jOQv2_hPLYjjj_3|Zn&-8KNvOz+WMZexerqSP^Ju*bZN0gAadg|u6ONoxFi*@
zC+LY|XcXE5Xa6uDL;lZ`Om!(Gl|6R!*-<3@%*+g4lZR*>m1Z@b7np`Mk2jdy=lEgc
z94<#rW)5#)#Un+!ScsVNnN#-fSN(o4xz1EVI>KZAyaj;<JIH5lAq(d}J6=5R1FP(L
znR$?j4g{|B=yOt|DF!%`cVED(084kU8?|Eu0xV5mMHSL2kw2_%#aPYa=YG%m@<!4=
zE*1`$u;6CZxP^baGds{^MCAS}1q1(<M?gz923&x0hZss7p49ij3`;G-?VB7u$%YP4
zxFJiN%mz%L+A(zs#w5>Ma$I;_HtO$zQ!%PoX)@H`?jN8^SZ~uBMPUc4-s@Tpp_OKo
z(FWSUu7!4lAkqeQ74zzn@3DLCgu*e%FeXXYcWjEoM?=Q&Oy>cI1J~rY9QT2@%l{2^
zAa_>+K&rlA@Xm4Gamx61m|yxKWoEYXX`<V8CCF^;4g?6=6bxbTTFUT}SlI=f5iiUW
z{z5{peM|Z#bT)dW9lW=9<%b^fweapN_q|QzSGJeIg9jnl4dflSw~R!AV@Ug+NCxe>
zCmiU9AaFHXDmSB)({c8!=RXPaCR_#{LmmX*4->%h6x4T}*}hIhm^9We4uC*ZG|4e_
zN>?R)Mw{*RH66?Qg4zZQ5u(#RFD-(72*_`6DtW*RLBKfBe**~$#$kUq3p^W~mK{K9
zx1o&ymk0jdmui60j$&ozf7$4+ezb-ytY&@jSYOf)vkvlQ-xU0TMC9P=&+5nBw!Y^#
z9K<7rFV>S)aHlRL2ck6(xlCf#YV9wSSgPG6k;YYkc@beA{ES|sATM$bQ(9XdK*jS2
z80#EOaS0!MM8tP&cgx|kI2TG=PI)td^QQ?IGLuhSweD99ED1P`?7O+iN?D0M)C#<f
z^o*^rUO>wb!w|C`mt{nCQs`_DY2JTc!dc15$?&q>8A?#Q3C1{)QU)Q4%OaIEy<|>6
zt)0cSE|=CQ*;tI5Ws{K7lA~T^K6t$+uK=0?iDPgBm>Rf?rtlA#zZj@MpC^_Z5d@tm
zX^mx5oNKUDP|&t3)Kxq1WyaOD@L%;#&0`L>Xyio>4xThqRtU9sgPZ@w*f|A>5_H+R
zZS%Bk+qP}nwr$(?X`82Q+qP{^|8Fz*;m$;4R#Zk-?1ze|%8cA=uP*=w+|c8X6>{(}
zt~km4vYv`qotC!X<<_%Em??D9)=pZ#>4`|vQpmm#4rs8FB5J<<K^rgQbFYO0JVPFI
z_Dr`FJSHHAM?47Zs*#&g#zB<gCT+*_**ZwG1$NDY3~c3$*ue(ugGF&RCeB*VbT9NY
zzb3YV$~wBE0|>Jg*4Q`$dB_!x#7AyZRefkBqzapUy+_mEl3B0{Erf1ETBUB?-f_05
zL@Ka=7Nm_jAx~(_%0aY!as&+>!-_+B4bamd>FV^*+a`%CE6v)=(%EZKCWKs8^K#Wr
zz0*{3Th&EUDS@wVelCV(QmSFQ*}5!g2$IswXb6?AP7FlBHi2c12s&AoSV;eDn;Sc&
zCJ&n?$~`U()DmGy`%Kf4Ha(zSJDJV4D4fEIe|aSDPVG))jZL9+Z%8t%CvtUWkz57g
zYi%}Gw;JSpM}W!EJnt)HEa-6$QtCK+iHW+M6spom)WE`<$v1n&^XCcb5K7_(&?^@9
zo>YHfZo)))bD+lHQjF8OXKlHVSq`rXV5FfwFNd||B#nxnPRPSPp3lJUUjxh_K)#4a
zjV1@%8!>EQkzn1iqfc8P_@=pKqd8`&EKNfRX<ts;k=poE*(qRHm@<{J&tvwdnuOBD
zafvx7W`dKx@I*Y*OHc#%b@vJk<hi^}lM8N26D|x)J;CY^wb@cwA_qF-xg~CQ{F_DU
z#FHjNUayfLl8ra)%Ou@!ue;1Q`ql9rEVPvLsGDxt;hWpkKye}X2{v#Pd*TTb5~v%M
z*W{C7u~k?ROs3^iI0~b+AStsV5j!oz&m<}M$@>Ws#KZ^4IrIeOjf@56&W{ix)sR^K
z)#T3h;U7I+tW*!NeB7HiOeo2c%CWlO%HJ{2;r=FL3>{eF=aK{mme4E+=FB?><w@)u
z-KAo~#A=o;t=CdX961SXl&QK9BC=I75-mo*ydRBW(n7Bi83ts=(zy-|cpdZMo2;Rp
zo(wTAS0;A2Mr)(DxG%SWeE<r=-u3k?&zP2GICA*^wOD_vk%7i$a{tV)jI3uZ0EwLj
z*zMgA6}!p6V5<$+{nfW=*0c-Prd-wJY~d_EKtd897A+p-84xf5Pku7sSvJ3&tYgsw
z<65d9c$;_}wpW?4hEdZpg+w887;9fE>q+rJcX`I4Iz6!2C!l2?2|Uvh`&sQnnK+G!
zb&(;qC5^5w=w{KWqB%3PTKD8qDc;>opq#bI`u)%XpHlbl5lxN`qQ+kj#K&y{=gXgN
zh<J2toq7KPr0|Z@04YQFmz7w&=MlVD{wcIcB=n1CAf!7|*J7};o|_l3go9oG*Akm*
zw8IiZpt@QhJ$O&@yro#r=ui;+jdnw&y^!)EIeZSMsl@tRbG-(q;5+h(;JYrfHd6h`
zYR#*Pavaz}m)MObYjC}Lvz5xPt%puJZF8OPkVLWEu*|X}pKOzH^)E_cSXTuU{eCX}
z<Ld$DU5t4%EBHxuK&A<6Mf}BJ=*iZ%U(A`DO=1;|_<g|SVjyDK%QKrTvrh}5OQ+`B
zyXW!XHE$l^duH_uG)Ct@cMR`h@0%mH%JfWFGaa08!}{C@#>{=-8Rr!B3U`)N0BxQ&
zpmV<y<QDWk5chc9HsCSmFY=_KO;X8Zk!F7s@NNGbimt7sS5YNsv_RhcpTEZ~*0G19
zCm8Z03?9dyxVQ~ha-kbn1luhlV@c;|ZekpTDnAGl*by;Almc(#;{jFJ+4r#B^+2Rf
zAv&`l+?dp`%(lZ%VLDnHlT{p^%7la{v8fgoT*g?fbZ_OyuPrU%<;+PaAGaQk`1*}Y
zskytkEwGU?p{mspH2#DZl>FeBrqdLryRF&7yNkm5tuw%LF_ouK#3L-kM<8P0%}`^V
z1uDQLCSE%Z8)<a<ZpKDT;Dv)vR;dS~yxSswwzKRk-L%d=WIi_B44no<A+CKP6H_<#
zIUlI74jKr$S5WSkWgLJ`dNjvTA*fSn#<dNGno#&yi%FXbwh}O7wH8@WPeinA>WSpf
zl0vXS%c{stN-$dI)x%UkaE9h(tEJ8wL!LPH)El7Z5qE}KxYZzhq;iS*^2AE+x@~CP
z1ToZVTV*O2^gbW}Y|ZU>LGam5j~D>%rX%j2Z7%HGF?YAY-&Q(CXp?3~q&PlVL3&by
z(tI15Mw>c0o+=sCZ4`ynm^a-O#8|T>!#`PL+a9l#bg0i+w-*!m4Wk%549Y4BhT??t
z^?!ZaM#yij()Ftkbqx5rU>@W*f&aADt<YxXK{x93+T+}(mQr{~;d)B3n>g(5k6QAE
zI~YGWhNZy^bC3hMYu3Q}5rkR6dqg4n$f$AQc)W>?win=K#<TgeXQ}p<A<PI3+6Frf
zY#i_N;y2h4+cvXir<V7xAw_d?7YY~O-H!HJs9@qq%4y{w&(&;thet6Z>1UD%W(+pq
zPgmlHd0XU;TS*Dp>K9P9W#@BiqYLP^Y`TpzVGi)vE{+Qk(j4%p!1;qY{QjU$8z6dU
zm?mzaXgM%Wjf4rpDZW;LE7ICRVs!3qMdI{yLx0?jf#ybx$kpyuWAKiz4KZ`+-efTH
zrB9njLktWO8l#NIZ|-I>J?IyyD~RCj&ApRcs~z_P9Oq7zkv&t2DE)WKJz)k(4I|rv
znW*JvHp|K3J6D<Eswc=L)+b%4%Q#aPoUahz=InO}LQ||9IdqS}pu;UuQ5{-BXk7;M
zIXS2Wo@o1SI0f;yF>2QV@wz270!4AVJUv}P1gqD*;U*pgz=dK|))7g!eKJ+m7wt2}
zo6LFVj3iVQEANHlX8*lg6lyvQEEQ-*(afOQM2Ii}m6-60I_PJLPHf=}2dgRP9@?vs
zVrf$5<aMS2y4&x0K&U1~pyt4j$`L4xsDaU#lM;oMUZ#;6+bI}G6r{a{(!Zq$M8Uc}
zjbAI1o=XTqd;(l_GAF!rXk*Bum3y+sja!;Mlt<_796!V&I|K3{JeNLMJaiCx8%jQ-
zNUWFK_Bl0PYN`aV4l!G3>{j>otrLMJix?64o8$S-0UEkhDU!vFkUq!P{5dIaWqca&
z&E@W#8k2;p!*{+mJu=)?5IpZ@8z?U})VQ6z=}-YItilWSmM2&cE1q|c5%+D&kn}ab
zXO~EjD34I{`MNdk2j1#0*b$=1s&Rht>@urt2%vWQT?SKOmDj>&th(5!C+t;|oA!)~
z9bt4$|J$sFOLUV`{l6BYef~`yYG`oMSY;~gOm^jJd*gle2Km^59g?YmRVMakhNJX5
zy~6Q?TN6dW1fMHmPo3C9%)0qQ|H6t&`ezXqHgUq-VY8)tW(j?25&I6?rFrk}>^E%K
zL|oKi%=zAXdRv;<g(HYh)}LrRP`$L$hWol`mMdTqwG@05O6zJv{KPfzOm|3=-FoXW
z1xwyVE9-xz#ejeBtB}52m&ECJb^@srS_%HzfW%^XC8@HiY^0o{M7!UPv!R?NkT_@M
zQ#&k6f@wyOoaj(turO+&u$z!6(8v2U`TLQV7F7gPVMbJpQc8CQRU|}!>CChAz5Zan
zM(vsj?bd>-p}bbQp}w{*22KyA_@CS9C+9-)g?SIq_%F$<0JsyEHCsX)JqEquk)|Re
zJn7qhjK=H?Hk9DW)JHr%C5JT;Boe$lFeM-i;Iet%Ls;OsSsrHinthIN?Ifzhn!TyX
zguPX=y{O&T*Z64(v+mljCQ?O&rxDM-z?aF92ghz+7;Ef)bekYF?pat9H)^0eod?YD
z<|yW3L|y@(!O7$~=|Mo{6a@IT%*Ye(`s{|gZC(Vv6p(DcUDg|0-|h%KB$E7KAd+L_
z%&zp!lB3;s0}XAIkg3FxwVB`J)F}*cHBWF;G}r8D>n2iq$s-WC#-M)QAO0y-nLrSW
zqiV80Ni`RnGGteUwNfq*Cma@8TGFiCm1UGmP#6@}5KM}AjbL=RZH6FVwURqSMwd!5
zU(RUyW7Nt0LSDl=W{orRHzS#XnF8MYuXAoEQUpitQ8B{`tH9U;QW|@yBPe<+=j`sh
zF0n0pJZ!E$q7%<|lx5dTpS>PZ)(Oh5t-Zx)>#$mAGuv_F$UsB^1ub!hvu*s1vp$tp
zb0S9y0ZXGvqoa@x2^u>Ki>QQ6d<TDi4wU)04{Sco*EPhoW>VRBb=$f%xDf3yK(+<8
zjgu-uG@eQFeR$)+ip=;1Y15GqOo?2>4FXrX|H)wDBgX0J-C5sw-{I=|+n<<tZV!;t
z8p%wUK`y-bQ?lVod%~J%<1_wo3rjO{9X^dS4ceh9O8m~yn34|8!tOAu41?;f0*h)m
z?ALUey8{4TZ7kkiY;`KB4*+Ep@X7;@qvvw`?m->%3SX577@4$DHE}s9p(WLFIO5Yp
zh9w2DL<Xg?KY%-|ok23UIDkFIli^Y4gY&QBBNii>n1Fj7u|S%QT#r=fu%=?)<>6|0
z@lv{1;B;RuB&fEbv-1Ute3?jUs28l&I7=NA%{I&8m@<}!l4@fvID6WHI0;BDw-}O(
zW>%Vw)xOs9wGB<XCB_HIb<xg}%%{udjgryMmdxf#|0;DZ&QF82Fa8?)ItNKpj#XQR
zvQF;eF!!|!AcI+D+DC!GSYq;HHEAz|KxI(7JY-i)`q$v55OLq1!dAnVNY$J2HRLx0
z?ncTl6}iCfQz4UOjFyeAC@2XQO2;|d#3=r(Y%e{x*Z}X%JlE2%TZ;p&)fscRB+{rK
zvrG9;LS`FZgn<QGPeeeCC>C4WgJ1T<*@@v&NVfbsI7SxWQAVLB65hnZzhO&Ebqw8s
zpnb5$>F?zL9k5ul+z2FMc9;)_WwX)4){cq5=@T7d#+0WBOSG_{GJY?_E&%vb>KmZc
z?G77-fz(vu0}e`lA}A2!I_wW(OEd>4hvBf!4CX}iBX^lakh0eM@C}E4)PGdg1mK&q
zN*+D+$!AibKQJ@QJc@&U#N!*2%qIB8tuJc!8h<@+ft0IX;heQ^A*TUn3nObGkNWTZ
zgNfAul<4MJuj`y`W*8-9|BI9u4s1s)3k^r132Zg!R_dx;h;BXss~<sKP;F6ieg@kY
zsnzslYy)9bj~kUF9!X!S#9T25!ZudATWSb)my@4MH_Qg6>#6g55|RDR+7=dqLxhS%
z1RjOR1{joX?uQ||FXdck403^XFRl%e4Z^<$kxf6YeTHNR`nHaG1W>>L3QoSSEkcno
znexD;VaYxUBvZaklq>&0!jEDJ2beB6^&LQ|Oy@ILYoQ8fU9jlUl1+6g_%yHNUEsN<
z5M1CHA=O~fWOV?;gJrf_?-2TpnN7fi#GW=hj<GMxUtFN`GyWJhFe$x&CxWOL;>!>z
zzt|H@#H<9Hh|p9xid2XqjeL&z&>&opZmrA|va8jD+z?l5>&Crj$c)Oe#_J1_>l|2{
z3;;4-#r^1JG5k$CwW}922mK)NDR%|iadhJLm5S%m85dN`j_HTQM&&bGqv{zHPN-@4
zWn*;P&DYk!(Sr>}cCw<DwsP{Q0rF)QW0S&-`A8>57PCd2$xe;wHgjSSBl~4jz1)Mn
z4YR$&>?*M`XLN;=xp61+V@(fbjF}Nz%$0p;{6aa41<@kzi-4iMV~7E?CxI1YLJAak
zp~Vc0_@sr;Cvs_pFc@b+@0t74SIgI~Lk~aHuHbo^`O17UK)1(kOBxr&E|W{-+0bo`
zNnBb!!<`zp@JfYHc<JyA6531n=~%B+aO^oa6<)goI5=e=;=aa>8F20890ikzqh)L~
znjYSu8y}ncZTU-k2paQ)bz+z+@Ur5cbV*souuD$5<q*b?Qp&Q;x@#2|<|0m%nc867
zSCrS`2V*<lW6!iAi;77LgiFo4RT{&q?^W{cQ;rvd2mDtIy<UG&Z7sHT>bun1hPp!t
z<69la{=SCt^GEdPX=mkPX58p$XFk3v-7+7TE(76&={L6*E?ZT(MP1d)ED=QAF%y#4
zk2Y^vsE0t7%V%<tj)3&B6Rev6Sx=8Ty{5W0b&?4*<u1dt%K~ULYekfD&s5c>rs8r_
zso_xYj;cE8FW!ctQp-Foh>VSYi)dM2gIyHvMlsA-fMz<zAXgru!K#o#%zCeaVaa3A
z<*dD<HWgRbZi#^E%T;>9)S?z~pf4GB4PJ>N1|5Yn@}Q~$)}1hw)fL++xhXdBo!j&G
z`cZsNkPlB^Zt^r--Mr?!kXuyYPo}8W#Fz;dqKM0jXXT*DwG!dCtxA%tQAy^!j7$RC
zh0~k@vjn3<BElj0SMDp#oqO8rPIwr^LOpSY4fLVdtglrr^|jTN$?B6=<Fs}Ew=XXb
zv5V9hr_whF)mM}EoHqAqREYh9^}yw}3ufy8U(iC-!A{`b+THD;A-y0KXFXw1c-_fr
zPGjbu$6(_T0X$jm^Cb`$eDp2!Lf-J)$leaXw<tMxTrB7^#pTRJU>B8PZ}-=Fc3ye`
z8`nS(@Ij~O6NhgElQI;RB2a#8AYsa?WiTC@&oJUE0--@bKH@VR;)Lg$YYPdUvU;Ab
ze{HLXfH$44vs10OyKkC<TRZ++K2n;oEmB>tR2{MX*7pE_`Sh_#8K#nAZufZ6FP~#+
zayV~?eGBX<a#HSw=0Q9P&5DhTFs7O^k5Q}cxb@T3&GQsj&>qj~)hS;xzy~$pW_|1(
zap-`&Qy685fE~;<x|2vW^~`$d1nW*MC52rCYq?yJ0?miIiBRoWfK^9WN|N1H8eay>
z#*ZfJlWXZv<273QH5W@)GJXIF93Qe--^e6}m(VWmDCqDU?-Dy;qis}Z#rxK5<dTE4
z9LKr)s6!T9%r-*?JYoBfF{yCdkB8|6Q>5h`N;KLPkR?8C0z5JJhGJ2y&QMnLODtcl
zx^he%F6k<7b-Wp59*etdrnt*L!2h#2`&!+(^)Dd+KvF9J0QvuxGqyLNakOwUVpOAb
z`v2LCUh-J|CX8G1s`Ub<h^rUnWBJD#wAaSSTe3WBjJ!<BHnzFAFeMAAZ738-D%jf_
z`Fv;kq5vSy_t<T2Ha!_7KyumqAAp42#w@x%vnQ|1Fz&EoM7Qi_S=+Nh4?QtxZSCmB
zWRQNSuuY0v$4ea&uak695_k!Vi}6Yg?isLe)H+gV+p}Z(MKEK>EE(XC6D@=Zzr&Rs
zZZiP9RX4~E)7(Xl`^*}`nHnU8@RMZBeiwqm_~1OzJw~ENP>i7m6J}_%qImAf28tq@
zatO>KeSv)gGyr>m-H91~$nQA+=;foKv$v(Ic5JBw6`;Z4MrJ9~0TtFLKpp}CF!Kd!
zt<s$y&!^klI=mnt3(TvLu`jCF2g%b0zNuq{5DMRg$`?9YIf+gcylH;jc$Vz2DC%8f
zGUK*Czrcq<%rKZeIF&&;kZ;)33F2?&EO3oKKBV7djF9uuYjnE}xruQGi9i&++5Yig
z8{3tQ8@O!mHh&lc1hySs86ex^KNgO7S1(ZwARgEORfOnelM~aCQ5k_l@G)e}Fr@D&
z1&p2xnMo<+Mam7Ze<X7yzCORe&ManU0K8r^x}cK|nciyk5gBb8K|guWJDf}#LDM~0
z423MxGpI8#%gm$0j8jeafGl!lk?CdpP^V82R}05Yd16lTt^d%B5l5Uv-^a0mxb!{&
zHfAqAhxiED>N4cst2`V`wd!9p!=4EFgN}}G`=a>56!FYn;@uMHfEC%_yluVBxXs)h
zSV9na&B)cxOy_y|{mgQ4S-Ah3h;maS!>M)i^z`-entwfv;|BSot*7(dzcSECjtf>N
z(f@&wHRiycLGue{iL~;boD7~PW2ov9Nsp`$esaD56>^_0kyVYd28(l<U|{r~f`pop
z4T6|T0mB<GGsXq$MR<$WcW-GUOIiw)>-SDEg^7$J02!iTBB%?*3lvGkj1xyoG7wLd
z=so~#o!td{6_^G~W*KuA*I_Wr;vvQhG6$8S$=+quDIq_lK7jhdhhd2@q=)2IA8r&W
z9W4nK=$mOwsA>27=BY|n^+}XJ@B8t_``#$#6g}<Fhd7aHbH<1@6)^5&jz_5|ts7IT
zD@QZhtCqI`RcA^D7#r}4SKv8@3I6`UB4wEK>n0<%fQVOoLOLgTEYE$l0iG{Vov$Km
zBFaxhK$E8}pPnZx&ZM>?#YbkCGPwZK1_vCd+UwI(?%y%(J5}SA;?Mxwu?Fz&s6qtv
zm|+|H-S^<&Qs4m{sz)FYzfe7vqN#vz1NHI)PMg(@ueG2n(lrX-mO_Nb(%@&3q<l9+
z?X>aqQ4Sr|*vY$R!mx9Eu7L~R1I6I7i^5Y1jhI(9s86K`+|PmAj31ddHrU6WUyHOM
zg_}*%SSG4AxO0RPnD*9q$ghf}P=H+Zaf|ycMZ9mOdc(5v$_&bt_4&~zn0-n3rNbd0
zo>ZD6M2`f8v11giZndff!KbaL-9W)to{za%qj4v~gLvo9Zz1!Y;`PpBP6F?Q*2Q8T
z2Gc`*5{1MGe9wi&`H%52?+pOUSsAJ`zNyY-bF6zZmOV=s6b0P%!^ql0m961JpGaAC
zk&J*Z{^2VZmVIr(Zrz1f$OWXiz3O%6&5pwh0D=#)*z4OPi4_~V<BjG*;R4~z7Z||3
z0mvC;*{(GPK3;rdVwpZeL1Eu_jy&MN89>Na0~@Y?Exeg2o_dtwr+UC<#j}l%v}NIt
zjT0A9Q;k7pwawzNP$dL+u0-O{ho_|X16^gUI9;F&gO?!DfYZOo9Kd0qL>MGbFRnX#
zejbpUU>|$FB*SIzJ8X1w;W^FI)6ILnrmd;v-ju$5yB7L^q9?Gx>Eq*WP9H=-3i5Cl
zG^k)GjRxR`FI@WqYDk8{>i)-N#2BE^CHe#!3jDNy%G(ZU%50#eTL#hsTIZ#<!d84)
zCRNjK595o3{m%WGa>Av6O$TYS5|+m_S}xyf|EX+DJqORd&T5iYh=;Oh?d3ZGyFuHF
z>nXDX>!t30<z5|%g(lcWbDOYo-WCuCvbS)NrN?eP;1vMrZ$O6ViIqMWR0*T1FkCl1
zZ8uHZ^+UR7r5NWa8Xm|j|Kl!5&cRD6gO*9@rPu;~)5}PbL^Duz2S^oz;sjqabM}!H
z)w+FwJbz1%wmRX3;2X%DT<6>xY4G+3--^8gIxvpXE6r>r8nDW2cp<0<Wo8cwyJ5Fw
zC4{ePSAPO9GIfbCf?&wM`5qvp5PT0~4d5y`#p@2}FLz{sDFg-^+324gp|uneK&l~;
zcZNv(3SAlvn#LJ*hoN3U+kf;PvHgJQjSVjYM;J`nU-7jla_-l(;+Xsi-5`|$b-_8E
zlSNp)$_#{Ef-ia#OTc~5?{6SdiOI_KU~|s^$?As$(EvF{7e_?ObQ8(a8b@~kRceUp
zMjTq9yTSm-O=G6=XF|j00idcC%m}@#KB_u1YS@G(BtHl?nKb||kn?f8K|{}=vVB{y
zZHK&ig!9}nlv03}xrp&FToE0)C*ms6mMrD%m1)gt3aVEtFpfA`*ghy60<gtW>>LAg
z4>>KLdBc3LyRnej;4om)KVzsrZ(mb%c)NONbv)T-GvbB-p0WYVmqK9oIDshi75$6*
zNCU-4Nyq7Y;W9A0x?9iT*vMfHkHJo@bN&Wf&(bikV5ph`L*nJ^Pto2mps1Llf&&(S
z36jD*p!~v=h!(NwQs+z1ick_M`65s0uCDxt=PW3yXCSgXM3uy={fT+a64@PO3I@<T
zsL%fA$QI`m{9T?5#(M~O90~fg%F1ibr~aO^EehaG#*##I4auo_a=U)9B3Kn7SQ_sg
zh$USK%FTZq9KvT}iTC=2Wj1J}7F;I=K@2E|P0=PsnHZJYK@6@kdkyd0hYd*_|7F%0
z{&<L%N-TD_Lb##O(*R7MR^$&^-bO#B-?FIS)0plsIhsOJ2Vdvpc%<FZjYpQ=MmOaG
zJ|K2ik4n`DrLC@_$Q)p-_4Jn-dO27}u9g-X9{(FvoCrp8x)e#}WhCPGcj>kBFSIyV
zVsi547xOF9XB<r7Fqu-0!C5y|b0RT6+TU_`1X(eEa8RmO$<Cq38kTEV&aT*(fW|Qo
zB$g=`KaF@d?bm&g=YbdO8Gp>;<Mec&^6}1M>PkrwoIN`@t7d{5iGZvTQ8DMCFjTo)
zF6BO#okrzOKzgE*4xk-K5`|Sw@bv4qm!>x+d6KTIFR2XH*M*}+vAix+J47?^?K76<
zV*>Ayn*(LRAVQb)TrwqA1#k7l$g6x?5DjmQP?D=JLPAyMNe7#wKGnOpmXB;bGKX%l
zh!7D!HqxS<D|Xc@p#tH82OXYS#`Z!?A6uV_RDs-MCC-L=Zr8xJ>JO=av*gOk>6<u&
z+!!iNDq~;T(<Ex}q>v(gp158aSe7RH7D-Y_oA<YIozZTY>n}_;d@t@DRg2`}MRG+l
zG+7jB`JK1h67e|@e=sI>+X$2JZS>_L%y^N5wG?HewbuM#qB4rr_R=~d$}hF4FSOSj
z@W?Q`ynzmC9_D;VKE*)Ze+XGOd`y!{7eT`p_F%~nTYsfQtIDTo96@A5{fpb>pCKys
zW@=8NgxUhF>ez5%2!~xN^R>K_y2yxY3b3PM#C~dfPr|2NTE7)X*P`VFi1tJ;qEqML
z+nq#R3aDMyAZCS<h3Ma7R1YPpvZR2yX^5xfcoSzGDmf}CMVh*X;<&a2Dgv2Y-LcO|
z5;d)3N9%RyjLqResHr9?O_C|j6~@0Y7H~;1C6uC}1Gq;Pk{-UeCh^=Tf$3bcj=HA&
zCmz5nW7){sUEWXi(R*{)l1ic310B|VvCf=PF%GK`gF~u3(5PLFzTXc+In86jcP~I*
zO=wf`Y~m^}tYV2VGM7MU_%7DPMJ>Xd)FPZs3Fbv4_3I|$S3pQlB=Z6o^8$clYN_Ta
z1kE7x8+p@fMd#4mS7^pvFLoFhCRwH!8Kx$7Kc#*?p1v+ED>*c>pQR_Q+&{e!8@Yaq
zF=}fOJ7>IidleVSP4<Ev%&}s73&Y5BC9c>V)I8ADr!cL20GvN>#~psHWkg;lYHnY8
zU0L5lazPUhd9s;S@R{A;kcp5V&SI=wd265Tv8pXx%5$3wHD#pkZm@#I?1%z_+&jnB
ze)n`;WX!Q9oZ7zMcPndRYilD$(>%HFyGCN38%OVPTzRve+zpEE-W7Fs_WhhW?#@2-
zck=!H9@YvCckKP#aqhwdjTZ{RjZmK67)^H|f?R>_f$J6rV?oFd2_|X4mG0O2INYlk
zd#ufxZwf&g@6{D&Fm(+Npjj8GB3f%1fhvc|xMazwaaeLlk3}G6OB%YenEEDR5EqrQ
zil^s(3QK4E%Iv)AGh;rEw<C+KtneoReVDk@2Z3c(1uJ<-)@tq>7nF1w_2=80B56zK
zt|LHb9u*_&(@jN(w0zL?QJ%gFZO`UBk{eg7SRhqbHPf+2|3da{jj(*IM@3B>@Ie|p
zVX+NRcGVcvFW0^K_jn6dR})6IFB9F`r8qB4mn{%o*k&>s9G4~Ek4<<U*y3*D{GPU7
z^{y^{R<163IG6ptW1FdNxofnp%+=CxocLOFY?>lKnz)b#CuX>@y(NA;oNnG~V{h@c
z5x@V;46nk<`bo9ifZ6Q;nnnrCxib6uoxW`686Bj(xPafhlda}lJ?(74*?RHi<aw-o
zH9mX~Ep-aq;Qjk<pF>d%cC&zLY<~Ul9ndc$b&%*(K6`I-Jqxi;@w{|=^~ug)8(w*q
zaN1UFA?h4)Id;yHk^9M1Ps=7X0BB$E`n>$~Tt#=2h&eJbj@ckK4Cs*V6v1PRZ&j`W
z2|YoL#p<tNMZGy@r_DmevI{vBtwA|vkh}&&*Sh13tmaRqlJA1on#CVyA=eG0DbH^x
z6?~^S8q;9+lv5Q`9&nfe`sj2|YB$DQ-5JW703}f_J!|8h2F*lEp2ZCQRVNPA*Dj3{
zPsyTf!TwFW*0_lrsCO2%6(%x3S@G*J(3<ZrK!aPdFApF>rafFR#z>=S*&UFL(p7|x
zpd?;#F$ysr+IMB(Y1WL&F?^Uvkz?dDF`YZ+*|kgW@%+Msmo2aSDI%AT3haWmR<u_I
zb&Wl?P13Xh7E_&a&Rpjx>{y)0<yyCrMvUrkWn!DSna<*<B|2K_<ls6idMlaOnwM(d
zB1SuCC;%<IvTo!!Iz6jWGLxYj@vutt{A;FwFgbJcNAp~s8=bb#((?RMKnByTEk(E>
zT6>{bps;$LHzs4BTOzNN+39WF2h&Zp&MMx`*QbP7_XgW1$1!biE~m(F%#90MPuxH?
z*AB1OHC9;kk0zG9qn7PaBg?`iicut>s3*ypUaM0>RuMk~i1iNnYhcTxEAN`*_6iFW
z_R&Xd$On4zrB>>(-b+jBgAbahM~&Z~NX0G6#fVNtym4@MH7kV*<8>@vN}(?q@Puby
zU{;^^3jlSC8B%%Gm4<P)$mdTUKt1~;soFT69P{pI*B<zkv~k`9yY79xX4yN+gwOSE
z9iptyrz~OhcR!C9tN1hqH@Y5XI^c9()<Yv9*W;mKM!C%Zl2|<ZUyHBzlJ67@+tztp
zg6>GGK~C^0x$-*<PlbR0!Kiq64~fw95sNPQCL~)OMj$rQRr1<mZAFrm&VxD;Gc~PC
z+vpL^1BYYsMlrEgaJgZ6rr<7lE3^!XygUBP2p)Q5zFKQYPWWT&Hywv4w1&=knWiJb
z9aC4gEDbMJ2^W;wLWXWm3GA>g52X#$zixTQF;d%C_xGa~!>q^Q-ymwS3rn{z(1s17
z6G9rtT0%{MNG7jO@!VAr1blu*av^4vitb|Q8<&z&y=3Q-mFi?}iH5h}pq<%2YLKoR
zZ!CSWoZ0+f@vV5<_gmt7MP;Qcw}5SejG8l_v}1_G<@UH7rNZXRV-P)?|I+Y6GPOUm
zL0uP+pO4Wb0VE$%g8Ngg7g1zQ=*Zj&PXYOTjf8+4+a2xl4|TA>D~J$mO-i?}jIk^m
zb9~K&e2xIlv|Bns#GSM{fr`Bjc=nE8`S>oZUcxq9zSjav-N*JU6C7{;3`Kdt<Q}Yv
zA#zWNDa{1NTn5x53Y2+#M&I9ZOz+UZ_#OAbz(cR4kssf=vt}@`P3ii6aQFq(cstd+
zPJ_Y##z5%pW5|t;;AemiKom;SquW*Z7&4uSI)EH4Y#$wY>>Q9yeizi{(JzFCl}!YF
zPo;`YMb6o(Tnu@M0wiLFR|9*m(H8aVzFQF<_XhP*<9eF?>(u3C)gX<BmRa5h9bg|@
z7UcGWvwX$tdO=T1Lx(6Y!+G8Lj9x#f9w=Vx1&j4Q{daS>aCaP_=T1(qrTcHqa;z+*
z=*F{gjn-pzm`XJ#F)Zx0PT{@|7`{U9{uTn4bsQuxME)f%SooO+05AO=ha_Q-Y%SpH
ztHH2DZx?UU3Kz)H+D`&nJKUpM7(iA6RV(j)YqEiXWYb9Jb%c9FX-y}`@@y+NlEH4y
z;l2x@wd3WpisJURV>vy0cjLl(4X(<IQLrUk`7TOdl39q=6(B71Ubimog0Ts)2M{4V
z4eRP4cM$wk8Wt~7Zl@uZlptga2*l=r#X)}Sr#^EEM<!9of_VF@Q%`ai8f<g;?Ve)p
za%l2sLjEONPc@$x8B3Z~D5+VCMKNb^Oej9us>QnN@52?B5EI4eN9Ts_&m&I){j*9W
zx<$OZa=Jp+$bpeKnmvkIELpZ<I&qK!00~9jECq<Nr#Cm#U?n-pE6~sFGvV((LH&Yz
zEgrL(#D(z!6CE%vZcX=uNx?eePzr{avk!ro9od#BV$IQz@sOgzNSpDbWNc=)SnwZG
zDU+APL9~2pIuiUbth0@}lCmY{mauz<DQDK9Ud5mgWGTL^$;LAz=5;!@5EO;Al{Cyk
zGH(0qpVD*`1h42GCWC~dK&BWe1t%nxVnC@OgrDb;?<tG~C+A)jdpQ&kFY$-ET;yk8
z%tjn@Q!e`h(Rpi2ix(*L#8nBOcARJ@EVKm>!3|h=Cl;QH*d7D)3`=*4CjNr0Lln*u
zlsZIW@!q&SKA*F-xJU9}<GunGYzFb759`lpjHI2{L{g4s8N#CnDe3v<n0ZA}iVV5U
zl1qFkc(&b=Ls=W4uDy((-2UD#jhqIp=0iLESPL3AmEF0jn2mWHp9=TyfUDq*OlaES
zT<(Mu#PYp>fft{d8+~~~m0SWq!KrX*#(;kR!}zkCiG{^YPIL(I$}+KHAlLdvSaIb~
zp&sYb&O^3?<YXHZ_3a^bqCKYj7}pzF?M^FanhKw(Xc11G`{OAr!|aR`MbFpwYefMk
z_jX^z?lz8&{)veq^XF?j(af(H+YNR<QzQLKU@8Hc{TH5R!6!mqX_qa#*73U!Oh3)%
z^dvj9;3EDm3Tfrt=#TcLS=?ifC}jw<LL&|lpSRVwSmi+@Sm_qg!8>}m-SW*oG{c1%
zL?1(^N2gfO)N0XKipvL8=`wphU*AW}2EBj1n1O?6aYr166XYvLFO!Q%jk-VLCaJ2l
zdq#wFh@G+Im^5nR0_~0Qj^)*dCtejcq&l^8IS%-y<1Ny>nl@-cB{vP#Zt+^ReUQ2@
zBm}$^giqAP?&H)la%(}(l|uH{n%x;xq}<inhK-ZH&={|^#u&y*ZiqSx>#I=AE;p8+
z&W)qb1eo?4V6<$_SGNB2AfuLO^|e9e>=ZgHCC%=y)|68+l1i>`1zO%gq-p#7)Bdg^
zz(h*U*&?QMAyKswR@eC9H#@#>4OY^75$X(ry{Xwlrdo^|@kYIs8c}7|?O8B>l`Eak
zw3<mWZW%bkTaieD`;pf~h};Yh{^m06!B6kxx-^WsxQPT>!m52qzjZoNJ-eF>DnZP=
zQ5_|n_4rNVUyT+klH#E7-P4!%mXTCtoF-H!J4@k5===Y|)(d&ZANu<lnCJj}g`i+;
zM)6P<Dgwn?8kK$b(IZw$dU3gmQo-{lfw9+E4+KB4iUG1q&z!Pss;fl!+?MOI?-g+Q
z%m==G)rjDcLS8s3jv?iAtHXS+FQ9jZ6=1P)*|p%a+WAAIIR8ovp3GnOzEe^k#5s_K
z@60LCko!uM87>WU;lAw^j$BRUBx=65+0gbZeR#S+>$NFMMpv)tMFHQ-Zy`i3Y_)b(
zjA%+;ruiK1iw8Y|#uF2Mm6JT2J*aM-ib--fc`7PnDJ$^S@oRkVwxX&L>8VN~KbVTW
zWKCs_#+hU(9*$hR3teck9(~41`*s~sG~Ur2l+C9#ZZcHu_%HAE-Z*C0_%dLBuqZ9C
zV`8l+DSb<cqBR~-LNR`(c)R_|k$8h(@cVY;{>V-0O|eEM5lg4t8CLn)Em=m?g6!MD
zO7h&_{#N$4wAx@n_{I8$D1iJ~cMqZ%qZ3GgkJx|%?Xs4dH~a$zlbXZ|nEgk6)8*@>
zv&bD~j7w25v1Ti^Kwba-^VXfNDV7YE?hZ=W=Vc#KcRh@Meq}i;ZfeCJ?i<Ih1w9>0
z-4^g@e|U37Rpv3pY{}U?5#j{>JIArrxd5wF;889A4s%^q%KHU~*L%L5;iQG}Mz!_b
zuvM+zYR6v>wy~l|!m)Glg^kdbsOLe`zm*g61y<JUUpFV)i+J}!2uaUUBf}0z=pa}B
zZA)1R3)M+!*^zl4Ci<*rzouM+_1KLmWqtwyihuqe!2k#jA@YI*f@J@AreGvQs8IS)
z(NKD@;6Q?C!~$aoWb@z7Pma+Kf;bFg02TAwA&f%lMS>xP(glcw(gFK}2__K?#u1)>
zV_X9FC;wgqhb{~L2pEOS_bS=_=avAdF--9HVR`@F%K~|_rx<%P{h=(rR6lPhI>};?
z+#2#wUVL@;=gr2ub&^ek@eUfdjbRt9y%w4CmU){j(`UhHqAyxBYTX#DEYy;2e%8u#
zlbL)P6wuQ~L)Vz|s&tJTA+1*zdDEe2&5OjfCLkTgEY)%;(*?=@F@kc@V8~MCU}gkS
z*P}FDfLck5Tx<Hzd+2>v{GDj)uG$0`>o#HOJ<;@eN6}=oBBY%PUjTusesKWK<hOG1
zKb|#SK@xiH&8c=Q5WB%UO#;u#g0{Q8beuT5BjwrVobEEhdme95>C=j$=K6X&baU_e
z@PUh2nLyP&^kCP7ffpkiXvds>*z3A&$t!=zp%Qm(5q1MRks=(CM3@9RMx$p}P<#Oc
zmoyBMu*5|laH~mN<w)#cV;7zG4IWG=^!6O&;SyAe#KC455#=^Iw>KR$BJk86JYeRg
zC>*kojf^MF%Q9RV6C!M0T-F*6_2w-WeQB!~6RI0YToDrred<F9`z4+g7{-#F^zwuA
z?n&ZQE#@-heCKl@1dN5{zx7e>bUq54aNa;nBhI1$yl)Lny)_?ba6D8Af%>V84=C>%
zVCtkHRxHmD3!zb7ai92>qIKsj)rEV$QSUocb@=;x?su;DVuH|9^`W(7#?U(r7@h^{
z*jnM1WTf@W$R=pA1OM=Kg{iHL^Y@bo5wLthta^&HFvHC<9BS5htsJ9N9^80NkRqU6
z9}qey^~sXw4Y1QqF_3;<+R|Hw1{S;j<(!W9bx2RT#*t6c!yL&GRi9{-7=di|3FKgp
z#nhpurgE9XnK4*-LWhFPfa+?d0|oYA;qSBNs3_$DxSzOsct#aipqqKp8F@tGqei?e
z&9>*UId%YORJR*Y<f^xL71}G#bya5vPiS^}y?mY0a$xo#zO-nmJ{eLXg;l}=$rY({
zXIwJscmr^_>XZwD-DZBfJAW=5=+J(MzJcric?Q!-Jqf3rbi`3E(y*ziJfikg+_l)K
zo_uyUfHiit+J(QS`p4`0bns<0vpD)s?_uT9jfxjpo>X!MBsn6J3DBgFn&aQj50x%k
z&s*J+WmiXAH9TbcV&`;Hweo6w7_7)~_w$D05E$0AhV^hrzT?SuQFn-YCA_Cnvs30{
ze>T_%#Oh^XMs-n~i}|N-QS0BwYb0NA2EF>U#w*tNot;h7qGI2Ze~;Sd;3*1z1WyBW
z08eR(ervaEXdhVLq>4XndvSr{-sl^ltWxfE>itRMk^v<7*H>QaR3zB6p?WLt`gf8X
zsU|QJeN*64?wT6?2XQz6bIosSfR20QjBxpJ1hx0}{+ni-yH@fxL)W_;&d1Zcu!yj_
z!czQ;sQ9WP?7oQ7bpV(B7)1&By$}vm5gLCf1H4giKy1Y952<d&2cm>YoKtBs8;*#)
z(I(*j1|kmobE7R0)FmiW%Y>WKP_!gpxo!$ny8>ur4HCxCBF!1MkK+_VI?D<lSX>q+
zZyC)`{gnE1qc&64B{acj%FoY>GZXWTg%58Y*b6Sme%pe@PX($M&xsIbQn%s=SZ_jM
z0cY8V4S7s<RAVs<&WDGu6m!g1NiZiO%9xC7-88kN1J1Vy6-5a%uO(|t8vCgf*+xOb
zCNLuyrkWC0xS+jpC^G!JcJF5t8vRR1YT+%R^3mW`-jz3ijF(tmFKR{~id%Sk7-$Nj
z;0{a;x-Ve0`wrfpcLFfsZ$Izp!}<ZFSdCcFU9P3coR0?eyVy$rSr!zQYh@67LlUZ_
z5j)+_!25v6L=TOJMGlS6{GNJ?cK;+;S^K~Y;R@CN$dNz48P(HaMf>o~t){_^tP582
z)-U4_6?=t<kEN49XwKjH;~{*u;)3EnYT!@!x;KU&mBsDeC{W7zpd43x9M8JfT$rPn
z&b}Yb5D(IOxt?rhm`p2J)J|%Yb!p^PY1C$GyhLlvcx&`nYwT!i{77r$achiFYs_G4
z%)n@zpm^6}e+rof;j*G1g5kTT2}?1KQeiD&#;hhP$lA}t+|Tw&1bxbFE8d0_A%7m`
zhED`tSREw4R|w>1`{E$Z@Zr@o4O7_wN?8rgV>UDmQ&$T}SuGNV(G=j9gD5E@2qU0^
zAPR#DfG7wc2>iF9?B_Cfh{CBt-;U(w!V3_`$bA;SAb*g0!F|gy4kohLD&ksd9{OrM
zqLZI6GJ`rZ76$|ok{S}M1Dt!xpMY0DJfq5ZP(TB*qYxY*E#_ijp#`F45=`Xvrt(?Q
za2rl$t$A&}{&)%=<O}A1$u#ll#F$7Vw<;+LUiE<HS$znbe|Cpyz=VV(nVESEbqWa>
z7>bYva~NeC0cT=1nWh=fO9C7+r(A96e`5>~Eh~XZ6N+;HMI;X9IHD<L2@CxVc~eO$
zCrX|x5ixKS?#%+)ZW;=-m`o-^xS@zMRHYr|I-)6VO<qa(R@%0jC#9);WbeQQ(-pI)
zpdxEg+!kDr^1z9pIQmC?y-3M#Nwid|3dM-H#zZ#P+#2sU1wnhHFgXs2SlksNoN>>o
zC^7CO(QJ)++hvQXlb2#mK|%BzWcoJ<$A5x!5!<#vyv9+@HM6Dp>16alRF%QR3CA<)
zBat|P%&?oyJ=MjtBr#GNQki5k^Ozpy_Famlp^^M#mZ(}7=1{CF{bI4MJF-i*y2oh2
zova+k_H65`9hr*Ak&0IH4P*bEAsOw#p=<hnbx!8d?OC%)??aw|Z{B#^8aoGlw(UIp
zw%WCuH_B&C+!v1DhQ#@K>Gj8LBd=|xyMOB$xRAk<+BSC3KW>JR)2RDl>r5`}A??>=
zm(Gu4V<^rpHs8byJ<9lob?a5h*ZtYi%^iyG8QgL|dD*vTTY2J%cInD?fGH2XcE&X<
z?BQ)<VIgQv?~O9+W*>NLZ~y6KgeyIglV@NgTF))FtL^>a{Mpip>9w4$puiYM`tkG3
zj!o_s@$gmTneBgSVP>>Jjocsr0Jzcr51;}AYkPBp{|l&KO5MtCgB|UQ+Q9Eu!)Ti&
zSWhxCW}H~cwU)6q4Pc?fOo0}()*o-PUPu)|DZ$~uH))sWB=OJM3hm<$bqhIm;>$hn
zv`_rv9^P8rq9r@(Tl|TYs(s3P*rk?+b+S5XXiWd@r!k7?$tA(wWzFu}*B6af*<s`i
zOecj5VG3?t7PHBXMUd%D`?2NJ3Gfd>qU})hN#=}3#!S0mDG{*?@pCpBJmqlE0iY4z
zSfa^Y=+S(gqEk3S#H=-e;`Hl6G<s-6_LQ+|G2ygXHV;&i`dUh|<S_MgMt0_(Nru%Z
zSYiX|Xw~JbxE<f0=kE_snF&RKRc-U4!6s%w!%oBczLvpsK|Q#zxVSiANbn|Ea7CIh
z+nKt1llXM%r|N^1o&mn_w@#$t+iV%OOVT{MRjv%%eL2S|-C>b}L$;_X{nSB=VMNd=
zz50+%APgiZ^vVEOebN&WY;;cj2=7Cy8X#7>gC;mpoH9;P2i`Jg_n(E%u+9}WyK5`n
zsbg$vrvy3-c~9xKeQV%Rsy5KaFW6FQNl+^k<4F#P3e!v{XjAyq9`&?Pre=z0?coeu
zIA1n=f>T<vB6DY6)0-Q+bhL@=1{`-2)(~N^Eh~1g;vT55GP3~%_UP$wa9k`PG{)(|
zIeI8DBZLw30f*Nojx4AF-aA++k8b7&((HuFS3J6aU{-6`Yyi*_szli}Y~j!pCg8Rh
z;~81$3}BRsDJJ`=N@uh;3CcQLtEol`R=8E2kfY?2M&hU?GMy|LRWUR2MLvNZ;Z@Ue
zDdB)as|<%lc)}s2DPT$X(Yi?U+Vla7sL!NP!-0hus!;X=EdYZ_-Je^~=ejJmot!ud
zRz5g+OG5)9x$mLT!0>eJ*->29!ZRI%wnPv9=$To{!^LNa=ZVt@MImamQ9N>t*Y5;s
z8HLOXK{Pd96Yx&I*X!#6A^Y3EggDx7XhH*}Z^Tp!5~NNKn|z8xPXgGu+8$w-wRU89
zwl~||rgX}PuVM@egi;w2P!dvc5xgYt<!QVmp0bY%x}LUY1g8hSp5l*;zyld3_?--V
zp~zwtgQCDmUq!;R^o0hLL@;8uDWPS|(Q1EUESORM<jj$mH9KKqsGD~;cvlSG_QN6X
zf37>OFOB{kzj8Eo!ASfqD^*`qMNVx}Nfu})75PRqnRuE=OBy>I=R=9&(5o8*In&^k
zAypqWvxso^#JI37e?>YJxF6>$_TDI6KQb+th}3Pk{R-HV1M_2M)1{sBs7%;bET9W$
zkUnC5;!Jn}cZf86p8f<pcaECJ(0kYAjN{P(Av=gV>0p26vElWigzI-Ll?#HCi3>XI
zV&Z`oJ#g(H4_rvdGIf**L=U-vZBX~S?=Q2*4vnIRk-$<#hguTW8b%L@toOH+I%+ti
zeq?Zhi)J9Sv(n>%rB;k<Aj`)qBZpZoxS6tl#1O*-XM^Y6Jl>uXqHjBr0|Mw@o53YP
z-4uGqBf8t)Ke;6e)*W;zoLfHKyl(EggX%`6QXfAvbA-5eR!ArdB$lZzu1FGg4?GI)
z*nOZYw<}DDa4kv6)*`w`NSs5^?7J<KrlOMIO%XD3H-1rfX;)GU<T|rAlBcRG4QfY(
zlmI*vfpS|EW+r1%5Yuc92V}=#)`!T3n1HI10_xNtoxvuv31eEaEd%G*{E!c)H7wdS
zUm~|Ik1$69U)s0~rCZL;c3r9O$9zY5W;OhE(OWPO;sTnoW3;r#vKar$VYC#KU90D8
zxh^KgZ)jOASA+<cObAT~Zm1{c^0}qAzpG2QaOer4b<U=7Zr{)zDq8uHlp>^z9>`Ij
zy_RLD0#c(iJ$f0?p$P4AIW=6yyY*T9aM+Q8VJwx279I2T)`qUflB1MI#97p|@T*AQ
z6V)$jT|o5({^XVa*t-d-13&j^`d)fJ4J$ZsYReH@*1w1hsZ3p=PFixMt6sF91F{wg
zt1(t!FbFy&<)eks)@ecHC*9>26TM^^{i0p9@!EH<Ww?66Wn-&6=Rdo#^^vIxVJSYW
zW^XkNTe4k%%p(7~!PMOt`;J*wV`=TS{G`LwCF>=evGMo%$kI?*+sD}sZRzEn;rc|l
zYT=9j_={3i(6a&aBK)LWl+?Py{6g;t<Qch0aYkW5=25BfvfE~&t~IYyv8C-K=(R2g
z+UtAk3Db(vQC*Ov6tlH~W1=NMHYnSt%gX-7^Hu6#@PUp0=B$?>IVN@t7y1wL9CPbT
zEd`RxW}U+Fqj8GwV%Roqd%E{0s^%-NDQ!KbW9C}KZE0Nd>*2X)<8n*G%G$pY*<fWV
z*J$0NE~~B@oWjM!3+|EmFKaG(wIC89C&$86+ViFbfO(Le9QqIZhMVQaz4&;Z%pDUN
zZ-;F73Plc&IVOypdMQ*_(cS&FZPF7v?RjUnjJ&66DYt5~fl|kwTPFVXMH;O<h##zp
zrqFV(nilNX)I%Xh&t-ED#oAw6j4lK`Imh>{F-*e-F{fs_bJJ(tgpS8#ORm0ifAvNc
zHsI)?InpE+Wep(}9Khlfm(AKIH#$V+N62kV3Nw=g3GUIO%t{eWgVwP2e<<Ww*h9^I
z41oY|Q%*w>CHc}rlMJ1}n>FUGhFr=9I~psrvVIIhBoSxAk=+8iwmH1dAwm<6B?^aR
zBA7GzIduBs_gD-U{01iubG%ysWIRLbzC+!EphRMB{x-BK^oPY!RX!r?aV1MBPz1MI
zoed}XBxqe$XF2TN0<lYU=jcLdfmd1U)9Y-_IW2aUnXcQ5OGf{EE2+$VYW9sh4`$qS
ze>_Qp-EP5tYh&Bi>)39UP%6@go{?#Nkp4+T5yN%hF_vYWBcJnipLqv)yU2%G9m<g+
z@6e(6)Yb3s)qHADveb5q>Ady)KMW=bHWEfMVE_O-89)H)|4rum->jin{uc)ACHJq?
zcep06q@B<3qCCd<pSYx>N}1$EDM!w9n{Amao|*MZfw-h*7$HVt!x1S*&lkWdNqaH5
zhVP-n^<q-}7ztVwC>kBmUeS!Y8)C>7!%Ii3+ZYg;b7kBr6JHzLn==}d(83ez=eiM{
zDclE#eb>Q((6iL39=qx!9NOI^d=VU%z0Nb0Z1`%e>|t<P>{bOYkaXClW7lZ?T7P3s
z{16n98n>Yf_GW@VR}7rd&ojEUtuE6{+!~=HfDHEmVwU}i!SuXiV7fz`#y7Wp`<Vt@
z=l)%^y%aT4n2F~k-U#V`0dzo%zW|#69$W(^xJE$2b@=16=SRoSld;HOgn-QEQ5^E|
zBIZ6!51ARmv{@Vn(SEmkb#>M8VFOX*cKmSK6?3|BFP&LDcdJ!^A3eYip!p-@aqM_(
ze9aC#`<ngYyVvF`|B`)e20`e5tB~@PP5c~#VR|6s)FI)`eR~0$=245y{43|u30urw
zm~JA7L`I2xOwY!n@aw;SdGYfP2R|Jra1pZ|0I|6@Wx%1UnG-tf8rUsa&0)QN0V$J3
z2-Jjt!*<|-8?nf7h><0H{15G?YlYWA>`%>k)a^VJ7Xi<~V!DXLVHU^o8Jr!{LjlJ=
zTMqZm_xkO*@5P<K1s0ky^Mjbr`QNZv%d}=r8}DGhW*nQ=D?niR3omxUxno9)(1`?x
zqs2J%;oNvI%><^vj_id6j0N$9PT-mr;ur@f{0vZp&IC9I$2XD(kcUN5<SKy~f@0Aj
z7u0ypA`VSAj|6rSfLuekGRGij)Q?3Bs{{7$j?O{+=gu-XN8IO@??o}}$w4mv2<l<m
zoX&f;1;K~Nf-NIX$93k82W0pYI%Mins8+BEP)CAs>=x)!ZhpHvHSsXu{!uH(fPUct
zZMZ2|4={{9B(G!PIpq@$^MIbHlNVo4i0{C**-yV6{@FeFe)mt<s15W0{s_-(x)(Uv
z9Jx0!C3g~;qN3n}A=r)?2+6UzMVnuE$=T%|u#UNoH$|+p6BOut;l><xNn99`U2>Qg
zz_aNBcaCg8qjiDglD;h>c4@i`r^UdafVwz>Cf6~+L;?a5s)ol0IhZFi@T0g5k`mkL
zbbuGNiECbh$zdZF&G;mKQmp~^kk)L3Pgp&J`w#1$cDfDrh9!_AmOOnz8b49)-@y`B
z+}rDqv?okn>1+k#i8ntpqxoCZiL1SSm%V+Pp{Et$X|3CM0_ZdxnRn}*-ILSq>FHVH
z<S+W$taV`tn}?&C{-j!GwWVvu&S<Ch2FBh=MW8XzgdLJ>dm^D&0}S)ZoKB|;|ImfO
z>fOy42!YMP@xXC>45Ice#9N#M8$c_?e*W!6Yv(OH-KqWc=jjgqB@nnw`2u5t1E)JM
zZTI-a_b_R+3%>vfa`0vC`O)uho;`cV+JBg>_9bgutnIU|?Ob-f1vt?5l9^HD%t50<
zW!QN7h5oWysUTy2IQmV20TUkKxvifV?XS*GJ0}|aX*N*W)k+QYU<tym*Yu|&qhs_y
z8t()ppNVH*d?7`QS9t+@$U%}S(tL3I)4OcA0pQgNgP)gp&tNA+B0(Gh?5*h1wcF4&
zFQ;qn!XZ@X!h40N-&1-7AwnSvr07N&A&St{ZPx4G?EhuCrZ;_ic=-EIjbzJjJG)~O
zT`8<49@I~IuqG^7&v9XX&1x_QmC;~LR_k?jP3ve+DvwyNqqm>-I-1_XOAW7eO(hoQ
zJskmnlqkkDF`7@XPQtniTRW&%Yhf_j`8>4w4k898@Y~_fM?bLLFlbe4COwP9Gja$D
zgozMiF?(4GF-8cFAgpo-k03OJ7?uNQ2(XwV#8(7?JAr`~9CvZU?PUWWXlNOYzXomK
z$_@vswcJ6!1|&i-<6<lVQ*aWP^LFa_q>}<;Z9Z;E%M0GXmarWC9k_tG>3I~Kf|(zm
zXlH1MYv`u!<ylL@j!$$NKLH||^nf|B)v4B8pLVEgp!KyG7dN`N(dnj#H=Hi}czHpW
z1H7CQ_;^Xz1U(MW=+w}sjlTZ+{QUe$wG%tbxLWPNZzuFBKmP(j>+#_^H+zO<2Is%P
zqp9nU-Ac(BfXUZ^Q}(2F`t4-lk>hLaRXe83r(R{RUo8RMhx6)RR%&lRH1F(|{3{0G
z1O=_nLvvZJ#7-1fPHSIg02kihmChle!>}N%!gj>gI%03av*5voqfF>lHrE{1KM#4(
zXdzea6$~)#VjhS^`b)V?vKt-tm8~vzVOL((g?0I6u(v;KysYC60R3`4AAp=)-?Z76
z;FJ@eUabU+XjVZfWtTyEsT<j4FT3n#mxF4x;yKd_p7b2gbiG=EK%mk#h8j`PLXg&w
z_NoCblSK@{B{N<0PW9n#9UeE0M$;JVHHVE1D;-dXLSrAG#WLXRKoo6VGx`D>K!CRv
zfyIl%?;x)-rw&jC!4$Z+<F+~VAl%?qYP>;d&d;sct0;ce0WgF-_UDjY97Fh1{{wW;
zzls{5LlNXlXzwBnjUlqb7;oo_Ls+!~N{jP?*>wZ~oy+FV+z+ow?;yppV)q(yg4YY+
zGRLQ+hM=b%NZ{aP5JH?U7$D+P2-_h_x`J32=!aAW4ycz!!DuBWW;pjF5p02TM+6XV
z1`ymuGYX6$8b5yi!|xsT9fT{0hFzKNt0XkFeKz%dn?ZsEOrYsLY5{E=!Z^n=At!|_
zhfNnIgpjf0$O!S0yRJ#0eCWU-n(;Wo*%%`ts4dnSI};QW%*WN{<}1iJ%{e{++PUZX
z76y_)JO+Ffh{y2^Y4W&8vG%pE_LKuuPa*K=M1eSE$-yQt3zS4c;qwbq>LrqNj@wuC
zC>uPtfsSgmFuE^~EmDy#a>rH67Tm9j1v-b^voh`166G<Mtzk}IkjcRbDu;eHqNN1d
zv2R}|$aG^^2b)fq452R&NP(3gA5w2ds2DQzrlZy%TT`h>FQ^+}m*MXC#jihp|9oWZ
z?hbZ`PY}@n-2xnVR0xJ>b`b7pBtg4<f{Gx`acz)yY{@JR@@Y7sIH73K&`iBHD;mjF
zm?lzSP5kJEzv)jpQ{Pjj>dI7O-Cw~Zqu<tbW7QUc3ZvhoqYNR~D`rk&beMway))q7
zkI!gNc@Cy#Xio?bjAArfOmIvS7FXI`)X@+uuVqH~ZU@|Zx)<64f%Qwq43g5L2l~Op
z-gK=6<ruV4uoW0hn3TC{olZ{|Y6=umLJ>h8ho%=2Lwq1i)}x|818{LRQ7yI&su6&0
zIIqRvAQQ1zjBJ740)ckM*RfO4mV003Hs7ZiJ=#2&lX~qHBy6=;Ungfy-)r~bzB%e+
zw7Hg=goh>6=mlzeEh9&P)_SS$?ZU!Mt<i)-^HQ9+5-LgT>5_(|yktqEu;idslz6hF
ze#4S_Zpoe`qh!fmVaYEc6jIR{>5|3`OB&T}#hjbmOBd+fuz(QuySy+(Z0eHMfJO=*
zDPOQ8?-A^6CBBt>OJ%8^(h|9DCB;(lY$uEW%}hpa8*KecY3xa_9<i$#zVGGn;|Np~
z+%$$Dp)-ZZ1;fQW0=<YpF8~-t0Ao9m=8*J?NKhsGP~oeV4fG@(cT#sr+FJhfS3p)c
zFjxU8<3T|T%HG$kQ_6$9D2hl18B_Wxm-50XPBF46gHn0+R;Fw#i+3xgRRZbhtkmBv
z`%Wuw8j7&!fu%$ROKM{gRK1oOSra}2l14~QwX>>>xFE*{SdX3s_{PZ7Fo~u2jtPiK
zkq=~P)yfjqt?^ckiyU~Q$)Sr@?Sh6bMw&zoNMTVl3=8*lg_g%~92egeBxE5OCc-H}
z*=k%&g@=d<r|-l#a|g2jWVQ{nA#<*#>*%zON9*A7CK{Y%5qxCx$byL4kxA%K*&qO0
zBEA5;`4#je7OdAU8nj#3Y_pk!zIqgwC6F+@uabaxQmz6P5hSgyj5BasG(+y^0{7E2
z=|W+kU=OmOgnFFbYU_J4EW1bp-ix+=wz5HG8~dwr%a&F5qsVQ;eo8r)t&ZYf72t&s
zASMD7P}VN+t$-uAEr9%3)*2Q8I4@@jnNjUxG$L>o`Skupq*2$2Yg<HA)_^@)Gt-+o
zkk(ySS7dZ2aoouNLdsDhgMvtfdeP$&O4hHK&vBGRiiC)~e-VhR7xMRs3z^86$Jue`
z4bpc|_w2a)3q0!TNvDzhBo%04%2Y@N>?Ju<toRv&y*9di5hp_mRGLHOG639Pu*{k7
zzA_?{fel{n&OT1N*~jTy`MBG9u!Iuae52H1=_?S5Z_rXEl?5Q#6r<=)25Z8NY|4s{
z>lc08V6%@Kq_b9hT)*fv`x|{+(MhFFX1(|0XVo&dRq$Hb`-r@GD)=#eR^nomr_DGs
z)rxb=Yi^mVqj?|D(G8W|%JoZJ#3moe@fBQ|7o-Pw_k+?Jt}(oV#TRFa$Rt7$Rovex
zD*IaN7WtjrVrI>=gHyJvO!_GTaaSgd+c;9%+QYiiEj;NR1S-AAmLk2`&)&|lu24;(
za+%ls2p%~TD+jTTQ}0|7t<!5K3$TRj*}pz3ymS?|Q<^LJYM2ay8PGd6KMa8oGZ4K(
zL1HiIJV_%;<pW_1qQy981K@tY5{<`FC3vP1X%<kgh4Kl#W5ts&it%^b6AG4EF=f6W
znK$*bHSDn+t0D=seJAp;VsB0+*n&np5OpRbw@UO0;R$BIskYs6VPwn|af&$cCa?uG
zsgmuC_T&XBkhh+9h!fd^EGKg?5^Vn_4)((!$58A^+m}j-*Nj?E+Tvwv=uAQ<nyEIn
zz;U>jCof_6-yqu9nS<Lk!)ta44D!Qmq?6~nC_9|ibZKRfxzs+VdKo1ujJQ&N%1Qx<
zKxTn>+wRjuPOp>)$(WXn_2pR4$i{kd%;;xhh8z>7g2rT`Txn-ZjF*`Pa9N>{)xdze
z{&eAhBM6<i+QG23v_jfxmsM0TD0=heO?7_FzC9S#MeVmGs=kdUG<+n6do*lw9L@((
zYE`zsytyvhGpeP)`zvpVm4a-pD7t?`@m0j>+H$Dr+E5l-$t)EH>8Q>e>lK+0?7wP$
z_tTFC{sNPG;fM;)GOfjy6m0KZPfa!!guWDHo(<8=1+sfd9a?CY2bv#KbrfIpB6K7V
zh|ppDWu&Fo-Y!9MFM-U}TH91)tyb<?Z2(NqJ?tNpy>e7QorLDx5oQjpoXbtw`Ukoj
zhfP5kPNn`bpHVFkUvOew3C&vssu-ioJZmv?P8Z}eJi5f0b!@~;`t2H7^BET3kU3ay
zy-JF;5P_QWF`q6dqpMPhe9A4Xlkzx%><?}_?Bw|}4oxOj15~nPE4mMT2w+1hg(7aO
zxzUDz0&370JdVV!lWo9!ba2#@N|mOnd`s^-G1g&#ZlDy4#?%<c#M+RM3Sr@VJe-7_
z(o>qB6n1P_%%A6K{8UC3Rh`Zm6}zdx*)!C-ypdEj6)nSqi?$N&s#>81p$zghP+gWV
z$+^?<je>L2jnfjZPUy&EWGn)_Ia<alEdX8Y5g;};ja`7*9b%tABiA1ROUjCFYF2W@
z$lM=~6fKz3ihC1MsAUTmp-J2p+*<1699ydS4eY1y754gy^;h~T#O!fiDkXJu2~l3b
z))MIvlv=??<5N;OSBKTwxjMdO^?b{<%a`3(TTT@JFT8EgNT($ga!?MpB8Dgz@Jv_E
zOQr}n|G(tt(FLvd^hK|m`1-<lRl4dtZ@@>JW8U`X9uFYr@?u4y@{s$9HyX5r_jn{+
z(3Ke}&SgzslDXW_m()t?<g2X`<}&Mf5a|*uDcB5{9PkDHB;PAu{_ZZCg*nP|Ek+-%
zI|AV2U{vG9AWH3%NLY1;K8a-NE&3#e!+f7a8a8ZdlhD_<NvOi2S7OAIqD1cBK9L1U
zt(BI7fBGrZehQASo_V3b%0ECq1^@8<6#T>YQ}FlQPr*Oceu|=eAFQ9ED8=pjDOQA`
zR1Wxk`ziQM{S<uLeu@>5=8)X4pW-&^o+|;B@Tb`4P{M&?KSenY3SzjapJELU@}jt9
zKLx*iKL!6^@29{psip5VWif?ZF?uB#H;rW)oxB)igH=#W+wRhwA>T)sNmL<U+sc(q
zxpE=0zg3gQL0KUyEnVT$vNjDQYp>r-%S&;ZaM^@YKij6Hh1l2Cw9+tYQwPUUZXqp?
zJE;#0clEV3x*XA(O0<gWD8&Ww;bz*XsDNuHvnYMu9oD7%L_ufNmto^>UyvqVCa+c*
z5J#&H>}}+?jWSDnRQk(&{!T+%_IhOEZx443l}|_?BxJa@kneiNl}h`fDD5L<DOn-h
z$V2T+%(+!-22N;U(uj0d$}50{Q?r>pdd8l+9HR}~(9be;zlj&gdAcPpU>YXN8+oB^
z&kHTpC~Z4d-1cC+?{hJH@MH1bPDNsA?t3n7X=XMb6I}JQ)-%!qR}(Fns0T?y^r>5&
ze@sqla#AOzwAXwT>m!RUX^`Uu;^h*)Bw~1GWnuP6@v8-iDLoX~Hgj5E&9%7|eWo0g
z?_wd?qyHWh2Y2gnyG>8qN~Uq=JfqmtR-S2Xk!RdCi@2$$jo-efjo-efjepubZJRsS
zgjU9>3S<`YhG?Fz7}k6Bs;L2gS+m-Ks$8nmxT(WM-CUg0?>M+kuCPN&z0-QIq+wIb
z*Oq=BCrE2SQxIcQw%R>>M6hk{aZ@AKy)u*4M1;D|ie^;~ZrNeCJ}g+>sB|p3BVV?|
zPa=ic;2<S^cZnO;oz=~81I}oxr}bmyGWQ6kHsmbpPSnPn1t;8moIX;XbC2lieH*%u
zm+)+z*ldyZ-I&^>rtSZy75fBDSZyvl2nq&GzL@*K_UzV)(!EXFW)*)Q`I2G+lMMLg
ze&{sLD1|CZ!LWrTdzCH%<E*_IbPS_$>_gN`5+KptZ7$`}pgyZ3C1B0!j6s{|x$;9h
z669w8Eu?mViQC^!=!@3ei-ZLdAMh-ZHU1s76@#NhvDj!Lq!MF~F6%_Ef&O#sInKq}
zx{(R2k+yVsYi4~Oe$~S7Cjm7k_FD9shP=n8S!Dqamgv4IL4@7W;;R-In9C3EiPnS1
zo*zGER}PyxF>8Bt5(HcIr12{80!XUbii5^19qT7!y=-idwuvXCV9RHCEix?TxRJv|
zmu$$XAJ$y%;0eHV2t_D*Ws^@-(I=1;`3pL!2f0)pt67C)Vb-o<O-7okJtXU4BWvDP
z_zPs@I$W^tE^UG@hPgDPw%+b3K?mv->{y9J^lT6}qRzr*b;xFAtdgH*WYdhZ6jaYZ
z6I;^T9cG|CHPlaih@5O>lMOjptl1*cL##VU&|U_bpoCG?|0c7MsYq6sR4oMh7VRK6
z*u%k|984X0DA<olsb|TrB&7}g<c6_#t1N97{al6CtWLYo$3`>Xy{rBoHf=vxU(2P>
z?W}{fE{}2?uKC_t9JUC=lpt$AyOscs6I|-I)o9UOYS|J{o`hQa1-1m8r!kg%h^-7z
zliG;AY02l<D%tng*vzDFQ;zZTxR*TQ@;geyY9#>+u0mEt9CiF36&HB!;;=!AKMtr7
z-a`FHR>&^-1FgJ!{y-Pwh8XY3ad6IHH%u@HCKq`1zJM6epYd|1k$gHWJ0j_q(S)F~
z&U<mcq1#>n>?ejg>8ii~H_RTg*Pe)64&H0Cy<kMH+y1^C_IBE0U;H*&u3(ODqyFi#
zU+J>{$er$BQ*P1g4tC*ut5$ckeGk;^F4tV`b<c?Tlv~{u@;`2;I})<e=bjr(yWDf5
z_v>-buUfX?e%ks1a-r7STvyEf4aPAU3D>;FZ&QnpA2ziL_V(CJ{BK(M|7O7o*bDLX
z=*Y1W-E9slU&JQ{8IiM_V0(r{Oz+-dpr5QHc!DFtN{WuiNh$@5i6;82VFc18mh|kW
z{YZYuryM_sExY5TMHk)wqEaFCI_XqR+L&N0B_HDa;W7dD5^y5}_eg_9;R8=MOIt$!
z+upZ!w{0Yeex}a-5je6lqX*~^AV5)alx#NfWW1Yka^fVr_awRsACQd<Mbadd(7AK&
zZ@*oS?yhb$NKlq+CmWw*NdWp$U0q#WRb5@xc9G_^G}J9+`Xa*RrDB^{#!7MG3&h3F
z!k_*ymBjf`8as%^lP5$PlL5+%I92pQ+}IFD?5yVChI%)*J;+w`K3w)-a<04W!IB={
z@L(xW$c5gVJbGD<$Hg@CMN5wE`%QO2Duv+|X5i&raI9B1<WvvI0?wFc4Gwk4`q%Ag
zTgj*p)pYTC^%C<C+$h24hw|bGemur7sfQFpUOV7}&*346`RJq%g2SXxUopu3XmoRp
zLIzY+|4d7q^<cGpOhCNx$Zqp*ptRBf>e9Q{A1LMZHgyL|zr9^O=r7r+-r$F9=e`KO
z=KTzQ$am_4VA`d9fG2HKe(*!DF)RdkGdKw5?Jx{}IBC>B!MVL}g0V@z0AF`wIf89-
zp9I(D{s^Y}zNnx2HmHwH^`ZSN_?_Ag*QIu=^{7thJ(SO#_f*!tqvzhO_yg7deejoE
z`NS@3zUi85x^}AdZo?OM<#Ek<R#U#xga<TPvu^oacx6+bww(uU;~U#}f(z3&KDLej
z)bp23{KK|g$9vvC{z7eZ-hjs>w^%#r4m8$nFrV25oaX@?_6*Jle<#{o6qN_KOhhq(
z9+u~Av?(gB;?Q220X0Zpn^`Sd;@-@K5_YeyAh&=nS00}KWiW@)3QK}HF+68Of{x5{
zO{uR2b0tWFD2z!<&im15uq>>8W13a~bZ`*bBRlIK_g(uMTE{JjtGR&jFY3uC`&v=5
zjdR4LfjJf96M5Ztpk=y#En9ByKP>kztj;B2FR^ufK*T|j5;{q5!O&XV{n5a`UDVNj
z4fbn9N@{6O)J4-{s$~2CumOE)P5{A~tMMri-KV+(;ZQ&=IXwo?=CPnYY!}^B0E6Rs
zZjhWOJS4#iAg~e%R^nnMF<9ZR$1AMq0V;Y<Xv7hbHgx#2KmKlT{JJCldfdFrj^oH+
zpTUnH!Bcm_N2Q3IxV}c{&xBCuQXUc~%awPOs$ZWmY#PZw6OwT-Sp~~ojb$<Tgq;)2
zS2g5p3zpsSB*tMx;5n<IGw18^#!g#?RwCmL=8rKCke-9;j+l+)A~<10tuCezz^;#}
z&V}<;0i9Pd6^XUt&1-g1C07TLfd!jGUuhk|^4H@gFj;=}vt5e45L4NmoPGS|LHs2b
z&Q}F%Zv+0|eBDD}?jx`PCH8^{)S&bX0yhBVQKH>f1R_uFi4qaOyp9t2s{;CDGbLK4
z&8X}(phe=Ouuo!`%?fHyp!ckfHu>wZgfcMS_svXE9O7eQ5&u(gRuAJRL5!Oyi#-$W
zFXY|Up}BR@$+rgx%EU4Ta#;JJAEIjWqVJSF^|l5Mcv;;XC@S@4QLOi;C}zDprSzof
zn1!e?eRK8WRaJbl0$W&&s*~0#i{XyMH+27$a+~IXqRr#5AXnjG+eATjtJDjYdGf7<
z!63`qD4ErHy_!*bi>u)#d?!+4h+Q~bZ7U}Xvboa8j9RB-!B?^gbj}X32_2yN{g5J!
zgRO=lFg-|4PC%mHv*7s#a_43_bBmT#+3L-$1%Z0a{b8BAVb9-&(0Whn#fXw|v_D@I
z5FxG@Bm3QthU)Rx4dMbXqX7AB6MXMZTIl(Jrv~uGQpAbhMpq1;E_oz9imFX6rBc?|
zV&BO^LIp___aah=O9yu^P>2=ZT%6b{EyR&ac+Jf{HEP$+;(=7Mj3iPchBV@APX8!M
zxPweDJQ+Y>w!57#HWvxpZUft})QXG%6EtMKJ<;HvbRZ!aG~2@U99i<;B+cHQhgA$A
z8+cW2!7n8>s9|ADadL7-4~+QXXs}qkK0Mb>&+Hog{QThGK1B~`aOJ6l6>mij%ZpHc
z<p%MWdWTM&lxm>G#`L5|0j;?LcFhp%IWwklxMHocdhcow7_`NQB~nLo=N{eFdt!xc
zM=3HoSB3pDf7HVu3bHi3vgT+FqFC~5V<x$iQARBQKYy-usPw43_~@e~`d7sGq!_8a
zuAydX;b(4|YbU1maYFUInm}>_=;sX8zqrefKkjvf@yh~l!8%Ui&pD(*UX5NlLKTe%
z{q*3Ea}5Z!3KU5bi)dvx9(Jh2nZYlry@)4jbS3OZ4k8UK$B7FK&<ZWj=XM$#Ey~Pm
z>DR@PKsCMebaUf1VQSO7r8V;wajS{3%^kwx7!F<f*CQWY=>^en#=ASuc(-oGwFvM&
z%y`zh&5WBpv$M;Dr`Fi#O}V|1WK39GM{S#iDCsWKw&|qUc4kz>L7a<ifWgb@rQ(Aj
zy;FQX`#tcF_WQ&@+CC?~X9i-#>AU73Z9#SKCl~2>v;HopJ-Gkg9~WuYvyoe@*vPV)
z_PuN!e+mnswZ7|8@BAq&yz3c%Lt!B-_TNrgxLfhSMi21}OOC9tJ8N;182u?2ys=;)
z)&6@H3;y*x6AErOIsQVeS!dp+8`?4PTK@mKy9@dMm`ztNX4l2ywYX;omto>)9|D84
zhp*f4dp{aXUd$Hd>gDyLJ*bHHa;L?ws_+VPPnFZ<yi{$#%@@8tQ-Imzx?C<*qf5F~
z`*gZ0Cb24`nt1+l@H+b9rdZ6TarFIUFpmCnF<4G#zr@j##kib~qOX2i-7NkYNB=Rn
zE|#ijIk{4>#H#N1<#aZF8GSLE4<?TuJ<?_%ykEzbU#6Ptj&q%UT;i`~S%3SzdWlS2
zKQdT4tAtw7F*A%uC0yROcIW92wU%!VpQ#Ph#_p|+K%;fs(dL>^8x<ROIW1S^V1iAN
zsax9DY*Y3YIq7b4fR~fmZ0_oAmCr_ZTM0i>24%TYWCXyBZWfDTx^jT22?Bzw>srKD
z;ddV_PW8LgzO#W?y5eP`UuNQEs$b^frHR?n6E98BmJ{(Z7nVAToQd2UFZr23I!JI7
z)rZ1#^xX}xnspFjx_q$c>%fxT)Y{}I_~o=CTogDuo8-?^^YO=r{rH0dV&J$lS%hb>
z5YYy;s7O&#+~yPJZ3v~IAbhfh%zik$JWg6<X3aJoG9*(>pT6D+6k@V|+YmV}0ZbA*
zhx>QSa$FE@baGS%>r^&<S_f8Qhuqx`SJDw9kyAwM-Xti9b)s0kFA2C3CwFhssf8>t
zkY$@7i-=$p!kldpf-ba|qnB!iClK?K2at%hq5*P3ge6HWK&b&JZ-A=Q34t)yEr_1d
z+Mc?mr(T1ex?)x9p1Mv?-P)cq)6+?Vo-)BIbWfSnQ?^%GOm_D%%h(CyMm#0jxU7TF
z<bp?OXmSUde2;@$5jQ|NTW|x*o2XB|ChhHI2$+ncg>WII+g*wd$~$&NKvOMe$NL1L
z6BGo&bauHKl#@M|`=jH5<^G1X_}rh~dEB2~dfcC0dfcC0dfcC0dfcC0dfY!Khbqn=
z>GK}c-1^5dI2PvoVdfy%xaHJ=*%$1aaOE*?czISs*ZnXf=eNKs#5s~k8TPgqI})C=
zCE`gM`~f~CZ;6fHBUk>D-M%Y!t7HWeFi{H&umI)y3-I5K9JY=*Q;Y7AbyFtH{4dOc
z?}O(;hZy_?iVPRU;Gfa#2BmV6?lt<hF)pj$HbM;X&_4uI4+z$^oLL7S@-|cSYDBF8
zFoDifgK4w^4O#~S{lw*XE?aV0hr7JpCFm{_mmtLxX0H-cD!1pe-^=XD;qb%>JxrLi
zG?k7>w!*xk7$P?4xZx}RP{*clB|T2>rxr<$IvC|i3VPsDmpqLv>Ikq`oL#|5Z>#75
z$^v!#bp=raRl#B$-OPU-V2D;~Ol@Qq>E>k;Tcn$pX>5^hUUp-Pbn`NcEz-@)Jhn)$
z)oCdf71**?E+<+MCmIIL3T~_!FE$Luoblqw+==09??LpnqLB7zHXWB3y)eqw(am%*
zn}ELbK%0@+nlU$_7}sPin(tSfhbX>HC>qhG5I3RnX90oG#Ki@}m1kdpSC|nQUqpkU
zB9=XSE!PCZeZ|Q@FxZhp%@qBJ)cb)~c)*3{ivq(1L%_V@VD!)SYSxC|5HD|14ZwRh
zQFZP3MOa<?QpDA@FKYwqYP2W4J@K&)+iwO!rS~%@2D{ko6*5}XBmdPke`V$`;Br$(
zIFyfF_c3!H^F2MaNypfv3D?>r?eKWZk&_TdPD32I>vCklbuccjU>p8fkl;m$DGK|s
zp#}r;=*p3&kyWLpj$l>YYM%@0b3v>MBIVLH0E9hQE+a&Ra};$mtVGG%z6!J%wdHOW
z>V;%<K_>C29gJi~fqVVn-ZuUg7}GK3IvMY6m@V(amN;8pX+^Co1wBM5J&8?b_5F+`
z!~HXeaXa2W{7E70H>WoUOoxlP0O~7%n>ZZa2MbxeKZw96`s)p`W<{y9s&Ul@pS_E4
zuGrUI26JucSgs<Y{r{Yxt_63lL>>wV3UOC4ysMgC^(O#;!PRu|xxX$6(3k?LEu$*^
zL@x*Pc`@aX%NPw7Qc}<61*N2pVe`3JQl|OYd_G&OZl>i5?=FngBu$r)ocYmPiSLS_
z-*14|ht&wLy4PxmR{_u6$9Q!hd9xs|as=--$}2GhKg_H9*2H;rU%y$PSFht>pOsLr
ze@1$>2YA~fy&^_!oL7U!L?6C7u|iGS!j8^uN3?K#Gr1hTzD(Serr%Q2<5xE=<8&c%
z58kxI9So6h@TO(2R8@1+ci?am+zdcbFg3EitdV&&Fm$M`qj%A)A9vRMvHCIWsUKNK
z{pg4vz+KtNM_=dBf}L(VA!rW04sk|2AP1~*GcbM?M0l`DS2yRr&UBSS<BNn(JY&EY
zetd{r1Ll+jKs#Ne2#MIf`i%|W8#v3Qj|-c{&<o}ZYw!IDgO9fw%?5foovrr_JJgug
z@o}9{ylbh<`@wkEZgAY{$_Ol<>)F-_x`MYNw3wHsx_{}BoP|RA`|*Tp$MEil0N>6k
z%k-!dTpO6(q~=3tY2b&hTpXC8q`Ex7QBR~5@j>UE`@IWmjBwTkHI{mXtAg~`taD+~
zlRdjGBS?TkxkW@~5k0wP=lEqXxhX1nG_*dWcnd5IMBj^nl0P@*&<K>SB-B8D1*I^D
z#o3+cINajf(sEE+ZvW5FckU{Q1@-1=O$xEI#TcB$9vBUZ1{6@9Xc($KD?DQ|&S3(K
z+4X!<tRTp>f?Gj4U6lyZqv*Xzps|a3MU?#3^()h@mir|f@3mg#Kz`QpH7hdfF9`;P
zJDAhAs%>f3<m+4hdk^z>rE^ufuj%>hKC~-Pt=i0!l;$+Mx@z+U_rDDBR9n4HdM!S7
z85%BhoMtVISfQ5o&6HQURi`#+Q}`?I@rMPy?q#jjH6ETFC!Ut2l`NxBiG<innB1yw
zF)mr-(uo#4VX}dc<%lHjkxZhu>KdseBpsl168NBvq#k}Y*?GO9Qm5^E6N9^PbWpDF
zU`cP;hoXjSOsE*VwZxFeHcgc|fp80==$ZBp9u94`$fRq}4{>){MwquPIyeSoMYH*;
zye@ykZRt?^@8`$5HxP4M#%`VW&iaQxX~`Dy)Z^Yd7&}{&7I%}_f(6-ZM@H?k5gL+i
zZ1Zx8qfWi%43^SNmhu)MmQwp!lsj$d<S{6RQsy?$C@HC3OlQwA9rmeT*JT{3PxuoA
z@))stc)k}!(SdbvXLt9}TD!Z)n9eT7WOcE1iyy4_O=ii};vD;==jY#k^Yrs4=jqW=
ze$>bGb~)_-`{c<T!L;mS!Dr`O_QUKk-EEoOOvXw)Sb^X)7(pV8QprD1Bj9ll`bkGj
z7D|B~`j>dW%|BC98xCwP9xjpA{pM4memhB0?KcF$l38k<PX;5h6oY)jN0=+k{uDhv
z{S1d>C=v-$(DWgtn?X$YqziiG^5xCdn6_vjO(szE(orNj0?ReZOP)!EO*o$Q!Tp{h
z3BB1qBz7br+7U8_uQ`h>$cmjukGh!Y1ffMiSojvg2Nb*a9{6)EhcH*F)>x?7N?4ey
zeYki<FLO%~HhpcB#2shw8C%3)@Jc*Acvzly9zQHU(qx(R+L?MjKF<Pab1eiKhXDw@
z1iDc-P8|q3@lQ&bRvjOA4v!UG{X_w{15ko;W4lbXEw9>T>UEjNnK$FQ%VbNJiPL3Q
zn=`6icD*i7;+|)w(_N-px=i<)POWFu(;alTbkGfDIHmYhc=l7S`0NKgu7+k6f^&SB
z{x;2iqq%N6uZ?CgI6aLf1He!MxP`H;_|i`Y$dfdKeE{m<1P;BFg1B6jlL=YjUzAJS
zsGJs(Y72>1B&`-nn@z0KOt;z$ppflwsUci`(Pda}wd@(V4QR?Lg#wt!D}}<i@a9C|
zpr)@HT(}eCH<MfBWCmOAMEO-xTO|+9ZMRaT>74lahpkC9G1bgwxXy~$<rRKe*kXBV
zHCAk1w^y3cu=DJ2ZZ3rOlt^}zc|nha3$K!;(5-mg>Kxe^WlGEvp_7h=<n{}tk|S|j
zmaGqHizB@a-H2eUkwdNY$hl*yMP9hVXm5#r5OD0o+TCjHOrP{2q@dvh?vkOZv=5=2
z_E9rKzekiB@h9^8t8=Bu%`o}5ZO=yWLLsy-<yEbRvKA^5Xgdc&Y8Y$BWeJ|Ca{yoW
zy(f`Bb%xmS8bK*(TrNk0#h7k6&DM_Jy_p`joy2RWW2>f>IdZGA@|Ozw8Il(sOZ9C3
zwJw@%>3QjNo7irRSG}2Bw_ANh2;_VjFH8-!E!{nx_ET=(;5et*(rMkZpyN3rp)DOt
z9Ro`x1%Z8k=Fe$v>8W}p&0k?`lj0?o*|mcsqT2wS`X!gOIO?WTZNr+wsm9*)nzQ|+
zp=Cys1or`~zz~zv5IGB_F{Rfm6p?>k`qye&$t5NNt0b?d?p$IcurU0piB~nPUl_S0
z`TVF~OOlpwGpCg3rhAKpplG&R*K4=35VkCUZro07W8}=rN*u4CnA`@f*PvV;<PmD_
zWsqYxa!9h?0Yi5eNp*SDX60EFpm0Zqsa7rn_C3~wbtHop{Tr_D`^*~`%XT8L>TrTU
z#CiGUOrI&X(_DJ-leAeVjY7R|!%8AuvRo=%dR$DG;D|MvO;?NA<WR^6SykiZ)n|&Z
z?z}+&d;{^XQz;Y{gl{GODO5;_s@hjG@y}~UNKGA$JzxCus-(W4l~=_-uS!My%Y5-K
zuMz*8Y0E;=U*^k`*{!6%>(03n085jt3TfZJ1L-dThYfo!_j(bs4|7mhOcE<BmKTj=
zEl>V*x4F!dENLYxw$_%L1&MgatLo+%-UV|{@`Uy*BXy-EcN1_nM{zw5T1cH1QqzLD
zFIWkYL04=nW~c5}=t+{$N8<ER-DZ8Je;WbW6M-Aa%MAqN_glcdTOsvML}f>Aa0T8P
z0XHnlhIf5uTMJ}JkYCOkNv`FEPmUX9VU6J(gj~}@$5{q;rgs#5lj@qEH5P~i;%|Th
z%&J0hx4MRBzNkFgRaD-fS^hy}=!&!)l&PDq({0+|PLlN-%g{Qx0yHG=H{VK*hBG~}
zL^KP+E6QHLp4E)50W}k%p_DxXwA@>Y<Bf&*+sWg`<)x!#AK~+2vNT+Kw_o)QDvi0m
zak`p|fK}$gq5B%0P~1IQoCuFh@T--qG%hP5lXpdkum9ytLhO`6?9e@gV6;FevZagf
z9HX}JQ@?s6ks9sC`kFBOK5v`x=e^2}dwom|eh)j|XT0XygMcy3+h~w|i}F7DWpV*=
zk<h%8R~gsxHX)(p8bY)=*I3z=!1oDw)b_n7=oan&y}S5vzs$<9^)oxLC&+a646c&@
z{_OI*FTZ;BMRbG?)mUV}MV3@V4Ma_@EjTa*hq|q`D2SaNp<@7*nsTYpI@sLQG&k);
z(K()gKW>EzcK8q+ydci;jQlYj;IAUQ)$nq_w~Lf`_Di`e!8Kv{I_mGWbg}ub3y3I(
z=l5j{K?rft$`EvL7*977DLuib9sHVf@N1In>-P!0Pw9P^-|OTCkk5eHO)@Hx*T=Lo
zo~Src>rLLLTq59c%3to%<y1HM=gqqJ&C~Q9dwcG7oldQ~_1nKrr+cklrxWnJiQDJ>
z`Fl#x-|am*grwrv>Ap2yo$l*5^Xc?D4)$5ON7wotU!+TVEffT<i*X6QJR)8tIg3^!
zS>DIpyy}e_|GJg*hBKx;arw%ApW5#qc-O5Aw|~X98GFF~CRYRXhDE-rfxA&g*4lJ6
z>W^GaXtP>*Ynz>ywIVUEWI%Ri5)HoAtSh~K(XaQ9=OAn(s~QhsEw!OnFhA^xa1j3d
zJbGD<$Hg@GNlSv>hb@sJywYcTA-XtwQ<iAh;;S3-E`(6jXUrG}hdQwI>-Mxg7>}bu
z$w;qPFQMQN;=<~9+>bGIz#)ZK*Pe*8D`-JU>*%cr63V1dUoo7(XmoRp(hO8o|4d7f
z5=?>dEgusQcQQK2F-`w_{6FXa8UOF{|CIkH{J(QS;n)z!o&V`JZd0G&*u5@|<2LnZ
z+`H7HzM9w3IA;24-c7dCkZ5X~l_zr8UY5vb7Z|d}s3CZ_mnB#?mm@fv_M7SHXaL{l
zas*p_8G@@xU$h)I_myufL$HLu6CB-5B&az<xOy-6jhYR;CvGF(Q(5~?bEZ4tR3b$q
zSvqxwM#mh&R+j;qg|J{HM`Ji=VZhQlaIKRadm?A0Mk|dBDyMc>gzt5*wrGrTYO4d_
zE-|#dqw$%5#<Bd777#1pO8rRSM?dp|DA*qqIc&`xh-gOL!t*-rNK?Q3kk)<3>OS=B
zhwAXoT1It-TcRr^E_>Dcb?qj#FebG?CK5`%mF^$#n6M4<Ub;Y=K0I(ws9Ss<A3A}1
zK*m{!P<)ExrS!bTx=qR#w5o8hC<f!#m1uSRn6M7ak15N7{MdD@z+~IbDwgjsb=Mv{
zlN*_}5%<~bA4u6y`K(VeopZ*%J;)SkjPb+=qc^)Lj*rh*ob7eyoRw9N98Yb#sn@QK
z$Lyb5YQi7EVkuJfV=z=du3$a&;YZT1h9U`^Qkt__$Ink&jhtT7V6R=L*EA3S1$)h$
zUUfJG-Jd>p_m4rbY92V9wN>@GyHhpes=dmItgNbID9Zywyu}7pPpa-E`e-l-t(?U7
ztE{+K<T@UpJk>Qvg8kT@UFjvJznu!MMc-gcu1)&$fynx^*(YN!M2&sazbrK-+Lyaq
zL$e}JvZdL+!RwG?l?Ujcqr0k5pHK3gCd5}q^7(e+>$u>Cm)NOUVyCcWb?b<|SE1OU
zPq6_X0;j(o_GiY2(S^Eo<2$L4xp6#5L$sRuw3>RO?^<Ycxky632OB)qnXtPa@pc7a
zXWqBWcmQ>4XcDO{y$I2hpvg>^YCx0uJ<?=D8redVhGqgZVrX(uG^df2XI08il({8D
zFI|hrq35>Y`$bug7@qvxo8Vkbe$V^X!xU?kY3+N{+P(0}v0F!uUH{@l?$ZlXRc;#&
z(aS*6ORwP$YU#zyXJ9H4Mi_;d51~KPnde+W%~}k(H#q?>C#>y)om1`JMGa#zC`{{c
zn+BHpi8rGsVz&F<x4v2GOg6lH?R=PlI~eP?Smmk+NxHFItYaP}x8|>3U*O>u`gTp~
z&LlVt?|3a|VCF3kSF(BFAeEX8AeBByg4M&x{NdymF1V?ocLp~X;N}8cTxBLqdFU3B
zafx+C<vTxCZqRi10{-U$#J-?fgisJ)Uv4{&S1KGz37MaD&BB-IF>Ax#rWAw5ed))C
zZRk$tmhs)Q909G*Af3vWr|3nj#QRe{fW&h&bl5=>a337Cl8_s4D+xILskfQ)mLp3i
zx$`!cioVtH;az%ENi#}Oq&fLQKyqZ0yp3Eal|*qC<VJd!U0tCYm`v_P?oQUz6;1?0
zQS!m6P!y3ui}|3#wL1<`zF)DU;MJ;jTB&13MIxDSR(0+R_Hms33zHAUl0B_KnEbw7
z_LRHFQ5l`~PQC3xCnD0@gGk_`g>m=(qUZZ8b{6Jbj?m=R-R|!kk}IyPT#;{A?A#u=
zyGc8{v3Jq4-lH?qTt;le{yk64@)XZvM?0Gpk5f<l&_6CUZ$xK+Vi>%aCfrD~EjSvE
zx658Gq$aN!8|HL69!_#uB|M{0YJQxPpWbi{t|w+SIHEu<b`yD#-wE-~t4NxOIO~nw
zBwUu_F;SmGvl}OP27KbOYR#m<MCG`L4h;)RjE@4aYd-;|$B#l@-kM`OOqbKJxGa}l
zQbQLyT3LuW=ONzQ3$f;t5NEEW1#xpS*D++$42T87v=+k(3*5qunHe`@lsHFcfjR1H
zU%;E|g5pL9CND2C=!}m#y($Oe3FLhY+93Nu8zhf^4&z66CC{>9S-Ui=0%>X+iB7!Y
z>>U+3f=OQst@47OHU5x!J{FnM64$b9b#GHt<Yq|Xu3xt6mNgDvibZFB*~~3#uYYvo
z+%KEEWvx4WChginL9k^_`b5P7PyDhcZdn$cB&u&?dDXP1v2Ud=QW;J!+`K?KTagHl
ziBloOF}?E|)F*OE4U&D6JE1e_R^Mih5nj6r!@*3cookz&%8-ktNJ1~<E0#nJyP!Pf
z#w@rN8MrB(I(`D{{Y;p?!*>MS_+li&bH;Vf?@fd*GPWlsW4oK>oX9+r1v#C1*Dd(K
z_0+bR>{TfzAAvqfsS=4>Puu7D)*Opw3L+j)Lbyq+EuHa2+%$3nc*8z^ipNfP6cyUX
z#a3-*E13D+Ha#*;pVUcEu<}zm%N?74J@eW%BTFtA(_&=Fg+>7T_XH>h8x19@NBng>
zLRVXjxJ$7S*@6%aNQpqUCZ`bgLKKztL!_sm?}bs~5U=UqMM>TZP${-qi;=`n^`%f^
zh<zJQwh^FSIU$^QiwBi;AQM&UVX2vQRzo)Z+mp>n>XD6Uvld5PKgHS*16ke)-TbVW
z>2E=<!Gh$LWn8o1I$@;OEVm}K)$i2MYtji&cfVgliAkpx&6&RqDKzJnJavu%N4T8M
z=Kc*Ci@|OD)ojJpA-@4oz=v$!yJ&cGbyY0xCTX4V9D5M`!{)lN{<z>G7f1VWHL5*)
z-G<-$YO{GUTa>Gp*N^s~B3=ua7Qd>(D-8c!PM7miwE_Nc>{M4oN-(}ImrK>?lAQXV
zPFKZ5$+xdn6VG1`UPoWtD1meuN8eAB@co~Q!E!qLC61mf#!ByszWQx-v-oEm{m0<C
zSgNAs<VwL3tGeHp)7kiC^u=sGn1IZ}9wBta%w)=Tyh3#R%Ftz&s^e%dIl)=LyrL!d
zs;e_iwYU|obvGT#Hml}lrC6Gg&7;N+=_a?UxeGU1w`7V|HWZmAjpM(z7gcGADN*Ut
zQK!yd1zWb3san4l$RisT-W(jM&MC^LC-Hi@979sCTf`*WbMuE@^JO?kalPi-aE{_i
zFTMPsgb<yznr`*8ePGNp$7U|7?qwRKmtLk(dg)~vHGIJh>uU0S`jk|s6j#!X8l}xD
zyTbZV#d%SW>q3|SBVhyd^7OI^a4J19hE_AL1|4t=fKFn>p|<}`<q`RClL64lp(xID
zY|UExpOb0PKaB8?hc=o23UiFP+5G3^`ZnhTksvxJwYn1m%0ElA#zFQ}ak-4%tl^iO
zg2)gawQiq#*|Fsv)(kiYC+KB4E)3}#?B)J-@W$3iFG0Aq1#LDea@~`<Yv^X+b>1a>
zw!yYOdPIYu-n!ia6=Ps5&T6)q1@-EZy1rf$UNYzA>9@IU&a1pvyNkG)wn26DlP}lj
z3m5DHkrGJJyncr{n!|jsVi1%$w}VX5*Zn<{pvNn#`MJf1@KH&CP5P%J4OpT*!q|Qo
z;_$-V&O#hs_%@D09A3ENNyvN1dQQ?R_tZStF2>qp3c+|bAIjJ;*v>{_&Sb(IY#Xm)
zX0kIMG70Ki5Mx~FK+)_5Z^f`-*fWb8V|VrJB5K6QqA=GQ{4SEqH(*@aADQ?spKAz)
zeE+OW-`@3hDA+;7sf9k@7)+xTsDW^?{Ax1$^%EL8T^c@>4;s__lsHe7$h6`qbDnbf
zg!k<llbFAGk~6ycf&u_!&HMT0dal%0h$tAQDc_nNrn1Ng{7j^LhGT1|c5PYvvY_O5
zMWGV4fzUBq)mcN`h#kZK{PQW&afKt4#j~RWMR}5f^0Sl+-%JM-<x?^f28BGQ^mK?b
z4jH-29B#<yU*>E>1`abv8y2VHWW(ZAoc&mw`YIda#CUJOg$Q7kqnpK|n64bv*gYiX
z!CFQ86An=j)}7sJp8l0gyzc2=;Jg!~(%ysUYbS(E9A)e1X1bV7;85~`Hqk7|hygf4
z>&$qqvxXe{he4J}1@8qL8-NhBtQJ2asikt{H6kU`zNUmS$bG#)Kb}QJRg(u&uQ<3R
zj>uWei%O9J7uk~a{g$zT?C9%)1KAQHI*@%?8y?7P6iIJSe%*xn3Pg>8sP<2RB&Jrb
z<9=vqWxgOFi|T7K&P#n+#(BwCW;7-AjWZmg5yX?qZeY1>65_ULh}(8uZYx+$hgQX*
z7?&d?2u75cq9i%=V+UY#f#^G2Dm66(m+Dq~Tu_flyH;eBk|Irv!P99q1CwMv!6mEs
zPxy+z&6LS(qMWh`^WkbZi655Z_2D^ZVLCABhl;UDKLoqV>3IJzI*T4e{{`iA4ny_t
zz~n6|tQ8oZ@TOp-YJ4{>*IWUPr<ELg4j_aQ7FALcRU#vqOY~~3UcwHR+dJ~+RqgF~
zwbW!e4oT8MlxUd%ud~@VY|o^aA_c}M!#q~{UK@p10YWcyWHksNP~a|IXd8qok#Gr!
z_A(G^qJBY!Z}tZL?bjAY@3k>zuqoB`r1imQ!jIH<H{nNTce2R9eaWIr1|k>@Rx3zT
zX2T5dn=KgB#m-DJ<CxF!e@2R?&n7^E2{^~(1{xeZ?3tox+7E%zK44V#`3?LO5;!)+
zE38W{6Y81T^fH9;8l!IZs<8RN8w>_$JJ%SJl*hT<EZvzLv72HtnB1_BzI^`V@0Y{k
zMLE3`?{Ue~>cSuiF-A#vIapjziY2CZn?XUfoh>0o)`RFNXbFE+;?3e_36{iVaXp+s
z-m4kJfr*y$VpLw0BPHFaC8QcWYafV=;pi0r?t%#z7}5;7SLlR0#ZE9D_h>T#o9xIq
zCnVDPfU%%ddzjN2;&+6TvvEA4q=%(&H^$s!Fq9!~-`8rxhBLEQH*n}h((Jf}gyW`f
zdHWg2FkKkZ8Z2N0zLGA?6trPb!Udb<6@zgbxNXdDKd}@A27ec+!~noenZ$OC@_y^=
zVtyL&7N&(R4<9?2GFgq<Iy5{ILMRFObv1$2J)|C!KvcWDm(*jMyS$gwW1G87!@=hp
zOdAW=#6(@&3%xrFr6;(@Yy=-rNVSd02yB`9Tm-gEH5GwCz?M`5wv}oo0>708nF#zU
z4Kfk<Rqiemfy^$z<3w?7mkb5hHV?r8NTz5ep-coi6;+=;#1Ap(TS&Oj#HT|=QDVxa
zwin=bUrfiBju2qvG?_wHixwdSFlqO)J={|v>cnI=ebG|eZ>;!VqMy?^jU)9#RalP7
z-&*^^59J@^JW`G*%^n6>WD(~>>KoPPb-#Dn%i`#>Z~ph!-+uMQr~h~ktpB6Ie7>0d
z_-`|ClUz<7%@!{{-bYZ?PVwZwKYQ}^w@<%%cKP|!=U;#I{3-mcq?hR!M3Mvh`I{%7
zef7=f(a}PQ5g5o-$vc$peD6W4_1Ra?zJ2oF-$qA}T%=g9VrcEtZ$JC{lW#7~w{Z!k
zSLE)fwcz4Z?ODH9Y*0s{1w3M797}fZAvC}NV=D@VDyP&YrDB!W^UH5mlkdyL>Si$c
zZVDD8o6h%=hqg&j7R7A*)n#e^9G7<xl@<TIdL`m*AnB2?oTN&(;nA}s!iIl-+5Y$&
zoiH~AKPpjn7${rnhE-9Vg;+;!gQxb#Pp=0rihoxEDwP5+EM1JGB`WrJLdxfZ)j&r9
zu`9TPF=Ry%vl1~1Tdda?-fq*`hdCf^G#Lzwi3qu^?Wl4HAJtSs!yiR#zFZbBopaz#
z;3XTtV<n>zTpyqN#U(`Z+5B=*yjbd)&C{(jyR@^l0sQp-z{dlvDn>~!fYqUE7zM$G
z|Kwgc{3ir(yv+0!-{jOCJmmm}!CPx&|G=EC(t)AH5XHQtsK4_W+DZ1bAW^}#>6=y5
z%qSf!*Vi^#X^dNF_e~4hkFjm_5gUdO!xhpy6Rr@$8uB|G)=)rX!XIX~4{Hz`uHz)j
zEarrX$xftotsKtdq}SP2+^FS=+H=5Fd1G<smPndz1ID>1l8l{Wj408zt=qP3+qP}n
zwr$(CZQHiF+wR_N>+PG|<mLQ2H>p)wRjK+{Sy?s4oZoO;wjDjuO=Q^y<HjJPe)1%n
z1c%p>BIDu~omR>NJKY}8!osNpO?&#-j>=veuX>wgOQCv$F~zduMw5AGruvX&%%UCJ
zvJ7iipY40s?5-s73~QsPZJ(=y^LXWDF&g(uF#oRpy9#k7KNgQ_<IIpsr*FBAbDqB_
zTIS3{P+$fgjV_7f`+D6^_xo~EuCK%Q`B^^C_xmvUk18nbiD`N-1j#zcJ2v)n?L28m
z16JqpwNA_!sPdE&ZPs<Z$I<hF+%mHrI=3jq-MRsym$n^dnf@v5nqB-k&je6O@n!;f
za6es|)c*sP6wRTxY-o>ZV7((}g!!%Jdl?y;@tiA9ei%S@%bEY-=yG@cPZH!g7N`|B
z91O>J$}5CFD*80xr8*7Z9FXShrOZPQ27QYe?rcL9PdVlVClvi&GJ^h2&Ft?wtylSF
z&B^Xx`=Ce3x}ztcw(d%1!Yor-khh9;MmSz8e#bZsB4v?KZhr%HLm$TjS49=pz%<lJ
zGh*~J&UEr(g+{Boq1R@=a8#yTEZ3*mp)L)8ct&|E(ms<vKpO<d_5NEgJiF$*W;=b`
zM@uH8sjs+#6~oCYp~F6WIA#PCo9cvp*HI^a>;+7=?m2OZa%no8zy>=UV5dHyRTuE{
z$1I995mw%Kfr)!3Qb(st+XFmEN#|X8+M{pBvk?#q{<V9skji?IZ;hUY=hDzTBI2)m
zKoFG#!yD}IpgdSYm_r0>6EK5@bU@HN48)Iae0(f)qu<9@YxDM3Ej4n7o0$V`xkEap
z&Mi;q)g?~duB48A#^~i?UErK}GM^@3_&l7)fIHaXvO<1ON#x5X$S(d4#od!A%B%|s
z!xa&f69fbr_<6q>08#Wmp*#1t-{Soso*(z?&fo9r;_&=#JfDxo4^svXk1QO&kD?C$
z_GT76ffpQ_{|~mT*));Y&&`>>@9WJ`?=Sp+a@LH<kAAeF002tx{|}ji|6nAv=4MQ`
z{{=+St9hlgErIr9%P%_4ScB`6XabrMz|3*nq#{Tlz{Z>!T}|5R2;WthHt?r%M%#Aw
zmuEAtPr_~ztO?Ui$3S|weEx)6KYzIipI_)-!Gdpim@krEaR!OsH{(|Pp{Edi8D$g9
z^7YU*8CO1%3r_Og^)*5+$)f#;>>`D9x#EzQ#qsBP3cbO33PX|(a=p4gOcq?Fw2&B2
zN+_PBLKWrx35wPIU>K53i#NnKmMO)6Gm04H6b2ycMG6y3A)lbhX%dGhi-;Y{2;XR-
z^a8AGxlsF3kxK`MNMf=P!WaSGydbiUvtZ%Xox$(wcC-3BMsyQMif2kGq-#@(SObqB
zN2uvCOYCN|-|y*Z8M+`q%zH0I=lL|NFRHYC7MPzd2%k>?dc}Lf0t+dj)2RiDm$M7f
zyR#3bZm}-TxMWND`vZ<_5z<ftPg>+<<TYqwy5LHR>jFy`;X26$0sX)5^++B`&mf0$
zN4lIJFDJh*GZ&Y%X~ttjgnJ8*K!BobN=b+;;6G5-P%nDH)X6k}_DBl{h#7a7Mj;R+
z>HzQI5#_gJj~uad4g(*(;KGO~xPZAF>7%i5U=9%=Bp`=e2XC|1)EMBI{B34vQGk~W
zP!s?l!jzy*of-*192b&QgIUp$s82h1ToS*73#72TD6$FoyDsG%J^KitBcak7SHV*x
zqRAvs3w-iv1Z;woun<lV6E9x8Pf|!cxkd(_QDqr}u0R8wiQ)<|%aq<>hcE=?hEjAO
zeMV8HETeEEBbEWfoLRQ^Mc>J<xGpYF(@=@Y!NI_J#>Yo076<F(pW))S@O!;J>S^Bs
z8d!HM=nn`E0Fd2i`-Rpy3PS?n5Oh$UJcZn_4o;M5KA-aF<aF1I5O&0KQFva00Hh(R
z1e2`$z`vO)z-+U#g6cGWU8Zih0f(zU)Bbc%OeqL=A$rJlsp!BPOOmfaAtZp{yr9#}
ziH>;IwPtp8uHa)>{p|;HT318-JGkQp{7}}XFIwwpkDrP{GzjmIU^aXVQpE*o*Z~7&
z9rJ*dytodur&`qlb-V2_4aT*t0IzHld4_$?`Xnpe1g*4&uGKXCt!u4dojf%j*rg&&
z0NenK=9Yl1*ol)NT`CS~#pBf`mI_SOQs!Aqhw{gBB+N6O|4bs4p(^bH94)XEaN2>B
zDxyJ^r=7e)NV6bF;;~FG!46x-70r^!TV$|qSx0dlkA`ZYJYu~y5bOY3IV8bJSV)y}
z0wYRz=yP^(M1}jq+6Tf1J|}U$c*mpxyUO)!Fsz@zAiwI@<D>GQa{2si{QijfSTlcc
zR^BX_>{B`3xs8@q_dB=#Ws4uUV14X&(fajp{y%RF&{#LQUP5(DP<m_zzXJ;NFWB4$
z;62gJD6ode<J_)#T??D<(?_poxns_(lP7D2lNn(wwyfgi_CL>yZ#$M)xn$>2LJ?*W
z#}1E-zi%-Us8%p-?47$_$&5y@vAJC4{?_r(EsM7jaM=-Z3e|hQo<2alSJw_c3|JaR
z&CTj+{k_3`L557g$HLd~zSju-s}rD<cp7wZ<K(ez3xrRQ-X0qS9$<RxxE)S!s@0LR
za>&|u_U+-dV2<ViDEA}X$kP1s;jsh^0$#T`B0&QolLQTKBqF<(eF6P}gL^Y=2n`_v
z0zKP@-<0Toig$pDhk#JKtiMKkeNu$M5LVX7HP0WGxZNODR_>$KgclZbGLHx{?o(S`
z3lw6jqp@=XTMZu>Tku5ISy7X5?jTQr)y%(7!jsWBBHvSTfP<tAjoC6L)GZTxHAVoN
zwz6P3A4mQ|z;EFemn;FLYG+CHg~`XH=)dz4oT;Q{L6`1pdzXWyZXFXfQ%o8M`>c(;
zq1yzuX~+ToFhO#EWJts)wi;ci(O8Zy)kug*P_Loeq^rZLy;t}+2EP$Kr?3-O0<m$w
z=v1Iu7z|;nxYI@Q$_EyWWEJo39^f`^2^*eFL&e+d5^H;zSZCSDCbN#X)dBY)P$q9k
z9-|>*R1-1m-%%1R-0<thO00q^OXoDr`}|6ACX~~;Pb$z|gt4iU%2go=d8e!s6zIDi
ztU-m$K&9+R77Dx(?j(GW$gXduh#$IuaYl~zylYy~h#I?)TtLyD-e`IJTL8_HwY9QZ
zw@HP^h8B4H1SM@*hYLHGVch+L+GAn$)U7&Od!7Hvtrlcr>!4~OX6tZ!EWw=IDfytP
zN7Z_4AxfKWCc{R#ZKTL4bpUir#O0nDpADtgKi|4|8ItYYPU8W?kWPjQLt~FM!5Wvs
zHX99V6g0)X&(WcuC8>@!gp{<R>Ci&)@tD`pyncb|)~`Ml%Q;Jl)(?5sTUD=>bfsTv
zySpNCoS4I}idF3vE$%PB?8=JOCB09(J}i7m0L?OtLy3W%-jF_pdoAi;vHFX{zhh7T
z2B$bAQfEr>YD>22SH#@0(7S$fPkkr_zW=SN^WZ5BQg4#@fYw4yRlU|V6s#_3m_jK9
zthJy~N{rGx+jf#n+oEM8Fa&w*Z0z=mVi+Ct*>XLl^tUmwOp3()K0o`!md;~|FjjPc
z0`IHdJRbZBHGAxT#xiZlL02ud<~-lq^j8sW>w;bc{py-is@EF22KQS1uC-G2s4iM=
z?Bq4B9;&@(QCaFVcw<5!6*^l}N08VmLbXVbtfepGOrrkx-SaZotKAv+;40RCg!~CA
zKY0xwx8Exuza!Dx5qMs)gSi=7G{-46>9$BkCEod2a>jacxdbDL*1k-19A&mh1m3KV
zrg><qmG^otsg*AaDScORc3;Puh}xHn^rq}POA38%_ZQ|=nIA-=J*o3~L#<O&-R!Db
z@6XAtTOgIgCl%-E+*(1W?-S|P4TfQf)`V@Dc{_43|Hc*RuB~b(QfFHvT?s$P2(!cr
zE0oizgO}`lsH<{{PSO+FUXw+UgSg^BBv@C&lJcpkXHJT1W#Bp`gL&kgW9MflgxA{o
zuJM_-c>hz3g})!u;)i?$0#2)J43tvj<3SLvdp*2Xg9j;E{P|LDJQa!)L$DE4ylxrj
zHW}8s73P}{3v7eY6+63ayMr6fC9J}mG`x4K2#t;H0P+4}KF!F6(_EWh0}4V-$VPSM
zju=7WsA{NwxTRW%-uMXqyu76Rhf;-+6JgZL&p7SPNzk)zUwAY+RAi8Vl95W>MRfrU
zZZDMC%Cv{1jdoPbC<g=(xo3^4PRv1(6)*09X7ulg28*Qk@E2m6%42<&K<LXQN{4O^
z;3}s)_o4PE4i6jez}f=N;)~c1ic>f7ORwJ-fBXE<Rq1#0xnRQ0R9IzUuL;HDAId%)
zRDA=c-n1Li)$vm|OD6t473s!|mX+g|s>#4Cnk9-t>N#vAneUcF8hoduuO}rr6!Lbq
z%Ib!yhatZ{g9aM`Sjs=*jYYni)ksw;(WM$xt3@)-=7NQ#Rf=TU#g7e2q;|Y6wHz;Z
zw{N;oyuJ6QuG1e#EsKipuYy0{yg5-^ANJ*QI^QOrl~38Wb@UkW77~SAci!vq7>fOL
z*DJr!|G9Zh=^=G8K>_&J+yekW``<`<&JKo7#%`SdCr<E<j;HgsSlVxPjZXv`tt?4)
zh{seEGAS|ly+*6kan!Yp?4%B;cyb6V8v_T)Vk>LDum7#<5doxDQnD-+cDD_*MUUU>
zszo8bP2@LC<SVZJjkGH%5hnO7_@O2St&u;Mv}pe}uItC{pFj`Z<U^XI%dan$o~U8>
zCD~EOw7DUU#t}z^h<pnnBEO`_nEDcPR(ycv%3G;a33-#L<VFc<37~I@>m`F}fVLMJ
z!XH#KBRl#KDCI;_B#WiY{D??=2|{}v%+ewCA=op;{eSJ_hg<UIG1~@=96H*O3zD_~
z+W_%s10mKxCOYNh^L}slU*SG9kj)qqJp7Wzdy`81BTpI|lx4F^EK+&bxBB|}+Jqny
zNdr(v7kzon_9l&H7d#ehfc{U|Uw~QuV}4muq&cA+YJY@!pn^lc`FfD{HWX39{qt#P
z+|9t9A&E&Iv>74OU0`4m*-}SevcvVjI=@S3%??_7k{q=?GI5XFCT3HzC)Dsfhvk30
zo<FYf$LZ&tJ48H?2=eO7fTX(eCN-i!S?pSFg8w)-FijdcAOnY!-xElP5RqOriKYG;
z{_BVKKrB62$s_+<voDp{=X73P2(&m}xX!FyUkWR48<|!pT}Gh#mk@<k!k07Ey7?xi
zTe89~h_!uIALs977U@5ScKBY+z6Us|e6e+>P(gdQC)`Mts*EsspWs(--p7p`32&|&
zLDC9rao~jpbla?Mzcm1;64b*D4S?{T2;&1PE%16h;KUU8{Y4#F?)10Z$b$msE8?2t
z`9>gnV;bQfV>r|S-Hw1Y8HHaCfEy6^k*==qLoSDMGUCP~OVR`S^L58he(aco*~l7M
zIyEU$`h9es{47Gq!&Hb1%I7X+;1IHbAa-K}hzJ?W<!eA5-9VIxn}#F@&c>Ut2V4-x
zByU9q7ltqpe=IlOz5RtksF0EqT$c?91v&iDG-V$R(aSipTyyF#-ZY6Vc5R+Hlmyk6
z+;u1XZX#c9#*g}g7SH^jz?19glKq3Twg6j^BvD0-WT~{1C)6gOmKhpT6sjCnC|AXR
z12BJGfwu@E$wp>aVR;EuGi8#B1lq$b2()d;!O!TU<sd$XvB-`)@_iRZGQ*LXzNDO{
zjcTq!BJfG0;`Zu#Cuu-OYoQtMgI249HKKTbXTOK`WaI|m8wmDj<BAlYbF<UrUz4eD
z<9X5FFc!RU^%`f#z-SDxMBJwGt`KVdIYh#NBS~;X=2H&>tJ@Qyf$p*kn#HZusodF{
zH(scrOrj5R^5Z-vGNGIbSW*mBwgF%hWDa;j83hR?1u&)98>~=Ks<0IasSN@ZWnitU
zUB<!*6KkSGl*|ZwaCV0Xk`pbHY8}bKB+n8c3$t;Z8X+eZ7~KL4g;SuYb@RRa!82r#
zG?<~QMp8MYLtbcvMnNQ_j2M{Lf&r>rXrm2E8F59RY4;&XaucElu`V4erw{lu6><Ei
z&X!cMCdo7+b(9)oA+&0s&|xU}<PrCl^ahSJ(NjRE?MI)Ym@j#ncIq88#tZ`9$n>nc
zBIj$*Re^$QRf^b|7!gqTX{7A)llwpq2}E&`7ZA`?C?L#rVZH`K`RtOx(8viW<mCh>
zFs4)Q!`#E2Q@<lg^Z2i9s4b_ueeL`nY8V3?DGOTEsyL$6Z9!>r>SQ&c(L&V0mJ~?M
z4RVZ2h}7BW7hozFlOzjsOg~+o{J^7>+Sr<Ei!aVg>`}5xO(_%OeA3V-t!W<7Py`I5
z%o@0R7sCQ5NXymq$_%1aWhjlPY|1JsaMt(y(<Ed5Ym&b*mqm3cB?}P5afsq&$H%H9
z-8o||dw`)7zVXQ*O87L8WYnF>uo*KHTL;|^z)e<~tDqMUw1At~ligVoFD-QnUKLqH
zcuD@|ZZc$m5zuMIp7*<N))P<JUx1DHkxi8M;5vu;bk!5p=M;r7XnM)56g`ImMC(zK
z2t(Wv;|RrN-;=}kl|Tw%S)WipPl81!t-W*iAQoIJ4U!hPf~iBuu3kV$wY?!LuM6k5
zgcvt5UEHpaO67-E$)Gr<eYV3NjXJZT#&j#IHS#)eUAe*t7Zx}<xW8@>%sH0Wo)JC2
z5KChE?3Jj<XZ8QI;K#1rk2M~fL4j>#)A<v{Y9$yta>X+I(XaEb=lka0E}x&}`)PcJ
zo|`wfBzQhvPQLO+0+&Smc(^bVCpi$$IMP5xdd)1s{$_uMYXx5}Kd+%)%1dAE9038$
zlQIF|6Knj_2Aro(!XPX6vfjBlmkFoakli^sj;0a0fav{3yeG$-c#u>BszZUnUWuYl
zYNJ3|c&u}^h3_2<+RK*I8A_zOYl2`)T4`?aR;j;i?MLSopiH&(*cR~qJwDD}FGu_%
z!yH!Z?Y4d^N8&4_C8+;st2kii>p&bJ1sDbj&;=L;(g4F=0d#;S&OsQAAdc~YyiBH2
z6~MFZUV)2@j6RqP6=s{Ki*1MaHA3ganToa0lTIcea@RGDAb=-~QJ94bLKi%F360Gf
zI)tD_Q_6GyBH%eog8PP_JNJY(8NJ9VS+TY3=-$>R=Gz>YTyThTA|_?AkaX`zC?~1q
zIPW4vlz_}oX2RBB%q5K;TGsy=1XR#!NsyvgtS)4AyiE6P^2=h!L$~Lb0d)i~-d&zE
z8(!cvT(E7TuVz8~vc{2>W$4D0iEqj&R#QnUb(ZAz2a_x1b|sy$Z47!TW5e=1B>1J2
zJ5G>bg!=XmO@$dW2n8eDX+bNUPDW@$O?o*wd70RRJnN0`WyU`!@*@|Sx;r^}obS&U
znbvgj^F2Oyqmpo+ha&=g9E%S0axf{TmKf7c`^#)0Sp)UwlWj)}y8Qjl7j_wYo-X51
zYCIPUJPJIO<&HMgc`H}h+<7b5OElaN@23HHi@T(ILsA{t?>^2I`LjOX*VJWYXU~}c
zyZ6n0@u!r$^?U2{Gd({6%lYVKGZy(G1>Cf|fczl7ejMk_-vr0u!G)d1lwjbeaithI
zO(@LyXRzI2_Id2r+1#~Fg`G#9!@$I$dF~TF*j~kT|1OLB{+)=|vY4L4z{T`<Zx?p%
zdxGmam&q=h1IEwD)92;A!PD#Gy4d$#C#}z3R@_1H&i6^x#Rr?pnc$H;Xg8i1ve%Hs
z_k5f^JtO4?)x88aq#9~m>F@2$X0>L^QYGj*V$(!<O{%{GrrNgs1ZtttO$KBLskEqc
z%d^mgJgY#Ek}7rNvtXx0V{=KY++9X5Gn`h&G@3UZ&J=@@jJ-E(I0U!t#3@MouG(ss
zHOf5jMqo>x%z!C}U0E&adzo+8u(XZ5dvQy879Cc?V>7T=5|My5>`bR>I5~|KMa^~v
zKg5v0Iaxmf0VCsT8kry6UGp}ro$0LDfa)CsQ|>Fc!AcIQwI{i4b>=&HKk7Cij=<!t
zZ$S>oM1~!)QBhEW_sasSUkd8M88Ynx`-CneT<N`xp?}@SW%Ekj@fh|%Lh#|^;qGCo
z;n+akAw!b#f))XwVkpwdD{uPh_X)aqndw)e3J|lx@Wn$sK<;J?`yfKzLux$=mT%$U
zow*ECF4JzFFO&n<*zfr7oC<R6H>8Mw%*~tK#o;3-2-R?7F(ecz0&W?%6S~B(G!m~8
zUz)``^9#GIAapDsJKC}syJ}*9ZbNIw7EeSOu+M5M{1y$VPSYc(Qo3um-kY6V%*0eB
zrBfSJkO`MqVYou~O*z^niIU{XG)E2{0kz-`MmCUO;|I~j$5Q@u(@4hBpWUFid%5U3
zs5{JLtvxhqSYkMVFy<r=b1D)F4)S+uN&S8A@CDrE*IN3%bLcTCq>o9IRLi?XHvFw9
zCbqs<<o0@!<F8`)f^)-H!64?xV3S=40fx(>^e#hIBte1iBFlQ}jjOwe09_B@nknOj
zYqqQpInL|_GAIEQ<AN){zB1K0Y<&6EYc8TW^a=rFsbq&m#`hFpcn=TL1}hk-0~Y|!
zyz162wvYRY8qf&{49o%TJ?dtB_DsAPM>$?~YuwE6NpQ?yu^3BY>XcK*oB#T{moV>w
z0(B*asw!bHg0hMP`b#j9HUOkSitM5`7s^kzUYgz_z}LelSm3QJbh5dn@XbgL_QWk9
zenSzxJZCyJ*u|Nl95nmoMyCzumJr+tnn7e^g}KcD{wT#T)J7K0Slo7q3!=qpHy2M;
z>TE-M9frwiU4^pZ*s_Cdc8sM`Iulo|+F&SFC!-p5>rn&iq+%QhJr^I}wig>6lUuJ{
zfXV@z2I=)q=z*D+R@KrvfQ9-rRbduV72?<u0aKijvn3+8D>S#-WUV42SDW~#v1L}w
zDA;n!CstPA){L_@XVg5rQM~{s%>BP7I^ks51jVO{!R{#CVn@#nUC|>(too=i1Rc`q
zMGu~9)rA=!VoIzvDlB1#)EYRD?BGE?(IW<|^8bB=BW6rf^oS`d%1%HE`G4N&;JL0V
zy2prB7d3{cOIo$y!6Rd*Ajep-)k|?uZyU<U907;}tSDfhTB%XLu}vw;BwXE(Ob=s^
zCB>%*hw@Gn4z-;ktQSc8SBa^w?1JmP&L=`h9hi%?KYTA$iI;X~2kUcd(4$5g4XHO9
z^5Y<*D^kkx+l9sc1#G>e6{$rnW^HQTI{@-W)>dr|cQOn`mH%Sli4z-1<C{bSq4@**
zQTw}wuih3cdkLSu+a-CKyFl!BeKiSoQia|e5B*!qH?h-wj<x1BP4jo8tA#Kyz2>#`
z#Tt68_p!&YSHGc;@IL(*{7JqZ7#z(^&xN*{9qXt`UC(Xy1WDYT8dLinYpEt}vT|0V
z9^(qt_}d7EYm*7u+&EH?b7@`r0&1pUmRcpEXSDiCO1&QZqZ&BAnzqZ+u&x~giWe@U
zK`$1D1*D&UM+Ne?KShYjf4WeKPs4GfU*Nt+xVMB|tNO&%xYLENg?N>rzQs#2tLL@2
z8%6e8t&Z{hv6^1LlkeLsQnvrW2>fX(!0#cOs&Un1Mt&{&-KzFSCxRdSa6a^HUOmEk
z>ay3`Sr)UdatIsE*ShunPpf@xnmt9BHL73hz+Sgb9UBPt)LE_VkS}x%C93o-4*U8J
zHw$5QRnrlfZFi%yFzM-Hp(C@x&3*LZ6!ydo%OQdkB5UrSxAXc&oW9zkJ*^>o>NRUw
zz#9`$%hL07ZOrhV=6liRbI?2#A<O)N-)iBwwbxqGtE1M7G@_?_tLDlYhT*Gau<!da
zqQQrio_7=G+SA`>lin;d|7jnu_NR_C@b#sw+IMSK+}$kq%UEDqblyK!X_fhmChC~G
zgsVPYLYnuFL2C_TX2i3xYYz<z|Bi!-43%?>4!UMcrVz0j_bvD?*$7XM(bsJ;3)&S2
zNs822%^LcEIXjJVL$Q9(qR=NvvHt7j?9=<?c-z?BzKi$DZ1W%d9?vm8@v345hD++U
zi8P=AjCw3!*H4S?QL!w3zm!9#Te@w_elPMWzoSaO{7N@%%gAt@h$<NWz*&;4MGAGC
z9Y6LowCr{}LR1VhFkx3i^R@(*7^;d2C{)+-++v{M!lEh_zFQpMKb#-dH#pyyYMpLZ
z7scGduXD()kq5|3g1YCwgpGdN)fL`lLEXJ2T9PR3eI;GyM4d-h)h9g4&2t^U+HtF{
z<7Mbr)zz`y=H;y?lmF&d^x=Oq2lzZQn@Q`;qi@-I_^M>1+<hfo=Gh6c_3>AGz%~8l
zTP}LXef3anB{r{a!|Wyx+;!?Q#X5{`o^$eF2jit5w4XkGo+`83w#S+r(%VI^T#wpN
z7xP_|L;DrGuG*sX#_v<ighLmXK4Qc3ed?t0tC!BIp8VBQ`P7T|8nJe@{MP<p7r9(?
z_~i6&V*k#iRw$}RT2-0qx_+#vr%P}6?SU%mo@}cOsI{TV;A-#bP*@$F-GuhPy$sQI
zgXedADqNH9P)C1V#)fB+++6_vo^4h!NCu^<2sS$o8~HjH#{~_l1E9Lh%z>R`@hoP<
z!dqqZYb@f}Q=h|UELFT&R6h73U5MQKMf|YqY!Wc?70tjwvY!JOP^jthCGIZ6mf${;
z2c>Q6T>b(4DLM2N;HG24d227&pc}OtZz)gK?(dn$9wfqtohf&jiL~ZRXHJ~ZID%RO
zsz^77X+jh)E>!DEfz%^syTB3dT%Z(>I1o3Um339Wxu4XvsUZbjyc1_Z*%KE&_EyGK
zjVYJ$GEgMeT_z$(k&}a2q89@*Gifk%cTt#qG<!XxgIe|4r|cz-wNt`Rc^WLs(wrKv
z7N9*?+PAS)SQV^7dMK_5s%hLPi}AM5qsXX--&A>8CG;1}C~@fl^=~Z?#=m^%mi>u9
zJG?7z0jshsjh0wS-~Vc~{~RPy{+e`HmimHkG7NLCjqBSAh9|B2EnKY1`FvKwcSt@3
z_ovN&Tdm6rIHj4{w6_1%<LtTKRvTrdr>CENojp9~C))J?oc=rN-~Vm;<#2mL|M@Tl
z=hp7+{i)1(R?LvM#3=-%CZoi^THZKw^O_X5g0$M~eGWpy)e<+?Roq<6!`c4skg!@@
zb#8$jR5l(o2W|yzDNDQ9SvX%6U)P7EE_pKdk6X5My!mmBMSm=;zcuP96|&t*yp7X)
zvb<?u>2hIhN;1l!oV$|0Tqy1$gPeHGY;4p3u>?{#-vf32h05@9y^76@v?<2q3ln>+
zeAEXY7%E4+B#wWfpE}d10Cp<e5K;c+!Q|dZ8kfqKUyQR%PIB)lP&ZHBxxicgEd80(
zCzi%oV+;4V?~d_-1O2nb%CAw#vp*q+#0lQdh@1OD`iyM%541(vn9IN|Nuuk2*zIE`
zV(CpguzkEZXYyLK{ciPTVc)+Q&`qWo)5WxDtNA2dY`^?>c5Zgtg*x5C+`Q?ib!#_!
zIB)r;>-+ETfMwr%8UL2`uqQ;YBY_xk22pMYGh~y=noBT3+H!cO&+eE0e@dCuF$5Hx
zumAvq1pk-3GbdX&mj8<rU#ltkPsc>#3+^uxUV^g>CSapY6G=DKOv{~UnsQ>2jAU9S
z$N~}D*a4tmjQcV^<yhxD&iiWgtj8t*Olqns3nO*B@Y{ZE^OJ4sBmU+&@g0x<pvg)M
zxi45G5_e=e`&pTesKge7&ug0$k57DsjHaWLo8*lDogBmDoMEOvtrUX`4)75OOYt$F
zJYqhziba#)dLE~d%9MVXFwHSRB@Ep87iDFG7BX8WHc{^=C&Wdrn3Kq3N<jAbl_K*M
zfau0;CMot65p%=<>4O!E*?G?_KS5W5!ZgN0)R?SDP$rN!BZ$-^E<||sbhCKBIqKM%
zHpU5VSeI|M<Nh!cADD}r1(=;~D%rJuySKAr!3ZF+ED-(PLhtzjiZ(kvR6rO2{{s(?
z@Cg6c95XtCnLIp^oBYg?p?v*524{if;66Hvc7Bqi&J$w;8IwX*gg#~$N8z(ls^=|i
z7DGKUd$}M+1ha%mfW?Uso$t%*=l*;0pgTH=j+71<X+6FSM91Zbac%<VOZROH+_!!(
zMRINs3yw(#3|ml2X)J`Co#UZ;U>X0>Gig*AtIYT2_f!<&32q6}S<|P23)m?llqP7z
zwP<nDni(h5lYz-zHYuRGnB!?sup#9=!NxdB5)jGh2~7Yr?_va|wNdPk*<ShaR=f_9
zyadAD6AzZ`q9`Huu=YNz0LlDB$T;DLD`MRYJf<VYf>oASoN16bUMS6cgt&6j?npu(
z9Wmr=k4roWr#Vq7Gh3)fWG%}p^CbXLiWIR#I{d8}+gJh!3vgBOWBy2a^U<q$5Gct?
zMuMR@@fm>+;Z_H$+5m9;urWnk1Y(|eB~4}h3mWG9IN-m&Jp-lZFP2$MibIR-4dQ?!
zi2Y`5r;ci&rMCt!(Qj92e-I`zmRS-1f~JN-9#8uzqOm~_^$qIe%eV7Y>_Ff@IyguY
zM*d9XxD@IML9oU|kp}e7<%;OO7))5DBRgIz&Fy%G6P`TCg7xGNtixc44Hj9RR3s4T
zevpR{x`5pa=W*sR*`hh}ycd(M@PRNcFkPX9tQ@4YImJo!X?1Hf0O$dpmUE&whZGse
zghge~yd2sjLNbRSOQXNJlNHSbrcFNv)>BND%P33mN|MJPhC|-~%6n+|`lFnen$xah
zfL0V)lr332qUj3;Si+z8LWxZYK9Lk=b7V2j5K+Sd^F%2~%3ksTIB2oG2@lpX7z+m1
zFE-zaEcfTP{)2F;lhn5PIV11axBkQ7#1f*hIYUbqd%uz!w^Z+f#PO5Vmx|(~_$|B-
zSWaO&BgxlcQC=MSXxH6db3^zh?0DM75MVhPph7i#2aU!ws$sb0=g$j;V~!)0*yMvM
z$-0yPDq15=e0X@4_&!yyu+8{m4Y^Gd4J{+NELb;^0_F}h34oHk{z*6NUyv6m)xq`O
z2eT)4W*gmJOe<mR^4s5Z??PJ&N|Jf7Qcb>#(c~uY?{$HLU`luFA`Q!wnjuMao?jU$
z(tEZGfKq=2#AeZsHG9HQtmlmOY=KOJ2a0Qx2i1{YxVMt04gEQKF7^D7>Iv-fTXgf`
zx5oMiZW3N--7*E6zd_e-Dd4@01f_$@B*Olb5D@BeD6=zJYT^Gl02Nwp{Dwt@f~<pQ
zA0+(p1v_CD-(ju$2`d~>3e)lRdHpVnx4wg8vTf)4VX{d(qrE}z0j}dF=INdJ=@AAA
z7(>Fr!HE?w`W2su9}$En*#yB7PmSlDvSP!+V&S=v-EoN^E6v=*h-IdS$8lo0Vry~5
zGkH}XC-UECLa%iEGjV>x!VXcVL*f^T$Y2$gEoym25O3!ZAlhvB3XK<`8tMv}V++un
zDjL~vSvmpL+HpOKi_N)gtEz3S2KpoG-%O6MySW2o=he3bYucCzreIQAd_9h^OSmB{
zmn<J%Dk|M<WWCo^VVj{Jwg_eG6{91ULaket*tOW?Gn85-eOV@p8_(0QU<>4_wPP=T
z^n@XgGK1LKp27~_j77Jq+G>J<rPWi=L$H89H2Pb~9u^f0Y>;u%ErE2@C4kGfOZ`{@
z5LaANfvA3<0Z#+4z`?~PEhXf<2Q75~1%(Y8H)uU&E5DFgrNxw){?cK{8n8%13{_ht
zfYDA`Lf1l@74NgnfOdy^g?<UO>Q=N#uewdzqR(tYn_*|%Bq`GmQDe?R6)QSqNsHS`
zwz}aqYOZRhDsXJ+d{|=}LPJ%ki<ZEcg>Jc#e5p>HE*W!!njF(@#!_+H3z7h#ZxGTZ
zVvo>w;1c1-NBVU;w<_}5Z-V-pp?ryj{=Pd4)u8^Mesh!d_X+Yp*wep-{x<lCKu+#!
z3uK$IKt%NnKp|`QnDTi~w3wHkdpBTyR4M6F?9!zvW-3%jhi=0gFwUrkRu49?75lVR
zH3(Sn1}toNK^(l8g@k#+i+mGCbi)h!v|$!Cwqh1HJ_3j>djJ$${t0$;XBHdw`#0qe
zSlro)S!DS;Xu%WWXkN)E%?!%j7Kr=FH_@F<nEhfl(G5?~=CTPXz>m}Aa7s1(*j6~8
zs}-r?Sx^)dL904VXL=DGtK@EIg`4OYf9A&KZFlA0Hr_Fw#|r#Z^?e1pm=H^jSq&II
z3H%q~nOO5`wJgkg3>F75HT6pP>}2!2eEHR!{1{Rlo7VIm5w7;cySME`r46UIyMAEw
zaA}DJ7apkU_qp7d!|Q1Jk_1p4I~=SU3<Y^?>avW`IMhTw#;h1|2Ttr3&OdOyn7w%M
zaS#qqweX6<@*(#l6nkIDk6am^3`dpQ*Wb^_&CwAmSdXI&G7i0?*nWf3lkOf;qAo4c
z!NbqbE5=iyv{S1D*bKX_ZJ;aPUCcvKvjnC|K&n8hBA6N#dN>gDMkPtLw%z+{Q<qVt
z&JJaQir6f>8Rm>51BsE$fqm4QMduZ!!&Z@R_I|4i3C*(zuz1RlCD@B*^HL^hMzNDL
z!T`h7;cW^x^tOTnL1Q~9>~=_elhFYDM~gQjxHOxFlUu_{2g(QvU9lH|mP^`NTt>YE
zAjC)fJjhx74?=_Twcey8$cj#pLjvgN0Z6M?0x|rlA!FPA4k1IElpjsK(If(q$S$W9
z;5}$2h#$~e<Q4Q3p;N;UXIeHi5EbN<A~M2|{x;<VrwQzwf$Ifz6PtFtYDv9Dzg<^v
zgAZX%on`Pj9BZCZ@8^0x?zjik2{qFhXuTd>+r1M2dvK}@q)tb{w9flO(6GawVDqa>
zyV6Y0KA3;YB$i!z;QhT1;;2<IFz49RH7QDsV&;{~8dqxT-^$(9MYvj>Nm%VX9#MJ9
z&q+1N9xaba55?50?4msbaEOkmTD+x9-?Uk6l9u6!Bk`2^(REXn$9rqsd)~MCHmOsX
zs@YCeC?iMqknEbTBuNF|5#flQUXGnB*Xk30a9;MDWVvj5I{zD(2m0oy>OFHrUEO6G
zSM}xn2XIC-7?j6SU)$TEe|E?EnA_kX6dE$q5L4G~>(zlTt;Vo+3y`l%+j23iZPM|=
zdqF0BcjvX6H<PMJJ;??v;sct24qG0k8?cN6P^(BsqlV)hGM%QA<YT+7XaE82w_5mk
z$wS2=z*th5lzK5^n>7n5F3L{KuGv;yP_hhkQ+R>x+aA-vo3Nn)9*9;GwHa;`fiuF6
zH4{J<IX$(JM<eZTXi7ROWzRxj2*nYGDGwqGv~o-rC0Ulyn#^E5kQ9^Q6gG<Sn#^QP
z7cIr9scwv_1!4)ssfd=b+GvKW^&OCFgy9g9jt3}WVSqA%gG^r1Ix8>PQU<ECzX0!A
zJ5RWkp4y7U$dDS!9UMqbKpy+v!;N-inN^L7lIOEej<##Tb&i|lnGSg2nOHgw4g$wN
z0`&`JQe8>7y2Ok<$ClXgP1Hqb(@C|8Rl$;b#fnI2nnDzMjZ(Fu1+89vEqKvu@rbq}
zEv`P;8O+OGP!)dPO@h6)9->|iojxfYvSThG9k!z_q>e{2g<~dY-QlyAfgYMsro!95
z{buRV(0r<T<$_Qsf6<VwN(V8DlzA$xz=9ES#p)(eIn0WQKlWCc4D#fcR99~r;!w|_
zq)r_5v&tAq{s^pJZ3>gIFhnycY1LVfhc6^OMl%aD3$$1^y{#YkY{t<&^jQ%{qaCCU
zkCpiBlmq==l4{|eHErCNTYh@9aUoxbJ!=bgM)%Z@%k!S{)Kd!<+|PdM+2nQHN97IO
z@9%;y&zZmfOanE4WY^PC`NrWb`^MQ)*4J%la`z6i6su~tRcTm-x$_O;Tojlou35ts
zmC&O*Zr=?4kKsM8^!%`XUET{g|Ep$9Sc&a(c}*B_+P_@+-05Doo2$!q)yO0M9)9il
zWH@3$kd|HXJ7rdUme}&#w#g0iB^U3rbWGHY={pF$h0Ey8BK}aTdUf3G!%vn2hVmTl
z85iv{3<nO(7z;N?q&=cSUbA=T9VB5_0CRYnIzK(+;|Y2Z;a>poo?nOZ8=_mpsEUW_
z*GB|$n)lzIeF&384ig!J=Q-tiNB#f#b5;^(y(5VO0Pxog0D$tp)tOitva!(G+S|GO
zmn!KQZfoZwF{k{&hxm*MHyTSp2>YO=hreuX^Nv&X4_uPE7ss>-Afg_DfG`0`=h3(A
z<=y6B7(5iWX}YO4t4hKJ<$KG!=V1I_=x(kR)zz+3^+-PhQzcVo_)YTB4;rPfpJAPC
z#`6cnCj8gPFSeO?>-GIcd#a=IlVyhWaI<|CR?)pvOfS546`QY;x&H{!YgxV!8GTah
zkoC#5+;_H0jbg${k=oZd^m&p4&Ct<}{ixt+<Kkn{VYrtd3oM^4X5B2(8V@a!Q(>h!
zwoyGZOBwb^FBxp!L$r+&IN2G^M!O>bIKUpBATkaA@*1C4)ARj)X0PT~Te~<^0&KF^
zWK-+lWwi!gqDEnDw%KJh_4Rdm`S`RzAr#g#RaIWqjpkERMz`2K*@y?#{Rj939`{tY
zSRl=>h`mSK#b0z2agW+ZfxR))O;x{4-CNi`Ii`^tgmS+kZ=&*&0EH=SOcMbgjl2N{
zm$ytl4;eirsFH2r9m`@0uS;xD9%;LVU;RJ-hTHdhJU?55syEvL5p1XIF)u6~@l_(Z
zfuu^imJ8h04@~`40Axqq-ym}!uGY*YDVc%P{Ye(-+EN*BqWpW*)7SJvAqtfD8}Uw9
z7k9j9QrL{2grV~s<Ewjj+6RD&r|CD5h0<e%ocvtcrBJEgmle)OiAWMl?J|Y+4BkZ@
z-6gkfnZ`y*0T#H71L7(15W>DLVoj%j`smdxZy@N!%~EhtLm~B|fzw1Q-NYjAxkGY&
zCJdF&cogmf%P<P3z@WzN2!<8o-eTV!E%TBxZb9sp&%#|T2WgpWH#n3-eLNH<!#HZi
z(G+oD>ooER_jT$KVHY9m`Ut2422u%c3W>f!o7<3*9xnE$YLiQl(oHg$C=lI5oJbj<
zj(a4Ss8%rQhHVq-_%CvYx~f18fy*ZewIJKrjrN(`B|-ci+3`R&P)P;5BU=3+(7&Vt
z^LPSmjhGn2HvMc~oG1G1jPmfD&bL-VbpM@l?ES7X0isk4dx0AQNQlgpSV$Z@qX@=p
z1tA{6z<+R2Uzz5&WUPR;3t_2oV`YFA7H(tJASubV&BWTHtdR8ydt?R>bfn<(b7=sj
zUzk7PZ-Wrn4uMphzmKD^oZ}PB`tsO-Ab|gz7PSCGp&@!n)fwpp2BNshm6-GZ!Oe4p
zrZNM>4zwGfT!6j-$4xF<t0%L8OmfEh(4`%MoMBw3WP?krYmhM@Vx(nP+M5_IIp?S6
z4m*mf;2%Khzp31^1A$tvo3=W`Wg_oy%8)g#R`JcBKtelw=m$KWQrX0s*W#~m^88@6
zP;-<P81QLHtf?^4Y^m#1ViG(B6a0djUSHB_#(q9A@woT~A1va+z|8;3u~ry8C^*R9
zhzbNgqnBI42~rFCpzc&1zSaJM!Qb|d^2swEG7iC|584xyk!UA+{Ty$+jC*+qAVCek
z*6TC6;2K2Pzj*5Ok_Lk{7}M>nH|pjKC>FLefd^?9dIb<J9P@%Cz|82cru4d9BPpMi
z#+bMhQTEdbz@mPNfa$BHLt2zo8MoCQ$uorQbB2FQZ~uJk`7io>BEkPHm71_+>nt;7
z{1R^(;NK_P#a&IU*3#>!GDJtZp)u2Lv+b7Ft`pe8a`W`t*FrSzv-XZVnbxg<wp};6
zsMHk<>BeDqsR8}c<$zvqI-y&CDYjE@Xd&*LzPCho9x6Q<+;c#DyP@0D3%j9%e}g=s
z<JVcDJEf~7{c+@(hhp57oj|34%OzcWNbB1`-53nAupM^-RU}X^>?P<#b2E7#sq81P
zwGnsX>?;CYz;nb9OFY>pim*VxZl;OGiHU&{>o+-5coxW#R1J|cp75-v7lF%WQ0=gg
zJ>ee7>33OBse`A{7%Zt2@G5oTZi?(2a8pE#yP_BTOfHK;YpY&Chb-leqhC3r<F)2A
zrP_-Y8a3SaTv9ofnTbRLyvbrnjbDmLm6mefWguvG;N7!><zY}grUDi(WJtXNQIp64
z%R7<FrqcQ_I^lvQRNt3UeisbE8R}DK9Yd-yC(ICp9G#`pvf$JaO~XnKKH7Ai|G^+;
zM5Ar8380WjWTAfRr2rBs3UQ{HzrbOq|LQ#QjX`{4E^tl?K_-B-X8V)?iB;81VQ<##
zGCsrqexsH4Gc*5uxN~tE{9zQ1<nwyoG~cV8BZx}>*@V><GMoE-xcsF5fev5^U=Gu$
zv-|xyY@Yu)yM5%Lz7_htJPiBh`b2%e9J$70(aZM@Q60WKnP#{Dvok|8!KyGR$km*6
zT$wprSI2PM%<2zp`X?KwiqGxGey`_!zP|7K6xvNQ^|Wl?b+}8~(Q=4vSb#13b<Nn}
z2Zp0v8aYx})ZNh-V{9ghnIRAHgZYY&dd<<y!pE1RnZfv(-crBL91O^0^qVm7q-z7u
z{MSG&ubh31jNX@88m1U#)~V5Hc1n9^XJ&5tPUw$y4e%a@sY%+jYDl}em>v&?SSrg)
zRTJ!ydH}e~)ic&BEq#ouX`q0%wKkhQtwV6}+-5dJ01<8kyK%v1h;buK0W=V(k=m}{
zmdHwwcvKVpGk9~86rS62m6JV;PTFeK!wA!M4b?c>RaZzWaG!cAtbho+m`wCZY-3sI
z(H@3QO;ENbvD!f_px%AGtf%$fU@JSEj&{rX>D(?14A?q=ZkmGz09VQ7RzMNO0m|@J
zA#8R>5EfkWV;z;#+VKhPb#L};NAFfBdo#`tjh)$*OKWt1?Cg(b<3+YUrS%YOmo_rG
zw_V}aVAWChNCb8D&T84h$xHw^<N!4*^=)XG^_Ce6^SKJ-^X7ibT+MKztxTcE0n-wM
z3-C@^@q0t{Ax~o1g~6c2n<|0^HBcRqf?8RFLpyMduG$cBYB9E&DhoHT35DG-ck(d)
z?_A95g)PY5zPtyyfq}ly)gbGag`I9gs1ZVb9t^OJW3<jr<{hYv2VD8bXmoUD4=(cQ
zs;vxxTm%85XH?2S1rN3yLWKk_CM@UQ7X$Wz1+z|U9VuXk@$+3c-zi_E1b?7j;zjBm
zy=ZJ7xG7=%oddV=hNaHhZ0SG8mu2NZL1#5N4rX5uD{l_iazazU#zB~Lq6b+_oeL_x
z^8`HDE<OOk7n!NMx}s1IRqUlAbfq{1Vx&+t*{eJZfWQSjHK2W6*M!@(geVRHpl8|K
zguBGP2Z#~oW6FAXwcmg&P<6mU5Y^dNEv)Pwppiq-OF&q)mk7*y(+622$+%kWmiIFR
zJE>@VJQ@kyuvgUOc7FzrG%cq{L3%l>Fn?Qh%6)enr;CUcyd$<yc-reqIY@UEIHG5|
zRIcL`sO)+fr7i$XL%}Ug`8ze-Z}j?5e1Lj6zdsZCHa#!4(P8q&-7G;ZZ+l#Nqw#PC
ze<lLP@3vZR)#e_Tq-2FAQnW<;M}ez0j}DQ(vpP!Nnu8EnNYCva7c{!dgH^e~&_A{<
zv6E-1lI}&rOy+Z4*}BFMa%>27O~*9-0)!4{KnxH1x0kr+aVKhb8(X%8aU+cYIQn_U
zsZn$QaGFZ(l(f(HY@g$QWVuk&j?dHI496^NkJJN`S7@Fp9+7k{!pGO(<)@+1dk~Je
zgr^91kYPHLVKQAdwBlIwbk2qpYAGW|mF5BxI^D`a=u!xVA~LthZWlwEK&h|-sC~z2
zdQHW#KrStX%VE1Ju@gSf;Db!qmne%{n4Dyl+DK2#q8>7A`tTxWQdRH_Mc6NJkgrJZ
z7%GCY+O<>?#*3n1*LAnB&Xb&SIWS7Ef=R(c4*Keg0L5-QgA0)sm2r5FA3f8X<hwlQ
z5fN#9GA0IU&JaIvmlN+Zq9DE)2!E)DR39=PZn%~68U*tLAzu{$f}o{rbdC-=xBmRY
zM+R(ZOKqwYnj2pNCC!bvreMfsM|~NzpnT9(fSMaXHX)`74_m-~`2xI@|J*%$r_mTV
z(QqO3-o=PbLlo%<I_FSO$f<DmYc8~O@-TJA;W8iFqj7tYtUT6JhFp{$JpBztu}Dy^
z+^cP>`dXT<M*fmXmG?q<8lRbokyTS&-5M%tN$)FzA|x!M3Hd`FUhd9opG83A;r{n2
z>bzIE>+w_RBOYiDd!X|+_hS_kFn95>+)3N!aZEFHWScmeJ^L`g_tw1{KBbsPo3uyX
z5n!WITTXVrONMg}JOjS-Y4k9N_2Sfa7a!QbTvkpH0jB_Q{BQ*<E67M2T^j=jFR$(T
zs$`2~8#?-%wTx4s(HMGh#6WY$fZZI~7+Tjtti?5J+$gR?Gc!#x4Tvubt5Or<`2#Wh
zJa3q+xAn2YjP2LuCSGt!d{v2lDy-{hAb+%v5&@7YAsyB`#yV|$8{~5y0gURJ-q5+j
zy0%@{lGI8H=lTc=oI(|dumcSlHp0US?K8tnd%DSsRnvVezj~@nh->HmCx68nn6Ard
z|F;ZEndh1W{#N_R1*M7BqMp!{O(-+@EuZ#GPVx?q^~O6TEw4#k1`v~P=5+01bJ}-K
z?^Z+H>n}-WUN1?mk4?R~v;?8BIX(Q-1s$uRSkeU1vx)8X^ELC(xQov)R2z4`E$p`G
z;hyfO)jPt`y)!C~S86zF&axFAq@gN>6<g0)Zbx`3&ggGj&$2V>C#_c&qfQJDvI*;V
zoFLe|v%iOC-Ps@I)pq#bVg7=THJ^Tc>fiu!Xp<-5OJ(QH;WqWSwFA#|@+il}U!6_9
zig8tam~FA%A)haTRbEj=cU{(jt2Sx6Xb;UL;;mL8=+X##BYand3834mn9@=zqw>qS
zmi6;<b$2*6o3dzbF}sR&o4G@yE{UuHf+-?<7Xt1z^5*8V!C!-v;Bd}j*z?)ThaO5*
zAUqR99?_u*3?<5}2ft&nNHUB2$>Txw3_iI<C^E~718qd<bt+BB^16y5)Irs071Sgx
zRVf4>fmb4<H;wX|H;$d8K#<Ei=t`Rvr5n;P0VBCTfR6+T)WU6sI-W&PhgTOJ(IO0X
z9(@X#JeEv#LIkKN>F5y1a>M(PI5?0#&hojCjd=W<gwhdmGX5$a3r4{NVeZ(d$Yk><
zWAHZU<Fpk}GY+o*wEiSN-59F#jm5yL{P`lJ#0ViYJ2dPSPV4@IOs1{kl_;NDQ`?hK
zUh+IkymdaIXX|>`SA<PMq&}n9wyPg5r>Hd23*=hTmYF}Xh`5NZ4g#>LznDBCHq9p9
zY|K<K*#+eS05(k|bsL1?$z8Xh1dLisIy*zJtx;5rD*}+%A0Gje1)7L)F)|ST+;8kx
zV6itl4<iMQ+10)b(YRSKOlaLKa3P`M%mNy3EWjb60>T0sAuNC)qd;hMbVM2+?96Z$
zI{0)B0!LsS04#JwrvYQ4BRGo$MsXGhjNmMI|8v9H&Ws~@H1dQ-&K3t3C~!sdCL(f0
z_XY<bP8l8zj?PD;qXWX=;D9J3G(H-X1^`i<hXVh9200HR9l|^kdI0#zQN;fr%i<Z&
z+bt|#5^!q!RXz%3fx9CC%vo5rV&8>kPct0OUU{BY1(jooV*|QdfhOTD4Exve9Nm$b
z79O0@t2{j`-5wmqS{2ktR|Zv;v8<n=G(y_1+{0q8qnMa#gQi)gW45|~3MXZtym$rL
z;UQ=UkB36Wbw^D)vcM;j657>2FEYLe%MchvLn^^BWRrA|3UWx?nvIW0cqtUfAi7>M
z3b=zrqUws3Lx!0dBXJ=(Bpqn}kg(cYg;8C04eEG(Bf}Lv<}<{waeK9lhUL<lt-PgA
z-|G0-m#@Owl*lQojcgBYw_VPTo8=#WyK{y6>Tvwg&34@x4Hfo>-ok2gD0SFX@Z-T(
zTmCC|^)b=``mbR)+k!FJOd!3<pLVj|^%Q^r$0cJusP}Iz8U<5Os`(+w$2y>2jE(M<
z>Q!&mcAQ0)mHTJMMJ(q3W9%G)L<yP%JhpAWv2EM7ZQHhO+qUhQH@0mX`{Liz?qxTk
zA|tvERo%C)%FOT6+fy}DQjY%t-R}?QQmmDdI~fSEBt=4LMdTWOs+GxSps5dqs$y%5
zaNp896Yl|31jhrxHA9V^moyc~8VK$byMk&5v~_26>0UlSnW`Vd*RmXL2Efh-gXRR}
zm>}6qj}cYHVVEh2Jy&7m{zc?X$=ORy3j9pPzn?4#B-87~Xx%&hMAZRb_b;OD8uL8W
zJ^Z6M`Z7j)gv=zhz2UnWQA$=ki8t+G6GDf<5qEXX!P(0{b{c&zQe)5qS%%3#zQ>$=
zV}Z8H_gCI{kJ^Y7G&^*WYl0MwoR|!gVd7KsNv>&JBFYCIlWF`@6Xs@P_1HPNmQk9W
z)tTJhv(rQn*NlC@2-_QtSc(p$SNBfi><tb1ZEJ;kHn?Jp8j9bCUhuYGBuN{no`>}%
zT@H{fy_J12+wh*F@!wNzRpYDpO3W{(C`Uz;-2+3GcBRvuw4_fCTY@LGO&{Fu@jE|E
z>`@%}LgoZMz&;&fWTeN<pF9jajjQF-f!&;O3TPQ?sO+7kFv{~^&l9OHiYeg!pZF8V
z&*V^J)Nfajue)GUo;ND6{s!bA5}c|AFv(~i&px?Is}qm6E(CYqF*n<LGi+V`hPgZd
z&A-LFlzVg$^Vh@aVyeXcHN1OdKjVh5ED|se&Wm|;>u7$V126K1`{huqk`|NHw)RiV
zbyLPkHw&=zI&8}ZL3}-#W)nh*gpyw+x+V>FT+hYD@ElrIaO|2!0_7+bu(_^^{2v)8
z@=|Xn;zA|4@54r+)~3-L)r+qLdEhS*fBoI-Tk4jH-|QWeH%L(hNljq<S&o(xLsOOO
z%zJd)pQ3q?rznDpePOv{d({OdN=#(k0Ah5KV>_|PV=69f0&COCJkf<^tXApF?NK63
zdxU^K5-utYj|SnHUZP`Fx*vet3$JYC`ZHziP`F7jYlfq8gcndbb)L$&5cc=>j0UdD
zU-=SvMZ%}NEh~@rvGF8pfLScBtzo6hsz!N`op+^j?yly}QB@OXtd`dqu-N+t6fGnx
z>JRJv^2}wrs0KaAZfFKla?Etr^PEkxO-f>&N%uDw(s1{uNaVNz?$sLX3>iu~8sKfO
zE<awu<`-?b1>Tzv{+zt%;7M=%`(fmTMAvT1#mX=Hz!iB;9gwp$wyZ*jjeZ<RK&`{{
z_sNFjG(yL(V9$QKg5a?(@K_V{cqx3o+8Lj4W3Z)=foHDrXa!?EUjO%|b4^1j>;xp6
zg6=Pkr|THn#3ckJ95YQ`uX*=ZyXeJ55_6*+UKf@>%c2%)k5{bx;8pDO_Z>oyR{-2x
z=`iz1o*PYM<iDi{LOj}>R1W;&oyYWopJ$10wch-)+PTnuuYYfY1cGn$cL#iO99or}
z+{W3Q{iPlJi+?xf#7qn3cB7{uSe1*s1@y&VzrWlX4m1m$a-nC63(W+Z<X`boGQFfl
zsdh?4$8wxaykV)InZq1YsJxT}IJHL#CWdmU!uBTrNdQ}#MQuU$AJ5cacBIgnMK4yS
zSeuRz#{a~}Z*MhX#L&<QS$ovCkiaGV=GNBwx=9q>16!{}G1REGbUwMbJhQ2kL^3Z_
zvcZ}d9u4JBE8juO#$gi|-c11JX@}Qx+XVrqR`sK7_Bz$$*tt<MR-<RZ8CJ4w<`l=1
z+AvT$*U^O9qNGMRoSreHD{+_vm6(!R(_6lmSljC+jEC$^$?WfiSskGzBcjz><h-<m
zZD|s;k;c?t$PlMtywe{!qIyOwRtZr}1H|-0t>QUi612fp*I#picig+K9J;PV$&3(@
zua286s$!sau0jd1L3IqbgP%9dsr776KO|95QL8W;geYv&9TPBp)T;r-OM;7sgxX7B
z>NzY~EcD(JY(YS<72m7$SU?~X<Ad!Bg037qJ<Pvd@Q1hF6J!GiXZ62r^fD1lAJ|ln
z+5G#sh!CVjgp<Wl^ncsE39>;A4!4I1q*sLVXXE5G4l0Tut70tos0BP3)By1-!x2cr
zj!X(7+6vl7sN|I0X=QqLrT81t=CilLki#GeT{MaETgvU#D;HF<w>>O*O%rOtD!TX9
z&q2}vg>;}(P>luhQGQS>9`xWjv?uB?WM_|PA&U}2DWkwqwu>4S{5?yz_dC+p4gr=P
zUoi(+Rx&3U<$;OO22DITvSi}8rC{D`Y@V^Wr`rdm{~%Wd4z~msP8qe4@c<k&Gp6`*
zKHp1)++tjSmhZ7ZmW=jJhpbVpF>zCOMq`4(c<iTIXJj2sZNMZ=UNmb!>R002qhL0l
zLZkyI;z$u3>j5ak2Gum&@-dEq-!NR>tO-9YyV)kK+<Ju4AEUJ_(oOq(-3IP6qF#&f
ze*oe{b*d&R(0=$u!TfcFO=(pgAkd&L|13*NDI*v;1gnG;04;H@kgTIVo^Lf&Ap%})
zUA-1@i*WvxaeGzy@&k4(FkMm2{^Gxx>-+B2Zu{1g(@eo|%LScX9W81!66GW+?pZcT
zKf6tSP@*`#s$rZ2sl~uC)6wN94JQs=bMl5|`C^V_d!!lXK467*U4-=#db+ko>0y0w
zMZW9>=-WEBH{xV9G~&55HecgM)@aY+<%{5Cl((IsmI)^<IsrLfXd5<DgqOI_U|_*y
zNXm7fPd2W$nUl1Q9Fe+@G^$(G<jN$L7G33F3_pCV=pXXr5#CJ)s?;yAoTN3p>JG6i
z@9cr{^)0lqE;cnRv1GN*rpoe6VY&K^QWJ8IA?Lr>VQ@iZP}@0RPEJ9`lAQ1p9h|@<
zE5<9eD7t?RFIHp+or|}zjGObsIzEhM8Z<Az-UjntW!>BCD<xjJ&xBRz{B6a%A=m+j
zM{5kus5Woif#E7QS@90A6<B=e^zmPuYP+`S3*M-4FLL?_*vLN!8A!U(7v%Ckfs>wr
zdr8E7gW$4fbK~E-3blS8a#`JhXLJGy4BYUwcQOLqG9cZ5TK-oCxum1^J036%K{Rw&
zT*Zyc=-06}Oe(&Z><edhD^Pl8_~$WLOjj2qCIJ$$?HsVJJJ`5A<&1@VOnR%1sU@(=
zXfCM389IZHH0<Q8F>45%GAeCgnHfCdf%TKy@`oFD$w6q#G;gd63oBV(Xeau39@I17
ztlUy0L-dh5*f$b|^Zk(!C1l%_s!|votcRioe-WdPT~NV<lN>2X5k)r#wiv2S=MlLe
zqukF$QbC22oHTv`UKiKTft6-)S{+X3kTftWLp9kV8%UAH>N<o!`ag?Ft_w9!Y4Vji
ztVCKFUmT_v-d$)Dw8XITEk!n|k)bRPhOcA9FR6?P3IQAwOc@A?oI9@@6j<n(BN4Gb
z|KfY9cstH%_App2OZ-kL6&Y=Ejtf(on98Z*LlG63%Rm?v)6*xl-}k&$hU&Wb(Z%|8
zbYFLk6f4V0)g&){I4DAET2>V2a?4suNYOaonEtRgpwgsTHGDZ3T4`3(!YA-Ogs?QP
zX-B$TP)hQm4(CilSlSnKUXRWJboX|1_69ChQ|+IRQ`a_ABDG;2bUtEb4KYdv1cP<5
zCIlm!^A4DDwlPcFDY`Yn;7_ECI(p~cf35I?4TU`z+j|!d&oz9<NjIjL%6Ee$S!Mk*
zv&_yV+U)$9xWB8vMnnHVX1HD8^Xt|bA`?Ygbj|E1Q~s#?rHvist2OAYOz6bN(BLbV
z%YvwQ*(AV^OMHBMBnc=zE}P@~{un!bIxC{&q@fb2`khO>#$D1#P0622jJn+Xl-;&Z
z{rX=(Ctb-RwEI5*09;)F095~1uF}!Tz?0@5)k%+)`TxjPUTJ%|ZH%`5V)KrmEaD+Q
zCL*x1yLg4mAkVhM(Crm#NL)Zz&`X90lNcPba^!vA@GOWIp|8bu-Ef@hsz#Q0T&*{~
z+Py$maP20HPP$+z4Oz-xhEi7;p}CDW^mIE#Uv`Kcl`d5dtny||Q()3ou;Aq-LXZ6j
zv&22A?rgbkah_+8V(x>aMVCwEU{|h2aq*uo&6gi5=2TPXa1JAfr~9I>kBlnP*DF^b
zKdk5`gm{WkZxU0b0b$zNwi}zKC(pNtrr|MA7p_N@Sd^!VPSotrU|#!6@(U@^7|QXW
zf>qIbdw?hJVSzJhmIWRDytmJ7YI_|6Fl^iNjHTCd4~3q?De$DTzIK;*t(kA_?5x<V
z`Cn$bY<AebIbjXxUO3qqphb=3kbU<*$h{dH5rN)XqAE9P{{fyVB7I_)+EiFSxs|zz
z=n!J&;LXH|Ewv+f9o~vDhas#iAr?mz2K287g-gEJO31jT-l~j~^GEt=QPYjy8eECV
zC}4<Ci@1>I4u&3j+?%Jy{T!X&AIz%Cjnmp>zSbJ*1mo7~3`o*ur63XO86w-dTJ*u_
zFq63N7|wO*uxOQ?Fg*6mcX2g$7`j;MEx5Y-aF=leX9b$oU2a1ll@|>xw5H}EWLMW^
zQZW+9;gm@DjADb%LW&<?gSK2zBk<q)<{dHZNI@PyZ*A3-pHkw8$M#pi2IJ88<+;G9
zJQu})iLpL0O~|fa7Ryyj*h2Pcr<|=Aa1G_EUjh~RyYI4brQymPxxWY?lzaqNd}D|9
zh3}-Q6ln@@WQS~dJ}-Gc9Q1_NDi%>^m=CNw58x$gI!_pHgynLb;T9E^u?guW!NLqj
zzs>)+pRZBx4ZPopY4}5B{5pI@S_fvti1)+jv55T)sjU|sS_e+{jr?#xgPAS&QFi3c
z-iZ<GnKW>hoh;eI5KWmPe)|RT<CR6Q`ul9SgdaCyFAQdeUIv^G94yxJIFZi>R_5yK
z?dieD?x*pGj+X4mn;o#uk2Sr&exe>~`swg!fqDE6-EjpUw=ZyWCu-na{~@*EVM^aI
z7Wx;6>UCViju{h2FZV^1!4W;J9yy%ezKSg9{@%jQeub|BSgRlEyzeGYZv0K<_KDf(
zbVxzcb!_Ny!W;k_Gj{Yy1iy8`%VFbH17IQ>M)dm-(w4K66YMY0VVMeJ?-@S)onX8U
ze(NT7PtAcLzxUSftrP}q(YVBI^(&HVUzbSWfvMQg;grHJ3>&B*_P;}@99YtnL|!)z
zoLqY3==WbMh|bZuiF5mDVK0swHG>9;I!f#GBw)-Td2>Gp4m^5`qIA)sDd=SRkZ!DA
zKun-Z9s;MqC7?hd1%Jb^qPBJbvam+OjjBYpx{rB2K^ppq7kOo)_^W$i9I(s4e6m0Y
zkek_0IyrE<&(kp<95!K3JFr7vP-PyB!})-@@hm)hhY65CePG^iDS+N~4PSyv7!>0>
z=<}RzyuH%E2!Nt{0)KquoBJw$F-YvYC$pD|pmk(VAsL85++BkTU!?o;a?pvGQ+*%3
z+H&AhFSSaf4n-4Zy{t;vpD6{MsosFtNuG&)@m;bf92;Br_|xisl0N6F<wnU_n3;xw
zbgLy71~z|}*wfL461-hB&LvA>I6mN2g@9aof1Dw7m&&6Q%jqRbd<XcOBdCt%{vh_+
z{p|uLLliuUuCkS@@Y!-9LgLRC1eA%MB;I%jo_U*;<PWC15U@zQX`W*MM}DkP`f07a
zfHD>pG8s6&@8^Y9{q}*;v`XrRpl&!r`k{x5&`J*Kx}aon%ki2U(wid;x4KIlYZpZ<
zItpQ51izZpqYwujE<Kvk@Ynm(6ewt&v<nKyH_WF`AL&{aKh{lI^g`O<A|r-Wm1vb}
z{%H^bzIyuP=s(ukTfvr2Q>@pQT|y9kwi8m83S<aNwC#0i)Q>@j3kfBfVzz*tcf3^P
z?yHeDF9w<6&^b=8@Zld0T=aKq9a^3*Ek(4a2v<)vRzrm-$HGTLsme+Z?9d%bj>-<=
zlDD*;Nr!6qAgTBBod^p^Hno~)I9#Y}?M|?2$+#rB2(y*+-82&|75j2YnT><CXag(e
z)>atH$X@4|(1-9xyhLnRulBUWK&y^Q=lKsSIp0-2A=EO<Miqt?nGHiQ`5@&k-Rca6
zhUR@rbq<E@{CBaa#J;Rg#2woSe*SAq9G$uftDgoHowa`NN2CC2UQA;Pk+ADg0UQ77
z*9cTY;xT8?lFYQz9SBuDdcr0!kgTL#2nb({tZHFR0UP*@GTe;Q-Vq`4)i!WUt1?Ap
zggJw6weM;jYyf>p#W8+lDoPuxeFENLhiH^?Ewomb0I~WOxmXdb<ekQc3Ci2l?!eXG
zKs2%#x{Nr0at5gDU)e!Gpw8Pa0=wn|25IR3c_LrSPuS)`DKKi1+_C|~0%r$ei3M~K
zlP+dDwL!BA)}j63=hHze#s^Jt8k0dujfen%dq4SS4g76~c#V(_#SqDp(OA;~#>rr6
zj?$*f#ggj3K~5%W11kF`01d|J2^$D2;ogy46mVJNUCqNkLK;kE5#wrahjh|tOHXui
zp7v(%eoh{Y05pNy%s{;$dCIVlGX7<n$U%dqRdg`Q<<kO<mnf`Fp?DwB$c*k~=Tl9U
zd<(ZFaXF!{9*a7I8T`;=N93vzC=T-X6>I!~tnAa#dh4~uR93s@D1CQfwm7#?-25$R
z?$@PQA@J3$+n?r<P@%jOFFytMr*yG<Uyn{+=U)v?GCRM)UHmPPxvY>}C959=DfU{1
zNpbbPz_U1f_j+eKNkV2g`e*-LY{hol!+c|bkN*H<)U1sF24NR$lFg{DS+z8Lrd;eO
zE^hgNVZ*CKmA0)t<(kn!{Z;*{fO_f1`==GNT(|ezo4agONuVC3<VW}eB?b=52@D05
zq8`9zJVIN2r{Ug?hz|!(z<)7?T6{$7lE<XTe|h!rq~=<wJRXQnV7NVYKCP=U&8mIq
zVF+eWz}fqbi1660PCY0647LTwL3Fc~E}(=7&^H{Zy=FK)Zp(a=SA5^QQy$L;iSHro
ze(R*VlneQ)XAq$^w4oN8IVWNNCjn)|ZRH^7g0^>$uy0!p>u4%1oLdXgb1DYPacekL
z#Hj7(YWs8a^A(@+*4N1IbrM!xkS)8Y@u|CAYSOBn?5SM&2YI9S!?$E~<3g%w*jO(M
zv`8HE%E?l;XUE^~4H}?&XH7Z)aUNDuGSl*V2Dqt$aQld44FFGA+P|`d?#QR&YqRcF
z>Mad6U`n2L{zPie2eOn0TTWJg;V;u05E1!6-0{!*C0|@zU*ZOKi)I%gOU#n>!u+|+
zP#}|trIl@Hf35J$gB+hYepCn$)XVXE34Lf+{I;88&F8+)w+`~pm5Ti4h@i&uGYh#_
z8}+v{$?7qh`C--Egq!a!JRb<<XjOY4O)|kE<--<so=;3B6@9llKiLoBE#y^j!?<Yn
z&>Hyt9~S(<RidoA5J&=)w?VIfid8~BUgDns@p_=Y8eqhM3&S=yH$UEQS*DdM&uNQ`
zt7fRZ$8^tTN~lrh^_ja3pS7S?gNa=X6x283m?wJ%$rE@KZCHv;8g{&NSMjPkmETL1
zY=p?cQ>405G6@>#uZxH<5X_xX?Ny151_GXHVDM@K3MIF=+y3S-Kb-@+=Z(q(p#2en
za(_bclY}ze8OVP$Kw`ZmqY)M=Qfo|GU}WPvi6;Dsc52q~XMPv|N?r9Ep?3Q|9mc7t
zsm(>X#MSl~Ho)!Hs~fog<qPBApOn{XETyfZ&A;4eE+gGo=c^@P?R4bhqQA72Fp^n*
z^~<ZFjtNn_Hq>DmfJW1FRKRfxzi|p1zs72ZwI8k>`*vctY+#JiPuunY9BzoEP1`Ra
z5lgE%Q;eY995DnWikS;}HIcZvnvhKK7fv1dpt!SVX?gAvny>SD?C1{`kM|}-;=*uM
zZGs!UDr~1>m(&B7$tjmPwkd}Knz}wvOd%R)B{km_CKlueWgh~$$-I<BmRAAI{nMik
z@M%_xS|3INt4@PaBH*8rJ=LD4bnSL>kd7{7w84eR8tX@c#`{<Bd#N?8Jjf-IW$$#+
z5Hp4xY6BV@9=Oz}Sw*4NyNZixD4-o>(2Va98YJ++uu%lEM!JviN=ZYHtUc|8iDVMe
zIf@Xl7?d#@!a1m+u`vJuPgZ3W0e)tWH;)L;v`OoMG*L0IxH+O2Wm+{eOMDVC@!t$1
zSw_f6yfKwPV@rfFRr>Z$F$}jEL*gW9q9nUl=Pc=}Z2V9Y_WT)rFhKKm$HZ)7IEMVc
zw&6>CU;EwXu*>~B5dS51AYhP3R2MkOgg^h<Lx7gp&!BI%1_(cE{9_K_g1=a$WDZXG
z<>hI&d`>t$<hR0a&N*l4woa9j9s6mJ=80Kk51a5>inD=#W~3%}8;z+>?X7hipJ}8h
zIl{~y6DQlK*U=n2@|HIumJ6FmAeo4uaDS;o4;yxiEe+5C^-P+MBH@?bDi#m!L_kJd
z$FNB#9JEW48C004eff#U+NDJP3im5O|GR}#VVBb=!+58<;Wxc0mTPb~?h5I4I)B`n
z;R3?eiA;^}B|YO6X?U&|DlsAc5|E;V=Tg>W9c-hPXiqh+)j}e$okSpW8lG_26ILbu
zjNW=ww_FD|!CquQdG|+27jLhwnQ}v_ayvW(^&@dO4H|o3l9Vt6G>DR_NMYA?WP}pO
zt)s7>fR)l5S!)23CWFJE2CAQSNn#R5?eVzqk1(U)1AFX{jbH~lErqa3a*;{0=7YKA
zV0GQhB-}%#wH|ai-&7B|RGesTkc3;qI|@q--<)*Dxtma0r5XL6TzT$_cy0oI@i)$L
z!Z6gWZ8Xg&5x)jGO5vx$CfJn}<i$K}Jrt8YCn1E7YJPq6h9VVjf*Fq5o0UTZs*vLF
z+`;&@Yt*8M-1Z_0BW_IsqGtM=15lSk4ZJOp-dTLm#?TGwUJ-88RbfY3ke0FbhcOo8
zp>rU#Ym+H1IUr(ymhYB-`j!fEegFvkA=G+U-ArFLSj`s>6M|c<8=Gl3W|UZjQIf{{
zv=|B^>Fr!<WBA&^464~-uer^HeSN~6F&)-n-qZwRHswhTyd}p}RDN?`6_V*Mwxx-M
zp1iYfCw_Tl3i`-H`=Re~Xv;OkkBmUM=z4cL;<$iz8vdHa-wlNIqhQwkcKv~)cGdnd
z<WT-?<ygRJahX3$;3KEjix=Yw-n~JQ06F9uZ=Vs##1a+d(gPPHV>0tsyAe0V$Se+<
z(@f>*pnI6gS9f>v^tRfWf<^J^VljdjI4p%z%gT$?+BzXE24M$G)84nA|1v71`TrUX
z_^d9O55GQRa@c>X8@ljM^H@SXqb-O~?5TAjK&NA(xpG8%Lphp`a<`V3oRnvxP%{iu
z7U(VXpVbQPH2?TAuwr0-j{`J2SKe#dG~7*m2$kO$zOzw^Ch;{{4X9JRDi2LlgVnJq
z2Z@;W>d~ReRLg8OY0NaM@KA!&e(O@KWL1-(uVtu<3B>Iwtu`ccH-72cvHR$*<lzo9
zH0)>1MW0>+fvpG{BSoVYG0QN6BWfv%v*YzZhDSg!De3<6tT)eVTS>Nb?4<2mtqj)r
zyk#D!RYB^>>_flo*Ud{b6p^eaBuTY4re%jpDQY(+H5qS7Ll#8U8xIH3c|Z&qaPI6U
zkqf-hhRS0WAhn8^?C>Wg|1Em^lmh_u!DT>Ft}Z-@#pekZQ8S31(_%Xkr3U<@5e#9|
znWr%ZkV7@Z;{uDY|0`p;D)<j|D>b<&5WKc${7wq5dh`ku=wX~2u*dCsOwv`uT<oM~
z`$ttZQLDtE-R0Z|F?Xys(YVbA|9l5{zr)L#jDHDI<KPuXP{BPN69kPBSQYTPLw_}J
zo;{QgaNCfa0_Vr{!CdmdBKo38+dDG!;i52CKEClE{tYFkZ(E&*MTM8f`Y*H(#zmJz
zk8uC>s6&=$PimmTBrDZ>xm-;(iK?sseZa>outJ_`TaJEP6YSF~^QDK@RWXbi&SL^$
z3{=88gNLc`uRL_#!;*sYY(2T>bMoI)2CquXjL;seLERmIPxTZgon`3*-YJkt5B>JI
zky+*dj<shS{#K5p!933!D<7_ilp%SFnDV8;?PASLNNEPG@jq>S_!rdGA0}w8jnS14
z>i#W>07^jq5tb6b)wo=+4Oj-1!s(QdwhT$U+7Gghp@St`MOR&Aw!OVdu4F?+M^xM$
z_Nku|=GvWZ&gqq;yoy8D|Jt&a$U|?j2S=4TXf<M_RCaHSV0$SDJnh>nc<BiqaBW<>
zG0zlaDOG(N)Bl;~uSw<XlBnF2WD&p(s(W4Q9yUs^Bz??XmnWlVuY;K$k+;=#XmpN0
zcAv(sujp0Q1VzUy9Co|%IN=g*W0tpAIqtq^;Jl?`XzgAr5ESKMt7am8q`dtP3QRil
zQLD&*Bv3THw`n*A?k0rtAh%AD@?>bWx{Y7$G_Ihja(?x$y_8$v)59%2!m3|hSrqP|
zeMj%|lDCmlP|@D3s#SEtxL`H21gX@lV*rEN9ATC)Lfxstq+$kW%uT?;TA-pL`WiuG
z_Jg{eEz)0}Bk|Cn;hrO1R^N#4#T|Rlyv)~kd)^3II;&I5{x&VWdWK`=707Z6=D71?
z<r&Cw6Tr%7;m3zEg!%0^&GGa8ga5lmuzG)S2xtCAGiT!LJk<S^Gilybk7fICL14kx
zk5m_5bQ*uuz6aRJQsXwwo_X9IIf#nz4U7M3W$w{@Jp0k|+n4+cJUBZ-wGKUJ5<SM@
zKHmf#zhj(Z;&)*h?!R+S*}tJTP%X{tIt4)pTd10;H8+)-x;vb&j~Z{=%eTj!wY4hV
zcB&Kh2HjH5CZ8O&(Q!VCX)g@&pS8aq>vJ>D%^qvj-Y_6J+(4kF6>IbTs1;Iam=LLH
z5eBTc?EQH|jhysJ^Z&x(d=n>$G>5rqTyTehDST<{-eqGay<1xGG_7h;8dKNC+VX*p
z1@V3mlYA-y!5OHqT8hoK-CK2F0UNbV94_!l={j9ISMj;uQFq_{`{0o&vxejsEMNY2
z376iC^UGUM9n?#VsrLo{cwt4Y*re2FD(AjrFS<U~jCoQ9LGIPB1OQ@$r6twN!KI*!
zAK4<;3laAxzC*le4{gi+@xK2^4v{czJQhAnURn%3>f6TV)EllZ<cgLVw;we&e$~JT
zUav)GaDTY(3UmU!y|{HA_<r!pSbySPW&6RvVoiFAoN+V{d1$x9=UirQSsXF+MoD=O
zRqK?3*PcsIZ0bBA;b$t|FfheNB)u|PsO0(a#^8J^z4Gjyz8*#ugpn4Z(%&^;18c4a
zLk0Fu6bNz))lG}kmqjZ4U})-w^uw$IejEd-_RD$^*%*tGQSu6gYkldZCD^fGG1nUT
z{Uz5$qhFTCuzr%0QpADOz%lGai@zt?k;l52aWnPW(3?ZMCPQcHF@-ot!sXpEQFwSm
z#b7a(qnGIsWw?d@RL=x@W<y*)+`Oas1<S&FE$1;IUful}VmJ4<b|;G7PnTI8DEQwm
zrnDnsecc&S4Bt1V2EY;_z&5}m)vIh7CdkON#M~p`>KdZWqI5W7f5ko&n#ynKZ}{gm
zO+DkwiT4EyV~gPtJzF^u4X#w_h@!V|M1u!5zr*R(ok@Hje@)~PO)}cj8>WHR3_=yz
zC`XEQq6>VIGEgkR4uCl5h@C}J@eD+a?4a!QZu~a7UQS38iGSLjC|V5@2MGdR2rW#2
z)Ig>MQl?6yC2A?PgYm4^qNvZC1Cc5udA&-#ba~=@*3zM8Inp|lyh_bX&CEPKJN>q?
zU(OKfNKGwB9D?wKjMCMThL{uE1=122W~(4Au_U(gr`9k|mq|EcNNnd#45J?{4L*G8
zis>#J>|m7eL2D|T{B1}b&>-AG*uj&V0&{_nKkbL_Gm=4~FkAivVL&No3Pgk4jS-9j
zjT<2#2kg;@`vC3(6t+?$fyb~4Dx%)J8Uvr$)eoasXCG_I&V_(&YX{K&&68R(vp=j1
zp@}EPL)FkHGxpj-=baNU$~g7K;Xs8F7QQWC%G&^d_4sLKLEAPD2BOj??_9TJLE5%v
zZOu$+bQKHPOqPU44wzp_$8Xy2-L|)OA{+k0o1By*8B`$*e<T=9VDFu)wD;D<wO!DC
zhEaJ~E9thiO&QlVd5D@K20XSe^h{9Ltroi8_#$q34FR-=g}Kn5Lf*O-?`=>geZU@1
zzpx}J1OQuHatkTevUbJTAtKiA6)hcML>}WSQECt<S!GGEfzzM75NAoGZy97ejfV?}
znMEY~LhDjOxsQ1^B=&Z}X`UhR%HycaOdVo^Y`}R)rrMibFj6)GuPVyaQkPTUd(Uc<
zd<Y?ak};)5RD_kGI!tMFG;Rr$3Pg-;K|CyFdNeG$^C#QdEdpZt(`QIr_2Q%@8N6>+
zwX%@|E32yh{fQ;7^JH<wdooi_tqa6(Qenh4XUM+5;sh6@Pd^P3@_cy&I5t@}XMvC+
zhogjoB8RJlSTU2M#E|0tz^RR$WW->OCeGaBEOo4z+i?n66R+!7JHQ+=jv~<qnMUSh
zw@gpBlh^9|aq`pV<2<Er>$Yyyg0n2j?x>#5G`@E2wjs?VM*F4l;rZ?AUKEV?2;fHt
zR4VCP@|DR?#d35_0^)4!yilfxtlUfwtpiMkNTe1Qddl<#VD2l&vurq7C4Xy;_{xo&
zyiE&1D+N$!nyO8|SsOW&oR7Xt;}W~Ayk!&$D(51rrl6b+15*4&rC{$WWfz%2{K{sE
zM>aZ7p701&8koFDjFso;X{}T&J9q6Veesi(Xa6Zc=GN&$e%_9nQ4W{ynbMzAmIjv}
zcc2!DKgne^=Q}3$^E~a|GUFZ2OII-Nqxh=)RHct&2geI>%rhvd`CxjQ5=AO;)QfJ-
zSQ@NJto456Cuv7~wrdA6OJ1%VU9$3GD^Ihs^BgJ$C$v|&Ysa{K$GK%ExKXhtk)SRY
z@QgtDkXH6=v?gml=98rW`_)g74d@6$N5n*>&uS?y`~>)RMIj8MA%c}86(d~j7U&(y
zho3p75<msSJWUa?oV$8zf3q0+7O^}Itkz<_iJ(P%5YZH|gLs<AQ7m2LD3(5I9M=FX
zfoqWcepJ$j;rW?SPh3Un0GfjOh{tRD2FvQY;TPQc(RTx{U+PLSXwMnf8Th>F0C^Om
zUUAI^j8CEP64+)GF2JId0#0-N)cVon6H&k9fa!P*>k7)bc4ODopLh@xgNuN4vAe5N
z{p4~Pjigw2TlN^Z6XHGk<V>7(+PoWpN)kLu7qGr2AcMfK-iEzkG-}z>#?x-PF^Kh9
zi|S9>Q~fmW-rW*^A6T_P^A~nLOXic?jD3u#4rR9}!3eg`y2xy52?y57KrZO9JyshB
z<*1c5ALS_aQDKB~>?QU9AJ)tU%OM}uvj+=6_;iEDk>g`3zo6ww9~{cTKrqH#+%z#v
zIDxClYEbPj{cl^w(kxlL+is2Uj*cWr&_cuMW@_t>!4<5#77-?y-?_++Vm;Umyd_bU
zo64YOxzJNRe_vWdc(eUVdVoZS(9%J7w3sqi%eMw&H?6|?c5{Y}dgyM?IVUDlj#H6d
z($m-tqvGs9M`nrtG~G<4{65R^HP>kiQUN+8W-iDf1X~r$^Xk6Y_3E3(HLXwVisNbJ
zjE$$7&pK7JREs>V5=cG@kU!BS_Q+sKC5gtAePt)3jT+68D{n>X<7MikZ83-jKj=EQ
znWI!z-9EenNA5NMuuP;MQif@GqklN#+gZUAQB%g=LUhF%%YrmqZ2^1IGA!=nXU|#q
zBSPPvs7k+blBhDSPHpQOi2MHX2|tzq;k$hLyd?36tvb5$_k1OM3kh%wH+kr|DFh2}
zizIpInrS#QaEm&5=&)({zZp~V(B7GNbFeaL9}LN?t&-3@%fzL@;|F>alMZf}XJuM=
zA&%s!q4^!8g*e5!kLDuZPg82+I&wv?)p!xfE%y+_x7c#okrENM^y-wi056Z4?)?)*
zyd7$r;z9PvUE%5^F76&t<b<IlYj;8AWS;m?V0CmkRG|`s0aQTlHU;H>Ll0MEq)6zt
zpZ3A<oURh6s=HkMx-%PTYQ`pg`rl|-ld#oJm)^T+#zyCG5)w4+_5`2vHl#ppLBkbR
z(r&x>+woXu-Q<WG59hYdx*(L9>1b?QoOqV(oniMl0fdg=J%9%wyN-h_C5;9R2<6`%
z4%oM;0x&+(<=-0d*hDEE67FXMe_z-WK~bWETPzq--%9Tuu(gy;Sd|)FE?-eL1Mmmq
zGPyXtku$PpMflQLD9{dL6&xAq4u8tkG_>UHP=UKQ85@=6PNm<^0xgoTx<8A|MLrGr
zlMNoT9pvM;G2Bm>HDDT1-LHchxKrmAK9P2}$%PQm(1g-tAzzymD&NP)s+rLnOjV$c
zy8Va}x{EOxl&@BywfP6VYyX!GW^@}u@AW*RQGaO48US_C@S5_li|&=@FD?JmNEg92
z`h6g1Z#p{lok)*<0NqUpx;v3xz5j4;a)k<)Slvd-{vtio^3S1vm=FkGJ`hR&8BlKO
z>~B3jPWxSp^$tLrDwqP<opav;3fzXQNesdmcz=Uabo=n4B;ATBa~W9^i1I}%Y-ca#
zVqN3JWx#k??47J7EK(|K&Rj$m@Vk2Z;A~jI<AbDj8J$fHxPCe5T*gYGvJa<>-gj{&
zv(NHA1AOcbPA`sJ6a2g5)x!nJR(+C^xLuk6=S_r}5qe%J;O8zbwFr0Y!A(vO7y#t6
zVeVkpp9dGY6_I{onPXdfjZjJ#_qC?AQ1NCB<npR_<nML(EItuK+`bFG*7y5}i?`3p
z-{F(7B&rG<e%Sn5W(1;^(tv>3tQ%$o!j@V<mcW8V{^+Gluu@A93NPcgG0PD2<(9%w
zhKII=u|lMBBC&tWRiR`mQ-W6;py5rBa5YJPbqC6bdaY0ShZEYpvUoDL0NQ#dvPvK_
zk3!mtx!m&0l`^>{7wjXsr4(!u`K6Q?n8+vdpY2mxdXz-c3vr3Up~gG)jO>+&XjltC
z*vJ@j0ZAxBO@1K*WKDhHftMI0EC4QgN%OPIdGZ2*x(WrsAssPM$X{LNUZ{#@_gGlv
zQ+c_`RHwL9;|kAQd&P=52?KilO5ALWd;=QQDR>(8nZSDF$-W}EF3oyBNP%IH`+d1N
zIK8|cP7XXizvq+Zi7d4{t~ZGIPiy3@<&m<mIa%2}@K;u8B`+^$$1mc=&pEcFsOrTX
ztCrjxoIKngXSA)Xn$%6}wrhSXxw+gPZf@MFMh`e}at$&9MGddG_u~K^sQQ7iFQfoB
z5bG<3(Duf@0>C$;;h%atglgSZjYcXN-v+!qTXeq}woSRDk<CAsmbA<}MA%VeRSPaI
zG`P1w;tKapxq3n<FhAVCs6hsMT!)Z)f4(-r0F55jJ))a~&mj$8Co1l$T8P?Bk~)>-
zwzXNOD-XEN?3s6U0sLI@x;xXo$A1_p7<Hj-|2Ar3Tv*b*7jx%XlNIu)KN*BSdtyXM
zR_e<W2Yc;`(4#2tqiV3U?gTA+)bCUyNa0hHE?Nf=;(ql~56Pbse{}?(r%@zHNqe-b
z(~OC{C>$joJg&uAo+`+ADn3&ij5LM&`-{TgA2sNFr%9aP@;!+LktjEF(>;t8R{8Ir
z&tioSXEe0*Xxofksfr5y{dRcI-jG?K4QEgR(gK7^2VgW+JGwTm;s~_IvFC&&Y|eU0
zdgA8I+jpiui3^lz1%vH+L+xWb#7^Q5b#>_jQWY3vS4IJce3OqAM8YcM_8<ut=2#JL
zpTL(0O+K$hCXMj@SGh#hS|uZ@TaJSSQ;ZDf>9V{!Jct~C+0fYOjnMoltgx+r#8k*a
z9$D0R0oi~kBC)+TKz>ra2uz`R^fkf4ud9$S<x6TU`ROu5xrEaYg9f+Ic~SYyQN>%G
zr5F*wZ&jY`;6wzKcVAhyZr!q<hi^B5mNJjxH?@q{n8gn6asz5_ST}nciTsZ)2e;S5
z|7+O!R<>c<1=rSnD`0N82DyXxYx8w*b{=<lm?jsOhmV_ku}<gcji8Z%`=C3qqoksw
zz;qK2ZkG7`9No>Y>q1gV+IRttNaH!q-dld2yxhSu!j(nN;ym<a{hs92t}kMXa*Rr>
zcwfIJTN>4^FL(fI4m~_gIa6ZTZ%M~=tz{WrXwJ`C$ea;Llwuz{)5n|{No1dj-^atb
zfllc8`ZWobHb{x8Q*MY1k9ap{3U~5H&v$aiIBDjpNExjJsekF2r5x;vPf=s959ygo
zwU6lCs#CSk^#Q$-@(nsQg%ux(=S)EDcfi#>VZX|TM}2Nz2BHK4>A{9~sN%5UVxX+i
zyrE!vBjo+T+ay($CB}WAvGiK7$s*RV+*%XYPesR_ibE$Msku|iB&+6XQETd28Qas!
z6Llag#mDoaohMRK<$GDy@;ms#Dn>Jws}pC@b;3|F^%$}3FoJg+DlKOae4k*t+sGHY
z)`ZHJ&#UX8zCBb&Cmg=QW%~Am`F64)i|r!Ox3J_;4ILZa-(8WG0f<;eu8hP@@Q|S#
z1|%)RHAgQ0Fy_GK1x~w91RmxH(lf$CSIkfwY><PKQFI~fUPC?UudKf*kij2$f-sJD
ze#PrU)^x=|VaKAvMWfi~Fxtg<`ULAB#6gO9i#<kI2qoe4{2!Ez4_c)>`jB7>MZBD0
z6G;f<j2;B*dt&2Aol<qC7zlVEka#jj52BeQBs}{Bm;^Fs55XBG5<1-O`6uKCFgdwL
z7>GG}SH#K;WV{*xeJpyR1&koDn7w<yz=Qp+SGV7vIJaBB-nQSH@1d(lW5g{;eBW_e
zyq480?+)1di=r3n2Fk|0nf1q{HnX^mU(o+az+f(*jUz?}0DuVmf8YuK+qA-NZ|&kl
ztE8d~2>`s6RHCjcRj%&h4h;YZas~_l@Skw4{rL}1nD~?NK{fi%)n?p#M?_=MqAPZ3
z?R?tOqnf>BOIZR07%vP01OXsfcx(Ina+wRB3ye@qzPTPrRmI|;ah`iq*Jlf(dDGQ;
zNS5=>&P;syB63D^=)3iYk5l0aj91~~<3~3yuEX>9VhFT@hcHd8E*$fZn}D+rDb>Sd
zo7$1jUd?pYUh3Bb%n<q8l=E`iNokvZ$VbED>32`hz&#!Z=_%J+(4{uWKBc4CV=y@x
z85xgDdGt8EQ&=}N?(f9~tOq`5AE&CIE=`gL0B5{ft{CrLaJsj>Az7!(6)$zLRgVMB
zSR8H^wa;dRc%s&*QQSD;&ekdLYurch7n6EoNC%N`e7wok9_PeX%*4_&&cT+JY&ya!
znQA=*&*~FR*jC3xHtlTMew2EtT%d&EpgwYF7?m~@tv!j()y(n8Wt&>vNDsTZXnp4O
zsKk+MD&z-6czDKMw?|^|{kguqo7*b9KD@)#bC5Z!eiE2B*SAOGo$Falz}*eJIpCXJ
z15s4J>j4Ps5fh8R6p8pXmg6hVXe{wlYPn2leUk_RN4>|}<zR6a3)uitbQTWcVw(UC
ztv(VL)F9s4Sy7rW=@2Cli=*INb2cb{dabEQ6+I*vGX75&>!HZ*;CcS_0&tu+IB{x$
z4XLa&KTClc;!KdAQZ)QY0TTko#~6|;^yCOnpV`MfZY)aN$I<5=oLiheKwR%|SKY@E
z8OZQ*$W9-=whqSkrxI&{kw&o_{5?CL8KQ(I+WzDM`}HG#4^a<4H$*%ATaajhdX`42
zx?`vnZMD5eukho%39B|5^`Y$Fmo|T?#b-muGtyzWenopfQ1RTXJ9E>)7JRbOQ;rt}
zfuBn(hhHguS%)#;%?@1Y>jC-NDZbQN7vR*^ZE}qSE(oFe8<fF#Q3xkeb3nHH4JWb$
z%$g5xM)@Hc`ApckX%aqw1S`)3BcMD$+p-&L%mMo5Q{!__$UHv?0_+#L56WQM>7fmH
z&wL_C!D0T+%d+7{rv7^_!T@t^c3`Nfe;7<3URNoC{-qF)!(z&(&mdpEE<aH}q<;6t
z(PAbt!UU@%eW?AF<|-0(O{c`D@)#9=^7jNAB(^KkemMQ_v?DU-g_ujFKcumc*+8~}
zt0e|U?z-qtUT8_<AZ|eDM19jlP7U_om?lK<W&loaA<LgW0TEK!HiI($*HDhya(Ax(
zO4tH0VrBeXvJX>fJKTR0{=oDK<8Y>0d4}U`mMG8v>Fu!B@9F9|Ou{C65P*ll_|*Wy
zYNQ5nMlQ87r_5-NFVL?7yg8Z$^^bYN+X5lV0z3w;L-4}f@0FIUo%Ink?9XSJyPuJJ
zM16OGES*F-Nj2W`XaUK%Vr4tv5-+WVzYvQ(C8)Ns_c9a>_s1y$>utM8YU4LsN78=P
z(q-~@6GSv9MSpAJeMe(W;*C2cz2o3N#<1pQ@LSRQ8dS3%I7%+3m>FZ{ATU$BdGSvo
zPF1i8W9)E(Cp=ng5F3o!9Xz?w&)b_}7uOkNm05JMr4w<WdxtXTT;u9IOLUhd66XS%
zQ)ql+N$)1%6CQ93#2LzmzyLM^R~qPV>yIPlMNcwdaziN<e-dJyDOfpb0kQ=m@mFsU
zO=O2ICyXDWSC;-nn>U}u0TFA3ULzk0yB&4_jLVcX7}7^aK3y63AXJ|{p;qnpQGx)T
zCxAIv6S1in@Zm?%J7CLQiglc?%uhg-5wW0~(93{ipphpS<tMLIR~rUUjR*4YMhWaH
zwGnI2FbW?z%qCE>MkQZ$mGug1-fNQf=cNPMgMS8-lnKI&YKADX#{~L-3pBVTpeL`u
zpHAKxkOo&Bu+OA5VAc}>DVtH+WYP@a9~Q8dHYm0$&|qg77Wd&@Lyv@xhp;M%a32|D
z&l$L!e@a|-R;O=B4oMIY@%QvbG)ZRyBqbMb>V=(rX}A+DO0ORQ2?F+K2(b}je8}11
zjj8qNh3aQ<03?DjtUs`mLN|7hC-8SbHcyu7zglQoCw77g0OLluGpSz-p#jr(?%&4+
zaWd3oGlo*0GJMErV!y^cjvznAx#0>x5ZGA<NdHXyLJvG1ZLy&zt`^<_mWit12yIAJ
z07=N=j1HLZVCnf&hiE`0FT}2kU>MF+T1P1|F@6H-f4Nloyemy?IGZmk)<YW~Vt(%g
zBg#>#EG^}(S1#-UB^Y%AG!Htd=^od}4?(3xA(o*8PQ3L@V+T339jr=2RCJW0RZz9<
zs35V;%7Td7jUqKpjnMUG6~Amkx&@yf4~TjKjeHQR{W0u7!EJ%d1gN!LV3WW%@n;oK
zd<Af*_?AxN9Y)SyZ=Yte&_cUdTj9@LWC$=e^_>DHT=V|j?XI7pYA{8iE&}t!#Y#2I
z4WU{pW&Wod*q8pv6*vAX%CkTGN&%4-PBj+KOny;L2I^~aZy*z;$~{-jqDL(zPfo0f
z*TnVV1r#fzXFso`<zE??lC1LRqeG~RLwe<oa;A?P73u9bx^(d?6o=N1J3s{H@`h|f
z(E3|_!Pg0q%zDRLBxgK+uM5#LQ);b=-5uZH0eO3|@HBuI=;ly6k#u|Hu*6JtqS%}f
z5M*<PeL)nLhuc{EY^{F~e`y&Y)!IX!627Y^e%@gP)!gg`GAM3=?H&S%0N_IZ1-hy?
zxVSibl<0oPtR4~B0APv6Cj$gMfsj+^MbldvCE?ENnm6uyB8b#RV5<zv*a2I>n1b?6
zWL}Kr{^Urz3Je-^@%&_rP+%Uh8y@uXfwc-Rc#Hslz$R*SZP-)?=K5+3-M?hOR50)6
zxN2Yp2>pDy^M&V}HJOqxBw>*b{jKNHWwZz}c?8IA{@*zm0I?T=*hX=9S^ZYpAj-P)
z?_j!s53Er*^(n|vTJjZOh+a{mzeX1g1(RHdu|Pp?!k7`~shz;@&^f?-w&ZEs^!C||
zGY~r0|LnryU+_EUAo~Vy-tNw!5wG>Dk8^WjV#YwX#?lNg+8U4AI*-~_et5imt8>A&
zzhQnIM_d7sgMr53s>5kA?Z{gOiAX`WC+_M_XMT@%HH{g{m&!Z^Vx-A$r#*@0nkYfJ
zzC|wcQVF~D-;)4aemAA@;013>IUBRd-Cn;R*UQUUm$$ULdOF>nULMawm+*JdW)*z*
z#F+z2u!rs~;h&Fuw>%-^4rR`u;;tCxFZ<8W%VTY~eBE8W>_ofXNnJCs*m3~5#{OlZ
zvlo~I+^qXKLh-wh%Kgo6Vo(qCwgP;DAB7kfIMYivi))efKU6&Pjo@+}OS5kHy5Hab
z7CY|Kb@QBzfco$Rl>z*VzPkE{M<FEvuFWKpR`lcW5+Xw5=gW9lMwZ>LF&;&GO45RS
zj=zarV@IGvn&&H-M&x!NuBXTMYF@LsX?M(R;`>HPbI&D@^R@pte!H-T7f;BQ^K+pn
z%tw6?MDm_16Ur~gV*tb)E0i{MhvjaF1?Am!+U4uz`gx4)cIT(&;fo%s%XIBIE$U`l
z!QhC2n}Zb-U(iNae_X?$e;adK-D702M;0d|Cy4(VZ#q=x?ROR#DJb{#4le)3h4k;0
zQX0=~UkB}6FPLL%e*5~R`^!V^<D)?S7tm!tcR03Posq}hkbe8>eGvVtQJn!rWjuHj
zb8S2r)BtBa_m@u{aBd@YrJURtV*Wvy?U@^#_Ecge#ItE-1R;9Nk{6WWO<)(9dpkew
z@tRzt4XlHfq;1xmOE>UGzvQd7R*DVo3g{kXekb7X;(PD;How`>9j##0PQlco&hDZW
zEVzGZhCOLD!4GJglWg}WN@aK(ZdH+61sl^J<_IK$QjHjNR2Gz$9!!69u1ScW+Uh1S
z2us!A2o+5mK2)yctG>w6Kq8(D5l&=$!9r}(=X4={6+@t)h?ys=!-#+uW(C&x;}RuA
z^QgVnAy@8XAslqxnuCszO$6RQcMy3hFvvcIrWNZriyeVqlFAi~XMP?s4BW<q>M?O>
zovjc6C+me5XWPc8oH>n?+hqsMAc`rU5{!HGyHvYemXeY(kQQwd=AXjJb2#u5f+H@j
z$$=}ydEOTm(>#|>F`APs*Gf|#!i5sZ6QmwRBB}Dn8ig{7<^^uNz|Hw?5nfgheF0Za
z^i?I_s>ywj+vw%JAvH>a)?;zlO>br@1+lqW<PEs5tPi#sPEp=bdAK0E2hneB<^64K
zfZZI&xA>v}1bx$u{Ee7nrOBDH8|jLR8SuqR7o25{^@WR+OBphz34}Us&>O}(c4}Tx
zfTE*z)XA57EQ^hqjj5z2AgYNV((A+7Av{af!yyz!dd0?*pcTx<Rg;G>u`ft!k}Y%`
zDl`!VAXG+kg=EK96lAlE+{MEgu#|{p{Wd1r0nCr4vk;cJrj)@dD}q2(o-5jQK{#^Q
zRtlk8QJO3p1htWkk;kB6rI8ct%wFT{%ssSA)g6h;u69;ZD^KhD-Ip%cL@^6m6dt8Q
z3EVuLy9N2bvixoS`@^+q^dGsq2SN+O1GY*VxF?fi-GGW3jKIe58Gs9y8-+dRC>7p;
z%#c;<!7EqWhZ5uy6w8l=-Zs?#I0{n~SYf-FO+>>f%*-a>LV-5TAA?<Al(4JppvomX
z`MLJe+;35Zs2QFo)s*#w9T2vwjXDHEM)b)*9B$Hus=8Jl$;WE{GzPT|BU4;Di6kVL
zKsD(##SkfyWVFs2-jF2%Ii(=&Nv0iJI4o@7IW<fn?>ICi`IC@RO)t!U{E3;^C^7$%
zDPw2wQI=DfhEZ-*t^<;$fS0Tj)|f4PY(!#KyO*C<#%~Cr8n}wCW^Q3n@TsY!J~*+6
zq2$!?h01Ht=%9QCM(JGIWtOaDupJJM0>?ZUi0%^*6A!v`RQwryT2B>DpWRJ|Sj@mi
zGBDBQBAPC>kqlm+rjrWJ2M<b}-Cc4O3N~C%hFI)`s%5-8^`Oroa;NtRNk3=dZdZL@
z;Z}DRlft9+(whug&#!T>CpVh;SIvfP0#-S%tT7bkct{)EdOF&Iu@;Z5G*S%e^bwCf
zeefaf96PT|z0y0(X<~S_SkT88aBbh*7vs8~I3KO<M#IZ}7uo}C7fm&9%a2aG&2T;N
zc_bWQbV%2BSF7U`iK|-TtK}H6J-0^fehD_E{!}(nT_VR^I~tJ@Zu;nxoQ2{gMuBP+
z1<SfBgPYW1XsDEKeycBYJvBmd_Fs&hV~i+4yP(ImZS#z6+qP}nw$IqMZQC}_*yhgt
zHrecMve}z-3Y}DU{pzk%z3=mUMe@~04GzMM<I7>h{o3M<VM9v02YoJu`%HTfT&28@
z_>p{JLIvP#f_fr6#C97aP~Bu4?c<K#KZh}&^Am!`e8EB;3wf_fMAqN%5a+0%Y|C}q
zK&)u@C&c;#zal5N!~b?$mr9XIeUII3g-rh9-D)p^HWjN-5m>D>h3lK_o;5(=G+fH*
z-hPEHd2k;=y&g-mF9<$2!b>#=TwEF>YYd%#gf`3uxFkjBNkXK1Z#B5vRVhs0T*%v1
zxx{M@+Fh#49%EQK^XDO??f&lXA0q}wK|6SPze#!e5nWdfe<ZZ=8NVpapFGt8BTVZA
zS>_~mg2`~RxWQ()YhG)HS@F2p^ff1R;`KjKxba-;vlp?EmHAg5*9ZWr&FTaJ)g*L^
zDjnrsJTCIP!a{)@ZaqOX3S9ppj7v{gFlMnVE*7H}6bzsJb4X=L%p&CPQF<op_SH}S
zw#xn^fa}yS6G5k2=V)30{XO>tu7!*1*hBihhmpHI=D_}w4?JfqH`AyEwS%-ft<MT~
zN;HxaKC7~l|Mqa3b`9dEF1f1MiRKDgPYj6>p@`s|rGF<IT);n-1VNUqHL<Q+QWPkO
z21>;OL};XFL4XF@zz8L>?@otIiGwK1CNf??JQkSEIw-^p1hdLWs;n$1lOo@slZ(D2
zKh$%vEN;(a1)3HkvOK*h1?VM0aI>X2dujoW>TfmYQ&Lgk2wpCz5c5_xqN_~9rlI8|
zQ`Y_`+1_!+5UG`Nz-HRA3RTCyEOen6$Z!d3s4S*{w5A|%#k2C1Dy2gbRLufOZ9fuJ
zrx{D9*^r$jzcYJ<W3{YVUsX%ohFDrSF*KnFb&s+?gvx%N#<P)NMWHDta^*Zwy)qts
zcb+)7UbH@+VZjQ*NC$7^-Lq$%DB1~3(Gqqk)Ou4=@q(ZX3W8TXkpLWbT!3CFiR1(Y
z(Fq<!Cyxxc7(2v%)oMUzmpRH>NQN^cS2sz7YRP!%)Urwc)}~y-5MN}?tg&jILNcY0
zAC+P)pF$=lzUc|l!l{EL{vjGDM*LLO?ssWgxQQ5vS6mRo*}<}sM#M#=6;!ZYCNYG$
zB<9$FD-pSoolvbH)*{-eyr!F|E7tPv`qqPas%Zmcp)_lq$p5$jQg9=fn0Je)_*$05
zPcl^oVd|ZCDhPyG`1mV_6JsgjwnXVJ1Ys;7WT`0Eqk=TnF1%>_%G?}*6#kzx-0EQs
z5SPz`Lb;SrCX<WWcyBN;Qt05OJ>NtXiz$Hd&}43*2FzSMz;Ie@<9}7W$Gz%Uz+E-z
zzcb_Fz*vmOt>xjsSj9BidM@s^L7GZB6ORp?cO6zJq!5a=G3rdLRY<0bQ}^i<Y*9!i
z`$t%9lid?Qp)ylbp}&e7sdzLlggAa^&`cbaFe3aCC^{Y0++3JJNmVX9vYESI<<c>P
zyz$PdUl~o%pVp((+{j8SUNEv&Q(}d}lIYZL-YM9uu%td?fB3Zg5^LFl40W8u%Cf0$
zo9eLn*ef&5n&{>82(cVPINERr!IDWAC;x>=r64ntvhgnHB?h1rdU-fhH{G5{x2mc)
zd$}nz70)%eM(0p1(g<Q$c(rh+X_x>q<L;ACPu=?vrzn{zhilYsFk<sC*0Mx&_i>82
zP(&EkT;Bt=mcq1VMlNDA_(0s=QaI|(hCi9jpgS85-ym;^|9mDgzY)KrZky{cdGGYK
zs_lwUd&=#2%G3eIYy2-Yl8`q>Og513b~o9<JX3$8(^vPsn|uXL{v}H8)8aW(?o#xy
zHe-R%Q)e)+M`JK>XQ@v9T9Jb7Ptg}-3Rox~7TUMDy1Coyx7c7H%tmi+Xh@{hH}D3k
zqe>SE+y*OoQ_^xYaE#K{`!k4)ZQ4o<P-cSm3?>pz(<SDb_|h{E5SL@fjE=%fdCyob
z{9Al?3U$j*Q8)1i#uo1d-?gRVN7F0GdQCF5FCsOH<8ac;JEyGb&{>Q~mM-1F;|39&
zA6JrFHd>AA1{W1|khFjqMN(!r*H+y@;*wUeA~<MqF0G;h)tI9EMyeen6909P^hS$l
z1s1Yf*#Vr}lgfzz{zPTD()ed0xPQY(Pn=BTuSU<7IYOoxNwl|2Mv6AtTuCJo*aRFG
zp37<EWIEQ-{UQ#lkG49oB!MamQ#%>go7NZOclD-M0YZvG!sU0iS=3&K;SoBNJhIwn
z+Ah9W9B)lhH+yicSeUITWqf|EvJEP`(Rw^?VerWE$Jz6ex)k(~0mFl7`7y&dpO~&E
z-jd~uT@!5o0m#e(8!yW)dicb*g~%+1bOgswgc6FwiX<kDKCQqJhqUx_r0S7FdC@Xm
zceC5F)8G2TmyUxaX0xbn7GzxkRxAdO*v)3<vZ2Y6fUc*?vIC?6r9SS{a=C}RB9=zW
zIA>OUc5=Ld;h#6%%fz_iPsYyu1}g?CrUaVeA*=ESCZ<FxoT&LHeP%ffBpn3}-dne=
zj+fk>h%Vl1%+}*NwX4S-w%)&sg$}w*L+|l$qiC%UNq09A2EOKRV)XZm4Wr1~Y)6E+
zp6A0O7Fs%yqU0Cx);0^XNu#Fb<Zs-G_ng$N#Y?>c?Zw4JILenMWB9t#;*;D5T$G-C
z=9b1!+1~umJJ91edWs)NJ$YX}J!#e-a3Z`%o&zS#AFCgPyS$_adPy&vxH*<_I4#^t
zTSv?HxtuVXTvjrV?yRFI9{8XCE4llC)PRB(4FKR=`oFOaZ}1;W(0_wOeWmTCwkh85
zqs99o<Q#2=7D%Ht0tPgA`DgudXG=<aCVo3xN1xlXsXm+rQi7F`=IyezqC?A4!?(}a
z)NQssQ>gFyx}s*ZwxUwY#*W)4+alF<i{Sj$d;}>cGzRvWQTBRa&oZk~x3zQi+T}{;
z*>`GvGg!>bjQmmuOV5ekY;@5Zr!;*yb};_S9|ZFwz>GWFVb{_cpfsuPP+`P}HO4!q
zLE8u^lCC8pMuwxV-Gt$})qR3&1~=*;ONI%~`raYFUID>zgwK<ETmylDK8M6$PZ-av
zRe+alCo$@1p93*!dn=$H4o2?UAGvEJVCdrLX;Q7!tX5eIO-@Pw1Y9Er?3x+gkU%ay
z33#1-Ht8~NvAw&y*-)NfQjl7<mNT$~*rk5tjl`N+|8u_f7JluM1@=BmY^vL6G{J9l
zXLvvRfiS1uE{jCs@P=8T$E2{$P@h09IG4t8hvd05&pAHb8fW(&Q%>eYE?b^M@J;+}
zG{QT00N&5*<@+i(b~mfs0rP<a<}T<oG9biul>7J+Zi-e0x6j)TL_u^BrAQ(mY&M^G
zN_~U_(=h;-FNqhIzFX@4bt2su_hPky==KetJcIKLH-CK~l+7VoZx|WQCduM2H~`5k
zVOSwzoS!?>1@vdnA!U;^gh@Y$aMm4UoFf{?8?(#6ZR~UwGe9PL62|4-{dTT{x_D5y
z0hn}OVz6o-&M)$6Fv`cjIw@dYxUG&`)NLBbe0K-8$qh{J3>hfxA#$DXmJ99vlnOud
zmTgk}7Qq+*UQo|9B8Wc$z5Cir>D_U&1^nvkT5au#bHZax_vf`{7duZJLGLz5k+VE8
zv~}AY;u$m0mLmd2S{vL@bv0b)F1%EB#-|(=%m|@*kU&rx&`10b&;hXvHamU*A<+6f
zAtYEt5IjDo0n)7iM*s4N=rp1j|8@SxG1al*buB#~1ZIsH*YCu?xYj*sm>7%!8!UHD
z5R*NPh3UGO+wQy(vK5VvzqucYQlG(POJ4HFmpi-d@@bs`63&R9$G_oETpDzgk|q$t
zrR<GgZ|j;~&{&)u)AK#5)B&?u>mBoB`XnYvlEz-}9>`znADvK2nk>`)=&-->IBYp5
z2t>MBP<?+dUq4n24-~Caw*xZpG1<cag$r<Qv5=DG5DDoZz%@L>lDVFJT;I>H%IE$#
zAP}`4_F)Gd6X6S|^#$;QjW+-+hk`WP)#J~^a`~}yjZD>pybz2_&Bgjz<KGk-@V<cC
zbVA2xfRo?K-)0RFJmPTEKDQhh!wY}Q^ks}KUIWek@&Ez#mo$z@e9yH3cN=|0FrxAM
zeo55f*#^;Z3+@BFHv!@v()_>>uSJLdaQk}3ui5{$*<JY=6O&IeKo?l&dG>x7rkV7s
z7}wvFBKZP#Xn5`(=KxP4RzdcwAP5`?ANdPju>&b5))NlOFhb!O@Da?E*k&E|2j@v~
zs$bHKl@e{6KYIss$Pp7vmd5LXaDM7D2YzA+$oj;rIdEjKM<2rD+$D^XIZ3DvX>hwx
z_A9+kaUi;6^=kr5Hs1s1x3aC7*v2b80ymYCl%UHIh5>?yQ|cci)CVL&V;!k1ZdZV$
zu*EXr0fOU9@;Ta7EQLTqWZTS2P#pB-;sqnuu|Xs2?F%9i`$U(7F>_4YaiCyemUB8N
z?g#t{ohsdo7d(KW3ML{0BO(*Ltu(dVW=6SB`Lmz^rU;5AMw7|_3MG0+`>}=0pTdtc
zQjS3u%N`jfk2G07rwoi?K>SLAj$dzFarPDY_b=Z(K|)=GX=_lsJv|VzQ#W0vAl<Nt
z$Q0wRjIlR|HZ_7#SO%uT)sO$m+?a=^|FT-)bSe+aP>co}yzsLQF?y}UlIMM^y^W{0
zt=n9Wx3`YYwpA;e)^%2MZ`C*hzuX{9IVf8F?K{6;2w;fE^bf$~NeNNDM9bQ$-tWKG
zx*zAyIPh)RSRnJTmA$+Z8n`dAC@aRNmCO3P8S9y~=IkszCpvnX)<3>^J$<(^P2YID
z=1U>0j&V(VgY^Tk=@p(PKK8RB8CX>$R?47OF-M3^phJ3+hAOyE{rxNBq!}nQP;fqg
z^!%0(REB6CW8HjC>p6<5nzi*0zOJtauf{ic*Lmx&$3qdN2&Gec8*pWKY4r}-uWD8Z
z99$W4vFWBwZf1hcV_B$iU?hg7KpZutXv~D<5r<Q=%L{Ifu$~s5b#o3#gpIzE<AX|F
zWSDcXa}}yheK7Clpjt=o<x#a6mM$!L`kswqUGHWw8y)v%_*&KpKLTAz36>NsB<*9}
z>`%mEnLa2Cjk;5NdJNE<@irGwj>{vMR68n2{fR%K9>pbffqEWzw&M1<qa;5855Yb!
zrL8vxrx?q1HdvgJ`~(7<g`ouLY0ys6p(_u($qyod61nCBO`=TvSP&nTOX>QtWK>ux
z>N)KI5%BWT+XgBLj`GM*uqZ8$z{*4`;FI+jo(=O@1>1MU?FKJ7h1CH%f#u-$aCO0-
z0ARrdz*3~~KonbvhGL4sla#LhKwrd^@4|pG5X9@OeXPKkLWmB+J^+VkrcH%*J(zG|
ze?Y5__E8wMk>_}w7458JGGjtP&mdPg!|lef)g5f%!Z=dxy7%oX4I&!G|BCJzT@RXH
zT3Qn<V52p#xq9BBQKcyawZVkRGsExV{6P5WeZSbhUd`(cI@&+|0fW6by5d@6$jR>e
zL{{&G!$PBp>QS)4?Xl7#*F4s~ZLJwta}gA}X}s?YzMwr(E3^=1(JRbSzX;=yqq2*c
zlZzo>m~9-|I@QA(af?U8!3S<I_{Ffh#n5<|?v&~<UGeC<r9w;zY@IlbX;=ai&pKwA
z0PA)jvQ;6MS(L&K28;(dsTd$pUZp?$Qj&BYvVz-(*86P0q+hSM$1C^c@$JhmMU{j$
z!Ni}^x(RDs%0R0<W?)=X)kQz?B*+7RJ2Irtp%U-0Wfbwb<|RMoh;4d)5`^(YabW1K
zw(TG?f&_u=665c?Lm48>!17teqa&-Kbx=OBz^r$ih-m=)oATw0rSAK%DG@>N#z1bW
zkw;}7M3<euSdEdGq(ffpKaAW6hiZVdHyT69P`;oV?F++%2%!uz`zYtik(_QE=@`MK
z|F|4quEh-IGY35xH~!%4*qs5hzOQw|CZuvsiH$|=I7%`UL@>xmlu%y6zHJ6;>rLG@
zYteu?0w7rt#TTjb5%VJEY}^a1`Agg781WM3`Qf^lG-C5NX3A4bFQ^P=Tba8hN>Szq
z>69c{+flo&;iG;bK8b1a$&#CS#Wwb*MlW%ut)DmCMkvFn6zbFlK!-<21w|P8hfDhZ
zQxrT<Q3%Hn(OH`aR)X`*4rS)IkL)l$!imTviN57}B+N6nqa}|yU1gaUulCpPOeZcc
znw)QqH<rDWE=~YF=}<i(!YZCuywIV(h}h5j=rU*V(nfzqI9Ij^CKE5Lbn=mS2M%Ur
z33d;wZ=mYp0Y^<S*Ke`{m`_Mga*n;RsB++haR{V7mPt71`x672gmO-ep*^8L=}>w>
z<`lVPP#Fq^$}MzGK5BJOoK^Hl1QDBjQ#0@8c*>3-r1FklXmIHl;FJ%ycNP%6`l%UA
z-9<oA4l9rZRBJ=MHLnjI9q@C!mb?p=usgH?FbQd|jhKYu%|XjIOCitN+PZBlMGDDm
znJq{1DvX66!Ru5=i{kLeFB)VVp;%|0hCpLZR1LqhtU8=!>IuatQUsQ^*^X9=TB_8Q
zIQoz1DQ(EKfr34Vg6O9jS}tHg5#HeHiWubkxE8;rpB`FmHXi0_jh_wC`#B}IrWFyn
z*TFf-ByHG@Com1nizjeZ#M`CkQ?oUwrGlcs(7?m9K|P6pdC(sviW-CXz!MO-L}^{@
zZ^CbY8CJfKq^e{{3KI8+j0&$ah)VsXRmfn2$&X?&QA%spTUSW1Wj)QoNEr#1xe`)d
zPQz-<B6ClOE{znm$3*!_xoUb@$6sE3Ycj_2SGl0>crJ@157|hu_<SeO1ZZG*Dgd#j
z6=Fp8j+_yO4%P4;YcV2sksX1=CV%fpoxOb=N$n8phW4#1D2?PKel(UiFnk<788U~|
z%6V!VaaADj#UBsqfXx2ZgxV@;r@qGka+=Hvv^uZ$7U767Be4P8-r1y}<OMw5n#F20
zGM-BVXQ1^^ovu+rY0<m~^}m!-RKHH+8dZtyz$hjl9%2;HG3B@x8-m#NFam=+n7Ac~
zf=$CGB&|5j`WnGDniZE&`6o3EG;DMfz!ykYA!`V@rkM1NWLPZG38x^OW8WfR;EmM<
zUrOl&j5h#YB={r5Ljn_ly&|^*4N*LlS?=$J(L#qc^fr804)^7xgrMit2`E)G?+RN3
z+OK{E;Fg=1kCCHTo0eFE0PdE3Kltw(Yh0Nu<HobrP#LF2D-A9!tuVta%4n_-htfaS
zO`J7$8eYR~y_wZ7-ig+@Hmr8<GL0Tg=8-iwv3fly%51{TRvND3-(KPVO0Pd9S_a#j
z;F#7N6;F`Pe3mWWJ%}SR^NEAXbAe2eqW!co_bBtxy*lr>5xY8p@mWMFns87I_xvzZ
zckZxybCJd^6oo+am(}uxXe7DpSoIT)2`1p^<!r3_H$0nGT(DNj(y$x<RAq4=aqC=P
z|F}Kp#c?9M!XRk`sj^kD_PLd?ynop2;>k1b1<|_fk;!&3{i8F|s3L+;M?z-EYFWV$
zc*Gfy$c7v(w04lsk01z2PetC^hyxBc;l{(b4ytk919ajfBx#rChRkQ0D)d2yUta9=
zj)qqOa?m6NPHC5Y>~EmS%MIzVx#|mj?{WF@xdo`~3mTsZsf2g+Oq<n*h$A$HU@Upo
zDv~a=ual-~61Y*rz<1k3K<G=$MotvQrG@hd8NSAt8iw1*B$`Z>jzY)2+NN6kVA~ed
z1R$QEni5@?NyI#!!4KyHjWD?Za)Uus1jKS+vXTiP7e&2}D}VX^+qU{{)4f~s@)GH*
zwP1EQ2j%(!Hd2&j2)s(})hgOmh^)lI7vyazL)tt87&Tn%E6_5eq98z5R=GiMdI71B
z-f+!RRK{9FW}xM$9^;v(ME_^VcD|PwRzdxTc@A{h{Mi{RpKoPb<%ZzttNbyRKTn$S
zps88Z_(E84LDH}GRE@6k`R4R1s^}aY*fSDvAYQTj_d(`)$m^g9ib|5Y#GABZu8-}>
z1&aAt>p8NlY+7=OSIU`g#!h<v?5KZ+R0dFbNdut+dq^;p-(ZX%u8ZN!V&c>t>)aR0
zTuGOAiU-;k3axd?P;&exP$b6I>`u*cH9z{(ihDudik9kNlxa;v;-egR(p)SNawa)h
zAoxfxmTteSjBz(OQTi#q!|k;bV=M)f$3>wJOz3u(fDRGgO3+Z{CfR-@Xn$^$ps$Ll
z#*ZBY=q-_}H7jHa6XF3u0%$TVI#n~xwIggf5U=}TRQwKQFNd!e+9R{_3QPi^^!aFu
z4{SyW;~dxIR~OECRcA9~P&X!e<xQ3<MqoQz^#~iG<5TssiK+EYNzKL!)BsvQ=(Kb+
zQ-`=ft)*TYmWxd!w&?qG0<$F2mQ1f<U8#qHfKEyGicd)4%<=OOuh0zgLI#QS(E;ec
zSYQeOa^w1PMp^)HN4lMrwKTs0<#3AHzzOJT!WkE(B8Ko2%O{G+(=Ta^8QI$C!Qt_k
z+|}TAwAe9(mdY&G)Dchzo}Y9gHwr0`e#PE;U4ZGke&$aUBQa!=>@wO2tiQ==MhZLy
zX~eIe{liLo<SL{puPKCTvL#U81v@|YSRvJGxm7i~YiY^!{M`-S8cMEpA;%N%mLPys
z(vY@=;7s71J|41JOyKm<b=C*QMqTAjJwM!Qy845fh=a*&_<BQo0Vp{@)-8dB*MwG}
zyO+2JPqpXy6UhE8H6%#7D{4CRFxAy5RQx*PN|m|l_0hDtmT7>(^bIR3>ekbqHPum8
zQnh+Sw}FDzF2gM3bvm+!v(svT=N9~QrH`TdJ}n4U$Us)q2xE+i7OXqMp=8?%MQOjE
ztvW1gJNy;?7P=4uh{-0p#dh&|@c4qE_CddesRic76))TU?p>-??y51GCuNM#i$;B(
z;VR9dUT3N2+~j-gl4KUlVqJrXQOVaO8<URo(X9cb^=j3C`NRdOZ2@)7WnT*<uOWw6
z)o@xED_U!^$$=7Ih^B%rt<0Uktv<8EQ$m{3$x)62dVd&@2P5u*(m2X}F$*FzPK}ws
ztSGsUPh>a`JU!@jW$3HJo2#p3(D{QUO(~tIhI77;p;JU~(TkbT9vX!u*4Px>boIep
zr178B`IfQ8X8R8rq7t;UA237}tvdxLUm?uoU5rp~%}eE2GfxvkzX{KuNvd$qWS;!M
zvXH$Bk#jx#+_>;w7lE$5F%b00(qNk_XAzt~+{eliOLuHMNxr8CD70G7O7N*5xwuKb
zAh~#SetMoK%8k}W<3e#?ni(03+9lL13NF8<KkCsLi#o^4t$YoWsy1k`Gic_5N7S=4
z9yE|U9OI+;m4(8Rfxm3s&#*iiBV{G)cW}VI3z6GkkUm}MyzI;a*oaoMV^-c$Epa@*
zdcTc#r-$XC3)$rhu}_ovj`KX+4>-J!J%en>w81!3b_2PlGsnMl2kj#xlMY?s>sXnq
zRbIDEj1Esd;-e_lY{e+&>kW~xB{}r;b2}?rOnmu_Z91TLf@D$nH_F9eg;i6J@Nu=<
zspQ?Dv6^ov`Ayrp7F;cTo*NJB&K8A5y>{D$w0LM6*|zy35}7q&9Rj*ri8{%T6Hhq`
zxgBH|WhkqtFDPd@RlYK++TgDL?8Kg+P!4D{U3j9`cm`+Po;J^RgywO|PkcOnqHQ}$
zKFFj#Ogn0Kdi`I3nSAnhHg%Y`S@z}T^)t`#nAh$#Z9Gcl#A~ltOwT*4Qx`waK0h<Y
z?@p>e)v>2aYuqr8%|<I&OQLcKz<EB0Ox{bZ7UKT!xk6g?Q}+w|$^q^K`_|wsY_E}h
zp}gcAA1ZqUp*KrXODEqb-e<Rc@|Jp!bYp~GI={bR&>xL2mogV`({91IW`uJ1Ao8DC
z9xHU2a7Bma-aaH*;YbNGPS?qcdEr5xdMxxGLpk{^+U%|kr_eOJ7Vy{EI@SkT9R-IS
z;O6g3OgZa<WJhvluukd|@tG=FgHj->DEoDs%=C&s=+Wv+x+kmE2L<z{#QvBX<BvRc
z7K@Z#8ZB>@-KRQx$Z7W0Yqx(_(9x;!qEgjz&~L12$ew`aMxPM($dv_6q`$vVw!7V1
zWzkXX9xf>tOWVD5>(b{)Tjp}IewgZ^qoG@0yBoEn2XMccJ`h=Ekns7^0=*VE-94PV
z$)WS<@$PoKwhx-gj%m97i^OLwTkKxvzG>0Zwzadd4!z?W=~pF}S|FGZt2*;LW}Du5
zNbT-kKWFeA%s9+z2W=9~f-?N`9<mAORj9QvlXB~S?!u>QylDVMe2Tn;?(st0>Qy*D
zc9Ko~`T8;R)^}(0ERhvqS2k|+6eDy%=IIrfmKk^J=!Abn+OKY9UXc381FDN*rtKTn
zZ*cen@PEdI7Y7xv?9l)Kv@QKN%!vP?jT*SRGyZ>AqfOi%dWWJ7ew(=kX$B2AJtS|z
zCay7e{<}b?HiO1H(t;bV*vVswVu}4zBsYz{6}ID+614CnG`+&99kDevm6cMGJD)Mh
zX*pVWnXc*U@W%bx)IXulS;I+IJKG<^wdSITbS{h?W<|aF&-U)JHQN8wSnnjf&UU$K
z)QD^*iGWFN$NW8}eDoI;zhUh;*~q7!*OF<jD4inc8R|j8FZcFT{o9(gh>i*yNu1t=
ztw+hF;sCLKb{@y3nlKD1A+=tIn#PCH>1mQSkVWxiesUh*+CaF;mdIw-O8tMgH19yN
z_V5rnY9Dk<y*MsIjdB{D1J;)wy;pJQeHH;7)8z5Tu6_LWag!(G;^Iib(e^x4#~p4a
z0!whJik)v}tG#)DPE>yM-_<@3FNuI}q+RF7JOduBb2R`Q&|{_E4sxfjQ;LP`97EXJ
z^Vz;YU2AE!{fD`OH<X+eoeTN`>_LDcJLHT{+MH?$K9RK{{j!Vkjo92uPNuT#W6&X7
zFv0e>9(^D(LN2)fDz)9+l+%B%)YJT%Z@THry(*6o#v|8kH2UtRrh9(+X7B7Sdgnfv
z66}`Aq9lGO{`Z?2G<Ohqw&tPF?H<xgRvd%_Sg(eFIRG>>CchHHBSQgKlB>Ry#ndXS
zc=<gU6(S;$gGh%q#jO(v#JKu_6$RUvHDr4(o$6%z!R&m*_*w=mPFJLt+fLTpH3q&a
zq1vu)OiueGH&Quuo$@WHq|KOA3!|pL$RV`6@56buE*m`jwHPd%oDA1QhX(zDzgsl|
zvj}jyOE{G?Krt8&el?Aoi)diD2i%zl`4&9|Ku~{(_LP<W6W)(=0%_Mz_7}&0Yv^&`
zP_s@X@RmCy;|IIL%fz*?aVH+;<3<dBBZw~Gqf+3f#BG6xa1>wS#&L;<Jo|gEg3mn8
z^Gm9sc^MCAWd+SbFQ=~;ANjI_PZzdhknjv%{N~`i3*6iPF3*SK+$F58T*q~$R?ai6
z6x7k1hbZj}@$wzL8!<2D9TcGi+br!w;QeM?#BGivX!P0Pri<-;OvGasTjyZt#^8jt
z-4b53d*;c*3&F_E1(rGh3OLPk0o!$Evpecq0&)mQLHwn}i-Tye@%gRY@c2tW(k=V@
z*nBQ1<PluRaVw;_DQ>n?5M*vj!fx&=+J1gs2V5CCFc*F7wqo;aKc=XYj;598RlRTA
z|E=yL*QyVU#&My?Ja^#St*21Hqdv&@pXXe6pGd$$=<4X8f}JzZdE%n)PjIIB8txYV
zJPS9;zb`_ytEW0G|8dc)z^1);+*1sBgU?sbwZjcj7Fe)VwX%F2$CV!dPLTP{zLVfg
zP?WF=fWc>Qe22hz-1A7ST7KRv7eHQqYWtWL1r?z=YcrC<{;s^!gd!k`j>+pYkDDg1
z^)n(}{5PLd*v?M<^Bn{QFTr?toA`qaYLIN$Bb3&?*L%Z3e+v6jg6@|hAIHT(5zyd0
z(LvokU+wnn#y-&qoZEMXkB#9=NH2Xfl=+&qx-xd*&+-b;b=Vuij~u#m=yESHY6PFw
zzPBB9XUXp?#aUN8fVvN9*YNZWWP(KQv;lPjuIr2<VDuBTF-#US=a>ZJ(wjspY{j07
z^l#*Avh>s0`0HjF27RUzMs~rkrwqh(p9No{K}G#&pmxfTcRm8GL3^i*{`wdZ6L9k*
zpl8vj4ocV8RUKL!?D*+ExTB51juIZ9z9f8g%$fW;mS^iS9{r$W6Zy^TtxR5kRD16=
zs<F$RH1VGccaGv-2mFB10HzR0tMMMR*}qpAdV8^#&ZW8*F93n9FFoiuaWnK>LJNP+
zs{@B@>nRXrtiF_(EJ0({h=kTEueeUo?DlA6ZpIis`OjQN^1>TNrn(Q^p|;Nwule=1
zF|9wz-Zer`x@eY7PT^4Q_~gwumjnl5Kbmf{xzgya^LtJ=+)Ab~BxN6gg{W0wZ?)r*
z;|{esje<<jVJ5WmwCTp`J=B`g9vHx0ZYL9oMymyDH?K;HIvukk2#%;N1Y9B<z<~;y
zP!4C|x{~~JAFXN9LuRAbj&@vW{#~ExPhThUBr2IQvB}TCUCx$jug1go$;#+Zvp(5t
zWNx=*bg#*&T`By#Bu7dI{~7~6OdRKFwt=vK8sPINA*V;fL98%>I@J`ZMH?-N1Lw2l
zOufCuMB9hn&C1kMC=W8ws#VT(*bac(VB<SC7DRWpW@xZnvAa-ds4JU|%hCdUI!B2b
z=DW1TNuI31zp#m(8n>IG&;5&c>vPZ@<Cn2W+^tdh2~b?)1)^~H#z#~3FJg05PM%=5
z$Fz&|1SgJg>jm;NFp$7h#u>?u1J2Tb(U<5a51RiottrwiE8;?-MtHWXaS|`{Xn-tP
zwIaDGi!EP2BD;GVXJy~NHZ6Lwu{OS<Tg+6Wy`$#XF~+mHs}|eNDWe4Q_)GM{CfNOw
z(>bz?%d4+w$NI!EL$|zdafdEXH9@>K`Q>6niw<7aWT5|L{9zqu#$c-P2k!XW5fD3e
zR)+es5B7mcgT{dA{;%6uc>s<H+Gq?vSlffNb;NXzyB&<-tkWd`9|3@yRqo{%MeN3!
zVj%%Qj;r~e{OJ@K-n+da`YW;Nw~Va-A-6)olO+7Z+f}*<K0$Fj@xgW`)6bt?*wR!`
zR`wO*x`}Lvn;-Evr}8eTo&<!4@ZdS29pWsBS-(CM`^ajwII1v`wng#CLvpWg<foI~
zSwd~Ri)F^Qua|J1T*SQ1W1Zx-K;nmcS&N&+fA{}p`L2B5(|@k*(hMTY&+u%l!rpKj
zx&!46#k4ke^)KNObwzkpHPyAWWrj8UMO^!Fm6(eaF~9pmsit&yrUID$W<*=dP;dqw
zOUK(KLZJCa{g`xmc|24vz6GK1%?aKGppX}x#@{FNBwrPqBpgKYOE+*BgQ;Py?0)5a
zCC(nplb5EgBEi+l)_K1dp=<H^(D_vK&3@BiQRQxyz*GNOoN0N!7N@tU)@i`!J>{f8
zMJQ2%6k^lAg(p1UWxxA{X08l&wq02(!?9u1l=F1G5@YRvK6=AFEYiP9>lb@N;v6E`
z>k+w$q-s@C9GwKsrg+t)df5j2NH`ugk~~gp>JpZPhqRRuh*Ff56b~H<Nf45T#j7+u
zJPZ}o1%YV3`$*UG0WRj|?rL8KB7i{vGF}cXvHB5h{xu-{<APwkNnw>DS?>7PODH-~
z)!QtYO5S+T2K1&ml7uI|n+vE-o&PmiU6>um9kRrdn*g=Nmpr$%#qay>0qxr{H*B+c
z!9Y6r@gHq?Q1|{Rh@6U;F}!bJ8$ZX6z|;5DX6q;0eJD5kNpcf?Xe&PN<&lHN^?~_C
zH5W^(J;P{P>*_xr3dH9vk$@mda4#V40IY$ucyoVaXgq4tL|h^jfC!mnaaWPOw&-63
zDo3KlgD62EZ%H}Zr%lx4wY2nXj``0HSL*5Y{J1fPUO`}qKT}AR1V?jg)2DxvkAnan
z?h70IbPOtZe<bj%cDx(618<}_AhOioT5qX2tw8WgfLQ2%fsjnqxW)=ATAjyKWnII^
zc5a+)6QyrmKwyxf%nSu0#2py(g@{7Y81v#P(aMDh85rdv#4ZeqaiUm;MTjxX!{SU>
z77+<6D};QPWltO<v^IfU`^lAoX@!R(0n({;pc_3;LtI{2{~X!|?B_@Ofmp7NoxGK0
z?-;U(mexn@p@QTbMri7cj&O0zmb%-Z&Q?6TxZAtU;eT*pR@qsaQ`2Kvm~>|2h6V}e
z@^4j}nm3`?JK0k@R{|;@M(56J`tcRKzpd{_sW?61w6`6zKtYC)tbE{J{z2bT4V8zG
z+~{zc3Ehqn3+*mueAwF<{^cj+H0Xk}_@RkJ^{J&5rwFDGrxd<L*WS6ar1o9`Fb{@*
zgdiXG<PT=DOr1PoTtmqh1))}WiDerFgtW?AnCJU;@bdEdOaEpK8dS_RiK)dwLDRcq
z=)C2rx1}Y{&q=^d`xi+5^|N+;;Y4gnkXEk%Z7Qi!?ZILS7^PSt;QrgfkO4xi`khs^
zLWCq9e5i^eYJLl@s1_8*ZKuOIWtKK|#|JJ2VViEHH3M%OYu<*Xqx#qhUT+@+M1&Fp
zY6VXzm}2ntI{XdSj9yi>2{YVZEiab~-g*Ccr-r~08X%V_tH$*(4=j*OQXW~rh_p-v
zf?PVF32H#o@^5He304VlRemTYL}jIcO7QYh9o9evVU=^N>PZVW*J5c<vY|jaf40zN
zVBKH$tQx4c591CCI9b8=*-eGhJZyJB4g@s!ybyB{89Ow4v7=A-YxtS0Pm~P)LJ3Z<
zgxP-tpZZ0b7Rw-Z{gDjLuzdu`s{v5RaLA9bfX^uP3|Z7x3fDRq11FL0zUoytY@-jZ
z0v#t#y}r{Do{iaBAE~`FvxC7>nPNy~g0;(U{TqSG)Qp)lfS6ou+wF3%8URSL6u*b0
zrM0&{P&c%D999$8+MK91U|S&2Lrw#r`y4S!M4Rl3Kz=4-`mWreZ_Y&TQcmyKK}Ok=
zLl{W2bG-WrwaQeG(={r{pfit?jA=prQ0Ly@Ct-ajoi%gZSirMQ`ROJ|v;qag{hmNo
zqy3^l)<gZvAZ=LSt4MpAINEal7Y_EsfVM;Z(;#h>jB<4M?>@o^91z{i1t%3j11hTK
zKvfQPsh}$y>a#%DIM&7il{nhdK&$L+sh~AZ_B_yAdwZg2ZR7pZH1<(JT2_DDDe*@f
z5#0Q}by0o56Yz-$ZiR}87p7yy*|><dFT<T1|F;gaqws!&rW8Dz0ga%$WR==HWgI{-
zrL7L6Z$K6pR98shksZGgl&Ziq7zaF(<yqHmZwC)<pZSaHYc60bKW`N-Oc{$Z1h^oI
z0*A<cpHxw_b=>Q+r4o`(lJIWWlqZOOj@?_DqJUXiYoze~P&LG^trzkt&R~#55_Vtz
z;V=VAl6bl$ir&3w{Sx_zHgv?oQ+*m+{tAd32LR+ho0~JSt1s3p^ZK*6jbNSQNly1;
ze0Kj)XWZfLy7hWA@>O7XX?CI%CZRF^dx*sFm_9yaTgl_Dd=o@9;2RlshLpz091(43
zZ?63V<rxl9GzXsBPhkLg4q}zYaBKl>l7XO!w~ADeEtmq+>|vuJSdR6OA$6?ab;)mu
zIo4z8F^dF@iKAoXV~`74mSfubC6_8<QG}oRWXQYNfLIP>CDQ$6#`e+`=?piXgv)G7
zTg~EdhVcH@N}^bAC6Ou{vj0?e|Ea94|5IsiOXIwiM7Fi0v){|0I`}X-9A#3j&Lu?%
z5BCt(!$;arMBV-dvw>Kdxw8%`$8pi1++Qb+-G6HPkG@aLKZ{+-Z(Z2e;*-f0MO^W3
zfH!nu1w(AVbMzyI*6>5>@B&DwTgW=7YDTA|8j~7{R56oM^NdK!H6-4*4N0msFd9}x
zlTcGuN>#y-R$4}@u#8Ji+#yv~B&yJkRQ!%G@s3cD8Lz-IQu(hTy+ai>#>?ULmLwVy
zodH7?`NqwJ4T3MxA5u&lo1DT){Z8>JFJX@wAwO6(uKoJ-6yd&^C>RGGNf)GD>__>e
z?nMnxU@x#9r;vE>WM)iD+>9#)&kg5MD+R8#8^7gq<$Kf$5i0h2Pq`U7NGOp@jZb4r
zI$9%K0%lDcuZU?|L5}1+y(^#yns+@k#lmis4u8Un?j=xU@QWe3ym1GtmBNkNIZ7#K
zh%#F-dpn5qWrW66FbtpO3o_&9n7f3e(k4A|it(w8O>eYv;y$qDhe=UlbaUBNT7u;7
zROpnK%7xWl`E8V_5~$x^V-uw~`#Y$U_dzaN<U^5_Q^t=(`jZfc=%I3=31;kpn(vtc
zUq!r{IKyE>057nE)a9`3yR*%nju|i2Byt#oT+N)i7yIONtEbFBlQq-mp(&c_^w8wb
zJ;iY4RYG{Muz@GUH;lUJD=zw8Ik>yMMrSt8P536Emn&y>VihNCM^a<pf@C`D4?AWG
z-A`^L52xuQuFl{2alu$r#B6%gAwaV5OPkgw$V>3OV=&poSS(^)BJ!(3kftLZ$uR8r
zg#iUc{O7tnJ^b<kRJlw)|B|wiBXyc*X*8s0N3c#jhUQ$R2`?@uEs}CM)$<U~b4u7@
z-93vJDbt$64-%DFCvLJ1+DSaL>s{5hyMqfdGkmvlogV%ZUc-ib$3XSw)pcWeO~T{G
zd~LdRSAJ8f_y=hFJk~ckgdWf2BqHr)Df<_^0sWWEq4@m;?@P<sm^JF%<<ooZY=kCS
zDw9QjcuI?@13jlT(KP)K7F`2=s!5tM()-W=aCOnXg6=(B&{`nFK2iAkZt^uj&@DwC
zafn?Rs7}Xv$H#cMl%g^TVU}Ws4y(aT7cI$$*)%U33}F<teh^|WOfxGlK{!5FwJoer
zUgUmy2bqLjSTG=EmpR@FQhz0Mg}!jD5V35uh8gYG8bF*7)RBQPe?A{i7y4+)Owx@#
z$YBVF4P2~c!eHO=g$i7%rTN>C`LBlDZzDT7jW@I}F8-ba8L2d7v!#E@4%1S~J49Z?
zg6R%D)~Sc1i(a2I!eOA65~Pxz<1D5@-p@M?SW#e>Pd^?cqGtlZI8cjeSl0WfPY7Y$
zm`)Q7y*kG*$hnVzAgTS7Fhw^;K}L-b@5gzFWq`G*a=ej8EWN<s%L5yo@O@dB<Xzz9
zsAF;3ot6?1KJi(+2Py=Sq3SXt;^hm!_=rDogamU%`564nIp<GUflT6GEv;Ex%oyW!
z-4u<b<A(e!nAzCkyQEpi6qW7-1UAqq1gU*#Vb_UhoKia3%5<;<5vD-1YfEj#6wIY%
zGn>MV01ayoh8vY~EuFq)rseE(SrjV8RuL=>D#bJYZBz@>bAt3`$D^36=O_kAIw~|&
zf54E1zY(0``J`titC?%M2?uHtcavjj<NUF;7CNvXxzTq&R{~wpj0;Iteyq1_cy3QH
z>s0FvDyWgF!T)llP|BTL5TrsGy^n>F#_7~7e^rSKU^)-0Y{j%9obgo@s7m#6*2!qf
zB-Io))^O*SJuSv9<_7!HNtXEy6_)lEf7*V*j21G`uj6FeR4J!GWO06=MJ*3biNep2
z_noGeRMU@BGw*KG3shu$g;u0YQRbw=-N7!@fNa-k!dXPUl(Zs-8Z<2?<(>HBwg-*x
zDTe1QpLY-uX(QzkNd~YgD0r4`L!W*2FXrIu_y4w+7+8Afc;2pzNy)NW)~R7a+%att
zy?)}gy9ywwuL9;f*hFUAz|t^BrmWF)e*N0h%*N-9)i6pWvsxArr1X;B-=)l^G#|ei
z0xq>IRX@dX9Qw*Q#eXoo(>8XZ+ttU>hZ8P5bh>XcTE4v(shn~LJR{;TRYK*<HPdT)
z3eQV4muJ0`eob7~QA~+%Qsq@gbZ=8>@{-4-6?yJkj=tqo6b`aJJEA313Q#s?*X)sj
ze_a2{NzsA2cIUGuX5r>4Y?3}9U)g3tl{FdDbF3sdCmsE4{*pUeVn}}2o+#y6*`y@$
zr2PT#8&ZbW+0&FgvXw8lNKL#*<AX`o5F~($@c%uy^`3b=bKmCC*tNK-P)U%OdgAdc
zE;21{^DW`D0F}O%Bc!geY=xr9%h=SnFQ(xf^7c7xT`l2^ZgqA;wd1sh?Q%a}+uK)h
zjI_IjqF!vb8NO1}F_x(qK-=S;+DEW$Fuy|9h>3?;%I!LA&(s?VN>h=6q`vmi-Zc}e
z_!LA>gVq}2xUGf8Ua&?6FibBG6D18~5Epuxt?Ij?q^&CgFPdmoaaeLTNKu=b^*w`n
zUo}nIR!vNA?<3A;(rQw_$R3<*y4+P`8dvZHYI1rvJwVPis%YhCVF_ztooixsXkwSi
zx74T0oQtPP2#qNf^ME*gy+0#>*Z(~jWNrCP;Bg0;9uOf^C}b!uu;;#p^L*>=W*AYB
z4A%0{F@nV-D6I!;Z4GH2p&GQVZntsEVyI#y%4SGV2*&*hP?`pa+w}0}io^a_zvzS6
z0ssmf)*fJS{pep)X=p}i&)HLeWf@#V)`Apn;w<bf$nne2@}d*<9TXmsoFj?NB%@M|
zA-g+u5`m#sZoIww7m1-dsB#VFQ242W5)0qfocO|VkA0}BtLA%ms`p!vwAJ_@)VoR&
zTswq7Y;aN27&%I}?aow}ZADJxQc}sbK4Z(fm}*y2FZ9SRUy+&1_Fii0n2Gjw7`{cl
ztA88P20=qZ(1GN^d1})wu;Bb%tUz!CyGlH2w-*5HBKEXd0C;p9j+a45jgp(!v7f*x
zjdqxTDV4UD3{)y%H;GgV1eDD%mjIN-vXUT_#j=nP%0jV{K$MMaDr$pjEv~&+fWUpW
z&dU+`T>qmy8~Taa?Y2ML7N?fG1KVH*1XEI50bq|G`#Ff0Yz2m(WUDGNL4b+iF4Qq|
zzdX#!vvYxRW_klb$Ez(bBIW~Lhxquqh!?8*@ew0fIenhDY>M@rfvqVss)syhxk(x}
z0T|tUyoaWDwU6Gfwu$-~ZSS5`{Q!f|q{DBO4%qZ87V5upu0IEMAgq5-0Ewr78bGkT
zhgmjf`r5>Y%_q}WoGo6*OvjAUSB2}H9-&2sI3&Hrm@pTuMdpa-hltVu783kt!d78y
zqcFbz?^Up%sV&Co*Qd2koG5FgcP!N7I=_y|JF5x3nB~a1BvxI=gc}LC1%OX6>{;;3
zCzVX9zx1G{PzU7V8C})t_<_yH?nNRwzIgjhY7>z9K|r!-N1v2l;v1=#2OM({;Yxgi
zs#HTobt<I~W_lq5eOw*SikavDbqE?@n>pE>CiNed!f1}Sp3hxbH?o$913-ylV9MtN
z*&=qqc?e{&{g&I80Z61)Y~ie7tj0_fELqtT?2yn+laVj#g27<{cWAgYXHJ?TQ*?QD
zP*!8TYt@~MjG`yE4!A!YBAR|`7XTSbMNesUa0r~gUC;}FGNmHaKg!E{E|E<@!4+6*
zvI(mE@+|&4q#I)yr8i_W-1Hpa7^>y4I#ILr>d)_zKm8jU#FI4J=+k8~Ivy+T+##2q
zDo*aiAs?7kG{&6h#*i9|X(#ohK^p}c+GG4Lmj;wefP4tM`l11YARk~!MSTL}&Hm1F
zz?eV>LjwnFNZDjL4t<5omOfN}OU2^$P(lrl7-<AhlWD0PJ^$LRJ?!-NbS?ZTu$0d#
zMpP<1sKG!z{(CZ$B+f=muz(X+gIhqNgKN4FC*sy6Q6z@&G%?p540E1;%#$?M_h+y)
z$cv71-)0QvaTt{7g*Iu%B;5sjY=y19t6f3TIHCpm20y)0U6tTr-(GCoe3;QYgmW{W
zMXc&VFjcFB0}$zt8IE<hw+HEY^zf*)y))bMaY`H0UmUm9`PT$``tIz2nfJO3^g;NP
zNj>CRb+gf)E-<$d2DP|1VXZT3Ug@=6o~ze=s1+q7X{Iwm4^%`CG#Pn;Af8>Cg1N}E
z#_pBqQ!Xk8O^{qAfB>Xm!D*}O9O*U6=1`Vr7of6~)0{S!z><Vca@*{+zh4f_J+juC
z|Esv{x5v_{yKK@hJr^FmtUICL+qO}_W*;usB<(O3>Ogv-1maUg&MLiDBxe~8Rjtog
zuzuxmsDOi=014}io@x6-)Fs9sG#6=d!Ba0{EQ5z7)1vdV9aygFV57;QQlM*O{IJ8&
zZmppT-D_E{>u6oS%aUNt;Pz*R!ec2?>KSTpFHzyX4VCS3I6oabNp-7kHOACdT45X>
z)3$mV#>>T?Veq;l-YMvsaA0ng9BW;QN~Ei^p;{X!)x6G4bu`6l5DB&kvEx#4O{Iek
zfy?Zu-dYACZNWwIr@=Rtz33;dgac_^+PaxV)w4p<&@eNh`neAdti8A^02_|d?r7xq
z)i{bfV=)rcw(Lb+3D}FOTlV4YLD<WkhwnWbJcv;MskQn?3unMZi<zuY_SyWs>%$qG
zJp5A8!c}V$g>tT{r=j9%l+G*qN`<Yd7OT(s5`~RaGATQnYZptz)Ei4@)y3Vid<_LM
z#XFi?7bqmZx6Z4NyVD6vH0@|_r(x1t48>y%cU2BDpW_XbJw|NXvDPHJzGeujv|(;7
zFV>*fB(=miUVp<|B3`E}Y-Ez{RPC$^yc;96kdHH$w=yVptIk)1-%MRv$tKwHyHa3+
z6+&{lYkb+FTu(PN^U*6Zw}Cg$eaJu)E>s<G@UMMwdRtUYbv{ZhO;nH3=O?O8=?hXc
z=JkZB8w+~FRZT_w5UZymzta{c2J4DdO|i8s@66y>m$F#3@bRwKx1A|2MPY5sSMm$h
z!$x{q?w3j0Q|@sgfDiVLgk{>%tZ0kpX-Z(jan=9gD(#l9Y?@Qa>}ZwS{;SDT_<z<6
zLfqxeWeFvUpV^rp%$@ws$!ATn4qPuFp$BO7*D@KNhM+xGCyuwPo1GU=aL-(P=<6aa
z(vFVuy8kHMcNu<)+$1PzK=#(bl)B&-0}j|F)VDfuO|$SDU+&R1P0qYXfW5F}QNo$L
z@Z$UlF@5ZX%X&9$_lE6m6zw{-i-uj3j`v7ai;gX|ruL7U*H3DTTXj=RSSOY2{gF(g
ztR+s%H?yjOJdSioK`#(pyC)<d#qg9{+ojWZ%ai4Mf%PbFD<@KObQ9ra3V7YRTDWPY
z>;%-C4ZhdsoX$sLsWnQAHe^zP{`qHSGXK~g@k~vov})TZo^U?Xkv0{mpYOJ|(<~&T
zUssDGtNja}+&mcba!pU!Qu0n!Y-JSmYNletbC)*#w~m7|L`mu{mAtu5tw`m@7K}!0
zN_=`01|^w3K<bxfVLzTujH9^WouCwUvP)P}kac10=`>0%-V3XFVz|L-j>)LarYIGK
zZiQaHjI!a4?d|uU>&K2M4whUM7QgRav09RZ7EeSaqKH-rWmudIw~3`y;U$+^t2KXU
z<@6^^czaiJygGSHQUaQi0SG-Dt71W^XhOf}5kIW?k03&zMKKbI4b-3{t@sAWoe+ge
z2+mIE><@VG>?A~7=&c7PL)73u6K`7R+#d*ruI_8g&b!X_#3>a=-O|RvkCBV|G1pv?
z{u{5+$8n-UxrxgeURZ$dXUzO|$(8sOp6<gJGBGiMI(UaG*!&)m4v4hMg9+T5%HntW
z9vM>&KbPjIl}cD)=Ze>8s6->4_c-SnTt<j`@~wiYV-tAWBF}9#a$rGM#<m-mM(}=!
zZ(O`<FMLW_SYh5?GK<H_&Pf`%Ze4bs(;m-1k#L?Q<oo_F2}|NapJ?M`cdQyYlL%ei
zaAq^OoZvHL!6;asD}{r5$Su71UEcLwLS%+7%lm}oUo4*?>_<DTv!C~jT)V%gXJ+OD
z<nOJSxz2i4Hs?Lxoc^Kwy8*#1<j1rbHsdcvTkdvA-kAktDQO%ATbO4E2130bo<CFM
zSA_V&QMxZ5n%(Ys3OZ%hr=-b<T}M8fOqP)1q<E8rG(cuP#4+;y0Q=v^U2agM{ZbIQ
z7S*KZNZOeTyhrrw3u9i1l{wDQpadFI>!7IB>4#j_wTkpUQl@*X<J}&LeexCl*o@Jb
zDJ4GZhy7AbC_*ANgrCNAymTHbq(IQkbP_E^0-EBC?W8hNHslsq5rh^+FTaj01~X^R
z2h2XhUj$j|hDCq^t?(QQ0hx<gMJRx&RTvewAg+@{f-%7>bK1n_e!HBku`AhW0Oe_s
zO%bEangyH_-2Wi#oPsj}y1XBo6Wg{q$z)>Nwr$(CpJZa&w*ADmZO=FFw^zFtyEo11
zs#Dcnjp}oL|8mJbNQoKS4y~N>(K?Ev<Osnth3I+pC?2UWiHdl21m2whYmf4>AM)z~
zq1#|1!GZH|EWfM1X5cK(YDH|T&D>lgn+EIBSy);04l1r5>qvadN;`+7vB2r|I$pUk
zN_TW?w~Iw%zaMcRVyeZ)d(j`Q8wco5#?6v3>$PK=7u}4i67jA1B+*00opT2~jrz%0
zXmp}A2FSL(dpr$g3_tTH1L2lUzHw-`mC&!^+K0+VEwH9UbAsk?^R4R4f#J95dA@y_
z;0<*nQI`$qt8a)tEM%*ADB{oxDExbf(Aik_O-){BvCA39A}k9dqQR^SBS6BNXoy=p
z+Aut-7Cc)SLj+Es!4Ymtg%I#h;9!;vdKK*6?EFD#{J#LXVyw0M#fp3EItV|oj}?8c
z?UL0rgCaU0os&f{h*A6iUKNlBJHN|CvSKC;YxD~cMI84Jvxep&J_ECTpQu#GZ!f|9
z>%;UBfbuSfl20b?;uNy$a+ynfh`lQbf~ok6<0_;_Zz#VQh9NN9joy;%N>(5!jht(~
zzqGF?`<<a8=Fh|&IpQjiQtOqy$pZYnDKHI5)?_~H(Gu+{gmbfqV4)PT$;Cn((^e#p
zb6(B@l#*eZ+=3unSl}tBKR>+Q*CXdkfmHWbPvPjA6C>#=sCi^E9Xd=|Sm<JHTDDQD
z_r|x?6~lsQrma9kC$!Uhsda_CHuW9K4=YkcsE>EB(PfcTl>89IkRPjvF}Da>bEYf>
zG>N|wPT(zNtV%9uzQk`_kJT?8r-Mqww9fk^aqIkrxoG5v8ICBxh@qgT4HSO6&68BD
zF!HL{j)*$<#e@}vSLnw5OXS-ukjmy2T&(r>3wU<_5pVPQFUkmNsaAGfH{(`-*0)}Z
z3XdV~?M6{DDy24N@puz}`v$t>G4!ViLTZ62p<()jGYnRWum-Cl@J-I_9AtGA)r9ai
zSI%~nxV9jl)wzzcKkpi8wNNFs)i%Z*PJ}<ryb)WZP3h>nNljO1Y_zFc{`hoGv}Wcg
zY?xAFPe)+R*QcxR-IOhW|NO}g6#nUJQ9^eR&~tdVu1aQ7(l>=(mNq8yCzD2HS`*v{
zQOow#C6f7Tu864OxZqj@@iI#HGU+KiD`u4UtSm73Kub={mK&#a@6ZBTP7Fyd&YGKs
zO?GNVM!{K>!Y9XQm{C%Y<E(V)(v5?)?*YIh<i-@fga`xH7y#nh2$>x;M^C&N3)w$M
zZ_q}DOxhS=Ax=2-PuTMiRIq{Y*D9M{o|UIE@FMG5r5U|+7*q4zPnrBdR?G|J){QpT
z2FW;}A=tRkJ@fEnmr^1ye<76qzI$Tw?-`Yo8z#}@RVjZWko`*JnmaDK6UvoX9G?3M
zt9#)uvD`QK!{IDpl+_$dTXTI(R%=k7A$|6KO1<gU4;r+|HVUPZG+XJS(~$-ZX*l|g
zG?|4MQ(*>4wzN>KBr|&WrlO3zC*aY5>q0FzedLeR@-bK0f-Uo1?H^Z|A;AK8Sf(Z&
zCBqF54@~g@e&6?3cImJ^e$Bk^0^M?uFUu@*tlih>TIHsYkxF!i7nTiW4Gbc=p`V)P
z%mWSDW)10Hv!xiDBT&eMGT-r^uqEapR^NKtaUTvp$L!5WI3p>Ns*|GOW)jlRJ~^H$
zzOQctL&K4K1z&UftxE`~$G3_;_AlWmM$A78;&fF<KeJh^csE`n&Sb=HyWl2cZ!b@$
zIW=A8x_dv21y|YZhypqF8JKv%1s}=$598Nn0X<*BYa@QY{DklMiq^&y@rxUXm~PMF
zJqX_~NAcbt#rflXo)7Mj%e)uuBGTY*4)j_jPQdVeYNZp|A@jNG{Mtzx)AoY~Uqsbv
zAjum!nVp>S0A}hJKz*(^e{)FeJU{KEEKCo=^s_SxLni=cYBD$W6^>>+MT=wRczpCF
zR6x?%=mQt$Gvm|+G5#Y2+UwV-u6_5kbG+cC|5qhQKl~n~4fV}bA{QEDa#f#n$AXCi
zbAbI<t$&9U<HAi+k~Zl<;shoH?M8eI%??#|NIF*nygIYSFR_$REeVJrm*WRANg<}I
z<>9FH<8J=UVxDAm38SkM^`8Y-$WxoOW+Khg|0EzQDR3$$fwD<QLC%h=V?5)>Wi?Mi
zt{0)^LY2$@zD8#LsYOdyL>%#5A%DNnKABckx!0;fQLV~+2;cUYUHFOKNklrdXUBQL
zI{6>oY_6<hesN<7g-j-@$4&@AQ$Fi<)ZR}V+MXwNs}D2`2MTauCfw2WuNLkMn?Y_a
zL&@kTAoTBos68!t#%GB<-$dGf?x$3z-XwEp<si?VAiO&}?$9l8Kyakm?-JW0Jl7|P
z&6{Z`)eLo-igG2K>0~dDorq>H4#*{<9?NDmOfF!Ne|Rh=_>wq;8!Qel)cv9x+tFCo
z2fkHk++v%^F|Oc#>)vulkd2$n0DHea57!EJ@|sQPDk0BLE{$erogLH+hbf04*K+?p
zANtGrdwkyZ%H@5&-j2V-6Ma>*>6;-;2bfbzO}7&xnJmN3@;oYzj^95{;v*7I@*ZiD
zB|bqTP5q5f@JYBtUketZ;5s{0g>0mFqw|(6!NGB%p2RMQiJy>Voor090rvy3r89Nd
z1s(<Va^|vgr%479AvP7ECh6Q+sR7tAB}4w+Nl0hC>fMan#}g$xLN-0m1ZrzH%I*Pj
zh+K>zMftr1<yZQ6cBNZ3OXSBRt^8=1$3m|!tJJOM$`149>Mxba1rd)*6@0R)k4j(m
z(Uxu>(PZe1&BHl=_-K~`P&Ap8dB<`KIXqA!t06516z?#r2pEO)eXQYUit>p6eP<lK
zO{A8#u$~>L>1MJ;D`rk9YvTw478j2u3{@x^sJDAYyK*m=oDMWJT1#w%C#_k<<rbOr
zd%<tCZV74+99P2hD(j_f*Ru(H!e0tHIZb&m!#Y8mh2nMtKu$k`Go=dT%iG<UIjXA<
zWdu$Y>G1fvXi2G=ibc?}ErKFQMbT$`6^0Z1ZO~#-=TT6FmU$>}*F?xf&`C*|vuCIk
zZP11zs1-y&HOA1S(APvzNq?Vif*$5675tH9R}oPb0q3Dgp=`4JEy^YYo&o1gM<5kU
zslaY5LS{P%J{gCkPcaQMFH#Wo%L!?Q7ywO()JK$pC6$ZVd_U>pJfY`9oI@g@n5Td{
zzd^U+*>bk!S>JU4bjEf4I!}4g%XtF)Js4h_4F1A0e_3di+`fSNcwtm>0t7E=)^_>m
z9Wr6<bWtPgyS#XR*#nT@f$8BNFCG1gT%VKFq?vrVswDTqTzO2}U7J*S@klRw%N3;(
zFpy`i?jAQrqLJv+`_pO(UH0NlGij!GpVI}Rsu3{PFz%E|VP^T{In3kKiV_jmXkRLQ
zbPXM)-vsBCl2CiVQhB|s^zxUxgVCR9Q@(OHq~S?bkDQgMtrL4L2pjcy?NCm7-*aEs
zohj|th>=H!6e>E?m5I2Ye0ccPc$*V$_rH^BEu0@F6_goGmCjVO&Q^5KdezR($&0^o
zXp!3b^g>qrPBy7n(N5l?WClxTd;Y$)n!mh!6a9A=>M`(Xd}Ra>kVGmF5PA@N5PJtx
zJ7;Gb1{OvZMrKncV<%4s7kefnJ0?SC+kY8@F(<pn|3_>8tN(9s?IkU5`wg)lf3v^Q
zy+M)Exl>35OeEuS)0%v%QMEbAsf6&bp+u|6Inl@ICFy8`{GPKjb$iH%$M<qtu&^DU
zSsMA+dOa_hne-cyxizB=dd4!=Sf(&PUHj}Xb95>AapRd*n<M-W{6=#4wTDP;*{BfK
zU|^Lv_i3<ReAc(U-+uV5itav8A1SAaD>G`S8KX^5Jfl<PmBq>fnsGiTX4V$88>weB
z08WR=3_&T=K?!W%<0q0MK@o3vtgzrr_dME=Ye5-woKcZCqVxb0LYrp;?*=h7=Dysa
z%l*$o8*Tx*;{|T4K3m+POc+W}%%NXQ8R;Zjq?1XHx5NJgbe7_T!q^cv>N9#1M3_>z
zuS8oAif>2bZ=sR>sDkJZP_wHt(PURHd68DO!(Raeo|2^dMAqq^!)A`clM;Cn-WZgM
zX#=rATp~}Tb;{?{Jm<n^U?-G9hmjmg^vcJutYbPJicoG(K7yD);;cscZPRT|?-SU~
zPP03Nw(7NT5Dh3A)<EFb9DLdjrugDov_42|^`>L~{eeMk#s_BjB!{git!<Zykrga;
z^%a>z)Ujli!A)rP>aT=S-sptkkYo{JxfCWU5S_M8(-umh5jA2)8*olgn(E>A4@EpA
zjG$6U{6xk}`7w%k5&W<&?phACoJQujWc0G#O~HU9^iOdt%{KlR^(krPo}9j?#9(q6
z%`D;&wq?6kO;^ol0oaEW#{^Em$>;NYN?9}8H_b-yPQQ#b-@)Blv9}{<hqpH;Zk|43
zycfYc_=O(t3h(>Y*7Vy}<^f=5s~;blV2a$<8I()DfRA~EpzKD@>fX+|q`kh~(pdQY
zUt~{8p_TAM27!3dThYuPY*oCHeqUQ*9;<Co()po_^z?+m68vU{B?oA%&hg>x{^5V2
z8Pchh-8IGW_)qqu%enLNp~X75IK%6paZ^UIVruovql%6l(uH=z&Mt1s2r)I^Hy1{E
zh8Lwv`IYgtcS;Y;0FOT{wrACu!UeiB_hUOi#vLmU!L6%HmgjFGyAw6%aP<{jn3uOk
zeEl9@#M{9Q=2cR2Iri4VJpG&$<z7H+%`O03HkcTxKb`_GMveRChcxP~NgrS=6d&&9
zGP;@3-~ycze4<U9>>@KQ0@zKMjh!ic+a5mSvn85-{A~Y+obFBULbi)8oIFCJ=WC-s
zygzzkN_!J?_I8lpV(|)(bIgypO}dfoc8+%Jj==QJa`t+MdIWQW#szY_Ov&-^P@4rT
zfoMDl;pIm>V=p_jhSGZYa^eDXnU%S2LlV4S5`GIytY>HgU;sy?MlX694^$EYJ)Y2u
zzP>vwd4fz#Nbn9Nyg%#(JlJJvn@(GXe&m2i^j9v|Qg)YuY;kI3OMFEuzMCJ+uJz^V
z?jx`W%PERyb;mZva}))JqT2F-ntsX$kh-r1sC*Rk-R;1usAgHk^uU)zSsbg)Bjn0b
zLZ;$;?<bh82xEO?hufX(^@X}Y3%%$@kja0{7Hv)YMg`fE+yr#vS)3E+X%dDh1aCW|
zdcg|Yvep^34k&^a@{XR2Tor<sexPt?wcq{eviPYsBy{wuP$(Qo<n?eR^7?C;&%-4o
zLv$_^9q@^9IX3ru%#pa}angV+93)h@R9RT~WMdBG)QKLBhR(y+(cu~$fWm4<;(YW#
z#4T?%A)HaL@K<F_Mbz5(k$^<_Ij=7m8bJ3qJ_D!M(e%%v@-4_2{sZO-N7h^{L7OKv
z)l$mcAs+J~f;<QR@AL|p-RaSNsPvn}nh9mpF4LY0qIZyqigbD7#b0Z~#nM#2;%=x-
z=dEAe8I7RqPtd=Nz4UEE_)UBq4@eWPpS2pPQLU)bSFpGinpJ%n>BJ@M2|{hc%&JJT
zN5%?5OP3nhy}l6u8xa2Ok=s&fo8VBe$1adASj};@RGsyNBfQ#>hGUdDzEcPEyNYTD
z8qP#K9N%w2db$o@;JawUMrWb@H~6UqCdG%UKhR0Fi&TQ81`E%=kdH`)=Eb_)koTPO
zCtgp-5+1{TH<7nQw7JTNk1tgwvIgmP?nT5kB6#Wm$aV51C(wkBW@fX1#pYoqa8!Os
z2kN!-h4=22U4z1`%$xc5C~wmT5y4`#S9kd``lzLkf4iBW4@RwZ5J@UPTA0~#cP9a!
zd;DQ@^&01wt^Cs(S+K~R?kHYrfQ*K{Qt3;W+<VJi<2?Axu_?6{KtkR=CVg@OlMn?V
zXH8l1XqQX34C`Eq{Aku<YnG?wNazfu=LjkCXXx^8`6(g$#j)uw<lS0Zx7=uQIUWJ!
zGT})<$35r<)6RP($}XEg+Z}9O{7t0qdh%oXeM>dB5v7FvJ1=#-X16t~HILQux8s&U
zQgz%0u7%C6L}h(z-v~aKmOnFMr>7H<AG9EP=kzm*S~l-2f-_{;=%Nt0^Tp?Ma?1$?
z6_7CIZtcVtfjL88>kkUUIs1&KOw1v-l7?=ptgaDNLYN?wS=tC5q+@7geVNvT$l7A5
zlARgi$R>nWo0u<`Wezl!_!qBEOtK0}0Y}K;xT%^6WK;&0P=w)E##YP9f*vz#NAq_H
zwD8bU(6AxEk%!<Jp8kJRi<$dGFk*=Cx+TTXeXN=bN~zkf%?5ab?`m??wo?m)B7;48
z6Zbw!xzgf9yGyd=;2qCB6&|KXAcm05bbg$GgwBONM12(^73DJEI+eO*+v`b}zHusf
z5yBPDv~;2P$aYRUOh)-4?3_Een6E9_;<NX!r&of+Il~L0xN_<g4P3M#HT>xdl7B|f
zVTvY+vCJ$~%Z>)HH0_0P(3}EU0x7FF`RNeYtkqjq7O&&e-ue98>09-xId)NBCG00r
z7IKjGar~_uu*xQaV+5)odSfdCcAM?=3D>JE^CLzRE$F9&!&!`e{4F41(XT@hhICBs
zAVNK3&<M&}&O`7!Ko3@R0^}#mY}f*LP;rE_!~QeH5Rllr<F5?vNS80l$RnZZi)&~8
zzu?&OnxJc1m@8EVMQ-ep+UM1|BGP=qp@Llgo7m{;A4doi?BMLOl~3EDcpOL)i=Y#^
zMfHRTQXm!*>D+YjHKq#{#MZ|u#Gt7bCkc0$j)ZdcJyAweSZf2pw=MzOi3jGQ$kM|Q
z`0(WEyP+&|)&dsXQG*^etlC3@ruU7o%V{6^YI(-f?fTpdDyKm{u(}F(N|sPAmT?v7
zsPN8I+Vi0he>0#H1m$PLxfUAt^fJH_xg)_>HEw0s&>P%D68f0*Gr&avCaj?H!Hd};
zDIFX#bAd!AdmY_{<|>>Y?nf-0nWLA`4;foy#;>_0g)vIQ_5}QxQ@b)KHPqY|P=ZBE
z{Lsv^%I^{v6tHD*kGKR(@wOf)r8-piS`fiToyDxg2aPx{Y-PDv`~$Peiz|lXV5h_g
zVnQ9e<ptqY{hDuZ@WjA~&C&$usL=fp{aedyo^mhUK%Bp+tc@S?q~Y%CQ9Zogs40}N
zIk4G(7Kv}_+)wO2ZZbQ~0|VIKb(1*T^k68m)l3MPASC}>!}r~D$4oRJ$#yB~D_Kf5
znbvnGT1e%^qP?R_?`Ri-{Z@#}Ka|L6U><8gp;I!;JO`&*tMHi$M$bn`l7Lky;ni`n
zu>76aQNWTArUgQ4rOFPqpb%6Pp*f!+0i?op4jvK75}40G#D%wn5;3-&(~w{z#+5$a
zqn$V6EC#%i<jcXeFo{yTKOQ0hd0k{0*Nr#r9Qqk~yRu}oVLQj6Uw#={JsZph{*b$(
z*}wqV0i%05NPGerd&jsKx%2fDg)geJGRhE@3jbLm`GvHmDny*M7+aCYt`M}~PE{=F
z*&h|npot!{Xp;{2+X{arn~6GhKBc6#s654z*0O>P>9N3DgD^m9PM6x|UAyDVzOtLd
zz1Kp76B~)Vm4JU<CO9lpB3&)EbZKoE$ja$Cv2J6`W-0E=X1R^dWk-#vsTO6cQPFBk
zV+`EhNNf1dm=CFRyfl{H@pt{*HRX=Yy7*?xD_cOfEI=v!>-ZRIp=yJHfMaWVJ*l)Y
zmfe_Z;aw_e0)Co7aw_+qAVWk`;GyP&mUVP#ce43Q@4qAc&x35y6Rt$1k9oK)RCY@_
zuHTM9$#odn5+ZRfj31n0HmPEB)YC_b&>aFssXGz0@^Lh`tac<cQz!dF8D2!Ls8NJE
zs3Nqf4(+3(LdZXe+3D8u_k~O~=J)@A5w2GBULP}pfJilffRO!P4;M>APWJy@4Cqk%
zzr=uW-svc%bY;fL5dw%s*Y~_IPKvd7?uPFuXwqjnAi@tdhy!+oqShwAu3lVcK_F-*
z?o7K?wcVv`l>21l<pq2Ersh;zHLJ*U0d2({!#iFjNeetnPS_nxo%@0+dZ+BDffsq4
zOtp;Og9<v`UFfV#T$X-hCEAXeQ!V?Vxb{b~9hiBO^pn8enO3`|lsh<;&EH=~kB5iz
zWOww_E$#nUET|rU9e93!YCj#?JKvI|bf((jXnx<)0wo=_Bi3ONN1V}p=q!Z@B9%Y)
z%~|clB26`}MM=M>MN+3!7$-0@SG#@?czIYs0|4#6Ka<pqC|XG+r4=!vPE(|HBiiFq
z6<QM~r2e3x7SoN1Q6~Pt(`C$TqcDyXVMRS_O2MXQ;otZ{^ZA=BbM<Mdv9`ziP4%lv
zq7r}6tb^M5XSGz4O%}Z7LYJwg+3<mQJZE-nwh^)@YNut7hY97+h7HH`BU*v_&ODzG
zqJjtInn@)Jq6#q<`4<sca@N8oEhaTxc4l?&k5t$c)v-|0KN^8^jpcGCJ;gYcU~a=&
znun}3e{^s}Ed_w%zf;aw2s-zvGJ&hr5-0gB7+kpIu0kSpUg*-@tYQ!KCSpZyGmg>C
zL#i}ry47HpZR%>UZSPvP5TC|jh_b*6^huY&LJNiIO`jSkkJOBlvkFSX7TBap7q$MF
zWi8tV6{=!7K&hx?7+vXIi*%(GCjf}(!zMUPpHWnNufjjbq`gX$qjRK{NHJ=e6-k;@
zpL4DuY|wzJq?$m6GpHX(p(GBPYZN`Kd`FN&q0SoD8t<LErI+4-B5eFztknm}RI49J
zKRpSy*`5%{NQ6$x91r2VhQSQ^ki)M)Vc8tuUMx~PHm1s%6$5rm7Tq9CR3lQ*w;`d!
zaR>@u*%Y*!f9IJqku((?I&?fXDa3#2=2T42C8TbXc9@xFbQ(qXN-TCHro5%~EHWI`
zTfB<l(~SZr6|A#NOZkSgm&clCRz&BgXcjIaDpVs`F6qMHYn<0k%L>-vYwNy7U}7t3
zWXzsYsZWQfA5>k*9fqJv4yxzy2c!K5f0dDHq{cuhSvA};;wPu(96c+30eGTthlzj&
zI|Di$Bh8fAFNfz<jn)HhH?F5%(4Vp94~Yjcxql9Hgg<P2JtE8l4-PW*1+~kZ<dC5s
zC$FS>uD?PFyB!(z1Rr;}_b$S>@w_O^*}7;a=J7^PxO#jC`<haUGm4|8bgEKh0Jyiu
zr-{NRmJqAd7;C=c9df9ex71;%v)IB>rdq>niRzIa>izCxB`Vh)HLnF}#P~>JP04sF
zidFfHgl4xavY2@Z@T;j7RBi*9U@^Pckg#v!YGkkUQ{0H`tc>Oe6%lDsF8szOF+jwr
z8cJZIO|^Dl_<5Cd9@_e|7}+NV#u{QU1dyhmuq9*41-zokd%Y?17iM)G40eqZuEIIM
z(Yt~9h|$A1wy9)%LlvW!!$8#p1+$GP$JqmJGmttk&%==0EP+HO5@bfEq(5gDt&lC_
zk=|EoZ~Z!>*Z}PJ&&TrD0;6IIk;1SZ#7gNc#wYY_`@3m}qp0-qHm|x7wQ&zLEoysA
z65b}T7EsxhpkgYk>ia7|HZduR(cEPDz^SuDQ#!b!*$DzMZK;CDJW)U3A<f@C*B*4Y
zl2%KL&PoRD`8Fj?#|Y+74;-0Uu#&z>u#Sabfns+Yp2jTHrw^g3{)s#75DCEN7M|pc
zEbBIqIZ7He)B($RKtdr0aG!q>J%NsSOGAS>(V|+aZgcP@1meA!H`7J)35M#CKQfh_
zzqR<?m(?K?CN}d96=J`F8nN}Mz|1~%eb;>-KAk1QFhbeoeG|lw+9}9CbQ9ai!cQ4w
z9e?o4h8P1V#SZ44E-VAF;@p6remk|Lp@7V=FGP<uP;ymy_@84%nVd+B{Cv~MOqc9L
zMt}15#;TsFL|OSLlY|C~FvcxRo-rSV-BslIP$F+uydMxjNk(3WFIh|^7i12NjVxs=
z0>(#JYp0_M%EpIo<w(b>b~kur7bJ8r!W~$jM!Os1?V*JVab~GqKtjWsA`Sfyk*@2(
z?dQfO;61Vg&pXLj!yOKH%%Ss9Ie}rzK0bQWy)a>Rf7=LN``a|9i8zj(`!|t%2M@)Y
zzy&P?aQLueech*`k;1NT3Hfe=MmWF*O|ZSXxaNDYapMaFd#Mj8wYA&Fd=%Fd77rDj
z%biCMGcSTbYRcG9sHCHR4|2mW6za^#mibUVUkw>dW9@YNK7B4d#oPCGzaMLJmXI$;
zuH#^1N8B%(-iocpBn)7kqd8)|SU4$j-xc|T5khVU3WXkkde0}QTyB|%7ZSvTjv)Dt
zW$AF9B5y`}Upnl@<6&s$Ju$=}hGV^~84BWa9`l`Q^C85Tz81nau8%ei?)5kf&E4QV
z;=Kau-;Ld{IcHdzNnycuc2VC>S1YdHmdSA-#3?9n@iGb{!*uJb(m?PkND}qsRjW|l
zVpI3QMLo?Urw}O@qiS?S<PG)blfuX%*NZio_wbq-sJoo9BI#q&ENAr;?hwraqCLV7
zJ=%R~8IjLLp9A@ellZwZQDqY&$3Gf1?C#{1TPr=5F<`C2GR{4rk%T}$uV`f_Ad{|g
z$P<Vy$=}U1XL>KiEBM=L@}kX|^icm@#m}oxcND(ql9>uZ+O3W(MN%fnKv(vRpj4qO
zSVEhQ{GjEcT{EuO#hk=|34;b56~4B)=bE|OBrC_Z5lEhIPcJ*ZWHS#{ogWnA9n{bw
zKW+dNgrdkNH&Ad=#@QVo*O95QIL&@W>4gD{^Jq7bb9q!O-+r$NCwO2pUJFK{jnhcj
zeGM8v^7OpzXX<y&^FKcCk9LCC^oAwxFZYBW9A9ADT}y%el`B90P7jWEa7g<wE}N+i
z&hqV-0zF?7#CpAfgglurUEa`)p(G!CUtgVD)2f!%h-LP{4bcd$6+bvuP|tZ9YQ*qt
z_CtD=-`FMzm}4%RPjQJcStnDb;6Lzie%@=QI;(0>upk(%Wmrx2@P#V53hAjIG}T~`
z)pC*QOLLjq(V1r`YY}B1Vkri%GwXPW{gdJx-UyCq6uL^^(P>_gn^4xNg)TbVq)tt2
ztzuUvXs~$~s!UlWhqFn&t(UD?OUtHi#)?`nsg5LTL<eNp<uqai58Z);7?e%u&KKIY
z227{W`tFynsUpEh65Ci&7T?Bh3zBgl1q~{&!*Fk4E5vO;gbQyH=(7W5Wcon>VdR3V
zM{VJMPK_3KyQdw$;PImP?b9QOLJAanGdUl#71$5Y25%2aMGAfQh^3ok!h-L<Xy)@J
z8N)fH@sX`5ebdONKmFcdtzOBsYE1l;9oBThq0}1NPG9o;KeF4xzMc!PpOvvP**jNB
z&8o|o5)uLn;z*^pmlOzUu*-!80dYxK)_o%W3HTTQ@!3P48rji1Du~|<>Y*M`;?+M0
zSlF|zupG^+c`*Br$`dsyOs~pSl$6>(`-)_xF}5<uFNNZyR{wrJ^n)9I;KKEUrOFWS
z)&77A>Nsv9Ac3IVm6&mi_u9rFroz(i4Y*-q7qvKuFN>0wT<3I|v(v-Ce$~O`ijcs|
z$Fx=15?dr7k>aA2SFt%?r9Z*sXBc?2^fKQ@_Hq`)&TUplQy!BkvL5~&fqsY_Uuq1c
zXplai<b{v1fs_x?JZ&%HqJ_ck*fP%sGa#}aqiC<jq0RPyYO#B^DUt>BV)}NYSfJ-}
zOzeEAP!R><gQ7+2)WFa#yx}+VmDN*#G=r$2I~v<?FLQys(e|JYW7cUO^9DT@`b_HN
zv{ScwzJx9!q=h)^j>(RQuEWIRC5AM(CfOap?2nSlnu7)Et&iD}L}_l)D~FA+_w=X8
z5xCyoNcBiNTibQUggq;3ybiO{!5$r(kA!(uw)dzu>d7JYMJ~-jj{cAcd7ueeN@*3<
zR8L<miW9rfC+Dc8Im8ZVCZ2#YAlY)Vw~1l5UGLZpGSVC;FdZUjR|q|WiUboKT*|S|
z(2U|hfafwhAxH6RPO-)-Xy9FLrZCZNXcEra`S<}~m0Xz8UCOnd8Lne{u1}Uvq?|&j
zMdP^W`g$I&%-iYt{9Zzy?cqhs^Q9E9+}7#E4l}39%i77EWa{-1iXErte@n61pMmF>
zGxM?=`&iCIP0~Nu^2b<ujJ+ya)2XtEt89a%1XWo)HQNPU>G!1a<mN^zjtgLE$y7T_
zJ;lCNXe{ZK6ftWkx@M+`X8%|h=R{@5Mrx%XOUxM5sD;td5=w_j;CFTshr*2DEVfEI
z3=_fYSgTtMemLB#Q>>^D4*E67&gxDD<I|T$Jpq2J9y+}=|Cd;G$yL3HJy!GFaH2v+
z-3fH8$R>2-?<>(hG0$Qt?s1=Eo|fS{u0t24qg__tG@wjMlQgmh8As;6c#U*Y=XZd@
z>~sDOl~F|H642zY)eCVo>%Sc#YNxo-JM+nIs(tgr)(Y*)YPcK69ko;$htF0j56}jY
z9X@LkGk1Y7h}PORp9w_9=PgU%nkY-oo(8(KVDKj(%}TK#cmo-tDrlOyOnZJ>0)2e;
z=YG>O`_S+D$4zb7=(#-X9^MS-T7C@$di6yoL!*5#UcL*hT)YpWQE8d}!J``;58Il`
zKKv5mddb<z<KJ6*I72f}tzmIz?>8RZ8$`I4sx^(_;9I+$$~<Ny><~>$VQi{%EeQ)U
z1R>v5CEi;(?DUIX;XXh9LhF?BACQ;(#p*1H&xkPUSi950^~FgGtnxk~>FN;YE6Cf)
zE?&E+cjLaRlQVEjSh_Ix<RV&$j;GSRW<H3M*0MNM2VyhF3IG!_b4L*5>)N+&XtNOF
z@0btYNM`evAJ|}+7^oz$KmR1I*Ix<PWt^D^h|H97uFf8EjP;zwCA^}}k9(SDDK3c(
zikU;Wv)dr_>(4EG`uK=xxgRt*B}Q|v^;rmzAB&~gD)~@7%;1NakKWmJCvOG6?FG{a
z{sUW&9S5x9v)f43(O7drlMTkbFUdMHI}1%ce%cYfo4HWIcbOHfDV)kr1?;$kyXioG
zXDX*?U`L19*VX6iy><yxoUV}zHeg}1z~ZXuY~wd`tIe=fdiyBd;9fIhugJtjjLz$(
zmoEv7kLunm=N*{uq`a%eC|{aUZ6@btr*e7Q9S4P9f>_1%;pg0v_3H?iLpooX6Tu(j
zX8p}Gs9AHtJJv$}8{fbA?e>>^3a6haynVQrdCJp2#HqWGnd=LUnX8-V_*r!>sNJ{n
zBR#MkbFoR;vv%fj_#ZEN=lgZ(0ZUNt+vDlWUHsvTlbJL8<OWhKI<$H;TUf^irrDwX
z>(Y47NciEaE#m7parlBkqhMSb;n!#bXDZM;Ov|7-ShI%%p$kjm2FwwrsEbHn8>AAk
z57!5AC%Bf+qdV9S^All-^Apvp(&-x0Yi~*%Vt44>jHs(?12uPxEi5-<`swvV@Xfw|
z1+QHi0s3x6!q-{06=$~!%UpcEN6{4TN*noQ9-xwiKTmUGSbP%(iU*05_(ff(?M}`r
z7D@sV#nrxnb?9WSUhS~^5^KT|ZV$|Wx5m-!tdKSptZQyyuz#^%a`3E5R;!iQfi4l@
zL?mOeOCR%@wYmAmPD^PN7nKZWt;Qqs2{iARE{oS#+0<bV_HxF65h-lg*GjWXeI%8{
zipdAdyhvFkBXtR%IHIe4wnA|qx!B;50iut(SeAEN3K&Vebxe6n8`EJ~T5S@#cAjR8
zi|P`DbWtZVbJ=2gRg0)b{3ZOvt9F(9;;r)SQAZ8-i^KAPsjr-D|15cuP4Ao2R-<m+
zNNsF?mvFz$;<I+yh?>2R_^n&jxxbL35o`|}+pqMs63+P*M1dEu;A1xGRP6n0bJn5;
zY%L4G8&VAgsSRm@Rf=;HfPBcS?H$;v(23XQZU>8Tz7mBjTlcs(o;ts6R$fS<$A$<-
zbIzlo3TUSq)p>Lbj$;1XkE5Szyg2qTIPQajtq}p7jzpYqt+crqNj;bvoHvR4G!fWW
zFD!ur??D(~L;+{PuWu5pNlsSt6T*5qrbI4)Fphssiu7jK=RCgP)vdRz5g2i0&J6#v
zmxbiPQ&5JJ!0jfdu3By<AIb5#R|Qw6W=;h$Sjb3HY}}9xpWGYbF7A>za0%5++dMA>
zci=8gq?UC>SDe~-X?((HZfWi@>UMfC8}I|qKYjIAF(o%5R5-Gw__P>;rP)&5mQM~Y
zB(saM1O*AckvrY(BNMgNHHjU$b4D|HlW580?#p(JkHOtb``ODH-B422<EH;gD37zT
z{U0R8IlJV0$j@mfZK5I|EUzMHU}cfYT|bK}qVKa!vYbuDJx$n5N|qxXE*Z!IWGj7p
z_t@7@BeR*-PU-rTw-{vM4Ru89-)=v@5Vy8W+6qhB7(0V{y>C<QxRP9A6kaH<D1>-Z
zIiQhfgTLD`EVOIeX)D@nkbW=oR-ZOo&0rgW>tuPKIx#c{x&)zTrm(yqxsUboeR6@$
zv@l&*fQ@g}kmoiUVf0G7vov>C+1zH^r;+s*zM`yWNVGQQ-7yfW?xYDqddwo^=VpZl
zj$222WyCWB;cC8dnk39EDf2ejF9YD72TrISi;*W7-g=56qrsq5h-R_-@5t*w-X0@3
zgv)Gp(Cu}fck{(|(DMVF;ZoD^AQh-qjn0zDZHjEh!}YRHjX7NOcIx65J%vM#@9RNO
zt*_s{S-6Sz&3f$}li|crIO^7@WRO6!x89K45jj0WWSyZ({cgkNUF`*od98Z3KK)V3
zwaO4`6rOpiOq%nAHe5cilkfvOkZT4kfS#e6E>7cg51vJ3Y96ipJVOUB>K4@nC&E#+
z$ku)S2B2<L(EhKV`6%$>e}9oY_nr>d#;qu+c*I^;#%%8ht%p7b4_wG?EuG7*t)GE=
zYeB0fGDKgW(QRoT;M;B!b*<LAYAvmaSJ<rotTD`vd3#?GD#!9M_=81A^SDlt__rsi
zY_{x*0G~+dSvFy%j~A-Q8|w=EJxyx9cv9R2W+Q~n`ygC?f;v&vWr0#}bw%V)4_XuG
zLyHvgq2Nga=)~OdGx(Chqbq??a2VM7+jd`Mcd>nspOJMIr?$Fea_j>yz5#=#qCcB?
zHTR?c*8u&m7ykthwVjM`&6KR3HR|az&PiG4rkG1CLzJJpR+%~(3$p=-iMMi8$<yjC
zyI{{U>4oO&DQS<PNniFqNX#|+p58W7xyDB$TyP^%U9b|I10QbwmTi04+ACaEp2X(E
zn?;58f4&P4twXssn*=l4A}S4fk*bXs=(H4W@4d|>7IBKK6GB}D75i({g#>>E4O<Vl
zpcI29=|<Ut*Z!n^e3nZa(Sg9He0{-UlBrn2t;XU2_4H^fE0?OXa&TW_^j`U%sQhbr
zv+lkzk@>N6ubeXt?Q*5k;(DzFW>~-F6M%TRzj0kmod6YRB56(1P;}Z5r|q&+!8Av8
z@o6SOm=rFahR)Y*8vv0gf^>50;KzpVWOk_7xXxG#bUM}SG7WWPZcX{it~Rx&S?P;w
ztB^K5%a1Ym$AODuv4u3-q9Kx$4=JJfSs4*3^y6MPo796lRMJw9<eBcO0vL_vJ<_?H
zD7IBlHv{69i4wO~Uy5O9d6hu%hiR-vu;#gy*lJX>qtQ3V)b|D5ZsT-_((BMujh0YL
z={S!Q=aBf~fhW4VH(m4y54FYe_J-r&*M`3oPf}f-lS@p`&#KT9w>hh4rTM48;NsiB
zEP(6Duj+SJhy1W{tfKLE-OMNg?dvvcm9Daj`zfWUtFm`1<WZs>bI0qou<MT;J%8VD
zc)@}%6s@S1wk-}$(7N}1mP+C>&Ce5h4^?VLH+{4p;U^Y8Y#1A$_24bwhA>Z+wfDb3
zUZwKZmk^&g<UfAob<7JEgdhJph%8f}V>H<F2=tU_536Rna3(M8xjvYxit1$_pfM~O
zkS<E5yp1i!38#tM9A8q7%YT^rv2L9X%ance9{e4-@yK-uXiO2$^6H$?nW^oTi#1Og
zP`&yEbQt926pX@KFikE9%$_SRU^9O%FCg<WMBehBZCL{I)n60YVcbg%#G~#Q#Ten~
z!nrKM6;Mf<a+h9eHWpQ|du!|-qwL%?Y!uBQH><39PIkkMy4mCiT49HyMlf@Sj|(p0
zIWo)s2zC537DbdX_CAr-yK<o)&KGPM9??--F$?-ic=9{D+32cq3lZ(jucL*@8ja@F
zf;+`VY@>jUJ50^pC(ekv!8tF_;5(p<Y%}T!fFj5A=>naHOPaz{rwc#=ki}Yag9Z$L
z2LttYoJaJGqW`1=kFeDx#eXEt%5!NU4z0!OO6IuCIwr3l3Ez-8usw%8-h`hX2d1UW
zG6=%Gx-`Phd1N{Iu-osFzH3&)VLf{C6)|G%5aWP!Bet!oMOcjhjMGQ@V34D)RvI&d
zS^~8cdL12xrIgq<-@C*owW~ldAbn{`RA0`On36LE%ZQ)Oyt-3;Ym$wBZ_z#9%SaGQ
zlfNXdEorw);PfycjXn~?W6LyB4>mts`E>jVb$0wSIAPj;=6hsun;)0HoB`%Ri8T`V
z4__EzV}Ni{S8355QS;{A<0OqIT6ncNhvzXM8&Yj7BL%*Z<q|WV0869GkGJ4s86$BL
zE{=Tr();&PD>ijLqsf>B_f4+JR^W{3hp+iq16eg5NM{6XhKd@&l;WSsxU8B@Qn*d_
zBut9dF_-WzA}rhJU+Mzp4Djbi=>>Tv3r=l8Eq@q34ITh$2j_b~^T6CM+G_Mg5LbCf
zK>w|%II@^k<@`+ugc+xp5AhtAA<074{3)J4aBE`uB;r8161=Rkv*Tj~hu*#F0V2ow
zd8(bAhH$`7>O2^nH7)RoD%GhFUc^@9y25b}XXg*u$5xDS(%<YiW0>Gd3FQrYWN0O<
z2W;!-5I^5%|8f&m+1ZUVckNwl6}`3uuW{jD4V*L}bROW$nHPm(X`6toCq<xH*;eGp
z`ZwnMd~ST2YP7VEb=8|PXi#IM-;gilI)y30XNVC?RX!>2=$u*qq0QwAh71`7i<8(N
zMvfW8m(^c6{4*}7hm_Ox9c6%^po(d~k#DpM-a+c4v0cOs#y;i>&VJP+j&J@9+~viL
z-(I+P)<GYXMsQ~I<bf^KKp2!ZyLjU9Yo@JV?n08}P-ZeZez4j<wE`MK0407=9NG~@
zxapPCha^ANH6Xd-!hWm{d()4CO;99f8aEwG=C#VzLEPSG5Kd%^6&vyTxUJT~yrE8`
zQXgqx_jj@kiOn4or35F3{w6ZWg#OZiD;ZklWZHzg;5V)KvzL598W#>?Gnprjq?*`I
z2P{TjwJka%EDh|;*z5kcuUG3Ty9JFQY3*X1#6orqA(i&i6zF-+RZvcXp<8$j+Nvh#
zMl8U9sv>ShIbWmQp`D5NwLpP%4qq!i=AC`@KQ8V^jeTBG4r$Q!jhwnY-_6W=uv_cT
zp}*XhskkrOOUBOg+?=t-K<;aHb~%}YA}f3@b~)LDCaWBF_8FOjDytk$_8HlOE~^|4
zc1D?l0;?P@c1GC)C0ub@wT#x*I@sZmOxpIFFbZv-b?(q%&ntZjUcD)`SlK3i{afoi
z{;pf_HVP)x8=5g@44r!Q0trFTr-)@X87f#tvkbj{-h)%x$TqYxrPcn7(L|eM7E62B
zFky{VjXd=^fARHdM*b#0O%ZpKQh6%lR5|fCp!&H^j{i3^K{Z{Apt)_f1%1y7%AlM>
zuap67n|?7f!>4giR`ZdMrMC7GvVPw>D`SV4H65_E(6%<$JSwz`>Brx9=JjtUnHsc}
zo_i!9?MLPKF7MqGJqnDLW^IMC?DbqS(%N|Bs|am+L<^%V^jmIBg@8Bax<mchjS=^O
z^iuh9a6D><T|D~EQ-$HDKxT}R>zHW-%Gd8xbz5nYnRJiM5t{f5hdi_M6tbZ%9TcWp
zG8>~OQxa!%3q3ebU;|x~t$zG_F;&Pv-<qShUJ?ILR~XCX4Z#+oQ;GqQ4wdOD!V2x(
z+2XB%n?3i=sxRzIlCAUDVsU9A7}*Bwy;@uP)aM~b=d)ni_IEQb&#$bT$zFcvjUXMn
zv0>T6`?wVm=*U$UIAJQw0%eyjN)q1UKgpc)G<<r=D7iI%k~!wj-2T)0Q<%!W0C?dc
z``cwdjzlG2H9&6jtW7q^#Yni+rU1=-ld@Jn8c+Z^w~(n<T_k<^WGbKA&e;<7kma)O
zCXf{y+geq8Q0CroHLRD4!2M3|#Y5=B?U)>Rx)|@A9EG+W_x`hmMt_YjF@(W*zAvY#
z@IIM%>Khc(Wml3i`bw&xa%nKa-Mh2J$I}F94yx?fzfjh=q@|4tA6HN<9T&Yg-3Gr~
z1?i_F%9$*{9pvUY++6`^(0Eqdmc2@1QnPmFYMi<h{$M-yeVIZD;SBXqQ9Xrb3`R0|
z%7Ktyz1^qMnyuXop*h6F$N9$F*b)AG{wZUtc@$W*^m|*-M`N&mI-C|h&~?hc_9bnV
zR_-@EEcvQQvU6Da{<{yXuoTn&c?j=_q0cCkKu%97+|q8jI+ap+jznl8v)em2sVbuA
zdBU$5Tv{$+)cqqz6m;X-NKs7!w}ZAI!eC?=+8p*G$zRdLXQa<r5RMCTfBYwib6NkZ
z++W;HoNIT<0lQ!HN0@jOe&K9bFPT{m_cugPNS0wy%$Jy96?+p5%mKFyUEG%#9MfQh
z$0*S`hK7!3p1O5&oN_w}jWsJQ<HnHn51p2TgaOT#FxF+01Sf!p>_Ce2518ze0fmty
znWoG6#(Dj9IupatJdf_zJ}FLKUwK6}b*aM~y)iBNlrYGu<K4m3$Q5$p<fd^bTXD+H
zFm_B2Qt^+^kf@cmYBzJCJBgfa#C^lCzI9}$9qBGg!#m~>k0WTBNCckPfqg@Zy9s1q
z6k6|ma+G*Xc6THLA;gGf&5B<|Ixd6c`$mZ<5!CzQSu^;lw7Aif0ZRB{fewS}dJsSZ
zEXC{R0C?gYRvbuXATiuoWb-!9Eyu0Rd3)z09!*<YQwFtCxE2~3zQ1vFf+5&_;sP(z
zl`G)X_4;%Hw@`r1^jygmhbu_A-a;C%2h-rpFU}e@tit6A!&P}w0}uIg5GBMxK8zMs
zE_Yj&)MmusOlFWY=RJ0S)W)LTB~0DnvdRF}yHXxyI!_HcNg$9~{WoB;SPXULvIz8h
zumHg0s~z?g)Pb?cV1K2Mp)3B0h=+1~`D=HUt@H&+SBqD{04nr044^A0@~hBHPygu@
zBJPp3-29*rZ3+_!6PuB^*;~LXR+$hu5;RqOes4}rHDwgPJE2FeJ4kBsI@b!E-rOcR
z#t@Em`+XJ|YzVXOOD)_zb+!e8WQLITVS}7X9$@qYdp^bNlQEAC*Wmk@1WBH`v$3Kn
zk3^m;@Q;{F9xCDqhkYntw15quuXu0wT5J)w?Uc2~h7y|<!X6}ICPf~QxaP2IqV7P7
z!JY^RGS17%8)>0;O0U2)7?TcPf5y$rS*0NeVEF`vi#wDbX#%BmFYow-j6sx#$3W`C
z#so$6ZqNXgxqe1ssl~S14QJ+Q#d4m#1rJ$GCfdl7<i#+UW;alU$R-{|n7mEAF&1`l
zYLyR0L=D1c!wnYmOSs1BbMk^t{j2<2u67nhK?sSVu&J{D54VytYc1y?I^)t82cK&U
zAJQ>46e#s5>uKe4mqWP~6zm1sz-*C?Ny6$G&zR{e_z3<aQM@IY`kvC#C#o4$h?69l
z*&zEl?|<)eee>RArzQ9YZvgXtHmUzzGjK&<Bw&EsZq??HFnJ4}zm`lix_It6rpgVG
z{Tcx)WV;r_7lt}gY{c|X?(l(cAdoqa9UBEcT{>{{b$N_--M)dzV7_~5xk!^Y;X|ui
z0i7xDcxjMnh*IWEAKa6goc_=L>KuH7i-3P^b<X6$9Bif3x)oXd8S5hu^trlb8nd8m
zgG2@=8s8o=cvDj86~|0}T40;EEQ4JM$k{$YqvMX^N1L_;i=~&2Zcy10xoHU;*yzEc
z|6_f_!awW%S~Def_1lQev5orHlgUOEWOUjvHk%|kZ<Bu9o^S>X)$fH0RUwe+o^ib+
zXb8hq)tfN%Zp?If<8uptk1`bWK+Rk6;yUA`+gBvuUMNbqtE{T5RmYa1pI&e1I&PZu
zTt7-7>PngJ+#mh}m_a?Q9n!B`GOojV=4A8)k0?GHG%lUYA~VDgl5eS(JgRaGTJ}1V
z3r>7nx7_>qNyO|zSt-qrI{vBRcSVoomJhlwS{Z|+r?Sz$sQ50sGi7HJC=W-6ZRCx$
zM#NNB)UeJ!G8C^6mljqo=J1vM1MMV8(7kww+7(`bGq&xVXqucZE||`VV&&F{CYWxo
z>W!TEgWNUV7sgm*(I)g~TeGp0O=phB@^S6kR_jVqA<wdz=(JZI)mUrKLSZ;iEeMyf
zxK`<%))E(~MP-@Si@W3s`K0pQaGG}_9<Sayv9*7c%_hp1T`yE8Za$$xW2LS>alf?Y
zBl$j{_!<l@I?4V%Wwb(VR_Bbc`u<s|nj@Lmmk|<=9k1a;Dev1t;pDBJ&9f}a#8j6*
z`);>f_HAT^nPgg*a~)Z}e1T~Ghr(W5ngd9-ZeOQ^A6AO_tO3qt!2Kr<x*J;x)~K*&
zqm}K*-Tmtxe>e4@XO=N<l_6h3&6`!42{ZSv>>*IwecF&$HuT@kR1Ziv0{()-%sKuv
zbLQ9rZhsw^Pr<_`jSW{JeQ~Oxya#!IxPwdRR9Ap&-p)-!*A;zW2dL7O9s_@ZWDf>S
zQny+AtGuZJ5Fp)cwcU_U3i5I7T0>!pFRy=>jEea{pzUwV$w)k20Q)bV$Og?4TiDNm
z!BEkTFOt86#o(_r^7@dK`DuR*`+*IiDWsnhIPGB*Ku-c<_N?oLu?*f$!RXy<1TO9t
zHzq758i)~i8?#i$9wef2yYJgFAK|qZnH0`f-%_~q_J0*X)#4JC8VLJT&X^dfZ=|Xa
zsqTlf$!+wRBvhP(Cn>5yqTOK8sh;cnh|m%F%dAn^;3gL#ohoqORDn^K-=nm4cTKNV
za|*rW8kdiPv5X{tHOtEYn_hj4uZ{27`#Z?gq)bRGKx;kUz$)qTc9C3@nnQ9qC5zm<
z#z2!Qt~o7ds0e`9cGox~aOCgqlvG8+BZ(;?cb`0Q{RNHV!7B<Al=wZyc>l}c-JN#=
zfd;ki)eXXyt2W;_xJ4LsU6cCvhQ7<c%cIHsPyHA-Vw6v5Q449W=69nFKCz8mUt<1F
z%xv9h8DjQM%ya_cYT?qaHp>r)S;Q=Xx6Az9_t>z%c=LUvyMp;+bx}qsRs2OJb|bXv
z2*1cu@i9K1v`nWX{hSIot0QDnYkNt4DVu)4=45{3jJ+ZR#`r^>`iceU0juSh^z3h5
zd6?L5^6_#5GrE~@bX!(Ln*-1~NUkr3wlJ<bPMYYDuJXN2<S`O4+k7xlEV=G&PNtI&
zf);RdX!nL2-A~u<;H}ON^6%w2t~K!nf%G?GS8^&Nskmlk9RBKO)xITM4h+RHFFc3V
zr}5JFk{8(V6Up9Mg0q>paXfIFO5^T*eRqb!-d@bQ@^qsum;4W473}yoX0%`j4pgVW
z51zc?RGw-wt&YL9hpO*MOM<0_*@TXQ8^fJ+)Q-ARRtQ+Wf-L}05=Ud71l95?C2>$U
zdG<Kl$HsBZ_~u#u9qk?ed;F3K+LQcCNv-hg#t$`0dorE1@mp|#C%jg*yZg$_mrrcO
zwER!I2&S<KsDFfC+xOkc>HGWp{d->5qA*sA_3?&2e(MxQNY%SbsIc+Fop%-J!x<uT
z!+S_c<eNwAgNCkt=Ia-ZWJP)<ix2O?lUKc#cxldQGG|zmv`<8hAOGK{yjhnDznYtH
z_Su6adm!HXSmqCCuF7Fv+*y0G=w=nhgw6BT1CA@+9i(Mi$@yb9j<l-q8%El2piz${
zLv=V_%}6kEHN}doj+Q*ncbhE(tn83{u$`~V!SR>rNr>Og<juWS^M@64(fHr!t7%rI
zWhb+>owXkN|Hs%n1d9@EYqx9dy=>dIZQHhO+qP}nwr$(C&9@`o?fj>6PE}MVvl>;c
z8Trl3F&@9?nRy(@K}onnuuIQY>kL<?=$y&q90XCFO?fBpnkiUzl)#R@>OXXIcq2Zw
zpPkL!>)^IIl<A7pX2TFUt5L=nC)LY&q*-;0sehF&KYM6cW|d4&%pu8DA2ck67l(Fw
zb$4Y*GgY->FJE_O*{f}vQVJ*&uADn`rlOMvj3IzpG}IWl;1AaSR#wFHf4G=%A*7Y0
zkxV>XIAAX0iB>;0m8Fs;3&1g@zm^5i6|7q|W94X<9fEo-n#%5cxH$9YeVjyqhF)qa
zH_m<nb2$ft29)4vuKPL~cldrv{z5bdE*)vVwih~f1%{`oChK!t+xqgqqVHTH^QP#)
zv(?8D+cRp;N1Qc^`JtUam&=nj4s#>G5yJZ#AIjSJ>}q*!Ao$X+WhSwB?n;^yo~qNm
zy?#MXpBoTo!6h_roi{)VDhVgP(eE_X>QF}dl|lpUG)38@c{i9+&3xFp1(;09pDqf0
z&u5kt{sQU9&e!hDAg?79#kQ!Wd{Z90Ot3R5&l)Ii7p@LrETwC=X&hZ%cw6%{g$U=S
zY^SVf$9Kynz77_cql!dgJ9Deu@Z>aAC=j;+@M}tqddnxn@Yitvq~}_bBmQ`E_m(ol
ztygn1&zYE@whM^~Y{jQi7t>Jk$F63+lAU}^Fi2CdOM&$c(b@=MIZA}>m}K=1c*JPt
zxZfx}TtHBqT(e?;2wgBd63cT|reIb==f{Ak#+YRvcvjN$v<T0GQNAqWaj`ba!cl!Q
z*;HX~%_-hFSt>$;9Rfk(qP|D~J2%lCX#bGI{th1Dr^o*EP6p-#kS2o?!W4PqL2Xww
zq@fu#E#D=hq})}AV%KU`%w25jO&~XoOORkjSoUwjww-k|_{fcu-K2TAr?}5Iar)<f
zU23hf2!}Z3nj>WIJl@lI=hYU$oU(Oj>Pgz6<flc~%t|qiG<URRp;<l8yD+bq_AkCC
zykORfSrqs<acEe{-}ubMkQ6_=kEuVjVp>R0cfJLO<z~as5Q}r8-wxtec<-;i0PWjg
z3w1Wj8{Yx_#<gclPKVX!1}b0J&y+Svu8HB_AOB5#Nx24C#X9|0rID?Jl^(pc69J3c
zPcq4M>(gTHbP?Q?t2Af~$}EHtk#+~~-y>O>u)|_L-~X9IXnZuNif&eAKbE`cl&y*~
zp07<By`0_MeSLlX$+NZN+}+!Cq*z{;eifFFbaZLtu1xE-x1(rH7xyD7J#=QwPu)A)
zD<yceMFZ!zoeFWW%N0lumm{KA=F=`KZB{D^fG7^*uD4D!xHh9Hib<I9OMWXN)x-i^
zl=}Lys@jcWv!>LU1>XX|#jn#AlXqlnZIl-lD3GZbwrQ2eos@FgFc&>LVn`NuTPiD>
zSj!Akis;xT9Q>qvj0|0hv>1=JWa2Dn`DH3A5QY{$;~<_ElRNkiyM(4<m$F1Dm&*4}
z%aR}DmZL#1lbdv5O_2j4jwgU<fiF{n<VFqHkD-N>hjS2{3yf-x&WEuH?ONo5NlSXA
zPlt+jmW4~1?9(369flSL2on@^Wm6M6=R5@!>J+#VSn_fN3cL@DoEx#~FfJRO;%F>o
zB^3VfrM70f%0JEFzef^kAdnUvmw}h}zGJ`sgIzlGE0v@Du$00Wp4;I-7p5+4It3gY
z$jE7tHCBl7m&TqknO*R0ga>tzP8%LrU@1CcoDqL3HsdNiF_Sn6<=X#yL+I~!_tTf!
z?fP-d6I<CtwI_ln?Ag1X2hWn{i=E{xZlZ^e6rD*_4*f`!pkYBNr<uSNPu^wV`3Kx;
zDXy#r0|1H#!@OhiozVp5TN+U4)m<F-B6L^D9&<imH~@6ooJtmT_IT+vu=vZD2nvKI
z<yn$}LOJZO%LhF-q<a^{=B{x&P15aQ?|<l%PW|A~Vg8-{eI@)K^hws{c8=86wl+@x
zMW1x7VePodg78B%^9`mXk3lIaUPLq*j@^99WKOEMKCbrSyuo%Vhd?x+F9rjku0nfl
z+iMD_;8lP0!O`AHn~F{XRM)xY{nGy@=;4fVMMGj9<6S>8l$Gj)pbn@0w!n@0YhA0p
z<&XpVYuWJBab{<P3kwGHD*ImqtyX_noFOW}vThGo$EXl@6(vby^HyZe9Z>Agdy;>I
z*aAhWMVHKokcQtPn!PMkr(w(R;@D&aX*)e2R$qKXS9sE6q{zD$wHxDJm4@43-xT(D
z7jiVK+KYL$1(7m5x*oN`tcVND6E1eOF31&OsRhKg$J3j`EBj^Kj9ky^K$7@tUf~^n
z3HT9d=|p1qp>A2DT4fpxPz;@kklqqKTLnSVu?EGz`0uT+KQG;5;$89qK4$g0J)3%?
zt9;!Hk1*?1FzP75hvrPG?HUsW-aqRrQAK%UYZ!^7(6wadbRlx@{(wnhF=|n|SYi^%
z7$oUXaAWRncJKH8n^D??ILkg<`rCdKV8L=0<jhJRXaB~i*Y05Qxk4W%ASPmrKOe(*
zyNCm1T<@iuhGBh-GSeeU!}6B`*}x3@J!!Zvf;~Eqd>@DuH1Y#=*rZPxT&NPpFwmdO
z=(n}M!0?E{_483SU*My74uod&e5U#7ViWvGGjreJwf;?|YJJ>k#0;YOCVGSjeeM0W
z?`w5dSo$X<pXM@ETdteY@wIE~cWL6jATS1hVvmYUp2ARsY=7x92dGW}54vks`24m^
zY8F|h$%HDnjz}N^nH^a%ToTr69=lYLv__<aH55Sf!ps_2@h_WLM*#nJ-Uq?nmxrO$
z?Z4nK`ttkT0sD*J?}7ucU}n!4a<`=;70!Wzf1iKU)t5?wQJbfwB2l~_PWO@Ou|m|M
zOzv602UpM|<HeH_>qh-?D@*L$e-S{fh8M^&0Uv&XJ4pmbqgmzC0~FY~^Rp|464%ya
zGbsh@UkFA8>QDo;ejQC^(RB1<$`;7-UTmiZin_|~a%a7A)(5I<2>ccqb)VV+)tX?y
z<SAOnW(n+>yC*m<pg+Vv{<p<)ESf~@Q}_qXEhuKva36sU>`!Qy-YD%ZoM)eHW_Pgc
z(XV;w_JuR^N2D0SrD`6>+u!o=8o~}W8>$CnERY2yc9`|^;Yn7!XalwBt-o4*aFUh~
zjCkmg-}j{D^)Ot;>1UOs3B&P8JPqRM4?%YTY6($tpJ)%o2sqYKYDW0;3Zp<y`eBK{
z<$CE$<A5Y@Q>&7McXBC9_z({|*QzuGohRg-C0JZEIWFD3cL&`U#?>y$&97M|jn=K5
zE}p$Qya6Gg?63|xn6jX<sIxpdI5~j@Hm&PU+Jz+f|IZD3$2ItvWz>|X$#m4RFFdN2
zF>HqrJH$9l*i~RPYQt;E!s)R?v>2vMEgYtdLFF8A(1#iL%7<_-rwvorQ10+o??Y5?
z-LGtC4b}@7<l+zTmD4=B{ON}rrY#=ykotFOM9LvM;i;PPH1I2lSiwr=#?S|_(cVw|
zN?~^E87hLX`kL4d+ZFe<Hat6c$DGYW(8}*nByv{}`bdFZf%<*F+OPt_%!qs!P&yk^
zCv?$p7H|#_rBl|%c4?`Yn3k`Ah#=2M!PC%2p0Fm87!ZN{z6`ncL5$A8c!t<&6qDZ(
zxpSb>PMhml(W6*`Z-hiqnmsZs67pDK&Tes3XD)r}(+#P<cyFpg43p_A9F1)22GgC5
z-G{z6$?1<${cNr}^F>po=oNh8BwGy71-fKWLUh?;iy&8b4K|G^PxBqDMQQNUl`)F1
zY2PO!k)}`f_hQA;PIj&~cCW{BtxVT=k%tm~LX3Q>K(Io$Nu^j`jbA$c{2!0-iMs=0
zr6Y$Yy5z=HUM=WP<#6<bl{{T&Da$v=jc-%Y727CKHaMiN1)1a1CB+k}8VD3s_DF5D
zCX2zt-d-Q);Fr6LBeyp~I_d&`I(U>_hSL@MlEv~vwktaGy>0rW9S5?aAKJ!5HA-);
z_039s?IFqKRrA`$+Fld$Rn^{B8r54`)zoNMS=!9h%H9<XXQDgSNG^lHM^#(end=MI
za3;C8!Y)`HV{o=zqmv^8J0Jg{1F5`}4p8+rx+6MkqWuA*ohIEJ7+-Q?*-Rbd5>@v_
z<4NK{;ZBa=5}OlQ3Qra3A#W=0gPqC6%E<oBMcg$-_)V4RLcmmzI`@OH1ZYntu7drS
zmVJ2WP^PVQ7OV?>(82BMK^SOSRJ2`IN`d)wfXnp?VEFRqn5vDf($+x23&&3~-j3Lv
z4Y$Xd&oUY}^mn)X`Zy0Wv3}Zh{B*nl&D5O}qGnlzj@YZve-Gt?kcP$5J=U+nCh;L;
z>W-Gf)o0^j;_4u4Z`Vzyw#6dOobUa?#l^*#1%*!~RV8_QMG$<?QUYuLGdw1tjvu0#
z@vg;8fEkjK!+U*38E|mS)@MHOr%6podenBlMUguM22dpgU+Z?xj%C7&gMKUaqC5*Q
zGJ09W4!c;5Wk2*!<&9nG+$*KhTXsU4r(C|_(#hWd@7EiG()7n43EN@(7^yyjmaV~w
z=CZsD%tf4Zk-J2JJN7b(HlvjmXB>^>6D2oDoq5d>5=~iY|HkL0>0nY`<*dyb!yhji
zRjy9`p+<s<CmJP|)D<P}bsd&1yUTE)gg_-IB8stQ*9msu_8FS?Q{eg=ntD^<`fqIm
zP~iF<ntC1nE4|b;AO5R#ntB`lD|h*;Sod5j5mENYYy+AsZN}C}ht5Qmq|NjugPE<F
z@BF?);GRw>d1EX8R3(}P1Afl{oiVkRd_~y}!rYC*wwPhoh+R(H1fScC5AN;T;}5}Y
z+>0N%*HpG`pNdv!sLRIo_Ga~c%x4r_b|;#2F^xC>a(vuCvzAii3u+JRRbG-xwRPx^
zG@4p8GIeCHab+h+V*2gnrb#f;XWqW`<f{ujh115FI1bcByo$LMzFNnrh;IDGP@k#O
zA_GWPUR3ph@hP;7a&RkfcJ@Buh|KgYD-u>x;T18d+fj`f7Mpwl8tL$<4+MO*IRK)T
z!Kq-mPQ5lgo;s+KRda_0gSF<2zp533LFDTr4eVd^(G)J%8_qq60}zQbLDYTk9Xatp
zV1@0(?B+pF<9zy<V~+NrC9BjRw?qjgu|1egb^i3gK~^)~ff6{yaU98woSLu!-AM}$
z7-w+8XqZ9gYsORul%Z`Y>^|9bZlXI=F`)d}nOql1l7?M%b*}y$&^^|2+pxbdWshY)
z=qo#bWn}UYc$bSB9p)?bBPy-}H2JO;acsAnu4u7`?5Lscdh$T>f37t&xaLHppDux2
zY%9iA77D~fMl{KDsl$C+5sn`!YFd>_6e60Xcm^+cRl9ydmn{R`Xg1rwKAgf|elt`K
zWZJos9lA2bH5F3jDvw&@#T69QB7jGg{n1`g204YD9+~5e-h1V+ZvoO{Jti{*-F*E9
z{yAUOO(0{CQdPl!5f(ZttT<Ewp|@p3B%o#pcHK0>xYVaJ&u@}U5y+QK1;?8NP6zH0
z6^>d2w417Xw^}R8@rXo)vUqw`?mfG_$x;y(9~^>%7fzJUc<}df^a{no%!WmLUjEsX
zglR-WNotc`m>3paSev~eF&&XfE(;@5sFE?{*Z@+$VWZ=IK(HFAhZ&b0AKV!dGQ7{n
zNDz-I@Ky=zO^+{hAq^78wk8CM+-rp|o=rTgNseK*at^t0=4LIQ5+i=jK_l1k)c){t
zPDV->oQYC>lnV|$vDZ3)`W@xTwl63q0B<u!B)*G>{vm|-5UKysI?u%NsXP!AJ8Be5
zeGYYXdA2ePgB)e`{+m<cA!%_tU?xMbN`A(!^bGs7sV{9qy*0fYX1RUb4!EGDO`01P
z7^;m3h2tho=eEb(zo)+n^#2dI{2N&NzX4jG|C{yyHw&tR2=z0?%<rL{Qg450tn`jR
z-AQg45njqgMaBN|txLI#7&TJ>jB4r90F{Ib`lI$+Qp@{$o=VL5%S$bCc|`NuV3)4D
z+=F2XZn)m@)%K4gl#0vCRjun|b&pA_$K1+%7)dx80jzy%u})}-C6qwQdMCQ_p9_wl
z3~=!rXaImzA^-rg|8{2A#a#b?S#L~hm^=Oh4SiF6M}SwaB}w_WiEG5OHXO3myirVw
zQ&@T`<IxepA8J71h3{;9y?Apo;sJz59aejVO%e+@cAfipOR<)5>eky+Puz3OjBs@t
z0n;Xab6(l&R86|ISEN~I{M1`(@OX9}Tq*ZAK0cmaIj8@Q3`S%xFH_J4_s=8*b>~9|
zbngeGrgAa7+yb1tV?9XSg)OTONvb&WA^gKbGqKG<f`)<^_MR|H1~N}RL@WpVEzuYb
zpgss<^uc~8Ft8sP;G#}o8xxqRIj|tEXO0*F3yeB`r06>Un2cnOyOV+>UU@W)&F$jy
zU5E<rq5(u1E}%Gc*B)kXNu?^QvsP9PcB8}5)z(I5M}i}ue{f(|@f^`WHB>Gh?@{`C
zqJ0BR)17Fma2q+XbV(7meBqE?=^y<{@J2)uPWSCp!`!D3Q-Gla`-!7|z!~QwOR9!4
z?_-L!Aj64-*F0AJN=PL{S>|6rE38*EEX0c(!`}J&__(etHKm=&bPf>4k}P1;WT<m$
zJ|H%=l&d+9vEO-xGnP+{D*+N2qK^k7VM{f#*?({?UtptJ6;7rNREmo3jS>?lzRTB?
zJCRG+rgR77X`rZ1^dx+FY-}`?zoXL`!pHhUBNzIQ%|Le~z$eew1ygY9{ubZe*J2E_
zuzDq&twjG7mm0B8=`A6J6z-PpzX&jEtb;X*PG@I@5X5z?PF%e#$307fHx4X5v_pNM
z&^Nxn=YUVgS7AOCwGN7`8tayz%a6Q<uxLE+HwbI;vZ4$=Fp@!boqL)(P$P{}xQ_sS
zD>1agDBi8!Z{03y40Rb<KiIt`EY%r3?j(T95`AY8mj|BnDjZKSffpX%-F)nBW)IR_
z&Swam0Rj}04#8@C63~qg&vAm9jUyQ_lXeZF#~CV&F1E<S;od%n*z%6pjYHOMO&|lJ
zgOv&%6fqEbCR1@{Hh1l>IAs!i)dX^#K=F7@y@GX>97UN@xJBNWqu&CzNr<5j*n}94
zAW)X?>tUXw47?C{)_#GQB1mclUoer*JGk^bj0t9me*GT84lW<5xNnlKu{e&<gj^pE
ze$av4a6{goPjP{Ch%oUl@FxYX(tZRVah^}}!zOK3W-@NPO5>(<XcY~cY>rL?-1$EF
zOU(!fXRo-hEQXpk`vj-<&EK)^b3}6@ovO_E`nkV`{4V~R^s^1?Tp@-TA?6y0n@X}J
z#|PlQUFF7YZ&_+IQ=P7h!7T%6KUMzpr9Ay=HKrIaJk+~S(2c?PtZNbbnlZKXcBA6*
zRJ-(2ULB3$mTsPvm@swPN#Vw<1#Tq>!%orYJf@1a8^QPw#F;?`=`EWDQrwmm@>-Mf
z18Rulk=Gj~^xMOdxFgM^I)#fy1o~E^`1)ywncN<nT~BmWor96JQbQ#zNW<wJzW+o4
zNSlqAI(mrUhf`jIgiN?C8P|KmEZgTG!;I7n(N9>W1yMoB3u0CVvrxXMwA^T*R%{p`
zT9jy_>lxD~C_(EZlh9G+h4fSFL#t>JsAf0lD>OPDbScc)Q%q5Z8yPyQb>j8u*8M`8
z?)KB^yLoIcKn!Myvfb$d`Y;aBN28n9wAyH!IqcD!?9@?|&IT>4j91nFJ`?L-q^*OO
z(%ElUBm_77?{`o~veIs<=;MzqJ*bBvGd&R1K3HhyufGV`lVy8Kzl;w&AcjNfG#@9e
z(GX*H);uT<!CW4TWbDN5ydqPn3#O!~Bdj|qP`KN|Y0vqwrd#eCgppP)83IiuJ**-3
z#W41R)K{-Px}FN*^GlH(Oj`_40V|@6GG$oxU)<Z_mwuE^K}zWp80YC?mK{4`Xj$p9
zMx3w9s}-^%l}NQ$@Aud`-OdN`07{~JrIdDn=c9Yw=FB*0zs;Pk$~(lyw4Dsn$OIDy
z@z$^Ria`wtLe)6Bj5iV&(im<PIyU<!p`m0uX`b$%k^Lf#D(E~Qp54y}*A~lLnhxD0
zkVc=8qqs9&&bRL#SWGA16p-)#EF(-BH<Mn1$PjDB3wn}3dM~w9EF=v>J>VvX)s~k~
zT~Zb1?3qBXP}{IFXHzwZP_fL_T2F}hjU~jO06k(M<abF2*NX?R3Jzv5sn$l&Z9W@K
z)KP1phO~bhI9#9jG-^qH=2Cy#3WzYamRQd^Woq9@=?e99%)s%6oluKU2gJ%uja-sS
z`(%^rmRfGF!#~JiKIAM-io_e0$GJjVTJqsNn}bu^o}4e4Vj_~4SFg2Q)6gswdOUQM
zJD_edEYnyr6gD1l`cp|+@JILm4cU#wL^W!7hcl~>P3Yn%*yx#(UrDgdo1oGcT)%=+
zjxOhdnPa7plb;l^lvf0deBpwJje(Ut;_p_G?kLxD<{!QiJndLjb(+0&DSPOP^@3J!
zG;UU?TY5>fjUVdQIuiFTlne(a>bEb;GPd==F6AFK4h_&D&=Obk2q{fP2OhTXVVjY(
z$jAOfgDUJM$G`5>3vY2FVi$jaVh<{UH#>QOm2&yulpGa2Jlp=f|9r)T+5MLE+2KXY
ztqUZhk%g^F{4PML+;5%L;lY81`3da*g~<RNL_6f|ZU-0Q05B&0b;Tx>0$o+a6%>hw
zlCg_{SyvQtuy2r^#^?0?+^)>si2;FqCaUg?q(-$zQ5_6yWR>;xG4(-%ra9b8dm|;o
z!qY8O+Rnq_@o>Lid{m{)Z76I&lgABzX~u?ZiJESWG9Er#iDOR)HFl0jghg>i$${Y@
z)jea8st7w(oaAkgdAX^>6V53wV!dEhu<EI4yRxY4$^-ZKtruxTP;nQR2&dp%OaU76
zU;g3$kkvV<on$*Mb?yB;exAdEZX?V4-NA8I21x#H^)biWCntJ=omui|Rqyq^6N{GG
zjBm9VYS_$2^%%1a6$(?~(kchvv?84lh;6Ty<1SZlDqP#8vXt!^JPKRHqIzX-ISM&{
z1j9E|`MCMc_jCgIxkc;^6^%w)3*99jRvqS)@?C2m>}U?u85ytpoRaZ8oq0EP;ox*N
z$;_rbZx(8XphzDP>eh0QA16WANg;HVGf04D_Bp~A$X(}E2$|y%wDmG#(8LGDJE6lh
zN(v09BVfHeLI~up+_=#>B{`3@R>1%?j{&QGQih`P!In$eDsopzx+fmLKlzfn5kh0N
zwG@)Rb&Nxpu03zY4Lw@MIBglYOr>OSo+lluDrVy_6bkVVa!NIb!lOO$LN^secf8B$
z?p$?mXT`eP!)OonndoQgE$W90bghlZgIdUUbrXXJOL@JIchHg7+d`xYUu;`AP@ous
zc%j);<L?PtzTG>b*qEt>1gev}<yVl{aIzmqCBZv^_<ejR^mttg>5}P5ix>h03va8%
zAjc+uv0X3i-rpuldo*H;V_nlDWd6)(zp7L;G0;v!nI0+MVB77!#bmj*#qTWF?!VE7
zEp~sck4X43uqAU15+};lh$w6;UQ^nfEXao8K&e}DnoG}dEwN_izLgTqHW!^-Nk_?U
z)aJI{N!uYBSECF)l0FdJjSii|fS8;2^9l=L!pK?A3N7Obj-eqrkk#7ATyTkGq-Bb^
z-4R%C>!{=h>YVj*{TqK@91@2`NY4}|?K7m;g3k4#oqQ7*q~nZFH;AWoe;Cw2d4R7)
zZF{x5306;!mGCTvAv+C$)@#UmbQX_d#t2#F;_3-)ZXv5d!P4|O&5fsCrt#F;$|^iv
zGL4PL`t0y4!p6Kdw#(|4__rnPL~T7y%8{%!TzQ?UF1ZBEVhvQhJSz2RLm_0qIBsd-
zM6JD-`|wFo#&R-K2jqE4na+hZz{!T{Em#G{voH^WW=u5X<aq!+eYL*}zJX6UF4Ab|
zBv&tVHXElIq`j6LPIy)Hwu~pD2VxRF=R&hQ<hl`NwpI8+Bfc(6NWvYXWpf$d>0)gg
zuwIbTK)7UsOyywTLT()`6{%QpIwM7O2Z7V=tbMf0Qy7cuBh!-gSKzuJ$A$LiWW!kd
z`X=w7?8y~^@}q~M@SeBODUoQH!d%5-TaGS2OU0GOryP@1RXXk~If0URp?e>OcpBLJ
z;!xB~p~~r_XI6M;MXAg&-#}E!jN+F{w6!Ke8=WSinQj`H$l*mZ8pTBJp^_~U<ogpd
z)xTyr^NY0hPxfiSWwhZq^L@FvZhr$@Y3kMeE7=TCEsYa4{)M|@l9Qz040Baqk&#j3
z`_~GAv$Hdbc+s@eQok8P9Tn%!Fs=;chkMritPF_N9CdX#gP_+hPxbg?L3N;*4>$I)
zmeDH(N?wrg_1D{H?aObH%9;kMIZVg=b1LMA4ARfa>hjgj#kMCT%M4|A#bm(=QI9fA
z6J>I{P?x>XvJY~pzFf+suhMW}L)&qEwYIVG7pTbXX1doyB-Hjs9e79$yrA`vtk|h_
z@m(m%Z|@Z4FwfQYnh*g*j`p-rF5T{OdmSQAHbvx+ZXQ;#1HP2Sd%>v)^ds?V$Dg1n
zdR5w>2>5L<B<}{8pDkcq>)yRqB$Ao<iO0g2bJ3Um)Z%X#)r&6@S^ubL$;kkOca-5}
zya`5`_Oda^Wql`ZDOV!W>>b#2`^EQp&V0HbCM>31OWXHP(B-=54qr+J-OFAD_h0MN
zSuPwHn9NqGNVdpf2^Mz!1jw3Q(d?_=|6n%Rk%;Ip!2kecvHTCPSw}m42SXS3|78uh
zt@(dFCuv`xgH-bav4)~H^NgkJ4)KlqtVJV(Qr7OJQvoER{(P_$fNL_`kImb4U^00I
z;>qa6)JZ9;2rVj?+-+|Zfa7US1J>4c8(Gp$igvj2iGz<4H;V=Fl2Ag@j_ViHX`9YR
zxvZ!pxAcmmw>Pn_iK+I8EVi-jF{2h@m;<%05<rzM6%}LDirorZfyMY3B?D#MBXM2h
zf#js2pZGROR@Q*Mk?s^Y-b}5iV<DoE@GXimdqV4BzEO#?*LaESx$v+lw&-Rl0%DqG
z%=()=;<GR#0;ySXFv+k|M6&^A@P?Yge<)vHE+3t(Mv~dQs@m#FCtBAHJvWk~!Mb?I
za__ExI&t@P2D`qEHsgl<8r()qFZ1XvwwhJ^USG)Hyp!E@7a8ILR(McxUjm(UH-g=C
z$opog#VIe&w5Edis8I<1x(iHtI!81?!3)9VgSTjD-q76*mZ34N3dm$;A>LGb_(%dN
z;V`3xQY*Lb$I8T1UaT%Qnxm>S%CIMA1|)!Uhav`I5<afHYWm$*I^#IgI+DPco`JwM
zh)N_wb-?4>s|A}RX$8{|2P;?2R$!thF2#6^*F8*QrqYv2ED_vZ4!7^8gUW5u*Ku`w
zH@l}2^8_~nkMVW3*x3;h{s#Q{B{gCh1sOLoM&fF5s(;-YsLaG$I11)IXi}miLH|WG
z2s$T|Y`VYrhi&*fLo|t8i~{`XGw3l)IO%Q{2u>D2V88+)=mYX!PHtORMt*iX1Q4L8
z*iUIo=k-5+av~+M^(ZPrg(++*@!}u%MfeEL;J;1>3`T-L{R!-(*&t41E1fA;;keCM
z6H)}KdBZV#^15EX7tou3jpcKU>-=n(^P&BNx(SkPjKsr-o0z(#jZw6{h%<qV{}w}3
z)EWH(^(MGxQSwq69f^m|$@Ly{NYf)OGnMC435P5|4N7rvxqExneO|rsjgcwP<8T1s
zEvP41&cSXssk{OdVH%U*CM390NGef%pyU7ZaroWdY;jtHDY18T=5gH+@*|vNR-q?G
zu0U-OXOS$V1!hhSVGF4n_%VhYWa2dduoeMB9A_7lnHBjn%H{6_YBHbSSuLx2W7l)O
zv}&0c0XE?7^QnOFr9F9#r&!mKu>&tE6X{dkA*TAFKUx@%W3`ck#@rMl2r|&$`>#BN
zJr*xp$V&qRZaf;5Au9KQP?Ev_l|%d0gemSf{lbzR8lN<!-Oq6@o54VKF99L*owFkp
z3i>OMKQu<)304@AgavzEv53-EE62h7mXr?p64A8yRc}FHBk|&$XKx!8!RaK%mpJO(
zCJkKJC&|p3Aj4(lvT-Y{E^j0kz_H-8%^Cp-mC~L?Kr|vjf@V3b2B`a1xkLCV4MLN+
z9;E3%F_L20Y$~0_NxVaY<^lm6Msndr)xGPY(M+5c-x*^E;BIJ<gC6eB$Ibw-PC+gi
z&Ld)$T~H+NhJb{?%m~%|YbX1}6fI?VE(T}4%E{~JD2EUM5eqL-L!yQ^T2X~I_-Qf)
z4WAs2;(2#~j^ue^$+Pu$;W!S84M+@_I}Kp+$T0(#soH2HPH_US3heJAhH|1yuI8>Z
zJX;<7a_I?9em`hN0Z-pq{rH&VwH(kr4YI4qc>)wWy*psvCF~FkwWwX0a{@r<TH2C_
zNAUukG-fo?ve>WvBTgB*Utn$7K~*qfMqy5wepTocL>;D^d`GgIEltMJpAp~O+(0=8
zTy?)EM8`nl6q*EjHPO51y$ih3_Oj@5F~a-5)ssKKVFED76Ea-SRp9Lk?txT|N*Web
zj!x?m=FA~q@7<d_IjrsOZf^g`qnLgYKwQ<a03@YOhGP)ca|%;OVSfGYXM-KPqJt9h
zGEs;RSk=ZFyGEWRd<l(n)2U1n^eO9csm^NV{X!?n)QO!)E?0t%A4M|MI#{_}p6@3`
z_4m?lZTCepNk<djFE-wklCP{S&Yp+j){0)QhwGVzsk}dUE)7lcy9r-qgRyhodb?75
z34F1@9m#*V5yaH?_>1`l{#YZdRic<B^6`*_)2anjjYfOg8C%BX&%Ln5$in3OTwZ;y
zg3{&;4p!%+w6wi%@AuQYcO#ESmC#!!^o7EBp9R5cf9z?W*|ppHE2w_~itqi6yqyoN
zZ@RtHKf`yQBX*aZFK{Tz*(2M((6q@)2*HOP09~N_3b3AUi&~F!>@c8&gGPw$-2WRs
z%GF8uWuQW+h{LA=K&i|7MBw#JY>7(*B|$!5+BX&G*F65Ss+*gg&0TJLK@{OwrOd*n
zIeX{3gkimOsW#6LyTYOYL)AUMCZv;DR$snT*b`=o&ln{wJHpJX-c2ljB7V)!I`z}0
z6FFjTz3DZ-R=I59DpdLzX8)&~$RjKEvUx|2SwVGkMSjT)o7|wlV_Lzn%sTdI`{k4W
z&9$~aZq+i~f&OU({i#J#F=Re%v7pOhlf|0J+l0w3x|9A&XoRT)`a}3+Z*}HJr`x0f
zgVNS&w8UbfP1iH>iEFs8#T6Xi4Da}o+0JkE0(s6j?zT9t)NVnl`^oyVNk>vjV>Hbt
zclr>@+A5P){7*M@mA*oO_ob1N6s0({F*Ufj0-;!2EHiDjZ`mXgB^na6FhtD>x8EbN
zrr<|u#my~0dIRa%MV1Gs7)p0lrz(QXKo>U1L?-X@C3GwKWqwuMqCA)IL8;gm5;x5K
z{l0HbZgv*8cLW<D`L!)Nsc|<83u-e=fCG$~-|8nu=Vd))4d|@vpC}y&A0z=Kqh?OC
z?0WPQiZ>N8$FKm27<lAo0i>HyDSq(jJ`W~f%L;c30<iGsI^d}JkU=X<&Ln&;!fjfU
zqRR%?Y!SC908lSi35)@v{y~`8WpdB4xfIbgtB9?@n$YP_w5g}Yg<1779BDyjN4t_T
zMY4-GH2R61OLs91QS3_`T5!o=+M$5RmS)IA$h+2=Q-x<QXFT*=3sUuYDtz&I>AHi>
z(`fD^QpL6R?@!e|KM_<s&qyc^Xe@i2v%EMMeXT$Cv@~jPW+Cp{5{R5NjHw1EoImFa
z2y*2#2X2gOwjtNj09rvM6Ym4sB2L<kTm`KLC}Nhy`ihAuP`>}_g68iOC@%d{7FR|B
zsS_y4gn}=CVoOXN&moEnH9Iv+urg9_(rl_C3$Hy>klf2TE9Su$+-WEq?~w;aZ%!L3
zp=U611(~~ef)eAi^!U36#ZP2;YOAqtlo$54cB*IU+(>l0tGF<#`?DEM?GID~O^Jm|
zid~=bPmbX$x~(Ib3SF!3PyLoRu|*|@IdOq6%BpVUl|(F03wqV~=dy^-y)x^G_?O6Z
zz@u=e7r9Z#DpS%$On{T+7{Pv<<`l+1gWN6IM^eKK<n%%U8%FdIqaA2B64*4z_(>~d
z8<=auflLYta~uM7kau4l_qOhw*X>JY50+82GZ0`(1VIYquQ*l2`BTJ|t?=+k^<&+P
zAkJ(8ii9j?Q*Wk%c-tbl2jRx|yy*w;^tFkC0p;3kCNlO0dCee5X(}=9o1;ECOI}Fa
zs!t+fFu*&Vi}*L#I4Wg)si9yk!oT)t*fcRN!dn-Sm6uZSE(!?_zi%vGu{Mb{W+E{e
zLgu1n!zd#Gjh^1oU6@YTdC_=il+!~dIp@QP;4Bhb!VjJz|0J+WbdK@QItA4mHukN&
zH>0i9CChE=d8jjq;&WpoqtT4X8*4Y5qb3KBbxU7FO!?WF)##mOkelgEQJT#R)7>Wm
zN2X{`gnxg@!$L2rn!Ow^qtPS*!Z4tcHR2l6xf71EJ!zI}Q^eochj9M!Gjqu2B&`iE
z8P{Bg<r~Ln<Z<bitjjC*Q`YR|E$7DUvk%RA;+uo|<BYb38TA%}3$0a!6%9mcstB^O
z))vz2ngAE0&mU*ZnfB$yX3f>g%c5u2^2Xd8jelVKPRW;SDgg@bqLWpr;ev2zm~j;b
zH=E<elaSks56kBlR-oGnfr_RC3ZWF#LNXP_T#^;ZgZF#-N*H-(Ivd|X?Q5Umjf>oa
zpAF2<a{@<`)nw%J<>2j&QUIkhy`N9x6JBbRpX2W5g1B9?MI5h=`5Gijm3OLTZ8n%Y
z%Yop({_i$|u^q^!z?3kMCZ)iQFGq+LHRDt-i<%q$v?h1X?dtP!V_!E7(!11H^vX@c
zm#=DzK5U$_<i+dBSQHJWzQLH0k};oBWx}~vB;OT0=o(`XXQ^2rNS*DyMYJl-M-Mn{
zP2e>p#TPbj_eRc-BkasB@BKqwvqE^am+3?g;)dU%7=sVqpSp82wW8lH9HSbg0L#;t
z86gYmrTIwN2KAUpoWs{mfioA5swM5BP2##cv?<TQnjY+O-Gr4Ui<MD5Q5~;uL|dua
zY|F2>Z%B2IZy7Bv#dRiKPQfcCR|Ts)@!GcOZGCh*PrwP}ZNywv49?*1yI_9G)cVWn
zpB68=Q}NHKGr@t6ru`N1B*sGshxX?*0V*;fH@KI*%j^v^n9ID@x*Y_6mc4YgeQZ1D
zYmmP&Uw0??W;N`*@d<gX=YD56n=}J{Z|B2KcVUut?{^$LX|iu-FJ2d4Pt$$99A17G
zi~lOWK@<7nM+Lkx*JP+laCVuczdX+h(2q7ajlIcU92vbO@XW;WL<HHWoUu~a{7Scn
z>0pQPc5e($QhQjk4Bo&St~w+t1=sSkuz<P`=w?^7R{hX*d$%q>slHxNn-hNLx7-g9
z*_e$`WQL*s)GD80u75>ae;9bYsdyHCvGR3`zg-sU_E3Mn&#+<^zhXQkgzUP9eeVWu
ze;==Q+Wvk{)|PU<`n)@<YLC6$sGRQH$VKNaEk^Z-Og6|~$XiuG>>~Rp{QidqMJWM6
zj}Zg_zy}oofaJe*CJk+=nb}zW+dfEDYugPmxF4uq0|P3f2zUAm<!gA+>*D!xg=H1-
zTN%;>K}%2an5b(HYrKlKT_48I7JAxze2XHVHnP5}o37ib#?ENOGh>2tcAvGweJq0<
zpl6UQ(R=L!-}Dl_ZjWb4)45iizEkqhSbEsnnw`N?qK;!52-^lH4B`Sv+W-I>alSrc
zRIYT#T20%$lGmO|!G7*BfmqTwl_VewaHxzW2a)P!;5W_*y^$NdD1|W~QRed{RJ!}W
zFka^mY{0xgtQo`pvjVAu1G1$Gt~JD~`wegeq{d@YaojzE(qf2(OV2;s@57;$kp?nC
z>H!m6x<%o)M&-EqZhxqR>&-Jp4pwz+>(!hHq4>h`Fo|_NBuY|87qUwl^K@1}^?o56
zbLPESI&QRecbi0h$97wGFavJh!>ct1J+i{f??1Lf9TgXQ_m3nf!)#hZf1A*yrkYmj
za_(x=bM-P(Xm$6LSYev*H^Lj3W)$l1V-EDQzXB>}ZFzt0*Oz7<gbyqW#@1lJm*#f0
zetu5Nd<`$YQK;GW-BN%JrHTiksyRH$(`n<60Y)9Cy>cAGYQ=*Kv6P**2IDW~aAf9$
zr@*4O@dhU3>i6V~VB)k-+znfGK2>Ug<0t<JnwHFXDZ1X_`fl;~P<=s3amNIeA8LhB
z<u5kq#>&f9`==x5ZO+yA<pP*W>g9uO4eCnSX5Goa(Z_m{JmE+CfzXK;pa*%SCwvh|
zaOq2smkT%$aZM+{oluRjX_y;WG2)bjgvk8G%#UTA&4T}M6U-F1U}CBkr^diotqZ6R
zRIAf-{gYKesC{5FQ_zktJaw|!%cH;b(|C&3QEqP1yBwe&JWiR8HGXs?Wz-t}LxzI2
zl9478m_Wk3I2D8c_i=TDE*SsP9p+Q838QW-aU8IPxHn9Fz(hp(EXv4&h`5oZgFjxR
z5MSFKdZTlpJ=+dyW5j|FRLedlxz**k(g%8~=LvjY&<|pWp<h;iM4c?G&piO{Y85Fk
z(twOhPLrQAe}TYSvE0VA7%*U(ojADVB+a|7=xIcxN@-Ru_xef7AjSGo@db)Q`w8k3
z+ymsBSX~03rsbk}gLUjv%w@Vl=MWG_A=#Za_m>`8WSj!?>ddD6f_WmsoWBv=2vdfR
z$_SfBc-XL<Tf05g+}>r<`_8u;SNZk|bj1_K(RjGFQes_u^{U5X(>nb#@_Sy|$*SF2
zd9!3Pw))*r<K;<j@?=@JJ5%|R*N8FZIeS{kU$sU?rWsq~lGqA7B)ea3s$Vx0^;&UX
zyl`pB{jA(`m<Uq4gEkiXXBc+0_gIBldBSXXrLA$OlWYNH!A1twj3<RjP~k1XDej3#
z{BhuB(z(Vb+w1Dc&}pdTY~yLUzKHX|gnGI968JAo4UvkZjn>SuwH-V0s$L*ux02Sd
zTe*QHP2rH7`PD7;j8AcQgoFZZ98i2>-X96-CioQ{u3J@@Vr}YxPWS<!4#s{^NE^Ho
z5U1ay1VN!r>Q6M@ws@8jC$XZyqC&APu_AZPlG*_2=xkm#Q~yk0s^baQ>;};k$Hi6!
z(zDjmq9ib5Ee+ZOtg!&aXYa~55xF(ya2~eR5r<N93c3uH1!iv>&A|W+KZ6%Y6DSq(
z{+Pa6tYWazI84Nb4F<c0QNA%Nf!>&8%K?!_aN^AspXFjClIG~1KJsTWWP{2Az`?{w
z)0dZvik&b-UMbS2wf43yAnT;p4QQtsy`)@e*42Cx;EZF&v$;c49qyHhu8T*DvgE&D
z{NXl-9ULAO4<S9jB)#<>zsoB1=*mv@(F>gk{3i(w+wq1Hj+zRT>g5I7D#Q(m%0Pk7
z8zu_I`jMY1=JC6gF3P(T62#=73=i8za1lcG;26hbH8Boo6Qb-+%=asLVg*8KRcn8A
z&Gn&wjtf5k_iAs1maofecz}NEFCqy0mP)D8xQ6-TkU;x!q;`dF2kEL?zzTP^+CE`I
zu*G%-P6gp$J@I>f+5)f4=e=l?e%0_&#V9tV1kPORy#7w$1|5-Rrj_`u-6BO0KYdtV
zhUazmEk|!Ugx4Nh8eM`Ds9Ns!Uv|&bD8t~?KCUJ1&3(W4v&q^H<)Yrhj=m<1eg8*E
zifb1-5QYQ*P{RZOp!jbk$&rzr&h3ARN~hKTMWt=<KU6;uScOFjQt}DcZ&z#*v#C0@
z=H4<V2~*ORoh)Jk2uN^7fC~*?j<1`aRD9zJ*IScJ*(`_QLVESIvpk&uWum%uKGxE_
z@g1~J$dtkI{e&+SWT+xCCCHmNP(4@HupypT-%53?#dEhi*p00vY2i%<qR!0JQPJ!1
z3Rj*Qdh4$P5RSwRY;Hi(qYTI!5mCz=h#|_B5=prR*cecl{dJg(FRukA?7DQ?N>wd?
zEGo*Itf-Rp4mgmFhl@<i<5MLZvLRSfmzU0MnwU5gYSiPEum-RWj{jubWdmi`9In>(
zu)DubJ4~T8`!`5!OpF!P82KNE+(S&3C@XKAe*bv!#6kk;RYyQFo_{iblccz598-Yd
z@qR%4OG!ZqD<#ZQsMg|VP_C@=QN9fAhjs26n1)pkg|lSZ{~?F<h9y~OSm;7R7D_2x
z-X|lgM79=0tTd*Elj-0mEoxHQ)k@6M32GP(248)BKYylMMR&V3C)88G!;BPU(fBfC
zgW;_JhcKInufEZ1qAdT~LOB`zL7ZTq3>tg@B=dE_e^zWHt27vJ+>GT#jhk~+!YIee
z=BD3;_*>^7ikm)ompm3+gT@2hd7wctyiQq1g6PJCKp!g|-}r4BtFBzPZ5pesWJ%_Q
z1X&W4;}_8vO)OBln3Wkz|Cy&>QNdgrq~X@$KVzOxX|K)hQfPt(8ZzX@R%b^8Zh4%n
z_f~}raha5G`Bh$m6)Z1KY`dqzmYNQhZ({rEVe87YwR20{V8D(djwCh_J_esav`DUS
zYnAs;NH>V?6WnwMRKzD&%cV;aaynG@2(~3Ewxwbf5$9oq<$n%o^T-x#SbR_(3hlvr
zVGuJ1QF{a-Q=iRm>w1SK=Qm`63^tq(!3{qLIXB1S11BLIgb&K^Cwan0ZgIia@DbQO
zJiG!D-sHy>u#r^AU6;92*@{~=7)z3LCT?kIfteHvS#i>&5DAI5O9^$asTJ9z(;u)0
zk9gMsKthw$<wx^?K(1E2UN6YFX21pbvK&B1X-w`RVNoYGsF0nYaY-f1-e6ij!N$C7
zAQe8N4#qkXkzp+M)-f~aNW^zyrd6v>(`NH8viG0^pklz}2jwTNVaLeT^F0hvZINMH
zAaZ;lPSrTs13Gk<Pi#Hpq^j#lj~{QUlj+Ok!_E*9xLCqFCfEQduFnGoO^}0E$R^VX
zd8Nj4V6c<DC!YrB!%7J!j8IkbPXWaDzT~X#e*VRmhW8=@-cn+yMkY0hp7)oVSn0=$
z>m7EV>Z!r}NCK89$9Gq}ssYI_HV;46;1tt(Cl|G<u#U?q`1^d_Yti%vN}l*h;zlyt
z>mCH9sb!@^E}}?DK8Yp9@PgO(7{d~E$sfiGbU-9sCb+RDrIV+Z!e}I>A?hO6o6-r9
z#WUJPUn$-PsNSY+JPeloS8OOSiWOwk0^yQ)Oz#9LSI$%t&rjQHj~dq)OOwpLJoOez
zT|qM0-`!BDa9$vPYyts#G9Wl>PqJMhj3+CgDRDu~g2j+7zl36b&B@t&TBf}D)!%wU
zc2c9@INx_mF!#dQHWedjGxAmmO12ci>K_*moOR*AEa0S_(dk<{99%X$VvQx`O7lgj
zcavJ%$|Hwbm|~QHn6*u(>VDLfs%{iz4X)jJJDex`GyjrSe=4Tk(r^fR14aw=r8r5x
zk)B|5$8=r#cMLBEqLW5lHzV4<VuBxi{Rzg^WPRPG-pkwJe*bNHyfr9XyC4oe{R(Rz
zKK0~GD-9zN6bIXFd>%PYv^avjb4;wo^dH8yaDBSJAK<5veSlAte>X_rLKR281^f27
z<<NT7`Km#Xkf?%+Lp}dHZD*(vmXdsA?0InW#oFtY#HV!>qN^Gjlb$pA@PZEPD9za>
z)Ys%YdvX88y?4?FO5@tK_V<2z_;daSzeiR?-wo|+DCiIC3dw8cIQTS(|7}>dOlMi;
zKkE04Oe(kgK#HL5*A{PPZqD?q$Eob>LF2nh=WcL&?jH{0I@jCZr<1`?GOu+pLCd)o
zWtI^eQjx*#(&+8#?b1)C<ja0CFDsBZ%S(>ZTR{!Mrs@?>LsGNMgp$_5L6ysSiu9{;
z^1{67?X8&Hzr5DXB>mz9_6VJ@l0-!L*+Y$?#7&8IGdJD>27WsGfoM0-9AHQ4tXA)Q
zbQ{HXi0x4O@SXc-L?uugj2NE__`{_#dbxXh6?wOyFc`c%Pi*hu_<+kiACs1^b<(h;
z(}OVFZ6wDyuIKX|XCbp$*aR9}9`^_TF1oO7K=Pb20{Lp@G5UJ4;SVvVm*uvVnq(l$
z!P&r+j3`YcPp9^Y7nQ_|of~7&l}@nsD*HhE`aEM~Ta+?`1#_WJZ;!Pb9f1^*@+2T0
zZTCDmN_~9@$oN|RQR>lE8vtkJ&(U#NYCTMATK1DF1Db59;#TG@!Gke%sJOE}Zjy;6
zFk*=cEY4=y5KrwUj3$(6kWfIqjlL-FiYqy(woEcxYt)M8=?<HdBwq9%mu+3Ev!3Xq
zKG6iJ+xDM_JydO8qN)dws_ZZ{`0Fj<DZn6)NRLXZmlyp%rAizWsBHP2h77E0mgcGE
z<xU0~*Xlwzag5x##?1J?An;EgL+Gh&U$<24_?IDdOKdTEs8k9)Df58Ro<BrbpA0ny
zZ0US`Oi&y6for3b9I`Afs#xjlAytq>cEPmvSJ3A4vnI?I>+&&wI=3&$fy6j)pY(?H
zxxqAiDD%eqB#9G>!eT4ig+9oa7^d%^*`t7~v)~FELNgP%$YnuK%|zdJ3q^r(;`!#d
z3Jpb?PzLmc9rhI;NLnk$lLa?4myv!mdRtwX*M~9A7G~^tfLMGWEHN213rFS>(99U;
z{eZL=&cm62abDD$Vs}pSGNSWfhL1Jl4@KaHuu2`aF>ZkG@8>>t>i>YPe@LTEtDw2t
znzQ3KKi!!P4nl*e*1@T-T6-g;u5)Y2*ic&=?4uZ%1#d*jZ3;c%?^!LsHLKXp2+n#c
zEMexv+Q8e)V)bcio&l0nr@(QF1r`gN?xo7JJM^p=-_TIBSx22G9ZGDxA1Q6UmZx)T
z<aTFUR@n9~Cg~^)$QEIW{?X6bB}ZZPrI_Uvofnf03xREoaYt$uS#GHD2`02Ob}4P}
zV$i$pCwNqT@>RE}DgGuMCh;|_Z!fla$(M4AU}{gx{)Lr%N<3pF{@kUMPmS1BFM`e>
zg+<0nNGf55F?156h;B;|w#Kb7w+&Em%6$(iO7lI@xeGU$lStm&HaEE*YKyhxcSLH}
z8ceZ~c-jFk?I+bEXoEhOYBFP{4z6-@K8fkL4qZaWXO5wHDu|oeoe|X8IY+fL4cgy+
z1n$NVC+@Bo&^PW^z>0*jsT0?iqK8!-X15!5ucbOP)Fhq7r5MsR>`@-C`1#^%&L5)6
z{6~rF917g#L^5Nlk@wT#KLA;)>&w1_i*s?Agf2J`SrVMq?j+EVIX^}O)TB~9U&wBl
zhz~uBRer~Me6`Ei0*>&Jb^{>y{iHyh!d~{c`6lbm7KkZv-AETSbIDEn`3bK0-p1?D
zWy=DZnaQ-;>>Onoqn_RH{HeO83E6Ju3^Pm>&OM0;o`yt-4>nrCz7AZQ$eh+x+uCd^
zp08BpHV@w2H&-}%`t#Zuy&8NYW$6k7vO51U3pHNw?tgey*{lnu6LK>Hrx(3<p5#pR
zq?COp6&l|u=CnNtyvf^nmG$#@_3&l>deuN%v*+WvmJ8OQ_v8&TbA?jCjr{~O)7s&!
zIWTRp1s<)C*mzMNeb?FuT`l<Ky!~D5PENmZ{URQ(*}s7buU`6!SWZ!8ro(^*@(c3+
zDs;UI6~bo$0RWEv{tqT9xBnU(c`I64Zqgxr-{{(x1|0;LmKIZ=4~z(?h~PI7ih~+P
z?S*PsjwMuxZhd`f6SrJio#Wwp&9c9WovxvG1rDKS8%Yr<S@FqF2LetNZCJc0X|Q$n
z^mzI5aC8PJi|^~m*K5t}XQuR;+vs0dkvE6yPq0&c1^5FqE7_XCgZ_2OXv~5TgtYrd
zR<W85x+MqW7Q?`2j|TJ+16A$-#;0ZzoF7S<>LWZvI+K)11}4EvO+KJPW)IF-cR1Z{
zW5RK#;4@(nwvTXV7AEz28OUD!a&d8N?J}n)%ob@3K(ACkp-OD4!EbI;(WsmXB`Uw<
zNI~mE!;$<>x^hh*k<{9V0QGk$f#TiWnI<@Zl$I7IKo|x8*?4zCF#EVl`~Mg_hXBEr
z0NIvp+v>7y+qP}nwr$(CZC96V+rR&EW;1Vl*LRT_8F9|&8QmdOu;IuAiTT2Ok;L&E
zCk>Qb53Tbu!#ek+k^KPc*dAMV%v9`vx_c_CFn#hYrP)3)MFm;FEl6q=-79=mxVNQv
z-YG~?O@=-zj_g1E!Y|HuWGJznePV=5lAVr}PI~-T%v+G=M!}K)=rm7fmL^uy>zS?P
z`OxDp2X@z4R-4kVWtVPe)paRD#OSY@cKlhP+pn4k+cWo$JTu;BEPjLW*VR|HQ^ar8
z_hveX-~XCi=cInNSRw%c+zJ1O1;oF9<-c6%j<x;%Ev^@THZy%8gdMyaX(ke{+C46n
z>N<+AjcF|$9Xx%wD&~L_<ApOoFasNloEPVOyP*C5xyu?KtJs`!bmf51qegCmw!s08
zyWG|X1WmwoDd2;<jVs0rS9M+}B+@k4bB?W<F}7}Fz=n)oEXmd%mB*Ks%C1CGr$h3Z
z!lJxWjVtHyL=n9ra8bPeB#+aI%-d~)%E$@niIW1g#s`e6-%vz65w8x6wjx^JzF>Z`
zXw;|EWk@@=$^$JQHOV(fU_g@Xd=SlOP-Nr{Tc9|eL%X7$FfH0NW8m_pQQtel4dM(h
zk(vk2QHXcu@_Iad%a!eJvZhco%A*BS&I#Hjgh4vbVaye5QqL(p|2vkgtf=q>KvJMS
zCs}*uf8wNfJehgmv}h9W{eb-XXX-W5&xIK8B=RH=B=(3GlJ<$yZs>VrnohVSne67>
zQ=lP$koKA+6(1PQ$6v@l|M7J|qSoIjxM<XHB&8KuH5mvLV?|??W);>33lB}}>vezr
z8Vj3~t;seF07xK6Rsxgl%#4t(Cw1R)=L){}1yCZ3f~lV17bDmcC{9NT^xoK;<TIB9
z_idGaG@dkang3Oe1>u?d=DydrgfJI8p$bO%n$qAx$D!W@3kNBjVrM=L#)a2L4U+LU
z9S#=^3uvl+Q+)n3--0(Nbxf7U0RNg2evy^y!*56i##*7)5Drj4j8GrPX?9Kp@{UtT
zoIr&M0z|^}jzjfI9rw=Ur%0pL750GGd*KMY>z6w+LBiypG>_mNOYr2C>p<TJ@_0Hh
zv%eY4D|n}i?W7hM8_E=z3Os^B$OT9rvY;>kV_(n-1R0i;w3kXI`BTo&q&rR>K~#?p
zkS~z*l+1@5o(sT&*;Y?3rx!1sNrCE#NL!!21<E+I5R?m^`}J!!r%qN{U#X81HwCSI
zKVirz#HN>!#&~av2ox-sK|4>Lv8OS5oV*nZjN?Bhcy5M4aYBP~0a-f;fCFnAG3a(g
zk-lhzn7;;cpxUEx2SW(e`k~JSqhH7fJKzc|iwz)2Vyeqt9eY<tw08dhVhP2_8vv$l
zcqT+ur(XK@y&ryEVNdzWul~`LZiZfOFEC-x-oDn+v?)@tukQ?Uk6axV^>I1C^MKFI
zj`g+MV2cBL<Fm9WGS7?F8xCt32iY=5Il!L;;fTRYFGv9pD_H$^0+zvRw`v-?nH!K^
zR%Df!enD9G^4$Pu5#>M(lcj#v+Wr``T!4-8WegDpAe@<&A3hn5pRTnP-1-YV3ZC=3
zXRQzS>t%D}=F)HJ_tp+SyZ)MBdUSIrNwrhHY1U27*K^s%?iViRcJoE3&kx|&(BXj6
z_BOYfTK}&dK8}zQU(8=}dfCQtKz?f&cWF7zbnW%?s<Amg-xV7_E4)A)t84zeNBK|>
zv(No0{NHC!`_*l{t3t4nVRLSF3xjd4-Tfh*7p|olAv9U_)BM-BcW4UiGP$`tZf=~M
zqF;Ddx%E#~E3t0S=pi7kxOVbF*-fa>FMANH=PwbjH0O9;96PhdcwWKRtsqn)E*rVr
zp##1+LiFZ|eETi50j+vZFStDKk71>^^1+vhRaaf_t<EWe!My_J5q=%PZu)=QE4Q2G
zRwfka@-Q{;?$$722D*{`BcjncyNQw0H=EOYIyz1<uOQm!oWLBda;f93KL3!s#&98;
zaRIbYmO>#asG4qbT#g#u1<$kQ$-?Jx8{GBP&k)G<57X|)IZGypD!~y46ZUewmw~n8
zAc;{U240-~Y<tChE&<4$A!jjoja2=VV9gB0Os>?L)z#TelFf@|P(SGWk>9}D8r<=a
zb%>pt8|@MtPq&-fz#4HON3dKFOg`C~X+)PyF|8b2;QV*N<I{w_H2!D=I4!O_(2<lP
z$9xr{hYlzMhBC-<vDOs&Tp9Fa;U0>6y2&4aio##{*El3NNIp<ZJdoAm1=@WO{~U)@
zJ<|C4CjNcLG5#PU$18%7W#@d%bOrz(9Y=dPFBPs1t5eA!Su~Cllk$JZ4K7XFU-LTP
z-VOZgn^l*#e5rrFo6-8Wtuk&HrxayuLN~>2e&)CzKn`ia;~?#1J;-s8U^!*|?VyOX
zvXUs>sbmO&VkByF!gFPQ`8{NiUnFzoL>C3%cp(a1KR}I=e7Y1aiY%l_G;?MYApE6f
z`hbV*?*e_>buM@#hgG`$0*1qqzaEzRDKP<nNa>c?VnIc9Is$Yw2w@3CrPIXXgZ<!&
zTw*#y1<^P>_WfAOV5~+Up3&gTClF{hDGouC?NIE{%lPHo4AGNKTX4}MH7c<IK3-#D
zo#dENc+2;}g=7@7@T6Y8e-D*1%DJBgzB7n`m<>)(f35_N(f5YBC_JF5A&m>rTzm`C
zsl=NQSdUD}Zc2UI>hdi?Y%pT{>9r^+>=C0xvH`9IW5Jhq=L#q(%jqGgyeAWgTr}3h
zVnB;;fyBwWL6VY#h8zNly(4kx#B5U{AnA=r(CB+0=MIAZ<+_rCh}A10Fe@;Rw1clt
zpZLEkW`5xA1z7r-3!s@X&D7%S%o0FgBq$mLuH>;|$hU!%c|*F894jc6Ea1V=(I5b~
zjL}50UO0PlfLQ|J5TSe4D6miJx&E2t)Xy>RpjW}}(Q@&(5|A!>iTCP@R_iJ<>oxmO
z*k0j5lBU#MO0CD^xGw$Els$(>+*xv9I_NL8yg0=O0xeJT#p*fU)f!H^r5eut9GsiZ
z=|*8GVW)u8x~KcNqz{iNv)lU(S-((T7Jq96@)rM!Dn(Z$|Ff?cA^DZaR}ZUaRYci`
zAMTj={hoiF{_B%|BwU+V{JGNDHxR*SWajU?8qA^Xy=LrejXI4r)bVn+K|gmch&-2%
zaM1zVYn0p{<$a~{vA(yJ=cO1fCpv7k2Y6bPBqDWeVtLEpx0@vow^*iXJs)o<Iz@se
zVbF2R+ayy0XKkIyRLMt{$N@Yps2%@nZ0vT|w-Y}eREUGM_KFh{77pvGkd_N~q?#{^
z^J*Pwz_hBwJu(4uRGQB$USfM~uKl9dG8jQPdF8g(-OGp3cIZAY%5?Z<V<Tt5K|T(v
zU>iQYa*FAKl|lD(gwO{tQA#d$0?pGAr{{=R_I8|}Ywr@E*K3RXE-A!^7PVa34(1sL
z_u{Btg$9FhaU*^j((yE<LLKmQctzddgr;R@9t56|WNpt7w7Wrg^ImKJkUj%F1|*K~
zM>Bqv#ipW0O@;8RAU}<hAYq+I$p&WS`?|gh*HUHQUA}p?Ytw0)GfZ_%*1kdqB;QYM
z%H0CckC>S{xE=LCg)mx~kfbJ_gfJS2LIcDunh|TwT0nd*m+1(*#)e-pM6Ch!-dL;R
z7I`nqGIR_bFmVf-p9Do1Cl)IG8eo<Ucf6<vD1<-0Br`uwO=h?z;=F||H7F89W|gHl
zC+Pi}CzG~>xSjxFN4+ne5Y#x@WK>5?#SM0jQZPtx+~rIDQ`tmezj_GKW6}cqg4G-b
zaR>_lB;fm75)`Yln<8ig1zL~GAv4Xv@wl=!o&+7fiWfs2KYsdW-R^0j-kaBY<uF#W
zIi_kr=Tg1DXS+4u;PYswbUoc6M<cfyHn=D`O%l7Xpi4=tN9G~}w_%mv2`e!d=jkcb
z?9hd98C2hPlDYOI(QWUd)LC~k+)!Jlu#>e~nadVKllb#^$jfJX>(AET`*jbH+P;~@
z%1ov8S~FpAtdwu2l$%h8xsMJOyvQ=0iUOSq1Dg`T78H%Htz%RVA0@-ELVZMNUMRb)
zt%hD#TsyR7HMyfwmpxGv0&b`8s$=^vqAiaW<#rJR8$gS}<*>4^ne(2T`tPF5DNBnV
z=#{{a%$iS?OG^rLEv|q&7T_8iy)()}pQXQuKN~GZLf+P<YmghNQFQXQgH1j-4nF;S
zE;AeQj;w?sFy#Y<9g-;snNw~i4vg&%?###H!P_&JE2iw<Yim@v?n*$s_4eC^wl>3k
zw93qbKkKR$&!BaGs}&v+T<ZH3)b}Wu*`XlCGM|EJ&k;%MrDK+tP#vmUIa!nT0i$|J
zhk7V%1ujoTeUZlM$A-LaSA>cTU&|&Qy#C%a&H}u49#;U(BE3xBC{#NQ@UI~&b<f!x
z;&}}k)X|b`SNG~hepTzVmAhsEeEVhWdm*?ZK>$sp^g<6;4bme-?$jf6@P516Nm%F!
zkL6tnQfrVLG3PCm@WXsFNxVk6Pi5~<kmLkcaf6&=Xg)0vr&+VNk0tL6AJ|~$CM@_c
zRH7sxJ*f_`^}t#2QC^!b!TR?PsW!)&eca)i$#2<)-CUD_(~aqpFmh9yzJ?KF9Uh+x
z`6ysgcH`$O1(R+YyPn(Q&&k|>?MU4zl1832tK@Amj-(v}ce;-)HNF}%<thg^wkLI2
z*(}_GP@~{ZK*cw0ijD-@3x*AQG+WyoUPpH176C_DTiESKPNPY7jnVbX1cLS>PR#b=
zsib;+W34c0*E!-v5hsJUiN4QA9zx^zD?7CYg)P(^Y^8Y~y0aMM#*R6An!$-i0gn{b
zGSrQu%v+36A%S96!BX4`W?N|3iW_BSo44UPmGQgRukRS2sJ3|elNr~08l2)xC$e3*
z5w50BCWaa!qI&7o_>DY?7)!U|Ro(=jAJm+g#Ar6@9R}E4V`>|DD_l{n_?k3{<<!-o
zZZxjzDi+wkhB3cOg7z+KRc(r>hE(IEd!W67uSO~|Q^(b)@(j8TIxe5^fUCX?=-S4m
zUg(ymWHR2Pk(z32DZ@%$fHwRCl2fj>SF8nj=45f{yo7lsb^H_b-KbiuynZ<UsqJ*j
z38VZh{s5|lW8=0GG;M%3Uy)iA2V+p@pMSro`cOdP`Pd^xT}@LK(my2?XvlsqovQI@
z*fB+{E&p1sTI{?tLNh%dVIiov=MD>~)tY-&`P-hHmHl}S-QB8uodvhz!NRECI3jy%
z?NnPnS}Kjk4E`@W`aA*sB2}8q%cf?=IuYm4T#43C8nIyt<bZmsn+AI@Y8(i<Yz!F4
z%7Wjr{^a;-qea|W)|pW^pZ2p-%i!>_@x+fpU0?K8pR+AXJ>sRn#F(;zF6!N*%-vY~
z(+E^w1f-9hAwJ(PtR8_WV`Dcd_GbBz9%a?q7(?xSBY$V_r(W!Tky_H-N&8BG5%}!`
zB}gN{7JqZ8;TfXS{#=(SxrG}bOTG!k8fxSm;pL#KZCBU8O)WbK9jjSYYz2|dTXbUe
z&^1w>g5D+HJbqzZbBM%3^~LPWYDdCS?LfZ<zZY!Dxh<|UYn#B%jCy!;Q!0C8m#weX
z+Nq!WuZxS;cKHFQ1sAqL?Wr4MwDGD$PxEwmA@bwN)*0s9c4WNP`AAH$7K7t0HM)Wl
z?~+k7Fvr@!qIKF$qM`1_#Ccqu$|8ELhyFA3Wx11F#0Nj%7}v>$2g$5d4|Q01GBI>D
zrBn-lq$<|7uiB<{!{gTGGqiCFUzg+eom%dQsW=r`G$+g@mKWq&TPzA)@C&%OAxt;K
zV%!{o{f!CpG?ac~n(WOz^;H>QT1)F_yZ(uV*DyJ~O3$&EcL`-DF7gTnPPkHnvqSN?
zEE#%OG|!>EobO`36#2V0z3W0BpB$b>_fU-_!E@-wy<%s#<FB^bek57(#_imQ7m3Qb
zF^(LWHlk+OD5=Q%EC6UHEqF9$+Q8EM><ZJ8aIR|0E;C&_Gb5{7X~P~}e#ztnt(=pd
zfL#qFdgyT6Dha2mSZq+y#&c&STQTF{4FAIFIQ}urT6>j+GjF4xlb0>9x(mAN++{3&
zFcWU#!*+ud@Y?d-p7mL!-30NYdN0e=6W=TUQgb56EVNKfROyFwDSm-@YNaRO)id*4
zSK7++Ws%-*ogTSoJu^$&W+$h@(J?c15}Gn;TJ@vZ!poaK@CD(=`EnM<wL&G*atCEc
zF;@jo8|8LSsUAq4;c<YH91R7Pl9J2(N4d{IDY>5jQSyh>%$sqb@5cXxS(MXl7jQai
zDED%=IbCkM85o&~V=N=hr^W<~HUdPe_~TVEjVNnx3Nl_X5-7P$Ry0Y%R(aVzsRMmu
z@mesT-vecQa*2Vat?&4pP2+E60h7)Jzq#1?uH~NGqL;<6Pxovdz@q6Ty<%fsDSyo!
zF}ZTqdj`i4csirE3E6~uD|4TU^~!EV<*+}Q3QrS-9{YgC;+z_mZ<a!iNe*Z`T}C!L
zpFJ9*`nSg;oSN@j?UL)y%RtlQE^oe?&<-#AO{ZVTpjKv|-~FcBEPnjks%7*XIpI%v
zZP4yFg~H$$)K~HI|0*cpM!8Me|D$=V5CH&C{a*!ze_56uD>IFmDWlE*QJkyM&~p0+
z5cEy;1+6TvIg&>a&?y{NVAB}u$ab+_OKbHq6a$kO7aY<OpG@5>{<W0b{hV?IBXDm*
zel3ut4hYJCPp1mK3$h!x&mj{M3l_rDO-LvA{RG^IILH##u4OdTN`~7rl9W}=#u?`3
z=G`F<lX#+XV|wt;sVO93nQ+=A7o&(zB+h*}iu5x51SGhIObh$-I?nmzF4zbaURNp(
zACZ&Yu*3%WZr4l(*hOfNoZvDENTwB$OdT=@x!cY?8x9eH4cb7be&*;%)0i?mtKbNe
z7DD342sRC~eu&K<$iOIB-NVM!^*Pp+nJRh-($Ae>8ezYh5zfy|NDbVek~(spw14;U
z@i&@3fcbfbq63FA!=N^*V-l#31~u;&m=EC5iKsC;Y`BAPPUtoiNAw5w6G11Tj5;>y
zOv8kZFWyACi9UR6Qla!o7s117Ub7fXLuBnMk{s-Qb$Ts#UUm`Aupq3#{%Ln8DM)Q@
z7tg9U*&Ron8&MaDe&IQiJbTN($4LuX{g%|)q(fGp4N~77hwLl4I9p0;$6%bVm{*9c
zBckan5%hfiYpfcA-;OYwKJ{2=1p`5ddyf#L7MWJJr#VQZ{ssMIl#C&rGa3jG3`miT
zU|pLm2*_|zsQ`pAO^S<NC#id)S8f6v(UU|IiLVo{THQT@45}SkDE=9cablb?0;n-)
zHZfpEf(%F&2d?|y5=;kmZzED5+01xEF;Pbhp%;&wVM_HJnMHPu$S5{$Bf!^eA9iE9
zH0nJ43MaSlc6@(!XLG3sU+)V-m-3zTb&h)m$T{nwVU97^9}2L2Pckz|yFu8$?ATOc
zYrmiiO8r4V@b{mxUP^ns0|JluiP7_tTz=_QqeCs6MI680B{JnmtI^nktO`Ks99kkB
zhSp;odEKA<7~ll=gh%)k){}hSg0l9l1JEIqLyM9HKoTT*<7g8w2dHz1NjOfhKYwX~
z|Hk<t91f@c@Mbn@tpw>0*i9DwA+IJh)Vd#g+(H2$CxT6#H}LU9%$wsMZ9=2qfC+my
z{RCyKMoeZRsg6Eo2zS^wfZ%sW$YW#ruqIhSja~vN>89-)S|3+Xk>F{GPNXU8uI-pr
zjqX`-2}G$ys`np)AttAF@;>Al4suUdt<t;3f86%ecC>wG?zUD5-ohiagD!e@GmAUO
zr@rpo*s!CeG9=wvh^B1=KkPl~VvwQSj^`U|cURXPzgJyfzAHEbNI8;6+HKocakn4`
zmRn~(@V{oL*}xJ^Mt#IROzJ1v#qcFBsnHg2`+Rtk^&fYa5J>&V_R0Jkzq~;x&WLS)
zK%n$D2*Jz9MNg4AE}eIO9ajhJCV++pY5A4V*f0IpSMMjF5i;!t!2O>(eT|*f3i)nb
zdS%v2jr!Bt&Y#+}bXdbA>iN~wMb+d-5}`(j{6R|@(<dMPh)Hx|vm9e=`<LK9bg0kH
zETa^OrfuADh3;a0DZbNR&H<wld$}zzc*e;j$$lvAji2ROlPr=!PzMLv{Y~&4c4j)2
z%cDh$x^B(5mst(1%SvxEW?zD3nayPogDE6HaR3>UUuDgpqa8xaX=Ry9a;4JYs%fHa
zF@rY)qrhs@5^x4h2E0ja)%qu?TIc$gTHv8UR3oM1shAp=M?0WF?5(CAmDZ?2GltJ@
zxUGiLUh<(1XyDfX*25T-g;SB{kQnAdvxG^DMTq6Ypm-&42{Ck0l2wPM<EoCxi{2#0
zJn95isl)n9`iGNp0EECp`lAVys0!NFOx0uXr{^<#X=CLvTU(Gt3Uc_zD=3YxN7ls`
zXpX8{XZ>5chF1ds&@@2-R0fmirP3+0gTJEysX#=|BwA|{TZn7%`hYM@)q7$9`6wgJ
zX1T4tYY&b0m$W{ddzq#oG<Cx8<QeHBu<)cJ)@IlQ$zE=;+5@90SWT0(X&Zgzq8i4N
zzqHe`4XW5<dwLn6#(AzJ=$zsM|F%zR{UZR(dluGPT`kkPV6ZXg7Q!X+sTpxA-PcL8
zr2d*AHB~Ma8$^nANVdf%FI<x)hGt?eg*uq}GgG<pRdLnA8L7P*b6cuk-*@b=RHPS{
zG?+S8{iSXS#jGf~QcP>r(#)!4PB&VOCic|5slSPgq*Xzfe{vWqMLCoTNrV!wo}s*L
zo?W(7k2`5diBfUu3^)8skAi#3kZ-JvHfWj?8MthVWv=M?^@3*MVxtK@!=yU6KWmK0
zBe;e7n6^G7ICN3#vvFUlUd?R{T;RaLyR(v@oq6E8kyzEgut;_nRHImjJ$vrT=FJ%t
z7Y1JtV9|DA77wz*Rp=;&SwmNX-=vA#m2TrQH1H;Pzoy(PG?f&ya|r4T#zVT<SB}z6
zP3KM`>$5x5xeA-2%>+_uTbVl6xn#9N(qPQJ;ok!d>|^`uqvS2)RzaKlaeQ*4#3+kg
zatOnwyjB=&l}k1<Krjb%;t>N!us=_IHK1j<L7ramR<o#;4$PCR>TgOK0qc_Aj|Jz=
zrHb#RwbA@jwW36$xMNmPI!<u+tj;T6wL~sQ;Oi&qY7Vxq(h8d*IO$ROzR07#V0XR>
zH7qOCFj10OgXk>E4XFhl*7bR(+l^pt+(oU6(>f!?=lG?1NJ?N=h_zhztO&bGKDp4g
z8sv`Pu-ot2wC%{qUGmRlRadad_*%ORt=^EZ70@U?0aj1I9?35SCxv8v9##2sp(F5-
z-&eEo>_KiK>Ne%QgaYK}8=%+Vj$dGtw3%#u$f;oC4s?I<k-sY@*MfbVOe*!E=f|0!
zEY0x8)T%m>`Qsm{tr2koh~$zsH$o637q1CV5dD2Ek7vyDY`%9olHG<vp<qJ~1-JYe
zOf#VJ<j}CM5^F+vMYH0FMm(vq@NlaHb+H%;d}pj>CpBbZtxk#Nsu=|{sROCD4d^<;
zG9J8%=0hADOf}%ssKO<H5q@k{gm%s4K?o^n)qf%)bADJE>5=IJIsnAlIoeuPCp9)+
z99tMW!Zqh?SR98X9Gm1sj0a;NqB~1;(h#!hCFW1p!9#2qX_}SCjB}USGD_7MloQlZ
zx$PbE2qjiatM5c3tJHI^`t`UJ2)Dx?$!k>SW@T}Nap0@Erk*Kj<iA3s=xw$C>gF4e
zZ!S01uI1p|#hEIwPL&Q$Rm*e2-Se{@DcPvRrN*NBCaWbmu<#LXL2=s)b$}YCNM;I2
zW>Pa?g6S!<jbL$%V`eNYu#j|Hv3}fvcuM-k)eL^k<HNHI&p~Q-yPo~}=`nVpwv<QR
zBqL`X4MQch0(G4av5NzgUBIU)2ccTuI2G_?HNn4G7G-!z@5gi5G?fX63{Kkc%<dl?
z6ASwJC{PDY1SJPGpMJrWYNZ%kk&~ti)y%MVj&_&zre)N=7S1}|m#bHSyzZJ^RHM_X
zoBZetl}@Lm-Mze(+B>clXf*3cy!dTBS66ts9h@sV-EIzEZg$@wBlAU}xzl;&v?Z}F
zE^slran(VcL+4xlUsPv-sbJ78faH(4*@2&l8#;31sTjfTR|bTS_leod?IIC|Q^@K0
z$o&F?Tc9^>Qh4Ji;k>F)NwPSQtf^e6Ttt1^&!){bnaUEPs1S&Q5rvaql0@s7uO)=k
zhbI>0N%W3fJ*!+vT8hDYPMry*LJZGi1fVL6(Gdh-C3vx8du=#!%l5DGy3YO#M%#y@
zymg+M?u*%ckP)k0at?>Pp@d$Prh-Hjj~p&{P#~l9)wuM+&mwt^ZGzDp4JaV`$^$tr
z1a)8MjuYGirm)X>d`^F|!I0eYQ^w75ZP9#wkU>&zw8*;5Z4ND-E+<2tF4TsEZ4L*e
zDLoPEqdKC}k5mb~9%pV^8t_kP_e>GUI*Qta<9nI1Ri7(|lCu1z4W6rt@+Z=#g(p1M
zI{mRKa!>rO);w!P>rY;l7I@<#qqwWj^|5$Gl~=xs6#)}l)%3W47V=jEw0-!pHffh*
zF&IK`tgrea^|*FuJC%2X!b{k{-AFB+X$8pQ)Hjp<qYv0LULG8QOXE*Pca0`C>&Dz#
zv8lDmuRS*FTG4gK=VCs2A(vHe3FJ7bRKR@3R*Bk*LD@II-R>Q)Un_>c&yU~eUR`1-
zNjl;p%uO~&7u}HSq`z!Z9wl_~)lJz>#>yz*T=<<UJN%8jvl?TW&&Qn3_v!1P5m}Z@
zB+7+;3z=s<5|Gj+n~yn$J~fs5(5Va~<(!Bk=4u#jN?%d=;%eL;5hdN>f2vl82Sdq6
zl)r0{OG{JO>vXLKmx*~mU+Q#K2A8J^dcK!>dVF_!Y_@%n$}`oTI`0a{GM=J8sQ#$K
zT@wwm@SVJYOZXrcKs!^#8d7iGl|Xl3#Y8QXV{CXH4Ud=?i9KK>5W`Sy(2au?IErQj
zJpew?951%eFulwpzXyOqXHB3|{ayKLa8*&9k9E_d6K;<tX~<{YeaM1P(F`EaN->nm
zx=1y>{*aW%kv=6mjJHB#**iq^U4JuBDJ4NYtuP*3vt!4F)YX`X%6Ij726}EV*zfa>
zLQOIldgQo8xs!`Nzq=}Yz4_i4c~||tG90f<-@RP?xl07!yk<u<5GA>F-Fz-eMt%nW
z$F%qb{GVl(+_N(1CR~7jgwFraIyZ2%ab>6Z4^a3k9xJCq*2KILy?~aSsOuDCMLH|)
z%PEcxV=9#-X-hJ#4w|vcK$6MAFd`O`V=>mOUEgh3e|Lmr{KJ}_&M2x>G5(^3Gd3)O
zrcZF!=06Wb7TI_r=dfC09*a9BdM1~j+`XEq)%d|hwBFGhaZ}+vI%4OauXgM39<I1E
zlCG_P(lm6R)-@9A-PrT>ZwrYg?Fv2WdZ7P*HIss-kYls>k;1GbfCN#;8Xwz@WN%g=
zuA$EayY=9edPcJK4-vl-?cqOMBZ=X{HnnCNwd@A9R!vfRSyTA-=y9UG6gARVbQyJ4
zDvm#gf88x0@)tHB<XV<p-^a)2t6o(r(dLoAH6FSNo*bJ=_P|~CJyIyml%q~I4(|5O
z&I_YDzXC}Qbsr~^QS6bX=ageg^Cp1b2N0kCNf|fo6otu>muu?m?FPJt;~bwc+m)Pm
z&ur5#qxidA>o_&o&|OQsQe1G`<O#OAv$pd(V^@rAVfWApb}oeg1?HdkJLlNSyBj;c
zueTREv)vvwd(bQ~0LHi_DlnW*9Z`?rn}F@a6^7|o*!afvBYqh;_7g;B5>TqbaE$Z)
zL%ZhOA`Ra@+9s-A%2-dj5t05!+&MF;MH9uz9DHIp$<CqPsl^9MEs=K~Et^C}FrQ3^
z#4cmB#;2=oH?}0aPu|EA(B{+fxHgTSf-zssLbMUmEVKR;cTlSKi1n^lv+D3VMP@RL
zJ|b99z?YyKg16{vas>qfL;fV=b5#2;A!j`t`pgyz1#>0<z^;q=FHnSW$9xO`05?7i
zS^jWy9Djp>C?tCS>UukjZmcFMlF;fGCRGxGa~uV~lw%X;H6Co-*LAm5%?S$rV>TvD
z4{a3e^tiNgN`glf?LbR@F%k5?Q)4p91nyxqM7e>K@d=LlBFtjl^u=%O`y7;zu-SHw
zg5v>8pyuOp3W?4bc`5k;6Ffoi{q(>d!c{J*PVwU#m=HGH%x?iu&4wnUsW@-d;#w=J
zN;UaI2YBqj@<U$EV0mecbBL^efdIDVkT4v&qRpiGk+y4)<;_qy)Il4BAly+)Nae9;
z(C(>2{m>^d2P_ptO+=|QY6LhQZd8&N&p4Q80#e-;U{)#JOZ?;MBtZZmpiy+~fSqY2
zTFu1~DTIP~`u{222h=veC??Qu9APZbC{kgbl5mDxSV7fvP!=pRxBPVL&3#1}0mD_Y
zfw=r4)H^j~6pYZU%~DAr<#Qj6$5s;p&4J=E-TChJN<UDVNXIz=JE8#WTW1f2vvxi^
z6%nXX{Sje;NEJL)Xa`1y*&Gn%kQ=ij40&k5m%q;D^bKoWVmgQNxxjMTx|38jNibnx
zYhq8%8rs;}TZ=Vnamo)TX!_{ZIjIg9dk0!1&s7&~Q=he#uBI)-B``4%reiNaRpHCW
zvHSS~BuBs%#q<S3p#Xrov__Tg*c9M9rbGo^G0?0R<KToifSd(;CQag{0yX?D<9L&7
zf#ub61KgiB+0Q}+^7Rn}r+2K{UeO@?05h7DRH+X|-aC8JY$l&ejXO(v(Ce3W*DuWb
z+}wX27v}i%aI$}MetsNo&sa9I#@^3$-#UBdUT)-jWZhnV0BwGc-YcbGdt4fYlAY0!
zf&-kUt$;myh~MCu&~&R~TVcu;9x)PO_JI>&a8a5>0k$z>*Ejoq);Hc$zPp=VUw?l*
z#Aftrv}n=$;dg)E%m8?Kg5fc``_haB%<M3S!252lYVPb32gVq0nlYb3*P-$Myd3CV
z$%xpwHl5Y?v^RnK9Ao*`!TT3b_3rF;Y<6v(M|<_$wIlalJbw%Yt=Tk=Cdw>H)qhQ)
zvd?_K==Sn%cR;)9wz+Pk?dttJ&urfQ4#GXUl=X}?kQd|G*XQeZ<{AB>e17iy{CO!`
z=ev6;TgK=Ao!`aR|1|{#AO_;^+~=Y-jEg>clJo2A?)Kik34lwzcD<#XD3zE}$9meT
zBW@~r+%QZ^Y_oWE2eRD8YKgf?a;>7CM3ddz;IVBh?Kv~Ld_W?IjC((lC1BwPBZDBo
zl#JiO1~yWt)pGk*%jpuB=b&57*}idizYlYbnmb*Nl?ecW2CSwV7`zX`!V$F6Yliz!
zxdhM*D|BJ+FmKbE;I=FH$PUt`<@|>ZzdQ?<Svv)U+mO~OCjgLXCKm}jB7bzLQtWYx
ze+89|K4gyu-VP`Lpj_3W$t06>C}eKW*WlN#FLd5Pk_@i`VP1E7Ic`I6?uSRyV9A*`
z!Kf*dT5-NcyQ?)>AEq?_<4FrQv!X2(cqF`5c2~1$*GBO&p&|i;R6$>5g>0t2pFA{w
zK@wdEY7=`VF;bs{Bz85QskR|gl~39RG6~`X5*_S!i;q`6LV>IsV%dNmRyCim0z57e
zl8`jgc9bq3oscfz2Nj{|3$hOC6^}Vbm{tieM`0GsjbI*<jT?ANG&``Gy&e|}Z$D~`
zOW$e|YSRD@fX+IU+$dPEN60xJPX)1ngT#;!DNXz$m2Aey5ZDjWfnE&LMs#B%nThVi
zjuoXq778%Qz=Vj5N}f(6#sG#mKKQ^LdS8zst{*`lP$o&iAUu#tl)~X6L44Dvzl%l$
z3ADklEXe_8gaxsmp@<_+W||%id=}VB3@xtLs0C)rLykq5z7r)w7&BGcET@v8PU+z<
zUHT^>J`Q`Fp3renl!>!Ifr3CE(iGhy)ir^M=Y=;(-5lqJGr%JLWQG-kM?929Tp@mr
zz80IPCmbSeZfee9fSwZ++`L3_JOD34VxjYs6#b%$3I$TRaFGj!NO5AGa0W&u*x-8A
z`UCo}#;uHca@t6kJFG3*uMd%rzbjUfYe_t%Z@{&MRFCS<S?6X=DU@*hP(`v*#a3W|
zd<Zu|)kb_BmC)*?IH_ZwjTcP$#!GF;wTJtW5vjPKJ}>x~e21Yu_L|O9d6PxuJEex?
z70<?~NO=1bv~BGC@q!HuE3}PosON@Qy5jJ`Kyt0mmen4LL1YO$8g%poC^Rc-soIc;
z_;PxEzT_ZX%tp1vC6tDFFMm-Gi3$k&HA_UqIGH`Pg6|^E*+EokIN4b88U`I*GIMb2
zw2D4Rju-vM@LVMCPy4I9awHwKOMcwL->R8VpuI4JEbQ*)=>tha{g~fe^=IW<<&Hx3
zkQ&9~=rgS#uF4F{65v`DUGK)%2du2Ql9d{(E-^1e()E*h?nICI5(Q7Ug`;J0vK0Gd
zqs`f`%<3QXw}C+f)Q_4@aH~&~!=#|J1zx@ias?)y5jm)d<`njW*r&|F$-W4}UBh|~
zJtNGR%F277R2_awaTcyzJ%yT_Db5oxMf~cM#5#3-#SjsFecg;l4T%y$$TcH9Tgj&G
zfC~5{D`sU_|E*xh+)eSr@{@$+ew-!hxu#9?oq~b%bX5(sl&^XMcn^JVk*R=USLA2B
z%Y7@+jmqw9XNeT6Jd9i(6k~q4EU5?K8@bH%I)M!X>YJBR3I*nIqy=p&n%h#rH61SV
z2S%4u0W$M9_JXGH=jBWREh2r}H48-=7Tm0V<Lw{1OmdP?Wv*GV#_YQzv|LN7GPg8E
z9D2Zdf|>XRiccw&_X*cC4Mfsm22C>QG~*qW70|s!a@APY8}_bEcUX&GO-C|R;^GO3
zR$?8n85=sC7D%$q`>E?51;YNx01Cu$Tnc7!1Ql8Wgi3URaokXKP(mqikboB80{~wk
z0aw?tAy=xnN!Pk?zlKZlo>~pPj_z*j-=dyRLB4C97g(Ea`zqksa9KJ1%b_*HvhdB>
z10!E@Xa?&9Gb&d$Oug7J9czq<qBPyEo=&q*FPtKPcF~=%UBEB6eK(Lkqc<L2_7#yv
zpXx+dI5^#?0Mbqe4E4c&M}5Fhq3SY~cyHDr3Dc%{-p?nF{5e9O*fS^Tyq9F<L~ONm
z)BY`<zo3KJnC~A!O8(dQx6XS`fq6mtWkd;vdnU=V14!-w`SDOu`l90ADvZ@393#|v
zJkx-HMOihggL5)#>UWaFasyLX@^l^{-xGa>C!|_p^PFfkhXyO2Fg3^voRG#;naGY2
zntA~$K?^3(5ar%*a1q|zAbuJ3QlNsj;1qDcEnV?YC4WCvy5#9sc&q<P>{q%%&GmY2
z-9fgrhIS_POHGpC91*fNSx8NQN5Q3uOgQ~@xoAapBJd3l7#2%77Z)RK-?O@9Ylg@E
z8vyN6Df?BQ1cqaP%wT}bvOga#TWM46%~rcbQb}WwQZiB9WO*$fA*)R5f8*b%_RP}U
z_i|ka{CPS5!`avudtEm+s<uds%3QezAZ?!Ukpo5qnQYendT`gMUD%Z)cr$8H=MauR
zi4H>rsQ~4XVT?)gApHYSTJ~eVj^-HtQS<$_*Wv!=k!R0s#?6P%ZAHz8&+CE1htFdH
z!-vm@m79m}2LvDQM_4}U`{n!x0xneUX!uUT2;>wGoUZ+azItz6>3p=M5RtG7Z;q;A
z=ZE+lp9e~{+KDS${m|%C1Pi>KReftF$O_pR4lmuW8&!1v6#*{WOx(HUCF>l?3AU$w
zm|Mn&-InBT2*jl#a)H>Y*&KUHfgNUaVo|c9QCgu*qS0r*N%s~*$HLxWo=A^eK!vgL
zV!C8fx(Y0%6s%HT{x~%~F7l7${2^bY#}NtHA7U0y)n;ee$P8=qL<ZM>FiIDiPcnxw
zxOMsC*5iCiWW<F`;HmW!e+JKD#{)(5jPSEwrWy5;nUY#Aqzz#3yLMteDIHJJK~m&D
zr%a8`EvH;p(6W=nvXmX=XF4`vQ;!oNgy1t10arI`NBWJ!DZ!=<O`d9KnG>@YIu_=>
zgBKa8SU;hfxSxs`1@dEW{Zr=xA%+B)xSp7}%Ju<APUejAzCh=toiQlu-c_A3IT|!B
zOT)Na`dZJF%bFJS2Mv=arvYLc()=?a0y?CEH7S;TXO^V%9Q4hM&dm=g6)Bk_|9rPh
z6GbWoY51+G`#>L>RbYu3J{2mdnii@XmLbb8J=u*bmdXPhwDYP}4M165FoQ3K-()3h
z$3<!4ABNNo6DZQLY;?2xZ{vW=Q%)#SwQ~Q0%RlWOj91U1p}kMIK9Iml23Y8~juu%H
z@XdHIq)A|c@V0Q7?EThm^yY>DP2U6k+Umyvo3(rx7*bo51p%pb0v|>rtKuzGtjP1l
zU84{GzEmTx9C3+qvS5SNdJ8G_Zc1C0kFX|M;U}(BS7fZ3O2STHd#0I4UAG51dGkol
zxP%GOzy*=`eJHuv`#N&N&4M%s#ueER&lEI}n31rPd}r-cWFeigkwB$B3UP|cKmt0Y
zu`Wh4P%v1`YY6)E6qV{<j$2f(Nhw7i8`9X>h8Ubs-l-#3%9~S)(UyV53`nWvJNJZK
zylP-Ie3pL=4p$m!Bz>Zzw(=VdDfM2&(`7bYbjzcvNi$Y)CLA&x3p8u|K^jT0z`KXH
z(TJCD_}foIoC<3)+*lB;&YFx^1(Z2<R`XTQh>ORX#(eo=BoZL$@s{85rLl%GwMW^J
zugRJsdAX1gN6O_?*{o3zaRYmII0{u&ChX=cyoe^^s<cH9UOvPuSt-Or8Q|)GqB5QP
zIb;AV;F5Vtv>$)TgAK@cI)^<yS0;x)K4&I}Jv?_Bhu=R}GzR$iIP!0{MMNpGiSQ3`
z5v4mc$8^ks_?%TbV7U4-HA88N^Ja$91gmSx%CJ<=o0M+ycHR_@Df$8f^m(>a4?S%Z
zqoI$>hhNq2PE8MGJvOsmIn*NKXsGIWlv4{<MrNBVd)P=EE7DZ!-3w-ya*<7|EPk?j
z9@pV@0gX__8V@FeS=J&a-m@@XD;$GEPgT{N*tD!C;~)iG(U*E)92Wq*-p&Ju%Wvgn
zZTjs4KK~b(t4mtUUeott5%fVxPu^brS|ap&`h{f3*A>1y3j=<Lr-X09(MLXFA8WZh
z7kwNmX2?my!vTYOikggV<^FANKz+6hbLYM`?*eecrgHzFC80WcdUGu*c&P{2C!z;v
zC2a$fZiIN`l6o{upt8v!!K5`iI0X-0A*l-Gem4nK^P%AA<ltAovYd%6j<DCfm%>FF
zzqZJBB~Di2jGR`^DX7eGM|;M~iFU2*@+K6lRm_<#4$oEGU13n~eRvR^_R-M?L(W|A
zy<L6Jk))1Y5F0nW&KF|q1%1_qr}abd@xuSy^}^HkIpkyoXenX&y8i-trV8BFLWD*>
zCnxDsK^&%E9?%jqi`$%?R1FAx!aHxfvdsD>q_?~)^=-Yv^8k#|zgbEQ;_Xxo;=Ruh
z%!^`CT|lioTaW<b4{PIxhyEEq&l|i^boT(sO&?AuYGuL$dH}0LMPQ*tIfA^2AR&e}
zH-U>ojK-4$U!%<W#gC&p`0IqazM9EdXl4eLdN)eJ3FcXWszt;DVy7=Kim)4ocU6~O
zKEPqXsqBpWPA=w-&SFtj+BxYSw*yWwOfM37N)SX{kdkhj1GF+Dkyc@{6pqT5JlkK<
z+FW}LzU51N3wZ`t>M6D{tP^!MiOLYDJw1VEw0Esool;1os7^Wbb#-q`1JJ;P{rqHB
zNp<Pm@5RQzA@?kpY5<3=>033_KG^Nnn2K3Dp*pM1%Y_M>&ORM9USNA$_KX4flir!d
z2F1X74WJ-VNOp@f8&YSB<Qw|P%~y=cyN|-z0yteRHFT}$6Y{qUS0#E9^7b8nXzAk_
zp7;0#Vwt<7=@}zcc&@Q)vbGuOFUmXjB%_ve?Pb_CdX7H*jGW<O7Zl#CBE=j-&ZefU
zWoGX+w2Yj=;z<IE)?Q>e8$klx5TC76v^QPw9KZ^4y<t%~lEKDy=mwUWW1b2d?g~n*
zDk{I0qvHBn9$rqiKh;_ZGGN+MqEKnwvBm1!JjrRHRU|C3hm0rjc*d8sJRE`^)wtL$
zqudLx0#3%%j(5Yp^wob^9{KSwi%$h!-wyT=e*R>5?xmu+%R{>qXlWt5GCLAdU7izo
z^MKGDcoYYd=_(H&3ispy>){_NlOb#;+^=Vpqo_SYelKITWW?oclt5P{*1m4H{0%8P
zxS`Sg2Pt!}LeJ$QhCPP%*&n5XoIBZ6`g^BMVNq`5ZhOXz!sf33x5-nrvOxbxmEnsV
zqnA;1h=*Jbw`d<Pwk%#jXQYw~&U3Q!0q+MYsW1De4mSg@&d{XCSYe~65=VSjchh0w
z%``OT;wd=y&w_>Z@s{PO6))s_$$rtu-)t?Ud#7Eo*L5utcQ7X&mG&`Qzz%Znq$w8m
z`Kb%c=2i{qKQ0U<e>hn~x<l_&sf@W1%AHBdz1cg*cdbVH)*|0;TMkawA{WASTh+Ie
z-+Y42&{Vp50r$5|`^{4ID*d&)4*aX>C)aiaADrxn++7jnXz8>z!_89DmOMc|j~*V-
z^uCWC7%Pl=&dNoc48uo#fyAv7Y1U|<ftPV7)E;aeaP&ab4jy~ZVV<E13o;n0ctWK!
z-QpK<&B6rgT9odE9V(v8Ma~x>ogTCK^3h`%p0l8ed?=$!Pti(gI!Wk#GHD@kW;&lR
zwh`H>w-IG7Sdd0z<DA2^<C-?AOd1_G&nF1;R5RxC+CEuk3D1sTTo9dGJY_#w1Fxgq
z>-w3grmUYwh^5{-yx|(f&AZy8lYcy+K0A1{O&FextLQFyKYs5HK=dQ;u<Axbm&Vt6
z4GZ060&SKLQh-_&KJi3T=wuKCsL{#Q@6@`DJ02`grcfqnOzVQef?HrVRiC#)V5OUE
zp(s{6rzQ1TY$kNpdo3<x1V#&ACkBR`hEFEQo|3wAi&`=r?3nh(P&0hK@H)R#KMwW{
zLRi@5gnTkp=2oZGbk?zkrW4VX!gN9?uQ)_xDl+McRb)Gqi2Wc}D$!kHnmqG-8#=M<
zy}+oZr}7WH{J?lN<ZcWNJ)_FEj{Y=aa2qv<;D0r~<~COl2mjUL&mLmBPlZ()JLAEw
zKF4&0v@=H?VEYqf0YlprhLuy`KC?vJmSM!>2^w09iL%0CeibtngN_wi%Z?+`CTw_F
z@d)ERlKA(b`Nf0l1HHGY;G;^BS0g+|+b&)a_%v^Vj>%#SSDVMe4O)`CcXC<@2G)qe
zvAW8&*E)mLDI?E0AKp_qNg7KT=Jc6Lu$uuf{uZ$jr(xz|(1CBubr?_mdb9o5*r%Q|
z*`A8{bs(0dI;HGWpB!s-a?z*0pn;vr;}z&~rK1Hq&*-^O{!}LvCPcj}g(Bp`am~`W
z$qJ`&!wz`M3OKh)A89K-C}KpvBcQ|=Q#ue^o2>!ki=}?KE-2#VLrPVenEPF=k8i>q
z9+o98Or^;iF{a*70fBY573GEe<T7<j?dhrW2D|(o<U8*=&F67(jScaqPP%bsMKQTr
z^@-0xqVWp&Gw-Fgw9SGbJa?kb-qSx^IDWWP@J}94gp!Kz6re!J0c8z!gG2I>|J(Cb
zTF*b`;*a<yf||CcJzK0>_owUb^ky2z^$5wt@hylu!$cQ?tu!&ma2|!)&*f!^ES<5G
zg!*z_o4GITSYOMb8r(POWn?K`tc-$MYlhgSw0*1WM>cPxbt8I8QfFfy%0nRq?cgwl
zw8e#ib!KsfbzTg25^0Cw`{)JmUiHu7U-pT(i<7$J+)-@|eK~TExPZU+D7LcQQb`oo
zDe7rtYe(`jY34;m?I8;ZA77(3N#02|O%Yge(eJ4CCj!1aCC^K)FlcS30k2Dk%BQ`N
zBxN`dlZLCNsmh-y<`47~SPZ}G+1n?_b?$1e*rx>FG_L7fjMa}TJ3;H1d*qTTgR2RW
z$QnlW5D#u-LI;#^v__0C%^;IGY<e4r6<5&((fw6IB^g|f<$3oOntz4oFO6knC}%9K
z6gwvtt&rs8GbVRRO9ihv^WnJ<;OtkZK*>)+rHTbBX!X5xsw?$|Vh@BW1w<rT9>CgZ
z2il3;K6tvK!QMG3xkPhDMh*~o;F!u_7YZC4L3FB+He{jTKcek8pqR&(2m@UNc%Zuh
zHu_fQhrUL|_UoZS!@_64-I7xL_l<;(l(8v9n|DB9Li5XzEtlVXNKwf3xlw$et=w3{
zq#2Msa}j`CY!#akA>Bie!bRex826Tf7+t@AgDFoQ?Q_$MUT5~V+>^{^kz8)hXE5qR
z^@M_2!d3{k6jA-cn@2DBWv*h0Xm0ppcp-wwsNgeM1=MZ_fSr4Ik_};K1epK$BqQ*D
zX%STWcwwBa``XjdpFzF?0p~yJ>Z=bnm5UM+WCS)eVfJk}g2IbntV(M)Jo)y`NieoQ
za`)~65-#LFV>G`Rg5NQRn7YY^Kg!MD#m+yM>9&yCH@C@`<R=47qft~KJ1Cz@Vuj#&
zq1k>VP4yBI4;e&4)zN2{WAPAD2&5cy7wn{i1T>UoQqJw?Cyb5v#<==w@nULynAnC1
z&yR)hxWJ+Zgrs*JlhTh|=(<zEB|5v94CA`9;}qjQt^<$QLpQZK-Euyjao(?Ujro5C
zz7x>Iu`a>gyg)ub<~$_$h(+u3Z+;r^qa3i62;_izZ3VzB<l|1jC*Yowyc2#n%pH|M
zSu@~Q5^y@zi-Y)o#gD_2@$U2LTvqQkrr(aocU72u2;ihyv_ar7KJ0SnL8Hu3R5GFP
zsINB^g4R_Ei44ngd{RTTDfV+NuGotUPs4mg<`F$U<cbJiJ6niv1<nJfYKWbxC;m-8
zwXms;3>_3^rtyFa2Lm7(kmi6&*dit92yux$KD{7)mzu7*w8ysVZKm+k0K0@&ttSN`
zUgi0|+P@6nwix=e_-<R)JIf}I5OrWLcwc0Ye5WLzXqW@dW>6|JWH?ETOiEInyh_AT
z9=@5cl>)(*49uFC@ps;#Qh}sY<}7`1r9PU3uoP9rP?HM6nz$4d)$p(7KK0VJq`+0~
zNL_UL%J6Gn`ZK^t^*%E@fCc3SZ?7@1bgNtD<?21-R5qj-fhj3;C6lX{HZdKINHqhE
zA?h=cDuXSloS3KTg5Vsb=9z{_POb`Y+!R0aN+=$%g}FETqP*zUM$k~Xk)w3}NRy+q
z+sGtCLabeH$K($;Cua(*tz$!c(EBpRfQgzYe?{WFrV2+SulM`Q`@z-H=aQ3&*`sBz
zX3Zo1?Zb*;$HtduYMtE<PKQQWZ%vz~*_2Ij-$U_Q*GGyS+QR$DSW_K3c~9T}d=`fD
zt*st}0sw%+{|~!$dwZk*@+jP+@vF2siu9|I`Gcr-DE)3YrRM-J=2Mc~I?aElpPoiW
zLLg=KseN8do<mP2@%z%&MUII{O<>1Zx0Jqgy>qi;#@FUXUh_R}DS@*RD!AI-Z9o{u
z?G%Fxvd@il7-2Z$*`s8$ijC{ayMM)e<VeqM`c0AUDAw>TEE7o4y54)*z=VU)#Dw>F
z7TT5C0hSsYGGsEXlPaDjCVd?3t~tEg(3DJ>%1S-@1BG<5=|l!Rl9(QZ$%4p$4H?Je
zdwD0%K$wC2RzPljZqJHrDcGt+RRKGeN{vB@oopiyf2t4pw_Ln6HVzJM7Y?qemtCBQ
z{v=Xe<ewW0vHvc711eM|8S1b{(}p!m15lbEmWL{Ql!d1>b#^3^VwXu~{?;e#w|}~i
zxB%tf>c;GIF{jCQZ|1r$2>WFeZiwQ|gt;v{;`$vY5#cd!gF<}}gF2W~1?_kaehcJ;
z<^U=SgvocP2+9e0bILKH<d0MWjgIlqhTiw%65op)ScdMjHXLPbyb&0|3>o)<HC%X^
zIrQBtS1_X_Q8*b8HZ6DndQ-a7pd)DV?|ibQEHk_ced~9-sSh2&z^pF@WZYS_T#1t{
zu#D6dNxUTvfUnaD`Tt|=9D+j&!YmxycJgA|wr$(C?Y!8wZQIt1ZQD*JGn=WI%}mv;
z?&`m*?xt_uMgQk~CkLsIe6(b$RQ*qZPaowuzWSy37s{^;*@)pWJOvQj$`v*w5YZpV
z_^&9~(rUWBIf7^eka9Nx1XUUyq<!0I7*W@q9}<@!O<FfFQJ*+BB+{&jk;5Pp%%4ZK
zH2B^6$%r+f8S53eW<;3Ar7A-VfCED$1wxaIBH7F$@Goffn!7-X99WP@gfpUH(|}Kj
zc!M<jnHg77AoBr9q|2>aMN`mo5R6-gI~D$&dV}-<Mj$GxKzjfq-%5;o8#snexUvB(
zDIBC(5R}*mA0fCf2&!IKgOWZ`E>af&8?Ygx4&q^C2E}lvN(uj{;3l3}7$JIX4)%0`
zK2g`98L$s)CN!h=bog{g{JNe!-qgSSI}mv%OZi<uP}*+@H0;kx@(YmY{_8jRmpwHr
z->ac4&0?T-odN(DTG>}>VBBoy(=FHLHobu-rrq6zx!7E<n>9DCk4_)S7AaymKENa)
zPmj!<B^098Up*iAs#Yvk*q4nKNq#)PG@mHd#>lJIpckGkm5u(G{`rr=$_HKS4YM1$
z9lYl#Q{<f8yVuqng?m%C;u?c0Kq{M5PC92h#~qnl(tK!Pl4v*01J=?%1ahr7urM<M
zSe5B$BT#6-Pr9eq#4EklZuZ}@m7B*Z_n~x(As{Sx<kTA-?CtElU?$>4Y(z)GhVKG&
zI@?a+UMZH}<t$_<o0LnC2yia&vhR84eZCKU<ktc%Ij6a1Vi+dO$evixxYKIWI{MYO
zKI)$cHGqZh=)e#_CE*t5xq;~Z?N+`fo00e=Jqx;$-lbp4`)>CUJ8S(zz>Y1m77DNd
zPj&Xl$#)y6IN@|zs|{74BAY5O4!K0(AH;l{OP}_+Ct)8re4BO$VIPLRZFIjYYQD{z
zVfY!|K@CtVCjc$RoFc}Sq>f9f#e|*NXE``8u1pG&7G~TI)3?`0{U3LGIzY#y3vq_t
z7F!$NwkjQ6-_6(Ch;Q3uD;-r=kwq%Dj$=-$oq?Esui|^N(+{jr*<{YDIV!}(C54Is
z*4^7jbAOYiT|aJ9!H8-ehAh#ANB!C$nQ>_QUSlaD0$XnWy8bu2QuLGLf9R^;kF-v`
z>YOA}M4v~{lWR`;v*Ic*>ThCADlvn)6qfvrRY2ewGS;H2Yk^tGL7DNk87A0V8>?7`
zR@hodTDX==`A->|5%AO5A=x?w;7ta-`iNNq%;0^yC^{<^Ff1+@i$nCwyY$qRY=A?N
zWGmsZdr45Gyp7cK@>t;$GCXiTEEL}OMiz>5zQCC%&FJ!M!#s$K*QdV!JgPs+W%@UC
z{jYQ^<>pMJMkT*!oIAkeh|7^v+@;UDJ)B%zmRM-;XAzO=T93MnHQll3Wvnhig=Xs<
zKdzJGCYr3_`5D%ag~oF%`j9dqfeosgWCmkl{2P#(VG28eln0ST7b_NJj7}-&82_N*
zrWOMmDI1jgKd)nNkz7=hu0H~Cgf8^&c=vdFho4z89=baNT^RKYaIQvnPvLxNd-bb-
zY?K)^wmZl$2xd^JaD%6TWf_1V%EZn|VZe|KDy+-!IfNs}3{vtAke?kFTS6)7iSI>n
z&CJC5g-9jw97~z*|7wk4KFbFhLy-mZS+9*|Lu8Xz2$ae>m}oS>=o=h$Y?vFNoVwvs
z*shCVlUV;2$s{dD7SY6Aqd{&EY*HZE2Hm>E*8va6#^16)v_=MV5m=)`x(TdOBD5eB
z5k_eS&jbItYKTkqEbf8p#g6MmXkjG1z(2=di@qY^CYmR7TOu`IyJn6+9fadt<`f{j
zlTAQHdI(!=k}C=OlM%Yk0Ml<z*-%Q}AYpvrdnH*6Gxs6cGL5BfLdgylWh%tV6x7s<
zrS8p$`mhblKyy+NA3{I@BJq_#z2)_Qje4a}(3&9VV4<|^L@7U#0&K|*1yP~Jn>Q@o
z*EX~*dhD@acUW2<w<DG@V~A)Y1bkd{{4bZ&W&3Us;`8uR5{CVzwf<7gu&G>6y>CJR
z(L{G8+2ROmHAF#sM{VgqG%6WI&I-#4n~`nFUfK!KP<M{Yn0!H0jBzOi+6I@iLT(6I
zUJhOUgg$Ov$cW`zs&B08Nvutpg_dgf7p<2vpdPYUsH`8q02bi(ml1L(Llt|Bd)gNx
z{TM5Fp}P9BqR+2fID{Ol<9?<OB~9mD2lhos8JgY;WVTiMC)4!2xKokmAs$u>j(sCY
z-x}#%pvrEAh+W|TI$;qs`kxf=rv9G5h2YDPyCj_qnsi79h)TI4T4V=tPdDxFQQLPI
z;Ra(fPlDq9jZ7gY*Zh&1o*>KiU36YsS`JEsLQ8b719(!@(SRE#KpR|wzWPx*$*HuA
zrD!*d_`dzeNmev<cY;lseLNPJe<rA|ahXFN2}*JuvZhVxPBpPF`7Z7BnC|PX(5&5`
zjY@JSB675SgY0rwOmgyuC3zM?S@FZ0+InJj8L8kCzWzcxL&e?g%;e~};!k<J9`^oG
zhEnO@&Bgs;U-xroU~n>v`n*Kq?XV>98CeVcnh^}uoniVG5>|CPND__Rae9E|XCFSy
zWIgnhiQ9d9$9P~&J*X_><>DD4@5pT{R{X(Hvkl`YLafHzcdpw}<-o{p{%)Rab)t=q
zdP!0t|F6OVu&-5B6YmTWennW+sLt3_rK(4JU6CyKi+Mwhj9%o%LDs^n*efraHvQ5R
z0>fZVVHs6e6Z~g9j(i&%OaW!;yLh0Re5x>DXX+USxOQN5sMbJGRcLl3_0AgvGChr>
z=@Nw|qq8Ho^LlI-#K_Hc%sL#8c42sI4xH<2J+f-aqIbsjDOy?4dx6+sUL-MC<V6|@
zO`AzV)qav#qn{+v7}QNV0acsfw=noy07W(td67z}?$G^51)xpbCK!g7qynuMfWa?q
z#jdtlriL{w*$Lz}w1I2s7T1)XfC^2H2CuiFTy<XP#@$!His%-V?1;ZBo5I&OpW6B@
zK=SkDz%JM8t^1wu;r!|pvE6gJLidWtRHLI?>-XyH@#WxjaNjYqXE-$xy`J`=!xTjT
zAX=fba2J?XdIR5i?DxN<lZ~>p3<E>}0O-8{0A&A{AI{!@#?ivbh>_MwMHvzRcr&qB
zU0141-NhXm01)I97y#hEhX2$}u8*bUPS>7Fa=c_j*c1Puk2;V>+(>k&Hu9=xirwlE
zfs6xo12H5)B>T8{$?|opH0hHty}pjI8VOzYc;xVT@9Ow7ddRHhGjoD(N&@-*rAze~
zMBAQ8a_E^%ZD&U}E|c@cl%8Z<M{A~`i<2Obk?@BQ#W)Q`;+r8Ik2MB+^w5!4B1MFe
z<l=~VT%sINVvWerKWLVHxAFMTpI#HIhH$<_6V(Klcz|?AR=Tk-ZW-}=i-amkM!f`y
z7WLu>cMgfM!LBTY^(?4ThKN*R>{JGTQGlLzn5116AVtko^wJZx))T|3v1JZ~%$Z2W
z+}M>PZs5nPA(Fi52}c$0pZlZ1!9fEsAQTbLv?F|7#;jEBltGPl@$yZ!pyk{B=cM2;
z-t<B4M3Dw+BhmYusMNwX^}eK%2(b}{bFxAwfGOKWtXZjhhH+@PXeS~0xO2EC|60gT
znd=(^#AE!#N2XDleG$R^Ktpxsw(VPq9B%+b0~R!Xa!|?e^!;<d{4<=gV|tBWEN{@h
zz6syR87IY<p-z%<R-CIiMQq~zABhxy?_OQmGIL~q+EeD05#swI?Gq^hvKeIF1nITE
z++nS}5vfY=lmz(D_j1M~qtHpN88pbjCd3Nk{#K_%y4ClW3*LySW%0Mj?Xl%)N7Sa!
z-jq!NPNB)T+i<!$TX1Q`+oX^>ChCV4_Y88Y6L>SKVfyBDkRs~F^iLK*Xvt{a!$Xq5
zA?&$R$0XF_oTJTHMIxe5d4J^(s6Vo~7pe{O1o(h2@67I5#~)@7cMK6w+NV=*z51g=
z88YemSy!ajL=-cq%P~sJqQbm&Q|jFLADmNyEJH7h>%|4o!JR8nFjvQ^CDaaiXVH@G
z<=8+>`eZ=0i0tqjzZe&g4?s68`L;fB7j;m^4Poj4)>gTsk?Dtc;x3`KQ7YXNF0Xd7
ze>_`b?N*F1);9RMdAW98zQ4Y9FNa>hQqk>dWj(idA0I!TpND=>WVt~wbo6w-m-8-n
zO4iuHW(i?jGd5>aosxR^N9l_#3rMs3U3Ex7^(0Z`R&=>TPpp^UJT+z<Qq408jnh<|
zpk`(J69Nnn{iJi^MUd#yc?tt&Q}L6A7kC2XM`i>od&u-(;qMx#r)1Pj+rm`a9TT&(
z4DEqG)$0KbWEk-jQ>V(qq*uRz&R@(+E`Z25>C*Z697VQDG0Q;ksv6!Jk`AGMwOA)>
z!l~N4KX}w6mRlzRyZx2)!KqjLqvF~afCC{wHR>dZ9$A|7ya|NhpzdP!Sf{{gm4fvo
z`U?m^ra9jJ9228afT=&diQGi*voFDiyx`@ibnso=r>*yOR{Wep6C2gsrw-)TYlr8S
z)Ix%A_bLk@hqUtFIKbMolY_iKL5&Y{Kag1)j5(h(s*>>~>^Atjkt&JyW5YO?3AV~J
zW-7-xi~wU8IttRvYe!L;uq{hqZ(%GWWk9gXJBqi=_zaG(P7vX{sRA<fMokMCT%v^|
zj@@w!E27OJNQE}6*_Bm8G^oE)o69{+YjswE4vjzlw99AYIkLZ~BwiEOLGUwx>%PFM
zIkAXUNvH~00?Z&HiAfA2tI7ox-nuDOcG11LT=Wh?^P%Ao{qpGJ+%~$vRpGCSU*L*7
zjtPRZ{sxaZ;S9lQ44T7T=dXiuIR&%+=Pc*v(fipc0($Aaf=?MtE1CWE*z)oF{{7tM
zXfMF~9+w3wwk#kGmO19-6`m7A-5vHg;L1o{GB*oBGN2oF*QRQ_WsgRG09zg3@`Nmy
zyDpd!m`e3SCK96T=0ik36UCDXqc&}wM<?7-nKUw)1ux=GK|jh3s~ow9YJ}#MC~KCy
z?Dnd^4NLXF2VvKMxssc`W9Y7llQ-BQOka#2ocQ+Y4sT9E=U`BjqaZ$jC-ERkR>YsT
zPzhJf8Ailkn}mFHKN7GAg>!*Ta88|Eo#iqyw1$NN?@>YsT{Q-o)3%bsj!hBVc~Km<
zE*q>$541%J>%HOc9?`!sHKNs?WBb@xM-W~p%5v+j?!m(a%E?Kdj|gyIvY$&Go!HQm
z)Roep&d3WYcs7)-UN63(U}(l2$WMc}aUU>VSjm7y0O@GPVvt=A7z^H#Iap3_FE`N>
z5XrmGpp&-Q!&wG+WE=THNNkU8tW^m8mzo+o@h$k*C*t(L+F*>va6dB%rHp_L*pBKu
zGy6B^KzTH4g2v5+D3+%fbm!^z$a1&WMVjCmbWz)2TM;@jT`uQAJisc@%?H9A*v(3W
zYcGXa*o~9A(iOH|2K5~y)TA2f9HduuIRD<L6$^>_nHjqo+O8jhfEBo|J|@E@28QjN
zIR7qBP!7g@1`XMrE$yy5-CTqnAu_v-OY%1mOv?O-TfopCHGs9D<N-|-sJ8COMk`JM
zdPT}?@ZQCuQ7ijKY9zMjm_0tt$T^Wv{x02P%tJ<fKzMnNU%p8^Ji@F+)=Y{#02qeg
zNL&<CVA2D4+1LbkNi}TFiL~Na>k5^sfs(2;Bf=UD#_^H`BhVM~vu_u7VdWx}=aek>
zQC#depl~f(_)4(Hs1lGg9=%)0)*C<E+(NH#>$Wn`z#<h=D9A-}AddcC<r-@V8N3A4
zDU4PvO@5OGs<G%~0=RywtN?!H8ztZgKpKG@hhDLhxEaq}e+L33kh<<B-7-u;o=g&h
zWwSc)Ih5h`A=Bw)+=24uYWOs_u___TA^zO$_G1*k5Cz0mcqr(!9~`|VOFjW#n{|)$
zWRSrE!Aj#es2t&FdH<!O=#2fY^+VP7!cQ3BCR2b4L0(@!U)pYOPv<WO=(9Lrb<pKG
z>JTIk9WXAmT122nC=SY$fT7u4hygeNlY9!leHOsJ*2If5G-8lCw_wwTS%0-58&)Jp
zAVL+9;fQdCn`m|*!Vyx5cCRWB145XmiO7%u0XU@0^t_p}@sKGQx%#hIaU(D;@@%Sl
zGc@}{ly$tml6=<+n!~ZKaK!Xc(rO{Up16`M+<tR~0z}yASOkDme!&>-Ad<3db$(1>
z28m4fB9dkoUw|51p-l07NlKTkFvE^=xF&1?`;e+woV`Io(biZ(6LxwUeR^npdON0v
z=m>>0g7pf>@yG$@h-7egMxFPMhbWlDVNWZ>3$eXCAQ~D)emjf1=(<#zjEeZf(o2-K
zI>3Vj{LD<3)N7=Zh>E*thit$a#D?l2XyRVl>MCHx2vdV+1n%wCa2@avtJ#FwwiHdh
zG<na6uH`sULc+pi{>zrtnAB-h`8$tv)Q~bge!gIrp&&CX=Bep##(BPRjn@5sFb+tq
zZu6k&;5b8`)u}{if>9p_m`aR5h*2Jz_({0?N$)o7Y}bo6_t@rozD4(xqh9ZbvCOeY
z+;KWahf0NfaN5{ky673IxGu_=j!?Bc_x3<^Lq^?XP=4ep2HVBZxY>Mh=3Xo*voyd_
zlroe+PcBP}l&ky|!;E}CJ^Dtw%RjS?O1xTA9T%n_1IL3`gAKY9WV_x#6X2}jD6x%D
zAXKI9bTH}WnEb<Q1jyE-<LDBH55i-IMpm*%3S9OHB7#&ySOsTiKEi-eMol`xn#A0!
zrfdiMcK_H;{bl#{|7~iVy~-|HDq|C-GxwK&3Sy&PKpQib&n~t=rRZ{=s8zo|zKttZ
zQr(+&dr0-K0bIt{8APJEcXP%s9ty94nCPC?WV-7Bgv*Bv<KHTyaTD<<1|^thtTCZ#
zwD2r!W>C<rbXAH`%^P`MzWzoY2*c01i0q|~h(Mwm5l+%CgO-G(l{GWEUWXs8uxrtk
zGPo+mR5r(|V(%}qs`BY|>efS{l}zeR7fhO*s5aCa=g(x4MsqFVsLt2x9QkJ%7qppN
z+Y$e46yIvX(G{&T0<JLH4{g$V_<AB)oAhsx){CAiXU0#sh-?QWFGTd2n+1DHiZgW>
zQOQ+GDbmz+6vehJQ1N0X>qdP3B~{Zpc645&O5YqAf?8^l(j-~zm}9Jnwt&mVmQjg<
z3FB3?ko57*Nr~fD4ou^kW7IX}H}e2a9M?u>);0BEHgabSTTc>jaHrO)Bg&pJG{Rv8
za%cvX69T<R%l+|mSXpI)2`UezVeU*XD67B*$vJJExl?a@)FVu3*73l6!@+J_zDy_>
z3Mbd<gpzQUs29=>T5ODe*9mY|j&wFA0`(=X>u?d@f>K0)Dw4%jEDc1Flo56jM-=mX
zc;N7HzQuuG;=sJw!j=?0FVPVz*;?i5!qm;p(aXNVolPY(*nlRYyL2~Lf&Lg>>)?j;
z8r6FXUvf#&<Pg)r3@f{}J!n6Z<YLxYBP)SVs~Rh`-M)w~p_R>O;ilvKc{=uVZ!IPA
zI#F{Q-08~P8=ftke8`nskIj+#VgQ%r!hP^=B*OFlsdYjs<Y-ziL|b8i-VO>1pNN%@
zgOZwElK|{YWt$d$*7noCUonvQG8k8alk9nx7>{{up@PeC&C6#A5w^H{TsJ(h2zAN2
zI}9{Fpa>0lSfn&Pcnk6HzYCr)TWN$gTl?(}TO7oL&ffs~IMg@al?_C^4RKBfsPL54
z$x>bp*=6q6d|MAxq2f~j!Pa#ELuOv2sOWC}306T}%Hdm7$;6Judu#+ZOV`x%!_s#t
zg^NusFLH#r6)~xZR66R~bCA6*4CN~&Xz^f|!@%3y<JNo45P3Nmh1yU#Z_z2oLZ5t`
zwsBL~wsniqk4JapUY~GXJbelSH%0f~)_}{9ODSyOvuhOSJHFn(T!pWb-}JF7yn|gU
z8+&~Vt~v%0N*j9Zhr{Y*%{6a}WoB);txxYXw7JVr?Mipi6yDl$rL0nK&Jgv|N&E^c
zWn1j^VEU@{efhcYebJ-2_WMF>rMl&=?!G#;Tgi^(Ywopq^kr}2LNczLrN;4=7+hbg
zT1Ic{QR#MSe6K}os0{gp#Tv$M<oJS7y3>1mmf4Sv-jinzEx!|Ak3qYQ9qjLPvIcB~
zyE(nO1^H+S+S}NezuG-{V7l>icjfJB^W?(%WW>n9zA}(-Pkp9u-r{>MgzR+tTe+n|
zaS?h=>A<E=C+xIT`10#u`{inX&CgWq+n9(Iglrag^=v&q&ZgleE^tTuS@8_J$<C$u
z*srND&=pN-m)S>~-00AHq%m@U9g%cb$J=iUytK5czm7d%)oNBylL!qimhY8!nr}Pk
z@}rTr22>>Be;Tk62~?Jl?>5mw6fo6Dc2=1Z`$e5pRKZn*9_WI;cY3OHm|~vZoG+dJ
zMPOud*_1Uy&QJ-S!}_bbp*&cBbM?1qMwWI9wmQRhWA|_W{G*t)Fj4>EOXQDeYf%WY
zI(tAUG6p-LfDo@uM*iBuvG-~Gd}N;>6mh}@Z=-Mnp>1o%jAr$iZnMVm1YdbBW25au
z!QD<-ujdz5V{+dTT>=VFWMG@MwW7T$qO0tQZKb9Sm>8O@NyZvSaTkkpF4ww)GD2jB
z>r<<8>cce7T0G&!Rxa+nnoFfqtFy8-TYyNrwRyTZ*M_wzhbMn*#Dn<Fs0R(xt#NE2
zW4*kNVbc)gt#un%Wp%^@8H>y2o+?5}!$W)t98$F92dC-Z2bFiu=Jd(d>x;I=K%Jnj
zhX)3hJI|BTi!3)8oGlK@WpDSPy9o4(qv2;j>l1O~;CwOQzyFR@d9{?LWf@Aa^n=xq
zzFoM;Iys<}h5DYOL+H$n>`oG^54Yyk-K)fR>bZXc2fQb_w0EA7QXeMiqwcl+n2w7(
zRLYRuih0rCPkm}c3m1FviWruA3I8nhU<A<Se)9k|HI+h>S6C?=VT*LW2L{l!EflYe
z=Ey3i&tIn&D3{|P-F0hSE^NMv=-)qlyGC2zuiW4noc$cJ)ClMfZSuHK>4DJuSWk_N
zJVr&uB;);Fxa08cX5ErLLw_-GNZU2@h<p;(L0;j^^%RVlT^6H)A<>BN9)e;T;g#ME
zlrPzHks{k0Wko+q{v%;Y+T;nN_3S)1bTi>r!Io1J%jWg$;8kY~P5*NkqS-hm{T2l-
zDDxPQ{_5dEddfZKbm+E3qd9(U$u^%7+B1EA-O}(}kq{)&B3t^}E%o_&7>1v*LH%?+
z*)@N-MJp#VV`=@tDf8|Za4|LP`8g^gSWixgmy*wd!fY=};u|h9EXs>gaRY5x=PV|@
zJrBjEwE=WX)!bszhq9r-_?k#qvi~DPSVH)l#{z?sQv@=$@oRKV0V6~5bo77~3q(@{
zt7haTg%a?0gfF5873>rteMNlaarw4%ghYk59zS`+HU$Eb&ln^DytL}2aKQ5Vy9-$g
z4sf0k4q*JCNGme)GOv%tUT~&rxvnGEQowp~2Curv7SkZxxJ5FNv9XS7vW0y^WgGMJ
zRQY}SZQnWblNg`sr*`0}L64qkIth;vQ2G$d4U`#cngg1-4y;53Gpmdss{)f#aibpk
zgLa1#OLGR!&p)x$!Q9KE?(25@Cx3_ZBl&2h_()1W*y61Ys|0+owfB|GF6>c+KsR__
z1X~a0rp6afd!MRtwcA|`lOGFs-Z^*&LArg;jxrPgoT*Sx$=At&(m<@xgY|g^%q<AZ
z|3d{XeU7K}&o5gnC3SiAn>QS_=Ve<*TUYm1tQ6SY=jni@AN@oqHg`iT-q&{L<#x=M
zxy$45Q&;`-&v2rh-HmU)-yg4g&DEaq4c?ZRn8pt;>A^3#ZsP(WuN$z-Jl@kV+EcF`
z0j_&ZK;NSHfQz~K;E^1{pzE>e^=9)I=Jj(Tol7E7m33tBD<X+bv$^Y!o*-9vb9|S|
zrVro4xQ198y|5%7y=kqBDMxWvNRcqr2i5dHuh>^Jkzly5w5Q^|s)a(GkGPZ}Vx&zO
zY_E50+itbGkuT<eX|=!a+6noQ!|l?32M4EgcY!&TAHTbPH-o5g6T0gOiKn`h(ltm{
zD?3!Q#g_-Etuy0)!OBu)pHmGjMa38%@J+mLYBT2w7*(Z2%s}m-&)?`dMB=!$k62f3
zhzTjp6EVuEK~!ae*k;MEv;xt99KEOLlGk3WKCQN?L41CM^@8xh<y5qC=0V{WoB%0?
z1P*dVS!41lHbqk$-^kGh_cB$O&1Wj1t6+!r{1+!ES)JQytn>`-xkB#joeF9(rvvOc
zh?V|PR%ncP0xp<Bi!K_LbLyGcDuNjsBi~|oR(YXDjS1V1%N)`Hb1H6Lj;pGA7EFhn
z`^)An*J;kRwM+e4$Yy`!e+h85#d?h2<h!bg8AY}mXwRp5d7d3o^R;-b(II<6*Zlqw
ze-D1%o!`RJaL<r?wGiLRIwbJ1G_mE`G0B|Jdy+XF1Kp~;E8?M$us^Rm6EDzkUCHF$
zmw25))~c+y>e=fp{}@@F!g)!z@$=#Fo%jj@Y$9ra!qt>K>?CGvX$m;`TV!)BM1?d&
z3qQA<I^^#vl2u0A8NS4uPl5YceO%5+Wx_P*2n-FYVFCeVcRKT@D4~RRR!FNP!YE~;
z8$W%{Xe&&6u6L^p33Q|eXJ4F66u9HW|N0Cv4Df0KbFrn4@N$Ta<~jHV8Y^iC58}!t
zM;NYBU;TbjF-Y~n&&`bsBd3Q5NIs15WctRGmu`O(+FYJKuXMSqzqc|Qt)8I4&$RYP
z`Tde$k!LYPvvlm}qO@C*+v7>{WH|+&Z?0auUADSbwx|}aBZkES+_M1#hEh{j+iHJ7
zr&OqYxq#4af5KwjnxQOXowG@|_O#=0Z>^wuiOLyl%9T={M@%}8f+I78i`4u{vfH`-
z<}VJeOh*i0wYBMPgM58`V9&6~q`I;1Ldsb*?A1M^=d%qzc#jq7Rtx1DjJeE#st!WK
z9Gziyz>?FuWB=jUKH%Cx`nr-RW-KIl$HwH|jz#&-`VapPZk$gN^n&jlgQJKnl?jYu
zY7|le=N8{SWMc@{QhvjsrTOeWsP8s;sYH$j#*o3ROa<@v7;gmPuS0yFr&f}jkvy`E
zm=lj12Qx9lItgAm2$C3CVw+QecwMqn5JjQ^iBKa`M0%*GP}%0^0hlxC-#+%Y+fS8F
zfTE#JPQ5EX6^x+9ZYDN?Vn}|ad#oi=61yk&5q)B=I#pg1eW@4+u&3gD#nO$j)s2^Y
zdq_U`9pfc_BJgr0P_U`UOF{OLz2UW?l*B*Q{A?NMWT9XmU`^B)&9u!l;}KkEpn$<E
zOqJ}Ic^Aoi8gXO(PEFB2Em5DAljPUWICElnoqtq9R4Yq++)9bAZg|;D9S`mNc^UJF
zaNp6vXpS%E{me%U<ivg<p{q*jxMV2_LYuKgFsDVQH+{8+7Q;zxloEdgv~1S8Dh)+q
zZ?QZdbCDeNpR~IKwMWS-PL7f)g*-&0Yx4dUCo8K^vktZZQ#o1!^Y!5bH#1#!9$9)_
zD(c~;T)zyF@aH>qUZIW76ttGE6mmKr=FvD?qmwvXTGr1kFa9*SRq@1cj?GThVpPW=
zrL-?R8sV7_gQsm}5l&Yl=@%+FD=u#J1u)Y?tlEFv)K0jz+o-K=4H9*Z$HQwFtRzi7
z*>`HYCa;gZ)!3>?ICoySTnnxcZp}Cz2}wDh9H6zbO=`aO%;o<%aihV_J1t~3*aCSm
z|LAr$E`6~d5Ur`-7*^EYAOx>aS>QZ<)Avf}!a4oKVr{!d`$T^x=i!DcmmLKPGpk;n
z_Ax)J<cMwSTPn9#wi|@@^g0)m!rrkMLamt@8K6G7qL#w%DBg&$IpzYCJ<;zU5uAoN
zmc7!Y1;?sr6b-kPox+3XyE$Q-ON%BewB{bnY@xFs98397E{336u2i~N|H-a-clPmk
z@KD*hC}>mXd!4>5=@?e*E-|d3L0qY_vzxuPU0x||Y1uo$mYz1H^o<FHM^}ecN5$eE
zP^=0Ue_ylwn)`;?mChcBr&WIS2Mu*zn)a-KMw$_Aaj(^*c#N5FHk4QU0>P@yt1iEl
z#s0h#(LuMjl=p1rbZMW#Hyq{;&<!!I_LK1LlrN4#w43Zzn(pIrq1)ridbV`&u#}|C
zt&HmPQ)*=B9rEl`#Fe1#RjZ$HtlOy=ky>sGUM5=hWX4eLQr88Hh7kh9U<}RYhv68M
z7bF^#2MWzHAV(DHr<czARo4K71{$OhgeDlI{qE6&{&wE!MPQIa4Zxyd24U!>F+wp7
z(->i#%#AUQ{S7AQrw|9D3|50gLk-~Rr!Yc!`sA5>0OYDo-{qrH=dcXPN5TWngyIE=
z2IBz1O5jCYizc0O{LyOdDmUm1-ZpkBHzq4|v&*Mq%z*<#;kP|FYh(s+OBQX~H(2Lw
zLN-{JY>GEnu~!)<!_H%<sCBC`Gf{_8aH`WyXY*-{LB|?RJ)`%l(lu`cv|gPMOsA7H
z#}m$+!5WM?v-7FbWz8g0q)VCNNEXguOvar#g*29>OB->pFu~OIEK3$JYv@=O&Z_)H
zLjjjlGtQhtFQg8(Ya7tz!rbk|yU)W?0#p#uO{WZi0y2o$@JZt`Ae~z1gQy}1qF7)u
zv`+=RJHDxxmE6GbwKtvIscj~-$bfG+va9pgP`a8iU}F4u-(guxduj6SDlF@`ANt)n
zI5F^}(bml4W6?Yt#b{w&ayp}o?Vgp*Zf)uAwc+D6f|o;}_0G?>ck^{G<8w+JI5^!x
zhPF?B3m&>J3*2Fm_m$i)GI%l+&jhpFqYp{tqgvdt!KX~zvHxyCa|}y80>l!$%_?As
z@pmk0s;@CI?>o7ow+csi+XwNWYjQWEAA`8UoEennfb@ui0^xl6NH^>nbP72$iKYP|
zlzD|SZrI+gLt>rtZx*Qk0<-`W`SEq~b~{p2nWebI_4jH_3^eo&ptvT_l<RgUqiBq|
zKgVonv^-u(7m8G&+YzCSHnc#f$9gMaYlZ+Ak~D=(Q<6??#;JFV(O$De|C^G^2hk%Y
zTbuiVhwd_C70Q&yr40^^^`FKzQ%VBF8LWEi@G@xtW`C~np7z%O_}~F*O&1PfHjTRf
z#|=N+yOl}ymw-$tJv7#g0(%}k4D;-o*X503V$&j+BY7!dZ#I9r9&M_hVe!<^Kw^G;
zmODu23?Bu_RI+KU8wKWQ2>{b+Rsi*q*I#e5_d*vD#oMI<YHs0zT%AxoqS2nm=A<6J
zQGF|nV%BisHf%uR>QS9NEWX+4@%f-sZ)pB7zOJ-;x{2HsgH3vdWHnMB%WERi?F;jB
z{o$9xiw5c2*2Q&EPivKNN6P$Z=eBC*5feT@y&{lOYwDw-_HcSoj(d`x<Y_j?oAl3b
z-E0F(!Ha5L7tz;ImM+@kAXV;N^sX?$6ErR&Nf*$VFjWm8o&1eoF2|QA$nNa@p&RMo
zXf4~9%_PwDoKP?^1lD6!9%eHY0e7vxZZATjOB+R5YGC7B3#GRV1WQ>mkhGgwgLMv=
zwbcCh^i-g8<VT~jkkX|ixK|*HukMBN8Ds3mZZgh9vG+llEcIQ$cu`OM>lQTcTk)Ju
z>z&llPijZ`Jh$mF9ywxGsme;Jf21HVTQV_#H1G0iA(<38fwgZ%h0NNVQLHh_ki-4K
z0JJk1s)f%LV5nws7A_8&0?!^Gc{_i65YRE#K1lD6ismI;j*!_k%r?;ct_X8;%uLk+
z%HFF8eLs*r`V0mQIH+K_X2i5&3tmy-X}>vF;GkZBD3&e=Wq#vjT$0S>L8AII0%{aJ
z;1sd~4iKh9|G!}K<pg~x4LdTPAxrSMVhQ4Zr-TSHDUq9i8G<Lu$~mfZl55;0Uzc`Z
zX=Vk=po|Ic0?3k<SoNW=WEAtkS~#-i%ahyF01cW55zHMB!ih&6M0L?t29^3swsq{W
z9=$F>qT-alCRt^%43>IP#e#I}Hm~kwG$wvcH*;siaMDc0$ad@6wYHsoK_Oz);P7Hh
z3BznLUNH^n8ZErWDTIcyaB(a>q@^5dJdK|8eq>yvN`^rP`cSNb)88`$iT4oda^1~W
z4Sxb3$UQ-@L$sIg=FM~hqzFrl%U+Y2!r_OuNZ(4518j<mU7LO_%JVw*!s^l<FiCOH
z;NU!RdNVwdI#gRu%gqS^($dqZS5v$E8AbK-(7U|gG}?(_dv4yUr&Y5;*1L$u`<JL)
zR5XjkPGjNM=LYeusTE+h1q}oC^Vt+NTnfLpGpL;PP9LRYhb44SUo+@{A+SO1OKJd9
zXciljt+9_2Z;Qflfy%Z)Y}ukPRpmEiJ?Oq>I^Q5;WRfX1!5WeH6qR6uL9{_HxXcC8
zs{r%OQ7ABr4ef}FP<6I|2y@SP=Hf}j8kuvD)fB|t>h#a>o2ata+vEo1$5Bt|P{8Jv
zy=a{UBCgSH@ZjxWD_PdBc+%kPQJqsKMK-s1!Q$*u)3}wy7{sJFk}(jVAd0}BoCtzo
z0s<)fzn6V?JL@_a?RYGoT9Ib&IYcMsz8B&Ut9@!^-Gv_DBd>_A!mfuW9In<woA~qY
zFld=iIKhY!l#rq1;NH!r0k3fQM3r%vfVN^+?YKZ1%tatV3q=1&Fb>w8!{<E1br_k&
z{%P|L#8Ge{pD}kQ(IR9LV;GXmsiZ3S)Weyl4j^<u=4CpQ!@yGX&pn1aLx!#nB}wYL
zNpegBa;rJYaZHvagH2e#ZL|+S2$i73ipx>Z*AtjP3`rWgO{j}oBf&(V9jnO|hRTbk
zroaRd0rg<+X1bWuN2fP{6!4fRNKb<LmR5xvrZjLS_)U1qtQHw1=LoM1_MJoMNKQsn
zB{k1IDyoWEOKQ;7b2UT7t%^65CkHAEw@g_$U(p=aV&+R}pe#5BfKpifQ7x&85l(2(
zMWWFH<*v*WSviqjPD)BZ)}S!TKP!%kSxsWpHDuEQ`Mi>JzM4L&rBcEOcud+ygjR%-
zt}+hYr8wd4z(Z>=R+JPmE>21;8BN+$O6xxTmoTo^xJW5e#3bM)Xbn8=liJv{);fQr
zZ)-!%!A;Xb@#pwZqyYWG?tFu@{}lR#9Q^Ytm$6s7Zw)VP2zX}Jef#0E{}k=v!ejRL
z$vy5m$z-?k;5l*UIT0Vb9iFAfbK|`$atayE1{d~uOxwY^1JrwAWHsC-{p9*S)4wyY
z`Zyfym2DZUkqevaY>r+6Q_uaz^u30c<+YBDF%YWDl>s+Q2F^rPP!V*`xs%zsA5FZP
z?>GDng?0D)-08aON84!Jbp!uRQMz-m!ZYOR|C+AVvfI}C_VsXU@4@3Ot1v_%0fEcC
z{``3Vjg8{%!T*H+pE7z_vGAjdUtG3c!~Y{H@K;9vf1t82wY{7+L=%28-%*gq)#4pd
z!uunOP;9dI#j0quTs7`Vu{SRK0f_fufM5XrrX*gP^<HDb=;F+IQ>isKSR)2`JU*;!
zF%jW=3vnhAU&DOX9fY_UUk>+g1A5>@-x&S4rXk6wL>tKzqqXCC9xkmy*VgF9tvEdP
z<|HOONN`5&3;#J0;NRZ$5AM1{qU(9kHn{;X_1xpqO>?JB|7{s3HZe=|>BS3KZ_aXF
z<5L8GGG)ZY`^XKDlOzrWS^Ue-jl<@<4S!j?8=<%p+7~W#*xkrKh%e8DTiaZtUc-sO
zO)!sJpIZyPKJZF|<TVmwU5Shwm7}Z8`P)LAF+`t!L1u9YPg;)Of19>S0fSv~#?Eo(
zT(VG(1PCmFM6Teyv1i1INjE`{3+grZ1tk6;s+$IM;tEvR3)Y`tVI3<lu*wKpa79mI
zA)GMojx$Ul(ZxmA0<8XXJQ8U@J!LdHGbbmon7As%o*99^4VDEM@_86vf8$M<$Z$Z=
ze4s@~0*p<9$55k>G-72Q%dNc>vuAe?xjp!=RTo041aD;tbdElXG(ZXrZvyY5?}6s;
zvTQrt96x_jjo2>WJ4^u9+##9v$%iz(-v#^K7kf14>YA)*_AJi@SBQ47Hxzi;!9(95
z2nFt_ZpL=v{17JLEF>#V?7`Sw0tgB~Fel<z=w{y_d!5oN$HXv5wtPSo--;9AE;!0c
zXao@7XE3W7JP@4)vJTg^`p8|M*aaY}98SsJkQB1W9um9U7|%K$)0dn9vk2tKb}Io>
ze)h`zVx%4)=?S0qZUZuNOR7Rb0lj{{m+8aaAyd6jYL?z-6c1D~A)+`y6j<#W!(VMA
z&xK$M5@g0Uc(3Uu_=|TUzB;4*5N%|{yAYfBzD7H^UJgRG#JD>kY1yzICSs+0ku->7
z$ZiR!rl8DFTCHQPIudQz^zOTS#CC22ZWEui&EX-a46!klu%Hq|rxOY?%<nrV%zL^+
z9OtMELHJ>|>QuSe+U*{X_xrP>C)BsI{dW!rocnX6E@1i4E}ZWK=oLj++e8}S>`Zcq
z0tzfF444cL3qzzWh;%|c|Kd@4$<^jb>8IdnVtp}{_rFI7(FM)B6DYcHq`q;1qginm
z5n|uGkdVc<J_VX&q$F~=+D2lqoT5ggv55li=9o4*T!c|}_0NzE&Yy?xZ<(bhay1a%
z!U8yaZ+iy|lVs>8sjqkU2a)Ktw0^{+wU64`#kE7duy<r>nSM@mnw%2LbAW^4$e9R<
zmLRLLc|jFrmc3-W<vyRnWfc^Z-$gnq^{)ixOp-y;%~W6(XxPH$dT0A`-76~6yy8mH
zx(woKE>bY(>D~zQsM)v0C==kAmODs6{%}k3jRKmzxv+|;iSWy)MmK%Qw~NS!3dxCL
z<^5`eKEUHnW*+~f1#)CvdJ?wH0{!9nB_c5gQ45CqoI;7XzKI9G)l;*Hw;^^3X<@`j
zFTG)3#~?4BQJ^(cqI(J?LaLvf8Ny8+7i4Clmso-~D+Wq*2FF&EncCB}g%Fa4B~1*J
zLNwn9)@g#bPJ#@Yv{y?=c{Q+3%H=TSf;9=)%InJK(Q`d9Jyh9{S*wg0HS}afff2~r
zDTlygX2MrxF99=%jqTwPQ&#&S1e&bA(Xk&kBR$F}J3YrpCDk#;{Jk-Adr5A(ZkOS^
z;fvtYC#&tx23~T9c{%V$gP;9RkQ@C9$_HMaFn3y`re3sQXZ$`74>C*rUF>G)YRB*F
zQWW|FqB(n2+4)*Mwm{^JZLKj*b&$M@L>bCbFW__%EO!}n(s=^2&z4va%}|2q$_tYh
zuMq1-7l$SJ1x;g_oxXkHY4l8EHLs00@rz!Vc_DDLFdU-En#G*Br{v`qlJLk9^Y!;W
z_9|v-%iA~E4NOUaq%O_{ZJB~m2UwlRg<vg|FDN>cS54tE;{418t{o87`%);7Teejm
z1WZf*0PNC&Q&4`k%^){dY$8It8wL@GLclJ0Fm^O2`=iU^fePeV^}oE)6zyF7#h-os
zCdfFf$>kW3!d48Tx_83HLHdV#UkFLM@NxHs?&uDgPN9b3eGvs)Qdj70zjoCLH?QJ&
z6wO3O%PA0W5XL%dnoMf4u$ia)9Py|E{Ulm0>4drnYJ`e5uobU~7Nn@t>df)4GOx{h
z8b*@kdT^I0<94s2fu-<}I6VZxR#o_-T*e?7jfw%dq+<IZ$P>&4qOu|f{$J-NZZj`D
ze8v*`wfaFsg`lVMLD1Ze2f={9#=nscSq)=GZy8H@srj@+Sf#VcCuL*CbTTW1@cBf*
z`unW%k;IZC2SzDL2x|X-g{HN1ZjzSjgt8SG{QQvz34oA6BrA!QD(ynLab$u|H6h<5
z3&_&}q6aNzKpvEO639W8+~umaM_Vx2eX{LjLNkk0XOPfqm|`QV-*!?*`5*hCDiA^+
zGlRELA(DY6&W!EdPe^!Q9;nD-RgsayDyIYT^njVDIpI(dOie~Vexwom@S;#tAdNRX
z9gvq?<n7~_NfqBRo*k_xJ8^>rZ#zYWR@p@NAG#Ow@aQXQW;8ln!?USsy;*l9vhdin
zH8ZoCA2%<fMkin2yi*IFkNc2KAPaOKrPXN4vGG?8BduL7ip-7cwv4WSHvI9_R_6Xl
zlz#doh%(suOlFc5KcDxt((UxP17?dR67<c38zULEg`t3DDEi@S4mvJWoj7efjgcm~
z;0iAN^~u%#1n%hg*6Ai=exucTy_;M?pBoL3bUat%GGGjfK!4!JUp#roY^E2FiiZo}
zjisyA`wYw;V16C&;+PLstDr@**Xv@Jl;@m{zavHv6w(na%}na{3cA_9)aik_8EPqZ
zuZ7;8w!01kBt6L=Ug_S2{&-5J@`?WyZpsJAB0ytu^ohWn57OW`<24mbQV}o1GjZDc
zQQYkZPO;V2#4oT*4pZMEqQ%jAL_0wWIpz&L&+8Bf3yAP;e<ZpKFdAK@DAc=7zGgIQ
ziJIQ@aR<`c%E9&_Zx{n8uuoQs<+J@2+%Zt;zJ*ac#<*Vj97z5M=}gmWgZ`cB^cKA&
zzXo*r={7??2Xy-AHaUFvXphmaC4Z*_^lL)jy_t8=a?a4sJfpS;oI#@AAVQu7d_jMM
zkBI@9XSwlQ1P*2ARD~1yx9hEsnU5FznC-8~ug@E?Y^D3Lr-MeZN9UV3?suHN0<(`;
z->??GeuEf|AV#?7^mM!(W1TU?;O2C|zyAX4>K{1F*s-U{T`zC7;#>}Qi;@v{OWH~$
zYie@4JiWHIe}cH*S7r_0aKN5XYpVIa35wrvxF8y8$PVY(*jI?`=|3(%ZgP7(T|3<D
zy8`H<UO(k7Fq8Vos?p})DTD?x@Pu6bLEm=2i(EpuR)y{{f;hV@n`wRBC2GRvA#P7@
zpx(x16UmLkz}rq_bYFv3V{SBNPo7a?F$Mk0CjCq+dG3(No;3t~flPeQV?XJvYqL!v
zU-YFDQ6znOGziWCduXPQ4>J!m-UwQ7hqoINXzt<ZWbGqg+hfUHX4jcRxF7h4l=j3n
zTsCfr(qYmp_lWq%M=ek~B{KV@VgRXuEeGYta^_U#(8-K+UE>}IBF4sC86L)6pKlse
z-c)JH6X9{)y&G{bv4qz=z^`fd|9MYpSPK(Fp>X51d%JuoM}c-JV;s;_xF|Oko>yxm
z<1pGo6H2ezj?F=j9FoR}iV?nW!Ebrpb3$ET$<1$V16JOU+g=871u~fix0bEXFUC|X
zsl{2JHWWf4tdiA`8=pDtHsOMM66&?aDDD5XBLh?;tG43q5|1pz86$V-#OEBXKPl1&
zd`p-2fTM+bP9`gN@1k!S)QWu?aRM3P<vmmlZW=;By5UAa(PNQSEWqhd@C-gM+K}j0
z2TTktAmI|NC!<((J1?YSR06~8P&kbMCfoEFSb%q(>u>jpp%Q6)p899}r$Ep*kYCrT
zkmeiB55yF_MZxR(&Mf?I^2?jkGoE!iHoYGR5iQ^Gv5vH^=TN(4Z1G+DIqhwee^epy
z9k{kr;LfEtga)pGD!}JJneipZcl6C+DKG)(bG;{LNt~K?MXEv;T;k$L{Sn@!NsDq1
zv<9b!Ga}}kg*;IjVjVDrLRlU<l@_`Ewi;Ddbe?0tw0|Polz#vLAVK<_inNpgSP}8A
zV*R@6p9xtFJD_#~0Oo;QpGnx;8936aeWgY~wb~67u&9H}T{bIUr>}DdEvjAuL(uMO
zAuiCL`hyKfs5)e?yn;A6+73(`;0}vj1drBE2m-8RRIgTmiPO2R+BMevT0FXcE0$Vw
zsaIR~p|+h=ywB@AclA5hk+I4)N-TbPHj)qE)iTYW0(MG=)LgBu8@G^E%w1%NIYbFQ
zp@Sa;%Gy~LqmcCFC@0pK@Af8JVDo)&j;$VGN`I2>kOjBzjy5W-E+_6HanFv)N$hJt
zREN|E4)c(@XIXOyp>{XaDCg>D`DuYXsj5}%gG{JiN8(_?Q~F{5hIOX|W`R_nW8EL?
z7Po__{yVn30qU5j1_esif+na;WZ2N`)9h|$e!;^~KKB_>@-C4Wc^LzHgzR4CP3!yC
z<?vMD=dSCgeFgmei3=8!FJzFm5w=%IL4~RZXN#nfgZI333@R`MK)z_9aQW}&n_Q|S
zkGAZI$Gb)(fy(Fqi_L}D5$Vyg;rraXKhSc8c-Pq^9S(~2YO9Z-;N4yq7mu11y|ZqF
z%pJ}F2Mc>8_U00R0GI{S1H%W~5y=Hr6M5WEkd>8}V8?fzlHJ_9VV-~#=cg}=t8#u^
zBS9M|nfd@u>)+rOnroho6WSI8g*>2cK~7c6v8FE#{tb|#=-MIW1;CBPW*f@45wk)T
z8~t{_eX>ymG*4k~<`r|O1YMo#(Fhr-%g91h`C~WPcHN<uXKJViev}CZDF-~y_$IXo
zo>Avy-nzs}HaH)vZUb+Xex<i`v#L5!8&>bIXc_SjXB$wBK!nN83(n^E8*~RKvX2a2
zos|1TftVzIB;YiT1n%lvPkZ3hzkHmUpTYT(R&ktIW9==(4?K*aH|Xn&;vVE@xe3-n
zQ^JSJ1`MWe>Ff)qLaf0zuy~XGvOnhcAR9TVvg+d!xsLz6bDl5P-?99W%v`-;l&wa3
z;F%B9^P)-H*!#N8RI4t$17YVhK6Z94@k#YD%;w<*^=&+%!$WVFC<_^gQvq^-F}Z^U
zOA?fJ_<@<)y_M!Ml=w{zQH%4}JS%{0QP<C4EDwTFvSXf!(x6BQUPXHun?k2vn1sTD
zVbGuKVh3z4D-yK#t0h?kph_hU_YB`rkPmW|G)5C|2jWK-Q<2bON;swo6qvv)YA5)>
z0g}|tpPj0Ts92GIDmDo@ZcaExU+~g7nYJ|PD@svm!T@I{O{At#8Y8I;Fn-eLCrtEQ
z>zsV9uGQaxc9KY+dI0oc&C7-7kMYbZzehj`RF+d72-I+y*Ex$l?$AuA$H{rjxOWyN
zOII>i(bpWH3f@3>R**%n29gdMmggX}T`&akq#hUOjbam(sRP@W0glw%dozjr*K&qp
zxkRCQ@7*|3_y(8&AeNdQtLu`H@upnhw&kBO-C;bc8jTXU;gBC|TP>7&VT3RghX=0U
zz5%qH)bDfNoHqo-{4EX3PxT25FM>}Jz}=`S(3E_jDN$b!)7jbx)43F9_~QQ8CtJs<
zFLJ8EI#WgkkJL4oKDBG4+ck%bjF9DV0`t#KLgw_W*U$JY_PrCvou;*Ra%(~zevbbh
zW!ud*k$IbS8!VEUiw7x0+CX#{NbBh^FY+}4v5|NTnGs6Ab%Wl-lSqZ0#DiI*_f+VK
z>6^)z($PGl+&#QGM>3y92;wA@51j(>+t0qm>%GP+q5Y=in6Jiurbg17sB38*o}qH!
z+WjBjOT2n(%u(3>s>tc0HRkMD(80M9`ol^wD4{}i9;FpBC~9YpiuY*cX{mn_DaAK;
zlBTu=J;t&P_0nI?Oy%21dv47PdJ-!uW6SUWgtOtW=|sX5i6P+x&(<$^>x=Lc34!YL
zVZV8tvvdNdmPW^BPmTJmikiKXL%texn%oL{CQ-rALRgfh!0Gxkuak@~$rB=Y6w{>S
z%&l-CRD}7;VamFGEChX=oSU>$wVK+tV;?P(n_UgaglQ;S$7<PBOIc6!#4O}8cx)?m
zSu~??<#u%F7%TQ~TTEs&>i!VNRmJIAIa4gIcSW7}j$_xXsBBwTVWciX3M&c6aMLC2
zUC*k2oQbN^pQ0|Q+`GG0co2-h0_&p~zWy*3yWA6>#S}2ZV8SbwW{}@a6PrznT|^Vp
zEhmgmPLOwhbX9d4|7+*wyb&}LkzKCj5R%JDbXYbyo3B!BZM3P&e-ub<oC7fRn|>7d
ziy4~5U^KXA#^#~WYnuEu;)C#D5W_~3)Jl!5g*)Mjv(hOw^0X9S&8CoD!IGJ8`S2~)
zinorvX>wrS-40<jfk}@~J5YlhdOF2|zuv~7&og$+k4~c7yW0|@cL^q8@wMu2iJ8J`
zZ-H7S&sbSKxGqUzI{tCNb)sxHb>68pb}p5oy%Sn2YC0}RcBrPg16fF_HnD9=%ldeZ
zj_qlsXH8D4$TzpN7wBJn&4My0`GO_MhW7U*nhk9NJ_xji?mrkihrnPOAlt^)7xRy8
z+qP}nwr$(CZQHhOJ9*j8+sy2G)4N_&SKWKgp1H;kSD$I6^nr~JJKyJqb<lrKx3nHO
z`3@-fouPieW{xz32wl;AHy#aGkXH?S=QRNTv7oUAq)&!Z0&ZmvO*`L}xL$<50Q{Dl
z=7vQxrux=*Yud2JN}v^`U20ynSl$Froj<VL;ho$(tJR{m?wW)b;+i1h5CyOx^mq4Y
z%FUs{!hl(r9W~#fu|a`+9w<wELNP0aRmemKr{Sfdm?N)LI4M*Ml!XmqcNzVW;j+vE
z5;dR{c+IpUbfOn4kDn^msdEE#I7I7|WMl%hR8@Zsj21*3myVoR-XmJPIody(+f`vq
z-sgyUcBxb0B^NZsO&Bgdj>~4%ER=dlLi5(G(>vr?WeBXF&?!poT~w=V@;dY7bAgW=
zmGyDPS_KSa-W+c@XCLYahidW5r<j=aGaBP|^IlM-9qsE<J7Z}|<!^XCTFj?_7qT|j
z8XZ=C834s|fu9^?HRP`;{koozd%{Dv{k_IlPq!dVMe0YA?X-2+QIz>q*pq#1oeYx~
z1GOP($<iJ*Q=dJ`Uz0t`-$Pz~FNzhqn`DNa{JgO$N&*3WRV%YhE=y{arAsaUu0;C0
zgTE3%r>l|gw01K0zilq}GM+D*_io%6zlwwi#BL#_Ud$^q<h7UwYZ2#?!Kqy8<kxmI
zYHH&`y=KPET2XrT1=xgYS!-(A%`MJUA_p4G%OnEV0ZcQsrI<K2{%W0CMaJ_j*yid@
z-;&9S&~alD$>23*sKk%>log=nS-SG$QHyDTl?#sz()ebECe+Z<(TLkZeHqXX@ET9m
z5{ERAJ<8@rWoBdMNrIjAjeb104c}BqB}6>Vlf`SO1oDL|(Z?(js!8XV_}=9PKHQgD
zffK@(UnSF9+j8bp;`>ox6t1~L>5dILjs6oTgvU_kTV1=FWp(<~kgp3!Pu3;&Cs|)+
zFDYY#N1`KHN{%ll8#W5l!LR+8j4{<FSJS1?BMj|#5oJAK(Mli#!IKdvgNK+*4SLqz
z-j*eK^BXMDkFLU4j4?G{uO*$+Am#Ljbt&VFs!3-Z?;Y(@Jv{}+HT;D<q-ZIHb1RPe
z>=~>}$PP@q-qQLr<<m#<_OH$9%%vmEEEw&pdG(y8ig}d9_O6-Lk3RjTDUj+8UDrfy
z@|UpBL0XrcwIoyQ$?033F1o20juu+%P}e;J%b6^onDbthnxNClZOwDyLmu&-u$bjy
z&Zs<jYV?2_`4(BPnaYg;H#A9Iw!Ichr$&7alUp8ORIhg-5&}2-owY<$>?rBj<gU8$
z>W&ne?nCR|#-G01+LyAMW2nDYzbK0G)``}L2W+%JB^4VrsMORD6F%+RngUj0N~ivY
z60H?CyFRn*k9SeJK?r9Ss>>8>hxh4^IgB~)&k__M@9raost`+2RaU7QE(q@7_lBi?
z!R{jcQUtmevb>3BNmFAF)u-pCM%M}H);(w*AL-SaN>F4^C$SoMbiCnY+jXhN&irY*
zj-U?TT-}NZXvdc)i>Jcd311AmBe^`iSII}`?>XP|k50**$+n_XaD=oN?pIBPbFFAb
zw(kzUA6M0i2{$L3vl%?*(P27Wnhd$ipf%3Z%{kA89<@ZM$D0d<qXk2=sW#Jp@6OKh
zP7G1kzbsH^YSBlySlJv^9{PM#9){koD#@|PzRcgNTwq&>_wnT?;7ciiofGr_fufdN
z2S1{hdl+l>F~+S_ic^JY9`7U#DJ>5FJnMzPyfk;<|9NmM?uGp$GSc%-YqaCht;<vg
z$r9mNM0hVPM<mDQPY>aMa}O}5`oR)LIzV(@sZ-R2vJ9m|N-wmh`w-BR5K>O;{<%x(
z@i|7oMnejKZuCP+Ed;Zc8>#g|5{eF#^om1Z;zMA(KW5b4<793{xCG9)D%Ie6%sBYz
zj{-#!NWsL1YV@FY0ZQUyMeA>N{woAulaCvn$s(8{SD6D{RrmLDsE2eNt?cExL&iF(
zq?X*1f#o<^cQ2mXF$ku>zJ2^)z@=<ZmO6*D(9q-q^Ob;{?aqNd-A(Bm=`VSv!|W3S
z|D%yF7aY*3L{N$_g0?-S7Y%2<ST6Jl?1qMHl4?O-RnLaQ?1hC0DB-W!huNhy8(;*a
z`C50Sv{iEn@n@662J(<n?Yk!{K>UF&Z!f|Dk=GdAW@PkTK*(}o3QDHsuk)iPY`I3D
z%6c*-{#~M3lckZCvmsS&`H;J1N~%-kHD_%1@NIWgm|mC>-+o(VE7b~J(gT<L0aE(t
z^9{a%u*Te$M<b-Bu)(JKhZt)chli&-?ThgPyxwB}>z}=|>w9Mf;0;a;zLoJAyi(OW
zGy?;!OSyonihWEo2LUTnWg9NB8$?VJ@h&H+MCZagj=1~@4z#J9b&+?tWg#Lim!{ee
z;|~IXik=fs*219<_!<b-HxQ)v&o;&1?d0t(8qS!XtVUhT+5!k|58sPdfRS%-efo(J
zNEzuG)+HnD;M$IyJl`}f3jgIDWk{aaLLUMH))cY($+o4d2QuI`C^0;)xRwop(mlNX
z2{Hc(kp~A&hU_qpQx6qrN0Kj65UWXGE<aK|FA2@<N)4ot9T&7s{5;`32`I?O);aX!
zuA2l&Ba$DiS@~8kuJbzl)!)VO?tTfC?wCvUJPzY&u5eolMK%*8{h|~bxGN8|ni<IS
zk*R?_MAEo^%^9}?jMOr$;GnQQ_s3@;uiS4kGa_62-{^SX2zFhL@Hg81TXOW>UdrO}
zC>!7BII-;y0h9$y{cI?a)2~TH-lV+WS|-OiFg_A;IHd^B&TF485SF2L63te7hM?{T
zGtZ71+<Y;iQ{8df&AV0V`K<$Z$^j+Jf9pFHvY1xvp<Kh6Yby{+vjVC>UKSBBB@Fui
zwLM-`!mMr%RSWLBu+MCvchp3^zN`t|CA96FR2dDuNQ}L_E`O?PH*q2NWV{~UUgPtZ
zG1VXjUwA8g%R|1tQjX(QR3Je?cO}Nj({hXh%Pa$mw<&UxZg1LTBRO-L5gF3A8u^gb
ze-nA+%-YZwAKXi^04IW8YQpt`P5#~0`<**AE&mO6>QF-RxCMKG63sk-=B+r5%SE$y
zF%*mqAuoFyg~%|Qp1b+#-W6yoTiZ8muVC8tqZs|t&OLo!F7j#|{+YV5V?dyYqD4o!
z)2G=`V5Q|h9e!~r!hRfP1;I+NAq?8;noeAbP9#|UVh-Ok2NN0nwTfdOGAya&ae!E9
zo^Coh7CDS$ZQ*~Ay97AS@9$aUN_d&YC;$x@*)P<hI9$FdV+0TmnWUuwSy;GvrE+c}
zyvN_1#&SbCKRS`&!53u8ljaUmFbSQj{)<gMI)k7*Oy)+=no2tIsSU7A7o`tkej=r)
zy?~rV2}haP^Dydxh3m1(8WMDiY8_OcDnuLC-XXx14}X10GV)b|Vk)J`rLXVTBzY^1
zb)z3l(=^{faMT&U&K=BPha<fVRTThVos}<&`4%tG1QluwP3*D|;TGrUXU%HS4g%!P
z@l7@Tlj@?sw$xlY6U(||1FGhCxV8c@t4%rD0$B=d;XF{DK?k+p*K~HBEgfGdlP-6T
z&Dj#Aa;%4s9)5Z;a~Qz4CA?sV4mhS!3tCl#lf?Jc^uM$uB^`N+i3?*Rz9wW~f`del
z(sCbtD2H5f^OS<p-VW<CA98sppcn9pKD{WI^3&F{$a`36Zb61TvoVdi1fLNt8_GPh
zrMB>Zy4!i`aLpvF%w9ke3g_RG-lzAkd1r6^@TroVWAA}?fS=>YaSR!1bKqqS5e--n
zkeH`~ipcCEAC{XOb?^`==!_4Mr^RQ>LZn~r4W5VZc~j!AHo1@HFJX2Z_ua(pA=b}x
zl@Mt+4d2Mb@H}Y!4XI{O=UrA(4T4i{5tZ?gi}kl1{a1HP)dKjdf>#@nWavKnoe{&+
zP5=Q%DekKrrm#p#`5I_vGknB!-W1)ud0Ukw90rJ~cwx3c&Ufad_84RQ)^Ms|7u6Ny
zDR3BWs^rHv7voX8M`0?7y_j#{{vYmam-qbLSXtwbPAH&>L_sMr&l}+t$$IHRU?(vd
zw)YXDq}n*ej3l@6+X(A_q9o5bNerVpyZQiA=B2wOKTMw;+7#iZhr*tjB#yC!`Xf9^
zos+Y3<CsngTn=d$lQOYmU?~AeUCufO#=ko-Id6H5ez~A3VxgYLv)uNAvXB1RmjK!K
zv{I*+BuU?7|9k*$5zt4^o@m(|*CuN4-KLUr>~Apv>xg)c^ub%Xn6aij1WZoExaah+
zp@=q=H=A$hxz420>-qI*qU&uk>Z{fD$o~9%y@DRP4Y5WZ82tHf>j#i=F94?k)zLFE
zHL7XW)A7bm3<tNxq?%{ZIEE<4Y1%Cw3ItKlRQhoc^?yE)Wddk^frzhsC6jtgqkD~h
zyFfQNHrrH?8H=xhA!_JS{fZfb&Sq^gE^Q+`n$|xDM&MfuU{%z5hYuB)4fR3U9Ogqs
zWx~kK4amp7MjoL60S16XSLVlvfya_WW5fYlRQ&CFDzC?J{df->MoVNWRQ>*fkRlG{
zu=mQK-XyHrh5#XGs=0;eH#(gbZSwlaE!G*ceAOp+XAjfU=<D;jw=y|X2~bC7740c4
ztd`S3)Lk;Sa<CN0!ewwQV_5Ol+*3L%bQGqKg$)fFJ?f2`##+@2_UbMXXZ|&-aM{$|
zCkny;ZQ>PN`q~iX{azUh28MjK<#aN%ov+1E1EZ@5O}YaT@EI<2bhUQ`OgV`wW5%Ca
zsJD&T-Xk;{e_g5H@S8kY3vj6GNl6=IR>e<X*-8F*GluS8pVGBO@w>#A{nH!dUKuH8
z<K*J;dHi_lo~NRn_S;N1Qg7^3?k3U^R<-?T`^+rd`*((ZUmQ;_TiBimn}G_i;IEcB
zms(O*EG6%zFi0s4`w{|#e#~U2-qi2VB<8Wk|0Pfbr>i3{q^NA0W;NM(XV#L9JVDM-
z;W9vA(%+g^U@EUPCZT7X8k5TS<5pcKD`0j4nP03`@`AHDGZDT7_T8b>rsC3etiHni
zOwNmK#Q=-s;0O)YVBwHLm`sr0#-4ATZ6)=Hqmi!r%I0cfGPja;ed^VwhYWD@BwK+U
z_oJh~{N%?AX0>qgU`|ZFn4dEKDioZd;QU08HR7iXvx_|!5x&K1BIG{uBa0kgKKU_9
zjwN=>Kpyw9Zt)--QLIqnD%!g~`>oGqwDY^>@VV%I%=`Q8^s`#KEPJ}yuR5lc!?~&2
z@3g8Tl!hR`sO^b7lM2ZB{q}Npby)N5`#*Cu7RCCw84v&fswn>lOQ9npJDuDA$vm%S
z?YKGe??>t@0$RGb2qb_Fpr~AIYV2^Wrqt!SKIyy&l^Q3E&>zCq5j?_(;bnK?^{e4#
z2M`%x-g-lXG4IAW*W2C2*8V8bcFc@=cr13|pX{ypjIb5gUpL!}v_M%6VYI{v0vE{v
z#o>YG^!)f3>p{ne_feQXr#g}jX@Ow&AkB-<j|jKz=pY9?<sO8oI~<iOnG5fdX)geo
znYez3z+3AoC1BfMcuaOZgUCvBp$gA(oL~B%NCH)18d8t;T^F9b1gd(%=s!ucEUN+n
zr4C8z;uug#@e?$dAdIk6&N&c6WTlRsE}x%++f>>L=JaY%GH3$zurXaUc`!SEHNd($
zGKcqVv!->cDj1+Rh8Bi;O!KL-s9~r`A{M2+M&5n+r7uAt;eN$~+p$KbwfI-{E<@LK
zZgx|5nuf>>+TBFs6+QI5cA2E&hE$_|%z~IA@d2yB+jctfIurZka0+qd05wcKYOlBR
z@8wR_*&Q7fhXfF8p#U=Ne|cs|4*lbBZ#3;OeLIqN#_gzk(EvDrq0wrH<Lw3y0P(s?
zT!q1F$HFZJ;n?cFn2~vB)JaGy4H--0ewYW4viWx3PbbTgr0wD>_tA~cVsJ{O>WF~+
zbxJ~VR?sC8Ko$&h#UN?R3*uG5!a8Wa@kcZgzzNjiS=J%=lB#0z188(0RxlL8{3!&I
zV~$cO6jm}3Wcx#>c$Vs@>eQ%1jaoonb|iS@!XheM#{nqV$N;sGRC^=@py0$^O9QEN
zfG7D<eT{yPeB(;~U|cbHhY3-mqJxT`WxiZ}d%`ZY1K`96YGXHqG|&$R@9?R!5MiQ|
zI4OTW1t?llX!-*~*-FVGq&ITbF}Vx*xcL#BJ%seKs={RQ+q9*nE#g|AW)LFtdvetZ
zYC>CzYk5mGw^=e&$+&FS@huGZa;*2O^4I|5<n}ntbFlf_RSx)_c2mT)qd;<UK+mv%
z{s<}T76+Ok<2BfU48&L@_}o%8@u%b+j4iQLI6P%>^Ay6oega0v$S>K14Mq)n0|dT@
zT%(v`bf>~&P(@f=>PB%9X8-i%{Sn9VEsWGBoQ1AABB90)iRB2Au>(~;zP@8SD3pkP
zG>R$?`}-T5G(jggI^@cr2p*jmhYiRXVb23*@Wb{HD^v?Y&6TxE?u!T+ubr~nIxZ_b
zcNpszL7{Ju(jSFEKEqCiIYcdCyuc!;2hXStUEr_drovzfjqOd)=M$cAQ+ng#KjS$b
z=l#Ac;vQ;U-#>C`ZE8$*)(00XR<3g}av@{=XGRMaOU|H-VGWTCByV3m*E_~mho#=>
z@OFJ9D~fG<qH0)iYgtzZ-|w59yV=j9!S*Ihfj<%2yFT`}V^vLFKNT>WFuB!1B>NG0
z3KI_(zQSF(hN<IcJ46Qn>;Efcb6TDo$qyCOt&UlitCmTU=(m$f4pZVFn?OfXZRC-<
zstK3e?oYS>SB`RVMvS%^#iPdPIpseZXbJ_doOrI6Qil!LomsP<tA<((%=hGJZ}KuQ
zcJ(d|x!N#-$LC=MMsUZg|6l_~F)w*VzjF2Ub#ihtRR`5W4fEDI=`OlVy{+*0VbCsv
zwuS&3Ic%rI;bfrHxr>qQM$ECHUPyT8wmh$s>BKt>AZ5xstR}VU*RDq=+6u^H&zTK}
z4HRDwAmhPLQUd|;k|~23oX?<dd+yLq<&QQm>RChP0pq+tvIJPR>9^2s@Is$7Ac}JV
z_*5QHf==dfd1-&%HyBlc!GI`|9Z9*>{Q8AQDkfe}(Q5Om>}r53Yx^lj3~X1d$8$9U
z(B=)mff<Iqq}K#m_=u5#w^0zv<%u#^4xEiT2Z)!3w+X)IWLxj=q$!3b?Ni}j&Y<Dn
z&9P#s&)w&toF=oqE|PSJYE>oe0UH1}%5Kh2ie4J9()}$_CabwuYFy^r#S{N&SL*!L
z6r2m>v*G07LASSvdZ&by)56AsOlPf%*z7#ESTY$(SP}~rabq}w2Y-LfY*2DNQJ|)g
z(?SdSpYN5NUD(-vgv}}%HFT9iJ_ke&zZ=PoKHP@0NH@bZGwaj8CDOHbD6H#&!oyIg
zxuCMZnvZgKOWV}b)0^v_$$5p(q4KYqkKk~hR2jKr5U&Bua%Pkzb<0u>6M@&8)aj9@
z5Sw(gJ!R16ywICxtIC<+>wFUF(`RncVl`O`)Q@7`K7nJWzmAG@t9Hn17+`9y4{i2*
zqmG9R_Zt^`e<t6f_Tu{JZk_OEi&I)$=+h7ewr8uEQe!z|nbOva!kWd?enKDSv<Bi$
zda)gf+qgy|YE)rjtucg5`b7jFuvg?obEU;Klx}zK@8%z0==b-^#&{vem)hB0o3Y0`
zPM*Uot@$-mucbwoQTp`Sfsunp3Y3uw<6EJVMQzXmf;B=p>)pQ8nUIDSvwC^(H9BR^
z)y*hzr?zqyr!6kst(9T>;-qB8%9%rd68nbTKa#u2FRj19dP4)Dl+KTQqT(?|6{s!O
z6uN5xxi}pvj~2$tUUctMC#ga~9&PVogCo<RnUvE3e}lDIu_{HS`Yk~GXtwHXVdea`
z_q{@t<TxB;;JgTaRUQYkDcIyNd*HL#X}<*urs%6>sfhX+1>DN6&xT#^SM&1*w}ID2
z()w49YV(&cg{M&#9p~#ubGKF2D<X$q4ov{1%a3zPQ18<QU8Gq6En24BFIu~_{c?sg
z+S+wTp-P9fIp_j(E&GB!W$DLKzEWpNd`0*+qoz?8J@ai(fMmkE7W;7J2!LHgbZNIV
zY#I73CPdVnH_rEXr!YqqXEdBA=9gW$xn}+baOF<Ewh#AmLAmtv!g%*R31)2b#FqIj
zTC=0{Wu@vj;rMm}cdiDjH_uraf&=KQheC9<^*c7V#`bhH@N)BCuc>{nD0m@?>`WB)
z6{^s94n`zf;9rq1&UB;~;D1g(>1>KD)o1_!7}fv)RR0@j(9urc!O)56{{rN`;xhl6
ze-d*0Ct}m&lnB)E!UBuL#-*s%XFO|8$7sgg|7atrpaFQ07$67$OZ!Bho2{Luc8Enp
znl3S<$#4!OrJbd>=YY-6%$C%Jb<8eZDc9N!eQ?_wsGc|Atoe+Yqf)BO-H^Q<SKC`A
zwm_SloSxG=AwR*^!&hb)v)^<IYw?#2idqQuikuCDlAZ-iEdYy_qYd3-Id#RX^@6CU
zacy1^*L!-}04uI2BR`wE4Z-e%T)ZZeV_;18Tj6U<_SPo4nl1>8qlPKH5L%;8RGHfB
z_gQw(R6wD|9#goZBmkKJ|7`(~xJCN~T|QTy(#p>0kQm1I!T_!hg&)je&>D`09^*3_
zs<Ff#;&GTY*VNP?<FX(K*Bpd4qUtUpddi>N4^%G$_}l^L`knL&kj7ZYM%%7IKQ5%#
zF$RC1wb6t<oDX$1q0N%8e7Ss^SGl=-;V^bXaz2o-URB@jq}_f?@;xlU1kCxS7=CgF
zFSXy1N+JM<tx#8p+iKK6CYX+z(gN@|aJn1-*V6;}soPbDYF+A=Jcq7(T3_<__+{gI
z)8@QGb9U*^(@HWrb*V2}(xlj2`F*RAoU4Z!Kz;CddOCe%bz3?D&y0^hbpHYB4StZX
zh?}fY)AX@%5VBgJAM?;7GpCc53Gt5pNV#Q=X6$g@bY!zJdc_!pxq#)Mhjew=J$$_Q
z^n|MQQ7LLi>Lz?;z&GTN&lwf1nGA~@BCX;sd6m~Xj#oq2jjZ8tfO5L~iFGz6jfwSu
zZXoT5oEX3VBzFL%iS%RoZPF|~8{K52&^xUxI&2)RG;YI}+pmGRK3^*t31>l7`_I?^
zL0FvR=gWKrAEwi*QM3sSxZ8wJ)tsDdw4E%#WuHgyy@A3o*~?d;24{n|9H-HYU|^+d
zjZ{^?bP_dU1JzmM1*LqGtS4b?P`!AceBdE6WrTC{vjgZlGG=M*bKOja_eSdtWws5`
z=jBmr`~*2#Oxr7}K4Q55-&-7b?v7A3*k8jsqV6^C*|wljUZD^~q~u={B=p4+m|hXU
zL!!qSoYr-R<Fx(2T3l=j0|0%X7GMoE5}$jL8EWAG*NO6@!1!PQD+uo=_)I=a(=*HF
zkaSuj!bEAfAdfdC0^2|r(<-2PLB5B_s}O-{{HuZ@Or%NyoCzzBsHpgh?dg=i{Z%Fw
zSCd%`MM|xkl3Ub*O|q*Qo^ohZ%q`GV=>@GRKkr(1Sv(@}Rq_oMl|4#VuOpO2G>esC
z{Opr=Y%3*jRistenUtvAjnCSke$bnsOro5W;{~O!Av7{<(1j{@Zz#OI<`<QURmrs{
z+_>(z%Hp1bF!Vx)jGy?m@Q!L$R+u&hD&my&*p#Jnm4Gu9JnA~C17lt)gQ{GXYE%##
zR(4f8!s9rX1y){=G&FhxD>=5kYvy81j4CCtFTR!XvsqN7XXTuVmKXiWpx*NtBJzE0
zWY1hCasVU*>|OhU6f$Yt1O6x;T>Q7MVq1HVA{V^GvS+Rz<q1toNE}U=T{W#ENKVad
z699)QFdD_L@>|L|dBi`3=h`+1-p!&C2A|#sbpjo^lSmAvV2OvQh1ZmrZa{tgZpCrT
zYqkv&2%2XJjDg+emfZZdt&##O9~BU+BB4r(_(t5va;oD<8{gkF4r3eL-#rDYo&oV8
z@`2Fna-5je3$Ok0PhD~J|NhXT`kqPB0a{>bYmIY%5>XqGI7S0bm{d70!Hm%iP^ja+
zsA~2i7Pa@UYgxIhP1KTojAK**9_a5%h)L-@pk2ewf`J4?Ib=bTAgA;*OiNISlrVfk
z@MHIRk~+l5Ys;$1RKOKj$Hnd@^Y?*R0}YPA{ka_eZj;b|IRqqL@PI__W2<qO_b5l^
zd=LF_-elVBiTTmQc0>(4Rc%b#rUZ%{vXa<&==&x3$ssO`S{`aRT^R`o0HWSkfdB%Y
z3TUE8;1=yxqH1{UtPGHl5e|#d_?v~v2G@H6+J>2N7t&&PP@Fmm0AF!2vOJn>^^Cyp
zj;#Rx080T9aqLP5E@GltT?Ii+sQ$Paa<V-xUB}FxwxKz&!=2XejI-|me1@Y!82%Df
zuYSNXC_5hgiF82nkAwYI;oyMyR&a;IYF+h=WyW`BAf%<~NR(MrI9XI~@S`MpCBvfs
z@=!kU!#ol1F+fB2(!f1!yl<tzaIAefny*@_(<}5hOniHJn_(3%(?^Ve%mo>rUzW0B
z{OM}P_s&j%aGOIWz<x(jt8tFU-)F0HegC`3`KA5dwrqk^H#`Um3~^C|PMP;QU9U_$
zb?CmQg!$2t)ghCB?zwle5{dk{(Wh?mRp*d9TJ8rGxNP7J004cq*js`3&#J2dM7HSH
zhlSU<y4sFp<?T+q+zl5G5QLWplg*70AtZ~$nRQ4_1UZH9Ihp8!BgHr6s4raz6Y02~
zFDoG$NNF+c=t5D)|IpW88w+XeE66slE)nXwNWFlfsHd^zhrQ8!K<%Jb4rkY})#U~k
za6&Cuz5RJ#9Pf2$G2O5UfKT%&Q^Yi0UL5k%dIXcSSK0@%I>)Y9+bz%?(C<kgzWl&f
zWKf=dX3aO}SDuo!6UCz@4WSnFj|5k#h8wPJ4f5dSo+kzO&?xaMZU*py13#za_1Y!4
zgv<PgUd-O8Ilo|;V3NVYp@zT_zn$^6f+%Se0Yy!fgvNTcey*nv#`%10u05a2B=Qhb
zL6$*+Rq@x)G=dbqy$$$>e>SccI@l2{pAGQp>T1k$L@JoA4M4hPO3L7!J6J}K%obyZ
zEy`p_#>>gQx<OY?+&BseN*XGoLmYt&@UmVHvr7yHlU3vW9Cr~yHaxNek@V+th&^~I
zvwv8O<(#z1<c0*sklmy&bT!%EX7dBCB@&N12I~endNX=jyksT)^}|O|+o|YZkDIoF
z2X5u2K-^k4?kxz5yTQxgTudWsSp;~1#oGW-fbH7~;~TVVb8-#VF(pEaCTc$zotO&F
zqf)-AF5#m{cTdP)r7(e~z}D7yOHIh2?*q^HYtXcs$}z9iFoL3`4Qv^OPW|kD%eQ)e
zU2LCSZO=dYUat_{4AkyoccbHUyV-v{Tv<JR9M8jZ+V1plv2%KIBLYq_1kP*nRrJe(
zr?exTWA9v-3t}hrm=M3sZ#p`Yt@#5P<-Wz^(Tar?2A~KD-tB_}$-hJO<bJ_TLmrq-
zzH5uPpcsjxA}1G(IoB2=i?KX?MT~Vd6<?F}p)h<2$9o#5m-1n|BKO_w3-$I9zA%)f
z`L5xMRU+75eRhkv$U*@)VW!sLo(R=*!`_98*#E9ek>q1up>P(<VN8?N$)^XRTAPsb
z92D%j^f3(LxfkZo64^RA<s3!(>kvszm?w%$&lhR!X65CYC|YL)ye^V8IYH_SY}QDW
zpHNx}9RM-1iMnDm#KQ3i`)V)u=POaO838ve$P8kX$+57>HnV)5V0rn&?2ql}AS!72
z`T>l*&c@8>YhnGz$F?0>rArXQ3EqCqoJGo=1Vcpy8z2QSD!0bs8yJ!eL)chDyF*eq
zc6B>+qfZ>l8QmVZ<N_{U5a4ay>T2xKn%K3yNH^pSv*^bwPn1AWN33-IJ*?#J&`Hrv
zQSQdBoO7h?o>1{nR3^cLFVa56^T*JU?slDIdH(JlWTA9zB_zq%xXHDQT_K1Q>XuI&
zX>oeF@YRXgiO%6oO<sk*=-TY^iR0oW0~@^8oeGSxMf+@%xH|lktv?#@$_)ExA#>&;
z6zVQD{mgOO^y8bJsNq_}UtS6L6V3}M)Ov2HEq``&jJ86nV_T|~858r!0VfWxj1Qm+
zS2N+z9`^+r*{FkIHnG19rfoVZKMSKwF_l%x6xqK4+8a9(dlf(lu$GgR+^WjS&y(*2
z7+W1(!UGyw7UzfC$ydN7j`@eo9>~UEyWamKpzw3M;d~|*h4?pKaNKU?@#JH=pkYAO
z!GJ&+`u?^IQ$cBG41X}j^^MV{{PR8Qi@Lf61dufI_3e(&$U|3=n;LpeAe(`Amg6Bj
znTtuyA1x{Qi<4APOsLi-(Wc_Lv}$ZFW;-^o<KA4izzJ&^0FP9*hk!Y6NsvVtKoOqG
z4Uz7Lfw3=axqUvSBzB1*E0tSmjbb2{>sc;O5LFZHnwjf^H>Ru(0cMD2txHrRNW<Nr
z(M9y6YIdpb8pAEX@zX!!ZV_s411A)47*d5_UMpzD`amYO(L_s^qi?!rDIa9^)m;2>
z;4M3z$~09K2~Gzw@ru=#$@e{kJq^!*y9Mjo{qqNNyZPazWj;)_6-)R1g1>+ArYS54
z^t+iGs_5!p@%{_k1Xs=9@{@-ExXspcLb-v<iB{o;J%IF==z#GTbdq=r^C!fKfBR~o
zx`sv&`(aDu^ON{GXKFC)Q1nw{au$G)NHL$bJ_*nfz64RVJ9)#^7`?@;5pbiO`K^HA
z86YnW3gfy7Im+D)Jd#?USv~(xUs4sHe*$~irQz&VO65>qk0ZS;tZj=;Wnc7AL8Cgl
zCLit~&hr9E5EqDZ)WW<VRm!XwGFmq74hre}j~6xLh9SNgV@&+1jh}aVhuqJZY{Xs)
z>Eg-gP#Ct=1KO(6cfH;?y|yWQ<^E>z<pJ0Ws@c8c*F%`MX?$jJBm($;Og+|FX|NmC
zt&RFga`Z|0_t@D;@q*~`)I3ziY@{u-Q$zKSXyT^+0At3xYoNXI{xUPVH_EipJ0*Wp
z_=xgFJ>(X-K9#x*W=H$@+XMJzTEZnl;?jC4y>Hg}g`I}S&!+U?gpg*-SxLu|XchPU
z6TY5wC|Vr!_du}<sq+DjNY?Y3Sd5B>7xA%3>NTDfpE8qLC%8(AcPE%@C;036M&RH}
zTg>G!zqa>&ZV@Z?se~w8)Ct6ykCBm!qe<W1Pj<4y1lbe@62+DiM}em5m@~k6OV`|J
z(R!lvZ#Cr#T+e_t@&)16x*3B4lh};@!+?gAtZ=`;?Oh%jNIN|us)!bGyyFb#`vb6@
zpr}ha%HxALl+w3AxOy^^frIki9|31JNlz=zp>ChJLXXJY<c7_cR#dS+9by8<%v{aU
zz?U08IpZS+dra(|nC0SH7D+vL3-@ias`|-lDDFO88SSO(N9tCsNh$T;*6;v02k*gY
zOngAB*Q96cfA;QXgB2y$Tk$StK49M*xvIS~^1TfsxX<ookwF19oR-<GZvA!T|CBrA
z-1a_$m{%c_>8~h|4Wu>kTzg614>rphW-1swv1hK}n`#qOeTSaMt=oPWUMXT%DST%v
zlV!V<*U6U2a*R~*#oOQLS>ZBiuzB`-_7`ih7IwZT0J|F8bpeI9KbIH3xi?>feS|i8
zf1mL?X?TlrS*N^v;&`C=MY()6+|ZvF!eLBg=D4mQxx>B8HSrieqWs^=R*KJQActiJ
z0|$43e3`m{6z}0Alkb6K22<bkwm`qyc(S1OgF|T#BDeXaH`K2Ss<=KW7aQA~mqkrn
zEu!hr0m?LZlUmds_N=P)7s^BmheypUqv@y5kJ-J-P$^8a7$+S6n=WTspOHrORDiW@
zN0-C!M;N1kxk79b$5m_L{`x9-Ga{eb2Pf{qLU(odaJdd_1TPQ<TFw#5PM*K7EM$}#
zvu^NaD;xFklQ_h+%BzGsN}^G|1O0&5U=_)~mxh5lmKF#&KbVGYvB0ZxUn&<5v0Haz
z&mQP8V^%{hx`NaMTO$N0htyJ9pDq)cW7#kGrbmcU%cxpP@cy>*csi7X`(b{(s(k1{
zJPT5zR)vU64^ySrT+nfRT-{Op5TtA&5)Pm}{%_KZ_RT$$4QVLl2@5N_k3x?~2juiZ
zF2Sc0dWH)aekh!;@gt3Ott~1-HY4*L`~)75XXHP4H^-{MSbSD0+LUr>s1yWmF_q)o
z@=@iVW2KNZ7O|CD_bkLP!(1^Sva9DkQ46l*|1NMJ<P!fR?^!7rypvJBw6?TS9tvMt
zT&QnoVZQlrBY@7-?y(3h!|<p&4$Xi9@g5CAvqk&&kZGgpe=PWbC1kN_XeNUJ2uQPV
zGW-*KdJNl#WuuqyybhtX_QcSDH1)~+>*IL~!G4r7=$Irnq@$V7p@7gj9e>cM;ed0{
z4{7c{g#pW+N_)^-7Q$v9@u}Gj%v2<DsAwbRwUT6-Tf>|K1Ovhtcr*58H`gU*1Kej*
zRgkL`{u3vp<oHj0Hw57-DzBGZhIm|R`@<h4*B3`M3wSNX)qkS6(}z03U2nf%uC!C1
zcBG~Z4PLLxd<kmQOU*9sA@)2bX#y5+KSe0LPD{?MKZYiRoIn<j0%`#H#Jt2IZ@Xw<
ztfg^ACT>Urt4+)r55-ef?0ZKfKH@hZvR9*@J+2!Fxb^STL*aY&u!ee4>xNsl)C^VL
z14Nr%$~LI4Wy>q??#5hM{}0>OV4+!y4jA*SSjBGMYNZGD@m1bKM+M8Nt6;%X@<yL1
z(SH0jc`%8vubi)H)JK*NSMZtk+V0{*^=*ACh=N+Cyk<ed3m!^|bIKE!y&HH8=YgyH
z%pJt14u64jaJi0Vu8`Co^Dd#HgmN^KsHsuB$s04Wkv?H&L(0z6PbZTwOMm4&w3+Wb
zpwdk6VJ(Z3VKAJw;_MposI>^xbht+0VVOO2ZXtP=+W&CHs38MjwJ7y@y_h51Zr(1z
z;=sR^IG%aNd35W*O=rG`vQctp$b2~DDPaeCJ_pIM9eoEikcBiaSx6D1+D4o(eY$E=
z9!p`#`*D^;vv+LWBjtz1q=G`QS5Tyau6%+n`@Vrk?bNWjiCnI>sHQ9VI1#Ocn!a`3
ziie<hTl8!Bpj%hr>%oB3T|*`1J`BskPIrT{9sZYb=uz=_qXC3EN33}(WtB*wUnql~
zUywan@vGn|kzzYuGJJ6#%9ZYdOQ_;7ADRU5-(7hXfdoOS$S+>MgEga+t8N#9W(>Rv
zqE;|}>Y#uy8=ef6zQs|Ty}~q1CPB!ZrD#wd<9`VUf;tRAWt4On0eWN*2c_Ki^j2(u
zl5f~9joe4lB66-qkG~4|crbwe8kC>L1Oo}GD&z%K#R(#2R8u1Y@+)fT#wErWzr0$@
z%NWj$kgU{)^Z#KnW3%Hv4aujWGX)MsOzF|R49@j_@W8<h3`w2+!k!>%b&Pl6;LQQH
z5GII9dwsFuPxmoXf6Wps&c&P@!=PNEq(f>4zhrb=g2&fIfC<wio7vKG?;brzPDn5(
zZwiYmcO6q(8;VugP@H}^wQ@uEe4x8|R4V-N0x}}~HcOo1XXYLhJUcS+9dCZ-Ciua9
zQF3aT!zn)r27|1;3N!kR{+w<6ls$b6Z@QK)u#br}O}!kx&!6*#ggd=G5|kmQ_bYwO
zEgPCXOS-C@1Eap0)t=<o@WEZ=&2o&!&qSMpRhoL#7`-BN(^*IOoP${l!@txYf8cI7
z;7oJ8-gFFPjE-FH*57Af3~uaD`g67D@(O-7ABDS~^*QirJ&w0IoQ$7ho3=gNjT>6N
z)H8pMHk;fg1gms3W-iVd2ENquYp&;2%Q%?Frj+1rHu(;+SeLxbu9QoQc^NdOh_?J5
z`CMa?es4BgNru~6ucA^P$nLaiS2lPy*)*ygoS@qLSF<+p{X0-&tjdobR`bj#RYM;F
zN*#y(74iu=;uemH*hEtIa9O;_=<<Q*DhNcq_=1go9mGgjkW5vg6Jhta5l$9j{zEqZ
z)=x*uXpWJ>iaW$p1rjk~ic>e;$~XFK5s%7&48`J~o+r^ewk9A=#bpK3EV;pFDf6;n
zQRt89vk8sM(OpuR?Xmzxpy3?eam8*MXE^xpG<6>n{fE*JtW@<S&lhAUACmEhm)@RH
zfjB@H@{QDOM!$*l89&?Po=;>2i_-Dy0Du-K31KFKb&_=M=O_lN1#O!rZ7I0s{se{q
zW0y!EEJ?31i7y41FrFx|$?1-x;6G9*(g8bDY|kdaS22!tO^)9@Ru7nF*|KbC@4|QB
znc%)Fg;Av+LMO}?K;8895<Or5(O}dvT<ulGl7~EJrD7$LWJa-ft|FicXx4wrhS#vI
zjrHNs9l8H_%k;dxI(^>OJJA(NE%|Qy`TtG=e`!kQ9t;40B?|xm%Kz;o@OKgTQxE;0
zE&^Jfs+%J%znVJV2#z=o@W|_GEC{7T=H&R~mxy~n?B-Z(N-aiJLMdLv7>6fCx!*r8
zIrEb#x{&Op-IpdPb)udxSFeUl*`mMrEg|}K%Pw8io1I9&oOY72L;k$z;4{{=h|e0=
z=EXXUF2lyNsHMQ0oo#HWrvAS>H$n!!=+9qxRT18+D5p&L$fqu5;I1vo)Z9QNhNXs{
z`PSk2rtAJ;3}RaEVpWTJ>VPS%6#`!e@WQ*;(6g~abWQ#w7wq|G95vKepE2BFL5JZn
zySQyJ=gwC24h8=ms;D8y#GFI+;-mwx0P>&%Bk>^N9dht+uyM7sMU4vhq67RTqU86Q
zLgNn&J@BR=7Cq#dAbK}9Fr!73abbe;HJ<}Fso6~>?-j0vy<3%lye<KM0H-(m!U;B!
zuItxctLoVvx9i{gdy!_R`tk03&tfXGbIxC^$?%(UBWrRK>FHpKDk`dadu(C*Tahjb
zPGhe)Ip>0znYPu?>N5;b(sP7Y?0zQKkIyT=SJCLT$f&UJQVzGFAk3E<fi<J>?TM|y
zFS|j=xAg%mfcEOFxa<V~ZLmx>@Fn@uNor>6afN+pHsabS<4VN!IbMV}eor73s&Mke
zofHKDCWbD3<i8!7S2rknQf;sZ!S%Pfpf~Vo?{*rK@T?h%(Oje(d8JU>SkJ;uK^O%3
z*l^;^m#w&isc`Uiupx*nmqi#R-i7yAd*Ej_VANj^009G1I%e<s@AvSc!|R9Fb?b*p
z(>@q(2o?J5mbJRHQd);b)$=+Lg179_L&}AIWy{1?yP>-|;I~V)TZgn<y1B565N{6?
z34HM%J>`2&L0{SN{X`KrA_uXMF@u|6F^R;$^7@){03z9f$((ui4b-@TYu*JWQHr5e
zSarJKBD*++H5m@XBXu@-aX$T^_EU7=!KwLhwX^f^aJv)l!17Jj*|u!oGe;t3M0^2M
zb>uA!W#~`UqOiHv4Y|o9R`W6dOIktGg^-Tibk}cMEQwpFrvrko*oQjMgf(@K!H}^9
zahFCSfHk6(7_$=v-DL<HWTLhsq)SuiG`!WF!fQi^%*w~w#cBF$hzBl);@!AG`uFnt
z?@K|zlaWY4JYb1jtzdX7a53%c`|rjwlY4Jn3Ei1RIHebJ_H18s;DquBehxGeQ`bN@
z2g2|k;&6a-#~$q`z9K>%>|IG$j1ZE=Ev+)%nsvjmLrIZh3s8DDE&}^oq4m-AYbk%R
z88LPS->CVNgh_>|&N5I1GtprP>cM{jFm)L2!xI{h;JItW+4W7MeKPqzHt_>%j}4Ie
ze`w#2&U7C%v};z59}yV>)oRqPAT;;=a}+q*h@YSYZUi#CUE1yLt|1vY4RT-jDcdz{
zr#rw7eWN@7N1iYB$|*JtPv+CGj);8;*^{Pu(?Q`=uoiJjM?yr;c=1$maJO?a_60)4
zvKFaWl(@#oI~>LYE?4%|_lkGPwr~Gqta#EEU?#;BLPQ4YW7;9;;H97$(|}!v0dm5Y
z<TOS${2y#6T%~f|UaTH{(-FF)poj%cwA*eZ5^oIZ!Z6uD`P!8ePmo-MWDFcJ#a03t
zMw{N~9$-Tg@QdaUJdu>7h(;AF!9BSNVn!NH1>6#Fih<1eaX($%BspglGmD*?m<~ch
zcx%h$1(h-xkokN(JrH_BzbAo{BpFr=iU?5E(RDmTlUKG@dqe`s0aYYM4($XXI7}+(
zeESS|=F|MEzbuDs0uxvbhJ8V1jA56<CP~9T5`=$yS>eNHR_Y8nM%I+$na1rx>7Z;$
zvgAMM```-lW-tGUK7QsRi%1Eag}Qs9hw`k(_VZ?#3J(hBc>B@Bcp~yHe=#`5;H>_O
z6Z&g=(1&!!K`(3&!L=zfxt+p(uG#~Du2MYOWwm^Q81B9zEES;RxHFM<#~?*lDmnW@
zPPR}hNwf%q^oJ&=_ys>Bi&8Qia*~lCyUOHk#jMYg?23QB#|UA4!#;<`BjaWP#;GG{
z@nKBBArtOUqvAoEw#Cbu<SLQkPp&i?YjFx_@fGCxh3Lt~cN}h*#8m>aFGPFQxZu<x
z6>HH6ubW9lnp`7Z28pXLHcKnvB!&J18A-PB1EQ^OCkkhPI|f1ql#}(hTMU>f8w<r8
zt7|*q!#}`NwlB{i7v|u`avBt>9Lf<`{*Pm<`#<@<ffw$tiSnR1y=S_nPY60xSrwUB
z2S)p>82Ex4e*~Gtco3^(1rG-8*>OPj__)HRWO3viWSDL!Vjq-<u^vVvp%ZYn4E89m
zn#eFCi)?{h!Uh7#2V~=l=bt|K^()RF1R61(BMxs-4~;h*2iRhEV*>rG!Ht$D%K{+*
zv0y$`rM^-*iIkGdEf1o6qz0vg5>rlW0Wm-Opr4p-+9RkI`2OOS@qr921vm*c2g|)@
zP85g)3Q?INF@7taE-nmzrhRAz;0OY-65O-}|Jw|Hc=tLeC#&~`O)`sbCl&WcMr8tI
zW02Kibzl|d@R=a{7TB_b=lxYB_-DF>M{=Z(FcNPjIwJDf*O4%d22ecSqF^y<tN(m>
zlqymFGD{Mc%<~_DPpvDJyFHy79UUDzZm;k^o$W2nq$^aUX4M#;#S0p%%(rvg5h+xh
zuM(C@yLf+L9Ab;uq2c4mMb=c0_jV7R5#UnF6-5x=u<GsWYS{bwqG}x6pYJ=hMGfP)
zXVkonjp6y)P}Wp*i-p$I)6ZIXTb<k7-_?EgkiTZb@9Q8M>#3>6<XZ8qsV$8U0kXbP
z^5Jdm>vGr*>+#+>Ms!;Wim&%~A?Dnt^?!mr-ESy{5kcJxr23t4jxjQ1WnHD*3Bb!L
z?-QL76`yBdJ37L9__G5qOwgOtT+q)NIl=SD(1kuZ{_{k@P<jzw(L*yF>}=fb<*B*V
z-a#C^%9WaLvds-)MB5g%Qxgbp;FPY{&!$ZK?C=Z;KP!cmcbe-zTEUrUqP)644v!B{
z)9=%<qNxgrT$&4g8Hu~<5>;CcTqgxrMYFj_0T;5P#E~V&_g9MNNH8(SD;7SLZ|hT#
zh!hCYMwOf(4ShYZ!z3Qi6WZR4Z+<mGgT0~#2fLlpZ?D&JlB;BV-2O^l+8UfZ+-tl&
zX5wGTUknjZ(oe>oQHX$mK0cup0P0x!HBG3n8posjz$X5)G5mkkuj5oqU-Ja$Do_}e
z-D1*`uP(vd&4))8@0X)fFyEBKOCxKD34Ci;q3%B1ofjeW^lW%@1hBih*|`ygxfti!
zIpz{#h=JYn%KN1Ar;n)tq>}tuA+d~2t{y_($2S()Gl?JbuF|#CT#OODG*7V((3CKa
z2v3MQRMo><iV>S;iz_WcX{U03@O14}57X!x@fK~8JV{D(%k44qd5AdIO}N-w>_r7_
zS%K@UM^;6i&13e2C7S!eU6`Mhq(!1VMW3Vc;;4)d3Vhgc0O9$SMpIT+*1Fk>D6oZ&
z`{x6z-#xibjZUtw_Xmq;u$`|k`Y7zI9=0xx#oy2ApGXzyU0xm!=LL(4PjK*1G_>js
z?{7ZRu*}88LtTk9*SE*@^Y`MF7aKYG9Xv?kkNxrEciNAi_sZ7hl}g7Sy&>F-`%o|*
zJ&wawmsUv(5Of|+UhY0z^!NMu@kvE#juqR99VGBiX<qhj{5<IF0i=S&FHd`t@HThn
zoeg4wb4l#RJge@6pvLFXeLca&m$4(RNEX((C#_!>vr>B4l7h)%3=ZL@>fe$q+eI<6
z48L`8{fkCD7sa#@sx(sasTZm=6R1W;=o53OMo#FFvSL125`V49RSFFIGrLm6Dk%*u
z<&3PoFLKfrjZG|1CflO#lvw5D>)kjb$Y51UFf$T>K_BtQFTmddIml#Ul<BBrW3$xC
zLI3O+tg~5-4I0BmTySQQfCqA#;<5$NZXx`$&xDngrb9{)I3`G;tU`0<Yy-kt90PNq
z<%c=JZ=-w%>QtsBpAPR*em~}RkZ%ILCD*5T%U1EBsYF~eOaUsAJ@9|+MfoalAs*0!
zZxyU}x+!{&eaR`TX=T*V@o11yxk*ez)$$NMEBOEr?}P&jq|6Z%LYq3GRj2nYkKqVS
z;I|g5kHy<j#oH^nmKuUk1SMuYeW^+H(D_3P(n4Oywy9Fq)kRh|rt3xGS`3{(5a;0B
z<P|;)gUD@ut{7L@{Q%=oI0eM7!X-ovqh?g(8j1z<#F$8CPKO-Od*T4HKyFZZMZw)3
zA=)hzGTssjbWjrN3xv%hHyvIb{DokX@Z2p{`o@_(;*$aiIAT$HZXQ6>Bk>Sv{|$DY
zlajyeg(I`CmmAZ`S^kzlB}f~xzNkv%Cdy(xPY>-AGVtysfa{>n)F&`cR=|Rat84pG
zM$^E1<p8rF*U1CGD37AME8wE$*o^}%u0KuzLhA1ox|i@Iejsc%{v~5y<jYLfOf;iM
z<#XqrUaQq`rkyc2#d56<bYqNV>$g;c@H2fCE_#1jcmdsWLYa_@`s1{jVDpn;+Lq*V
zs~W#p8)6~4b<9z@@ZZmy2gu#xX7VUP)9_OqRHhqhFQYHT)1vel+hH2nR9*{Zh^!I%
z^8!6WK*V<Aif~p@xObZc=H=uU7D7K-sX=iv{AsQ+6|HuLlCjFnTQwpLiFysr(L-QD
z6lto)1Grjs!$whdtkp)GcG1)irHXq^l?6O9QYhp~JDhU@kp9Jmw^(M8T~JUR<zBJ8
zK^`VnG9?Q04Ra~}bEMKhst;_kj0*Fee<Z3|fP({x-k1pC4Ns%`o3NSZ)&xmK(5a8l
zZ&{(ey-Nz|yr_0HL^?*WWf8=ws_4rCWZCoTtA;Q<RjNj~Tqp9ymkf<onbF0g%yT}w
zS9fhk)QwAihxy899H5Pq4ULo^OX*+5lb8N#u~e3e6zcs;j$sWvjQL3!0w^Mc(i4>d
z5%>w+APd)@5;}9uS42bg|CUu3z%v#f%`{u9c|B{G*SDR{G1O}_kA)}QXDxajQ(v<T
z7&G@lgHahrnN?WEK}i}bKvBs}Lbk`V2g&(onMkbtvnw=84XPA_JK|qBlP9(i&FvxS
zT0!Yk%=s5qO7wmnjQ>{CqACxMkvYgAXX3)Y^;rGKMNF2f=>wkPsp*HHj*rg^!mNqi
zPRrI>ryikEf+(Hp8rf2A$U>lv(BpC_@}uTKB{d;4LQh$n|EZ!uZ-v)6gBfynIX91L
zU*xG>je<OO;=HK~Eyi`Z<xnrvA5TzXPBPBj-`sR|EW4bGCR$b$n;S3Z!ga@Wx_Ic5
zQp^S)!*AATv*jY?e_%CAO|GOJIt|Sg!<3yDUx$4?s8bbjPDVt>s$A{NYQ&qR4E;-w
z9zlMN#H@Lb#%suo<=}opa}_Q6ODf3IwNj<+eo)zX)u6c<%ZDtKKu}3ZH(95I|1N##
z8Ca}RBHPYL3~TC#L>@hS)o9GEd}jr<)Om#^H4<wL)8a9nnW{okvXInc6ShdSlOmRr
zu`%-d$XrfG#~ix52kNd}NRgjbHghx`lDXn53Zt(VJ%KK7IAC1uYi5UMF*Uwm-OuDU
z_-kZI)S#85*B%+_uHXq@tOkh|3tyl)iw;+0O`T9JoFr*>|7Iz?0&bGO^n%-zrM%4b
zcKOcSCo1FAjP<Bm_nSEB4YSbxKgP}}I+LJV*s<+QY}>YNOq_{rYhv5BCbsQ2w(-Wc
zCOEUsfAxPC=bVe)-D_3%Rb6!L+O?lY^Q`Y);Cx8ue${pZt3&J(nIXyd-am|vdFth|
zZnuwT>e1mNYAAv(%JU#*G?u~WeLH(lbzM`1*#_kb^b_MHGJhUs#(wXZE4;cn4E>)_
zcbCKb`r{b?Wx!j^qI4&rz#=?G#}63gw|8!LjLj7m{d2Z%6B>)F%%pUtu42hxZOdP!
zx?TJwtEJ`u+w&eX&KmE;J$*N&ao#R1Td*Ly#{R52>l&<!jx$;VvuBBNsN|5%xg3HN
z*zmsJn-C`x-AV-UWf{qiW|8=ZyUBv=x5%|6#E(v+<3yMQ7dGbDm|AEV`{Zntz&(nG
zdEM)Eq|GbXeO#}#l<ty^EyXH@QTpP{%qV6fRC8sQd({jpLymp#70_(o!DbvEHZi%$
z6pem0CLC=RwMV+^-52hW<9oU&DM%d|c(}NJCr-_u7}`k2h0^MaOPI??vZ|W273TC6
zOX_6ho_)rWP6@?Us-x5EtUJI(v`N*qY=DS&AZY~j<~lgPotLn%ju1Ev9{g*dh*3QL
z?C(r0ENvG8xP|@i5%)08R6s;une&>=n<kw?5s64jqKm?WjwwybeIB*o@ownYH*}^i
zc3k_>I|J>{w;Z$C!da;N5!X-M=qlwe(J?w2%StNW>w7C5fdhx>!#$HK(6eq<*C{c%
z^SOc*`XhsbfEKM3vZ~~ZOx^9L<o)f--k<!Pxs^*KL7v<{``I2(YzZ0eIP=&dFRGW9
ziDaiT({Dj8hDV%*u;;i}6q~ZHG`!=~B|b(CLYFZOH<?<-nkK_m7ygP^JyX$`WdJNQ
z8Q7VqO?-<m0jG=9D7}e$nVV}C9LD5p$M&{m9OCY&xUIVNl2uo}4~WaPr!s8v{u<EP
z&T%?XQ8q*eJ}Y!DV6hBqtaOi=9Y2j12}@v@T+?N8m+u>l7mmdB=&1Kf<6-LQj)z2o
z@?B79n)h(+Z&PP501J1jJE|31CR#N2<0im-V7yC?O&%B4k7rwl9M=+Pj}Wh8okOsZ
zXP(*jp~|Z&TUWhHFvvo#?BWGh?=%PB>xK|dI`f&1;D9TyK++a$o2T8k$-cFBi}!ik
z^qhU1d@n+yFhl;O$iP9Uu4K;c?*NQFxi~QS)RchA2aqYkP)0@3_0^M!D>V37WWbqf
znd)3O=h3cHlF`0R9r=RavrHgGR*@Gpi1}gBEU#CeYjP?fhIY@8^H&bR%B4rxTM6Y<
z5|4sTrxss>sPT3~0ZB$<N2tDDP^f_Aa=W~K=fT9~A%*-M9Y6!Gweplj>*ir<@6Sv+
zjZMp8slC&z^4uQ7>5sDPE@--NEh{LYx*IvMVYJ*`*>YU0*5GJl9>6-aR|HDKcx?Ia
zVO2r?btcTez>gW{Nc{}Gn2a89Rx(KpZzJQF3=;c>@m2G2-!%9cKH|H8W?cQtdU(a3
z^_%`)Hs|#A3R;#lsf2{bhoXt-Sh_>`|12R<1lQ-#*qU|`M3;wy-IQ<D`TE+ep$2!{
zLyvOTG59X3AISv2lr_HK%5fL4H|SoUtOeidYa1GCnAn#}uPnW$UjHN`^Dr<7{!KW(
z-MYBdIYC2PeB}*C$9QMrExfhx)e<zcWoa8;dOoCkP#44%*8yEl32auq!^FG$Y2%&$
z6<NzL)wh~<f>+MeC0*BP^t>cN2Ur6pjF_w&W4r<ZrAX(sHLv$6kM4M07Vr#3X7=q3
z(2CAO3g#P!1e_VI0<fz2VC$I>R`NlYiob1@g7`Bb)-%DZ6n|eT2Jz=Yc(Fp7+!o@v
z3CR9c{26Y``AS$^Jarh?xb?&t9~{=1czSyXxt-$b<?nibuBGCC<uhNi+ZNp5ncGLf
z?$T4A*R$0npt%}l_?gg={?{wh?l60S%*j(pI%k{!eiLYO>%4kWw#pIaYS%?km#JXC
zu_AFg_F~9)|GwNxu$y2rVWV{<q3ntXX82ags0EdABIOH;eM~sN9mJleCxZWW@2%6h
zx^)(%Mdgr0hX?Le?1l5zOL5rZEKa{IeGPG6wrJg=OZzltg7`$f-NR)Y9Zx~R+}H~>
zIZ^2_gvkE}8aDv6@!#7r3B2wkOQ?=8KJ|pzjv6gjvkY`N_QC(tSFMp};9##;V<DJ)
ze8BV*&($~70VZ~s6Zl$j#|z#|Y189wXv6QLxx4*(@~%rjgz#>}?_)j(leagk3vPgi
z1Xl7@OKm8z+*W?VR9m$13DkY~qTN7`A8M>cIS2F`$QWQt_1SR&)O!3i-uz)3(W^Yt
zO0ptqPa-vMzin%R%fJ6@_icdy(EG>hB<+GvE)!!?)+ef`8`Xk5EW{!Se;5;f6~44_
zK2sLNjE-WcXAks>d$ztxKTIxv*IY-rZ-f<|KD=XUMnr9!g>Y+(2!mS9@;8h@t(0-t
zE>Lf>R$2WH*cE6MBN!`<hCt@$aC5#o%mMl&PYST`S&acBQ85K(UobEw9#J$JQ)$xk
zCXl?H4b>5q!UF_@XyPf?=Sp;v!b%qx8<^Al9pWi^JnN{Gcq#jr2)FW#wo6>pQnsX4
zEDZWIgnxbx%66nmr%Q{@E^e*EC=Ju|qd&-qxveM*tf&voL3JqA?4{f&N<S+zPt^|N
z=h%+-Vi7OoCJJ3!3ng^gin3&1c|^GZEAA*3)4(%0H`gKm0qZ%g15-D>M7-#mye^C5
zb1#ifgcF32gYd8y0#xH9M{LSy{<L0YSD-9XX@nkjhh{ipZlNqz{(j{ziDGRnp_fh^
zAxEb9(X~<3$^fdr`k*D2lW-mR;@5&`H!l8J@~i0&DJOoT{%u#qknKt}yfYraV1Tn=
zC|KRh;BTT;TJB@~v6+(cH?$h@`qmRqLhaJk_W35MQ$GW~Wh^6H*~-HWKP|94P+HqJ
zpwh-Z9=+d_2&(w+WelR7O>~=S&bk_vT_+(lcv4#yQ!lH58tAJ6c<rgI+iF%AFN1}z
zx5f;kR8dYTHw~7>SuE+&%ZJ%bdyoANZJ-5L74Z`2YTs$flh1(h);oxr=0N!gb~<Tn
zQ?NFnGV7u)Py9?#^l65mL{%sJGgs@$cGut7pB-%Xn23|*56A&B8os*zqZ|bi4y8k7
zTnnmbQ{*$BDtGB{h$0#_Q?xZJv^^butIp^A3*nYW^{;YZuOQWTyqtpTRKfqzGi!F@
ztVM<d0un6?0z&h@m54mKISo1487xdq8BI0RVL`yRl1sG><SMk?JmEn=Ax^<TK>j;i
z>3$|<OQL-T<eQMD+gZhG;|P{)KT)o88~)Vc>$P>RtsZXU5G8|U0>hn~ls)jN_6hQ7
zyvPFu1%r^a9i#b~ii6eZ<L&=>kr%dqdK-wJBsE|{(7C81Ur{zMxa^w!!3{k83;9x4
z%Q&&f>^YE|k;4SkL6M~8dEvhYrxibhCcL}-muoYJv@+_4|3xKAE)_Z^iF7gN_lkDC
zGoeDgd{h_x!la+bsfi>S{)Ow*j6S;+A+HyY{x!KDozX7n^!shlCG*Cy(HWS@oR=XJ
z!wsMspf)E42>Uijs@+1%!kMOH$M<?WKWTU~z@?FB<8`UvcNUvnLKP69VHNMt$6?P;
z%+Fi5sDfvRVR%`iD8`p8sIU^aVa*Dl2=Q{a1K;D?@P`i7pDYgzed5Yzcpbe&1<&H%
zhM(Tref&PBlk*An4PVB4e8@k6i)<Tw?P9HuI_z4xNHPIZ;fJG7W8@iuL&n{dY{y#(
zu&+KXj}sc*_+6myPT@X*`}4*`RCm^vhMSac2VhX%@)<zK_;7lt(w~Hq+=dFvnD-PO
zuf7nVVo)Uw-5~96Ie%F~T$(9QzC0E3pmwshA=(Z}e$o%_Jxu7jnFF$eSvU^z;XIs0
zq}bqP@|Ubd@i7p*K)s-ne@fa;vhd4T-foOP>9kA6dWmaOzp@}^-ol$>gqW`8CvjJp
zWXt9?pqQ;j;61FOiE)XNF?Rx4Jo4sWh-lv|!lo<^NhyJWQeU4q1Yi=gJ^Ns=q5Vd3
zzjzS<MdP{e%tT@8{YDh0l2J=@8VVXtD9%WPPP1zLI#|2$;}Lua0O>(KP;sI-GOP}y
zhi;C!*P{hD`*(lCVg3fB1gK=ej}wUAaikKkLo@Le87y&pghD?qY;i!=@b3#BVJTPq
z1Edt?aqDAVHr5kBe29bPx&QctGysqCZMs;B6yKAr0W2_hSZ^r~wWNxOzMKtgW?I6R
zY6^v7E}Xd?)8H`BpYvz>)+>Dwb>US=lPB(d1O#1vPJmM)x0h1@qxDG0v_3UVVMYcV
z2Yf+tV(2a$z%YTuW2*rnY0Pv0g`P|qKCm2t6bMq7@MGQ?1FByv-vY;Hz;z;?TN()K
zDWi$P%OB<o2Y|#wDd{(sHca(ppcVj?CZ@JFInKNo66aKj2y{g!L5qeZkw1y=YgVA}
zFhv6kOt0<pP5sw6W+ZVem+=`AnV6W4V#0dl6t&?uK5<H2sX?ymnBj@T!Wy^c2bTPk
z-c*O@vjBPIh@8dX0X-#6-JR;<aZ)8kk2{L9lN+kR6)qDFojidzt86`+jbPT*$Ff3<
z8%beG(@I2ZwIXx1bSRc_gv}%{3QB5o393qSt~84WaCQ#fIo}e(*bpYFCDaOaUSD8i
zJ?36keUX-WelAui7j`bZR!_g|Po^DPUEdg0p`yQtLRW-*S!j*n+Safz&5(a(TJ>Y$
z1c*NaWYx^_%E?<Nm82#<soqTM=TUJ`pjR0=9`HQ7Yn!T_{==a_%vldzg(S{$dM7Nf
zGr^dPl_?WeU^AGb-~+O_J5mc#j?d<{iE-I@D!gf8o~WP2!XB*xRcH5zJFwym@C9B@
z9^33?T4kx1I+`Gaxr28(1Mnm034f$Lu0!NZ=Uy&wVFp?!WvYwi42TqD=FS5zN-V~$
zsXDlC@YsK1HNMlxGU(hYyMnKqbfvYZ(6_d(LvtOPWMTYu>b*`RKKokZXLxow1{6G2
z%aBPGm~FD#&NAk$na6*8@x77T95Ci@P_jD_XTc;f<>`I9zI`S;6g-Ta_9qyC*uj2*
zs}@n&ph@x&rGY+z{5^q{pPb4!Y`S|Tw!7keP)vWqSnvX&GFE~bj2&LmoKqM|;xcXv
zyh^u+`CL_l0{OV<^9wmrKULz>uW6HLxhKUXx1px5XkVk6Qe^n4HD^<}fOrCLe3s@V
z*D&}sIkcw^;!71ulBvq2p3(SQP%&tkTkpjP<sNVC{fM}wQ^$d;f4bmIx!cH%_Szx|
zXV)GYp^w}nR&l*gp7k>~VFvfYbwE?;EGL#vpMASJ5kkZjgB<dm&z4uQ+(TEW^AVjA
z*<baj)?IdOO(Z|H%e#E$IJkZ>6@?}jy0YBOe-id6_~ZHmBL?uM&F5_|npqw&tYmzI
z08IyLC(}F1h?WOw+#C#sd10xo9)MiQ{mEPblfsKGM!P&;i{zv$Se$N*W%pW)XDwSn
zXWIp)X-sA+{Ss+hK|zA>L{MU`bNIs+&K3!Yvjp#LRpzN%5=(r0I(Nts6l9>uB1h#h
zVSodhwy7_Nj^bh6p}78>;KN<H{owR4#&QqLAoQsLzHD5qeQBx`iofQq<l?kPoDmj0
zYKQEb#rv==_O|Sq$$uq}E@WZ|PEYCzjz(YhtgEylrKqbEfyPW-y5S!-M-p%;+U^Hx
zvAC<}l?(mr8@9-#FP?H1PW$-Q_0jL{6)5S^-&XpnE7^|nuxj@ET5iTee!%>lL#-~;
z{U*WLA;;b!$C_`?TVJMfv!8%0x4<&}Onsm%M4rYELNS$n-9$Q)$RrhoISdVqdsabz
zr|h6Lf)OUwKKr1R!hZ4I?&lU^#HQpI=VlqimjHmJC=1!AJzu<*)4qnPv#wB9+Q0!j
zzQL!9;7X^K*R$insZzDSzn|V$C5$CZqI(n6hp80XV|pf1uh=VQR;gVUUdQoETsk5T
z(!tm?Sjy6Ubbb35!;BLqQt5fy>_WGnU310HQuw8rS*<~wj=uYgjP}jY#!mS%(zT;4
zC_;WcQ_>PU#b$ii;cM$TjAOmmk()j95TFy*q#^>*`DAUGy8!_Eph79?Wk4}Ct+N0y
z#6@UM0m7l%88gkFpmM##foW+T-ZT94qvnwMUBA%msxUPU^3}CLM{>lRL0AF*=~^ES
zI2Yzssw+Y)yd*X9x2vT{#SVf5{5q5%>9`-f9DJlW%C%_G!w1ttk(psoB8iAz0GFXE
zl*C5ZXy!zuy>^_aqPKIL#P=^L?{jtZ7<POu91mp52Z*yZMu>6!dl!|4Y;U}bhVcaf
zmBu|78jkzXj6M}<r?nt{0&euUB~NbcNQvUR{+m1FOWOV2+p<TBW!=BycvHvC>QMqZ
zjHszuG0|?J!|Id-vfNj!wOzO^<)tWly}B=t?7K)KuaAKO$}9217>u!S>Gj6HqxBQ6
zfuDj--hn1?5)Buig-SERRXBK5^8pbalXeS3s@d#tJY6#QvtCu{0?Y7u=Qq*i&6hL`
zp0c~xO0kXQk^^c$rWe<)2O<ptSPb6pX>c{B3Ac_&koCM?Qs+*2T$;Et?#=^c>I%P%
z^<Xx4ZrR>77#^yOf!C7A-5_oY{ct#|ns5mchiH4;<kr)DgOyuj#wS3{?WM)bTc4GU
zOFKbBgLIp`{RepV?QHbPviZE^PU9AQQfuGPHo_{E3)dTn=yT8OHY`S!a5oqwJl1IY
zJgD%<^`Og<2PjG|3?s}10DG4KqK!Yt6O{k0%rIcj9rNLCCj!U?`PqMxm}Q#=;>I3A
z53^l)!G`QnJt*u8CuV<p5ij#K1m36}7EOGh(vY^wD)O<wwY^?F_J^8{oZX&%gp3~#
z({NtX(lZDwP`xjV$%_B$?0)QG>ZY&f^!Elp!=!BZr`X}{y^XX#6L%=+?Vk%v<eq|;
zO#h-~&!bc7@M~^$>r-TlYsT2aBd10I<w1w+PX~CRgm^j@U$)l~77=Yi*MIs*>&@3f
zI$VFJZuGl8ddU_Ji4Waj7&vjvLx*7CrQg1%l|yH(s`N+I+#=@bhP%;iIM<+wz`A&(
z)goooS^|NY4^4nO8DQKlWI!!GFAvxxUtW@lCuSS7e;m&}zlg58c3im$kBN>n;+s18
z`6h6zQP<G|zL6s6KzZwPmDhsIUt)_|93ND-`UlqcYJ-yWn+5p&74)rqth4pH>nq=)
zzjuf}7=49B(v&;}vyMgW>3PS$INn;SyaIbn#%cTVTx{}FEhrT4iz}(T-!)$?XK|||
zG518%s$ql;?c2O8Now}cO|la*y-lw*Fk4)euZ=1ld$B2~btI_`6^WrMw@sK0Uh>@j
zO4vI&!!=tolHvv*WzqaJhW2#wYmSm7tD{E_u!hN0tk4a37fyk;MxdKEU&Z$;mXQ~=
z)=VC@6+^Qcu$Dq=l8G_5zd>U=?@*WQP0Z93n02~nf@Hh$PWtyvNzQs)zhswd0q*^@
zjwwgvgyZJ&nNb^)VX!+y>t<>2GGhm=mw{w2i_IT*9?Q0=(}7x10n6mzV0ZquO|#f#
zM(AmGT)XCKWOjHD7hGKR^7DFyss(_ki?hakH-f0?iuRTBoPGLy@cTQ;m+uxOH1w6H
zecRNJYJH@vE7pyQI^?-FOS}7lKNd3UH<B~!S2+9?v(UFc9fqbw_&C?E+O3w^2=I&S
zJWblFmxJHO2c;$dqG=|tb!JK-f3>Qf7-}^?ACIkknc95Y>;CmvX=<|_{r3I4)wsVs
z?_=K*)PZGw@i13)a=Xwb;y@|);2;;-YUqz;AdaGcev{}P+VBK79u2O{(@*H7zQk2U
zrTs&EH~uM9XATZR*5EW&)SMu#MUUzH=dyAtloix=g3AUOE}SP$Y+$x?;I^oyn|hR}
zJ3){QQE$|Hu=Si=Fnjo{wHSn2QPWtk0;o<Ci)$LbQCosO!7duBhWz@Sp2~tlT*G!4
zLt4%&;j|wpd$oe^v}B=({^@!4ZBo$j>-xg3pYHMCuPaG*Xy*_=@4Y0@t{)K_E3JD6
z1>XL4SsT;5R{nZaLIrM(PiU`LShf0}n*<$l5C4&cMoQ_HK0<?lETH{g*#+)A{}*;s
zkG74=hBVeE{bv**LKg~rPzW(MCry+8FFjz4ei&dS1!yGj<1|*edTE;O=f!Ss8xa~9
z-(M^1$|SgL!INHx#e-AqCEdn9m<c7J$(XWESlLpizsojb0LS<pc4KyfHQ}Q!G1sa&
zF_LYkg2ms1BvL~Z`HL~@mN;XlA}BcC{RkFx`0K~0mYozNia2p|tdWjko-#6j(v<aK
z=zeHht-*ZCq+9MgsEG3DvLaZ&<}kBUut<8MAEb~a6(le&WW35m%xB$pEY-AF5)|eW
z|8OMg7wlhTu>5@kM(wt}qo?;N*g0ty!^ozLg*wWHM$c0yJex2Z#CgJRMx<Nw?@YWJ
zOkl%W+4`SSZU%yAfs^R9lpy4<-^dkj7Lwd!uyC!G8R9=(m4G$>6vcCy`DM5QOmFw7
z3TFmkL3vf8>y6&<KNv`?2kF_%ZMp|DLyJm@PEyCCQ?SRCNax{^19swX1QCVeo$<v`
zp`^u=aDQXeoNy0W!oRI_P#WF*(92|GyQKstKn)AcAPH*#9O6a#Cf+p<+GacRK4AYb
z`!>^oknkWW2OXw-*MXaa4H6uL&k=rrnmAl+>B^u_yBpqarw(<caup$#AwGck!T4xq
zDr_iOl^e*G-3iavJdgOzC$=ktM#3w>qR(~W&x&rPyNA*X#s!s%E43KII2THtVQU}5
ztz(2?)W6XhTdSV@(1DygGrwgKQAgA47@~6i!1EU*GCWKl?HalP2Svr3D9q7S$hTcP
zH)1e6g9S%XMKTgALC9V**Zj2nH${lNrgdR72Kp&%n8B9);>8NF0B-A{zO!i-fH-*f
zPLmzwSqp+Kjxit=icv~T8Pt_^o3z4)vT0a6;Ey9%{NP@ChDGlq%J$aUDWiy~QfCP%
z8G?E@_m%tNRkMxdIU8deLdJm(4yT1GayVzIrSVhgqFvsln491tg=a2R@p!gfmPY5{
zSyC}52B`pt1bor_>;3iAT9xlobgEka2u9Til;VxPA-`x5bgJ$amdy!Jq(?Qo0~7u_
zR~ER$Po;VwBcmk^@Lu-#Q*|?VG_V{#m5BT~YP4StQobxRQq^YHwFx3hK(D*Z(@-TM
zM(aYG1l9ghfTHmUN*qE*itpp-&Y3B%I8Bxma))-nXIhybir#+w{6S_b`s>F&O_sFG
zY__~S-w+!qnpxn@3MxEF_P(#u)_P?8aEOwe_q79~a3rAeL-6bA-`{t6U{*4y#exOV
z1ZWf`zZpM4&ythpRewJq{$9MavxCS)H8eF9UOjK=?8DJrySqJvB+!{VzNbkw*O}}C
zZ#%ebhjGcxN+{yF<&S1l@xkIR;&A3^E0hUIpi6^*Sg7%KH#Q;eS{iEI<PHkwuWe<r
zB#oo{%uuY>`^={IhmxH`A$a6&v_fTW(J4qFS9EDYf?%;A!K!M7Lt2)<;}6SomU-g*
zPL3;h+sS*7u`n^7^d?k{Rnc%K#bsoF7{z7IrLlk`Rq}OvXgJzsKZN}dj{7qX6g@bO
zR>9a0J2B0c{&}#QO69}UgCra!)Azs$=J=NO;*mIbuid91#$+Op)4F;U)5>N1*l_GV
zg<7Jp{JJb}6b5Z-R(bqtGV=*`ELSsj0-m2ECQ^)0v^C;;<m%q^;d6<m)MO40J4)qh
zYc3o=Bsmhc2sTnTI69MyKdF;?X|=wc*zgI`yIY6-6T9G_kM`&sO1Wn2W$e+wvfd8X
zo4g4wa`<_b7EBUUgy4*Q!~~%2LHCV#BO&VRJg}6&F22??H(!6!5E6jyEw!p;IJQJS
z)1fn7R#Kol_a$i=528}?@}a91l3|GEA}zZ$o~Dj9YKC^UDxX-oNhlU{np`Y)_b2h0
z%12wAb#<nj%_MiiOW^-7UTGziAc)(%d8bwP1eqzY`+-;SY#*F9J(OxC;WUYHVns|h
zs_~35$Uvqi9Eeo1bo{pmz_V&sqMgfHP4?)|M?49U$uqymUk7*yJUL?V^om6iJ58g}
zH?xjEx(v_jTBCdLCS{(O(x;DlrEPsNJMbacq^r$-=^}sOXfr&14%%emzv^@6K)x#h
z@Ty?_b@=r_ENW3llG7UHl;57e@VoL|6g`)8wD(O2?czv;*FKZMdsNMQxk5CZ?*QVq
z3i~B%bY4GM%~U~y?3H$@XVi&be<n$XL%!Bc&|e+z)4zYaacWy%MFX(VxiIIVQPm<9
zv^+t@&ISIkj%scsig=e@9XWe7{doE3L9ZVOwxgC^3@UVsC&oiAGIDzXfJ|Fm>ME-W
zMv%-c6Bl%`ndxo8XV@g)HGQ_@QBs2T&doJoNLIo4*edpKk`A<|^9UgGVe{r*%ye9<
z)k+R>(N&niN4_2#Lwvjmb}{5pm|Z^1eaX?fwdkNt-S0TzfS(bWK>~V08OCix1sayN
zr@#UKRo75)&yuDuPKHffSdVTYk-DWPMmucjkp{lsgrquF2Uu0hRak%Tz%;Y75B3wD
zP*wU?yF?|1H^Jpt9J0vp3$Bb`4?~{dzv<z(Ll~mzNd!v4o}NHx2~3%$aR)@=0dL_f
zHhi-WhKf7f*!3w3JvG?uB>lS$+Oq4AALz-2VkXNkI{(_u3+KP=Mvr6{`QJ27eiK0a
z{7nBR75k>AeKVd*jxCyuhhmCo=@nch>htsS_g;N{-x{P7s@2Msv<bs5H_u88A&V5?
z7|LM%v%9Z2{SEg2Q;{gERHPJ;K|t#4K|m<~xBcz^rXsm>GphYho7+cvHV#{(n4j{W
zaJpfjGKHFQNJNbq*lytE9D9^OsaTf5!h6n@n0Sm633@Ww$e&laxV`3K9<SQY=!J;*
zVq!=)IUVsXH~fbZ_0Pq6Jkw}gPlR>YnPp!?N=?LZ>VC#~dGwPnZMy-l_bu<9HU6ES
z1)Wx380A9M)jjVdx;M)=K*yUee4(lU$7J%@Z`VFUPh|V{k>6OE-(!o($<@*5PojQ8
zLjmG5t4@td!P8>3=MKBQJ?v?nHD9-T)w>k_u0DTtJ_TdHuY5Y*jnjpOaf07T5SEz^
zgXKRDEd1Y3>#(&^5}$Z(Kd2v8&lz?9R%Wr83?8I<OA_X#5h%@KSG~`AmfLUl{21xz
zobn~53V>mK5`^(v4tV|`*9w+?I<P~7vOjz~S4$95-Y?BijX06C?w-`&S|8a?7C;Tf
zE1|-Cep~!EpFN-20#gV2QKdD(^h*EM?o{qkYRl6T9>`vKziw)4^YZerSn|ZuLZi92
z^)QL_Qx|pk4>uhpZS*u&K7%YlzSpmp?Yf_v@Rg`(jZ9L!^e#APrd`tB{6p~qYj%K{
zcEF{v<S`+8ecqoQm^by#4=&5GE1uk>{Ti!QIeI1p+t+A948Ez{*5_1(7jHi=2i3FE
zuao(EbtPVBbF=NR3E%LGw?o%RclQXpeq9~=mzh{%GVWy8eTn@8M3CIo(Gqoz<jMuH
z$6>{<%Ct{mwM}EJ2y!}SFldMR-4TKRu+nz&%DJX<dKcAVTpkZl9pYB3H!X9*ftnAi
z;^6P%?xXR>ZC_o{|9d_<QkxFt-;DHf#22!=4L!S7$Finz>Hv@2y<v8idSbSQtEpv>
zl+vTH#TVTssHxo>{c%|){(DTdab_a*fwnAk8Hh?oQy#q)Fr(D6YL7FT_q-AC+(SGl
z=+j7SP(%H%Za%_585xQPl`Sm-_2q;<O2<VG?%=VX+hwq8JgQ?+di?cqwY@78@N#9S
zdo#Nr?t;#+Vb@abQhNgF@3N1Dj#SUL$H=7@UXI5Lt8&nVKC($UnY}ibMm1?&+%b9Z
zkh^w)WV8P8`4ov(n@Y4h{I0Z-9qUwN<QJwboM8eg$ItMV?umanmnS9F$$oe8tKD#5
zAYziP5{o|7bEXS!8m%~T`p2dgrAWA93c(jtv@nECq(@EnI*`aM#$3N(K-r}Fl~BlA
z^H$Do{ah3xfl)_s(^dHk{CD%97;1e)t(+fAgmRG6l@DAHGc3M!&=3soo<97ot5{V7
z@jb@&==PIWOE`-wNJ-#0wq59QVA_NACE6U$VdH#V5()_;&G1-c(jsb1?G2p6NpEl`
z>bY#OhX%k7C{>z41BJPtI1nFkshQCni$EQ(WtVR((PLc4_(&OhXTmEg3`=6$41Nwn
zA^`7>=5XbR4ZLa(5f`hvMY2~6$$0QPpgRz6UVZ6`FlW!%_-z=3WDzZQx9+7ydLe7_
zKw1BFI8v66ni>85N67A}gq~R6jiO><aH$jPkTj<n4G63?xgBp(pdd^=K&8r?kl2%k
zaeRtfnis(4Y+!x}d>CBItd}V=rG-3cyOcX^mRJi<_yGA$q;QSjpyWo3yV~Ma>)r&W
z6kQSELe30~3nlU10eQbHQB36YnpD>SWKx(VF*O>h#<3CsjcOWaXH}<{NfW7AlsMUS
znoK?uQ!p<Gf!Yn9I$U&|pCX#J1|E$j#zGb6jMG{ptgY7hLbl3k_blYAlezUq@=iso
z@PDWV-c#)#R3&DrC7G%H+8UC+#;Gj>88nWJNF>oCB3Juz0J`+l8<<ATWzqeXs_6$2
z^7bxagc*_GjAP5@2^O~@6ir(#t^iSnAt=f`vZsk4L9%xlxk5~?Wo2S}YXht;^|sQZ
zEnd%*G?%BYCTNDG6@H<4DGs`2{f5MR>R(sWgcl$}V~DvBCLL+Ti?m7l9HsB3ma@}R
zCbDinc}r{Uu$-dJQk%Wfu_`u3XhGN7dJ2C-JYQ|e7s@eGt9Ej#Drfr)C}1R=YTDr_
z+5bqzSEiVt(6^#b)vCgNx3BWH&$?dzJGb3@cYCQ15aAWyPGr2S;XF%sh~^Yql&E}>
zKatatsHs2^`?J2r9Mvk^oyslSY|hfDyhGbEEQe}1@Igtoa4I3aR-&KmZe;XAn)Y;1
zXXh4{GvXI9S=8xXxwwPbM7HihS_ys}GPx968+5IU<^vzT2c2*}oT()qBP<0Sp>_Dz
znE?@;#v31Awu}A@%4Hi=(vhZDTfa4GdB&}`ee}j~*P<&mMc~2%y3yjZ=idWi@mkZ9
z2A2=#w%O(SWB*bs!F1mAiSsi=SjJ$U_7+=P9eb<*ofC&k>e19Fe};e$O6z(P^bqLf
z#Aa!>z@}Tn9!D<cRk^ak76@GEBUeb9xbkm95cq%WW^WAs@cUDclXKww4{UAiRi>%I
zPHR&_zn<rt;Bl?KxBGnuq8odm&x>N`x0TvBsqgdT;$3-#Plbdd|Eg<N4`B6Au0pDK
zY<nDo3ajp^h6s86H{%a={5nmO2fkcq{dLWIzTlLlC!hFUu8dX@j-6)IdAZ<!?qR`P
z(<jKa4eWgXs{FdD6R2<gnmnfH6ArW&`^s+Eba^~7Shup+#1N>(QEAcPW`!-z%+}CN
zti@KRP4f*Tdp^WKOi&c!vRF_E%EeI-uxKl?PKo(u1=$aUO;S3}GCTBl;|-)jB2G6r
zKA=Ije#h#dpwh!{`^P_lv4lCy9ey`OeCDA5zsFQAog$8%(tXNU5Zm#ij<6cxpL83#
ziCFsH2PY+^sNbGXUm7i4H@O``i~$RphfGSV{9+GtZweG5RA}dH!k4n_G4(JE6bGqV
zG+);}<-0kK#izQAxR4KI1Yq$RaR&=3TV3x3;PIk@Op<g^GdCH|cw@BoHpB6TJr-aY
zA2+Bhp~}H99M;;rx%{CczZa@2*$Q--Pr2>LaYRB()T2d~iqu+8wHZbgVB@L(gh>5b
zE<nIZQ3(<amC;tNfCx1b_l}efcQsWv=ZMhp+CD|wJ{4dt>8wmt4<==$uHrCJFQ|YR
z^@`y{JLetMgEJmwyb6ohMzH1r-$aDHjv<dgA!5ZO?GZ1Lb2CjTh)Ik5r&IxtBI{9=
zT%8*lrC?(kE7gu37a?~>IVlPBz)AJ^*DARLbsDU?&kT#yG#a#LB*Jh{JC-R%g1Am{
zP9ROphd%lX$r!W49!J-z39lHjpB9FAJ@{4rkYR>ExR0H-51;$Y7^vyrQS?=B@*xsV
zrdCJlLb&ZhOYNu)5kA5aLZje$tb(!d3orS-ROc5SQZj`xgAI2)T&FR0Pp%G5bp~2>
z2HRm0XE2+8WQl)d8Abf{pU}NOp>gRgaKD>jM0D|SK~s!oGDhzTIB}P*H6tJwi#Tlb
z$z*_7h%j=}K+c$PDB4}G#dZq1@S4Oo7x5L74^T%rm$3Js7BK5++yOvL*pfW7CISL1
z$fc?JCEGGU0<2yJtiCI?ZV2Iz76O0YJ-jW_z_DXwe;PTM4^${SWRe1Kh7pcjnFF6%
z3T!enjfp}|bd)-f^HCO0iW(PZ3}S1bVr$>>=tq(U)v4z)?2r%$Vg?y}vpt)bORLdA
zlO$FJ8J$=<RQ?o1J_FF-M><td<^?I|CMOX-8MV_vRyCY8h%BW9NiUb%MT2S~YAKCD
z`x5uO>5CU80>maPN?jG2r4ag1#6=oYu=^`qQj&STkc2LN;;E0J=KIPtODFsx)8ME{
z#{9b0z0T^7KKybmC^##vuvE2sA^^rxdVr;40}_9h-(X+_f(ONBB_Yd2x5Z}Y(PXxh
z3l{NmoO+pOXXlriRd1=_x8_=ui;)@kgFUo}Mkyj+pg>7~minen>=d}oRBxlRvmLbh
z!tuDQx368ek+m4vDw3%+-?3#m_x(b;sGTWi!A{!~3kzhk9A3jP2!io+!egf#0^adY
zpB)BC%U{rOTo$zqqm*6eM>=^1hg$V8dq$vePUZ^2$_p*V*!5CnTi|F3kkG{(TDkL%
zy#_fmXQK(9ka%HcM1BDSK@9u&P60tA<p&Y6QvHMQ<Wv?|&QS;ADp?5n!wOEch1q6X
z%<lB97H-v(JC*s#ed9uyd#k*5-|q@eprX%zxsEoEu^pqJbNia5yD}Q9agW>oUEdGO
z2s8Sb7r4p=kK5BAah+85TGHn@6MnHBb>=ZVA{SlRpr>UHz{7eoh5$p;ooZau`_G6j
z+(4mtZY!MDNzC+*K+fa#Y?9rb{1^Mt5=`QxP}{$}qo|sJw`MUkTBKz)Ac$*tP}>n1
z&0tGrsLan;!y*9KT><93(APE7SMX~>d7f~hHs(E~%&v4uHi9tOOi_0*s`YrS(NsNi
ziwUzRigcQ9fh5C)b58oz9~#^&kTSVoTV;-<s&b#!a*9o2QRMaPB=;AOKc~2EK@L}k
zrKGeh+|+rxsiC3(;C0!Zm{u-oEaU3OeKv3rxN5(fn{sz>f;n2g_%Mm=#d>mh6Zd@C
zGzbH6PJez~lV?cdy8S5NI~}7of;teQe#%Ch<&=Ur%jg!Omi^1gx;dlg8SkGG`<o_V
z;KCegPjJb{yjyNo184hC@?ak9(W-~v+4Nu*BG;X}ICiZqS8;54S!fg#<#b?F1;=X+
z0;!h>20dbX>?oWdeb7X*rk@@*K-=%qZ>`e-YPgJiH)Gh)0L$c-7a5FA(CxLj*1e-M
z56A~SSN7nnMo7YshtQawevcCu+$5`%_xF>S%t}{;3Ca1plqKUZrx(L(EtW+aP=7g0
zjuvrv*<0edc2tgw@-vCu9yP!#F+!n#s4{rAeP~Gk&-u<iONsne@+uPFQ*L9N2{jny
zfmP)t44u&EAv1C|6Qa|%1O@j_&fBZk^{}0sYLr6r_n<1=kaf|Ja==@UJxs?mNw?86
z;STSm_guk<s*+~CNI$2_!AE!;I4F@X&p+Z!xcsq%b2FkN`|=m+siOC6m>Bp8w@(?c
z#(pLVs`&9sj!ypP7x7HEqQ(8_RD=BhyA)+(z*%A!<Rbs6P!g)c06Wt-1I|RBn9oQq
zFs2=3QLrO1f3w~~Fox<Ancz^^fOpS%@-aAv<)k{eU8nJZ6DTv&4wuK*dNzY3CnLl8
zM1JDAz8`RUdCbKPli5WmczJ5->_pS$Kq3@@-;4UMMcZr7F4CP`amQF-M<9~&+l|sp
zO@8u2Ao4$x^)|+L>fj$BAVrNJAmsmBvTkSP=)&k|`#+`Xm-==do1Beb^q+9UclLj3
z>7z>way+-UOU|r(>o{f5%eyworJ#$9A~_^z$;~9z-2?vSg2JGYi|8boN%gcS{fZ`L
z&cH=5&jW=$+y{4NhYv0e0ur#?M9J&yX%Z#fe4LRwN&+J?6pFoI`gjk00pry)4?DeA
ziK{{1@J(d*u2`|3#I_0LwQ@T~!3o{QB=EIs^(uZaDc*6@-3f>j0KCRPaX3`1EmCOh
zc5JP!Y7UsUHX$<fPU1YGM4j<Kd3JYE=l%AW`dQ9w$>F<*E2XkpF@fyF4)j=_s|;EB
zp)$fdXw=Y2j4CB;Vc1?%3B_uU=j|7!U4N!2(Eu!vhC+17AhryNIOJ(?Q8G);xFW09
z!&6Jad@f%UVubB5qL?`G>|*V-QSPjE4aV0qEdM}&5I9v-h7=V1{SqGIxXrHqoZNTR
zN2+3Z(DzHU#1NsH$Dk30=rcpdEt@P9oEnR!3HJfZpf2bXjI01oaY7u9HQ5S8T9DbC
zQ4j+qNg*iGD0P7WgqW<|CURID7inT0-a6D96=MDM?^kSLTM<Trg3}OT@b^~zbNTjM
zTPd9ak9#3D50RL$cp?|8*?H@|UFO^JaN-rA8G}9w3kwS=3!%iOHYE{Awe$_!!S0Ca
zVI-`@aiJfcw{=QGGDG&mt~i;mL%10Ts-}f(_rm@O-q+CSgYP&WVBpXq9Xvj^y;Sc$
z@0XVa`qkjL@rpS0FAJ>me+=Ap-75SCjEEgQXLoWwqg{XG;~mm_V>oZ-Gb<Y`Am)n*
zhiTbz2|m#FLSsM!%9xcR&=U)1MQ>EZ2iINCp;18v6M_@^nbFU~1W^)}6GtiF`H#bX
z!L{u+3vy*2cCFs@Llme@@#BL?py+9Xh4LUR=FW~OM(?`t*B4~QLSZBYlMo<TxUuE{
zwqU**$L*Jd>)4t}kKbKb?*-zW(}KhSjTeomZW^+87~u{|NXYG9v;F+xV&S{uR~zFC
z2|+E0V#LstGyRixSYZXL@ab`)XsnI|YD;uTU|S=E1IGQ$$o+&lbgwQb@wkXi{I*@A
zBg3RnD<E;OS%|0o`X4o6wGhp`Ml`sBmgCdNOuL|w2?|icT?0&g$@=mY&}wk{>0`=X
zP4n&Z!qGy&;As6WL3!d=AMQ-<#oGkuXvA`WJ0t!n1b48_rNuZSwPo6?9+#UL@qTT1
zFcI$_Dt5sX-8UMq0zcnePCS7RfMA<G&=BLg*uiK3^4$rKvXy;1hP6;>4ERs2gbWq_
zevcFS2G(c3ML^9Nb7ksRPAl>?j|#qtegc0~%pKZ=$nsB91y?EGj-w1e?GEL~ICned
z$VTA2`oc87E$`?G#+lWT5}#+C$zDIE2q6mU(h$4%sCh+aR48E1oSV3kAmSSc%M6Vh
zF~#WEdlxvgB=R})vdxP-I~o9ldi(JRg_Jl(IOnxz2ut-lDJ=1ZXCKE>h&aAqCS1y?
zyI%y71CoSdC_zwE3NASnKr;7cNrwdrSy%%Ci^bm`NBdg*@_2e>u%0Lsn1)lrW2h94
zVPcxnN#_ok7F5fS2iU?aNR3YPeM-ACHrnbF8^|frQC22tJ{03Mo~u4tW0unJfE`8q
z3j&8~&2OA&YOw{H0Bd37%*?+)GW-SlDT>yR8^VEy4>>MSDl)7iE*RDa7=)36wM8&z
ze>bQXu?G`g$m}d&+&f&K`s&)LP8SM{L=sMg;DI2-S$JJ}2Tbd6=@Diz<IMi<Qn*$U
zS!HbN4yh*5UG_1ng5-zu^dButI&X+Z{Q}eVg`m12iDa<^JKYeJhV^rSY|aWFyAm?<
zM5CNC3#*vr_u((x`v?_fTnDpV!jk}YW<YQ^p9&X9wPSNuE&JUDXrc5@(14ObxO_cn
zHJ<!D-jTud1<4p580Zy>?%&P7|I2ZIB80B<xYs8|bbKQO5W@HWI2HpAeK7r%YWeXt
z>!87IeE<CMR_$@})Z+l$5N<rz69$${eJ2$wUi^bv#N%6P)?B{i<zIJ*RcNmV`1p5X
zN7a3MuJQ$VbW&aZPUjc;3kx4MliKe8{=s8VJP<K@leh22jW@jN;O&Xqeo!@5r|0x^
zd9<0Y6o0pQ@xbL*P=Yo{N}N{s^pJfMfP%Ou_iZ;wY4Bw774T03t3$iUpK4V*sg6QJ
zr=nQ!hacC8b)lJc0V8x`VnNj`)8ZGZmgRD}&z@uv92CJra5!m^oYyEg#~N1w29Dfg
zBT^^X!2)CqukNGrff<o1gmAe1r7a2_!DWDPkl}8*ir;q?EK#vLZ{cEa5Axr?pFQs)
zP4o5EE$9_e`-~iWrh{X@mEZ;KUS0PVr(3N#euR-^NzBpzHb-TTF3@pB$RArj4}*Q$
zbZgS!+APw5sS&lr6s<<l4V}}0$^92HE&!+OKg<D#mT)ioE};2=<`<b`#L<UvrIE@x
zFh`LU8hird(XNB~k8*|(9?EzU4h#n*)ci*I=18L|Ig54lO(F)pKJJnx<76LC+U=ka
z5TL_``-NiOkk<z=MY<4VU~xc@B_#R4S`i73N7&*snv}%BUr*-X&}Fm$;AbRodJs!<
zh>ksB^vv*k<K{)FD%MDvOxJF1&OL`IRe&A08g*qt2_-tgr`Y(qw9PcduLQ*I_6&b8
z?H3Et{eWGauATU$i~14e`CGzoP(N%Vk5YZR7`=c!O^~9YUl&8aPQkB?we14`(x)B6
z=c&`N%m)r|5T8#PVfa-RkQ`q;6U0ax?JrM4e7J;Wv;XjHxtCK0jZQe?{?Jl5G}1m4
z-q#y5-jF%VrP9C&2NclbPRasF1I3Gfhi$$|dWP_xw6GNJo0Y!3wXfS6uxF1wi8-}Z
zp#Ed*%Zk5aV07=q!5iBv*qjk$B-JGGnQzl}m@Z8x@lAIY_JN}}Wp*TM&B@TKlO|oL
zo8Z+EwN_zfNMo|tISoeP8NpsIVykSOKEV$K38PA?xj+Y=J;EX*=A2Oi{E8`q!I;2^
zsBZ8+{F^B23Ikm48xfhBk{X){9U;AG)l0)v0XC);`=130nxZh$gU%8%M<j+dpzQ3y
zz9`*eU~1t4;*1H9AuLIir1!qkwH17(`v$q?@fpU<oUq9;7)@F2q|jM=a3;#sLr}y?
zlZS&(#!=$0c9#X5to#SDuSsmM9x_GTYSfD3fg%)EchCIQlPO@l@RfM>t`ey_vJF+N
z)dh|1CB(s*Rw?NN>ShJgzfsa?#qIyN{5G;YnW;<_1^JCsPC-7N@<Y}NK){d{L{AGN
zk-hHj)nI9EYw6@@Y3{mru56Q~+TLiDajT4vtjkHf1ZbtZwKwOPMgY|#sPa806VEj4
zUpK_(-j@@m*G~>KCNu~YEc1^4-Fqyv6JB#+h_=a6`vjLQzvyOhBugt(3IJ@P$t;Wf
zwO&a3`I?1xvgH#Au<`nPCEMxBnI5e@taq`8o7k0N5^X@!dYbzGZdUc72gVxQB|-Sr
z#e*16si2#r71JOa8UvTHL6@v3)zI}Xdu|r})r9T#Ai8eEEeHw6BCBY~<ew#uJcDMD
zNnlWif~QrL(G0#K1zzCw%@8|B+|91|vLRGD{7Xf0kyJsi&X=hdN!Bf*F4i<sx_6!8
zO&InJL#kc|7;njWs}hP76_My;y)DKrH1?gK=Bg?~l40IG`UZ3}))^KyIce(?8(WNH
zbX*4wTUo%4T8nE!tCSFPf=L)5NS>6$v<mFif|!z>GHSA`mIzk%;g-@DY9L)<j4QSJ
zztP%2)^^i1w8@B=n68PF;tyURD5j=-gR>eOX`B`)YGNuV>K)vyG1bMaXM>KAZ9uU_
z=;Tpa1~o^cFo}+#mDTA2KiGsaCvYUeOq;k!6AOX7n%q2X|6<T@1qn^m9Eu%7RB=NV
z{iX@3O|$!C!j2@W){b?x(Z`S9FdSWtZFqVM?D!l%b?maDBL_LRlH)=Le#PT^EN*gy
zyN#b7JKxeQ&%EZAe5$JYi4$>ZD$nRF-(Xv)qqDj`CfX%~(X5y?B?`78z})Tgffm=X
zp<g~-oq-U}MXq*Dcq$s<h({@TR9;PH3|OwOsk3d~%Lvue+?rWqhhd#<J<hsJB^;iq
z`gTa%1TksIm>|(8%f>iW(>fW*@M$8*N{0(@(l|p|#3ehsbrN7u#j<i!auRns&r7H0
z<=5m(p_WQyW=zrmw9~H^LLk9<(#+1sRb!S)$zRm`iEv81hf#Q`m%^Z<mc6Q5`in^=
z;#9fs1jqYF)D7`e`(;4hpA_>_PLbXeueI!_H+Qdr@Mn%<S*E+cv<t(10Qe$9+h(d6
zbvqu<r%O}7MU&AwIW^9#0KV$pT-2;+|I&RmhD@Zl6C%Fsc@1Q^r`PY@B!7+z42k=V
z1s~x@4G<MxluV7Nl1D<6Bap-coJGrrYn>lM&Y_vo92*#zG==1`s7`fZWz6V?l6a!U
zG4+)`@m(Aop_y~c8wkW^Aqqi?Th*mBfWVS@S>iL@n3P=5Rg;qDPJ3fYwy~8lX^ITX
z?Bli{%Cypz`4_Z(x^u2_E8V=hw3xpnnqB1{Od!WoPCnuhGvWRfS27}^GQwswb|;M~
zTj+f%2Nax6UZeET4X<<9oX_4|&|<B`4_3PE8XYM8;o0w<rjT37x6p3eMqcm~z#AC2
zhaIt3k^DqZ$AOC52{%t!e?y>(aj!#Rf!=Ed8KCyy5TYd4!qNsTu{Qhm_>$r6MAR`A
zes72Mqc_7Vh*c25P1dTscOV31%l*-q40+}>St<!d#Kt8vn6M;B11Gzq97AR2y%G2=
z1ZgR|#bepUQam4Nb0dM2E|U3#fiX^j8bpP9G_!wFxa&5wk~D|q&dyi^+=C|e+^Ihd
z+~)+aq<_I_zK5<FYSsx2*O>2lXZi-r#-!t|m9wK1&Qoz?7E8Wc%aQM<#O5}x6(q+h
z!;wz(YE{D|cQY>hp<@3a);XN(PomdbjZSw(NS;v!4^PAc+PJwADas1OGeRm+N{w2X
z{g$zUo4Mk2t9j!|dsTMbxA=8EtLONfa^pT|_q;?gcj;Kqjo}j6<=v2pYdRW;im%j=
zeLqiZ^qAyIR73p2>hR}f<R$O*IFH-Fk)^}}zdiANjaB2JpNJ7n=^f_<Rr9S^`mLMY
z>$_w?3nWYov^my#XVb?Pqt7@bZ^kWTNU_2Rn&y)vU@^f0-oe`mi>S`xd>eDg;bVkZ
z0!@8?RO`&qhztSS!!39yADfkgL^@_2Se+sEn55nfKl1bfe53IOB%gmpW4}%ZI?NhI
z*m-y8d;h=`OdRA7P|-@m4IBvyzNL-D00Uug0aTVWV9&58B8J2T@W;Ew`1N`IdxasX
zcSNBgbLZ7{<HHyA`?eMmC``<x=XoZ7hsHM$+ltw7gW>7@B?`4cGz+gQ^FvSuoOjfv
zf>vQrchKGz<1L%Nb%alL0VjX>lONrRU6k`cn}(~Ia{oO;u9lx*aK=o=q&}n1oCtB;
zhz_J*wxP9OGlo2+Js@?uwINx=3^ufcGse-&cg5qQq)I;eK$v`m>WSjK=mXc~;OS<K
zcv=B*VGA*sz0E3NbOm8y38$nXO(ZKDx1<v1*TA(hwXvHsxAL$3HDhYWDGtIHVG@o|
zS2wVLI|Tah{Lql=OaRTVj^W6pd3G-~OFDNKwmgP(%2QGJ0QJ+XU@K{`c<D}Jqhu=b
zuXmu={nJ}?GA$whoRrNOQ22>u@8!+l^RffXSM3{w4ypd&UpR;wsrh2j*}B>tyZZ9m
zy4k%kvGczTq(Q<jkh}`vCl?f|M?h{W6cgR`5L&sTN9F$s!S!YO9HQS=Kg9WUzQ-g2
zh)`ncR|JqYh$Lo2{*j;-3t?S*oyOV?VgGoA@cJ*p&M8QgC`i+7+qP}nwr%6KZQHhO
z+wR-8ZQH$fCw5|EVq<n9>YS>mr+he(6_xqt_p1T(wU(o{{-)U~G=5L`<C(tzkBDYe
zWgTllIkHV7o!RJ`6gYuVk=HP3tWy9s<ZBVz*FUIL{j?v&hSY^x-KIa=P2dtU{(R+}
z%n-j{`SWVfFIx_}3$`xOVAdH~0UIk7B48vUg#@c*2njXG5HgUMs?B$^waoKf3#b$0
zxfwWmCFJ6aE-nlE#)^4oqfZ}kboeZS9mfa!YH|u%3j|Fm;D8>CKg$gzc--o7oLDmF
z>JP(D4+>kv_KQwFFUGgCOy>q13*7J!fZIo({EoJOH7VM{6DjR+?vw{yO;UuM_TD+g
z9b~#EB9gXp8wbPPonWkn`WSHs@Mh@*@W)RLxc9EkkrTSx^6W(sMO72tOa|3Jh53z_
zp#=3l{6s61oyej(AAGoJRov}*gKFROG{c{Lo{W6}_^pd=vt72192OF&y5CT}jrTwk
zLqXT2h8v{>XLP5+#i|d||LI#U9!h;st07X-_NY-KPAov3c%wK196(9ndXB9PqvI+q
zET-a*RG{LoP*9{o5lJ%<j2%Pwr5BB`)TD|mz{M4gjirhtu^DlQzC}T*u6Urtsd~tG
za507PJ3u5LqB%QWVw1BYft4I#Y&l3*!jWFfB9fz$RO4A!#;G<nqzS0t`8`y^APDhL
z>QRG{CJrsZPY(3KT<BFx7!1eUf#ToVk*(>;vVI_Lp>mj$%^=~Vqoqw#o0+d3Ejg1+
zttd^mNfZ`aBCpuOkYNC`1~q12am4gArl8o3pVSwnVJ`EosztF2kyN&BC~aPQ&QLLP
zpFv5s`7q<r*3vgT2U=7=(PVr`O+8oZ=<CH?j2LTu5VM2q>nUL{vAiBz5M7G-dQnSf
zX<?pEW_Iu)Lsd^@4nc)6i+R)g6B+6p$vwgBc0^l4Y=4b5`+l~#!nC~u;Xz~01xQr$
zHEd&xABi$L7;k*fD(q)xgciM(EY{1HG)4TY=HA*oGrWPLybU-@Ta#vI8z_AnecH-q
z(7HMSaT9JnlHuGe<F*n&hAp`6x|7k|24%Xb^=WAzi)0Tx+1iZU)WW&bOHHBu$A5*Z
zVm9Z|#)>$Kl6Xq)!Nww}n=t50?qNDWQXE=_t82swPu8VH#?7Aj@A(m~fq9i>YymE`
zaO?<N2`4Bqdr87A!q*IEe;{*%D}(7cXlCG|-L<pT$_m)ni(FYhF73scO>gTTa2~f7
zfcmZ(rrGVXe%+eFuFGO@?2`WN?!_BBR?r&@+ukPVs@;wV%|B$<IdTEoT4mcC-nRR-
z3ok-{npZSWI-GK4X)hQ^FV-Y;VQB$aNC377b06jLp=GiX&$XpD;~wGe+^a0RN?P!(
zA7Ktw7G4I2ZT=$;uKxds!#4l?>Pbmh9ebdQyS+F`Tp3i<ZB-JUO)3EYG-u+lrnDco
z=C2#u?2;WZsGW6=q*s~pUh0Z;8=Jm%dsTA}0z-{Usz+~ZE;LWuiXa)bDd(G%%}q(s
ziP~d!>x%zI*3j_gxD(e##`?PD*Y<K}_YK?$=lh+qg0mYgPYYt|NZO#2nVk*lU)Sb;
zzMix!n=4!yFI*YJ+r+7{spm5_^c&bA>~}CuRp}*FtQj|Uw3}`%8@D^YI#k_QW*VE}
z(yJaROU5XA0gPIM#uQ{q?v1w1B@s6J2!V~b)IAIT@6vb4%GlyfUAIfU0o5`Wk19Mz
zVw8R<c#?Ykzl-Hl;mL?@UA6279`W9+rew2AYvfwDX8NUe<y#Pfoj;MRO|$&t*Y{W2
zms_l*|5-{~$JG#f^49fn{5v**dzRGAW^DYME#cFaXj6WqwLZ_NNM%}Us&UmF-!f~H
z&W`x=<NK;<9K1WLhu!ax7kV?&U)wM5M~!F(O>e2^K5Cminq&1H`noGw^?Q?RbE4Nz
z{Iq;;UN_{aZbUm7Prr~8=(t!5)*N{7dW-~|^&#)V1ke+U``KqTY(Ef<jf=BMkMypI
zzigmb?rm21!Cya-aOj_Tl;b{#p@_{z=K)F3pGlk3!3N23zP}i`wg>tuk~gP>0R!H@
zb$-8J3DaZK$l}Nd;Ijp!{P-Iz5NPgLfGyXU<C4T;Xf#}i(+cp#cScNe49Vm(jZaIO
zzRpm11$#2OW2Im1Aif9rp-KKB3W(f!AvWP<RNjXTv-9jE(f{~1=-{Y>+wbmz*=LI7
zgn)<t#ulux5_!+CSy-l@`^3SfpHJ~aP+AuIULVW)Mjj_+W3h3$&p|9#-eFDUMo25X
z_B{8)*v>d95TfW4uv|$kq=6Nv*2K&jp_nPxEJ05*8Q`+@8n9U|-%s2#T*HP<BB~7@
zq-no#JZd3$Jwh;cbW7TH)i~L}f5Gdw8aSmCPcD3Qk6Tw%)pW(?=^~DpWII<LCM(N)
zs$Cq%#Gq+d!sh<AsA(AR75@>)J;uaWTRlB>GE30YlQx^!04tLQ)sh*n6x{vlbFDQk
zGsJ+%O{zPqD8s`Va}D-9o+&s6rWyu>1PuJ?gYrlo&LQlgWUCzSSzo!#xb|eayse}3
zR0oK2o|I@63>-(#Z8ZIa&Wgj6`}W-I$XfPHG1qhpSTj!qnFOa<?#m~*3i6#PPD5~?
z*>GNtgK;zq%*G@_ix#8ZD0ew+1XCQ?1{qM>TO`&`J})THR*CR87|(EHv1+3TQVN03
z<8p_Dw_xqY2~}_W_Yp~MhS3YyH)OdmAeTZw%~2as<OQb1Xc@_ejaB0!;{wxSL8>w)
zI$+N<L=~r<2it3^iiLWJ==Ztv{1gc>Ar6=<R8byarh1c(Of**cgItsv-D(johtpyN
z0j?~VZV+IQUnQEW2q=3SUKMKG0ui$rUZm9w=#EDwMQzM5upmcI0c|k>5gLl@42psX
zBa0kfqz1#<zwj5UIP1J+oY|N7vL$^Nt^`WEq=-f0AN#%mTU|2+N0|0uBl1#wL;;#7
zt2zxcojyh9$wGBa6SG9{4g)IUI!sDUEoRaymBnDw*e@>RCPy1&R#(p3^;c{ARx*-5
zGX6y;xEUDHk<G0HnXs%Xl4;*@1=2j{?!raLDMO)L@q!2<#E<qIGdg&<6dKp7)SABu
za34!6dDQ>z<>$#!V`<j*A?$QDZfwNW&C9KC^GN*vs!^r$6r{@hW|s_6003<50RRa9
ze+@1pJAGRhoBu;u*#2)Q3%J%!o9*{qexQ!*hZmN-S7uurGtu;EU1l>8_6NmjY=@o#
zk&R~x#s4h#wsJo=ySe}*{6Q!+)x6GSS$Z@EjT^ew*ackY)(vrAcr>?4_m^er=ktD^
z#(vy6Jg0YNfLvQ44jvzsUz{>^z<UkIr5U9cY~pf65WRwsnO?}o1D})`)`0~eE?J&}
zIH1XFFy#Z2A%SH`x-_7%`xJruEN>ZKR!t^OzEVdb45nxVIE>KDY_P-tq4_=sgz6d0
ze3|q`2;;u}w}Xwu`cW}Jhff)$c?Jv_!uF%IK|uNckN|S~ynl^cKB9NhN~cl^WCdqP
z2-{N*f}E5^Lua!i8zt~!!r0l_y&&ZiP8If$^k9uk0*lV<$V?Ms@U5-CvqgVfa6+yr
z=K`t^?_6olzsO=l5yW_~+%0Z~gbUf*zr@U6kEA8w8)CD_t&^mOIxtw~e8aru=IQnF
zb@6ceEt~cIOyZ?{_Ikzmr19r<dw9K1t!LfNZgK-}MDv4F&gF<GIwm#PAifdC32kM|
z^MLXVzK|+|K|f9$J&;L~YgYYr=NTxqIX@@c(n=1~W;@ISI@lxv4J|%M9q3ym$qBnh
z9YTx60V(hQVL5IC@k5d;^B1SlK>J}HXJL7V2KQG8P$`G3zZ^If#WD#mO)r^vup0d;
zAG0$n;2*Nn!6z}y9fqKUI-o`fL3?yZ`{0SR^MaYP6!eN}^LiVzZqw`%50;(uCle&$
z7`z8^Kn78w8kQ~GGvh_57}pom0pQ{>MzYZlOo_}F0|Fez20^1g#e?9V1Ji!IdAfRz
zTi?M8KZB20f(TMI8U>XO@}m(>pV`-LjSe;es}Ac&<2il=Few`o8aSDfLHW!te=VYW
zZCoJ%O7?H*|9j5#atyRiqbY_AluU;ATBwZ%K%NS{1i1BS(|by6sTsH_W+SL_$G;Zb
zfeuLO+bD7lssgglq8e<{mH}}R8EI-JC+Jf27i?rsXD%@0PqOo|ZccOC&;>u=9FYcN
z<|~z~9x;Fde<JZ0bo9nMI_!-3Cofs7Yq>0y{Z!mqlQEkOzGBgAtZj?`H2@Be0I^k7
zM1E^M_!Wlvad~loMyWy9QhKsWoM9x$<X`;UAHzXUsQk4)M}zU#mHCAAVElk_9}GPl
z%^J#P0dec`4~D|oFSbq5K>eKTUzXOe1FJyZMub^Tcm}cM{p}kO#&V`1Y2Y8ldBY-(
z%6yKG1qB>+1sp$1iW_x>tzSn45=K4>LJg~~B6~NQ@O~4N!syD30Lv~BQXo=VGXK9|
zr`r#@fwR`2zX9DCYGJRR<w>s_bb8cJ`VgKjK))gR>f~2_oSt@)Bk=m#pic|shOH&5
zy#LbwS+mr4FsR5N!pza(2kW6XTqT?5!Be~xK~<s^(Lz7&x1x?C9dE6+r}uvHAT3>w
ze%sSei1J`-)01w=2q{`{c+vNbUZ4^(ngmrCx*Tx_SqSSAYvi<WKU?_Fzs=_P!=SCR
z=wX+Lt9$bu?cm{$mH1S8hEK-4W3yhrPH}3VWWV=sJkVH+_ezO>=T0Ai2d&PGJ$F!C
zqVyU;JQD(@ZRohgWq35Zut~Rz$jiT*A9wgt*Uxj2evh-NnM<7B@j2A0yq-Sn&fK#)
zGc$4m*v*l%{nbYm<|<m6o$L3qj1{-Ex^AB|4Mf6chi_PZ^}lz6{h26iUA}GOJRmkf
z9RIc<wK{m$D(=pb;kFP#T#cbnn(?#@rJ6J(ZOH{K3^2Rsaf_;dL5Q1ltNsf@{C@}G
zEvqn<R|i>n|DKueE35Fgbs3ThPeu-iYsvHR;Ju6elzvvPDrq#&eNwdb=?-K{zf|*$
z(%{jQWKb04!+B}M-8rSWApP$^j_m82{Jqk&r!$g!B2=o(vE-9?1Bzgz_>4Mb-r;~z
z+&5{&%UV0_Y$8|=U#!eMi2YW?SahQ_&-5Vh2;Pf>N4TW9h8~ewHBaOWK|uoCA`g$7
zHVOMfznzRv-_hDG63qxG&qE@)GmF#_KxH@u#rrwoJ}A@9z@O=lc~Q)31CC|VxSg@x
zYdL7`kL2LVeJcb9!#TsGHy>X!I1HLZ8kByQ@%l6%3+(7F4x><TPe?d_&Ai0;8P|a3
zDetW6%s^cxhA2>!qT$2NLcnE6qgp7i26H*IPHzDMf$0EsV741ZKagL_ws0S!lQn4H
zB!P&vDL+rgC8n9dDvops1;Fu9{vehFpZ7q;En~$6;~Y?n;WnDIb@f|0`n<fJj~fsy
z#fngFtuBB9<2mp}9!j?NiLFEMPFF*BD@sIhDP@3snw>rQC5SKQHBFd@ps)or4%hIg
zNmh8t?x%t#E@1JFk}f#F$rzAlLgaz6J)v)$WCebcuC8$ws*>^BT$-w-c;|L7Ns$Dv
zt_Z29GAwcn-++N@62J+WQywamiP4XW+*+9leLbDrzOT)wsa11(y_{^WyVO0D9RLBz
zh_qh@%K=fXafEfjj3m;|M}u6@!WL*S-3=fh@-Y3UwK>YO^0f(;)pWM$E9|PJ2PH-_
z-de>!f3f^XqRf804b{H=Cw0>?^_vwb<2`xKqB?4uV{)2Y4FNL`5~w77E}As{3XKRp
zL)AtuBH&g5;^DT&-Ct_hgMd<f2a%uDCdWR61dyqx7fLN=O8Dt7p6B*$B5@9KJ_L6Z
zuQ~}*epL+5g_od&j3$_wKE3$~$$!fcB-cWU+KD4iQi+t}3m<--@deivcIh2ZVc47F
zt1tM}`RJ0CQlnTMUON*ys~-l{$H@?O<br+1bbJ2(d?Rm??x$o!@PPkfEP?&R%7=mG
zi9!J?d5Q)ArdxJex*_`~F}(mYdId+f)|6hOMi3ht5jlpe88ZMz;mBo4H_eS&1wj!4
z8Mv;o5v{5Iv_(r+GEBUxUMFT2O3`r+W#N=2?T01qzwW!tIBpd~?Xm|o@9W{(dDV%<
zU9wG~Y9=dcS~s!92t@W90;&luz+wyqid#2UhsWsZ09y-w`Tx@5{j>4aF;!^z<EwF^
zGZkQtD-8(*Dut3_P2t8(MR9%!pzOUCw&a>B5<j#QOo`EO8I^<)c3BZ`4PR4%o6>q_
z2i#cph_TJPMk$ns7W{mj>S6`qEuVlPi(mhjhZm$T0P8Xl_AHeJaFik1*wv&Gwt9^{
zmB#Kxm3>>IBVJy3&Y(rz*)NmM%<+$qrKh%5)g?(CfPIZsb<2d9ON{PWt9!;jA}a%l
z*vq`E4$(67y<YjoEGkHu7T+ViD%|19N0F;&njw@3enZI=A{cP`<uNQHE&v%uU+fm>
z8eCwM(NOStv20?vYQ&Lpyj;;y=ytGyJ#zvLK};@LeAf23oNH1jk%A?E^F&r_dVE&?
z9}-v=EZa@kH$GEQCBwxS{67oJo$H00H7hPu-GA<iLrGCr(qr5{2#6v}(r8vAZtHnS
zqy-(+hc~1M?4L+YW!8cs=){L}fN?}vvAbP(Bm<*MI@<}a4#aAE|NR;VM$_SpA+)4K
zVxiR7s;z5yU<;jHgj$r_1@pSfzEiBw_Mf7(z-nHe5mL$?L(w8rAcavU8LY_`I2nBC
z<<0mdaGu?AyazWla-Uw_a_l=JfBNN^bV`0SB1uP-xlWxmQLvK94AJ}q8MFbek<gIL
z1YzVE42W~T94)d#GmK7wYFIpJe#|4lN^fjYbVKz(R2?sI<%_J)WYv~u){b+o$lNDS
zI0d&8wZ816YpJ}JH<FKIYzn$Z3UZ(keO7Mf_^b_g$~<^Nu4GawAvbKLK9M<gJb}TY
zIF*pP5Ze0OJjIio=X%IV_&WDTGmOM8>d7r1N)hrohla7b?-3_*iX6<N2*XAT9UW@y
zW!^V~1y;<#%w1`~U_M4;7>@w2x)aFrKw~rUaZWag6E0m!(e{QWv}o!$wGb@%5-qV2
zH)BTpOQ^vyREU{a0r*A!jx}=b%f1Xep@i2Myf^!)$7NWJ4kiz4`CTa0wlZJeoO6|D
zlAm~}zgVzL=_(WA0h0Z!ojuFb)%+*#_13F6U8bst;fPY<S#j!A#Wy!dn=Aaul(r{k
zu2V;vppHX1fJDi#u^GgE316;JFlcjk=i@LwMjWsM#2=6v9`D5@?uT)2%?`~X0U*W)
zpnUpftk27GKL%C!DDrWmI@hIPWR}73$ne%D@LMJWKOyz-5a+A<8DAI6jDY;qOO~+5
zjQm*?c_F`CkroBFy@&z$Lnra2M?3|$mkh^(U+w_Zt&<^ARohBEZ4H7WXV#Xt|9RE*
zHm|bVtDSqvo6x=SD7bWgEkiYQi=}Lk^81KJ@|aXqG4D{SKN<wJ`p81^Q`3`C&TA5@
z3%=v&r6=MZsyd<y=j47jz8s@vse!7CDGohY#;#Ct*J+i6fsoan7{OAX&e*s2q)>yc
z2oS>)T~@dq+RH>+$NO<KsbO(NP5<UB)Jt&NHCnKw?^FVn+EAiN`=~dtxbzj;Gv7H~
zR%+f8Tg`QRP<iOoMx*zgYw0U_b-=Ggec@Gi`TL!8n(58!-EGc3Z%h9h3(uRKi<|k-
zOHS)F<yFunS5&oV`l@luN>dTCZ`6FETkfI`Y!h_pLTGIib1d`UaI#_9!fL*rQq~@9
z*K_e}x>SUl++u1t*ZXRt7qE@+2dlEu^%&%jD5m7UA9Ui4l#9Cz)ILPA)QVmbtgIDa
z*DujhEX1|y;$?wxSI%**;ig(r(OfxKyH1fF5Lxa}6GAuzg(nZT@=btE5Z)u}CvfdY
zIJqwB_F1_%yQcG{#gtvAICYs&U1RWtTpPo{L8uO>g%U7p{E%{4H;vA5rn^eFW+5bE
zXwx@X{2RK>L???JF|-Zwizs%Xtiu<3*FsRYo1^8RVS>_42-{Kq_<iOYEgP*S!k!>!
z7mEH;dj`{H0)XYD*5QhmL*c*dKA94fdXfq|TOXL6Bn>xA(ndl*DY*+(+n&x#-#KkY
z1r{1iu{><_ws^fE`eAWTNRl-F@ru*ex{aA2OuIz<iQ0qk(0~&*T+3uK{*MqHX}U~v
z&l2xh6uQtUdgz|a4&+fxaM$)SfXHjB&(|6}gpJnCAr@J3lRw_t`OOvyW3Bic1O)_4
zFS&R$>d)KDAy?9Reb}6k$)?3<i(j@cOkex++_IdU*eR8S=Buq`%i0+izrfWoS)Qt@
zN-*U(Y_^cD5o!=~kn&w)1t+6%iC$)-AsVc$d_noioYcd~29V#Yp>m3d?ao|#9D`f{
zHnRoJh^!QgdG|8!;DC_oN8rwx;SY?$gZic?<K0ILa8ZH18SmpFNZFtJd|ha2(U&4c
zyYHUPG$<bSy^yt$9a0>=lb%qhc{SL4a)AJI={f-?wmc)zt1<-cU0CiISVS#xQZzl|
zgbTE&kN?l@0dP?*cow;i$Od=|_HU^V#;$SIz)gxPE8X=)yRZ7#?^stS+fCnn?FBn+
z3LzT4M-z|VXo?(DJqutALR?#~*Zbk6TV1(O;Z9{SmV1YwnpAF|&n#E(o6U;Af&j{g
z+$t3E9X!tkqr9z3uau`r58|4P&zVoZn0TxscNjL_Il6R5?hY%uQ1IM58pnPJ*f=%c
z2|+nHHC|KyuRA0~+tV^x)w~mH>4v*wGT@FMSd0}0n|mdpdMBE?eW(zYcJ7B^C9FbV
z1%u#Bi3DH8Cf4yj+fNj#Z*=C}w%|vIqN6dLq=$ApcgUh;NjpXw^`hIXmPTv<9PANQ
zJOKrCfx$@PSd|C~O@B=Cf~5yhU=rT7P4`4%BcGz$`h`_0&PkeL^rcRx^21lYO?Evr
z+auXqxBn5G#I0fOb#aT7y&#1xW4@P#TQXhXK)ob9D98_JMS60wHc%XSsZo|?yX@pX
zR&g}mKYiZ(p{EfXJCRsIb81Xuu5X3%pBmZs`QZv5tcEV>57k9ov@Znk7jX{iVRa;x
zndZqhdakQ5hFk+itzK>&ek=L9^;CW(v@c^wj7n&2MI?RD3<c9GCYEgSI%m_8T0zq?
z;dd+iF!IjS4QPM5`|zZ~J~aoGF>1aMz)uX!2Eadcm>e^B4Q2B83krELQpU@hFSQA;
z{Y>?+Pc1-?!~z{)L2kC}QI*SFmGNXZRq#^#xdV~@@#4EW(Ug{X0H;9Q|3u+_&(>Uf
z1#J8<`JZgEqA{yI(2m<lt?yXhonO?IYW*(uFi%;F)ch>s=hp9@=|SL;Wrwzp&QAWz
zOlBcDmrRwT5T^yfF*56tDqFY}3>l5$`N;Y3X^Y|drnH!C-+w+1kKZ?w+UWE2ef=I@
zignS>c>ZM4)A4eJtkT-nRpOnX&4U!b?Zk@9fzEi}6+&|xlc<RwcL5vr=|k?qUaFSl
z@F%<WqFwI@Tb$Buc%-;C?bmibqK*MbrESlg21p3!O|H$Z39i?`+?}gCYa+_m^?Rgr
z-d?I_#(WD$x5N0?K31dFUHG2#&e<P9=(r*Hp^t(rmV+^Wem+Zez<$@I&k~L9P=wU(
z!_eI9Mg4^auPgySkWo`Wqs<Vi!`dNf0D8zhvyn0;h?8pndT`Sr;@=#WVV5+t4xV;V
zCeD&+a0k)cp-W-D`%QtEy*H3RUUpQZLNaK9*~o2Iwz5$v1*m703784qx6j(yG2MAq
zu&L_17G!74POIvk+|1|Z9CWS>Nt?ai>`)0qa1tJm{v;;q8x|A>%>ft*MNY5}VdA0c
zL7xmopRgRI$u^lDpd3}YI5w;3^&F><h8>E!BR!oHI%z?DoPO0Ljtfos5SA^h(;L4C
zJ(yq?!n$eyq}v55Q*1(A*HETqVM1%P-XyLzIhBr`v=`Ozi*UF`GPaJGj6z@0H|leZ
z@Uf2g{+q^8u6xk0b<nRvMBB$-_qFNGeWk1U8jWrJ+Obr=JVVNNDK(45V~Li@m9dU;
zw+3>Rm@Er;o8_<j&_KBdj9gEPN*%n%|6gmDJhFbokvISVbjJU4?b62BhR)(Yl==Tn
z?Q%)m%V|?A@mD|3NGOdsuz(`LF?lUAJB4!HEJx)0sXl4yx<J4{;s6E+0<W-r-TU>^
zWflgHgk)->^aid4J1RXRH`muq-ngxal*<TXq-r?tFY~<L`@?3=fZngb)^tgGxT(93
z4;fw3Szk$3#34_Xxa0=%m>@x|g&<X}2~`sJ`7=PcLC$+EjPiK|&yxvJBUHKoYy?}6
z&3OcE75VV2A|2X{RIno1g9=i%%}trn1-R0<m-=YNo$$U`6vti8T#C`Txf59JfCWJ<
za->BfXZn?aXE%|;n;<jh+PZ~1S1%vy?E-~7z~9G3ntO7O6LF0^2=XGAN1CWb^{%d|
z<3{v-7)z|DLX*}iwCjt*r;~M}{-^Dl8uK5Nu-wSkvN7^9^_Q#$A2yz*U3*?+_scLx
zV*~3nOR;7?-uJeE^dsLrNcu#}_P@ypNpr46e>Sr4q4<$2Kt}9$;%e=DTkZMu*6hXD
z1=0lm*{u(DwV}7Ee<6)MGO}ug3Wd7)B85O>8uiFG0~0if61gSfh|eICg6}Wo9YdZS
zknvgE1m{AOJSioJ68$~okYZwt5cv2Wm>E__hSQtN<0TtlzPbYIARmFxH0t`$cZpop
zW-+DeRRX!+Ku<Fmd(QCrer)ma`fxQd?Dn637?L3?K)ymVu`tvL&E?;&yi&~y>$AjS
z400#5*^CL|DfzXZ@X93D8cKb$z03$z{x@9|i;PL0K)r~f6km&$L?J;aZkQ?((C&o9
zKdHQ5%-9ULl+y?!`=yyqKdi%r@Rn?Vs0!ql$T0yG#S1~6U)L(Aj`YXJnNid5K&p9=
zLX$%<s@3p<n<PZ{s&Glb2up1Nkx(Z$9f(<eXM!LyqpVqzY;hXioM<MALyDBe`RgQQ
zBV3PLFyDYwsWDQ91ag%Ho~2omFYA67<KvhKD4HW4K^oF@tS>XJT0xU4$WmS)R$gv*
zs~4G@Xi8AMnu(>dA4b3lY(hyzDVpG(3@qBmg@+H2CO<V2<TMhEDE5oxK-ho7BR$Df
zQ!FA;;>?ETAsvAB%XvR|Muth2LEULY0!(61j7(mzfgmPYEVC!&?Z$PusU-khk6K6b
zJY?lVD0wz+b|ya(ojpyx=pGi*x#R8YWg1T}yN|QBulMJ*s&rMoY-qFUa(<*e*^{`Y
zK9+D8)5g$_@o#vmFs%olZyUG_wRPLJx?i{@UMEW*xtMYzFdww0C{>ryu&a3kP%-y7
zGoU^FX)pJfNdnls5*ZpaOLQ3UPCZ0I3z@`Xf5v>b&5el>XWHcCs9fT^9Ucdye<ETS
zsT>rnB+;5~Hu}^*XZl17+K&;OXi(p`h;;eT-GGr?Ia8r-w!6+tXab~qw<bNoI?-ga
z0jX)iV}xU*o=GgG{)`RdlTN8Ni_DE|f@2V6iX7Bh=)R%)G)1^6*dC&`CXIM(hix9f
zP=<Eob1o4Tpb9mxt8@daZk$oE3cy8}d@!O%bazgdg=k(16gJ)cTTzD<733V%2+nkR
zvh*yocNEWev>@oQoS@1IE*X@AJ;ZPwg+5s@JGiNX6d+?4=-I59zX1{&!}rsMaS@38
zDs%llIKZbPlw^SMLm5%B8B!qCs3HXD-{#!5F6)Wc@OyOWQ(wyO-b7R;Gm^?3=?K0y
z>@o5gkz{@jzCMl)wh?|mO%6|o7T%8ciZQ>ZsR#!Jnx8>fF!fx0Z5N*IOdkwy?X^LZ
zw-F2a3?;L4@OuAnhebdxOt3DuHhH?yyUXnDyhUz8ydLR;?uf=P*B42E2OlB1&{nmW
z>4(-JNFSEB+w!Zq%vFZI^_+bUJKjz^xxSgFuk0s&zx`iHi-a_LZ$X*6yPMv2S*g+X
zv&(4TX<0$`v-T)JHK&3*Ryg=)_dP$-tj7*$#7~S=?;v7}v7Db^k#8`oQS5EzS%G(_
z?w@IluTdSJ;%lE}Z=Wb&s~k2OYVc*8U)i-y)m8z~6K@}vOpz_uZikx%wvT{#bC*I@
zwor=jdUq<A1e+d%nVF<><nC(khk$?=_&l=yxkT*p@&32?&A=`S`h~x7P$P#-_nZ;#
znyBCwUvL#)*r@D881e}ygFbcRRiuiQNx{LusE#Eyhf|8uu&$KySs$;iXd|{&Q#%<<
zlN@AyXavmpe!qlC;a{Fe4p&vgDzg(f`!W;DUcN$>Y(Sd)V$H=yCla8PEH&yx{fyPf
zjZv(OcBq(cbldW(&InWQi>L(y4q~JJ$-k@+NDLvy@>`)A$;Smr69&tox!wI&TaTQ7
z`+p+7SYIjK?;I@$KPnE*U~=Tu2_b}PlLHCB0`CCZIgsIw5r0g$Gmz65l~SmvN<|2c
z6)-0E#bgkHK;aOlDMpC=!&v72KvUX*C3_uc6`_EJYdo*(q+erVFu2`V@JrrDj;)m?
zuR1yhX*|WB+$_QQmzyJkXKR-qN#KSP>@na4?7^@S{#1}ch4a%QL*_Bx5Y5ygTI>&7
zA}14Jpjpe9ViMr=lf@>juwA}cj$OHw16)-HjdMu$*D{tTn>Xg_6OO<@nvjlck9OMr
zMfH?wd==65tWz=25EM3*^tEDWph{=K?+wID935P5Wx&?4Q5=QgLsjH;9!P>S$4NM#
zCeN*mPpot%iMvE9gi{{<rKUCU7}P|p0{=bISk+X%CPgjI2F*Yzgb}|<f3cRMbVtEE
zcq8*5bSRZ+_FN%N5B(yJI2aDgk8FiE6b&x`VO=KkKd@?r0MQF@qH+~1^SmHPojeT3
zoU5wV#8Pd)R-O^xgMg0gqE5e?V1Wt5kUpX$JOkBX^B9UyJZR5@$P_mvBMU8xn_fF^
z%H;?_Fy*wgOM{7NP>HlLjV(CvtKO)`v6%-r)uXRgp;(a02?5aznu?!jpi<_j)!Zl7
zfl{_q6G2O~(ny})OV$}T4A^%BHRYnjmQa2uPj%%OrEi{2cI4_W9+D&qn4_$m$OYV1
z5uiRVF$xBoTZH7*C{(ck?A_XzdFU0YuT^L`!!^lm)Woo-`YPvwT3^aAQLdZck&6<3
zZH-h4fwRT<t<h>$wxU7hvD?$TA=*W*33-IXi8M?wm2P(<s0Lo1bKR}JY;11I^4E0W
zFQKABE9DR}xSoJ|vlE1%;@=dF27b&ApCQR}m6W3>X@OfcCJs6LyL?vWNnlbc;M&Y+
z&7CUui6KPdTlK{<N{wtUc1w|YwuXGQiY^Xx3Abt{WV>PIeac#_^hGdDZ@<5#jU8{D
zfSorvgVrGHR})kUKKvumDV$PK(zFns5Z{k!NnDilB2UQOM28N?PAG`L#f*89FH(O&
zApj>KDar}1*-|^zf0;zCb%fbt6FT$^lgXL@B?lyLJ4sJ4s4njOg4e!PpBtnRX~@kc
zvT^b(ORhg2f?c<vpVriQa2ePd&h_OtZm~fZR`aj>ql{Qu2QB3$ik~F7iR=ndt;S8{
zQcBah2U`&*gLEcM)Zw|lZad77q6rFoA5$JKq^|N}onPenFJleY3+%h9hWl%QUY#)d
z)qVZo=0Y#b?KCw9E<d%+!RDB&q15GarB4@0I%PUWWrDwDJI*iW8w8nwA{Q2#0N*bs
zU?{V#K`ir>h6~>tB(`jNHZ05)5jT`Eu{^RRH%XD6HI#ut5Jc|o&@U(8&i`^7cAB$7
zmv~S)t4?8?^Y`y^y~n77+*{vO*{oX~U_cspAq`%?Yg)~J9&ZSA$qMhDeL2)GwpHss
z4pj!}=ugfc<ROGfu1O@g{9M@jaxlR(G@tm3!Yl96c<JhjVZHbhs?o`h4UF0(4naeY
z@v*G}!6IxlZ&?{R=TsDX!xv1ud#m>NmM`|zmi(Q37wM=F3I98H5%`G0xkkl&F$it&
zKm>0y_Gpv4ME5NWgj@+)<bFCV3NYs*q8$Y)9SnKt<#W#GVnGAqpZt^QO<ByU!}Dv0
zJJ{W*sqnt3t^GlIq~*sRfnTV@oN3ATF8#WpbRRUMVN?BUTQxcq>$a8;nubUYb5x%I
z%q1Ck1~LEC+90z@l9tDMmi>OZUzS{$LK}n;>}xFDa}5#un9Bx5L8j~ibuZhe(ObnN
z-|Ne)-h@*uUwD@EMnbCYLxBWtdF&H?l;6slQB&Fj_=>e*f<z&o)82|=cSTrTK~l2l
z;)6Y`9?X0sB@so<KtU-7-{#9-oSD`x`<(MY1l5Fj;8rX@m;dib2R5wS!Ec0Ewq|Xo
z$&jQ+?1rQ5mn7^{uSY9iPzS}hf~l*+M!9iEKJ4{ONZp%*O73-Q0JHe|R}R;R9vutj
z*49}JVpG?0UH{ym(jpl{_xf&Oe*RJOnIG-b`7Ofkp5?_&FjFi%ud=3)V~9d}Lp-_$
zLoEW?-=PocTfGOQ3Lv2@wi(O|Bqm_9w8EByB_aLVT&GHvUj(Z3JIC;?du@DeoJ#Rm
z0}UElQ6{KpOnS~&QIyhxK=Y24XQxm=NEgm?JkTYo?ue2bp(v^ane-)J(2<feX-#Hg
z@qvy_vs(s5G&t-e@D+p7D1!jpYbFDgY(g>dp3pVWUl!J2L^>ThkmY(UTi-uTj=q@{
zh33q(i?B#hIa`hk<Gd;6(N2&@`eQL<h`Weg=^LUaAX*TA)41ttp|}yQOXj<0P94Pi
z*&3U~vW^Ha$QcxI=(|yXhmORd8nGPp7=JZjubl#l(gvJYRK#~4Aq4b+=pO&AN&xL2
za)K(+%*{cd2DlvkZLUsij>~4pkPj==K_hU1OZ6v$1IASW82a7UjSH`rQs9?vE5b0g
z@*~ccWJRypq;|sq74s(iLLX;8JO@`bazW>b7ZrX1sS$~#%cR6Agt*=QT`S$3G5z|O
z%}5DK9K168BwZ}+dZLvn-fXv)k~kHt*)C1F7BEed&xK>&HlRpK5DS<m=+}xKah}-4
zR^Byr#m?(pHV<Op&>LPshA`fFkfXrLC)>P}j$EZ8zbARnK~*pgdk6yP&+!L#+1lbk
zf9G1isOC*$cq&r~g8$~)<fJPo`A#kmZwl${cZef@=`vt&f=&<x#2_eVZ^5#*Ye(>j
zn1==d-*ZxOrPTrp#m=;ol@-&m(6U`Q<w!Q?o{0)S^1T+0_bNN;EopXtn-z{dqu624
zciQqj`oHJr_P1KL-nxB1^=SB)sPBYbn5Q>`yirz1Tec0o1Df>^t4oQVB>ZvA(j{f3
zaJflCNtVAR5L)0eErsrqXlFf58ub9uRtLqGxP=g^cNjyx3V2Zs>+HH1rl>cHs+RKA
zrPJYh%#<T>`FB;N*|M^Po!<~d{7fMduf%6xYbXl0;_)9TXWFC0fKD})T#*BQ<;$Vi
zemG3?AGNTY=Di9&swa&y+0QAY&baC+6~IKJ3$Nu}W|b}^8534*0Fq9nxbD|%P!*=}
zQ>=rz`q^t`{JI-MS@Z7|K73f4Lx=mH%AYnYd@cO3a&|kHz>z`dgPsRmoxZHW9)n=q
zsE$4~*J_itX3$?HTNq4IvBXkCqx&gIC`4yXH;&B3knSQ~0f3ZF{#cU;hh0wkR@Mnp
z?DFHbe~HK?T57AF8v*^TeuQ+c=@E=eQYbdoEUdnW4+XY|rLY4n%;0kcPzclsLB)yd
zah-cWXsb}}Gni=bq}W*YOO5>UKTW!_hNK(&NZCGtFVD1H>IVAY^)&v$l?2-lQ5?Me
zo%h<s-1~oL)|guRkt;Tqk~z=^HCV@D&)|E}RZxn}PB9Cqd#x)E)hv5G1NU$S?0VNK
zciZZ+Ak#RWK}Qdcf86qz(LTMv^H|Y#`3E#$q>LL@dhU|!NDiYHeZ3q?DgZonqUFcf
zU!KqS<uI52xq9+s7<>l#F%JCDD;{oIQHDEuFhR}9LKL6jJ1_sffa|U?EgO2_3_FPv
zE6JSUKP?4UescElav#QA-H$B4->;8yVg&pIfR@ko{9P`sdl@<xHke!vH&b>2?*R+b
za_s|<14c8?KP*BR$6=}K1*iyP=U-nfi#&Q6i>gX;f$DchscMnMzk2@U_6owSfBX3A
zBo{LsbH(APM}e5q_`H5t3Fi+-NH(dIuB0K7@I*R}Ba@Fa9hBr;7B*vASClPtnE#eN
zkx+G3+Gd-g9g4-L(0<<k(h8v{y_S<lyWUs0($k9`WiL~g8XVuy5S<Ml4B=i>CIRIW
zBHY0iC)XV`!#DhFRff~#3?o{NfABD=43dj!QCN2_`x+#1L9>FkYX1YHrdyC%$cp=P
zT|<rh^A>D3t-8t2j{e8wY8QI3CnyOGa>YDThf&oBnGv;>7c0(AY|Pv>2hGNlTAeeE
z-3nyU{vyXXZYAd*+2-1S&N+(>P&AUdh#%?)UFhc43Z1P`)J@lgT3XOETnTG}45uZY
z#|vjlJRpsN?+$h9ZIG{*ukIC0ZB)$I6#!eAPF_BCjJ>Ep6|Az20fGJHbH3{p1<GNn
zcLrosQ9Zg9oyJbHkgJpErb37Yk!F}`Qq>yTMM(9tXEN65N5E*BtJINlB|y-;nn?kq
z<zYFt#1%<TWVN5_od^LWZzQV=g`~~+-j~>7Qp&AC{_=I@!-=>R`-7Tjqo&ePciBRI
zPIVH4@X9btBu7HRVKj%)?@X~ywlTFA;rjlj|KiRMQOt3l_-UD)Z7ZpNIpbgxXRJu9
zHM|dy0Cz^X_cfrQsPzSf`%hxZ!stRe>&I2JB!w_Ig+kKSNV4PK;6ChwT9~?N^b@%Q
zTHKPGT4ZWrE?N(PY(lK^Z%<w(G@GK-P?!^GKqHgFE}lV@E|RS>CFjXi?M2T6UL;$B
zAJmlPNHpx7blNm>6>Y#flLZ)hdqczXO$a2)Qoyc*+V*05Ub-+c#aZLIlvX_4TLJyD
znL&6p67r9`!lcQyfQGcEiJVH4bDVw`pfqeO7bQ4MfCDG;^h}0r2r`GQX{BOC{kwTo
ze+8GOe(#fDNal-kDNlsulC!r(Io+$~>Jlgr@mA3F=I-|^w0x<2qvTS)hKLVf7}=PE
zW|j9=(_S^e35mqW3$cbW$>iZyoj+Y!-FctL%k1k=9T>ZnktmQG^@HBzRaN{`JnFgQ
zva<Eu5_)Phe7|4)%gKGR>b&S6`tgsl$JYOZ@-cr~g}u!em)PjBdv(fvXch6>WTb^a
z&nC|Qlz$dR*#qltN}@lp?s;B1Ib5|a=ET>~(-qTHTeLZr|LX9#y>!mz_`bex>s4*K
zR?`8gOTQ|wzO3l3I}<$~KF{w#cKwuEsE>||Elpba5H(3bwq!%{ga{_*p7uM<`Sh-C
zq)*IJ&vQv>*$OlbZ!~ctBRgpQxCz;UXE9%Dq|Dx`t^drk(5XDHN;DwFa<RtMh2CCI
zO%WzF72gj)Bf)gNv`SjBkskWRaS!9ro8Jf|h711ccP!FPc>I0`$SOLBa{rZ9Sg&N2
z`htG`q(3oQeN;y8eX380>Z{zHeTDtSJNTQhXk{&-*5-1AnQJ%W%z|z{JR)w`X*XqM
zbei<uBbe6|^;+bLK-=Zy$9794^u4c~1`aObV-eWpad9!QI<w7@1mC+Or-nT0^!fH>
zqKh$mop*PEDBM7)d%7z8Idq<qNcVmCtoS>!v$OK?%JP;LW9MZIP%u5(1qoLV836F~
zTh>FoX}bm1drG~;1CmIJo@xyewIManhe8>TccvUr2ys+Y0yrsWYMbOU-scvY#zEr3
zAsMA>5JQk)>1f7*9`*#o?8lBIqVF2H>NV)hb}6j;qnd)TC_v!0VQ(brUOMka5oXKt
zQF1DSHlS#Q3SC1nos1fMC3PW@2y(QE<<sK#FYiO~@`-$;Gvh*@hiiA{^^M8mBG`#>
z)QBeNQ@{IPcAKP8#k36HLM+?iS}Ptg@_&7K(!PMX=PTZtXo3fuMbZBqbxRguK)nCq
z-4h_n1Zn3I?AY4!KXDU)ln{R(U3sHPKU0ZBNF>E19MKRkAMS}RZl?_^_EFFdTw(58
zrSH(*YM&ro)w3_kZ!)9Ta%>3D=kmsI93UQ^XGVp%>b=N=V!uhleC6gry{6s(d8L!4
znerSOhWe!hHBfW^ng=y7mTP2#zg?DGo-;(^#ZnS)sPmZE!s-!c8}s_uTHvDS^@=84
z?WfGJMPVUT@1$G&K)YvK!`!g5lOd|-ouej8NFip4NWPuKT9iIjeHU>Wy@oM-8ow~4
zMjn<`>UKw~@U(qpv%LF<Df*@6+;iJ@%ltKT8?!$?DDjUu-#D=3g7t}FidaMuAOmoE
zVIf}cqB3vu`{yOlpetNGS|PL64z~J`ZflX~rTr~^LE68YC7&oh4Mri#CQj>XFHy+I
zf~NFP>;hcVW_S4rN_r(5?n&$@=eO#>J9WWBJxeZL9bO_lPDAM}biqS87>vL#trk|S
zpM8X?pxscr2NcwmRq9CrQnDl&07Y~;D4Bv{W-#w5QqMQt9KUcL2B}N(qT3XBdX)8b
zx!%}B-Y=3Yn2+a5@CU}V7`frFb3LdB&DquCNzn>Vw6;4GRE^3b1}SJ$IRee;&q6!{
z4`Z~!jo%EDQRJb<N~MeZY^o^|7tBH=_Y4Lj*}Ho*q9AGlG9#w4cLrl&A;F7yH3qOm
z(8t5N%~%$#sonWJGmTcwejY53z$A=ifNxMHv^B$1@pOxKz$p{~oR<&8_aY+-x3)~j
zQ2J_R#vn2h@~`9O^_C~^ehg$5I&RU;iE}nai`ILQgzRpPaH=dSsNbb)b3~>ajAMA@
zb$X-$Q?SxQzf2uE<E%#O$$F-X=$BYbW%VTUj)}~uW2!A1Xqzz83d*#vzNje79XVrJ
z0d{oM>Xv<-<MNCJw>1mFX;5W&Rr91aBaJATCu$9V8qnc_5OdWw{W08Cb389q8X9l&
zL-?sI0JXhVGi8LnhteM;@G%-njYV{|BL7%SZnMv!d~b!s6k;qj0|&r@u6V79v!~@F
zOKK>&@c^N8j)PnUhbEL^!}LMNxg!njNtRaxmDGtEwNmp;Zj&*d8Xi63s(?khqBuxW
zMzgs=E==1oqCvF4O{x*&xFNfgCrunSws5Sx0#|Z4Aet#Iyi%&PgP`{O1hr<U9RnQ1
zJvcV6uK?Vf@B}^ZKuw=>vcy-1kECO!a@J9Z@znG-ykAosDBlO3llTj09|gh{0mYEV
zoOYil^aRs({;RAtt8g+6?-FR!Yj2TlWp<Gy*~ehe{LW%ER|V0%5>@M{7b0f8D=d{N
zK3AnmqRj<6ovP6mU@NEUmE$fv1+?(Fxsi3@1`Q4tz`9U1MVleS1h@c{!rdSgtR@V+
zptJk8N>2sRK0u@%Dt%E_+*m9hwrJQizqTzy?-<VCvTyz_hi-M0zn_zFZQvs}*M_nf
zH~DDDoalbwdO=?VitL%8rCDGo`rsdQ-x;re!CN7RR#1{_p^sxi0_*G=9hh0r<Ud1S
z2};_hxmES;&u<ZCeN6F?_~)IlnbkIb{nAr9h`buiPGYFOw)w*P+lQum(e{PBd@MTA
zLyojHVDA#Eb+>$%xY<2JB&M*I33My<T);Y5IB@{^l}a^&(J_s4$#@L5M^Z66FNW0Q
zKp&000JuTy+UO#lYl%c!AMWFWj#;0>;E+ZK*KkG-IVjMHjNOrO<;i{P9!Q@BoRS1>
z8uWps=$2#w5Jtmc4zehI0D=7R`@U&2#XO5JN)&TRUL+xRI)mB20jzkp`oc?l!o+lb
z3j1&#08*eLJ*^>ftCm9L>ZhVk@BE<M*?x%xzQ57`Ym@Unlm0^w2mpWp^nW0b{TtBu
z<7jDX`kw@{|EAAblV~r$$$&7rd#cP+Oe^)iI0q#wpk)c+0s#qS#V)%TsgT(|tZaq7
zSs>Eyw)@XRdA&<kL{aNA_w)URlf4xIO)QL=PKXSzAbq9>Y^IoswQrWDb8JlfvnS|=
z-1{#^Eh=)-1gTx~*9cP7;-HyQ7M$E8j&Yg+gIVagc&ckRSOT5LV6Y)2R00!h7vO|C
zA&A{#U5IZN@K-!2ngb*uEz}T%F|!@RDJQU(RC?ncP=ro-_85_&hGUlMRi+YiqK3eX
zjm$y%Q6&k|x7%Q(i-!Xnj%?^9FEO-ieKK~{dv(2zQm2>=C2f;hMiPS#T^g<=EJl)B
zaWA|&r{T6Vc~jKZWAe#h;qGhLs{YqFv>VUW-sicyGb0zjAXU|<#^iM>bT;#Vv&}@2
zW`xMUX3`(BvmWA^Ko=D`D)O)NifRpfCiDaEB?E|O{iK3!KTKFxq1mDe_uMv$d6W?#
z;PmKOT0OlvZVsMEojs@H?g9;eyp3f&<@rWzkB;OEkg4euOcv~xM*V@8E?XY2{II1i
z;HN^X{YKnqJ5d9?X4uS1**Pk<GCm;kJra)a_(o228d6EnpY@|QTN`_0<Cq_Rcf^vb
zo7!2YI0JdKTAn-3l+w9D?#X^!g$n(uIw~2orJ9?BWGPQweZAe(NJUy_ewe<pz;V(F
zTB_%qn9@KxSJIpz`z2N5r|SzdZwJ=w{1iD*%NHtbqFY%j8ygQHX7m%-(9Ur+PiZ_J
z`{Hj~xbMy#>&0E}dOky{tx0{4{)wQXzcZ_qD~6rmZZr5nI<GE|%J-cYckKW5>@I=z
zkSu`!0MsD<&kcH8dz1hFa8ZxCuJRTeiqEdTgD}38{dygrGnT;wiGWgR7U{8Zsn5fB
zYd>9UcY+BT*?!-vp7zg6VhQqrp+<ad?F{ehnFTK<oB@RR#D!oedqC*=<!WD?Z_bQw
z(3JnsdSp~o6sULNMBmop9ow=X(K5!47-IG!5a_9ngU8r6BUzzN)ZC$v1HRI}6J%#9
z*<@LN;Q%gjyKx-gkEBxgI&k<uxHiY}ykPkrS2V|+S6m%SFi<y%o+u$QUYJXH5KV`q
zaiY77z=2ih0L+j&d@|H;!8pzO!PA+Ehl5gd1xZT!U-*>Nf~*UMfoG)jQkQ@g>K68l
z>eWk!KvoLW7-SFT33OQ*&O?DQ#87##pgf^{(Tcc{5FsZ@4VL?(At~_!Za7z~#o9ka
z^o0$8VuM{J#3I>mD_x85Q&n*c$z2e76xocx4qpAcC92|SenWGMuP=L30CyQMP4L5b
zA#K@243~5Uh6EjQB?=M^7?8e0&hBFl3}Th#@@gC>hq~#512`l&{p!Eg36Y}KFZl!#
zMEdJy2vH@ocUaZxYP~Tb`G{n8;{G<s5%RsvGOtynj?Up2T!c+N%Akchhxo)I0U8jq
z&gk`;^(P1nAhpN}I)_4Q#NB-edP1twX7B4{ccB&v70_N!;Ez7o5L7>JFF$(?R{*I3
zO<7+38^CsL(x##(=jV!I0<pn=4Ak6+HBb7K@HuZd$~b`eC*X8J@o&<HkqZ^KWz5Yd
zkDZIXH&$iu<`@hH!O_!?WEuAujw9QZnzaP7D>^0P9ywuqHq8^3PDuQ;rd!q}+X})0
zDOaM@Gd^rMvWJ?HWeF+#19`g!uB&SRBfk`}7|MIgz$DJ;D*&f|i&*Mmxly_XWGk6l
zD=sZqsD#Q0{dCA5)LN`!7SBdX6hN$%<HoD8PE-uo0^LH;|J<(3PfQw>MvvxivP*!%
zSMuVPWGt!GW(0CXy)Ztq^W?P{@`W8Q8!6s<B;{{AQdWgT2kKz=CNrAO@<~gZ^G+qQ
zLRg%5fZ*+?1=v9u@yhSpC6pATKLnpW1lv#*38q#r1w_xW20M7Ue6-(LAEBzl_`2R8
z7#VoY5BI#f=g6)PnLWbfNB`4q=@vvOfmak(EyxegVu6e$>Bld2l2lc79aFXh5}^jK
zdcJH&QavadVq0%4<(_I3te;78n;=xif~x(9uXCYUJn(ITaf7}7W-zetw$b-q-}c~4
zCmky^zqL*cB#Djb91q9;FT&2TIkT{9)6t!zW81dXv2EM7ZQHhOqhs5)ZKIRvnHtnP
zHB--*{RejKb*;VDc^!wB^x)$Q#9y<F=j`LiLPweGT@Y3wO4k8n-%KvUZL2Bg&FfBF
z3a1Pq)o4CA%hGxMd2wQLJWOV<ZpQeRdQ6{OTB}?i+TXKjte>ff%XLraNFQjNx9Fle
zH%PkE3P-eE<i8H3G<|_uEkX*sap$_SN%s&`^kyl`Z@kC{ZQ6?=a2+jmNe%{p&nb-_
z!6R8*x8$jlp`x)s8%uGeRcnfz)Oz4j6lu!fGv6L|4z>kTdfo0;N1Key9PUTYKc!CV
zsuqj*m`}OgWYh9$>2i+OOPqWiy<MCgwKse9^5e1ya01PlH0d?3?9^98x0|a66erBP
z4uN%opCB=&FL9~n+j?P~U#F}UZMzrENj%3hV6<XN*mqQKH~(I7UV|6Av~7c*8C`Qp
z_aZNCfBav0Cd4=$iKu_&^6{Vjn)pB5#dI>aFm?V<1=GfElMUhfM$ciqUN&(T)SCa2
zL};N6(`lPf792)EU!2KizJxNMu&OlX=ktbQJkf+ys?qkFAZpaB_cT^{)xsaNZtzU?
zUL?QZ=izwvx=8m2y&VR_J32jETJ$aqDs5`jzI8>Q`~WWd7ce>r!XO|j<73JcS6R4I
zbjys%lv#ZeQz>7{Qn(X<h6v9*BGd(Xr`8^t;swpLR3D3ZJ`WscFarR688%A*r|XAT
zOW3P@!X(j#5cMb}Q#$BE5|ry2yCU*(ma4QD$QE5UfBU$0e_$&c-q$Q>#f)n?*wK7M
zI7V&HJOZgHdQ)l3B9R~;!Z=WO7Hl~y72KxDmd#fKS?`J&f!F>p<Qd#+Uy_zkbM|q;
zw&?GcwO8MGIZ}QLG>1J3e!N#60?xbaapCpm>-hkRwJi8#8tIPS+laA)?aMQSenL}<
zQdBF7JA7?NZ;=PV$0`92jaqsT82nSj%BTNbRslyWwI1YCXk}LI4VM}iglumkK8=}l
ztu&72ul&fgW{bc@CApS1mck63BMPSsDRZ`I?+9{OH9xk~Sax&SlBoZDC7{9gE5~@@
zd;~n5zux;ZcZBWa+_cn`Qej@vCXKh&^ZXL0K;NMW9B#D3t1oNX(UZlIBNdylC49UA
z1<`)8kp%}oDb8(g^DgioNYDD=Q=wm)En(7HCl{XH<_-1Zj_TE@sU}9R^%7(DbD5hh
z%cNrC;MC*%(6ebc-;)LW2h)>QofqDxJacrhPC7)KUMvbbv~r@4a#%r986c73N$)UR
z0IS|$^>Mq4;O>Ze6eNY4e+ALd=8e_!`e~*F!5fIwxorEG1rh^}=`$b<9tVPXloq<E
z^w7%?=3pS5uarxY-yg=o8={Na%GEm2n5rP93jGHQXw|=Ur-i2HPfJ?JAOz+7&Mf?k
z#%h2Dh2O#+6e5|wv)bb<O!*6oabEbjb1g5>d1`;vR6<UG8W}BuE_5<`IS`)1%@nop
zJ$Jbj4rRAaICDuk=#I=iW9Ao|x7#`qGy3BG+icVP-SpDj3zvSD(<3?ZR7o&hgrN+X
zn8?j7W<G@ipGcK`ZAjx?bT>Zr3rd0$5?kh2;_qDxvF=TvRnk1$NCoMhBuo;N8Jkll
zvY>A1pbr+@wd)sKvkNQal7QDQP6!@crZ_cqs?=ZJVk*lBB~Rct^-^HZi4PZHe#`7f
zBZq=pgE_6sku`>;v|vVc0LGt*fsSKyY<gNIN-7mz<u(yIc}%L1w$9J~kMzZZ@thWK
zN2mSu#>np^xURPy+|mnd0c9*g_^tMIgg=c~+uO%>;AgYEe<=hzbY*yIjiw+olhr+|
zjs)>%S32M8{oXh8u)g&0eO%PIG%RisMXd)8!XSjxebwgv=1u~_5s*{uzsNL#_ZUO)
zN%9_wh^o+IveD6Cajl!NyKEn5CT-}GB$4kQ0PCC7v#$0u7P>e~@C2g^=P`2)C!1Xd
zx^%)J25LUMiEuaA5^L0V=@Ck1rlS&3EZeAyX9W()W+O<iYpt(L0%XF^o}YeOFyG++
zwJl^0%Gbkz1p>080RkfW4|UGQ&h|f)xnoTmr%g7be`PL!gc;66i$2+jKIYOHY1D?<
z<tX|}wl2+q72%ggHKig%qUzSj>*lS7KLK!LV$P29&7j3dBjgp`3vL(n^Q-F`9+yO#
z8&hZQ>D13fRj+dx=uh31Bi-7&A_+RW*;SCVAF9BNF8Vunibh;_tPvYoaCD3a*-;Io
z7lCl|Od&r>2BbzpuwdgB5%MMN$^5}0(w#-w=-RABKiXF;sl`mBG(wIyo{2TuaA1U7
zfcgoIq<TDEs>4tcf4xfbEb4utv;@iCFR8NM5DXA+53%C=0R*TGO>X36MNvvksU;y`
zEesQmm@-k^k^%IXv%l<ePbaTTdV4i%JSmOG8r#z*E_*~T(hi<Z-ig57{mjbhSngE!
zzBr7$Gtqu~<&nL+bRs;&(nfN`5%Bjd|K{$IB^^>Xj=ZMikS<`kw9n3o$OoF!kplw>
zGxLxO7V*=NhRu-9@#_=5?R+KJk->UO^QJUj`FXyx<5n-0u*00ekP{pLBod9odHI#G
zz7(>P$nd0=;=C~(u1A_%#&Aa^63_{zb4fb>>w;fFJ=&%Y%{Q|6T3XA-N#G1MH$BiI
zHIgA;zP+7)zn^=5rFPVP<GqKoQO@$G)F@)QmSz8`RkZZ@f*G=u<kEmE0mM_9*@-4)
zNTVl-nB@POzu)=uY5R2O)k-en+gBL|8mQ(hOZU_N0$JhI{3uOgz_Phcc}}}v4??U(
z!V|?0G<||9vZI}jcU2!#*D{F8cR@ME=i=)7?>tiOQOBzQ96&qP8?kW^nK0CB%yIqr
zQ?zqr`Hx*jy+*o*UEipFri^f+<`k>@!{u!IuwEQf#?E;$pUm%2pCAKvd_s6!y{i%G
z8CuXeuU;i31%ubs{=NO469FM8Apau#*%{7QHUeQn<P%s<F&Xb7dpTFV5C~`9owAE<
z1}z_H@DGG6SP?v}1FQpwzx(J!{_tWl6r{fr?A`iA<0T{RGJpn>a*9-Me60TZiuGcn
zQ`NvE$?g?1y^hsl;hYQ=9G|q*w~0eoc2zWAvdCq`H?klxa-jFe7{WuMagrZdEHcR1
zYroJ-)X!0Rql$HsRmjN)G9VIDtVZ;4qb8gapOw1>w+q_}n3f`#cypTq9T-7fw4}Gn
zS;d&UrylSFY_cMA5pOroI7l)D*PN4SS5a*L87>OrApCoqW#EJ-D@XM1@Tp(@T=A@o
z<BrDcUk=yb&$x=IAbZm0vWBpS=V+b#O8!(eNe5D!_w(V_mp`?GCEj?NfTcQ;G6Lcv
z3paku5#PsM`RlC(ZS0NfI2D}h;0G%FA4A)F6Wg7PyU^Yf4w4E|#~x64L%3|mNoPg8
z#b%7t?H>`uTaO62AS{?u#s$ZfO`?n|LSUq{7K)VPMp}Z@?R78{qK&JgOPF0X7==C1
z6kR5xl`g3&J2b*YLY3>O)9_iBmVtvz8qe4hX1LWWg;L^%D_6+RQmx@Ct#e^`;c6xO
zFe~xpF0azhL?*!BURj%?em*}T5G?$5*;Z-wCxoX4<vsLHDAfx1IKc7jK`<drcU17+
zJ`TbPQeY#3-6mh8oURX}<0QOIgjV~oPMQYX9j*DZKD#V`E>nHF{gLf(#VkL7hhe!b
zyNFq~P&q5po>GXUcI*EHut~k{NuiP-5s;>F%}!{gcVqVA<#_YGyLx+0c+&(4SV<JD
zik1(uCQNFoK7>ikpdG)bb~GAVW<;u;T=d;m@2&7^nO*T1g0^=YRjLQGU|wiOGEj0v
z!}f~W&=&21(*j9mGY~Q0C5?hB$FC-r63MD1uPg8j+@p<=Y@19ayyQtTg6_X7(G(0F
z5&|IMX!ye>K5|7$^+v%w=7GMvG_PiAOrC?CZ@0L0YnozDJ@Dy9lcL;yxO4s#8A8r=
zUG0{O@iv{HmC>Rgrpl_U33D39&vlMog`l!n<IhfK7IAXF7Bmxn!`;6Q5J}c;k=F%|
z20|85xUhw-l<sbEH?xJs$k;-5QmXEE*WbZy-hZKSTO>^VRc+okWf5V-Z!N^N6;(oc
z99-cE5rtyCe68)!FY{TI6}Pequ8n4^g+t*(qo>$OSNhFOR+$YG>t4QZc+uzl!PX<d
z8_JwrSy(b-O;^>}Z@r`vuIUN|qnCo-X>EY5*WP%c8@*Ba(l}VdvC^6IjAp9TyST8P
z93!ph!gNWhzx;(`Lt8p7tJ|Y1SM>s6m8`>kH_IhEAjcx=<s<QMV&darjIW#KQaQ9$
zZMblcEH)l1K8E0hf}_<1=BJdDzc6(2($CJ0^ZBLG&pRiTj-_EW;iht|`l$T#cxB2I
z^B^5?5h$eU60t}s4+l17tHC0g1%2(ZF$iIv_IqV+M|MNMFjFD<H{%OI^VG>a4Sje2
ziCGm{fI3)IiD(t{37pq5MdUOiKruShwvc;EEhYBKZVFBdD~Wy@>DZ$*LBg5*&=~mA
zATd0}Elbp3IcCkjuTA;noOfc10gXF$v9F3s4{~8$v87^}Gnop!kYu7}sUosjW2%lB
zmwPwYCyevy>gwz0={l4yW=)U$9MZ6a#hc`|ybd{Ci15nO(u(`WS(9BfYlXO}08d2)
z{^F#+r)fD8(ROZz`+|PIhV+_>a1ie4kHl<Cph{a&1*Tq&h}AAWPrc4B%XWr=D>hn{
zCX+uR3RKL`J}xOLib`_JOx8|zO(IyWGrQRiSqHts7{qDUG27*FjpKHLrF*1T)gI@2
zh-qsamR-ZG#&(`qS~kC@_L?Wd_pHXtthr6Ojk1po8=A9@sLoei3u(|>N!y=~?16`)
zVSY1bEYc!LY<iYyUB|2##~xk;)>0Le4PPDJO;F`j%@KfA{mLKJ6^E5)w5q)j7^rX1
zb}~<u(JeCt#UU9M+!b&}nvm7>dc1is43C6Q1HWvtG^qP1-}oaoWkhYLhmQ|u#o7hC
z?t!%1z%TyX5*E`pCw;u6Zenr^)(+@JwDgS)l{5(f%|e0ws|IqTJ7mCWvf3imcV314
z+zoBE&Yi;If#0NshhA7jW!bmUtjN8XCUW)ZOlk{|>4Qe8kbt98G|Vu6q(P3dfKhyU
zmL3^M-X<}JQhTIG=h87NUEP|Qbp@cx9FF+E{jxw1kRf{*ftX?&IKf_Y322c>hT?np
zouUscxc#|TDKInetY!ZfDox+q^E-wxq$aKXi#-ur6Nk$4*bQC*gw<@I$Qe{4<uNTq
z_EUX(8a8EypKfJ1x)6nRc|~?mQ>Z;I;pu8;3xUnT4yQ(DzpBG&U8rL5?})>-b=JKT
za%0^HDzRcUR&xb-l=D8<j*+a`21Oa4b90#Yj)kkS{E&SR+olHdM|h`BXSHCvJ8)Rt
z`uUn=Av(XFibYumqGg#@UgR>+x2yj|7}aqNCS|m33b?rFHBc)(&z_*IBUS~s#6MyO
zmk-JgyC99r7x5&GQA)V|=%MFy;U!6?2=FLtrRQ0iY;{)L%A8_CtTb4G_IK&Zyp)y~
zYV2;`y%kRHP(!AtCl6Z_ce)DJ_a4WdC(~~x|6+G*7N0dm@e~>Gm@X-;&f>pdpYh9X
zs72h!{D*p-J)8zhFdKY)9bfn)spKVf%4KTIceK)LWK82lJXT+IMD0AbKh^cP?Su87
zd~C`Z%q39_Aq>NT33ZFkUNS%$s@p2-ZI`~IB6Ts8gVPwapdh1obVkY@@O}xgw?Fr1
zE~f-PCP01#1lS<%R?fZ&NrfkPEg$)~xT@^u!Q-L7<~fmX++KY?-lcVED!d8}F>sB}
zg)~@asJ9KfVQo3X018%WDtPd)1^QO#UC#knZ8D$?%$skCc9qNCrkl=UEip5;xon~X
zESfE4(0dTN6>6|)rbmfo(}a5KX(tw>lm?c#b^A#zacl)~G*|QJ#A0l&&8RthDs1y}
zOqFResY_hPuT3kZx7L|<zBt#`P2e3G+2HKv+_>r8CAqHI(SG0d9=w=8&aS=>pqs>V
zHhi*`dU4oE))?0*WxBq6ygq+ji2(4ZNqF7A`SRzi@mdH_C6I%xg+V(@F)xf{@Yap^
zel4AhJ82s_C-wg@5fbBxwHwtQI#+I(J>@e7h>WvJL5~}LZ|bCp!kSmlV~Rx(uFSc`
z>CAY{q>3P!I6ZZ|XM+|0s2?xHM<>eDAR3+}!WMYP!Zy#}KA{&tkistWRONbyuxSxU
ziC?Uozs5ySj4!U%JF8lnFK<=i^F4&<&!#Zt;n$zzW<6>d3f}3<#&Gnr90~dMFb>h^
z7GPxJlxOxy!-m5?U*bLsg(c!Ax}uV1XeM(bgr<MUm}d(fO0u6v-lMJ(gK#GCZt?W0
zfFtENg3H5aO!|)Il6Jl9a=_`vnVO-Li(aV~Tzc=`#7bVyJ5axWUSzf_Cn`Qw;5QGv
z=}^>V%`14PrtxJ0z~Wl26iSC~Favb*^u{UBtr7$m&N$wgO0oA{ZeIjFrGA3<9qvzc
z5q^OG&wrQXKh~FuCL_GUKd1c~_J5u)8CqM|{;z@j*8iLKRip90=SwmH(vE)<oBQfl
zq<~l*IE`X))@C+tq6nm#r$ti1Bpowb-*34T?TTrB&!G8)Q%AmT;ojz4w`t9VMiF@H
zJGaE{KmGmO?X;7V^$U5=>?0xhwq^^(M*9-V#)u}-g`l|z*!N&K21AsV5ME1d=K(uV
zH@ZOJBcdbek-`{4ica$diJ`|c!H#>v>suuVi1`cTiy(xA7>itI0VZ{UNU)28G{Wy=
zA1HICu;~W5wdhXU$D9r`)Zhb&))13rvxUcNPvO1K1z7vH1!6H9^rnSE3N@#TF%(6Y
zkOnO_(;v;Y#T_+xD%kDq?Y#w*3!!*)``3I>D)1?lwZ*dI+1|Ek)>YiPM@a3xT6^(*
z{zL1oYvrY3$Cl$GpKSiqnZg@f&5PLikof4nrJlNb*F0~KN?jnonQP*Y5<fZ``!>>%
zwVil#0KWftZCVyQ{n~)2K*M|1xu~nA2*s!U{(E?q<lzNtW0c>c_?%N-m(_>Me|+Ay
zp9kh(qi-yMvG2;?@?I8ozMAzul=;Jmi<P!=hGckA>R(QQMYMlW3LSwzpArXm0QiPV
z&Fzk4S}AqmVLV+K{(^pJ%YM^}$Zt_#PaY@Q6~t}UmRu3A#uu4Dzq$}yvrt(c!*kg!
z9ejsg8EaP}j^>SL&GE&Pqx%kSMdxq}S~<*LPP_uOSy$)nSXDL^RgnyGJxW^D;(I`*
zB*cu^hnd>E$H=&^b0?a~<Zx5P3C1d$SUE>xq21=`5HQP&skv<p3$#T1D;rocQsAr;
z)`TKEi$i)Wj<Fbjn?hQp569=G&yl04bh&|1bh47dh_x#lwq9@tA%J{h2J#Rxs*Iz3
zoBL=a=%LKMA9di&ghJQe{3%j0DQ7qixi1Zeplynnu;z#q%8RdcpNY6R%@5TN>)t|b
zZyR~j5wJm=pB0=*h}(UTT}1!~#Hw73u=e!Jo~mHctlvml>?PHB9Vw7BpZs`T;iZ>l
zn4}u=J&~u3;>}5{8ZqBk7lF7RDo({1NR}+{#&W7D>vz_y*s4%Yl~1A63wo$HrQ-^#
zagcUfaw9BrG<dCiYB-Py;yND*Tno?IhOS_~*TkyFhx1kX9yph56+(<7PM-CzOR_(I
z3W!Cl#ujZlH(|v|EYs!OfnjvGPIl3ZF&T9I)KN~w!{;Zzx9JB-(r#fwFj4jgyOI6g
zKyvrOa8Ik>nh$2pPi*+NxBpt&jx)zX_Ul}h#0L@4DaM|;f9RV<+|(v)m$2yF4`*h_
z+a1ua)3N%x6kyQ9H0mDoQD@R7|IsavNVW*&PDnZt9J0W(;PVSqFBo0`?l^lnSxAQm
zELNDvo~(@FOpA@UKfT^5PW+B3=!wtv_Y$xGeUBn~$zrEc&?&O_o;sJv6}{{3^BMMt
zj1M#lSs9{Y|HEH36&87t&V+H!nGVJ%83_bwV`>K(iExaUGx;hBE;CNkpe1x@Z}HGu
zc$W(OvGW8N8dO!>yHy}y4bzp$(k9uFu||?hZwF23C91OzTPGJn#*zt0&I<yXjEo=~
z0h15?thHKF?^stWZjL97%)IMQ1#8mMW>NEnfP*Z7X$6P$Vx69a?G$g>9ZkPY^GM^_
zX(IY)uH|`nMvrx(Ve^A6bFz9n9#@}*{}%QWZ8nP6p+qeuu8jJTDrtW@GOuFx!X#s@
za8!7f&`_-)U~$IBNo<3~n$+$-*cOSbDW`>i(cIX@cegA|y)=lSpGSW%_~1q_b-}BC
zdF%4sV#$E4vwFBA@9t_=JqB}w%c&rzdyld-W#uT2^Exncws&6&5x=093)f51MwQ$A
zO_ZTzgjTH3GOt#ndXL%SwU3U%MvUgd`aCF^iGNo_H#CB&QFl9MITGVZshFHIUO7>#
zs<flSBi7+1+TaLXDKek6++y(Ul)wxHQ0XR%zn?51gs%6AeptzW&sHk8OfByyiJ#%V
zW}C?mw$1)d2|c|7BjB^dBg`q4iUQq#*(t*bzb{UHi6Ug(-Qz~Lc;t)!9{jypq->W0
zCsIYI0uAa_KXLGLW5eih-64Q9-tD>p+R}fN#^PAk^KV5MVojJv)Z^GE!|yAk2t%H)
zof%GD*zE>Ig-|0<7$%6SUR--gNu~}bxkMH>t2WFENokotg#A0*1v9Iq<&PJg4M)&J
z2{+_E0qoFu8}nGL`mh*#ycMro`Snfop!M#tpK8YUTElS~L)f$gq_xRHWGLlCfO#kh
zq3Pis<L1S3Dsk`Xc-|EsbfHVUJKfq2S@^+ICHRUf1`>WMuuujFdMPvL&6tof@EP^(
zfaWHZ+IXx<xl7kpKDmq6`yvZ>c)>;|W9i5<vd-R8rX1Nyi-B*8D8~Wj<NQ#zN@v-L
z(rliX$+1Grrs+dw3^a|I+dHIh@5xU|Va~;}`i_e}US#4cD=Z4CWk}0~^E>^zLq_5>
zAv@$VI_TIZgDb?$<M5aw=J};v2X@^HQ!`N%JA;SyU+DjOS~m_ony36z&)Iwa=P9X~
zDU;3rTn7Dr4(ltPPqj^srrt-j^1n0JWGulP!O1#My9LRv9r$r{0o`3?=#E!wgmkev
z&&2Spe|K-E#9K|YTtP~@ww-EcfsrJbv0_e25{%haSJybXp2(ngdvHUlw=G-PH)v}n
z>BP{u^3-kX+y;2xcF3&|8iOcsJbdT=X)g!q5D4_qRrTMMCapn;hFlEcY1r$f(K<?x
zo8$!#@2FG<2Tlw3A3c*AcDuu4o&iqX@ge~s?gI(9^##}JQ<?D95@XhBuz&7{8eH7;
z8!~WXAv^eq<6)fBJVeWdjBqpM(88g5^rZw{9lhP1SGXc4LFgZVvn(JA?64Kgy?}0+
zd4$^)Fk}Ps*x1dQG!}yx!2%YazBXmxnkhpUaYBqBGVN+>Y-*dj$=xHB20RlcWv>Hn
z0Z|0aBLYFVU7+b<Nyx4aU*D&bcwHP9xH?~+Pi(mm*}cT04dewp`eBIDh@S|U{Es7k
z)c~$1^rSh^6U?3)diCqGJA_V_8cqh&J>gOlBv6`N5Yc|&^pzz?e+V*Wv}!k(5!pC+
z`Wdg@SGqV^FaD`@gQkAx)uC3<+2g4r@qBCzNHXnICgaE%#I=ZFGo*Kc;w}R`JaR#4
z?151xfO%PK#1n8%6IouIUqpZXswa>l7Ms|oVun%NHN#jcpuoZ_qwus9TeGK%D+}}}
z!w7qN-l<~4{&S|UpNRq|a0-6?9Ri_YN8;z|kDv1zuSf^KqTF)_PwdE4%m}!7D7!J6
z{))m02!YqxJDQi%ir-Hy&rKXp6TbV*(!~$rxvAc(4_fq}F~V3lm(6|RFLddtIagX&
z&pWN3w}-QXy@$82>d{s$D=UHW!=*uMFv5dw&fk1qv!1=$PeO-9E8V7ES8^+s3^o0n
zu&uE8op+Cwz#tHOnnp4Giy@VCOD=AEr=#GT0iC%1YXJ{A*Dds2Bv1G_JYWx_*!@FT
zYeHu()kW0@TjxOm$9oI{>-sc3*E?*#&tK%_?N&TTdv(5d{M>w9=KY+!HO%t((v+Va
z5L|#_A>a<@Et@z$^@!A>;h<k$HQI)C>sP+ES-t*d+PJNsYV)9!Jm=t+s~N1@PS$7w
zXn@jJ>{_JiojDb&T+6~mN>wgX_16<AO}PLxT8uRsa4i!YOFI=O@?A|(VH^L@Jr>*l
zTs<vSzlU5^_Yp3Y?Zf$gh0&}whmnMrx1{mm>-iV!e9!)d+K41dHOLP<g8`L_m|>7-
ztoa41mc7y&m7-mdH(ZImDZs!B(XGT}?P35;Sja#ePSFP$${Z)dZMN@eq~!)u%AVd&
z<HK;kyVGpz15Lx6$&j9=n`M(f{!l~UNI(IJkVQwR?+aH83kyaQm^g}g2De7y>bcwn
zwh#nKW5;nIi|;dyGL>x0q1q?<u~bNO6ZPDH-XZM5Fi&U;#Ige<orRfY)I#%1iTm05
zPOi58E@5%?M3c5*>XH{m>H|EL&8*ACHfb_f+p4JNg}mjpMhntTzg=RvygwTp+O>j{
z64vGLaK;5R`lZ;$-)(NZu-R2A{*1qNCo~U^1K7II3hXIxS@W^R?W@AcygNn(D<X^H
zTwg*fSsw9aSFnwwbLe)16}S{&LuFnD(E0=D8c%jDZ%#t9E}Jf1pc_r4_8~1mQBg+c
zXI#N1d9ADc9Sm9$m|_8Xq+PoV%R&q~1}zFHI`LBk(yj%v6%$}*cvcJYF^Y7C4?U*^
zWp2O|x%UtLxU1N2m)380y5FKk^_Ii*mILA~2E4l>xwokatgF=THnGR$@rH}~R>gFu
z=5c3}veq1lv`BTQBTh1;+fD|89D0u$tZ!V!A242tg|Jgtvp|V4@}i$(rQIDMTr=}6
z4FmOTI@V3fgH<R-^QI`gNGDKKF=x(*^#Mu-AIiIds;7B3ysq;Z=*sdkt%pqd?KDLf
zd}!>}hSasWoVuy=wyv<Id#&@*!TDQb9!6;#PGiO|(jd0VwcL`N_KneoI>oXEr9r#;
zm|@bz+c?L&fu%=KM~sM1uPp~Z*gW5!@iw(RUA9)mngNN6bV@|cq|{B)A6nE^>)0?6
z!Kou@&9-W<%j6D#zN(<PuKLTnOP_{Il3Zb=t1#iVynU6<NUy7}mlpM>b>gi}W$#~(
z%umbYYm+MUUpU8Q;%$|Z6C3r1v!qdNFONz5Ecw1p$@zim+a~SauB(qvX1Mp7>DvbV
zt;|rb?X09rq+jc%M66wu@_A89#kaG{xn2v3uUqA~tm|53n@4PsQlRM>?B@GEO2{H%
z6g@ngT!UDZ9)auk+7}d}f<)9%ohD&w2+6gF7Mw&RW4J1fB@Yc9r6Gf+Lv<obOu@1`
zBvW|JZ1)=^`qtK9oMzWu!d6MqzL;aVEHp$I|2xN|8T~pM{~&&}22eslgt_oC3YX>H
zTs((M6T0|elmm2D!KHBW8)1J}#JbaN8#s5??LfXf0j_fgalXe^VI5>p5n}M-TRsl<
zBjV27o!jpb1?mcE1k(5+xP#@GzClc<L16!a@PYYaUlGQ9{`a=*K20q;6ikPB03q|V
zWktN15Bv0*eGC`Fbakcz-ERJ_KzPKtdYbmhV093Q2;9j=0ckpO5uy-5WAV%f@dB<j
zELJ!ch^wtB1ls5IS6~(w$bO_jmqFs!icHhX$=l!c<%(*kLjGBF5@7bi`VPn={sC|n
z=nz(LIC#;Oy;^v(n$j}CR5YyT?IoB?>`(IwJ?0?Zu@!i0;I)pW8_YKybh5Y;mR<E(
zRyL*=#4b=l(-m)!?1}=S;KIdj9@kI@Z;%@;gQG5t1SLeyluQ{y&ZY!)I7mI+o@9v^
z_Lu26wttC`H+P|!`y%VdUxcG2b<xz!Sb5C0^Z{}h(<w>n*Q3>Fhx2pz{_?i@1kZmM
z+b73x?`V-&N|=eJ+Q<mvQn4?zhr>v8+42Fs20<FBAsI-)K-Y!--oY-a`SfeW<6~2k
z41=2L=!KbkLpm{e2%x<C(_k$hq&{<ZLQU%^dbhO=%P?+JYZ%}%w6B;gn`N$V$FZsk
z)5dLgLB~e$z}P{fPR=-(p1h0{IyHX$oz?!+e?Inh5^g@J%Mk=+cy%YCo+|opT$Ai<
zgEGwSK+#5)94}Wsz2+)EnMx$VJ}?~x(XgGV$0-6-?c2RRBe+LJRh(Vy-tm4($lf#s
z0I(Rn`Hii&a7Ho~bF^k5`1njqA#6FX6|cTN_6BptEC~`gy;?`ZWs(4@BWw2L$i>oN
zW_<|oeIRkuG#ln@-87oLltAoCmjda>`^a*RnlmZfDmT@Eqol=&dF`=&g54;V@03-k
z5thD0%SU;NG<wE=QK6{L$?JN={J`TafS?1S@FfRPjaX(4HFl*9%ePx#S_-ittK+YH
zfYwvSyGMI&m`RADZX&!ftbEP$*w|c|0UQ#o*cz3Djx-S|(r2APf&^hG515QkwPQo-
z@;0xj2X3=1_FS3CI%rDXTj{Xa!7Ne*5ec=E-_)Z8#aKm#lt8RnUB9=oyh!sIc!BIG
z?JI!E36I#co~^Nu$WYJ<L4c!>llp`R>?~a}k^n8!PQ*nGW8mq#M_e)4Z-rRi%YA7v
z(yWyx#FEtj><v0PFal+Eg*IqI9_)P$L=-(7c&L#`A*2QCTpg!KCqbWC5l*3&eXS22
zR;42e3=Xun2=l~hLSTQi_yv~oj38k`r8Ce|Xhg~yVoEp_0Ta_wk*)6D-4rd;Yt9J~
zD$@H#w7lhK`sw&s^1oyETUrswj&W7gXFBt;q~3PJw0KozulU>1YZa&o-R{6u=kCH3
zwA$@0osuFt+Q^8i5x*Q-;!o)-pl3u>)w7|i&3(E_E*J=SHEEyr$ldSqQ^Oa`w{iT<
zvODhkbF|e5uKsnWBMx`1lklF?-abqX-kjS=MS+I1E@<cTcqq8_FG`awwDyl(|Hu{y
zW72QocgE_V@bM1hJ-TOHBRbkn{813qzsVfOz;I+)!JzZY;<l}Z2LwAd(u<LYkE71|
zfm&k}wu%GZu&%OYQE+o`a#r@dbbu6C0^;-dkOO_x0qq7nyXp(o>}F^qp=N*Ge0EkX
zexAN)YY6B+M$LNhvT=H^^Kf#yd%rp`Tw9I^2&L?CTnxE|NUBCMktN@VBaR8n?NJ`i
zY!nkf4kkyy(=?-?8CfifiLh@E)1>HXG~Ldl^C=Xog&f4&;q++JWmk%hEi$B+WN7&Q
ze8tqj4|LGTy~Y9@+P3r6|0JN+wI_X%EofWS{}w)ne(Un@eSO8}T8-1bD~w}eg684X
z%4o9idt0yuy>)=Wq@RRXEo*N`T``1j@t=fU+131`+A!4p+!yFy5490bD^U++Iv>vG
zOrjDGa+xnc;DRdng*LQL-%6z+s)SnOg-jyQcrjhwUDCc4e(3n(7-!O03;o0>%1fk|
zuU7#K&hR`G`cDaLrw;d*WaHnR<r)Bq;9-lu&KYu^2et06wT?OGna|dwo@eP@9J19m
zggog?DD)r=%&FhKL)S%hqs7#2?*Nrw2Y3!cZbWlq!b^Ho*}4Q083POf;$xFEwHlfc
zIhsNW?-Hpd(8W|KN4L|V3azkH=@W#+jZAqoG}<M4sX0sso|3&duX^WM4a=*Wd)dhJ
zEq$0tSy<N%yr-d)F(W?F9sO=aw#B)AxDW%^Yn3;<<&nR}G##_=4LTXGDV9J!cOF7n
zuj=7o01K5e=2W*Oh~NhlQB?J|76|iv-JBZ#JaCj$&?JU+liN{*kkT%77|JA_SdSKG
zTB@|LLQoqMp6*!df?tBaNNon2ldGer$Y7V$B)W%d9gd&0JpRZN<+^&v%hNf_oyQ?#
zj(2Kp1ydh2I_h#eXm=)~HLml%8e?NOCMVGI7jJ<ABj66B#!4eqHW!#LO|T;E5IMY4
zmP}MPUy0_@z7lJUBm@2oEOQT3a7Ppus*TaqRjOGEMyBWnFl~#B-ci)~w+9=^zvx|~
z<}VAW+U&0F@!9vk!ZY9GtI8Q|HCcs~wOvstjuN=}QdC3}4N!%uX~c9u(I7o5%{GUz
zi9ZD}zwk3bvWH&@G!Dv3@mbbzVt?$U|E=zFo0|$M+1ezFc%OBT8Dph|O!?{ZAi9yt
z(X4f`3lR7X6yvk=7`hMR@|UB?6+>{ut%G8s_)_}|Zk3kez`TE^%w2TO^`32&YtwOR
zuS3(s+U;YRDk)S$o@NN2SM+?;;)4-K&NV9X1xSa|Nv{G4Gww;RrQZm+XcR;izv*fE
zvp{nwZM%e5yxQ-|-!5O|_?tsCMoX{70#mkgb$$ZKy%x}5MX8%0Fq^G|WHQTPl50U^
z&{1LuIKC*D@DE>y7kyz^iWh+gm91ccQbr{Mj-$Xp$vAnvuH^bqlwda0jxe>*6OFIM
z22SLA^iGWRX49}{Ix0ZwMO%J{%_`Q{+yg#i9J5Wvg}>-$(F#V&J@ZCe8$&DHfOE|9
z@YvfDXGZo{+R|U#l8@S=%IFXv)pw+U=q=8Uhszk!Bi`^GANi%gvuRps&RnzDkWbmm
z%%zc^l4soNaP~sYWJ@$$`Bq#ONaPe4rgiq3><d37VOx02z*FdSBBcRt?$Brf%|Rz6
z_(~zc)@?f8A78DWo<t&+nmpX^W=i7m5l!SHasg8~GbRsV@<o$bny+3(v?7mSRV{p_
zk7@`Ze8oRKp^9n%3NQdAHBh=Riu4(Sl>ZY;xU+)p9&8Zq@ckG7xAXj4E3DP}VE*_d
z|AT;#=Mn)0);W5~AV7fJ0f=;n*a%X^N7!0F`dF(<f5Fa<@CxdxV%gZP5Ft(}J@-?H
zVn&fnxHb@)Wzd?Wxkm2I<T(ITAbH$3U;hMx+lRO!Wr9`WSUX4WkN&JBVp;{dxhyIk
z;ru{3AT@l3knJq{SRMYx(JSRmI6d^3!wotG{5VvK3Xzb^@(}NmR-I!t8ZDu8$VEtW
z@aV|N^PvVskRtVPxO>eQG7}?^iZYue@)+%)7!4P+wrRFcz0+MWDQ;sWppHI1t_-64
zr&+2Vah1iTq~KR=1WG?_mCQnR3r1(45Li~Cg}5<R9C6ZYUf>kH$nS72v@Hc`{jC8C
zD*?q!KBz}hYA5sBc9vdQ_S#87Y{JX0G1xU&ZGpxNI$7Cy;Et_S&#!Xg93ovAT#Dlv
zKIOO|F2!Sv_&jxu0qW+si;Fe(&0#8&DItm|2lxWTVO~liA;!gF49Gk|oMh)I+U|<-
z#B6`b{CZ;4^a;NGq?Ap?xRP`z!d-S@GlNNqcw$W$6xv9E#`ON~hjTfbhN5_(=!N!8
zlydnBW-$RMh5_s)A~AJtVS5=XR?fiyy=9OXR*&goM?y2<2<PLy5**Y>$eoI`29m$Y
zQkqy2wamY_aGU5g_TJY4BSJ`NM2N_}w7?8KJf2R^ynJKRE|d-9rpdAet1olZ9x(J!
zi=e40vz&*FXmTX6C6|DQbO^;6eyZ4|VWsmuF4el+0Mzs1_pkZ)e~<pK|Ncd{mFP9x
zUMx{Jm+zeLoAUVP5sxqpX|G7W7rlFj<iH8Ou5HH}|2qG)agIyZCJjEeh&OyeezfbO
zK7#94CF8?y*YTgo@Bme~l_as>#rvTWey@pn=tpy(xTGG+a1HQj^-nN<$wRlaV7!j3
z{-@dFjN9#zk<SO4<Z6&AHY>;kIsT(uLeilAl$}(s9PR!Wl-ZYr4RXCt0{PTN6=}u&
z5vM&iNrWP`ukHv^HCZA-_&v%v&hceo{zu8TuOSW>LVv=awB=<wz3hxKiFaXpGY0Pq
z?iRZ`?Dv~ndN*Grc&yDgLj7x)-8@^Kr>*;C46R?kYygGV!5V08=4mLlLw6WI8;TK)
zM9<H$Wj?!mD(}G4oL)Jka&1~g0FmA-HHw9cu0n;v<T52MCCq@3VC&vz>4Qv+x35nF
zO>ZvnT!$_lAfIB2!b(D9n5ILQUYj5xail%0RS}9M$(25MEpn=oszoPPr$+qGDRb4+
z=#yhm<S&e9@-d?BnU|<lK1s(854ds(6(S%n4xceyfzTT!vSj0j$p%SjgrwwID|$@+
zb>5)|I+M<_VQ){?M0zL>){BJ;5$#}QYo)W2O_cl9EmX<lGZ$asv-`)o9T5t#`h_p*
z<VGy3=wfY&G?+b$lV0Q1YMcnm@8_wnI+IKbm*tV7yz7^&P~wN~Qx1ZC#PQYY8wBh)
zNd}tnVN&Sh0%?!^G(MDH0Rs~dOi|E$zR+IFpcx^tRp`ERg`WFu6yQvx2{62qvqOB|
zl<o2mjE|%VpKgtULj;IL&%^ARq-b(f*!$r!e=z+huR&+082Fq{^|G@JfF<btj;mUL
z@34*V*y)S!zVbV^m);yQ4vUJ2JF|*yT-ufb&8Eryo>gE7jhwLux2MI8p4vB27uLbo
z%_1l(BZ5$!d&NQ%{+1>@XCaweOA$JIk`=oEBK*!Y(4Mi7%}OuSp-?+IXzhz+xnz~o
zjMKL#gbG4p4-bt8U{BIoMP#OB0dw>4`fGhES{_)Wy@{!ui&7s-ub6t;@rZskub(|E
zKZNTt1=CNyFJfGs(P>4CHPl?3^FK&t5H;UF8~v}oOwVU+@N!N}tS=0^cN+q_z#T!x
zJ*Oe?Y670)D)X-c3};l$)6B}A{Nw|qb(;y@wkeZ<O)TDJlhBl6-wHPwz%jjh-5C30
z=AONL(tJ#Ko2YpSoPI{SXvb%o96lazLp1M@)DXy9TSr8?|1mn^!0j2?fF<u9zU7Tq
zueLVtx=iq0mY#^aS&;1;O*lC5_c#9!`0H1~Ca0Vb`ppFnd`46qR^y2)0yqfm^=IpY
z77lR6qgt{5TSZr)!R(h^0@V0*o$an#!$UaiZk#wipNS3cjmjQZ$yWkIui4vT>@7S6
zN#{?Fd(eVT>}O-7#<J<im4g&L%C7J626fxVl9OGCJQJZ;wra+RSo1-$u~n=Y6{&{5
z1V)kon@q;xflv9Fu4pIo7Nn22lIa)7QoD+2gmdo%nV2JD-VV#NryK&=%tv#I-2|16
ztYF+LyylLNk#+j{vAXK!Ww;(3apIW=kcTJDT}+1ClRtQB1O;!Cs|qdOg{r0uebO+Q
z2c;T(QM`>D)5_BW3kxd8_!d4+cK5YjuHRW+9&QQ1Zib$IR_+tRte4LhYg|lU@6TWg
z;;^Mloja;L(I&HC7t>5&^5{P*pxv>(YVw357F9#xaxM?<2FEdoAgKH1vPK%jo-8U9
zgC9>NCb=w6(s6sE8SeP+9&gIq+z21!amU$<CpgL*alO;;XEmNOOU(8I?A9gVmG|*F
zvA=q?a62#XbO%y-X{V=umE?&!>b6NIvOHA8I{uWG)KhiOyu->jnW*h0;vQpS&iq*2
zT6!Xd2b^u|HH<{zvCZQHMYul{M)YS93Y^!Pq}`YXyrF(~<z&dV;X~7i9*EF^t=W{B
z=(_1{dR!ywxUzoV;Pv<gtKLE~@d$aC-ZuSA<sz5h{i$~;)_)|ZJsD2+8(sS{dVINK
z^ST$fvQb0$lDqPizM^^Zjo5i7IZY?IEiJ?y5Ix}xITTjO9TFVQMf&UU(7fdLnTDfn
zOC||%mk2lPoi_%Zn3Y4t;2zl#5MPxN1)d1N*0I#7z+5tj56_zXH<weP3IWbDJrzkE
zM~^8=0sm%210anSYKQ|GpPZ#UOFT?qMFRMsK&}%-;^#rOTxcedL}R3TqcZ630zN=e
zoEx?*OR|>n>?K+^AMAxa4~=MS1StBW)C7AZe%m-EK&sR{u3|K=ToXlav~Yt~@iPL3
zma;uWsoi%=Er-D<kAf05T;UOs!9c4L+z-LaFVGrg^%dZ|{8NU(c?DQOMF||O6bG97
z59hDjgTP|4!N`<%NCTL5Ia}i|*?uW$1&Slw4CKQ41*a*rwJs-GPjbWMK(Y5(++VU<
zb3CP+p@`R$#uk)*FLg|>H2-!e(6R=u1w}iI^SXlu5|L{SXKy@kel@J&QTFNxYCVPT
z)2w!%{R9k{Sh(KuANqbe`C~%(xjwowoSvX`QAlqy_RKymAQ%Sqx{fWoQVO`vE_h88
znKj>@VE@;J7n7!L%?>mWkSW=Jh^Huu2nfrF(AnD={|}(^|7YXXt@$sW!h!TXqbKm>
zUz5Z64;h0t%yv&WZt4ZTP;9=?waJA8(mmJOic~>b(Y`bI_caSs5s7rOLTO8vuQ_!L
zllO53^SN4?(#T8-v4s5V<m)f0QG+){<(EN;v!&=3pNIw4AI9GEJ<4gkzsL(OuBr}k
zN`;Xep4&d&Ldj#S>Na@0b4H5EJhF=CL=$4Hd)hS@YR_=AiIQ1Y3M_UL;+uOe;$0mc
z8MLXe$^NXot{&m^CL~Il+JN5e*<XKi&Ghi9sd8wf61+>vN$6b2Y8H)E+F?c4!iYW=
zzHAfvK>d%yz6@V(P8PjV%^G5#GC`pWOp+fxNRhKBEwGw){yI8+?%TSKV*DtPCH;{E
z@Tru<j~t0L;Lw-VJ32hxoqxQX;KEPyneX741Fi6i+<}ohYM}OCF5g{~6^-D(7>;n<
z-g_x)Ox(+zxqaSU1X*k~lj?#Od)#qdFW!&~f1;$3jKh)0$a_<>*QLk`hy3BJ=FG;5
zaUHmQZ?>tvDc<h%c~u}mi^LfD&__qJJBHP1r|=QPBf7k|OztYkWh=WXD@0QblS!h<
z9X442k}46)o#5EAh-&mxX79iD&@BRTi>!%j(&MR3;>h#bIHI0nyu7Yzcp>zA@UNA-
zIi-{9yGjnMyI+TeD7J|Z+K``8x#P0nf5Z8#IU?Za_r$rHCnqExxUhsf>!Py>`iMbi
zoT)CbUbWS>*`@T_^sd<ItWj;HFSyQ)<;g1C(6CFbn6T9wXvAKl+jeZGAKN^?gxany
z{FNI&h<;yZT{rnEr{<Q1Z-#$k*2W&aP0u_yX-?=~nOKRifMuIzDD{4tf@r^ynQB+C
zvAeC)6s6=gmux1I0bLwt|C+u_Kb$Fs^#+x6MgzW4;xAV9#x2>%9TXE-LR5<uB~8bH
z5fw$RI);*W2jhqQOMP0lq*2KjF$xPVYJzDNiE}x+J07{X!bQKj7D>wjxV7a{vDolt
zH^7TFABY#@^0n~&Q!4tC@5j~`Q0fykD+ciuL=;2VDh{HKTho#Gm{$L6=<3Jr5m7sp
zWJ1c9#mL8D>8_xue7yOA={{{t)kENd2h5bnd|W5XX<QF0lAO<^C}UKoUNQUCgg{#9
zQ0wevv&F#%fbiaY=$iCJcc;4Gbs@5j7jJ+}p!!A51tqWgPn5;pk5@lZbhbG2Xl}5>
zR`(4$VfwnWjK=?gah$>rK0*b{WR|FxUAl-E$8ofzO&U}nuC=Vla|(LLZx?fJKjaud
z#jM|D4JQj+cEH9v+uUH}I}@~xlR6(K41UMT_iixMn`bY-246>c&A_qiFDbg$U*aZ3
zDzTELtIi+5rH2I7{NOw$Ly5$Zb=Nd`(}J;uOaf9PryzY~43bk+ugl#PO`|6Ye)sE+
z3<a+cKm(c8r%^hU)W(s`W*9&*ZzQ@!!Q^-J4CPf0i&gf+{k^(w70rHzI?{K275o;s
z4!JUJ8#U0=ON)pAf3V{(J*r<K3WmTdXLYTcz2n{4ldI^?b@g=>O$?w6@(zrRq2R}%
z)h_|`Xqt{Mm?e0S<tRO+L<aP2eXH}+?Nis6H$Ba+-r{Y6+ZPB^2NguEC$_@pPfZe9
zfaubD)(xjk>6<$e7IC1TVLBNA!`Wh`6IQ|mFISqk^k-^=-WsCZ*Cos-o3yK@0Dxhj
z^#8@Vd{WVRRWMJ6NlRE9!4;DK4Y8g+AiWVn_bp0%LZ?{#gS!Hy+7Wu0fJJIdl#PGU
z3m5nYz2?C1sND-g-xZ<N2~1yxg8(IhnWG-MhOm`3gVJSFyjRf!%Qj#Y0_P+Mt?rkA
z7@c-h=m0r;c>KItWVy|Y#pCK1J1)`zIboZ~Ygtx8Ahixd*wTP?)vCpWY@Y3X?l;Rk
zty;RIM~Ni_WdZ#WR7b$W5f<yQ02~HsZZe6kH`1x@6pisPYQp?u(TGfPH{NOIcdHvm
zQyh51zN^zwm8bBzhG8N6?F@!&=ZM+jL-_r43-u5X1mgPGF<7JchY89R1#iqJ7zjds
z5k@kEY69x~4403<l^84)68%dvovJN*fg~pmrx|EivJJQnf$j$uiNlfyhrK=M`*D2@
zv%#Cq^}BN9+*rQ`=4+h^EXE7}XOYvbJp(i}Z2#j(-)K~AD8NqwHmqt2GK{kx22S}7
zH6U&^*m$OG>@xTl_^&c4B%-ojB?Q1q<5E)#^)bT76pl51qx&_qxLm-Eu-lw%)o9KA
ztMhv5oR;3L{AyLEPZhz-w5c5g?hhX@T(1a_;53A?^fsYd88lbTERQKv65YR+G36QP
zNSSLMr;iq-`(zs<y0kX3|74_M*STB64$;<gPW~#<W<%)J6yDkHh2QOA@CQkkgXbeC
zd6nlBUOA`>Wfm3X26cNsuUfkn1@Kq{K8HMR-x(0yfe_w}YAF{Q`!~HF&r>Y+thP1Z
zDtN@I633yvkAGNre$UhJ%*5yO9Cn_QDhW4#6Ghxhot>N=T_*pml5UO)vB&bY-pmVg
z7Zq$DsO}V4PsLsSmWS}RvO8co-hk9W&5PA+791NUvDF}_o$3%aLGpD2oQQ#bfKAMm
zYLrf844~5<uunZYTenJoK#A>)c8A)*ytlYFW#2Xsbpe&V!TLJtzFoT+YtSYy$7V|)
z<HhKbGi5vx1x0t;M{z(}UxH?_pz`pzypA7Y+rn2dSGBZ4MJri8=hM5UR8cNSoprRI
z2Wsc%Q%_o~m4jk3>+|{m6}aVQa^n0sBw+w4TPl`BjwBN_F4Nh{Ki-QfKQ<OLS>}Cr
zx{}btXHJ=QwWk8;2LETEtF1csfy9WNV<sG|STF@R-&)u`9Cw+q#UWKS2he@bv$~N{
zY4`pZ-D-^^C{<dug)dEa?l7Rgb|gkk-^PifSkDl5-@T_RP(R~k-h_3n^VQ<n+Vb`A
z_1eM;AwyiXkve<(Bc67%Q9qi(2v9i$!56RJd<tEpp1~PyH5>9_*kEq!BD-dF>b0pO
zGszg9aS0yA3+P;9MLo&FY<ONm09ZWNvj6%wkxWiOUFeC`d&tn}=4Xtl(&uMcZ^}8R
zN}sF|f6^(QF+!Ub^(%v-B$0PuBhP>J6lJ3R&G9!3JZKpJ6D^@zZzo?aF|xXxx2)~9
zSd=`FbISwD4dQQOP_IM(5XE?++*ih5?D!ZG!n9SsH75>Q4QsRs!@K21oiT@iW`UFG
zOF@^X-mrVv`w+xp=y~;;VC1MoR#fSmPWB&=+tH_OGL1~4J@IU1gy%iy3raDr@ng?6
z&H0Us)Om2;eh9-53i%8-&5#B72?Juzz^{A1Cz{zSR=?MWi|~|G&hSW+B*vac5Uc)+
zny~uF6Ao9<vcP-JwjBfCwP!Rr2Mhvkk-|ZYr)VcUC=j2oY)d9PfI6X$Hse&17}g7Y
z&9%=|2P0EpVJcGV@5vygGd^2G>sQIg+`j4fXka#mA2MQ5)7E!<u8#nV%~5N{6|_0#
zwtH_Mpp$dbKKEy^;0D1C|MZJd$>V6$B>$eIQc1dESx^k%LlmC!!qf2?&2scq*9+MP
zXQVWD+Wwx2VtwZebkb-{%?5P3%+Wq@UjW{TI6Gn}-MPsKjSp_to_y6SR^Y-L^&tqN
zMU-9UfnM~E-`SF7AY>olwd%%ENn`XXKxx&B2FNQ5brG=Wu|tI6o+AfEAeMwrnHroY
z*C@?EajhLez><Mnj0PA4@iTt`o=?lFqU3JNO%f(n)>}XMOc~%bnWHsBnt-YorPCW2
zC8HK<eVk)9e{h^!hG*+;Z85t-qhp&UOwS))2I=w5ZoeI8*Gi~XvEsFOfAjM4X5$DE
z|2M+Uu{)D!;kL2uq+{E*pV+o-+qRRAosR8}ZQHi(+wZ4~G445E>L2W?v1+e5m&cBu
z`T;@HJGvE|K<y=p9kTJiCdnf*G~5qm%xpYyC`)Z47&BCFIpMbJt7+VcT_ob|5p2)h
z5R%R#rmEsUr9wa|R&3FUW?Uo*GFgeFOuZ+@p5X78I2m5V8Q_x-YVoXqH9|m@=J7eJ
zV@Iy8-qxnB<InUTsRJ8s7BzDw_^LA;Qz1!dYw3rBxjCz5oR7Y5jkBS|BCdO<nDmxW
zDjted(;x8v9UcB>#kyy!`#kVpbl4;P?_D`(N2mWn6i;bgC~ruh{7mc5jj4i<y#_XC
zRf7q)WaGA%MEx_3Z(U<{K4Km8HIT-OuXe!x{2PLiSl%G={@BwAxSErZcb9*uB^dbQ
z4#fA0C0@S!0t>x-cX!vzjsFAU4hyk@3~Oi4uon$QkU?XZG%7~9PbA|*U}qr&$3bhh
zpXez<D%wQfJ`t4RnE-~5N+@mO^92Qm<MUhA#}Wbf8wyopjS8$Fgw#wFK<@$Pe9dB@
zoi2vr0c6(}<zoj)9}J%kE5=KbjO=&?Bn(*RTpK=9lq$Z3ol+U3XW-A(-^x8PcFce(
zKEBg{xh72tZ_^8)v)mFMr{u?uWzU*o6vf_OB?#O1E5?jvb_|1Uzju5;-QBh4b@&<-
z+4CU$4Q1nh7{!{z?;aMNUNR!b_@J9NjKHt+d2oJVe(KwnSuJdjQ5(v7&xHS|7(tkp
z5Wo5q_y@7={$T57*7<0e7pq*P&5#*c2rfKmOe6v|-NjV8w^kW;dRl=C;u<1x4dDB*
zt4DP}50`QCFn86Dkj6Au|Mj7eU#f1<_CWMG4AM8Jg#m}{&DAF#+4~@>EBEPr43*W%
z*%F0fnM`g=P?MB80G2514I}p6pkK&^-;E!4_lj5~qCrNPGC+vpGo(l9`h5a)n+h9M
zHGpmBS|P63(;L#8=*UDUM?*vId&>3NIjkSqqx~r>J@L`|aqHlf4>&gXD=2&Kf#H>l
z{QLImm*ujX5za;k2;>JNyX>sbQFNwr)p)i~?*0#4O}Cz2W@`B3d_PfnfGym^;|Ru1
zI5QZA$CN3l!esF=oF%2UkQ^Sp<))xDH~X*6G!9=OYJ0o#MIW{-*kKE;*aI2jCcz=c
zr#<DPU)({R2G>sH1Aju5#KCu>?#hC<MiA94KwUuc%wA6(o_5SzfBv>BD{W79Ptx0&
ztFO2>GH_t#%}9r^6o$>0;`>p@2wI=+$b^LD`~t=n>%H~<y5*TExe$Dzx57W{7MbKc
zZ)lE7zTj_OMx~Lno{?OVr&=f-F43g54PgbL_;M*k7m2^td<$H7GT3?&bmLof<CEyb
zPgtKnu15njWG#95*q&^0wTrtfDs$Hh5it|#znumHg~JaryQqO-?t2iF5N`HD?4<(x
zM0fWA4FkEs8OUnd!`Ept_DK{4%%KO;@5G`@bZ9DMPxdi}!)#`zvYP<_Wp8P}+#=3^
z<dj@|e~}Pijr#RwjPNRp4eJn#uVba#x-I@fGyBsI#>gYblr(Y))+<N_VeD*jg!{r|
z77PxH24l>Ji2pl3q#!@wT<Wu~sUaQ*iZ@~<GPWU_aj+`%9_$|+3ZphjQ~T1^t1}|s
zC&@;qZ2*H(&<UPY*~U&Q|AQ%_hfjk$JJIjHzYE3nstFw%OnrR)%KUL8M!6J5)y)XJ
zZVLsDj24VYHKPdTN8A9w5|(Bahu=iH3z{jZS1UFCy%U`EwCme@J%<*Tg=FHL8<yW3
z6*L1zFJ-BK5vy%6c!5D;SC(Jo9f{0#q&T?%VM0^X@Qj7-2_om2lhd0uzuk5JH(IbP
z$Hdzu#Kftkr(W4dWCjM}H@xBSp_<%h(iX`>5VjftOE?STZ9rKVvMe3<83%c9cEdQK
zDu0<%b`<hf7%7xpkf70rg?E#qS-tQ06o^TgxpkOSHe6**@?ewv78<gKd;*z{Ja6LN
zU-I1dSWh30+7p@T`vcj|L}w{-_mmNfc&@j+sa#Wb_Fi=+zInM>eoIFFYA(og$acXL
zOWIYG4Y!#yY+OmTLE@>U6MOW9=M>&WMSu7t;{cfBLq$AXRSY->yOqDWOuJ_B#iVrC
zc|$z82t06$Z6pta1Pq1&*NoVDhz#|($<nmw<ET5nUG2Pz;Bd<f{AwI3#qhzijp-uC
zWJRm!yh(Q!#)xZaU)=T69=l!5!w2f==6&PHPDJzSE9UOC-Pv8=Ltgp?zUchS<L8E-
z&(&<Su$<INEHSW2)1g%@;2BVuKHzc(YutO+^Rur=uKU8jojQg5F@gNw^MDw`nQ5sG
zodc>S9i-rBHZ0Y_)qKU*Ay2|1#-lnb6n2FCQeTVpKPB^GdpZ|c99gd?eB1Potzp;k
zj`-bL&f9tzZgZcs$>yBV(@^tE0}ufIns7L#{Obd(=X@Gpv}xuFa=nt>QiffcrkF>!
zNc@h-6Mk~m(^Qtw>TuNn^qbS?MS`&d;V|T87sbfd8t!?yf5NHTs)+J|C!&&wq-wV@
z^DRV9zoth3L)G9KGow#G*2uB*wG&30g{4w4Qmq0s(jRu9CufCzWh1p#cbn@GuiRcV
zI-S&VQ|k^?T!fq6hV}D2sj-k4hX*dz2UJFar8znJD9!y)7NcZJC8OLbN}f1)t3upL
zsdwzGL)JvW{TkxJQ0xKkMHhAKZxE6a?pS@HGD8QDbq3k|BTH1a7kmBc-p0&5tnHkF
zf-dEDCCNE5zlR1++qJ89E&G!Sm3dfQaXN6X$W9X&jFt5v`ABuuo`j*ow?z%rCk!b@
zECEOvFw+qDk^=;qDj@v!k^Mr934Q;Xomn#HI}V!mkQ!9IuAm|k=4*~L%^IHaVuD4h
zvW5Yl(odxj$=#uj-NbAi23qr);J|0zPtDNRtrO`mEYslRO?6ZXT2Xuz`RV6g`OPDw
zX#ysAF}XtANEQ4Ib;~tk86SC(t!&Oe<n}NFQo0gJ&a;XgmrHkBPfwQ*hv)HYLtAfC
zhu8b>=gU<E4{~EX4q-d9W(f5jGK}EvrbZtof)uWYv`V3_&C9lEYh1$m1v`|14UZbq
zS{9vo>Mk(jcR6o1Vq&_SkdMfd`E}GYk%rCXm5S%X#8tiT3iO0995PKLzPa%hP!<z_
zig(Jt8QcKN6353AxK5Fs;08Yh&<Vm7R9Em>pHV*rk{HvH1W8Ba*hF)(u73`UL(w#i
z7itGBludcX@=!8U=lk+=Q~8xwrW|@2F?SOL>tu@hTy6U1l#TpyGl)2CI>VLUW)|OE
z$QlH(OSCwHKp0`vr|CnZ(;cBhJE~nlzc1b;R0X4SjWt=p+!`bC=!sg$;!m=NYzG^x
z!a`aa9nrcAQ54w3ayXY%sLK^z2*sRD%;#Bm!}pTlP$tIvVVryBp-;K3XR!V-m11Ik
zku`2j45!G}ys$U4@X*0C)5ThuRRtxI@=TZSHgFoz0}xlPiX!gQsEQhD=&+Z%nyc<T
z{P4AQy77f7cvq=sFE8t`m03&7L|PJkTbxr$=-OotH$R3f4!K-K=i1+1oG%b^Y<>`3
zl%j#+?2r}C5W}3(!wip2Gm2oM%?&KuaU4~s7R<zS!?rf&)r&yDs(I0erddYKBL}-7
zXabqfgFhQXQY!>X`Z0+z`}vAOI!;VsG!fsjGgY0(&r5{);VeIM7fN=Dt|(%HaJTA_
z<)K!xq#j0LgGHdFhlv$9n&Vq`TMk%QE|v<Dm?5+k8Y;PxT#W*w<XKU8FTJ8^{&8x-
ziU?wFfUk08FD+>~Et#CpNy{$ZHGNa|SSo+l4L3!{`HONT+Y9Ez3feG77@B6K!cb!D
z<rJDg>Q{A_j|rI*dP4tV##%kh1hveJ(T9zo`?zezfM!)b??z-PQF6{(S0`ophECOw
zMK6h^WeLpfW@TTi7NaKDKA<I@e4e<pfTGEub;cc4nzy36fRiQ?4;aK-{3%d;h+z6g
znw;JEsD+Yjms+Rq4sqEPFZk-28|^t+3<hQ;r<`OEmASeO*gpXBS6)>Oa*ga)rF7{>
zM1+j=0jaO>m>{fhB8jvtCIbnV9%d%mMW!Ax7asg>JT*I9@u^Z3zkjn5;5gL{*WWt@
z9ob>^CcLHh2{JY%pdJIzKUM0g-&4YsZ0hvX-Ltl`&ED4qk<xi<g;(TS`o$ROvtEst
z;}|bAJD9CI66y9uc?jSC4+xXC1|QT*3<P9U@!u_yrXCLeg@fU>c19hm*?FMBX<@IA
zy;?;uGz8s*Ard@4bbVOmJ8>9L*;sIcINr;_9=X%w?D>*9A9>{cgfeVh)xHQKy*^Wu
zwvwbPUus;_Fotizj5V+4=#bNVS!=vft6lKzr>_C$!H&ND{7lFho&zvRtX-3K#qAeQ
zx%uYh>;;76M2Ze_^xJ|GhPa->i)KKj%L=Ox(l+<L-Xm8U9*8X68Fo#r_7p<HzQ%+q
zj*~|Ua-KD(*A<+=lG{NVWivCF1XE&t;3Gl?$#y+v2GB6Vj0S|$o|oZrJD>9B5>dVe
z@j<Wd^=*IOy>;737fQm->M%$e*9u5>K@E?@lyP2j%Z`lAWMwU!HQ@onOYXN8c{EW$
z+EP2MuUPJiyi7GW6a019mDeGhhE+xm-`v3+Y;-*L{(62I7#~s0DCU*PS%eKa0DubY
z)Dv)b+f3l(QIty~=?ibnqKh1VdO7@E(*6kiO%MD6jOA*$%{VBx*uTdUY_CVD0_r>o
zirlg7a0R*NEwVIH%{9GoFu^xc&H%0=eLm^<jyfaXr2t$lWb8|SXo9kATYQ8itc6gA
zg-r434%mz%qahC&eLK5e%XPk6<>Kb*7SzL9r6{W#Jqe$#G&X<vjL2PCd*`myOpf>D
z1?pHmnW>u9YOVL8<mvyh&eq=C9}je(*oF!dY)v^^`*SkY2u#3Jc2nyH6k((QtSGi=
z25R!X3`-9DYXrp9JIN`jH|0f01@*=qNh@J^7(SlQ#;R`cMTY@5@HO0yRaW8LPa#?7
zvYUI;eH!t*YvvRbBv3g4U+mTgXDAP48Kf>>G$^pHk~|<#1*kTlr&%4cZucKG%7G0{
zu>k*fmC<fLqbu6KVVJP1y7ub^M=m=5FZqSH<-AF~#2W1KS^<UErYvgy2#<BcKh*%x
zxJ2>v>`75Ec|kXq&&6d9Zl1mlF7DOJ8YqyGxf94IknWJ2V3C0Fm<ey(J{m@;zyQ6_
zA@RSf5E*M%Qq^D&SK587GQVJ@hM$=Q@(lqV=jrSRcZ&4z+MI)A*psbmhL7pWFW-Ep
zms^J)SKkph$Z>K)$fzcUB&;z6NLFq+>(OL95o0<t20cc(eexgt;0$bw*+Kv)O;vqA
zz}dn*`Y1Tdlf<DV!;G_=mv`{Z?lIk_Uok~o22C9p-V8nsa#n{Cq-XD53anppcei!D
zEf?~bOzyB_)`lUQPZ3vrMkV(Ow!Q%97`PX>{a;-()R;`^4}c9(;rf~}o{s`#w-yi|
zwMw*l*ow6V^pj8>oquu$o-YRy4a|IbG};mfiJB)d@{`J<GIMWA_aP}ABL#c`r#8ii
z7D%tdZIvXo20lCc+(_4EkU=XH)Mf5K2a%V}inC(0^yjb}qNe~nqf#bZsj2gKypPB%
zZG&N)XJ9)z6&IQ(`u0J^uweALSrOTZO&tdz;l6kX9OduV<dAxxw#ARza^!s6fv8ei
zLISGYyk5>^3Q(U^H*E{X&jBnVMw~$`#Jg}SPy;xKe)>LT;Nc2!xk==VQbn`~k5WS*
z0-?Hr#pF)lDEfD5D5T-iC-PT`Ht5?s&bZ+^w&MPnIYy&BIS5YNDn?>pi)Y7lLBV<n
za{klWkRUp5b4**d`C|Z<Y?cl6ELr1hN*aa<62QuCkNlv6hc;-~<D9IJD?HOiY4w4Z
z(4hBAEw5<gbz|_CPtY;YCdVyaLEc`4K$MYzTEGJkyB+ezdMGBL&e;brtr49}P7L@X
ze%;IRcczIniUp9epthiQa-a^xEu>F0X(Tiv*n=3SRIR^R*A<0q%hnZ}X6u6Yrb*ZI
zL0Q=1NRIjKqveZc{N;pdaxti2J0+Fq11VgjpTi594<FW-VETxi_~i^Zv8E#+IIWs)
z*=}I)5-_}dgWqNL<1r6%h|uNWv;p>0B!FFz3EwqGO1@vqY;iR6%r5+KMiJz8R>mX%
z$P3$JjwFo~tn9Pb03&)SIMbFq4E{-KD)xSCV#9%hDtTTaei!5(j!+C|d>4P@J0ohc
zd!Y(wJhh%4X^J?AjQO=#N8GK9zyvF=1mi=9Mpc!Le3Eh)hQ<;hIA7cvLXXW0a#lz|
zX>bm`iVtK<Iuu_jtVxp@R@_9&j|lTefERVsKcWy4C8O?z|Gtjw(=ho6+TSc~)Par3
zMz*FX67f2<&gDu=0#}%+`6{Gd2xx-M$q%0Q92P53XckJA$a5|c0d>RbpfEt{t>u)1
z2aq1VE7&v55p?kH{ppm}oO^YXlUc(pI35ew%?hJ|448$72uF$w)Fhc4{SuEAlP2h^
zNI->`^McLT_hObx83t}a)ggheW>DztgADL^48VXFR$|pSjqjK0i-UDrA{le&`ej)v
z%mhNd0|iyZbQuR<>A?At3?-hVE5--52r}lliTN7-9S<DR!JuCUBn}%<z$4Hc_geLI
zNiiTUS?3}Wye$2~_X+e@d#ln_@L+!_5H5~6kM2)$rOw_I_~EhvrNye1njj5!+%79<
z2eB^L7f?57YWo-7K>bnf5A5S-bPbwICoeCT--MfC^s$8Ei510)$U7(alQZGA<DB$*
zs#<P#ZK+EdEkOExliNZU1|9g`6Nrrw9Z0(6NEFT6bTQRTuu&;nXka)%OAHd0aMZ&d
z7!EsjzqR)6l{C!V@k45w-Y=?VH)!_Wn5Y8`GnAO#MOD~g(ZmL>$G%Mfna7OMRVkNY
zqF-^^y(vs5VL#aHB7kQsW|J`vqy>1@#v+yZj`n58yss5SR4^|M+foq0SAUNl3jd6*
z@D+Z4n`<tgT!Wu}!DYk3Wfb<JP&>Ui_oi`247b^KknRJtPfwu%T$9z<*8m8FnK`@M
z=*R+3ayfc0O^gW~4`a&N$anf==!lX$r&3Ju0~8Bx?;Ui_+3wRUGVLH#PfHsB+_(#7
zVgoz*EKcNwlhGm!y#vJ_rQ?@>Ab}wDix%Fyz3EKTZ$yhOm_U3W1Yd)I9v;y<F3DlV
z!XIJQKsDp{JJD}LC?oY`AM#EtG*CyD>?48Ru^KZS@=Q`2t2LW$^)W+90~)4OaT%%T
z&#cGsK-rx+<kVnn;dy%NyMI(hm3HcyASkko4@GpBMKc@4qy5kp_*y)#v{wtQuju{i
z!wEz>#%@xg_T-=sZHXakKbujxdI5`O5-3_}Q{E(z3P`f3SHxl}+Iah58YX}~p;=}v
zR|%Jr1MTsb>Sz=KSx+Rd!yD22^Kdsu0&=|sWU98&^#Y?FJ0+8;OW$V^s8km2#;M&O
zl2}#2CyIfBh}hq$zsRVZ*pPwpI&3Uz)#<A6Yug3Gx>JqAaB4RXxeg3BYI3(?ZUB}r
zANFJs*=Eu_{3~urw^x@c#iS2sJd#RXP1e854<Aq(|J|ONot*9ndrlnafK_wpHn_c>
zjRg6R$0vSiSNqVsYEcdP6<W0}1S0$4T&f3h5n>aSx0CQ{ZUC{{?pi5$L3M@*OL5{;
zDU7<n$C5K9&9>>Wo}P$fUGCar>kwgq6ZeVmYW$%RZ$uSbDg%EZs%a?zh9O1tWg3iy
z@65+N8XP#!Yn4yRhyfM{r|q;EbgDT^N}g=ik20n^?_3X}LlO^BzW1Zu%p1Vh5a|r_
zSaCmg{m^krqt)vAOlC+6SnURT3KJ{(3!1A$Rf<UN2=}2R)CE7|xJcsd1~jCb9%lDw
zPSv*YmtZTR!Ca}p){Krjx&;|@FMe(eM4L3c>~!QAJnSQ*0X)48vEajb`9tA&LTS^X
zQOQBSyO_@UZ97|p8YoN(VPcI#@TfFjKRJUL27_K}vO;ZqomeKT<sJM*K9EZCFWHs8
zi$VK5SIE^nyfKl}_qBRx6&n8UgeSyE%`?~|z@H&l%XtCzB-c9wRd#f!_afoV7(pq3
zbl#<2L5)_2(Q(*mUvWDx+hmD0tNjDf8J~PulhN_L9?sag0nTqB(%ka8wYR6;{hY?1
z3I3;c-oLyIkn_!QTg#C*97)~AlwWj4mhO6Wye~~Yp;#LwNIZIEvn@%3B4;JN0<?-w
zfrI2N2Kc&}-mG>Ve<(+lc0KgU0yN?(k~Gl1KP9W@iJy2YfhgN5*_LMJ1u4)Lw0uhz
zTn1pgIXiHmnu*cqMd}JIQ^A1jK$^w~flLPufys+`RDn<LM>}y0$16t-+b6BAxn`Ev
zq9(X%<Hl~#QZ`tN6O-v2#bHrIaQ|wP@6ABH(7F68jp&Cy@lN(!81&Rp4;k#_$Xj`i
zHJbkLEdKZj`_kTD&=X=AJepsAX3nf`KwEgW0dMS?u%bZU=^F+L)6Dczx6j7!V;z53
zoV=ZGUXnngXag*l%oSV}c+vb{zt4B~{{mnXDm+0bjA6VcMY#Rn+ZuAjT|X2+MStP=
z;gLhxz{ecDVJ4_t?6SNyPoE0jSiF1^bd{WE?2I4-of%#U1b%knXjDzV0*z-s_8ob^
z5kcg3kdadhZ&XGDAbKqlWA0?ot#Qip#%1NFnErq*wc{a#-)vkxqvxuzsKXf{8&s9o
z?ScY@8GLGXGM@uD5X*iQw<{3&3znr<+8i0*UrMlz_LVa*JzIxu?a*&D3EO0iXnbp%
zJXDm#VJY|T-yAAKT>X3Czw{)_(~#$NmjoTRIsI%ZLpM8JTb7r-VoLC>y?{A|zPTEI
z)4;y-G~F#k=;w0v;AY#`&&c@m@oo4w`XB%0>YB8K=ECW1T%I^+xw2K^#C}agXkVL&
zbxw6v2d-f=OQqurmj37%V*4s?N@PHZli^m2!cV(w%y6v$>hW=}9wk`sa~&IK7|<Oj
z(b6nJhsi%7$HatE2?8$*uF``hG~$oB=Pt=6F?-$}<CJpAoQ;{-D(dw+r4a&@*q>*)
zOx(rGmTrlOMcRDdi529eh{F#@;6*n)zWf_vazt-%?%0=d?W}NtSFM4OEFVSb@+n8A
zyAg=TPd#Q>6Aig*j}Y&JRBxP#JZj)oLHJ@=-opJ0#4Z4<35g2!t7kKG@(Ry^Xjmij
zH)Dr?TFg-IFE3EAqX%qma%eAHUNLu7(uN40>~cJ~i!mx5X$XcssR_#@Rl*4(DC<e(
zju6qIQl=uD0bp(_!XRi>deB19Qz9KrMJVz9mm(@Tj_i;ITHFsJM!ecmCPY*ybYOe3
z<Ubi%<-!?^))UrtQWc5_uGh|pjqTIhV`n|t(Wp&fwe&k^q<<O6aMhZ)v-F;rR;nOY
z1T8>=G@%Eb?bRXovCHx^{8}H!oENNf#uai^^}v5Q+3MA4EvrC=RQWLB%%xZ9Cumt}
zeUvyT?@T47*S!awi}s=ahU1v+0xo#y3QT`*RPFbPsR)p@(jVRYcabC1OW)3g1XIUn
z@KA)AWTh<<Is8IUOWNP2d#UnAHhps2h|0s+&8hfkmmlRe)?_zVDZw;|h%#_>0YH`v
zQtycR)(fStpaxNeyzB??C~`rPHR4BcfdtAO!2!c-91Q9xlzK-FZ%fxIFU(+#y^=&v
z%cZBxrx&w5El^>%wSj~6!0KN_$@u$+`M&pOUzxwL7TbeJ0zkN+i1dO)bQg0?DmriH
z&@(k{$N(`mC}ocyPafnjOUNqZvY}=etPEx`X~3;HhA@ZBe}bi#s9X__DyXh>B(B1M
zSKi+1+;ta`*U+zp*(|bID=rPZ!dt5}6J-w0*PO&enA9|snjKm-&9p&T0tufuomR~<
zq(QjA6seS&yEl>#8K!G@eS~yS1on~G&ldpfuNICC1==E7)N}E`Iv}NE*zzZ>CxF(^
zSrE~RAS++z>B+7OY0P)5Xq5w>Oh$j*QW_F7-=NiFY90M3+i@myjL{6@*m^nihwrt=
z^ll`X9lj_D7wQXFrt;NxzmGo(m}nH)ZJV`mg9(XO!{0EsDQay?N<v^g0q&3H$Tlv9
z!-}<ALMwJ(<MlX6XJ}$qD&QH0q*V>Soec2322$(sSLV>V?nbISysjSfSS(g##AUg>
z@jf!}O#`$uG;m85@)-uyyAolO8V)Q=3GZvb{7YU%+tsH=L|8`$6;AVQ!H*v&i9YZ#
zbH~erDKeNwrj{$=+D2JFMFlg|PI<CB0J6HZ6-<BCU{fQcXj(31<@eTmy>IN6$Ss{!
zt6a`kJW;XQL_1t8H=qBY)ms4oQe(UO#cqd-mvh_QkI%#R4nb49(ok(o(h|$88#8`j
zwg7=ZmM;fX(J_=2>!`xV;o)`)qt!)PQSV^nLhtbOz;4>t>HeV>3`!Jfhy_o)SMACh
z__B^(-g5%o7)o1|Gh?m~_41pjOO-H|G@o)P-JLXpS$@iO5-h}GwN$g#+!(oa{zAh+
zU01GnlvMT&NJqInj=sOY{e$IJ)*yDZJOa`JJL_E+`&<>99#UsuG+w;XjdETV#6JH3
zy<(8$rv$tb6^`QD%y-HQx-UE8;`@ku&D?NrI;ox}<q6H&>saLuYe`E@0u+9al(S@1
zDUR}W5X~hh{(&5$KW0hfX+T6lDp@20l#oN?jsm{ULts@ijdP+4g~XTkB-6X|bcSYZ
ztRnVWIa{QsSW<-|eCJ~+UErTu6^Y_%zEh`n)43BD0?~i=5!CcviY9eomyUcVIX#0i
zdB&GurV3GJ^x+>7@z%EYBY79w4e;pxus8p~y118W)e0|pNQA0lykvpysxcqGeTCCv
z#8Qc$yZniB(+d(j4W0O~^`Z%w-q}brA(rs~*z-oQf9#cdn$HBVbMh9#6P_0uBvV8}
zy?@Je3ks4RxmLL5&C)2VprF)7kEhiy8C~cK!UnXKvOEhB^at&1KI86rlOTT9YMpuH
zZl{0*Um1I?ns>;jEtAdR>}H$o^p_j3a%##-DY7FQ(()w=oU!g+R$bA{>W$VILdrkT
zEtte@b;{pYmrQ63k=%5m@k)-Bxq4{ngq2OG8+LAJr;f?1A212BGGJ@=>l*!@I+uFp
z`vPrG-+1ZW>_IQr9TT>K24&m>aP&6k#x)A(fd3=g&K}iML#rLyN@#`+5-si$eqB^`
z(oG=NL2Kvs7|7!fq)%4X@S-IzF?!oiTO<`th&=y3vp@Oq6=!DxW$MWr1j`BIGPh4l
zz*@F3XJ79y>^dbg*hsah178BMgC(Qi_iynx(F3}EjIHAB3qTi5-aZVdiT9a<=}tBD
z)M_XI9MFhd^7*4act48sK|#C<b_2-}5Ov(to|d>h18sD9i{9a+Q3Obc4rsAYXCyE@
zBkRChFP`U!Wwllj1h<jk8%Bz-V(S(i>H#vaL%P&$>F>9o+F6j`;k<5v_$2<R*7guh
z>ri7JFm^cGRL@pGVl%mQ&lVGeH|qj;wYtHSNUgDYlZm|B_mQmAevH;`^BSK!R75Xy
zJvre*r^yewHqJj6E7LKQxbL`37AGE^Yz!uf*1R+YSVfsHVa-^rDD_D_UdkWXeb;Ep
zt6qz!yIYY}MTK}}z^TtAQ9<coC0!(LI>D&Xs56`*dQGuGBkEkN{{`QivG9y51;_wq
z^wN-DC0lg3c-W!=d8UE%qmA7<_()jL*NPZ|M!}nl`Qe{M$$XBWel!H-Jx&LQ-H?dR
zzX<sYw13_I{#M@F;p|!M;#_ssyV1ME*$5;D(svzv4M%w2U-mZGgxWb3mCUwR>b5**
zN?fchAJr+SNWyw)HcjOw$y5h{c1j%|x8a*os@5uNliPdWl0u)LS<UGT@;dHZ{xV+r
z;l2W;N&lQ7LJFLX??lU`1!<|W^EV6)7iaa&<^klyg0JJtgf8OjO2(DlwM<&TU$kIL
zG`8;kZgF@zn46!Cg8(d@+$-3aT99j-SSenDz*sd<NfPkL-^h-06zpC{xaV#9BX`3;
z+{Ag`-05S!RB!8px~pyy_8mW^&+TXclK=Y04D;rx(v(Xy3cqH;hVOcVPsB_#IJaXp
zhhQ%!L;WQ(-;2x|BfsD;*qY~dr&*)YJy&N`b{vwrOPxyT;{5W){(C>4el(S!P$%zf
zL21;Al?=0Z6QeTy?1N{1Gc(sooWsKHk6!G&eB3G8VPVevHE=K!szy$6GS!ffY9r&v
zB~5ayl>s6*+-(9i&B8Fq{;NMW-NrXvdVaCYW_dlOPX4A6^kwLi<__O+a>ag!;D?&~
z(C%Z2-4|GL$|k-h-|p1gn8GCq7<~Z6QA`70%iJ?V{#H$h5|Dz!gBU8+EuQRhBzeP(
zJ(ra=COcm$W*fv%JVo9@<92CUZ%4ZOLEIl_3B}`SY-QEl!ZZ*zuG@&-rMFWcjb9-J
z`rxzCa6ePVeZ=F3bFbQ>-KC?b`Yo=(<W~eD!mE53h-uWVq(@Zj%^O2}`tq}~-Tczx
zIB;9*)H^%uc3JF}WM_>7H}NhQi2f_{D&9~!I@;H==AqKuTTj6x&zG3$>@oj(50KTu
zWpHPe=Yld+BoXz=gvW!&>*@9W@gQ(^z#HU*9_);#7vav-j((^{#eCh@xo@g|`aGXs
zdy2<MQsf~wlEvi0^y1Y_;%vOP(MQ>3W~PCaITou%e-esANg!@}#_(6eh=64Va<^i;
z0edssAsULk*kP){^8WCwUdRTri4u~JJye?URsOE72dj|dlkL9$LVW#<ovCDYHx=bv
zlLaQBHXuaDnY@fa5K!7IJ=!rSQ|$n}(8#V``oNEm!pnOp7*~A78w6XD;9{i>iLoAP
z{usx6LVErdO%DN?%ruBSMb)E-<!bg#Memg>zdS6c1UJ_PdBR8KRXb>2wvc9Pi*r#5
zpYsgW2HTmK&UTiO{A|{zoYG-~A0D!!sZZ=%87xq7E_|Yzpd_4skChzw8=pGght<(Z
zeWBGD3Ol}JZDOMP2z^jN87TT<F<2VV%A58pbSBOVwC}@hO9DLzi8HYk?;(YqrIb{+
zpsW;?H|hkNZs2=LA8+V}zGTB{^Sk#8*HjCE^JVBA@(WD&C*1+W4f*Bg7_5&y>|nuO
zeNNtH3_uG{v{7-G_8|<{5p8_Y)k5f4+Aoz<+s*dSzX0gI7YC%KDAN%yVsdmB?jo+^
zkVR=rXZHVwt*b*?h3pFGHA5ghWSK&O=JaO7FNs6?7$C);K}lH(o!<tPu60lGCnmw6
zgs-$Fc+CJo5^*v8n@la0G)a6HHpq+!5N{-3kfH4Nw%nYlyVbrCYVF+NdF{4+E@gJ8
z^9fk0oQ+^AY&Qm9j9T#ocAO)*YZ6PFoa`3-a|k$Vz$}v1R)H*iA;kvTjzM7H=i)*;
z2w*{i(aR8WL7;!EY$Sk2df(@Mul073Ps^_hGufsYbwf7~CQ5O`BL5jQ4l>9PBz1~X
z9An`X40?h;TO_)0K`lKiy_`>tRVv}AHjJt<2*A+DYwj4hS<#4i8r9D_o!={41kF3$
z-I8U3`I)yrF3qW(^4or;c;HCT>8xjo+gupHelEpBbo*lcBjFdS)+7rASHNss5we@q
zpjeU*1Y*tIgD_)GTSRAq3-KETF)EBbcfRc&vh1X#ptb}+_Mo>@U401BxsBA;9CMLG
zR3HhzWKamX(OlIIKadGot0Gn&3{bb#YH|FCjb()*r$0WJP!D03T_iNS!DK3Z1c47J
z1;POe(^Vekdy&J%5fvVqEJ1B_Vr!byLWQs1b-%5jh=C`a?^J?+C80~f=Q>0Z*3gsk
z3=v#+r?p%mwQnZsen`3l0i)1zCkTu9vZU%%WglFEX)Jt;+N2-f^e`>7E0{QYxaFV%
ziv5^tMF5w=RTQG0*m{*9r*K}>{XMRoK;l02wc>6Y4}HMAr?gjbi*=I3Yo+iUDJsHu
zXhzYM4Y(XE8B;aw_*QY?&Sr?1SH>b4@k1Eo2*)rdi$`20ljF^os%%3m{xo30Um2VK
z+=B@~il;b05RMcsLgvgUbm<ns4pK3hOQ0hs4#gI}2r0)1!d5h>u1u=D+_vhg8bS=v
zP*D$MxDp`ztFPnrCVocil|@!xBfB0-I&K2DmR1~^b%o6SR@~Ye-WxdEy}-8<ZL$q2
zBr|4%I2)`j<!Zlr#z2RTumkYGoLk_HL_Qv}*$!C#=rVh7l{XbLyx&LaKd+vq)Mpa^
z`2hNq52yv@WV&gT__L3lEzU9U0gIScoqm!M+F2CJfXH*a;tPL#z7)t26m6P%Tc^V&
zFvElxsJYy@W;Kic<IaXP$p)3ZOvb1qL>wMII)2I>RT$>AmDz$-m=Aq0G_QcKw?uqs
zMSPW(<L@MKZVGi?11c&nDI{tEDXdqT1JnfOxw$eCy2o@Iz~;ONTAXTMeCPh8?qn(#
zaxq+zvgJ$Tm1YnTNT|e{W0q{079`q`gmhM(3BAkFS0@LMc@<xi?!BC^{0k~k<m7qf
zG$|d`(!q`m7HvMzqs*;_L&$U(zllau<@Xgk9fTMZYs8H4i@Ai)*wL1aSO;a`1FlTG
z!i@_U=8sH$eCT|%p7}3F^*QbS>tT{*PxXxJq4x%916LXae>{z?Tj?%76J3@QC1X3R
zL3jDchm~=;6PKHj6UNAb!SFKNT>I1p0~L}@uwUbb6X&~d)q1~ZV<18fLu4lcvBv$!
zNHr$w&m+a@-7o|<y^0uRr@RdJd)mLAY^b(L`=~~6oTZ7+1;?EJJR;ogN>4t2OppL&
z7mWe2)4I-SursyiwI^3-8DA4_LcOxb7eUS;Dsp%&uE%GPFN=@|4`(M7n!+0dASoDQ
zngC;2GU|u6VGx{$vmXbsm!uR@G;KnkSI|JkMMJ^!OyEfc*`tQp7Y^f3C1dxdm)8us
zxgev~Mb;(tQnrI6L(0~8w8hjGh{D<2u|f*vSE^i^diW9Ant)!gV62Z*q9c}$AVJO)
zdbUVpx`A|oE5dkzXDHrdBdIZF<lDx$BFLHIk;iiLXqo`cG++f<F%)a_=Qx6xEpdAO
zngNz=GQ8x$*_3(Ak+8uRB@SkW58)4PE>%@8j)un=7@EZD>@ybDg`D>Po|q`B{jTGL
z*NX>ggr@5^W@ng5CLEHarJ5@%Svb2YABkh&m+?UrTWgK45+mW$t=!L%ITqJXUUj~g
zC4*>l`t5eb=`Vh_6V!=;-8V1J!$eGOK4vgSfn<_-u>vtw0)gSZV3c<m>$tJ>c3ePU
zFbi6uCMf4=_8qLqi3|P)8~7x=FPVFvG8fTn@pDC?9F)s6|G;qYoz0so^&$RIE1mH@
zywZcMHb9&H3PvVtmV`9xTR+#7#)XF5=Ghjc`>r^Lz=tTiokP_f>r@*o%tcQ9CRS`6
z{uEaPdp6rvXRA7Q(a0M7h`}0xYR&18$WGFsCEU#F4UKa@@?{a3r2Y8?#MiIp!__36
z|A#&5Tnxhb?pkGqpM81F(W4Qh4;QL3s#<Sda-m^D68p7p5${P*m{hxU7v5YmGsZCu
zY6&O5JB5ta1Jq4>6O7*Z1gXw6>Jt-bvlO;Jc?TnSsGEnwyrB&xx!g@G#!Sf`-Rz*;
zT+gsnggYE-23G_Am<E3)_9eE|Q)jRSSEQpm+<ey_ORrV&-6UR4<}UCAsLn*MZ<0B#
zrjz`0^Nr2GQa|~aj33)PN=;dag%P`EzkGH_G8MhG2!HNKN?fwJ802~!veq`%OF*V}
zJYgrpKj;ZfrRtN!U8PqzSOp2HD4cKuxmW~7h%xx~3Xnq%YA3^S<QKNY6dR2TuT9V4
zSG5#1g@)b}i?OyAo!;~P>4JK!F^lsyI4r@ZZ6cdu@XBq$sZz78tJK=*Rejd5KFRKy
zsCU0s<*Euvl%jG`o#tz1&F2ptnj5^7b0fvG0hzQ+YUgQb-ZnGO(68b8tETc-QxjU}
zKaI%Oz-;GuyL+nh4fV;n_0f2{byrAMP3kZDgpYRhk<gwPPt`st7%a&j(Eq#l9{yek
zP7ewM<oeI*PW0cFv>Yt|^Il-AinaYZBidK4zT-$S74UdvRS}KYd9bSlYqbTBWrYG7
zipXDV3a4yft&bgdyl~PwMLHA-e*TwN{<y6w9EH$I#&xI;DAFc*c>#P^tt(UyIH*mr
z5CPtpJ-rZt2#P)8L?Oz32pvWURCJ_)kU`N;Vn5K(l;sSskdeXgkPp!S+A+p1@KO*O
z?0O?Mpzd&J+Aa871z{A_5)x3Hfox_FldD7tkfYtui3r7XZ!k3#h;k3|<VX+ta0hZ-
z(oTtZb}1OlsNYes0CkZM!?vM)M&v)o3mP!o(xmWAdI2=5I)tWZ{&wu@m8v9zIQtoF
z!u1yC`DSWzBni@CkEMox%QlT8<?{)o^TJ{c6a>-7$&fcqW#w&%$4;w|Rirjp{`C>4
zCI!iL)~93K(~#M^5=Pqaw^rp_6<jY?S2O52-Bw|BfK_*x{eA`H!DK07=N-}H((d7E
zfeS7-0BMY3_D;vR6o5Fw#t#t!s%2K@dH)T<#o+if<U@DKIOX<%T4?4sD&+AGFM1Q?
zH`^I5a^YuFbsx`l2VIrjt&RtSCr0iXR2W;&4iSuNYG%T@K0yR&P5Rr(E?M%}*2_Qy
z1G{vnd42nIAGIJlZBTq{P7B%D=Xrg~pVLb(RZ5M~JmqyR7~ytId0n%N%Vs}9qEdA%
zmz$zfU(W?359Q9nQdfKbUM(Q+#u;9g^gvm!WI6af@NBEPf>D9FT;yZTW{cM^tws`E
zn8FM4=+L-VzR2}hp#3~vA{)ZU^qT?UduuzMJKasU*>FGR(jN0*u9*dYog-eq@m+e!
z@~mGWL&1tCH79kwa7Ui*Rw>{LO{Gzd(9EvHS-dJ;7>4TU$wSL!OXZy{^^1pf&wrV*
zsrI@C@EpsMEptt7zoIaSsbAJ}9h#*p-@wd*-M^@;xjx*cRJj%GZf#F)xijrvTi2q&
zG!K_-*c5FVW#@^&zc^i>ZH3#dcqV(=9Hr9a)oDO=qFnPCu`GQO;JMV-e9tU(hIg5S
zAI^dqa)`M4D{X9I@P`=PwcTy_!Xu_lm@oQV>zY5w0qiQr9bVswfpA+MGAs2&;qh$g
z_5V1C|1+&1bQ-OE2lbC#$NEnPQAWYU(n;UV*7-ko)VefmowFoRzH9X79ChkRCmIg^
z`a~?(44|}>i{yi+45m-iV~Jz@0$XIfpRm2(Y4rwzt}`*WzKC;5H7wQ7yFR;~Gi(Ld
z#UeigMYKN#iHnch#>XY-@<W`?4*cD)+TxmVd+2@)tB_`tds~Glg%&6Vhpj<t{Fw&s
zizeFeIBV`W45Bd%d_YKTROkb{-qfaybnWsEq&|j%u?;#H8DKgr5tk8;J=q@t-1(wO
zO&HTBk70@CRX?*!kLFDE7fBiFt_v&4dXK0+{O}AkvLCT9rQgN&4^E3#jp<lYQ4`@L
z7-DTYu}nf<Fhztty=bN{C-2|R&I^iDku<TdkR9A(neb4auXYVl3BOe<JoZ_e54=bV
z#J>9zd_+O>)&e9rzrDA9fkL0a!(0>=q6udcPf*S1rOC(rfI4D%7zT?Y?ijvrpvDk}
z2E90xcafjuf53hs*dFa8U(y_CJc|UjegZsjF>gCOs1LHU{9y)}V#;Rd9efZrBoUJ-
zY3M74j8Fc{%2${rHfiHLxd3#6({E@OKv-z8*UA`O@?K(15|R(&YlH<uyidrz#H3cW
zORXI$^%Dt$4x=1a-<`3Df+2X~JkleJMxo=+FYTyJYEtmX9-TT357Su$CVc2?=Shz~
zk5jQVoL5yX^({)&-u6YCx+&+AWTWzc8`O!<Ke3C**}8kBFe1)Qrk0rL2s)YX63sRW
zF~~JIaV0sjcnb}ZllDDS>`pgVW4c3aAWsj2O18gbV4LnlR}_dV>d*$}R5~FunHI}P
zrrJ({rGN)q4uw{RGlNs&){@5woP#_OjF)iq_RE|~&oZ6KRCBH4gwCgBrAv8b&?e@>
zly&P3n48JTbLH<Hiq}MR=Z4S!#Ixt?DF{@Afj*ZMUbu!!#=VUx(A^iDGiH}tlslDH
z7R!0@%+tD_CTL%@67@%jpYx%Z$S)Rz-9$u3$x$t<)*@L~_Q)k7a2OWHq{2SdfAMl-
zmF_JnjhOHV8_Cbu0GvzXU@%L$lIk`po{(vh`GB^X$Q+clQ-@>F0Ey>{Fd*S*uYT;!
zY|sT}oE4_B6me!acrou3qEK|I3Ergj?C|$oGx$qQH4?0QL`8GK^6Aty+F-S!vP7IV
zqV}gMV+v$JRCwASuwh;W)|eGcDv`aULV2v(R|dDNSx~IyxGW$`awRuttWE#c<p1W*
z@?q=FP77iCE{=W&;Xm{(M?EIq!ZW}=et53=Vh{T@4RSw7lLrM%y+16xYoY0JtZ?S8
zz2hA4%AHFCPx#=MJ`JsE^UenjJ<s7#55+ZFdZruGAsDCeF<S-S`OrLR9l>c|!97AB
zH+rvmL6gnJ@k0x5=iM~vG1KZcvVBZn5j)RWtq-(-yEPazbQ#4D-lrU^+QqR!7cmcC
zHob$nmRD$qsJ@1_q{1rj-t2UFKOp=RnS`Lj;;ZRbmEQ&K>Sc@N-qzG(lE`=GNUpU<
z(z$p>Hiq##&beV)*BHF?55ar_qD2`FX#YmmtB6CZ>7pqn!5y-@s;-?iro8FHnSQR}
z(d5zbQh(gOTZck)UNEC*Q^NcTn%tpt5+vP(R}0eJ^vq<&%v<=vYSOYG?I2`xpJM}~
zbCA^fB|vE-a>C-$+1+*{l!`{w+efp9n4@;>hXuQM7HO(>SCaLdKLH!u|HG^<$hsP^
zOnYy~%o$h|2-nfigu?;1jZ2^t4l)lGx-goyyPH%@1k0U3fcBa0a0BsS$Qhi$bg5#>
z9dKb4CXPOrlhJ_F-tx?VE+@D9r9Bys_J*NHwLx}4_+Yn|R?RVjUW)|p9{QSf;8GU~
zT`&Hzn%UUbMl|Z#(6<aZ=Q&<qcsY4WoA2Q3t`U*We#q!A&<Eqy!s9l>wzVXC&@U!c
zbz3Q#zL!n3yq{Z)qikcf(=$MQcw|&I>f>dS*bh~ad8arBS?P*flg3-xJO9se=^?38
zl~iLVrm1R|$VO&?9G!?59M5p&ics@(1WY|fgvn`9{Vb_2i>0Nwr2a6(SkHoB<?ZTE
z&5z!PEpH21<LH$vW&)3WrXAbL0CZwopALKskQl)D9U6&m#_V0$QbX!fuH_rh4#FU3
zaC4zI)uCRyiygMmGk$AmPs1ClAOI_``uz?47q7~2<LtRJ81Hx22C*wl>OupbNyd1b
zrIOYU_{9C?Ks#o*S&uAN`s8}Uxhr-1lS=M#EaS-etLM|vMi3n{`MPH!-?@<T&pRX3
zbs3_q<Qf+z-P~DUX|mv8?y6w6@z&eVzi&CZF-1XA(LCBlRfy#i+#H{)FVk>+SR!BO
z_b2&28(d9JR;dk~q_O2}NYmJSFu5IGMLe>eb*q4YVirg6+~QMfXD?>MqxBUho9ist
zY}wiF^w5H9a7L~Q;_0sEur&t~B9%yYBH!j$8IMy9dBw#i8pXCmqs>rcI@N~TRo?F7
zCbNjV71Hv$^jH_ZYi1nAhy(0ia-8ka+Tr}EWNrluV2Ei3K&g}O=))J&wH_jYsK=MK
zS(%zM+*nu}Q`T^J=wEvnprD3J?Owt~VGw(zyMmQxZ}py9;dZh0(Rt+MieFqt8RRKl
z0~W*DwMv#{18^*TwdWq>DbxLPV}r|j-}h~ARZ1{?de&b%G5Zt7a-Hp2{)rB5UEvYH
za}yYa_!S{6knDK}n!CGE_o`^E>RxU!!cP;r#U!yG(Pms<W29N1qh0|u<wLIQth{g)
zQVBOsMU^=JnR?B31&pu@D)I7C2{cZhrX=z5-3R~`d@r$h`r$9slOGzo>)xx5_LG)2
zGl;tk{)Z61>Ww#8<)jW@-KcBfjKXNn-5SP|kL({bz27~}=^*z3XUaP>$`SmX<1bkC
zl3FtemN4=ry~<>{(QZWjp+qE%uasp6{Du4rsc637_>JNliu-qI$l84v+xrUQ<q96M
ziC0fdY8m=gZrN&1wZaSCx&9Y#M_l!_?oj@BA=V;O{?@oV-F+pER%5pWd{&f*>pNkY
zQ_?W+S0f-jw|XQ!mm=N)yfIc;rT(RZcZbb3Rne910B|Aye}|gV?vVPme}QHL0|*H3
z{~K!T^_^Xu{&S$I*06ToXhHd^(XV$jBUV~YcFPV&;b@>O%S<F7S+nJ?2^SGb7}Jh2
zd96Djf4gzV1fo(XR4P;crw`b@G<q>`Y%?fR42FOkIAwai-bAaibFVdZ^@emfbK;Em
zV9b);B}Vue(S!-6bsgZe9O!*9l!Abk@$5hF=C>~*xo5k>LPX&Yr_Ff4QksfoDC^Dd
z!vo)B+5qwo!KTdtK=q?Fge2!JKA~uM@I!uw-cf=x0AbLR>^OrA@AXOR?&-8E%4MJm
zdSr1!xgp{6CDD8eN$lA$<Ht>#75UIYH)3^7b&<w)ZO}dmH^ui!j!nxhP<n2h@$&LE
ziA)kne!5}pxE3n{N*3G}O5$(js-HJuGxDam{u-Ydhp>dNC*06=u~Nl5^630hyl~O@
z#40hgv>Sm{!iS8@eC*n2=~QOJThD->T5^DzW?<Y~8`Qfe(-wz-4JHl!n9UM7=w1n#
zx37ebeBo$ShMHVo!Px~&n+xr4fwxsox*A#3;s1qfuw#tw*7OZ5IWo%KmuS^TB|)T5
zv;(`{2gh=XiqST)==TQ81OepbFZDZkb#}h4tZ%8}&r(K%zOU5!)-D~s51bKT{`)U@
z%sZi+#KM_!A_@v$e<6$f`v&~)s8m3x@_TtwslSz`Jut+3A<|3@d9rE>H9n5cnvoXN
zv!@_C`K54e9%Q^S^?J#{2N4U@j*4Mq!uwDVn14$*;g$BIgtIKtS|VuU51Lbul-s>Y
zUVm~weGWs0j(<)^o`F=16vwE9UNTyd5&QwOx^{P8CbO7XtFw9k%2kyl<hWq96CI?z
zL-TvyR!8=S-cS`Ufv1E|JF(jIWX__cmFXjzU5V*$iTh+0=$-CF8crX?gGT8Om)kSI
zrX5u?fr?hQA&&KY_DFpJZqDlY#M$ZN>v<t`(b;0I5pD9=+blnJ42AlF;_t=#Gs^mM
zd#Sz*Dk!zZYRuu5ebr9QdCJHrGy>QZN0KDS#@gFz47^(UNJWyuTB8+1cMj$PS`K6>
zG;Fo-V`Yqg!o?(Z=?e;`1z5u`(l;gCXs8b*0fYjILSbvJd8@Mz;fc%ZBoE?%Vy3*?
z2Z9}Sb4A(;?X+=iveN^_aWWdSjptr-xp#dE>N9}5XQ2jcN>2Ol6pRb*58`ZMFzlZ1
zCg*zVUPd}xmT^P|@j(6;4Cn5Ez1rY28yCy?xUi9ff-15Y9+^wl!&aN?dTY0ZTE3IM
zP3=(-$+`yvdMw%<f@1?|<(uW58Um2iuIwAz>6b@OYv=9xlNa`rm&Z3>+it<ji->g9
zh;;7#d>F@k5<OKSy|aiF)rb}DeOdJV*f@uC`=wSP^p=kjp4q)t@J|caPl@nG5dKXN
zg7aHXV1aEAf#tow0r4%p0B#?}Uip?@d1{xYCDf;FWcU}rO|EgHG`x)i<Q_=fV|_u_
zfLZeN1z)_fgox;-Su}XOSXsyNv}HKNmIl-&nx25@4ZN(&icdb>x*_1TU7u-62My7G
ziHv!r2)MSVYb0j8`uF@v@upREu0<G}pf&w{I3aFfN9HkVo_qUKZIOKAM7gVr>%BdJ
z*AVLHpUD}tCcj}%Y|lI;2tMu<Y?V)m74PwsFvYo@W!Y*2u*h;u6CZFhzmhMO<BLk(
zobaTv4ki>AKOdVs-5mVb+lxqF-fzzC?El5uI{?|%EbF4p)vImWwr$&7ZQHhObG2>T
zSZ&+3&DZ}vH}>8CeRuD3Uc{T<7&U8-ikUHH#HgywnVDajG0l)ZwS}^)ayA7o<2eYI
zjQ^QyQd4ysmyq1pfN+>#=9t;z^rX;h7FKz7%F6PAc@1+?qGQgM62S%2SGc`*AY$T)
zF#i4RLVy+=_=0(qeiji*b7Mvc5yIN)i#Q+TH7L)gkXuUiEGb~*$0sCWGW7{*zUKI>
zJ~EzMy(u?vlt>>)!d4d7s+7;y#~I|>;Xe(vcnX2V?LpIr-xCwKTo90nyglS)ivfQx
z+ysU)?!RdX%NG}$oL1xMshtpn0Lo4kI2hdxzN8|zT{x1bDGs#GZ<QjGAjv%jeRxQ(
zg67=FZfyR#-Cj6j1%}ddtjpJlpEYVg7{Cp~63<(ry-09o|7@#ba+C0p3_7#2Zt#<|
zk-%@Y>e-aFz(=VjK6~CW$Nz&BT<{R!$kQ(Un~eC*>vzBClGODvHo&P$DQGftbqi~a
zkEr^vgpVKWpFwFKNEkg$fRda-fNIT7%#}LpD`+E0Q+Dt>E<wwxXF<}?XKTQVz)dO&
z7NNs3eq~zMk~rb2{^e+BjG-(3Cd(@G+T+Tb_A(JDC^`nJ>sGy-$>2wu{8I4^$IrcM
zFPrYQ1yyeqssyyY()&fFvoKq)jf>%WN)KmmX6$IGjTjUwoYKR|@hy%0OQ^S9PnJ(Z
z*d*GvevJ+5YLhU{%8xJ#$qdfpG6m97_zaM4hZ_dk{!LTT!|3k(!D*V#tN|EOd_exi
z+DL>K^Qm6oq{FUDxi*9jJ$$l1XnW#7GIXL7!+t?~FX$3b$i&$4wETejF$$G^^TMDC
zkO!M6>OEq$@hnpGbksDdAuZ7<;i?g{C{B>bRO9}w3|C4vvdq=~vhKJVVi0++;pA++
ziqOq4ZxOHUcu*Rp5mLFE9FW>VMyVIh8SeZ*ykZJRdN^PgNm`Io*^M{e{J-?3<1E_?
zhVz`2umnkCt1Z~AL0e=3JwNiQ@y?q&a1<n`gK{pN2s{RkkV*uF;jmh?p*NK_%smEg
z-n8F%|I!yA0RDRYMgH-R&i`sK{;j@XWynPP54ymO?`oEok|k<Ru8;tLAjjYTp8lix
zyAFas<+a7~EmP|IB>Ims^_|Qt4Qb4*jcxuZUHktn{qDvQqG@4n4lFNoykI|X)IZ*{
zO809T&t%DzX-91hjRur#M4CQKR-Be*M)C*a-JQZid@I1;?+Hg}_f-uD03ZV7Kk*~}
z^*g^$9UE(-|EwKZCF;qp(ZL0GAE~bMrKeXB`7RTUjLs(kB{A?dh-JW)X{}jx5IY-k
zo^cHLY^{j5qnyGfc|LW?UV1w3IRjW7m)n;Pa@E^9y1(9RKVKgsMl!-Q6Q|_ML%3*s
z?9U5S*QL#p_-kkPcQT^290i|kWeWeauTYYsfi{s7A7WmHmeMZ%ec<mAWlI|g;9UX%
zQ3p~=r4-B=JrU@aHo|_*o0x(U2vQc#fGVT_1F6RdYeNSehyZSG4jv9ZI#wvSGepi!
zh5ZP|n%_%dtW+2`6j-YvMM;VD$_#hrnbugy9<ev54^MvHo64o&j<ZzMVn#Y@8JEum
z<L`xUrcDo%6J;bIyz-(V2Fbn^%{<?tOWKa8L@W7SlOvO!C*afR%9{yI_J__JYQJ|4
ztPPi^MB4A{VPeF3ypjTVhcL!m^qJ{TXS>-v2@I~Y3y?Ekc%PR6|MQMXWGbj^;GUpI
zai4c=)7|DF1j=Jdx0_=n)c*2bQ!a5ZR@J?;Vxntz`T&*Q-)lh`AxzL-<J71D1nL%>
z?0s?&YwoiBUknpgg@sQfms0!Dg6hgIat!+HubjS>f8e0GT$Ui0?$VDTn>xsFV_;%r
zv%k}jHx#P&v5b=57w)$g2^^kEiFdGI`k}R=gs7YL>Mz9>Dh|5fg0GD%U`_B6s4ciV
z4fIRkwD&BYdTcdc%KA0hCCPSvw^R5qPHy*SJWI-bv8b9nWJ%(SM;n|0z~rlJZSDwS
z6e6ZO_)qmLO*aJJN#I!r>@>`Nr?zdd`1ybh@X~owU?vDrAn5q}{QaTLxu49E`<`R{
z-wOSIo=AT^w3apomNcgSX(A;lUD>R$z<peH@5TaR9+26`I|FmD_9}geU~|SQSptWH
zBMED2ktx8HvQ4gjUJx2_Hl0FAz7MwSd0a&o@0~S#*PP9!S|rvq#-Q2ke0w>+ecwe5
zWq`Qz52wrQvm*a05(>~ckxCu~&T;rj#m~=&Onqf`ijH5-Y!nC~tXLu>Avq1k;OPJ|
zLh`LeAPxgRE2_lqG5;*hRhU0LjwDy3lkww$(=gQq3LS@>tieN4kuqs~Rxzd&r~ybb
zwd`5$iD*n>@DpCtpA)yCg9K~Oj8`_BS15A)6EDGN_Drm6<(9S>^x8P5Ua6AJ<RTaD
zQK#k1QZV_*p<U!)y`80U21fF;S^?rJNrqjr<Gd}7GEI%eL33sDF-NS{6(_dX=7RrB
zyADYTj#MkYoox_fxQ;17g!QA@j`kIJb%2=_RYEYz3YCWJQOp23Z#1jwgrN|UgzWxf
zB<6_U2W}vNE?Xwglp_?Z{&OJbg5Q7_Yk2O(5@aH$(s)k#cjXt<bU}B&SL&n(Zj7B%
z8~BH##VZyTKQHp(X#;o^kPiyXQLi*2Mv_`d5Y-)tJ6qbz+@5xbl<ua`<})ss9U5rD
z%1?Mz_8(~y&%+En&Ccr*WKBrMSFK2r+Z}HkSdU_p)o^x`RUb5XZ(*4?T#@?T;&4ab
z6-?(oXoo^n8QrUm?{&tXA<D;j$Q>`4j+A`{UAwh^ysZ!6bfh4XFi}rzPh@wuMoxV5
z++5cssFcs~cp%{Bfw^4paJ2t`6M%(z|7m)Wx{jLhY|P+vI%D_vE9x_+CCnmS9M9nv
ziIe)RiL<f&1p>k>Lz-U&BcAzP2K}Bs;E8fnVca|aH2PqcQMJX{BBD2}qqvctc*rKz
zsRlIP?82^21kOw(R*pt>Xs`lj5tB7<G#hg`G02$RV_-2Sv2a6ykrqvvV_4w5phAre
z#)25NMywZQvz*RK9FPz_kcg6)8e+6_wc)W}T5Go`gpuJ5zz0x*6;V3#mm}R0p^SpT
zALsB4vJDYKRP6JyH~|G!x3UhGylpJKW|4N6D*HwQ?QL)Ln-gRKmr3&3$&=}_7LoqS
z2q#!Q)m|<JZ~cNq_Gfq9klsPb2hr;3FHgDc+d|Nx>eim_zt2_!N<4V?@9iZK{(mxC
z4NV;W8z!wRRV#-)F}Tmk>SKv6-RP2lJo`;+WOHX)Cu0Yr_wB{SWMSRdR>2zG@iD6l
zpY9XDFfwuH0tyiKwj8(DlS^{5U#7Nzdxm$Jb;=`t-;N8jCUMw9{Gc`HsH@AOYnSwQ
zL2j7I<Ph<6=H4)ZR6V{QjOjD?ey`Gifoh6}Gi>=hmIgURJx{uMp5Ts5*~rl*Q6xP}
zhL9Fd=(~aaEcv1Rg30_n1Q7Rs@-bnke$cAh5F8HS1c?p_f@}96;bmhA+E4x3Ifr<f
zU=#>Ly-(DgJG)s(X)n*BmTW5JyHg)hbnZT&g1;ee!P*m;WL>$cT-@6;V1#EkRG*ic
zRi=bBM?PT^?1~Qbker)TKNr@_>BB{TQlEw5y-b4$RJr-et#faBY#$@L$uo8>GNUft
zZxl<eG8+#{<xj8Bdo+_8!K0m+D1c;T8e2#1%&bA45OT^>j)zcR1VzvJK~-e?ap2yS
z$>v~k;@cI)*c1+`n>bJ|@>aTZrD0qwUBrBuZ{ULA+U3DpbGAM_eEGP&`OxXR*eV;n
zA>MAFvEgk~W=3_Gx_irEtTh~R;|YkWE%=t}*RtrCC12(7qXBwk*@p?-v33=0RQc*Q
z9~k!$k@g}#+)HV782PQGL6+iC+*+1=tB5`}_Yu(oCsYI$0MeC~;`wUUrL|p3Vdi6%
zy#@dkbypll=u^xf2Xs}i?|rqVGZ1=apthv)zB87_txpo>#<_Ej(1qgRUVwF?6Vwa6
zfv^i9il(UUz9Y?X{NVib&K@QjkPvw2hZIz3aC{pP)i0Du%R|p3yh_NHd?XWi55;Js
z*Nz==O2}XDl&fe!^rAe-`DkIlf=on1ix=%`p%^qMAT}hM9Ij`(6MdSnHeP~5dyQ&P
z)B0n-xs-+w(4`ES;&ul5n0}jf22ElxyuWAaK@)J93<T-R+H`xOP;TwtnYwd+o_Sau
zvp#lG<v<Pb^gE9|U?12BYewBQ=cSRnWSHW=gr6P@R_q)c)By61-aAq`?M<z<zsxcc
zVwaPi$~!iV>)5b@s4yvk<AdSnh1Lr(5jD6J_F611KD7h5F!23cwI;JN#<3*P1=R?P
zw1hgQ?01gVbI4|AxU>Lx^e3=>LTgU!q2C_@T2dKmjJ7L3b(U3Ve#&lJ6hD33Qfzif
zZwq*uzsM=7`p9kzNSG%M>31Tk_KNS=w*`v1C%%{iAz|KAQBIAWBO+l&R9#3-Ee_LS
zv<D*<I$}z)FuvqFu#OrX4p(OmPck7X%}m=*V!Zof|HF8z>Eh&5W*<+!z@T&Imr)G2
zRriipY!DaR)~>yrH1T0Ff`ew1n`l&P=|D&EfYxLo&_fl*Lo~ue7lu=w$cB4@`^uMb
z;n&2{Yqtw?ZM6tY>A4vWk&^R0<>o@*=#JM!r!_zY>${FwzE0lfEL!(KXYoj9`A`;_
zU2{^2X81g(`S($WNPOufe5peH#Gv~Wfb0DRFbO$%nZlbcN_)6L3Xneh{niYS9$_<@
zv#WW_^;PqX``5bme>V{@|E)T2YNcoJ|G`E8glWXj2Lu2(_}0mZ|Fh7)B<ooIce;&N
zyu8I49a7NN2PMrPNz~L07?$JP{kGspb_?;*V=}>#Tc?7F<VeRxqR96r@#y;G#&KOs
z?5w+$qtz8EKXjy`EzQO_5Y&{EtF121?q>iOgq<SMPHk0NiwRgHkXBN&3Q2q$O|?Pa
z0A!Aa?iv|jvN{T4InIjSGYsl!Mk$YV|9UbRk-dFsi0cX0<7b=({A(D(kOKSZ5)?oe
zAP=BI{?sZP<Ru`zaxs`|ct!z`C0(2_Fh<x%Z(Mmj_$=UxSEWRq#RGANp*6npB*JnW
zZgRw16t=-kqSK9Gsx|B8QgG}{3q=Fg75c;|Ck63enCI&8Qp$)DtTkkJXZC|AV;#E6
z^0mSYLBA=Zsx1eVpa2c>Y&s)M{5b{6^%SJGT^NLam6N<~V|_XpGWJA6qK+<<guz;2
zG)7!Gv&qL#&xhEM2PA;6(u?lE)6+!4JRK})HgyE6t4@JEv=|R=c+KnY7FKDeOeCB)
zDq>=PLKK2~?`Aiauo8W(AjPk>ywOFPq;0{Ll%Ezozk6k49r~C&cq)bDKFxIqtSBzr
zyn_9GyJRrpj%NF|5S6~q|K<t!|IbVuk(OGN{Go6Y)>=x84rdG)_y_d=FcgFMQ7_cL
zckzMm3Gm<CmZ_DFo|TcK>3=pAvs5%~c14i9pQ_pHw0$|W2%IQ`E+xqH+U5TU_gJ@k
z)&6+%HL;jdW85<|WBuwh8A9!ewNi!z_dLwJTJP4IzWWWf#IQxtB@U$p6T<sT3r5sN
zHw}+#pA01eor~fHln^+fk4WK!M`{-7aFMSci@A(6@(skW)|g8mmp)ivprq%#x8MNY
zv0}O!>BAa#yPgWqKof43FL!1)HPAxs4hgVZBo%WTh#>8N+=M{D^^nAF8(9hzfgaG_
z2#uUkVX7G=T)UzOIAcRw_6l`QqsS=tC-vbfSr-LViea@cx<v|F!dZFm_RC8vEjd`_
zT$fS?zZp}>><KA}q`23%+mV)#89d>8h4i=)uUj+Xix!%ae_?=_l|#a<GVje36$Kcu
z=crDtfkvc&d%g3fTciaI9M8IRRsVrwEfnria}LRv+4I@G!}F(}H><k)W>4e5sV}ek
zdW`2ttOnXsX{VC*t0#Gb9|*F4oKj+{==g6+>7lOMiV+D5_0$eqVR3oOl6$FvMg2;+
z+>w*U`8UMok2;i9x_&}`qUT8A+(REd(s=)MX<qK&7$lN=``IgZ9}m750Y$PMm@AU*
z5Es^+-N%@dWe>BOY@!%RItIwfvq>|u4D)B(&P<yAL3?kHZ>ENV;O3}3+W_NbI}`(x
zZ#yrp4YKe>#{P!JIM@lZ)C&j4%onAeP9jeJ4YLy9yt<AH`TURCXwM(b(!078T}3KP
z4K(zmCIqO=@Nr<V!es!(40*ZaLeXy8vv+1I(L^~Qw=9JL(<?19ny<41Pn1omEm@w)
z<fhrDW>!_{fzD{B*)t6x3XH5E4!soKt`%bC2Xm&!%uwSv<kD92938Ds&1kpUJZ6Y|
zD&BNx3RBGn^NCSAE9z;z6m?e92d{;Two;BG3yAkOOeLCW5EXkx(-CB!x-<T`evPt7
z^f%BS<f9#Ot@9-=<%R6E3yT*DotP-&^eI<FNrHGG-V<Wr47<|)FVy^iWXlx942`6i
zNKM9kR7v)GHB=jw(+WjvA~{NO@`2ua^0?LcQhU=*ctc`C7uXOm!JQ9@(By%KnEW*P
zf#k;z_7E+ZQm_1w*Bi`Kq<xipc5fg&E-)$xo3jAknG@S<tZbZ%OQvGvz7&C@AJ#go
z@n!xJ7kE?Y>bk4OGvrHUajR`B(%#61KKJ6TP8@TK@v0*Ib{6pID!*+j*#={J|F|zP
zH<39iM}F~Mu{WUHWj(Aah(f7|*)jtgQ%M`mvx|E$D;Oy{*LpB%GRsG5Boh$u_Gev#
z(lvfTMmw5A)X4^`C)#i>&~@~Ufw>`wJPC#Kc5Kv_l3RAiy%i^m$I?tT9$`1pI$pG7
z(C~7tCng?Q+j;;iZX21w9$hle(2;d=E?!Hf>3o&jXJ~7mc^9%mogX2M{eV^}RqSR~
zb*$m!l3V*aPn$=zt3hOTQN7MVTU>2KBWFWOZs!-SBJKGhzw~Z&{_!tCRDb=E$5hYC
z%=H5R0Pa5qQT=0={;T=VYgVP&cli$%xX()+J8{2x=U;0p(?C}7KxrA)y_u*?C$W`d
zAi{Z8MRlfPN(ihEK3j1J#0q&zg(Y3f1XnnlZ`jPIF27+Bn>0inyS8iI4kyY}x+7h5
z`VahjR>A{OQ5D%@mZ@*put+?6^IU(1@B`q23PRzEOXYFy!orK`N|%cEr9Q_7@`U+X
z(DAo{{;F-sg13GO2Joo|NxsAo7{U(=>)C<C=#TsXG7=!Ff@S&>N3#m(G#JOvV-yvE
zE8q_w7b}Q!|1TovIL}5Dxn}}0;^li+dq;P>f<^sgq0qy*RMC5qokV;e5E@iZ$Vt_k
zwVC73Pwx@A5H^@#s`MCzBKe|8+ujtw_!y2X6Q+Cr0n!>=hn%{d-K<um>5N+qq5js|
zCTT&LylH3=?FMbTKXsM0hW?Q#l1q%e^D>WTwYJ6tkSL_rK!D4=2HP<S{b3GR3YW1V
zRi0^D+WcF4u)s{(Xbvp~^C6$8bvVAdKgHON`Ci1uV?H@tWHtqTPGGl>@1OSO2#*!-
zRjcpF)IoT$doBP7pwMB!=r$8D#nI;6LgDwQ*MF*1eW{1r+q(w2PVP6Ktn5#nbw(Fp
zKkT^vcmi1u{rPGe{Rqs3l7$}rVC0`iwa!@pfTY<XjKdRfIU7<5%=W>Q)i()KU{i8B
z=JJe++UEa`NBI0GeGKtNcllr+MA(-=hNQ1a=W$&EUj%V^c_4ZE8<>mj*9HJM9Xg1_
zcTAnwtmVdUpN3GvX2{$?f{TK-!KHbdN$H*rS{bQs1f??7*vu@0E-fi+)*-H=4b5d<
zUz*oCQn3}PBy8DpGcJLjL`Wp_pmLg;yCYAIGWu2iv~%-uxugVQA~Mwo77jz`v1F?j
zKpzdazhtDO(E9|kaR=V{=!q%gDGsQ`_1v71S_AyYU-FWukeexY>YkNyU#o^FlL*Ia
z<fr1PIu|&O=AevclazX%dwJ6vM4%GG=*h}UHz>#a<X0!8A6f(LxP5CER+V*K)svf4
z#gWqx-6JP!UR_G5WcX&fl-0C+Zu*ck=BeDNQ*pe#puY~j={D1loZ@6Lfx9t~paFCE
zbH#u?%$NMXm@qqTy$61rAFcR))IiT((`^UMrl>}vk(|HKQdi-po2s{k<waQ7JTOc3
zMxkLCe@BRL@j8>3kRFAk5H#XC54RiKNKII8v?;4{IBZ7L)8N19;<xrW8EX7g_6SB8
z>d;MGn766h`&pPBH(ktVH8Rp+fV_VG<wfKOhR1avM(vo^tW;cK=D(upKq&?*Cb=e(
zAfNnP7fQSnnEVpIeQtq(fjQ5zzD`s>HH&G+@C)n9!Ld>rQTah)Wu=UK2OoGjw-J7Y
zr%v6#u=%)6ArU2>sgzL4n&py|L=8n^wzdwSK+l9tqg4(PuOYf1*$l6fU<RUzOH;sp
z3wfoO56ZA2l%l=64NxW5dNB_<2`$s!;^&XCV-jeiKa;nPNeSZw0uArfMiIWWPv=op
zy!J&!do;z`8XEf-fUH=wc-E;EZ7RU#c1aPX68qY~pl>w77_jK#^fIVzN}>rB6l8Cb
zy#{&E?8)dTjmf9!MGdE`+cn{}QaYv>6tZa|WyJbcp-_q^C}cr{LnS^zot3LBC5cn+
z3ZPD56bLF?bHpfNa|n4FY!D9fSR<?0YQXXiy5_6thzo~L(G|e-Qw@VHmCMX*LnQ&h
z`NA_x@8@F*njOQ1bhN0r-O2`J%xF5ea(gKCii~h`ei}^_l(DBwwb@)wax21rmcqqu
zmh9WbTkUW2*ai!Uv*g@=h24Qny)jqOO4AFBSFvNpw<i&DR5~S(2R3ZkUkGaP^aeGd
zk3twuDj)x_YM7;nkAqbYV31YQFs6!HCaKAxO0f{tQgt50KD>G9-aEp)<CG=VoU3LR
z_H_y}9g_3?XvH5sm@R?Dy>2U%T|B{}?$!o}-@p?wA=yPNex#TDQVUY_JjAbMT6~Ko
zqHHK%_h}xF<H0;m>gE>?Qp%-oy(h=ji!Junr$n2LTaygw7~gZ!DqI<Ya!4a~(`Je<
z>QywmQ(MSX-=5rC#pLVhV;4ght5K{u6Q(Jwl42&-e?-z(u0Ud@&^NZPn!!R(@s2QK
zt!B)a{QA3=k4RBdxd;jXz=8NbQKxPH2kNxynd}}L+*fwDesY4GMo`neqYK9<0se8_
z@u*-!d)o(6(14YFMv5iaaozfsw*e>Yk@7ZypMu9BYjw_W!p*cVekSor@(;|Men*Cv
zJzWm=cWf0Nzl_9zu>&A$vs+j@_Dth-Su)ICGqk=eIbB;(v|QK$O#Ij$4G@|z^c%bg
zZUH|Fy4+PDMXJkh4@>}jPcu=#$cjLw?Fbq?+d3>-ML;Zoo4xoberT_B9urjNGVwK<
zt&aZ@9ee26K<v5$SP(XnY%>sq&rfmirWURY9onNo3`vG?Q|%r$=u1W%q7vEO9f7GM
zE+f&so4vg~vR*VaNKx>O$fQ{|Sd;xbGNGGVy?2BG>r^+8X!Iw4!~Gm3Ne}*U@Te@?
z^I5CW{%!C5D>IB%zneLm1YV2q#;g#X_NNiS)y^H!=(Rnt)8*%H9{I?S>zC7esM#yS
z2sgnvQkc|)@dI>X2DUEgFww;q3NB1v*l-4zyXxl01$HPxn;#1SsVyx-juNI7<vsA6
z#balJZ-<u5IxAxf8wU@do=5T=lnp9G5;IZ)S<rE>eWhB;d@Cm9-FnBj#c4NrDAr%;
zK8WRv{krQrei07`3}~7}0R2!c<Q-HXg|9uXRdnUpIs{|bHxRfxhbZjzTFbndbW&Og
zpuA#rEQQ;;bP4gj7*fO^@KxPZD8Tt*z{IJ2Xe9LrH`_vioCx5;*VWFH*li`ZzkjYp
z|H)sWOB>sFzUvDuw)Kz(kBe{BUn@sNt^&Eky8JDi6l9OA*ose2VxP5a9k1ui3t=SK
z&oN-1_~Ii5BunXwi9k9z8;x<FB!#sZ+%nt(`amqQkxjt>(kxd@LBb%pIJE;pfI$3R
z;6A9tZCd7BZ>a}Lm8zdb{<56whzse@w__4b0_OE}QVHAX>H>PF34lcyNn(7BnB<zW
zHXva{P(Ha^CG%M>UifgDl1%@gF21oaBO{QMkF4@uU07aE#UwG%W@f=SFyl?T)Hvyu
zGdmbrQs<|5$4=Lw;o3~fk2~AFk`e~u5tefn&N4EIEQjCQflIoA+Q%p%{N;kmdtbfp
zpO<rEzVAKr7?UB7y|mzR*`CS|>gCKouS#f&kOyp#3o5r3G|a0QC!8eNHIS|gkM_$|
z=48~I9`(oyB0!pK5^`y+p^{QoqKQ&IWH`B^nC>6#jB>qDxGEmJK^dlV3+FamjT&GK
zdP!J>eKqP4KQ(8Mbw%fp-3E9$C1;%U%PiE#a@s11`9ofE`^(1<@i<@40+n=|sF159
zIGPa17P`q`-^-rJJVxbo5MK4;8{o|N3$okSfw)(X7w#6wyxjCbbe3}K_0q4rE~F&E
zNh_u!3Ru6)GjdRhQ6C?oyxhE6DGouc+8NN9fl4i$DasVq&e&9|MtNO5WZGxb2K5o!
z^UgSts^@eS>xAEXqNleG-z4PqCBWczxkC_@`#4~OI2kNENrP>n5_tR%vI(V1=uuEL
zAwn<;^6rZPLX5L!7>M5pBDDonAElDo`H`J;^cu<o=4#5B1SFthPN}&YZV9twwgz9K
zyTXd@>_EG#wQ#%Vrz2a`=kdsBlqYi9gF1zb^dM2A%@u)QL=~5}M6b3%&H#CR{KKw>
zZEcrZmd?;A9X1(_l(H859m9R9`!^JKJ#!v{ZJo5;E>#_rIlLJAUJeF5TM<ke1QeD6
zR^s;j8t}_1K4TPQFl)zdf9dDc|4Eo+E6v9!^;BM}Q*P_DxQ-_v!yVZFh2AgALkjsK
zpRfZqr}djX>_Wdj3O5Ej(%VQ|X({<sF#PFtGyu`K0Iy3bM`PwN_i$JSKWwu_-kf5b
z``*z8uPcA`BA;j0mLo~Do+Y7S5;$ApWVm8DQ#O0k9A0?KM!p;|x!_eUrA+m1;V8qw
z348=WIPgtu`RJ97U>K&AsTO0drX@JTV%H<TvFK1|Y(x)4fi*Avtqr7ITa(dmLBpFe
z@lm7Lf-*U?Z)j}%8TRj+hQXXMG$<?p03Y3dsz~Bst7mUuVC!UNNTc`<ujl4>aKis3
zeBeUk%6@GK{tJp{P`pfY4NwoDfGl3IIiJjVtkm3sY9&o-xSt(B^j05^&lW)Zp!F5R
ztM2l0hcDKb%82Aov7tz<Yjb;ZvyV^nJb1fA{hJnzD(Ky>r;e-k&CrcX5RaU&{l~}j
zjs24t0;**r^@>?7_H%~l6);1&^8h)5t<aH^tb3W|MkwJtp@C5%1a?Xc0sYRw?7dwx
zVb|9_z4MR;LksVz_y*lV1iT_O@j(;@6sdE8IAkdjDyb!PDmMg(rli4eLsbO|bbMJg
z3?!^j_E?iAJaBJOfp{nGcK5r>$0&70v$TL3u`+@be)SQgWrrb1T}@=+qM~YTt7c8o
zAV@M~PO~o0LN{$?7dw?fj?0J1eF6l?$Il-HTiR1wlh)SXEL9WMSDT)`okWpiVl~|=
z`r6cnMe`pT?B(4LlR^l8K*e?O1V{+nd2+VAJzeg0KHg73-|liS$0+vPTGBd>vy>yw
zZ`W2#N0!S|jw|1~Ew^Q~L@K(0`xee7Kra1_HSdUk?tuHpRBa7CZI^jBy*kpTVxk2;
zXW)`?c`cyJvxetc1=rwQV(3XxC2N{TDorG}cog*}BW#@-=$CC$_bQulX}&&&PCXEP
zx*spjZx?Sjc0jcub`Mis894HsEE+Qf&cn0&4O*ot{I(pD?J%yF8F<!5rN;X!K>FUK
z8j>&Sh0_Aj=;0{85D5BHH6&YnYJm*oo<&OKkY?ff;1=LkEaQqTer`&UNMiee!glMf
zuHy@43qX;eZJ^s?c#viATgKxVg8KrmD90W8f0(q#>lPyZR$&0DVp@T0Qjhy9Yf8L1
zHi9eMR|5QDMbCv?^IC4GZX1+HG(F(wF8%5RpT7Jd_?SW(QtBUaaGKf3!iaDb@7~4~
z{1}6{Zb$cF<Mc<WLDoL^B8Ci4{eBy6N^wR+RJaABSuq5sYHeipDLVEFf6Zo>yYe&E
zl&iz7sZFn^&$qSFITRc-c1;|g-X6Oq2Kk|8qAr4#v|sGJ5nN6ZY8u6u5j+n$oF6-o
zZ|bLy6>N2%z}=orIn*$`ZrpNRP<?PfvyI%+UVWQI^r?u_AUJPKdd0e1CVHuRpX5S-
z^YQUO{d!*@^)^D@eLPWdibe#9km&XlOyOIU*i?18Q{oV+tu_Myu)y`z3y|T2`@=tf
zvWvunIMBLr*<=olm|BYP$47wv088!%*pm?&fyIdg867}NSanim#XZ@g1KsNn8juM@
z3zUQ+>ez09C5CV1m3}P(KxNr;bipQo2&Z0@yVmPv;i3Wk5!{|3WogJI&9@|AJwV?7
zYKu|emTfJoj+g63#$U)SmYdC+peIH&<*avn-_ve}qmDO>*=DfhREhX(Dg_OrZG!Ty
zzsJu_>5JsTvN!sIlKEy#NQXLW->R=!a$9Ofd%i+YUJrRo{-SRYT`9xu_;cNcdQs0A
zRy@ke4pd$$I8b`nE_Sm7m5Pmw732X0PWSgtU(hl73mB7MF1vBpG$xouz$1o^V+AO-
z1@^6LNQd~p9Cjfc|8?B_9`jX8VBI61-YN4}hE?UZ^~}^n0(_&^x1C5{;@rI@H6G(V
zyd5^SnBHxp)9goC8nMi3Zke1|6ppY^vl_IHu+VMlKuNJ_dPhmA72z_qL$?^{H=vnP
zBjox1UL^Cbe8iX<q4mZX<6>;3huaWFofGYpnqbrA0lLM=VkegY^h#GsZLsCmn3};#
zIJ7~e5hYV3b#mnhU6EQ7P`{e~N_a%F4E4tvPaq74G$xM`OCKsGlx3D9lktYn*OQLZ
zbhaO+*o{vhGQgegRfdL4CW+(-Csmep^$J1p0K96kfK?D)k-jGL+4q9-c7w~T)OW}k
z!og8|SZ+7ls{u@eT_G!7%yYg4>kC?ThwuPU57u{!8invXqbDfJx%Ux-jMoI*`4`HN
zzo3o(ud>#j6Y9{iNWx!J!1&j>0FK{eM#QUa-`Sv0r*xZ+I&!DC@~9DQO!Gm%W!^ac
zoF!Hvw#Y1Tu%9VaAWpFjmFxRyATW6xpYykB3G7|I%n3GgN_?&Z>SlREo;LB((attP
z9oZhkLv7kHd3J!!S=EsT%hmb(#KNcSp1GJ>+t_RdB>U;E9}1H05NjQH(`f?$@c1RZ
z@YTLcww+8!XTWiN1n!Xn1Vh5+3=8`Qf=Vut&$~C{Fv8nmh=EL{bvsU+bNkQHlfpn8
zv;qJNfbd8i*9IKcQEa%8E~Ed+&l0{nE*Uo>g1%p8iPnK8yZCti(Qf45WPK@Q)a5WB
zq)WvHiP_4q8MwwaRoxlDvGwN46tPgRh5*ZQQ9$`x$R!VrQlr>A70s=1Tbtfseao8o
z1fJ^Oae0Xvp<ps{I}$<<=o}%)9jHYdisk}V`c{{vKNb-9nUmeKrn)w8+pc*CyK{d+
zPrYT6C}?IoF}O*?jQ&syx>Tq|2AsOV)gbYHPIQn4?G>RurQ>EvXv1ON<_#p;Z;@dQ
zm&;IC7cz6i_ndNSbwco;vcMs#D}}T3%-pGSCOeP&bE7SV8bRTH0-UExJ59m|U*qSC
zWF$C#?HUmi6yys=--!i3Qr=g}Z+RsqUjb!&nulFRwu(@@0I)Id#sIzO#spmp_@nAI
z!rxG&Bf^#!)i)S8?(3r@o$0ivE1RiI<d^*Txqh~2P~c)iHL@t@T(syCt<O)s+g<WS
znu&6r!zLlWw@5Og#kW-|j{?qXuqs$3iWnCnGvCJt_XTjL{&}$6uI$ZXdpE~s<4Ph%
zoGZ=`1I|Y1mblRjK`-z?`rVeLTJ}nP0kh-lD3$gu^<(L0cF}QcQTXBCPdqxClZQ4o
z9W(DD-9fNc^p8MGQA44#Cv|~x$4Ad~9>h3ZwgE+UCqo;*T{pIA6PaJLB$ICE&KEg7
zjk;+gDyZmW;}HyyZe(3yH*mi_$!?%u1aN4|HkzR}4AkJ0Ekv&drK5VdHg7JR>$*k)
z_S*oUv_6kq5`weBa)<!PqK90rj9V|XVs+k1NB1Sk;<%P%rb9q4m=Rq{Wk@VMObg-H
zKgIqi6dJ-Q_Rmb67?Cf8`=PY@nz+Di8OR5Z!`$~Q5K$O0DTQHWde3s!@(c-2+St(W
zYSpetsVxrPtX4ESAE~2s$jDTj?oHQ;98KwT{f?t~k65USti=}y=toEBl{t=ATAvo1
zkQW+<j0>E0IUilbL*t0sc4NNb<2)@zQS%)#WYQR&p+=y9jS369y@1w0e7=FgP%!LJ
zn=#6*mpJa0fNl2W=+z)jCb%jV_k^8<lb9;llGh^Z6L)EYnd24}d@TJkV<9xNa6}Pb
z2}h%7K{uU(Xu5EWBeNyYhIP_sLogUJ==CDhg^$as8ElIjHtM(&fhNP#jWa;fTXro#
zNmWg%858s^70*@vEKLMuc0d6p@iQ%SUr=2(9i>8Xhe}C?Aois)zec0jXf&u^69hGs
zrT0?!yfT{vcEO7JNFQo0&l#q?s`j4zy@z$h%68PThxPUSmbaJLYhycEu$QS<Eow^y
zLvBbuV_(7<-sZIMQif8F`rd}D0vQ1D9V(?~dNv67M|=C+lNzy=X6Z+M>X7$#bFXV4
z8o(tSl_ci&7!8!wQARDG>?S@L+x4J9$0z;O_DKiuF7vO1Z5vU|_2Nas&RTxgbv#V)
z^|am3rENc*{($I5p5ANl`7$jk{Ts1}r=02Ck4Y4pdke~LHDF^mxwoOqYPA#%W3+Zb
z?ufv-ykM^GF*xWfoF<`!620(4t9D=emJ!YhzBB44er4>7Tzc;~x;$6Q9XZ`k45+~i
zV5D#fN0F6n3wf4jiNqHkFlLwOcW02>@|<WmOfLL^A6fV;uFDnEL~~9lzs&OcYv8mC
zYDsF^DkL~{=*u^K%EBXXTjknA=6=_DC4wPtVe{|z@oZOP&(U+5=ed<hiq5RWy1->i
zGi&7IbN@ob7R)g>F+VLa*(+$Kw=X5(lM^W?aL+<HwBXjN;5kEWjoVS7ZMRTIsx2Af
zdgFX3iz1%@Agell_|;7!54|Dgzkk%3I>bfI%{2R&p(l5AwnvFYkux0_PNE31y1jyZ
z7ua=b@oYNn-a|mUVRwS<odBv<U6=kc<j&~VSPI%Jglc~QIf_a7j83XkK<hnI45mv>
zh?VNAsj*rMSf&Xq<>W%s3$S!?5yaX@?MUkhji^+6#$jF&!?5b^>?3uG^TQAR=p`TY
z9hLtL@aec_d8-s6n){|koGK>FX+Je1s(k2uK#aq&!C7eTI3RdtxO@3{4<`T2wLD1r
z;k}I7WV!CRW|o*;X($x;voAvxxHCZ9CTXH_*SVt`_bYW&E+w)YmUn%<GiUFq^vn`h
zzcb*$%pluCi)=vFIXP7$uHY^dwSxw2m$baK#7p*<w|Hr(VnrFeS^C6-o*jq^vqL-o
z7_sr%o78c0cJ&25^-B-yoCWt6KNK5La6aZdy%kf*La}~>&irXYjb5b}GSEC}`CAEB
z5hTq0(JGMB7lB;cJqF%(&pNda&Lzi(U@`Y=VkTIj`#XD>(j18#t{RHhUG$wh3eaz_
zeRO}HLB0TPY9K2w?Xb{R3e&2)HUjy)nrZ$1Z~&_IWBFI2{gWBKj5>M*%p6D;UIb0|
zoQ<qtpB|h6@}I*qUiC*XVE$dLLpNkomGx_HM3&)DLr1wZ@puS!hQuo8!l%6Zz0I87
z-S`p1gRDjKPNw<|)3ST_;1eZ+>GD_Xp<+jU_qD1zd!^3SQl-={>BewF$2txp7ThE6
z{nzQoKVwWaAKrZOj;qId<>8l<wmk2O8>rmD$hA8;yFV8PIy`PY5<+pk9TbXqOL3lM
zDSv(vBJ&T@U%YrY^uCTQu_Zj`YrOL;?3M<9E{qB<bYDM{0EQ7P$tCL^zwh8*<PwVM
zpN^(qF{yP%&k8*wBfNfmly0%@PYq|i9Y=syNFE2%#V6w_OXQ2cE21=ozSzeAVJbza
z8AHb#voD(dQA$OMMMIIqX^yDhdIm;^u3eQXQc-ozQHh<HuYHAFc4s-|u8n@{E{T1M
zQL@KnQt~fQFOHTnv@_4SK?7Rh>AxBaZF}WR#n?6}j69U18#|SC`}#i&?3iLIvl(ar
z08cIe0GxjtePg6=U}*N=cnU8vY+N!#P=>bN6s0bjYOw?Oeu5w9oDo@{S?QY)x~y4e
zv;jlGSAtOdZm~}He#~;C5eOhwCs<hF_K>;vHy~{3<^)cETNf>HYUzhrNpQ5!8mtZh
zwa`p9YM^c(qY3uUk`-b=<1(PFyGMmbI(OB8nxkS}xiKBkE<?0`RM;o*AQVvip-`JW
z=qF|mUuT989*L}x3g0>SxG=eK+p__jP<u5;j(KO1TmYJJC@@GKY&V(bN|gG{4VU0Q
z2o5=WV~BJ|1b0qB6Z}&<m^=W4ORrSN){QPDM7Bzq>?MW+p*K70o9hiTbNun(gehUB
zkBzo&IS0j#VrmMFcHXT&FLnP(qq4l5k}=6(<Ss7FxLVUup&Tokooa~C&DFxhL^c>&
zWKOOI?BIslF743D;n~!LHhMo$==_iBFfAA<Y6@vg4i~pqorANtv)k?a;NVjVDs9Zv
zkEv){nS*SbNf}z_#{n^!!P(#5a6^9KZF3w<N@cEDBzEw3@E&o-pb`6Y%Qt~wf_lqE
z0l@DTkK621;cWEXlPzcw=XXcF(^#2V>9T|Q6q9x%q(L42KmAnQK%vLZGqRv}r?rG4
z_BuP*(6vSikk2UN{+y9rj$DvQ`$Q!yRfwtM-vXrs%fzC}M{8*#yXnP%$;!y8duO5Q
zQ&nejr39JT7sqNM$B-^njJU?fuvHQM(s%1dUdIj7(pDN0B}|yLz}|%^PGbt6-*$r=
zc0A^G5{e~Zh%<{Hu0~`>?Ts~|nxKt90{fhHZm(Vzd~_C-j(KP|!Y-|hvcl8^TZ3t$
zY5Ha9AzJUi^}aQnY;b0Psf(#kSrcV^w7mT{AP@ie8>-l>Y*)7%dd&jneiTE?U}icG
z{<F*SUt^Tfz<-0H9hU9CA~SpruozedEE9$e+m>V7vFAkTe|LTVF;=|Wvi&z84}<;<
zm2AIk+qNBhPyFXViy>uDGpz^z*`@ifF-jTOOdK|DTlekzo)f=0;9^y~e|EwCG1eKr
z=l3@#W5NCn)w}n-CjoO{#jrBCnLKP>wy((lySx35v1&FfEEpKDkbwT)oo!oN*TKJ9
zwtrrvjE4OibnHBB{}u1yh`xV=QYOIP@Ow9K`)@!d1^F8)*nqGAqX9&H347qTf7%KS
z{?&r~^CE=|$lsu3M_~J}$TL0K_$W)xr7Kks5w=Ru5E1nzGsX=^Z^8{<3DF<oL1MJz
zMXLXjre8DAM-r84imt6teoHwDC{CfB1S{UcPPE#)-1D<1PxUlN8LX=`aLqVS?6!nf
zZXOvL1rBB4K_TI!p7%4L;S^tKgVA59C20+JdOv`FQ!q4G;lRn=NP;%Vtd0LIfam{C
zi8ktJpWuaw+CR$)pdws4BDzmr!l)E=@Lj<*Il}+fjn<{O13u%JvO!zM2+l(knRvS>
zRUB#5wu;=AMcqe2v5s0+z^sZqs5W-L^9<<KWcwOb777I`6#b;Ae@I<Y*D#S6#oI4-
zI`z-3P%2T`NIlAoLDa#d*q1~r7FmJQ>X=ks>d{Uk2-iDDTWi<sHP(wa1S*e{+HIz=
zXPYmH#|r|<)KudWp)RK$goYhYrW{DOTElwYKh|m@sH3NT8uA9Af^kT8cvFhjJ#x%n
z0%-!dZO-aEmPWk=$jFF>Nu$7ZFG*yxj)_y8o(FX6f8YmVk^%~gJUOYm+fWzIV%1e%
zR3j>rWg3nXxbg~hC{a5zB;ToL#r@OV_6qH*j||V)E92GcVrwKS+#VQm$EZ4)sFKt(
z4(1mf+B$_4=<Dfe6*jGu2y8}XC+zL-Gw<ys>Kv5WlLTC)*%yeZk`#$mSVv3qkA!BE
zAZ%M3=JKj&Uu0Uxr;;BxJ<~|cgawj_jL0o1;q#B~>tA%gE^{KtTN@MGC@Dgk+wA3(
z!R`8!I5Hbp$t@JR3j~jyUmHeG@?&6OFKN??tf@(7_d<149Lo;e3yU#yq!oS5@=m3~
z8|EJiEa1x(HV0TV>MOiCUiWWjOd!P{?hC%d#r+;>lc0!5#kk}-`6?mAKUoxtiujlr
z8sAPfH;-I!E@@;Ei;skEcRvbQ!r0=~3bCdoTH>uKNNG~k;5%`K$}exavJwAuH4<d=
z_e>eKlI)6W$3GLM3FgHTWg?VP6zh0nM<qDkYBo`jYLA5pQOm2cf<r;~QIS@P<JF$;
zy(|1MpOpsJ(Q5BV?P`7fc#TnJe{q*#K9SZ(Lr)~Y^hvp8E7`9l@fCNcZ89LL?hj(V
z3&GW)9wRT=*qfK@a-o!n;v>fs=Q!<~EzFEA#9)8f9jlg6olsQEAl<FBut&#OS6?e*
zZk?ApW=JA(CD$2qe~PKj;pXM^xtU5Sw?}B4!X6x8ZYvBkHvMhFZYIstC}_0DM;)*!
zmw0CgL(}!L)V$^Ob*0QM>@MT8RQ3C?qPUTC9!7C(7LkH@%$gIsdF}4?Q1dS9B}KyQ
zEm>KR{!lkB#e+@hSzJo)<?|}EHhoJFN7*F}&7mYXo@q56Eq_;lRf9HNM@dyP@(*M@
zs_P>@%n{^IYLfe23RGK*&z&;``Das?t36qs&UznP*QXIWO^b%*Eh}a-<f1y69B&4*
z!-WE8ht2k{?VbFoMN|4Z&&@3sH5-tTOrGjR4h`MK(Arp`NMnq3eSrD<Tx$R-4H6?}
zn79P3ePhUo3UJ<ERqzH4w_V*IjhoZ)>>pZYP!#78><bNQxCV<0uhb%o<9&IjW$5Zk
zh$YU6Z6WStWmyVZ;}EZFyjvfQ`vynU=5NYPj%H1B_DTzZYgT3(-p!ntG@u{K%zlB_
zW$C)rjWtdln`!D@83#&p`UNx+NyX}cUgKWs=w{uTOZo+tCA4=;Nn+-i^VrR-<9~F{
zkxK)LNJ8iNOB={AXZ2+kD9sn*+JsJZ#0O7AiWF8b{}RItExVeX$VKk?3Nro5x>QkM
zj!JD;*J)F-5oKRyL9cMzz;IHD-x$f{({Q<7GgaDO*yZ2g(4dP=8Pp&z!%VF*S5%-b
zP9JYy=$04H@_iSJDBTdb)tuHPE#Csn=x^!75SKUvPti(ii7ghZe6skdt<AtKG^Cyq
z`b?E27>Aiv&8;pQ<9$@z99(~pN(oPTW=p2Au(A$&GRVVTl3m^3-`sJsx4YheX13n(
zkDX{zWraqf-ol|3+KS($;g7AbLGO_zzgi#47QwH#&H4smWwr*!P=ZxAP(7XDln-Dw
zEu3JJZCz*h@ykLch1VI=mzg^7PRk8Q^`s{{1;%_lKQLt-p0d~2a-a_a(lYTjH=s7(
zxlSv5N4pL%R2*-f7p>%pE>FWK<ywx_JZLo?LbEggDwi}FHCWu$QOnlkeiRF^C+{4$
zT24S(n!c6FVUHajw;to*k!MMB^VJ^$vNXIY5iK#SYfxZ%_*AJKetZ-h%nlqX=C&oz
zEI7<?^VWe|-@P09w(gnq-DHHA?_ZY6agQA@*yqlQ`IpBnJUMKfS{$F2%4Hk5y3=UZ
zKV!7HQ7COOy#Dp!(U?a2<>8$JRW@ihx!0m~-TXw}N2~e%bC#+T_g-t1wu{x_N{MWX
z!IK+xW0a6zsfonUXv6#<?U0fi)%=Rp@j|JjhXIH?We8<+4H;!~oN;x!QZZLx?B|1)
zb@Qe97S|lu%?8AowXvb)@ocGFAA=BeN>TDg3?)^2@MR_hvbspYQJv|+LN?KKHr=r(
zYeic+SLO*{ZdjRP=MT;D_D5EDO|a&OO5>?&>W7cy(#py-U+9l6C-XC#G#_ZME+cab
z%_1E^ADgu0)%2C6=_O5)rY7TC=KH(kvPw{gm_-wXXeB|hqYC;b<3SriT${Aj)%4P(
z>2A%UCX@*-gedIFY{eiQgG1)~i+@OWh5l&!7V2<EqtV`B%7eXdC!7=Qn0rN|tXT-%
zX}TKMu_VRmlWW!*CrRjI{g*WLrRkJ!X-&qn%=dfArPMaLgwqQs<PTBft-(C&3XP4_
zidDH^O;T15C|&zLw2am<VMLMn$l6*jdn~z`jPx?~7Kbsj+o~u=CoKww{YvJ<#Bl|9
z0jMJBR=n_c8x$HP-loNwZCW2d3LmetsCOY((TN0OgF+DWf9A~Cx$#qB=T69!Vi3x7
zPcY-6o(GgT=uxTCN&MWOWx3DPN<vTBduEt1?aAL={X5kMh*dud5>RUqLP5O;N#%R@
z-M84uaQ8eChVVIwa+iWzn`GOSK3$vSVFDgY{IF`dJ_WT#bBpGLU=o@1esSQ)&_9Nx
z`oFR1ruA`U>Ko(e`xn5e4F7^&h!J~&U#D9Zg-vskJC%9J8*#ZBO<-b-1={F*3s<`$
zQz8jBOHO3($bd#NX)tT~5(TCXdNwB9=;!Xb`wzJv|DI09-ptm>%J9FkKmKyU{<j(8
zSgGw}XWxmfUEe|Wr2p3b{9j`2tqlJ)xAot6c^j3iY%;#H<t}yT?F$fzkh+Wi5SL0o
zb*c5jttd^17Yl+c8f)spw^!{obZ&VA51H&Or-+!xSq_Zf)p2riM(tr>3FZ`zMNSF;
zR^HuhW;oY7LCA>p$cQtfrP`*{$_}9Zo)8{ksPab<rke!E8VXD}hXhwb8f}z1O$bZ?
zI27k&fYW4{p#W9DsYvN*s{nfca|q`lDVFNXPTCs%lRShx>SwHIP63c95KqKhsC$^K
zF2C?MZ5Bge=oN7fPGE>G?9K^8N?#0?dT3gIm!5Q_Q)IncusPrXK|ZVlKl&}>wa_GF
zkl4#r)R2Cy9Qvi-otV)|MJ)mI=tW6xC}AM0c_U%^^9&cB?H^&d88Bu~)i5KbG-ZQA
z%Y4r_s<cZmLndOo*dz0(yva7`p-vVIjUV?HGb1&b;84`p^+ptGgfQ+eQ&Fk7rTFhn
zn6SoLCEitxHN#|%Cg#b9P*xT|O+oZ?4ZJXwyuUY_odhe7dT`xoI+-Sx-%b=B1Zl&;
zSs+QT!cVbg%=n7va84@cipr%$8VP?Z_Ml0N;kD9SWM++CU#!WDIF<LtadwE})s3N5
zm?xC;Y<u&z`;l^`7`eS&6mj9$6v_t>0cI^mt5mO|iUfScB@Fd*8Z>@(IlvBg`Ew`R
z0)k$#Df`Zm?m~zi)_VGV$kE6xVNEm+x6wO?ATD8XM4Pn)7s4`I0JqJMuvVEF%#=?J
zG0Lj!yimaO(YFS4v0Qv!;5)`uAn>g3j79+m!jhu|D}hg{)srmC=X-&W-XZW9scRiT
z1t%NhtoHkoXe$lIG-&o`u^Cv({!wj-eD>{K%6w9_s-%-;%hGG-8;D02ni-TyVi_T8
zi}!q);Jg4Tct<<H^w@2YUrWgoi)*3M!P3|2PM`5%7W856f7TmvQ44$#OH8+K>=Pz!
z$tV&&-{GufemG@<C+Y|8ho3WRXR9<wF46PiuKTnA;7Z}g>;TdEb<N=4Y?=+;m(o*o
z9Va)<4UqyV036dr`py`Y7H)okMV`W8DjqYc;1)l2AvT*2<rC0A^_jCjQS{^DS3v{+
zj-}A9gUk{75iZdV*(&T6PqP|ragA&Ik`AVfP0ZljsD7(|{+uzNrFD?Xc1BFGO?#(v
z@e0F}Zk1#t{qfoA!^#VfRQEt;&MymhAKml*W8$KP^9GNN=HfRxk+2h&`=%KTriqK9
zk=@^D@xp|bcAD|UTx4AcWJ2ouPtRv6HtwXVu3f?!Jgq4x%bl8k%4;vSbp-%va$+wM
zyJcP^%EJn-kjI=C6k5HkS2tO>TR+H~vQn%#yL+16>a3nnmmjs8E<T9Xd;tF*ETT;F
z9bxdDNk;d*o{;=c){_5C?(lDx603MUo4NlYcfb-9FjJ044inFZGCS=nL24_zAc7M}
zGHIX49f&?3li+)InKV;hg76vhxO&^aJa53|#~o_2#<qs=|ITJyTe6u9L9L-;T3=ZG
ze>i&!=(?39UD)iHnVFf{F~_lEW@ct)wqs^yW@ct)W@ffyj2Zu(b7$Uv=dL+-=Dod^
zx?9rPT_vfyRqCqxiWZ$~BI7-mtk>yVpc9|pd0l|p7uOVv>dky*D1Q(d(bC9eXzct3
zQ1>7z7qSq4*Cvjvdt~40CO`28U0T6?ryW^8{3TWM8UDg5s2Se|C9OP0`F`}$lO2x<
zeBwahSAn0CKQEkcWZ#f7@MyCm>Q9MZi`~{ai>U4nu5*bRGF%8L51{kbx+UfTup+8i
zy|2u**727@r`{O_Ic0_(*xwmuN9yFTw>;!c<M;Yw4`wW*8hP2ARL{lVyUDdQ6o$jF
z_w5W^o9htaUw)6$zIw8Ba7GuhWpTJ@DuZ4>NmPHC*lAEM)xP@*!Y326==uzPP=dk>
zCFF)&)`i!>5x;I(t9iJ3=lp#7N_i&V64WAZ>jXak%5&wU&MD|`es|zzw<8HF|0ezb
zZ(LkzS40vajone5NI3Zbd~I3eqW&2olCaSWl+r@8HTl$p@hqOCey!!ST7%ji^;}Hy
z<8`Oe5?3BZFLcC4*|FO9>bKfgNu#~&6NdjPEU}OjK*fN7vu(ikKfZYWCG6~Pq~(8s
zPC_{*_0Q-eeii0g;E8bqd3OtO<~cdJse+#RcGjMDa`u%!t?4iTG1A!<F$N(Ptg`aU
z3w@H+oJ;5>0t7>JBXY8{Uu@xS?O-1w5u6`v@0}LG!Z_QXIolxpRr#`{Z)EY4!!3Nv
zvtjDw1d7oM&<}kjD{2@)<pn_h6%J*zT1>4GfGV*@{=c{ne_p`<6t4a^_n|XQ%VzBd
zX5iH`TK*A)JT|7!M31ox8Ayo+*?WwFS!o$H@ebG(HqL61S@W6Cb}A_5eri&3=gN-^
zy8cuSE^nT7{N~Kx5MNFD9q-w~@iD;n-@88hPVIZQ7=#|2(a4*dIeuv+eV|Q2v#Vl+
zvyL;Y5Jsuxa2(Kn`OWx>JH@a-$a_wn7AS^4waT3uj739jus11MQHqgm6*;Yr5#jY?
z*^=vh4B%#U&a>bU_C29Km=a#?$q2m)8lB8CiC)EyRmzyiBP<L&$Y$6wc%leO;wrq9
zStilzUMX7MrU9kjS{rWI#(KEDkw?qKe2r%;oVHB|L$2(>#8UmlD?Cs2u-lPaMn(ps
zbS&oh=6f2iGkZGsIwwZBJ{FBf@hoR}oLWa#@UP{L6w%Ycy~p>tdP}bE@Od@QT32Nz
z>tpAp&-aSQl4ydXT~HY9=$4Z$I6!n0U-4{)(JZy*)css1_TA%Va+WDX^;RTD)9x$O
z*X+hcr|JA*Vc?MYgV@aKHQMM8s4M8CisZ`iAuNUbe9{V;dMTTXz}h^$*Q3u}oZwL&
zcT?890^Qfi>bMd{<3{XlY)LP=ej|KzDYo`@tR#ThxY#`9!|`G75%{%|*+RBT2d_dW
z@x0&vUayspTa_U3eBb~6#+Vl-+$o9Cd-VxkG1OS8+x@p0Q>O%r6W9XU_D)8L&aR@R
zcWW!Ia?R`HP$5-U!=hK_0eJt^n$nhbb7bxTlZGUVb5(E|XSr60sMB;gsCt`rwB|8A
zW_O3jG=!D&qH#YvPU9+j!z8;^y~q80!)nK5AA2|h5*qMs8thNqYvA>-$G_NN?}4?0
zMvrJsbX2~tjbbRguVukL<iKz9C?0bte<sU`o{4U|Gt0RQ81^-Cs%z3^q3eXt5U;OP
zcaz6wX`cdo3~3(hEss_vYcpTDhc06z)8t^*r>BS~B?%yTZK4m4F4B|Fen)G1)>*${
zdQs~clt-;}EVO8Mv{=^KMBWB3xYUDGSf7vEUzj&LH|pSAE(N_d&RSbF=-^x}q4wL?
zmR_YV5!l#lZ%<~llwLsxRyA(3nK^5i8+f{np=+<_RUz2mZ-`hu980NaJ!=$J#v6Za
zS~b^p>PVYpO3!9rZ=BqEYdLgfTko|zZdlE-a&}{5-(R%EsNbA7er;M^4Cn2!M5yna
zH-^EMAgF(zH<rMb@LSz$Smni*2wlBxSoOjl$2WeIPM<tKzJO$W#oXez<Ge7m&ye)q
z8$D>qAGKqB4i$}`pCTV#J)p>vlKz^38yuhQ%E@)%XrCdi&6~;Z>z_Y#FIUcuH=a1u
zJL~S%k8sSLBoUmSv$)4z4Q_2+iQbF_?^3QDzW(E6=V9L54u=YFLq?qnP!j$r5tqfq
zPJwcj<;86m#KobK;A0Cx|7!u0L?2rSlVm+wXYMkYLa*EAdx{JHk5<*9)qo@L{C$Nr
z3%PDv*P_)Bn52s8rm=XBBN-E!ZX2&Yp!M32fUoPWr7n)Z$SW;z>Q^Xg_&0@0UBw!&
zgk;Yh&^#~hrJ6oS(Q<QJWD1||i&pu1$SG*ibfq;(5kg9rffEjuSI-@wPXb1-=oDl|
zuk1gCpd?gE7ikfgME1xWB%qM@EhMZ%)ujrd1y_Y8mH<x5GgNDQHI@WU0b#W8xx1lb
z0#<lZZpK1k46JFJO!1{E`0EO0>)R$1e5qa<5|9~<l9S{?iVprX3%^NF0V}itnzUrG
zg<uk5hE%=s$ZFy>3BpPLaY(I>_Tt4({ZMYQ(_O<&oJGNg2Ep{`41m@uS+W)NX!G^h
zGNG<PH2_OPazA*pp5gtzn+Ls)80NYM!X3{snh56l3xv7daxA!O2}onh`3MLPxu5!m
zlOZs^rvRNbOCdtDj3m_#`alA*wV33pf4ivUYH+)ZL}(a7VS%tou)KU;z&9$Y*|OY(
zgpyHNdGVS9vhnQCA<P`cZ`J<lYD_)`u(Bz+0Es|hluMEN&k6}85bKXz$fW@OM>!!Y
zE{<wUNk#_Ek^s1BxfCj@-Z`Q=VZER@`JaW~3`6^10mSrz0K^!-aa?9EM*{_7x#Qu|
zsR2W?EbOuC0}catCD+YkO#eR>8DLLA9)uj4h3rog<<Ebq{#$~yyu=a!@>FE1?f~BT
z$DjcWFAG*yq(s+&pc<D9S`7ebt8a)%{`1biG7O9om>Tz=yi@$){V#6+E5(x`t;Td8
zDa0H`8r}?x4>m#Hs)`0{)_&kzM5p{zn7e=qoXH<R6z)#>SP&D!pQf0K`h}wXIdC+*
z*bv`UPiGlVdc>oH1mBh1d0<CI_6=p-6Y&v1nQu9<6txP6`+XyRso0Fv@oLu|mre6k
zqpw`NRN0py9G|gOVU0<1%M%2hv6Wzr*)S;+NH3n38B?yG33$0yYxk$=)le;|zHL2q
zy}F2eg8b2r{(Gc{zt4#AAD`uV4p#pcU;MiKWY;JFm+lh*ARwCmNlX9JH9+a0W8-9}
zx3&CtzTJ!J0F+vG^mp2KXvHP-ihx+~YqH97NlS?f!?+?micNQl3wP7lrp39uqyl}4
z)L%9_Jn&>;0pD9ry;mYA2tyqhY_GTo2P7`NzQHT2x!ZE-;0lK$7-ALLc|>QBk4K-r
zy^vEl@;GPL65Wrqr-!_?M4;PjcaifKj$X~uQVf^Bk&D#>b43~0lfyFGqZ`S+5J5v;
z@LrzYd!p0TQIeK_$1Ege;0jg3SjE8j3gr9(D)f<BF=BNcOB<I_Q5VuaYIB6unl_9S
zdTBDtOz|5$m8^N(6`$4^sWttWV~(SvXP8zs=71T2lXK_#Q1mjC04C?|{^juWZgSns
zj!r_E$_0I@o+neM>ej7qQUUp3;}`jK^6EAM{N?2(1QY_{_?}>#HUVWi=m2xesLj4}
z`u;ZQsTCp$pT%WrcJXf`M;v(@S34|<dVcz!zaEHTZ+D2r+_WF2wLe(j^@!VKwlm`?
zSi;}lUWPfg<0+1pJY!MJ;_ngGFD`|+`LM(GiMU=6T6tFpc-%hEd#eHd6F#2|t9%#u
zxN+8;GSO{!HJzG99Ip)8U0jXao6~Q5$<lU=n7G&cy<FMSfY~MAr}~J>WZ(PXM#A4{
z18JYM+_QBoI%)K_hVCbY&9;>H+jHikTNJ(DS!m2rxLemYFW>72!Bud#+GcLX?Ts8o
z+NOi#V*r7XgPr48w2&L?u4r<d3w2b|9%Z+dyf^a3egM>6XU2H>@|~&c6+Xavh98YE
z2tLH%IzQ^_ZZCNVp00!GB`PB=O;LRNv!4MsTI;nvlm!iADyVPxIwexND64}oGmASO
z%4muRNu^*pl)s^Pdli|u<7N0Qj^l8@X`SJ6FaI4KOFck6Ky9EY!~kiTIP1G-cmyqT
z)5%QULf%AP(|5e^Hsy9QZah1`^&4;a<K$L0Q799GQ-3i|H0zc?Iy^3W-`araFgY)?
zgHhlT#zX5C@I(Q&9@(Bi7q&9Gh!%vltjY#k(wRh*YqAWqe0ek0IM9(*dyWmEnAbge
zG%?w&H)0_2Tystv79A!m9F#lKfuLBRHcaW>MbAK%GIC1#_CZZguB>1}V3Y3+09Vzx
z7-FDUI1E7$YmC`3zh_KI5f0jjg#j;8F}ojzh~_)a5=Vq6LWq}#2Z2|Oxx~4I1ap}F
z%7?Cswj2;l)b9&)dB4d7j(mv=fApw6lpI8d(X)Z-;8MaUOHTMHm^w^;ni>q76oMW7
zw33X@CCDAgpg9-%l8XBCt|N3Ukbw!002%oq>h463(*uRANJP)?2lVV{LiO(eHP^cB
z-d_o*;7fokTi_(;vx(qf17V+9rZQr~o0oR%s{&17RH14}r2*Q9?A_a|UfURtnr_=2
zdmPf<$>@B>c6}V*oq`XGSI^=yd`z49nl&~A5dq-T@A()Q!57Ndhvkm7+vAr{c=DP@
zOLSdITl7%dEp<F8@3Yoka`;=c<M>I}Intj)c()!+i<#=1C=$3CWB#E$I~Wx2lct-4
z$CtO^EkM(r$9YEEev6$AZ7k(D>YF2H^zjpCx81_{%xt#pi~H%1Rt-BIgSV#&yH?)c
zpO{XO)@+&szSb?bOY!|0uk0~*GV$so+6=(Oi#2(p-#*)<IBnyoc!+Ccs#ouH@E#FO
zhFYs@|0Q9G7^J^P7n+>II_gHtQvN;owj(0vy%M-3dkZJ)6U$|K{?pj~LwX`BBRjhq
z4{F?UU5-@R4Ov5O!e_T6hK331?VDbVJ8n?Ca8Va8F#viWi|$aaNG_<hbtuig-`pX-
zKL`Oq13Kcqyx%7GGD#47;}T)KWG=w@&^2FasX&Pdp>#z>vmvH@;^$tyShEL$Sapcb
znL~A<O#9iQMBPE+JY{{qL7BKNQk7s}i=A0MRZKs=qIe|2C^prc>|6P$XMQLr^ue7+
zypH!8M(IIm(ziM9ZgER0&yal?I(*F77v_?UA5HSZ=B4@f3$?^faTfue{ei*jiq#F!
z9535c)|<#Bl|1tibLt|c^!bObG#ntXD=$LA%%dhKeyES_{QVtATR_YNjWJgKQpbz?
zkC~m2jcT+Tb@s;Voi9cU)%4txRo|MMiW;|^YuDUO>)pUG3UNZLJ)YJse)aOM7{XLt
z1h!ja7aIQ3RGxf|at^o9^h98&7ALkCr}T84FTWg#-ui{x&vtuX{_X8jf6>e8)dZ`2
z)8$+I>*X&wjivodv6oKM#*lnklzHzeEl>#lda%-U>k$?D!cYH>%F?B?PCK@xf{&Ge
z^Wo|$$w~M1Ru1dQ1E%ol_i_xK{xu6FR(TC~a*g>3LyI=nr{0@nE3tdg;LlC%g3zum
z46RGV?uS#6#|@!CVV{&>J=|C|WDzNg-E)@$Nc>(|-W=`hVCN1CnzHJw;S143@e$?k
zBrTCk<2&Y!DWP+(gGP?LI+__J*5&iHmU8&JZt>3%x0Gb4fV3D|{L{CNY~w0stcch9
zOR}sKbfT=qm9eJe1>aLSQ*J@4wcO^mWR=H3+7#0~>YC^+*2oT+Oo_gkrcZmd1R^wF
zQ-E)|eer3f-IsxRI}v>2y{?0HB&wFbDt%puFKGCpBW#mAYl%Mq){KX&NnVb7B~s;f
z`NRHuhoGM~mWZFEbKg9H_=;s>QQx(AjbL4Y?-7UJZ9Ij<u5gz+(r?0Lxvbc7-K-%3
z7+b{YY799}!fs(Z%UD7Zf_OAB67P2f;UlhA31zz$!EJB?7G#leQ=~BJWhwjOBHCkH
ztid<Wti_CQ7nNl(<hbvS$+5nW6clc}>AVL1we3R=#dd@NXykGtA0c^UG9qa=2L;PC
ziG>|NztKj%_8B^1iB4Z0z0H<l!hiYrZ0@yBC1<GOgE!_7^u#G#B@EAkX*81aMuPP0
zd&SF2XT7rYW-Q_02`<FTo%g#XkSETbB2~M_IuIs53L6ls+o&rUc>xZ0KBpFYZu)&1
z@@aVL{gULK=jN`+bE%&yS%FTv@_skan`u(nCsaJo7WUOs{1w~q8GqrO^inWBF4zf@
z<49}%-e3P&^vKN2NV0~Rvb-`vU!-ii{LaCb(r}FVB(%aq+VJ!@y|>Ijc!gx+^n!6o
zj)DaYT@I@37QDodLkl?c9}uMLB2|#ex_%9Q4b8EKYWOq-pau1j3jqfpr`9BFNNxh|
zkx0)1FOf)*zPM~6tPu7as7T;qd7F4h;Gzw&B+yZ&B%-Levm#NHoOzMBa<-)EWmT@-
zm5E~wxlnb&Fw_Un<;xAE8bxpm!FVCD$9>kS%=5y$Ke1Hfj+I!XpohjH&=MlqjPE^v
zw3zm0^HirTIuP&Xfv4Vfm@CVK285$ejQu`J0Gt%8=dqFgb0A~f!9Ssev7b2c7=p@A
z64S7cr#?Y|43=8Ym|9O3%3nMsRUDu;e<PcaBxC<mH>HYOmJ9@m{}Li|?A)`|l3sEp
zLr_*XYof<uKQLVHL6Eq1N46Xpab~rZx{isyFyBebA;MXo?_sMIqHn79vk(fD{1vNK
z5);hJ4!!6{n~^J50)Mb0n=gwubH)fLYtB+?&wQ1JBa|R3xQ#2gbr+co7J<v9d(T8}
zqS%#Z&M4I{;`Z>YYIYW}K>2BV&wJZ;7V*q??sc`U&*b4c@GD@nwTk?f4V-$*Ei88K
zWdVn|jdOphEVIF&b+l!vmFz6uPYQuoUXIWz)|{o)p7|+FM<^jwxEoiv>n^ewEP|G6
z{~=aIuZ+;(9;RGe;HrW{>w2%b6HL}Zu6ljuhW%Id{EsRUaG@1Di#UHsd0n3&L<-&a
zmdpHAPDlJ{+u#JA`73WT!Jt*V7+1XLE^-(wLY8-7mGi0IPpaPcmg&@pmmdbW+xb2U
z6QwfT1`Om)<wCD{tmWm(9a@Y_^G;`5(sJ-t=<v*QpbeKLJ+yhwD3X_}bDy6HDPZ|w
zE+Vl)i_3`$yq;N_@)~?4O~^~}Ro-zCqx}9I*a}TMQ8ug&WR1FmIv2GOyg{jjTp7bw
z1#~&!4EQoN@C@`aJ&+s3(-8d(^SV~91hruf@H|i}<XM!dR11wO<ZHwyRSR_!(`v<g
zsp(XW4!6V7R0Ye+zGckD?Xlswg|&gJ`)xPI7E`L^RQ9p;{!~%2Dd{=yWxg&ugGF=Y
zRff=3^2!CN4j$_%FQZ`%`cqN-qatAqhSpYk&*4&>8RMy!?WJZhNc2-O9-;;<pNLSx
zsaP|vSkqmkSKXx42KZ^@;rl);V$o1(|2{|ov;o)0%T-hY`JY4)IM?6*I?)8ZJOJpH
zcgOPan|+u&kh;HYZ+RIcYtWgmiV}h;>>_Y=8U74r8K^p*F=`p8G9HWae<N{JszztG
zrsWS6p=wFb@;q1jZ;Po~>cDB-1lJu-Fd)M<>q^I<nhk{Vi!jv2_lAE4R7n|*;>4L)
ztnKViRVDtClz)u8-m)lJrt)IpzV9%3O1!yTWb_jPEr1(QJm8NNqH-U2l<>sZU#IL8
zbd(@KPH(suH6ag@=qej(QG|>@eUpPcElGy2xF<-Kl`76tGT<-H!}8}WWTI=JIJ-yW
zk&-;r^!g<6e20X%T%7DhRkHzA8B*Eiy)*51BB93it*F8h!4l`?^;*<J$i++duSt2g
zIcu9p&pTT-uG`6ZTYv57uKcw#ma`TV(i6Kq5{nS^CKBaod%$6T;7`&WOG1Dfn#8t@
z<Xy6WG-ufOWqmQ)+!5hv<BGQ1=i#kD>RM^m@Lf>7{47V2?_@mMuf5)RQk?(S5B^_f
zdi-pdi}WIJ=gMnx<%xm%3u1acmW*Wz5!j2BYcG1d?=|y%y`jA|{rW38)`c=RvixUu
zdOqfi)N~@96&i~ofe={Y%ynxD*<y0^#ALn-z?Nk~*o~HDI_cHur%k==vx#{snaB%W
zEy3ISrrp5|0af{L#A=6`_MGR4m1ick#e)s_AJ$e1Ro{9g$rXusivu`UrF+*x8%I5_
zT%=`fUNy)U<z9x&@chnXbqdMGCq>QP$~bj=+LSZs#!a3q;Z2@Ss***XyLeQ6xG?GZ
z_Syw!Zwfa*{>9*tvyRNH0>Ix81LTAG9}OOWZ*Bt{YXC0oKTxFqW}#mzMJjq<7%}MT
zH;wu@xH7Sw&-w;)d_+J9P-86Ou;tz+rqLdyb4sR<Od<vCy|T4T@@x57<>eVIKVM4p
zky%TJ)+@vC=t@y2f7=-O@8MdOZml+lb?eEi<=rc5{?tV)Zun(8J>}wfstrBXLY($<
z{!KkW&>Pit@9oUtOI_>ZZ!T={m`8Wk%-at8!LPvt-l~|tmu*=X+BqEX$sKUM;+t?k
z<Uem@bI*Hix+IU@nbZ?#(-(WYY`GjYW=H+rdDOe~|K(!B;+f`rcN4|e-Ekue_IAj#
z@^D-{S$%QT-DKCIW!CVGUwZjt-s%kU%!jQ#^cAo8l=-7Uv#YC%9%8MZGYh@{e*Cs`
z{<bS~(9WG}_INxv_zHgW_+ukgrzx?tOZjnIxk1A`x_s@h$jq=k|Di#RBYikA@gi&O
z+~oD?slhw$!f#DQ>TdeHW;HAnMh3S$v7CTI%#rf<fQ(*e6aC18+n!U^+tKQ{a~5ay
zNF2L;E?Lh|7uLsyaw5|rhjnUYqO(N=V6%*IHi?LLHnB`_wuwk~wyB7J(3OmF);}R2
zYi3!V%Zd=2lg=pQm9RFkF6d0!Z=7iP6!G3>)?oOR^hWkRO#5z7iCdkib~(*`8l9x}
zEBKf8)G~Abhh@y~#)%q!oI_7KmJ1c{m>EH3t{G!kL>Af_Wta*kfhIv<wL^ho+>->L
z%t0WQaX9W^9MYisuVe!HUwmOOf%Jb7FbReT_R!}FgxI}BfH;f$Rt<sK1Ik_?l>Qgb
zKoEnZk9%}*Y02|s0!~LnCfXhk*qBFikU{}{#E@u8LgN)*dqO6|m}yMiYTOegh*$MW
z8K@Xc5L9Yd0a+|uTJj$?l-E15gaeE|*Oa=3b&!%dInq6dOg(~7jHIZlvQW6p&^!}A
z69^Vga&k~H7m$9y!i0$X$#F5Nqsl6Z>MFvM4t?N*;wnLiCicqV`N=^smeG)s!wN{2
z`3!*(4c#wNA{wje_=Au`02e@`gkUZu(?W2nEpF%bq#VAD=J&*_PzcDo*vi98o_&!-
z0*y%ki5<<76Br<@DZm|p#j#}U8Q96GVCF0*VWa^z4hNZn2aQPttse#(Eeje229NVk
z<InRA6%^po10jm%HSkT<`(%Trr2#&I0M9Z3{`eH!C6<L{bfCMCy=$D1CoKH=wK)^(
z7e3ekEr%*KqUJa)o@&d9!(0>yEgHA2ag6~S3(HDvkY19gX(^$>dTL>2INvFM`J2fN
zJiRJv+@@boN})j5AdRbWO+HX+p+I;bO}>!`uxdq~NfK}a7TyFc=)iXZ+MFSv6$o(s
zL{Pjgp%gt(#XCV?+^yb0F4P(Y5XUh;X{Z@JI0Z!{Rb1uS2~!zNU3w6`cUMRjgHLSm
zvuiL~_-b9_YX&qgLP8}lbb64(H*fTuH=uG;V_QNruN~d!>6ktM5yBF15!8@qOrYrM
zm{cQQuOT2e&p=e2eBVy{92NLGIAhr!Y-3}ro*ZUQRY%(%6I_-IM&K)5;|%^B0e@~_
zP(UhUQyEGCiKG}NKSv~0p-T1=X3i3l7`3(16Mt}FCoqvW0zWJ;#2Yku0Izw&K;I90
zFlBp?bco2PA%{v{{@koP6)ar9d1Ai(6hQ$bK<_8h-?LFo<v}E$psD`cv0Pu|4+Mp{
zVK8z0Pe@8Az(st~l^4|wGY1x<6TtHm+w2wNV%(((z<TAt%qaj%p+U7BQu#4D=7&{&
z5?33RrFO|*4m<S(ORoxefSld~K!%6>)Gq=#YKx3mIz$tkK9L|}Phm8gVB()$zyAUg
z|Ho47pPZ-w`}F_$;r{J<sh)$I^?#u5Zv0PvSATjP;ckGF`Qs-6F#S^g554}?_dh#c
z{h{#Rz-u@uX#ubTQN5O{TO54*(2*_9XLu(Dfn=PTEJN`IsN(pLSjE&VP33n)jjB(4
zt_n%l?a!VC39niSj<Y<-Ow2&24vN;)TIqQ^-k+0QRGyyT@Fjr5#ZL}z(Jw2XX;XsD
zt_y3eVHFB@h#)v!5v5lcenvCNO*qk{&PdySNrQpuN)~BEgw3~`;er=2@RcF&3Az-(
zLFf%l8BU%PBuWITHOjjsWMix^O(;l%Dk)@0KhR2}hswvE7*lX8I?=w+r|uA*CSSdf
z;!9^R@knRs)n}*AY_>=1V8yiYd%;w3*J<6Zuc$h&?ZwYfFfdqF!%1+uh>+-(JINvw
zTcWhZ$bht7gICUDRMzDx0!em<Q@qMSWi>~EYL#%*LrsUE^%7mxPv!0RI8M}z9OqYm
zVN&L77;7woo|H|FOXMYG%<o)zVJDTKHw4y1m51RYHFWp!`AT94X0vry;WGbrHT5*#
z`_j>pJvnNBb3>FJ85cf<C;iLz$%u+pRzyQ$`401#q{EjNZx1*SZUS<FaPH^W+<j1=
zj$2gTd?Wjm1jGtP*?^wy{lIr4IYfphGz>{OiGA4(!dAqzabhm3i&Nu|^YxMXc#y4S
zc?X4d$^j;Q1aU(nxxR?DOykID;B)c}ruOoVP}Mz`#2$Gqgc&fTqvnBo`uN}0iA-lF
z7&h_v@xYB0mTHKGJoJ#qwPT#E?>dT*g~TZtBu{LiDCSaunybd+G-p^-7IV7uhsAEv
zA8Kz<R4_~4?Bz@Nj+(5vkYnI9Ml0bv@dxV%N_cntI>m16W5T55SViAwEW!F2MC^Zv
z(#>fT3tg<?byi*vhyPxHT&8$q?Q|o3-e)ObOYAD0-&eNHi*SQljK!fR$yzsO&|f}M
z-@yoNfU4%#Rm?{2=UB1)Qk?ZL(Vsvi=u{%ozbs5IW3HJ+-W?EMWuTDodp{6nQG3cM
z#@sV<Duh6TKl5(&<fqFV*K>AHvt00G?!)W?V+a}FM3v1EOPy!N(P!M?{dEmdzRKa_
z`eqW}J_1$Mu-Qe60cn;@1y0*VM65u*q6Wxg6!o0g7A-vVO1~Xb1%;i*!;aoNkyW(C
ztZBpW>n!9u?T63qDA>g&g2VS<%tyTc-(Tg=fNg0H$W#VQ1Sx>+@12|eF%A5SyUO1T
z*Z+mP$`9JA35g|%pqZP)&{Q&8X>&QG5UqraTm&S_5r(M>0W|9A2~cQ4tl*e2n#s{w
zi6fAI!chLhwF{+|zdB$pJEr<~$#(w1^<U+GpppI!%bVC*4tt!pnL4=>ibj5iB&(I}
z!J}kKnnAzp2Zf+VjE=Q6hrZbATV~S*>$&{iuGWa78`X)KxEybl2QE-9?_S)r@7^S|
zvd0Ms9@(_Sdfwf;wb6Qdbg5gBXND`~&yF7TLgkSQjuq@{5=4C*>G?eZi!op*Vu0N_
zqlAD+R8@N}%U?tj_e6t@RFr!&fNHk40}1t%yGU{%5fhW?Md;o016g69zsXv1sY(>;
z{cI)%X_-R028MU}0Z;sae%<~6IZ}9Ug%2ue0zwz3ryn%$C&8D|*htal{!!1As6jzw
z;HE^J`VlSi2{>IZVauTNrij3sVsD@B?MILuqNq-7M5`BlIi0%s^}0;Rop+J^X|n4t
z1>jI9xWDuej71|XDGjQ+iL`fYvYd(Rh`(;lrO=idfQ}Cw!n~Pi-f9VtD%8OM<0Fyh
z<|M98v8>vZMlV!b$$rsoMx)gO2L33W-UxAr+%fMgLV81$@F-CjI0j=P=~YMk;zM~~
z`Ti3V7u#-^4n<S^CkFQS(Cy>40EU58dB`6H6GZ2PV|S#3BV=!->j!gBA>m5{ZRu0!
z`Rxo#o-d5;czH3t@T&C^zF}mEWuZI6qRTEFhGaK{VU9cgcm$rqw;;pkR{X3B1N;Tr
zF9O;&9{Ex&eEG399$pmO0TT|%=n*M|B@RCR29ePMW#<aaDL$zi>Yr&J^J%=2<oTmA
z0WslmtFOKNniJZ}6Y%`~q|dpA&Rr>6+rJ0-*|Br5j<^q;9}c~l8qxWugZ!tLT;0E7
zq6B++6$O`b$1r~3fsY621iK9TqE|^GP6t*aFUL9v78T3>VN)8Y58Xt1@vHoB-V24P
z3A>vk1_y3r_;cCtmJuHmIU|8&-s8IZd1Y-CzoZ<iy<3j4(YUDrJe{}&#$P|QXO37O
z!Ly}8AYY28;j4t_7QJ^PdH*mx)|Bzm#ETIl1eL0b|Ll_<dxGiBD%j4K8qJ6fcGk7!
zOXfU6#ALOd-?@`LIr&Fi$a9@?B*>|l&T*9P&`DU$=EhLCeBVmi$uYu8Srp`$j7*ye
z-yL#i;B_|46Jy4MiO1qbjs;ZUFh2%F6>9U8TQ}6nTL|G?=_rvw5I$H@M^7c?0LEJe
zsI=1+Q)cxqr7i&g_|%~wZYU|M^CYSODeW(G(&Y`jH8Mu(Kl`D}_nCM7`&K036=E}r
z0_~gVN#Vb3eYev&yECcE48yG`-1&+fV=d_^4O^h`VeBs5B>RZlwP!foTjCJ5k6E_p
z3F&;kMOZHe>xiyjK!pvo6qx^=6cr}9m<nc-GPb&&SSN^`lkI%K<(Dan#lkuM6!0`S
zDf|~W<y?!xjinRR$OusdUyLv^qp;37No8<#Dk45xsR&NZ3o7Oo3w4b1@V(v+60fxb
z{M@D{&gJBUVi<Y{tLeao3Q!Za&q`)W&YWKZ26n+MyleAJ&%lO8I#BAwr06tncp?qw
z!VAWT55AkKpjRf_n-i99mU<ehHRjrmBi~_0yJfXi%$>HW%TzYY_e>_C`Unq%er*w6
z48NB$6hfUsZwCH~F_9+*B~sJ;VKRct#ZO@m5)IGf;2<Trq8y1>ht>NNOOf?!)lG`y
z%Y<!s=DTDj(41d2?G@hh;8+Apvr?A5qL&cdOLc}o*QYjcH~Ye8z91O0hWT(pyB>X1
z%=Rbs@mFl02qqE*#tVkf<}_gE5JW1*GP{v;aG2OdTtfE@v1mZ#qFwi3K$}}C%Y_<o
z7$GasWKH1gY3Xz#-*P7~9<acWy&&NWz5{vyT6zLLm6^RI_H(NBz|9u?cw~zL<J8<S
zPx6J+h*9s`eM}gFEy(xG=D0!mFGix#Z=@F7J$`6ZsDn`$19=5Vg4N6Cf?_XtB;|zB
zHp!eC`V6)5j%wC*Hg8p&i^t);mU^4Kx>4jJ#&41Y-c3CP$I<>C=g!<}us&K1VO<d9
z!Dh*-6twima;8R9d&9s5{xRP15BP%<EKTewf~^3=s#OtxQ#%+4{_`&w*7<>sPk#DL
zA97g-iE8%dFz%BvR@K#FG|6FXX?aF9NIXK;hPVVR(g-y6IGy;iQIyL9Qj%#ZDlf>b
zo$AUc6;7Ooct)3U=#}ez3{s?w%CM{CBU{d?+LMR5;dUxII`+hh%2E)GPVqtdmpPcJ
zpBelbTSPo+4as9w^e2hom87nrZJ(JSOs+>MAEZga+2fp5tVZv>-+m5_M(J-o?m_tS
zVGKLjm*qS1?I;hOI>Z;!)+7s`+?7T~5&Dw^_l?FX_)Nh2e{`UO!wK2G2P~P_>)3a7
zoMH-y7`btPjG4suVv?*mChhM?O?fU@(`2^r)E!|Sp8`LKSb^Md+o<t$Psz#3hc&7j
z#dZqx8-@|5CC~YNz3HeVW<9o)H*zEEtjYij*Dgy+ws}C8QbE7HntKq#u2!i+toX1H
zb&+;0i4hDg@f4Vr`*Keh&MgN;9+{>dP6LF^UqvmjAlPyoNv;*TjkvyrI3GpxA+=kE
zSu}Si!-g)y94lT=3Fez;g_&v`;(}KeczaPOMc>Y{^0^<4yUWH{m#DF+)OtAUCU)a~
z1fEWw)m{)gd7VdQ(QqxCR^@6Fs3W-B1VG1XIC;t-yg^!s63gI(k2L7K&+E%E=M<mZ
z6;*1IPfjTj+053E!z(YMwoEf2w`nk2%vWlnl}8=%Y!xu*Sguo{L9OT(qLV|tbw?{^
zM)S-s|1Ct+*O;WbzK}1V)vrRc<fajlEi$;C2z{>1y;Gy>XQD1cJzN2%1D+-<V`WL@
zETPU>ZKgtKAy~rB<9reJ2yR>*;PSAwAkY6(*jZDa7Q6ch8<IFNJ0S2ifSQELTuxy-
z4BeI2t6BZWq5v~U&K6>#k?k7N#F;+40&UcN6nd1n>7qdgyKtr+5yvVz#S>ZgGZHP;
zG_KSKFJ?5K#^e0yN?P=Xg1wpU*ef1}<Y3#zwL=tBh=B}7?ull~k3w$FOZAGkZ_eQ3
zSK4zDbB>>7AFot-JQrt$KQgXQI=a7gSw4pzvpFmj&iFt@ieM<BOd`G1Up_e*2hT~?
zc4lo-T%UvSz>~ae4@450kB89hD;iI4TKiRNUiwalRyt5o;RkN7QZY0^Q^X*wz)SR`
zz#CeztdDE|?%`nPVci53tCp+L2#Gt3DJGqA0TH~grWAN?r?PE(hOC1jPHXqxoiXlp
zZSX>XU7dbDkcF-$ALc78%<MzQ{-{nfI?1JZt%7ZPf#>*2(}LE;QD*i$WZP@7UYq=7
zfhlf0TSB{O23MF%)C}HkEFF7I&{8<})-g9G-E;tRZCrEp2W}bedkY_@lsm{Y@LYYZ
znWRzj`x;zG4lS?vA(xsbR*tZ~O~*2lhk5Te&%;A-RpNWKTyeK?k1wTF;^~WtHnJ&D
zULx6NT{Oh=U`>1UT3Y!=P*&O_9eYUNYH;Zk%qmJ2O3Mn-Z*&|L8FfNX#Oqsp*Dz<1
z(Ma&)MQM3I5GdV|f^&xs*ls?%TPD}UPjP;5ycD+a&0plve*9BLl0RxI0sT_71z@cd
zfNS=@{5p2gGyBgZUVo#zE~;+-LDKhL*0CG)ol-{my4sI_L?#g9B;dzNl?JPo4S<ED
zWoM>}QN(Q?`Rw`{R_DE@JO|u=7o*zI9_=!G6;)8w1<9v5W?A_}%yd0IdRlFp%-AxT
z($d-aGg{o+DAzB11Cag$O0$5<lUNHbJH_}c_B+Y|VG0dCbFLa#Ye))+g1;CHQiSRC
z3>AJ91(1#*{J1Wh5cUWg32wYC9Fq)IO>vA7M2oL1eSHEXv0=>~dF>ATkY9iwkedyN
zBD^fG1`29dOc8jyyU+9G%YznIkx>;Q-QF6dcQy|FthS);2t5<|e796_`Jy>76GY{F
zsA9O89;?%?Byzo^oY$F~0>ONcHG_lIPFAZLTG!ja_mrbp2M{L?&|p99aNDdg#!S*+
zZL+6LDJ~;%sW^w}_Lg^hFRo9|n-6Pmw?~er$;VdR^4a`@*_GEzV7{<aO{kXVkee;-
z$!>6}DW<tMocNm(v#<Em9VXKx7N)sFVYPA|M>9N$^}1X3h9bCnV7ElmN0=1^N8*!B
z;ou(3EYo9duq49%^(-wP=V#`YkTh4B=)1jGIeRy5xThfQiL%t9%Fa6zyRQ(wF$h0g
zJ@IQB=yM@e&O{0<7|r4QLI@?*2yY`QTKq_7_Ds|T$zzhvfL9|hCw6=^+qk3dx25HY
zaT`devV*X}y$*u#SK8jNL=USGsYsK5Q!@6tHubu1z4Zan&neXmVfUg@r!4)jKcpy3
zuQRa=-$>4j!*xy+%VkfNa5uWvq!pQmNEO)F?Q2NQPfe``u|Bd}5G90Fgmzqrn<~b2
zWL|Q&HeCWao#ywIS6W$;Z^Y<VkML}U-j6bns($FZaIC$v>8MxUD{-|`WYA&y-I=I?
z)lx_dp)B%l1V%yUD8Zcp@;Rmcle6!J(;Q(r&a$<^?VPfWo0G<(tP)X}wcpI6#n3E&
zXq@9*KD9Vf;6MV*<JDRD%B8p|@&4Mb_XCZZUF}4Lwc@v}fXiF%P*ZvJD&7xh5v_{m
zKr^V=f=c#X{aI_%LQ&qyzOX_@&4Y?+GNmXrdo}0A_uq7#W5&w^59_!V_q|2VjT>4r
zO<*^g$D^b4S-OKnDvtbWZLllL<Ry;B4L64p!tX@(oUpk3&!6?+qci(;a1M|%ds3qu
zNTNpG=X*qoE33?Xq=+!+a7Ccb1;7zG#Y4~*1z%NLAQ*=0MEu2+C$;4(F-umIcNPmc
zWvzIZnl@Z^CUI)cG&u6+tv2xcj0(<8AUuf*^5&z46l4T~8%39N>5;Hbp--?oL$~@h
z^65uxT$Bqop|(W;UVSKd?roIKj0@tgV(OFU#@wc^ySJ@Q+R2x6ztzn?J2cL9Wr=2#
ztAZ}GJW5@_yo*-$tJp>DDdVnh*+qYS^^&TFksthN`ks9mb8`HO8E>5Vrmjgks~~Yi
zqFGWX+_sNLrfhE({Z3_r|JY7@E-@@(;m}7dbT(hFr$kX}6}ztLSLoV*HJtOk65hRC
zwqpvha1f{}Tc7(|*NsP(eLVyZk^-{OM(wGE|Hj6_rJAJGPq3B{EuS|l+$*_E=OJgU
z3~VZzw$mFsl?~pWy8yoXbZ0(Kfw8$4lCQW{6boo1VjRk0P2R~yGHPSrtgnl3Oby*}
zCJrU^l7+|Aas<vjN6*9t3m8bze%2c4rC){&TU8K_CrqFsz~acL_gRCt3Rwl~tQ(wp
zRq*R5>9sn`dAU#)V>v@NRF*%%8`xBw4C1<pw0BPgo^Cz`JGV+<SZr&Qk!aGL=wIJ!
z98B%wL%}3BdFQX_94c<(wF@S8RvSaKEH^9ta-2|8{OBxF+t+VYP_w8yq-L+w85%LU
z`YUo36|he71?bOYUOH!TFa=01rUJ-`^7n?Xe_DgkF|xP+_v;XmiW)ZQjHuqnD!7FV
zxnqQx4Psi$VhJ-*aDrftRvb#`z{M^3>~&J}6=OcxaCdRq{R*B_E?gL2ADV#IZ3C!|
zQU|~%l4gF$ud4Vk9V=_~lKx~A?@fOy6=|!`wzroPUs>IJzuVn+J!UB&3o0366$44J
zcMf%ck|vQD3Ivx{60Cp%(WhnX9ttcBXiyfgmkeaKGWFvc5oK0N{+SC8@4nO105qiv
zs<Mhq89(!-!pTq!Y(gv$c>ACwNr3X;S6S5$5eHZp;&J7U<kRoB5g_TKl71}U)yeAO
zc&v43FrLdWC|C64s{M)Tf&mAHML`3o+26?7suSwabu2w<RaGVL35AWAy!Bj2+iixa
z50wgcn)ED@(p04UcFSYH^^~74<VsX(?xD3M4fVwwGMRr_ab8EgA$D*^>D%UqCY$=x
zF{^yb{Kl%pO9~84Qh+#yp_m|BadUFb=@|Sw=*ZY3gZpwi_XFt(azt!O$fY1YzqVC6
zoR=cBk7zhm_fF}|bpaIi+lXXb2ROOeuV7Kry#n|K&Vr%PhDcPODLn#fIN9wBFE_lC
z8kFzW?qNb#1Gv38nZRR*aCxpws*zg<&$-!ockN}Kd97M8vc$2pN~wb$Zv?ZwZC7OJ
zR(oHaqEKY&2{g|owKOJuqSFhcGnzsnHQ2=H*X^u^v>gE6V41@tU!whWjVd14SLB<g
zO)So;zXdBaa(eGb$ztaYNX)W^foS#eD9DrnjSA>Ou^B9?gH~H)a4H;#=$&O2$vC2`
zRc_HGK8bV{E>?A+EP%M5&Xjgcz8r#m6jTzBeb`j*Ynz}^t=$U7_&gm7TI;FDwCW*J
zubU~;(#*VLLUkhcTZll<w|L#Bn#(Z<KZu=Lk=(2FxXKXld2sGKl!K?#bZ?{UKfugw
zdqKGzm8}#*A8iF)f56{8EoxQ2^we5%24?aa7`^?a`~3IzhQD|H{*U2eZ(#Zl*Y7_{
z&%X`!{xcH4QDRs~00K0D0Hcxae=<7!>H04!I@V5>mj8Y{O2sf)^fMv`y1a+=tHlW%
zHq5|Zpb7>36qDG1PmQ3>Hb7Hjo};RwdcI0T;ZXG7+3I{el|GH@MP_fp$>3%OLnwb8
zZg=JF74^Sf${qa;yOsGaBvu2zpnA+z(HQiOd0itKeHnljofDf#6*^=9-m7@x`=NK&
z2>x46lH8zf2M7`;2MrWc0+A;Q*E}Iu-3;t4X$6TAbgn5=x$j4Sww!~XObQerI8!4o
z#2D#flQB=9iJPJ3ms9=b;X421`VMiWd{zcEC;*-e9xSposO0yw+1ev-vmN9WTk~a#
z_P5gpc$<>N*(~NH`u*m?+VveM@eFOJ+7v1hr;;L~yhn1<jN(275%e|j$@G9hZ7n^x
z^S7FH)b?pwgRvP!YMmdmq4N80hDwdP{IGj=KYFoLJ8M`B3_z_Vb74y5Qf4-hP1wIF
zl&00{{MS`y_F?XXO289)`G0s~|8O1n8*SJtR>opo0CDi@l`7~-_G^K>x+#Jb6()*l
zPs^Y+0$1w2`N5`g8d`h3obaj3RRwW8f54@lAj{RG^HC{}iY+|NHe4?rUH|L23&Gad
zJ(9O-fDPW9b#u^F@260IjijYl2smvzL=#p>&0xqbe7R6W-SQe%K?oXY86yyXtr@;L
z<Md#?m}?UykhRxOWdwmNqVE%YmRbR8Y+qb$Y7A__hMKkZS+N4PYVjs1(nkkOL40)S
z^yzM`N0e`46Z2PJjGa1HwX)4;iwUh0!*Mr=YJc}Z&SY?nZw$&9tv-6~8U<sf_XQg~
z10~LL2Oc&dxs@(V#G1(mUc1F5bHf`#zkV;Zmpm>C!tXu%TEIa|6VE5E_$yav3d#bz
zXIz(Ah+GiTK<l!=*G+fKHLy{7k~1$RJ^S2=sf*vC(NMeJ-lbjbB6)pLg>774lykA}
z!N_WX3ZHwT;vnW0_xaxI0v`A=b~hS?D+;r0p{YOd<yFzHa3TMcrEWR%X25mY!AB57
z54hOjnS1tZ+m(1C|Ak)|5ApbZ@4kp+*yFi1)0iaJI5Uk%sY?0tU)J=S1E+Px0rId6
z$c;$*zaPaeX4e0H5PJb~lBY8wzEA1cNfc6tDw<MQ5hOLr54DwIi<gtHFUX9f<h$Bi
z8WKq5Q+>W#+NKdG9V0+&b$YlwGLr6p8HzbGwi+;yy8d|E>rY+h>&p{qv67uU#@fJo
zhve#QC{)M6=~onQd4xj0oXvCVV|EtOra{3?97I-E$^%}DkM;TzgpUihr;7^8bAp~^
z2`7%yfZhqe*e66r3c}}L`6U3PDmfBW(k>t|rws*xSulVFyp8Z^WMVeGG1(p=Yc<q}
z<MiIryK}I@I#Piqkc=cODZu#|0`s{et)w<P&ahE^aBWhzGNRE<@}+<@0%f@&Au3B)
zj@h}XwJEuhjFM52?Q&O`l75|;b+?6~hcF7ocscA?-T`abe`K%>nI>h5z}W2L)%XZ;
zWsbi(fckz6;F*BWjTkmVNseN@1SclvC<G5j-FKA1RuRMLIhTj~-G{_>oUl=(caU^V
zI2NHtf=2R4lUTvZA!c@%i?@HpCK=dO_;$yZ^;9+QXD&i_d%)^6EskJz2TF;sUIxPZ
zA+j{y^RKbaz#ydRSxM~^?NSqPI!@j|c+Pfrm}7O`Tq4@X^OwX2Kbt&(`kC-GLYihe
zn`J*|hE5X8Jn!wht;@+c7&6LjDMnA;<E6fQ=-kq-^uWtB9OtTw4jxH2tFxOO=?71H
z+)ebisD!4WoU_Okj-5$$Nc2Dj6lzPL!q<||^@;B}BGodR)$8fiG1B$F##!Hya2p3;
z50%cXH|+?voHCSK`TJ+NHjv&?r7ysgsLD?MMgQ~c;_-_C$g2(DgP#6>FR!*X4rZ?Z
z;s5kElUSr8AkbL=(etr-1(B+cvR0ztA(u6lQV<UL=a*uu80yT3&L{>pm!(ZEFt+Eb
z&EJqrr1IyGJI*G?Cd(dAypZmUanH&(uM0iT!5_mcFHd02RDC?6NMH&ra<_n7&Ha4^
z@@5D@Y7j6IGc^K{XGjLo0ToLLqLi#dvLTpgDM^ybg*g`fnb<3U)MbUVx_H)tKR^RT
z$_?bJh<33+_`d&@%(Hch1s`D8=$BFtTV`(jfeIZ%gM!RS>e|&P?^rV;Z^?}nY0}#g
zYNkdhAKuCyRt?=xc7ql$bSrOQ|GxUjkse7=3R%e_Q|8f4{Ot5q+k6SD*K3&T2#PJU
z=Pk$_Oo1IXsU8W3US#=xI^B)2)nIvwDYvEP6UZLP=zGL<A^Q$V{L6*}!?^iOWx$?w
zJ}NEfgBN?N!|pTImPAz2wzsr#6-+m7&hfzk+}VRW6TUWh)g&GsxykP_z3}dSM)nLX
zx}$iSp$-24Ex&3%sTi9THl;7vo|;ae3(}j9(Ko~?6DGE9f-ujy+x*#=wf6DUusG@$
z1nT}CD2?%Swbh9vRIq$lG;>iFtO)0Cglo0m9_OO=Q>>yM;O5&<9f^cG(U2sb#EIr1
zJ`zaG3R3-;St#=h#+1K<P~w*ZVGQA8Vr;->BsVSf*fl`GMGMT)PzW1q)CP3^OlPc?
zaMG|l8C6*M8a^Lau35}XIZdD5XAA6Aru>p?#Vzk_6{X4+XboPVRq6^S-f_FB)yGF0
zzqf@<GeC8>*$eNR+PP909LD+}6C#^ddBc!M7FZ<P$L(p>efoe{0VT4`fgqKTcQ(|Z
z8|<$h+<mht$VNs$7X64BD&$EZ&MrH^V;8lqv-9}jmVCiK@GtLfW%`iEaDd$V{lCb)
z!C$d<e=GM_fDFrs@0Z<sNqs+rESfi$B8}(*W)O_jP|o1jyqLl~qZ&uzVh;*d0V`R*
zs~7YT&k&NF+#fGDzwYXu^dgdTZ)4X=;%R2-cyi}2qwy4dsmE2ql-9GpvpIkt3Y2K9
z<%=i`2xji>1660Wi0~q&ZY}zmUx)cESD$r<o3)Pbr#IFwww|pXNY^EBLrWO(uavY&
zJoISj$V5ojfd-cXlsnwxg}PxRmH`qpw?RcjyOMs|oFcj+*Pa^kvqi$nhV$*C7hbOG
zLlyL}wS#@!B<O)CX}55UDo2G=hYuErmh3n>3J6Q$I_XBT6yQ={z0a7%u6us}Bw7`z
ztMB7h)m2!WIRebp;VnplD_%LrufX*hgCwP`ck@}ICSnm#5&g%nVyxMLE;6Y8?7Qhs
zOn9%SQXHz3=0x=VTTq$Mfrxxj6x;pnI?b~D1oZqmUN=0sn&0Rw2h^s}kzXz7_WT}~
zY3#t4$9BWRacv)&Z_9KUE70x97O;fqQzaTkX%9rI!Kqa9EN)*w2`L0QL)g~Li*T%z
zXNno9o2){;8Tnwcb@{S2y$U24#bT=osWz*xh3F7|h)QY8Rzhg$DPmk_4Z!cbU{8r|
zP5mB=(zT(DM@k-1jJ?v>TvT3&5vGL|!P3x^SPt#4QCIgVn_Pt}b0S4`Qd6Qu5C(a#
z%7IX&P#J@eRd6&d8)R@b#M`IYUK=?Q=1QMugDWN#i+lU<PO5~HYBeCes@nZHc3i7;
z>!^D2S9H@ccVv}<Zv5HSM^t06=LcRKxvV(TLP>?nPbLZ<pI)ooA>y*Q3@<yEy<d6R
zS+?e6Gw#EYkME(67(LOB_Z|GJe6!gh-Pn&os4`X3E&l(iuG+dDUPu5$p6mZ!HTk#N
zs#BcaAAt|*epT6!r*sy(Xfk-Mu?(EJP)!vRS73(*&0jfI&m_S*)#QkHf6PSnkPxMa
zsFi-?YkTw@l>-uuIdir+@RG81wtqQF(XrWW5>ag`Q7(tAiuCUJsk<dt85ya!#cI0`
zhHgER=QhA>9AjWqCty??Af0IH`@lGP`9%mL12#0C5~5`u&vF1gf&7G)8-8(4hztkJ
zle&g11{%8442Me5Z$_ew*RuyUMu>980y%@0vvZRh)kd=@*huB{P~VAbsNxcKUfgVS
z#7R`Xe#@7zxI9$-m0s+nE1J!trYW?sRmM5bum+%+m~rw#{Ty)FSyGycJ`RVQk8SaQ
z-)tS?Br#r>Cs`K2rmZ_(GEuOSO_(_m;v`m`6WM5QAw0ngDW?=Hr^0|o$RxX(&3=W3
zHyjj8R8$RmZZ01@um1v%u)Bz<p<Vy1l*Ewq?CI3}gG9L`?^HbC(Z64KrILE@g@+SU
zc1Hp4a(m{D{2kZ!8X-TqY@u_rbofM=S}0#QKB8&g9T}{_D%Q+$&XGssW3403!k_E)
z1q-P9*US0s8HlIj5y^!9^cfPI9v6)F#kq0sHc0la`)pm%b*K=pk^)Mv3xWfU<_#s<
zedPz~vT2{}_u*r0bg5ldcdQm9ep@i~Y26OIgKJ><kMw}Am!pn^s>ngNW&1LhOQ_O$
zpPKSm12ti~K7kl3J0S=CwF{JA{y)avDN3_2N)}ApR;BGq+jeH9ZRel1ZQHhO+qP9{
z+fzL~>(07&&2;y9I#1uzIp2=h5qpQW(etsA<b->TR{u4J=M7wpONGW>XXZ@f<sr}4
zy`lg9HKNl*G~kG93YD^QkNrPB*#9Kk|B==Ej|=~=2j~A6n;6+R{wK@c{_j}!f1D{i
zr%%Q5&(^p7FaMY1zdZBbxq2pm|7NfEwEBhPh8WV%KUnT!rlik^<@z3h>Pkrt4Ud5z
zwe7~0jZ1{krY=$8q`w&Q)7|Nc(!m|R1}I^khs1C7^!#|eI$WwylgM@&G)H}S6N*bb
zJj{)ei`nFly9<an7z(JY1a6NSjGaO)YD9@-l*=eO{4fr}MPV|8j$F0g028FN>f^;A
zwU$!tPZ}06H}n!ER?+5>!A7)_6#@*RYjohE1O-%~gg6WZP#BMRi>(EY5(~NsblG9Q
zZNc-1UAL=C?3br0hn+x>W<g=5>FCF@QNnx^mZGtpx_Zv2Flb2+sK70h@F4%rtpY<d
z@RiZ_|G*Fu8J|?W`2Oy}4uF?DU>|hbQOeXT=bR2!fA8C=Q103HKdCLz$3p~*1YNat
zzavNC%Vog~<$P12u0AFg)MCLjBP$A{n}kN(CHU$3uE`oXXv^B8OLP#rg!mKa09Cd0
z;-%cS0Aj7J9j{9`t-t7~)^?<6mkT?CV!>P&m8L!n{MO7*ii#<WD7R&E7P1#1@EE8e
zu}AAL%H}}euzE+EnRxF9%e8NS9z(BCoW=EEne0mqhEHYcK<)biptorCeXC(F*uH~|
zqsK?<hYb`lHzvF@&o?LN%Wh(J;~r93%}rblau+wt;iBio*Pp*TF@Vd{s<5df+<ySF
ze!>9AyuKqQ`OLowe6TysIqt;leytNeh1Ck?IPzj8T~)w3g~-Xj?nc1`T=2pAIeBTu
zgY}_8-&BEPxWV62M3yBa&g=6wf=mUGeg-#<PyTWT5wXLCU-L%qHB+uvv0^O-&yA;M
zq#Cvq;lv?;f+Ca|IfhT3x9=$2oV35`;&vM0HIw;}^OX@a4}26O;R1<;gBYauUOYpr
z5${&!<EtN#0lc>)3@6T{OQ;ke4V)JV>h`(PHR3ga!a8@yt=Dnzm#XZ31w~!Y8ixz!
z-s#iVr!fjDv4<<1gNpi-R!R<hYXXDh6}|chmB@hPmrGh*`A8@4*~O_%Vl$$+!#y(E
zLO<jqV898$9goPf?H?JT|8{r!YkE4_75B^2ud9P02bY30_O$t72mAZF=q-O3I@cX4
z2iX7ZTon<!g2++Ya(ndB1W_eSU3g<TE+jLT$)^^m{s&nn#KV#XEB-H^!xMMlw~E;o
z0T-Gd#}XY=_4+k9x+#{PFwS4CYIT93klt@GP(I#%iS*;p2-%@I*yfBFvHKKoS{LxZ
z@1SOO?SyZ5eBW7#KI1E6h^CbaB=v!}jDdG;+6roBCy6pTvl2(<gR;Y{#c{DZuvZ)@
zFC3W7ax(i-@nx1C`aD5@k5GtWS{Dv#A)NO5P8mU>Zc0onr|};|sMKu5lLB@hKGIv}
z+WwRagYHvL-Z~3))D%(<xgvN5*gjy@6ZzaRK~+YU!9^d&t{~)NOMz4cccI!0OG8nO
zI}EEw=3lSs+4Q6RD+<F7NE@-bO7j>CBgB2rB?jq63uL$O5!}tIDp^YW*&EkW7XTM9
z(~kV86_L#hCjxQBD?vSXK1U;%h|oF4MZ+r0c<sW#Y^e?^y5-<B$Xh$3W#3z4aH`Hq
z^%`(fSYP;Q$YB{J$P7s(iow2J0Z?7$RSM>RBPQx4S4py}51h}U=6(t>B?h<EK;2v1
zWx<V%x*Z&l>jT%ATUulL-UD_nxz%2HH4OAzvXRXupYn%(<$f4rgEq@|ZvlpR;d$zy
zfIN__#h30)C!t3D7<u<`n#YT+)+4TUldhDr_r&5xp&43JTH$cyt^%eH1>5<TJbq89
zMnX?1Bpa;n%NSdyx2Xvzt?AXJ2WFB>&V@^vz2=$Z#gfC#$(*c|Y7}k#pN)!oW%y18
zmwgJhU4|$rA|`pjK<s)6jM=qKR_zf>EINy}L;idfwI#N<6Zwl!8=wsCw%KvV(}<f0
zv0FxC)4t?D^eFAEW!aD7#@@#Im;Tvg*UeQ1k{slIcFk;~w1h6#Bkl^mqR_<eQMe^2
zr@9-fGg&QNT>A@B6ZRTM1u{Fg9nbck%V8f|^jRJqk5sd}#b*snI}10DGr4K`T^cNQ
z_AjOIn04-K^+c_+y_Q3{%HVw0^U*`E$ppG?^Tbf@k1=ptnhcZ*?9*-mazB<lQ}e8z
zeXL1kMtUX$r}5JnX`iA$YHg-Lo1M2ff<u_X9NA6Bd!eKxRY1WbIb*ySttSxIj%!@Y
ziL%EU_5z!FpEKNt2;Jw=n;gQ%>}F<RKM}TUF;}`qdQ1HjjL$6TcYrI_b_Fu%4S0C7
z<$y#w#$QR2?jD@2v>rk)R3J`PnvZDeS53=7sn`xqEvEHdBHcT0%)KTB)^VO7_m$7{
ztXVyi2%iZ8v5p84w6S2>`&w-djq1<>(JY&K-1$N!wJK9mb#$J^)Qbylxt66S78??j
zE6Y|xOrZBX0mlwjF3S(Yu*B)Af@q-u?tLrB#BxoBK}S4u6!MNiP3AXu3q=39OyxfX
zsQ)O)v(m$<jsLv%YS8~xh~<A2`Tr=$#>W3oo9sV|{r`u{zFO7B_CW0aUT-Q{41)xm
zaQ^Oq7w@HCCXbM1?I5eALSw|>c5~U>+!>Vj=iAe46#?s@NAft+)ifvj#NAZ&ksHHF
zKMT{dpDjEfvwv^2GPD2brA~&D7G@%_FEEz)M}`FaS(U6kj<;?R%}a-{zce929Onf|
z!pNPrKzjkJg{K5W8J?U@cy1vyRpr2>6Y|!oCzy5%bQay3Y?*`F0A+=?SRj{JlTshA
zfQLp2<34O4rhLdxjS*b}&0$Q9dgusgF|s>k05RL5kH__L3iRYy=C78&`R_!jx@FaR
zybJIksZ}y5^n07$-pwlyPKP+At7F4OhRApHY~6wew8f8<C-_6fj_7#2!w4Ask}ru%
z*yIKkhIXEiT@~{$g?p=IX#lPe_;d!Sye$Mjug@x8p%4pXflLk<{heQtV#Q{|I|r~U
zu*_PBl<1*knNXV=tx1HUMVLWal;hD*^5iO~lao7du1G*gL`y-IH26$u>=6JYn--v@
zN7tu^+INe@+1`#iY6A90-$_@JW4n371Vl@Ck~CW1=f>T}vCKE1qI&PIoq75qhgcc6
zA>@Nqw7|Xd#pi)ba)qMvJLf668fRXg3XZOqGj4J;-3z$r=kNz&P~$7Po;P568=9&|
z<Q@_wlY3*(NM$SXB1k+BTg^syn@@@82`fgQkq1u+KUh>2f(QF2v(u^z-wqIVHI2a+
zuN+Scu-I!r<=#F5VW++T@lZuqrp76yo&K~*Og5&YTxL^-lW+2Esd~9CFwn*_i>OlH
zvBZgbpJRy)sc#gV+}Ai%dGp`7+kv>YS!4jvcUiKFWx%br*KgA&;h}mtcjR5n3$^U@
z&QZ4dN2MaRA;)_Rti*~xx$iiPv*G2+1)-P^-H=cF%$56pWIl{)Wb{x+{+XzB?vuC2
z%QSsLAklSEg6H(&jp9tnUk*7<!h&=C3np#GRG-S0PCK@gy{U_dw@bn2a^fEOJAI?Z
z^@bZgcF|^DZ+3-$&BgqpV4QV{k9@7xq60R0K^EitxWm$#&J3D&*%aj+ByCvdb%k<0
z#FcVyw?O&t3MsS0xn&!cU?o8QW9@L6j@(*ViQyB`BX<c;x*1#!X^pv*mZbMJ@-513
z#;fJC-E`DS+Oh?YV~%zrB1N@ur`1QK<2Y~m@k`I+=jio%>DQ*T>u*~u;*9ejkmg+c
zn+wY#na8PM*oQty>0MFe+vLh>_cI67$kmRe+H!vH=4RH~oSdA-RVDd}#wUvZm!$s3
zbx;ZUTMHKs2uS2N5D@8qi_fhL94!9p3t<|^%660EzS9?c6U0B;Ig6{C4v=YspersJ
zOzNWF*?RR0A%J+EZMA_^LU~~e@bfVpmn6b_RYYe8tf_uvx5E(Q<h4c=YK#{Yi>y`6
z$?4AP<p}oEO%};Ywix&R@W$F69l&2UI8M2LK^OsPeB^E%0%^!p_&fT#oEu0a>>`76
zDYjf1Ww#i49|uPs5Km9vqwL4v2`a<~3BA4%JA}v~X&B-5nlWrV&Lee-85)wsn9I@6
z_Lz3Xoy5b~gE5AV6FgM!jk0Br>t_RmNPvvaLs%s6uXPqZz9q4GKo|~`IcbPr-x<^h
zG$TIr*9|c3j@8S}=i}yv1x6^0=NU+-`D;>mR4S`K!<H9_|Jq6S_wF4EW{?qI=|2Pc
zsN5r#L+m#E3d6&d9(s!r_j9OM9be@-%vp=i;pA+sZ@cfGUh%>*pTYH!CtNl<Ko^+A
zq+=IIZ#&0W9k_hkHYXpc+GBi_Dsr*bx#KN(XfT{_`Zp8dcIEukWjrNN_d5#)bwH!B
z7jr9<LQoT%%TN{iaV_1ZmNU)A5u@Q3!usJ2D&;7Sj-H&^(JdpG@y9RRX$oO0E?q2G
ztDdy<L}{LE>z3}B+yfr11i(<t%&U>ac;t%`h>`V9Mq*?+YeyEgSnOwde1J_|P~73b
zghBMUP+y^Dm9)_v4retZ<zDr;lYtI)F4;9M$2#{k5XnU17)9;z#A=jqQfsOp^xe2;
zfLABz((U|u2p>+5ouu7kd@BqwRN<9HjNn+7k>4l^gnIm5MEJhNN#$)2b}&@I3mTge
zMP35h5l9|vKOVSNnA8x7wm}b8bZym{==_eD2b6Z@DyQ{Bav0#i!|ZL|B@<ii;RF|O
zfA_B0nytCAjJI4)g3+;qE~vklJiKKaPW(wDrsUA-O1qyMR=PVS#Io&=%7ZLSMGOq=
zm`mAj>}1rZh%pKsog=Z6MH?jzdK~*j=uD-2fu=m=l?fSt7T~a+FmH}yK+glW_V+Qg
zW5>x<SM%?is}yb@fT}N0rbQc}oR{wR7&u3IC({5ltBJs^vOf~}lKzk*xKxK05%Tu9
zv8w;3e#+dwem)4K618wwYDij!S_)^bFN^8QR$6+Y)i#<l3T83J>z2P4{u_N-%=!-L
z`p*36sSJHC#w|Kap+)JhKUKU`mB{CUkjs>4YdbvRrR|K-8X9E@_plHOQA6XuTs-zB
z+Rbjn-<}U`1-fJ!tj7yj(dW00{jTTJb*iLgN9b|7@X@V>Qz7`Bv2j2O6y`J&swQev
z8sTvrs>XPZ=JJt$_{VUl4f>w19ui09#}^w%@D<g_1E(n(jbK$M(6%rLyop(8q4~&Y
z&&wh>%I2zJLqXP+dEs>n)oeAgCxbOYfll%>y{(qmF(v%>7Sga9=bPUc4!sN_q{dr6
zh><3OrO`TW!zMpa!Qp^wt|E&{ByK2sB;alF+_y|h`cDUqAuNM1BHBG<+C^*q5U#bT
z{rX;Xs0Fx7EWsu2n#mrz-iznFv_OtGH8~7AQOeY51gx6#RO@GJgru<Jp*Z4t>T#MU
zRfG;VvaT6S&+63qyaTM1lQ)dt8-#LI(qO2_C-rtIMp@7r2+;kxD+RTxmec}yw;W?F
z>q50u|AB+knGxcVcO;Orl9qwjlWJ$!DdEjV$*cGpjl*FIb=TL_MGS6e<%54x+|8mK
zcye=)qmITVaybgEUfJUsLtJUXlyH0X9_*|4`y4#Gw|`Nok>FbIH!%Z~IcAiXJl$XB
z9rUUrV^v^8C>8<MspE_}H{dx}_yS9zzw?mKLK5cXe154g@U7cjz{98`$Tt_Aoec<2
z^p&)UO@3*;dtLY1<`LT1YD3RD2TI7#qn2<a;w4e2a~fFSfCB}gbO{d*Xq8`C;v*yI
z#IQ#We1rZ^{&<cfTYsmBPA8bu*)X8s!aBkU8j}(GW;SAOR|rVE<PD$oEbWPNc+Oi*
z2q<oi<fP2ga`*MW5x}@Vdl=dv@|6<Hu*s)O3^^)=sO%fZAjjTpokBC`Ddy?*a1$qo
zLw_V9DZharu#~^yk_tR;MUzLRmHe3^1i|){1Shh=snOZnVGRKd`bNX6+fy`6P)egS
z63NREwp1fAur-Co;@ZVnOZS2V>lcZjlGWlq;8d9hD08z^m~F#wyC;vZtK(tn1h9xq
zL=$xHWT`TyVUNCo%HJZmEegsEzykS1ryA#xVA90DRANYR-CnT_2Ng{A1=<-54hSZ;
zhy0qZ9#_()PF7b|p1b<aCJr;o!IGT($wjy|P=TMpW<-z<ygBzb0-Ty^oDOoXg9rRW
z)rlI8(j$)DmY$6^(8UyE^6Y<YpYRlki&TI=!qgnCBL}0X+gmdJ4SqWtaTE9XxlK=V
z<eeqqOU)Df0rqRWSSpxhFtJ$a-c_kqaY2XnjpEBL!IlX3d{Uduoo!)v)u^|S=SSjy
zE31l?-6_d~N}eNC|BGO`JimbFkoa414$N7ZJLy0ISGeNN%ZWVj4`g*H=xXazR6-CK
zNMw+Uu`N}pV${DtMp<KqIyuFk9h93|JbZVZD)7M;I1n|>4)}HvYMRqFh)UHj1iX0E
zVuyFB6d!sYJ(|DXW2v%3<)AP?TTrkve;A<3JrNeHaOTmxHNz()-g%sda0&JVzQ;h7
z=?JkqsAwf=&YtPG#WIj9paqe@Z*_Gj{l!L+gD*uXDXpYQ%vs~WFO}<B1I2O#7jsfV
zxp8-iggH$Ml#{d&q6EbA8kw9_H@I4tf4pt^jAsFzc^RKj)lvD<^RG)eZPfzC5`L!<
z@0yicnyFSXE+#ho0?(U>tuAx21B(06vlz7wsOHCYXIu*QyHd@T$#k1ZL?IEDcCO4X
zmYLQZ+8s=#2v=CX`^m_FSOhWf5&v^ZuJX*)q+di{7i$__Tw7Ns9iA@_2YyAVIo%PP
z44)bT$E<nn#3ufPPf5oD>b><tb%<GmFe%ghTBkG(53*m@KEoBA22^a8fd2N?En(LF
z&OXn3@?*^~MU&R=?&c9dSAE6_s{u->j@K9NE+5ME841fUhzG&F-(r^OQ)}1PBnR3G
zIV8yVXgg6U3D>Yw${!_5ix>w@(A*fA4OX?ZLUX*xO$YcIhf(ch`agUS$d5_FoO5UR
z%JZzUjzOFrHX=(%PKdndCEBuhOx*PMtBl7Rf%S4514|fNQlN|K(k8he%eC}#5#x-|
z`JQ@0PZJ45P$(0`SOCkvX~hBGNb3eUn>lKI$Cre?e+1-d-kG}HE(-B9u%!}{sZq>t
zNprg5%)ApqlsZ#r8Z;;@=<|Vwpbww3#i1jl8eFr2hHrs3TnV6Gfqj5mO~0j_vIQ+G
zqk_*_1e$Xi_|AlZhD9u1b-B9XwW((gI!Byl-@Vy7ngJyzBQ;nwF>gK8?#ItW?Itr2
zy#t9^X3ewl*_C__@r0ntXic7Z@s38{Vm?rmis5GY9KU0H`!ZlQjg6;{9j02Q0<GZ7
z;Ik2GsX(1y+a4n5yi@5L`J9=WfecE;D6rbf-$V+2&*oqFRR&7$s?TI6(iB-Iz`?Aa
zojdNSExE2MF-PD2I@J!b&75EN1GwG4z_g%5B=%kj+)YX*=eK}T@b}W;DPWA)sHiPK
z%W{DwP(~QxEbouANn}r6#ylH1OqrVLA^atX{*8QoB^&3EedG1w<1o7Db76B6PCA93
z+XsEhG0Q6h`*8DF?DrdcmT#B-efBe@EWc3bxshk{Q76-G=0w{w(%Xfq)w0mvVR;fZ
zrpm$XOT~Yehg^0M`G|_2@Qodj=|tdJPUwsN-w>_g)o^&nCpkF5AE!0!_%!iw(4*T$
z(^=Ftq>T_(jw}M=mzGrXak@#G;v2^MRygs&1d_{F6f$Pjw?c%^MZQ`}@Ap3eRNj$)
zHbMS+ZIuw5C%yM#I=5|P=2oa_XX}~E)qB!Db_|1$f#WQ@tcW=6ytS3*Vz78i1>w(`
z9IVJ=y(Ks4LVOxWegU>X*K&OpY*e{BCec;+EB@3&4r!IcxS}|H1SL1=^|%NA(Ig6X
z5%xunYxX$4a8vOH@4g6ZbW(Q7o1U;NQM+o_fw-@0W*_0-55CXDzME;*N@rb}y7ma(
z;j;D08~Z~1--$<K#~f|xzaE4G+5bowaCH2yc}KOT&A(w>l<%3^xhWM{U}-<&^A-R_
zW4U4fc*CeP0#AEpXNLo43y^HoRkA2k`S#n*Cf&F?TL>1pmqfs_<<rL^UFl*~Jo%aU
z9kbbFG9l*nHUA8K#|b}*r|39K$-WmKaVyWe5U-#IZheH?0(mzfA@f#T9JVZ_Z;=l!
z7EvwogL#@luC-9E12G(%zb3J>*Q+XOk4+Qw8=lSBhBvtZ=@@zbn0S@C5C&~tkk6Aj
zEfj1xX7!<8d%pNMDk{ymcH_JZ4?F36x1IkQ`28!kMn7gz(v;X>4{N&CStIF&-QM3u
z5j&S&WZHnQtTvFB>Y%Vh#O#^H#XsC2zY<8z#l6-QGr2UgpQWlm32&AxeU0)lt-Tat
zf&=d7;JNU9V?_I|H!EA$@5QI956So2&1-9<QVcuj_4WX#skL5To-d`NFUM9%5BK1<
z*+&>V1E3VQAZTrDc)KxG^{n;TJ6;ag+P)c&SNl#(wJ)QNW@5Y(hQAAYZOw^snl(!$
ztKPEodHgIA5RHLL;0h`3O%kD)%qEcrgl>qlAZq+>%-QQO1Y@MBXJD<5B^_u8LL$Rh
zP*;dMOA}3*|8^;U6pHPU1ZQtH?jJ$0LHSVSrd%CleaevMijjy8U=-26A$<wfaKh|C
z?8d7QKMAIH#@xWHw)?u2^nR*B0=I4=`uc4^r~4vr`<AyA@?j(3{pB9ds4hS3K$!i=
z6P?*n<NcC*a{_!_B(k1qMNfg)3XD&IWktXvO1?CZ6G(cFWy{PpH$oe&dX^2wq<C;O
zRo4$1^-mfO@dVxE*t__w!E1XaK&X>En!R9|^;1<3`iNGigWlLSYib}R+1+vkpI)x8
z=Q}XpsnS!({%wVVpm_krQDuF64&>e@40{c@6T$2D2E4rgIF+nE;aV9^dytqd;A%aL
z)LUn8nTjbqXx2`%)EBZq>q)fIrb$f^ER=R2(@2y&n*`92Ajh-H3WJQN<<jAj^+^(n
z`j4(B-<$9U9N<OdBl52WD28dDsXbbdz%t&Crld!$f{YHrDXw6+`_7MPH4r*Yc&=o^
z<#|D6;2n6l1e=ICkP-NjZ=<Ye&Fm(5Cqh!3s8PfmuyD`RFy%H&<iJTTT#h3fq5yi$
zDWnihelIh^nE`tK&c9zu@r<ISW$EGP-EBg2UW$B{G}CaI-*9dZo(QnXy|J1W!b3p3
z)ABmHERlg#YbAbv#D#Et(!p*wlMJq%YYl37hOjyVxWCeu8><14>W%5ljw9Xk<{Pdx
zo`dtH*ce+lzco}U47uEUO!Cg&zsK{^1x@qk?5`I=SO)CxsZ{v}l5L!W%1Up;bY5q!
zIrBs!yAqAti&i%IGV-mBB_Pltwxn!yh&Tr5@`wiLIHMxaVQqjBwWMlSRJ%ufh}t8}
znOV?=Otf5tirKNUFb|Fevii(CV52X*l0t%+OzFA)iFsmE46qdIWjr0gUR3_3PVTJ2
z#~GETmx5PSO^Bdn*aVTjp108Q2x~Nq`-ZUU4HvgENbwuvJw~>QY=`Y#5C+Bc`r!t_
zUdZfMpeHN+rqQVvs`xTRIuX{ODw2&(J5>3jW6mzRUt^dPo|>kuRYk%~^ta7@VD=}O
zcx({X;qezJg-e1Y9e0Gk%JBGB#!*(3xbjVTqzv)<y%Or|s77N&+5+5}1nggbvnQ)8
z1QMy074m7dG?+1g?;)$A{&Lbq3ou{Vu4cxM`@5m`tZuZlFD#)snwqf1KbQuzjBrWO
z`x0O>WB>&b*m0IC<}8XZoI-VR^rwPdgQT`?McU(4*Rpk}y)cU|$6!jGK*l3UsXWRv
z5hLDoF5)JUVzngD)w2h&X8TYuEFx=jk*eX8KOB==?hzS%EXJx`EhdEU^`|J*;|G|5
z^I_k&`bY2Y*{yYPuEAEeegJ9{-A?fcBa<B@@yJ8w+pQ^MSHCXEolu~g4=|$<mzDN)
zy=969q@uD$QCMNg?P&gKldV>ZSa`rk?2;QIDgHtWmL#=hxJz;k$&e0|xqTWT4ZD92
zA_U)0`Vb(%Rn1^%72tOtFW$Tk#~7UzqnU6}+C~TpZJt!>AkX==?Vn7yq0b+zgC>KY
zd_w_;qW*AC<{jzq)(6m^2l3B9{+w7t+Z5KGso%UKNh$^V6`qF}k*?hPY5HWNzfW|e
z<Kqi6j()oZk1m!HhysWc>5KP34DV6E>5~akL4%hiJqW0@<F2SIm0o|x@;WbPc+8&h
z8Hkc7i932b$vuMqq;Cp*OF@UI?TXK~Ypgk>zlZP`4wTHx6grv7fUo5*<>arg@@LLg
z*YCtNH;h7~%>L|i^JZCO+nSUKN;n`xBb*c+`+Q#kQx>m*A6kG=y3}^R71=P&Eto=E
z(6V5Xkfb&@_D0_dE^`&meO-$5>L|=vkr699Q|{JvDk~6<t;pk(#4P2{URya5g;yT9
z-pVddMAXS;#rewuW-W)r?9Em8zUbc^i1Q)C7r}#hi}4;w2Afa%FQ3sF4cbM+nY>hR
zKtG8F(Q7Ib0_pQMkgC0cqm%n6j`&5uhQ)ZRJ>+iXcS5=8;BZZCuoz$G!a+pX>|!#v
zv1VILduYK=+@iWJiNT4JK<uKS@mAwUZ^0ba6EAnH;c+T^XcbBHqRo-CNsUH=6O+nq
zbNJ-hikbR|-WAG6kk;k4mGz(7Li+m2_h{{gyc!CwsZ&v12Nm~DOrjc9+m{J4&b5mx
zbg}GE(M|w}HR!ax3%Im&{kyKgH*cm8M{L!2^p_QS`ifIDG!1;gk-|$l#aap0FR}&6
z34`9yn@Xwok?y>5$Kjw!<4n$qes?0*0+IxZR6ZuU14xE9s$iO--4Wy|Li-kMBF_fx
z2jbu#`XI;4+163@`O*Os!2nyWKY8>Z5*vYIn)GB#tXnMo&_bCg+=u(xE4wfSM!#6+
z=oy?UVyQlRFjJX6cI|5zF65a!JMtKyDvdRe2@tzW)^ODqfIVHjLzzQBKka#&Op|#V
zx;3kP{_v?n`ypnVD?;ixr0%|bIC)!a#Q${a2RD>DwKA0F8;b$uiwwZd8zIR>G~6iG
zPTgThE)<iIXd+>@V?TudhH6>vg-Mc83nNgLii^;6_)xxgf$vsv515*^8fjA{mQOm;
zTj@^1vry_XMNye0vLgP_{N-DEqM-PGuvG-OqVDVaO?jI^Xom!<8{*gP!UF+9NW2-F
zMDcpVvYG1rI;Q}Q5%oGa%nM#R0nP*1U41mdw3&h8$}({?8%)C+-WfNv*GKwe>mu*z
zj7jE3^o04pV?gu*8XODQe>xP?{|E#AuR*B)A2BLhQ_FF)1KDS_wvUwI8GAK#rir=K
zf=gJsX}Vsdf;4&PDyx5vlr%p@BDv_YE&cO_9za?K3rvP6Novrma|z!GtNq0$(3|g>
zkjPXn8IrR*-%?Up`2<TfIXMjz4RQqe+d*7+N);h;+EWs95@-AK`$O;h@#G@2x4=zO
zp^nHMEqeZ6wwdq(4(FzaM$$5wgDMRgQvghG5%Dq2I6ZKfL9~U`Jxm(lAu6eCMPK!R
z!fB-ElMvH~qgUj#e67IwKIXnaY%_u}%R}<t!b_Tfv6m!kOA*H;jEm_Aa(AgY-0D<3
z?E#56mT|>9ZHhV$|9?Un1USK(6aw3GNDV>zd1u91ieJin1^pQ_WjWA03K?sm*2+`K
z`{wfU=H{jeuxDAtvWX&n4cL70*35B(Zms^?vi@!S-!sch<j0qa8FTyg&(P;&kv2ne
zj#uH1nl;40%H6qY&zrX~_(4LELH#2!xNnl|K&cbTv;l;I-_M|MG=4Mzwia@09$xGZ
zp=J*@IXMrpf6QLpM!uP!0e5yNI(519HM5-}`4=MozN!gD)b}JotC;sE{dpCM86{pC
zXrVd2vEp)<gzCY9(P{N%mA*gze1!y{V7@*q0rh0AZm)X?1b2+LMys*240EAQk_(tw
z81Az7?}M|EgUYw9%s4uS`M3_$&!Pz?s~lv->C{f4J4>J;uk+sLajB%mxG-6Fu<rc8
zX6GXFtAu#jun~b_nMD;l5lqZ|JB;e9nIrihv+1~Jn}N9!Ql}*d<G!s$Og4{VsCMFt
z>>1h^)SdnDt~Z?qkog6$64a_mdzkg?_U+!QD$;TfqB5&Rh(=g4CHc6b5v-9P3ChXv
z(cFeJVWE4A_JdxOz!Gdy=U}CK6V1tBDANz!Si2sAM(3b;ETybIC8GS7kL8E2K!XiQ
z(Kn78&|^ni!aF^wx(kF=f(gcgVonBjC@n<AYj9xf)!h$XW>u(L^E?{qWoaW$#E4Cc
z(uW9xr54gc3-{he!u}-eJ@ZEYDqh4Adr8=}e$$;7&=`4Kr}?PJMw;<Ki}T2f;OQ_T
zD%?B4zQJepq36KVjHP0d9a7EjqI<Z~r<Xr|h+I$fb<t|D`q<QkK<xO7AQM>QFy!U^
zo*X#e2O&E;m4Yz=dXkbS-5ZYHF1i&?6+wjVn#Lj~N}%1>p#tXj!jk(j#@Ylcl{9`5
zY-sU-;x!0O^A=oU_=34APW=vZZrrPa>;{{d6^MKn442<F2lG$8ZAN9bE{<&io@6v-
z$<}||FfYOsog}y;B^0*uTKLHO-FgnqAxJMpzTtyhI93?#l#bbvCQNMOoDv#-7hP|w
zC&}()vx6lIfnx~#!gEflCv2uHKFuo0)5@ZUEwl4P)B)bgF}vjUH{zS+sICkk_sL)@
zWfdnx0a?At)a8c7GfAZnVG57ubLs`l!)CaRy(l5A1*e421hZPcg{h!Ht<CfJx4z*;
zfMSu5rWEa~LsP_w2!*<~^j)C?yf~`(Le9$tRvKGr6(dj6!PG$#FY<D0sU*i2^OC$t
zL8VlekHH#66Vrww-+7+)-^<lJbT@{QV=(=-w9<ke*a-qi>0OPa%Y6GPY2|Qj-=L&#
zY<E05EXOTo+Ox;s-)#9GSQ>Yf<I=Wsc>08`K>YHuv_}Yb9XnZlL*8KY(KPt2EbhP<
z6rRO?t#+gcz8w_yZh#;kW=A(bV4}>_{`AJlDTNgugtZHG`kWPz8RQ~EpVnIQH(BF|
zi)yv+cv*c4z6WUK%Kadf|1u*IT~EI&4t>D~|9D`DUV1#d<wn<U*xZt$u<%|jdlv&5
z^2YoF9v~098b_e@5;7hzTcW0N@hGv6W~1cw<d`nym#ngUBWF%ok8Sbfmz^?UaHZ!D
zkWy5>ztL$J*F3)!ED4FPm2@FCLpvIMo50MG=IWWf>@vxJ2@rZ*km@{Rs>p<eK)7YB
z;8)y=o|&rcOv*A>R-&kd<$?QeaW{5QyHtyy*1gBD6rmz@(6xjZ&>uZ39MvgqW=mi+
z4KpMBLiDRx5rR$S<+RCwhp0vbPr|K>FS8&;5=6d|!KuKRIC9?gcx__t-TKRhI#t8z
zVr}Q`|GDn=>3I8)Xb;2y@#Kl>#(8`~75aou{q|r5F@m89Ls}Igp@FfjeyMQLUBn!c
zD<+?IrQVvnB2{1v&SY{EcBa3oB<@d;6}D~PWFZc!O^!YR+m!1UQy>{@$yQkit%J*c
zB}=fT0gc`7IHF6sAqri_Cd)3ZKro5GqA?%Q8ky4fhr)>*U_EY_m^7ZTRLY!bZlojo
z>jI{JXv7Sf4a?|8b-w!4aaI#~z~+4vl_7)U?lylrK1^=|55!!y(pjlgnuL}^BI+g}
zoq<OL=+0`$y?**bTR4;39Hkk{`qC}{4=)sYaR+Zq($h5&Bo#W1Z57ho7H)U8fIEn5
zCLh~3YeIk<D7G+iaSp|U;hi+Y<VY~Ra9+sYNYwts?NH;CjpZSzriF}Ct{CDKo@O00
zt?llqDlbNZK4%6nx}%^YX{Q8s>?r#HzG0oK7T4}N*$HY+Th7!p^Dhd}aO|a(nGHSJ
z1^Jb>o5{-^mUQHpvV6GOWi|!8Q6gd|zCD3S3##&z`}jI045p?%$hf%QUVrun1lw+D
zCOzHG?ehJ_K9ke@8z!7VSVT4>z0O?pUUVC^5hepz$}Pn-^Rp9jR)7pP#UOLZYE)=^
zYnU0D6T9BNIZccGyKQEUna*v5{p|?3w_k4%2(GzslmrmCGXX+tiq<?h5#Uc&#RqAl
zqCiLZAVHXj-~^Tvz{7cDqZF7RFMcc;9-&yvY2lQHx6_3HXm#BM4@LA+>kOQQZgY)C
zb=pJdk%q<IQsmUGbk|srQ{LcHe!0$XsxPIF9<DD4sOEoR4ibM+jPH)aT->0z+zPGX
zj&FqyIR8Z!nGok}yIppAICocQf#h;}!8BeetB7;DUM3V@A1?B9Zq8=nCBW_)2XqL@
zfC6&s31{KvBLiTMVl}tYO*&9PO|^JYH462og$d@7Sn~S1*wn%jv&$pn5}McUZZbAK
z6T8l4#vN_*4g*@kPN&#ZiEj8}hw^+R*52DvXd>p?i#sh&giNCRlBKanVzbo;1NYo)
zUJbrhx>t&0S9$;I_G@g0A#$4)YTCUGb^$NIg@ZONTYZIz3nB7v(e<=EoVc_ijNqhX
zchh?%R310S<3=HLH$&BlWpy*v8O=qLjOxXTT-02FJ_wid@8a%U5X1DNz1^?UKb=s-
z^I{1~M{DOC!7ZXZFk4|KU;u{h3u`9-7T+ZFq62i6R^kPm`NPYl?>r%sS=@|8g)1bO
zWnz+&hdOVZ5>O~{miY+-{~aZ(?$oW4Ed0~%W>JQbJl73H2;=1lF;v@wgSD@ct8&dn
zRzcP`z>YFr(6wB&%Ce|rl~mOsFTuN=N9JnYmEhXKxETi|&=D@4R?(NE-UZba!cXC}
zCFEocfA-tV6;>3j9)|mm!|?i3^)EJ?ha-1zHU^{@oOgcWnT8u)LH-AVuf59J?5536
zGKL+8L;Fff75nL2WnLL4C>5!PQ02*HZ0V^sH1}O)tG}(yq4zwhi);*?EY(fRq4&b7
zi{$6-sdR~e{JG%fax5nnN@(~3p<=g+Fz)Is=-$Pd?6C^jf^1EBvpI4V&t@QNPsOFs
zt;ZP(KZ1s=@OP_Ina!%U>D>uqqlvHtDcmjzE~9_#UT$Fmxr^ZrCW5#&X0acM`=}X6
zP?!)yg-YV_I=lj5dzI{N3>I#JPmcHd9Ki+7gPWuEO4q4$$$MtjnADs7+Ml)~{@lXZ
z+;*fB2aefqmP>Riq$X+K?{Uletgp#s{$>32&;)_}w8BjJz}&ze(ElC914)5-g#L4s
ztwQ}z9A!rTouf=;6R;_U<b9$h^DB=KJ~K(DD7B4^P+F!!pad)&kl8~^=|BpQx<=`w
zp|Onjy`hyHPmnF8L*k9w)1JA^;%tPG`^6FLU)2&(>j0YCy%T$q+8udAG=ofz9`WV{
z_lJz%&@!)=tzCH|)JL&zirhRcU+l>*U0wjgYU&Rf4zqeB9C{jPT7kX4RWyaoUib;9
zSDY1PA{~^4e)ar8T9%diJqR#=u{!o1h?0gXxV%V2-9CA3zg8LssVvx7up}i%{;j1|
z{^_9DivHm|VbtIKnUZ5oWX+LgMX!1`ZKa-op|!59G^t+bfN9f1>2tx0fmBO$7D>U)
znB2^UyxTr|UHf>9i>QplfjksR<RVM0^Z<s>&!hP-$4CrPO>Hdx-ZMKDbr){F?(46|
zTb)+K<a3vz;%gV$HZP*UHop5TBnX;?0T-balMv}wBc2ZDEI%|Sb_(?5WFgr`0&;SH
z&p}uK$9V=0j6SGj6%;dyG;}G(6-Qt(3~C^~y_$RmbdLMXF2Y<b&DVLKqw*WeG>)E~
zX0Lftuf0;0Ktgc}SwhPY%mN63LcG}9f~6o)+(8wzlq3Opt0qcYpu{GzDzRjJLIj$+
zX1#K_6clQ52#<ST2S`#H6!pP}PbR^VE%ouWN1$yD5f1#i9x0-W-?iYP<L0mFrDoY4
z6X(jr&NJGq*}?rff|qrDjOW8!Yl5G&5z|Y)j9vNCL=8NI7xzNRq4z`A#C6K=<C)G4
z3ThTBGQtjmSlq*tcS)APr$5i>ebJkLSK!z4F1S`NAgt?{0y>Po+?@=N)3iHgLr<Ff
zSpm;@E@aVQ1;(Ko=MR}poSI$Lanv$^T`d=e<AXx0vt#T<GKTnK)7kr;6?~G1SZ^?6
zl_mVo&k$op`EMML>L=HY!4RpE`A2PBXU5@gIpW!nKR-D+_vuhGd#fQ8ALdv+yjJEM
z97qu?<p?1{DgBu4W#2MSh_u{$ZNC(|rDDjQWLInIi-nq)0cTt|mu92wzht>u(_sNv
zIt+l-Yy2DMm*)j_)~^$FgtAmSq{K)evRV9Mv&<q0hH}N1a*VF+0B=FyAERZlc}mlz
zOV~-aG!c8OVcKs-cny|t#D(<fAH+`6m%=|$YVzQ%4FMl5CWZ4O*KY}M-Ix+qj9s<%
z*k7>1diz|K)5?WCftQ{d1nW;-no+e1#$IQi|Hm)R3*^;|_Rl4TO!q%=iP^dScP_DN
z91F({iRVsVQEsgZL0#**M49C%BQ@kGvo-xG5IOSXiL#(2f!JWpO3={kao^pS_c%=<
zyp~ZDqw?6*+FkEC4nD%sqUk}EA=8JTEcQ(P>@4<KAJRikGFKvau|j-okx#^P@}gvN
zNBrT^qT>(aFkC~XqTkUeOWfcBP?e+FI73S$7JKtyq!3toa`89_JxZ{88l^#Af2lM$
zXi#p0ihhf7jAsoSPk2e4vZsbX8vxtC5kID*wk7d27}NXFFv5ggfCb5;Kw@y$@n{oK
zy7ec6sMl^@KZ^h2#du%=F~^Tg43k|5vR@-Wrs(&6Aca26#f=^v9sPsg8fNs9B;FXZ
zwWP4hnN0ypkiw3D@ZArxD$m=72aAFO9<ys#sFL<-?ZD-mEZ_TQ4o40zi>&maGNL?=
zzJj8s+vdB;ONaNLOUz?HXJ{EU9@TA`8G#Pq4$f%3`vl8A&JdwizYkxExW{j?8*@qI
ztTARD=M+fQYLvlpH5Yy;j_=;w?CyY9{|>x<NC9ui1}iYK)s7l(1g1fO7uRx__7%GU
z-A|MYvC^LlLYTv<0GT=iM?m62gi%jbE_!)Htr47rr#k`bw6QJN>g#BRs96{<`aN|U
zsFBywHXNPJaP>H9_*TXYh~Uk=4q0`Ep1j_TzUnVESnU|=6Je1o^kX?5djY*ev?opl
zi@%d|1iL#sf~kc_d}SEbg2VrH=9%bPWMN`<+Aj^Fgn-zbQIr{ss*2sBU7mAPBy@jy
z0EASvhl{|Ov)V+$t846-8JKiBOepqYzy2!dZb)eEeD{dOng5INMniu9+IwY(I^B~x
ziW=FQ2`LrQUWkhTl5K3WHk*jkCl68Jxt;3LDgvDLYWKwhb3H<?u88ln!}W?3fwQFl
z-q2TNT)uVlaM!PNymbJ$*FU;Jt6T3n1Zv&+Q^TM`Lb~NM;1;0OyS^RkQoHzL@_C^~
zwlVfn94CB-pbkRFBEsB6ro5XEA*@;hAIfNutRjP-TRkr%vZIsHkpK_cvu%~>&PK?P
zwDLXorhlpCpuABd-nhMg)SsDC=^br!4=X#yasZpKFUQmGCkCNWpQtUBaNO4jz2)Tq
z9wd4q#4Fq_S7Qer4JR_W*Ro!>^5o3SZjAmcZSTG9cRcmgBX=+;WylAc*w7*|bp28I
z(Z2`axYh<ensq7N#rMIF>U8y{3f{h}ZQZnA`NZy5mH?8)7YwQ=oC2L_pbAtlh4J?<
zs`;x*zR}*b3G7{kT~L-<h3Y$kDu-cbm1wOLA8}qRXv%2cL6W`;uWq<#%etnvdasBn
zo}QbMv|wi6!;A;we>bN4(k&?L-{aps1fc2`KLfG07<{EoC&~FMd-PsO4B+@}{ZxB3
zPM!a|s$9BFRdRKueoZuwNeAhc%jO&ZUD@b`*E1o&pPt<T1I-IJuA22ccl~fSFosI>
zT`AOxTQ}m-rgF8@YLmShaO1P)4sx9_5-|)y#J$fp;+L?1-qsT~r6Q+P(KBE$htmS!
zHgY?E?mPrkuKsEc`W{rd3Gv*y`tZ+Rp-^i_ZzFZR`H3#M%#!~uOD@7a6eU{IY><9f
z3{xU|<*<5}vT;_BN<S3V7id6&$s*v=v9JgN?QIVB^Rr&_>cHp6RfSAV?G81tMU(iY
zqZ&{X1q>s8wAqSRERQ1StRmxG&w3;pImNh(dPewpPZq7u1{|tJA)x{CH-mn_IJn>D
zJiwq-zlY@9jb`e0Pd0w8Za#p7>A*XW#)OLS$;u)GGvMHyOso3)IhuQ{+2+ACe`&@A
zap{GTtCL<4s9t&@=m}+10InCvai5Q}S3R}Vbu?Rx8z!+VC2?s34~yU`e0_Xb3`u%a
z{>(z=CliEti79I$G0gz480@o9xk&MZ{{<<?2@QOrfx@=dTn8pDGJb5&do)a}ZcL%?
zJVVU-ED7B4HlNp{Qb>NP!-~l@fxcFQg2L?8jO$>~21z<=8oQHbIMgd=>`43MkX%tP
z(Wt6b+weKl2!(&`!fucyXH{egH~kQZ({Kd?mjaZxi5$}K(=7T0_Lm8SWoLD22-B#1
zx`uYJ3&vUFc$6)Ax}g*(ppwYa*2si3+pkXabP?Ro$ynBkdP1j9FMdCWHVv4U@C!!0
ztIu%lw&d&m6YfYTrN^)*kMt<b7kUzR*8SX5Ku>0zW9MBtrOS|~4?P?wDAxrCiW}@?
zNeY@-K9NhYoT2AZ!rLT8E1*9B4h+@>s7yl9IiN~F#_O6-d8E>CWW)r5LAs4Jl5tk?
zj*l=xnrbrR0Yv;hCJR*X$-op0Oe)7t?jZQ^V?!EyYuZvs)a_>rtP<BxCD0o7ZU-Ep
zPW<Qh>7#gIPBfIA+5kJL8Z9;M3o#1^8-`28N4$*cP~n0^fYTeoEra_J%I2Dk9b){}
zs>7K#)EPsvAW6;(!?=cnQl4fu9yE$=WwIZV?M9aUds>zj#JGdq=url$_+jih@vYiT
zpA#_1TJY-d<UrzNAynnTKx$eZ&@$t2K(cx+M?4URWa*#Vl;0GwNp3u^M94@Bc2`)a
zDRX>`B?A4>&e<#_I7sL2LSCAA%<=B3GG6#oa_|D}9G_2^>jQq?l+{NRrO#Z&veb!e
zYlVLNrc2okP<A8HW@Kk;1pEOld0suv`uLIA(9<+_#>^NTJ;p03hb~8vqB?%UOKb;I
zbtkuvR$*r4ZYluPKX!8dtu?P`8ujIJtjbFaW_sf{P*;=xvWYlRCO(d}W4otEbua1(
zdNnarO*3{&78A%U%pl{-2R~V;6{@n{tazH*D<wZH!w)m`{P}IG;7g>WF1Y^ui;R*3
zol4;o7)Z6kaM};4%(!Jz;@Dk!!nk6Y=gCc<(c0w4Y@$p6tn7*RFN;Z^nM;3P+upe_
zJUaV!{-dUDsz0Nf9%qL23m{bXoaF36iGsE1;;hX5OH`ng@XNELd3KeY#>V>1S$!nP
z^82V+VgsysqURKF#25yY@WLfBX(;eDuMA}H>Ttg6+kF}8Me*HwN8B+C(uI`OUZu9*
zK>Z8MpAYEfOViU3>OH8_E?j2*x*16V0(^Pl=9i()Wkv!?0iWt1sgVN>%-SO$+TWdh
z^&H+cC9@T!dX;AnPiNXMMH?n1>y({+;F|b#_^-2=aR_es5YT1EgfJuCOe@;)QIp`~
z{9MFh_6phM-ikU*c(e$gl4#TsA)*;Hm&!hnHA(GFQS<qViY#>P3J)atIOoBbSp?ta
z;&ngIHft3qDgZe5onKT<XZJL$O|cFpxdO((dsTG^dWry)X)WveBqqkOb!*_#j$*ZK
zmyN>C;L-WM=d$(QbLB_2vER<QbA>`}iuiGvbW{>WLD{1-8tv>VEhXy849=}=E_>$6
z>C}YX(_a%k19kK34kkvhlX^?m(<(3SY--aJRNbd{*SoD4)7bMozccu_2zC})N8}|{
zt?_NCGSaXr;PZ&o#}5+uXF&fhAC)PdHRLP`Y`9f7i1ZW%Dl1ROWZWlc;^;R|t^}8C
zI8Nvk6UgRtHR)PE+nBR=CkbqSkE+&oie*(@_dwb!Kgd83F=wnf=r;_!7Y}V6bx={Q
zUt@;fd;bXkT>tSkLUsIgNcWEq9T~1mOY~F{{VBGAhwJSTL@OTSvcJ_*;~`A1aDLb^
z$!S{{(wQ9I1PPGyJ_<hP9IZehvZ!Y-rX`E$pKoz^!+tCg6f$am#ZeqEkslW^sm^XH
z%zqQP^RdJ&Z}@5l0MS&Gy9d97fYaun>d>p;iP-L&Y@(g`O;1?$f&_F;!1QN$1it(V
zjJzOss&pRjK}h0^^0@mD&~mL^FXWoHP87QLQsw;@MM4Er-%(}HW=zLa>6t<LC+sVI
z6}BmPoSBR2M0`PdP)ECe?otqLB2qKcV`0563P|dh4SJ}9l9(tZB@%$!S3^R_=!HDv
zAp#?S;VA$D`WwRM&oPQ^qj&ZM7(*kHxLx?an1K*HWfT+UHk+W0WmTV+{pynG7iR>l
z;2RLc7LO-c7N2)|$%3r*S&Fddq}-6|epILgUTQ^}NJ)DC5cRYT-0_2`iWy~hWW`)X
zOctX+N=y?v8Ot+EVFu9-)XF7N6!4t?v#Aho-b2KJ3Iv3u{Xdch0WSZwJ#3ms=btoK
zfAft#*3MjhMB+<6%^Qt6dpZ_1I1<m3@XyMCi9pwnL6d$Imz3Q!?c3W48wVy3mt<X9
zj&BVOh7mdJ!w?p@{i|gXLh+Lh8i0w-&Bya;bMtz83ZF^Ofji8TB}2bvg7OtO%e10r
z7D*}jqT$<YXoMHn@LS&9VfN$$2+BYQj2XYgYi4CXi-Pt~U)2!FO8<zS@u*(MN7NT`
z^?LSCbg<&c3Y9p=I<dsMY~4YWZ}uIBk>Hr=yiOO)r`^c9a2y>}8yJcI)MuRNYC2-J
z_bI-wu)-~<CrTZx>mD41+)j$v1z6s6Ad7Usg)@c-BcFj!$RUOXMyV|#0zN+eGl{xz
zM$L2K(X#*?SKQ>fp0O*<sZU+w1HT}LR`p3;8{w22%6ny?#y#DPYX8&sLF)Y-H}qAX
z{9vKAuf3%^+5`7TV689T=j0d72XhYTGh}1u(s$p<d!SxkX=_F`i`V2a;Q;<;h5OXM
z0Kl^u;M?UBXvYE1o`ChgW<Gx#D{0liHTwP(VDh{?o^*12(aj?8=Cr!jtr7-M4NSq?
z5}z+_zpWw!%G(Wc74H6=i?04~AOyNY;$LOYh@70Yrn#<1zF42;xZgRXeA_}dO%Azz
z0(s@(%0BcD_MXf<&N+tYWkt>xJFd`hrF?bQvtz-R&e)yH{<JxD?VD>N+|Il&`n(ij
zrQBL)2U)v0+Y{mR-cU{l-Ff9!8gs0_^)x1$`e00{!$(Ja@8E6toeHi<QF5w)MdjAL
z+(45gBe5y3c|NaS$cKpQjuCX7mi*}#*PxQSAAk_e9+q;*cFW;*D&_qfH7amA`xO~E
z-}f=+%1|>B!<3oaLgsy;+T`jnn}`Pf#mmiOaW)~0qR*#xTJampvvxnQ3(Ct4?sJW5
z9Z-`PJ_gO3-M`c+$x-W2?VrM?H;qSTrN%KkW5_1QB8rF|mWCXZA=&aE0XfxREc(Iz
zw~-J5CPg{`A2s`g^MX^4zI#%BhQOL#_ukgf@De2pEh`<&vlRQ^1`{L(vpwC8K|~T;
zu4_b!Z9`EgU<tpklaEQbpHzW2m?-IgtB2p#?3Dpi@edG-y}$vDmsZd_6t{E6b{uTZ
zHr8czi6YA23}KOoTwwh{Fo+p>KBZ6To}TI`@r0Mz@2+?<hrK`3OS=IwO;$RnL-An1
zryJr<w_5Ub)!I|9La3Yg*RF`CD|GYFaqpg^(HR&cu*U&NR%mqRE91+@$L2iXPqzjv
z&m{!g;h}DM*VPRl`4gKUiLQj_T7(IeZrY|QH)|zSlF$Q8>Cce4UGt$8UQX-uEyyJ1
zhznxJ{}*HLv?N-zXj`W3%$2rnW2J4|wr$(CZQHhO+jgxT^>S`S)IRrNKFkjoF=F&+
zy>;t)K>V<T^FhzGHjQ<fG+<mMmma0e20+g1Y*I{v;5Sv&!~C#yXTF#=kjzP<{sod6
zsOC7Nz3$rSy;cPrDB9o)awAW}WqIHkxj&fRz0jhfn_Ckx9*set7-<3IQcMb1^tYm>
zFkT2ldbP?b^y^1O$>Mp)p0+W<kvsBgL7d{Xd1@!tNy1lfLBmI^nZN~&*w5Dfsh%)?
z?KWnhd<UYLur+5;o1$_xqUcY2fJ+AQn0#;1)3(-4v{ufo_-@h2f`6y<uAWL|3egN3
zAls&L`>dppd8H1?$JP4ZqgXp1%{g5<sl)N*AdBH)4Ylx<_iBOk^m7SJ8!hpO=<Vzc
zc!zD7a*X<=>4D)4eb`OSvh3=f7#uHapa}&iaU>(Nf3buJ?_lw)n(*G_v;A?0!p!Zk
zfC9q$rzd)sm2l?*#Pp@2-6(X1w9HWX=LFiSeJcOtRS-|!|KU%)=vjhiwI-U6gGib)
z;+o;FG@>(qS{~x(I>{+-5icuQ5am(%3Tk(@00OKJ`|Nifsc4)7c&__X!IiGXVQ700
zwe5r0HrE@d&ES#>OQ7?L0Ta8E(sePj4{wJBf-z=^ytOZ6E!7s*-9I}9$p6-z1DO5Z
zW5uyH|13DsNHhzwj94iF^u!Yedu-6ra$QJzq;8Aj3E6u-htU2Vteh}=V63_>wGR^?
z=v2Ur1h8fHrQ0|P@z}t7<6Co6|HR6Ihv@9UQ8=d^Qd$Pbx@?)O|0q99t&j~hPOI-6
zoVax1m!erP3RH#wSM8+ggCouox}N;w1=pp>j+GIkQOfT&`Nb|%zz$g#tj64-pK*4B
zq7EV`te41}i{}pN2H&rlT@|gYI`g-E!g5~cPw@B-6`X2fvx;*O>zRBH?m8!<vw|D6
z=e=xA94|gKd{IJU#VlB}IZO4Dh$MbFa?JJzCNRG8lhM_}S?=rXOiYo@K+$9$hO8qU
z&K1=V$mxvJ1>9`+WaTd17NA5nAqxp)SS+Z)xnSHh>d^~?EAriA-$A@8^cnu&0e2un
z3&j^(D)(3o;D`Z&bg=21y+7J3PT2R3u(<mVMX2BpqMP=2xv-%ez4xn?SJy6`PfK|-
zdb_s~+G43XEM8%&=LLr0hUA>pri%mFqq`Z<ZGc28?QWpx6q09r1@!wWOOQz?$Sb2d
zLz=|$KNqak_j9a^R>d6zxl(0q)mxlMw?D)0W>NG2`PW_SELR@-u?HDWg7sJf7(i(1
zMs|St;=rGXwFGuX10i=k%Z0$&@-V2Fn^IEqP~wNlIF7sg_rw!30U;!EZ|Y8<WsGV-
zvNgRO(FypPTk2C*Sch@<5?y*f#5eh|V`gwAaAGWTzHV?{0B!-gEuaVo1^T~@z=46x
z+Ja{-G*CBo7g>gLU6~>CzM#l5TaN^8^ETQT`dBhUz0Of(M|RS5>s!{t=BS=S#LXB;
z)zQv#u@5G$_KtF4-Bs!trvx+=+HNlIZUr|ut44iPOH`;;CNW_iO=Dml#lk(UAu1jw
zU!!xD0a{^+Pq^duCN<h6;nhAoi5cPJ5uhZP0dYUZ!YYLqPBw92ar%>q+HWI42O<>$
zZ8ytVC~kL5L}}C!PzBu(=qAv-{x==2xdDPV#!+;t+*8w%VM`N2T|b3E;}~!wzFIPP
zlX$4nLDOEO0?DwE7Vb^>0tPHRnwY{73X{#&=wSz=5CBt0V?@CB(gJs|26r82o0!dJ
zdI+-ed4LE!Ev`xxD7H@OR#t&d<arSZF-IYS4{4i{WY^fjbre#Tk>gfE36aR+TdBl2
zJbSbbK@oIwW(ji;*kWrUsWWzr?RPg{%aj?;5NfLW3|C6kk+#i8DFx3hlP8m<)EQZX
z`|<HC3E0{Ydt?DESM^y)pv6XC1nC%<F?Xtnb7s_H?)Jq+<;JZN-zmts9goGhw|%^b
zH-3m5hss0_i9)V06y5plX^*+KwA32%t#2uE`dG;PRfQU1*rg_yPwdlGM!1lVqv7M}
zhHIF&4p%<svN%MBidaF*rqWav9W<&I<mS>4B%e(r;;{CXbz-6>H~e_Y%IC*L%ELK|
z_Ef_<aX*j|+iN|dlrLJW%On;T-9FmN-=JDBRh`EOX-BM@Us{p!a}VRFgCerSHeaUy
zdL}Uey=XVL)|0AINK~+sR>R*y8EBE^Q_XlReRe%d8hOwx61ScIo`)ZK^Lyc2?6VSZ
zl^J~zu+)=%!KkIW*|IaGH99|Y(ETh7T)GB8ZaWAKwg#}n^&o@n`Y_Zq3iP5-l8tK9
zV8*WXXcVU?dNd{7LfmZP!w49xrwnOh&s$6qsAhmOr7c+i`brshNWArF-s;TBry)zn
z7TZEJb@a0h&a^QqE-(=;f$b~OVyG@b+t*0(EVbo~EY^>b3>{=CepB5rCqswE8ikpT
z8=>U-`cHj&K7E84jw`ODM-Dv1K3d^($3CCj&v)%)AmH<c`f}Lsla^F##B7n2=x$nw
zZipgyIKLtQI~kdFPa-t#<iI};R(N(_8-MrSW^J#4b#PYyFiX`QdMeuA%TdstaO6ak
zjuY#**mJ<<;Ioj9)0TaM=#`AwWb5;|hRn42?*D9aWOk%gfXbX~mPVZ4QEe6%j=5DW
zZ$}7#0AC701)WlKw@{XzlJ^^c??F0X`)S_`hhr(19xo(@x*a1M+!wOhvS=WZN1A1u
zbuUTi0A9Q~Lz7cDVflGDZ^2Najhe{)iBHN@pcufR6lN!BKZpAlh2_WtT@GO6$ns)>
zk5rP#oGYM+=R05-)jhMUI@IAR-sT4|C2-SC09KFg&_LIR`>Sm(*Hxtf#YO~Va(%zK
zFOr;~Pb~YHdt+9}mcGw&B;=_%eKIfz0;<V`?XP_t205D!0oeJJjh$$rG?H7$bFmbq
zJHBIvg8m}@1<b9_4NuKzi*Icjs4r%ScK$Bg;JWhtB`r)H4oDhCT%Uqiny^S-z|v;(
zsiTYu62F=(w5pYD0%xpEAXA!9A?QDlwDzgmF&t<#<~cvhU{bJc3Ze)6QFJ6#HfX(~
zn2z*3EdWz?+czqdzd*O%ouKTlSJC8Iw~1L+m6dybc6fcYa69oLZ=lnVYwQn?h%k7^
z0H-9EBP{%Bif}uoA2J!VB6)IC9G$<(xE{&mGR@Fz!9oVNX6gKwER9Xsjq%-6fb+Q~
z8snaF`&Nl6yS`SjtSwq*Nj|8cSW^dAUW<h=6#N*0`S$^o2jQ1gQDPbc+~jf!RiqWo
zu}SE*8=C}E%Rj}mWDb*}0Z3mfE=YMkj$vE%tf?6YTGf&KU9j7rw-^<Lt8rg$I9G#N
zzPOZpwsx4qY{Xc&%N_TTyY5x^utf?vnHqILZ4r3?cm(uYdMO1G)8}2S_j?hLb(Al5
z*8POTu{HA9HunSPS0V9+nDmhg7jMQrrtUk0;+U>EjdWmZRq0L+1j$5kwo@pAh0v2n
z73HA5Kf}O&xxw*VHl&M>+ZH`EYZ&3<kmQax4QFE)qGp?}LQ29o)?K%?Xy4n9Z)VEw
zi7iLxMtKNdnlW61i)Wzg<u0ReByz2x@o&+ewCar({;}Qa-Kz3aIxW8}wyO67$2k|O
z)S=4PlGecub$w1?Q9&I@I$aW&hSMqC;~U(zt}@^iU*=I2|2(biXqH~CuCAyNH8+Fd
z{E<x7X)fsYUzl7a-aVQ9m%~00y~=!lRVKvIBP(zib-W2IX2$BIYb&#wcvnS^FweqL
zv4(>Ppt9p%!4G))f}*60?&mVP&@>=jSn8qr&q~H#;c$682Ck5?q$oBnY+P8`EIuTH
z@XnR6&>2}~wzO<Ckv`m>i`aal5WN;PylF5wT+Z2?)Tu@eG}W{eGwX24tc=1!@oa=(
zVxC&Gwf~`s+`W8QfocBICf^rTpLu3dlks$0G5gGb)zFb152UQdFBerEvDBU@zY9S&
z2?E^qk_Sg^u}03zh_?;(SkJWzu>A51eNj$x<90bz?QjCKT4A>E2O3Ep)VMh>+kPI|
zyE(n`h*9|bLBBm+4t#C}>V##ohI@vba(YrTv49(fF-ch8caa&e97XkNq1L64J!g5!
z+`Hs7abL#Q+Woi0v;ydj`hX#;$P2hDdp~qbWGC{_=w&w6|J)($x}8X0!KN>dqyAhd
z$~-h%AXI0Xq&E`>MI8T9=H!t~jqu!pr-71fQxH_M?*H5f;DxWAh>=960FNpU5c#Or
z4q<bv<UY=MJy53W%Q6*f%pA69CBJ~})0gz@=#SNUvb^p=Eyo&jgOyJ6)Twe;ozp)W
z&t=y&|5V7tYMCI!UVT&eSD8X^ORlG8hj}se@b3@fX#!eW(xZRi3Jb^b&{?v^K8kN9
ztHsnUQ66lRFfPKAVhg4EvQ@k__Ss+OL?q|Ls>iZT5GLhTGKO$gmmcoJn<OMnGP}(2
zbV6p8K)EIK;iWtrFBp2g009i@fK5<kyzjVf6Z4=+-{@7o9brh*AIkloteX<8y=ss>
zmFdEV3@EC`tbvb8Mye#+M2UXq@=!_Gv|0<jm50=d&iH!j=5@+Q`8+F70=E&3y=ptz
zYaR(Ri#v~o58TYU)ynAL-eYTuOkTSB$z6|0Q*V8@OVp;AO6(fzlA0HLLJOTxdn98o
zFhpQf&IO0u>pQ9`KxXb1EJ)x!0^<W;SJ4AZ@ozXv?&}+E@OiM*covc{%v)YbAp1(S
zz`g}2`6^FpjTBKbNb~y~h#wF^UpRrNYBv4^6Y@0jWxeCa%V@Lj&67xCz+(!!%Wfqh
zqQ93pX5rDqfDA>8Ne?F!dEeN#)c)PV@W9ETF14^T0k2Q`ASt^K#kK^CDO^#w4^QDK
z%Kv8A$<rmbhrH#!IpxDYAJaj<EzJ#dep<495c^tHDGaofBbP!!+9fq1^GS4Bwx@zy
zBR%@qU`?x^io#D?ZS300zbqR~SD+P0io<uGRjVa#>UyM`kMmuR88KLHRBPg+Qe0@0
z2+2zZ6t7uEsfMoql4qdO3i)or_b<w<GW0-ConC!l?P!FMZ5=*8Ltz8zwXj3}d$M%T
zmbi_>%N$I8=Ju<$jc^6^hEwGo2JM2+a~iLD?H{&+p!u&#?rSnftwn-Tq<IA?&U^rb
z@JO$^YWcFc=hmQ1G~Oj!>MyOfF0D2n8vERyOr}=7<?D2mtMmt3D6)%ab(?p)EqYv^
ztQGTx=^VSKqcbAcEoOLTMQFt>nAC@v5&ZlQdG&u}F%YaY`4;~ak?a4y|1OL9|BSx=
z{{Z{{ee_i`7@ZcBTx^CW27Ka-Bv3tk*gb^aL>w|HIUU{@<<#V)L}0yKSeOsBf@7FM
zZX5-j2xCNSnkuj{LBHz20EP%^B9bwGVLcrG-v#u45=#Xj3u`o}002H_|2M>v<Nrb|
z9dqA0Znh-seyjF%r$-%4v>Xw8OKYEs)EleTwj3oMb-mcwuroudN0G=2D#(0oeBIi*
z0ww@JC?qAE+?+h+M~my#uW4V|-o5F?;?zCbJ!6ByHwOI!%y@Bgnz(rD#-kedBj`pC
zEnTpJ@!C@BZaC9}<-LYF9yze~gVLhirV7b!@Bs0HoN?T|FdTEMQ~$=Q75Jq`s#f{K
z_a*}OTH-Ric($29zoyd+22~rz*d?eVG@8?&M)^LxQR??6xbGXVz;6|gu8-oUBiccV
z0NrnqK;I&xfpyY*JxAs3!DEZ})qI|I_qV0~jU03anft<*DcJML1|gV=P0QTtQctKl
z$c>5R_4#r`8NfYo^Fa}TA2nF0-<p}HR-e*;yWiRA1(mezdC_<5XWXA($j0-Wf22$Y
ze-&-KeOTp{G#j<)x*`^BY)w(6>Z$8}d+PWu`I=so{N%zFenHzIT+#6YhtFzfTSb_8
z4MgX<QysVbX_DBz!3oscj#_7TQ*-zokk)cZ1$o4Wbdy?&KxTvF#y%uBgtPkw&uPj|
z!)3kuc87qbPW*AeT<|;D!SjUi=}%$_x&65bdc~7T@!$1R4YlQAaC_)FkZ$oE0sDqF
zeLfrZO+?6)k{ZDS0H2t{OojV-tza|fI{aDAbDbw#5}A3oqd$iwojH2l%wa;8IkG%0
z;5uiOWs*abU71gSy{V}k9-Q@@FdUfTjcAO{x$&+c_D4T|y8|G{B*r?&SB2oOB64vN
z2`kg2(d(O8i(bTm=bTCKbs8`i6ct>@4A`ZcQuWs~FP|GfhyO@Ky^I#&o6Ed;e!kmk
zzj~>?72z?)p~7%f&~UYXdkGh1$k}9C;i$$OP0i_4Acv5hag^6L#l$36#+N6<SC7{6
z^U9`eMpbW@M{0A#;UVOzn&--8UkrOJIKr%Sqbwm=6ThboD-wROdMMB4M4?5JXCL;}
z9WC<#-Vy=$&_q=Bd9oWS$z$Nb^=E)ceKZBDaJmMRlPSe+@+a7B9&UF7vy)of$|0u8
zE!>~eZC<3wnr(YcGel)_JrCr6YtpG#@=CcJ=J`rw(R(I&b;ItQcT`+flGWcs&NtW%
zcRv_Qhkbk-@o7O^^TMAi{052-FyCv3<joD%`^$&uu|thVe;`ZH1)3*@%n*Vjbb+8j
zjzk;@$lA>Z#|(rJ^+Ex?HcRc}baly5Hz{%z$bDSvH&6Zc<0-A`#sr`OcRZe5>kcRr
z2^z8hz#eLgoUqQs@4sW_@H2@JRmYU|wSbk*2|`A&mPEnZxGHT8@UsMHdevM&Dh9z?
z^Yv2{>1(a?xm?n$Yu)Qoda^;sR{g!86q`$B+)t{}&Mf2@i6T^iqIOE<0Dutj6)PnX
z<#GEf@KR~SCzoOCw^$+Vw@(w-FzeUrCVwRN)6$ngsd6OBZpfF#({M)s=fFzt=y*WY
z7|9(5jJ<d1g}=ys0Z$t`Q`^1!iMF@<ME6Mo1IapWEJv8?l43)${$9TD&jQ5fgu+=`
zLVSkqG=UC|tQZJb4~z~8@fV*NA_d;cA8g-W7X%)=ieO%+8Mf?vo>^~d-^{Q&rN(&v
zxO^U6w&S#yb8s@`Z&A2m+^}&AzIv66bS04qeZNz~?R%CQ<~t2BOC5CCoyiOt&s{Vb
zzOw2SA5nif;e?-YGBdcbfYhU&K^_zCcY$8}$%kDKO*Z&i(;=xiNR~PsGGG}bm({9&
z;K!h5mDr2dhJ@=6f(U{qE!=L$Ij<(D`%H@lOLaRWu=WuM{G)bru&&c@luyxGDo(sK
z?{NB-xzCAz&pc>vI~Hdso#s`yA_4^y_I&CFN<<dCt*@(%$D#deh3kCpMKqbpkx(DF
z`~<>5lFlp8%CafPHl*I;jg10QOOvvt5@|xst!t1J(4(JQUl%GBfq^%shM9_QLk}s}
z75YGV=f>OO)-@sM-%<$+B0S=GaKSL>eo29ZNVbH54657;b-P}!@|QdQ`T*z&B4vFO
zczLD|nwQPX7p%Fiz3LV*-U0@xKQ><sVtvczb4(QCInXAfbxGg%Z#8TVBX_2+AEg3L
z)NxQ-ZTA6J)xIc0_Zgzw#qdggYvz22B9R6pT;6}~+hf~4$-g167&F#s1yAC615XnR
zkZW%lqF<?eXT}?WS^wsCT)HRJs>6JFCdx!uh8Rwqb@tZ=?(>4l{1%{>x3COWyU`5M
zwfoRUM)0LssRpc%L4HBamwAg&tK9fOXyJiK<TIV^Jn2;+#L%SP!jpDa?m(1`PRhZi
zR&sMo+bAoCBZFdc{*u_3l~RGc-&MO=saXt30)xr23PdFL7QvL|?85C($q?V5ugx`L
z<87wPA(F?>c`$~FMt+5AM3}R=Xe98I1wJ%eo)vKWH;{B&M<V+}PpY2fJUmV7i%ut)
zbl_2wo8)&BXRt-s*h#`oCD3=jw$9M(O~a}9Vb%ZK(fl<2QxQK5vF#PpxG@_3BaWAP
zhnY3nsG)=ZHhGHx|1KkqqR-pUkQH81%WeonX`bzzl!1u-4kk``J--R0d4r^6D$L2b
zwzdw=7rE|h1<*0Q7xRj&$isCCT%S<=!sPd@KrhBbm}_rRZU8c-hxsNZ5<j)_1Z<SC
z504|^Yh<7_&8>r_V&-mZ@zp5^2G^zzcoMm%&uoWMYpP5ACJUQgNsU`3(wyn&!t!Sd
zO65TqN@{dU5u2BVQb?Kp0sUu4y-#9UsIJD%Os=}n(JDG=tCQ_-+m!$Hc3mJsY)5|?
zAr?4_k-ve0`*e3T&@WfN3X^Y4F|kR;8II8Kfk=!495El#&`CwGuY)3`@1tg9M<48b
z<PdJj3w$HUm8lQGkSUL9E6MXY8DWwD^{inV1ph*Yz#s)K6H2ZZU+}@H9!N8F;=PJ1
zrQSxuY}4UD%$-0)T2y*iNbRdxT<S;s@OK(9e-WD^6%PI#)1~e@Lgq#_fG)jeE0QZr
zhgS;+44{c%5HCfo6i6OuDAy@;lo4<J$D`4Sb=-{b=(9W}sfZ7l8g`U1D-+`kQ+gJ=
zqxxE<m8Y*SB27i6mwZ3m37H&dQ2)V)Vz&Y(2yD5tmJ*}^{5NlK&3ViyKUfv|w1^Y$
z-`5YT<V|-pRWf&vY403z0FQ|8PZS1n{)53^EawDr^=5<GL=Dz;rtNZDL*@aY7NbLO
z+}T@JbDL5{8Q>YF$tvzz(_9YHbZ6b3j~YkAbC?%8lJ!N&5C+PiDa?H$X<<%pVq!6x
z5T}?Tvp8~MB}ozrldWI_Vu)N}09+z^bck~2ZnCb$H#<e4NWW###WzP|;QOHqU>g>e
zkvMuUorGS#aL4BdgRx%*^A}bo(N!stno@WuWLdo(PFjBvonllNQp=1`EeRrxhJ-J;
zz4ov}W3&+oiD-K2uyCr#qh4keX(^&qaB-@P+@`beMjE*i>l1Vr)BC(dnRk63HY5#a
zQI7ZTm_4_ix4PgDndw6M05$r{_MI99)+hn8Hq5)`ABnD)KC@8}AZr&SYWBnMQLQv+
z8zR5#z(^E^pP|&S6H$+;l>G!IfXP@Cvr({Eg~v-*{p+=(fO`!dc5|J$tdwJqzqaUK
z^#gQm*($Ub?3m1WyHB<rr`wwWV@A$FS}t`Vb$46ICt)Ui#jqe690(3H-fRKB)P5cG
zh4%rZ8ZRg)Z29~WfO*X8dg!BsT9AOH`80|**38ZLavrD);*^l0JWldO{q;+|FOnCW
zN+W>qO-An4&xDU-r2Xfaey;sL%riu|V?ayZg$4l*OJ(gpVAAyH1)038F|=4+hIJwk
zqZf6F9baZ?U(XgYB)(94(4pkeyLZ+Sqz++J$>!m|WoG5P67J;6vBzyS4!P<g+XI#|
z-nRN>)DFqAEf@h7tfrOwJ;DG<0gdh2EdB%+W(Ejlkr|B6ya=@FSsQi9SC|24NYM?;
zvi8~tQ)rZLOC^E;z|iZ2Clam-$$uM9vO8Blpe@Vimg-o;k~%14rmJdH7+2xq36m{K
z1fDkb9&;DYd_wyuGHHplmdw!)3LKh3+BNd5#Y2qEk?Mkw=bBc6&}mrC4L3L@87pQJ
zxZe@tC)49u#?KS<AQ|h4FV8^F&qF~s4EoLm1;r#f%ZC_0#T8_ZuO*BoLM}<>5`~PI
z2~LoXX%34}(r7aQi3gK;jvN`GpaPSLH%yX~Jle~iz*QmglysC3!$5wOt??O+Bit0{
z1x>Jd)rAO*eMlD%>~c%|gjM?CT=rMNJH-4`UK!P}kSa2OCKs&KXUf-l%E&_ndRSk5
z6}p_O^9o}RstIYpREVr(QXH9gEmw771ui}|nLU(T36o!Jih`OwR1>IAxazee>X*c+
z9c!THsx<mHG^2WFQJan;1`Hs|Xh?We?OGxAImF%Skdg^YSnkAdSdH6)L<7XD%Sw2|
z#L3j}iDxHGpq7f-bnF;0lrm<AbW4JdWP<66VdNAt2bleK8#H!L%`Zzb*i^z(5Zed|
zKGx5uRF;yOk1}m~L#p2jC~J#*H04{BBTO<UR@E=$@&*+4{t3dcTP_L-z%AD6p|FZG
z$nN8kxr~j4zl5IWYj8A$yTt;j#y?pi=-wYESgoXq&_r25=MTC<2I2miH)p~}FbyYe
zWpB*O;7p)2n$__dnk+u6SbS?bWk5|AIMCf%P2wW=;DPkuB|VYqi)(@&{XHAozfClN
zCRP#fSOb@YP<6q-1Mn*7GTbZ~W;<7A*sfUV{q1>E6W1-_Rh~_aLjXo68WJX9#7t^|
zRY6>(of5i%vRLf|lk4~ELiX9kOhfg=y$_WtN&kr_JpUD4&-`V3K6F>G7!YS^dkkHx
zXnaIsU8!SBBg)TccxctI{;T%hFPQ!Q4gyf<0bMzomFg#1UrP8&{$L;RM>d!nFPglZ
zeqWYjVJwzP(ZE|GOL`oMc!D~wZMZ4b9f7%1rz#P)^|_+#fC468Z1Z|$9^aRB-E9>Q
zC@vj~dbuT)Ij52u8%w_zS8s!AqPcQhf`_GBgrY;6RVk(V+fN-V+iN;IWt!4QVpK3Y
zfc4mq&Pm*<q+elZh)`8z$#&hSr71*UxIc(uYN}%}eHNK5ZM4C!euQdyhf`(%RI?qC
z6-^&{z20HVsKa4WA!bOhi$m|5!ZCF=<ss^HrkiC&xl9-6lETB&gH=g@v*pAYYWq$4
zWkqgLqk2IyLY1ktXCwWQ?UBe|6;bo;SD38e6Dude{+HMD*BT>Y)Np_HeS!S+*nM$Q
z?|cR)X9AE^LU#^Evqw{M(B%A~w~1+M15?IqWstEOj)*1gEY+@?Jj#&iRo9npB6#K6
zb4#3aZzw!ThatPwe*-I$JOp=+jv$=+2aiM`*hB_4@OL~LBsP(hPgfkS*kNYTZ9}Fv
z#1Cp{`2+H14EL_^8E5AO?C`$1(eCtd&NA#gn0`OsC2_3gWv~aU8?5Y)IcC8a;BQd@
zctJI8yZ|rp&%$)cdJfGB83QUABF>zP;3F|HF6J|owxqH_DP%N-mx@gC-K#IfrC7^7
zN}`cu{fc|4t-h&HaHHRE&lP;f>VZz2|9NXNU?F?Faw5uT3<7^Z+IHyrr1Fmf9gUex
zWm^R=$;ZYcyKw5`uOO>u??iQKv&}iQ%1#BML)|eN@q`WDT9k(Sok2LvLqRkJ6Cnt~
zENt@OPHm|M3$VOBleS^Kx5;KRuDY5h>^(Bt@+w_2NXCMX86*iM&O)@a$iB&$3O;g}
z07l9lJ}wK@LAs&5^%g8vUY4g7h161Du0YGutFiTN)#YjaGO4Wuzt$q%K@PD0@X6WL
z_MJ-E5|pT{f1!4ynWB5oh<A`yWaUO?UV6l42Zky;XHjxs5M9>ZkS+7s?CbVrCoY#6
z=C&rE05{N|PNeo<@!OGbmGHin%wQ!a&P<CBw0z~}&GV`*&3A+taT6rMCU8shPM|0Y
zfnaPgEDcyOCa<72H`-)@WFj$~6y_=J%FR7WmoCIrThg*@Taq&4P#?O)HmFhoIU2)I
zeHoP0f~a0)N>TY{m%*o@LcNc!Z1ag}N$tl)LU;<QETxUCYzK+k{omBy%Jrg7*VS)F
zqI4q^yT87`M5#5#-Ou@NJXkdeYS}>F%spf>6)Qt46e=e2)T4_zjTcF$RXyE3sGc>|
z^+e*j$$G||of@SJrA|;8!hakx8^{Ow<qQ5;(Edr1a`kfx@ZDg<1A2iUuL?VZ0}uZh
z$Ta!h@7rKj6?_$1N9!e&8JF0PIBceK{{<RINs}(L1H9GKE&*j7_4FjHnjgf!+H<-I
ztox`m{uu4CQa<N4T0mJvYo!NWy!!NQ76`{qI(9Uv*TvPob^;fsAyKd7z%WPsi@@P)
z0<-g;1LdDg%$oRyVL6@Ejrf8X#fc$;fmjKwZ(9&6mI47%<)yK&iCG>-{xsLS5_-Fw
z=uag_N71H<1bnRqAz#ioVUBNE&5bJPElESOq`7Ianj2;IIM4iP?oGMuEb@R7lt=7c
zQ7S_LF&%vd_lG*adVzR;rIqNucT`FLeQbTo`+y`l#U1_c!aCLaky1zS^#r9lCrPe>
z55HMtM8Gw0lJ4DmZpQ8xB(!#bX5C~+bRAcx*KO&{pU7HWrY3d+6C1oCkjBrIqW|bb
z<SuOHyj`~)Nd-e03+$GLf_7PVGEo9*C7)1&mP<F++#IRInhNq~EIAv_?yhs|Lp*9S
z^|RjbeS@u%!~!2<=MjvKJJ{MXz7zzRpQ7(TTgo9+2!00Y33I+lGRYmQl5!US_|P?b
zZi}>BSs&$6&?V=ep?9YwizRw~s<G#t6+Cc8Z6cWN7KY}9u>%x(_0+sSL;RApyX%t|
z8=%FR7ZWsUVEnJ-h>{Z+hf>1Ux!)w3t)6cbn;XbcA0zZ3e|}1fSQptf#`KbSai0&w
z#J7voFge(4nK!seK8q!-&Lw!r8f{wd$|)pXUC+wJjK>i8|N6xvoKni%q1OT#nn@BR
zg%M=tLzmp+5N%VCSFcA(mfTEqr|R0(nr;<K<GubI*08bPHV?6CtlL=G*LJ|ulr6d;
zP^&oRG!DqP6nL_f5Sl*K6_r@Lv7O;oX%<a2_!J4>o}o(Lcu<q(*R_7kBM2^^w@jWg
zOYjwGT5Y&Rd5H6tgxS<EC~Ld1(RF5ev!6E%VRY}=TF)=g4Ym#|yDh7uG|}F}+MoXB
zKuJsN<t~7`21f3XSZnd;sA)ApKGb70Xwbr004!(*p73}Rhy_Q!FQ-1R`Mi*S(sGbL
zsd*6%80*vxRNg*qtKX+PxM7Db*|Yo|F&yJQ#@^`Rj|3O;vp++1UOx}R3!X9^xE0Yz
zHO(kSsT(rojdKSzR&b%T2Ly`olZ^za+oR!Cc~HJn;Z=Q5zF%RM-!JjPSaEvQ=6Bqk
zpmM*(Nv@eRJUx1bk8!<~e`XNGD_)YIH+I<LQq|9j(&@Qy%1U%O1>yIGrLW~8(}g&h
zu5<t}Zi)kt@ww{y$b3A^yavQ);Ifse2v_HLKN{U8{iIL-{5rO2B$7RVxx8h63{~AE
z`Z8|ou|R{*EOy=hAFFu(3DoUs^O7k4RcA90|8FQ)eJ7{?PPulg{+ocLNAaGmZ8KO<
zlFRHXk>2D~E}(&z(&qX@YAqXY4`cu5irhtFzUlWb7aYwyE#L_9&})w8OtUw<y$9;k
zUPS0+7_ArN?Z>yQ>Fq~gEd4X&R&bCsDcc><0X&E#`pCj*e4Rczh+Qo*$QCkxf#|_H
zl$hbRoKzY<?$8tw;uuX@A9a7Y&zd+emp0ZOTdaQgN?%)$8bUOYH>I8oFwhZXq8yO1
z-#a4=xj|ZAgaj|3tiA$56#8Ad5G8u~on3YQ5<E`2-*!~3NNeK!N&23B(Hu9Wk&tP9
zk=C)OU(w8CG0ZU9sCu;ut14y?gcU9gcH&WygOx5V@ShvC6|4z61W%Bjl6^QND}3wU
z0wW6I$%o)l`0v@++sRcilw`WS;xTHcC1AEb|7%z3NqNmLZy@9jy`fGKq<%TfZjhuC
zKM4t;0zbxbLGAdU4roH{A_46wLsD6K(}5~7x%sqdjwg_74PR=x+^{irgF8t`KE_<?
zv-M#A<zeC1tq)CY+ZGqw(bZ&7S$;Cci*!0bB*voxf02mvLwgH7Rs`v)8`|FGI!3C&
z@oPTtn3|Hg!^Y6XAmwROGT01${=k}q<vgbCeJ2mzo-Ym@{#qefK~LbA%XJj<v!s#>
zT*!ZoMZMF7&GF@B$Ino1TRCkyS!HmWh((U9qGVmZ9aJbXitSTv84CEBR?sKQbZgd@
zAic%?a!x04qGL|tT4A@NrNA94ns6~!|GEwlD|WQc_#{~gL8#LF7n`_$-9pTy^gkgg
zp2HbJ^7cT!Zo?1aH}=GJv4oB}7#az`j`+-n56}keO_%Zd2{`)RtBNuzj`k9CAseM4
z&*}bO3oR4+X~qg&u$n&xm~q((3|tADHhz*{EozU;F`HXGDk)h6nx+%QOP1E{>Gs<Y
z+v{nL5;~^SpvvG3r`X9Fo<1gaa)C7la%<CuX-+k7H>}!5t+DcW0~PQFE5>9_ypNQ&
zN}7YTjaP*(C+ka-C36g%iz{odtuKLTp5wz3Zp<pXt3R!yMvr)YtSh~}@29q^!QYjs
z58`6<*@{`rb6qip#8Z`T|6{4|KgV!TOFF6YA8hWU0RTYqzm6a{TAN!N|M!D<&Hd@P
z**4$%S?lNc4>y1N8hd@V7k6ZekRr3N8YiMymE^*K6Ba-<h**kC!qKJs-t6oI5c7i%
zZ=gGW&d0L~|3{pA8@i4k2J*P{ecWICMO=-H;^F0ZA8ehKmGK=dfu0ee!j&dPyP^!|
zb>KDZc5eAcpoKjT#6{Z+OpI_JkJG@%03Zx>ApDJ0z^!vexeGD|OOx9%!0CDug7sS9
zF}M=!GLgK^5w`z-fpdW(D_Vh>H?rJXMpD9)(Me_UuCdcA86#+*nm%&;9<+M56nFZy
z!2L>35Kvw_V!%%Hr|kWq`PButY=9=dB6UKOOQ|7xUVWXAM^yC|30-Ww-R*6h;kr;}
z*w}-k4>cK1l}!!}qe+AiyxVJUB0^p*@H!4eWA5;-yEWMxRdsR`(MYo4YhFsTQ60?e
ze?PaDHr^lC<F3=LHovt$xUvZ!SU-%-Hr)QuHfN!zI-nb2Y0$lQFFG0S>38dw{b4wJ
zO_n+B7{5vFOo*;$7F{!N{`=)^F@BHqvD1RLoYyzs-m(3mBgFI{B;P2GEB+W)%T%mh
zzV`FQk#GG3SAXDKiF`uywwIz;^w-W^j+Jl&zV^HVW^)>Tj)$^2d1X4UZZrF--x)&-
z>>L!=AhcZFxm}TSsuRls9pTr*G2hZrse!?^j;%RD$Fsd>AcH?eIrG2z@$$@*Fq{f(
z2{(l5zG8askXSWme?NZ7cE4|IBfRK20hwjs(%sbO*feV(7&-`j`|_ZAAwb*HFe8ta
z4*!V47y$Y6mvM@nI->o)h^pf4&DveSl!i`W#BSGnu6MSfKW{(o>>YfsF_d}Xm@)*u
zM`Stl9|G55>hy8f5k_$5MTvLy=<J2avlzBW803~xl%2510v`J%QZnScmsvuX!ewl@
zzb_1_koS-Q^ae76ZQwL0eSuKl^tmbm+3f~=BSM%9%()^=Bm{OtZ(aEe1FE5o2d0+d
z)nK>sws~AeO)@=Sd1Hq<y$)OSBcqWRW)sHQ7<(nld_1-X{Mmy(Q{h{Z%?12p6CoM#
zL6XAjP5J7P8WvR<8DUj0`J&se>)EZ5VxuTtFn;7<cOFN4a@m(_lOCc;3|AYa4GEoU
z&krJccryw6Pw}I4R`8Kk@HQBSW=yh121~~py_8O-g<NWR`InEv{3qa(t$hRe=iw7S
zW7LSRIpvjfP|<ZMms8P|5eGiRcCEjkQU;JM3v|ITA+TRP_<n0tp7(d^#on#4p~v~-
zcESlO=IKwMfdw5|M)63q;$q$Q2%#Ro)RNt5rIh+_dxN=~@Gb0o(Jq+Fg4D4M0589m
zfse}CjdIt;l%&_RyL=Brs5tAHfcp*V**lkG(lbXxDne!R9cB-7OZbZ4G?8Mwn}4c%
z^Ow@5?IB2fZpa@xHBOIjGPWFVFWm6FM8{kh_=X%5dv<n5RW_dw&jF*t=)afJo*9Qm
z)ggrx+FJuoLbBm_H4I@O;XC<HP$2*ZeK!9h;C7tJZ$$e$(S0w<C(=CQYalQsvzmKH
z?>alZW(~I`&Ytn&y-0z#DFAb8ROOZ?RpPLHUYbMjiK{2t&a(VBM_T-X1S27A`w~(C
zP-=bU(7GfKbFddmw=@NbpM~z@@U&f9q*Xo#BD8Id-l3iZKIDZ=VUN3!bg6B;toyw$
zLFJb78pjstG3b(omwCdgO|Z<m%Jg1!ULZjiUwKe|y>LLWNJ_*gaN-8Dcxa47dYNUf
zNsUR(ej5+c<MJwV0HW!%$H8Pz_Yt@h{=~PYq+*k2Vhh^90FX%lGe783=v$@B^86uE
zW0VzoZ#L(h)~ENW^q0Q$91I8l)cYrdyD8vzNaAzZj$g_|x%CKr#H=tvQyOZ<n3`4?
z%{20K8$1~}o44+$y6vd`*ErG5zNL)ZT0^t8l3@|eLzvG)cvU@_xeS2Mb5&zi667S=
zj{#N)Q<Zh70k;dFcW77du`s3t5^eVx^S<-T%x2L{63^F&YUdO2f9*4$GyIhasdL%F
zwp*Z~m8j56zVKf-gG!%t|6c9}6=FpVn6A5Z`VwQyz;YBp6f-#ze?>5{GTTIzVN6M#
z-iqKG6w(ZFVDDutS@3RX;GNZ`tzvE@aVbK(0+>s!T(X4#*|U_SRHddrQ+U3f4>(t@
z%r1H=sAOH&Ly&Rr*<75r_(8N`<a_nYmP;}&pNG&OaY5}sC~EEB=dpHlpCATix-7*A
zw|h15K*6R6p;w3bQ?VFTq-rz?nu-0H1VU+pkMR-A+dWJ>Jk!N`SXc2j<IuH>aChS4
z(~99;Kk9#tl3QrUs7-VGHj!r2a-_A+{+j7hrVCiYgaleJ7TcJTbQPsccRQEOc_z>f
zCnT=@WuO7O@1P9C91D*mB8I@Md@n8TL-9d3_Nytm|EnSlzGz>U$j(4|D^TU}8`}zY
z8t7wtaW-#^S#amZkB^pW9(2lAjAzCbRnz0vARjrgshU@3hN$iO*QJ$Ss<<=4N;RBu
z0sB~}UQv@XYRj#_$`rlA#q?CI&f<x9h6Cuuk2c2d*W5fw1bOg}P;xh8mP%rN0~m`&
z?o#Y3icB^(AxSa8z-NaKA(NKEF@q%?;brO6X6p8KO@2X++EgR<$z^{X+mGHl494|X
z*3l&|$2Y~u79o9OycUB`MWH2Ex{b&Idot1qx@TnHGt;W1H$lml;)`iKjbFv7i;jB1
zYok^T+c`WKdx;kNnK6cL4PzC8A5{tq$T$dNpaHEH`+c!e%pgU==Lsp)zSy)Elns8j
zy`&141|1iYP^*CfrOV)qG+!SH?6{F8PtXN=07$TYfG-gy{n0uTax{vmO6iuzenzEu
z+C=Ns_8^X;3?-(XqnyM~qiJ$rj6(P~CwFx9pSh(V(^@BV*NOoA;u=aDVj@KvlV<H2
z9y$^t8qHYIp2zvmef3C-RD!032uy>_3F{*uO;{U8{(|Q}CM_43CQ{??=KN(yrxShi
zJ?madEj4~ZHtRr7?D5`lYbS5E5aIFx$%f<R1p(o#!i}@lZzgSc$HiSzF7S38d;YK|
zn&=yuGNaB}UuX--%+W7`@klr0B*Fpe+aC=?AE=1c?mYC4&KO(>d8*e?X(T#hm*7_s
zWPF7r&wfLdQq;q;xGvURea7{Lf@n#?6WlFFlkDwev(T@E6j+!^0N(P2iXyN?W7q8W
zdSEND>e#`rU|~e8!#ODMm3rl14H5P|0PSt2`KeltU@#f^8l#RWA@?{g`4BR^3=e|_
zNxgcmKp+$^-_Ag2ZbkX~4G8n~?nrcicmn}YjVCfUW@N#6?vPg-(BIAwIq;u$5Ge%S
z?l5u`7L!?#%Bww2wAPyf>aofub)->%!t6y@s%}LQE~^#A0R>urR(XQgL;B9+M4wIP
z?$$ka{N+O-%8hE5?k@IWd81uCC;g|B+E4%FH(CZ@?&gW{qdu^wDK0KZ36Zl-vhPg=
z)(M&7tg(RO0Q8jo4N025SqE%DS@X*4#AT*W(j_s|8A;iJwNo|1H#Da-ArR#{@|4Hs
zk3x<}T69CKUQzFNl5QS27?Ws+dXs}fS%en2*cK!HNMagAVh14gmo#)4EpLtxJOYbf
z0cr_5<D(AURuCH@*CyKnDfEa4&>{#-E1kF1140iJ0?2m2EJqX_c`{7=u;x^k3SU<Z
z{-DFBay~xhE~-6|t&Z`>=Hbv+R25F9GG$n>ft8};#2eETTl@ez2AN5t(Da+;dkj>7
z(CU1wYbRypC()Cz5qC>@CQhaDTg_6WRjsTS(u~Ijxx@n{<@{LC+**Q4NX$3p8WUM*
zwg4+Ht(_K9e7qjB0JargSFzT&Hn!5P*(!1{yo|PQtBs~piXE+`A1V_9eScwaQ+%qt
zp0FT*cxl0-f^pC9ZqYPDgSJfNLJ75u4s>GuoY-8uV#A7en6C`0y1sY3rPyBwu$*VS
zq<^dT$`22@T91RN#C}&IO5Qlsx!%eG5L!P?Xu?-ba#0_y<d&`hcJJ^<TlVmv#@3Iz
zN4T!cchiPlttuKqoz+oc(zF@yroEsnggo~=cIYZM=+G?bB4t>~0%E$zl>pMM_jQ_L
z45Kt4pOoTKC6xj_2zU2UfkqYm&VUR0c+fXEhK`pv6c_Z&R?ET3lyGmGm5G-Ttb!|d
za($k82gpB7iO}RJRyIJSeko~(uNc|i7kCZ4Qlls=>E42x&`6WR9iEeJke%G(OXji2
z!JZ`3^P!tfN@{enzF<o0h!ncx&hfsonpjJYr_Mqo46mB7_cs$VwJsW@PLrf=wlv+0
zK-(C2otbfBHPS2>un=3`jBm(~O>|C-h)gVa6aQdOcPE=I0g+7d_UTbqPwT7psc_ty
zWVGo`;3TCGkCY(&Y02`Z0G!-nW38(t7-P-4h!I{8(KNt#*oH2GZx#Aj)QjIhV?mnZ
z(OxTK5>g>3$d7zOz*e$A!9^&!c%+|r{E!DCktXpq2v69Tj)7l8fa|uC8)_2uiOKYz
zO<j-wnqxamoAJ|UC^-)7a@?JIrovF39HW=`p8L>45gs4O!&t`Nu;ARPUvvdiAp@yf
z#2NRxIB|jK)`s~6#qRJu;5-!_$IdpU_yXWyT1=)qS^ZS*M5{KE*I$PmJ<Ta=%g;>&
zD2xHO2@XbbzC7B!g1DIKs#*@PBbURH>Ozrhp3k1@tT%)-GA+5bcs1OHA0y(0YlD-b
z2Q^PwKBzvLg~Y2wi79E$mphhH$@2N^ZmM{rIhuEFAz$o+yREc*4e+B`w4{e_D4Z8#
z)J!+tD&&YkUyN50DPe9zM&%Ht;}ggxvBX;p|0B+b9W2s0uD*mEM`y}SkIZioTrJC4
zW=deNEu`peM#PJ748kI?VnWsuS!n*m+;M!xuuo<<9c>XCE`49=WSF;P@Z4Zjn01yC
zdOvX!ul#L{Wvz(V&y8P2sN@1)VV2=njk*6vyAm4bkF&+*K@$n!AY&V*UdkRIJluC`
zkQK*xhC(4c?1n_PHJc7$QLRAk{G6tM)uKWkP*HV!7Dh7;rE#8FKfBOsbIcL+F>K`R
zn>X5@^N~8-=0dZ$otJ18R%pj|{RUU|qC^PEeTZHpJXy>?HHe4{0ztaU0#I)@({ZOI
zW5>(Di5?Mq6&4%ZksV22$53Pw_+?r~HA`?<Wy0C|#JGLVVKh^I*DdK|9kbe)F#aNg
zSsNDh89m@?51$Tzjc!UcPRE;yIEia8EO@K&W;V(J)(={ALlvNuh|Ud_%Hwu8d?duE
zf50Or0duQsjRhAMCclC+!wM=P^)hX?0&HAh5$=Qb<(ZYxf#w$w*|HZ}cTb}~z$o<4
zXXY=FQYa?`C*+;Qv~P|a2v?O2lbhne`(AqX&CaZRF2r7bI+0C1B%W-~fQD@1#y=}7
z=h5;0ab%6dPuF?^r!Z9&HlCPznJ%a1?nQdbjS-kQtO^hG=8+c*dIg$<cpu6rn<Wh)
z>{%)QaN(nFHp5YhPpj`UzHz*xj?M+vA`L~ciVw56_a++wYr4Q`v~jHOY1(1f6E!tW
zw^r<320*oX7|C8SDDJC`k3WX}PcaeA^bnRdq~z@AtEqbruh?;lV~Zgqk)Yr}gL6>U
zrj>y5<_BPj747obN{nU29Gj>V=?c?P4}d)}2dKyOYceW(nC91^TasyL<+K`<9+V;_
zmbp84dMkfn2Nnyb=s&^wha5wcD~-gfiPem=YX!OQwRK)BOz>1|#!;n(Ds7nF`uQU2
zlxfCTlqtTJB58d7uF`Jce`oSH*Evj7onuJ{H&rYs$<s6{)XQ7IF;1D7^99@Fp_Hkj
zk5ZjXGv(B^i!D^ah~1;77Z)MxN;{rzm%3@JRBL`rBd&EO=aMckQlpzegTA1Ouissu
zQckxT6RPSSz$b%<vumVLcyGlOZAwwe-ZT^6k3jxyon2y&;=7X+mSck`jov%`vQJ3?
zV#e;@*Wd8vLhqq~(|K9n8?s?)1u7VEE93a^omvcUhW84`2ge7plKm(qs@Xm$)7381
z>wI;c=`6|159W&Y8`AB|OmGJq+Y_;5bsV(qi!~UQbeBJBGhzv$BeTY-aB)5{w9=ib
z&+ut>(~WQ6&juz!Y`SQxbNWVm`GW;BfBFJ;mfFZmMJIiGK<qZRxIn@cP)ARY6=G9y
z1*!9qE4*$XU*nNDep3#N;cf9EpC<XVO3cQ+6(g~3QeC0KYIY>JMKyOgTX?@-DC{*V
zC8)gR>g_UVrbWTK(EI85MX5P=@}%Rg8OHS0-;S<r?W?4F__8-zdnI*$`D)87GhCGY
zh&QaiDRKQ5B*y>z=b{9K<V3TDv&||zSsTxNR+J@En6SB`1mHJYhcEA0gmmw+xuon>
z&7%Ig7<Gxqbm`#vG2lIf3yV`uSyHzWJaZO&a7TED6w;RtthUv-n9{qiiKmlaIe(+S
zP%-twexFkt#o8bAl=<g$q|)N3Y#Tu|xj6C~s^9rK6YCR~=EtxUKcbJ#0QZjL6I!l1
zF4Q@Qj#zqc>Ur&z+I!zMH_g~5x`7!1OZ?Yo4NqGqI(xjxfd4uAw~vjM=VO_;UGB)1
zDBl51Yj`Izv=>N7ko?);B$cGr7iySVlz%8*{Yx0>iRR~YSr_!E_nt?5HxBE&LStKC
zc?UkyBcSJ>17Le+ICI{O-rG|h^1dgGJ7st1otzjpLDWC(_8a;CB*UqK+$J($0RWJN
z|2M+@KkLZ)jy4ScJqT>Zw)__a-go+dX3Q8-M-%cU=+xd1Gern-Sr~~YpK))r@6Qoi
zJqpEB0)8-9|9GO|3j^WvDa2fgGm_SKu7SS*Ql|~-fIrWX@BAg{zs3<J6BX_4;o#u>
z0bO@RpKfK>s4g*!AM(|UEzp;^JqUuCqlcMKAV6pu0wH@{!vi1?vBY#^CtMRXKRN`F
z_m@h8%?EyYP=<S};Nm;;%qocf3@S(~NYWDt-2nyJ1|bl6n;+DS2!L?EH^Bn4InsYZ
znB$V+CQC%V-+~xkT>{lZ>uZ&bLgA(tld<B&P;X3b_7pu}2DI?uGegoUWex-6<)<}v
zb4{`t{~R0)4GraoVMIWJJ2-lw7v!88#@L#dhS&?up2-aygI2^V+;zAUOcfe+vU4rL
z*f@yx*}JC`_3iYn#Cv2F!gK?r%bJ4*cdg~jp0Q)$a#2~~t*Kfc<3!i4$$})HkO_(J
z9T49OX>@XoPNe<t`&s0FmknWV*OIc7`yk(|{XE06JDmziRcY;|gCyj!FB+d}p{+7*
zeFPSt;##rNBJz`2;#gzC*bf3@^FLMa!X?8>U74&HJuh^7^?3~-n&JJ~#$2!1dJNu<
zQIRob|C|{jSt|BFJu7A%ONiw8V9q@ffTl0(L`NkqM{9%H75(X>+BE@FF$Mu*IeUvY
zuygSxPKXD&EG+yM+rfjU_|vSSz`2vS5FWoU?vvC;@L4vqVjCHpwO&SFHX@^JSQD@b
zL57Sc3ez$!t86x6kmt(XNQ8lsS17$;nF8|nknG<31c+#}Av?J{Yl=3lJo&i#tbov@
zCVYL3GgW&dg4<Pc0io$6_5eZ!BU^~gzFP-I%sc3j?9)8bk|%@7z*`fgW?M|55L`yM
z5Jr4LfQ(d}D|-;P1BP%+{0XqrQpgab9p7HP#3R-QDN4RWIH(e(`d$%_!PI1(JQD>8
zN0?eXuJ67EeofIo*YVq!y}LoKwzb<;kS~@<;Bi?`GqntDPJw4()*Jh+EEI41sAY5f
z3UMnhFo65xP9KdR`?1)VBl3OX1}X&^6?iPdgBV~Cx6HOPt9}t^@}t2HHMjZ}4*ACq
z#CE0y-?bHF52FHoN@+3qo^Etz>_-L2n)@Ry@N4gvG_6ED=>K8toq|ORf+f*y+qP}n
zwr%rl+qP}nwr%rl+xC8E?#z1;GcWF)yFNPBSASJkcV%T|#>#W^C+iF~Q#7s9KW|MM
zb58QgL9h=v^L3R=mJq=~e(^1ODsX%Aw~qwF4Q+7*Tv#TZKI}gk^)7<|#jm@boQ5Ee
zXZPRoL06lIkA$lJ-cPQEcouQAB|uw^)^J!66*>;^hDa4@HN>`vM%r<X&z%^VM%)_5
zbwLGL>(-skKQIA@4!hY_rJ6;4uF`2ORAS15O)(kwfH`Ay2TKlan-m={C$GwkTbZq0
z9<C>Ew<uvGVd-Q3te4nDSq$uF7J}+8qT-BfP4La8B=yr!OG4Jsskc0}X16LhB}UiQ
zUM!}>w5TL8l$Ex*l(@4{#G%|sSN?nfubBK9=++tw^Kk`0q?Ut8i53&UJSA0CFW4^c
z6}wG4uA;t9EW6Hi(FF}kqpq>)Yz=-8jPG*EMX3~l)vfOKiBM{&<lIpTlG>5m4yS2A
zw+T|?S}km*SA#j5V7@>DrYwJYX;xsK85GLXeAlTViZ(~~1jSzB^>11X#ARkB>44%u
z&*qi=dePLC7LYq)#nd@aBUdJDX(qOr+~vZ7XuEz%C3BQD`F<cd7|hh1+IN1Cx3-b5
z3{#g)UWO7}jg?FQLsh*b5W7KRBR-a@q)=%}m!+8FgN%<X357(WTcXoEYgu(hQXqE~
z-{~iF|6b(Q*g;cE977TUz5oR8f~^D;+OE23Lr-;UVMuDOvF)N<X<R{HUR&ffeIoK*
z+nB;}g;mKzcEvtofn!ZJihAOL;Q=#uV1u>5?-+erg7VS+ncU}>%Vds?J+@*&w5lKE
zdn`_IhZ>v`Nz{7q!lAwq=b!_NYAI+DE-6(FOxDawL1=MJLgzPS2CJxKemG<r9io%M
z6wnf_$aro+D#o~GH^=h{hSccCl10m_Cgqokx*G~`7#|&nn#Z5Nvf{dyLONNvlHkig
zmOzrp$(rvWB`xWNa^l0)<IqnV0(JlE{G+-@FtlMd-MH~65$Pat=M?1RXrZBWi}j8U
z@XD{ZoLNg>+c+wv7pAX0q5W4TBkwR3uEbM$<de!v{+?w=fKS)H*;jw3kzMLNT6a+H
z`(4vNz@bo@u9)q9*@SV3WR&omZti2d^&?fFBQ;mmmfGZnz7Z8jw#DVzBZ#I~Q1J80
zAN7ovtq*mYRS!KSY52rf#Mf+0oAC8(rnXWnrxu-#5Z>|Nw!nc_Drj{?86B9f+!jW3
zqQ_cA+oxzy=H-2rVcxq{@@ccylHDTO=!~H}K;N&o^pd1JU4NTl<g*RlBm&OsjK|((
zvL*WR6OcIsyOHC_>LZt4KjEM5rjC}?mU6}TWMWOJ%9iXf6cp5p!J`8TbY$$rmG{m1
z)V>X=TuYXmml9|T(J?Y};Ez9Vwp98<ZgPyeXU$dFRht<BkEAPX@#J8*6%|DR7qc{E
zf&_IDQoaCBH`=kWJd^rk2&;BYX)L-C`^1Kkg8i&JdCwQ`@ItQ+T_|-8WwTtA=N5Q?
z>dX8%B`^>u5a+ryS|4@x>T348nD~xzT8dc|m-4`5s^Z`7v*{YnlvwKdg%rtAF9B7h
z=~$m@qKXa>6~dw9ZT7ABogYhSs$IoJ&>6Q(zM=t%Om!R9)fU|wM~H+<(O*TN9b!Ui
z_l8BI#g?4Pi1w>V$|EF2t(J#XT81VOD|4|62Q_V)nH`o8Uo6|CbfdV|b|nL==kQe~
zESG8S9$OnKq1HMZ(`sJ31PseB72}S8rcNZOIx|VX8QdwhT4Mj!wWh!qKaD)3?=+3P
zLaFFX<F(O^-LRH2ZHqdfUh%tyy&oHZ#rUrbf?~op$DY<1Gvo-YvTA<8g?Z0&ZTw71
z9e2{2j_3s`I=khqM>`)&i;{$ZvbO8ahZR;k=P<?Y4YKrjwqAmvR(MjX+%$fE<F(4f
zO*fBaF$7U`?=tfydj385Pd;GRXb1#yX6tA^U-9K0IL6M1rduhCZc)Nel!#!=0X4~s
z2JC>Zq-dMJoIhv%xps`Wo2!7-Ha^~mrG$Mp<T>6_MyRiYu3qYB<Z{x9RG~(a=}Va#
zQ@7wv6YCqbybtPQr%*I2hUsbmOM1wNF(nzKT_fv8ctkqxMnean<)fN+wQQD*h^f%T
zvNg*bImuhrDdZ_2D?|k$1|CY*r0L0utdgx}o&9d(Wa|cFMR3r3hptsaHDL6@GS-}J
zWgPCr;8cNhQg<CrYjdS|>XNvWuWftpEql3eph1tL3zYCM{&U^fU0DR3q9i+Z#@DK^
zX*{<JI4>rEi+Wl^(&p{m0=z&$d!IOG&1Z8Fj1}NElC~7CuKjNm|1gr^O5%5ra9nN_
zh-2Se-h?oJPq#rz6mG9Q;#_G5N4%7#9u2MA5@u31+tSUTHJNO7^EF4Tce}(LytBf;
zeDzy6g=R-TIV@A_jbTOds~WlFMc4t3IsY>1MgU}#OA<vs4b7`lJV%KX^}Rfkoigz~
z7KmovYB<0C#_i=g-Kgj{gW6ny6^y7JbSf5WF_RfrN&>QJ?`>Kg)dTCU3J1?&B8k(o
zO>yE@w586JA!t^|trawBBQ{cQU(<Hbwr)|_osG{pKjAl2Kr}D|J30X#gQvqlgC&er
zRMOYuBCOYLyUnw?zB3sD0465HYy&(ASWY97L9JdY5RV<&lgAHmO=Zp$&~8H?eKqjU
zDqo(SiR$qm8(NQ}gJD;%vXst@3#$|QDDe<*NkoMQP<DA$RS}FQ@WQhCz>K|m%7Fpi
z?!!#XeAVgvhdN6)G~q|5BQgKe-9mqBq+tIvTh*r!=BB*F$XTindaA!eN-bgNi&a${
zM^P<0uw|oF2qSZ8y087dlq08!E?k{;C<0B|QnN|!#Lu$9k3B&CWoHc8<fno{<ulyb
z)f(#b^(tDkR0$+rxnR{-6Wmo_LtCnkIj9lFL&vgU^~1k%1#C>LK_=xp=KS1ac2~IU
z3DP7H)ZS?%PnnhT4aTC1E$qyq@75~I`Pe(D(-2zNVKEx?MK1RQCM};9QZ}<Kmz+1v
zjnInfED*q00uq55gT!`dF>k&Hv$FMdHj_#(e!y>*gFu^DkGGHCg^F2WR<5D29;{=N
zO*$Q#ra3v}VlU0rV<I;Ndce2~WmQ@jYW#GImoO(`gLf5nqRB(0qKZN$Yt(P_ol^k^
zJ{X9S2HodK*%846X{p1I^wZW}^?~_0aMUHoX>w+#K|A11<3WUK8lNM62ny?#*P(4L
z`#Q!LzKG#7ne4j{jodLB_Nwom%{qp><#gfmtjN;7Zf>v8<qvT((p1$Xb6}5+)sqU{
zV03a$cp?#N`+d9LdT3uj%$U^PB*;MDV8{DgFlh6!zUD2ye9o?+a=R`I*3M7vPRjl`
z)C6OFDgtsS@%q#V_Lw4Y1aOWCV0W*nyMV*o_q4Y~!2kNw)1KK~&D53R!3S;605o;(
z8E9Y~*baQ_MhKz7BXC0ou7)xiBMdKE^?+^r{@PhF$!c@bma~Qe|4;(CuOJvKw&INg
z8tVWPX=IlMH%-)^|APU7L66*$@Xv`XgY~~d#IiBAp|em`fdl~lPX?Q3u>aq(kL+DR
z`*5?tX{~ECXO@B`r#_W7uDDpT&%pvIQA3#o9^kv2{I>`Cj*y4)q%^I9EJLLK259}2
zE<foWA|^pSd5%Qa9)rv4@nnrZuZQy+TFZ_hGlfH+rt~Zo<#&`(I4RN=N+@oDWNJQ}
zSb=2>B?&wm2bfUKI&+kxj6+a0*B~%mgsiG;9uVJq1)!IUN9@d6vB35z`XR6&(nv1M
zRw+`=G8EA_(s4o|v#5PNRTJx&Q7n#f3*rDaBUA$CxV+sM5kMS3kIzZzE<_m0XsQ3v
z9?h3qEGiP9g`_09*bP-0x}TiF2*-X%L-KD<HV+>k9=ZdVRMTN#wY*hv(h0{HcIynl
zmkEn!PVL@2_0vM0&fDXBmtL^4J(e#{j~GMt$$Iua2M#IBAyXB_FZZB4OcGAdgI+<}
zf^|0eIn<uPl%pCc#&^xe)Wp)9{f}q&`=^Dol5_%3TD3+}`F1hmrjb+;YxW(d`2sSR
zKPfz7c4MTbD1%R!hI5=#Gtmgz41G^q-;cK%{((s}9rOc60tjOFAP8_*MY`b}>4{fO
z1%Yq4{~}b9WG)SZWYJaW=B^>qV(x?!HYR^uQKFjWu)_f==MX3KgX#j(9~o^)+C`UG
z$#?*nPARvng|VIS3DIF9P}yh=M6-MmlUV#nj)Tr2H_+)VvFZ^wp!JCW)KZUOC?b4)
zTo=Z8>Axeq#<PM)fadu+P{7H8)SIH6qsbK-4;sIrD=o!>)L5?qI)RSG1z5;x&hR)8
z6#S}=D~fH|yfW=Kcce5zY-TmVwRew+BAhvg9JI=^N~;sRk$<#z0*HZRl(jo6d^%S#
zN1`<#EdgqSWLH6q*9N8~sWae!6l927=is*EWNd@?n!u;!R{NORN?<zYuc8-5YsT9U
zOX5H!t5K?xe0nE^hO!+ez{*IA(h!(QBAks+ixP~iBgs7xY4T|7<c2mr{oZzwVh*v4
zAgObrHmFYT+d{Vmy`=px=~5r}PJpq<2Zgi&R)mWfQ@UGViZ~cqMl0o$2u;U8t0?Vc
zN+>$0<o=o0F%|D;%yTg1q(m2d5YLjY@KauC`u038wC^Ep&j`SvGl}X%qTu4=KLYH|
z@}XER=3hbh3QxSBVTa!h_QBYB8@vs7L7At48;NuOJ+Xxv_c|*evSzhg1)7fZj=^In
zAXxH@h&@7=&>5U~8nW?Se{fH%fd=B-NzHX@J%{)V+)}I%VGijw9_t_9A!ykvH|!KU
z)F5dRWQPP5z+;Of@14(#8cM{DQZ$fngNj0J7GMRC@Cv{*0_74tk35awkspP*ec)C3
z*PNvy9z+10ue5n4oXNll{hD5Xy9xGDY9Uq6CY0puNopaqs#2rb55MK7{Z6fz2xb(L
z)$(RK5MLVCY+nhu(XOA2A?36;qzO@$-V7?_5qy2?I3_AvrV@-f_3MSTuluUA(Aj+q
z-<Yr5i4vd}bw*POCiXV67?F;PCjZS3flr4f+YH2kv_(HKsiPONe+P|eWAsu&uNsqP
zv`Z^N>eS<cHIPHUnm%0MXeoQ;oy}5n>yBLxY&-DzSX|(PRdF)8v(uWjVRWV34!DZ=
z(sdCMd!c#vYC~_dP?v-PJH17b;jYj4?)w55GxMajCS@e?oqE}jVLLK7|8}ipZfVLq
z;U2_gWJn6lw2Q2#yGqp#M&I^*dY4;lgpREVDRM^+fO0F9T>9OMcjUsHt<if%jK=%2
z2)wO)&g=>TiJA$2P9pk6PN!E{&IUmZ_4eUS$f*`!X}2vl7Pei~qUsO8keqW7V15Sc
z9|u@gQk>24!X3}F4V>~=2AoM&S}!)cwoSB*A*Avn31h@kl7HrehE{a|XblHl{L;np
zCVl_1V+AP^(rxdkED(0j+Z}hbhDR@y1(QpJcuXA{&h_7`UIX*gY#~X;txe)y`F{E2
zuyI@O9X8o;oH}fdv(FzA&3<sMwj&-zCDh>wT3_!Z*;hePbpJv1BvI7-b4#FD{;eQ8
zL>93t^z}<2mL)aMieYl^R%st~9@{$-Re+W-vbqc2Wt-Zy8#+}o`BATJBELZY9#HT?
zYnfiFImpEgy0TK)a@Ujk4&21%mIlf}+}jm$d9%~qj&ZTd2KY75cYm5>c}M?igsJmc
z_%)WueIOXx6t%MBwT(K+B~5#s#>ZdA;w(b&RTLQXJ1haRsDpZo;Ik{#DvzZbI9ycN
zzLF6T5#@0c5ZL}3M7non*fE^X_yN@XOxVcq5r-nNVbiIPh9iXthF>o^wCmqQvRZFn
z^JU-3L-LJdipoZDN&7}9(}H%`S9EP;y$HE@vuGqC_zHYUcUdwBPtRt$VN=vDKJ%-d
z=+qR=PEkS@E;?L4^zEHC?!A;X^dUNpkYbBnAj~}SUGlBqikUD=Qyw;I=15@Ahx**s
zV!=cYodRZ$?%Abn+Cci-^y-M_-kV?JyW1{cF0Ds6m8YCF)~Ij4iK7loukUohCj-Q|
zGH783V^*;UvcR-GyU!mWf{f4#Lg{(z){OA2R3TYQz?c1p^~3_mH&VS2QxSkR;p23q
z2>bP_%VFm=0yw$<@pMWJdaut%iXh-apJh*({Ooio0?O+IjCV=kFP9)J>(|7x(B*NJ
zG$^M--VdZD#LJ32c`A>57{8)elvy04ACc1T*i+geY~XY#yMJQk^u>=o6_&7KYQWta
zH_|%U0TC*_I+QawLcRs*8k?R*?fi90oBOx)_n^`ECu9XtXU1K3)$CTuAqczl?>_@^
zMbd<}W1K&MCk9(Sut+3eLzx+=y8kA1i`__`yU<nmjV$%r?sWZpr|{d-)54s-v_S`|
z`X~@KR4@Hns#W@&QEqfQ1CJPVSu7gW2L?y>;hZg<&M%Hn5c-G<Q7HzZbxMO9OO&W?
zw}x3tWLl2b$~`WP?W*X7US3W5()!TebUm9a?3IdHo(5k_lREIBhNtA&cbU?6XyBTu
z_k>aDG(OfoXfuHat%&IM<Yp@Jc>u1M6?A#K09I560ZnRbS@tHJxgJ?wIOIw@Cq(Z6
zm&w~ZvO@-p?jfhG0rkn1qomUW{-v>j5WglEx}eRbT&(jz^zF@x%yS`VD}|Q$o<@Xb
zFakI$BoVd7CIbddxC=6C|6O0tIc~<$QyUgf{OSJORu&r@s%~j$-5St-LX7}h9+VDS
z83vJPVBhl_u;j}&FhjQlM<2j<Ht`$R;{Gy^%`WzvA(-M~hyZv+Gf^&~XQ?cTnYdth
z@A8@>or6f{Q+{V~q{;dbQk}?+3P*8*E`;ZYcL^z|II&XiWBJRY=bXv466@*R;Ac?#
zbTZz{8%^ui1`aJe>%OqyWIUGl0XMq8#|Xxm=sshoHZX^_oYDJoyla!aVoM{H49F)H
zg~wP=e6&k5MbwCH>Ab4Vh7{b+^D89L8%qJcpS9}~zO&S*zDTClz2~kAEQM5Qy5C#j
zR@HWt5XTz}_3ZC3f|M_y!=I~oX*VmNy&C<kjc3kTQj3x@w=d;`u1|qRnwrZeiwbcj
zx@~SVK7U+y_~D0`x4OlxqSVzg*x0Lcnuap4ia>tRDrMFeS<{_so(+>p%CyYDT7j6w
zCGbmvrTd9&<(lanw|KEoEGsAUeJ>m2JyXejvcvBdcD8zb3c>ps3g0O;*e0e;;`BjQ
z8tBm)+C&c{r`4e(u^#dr3I3h{;HXHbCwcfwC^Aa0hy;*8%3ORuP`~B$YNDmphQ4~C
zdti%m^BzdoHCoW-Z8yf0)>*9;5HgN<1`l-_b$_1{_}+<w7|yX>S;MUBQsu@5L&D$1
zqU^r(FThcnE7D<%pmzk2fVu*nqpQntY}xw4*T0($g4%R6xCCDGgyvR8a)<CP$yOQI
zTb6c%uY*@_vvd~F-j;kot?OY{T233jCgC5m^Z(t%|6uw3`agV!oyIE>A>aT2W_bTw
zuYF6S|GLSu^6#~OAokGZH*!@v2@Yc1t=`eKZm!<o@77`90GMTR8zm(HOtBi27~E4E
zb=#)@%2SMKNm4&oEA_SqD(fcS*HtF&waG<9yBOCR*U+|Gd?eiV8J7gV)6|zR5}J6P
z8v6L2zCF5Nzbq+fpJrFcaUP$0n}kV3Vj_l&^;fwKI5>WF-N_<dA?->iZIncH{LMRp
z<!;{#@U3@)@W{HEIN)1ikb<-;m?+2jkksV(J$c?9Zl`n@`k(%T_TMJqutaeB9fpIz
zXo7=v!idxg*nT#Dd;A2HF98WLn}2#F<c|g3sUlq%<sEv7qq~37JQ4TChUF0LlS;Ra
zzMh`;_Y05%U?dOR3f+As6XZfTa%8dI0DL{2pK{Q-er8LK@_@dU<p!IYn>v_id_D_4
z55M(itXX1bptZ5m(NpzI^aS9hspaA=pl|mBj=6o!AAim)oSnGwc45e&tJw3hHP`gX
zzDF#$GT1-ZovQFdC}Ecr+aohY$G0{hdZpf&-V%^QAls1!<@kTB*Y)GkfNCr^TNcM?
zZ5{l9h%5o!W{Q4s5Z{Jbc1HH#1poXwc1Q;`(8J-y#m%^@4#?R|MONl6iTNCNA|*t=
z1Jw?oKWc2Z3wbJ7I0D#>WI;IFA<gi{jLQmEMrp^=7l0sX5t{o(p!Kts5d*gNIwkRI
z(=m{aADXj_k~!lAiIG;`+7N&VP@WJqAuXsNU2}M3JBNBI3)D-e;)^ZS@g9f*l~ZB~
zFIBfo{xNE=KY^}4Bww_$C9Z%lBNT*kQ%AXn%g@BD3WQaG1_vAvqb5>tI#=*+jI{uA
z{H-rw<R#x0gGpg{k$>dXDwPEY*985Qt#&y5j4@NbnG9%|VH`4nSudb=btdic|0h)+
zZUXuz0Px}Sws^syI$Nj4+Y5HH<0$fws;PFYM_$d3OOxf50a}}~JFx)1Lb37PfZX4t
zE52-&l<gBYgzqr6nn2d0;z<54fTZ@+4wW$q>kipNn*5MUr{xJ>;Hqf6;#r9pxTTY^
z`*^N1+PUtYitQT^bq7C0KMlbiI!8hpup)j_cdyRVa$po=qEs?qUOX9Q*BaUn?h{(i
zf=ROlvwe<c5+yUR2^s0ARPO{ad4T7EjRf!^iqRABuvHPpsO)wQIXJdVN!Y!IBRE|Z
zB+vaSq08KgGvEOf==28BlscY9Q9i^M%>ew(bh56!Y*KUJgFh{v$S1e`@gnN`tNWAU
z-%+O;k~<(P&Wex`j#9}%N;R9!HUAe|Y2h_(OwytPWPZCPsTSDd4`^2LA+HNz!|GD{
zRrnJ4k0!TXqo|&n4^yV!KVIB9w4uP(_s^~xx6M|tKyuL)W?j;3u$Toj-gJMu-9j)#
zgH>fT-(^R3H+$1*yW`Q#p5CnKo4-442syo?HWyW)p<z>(T?oUbt~wqF8cs8^k3GtB
zHaZiRG2zF?MzVc%QWjG{hJ#@QhPM^E;=$P+*<7p1M8Dn?+s$YMerEE(wkOg*0&Ew6
zAdB{upFl6o+>73Tm7$3$uT;1;o-G!!rRk9|5fh17ESKn$0)$$t^>3^-MI3fP+YFf0
z%;(Xu0F7TY?r{xsIm>ZLlb@qk>PP|?Q%p|$OTXy>Kv(ACQl-y;n@7V?rPre{#cYD-
z<|&+1qFJ$J$Peo#dyzmliWVjhgdn$Tfy%Kk5jv+K-K(2R+M(PB#OWsdV)P0}&Zt#W
zKfG1*X!BBf8z5u$?m&Ap#fD>4lp#(zxT|ZAcgnR^)M#w$X$X;q4O?UiN>!QIsgjPw
ze8uoqg-ra2Zls`tV&pd}+(yy&o+gxV5Gn1j1xJUK9Y}I|fWfUf);D|cc}dp$2aw!*
zuQ{gCB%ralWz_hZOB}=SX=EpwlG!e~KG$yTV=+6o21d-^gG6MQ@;Ewx!dlv(Ztq0C
zxY~8l%avOUnqb{U&azN)`KFMWK`D0MkR+vIWF?VGT0AO9td6$2oSDm+DS-fB=Nj}0
zRtY&v>+|4T`^`%7(P9vgg0@8uld6()y67k7)F@pa%m(|T1p3;(aj!+>pj1J`h4()S
zxq`g0=sFwgGZVwBJ6v@Cl~ju4q{rSu3JOk2f=o<x>4{Q_n+C={NJFEbG*t>7D8{f8
zS;wjBl1ScfkD(ER8*Ovc$KhOpdZhBp5D%`DMt|+<a><fmU)TK5dW2cUet$7)vm7gB
z@EBr}0y;`4lc3b!+#Fe0MXG%L59UjVlf@L1ggMUyXF0a!7%x+zfT)etl1OY9JsU)B
zsYEWQ2y8wFKQb`*O5PP#cWkjCDh*Z_)kOBkObKHN<|jcYsb6K5s?&~&w$Z0eLN@ih
z{rNbj0HcFe>|k#<aW=0Ia+%J2j1^I;%(<yf4;E_|?Gm`U5Szlihm~Bj$bBpvD8YV3
zk&eHi+Q49D9c&3sSEA7}ym`ncQn_-kk$LQmWaZfwgw@^(_NF#iXW1R<X~{-$L*#tj
zm*DIA)M08aL+DB8I3+kS=sdsYh6J-<%$X&!*n95XH`{8xitf`k6!1x1=-s1)KfLGd
zk@c|NCAedOuH1dU3qFfhu>CS;A)fTO!5JtoH5#E|eSxmtFDYIYW#i$GP?l4xfGwRa
z`;U#&ws%8eMj-`U6$nH5|7x)VcZ{n)=w>{!#WGK`Z3+I+{uyov0i(mT%&xoxpAzq;
znWU&t?8je)9}>?CeFQzUY<}}L-Y;GNTG-NhoMP0h__SpDHYJ*Grzx7dn6|_X03O7v
z<d&eVe8r-sc4)GOJyHX3)IEHj=(6ECd=RZjKbayyBHD(zL-&J;<;b}<)YE%w_YMTF
zI$h*<4>h1Jm85vxb3Af@hs!5#SX0?##1>+*H@i8pxfAlVY!c%kvB5%mH1U{hs+_3U
z;Fy=}V{M<({2r;>YrhkiRZp;*$UTn3LJqM0w8n&NcP#g6JNXUBdiR|e+Q_`w$z}@!
zZ!GMeL<STdx9=KNbRN5@4_?(+0U-uu%O$P9ZZlmc1`}eVqf-H2Xify%+TPUJDaoKx
zPGeHSMIoyMs>x1=|1);E5X@-IBH>EtvZVdQZ#;N>Hiyw`My!5=ER<=S+)W@}i$TW$
zEZETxv*~IzFd!fGg*4*kigTTxn?IW7=qxUL0IHn_wztIAi=PnhY}~ZQ@`oAqe0?!u
z!kGntKd1?Q)>nOSGY9Ca;sskN7{Sm>9KQo5QYM{Mfrv8ko};e+P@4eldvz~Cc|Pre
zits!2PmfvJh5QC3rp(UoM5f-OYuIQ-n^9Qa581<B_zsU!?5x~BKLPJ=ct?M=Hz_zi
zI_jd7K}AfOf3iD2i1MZ-z7qSR>uRdm{Vt7SweUR4&;KZXXP(Qqw4rLhkIu{Zv(!_6
zrR6=%-1f$Jw_LhHN3`_UPtDhvio`_LbXs~2ZA7$Z{8xffCb*+?*@P=S3WU4i6alPF
zvq;@iGnijof&8S4VwEg~<H5&w?+o!4!_`!=l=Lwj*gk{HPm*_Xp=LM7{a14#)an%l
z^b9(54Wqy5@yDxRn=}4Q8r=kKspB-%lMSf@%<Gv~K8BimqW?MQ>BW!u7`5sIC+R{T
zCjPB<%G4#GT>x3X?OWSzHL6vNnHKBlAnY+(abtULPEYW!9%usn)Up9dH>k$_6G%Je
z${k79uR2d8%3_GeEBy=xoLfTG#o=gKMbfzI&UOXctJT)DujAJ;Qf>M^!5u+9^4$J#
zk*Io4iz6)I(u9$c$wH|FxQG(U2ij*f3fsTA@dyOSDB6Ty^}tBvZ4ffwp~Kigw4=jd
z_IGDBk}}v8j#7WPv)l^C><LdEbe@#ZOD9Cj8o?aEuX>i?<yQt*aP~SNr{Cu75v9<a
zC8yhx*np{T5h^_u-X1KvcLa$|S)42=A&lb|96(F<5G;<y)KP#lA9Frm>kn~4x~z>V
z8}Rez2x^bNq9D}%+n!zjc=Z*ye+S!x!W!IgBX0Tr#CXUm!tiJ)L9OR`Bx%i$4Gh1r
zzAfZSyGZpKKv5c+&S3GRotSJD5Q1kT#Plc>#IpaoxOnt;PsOhXkviG0MlT6a{c{Dr
zgxNVi@M@zUS|-Hb=~_4U9IpBi^zz20$(}v=#j#_UUqJ1S+6Ko%Y-~^F<D)^I{PavJ
z3d~P7<A|X-<qX0Od_Q$&Zfg`z5@YU+0x|9T6Ebmg_<KPY`}R22nqNvM<!t%$F^n6x
z5`uyJMIcb5^L<C6dQruRcfTN{3el-5^{Ge&#x-#~8i{%o>IN)ou`3!ajS(s^X>Wo0
zz0p#Q2`aBtn%A(X(iHUeVl>)z(l`vw7*W9rSd`EdQ0SrQ+&-ah3Q=Lhaz3?meZFHi
zfZUw=;Ayxtiw(uZD~oMtT?=d8t-Py1(ilnTJ*qig7Jlh~6b$R6-I@3VknSYvxCNBK
zLzxWzdLiyTNs*pjKq^vuwYL7h)vuU>ZC{ogQ*Dwcu_-glV;gpnP&a2qrzcVjI#|pQ
zNpBapp`ioij4Tz1XfqRb5x;ea>NGr>_epwWosp_MlPI+ds-hNdeH4Lv?Br$8)4L4-
zF)JHgEj9J-J#i4sn-L9$YzGw`FbGZ&&)m)4FoWLECKfpO7dkC0E83PgJN#>DmEq`I
z&IR*6Rt5%d`f0^<Dcbi}qxAwG1cRkn&fx{SUw7KhGk)p%8G$7&H85$F^OfD`b>WnN
zZ`l}CkPV&O2BpP$q59%Mt^a&zI@rg!*;@4;7ukMNyeoG@>wqj7Gv7)494L%gU#g7C
z9&k}pQ17AJ)tYN_Gk?JUcPb&_y>4jFzuEp>sQ-@0tfl>bU1Qd$*~T5PA^ha(GnOny
zh-exlc=~MINO7`NTL4%4*KEqGNpugd?TNHH;dI`7zj$WT91$p}Rq~4rGtV7*n2{NG
z#)87ZG<s97Qz_2hKKpiFyw?65A}U~*q0E~Dc1PI|$D+K0N-+^~?Uz<gClnZrmZIWY
zXfKM0r#3)5P8?OZONUZm&1_~7#Aeq{F`l{s_)0;ohimI+1`R15FG3>Q&nQ7TI}Ja9
z!U&_#KBa{A5HTE5F&d}Nj3j~LG?7NNI#uX8)h=G7KeHSUT<Fi6{$AtFKox2lk)aw$
z4Kd0Xg@!;qKq~q3F5T9(VZ)WNN?^J<F<hw~*qM?oSGZc?daJei8ZB;#sQlLQ=QcD^
zze?`Un!(4H@a?G?G-}~S{E|x(q1Kc=3~i6#BE>Zc?Ua$ufB_G=77^^)b)a<XL8pKs
z5|jgudB(X?h|wiho!}_yvDI)Mvja<vtxtmhy**zC+0wwEe*C);TPBZ%MeYQ)@iPD3
zYQMV5vxLf@W<))%dUFfxGVOF8&;VODN61R3fr2(SC#>(uokI$UvaD7g|DRf+p)}lG
zjH{}yQx+Y`w=$zjj?jQt0kYShyOZGGF6}o@5DXdeC|-j!G2G)Wb!VK)yAy>=mySoH
zTrTs@ZCjb0_&w#kJuhSQuZ`&G@pb6HbAOl~#XFWq>YUH)9*tGSnFBs%5$V(x{^(M!
z`tE|p=S4MdF#=_0*?6FRGxO%VF_EK6m_{+9F8^iI1pP@q<L|e?p}CwG7<+y%7GIdJ
z27b+WaS@w(&=R5Lg?qYuY1MHu@U2FfvyXtC5WbSsY6bKN4^SiVf6}2Uk74LM?|bW5
z`!|^f4&PxnN_J}l90tULJY_<G{kuV^$11^;L+9GQR|pr^_ZC-0VMf_f%w=#?&;OAA
zDCdE7OgF&$lOYa-*le;NtaHe3f1c1oXR6&qL>S1+PQ=cr>Gzfdw~G45glwhn>jtvT
zUs<mXEv~CnFAt&<jR&ey-Pen~*^4pF6@|_BLF_NN(xI2Uk6t3ZJBFN%z3M{-UDY9c
z!i3F}WCyg%bN25$?1@zT&ktC8|EjJFE)5HGFZhD?9e|A;BIo+CjH+U`6YJA+P5w^u
z_rD2W3CZkRKdTf&%i!r82XdBuYf{hH+KLt3&MD_Sq?b}KviG-RggEv|*j0K@o{<f7
zwn@98T4|O&`J3F5H+-yisDmCyqCSo)?@9qTOK<t&)AZ&Mj5y98ge|KY#v5e=2J~0g
z$W*%!c4*)9|9fJ{K|Z~81_A)!1_b~h_)paaoR~Qo+>H$#{#RPqO)AmQlP=eAafb!~
z1UdVcSN>y(QPH*D`ltA@R@d&VaFw_|0cNbdDM(?O>|tBJ6vh~-XhNz+E-jXrWmfd-
zqy8hYNQe6vM4ab!(~&3TEwl$R>(at#q{`vWjTIOA<_Z58IOH;-nn}jM{E^EHzO;$D
zxeigPG#KMn?=VEm4$l*(Fm6p6=xFKz*D~1w*hWsQjSPava}h3X2y&;prmzT0ah>0~
zec3Lgp#e1!z|W+|i2#*OM@?C7gtIz`8skpB6v0p_K#wEJB<k66uk^N`5u@?P!`CrI
z?<swyMX*Ij!+f~VRj8;B@S<CPU&oYx<leI<mSxqTCc0U3q(*r=1sSzASt1V7gBT^r
zWp;nLQ|GMw?F%Q-=pKn#s7B9VdnauLTBaH$1&{b^!Lg{m3vY-`x<<``cc^fYr0JF~
z77w$gaU-q^l5ka#9D@KEwMn!GgwQnfRMOsap2)sGuu|s_GQ=?tKS>|tUXVCGfNtQd
z%X~WdQAE7oQ9LarvJ%ID?VfQyu%*#6joJ#)T>WaN6=at`gc%&mkBruMMkcGK;wsFz
zdEgkJg?CXsc?2m4cqc<AG<K683>b6eA^y=IX0$yr2XDw8@a*46eI5EBbJI|Ue@5XE
z$=$;=L5H?NMS{1>f`;p>^FCs!FFB(cUOstGBZrBTKC-upN}tTzOn-di8T_9frc4vR
z@Ev`bbFR}<7N)a+noZ6}zP4Dtx%~TZ<Nozp?5;Ti*=}NQJ$j#NCGR2gdk?R#&Y*5f
zT@;|K9iJWBH}4GFXtN52qd1<ZWBu?t`jo$IwtC!K!wwN<XAPRM@2arZ%l;6U?~r)A
zbp35t-`tP-tCTm6|39Mn-<|gF`ybjF|MBy`7M%Yynr-b(Or7ZeKgxv7|38xd_cLOA
zVt|-{008hN^k4Dt|L3mu#zu@x9RKz8dHp|l_-y|mTF^|k3JU4QlJ!_G-|6<+vYBCX
zuY>KP!+T2#q(+BQ2weQsmC@I&e+upK0HTwwo-;c3g%jf>cu_key?~}gJ)@gf8nb8-
z?HMLE^&5XL2G`&|8TPNdM-Qi_lwA|X{T>L6#XZ;(BsY!46^C~ZgOhtsDdlh6*MS8f
zE>%Ey<UGb7IF2BvXc!VMjA(7V3&4BtJfpv9oY<bxX;Lw#lw%zlBP2F7M6&Nc{pXm-
zjL^o<X^?zz9N5q|g8i)-uq5`zWMY}{!9E$hTLl#E0*N8l&$kYfnx>GKQYU!;Eea%>
zM4}&LB+~O3_=h}_XtGNDHrLbVPI)0&iY=FuCT2o2n+qn+Wg9I)hS*nEd(j*bjtR{_
zA?SL~W#MYrV2y|+(3)hpeCSJ=j?NjN3U`k{2Qh&kN3Xts9C~<gb93P5;`;Qpw-maL
z#Rc)+G0CA0yt#n*rWmm!*5%P?q`eUb4zAF1$L*Dim*dc{#J2A>;>c{4rsqWZAJ%}$
zf)*HNeJzi<wP{{feRYlR24V?j*8#V-wTsYn@c3<C*bOp3;F9K@nKxqIIE*X&uK{x(
z{Em5MgYgH7@<5XCAdqdyzN8;bQo~W|qtL+6@Z&@Y41gY$3&(e&8>A5e2pJ<rG{~0Z
z088DLsu)bjmQ<nvh!N-hAgCs0XsiN&L<4TgU>Ts{WG;&rq)!Il(z@Jx@sAgR!Zhsd
zQ2<Zj@h~`WMVkx8;mW%^M5PlfkIOTs&XC%W5MYmU=N4bhyhsy_^gjsRqI5UAK9KBh
zPjCAyZTVJ^+s*%d2Vu>BR;4zp)A;+CzG?9_e06u{|NI&Ww*LO?^86w27jo`_Wb~z{
z1)MlC4H@wBrb&?`NZW)HBX)u4kdin6gH}U|IG#xR?4}q(^1|YPp-{0#V3g9%hRV)}
zfnZ=*UPF5r7ol4JjX}Ad3pBDNZ_*~iJcNgv7sQ(5c}ZKe7~mb*ixt>$T-EPW>r#Ld
z9`(?dXSa&&_7=Z>mF}{VP5wEkyfM|E^81>XY@Lt_6?vz&2iz!H7;d9<Cmdf$5McO+
zRRG~Wr9Bk3T1kN&i@iml1m{J82ha~8GoZ82K2)v#1B$WkpoIMQP@v93S9iZ4IT<=P
zzcaA98^RP$>OC-kSH@fEkAk<mnZcn3*P&odak(Zf2J_d?)7M*0BFtrrV-;!?71}gw
zVY4GK{!Xe&tRa;$iv_!ZDF_EDl3}wk&;GPL2jzVuXx3*G$_jt-q@N3BI^#2ht_7jQ
zD54%&>GpygtuoOK9+-Mo`%u<vSC*G4zTFA-We=>^gQvD~Yq1PS+0X~>Hktd=w1B5@
z1RHjndXqF`7kC7yUU)maJ>eHF0P8k9S@{WKJJRAKUe~lgvH|WQ4-r1>ow@~=fUVNw
z57mraIx~e0utBqxZ<FTyqo}C7BJT!YU`W`ri}n+3&Uw-ou@lsJo5_#L<d*lSTo_RI
zdykRaAkj+ZJHagPi|h1Bwyd|q?B9R&6VgrCUiH901dNvvoJ5ham9UMmh#Ch?s|x@|
z%^p0lO3IIco4dE~%l^?Vz6SUB4YX^-UGJd3gt14zfzGQ!pH%@NF~Tl0gKg)KS-2xC
zOI!`H!w__h3zdNYRDu!-tWBab1(TIQD%Wzj%=f3^OeTr?wG9{cY-4dVx7a|6QEq<w
zhatuMq`xs3Y6t*ic6oME<}4EC9ZLwBlAEbfKh{5u3eJ9r@9A5D(T!np%CI{?A#AoZ
zNtDE%{A&>MIJiw4O-Peq#VeR62u}(Gi86oCbRHGjN0<SF!7_hhixo~0HH2AFG8rWU
z1(JR>q};PNK*a4HI8WDpq)+d!S%G?AnWOAc6E=_#w`K-K6f5pppivB%M0}TV1H)pm
z2Ax2iLh|7%bKyYTo&Zvo{k`)tA~Yy9Aj5bG|K%FjY7VwE&btYC0{<`xbhho#;H#qV
zmVNu=1PM{7^^btWcsp72t%rVxpHCM`L@kl^0ApMk6W9x|f0HoDSFWjqtr0_ibhz;5
zr~``X(V%haoBFbIJt=OQg8vrq&r>nV9if;2v=N6NK@74R#EKS{h(H+4mGA=PID>o-
z#Gb$ueikpaW>Dpr6=ZligsE!pRoE|-XzxJGw?bDlfNTmaZ~6}+;Q{9fPWjBoa5`Nh
zX*O0?aQXf|j)XlD#{17ORFph@r_#H_=+(GGd)!F~NZ|kBgRp{O^M9y|-2qc5zlMxw
zkunD3gnBI-4OfGV?+<6H2RYFQZ4Sxl7a$H&CJoe@wWtIicvlz8#Sw;n)H(5AH3exH
zf^lQfmr}};%PXBsanM+;N?J*jFbW_uhv9@EJmQq=Pq-Cg*adotr-)28o*uX*d={py
zKtwz;hCObPyFm^<W|xu((vW#)Io6Dd-@L+5UM$7ktx~R(ty*Cd2DjP5>!aai4Xx@c
zTI=U!d2Cit^>MR}gfDMOSaw01L4{fyu(S-_qjpFw83+#Z7-l@8?TSRf;4zZQ_q+m!
z0v^AiORj1bz+?z-j5ZXY5X6b(=n@eGT@_lxArL#&;P!7gT4VlA6@uc|6Ij0%*%$_g
zg=jC&quI5x$(QHX^s#a(kml9km0Hag=WXW&ka+GF9x#W1-kSIP<NEb-P?q#s<A$pm
zYY~7G@UoU)_38j&sJ{pu4eO@A@{rpz$u1H309<bZxbX+Rjz$94Y*z?V)c3%Dvsuum
z2`V|$#=+VDiwe(%p)b<zw*W5rFtNzxFgI1K`ZbC%Xp}L?X!>%Lu`Y^H`+2gXrOaZl
zVcMR|6(Hii+eG_s#sxSUFzxllR;|J;n#CnmsB~=o;HJTOeLN?KNouw3_)>M#k@uoW
zi?R({T<Q*#SyU=e++H=sxYlG7Omu3uk#6=@KDsAIO&iO$DjGA6g8*lvcR{9tF{GtM
z5Gl)E<b<lzS*FO6QA3c3lHn4gg(hKg&$@6Dgw8{>%*9q;;j(~TyzxGuvV0{9ic13C
zrxTndB+QvHr@407HmnfPs@C?(=g`O1d#$EKb@3*T`44ROs=9_9GiTSut&SUmoGQGj
zZl#hN@Kgq9Qq=$&Or$A}15Tg0dEp*86X!KYO8Fwa?yP`-Qgsu+r@!|1Kq*x^(C4T(
z9Hn%cOrO+)0q6l%H#LcWXqHXl3k`c2(h^JFj7eb>Ywr&<+WlzFq5?qJahxz!xX;)4
znJxY+o<2%ez1x`OdL4>R%RlS96`6M!4<IGn(<MNLs^|T)v85ztFiYh4&MgmNg_yGS
zE1+|LUY8R^FZ{k)nA*smER9MFOrA}fHDh|j<ggXKp6*y>3!q6xQEGv|xwf#8ySN67
z5n$m6d}oH9>}{&Ite+B~rowC7@d=TA+{(zFJwFBxx`{2yo%}sa5-Dh@aus?cR$FUV
zsH=v++zw1XiKPWLY@B1#q|yFphGARJu_7I7TN|CFNEkhSYnMHkI_eFJg*K@a2u@YH
zmB@Xl#%|nV;NdA~Y*II>&W!%o_Le^|dc<L_Q_oQWp@)?kZ=O1XT=;Q@!V`wpM0FpR
zR(OC*b8BG5R7?06^Yj~bDQLQCG>-P?4cG*VTAHkRq_n%x(QhhI$D$eCN|~-?$eQ?5
z)jcbA8rltr9R3EpuI^`Qf3u?RM2T)i#?Ni8&d$Jn#6nKP4D5lc$AfJ$#WVVeX=zrC
zRKbLmT$00&No+<ioz=o!X!B;ig5i3@&0#|~Ux&=oEiraX%A~1v(~om#$+#@OLJ0({
zPL;;mQ)h6wnEyE=FBR8!MniZm)mdUEAFQ~8NXFkoYD6v|HgbS)=D4X;NH;Pfm0T+a
zK&K-2bJ+IFRfgz7C3CXSUrH$~Z#f*4#WQOFmV(GmkwJ!7xa+aa7L^C4>-AB*&<zO}
z6hhqzrev&G)vNlbrmXdJ(yfbv_H$`cuAn&1$DzO_9S6)~%$bC|8l*)!Kfn2Nmgphj
zJ4I4gqEa!RS`Nq+JbdFa8Pw6Vh-_S2;K-CJytvajruDNF!~CY2Y{2b7d^F6|4>VEI
zYJ}cQ8I`OB;xz-(8cO-!thz*TOnbqpj(7@SSoyPdT&RAe+ZTw@oa$DsNk3Ku@-b`&
zq17P)rOyY?x;X+r0|I7HjrE@ytMS~@&aG40_XfF>FQ?(a@Nf}{O_jox-+PMUfve@#
zy4zO=u1=&CCy8DuKdH@9N*mgx4f3o6ZnwTZ-{+K1iDQ>sX-t#xctnwZQBa82r$YwI
zBtMOcNX|#3uu31{Ogp29bkz|NaNE!8>AzZGHcul->R77OWYnmQlzK_^*G{in|B36G
zQxb{+hg@nr_$OvgSCKtJXJ0XC7x5+#<^G!_+WnW}fR(Gu#4PWq?OsEyOaaRUk8dNP
z?z{+mEscLH0o!$j^AYvk?T|I>Sa?#^fUob>ZOhE}ZM?!$S4W}EbSfY)pzHv2jOSZD
z5KOm?@&K&aW_3@!F4Z8wQjzCrJJ%@4AXb;Sx?=Z|w|@}?PaiiwL{U<a*FwBPTCo2E
z@LyPfOXLGr=7*AJX#ms8M@Ma<IBt(6sSl}xf*v+#4tBX$(1qb<MWWD~q2@oqa=P@o
zf#L+N)Oz)N2y^*hgdEL_60wiZlVlx|4Ba0ih`~SMMXBmEm1yh=p$g?V7H>1@K2Mss
z>r>-VnL0frf>F3g?O1tfY~N)|nfdGC$`~c!4V;Kly6K)z60}zGuCgtQHN&yWLtEW9
z5!Kf?M`?t$!hY9NuB@vsy??!-^UuWu#B|q02HiK|Kp&c?P}jzV^q308*<y_(s`qN3
zLLh%Mz=fp6y9ygCY<7;fqXca3wTDg<rUUCTS1D90YQ`qQR%rD{92}Hvs~5Kj?G#yK
zmo%umaZy=#3-!ynTL}6j&oJD%oi@oK!^ojwICb1e_tsOXmxGL;`)W|~XFg{g8m!$J
z4=*{)n~CIwclg^QIr9%o70&YJuXNRxM3pN=S|4DNa^bdSb4*hJuF2R!!MC`pB_&a{
zim`9C7FO~KIA=YUL#K%Q7+t8yUnD({few24o~U3Ukh4~#$7OyMFQ5I*E<AfYn#(La
zW9=)Z$V)9m(S9KneNQa>+NG2_d@km<id3?iyUi=~zQHk}<o*yYAx57%ABQJbOSt<b
z#ci;6W<3FPhd+i-0r%dGo}%d{I{rwE|B53cL8of1la+|=BO&QjH-7cYPG}djKl!U*
z0jfnl3f)QTau~&-+O~K{q(Z_V@Mw?K2sJJ)!sRha3I@<ZB(EWdysgl8xXZ_IvIiW$
zPZdupFpHU|bYQ<c@mF3vjelT|c#aV(&TcVLww1n^i~0JR#(pp}sFO6u_p9Fa7z)j`
z-*m3k`2!EjO2$$A8j^iJmT+@4j{{4Q5cr2S{T30N;==8S>EtDbL#G2uBMPQ+(|MJO
z;fmpd>KRISimMoE-)D|-vricUl^;`^G;dy+KAY7@lh~&(!b3W<bVH>|Fc?M5&!Dh6
z%fMN@-N3KfS6+|mgaSX#!!c@fJ3&~BhK?GH9W(fq=Ya3$3@F=jaK+Ce-?u<^Er5D0
z&d?@%?n1+=2}b`qit$5>ZdPu&PAHqkcm!3~%PRZNNNFa%{JcGF--#o{6ua+y1NUzn
zkkb2qfG8;cU=xV{08yTm?6^bzVS1hr{|&gq?EemTq^R23A8`Cfw_xi+P0}6mNmvzk
zN=kKwTh&M!)LS#hH9->Qer0{!F|(2P=W~W5!X2{a<_qxZe)`ZO7n57@Oc27&vx(Ix
zMXUYd*^W!S=ZAG#3GNV9ed!z`H~J@Q49(6d%PPrbUrj1qK>!Rn*YR;Mi4F*HRbp7j
zlqW!kblacTKj9ed&7`{=hdz+5-z{e-(^k+D+G7-QtduCIBp&C@dYT<AI8dXGU5NqJ
zi6U4Q*Bw+jU|1$VPa|{|W`|una1hjktA1f<=lk%fx7C!3Jv=ph8mnQvW*)=dUo%p=
zX2+yYTu~84HwLFs#<fLL)Ko!b;k?w9c7gYyTe`p~gB+(<<wnt_6}zhIeC>O8M2nm!
zYf8g)DJlqIQlMshB`P~n1+ajv1GE%r{vVG*9S-T)6q9NGohsyKWkyJ2ehL(UE#Cn;
zR)eIZDk|upZk1u2rU|5L*=z<!w`$-{BMU@Hx1TFcS>(@wN;`DLp*aOd@zqF5sKI%>
z2DMTq8kA5<9k^U5IxSLrmbYJK%xOAu;dE8CPxN^GAQdt-RFtwA0ZOHhl~AKC{4RdR
z+sG*z$=E#75-t|s<8_$h*jP9^-tS7^&%)?e4e>nPgwo{HA1rtKT}6_P$^f@?P?!St
zyKKq*ZWSQvu3&jc{X~JEH^?qKu1xv9omjC){?WsYrK5dEv~~jLr~A?G6M*MMdPiUk
zB0B(kgphudfmRKNBqxK0nT%xZ#ZIzR3wLfJz2fET-oUv$$<jTOEU~kq=^8Zw%1@z%
zEAxto4@L`jH!g@J7Gy)763}k|$fvqEUe{gHhAP$cSu%LHruXZ!{kbvwSJrROco<(<
zJnjqpa`g1mfk-8oOe-HOw!}+N*rh>-7oPs+cB$cqY!eCOUbuuw&Y7?JE2ullD7NIj
zbyq=UtZt({c!dJ`V(6c?P;yT8r6NSNEd($X!ez97zPN6)y5)<Xrwyn{&M#)MBCX6e
z%Q2zcA77~ox7XzlbU2x=F+_b!alhhQJ~do9P8z6yS0*wN6d%9&ZI;bi=AB-zfXJOE
z5dYY>?K3k0w(4b@RT{|zif4KnL-*%Y&UDD$4d;)ot5Ec8X-2dtMe4o{A!}Ke^FAL4
zWAi0_+pl&tz%T0&l_brTdGSRkzfrSZmBoeCD#_-mHZ4cKjz7HXDRqZ>jXAIX2kL)u
z`DgR%-w~htC-wcGduRSnMAO*F`2UJ%?x<_qZ%Ux}zSeO_HmATY$McA&LZ%>O=@KsZ
z`=?b}(J<p3Y@{<bj@8?w{q~xVg6Ve@S0t;R0&bo1{q2~ZueMYO%I(_*xtc(AShDhQ
z_gm`h4XKbeY%lg^!tAHG`z;g^U`MLO4<>Wwg&$QS3}%G2tS^j>2raGwBu)-n4hZLF
z0Z3px9HE&fy=Ow~W|8ry_XUCW0^UYP2vONYq=Pn`<$-##7fJ)d06(Bl#cSd$s5cu_
z9Yto2Ks0i?GanQ)#2!h*wuIs@E@omod%eLYd*#+T69?3C(x3ohivoF6<Ok4};8hPd
zeQVgzsaq?J^MVkbdkQKut6r9AHSRRpFK}00s>LAJJ5p$u9?l|JrwOs|%v0Ju9(1#?
z@EB&^nTn2#_UD&WB$?eGEN~jFD3UKd^tHEg0srR5=ljbq1MB`ucN}};cgrX9$t&Cy
zm<}ciYGJ9K%xzO^Nu9?zkL`yk8-|vVaG3><c1$If^Ts1`=P{l;PlvDump|%WB=JDJ
zFu!*PwZXrPw5O;NV@p-`|1kEA!IcHw+Ocgr6Wg{q;l#F`iS1-!n-foL+qP|+=brce
z`RcoW?)`D9>#4Q&!tPyNb-H^!tI49Bry|W`KqJ|wtNUv?Amb#-0{4{PkE8KMdl=cF
zviAH`bM|NII;3<sc~#(8Z>G;R64WyBz@97nHF^Cw23#t$)aXmyh1cbJFWNh{J28yh
zu^cbQE*EC8(9X}jLU0D~?i+<_J*`AuW5_&SN8hZYF^&<HMIQUYB`72h>bWql9DGWG
zxev{6h3nLb6Y^`kysPYN{pdSzy;77#<R3$$ax|0iX=URuI}<SQ{RHP`6(NPf+Z8Pg
z%E%i4w+~Imht|})zm)WUaogdbTS0Ti?<b<hzof@T_}xnW0{GZH^m3$Fqm6Kdc=!(S
z;WU!x%UM;P<C2Xl@>ci|HE^ld!qEQmspIf)H3Y2Bl$%0kn^D6v52G-i2GMi1UoJz1
z&Bo`huQxj@@;+*&C!wZM>1vb0YUU$aVy)9A^>(TrvGk!18o%w|MV+-NpG{+3jG^XM
z$C!X?*W_^*AMtYhO`h;gn6Tz%Mmgm5u9!$^Tr?>!d$yzw@yu{C9H-71mq}`^G`3q<
zL!WWX0H@DD^UT5Fw_NUhUVi=ofhw-1AEys@V*hO{{(36R8;{xe3m1}A$IRNaML!`~
zMTn$GUnrfDZYs&k_e1__r(z^Kkp{S%J*yMCHt%P4u*c6jCZ|)|U!iO2fsx8UNfYsh
z@5sf&7`W?6YE%eC18?g;hcs+TU}Y>TYbQ_F8;KmAgK|)(l50J>{oc0ZWC%sTkOsb$
zcQ`zr93w4v95J8!HEiZ`UGiWkl$Q|6##jY;iQIU)R;{&`cvkb!GF#C@MKyi9=qHgJ
z8f|<2JW|uBbM-%JSD~|5Bi1-UK*q5^|JRkp!o==>U0E)5fM+GciC;AaEEj5M^92;0
z5hE#=3?L9>D@`V8lys3@?X(dg;;SURl)?h``yU%E9nd8BhodU`9mLP|<Mu|(E?&95
z=3aOoN*;r%sHqPf67C$;p#^8_jGq?KNmjJ_GYk8#uO*%h)Iy~P+OHE{+Kd$fdnaw4
z(U7!voYnI~ZoF&YB!gZVu?vN=RK{BJ^Pzun<rxhkiGB!Lu?n8uz}~sEVKf{nVwf?c
zsz-4@u~!b7rIwL(5tcn@n}*_~HT=${9OB00(h{J&g(?Nbr3$5HI)`ATiud&kSH2D4
zfxSG6W`5t}wqB@kZUbqQ(O8PUG}f}9Og4xp9(G=6&(-wb*y(9&TcayLR8P4{iLUh3
zvh1;%-fql2iud)mIH|0{Ihl~5MasJTI2hXMWPB-|S-Hub9GB6~IXUogcn`ts!^6-_
z$3$ZqqUf58a-D~d^MBm=<$E{9RatzH)WX!C<N`Q~zVY|O{BoS%S@WmGD)$jU!9L>-
zRK$?U)x&IP45+DuP_uy5`j=@iH>(SG=j(bu&AzLZYMbl*&>b&S-u}|a#TX3-HOxM^
zAlP|bOS;{8Av$`p?c>NGlKZStGT4B1iw81qoTw)%x8dyf`l7!?i&eN%S?^zZ;zo>y
zjC@wmX}gfy-q9Z0WC_<3D|yo|jjW&jsEBH;5@j&xf7SSFHUl4ICb#WNG4;8nk--TJ
z)7L^r;EHppX&M<y<gsyU`%GWouju6i8V<sT3Ivo@p<zI5;}RhImM64wGbS{p@kW|-
z3OEQk`I!7xbiq+KYby9tw|+s}V^aa=@b2&C>n(8F{5`fudb(cqZsEihYPPcQ&c`g{
z;iN9HLQ~V_{F?*w!Ifp=9PjwZEs;s}*X_So#m`+cSEQof^obI*n}PqtRpdhiQM4Fn
zsWX&N{z}*O_3HMLDcbx@>)%3WRCt<@W7b%6%iQU!h+mEjxM-{}ii~`7W?`yq6ipgx
z6fsdY&`-@vec0k{8(r8MBO5q3H}p`^m4(%gfHP!TfMldn&QgPUIK(;U05p3Ar5=6U
zru;oV<L;OoRx?)W1nB^SvLLk|A1c<)7?gpHm8|4qEMS3gWn<`*H#+mG%Z|KP5!S0j
zpe6q+E2>u_aCh){EhK{YB(HT@L&vUYxIQ_r)z*qW=9#ULl1?>y77gZIDO-yIxekU|
zn|eS4>^~=s4Q>^J{*UOXB?aWbHHVUivsG60%{V)zFJyTQfscbOKiWbKx4s`9CkNuH
zuvNYulHHgz_JZ;dVynS5k<yK}RE8rZxQD8H=5SH?)D|g6y{yHu6NO^TA+bZ2VnrrZ
zmCJBu#f|kFLOn%Y_X$1ji9L%$YkrNO3_3`De#|-M!K^cYhD`};j6SqIf;`i}kShOc
zRVZ!32c%0N>%fzAZjywhO}6|8v7w|GlNr0csx9yBaD{(9`an_(nB6CC?E5gcp~4Z$
z60^&?F?b}Xf+8ietAUD$hX^|3Jb!SvsR?Kj-YYFlL@^0;?0`KRQoU+GVS&V`V|~<^
z1T0)`YX`R0m#N7$yTIlyJo~ep<-Y(05S+;kUWI7EI97^20_!rgs_`D^)_{UBbjv|g
z8mSLeFRE^I-p<O>f7w5nSr!QJV7!i_(T;&VBv&qQ(j0uj#iMeZGSu8Uvgx%{e_>!&
z6Wb!iT`YNadZ+Y%$~%s4w?BuwZ14ulDh0f)KXa5=@_^d^p2Gn>tsJUH0XT;lB(Y}m
z9uUa)ff)pzeP+7$a+;(v4rkb+*z@*=^fg;JD19P4lvd-jTOgpzBCU0Dz}kG<g}37h
zt00@z)PXaq=mv13r$twFZ-n|49|h}VMN?2ky0B&x1G+*=$0_4)7-dQH`<!ngsr<6O
z#n(&VFz5bh{yTb4{;pojxH8UTDqi>EDI>kYkxR!?7QiuYl*q5vThE7|fd5rBL@|N^
zrd=Hc9+^uOO?N4yovYkQP+JZ9C<D8mIwS#CiNw~}1p&49m=aQ(ioHY_Gme1wi{f{V
zh`JXy$(dac8`jC}ALfnmELqxMJ;b@uBQga_2>Mtvqz;u|VP&<m%YKFDrH#TCtC^r`
zd^F7JczEeovqR;&@?bH<8U(WYhaqV5@<t~Z%xZ*#kM6k`+%xYLNFW2tKcxA7Yo$IB
zG<!Y?OT!0!B`UwjE%_h`*GjkdM#dg{!RZBZ7D>+uQv(0JCl|JL>L#=O3?xk=dBUKF
zUb`>i1KAWPu&82H6Ub9mXE~wC)Kx3uN|mQ@!SVe|qHT8Rs!wPY8^Qcy<q_4x;nMGC
zZBZs_!-}<H#u=#2%Qq8MCFo&P@|fDb7e#)aiab0kh(9ZMaT@Hjyz>^?43BHC0=<6#
zD)94rA(+t1a@@+I^)7&6x=)hU)<C1YjCBUJxCQp{{WREbxz}jIOTkLn1<FAwP)K-n
z8Fcg{AawtYtzdx2sVU>^k_A~~3{gdroAr%NHKY}4pAgQH`^%{nR6f?%OZ+L7?S$_#
ziX0J*<ac!xh>&Q7ABiBCp*u<U$2EC)A)FbpAg7*NalxmQj+CsRvT3Sbalv86gLBTC
z%R>Fk#()n;Fyu-MTg<r<F2aQ{J5^Y0phI}p{7&$)K?o;G<|{o1M`%8uecgB0lMA2>
zLB@>wVN8!-etb<BV^yI=3p!u8vf(<lGi1#G>#Uu}#PA1mtXmFOWFC+<{~&>a=C6jA
zPDyDKnrC&|x|~A)C7mwskY$Uj22NG(<E)`lsZAZ#K>bH>^?lrNJ-_>D1JwlL+QMuU
z#u0hW#UCkM!05sIK!I#enakI8#Knt1jSvp)qgZf;pDzZ>m)9lRmzOEs<3(WK<AvYg
z<3-KP<3(=uyhFNf53b9XSMQTeoGf7W@Vz?yq6NHW#|h)zC?dme!6n0w4F))_V7yPQ
z8oy7Cn!Qgko4!val+HUKxA~16yoZz5?98jbKasA~{?_eb*?(8iD<J;CvEYE<Te{;&
zR=V>KG1PCMF~e`*Hp5RWI^9o<OYPk^`~n%QW+%GMZ$<5lm`B$i$MNgu<kLv0s1UtD
z>CPNO=?)7A@FyDTH{z7xH`1K$H!`2@2c(>Tlp<OoMsE8~n0^W;Pw|^Mc;6yjxw+8w
zXI43d4jy{kAkR8$F$q3vDUvSOLGmfxdA2LvaYqD>WGQ~+yYC9&7b^-i2GQ#8;h-xH
zJi0x0&R>dEv&cU(&sz9n&sxBu&suym3wEN!N_V2zOLyRaq2RUAemzHAc(~U1b05Al
zD3urxJAGwNKjDkj>^x$;2PUU~@68&%hXXIgp(E53@~88sLL-29gYlXw2_r?_`%OMU
z|5&*J`ojPF_{X?Lh`sH5bnpE@xPbUH?d%WxG$5hxO^8+flXxu~AVRu8jK~9!N{s>(
zr9b#%IDP*Sod(QF4*?P;-h}SC0aBnRfKkmmAzSYBZ|=iSVySGv!LK1e-OL+td-~ZQ
zfoVWp<vw5)D8bJLn8ZH#R{^{2G;;$+#DJ24H=$<rPh=hXQvXBeZ{oLXfK*@<KnnH5
zKRresU^)2ak5TdJf9UxApHQT*P5^VtLjdyF2Y~d+rw}U-;12>OV4yVd44GjXP%!l-
z<f`^bjF$~CdSm%2n0^yl1VX56fLPvx|EcpgvH&I^ob&|XIQS+M!vhFUhyoaWOg?(!
zo%qk}e%@rze!tjG0}TJA`#Frh?KG%;-V9{}x*{HWu${kOB!N=hX+ZAC+YUT8z`HvN
zu-DuB*g<;Y&$a(~GfeyK;R}4WFvD-<;Pa*(2o<IQHGOY8OWc5t_9%c}^g|Ed;pYu+
zHb75j2;eAg{O+6f&~xMR{Q`~&_y8tM!dALN?DYL2282i_{yWE?H#*sXuYxFmZ|p-)
zEl?3?vAba3pBsbqD{$yd=pPRNIxY$T9{eCQ%e6p!nhgL~7y^j&z6sp|C5$J4Ue!B)
z6kytt*??f+)S-X^<d8)V3<@t8=Pp`3x08rVpKg4p+vCz-4n6lA<{swTx-Odp<1J<e
z?Urv|9T~B#?jw(=!lfNNu<z>@C3waD$hrVzXnRoCua1r+1xS#Wo^O?Vr-eVG{=|QN
zwmE)4Z$UL_ac$e}G#giM*_Uh(X|<{B{%PQV(s!kOSWqx2Ls?#A=gsA+>Ko5#pxWZ+
zCNSv3?`$m9vGfQ9s6LDE*)WyqS)<z^buRHaJfLm+Eme~t%@FVv<CeKOb!K$w3+b!=
z=uEQfK)R7%d8q9Yz+U<KfTO98z6o*jN9FO66;Pi2QW0@O-HJEMM?Xc&YwvE$-acP?
z$!XhuKK@AYNbrfefC;%>daLwc@;-QXzf}$Mc*AFu^sM{%EVFgs$?rMLJOdZaOw!E!
zD6aPQnO`nd($;J%)}dmb&Qw1fy5O1vmgX_d{4scAGRPgNHOTAy{Q(BfY`I;4?!Cp}
z-~94^hq)(cf4%o@L%8|waO=S40-E#eG%)5%tG5Gwr_;Gr*3-A<`;KG4rE`$eoy>!|
zwRBidlrrI|#+Y+tohWbSjVMp}k3Y&C@4`K|MiRVYBaoPO?+NKs8Md}|FAL)XRlSM0
z!a8Z6x^5CFwP=tvWy-x{>X~TH_9kI!xk;)~XN73ZQO{p|!tJY|w6>-**-`_0O1V&L
z!}5HL`?9dy;=mDqN~Lg3k6kX(+@Yx4qJBX_Rmn`Muqn0E<adwI{hvS6Uk92Pi7Pfq
zGc!p;m!Aa9@;y<C+6L=~UuE;X{FvVxnq=h_u27k`*7)SU73!_=>4pLE0sa_TbBmU>
zG@VNKX&+T(@89tL8y<$q{trYk^m*ruRSjJm>$+~jnlH(jjhmzJa0^{^L_)cQwq3`~
zow!9zX4X)N8(%XUI%7SJUd~)_8^;Sv%@;p8%#YUXj9LiDDKiuEj{E|Gm^Im)Pr5f`
zH}7^CE!?!$2n^b>Q?_h6t|?PH=l9Gy(g^g@{8vC3xB5D5S47s`u-$Vk=2HeI+;iyk
zfW0(#6-H(WvpdiEY%covY<wTa-wm7Q@CSM<&hgJWLja}zV=3%iG>1IZ-U8cFIzQyF
z*a_izK&yk*GaQ(OAL~J_;vBCE*qB!EOOHuL4XPE3D-N!FEhawxq%xO&T3Y$;Sz3K1
z6qP)A$E7YG&)sjke6oMs%Mk52<Q#c;IGq!~T?LwSdc_ye+r(HGrxbkwywYDcH4s(#
z`tG)Z8AF5?!fzd@f-XaarlJE5o{5o(5?*LPu3N(}x#TEGt6mL-=ce{H@^-R21;e=v
zpJs%Lhia1^V+4;ZO-QM%a!h$bL&6k%sNv;G@&ypC7`v-c<3$r{>uqArikVbAZS~OI
zBKKOs6BfyoSP-zt?*mxZK~@Crz{vesgmETj#w(_8n9Wnk1Q*m>|E8aeap$D+*b~!4
zIbdRRRi)K4ONO`XjUN%1@B?H5Gl?tMERjQB?NEP&Sqa54L+6-v-0A2vR0Y7U&zk3A
z8RV}4%)-88XW8dz;QeIkp-z<rzln_ZIgxSjEpH^>9qP6W3~k=t{f3A0qMGhrm?@bb
zM`pn)D--cTJShaK0<OzoKJDfpm|kEicGqr9p472@BG)#;wg#?WH%vW01)`2NVy5U-
zIy)_Bn;=_C(Z9b1p7-~v`zzqD*BEzi*fL_&?UtdxPMh^9a9%!g?4zSQc&lfxZ}y?l
z9(=SS3+&m)?&V-{x%HcdghrVtrYW30ZT|XBm4juRxFrNV4G2G3IdA!ht?VdJF@X7f
z&*`U*8af^RS!(%V+&wD$`3^$f8<=md6{s8EJjB(%9EpEA^}Vh}tiBK$Y7WR}L-<hA
zv2fs+VoX3gIw`^S=ton|vW65zX#*35Oe{--i<vI>&{A8&ob`W*?Ek83zklRIVHHlJ
zAowlQZv-5iWcv3~DF|$2`UBm2op!n9&K%<@VWoa0I(h;JjYP*^l&~XeiH^cY+@9aV
zt_bOrxE~?GBJ~vD!H&!%sl^xQNKk$5jtHvz>2-s1;E_c<Xcm^T1azs~?j%kGWx>Hj
zAo3$18i^v(+&GQ0tj#dc;A%2qq<e<S*3ctFvIHYZ+ye=Nb*_;`$dqx%G6W_RPV!yB
z!GbXIBLOOjisIZj;<EFNu+ZR=GS;YjhVhorBOVlrDAEK>soXU*PLgqhu;7vCLugc-
zeB7s?eXa<%6js*20COk^(;S%tl8Q@Ek)Z6{9m$mT2gM@U<|!4q6S;G#oHh#v@7yBM
zV|ckwgMm-AQsCkPpGu_w&vRtXPb{`UL4x|}?ieGypB^_jrw~~*gl2&wO)!zb-Av<@
z-5MOMPXbI!Ix$d!8|P7)6$uz1flL?{Ff9{cS~3JuY1{(^gLV9oMSm#bO63SlsGa0%
zgM<C3foX{+GBZ;Yh)MU0|A0l0prH3j{I|=??MLqfrn>JLH|PW&$reSaXepaLn!xQe
z+b6<=Q)&`GA|tj=i~vVrCHD~w8bA>~|7|#H08N$p3=RGz9R@^>#4?&djYD!=>5t$(
zZvyBq$MiT*ZwhiNe`e`F#Y|VoP=^VR#b13Sok(#sK(w8(2t<Z_iK&f3IKQOk6P}@i
z&$yAiz*q>uPo>}g<A7jH8fY?}oF@?|+vnwu18TxZ&Ho4ONLvFn^6_O<fg1J)+^5ll
zt_YUo{|QgTmI4vz)G)S~5$LAe%@GWUm}86SfT$<|q2#Ntmo2dlXv%ijX%;=|498G%
zJ|1XtTzVa75(Iaw04QT$?u!I!3bQ2s2N6ilrvNkUlZFCn++vT27|@rR^kV;ac=u#y
z|9K~R6aqju5tYFvvLC^LIusm0^eeiU66n-C!Sz3x(#HjF8v<vIKCv5U(p7>Lm<M>3
zbR1BYUx5@y4%AdhXau5Nn#4??2DQX|GBB(nZlw1j;5#Y&@9<DC{(B-k$;$tesUl&v
zFfe~xvNNF5K6wf;pi{?4Q+l8&y0PG!zG1~DQ`#QGtr8{e$|%9ay#14L^*CZ3#qq2l
z-)lHN=J#K>oLO@%2@D8+q0~LJ3bdbt9;rS-Q+9A0(w~3*7%P5ju<vZy`=Rs%fh@f`
zS?b3Lxph&fYnG`&dC{(#9&DpIZ&O4sZMS?$w|ta81awm5H}}5l?Tx&cff_25aJsj;
zs#7R^tp~<K^ZnL?@OOaptX72a6#nSH%hrDY57`vs8vDa<TgUp6*LpaO$0pNad@u@r
z$f<d7ec8(McS#||D3`-7xJTm~`F<RR_uSqK;~N>d(f^SC<!{nmbH5byWSz`BY^Ew#
z!0_{gUxZug6yKb;*wL+5)(;4*qJw`&_o|m-`V0zJi}T;{N*5ljXPUUzFNU@?ojcw|
zP7Zp+-VY5N)Eh-X2ad}Q;laAF7q={*zI%+KzPN!sOa{{IJd0^)8*wQg4nI!qUVx>n
z$eYT$O1^S+dat?08!ebw5|~_A_#oF}ATQWvE!dauVE#IqI6my#4h*MPl`#OToAs<L
z?$j@UPn5#nVtVoj_ojK-G%<S~q_#U!lssYTGVVz0CT&PaTis@oVp^XUzJ;FOkNg_i
zV<Fs;&2Xf(=H}k-TLJ<N>@dj<(;ILsa`v!ObX6a6Ms4;JwflQFm-~?w>KoR9AJ?(f
z^Pl>RLZgFY(MK;@dZv}uGd>bc7ODc%H$5%CzEHUr{-g<<?L{}#gv^ZuepVNODDQv<
zUFWAJg7ojL><D?0d?o)mlF@gy4(2sDJ~(uBqCt-8#U&|=KH9hVJs!j>bRx>H+$!Kq
zkv)u>jYT0zr=A!$J&}<zp~3=92;<VG+gV&>(JjM5O^D5!Cgr<m(P&SJEj2wcA=lM=
zU?c+i$ELO?@43EnfLfA&%g1;4&(Ff7*?mlGtL%otl$NbgP|(J|F2<VSSjVF<G2%UZ
z;n2Hrb6Wnw98k6EvAah$GF&1VC$)@e$yX9qnwq(HV*dKyw4d5%j&x-Wd!uk=#x!sA
zKeb$8y{M=StyysiI8&p_MB*bH7?W03BE=b>R#i(6s_Cn)Le%e|G9-Uy>-5Ldpz4LP
zehn=&Y^#o%t{0uTmLzwRGl+~-O0H<C;TjN9fXi1&P6)n)?PQ@0b;7BNY>7cWMSzi{
z)dUSG^%q+ImZ|%lPA%ndBd*;c;2(16PB!Bk%^NY;n)d_wfaqAYRTWu)xT!!^H?2&B
z)#HQdJMM#NK3$^wA(PX9nhli)huWjURL|sU<9y)Y=1+IF&&N;?-}rF!1kPj8w<Y)6
z^Bk9u@>aEgS-ko#qd2-tNU>@-oqxhm8?bj0N29`a6qaZ_S<W52o5Sg+qqD0q@f4p>
zHUa;q3gX4K5UK~bgLt92Ga1!;jwb~`9p$+4hM3UL15hc$$n0I@CkOqSal~ka#6g5@
zCR928Fm}gQZnrtbv?M1o>G%@eG-#ShSQh`c_TBDMzWHKhJj-=UM*aFgRY=wy`$3$}
zc?;7S(RrN90dqn}_YE-+$@<KQ%2EdA9|MD+{8gG9{+uiPxN>dm*?g%ceuXDv_tPC|
z&rL9Yoavx(_So4OC$;5P6QKtb0$#A%X`&se-GUpRbPn@;LV2kG;&#q`p_d|F;%Utc
zPioE)lj|hQ-GHg{Z4NUtG}S&}pq46W<_6PAG}?R`x%=6qhY;SIQhubbj-7Xy+ESg`
zkVJu67nkLDVJ;-o!!>2)JwrwAt4ivn$9M7h=a6{w^*@Y2x=V|v$_9pF!Y$6@e2p#6
zKWAGsUAT5Eq-$0OXN{+e#;gpXyDAX(>b(T6D`uYTru4+OPX{J_uN#?ec;8d2zub}E
zq9?vNPs{AH(DM~qs-4A|$UAhaO-`@cc>SMje4U8UPWU^e@J?P|{~gTBH|t8U%$Z<z
z>EdNOkb|6Tzz9bxX2A#S`(I2gTo)?8oF5#Z(pN<h<&(awnetU8dYN-2iMRPheRr_f
zjO2oDvhxp^UVUbu*>7b!$V>~c5WjuhZb&Iz=kd!tABiQ*ulxT5EDzC^*s_dh=JdXU
z*UOhZotY`@X=<7es>Lvo&hH5*U|f{GfFN}+*&yAF6=f_rdVhd$uc;d8E-74c%_%bZ
zRZUQwA*>wTFG0qkyrAiw_pVBB)`Ck@y<2c;-P&B2)|Hmqda-4q%(@uEf|7DLgHtQD
znCz8FWS%jSm+nXm-_O}wVP(N8WQHGK6IgxFz~A5_ZKZf@Hn{WjWU&P1je^4Rj=S%>
z5Ty_a@?^-9IJ-<SP?$NtyUdq_yt)ez(d<OqRX!14OZF0?OZ#BhVJeUl5I#1H9gMs*
z#2M`|vtqqsr&6RqOx(I7_Khz+Xh+OwQvK;kf-L1Fr>k`gSVW3<Kir^@2OJDIgkXKn
zqyg@r3yO5f{zViB0{F-3k*W=jX^xEVLc;_+y__%hT9kTPXP{lAnTpzej6Wddhb;~U
z;VHtLHJgaLic03*M;~c)u@7Jh7lLYoNL&TU7k4tAA6-PV<s3Ob<F-i!vPZ>W4|ru$
z(U2RnV#FKDgsvN85JEHZMb=~{WG}5ffj?~p5()A<K{?MKA)3yz)Jr%f!?kBH(%t<w
zSvmy^x0A%4;>}LSL!=9nd>AGrSM(2ACQH3o_4QY5v>M&rJUUJYm%IomFd}o1wE6d7
zerT98BLg}$paIU-gA17<I?NE5>bnxaki`zdcq0L#O;g3dT@9JWf@HG~4Yw!y(>;g{
zP1O3;mH)TbV=M6qEUuW{1ZLq4Z#RlU=HXrDo?4h0sHB8x=>yIF3+(4Zm8Q7U@9rj_
zoZ6(?hq<PKLKR=TsdNqKh`*QQjp1*Mcwmv9CU-xGz<=x5QOB(rbZXT-v2C8ceb1bG
zB>q^s-?uk`q0?E2*_vh7B96F74{FE3-oh&+##(Q=*?PJz{oYEl+(@$23FO{bEmY?X
zhc=LH{O<Ir=@MHejdfLau#0q~WjdF;=_@-<MOD@crXWy5U19Ez1Zm<0*eNM#iYEjS
zlhytCRIm?8Nh$s;gZCznXB*=8(bAli2_W4`ApM5-XqQD1Dr2RY5qV16{5jnL!$qQP
zh%Ka2et>^B^d$AWo&2q@R!yf<WGdBrWzk`XUn6wWjd=nW04l7*4bxD69FUO?WD6fQ
zMh$=PXEo{|;E!0*+m#Y33~*a4SZ3wMLohJ{Zz2k>cIkOet<z_k?_AmBN6doe2(9{!
z#X0k-@UQB(kZmsK4Exl;F`YTDqmD;*4A@V8deytgAAGELaBUVG!Q7V#-b(G#llY`h
zCKfaAMyw;v8d{iaQaO5e$4j$WLgG5ADTobYY&rD-NJX_T#E+96#lxm$IxVAvw!Cgg
z5P1LzW;^w}Jw=Tmr@iUbvqMBBk|-_N=u_>N`fNMH4T*~%2SnQLntFU1T9A+`zG<eC
zx);x+^vy};&*AEC2Tubvj&7MVt<3qOBO$OJQ?hYi&9X#qF^A3D1Bx)6B?$S~a$G`6
z&xi2xs<Ki@s<Me0+Co7G`mBjGOx6leCFp`wu^q%E9Iat~^A7)*xuN87582*YBkUF!
zm7XqR9;d!@4V!dY_)FYBnlp;K4;zO5wwUT|Qqf(~w9#%`A;e+v?Qt?E&hN)1KnM4$
zF;xY3oU!4Sd{a-+|NJgrYZ7LvKa#GSz>mae4-uoXmkweRl5RtXM<>8B`!|kieFUL3
z-kXMk?2#R5PC?7eqrl&CLbzgpS{oiQfhjdo;LjIsxdgGzlD1V+U1FtXSK)mA_uN(k
z77=toYo+Ju{K<KVnV3I{_u|L!_-|`H>d^(^&@#B5@9}i|q2-cE-pub<jWWTA@0V1*
zVr%Ulhu-jAB`(Y|mM{N`M<F(luL62-EJd3lT<)z&1ZCyl)>8p>S}KX1Lw&Va*lG6?
zeN1OleX?F?f#>%nAcrdDe5eENuj`Tx_K_jwl@)RLIsclwEo^$&<|m%G^rC;uVm+8w
zK8!zJ&KLZ1-8<tENIBGWkk;4ltVycZ?#AK<#F8(q9hQ$EAk=p*uiA!V#a&^Y%dK9E
z`{`wmIS5%H<5gcvjzs?Q@a53??b`)^&93F^%fXh`jmL?Y&XXtE1?n5BFG8^FQN!r<
zdDu}jK$R5i5chpEH}H{p?W5wIc^=(x=y4zdlkFke{YuU2>jt6z&^GMVwWKgNe@x=R
zzS6ZjMHZpzrC@Jl#L$%kX}fr8)M-m%^@B>T<ArT4?N@{<kR)33uhyf>4P1z1Kth@(
z)gDABybdku#rVD$z*<>7vLTP{k9!GCH5_SDSa98A6K{q5r<sUfH31iv=kR)HciGlt
zae51BTL}}HpuRN8n9O!g$r$UXXPsYNOm;VxMWx@@(9HT7-J;NBaN3{Fso&if5whHw
z_eq2_PI>NZk_F3iq21}?jG0IOSfbAnA6imIUP$9K6Nht{hy7wH=AM>B3H;BXHa@b|
zIeeQ?gAgGNy^nVi@9@+8yu)@<*IG;-hxgW*UzgH#_*&#r1Xjc5R=hLm2J^Kb@K$%a
z33_pVbeB@pA`hr)nwHz~oFf}jSEAVO*yE$af=xIiTAeCpd7ds;OPlVEAQ@HA5v7Pb
zCwq~3ElrFKa~v;sUL9HRKDy>ML&{04S}l}N1P5tc(7s!DbQjjXZa-uCn8;uqz?I1I
zOYA#KxV&~~S!b2;DRIeoOrPtuqffb?P3yJ0EVz~>=IXUSI3!$S_~@)Hns2%`U|23q
zuYQykL~(5#Nqg|9=+ft=V7a*oTBRv(QL5EiAXx;5oQKOsc_m^lcy$b(GO~EZhE}*4
zyQbZKQc>}1(pAfzP~zcY*y=TzSPCWJIXRNceCQoN=B4te?_nOv)MC(PB->2DT&|bt
zP?{HJ^yu9;so!%fS~w9N*N?*4e=IE2SH#(qnbXI&8aZny+<X;VI<3hQC7@)?%6avb
zPHt|;5S*baeEhW<k+Y9AVHBCSSYEZ;U14L}jDJ@6e(k(*TR$=6S_70kwE2s^S#QGr
z%9xEkGRJ3YAH!5_#{)JyeOs-ve^lB*oL_&m@g_D1v63fgmL<5pqJyN{LC#Mm6Poy9
z^D+R*Q8gRAcH9q57VHVP8Rvx0;6zN}gipY0p&hR3(Ro}*rc`GUXRiw(A$wO<6&yz-
z*DlNRWXLV-lO+Sx=T=;AXBaG_yUAtR%g)m&V?0LK`$m<VX5kp2Ci<gJid#$#7@9R)
z9oRmg@+)c@RUtW(gVszK-XLWC=5@bvUzTRxg#`206V$@A)-T~6iA2jexYlgHc@Bvk
z-jDJR!>*;1ao7Kxjs}dVn|%^?y{aFfTuqQHA3nO*2nKGMkNIOGSKY$Z)Ryhc|6YQh
zuNF{$s={VGNCdoteP6&I^mP9^>gn#45w+N#_;GF13S%;qL>|zzvfU|nq6bs#-*6Wd
zeTaD?ateDx7UGU7`argbC${81cZLi@9&-LmS8!*SInV6vA<tLE0C*O4NVEP!eUMaB
zLGX0UZ@7ix9tL`uH<PY&$UOYt-70%1x|@o2<mqVs%3IyN7}Zes^Quc^UDQ#cuKY!?
z4_Qy5jb4}Q^pa}4ox8Lb=2_!=y6efP3mw*b@n9bJ;xjgZx<-Zpp5-2L$zWqyTy9jH
zRaW{6i)<nss*1hSeXV!<u&5i-05)aqeZ=5`%Y!{wfl&#?kJND_2CY+cp*&UBICx+2
zO>z}Nb+Sc+-1%*VN9QKq)db19e3viOp`d?bV}N-j0Q&cQ0nb}+2TIOT&vldMN{~>5
zFn-ZO?yIU}zM^J!6w0l7$$-+D2CpUYS@79Y2w80qibBdvU|FRFHQAilfm-`tgXJSL
z!lLBdpfE*d$KNa&28$f0yIqHSTZmMU53k=`1_Et>^li(^9rOFzi6h&)^XZ3~w=T_-
zr?sOa;5PER%D1yvcU2P>+^uo|rCNQ2=hB3>0`0Cy)Jym!aoL!_5Yh+q^T*tRTCOX#
zJ<)lVN3ck4@k}vMABMLBG<lzj!-YJM5cf@M>9H$057PH$!lSF3uvBlUOsIJ0_?|6i
zY(|7sXd-*K@a8SxI*scvi#5C4jQdo#D|J`oN2wWre>4&N`DAWEewsFY(CG&Ys^T@X
z%a4@{ITA_sAuTH^u3}gPD?G|3TnjH}mv_D*LCgX(-qN$uN5Y80pHZj^jKcrm#du1n
zRQ_Zuvyro#g<NI|s(Kx}nj4ZFKEduA8Rcb}W38!*e%ca|wce1t<}=0P)vN4)qM>J^
zOI*~6Mu-y@SW53=K$vP<k%U9^#s?7moN=-Tg_?=^tHc!d*91EZSD;17@_J!`&FeZ_
znx(ML8$wB7mN|Ks^?a>pCh9sF0(mz5XP#5}hoK@Rcj`L=GaE@xE*lfZ#9u+&QO&iC
zC#&b8`Tm%jP@`gu>azx^yo10mf;jrg{kL}>2oH%o0WWjO+rz~giqSIgQ2Zr}Ol{sp
zHolw0>&H_?0kxQ-kANo2ZAcc&yxjOyEN?dE4HDUoqB6$2iurL!s618<u=1?AVA+8q
zw)RS|piw7D9@o4Si`1t1^>Hi72<iw|iJJJb4|z-{`3@_iHS6UDXC6)j{TBwjIq1W{
z!)HtSl6x;n4zzPRVK6Y!ynukkhQVJ=q`Y4OMY&e?CB7g|U>{!nnv+$lfseuSf}jm5
z2!=S6kl&<<F{h_HCSN0AKYNeIrBPCcAsE=T{OyMvFf5X(h_0B41Sr9e0*UczgJj1r
z8*Dz+nhDKex6%}<l>=r<fB!{vS=l@keRBFpl+!>`SM63+Sdr$C;JG0Alg|8vQR8;n
zQ2a3~^VI1bDtNT`4V7n{I@F}my`a4!Z8OxABv%9)YcTi9Bf?XiKDiJ>y3(IoF6ijh
zE8v*JOx4<VyK1NbTtF1THTe)jg6jQ=kVD9fb2o)=eFo8xo0|uny4^<bMK46a6{>3j
z!#7P_r(+dWHYeHjWOw9te;Nflnw|28Z16NO>^cP_{X@WX{TiKZ``4)<M*gRI8%IOF
zG=?Y`pHEa8{7QbuW^_(hhU8W2fj1U9_SdY-{pR>K%qPrdy5MZ|E239j>D!{}M4f=8
z>OjjZ%)bhl{9#0vFgbDv(_M~MyWMUlyYl7WW9C<){Fz13R5mTz-@@F8Z|<k}SIYkw
z4>k%6^@dx-`r1*u33*+V+rhk`GfhkX=CH4=f;vLL)>d7T#^ai%4wvjHoW=$T8r{4<
zLj2Np#D7$?0@J^hgd|*S`4y%iTP{@PZtjU*U75Q?4c^asi}bBJLyQmnkfA@*Y5ZhI
z#h3{=XSFphq+Su^Yf@rE-Gn>g^=w`dmhtA<BtH3KFTm0yi=srJewVZ%v+=RL(yAVG
zff@vq?pP3{YU}6CQ=70+S<-uE?pj;w?P7Fhh~odz?Exjie1!hYilSsS1eXgA*SDr5
z{>Gv|@UiYONv^9)!Tb`aOb(0xC6mDzFkLWHaEEIyHiRF!OdRD;`;pzKyjk)DO|N8M
zuEXWIIuOwv25hC51o`q0{$G&`IXch4diE4vC&!P;-VK~bQ9WgG7xkeA`Z8VhK4*2v
z33W_fO?CE@3b>WVDSC98#eu(lo3p;HBW)}*hWy-BY@&!@u(`5<?KjB%<*~XPRAocK
z(B(s`vEX~jSVr_L)}!jNx?j)^p`Z|qLEB-9AWzOkX}crACw+T7Rrr_K@3XaC`q>`3
zIIQM%Qf!rFBm=h{DCH?oeMRfeh^B_UuLQXTL4w9o!}c}S^o}_7^RL0j7416wRJl8N
zH$kH|7~*J1>nAP4#LPWMg7EpG_p>@f0>T`f!3mYHyXw!s7>k1hf&^)*549;`g=^Yv
zBDB&{5jf)6H73g;VaWn=l?U6*Kvo~Mbx5er#pFSn`w37S`jcw-3kO(fbtHXv&D7Jm
zR?+<GGnB?tS((pa<{-pd9oFnPpR0HVlw|+WOaR+cB8532p3fsSqbUW#fEkyd7fAIT
zyQKAj3hcX>j_qQKNEi)UQS_ud>*7;>`!OF&%5I`;0&na!wx}wtNDB<P=n^H=7$i=B
zJC=2P>uzDL{3J>sSv^~==gj7gx0^=$Bp*Pf{UuHkiGnP+G$}}=N~DfTnc^i&n-Ude
zhA<dw;&&jti84uCH&L$LqsYlNE|cxOHRO0`VhBnyG<y<}zdI46Wc!KOr-Dmfh`#I<
zc-UPz!*P@!9Hs#;JTO(a&EI5l6b9m`<dS2?JS(aJ1>rL1Qeuh(Dw!NWjWo?P(M!sv
ziE~|@?w!>zs^Ke&JNq^6NVaKGr5Rjph>M}4aJBHRF$6L(IzYOi#_m`vM-jkj0&3s4
z$QcGk&6%)mLbDYGxurZq+ZOrigt4bzYf75J0Z((XE$_^HqOUcKlF9&cJ>@P_Ym@hQ
z9}!|j-Yv-h+X-#vk#2vD-;tmS|4Iwu-W#OE%;db}LXJvZ5=bvHF=>do>v5<NRaFpH
z6W9~dM0$vtPnrxQ88gL!d817sg$f~|?}I|Ng_<&=<ZloMgWH>{@Db?T&JeA>4(=2;
z!?hfh4bCrS%c*u}hcyp6c{~vJ+D9+1*A1`|BLc~kP42bNScD|79m;Z<xMJfr->oA>
zL7jv9@{H90XbFiWXyj>HJ!zfGHO{$de;prco-^i%X%sx}U6Ltiu@qO#_QxY4J;(F#
z{kvwy!%W3aV2z@%P;t1@{bVQ|S<+?vme814APBWKE^W)UqIgSbr*mLlR;J>4xHaPW
zS<A7QqNZJ5#8G$|NV%E3glP$=3=Hoy^Rq-Yj5y=s1~qA(WaBzB4B`649db%4tbDes
zGA9OxdO+&&btC-A5RYe6(buFD*ws_d>`>p)`^c2SCD&pQx6SW#EP!ASc8Nm9{);|>
z5kp{;pyN1dl0#Se7XdeS1Ye)Nqcj{i32pMOY22&VtZtoAe>MrB3{q88FI;McF<7Oj
zRdJN?v={#U>ut%NCiQSwR}O9SLY2Wk!AJakT(e`6o?FFEPY625zY3u6F&Tmku3e$#
zDY8>Dk7{=u6ClE_c;^VYo`c|{CRpawC4$ZOWl@e(rs{9>`~v65;b4I%x@@l>1HaVH
ztBs?3LQCD8EyVUuBjWI`T^Bj#e<F@G?71oBB6^%(;FZ@xaU7w+8i59Bh->V^a39}F
z)};zHf>dbx!t)PeB|-NE_Ol;{VdrMj7FX<_g^SWsTuWjlzL^ZSdFG9=Ik@FYD5NJw
zaRdMoj<&n!*eEx!K;xw9(7b{+oCzyW1*PXjEJ!qAGXjwHf5jTZ6R1UDWn#Xg=6)?I
z5*Gw9M5+D7{nedSXXdD$UXa$}CJ1fCc8kUOQ;e@N3R3|)j3=xL17hN3Hn#!+4^q2r
z9=v8z(;exoGtgU)Oyo4-9E^qJk%x``_Kq&e7Wed1q%egCO+y%EQck8g(*pJS$(mXP
zcN!zxyM*UR9iv=r%ZM;^cYBWUxBFL;1!IERI($7xi^|{5sC6=D`*>(rNEZ08b5fnh
zpA({z_tw%j=0a>l4a||UcJ2_VW~N67g9JgvZ4!H%=7}dU(#rdxlrz~3yQ?Aijik~B
zY+t3HIuw_*kY!<r<b8Z%r+R;JskFrc=ImtLr=x}zr@MYs@1nt4BhaZTyH%8?R@e3g
zDA^I}#$N_pa2ck|%En4@f|i;n(Z%H01&r+9m{<_!w~}&!W%7mZ4;!T$2}yfMaIK87
zP!WhHLQ4|g=x+C@3|_;nfQ$|dtfG;O!ZN^Br(}%<85$Cjz}Uv<er8i5jG$VOJw)jZ
z?p$B*<!%bnx6|h_F(yU7-#<+pmGH+&ATa=H^}7Uhma)gU{`5qc-TcWl@3I)s{TQt<
zUw(^u?;k1D;lz{hpy;r<A)%H3tG)ZTYCa%T4W3iuC&?WmrHW4Cz$p1@ule!fDox3;
z%7puEeV?uJe7=F%CA2P0Z-ANMKlwg5?Br0kK1O=Ang`ZM9T>!vvU8W%GZ405ffHK*
zH`D4cXW=5V&luMJiLD%rkD)Dfm0S7|y_w0dG*2*o!k_Sos7YV@5Tc&}tf1s{*Q+6+
z6r3cDl>e0Ze+dNK%vsn>S`%93U-Q9X$s*9PDPOJL52Z~)HzRWgEb&y9NTl+pW{uk>
zz`VjiQjb=v%QE1M_CYTLg1k3tuU3`esoTOUbIvW57O0xo1L?`{1ApV6qC=pml&q&!
z&@1fO1@81(MRkj%NfrE%YyN3dV<Jlqzq@<4sXm^L8Kg_kVn$CtQa?0037rk5T9h3M
z<dJ9tyO~5J#+W=C2BSx)UcZJ$)a>v<RQyQ;G7I-;c7(V4ve$bRtV>Ohz(c1E;UPA#
zekGkxcwEFe4TjeISlJAk{#IP|SDX@BCE7P6G~an<R{_(mE|K<#elhh=sn?k90iGoC
zI>Jx>Li<5@`pJnaFg|V&V5!e%AhL2Xq<uxT;w8;D8+#}hl7+``GcNKKmOMSlF&0`Y
zjbr*^DTf|Ktr=s}y=vXPCpSI}(O&&OJ68I+h*mNS9dpB3mYS`oM3yP2Q%vk&@Kwow
z{ZRh9W*8tMR6$wR(Jb7eVh4`pp}v-q8blyzXn4raLd5OOrsHNvzhoG0gu~b5VYn6A
zIt3;;DqxU#VepvrodAPu&B{f$)dkk1*}m?>(8|M|#krVtX2}JHyO;UyV5Q)FDR+X0
z<xEKf!6Pq6zjI)>T{9b7zrDr$(N*K2Q_I24;~cj6FFrjzicpcRg>rS5<sN<{Vm~=}
zBM)-xag=^;uMxWmm53c0lZzv*y{Qp-lY6_qTsjF6zEMBn@Te@nfMpKhBRD-Ki-`KW
z?lWgEmlbC5S2b=dTpe|Y^4Y{2NyUdF5RO87&L$rr{3BpiMxv*<h8amfeY8=s#8}Ix
z>q7{1m5Rze7Z>AC5F1Tv|N8bmusv+@pvIdI?BuSI6?}?U2qM}#tHKe{$9}qBuC{mf
ztK-&z`zN?uJN*j|`{S6Z!Bn47f4PAVAn?)Z{p?Y4Ze$AKi@+J{{0ds`MWFKZI<B@P
zMN?Z=;RU~}UmHx0pfoYGrayqIZ>-PlB`^CO{2@f)y3V;L`ZyS=FW?4}wiH^<TRXWu
z7R2|pt4Oqo3*iygmqXUd26r73%xA^a3FJKpGb|(Bw1V-(6U`0FFC)FQg7Lu<&67Eu
z0?m7$tp9&Uqrkfyi`C58*b_CcH%q^{5};Wb&tR0^@`(0~n>(wXSIYyxMUq?{(y3~<
zlGu-a=FH6Nr#7H-?ockQxcKqY=G=6zTb3N>H$hubtto|!eJu*SHIAwL?6B{*Q{Ts_
zeBxC&#+!N=dQl7y?C2*N{XGs2vE*+Ja;F(CkP<(m*aOe(y9A9QG5}4{a(C)TdtMFp
zE)zR*3Y9t1CAd@u*k&nP-u@ZBEPHx0>cYDcI~QbYhx&@0g#~L!S1&Sm<NG<5W9z5m
zx0yt&()FPnfGH^VY+kFcWU!p0-Z1>I(X=(t+cH;<ezO$WO(UXTgY|poMv)m^`vEDG
z?;I0uTAF(^tGK#Ba{90-75fOYGq-fb##3l2Ov!-mtdr#gZ;Y-oJ$UPgD#E+=vH7HW
zA@908>wIz*@IUx@<%lppxFJA54E_%Vxt^{r|7+RYmFAAaz9fp@Np1R%^ReTXM05#C
z5{aL#QOQ5bdIxfpqb9xjHgNENuaG{*0lL_l`=Uv$=8KUvmykitd*0lSvvTfAe=>^T
zP7e&xCbB7sRgV2a1T-3*!nSHf7&5m8&HQ`~-^H6Yz6wpK7|6I8VBn!{#gr9C?yn|C
zb<&ez1f$fA0M``HN5m7-1B;H4!o3}>0rx>PN#~=35k;&+8!QqiH>C9i-A{-Pg~A0v
zK7lvj1;zfCye>D&mKhVm2O5HYMY1aLYAm7l8XOP1wsiD1^t5YiqH07ynnjlqcSy0!
zDh_}lQ1HuLhJUgts?%k>AU)1cHb5@YB6qVkJzEqIctPE!PKh(?{aVFz%<RMG*Jg12
z_459<KF9AGiubWu>n#-qFM$H=g_;-`_OMZ#7tVDcRsE}y4NIio^p05>uNwi{l)tBq
zNZ$unG~;5#8aCHQrHotI8OzY9^+cS6ShC9ZMZ2~h0c)v{A?C@2U-p}37|#b)Ef8%$
z?Q*^)u?@2P+fHsTybqyY*tI3ql-R)f%3_#9IyAG@6D!}MwceEj67%=Lvs8psbw@Ur
zpj9B>yQMa7uT1(Brx#832Q4)bPo_8iHofn-q`O??PsP4|j6IBB8{6{|q9Z>+I8qCa
zji<5c=!~je77q$!Uu~BPMVH^vg$`dB@SRtm<?8*IG#EBkpQ+R^1bw7m02#0MAfsv*
z1q=gB0@gtgYg7%f?*!zLbfsvj^-u#F6Ayc@m*@8jPY&2C1KBk20;*)NxznO(U(Jha
z#{AaXeK%e7_U~>m1MbWSEF=A8$3lb4;1h*lsdk&oim!m&?%hH8GFKsf(S_>Tav`y=
zSl!s#EIel5nZkURda5Yw-<`>TM6^rU78(2k_lj*f<JCLk4*l?`CUPQLgp|i(JNZ#n
zcFdWgHQp{Fc9*%BXDh7UjqTbpwm#0x?A#ovBSnnr3h5Gr)MQ<wu&I%0rhqOJEtuwo
z&&|299K<idY~};Ug{1hoI@Xqd)w=Tc)_EA6F-Jt{yQ<k(oVjBZtztyBBf)n3-DQD?
zf;Rd0*ruaUOiYIYLoZoFG;X#=@2C6FvDJ)fwDo@}1!C{NJ(<KH)%bsEpZ_XK9DMJB
zL+>N>2?QSjMMU_aLhNXFxyGG?J|Rm!UC}FrRw)eY@p8*UMk6_L{DC8zpen%IVRHd4
z`%py}F}_X^`C~C)Ly|#t=E?nbK5H_b4s}@>W9Csr=8Q0y+7>6qpNsP{oxRM?`$l9E
zbNnApZshNa-rrxsJ~uG;3E@MAS6^*u6#D#MLtOsG8{Qud)(Jf~s`V5|&j#r{mrr8h
zUqWuVdAyfj!${tDn{R2gmY0+{W8020-tNIv4px`93I{o5^OcGI6aPm1E9e|8_buRs
zZdU<6Z~6eIc%O?5o;kU3pY!dEUy%Pl@u~Xn>vdK*5D-uP{{v0H|7BIuzHr!(L<3y+
z80Y85n$p$lCmgj4lKjlkpJk`9-3jkaW21Jqsw<Ta($!jqeB0q;>+p#vB+{T6v7*Ca
zCw|D?xtw<X-P!~F!F(I6b-Ect(U>*$9qrz*6g-g-fE;+s$hh6-Pypy)rtHidO(2#;
z^gL>JR760{j+PGb=(o-%Nqm}S3B`tm|B*{68js6T;{~DKt~D2uq7A-VBotW30zQ+*
z90@U&Ku!g=;RG4stqOrgfGqD%&>FXw0ahAEQ0K@X3D1Iv{8_*rzbbrhC|P(LM6I>j
z(GuM7f^BivHJTSfJ>^V>%R3P1>T`(P7eC0A$Qt3t&7ZAUhDhuiLDsSt&J`YYrrfcB
zGgcRU81C&oLonk?l^Q_I@m7F44R*#Q36RZGAMU0sv{`Y*FOm%lrN6b0aJ`8q|Bd^e
zR8Xl$$lWI$qOvL18sG1j(1;W~5zQOV-TP}Sfpn}azLq~v+^~1}Fu{(m)T9*!vfuS~
zlSJww0Ev8zLYT4}@kb>$J6KFzAqgrA{A+H6U%&%buzSM>#6ZJor^}`d7Yv<##XC<w
z<t@1y)mlV@H%+|Ptrtj7Vs)*BGL2)|J;4Cd&5pjV=%Mt_@Uu}CDT-b+k2q4ue$vMg
zW-Ow$AHRf*?=*!HAqY%Pr+X6&TWf@3nfpM!sC;o)vuAq>F0xv7;clP~WS+_Ej-p4s
z8T;IG0zmh|L$r%a;a7y`oX7Q<xhe+Ilaj;&f1uk>%7|NHd*FaUEUoQwge{WKsQD1S
zW!Luwu+j^~OWUFkcH(Y&ePaY>LS>6a_7jG*kqEv0fGF@kAu(^IFBPmvAZtWSx(^JL
z9v7wkiz5b5JnSF*-cNy&NX-T|6NcusvuyeE0$CQ@Sv-k4jt6&?@Zj&nVC49H*D`^;
zQW~Ru_1$!fbG|}QN-GIM&UHt25=PG~B?<Epr@0gS)I$KI3lg?YN$-dir+)J2HtGAW
zPG53i&EYfBZ}Q6HOdLW=2*(p{>YAA>Re+N?{Dm%F=}|xOLWo~sN%iRoSFO)5hXTg~
zD`08<w;~f;ag60P?sV@FBU7s;y>MwETl{^W-LKGLxD6*WLsyMuw|B3o6%;y1x7J3=
zSe2jK5MJ^1zbJdh;NGIH%Qv=d`^44>PHa0Twr$(CZQFKo;^ZIOw$XX-t-4kH*6n_}
zch#s`pZ1rvYu8+J%`tu`*a?<Bf_l{+W`FL%W~+r+@bKKqi}94MQ9rKH!1uyYR5#Ts
z@+#0ONi`LfW=0LHAR1|KB_ee5av#+PL85)Cg7oT|{JERZ(gIoOb?*co?V=d)s~&y<
z*F8)Iy6`+A4zPc=j6Bo0F_3tgo`^W2Shuf*>)#gnO%uubcd%t0=XaqEiJWM|N5eT0
zhK-YpgJr8{%0}!K2e96nwY+Ch&9ScFZ=7V&S?Hsm?PA95?^wnREO|R1rI5BZkEgxE
zRW}4(=0&Pxxz~Pwo_)$)Pt(^h%zWSb+??HAl%BT|T4>1U1K?SBe3(;U;4%nxFljSK
z&GDNyoLGG*w9o#bYmgaLwU>|ZY?t6RyGvvQ(W<joF%Z5PzQgir*L`8L{d&sHM3Ss3
z;8&B7YtER!y(g6abr^M%nX00&WCVF({HSE%PV4Wp9HST^fayp6Wxk#KxQ-@M`uSLr
zM@w<U24MD?YE|c6Ki8^C`>m$_Fo}WLNdR!3hjRCT5qxJ=-cQJZ^i82k@3?!+&pnPL
zQ%yl<E2Y_9)PHHqogAV_l}WR_XsTSi&8E5C_!zd<qY&<3;00$v5HH}L-U2SQ6>-!k
zlfX`-vzUGbEor^0@MO~Q-F=LiSN-y<TcYh?gilf1Ty;;1{!)cVyRcH<lE1f(VjjwV
z%O#drks=I#pynW1j}pHxoZEIAe|vZjZoYJPtlZnoV=C!Jd^^R@>nncV2y&T%wMO!)
zl^;{f0mqTX(t7mZFE;a;4?w`|@TlfD&ubj~)97|Ubs|8}Qy`xC>QR$ABf|by@<9Eu
zSGJQ88@%$lDq{eAAf<bVU+Qo)=YUW-!C3m#_mD|1-_h;F?4}hPs$u$XR=204yNkWX
zx+g@sx8<Y)&qiI{r*)XPtyv(N^5Q^}PZ@{9%r>0gQ!F(PvbA%DJZl-!KHJ;aDPM2|
zm&26Snk_~?3yV$m#JHx-7HrR%bA0aany%n-etSB*Y%M|DJoK`@nE}-N-GP~r19z~%
zhyvw_voJw@;WWY`vN0KNxxF~#*TlT~aA4O7kCfMRfp0(lmjEp7d_nNX4riw&?gFTC
z7@MukpzZhR$%mEmg*lrAd$Wal+dKEx8h6?f#<Y%YBiWSsmX|N&dzRyP{ChmYOKTJT
zQs*UeW4a~{&%{T(`lFZ~9<L^i<G5-zt?=N#9ajy(XB$Sc{i>^0`FhhXJk5-cUuD@j
zS{JyO)7|AU|I$X4RpB*IEK#Rk6RcS@GTqwCkF7K4m~&iXR@YT&x;G_AH%vP{s%AW}
zwOG-(uZn!r*1W1dj(ON8ncq5}vo0@ePJEwFDtJQw{asHUs!AkL-91fXS}<DW9oWXD
z`wN{>I*g;!P(*(`Zt%P14;5ji*RlGdYtD=e=|=C_Q?F=H?9y1@D4!$3tJ{=^v`YSR
zSI)FNfK?=6pG?!7LOCP}t+MwWsxo4gak{%ELyX|}bS#^J6MD}QX9cZ7o7z|15Z}51
znaA44McAczg+k_I)8(QZ+Yf6zHaOFYPgkGiX>wHzDaRdmsa&@!`i7c;$<0S~oK9z<
z%yd;P>sFDZ_o6L=M}zGUz?Y2{m%bu?6KWe&*zt8j-@`XfuTZqx*6|MaXEf2Jxj^tG
z`%$-c;Ir-O*=jvoxR9pBVCBx3W4eOOXxJ0vGYx}i{7~?ySa74w-tg1F?55PlqA@8&
zx}$davcyp>c0IeP5>P)IQuAg;YrWK<KQ|e3?R+Kwu=c3O<~^#lzhU`%4I%<ogBPJf
zgUvpNy29Mg3f}{+8tT>@95f2U07maZ*ia~=kPOoq={csV1>;d(Ajxafuy;qEQlS8-
zdiHdqdZCq7!^2wnPlH1yRQecsT#Vx|c#CmOQ$~Pxv1Ws~Mk0NQCVKZ1scB{Qj4GLs
zew3?%nz6Dnn@?y#L!er$woJCzw4ABAk0e7eO2moa>8cE{Ga;8?(Y2JzT}f)9oH0nP
zki|a=R1eASObPGZ>f8om(5=OQ*MjKnp;Nj2(w;XQ9dC%-Uw+CV6Rz~{XDT@6HFOHu
zNHl3vlalObX-56AU9CJ88Yw<}+M4SFk6kL~3IBF$)>4Cwyrt--?re!AEev5CpM^Ek
zvrTMDFQxl2GssoeTdZZulUs_KSIv7|*0#{BQBxFuNaO!j%^RF518EuA@oI6N>Cghj
z$Bali&>JnfWCHGuI|)+*TDVGLM|(&-rbXalE~Mg(Jc)0q+fhq<{jzkF|0TL=R*tR1
z9$cayY=RqhR7T~yYI5Cu!QAO^$Zef3AN@%*=i-2$A(>o5La(cWUHDnZ|JMRQGC2`f
z+_|m0=RL{~^gq|529iV_slY%$=07K8ivJMrZ{TchWkhdoV`BUN1^xg3AuE*TWCwnb
z6(zcJ(&7jDq&R;{;)Su$B}N!4hakzM)F5bW8k#_vf_z&Iv+KB$ixFE(pR+tY0G0?H
zZPn)R^&s2D7c3EKK(Qk&{uJPDYd+xeK8wX_fDTdOXblWI?5Rywb>sek5OceMnLKOJ
zcRjKM-ZP8^SDLDkAi6F$%o-B{S13gM=@WtqPaudC{TNR(l5?oS3<v>2jj=0UST~6m
z#Yc(C@>_E)MqEm9w7#?ATRoSzHhL1rS?7Zqs=6gDcOMYE6S*;V9=8*{ePnorPmX@F
z1p;iS{rJBnS7`8(RaGPLvb<kcm3wF4;e;>S%;q8l$f6t^IDF0V{>32M-801{y?I2k
z0cH|+^VCi;EW{U%8P~Bx(|KYYI3n&XLDS_j>TTv2QG|Ic+zAvZkA{Vmq3c;TA)gFc
z#uKAkBA@=ot~wM#cSrv|`!WMyS6W9H(LBrKQ5ML_1oQlik~W$Nr%d=z7f7#_7H+J`
zx%MjA3UhdQwpuA@{Uh|7&~MwKJ4i0WIlR@_fu4ahy1TOfTUr^o=c}I+BoL4>CJ+$i
zf7tf_C$mh~%Fv45?0>iKOISaY+_77p-h!DLZL$JzGAI#*brp6ouSF0SY@SZ7X;Jbb
z;D6aVbK+R0fbZYG3*(XgRAsMqNDe@HmXvPSrmJ?Y`cXs;oN$#`asU?=x^C^}@@;g2
z*^r>nVkosm59)?z_Zerj=}&3eox0nNLSt<pi|)bOYmSB8XDDWZMRCSKAcPZB*WWgf
z%5&ZbljM}q`N`?S^gO}|rU^_y9VfOW^+$MsjV)6sfUpAbJdnm}`pfKuQ`G3uuZmN&
zpbNA~(+amB{q{JjvKwRqZ#*?(&0!efiV8N5+Q6GgNTXi}3K1s^Ot$0ZkRW+d>im3o
zScI8_80k{Qs$Iuc(8^eFK;0I4a4EEx1YMWH2QfwIz6?dsr+W^_troB!i+~tXm_kf+
z2gvW9t5F5M{Z<Jk^bI0}$>YkLs^xcrUr@#!cND$>l1_w>=!I<B#>MDk)pLp_8#bSi
zlOy+ZJ9$ouhbdfG2$kpsaFP>LG$tAhx2#_$2fOLl@sSAP;T!WGPB8^}M(ON7!AMQB
z*qv0^i^q)oS!1)nTCYJD;>IdCC!ZYt+%$5s)sdwH+^@R%Aach__LbX=^6O4tQ<5h2
z9%HTHKdAKSaw&pDOefs*a=a8cbqy=Q83$7Z!ZhF%q;tKdh0~z^o0?pm2~a`*iWfQ$
z(h{M~|56hh>hL{1$hZ`0<)xMtRK7p!3v^2Wr-((Ixg+s(EWJ8@_(zAaV_-3DJ2g3c
zak6T}mpwHKQjC*y{yG?D8JYBYw70RNd6j>tUlt1@Hsg3{al3oxl4qqN-*dwnlty;M
zbrs6?l{j7bsxbw5Xf&Qvb&`7%Iz7Hl?HiEDKTHXOSqYQxrGoP1P-erR)@te1+p%?>
zUvt7F*_?6)W6lpvf#=4O>+>cWHEYHooXMn4GeA$@5ppy?0By_e0rjfL@18kFC9*UG
zgDx*c&o4{eB;3*1SaXYBUZMZ?9c}Y>-MzW)?7}UQj%hWISd*Z<b<H7XeSo8F%c0QW
z_twtawc<1Mqjv?(NB5a3>|})Z7Q!<PtbTGs#naVxZO5H}bK73qV)OUy*&BmtQGkaX
zKdfi0l8@9vcK#h-&El~Y6Z1EFkJ2G|`ZdG!qfII42kP+hTI-7^P03481G?jD7Sa~q
zlyVnUGm2j?Am#w^t0GA<M_i1gUT(nsTH9g8;y|jrpRj|#bg0lQLKLuXR9Da2d|Rx4
zhxNJ(5!SrKi3BE0<ghZyku;uW{fw{abCQ+9I$@^Ez)pSU;q^VsmPF;7D={ZCi~veO
z&^W7n+a~Pr9v5$x8C6z}rf!$RvQl<;=&hXaU{S>9!k3$k-CaAZGupkieF?vT=(2uw
zY)e&W1Xr&GrwrcQ*2d^jkz!8={OAM0I?*QxaW1(Mf}73Nw&?{4DAb@xx@(Wx4FiAu
zML61w2071Ap#CzvrwH%4Tz3mnZWAWP|JPo)t+y*9=3nLbCy30LPQ7QHHXh;22=2h>
z0OQ|Ir1+ImiGV<`5?M(*jNx`WF(_4Oy*xq0sy^Vqpcz0yk~6zeAPxPiuHpCO5=7AY
zK(XT0zBc{3x8F3;_D@mu%W<W);rWTkAeQT5n_4bX(uuE&iV3ThtVO%n72(v0an@I%
zE~u-XIxoWZ8D~OzuYar&;&HP)+LbhftvU)^C~%CS86dpwi_Q2qDyc&(+XD6GxnjGS
zjewpCw-^MmJ~5f*OoIMsT?`~A0IP&Qf#fo(??3O!K@N(7!1L{0rRKAe?k@-N?Bz$`
zf+&ocv1isYOYc5XQCz=J`X`B<rVeTDdC6ga`}H0F$-4ATaBRRL<;xjeLC#tvg#%qC
zp|cy<iG?Oa4`f3o1RGc(zC}!^qC4}#^t-<oJfeB%Mtd>)NYBhw(Rr-8nW88{p!(OG
z>k&?4L(2;4UFlEz=1t<9JJFo>4p9NZ>qh}kQhh}dzblwpImr9mxRZKh&VTgP4`!N9
zAjQz+yMNj;kwSi%(Hn0{+o2zywjP8}Vd5X*Jn)VE=yj|7!STeo=3M?2Vzeps4-;yj
zkK%-6yCGBrfVB68`s@B0yjbwj#7X6gzJ4JRwhkuysaHyTNe8I>U*+k)6YtXnF*AmL
z(wRN&@P@$<9ipH@uu9T77v6b(1FqNfv~wQFLN(w1mO?endrS&M=j2A+K~=sGTqc01
z7qJIs?+IEtER|9Ne>$r;MQfReCbsTciDoO6F14Yh$BwEq1$(w*=)mLVZhP4{H*5;}
zz4cqiq%exTIIC!42$N1>C&;;rLy2;c6h+|%PH}t*WeI|z8UZBRv`*?m;mhzt#Nq~o
z=x{nC9<o30P|L-OAadJ<4LmO+5!ALIRp6w*b^x-{4HRuCCc{ImH!`W-H$$F8rb!&2
zUgBIvJhX#emX=rjk-Q>KDeAYxi~W&DNLvqgB?ygZnThf-+YuXsLk)ksUa@}Z3W;cB
zbX_BtYF3+|g|g2dQ1WPmH`fFVEWrftI(hg_DfSYy!whE$l;gdV+orQct9;E)eJ=O?
zd*k@8TJEQr`1AaCRMY<&Jof)akm@^H|6kym#Ek<R6;XkJ!Z?6{=>J2x@Lz8>HPd%A
zqtkb=c44Krv-;mv4ToA<uIr)+J`g@4p+${J(g9!+a}7pE!YK?6qAp$}mo*d#RenZ^
zeK@T<f8y;g2pePHI}q>rUJc(>*aU!3iicJYF0%0P6M=A-mQ-~A;`*KIhRNcHW!LY!
z7WE?KM`?G{BLv!^b2;)Lch{_1?^{yIT2uGH7yCLm&~AzL`;JMFAj}UT6s#aY*8J)z
zgsy*)9bwiSE6)e?pRS~f^QS1qzbRpd7Yz-mqzWfOSYqp2Pa^Hr3exael7A2(o747F
z)Mu+t;i<v2XN@r;$1qU%V|K(G$`!S_pk%t6YBLj{PGa_R)(cqq^J@E}PKU?2<M(oV
zeH|UR^I<@mgPAB%%95C7QONq8#@C@pHztxrJ#%NDpIegpf!JT*2(n(6ab-(m4$AVX
znGTEj_7Sdpcpi|2KMcE(BYd1ncEN8XKk})EQL18z_5;W@dQckk0vJm|C*&ctW?)OG
zn_Tu%>H;m>;}oQ%l_vku#p6<Q#2w0wWA?nCuP@l@5_Iv6pBgYF6Qy&1X#*8lYKbaV
z`MHKP2R`ZuBx&FXW<c?lpkQvO4=FMy;QD<Gy*W|L(MSih9}eU1BMKo$Aq<S!uV%iQ
zVk5ZyxZV)~)$nVEl;z>6p|!)4g@K8rWjk^!h<?F;M*j+0+lATpSur@HLfUZFCv_6}
zEn?fby%wx`nm)Pg&U2Z{Y5Kt7YTW2KR3^<{T*B#ZgPEpn`Y@=G)Q{|Vf7NYI(hs$u
z_w(`kj4wxx#f2d;#!F2(ii5A9l-hyD4jNdHr_^Ei<-ArK9YOhD*MRMJJMm(q3c>wR
z7>deIW=p>DM0e5Od4Z;5Zy6H<iQv_a$<9SGt@R=#*oP2=g0b@-iiv%Zz;3}(+aUuZ
zD4`x(lf^4V;ms4Yf-L6=260HBNMQ72_VXVyVzVcopNMZJq6{qMW(j?u#6C_8KfwhZ
zI$iw6B!l9IiSzDbNU+DM(+U6&UsQxqx2OFL6gSR=fFuUMxRU^ij36V5=6_5jd7=dz
zk{KftCF#bI7d&ad8L2G)#R-wL+Aiv|yOb06K-C(^71xFlil~%cn1v=EDfaWa!Km}k
z=^U8`b?By2ue*nC>DNahcc4aaLH`*=E!~oZfJ{#T@gOm50OblX(^;P$GO-S*pXfB2
zkS34s`;}LUPMNL=rXxYfe4yhQsp3XFs$d~fl{8K|cE<woLouZc$N_`-`->RSax_1y
zkM@URw`}jD=%cH8HwP-&hEC2=xxzssnP35P2v7xkTt>l{F5UZgZ@Y~qSc#D>@k@eq
zfKS-x0dz)?Oj)Rr91rws0vMFTEjNTF!vLxSN}EP~Z@s}ycA$>LU_Z%_VXU8$0|=8H
zsEHNOFnGnoXo+nb6q5z|2Z1YKy{x1V_?uS{I50<jPn55I!`%-?&yz&<*b&>bF9f3>
zZ9F|_A#r$g9=--!+U+teD|)E3BJBM10HRg{&CQ^lXG)QXe66*(NuhovAX}C`izu2J
z$<Uy=jwBQ>@&zuRiRU`pHh5tyWB+a3&xz^ZRbaz7p;8CZGADv|gp1z6F!)Y|X1ycJ
zfTfpfv|x-Kth8{Z;5E+g50Iyi`*@~{R-5s@R07=39+1zQ)bEF?F^h21ksdefqDb8@
zSbhZf+hwFtEbgzvUZGbdDKEn?hGCY;mJzz!?0QO_zMMU>G;)CWK#<C=VXbYEuP&a~
za|TH0gMeuen4FG;Nc!hfJAbG>)J;{X0C^UekC9B^Y&LGiTYFvM?qreB9HuMPxYLx*
zD6Ab<O3y0C!0C?<)FX-m*so<oFe7YD*7n&v`qJ_hdOZ>?gXlg{%zfDtYm^*Ugz9Lq
zo7_Lb9z8}__|!He2~Rum40#VSSTB}twkD~xA@?t2(&T6ol4?c%O>wZ@8K0THlR>^b
zOwv4i8kE0c#Qg45f<t$-xo7}YW^oe1>Z>^fG6OLRleO{hXupEbgaY-P^SDUfBT|+M
z7%sDG<w$H|v?=-hG?8UCZV_-RMR&C)(d<7>iq6Ghbks0h{OLT1El=18e(S2nY&yhk
z$cT1KRf2Sc7AaY>Dof#9Er-nEv_@nMVXCws+LW^0alkiix{v|oa>e-V=>VGqu05b`
zt%Nr8DG4w;cS(H=;l-D1p08qyOR@{Y50`Jn-Qo&Lw4xBBgtDyDeA0s&yT9};r2uss
z9xYV07*1rRm$wv3VBU3`_26T&^%I;UzJH`Fx6;glHY>r0B^%{dgPTT8@C3_F5jbc{
zrJxEW({K{Zs+r*FNUqbGp%vl8%GO5i79nb87-KF6vkL;yyRzL4uw}9osai`qDH5yI
zB^Sh{Y-9{5<TGs{D->yt+2PH11a8jkxjv=H@3(ASp<qA8ShvE)z9D;ka*IC21Mi)9
zfPqj}USp0N?~Z{qCrJNe_gT=vJjrIc{Twa}KvQp$M3lzw$=Q@5<Mrf3>3Hw$WAClN
zyWLw~Tbtj?sbvUq&Tl)^oOxpWsU0;ZeD7K8Z-@LLs2~WXCHp;f*I3HSom4!ccfCG5
z?Hw{NO~Y)~BUgo>^-p914wdsux0%!MN#YH+jN$u7fup^ByYp8}tX?YvjuIsf+mttj
zb;Jk?<G4cgE$}`eT@yX8UXV>R{92ANnE@=4ZI%%h{zu_vJ-TPMr+O8aH2xiAWJ3n7
zbeOyGa?iAK6DSI0=}gZjU_tfL)Ly}|i>I^faIfldrf#q*_7AbQ=aU*a3D(;b_ELe3
zwQeA;=zWso3|2xH09R~$Wmp6?34RpOeyvbR?Tzy?(JcD<Zvobg({%hI^;})_E`Gt+
z7DYrpck!H<lgGrp%Mx`o-;q)YTjyC;h>XsLD=2sA(mBVsu+h^`<mymHmzpP%u<&53
z1cRg9XcB%#031gwEh2Kx9a%TB#I=Q=7ZZuM1SLH(Li6C(QkDmOPZb9RpBWGsW7tCd
z3xQU^iVaQey=uX3)YMiF_cu=6NMUX52_?98qJSl`Fdax}&qZ^m!!d`)-N6~mgY(Pl
z61pNkU#OUxnr<{fd@E_uEUt8>*Xir+(o#xI{_Q-DTJ=bB4KeiGDHrW}1xJ=tcZ>sD
zC(}9g%$hKc)Zcp$J05c2T1^|gCD(K(?Go>m-l<b@ND)&6$3Gce6qo2lmMPu+8EE%_
zq9bD_D>bk|AL|m(6lU4x$RZQFGc)E1Ez!$?+HyM^&dWJJS^kF1g&+_$-@THtGq#{L
z^h-Rr&XRM8x5*$uhC0cMMcikgl$Y1z`5UlmKo$|}9(u*HqLlZR+mXXoKbX|4IYgr%
zv-u)fnFMR(e6jjH;5-6)LJF<JP;k`#Bqh{49ezQTbl;GyQr@DSp_Ks4u%opQHzg9K
z{PN^A`FEIYVfAvyB>k7>X0iK9p^&euK<Jj<3Y|ECv#YtCo0~vr{}nO53&e~R*^JE5
z-5$21`%_vw-c?dNFMImr70Z#sO<Fterat|&9C>-Pi;ss=er0=*;wwI8H*c3K<y{6_
zaBXdSt-C2fED`-*c*^Rxt3e;RcTF#i0wbs9dJ{ZMONj8ASHZHL3YxmCV4Mfkim6RK
zt9BepG$*tcgBsQ<gcPSKX^z=SwB7=G<|9!NbM11@l_mDGur2Yzhvfp^l>(N6LQ-4X
zS5d_6r+5$+Dx>aG^~ga6O~L{nT#e2{Q9^S`D>|~7bMc;Fl#`ASo$-40FvK~(u=E6*
z&IoNJK^gI2OTjQHGO%OMBhgh5bdc46pz2JX)N_UPaR(@PoKY$-=CuVjY+(z@Cu1J@
z)!YhbUe#-Q(@if%${{`1lwxKyAUpgMY}IWglR}Sjs?C*ZL<gDIJ;;eSYwk}d{Efa0
z7!rQSN8^$GrlCNxj_TDNMFv<&=O8e0WxoxNZY7=Tq-CD&=A6reb86$pS~xU%nbHcr
z_N+3E=&@zD2VR8qH)gGbXy=&3$-56{Z&ECePTVRcs*}r<3f71mz^|IBNTX?qzXcJF
z6_TY|*-41ZM;sJ$k}cV~G!&mUVpK0QM>PqkDo8ye>)qY(C3G8wdLEMrPz&l@8b{{s
z|6nvWcUrNt@Gorkw+vghjq@|70}ij9Qs7;b+2nsYq}OnTi?T6D$yA`F><1uqe0U?+
zi5+aB8n~|EfnAGoEN!5f_Hv0|H?7)^gjEY5tNEX>SZCud(ieOqBF^b9K`9BfUVO=4
z5_H-esOdwYvJ9@<>u4O;h__xha%-~ENdZ*|lxs@fEWLNr;;mU-b+MY%3|v(?d@}xG
zZO3)EuJlg7WVJwL=n`LEYF{oG!6ZlZEl7Ec4}L1P460<99D);1|Kps@VQFD)satC!
z$NG?^sjA#49uQJ>U^lpBOzHX)SSW^j$8;@iqbrP<Zz+*wW;2A1<Tggg=0tB(gdAo_
zJrW}qOL9^Zoy_@g6Jb00v7RR)S5LI3I2q=yJJt#eP%Z_Fb#r#;i)BwTEW@}GB{gZX
zZL(ZquUWxNS!;XLE03<!Sy`XmrOKX6=D*gNbyejaw?OT9_TA{)NKkL4$xYY({`e|B
zxmCfv=lVOv|7WmaZp`(W823^x+79W<v6aG@KM&zh&Qjh6W7{|6>%bRa>Lr@=^$Pr4
z%7OBnA;yLRwQO<Qs}lZAh_+s!Z8F?KRZ;Yl2B{TpvJdCNbAJQuQoCgp&HKx0*~dzI
zN%LQg{zI!D+yeQgDk;<L>Fz@9>?Kafsun6iym!o)i`W6`HDu?@nc=dhW139nUDFoQ
zhfKyOhZiON0WLzyp#PX~q$Ygj5|-_4_7-mR{2zK$L$w7WHGEhY`MXjZkV;U$ZXgZ-
zlxsLhszU>l{_CG8fyU3KA&Lq5N<>F@&0Q2@OC;i3H(B16bQ8J=4fJ3e7yJjBf;6%S
z4V1&Mm7gWqX9exhk$JKVzgDnB_&+IfncArmwd4}H`G;^I;6~A4RuYI&y&G*_GzOaU
zhp-YglxJMcQeQ%crm2N_W=X@8WUMZTz*P0)6Fw_lYU_!C3K2=MbzuE@aN~P7Db{V5
z{)g&z@*G~|F+SLd<BWpIQ~My6Ezk!)VZtQg8H`^s77B?N-ZGI-W^;TDlGTDe73tL(
z_`9FaTGtGc+w=1<FB_b;cAw}eZ$~}?SE*e?yts5RlC=b<k0B2@aXLIzn7>uV9?y(D
zj7OiV9FfD?e~Lhy3xj^R<9P+Tl~VBUKd=bq{bF5tAivbHrtR{mHS5k*_pC0JD5_c8
zbem;zMy5Zc`*m)iFc{t|GMC&YtpDgbJ1S9;A3>l}fRob^GTmP06PO-;^iPERd3f8Y
za<eGLeTWljB(c3MvpyZ6m9B>#4k>Ghb?~|{c57P^tscGV!0w?C;P136Edk~+D}y%*
zyC3WN_@m`Y-(Jl8UPvN!KSE})O5y?09A?eYNG)dQeT<AKDw+YWC`0IwBHmGW<uK23
z10WAsV4b3?1>^E{(#V-&6QhGbSWV{4RPZgTum+2#eBhfKija3KM@R|scnsmR%hsWc
zRaJdtL=&FF0n?0ed`_g46Ad0_K}Z{<(XM=cf+D?;n8Ptsz`We9<X~ia%7)&=A*xRq
zh?X?&WQ?s?3x?*nh_g*=!Ropf9L+FDw4c*Vt@1pwVkA#Y0!=#e{QLVdBl*jX#<IHO
z0uf9z^DV%6TT8S|FI1M;P|c*g*0#?G(Ts^QA#xYUCLXxghEQs1N<Up=+RmEEM*hwx
z7_}Z<13Cjaa;wwQ^m=Hn60fUY?K#U0HS9wlFV)(v@RA0*PPlnjVMzwI2J+fh*?BU+
z^r}`9iR`-!<A7rEQ;Dvu<;1nKXFrtu;KnlXo@LJT)gT^cdZQ{9aXVTst>OK`I5WNg
zd|BC0He+e=teMWkeQ(Szu=o3Ns(;r-EQ?NsAt8VMicg)L?xK9TyTL9|)yK_fWqNu0
zd)Ww>U=NqyR;E?uT~{gc*kK)EGTNa_!)7bc4W=ZbOE62B<d&lQFPuGG6{1eIO~wJh
zYJ`;E4JL)<{g_3q>9iO4hR6C0-s0f6Hu!_d86#zqVQ)G@&Aqm2Sh0I##D7KS3ZYid
z{X%CFeEKJDdLW*jLQ)pWK!f;{Izhj7gQ+YwTqAP@{{1cFDxiGW1g;Iyz$8;%ep8_s
z%2W|qZmy7Hnx*~z)FRjID24GDJ1rgduR*Y!w>rU8*?D@13Wn)ZiNY{vr<m$=U(aF_
zNy+2PIK#t`juMATC=TG5r{To;V7AlOyg<=BonEf^8RK4&n_>IL#9!)q+p7y1H3VHQ
zD>taj_#2fX?8JI$I8TUyxpm^3&a7+Vi(_8ou$OeHA%i&RjK;YxZg~jfAE#4xkwh%J
zW*0>_5R?EnCO_-U_TLY?_HO4}A+dp5k->{8<GR}WrQ6tl_crghhlAA~3-CUoE3SKt
z4j)Do77LIInw71ajD+mCzlWmB6c!hZ=)xAQh@6<NZvI70<8>?X@#*LcA#Oqe;5^Xp
zN%A2YLcwe$XD=6|#GHNZ({*e_DZ*YcBv1~%1%)>u%{>=kW6Lm0-aTnk&9s{rGo=V0
z!*Pe0JvD3z;ffJCDHNwRSX&;yf&b_G-PBp!cxgl+pdqgRi_V=LC!L+0;eY7dUE*H4
zthYS2zMz%;T;nl`+zPp%@#q{S7CXDlla0!1xjOI5qmVfii$@2M{W5>keD9@P?*<YC
zAv69ZGjDS|)nbO+_Pn>}14`uDL)0yj@)V-KQFxm$WsZZ*b70S`Te{1tH`JW%gGnEH
zpdv6H$ra5&pA(;Ieuv0yaNyJ*K=zN;0Y~Hj51H9PmL-G!bcNZ)Z@$q^ct0v;oP=N@
zi7{B5tYeIxy~VNbDMw@saXet^gDo6Y6ayQanHGwL8Jbk`<X_k{HnbtLq{%(i!#*;3
zWgK{xi!6C5)16@gTsmSOpWh5X0J?{isPysTbf0pDA!n?GR-;J33eSWVJ`@&%!Y>CU
z7g)1zg_q~-QMEETxeu&?wjsf34VAOoi(a+QB)*^0=MLJ(Z|d263@duvPDXbBHls_r
zp!wUefei8Ul~?Ag;O5ShS%MWB^i7*;Vs9;zd>?#@drBIG>{mxoxx@%8e?mswPo}`#
zKGWL3D<Xq#_siQuCM<MnJQH}FJ(e7Fm>K$PQUco;PpUK2zBhQ4GzPU@B1kk-a10eG
zcCmH>e85NYOeu#Xz%fPoQ)9W2FCEQ)7GPS6X{s&o;tstam#dSNP;9yS99;Zmja=Q{
ze&4w;XBPh!RUig55|z0c^|ne<%z_h`{my8<<AybtJ~I$65#n?Z*gWviJLMNZSpDHF
znxa1;FtV$KWGlLAKp*9tW2C_ugsc%q5hXGUJ0!|FnSe&=BTJgsQM57f$vP!4y8}Wc
z2lJ7~yo)lD#Q`Ra4k~~ZO8YPuD%h<-Rp;YOcN}7bJdGpnrv~Q3t<w+J!B-d0g!TC_
zE&{NJ+#Ic)mbt6k-vSB`NBqkr+PRG%QUwpn$X#sC5$^A9gn&nVDQhmRpl#?dwwq@v
zZBKAn8bCZQiyMr!FYHBO5(rl!!Hhbgp@$1?N)$zo*#v$i+;iJ*fzWQTfx9PHN}YXo
ztH`Yr)mC{Vo?gOylL`7RXT(vwN@Ac_e}X2-ztin?`<ZwT+^`!r=YeLQEoI#YHON-z
zN#Ox{TBwWzdA%n-?TrOvva9)Qn?%giv$EU|jQuavlQDOi>@F3FL$-k^tIn`6k#@za
zKdg&m0D3i9;NU=Qp6BBEX^f|Esom}EnG#Sd3o&~0x%xVM>MAF@;pzUX<!{&9Q&D#P
zZ9%jvgKihExtQVY=XxZ|*6?+Y_XoUFG?8D#dt~E%>1<|<P@A`$S<;f*jdpfu&wx;N
zVDd!&S@p<3#lV21p}tC;z&H=oNF44SSOG!_%((n}S{Edj$$g^B8Iap?<^6(fP8Ob|
z!UfOP@8g@cW}z3%MLJEud~>JN4Dq-T3i%fn)e2{`hAp7ud0*xF?5wn#Q1|}(J$sAk
zG-~jnXde%^v&a$jN?dL&+jaKIhmX+NJ&-MSZG*8R5ijV%A9xXowi41eP5aYoxf49w
z@SaQP>MbFj3j3C*$iUBEZ-)%C_UmnLUCrbjbKc#XI+Q^<1y?2W;|^8<D#mMU5#%Y%
zsYk$|k<ILlIV&@pg*|FY7Hbd?HsVRi;@h(>%LA}>1T<C+cK=Q)%az4ENi%|)`lOu$
zzIK4f?YrRh&M~CtDzVle(1U4fWtEviXx!cJ8)f6+h~0I7@bz=Y*zIHCf7d9SZKWNh
z6W10+hzU;Z>z~_k2w~MO+7ZR60QKTQbl8|?{`WyHl4)<hhYzPniAboUt4oNxJVgku
zFRf+GuhR-YXz&oy-)jy=++!>w)@T`34Y>E$7v#(xsRk9Y{>`kZuwqf%vU<6Wh;ZNO
zZ@$ghGM6FK;J#*Yh?jQd59apsw+3NE0Kzx1IQEW#&nDQSv#r7O^EO#CS+i{xfHmtq
zm}1nNv_cT1z-?(G>zpQjTH`>~x&-m(!J`YOZhGIpHQ=;_PTC_uq9)lQ8>^C6bq_|^
z(lKD-5p%F>GRq3m<PdX4a6p=DK%-jp)rUt&@b@`JI1;syElNwX+_Kf1ROq8yA7=`A
zts@e>$R)=n#WrKk3fjSog7las#$@{nf6e~w<u+hm)I&yGg~=02ZDs%#j-vfb1^|{o
zC`&@{E3WT{=vO)eZaht*6@KswEnVtp>OkNI8;udHqFMdG>u*$X)+@k2tF;;>ifk;M
z2%5}o1vuZ%2DZ=dencO#PjSRyP-tGygMg$ESjeU5uk;t}LC&i@81*b80hZ4hHQ#LO
zl24-FCg$e}2&Co@-}4d^Xaf<!I%&=;h0cUZ6OL0m2^kQFPX7Icsl%40fj}w{An$h}
zbwae57l_9#-w!MbJ`ffxbc}K8XEK4KNAOaou3)`^p}>S`mUt`loL2`=AVSL8*+7jX
zn9N0^4-J(IVFf6IBNvP}<{$v5*Nm~{>Itf6+#2Vp+smpR!|pR)4@?T2Q(4beKY)?=
z0ICt<+lbLkT%XodqRx6uSZg%cD*U&$jZ_e=Knr?rWs5MDL!t5ej_qQz`hIgG$jQX<
zyEW7qwU{*stFa9O=s845c7@j_5|e=rh{(+XH#;K89m+lvxN&O#c&jR=4ymvjSHY`Z
zL%ivsze!fW|9qHju~bQ``P4@D;eR8Net&l9#BoXj1j7%kF2e)_0=T&Dt7@Ad8rbzA
zGqY2uE)!sMa6a43hXxU!9K5#<!w7LOXhi9n0ay%V`y15=ZQ5t3Rv4#(<kalrS5wtt
zHB86W()KvTl0hU|!DSvniVHclrQH^OI9utDqCkQ+@L}Hg0x^OaAi1h0N6lq(IHKiq
z0XIl;T69>`1I$o8=`oSRmV_w$Ujxw~#>Tr^6)M9eOG^<(aFy4;6qM*nN?FwL0F~ye
zQ<JArfCc#}S&G0JMR}ovK{u4?$b>f(LyaQyRE9_xzmkbi;Rl5vXTu&3f8^mj&Hlkt
zD7|XtR@;krn5x+nn5Z0LYRvESKe|b#G%&PmrgR#jcd>oz+UwgY+J8e_)zt7zdi{Dk
zdr$<v8S2i!Q&4aPXM#o1dtjn5auA}6*=pzG6cT9D7*A(*UglMbk1+|V-?^ZO%x><x
zUZ2(3EgfDjb!zBL_{I*Kji(`Bdt1I<$INDpcrptGkMV70yAkcHR(OM0S+WA0d6kk~
zH+z{X`dOonMPZk3PH?;^p&1ZP=(OMl<Cjn#Ucj|lBUKw-QA}8izQNcVh$PZ0gj)q8
z&m4dufBCCi0yS#?9v;EmQ@YtR`jcnguPiLXBlKnl)kQY`u?8-IhLO{XSKeR`vs=dE
zlJuC6#Y$nDluSc2(``K-ulDR7W~1$B7Vou<?8i72<Z!(2>%~JVv0(IAc8<5&N-J@<
z#~=HAc!P^cZZURTc>Sx(j<&~;gtH%eyG4{*Y`aYyng%q2SbnZpp~Oo}5V4i0zQH=>
z+I%`|n^YuT@{dJT5<k1Ge{b?u#Mb~_g7W9myAiex&$rEnK2qG2c@)UUOP-w;oNU#N
zaL)pltbycm((i!u8=(-!XG)}9#u4!lEsGFhlJU9k$=vUVyU`s@E(>jvuY47G-O7NZ
z--VN7Le%%s47|ZNb~9sxa(XymK6;vX142+2C#1rJ{J=IW)TQY3Imw)NO?#(~?_l(=
z^`q(ML^<bv4FzC_dM*J--@iOn_P~O~CVsp3Db)1fz%q{QiixsS5{3uz#+k5lbnZD>
zWA<DpqmSbr>-BQldXlc=-$x&tU6!S)TAr?v*qewr_W_D-`WGqu@lYkq1PUa;9a{4b
ztcA*Z;fn*Usqk%tPQTcbAlBtQ>cGk6;@fmYC4ofN8X#QjTvb#zY=f>kKRL8N9o7Zk
zVpM(Z>tKUfd_O{Wxb~^h+PCMBhXSc{9E-3SR$g9Vmb>HphPa}w*JF%V7jv+xv#Wn`
z*8^{8FPMAwNjCp;?Ho!2^#n2;P{DN+di)f?AGb8B>bO=4;9zE76kvzrQS^U{9(?*G
zRf5uGudW8V%2;J;iQL1fZ}4hD3`nCZR?ArlcT38>?x?WI7CP>Mp(e!&@%ATAz60_r
zXJNXd1X(0$n~5E~p~hsaF-k^G+1c0sfRoGWyv@bmGu>m9t?s?-`l1(BqrR-Sp@k`U
z(=`6cB>CIYmBxVcn|N~MF;<<WqBzc)1~Yx|N)y`*h<X1;3e``V^Fy(UE~#r~G{nGS
zFrhz^9qoQAq+lHuj2f?3g^admo5rc?fw@y}I}ut&3<2gqlfhBhDA=XnGCt<7w|`Tt
zROqJzc)c!v$!*Xl$vd02^X8rk(<EFi9UoE*5_)Zi#cdGbPS)e2%(S&cxLV}!A7ImT
z-6nh|T8<$R>zr{KF!{wLh?X$e6u&{Jb2Bf^ScWTikxhVFgG+nD=Ctcu?usj4tmVdO
zPBSz6&Ty8zhVMO%V4nn|^XA5Omok#LAb6z#7vXtj^KdPo?&Z<K5}Yyh@^|~3n(w>4
z{wBYQuQ30@=c9|9((hlRD!kXe4&~0CXvzg!KIAlCPwLBE9i2QR=J};G<TqW>`ByEZ
z8o#Gh=r|JA(@1Ir{U(L}T7&My-d<IE-yyEX{TSr#zuE%Prs$eC$k>zYd&@d<|C(@n
zbMWd0-du0?NN0Skc8nxZiRx8?UDAnD|6WT%=JyO<Q3q;CX=K&a4^t+&mKk6P>w=FM
z${+T@-Zj1e2=!hh8)uyH-Pz}BrXML!u$CUV=R{d+`Z@dpu6Syjq&v*+q5JDeb)3Td
zZ*GEB&DH2P5&Y5_&361Lt{JXauD~a5Q>B>{XIr1SeCqt)lCwRoFrP<a`eA8p_`0_~
z;lH3oIsF_|uQB(5Z>TbV6pC_=@blB*xq-en|3Km%D4>hU;8ZYXI4R2|>lDJ5AF8MG
zcb_#G@h+G=WIoIAJ1x|j=d!IC5HhYA;Qk2nN2otS{1NPrAb$k<qi=>agLj6C>#wDj
z_d7OKc8=H3>)XwGRGa(kn@qub6SqqV!b2v1FRgYrX#qYYpqkX^f!3g=$<)RO%*LB;
zS|#sitF~!f_s;n(cgtf0>99#`rkg`5U$nTtUv@vocN&|_tk&OOPm;@>9*yt&=an4%
zo9mq(3x!hrB>1Hq#p6sX?w7@>VJ;rfM0+I)VYTMYx7{54A!krN%qP7bi|6FkstFS%
z#O#-Fr?QCREeDabI0Ldl-70v%woOOoSS<7H?D5ZrNYzXcD0#$N&zux)obZi!3e4dc
z8hRi9&AHt4^fkzi0R&Vh1_VU+e>`ntuFw9ThHWmi-cvKwTfVTrBNkE;Pl5`7kcmf}
z<eL^Oi+Q@ay|4cjDQ4#xjDz_DSB*{?eLZzP^VtD4-<>^Vyq{?P^5D(6zkGHjNJz9@
zS*4en!4Pyh5>unSU8r*&D6x0Qgh<WII;|+l8HgPBS$(;1-xFid;WgwhzSaFSp3eH)
z6TTp=FN@WXYyW4&=ZS^C`%X>r94syeT#A3<1ASfO7r(JPJlTP6J-tgyr2l2kz>4l3
z{<=piZG>aXq?g|~hv3Mv;0epO$tfilEJ;gLs|1$Y+`K73u!r~pq_|Jr134129WwAY
zR?Y?pN|Qa2{_l4m?)Tf_s*B0Jzc6~0M3W18^^<{EC8bl7`fC(3i5I)8tB;S(D1pEl
z7&P`C?jy%p=q*&4Ubroqj6NUeUqDB_^F%YBVRSa>sMR*Ba`tZL-I28`qzn@CFA_4z
zqgMDFcyJ4-1eC!6t<h>cjND^JE#bAFzxb0^EsleYi6*d;Z*L3GO9p0qUr$qyx4HPc
zs78&g4hQ2@kp42?%s!6DdAq<~(QD)Tb#aw7Y!&Cpz+n9%?15rQdFA7}3nTm%dCH<&
zSSO2R=(ct#@nT~DnMKs;*pO#l813L83je4k6g+B)UJ!|EU3Fa`Tyd4l#+2(1GLtX|
z>e<<Xw(YkP7~6q2v31oa5Wt}SokJ(j-v#dTVzag6yW|AR+#$U6rjsNX#Vf8iRe|rJ
zM3{!Oji<@@{*diE>0k@Ia*U|wa4XYts|bbUZJ%F<>3-&^MYunR9-NN!Nyh-eASAdN
zV=`p5%c8^-YUSPu*N!w5S)8jshD;zYuz&5y0OO)nGKn+~)CG?IyrTLIc25k>)R>py
z1C?T)HGG~`foMTxoaz%Kn#erq2HyNE1^1<C!-#80RZ)$&1lztBDu1CD=7Qr^l24|O
z9iW&Aw<usNPwBKHK%K0*axW=pW8V_)x*Ji<10_5CWlSBI;SU}bko*F2GO$fApoIK&
z?dYHghlVMvgB9>&Fg~q;g0Gw55r9#sM4QJjhp|F#2f@1Zw~<-9n2_=hxC;R-M*`Sm
zjR4Fzf@mU1gJnL7A%RWjVw%DMeu@-W%DeP1M3DWb@u}B}^E7ZRz?`b0(RqAc6TtE$
z(+xl@WU=wHlEsqA1Dvw6-lDrm*h!#_4pc^b;%yWFeddJzp<17;H?9MwiE2~SzS3KC
z%(@}>xlcSL3)p>k*^{%}I#o)Zn*oPYV<Ut-BJx>ntKxLRnpI~Uu~bAk&kIkY9Vy9K
ztP*#m7%dz4HtS%AK8hP8DtPTKQcPpzAlz#h?+#h-G|%%vZFMp~<1^BFULkdEKUP--
z82dhK@u(AQ5e2*OfsWv<kYa2Wv_ff8qnSWSVsr>kwz&|H5$PKx)@;S*DcT9P9CT+1
z<EuBVT5XTKjPz86&TvY@F!Ztt%?KeK*FM{EdO}JhOXZ44qY0glJ-+W)-Git7y>s>&
z-AW)ved?gLxxBs3(5icxP7aIa0Jd`%AMfdp-ufqs)y*c)3qm>wU;I&LU!2zNB^stR
z(zAi7D?WRluPc6id24}8;)&JQbI6+a89?beV>@GX<5pO=ZTE5THdgefGu2CqGe-X*
zuC{8IS(SYop!DkC--Xz-=doBH3HX`sBX&jFZB<6U0Gx|&;~hZopthqKyITj<Rxa?0
zUb5@3^Xk*|*?8;awx{aRW50gHUTf7x5PC_()!J5r@&Ut#bDF)Mn^0e@HPNgDj$v@C
zO=`2-w)1l6qSe^r@^_G2MtE)$v2Z{((52Be5#4fK!JizXAufdg+NY=p9E^a&5wUq~
z1uAI>@^^a62E>xUACnNZ@5?e}AV}#jI0~|vCs^@IVID5Sq>ENnL~^Pp=UY0278Mc{
zTcB{p%Op@33=D#UvwyHBp$o|Kd9j)nj|;Z0Pm295o4`h3lCNQ(qT3fu)O9(BrTS!C
z)cynh>|z1Ym;+LQo4y@%yiiQ&Qr*sDl>dX-VR5Sw?G5eXUL0MVKs@UXe8Ugd)mR|?
z!r{2MZ;tOY5Q*=-Gj~L?Qs{i?<)`6pyA`F$>xZcItvBI<A5~;ipz)hpTVsBKksy~J
ze!4jl_I1%>m%~L4WSv~z8Lnikcp`iw75>y4A5?T}sQkeKHEK8a!|7)*)ENA6o9H4<
z=a48s?ex>kNg6Uu_e7p1&U#)L<TNN!6KmezEGt4XXAm|Q%58@=JZ~h;4hcd90{lVp
z0pr;4jl_?_U*~N21y2$A0w9Uj08<=jbR#eG%b0Qsod!IzgJTxwCDaF1vRbk@=O|LX
zgo66P9Jrp3i%4jZiFT;G_!^!|1vf?IHi3_cY?(4>h#MmzA1YiE7TVh?L|FJBBqXO7
zjt>Lr+z_}v2GWQMq(Bu|L2y%~g4R)8w2{o0@-`v9Eif-kvoBIv*;t193;rrbzp?V*
zOJ>W0yxg~WdZe5$p$?mV)I66X(J4z)AS?KlQ5d&*R<0Z&P=t5a(09=TyRVZeflL`b
zBTxah0Tt&+90VeC#BT9Vrs5`!LPt@@Z;O1?`5tZ(j$&`5S;a7YGBQkZPfW4|6Ui4>
zmyveL{r7T_t`2MJRQ;}-Kc^1u-j3l~zKW+s#XI!7d9AOn`ceb>`d;n#A_B=%op<C6
zDhbXMj({ez9Rq=1cq(3{lO<IXai>jTl6pPtKppb!1<yKvP!NbX*Iz1*s2NM5*v9r)
z#&t2Imm<nnfc;e%b%VHf6_4h2<3x&1A{~?yCU`BDkizs5?zH_B4wxh)_IX7>PIZY!
z`_7e&GE&6*Niv<||7q8Dh>(!qfU__vm{CG%DM|DPD<meHA~|0wvz#9)3RsHe!TY5Y
zRn*N1qEp-bS(Z}VdCDix>%W;J{deGf5L>@&JAg;5_C|H|GHKttM5X%D8fqT}TWKev
zKLr}HZ;`CfBrE%@SZ^?>8n~{Lyb)6TYg4FHa+BTF9M^@Xup2$W^EE$glPO1-?o=By
z7sC^ML&44bs`mE^Xp&NEC$7xO_Zzg4+&|F0cM#9(ck5H)G@D5VP$bD|>}b1D0RVE{
zbzjs_Ar2voI1U^-4Ta!dpb4K=Xs4CZIvq58!$!ii;1GC)Iz@llaeLL4ndOUR*%YN!
z0PJFW4zV#cu=4<RWSWxyC!o4X9$EmnmICs@pUFJiE4lZqZLRxhP(DO110k1)h=-x;
zvc9TKZpYM;lhjoQV!RC=4D|gA!5+eE_6BsGw#nHl)F<eYuZ3xtR^Dp^;;Fz~<gK<G
z^4Nu^t~ZJ2)Mnjq|IH@Td$QvaipB#rQ~ztr5HTNdL<mtjFA!$i-m{Vew*&Gt<rs}y
zVh4d2tFln`W-K5T67fc>JiQm4sSoBum4)!cHza;dOFg0*7CW4fd7s)p*EIkZd~gLT
zlGGaK)yI~qNIbZwrRZ_JM<)=l=>5^U4BGe0c+qs$?Xu>UD6FEnE@~Pbg}|YMsM7Hc
zLY7L%PW9FM-5G)UiQ6KvbSn~E^93xCMam8x!%|=Od#c!O-#BxyxNdp<<6}ML4=9F^
z3WTO=%`!Dv^$=ZI3UOV@hq^I&b+EkUaEJ2M*h@j0rs1PMjZ#6Xl$C{0?(qAWXWO2Z
z4E|usu3kckf-76CXpPEVOOXqc{~270gO}}Of|FwPp#hXCcF&l)CnMB|z&@VGSz#SL
za#$=iB)a$ktU~O|d`dlGIr4@xj1!Tm#2jXIidJ|QRU{YL5C5kPBxW#5TlY^<29xS9
zpfl_~dQcC9<v8Z8G4KS4Nb`98RHm$LdO0p)v|pKQ%aBK)!t~r$X97FSWQUr5!2Q>5
z@<U)@Vyl+nI(H}K>`C<s!%${Lo&v;rF7Ex~%Yqq)R{O!0yvBUN-p%$t{c>;ARR-Bk
zsC^Q>*)8bb6R@4&rVj_7IgpyyvaPcuAXcmt;xv7r1=J9$oKUKxq=9kDCsYAcUTC}h
z5+@f{%Bd})WO}9cBK)qXu~@ZBBcT1>erqqgplmx9SpST(v_RJD5m(+{>J>8JPPJF1
zOYpE_3ST7-KsRdB(GLMgv^L~~%xK!WSJ)K_dK#!R+!3aL+Y1~WM`?JvLlGvb2m|al
zoe3AMyc`*1g+=_N#NBSEBcHpB(FBhBRHn^b_Qq!+*rJ+<#}hqwugY>2P1cZm@R=UR
zKgsCP<ZWNT_YY<X%CNWD5*?{@@GG73Ni)RPJxf&sW^+U7D*T%iUR3>Gt?R0$Dm{;&
z5ac6t2t;H+wIF6e>iUzS_HSjXz8X>G;9C_uqi<+GU$IYxDVRy&T82+P9eY*UKKoPv
z{8?fq&}-(Eky1yZ_3wUMsEfw3nUNlwQNa$^I2Fp33_Vyx=4`cLl)Oq#ZNQ02DS)pV
z=Yg9_@5T<0-uEk4*ugnrU7DWCsN>xn&syR3Ue=ykY%ZVaVrJIaV{OkcB9df7_eS4f
zaS{lUt~Gq`TSiiu3s^^Cw@Yh2duW`JX<P<6C!u49DBUG%B|sz!eRHR%fiU9+oN6QF
zo*79lv-p2d_DxZeMD3P^F56wUZQHhuF55<zU0t@(W!qi0ZQIK7<UjK=GcWhvhd6O!
z?=Mg6_+qWhm1lkU`jv3xpSfk6EVm*rzaUV`0nEVsu$|d)JW!=laD*3$-1&jkyDvc1
zhHP=6=!CybrsDd8Cuab`Y*R%@8)nHE5AiEhq0I9xKy}+FiW;TrH)lV8$MD~)<~;s@
zuZ4m6FAYv+AHI~aH|FEyDhy7@^j`-gOXF}LGWlVJ2n8ZD@<a+qy*_NeI<#%8D7Dyj
zT_4XwZBrCly{pb7+xJ%Pe}tj`V>J<ZPz*{!L}?2R6pGfhx=o{)(4mTZ>C(I7U6f!K
zOklmak;_z3aC%Y8)b3jNT+lZc@HWFc3{ll1i=?hK+O0hx6%kjXKu;MnRy!B4ZA%_G
z%#YZ<(Nv}mbKPXE64f+7pznk_eu@&sGXOV6E`E!VpKXF`e(Qp@?FcgATZ_L#sT7ou
z_uZK?RjGl~ILrCB>V$<5=$E_pZt;RqZP;v0%=(P4kvsSUkzOvsf6|4Y&FORP;}&Bq
zh~bx!WW`>b8tY)nB#a9tKn~=~vGsNUfD@mX_5q6bQEz`#){pVkl`*XQwW^8t3Q!f0
zimn9=aCTB{KztBq*xz5Zb`P6^jgNRqml76!h1aP%i4>BJgw%^sukp<g3KHlxZ~YQS
z*ZD)>si|hyFu3XSOYu&0fk0EP4$S6v1XT~Llf7U(*FXxxB{w4uR*JcghA%Ky+~=ls
z{xY1qC0zv)<F#aXvc;$lvj0P1(6_D=lo5|C!FZ{mX3yC%@JYSRcZM_o`7I6kEf>w}
zvADa6CuXPDfq1po@!0nR3hjHxeBadS={qj^dv{I#fZ+`Z_R|~c3ev46fY!~Q=i!P_
zqZjOfo%Sx_qi2`S|55AXPLw(Ao*NHPGTHD&)p*IM-aOMAq#L)zK5J@?u<W;VxK5G6
zR*Mx^C%w>f@aSkXMJ)K!<2JY))}N{3@q6oakEtS@;7gyjr$zps>;}`0bR;$9`A?6x
zM^$rSWq_=sVVU7?B-#xwm9^ns3q{ey+ZTr{|1Zp!=@$dYDcy=0Dya@Wet$@waQ;tm
zFUUftFL{M&>Sy&Ps+2{jqHwIEB9mBkuiAA%t#h(cJ-rE?%K1dxNeo*5XNQkRWdo3b
zV%6y26kOpHhac)aDCn?+mtZ$!Q93+3?Fg@C9{y*UGJq++;*NmAlQ8@ZameVopzw*S
zXm4fik{*wOI{>^5UUhPcCu;QdZe>~Q(1G3(hVR2&lft^MH}TVhKF*%0g>k}30b{PI
zl8WHO!D8CDq)LOCo<Q9_%uMi7Zh^4#nh##>^QpCe7GPhw5AF3S$usEtp;q0UAN_j+
zl<>Nh>`5Y25dQb%BCcIUwEGT=m@cQBHK80qMe0v81^hXVs&Y%Dn6<kx*6Kt)58AOB
zed%1p>jYby6tjtHGG2FbFBU2?TJ77H4&BU}21NZ|cOywk=@J5oXAn&42$`xmnSPc!
zknC=jI27#RT&ahZ6mf2Ut#((b*`c`HHAM6FTte{t5arW~I%k`>-_SF`<LnQ#;_Uad
z;;whK;spBZ*<BGRFG6aF4`XK8(GQV3!uI7wRva6qRY8d@LTU<#!hx{E^4#35fTX0y
zBsUL_)xWtpH_^DbuorHg4%6wmIcc=GxEkE$*>|cnqDKLl7U=GH9R(QRP!X~%86CAK
z9!)25Q}m?zpTQa*pB#ycN2Z0F$NJ3Kby4Nu)N(Gcs7RbcQu0DSE^gU|-4&lQE2M_B
zSoD+!HWQ^IZr@F0#i?OT7J(RFWJP&4X4Vb8b_J-17^p{%3#bPu!Oah-2kAe0fa0WG
zfO;-gX2Yr0NFIr0IH3I^fKmj+=*xfuPzzz9IAj6RoOjA>xaDV4TwJ0Z@PNX@Z(ij3
z-=dmEkN=OTCmf)tEu4<XBzzH0lzB2&G>Eeh`$7PAK^E8A-eqV4ML`yo6s0TL(9HR%
zB_O1zh&K!mKWFje^t6LpQgVP24}XjK@bt78=(?3Dn^Q=cT-1)BM0F8hl3nmD!s0xM
zD>!|obBlPinh58tHxO#tt|%%pO9LLUMMbILadA59c=+_r+&ntPPOeS<eRFf(onZof
zW2_>CM8yiH;OJ(kZy-awA^(ATc>Zt5&6Uj;=ooyUV-#?lU0t_;>h^$+xjuDqb)8Qr
zD!QOxf6Sl&_?5!?=bioDvGD7^VO70-x1|F3aUg#Pus#FNSRVpeF#dV+5WO>cKw9?p
zeG(H0LHp-%`+Nv^0O7LVJ14CDHxKQ*FYTlNKLL~vfmR?~&F`Q00zA9*-?*sXzU!fV
z2yp)Boq+;civl5+_#J)S+fEx8e-Hfrn`^P#PF}Q+>uHGI&YE2hkB*U>Yb78H>+gX8
zWQA@!D}ht?{u_Hk;PmG1-IWO7XAKmQ`Fp1fxSXo~?Ryg=z^?)*wF0Os2T1V%snp$<
za(aLt55|Xp8$_?-2@q=J_iqI*)ItN;T88M|06udIHDHSX*1r`f&CWD_=c;|z!-oQ}
zl?#OQfh;*-s|9F?2AnpI+@#V1wlaZ?`R|=-py33{hrRrdUfmYpbp61ik`b^q57Dbz
zvFjm=_F<0=Gz!}Fu%QBMvAh7b>LGf0Q+GW^P(H5Ze)RGJoi?p^+j#(dvQnRqYj_}A
z3S^OiQy>dmLK5haM<Dt}(5ndfdxtV?_a%}V;KzdgAutDgnl~Wy%`fWtdTkb{(ZkE#
zKjA?s`JXFL#+@9xy`#<~)-GQU=b*G31^e6ktuYLh9@5Ou1d5*W0u-!MxwNiF8U^yx
zF@jfd*xWcGBqDsrL^T+GO>)R1BMkCW5n-hh+5Q%V0xiNOUTM-&EnQX$E!-|{X~HHO
za@8T^Q)uwdM?I-Dh^~49tC4p01{7u(oH-|En0lQ|W|+79r9D`hu(z}F_T_y3#0)QT
zSfl1;y)o|Bq4L?-&t<*;uV4skNLY9{EeOcNUl0(+|MupzCl`m|f4Mz9sk`C6F`VcJ
zx$+u;C`wx_{u@MU>@hSBV`Jo5tS4Ja+LvUE1)5D-izpBzUySGOwc0C>F-w1`?T$p;
zASryVK{~&)qoc!mr381kbtmGQFS3)A@pODwMU3UyW+$r5xGAQ4j142z7zf|?GWwt#
z-GLMv4<A3u!wDeGQ_huMw!oy|>a_d5Pl=Ndk!MD7AbWP+?9hKU>tdE5r8x<%IZRT`
zbf=zXsbb1cTGi@G{DnU~G-(h;BsawO$0$jmTP%j(5VqaXEE$#&S%E9scLo@XRMX`;
z-o?s*jWmKN#wBBiyg?M7x*K9cVrCFtn=26D^2p~P`_BvBye6%<o-?z|AY!k+P8B|@
z)GC?p)V;Q*<`EfA3e^zlKw2~Q%-m+K>}<03?q7Jo05B00$H$5WoLMI-xKBUIqoB8m
z@t^G7Xj~zeugagJ`k&#nIK#J6*fJIuQz9O5>ORuCas#wp)CVn&CoOrpB%CVtM7)kL
zaDt!jTX!2+P_^;S9b#>$WHnfFKh#{=Q|i%WPk9%b!(YE(l!qUF&JXVH$+!X{rHaku
z?UfG$Jo)u04J53%>Mf)-zc-qoC4jY?Gg^iMrohM2kB2K%0?E0PKtc3wJR}Tsuo!cD
zFc}R9@VW;@z{2N1VyW<7W$6g;P<@RbZLiA+`c7A2*&IpTAndvT77K4iI^ZC@Cwxin
z34JOtbn(o&&^8W)8VXLKb2)JB=;i!iH%a>N)82{Y_ycmAPNlSGeT4}QbXTqfXvWaD
z?*f(=KFhn|9c@jfZLp;>{5$V*sg3$8MZz51d=xwE53d7G#3G4d_58%d&vG`E$Ui?6
zhK06c_)(HXu_8gFAtkvOKBU)KW0cS3j*GZLh?pR#(Tj~puuz6kp~srj;%d=_q21MZ
zr?xRI6+w)d6K|sdpliwt6mg{9-iC&3H!W<qi>#xVjj=mV>{B?W@0sS$ZlVkB@&j$b
z&#fq7;X&rxz?NI?ioKHhKATT$F(nXhK5s$`kR5AXa5bmRZ7)O!7MaVe8Ak$tE)gLY
z?<Ok2?}iaYrdZ0C*j$q&GJHI=kWphrFya3ov!Eh6;0>D5e3ty&Ai#4b!^ibRR;;WT
z#F5TObKiaKp+9HBvehw4tzQl!RZ*f%&13D`-Nb=~N8+VVg#z<B^N38RM>{p4R+vYg
z<pa+vnHL@=PGb*3=+ET}vMB8fXMe8wb*2u?i{9qv_x*g>>&^X?B^oFDF(nlg@+Z8h
z5O?`WgF*?PSWT|fo#l!S^4<He@q=`uJspG>v>=38v+Wmw$t6lYM03Zuu<Dr{_{~eZ
zoSFbnRPh1vVgKuIIDipV?pj(dtv`aO2TtNXVY_A{?F9^Aq=nY56}p-x`*-@vZbBE^
zHfHZQSq?Fzy97ry5wY7e6-(UV;`7L%Vl7yDx^lRdfARe!b0p^5-jDS#6jM4}^qFGt
z2VwHrvLTY*P}s8P%>bgyF|t%N-jsbwTu?}VvuG;0d4*B|=w%8uAsK1|{GQ-MCW2|6
zlUqmo_oR0sXuLL4l8HFjgZiuD!<K?m#)M^7Qx}apyL&FbB^s&JX}$u0_+HHKwaK17
z{B~;0KaOFFq6%GWO&3W{&agk-AP`EDZ-!LK1P9d&#oT!y;3(ly$t>cO_>n8wer!dK
z-k}5scmzn&7RKse-fw2+Cd06*Guy)A6Y=zlV<Str?N1wDL@jrr+k2|dA(sqZ{Ntw(
zI}-YuB(cZ1<*i6XotI3UGzMP=XEV?SZ919alUwSM&MU#OxLsn;Sj9_@L@Bl6y3F7v
z(%=(K)YwJ|5k6TTI{gPs36SNz4pBazGJ>H@KBzzOY@&cb_zB?{pFoK$^7CZ>tTPXd
z;lhO5d`$$4A(0eV7cE7x5`lrLm1{VG#y|bN2iKpX3ZLaztxMAh<?CMpm-o|~wz!rG
zw7E>JQlV0e%*QPaBWhy=9Dbdr-FRG#Mp+c292kZFPdUqdaGj6}+OoekM-@S^6Z)Yp
zgxHf%BY)rzSBqi<;s&$@tidlkqC~wWXXQS(^V@Bnua)Ek8p?;?iJv!Np5SASuLF4v
z^lR964vy2@oyq+SSs%N*kFWihP~;u5C5bqbrEl@~pZR`!DOG>p=R$rWhqq)QT$rX?
z;dtl-@L!&qoPo=-{SCMf4y7h`|MquTQE?{p68OCiKRQR}r&RMTe%iTdeGaKpEuizT
z9}8v@?*@e*)o;RTX{-SI!NN&-PUHL_lm0+SEGLkoe8iC_X9PaYwQmV47{FZS>uyq5
z=j~5zC5t>wxuEWA8Wm?MsrIH+AjGA3oPZFa+ESFRf)njQ<V>8yUHmxDF``Ufct0FM
zj(v1}#K_4U9TH}#pb$(hv`JTRK5Lg*!VEhL!s!mV8WC&a6%>mLbH8p7F)-UMmG%%#
z{qrO;qQR$F)wdJ+P`w0ss)U5v$f7Z`keXRlWr8UUYM#lylFjsV+3%cjcgY+(UDYAa
zo8<>JRABBywNQ4=<&QZ26Oqy_3j<W*kNebfpBa3e7X(u%6e0qJgsFub=+L;1swEuL
zogOg_3{kbRZ7x48n|#=a{QL$8ExT0LZ<H<7?hVv{h-_!7`|WVOgLv8(L#Ck=tjm}1
zVbMSO879F8(oDRKNo#p(M|xK;o%=I_vd?^^-nd(s)}>*>^o{nay*|$C{QUejIlj9$
zTM}5RZ3cX{=}0#6b6P|<<Hp^0Q0qNJ7r8etyqjT<x)vB7!`La7#=RZP5-XhmNnW4H
z?d}Y4R!9EJks!UcMnaxJ4?ko~q3G{b&#&V&!CZk)5}w}mtLc(cu0ph^8d}CqP(DLf
z%oOJ)+ZKYGbV8d<2_CPz;}ckU19}d{s_D;0)z87c75iv-^#z>gBQSGoj>!>G+18lU
zReF0ms;B70bKKI6wJ~^c%}R4vDI{B5)bHKXr?iH4i2F>6+m}Dr5ST;rEJL`n{;?6m
zpHUH|cNiqoEzw*LK^0LEu7-bZ(nQ$ElSBX&YUbq}3!5a$z@WDh&a53lz%Ia@>Gk3E
zHf^O^4<X>(LwzaQN?r1y*dy4WYGfccH`0i|R2DPn!?5e~wN3w9HG3JCa651LEDJPz
zLWI*&^~+TU3i^fsUvMCQPv18|vE4X8Slih0zUGG$`q+=Vfc-hh@F;Hh8g?*2yyct0
zXD~XP{>7p!l%0=KZ%E&2p6dlSp6Jtcwo^!mMK8j4&#Lfsx%;qT9}0JV63>h{-wxT+
zI2i@o(rEg(FgAq*)cVFzPgcT?a$@F)0m4l5VsqKKh;W+3y(qav*PHB7K$VvXumkdP
zq0h<UV<*n0=0X#D)FA(Z4kvO<VV6gDC$@z-pVLeaWhP2tQs56@I8|S8Ui=P055Ffc
z+alu`=3!SPo2-fbX*kz)Mr@`~6zNZ~Y~BKactNI)@=qrQvBRl$J~~`0|Icgi!|-tS
z{zG>@P&;&qMWXxnH>=>9a~iyZ^BU^Io6U`J=!^n|VyodVw(5&K5k^b@m9HB4;;Z!O
z0VP8LZilm{g?xp&4@rs>+<npLrvWAsA2Tp7VYOqdz>leG23x6*r@bP{lamu9n{|>H
zb`iZSf%}c}mD2c34mif<cwQ#woH|VhKU)hA(48$Yrl)kGjJI{GqF%dAtAWc_7{hb-
zSu?W+qH2zM)hnARGE8SM3Eb%VdI5Zd`~th**7EOc(QKc{I#ylfORgI)6hY?KD-ESk
zWCoM_<!7)xYmP&)O`u2<B|#e6=gV)IG6rO%Rt<XdixX+Z=nW2Le37=X*7A4#8r>C6
z?X`_vSHf<t;&3agfp!SQEd6?Cmg6{is8k4UnSR37?>zWh#Ub-GoYZ?9=3kjhwe$}<
zQf6>pI!Ye_hPOLy*|iXNna2(~qVl-pn(oEa;~zNq5h~4$YC9^c<3*{t<Kj9Ccf<!m
zKJVABSw%$yE;HBKs~_3D!TOZ`T=&h9th{-%pkOl*#uHLC>@A9UhwZg?>bG?=5K3YX
zW);dL42+~Q)Q?l*G|tsSS-$5IL&R8d@%Y;%hx)3_<4u-oKOYWCkzZ345d4o=Wchgu
z>0<1XqP>&c58et;!QZh32mSYjW9^>3iZguV51%&4dYXbR^g5?_>#>^GLtC`t*AdB~
zV<qj#euIgDU)O?&ZdF3M5N4w}YGme1SNqQ;i-oqa+_N|}Yl%EXzIcf~d0R{gksS(t
zHIN8{FhnJUF$SmHANqnw447;o+1OlEkpv^cawaIVY5bWpl#~#5LtvpfW?=L=`qkUD
z8O%E+=}2i~gwA93RWg>sO!Y9U1%{j>N|6Aqe#j?s^t+pNJcO($L}Pt2lkH8?0Nycn
zwf5vG%0~4UrFMJ;xoT;9S}R|{eIpFXVxFC^@KkkIv~@p)vhHH&5{7<kS_Fw7gDxoz
zdNaO`5hfAOW7QckeGm~bz^wm$vdrv<5=ce)aO=gf0KcxvDakQT?O`Nglrd|icBz4e
zSh?VNuJ_{9-Yw^K>C|W(tbmqtmOw<t?f~E61M$DrGUE~N)mwrLaNq0eLSv6K56D5c
zaI}E#J8HBN`TC5t{J)0{(>}H|sYJtK>0?NWF|3I3`D<h*aS*se$fA>tu(H7(MhRyI
z%rS*7606smKOKnGhhQal$|YkQiZx;~ZZ%>qf;*MMS<ul%NMjrA)|E^gIk6uZnrx7N
zpyL=V+m4dD^peCFs!vxRjRB5X>S1(NB8%aZBiY(gq^hR;4tSi<sXN`!i0oYU<Tb0a
z<(I?LGoL{7DsE)u2YT^0+%!Lb*vaVqbI}hy_HM@RI+rNXb|U(wjMt3AG^YGh;VKH{
zi#i6o2iDOH7e7I2(OKg>nm<Y$MXxR||40ln0mz=0>Q*0K_C~>145pa^-~MZv@lao-
zC#ad0Pr_YWeW@&>+!Y*Dfj>!&E5cKLt1L5`Bj7Nlwya^=7F?fucdBjMCil;maL^38
zM|<$^YLN06hAuXE!}QFc5U5{sZ3rvUWtzz0qaUV7Xpy4mf~~63zGKtK-rpE88xben
z(k*zRU&`9GU~V}&Yx}hkn)R(I-dvkRy+N&o+t9zWaP)Px38Y%10IxE{>Ay9*e;;*C
z(fGaHoj<luO*YauIyCAsJ0{CZGlwjQ@Ul{XyOCEwrqt<#q$c8G973QhePML$)rtHy
zQEDmuGV0`sBFS2azfYKoNq8N_A!6Cyz^-g|3~DR*XUnsk(qUh1{2N&oMh&7OCZKEq
z;96z~p~L}WRxYQ~??L|W<PGwdpKSW}Mla-@?l4V<SD!HUUB<LvA=7?zDr~_Mm)w=w
za<nzD?YUSdHbDrS!DkvB-6mLe%Fp(pB@U8PYYPHnno+Hzksj4ZXLVIg6V0WF-e1y{
zCT<u-ErEacDKoA#MewGU4Kw`RB1;ykDkfG78H&_aWJC;f_55fb5JJ_S%+0(-i`IQP
zqAwdt*$!-D=@x#AVyoaI62DgzbFU||_WFJfM|)_47j2sV^6|I7)2W!BnVyYG^>-U6
z&GfF2wp&$8D#`TLm}479?06%8@hw|nT+?)?Ub%T3uU2bWpykwCQ@C+>Eo%L{ymK;V
z(@c5dw~m6a#2RzMeZ(8xg=+c0?X7!@;w{S;7+)#Rbu(#`S%J(~D%*8VwGAHhanh%2
zw#eR~)_F&ulutir!oeDWzC$s`VPG(NlyF18C^|LF%<@qm`rVz~lQ#F#c*Fl}%d>Da
z^7j5Y<p2G#iW*?FpMiDTi8wTzz9W}4(hzo~m{e@p$i+r05MYatmu;aq*yD7x3Rk>Q
zY_5iZd?m@VBhb>41J%~Mk(pWxuZ--oY{o;_iGxoR3%|f5x4^b&HgfFNEfZt94wXb}
zh238Iv!e8OSiDcjBU)tQi9>>=sYI?(j?3NkkGvS{(AgV)`jJ%}ge6PtsYe|W^T(ph
z4zhL)7+bE=YIV%Yx<nL;dZcY5fl>BrO`IwWceY!8{DGqvOvb-zU;{Q!SG2=vUbQxv
zU>nXE5%p8h2d!?4jjxma8g<KHVLwf6ydi4IFi<uPYBCtp+?ttnQ5Y@be>!MtDwxzH
z+<JGjCwBW(IJs0L)+rIO>Z&s<TiMX)t<<rsw*LFqWBsm!v0=xei$SKTp@U!F%KeXa
zPl;t~Fj1$C#r?U8Y9{8Uz7f|PrGcyYRe9*|=bL<)IkdnT_du7kwFU?92WXYF7Ht}g
z5mptu*oM-A{0Q7EAw?IpiKp7zWOxp@UrCV9`|I8}BpoZemi70&A<UD65Y7x}`+X$;
zbC+vh=B!VO=}iBzX1C94{z8=%Pd8g3cJvoW=u3V$(%J3+o{)p9nRuLl(ppVE`*42U
z^+C}}87)t2aQhY2oR*heN-3vC5>#FLFjSo@mn`Vv@n7jYt!$rAK42LvqkMjEv-vDD
z=?<RN$*=JQxOJ57>;1myA-<^7911<=PFN{cXP2dBmNS;sCo0|Qe*50ESdlAM=`Hx2
zs4A9v(~&zBrDeltO|~XSG6S07Zr?{s%X=1!=O2)?VCWH6mBnY_by21{k_El+|1vDz
zUyWa!9K^S?i#Y8Ypy}`K2ORzAW)4?-SWh_B4E*c9{*egUQ`PL}K*aLc8;)(Qw=7OV
zA<z=Hk!|o5^)mMxWCcb?G$h(k&#3JP#{N2D-$Jd7%68Uv=aYbHeI{pX#;kABy$5Hv
zRdS?Vt>5QX8-x%*H}t-^lM!>Dbnxz7{Jb5I^*f&%_>)MV0A;ahqzkL2Xe(IVXv|e}
z$Y^@IHf~2JzWOoyPUBNu8nk_--0$-A4QY$_(gTJa1!xK5EA?F4Fd5zchQR)$hktJs
z8xAKh1vk{4tM}k_^=&7HvC=M{X*EH=UD}Rd89H}ilF?*w<V;*j9jxncs322qcBm-c
zta6@k=AM_*r7xd6;^e#8hqAjU@0@?rZ0{5qAM-i#C++Nhk%5{;^6K;zXiSQ>Zekd@
zrMWLo;?(5hVT=MfP=;K3*}lR%U)6cQY$+G6tz}=qt9q=>!4Fmx0;CDDJOe!FdO&2%
z@K(z`sNK}nZsXYjZhl|C!qYzI19uq8_JpbKS1xnNKj}_oWS)F_9%=Lf=yMJ5H8vbT
zK8xx-?MYSwY<K=V7g};)LP_kbazcjv;$zRnh2&>vLy%jt-Cl4jdJ_DO4U(`K(TW*K
zQ6A<mWL4jnL@ec;RC64?;Wqkk@LAd3Z25EeO(6&|E^Q~xafs|76sZaYW>nR%;{N()
z!ET=lU0PR-Dse8D@}%Y2X6yT9%)a9!h`<QscT3k%wY(mR^yH(QqT;uAhXqcctUs?W
zyG8Wt`F$dBY;9c|tZY)LVk8Lf-#$Z<eyI|{8FX^#v=7>g?=KHUc%PkJRN0$;n8B1g
z*NP9s?H7-otI#j-HbdK9!-tKhIDFmnIZW}Phh>NdU}-D0m|aU_b8IJS2~z&3z42cx
zpz2f0lO*BEuVgtmuu->B8?|zw`q#?pU?3V+^=3JSeR+-K;qlRMsL?kJ!!|wYcTZ#d
zJ~KW5ru7}o5LZ#r+Mj|Ulk=ZfC%5dKY6f;qvbh_zYDeyoU-t1dv+jgUC%tUj@YYLO
zqBghozhkN2(GZFDe==2L=(W|IaP(|Bz;ly`7lh)4EJ|S<wEtGX08LRXx+nfiEe(Z1
zvpkOpi${=7Dw48_-vJAG+HVzt*xM4zBB3Z&=Gx{luMo+)t4XDQ9cEh)^XFI2{DFZ4
zFZr~wR>9-lI>-3WF}HD$TA1<D{6;Srd+k=<nh9hS^=d3dt3BRd;A|Y9+pmOugVsF!
zLA=E8P3#u=ZikuOuEvFZB0)j>ZsOS|npbfLOao{?;gJlHZMaR5e2LL}mjBrcG~7@>
zD+Ya5?i|~Ex6CY@8pWE^rr>_ze|7lggatlWhxQ*D=6!Pk_f~sl0_fDDd*>^Vy>q81
zdW|Vymxpyb`r?t*PFSlo$<>E6vQz^n*|;G@9&;JI<5OR~Gmz>VHitjPd2$7Bt0e`m
z_<I7_0(OnZ`QY|<!)g6JZwG=1C&PPtNBo&a&gnPpExJ!D>A8m>v+p<RAfJ3vYpfcI
zD=f8|og*dm;d&C;!vsy*X;)6}MHb?23pJ!#e@`VVdKTeWD0OBq5)tV|=1Ju05&tAr
ztT~lnRO2&NpkO5{MEaT4;Ycw&;Mo&IOXk0yuF1~Wv_~zJmZULV+EpQ<!sGBJ2Rq`5
z<)yu@;3)a(l`IJiPI|TC)2(Z&J}bq(m1AXE{RL^}dq#U!-^*fw%peQSZk!4xN2>#y
zdpwzcd@x3Omp-~QKv4kD3tXZuZF_vAu9+&;#_LJ2<31<9sQ|r`wKK=GJD)r$Ru`6;
zV_3qw;8DR3hXiSb0g+wvDO$2Lwxixt<vl0zaO2!ju7#7r?pptYie16xJj_Z_xz>^K
z?9hCGIslrCsVm;`B1}T*j94fhZEuLg)vh;MuEK4o5DV%(YnF){By?2=-J0^(ax-jz
z1X>W6Vl(Apa3qKPN$z;w(_bP!yMj^<;o%e(qTbql#F}jfQg*8@-x6U0W6)Yp#2PZ-
z#FRP7ODU?RN~7$T2CsJIk4HDwxt3H{-n7ab3(n~bEzxt;mVrHwUJS5i>5HyYI?8pH
zg*4gOmXZ=bFUywOX7ciu#Kl-XlpiY<abfCbb1G7^M(R&3-`G$uOQJ!kte{em%Vifx
z9J&ij&ZRMOcIrv0mzHcawn_b?1>8v@@kn}@gnSYsJI2C&%s;^YeYO(R)9|D4aq$_n
z?HGXmj!ykq*p$N5FG&`Wf;|Y0V*toM55U2jFA*T-0>ymZ`A#&2@1s9-NvRuRorQ`|
zztgK(CJS?&n8hrbTr+PuOq!(q4L8<LUtj&6FdtgAQGXxh8k<RvQK>RCH<VbW##UPs
z3pr@VPSlY%gaCQ1iQ62rtKS~&4D2C#EMxa>c_YtIYXY9*YND}Of&Gu7;-b_IX~c16
zI2?6LZ?b9);Cv^ndFE_a#nZKZ=~icCGM-8Ib4MjtlO>DH74S=z;c&5+IL@FX8>usq
z&P=;m+cH$!szypzp@cqDQ>>GYHM*i|u4C1%D)Uff5nsgb?KswmJ1I=mqI#b)QiooI
zT!HjNN><Lgg*UV5JT8;LSJS48M{sea0=J6CFqZXI46$Vx=dLM+!$Gg!uH==M?FMo&
zR%Ze-sLp!1H%z<o+Dz?IcFEjV1KilzY5ks{#zJ$2-+!dYRobZtyF1(etR1hV9X2*d
z%I#=}I=Cp=^X1NQ7^xE<+MauZg@QIBdS6HaQ>?hJ1cI6R)>2pm)>mg2UP?MYg{zos
zQASS%)ry>eI<grxFPTh7nrI-+NmfDPg4&p#I+#Fm-q!uIu9@G)xvRbUSgt{KLxJ;G
z_rSec$fpVvNvZGjvh6gYRm$o{uawHsas1j5tP5@i!e+WE9cNy$X}R)Erdj)31Nnqn
zw><k&!(ocKUepixHo8Q*A@0ucNv0BQdzyFG23h*G2G#K+bDwGQnX`P`i)shi-pwk9
z)Qd3(i@FLF6@plM`1aHWT5VbKU(dH=80qi>Z{6C#xdLD08h_x=pO>BhiJ~aU<=)W{
zd{E~B*N+0QcAg^-&OW71o4dSrP2}424R5nv%d!{zX!PA#JWRunSrU0lwtuNkY!*&!
zTnww4_tA!+%S*3n{%)-yIFZU8$9gluxZa4Rfxbwj@b=E-pkJ4#J7oN|0v72;&XU<A
z%0WWiO;#7_M^gWhVq65-L^UPjrXrs*W{;*!>G$5VT_R1#fC9(v7<br#YPM*O!rv>g
zmy}*GtgNcfS_a$yC=qdvBmc}cD<H&0gxME6$wPilc4hA()1VXFhe<H2chXX&I#q7A
z#p#{Grn%J!&O6^ND`Vxz;D+WYg<z{1=d5Y2x6vxfyB(BM>ZZ-JhcLu$={X47M22I7
zCd#@#A!j;*NwPFqB&Jf<lJ&4r;>)zV#LBoD4y%H%*RO_GME$F`G<hD(x#WjnAT7q}
zQRh&0JLv*u%B9WM!bk`jzDr)pcL)Ciww_7i3!Ub9DMlQjt4%Apn~j4_Y14I0rHyVQ
z%C8~Oq3l#I{jnXoHCmq|j}d$6^r||_S~uBL+c?T~G;wjnWf`6O==P~RW2(H?fv>+d
zCBYQ7l)W*S8B6|Cmm#0*<|S)}g!R#qCr@GvLCmoi2T5EvOiiz>p${|Y(*ZKD7CsRZ
zFK?diJRy>8U2KrHzIG_G3AK#E#}>}zi1OIQp5ir&b-Luclidu7lGvK}R5KbRu(U7c
zzcA*>$Hgy~@%Omm{iC+6F(8A3bxKJp!}EH%AeU$7C!0Aot#K7AoTw>L-`5jSPjsC<
zrrY6mT0(?p|1tAbDRy8<KFp6bla)oyxd3{}zj#!97RV(Pvba1MUA0cSa5twIaAB-P
zkZ{7DLLO$8L2Y$n&h>`0N{yvoIc3iD_~vJ=vwxfa$&R*AOq}zyBe|p6S+}L~?&TQs
z*T+GGG5&UEu8mm8H=tjj=e*Z!(b8xicU7m+%lM}FYMKHlL>;wC&rx<8LK6l?@0q5A
zO&X|Ub+`U<pvp77D~nd3{>Ms>b5&7tm5JFhMn#lk2)!dcmS2?HN~Nu*$x>u)BW5q(
zyw#c~4t~?uAa3^$0T-jL@$IH2Q$e0Rhf#w)iQ`N>Pm^8ILvyM^2eC)18Lt(F<JuZ4
zC+eOWi+&mHHuHm;YflaL$I&tbAqqv290ezqZzUvtW9AAu=a^=to9{$cp^xeLz3~z&
zOD8gdzwQG1a^P}Y+JU>?&$3Poh7sD>cRPh&xODD1koW|Unla86ZMJUW)z_!H&obAk
zI!Q|=pf^fKH>(3ZIJ+uW1A%F=a^r_BcH}?&CH*UvTT<0^oTu9E?4YRK#?tK%cme;+
z0+iU>M3*&Rj`BBY_V_g2AG{)E)r!GtQqQ<GXJ@BDo2D11dF?l~Na8J^ZaT2bRGzy;
zITU1f>yk(-#myvaU}^GGi`)acsG*q(wH>Od`SLfK&JPii#T0Ee5N9<GvHfBZBbwYD
zuXO8I4jXL;ic!3ag{P3pE3&!C{+{;{*t%b)Wuf2;tyER#fiT*HBNwQTWf|2+-+RQO
zbx`+m2Le!&y>;7eGm_VL$JkC?r@ox%s~LcmzKe$1W*?^+h4xyZ2sVr=57qQx1bH<&
zAQ|-QOrk6WFep2B3v9CgL2Rx{H@Yn0IIs<|hB29OmxmC0;zl!T^#8SJ=P`y~B*knV
zs#0io@a_hOp!RPFZF_?yuzn57%e}9nH`AyL+q`bL+U)4utfTd-dF~nc;o%wP>*C#=
zuKmsb1wyIjNYEF*+4LqdRUqK|PuHr+xgfRc!({s-0g^t`c9VaN8Aq`8+RuhUCE`Lz
zS4Ds$op+)2g?A7W5>2Yrgcr&M3}rDV6~@}IxUQQQ%RPMSxf8>Et$D2Wo22A=r+tyP
z?e@EdhG4V3ju&v7Cp#p+{f<TbbUR(L-CywSp?-Hd9oju*^NmOI1^my3<DufX|Gk7K
z==D@r<e>9Fy3x{h<BBNgUn(FoZWi_{CNwD7N^L|!oX3Fusd{W(Wu@~bBJoN=78iBx
z3LU~XFDGA>lIcq8oVab(iY@nFazEGhdI7m*R^hd2_Y6zS&UQ;GX?OM2!BXni;aoyg
zk-2waEb*z*74|j#`{LlN;0^1-HS0wxh_1QQyw4<0X`l7X+~v9%|4g#({OrwwZ>?y?
z-0_c=gN--~-kK?Rw1xA*xT{gbtG;Ku8FS4m;oe+-4Gtru^{*|3z7WZZg(2(L9<2IA
z=&U1%)fx>Q0a_0s$-uMvBVFaIyl+!CZ-FePKb1BW*tTYUU#3$bz4shBlO=-Pt7U@v
zf`@|56otZaw4vHE0dGzc0g(R2mW7UN3=-|b;<=W3W<inBgL7>WF0s*Ub8SB%6X9s;
zSBdJiq-<FYHjTn)_^gl#O0tB<j{;$!1=5XngQdX)(tqp*$KnaBMo{|&y%vCThyjd5
zgONDM07j;PNW;9oOu2i(cQU8Ozlm7c83VVmON4IFiD!95vCy;^NQT~#RP#L&m5Mz0
zi(e$9Zs7m;BNO}W5_b!Vyg5cZDvO;7lM>0YM+R-<nhV{OfakwRq)T03FwgpELp~Y^
z%$|x)W;_-CI19!*^Mg9W|AUc5)SX4zeWK*8Bs@xwpyK=Gr?z{QQ~>u_6OLU|lU17j
zTNkAJq7BC{s=ewOc!x3QGgG89mq`t`M&fxa(qcldWP)V;22FgzQ&I<z$3I!1e&|E#
zS2%A%gs<TF@xSGY7*UG}A*Aw5G3}C%r1Hq52%)6%c%%d;srmEa?(H9tPY3=)YqyDm
zKJGC=yfGoDPCmN@3CO|5ZsU`5V-a^B+|g~L%tMJ5zmOIq@fXKSBopkyw-1kjsK$k-
zUtg3l&%PJIpJM+D+Me;ve|gX<LUJjN_Z)XdChE>3>P{m4>=X9p6!K;)cr+3uGUax>
zgL#o#zU>c#CzN~G4W<SG26ze)GI1%rxrRK7BAq2cpB)g-pO6;M@D($X6cZv)^J~%I
z=F&w081)7N_K3ftk?&?s1ACy6ze8*HdVc}|uscJuh;I_f4=m>WUMb}7A>=#5Vw|sj
zwuZ_g_&Y%w<nJPs{eWbWFYEy!K^fqc*1-3u=tsQX;J0NUfRH=l`%gT85F+ARIRro$
z3j82uW2ILNU`BN?KtSx{1Y$o=8s+o>?=H^*=j#FbE-yUddsFh`1ax1Jkm$<=>MqX*
z2rS(q4d>}k`3?qPl6*A+t=c03IQ)e2fUDc)?+M}pLG-)4p@?rf;SUS!eZdKo?=_$m
z2F{mpMtwiM$Ok3EzTh45w{!%+f(PPJIuM}fi|{=LG(nH}CKLUj<lYyIMEREf4NwdN
z0>Il{;B?|xM0~dieT<L}24s_bWw3zzWfOfJXbl8h5`URu-4P-of7b^C;{65#@PIh<
z9bq`|cErCl7k=L5l}3EKMgSDy1_ecb&XxgJpJMwcL)jNZK>03@2PlFM2Ji@dlp*d5
zJ|TaXSMCvN*t@%(l758~?*{;#9?r0zCyaX<j<_GdHG3<FNAeX;4J3d(%zi*Rkmm*x
zA|FU_VFAY``trvCkJq2KTz*eK^9&|`xcuX3ZAklm+JAZ=obT;vP!QDGiCv)^HWe83
zZt3dK;nUOa`TinsnmvTui9V?Eyn8!+ZA|(&U5Y-bjoa;X<1kRz%gyd?0Q~yHACRH@
z!f1i^KDBT%;}7k3v2_G6F@Nbje`+|HF~AzBt$t5hy7zYXu@kj9ySQ|^yBAB5Ke;6X
zMePq1om!_gB#lQ%txd;@<^RVC*|0O)N9yZf^jZE~wSDQl#><^ySfyxS!04ZCXs{E5
z<&aucS$<nnV@_#eX2-ZmWs_2y9*!j#Rl9J1LD}U=(9`p-FYrkJ==DLejRyn8Y;yU2
zZ#93BHS`Y^3#li7+E8}ytzP40QOSb=*IeBR@m4;yP8g&Yu}84uXKx<D(Zzzdu$G2P
zcEh?ULo(jBfqoC<f)k*cKK-|N#V#{#k30@f<7-X0r#|F@oUc<!^Uu6#OuoS3G$W$#
zbTG~PFa74{SL*F-FOpi>a)@h<a%z-!yKLU6><LYK_x+D|$))p?1MOH3-;uwy*ZK!Y
zl!S^id)I9~a@5x_sYoX3Cu(wEpgpE)dT0(v{6uzRX)$0Ba0H(!0sw>9%8R9=7)QFS
z&|zCjJlo2i)TIm<x4l1B)l1l{es-7PM_H=eoeSJvE){J_4h-)<8&PJlIi8(Lv`o-W
zLhf45E1sw;3G8tDT^X7!lt|2E0+a75fUoT}vo+UNSy<uYxa3yNd&Q+Ua<BdoE!%5V
zK&yKLO~S=6G`01hFMh}ChGKQp<c;3c5g~rK<4xZ&lny4Np8?~iI__7#h<=ZU?Zs5%
zHy<{?d;pi%GnZegAiaTxp#g77ivETz-nhrYaAB!M(p+P?A9H#4HwTKkpSGK8<KV_3
zoWxzh^Rn(2I!cigC>^L*Jws+$@8XqeB+YAwzDj*t2SFagv8F}i1PUFOOe_>f0RD})
zArszTl95zhqe3dO@tYAHWwPk>5AMbas+Q_*3x`~RUk^OkjF{c;z+8`=!<96d{l96L
z=&ea>IAl=H8H^6*wdMyCV;R1?fAu82FP3mLu%3xmaKENBcle&BQg#$p&Nr$*!Yc9o
z!JBDbCP!7?Zu39-iTv3I%CGqK6pbkcJH~nZJ=?KgtY07xs#gH!COX1)dl}Iu6CRb;
zUaC+>mGQCo>CqF2<M&~Rqn|gWh&WN|P{mztKc@KEQZ$E^1Q?^e75Lq7-&*Ys2HwT9
zBsA$ay=>*Hvt)T=FLVndTGdbv{EJ}AbLK;CBBBf;-DNqrV)aICy@VNFIs}z3l*$(o
z@ktP_lzhNFeZtq_beHh29pgE7C=O>1iNxDpe~Y(?Yi+Z|&Rq9hx%)5XQ#n42m!R*i
zHe_;KerJ#y9gc#VGeMW(?JaqXDi=DL?ezy9Lc`~fIayTg(`f`3lQ9$D!N4@}53MVw
zkdcrP5C;V*0?chv$jHd-rT6>j&&s4w)uh2h_K_3o5h(Fnkeej-(NIa4yPEll7i6Wn
z63K|sf5wr9>XtalMy1RB<kLs=plM@KhAk_O;IT|ys?c8TA}vw3UglbkSE-WxuB+*J
zeO>9!^9PQtFE0UKPg&T}tuH<9&%IuPokqe3Z_YhkEp;sK?Alc|=F62UuMeEHy;t9Y
z|8D`wP=fVc17u)>8HWEsystagf11B|{#O+wb#y(}rBMA-{l$?I=vGCD_MCq54&IqH
zMtiVkWRG2H-+=Cu7DHN*mSgBM9kK-2Y@eiEX;w!=thP^PT&{(?frVXHoS&ap)K;up
z`ww_)qrMy)tRCz|iSs=#QTUJ)%3soNC1>~@{EcokeQumsi$_5+?C~8o7~J34R9N#$
z?I2Nbb-#YUq%@IQRpi^di{kBA4=J|Dof-(?rGvvKXl$YwoGH`Fg2aU|E-GSuX8cp%
zw_c}IOef1VSX`4<7kc6{yuuN$avVB|DSYUoVd>(2RZ^3zFGX#(sxdmq*ZiNZFY7|6
z0%!%vPnY{+3nz?usiu*mCeSWjWU<{|sor3h%#A8_?N&JCl-=9FViXK@L1cGsD2zVb
zinXiJ*QG(V<FWByfrJsS7MCT|NNc_W)1npw2G9Yf-I%n`vr&awd^KnH5%hzpq5T9$
zP$d%!a3M*?D+YzkntBfy@$AQDsfM{?UQ$P(+6AILw+p=nA0G#XGXb93^W>9zL{43f
zV@8EGX(QQoMmPVK36|gC)U?f*n<9w^_R??BQXLuSy`qT&{=A>9-BHL4&BG?<euZnJ
z{Qlw*2;feI<oP}eUrONrb5U1j^OLh**ya-Om-j^lv%jwZnlGJv^kXqNdJVH(<a#Dx
zLWCh$#J>}|JDJK@2K8SJeZy4L`)UU1mJH+{`dj`~6=zNU__2l^A3i59Nat+x%hQMR
zcheoXYAy6KoajK|=3-oT()f)!K?LDIq6ZdQX-}pX&Y@QlobOa}YQzh63rt0gff@`b
z8~*zTs`2u^95ZDy6R}IZ1eufiD?~Y-$B&0Q6qDEuub+W1zv1AF%5mX{AierTiH0(@
zCw@()X+(98Y>wHE@f3&}c4+LouMC)~1S=TZuhpj2j}}LJ5r=_U<!SefCeg)7Q%zEo
zQH@d`a&mA;6&<eC{ouaxO}a<hS4qYa{5V)^jO12@EajU#Q4H|i7C05!_4>iT_6lB7
z8(={*-uhNg?Zlw)+TrtcCB*#LQ$Qu^cdPIB0XiHD6?HEp$iehwVMG>Bd;n@0|0FO5
z5Dt+gMpa1mOPm!<)$Qw$K?jEyZGgJsK86#6ZJ8%MZ7^XB@+zc@>&wZmu(sLLrQL<W
ztsi{CJS$&E)yDZn-3e?==*RIE3enx-&y?|8x}a@wFY_f}`=p>faksBL!KJ=Y)%@&)
zS|o9SKP=D((cugNHJcE=sgF)p1)jWNI{QTMr7BRDnE!&}K6d39=-79ax9jnbqCgjK
zHp?XE6A+)*JnX|^*JPltfP3_|)DwO6`(yWLCIIs86vUzFOx9sh>jk$=2JLrRhHD$Q
zhIe(#@Y&`_F=$OHmIT0ZUNSEnz?EOZY>NgFTY0l+G_YPRYiOen>DjJxvF~MpuBF_0
zSL(JjyY8n?=*m;Zt-rpaQy!F7-n^`M%P|~)HEHS+ZT0tJ7{#fa9=D#w8*mH!LQu0a
zu@ZDK!dpEU7tuPi7gcxj)U5bTQnoCKkaLWVtlUO$OvQzO8`T<!nqv6z&wE6Yze=TU
zOdb8h_K%<HpR;HxRS^aebxO#P&~>sHLn=+p@+=4!G@1k)>j$JSVUVhjle!XoJujiL
z%B8v-?Bj%3Rh#RFNGHApTNJP|7Lci*%y4d5sBpWWl(162e#C2IX%ED4*Y!nJ2bM*A
zmR<GQd}<OEj86L<hnU3vqbagXvQdhAxf3U;832_JM65SDV@Ks19x3~QZF)Fh4UOF&
z>JrRZ`WUhQgC`^qdq0U<>^=e+xovlaEoz+VPMn6?{uz?-NUeh_al2k6Iu+&56U9Lj
zY_bAh+fZ|aUwCt^{)~IZ(fdBmICQ&2vUku+>O_b_IMl?U6|nl5Lvi!DLEwPFn~D9a
z%+#S{ll<TX>3X*~ri_t>+r&$1fphV4siNAiBi=B7-(sqpT>xRz*m^qkxM@i9(P8+&
zFcIva%u84lNpRtsp$m9$<i!Pn)`Qd^Rv{&(mz9?C7h%xWl}O;rM9~Oa#*>-Wnu%zP
zX*|9I8BoAH1Mh1t_JeYx7_OoahqM@DDh{3hlBx;K>#3*3ias{6Vhh@o2@MjSeE8|p
zL=Pyo8@dadCK$YhB0ov1_4mtbLP)e;OrfEk^0k2wET^geAxaXL5``Vo1OV&}gp*QB
z&K|a<Urgwy5Xjn;9i7FTIli%0`OAq()9kv0!aZA5L@{sNU&)zV0#e#dxxgC!SqDg(
zl}K~6Ca8P0j#mA>?n5bnzJH3~kWG-5ONl$m9VXAwM()5c&f%w`o7KF?-2Fj@+4<fP
zLAIq)s<lj~T|pdqC~UlyL+qj(n}{nQI)Tk~1w90#=~70a(0T@EV&6gVN3Y|C5xg(q
z^{PIE?9dfGjPp=TlBJ(~3>@}JtGEHN<I#cbo;KEfQ+yf_3MxmoqF2O!f#vO>Epor3
zWuh0cp*=WzIJx@q7>QN*FbX0mA0y{0E-`r|Ms;A1HJoE-;r7W8a>USiQWI8_byy$h
zrLGw0t(#EdagiW#c5Y){NuKh_qEF1M?>#E_t8iVxaO3rSJ~(_;d`V`AL08*<_yIks
ztjPXP>UktAyPcgwS+gqzL|C1#JkH`P*JWDAieoQc2OMDHRX2f9eFfps(A%Tn3t^>A
z_CzjQEqO|28McQFQjg)5bz=(cZwjVbW?dz1lci$s2s15h@!kO`z+f-lI%$1+C@1nz
zqp!o0;ZFT!$f4K38_;}m$URi1<cPZ^Q(i+^(y=YDezZrTDw~xmNOnH$(A!di8J<}A
zAP5ttHmQcc`AxuLU-{x=)Ie5*A$ab=z1Opo0#@v-E9G&vB67m>oZySHfG*ex&<Hh0
zbX33fcMBmEdxa07l?=ZGp(^{ct$BLm*@obk7i1mPfE3G}PAx;$l@R5vHss|cz0{E1
zFC&|L&2^atlPHf6P*~56;6=-LXZiU`;Q)<Yt_|#3IXwH1#|@r7?0Rt4<g0jl9;15=
zKL^`OZg&!cJhEqQn|q+f)b~Azue7b5>-+0B`7(uZ<SLqX2SkVN7sZ{sO313*@0Jg*
zNt`9iV2DlFIg2(89eFfT1qRN!=F!=dw&f_z2d*6MT9cKcXl1WFTAHXn?^puzUmEC6
z(e@=m>hd~0LS${AvLyCC(fcy;>VbAJg)o%WW39(RU?}?7{f=y63Cv7q1j~{qGp6ce
z{SdKk+OP8#Bt`zw%PCsg^s!@Hy#<B5>6=NgdA!|oj6o1$gX8babMm%n3*s57bIB83
zNA-Oo-=(q~UPD;68IfSZEg!#mMw2B`YiNHJ!f>!JXl>tbxuY%yN@?bjc@bKzS%qyo
zHu`9dR&vZ71g2M5b(~R%pS^V%#BOE$Em?DrU)Gu9@};@UN}*G)w-aPQjOZQn$Vo6w
zC>Rwo6SSIa?7U6(bk>}hh||%ZFAFsq>bhEU0l=O6UQ;nSFZ^)b&|oW;1IxxJ&HKy$
zCcg7BR+Z3dd*9p~tykTy;H4Bmfp-#hJrMMBzIJrt?0B^-8WJD^9iArq9f#qePJATk
z?Q-Xi;=UTObe$XL`U$GfPffl|E5CX*YgRM{$oJdB$GJ>^jG2z<%IY>EO`uA81_V;@
zrVow8qxB&a|COyR1|5=AqGlvI5}s4uaaXZC3NReQvfsf!#O}T<W%O$}8yd{&#?imV
z{ADIpu_dD2`T0zHW#5Yf-}@JbPJG|@XfNs%_L+GlS;T&R@Of}dAwzYW6#hm`tfM$F
zzyjv4U7?((yKKFUhT9o!qruIxNTS}YDRDWCZD$-prHFfN{@Z<rmu$cHS(kq5UOpMk
zhCAlyd$hi`x|`kcQuF4uF@tOEzu`F8kxj6K&JWZ-tf~%b&dvLwXy%4tcDl`+bgynU
zpKlC;_<q}ayUPGmpEeJ)zyLAEyGU{mlP}sQ{7VKV<5tmEyPR=_Y+rO88b{~WtxV(O
z0v!?iZ=BefDTJcUwX}jwhAIu*9)wp{&NT=@ZA9tO!cBAK1ECZIYi=0hhKL=c#>Edy
zo+JH?22-s-+cKKegH6b^jga)!@Sh%eaU9$$)OAl5anN4%a9r_|bLg8EEX)C`SA^%>
zeps6qcKdeiu*N#Y73(lhvbF=jBGah#w&dRdb9dj-ag1H3f3x2Xdp%F?An@yNe&jy+
z@b2eSrZku`)@Y39el71dqi*<2Xqld1qf~#LPWY<wIk9eeAC@YsdBz-Jbb4Rx*sSp;
z!yd{1FUrm#N|R{Y)@j?eZKKk*Z5x%gZQEICR@(m4wr!iQUi040Id_a0V@K>x^di=t
zYkhOdz7;^96|j8vU1?z?(KfiB+H+Qiio2_RcN-KsyybuHG*f<EyEhHWH(f=)KvCOe
z;a$Q%gLV27{x(G`9@V3QXOvA@;+Jrzc*)6B_qDd97qMxT9oeZ5W5mgA`i3rY4rnN@
zX;7&+gnUETaGY@4kUI3X>STr|4t<_GOE{N`A1}6YUd_|3v&eluOoix{1UwI&_Y9xp
z<vJQzVbgO}+;J@5D+K2$ipqYPhEU^75%_sy4KsOVhPIk(g?u(NU&6x*6GY55B}W0n
zo<rv9+Yh=;oIa*?B|)9!o(~fEC3ZQpIUQ8wJtpn9{!w^j@#-Y@TN;7MRjV^Y3s#KG
zLyAVqg>4~03JnwG&Yf8)2!%i9e>G8<eVcRqEtz3ijl+}T!^LNVO-X;?xH^a1;l$^V
zu>2She4Be+oM1qDpS~D9>RcXQjuhgLB(3KcODDxC@D<5bAcH_#rd-shH3>Qa+ihmm
zMW$mICKIXRo8;NlMBK8Hn9W-wp1ii!H>7+og@_aE=OHNVB~t`*i%rzb>Clz9&hFwv
zUR{~DOhoa6zz|-7g1bjB1#fH-{w2OgmX#|smWQ?g_?>Jjaa_$Wm7`_BLp*_aYZP{u
z#+=(M>yrXW3L5gamhJvvenODx8q|G<`YD1Q$&%AJmrj`dA(Ociz3TU0w}HQ(*)Q4N
zamSmT&}t6_W&|xd!4mN?2*StT>be*(QrZ1Oq4HPi*t9s*i`e`<Bu8YTzQX-AjQqrd
z*%(E+`mlI25l<_y3+FGMy+1wh{yjeh54VNPr-ue%k4K$xT}j4lrpFJ6Ja3p;f|YWJ
z_h<5Vp=EO8(9PyOyWZLjJ2$wG${CxY?fmOfgSIJfPzvz`SfptF0a4V9Hwi+?pFC5&
zWo!c?JPP5!0Ofpl>NTxGed&5Jyam+S$lC|X-9NyXuES%lNn?2N$K7g9z~Po9oq(Kn
z4-&-0i3F#g6qY(K>1i2-j;ownF6ZUh3XHt6ucz*w_GSAIb~(Z(Z|HAMw#LlnF<-ns
z5KFmyLVg^#`x`dBIPB3}JCcV#;(xF3n6|<P3I$-#%3TItajJ)ZC6L4bOK(Xqjd29X
zomAy?1p~2979Z?gI<iP41ii`i`%p4|$xM62Yk~Wt?^*N{DxHMrKyfW(y&-rtIY>9x
zI<NXY3wv2*N*ZW487NRhtWpcNq=l2QsAisq-B;&gu3F$jhqA}9xb~O)oeW|;sVt4B
z8P(_kjj%-GzzR2GaPJo92R>f25m*AgbE$ZeH!c<prGCvI^oPSzTY5e_XY*&dL9?Ge
zYmggS8;}@L{Q>=-GKOa;ycZt<5YXg5XLZ*90$VmRbFsIgw=l7z|F6*HOI<7P4UT(%
zdS968V!I>JBFXcJt0Ai<s}?|V@tU|*lR%|1nrTCsWLmf>`?TM4F7PiDG9jty=i#4K
zz6NU4K0~I5K|?02(`^Gu#>j!~#XGM>oy34J`v(HgW612;cI}~|#aKT~zt}MkApj!q
z({``F+;-@<!(tp@flU9^s3ftxR>p4#0{JaboK1HwbGZvLMW2`BiG+tVlCzjNlKdZx
zL1O3QNkl_{XC3mnpfEPSjx-Z5g`z}+%9s-|iJy+*WwJm-5hr2mkKGn`w3bqx>(Ors
zOA{1k=Q)%=f}z?{;8hPSeTz-YqFrYo;Qjsl_3)^7NJ)&8&8>vTvq0wNV@ZHQ8)hEO
zg;12N@6fGpBLGJfr8|XK=hY>r5F@5DB-09j@O!8H1Z5Enm&a3ym*qUH;M_=X@9Au)
z{X+M&1s6K?r@gxmnfwY0DfH|^FJ-=>|Iz{}b}K^AdbQ~&G76tWnUG^oq@h+zIGRF&
z75skKdJVtH@A1rEjvk8<PR%^fLq?kO5)zT-AaWqKfqehqt!GgX-lYJ;VTA#=7bTI-
zBtsAS#KcvYLEsd+G|-y(Q~qV8YzpJ~{^|R2HF4c^7ynPuzI*(FMH!a2W#p3mkuNtg
z4#f>~f2Kemc$wKof(#J<_vNDxgAO2ZwDp`OBx1pGNLht#gy<T9g-yVgpz^>8;z)zb
zRTOMiL>Y4P1@gIcX(N}}pJ@=NM^UzcUPM~xf#es<#j9$$8GfXo2t?PemC;*fBt!_@
zE68iJ|FSn_q@uw_f4N?};3U-lIq39vt+0^W!#6ru9)m>Gj7FV_s^~mJq790qC{e<p
zQPdJ?5Ij=B;l>0dO>{Zpc7ZI@ytE%n0g*=bNu!L17XXR$QG~+e!0|vXYRm8b0J0py
zaE+5~xHeBIq6<J5jKbT+dk1IfCGR`%3D$&&G&iJBfi0Y%V(gD|!WTMWEF{F_%4EPN
zI`Eb)IT;~OUTODS+cQ6yLKOVE;*MNlx+uI~LXR~jf_%6lpJZdQT}aRmCLR)ZsK#Zp
z>hZ;QNV*6m{rxbB2nt^oq+qBWsH>=n2TukTyUJu$B*v28nNmnvqLdOc;24-G^7Ts$
zGs8d$&-1h{1Lqh2^FSeOj!jq@s<(;ARKQf_8ATb_U?7)tz#PkD@iiJxcNs1k0G3u;
zrGBa?4UtuUg#bY^o$2VC{;>vIy>F#hz*}zHz(MyS%Q{PZdIt!Wh^GJnkCMT17Nl0h
zCKhcjjAS-#aiE_rGi(lGss=qnjH9ftv5p!FgJ}bJ-%?KlL4zjZ)gvVN(+bFK)7&e%
zZ~H(I8F|Lv3z8Mcki9h{GTaD?D2P3Ofn6H-5?T9%olaOa&t;uFd+3jyk;6cnq5TNL
z{nE#DB*@A-Q|DJKD=&Ne?=M<S=YfSPuz*`NLowu^h{Z{nH7{a^T8M%RW=U@+2Xp#{
z5==4`EF`+>`m$&9o?NE6K5gds6{24I6tIAww$Wp9xYo{q(k9x5o$khTZKiC_?3(t8
z5Gi?J!D&9fMcX$iJThj$4wuXP^u<^7KL}@=_)T;^tDKD9cZlv&_x*#_wZW}xZdcV`
zbcixol`7ABLWWj*n;~%H$#RyowUyg*nKY%vD?C0RC(a?QyT$G2v&h}a$<yN-)?2{x
zsUSKNHLoQ`Vv56R3uyD~Oy~l&>%+%|Eh`2>?^zyp6O?1G!$m0?F9=Z6Jl9O{DUlEE
zbz@iF2Q`Uz%hqS=i;ud}nrPpS3<m`HV{`GgkuSjS{haCQ-@>znezsn6k-QyK>!lAO
zdAS|16?2LbfG1ryMQMQD%Yh4@0(fx{l>FUCSAa}%<<jKs<5`${aqHn25oOJxy?hR_
zxM+{9ATKwyhzJP2L_`gF&vbdhRKKaJ3n{u)QIaDV4?Kfd^MC)II{ADeR(0Tj`usru
zp<tpKp|85bINuHx`_eR?o4x7VSDxCR2UnG%+uuR)7c{GO%HtY{*2QjLg%jydEK%`1
zy?W-P>|L!r(%b6s`&!5zRE29@|FSjP1HXFs#%Rw_kpIXs?Dq*G#D=wW9YZ7>$qm+V
zcA9-ZIv55Pz~0?8p}_SRJy{qA4!HgPxO1O9eH8daNf?UD!<s!QSC}&IJn|5N)N$2j
zc;cb2f5}a23UVjR-Mwx0y<KrU#&g|8z8k#^<G20hGVYB>bR1~WVa%1cvF(drv+DjO
zEjQ1zz+1!W;SO;#{Vw^86xQAhLgd?|+d=`E+fr*K5uOur0L(ZW!ViDPHr&LR2YQF+
zrd`Mx99Kye&pw3(lhu-6@D@IPYlP9CJmA>BD$a}&wA}~2v}Smg5*sZK%E2UZf*33a
z@yTpD2oA#P_5ONi%Hp}WINM-7V1hb3GE|g!B76Do*qmGyicU{aoIO3<y1aPyE;9q|
z(|j*C<=p>b^*B}5*e})8p#5I8b|Y0>xRc?P?cx)$Z`W6J6<*j&L1k0a9ft1I7*jR{
z(MBCRB4#tR2#pqmD`?BshOw#ux;_wGu(blKcj~3l%N^vWSWsb_7{Z<ntW>t-REbio
zs<@b5$)r+L$@C8}Vp4GzAehb>iswVat6=tWT!ff~2<O@b4cG=Iymgo;m;(xY>pv}{
zKKs=LQX%p}HDDkSPnaESz)S5@P!UVt&z{?!LJMm($T8D0fW7CFgS)kN#HrR^^zA5q
z7a7RYcftsfMa{hL(<g$5HUB)ThxwJ9dPI@3!U$7H<Xzk%UIvBrY~wnZW{k!%uUKTq
z1|(~r2ri!#6{%*}IWhF*`^+mT-OKFCytjrXSanjE9}Hyut6U0+z1|nti#&kUKykpN
z&}NIu6+Sq)MZu(J0nrCi&!FW^Y5>U`KXV|+H}?DaE~5D<8(CBP(VrA#Ax@LwGT*!n
zz8~O%h~aKC@@!sj1bv3y_Ka4HHshm^5KIs2k{)Uh!%z;2U)w(u0uO)935GrbnoRaM
z!8^pC9UiC9v1L9yDQ<Nbel~uW4E3V+3r_c+FSqyX&g6-S%W4Z$m*r!LQTT4q%j6%%
zuY|PDjQQ9bW{Ly^|JE{t@J!tRM}aVeFxo$`wM>gb>G-dR2|OEy!1(@grnihj1a4$(
zi(|06;mmk}b$+mA^IgN;1Wan9^z#)*?CIzy>}v6o)I1h89F@lTJa-Kut8q&3&+2%f
z7zmLKg}V*Gq6MUmy{i$!wV76-#T55VQ&=>86U<7p#4GKDzxZ()ug3K8PIIeY7+4ab
z+9GtLqen;$TNUSQOfBUW#BrLHCj)eJPwd|elyJBtp<7kjql{b@%}sa@`CXKD8viPn
znQqTCvz5A-RzQ%q?a3F#q*G$kufFt$(PMxD`<Qgu2bM{so!<SK;HcDvvlV8sSLwl;
z8!acVj3I&wT_ZvJ4e8I0%fSHpw!dTg43%bdzLrG1j9wM(x3IGCw-l5CvHtnq$5G4X
z9^!spolOtCikoAR?~>zk(8m`{RLF#5)@n%_Q_jp_E1#Nv|1BeyJ{oKB@f7_=O-_a5
zBU2`cC-fMjzd!<zhPsyccDjpLtB`7$+UPC?8oE8_$pyLu;)heclei5SNvM%C&(%?F
z0&%9)oRX@opufN(1(FSjv}Id|D;`@Seo%vTg{4ZU&x&Jl4`L})GZUZIvLoqo`E1_=
z!9TnPPX?0OE8KyrWG(X7nyCb{B4RFus^3G#JtvO)Yp|m#Y_Y96lb!V>M~)<{0<q!;
z`ILRH|8HAyeQ~Hv!gC?WmufPVRpj1$8t!_kKC;Oyheg?x?Rm*^(vg2#pbF_3Cg2(b
zMZ^(aON63R?6VPH27pnMXe?e50>1ASEF8Fz0?|r}Z62;RnWe*|^Qh}ySn>xkcLN)m
zB$z~WgysKV5boh)hM1z~zax>bZwh75MMD@agjlv^(rGrBsMf*;P?Qn#8meD;SCfV2
z@~DW|)5?_)DwNQbNBk0!;FW(S;FS$nB*lC+h`DHl6#t$WBjIi12MyvQZAPI(2)htg
z|1oSEu3;h@*kCFQGVFy2I>1L_Gb^~|c%Kr{Yhci6$^B&mN72i-(%L5uzV>ZDmepDQ
z8=eT#0AVZ;CPDZEBx(NBvuzlFw}l^Cj8C-*j6Qulif^b?o2G+dBtp?;hpk>XTP;$k
z6+bW_*<xi7O6x*d>%2~w%S&qWdNhVJ-jgm|*x5g?_@@f0ApD;r;9&<5NJ4+2rIqC3
z;_-3<NE^uN`bD2R=Tvuns<MS+_4W37f=WV+A&pAy-4R2p(g=8TahNa($?9j))m#h}
zMgKrli#WW?GK+1@b6*&UdPMBpT&^K`)#o3yNL6n0Oyac}0<+FvB1SAFwedESsX@X*
zgG!np#TE9dw@Ki1vgBEf6iGe{6t;JCq*8Ta%How=v0_c@u{z7L|Ge(1s~fZGGlpFm
zv@KI#r4V~Q?V^OdiFo=Ki6O@L{u=eRx6Z_wzihrGb71(x9Jc^lL%O>4nTDU6;mf~_
zdc(umqQm$VqlXe^|ERtG0ENzcn}n*A4!lL?RXe$Gjk7c4-vPqi?;A9FI3C1k+20uP
z&F}xNELhrsCzqn@JuuNx7|G$TMZRG3!VJB-V$vpEP9{iR+Zi|mOA8V64aTl~4-K>G
zI+1Xp>daM3VIZ6LfD*i6R9Sp0m>=JGK~Y<xA<fspX#y8Gn=}OkNFR`NJ#$UdCEj4}
zDiIrmoIE!vqQ41weP>a#6*R36t~%cYUzrdt-%l%3TF>}`PaXwtkhCm7J2vKvWag*6
z$dn%i5)NlrO3?)F@hHSg9LPDOd3kxam+|HZB{^iY7x$5xc{>=FJc}28O?+|CD0?@}
z`fa$?m-x)}{9~tfo<*$%sahCWIO)*Lkx>f`{4(-EqVdIOXUUllwUw#`K$7j&dfuqW
z8>JtV08B#Q0G+__dG&zYsNHKKe74V8SCs}4^Y&~u2r>s;0s`vJz~gW_u}Z4IEZ0mH
z%5zet$mAv#6461wa8+V8TdOoa_wD;o9J%2#-@p{Qt<YRQBXiX>5ikc)3}gi#>@8XI
zf|UUR?qNwzOtmbI{U$m#YRSU!HEI=>gn329abuA*IJ}Ssc_#VewQL%2RBAXhG-uh%
zf>{X|U-VGfbY3br9^-}@#j*PwH$^NGa1kLPb^AzhVjVg}ro1ODA}<dufUh*WSJKt>
zGY=D;d8!?Ej2#D(JkGK0%Hfce-qFXgDT~$ihst-uqurq)3hMS!YIjbK%8i>i;~IG)
z2djzc5ihGVVH5GNM1muwU1UY#ly@vd-TUL)2cYWYhwMcOlkDym26Ve!Q<K<9{bb}c
zNiA-lslntvlC1uKjHnzl7xQkBU$DnVR3Q1|G=hI$D?~d@+~eq7r8SY2r#MC;QB%`%
zr~TC}&x4~Z!&N+qRk6ZjfR)JOnA94amBw$x2W^GCRhoR$ZOm(L6&7WF2NiNNPB;l!
zA-B@}#**(Z$zMvMHi*Hn18$j#VIofWTYWGz-C@{(Lo^_2tX$3d2qGIxA8@!I9Bs~6
zI&}Id`j4!WyaE?|vN@2Lmq&^pEK@?}q6ELo6GF(hQR2bOYT&&3X_h!4&KSgu@MWbD
zS+sic!Jx>fiZariGFG}4djwc=#D*dDR6HYqs+#kr6fbQ$*5m*IZFB~JPZ@(*=T%W_
zC}vYqYp8nV-`(Uq5&bwi=aWTtaul0TP?ezNDJAeWEA?fIX?}=>Z)%rb1I=%v^Fw1u
zP_r_-CVUK?iX(U&$CFzeCM_{fqY5`ZJ!ef#WpL8Cf?UGL7$Q&1F_sY1=QoO|Z2n{A
zLL0hyNtU#R1g}dkgi-qJJde-=8P2=`YJfygXB$MT!w{me#o1^7jZUeW5phDR@2!qr
zZY-g=!M&9z8vR!3t(m4R_)tKmBad#>B{+f}nVOSAQL2R&v;qk6!5iwSDF{mgQ=)>Y
zsa`WdTwLS0zOS8p=2PzYy0IH?&A<c8+^~`|mlX!a<Yu^lNi?qkV-s8skz5Zo-kyb=
ztGT?*q@}&!!X#VQR~QA|M4pWal?+Q+DjyGb<aG_<0s;jgggO?l+rG9@IOWV;^DNZa
zDiCRxri?}gHCK3T|L(T&GRg6>76D_xmBu9)1NvEg0H;YwVmzT>UVWz%UquoFX`bDv
zc)$06ZRc(ppX8YUcPiw41Q*WIyz~T_@tgPR9ooVhT^@CN5i!NOK6l<IL%_YzK-Va*
z9U0838NIA4nlGQZ9ufI=bee*l4(1D1!M;)2tj5?Fz!hA;zZnYI3UqG^=AU?nJ)!kd
zguf#s+4-A*)8fM{dMg{0xS~7ro;hK)T8%nQA$Gpfsz<G`aWw*?aeGbj;Xu9J%L^}4
zgL8GRwu5IQ61}QPq&4e&llI6~y5jJXj>0Ahv;MrT233sdtsl|qPp)X8)MM<+ntjT7
z8V6eG{JeRgs`ffminNTpUq$n2p9}>X=WAxL9@~9;MnRAvVhtxrEMgMV1ucCI?<Q75
zkW8&~I5(qnBz-zxicFa^AW_#CKtAdWXwWr2b)Hiy97~8Mz=)D<w^XG%pAZ`qp8Lgs
zgBDeJO^_~EoV_AauGqEk;J$y_zQOr#8EddXxOXq}u!w1NSJ`WKePEc?LnmPH?@woB
z@@CfdJ-$lu*+-QR!KS`OHu>U$?p`z)ch_E$3tFzRr&2^anv!_BpU1DIPi3S_9U!%6
zocLXqUhBH~m50jtC9d;IRUzG|rP;2M^qk5q?rh~1mFr-0L^O=g046uCk$>%IM03-H
zL$l?TS-Dv6INkYFq*h_H*X$lIqp3A09Od1<myo}piX+uf!N;H!WrJH>_J{*a5mctL
zzkZI>$hO38+E8ILcCWOO0A5&2T%KQ|X&3!?jUo!Khvw)yFnI(#hwU}up8`g~4Ii`)
z+rZsdK-8-y`f9pCKVZGeA3J$NzGJ<p$F`&Jx>Vqu#n6^+UdjBzCT7L>S54%)>#eQl
z#acSCt1!Wr)a;h0m=>hhi~f&H{}oM{4D$(1iDzhhR4~i$$6lCIJLco4{1M_3*M!**
zw)3w>`dajv#G0q^7B1JpxJy_Xkxygt8g7<6CS283cnAJ3dOM+K?oagaMDM(>vcFXl
zz0N{!e63s{N7gEq*5ePw^Qx&Ds;v>|W6wvPD#TS|{FQq9Fs3hp-D;28?BMJdCZ(k$
z4T{~r(&kkB4?At9QZ#_XGP-dLEsTDgW3VayvW(De-^4LTN4ZBZn`n~#6ELrktk+=m
z!5i{+F@wi6Oq(t$FRRM={IH+pnQh!~T_(0xg@@k#ei)c-_?&(mCg1&yCUMYTen`xH
z!z1p}LrZQ@9=CB!zYzxjf2O_$0psiLFqE`ZIc!aq%rE4QKtJh01B84l?IYLov|A(z
z0S0Bk>Fd0oUOy|Byt}sb-qki3G!TKeRP}fu@_<WZ@atdgcI1~EP-A}~6-5VR+q53r
z<59B1zmp7X4HQMU7Y&sBc=_%ZTDq`JDk!}4qG&(%tDNrJoSA*9WAqve9G1k!SV~t1
znB??Ok(WTF8mU!I^3e|(b_ZpU7jb&4k>qNJOi~5XNy_*(mrd(QYpb7Au5q|d_D;T+
z1Dr5uw%sJ%M_rf`VL+=;1Zl@?8QNgXz4QwN@Ha5#8N|BoWn(W-rN(zUg4wqP_gv7)
z^bHLdnZD%l%p$mAC$$2>b{?eZZZY@Ec4_+`zO{sohQ@4rqxHx#x@3ZVlIrX9rug^$
z&UrODYD$po<n*=@`I^~XeoL&+E;ldYLyPDnOS_lA*iCWCEoI-#!UqZ_yz`Z$ln6mS
z#t0-HLF7ze*8Q6Q8eDLrHcjz`SHI>%U&vK4%#QukVY!DXy-6|TG?%%Z?lBBP1Ey`<
z8QJLJCHbHsd25-_+^T$E!lG%cW0^%CVIG6v!C-AO_<{h}yE%k(@{&?~Qc>Ifl6G&4
z+Q&Mum9%sJZFv7?;Ad9Pm`g0(WW5nOrqTWhgLxKx**gwhW&pv-kzGoWITR!A_SB=E
zeDD~RMEAhopt3$@(V80tlF|cTf`P3&-UxNn`Nc9KI*bGL)!AKjWw!w_kY8h9)GU+;
z7DGDTc)%tTSo=H8NQk2ZfML6ax0ZyD?x$2*BFTB!8-K&6Tx4p2`&>$uFn%9N5<k;D
z+jX#}t07c?QT?7JCG1y^t4>pkC2$j_R_8TOUkl|~fdmOnTN6yns>HrXRtTz&4(J2r
ztPUVM)v$5+!%(pv+wjX8b}2acH}i5Uw>v#v;6!aC9RCwT4D}tzTON)Ad4;p_WEKdx
zZ}0vgHZXCTwzcpdYMUXfW-FV@a$M3=vNNM|i|Q?s%&d#BI1Cx2oa<%DK&(H*IWnFe
zn=V%>XNoZPutjTh3g*aPZ>Ql@@z;?e*bQLO{Js%d@HDBta1X?y7FD9lkLWnEdTZPP
zO~@c@EoS3Q(kwM|4$_n<wy|SKnAlZr1J>M>OVDb6@0q~e^hC~Wq^b=KG&*h2i&Kyo
zyv-6kw;C65He2RJ4dr7O@pF2(1K;zpkGu|l%V@u8xviYFWib3zG0Whe7hpTIRa7T{
zD4!Z45GF#%Ta0Ezra_d2SVgW8@2JW6dw23+J(K1M2gJn|_#$B>N>6feYrvs-q5bLg
z84OPv{{BZFUZ~bY#dC2Vw<LCrMRohKVnk3En!^jR4?nO=qa9lvX4#)P9B8(U%s9IZ
ze~QGsgXDLSS($137NUvrCbVx)Y0k2m;5d4PJE8P;?BHLJqIVlZco2=(%6CV)=uTNo
zd*gYboyDwi0j{C<;bC9Nh=UwR6Y3zdDDzU{nk1o~dd-s%gxnvicO{U$>k;@f{U)bl
zfwlTM#*$uHzEn569tcf8`1(z@K4rUI0meS%>x4ldnf7dbbVI<)^hY5iu$2B*Auk{O
zrU;j4TeM?9L>cM6Qv}2*(328k=%45@y+dzZ!av~={FNUsTt<}H4}Spcgadgn5=shS
zPjz>yl2HV53#dxWQa`rcNKfIGo@7c<;W%9S@}T`iN(YQZ>PxXo)#u=bv`5?tlg|bO
znX>?9Mh(Y9JGlqTM7#$Q2)d`ZB@rI;-*96mT=b15>eGGidJ7jwjbsKb;>E6su?*KI
zg5_^tB5b|dNu0wZ&Oy_Di7_5siq~*C!@e^mJ~eJH(W-hQXT3-?eGKLKuN)&&7)Dfs
z0;4<_g)J%IB<6c&yxzNkSdYis+0mzo3lNWB;=g!n3*^iOLsFcRp!I3w$7Y_leR?Cz
z0j-lrik12X$wt)xd2W?$iI+sn_)sBZ@srUMq=fn%SJP9maY-(t=q0-BI&(xRZ-Url
z?j7VZgS+phFU74F2U}~5LuM^{j4JZXDqgq7phI0o%flRF7tIy#%WL1H(u<exsRp@k
zX6el@1Bc@u&Mi5Ix%5IJFnqNa5j5A}s1H$*q?gniNGhTmx-CKrs2AFGLO~RExD6#{
z_VqRu!(LmJ;!*d%MSPK5T8P>IFsnUU!0PnhN0<mM2vde+=xmwG8|8(@Ec*qHuUy}^
z$nYlD<Eo>WJg+5K$c1ayfiiyrLS)ob<eInkSJ9^S8h{^tsnRnyMmbFYG?g;<c|;7(
z0M4om=weV#0s0H1++pQYMgrj@?%089R7{<k2proOue?{Hthy&1T#JY98P1*7J=Tlx
zuxbB-yI`IHLLK9ZDXl-OZ?7TdlXwNc&?BM_!XazSy2eRwjQsSrA19BXulM)2tw&+I
zL5VF<64$RKm^qCSP@y$3!(CDSFE(J*F)2iFD=H}k(LdV>e0O3EDoG|g067T#EhY^>
z-8fGsGD|x~2rv;IMl*<>_9poo^xwbI5WYi;!CZ!6u5IN#1CrPIk#+CCoCgE%mI6Pc
zZu8yMec69qT|HDaHQ_fr^yt`Cc^0IW-wMt4cXtz4K}vH;yd^OZCLv0tC|rB|OFYS~
zu}xKqmi|uWNHYjMudJ#C@noM~Tq^D|#>mrC(zJS+cP8cWK87bb6B{UNTLKvKkPg%l
z;h!GnlNLP*!YN45{j*G({s?3Pu-F$QNJ*YKcidZVq}$hZe$l|31vfoEwGr&KLFl(L
zj!*ERZId}H?x*;mPAW@0TY(<M*>1PNQHr{0QW;bT@blkU(=;Dq(BX<DR>5?ZvQ4=y
z=}(!c$yq;0>P;NE4xcK|vK~70)Ot>1qfhH+maDKmR#NB2)@!w0H52GG_`7s|Z4h#{
z_TF4?ZeCNGVz+jOx<6Y0f;?Wd<VCKqnBRsbD(;o7B(`_{XQTSm3rQgg3J8dV@LvS@
zf6=J6urzY9q&Kp4v^4rp<Mvt?DjRJWKej*U9f94TItQy1At@3T?I|t1B7`cdS}iaA
zR4phU%MH3x5RJSWy}mPvhoT{~&{uB90^^V*__;4{xhAw)AFyW}%C6yJOJ+;x6`53D
z?9P)H6;vbbBvNP+I=6KS(=OurE7d%_yyOmGKb$h?+}5hop>O~tt)x~eB7hD>W}C6r
zX<cC10*P6wDYjK*40I75c_}vuuH>cW$h5iS7-JVPDi1ljMoA*v;-9VrQ`MB1`s|dY
zC^U4bw-N?e?a~-sOq!LB8jLE^QuI9$vA|3aZ+>vOdU5fZi^tJ}WDN^SdbxY?fX3<s
zX|zFcbi5((LYN`vQtS4WtA8==;dmekjd1N)?y<5fBPhq#%I`e4gMxdAi=T8brJ7=4
zD$c5AD)(XOD(`s)iJ;mmK|i~%_aQN_HE_Wmb};DY=W-s)zZOH`B&X}v&{2T_INB|#
zmeGqC5$f2+dsmDO(*}ZqUY^VMQc28)fGBHOBC!>2)EHUf9gY?7Rd0ye7#!ejsM$nj
zE-LcGm@`=hsY3~T1y1w@?K|e&G5gnYGi0>x5|SzQtfyr;$btwtP4L;P$Cj|r^MsR8
zM!*B6gaso}2+a~#fNsWRiV74io8&9dnUqQ;h+&2@D5fP*QxG4Ye@o&gtvm$KnfgP>
zoV0K(6%m%vk|9TOuE3&3KTJvMb`!OdD^$nNH&n<~<YYwv$XT#|*x_LmvAHMfw2%zI
zlOCE0iH87|!pv!SyaGDG0l;Q~WfdmSZxx$c#YHEf$Yn|B7!jO?X{~wAwG-+ol*LnQ
ziN(xLbjC&>>%X241eyr%1x99=dCEaY_U8?Yl7SZuosOtY5$P^zNUB#NZs!v%i4a}b
zI0zwu*h8VwN{mu0>Wy8WbcE-iQPGOPHGr}-fyGhY@p3oT12t%z>BF$L0>(8|GKySm
zl{*&?iAIW<1dT#X3Amd%6kk|vPQz_*9s(}}Z+I^*7Kr#2MLJA>wWuG@YCPufF)EN(
z5j?CEOR1thw@fzC^OLDb;JNtb7a&0h)5K*!6sP=bIYSK!ZA^NcwXEse3CY(2i_K~p
zxCW7eB`)@#x!*oU;Z0q6D$k{^Sgx-_Y_-I9M-&1tOiO)~5&DH1NEMjIiD%%+Mp!pw
zND^tG1)`FvM4e3Bg+MKMcAxXg7~JRIVL|_|BCbot3z1DkBH!P|Kv4$}I#F;kc|9*H
z$l877dLRgz*7?%v{m!`QY5=1()+m&SvT>!R=Tm%!rC*GRa{MDlp=Be>ZvO^5PY1bL
z@>bfUE{_`_zuZ^3d0H<)cYb1J%S^wPdK4mT!#W~4H~<bkH#NOpk5EJP2zz_|{YOVf
zJ%sa(SQ`2>FRSpP2ZetPIe(4%BA%b@(L~sbD+Tm?<k889Tx<=3u@RZCL5eI%HCB_O
z5HB0n2Zl^x8|Y8I&W7!Q8k@dVr@F68v%$C$R5OmPKn~If3!M`O1bvUx$rb=pR{CA!
zsK<NE`W=GT0|M{Bo*<frTHIoQ0;G6N!9=Y-1KGN=ZNU8wg&MF?U&CdwR^c%TxGKeB
zHXHGD1g;7PJt-f;V7KPQV<N-TKtIe%y$s8zU{UfwYNdO=tsR!ufv^NK_5*rvog5Gx
zG{hkzt$rKps>ds!-!?@b6i9e)m$^t8G!IAUN^J0m=T{z#pXw{GlXHKvrKFd-aPy=I
z8~v4K0AAiY+z!4kE$D&$<)FzNT!xLJp>Sv`d)Z>L-wPRK`F0_6hl@fOH&nK-sKJW-
zu>WI9;-`n@H@JtXAS$|l9{Cv$xy?VO71l5l|JMJ@^A{Vf+Ha{r`UV)r>+hT1k7KzW
z-$Vmiactbg37Iw>4$i&?bycgizSN6=aVd>@X1wq>RR7r2*R5plN&sun1WfuYatsH!
z9U@^8b=|(|U)uh*v5eb6Cx8)6%mUyDtCxG$D%*fwxQ&ILV0(LD3{E0QK7;at2nH;a
ze=}4@z#c1doy{O4dk{Qm5@`}07#hgm%2@;REQDQ=5pN=cX6K`-9qj4@Ha(vkEQ!Dv
zq*n2rgR#!)3J+nI?pX&+OL+ehHJa!~Lt8`FinA!2i-Rj0xlqDBX^6(A0-`K9aA_9g
z7d;GR-_nKEV3>@^knu2ZZsZVg^Y)Axiu+{?U1XDj7k!rn_bNnTbbCT+MvE5rc{?KJ
zbAC1yU6~YE%K#`!pl>0G#I$14h7gb(By;Cb3)&!Ca%cTdfDC=WG?MNt^l31>5GV4%
z8p#Oz>oTnGQF`KA641>(O5J_*i(`4HGtGmyj-{W6cc+EEO`(5FOESEcjypKGg#~Zq
zO#T}K!hX+M7%I(<Hxq-m653NSRB9VPw5RrZN_uQL=uixrS~oZ8d1hDVuc2G!%vNrv
zl2KlSC-u0S=5PMoxEq65V`GKhVjrp+gFo!EG9oh@qoHL7^C{a*trEuoasDZAZk8VI
zEaV>bCSTh5tfvKlWtdqNcIF1@mhgLbohkYsgxe<H4n3^Db`F|Fkws!ht&z`5lv$jn
zEdqO1Bec(<r1n<%K69Ho>!!5ugOINKCo@xpx3}8(t8qiiLu}VyGXm7=UaE9mte#sp
zPK|#b-acwGT_2!p+#jIr!o7Jn()m1&6~aPK#Ca*NP6j5@rZah08~h&9cW%*!e7^i=
zCWqFPa%?9#YGewg-d$~YT5T;m50_R&fclClc)0rNR@m|4P%T>dPq{lwR#td5yf|^V
z@V*X6Emm;xcsp~q0r+RhtAD>PD{MZ_Oje%nru8=B|E;_Ko=+QWJ{)+L-6YMl(ey{Z
zfkwf(X)bagt`QRlE55!S2wVMtuKxZ1M}K&l)wcc&X05zaVjPlNoG2LlxDvSLt*Uqo
z{}EH7E+Rzw@Y8k%&|&g%eE+XR5i{t32M!n@AY6PPAm;zN;xXZ1^Ki8N?eZUro-HkJ
zmw$}mk51(W627q6l_nHFlPA|S0T!Nae>}@H#hnQ?@kl{*f@)HIztjES>z@zP75-vM
zx13A6$`<=_m_YLm|Ao4<Gi(CEpm#o)3)0al)*BcQjE;Mg)w^J`Q`s_RtStM*+qsZr
z>fpfu&tM_KIN=|I$+$xH_;Nq2idknpE{ZUyIIW=pS`PK2(TGKN+hZ|XI2VUW;Rslw
zTC5=U^J=n?)Zgg4#e(6Pf5B$rjR=@SBFp8$(&Huq=xs5Ec0CL~n)-gz&6qo04XMQC
z7LZ}J90dwS(UY|#@M)5ud{YR=E$wWa5x{j=863`tfZ_7~8^|m6ynG!a2tp^_V2cYr
zHS6~C^{sjT^9!xLl2HCUs66kqNd6#`)@8WWUsxpLr4V&=GI$O}d)otAqNlT2;7#Lp
z942V?$3iG=#qlhiF6J`OF=f1)^I_CwaXk_(<9+2aDikK>BrV&E<hSxU(FCpv9iIO`
z+1zJgov_3eIR-l^2Hye1vgm>u7MpHvJF*5p#{pBUJtv$>E&|IW4AdSB*<>^61?!%6
zrQAMzg6NrYnXa-*a4HIF(TF2ER*^f#EcXSCJ}7X=d~)#Ax2Xxy!K+3HvGm230K^i)
z2+LgxN8;6yn!>_`(~SwlPDT`_7XJ=b?$+FW>Q#?3&xFmr4l6WWFkhB9D_)oobixFA
zIOX@S;VKq4GlH%@4{T^xD;Vq)wQ&A%Qy2Nr@|f8v2b?riW~XSA%eSMC+>is^%IH(W
z1(Q46hj2ByF+?C?5hH}tST%Ns2344Oix!#_viL+sVwXXFV0ZHy-ipd-o^e9o#W4s&
z4b|}khK6#fl86$maK<{9t0Hqq{TK6r4YJ0fX7x~Vw*g7L-l0Qf)@kKbZ5F)TMnINB
zU#X28lU0{R2~BtgxcXQs{46T6?%p3l?QJqOo_<6n>e}9`86`FQzJ?p*k%&E>{s02z
zje#7Yv_}z)Vs~9GnMnolCoJmtCgLbF1$;NLb6p~kXk!cWLVio^t#Vre%E)}u*Gk;T
zJyk972_vSO8nwCMe!lIvvT3s}1ckg`>rbaPU!U)npYL66caOUKz1x45S622OFf-Lb
z;N*G2Z{$<PFG4#0nR?kQA<7r1dg~&To_oCRvpD#A*UVe1rbuTK)KGj`t1q{fj9ShE
zaz<I0^R1<yR7c|j2~`p+`Q-ww70Sbf5LFV%BRep;BIOZ-3670@z0JY7q<(8EEkBl3
z;>;|sv?4W@pSgtQ$&i%gALoEBbe@)kx639v{K+SP;GfI}Yxjlpbk{hLt8n}MPC>p=
zCf<?h6`D*ph6P)qS)dGSp*kS^2lHYRLKKoy9SIm)rp(=@bKXmdI3{5V%|{e3Z^JQ}
zPQsQer5-wX!Z~$7XUp%&nhVb!kc87DMt9KaLS0eQU(mU8?H(WA`#T=eI~=ku4;tKY
zGm0Xq3@)6~d(ghBn-kBNuyj(UUx$EbKaw9;o~jh?HyodtreCkfq9(ERKMl9WQk!gi
zo0S{oyrlxK6(v^kHu55#PD4A_|LCif?k`WSx`Z_8f}}}v!HM3V5g1jGUxh@h(yfh)
zH?G?<3RU^w%jr#7enN8(D1(ygL3!uzFSA&pCM2=_R%LNM-n3Ug6p^J5*d}|?A*2~#
z#bcQsx5UIAv}f7UI_Z{<j*EhPeCLM7cSWoBW22%4^c`L}aYKtY%{x*GoE%{1nLVCD
zg%O{GcwSPOZtkgcSuQQwa`j4JGSCX3o)FzVDU*e#Q?5K@T(H9G2U;PqjEdiPx|fo`
z7{GagE_9qm)9P_^W0c}Ro4`yK_hf=iMG9onAG^1bD0{o_ez!K}Fr_t4GDFLhlM?_A
zNTpp5%jn|eX&pAkQp9nB=DY}w`b&k`1;0ISQ-#s${245x2t36AENLS%lMy0HZ1VY(
zc{-)6oOwExqUPZ3JKo6hyc0YHd2iV{lj+FwW^W%VqigR-Zbij{S1Jz5el+!h{#kBz
z(ao~JHk|Iado9nO;<;=<yr-0vV>Tv9a?+9k_KxH7GJ|3OC^7Ig2iAdZI5>5~tGLh3
zU`vA&#Sn$K$=yj%P90GoecD#2^6e#I^bbmc_^*MlA9rRy16hlnS4WQ=+w(3E$@!_9
zjngc2ob?CK&;rU%ZU39Yk{x_EL>})NQ0xLp*}uSy<T2=IF8vp<pQfO~h9MOBWG!e~
z%D@-n?jwfberQV|uoEINQt3%+&^(k*HA&td3>0FD)RARqM`m>_nDOyHoe0fiV*!E^
zK9WN#V+Mj`-K&zQngr$21RYhnByrJ2Dwey?DcC@*wv*7YWENx2M!0=^X(dn<095gZ
zitSAg3KT%x;&N*DxBPXuyIn=>1=fQ`nuN|Lr95%uzATz0-^(n@u=^b8K<BIpKvM_s
zlR!vm_xfv)1)oh7k|#{spuSFI`5FGsS4K7Tn?-G%EA@`P5+yD3+0FH7Lp8S9JwWx#
zVX6&44OgU{@`q=2Wpw81<<VjJZ%#B41T>5jVhs4E-wM~v`MX{O0*q)7^3jzq2ld%q
zmwk#ibW#2<$I1^PY2~gz*^1WGq8!Mr6QCR`f4xAjo2O}pL=fhl-jBBuQI-(BqjzJx
z0D@I0@Zp(y1g^PJv9`_oRgmk!_LF<puUCQ3a_KN!)~^TQdyA=VIzC$bRz~vMg6~vr
zCV8WdoW-UCv=u*}-tesDE_dgtJ@Rj4lx0oS6xdF`j@~MVWs;ZPJDCFW<O?349|sZ=
z5wLy6sHV(JRj?;O;xq3vaz^RyGO**N=5zV2?^M6kuM}&Ri(v3PS)|VL2BWpc_LjbL
z>AM5-7j{}Tu831c$Z8On=uOh>thj}H_D}~X6xJc}|B{khybJ#>+PXFU>iKON0r>4S
zA~C{N^B}Mu>%F-tWxjHK=tV#E)K2s!KKYW(!wA6+{vtIBiosPYnArrkmqNM=tS1{M
z*rK4cRie30sTQhT;WWlpXW$^HfPUDK{<PrWY<0htU(zq8A<ofABh{v|dO?wom}yRz
zQ*S(l9U`FCq(n3D3niU&Soy9Di%`lpM^DL-{&X48fZy?!%|D0nZr{2)nO(%{WS3sb
z0b43h5vY~cM~4+?Z|R(F=r?VnG~_jHQ!MNKP-e+2J=`c7E@KZXUB$A5=Fm9`xg}s|
zrC*O%slI<Cl^o6zM}$jr1^$3_YUv0tb|S<!Y(LtKq-uA(K1FKxlO<hFJ!*5+EaC&X
z?N)(nRlV{XNOgg26|VV{E?)P7Hg23L35eCP4%Y4nz_D^2FI@?l9fMYZqL*Mx%3?cU
zLru@)CwY5|{B9#p51S&<Z(r|r0R_6HM1a3-<swR<%j9KLvtKgJT=*tg`0Ab^ui|7z
zZZeTN;>3J4U+8t&2BQJ&u=zppPK_9gP=BkiYg70q<feZUSIyeRUdZxQ^dsUs2PiV%
z&YQ@z=m{DF=s(jw4gRMjr|uAESPTsWB!K;Yk>p%hxtacx1IDnXjmt(0$`{=?jHr_i
zcOsQi68hUx<ON^3{6XY`70$+QB9tUW5wdV1dO+@B>kHj4>5{AC>8q#1<6x2f2CmMN
zONOCvL`~iWDQ~jD7N|N+I+P<m({QCO*+bK;M*Go==39%tZ3S>|-00iG!w7uJx%>fz
zHK8>5V$sgaU)0ZW9G1`WmWjHNeZL6?<`W;q{)qK8G9f|B$cU%p8pGpMpTJ&ZGnn*B
zU}xWv!xpEQY4^$Uq-MpIqR7(uAeYOAO~#uyB=J3hXHU3V+n%U9;|d^Zu}O1dxX{I?
z*N0eWTiW7x3;29b03M8GCA2_H0vD}FB(!KqZ56N-8tk&l8n&%kPafKF`+;jxamkZg
zwic#+oyyN-xe=Ccb_NAA-slspXoNYm8-tlN8xJJu-^^TxpFQv>=N3>>2-mnO!LT+=
zCX#K&vc-fT%1iAVt=KR%NUR!(4l0R?cK_^#hXYIPZQYFC?DX(?xF}aI&>?A}j5!V<
z6~3vG1<@m4^DUyBbOWV0r2)x-;0E@E%*(<Wfp|*b^<w$2`!&WaSPocpTy1Nh8J&P7
zAvYoCkn-!8rHOzLM`l75ZhQ5zCt2lo^Z5+w_waCef^!P*NCMy0BP+|aA;9AN7`@P`
zRD_`T+M@^KH7Z05PhiGg6Y9G|sbQvB1cl@9IYnfoq$-Ja>VP`t>_d0zq#Fa21%j>?
zMptuYPN@}sC1rBCuQf>idX0HRq;;tUG)_+@MZ|)A?89gFKBlruYu|=aWC8G)-LHOU
z6)3!`M1XL#Wr^{aeNDTsBCI85B?zJJILL`g>Kirvvr4O5q23kEggGTDp~mN7k8Bh`
z!{(K6LZU;)A#NNQA_*fBs~=QF8*Uc=P!Xa76Ytee4+sfFcJ6WVO{ybV4ffW@#Ijwc
zxi)CDjIkuOV--<@<v;_g9kVj!p=RHumgw`J9daxATXH*~OrzLwyij`4QIcX%RFy5v
z4aEh65NI>yMSyFj49?{{$smTZ50^Xal=6$$MHJ}Sw{|T19qq{xg|Y(y*Q8%XQA9~F
z$*9G!JO$QnzvOB(6K-_Qb76osIGAI#?{q}9HZ^!XB;rE_no-L)L55aeCdg=js{UjS
zZ-9AEU`g<BO}f$#t;{$vJsgCDs<5M~KN(LZ|6eRPz&NjDeg;j!R*#ro><`gwZWNNi
zr^D__olf{@@3NlTP;3ZQYsnb6f=^<AAqg@o8thc<1|;;SWFZVsH`lV61M%$D6+-nk
ziu*NXwd>Yi5y`UtKkPlc{;#EyK%w!nyLZ?jC!Pe#V4m6Q5Q`<3coMh^8P3PsQ?>=Y
z4hRy8s!ZQ_yn-T!&pnwG&<2-DNY(`hGLtC?^#F8!0XmLF*HwS+^s45-`0Yu4LG2w@
zkB{fTh;Cii{2Uj1fqLpVlBDNraA|Zh@FYlN+ALUmkwwW+Nqxo9-}(V91(L09p^0V8
z&X~yrB?N(bV=dKC2AQLn$^_vXN!@21ea?H)qxEJGWleTRPeeq?XjFeU=0a!BIY_Aj
zW0UGvbRMb=iKGdqjteg5Nt}y4#_BEJr;d{=x#x714KB~GySL$wuWyDt%8#e_+J{W&
zP%>&cga-ih6c55Vu5-oQYD6R3^t`XjG{wiaw>ljE>%2gAe%{oK_DTHoX4Bh2>@!8&
z$EBjbG38Bu_t%qe)3-?vj(RTqJ}JzSbFYX4VYzefx88jJ;)n$LT$4qbFVn%+yFI*T
zx-1JxT&(J$0S|87d}7fW!Bvux?2NCMI!Vb1y$P_^d|_)~gVQjo)RI9qbUa1gY}zaV
z58DjJBnLm^WU)oSn~}9X)S5UC>xrjc(>Y+a3yZAYW{jEC_o7<Q1~~J+x3~2l+|qE-
zrpk{un)}DH#9GY_Kb@8v+NQf!C3n@SzSTGa;B?SWQzj~Bk-Vu_TGZUw)bUqtMKsac
z4IW);DWLA{87sX#xfph9<C@NgzyQz0IjBOuX`wGjt~_nJY#f2^Jy#ymqTsE-H^C@E
zhg3^P`xV<>ZvsPt;%u?v%Tv!K9xC^DP>g)(-z36a_D)|H5V*<+$hOmhW{Aaa5No+~
z=dclgiGVPpbOnxnp}lA%FdI9>HBfVh2VBcFP@&327N=!Ep<Ho&NH}U>$TTAy*PAvO
zG7Dmd-VKoYy3)N#z1raSxM!4(CVWIjOs{cS)CM8Ak8J8$@T3clMoM&7YDO&C35bRt
zOa+dJ{8XvA(gmIP20w842a{cq2$N;L3NE?dlubvCfKk*PZNR(azqe^G%MlKgE^U5;
z!>?E&7G9;ZX&@}y4PPm<ndAD)37G5@NO@-mOL&4ewB_P(_6d%ePgHp*brCsa<?}?}
zZR_8tFbt}_vqeLWN`{OJyS%P8&4m~cl2L&dbI?2XODPlLwV$zIaH3RrJ~tbVI8}u0
z<T$j|oR68alb7o%+{gl!hWw=gQ(F$%=3tlNSz6q+qEGDDg>h*Q^Y*Wtk#3+PzW+MP
z@}SN~@@Y5rEkmtYF{o7@?=FbcC8*;e1BOlh2A-xP<&A5AQP@sP=Y%-#kRJLZ{PGs6
zWp=88H@D|efhCDFg=9}&Inc<hUum{))j0-msqt?1WsmaUQ^s)gHewNTP1z&5y%Ceb
z>w(0?!O|$Y{ZaD5;9C`;A!D{|5h<Rz>vqH3rw?+HL<TwqjAC_0^s`?kO=w-?j^JdD
zPtm{~@tP^!I*yZ7dO*?-FT*ea?7xhdAQ5;%cL*KC2EcN^A8DJh9Go}FStbTA66j2!
zn_35KrMg4cCYX1C=TodyXv`vZP{o`JGu1}izrEeZ+5SX21cCcU2vyY$=N@hzmo-n1
z^p4@sA(Se+IcfQ#6Z{ZU&=SOg4~Rp2Gm5I?Khhv<!vg-aR7~a4to@)?7?jqHJ#Vj^
zbxxqKOUL<;(%Aocg~4pe$&g-QqLPVAxe0CQN$Xo6TsXbYUzFV&Wu$e>-{0GGPT@@G
z`osHEE4i|`^0C|zUt4EV)j2PyJG%TZ{M(jYSg(IMMreoHXPx>Q=+vhT$o2WT>$==L
z9H-EImA>~m?Caj9Rgg+wh9b{3>_{wlF!<ia-$T=H>s+vRaLA=DXn(i~Cdy(19W7kP
zy>RuJhAM1^h6<sDmdbBkySP43pZ%+;d@iC#=LA?kmbBSMto<>S;AHt>rulIrp|)h|
zp7LUj<wx01{Y_P$a|PQwztB70KHt|m=iBM|>~rpTt-PgeV9I*XMq$WyCDKWHd~#lI
z)GwfU2h1(E7x;gbg6IeW>IgtUzC!;8H#B-jBWEiYlmDPpUg<b^uS+8M+vR;AxrDUL
z@&v#Wo1%71P_Rw8SS5jWd`V<uu@3d%WH-q{UAYN<Na5hxn#|AIU3YZf2YImJ#EQR5
zu~Oy5_BPEAxybk~FgSfg#kSj+ar_H?$!k9@-DCY*ox-_SHPQiLQEp=I&NF&B`TKkL
zcRo91&t98;B0GKbU#Ec4_05B8bV4*%T%xnp#rCT^;Ote<YZgJ0Arw8j_#xZA40<$d
z?<3h&$!zA0yS1SMq7hEnczC&JR==8uh8fxHvuR7)%&Zz04tC#QQ%GeH><)9*@*A7J
zYTyqKh@@R?Y^mkDIlqgN1sJP5Rwtp=zDJ*xO9h{Wz&(ZqA1w3N@70eA)hzjPF-VME
zPxUz`Mj2ySYE7BBTM6|rjO|w#LZpWQcHjJsYC#h@ZzdCqIQE5YUJY9X+<3i{^azId
zwb@85tg!gd;;6&!MAnSHN;w7dFxI30$JjMRi4rT@v2EKvW81c8&e+x&+qP}nwr$(C
z@#cNruX}rSR#vB~lCJKbO0rX1Z8K?2FJB{%T#!5nZvGO`An)tE(!+h#a~blDn{~IB
zk>N@Tj4T~%^T-P98P3YO-&2l1X>SnJT08d7?ySDs<UuA)n!zZa84u}JR+QI?BDP!6
zzFGqjghjN@0ui$klLZ_<BECI#Zbp^Ovkcz^+)GZ~K*`j!lDdBtGF&fOKj$(`GAt7J
zD{z4r@&p@Ta68#95Fkl*FI<S+{W+IN6>y=@7;*I)-m5q;2yrEunT&G<*!R;Oq^NE8
z3DdEqSM1j@A`F~6w~%9>z~Wu=sI0Zi^5&-M_|btENK;Jqa$CqgPR0U(vcMYUaw_iv
zEu3r)R<VumhyKwngFKKPA7~2W6fmaH)WaU+zESTQX^TA}12Mpj;)+I5DVqKGvw~?(
z*$`s`&M%^tdu!Kh1TY_daPee80A$a-3z7<sI^Y{oq(W$X#qx;p!6bV|jN&9FOOK!)
z>Tup2tPu@_fq^hbQ@KV$Lz28U7;DW%!xq5-lme8%pxD>-pN4L#p1*-t$P<TMD-&2V
z?0Wjof{B1p^>pe583_3F-S)tBouPU4UZg7`h+?f@yc*e1-$KLG34L1e#q{8FM4GgX
znYmglwmPu3DcskV^mN**A;Vav@2P3lb>G=Tb*2}Nlj%PuOvlmth&!KJ#VSpz+89jA
zf1B@B&NLEHG_Jd#wUTYqa~I2Q=;F>+JmzdUP189n8$V`Ee#&Ig$F@}g56@|f@)oPS
z9@}o=MBF~Hup2Y!fFgM2{;ux9D3%Nm88hCn5cj2WjR`InwZO~>?_u`PNN&<XMe5Vn
zlGtn6TMrRa2L}u2Jby(rmCw%W=a<~I&6{x4+}jHuolw-=(v>;%AW&6NW-+*hA6OIb
z2l#Wu{>ZqnVZiETgJobkz7>t&)#X)05uCET@c1hG&wxpJZ*v=@dvNqc_IslDdyQ_j
z)RL3%T|(_19<YMc%LF#0jCC<%uX$8!3N6qMKGKT$<c#q=eV{qp_PIM0^AwAsVxzT`
zDfA614VWP?LAA|mBPW1C_*jJPQ89Lbky%kJLb%WJaBMx-<z4Cx92GoJ1)@8z07J2q
zdK9|dOsotrDpFBU8D|-?u_FqjucIz3TyE*PcsA397|k^ZEa!q6AoYULW$g>SR?d}%
zkGfjNMq;_WH;MGOl-(&mE{X^}Udk6xyQ2V(SDz}%7s)kBv&2$ZheqnJ*TIBBg6jqP
zghzFCJv=xfD4_rn>;t4{H5_|OogcMVrEKZKLC*MqV#z<t!E1J9e$Jds1&C_c;NjzD
zGoL#+`t&TFF^{jDcSqu!l#q|qFfvp>-Cs6tCDA?2y^-2*9-_86&s+DzXIu@S9}Vkg
z;Gwtzcq36Pm8ZQzoN`#^To2@UL5vq9ke9@V20;6LPl<4AkCK<1j4s9f!6C#NaykjQ
z3Wgw4hNjf_^@l&2a=SdfaXavDoZ!Z1m7A=MrKLS_=tsYUj!qux9PEr$N}^{K86h^V
zmh(5Y>?^3=FQav(g2cO3n{=ZAtk?=lyb4M@FHbv%&aP77=7P>%r@|}h)LYjbE2K$1
z&(T1yEU;~3D5aSx;2_ojRw_pzbljYXlF`v4A@-|zjAK3_Nj~MbW~e2R=4B+qeHS#3
z1~Cw<o+=&v%+waA@=X)UK8f9M4O~<W+@2p@@rqDRx;fKJh#ai(`bQvl7y?T+nteR(
zkLx>H)5d#u7RU^5v|8NDTl$HCR8&Hphihdj4fRE9E^RrRl32xEXrT^YNL}~tp3O)X
zOE6(F8aeN2JV<WHJ0Wi8gg1&$l5cf2szL}H1QVJn21o#==n!d!A<i5*DF{+K+Qb-6
z;OH96g{McxY{on<A+Coq2dvbOfJCCI7*$D<Im;kK+YU_|Dz52df4dId>7p%NpDZt1
zN@iAQcZ)g+1}(WyW`~T!72w3WtPBVN>I;*hYLfkQo@OkX9$t$hOA1IL3U@8_2n+`2
zs`Lw9=%B;d1G_|u?*AG)qO$afYdgTZE_Q2`!uwummejhD+y#KECT-M%f%@Cpt)*vb
zee3Cx1*s$u&G>PD7;a4!2;&Bdv%jo8VzLwWakISeuMy?7jA&Vbd@>m1lpea@;aql2
zh9VDU_r-zv%ryDM|1q(qv@Wx!5f;N=Stm9U`(H5pF20|qGgmvkbj<>5Fhr6I*q<$b
z3xt}u-K-m;J}Wc9CcG(-J6uAH%=BnPRwYiW5q;#z6koAXYXm5mK5LRzNH*~-$Ap0(
zD`LV7)m0XtTrdXEg+6ydX_3?uY&ERR<wpsu(v;6d9ey44QSrNZgCPNVbq75n?Uni9
zl1-NZB~?y#KZN?f?)=_m2M24HU?cQ5oNO8{sM$ymZGHQYkyZRM>BRH;DZz!x6*bMa
zNSSOI&!V;@R~_U0)OFqcc;<w5{}5wgCTA`WCChudy>5M|+2v9_WG;80=Gj^eXn|`Y
z9<T?vuK1B!jNi))sZ{;7_;9)AVbJU_9~vamt3Z&;x%hgeQ{Wix{$__YK%sIEQ1#}Y
z6O{wp^Qa}|H=*;go;0P5wi-Eu4yz>4oFh%B#uwEODt732kx~`5lNfQ0)i(_)%GEC>
ztGmS0Y)H{aa*QecJyuYZqE=JHv(m|h+EVzZ>$)A8*raDiTH4Vh3l~4cE%XqH9pUzv
z8w{V+c)zVZtVVUCPkSV0e)B<jMabLjU=A<xeI)785BD&?owD?N3jyTVCa?->Oz{UH
zQVk+nDe-BKlG`A!vByZoP8Km@;Aimnj0}m;ZYiH}Sd9j6<ong|UnS__8ZBPso-`oE
zaobvmKgV}0fM}e8GVX#=i%yG03#LdE|I}1E`xYsmJ0LZveTqnKABLWWZ9(XNKw&EP
zuAMvok+X<V0WJ4a_}v^a78b?~d%f*#8#b@1Ej+_}a>ziCn^kLdX<u5V9bH{ps?w)8
zsl|KXlSZ&OezR%5X|F$ZuUMGPEBK5dnWMzEtS$cdNEM!8f5wcPSF)!>hTU{zwugq{
zA1(ggH@TVV?yMPP(<alU^fx@oHtgw?WnvAe&KmZc?+Phj7t6*cDof%+(4+LS8{qRI
zZ|yKST|7lDgek^mR38?N8f9t)GEJJ$8Hk7*NA8Jb%{!5-6;EGgjuq>Yh;xbtn%o?r
z=JvJ73kE*aG7-3>#Uft>#UhU6#X~h(3bdSC&vRpYmdUVm;_No+b_r{H`{m+3Xq)n9
zL)E251)`!Y#=ppItQ)!1ZWhDM;+EF}+qLv&@URd%eb<NI{bkPB)*eEpnLKDgry~FA
z&que{;UE4@7$o{51A*GnXwPHJ=|L=ljH_K0Kr9as!D8_i{MX6Z>e75BJ2R@^9GSO=
z91GkrG4HMkzSsV)-3KtKt{u2ZLm70%69Q}0x-@7^X>*ZByJ}?J4}510F_^=?@iTtM
z4ziB)T|keYKz5|=)AmzR1iMntqw^18;D5`9U&bk=<M`EpuG`+&j;69&VxYP_4>AAX
zvPyz_@?_cQyjDsw@=7w#U{r060_ReDcvw{3dhnL?2l&H7wPWGsf`1=UAxLenvRM0!
z*7M{bEIv%Eyo^6xWcN&5yJ>JBP%HqsnCHtqPSMg=J9oFdJ<u*@TXs21RVkRWR6F(l
zco4%|w!`Zy0%Tk7BFYqL=l<z1D*$krwmY@w<3u^MK?Pa}5Ho|lIs65+W$Y?a1(8<s
z)_q|f*gqqV7)RtIbMjt6$-8~G=lUaB`bz4al_~m7Z7Bi51`8>j=$7Z8@H{G!hSAyK
za_)^KaJCB|;PHV`Z>wETn<+DBE?6;>4cTE|hH^BsAeRwQ%hm7m62081W}Wffo*HP-
z)W9;3Z(2PSg*>*(&jS}ILc>-Eg4M+L^%W+Dw{De|X3V|n^{}b$!lDWh?Pux(&f&wx
z)*X<7`;XdDfT_&}*Ui~K#uV11h!BAl`~Z1Pt6Q|!l}inmgPaC7=7X3UlbdrnkGUWs
zE8DONIB9Fn$9llyvtBb=>ZQ4Cb@~}DkKvfx>F%XI%9!t^7Rf;VBop?j0hgTmj*3>r
z2b*1n2XN*V?yfIfLuEr2R@Vj~t?oH;8j+keJg@bA*~)0^srbmK@5X8s4#Ah1-&NNe
z(BjHHSeIh8q}0mch@YD(9dY))=a5c1{VfO>AhsG@V8!QXE}KBiVI#srUuVPUnXmM0
zPRW2DMFXno@Jxk&g^K*i;OWh<gkPPx^yZK1J0oATq9cLJmrH|TPq1w7yT`N2;gvQU
zP?TWadVG-Viula<*A>wM58V}kL^b3fc@`f~phyP>^wW|3Lh&QI@d;oz)^p};N1%9G
z=ETPgkt;Y|=1{Fjkw=3e{?l>BL!<Bu0Wn)GK9MVw?D1K;NO@Q5M9JxlmdN}ZaX4YD
z_FFF2f@>AseA}A(1pm+JYvz=&V(M=q@0@%90Gj_9YV(@`>%Yuh7qu=NHbm>cWtMpd
zX=o=3Mf^cT<{FJT;*K(0XtnAxWmuyNfcyx<Sm<Er@>3JPR8K&s6S8VNOaN|)NXw>T
za8jg*{IW&=&8)2WU4QC0Jusg|f0a@fQ2$AhknbUu-G5`eD`}8^^l+&Oz!$pnCL7vl
zi=?B|jd&pWj&WkL&opgdm!P%B0oli;6(8bC8$XnESN(!x?|Rn3ESg7lI~)@>LM8KS
zCrx*%%Y($Gl?wG4X@kfr3f-4JECb1~IxaET2Ui@mRGVhn6YGx}aNFgIqaNy?F`3kI
zoa5FeN4jHo<iGUw>;@tCBojP-dVf58%ZNBR*2Fr2Om*{4C;euh`NWt&-ZN5Xov3$v
zFWu0gK~seRooBAyH(FP*Y}Z7$Ob!yrLgjl${`Q;t7nWnph;&fI9^F~Q9urXXK-rBH
zll8_O)>A!tFD$)}3T^nNZJjvOfj+DYSM}9MYjP*}8!pmzZbDAVrphp49}45??``$W
z?DTlKdAjJID(*?dx_UFCGRzr}AyX#Twlp`zoOJn8ByjsNL%O;mvH2?(D%O*>VBAAr
zEI20|aYvNMrn*%9!fo`Nj!CX7qyA1bzlz~WfU)kBX@dF2=SBMN59cyHHw3%7IgtHs
zZgjhXS`(!Z0ya<xfl8?Z;3$6fpEJNS;)gon2I0KMzk?)ndd^+`7`=$`x9s6al1tX<
z!1YQ)OpMij1rRoK4v<$~d&Wz}aTwly*RtU_)#>hJzOJm&c0bJ_m87L|=rx7*4M*`%
z9?P;y;fGO^-v{&}t`rbTS$F@{=03rNs#}BBMl`&qK0C&29Y$=0c?@^N7?}Cp@WSb3
z$h&gk$6x5~zv>%R7vt2(=5J&U-T?I@Ic0`>FDQZKX7$T3A<9-x6x;R1Wa7K^A;jUx
zK1rza6<yVvSvCPcu4HT$Z(z4CHi`o7sF8`A&MY*Da7^ok7L0~M0M`=a=I@^d97&di
za3FO`k4eB_1b{1~Q5d`6NRFeI57cP)TZcN5tZo;A4;Hxv?FQM1GsZ(qwrDE52=9Kn
z?OnIswp|+KhD#2Nr7gRoOSOgJvEEAG;yPV#-s+5D$<n;a6?>7Dle28v6L-SLS+sE3
zIbX5(0^GuwRiimwcmiK8RmFy_ee{NA+nFYm!dVIys=V0qo~gHN`obG|6!stK<97;y
zuN@}hCEjG8-mfh-Iz^lytm9rC$@0m<i(r#QSqX;kgNwZMf|mY(S9hO}ecWmRTW(SZ
z@ViqF@{Suapd#+)yQD)m5)h7-E(F|{?Z>bl(2hvEnH~-P;{xyzIVEApK4j3msLJd?
zfretZsgXGzswzm~pQ|fC12pm_%$>+=f@$rJBQMXz@x#h9C^?SROI)>IDd1sL+83+{
zM~;>@rbkH@9Yes8Tn+q!LauIW23r^@#{!_G*9Ad%`EFh6FDwL<5ruvMlbG<EjmS!I
zl{v`<hFR2&9gM?BkvcWCE8`GYO^$LlEi)%ORAN_JP5QhQQ;<s;qV7fyQCvJdsXY<s
zj~u>@V#Ww1m;OkMa$pEvh$KyN1is98oTG3q7uSa_27G!V;?CfQ5UQRbyCz2eX-}{9
z=cO)H_9GWK(Ss0_v241%zOObcvonkhcQSNXgg@3MrZd<wQvG~tJ~${WCVyOn+K7t?
z_CYa}@?kjw8cjDh!!?f58G<omCUH86RCF|5q_A<MAPioxw3wN{zYc-$5^S%`afjP3
z0FsI!fxpsnP?uR)86C|;x#PY@a@+B$kT{Q<*YnkdZMGM2tgq5Iyd!D@J52t5{iQDH
zedQ3Ylxby-V_NxPydopI4Zun+{kSLs5SD=E^mSg2*HFc=jW5kp!wVC2pjm1~V(=*)
z@juGgfTD!LK|snrJPZyBPLs^vKzeK9l&mitn(0#O?*;BTO+Jf#eo^YXTB)vCMH!f%
zXHsLyJz47KLSHm72G<3L6XFTr(6ij=3Ni8Ims@Pf3rF=SbuAva*_yrt;6Y`<RIr%c
z9dcE}apahV?7nY5(i*yUD@rKWDCIb7vTK<#L0HxqbDWZ>seqot8aThd!**B#$poBf
zNW+p?yj98Vr>&Bt0Z1dVYds@+Ua&<JlW#X5>+M10Jv$*l(+=e=mS^E6HoanX6G6wY
zj7TE8|G-G%2gXA*6dy#kHq?N`y}X6Yym6=?G{he(c4H(=RN!7!aSNmbW#*59t``RB
z7g)^PrKS*Tou@e!L0s!w)woqRo<8U_1a~az_(9~sGIoWoekG1Pbx?D+2W7myaUYg)
zq9;X!G!8YzJzhis93RCXP98lPNPr?W`#`COGn5s#oFpFSts8O`%Y*<Pk+mdtI@%|J
zQ~+3|oPk8hh-&y%%p+*axT@||_%bN!FVV7UMYW^3GK@xNBefa7gBLg(Y7TbpI8x8E
zrY0Rl5FjL;Y$1@)&@1M70&J8%Jb}K5qH&w(i($9Id5JSuHV!#0eMF9+(=2QYozc6Y
zQJXMZ;#m{7LpvyAuQG53Am6tnIS~ucf7uBfpCBr!9Dx2Uq}j(P76>14+`MI)AFppi
zq@RaKYGq0YVKK2mtr?DPZ~Y-H8{lLxYFVL<MF*~dh$b~rHB?>QEEuW*bSJQOgx$}#
zIdVhnInn@dcVyFv;O3=go0U;eH1d@MBBQxBd)s<P61my)G4Zf>reJu=%iV&i(`C@T
zzii&tv*NPAKIckLH<b{6Jg*{DF&qJ;D#*nK-|YqbObHZ~Rdz*#W;eF|s77C`ptf*F
z8-}1Lc{u+<7?)>}YGQ+wzX1aklQW26fxOd|!gO`C7N;`#OULN}wWoAMRb~H%F*oH)
z{){Kc=a<<4lZnf7$`CWczcBy>+?;+3?u853-GAd^l8F$@p8@ph_2bTUIq4{(q$!Kr
z<EaRYVUC3IOug6v*O61@A!;Aav=zX}-ae7P&s{3&Ry*ask7iM_C1X>D?1zL8;CKO@
zX{Q;)<jmKteA1H!RvtR`GR)?wJw4j7rzSv2{jJi=b@wh;>`o=IFD*|M{ES!y_+n!f
zo55v0V6HX`jErT9wz}vO$S}@l$d!M{f&tP&=@&F~vX^Q^3hlAicB2s?EQOFNq_X=x
z>!gUKNIy;{fb1EA)oNa?FhUt&Rm~<k^hZ|1scBRL^6?2WtA`Iq5wXC+!q<}YP%vB^
zv)@^HvFJV|iooh3&zgvY#R5`ap5;#j``!HWxqOgCJE)bR!@sb=sLk>W^7T$DL|guV
zYBj*D>DE##rSwTOMI>yrXxB0sfoyxA(vv)oTr^ZU3dZSkIP@jfyurl{PK=oG&>_TT
z3QK1-;h>iz1Qs$8*)(})SUTJ+sE_2f9u}L#D46j($`%zW5v66ve7Ry}{{|Z-T<VVG
zK@>w&^&Exz{_h}V_hRm1BUw6@Ohx@`>T4^;&??Ua0na1y@*ASuKoOEa*$*!)uh@nO
zMc34^z@+?Pf;$e7Nd<o+DXC7<M4HdU0j_xRjUL5bx<bAz1@@eGI1#`tlLaG5lebP8
zV@N~D9u>+!h%q$ztZSBR#na&qxjy}+8|c3!%(AoqAdnJ;U)x(txKtum6*!P;dAci8
z2_WdeSQp`Ly*j<^5=nRT$MYh)$BVaNW!W617=!=pF9ACVyf10{MSd*#(n;WeGSnjZ
zROUbornTtw6AoDRrPB#pC#F~P+^KZ>7xQ*?aya?|S^H6_n7@T@4>WE)&ZhI(LrbLW
zf%cHcc((X5DN3g6G70HOeEZ7;)?l7RKrxFrS1sfWDUj61p6RD25c3@Hlj6JixTtGq
ztDPc}^iiiY!y6@4TJHPH;i<^WpF7dvrebo)y4jMbpr~su2afDEFh-eEDKZV8sjx!I
zw)1oMm@`em{!v);tb+fm(5iVX<3)N4q+u+Imlw6?6=6wMK%V}h>g>;<8HybVa3?~%
zGh=z&+r1s2pfVvZH*)kxsKfNIOOc`;Suk8-k%?%<Coe5F>sI#~T{Z^{8pux{^8Ug6
zAsB{kChsS-P`m8CTVqm&5ZE2+*<@}e5D0Hhxl({6>I`aTaTgDiBnLZz=8%Qqe8J4J
ztubPByx&z=>rqwO(hO$WppgBWQxSru@GuWq3{T6sH>We9X%^h7Rc>aWAG@I1e1)>H
z$kRn75C)`QdW{<FC&|TQ|0oi;RqXsT5VM8v^SSzdi~O_wi);_aoso-nxg2=smNT8I
zk=w~^#OCVR-#-a{)6>xTEGeKRhsCZMXqSD@_k#(LTIM#x+2`<O9)Buu<L0Xz!2#Lk
z^Z2;>a5)I;7E$g{w>uN_Uf$&Je!2gP?~cC_MTz==%Rnr9h3mO1`YBEkpT+ffK`co<
zw~7xd;r|Zz-0ri;RjIT!_n8i%xv!Q-x1r3++L2{yJCoDX*6Qlz=H9u})7k2}ebWp#
zbmHFC_Ap?zJRAeS2lS2tLd#vV7JI<)n7qyM<@9#)nx5TyAm#{&wE2)XGF@SXbGwq*
z{aw|aASQt`TePhY>xFjT91$ECY-m<};-rh<ddvN8@Qkao6VRdDU0APMai$-;F9aHJ
zj=ge^@`9^0t<+g;i>tk$#7Qag1*s^LmOoA?-33?aAkaJW(?oYmuN|J{%IG(GHko4-
zGBgB|m!<4jZ9Zbrq3@}pM7H7eyyfONYjTyeq?aB~AP>@&0Rc4CcfBK?rxD2tQGEac
zf>0&Hr)gw#LM5tsP)D?{r~r^#3;`6q<^%x%iU4j334uIvG>*OceuzBwmRkiA8Vocg
zn|WHs)Rb@n%*aDqOi7E`Bs3z}i2hzVqG*+nsaSWArf><qJ#4ktQLn3{L$`tMjGdVH
zqMU<Kpzu!73X;eTz8r#?uc3<Fn5n!A>iIou5%Ga=&0B;nn~)S<NUNACSZqwG)=@wn
z<EB}5LT2B)ARZ+3h|Y4K++zta5OK}|<QIVji3hQovJqfu{o&hkz_-`Aya}6G2a^s9
zTp7Ghl_-;P@o)V(_8M^z;OjWr#|Z!W^>_8?wXJ1DZb@#<>nri4ZRuDJ3_uUs(lU}E
z5$v2%xsvW&M{aqvsRUk?zTsxZBxwTc;N8Dp3();Ok;fy{HC7OFc+dB6o$Ogj#KugY
zr3i4%ZDgk@sd<Cs=FgTXOPZSS8BHk?<r(h^HIdCL3}Q7!-Pu2E6722{iMs3Wbb|<k
zY$sIBRKVW&Y6IiQ^rr-%iSqiETqsT^cV1f{>AD37>bELGYadX{_ea2gNy$HabuBh;
z*txBy_)h#UhhbZa+M4dB-sm7d6bn7vMzFCEQU^|ZlS$Gzo#QtROE*m2H3mg=3e1U;
z@oQ8-O=s*0%~MzY+4O3?Bll?Nd@K5YwznA>5>`8oMZzb36IwdGHLkUikf$ngd2{e%
zM%+UUc?%iKTnWi+2W|<QG?`r3Ma4ySYOQ&y9tDuU`92_t8u?3N{&|jT3g_%Uga*}Z
zZ&|T~21Vqr4DpG<r?%Z9z)^;{O8A}%EP&ekHnU?QL{LU}1|QIZ2qE1I*giGs_pTwq
z$;R0cWT$`xFG$dW5F_2|+kKk~{6IC%-e_61@5!HxF#WCN6^_>iv@Y38DI6W_B5=V`
zjq%o7R_}82Cr{UCUATXnKX1{v;HbyBc_=Pl)1V%ibEH2l%gv<&?vl)y2Z{T7PqvMg
zn$n}nuvKyL_093hN5^np7D)feJlomUnih~0`FqYR*No3Xqss2e5!;+b#S~;)+|bFF
za_Bd#<g@&f56yG`+@?2USH&dikbDf^Sy)p{AO`b)pz48tzCAFp=VeIDFn%+esLK5%
zE!WMu|F9r2t4~sUE?9*?eHN#250H--TEMEG9Zwf9mZ@#-DY(yun>^~8ABdo+R-zib
zaTHVvi>5!tDG_vQIv0`grD}80;;ssQCTe^x|KsW9bCLN=YGN#vT(6o$V^ej(PGMu6
zTCBF6u962i2g7(l-S^F^x3defnD=8(K3kA4L$9a()uLNFb@)Y<g^!7~G=ZJ}MWsLx
zHh#w~G&D>@t6ix8?6=$;-D>*2xO3pe#xhip(V^cT+5NBK#a{MrMWkV4*_b47v#wuK
zv`qa$G2XD)19ye3vf&a$ooWzl^QI=eY>PWB&(6dEM;5jfEPP9l?}p%rCPn#=O25$G
zkdSp70$j%!TBb^j$)aR4<1KGX<m|6x&HD8T#{yp6t5T|1GnKy1xKvi|dwR6)=HSAf
zr4{JMzdj<;QfHl0EZO=vAz2!83!AZ_c~9Ic$Z5lA4OXcwldsN=SrNn?GyF%AYCT>9
zdDFL>5V_hKA$w1%gQa`(>k(FEt1XikUhj!HCK|wVo8M4`QK`1xVYN$WrN}p`>}M(3
z8~YOh`|X@|yO;^?_HU1miP1W8YH%7snX?s?%oQ#N6i+;5a`LX6n6qbcoFR6N_x)-&
z3UBW0=(m58(zxz0BQc%t6>R!_cKB_nS%G{eZx~p|)3&+e)VwoGO4sj|yC?^(9{0#0
zp*X|e*1D9tV7uKj56QYYolgky@LX@eEsrB|qQkR3ZUayUJM4a9UM2~ni@U;sIfIMO
zaB-awvp8={rWVKxmzb0}nd7(tp6h_hf~I{>n{3?Q>ezX+X3e3x^r#XjAG#d;GiM|u
z7?Jj}IIiSxOirtzhvm+WLNaMmhClD~I2-v;nL?Vp?~Qs-;M{{2ZI3S0Ak=g>&z!-)
z|1I4?`dNHISRBdB{CwrWePQxjEKN+$M5%(0oQDlPs_(pMMkP*dW)X*Ipy*@EClWI#
zSNHWh(Waga21lS|8-^owV=aZ~*USyebtvd36Z-7#>9494SSE!LX@=ta=vi3x6BTN~
zJ2S5mm{^E{0P#H06yte1%8yYG4o0emj?J(XO<uDtVM5Sq<@Hh(pIR5(E;47r$%mqc
zIPk*c(Q=%}z@5D$6v*cAIdRf5Asy89oWyzA8?Nxu(2JGx<#+rolW`sVC>YMfhFX67
zgnXnLnOY!WXon4N6jQ6Ex42L}%grm!$dEJ~pbEXXK;|^|!V(e)s4mlUx+XsR_b*7X
z#}p3(L^M*rhOvXX#Y72HX(+Kn?{+GOcNKr5Ks90}{Zv2Zqkzh=i)~2U4!WZXifS+}
zSTp|$O9ep>9YVc{*u0`RP&s!c{V>p4R{K*S#WRXzTGhZ>(^_LZ->6o{s~Y*VDW52E
ze?Uz0FX({xUv!km6X-*C95Fxo9#56vzs?kORUw6usi?gOHBf1s-4SZlWdl4tPEx9d
zy^OP5*o=}>9%@0W-(p68I1`I@-8QuCn!RMzmpes(>p0OXBX@XL*g|aCk|26ml5&Hh
zBo}TsoHvuFEetzzC3Te8rWLrR3=7+)fV0PGRXJ{nV<cM)qRYaySb&TPu56U`RSOns
zo4KXng(9e)&=*>JAFcw<`TLcR*|6^ZX@~{ukAFOPKyPc6uWMQCHTl0RFK=F6@0@nw
zJ*=o<KN<KGbr&d2{YIlncwPC+9UV>mA64EyxVoE*U;l2~>uh(-HdGEYuGXn#KK>#V
zaf`_doE87^7X&dUdh0SYX?PZ6DE_LRRC}~L8U{RoRRZR(Y?ok@BTcpYP&T+ybw1a(
zslwTeL$7X0yI2TgN#Dto{jByIur>_GHbwkd*>2)viz7M9xoYLhA8<v(4s71B7$TZ+
zy0FjA$impyBW^wNjU~lo8I2c<0eJ3zX!(1jc5@w11I#q3QwtAWR#ATu_okw%YNBck
z?p0xa_i&X27Z8{X@m*>#5XlF8+?uwxU<Ffr*UM7jW1!vy1L>iT$UMI-&IG3c98IzQ
zHo93nVC>J6Cqu_^5}G?%@ae8G9o@<4?HI96`soAL78Hx)pB)B~_=o!*eN{o}wdDCU
zmo09Luxsj&zr>N5r<N@)zh|f#fwh6&TrE_`1oWzM{ub$nOL(sIpI5btz}3Sj_QX*O
zNlQ)=d4F1v{qXmP>;`uD>f_I}?xNjFSkL~kvgL8plm5%NUKM1M&Tkkwc9mqAp|N9p
zy=tThY<lyDquPuOZ^Yz&xr@j}G6Z!5<AmROhiu)k!X+%pJ4`0$%27zD+{?zLA%LTN
zLv(wHF^Bsx-kR4?{f0I6Jg8cs13O1ETWm*kiKpDB7UD;rN0q*_YUJ<K`yHeS%!Y~m
z!_;SO%$vZOu3!NExZ^%wi^!gohzSbv@VbdF?7_uVo8>vBAB6~5S#D*XKq`xvJX=wE
z*e5s9v0G81JZDQSafxehD%6cZjufJ4xxp<Jx%;$ZpL90#wK@75ehcTSKWD0gv;28+
z8aI}}B*2f(5TbVPS~gmm2cEE@zh3j2!DBQ%PcXIqlCwW#ipF6-1raWJpjFzCbPB{7
zTi@y^6_ZPwjP&vI1p=d=4s|A<a^dX1OEF!C6z+|Sa{-a!JLPbe5tGOQ&%u_a`<3=k
z(+&~sg$1e4V}Ey%>ShT9UKolDq#O3P*_ctgNo)EPW(fzSespHtD+R2GJUzKM%&<!4
z#NzUIAlWpyEYktR9g{4p`h|oCbb5TgXgQIHK*w+>$v9^;h^fT7i{vx$8F<k^NMdJU
zOgs?bx$5|RPTKE3)JE<7tChXF_p>Iz4auzOz8p?08BFrn_Yc5Y(9|ELV9zoJ$#0lM
z8#Q5qh<GEf8LL6B#TOv`E4~EjF?%gI%%}8z424U!udp0%4z+JsB9J2>QWJ(o>f5V)
zM&@<xkrTw`s`_0i1;yJm5pjj12I33GXsE`N8`xP2^1N8TL;;X})OT}@o=ibNeGB+q
z1=8LXkP_rY;q2BFNK_suCAa%WYZ{vfm89N;-xjy#8uaX9Qo7IV#CR#VIiJS?(r;4}
zDq;Y@H{-z1%pSsCeYIKHk}XaHQVEMGYyNP9xx#H!YrlMH(X#1^IJ04lrhXDGnyRDk
z9ixIOhP04>SwXIp*mMv;I=J^229HzsKr6zj@`GanI7GXR%`GT~<iuMNE4ziee4R~4
zpc~^O1O95b_M`;nlcTTXljq&#_nrel>=Xg#<xi9^pBY#Vwhfb5eB90Z*-+*MJS*Th
zQ++zQ)}{?~I@<Ny6$q?v!>@YcSaD4+9;E?A-3vOez?(Jrk{9+a5KD)@)E*d@|J<L<
zzH`VcdOME(P$^fgN+fb>XjK&Tt=?%*Xp};wZpVidv%)-7u0}(dp_0*V;2yYgABK;v
zKF;le{qZvaYO8?5>Fk?FR^-FE@wc78K$Bn*TOCkWiiC?+25-}XQDrJ@`E#x;YHbv$
z>D6MwhtAJE|9eh5ak)u0)`6w6z4ojCU>VPn*7Hc0KWgbgFe-(TU3runhN5bWEoD(X
z0ZRqVz>>MiIqs)jdvXxNl+}8}P8_#Bd*K=_8WfBcmpU-~8~jJH%$B`8Rcf)8Jis2j
zH{6F)3v4b+j<*u=LAwGsbiGds{7jx3=5IC?=sO>4MH3tK4k6U${JU{8#+l#{^0G?i
z00`=Y2o00YAl=`rSp)ZPe`ic;%CE6&wl2WMjE}|65C3r&A6k*;BE%zTVFOZp0>4{e
zfy4cRk%r)~$H2sWL>u(P22gA~P6?WmiX)FWPY4l_t2u)<qsxZWn7ibWn1Wg%SY9q@
z#kSK2(jRMbz4JKjSLCi+$517C@o8Zetw=ZpV%Et(>8}Tskf;SKfs^PZi58PC8_PdU
zlroQY5m(a+8;bRM^@OsMkqH8r#iE_0lU=I%HraZhx>=`d$-Xt4UY0Ho@AB-@CtB^~
zY6-NW-h>tN>G`(_vHP!8i{x+VZ>Mv28#nv1BWj|N?Hj4})(|Clj>6JQ`6eC8O0P2w
z4YDq+LxClGgFfc!m9Pn_su_xo@0D+}ykeOZtDdnP(|u@G^-+Ej7CoUfr$8ze?L}bB
zKShn)g6+)NUn1B@Obe7$+{QmlVpEGu>N?e?wLX_6^|5~x7hB6IXdTO@A(RTsyf;-?
zvno#Dz`k(K%9`XuZ<|>!V-4C2tPgg2aIdxL8NLfJjc=jWzQd!5Mcn$>44%SJ2}>Zt
zsFI_!B1Ek$1B0Dbp8}(_XiAyB&_trVOo3fLU^+;LuG1J})Iw(2f@f>s_wXK6(x~T9
zB#!9}lzl>$fh*q#P#VbwJf&KXXnD7h%<)B=9p>v@)lUFbnIVpt^*C_n%8wL$2?=8x
z(lpn~vcXy>LR4F5c$)ITpz87iw~;4I*pk=lI51d-h3G#CBKJwG&!)Rqd?S$rm@LSq
zRFz)#x(JA+n7>R`BQwe<@;ZRQ_Jltvr1z64h+@!l1*F;+riwgSzF&WNNWlR=@Wskh
z(+3qWUeO?xO3*}yD=b%1jgM1d-TamB+g`I*+_`ehCP;Sp?e*H~N(|HqFFK0zyW!<G
zSj`11&_*8}U&sV(aF+6-*UFcgwy2sU>e7#DN6Qn!GQKtqY;1(BqM(xA98SQS5~oot
z9y&X(Lv^U7IdJQ=c*yYMoWUO^7w(+`1-@Ka)BY6_egz_$;qaLfFLQ9b_p%k^w+0ON
z-Mw{;jlg-4&O|00m`Wdcq1FG0<=YKHk9-27iHh3FJ|5?bkLNVKYWR6Y1HcUdJ4^~p
zpE7^P4%g%a;k}^{x<O||5x4E)yN#yzXvo6p7kbLZ^Iw$&*Z1&cxp=!)F}MB=0S7OK
zApr@8OUVDjle^6wf&fY);-|d1_#i*aB55b~aCcarDK||1C|IRH9e=KJuO=XVn%;B{
zZk6kEUTXk;4J0f{w#dsq_f-S~IN0saM^#kZj&a+k6RGL>oj_uYVqo2)yYyl7!;RXb
z1q=rV`RGb-dMVQ>TI?iqr!<N<k3-A+si7A|?fj-ODz&}XM(R(lmQyk#I?i?&%M7=U
zmWUT$Pgd<(@4jd8bg+}d{91*9V#3naPM1P-Gk0Xbl+vvtWJHT}Z7HrfI5UxmFuw&x
zWNyas!c3PN#m#&=pm}IsbQoo8zCt^Xo_3aiSY~|F5!c{Wq_jnZ_m`B0yR!rdCrU?A
z&||qhmpyPW+bHDL(;lyJFtTeKWuQD))LGzDOQahnIH4z8v#Hq;#Id$hVup4|3xjul
z)BKO8y6LMK_CSbpa16=7189)L$}CmR%yzA_1y9%g`lez0nQEe_WfPgt1Ta)c!kU-_
zL~+ECW}*M)ZKuzmzzuq5C7h;G29-HaUS^@VEEN%co8-u8q9G<qzG5~~Mm}w<xbC8?
z$NFP74S5We=<mKu6goL1bI~=M!!nz#_3W3dYZNr6tnK>2A8mVhL?c)9v02K$<W!?V
z_V$uP8%rn>JC~OM>OTI<e*=2$eL&<OXa{$Y7&s{o`iCr-2zyM}8Orhsq~;4j%DdQ4
z{Eb%L4H6x9jd!V18k>7GQ}8DC<9)1QOhMssPA`G%>1bYREjM{F#%K2~CmS0ND~O7c
z+Q*iI3ZA3GF`!t)EB{3QrpI;(UpQ*5&T=cS=KL;u3;jhhCippQ)J?zTNvYwuSgGNP
zLSb!{IW5QWt(v|GmXzZiCTLDpSVFJVU^8dMs<>O#4QHz^669&B+`VM8kx~1K)eOK;
zqpTMTgYNUqwyuqH<HVQ^ZEF9OOBSz#^8d}(he5Z7@o0qy2qM<xX7aQkP6ME}V!LdJ
zT@|GodCCeKlQ~G+s!9dz1B(ycx3c|qFp>q})q~YdDJI%)rRoP`{b@aanme5HoQUtQ
z@cQol=Y##PcG5uF9O_-PI8LK>cCLBJ_FIK))iNPMT8NaKdf2RPr<CC%&DDEuIifry
zHbB)-Pca);ilOB^Zh8}-!DrE;02g}uG`!_~>6x5sIaNeLmgCEK7oUDQmH?(RsZQiE
zi?(92rrg+J-M+_l-e~gb!?D%fc_#<0WnqDQoHv@qe7m_=#h#THi4b1hOr;3-vc4%c
zyZuQMCubUhQGn9a(CtjH?92owt44Z?XL<R-Td=Jnjn#oST(}awG|xo&kjZ*B&mWo&
z67ecu5AnEzDb^e%IcHo<m<yxG@x+_^;ScU^`4}8RrTsB0#+HNpZ=c(E%dE{YDJPox
zwpikR{)~g24IfP4I*gdV2|LAh87dhF_X?gE?pf$3@Uq@C_+Z;Y?}Y4L5+8y$VJrF~
zaJre9e7PYdmy{nT*FZ2M{NZ&86pp1&Jy8HgYxHq@r`a!t=I~qE^oF8oA$}}CweTWK
z`e`eeI<U=@2C`2}LK7Fz2n7~57(Ckt<JU>j3J>j2JSpk^yL6~m=s}`C;~`nKCZ1_G
zEq7TrmY(+4!a5Me$&>@|I8uw55-<Sy<Nt_^7d9fo`dpok{ExZuM)idqXof{eLQsbY
zbHr!fvnF_^LXJDG$Usk`H!f#yOkd+wef47MUM_@u%&-P(|Lsa2wTalmm(DFR2rAuH
zkp~4cC27gxZU{X<wN-JvTHkjFZ+iMQ`?)Gkf{sY7{aZD*u=wf*OW1`2LvAZ!+9*mt
zT6_A_&8{*Gg3E%SB=NE=6FjjtQV#1@O}07@oP80ZNUy?A0+;TMyAGo}hXCWpKntd7
zY>dSKw{fVt^02uK*kLA5srd)t64Wl(|4{HoaznEnw<$UmHZeYn5^Ew2M9kQtw3)lo
z#nj?uM3<`gVO-T{Vlq_}>VT%+Bo;w9%Niofu-%KJ6?#5H30IS*ZgUtZ`Kw@={HbC9
zq<%%R$q{s`83*=7(>Bui{6*Wkdl{+0khJxoe_xxO*HB><?By@+s_m9;6?sLI5&Qc9
zri~5Nwo|_KVEI+kqE_{Qq<xK9<3^%ci+iWkLf4Qou#VcycQxW4>}jrU%a0Cc<o2gs
zEo;i3EBW`=HF6Y*g^w_Qdb%mDFbYSKAnQu)<d;CL?F}E;`3{Y3uKDZlS9^Iw$&w)*
zyi@V+#;Td~lrnP~vSc)2Vq8c9KT0T^ny^Rv;;}FLrA9o+8O#lcnbP56$oPp+R_Aq3
zWm<F#=+EQ>2(Qas=8283(o7^}aD!s-{u)@z)J2+C0h#rGQ%PRAdBcAoDu6K^#A?s=
z35HADf2mO9lzkjkgo9Nik{5nFp)&$e>B6w8u&y~|J8d~oDs!|(2kvaa(f@I`zJdU|
zD~labA(1aNnfq8iZy%ox*qR*3F+TC+_y8*5UrPS<rN{Y&>jwVdc-~Kue0F36zNiKk
zv=<ebJXT4MCwo06d!1bs?`{<<w=_BB6b*EFZH?<EL(b0w*=$fO!|FBBs-R{+Z#8-w
zW?!ks$~CxdMwx#DsJ12nUw40OM@;nWUwcfn+HQF5*bjc!ZgFTsOtsuO*T>ywk&3|f
z6pspyFCz~|`MTss`C3<figv`YXht>0G4G2m>h-XGT4V+HT=d|J=4~7dS;a{58?ZoD
zN05KwF*A;WZpHHE(-g-r$etA(nLft3IKGEA(0P&A?+6s*`%dP9Gj_3#Iw8lJgA*h?
z@srsGNXM~{&Kg@b`oFvjlVKbRlbx0blTio~As>1XAscbTL9UlYNMra(GXtdM0$}!l
zGD?6j-T@fR0~u-3f@8MNMbWufnhKLqwF{Gt|60Hr5FtM?5g|Kw2$P+^(J`6>F;=mT
zlJLZa0mnij#olcYAV2eyLE#vkuCoITk&rX$SI8OlGm|jtCnBXWOgiqG<ctOioDwCp
z@E23?7xMt5(Ez3CLL0S%jy{4DFopga+Hkh#(}jjfQ{VrVOQbYaYGTGJW-`XARdU9v
z!V97W+ki;|z%*R|#x1<j#tni5Qi23<0;R`aQy}hk@R}5)G$#b4w8kBBM)Nr2G-kOl
z>GU9BGV2!|qkbTxe6&#z#L-vaSP7`uFfD=vQGx}m-!DY#ajC!g944(jC`>l}>mU5D
zzt<nXW%#!k|N04UqzO1m0y#Qp9SiABZ~#t#Oh$m*gllw4#rMo0AxM-^tC0uKiu2g_
zn!<~5FbkgG^sYyAOppN2UmVI`yakk236Qo8VAPH{`lv;~MDhEw-TcqBH^8><gtx``
zfVS_Hx4|mpj9(zG3o$yb3-|!G?_RqyJ<y$JFTQMFFs=)>zp9|O#W@|f!E~fX@ZdVT
zQ@QY+m@vL<0XVJ$?gB<&*1J;#j(bxCK-(~ayHma3+b}@CEnwR)NWZF}otTAmop~AX
zYXiDqoo7eA8M=U-XHR}?R=Hu)HQ=3R&cCBt0@}J$-WH<++qy&E7N7i9fWJ?_jd{?v
zr|u%pwb;P6?Y{~eK-*42yRaFyL<_LKY&ttZY+FFC3sZh<TfZ-A{i~z1E7S7ZC!8<a
zR`;(doY-^i6|n94udBF#w(GyH){(@SllNx0T=r)?1Gp|+{|bL?I>0;4O@CXlT^Hzl
z*{(K&*qjtdJW`$g*fj866Ml!%fa}zc7ci=4y(OE_c1;lJ&7c9<HsZY{gZ`DlbdDkI
z$}9tI8<qWz$twBGFyqVS2G=<Ty(_Z~zRj>l%IF5~n($A@HKFBK0M$8WxGR$lVC(SP
zH+XLbH_-Os|NA*E^;{e3$0h>RNvYYJK?JhR07J+q0?<k6iN1~U`v*pUWni6@>%AHI
z(4Ca-y%`3-viIJM4D4bALf+fjVz40=me9&1@>y*={L4F~QkBnXwY#953##th4y~9R
zPKw(NO%V=n;)>UPTOHKDuT$l+P@i-v3eh_$zbae`L+IW&WeGq%XUd5OEotHOpTmm3
z=8{lQY#8*;YM9s!dlt&y7l-0TV%ju3&!v0LKMy_G+#g3f4>>tR`>w8DUD}^7@X+l;
zMl6<e$+pwtm?lXzx_^@&99V*4=FCJf2eWxEzV2g8FE4oLU%a<!vtWj1<k`pS3o+vN
zh71~ted8TSu5;5<8rEXxL)g0hCT}~8J~+woDHgqXg;RRGH{y?DB*y>kc;YE~#ETvw
z9gPTdN-WPL=gc!YoS4GFtTIht8<-OlE&e#fN10$vR~*GSYO^Uti8Hx(u(;R<N}EFz
zBvuqS_n3&piTz}_@{|3iIK9KYdsReo(TH57V<9qSHm-YDQAgo#%@JpdwNT2JXB8Ra
zO((XnXLOtezcZU<c!GRmp+3Df9OWE!{(zJC*-Yy_w{m3Ex=lkFdFsHFQMZ@*(9ylB
z`nGlajyQ883VEaod*eR^0*Zad%aiXh;u;x8aTPY7@O0dM_T?2S-%~MW*S%j*8Rka1
z<wsU*#;u<zNGza}L$~dr#(X^3d3ZP#5O4N(h#thya1iWBMnXsgO(y)HBR`i|+4XQL
zSgQRT=ElN(2!!oNTZv{_JrWNiWrwN%^astOAf{l=XvpIz4A?F5JRNojtW99ywZ#9V
z9mVbLB%=a4{2FV|zXdgi6Uw!HWCBabPdP_vI8cWEuiJqG%ewDxnv_FGksV^Qa1fxc
zBrhb&myp(ys3h|0yk2kBQ9K780cKyrTQ(c@gG<4;_uz@Km+cwu`W7Pt*8Avw5?U)0
zJUJ86uZ<5{h{x7h>y&{CNK!v-Wa<Lqfi;W0YngzPN&TKl3b02C;ygmQY&zDJ7d0_F
z>>pxQaj{5_<%OYCgCo|4I!_LfhR9bL&*D=Wy0dehZ6h)oSnYAs-^FzL<;R*Ng!&!D
zIqylTDN<64BIU17W0b#=JbF2mWMOo56a`~*0oOpx3r*1&5~`18O@zy)Mx~Ym#s{O+
z8Ig=8&^ICn*m$7J1lvhsso7b^(kL~3(}$OTggDiMWuy@Qw5Cb{p3M2azXwg>xaE^P
z<{ICWL~gv2x`$KA%-)8##+j}uH>xdGK(i{Rnum)i>wwgvL_E3M51o{w<hL6*Ob5o!
ziD;}$ful%k=_Ze^yT^#JCI5o86EaYDAw**vWC4ADp#Ky7Ze9?TfQ|qFP|XMc!0<n#
z-yMHXZyUOB{1*iLm8P}hhG_gZ%;I+_B<Zm@GzegKSbgClRir`NGDio^P({;Fl7OE0
zE)38p41Zi*R!`H;ON!1vcmRK*rf2Kt=KYRV$;aH1-|OToJ3FPTMx84mp9eCZH3p4l
zk7)5_l|ojPDD{o<LcMv(KL@bmp2H*i_VoT9(}QsTXWwRgx_&Vxh<Qx|qdsMozdl9V
zp>8+3?8dLq)Ng`#j3-$H51pn80#XIllAtb`X*r$D&?k(E^`9zDxKgqNoPi==tQA&Z
z=3UW5LLw-l<AECznCzj03wj~%*mTh$qc*w09f`B=8sM`LXnbyDB+13v!rYsWZZ<kI
zrYTUMo1e4@!`M7Q@UcG!CG*1qb6m{ERYwOGQ!t=7W_n#}lS+mQFWQ3KNnSPZ&sond
ze&|~R#C)QdRlR{}T#EtyzTHu01p4Km1QOy;UH&+m6_zaqMmo7gwsd-@+odtXDL>X^
z%+0GmbbwnLG8(eNq{1IQ*+W7U-S4BJr3Z3TK5aD5csCsNPJ;A5wX<0>pr+Ie|7^|y
z-aqh^(@cOG5eWu<se2{KILL*rYY*s|vzw_^C9q~P+pIEvsHpuj@p1Ov1C4=<m#};Z
zc~1}lT9z$k{2Pa}Bfa(H=%(rD^+4jJC;*fw4g#q$Sj1y*@f)*E^|1gTbj18XH^q{A
zVdT1PoxUyp1p}N4-e+>f1yVWy^gxuuM6I2{>$xjY2wW_4bsLm10j}A?<=X2Kdx`aa
z$`7p?(YN}xWfMONgzq9P#=@vW0Qu@(Px|S=3Ys7z0;dv3H#`}pLY>?XtxX{M2DDTs
zTRrZJA@~yu1A0Olh3WCbYqjOgL&qIbaatHL<VyJ>W!UwWxJH^RHKtwESFf?8V4=L5
zh%JoT;+nC6Pl00gYzP?EN}vU1vo=m;7eD336|dns=CZ)OcL{WP&7M7-%k1JkQf=Zw
z8@pJ2PPKufF~A3pLT{o&h@8$jDmuL~fZPU*XB>3br)iHR&ZLdzLnwUGgw`7y!|*hi
zuCJFg-N1wO7Cq6*4>r?SY8`k7<t0$RCA!%^;!}Q5LMvA5kt#L*WcB#(GG+A>FqHb4
z->|=WZ<9JutPubk;tMm(rQbpP0S|C8j2WggWQ8;#8?+lDS}Wj+eT5)HiH(aBn8z?e
zkx`KnmK_pb&3HVZc}%^bVHa#V#RFgqK!A)FfME5QLen#)V4m$0BdHl9=#9l!rZq_?
z^SEx{!V3m#1(22w{iE?V#Eo_s6WXJf7k=lTi7b47#%u@dpp1ILT0-`6a-f>P6LBEy
z7QmEo)Zd?E5UMr*#NmL{o5$Mc9C=CTYU5@%hhdRGqrxw!)yewhYYgdGVKMRqj6vAI
z)t0hLggOZ*gJ6}%>EN}<7<`uMD32yTECd-1Ty5221O#YqZ$w6zfFViRVD0GpP|gjv
zegp?jwtwgV&q-hQOB@&iqt>kHoHO7g-D^p>?;L7(>~^`dFhK`>@T!yCND<#y?5{?Y
z8?KER%$nTGi9Gbs+h?__o2b?Qavy~sS!UWD_%sIW$eE2^s(0ol^%8XvZQi7k3e0H)
z$<wf7j-MWI?O^DjaA)&T9uh%Iw}gxtq9HlKi|#lEH$_~r_2){Lg&<D`Kzg>Z1jPy!
zEu$Cb-BGM_fc>g4Etex8^&?`7?PG%5CFTDZd&l5jqIYXB&WUZ?zt}plZJyY+ZJyY+
zZQHhOJ2}zh-g;}Q?mIK@f4aK6y86Se{o(0))?U5#T9?#b`N#vwk%*Ht2Ks(L@@E*o
zxIZa&$jf(PI4}9zUa^jsyhoIjR$ho&L6l_^I5?N>B@9#4c6h(<#!I~u)RtoWEvX5~
zbCv-$)1toZpI=972q(X{bHHL~!*=+1J4lyTeC#wUMpUoVX$Hpnp_qZzzAhMsxo~j)
zP<6v6p>;(X_noL;>vLvNs9z`ShG7Ru)@E}5ZKP^rNsz!5K3sZ7f`TbaFxJy=EBKM6
zN6OlG=3*gxaQYV-s=Z^J36Ej!rr;oL5K-AjYx~a&aHf%%U;zWKx85il9_D@dgHJ5_
zj*`&2O2CU^Jv<&BK0iOJ@4yhVPZCBgjW*fXcd>tBSAO;_9w-glgtMG(ZJ(PU^)&vg
zG`y6+0NVeDb9kNJ8Jae&ydpCOHLN)$4gA1rh%kxKF^vD`$6XJeM;3FE*m`yW=7MLL
zl{u;)?Ri<VA4ESZb2YFf#JIPF_gtC3V?g(*VF3p<2MsB7xptfdGfRcvb3oy#VTXH%
zXn%8icK`i`t?~8ROej*pHw9hnIRt&+=LHA%`t1J3mnICe4w*KMmEq+O%A{;xW8Vy#
z!+;gq5&5bU`fvhb^3mJXq-&wvWB>eCOt%K`b8@Y=xpNvO-H{_iqBGrNefTrPoRi+m
z2!voKsV-y$g#1qKQ<%vGwlE7^pQ)ZFs1zq$oCPc#xT{VJfh8bUkQpH)A`hPcdq`dL
zd62RTV)zL*0MtZwoe3TLSw`|G-Jjp$(VVVCeGd|c#WMXt;xyW<%RyXfHv5tDH#F?t
z6L}YD;G|5)qeI7L3P|2|FHl0ot!9}>Ak?*lYGo;%c?hnkYeEA<AF#rRGSnrpHuYSW
z_JMontd$u|Utpnr69FbD10-0}rj?pm-O8IB75J)$g<nJ@W^UX*HJy#E#>e(7pDQ|f
zj0v9-AuO?YdGm>J^a|YY2sg!LdFGnTdl}Neu33<U*TzG6Wsk9}1*}6e4*!p%h3Or%
zk6khJ%)iR;(pSyx<WB1q2G_~y0ZQ*tCvLGGxJ|l+PiB+$&}wVX%faN6w(5{(22Gck
z4;`0{;J&PDJAN+d{!2bZ{(<^GxRm?|-rOuR16-o+p1<dGS2o@ARrbGva3l(K_`JP+
zJe|3*v5uKnr|#$x^ANc2J^VjP;L65W)Z#WhIktI!4}s^5vKD_SSLoN>t5$MNshLGI
zH@Y4F825^Fbs<^UTQnP7+InDrO`)$4T}j@F^?zlZK&_id8egJ~=(*>+)L_py$w(@N
zCTg$T=^2hA%8!U(;hNDn)*QRG#%`qTB%$Su-$W?O(w+4%iM+R%>Wj?3eG@~yKS5#S
z?K>h@vmSh>1zBb>e~$nDB&*WusiG~1?%8Q5rAJfhITLBsesQ7izc@EQ0#I2XeFc7f
zeR_Jw>J<0)ZLFEoUgPdDb}(!A6J*hDb8o4f^!PdiC5&6`Gf-p>5sQCv;ys7zdx^RJ
zrnLv@+dum!+dC2KzJ}8t?R@+1ccG1_YtzDSaUR1Xw_=YINC3m(&yE}!FxTy)mIxjP
zwWB355$bID0IUP>?4XCAoU5|1lSyzHf5ZTnGJdwT9PiHKA%S`0=b!^?^~}P)O!#IA
zg+5a=WS;UDP7K=dV>c&wp^ZxcY}(;>>5!ARI>>`WtZW1(vGT|etnH#i?ASHDt?XZ4
zO6b3;ZP>5><YJDamqO3j2A?(?dt2|5UJ$k02Z_ZNSF;1LLmjiYMfLC{S!7RV6)IFf
zzPGRz=%<;qtnr9m!|;RI1l@oK++s_usB2~m1ts!B1zyGWl8D~2p7#>8?pGX_RkJ4c
zwj!>w!)M3{A(;v{`mauQ#H~g@isXr@vv8A!@V27^0D(zcNLEdc@Kbwrk=Qy&O4Mtb
z@Q^0R=?Eo}0;q*8k-uGTj3dcD^Nbi{k)C?_YKM*Dp^Z7nrOFmZh~KqIK#c{B+KHob
zf!{;jn^58Z&bEWrZjH`2)&MQn9kjs%?KlUiC($INhkZa|(aXxpE-@a=s|b$g@TBe^
zmTJ(b0f^_Ul7Y|LsatccB@1Q)X&KaEAR@O4;?y}I!4X0z4(k|xOLPv*pZm<#CY!3x
zV5<vNKw+*`o~e^uY}V%%<M)fgb@+l0xm6%70*UE5*Ca7r(-dr!)r07Nqfx`aO;`1N
z)0z21YjrO)9STZUf729o@xDUdH3^ST-?mq)^f^bjT**wpV^-7f`3pT72W&M73jHe8
zUlC|R*Z0uT0iU~pDMgo|W^V0M)$0T~^KeVW!IlIw$Tisc6zUWlc4dbLWgdDF_Gjhy
z#CG_gIxU+;F_?Io4{%L=GsfvIpFK6Gi`b7-0cRs}Uwos*!W^VLjlRr;AgmH6XQw{1
zyp~Psc+6CAt<sk0Bu`L$2B}^xV$dvvuThpCB2a$0@fEVHV|QD^Zbe+`vBAyGbjlF%
z@T=Co#enzQ;b3eFgJ6im>~ME5$jN+!RIy*ax8qu-nWy}_@gj{j;k2MyWKMNFu!<EY
zo<zK!3#*<j6t=+xm;d1&X*6EH_{Wtlmw29Snf7f_#XT(Ft(;l^$Wn2;0o#FZUyvVL
zuY^epTO!}(S6b$T>V-O|J892h!;=ogYO=4KGQLi3`|So(fG)-!nmSC&r?Sn9-ffw(
zno`Hrt<VUdqhC(rZZ}N=wSrfr5YR$9PGrY{bdv4C)_{qRSqTxv`j2ZpLSvkO;FpHk
zKYD6|x&DYXRIY3SWFl%RCtPXx*l<~PQ;FLxacHP2E*?Cm5r~UjYOwdmf0In(m8ZV=
zNHSjIiufA2k6vkhyrr*e;)+G#yjAt6mLf@_s`7V!zXfkJBlJYzf&NjQj5*?nz_cJ|
zXSQy8<k^-EH*4OpKg9QYj~@>CbYA?$ixwdihR$lB8M#ni$Yxrv9OBpe*jb7HuX9_I
z2`SD&6O8Na`TO{v;_$bxo!=jwKg%#s*|=UGuXkV56LB`T4XP74!~L=`y7_c5>#wzw
zrF^K_mG>`W>^KOCmP5!(O6*|1et3J4(m=@^HZA&&bnZuO)Lrz!)|`K+%|d8~Njxfk
z;n{T34hVr`RfIOZ>ca1MpU{(@2{?T%W3;>zVz;ceUJc^;_HXI63;GiVWY<e@S%*mh
zgTOfQc>fakQDQin)Gs6dLCFHdtO}}j<9aoGEFQ>Kx5>-xjj6kx11T;|@X<SRRv0VP
z?h110N6Yl$3`W3n3TBt5Y%r^ron*32zKSxYGO?q8>`3fY@Sg%t?Q%hNp@+mp(pnVt
zWoB@#{xwFLCiASBQQN(J2%9;ew2Ss8vi<-Thput|Czh(NS9-wB;xdk1$yQOfV4DhF
z;Uir{lqg6oU}n<f7m<Z;iBB_z=okITkyd`g<pfPYDOoY+(_Cy$X=}dLoM*{72kszy
zg`AXGuGe(+m3|7@6u>omi|XIUe~I?5H0j_+z6YT?@z!esr+n@7=j^H5>b4H5cuvot
z6|_RkaDi4mc&e|738`#beo^hp<6w#wKG445ZrB1ZI>UN4O#Q`H?u>Eg-TVEZ&j+%U
zAjviWNQRs^Y@Vtj&9&~<M$uBEB}D33MQ7PA_wOF;6%-#r1K;l#3W}^RNabIGDmS3z
z2*4MhRH2ilQ;gBqB)n82#xxPfDqK!~Vq^nAi=x+Ml$l3MGFSxHy4^Q^94Inc4#cK1
zTCBVMdOK}fOh431#w7~8&fZRizDgZGwwbsHGT85P71WY}xN&1LhNHb6sU&e4zcu^n
z>kyV9w1g%vSo{3kON_`Fiu}v*4-hvI0|Pze-7CM@|0e+f%(FOO{FCi9MF#{#`X2}g
zLqlsuCJun1iZT=s=vG3Jx~^2Iy0aS$5HQ#&C=k$p-+o93+YM3Vuj@aIvUU(<uH*Ij
z*;b(b`WV2Kh2q+|BD>g@4#szaaUg9`RcviLKFkwjO%oVv?Yi)E21Is+OP37;?w%&g
z*DcSv;HGmHc<-(-zytmVPIn`i)#$j}Rc^0)17shlV&D7Kek*0_!uIolD*`|_=0YGh
z?)?Wdn-@fg`a1sr2q@PA*d9C(d3|7OYI<|~Fl4X&*T5gxMYTqjzes@1`=P{WKfsQC
zdj0uZy~uhI`l6F7dQI~t_O>x#psMvy!zKj7Y`}%|L-s3J1@<806ZKMTr>A#(IA&Jj
zDWj359#D|pTgq-pHVHsc8f}RNsozX{e0_a)B5$$cNl!)Yboe(G)nXU4!i@d)KfAh8
zd`=<CM)uUhU$)%3kQHq0+uyE-nC{&iP+A3S?*umlv4dPm+gDPOJ8ut!d$Dt<_lR}+
zVAW6i$STz*leKR-;$Uc!N$)lI?pR5$13b<Bj$4V}-=KioXn)NTA+1>l^GUeH&jw1a
z>ef&sedE62XLfx*l~lO0S9dstB;fEr20Od36}*_<Z0lxyJAl)v@i;x_?j?nU`(o^C
z_)zLCGxGm&`Hep>D3U>B6FB-QOflWi^1Mx;=rWd4S`$3tDktQTn7!dI0EztVia!<Y
zyzwL2{kJ~S$C~M9T!gaG9t7ZE!|kQP>GspEufzhtTc0i<yiMIP;#zPhrhzd+9EoTr
zd|O@|MxZ#1I^EE;p*+95>=8o;oZ@>+FYn%Ew&C((IwB%%-fv3L&9{(!HX2-001kB{
z06~3)uuWmV^RAJz#;!R=Pgp>SclYp2Bv?{%90Y=hZBwg7dA=WPx?Kto2O4f`JM<VE
z3(?b*Y`}s_1@8322^>t*?fr|XJD_<Pf_-QvZe<3gxDoyMAtPt^FlkMLsyiC51Q#%)
zQ9@^(i;IWDQZ%5Lg@lnv)hC01%K{|Ip(!XB`~yLGz8}HhtzQc`dS_jTK_dggn)}YE
z)Wr;6#h@y|QMh9#pa&6D!sd+Ff0@b$GOi*Glo{Z{w-|VV<I8td_ZJb6VVg*?Vr1zb
z<?fXN%(Dg}a+#~qa8<x4njFO1aKo3*MEhJpzVUgYAQos%HvJ6EdY)7D7!X$RM54;Y
zuPv<cQX#cnf0Ow~NI8c=j|=D`MJOkqjq}V<-0K4~kZRyV?-<8NpRURdhrH5jQkDIS
zm`ZI?LS8v$2tbvXNRMBhiPEZGcBifgP$xy-lNW>=*I3^Tpr<V7`3>m3S3Ur$NMZy_
zR2T4ZNSUPL(<5u<_Q11knHbk6!s6io^~zg0<nD;S$09#_$$(~4g>J4dRSILmvTcis
z4Z%LADoi0zP0Xp^sl_&?$TsR{?{^6+on$fAOt<k4>KhmuV(ZH2AyAdkQ{`ROwm}`#
zhYM18!Vkq<5`c9H;3)SuV=>_!Y=u@(Zm7SkD7R9W9j{L)30*_b>Yv2Iw11{J*!vi}
zn>7o>9${b49UhQj<5)KctYZ>Le$Xw{(2u$5W)&$jTqKsOrE1*pf%F~KT)i?eMr=&+
zsi&7KZg1mkQqG97cyu$Lcc$NT?a2iuhZ)Tj0eF!H>d}P<g*vR~z6~9$Z7A-PK)|p|
zmH`(vOUk>ZvWmQY1Xr2$?sIc??6EknrT13R$HPAhi2o*y^Ui`Zr(`7Z*k=@za=?sj
zr_3UVL%<0C&E(kdyn}Y<7Ss@IndByRRaS&UijZm)B2KY;T$zVosN-ec+PtyU-%DmO
ze#jrPlJVrSu@nRi9KZbGH?+nIN?1Zaz&_5n^riV`(gNS%pYv(AL{%eFwi;5fs!j6H
zDU`D;&)weMNQ*#pE(5V-@+px86pp&^=PL{MZ+&3t(wZ9pFP3m9zy1!${j-3%dm1jg
zl@aAy(C{Zbfy#|g3(^|jO)+P7lUR8~JY79vK-ZXhj7v~Ig1L;gLu~Q0tlxnYCPH?Y
zsEGrj-dCsGGJ~E?g>b{eOB?KCrOSiG%4z8_P=)xI>F@p`+Nm@vdO3M{F|P|tMM$kL
zi0IP>lMdBkQ4Z}G=a5+u!mM?Ae_3M794#B#qfmN(mbrZ)AlmBV!Oe)%0hfTARcO1m
z9Ae640(B+@&#*d3QelaY=pdI}ci$a9=N<E4Ike)%cDmX|_fPlR-PPsC)zWdPgVVB@
z8LMQ2IGR_RB1BP2I<{F-zbv^U=x0$xa*>s$k*3DzTre)Ghep;IEYAe-l@?pJHGhCb
zn8|A1$&710=Xj;40d2ejnUnKC2z?ZH_8Cf+8fGj$1^*z6i9VOo;GA&cO6jEFHP;#I
z!g5=i{PeVBun+OavXzHniQ%;qHMb>?|3#wKv|C`f`Vm>g*R{#n1^JwDhL%NS{j*SV
z?ax2DN*F=bD9LBvUw=!=B8Eq)&HYJO*-%xFDS@J~`2haQ%coV2=2s}n3k}$XOPwqQ
zjsC?<5#=4erEHYthF&)EU-NL|j$-v)ByThfpDrOE$6hag9x;+76g3CtYNx1dX_^RK
zc<n7>wFk1Cy~ksm+I6;csFuG_wx(P1k8FiwRPbAxAB>s*@b};DzzwO^@T8uwYP+MZ
zT%|r4e-%W=!h4zce@!IfUGtimYW4i<?VIR#B!!te@fbf%At)|p%TN7VQsTshN&im=
zD)NAJ3*%^rX98GlEX79Zv|Z->{s_i@J$5sDRty)y)k@($^nHhgdd+g7S})g>YZ~}0
zs^Q4-``)YX-dnd8vC#<;Z<`{5Jx%He(wL_>>++W%7CN38ERNQT<OHdVNR?)l(qwrR
zrNNRfUaol4ps%|>8>_<19S<!(!UXHUJu|`Q*4t^CUpAARZ%^>2`{ut6RCAT>NiMoo
z9cyR6ihAP3qP9S~@06sFf<{4Q+x)k>z3RhA1T(bV(+VGR#KE320*BL3WxQ88_F)TW
zVea038dEcJP8`w~=>Nn(pHXpGV~{{V(is0gFp!hOf5bpT>eg}_;)q|_e;A9}m#1l<
zkn@j@gpt&U<^l+-lvS(`S2K(v8*toLf*!{|pEK4{R_#G}%NMfv{|<6<b3aT@GB-G#
zvz88oXVNk8Wt*K^+uk&JY;5VA%3*3xrnYwTg-%HO7}kXxXv-NDuiIr7+lk<yYBLVi
zYb7@-Af0iYFrq||{f!JV&XuxI>;MDq+H?re(#P3NnAFFn`z;RFW>6?5*BXE%hgI8=
zI>llKT$eemh##KXmw6GcaJ|SuW>5MX-Z`irDPjh_5Zd=|p@NH#i^IRKe~UdzOf&LY
z{YlfW3@h6EU$De7@8p^@ix;w{d^s&-|8kYrlh;}e*_|`Fufns7DYwg(vK^61-1~QX
z!(I2S7#He!IjNVMi<$H-{tlaa)~l=wqK7etFLObRy<mJUtPGDg#Ac}<3zB40e9{nt
z`<=qRwGIgf_~pK!)~wQ+4b3A}C%|`XBGayDBsN#2;RTRRuO>pl>DvFe;5UV2+AR~o
zV$70h6p>6BwkGlTtD90X_f`o2PzhjQ9eBc-O1bg$uV%1!6K)=V_Yyg|W*{z{_)K-m
zk*WiGXwud7d>{!O%xc|hcu~>O?&M_??!X+}7Z(%=tv1kK>+|KkLJ)7(Y$;KS-qPxm
z#Hd1Gq+mW=JoG(v96UVq5ny0^PE<6!eBJ`TKqy#rzK3T-_?m*kJ(12MajgdxLQR*b
zLkFkPQf5J?C{Ya)g44A9_E4&J9`D4_hO?TT-7~OUspcY_Ytf@xX@1`uLHGq?sdO6n
zFN0Ar=HneP8?WC*T~Qml+_i>*-jHi1Q|bi}a!MQA&wUf?;Im=2pq2qNTc%$7oggi4
zhm$3MRFX-l%3z5CtCUE(nP`q{yteNuIZsS9TTAGVK1kH**AtJ(JeaPD=_gVbio9iK
zxXnW$E!GWER@|C;gncop%v3B`SW9ZmmkqQp`m|rCt4cP&M2;?HrIOCnIdBg;&Zfu_
zzsADEXBLh*!X%|fe8Mnw05uv%<zC{II{pfA3`;&&H7D$GhC0b$!1<3T7jSQmLL8S`
z6<oE=lGsy+Y7xa)13BOo1koKgTF|&-MV~y2Ik`)e7HMZFFxwX5)YBl1ZG*++6vSyU
zCC?R8OP4G4Bl-orV}Pb;PG<tScgtns7a6AI5%VaNd5tF;zl-C@kR{-W?C5Vz-of?f
z@o<?E)B)LO;Cj?t+03I()rt(FZ$m*?CKf0Jsgf)GZ7B`=ijqG;u8qpOlbRy8Nap2i
z#u<nQXwJbYiBB}@hoDV|;#%4Q{{mHIinOJ?Rgn{yBThr6ceZD8sNA$;IVMH{XWuAZ
zFT?U!hb^Z_N6X&N*YGBD+|phi3mHjr9Ji}jGKa6)sU0eKSB=g4>vetY<KCZ4d@wm|
zfJRjB{+S9;!Vel5_0e(3tw$dLY>SYFTaOeBDmV>)@n2yyhL2)|S4mdcnWZJUQA?i8
zfw&V-U<ubv*8$Lt^ELDMJ$NAdA~8?{YwM-uczZF~u!+)e?F4qZljmq$Wxg9VORYXx
z+oDZb|ANg$UtgDlvC28j2ikA-aB-g@#LUcWcl)}YE8HUF)md??*YSH<{+ipIuj!w+
zo62UTlu6J;!7-t2UlTi^6|?O{=n5vW;LZSoJ!cc4b!3rRWsSqb*yEDLAqNrSx`-bH
z@@Gg3KE+2YehvSunD=2ncIYxIMm3CrA@AJ_H2;Hs(l6<&<E~|3uc^bHVrPL@Es~9I
z*n3O{z}KwHR;xENz8D2N>4BGuL$6vcZpa#NX+I3$^VL*(WWmNMKmS7dmI>qy8n3>0
zGk$gpZ27b^_;NWHsYspRktwA+P%)zhpNE!uON<O#=Y_v=_3UtVlo8~`QkZ_oSLeY_
z%}G+1cMGDZMMKF!&zfh@2p0#2+{@zXToAjpVVU0_F&TCsF$cc(KC(%eF$wFh*gCr0
zz2Wc~ciT;Wuy~<r$=v>Sop5(!%FW^K^0nrxovD$9dVUMm&|erHAG{5^nuzPCIR8~5
zgk+149W^U!>#dlZ6Z?2k@^~ic>%%e;%}ROu-1rR)Ds>xYG=sKgh&LNNrCcwFM!Kj$
z<j{Uii|2RUCtw>(erxLl8Ft#kL`SA&A^GqbVE#=UUC#(AY&=@;(xIbz7c!R`$+-`(
zEVWABqZ~A3hJg|dd`&zfhppSw6PYiqHr4=-!-ZSIL}b=mc!I8xbo(<OK&8T0omv?-
zMm;bXXWM`D8iL9R`AZk6gJ5?T$ip)UzDu|g(d}1*VX(G&Jrrp?{5>Obj9->+nr-@V
zgs^LXL4h+azi<HXBYO~A=V3ug7;s-IL$oZ7=Kz(9#~L{}fo;sD_^*=jM$mJ(^=(Pj
zW>F=kFwD8O(`u4Sctd4vB@^U4&1kE$W^3enfuN=Zn5yj0q~Ge{psu1#O|1#`@b<x~
zx{qt!U1h;;xuC>M27r=@#zJysO$3*q+?aoYj&Kd%2AO2X<Tje=aN!zWI?p%v0~UFl
zg6d0AyQp?kjEQWjwB`og6B;bVj+4IB>q{)ofa>UWk?%5&eV~e(X+4|div648)~4F9
z^NshTqGCZKB{mgl$fKB^EmD)UKM2Aar5{}#oTSmBWQY7C|56Y=t-d_RH(Qu)w)j~*
zKj8i+OxP#H@5_Mz0=oXmT>6hxiHX5~gb7zaFyTP-zhT0W)1s^(@@sD%OkRG8W$+*{
zi1L|Jeq4jDA%-ctW)0MtfUl>ii?tPn%dV!T&XQKRUX81XX}0^unokF~wHt*g44O_T
zwhKgHS5;QuGeA28SJqTpTN`&EExyOTc#mNzPgw#1{s412oY3Df+s=976Q7A#cLeEx
zc#p5J{{-48T*ivuUnl`*tskxh@>Zdk;R&6vFob1qP%KmdL;%%s*EMQ}MHnPCb9#Ri
zC2D|YK2JZpZY-5S&M(sp0mHM^tC>*sRgea*;h@0vMh>uj;utQC=I~G;TwxY}E>7G9
zB8Q?=`b6u#aWixBkS&ZCPkJrkywxK7DV?QTTEYmpY0<19?%Q8Hsm-CgVQxw_UxPu2
zu*Fe2doaRnXvMHe6c-1vmyy!)4kXneL~c+Hr11J%RxAd9l^R@;k_S!G4Xy2JU=L@h
z)dLyCL2QK*(*-N4i_{;wX}l+#%O-F3S5}%StstYEF1#m7bWAO#1;fI$W9m*&ug6Js
z{MDsph;1O1!9exP+yiMA{mjWsuQe$S;bxjYTPHh4f&7qZy3pk>u>edYX*)R+x(D=n
z+$lgVuYL=iC6@GGRxIlvt^}Q2gZX<1{qnp@OSlc^dt;a9lE_<=f*u_souEiNI-(*?
zZLH0OV?}?KYJ`5pk9bUv!77c)e+HfI0ULamPz!^vfEnyIYX-D`k&{<QtcwHxj~53I
zAO5$Khljh1kCVe0UxauNW@*h7K9k+0Dj>>^<`CkO&FyYeD>tV!F>u7`eCRGfT3K}>
z<<?!~%3Zu~|JUj!Y2sEo8Ou7nX8A%NFJ0<Bw2#P9rugn*ZL*Oi%-fPLv7X%oyj4f(
z()0CsdFV2YB6sNN{{6@4*3s+j>*+}X!p+2LBBO(Y(X7-Bk*`3Xlr1T*jV8@9a_0_G
zXA=xXgeSWYY8(tdbUK5`)1F??IjjG9W0jh}kfL+nSH2}XVMHG6G~(O_#pJE8X(OrQ
zf-KAW8nIc2k+d*D6|W`+BpNdE^gQN33g0hg9r}BrD_Wuk)^b)JI1-(Q6Y<J-YAYZ<
zx?k>-*s<S=2dJVu>zbwz$}#yR$YOE5p&rdFTv;I;nkp8~A;^f=ssjS{S>;7<q1v$m
z5>o-@J=W*J`>A0kOwrzz{K}OjihA99_AJpsVyu?+ejQy~%~Xe@atZ(smFQ$#hR0)U
z=D*Iu*?X$OzSZ{Sc8HI6)Q@+_k6E(XS!S|o;NR4f2w~vazF&di-I^R4T{}xEpmvx%
zszD)`V;HgNn7$QQf7GT%>pMf}#ot)YEoGE=fj@a<!N*F&54E~9@MoaSuq%ScLK>-L
zEv-I{<QHD~lWUtszqy~T<^t~O!Evgdk(X+o<Qtn;`R+TgOu70*dHYPzkQ$=N*>X@f
z2y0)YrSsFpFQ3W^TCD95WJ#ZExf*r2oVyjvoJ1=Ji7y=C?3WKm@Uflie`6m;!%C+}
zM%xWq?S$!+k9#iG#qAGqsen>91(MFDuvV}vvsNxf@`>y$mSe}YpI$EjR)@Wfna$aS
zf?P+()r2DArrCzU9~60pCOMathd@6HV6aRB&gN70JwFqr(`;v117H+yH(8$NfrZ94
zi!iCEu%pOc7>Rek_#7iZ+tVq}&GD~IK!RcOIRF4}R1ka*`@cIDzxYB6{zSl#CQ~o|
zUeI>YOTVYepu^ROV65yM$n2`ilS~6NOo-=1$m1ZUDdM>u2ogMpEP48+`*)aJn?E<U
z2o@b=QJpj&rl!l17ag8glY*dZ$l7RCrmMLFMjHQ$_>xy}R<OaMj-Gti{<a~SBYBp<
z1Yd6@FJAur;?d=$=433%3bDGvS*-EJn1Gf$bv~X)%iPYIIvIm{)@bC>U!WksB~o>&
zW~5Y*Q%hT;=erZ;`6rD{00I(n_p%S&+Z85u7&jCu!A1<+lt+T6Dc6%5-7yxRTvcL#
zZoHWa`pKx3og3F$7d6&pH~(IzHq{;c_Lpe6Gi}7Cbtf1BBT=Z~wXA1p!{^SkYoy@l
z&sehWg~JWjif5WxK0sq%wKXBOCv7hIGZ3{NU$Ok+a-r9azm5Ct1kK8zMC^L6Q-A>R
za1@X|=<C<FwGFhLESKoa3PbkWm-UTYjyG7eNYZwH+D5!it<$=nVD0OuL%M}}${Sp4
z<W3?|h9uweqeU`fE@>Kwwfga1ZSY8H-xANKYg+jNpn6)AsAzaElR(u`Yp!ID@tj`u
zJ^K&ke>T6*<XL8Z7$6{pAFE!n|L~u{)j{9xKX*S(Yo!fw<ge+P(<#*>E0T>>KOr}X
zEd4RGCel2;giZ9JHVF493Yu8udCY^Z+npb0Ueai*wN$Wb2j>ceX4<F6$H$EY-UAbB
zI14*e(FOHQShPlV%?#&{(_UL4cmiSoJwSGk7QV;skAQ1sh<+wZE)JNTEGRO^2~@1D
zdyjuq*h<-Lo3tCjaQ%#-JbXrPX8<&>mp;@VWgMWMP(#c*s!{nqj-L()CjtVBWVh?e
z7mNA}%7-HYq_1#BpLkK8xy6bWB}d{{4VsWa$l+X~`W{05;-suxOw7(7+>)7iJ6w{M
zZgFMW>JiBx4nBxtvrYLj$~9{?iUbLgK~_?U*<S}4#aN4t6Xvi>l)vwf*EJhdK{*al
z&>wOtxpu8F!S;klaZ(3qBTh|FpWQ)F@DB!gkl2x%SbH@(Mlk%CQj1`;sR``MFrkVx
z821x<QCG?Y=TYeN3qzSWgH=5ttAhhB2p_+J{s;@<vq$Oi!<<1L@LA}H4;hXH6cfmi
zpoLuw-->*B>;M|de&WA(QdzTlcmt-UR<!=+V*HI*k9IL^m<#yx>K6?PPN7KI2l6@?
zz*vHXg1jLHGYUpWeMS696lp)^AuYG5tJ??s6K{IE-g@EExx~M6{o*jz%&k?!JjOQ1
z{sf)Wdc^Et-F#6<K!=)OA;PIqmb+2&Fk?fJa3U;f)+_umHn$-rcm<L!9SY2K9JUoc
z=LWV1B<{x-`5w;p3RD84?qvuSU3Y}~3DgCiL+Rui)oLj#dXsP?$~f@!Z*%p<G*Lwy
zUhJeN=kpo(Gxz1K({tH#<&#2LlR!@2mw-)6g=Ft!5hm>>)c(&5VzO3i(lE;huK^>D
z4zxS?Eo4qSvCofbyrQLHjNm3RaHdy1nBDjhT*w7*ZlEk07kcNnn@2>?Sg4~f<sK<(
zNrPY9&Nh`El=!LD5;MOXkJs%n&=DOLt{tu|g;)`c1|jswIrMFy3CH}Lpc2b&)?b4l
zSw~)c*jZu$YOf&%?a-`poseTy2Q2#EFeskwtd+<K**5ODwZ8^?MbGtUKWT@hs*P|(
z^rOm>dGvkKLZEQZYbfEpvq_DX607i#99d(ECR_uB87$93Q~y%FDH7@dNUiCX9LIt+
zC=XtW2hlL#KlGf8o}zf_h0~(Ea~`^ZF<@0;E3)e=JqI%=X<G75h2Xa4X`&C(Tc4IC
zDMB<P8<z#=9hT=oX_9nb`{y)6N$XfWoTmyCuzYk7;OVupXb>z;Jktq}uKO?$65T_n
z%hgT2!p}}r(7JtOx*Q2K@m^fh$jX<br7zHMLhLcRK4v$mJFU|;kO-n@&1q1nPe1Ty
z%UNG605fv?Y$p*=KYWnoWOQ;YfecNnXyY%4IB)4&mA3#;w&z`#@twY!r>F9%7N@KO
zDegDjXL$q^lhj^)O~Q5^enPCJf9;{5XQ310aR;-s$D3hHrj_GF>-_~*><`VJZ|Bfo
z!DqR89Tp<yhOiLKhlRMoCbKmrq>PtbMVDr?ILO_J6<BRuMx<?h@p)QOA<Zr5uwC>E
zB-FFz^GgLpU9NC)bKqN<lmB#+RbG~_;e@>t6P5(Zqt(X?z%-pR(o5|`PVYi-AM}HD
z`%Tbl^CR4m6+Al7{pFP;?UjN5sjH-Mo!N_*%ncB4iItfOu^y+k{1S1|zN8e$$Gs>W
zEDEK_K`)+$%q{;46i5nwz_pUP{kY@!GNKIQ6Z|)fWk7Drq21il8UN_s1PuZmSOP1W
z3JRWlKj>mA0t-9Gcn~gb<!&0O3<KV7hrs#~?VS5)z-BLC=ln{e9oyUA|K#1P-kOb0
zCi4roF!ydpa0))1!}tM0X(l@Zv;%_IwcK%5l3vkmD({JLH+AUaoKT|%MSNN6_dR`L
z!-}gaOf0wrbu_x(A^ScFC#v&Hamr*Jqu7LhSc20AP=j(J(JbNu^F1EpQN|Sd_>KQ8
z$H|cfwAIA;L8_vjLDBR}P&b^4677_T9y_H*z9jazi2KtX-vj;SCx74e5y{+IDO9qr
z((=lyPLM)S^)-k2SQBpR3ASqB>dr!aGRTu4qV8mo-!x3zielc`v*h1b^2H4|Znfql
zAtqSAdk_)&W!T%^{VcWA?K5&#65%SQQJuOY>9Wdus;-!PNov2d-#Uf=>|8#+_V*i4
zAT!4X1%KQ`e>QSm?sPzD(wu(f;WhWm9xb=r)Vy&CsBVYWXWNjfI!kVA*7po2lXi<)
z`!+TE4h}x^cm~a+>}VF9UA3`|c_3ZzXF7izRrQl_2i@4hq8k^Pz#Rfc?@qDtP*pS;
zTs#^BX+(=o?arBpCV5!j!6^c1O*bMS8y^x4L&Y{>S29_I-Q=nGx%dSQgG_9G)*dsZ
zEGmN9Ux)T#)f`y!eKWtsqv{qj4>x!WS@Y?jlywBa9O3;E*%?i#c@-(OgbagOr>hW7
zR`LtXG{H5!Tk|2_lx<`zxeCs*Rq7IOYAY-ZKn2mcxcE4E-M?eUOT&ZZu~3-X#Xu2E
zIF{$hO>BT7jKnwwF3kO{vJAhJ&0NRo{w7tOmQL<tclC7|AbX8}_t#rrox@trBth)Q
zz~6%*Oxo+}idhnfTkDsQSTSjm<Q8l%JV!wqcbyR9It6JMM?<iAL$X_M^!-A_EBsAa
z*E<pzl%lBAOjxcA3nT1~HB|JYZ)I-6Fb5Q_R8?#mXNq24ZFEH$b%@6|y8|Rj#Os;m
z?jk7fV{&wjHSMx&i$ATG?=urCF!r!NY5Vg3Hl8y#at|kL>ss9?mU41ZG;~h<(n*^x
zLaC%ps|ld8%OaKbsRhOy;@O`!N(Uqtg5_zS2aFpRDZ$E71~8uF795@-;KgUpDKJI2
zdO4NKW#CMo7F$jo;k?I;IdcxqM|++a_p6K(ZUx@z4LAlaVd<qCPf7ct;+QD$H*<N)
zcg}W+<6M;a1Xt5vN?tcba{Z9>%2YavfG3dftx@6yOQ9C+D=d9egaVfK`pV%Yg0>no
znyvRri)=cg6z5lF5u^7|D&hucD|<NefV&YI{BP6tebtgitH<m*I&!Hfd6$rflBbAE
zm>eons>jI+j2c7EKi%iyc6?LguOs{L|0K@WY*!zABBriODlHa*j7m~8qV&;1?3Spl
zVo%)7uIr{ehfYutx=br8F55(ZQbESV1;1MbX1D#`1LTXGF-`h(*h8uc)~+Tj;nCW*
z%cq5#v{2Ayz<sDujhxtStB%$bDXEqHl=pbF0~#@s2-U-Via`YN8+jZn)65Oc;quA%
zqH-9Oe5C!)dP>gL0|QWYS~Dq=^daVaHMF!{FD-t2>r7MVm`>?O#FG9n`s>(e_o=09
zAa&PpAvh%J=rXiEmHJ$vQykW2F4hE7)_C%aMi97~<+0XPjcR8p5K?n`x!bW@6-!gD
z!ANZlra@;VxD=U8t4q4pm|SG%2NuiC3x%<++(lT6co_ZFOFT1l-iqw*;Hb1}?y^Bs
zTf4IA+4kAGV%ZfE9;gk>Du!1ofF`asHH9=$%9-W)6w(UbLFPO1jm)qnRuo;7QeOC4
zhWc}EzI!A^Y4e=K%G#E4w$L3sVCDL7i@sMGZ^{m3x_EwSTcR50EG_kJXTj=z59OOT
zuw)d-6+!yQki;2|39raD9j1-<Z<uKKPtwOFjAcXlRrm8t*;%?!S&i}GMmp}og2f@8
zOiZ7$ApFB&P4&HYs}N)fs!%D4bi<qAtl}HO<>Oyjz5<<kxJ-pqRCc`kF5LXOqp}cv
z>0~MjklOr6z*<Xc-|8EjWkNO+6aAKmLk1e0x?Is;ko8pGnag7LMcMS~2?x7nyPju)
z|3c@`K>u|}<;Y9^_rw3XVgG-ka|c5v`v2DMZ2xF?tp1<co&SmWZL6VxL_mOmFu{O;
zNdAvw{*3#_*wEmA34{J?@c$QKkhju??8a|I?-#YGc|KBweVo70p~UjJztAWp-2{H+
zO?g<^Hf%RN$Fo%ZyV+t5QIxz$S(?stG?|{{!iHc7O0#N?NJ{cI^7XaN93BI+p$?*l
zix}DmsZRQcSnRE1O;Y9xGMv`GhQdBBRj6V_$ojj|u7?^tj9WRX;O|Z}K%g}H(x(e~
z2`A{MWu8Z_g*flGbm}ZU#DW?{vdbP34NUGg-o6+0E237v*y1OyLpBH**ugvu6a~_@
zS$ABAryi|?BPUCjPBzCtQ}bxip*Y$=$}-i-3w+Q`*I2rsfpXo7Ezb$R@i<S}_)$E9
zi(B8=;(AvBvC}ZXA%g_h=~jG>r4rtk!UJ&IOLnBc<O#Z+WjO<tzqjhjm{atdg~1fh
z5_LGbS-z=ZMcg`-a!Y0z-z^wNhuU0cCYK7PY@Mwt7W|)z(QM-K;26>pQJvFJ_^6Pe
z&>h~t6|>Fi>B_Qj#K2_36rUq3TI|9~y~M@_s!hA&>&ymLi<VC;OX`u%c>QyYlu}kI
zdoQ1#WE`8i^)>o!41#?U|6`RYAq0LR2xf8Q*C46yM{-2D`mHY7ZU2UejFGfzvWZVv
z{J#JK`NraZ%FtK35wn%3Hu#Oi&>_-Mx}k-v1<4<8kLV#ZywJN<u~48{kA$yt2HC-_
zP9(=9qc`*K=Cj9U<L}*=1kxLxJ{UU#V!I2zMhO@is=vS67L`7ibxr9A`XpVI55NAn
z0gvC=BD(H(2VN)7cV8@HeUoH;@NYfuuwu&v=Je73&kEH<1^FlZQ}tFq*Z(&m`(IUW
z;B0PX1TeQTvHid6|No^#AMTu>o0k?AAoDXP3lH<h1LD1^^}c5bO;^lV_S82p0pOIB
zl57!jGP3hh5DgIxN;G+shlNJJXgKM{Cc*kALmAqD{^ty1a@V8Ce<<TCxc@Z6|N4d;
zEsfp(&mU2=+WUV~#=O2mVF`p#M0X@Em-l}u^O4VasX3ash$5DsvFRl)N4I;A*57wJ
z-lMIrXR{W?E0-IXcf1}}Asg=ehMg3wU79>7S=#JzaouBZ=0^nQL!)VJZMNqLoS!I_
zWKOhnl%1K29+o1is|18r>f@dgCW|3P4Z2jyXmQf!nkS89{^6ve(a+67zi1A1%_W{H
zH5E0jDrlImv(4|H3bH0vB$2*xCgI4G7dC3zs!Ar76`B^o__Z+5iBn6KBhy9IGn{8+
z1v3$-qUhPy0028X+Aj6Q>&p;yO3~FS^-JYU&#X|^SI|}LQ}hjM4-XHGOpGj37Me>4
z%xvjRd(tpnx>!$ZdbgrUXBHU}T;@xr&gU|b4JpCAB&~l`&MY)9;UJ>XHH$(_*HT+2
zM0pd*?ahfSG{?8P(8naVJp|muN*-tYCTHF<hftUS#N5ZJC63(fsitXo3B57MjtJ?<
z6`Z7zZu16H!Jp{xw0RgpByf2YSEuxsm~Xw3gd-L}5~SRfvkf~Bi!nr)BEK^qaFaPj
zfn_jS88N{o0jIUZm1MUJGkMYOr-A{ef(+3NT(z;a?S6wVT$MpjeoSJ8$h5@5alH#5
z$f2Bq6d?!*VY;zsc22VyB-}^_P>6;QgNVtDuf?-a{;770=Alh~qCgp_*Z_I36P#>^
z*BJ&^{T?8Xh{`ti(4#;F5Zm}RyJEcq5>Tu|J|3voXa5X8e~f2m;bP<{ctmEm3`eKY
zM$i~wQ3S*3xjv=L$F|T=%<PlfGrh?<EC5Hb6~bfc1?Uc+Si@;8?lkHpb2a><qF%7N
za~eG&-nAz_lECtd1sFdtht%p}rgJq=BZfL!SZ`<#XFg2bc{n_c$;_p{Wl$?fHImkS
z_7P96Dr2kZWWmYNtt^D8e_POZVw#{Q{3Bu|UM^Us*lw}6uX}B59l3g}C4xlE5;!T}
z>d<7|0r*SlPAq<Xwx3#m^6Y5dm0ikR84x;tKD-+RVMF(ZAyFjoFfJwIO4tlavfVYO
zXs%IMFR0kcnJ3yR(F-H35+8WmN^3@|tsXs+C#*Jbjc!g2A{(F)@ANH`)dW%$X%_qj
zn9sEK+;Qt)H^ykdOxN^#_zVyqr`~~|b8p3O>DCx8ix=KF;;+p2>?@?EAZ@!C|EAra
zl-n#<*3J-x&?J(3@Ee@#C@ZGdpFUNc$&^Op_ziorv!%WH?e5N-|M`ir_x9BBKDP^J
zZE;tNu58_?SwZj6`clhYcE3qG#-#M7$1uRWE2%_;?P(}Ak5=V+EW1=c2wnk`cXg#D
zg?v0yK%v2Il9xw4Qsw2nw+1u2&tgv0a5cVtLm=sRg+Wa>+6g;et{b@&B%GGU53^jY
zQ4<hRuBq8`%qY;mzX(Cbno{9kltfG5#8~vlcG|b2ks7WOe^D`#D`8DQY?R}3!l8>v
zVS+-%Is+|%deOwN7Zr!CAIyA{4JWPKt7II~0nb*}eds19Q26ZFk1d}qLUS47c}4Wl
z?YOt&6gM5yO0_bs$(_;tYCMP`=JwRBT-gN0Wk=lGHXmpG?ItD1%!-fvIIE!Q{xCE)
z%AUMY5AVW;WmhcZQx(O7XLyAsflR6@rQ(HPs>P$o<j29?q`0Ee%X}L!poUrSnMdU6
zWU{rx<w_!osiks~>hqWp9Ve62;$2`h-#yxH5gFdTPJ#J)!op&}MY0kp8VElSAzO9Y
zx*`}a7qx;x7bdIFtL9;f_$7>@C}m&D0WCtYT#$x~-@Qs}o8&!7Waqq+p0;~<5`AUV
z`D%r$nu#@ZRAuZfe2tgj4)*#oy&7q6D%5Z-eHJzIJhV#kgfPB$|9lq%PsNOb3#lCW
zNyne;b@hgJ@wE8y*Tjl!dsJm*V^k!?S1Mk~MLZHID=TiNIR3$Q-`ta?DLpwr1slI_
z*ueq4Kp`XZrY&%XuZZsG<}4kw*T}XsCdLQ9vyP!s`omZ0nSa0eTTotC%~H~3{Ze^h
zQ)T5HQbw(;2<~zt8~(Gp?47!8yI=LJ(mJL<>0Wo;;0LZZjSV9z%gRz>&-El@l<y=_
z&%{Fh@paJtKDA>rbzCEu`u^YY!LQzfHD`Ztobpc}`agHcpB`juV!+1oA9|3|jqL&h
z;%9cxJ_~7LqmGZVAp^AdLL)*L)a-DIIkwVyYg1nn$%cfQ%=-@KhD3^s(5~Fw!&Zmu
z4PcEj04cM~qu?!GgHl#@8&~#WAJc~cddGsgrW&x@q1r=PXSc3i+$gc9{HxUo3Ib4;
z*IuL&AsllNfI<ydl^ch)qzB1D%p-8w8wj{1lmM<)0j+QVRn#zpb>>O72ZaGp&Uy-3
z!f1miRA}BRB12o+q*2_MaUm;8$~$Tq*oE&s4J+&oiFnjU&X}J3shReiEEOfu8j4=>
z+E%Y-_#<SlgWu51cGF<hrCS2+$sk%NN#F1{(fO)yvKlPJRN*l~ia0%@KNP^TV3b}j
zCx-y}YZFRDcpN^T@*#$^q^%MMrl|5a>$10^#A9*usiC=inME>eOziPyfaaur(O;O)
zG$laFG^1^gY5t39ik_7@-i6?q%2`J}Gz*!eTJIvZDxCi4A@8q7N98A+WmNUGf5057
zYJrqzA5IuhBx{u>-D|3M(14j@*V2>M)9M8r!^S==$$=C=aINA%*u)s$kJmG?+uN^T
z87S(MWErn;`jZs~rl7fUq(>|?TdFr2jFja_*?dTX{4-?J=*Tv*yQOt65Nk$Y?u}@N
zGi1JJZ-krxNiP`5fs5+K^W&{6UDdzZOP+h#llK{CS5iEy27Xz%fe(G<Z?w?zktuHU
zeD>Kvs7z>#wsjpmYoHPEz4dQ&@r`fKy04x{*D6=kPJ=4FgNcLF4dt>BzZrp+CqHfK
zIC!LY^||r7{V+d;--H(N*iU@I_jUe=h99Avp6uMcoRB$x*1aBfYy@Yia{q0|(ETuN
z#Tj(_2;#Nr5oN4?am#ES3U71z!*7pu=(kFT#>E&y?7#AN=frkEi_o5p^Ix8X^;c&`
zvm4;;4-6wNfo%eBEvBD9<Wt4oOCH872At(7_wYBUtphr*sPF%V*w9)*%U8jHfI<;~
zfC&DNs~#u)|FGgQPT7du5Jer{`Ba0|g6<ewu6Qq!fF?T3LtKx4EJ{Rn!WvrlpfeoX
zf+PF(EV?m`PFzF?<Vklt*6z7Ey<QvUVYY2QI8k~xXUF89X&?ZZk(<2Xw)Ej$9|%Rb
znY1mr-c}8C_r`bGD%(k4dGB)Phk88jy1F_e(6SX1NvL+UHb&^GntGGpNWfCHc<y9c
zSvX!g+FhDjPUUZJaHr(U5Mobtw58x3sJ@a}xUQ;`OX7tu=1nd4<hb70m)Ce$h3BT~
zDQ%-HiwHa$&%;E(IJi4Fkyv^)<)Sja@$q?hPC>9e>FVar5w&*SKqzVEL9k{Y&yi-7
zcIeROc;?^U;^pJB>6i=c-m&diDB%ve23%XY4h;D4__VBft>Bk`wlyCc^DkPrY<)Ja
zWg>XLpD_#<tfNsFPPm-%!*7iYyzR{p%6>7`O!nX~e|47BcjK*aq^W92TcSu?<~7|t
zY0Fs3Z%#99Kk_4#G%bf~Q+zmR3SF_!Yk4+EQ)1DlFDtez#Y=Fmh%35^9?>ooE__RB
z7O2121zyuW;hu83G>fc~c&pAh1Ki)x&zd(acE(Wa>Bb7>R8{VYW<TqkjJZ(ArwPt#
zHE}fJCj@gaEqdlPjbuf)G3rMsB<D3L@$;_BjDyvtn5a~V%251C4Ts9(L&Gm0l`z;f
z;>9hiaVllioi5rI9ry21&U%uf=sOH)7t@tc>WSe@(xmI|NzWWhNSV#=oE*v1hKJe(
zAQ{Oh=C5d|;ga&)RG(-Mq{s^ti<VNPsooH2NU_#5hAmnWpNP`(lABEGITM=vD_XQ)
z4(kh*6BV;$oBl|p6b0a<D6Pp$DaGt~0O}-dt7zp?K2CK?agg86C0xrhn5&@PoS#$|
zVD7t@JCrq%xBkw-7*S;!8#qn8tFyU@Ta=I+-p_Jj<&0ADGsX|f+;>0oo<-|aGG{et
z(rh6fWOSB~#vh`ntrYF66M-U+wkY0n>QsrlRl^gT!#P#QXCb*Lb`ZjTwPHV=(Pfo7
znSv}M;_y<`6FbxalKK+Q30=9e{KI#lmWQwLr{|bgg=C$4$tIYq+A0G5UKJJUx&IpF
zg&lcJ7q!^EkiPa>FJ`-VwaaJ{U#Y7V#L-q8OZcl15^6RQ1m4LO11bF$y8o?XF;&KO
ze_;gD1#?DFm8>oyRiG{wPc@wVe!s7kjeTZrKsC42!Xxq-kEQOHUQ%(UF-zg_B>3s4
zw|I(ees&v)0O)>XcQ0f=vs)zsBm<)6ZC{1r^*TdGZezCtR;2L5V|)7Hh(Ue(K#bVz
zctHVdG^lcCVFqW+<u+ry&I0&n;5E8j#Bcx&_WrC$*h;~y0nerK^HRcB9;dpHi&L3@
z`0$+!l66i3XRnB~Ei@qy&LCce+^5U)`Ydj0K~h-*O0_&nFqrZjShcBTpkM_pdbSp6
z9th}_d$?W@u~IOUN^y+k+;8n)`W&rbAvCHBzf!e1JA?CjG2|1%p`A>t1NfQLZ1oT>
zE%%_v5zhkX&eo8&OgBb{p>6lp-Le%Xqkx+pAhZ2k_ee}|Z_!DCc%fYp9973St9BtA
zVH=1zG`W2N9Kw&g7PA^Oo6s>3k^GDFTcU$$%c+FDZXenv@>xJR=V;`N+zeZ*?&NKw
z3|otC;A{-uijeW9*b*sNiDihJxeud+%hj(m&fd@mj7I_Az)Agu1B?AZt$L##x}iCJ
zx>pQnA@^1Gbs=}DQmN;uy>yQFGkPD$>`b-k;c0Yf`e}`N_`Y>A>8aw99uhQ_<FJ!P
zb(8NH*@Q2PzqSOr0=I5E9w@Y@IHVPB%|S$!$`%s`@QzC&+#Q~d`jkgMh9^0EhQdnl
zhiyA9GT@9B@rQ5vwH*1c<$N>l7OvXy%EmqQH6P}q23h%de0?1E0ItW`%r6gV?{`t$
zL_^VSU*}p^K1RK2#X6Shz9S1}qK@82yxuq9axH2FyzKN}uH`&y`!_W$Jyz;HR{y(r
z{7usSZvF>eh5c-z`;YL-@IS+=D`g$a4F**2mzq{1hRnq$u~V*g+CasB465yO*F}ld
z9QDZNN~9!XvO;IRJ4se0Z`2p~kj%q%PS?C#FWV>-fj|&;#p6ZC%qB$KobIk1(hY{M
z)0AFxWu4vKezuyQg@gU(#%c59AxcEM<7Akv`61`&=#0pm)iAQ9ERBAW=*odQ1xRpU
zc^j8a{#`z>b_LX_CsKdM1&vD&>Y{K`9R&RO5H&S-k;Bqc0#4%P|1ZYgDY_PRT@sFM
z+qP}nwzXm>E4FRh$%<{;wy|P6>6||QKf2EzV}H9Z=ItEws%E`aPgQByPw;q1FC@h2
z1Z1q@1UkXcr^Y~`)6FO9dhv1hbn;z4MOCoWqi$+UktZKP-LoDpA2I%tz9*DKixjP@
z1v3_@dZ4jPNNCPVTWjmRA%WPomlRP|cv%f0&ww$0I>S8O8}3pN8LUDF3BOJ|XGt|R
zB}@e^8*f*q3fD_Pdr!kwsi?pVJSc?xDf&ZBqdx5alA%atUSZtvnGwOSn(kZO<XSGD
zzu#0hMYWJhqVp>Uouuv;koAVgT8FH71BHg7`SS^YQ_20qvEI(mkihCQVl#|>4MDeZ
zVQ&}a9sFGH+K26dg;K!gw&C<U!UEG3UeZ=ELm7ONqNtIUWoe?l5_f0q^!6f%MM}-$
zQt2t*5&dwi%9s!B%6fdBH+NZc4v)sOh&g=SQp80~5Z6Y`BMg$L4!SDgXp=##HQ4qs
ztJljLTj*1$Fuz?{G5=7HXpucNg`MQJqI=39UDBJ@3a`Gb0bvLC*6t0`yc@=%jj)bU
zg&;Yh>?d(<f(p571-a}iqsl>RU!!B>2HnZ2MrN7TwPL}YJBW78>%C89CpH#?GI|4a
zBw-{i7SS$w&%~5Z)Ae7;yf#%~%qpWteS-Kt1S8d(T&@WFzC-!Ot3-Ew9UDI*a#z5k
zZ#QW3p%0(T+gYC=D!ZXCJuY7k=T#o&jm8zcYFd~foz{#jdu$(2!msApZ}~3S=URI{
zy!Wk&o9lhvq7J0ueabi3|5FmHe|DV<{*jb*k^f(0Wn&}be}0Wzs{Q0m*${s6rVbN+
zLasF0Nf`z<dLcxkp+<u2B%ewkHoFpy)uQ<z;jSpoV|F{Zl9Y`k)MvGZs|vvJBHI&A
zod>+BXBGg&9Fh(1JbE;wwd{6JIy=ViHx6TaD^Zb=k<2f&^1dheL2lG-GWSM6*9jog
zV|ji~dN*EEg^*lC`sNO!qJ6{~;bA8PwCv$%{=%8uVh-jUfG<fkyRNSAM9H;O9Ix>c
zt$rR^_PeH|%#d|{3|&(R?qou6Zgo0TC&SSWNYfxiD~=)K%qlZiW2kfz%ADN4eI4KS
z_8Zr!=T&323tHnmyt)z`BAz%WN!DnKCnH)G&bGF;NQRhEM42S-hg7g-ryR(nJu>s&
zoEcsi(G2S&IB>8YE%DwGk8TqUz}agOSY*g1vil6OhY_=KU)1+p+=oQdcFgA?l@$%p
zL=fpgN*Hyf9WjQCHaDfz9bqJ?(Bkat;wEkZ+I<ecQWxYI+9|c@_8&2j3Ht=#!S$14
zv*;P{H9EC)e<qIIjXmoF^;lt|9&Uz)6-wGlb7YBeIdRfYn;Jpg&wTkXC=_|XOCylG
zm(5{62lI_77WV{C_!^!LSX;$!78ZtaCN4=lkq<cefMT~Bn;oojg^GJatim*eMb>YQ
zB*a&d>ZAs>3Z$=@OF}0%h|EM_si|CDVo8RalvxV%DH>_tc9KYaPSgJGH4MaI3O5hM
zvBKi#-0_vteA|QAs%wd6t7i*!uGU6^zT}L#lF{zmuFu!XoPUDvLL%9A=$6rPw+FvH
z<l3d=L_9nz>emr{-5K?vC;N5RTcAF{nr>-vy&>wH_(K-Cl%zIKeKYp;ui+4QPP)|g
z>B~|sNy-<iy~h=A@d78J1r~Oyov?&5Dq_eWhiCg{E1~dc+;<zLOnI<J3@^7HKQHl=
zAmYXfvXD`fcYog?iecuMCb5EBlhRp!&67Oc()V_{Mz0UbXkv{j%9@knPBF%WP<Vmr
zagO97Ho!9KEgl#fyqlAGud5H)7w=qCul|)D1C0Q##yU93S(~QlkJ@)XG8o=Gupl$X
z=z$cxUF!4S;!3c;G3a<P!5B2ggjwnz3I4+4OmFGn#$glk8V?H^5H=8g3FM=k<~=8}
z1W<eTqTz)_K=6CU0jLD@g5Gt3?)~G<mm&k~4$_+geDlk%7YITN;Aj7(?jh8r`@s!g
zKmqtd6QHW1h>CDN<J^d_jya>V#8hZP>w7`(#LKl|?fPd!x;Qrf6XyM<xf@Sy&Gjrt
zry|J1l)-LNw<1;TrkUa;8EB&bK?TZ3d#~>%+*33H+iHyr5(XC;kW{t!52<-d)|KIw
zef)mLWz45J4!CZN&3c7cuiN??x5b26)n{Hol^r=V6;84=G7=p_P}lad^X0H>^{}g|
zaffYb6W~2++A*9CfyS&fOO32@ji@p`pfS`%6PPi`@$-Diuf&>P@mJElJfJ0#(C8{-
z+l0I8#Dh&@66C8r;y(U+PHu@g?J-X(9A532UM;G*>ES1~NT+JvGf@U^iSZo|-wT7U
z<o^@lN+W=n<$v<<TR#Z*9~ptZwVkmwoy9-d5=*Jt|HTMKcJ3+RXhAsLs8fqmQKU`>
z2pS77Ckz;LM8kPeI9JCL>Rofa#bdTw8yirJPD{{V9UmGVQ=Pw*I@J8Jq6UtPQ6{}X
zuf`;MB)P8uuDs#crRlD($ZklXeC<ni9g9C0BDC!(K{o$_F>c<aiSxfU1`|wWfJ9BC
z$s3ZE@&F|dgk4e-yzMDsxgRzHbcaxDxW^I*gI1>fin$BKF!SH-Wsjmq1wqni)rja#
zj2hrl@Bxx%qzv*v>IXkEtPS0p5RdN1#!c@f%N<c)aZ_Jw;Ls73$ONm42nbDv60*kk
zFLmbDFE{mCxBatnt`_DUW;_Q~=<$1_EZep8s4}?s#<ke7>YWEzO!NqY9%$^5)ev@1
zKr74-k&qe_+$o$WTwxkli8zS!vHgI=5cWmQzX$bJW%1(!CnPa&y(4g7ePMgBTxFfL
zwY#k+fQ+HnaB%=j0__$w6)Mw%k;cI`k4>vN+lq-kbFsY*RuFsMUmx^)@Gr54+KpZ-
zv7mT%K^#UY^1Xjr_u<|JZcaenHJnjHIF|_(iZ|V!*L;@S(x!twOH`IWD7blW`~th<
zbb<kJNhn4Oh(~*dasba_fH86Gufw#%v2iEC$$M!e#H6k&uuigqK37Q+ZHL0G9fqAq
z93hDet1K&X=1k7uUu|)Y4*nHM0)32B{sjx;DMs143XM9hecb6Q$_X~MhM{JuyvpKi
zy4&aE-b;#^AVvk3gDsN8Wb3v<t0aj=T1ZyX=co&tpU&qQmcLKMrW$#jon%?Gx9W`~
z*j%M0OT@D2@L%~e8{lY%G7U8%SUUodvNW|Trl^=W8j{)AhOP6Xqv^FRjGIjp*)%Cl
ziy^4)sX^_&WeexxN#9^#q#H5a6f!0(^eLuHp5`X|jW1XmYB7FKMZp=DYpPwiHZZx7
zq`c#XCm!^N=2*gWD|5Hediy|AJ+IE6JhS8XVA3BL#ED!qKcv$fT(=lkC~wA8ikU2w
zCr1Cc_n9?;>Wvk@4(YkI_CT02kI2tUn2Dgkw>^lUesB4*CbG`TGC*8d7_?NJ3*}`3
zSVCQN0nUR23aA5ftLmZySpr>@^j={bu=f$faY>%I=t5kO_4+_LXE%)hgL97gZ}lEy
z=l?d&|Eu)kKN{yzx=mh&KN6DBkAy_{PhV;5tZ(mV`~UHqf77Q?tp4BprbgdE8BxGd
zx5q@2fy4%I#R0e_M|V)F*##R!w1Bpm$uvwQ%X-vzC%dd=us+)mBuis|%W32U5AV!&
z!VeAR;8D0gH9z1$?;9m6uFraE(2LKXUh*UQ6$-2z>OjQR072AVv>B-;&14K0nk!6@
z0r`rVP!pgWLIbD*4Ec<*_Ov)1JHr)x_n9L&`5AynElx^|gX$0ojmN0>%DY*u7xd-U
z3fDpY1%^#07}FgtG4LhF??uhS;v)a`%|GwPpN6@1%$*}+T6~BbvlOxb^yfcdrzB$J
zG}o_mlwQS(cBXx6%4{Lr0ai&Yn?uvJNts<=j$EY@VyYwLHi90g*>4RUhB3EwA)VVf
zO1(D$gmEe#xRnIvXiJQSAzEDq#7j`GKX%@)Z-Yl-C9z-!a)*8L2gb-MFc;KqQQj5F
zSzv{!<Q?#@jPQEBPFoY`gG=Xw+VmQukc+HIw_N&z>pwIkM8#$kx~&F6Z(+0?Dy$Fi
zf$j5PA%Z+o0cq1K{P%uCXJ0r8XVUeK%k1<yd+jN0p}VpP1N*y-1_$5RFvNO}^vsP|
z0|#_^;CnI^ecXw|2+KprZPO63UIZmTFumV|GjYX$m>L!y94M2a=relhRo@qvzMMP^
zsxA#a-GSd*?sVbEimL~Xy_}!+V}3IQEGIyc6j@HAS{om6zUQX`WE2#Aaa?_>8dKhj
zr__)qM&tz%mhXF+Ypg(b$D3n6!;)Q4b*#{3V}}MqH&#2k%m(Mm%X_k12<Id(C>{j?
zc)$H|x@cw*gD$BvvL6GH?hN~$0s_xAj32B#Ij2Ywe0wg4ekREOR`wTi_UJYW528Sm
z?rPxOtnQE8{RLjL;veeJI?oKvG;9-*n2;X<yfzl!E=Gt%>6m^>l~>Qu)#~0T$(j8X
zeu4Ao1Jj)Wn`QDklU;fHkkGi}#0VO@IkzGOY6E&<KV!i+Pjkeg*o8eoX-RL`f+(%K
z#8WPX5Ur=xo_;|Y&FiR15~aBg#vZVJl1`%Cn0Q^Q(uzScTg;m<PLx^->;EK(CPZ}R
z1EDqt+WgTVXAro})*X78En~-!AL-AWBO5>L@5DP|cG`L$@AM?|Y@jqFE;o5E46(8>
zv#|C@`Ps~wb!25jqWpz!KiZFb5sB=@ad7OykzEUgUOym6Gnzj}99>o*4ME@j;uYLs
zc;RA;4FVnWJ`~aQWu*&0y2RzLV@A5wII_vN;oNi#WDKl+S+#Cab_iTTWZP6ttuIk>
zSq6upXlC`ANkd+yakXg*-Hq@zhg137EM60WXG6lwWng5f%2_r(-NR%cuxu@#m7cB2
zRfl+?HLLtgVM^BdGJ{EYf5Q7>TULQ^R{CWC4Z{@9FX%&ge+G7~ehy!-V)V|C#Lb37
za%l#19>t_^Av=WU5`FSt)CzhpG<v*Z-;F7Hdzkg_1<HrPe>4}w@wba&_O+vHrR?4z
zJI@1`I<D7#woz1VDSVh6kXe=wU}6r@T%wCtfX0i6J5dY$p8Ta!>xR*58zjD?J9IK(
z6E+fs%By)Pd3wH00Il5c+n+9AncCIe#qxU(uLz3K*1Xl++fN>zHi1NG(%Q}wo|*a?
zlpZe`RPXn{+CwXVQ;%h~GitUR{*J$WSM*w2p&yiSEKh*(V$S5cSei3@Tuk%LhufHc
zu1DXjOhIS5vi)@f8(Vhg9Y9<6Q4}V(fI1tY^!W{b*CDML;cSYUjuMbhau+~*a}qx^
z*Xag_v#kbka`VRe$L?((rXugwKssHOHW8hQ;_qvtvnqIv;~!6yat`S{LK}Br?{`T3
zsUC5u;c>J(i;sWlV{Trf;FtQrZkGQC>~=N#|F1Rv4R%-mVE6t{z;F6bTG2ctgn#d&
z+=_jX&|n(@VnD4Rx@z*#D)jbp740>b|I^(L_q!1Th@&7Cel0Ke`$Z=YvoU)GX_*kc
zoEl|zD3BKV)XZ)W$Q5$G^>2VemaoVcp!Rf#gQS&wY*B`kcAVj$#D{PYm%%s&;J?Vj
zk^q>{5>N#I$Y-P!(tG8KJk^VUc>6GD+fW)b1P3DfVR4RWb726QZzPBUm@l_P;bkLU
zKr<>qP@BCN2s_3I{7~@8yejf)NKp7iB|z8@zn5p59Wi4YQ09QfMWyhW1&udz1IQ1%
z6~cn_*|272W*#xTcX=vC&N}niS);fg6=;Z5?2@E<6pqC;1$HZgjPE_&RZ*~_Lg)|s
ze{o7K07J`<eFYztM(#Ajb3O)R5BaFT%S)5iNl6Hp31~C}#878Vr<2zwwK|TW-q=Cj
zm_PTxc1)XCw@nX>I)*;S{L+SV-tE-fD4lH>jyZq0rr9{#j()1(FrIL<>v*y`1HHi8
zx1nv3E)Fr8Ac5rZr!@1yG3Yf2=@WO+z=o11DQ5orn~61=(~v~9g}`W6Gr*a^AEds7
z`1xx6lJloPA6+LeBi0ga+(DmaOD0=&+d>F+h_wjvKnSzk#7nyjBsl?2Ww^*t!j}Ib
zZX@!LG4pfI`g3i&K}*(3VF+pVSJoHtLG%owq1IwqPC2y}{wyb|9!m8zEYKbK{ry88
zkU$$`EVUpN11V)HV4N-Q+4~b7D|c*OV0y^qps|^E0u-(~${c8)J8c5dG<xs=b(|p#
z|2Nd{WUaP&f*fs`B5D_mc(=cK1y|Q?bmWL^iFaa^N)O1jA$8&sW*t&TNbOIx+ZXwL
zm+DrMQbpu##}uU8p7eRd6|7IIaOO-2C+a5Q!NMA#p8Z--H1tu_Bio5PH7(s~nIY}-
zm`RUcP296*011}%-&0K?(=UdVWmKN*UrGV52KIA&aONz{Ca-;=@bgzkuc)xRcv4$?
zCJd|Ke?%aUb?#Mj)n%ur6^ddujp8-k8}^&b7LD{9r+(Qk5|m?fx2)FidpcZRhSLoG
z;u^_rhfY%6vm{nTpPuqQ%2U3ETX!>A$S{3LOe{CvCx30AQ*H<oS=H4~y@ZZ~NN)lB
zJ&-OG(u_wk$EMe1Hc%5Sao-}dIDri<UD6}q8$#@|pxZ?rE4FPMRG#LsY6n0L$F>QS
zyp+$MpD@U}02Z5dfRi(al3DD(W{Nd`Xsns(h6BuZCHo=Ib|A=#oHNiV2;VLUfTxWL
z^%3`pO?D1fxA(&BWziMdiKVXgV2DN8wC-BT1!04id5NSX7$d;EslzIxend>RJ>3X0
z1$)3xbf8E<{pL*MK<TzLfhCAeg7xtd@APO_KTa7k-vm9vGPmFTUHl8}xA06~1qJb7
zbY`fHRrEVMJZm_&T7PGH3p~PuDfd80U%#X{DDK|H*XL|DTP&{|QzLod+~;atjZ@O|
zI>L}sDp-UCdA1Op3^!GXvmn|R5v6VArS+<}S|G9^eT<7lNxARk_Tyzo%|eIwALes^
zVD(|7gh8LOZ4;gGO;G;jxXf@o*VnM$14u4&O||84sqrU{`SfLvTVh<X!571QUw9m<
zLu=+LrxmHcfBl8P^Q@N7ok-SchV(hIxye@Fd6ZH54t+NAT^vT)9*}igeC+=90BfqJ
za;n;D<5cRY`ZZ21o-p_Vh5mBeM1XK$u2BI#M=D49QHx@TWqz;Vy+4H6-GfYc_~6M}
zl|-B1EN<G)pXCZZ+V+SYgClwRek9l9WKO9_$lQ#LwJX}Z^!+a$ZP!+e&)ART-tvzZ
z4L_XyhhV$2GH|*w|1-y4Qt7kJ6hP>@M<sRyjKmsIqi#}!r*lQAjKRg!Dz>6-^mkcB
zyDr!oia|Zv;f7uv4&OZ1lB?yu-=555fBE6d2w_IlYu+XKJKVnDieiR(3V0#Pt?~Ql
zvMeyt*^uS!KYKJ9X&Ru=6=gaLjgc5&X5&cXsIvKol*xJ83?AN~F`SK=0vne=UdW_X
zqiC(O3RG71&ci4)nsWYpB#pDZ93)1nhfy~{{UK*nKz0ULaY6P7ZW#s)eK$tG@@@u1
z)C?9R8FGRTw$hP`MH-VRY1eei(|f%jMKU{O&V{^hK7Xh+>S~~phx+L69=W?r*Y<S1
zBaAEUWlZf7XUKc(B8bvkYdr9H7cdp6!Nx#{TGApSH%?ib^QgNdT3IytJ0?*{B-|6C
zv5s^bO)2ClBnc*>{DC(rIuPXm?(kiyfy<5U_dkK|Uf4q`2d7qi0n-ut_Db-}0mZYL
ziJMJ$w7ud=x>DVLptxlx`s>W~OO!XdYIB}+TuS~ns5`N$3pzt*i}1TEm@kSFD=G^q
z_c3H;kA$!tJ0IXEGRFX4O>n>zxN|`gpU@W>vcT|-+)IN8>J~9p?0s}rtQDRtn84vG
zTKyRo7k2DYHXT7hN21T>g<`oSTLyjyZ{cNNHEyG2oT=RZgwsLHIaVo9br>u;eeBHz
z--88Fv1&GfoI@d!Y^4e-;#n)mW?cu1E{QUilkCJB)Id}#?uPg27cYwx>(4mwQ@R}T
zm(H&aXLDkZ&XdVRjUDp|S~D>*fR>b%0=*XeV_UoY$1||`BQ^4Nb*r)|DQP+WGELEU
zzvMJica^cfh~H6@pLer4Er%JuI~Ebmb^~wbes`=v4yp+BOZ(97Uf5zPh=NCeaJvy+
z9#ZvMm{iqtUy`LehE$j9w{!=6hWp&CVK^@b&D!~(`?iT`om%8~&TF~<^Vf_ezplo=
zo-+7grX<Gxa2eB|eTo0{4*fq@KmUfy45^>ntxF($PwO+LCTc~w7q3Jvl5vJ3l}1Pb
zV4mu_aA^+f8T=V;?v$o*d+_Z^-)gG!2>R87Qf`@+Jz}?=s8$WcdOAEtc61*cq<%R;
zjX{qAgM=0>#*0yMyEB<Ot2ri`6+!0QkASm}y35cvPmac-2wr~XkSiJhS{nhB5<pW1
z`G~9%?rw-dUq$w_DF7;M2dqeANQ!Y54^3w<EDUxLIfDer1H`XKM)*vW+m|sBtYo{0
zLE4Qj$dio6^m{bNS_0LFP_DS@dA8}Dn7c6CJ-MLS4?6wsOzIBfNco0jjJ8N-a6|1^
zmma(EgJ4)KX6bzjniZy726P)t{Ll64$0RYo4k(PRQ1_t{3wjT#g$Ypxa<u@9r*=0D
zv$=Ch2{~R)LVX3ae!JmC=+uyC@w`%7tFaFbLq1QoXMk=O7%WgT&$<ze3CxB&X-g8%
zslebe=0JvVL@7)IQo(#GpgZCha=;AnqzzrDX@KQ;+5s!C96OgUOao#FjZMF96;o!>
zEwXqK-q$deR2{iuZ`xqep@9}EA@7)XKg4O8*frRAeg(cb&=@p*Fjnke4J)uzvL%H`
z)z=oF7sL<zW2M_5ngDI4;2sqZ6WvO4rPxi0g`H=Xy#;4h;kK`$m5v&VcubY(c5Mso
zyvy0pRj2K!G^REwVvAqn>ea%TB6@}8pnqti*63H(Dx0}5jH+WiYvhDfrA<c>#fHml
z(DI!}G&q*7R=eD8M>?iQhflZGw)(Pl!8aUqM!YW`JOgWf?|7Wb;%uxF=8UB2q43A7
zesMUv=ynOq<idt<sXPmrD;g!anf4YPmEg3P_Yn<IF6a#M+fM`9E*Ugtj4uwfCA$j>
zpt5aAT!d(1(X0OS!_p>W)%`(d!DYbpWy6Ac)JIuPZK018z>YSm#t<eu=Yo41I^;1H
zv#>+uoj9Q}odlVtl4PO#LtW;&h${^1+qxP@*T?$UgML7s0)?aDLh&SwG2>zIa?W`d
z7>kAGlq$-!)#{k2ka*E;AZ=)FFi0xVZL%6UamZ;3`hF2P2pC*D_zj>KM?As<1H^2k
z30$cGkt<|Pq|_AiL^U0vbZ>b?T7pGFiuTtBMOkwEm&%%Fb0LKI&ev9#8(3@!%M4qx
z<ju6JUP(qV*tGZa->D^PgjP#S*e+YWfEzXrU593VIWgl?_~BL<<n=)-Zlk4xSsVRD
zKz8(c(~L!=sQzd;!FC~^hyqG<E%2P6;O8J|e?xXK>tW)i-eh;`*g^TjGJ|>61e6TV
zlHs?M-7>P0R7qbJOgQlA)ov&L_32Z?S^kw#F2S^xKvo4R7kB@~{xZg&y!n)3p6|!H
z&;8WB8NZ&*k`~YGtq_6BL6B+otYXy`vmE}@3j7m~n`h|7?5&-vlP}JP1pSgP3+Jqv
zVQSa@xLAzJ?@yw!>=0}&1i3QW%Yf`(;DqCz47mgAGG9wnQ8k^06NS3c7v1=@1N&G)
zK14V>+T2wpvhi^}og*w?f7Wo<8B6hCsqp@4D>*^&fSvu_{OjGgG?6Y23D;<Imu@5T
z)>3pVc&wDlu`5vJl?$m@+QNpYayeU&>%lV^wRo0tGM9*c2N3JGsLd4an`lthDS=xK
zTMWJeAWcjkRKeF+C8LL1&`8pLu)X`)$EK#j!_NA2hec;V&o2T&v|;lbTV`w)U-q4w
z>bJc-i}cuPWYh*%8~9w3Poc5xOW#+K4gPl9dP4*F&s^l75RR)Dan>XJXKeQNK=y{i
zwmjbD*NZ)K3cLxE-rd{rQ+noYnRk=ZX)*Wd&I!Qmnp1Q60`taO9|(DG48GiUegsvp
z@Utgku}e|YbA3GLlQ-k1ZLXCjnOkv{!J^>O0i5=w^LT^N+N;ZS1z|<u6aW8o9KHgX
zkWGF<5Y<1Qe;?KPAw>U@gZMXC|IaxH?cl?N7ZPUVE)xXerZR~B(J}c@hPy;*f~bIx
ztjR+u0`3rLKy&~~>hZub`VdPHru{@|DuS%~Mk$EG{>9$<Ne%jR=zn2!@~J0)JU?-!
zB|HECqW>V7{$Ga4zxn-5nm@xwt%yIKu>aW9gNS$vEvIWDha`DZ_AoE`lZI5r`Qv#0
zXmS{|Xe|JRChv~#^;N*1`lMC4j4=`-K%Ui9@OPjqTf1-@hpPJGl!euZKD}=P@NZ6(
zLX1ICurqsiI=ZGeSRrb?6E?N=hrx3aMD@nrFlvUp6NE>Eu-a);h;o04LrV~?RWO<T
z5Rp(lJ}NT4J5QmHDn~}>6e3l%LokSu;rXBGL4jTuh;&pY)cg$7aF}_7L80}uKIk+c
z5*VfYVYc2eK)IO|kYIS0#J=g782KG|`H7!HHmo@!%c_)vO{w7XCJ379$m*%d`>m}Z
zqdDcWKt@UVv$GoQM(whN$V-~Ovkq--{!td0JBUGO<3b3st{2q<UBEi*^~Y<&oND}5
zzSZB&9wyyAK9eBG3~Uhm3pdMj+$Yg$%npyoFE?v@yKM@ZH@P^22#qjEulivjBZcUn
zdUiM0Uwd-jOYs7Qho?_F8_E!)LCf;976q)|@Qg_dC<Vr|YH}tR8W>}kl8h764o`@g
zXW;%N@swe1fB0X+PT*(0JgBgI;o#w(;BDo(`LUai*-}%Xx}k-tqiUrrAczo);x#NR
z0Y7aFq1NLLlxv}j`LCl=Ir3QM8`WR_tTN)J$*r>LQ7V)g>$!4e^RQOo`Fmu`oqpCo
zSDtja6Xtlb@9S&tL;Eh*Tpd_pJ#^Z>yd3pbf-(d)8n+t?`yo7gY8nSQ<RKOrcdGxf
zf9Jo{l_%4CjuZ-N-O&O;>m%GmBEc+r&n`+aDI|b|n&<yO6HIt7W73GNtr+iKakjcc
z>B>;4AOXtGC}fAreL0P{xf?qe!Si_7y@>=OVaHbI^LX1${td6&#_xVQ-j^6!bHTqV
zwC|5*)o^DSnS4|Q+sM_5%-92TcPO{{fi=4A2C#<j1s>Ozcn#p#g8Ypd*Ma*+A21tq
zx2a4;aTjMnLZoO)1obFtR>%?}dEvI5f_I!oR10=fP2q!ki$IhkJFX4{jZCFN@$ALZ
zg_Wb*`ON>+QDX$DDzy~4_ZMhhL6ib)x=0qXoV0Uwn0E^fEV1$$M9N^HrjlEZgd`r(
zSYokYGd+?dStz0@J);&QvqgS!F;!6-=(&Ot<hzA-n;KfT4xpk=!n-2fglnoeToI@P
zpf`iM7`GQn8>?f26XS?d!5T+HDVUtHF4Sd1y9q!A2{f-C&NSL2>C2+-st^d6^)LTB
z^YCzzlc&;doE({&2NI+n4_F8c0w?@IPNwRq4oIR_S)og_-+43jO<S|jZ(E$SRrrLn
zcE*n`OABoL_3hy{S-adyO2^^9#kCVKQm^4irzm(gmVQB%cojq6VS<6ggqY_3C215i
z{T)D_3po(yg|n#WBLmWnC4vPQULe>{<6AEh_Wsg9cd=H`e<AHvb5;|yB>m{1s)99#
zzp{*zG3G3(k1Y1k3Y~jr;n~=or`2|FZ9W|a&0n%v2uUR40>-0zIR%ICE)dB)h|m}v
z;kxL_rA>(HVp;S#ck;VxW;puwj*Y7}hs-rn3bK7VALxC#J~ge)Uz+EiXg$*(CT(do
z9H^^_q#C`nyRF}zVVlv?L$X8Ya|*f0#DUmd^G&gv6I!0)D>GSobpePLs>BP+H9nhf
zBHUyLQR90;A{NvIw<^hwWyn_f0l;Ws46Y7^OZqV~g@ZW|d|apL4pLcAkjNH$?CDcC
zbOPPZ!<a+l!M9S&`76hqqvjCh8w+6w&hGpQ(0PgRT)i%J@&gx5{KaHbiIh*%Nat)r
z5KG9=9VcL4gI12$$gL-{ykoIurkAd!Zcjh<?Y``t9bEqI*Vai5bX^8EGX{WsqMhI1
z0)VMQhXr58OOu(@Kr*>L`n8#bJI>vnCa%)?ytGy^t25ojKn)^G_#tl9nP4!{lQsbD
z2+mO{_RFvclmd+adtItB!S%HduA3M~lA$~bEt3$fLFPJA{1y^{(m9R^<jgBbPXIF&
z<g7IoD{miEE~!Ur!0`^3Jo*g1zke@~m`KGO;^4B&sC5Qe@bGorM|NUC$cTk90#~D@
zYXKUoa^|LTD}x%tv8K}dc6Qz01?o<TcRe$H=sk=c1B?b<C$0_AF*Y?W#V|HdI=-v{
zSPMXv#@|tRg6T`ESuHG;BtSMva7w(c6s;-uuFeXkY`IR1vWa!U{-F0&hpKWgM+Az@
za-=_rp_tj-*^!`azmq(PlghgfC}mYcG$j@OTR`ZHaF<WsE7my#6`a=(5Q`Jjoa9vS
z%7Ja}%5#EGPN$s^Hd{2-g0*njVkM^n{cHsm&#Go^p`vm3<x1MS-bg$7{j(SBu@X1h
z^Kqk|n&B~?y(pH<kXLgI4;Q;5dTJM+5<st5FCnM^i6K*N(|ZsAdY!Q=zra^?ml4Yn
ze2W(xZgl%I24f?+U|{t6SGD~aCmt<KvZgSSAv!c3PSM~cgE<ZPazv%KfxqDIaMHcR
zpH4;;l{|lk5N{SP{0N5lO^eQVhQrem|Lbs0N?Ie+JX&?=Cq?v$2`0{3XOWtEzp5*n
z@=_?6sxg#P=xNi+7>lKMy1Av8mr>2KX{jaNI~Ai{i{oN2S(7dCsfkBWyIL686!EZ-
zi-R~>A5v;@ui4dJ((*Xa-l600tO7-iq$BKfFv*bv8R^VP0*Nu)Nz-});Ed=f=e4#2
zqQUjrzDxY>vS|B))kx9O-Z8(Hl=7^jhWhGBl@xLu>-ayTS(_jSAYYCXEMm8NgqP^^
zRs7uZFJ2z8jpsjjI*tX1XeJ(rY_8hP9e&6JsxDUo2aC$lQm*4}d@nY}lH;JO%2q)(
z!&Dpzai-HRy-ZN&E*jghjIp%Hoo?#v;5gUz_D*`Lus^(gU!X#bp;MT=@<_5w^AbgZ
zL(#(;xZ8@0Kl%i~2nxwTEX(NtQ?O-05a}$1sx2sxVA=77)4N0g3Z#Xj5o^*ecxI;t
zqrKVJKx(IAYv-x0b9`ghE#GH6NbA#81Eaw~I>C5;I6b{8B6B;MQkbzNmz#^_r;(tj
z(mw?x=1MQ%R*ut<asFk*d+ddpLK3Sgga<k(RP36i)Fgr7*!JF716y*e8Dkm{te$Ly
z7(?_2NoBa8KXXtD8=E`4otlOUlw`pWRJ;;rvy4rs?pGHCvDsy`3!9b0EgHWX$Exn-
zMYCdbK-#J}`1+!Qb0W;)=UpDx1gDSvrVG^8=tD{81SUGFi&ZuzwJ&Omw&`Q@GB2sx
z(T0WG4pd>nlE7k*DU<b$A~Mi%99+C10gHn&)w^lsLU&_Tln@Kyl)16G_gpC1z=pu$
z(RJjiiEJHmhB|(U1RM*gMf3m_jFS!2RaNIDTY?WQP&44BlS0}wQOOcfN_ZV;ww);X
zFM@OeW-~9%u~gT}hgMWlE>=byMYS`+x-p7Bh=kR`tJ)@lLijrrV>TBJ{I?^My4{%-
z?Pvprp?EIq6oLF#@1?n7UmXi`8<EJ2JEbWRTIKprzP#&i|NA-s<%dQ?{O??S3!dX=
z>(8-b3fzB|P)r>i|5;{?R@b)M=Ron9`NLtQZ!qXsZbmib+JOW*Ad*N%0l8(UPE0Ke
z<4(?@c+qHD`Ssl7ln)sUKyUEwwbO>5xlIns*O$bQ;2r>S(;BQYTify~noxut%Fx`~
zs3Ty!rJ7Jku}$XOgvRjl_Bdgu{@KUc`U^-+ChY)&LAt;<oZcWU!X@d34rTzs8g$nH
zSuTMb$(b~MpQ%h9BUMTnEe=E^m~1jOub7P<sxQ(N-2kz;_O`i~2#}IILcEGHloS>+
z4n21ehys{@eUR`mO@22$!bMDP7KNmHguoLe2j!{Ay;D`iF`tB)Nf@7SLGTDKc3z|&
zG$}HOZ=66BDc6r2#g<lN()ao?CpWhv{=xsg7MrwE5AHAOmGg=bvea!(iLTOdsHMOz
zJRK00%ZjgBGgL^9R9_#kewlamGvw8*3OnFhv+2Mn7O{Ap{(N!NDN<Fsb1!49r6DC@
za=>PB6om&*dS>A=lc^84_H;<$HSOcT?Dfs)Wm%$JkM78-#i@oFH6dQ?s-aGga+Vbq
zdQP4X*->k=t=z5qDV*V<5vEWT3dGlpd~2{e?BR)vd2&*k1l>S}5%TBKRj+8b!QtzE
z^#Vl{d9zFGbqHMhmk#j0DU!`i;mFwI$-RVF3a27UH$>qQcQAgPDY5^77F&M^E6zkT
zela*FG`gaYJ%$J1)6j%uD3uEGmcTXK5jbXS#gdcc;awiBqX(EME&8ikBCsgh4MutY
z<RcnnFW_zAZtI%6+1Qn~!2<(Jg&>dpyhY!DKwH$KL(bfqTO-AVI~GMLBkWz#aL?!y
zM6{2oq4^;dPFKX@jG5pXgq$jucCH`C+agZ86Sk^DR!tiD{Gmo#6?GR2O?v@s2x<WL
z0Mr@TfRw~kEt1<f1F5p4RvS-Fxzax1+M9{u5Knv%U971Xq^dK^J$@Q2=xNkgTrg1E
zXF-M(19^ddk|MLc-yFR9w9yt*Hk7;HSY#ZsuHMf$OCR`DAT#TVQtLoYqA=vlBGEz<
z`l{|^1xmVWzexR%5q56D8m9kL2J*G5f$KP`DjrpUYHJldY8P(p4xp1QhTZzcRQWr3
zPYIunzz`~V@WmUzz#3^~(n&GUD-5uQq`2hN9aXUHxL|SY1fvOo(_f#7_AFixLRf(i
z#6@&N>N-BD!ri}oRIez3LKPDbP!$b*tr&stAhrA;@ClpeF^NM+oW$C>ZJJ_CGQkeQ
zoTb*J#)F?h!vz_IiIeZg$tI<fiLIY65~E``Wm*}N4g1cIzYkjn-qZV?UZZqND%b>P
zVdIw?!?7i)+EJfyx=h8aWVHYX_V~6+6%)Pmy(#c3%-0l>N}_%Y99-{>z5D*8z8&{|
ze!Yw}`=)w0+WfyZbR7+dOzhdO)@EyTSnAl?eagcN95G0bz9v0=&*jG@v>i@Xe|-yY
zzmg~;m`uYj7Eueo<E3~EeYY1iccLrhdn#<!9s=PPt}zscCdlA_5nm+K`q8mQGsREU
zT{NY@Gpr$YKBCO!Rd?Ze-%^XU2VMBr;B9hbs)2T@`i4LIx;8AZZEl;9HAc3T@o^s&
zn^~H{Zg+EvH)FI1-)NuZYLSSP1o!QV{a*M2|DRgJ#as`-@K4qu2K%3i0RP*3ar!Y}
zjGf*885WB%H*7aJp0@P+iUgM7bhzo7hpvh!<0QA_6y%i#uWa8*Mv-tGs3JoohHiDf
zyk|H`NR`yG;MC|-MhBdF<_{L|xJ}g^8>ol8OV%nI#;}`5IXbp(jQDcvW{N+e$uo4-
zxDt!8>Lz&1-5@Ggan(D$cF!Q}2{O_p-1FVXD~OIr7w|GRt?T&c@U(jm`oik$>W$9b
zN1)0zi#hh^(iN;p9j9N6``I(X14tda#zb{UvTTB<A=*TZ<4GL)4wXg#aDZRTLd$l6
z2_e@m-mE;CbK6--E0Jo8h0c^{sA);E=ryZubxIz^K3VYWS~lWAFq6i`>pSr?g^j7F
zDHhIgdPlmpq3fhxBes0NknS~|ov?LjJ?Sy%rF%WRnhXe#;v!Nx<zs)-yT?bM=1?Vc
zN^$<KbcQ++U+XZaMj7I*@rX>xWHf-w-wM(BLaRO~`h9=<xYi>aG!h=;n0{Dz(YlhU
zPwRL6=VGy21a#*KzeobSi{BF_2TOqTEnau=?hEh4ujtR<wNA}jBR59Y^J$buT{mEl
z0lU6g17P*OQxgE?o8O)AA;h-KH@C?`N5?7M+oK~}M^^-&j^0f7rYvrA!g&P^1`*Ho
z=h8W$TTHcus^d1iyK@x(RFI&%+|I(cR}7zTh7WTX!cQ;dlv_7;nhm+lFZM{)Czc?N
z&g>f{;YOT1g*)JPV5R=F{p&yqCDCqJ`j7arWS1``O9)a}IzKtRk(n;{UC@p;A9+A9
zF9U*xUtFq=535Z<`q_pis9yM@Rksgu*-)s(sDtK6zaV@$%395|h}y^EBnMki5x&f;
z^iet0BOs#<Ou`XG<L2woAngk<-AUdooo8G?Sl;#b0<(z%h1cmttn`H1o5~HrqoB55
zmj;k%-4Gcz*exK2Cc>`^@?pen*e%E01xdDb{UpfAXApsA0sBJuVEA($eUjslK-AN^
zb}2fENt-w8l1_Al$t++11Vp7I;Zn!;rBvgb3^5&aeSivUq}ob&ZwN@QpjV#|;1y2;
z$PJ=eH{*}4!)S-d3~Wj&K%PSg3~cy~%PA5zDok*}gdgUlc+@g`&5pZ{`&*D{A|4zp
zFr@KkKBFnV=#=Km6ubPb{&=EUA9@jut_=!d*BcBrS1wV6oUSR#sLG$}f*9h3C!v?|
ztyUwt@sZ<hZU8g~xW=)yzwwvVC(?a#pyLOsqcr1<k(5hGP+Mn)<2VNHJEWVON>N+>
zbw&PbU@zY@`lbzm^K_EiMDfy9de-11{@Csw<}^CjtqeWR$bGXL0Og9S(H$9@wBg7J
z_jKr;fgBOx0t!SgtKetE_(=QnNB&d`s{z*Wu4SLEkNvRkht=r>a)K`+0-iR!Jt^vj
z_@`}V9PtQuv?(4i3?Xj^1ot(iXK8SE7hHpvD1H^6^)Ss*gz^RW4|3cb6+M!K{;og@
zw^vx;*$Svi)%gat6o5gAn${EXbX=4Fd@vyCxqu-^^V>s={<Iz0+~tx{d)RU0Pd+R*
zCX{8l4i=hvnI};-M~Kf0fYtmKY@Jjer4psUMk&&X-_8;t$h=I|3u|4@Pm2W!)QtvJ
zJ}jh>Q!^3147cfqGIZvS<Dm>5j`1y3KaWf$hXJ<(4EjcnVk%TOW#Sh6-dlB+y;T-1
z6%1_zgm^X%j%6n#6Dv{AE&#TI3rrBMBmjX3GIIuO(qtnQ`A@S%z6qiV8Uj%nCGG49
z6WaxVi<J2BAcB=ZW<+ZE&dTew0BCZTb;5#lX6@%gLuhmJan~XeJd1N)Dlu<^ilgd>
zaNsZF(<?>X3?CRmBQw%7g7w2T21*3?bB<G$dfF&W6ivR%cByOdw5`=&-CRWj<Tn7f
zRME5gRhn}B!|RB*F`bY1wi10J0So(C%0ony`RUIpAcA>ZR!6bFp<i$tHOTYdVW*!z
zK`1_9$u0MOj|-PwK3b)ln^j2pCu6H>1`hPXs<93&EIZ7L>qi-ou`kmJ4TGz&<-HB_
zv6aex@8(4ArzzlLx=9?aO^!94R1Pymr_oA3(+DH5=@=|*+yK78lJuPoVFA3qH-VIZ
zvY}Dqr0Z}xLs+&NMauZq9q0&U7eQ7O+Tp=qa=^T;?w`CSuOvR8p1^Hwg;uWo`2u~)
zN88~*Yjl(h(Xnx$8Nh>EojT%ekaWxRpMbWmGSwoj1t5UKmoRHOe^p3DZ-izlBd#ip
zeBo|cq37^<lTDTcFBd7*Jg90g&eYg*L0r_~_qr)p=2Ha0FS%Kxj|6!LT<br_u_)ND
z`34{nb}hSSIA|`P00bAuMRSJe(mUsz{umFoglX3`5};R&z9MM_zfsw(UmJoiX6~2X
z#~73=Ft;NMV3n~ut~Op6o%7<6B}5q0?<Xiu{iF@-@_{F}qPQctk$-=H+pGtXaV{GX
z_7(e7IQi%(Pl+qHG#Gft%kV9n(f9dc`2>T7p@HA{oT2RJWuIRIzg{9L8+9iEDu4dN
zWj(M^P$!r9RI#PKr>PMs5#Fb{sadL6sQdSwdT6a)s~P~-eOru*G{u7<2H|&&yD@M1
z>yQZ3_tD+bIs4rEdF;X~QHHD?ADz#w6ZEYVdDQ?@4)7S7AM@6_4u>ldtT0F{?lgj)
z`))7liDa_zFi<5U(%85~)6pZ=a=*9nZsKrkTrDs>aYG>p{$A6;Z-<%WVPRqMA3+yb
z%{YQkSFVBv%%e^!P5^wa<_s;8<?lJC{g?8!BND!GKQzInRzrZ>8MlJLrGv{)l;CN5
z%b`uKL#Tev_`Jm04ux^R<~N4FD@ceJGY<v?Is=+MI9!xLtx*rAd70CFwY4HFT;2Yx
zbCkF&7eO4FG%n|0Z~D`$E=j0<8dQ7R>xOk}rCnmRPCiR*8RSH?udx+CZmSjdJ?@9c
z-X`zcHc-TAhn>6VweECiBX6qLu~Ls_Z#xjb|B39=w@L4sRwSz(bqf%2=PP-U<z|!!
zVs)}|O@1Fc(^!ES`Y9{E#EI|!BuNCLC1Ke=5s+-ie~N(oH%YR$v$iz;50`|=Du%K9
zY(JeF`i!RhNeXlVe|XEcwk5-U%91!W09UrX>jRhxZ3CmN&D**vzPpUc0aIYNv>WHi
znoqjeucMhyL1zQQ*Lf}K#%R6xak~6fV;FYwb?A&+7yi;8q74^MC9@$$MFOE+Rr!Nr
zEk37-1??Fa^(kV><R?*D)si!aHi7E4td_&O_CxF@QW<9Q_^F^t1;ULS_Y06gfqYCl
zm<vkmT6Iv15OMbFt!@UcFt9?%law{dp4tnIxWU6k=xs{EqwUC*G#oW*GFL1Hr9c@s
zX{4%ARIJ2lsHbXoF!RHMy?^p4Ee0}*7Co3Lpu+xjE!eb$=Hi10ppGw2>-&hINMX#J
zS~Ee_0ko1$%N~O&BQ20x1}(|ng)*gLQYZCLEP?1*BmuT9{Lr1?0_5GUHHx%7YF*q*
zL5)CH+=dMBmp4(fT}cWW?<G)YVg(nL(zYrZ83cN5Ch>=xT{Y>rm#e9RKL^kI@$hTC
z!H>Pvi;HOq*$-=30*p#pgFEG+;>B1v7D+!zEu|*ZJSJ@+-f>7NYnM^U;3|hfsc0l&
zJy<mBIygli!ezfPMh>?}AlxEOCJh+~*Ops31GTl!fnDTFAPN%XDCHyi`}l_p2PdgW
z<KZLQ8w1|qs!~U*ocv_>Uk}}$&i9|phScue+c9Ryl-;5Kgbth&xI@8op)rNOUv(i_
zVtgP2e6EkTe#+ENRe2E}MYu)31W=vx@#2RJUge2^>FU3snc?qq1V!W<5z^~i!v30L
z$^2RiJu~V<yZGcNp<A1JVf(60LvjqvizgHE+_k#hiEy5+RI0*&l@*8|x1%L!gV!XA
z;M*dRNY>V-&Y*?m5&vqL=s$Y1LgAdjMX~gKyy8(|D$s_q-1+FWUggbyyK*GUf8Wmf
z5EIUwmBbct!BqgK3vZ4eWig6e;>#dwbLyC>s?d3RIk+i>nsOUa+^BUC$51Y)dCoY^
zyqt|BMW>6p4&&UF4tURr#KV0Jf3fQfavWhX)9vxt28Q_)JJyPv6!Pxo{rBip(?Qj4
zW~>som85q2OFw)G6G@Y|akLYq^&KpYCw~UDYxsU=)sa<ShF;2tMNj{hyDvyDpKVg3
zxbAG}7k^d4$H09<#%FM=g|(Bzu6r(?L$glvLF9=m<iq+XyG7{IqUz3=Io-tVwrb!5
z>h9xWCr0;J4n)Q}@;!YWE{!ke-a#W=P7AYYcvsp152g6yzeq->ZwNmHGynjURR38r
z`gtGy^V?`j>&MAtL;5c#lZ(0hu%dpc!|eEi3pcl)#L78AECKnX+ui^vK|z@$l)#vp
z{q?#f5*>+vazi#N^WIqrQRCt~a0_(wpb*$mBt)`(;>9yDQC|*>e$;Vbl*RPch>@&;
z<~0$NvyI|THX)p^EsTgsTubm+ruG6E`n?x;Ey|<Us82{~kZ?l6wk~`T<!pC1pN!|?
z3Gy`!#YEbTM9xtOBE;(s7TsisSZr0dcRuST4P=Zhnj;!m%+{kjev%b?iX@Lwvc?H&
z5M^`$w>|*8C~0!IFrQu1-Asl=6l_z7?k-9nom1YxTg)QnoXsOAV&ULmV`IYyhz$bq
zG11z)3Jv#{(_5w&HsI@RUmtTf)LMj$Ie`)56S=Z)E04RFMhf7}z#h`k?0HylDEN#9
z&K)XUcwiX>=BunU2i)D)vFQYd{TlNvrA_WAF{4Fp+xz1oK8La_E?65rso>%c4jvAT
zz!LGxNbH);iE{tIRi7^$#K#yUpachf^oI<w#tPyGv$Ps+)`jZ~90{v_d<+R6dE&%v
zt27Go2R7Z$c)NuAWnotMbG~@z>t^ozcRNOGsqpvXkcAiLvtP1iLS5&m(U>HxkD`)5
z{|vommN_^7PBDxMaLB<K_D&|v3I6BNNIH1D#v8PqhZ^n6Ad`O|pLpiS^R^dbhMW!;
zEyCywoB-OJAkrVEVXk51VP+TYUsk_jF-j%Tlwv6~-*<N!co#0{cDTu3Jim2n?Q~aI
z&3LphB2&-@+`b-IGnPrk7d6OiO~U3$RGk~uJq2&~9q7bCCcH0~=XrUZb1@&C3Vhe}
znB!miV29rOc-{RmF#GXBeqZU!p`|vgId?zkrKgj*%E8!c8RYq{A><>%Q<i|}AF|K~
z0Zt6LKm0WcmkO9kNsUxng~96XQ&8t<(m`1~=~Y}3#ti+lC`lXQg=sA@VpQ3MtuQ(|
zh3f>0x&Ocyu(pZqd4FVic5uvBg@+Z7QHD60(inEP@V<XBZUgDY>LEY4rIGbwwWBFW
zVYDjGxL9o<%<Ncn4A>pFLV)vkE>=Tl;|4A0?+fWnuJ$>?4hQeejvmc+OxM`w4PU%#
zte)j>ab!$G-qV3Q_KB9~wD&Y?<7k1}#n|B}mCw!kgLj)aL1qd;q{xqNT9&|X7mJF7
z6`0AfmZ8FjRJ5nS1hxAaX-A`u!KLZ6dee<s32rhjH4Q5Lq<F^4%<Mj4KHofP3r`)7
zF41S+*{^vJOI13?*b}db-ky!cX*|CJbYF0mltj68I&ne0*Y^z~b!xg+VFSbAkJU9n
z31oHHta4xu6LddF0(I+C`kw9=fapgrhrJ=eW@*Jjt&kmsx?9UeFxb?CV7I1+qcAP6
z<M{w3I?G~HGK=UJ>V|M^nh^rDpnx}br5kiRdV#KM;|P@dt|$+gV4bLK8NU^rw@oH$
zUAa6y`5hUt?+~angiU=Co1)y8S)YD?z$%1yYSP)HHVmJQ@Rx3%Wgeqk`_v9&PxHU}
z@@?{9mt;-L>2~Z@DXr8KIaI$2F{n+k0c~EjELEhJ=S7UQr880@@p20d^#Oj*y5F*R
zc*3J-F*QPOINDu_)AA(s4Rv|j*;gi}cz`7D>buEQR`~MLT5Zr+fnK(3r~=!Vt}6SZ
z4Qb@D0<8;FvQ+r1WwvgEYqg!;=Fuh|EEu@LBWN+4=R_&yHn{|-%~k6&tGFSVx>0*H
z;S$1*the184nMWQKB`#EUyK(fPL$U5IcM6w;3t0;Ecq{8YhFytM9^(e8A~ty=Cux4
zve4YH+_Fen=j8PYtL;-&Qs))bR#qG-v>drWE0iPNNPj9hSR`z`u)Fk`#_MDI?RS=g
zH)pzas;PyscX>0e`&8UqoJDI~ZRua6x`-b@ie?oksfsLHZdp)Q#YIb08TAn-GFdNH
zK!?k<DI0D&U5hXgOi$mf*=={v#lWO)?fQGiaYR#eMAj1a?Ku#v+&id&sjW(lG|9TD
z@_ZDG4d*<tKAV$xMEo!oC@LDWJpl~+1wS&7<nR{DZUa^1LTHWZZJTE<2O&=GuOS2Y
zFzb1OZvVyLHxh68LWifa!4W;{P1s>EMCJ%j({`60ZE+d?^q6wbE(dvtA?JOvcoNbt
zDK%Wv$g?A_)7LnS3fr5;WD_o(NrirE81kgHmNdbQQ&#)BlRK65ZJ%FjyuVOGm9M|m
z)c;nJo}JHNRUkGhK-psEV@CQ0g#na!k{CT8CthdzwY8&>-o+$|NlwC~(dvRNhs!iW
zK5DGN3VUBMRttMa1GDgMT(BD2vf;*t;CsU>?8B$3A5x57k0(H$8=faa0q6NFrx0jM
z!X>)NC5AiPnx}qyop_UoTRK#e|E@5Wuv?ubWRDQwAPK&rj*U%%j)hnz6EYs{$Atc0
zl)Y1sCSjOxS+=`eUAFD7Y}>YNqsz8!+qTtZ+qSVivloB-6FW1pH<@=CdGTiC!*dc`
z;4HLq;HJR&AjqW|*w`H$rEJ+z3sJ{d#am2R(0K;o6~hn`9AE-Mc`=g+h_4nVvW-PN
zz!=H16K(aFIc;yquYGpzFx*a$4!4Zo4GhzG?BBu&0BXEo5DV>UPcAFmYwJgDRK1Y^
z;7_)5_lsN=RL>{V8m*9Un%5LDmPl8ggFBTJYn34eqI%_6QKJ6T_E*8z4oBbB)-B2_
zbGCQAGw$0FP~U~sCG`|~v8V5q{%)(DZ!L0<Kzje`huC0uX^!j@h*KWiUs&*~Fvy7B
zn4;XB4FvG(uh=c3v>v)aOKm7FifZ*^etd|b5|ilyszVPg?3HAQn%^(mv!CgkGumN+
zCW<X728ZH7<!3%-&Aq=xfqqV(#=MSPlPAVFnh>p%sgeWx)FDPV@VCq?)~d1QponPB
z);`Z?Y$2*y?L+?H^0~XGWwuNhk|9cE1UCg0OVq^|^2UBupRy&KEG;cjrjyP|pJa&|
zCmWLlK=@7aO=9wIYweq1VM$?4gFm8biMo%qlxqvJ$)C8IoF7*H)@l~^u|Te)IibeW
zhY{(4<Ko)f%b%#oV<!uWn?rRs3-q_CdxLKTiQtTOlQ-1AQZ3f}f`%+X%7I0%_9UQQ
zXDxCtXe-h{VIX9P)(1Ih|2#F8vcp^xEFc#2%>hZ+>t#^L&HD`JF-L)vA5luNG1qh~
z6eIy2ty1=h201B&%i&((7B@gXC+i@Q(I>xw0%b5Fkk+x!`qo^DhM$x-YKTd&B1k1o
z6GF@Y3F;r#IU~OH8{yZ00tOwg3pKZHlK@hIS&KQX`|gk%Ac|gea<M$0h}AVrK-IsP
zs9R^coj{PX9dmi*vsP!$%A<>|-wSEe7SrSy`9($2QF|!Xi1Uj{n~2>l)>t_s&W<0r
zj%GaXFvSIx7}&<U<*5EL501X_uwsay9=iE6MGz0Z?`?&p4S5W06ex?TB$P<wD6~uf
z9u;ay3xRPkL8w*%R-Pirf14p+T2ny95J?7j+us*q9XDl|g(>RLjJIqw@Bl;dKCzGp
zp(w@xL^_Vy*8;2nhK@~s^<E3&yUF`ZSRqb!LjAdrprKQ_o?TJF&i)xajKMNP&@iq>
zo=co@GwDp*wqkyeRtENdG)4?Uy%Q-;0fbj&EFPjBh^@ymm*m5=_27`T>F<ol>*j*T
zj*QJt+KUFs>VbQ{?OfDd@_1v(1pL^IY=I31jo8>(j>eZNCKHXdw##x^^T>zuhFRG$
zBn5Xh`^>o{#-wmzsj89*<gW9<k<4v&IatS4J*$f>#JyGiy?fp)*0q~Zo%|!7lcK+H
zxT5eGl8<s9XA&NXNL8(wu*d56mUj#)hSuV5rj_!u`NKOQoItda!J}f<y~EasJ*>Ag
z^6SmbE50UkwRHOJCgVJ+qLn^rT{~Fe4RZZg$eutSJ%-Hf<nyeq#e6A<5z`x*x9F@k
zCe1=KGOKG}-)+H{VS#{75Qkg6|2u&Xpq+gw{Fl5lk^S#cyxsp6#Sj0RM_m7ZRYx2u
zykMAt3G0%<9BRKKf1Rs~1G{c*VI;$Wn$wablU%yHef={Xu`p-EgN<mN@K7D4d7PcC
zl<I9-Ean0KVepLVo@N98(0L(Ox5kntMxQz{dc_OvZ7_lP^67v-D1!Id3B}5m(H}uU
z-)U6Au|P_%Z#5PeP_08$r3q0cJ}}dgFCAufxSg^D{p8*pobd@FkT%F=C`h#J23yXV
z_5V_Dpa7@$H))IXo`p|=!|QUM42NY39GizH=#tR^T<+hU#*6P^aE*sYi~ZR%=1sDa
zXp4<spOBhg?c6HW4SO-NSL$e$S)h1ZJOcm#O+rb85}&S^c3f-4F-WD|GH$$hH;a~b
z-A@tK2Jg7JX|dVki&!+4b^*hT^8g$gAd!L6O|9JO8B05jy8C5kYW4RIv_G>wtq=1>
z-CqUO$VUAk%S|HvGNUqqH6Gg6o7XE==xR5#3+FC}3*INz>0G{Tj~g3}n$xg~P&Tva
zi0HEWHX!U<qg63GdGRz0=$72#bDqFg`ERLO>>;9qu$po1y^Q4Gx!|f-FW9?cRl5q>
zmuFJ1Tj6U6@L`IBq-9@{_X@Qm?A@%3@!^s5FEp}aA$D{DuU%L($AxD@?Pr>C-O{=J
zAf(j?&&kZqV%m9crx!)NZ8`8-Z5LBn7vrDrA1`OtjGr1P^_~&@Q}WM1bRBE+zkb#%
zj6dL6?nb0^cKo`KrV8L+FnP6(4aL0!Juz(Yl}!8D+1COu>;^EqJxZ5Jv)dONd`FJW
zP|OE*sy~C;i0tSn+*c9dQi@aGW5*bV>FKTt9+8ut668?9V*Lg&x^}mpy3wiz)lmeX
z3D(3EFiR=^7!q1Ug5nl?vY>eP1R>HZGgU{Ev47p2o_OD+WxV+zdxCeU$Wh?-FfG!k
z8P`pSEGUy<9(@Zy;%*XQD>SZ6y4{*u{4pjbW2c$c*@o^y<IDt4O=S>RhCW@crR_j+
z9YI1^<yioSr@&slN9ald3IPG%i!x}Vikq7A548A0El3!Uy;zt6C3x3@<%^LjAG;g4
zXmf-;PS=O=aI0tNWf2!ttOFm!@qJhz|L9gNR3u4sP7#z)04a>A<JephPf$-U4bqL>
zFd`tYZxj+1eL9>*5s$i)s~tN^UVv90<ok;7{R+xd`8ofSI``@qG8(PO7HsM-lNOTH
zF8N+-2AHq*=UJ?#L5MS|+^@l^_h^#H>N%XJm}P2-5#S&tj!-w@kkvR_oWbCZhJE4=
zTu*-aQ%xsK0L8!jA`tj=b4=A2y$hS}3>M4NV=&<A+mFbOKvdCs9`IJ)i$S2<(ID3D
z`wmpzY9w)fP2|$}eb*N)!1WnWFT07fKdI+sTEJk(W1+|0E=d|U82Zvt@kUMmfcu{I
z4LZ^Yh+)v{nq@~jo)7&9kl!KwJb0g2tKYK3N7jy)a?ZB<dTYItpB<m@JM1n{Qe`gI
zad4+eM>K~MY-}oJ1Ks!;t4}JUywDhdMrb+A1TSIEeu!RK>TsVDjdEA>j$n?tR#J2e
zFc4b!^iIymJrLeT$7Tmjp<dTU`A(p<-0MLGn=qji+j)rkDM$>nQm;!|yyf!M1*rf`
zmK~An^R|d`a;II2S#2Y2Iq$9Tm<AL_THvYI!Ko#+H_c7Mq?r^yRR{**`v`a=9a1Xc
zVi3>%N&=?*^`OSmFP?mnR?jsXkL~rzjWU!A!5HuT#&rK&ZYn=+5$2?E?>&KyK8paG
z6K}HEWkX4JVxNoNfl8{)2p=iEMKq(tKEvEP-;Z-(Gb;6ad!T{k;Dg^2Z*753g&9|R
z&98!$YiRgxxhw(lFE%TJ3-9n&#E2Lk=lpk=|Jd&*&}93Dnps%Rc?iw633`i42mM&y
zu84jg=FhiiQ$hyG{;3-&d_qA-;krRGYVGA|4i)60z$X544=H#vW|k%TuRC`x`<nN{
z`ZLO<WyQ->QsEjG{{_RAwJAZin`+PG&Vt_gxM76zj^Mh$6%JuIEzwx2(*5)l1G!2V
zqBdkyVR2liw6P{TB5)TlGTBf3xjmD#Ji>nC2y}e9m?6BcsZtb`<XS4%ht*0Nr${s_
zA$nUC8%>3tjJpbq%7i$DMqXx2P6p)oq8K>QdyQdco{;#?a^YkSqRC`a@TNJBh}QuV
z9yj#c(j*@jL{)Oceg&)uNe1P>yoJ3Jibv)4Luh@cDoG~bWBGNib%b+%;_PRnB;y>f
zw)irt$7G$WU860Udzn?mJhIK<%_V9x@{46DQu6>Uz#7x<x;*un>K?zcdwMm&0@0QR
z$=9%U$sT1eGor`d;lsBAzSmOb?gER5VpHlFcNV=xSTFdOxh&EM&Elw1KPpoOva`b(
z%#pDNT_S6(n5(Mv#>oZD{m-CyIKI*VK(DGTAWBhffzu_Oq-9?LXJeccB*{9?q?d~R
zv4q+n2zB1Rl0W!@qupr;Fb@6Pqenk7rQ_16=-Y8x&Xj0nL(HbS;vO<mfOCU~7NFbK
zWz|nxAkT*XqNwiWkkAs17x`-4#%YA8_3oAMPu2)sz#wQ#E0y2UZzr-qltdaviG${!
zF9<hSl)D$S*B|~|G|Skg%1hRz*IDt}U$R1XTj43rSe3NXd)V`?CXv@@5mINYim4Lg
z+{h)H+HQEN@kLepP~>!(Nb3n%YKT@`eH(pZ%m^aG@jEN`A|S;~Je9jVp!u;G0wyyS
zyy`kUeVtkNM)tIu(>!uueMqfUTVE`G$dD+%&>9x-naZIc%n>l(#jKzq6BUEH-vY6u
z;9LhAg^<Fx$=Pr|gM>)BH`=bJ?JQ@#D(hw@GkSl6S@Lgj&JnmG0&o$GYcjGMK7DBM
zX#sJm3Qk^YLyS$e1|fJqepIZj9m<%(vI*TM^qL55+*{d+PRE)lQmC4l*=wG8Wiuk8
z)NNA6h95khq5$x@dG`|a-PP!-NXU^_RC1Z6g%ML=J||v@Fc^U4VC-t>n`ADO%Df=3
za=o9pAE$7=oIoipAod}<3|g8N%vcy@D%KY6Rj@Ul7{V3H#p6ShROk$H=Om5BEtDpe
zo;SmeS3t$4S5~X7R4dp0Vpu(Gw({dW<67u93=>tK5>2dCXT$i;aPR8kd2baR<S$}J
zsdzO00xUw_KyGN;APEKuofE0ro*y52Ohbxp-IxZw?O8`DsF)qm5#UiUrfaa$%tTY-
zR7^E{dK}M-3YjPcIhN2iWbDGHZjiJZK+^GEg=xreE@e%69gQvjRu~{7uj4YO+3!@d
zomu?VEeI8#^8H^Z5Y?S+3Q+%|zxCh$d-P{*XZAnWaJw~r>^3@(f42O<^&q+?d?OZ6
zwHOy=fMy*u5855{OSkYs1mZ}!j)|lKg@+wp-g|GZ#U+bqOZz*fd%=ieM?ZXXjb=P?
zmyHT(cF^{HY1cAWPVCmUG8#2z7KRNcY$Gpo0SVUX<1VU6K5Wt`Y+~yP(;nlIVt6kB
zkPYb(VWp(88p$JF`tyc~Wwgh8`{87OvuCUi+R9b3&3cx^Dk{$Vcq@g5WO0rIIpkT=
zUzCvzGC5%k(Ht8v?PSLp(WWTDl#?k;VEag85C1B-h(#o(3*+YAjhLCuOqDRZ=#h%(
zh8hy_{cnN6D6`eYQ<H9HW*b*6xd8|!>5q;3-_p2T3+In3j)_2T8l?}A@uCuFPR~6_
z4n!$mPsNR@VUKt#RU*?bG!yg5Qo1)|&n~*CVr+O1&(TcUcZwl@|4<Kxi<8pNBh^s3
zwv)8Wab+_*o{;F643m)z22EBa=&$_6m1_8Rfa%|hxK33C{Do220u>wlTrfWiT-57y
zv29=dd#KyaW&?&60>XZHJ79aVAn`*ZV;AnG`B2ASCvEIME?(J}Co4(SIox+U1x_~l
z#+Z$Zr(o>K+%1$y6%Th8|86-y18c)f2v{fiplCB;@!lqwY$RbEX&%yO)iZ2eDK#?0
z5Nex@1X-&<)L1ENZo-T8LNr>%wmEAcnoANBkixqw-jk2FSmgwk7{JNeMWyf;)vLtY
z*ju<d$tbLiY8}y?FzVH(Y{W|;jhBkTb?~TfP9Gbg2q07avu)x*B)!uOtKsQ?146>X
zK#Ptkhls@5ZDjkM*}7mv-TW%6d8phe{t8nbWNKeq9?gA1cErPtydH5?CZy4FPBwN)
z`osHH&AG+xjm#mbD^x<|@n-@n_B?eoyQ=~ANOFjQp-o9h9cq{e2G&s)fFnSlAXHG@
zQBq?#V$;JmrhBP4Ue=4QfWLlCJmFg|a^6-rU54w_t<f%453{^tlS!a^oGw})?U`cG
zj~o~d1BiO`*>g)5=xC{W<Z1YCce%_viQ2G!mdp;`0BMl9Aq!{LsM?6+3$qXPd)oFI
zXp~gYgbQy5LKZI3lET$+uhH}7NyYLSBwXley;SKH;Bc0}L5#+hW9ayycHfUFS-kBH
zS&$p{BDd~%WkkR9Yrr|P9;@a-a(!*G4|=I+hkalIq=KuOEwOZNb?Z<#&YNpoW;8mO
z`a;UQnadE<qX_~W9r}kdIoiHHF_0FBDc5F0`kot{PI)%hmR$DwHYlh&3>?w4XU%fQ
zfOzBlD;=<U0>`IQ_naM<a2J1HGuJUPC{XV#c2Dd-E%gw$*H#y%Q%GeYa`hc<<=4_C
zSDgm(p#sU;H2#570ynB5)lrwz@gR}XUl>OrTGnu!a-8m-Ee_?Za54A(sGiAMkh(-B
z(0<EX3nUWIBn>acGLMJb^L=N#=3r3k^ij|mZIYxx3RhfSw&7FKh*fMyu!@sLTgpY4
zR=EI0(`6)5EDouy?RS}!jmbKvGO8`9D<c^R6O>YbFydBnY`{b1nX<*V0yqzq?4+Y5
zJCgFN`qPS{c~KvmD2HXq!=DEK4)me}1^){emdbru3m5S%7;bLx#7g<R!mmDcZ0jYM
zAm~wcEcmVJn4q3Z7CC%)EM(8B8+Dwx(K&v3%y6m8&1fd^gmUHoJ_I9t^5`e!S;oAR
zs7cR;CFrXb=st3gV$a)nS)~a%5{<jL7z?Bn41@{_ra3Fzfs0oO2s+yj4EXE*UWTY6
zS8@R48Kxt~lAl?3?CfMcSCCIiC?PuVdR}J{1lFIIK<K=#kOk?Xo-}6;Eb{KpAkri{
zm6%EaFC%>(laLV@dt&DA7*S0T;FjXp0%jg0^9y-5#s<2OFcf>*A}*_X5h+9*NAe84
zb&B&ZzxD6+Q;rD{eTHZ&EZJEsS$IlTn+%4u*8G9ZVaF6SgiFhWZIEBLXKOk689)y~
za)-x}Tyt(8oJ&2r>YIFst#Dz$h#*&a`NkdB9JIgZBH{~j^no7?UHHJW*@;9BVb4;4
z7rjCLgfs;7n==spg^-bm&+Gz*WG&!mv!d1q3yqXV5j=p&U2xC$F@817TRuU^h(wrh
z@`2R0YgQ=3w9r1%HFDiJRQ;Q0RPAFm$R4oJ>F=Xu^RrgeR{wKWOr_kXsdxB@(0u9q
z_(F#O;<SaXfwvuseZQh0-fuQ#gcYD!K_$Vq6B!9Ql8Cn9=xyUpy3{5xE_ROrn21pK
z@I)IR38hrv?fYD7!}ja_oHt+R%Ea{?t4N{PkdpzenP^_At4thgGBnw!sSdix61AYl
zd%WhR)?iU4w<TkZnMJ>Sqp_cN%g({C-4?58**J?or9e_60l=rqi-EG%;7@+zH8%XL
z0i$v@Vg6RoWe)Gm*M2cP6i8>PyI&}_4)wRN7U|j#hV1@I67YKMaN^^}{Ra{CTJnYD
zW5dm(Q3b3&+koPJ5Ea<_^IRISK{>2-W0wDvp(m+$`7Fl|o7H}*@p8XtX{ji6bzHve
zTvX;vJGs93-N`Y>7uQRg9}!8KuW&-_;o)9dk!p>yKiE<f0qOJ#o|z!sb_APBd5e=h
z+Pl4Sh1wTlJ$<~ZU`GdWuezcd&Rw;IMCfi*=4%n%)-AmJi2XW1oQ<fE+Q7xcVF>SK
zr{Vhg6f?2JeOvmYcwrP_W5(RE{~7DF|K?P9ac1I#`q-rB@$#p<`sFviO+K|AsEEZj
zNc~laNxDejHr`UBr3!_%@pS(*nDp&@j(5Dw<mSaLQl3IhU6jSZ-vaYT02>@TZL+8V
zw|jD)yo}zj=lQT#c~hGN&7!aPTn-8`+*^h-!|hWq9uap`wF@&78Burn$o$m4PLl9<
z>{YGz`biH-VuMWK77|<Q7ozEGzu#$|j{<;u<!<tZakQ2(7F83IUlZolqc~KYPCPwG
zO(6{8%p#x+osvc>0lzsfxpXq!+cz2;BK34{-^+Zxbl+l>Vm!{~B*GGdWTmq30RnO1
z(Efj?g;bjBcbq#w`Kt$HgMIu~YqjUjE4s-E4Z!)xFbSs26TMW^(n5uI&@~9{#ZE@{
zY+|8GC_euS2HNya&fD_eW<@(P5D?CPyYXvdV)H)-SIugFZ8z9ZeOA;qOZbT_YO+yJ
z{b$Dg>0l#(bx}yJgmS?&3TSLmOyZPzTAzAv6bncs8%$UQ9`}O)fG)txCbh${=I($?
z%eG@j1gUnH-_P~*#zUmuo|5#gt<37d0m!w-Ga@vJ_n1kR17k3v1PG#KfIlP=)Q{u<
zB?@H?I6TxZlAx^Mpg%0;363z<tnLK?<TI$dQYk{`b^#_RjsmE$QRV(&WME@{z#39{
zaDg;B<cns&0r1HV0yP#a61&V}Df41=vA0jE3VVDo8gaDW9X;(nUF9RfDNe?)<#Abb
zP7=)8v;C=-Iy6U`pKO^nY?&4zW=KTorrxa77}JjqCH2z3f@WzhSWN^HLc!>Q;Vjsq
z{p=7)o!9WB%q5G>W6!cpfp=<5G7o~7Bsd<Pj0M~bHJDpb;bPNBC0g>W!7r-%A_SL7
z0|=hiU>f&f#hJ23cbN48x(P6tq|VqKA<Eha8aN{3dWwK2Nb*7dP`9ONq3v3U3fbGR
ztCaN>rV)&yLp>aV{pt%+)^f5ZkC?0n%B61eeRcdfoB8*Ko!VJx#z&`MBMIkAHmV!Z
z9E7+dM$(q!+9s@m)MEB-u`?dp?yYV)5T9Qs)A+f38Jgg2t-L812_`*MOP(?)&QHjj
z?F033qAA4$o`}+6sR@gbj_4F#Fr83}Jk8HS5ptgPyrK&;OpA8n?4$3xyB1*2l`(o*
z8R5Uuol0gj3>Hl18IUaF*)VNUn)thbMc~V1S%?Zy^4Uj(FP|;7jQdo7DeTwgIHvi$
zDQkN@(<?6mSH+OOm^FS3J;u!1!PM65K0g@#HQy_tGLf;3I=ljQO6F=n#Jv&_lN_fi
zj`p{$3^ot;KeFKVUV4Zm-kl7MKgT2mH3grzsvEmlz(QE)?>nP(4$;bd0T}pS5fv~+
z5P=v`X9Y^pd~ACX7x~_(=<KTtRk)tE&j;K*nJ!^b{irEcY>^iyoMg{Mb6f;f8euAh
zsyl>}b*~C_fG!b4?;>2*Eo3WyW$#JNpHP2lL)nO&PH722eBd=y{Kc*~klWGS$+4<!
zk%8RI+vRyFj9M*}yqkgj%6j{o=3;Z^ID(j2fgBax3uop>=sYU7k@?(Zy?;fN0t|1D
zSJQ!QUhr42qM<|4Wa*{joY({@)OssP&!RPzZeX1X6ixZ45z5=yr9~CD{4cs|n_}m&
zm!``3{l&)+T&vk70U<Abom)zfuAutlwac7Wj#)Q_?t0~s0nX@h=m+J+%&p@|BQrG7
zanhHTHcE;I>fW@pyi2U$FEA??A^ylp*k7a|zNg*3eU8-7x-Yl9`l8+%;6@=jO92r$
zb|Nj+&Mvs53-ra=k3{YZ^@TCG@zryqPqS2XjXu~4$)nUbWt2v}*drI++^Yf8Y(}e2
z+M_l-TG6f>*Z|hoX`$u3!tQGH*I-^k>^B6~QW(a?80-{<9T;56MjR}qjw5G96XP$9
z+Q|T026n4aPIdZhUY^g9b&Vg;|GPgx1!{?t@DD*{`fn5Bzt;r0+BoSs+Bp5sc<1aS
z8M}Y<sgRp*w8BNm4a+>)%HNtt{FDl`dx*gC^YqorbwSm)fvcpl?-$&#B=yj7O}qq+
z4^y3u+z*B`q70zilQ*!wi4+`O?76x72fqV@`nk*oUUXJb*X+=#>LinmgIW3{m2RB_
z!D1y;Hyg(I39FCp<DkchC`5)}<RO_Xa0A120Tz9U<-oVJ)COWV0>&_s<4rM=Z9!?J
zaH~3Fj^Nt-X;=42O2|yBPRYvq(bB{yiok2C3PF_nZ`~;a7&5Ac*8{GqJr8wcjSc+G
zVNxo$Hs$UiZ{YI94=BZsZ+}@{KDy)gu!^LktJ)YZNE$g~;>&a*+BmVh_Z)@{)itEt
ztP_h}uHJZSK<FI%`&z<VAE85P3E@VEWl;neUy$3Hcvt?W*^XL>*<YQtasTbpn!BTX
zR6LxVs3@RFHr)>)2&}C_eD2gIddtm;noQ~H+423FO!)@gTIa{l<@l~=>YOYO%Mq}J
zT%<j5i)WE(tP8GL&cxnAi9eDP*nt)YMf$l|haFoQY4J8IIIDmZO?Hj65H65FrF@9n
zuhZ+(js=Phh#R&<rlCo-UXE1Rbsy66cH7+tnc*XFP=;)g-J$RIAz!^Hw{2696Ct69
zkcEQ&r5UG<b~9UI&-DYwCk6zmy*aq2N;5p*>33{hr_6Kqqg`DCY%1h}htwg6ychjt
z7tHqv?6;HxplWI{p3EB!!*^G6l_yN&@mA`HGYjF{ZrOMcO7UB}du`phja}KcbBeY`
zj{oZMwU+5kw@QAMKbq@Gn<2S+ra5LzckOJ7XlBLHYSCHa^zNqhYd=Vq%M6K0wW-CI
z{+i7F<9zCM3j_JA>R{cwC#Y*w^c{_$!$Pxg^{4c+_dkyM|F>KCzyDL)89CYi|6n8=
zo2{Ag!UF-_GW}0mMF08F|G4P=udK~2%^#<A4)mYwUcsyBLw`~d=VROBj231Z2NbrU
zLx1OujkP;WEnvH78QO)Qjbp#wm&f6hV1l`s?MoeB^IsaCo;MFYQd}0x;)##*M_iGn
z4_RGYJXgPaxvoC5rH_-~QdzKKArIN4{0aqRJ1V_%Osix%9Hd3t{Ns^LSUv;?*^mS^
z|4`)p%Q!Sh38%$t;=_l@6-WD19rq_iGvi{<B4|EYCFZlLFh#iD0EUOW5tR9{z&ghy
zlHzf6DGrC^z@&%@yeC7XSP~?+zY=7f@X0<HeA-17Zy{$6hakRk4q|XwN9I)^76-zP
zG+1<w6kslx_fOhvb55k5-wzM>_VTj>;i87GSTeK2M93Aho&kD83|~d6A5uwRcT`1(
z(OJF;5Y}rsz0|#3L&)?9`_G@nCcM)P6OZg;YD|Om*ppuX82^VXd!iQw6i=EAQkF`;
z*Nrni@y2#kzm~B&_MRu-%b0(kF>?>;G^N$jSWNC+(MIQU2u7Ct9~RJzqbhK&Logwf
z(($Ox(eEhM8B}6JxkR*Bp9;JDk#s@d_md*5VA5j2B7NCEa=JsSFvbmIb>k<$mAkX$
z$0T(*+8zGkk2%B<(Ho;0j_9;s6LOd{2nMI4j#IMHeetG9Clx5r0zg_TCjU@uR)grk
zYPoMwnTs27Jvdc7`!!8Xot~V?m>zyU%wWkuL4CYwxVD44+rEqtP8%C2AgFybDqo7K
za$6+40G)kd13b=|k-!PX8U1M}jJ~5BbA{eGF1%x2g6Y?0U0v%(MR4Roh~uJ<T;<BX
zbd{705`yaA+*K=26<d|>Q`+4A1o(_ljW?o!lB${}N4a;8L*^y&srD3pD!|r_8@LnG
z{ibX|0y+x;AMk$TDevW<B<sZxCvZm!0}I2@4KIG##(JXXwKXKOhNO9(cM%;pq<`<e
z9=hAy8|uW|Za;}`G+d&YRuW8<j{@BJ1*@wVbO-S+9&sHe&LTJ9579Y@67OD@aAU%G
zZHu(>wc&7*@x9>9&2bLkUi@BeJyiMg8#kUyEao?~19>6$uCwD&6n1oAQrg{9b=p1x
zIAk#teFe)VAwQe#={(1cUH69739<Sjc?VtkP%o+=b4IS`<PvJgxnO?=OIvhW7xa>^
zy@XANP_ewe*hZdmK1dZ9yk8KdDv$gdX$B$F3Q;M<WZU_)7Us9AYy8SJ7>m{4+mfYZ
z8a^AfnAQ9OylY#DBq0tH72v4m?n>Jo*5LY1j+4MSOd=eVjD`cZO_jgLuk@W`b#i#E
z;r7imYS;xkLJ~@``uAs8;bWPGG7XxGN8Tu3w}0AY0wObdwd*~)SG!c^-u6eSHB<LU
zEm^FCo)?aob2{?nrmdcGOEbRc!|z>LV8Lucsvmo>%5Gsp$o;__gCp9(4F(tWC<H?{
zI{HFycu#-K8|^{kOEvE*`<V+lDOj{hqF|QaUN$=aUfExUb=PL~(+0IN4>kwSv<rDb
zq0_C9l}nplLJCwK+}VwM>TKg{oaKdCn8vNa_EnpnsVt<VT?20p#@9nu^dSoM|G{`~
z*YjH<qBp4?5Yy}RZaHUUOga>9*Mr1gr+26PWDAU4=)}v^hq-cjF7=+LDP@yj$B<cL
z8YXz<AK&~D%;x~Ti50{vEBK)Br&8AB7wj+gZ;MM1ZkL_P?MF?C{6<P6D+nYLKtE#G
zv9n5)gZtR9Mss%|)&h?9n(rll$;(qO1Lx-Mr=eeWxB=@JATf0E`DGGIKZn<<-waMP
zYG!pRfaL?PL)}y%kThyVRLGyH4YEWNjMutC>I;&V4+r3?T;pQwnS%KvaxfFBWp4A4
zXolsx=ok{U0i|7;fy$9`nC1+}cf<_#nAOcS1mEgM2Y^4oBXbpwkvk+!cwOQAIUeH0
z7KC5BxK~vC%hiN^hMJ6<cennpQS*XTtSL;XsN0d03nuA}1liQFm{8Z;FioAZI2{Dk
zRowvgBLp4*RBJ^#S!x(_oC|2WP>SI`&MM`bW(+9iM43{R1<o^p;EX})_nr`K=;wya
zwTZN)FVf(n$xk_|DPHP#f*eOcs$M3L)MxRD{v`umJ2l}~h<@4m%k0n)U%qN<TG{|@
zXGmVm42ozix;IC$kNvAjGvR|qhrc-9v`as$23kwz4OnNNURcfAT5&le;j`S9YR4yz
z*k#(vs9weZd6x}q9AmP5_P95ywqx7lXFed0!G3dce5rPhUWnZvf0o6`BkAs3SX3EF
zQ4*nn3M;v!0Lj{{yJ+>M>xE_cbzFE5Ox2w@f>Xx}rM18rToFLlQfh_KVv*zx7x7i!
zEEoctC6YrKLY(r+N={%II>eHGL^WH4rA!wGF0;K9vf}LXDO=+Y)Df^0LQ<?q8kBbm
zAE=(2Makyn`@70;YR=o!Q?3lr14-lLj6#Rzs|x4^rvpODQ9(w)Vy_{&?|KQg5DQHM
z>_eCBh5JcVYE4S&u~zi1D=$*NzDg>+c|0>rB{4tfO5vpnCMjk2EgCXmo-l`dcEP5H
zgU>La7JOp=buM;b+6h0sGA_kh_fjFrpixsjn{*+wxs{glp<w<ZcGPV~oR4Jg{J4I_
zjpy&1t#H!;Q4yunZza6mI<TZAy`QY`^(r0raD|)TD!Le(ab&>)4~ka;pyseNitD;f
z(1~=KuQo(US!YPpgv>6{1Z%8f8?;2O0sh(j<ln{yWXAiXHu3#++XvbLH)(%osTn+e
z&%f4{9pa+uWr+6CwA?9B&ZFv%w6oBJqF^CeA-g11d7-_(lrQNJ85L-Z1l;mrR0Hia
z1^+rTk|l)nKa1aM=FhDT^k*u;Xo#qIqR`5*R%xH-V8%{oYAlZ@AKVTxM?^#}Y`CR+
zB2gw%QpGfh`;})Ks^42q+a8T(bT*)pmU~N)xzhlRLs_k3mp*szL44~0jw{(?TgXG)
z%YhTG;u?*ix9=N;5>h@FYevZ;^AOCRUi(H(EJ20S4A2si3U8r=dL7r?NneVxm1Zb?
zUg24YHR^T>M7U)yGmYep{S&d61P8vxlAmU+zf?eLJJEB{GvY{1JZN(SS_HlbvfZhS
zFj2@Lo{ylmC;v$bm|TtLF1)58GKvI;1e<!eTLyL7G(C;U2gU066_#NXRZ4vFg%oJv
zcj|evCGoN*jxC&@?T1W4Vp$5W5c90Uyo$;bG)A!$w1W(-CtzagfpCSVCAyxX*~VaG
zg8Vp*p86|R@Jt`i)Tc}2*N5G2rU+DdPoX_V#xX4at3b5S#n|B`2aQk_*Uvlh9{8QT
zSKMVZ9g#Ynxb1CXaBfu_MB~~SX@TE>Vj3_8OdsC4y(jO0b1Qp3C{r~0BfM~3$AV13
zJt`Cb<|N^tC0Mz$HNjSGgmDk#8Fva8rNX+9X_pTuMK~dK!)+k5y{IEmPAWP^;!D~l
zZ%86~L5lIod`rDXD8D_HPJDm5x}Se8T+5cK166;TnE@v$g=^WBv&Yu=fELF-n;99m
z`Obu3&3|L4=_lD<R|tNt-8g1|YhA7eUt4wN3kR{*wtcmjxFlqG{lC4G7#n2_Lrpd+
zA+njEqkoY_L$X)Vb{FX~iDjz<dVH(r<}m~wjC72)zLZxuj~DNAWSYb9VjgTqF2!Iz
z6sF<G{}P1>z`7>uOz9d<ZbM+K0ri>IG?x;j&`EKW_pk86Q82u$?Ks8}79@H+6`;j*
zFeiq3U>`_`k@BauZj$z9p7ng1p6R$5yKNk;ypV8Gey1pEmkBJBhae>3MSR5Ba25s*
zC4xIM_H>tSc{3HrI?R2+JkX!J$L5AE;o}^Jap2QIY)Rb=KH)+{Cx~?s*Ve#UoaTeq
z+;)ek!~NTXO|>;Dd^%5>uI<j@a)X#5eatu!LG%R8M`#)(Csg><u{Y&>KxuCC)JRa~
z@@Grm1s5BVy7Nv30>n9>Q`bqKH-_<<QKyEDV3&vE#IU_VPZ|KUP?k9DAk~YfMvYST
zd5g+oeV8J9=88%XzQQ>M%2n{&#L1}Tw5e`f5PbZVd=3&!ANvwFCm!$_ozL24%DCeS
znUlE`LMF;vzEmQ=-o(-uU;KUu9XL<H!=AqjSMR}hJwNGm_6Pa-@c!KLuA=Zbe-vzD
z47w-w=c-!wM3nakq~A?Vc<e%Q4@edh76BNOs>flozMiP*637eUp7;sl7R5d(9vMnn
zpJ?2!U$38CIY1DVr9!fL*x%ecVU<7GHT(ft{dKhOmn>SThUNkb-ZiRS#``HTv(r&0
z(l8JkD)(+-UUQixKd~6X>!5hx2~nKCy^0=iW8GR_M|@}9*lu3G=T5kny1G^#5b;El
ztFhN`sq=0~-n7Mve^!lFj(_F<*(q8ryr@y5^xMrug@txt)j>gend7<$?Xg%hIm8aI
z^DDmBW>LKO*1l1`y}csftKJ;3s{O@w)AQ0*TC1I}6|wbGt~RShU9H3ZubT?uqG!;3
zw26htP?}LIE@H?q<ukg~ToN}^@@+NiWbSBqvfp>%-TnE4_<t8SKzvt->EVEYhRFY?
z?Zy9-oc$A68U3fg>c8PJR%>cFZHyuNuGC_3t7s;qP>h$8pjj28%Jl1wFqOx}S!H9O
zLcxuP^8@w6QIxkl?ksFE13^HNR<nCI9G^a17-92b{jLMXAwM%BTgDmQ&dtfe?d9Y7
zpmt)<npVW4M_;)lllmS69Tsh0CrSU^pnzJ>sT*fKLptjU_zgl><U$LACxzDlK=2qz
z5+R${stS#?o9=J@A~f1b%(D3sLnn_oN+8B<Moy>}9>Vg2a<51W(}=TP5Px;(TkDp`
zA+jCABnrT9G%ok%xE#EDM3(5scTWh@ksFzD-b1xw8fVT!hbd>OpGp?r^&RmJeqoa=
zz8@SP|N8o30LCqf3Xy2x{hKNq#WfhcE^7aIxVtMygiruDyfiBpjE7@ST~0vJ($(^y
zHXLqTjg<|&WK@Y)M_{+Bh7CEAXb?V_<Z3p2*rPA?yV;g_bNxx)%I$nf;4g6@bQq2d
zgfijgAjH_ALWX`CQ}y_rH%v0=e)x}|Cz*EWK(Wu78I8eS_q~%P#UG9zx+|9aW)IA^
z2iSS5pWoIXU0Wt!sBJKo@*QuJ{>4(mR&~q`BSava)LqZ)My@tCSB2UY;xC?T#u)k5
z&C8X^<#eJ)BQv&*ABUoEoh&9@waUW}4Mr$PI1UxUpABc0IpF`z;0@sLJrA!Fi>&jx
zpwVXY-zv-q`okae^=AhG^V4!DA*~UXt-HI2moHBzu4HAQa#;ZJ@$~8AQZV;wLE+Ox
zQ${AQsHWYsGRmpQ#TyzV+N0$CJ*pebo4@5Dft{vtQ0Q57+k@?gB^76ryGL1ylU<Ze
zv@N8KQ?P(w*RI$Yo{WT$8>@~XA4qI%7w$j<A|FDO?z;NdEl8DRd=3H)Z2(Etz;<W}
zp_EE=2x}vN(0Mhm5(HO*?WtA!0M7q`Iw+7G*T)5O$PceiMphTHs4k<CRLx8mPOWoO
zM*(YSV_+p07s<}qW_bm`rW@iHAakj6wKsw2Y#7@rS7~G?*+QXngH(g77cwYs97mgQ
ziHyc$NDz0Gfvwl@TbsFS!#W2hy#FPZa>db0Es;}~&#t^2`Z^$@#rv$tYz7F2DV20q
zV^2~Nm<C8cJQ<4M#M#*27E!P*$HUzr7m`qsQT9?^N19ho?E32WZ;Ig#bjs0Gi3rNc
zSad_&kDx4sQkPsS`Bq>cZ~fj6LsFn@Pb?x}@ZB6IGgimZRCjgs(#gR%B+CuB22fx`
z<L7-qM9!p4sj8`$l6H}|VmyGz?)jx$K<yrNvyI5*J-e+hE5_7P0GMcS@fVK1KNi(D
zr;2Kb!*l|gwkTKd+FvxrSz~w`_0fp=uySmaRW{(%l+>!h`E#C${l|E_Pu$cw*ewUw
z2a~SX%usJnA0@l>bV#?2INE8I9}5Dj@t16eo-KEFy{sE+`%(NCT$nsCDz0}lOZB!8
zK<~-n0B&@zd!roB;ns=*nC`Su0+F!-2)G~Go0Y~8`Z)#FOGE#k=tLfm)`=!7go||-
zPpQg{Rt9C2go=jm8vV;Y=WZ@S35MKkt;(X`*6#Kv#p$cSZ~zWdVSu6gaL*sULqzB1
zL_Uv}T8S##!3(49Y43ZRLoU46h0Y94SUWDK?pk8E&q!NvUYU_P8<W=-s#mWHD}}@W
zB=KXhE{35%lXJFi^2u}_M*#QYzN{I=LcvbMdXBV=H0(`J9xzLM6?tEF>4|h*ZY3bu
zj?!U_x2o4`h2{HC^1Q2W(nC&vt@-Mu2q!)^5wDrK5fSyT6|GE|XcY+?ft8wKowgdT
zL8{_&s`qqkqAdfV6Hp9e=C@NBIXm<>GY96u)&-!}NPV^@vB<OZ6KT6%LH1oPHOwL&
zKuC06Ni%_>5492ZyFgz`52^qu604a@%&yiVL^cw6^n*BMFrRzXWzN@uIU^QvK!XiC
zRW)NVQuxUtRV%NrTQ>M5Z8T-7a*oX~FRx%t>wAN>#h)tf4pym~#)BLSiP#ALoSBNN
z%6M)|cC%!?T*;Eg*q_JU>{s3pNQsszW2bzZi$-=J2zS)5IjNhWKPdq;x1(S#Pm&(z
z9tv9K$Psqk0NJnI8nTD@?VPq5HF~M!__9YcJt1)n3NB8ZPJ|*!H{NvLmaga=-r`FU
z<i88-8N2Ee5DBUGuZpU)YT?WK8tHbafI-)O;q%9bW}zaOHxpnnQKc|0%?%SgF!%(3
zYWG(Ha@Fl@h)3+K<(&>-lPaC!BVTaQ$_l#1`v_4=BhsDbPrbXo8%0Sd9j{g-E<i!}
z_kAeUcGUwshBJk0k(dAN9x1#QXO)mxc1!NkeV99|gV8o!q93=~HJF|S{OP|<m1AH;
z9zB;pvp%l=g`@%kX2les>6-HXjEK1#0U8~GcNcSHR&kgQah{zYm!K5_w7rMas*_uS
zVTfu!{ln%U{%;Q4abYOvC;Q$P!5o=O!eFS#(Npk`V~wV;;_NvVC+QXUP<bZp`Nr2x
zE}_qAz_2@*xL*L8vzCjjaPi0qtRKKGa^CP!>(^a#soTSwS2l^;9MbSb8FqYqb!{NL
z>{7&76F!akfohM2z@@9GiH$wDZwW)RcR82l3rc^qI~ar1p&@+n<z`+npP!2EpwA(~
z)ux3@m?|BNP(GTK*3EW$DhmwoNsbKMyZIXT{#S#~<-|X^#Fhkhs`jOvoOAuQiYhKC
z>al+2^W1JmLd=Q8sySt}hcKjY%q$l+^}>2HSrsm4PnIA28jHdwXpd&R@`xKpTS=(h
zhz~T0IN`Xr_w&eK;_i9@4DaLhG3qoaA+q)Z1IDambx{upNMad;i}Id1nz(g>k`%2i
za~vh?YEasv9@JvLtusIUq_6zW*KQ)Ymy!{)n~_g}ejV<yzUt_5x}nT}o;GuWWHcVl
zr*33a`Lfl#c^h{PB?l;)<Qb=De<=-#+I@t#n~lpzr=?4r$fxng1vs8M>alZc^De#6
z9!6K(y<pg~@ofXSHYpIn8tTigYUsSeOhhiB^&YMjNUa=3d0^eG+EhBCCou!sx2AD)
z-M*bfv_^`;ekoFw0D?)qHpk2mB$;F@$*QE6sR$QDwM#Du)Sz-EiMGdpY43r4IV&k-
zA$226p`VUl&|r2T)cEQ_D&%rFf7B?DS>Uw@>(QL+jxcg!x|DpAIfH}xjPby<CsgoU
zS_ai~EbG5Bs95JPaw2=xN<#7F5cqPib#pO?tj;YNmntfFo;LL>4wyj=PRV-SW2MH{
zII0Rz+NOy~6)T(PcCPBm`w|3ptiBbz>jY>bJPm5x7))fWyC71Q?Tb;Hh$k^5wm7QF
zgvF{D$f>K0;2WNz@+08?3`GuD<2oHMo*{-y2E8gUYt&O+ivLh$tV-TeBnh!8Kpn8e
zE7AyvHUGtrs+OSdN-hYa{6R3UL+cHtg5I*DaCnA81PS6p;gfhIcbxEek@!qBl=^z(
zR`3NIUP256fG!Jt66D^YA!Obqj?y8k$2mYnRO^8VH+TVW5l|YQB9js%Zl+3$`xpC8
z^gle3-#XqVs$%EGnPK&4ohh;6h%ixlAQuDi4H0+Z&h{xPm=l6SlW}(8Yds5ICOzC$
z|LoR2O^wXvk*nUOq);LfRHhw*k`J+kl9^05FDA3IaDI;TTJsb=O*Pva)pF<QMh#tC
zL70nqrbLr5|A1-i#fol0G^KaNx<2-0>1J($+VV8ZR7P(TR;%rm1(=t^A}wr_ppr@Y
zSpwA!lL)>2VBha|njk~ibu7-IQ(eqR73SX2BQ(A2?0zo|ed)^jWW9N_y^tx*ewj41
zb+-?!J(Pw!`KaK3D}Q-hWDA-4`^@Kb6RVsD>&(uzmW!EE4SvPhKCh7;W~oKZy-?_5
zV`b_3gqqP_u~&G?_|EU;eUcwXF?H6BPw?jr*_+>6Y(=}Aq*D{MNGNOtpM*BMDmF&6
zyLkLn?X{gZ8qDMA_3f|YYo+{2bJ$v&%G6<>UboP+*?#Z6M1-n#9lbU=k2gBXRue^7
z|7dnlg1Q$wFg^b~|Hj`xejRS3Ok8HZ{`#tM@$F8Z%2pGOIuif1jcq0=dM~+%KccA!
z1MC{mu4vg3)}Fro>Q0oJj?i9KzCyEfDfnHwp6tcTm22uWD(UQ{qmpTZq0_>8N#(h8
zY@TPtv0{6MJ=pW^55)QPUy>0;>o&E*f1)3Wf4sT>-lqGX$%ren-hbTx=VWC1-#G3%
z2kO5@(Y}scDX3_GYe%B34mo4S6Nf^YzfAW+(U^?%9r`7OtNGvRpAVi5XbFG$(~h%>
z@43~R$rGLp{N9t6bF?xcwV=tctr^s;mW``}h3D}bhI9qYkfhjAA9wul*+r$f@Fi*C
z2Iy=8|9I6nhJpl9*mL&3aV<+`ct;8ENKUz;d5)$a+~6ua?nzL1OBq0Zk(kHE(ApGX
zq)V=gQ4(nl{vh2i=4Jj4w?hCp%ssqd?h?}xcSAD9ePo1vQDjsy3Ou@I%Fnrk5%t~`
z7YHMA+(e?7xs2JOh*g=YH2yEBuz64BV!^kHrH;-{E0`#Oi9E`JjT9A2(mfV4OT0Yy
zO2s#<X-|PmC3o87Sz)JVGIrOYwgO~wfyu~}e3(@kC)cDE3GXIAf2qjQ5^DTsk+GyZ
zleSY?=w=_R<mcwk^0(2QqfF_V^oZ7@Zac5SKQ|eZ758P#&VeI^@~E%`!6v&!jL=k7
znxNYv<b+Do6!hAZxCrXQ9Bj>j#UZx7E-FKBM872X%IW=q)Jl6!o7&9b>>l{y2`YQ$
zj(@N|?_ztOik))a<B5$OlnZiYh)ZB*Y~}iz>gZ5pa++-J^wai?-6Q4t3aunN)8Idp
z+O?uzcn`voz8hzE<$1r0cuyv@N;SI0Zh!J+$^rDVDM_Fw4;(WO^<i#9bp~65%ohY$
z;Eo{wTXjY?)?|N{sIy6x@mba2O_!M@z>E3Z$7Atj#wTH)sRTRL8i$&uQJW7GNF1#*
z(W=broL7gXQ*|tmG<=05)*A!LZs(Hu8xs}hN2U!%@1$qyecvR8b@%r->j-2wZ0eis
zYw%WQM)syH>LVTYoGrf@fWyJ-*U3cmX_F<n*w?nm^nfM1YVX?1x}HddCOjhV<41BR
zPaT=CQcQ~Qb`-7oN|=p+O%Gjm0Q32y*AE9q;&$=_>L+yEAELfAoe>Oo&^bdOZvh4z
zY1*eN{-4k?Ga`y>Bp&}Z2e;9jo`2{3wYV?T?#HnsQRoialFvI7GlFUdA9PTEJ+;N$
z2E)V0NIJ0$m!`ovVrd6+qa6YuVsEY;QZ+$*P+-Mr|3PFfb|h6d6V5&7Rh~L{Yv!zm
zCrGq_fu}%3b&yrh{2s<?=C|rIfjnk!J#stEipKO95$GoGA~}PW85$*Vmoak5;A_e#
zmoFK!LlB6lATO1WBAbW99yK@LRPpwGn);7`Q@bm^z-P$CRndRpWWE9;ZySulUwB%j
ze@&ivdS|?dqpjIFV$I49_oNwOil2$SuQP<&48`XF=6cUj6xzHCdFS1`t8i=4->9^|
z9?h1<kvcPmInBAVGQ$iGFmUS78`8YjTK2k<{Kr2+7<Y>W6i~%*WbI<kbWOxI&r%_7
z%pL{MiaFl#Y&#uBmL7Vi9QFdPuwH!@Z1$EWq>ZuG6QTz_33Oa|1QllSzt8>G6#G`^
zwiaZE1?Spb*R=Cw(oRp{K97>#QH;fTL_y?{NiAbk_%`KZhY~=Pc44XBYGF)`1?q>F
zQ&_MstLm){R>hFPN%)V2*JkT$w!l~D@m6ES*ri3lKJ2Qd#2e>4Q`v(h_7i}tcelcs
zCEiqEm)TYvZ;l!3dkrxEig)per?{ieAdhFwblYpNeig=z+Br)<*QyYwM-;$yam-HJ
zaMrzzhfX-LHFbhmn|lz_=GYVK^Vr+gIKRH5owwh3lSOHs4OAh3U{9Uh5HaNeUpKQt
zV$FoIl2N!PE33$8lfkorrZ-M0khU^dY(E67I98f{mTs$E6d$RfRyJ1zf9elZh(3{5
zXAahduXWMnO|4Y~3Us#cdY$NIJttUtah!6&+lvyr9qPKgt2egaaCLu&#w$_tFMPAJ
zDXa;Ju3gtD8c&YDJJ{iFa4v|O6om&u-j~47txI5s#a@eoAnYq)lHh_nmJ#xRptLjO
znKEYB6SA0O0L3w<TAGF__R2xH8HYznB_B^Vw2t}Ut1au=Blw}xBwUS?p?%%H<j_9W
zDrt&-@ICTSY~{W)b9c7qRICO%cj%Y_T<NnM+!np~&fp<AZcfb2qzvW~nM(fFG&GH6
zuSdl!;X2P}j1|9FpiM-vE^O-{Zn}NV6m$RP_}cDUvvHv!0`Or<e!yXNLA(ub!Hpc<
zX=7{!Tya=Yyzh&A=McQF8Fiiq{__)48Z}v|je6ShI!ppBDLv4m_C62Mk*WzJ|GY+T
zp@zCp8dMd5gOAz+g%kx&(=Ne;NPzzOY_ItKueQ5AX+5Luf0L4y|FG1g|LvsY|Eb0q
zIQ=h5>1=hK#LRy)lP|S%)_M)xi_h26Tno}0SW(Rg@DPypWM`3~;7cX_{Bf)Qevm&r
zC{Rf1-Yg$2%YW~>UpDDI9N0nK_@(Bh(DCHJ05qwSx%eqBy+AKP{>cTa4sdmo34U>M
z{uzl%345IKg;1-PAP{T=6kekJStyKj#E%M53PAT9{8$7aGRk-X?3aT$2wm;jptq#s
z{cD~69E1d;VRvy#Vf{M>K|r2Q3X=SopnROA3a7)oAoPTsXop!LiLbhF3FP|<bz*yG
z!3ux<FdGP%o#8VOs(1$_auiw!hDcy@9Z|?0eIWn?*V#}Kcb&ugM@J?(^7srf#}cmE
zNvY_Y*>B-l#4vhOrhLKm_(#AXy$-JfgLhw_k7BdX@%W^?vRdTqmx)4$Vh;<`)+JoW
zU;P32FLR5#I8siokYYP&6`ienw6D0I+@PPe`~z1oHQWr~ySJELB(rhYxQS5^4^{rN
zcB#F1%0@<Ot&*98e_Oc=KXgFC6$ey1yzI5L*x7YJUOm(@z3cE0muI>S9~4CGErLN(
zS{r}(Cl^3jI&C*+OoI)y%sWCsKHJz?)mr}_*4`mlw5VIs-L`Gp*4egg+qP|cpKaT=
zZQHi(I=7<YMciuCe;co{`fGLO8Y5?Be$uB{l#rQVHfnnCqg6u`dq?|=Md}hap%|wW
z%-zhMavJV+G}9s7`xl3A{&ak@0?@2aM9h4A`O(a0CD811co1xH^Xf%be@UiNA#L6i
zkW3k?CF6mZo@5Fm@&FQCE!k8^IHKba8|GVa41n|?tEn~Dx!ccN(p~^8KkYLd8b`Tn
z4UlHf18jLU8(<3QmQ0=g0_7--z}Q3$RwaY%eYmQAWTK>(_`?>ZmXGu+w>EX$)LM2x
z=4FlM$s|nn`D9TErCEpvgaLw9+{H-D?HyrV<sZVSae`C&a~tHaZ9PYN2?sp5CN@AG
zh{!Htbn4hr98xKfzfC$sbxuf{nbo(8BH$+A3AAB|FW7T*E~BG!UHgk$HH<KkI!HbX
z-H=vybT@w>Th<`_EyroNVMR%v*t@S|8N-{^h!(|C0JXYufmlXzs?2ZSU1)I3Z=!~z
zoHx<XDWifq12f^kZyQ$PKJ7bD_p&=L*xV*0|4S2S4*XDnGo4Fk0#0f9+~E_wQ=%kU
zP_KSj9AG0yE}f1=mhzhP3|Qm!VWYK=HGbqF>m8R;jh$1ubX2YM3tgk*11*-E+OR%0
z=t6FnXexa-5_Yd1zDB*ie&npZ;fy1}Lg9q2Qtl?5=&xmS11rSj4MxZO+FOt}<4DM)
z_Gso$7S}s6F15u}$ma$kS87eks@x%#i4EL9le8-31z%Hld{F`J^Jg-7Qzh;^gEKpX
z=kJRJzt^uhlGLO6QRF-|=7FUdD2Cnx_Jt!W_6EcaxZ1B~-u<?o|4VdG^FPCOcK!Ag
zrt?A|nDM5FOD_)ClR*{u00qW$YAC^UBEhRdUg9{F6k2x+XIqYx;M7l8*Qz%km0k6C
zvOr$|l7(7Dq1Cqv4TTc%`-xgc?@KuOn3DH=ULVl(QCPFI8RqQVrl&Gifc?W`N5sxw
zC?ds|u9ld9;X=lSJ_X=L^IQ=Xi*mcl>ipVe@teg~n^qPtH1zfBA5i_bbj1%&E-wyA
zHrKrGh**}v1yQy%F!gT&0vZcoc<y{uXc$B-6{Hs>{}O>w&Z_*v^^e$f?xjF%BQdQy
zfN!|}ewE=U_0qch&!ZWR`#(E8og7{N-|Iv5|6xnj=miup<1LU&IdZu%$Iz!Im~70i
zr)o#YW}Z89pg{gJT3<uV#ctgD-O>Rh<_V8WYWawh0DS82-dzFR<hqVgVivEHnN>Cu
z;DZG{Ho^xz>V<cf7-!5I^Y#+Mdwl$X1;Io!%s%N73sn#{rRW=vcFf>gtOMr{cNqoB
zu*XUyg0zqg21G8WG~D0w>b~pVCO*>Aj9=T0CqXURLva|&aA+__Bz^MYXBJQw3}l%h
zI{D`?qnEBCZ3~?z2*{0hCiGUn8ho%0lD`91ldS8!AN#k^IYyU?z?l;s5}8E_)}b6Z
z9Y7~*K_}eDeg8~OO3{O2bHsUC^juKq_pp_=qB(#}erC_)sv`-Dh>zE52h&_v^Q{Wq
zY7m*{yeaUFv8RWx6}0-=iJ!rKoCE1hV>c`xz2<`ZS>%rY6IzbmXRn<s`Wj0TISxbw
zf;(J3nDXKRMWn6A8pMH~;K?~-ya5r>DEC<)H5!N(=f40)Jis24k@+AAt%+U*h%^YH
z#^%iU`WfgJxnGJ)(>$;y8IGRf0v+d-Y(eBC_~qceEClx}(ThZgXgHajem>5obR3}$
zT~Bv$fpW7ViR2*s9*z>vhXPb|6^GDhxISsnyh~c=+uRUbJ_{Z<&M|<FnrtpnQG>R#
zJ3&-T!cg5`3Ip*J0p($6MQ5gP^(<(kw|USsVgFSeSs7t)e!^Uev7jT>Ig&uLf^qC(
z&5)nw<zKe#Y-PugvmZUN7$NhO=y~_tAhG(rXEHlFkim62CT+|8nM2+d&k_<mjJVw5
zVAh7e>i;T}!Wsdmp|LTNGVD(3l>)K3-Ydue$Gx;z`s+<Z;P~PJ8wpdWk^!tW#MAp_
zDz56939wACmnBXx;vw+pxR$(n!Z!50miknU#TuM)T~dZs4zfHefk<!eYY_U;g}KY5
zh55>%Mar_}Cuwh#9{n##Fc)`1um?=BeSha+G#Rkf0KZIBYX7w#%`Vr?^&}A=>R1y@
z4xQVWrwa<MeaYtcmk2rSRA$;MK)7{|g^r)TM(NOz13ykaJd4iVVhT-hhS`4m=>F!W
zKnc^Te11fcKA%3-CP~iH#pay~RI$)Q7yLY%i+<+lekUDP=XBywnSczBwfIr{vizy}
zI>^54D>WDJsvzGM)~6kjzclnEZCBgOx9Fo&{8`Q|Nnxn_Yg$VE4X`4X6;qE;!C3C9
zlZXM6b8}9|GY}HXD;=L(rBf5SM#Jce>s2==V#{)5>LxKsXaj?8v!&k|G1_-4rn7a5
zQlxbq7BK~kw0b5W=LRQ*uh}67KlC&wGP60`)W0om$dzyN$)&3({rnC0A-8n={$b(%
z<_+&Lmlqms@mCV<vzq7=up4$A#FA%>O}6;l9!`c|xUx{ATEK65JO7gdJog@&xk<0I
zb!OS!kq5N$uS13j+BjDQ)9D1dZ>=r&Q$$%b2d9UW@#v163Sg~FA24{fFiN+>#f6e~
z`c|Mb%~<EeaE^GszYz1D*p(j35P_CS-&n*3v~_U8C=JL5x3~b8=3b`d{C;+me?4+6
z&RRL9K_04ypwvFVMv{a1t!HHxRd-3qAW>r-p!=o;pki@E@n4Pfnf(cbst8noTZm!b
zjJgQP&AzaQr{&FwDJFD2)y#>xvqII0RD2XLACxq0FV<rB!OBV}If08vwnwr>B%Kf4
zM>VgbyT^?=0ZpP#sj-vOr-*_>M^&|`3z%z}ju)GqneIe$|7FaEHz%yI*d38H9N=2<
z*e<J!if>?F1-+JkTe*?ZXgbh`a7*PAVbbPvg|uDm8||hmtH$OF<D1J98o`V5iM7|t
zwsff$rCG37N{N95ljdvCJ&)n%==inqN9(vQY~&H8gkIur5)z@#hX@Jp&7aj;QT7$V
z8IAr`yE<>R#etubs;;halRw>|^_l%9URZEv31J4|@Cf_@*5g3dX$G|&MycDLk2O|L
z#1t)?G5(Y~4{mMKLe;^b)4q5yqw_qdb6KMgp$uVGn%hsSJ@lX{y;f5-EK56XLP<;_
zV6;CAiO}%d#>v=sNR5X9!#knU9wIy54|EPayzcO=GwhB~uMBgrNc>~{UgpySsM>8>
z0tAm@tvgQ}f-G8`n9|fpE`>x28C7FU4{FQTLb^ZLI+I_3o4r{fC7VUx{TX0#x~Yw3
z;$ZM7jgl_=oi<3@KS)gYyV9;MtIbCSY(G%O#{v60%S!@CF5RE`e?AH>&Ys;t7DXd0
zN`5Qz>qx6f$e}!$Qo82m6zHsEv@l5uti2kMXcn{7)$72}gA?>Fr)Uh*DYruJbA31H
zfT^~KX6$1U<}QjwMq}1#r+oQMU|)fyYjnWoM?OCe002W+@WWhySL|ygv0$`1gPysQ
z3GC_<B7m{+j`!6Bi3whP<RjujwuYEq_;@*u4;RizO=wgZ*&z0gcdK1zjXki?0Aa%l
zq`*Eq#l3@uX3IV8$mCr*jH7D@$C1A-q2En$O5PwaONN0wZM~oRbE7L;MJU67Ds>}V
zT*2)7H)e$##d6aTlxLq{r82(?IV6rFk5I=+!j#!{6)FrD+@;FJYe^Yo1OZ14@;27>
zIK7#IRbjDHkefTImZD&LG$}Q_L7v<R_5LoiQ60Z7_(B$cnrxGsyEu&ED!pcglzSDa
z(85PWP1A0(*v6wW8sSLb{22Y1oaw~aWwl>!b0%TGPV!aa5H()ThvoWVjx9{;8v#Yl
zGH%I`n+^jlJqfl1e$ZqWPC)8?o~CYx=yX)b-aM<9pT<H~@Ki|f({q>H-1MwX@JoRd
zFUFp`9<tm{Op=KLVX&;zY}Seu0o1LC7^$Q?O+Y^U8Yz;z>|4GNbM7uxh|n&69Wt9>
z_ZY}(>2;#k7&Tn`&9w1+UJ$0xa7`ipOI&Q5##+C-E|%0ow!|{V1aVmTPxO-XZSUF*
zr%>H`32$s8EMu%`fnLVk5#3v(PqHoi;WG9tJ5gY1PZ5Rhjm14sw>VoFudwR>zq!$y
z8k>^P;QydU|HFmT+QRVvJu?-n|LeaJMfjPi<ygcdW&pb?N@ug>7OFc))Yk_fw^)o8
z6$kGS6~{U^9!+}db$h)b$sUs0TG6w<-sb&$x!TF@tj4lP5WwIWvc7h3+_`*~o%J%K
z9~&q%Mw-{>#ZR!n`H{hu{h)ju;5d)(xlO{PA~6<4#@bbA1?CTDHH3pjx=3WPw~%fF
zJDemn%&V(mTgk)~{DDwvsK*yaa7-jaacCPwYB1y_eX0~9mR0A^vPXWOg2R!#!F&a2
z3sfM8#f`Tgw^_3ud^rQm-vf4os++ghk3BUdlNw+FV@V_BHl0jvM0heXbXt1kh)Yb{
z{-=@qkOyNV4&4UdcTlHvP-VrAvh!Nsu2}Nb_uVU{CGH~KG}ImHpcQaI|0~PgyydzV
z8uDqma(9st!aNI=l6FyCm`3mY+4^*Ol@w<GRJqBy)`iX{q52bnH0k!W-Lo!XKcbMo
zBC-JD#&Yu4>}^<es-Bb7bq@)wNnaw-@LecAeq5io8SKQGu?xwA$|njwxX#_2an*i+
zV1LM)uh~|AS%<t!rs#?|SWr`fifO4PL5Qy-^r=|mlT2COH0G0?j0WT-RCg)z`}_TE
z3M&@<q?r>~ip8{resy@_a(^I$-gNMu^~^UP-Z7#&+#%SP%_;3JstZYgB*({;B`SO3
zo9sRH7R|QLb$>m>QHsktpJUfA!7k0#;?pY?C1!CtaRfC+Owi}79e8EQ*FyH#GOYRj
z+PsLsgdyHP5m})FB%wL@;js+{MJZ<_61-q(su{@BZtMaoZUd;U`YK@OP&bF-7+08c
z3Ni)-6EHZ*h~<}L*#-^5-)--0@tOK7QDt%sQYjE*D#b!7D7YH<Z!v`lI;hWQ;Uy%%
z+K(obRD|PSEh@Fx19w+xwj1(<h95EUOji6K3*Vly<13b;hEQ_FZR<oeq=vmWuHcgr
zhpMK2ba`&D??tIu*{+^mI3tV&>}o%<+TDzxkmg8AR{ej;>};C_tRaYC=!P0JzwolW
z2uDDifgqFOS9nk8Sd4*7cGa6M(9F@3uof6I)9u*Z7;^j(G=Fmt`h&T)7~f=`p{g!l
zs{p4{hJyL=K?%x1VOJQEAYcG}VJb8~>1pyJRTEWUj_#pkfGIC2fN?JLAPTeA;|5ll
zwtR=IG2hKL8^@^(RIfH2x395yR&1K7=vxM}HbN=wydSvX)V~1jX?X7XYduLH?&5pn
znQn0RAOKkp_G@+eGHu;xqv3KvtT+$$`bTtxlr>Lv{J&2N&F$M{8T^)}0j35~IJYi$
z<%B^2r6M$;-8=gqFrlmll9>IOkqrfv#)}NV00mDO#R82{U6yNHhLK|xJyWGaN*_m-
z?lv>%shpVxnaN9y`2?C6G|8u(M?^5TS!#xVqAgwia%PTE#87tX;Au(ufB@;oR&l`t
zUQJk^A6>7LO?F#t*aNl^1x#E<R@*@39UFONK8{XST<NI~+~TKCw5zHs7M!SN{Ob9(
zT7h0n{vyS4Z9j-lc#rT)W}!Ja4^J9cj@m2Kk6&ApeDDQy^5S^i5rxm4#=8@?IG`L9
zBd-u+mjLrZ4)}xFAA?{HY<Z!aNJU591^T;*iRsQf8jF~ZN*d{H6Aaa_1>UxNG@?pK
zt)pu$_4HlMEaJg75w($<MWkXWU_0j4EGfq`MeGXdlcuprowl%OqZ-VmQ)E`r8AF&+
z{nZdSf<&e#88eYK5DZVpN`#d`dbbXoD$9q0QvaspjyNHPuCehq<|k_!!0*qQh~Auw
zQOUW&bLojk<<3&?<IqLVo(oG$Za@lv?Q`u~1E^!O=(1*cF2`26GYNo#rX}X$3^*6V
z@_WYma0ZpuPw%TbG^(x<En>3}5#VoD!+E2seAe@PUO@FAH+BSgw8nmXe>5YV8w^NM
zJPkcZ!Yhk_zplpj6n!dxO~(;<+7?an{*~poPlfi4?+DN8B09YgVx-wH$sT2UOrZ4d
zlW0ra4)IYcCz!*$zA4v}or5a9*zPz`K4xu@BV4dG-#fz@Q66wvC0N7b-W8EQ5CNX{
zHT$%8Q*KW><Fpc%VJR)%51JA+38v2g?5)G<3m+*Boq@bd5OJf2h^E030ydY;TNsZR
zNg+yigk#}lZ!)i>+*aA-xrcn3S~Ai-R=}7b3Pbz}0`3ZeLje-l<d;5RI-YnA^|eXG
z);ALaTyMy6pDM}FtWZTS`iM^WghM07k4L3QPF<s5#~Yd;7@`F`%}lIxx`N?L8TrXv
zY~stzM8i@2R~1Ow#<u+=Ryf}0xriTYYgPg!*Nbuj>Wx&^5e@iaOm^hX=a0H?4cLG?
zk*coXbBfqt<)n~>D<*H!DCt)&IBc3Cp9h8aIGA}p*2Opq{qETQuOG~AG-%kKX{DBK
zdV}x3s}uO|j~!b7V1rfvp8p{2{{KPl-o&5-r5KZ=qYIa#nOT$yWl*A))SrUkfG$HG
zk)8o;m}^2uPw6j$j@%<lDOMSPrKJL5nv6aa;O;i2`@ewQ5>J}cA)o*NlJNiW&Hqc8
z*87ie#1u6HyG=HP?;AaVBE18m#zP?NITzeK@h0M-1a1jgY#7jd@uq1JG?fHNOO*H9
z&O&3c7tQrabTOjc!~6T2dlv6aV!QF+)2?V%x$(hJWliJ3XJYzEfds@+@*I4`i#EiW
zCX;%~VaMX}v+qwmKMyy~j~HQU*{{G;0}j$g#h*cBnJURz<8rW}2__^0{sez&UEX_V
z0O2uKRLEIW8qH%$`Uu;3<7WiU(KNH^p~fHocrT3vmoCEgr6NTfk0(ir1_Vs<FRcM+
z8DUwZb~+}+Q%Lez!CDv(p~ZL-2ic>bSOZ6x#VA<Ce&87vW2My+UGdi2<SI#hsgQ+Y
zcYp+vJt-usq3R~OrQ5;%$Hzzh0lef1um){7tGT-M8U5l_OlkZVPdnipW0i?<e92Nl
zI90zET~-(&?m&FFF=14W1?(PDHRl7*V6XsugiSZ|@GrX|AQl}2KQJwb(y2$xDSwmy
z>TMi-x8{DmdK5_^_j%-KyvlU?GP}@a+=Vkk=Wumc-xUL0g7UfTI;u~6pN&sLpLVY;
zb*>UIJPA?Q^F%&TPY|)k0;a^ID_Gvu8xwoz7Tdf1q+???o62&lF$mFdXS>#mZ+yzu
zF9Vz;&AMBk9F7Y(Ih}yg$<&Bt4t%aQ$0G{B^axK8SI;UT4i!+nKq;8Zb_a)%q<K`z
zb7Qd|eFfhm*Nq%5!M0r_FsvEm{;&v>buUjB*O<wT^RF%U8N}f#My4)+L&7*uM3uwS
zm|*T1n&1l=av1<_6ORjD0T{HG4HBwSM5UJt*ws)%|2kFa$k?Nt5vF=Vytl0$>#-%W
z*K6&Kb!o6PL=bc3YYdEU@L<>ml^-fTsG@4L)#v}sSY+6c%SiOAZd)KPnnv@D=g<mN
zQY6pYp8`iWLdJ@@;I_Um6AYxSCtWS%!u69>m9obbVWx15i;XWr1FViS*@G*@eR~LW
ze>{IGetp<?|6Ucn#|JjIF4+k#2XMREi0_ZVn&Q9<4M-tCBMP7)YbF7SR=P1;;mtmj
zl~==Huq8?*AP?jsFy%b)ln>4=e4pwUAEC<@6vc$#WR5zpNqDsDpi+!BBXm#A8Nkx%
zG+?LRar})!je|M1eP|&YU`BpV#3{Mq?WawK7Q9DvTAd4C3BDQ76gnn=UqK>k*jK(!
zbgOGg?kq6k%d6J84c9v0xeKB3usYP)@?C1XVmox0T_gG1MYgGZTV!6U5ngJjr&Xhd
zoS>RPxoA+8=W<rEiHdLPEz}4b+!uOabob{sl#9mE?i}u$1V7(s!O+K;+TEH(pZ%#P
z;DAyf?RktHw@+hlXa5}_nv*x&zheb%W5Lu-U4$~{uE;;R2+3KXKc=ze_(I+8(!MP^
zVhzLD$UbyBcsu3lPlC;E)Lz>_wKGEbrB}?0Oy8ep<aDFUFhpzxLRssxSRBbcp{y2@
zftWy#wXM?PVE&}Fp~^`~T;0-75<=L%0o}tL%=Giv$yFH66T>j!W-)f>=}>si7&Cmc
z&_aJzNGfORcBMDg{eB7lG!WGGa1pRxF^IDsn?h3~zngANt)v8-Ur|tWq#p2&HW~EM
zv(t3!rH|EZZ0Fw)iq7KNe2fX6n2VkQ5&ufNHnNg>4q4=P-p5iKAX?Id>=o`;TkhYa
zQCo{}-;FI{afRc!cJG<-4C*HZ#a&5qd5>qjmbWhEr*`nrKaap;TQ>La0cP8Q=)1GJ
z(47<gj?fwh<OWJH4O54#ZTBU6d_8BocigB^x^hPwTQBL+N-f<d`@Zt0a*9RYJFmIE
z*#xEP2#=Hjxu8==7QlRbUxsa8ObmxU5BG(Tg}YDiZ>`Y!oovCL{Bytd8&@R)7A3vb
zuMzO1VV+~-XF|8duk`=@@5BrhMU40_qrJ}lKRn~z{{zjWTI>I#nVgtvOQam9NqZ@k
z-bWKLb2f8vl2fMdY;V~UASKSplSuieZp;3DUIXp@p;U<c?oSOLzG+-j19&pIjeZ)V
zfXF58*%5bia&d8SaB}$u*09F#fJo=dl^YwSc#GjogfVJ|Bw{2Gnk8n=A{dK?MB`y{
z1Bi}a4gNEQK1Eu8+Ymm6gDnT20LSZX0-@&u9{lwud_0vGnJ=CM4d#99zknt@qH9Tm
zf)Z_VS^C(XSs!r3f9TjF+YOBVax9VeD=HF{@Z<3kQ@;f!N3I)lH<UP0dyoZk0NK)^
zGaXE-KLDJF1xseNCNQD2rloam+ambG3AzUnXzE=^q={zti`w!K^m70C#D2x4cg1{{
z5KjXSn$~$aLwzNU^1jgFns=h$>A|tqJvPMvOzTHV(?mHb36k5@`&Q>e;vk}#7$k2w
zb$>P_y6Bu{!qYokTQ`ZDB1KpjBkc?iCB$$>{e+`K#sEi)<dOJW+;afb7aTVKMI5nq
z%ZS{-4I`B|a-IHME4SipP@CQqFyb1xmX`g6aL(g0`@>Cqhs=m6#(Vx%;h%ECt+O>=
z{MW(*n0Qrk*tOGc=4XT0{oPt_^wnhCClJ~D<^moMl?i4DkUJx#K-?ED|I!K*@^?@j
zf9G3!_yT}DeER(fYqT1X8<hM4J$~sMrx?qgSCMtdKG;%rh}5l2%?=ueX8{9pkl4UV
zLS$=ftHoD`{{(|iTB24q%yUb3?@G)Q1EIkjaL@!V=?aCUJzdP-1Ex(&C&H@v;|7)w
zL9u%(kLM;;2sglIMJl*zLnL7zV(P*trlUr5)NYICtVuU+DN1AJ84g4VMtp@Ag@^ub
z)%bYcWnCaf5()%}!>%-Wq+YH=RV&I`xod}Z;%5l1LvrBaOMmAY`6x7NjNK0Utu&Vm
zIR<4C`gOHpXmvFrtQ^$;av~Uyvp^Dp)WWrlKbhp@Qi$q-dSVcd<TFYDRZSDxu}zi+
zbW}C4Tk~r2Q-wCtqPJ;?KK&W{zD4#;<gVFYtN2rt1e~cmK~MInnh@pD8yck@CHGu+
z;!Z}u!8&jkA4R5pyRV|;g-gBE_+=64)7JzhFlgb@(X+(98ra)J)NUdn#8_8)uVULz
z4AjlP5dwH?7gh1CbKjdgL*uTTEUGkUwB=KCfhWZ|KHO&JTm|C2DQEQVAm&#$>yz1+
z_JZXcT_Lvv)V*A$50LdWC0LU+N+sVipN(hTg6d|M6=$x|g|eJtyU6_Wdl1kZ+)@gx
zOj|d$U%4^K9F|(m8mdyMg59g2d3A+4cGIN^a$hL1GKG4vUb73!d1|#*HPh=lR<EAj
zBL9Pz;9XEnYZ@wQ?#Pk8UTR&BuHiv-uB2t@94URdqa=IMoBNxgKI1}{&GQMaq<v~R
zd}_5la0-2WpsCvUxo<&H70A_-_A}B)dec&+R<d4undV91`JyRMrB>=PQdy-+A)T0w
zQ%pGz$KMf>3rc94?o@x6(o&C#^Ao7lWt!8Ke903!IY_sfL}o6Iid0WW3X6qH9WSzi
z^<yx~+H>RDwTv8yDMKdwc=9Y=efS6-WD$VAlx@k4Czd){H}%Y+O9iWgE`LZZn2BI%
z))E3SkxLKE*gW)}&1yUxB7IN|CzU50LXT2Bn25e>7_ueQbCd^ue09nUF=YxD0B78G
z@w2tEKQ5>@$R7U+{1B0bC#d%hz=J0mZROurGOO!I54cB!a_zCEBh8T;4B>eoKtGHT
zRl7#B`-mgXXP01|RWi(hEF?Arb%ZOz<wI~i4%<IPec$ycv1q3~^*JkExr{9VX2ZrL
zgJWwk^VPdV2-^zfc@~B`D+ut|6q*q{K|BDE6WWcZc+?T$>Pz|tl51%B%k5a6cD3%n
z^U0vSJQ;8`Tt%>c*S&@1M4FD|;$faYtGMO8FK;XImE^oir_LIOy<?|xh8GiUF+{$W
z=obY;?{vP~8bUR}C{<FWqX0Mbc_~H$(niyZBwMeu0sMks1_;dqBI^o-*96pz^lt{z
ze*D#UFT@VTTWtyqmqGA~Cn$lB!gB!jLGLt%19d{CLpDWx<Uj`b>*0;5fbe(AAu=Gp
zUD*$q(LY6N5|$>XA)x1|3G_F}rRJlp%I9Id=5J}{I+4-6(hdPxUB7t*0eS{^)4bSS
z#rx1s1?yM|x`w48@)6~t3xLCTfq0T7I8bUR@2R8#O$=4GlgtXa*OCOjZ$>PiR^z*U
zq7ZNrGl)JPx%UkT_cFb+gUk#!3-DArZ0YM9usE5bVi6UmjRJ1gs|=@9WgGF_*7{cS
zApO_4DsN50dX76ce6ZqL9rn)dCiCT?F-Jp(%z;b1&LFzGb0r>WiKa+2spxsn_^HiX
zlCl0&&ij@|n=PI5-iZP4BZ?irf8H)xJ_f=ui!0nC{PzA4jM>c}ieQ`&aUHO@Xd1$k
zd$eq}tZdqQ?dk%4Td&~79z}4(mdz`|RiAXu(&G@%Qscoa`VnP@v`%e9U-=G8D+63f
z5`$#|W?02%P=<zwI}r$y2p*3pkfRS(ClvKakP-o7ps%u0j`+-EeN6tEJSma|q1tJA
zu9VO92JoKOs_~jgoCn9d>tyK_5g<|K1ujx=l*(8A4I6?YL|_XY1aQR?cufNfw<RRZ
z#Vr93)y9#^XuL#v<eyeWHxwEH(-M9+$70<~jS6<t@L7F%emp!96uShV%b?c6*$!S|
z1%!00?2mMy1sr0NTCEZpJ=Kd7?Ph|#tpr^e9cX=-KKkiNHc#3B7#&{=-Wnu0i`@Jb
zEWPJ^L^K|_%3>WL3V+VBL-0ImHoO2|EefMNX2giR49DCEEu9X2kKj<N8Y<F6+r<kA
zCUZ@KO4`79g{wYGCe#WF;lg#BwnoA~DwJuI5YmQucdnD#aLxED0UxsjeAMCXzK3q&
zt#g(I?e|GD9>=a|;{<%KE=`A{B<vOE5_}7Hrcq4#LWbbzvX51w@eEenjCyQo5z(6_
zNZ;)k(wcxYeAysesg91mvRvif-iqZn?4&Kl?v*A!uPwN@QI}jNWYqe;BYCsSX=q#&
z^QZ!~lhgaa9gnfls?$X8QxG~>4dEPKOWDS*2g+yl(U~l5K`+2ToOVxJ$rt%7ntv3i
zS1Xhahg@3>$}?C0Xi|{j0#|vN7p`;b4PL3PK2^+-YG*zqb<O{sq~J3A1Atdh4=n(d
zS>pKU|1F&V@Bd74x2Y9GZNV&&0K5NHk_9Gd8{S@WfX=DZt9%s1Pr>n5-bJZ7|3OOt
z&v*ROb7vXb@Db%!=@EM-;JKirT&~}Si_?(^zUgVbrZ5i91sz3f&2yho1ir(e5&dYB
ztZ~osfQ~;%$=e{8uZNrm{6d5&HKf-!W1jMT`zC)HWCqk&=fO-ezOJ(kScF$Zw?PaG
zzL$M|d8lK8cmFjeR)JZMAsrn6miQ--_4?-USq*B<F8EJOE9KVtz=!^{EO;ivSRv?-
z{OeZ>|9p>(JUR}SUC?t7YqRO#_#5BKx8axErSp`DsQ>l|d&IYkfNd^81Da$Wdd4)$
zTggU-3Xyy8O-+jqL4nqqxXDi0i=rtvbW5o*HqfUUxL!qxRM*WarCj{xW~*^*!XI3X
zqkSI6(c42Ws}77_d@W{asAfWORQ5mPIf7z^k?nXn(j*FIa0IMnPdF5AE4!pT_r(a2
z!%_YN@=h>j4i#+?^sce6fsNm5kD5c&EFN>NZcFD-C?3_)>%-pJ&^zDOljI)2yIdKv
zx%h#scPeiwmPkNC5W?*J5A0c*FHuNq3~1PM1#*G5CxK%>owu>iIGWAv55)Jyd!i-)
z0%hBf0!QF?21$Of#Abu|>lCT|mc{=NQd}udZ}?Lx`D<sAo+a01<(y)c*<F`JNlz;c
zBY&0#3l#;Y4JP`P>rzud<c$|6+}}}EOtmHh*DVz&1}z3E((4ok)IP!r6IgRMUst?Y
zu>G|65(jpoY%y~XE5C8tusQZ7t~{Q2VZgIEBJ<i`mwGkEbnG1h+RCjC1%x(y`rN`|
zL&6P!y&VFks~tiqb3)5@tofe=$i}un=p2K<AX+;(eJf~Vec*_-?De1JFp#(U1uCC*
z@qfhX^eaGDr?slx1dbbr3xTouObkSraSQzHL+IOmS=yn;h7o1cQmysHdTU)#oUC3v
zxEsjeiN&4#^T+ZnL-4Atc&4V1Mv1vq9opI!v9MQ_D)l=Z*5>21TA8@$55kh+kh9VD
zF(1!Rv=#1xrM2VL$A>JtFOG3E_5zlNvtLFOC)n^JCjEdWkNENaW~eVy`vD1F8|v*+
zr)mv*-->(cAS|v<R(p*A(>zM*ZjGPDTc}*iH98=t{F&?MyTxfy1SxjE)R9;n?^=Bp
zkc4hSB`mwRA4dI!jxB|hSXJo~swz60Ql;Vy%GfRe$)hx17)~M9RWl(DMp^v)1^n;(
zR)}g3CB?ti@rHk`<NrYo{NI|I^}pP;`Tr|--Ti;ON;!J<hw#nS2}f()#w9CHK{WGl
z^pVNP=T<fBxUeDvNLG<^fO$C0Nx%P?=JW(2;}WGx-gi-T>Q}s<G<DEAE<60-qTZe8
z_m<UrC)dxNct7s&KN<bjlZvyMeP;c?<AR`r($($pJ{V+>Qx*ZioJrDG>PuoGMOH{*
zG$}NJG%<exOv)vuP_*a5%-Z+XP4M^FbNb2FgeFjp6BF>7V@bJ(A%S05jkQ1>pa^%Z
zlQ_hM!078Wt&ZC>v?VZ#`qHTQ_W_1my%a-!<BL?;9K>dpoFZpQW<e~Y49kVPrj(}~
zy8Zd*JDL@>JiJ_<A08G?&w`RAa-)`0G@Mg97xgM-0uR*ecC=kQ0f@<x|AcOC_6DAQ
zJ)B94!F^>erPsq9dH$_x;|FKck9iPcH!P3LH6-g;Zcv|yj<BdRz?TpBF=u<g#pm|B
zk;U(ry9~(Lm)o;kcY-{$Q0f=^cO%wY!au;KRgiQy^<p2OAl^VBtA@pnTD2z^U*{ZR
zz^{}fuB+-rNPIw$ZkkET)CVI7>H`Hl%<c7(DGE0~8?VQmyeSf%7{#F}E>gGu_Hc8p
zhc-AqXsruwmuD8X^W>S&qk$oZC7+!-abFj_ResCO@t6T0#J&sW;e2`(7oBf`qKjoi
zh;{|<h^`q*7>24A5l%+4df}}yMsbu^RKC0W1Dr*ln^0c^zp`}Icso-vC;{!tZ31oJ
ztnxN3x^p@_mi{?5A#0oIu=W^M7#Fqv9TK|seqdyocOi9#!#D{v(EA8Q^TYu<1~)F8
zZW5Q_)_VeEbn5%Yac|(ZUEMFSX^*>L_}tw55l}3xUuE6_aBBZelKLE<oH}z8Rfkto
z5pwjJi60A5p)quhTsxp(q(L4wGIZFV&h@x&%!upj=v+qCiw(HQn4RDBIB7yDf!Bk!
z2HaW|?|DxJt4szJFBhVW*6^a?`T>yy`|P>ZehjHBv4BXBS*}DJjr-@)oD(&|@pC2V
zcn<$knx8nzs89*2g&^k5a*<Y=Qr<NuYe1RSgtqufp*S-Hd3PZMmBe)qf(+|lmF1B|
zMhgzs7@eCZUn2~*a#GGG1MWwhlkr6WE^yn0^5(uSEcX#w`Y3nEfTGZWG(I2UvyYiJ
zu?AYG^h7C5eSVv}*E*};vu6lZ2c|wci9>L!?*~eh3_sbp<SLnXPTN{t8QA@>OYx)(
zQVZ0-p6UaPx|?}r#(*9!L3@RDXQT6RQhy7?DwZi7BT&sN^05`m_WAo$$uRmCgsQS=
z3Gq73kBzfuI^T{V*eFG+ievnDJZPGkDxF=GPTvUxbfUJNLwN1k1%7n@`(A5U^jrGL
zZfI*8iN>Ey6+%>j&P{5v$!HGOG%O9jUQ*ZD8(&vZ-Zmq%i_X^?=3BhTli!VH8S2CP
z(L@?^oauKoT(46j5n)Q_`1^KBu?l{LSpW(dTQad%{RqHnoMxqZxT|qz_CVOxYMQGh
z8JxASz}NR1_T76b%x=AE@q*d<ui4AJ`LJ}YN5A&jTgQ&k^Vu5K5Z3e;82ZfuZJrZA
zTLo%VMoxj0`w7JfeP$sc{MQp(Rxp@}^3*v?q39uYE={ICV<84dIx*(mIj;t5oh$!P
zb_>PXr>>melDtMp_^F!$Sh#3gDw5Z4%u(7^EU~V5Kqi7d74P?<%WhLr6ccJ0S1r{U
zjr<uzH+!*|)8y}05(^gCn-lq6cMiWd(LSq7ye-v1Mkv*pro&;DK$o7J1O!zaae0hT
zty^;KT8pFOMS#Q1mGs0wt1IdWXB%RtP7``qsCP0(=Y@z10^AGe64#5bNV>$LvixCR
z)n_^654DYPGwQo{*;}mwn;TniM(umY-2>;u^ei?GpXMzh2B<x*`zPn(wV-jE;gWrW
z4#``TpA~SbxbdC!UB$x;+lt*@)amy@utD?7j)JQj95JRWWpeto7kr+k3%o6xN>zbZ
z$;zPfug%fbF(Umj4taq_U*?yHy}c4BD=|vgD=NwocA#+$@gjq!`98^%A{=mU=Ilhz
z!W`P#x1_bdQMyd0Afd!>HK7e%b%?1@1!u~A)YcoCvhcTU5kgq>m6v)wJI-u?bz=_b
zV;oheGNw5D5jP?<Tp9{&xoZ~hg*+E-t!2NBaHw@kL{D4{#~fZhmH4{Ph|p`beHs=E
zm@3bXlY$MLRCo-K90+pz)19w&gz=)w$Z|+OM0WdCHPXHAsdR?<fu)~`=Vr^&`Ledo
zC(TjwBKXk>>NK$JHDcCPpJwKC8O;WOifYxspkAI6#k_)6{mY`T6=xQxZ8F5cIyxJ9
zB(7SRY*Oxp)u6MgR-OZ>pVbFEOjxfo-IELPbl-GcRfqPl^bU!AptjlisCj$GmN&5U
zga>U|)@T1x_}$gvZsEM?{8%wWJ;TQ2GCmBp;v;NGX|(fTcp^ILrjlMRbg-`BzPS`6
zoX={~vnmV<nt>APLu!eTOCk9he?ob0^j2UD)NqW@>uIGT{Kt9Y&U*%^D9$BewK3Z{
zVpO7SNI93m;|hOakY;iT<(Chbdb+cyO9U&DPwb6?B2x1r674W{Kru8dZIVcI^EG@5
zt5$>J0yJ;;?Pz3Ixdp_-Cy8rH;n%#Jplc=+mW&A+*^^DVMZ{VHlKY{`Dc-<NUWw<5
zy5pt87SG<x{T6#yU}?JBtae>SyHTZ4>m6qiXCYL8T5$h{b|{RDfrr0jWSA%_<GGFO
zlIK_?<||-qg)^t;EZQM+#HO_GcbB(0EzXbNC?6sPqFx2CrCQ~XCY->Ipi~>T!7j+x
z1z!WvOh6?bRP13E!plj-Kcc(L(S>$(@(+>Np(wH`PJJ!`_u+s7A@&Df8y4G#9YmoF
z2g=BzI$I7Q@g8Jyle~n~7ZpCMQwoH=xu3yjo^!nYa>tzCW(zw$WhTm##1*{U0Mj<7
z|M5Ph6tKrrHYwB3u*rbR5Yce3YoX<{PKr$YUf!sy_C=SdR%2ad+sG|6!?ArQD=^~b
zbg?)cS?PQJyEaUiDIXQA;e5o!DyQ_M)(tE7U=r_lj$X<0Oe*wEaC)tT>dm7uoH32w
zo-vYCdEP(00$T$kMm+k6W;BXDty7Jko@6zD^9}yr$1qgA@g0_bW7rSD|7;Aicl-}|
zoBy(mAB-XXvp@YkwruS){Z8#vp4r)^!i3ghOvQoB+B8<8A_SY$5Z{^_V{1MB&AGvZ
zlpx^W38vSd=Kf~m*_N9e1&4Ly@3=P{4?LHSZ%j%`iZdfG^&<_!BwYy<ja?*vrTNMJ
z2sDrQI~<LVNDC7Y10ZWXLFrX+NQ@BN@DU(KEIUdPF_Mg^fPh><x-bwn?QGQOBRsas
zLFi;BQJ@|ltdvY_3P_$rP!!zr=1eG#fXJ6aKhPKDEtvz%m^7foSdOq8CC-h6XZ@o8
zX&6zk2fsxb@*GoR%jNkJJqihIap(_?7L9~B<Zm{F9G(eTzjr!1Iy*Zn#`xCf;f~UH
zUJry@dV@1P#2tJ+8Z#m%a1=KFH&O2V<xl|uf4WDRMt-CM-7uG4l3K?5Ak^2L#R@G4
zEFq8PVZbPt7M%!2wD>rs4K%y32@E|4!rNX8fpWG~8pO!0e^26ap>C|-e4bEswcV|=
zgNLDJEMPTZ6PROEya{_38-%w`C4h_;gk=~1jxI6-q=%e>v1X=MWLg#~@Y(cJ@L&np
z@hv?|#~RuB@E)^hg~imq?a@h*@^s3Hb(Gtsdb0O&J7CBYzjq3tLlDnnz1Fq4#tzY(
znM001K*mlM(sHM87IQ7sgZ3Vu-+*8qLex4eYf0WkDvhrSvW^vnGZ|D@e9D-&z&Z|V
z5a(>QqkCbHR8^q$VyuXP3JEP?F>1uBkT4aRs{|RyjUs?5ABi-&kP^|d6<<sn!S968
zkpVn>qOsouU%OlV*wkT_!!?8*>Kt=t(tIOv!JT|t$v+7gFwWzS+yxZUBKg?jgG3%o
zdQY|$=pj8zJKo=WAm;Ayu1*MqkK1~ZhlvB3LiXzrU4Yk*jN4Dw9y9H<n1Dq~=y9d#
z$D$>Z35QRBCNMlP5m>(nBgCfR=C3ClJ3Lg8)rHS@O~~g)j3^_{f`RD!zt|7@VT%2m
zp@p`pEIP0T4ALMfI>_%QA42dgb#Kq4Ov}xdmOKjKV^jZ}L$*O{<sVtQwJ_$>h+Cx@
za)~wX>np$=i|-th-E*~;pSb)R7y#Z^L5QEMSj=zYeC;drKo5&dO}$o|$(y4PI4aYr
zmqGBC)gCY;0LnF{-~wgfBaBt^27^nrGe-syD`3&l&wL>zY&ct*&9}56vIO!>k|KP6
z(wF9B+RM^ju8bDxoEW81!Ea#l8@oUE;BG2MO7Jzb(6qTD4(r>~*)2c%+mh^<K9Tt6
zJ>Tcu@dh5z2d8DK!e2g!283InaijB@HU5Iuy}%32U&`5D-BwT0Px9}9A9IHl$OXY&
z%e}7EonD(A%s9Apan9?Y8v_R(0LEtc9hE74JuhHYE0>r)Lf9Co>)rEHRu&!XfE&o}
z;?^C^^cgF6eV99!ErojJo$)jjz+7s;VXQ)yt)6J&@qF{(Wq69ctbjygN3&QB{y|UC
zbX!N*m42kdRq7)$I5({$E4NkP-Qf9G8$Rjvk8cq#1gUp!-I?tZ7%Ac6p^7pM9V&^X
z&M`PcxcYta5=40eOd{m@>^jBeB&z5hg)qyvNWTw3j3gDDSFg}fspUaX2=K6`Mu@5~
zjo>FB^B}5xLv!PzTdFCob?_6}kOB=ZjsR!_vTGRhclup(fJyml3{Wu|nozWe9(~LR
zR2Aj`69nbTj>nL44n2!{n@7k^Yh5<7Mu^B|o8^UhWn<i1l&G|IPlsvb;*9b+jLFJI
z2_Aco;LVp=UGT^YTpk|yJxu~O;&9`X-q)(Jg2gpW@WY9n32s!O*MdA{_HSCj(5|7$
zSqcr6jf*bTnHl#^)r0jGb9>Eycx13qx-8_e0#|MF^;(PIgQ6mTN+?a3S11wuoS`9)
zMaR2P@KLr>amq2UQ(Ua($mylez%aV3P66fHVeH$%$wR$uobUwH0Otw)sKfiryFRbe
zlJxL@4i?Y>4`E4wXAz5u*FG#vJudrb!#w2mBrI2w39|Q)vL_}?oR?_D2HlE<eY-kw
zCTx5%6NZz@7_LuWYW@H{=eh5h=S(&x%GX^3a}O~TQCF@*x4S#!+xw$pQVbhiNFba5
z>`Hf};I_ZOR4CGe8!e!+9GvR*Dxr^sXlNJg5bZbH>%LC~5&og){i9)rKq*#rgJ4;&
z8r4TfVm#)Xr>1QgJ1^prm#yLgeTr9K1r-&gw!t5C9J!oz7+^_PvDbiEX$xZP;1mYT
zOlR+Hk=-G)EUN8`dzKdxqntSrnm1XT=UpvAi_|ZLD`}(CT$XVy!5-!&uIDeMA4Wyt
zLIS(HSTfOp3gU@2tBIz1Ss~TsGh(%RVT+O9lv(YHs@TFL`{rzN0WjizX36?tKKuuR
zZDKGu@I?x+4m-}5FDlT%3OOcbz0I+nlpBn`VmF!_?`?RZ?nIh8n@OB3axXK&^=HM9
znWWYOtoaC+G8ZW8w_I^Ea`SrnEwww5{dh3ExJqig?`X5%Z><gPTfwF`5@38sFBiz>
zkFU3iRkT}9kE6m$B)mE6r2mNe_~~rGomqT1VAaG}so1fXJ<7RrS!67U;OQ}4k`wV+
zC{?L^Jk6X~A!$P)9Orrbu5|0_YE6RA6RZ+F&NT$a=ixA03d7%HtV-RMl%?$jlb;$J
znKvt=S%K|F_pCShWmbht!S1AzA`(PB5}0TtxgmRc#q^A|_1;R@iNu6k`k+mBL)}`F
z!5L<NBHI`1a}`kK=1nAZ*DXbX;C&qs1;NL?S}b9ogv%|Z2zede$+f8kT$ra*PY^xU
z{sK6aw@J^64N%8@!L&8mJE~o<fSsqB<woRcb%VMb8=vvUnLcIYG<6rT1vP$?mS$?u
zTthv$Ut@%+N~~$uO6GB|TS%V)nlY68oENR5+I^dMAblQ$xAhU!3Q%q9J@&z-xD`85
z1xR|PsP936<IhGa&w4)H+L&p*O*udR-)U^Rk(@QxhvoK;+o4A6uwPo`12;I`^fef?
z{;iaO6<Lo?YBGJ-&ITTHJBM<8E!_LeQh84s|68*igqPpZtZc?TeB7o+{<2$k`1M~S
zii_E^@?1Noy0zLJ?jpO~i3D#|*yG|;FOHoWPTXT_%tg1@GwQ7kZyhVHTA)%KX_?XD
zgf8xn4rEaU!S~<PyAb40zyC`a(;EnU-TCK4;QH4V{~tO){<kt_{vV78!&u*L8=?<x
zKanxFmcSzz-tA2x9JicsJ#Q%(`0-7z|I`3M8qwzXA;|&P*`HlIQ#I-rA^ioi+OC)3
zL{rmKFH^JEHeEs&N4#P9sowO`qoQR?{OqQU+A(+8ae|V4^Cj|CnvWDuO3ujzkD){|
zPG}$|;ox8x3&HhB*-U;2i)Wv>P{`~=nk+?8#Sm!%-UO<itx3RFOBul*R1@QU-gpK{
ziB$Qbq?zyFsV{#d&)azpQeW{db42hSY|rGa_wy{|+3_P`Zg!G+5*NTV(7QK4iGE-~
zN5k*Q$DQRe@?BDe5&w-PImHvXhJVzpTts$}E{}{6iPN{Yo0}TU02m1*7GhT?n)p~J
zhm1#OM1VJk;s<oTr$B4T@k^5I4+W<mQ9sl-<nQb>-k~KBBVYHz?#)8kWR_DeDCL=%
z`pjS(Ts_~2E)u$5K}_mjhH+EoiC&f1OXK7Y%4`!r%&fQ?$im5JGRiY&No<nw0}ew<
z1}HM<I5L5w?SsMNdw*)6Iq-UD3@%3?l17jpgY-1hXh-#X;dni809^WRH-HyER3JV+
z6!j*lDtsEp97a(<kkw;-al~E|gM;1Ry^x(PlcF0j0xh?g)mI_O;5H;+wF7-X*y&*y
z82>iF+eyS-T{!yyBrr}QUs+-#CAO%wK&J^GwPD>k5lk+9zr3h$9(xMWB#wc*fVRKJ
zzW#`S!7>3s5Lf=T`zV0`*^TomS`WC>D@~I1=r`R#2!TM3`#Yae*7X5>O6c5vl4fOu
zEUl0GSLkMIL3|(Gm44B?hd|4&m7s{rw%J`(>wVvom3Tm>j=k33Zxz&85Zz(eYze+D
zoWzha{n!5BZjrKSQ-w5t6CqP1!8ifh)Q`W%+Oc4~%x;~pTW$hM(Gss1!5D8v_Loi}
z`}l8Q!-Db+GAyIGsgkY4PX^5PS^?cqBBKd|$m*je_sydpsD?JezxN-6;-&zD8jPWT
zywt1NaV(~?P%0jT;`?A7x#G>Yu^s<rR=50<sl;SE@;+Jvsm#fSDWbZPOE&)=8qa{M
z9qufvCwjE2#+-r)gc0-Vi~H+nP$`9qoSg0-x1DP1>Oe^@_ijSrpIC@6BojnoQ&N_A
zJ>wK>#FIL0MsU<e{fy3gg{-}@)jL%wvNS_>VVj$xgZS1#cFlGJe02rH!h!Ua<gTB_
zA8~HFM%}+{u;@RF1v!HfkH5NCMCqi;gHvY(;ceDL3P<>@61=#Z!+HHW&y4oQcYGWL
zKh<QMc7c(Do(C4H2v4jiU=}$!N`kG*yNLOmvfBrYRg(SKv1F*cuVU4Nh5tk=gT7I=
zf2`fEQYj*d=4%FjnWXg!*A=o89p=^qDSwxdF$PmgNMmv60HBPK9y=j{@2DhnvL@pL
zA{>1L?rOU}gf^kLI;ks20}zKHnX~kPnIV^@AU_`i%Fdq%nk$hjURrL@)CDV!9~M$M
z)SP#1WSlseMk~sal51K<mqtEd1$3sAN}8a)FCrPXxQX`)gzAN(e<<o`P^@0r-#FzI
zF(t=oAIRidW%1nfV|lT&*yN9AN8sBSC?zC089+cYUW%^{0-c8+X$jUDDC@9f7eL*>
zm9}VIU;XQ5H{CPz5W8UvXH|J4UsMduN8nF9@<33$02c?0&wD#8ZTuO<E3e(+pNK!j
z3K&R&W^;R_{CxErv*=&lX)mJ{GcphUGZd5G`>I_v&=tTl@keaR$BRud_p(K(CzA*O
z`~qznCl88|GsqVzRixd27|cyqT(=yF`b>|pY3JPf+5mRkiMUjixYi{J!pyvS+&s!b
zO%Rt7ML|TXe64-DEKFw^e)AX&#=ykP^B^s~UVZhayrpVXTZNR3eha0!%MyZb03B%M
ztox9=yD`OCEk%O0^DeoWh+bA=QxQ(<*f>~bUXvZeGViQBv!i1A<uD5`jo%4iDZK96
zcj}!ji(s^_@n9v;X!Fhj9NFM{8_7h_L!pXql#ay_n>ae{k$Y%t#|<*zw~m>^mR-xk
zxk{;;fb@NoT$oGMV8TeSW`SS~m;5mVuG*QplY{waiOm*Ps+n}x=PG98E|xAv*oKrX
zK$W9u@E}=5g{s*GQSbp_HmE2RI@Re~w$w(9<v<T3M1%w~GwdetLKi?bL!sK1XsV@Y
zh&H`A!cr{u(OMAMiZY*Ie47!1GG#|M?22_v0v7nKsARk}X?sMuCu=4}=AgVG8};Uz
zbn1(7mgYRtV3l#0DBoq+bSTyRocV>^)U3O`d8N~kdK5@+ERm#`J#4mV!|JzzISrz)
z`?BA>E6pr`H6;_`#Vwh!xv^BLp;t~fS*#^5w7)4Kd_`aNPH0pya=Fg(fO{VR5Zr6E
z?S21|ugQ&Z$~=(~4)^wpz(19yBc%I__BcrV&N^MpL0A%u@0xXd)>{@+vCO&8oYzIT
zz@Q~B+U$gq)Ru#EnPMarjJg;9Ab0>Z&R8I6s5^gJk{5E*!mC78FXMp7;~Dj5h2WX=
zYj#Kq=V<$b(UIdY^RAO~2ui|mwXg`Q6EfD)2(03zz~4#ju#14s9*SU%;@|{S+zI#t
zQmjU`nM<!yXqohWe}BW5gY9lGx<=;)6aZ5TmZ5Mg7JcS<-F^ufF+4N3B^v90vGz_u
zq6NW%ZQHhO+qT_(+O}=mwrv}yZQHhOoqm09yoh;oBj(Ob#QUkgU4J_(t1@#fvn6cb
z3s{dZ?sgyqz%l6hZhA_jU@|_4$|&6_{3Qc4c6B}^;5~msaepDZRE>)KurSM^FU&&S
zw>|6lc$xyP%KH$YEe)x4P4LRItsCijFBmaBTUIU<{ze-1&cev!JbjnURLj6oBSIHE
zKczdaa3I6BPSA`dl#LONV`S}ImgcpY`3DM+DH0QlWKdOz0iUzD4O*90MKco@38zJK
zP&S7_aC6yVYh@RWF*>l`1@W{^Zxz`J>1lD7E`7^n{u?P<1fKZat#syOrd9Y>dzF+j
z$kV}pAxa%4bmJvo8Ht+=oy5{iZpa4*=K*4f8m_!I83`Offj?mUk^#`S#`#yIoFXB@
z=z5@nvH4<lOMt-aCgS3r;)-SiD+3P2O2v!~cIGWTp@*4t)J8%^VE*++&J;6+!>K35
z0o>b^yu%-rdsf(=u<i7!+HYNq#kNQxZ|&Z6o-4GoBQ?jZjBvR{0!|%1;t(c}d@f(*
zO*2TUE!dlXz|$%bk51sr#)g~A3T8&JMigX2^R+2Zrb~pBefO35ebWJslwTC)>dsr0
zlAV`s)TDH&V{Vdee%30GSP)B-hd-RfW0GQQYRF8+yf*E<(rDNs-Fz>mBP#VNdrrw#
z06L18wnhgqhm-G9L$(Z-<UA}VW~sOefgP7ATaaqF+s;CHbGPm77G6w&Rxm_Y{qH-B
z6cWWPXJPQ&*|)bNqNZV-Y20?XF4d{I!_-n@<`IQUL3;U_L@HRP(8bE%c3D(>>q6Ku
zPtKCxLIJ>ru$`30+b}$+E;55@tL~fdL8~K;b~DGs>XYWl7D-Ew&u}+2zuGNo1SY}k
ztdW0H;nT=%TA<XkJL%{O49BQSHn<Vz6#M#_CjAg?Tw=Wlr@7cvofO*`eEH4;mKAtW
z&tuO%cFR!ZtXwzDU5qQg*WC}j*QG0-0w=d)aZF^hR}YZ^wFDvjrUQwcY|l0-#x+PL
z&-gnpiUWcAy-+`(!np|rU#iIWW&)`1X<S|ipp>;b%wmH#sHJ@PW3#^$2Fg~=M|s@v
z5+%SWtoQc`e*qBeX6i$D-*E8sb10<&5M;_s3t0PH9pN|sU2K-+WOs<z+LR{S<y!4F
zO7@kvDeG~La#Npl*dFMh;Q32~06H(ZOH)aHrQ9_RRrh}}SafywKuJ%KLIeTF{7q<{
zK(UDtkeV{@FzvwcXsqwHwaI&aw<bilYwj(PPpkFkMW4yF&tit$x=W>QB4%%T2n{dP
z{z5In66NG*KqSsUB6MF{HM;7C<7*1Sx*>=<y~`g;yJrt5cIu)P877=)6+npe9l1~b
zq=2g4x7d4)m();un(^#t$<kmg&=njTgBJO6OjfWC+a*95CLY$|;CO`0;MoHuSt}Dl
zhy7H<5?i0vE(yIjRT1Mj=;lge_jqd#_(;D!KCZ}+52|Q4N?#1CqpEo(rOqa;RM(^2
z6t-nPeZ>AC_&XJ767xnm0h>7=!b0>Ht|t^u<(q^?p^rCFet0{7-u>;~d&|o#<mQhg
zf8aKSw2O;Y^Z;0s%TG|so+>`#N_%z!d{Nuiga!)QYgKW~oe&Be;28_YihU6GD<R^)
z#|aYBT6veTf$kEL{>wPgPlmFnQb1qpVbqQ5<+LS?r)ce^Tl&t>d;~zs4$svt0X>z-
zFxNIkoqwX?*MMlg500aMKfx_|^GY|CQgqS-W|;G5cZJQqGlTEse;q~?-Jw!H!jMT^
zOT?86N9PrW7ULTZYwYwr5jU;p7k4Py`|;Tnf=2KOG~X*m0gqd?6uq~r--Son#MeFZ
ztS`$<c$L2CE77u7x10O>$2?Z63v6w~5GFR7B*}dIR+x`X2gM2*c@dC=J1qjI=E*pB
zHr&&6bRJjs`O*B>N1eLJR(x@4zAAL;b;}P%tPg5CfUCCNvjqTP>S`XYB$6_`Q+e8X
z3j0#@aoC;n$zh#`hmGTMWz{1&B9cg;t8#KK-H*s(Hzr?!QBMKS`<0$&+=yX$Uw4gw
zUPdkly@!yOEJ}8n)zzvBXFmG`mr2v)oZq9=%=Hk}(Y)C$ycsC3)Ym~uf;IYSHCI;b
z^_9N=sN$6Vzc72LJO!!U0NIFBU;qHm--%}8|0O<4M#0#^QP0i7*2v`lon_uiDpA*!
zE?0MPhXw!yIs4t=KbIEOe%nJfgzi&nuyx_Y5G%8w!Y~`f<W%!4f0|#a{c2e?5hEkC
z1`7q%&X-SE@)pOsu>A8d3g@HgPS(Et%R3OCurXYn8viZM*7nZ7uf^@_G(CYE6l3sZ
zs00Dq>D@|40naw()+`_kti7EA;94#dJr!P2g1D43sg|6|0y`^{{+xc6K}7A(>B;%K
z2UDneR^F@0Kjtw(J<52a*UsSbor?KAe=ha}+7vRr3+7F<C^;<Kp!bNUAe2&Q)5ZT3
zIz*g={ecg`-(m76r75h)FYBIpLYueT=B&c^DueydqR4sO<a9ghnK2zbbg+yUUS(A_
z$}<aEv@T}e?(hjZX^M(k2WPFT%E~_j8Lo6KsUcLP-{1u8T{k$4GhMrD@AWdPtHw=k
z!B0NE(8)B>@~YuUN(kBYShBIu+aF)^VaHSv;`_Jz6tJ|j^db4DWHepC0u?8D`xD2K
zL;bPPO1oX>9Bf)<F}=t(PjRYsWvAkiV#ls->rd}Lrtf%7@RRdoWfRNhEAB97Aq^hO
zcXM483i<pC!Mm_waZz&NW9*?v20H`b?pIEOxk}1sU5z@#t?zUQFdpTjWQd1qFPWR4
zag(bW#0oam-aj?e@}gM=yfC?1SMFuibXhmDZ+@E}*&`KzN0E>S>q52=W&W4hX0J4*
zj8kpy5`+^Ev}Thj!K$f4$<PEA(Onfs*1BWS(D0Af*obF7E~s*nouD6oW-1Wk9rQ1G
z48p?+IV4Go41s835{XRD9f87uEXW2$&8*1gl}wWmzQpCn(CSNhH229fnu5n|AUgD!
zp7+r(;c4MH_Y*}$g*c8tXPN)z<r++hBqOwz-lI76wF}%@PzhE`B>pA8a%hy5>NvHR
z!#F`<CVdS4un(}A;)p3Odv1+X5R+lba3@Gu4By9cDUgV~yEYC+eVPTjzC$o<B$GaJ
z|K7dO&nOIBY?;L+MI6?aAcK}P$S`q;*HQ3|OOpJ8k|YbX56LIYNS8nwAclepLu=1P
z4+MqOprSk#rPD~=(O+gSM=+I|<A&2Tt2pIxhM#_05%%I0VkN8BP~1Az-O0zgcZ5)(
zPdqinKpKV_+IbU_N`ur|U@6=ocoe`UJA*}wgS6`tvcH0W(E_>YF;CZ`SUvC&mKSmf
zp!FYmojT>;Fye<`Yn6|u*NnN44{P|WP?PT*UeDzZuW?_~4|UES#>U|@K*66xBhL(A
zUvx>3VB3}Y5V(Pq7K+-dd7_7O`h%;|-QsSSwYpD=jhBeN%=yi;b$n<cQF%+s7i+e-
zZ~g%$-T-y(vtYCQ)Z%ylpt%X2jkb94aDe|GCBgq&1)`Cit?B=T0#Uf1*UbGFO*Qb}
z)*1hE)BjlX{<oNg77ZPzgLWjJ(?3s4s@#1DW7gZ9@a$a`M3CzRsRB@ATN~tQ4WMVb
zM#_oVG+nGeK3$~m(3=8G>pWBb%a$&Awz%i%zGZ;8?J=%i{j1oZ{5rb2x?j%k@4NMD
z4Cy!O9C>m3iXuNoxq*V!Yzgta7$AUC=7GVONisaly<xFqtLa`e$x~q*PZ<CyPRQwm
z=JSK4tk$hw0KMXj*4w<n34!WN4@GR+1Cih`YxsDZlzW8k^RDRj>`xef?OWz&YOpVd
zoP@(uCq#|Vr`^09L-fX!xUu7G!;;<^JjjaF^V##HN#B^%cn02qv_&7;q^^(rKEBh^
z(sYA4B`}|e8g8;AeX`{2idq3PU$JB0d7c8-%<h_0_~JaXE(eJF2VL$l;Zczbu%Egq
zv{A#Z0)6DK+^8z?jD(hCD&4|}W4jKQi~2`WvIZ2AI1{dHGGjtjY7g+X<j7xV2JP=n
zJi&4EYPL8OVtw09)^Pd0fRf7Y-zw+N-1Jc#Lqgsp4)FmI!+BAmX+pwV1xld2G5j#6
zdd=T*iEprf5-G`x6||mExt<!VXmZZGeb2mcqw_*-&J@P3NAzI(_<I7?Ok~K)TiFVG
zGy9(ZaIaVz!LhcYui`LUDXN=`iap&QY`CRF`BD^Djj#v$e}uO#P(cNrfno!Y+>lr@
zXAAmJx!|+8<m&E8jdzn(A1Gjt(?PrtwJXsKr7nL4M$`nGmz0HEi2{RlCaBepdX^&J
zdxaV&`bTuDmJ{$w&sBki@TKE`4jzQuX_Tqyz<iU2Yxk=1+CoMANP+H*pw1QOtjk_1
zy`qbRYlngI7)v%ULxWg$G0*Qrm(KOu<h~q&_YA-oe1wBA;B!Cjp3ba>b(~`}4MM^J
zT_}jq;-ayLB42(6fDTEDU#E^RJiSw0i!`>zfcuqDDz&#e$gaJDUEMp|uZHYfpG-Mx
zAI`^ISK-`{!Ft|JvydG}-WR8HOXIb`4Deh93Q~g(YCw)Klor?2`~hBLhm}tsHDhu)
ziRzkvQYpz<zA<mO6+a|Q^>FJPTXtD-(JnRNRdogGX<->FPT6R&_xW~V>c*8n9d!L<
zEpfQPPrBIR+0Lt-i8xSjW<4$_cu`gLv9`;p2BUSV#sQmotW;Em6IQ|8l3>B8xUK+x
z_&2|pp_wVuC>6mLv${bGuTY>==<|tS*?5DvjONb-+9#Gv57ySJO58j$NArURd`@Ex
z0L5dveIifvpt@{&91Cce9wasu;El8)JX>O1<AG$nP#&Hd!Izb9M`_mdswv`NLw^h_
z>^7+zG;JVYyb9WcV{Z1t;cRMPrPIJvP{uC7MH<~EO|}F2SM$ogcV3nzl?)2kUmt1K
zX6sLyYZ|Wb+LRo-0b1MO1clqa_~BRgJ|CJW=7SQ3MrH)D3}2o}Uad|s!Ido3SGZ&i
zeX0cGRmQwVthT&k>1q+TGE<WK4s?1{!km3oj+x6QDH+Bz+j@yAvb)c<6~q&XX3|oJ
zaJCuE#%SEt)5q!P=C%j8GfGt^a+}0G>nXLI-yxva>(ib444{{XLfDc0G9?=P>S9^t
z3^}(-lzWa#@X4L0jVQEAQmy&**e!L-;83N1wygkXH1q2o6m4mXy=f$<m%wyoFt&Z-
z8Qo1i!q23$2-*D7h^l7NX3N<0f~d;@*x4}bE5+O(>j7@jfU-ZfSmIJsqXD{wXrSwn
zZijU8PPs;TfEOEWaRQ5WB=VMkSbRiI;erO#P2D52p_G0HdmU6PWI5`EhoN%v8_m;;
z8Udz`g_QsLY7~)?`jsCRy_M8svzSO`C}~oZl{~{A#_JOIMNXqhjN7DrzohR628_60
zy4SZpi*F|E<ffRDX98Q4S097=2ovYHj+Z_@O=4OfnP{E?x#*_|VcH)??Uz_-%&>LO
z=8`5W(|ukcNnf>Xr#Re#6jnwoIlpW~<i#>#n$$WGK3v?Ih{d7Qt#J8!pBuRt@9bH2
zReiIus^qIU`){pgmC$+Yj(-A7e+4B~?f(TV@|Z`+dA9A?&mD3<i{l086bM(g$ZNo-
z(<-!4>K2$#Eq=SS+n)?>4x4jv<~W?Ug!U}22i<W0Y5wh4TjFzrOK{BHCNNzn%sDSp
z;Y<M;bTGdzX}$5ZyC3y+qx!0aa|zECMhE@4?90CVb10Ly$$=WDi|hN*lM*tkEwYbx
z3&26t&X;!2goAX}IiyWC6OGoVH7Fioz<B%fk=^pIJ$?e~rKvC_xsyjYZfVtt5nI-m
z_Oi%Om~%0MIolg|x-=<l-#CDm9~;(o1eJV$A3IYS`V@@`dt8R>!qI299N6jNs|s3H
zCtWYoA|$g@?1`WZ6JAf%7)J#`z|OK@qYW*zuiBUDB?GAgh?MF9l{AxwcMAsbCwLAY
z{PF#6rr`a}gRKvG+1@qsh#@i%j%WE+>^Y(nTZk&~{9yIssM#SvyhG-wQ{%Vxt9RTq
zQ%a^AFSY+j>P^L=ln`V><33)YeSfZuI_u5%$|Db=-9b8&Y6EF{Te3m6OT7sfJnMGR
z+Smr14|lv#H7-&1!B@r}Vu4Ht&8s4^b`1sZWUQU6k!f$2Fs1m<!$+tXnhNNTUP(*O
z#sj|u+Cp5x5%GHgtIxTCNqR8p;C5g0pg(;G^~>0k0KcKbQlMXEp513mF`{@9Voq5U
z=))ckSIB5_Dn%g3OeUw=-PxKJQd+oLbBs!tPCgDOf3nLG+A?#D%RbWV*1?t|bM~6}
z@1c~6{N;V!-i6yBRYm68JS0_p>_H#&Xl#v(UV*0AG~0w<jD(UHfIsoAo*rs_FxoZ5
zv+8q1V&@TVZWDH)lWOegp!1~d8B1tfrJeFlv!2q)4_$xZA_tJO=fYAtkiWy{_g~HE
zHfAo(zqcjF|CYG<Khhdw6Vv~`i~Ty)!0vzpA+-0A`lMA!w33cQL$k%JGszr+mJ5mo
zu%NO{$igu4b^&DAl(KWjk3TFJ)-_OiO<C1qJPq-lJ8m=slX*D_DZ8(H=eC(^HLoAG
z51xVmeNnG4#OkPMu5>IUjFe;FQ7otu`7P;U*IW{TG$muyIAH<8bP|DIj?z3W%?#f~
zl{>5-MbItOd(u*v9_F7AT*ybZTu{79{*A|691g@2qToLJks6T#Huo60^=QX!A;KBh
zU{qQ@PWM+l1V06;f0sU-{EH*%S9X55a9MgEh!@0MQ;;c2J-pl<%VYgDHw0R`+@Cv;
zBmtbwu)Tl{8EfWuYs`YRIEjwH7Ol|rhN)+6q$y!BC&mIo-*jahh93lLtan+;oP^os
z3&VzTkSmyA_Y?x}>Jho+BaReGpU57=78NeXd5}+tXxlQ*8yLH~DL!jHtU8Pr&p-fY
z-T9kX5m8xvXDrN-b<VnTSnd&hb^PYeoR$+AWLGQ=0=`UtMq1%yZzKx6(CvV6>6s9J
zY>k-Gi@>q7ot?}aK=K88cUflYh2=~FrY>1VQ$dHt&YliS2d(8L>HV{3*W1z=qX`Qr
zy#;MbPG3dR^zYP$^EOTQ_41@NmMkW*>`7b#`a3hqq<PvnbrLDfaldr8psrkt6x<Mg
zp9~%1VAd-6yWgR)oO-Q*frtUL<hWjbLN44cwiZ-Z3?2jaevs%a&s`>PqsIyJ=I8}P
z60PQHm(IzViX2<zowd&%YwFR9N8^WQ_a;7+*oCRVF^Xwz7-~$u_*I4}K>~F#!9bI{
zV2&Ih5wUPw_pz}FF~X2&8oWN$olH_-dpIODZEME+XQpkBQH;sku1=ewTLR)*9CtBd
zcp@VfM}l$QCa)NBI7McnxNj?4ze;i;r(r*_5G)!3BdoQd{<ob_BlY2XqiHh2n@xA5
zBRpA(B2+sGNSof1WPm94N{|;Y*{;i*PuBY2o<Gde?w_o!AaC8{aq+hY<1e=vyNAIW
zDBSU%dVdcVk6~gos$aH>Uac9vpnCiHtBxvWD=T%gN7QJomBk+9kgLy<9{C2}_z&I?
z#gK}6bgM{T0$=Bst8KM#3e`-NLtQ)Twr3CwcMRDNC0aZUvPKlQUTrYPF`vKwT4Z@>
ztOjXPTQ71%e)iB3_sTt4_nMDy=)UxEFu+CUCEwrHb;Z&_U->P-2TAw$m$VL(Gq+0|
zxZ4Fuf2Z8uFT&AjJ(M1wymZ6ihV>u+=SOZc`azR^|8qxWIW9jb#BWH@{ndE<uLoQH
zM@Voo_}@4@QdBl=vjh-)PN_>{RSYIUaVk<WrAev#(UAI69q=B4SL)fc`sp@w4%*ZF
zZfVfT)pDdnQ(?HxW~Q>4_hM-<`g6+R60aR$({kP3&lj@116<?`6czDC3292+<dk6-
zHBW`8z)M8|sgv^cMNw0JUB2;S_8~MS+Ve1$xr&e<u(I=^eQaSta2yz10P=;Qi8%hy
zuq}n5;-@nGsi-Jt(o)p0(ZW;{mHNSDC@(UnupZ)z3B|!dYvzIafp-`B<#+uA*o_SB
zk40;@v&rS8jV3Y{<7_RaK#!ydHV=+9)Go)JpWi!(96?GU#78qWNn5r!<f|qD_N$F_
z81hkEMfOF`Bf&|2UQSDl?G-#KA1rM8+REdS=rn61<KT8mdV_&>vrRqTFFm<&2*c#3
z#L2f9Wn`uuF>Y2xod2SkidPCrGE4L$8+B+Ui{uC)K0HBXu#Kf6fx7tu@9zP!#GZGa
zedOk0d;uCn<=u5`?P>3HEe4p0n41GF#GpzyfHpJBPQ(BcrpcOFN7@xYRV#I1z9P)1
zNGF+$cX6-~4!PB7=65(`+9fu6t_?0>Q<(?zljo-Mo`UuP+V*s?e_F)@&zU4{(BLP}
zv26RiGTf18wF{nU)LlhfSnuR5B%Fv0L@Fbb65(p{(Ds&zgDBL=8+vuY=Xt<HTSi<_
z(OB~nQ{4^yuHr`bVgwuTRjjZ7S#$igtzRqJUiOD?L*NbFuZK*p0_WyEKyyje(0QiB
zmE294=d)m6;5%p0mbrEKXO1>CYJUaY<fnz6Y-VlMB9v_z;r*d!n7;F)_S51c=|by4
zF0~uC-fpbi1f(S)m9X3n#^xGmyH9?y++d#YHqR6OMYf46C^D}>o0$^ARy;+QZvW{%
zvE2ht>&9&qq+OHPoG(JwZYPvmg~LBQUc?WL^%t?muIZTl_wM_~5-JyW?{MH&8+v4b
zCU@%KcspAfSD=yG<x(HMxB5c@{%GFtkQ7D`>u{f_f$&jwnB#*<Hgc*Q6i2Ue*Z}!l
z+B19iUmBNtU@lXYeo0dC|1C}GKYz3TKWI`~A^(Asl9-v5j*_RPTKL6D1yt%!4F$?z
zFq5*vj!aF<12WCSjLA-o2T)ST(acGo0R0z;lzasMsPeDb;0gNwEH3<SAyP4FoB#1R
z>$Ca?CK26he?u|=ZLO4&U{gj-J;RZdJIbbkz&IjyeJuG;@j<EJziwg82inW1JevFL
z!HoT>0xo=<H-J~|2ci|8ka6f_P2-$*WctV#q99)Y77W01FXEu9<ES(to*5QxzpuAR
zd44^eAE+YCF#UcLly?T22S4}1e%famdKK&~nxHuZlwj@qgN!m86ei6ciFTEC3rb~O
z|DD8fHR(A9dU~oo(I(hCR(b=xUjHf9<Vb8>USz0JqQkx)**Bq}`1qqoQ8L2}dvz$@
zrh^n2(!?R8hlp529AfW#!{XoYQImfA3=t#oEq81ZU|FHiiGWO_6#E5aXyeXYgMQH_
zXV#(J>NF)-QJsSxmxEfNT(X#Z?h$$yd#DYSVQez7?^dFm&}Qam-Cc>obpqkr9)IL$
zsg^whewOGJ2Lw4t5Ue{#o-p5wqFjBB5=dBz@E#2YgV;{Hr$yM&-_*r;&01O_llkIs
z_QJ<Lg}-~*s4H-*X<Fm5yk!zH6a%zD;a=_N5$>^Exq>Txt{ydXP^fq|@3rD4PKSXp
zsKnG1q2}ioq~-1c;8%CKMsqSl)%eey!Psrk6q@eJNpl9>y0hKg3YYLbU{jB|kw;E`
zu<ey0I>`%Wn}I0ZgGKWZ&7pu}vR)ZZ>C+e)7wy&Eo;BU2TR*FhjEG+X3*@^&K3$v_
zdyPkaGMbrict4*ia=Q{AREwoc>zB@o7JH6XMR6<$w4H64g1Vi3+3@$wmwT@1!yu%S
zoLFo$hz=5S-5$Tgv@u)Wz5fjp2=P4Tum8;hYA2rN0H-rIsF(E<%Da1@_A4~+_6+ub
zt&6-X>^44#=L$)+LbCU|0*M}8uo0xad#E1lhP!{mF6&z*sPomQ-OT2+#jE=I6!&Mj
z%*23@>GV9A38-35%t_>n4btGmps(F6RQkCoZ`y(ESZ8p?U374Uy;EFzm-&ETs)nnG
z@t$bHdhaQ?ImUdR5j#mWcA*<mw!-AVIHFXBdm_!~rMwUQVc=kKcoKQ->>OG7MblW9
zUW@_hh$0y<Dc&(A(g?$q!7{II6~-mN<;tf|4|y{q-t2RCuQqWrSCDMx3PE*oIP<-p
zb)B*oiFooonilG;%JfX#RFzZ)(mk@u*B__5e>||JYb?Qh?gj$j!Le&W*q*kl<d-y5
zq>q?=$4wNDoTo~IPTJw_i8&BvlcEZz;xG5POgBD;Zn=78wG+mszfEF`c-ns2%DIQt
zJYe|BNrc!2p!NnLQ!;i!H4k(plJG30agSvUkM9rBFe6XQusw5~g5})xiYX70C(@9r
z@?-A4G<_ckYvk-3lC`y5Q-+|oOxuhp(sas<E;s>UCa(22YFbdOot8YOL^fP?;JroB
zrRjm+XN<)C)|YBeBmdf_m)lx(>;|rDV2d<7Qr>HT%U?$nUO_V1PYbA-tM}|&a!(5O
zI%!C>cRB24e*Wi7=BW*{i}p8*u|WMli&zHs7XLjOw?^IOKd^WIZuA_U{ly->5>d|l
z*=#}yWLFJsk(MmNd@=~6n};>fKob(PTHbHD6BA`FhF!wWrHL+X-09)*e_gm(eGs+k
zAMx`pBzsrGQKv~}WoEs7J|cT;q~nH+VO`PRvOs`o9pUODW%ih(cZyW@ZxS5iP)Ks~
z@y)DdfRY@Lgz`d(0Sr?^AIKbz4(d>F+mwBIG+{MA0FcP>PDIz?;g0I_=>YFY@hSka
z1p1pSrM^fAYl?`Jhb0*c5_{x*sRQB$_`{3fzsY`aF%z4gpNmgZd+iFxBy%&G5*<_L
z6sSpgUI2ZuE{Vv5-i+xl4QYY_Z03-1a)r5ug?cbU%n-Zi&6*)SW^ZN|q&|fSuReY(
zhA6RMkWYNlSr(Z;7T=j=+!8C=0DYbSD4NZHdu%M#fGwpX&m3upbHjaD6l3w2rL%s8
zDYN>zWnnUdY5Q~dQQ6W57b))Ef&~Yr{SFj1U!Ns-AkOKahDqq}*l9vgrFP%)^|aRQ
z<MG!bYxEc6)UFQQjz^na&UYs?aYvNbju~uPPz*YgOt4XgFlxr2JY}HxTszpz`P1+d
zr)?<%A#w-Vz+t$A2HjM$#gH<6sQ-SOt2K-#Y53Rguu3xb8yA4LjPfu>B#=(xr88)3
zb93No-Tuj<_su|?-JXh^N>nXUs=Sy;F6mzRu~UmS%Hq&2(p=-SrVTL8b)r^nGSVAi
z?B8x9yv!L2%J2s>N5l^xr^jZB37g8C<IlqcNE<R)Qx^w6k7uu{=9(|h%ErGrCtRrF
ze4}b5)!|dpW(^H}DIXp>T|l|Xq?W2<=Wt83Waw1Q3s4cHj4prB7iE4CyN6)~W$<N2
zfiuwsPqVs9SuUd1gr%EW{gcfEq{Q)_LR7D`z*R_;KY7|$2I|rp9LXBq1MFl7i#Qg7
zcMWX&op&u6`N}n)9A^PcqCnHZpvKInuE#Ksu}3JYFJvT)h(pq%r9M<PW2Y~0l75VT
zo(}bOjv0CG)}0H!w`&ZU4tSI?=GIsRDirNe0H5*DmDS$2XH}%MAxpt*EN0Gyd;8^;
z)D^YG2aemI2yydNU93E-++})l*-d(c-CB;~7IM!mMlI|{wiQpf<PtzPmnz`T?><f*
z=TaznY({AEP<V$elZx%J+L>ZXzv(h;OJJWz1wZ+zBL?HEzj)9FogP2?g}%y`@FXq+
zk~NDhCa~(gu1eLIOEL{7U5Vs5bja6;hiNpb=%n-neRQN0bJ8aqU9wMak04bwMP*&-
z{(6GWYQI5u4o@K6ZYK=caS$dfu2Z(4r==JzfUwF{_nH~Wye-^KbHpc>vnsqE7%8vS
z;$GKcy3mHI*~HcrZRI_d$@gopp?&%!7)~UNSeV;XT<C&oH>i}XDsl5V!)Kv2&-M-+
z!RQWXJi5w_%_P0C-JEp7p#F5*B5ObLF&{q%oG&o-vc=+j?6cH!+wPSs_Q%$AN_lR0
z@kWFt6KFZVUWGq=QyboYhjqO_hh1iQ$w&2ebZ5_YPsa61HVk(caJRacAlGsEc9(Mf
zBSxmvx)4^pFrNqt^r5A!FB`@~vk+jwAz<g2JLa$&-@hE{Y~Ds*Yp@;!^wN1C9Y!uR
zqp=vPg&y_dHtrgV%D~t3RtKC*{bLkuW|F@>b5&N}fS9i(UPz47k1qlnkf4X44;dRl
zer&)8m?#l>vb;xS6L6QtDA!}>NOUOA99pNPi<w01`2J%(cj}Q>Hxj*q**Z~)I&t{J
z&5MO#@t{})Z7ovL+2;tyarNg1XJgqAHEhGKhx69x!FH9F;&D14ce}33g|gESld1ej
ztLjzup=OYsPUfzh7*|ifD$tJ{IVn1_u%r~G=m5jquIqE#_s#3Od7EJqjsntITUy=I
z_mQlr_g|kqHRZ1~6g1SIwGlU6;!|Hg#*!3EQ-LaE1WWZZ>Q4nbR8%b~C(x41rgyuk
z`;}zs^`@KnMlDi{sD4x5{uBOy8r+MZ_}U!1hYV8L4X1DF>ZmWUlalq72)tc>YO67J
zF??u-r{-=@eL0=eV^|_m=*d=n1=-pm*d$o2cdbaV<9XBbXGA5;$M?gi{^lF182BB>
z8~Xoz7WGID!OH&PSF8E|&(5O%cxW^F?{E>**w>DmY!AJ8Kn`_?6=QnmPo`Mx9S%60
z^V!xVi8(T}_x2P}jqU{!p~1y(n!UepJ_1Ofd=l>SEeB0;5LfiBsNow!K)hx*iL7k0
za~-su84S*k<FvfjTztIm9PJqj%wiV2n2#f$)UPbC=xmxbn(+r8M<h|>a0pJ!g=|x4
zu61xBi7I?BmYMTlnghsb2<0)6!YGclc4|PkZ66_Dc{Jmj-2@H;;{@g6K~n>{QUejl
zZ>+iG1O_reCi$YdIAAF?!Yqe_#Ap(vH%7^kDR6!KzC~^lP<n{*h-a^|?I^`I^T{Mp
zuq85snMV7+`UXI6nD>|m(-_i^=-}X0%a;6rm=8P~@{OCo0nP-&>v;_xAba54+~773
zJF^&)rP=QBG8AwuMVJg%rvjXRVU74BZ-QCwo%zq=muX;3L5gFNP{+@B0Bsx{`GXx0
zX#Gd(IJ1Js|6QrpP(mMWYHr$MFlPdO2N85hYoNrwnsq@%ChrrN`QCNN)tp6|`tmio
zIk;kb@$kc5PTj3Q=4^Oi(3dJ_uAk3GyIld~(ZEPBJTfno@;$0`IB~Ue5Ze@QC*W3i
zSqptAay@ptGnQ#!REukp?FWM(J~P8#S;-l-8lcQE0bYBV>!OX}s6nMG-fx&n-aBQI
zI_0e6(5!qmN?>e@vB2?afd2zF=ZWsGM@&2k7z9*G8yj`V-Wj`uo59&Rbj@Ds=IeCW
z_T#v_Tu=B6{Q2B+*>(gPk`P#fW>Tod*x<g^?ZN&_c+F|j)ai)86fGRubW2ZETE7AC
z*5G!(_}HS43`He>(;9G3#`m}iBo@J6aY-NHMAm}w>9j$ph_o9>DVi_M-NO!-gcY;e
z4QLU!2wR>s%;Pd-k7gX@>DYY0I87swz1ufr0BN35BdlQ7nl8bqfj48uL`Xl5&uz}o
z74n+;-G#fOts(qeJL9oTWj1WSx2V#B#-+L^pbB*_gs7Sn-y~;vx<iNC#vshL(<w;=
z_r#x4*1ALYrq$5Ag-a+UwoVi^zW70dce|z4FzmVLpo;4-b-mhKOhOQV$3RON)Chh{
zcoh4wgF~c;#NqLVpDBY2;?$3ZNSBQSZjkqv1pUu<PnU8#^;I9>i|)P(LA11P4@p>U
zcK-ooXu4^#WBH+G+a9pwpX=AktL$T`16f^}$f&J-?naeUtwi2rPl5dIKNJx422+Z-
zft!f_oIDIII<?lWX$ygfsDcAf<0=8MSi_9o*KLr>?3p&A8X@=cv-tGkq*xS67!Cfw
z<z&jt=$OPT7I7ld(^7D&cZMQ4;N_^hJheE+68rD&MP#jTCOkN(Jb+AX?%w+a;0yCg
z@BG2a`PvuePoHC-_I!!q0ALWhGJo(+7Gp6C**Ax`g2d9h>O!!g``nS_q@M|zRbrXM
z*A{W%y4$v;?bdiPVd>tiq|VLgADm7EGt-S@CvkydS)b^@cFr!Ia@<xf-L^A<1z-XH
z-f5fdWZh(};%EOo5637lP-|6yYEFP_WIO7-c-75XaaLDPIzY3^2u}ZtuppMfK30K9
zhBadAqssDDbutvJT#E^0t!5v`{u)F>SXVbA*6ru=ZW!zXdv*B+Hc9@jGjpab)Gy-m
z_Q5#LciPTRsU(Y2)i-*2T69{HBA5xU2p7x?vcK1>0OcBTe~6=mw+6Pv(=_G89X~zr
zqfb6cO8bM>>T-}GJ-|#uQltMX6zld~<h{<x^FIa>j~yEvV|H|Q(jK9>9hCg3l-`i$
zWP=$_HFfK0z9)P5ghDnhe`a0-BKkQN%g-r%hQ`>3G>cSrrUF-&Van_wRwY&qp_bg}
z>`}n7UI_A_ze0*wx_)3YfCQ}0)KM!$jl$R7G)~~^5`8Eex<q<Y#OeQf0x#QHm#p(+
zy|Oig8AXOe!j(G4kI~-iikp(n$NHVTOsn!%PHFV6=PL&9?Bwv+zV%E4zD4=FZL->R
z=KCbJy*RnEXNa7%Oocq{U7}LANJ2bw-*BUyhf?a2MM`aJn-jRe?4sD^+4xKm#GHW+
zgwm@dL&kw_NUII4W{ZMk6KvtbWvwcEMrcQQwKm^dl9NflK`ajC=vni;jWINUka_1<
z{}DbSSDF9FF+3f^<0F-854$Qnh2eNOiyFuV{#I?O9stBtHwBVP|Ng{<lFci)(wG`$
zWKrWVSrcc4iH%R}e6RTOV%^Da{wLn1vCssSO8z9dehR)nVkb~@j`SE3t&J%Xl{&Al
za1Swxq%a>0&r6TcRpF0*IFJKtsDVzTkdFAMDz*s4%^9ap2ufsW1-!HIOqoCEk=bnQ
zGF$%TC?pi11E~&!5kN;Z3C$TWwG*?Sq@X?=b!A+LE}u!>f#$xPAe^FXIYz_!;KJTp
z?7TK^t-5o5$|018#g)3hHbYUrSx-JE{$8j$2EF%9IID?tWt~7-XG6u~bXmkxDFqq2
zV*TkT@(i1)CQ*G0pO59e>76I!m-5S5vpZ>$gL}<oKA+hO>a2~96AlG@YK>Ug!ei-b
z7`vehisQeD<F7~g2NB?{!Hd+|0IBPXNQ&GE3@e@2)RLfVjqHGI49{wL$7w<VY!($P
z1yen02`B>qB}Eyy_C_kpOFCyZj->7DEgO9$3t(()ao?|Xb!3U!oWlhhoi=Bei7E0w
zAbU6i16Az$w#7|3R!KRhTcE%s%}(1r<@D$7M3PHYe-kt1=$1!;y`ww??FD~4jmAm=
z{lf&ifXVi0TL9CTic3xQ2aEC(rz&T==NswPG{?~;(l4IGigt#zZkzcrT)OA&{*VvW
zzIwVle$3vKSi#wbnkALA&h?y|dx$Bf4u_PA27Wcm1iu$+4y5_$;~}MdK_7Sv|2xji
zx;*d@_*WWhHG9}Inr)qN%4;kqW9DQRlh6*`Us6&N_Yr#XMrbu%$O*2{$LS<~FJ#KF
z=B&cD&az>y28xV;lb6K{bvuDKN#@*<w57|nD8J<wWaMGtLbG`V6RElt@*I`5(H7T|
zBt}}M^?t5`tybD3e<4WLQf(LHTPdz1Il147WE-djH}{W2NkYr~vN*aw*(S)MX7c3Y
z*Lrc=7Imuik~!Qo-AtHQ(X*-BhH_NLHGRB8-GSolaBK?h<&iVQijd~poUiud|2HN1
z=e1I40!<OXK%#L4(KcV0ZQK&tP!;#ILiuc9n=Ca$FvO&v$Av0T^h>aa-8C3Ab#Nu5
zuQ@tkrEk%k?ycUXfw2XAG?2QLP2k|MoZz?i#-ngx#E$5FVd`kNi|gcbB)v!y9Q!ps
zgxp5=>-TOHPJMYSmxX%E6|=KN5$%1`Lh*3N#cacJOx{40@ToP4S>LY$2J^dD7b@rO
ziDQ^~-e`24Y&%tL;Eq$CqtD_}9}Ri#=Ve5s@8TCr+J-BT^1(?7ZyJyX64AKh1aRB{
zh;)Y{XEqk5Y_$aKykID&8A01lC9ag}-vUiVV#8&UlrKhD?g}xoxNuu0jDqBHUKaMZ
zp>G@$&JV355ZP*4?0@%oJy441%Jk5pazNE<g+g|#_GDNMw-lu*VNn-x)=0BB`KmL(
zf#`j|wzOZjDUC8-p5%Oq9#1U41h(OxVTV&jl~{pQ+QIi+LYU?(sI?u$re@aVKl1GB
zu2Si8FUj`tJ&%X^H#yXS;;#OW-WY7d0*OB?u(=?o<UxSyu-EVlxep(cdg+kn8lvnS
z#H_3qwjtA_NMGcHD%(v)l}g+c<%aV%GPVV$*rR)?Iwr1oa{zrW_;u+NU+alyvj-pH
z%ZP5)udwLLa2qHy)xyLa7o3YS2HFcPIIhGuHclf3&}7n(R63V;FwtofF}r%3>cNKq
z{f9KtE`B*A;nS_^@g2IXqTxxkVTS=5C(<g=Y}v{n3u7_ZPRur)Hum#}D=cejqcq-x
z*(x-IzKtI>5ffU?s4+F7h2-GQg4S>=9HUMghn*;PmAFw%q?9o8vCBF;r3FuDQ7=MW
zQ}FV4p!YOiR^2s>F~nE)zL~`MqXT>h;Zm3D^psHIbHfvWsOr{F9VKA0*JZa@AmWUL
zuoF#$`l!G}*-8UaY@J^ss}iXlJY2bnf-(n1W?u5=y9@dD;Nma$Rf=@DW_8X*QKV(D
zV$_yG#L?f8)P?SJHtC3jQ$!nSajkq76jp4hOou^=xVdmuYL_xoqi)%2&c+Z%0{~b>
zV&n$ju7|!eM~L;$&)sEgje|9yS!!!7Bk$JjJG+92pch@-5?L|G`;0dPQdtJOWbtAy
z92t#wSn!|nU`qUeyM=TL>|_NlK%&?bjOi1DE9OeP0_br4Z3NNd+br<{(04VNUM9+B
ze$ePtz^wZw{dyn%q5~`Rv2-U1)5S6Pv*74k5K@c<0a;Sp$itd96CeoDzYQt<aR4r%
zu?qOhJOXMLhL#p!NssEg&Gto8N=;ab3+T{lZDp<ItPv&f<sMjI|Mrd74pD2}$cdX>
zeNV5jrG{E`0>WJU({Ew17RwtSqBf!NSoW_|r^oQzCEtjN3YR6>CSGtSH5c{``h~>X
zOzbIV6PihFs?Xy6xJP1Gdr(~`YqCv?LmpbW)-J_8i0Fg?vQW$AXiGE%g#SJfqW-BC
zZ-5i-2z0z7`s|yo?_J4sSZxExQ?uNWISTpQCNQ86T~1Q=5H$<&I{;zAR8M;Q#*{SZ
z7@5mByw0J~2)DxHN-4<;`NuI3C7?_ID0P|qDl9<iZf1G~o;T@o3m)xv34Y^vj2&C{
z1o<FG`4LQuVo1X+z3ys6M{g|!TD6N@sk&ZoN^pNy)}E!PJ<X6`b&0l#D#N<xd2f3t
zZrkXsSOREC8DqwFBB<TsI1wnt=()l0aRPtJmJ0uKv9W;63;wX9r<1K)OV5_DVZ&$T
zV^IbFutbHV`RiCRmTXwl%_3z`1d*JE8dLLZGHJ__*R>hYg02D`cdfLsYirDw-6i!6
zT5%Rdh0(l`7eY|i^I=F{Q@5<Q&ar9h?Fj<%SjOXreS8D-XP5k<c=)<fd-tttkGq+i
z{2C9e$V+>Bur9zsic>lggz|SCyLpa#hka-CdpG(=xpR#mKv7lV>mYKm8b@GRyFwC<
zV#i`ARJ-&3>5E=<r;E>&<+hUrXbikFen(qsStMPC6fRxl9n(I|o)~#HKUHNe*$o)&
z7`)g()hZk>VIy~?CvEfZsqr5m?i!tY@#?lgLU1QrV^+^h^&$)buDL;d=kEJ|LFrc$
zP3W${0RYId{-52|ZS0Ky`@8xuww2xH*nOAZu$Z9HM5+n*8LsC&ssF`T1%fD-`b&3Y
zVE$Oj5VPLiU~Jv5gLdkQ&MmFj_!!P61R(W=k(v88V>=rUx1QKF!!*vLeJA<qd42sd
zY1Qm>w=oOW>@k`=YB>2jzO2`w*SM&1tJs6lxQN1VwY@-p_3z$0FMKEfgn_JZ9yuty
zdI|`SSqUH+lJZo4f3Ei0B|PRQX^r|7ZzBn<hN^wAvh6@%%|JNwzx7j%@qyrXi)_(?
zw6|>D;Nwt#X$GY5TT&XGR6Lp&eUF#${5|km68**TWA|2!ss^GOM}M?n(TuRkN*Lv}
zJm$I~pRC5INcOTaczF0hlo<t-d4}oLGQ-6Ro*8@P5kwk(UJiFmGG7(YY#+U3!E`wG
z+i1dG@2PfPl7QTgcO$ipNiPGX2cG*QV-&iuEZtM*%<5JdP*Kb2r8ho5rx#p9Zg<Q(
z)pYw8Uq-h>7W+XGn(d(|z=<#Ly+uPQ;qDcoH$=3o5hcboZVnDo*>*ulAU*2dYDc&Q
z2?aV(2(mk=IFHF@Dh)*wjm)%sdVtnQ4hnR60kppeL{QL5V0M^<!91s;sbqlE$|Hin
z0{wyF1Vm4YmZIk=cd~#;Oo$)^FDcZfTZP6yeEN5syaT`u&ZNz<GQ`E}*Ul3IDS;67
z_MEl6K&86n)66`4*C&=u+81_zvvCQ%E{2iyNwicW<fTei2sMUWvJJ%FT6P>nzpi$O
zK?z(V@H4Babb-wL>kA)zbWy6PBJnT>;JPWkbeOdQKvDoNWp1DV5BXq$T~$y!q7pkf
z+&kTW-&Pu>9@mJOLiABX9S>8i54W9Kk9Y(zHp8(BX94riAX3K^-r&0W2?XyIDDl>z
zY?5jQy#OWm&Jdi}lAn&fU5|Y;dwX+Y*A>B<&~prtdT+bS6M<Egf-gZZ&`QQLYl!T+
zgG80I(AbM6<8Hnt7~@~o6>H9G4X3phnxbxel01w03s=-y(#8_PbdR&SR{{?6{pLFo
zpGF42&-9h(#i!$|9;qDsyZV&3`eMI~S@jJC9_R50<>0~%uI0h)Saq{}1^v-MVjKJ6
zrnKgk@=|N|^S)izS3><<m7y+y%Ov&5l@svFN^<-n>#7Nhw~NIp(A)dwctt*Os$h=5
zGJG8Iu8>EJk0*8*M6^D`RdYx5SA(^<(OE2yP!ws?kUF{~pBt^wTXZzt2(p81{P|-`
z+su8Pf7uS6KqJJHW+>Vm=Nn88aO1NcocaY=>WrtL6UC))rByrzrz1cfK;0uCawOFr
z=Y}JR)wo>zg*Xf?vqPk#Yiaa%MWK%us7_~RS1BryRp)1e13vscSle=TTf=V;rc8Oy
zpL(*w@+TN{8?v)RqJn4AdC__I&n=hYTa!AurxrI)^jsK0y}2L+gfLlPfT{?JhxG`H
zrD&70M_4daau5u&bn0V0X2UsE$5&*kR}ugWKHk<!e)#=#UYxWk*aBBC9{Mfk(h+-S
zM>+L&Uu0LEFCmuHxj=1x@GLL1-KCE%k&X`rY`u70eS7cEg}ZhdLBCM(1`O-+!$q`5
zC&q-<zu0iiIZMo;5_z~Q<$|khA%hDSf?d@H78WGKT+)@#B>V7iwJAKJwGkeGLQZBm
zhNc;(p&#Xg%TchP@k^9CJZ^-tFO}sa*YK->%CLexeS%teSk#h%_YhVD*kQzP^M8&o
zP$HSBW+9|PtiTf07chg2x9X)0_+-(d#;=0BSo@C-m#L!^z^|VN-$uIe;?N#3zo$5Q
zorvowQXpRwltJD%a;CS3uaEgbSdw7At{8kPB7X<-dEb@@$+TQjXfo#wRk_7&w80_v
zrd=6V$1Wbg9;uLW1*q5Lio%6Da2D%x;r_{cED4HlV1uVtNH`t}c#%qJO(6t2Xf3g-
zXVfW`pYJlr3<Z3n^i$$;FV~{w3tFGQNaRD;Z`q5IS>}WiuosJ~oCg8+R7`A_qvhK+
zWu*@6BO!E#-$pXtJYQSqKRvs?II#U#l$M$n$sdNQ6)p%7QK_UR`kk@{^EyPg@d|qN
zN?Vi|W@o#Z*JQws1PlYrfz)WLk-RZi6Le2}v+VtN^Y>(XW62sE*BOEAn2lb2>7nb5
zb8@m|{31Pz&W~0R$q<OXSUBEZ$G2z`VVJ@kj}ah&)dXCCpDVwXKPSg`f%Hj{9%){C
zZ5;5yNN#s3>1R)Bfv^ilc}2vf!{u|p;MkZ%mG4xb1x%Y3SpG>|d@o15pv4tz`BP<9
zhp%hEVJcr|mgQDA80&Uegc!ubHp+(`$kB^fOW%q};wz3;26yHnN>HGZFsrUm=0ppv
zWduk$o$nXsB3|h2_2p`miR5bm2|fLaeZC9hi5zvbs~&ckk@2h9<}E@cv<R#0%O2;w
zqMHF!5ADR*0Fh1Z)Q)IM$37(Hkh0mnUCU`~TOMQvAQt2nRNln7UF&SkRKTyu>`W5O
zDyHdxV$ckG)gY~DX8DDh;R40Pr(w|6APCfjZbb=aRdj4aqHHp9SPYlMh!F)gDDsOy
zS{_<?@h9Lw*%fe-tGK@w^}4>1sb;m_|JbIoKw2T?4(|bnZXwXvwaLHNJxR2(33e_-
zBT+Q?0EHJ8y)Vl&b$%FCwkB$avEW@aP&j_*fvz7=!$}~i8oqX+i&or*V;s!^et>~B
zc#_XyU5s<@Q(n+DV4y^p#2{p=DVW3-eEill@KP~z)uW+j2BY^wQB9!SyEqyiR+OBd
zTN{tY8M44un=03u*Lm~<<+~7|Hej0lf=M`al@?zlSqtm>Dp-W*T=(aNLa)eY6pG<3
zu_`E3itw<P8$F^A2lMuWMxM1mOO*r^?$}Y1k9g!D^_}&Ci8lz+w72LpVqCUcUR<m`
zsJTNnucW}&5wsy~8N3uS-VzG-llM~DI*7NX_wVMOqB2$t0|76YT@8nLs{W}+1CXdl
zsCm@aI2BH{L~eR6-V{n$SzDvUB*V2pV?VRZrMx+qQe;0gig2nH#neWWDA}kcvC;C>
zqt&XhUkCn-=4e--cdk3wnuB=S;H#v7$1F`+UT?xmaqQvL&EpLOD%V@+A!P)F*{{zq
zx8|6w+2<ORJzBSFNH}KzRNI*ie0!Ivi$(voGq4uxmfu)o<!DO9u?*1btw96Z2R)^a
zW_s@J$52GT>NF&wH+F6eXHC!#m7j(iR323=Zz0vpBLXfNO|ht7e5&R;t&Q`CwUnb=
z-0T>bA%_^Rxa=>*(r>>iO+=Gx8Md0bdVTsnbCs3?Pc#$g;L4UgO21mNWbEj&OS^pf
zAH>HL^_VA0_tyqB143u*-^eShj(Zk>IKz5*Z_UdjdQ>iS<h>ClOYeo9y==7yhJqXg
z;DaG#OHov%%iuMunVTdl*Xd?pm8J}7AB|b{16O?7(LnEJf|^Hdq=Kf4wHitGPAcYQ
zQ?thyys;IeCa3YN!~t!j&Eai31sT=!nFxv9anCNY)8IT5q{}OT9KWkXxo)MyuNx1;
z1t^BW*bVg8`#(aOLa;KyGx<lF?*~Z0-@SvXR9tWhW-iqspRui2YDDJ1c{&4FdVbl9
zv)Tm2BQ2_?_-i0z6bfxW{_Sgndy^2S62qN&jXaEJ%r;u{BOmw~kEj5-$B#LCQz-Ox
z1AGFgK@BAvdjVN(K#Z`4Uxh5yv@tv7Xka3Kf$K6pn=neqc&*@;^k&5c<uignb~&XV
zR}X%g3C9OY4P)sQ2E@uPLMOhn`!`S0Cm8U84G!-<G-)PpyR$Q@xx3u(k~F?4rdQt(
z<?mK(%pJwROpMN%utXk*+Ls*OwpeJEM|?Jt%vB#B*Jq^RXU!cyqOGSov5;0!xQ9~3
zG)W;WQGB<r-Y|SsJRScwb+tK>0|E+<{WrluGXRcc0dsMORkOvlQwuzo<#KCB4Pg@B
ziqrxKrPhghNT*K9I+p653N4d#+P6+J8CjWAttql~Q8WRvvTv~s!)!J~hQVz7O<s-*
zr4%(TH$qg$LBie)B_1$ceue>5#SWJnk6yv9v<YkN^;c$RgJGN>AjLw)t!b<i2Y;8Q
z`f@J)KyE=lg4`L10i=><6LlUdq{Ddg*Yv~&Q_SF9y%!!)&GI4grOHfa?QPfzGsdaL
zVWVq_myggvs1><1T)_)C<#q_gZ{tp-qJdxHP%z`X<l@zuY>up5@K7-m2!B&FE@a?g
zlJ;YG^}AwLC2piA(Yn9HtMa>l!pu#Jlc=v{z2VTX87xYc75gi}qVW=KaQdJ}@c$v~
z9lHbz!ergD%`V%vZKKP!ZQHhOv&*(^+qSDt&BZ!*);%-x2l7ki+B@@&Cn79OmQrB@
zS|n$$(VQY@LpD(e|I9Y!@$>TO?Z5fEaq=HgrzfhsSKFdWTQ0-XJ0%kAho66inL+}D
zlfB4(f&J;rbftSX1RpCCji$X>G)Kjs?JCLb;rNIVmQNgim=FG3cdQ$^Wz-^}{~M_J
z*<k1U`A^=iF3e*r5npR5F4l6Ew9ETLJbD`J%JAfCI5CcAeR7zAh|kk$urW$I6q7#M
zdgY9IREL7#Mb;Ay!29|7i4=Y^x<nTGj!*sO_cc6L>>BzMV+N1P{onv^Id??F6{H)Q
z6s51AF7F<(lak{bYG;9Paf^#=d0uTmA?4|p<lNSGALaQCMkVVpleGs2uM2xnt((#(
z8iZ;eTS2v{evB)O^c%yaF%~)b@FtHC{lla;R-cx)a=>rtf0KH!x{!p-%q}HRjPP?g
zr2f^}3U~Z(VaQm8egx2!UlizeFqN35fhHfj6sLYn_c<LDYCPC2Z*s~G^2<ivV0&UE
z`ZsyCos|#`zAhEU9Lf#L3S&h>X3&Yn12Y=#{bAtLgTbXVaY*J12*9^BwQ$YK=iuA>
z67#0|(hJCUj8g{zgjKAS&I#4Se$H!)ztf5}%!rZ}UNkx?An2OC>7kUgPHXNCPF6av
zR-Wj6DCDxpkVv~8&S=BT$as`d0w5&=Dmhr<-&;|uv55<-9yv2C>_hD^Al8+~6XJcM
zw`U<<S)SDnJ|vHdk37-_SYz@D*iH+Brrw2KGpUI2iFHZKTJbNhWM2SpziqUaNRn~g
zZTfIzICau2#g>9~S>D7dgydxY`G5Ite{079AONI(z5AJ4yqz1rfT%d~|M+aSG<J71
zc5<Y(v-<BO?yEFQ&3#dn5#2;Ndk`l`C;^q1yJ463$a^J!B<iNY1_l^L8dB~t{Q04;
zOP+M$F@O?5Yh4ywR!7>N^vU#}zO_{_a-tCxoAPpm2f&a)TyX|+wSjP%n|Bx&c=(sU
zYm?VxX3vm|A%jXw&}AFTH-ma{c=g@JT;`+jV6%3}*k%Z!tMEmcDF)*0d0-4U^TF|J
zB&>A+M!RkJdzghjdP=guTAD<yD`a{aFrsh*Fc*KpJ)HRcxG{}J{WA2_UIqY{WCDBB
z8hA}VP;&K8N!41UNAz$8LXnC0I<Q97(US$sD^hZ-V^|sxmy6*V&#uB0pckxXF-o2=
zusFpc7;$44(0u$3VCGZ2OWimkerV2kJMhF6J3XA;H7pJpW7D?`DSVV`Jp-xXXf0@L
z>rOl>M0i)HjO>(pD$p`i-%N^CL^M-2G$>sUG$m;4sJg$Mlr2;2>Q3My8soXB7isCF
zmPljZH}yH#kJB{PvcCXyXQ)h1N|Q_2_}+_hjFGoag$RMqn2lauj4AGAA_nmsPNN5-
zvzY#sk9mZjmLP70yBe*$(@(waVCD0O55kUmgBNE@;B1rA0eV4$`0_qk_RhG9++LLP
z1-@O2f_`PE)74oc5L=m@P0`SlTi=+C*FOh7i+sp@)X4k=w33R3NDLTe)?@-kY`y4%
zkjZR&?S?+X>lWQo3In_*j`Q5Ii@|??8b~Dk;P7DqF`}l|tfp>dWJ=YoO4l^ERGUwF
zUcI<`l8oOQJtOP>+&oLzmi_FT@_O$nk+RUxs@iO5pQ=#NQEWbVsabzDbWvf^L1yO&
zC*<;=rjUS4m>p-UNIqXfbfVeDlt^uWU9lIHHn@Q4xV!>^@nkegF;Fv+dkd7t?$3I(
z^V7FE{9twg>5|eFoAzXJ5w2cZW3WwLhLaFUFd(P5Kq6nPIEo=dhT!dX8f33QLpW%a
zfjKBhhdyZL$f(SA&#*)u2w?PpgI*onO@VrVkC2G!b7@5gWMv4Ou%r#!7_8ej$fA>B
zm`2Y<IN2ENy*D_FbUNWJRMGj2(ol!FZ=wQuV`ZTCRp6V6{5M#2yr8aqMB;u8NXbGO
ztcU9=4LoAWN#*fppz;L^|L-ibdH#AW_XC+k4#n=syz@i5jv{ghwT}<bMr<G<8;*ym
zL8@I{CcXIhY24r38^{aScFqOkPt5fJxcR_-_wM|ZjO=;ye6>Dc&~Fsfr#ArNC>(EA
z8A5tjuKWp2jFw^>P`M~-`SA&Q{iJ(E7+hp~0^iWSAdUbHwfH<V;Q-Yc4)H&IQV0Yz
z&i1JJaVeBQL4_}qP{0t71k^Wm?t^Su3v6;{_Cw+BJ?T4P^n`K<7(>Q!^rH5VgE!Q+
ze1|>(m7<Kjxf?5ZBpju*H>y@7!RoT1>g|T|>&yDkubkiM>w;kylyo3%Ay5Nml~jyD
z%{iPxew9=#AkVsG&(#aHrMn348WwPS)uopRyOHCDgO~d>`%9*6qg#9ypA*81`kaMe
z)L+KOj`d@4t*K((%z9Us-=$cieJy1#KR|BY`EG_m>^uUoA2-j<u8EIl8R3y(9;qx)
znRfU>wBXk`3mv)zbPuiRYahnow&|ZS>oE(NyVl@{aw8e#>DNhA)$Y<$v1`7bLvDPY
z#zX9Ty8jstS_9X2&jJJhK=`%Ykp7pcC;!`WW36vx_1{k%trNB)Hs}$8Z@y53o=Mfq
zvOzRX;e+df8W6JTXoGby)-c8XqKt_jOohz5)*hNgrVgt<XWe+6jtqH&z1-@3L>3kr
zsL`cfxLzEc1AD1LeBjC`U+wN*(ph1!0#jXh!C_VJQJ`^i=Zn2WF~S#|t}8?i7Y6l-
zJM|(*cZ<@;4yXf}Mq=-l;_MRB>QN8uGI*%PhsH1ib^lvsit}I2@sR2N2VrW!GM-2(
zp`qW)N)1E}w5?k}=_TxtbcKu8Y~19X?atMzmw33Qz(l_`>x$3*jN*91hdT7;HEq2b
z_`=z8t)?X<vMyWmS_G_Pw1$(e0*|y8X)3|0s!LXAM6Tg__GZmWG;kUvo?k+$+Nh~)
z*}gHK`Z5vQg1k3%?h<e;4rZ8wy0={whu`1Ty{*C&cWft3Mg<=2v$@+y0{J1t-e;kD
zF<XYLOlE-_F7nJ3cnfkNI{qUJg(Ipd%&Od05uD^)Ml#}c_hx;l&WuTRhU2`qbN)?J
zw7IfzzhT&h<GHd@k1=DpE<{w`A;<?uMDS=2^f~qo^dEcwe@?5w_%HX~$?^Zrs@VR`
zxv~2H=iL0~<CK}Qt6K0Ipc9G?06_5HE$QT_`@d_6{$uI?LxfJT+J?ghJCgT{s?*fp
zss>}r%HxExXa9I}c(#Tj#Paex*<YUqQbOyV2mwD=M)l{1OCUaEL{Z}6ZXbHVN1iRa
z*{+EbAW@p}$Y0zmc%*N8uD3f(-%pTj|AG6_zbn}Tlr!HGz>q2g@anX~dP59V5(2#$
z&^de$c2WF6EU`d2P`HBeA>82Ry@N+6o%ykRW_@_HBLH&hfRJ1Q84~0mWZ3RuAeRMc
zz(3fxg+b)O_);<UgY$j^QpE63S_5Wre#LRtBtrTj`y<E#dwj&@y~op&I;}2GGDadX
zX8OcNxYp1ZzsNIiVv%dyJ^62`ZD(g^6w{+Xm|ND-N2cPLXa^JTD6!~WW@KdM9LpJx
z1Hozz*BC>rBIM2X7qZqzOLSM-8o&<`BnzB0c9mQ1(WxYmX<?3?V9vN1`rT(m@t9E8
zWZSXB@fvRH_PRPZfR{o_zANbQjN_N^<yRT=Bzi(s-`z-Ti><ficb(QiSe<uBrQA}|
z5iMzVz$43HnO1gO3A%1c(~3@#ood5j7^*$CgT`+HjJ*wG?|I-s1qIobaZ_PKz+*!!
zw{=n1^~=$?V+yq8wmrL;C8pe6;D!43@Kg5C7m{c(k55o#%6AR#<YuluF{GPDxm!)?
zQE{9`>&}B5a17srmb|rdNaO7#xMy_2Ew?*UTM%9Hi$q66#vE;J31v-fdIgN0vjR;v
zm!5f<q_zxCW9x3*)naO#1Q=r=4I4fA@k&7FUjBF1gIpy{<(HF9=ZVHq5VA{!{7E4r
z-IUqNa}+1QmVFH3t(IaK*TI(qM@zK`-f*_Jt@SbPrl#Xcjo+(jI2ZbZy-v9A_BVLe
z2x>ymf&W%Q1$0$uKQ9Yt$+Ohaf_P~cZIReZpP1LC7;aQlwb^yk%TI$TyQh->Q=#2@
zU}b^1v=U$*L_E(Cipu+CU{9xS;d9GZXy{}puU3B<B!6XGH9omRh`SA{{eapq0{7^A
zU5qYU<jI(2G;zd%I5R=*za8n}gBIHz9UmF4QKo7hcbSe%suCV-$uyTry5r)hFD4_o
zOeC$?G^;Q$@UuMB2{@A8dRMG-{mWqu{WxJW7(~bh0B##Cc#4Dc)DdE-)?+x*aXQ4|
zz$3S^d-lPFf5lcv22-Ehv1*;<2{bOCz_giKCHyt0l1bO)RHGv1ODRM|^|!){!EciZ
z#6qM8W<iIZNsIy!L=rMS?ZMW>L#-L>4@tWp2d}+<a~j#-BSVRmu#}f%YZF+Q*UAs6
zN4mqb&au3um!<Rvf-D9bx#k*cD~t@)V%^jXS^(#2$VTYW+-YVNhh@hn*;ozWo>Zg_
zm_nv>h`}w(WkXS{MiUe8og~pFC)Gz%1vFIY69Fx3M+*kfmdt--9=|a?eX*XfsD(X;
z(%kFNpVu?EewuH%Pv(YsL5OsOG#l4UtfzAHl#<P6=H!#NRAZ345_;+u83Vj;6y}9z
zPOHJrRKl}p@`YKqzvzqy!Y#$M2A#&tGv;t2_X$t7N+uBtcH1fm-^Sh1DC%=O7$jx?
z$>s|XX724pMtk^a9bz(;*i`mftvpQ}eIfk~ErSb6hmI1Y_|WM3b4|p)7Wjqt#=Fbi
z1l^;k>Bf6{pv)%CnQ?3u+_o-Rv}UjTM5<u6EbyYkP~3)fDZG#Fg0%Z>p)Ggo(tIKq
z0~uQaIcdKY-Sw>Pd9^!@)6~Bj5r}p5x5|TvtrjFmx~i=(MQxjHjybU4*=<lnOe42n
zE#AF<G5LO}H*8)QHSYl_?=8J+_+kV{#Sd=pEkvCrektcPz+sJEt_yGaM$rG$O6#M}
z&CWdvM?bao`G(5(sn4gPl-EIqd=+a?wB&81!-EyllUxvss>HaAzK{u3lRK)AIV>_R
z#!?<4zddwu&3b`<tTb8k&t-W<jGqq3D%#D%(u+oq$N<4kJz<Iu21@aT_|trEj982q
z7N!D$R=&OZO4PjOKYU17TNr4k$l}V!$v9a<bs{AtZ_pNqzFXpg5qSGUK<(!Nz&~3-
z{W~EFI2SJiDCN`Y2&R2vcpv`wg!eCVAL1!%YXtIdaSfHVkdK>!u&M28I!>=8u2KA3
z{T-G!2F<n6wc2X9<_bmxlwVX@>aG|-tE`^KEHF!ikq0!;y!|!e$>lQ3r<;n@`{0^o
zKa^CT976AyOL*QDnnWR3Srj*mt#?@3$QcIwz3(lMm3&S7o_bAbkQ%wYK~~>}{h2$N
zES$F`X&4MQe$jX;U^r%fX0!eZ;R>b<leuxs4ruuCv=ud{cyJSDNOz61nABYD=moj{
zoeaxj#oI#lrWxva-<_AoX#Vxm8^vK@o;j%VVi8Wnp^8*gA{_bl_}>2psHt<=jYD0U
z)-Q;R`5nDMHVDF@YJmQz;lJspQro4^+j|5quGT!%)pbs-<6is)nHqHxS?;ZHcj!7=
zFIgs=c(a^*lbJ|a+>!Iicx0Xq-u_$Le+K3ZGYyvzmjgH!J7mJ!QxK-|X9{?Mb|yh(
zSRzN#u*w*A<O$d?oQtP05jf$lYzb+_ammqGt83JohTJv9bcw+IMh~?-;D=PZQ@GN{
z(vLk__N^nHv$`pl@qE9&?*E&h_aCqD@Wi4(^<TpipDX|X`Ty|qcW|`Rbuo7MZA|!o
zZj=AT9bk$3%W-4Wrstzp?PF>%iD<*2gl+|$%%^bmUttbSTS8XHqsKu0VDexZp))b+
zh<EBw7r=91$7dY&j%DqVH0itpdM}U~0JI-3@2WodCAT_H$(~nyqiXi_#eiyd;)+%0
zu2tRsote{=&B7s5?r~MeG`d6vPQ49EJpt|LYMd$eSAQT8Ku}%H07WblZk;psZPF1~
znmD%s9NhI-xMwxdFfWN^^CO;m)}d9leNZA@f7H}}$k@)~svOXUtTHK;<c|jwrttdR
z_`66^AdF9jDbfyjq#yL&PyeA~PZR5{bUC*0IV`EARQ>(cvDI@z5}k2L>v)ZQVlL3!
zyT`Y&@%Xs8u}SJesUu?&oP4O!a3-#>Y3_|d7GhmpzLAC(%y8_UStkPNIW)3Rg*^4M
z9+;mC56s_N#|!NoelNW$;vgeqAnMubmQMpEcS~Q)AAO>!raH{g2qUs7AMWhIG$$~k
zJ-5tRJRW~@j;CjQuRf=+qQQkyag5v(?pd*-J5KmK0;N2b4Ztth<yO?E1E1k6KX<kK
z5T*@tR0Oc4(edM!&BNo)0_1LZv`~f}3&<R8e7W(ycB4I1y<JbA-cx~t+94a?lk8LE
z+Y1o|uAXW;9bMT?z_}+nIc8`+pH8WQX8PF?9#~X@V(q%NK?y@mb^aJxkNx@7_D3>V
z%P7Uo%9)MrJaZ7?_b8mh*~M)e(0R$g3BuCr<%8da*_x|HvdGzdSjC9#jIH~=Pjuz|
z#!xxd&FvQ$Hha1B^ZSRvj}beZ0PPNj6=5ooh@fwkJqI%wLtG!2WLgOVCteR0lt4(`
z=T=X8q6^FGBKC!RW8?K!TX=_H1ll=x0;{G9iQOk=3MJmlx;NhU;p;dv686qU2gz1J
zjXaUlDn-wIk>$DPklY{l&<)-Q%=dz|`Y(FN>AHPIHIN`H#(4K_&TAvVS$c#jPMSNe
z=wBqb#b~74f_@?s;|MW899j8^EdhUBrEqZnDV7nyb9HaGSj#@hrMHP>+X`NXDy`!8
zuOjh07WqZuTBF6jzhzmw(`9d;FE?O4k+6j4rBQ>r90a`189H?kRFw|MYLW%x<`OgJ
z9y51F)3@0GX&Rq9-S;sx<^fkjs~<@Wl?I>l5{XysE=o(y6pQFMOGSu1yHY&E*nR&O
zZ_*>u3$v<7y)jPAUxW8yz%1Lr0L$@{Tq?+t1frVg-qIJ6{W6QFR)6Q9BmU+48ma2g
zx79$b_WNDKdY3c(9kKO(3CfDniqLnL+hiOGU=aY~<-o7+XMtHOe_#p(&6r4hdR_6)
z#>bKBbIe!ZYdf2qw_RzU&c^#2vb;|sNIIr0$GakbJ{ayNJ$Qe_iLRec)@@?$a1;Ey
z1n#upoww}?mUzW@bp6LetKJBJAWrR#P6u0zjIWfZ0R-zZf^2wKo(+MntZRfJX$yR$
ztZR4jkkRcP9zRG$_e-~@|47@^GpWyP^s(p8`Vyqj%g)W_oSHP|{SJTl{dze1mi<Zx
zHjHh%!#!wP`vkG}`_kLNcJ##)xMA%_{YJ-icaMv{1THOyUCjsR=rb8&ZB_e)>&(p7
zM!o0W792k52T0^{J>QUcEO?92DjN+@jL@GItjB8S>lN&Mf+Qt(^Ot==FN(kC-~#Y&
z?eVK~rE{xYceMITTL|dJu?Pq>bivZk-SHZ|fb5H6Zp|?gH~6?R3kXWQ>L-L?G6m%B
zy^Zl7Yu?Xbs<S6?*@e*oh8zRo6s7>AfGh(834?P)UkEN|qiQVsKAhSBT8I`CW+D3j
z@E=nS1a?YKEpq+FMpd)N3K=0ElZeQG>yBSO5eXf9X(1?lB#06wnKg1O#7SMq`1{FX
znQe~(%>f@!!JP6mNbg@R5U#NF;*r^D81(n<DZ2s;lf$jXI5y=5b$m5LDRdp|yc3LI
zjfvS^Y^p-oqa;j^Pxf{6>d%NkH9ZdOdIhwMlBU#!;129fZc7PK89H}{Y0B`(T|2>^
zZfa_S^@V{60x3~X%>TvUG%6S9p?sj}YB_=<$jW;Nz&o`x5nV=y=t3rGo-*&@8|!7p
zIq6SX9Gv~dN+MRqZ%oacZuLP8ep|+5%ual|O!Ync{QbO?t`CM-KVy)(tmnaU_#noT
zCun}rLn6Zl568l<lB)+CezH&EttnwotEZW~AwmWBPNy|WW!Xx2{sIzVr4*ulsW}N5
zQN!`@yY#a`yU2Q@BiGJ1{X+lrz!<79nq^t?+<|2A^upt9K_&Z^KJ7uj@sSl|b|E-(
z#75-?0JkH-`1yS=qxrVlHAiO)(2B}DQOKdS0YPX=L5Cc^Z+aRpw=2nm(Q8v<(&i01
zZdS)0To}H0;k0j#;rjbtYS>OYkVclfdU-9z3W#VREgNI%^9?otXT0TO_=bPJ`5AnH
zs}*U69)MjyHKY;qjRRzm7eWByvVhy*lYQt-jiCNqQcSJ|=Ej#Fx^3|#%*2o+E}kuF
z-iXJW#xV2tuc~>iD_;a1jx9pyFVrQu45S>zY@a1d{tAfrjMMqqYjG*k^F@rvbix{W
zkcGcmQu=7GpOsE^RoE`VHk_v(7mDj`Tnp5}Ju*1ePcPaxdQAP7&-j;K?$o>y#a=Id
z(ENgP&@>^$34T)4omWNm%mC1XdQ9Lsw92Fq1YEUs;n#r754xNQoR_V?P7YuX^B#h+
zAa>_*Le5Nv#g$r6?BCl%+&J)ei=scz>0O|f@7zNxJ<4`XGCzp<dnqtQAuWQ*3|?S9
z;=apNdh?U@F8Ee{c93MFaJ{dh?qIel4sfXt;<o~{3g@koD$IQZO$a)PV3H4JG4pO?
zcS!-jpYTAR`_HCg4E=4v=~+`0E`@zWE^tbHdwHQKqrnJm27ki*5Qv7-0B)f-{Sp@2
z4ZhaG`7xwX*o||b8ch~HE03nfoY8fgZc5@gUvvTL_dFSV?O>W{NF$D>psF0quMup7
zuI(T^JQupUakKaY%$t-c5RnUv<%xUqk*HO@7OHAiGuYXy_p(#{$uz1LloRZMDP`Kb
zu(shuX}1>maoJj&PEm+ZGNrZU0bopmlbK@rU$u-G+l5zs5>oQ5^r_T=Ki4}hvt37O
zJfJRd)8Mez;8j`u1FfnaplFR42}|eLJh6bc?_Eg9Cx1p9PaG{H>6^xt*?jir8t<o@
ztm}(g3t?sQ7jAcDvfYA{%l%krMt?jkv~l+>40r~}^I1D&%blPNyw^LA;rwD@0_6v9
zlne3qW2(lau*4fKZ>7JeaaDle%(tgnhbe(j)_lh245b&!2XvrzBPLt|(0!<A{|aP3
z0#K6d4)l<yLA{1M*Q8OYEe|OkKBFkRV2gb}Y%{&e-lb(k=?9>C8|wHIMkW5;eb=N4
zOC&*izBe|bT^k;mW!IP6KhaFgei9s-Y2ozMX?0YD{zJ#Vc6|C72+e6;abM=eJ}RD!
zs)IqjpqP9zih#f2=JX>UE}0`L8GG;*jiYzmFHMoc_(F9DW2#(h?_c_Wi}La;Ak*JF
zk+O%>PoRrvbSOQUhPQ&Im6AyV_Xu^nmo&f>&p38Fj41cEhmqkJDb!b4*KZ3>AVAz>
z!Nwo%#yx{hgQ0rH3}c3vV495*Z=Oza!ETnCzy$b1IejD)HgqI;``C%OD;s~GED%kD
zrjbPRnW!s@*S;-s1EtmMdi7j8jOW8LmC0&gSG$fHC-uq89sh6!5b*(=O%0*XyNv`_
zx<rehLQ5`08>s^$&fy;^+00*QWN$ufzza(Av>*mE0X+R`1$Jj5rK<?hQMHV5CxLbP
z+ub#y#x8z6wjOsD$06AzgE2^1wod8%Pub$18S018BuIIXf8F0>5A&LT074?A`+QZL
z+(I$r)&uwrgbWiNoo;<8Ug63*hV^Cmn2cq;W(0?_Yn{tz5&C!_>lIY0GFLX_|4N#H
za3~8kSy~lq`z!ib<ftpONif}Ii#2mlI@Cx3(!mL+WBeu=(x}9d`=#%SvTVrlP#L67
z13^W}g#kz5zy??MFh~y(fT=+V;OvV<LI2Gu;M)Z(82q}rgUZ{v3jk9l3n&W_hQI;<
zJJb=A<KSmNDq+hE@_KY+-P%#BKDXjYlg2So^bJW4^!q5Z)>J`*yvIrXEN9Z_6kkNT
zVkN^VazD)D6#mK)Iw*6GFlr$l|CV#IuvHSM?x9zpM5N(P%ZeI<r(dvDcF#xD0#L*{
zR&oQl9!9wrZ*m+l#wE~+VCqI8VgLzSFKb&@*7ONZv8>}3L1kii%+fslc?1;;!dz0R
zzZ!F}GhEc%h|ND+OM9}gBF&!~`;4urW%I9?C|oS%ETasO>Nzgwn-XxA#tj3aNKqyy
z3L!+YLeY9W@T=G)*7Yh&%xsO;aKDJaeuujQVItOV{D<XfP9083!6qSpe2zSmrgt(T
zqd;kICW;lJEB(&Pk?v|6ts`7m%&~KBtnB+7fAkSld3<Ylg${B`ry77Aq_^%*Bf1*~
zORt?xhjfXKV2s}S0^x4Rz!Ep4#8>(u-@N~~NEV&dGAexAPrE^ia=1uQYtjggW~hQO
za?Gc~c?xyWu4E!6NvgD>M0Q_c14*%QQ)zk;O|JQJ)+F5L7ACq<xN&mfI7Uo6#0KmP
zKr}OX{K~RldO6(xt5wKNevILp0@gy*L4ky@+Dp*;0A5-FVRrdlG)2ZmBAk{6TFIM9
z=?kUscPrfU!A#=$O7&=eJlsV2BuU1Eou<kvSTz^o3zoCXrzuc0Y&Jh}!~lH#J3q)D
z?yl>C=gN-<YbHZAko;eZJJE<~+jFYC0H@x*vcvt5K9i|^a447?`C*i<Skbzb=OEjN
zE4d%FOB8iSseedIRY?JzkTfN!fuuXa{gaqMLxQ*E>n`<KmTLT>!1>y}({DO2Vy|s%
z!G)~M6k1zK6DE`*zcDf`lhGs&qh7y3=yXDhT^+fCu9)-Yyn}<pS(%~SPkBWi&~XE;
z#lF>z3{Db63LzpSuQG)rTD^Fh43YiHt-EG5J@j3)Qf8!JT~R<_dyPWt_iongeP{Vx
zu?7n?$m}~Fzta0tP5Olkrh<cKFYBm1D3=txmI)M0hC9xpZQ2hW;Ahwg*OitU$BHuC
zp5%zXYWQ%sqj!UB2|8#UXjS1gjcbW<p{f($!CP$bun^9|m1=Lw{#ace&<bj=y^?F$
z9@QA|Bc>IC2wF2hAy;EjttyGRY2S4!TL&_8X;EeKf@2Fd;P3jk*k_#Q7V*wo;8D3K
zU0-3SQixEynT%7N<}N+<N$ll}Bo&XaLOI)8Gp*ut7!~fJ5-A62ROXfiCbNdaB`NuM
zPGBGETM9Xv3#3kkDZ*F3(tZ@UCEbM>dtSWq%HkSW$TYD#-Xv!{ilm4L%ZfubW2*hq
zB*H8=fPdsQ+UYe-+)DLcjsNUr&mh^}S;S!*L!f%9`ahx7g0eO?HEZoLH)x||=zpjx
zOb*C#pq}lzHx?Tal+mP~a!-G3uO>>1EKB!yhK!aDjlWW`!G-qV=Cf-We@298uj{eA
zkS!8rzqc7Wv`;;+dlp;3`A|18@<sS&pJ!;?vOG?#2uv35P+~|l;ax1c`iMlY|IAEx
zyDQC~o!56#K&&qnJIEFLSVoEjqf%qGmEmcitdF6WCCE3~eYGpZdET!U)@=hMPBpG|
zipvzz`f8|n-hOX`<heX!W#VMkRUU}SeA`AL&LCtQ<(|_wpC`omK7Qp}Y=QPvY<A6y
z0pfnHa#lPrQ%R`HJmpUlMocBedYY4J`K*|a8>-XL3?PP^=BJo!DPh5I$XyP`*UbV2
za&9~Ms!&o!K-#6JYVtCFrS)AIOuWV?>Pn_+$5z_BkCj7WUH<by4puvpb8JnL60#Du
z&UpB(hx0)p`75UKsIj5xT(epKrZ~Lpl0DwslPt1X;!&J;DTmymvPd>2z<imNTzL#$
znMwyZ_<i?XZvJDy>{rR^I2l)IOjw{J*PsTant4W88SqcAEmEOU8>}sqwPo`~^wSDT
zsHJChg!Qdg#`al4N*<b1lfa4!m6-glzc<WJ4-i#@nZ}~n>dS0Vc8_K8gZ7YqFt)uz
zM*jz<i&}7+^5lD`t3XYQ%tlm|vac5|Wo?s6(L9(u>aOGxTiHx6o<TWD<4)gTo4O9n
z$I<_y$g^aJ5C^huTs!P}n)G5Vs`LmQCg~o!t5yPC1t}=_h^hoDwL`DVA<BD6WROMm
zg@lscCbWH_{F={QnlzUsVR;Xu>kd-k{+@#M$;-~slg%aB&%!~K4Lx9g`*mO{#j>W^
zC}D545QZ3QNr~gY+8aK3Oe|fBB|1jWr0*nwsDAN=L-S|)TJBx0@^8N3k&Y6}k#7cW
zur0bo8~#=vnzMfoY!Pcouu@CgFR#mi&MKM(*?8s^;*LD$YO`Ho_2^3FH7A9fmq#9J
zi;+ckdCVB~B`!n-gHYdOZW*Gb#4GYoJw@6kKFwT9Ka=F{HjjhPQIE_F&LR>dgwwT3
zShjS|_j|`@s-y2(F309-NX4$N$YAF}>cHW_SVpNvi<gz!FjIm!rO9emjECBRA0}{%
zWCUNeYa$vdEIdLYfzAm|P(dMY1=_m1+fBjgSz)-U-OnI4maw3TZs+ui8Q*-EX)Va~
z0Ymwn^77wFVYK5fhH25SP9fil8~~=LFBzD6^*4le8N8e|sJWNwy{x+jPs!p$+@lN2
zmHAx999S!6BPUMZds>&NY`DrJ+S?4Gbq#@W4J}IXNw268{Wfqr4!8ZFLw`q7V`aE7
z@8(Om`4m7<cQLnGRfQfa6!ZhKD_*fv$AomBl1KVfJ_k)^#cEf*@1L1ey~UP@sX(#f
zw9poKeDxXp^RBL1FM4)lOXLzTU%_?~_h&z(xXL4r)0E42yQ)*pn=940?FH*se8hPs
zD<BwUD48e=W~QOku#$c<jqT03=5}vdn2LRxgdk0da>h1s?I4=-)KT`5xGlQ@GxIPm
z^Pg6B&%Vl8g_}9OodzISgSe^$*ulD$6x0nAeAi0<wEe&*RsM*c=llzOgj=;Y8A+ji
zjSX2@e5ZCglkygzTOysSA`>|2UY2r1PI7MbhhQ%b{6IVfziCogX|rW$V6oxEe#rE9
z2BiG(?F<arZ)A7c{uY|BDMLwVYBuLwdH9A)vEQ~wh@!?{h%MZAtoWL)ISq2Cxj^Pr
zBA$bC8g2u1XHR+*MX^|BY1Ne@+~}Z%QJlrP0&LF&P6E-eI?u-luy!iwz1veYZH)0_
zZO8vpX!jj!?et^kKkK%OA?~BvKmY)Upa1}5|I_H!*k0Gp!QAHm?aur!Cb!9dZ*14;
z5x#PI_LIz!@)Gz<l{GM=lky|N1;MT6izF1p;r7Q?)30uY7QSDy1M`#S;UCCOKCibt
zT~q6h1z<fGcPN@CVYJvV*`6*$AHYm7`q{-8vf=g=#&pyEoT8B?N`lWGVUw~741lmy
zu#^BIs@D)m$(u>%BT!J%lQDb!fS_VM;>^~90q_|CR=R-;Vv;j!;3hJ_LJuR_W$M}Z
zL5d$zo=~Gf_J^cb5xX+S5Ql?~wuM7tBXjSlQ@+=YCRnkbK8Y=S6O<U|htU|Xle5yn
zBqr73v$E1Lk*>7px2{<MN#OoF_E(y)%SGYj5-?H8+RZ=d(kI*#iMUnBOd7+#;12d8
zg`q@zpjYVFv}1*5{2?Adg*e)5*5I4q;hi2jdVTgj7<k`0YGI<?ISnJ*M0*iOnk<<s
z`e7MI^%iy{rE(2qSUhz&%E?1h?c&3ot$%f{>~twDG-2-kn7^6IOOZMsqBSs|*f>Cw
z56|BUnQPgr(+Ig#FoPn=+mp96!>gd16Sh>!Sl11&{D3MlthG>}SbE)g@zZq6{6_gk
zt*VR(6UQxincLm7XZ$lITb1N)-_<xj5mr6^N^k=DVR!~O95~am%LOT>JClq%AXdG6
z3;DYF8fg$b%Ry?@H>+V!JbHE9A#_yMaiSB$qSM5X@aW3TK~AP{1A+C$r(Ii42`*=S
zz4JnbuA!~MnZ7H^5E#>yrSYJA#-kJ>NmehQk-P)?H*LPINrsEkE|ii4Bo+cZw|6K1
z*<TC#ESDP8W(qVIr5G;|O#&~^hAxxlruGH?Kc8NV2+ayN3;=*Z>;Dd7`2`t%se}Iz
z9vsb0ZT@@N;flx7b%V8G=Zi}3g*hJkExAi(-6PQxMcuyXsWKs}WNT|cC^2a$gixLL
zvUTJ0g^S4z0iPgTa(?q;?>&nh2@(d3DbQUX0PoVKUYk{XK9ssM8~yTZZ?CbdG*oP6
z)d{z5f;o&Vk;x^Qqz6=|@7<U|uE8t!sW2?MUTAt)0N2RXzX#qAVOjkY)E@V>D(Va0
zFc^$<zg7(#?>a1mYs-7sM?$jM4o@u$rD_s5=<nn})>J>aUY{qOI5gVuq!gMtN_#ze
z-A7#-vK^o(z};pV30p99w6<9eFFyHe01f2oni+j(8q856HwBa5aj1KIFq<(V=`5e2
zjsMrNNc`~*9`@$W&J7uTD0l30;^niSD<{IjS}uAdL<XLfwKwXpj?z1Q8$E3RwM!u|
zou_ytdFNX0&F%-rL!kN}aG#TVsN1wGjznG3>8GJnYu5`Z(vBY<-%<DoJHR?!8*kJ>
zANB>mAMIU-xJ`Uj2a83wwoCW->4{vdT9=5;@Xj#$N$3^`p5<IEY>vXnvs)*2lMcTI
zU}?Cm(K{PX{&FNEeNOuZd^wz2w;31DOIk?p<_(?{1U~?FWpLB_8r4`439kv4hu%ay
z0f<i0x?OL;L;zfx(AVe8ft#$o4GIKTCwF~4()>B#v<El#HV3eU7TG_cBH+8D;8y5<
z%7tv}o(j9e#_a{rgw&pH551n??B6<IZx#As$Emg74A|0ZHJ4skD6$!TMLbofkhUd>
z6t@>o#!CwmKrIkigmij7jYV@^EkmrY3~>h#Yo?hd;pm6%LlvDQ>G!v+%`C~*p^4#4
z7}+{ew6fWKb}(kU^zX=IaMv7k3K0BR00rnqLnch9e2M11w}p;x8G6ou7ywDCX+*5d
z$EQI=gx!nwd3WYH`Z=irU^l>gw^+n+pN^d%%wk&jS<_3gfn$#NFOH2IF<0-r3e-`y
zIM{(LBn~hmf=KsuruiDz=E5Y+IdJ)MKUR+yw?>?tcs5s(w1@a!Edty_BvJ2ZX;^Lq
zj7^3Y<me5rTM_5RQH}TkRydapiF(H=3V;^e5jI*kIGO&8!$;Y9TL4-ClOi}>vFFc3
z&Zy(v@=)EHty|SURuqt`dh8I-{ch6I0@C$7W%n^wPXXFmx!KN3QMQSM`T{99l_?uw
z*!Wea8-`+A#$OG2<c(=}A?%c$Z#mo2WVeXu6P71Nuj}bBBZc4TOm3i`xUt#wj@x`(
z9oX!(ABBw<cXgiBoXVIm9Fd1qjy2d}q_Y4;J|59mcKLzdS~G*$`YC|1pNzl?D6I{x
zTAO}XE3ZupEXP5IoZIhp(}Xq#(iT?Q5p7$G5CjN*_E}tMV)m-`2+Rz;vL@Xhv+hcp
zPwX>m&(JQb#y<)JOKySCf$V{YCp&sRz<P1Oo$c7r?Vrvtgrs{&V6ej9$(|=6@t(+_
z5fo2-3T=~l3hAK7r$zZ@aOkOjOMk!)D}T<d%KQ;Oc@E`xXKjgDtBUq*dRha+-9K^W
zw0UUH+Gq*Iw0Hv`Hv8yk!I=R@1%`aQfUIuz4Q_5%wz>*`Oue9oUE{j9`i(yFvo|)E
zwid65m@jhh9yMf&N?>0jl@6V=Qq41rK!rstXd@u6FzmeN@L)nz7xpAr<o?#;B4PB!
zoyRQpM{jND0qTHeCfA3)vy%b08@Fn5;u@W12op$JKEuxe>qriLfva5&UL5Y><&kn7
z_BeNpbFQaG@SYFdo+P75XOgqwYb~Dg{js_sc|%HXyag=Z!?M#mzFx4+p-7zC5I+G}
z|1;fhza)B!J}2n4uzdkUfq51yJx7`Vm_lsx?qsTtz|5l~;Ou~T+QH!nm>HA}aEdG@
zCqD~S>icwXn`%<%+81b+*y9Kxn^B~}bnoQ31fgt515x&rABGQ;m$@x^q3t`_@wU0;
zsKieICU`g__b&t*&&$>gJi$Aj{)$BtWQe=Z7!;8^)q*AKv6&ePWLJl%OgS1&A0^mw
z!%dxVL;NnawqwvnNe9+jvA!H5ww}@gl2IEb44FGZdV*T!K5qaEl2lteww9JmXnrOy
zd%AY?;3i)aXnKqhtN4HwL)Q4zPe4$+I35&ByAx3LN7$Clg9r1mR4BX`)3Q#*=pt6%
z_|A4j`G*m-iBA)(kDiq34}es!pl_SeDlIKypC9W**)z&*$WD{7nLrlsDug{>XA=pc
z2h1TS-C)072efX%j(j9^4@tRvIn5aN=w4J2|I&6?*?P6Rx%7GMTx;ih=s~KvSm2H}
zy1jB@<FK^zoS5s?`MnkMt8wuggH=_uQ4t5tV#5iNpJb-x-Z_qEK8An|4g2akCU?bO
zwP!SoAy`9_ED$~9$mm5O8G3WemSj;ix}Z~NYeGM%VEA_8v%rE>!chIT!y?rFSX>s3
zMQi+HkA21n&I^)+#N0vxlJ;t5WXFr+mdO+6h2I*ju^^ch;h)2zDG#$6Tj9JR4S{Le
zPuPEH`)IF#6Br_NEHC;(&sM5DROdjGxTljdqRS77&y>ehIe!==PTY-;J>ZiY`xa+<
zP+~4Nb4}pCy0j=J?;BlU&Un;4%x+X+=S*O(y=m}(cT}ObODahS*rp<hsPq0#C$@XB
z-ZSZwEWKOQC>w<K!l+*_y3I}UyI@%Y_<nyTvNT3<R^bwCYiHOBTfGKRzmj)*b8;q_
z2`Vk`1`0Rr6S;kI+zQC^jP=T_ynC?L(&r$|>c)O#vg1b6Cpdt`ds;ql%hR4^@4?R_
zKc7H<kHaNr$tH{03Wks=6JKquGM-1<ZG`17L4$wjp}_vojEIzcR;7))d4u9Ai`zy%
zZtUqD=JT5H!M^_~4@7-kR)mpSfQOx|o(oJFS;w|jbO#a8FuTQMYSsk6)kqL09zNVo
z+{>Ns@5t%?c45ScrIlT?QJ?H~M({fu?ia_u)bNP=Bn2{wk=H!Kvgr!K_c0Ls{7L2v
zJ1&3g4@%_qU%%8aCzwN-Q^@m(`k9WThBDx-2~kJp3Wt>qJ21dNayD7wf2$+yp1>(S
zDzwq$k3S(6yI^2xYFaRZ2y*kOo1ncR@R&N$j|jgcAA?Rlev@ZV-)XEWwtmqW#}UT2
zZnfxu9cE495(qg_PF03XlH^>u8aNA(ZU&ldphfv^E-284-|b<g!fi>SnRbD89$K&d
zvRJ}hGa*m%?}KRjh7hnW$C7$lR;wV+Ks{Wr$IHk*y+}ByV-2M%Ekt}2!fIf3c#xW;
zv29Rfs3{2UE_vFkvX^T_OwCg*EH_jZy+AEqMjdlSMvGSPaQFq-YB#_{4Wg@bc|(|l
z<$V}mXzPqj%$uTjC6hD6c;z)AYb%P%fweUx4Ff5$=;Y8uAW5B!MSf{MLCxo~EzTpp
zhKvA;IuDR)+=kS!DfgdhCV=<vQ?2OGKtvl-4zj|9Ij8wi0-W<PGOBHSxAS<CJ_wCZ
zY|HzA)=^xeY2I`N$nA!EIDzm8_<{n7=9a1+RU$pCTjV0vdeQ*5@u5}M0XXcu>%c>`
z-{M|^XbT2~OkxSk3=A3QC6%3wsCBonGpA24cLt1_sq#Be^pAF=g?fTE(VbiK(UDh3
z$OS|YBv2TsxQ_{!BHcFL#ImUbt35O|yL7%okve{vcq6<vp05hu{jA4Q?~|va*G@ib
zfzm735{k=c;&r4|kR_d0v5tJIc4wvG4aE<!?9?+m;D~&$-%51{{*3K*m?CG56sR6&
z#|_qqPn9MWs+%yV9D^OZ!P~78%P`j3Lsh56np#ZIKa@RXDz`3<GNU1u+SSpKR6|<4
z4k8$QCLAdl)6-)7j1?{Nf^Zj$2xiDEzln9&N`<wb<(6ZV_lbOX&69HTOn<du5Hi#&
zgiz(9ZufYj2wjjN7C=mph~cSV1Eob!ni+Q};|sZkIk?%ZiRvKov4VX;IMn}fu|d~Q
zhZNhWh%<==XWu|~In)~yG~}R_C3%Q+94S>(0V}(Ji^JQwa8NDC3Avlo{L|sNPb9!)
z4!piQm#9vzJZfCdVz2HX7HR=Cm$!FRfr367=0#3!OWqI^zZhK0JKxBId!r5jDv_dG
z&ythPo_j-OKiVCjzSktvDyr*+wl?hab@AXB=0P5bwxN;>@pTo<*LkvT>~kXL@ot`A
zOL-DqqLn5RLAJ<=-KATv;8HVD!=mP}D(8JA)CulAK;DE%n|rcj)Nb)Ew+AvK4%zWs
z(?c)?vguZ}eb$-Y@`{;3?n1PayhI>n>*0wO>KVwr=^9K?SDQo!qN<9z4mvDsu+~Eg
z3MBaG=>AfsecVqclM~EFCr#{PoTxj`O4Iglbu4VC==FbXHeq7P(jBeH+9wF6h0>w9
z69QJU#lppKdSwK1grkk}j3o1wzfCWoJx*I!pTMaqR|@vd#ka0=T9MEYx$H{K%hwLe
z3xH9Vm2!WdSc+>Pi6;FAwsT9ph5mR)W{hdn_?twI9l#SfOJiPXa+^Ab>I<Dk4b60m
z<MwOZ?L69^AP=*R<WN)&<3i(dk)Q0z%3-2-Un?wrO2*V99C^&%7(FYZBZPE0*dOa5
zUZx@D=6^WzaEplj_)}n%Zy#ZpxFFYj+l@KLTvQ;rFR&&crKne&+?Ybz6mcfkH#)8X
zRTu;J(T^qV5|g>Oa-m6rw6XMPhXoiN)FRGxZXUY^RYmz#d2DV@dQ6#(hYhbz-tH$`
zwOZ<BJOC7)l8nj-Wn4s&kY&40)Tk4R6=pINZ4y_}p4zV5pco=lrCu08_~{(D9}t4o
zptfvo7~bjjU|jJvBFRrVoS(d|&y{OY_HW(MP*n6>YdpcOkm3m6SvXnkXhcOuJO1D-
z<CRqx(L?&jRh9!Y6I)qBUS4jb3{8sMZ%W9x2`t*t$p#m1uB3S`C8m7VKUp!m01(9p
z63_|x3ETumt?d&ko;{ogkvp<JJCYYp>#zp7W4%?`Kq502SFd_ohd$xA=T$2bo!Dr@
zre6|3vfL6MQ==9Xd+OaXP8ztNNj-b`uQY2V_NzsM60aI-ghI!P{b4rq<7?m&@{$xb
zGst5>D6Xe4;Zqo%@4Wn}nW9-0p?9V8*qwaVFSEP!TxmCiCL|>|Cr}+BZGogBxpZIB
za0<11E+V(2s<TJ3w+olmeEhGewXcC53@mJe^Ut)qN2#cy;$Y<4az9#Po&Ry|d7QEK
zvPZ8{fH8PfZHAw_{}NPhL>5p*pN4W{X}v19#elZX^CQHY69+Gb!T!Lmv0*3i1Mp;F
z&64~Qe~~)YHW|;=c+vehLwPwX{!P2X?E7Ia9+~rRH{0C5j+*CGD9c2VSE77BTz~o8
z0S8%8Ll9%jqni(cSFjSe{47-1nB>_<*zB)P;vGK^R(SWtug>>B7xXQZz5oUBngRco
zE0ws!`_IasDK)H=7ZVbiyogKFhk|#rQ?DGw)9%yCvHQDc<}5DukzENVaUl53f|%Cz
zfDJ|*tUiSXRO5wFE-l=IKD!j*C%S0n<kQ1T4oD@PTDw@J1fsQl?A&W#xBpCIcdc4P
zRv9n1PF-R26R^M~o1F-p?OJZj3!n-U^(W&cx;o56r~Bh{mKkt5l0#kC)tNAxazsu9
zwqb(c&Je&bMRBcG9~!6D5JqTC&KtLoWE*z5I##i@LMJlD;;M;l-p!ZAT%PIKj0Z%M
zrdsuW5|18?fJy~gA)=iU2GT{`fjcfCs^1cyA>nNj@9(}i>(&02!f(q1Ms@k`f?^in
z@7e%5UDwYYfJ)^9f=5hXyyb$<LIE+a?9|H1YrFfa{wXFH-t8Se<TXJ^^XK)S@%y2c
zLgVJA+-73)X?4YWesNX<KWC~>lHJQ-K4a{jEa#6!>84po>`Y|*(#XLeZ9_<nVGiK*
zp~f;8K}FnrztF)%H71-_WXu0kG3RkIX7A`cN~AiX*t!a^#skfRn@f7WUrcY(R*Hn(
zJn=VUE;9-pIbExOGU@S6Car3c!usNbv+)-0K#e<1jm>j@rxFgfW=!mMA=e1LX1I{e
zjPw>{f9%LkaO7p?W1$cJ9dKH-Jg91KzF`KZfT#3TRD=dQQze;tsV+j)i@#x^wKk3y
zJRT>T-6=eos3vBu>Xpqq<{HRl%aej|7WZT0zQDJdmA_2U2<rOs4Ee;(0BWdGIC9q7
zjUlB0*ypyUxueEXU;C%RD5Eu@tj6<5&KWSi#G?r$gI&L@atp1I!BpP9^8GPir%hWx
zh_SVdxGKr~z-Tcg05WL)HdCBLmnaB#8Gm2s)^m6u<iJQ9EquK)Qs~Fr;XxBzgel0J
zmb{l1d+*Dv)Vo>60Hpf>?emy}8mK1dgUcOp5oNGD`{hY=Cg~ZWLk1;SAZRaqAy;<f
zY7~Daad`mYDuUYdR>;?>?^~0v``!EM)gsjC;-0IE+M?b?%Q+ddZaX~~WTp$YEJ&U>
z8YQGUjJPtd>cy*gM)kZd<{wFxL|Ri{1ab|GYSOK@i840t6An*ApQ2!Yl_}a^D}K4x
zU{CqiqArHsw;nh{HbNi-FyFB_j|?fg%!OEFau$`yV@k2&Hd)miv$~YxstfY3X4Vn(
zZYO{;rSH-Zzg=Yo{A0h|$s^fqC&h<(;nrhkXR`R5IT4Ql6_4VdpJFVqqbB6{uYjCK
z>J`o+XS_tJC9vT2T*y(Ly_+B@S)EMSG8f^651Lp#%W%$y@?~gL)cUo(1SLCbJ0CQO
z0r+K$)=h1#Gut)oYGqoLg$@li0p7MkRI(A)Y(2*WlekpR_I9<#IOeW(Gk1nhjHrII
z_2a{kihm!{s^+xn48!g8u5D2`v|iQIGP8T61tz?%vELkT`LSYzA$s@IA?T$Gc;D4m
ziGjFCi1m1vpp6*U=7N`zt|+NVQoWo=Ivl4Sj$V1ifkEvpT2}+5ZLUEEK3ckenwpjj
z5Emf!*Z;t2Xhk_Mo;_ETW2XC2+RaCTy!oHao`5on?to>dg#P7kgWS0&rUo=U@?T{R
z^k2&9Vhj(99=p@f$+SbFnZ)9V4(5LmR?9$A5KA0m0SVhDoqB@2dsiQw9ywZaroV7J
zx5%R`@1~BYg%ovn8qc=%`nQk<)q_|l!1LBLl0rIl@%JBxD3vzhXT27PexFFOS#)`o
znZ`y^S+wD`w0tOZ`>K-SzpjEKG%fRW6GBZXg9}S7*`=BQ<4U=??yGA&G)@)n-5L`f
zSd&F$G97_yk~cq527gKzeR>dRgBh6zMu&PcV~JO4s#@6S**$SJWW`DYiqnuvvOc3K
zZW@WF#49~{*LqR5$WJbo1m-78E*Q!v1-y%evvL$au%?kmdr)4gwuKk(M4E<MoH_)P
zgb9DiH_WIxMVA7iA@e^WR!;SziM;>*P&dwTdtnbDybQEg`Q9I`d2Hn;J#)W$2lLfu
z{t7|sc8i7l+s6>OyEI^{PXv8m7HP+DeF-gaw6DdP00!2$y(!(VWnKU=xg|h_#%g?$
z&RHDckCpJ!_AT2{0NMD%VE1=xUrmXOHTKdZ_blCz^%~hjmKd;@oCD6q;ufCB)&$|s
ze0_${=z#<(+n?Lk)TG`R;b6<=blQBmZ_RE^C+jvD%5PZSl<v-R^T;#zP^O=9n?lqz
z)+$4e_sut;8^OM!bJ#VS92jQLGleIYW9LE(Kg%B11+!*b(W<ftAIFveG}n_$xaT90
zeEWyZG_55P+q8qq%K`K>gpO@k9TPR<0SQb<V>p`(T*XGPxV{f(?dILk?K7)0fE{uT
zu9H&<NXIa&lKo>qi@OGz3|e}-2aTEFDN~(2JYUZU*x%lDlw8iEC>kf1pB{|KakR9h
z7B4m_Z6HY4Tnac%3&jA^-+&p^yJ#}nfiSExKpG&s^0R0>yLOM4VTAGYg`SB$wgm}%
zgTWs;td>K!NO6M(bm>?2%xQQiHh+$|3<_1$CX#sE1<b3tOWOO@!I^Q;V|h|&HBq>9
z@xD`kp7s`od$NsrB0yWIp-%|x6y{^PxwtRKOra4d+?2duwnAC-jwRBSuLjh-kA3Th
zNE?Rx=H7#Hfq*LPW3MiKy<e#V#_Ae?%F0M=h7~ma7iI4hWNVnL>y~ZXwrzWsZQHhM
zmTlX%ZM$lgX4$q+^;xm^KC5G|?mideV%&^>L}dJ#-<SF3`$(nA$$eT3pj~wWe0w9L
zAa`Dn(GVbwO4Z<bb$(xT3O|vn0^&r40zX~0{_0)l4%|)ThS<B85&|VhW~hGNBd{T@
z#dzqvFy`0>W~aOr{)j|>zMspK=3F#zzC$?*J>!YMy8xv?`F87&qUvnm6AU9hYZXMQ
zR~LYjkq$up+1)CXmi0p&H{tHRs)G}^2q@)o5#a7kQD_(Ttnd7l49-UYp$kIqt}iG;
zv?ELhr04i1Gq?%j0(6TfDfNiN{mzY}+YIw;tWyY(fi3SM!6FbijFF~F$)rxl(LFf&
zTF(<nVBpW6aSOwP`&ZN;2OJ(&-~aNHN3eicoeSizBdKvN156fqLnWN7^Umtss;04}
z)DDL_iJM@^H@;xXLEwaBzpXU8Q$IPH=xx83uJ>Np$F<zFv;4zzZ2^g-hCTQdAwmEJ
zbEy-*I@X>kV1KKcAHZ{=zl-bhlj72KEIfYZJe9|zfi{?F6HJN~w&wM!Ccj6*S<Qm&
z+W}-+!e}oaA6w7&`Axm4UDKO^^qzXHLn~dREPYM+^Q=mieDw0-v~8=ySCNW^Ix_e^
zOt59o1$|4IEah)&eF3bK<N1fMiL}V-ivGjLbx0L!eI;u%_`~mi0+oF!zK=Wpm^^I!
ze2D+mRPvuNW&guO^8VHts%3d`5xgL4s_3BL=WX(?(f^(!Fk3Ze*;U{82c?XHGUoqf
zlz}luC_?W`OEWn|AZ`X0Om!hqw6+0=qK$=&7hr%VP|V283R6%^(@w}#2Hy}~yc{Gz
zLExWIKoE2C)5C6+4ejv=cN^3F6UHnGH6$YT$ECso_TTTv{MT-bo{_WrzaCUotNw2;
z(6ql08_ou89gtNDKtw*q6$*FaQuV9I7?O=eqNqyId7I7KhFcMZMnbab$q_u8x81DM
zC^z0{5FU*FM1wG%9T8wHc_RC9EqU#>Ke~dtDT|8^_LbukIxI*UH)4HOY@ZC0eGxEt
zm}7=t!7c>wxVkIOT+$+f>kowwp_xH4A4nK#wrN+x55#`fweAr<jtP)k&IAW>7-z*n
zD1Z-y1sS0fq0S~{$QMg~ZIno{-vtAg<VH!KdbhAX_Gn!&bbx<B5w!7G$!b@#II2-6
zW_}<ol1KMaWNMBdTu-7`;&)UpZtU~>=WheJEOO!$yOEGZ^-|`DAvVE#huUYQEU<C9
zp@Ti;IiANvhd6wu_@PP#XIJI#io)o1sg>l|f=W0OX<sr9$v_dXGY`7gLB}KZXX7&;
zf5Clv$<ytZp}o4D_XXgOrYPWBfYiFKL8dmg*9&q;Xc#=d5^Ea?lU~1hCEr^t7!z;E
z$mf<VwE-f6X(!;p?KrZ#fj1|JlzoJ-&5V}rtORT)+g>*s7)o3xDpyXtLie^4-Y3rl
z<3!x>MRknQ;7Mhv6~56D<cKZk=^BBx1=><6#^7-TO$!&J8YijVAj-)bp-=jI`h__a
z%MmD~v(io(q`4@m38-QOV%Uq=lv4aq<LnpgZ9x-=1z#N|q4C$`hLGCSI@?v%^PIl^
zyAOaFW`@;!lTK(-xfAGKWU=*HERF><1JzOn#X@<$51!YMw(W)bj=na1k5x{%{Hsyy
zya{lHSIP=SO7&Id(%$&PXu|!6%(<FCxH?SkbB*RHr(Cwsh_$>55($;hoP}k>qE2a#
zF3DRUI3oUQD&?+eN1o&FA#_a&M4vuvX9!4X_PDtwK^<VC*MW;Y5z#r&<rklfbT$u5
z&&lxjUBI6W8`i?Nhewe6-tdNTb=5|B(A93z;=^i-jz~3QkI$J5PuBCO-4>3A^SBaT
zEiTqX8;K9&`=M%u<b0R_<f5dLM2zJ$7KthJ9M;A&1j@l>jXzUWA%|&f8fmSMQ=re1
zXLi($G4Jgi!*Z)}MxSyZRyCl7af1Y<_+hvkC*iyyVI&(mR}rc@2J%Vw1<su=X2!l=
z$ND1-WpBkA78od?HR73`DPiKVzRb!_)zIn_qJ_Z>^2v*+7PN#@70toMgM{yI0~crN
z7K$8mAbO$;lN1SjTgRVYr&ue(L?IcNQZeW)FoB5n@M_H-kUKE6Pufb^Jl?dhTd&pz
zp2H0_3k(rbMjSGY)<%JLkyIuxiilLq6qg6g`)|0AjA~ooxEf=#p^#uNB@`96WoHV%
z8fDH7Nxc`XuTx$UI_c9@(W4B*$tAIL<g<7xnjb!>?mS3LF5C@4?<bnr3Yh?TvvDC=
z#))0A!$OPBXhY_^9+V4FWhqFp5i!lT?U1>T)Sq@*+&h|uzo28Bv5mt*_v-|WgolgN
zf1ram!7hcuOXf+%^tNf&?Bb_$ZAHe>(8u4k;%Jk@OI$IbIA|aJ02oI$pW*MDMR<Bn
zuuCy!2M#6Ji?3_%|CGPEK`NGue<)~iKTCoCR#oydm;Vn`CBy1AN*iMT;GosJke9>8
z1Q;h+5X>PGV6={uq~u8^Mjg>)-?BEyb#r5G!hCmoxh2qUI0~i7RQ@`$eO^bu<m)sv
zs|3@sA6QJ+XEy?!b#v3>_3G(-hWhyN$Cg5#Js&9k>o+eSkXX)$-T*6yGblhUfgvwB
zoFrxgvY@Vmwji<q(LhoFqzp;cqBb`d_NZOAZ4KPDk0~<-gH%J1sJvgsn8;wr2<nNx
zpbRKYaFEDiN&-o_$;8U`ms17~DFNg~9ub9%B4>sL<tv{QR=w3}?}?|CBasLBHyUF(
z2)1d2!xFkc(h4?p^2BF$_Qu8r+bBj+)Q0xvg?e!|Pu7#VtRc!y`LeIEB!(Gc2)m+a
zRO_gCWFeO{3Myo{n-HV4%2ep3Lw8X;_S&v+wq<(}cP|dv^06Deo8B)y<(+E%<z$#W
zhLsU34Cl~V6{-RzOc@C*3D8_Ce|S%5;S#the8OKhL^#NRS`pj3r=I~UWDy}^NQ}}1
z<$aAK4yEu~!XsMkp2hXF3ruJ|H|jQ{=a-<PxcoOCf~9V7T8l^h5#Tf9<I8=V9%h%|
z=AP5wJDJk?rwmgdkY*6dl@>5vxNX}e#lF5_n$sE62-_Ot3WE|$yvUfI%zN+n37(5b
zaHzaHx3yh)i`?g_b<s#3u1Vw~l@`CK^7%=6j%$e;5n1H*Bu$cb!-P+CTso&cgyvZ)
zY#Ovq4$WCsd{X(X;2zp+1(XC8Hahf!K~>Tv^x>%ua|X}sQx!FkC{0-WvJWk_lqcU~
z?bB9Ee9w*p^@T+*J*_UM5(b0Ct%rmPyfo>;VasgmQMdRZlxW&D5VIVi0a`^!R916Y
zqBuMF)!_>oj>Ln9)ALXTeV*={aJfqZ7J2C(#dxJbU|(eizWM>;3mQaBEha)@Qis^J
z^{0^a5oJ+AWko-GRHC`<{dygFd!wou>=J^><YoIQQISiMSXtN`5pS1nv;S7{x7nvC
z#Oo0kKoG$=wK2wry4r#Mveh3N4la{Y?{(S*>+ZqlSd}Y1$8p<IG2U_V6=GmZPvn?^
zzT`<a^c`m?N$ykQB>{L|aQhWB$p;tYR@oN#m90>oEeajyX#A=H*gf`Q57v&X*SOd7
z=<wJ1t$R8&P9eU+<*s)*#>vyt&zn(&BqGhXm4pqYAh9Nz76-xuO?>1o?oT@{>M`Py
zw17G!yj0!u%>7p6Ul^Zutg7~ejU^{8c6KsJltOp~F+qno<_B}dhp~hZGcQ_U`{zT~
zNEgEOFRnCrx|IPP;(Vk`D>vj~&6e%3Kv`Na%QVTw)7PtZZV1~l%PG!|q0Y{mqdIwy
zx2BgzFswhhruePddB?6>ks}3<nb3y1PDkM)ayH5Cd)=R}w}J;#%%I*N!ZEdSDPtas
z!4YLJpwcdgG<%~R{$R|Qz@hPDzXHaGlKq|<v)cs|WT*Q2J%6r(Pi$5xZPI2T{fHNI
z16l8Jlo~KhDr<|ejB!C5l7iP&`XP^$;mn$Ac7Rqbb1Q;2iTST-UA45E+&nbzttt2i
zOG%*_e1-JIw^L}P*`sw#G0?8Hc;liPs<bj-T`V|LNpyqBFozuQaHaMQhK*%8hu_bR
zYFbtKmDSc%j{@Z2=*k>SsGZ%is*w($%B@UvL=}uShZWNeV)@P8Hq*HMx=z!t%@@si
z+B3;Szl^tPv`Vaw8aTsgO}5qP>=aQqHWsi{Hd9?GsyU~TO{f&n#~ophRwA6`*zLDb
zN&%RLN(S0nR^M+(m^N9r*631QL!Y=yBTWU5-$#2@t&3g%g3(a@mA@O{hUY?0eL?$#
ziVp9BTpP-=BjcmOkmDz*BSf{LrM|q>EWlfkm!7KPr=Li#Qh$mrSCq4Juq%wzwKiC{
zff``%j3G*NMhswdyL#FTSiJl=&B^F47a{Msk-u~R%l-hipfwmyU38Pscy!a+^*Tkq
zMErUNwPk8+GK&858u6QlKS(c+udo3QLwkVT$tRYaP)Ayz;MaFzAY%%i27ONBQCk9P
z@Qr+{v~xJVJ$WzaXXA)uuN#^+_ZD?4q!#4N3FxpzBCJm^$Y9Q|NG4d%nUIY+yo22Q
zp&FOzBc|ORpZ52+w~+1J#}jdI<nwH?q4{2(PX|49ccda7Sh2u`(B$cO`<1Av+Xcg$
z!=gQCq3s%X`ul7hK7DWBdq1)xYh45sDA9&H=<mv4BW3(1aXw=`f1J8zO$}tU(F+AS
z&FSmo{NYM_29%F@ILqnl)4Y+&&CV~-|E^9O;eQbng#ZBX!1?!{IRA%S{6E}bk~MzL
z`y5C=^-r)#FM%kt2z-<Fse@M_9#ic%?JG(9*55h;l=K#tcv8Wl1lWj==gfSH%)7`U
z=s<#!7apQ8=Gmz^_FS<8<R5BmYW#up-GdladJ+4EnQqFesMH9aLwDR<J@TFmH~sd6
zad-T|y<P9;XKL@3?-w{EdzL%sY@oi>k;#`Hp0uHgV`A!FhPs86HweU@Q~xA-PZt=`
zK?WJ)EJ#<=L`oOQLZ0Ng_yG_&|4BGLT`i=?6m>)NwnU1wB4iAYV<JR@l%m{=9wR-8
zBoor{29az5&CvmCJho_!1&bt(35j0<qD+jw=WVF+4WJoSL%ER>d){=~SS8Y0N_d>f
z9f;Tjpk9Imku9+a;g^Tg{o9*o_8?xcMD4w!k5Z8BgKG`DW9Gm^=KP6K!mvg2!GRlL
zs-$oCYbs+ArtJ-c9A6yJs5pD>*iTQGF2Cpcb?9k?Mc^rR9EzrcXd8zOK_>m2F%6KO
zlp(_y=eY4b#7eKKf~H3q|2XB-KHys>n;Q*G?d9O?sUiBd9M%0wbeuTetkj`Z?d{Z@
z#F!*eeHuz=$AR41Is^?87>vyL1&H$Np8QqHHwNP4W3w8{bhDAM+YIm#*J|RTbCUWF
zaHYR5Ac4Z<b}{U^(kX8)T>+RVk(M7mPq44*HVt%UXc+a+5<Ft~{=DP3NW)Bm^|Ybx
z1RPW_quG@9TM%bWAw?TP=WSGP1BrA8#S|*eZ4=&89H%V=IG`Eo)VdqP-%n!bZtycA
zwFF5r(a#G|>vm5gCcmR~%!=0_+z%-818Cs2aIb4ZSzbCPrw<s=k9upbU9Bf#9J4Xg
zm`g9fgtT8Esn(f8CUjtnGNm(^87#7)3m{8Ro41m9{rfyxt_bTpWuJXn>p0rn$|(Bl
z?t}YgDb|rlGF#BDysITP<|#p@k3h$GWs648>IZpDc0K}&@qg&qc)OoJ1<gYu^^f7b
zkRV>A{M~Bq;Gpc-^n#lhb%X&TbR@UeYM`$Q68&0BX4H+A<rBI^EE+BV<#?^SBJWHY
zrVCBfe&YuOC7#eVUjBuDxP|zb>V&Ha^@NY)>}<^{Z$D<4&8-ZqE+Dxi6tDw#X+m3!
zQ$SAuV^s@)gEz!fDL3ZP3fj&s&D7ugLAosPXY6YkjV+bZzv|(JW`QOi9V{1AoenKZ
zGve<?6gY3~it&BA(Smv<9rcq-K@D~6WMg5WMuLM-VZ7(Nur&O^g>}bGsG1~CM%su|
zBgDJ$gQtqYh31JM%oLJO(njG-5eWJ%Q*OJYi!4d#RnSNV^(}9K_-V7NG+l!5-n>gP
z6@TKRGX9Ofy}q_-EZlU-niP6{cpX>p3)C%<a1d{guoe!0Dt9@2FHVrt21m_=#T-_`
zq(U;XR9s$@MExnNB^>Tz*Hu9SF#+VUSt^IaIT?>o=cYlNWuwY;hGUeA#E)Xg7~QQT
zwbo5x6?ha>wye@}7+>xsdfLa5J7B+E+-lIJ+5^oHH@q8!S_+RG=<FNtnnNOq?D(de
zC?0c>Y_iXPgqRgJWONmHzL}WF0Nz(R#rg6#O<j0{aB7B2Zbar*qk+R>fo1vE*N|pX
z&_nOAC0PKP$}ckWc$|_Tw0ZxmIigCfJS7<ydX_ja+)orpS8-uVpmUO--!sTdd_@M2
zVLjuWdobE6of@rUEOjYm*g+*#JGzK&jM+W0+r1Bur7qZBOL=E#7{CErf}EvVMWgLZ
z*Gf$!!%j55q<7Wk*iQ)NLR{n<Dd(OBo%Yd%F!Ta-?j+{f#>qo*+u#l-Kubmb2p)hO
zoK?bFC^weJ+dl~0xfPXFxCpCW5XD@~U6b_G<MFOxln#?xI>6^g^DMPf#jQ(!t9az(
z6OV+E!3`AgFB_yN3v)q!<`FE8BA3^;1ExS-u&E5Q1bm1vNIn;*Idze9MCU7z2&4in
zY8OS`P|hw$a~fY6>jbuz>!TH3<Ut64c%Z`~UmwamEb;^u3#ka4rG)213|67Wk=KD-
zFZG@?6}B#y@;Oa&g=A5>ncOLu3w>EvTB4@+{wb(SyS7c*3qDP!g5+##<oamiE>7tZ
zk#5oaC2tA@+^NzyKpn2_p!t3&xOV#eNjRXz=7z4-a)3N3BnoWP`_E=rg86tzij@|E
zQFb;mQCf*;vx=#1_$AFutX$>t&QXg$&Ir`17;oTLYo;M<;YBpyw=K0P%AEmXwzpDi
zUH*Dqt2&1uozZZK=Lc3fuGx<7vDn&|+;5B!B-mao^5nJZGVD9Gw)7ds=}!6DLfr;&
zB<x#w5$MiOoy3-!yh*hcC-r+@zg<d0VcrXuv)47;U!sAWTL9j76pq@J!<wafvEg7g
zpf0|KBy${aM~}yo_W8hCK<^qh<Stw7h++h^JJ<_1bue)wZUw-j9bHW{DLO^fE|zYH
z&FN|C(yXTc00D}^ju%`4L<_tO!1~k?;<C?CC6Z#)49ZSVOz?bWXTo#(yab_6_Oy^s
zN{ERUcSCBl$p<ZZm~Y9J&-1HbChc^^%_~9ed2b3dQw9!uU%l4po$N1vM#JMSRUIL!
zC>)UbCO3iNO00T7(k{9pU@D`!0IwVc1n!lsGg0<vxd?)KSmb|vlTtyds>JzJ-2c$E
z_Elv^V`?H)B}=IMRT{vs${PFW%+h^d@J!D&PuyI#tkR8KYe0K-cAG2aVtKU4D(4}T
zFqtZ$`#Zow9_Z+F?~FY--#nhAagAkEMSQ@6cFGwJnX!BkTY9Y9KkqepyGitVD@e7^
z7SQ}$>Fu^*CawGFdtuTm&rNw>yVvo3%kD{EKTIC@-u}rv_h|=sJo%?BDUa|U+|qw`
zKU|zGteyUKS29~o$8Mhu!F#oKO*&wJ(Xl150Q_M=d-pA=uiB`zrFM)LGGa)=8dZU`
zd}w6%%PSR$RH5m@`-POPow>2Iu^`Q0CxA~zz2%T4f;1~y41YT}T8_Vui>z);qC<1~
zZ)l^R1c5=;WSRq`ze7TwA|MD&IKfAJFffUtHZxY7avZ`P3kgn<U}BQioKmDX*UgDL
zz)kYu&0jl06C_7Ll-Q_pf3FM#f=qv7By%W0ud$yd8(;uA)qbG%qIp8!uYfH{{2(8g
z*_H?>zp}AFYqspR`(&+Z$P_1I=<>L%?ZX77A*Y+-fni0{y?y(ahX)pY^&o_C|66nQ
zz|f8?K^lA{7<{f7cox_M9+I2NI6{-47o|pL5hY3YGx9-yJLdGcPC;*Df~LN>t#Z{!
zw3hA751zNf+tMpuXeW}8RFH5a2YIX&YP-{~Lr9`-@c~e@Kh&vt*SP`%3lI-)_4m_&
zANE8}IRoyj{EsE~&0dFes9nds-$lf~EXUgKw;Z65s*y3d0HsBf0V;6!Vl_WVtCK&2
ze)GJ=IcT#{_tmaeQrmg@G>R~tU>hXo;U*-ICthw+7M$>wp+v#9wfUprp2XJtedtoJ
zKlwX=^f174p3ZaJybbpNbfjn6X!N3LRjn56q;gYSnpy9-O7;oaHd);IP&3-NZn&ot
zQ`$%`trm%~9y5`AjZ1rb#Yw1oo6&dmTj#QU(H7#(v~?pbN)Eod-JCijQQx$RY~UBs
zO5?IUiS4b$?MP$gFp?jc!mu4(C6#@pjn7478-WTRO5bPbJ{wzMK8=iOT1&g=no~)J
z3#Ak4Zl*TtLOD*gmE{M^L~sW@H(kb7gJaawlke(;=0#lmiCb!{2bFo!9yRH2AGpsO
z5EMSbZ1QEphLM%(mES!TG1R1TLZW^^zg5SGqHzVx!m~A8)YK!Kvo$dXSBF;$^F2(H
z!Hv>~ul?GPN$B>eo>o%s$~J9dtz@goss^re*O-8K#kUPLS&Mk<RF<US3o=1_G<rQ3
zXYH`m3uinH&l@trS*bu9vAKme&N3aYoZITGjB%F^jV5lM>PLk?k%UW?<tGPCp%>{|
zHt^7-D>kq?cKC4DeQl_)rHwa+GoDPyX3+1$-(7(#t*OALqcX7i&HG~<bhcPNs5|{$
z_!KBz+R+i{c;&vBVU-D&Jw-!smXXM`{XSvEGAE^9e*1|P#$3QQk12bx83^wx&!byc
zKDytPwzgfMir0B{jzpe2GxFQI1X~wzuuQeZt_pWahX>xr{{S6#+f+20fz|f!XIe|^
zXw*N>oA3L>s48jg4j#^bz_NtX3@icia%O74DxrXr@Y+bWk<j(1n*}@V!m9OdT6TP&
z*1v?LDpw=vjYozIc&80eb?ud3fbZM|c<<Tz{J?ZmqYIiEC^>ZFWc$jC0&*{Su-m>m
zNG!>y6BEjlrM$#0##@vm)$Qds(Ufn)jD->qBz2381)jn&e_$<hrmaeZnPw=|G5EB+
zpvna9W;_DJ_cku`(6cAojMwZ>PZn*b61&$8-4R7rGpu;|Q~}?B|NT}5Y{iDh0Sy39
z#0&sH^si=1KRZMJu)qD+32#}`#_rD;+E<PqW4<DN5sPGJ2er+@B`T@hWT-v}i6vij
zRC=FvbhLFM*`G_lUNc?ZmQj5P*XGEIAHS^aTqn~Rcexn2Im9!u%F?tMbV^S@&$s)H
z=hACmu|!b8tBBxz2YlH56Suw6vPL;{g)E#xIfOh!Vu`umBqY8BjYj%I?vLfa27;&N
zxU%9gior4kc!Xrx*5Z({tBr!M3RpEge^Ep!HpxNkC(@Y*URekrcsz_#iL!|JHfe({
zLHh*uEIRk6OS2_}Ux!d+l;Fuc>A#(Y*9YQTlbNktyJYvTDHusM#RP0bky*%;o+pV3
z;1koEI7hPRkeZQ`@AUfd$Ml7gK*kih`x5<@E8-lDbjIv^NDK;6V|fUAjLL(L(&6CO
z^=1JljYa17)htHzD$8XxPfOr<I2iPoi$#ZpK8>Jpa()AZJZ2$zGP4*!<>VAv&A}Hp
z7rU~MNU#38D={<{JK)8oH;U&5=(Nnpe2SVYJy$xj)^AkGecBFe{K~R0WOcGW^A}Bz
zBQ-no3*^^G_MLUwadi+%YT3w4+3M*A2>>cUw5MQB9(M<}oOYZmbO0?9g!n$Dhrc{3
z$Ri(o7UC6GVYnzlb{NSBU-)7mOB!E`75IX_r(v?=;pX}jqGC@xIrY5gbt5w!Rq1b2
zXSsx>tJ{2N0(yugJUvl>jX(jnJJ17%h8!h^T0}rDLqRdgexCe-Ekf9Q!+?Ut%k3yG
z(Myt$<9C3*1lK}nfZ@N5$s`f^V*(|Ik^oNbbM16{f^h&x_9wK^?)D=_csiS%eOvU|
zIpKF;l1Ol1GG=Rf0uJMg+pcfyJlr%n0CR8QHg7JqJJ-qPSkhP^O&KNJjy5cD%O)AN
zJD0k<KVIZdBXKP>n!Ko0q4*+S>|GJzzmUh=!6-CgQV=}Vf`j#MltF^hc<rm@;0wX%
z1yaxFj!{e0gVMZCc^|uz2<Wp2$DmL|wxd)ObhUcFo*&SiSpq29gQTbMZsS<;?MW#E
z%Z5&VCs(iZ<Aci_l;%Xntie1`V{JaXAA2j?dn_4w$88syD#?K|;UrwA)mt|3+bsRY
zu10%PiEDyOlD(&hMu0R6WHjP*{!v{B)Kf+?BnES{>v8V0m9l=f_{033Z32olflOo!
z-zQ7+4o}|lX?5y%_!C-+ai(U*U{Ahof3A%gdu=4tX3vS1=!_e7a{KXjw7=hd0noZF
zRkp-*a&OhR(<m|P#}V4&N2?F}43<ha^%$7PgRCkd5{W34gGe+(QmT3<8yxNcy(&1j
zITZ|#+0o!`#q4|#lJoR?Ff5>3GT`k2N8v&6yw4-}+(Ze|y#Jov?#I)*Iy?s)q9pV!
z>!BZdMFhDOG5L<A=VT)`mWKsX_(?%V_1xINy)>Go-@~>CYi2mY#}{X;ms36SYa4WD
ze;Qymy(dBy=ra9rUHGXl1yz!dmWkKHm!nmf$9U3}k2#Mj`K};(Dn2=tq+P}!WXf4(
z#KVMd0)a~G8MNIvgIaVjjZZ+Q8|ZM?0xw-Q-!<}Fr%EzVW2-JeAtkTheEzeK_1c>(
ztkY)^s@~s((El*6P9<8^J3^f#0R_zG0bw3f3K_NSWCIIeZ=L|1y9In~l<x6}%2^eA
zt1^?Y=i=dQVQOP$45u5DbAiT;WnkMnG(a50i<SN{gTFZ*VU2^^stFN!n6|}2Mp(j>
z%PXa&8?b7$8(Mhr7XnO=*mX@2r7C0^a*xkw-L*cTd4r%jIsuyp>!DLIRnT%i7PC}5
zj^S(GdL&r|rF#ahMCY0Tie)xhT%|Ufz|!v9U~t93)YgD1#bHeF>EwH&P0n9JM5TIu
z(XXcL#f6u;InI5;E4dz^-Uo$ugo8jXZ`fVn2>yMIOF>$Gt0v83Q+bSbOytbLige><
ziWu2ZOjQhBpv6pm#mx2CB6AJU5Q}Sd#)y69#n&5rw-0Jhd?62kD+JG12Yj~dHB9d-
z*epjGN7}zDbIPJZzA{Mt^H@liN{pr2g3IpJ5{F!ys_F0Nt0!|!>MovpA_6m(>w6Vv
zQ(_L8LY=&d!}cgi)T$hZa)`3dB2wG~4T=3uUyjR3AyyqFf>5wndKAByQ>DAN)2V6q
z=}2}@ksn;M#2=9=t?8j3(OD=Yld?Wp;4+G;eO<{5`B>7r`AB9#^g0SFuh2`qmc_3B
zoS=NAV^T`O^kPQUWRIgi1Gx#zQi-~_N4?mO-1H3vnY`*xluJ>7R1|M@pX%wibTm@#
z#Rniw7Tn?CkPJ+(pj;Uu3oqdGFcQ4l1jxCqCCzzBcTdMy<fN{X1(>f|rs~ei-wg(s
zzj=9ZlmC%|q!>J|V6IlGXe_K4;8Gjjl({?GvoX;UQ$VZ0f7O-2vbGr4Sk$17hLesA
zLR75hkq}gkQ$r=}d0*xBk+TI=wW$9aeZBJ736WX^rPHjSY@NfoYAHb4k~g^BZiQ2D
z<3uHb+%EV8)FaF`Ux<CCS&48yZY?-XRG=9LB$GguMbZGj0Z*9_G$5e}nNU?+Pax{n
zTM@F<^#?QJEP$MQ#z&Qr>G<BZdQHc+s3y9t3Ko=*v&bU0kxh0oq1*D)G5OIaV_i;b
zk|>pl1}4jdE$NTTmGJf!UnSA)Om2W|#Gi6JO0)B)R$s}9?C0KtFBi@YgJk63si<@4
zI54i=!>V8mHsy!9G*x`Iy=0-u31|3^gEbXFipDUFu_ctN9KQN3D0BU?!sDM8eoOVb
zV3rI=iol*iO2;*D@9DGMTlB$DRHkkN&^r6}FRm;9CzwuqK?^#?Els2DM@@L^$3}x{
z`X!xtBhv=Tw&@HV16pb9sn^T0@)Z~BnTk%_WtAADiP#6{5EHALP&%TJ!aWRM^F)s4
zj`}%6F<#ZdJIIrYU27YU14U>IP{x5C8s-bAisc^FH<QZac^&8ZRv`n@@f1{f9k;aV
zP#7(CfMph4*8~5>jIhLmZglPd6=>d~ofPT%_Q4Z**WF&QK3j>|C17U4M5exxhhMx$
zd~curS<}pXCi~J7L1u6a-V38jj$&7@e$%TPy6N1w5!KH@Ya=!b=yUeNfy}qAA=_bW
z8CgKTLwmgJ#2TeAL<VJnirK-hHAN@0eKjM!s*tTwv23HkW<WNkm?p`YDhr!!SWN$6
zMSVz&DE0^6FkRmTa|177RxY`vBD85ghTBOA=5-;(<eI4%CEUO?U;N>d682|-Izcnb
zzPqZ;Pmg!pE;O~#kg<GQ63W9XC9#3~QlqyxhQ_QQ^x!GF<?l!IvY^h#tJMVX`-JUi
zU6?+5uYO@qV<dBmQ5si>2&GPALRsc7Q_6W7wwepe6+BEkh)?pvJcq!V`%0ZQDHS@l
z2&Tzd9)C^_(X4Kkf+HScZUjiA1{Gi*ZYzFPmN8ucM2|x&JyDW@R;mVJ(uTZ>D4H2h
zt<HR8y@y5wp5#0#PB%;LufPT4Uh?P7AdJs)o!LN&EMme<_iq<R5|HsLBGwJaxtyJg
z<l2}x_4&RK`Ii&MCX77lg-}U8ja7#<R8|TAB_tz5Ui21SrcLW_D}yjZ%|(V{f1G!J
zx%phb3QYX;(Hd?&>Vp-(Nel8?y2NFS8UYA#=kYnF&_k{931ln}!C*ikjiHp=_rA>D
zO=)@o8GtwgA&mVqmlYBu|35u%4o61~<WzBp72b&2$54N>ndy2oXh~w8!koF@Ekza-
zP4AJwY@u;AEv-oXlLU{9F`E}1Z>d54C>kx19(}g*C-^`TwA@2_WM?o>`ZAcR9xl0@
z_KI@4IAs2OSEf?yNc%(zc?G?o*dp7ZK_^L}Y+C+jy_dah>}|>qJwT7(-=E11oNO8Y
z^_jf+AEOese@F%TTLcWSYwm$ASgim@Q<&{y4m9pouAuWJnx<7!SmNcdtY5FWrJ6*#
zC$UrL!^e(e+(tXa-6n?X!a~ilf@cx8E;&1Tx<1~v9uJpS$NnH22M@7NlWL0g;}7kc
zJ083f7#gwM@-(3V!Bj&M&l5Y0=1H7rDu%s8wVj-Fk_c%l?2~Gh(WB`}|2^-=$p6)k
zh<jmn0FHx;iRk%~!_-uaCwLGkEEH1~oAnpLbLj~;Fo$AibfOrme5l?Bg~uMdkF9Ue
zEFTIFgh{nUTZVOONzRIfLo9E)I7<9scgzCd4zZy<Zo>($;hLT<CnskF@TD(}9j;(Y
zl*pNI3-kK5ANWPI_Br$|#?2Y>O>lso1N)j^xhj#OV!JNgZ`etzmUA#?Kl-`Wt2?}0
z&p_$jr0`U!+AjTNyK6A=ec3Z#3-|%=b6NO~TyS8e;Wu`E_w>`+lWRYO&&SyvH;=|P
z=6QcvBaOptz@-@EOqym!h%9u=HCQ+LP}_8QkW-4GY%Xf`<>Mak73-E%-+eS+Gg_#v
zA^8m^{Vw#)x@mGmQr)W=i*qgIOzkc>)`J~77#3eJvGNf7r67H{iO37%9kN;o8p2?I
z3rb3$V=j-$Zq*Cr2D8uroR|Hg*Xd&!{HgC{j)`OOu#lvogNeL2YH3+$SH2d-9xaoq
zJo6FKIhgi?wSjZ^HQU83x-=|otJ$y{_Sf@`s;Jur)|Ob1RU!6<mzX^>_cp>#@kT_3
zu2nC~3e!dG9C0{CTr!Q2eD#(EEGy2Wz`UU+1Tlob{9r**eS=~>13-z_$P%y0$K|g-
zO$r0>{soz`O1p6395G|LiiW;c7}7Qc=%Rf~Q3_EWa-gpR0sMpnGL9Kf^MP5Qwix-7
zY??@b*FxfqH6fvfGI!jx&@Y|JowvT|8R1)rQX<=hG8VXIOF66Q#D<6IEj3y4&K>HC
zv~s1*J10&qq^o$V&5qJ^Ze>g3&K(-RN^+?tRLG7Y8HJ+y6zHsKpyKyP$AKStG!alV
zwq#er0~0P(v_y+yTqq-9HWjfWRum~{7lGc7#E9>+1<V%p$kw8#DoAGaXQ>=c63Q>L
z?HEeKkdwD9I$CmQ(0i?ztsH8X<t@o9xn~#~vX9p`Szc@u1wnkcAKhrJwG++--u{fL
zXv8pk1s7SV=WbfD{wzX#rYDen*-byOJa-s-f!U5f!Ibe7J-GkK#9Trz?p()+^3Iew
znT7iRWqB>qmAKc|UZWGz738-cw-oXFi7ws3_1`Ku$^AD*0N93Vw+CwMN<(j4+<&F7
z4E;&F{HXXV<}i$-wXKHAn!ebdPgfio&HAk>7rrc$fV}x<iCYXr$q!osv^BEEsN~Ex
zHDP8~tAeYRyB;W<JB*T-h-N6tehM>|_SYMfQ}Jda`U^MapG@7Z1fIU;vValpf%m6Q
z_;J&!iwA}{N9Rb8K=9mfe)%iqD(URn?Lz5?C)x?TTIHgbdKo0qff>$}5h0FhZ;h&Y
zlaH!XchC(43<iN^0_JBXEuT}9KgmSDA;Mu(`W2QaDiOk#XO-@;r+`_fnSa?i#`Gwn
z=A3GZ(vHrM9cziz1Ro<){M8U&)kC<&P_WzUZVT`I7F##EBAaOk-KwLqC9<24{zaNx
znU+T7xa@HfIZBX3`gCsG4w!-!8e5<gelBcUT)b6Cc<A!+j3JK>JC4r%CmV@Z*2e=w
z+gcSa=;e1NOKgyQut)>oO7qUm1OqLrkfJo5!o#$qhZ2mt?y`5a1*uMP6%8eRQ(3kS
zy_6<sMFPmd9)Vn-pfFH(5<Ts#oxL7YF!3Rr79Sc!oe;4DT{(>^d)jE&?*wd8RLDNh
zKhx=C-zOYOYJihUE>TkV<k{f)@)L<Q0?ydgs8-NHC2QrGHCFJvMm=b6s3BYA7X|N!
z`K{|dCS$fwJ+?D7yp8WgI*vWnVe>K)s*9U_k@HI{k>d?i$Bnv0QDOHO+zAx?7E4ol
zs0+!9T1wc8Ep5$MR3aG@1!uvIOC^7>(ri^{5uqqvJM<oPdIO0a9VP8=DWy<LnuE`b
zO-l)i|F+y1Yfc6*qPuamp&4-*Cqkv_(UiYr6yhx|;G`~R@reyJbupzxo|YEXTZgO8
zJjoGGN;eHx=Y1RgzJfSL;Zob<b{&h!nGVm)G!6`V;Sb)R;2^1utbd7Bw_Pc}INuXB
zN7~z#yAuaO5i@6If#K)Az@9ppA-|Gsfxis>mgpkjsUE3O&sEJZ=S)ze_l>w<Ac+T(
zU(^KbAeUcw!1+AjIk>olkdfECQd@{VMkqlhyF4R*T5WPxfi1Q^wIy#{WK-9@I!;0(
zZzkv;^aoIN+F1V%+c(Q#P5&yJzF7j0tF)wu1S@L=R6)l7xC-J%qlTpGMq5*zzvdIL
z=Dg*ceB;}HB8N$Lx>Rb-oe;zZ>&N}=AgVW&H^sm`2iy;benbzI{q>D}YzP)WAK`Pw
z@%LS6gv3V=FQ<)w=LI!&{XtK|uVl;C+G(B6yffAqhXZFp{9|@whjcGL!WDF(x!tF*
zXBK)#_-*e3(GxocDiH71%^SaW`k%XSLOoD93O^NJjPO60J^UyH|AX1X|EKJm_Wi{u
zzjRh_WR(VARRC&@!BwA_yNb+{h?-W72Z^77j`(`M)gd8$CEd6qW%GFEaeK~^OX4|k
z5rB`n-)k3{L<O`99c-=Lfr;G-)CcYF@=w41)$fw-7s3cw$f|KjdKILQ5eVwkrw_<T
zgRj3(Dga{@VVGu+=I@fyhlBu3hN_h}i3VS^+i!sHPydRwDLzXu38`*0W<LgHU>~Lk
z@mC238b}^&@1sXTA!!(ahp1uiFOpc`kOJ797LvmL?+o-=m<V5k6dY?VOfTjgB`XfS
zR1{jlw4@VPS$VlnX#~WhR-&T5Yp|fv(NSMHr#_C$<3mS+EHI|*uZYdkCGWY@kKhIl
z9dd+^0Lj3+uQQ)!XMZN3Ng63|hga=5l&vQ<@X#<4jDyyyrM0`|Oq=uJR*c*=XOJ+9
zET$MZ6R-e$I-YN?p}62Q5#wm#q^(1pb~w*@#Kzko1^fN5#PwmE2bj*mnP<2>zZyv}
zeA%`|xK<&zJnU{?J8S<&X8nG^S2dvqI%a$C2{jxJ`y+(V@s5)Wj?#?UBTq0>_Qg}e
zmzs7U{1np37b4}uo9@0LexPkbM7n{>d1o&CF!aLl2h&|iG~&&C_1Ag%#G9Jnxp7^f
zHd2Sh<mF1KyTU~W=o%osmb0>=1O_(BQJgtyJ}D(nmlDoUjDuKAnp-GTf?nX&+>tNH
z-wnZss4oG3RdmMxd=QF<FaH8b^kjz2(sgh&27FAahf3TyEr|cXo~m%Xt!<JY9xtbA
z7OK!j(LW?rD=T~(yH6oZCp`ecjvS>;LQ%m&li>XZ!(m495IxgYN5wA#bN+Cq#nK#O
znN1O}<*Fn0bCrPwzFyE`fKi3B@F>#ZAOvT`Oa(K_GD};dYKK&pk&ZmAV=W{qCBEYn
zk)$PuWB<OH#|Cc_ZA&L=YFPs%YPlRQh+j9U`PdMTsLQ()aCn7?r+a#kSKR;$n~8^w
zJ?HE$^oArqrpLk+Yv{;zu~iYqJ_TwdX|^yxolWkPjq$9toK&^AzGV`57L|Oq+*`O-
z`!eBZ@6er#0puNAX^U1TqoEv}Lfcr=-&420%+S(>BfJJg9<>DtvyZi9;L!D?W*k(e
zRe)cnjm&fuwrgW`+bGmo@C;Iyp`{gy4WW>-+9C{%=KOUc7?i1rEO346MY7`thwdGn
zOI`FFN*vPEJc_|D4WW08k)Qt@xBZNkIR9{{Bp_NG3vX&H*3(BLA$w4A)*&Qq;F|W9
z(V}7;c(qFwPT!s0iXltx=XKnFFag|6dS91RlU@gso?OkYWso4@?^+*{-}eOk=R8&0
zV%H41n&CMvJ><nPK3ltzSq3#z4prG@jl`+iyJl0nU~34?npRQVp^L8YrQKpXc4R+u
z*!&~JH&u0{sFqDbY@$z9t(u9I>bGk=wO3*QboG`^wQMNwgX$bT?lBh&X)|(8GIt&H
z63alPVFy?1iIQ47QCZT8LBzQ125G;J)>_N_v<>^Tt?gepyB>;?R**H8o?@59547zo
zfYqDK;uVWXNWPrena^*>;LQGX3*btoPB{nM%LN2Uz4cIKStD)7W(nWe1(eH@HU=AX
z?F(Q9&tnqu))PXxK$ggvsp8AZj$ky&YGM*c(p0`>3rBQ&X+3S(lEv|-ma<l{WjySR
zp@`M8`1m7eZV}54tssh$m9O8E-m72wC7EwQm#q(BYlfeM0&I`qtu~kNk_&VAIPK;9
zD6iX}jJiM8;9m@Ttd_<_uX|sAGp_#N2bLe&$E8B@QkYKu+4aY)lns&ET|$}`_WMAF
z$)%&~<9@T_upS#f)XC`T#I=X1F%nzK_?2RII}&8GyfD?!z46+zb?6=bnC@(I<#4&V
zG&Hc-b84~1E63jWYW+bU(`Z|pVW1KYR0!9}Rzcc;V8k9m`fFn!D#o&40@#@YyMB?m
zSw8Oxj6ZsR%!8sIv692hGBsXH!(LnD=#VECqRj_S{9``ypfRv~yGZOvdP#yesIJOt
zV12oq*LewQ>p_fVPr{c0%Ma=peQUNC&JVtOHh}$}{C?d47nKjO3pE9+KdL(oWl^fT
zdPTrl&v+ANsL5R=Q3(aW5Bd^gkci&-m1>XpZyIA_MN@Kq4|GcuJDOEiZEJVDfi-+D
z2OgTjy|m_`{X5RjSuMJeTR8kBPAm;&*{3^Q1Bi3@FUEwQ7QsC{KKr!Jqa$<gXNR6P
z%xZX~(FK;8Hc{YSD7xlUn9UV>OsJC~l7y<fD?O_&YP4XnM;9YZYR0-9sf<1p<Yw;T
zja8vbBtEGmaV$2T_n(1ke_z+MbYdsPurW(rmSql^?Y!w!iCW7bJgFS4z*lLMTtZeI
z;)UFf3{XZt?JD1%%Z^@{3G+F)UPMR`OTV^LJnOrKvaksCo!>TZEjzfdP`sy{tFrdD
zneKw(;y$I}aSY3@B}OZ@eE4Jm-jHiq3p&9IE|9~sZrsf2x>2|Pq!#$?!RG$;1B+~i
z{P$``YYW4FeMJvZHE{YPhVVI4yH>FnCBguaV5*tbW<*iUqV68G*|F$q8_Y3hG88_a
z4P-m=qvr2G&SH>z><@Z!-MQNE@p3F(_a}pCyfm6w2@lS>?(IBz-Eu=9LowBwIKHRc
zJX$Bml5V3jPB<)pUA2I6qY~)DMP>PxNwon{R98Y%qB}u?>M7!sfF@fO|4UV9go9fP
zdt;{BN9GBV^F#Mj;b1ZVQl%*tcxK#^(#P4eZj{v+GJ@hJOGMi2!-(V9i=#CTo<Z!e
z!$(Ewp_oPbsnIckuVoG4Rbz-Y<H1ww1#vWkFE~Wydq|Y61v{q~uAQ!-IKdJd8a-Dh
zc`^BmatCCh&vJ#gwEGU4G?ZQFj^hokjxH>mQPLUr6qiG<`>G|@^Kv-U10*NL(94zz
zk-Ru`FCOn-Uf-jszxaAN{ah1<;{%HvDkd!T>k($gA9+p^BoSgp3b`Am=cUkSoWK(?
zS#HIlwWdJN1{{OP=-G7lrGalSWk&ixWi5!HeKr1|ILnE~OT7T}v<yoo2{Y%vPl~<P
zeBOE^AjrAZm<g%<RTal4Xv>xBUZ}~*njkv1pI@$No-h#u3y84BG=`oXuHu>xe7<Rw
z{Of_|UEe3$J(hLhNLH@3;P%nI7?=aDhMJhs`g(h|Y=LuR0VqXRtbO<_2VmM-HvgJb
z<tR1j<nvJEg=PL8AURl2%dE?m14o<%>-*k2o<C`hA%tA423vyz(SzKc>gVFc|6#O1
z!NT%9cadR4GVoQrUg7zyNmU2hQ?98%53Qb_<3s*+Bv&cKPdL|XRqFMc{O5T0@rF44
zbB`}?Wc-A1s6^H@09-aoIAotLG9nhp7~?mwzC%(0oU_BDJgUX`=vgG?9cJo0p%T6%
z=7>}q{NZ*yYcgph2X&isbw|@N)HPOWvKIi%wvkGoZf{GnT0|q9X@8TyhxodF_Q<P5
zIn07vgcpKhvCm56?_p&pMXEl<k9|vx{dy72$2;$dv!<K}jqf)x81TB>KF%(VIq*@=
z@>lHSi)VJK?9c@X%lr?tuIlPbkJoP0w7O8Qv=^SPOb{dNXP9Oa5@OLwAomK!Ci>qA
zI?r`|^ithZPQ19YJ+8BO*?E}7=NWAdFw2gPEzY+udr;rT>e3C2ud;h)w6Cm4kiLu2
zPWTV<mY1A-Qnl`{a=v6|(7ks{V^=}3{THzUurjCtpbv^yOv^tD*O{+rGPbt$gS#3r
zF6hSUw~I))p@nlW5E<C@Y}Buc*HU9AdsKq9BCG>m7GZW}2=iFqkbUi%T2YjBrC<Sc
zlIaaV>S&p?24lSo;g#e?{Kh%7WJyuAtU(aluQh+ZUS!oLMYs!dX0>Dg>niYnr;+0Q
zj{|uNTO(^1W0U_vl5YLaNYelN@BYtANdN11e{5|{9BmD(|Lp_*4}6^Kkkq~FCnMhe
zXuKK!?H~W&4={4{uy_7PhBW_IAo60B|JB5FaC+)@WgeHDFDMTKjHqT2LY=JJB+x)a
zXb{oRCRHRT?{Z%AyH-fSU3Yj2gk+%E+PcTN9`iDX=VI`$r^qGIGQpCYnc4ny<l^yw
zkBkzMSHuhDn<{z<8o|nvG83YL&f*Dc2c$?-5<TRVr6FO`=8L3MV+n{LR}QqDKd?f7
zh^pTJaeYVYt1ip?o#PJ;n_LhoZYCo*;RyA>SW*l&LWm}s-uQbI1ut#J@-DQ5Fq|09
zu$&kshM~)wN%_Tq$ckwPyK`}FYb~jaq=8h%Vmu|;6zCR-$i_Z>rTEQ!10Eher4K7<
zf|gM23Co!MP(7W_5vG+pn>fXAo>IGGW+*%H_QSR1rrXJJofD{uSq{E!Zqz+X4KhS8
zS<bPgsbR-8I^i~%v875!D!8G+)<#-(K|eGkgzpupV<>&v+wKk1=aH?*{tEP9z>P2D
zU~*-#%6tcOa1?%UcTU7Q5p|-b?*1cl+#Mu|oMubIeG!j4<ySG97pQgCB$aHr_w=}K
zkOJlEaP2vW&>mB5(yPl!VM&6p+hzzqxA=6&gOa2y30uv8k~F>~&fzOlL@#1-e>b7g
zk3&iJ?Xf~Bvjcrsx%2?2Z^GY#)w?G>22m49C{2VBC4;iM>7h(rkV5o$GAQ7h&B}SQ
z5WmylR5DPk_rk}X+ozF`R>JlkC@n3gds}z0kt=V(toHN1Ckq5*J6{HjOM4284p*6C
z)vcg1=vlXKFq7macfhRaZY#6h7UnAe>G3OK*^Rc_0eHSkQm=IRMC~ex7$b{ep6Xfc
zn2wv->QgX@yZa#xj(Y-i?+>o3+|EJLYc@-KOQ8X^xXyDw(o;W+4L(t1$7eguXU#WY
z*-e<Md{u;J&z52qaL4@<JfJj_CWKjleRIMb^sOWI-)8U?X}kc#JxU0V5c%5yMa4s%
zA?IUd4NO3tq}gpo*AxBmx4v#(rVnpcGrF^JznyKcz1^MuwC?n9p0++dAAwegT><=Z
zc)A9aZfV3!MV0<t&_U%j5&*m@@oN}W%c1KUV|BwGt(!NxFkz}^JK8l|nGA11LfnIX
zq=02egTx>Xjf)FxvLVM~!+BAk>wZLJL3@ZpPI9mvO$+ImWlu#?ejmb8C-9<7-m`Hg
z#=x=(g;la33rf;>HtjZBZP=j^YUz026a6=s_bjD&TRi29#a4IGa~Dz4R5<zr_oD-j
z^^4MdgBI3y2M-kmnS};){9HyC-g!sHcmI6W8SwL<-iCDk>p!<T_F88N1Aa)`Nk2B*
z|3A`%y`8lOBQpc*zfKd;@v^_L84*IS->JpyArUW-5IB=6kVMK+T$Txdz#}Tg)`VTl
zjI^F;#-CQ*aM0fRi_!hMe0Ri|_bt`?5XktP<5gh?$8S$ABvKeRSs?EHZR^W+souz!
zV9;sV`AU%JszT0jB<!Oh_n9*k1=3X##Zu=4&SAv<@-sXgLV{^*o=1CullEoX8B}xG
z=j6+#ac;^7iZ?*CEn{Ge1w5VWOL9in5!$-m;4KO_IsV0057!9ib;cx3z1ZwOTQ`1l
zVf0x}u=^=Aq%jY3OdjLn@>x!>P7?SPmW}I4x}Fl_DSR~*sq)LMN^D&%hP4rfxmhjM
zf-h-n7~V9QzlbIRa0ZsUda$$ca%t($Uk@f78Q<AL=G!RRpefMepfuARZdx|ho7|$b
zd?&NfMGJD<P!6XDHcVE)W^<<cJ>pw;YMI4(++_#lr^1+!QjLe`<|oGSPsK!E0=7O+
z$DiF^H}p~VzY#(Y1_&RPHJq>IbH^#)=}+xOG*92>In-{U|GT(Mau`cS@+a2oKe49&
z&r5=#t)7#k{lAHH?4<1g1A^%DYXqXTX3>#o-dqiZ5UQdSf(5#cC}BE+T7S%iB(R?z
zwqki@Xf)}@aSr!>6b(kd;*!}o9BII{XMYf1$&D_N2<sgOoB{PPx+zFxs1#u`Y-B}X
zHYCMbzR+uQd$s5YY6DFB01j48A;?={d5xaE86G$;M_Vf(pD6I?1B^BT3siKNR7svb
zDo_qn6(mNO49<B(F^{l0W-_`*=_!fEgy03`vVFzvo3-+r;aDV%HoaP=`{R3w2yrv5
zSp>-j`%v(Vw8Z#<RDmWhr`$$M%N#d_%DNC<mettlO1(6fDwZ3K)fiN_GvK_c+mJy+
zc!GOtGYt=-6f>V12>to$^eFa)hhtnpIr8jd&@rDWQ_d4(5BAhsTK)UUGh+bv^<{>q
z;Pn)<-IpG^V-h7~y8FFW**I<7DK^ophQa4Qc{4b;F1b+rL@ebeVzmEx#2gK5jsJDL
zvg7*YgcyI~bxlpyA!w-SvMUq~Nk}8}8_Rw_BFQz6wb<ql<?Qow%Z)@|a$DAEcWL@y
z7%Yszg)sWGCi3Ri=JsHim^<{z(LH6C_;*Nxev;&S8b(xAh{iNon!!Mu=rB~FVTo9Q
zbQuA62;vEZ(ep2cvdKt3cZXpBKA+I&lRl5YtU5=DOb}`##2YO`0tUFE9T2PFM2Kp_
z?x5#1JfaZbUJ`|Y|A(@73eq%KqD9-bZQHhO+qP}nHm7Y*YucQ)ZQDG(?~U`Y_leku
z`0L?+t@<i6D_5?yiUx(%6-|GQ;o7`0<^7%}57)ipM9X4|EYdV%>UkiBsN|JJnFBty
zU1!p_lNe*dU-r@8`{b0FA5P=2$NCZnK7DHo9?`mxqs^%)V1gr)CkfEU1^;%{TXf2k
zXiayr%xTsn<ax}$p~x|M>#%IyqWCp0q=iBk9_q;QYn|xeUzp>1wwBfJKgSXBQ&+M6
z_s8*nYbyPJxD))_y2@9nKWd!;q5GUV?84NYvb8CNm!&kJj1o5E0_nK18)FD>#L9F`
zV&6;lwAcNBqYJha6@z%nTmF8Fq6gIhntB~h4%a%U%ft`<9c#BxG})ArhwB{{I>=PK
z#g#9pbg3R%1D^Zg#Lob;K`cR1HE`G%GM91|@RP7up0ph<ya|${D-s~j20Rw0Pa|mB
zc&1Rx^H+*k-!YIjkZD1^Y*i`?s8HQ6ydm;T$&v)Hi$IcK(t&kCiCZ!P@dlSBE&Ha&
z*PrpM2CWJnPS+C&%_Hsv6c1L#^X(zW?dL>O_^tENPGcXUq2%0OWn#=cXnRtbLhhu0
zyiFl;6S?R%W|Gvxe|-^%_)Ik9+1~Q6JZ?1Zw!;ClY)e-csr3f-h=tD$P;>VUpl+Ct
zBo}0zo7UPAy4J=J<$DL^19{wT5_}p&4Nais?st;tMCd~k{z)`tCuYuXZofL|++X`#
z&pD@k%@#f36uG?_tuVFhS+#pou=G3-N6?cvS0Uc)D?U88MP+&{ZeggI`5k)(!3Pe6
zqp;2wAsG(S4AUG-WOSd}GzFa(7<!<NFc^l&<2+9s92M?7%_hNUgBH814;Wq!qt~3}
zFUyX<d!5QdF3EIEFF8`7<M5>Kc79l%JmF8Bukgy`y;e(?di-r(?cT++PXBzaKAelt
z`!93AFROMd>_1;x!T%PjP3_Dr?M(l}Hx}P7H^2ZBcI^vgt<#FDwbKWPFvoHkzyi3|
z?vT|uXbo$LL^>_Coo7NlM<Np6+WXz4I|ZFFFxR=IyveYkx4qHt9ei^(W7B5sasPx&
zIzZ%P>`P%-$ZErcZ4eCjiKv>1quE3jNmdYKf#S6T9m^MQkd>Vbm@_FA0FPaW%8N09
z0Bi=&j<O?w1=vf<1;#{Rd(Hw$jL5ZjM1s!}ECL1W_Lr!iXt(xnrHaWNi8epII{o^h
zJ^ji_vaF(k{QIbh@>cLpj&+7^dtGJixm30vgkbv8@*<}S>~#uk8`rL?qE2EW7gfjz
zVBO4u3DTVkinuh?^rM`1p&M`$@xVM!4)2F)$u+Ka=!oJtHGK@0sEWOav{Q<skR^5R
zFg#M+FnZ)n_AT!ofy*a8AuAN}=Hbh~M1s@4el9B*000N#|EX;9U}fO^&rzUM)7E*t
z9r0&uJ5Z8uaOveENydxwJeg=d5=&f(loS2=C=56;VK9qG6DXy|?QZ*>1|X?GWOZ!O
z*||aR0;p@n_epc7`aZ~2gMX^kvss7o>F8r`lm2CUd&P!yg#vlZ#cN>L^Nk*nVu^Zz
zYU+^ke26hSA;1KgP_zeeml7qhHk$$=5`~aDN#Q_-)5_>R5_fh-n)~+fmeSbWvVX~E
zB1xq|2x_iaEzu;J0!@Yoj7XVAN+Y4RiDOTaU`4n@O{+uII2DA)@Knc9<|rf2Ruc8A
zAX95~s^A*7T#u7%o+!MPA&DyfC^SlG^f-n(Nt-ftY@(?tJUo0Jg-rr8zwGsH5+YaA
zSx(&w*Z6HU8r>Y1O(JC!8L!FydfMN3Mhm2JG}MF#a<xbTNJ~i1N*cXc2`n0@7Cr2+
zG|RAZkW>c)no=_=_Xr-bM`{RFXTmT#LO87yk#=OKg7v{U^+>xrL8nv{CkZxk#o!N4
zkq~2Q<L>3uR4H3GJ8qs{pLpR65f4N?nq2xJ(H4_Uxss&ULr|j<I;nKcSu=}H-Ow^e
zjff#~>Mps=M^^+J&oD>Lw({_-QR|clJ!J1)d%*V)k(7u9ytUJ&|MSr&=RlmNjT*yS
zv$C(&@bbiqQp0zT!OIWU`*kv~-Tf8gI>#w$oxY0S-qb*KT4hq!G-mLU=*rd{FI7Tl
z+-ecJ<KSe<JO9dAycxciSPIS7fhA|yQJ_)kytHfMvu_pkMZBgWn2dBDW9xx;>shV-
zy~Ua+D5rODnzb=FDqmg$SE<9C`}mgsIs2IS#dhI)>toN6y@A^VcS(-aD1ELA>*`es
z30B%Q;)*54@#)~6-#mg77m0T9=u;Kq6MKRXftbUzXR9aDK=tU;-u=|;p|2q>e{ppN
z=}|AFF`%hIt*NJkr5q#x3#wTm`d4NS<P}LhnbKP5axceR(c(imt<M!n(Z)1dL`*sa
z16qy89JdBs5XFU>yNWQx>UqdrtL6@)nPLCy_W0{zaflOIq;?0*q*mb1PC+SKt0Nr7
zbFoR{RY(Q<MSLyAiN$OAhk&DrJFK+|u^sq8=JRYefrBU=Al{}_BrZo`$)0HSL!b>^
z+;n`P8y124#+e3XwAtB-Y>P&efn(@M8$O@6dv!AEy?28vGCXkrdzd2Auw%+=?YH3E
zxAFny?iJTmpqT02*!<o5%>Zcuz)-nHZO%1_&qg3$a1@g$$mIQl9!aUssiMItmk_1m
z0aR|1imR0WNmd^vQoxzoLp5o*7jwXH_<CkIN+tXJB4(%e*W&DXV&pS?&c<UzYT+y`
zuBw=Mbdw>DeS4Sty(0@DWd6v+ux28fTs^cs?K}>v(`G~#e6VJy$Kr;a@|@(S4vmN$
z0-0>q1G)SD>S+FlAM=^NSuO|c)pHHpT|4brKJ3cGQ-CY{$+ue&@>ya^=xFxqay|jX
zLwkj3?YS9nQdEaZ8>XDd!h79_4Zu}2>7Ju}H6F83I?YrB7{Iz#vE808uJ2PVf^)|T
zLAx;f-wTAMh_4*F>vb3!3kEDDL=Tk$#zCo0F?HVhx+6*eXa8xg8j7@|FhknrDqF>M
z*gUgwgCa>xAFI4HRjDjLB2kMs`I5+F()T&}5~x^Oqn>8}C52^n40yXJXCnEKAPx<U
zu3SqxBKdlRfA~E}q2frZgAX9X))=_#gu`{R16I3pzq4e)n7Q)>csYP>bjAxcwe-7q
zK}&yD^}8I!i;pUkh-aj}i#aFQh#(>QXCDV`ho1)X_4hBXxB`gyjO;i;ASDT%hwl3o
zWjh;Ge-TqIIRgaL?i5Bi#%bmup_a~A)_9;0i&d`QrJ}rdDOa9+pTKrYUW*y`J+zAi
zdU;dRsmpoHStN6gqW0ccF5%D1^S)dZgV$|(48%9d`>SawRQ`fgm=&vU5m<$SoKvgE
zR*_4`75`DI`^B}?>%l>ZgD{2}nvK#d_I;_G^NoSRp9NH+xC?+(Y#;5x!(z7vnppE`
z^S2yy-lEk~rxvDG6Sg&Tw(seFM>vl0oF7y;L!&HK4$a#Ht&4h0dh;=$ASg|o)3rWs
zTidt@D)Nj5H(7>8KdlBOcWLlkR$SPh1Iw#9E_1hpDPLMD2TWlmg;%BC44F*9>zHV2
zmQUNPOCU5**D-4gJ#$$3*=8pGFM@I@m2xnG>H?_r<{98#8e#{%9OsLoxBeUm%=~di
zr0%-6g0~oTVHY(TG?6}?uIE_v2*f65T-^BggmjVSBAZa4zwsEJnqoZ>vLxoO_o4__
z^J|Kv9j8{qGLQ0*u*lvz5u^5=Ev7GJpN_$N4MJ9QumztmG#G3wVp7rH95r-ACS*Ww
zYHbyr`1WpvAk`KPHsR-Gs1;9!w$ky34}}n<qY{fPxk)9{xL~8*05(vEe-s>Wy&ulw
zGV*-6yZrQ#IN{1Cq9l5B2qFMjv}FzT*h<7cGu4p=67DFPEyY22=XxfbT+VMWW1E}w
zscKfrds1iC7kUxpu-c4zQ2@9PH$C9+{W8$M`lna(NhwQeZ0WS1g@8x2C<1D>!66KI
zKU&;{Es#PJ*RH1MxQjo_!nyL?!fe&radli{Inf!)g_uNEj;0Kq?9!@Cw{cQF866g-
zwyvl=y)%|Cb2s5=fyw7N&DJu6C(kkE9(BrheedhMn(zP?DSgdDgt9I%930zGHq%Q&
zH};iEGaaFn08KH~sehVPV8O!<fxg|o`_yj-2-xl~JqbRPPb2v7z7ixI)!r1urlR9{
zJJw_`V(h_Rx!c!|{Dd4$D6&sW%gf;0A?0SSBUzlOgI5ZVz^;TF49O3sivBEvUtTi|
zqQt>{9;mcPCZyQ0h?dF{L18-2+h1?z_OesKj`T2r2X|R@#U9c#tq>Mje;Mu6>H(Ls
z;e=2Kf#P+PN*0w#S3jc?cz<Y{d}e<ZvnM~cF4-|Oc=(12#;x<uhRdnE-f9KW3&5#F
z1F9?<NRy<*rLqMxxkF#Gnw3Gdoc@Te1MaHNsr+5k(Y^IHyrNbK`Nmb8(sryDa}Iyv
zLKlJjvrJxg!uf1na*<a%BuTQL^fYweEb(VJv|>sJMTK9X%s};}5|=qQmW*S6wN323
zL>!U+Y*v;NA&f%~f0SsCLL~S|TiM1FXPIPnda2c@31WO_OBH@d6>SDI*$v!BWSit2
zlw2omLSJgWs08&2L3!~&3jcEAM({O;1JN!SZLS7*%f!L=INm#X3;h7??`!8A?_8-|
zI=hj)i*cPkQ5ulIuidYccAfDXH(eax<z!zD>*-+c`TLZFR5PMw7G*BG1;53qU`Tea
z1qYAVfyFp3vtdT=HD2{<UmaSyJDg}RH)va|4+A(-mZYux3s6bn)ufe{(}GFMb8kx-
z%d?tXWA_oRR<_nN{szH48WSOji4fV%x9C~C)^)uKYX1i9ioe3t?jC&IjVPUY88bGT
z^?9E;1F}%|A?scXc7i9oE!O(biUF-0Ll@a*DL?)g<^0V+vTL*F!<hO=?G?VrEPyYw
zsBl>Z<LUcuu$19C_GbL2Pr5N2XBkV9%<iuTX0YqhOSV}wItyz7*!;zlT8PkjD67tn
z^Ml#}y`Bn!-|7RvT+{c+A{f3<&%9*=MM@Ufp6zYJ>X-29Aju!TBAdb|R`e>qQl{Vl
zTF~m1J#%^E$m$&kv7N@2Q#N~^3%rnuW3nfhjOFVLUi6~omZ~;x_{ZarY;shfo&F_C
z(Na+1bjtOA!f_U^OROmH)nZ}h6i&k_8msJ_>*>%K>P7{1QnzU=J14X0Z<l(~sR}m-
zOF1*{$~rVLYFcxpA-FHd3X-)BfAV5&AYgY1LeQo3*+}hA+2xEYeoh_3ny%{l3nQJn
z!@I#fwoxb=A)F1&%HwxQIrSPqqU+3^Z<e9a_M}(d2lDRkGgw4CLisb@byz#1>7zke
z0yTbKLQxjf;^o|sNAGYe3dy&qcQH-RbHlukEp{wpS%9+%;Nu{IF8BlQ{G+#w7h!n9
zu5M-WV3Q_Kt5!(OMW?S8cS@`2tj!!<jqNae9k!UXh@H>j8J@OftWz-pMAEo>PbnX_
z>_y!Sy*o3OHy`dNb9ZBT|CT8wA<&hRLi~HJY|5@GE=7yOBMnvaGsEli75wb<v2oMw
zOh~fEAh_J#$PWr(ai`{c5gb#?Lb;1a8_q#ffCw_qf$GrCo5)UlPW0lHtIibXFx1rl
zhkVL~*jWbp^XLrzSq%Sud&Azy%GB7!`QN`fWfL0YfEi)Jp1q-}Xl%nlFfafJRaL=D
zkPFg6E5;9HlBv+eBj=0l<>&B_jK6%o$=97$`;eAUrf2bB20kx0fqk$-o&)^atapj$
z5LpMPnhG;Os&j&EO_6OF4S5Xdql&Gxs%FVA2;cFDZ}?-o{Q7@~H9_Xkg7l%AVk}_t
zFdl>~4h)mMw88=Uvw(q}3(h0tsOk~Nq)mzPS&~Jn;r%jJHBh~AsQoc;KM-B&sb#nC
zn$l0B7%@7x-LvSLOq1dd+FN6uB;=Lij4Li^6qb@x;2E`+lsktQ2&Qhg$-+Kwnc)3%
zA0mBrwwuI2FY8RSp1vFBeW~z@^R#sTJ1n~V2>qYiv2gB7ow7e$ef6_g{`>7Vakl^e
zslOI<mUjORq_a&FwEiQ25PJQJ8h;`vEW3v1by8782~{M@+pGX#&6JgD!hRu#CHir_
z`Ky%oq1}G#-3`wf%b>3G>@|P9ms&Iw`GZ1$T@c}wV_$Tk8ru+MKJXnQr<>vi!Jwq7
zII%0|*5ms}m{Cqcr9`a?b1P;`c^qRY$J$sJCK_mB$-03=`Y5__hEZ!$rmTd<^p~m_
z*ax_>j`&GSkw5d>C&J4NtCVBNT+Eu%#IBB(jj3RPuoS8=RY_+x6s3xk1<5h`3#@Z+
ziIAYZ21k>_)7eVVMzO1&LDMNkUfmx4)Y%$`78xyeM}?+UIy=I~k<-yQpSa>YOQ9QX
zHLZ}X+bk=}=2-}5dT5h)-g2V0x>vL$56;Mh$!{%^;-L@LOb=WRU8*<p2X5=37vIaL
zY`UWxd0-dK4BT7FCN9Tir|k~VzgK2G%Y><8HP5jBd~{Jqmk|HBDXBk;?!P}eLuXGr
z<Nt6^;`^n9|IwIzjViQTqeJ>>%tk9np$jQmZnh_}U}h(>c#<UZZEt5c%b!?fa3AAg
zu%a`Bt6qeOfR8x%dp`r<!|m1#)UVs_@DAa#z)bw1E2A+y<+Z`iHjKuchpefND_c$I
zPnZ>gL_@ww9oCm)u-!EQA!mlX!Gy+n1R!KeiJ2ORWAaHB@6!*)1qNlfUGbdjCwLgV
zqQPe^9y|eX{M-4bb8mA-#ntjav(;0xM&JGXn`R`ba!Tn)<oyqdHGkmIlJlglpGxJm
zH|9A!r#I%jpstjak2n|KTNE{+9R-Fy%^#z|)M;UcIbLYNz}?@ziUfIiM60XG7RE8O
zdiaC?GTRe;A?T&~({XM1(d_&mU<+dl!=K;3-|bixU3+YH1fS{8sL)S^v4kIIc`Pw2
z6bBVRI3t$8L!OdaLIobFkuY(+S3=Rt!(R7M?$z3AAk+ufjm_Pw$%KL8m^cfYv)I&$
zx%rcWhY@2R-5FoX6Jy#37cc4j>Q`Y0`Q`rf;m(}e)S@npofA0@L-nFjK$HeMQuMXR
zpdh*s(r+NK7Q(Zkp<ue(f_!A(9}W9fLR%hCa-ul;(&A8+ph0#zD|sbkcGVh^d7T-p
zH>N;$23!d9tjP^#66TWSY>3eCjLbf}?RfHDIr4Q@^B_<y!rV3|yx%Op+6H~9sk`eo
z*LNMd^^U=qIm(@k(+65DR$`OWdz2*b%~lI_3{F5dWorF1H>QT!mp%U4H44*6(dyL{
z3pk@f393({ON>wCBTIo~PI=S>Md!=--2buS!oZ)|UM-vn)iGJEU#vCph?g_lSZ_jv
zoVqLvql-oAEPNe?p0SV>ja_iPpIld}4JoTL5|%+nl*k^X#<Q?Bt&Y-EYcJsO6pn@L
z!JO$#`7NV0RXCX+Sb-9=G7C7y2CIM_<fAC}u)t=B){Nvf{kwXu6?H&{X(^qIW&$wq
ztKD40Q3mZV<OT)kd%v=hag($G-rrL4LJ?9HGt;FaLJ2Lb<9Rp4K@ALsa>^<OHC^q2
z8O|>X%y8z*KKuC$Saw0<HZX+=1i@Lq!C$d4=Zv|;xVV;R*q&rnRVAp(fbHDfdEyDV
zZq5lLn*mlwISbNKL7Cq;Z8dQmfA52)I@#cuhNfEu<R8SqZU%Yb&IzFU1z{HSFtQ!c
zpvOpak~pde>UoY}#Mk;~CZ+c84vtd;p}wEg=`G09vAS=QG`WH(!4ffNdXNK&!7wj9
zIbYK=JcD@kRgJbRV#6m!K1;plxZm)n@!$Df$&I|>`+PYHXVOXaHD|S$GXFy2TLqD~
zQv?lN-pV<IWrvr16GFmAITBYF;ax~BN;p{`p^x*7F-Z(@Fnv@BdS8-;bsr05vK|~R
z4Z`W1oIKM`tWOknq4Mc(`G3F^o%1Qi`}q$E*F8IZ@!jFc;k{EXTtMgX>FMe|A-?M?
z5S!%dJv<BN5^`{j=zZF>ox>;7H=Vw3li6?O#JU;pzjx8Oc{N~ryT2Dk>*ic{zxLSI
zbzL3*%ME5r+16qC36&Q=>whRLeq;y#bF<VozQJmM0U^wtcPNoY60GZTrZ88CfyH2M
z&*anu<rJraA}L|o@$)Ga2^{K@<m&61?;)KUjCzHGAIw(?L>@l=uY&@_HQuG4{(!iH
zJ_W=QFD1GWptW(qm`w;6aTxSC5ocrB5|FJ3WOph?fS=_gZIGzmG?_yy4FI1myg6Tx
zD~Rvl1z{<%%NoH>n}B=)Erk1%m@_p3nCux<K1;HQ1N4;yPe0GD-()3=$sJWyTeekO
z-Bs7gTY`;}IMmxpvfC*iK)FwOgpUv9gdql0I@h2D6uR8u<*%GGl&ER4T~cG`&C)qs
z8~5<a)td8Gt1LFyOYCf6sOF(>rZQT<uo<ioQ|dn_V=b@3Pbljtv~+S4htv~)Q<1?s
zE<f|TMS??UD*_}@B9XT+*~F<`NBsT;WRy=1z<vEW8Oxs-%lzLbvmaRa|5G6OPi07K
zlKzk5Hp<ZUJ!PB_zLrW-tQyZlsWHlu1O!>ZIhCx?>pp_|aGZ@frI63FF1g4Vo8?;e
zzW4O?k<Ru$KwZ>?^mq6}-LqpP@kf1pH0@hqJTl)<s;X;ssj2-FRB$r-6Ym3~;-TQZ
zt|8;cjbn&xe?3j6PTlcK<>HSN{%|U73LD_CkilUy7`0i(*H~i!1|0J-WpbG5FOy-G
z3+@;T>2{a&FU=Eu(7x!(`gr(+@gk;4N1J|FCpwH3?Qtn+y2MIfN)H<4u&ni>z<fq?
z2`uSfgTo|ol6rVJQG7X#fm6j}E)98Z?qaH07MSd6_a%)wKT5f+)9M=9SzQd(=UfUY
z{TPT8-O$>~9&yMhZuAm(UV8CAl%0`%mk$PATYmc1<U^xY-v_S(Yr56#)cc#wW@S-%
zBFhpg|8%~kYHaDH&&PQeG{TDZ(ON|8V|kR=eKQV;c2OGU7`traVn)~j71N4lQi<Bd
zyfWkV4MctQIl!#Em^6VSA9YUON>9sRHjK-^oeHU=3QcrSrXCSJu=$D%Q&-%pN>RWl
zsm_ahezhSAtdBvKkdoq~ImaA*qH8R?WX0N!e|SIiw4WWt&D+E}<gKGzAAIi{b7}J}
z{ASI#_33&(4Ec9^FMB!d!@hs)#EMZh+5b)qpFU<xdR%=1{d37g|2v1F{zuPC6aIff
zO#VTr{m((5MqS%^j}67|SUqR82O&(TK$g7AlPIKQ3&9}Z%BF1o7DC&Awe=v;gzm?(
z<2uoX4vd>L^QJGrrRQ45)n%btwE#>P(Vj#b1Zyq5rYisToIL{!C5-VfSrT7N=|h$m
zHdh2(s1nTO55h25fq@Kas`MFq!l=Vzrg%pYAIU~J(gUDuhMnLdjo&y3zb*?vo+uFF
zDgZhbk|=CETt*NlH04Z-xG`)@FnJM&Nr*R!nhbavPw|)p&mX}_7D2<Hz1v}hU3_B8
zu{XIk_Kb&CYbg?>RiCnElO_@7Ko3X}Y@Gtv>K>Nts>Mpe8Sv6SVF}S@P*!GFEI_!S
z6kF9QS*#B2Wl6~hT*-pa39Pp+L=`}Pd^5;5n5h=f&rdfjqGpNXHHJ=J(}s)oO~Sly
zgxC=jV}AD@H#wd17fh_gDvpvywQZ=(sbYQA0Qg}n8@OlsC+lY*in>=ps@wE4+7|9a
zyZGZJg-W@12T1%HViD5wY#)5lxv;EaWm$c!AouYCT-<6)<o3GYCB7?#+peSI?<(fE
zn-4W{bBrnG8NiiZVob)t<vQRN^j3_SF&1=+;#I|w{)pYtHiuwMJR$ORQEr0>Q=M|%
zWXkcAS=&%_f5Ror(>rFBY^8~ot+anw$<^s9{?Qm4!d=GPDCWIo9ezo%K(9uc`5u|9
z_sKb~>#`e{Z1A@b42zp;OdV_HQdUu<Pn5}zB}@_-(iGsI@Cl}&=@L#t^QRq#O9un@
z4@p7)wRTv+Q7;+;N`t5zbvxAYl{uV#FBd&OIb9kNRe#MRj`k7w_+TYyI3wqp%20~7
zk~eqC4>MvgL!x72+vG(y-@xoquWiZ$&X&H?iZZ#qbf_~o55!HYFF$e93|A8pac;>>
z<}_Pbe!%*%IjwP%b}|oo%l2+Pv_(PmV7TDT#6GBpN!NJ@d$Ks^um5<B((?^a5WFd3
ziTDHlk0W|N(^i<=UzTP%CtLn5x_D~+%D>XdCYw~E+nrtri8$3YK&6lGH@r>wk$;|M
zQD?o8s;to*{)%U&GFP&II<P4HJi~Q0;njK{81z05whqnnn%@q0$1rTKP`UDYo-PP4
zkb9oR-Rj!hHDIbi1Eixu?POD)nce-H=!JOu1UxZ?3Bm7C_3;)9Ao>LGc)X~89PleW
z`}cHk^}4!x&0l+AP<yzH$@h6Ne}`t4VA|;?4l5)csmRO)O}3`6>`M(B%dj?m?@daJ
zKxB$oLFv8jfQ$hufgYD;c9R^DRgZII*#Kn|kx3YEyNkd@=(F|R7xD`v=V9lKE8pJx
zoh@E?E_pe3^@8;C3ALuyCM#~VbYz#2>4j6bH*gSJk{buQK03rdSn|Vn=sxHx;xU{W
z<{8Pj@sWn_kFrNLkXKyua%R)6fP!q@>oBEdm*Gz=RhH6&cmOR4*YA-0IR_2bbTXVN
zt(M6t*y}R3UL>(MjwMW*Oyb!I;im(9S#V$Fxxk!cff6@<nx$j1_?AK1{(c)czjY=z
zZCos9=J(X2AJ=vAyzB1m6M~P${es2qPV>Y|>9&W;w0a`lY}sw;dD{1Ffm!f0i_=L&
z@&qV!X)_2WxmxGH|0MzAuBDs^{3Kw-AF%&_cuoE!U=xdf|GvqMpSAkKfbuhdhXU?x
z9NN<IE5`FsBy4A6=F*6P!q&@%X|6<CuDs_{>CzxhHzqe);HUK>F2{0X0N|{PA4|b0
zhy*{PewEROEbj43(YB4+gXIktv%i|KHWt>9jMQc=C=^zU1z#gXZlO~xsIXB(pcslp
zV4LOc1LTwK!qtEt0#MK8#}5^x6cQ`CCcM4A9vKM`9>yA|FyOQ@jYt{BkUk>+Ah#^J
zUM6sw(%IqY=53{Nqm)#>anY$q!ya8fb1~MjRY-%0$X>!?nLR;qeP5)dJF@8058tXS
zxP@t<EM~g&mp1u<ie$KW-Z6SR^7v`O*rb8h4U77xFhCt%yP=k*(>VebXxl{B<2`Rl
z2ZgFK=fX35PyUi}dqyw&gg^Usd7k_0p<zzU+%5^6-+?4gr(CkhgEwCu$QJoOr!cB0
z%gh2e003CF|EXbPYr@R*Q!3fo+S~p6)7r$gwqF;!>+&BG5!6yjJ2dx^#KBfIAxAtz
zr#W^KrAJU(klHg9MbepT%zE*ApPEcUk>vH2bs9nxHKuhpJLYZb8n`?IQz<+JPoBYr
zAztx)y*pgmn!Y03fFsobowIKHyUX?PO_~dV<;e0NtQ#Jt<RA=yWml56n|rZ{h`7t;
zj(cjk8oY8ohERlqWvUk_8k}lkG*k=xaWuk!gnaV>VMGfl&*H-Rpi3&a#myAa_t<wU
z9_SQ$EP>HAn~+FufkYB_(|0WfL=K&UCj;>h)Ia9p_aaZ1O@68ITD<V!lCvvH=O%}f
zZwS1g2nc&jkwEX-7GC^_E57H9*5ao_y=_1%vfJ5!MTx`P)9|pHYxIs?q|1kVpMV#W
z3+~Exa4ojr&~2)a;F}@nTl=Jh6)jlvhrk&`2-XYX9qSy4%nOIe33o~%xhXto6a<pT
z;1ww27fzG{2cn$dT`9({!@<7Ah40eNGo)nWU9LidNEDCA{^o1`sr?Dn_AAWiigU)b
z1qBg=NkmHQO$+jnP`|<n;jUwdlM$&!k({dUWq9H_tN}t7Zzi0cYbrOw=pG2`SxApx
z>TeF)4K^-y_HuLfT(z$Ivd3CyH_tUIouuE<*VEc<ZO7(g)<B2hutADK@=v<(nkRBZ
zkvk^le*B4%i6GE7zQvzC^FGdgiyy25MVtI2vS=3hBnnBXnWOgrk2p~fj_+G2Bd?2x
zT`<5>APVEUk!nCu4{4(wITD1L&rkT65&PbWzs=W-P^>9pt1<OXBDRaiin@#aJ{iYZ
zfN{qZ)x&5+D0pT`1gcKRId&%|Lmn!Y&!M+XH%NQwRWF@9njJbt_C+-5^{Qg($cb*d
zFimd#v|_lQnz?UgCdYn37fh)Zz*`%L{w>(n<I&>r%q+oUs*&5x9F%t$!IOofzXtxm
zR%d>?4TtfC3IXI&--eZ(1p+odFvq|+4!36cZmKxU*j~kvk6AII#s|_-P-6<O35?!V
zh$|77E;4dja`&EZx9RQf?8p#x#)gtlj;{+pwLNci<cmJ6Ifrb)15?vCKig{><v@^4
zEX)9!RsD$jof#~{It;3ruDXB9iO#6FP&#u77r{_3!R|&UfC4FEo<caSoJ^UC9;^SC
z>vBC?ZF*U@UGRC3K}Mt`&WBtmo#H?ufU<nnu2l<%dJNyu3=5WCE`Q%BC{1pkfL~q~
zLL2eLtStSL+Seh|D1i!~U^Z<k^GDRAl4CpMPv+~8gcblJ8#l0#j2oYXS&?YMB+s#M
z1LySJpCb<ZA{)PwrLB9ob)E3Zk^!(J^ykXs7Kosk?^6B><9a3Hn7^*H@-nbD3y(Oc
z&m_O)q{3{;b3hXH@$+UT_;?rxAFD+nXT$RSv{<SP2%m<P6AU97%9D)kQH%@vPm&2d
zlvX{cy7ShL7kQ;HUw>y9j#~Q>Mgf7bwG;7VA9>A~_?8aM$}E%cK_-g641z6d`(Y78
zOO&Z~;Nc<TMRUZ&){c$KxX|onHEa!8w5<mG{S62zOqKfcZyZ56X?+BX<$?G?R4N3c
zfCbKE7cEw415#a4q^b#(KQ^;3yGk3)S?Kz4)pGx?b@2y%Ct;nL7VTPneP4yuG-k>G
z&?-7wJ)y%5wWj_O-KgMkC||Up3)BI6xw;c>nm06;^v}V$M)f&9!?ON-@;tt)oVU<l
ziQa0V`>UO9&SMH3FbF|0+8VzKc`Jl$S{A`p$f{;cvLIn3QqI%>m+qI6;;ezadn6Vz
z*N5$?oCu{liTz`EsZt75Vm+=(gZYT;fh-R5$*c;m;an9Nh=)AfaIm(0piCua&<)W-
z!3TJb2DNtH{!R~P`|{SpB2q*Pv$emn+rJ^0BW-bfHuDBlh_mwr)j_9XTo@CFaFmZ-
z)sE-|vXpbXn2?HaZt2mg?cJ*EiE}{x3nv^E+OiqHgG{KED$RVkpi#M@nrEVw^a5s6
zD+8z82tRcsU5HF6_nRin#{d+Kx7u;uXS<`v4ox*Lj;xG9l#?~84}XHeL8=T1WI9Hc
zl=*uct;B(wEy$dkm8rOUP0rT8?QWA60uWRaL0icRkYDN=xBJ`a*e_B{jnYInw!lG^
zY<1iU@Ab98NtbGA(TVj@=#Bon31i)jb)sI9bd}y@_mvXqb3mv}ua_*Y=Wd(-a^pF9
zgpae~>ACeJ*Y+4X;YSF+Y6e#B{%{bUp8!00b(blvMJ|cT$YyqD@$l8&jgU+8yo|Al
z<6z=}JyRei31<8t#eQeYFzWmHYkH}Fy6NF22A;yP3-itW_ijn9<-4!3_4TWvR{En7
zjZYk>1I`OBbi;YDyz2`^Y9;A0sM)ur9P(Q`<C{#~YXWmbs+8l+7>1hbw7CGus5I&?
zF2-Yzo^mqQ5O<MkQ>9{-I)01cx%5P4nOPHT8@?5Tai3~Ap<S!B_dOS9r1QI3i~$>L
z$I`UduS(x_$ETFT1(l;*4B9Bcy>=^29R$>os@B5<`C2y<iG6YPcu@huA3J9d(05eQ
zO$Nuy7KYuT>=AHr1Il*}or81uCmgZGJmZS2rVzzJPVjwrvwAHWAtX-ZI?D4G^Kk>L
z1~aE1ghJ+=qf;XckNfpYO(fyD=OM@=UBmmV&{&?E+uNWH$T`w5Hsa5u1AM|qg{|3m
zb7L9V{mp789cW<wipKH%`2GNhv{y*2zI^uU$?Ei#$L~TNY0)2|T1LE6X(KphS0334
zDqKQ-d)Q;LU;3&vEn$OLT7BFa`c2e~v!X1pIA2(azp4M^LMF3zkmrzj;_i3Yaz_kb
z)QAx+drhp;nv*$(>8A!%T+N2k_%j%rcUyNy<nZ&`;}&3TdmLv~9W}!xo*%W$&EC2}
z5v6B*OF5{cVA!v;Mi^(ZOhTSkD0b0S(IW?^Af$sv_EJyCZfb@?kX}TxlpXf|K_zYU
z<VI&PEeJtr`K0gVp|2o-`pQO@NYPNTh8eX+ChDXXBkrR#z0i=)N~WTPE{=OXu3Ne-
zLB7ddCpk^a_65WyPVbyY4!X=PPM=+Fv_AJ8dr`cXF!F>**xs?LnSkd-+cEOJQ!^Vw
z>Yy|qBE7$EY|>NqpFAZ?v-e!960`^>?xRv7^ZK;uJ`*2dn8fU#-X^5O@8}bx+f2Q@
zM8{}NN?$!^OSqDDVRJ6qL@VEVwyQ@>sT&0DZRV!WA*$tI!`D|nZQ!asBQ=ih^5LCU
zJl^}z%F0f1c67U|4wEA|xx{&DSqK@kr@3WJz>t2|7Qy~=gs8QkBO~?3=07BiC}DWF
zWXTh=lOApIbSSpdYC2&n=G=g-2KjOg2Huu;2R{`q8?RR%>*Lp@EkFszz_u%1C8`2!
z_%dIIuUwe-ar^-V58gwsV607QMPiME0rAs66%NWabt7|^kk9B9{9VMoaf!Dfst7L>
z4qWGs#5emEUgOD(&~<^Dl(zj0gJ$RC^O`RluI(L`8N2xPk$*-d1BSwvx}TAnAdD~_
z(Tg~%#%mcyh#n%Swzb{!)k8N2XwSx^A{h7h$yo2~RWM^S?FvHJ;qwx(cBNY-1hS|#
z!(t6g*ddF4qvqhCuaPrI&z_K_Y#*c-n3IUhF*E>WX&Dz+qaxS_n&YDq9BsiE>x378
zb(MAuT0v?%0&xRZma@n++fT({6%vl;?s-^MD1-W>ER0D`T1tjTY;cO9L0S@?P*C#F
z(q><?GY(R<O-#9Oq$&?S1;!Jg3vl^Wdu=4B^8_w(rMX&&nwl7^Q(_RP3QAo1Sph-*
z!E-1_%MG@&a~&)&kyF>b{KN^QF#h932)Ah=l+h^_H|}DejvCuouOP_{3X47eO=Bt$
zm+lgKXn-$3g>q<BRp`N_uAl8GTqX>kqnX12tF>B*ee|6<kRWPvd^-I;EjjCoruB=E
zMZOGtabL6gVX|Se=ttIj;Aa1$jijg)Nh*|=+Jd;W;vs=#T4Km7$urVgPEIO$3F<U4
zn*Sh)_&GZT6Zg?7L7P=nSI&i6G^Omf&fvlAj{7z8P~bZ{H}m5++ooiKxe{_SR&-?8
z%(Hlou@6l#()tqxD~io1l~^UZn_h0kJ4W=jCK^e%QHU0~9+qgW#=dA{Tq3}#+36?Z
zc1?c}ultu<EQ5v#m7AK1Q<z8*Qq<9J)uT(|r^g9IT5=-F1(-T*=NuQ@jx=U5&M@#&
z1r4kCad%TR?qVnVBQ{Y=+H#R2GGyQ4t(0y}a5>0!j?L}!jhycDjWn)2E+J51MZR_z
zk&}&Xn%KAvf#dh=G7eAaB((k%<2l$fjg#s`ROfjNWSNlJ*qr0N2T#~x;bqJu>)3E)
z84QqZ=N4pZT2_`;x$_N`kjxV5=5q!(M38aWPF2R|%WFqR6F%;l7T7CxDgsj?F^zdg
zdS=D2F$W6JmbH0z6ia{W=qy)8cG(Y%VLty`L5Kt>s}P|w+|X~MhRRIcFM$60Ofwv*
zb+vPcGiARK8*C|D>aRY)<~<{Z^f}1t^Y>rYB}X4`HvlJU<FO>{i|1Va&3h3PyCBQY
zjJC)s6q;~wh@n{<+riOK*tUEi96Sb=CbY0Rm@iU8h`RG+>dkj>s>1jpC9bt(U=ER$
zXzq>U%he%IIWwJj{i?EEKB=T4u}1qMc!OtuolHoGt`(h2vUZ#INKgDC0F$kNvU2CL
z7r?|Mbbb|2UGY;-Q20OF@C{h%v)g6OJXyMaw%I1(Sna(w9k>Qxyly=1dEXyG>I-ID
z9}|MvOdXYk>zG?^1d@E(Q5;wyG+MA^3-^4SjR{hC5p~ejra6n;YR)OXr&Q$+Dq`s#
zM5jpWLq*m;NlH&fOLCOxv&E>SWLc6be4&MN5p*#Tv2y#x+Y%lpMzG)NPyxnpLTV*?
zLLZ{dok-O91`Y4@lNwRHA7$e#6<~ASMtFTX=n?6-(cViUS7fXOvjR3o7m8=rIkB9y
zPv~nFZoE5=J~BO4c)$IXc944z1e4CC#Qs<2;0f!xFY3<-yeZHB2I{yu{O5k|rS`e=
zT07eJw0>dNq)R{&_@-^ScGec*pd}M239?07cl<4eb^!bE(@WyW)RTYju|y+nZ@p~S
zYBxL|i5S=0>2Ft(gJ8YrhtU;Bd>-c(xY6i={t4cf`>4s~6rIk6yeYDSac93$F99*b
zdN&^b{1}>Ooqd3O9p!wlwuKdNg2Ai|t`=Xbgc-J9;y{qYd%7jTvHTE!@H^i_d>n-u
zXYnE~K}a4b_du-Y$))FuLblEqU?VJ%H&@%!Dpt8j-OcLFc7VhJPO@ZkL<;~Lzz(i}
zh5FG;Obn9m8<=t_6|=8H@Cq=?@I8)*U}V6Dy+xoMHn<>kzNh;8H#awXfSF!;TCP2+
zfcZ`YBAR;P*w7O2o3#Ltg0fC(syf*p1Q&z77vV>Zqx+5v#OWwb{t{$eb9YvN7LX8v
zML;2YU}fVcB<Q)@U{v{ZD%J5(=r2H<`nh=ud0l}Cgdr9g)yZT71%W{U9nQeE^i#k%
z4wwTwmf@2l8_|ssvDEa%m@AZB|1F0)RRlva_A7w5&tOGMiH{itrS1cUKu^|JWMF1V
zC>{8=rjBRgdqbsQPyoX^75t^?DVpJyz(TgLG=3}KjlI{U!k%6x2SYnkB-j>bnSj?y
zLagI}mn&?KS=>>Zg$4emq3FOj)rgkmmy9YBDyORNP_u*XiwGYpo0Rz&COn>8oWi?R
zoAoq@Ib5SuT*+OC3!|-{c}Wa5eE&B<D6B?py+HaQy#3sT$*V5UCo_(2dIW%d^qt~4
zX;9WtY{?J{5?WeX`*mzt?r-x{fi#yTTHj_D6XLLb+~`d|{hVx1d9>ps5W`GS7H(%M
za(h;}ZM&USJ+dM?;uG^$E*1uM!7xcq>n%!8M<pkq652pG+moQu>~fZPLcP4ty}k<U
z3VQUKZ&>o%4NWp87R`qT1<$}J3Uu27b2|Lv%3*UT%yA~Ap?F$}N`gJoP;n=4ysSvn
z@B$j`n+e844uix+$oBYw^{?Wb<sB;(G6MJMXymPWN+&LxcRxSz(I?D~q~5?oi~<jv
z4kX7HwpMD4AG2)Uc0pcsq`{Vlth;1eJ0*%N%aLGN?sHr)+rB1(uYJ#_No}ok(~_DY
zMv|it<CmmdHF%yX42bt&@bo)!_ZjrZkar?*fGS(ZEd(!wis-;G+O{mzIXk!4cq(Bv
zz#NKlh53r6SBnq9ZXVT<^!e4_$%U7#S}|?y5I2?pq%l|?S(n-h8E$dqXWph<KlV3h
ztA|<EZKBt}XRD;9l|8c$B|R8+<ZMf@64&SRZ(6omTKU?Q+r1vIPB+e%faheLH&_g~
z8eamg-KIY>%rPhpIxu!jtOQ>Adu=ufosi%HIX7V(Q8XiZwzTNQgPF0jGoe-)N0CJk
z5>Rg(e430oK!JPeO;HR?iam_uP>U8SI}fC!Vl~o#S4+gps1}V@(b9^yB|87GwK5N;
z$>4>w>v6lA7}iGYD&$`(2D)A2T4Z0M*+2<_z+F`i4g-b(6bBw_m|*^)%3bAj70^%}
z*P?7;P-7D_9FIz#6iv}4v7eQ7hkaBUH@5K{NkGM_mpf5{rmZJ2V{Fy_X>2KL_toMw
zUO=(^!C6dS74Hq+0$KSj+XH+;9^fF9-=)J+zkuy14OTnaT0w~`3CG3P%cWdfB?YQO
zZlyMVM7vB+^R$@(+i-^;vB=Vf8X`J@s71G5Wl%#)sbN)J3u*qRboO!%rqoy0j2sh(
zlm1?Fm!x6)&2mI`NYE#1r=74?K!mt>)umv%SBLT=CB$~yBH<SPm#pFCoDVjWp^QSG
zk$zC}i?2K|CdNKDtFu+vV%wyP;Tu;A%~aV*?X9Pn7zU-ne8%aS(7l>t^$(rFW3b`U
zggDNYFEYaZKxv*gd{xpNX1rJ<gtX%xK;Rd?rT^~se)WD+Mp+gfDAOtdn9{^ClJTPn
z3%;wJ2iqyKTG2Q0(}vsv@VIo9py;PG-(r8_Cdh|}6C`VVLAk=TM%=!e$;IgAJHd*A
zmA=M7gbCR`as%hnmgFkTX>#IGk_&;?sCM58Qal(TO;2#42tcm4c;>5uJnsF8gM`f8
z6NKf?=_{f@ibOD#SRz*^Y#cb3GjBl<4ubXV@bdD4fT1ss&77wT;g1Jv3gJOTwxrb|
zOvWW+Vx`tM4Z7nJs5%jB5Zst^GqlVUejaK&R2yh|bAC&@0MjMvGqmP*l5S5~?yb>-
zr_Yn)8{kIV#3Jr*-wC{2Q*iZoyX(iTXeD}MH^(&3t`lhH8|bNl4+eW808b#~%^KP0
zqJbXnq|)o8k><n|Cp^15MZj2@?g6IaAe>9KWIS3N?R3pn`F5$p3io;z6@b<O6Z2{S
zAcxdOc0Z<Ihg5{gXUO8eQZ|>RE=lL)f7>2|JxV|IonQANQQ?@sFdsfzsEF<xO6ebP
zo$+Emh=HkUN=BH@3Df0KNL63&PWK8)$lPXT-JLGpDl0DAV3$IWzEk(#o?Q<txVzyl
zu@eKC)P#{4^+snAF##rWo;JIP?}|nKP!ldK$L`j5?vl`Ga4a^NS2G3O=42sD7|xLp
zO4TY6W10yyB_q*nhU4!%&|{(joq<!WtGewuTU;FVw#ufQzQ1OA`S9hV?tY?zUU!q(
zXCS^|MiJ?g#pZAZgP&RLZNoNp{IbdXRGLb_aH^@Ur6#C#!%C#E0?9Meq<Q%WTg32l
z)AMWvV4;JKcC<?SJOqF}n@5@wS|<pqcT`>`|F|AHj3g>tDVt4~^J|>W{fbD=?cta`
zy?4&y<1SEKW&F+IumXo{`~7Z$%73ftlB1UF%+s(L>txe4<@QVbKrss_#6VX_K{E$u
zVlFK%m;W>EAjl0n6<9(?+$lihP7;%5NFnD&nZ(mH!Zu35pDG>2LNo~Iadhy)3v3WI
z&5cv{@dh)=Drx`@k3s+uJM^&0<vAf`h@yEcQT2+mp|WiiuSN5eCz6V);O<Kq3xpu(
zg_#fUnnnzHi+R#k*&gZ2vL~xj<sf47Pm)diq|?+ewa1&Mk5^7=`Ct+3-MHKGuR5n=
zeyzi}5;Kph<O%+!+S0?D^`?<|GuWu!(nkJqj`H2L3w*!hklo{j4%s~?y=Y$#Y&GOB
z=!Z22!m)M>NaO8EWmBrrlZuddTp67~Iaf0;CATcl>*pqvFTIB6T%rK~vo}pvC1Sx!
zYb^*U8jGe!8frDS8q>njT~ixD)NFdA<m5KL9-k@Ix>H<pcX^fp@@Hz|rHXpQrLN6m
z&z2>OHhk6bJ37xcsg6#C;R6*lQsHd`_SV!^9Xcr64xQg`ku_tnF&<tUgAupah~Kzk
z8$a&7ywbMqItz`3$~MC0<k)&_jfMCA*i57;Ycmy=!WyknHltD<y3SN70kATeA3^W@
zHd57i<1&!G9%lslY#hDqSrq8wF16#(evM1_`wJhLSlVmU%a>fN4nKnq)s;AkRaa3F
z{`vc}f1)Zn@z%(+4tv_R+^SvvCbt7s2kijyBoTp%2tlL=WM)F-Q1*W{>NJd5(g&NC
z8!(1t1R0l-ua)gE{q96Pd-wnWCWjXo9OyqU+gbxe{Yd+&*cai%_05@7{e7dt$!A8!
zNI&fNMZW?&?&<?*|Ftu>FvS=PP-SANG(phh(130Nxu+faA(S+*btg>mm8G0-!PmbX
ze8Vd!z=Tue32<t;CG0{94|X*W-aVV{t7$a>tEt~rnu*<L;B^K_h1v$sobI&B+Hi8$
zn)Z81{Xt95Vn4NZL}TD~v(B(ecCr+fPMEGP<<y2vu{{0k(I$n&m=0Kv=IIs|S${uW
z4&Do7RAHPg!Y*S%s3e&ui7){M^0WkOP7}^z%5iCyRs)2q>W|{ECQfD59}eD1c+NN`
zya@q`&s36Y+F>;5+PmAhlRcl~`-y@4#aSOeU%wB>T9<wyKz~t`>PX~|T%06-vFG#Q
zW&PTtf**mH7)khfgQK*bcB7H&&FFMV)hPxIEwpDnLMEV|KG^6}7-!K>0{IcUgF6+<
z=Uvk7s+mR^Z&44ThgEpT>7<y|?7EL!4SsjgYp;*wC_FCi?`$EkIxSnn&{q>S1@JTS
zLoYW!PSC?B##6VMk=@VT_;7kH+u9F*;C}|=9A|Q@Wq#&Ku7C86{)eg1AJFtavhYJy
zb>)rO5q$sFVe}7#p(KH-`kthxfV!bano%3zSGqlqcep26FD=X2>eJbr`d?$d9|23L
zLP}u7|DDX_WX_8LV<}Q@^SbfU6zB5v{rK@0_7P`ioexJ{KR=g#TkO)N`;orU;Km<j
zVGXN25GtUCySQ%00+y(!a~)%I5Ur_MQQin-e2oY*+BnC3h8q^??MTCV6j&0q0*02W
zb}a~Hlkw5Nqe^O3=`=HKZX{JMH_q+z&cG{CN!#F|`Vj`J!vlf(jxY!6`pv<cubW?I
z+uwp`kqS3^?up$p;44ox-pw_v`r^lQ+G%&uM+n0Fv*BauWW2eKxY)qYV+Qqg=mgyb
z&&Tsk_f>mS)$JLZDA(ZcAXTj&b-+0m+F7keZw>Jbnd^?9_g8_lv2lViNCGz%6yvFu
z!5?rhe2s0*?w#WPuurRMUW^#OJ3QFmU!Y@;T2Eg5N^MwmvKI&oh+U`EcXz^d|6X|9
z>E{J=ms1DnpZ*TVi8@i!)_2Sx0nK4VvI?nHX?K*65QfjKHS%S-=;7om$ZQgyKT|6V
zNZjJuo~h54-NsAMo~crxD*m8GL{Wi2-2t~%-4Z7JdY0dFDVLc51XLLWWC7w7u+?AX
zKFzPHtVS>e6`cxZwmtBPg$Z|AoEtli3yR{R!E4r4ij(1=#V@pt(gx}JWZ`=Ck;d)o
zP#4`7A^~@k5MBibBBX#7q9DxYo}ELwOe&$(D2rh;no>eblswWr%0Ud)(?Wp)io+y=
z9mFxL7ECDK7lBJXG0^i^Hn~H)M9-0}c5%;nph%$b(F~rac&yPZgbGdZqM#JlYNKbq
ze)o+q>2X4|Jm5qNt9ek93urjlcrIUFtmOgXPZkRcJ;jt;{Pmt5Kt|kY_JAr)W(lwE
zY~F9l4uJ#J&`TnuX<5-85q_&+hD${J2dc1{K>NJ0Yz-45l(k_OtP+N0kcLFr$}5^=
zHl{<5ZeA_eBSfLnSzdBUHgP8$<0d{G-|X5V1S9+*rMR_&Acz*yKKH%TBnBOtxI@A=
zkD*FM1zT^$yP(yn<Di?f38ctoxZbekh)ZrA&+~V;kGjsbj6I!Pbkpfn3Yr+L=-98P
z9nVMM!JQQAKkIt-rzOSZI__Cb^ALvf#5|QF!gn!Cok%ZCDb&@FN*LsHjP2w657~i+
znw2chl=73rcE|nE+1<%GbsVjDgYk^AC~Haq5^wKXFwmv4=bZ4e(>Jq5fF&@<24@WE
zQ1-~S=%k{Lq4RcsUOn8^YqW_KqL<Pv4}d!Z(Z%;+gIT&Mpp?y5jzdbVseYy)fA0@>
zAwgrie(3kJze+E@JE8&jI7bt0<4JM1>5hqNMFZt~PT8o@pJiVQ!YjTm;Mf#&B$034
z=hr;xK+be3S-Yi5gY;@FABw9V*#wheG-fs{dNQAd-RoTP$WjIeO@+0IOv$W5gresU
z_p)Cbe!s&1bI_`cD-$L95rNyG{C8Fo&JKo7#%`R(h7SK;r*c!v`yZ~`-`n{{Y(u7{
zIp^w)-4|t$37vL-mq{Mi<Ql?>5KJN)S4UF_lss*c-!IrpNX`w%)aGy;+ySGs7A76^
zNc@>qyz2nHXP!Ua1E$e|ymF`M>%4QXuruf&e4Ze)Wu^^KJhmf9cUVxM>33*3Ty-&|
z!QhPlNID2#pg|=yPX7|cAZH7iBm<0y!C?0S&BED;gmiyE>*Mc6NIT+X_&<cbQ;=>^
zl%<=tZQHhO+qP}nI%(UsZQD9&JM$!OR`>0Q+jYCDAO8KgBmRiJ=3HycHNGJ)Fdmsg
zjFu8CtP6BBOVkT6+5eE*D=lk=*j{2(5He<DM3_3!p9P5=DNFKtTSDQJkRr9dQP1C=
z4wJ-q6ACERM2QZV6B^_-jvqitvL^(Q_p@rZx4YZQ(;VpBb`1LHHoP1+V@W%_DEi=5
zbpM-(0&5Fo-%($&rj>mZuERwg2bwYiZ7kxW{T|B5WnQX{(RFGom`1{n#l$i)8$Z(7
zW-b#~M(@^c50)DEgH|&V=W`Gsi!&KfgE=}DJ=JS?R^OF{=|Ty8`xIuFPUM8a2s7V|
zJ$W9}sj_X&4Q;g*a(&jh>miyhn<F+}{GE=J0{O-x^dmnD!}>Z?mwJv}RM$hz5q8Uf
znG^S+@5fp?^i6Keg6D^s3(E($%U%E+FCH6alE-L_**UssEadHOsFUm4`v&11xHoLU
zOh<srEIn%G*8~{aM+8fKV4PE`lp8ADbFUjoL1CN^{h}{XWM1W_Qkn5LoW6Q}>P%Fh
zCS-1nT4@^anj99~0KJpy;P^J#*rRCZb;Tr!itt@D{IBu!Wcm|r65hVB9Agd3QkVL8
z-7|ko?Bg8z(&H4fN5GNg!-qy%(4!ICg5O+Xly}~~lIn@2cL&P6VOLevqeE2@yP0DS
z!xw}*`E1=$UAp;UKZg(GrF4v6F6CT9{>O<Z(3=q(&s4<jz)v9JN6!x{aXSNOi&5ux
zD}dZM&G)kaZlAR>D!QUGFXh^^HuOKNH9z{Xr*w6;y1g279pWgSIMhE`w%7<cy<s=1
z-QMK>R{p!u7!F;@iHWD-PgOkN^VIK|jev-T{rOqy1wG{YAg}w9#g<IiILLsv)6KP{
z(;ss(Sn;)jQLc$I(;1aG>HLLK@i}okZb%-_rW_meXV0G-k<k%)ayWSz;UmrrZkCcn
zx2T3t>v#uO=BmK`;g3tN5MOqXKG2>lArU<)F@H0i5%3OG2&YoEKn?E<T_AfSMS)Tg
z{RD83(wT>U8lxCE4@#U+icrA-2Tc123<ESWwREB&GzIFP1Q2Q8q(Y^poe1?JqGL2p
zCd1Y+fLPn`J<twts3|y=1&ZTJh-ly!JPW(4i#TGN*%K#RI>4Dis5{aNN{mPp#ZnpS
zA|FCSDFB(fTvbO`^zfId>SgFEQYyH3cv7x4Rz6EUvQi;%W5MykjD<%Z2(x;3T(ed3
zP+L!XL#DHo`L$d~tC3dJn)uijt;V0%aggFM0%I%OYIZ!9#kl_Izr&>&t@U4JBp&&O
zB8W;jX2B1Vo;Z{=>*;BI_cXECcCESu+HwjWlYC&4|1(4KQ@2N(wztnfaC|3c6e*b)
zr8&~7-QTtr8di?)P#?%iR8nA>u#F*TBVtX)TBvApf?BE7D<AS4hZ21|ntCIUJ>UR8
z6`=vzfS*?wQg>3PQ*wz*3etf~RYXZ<lv-c6j3mVNjm^?Oq^M6H=Q0W=Z-!DgQM>7C
zlK;n==c{NbuIWU9T4E>u$M4Lhtt*`jbV$7~?PSNl0NIP0p5;%Nwk{%}1k2mjqBvlj
z&B%e9`Tk$U2Q}I|51&BmRnkB*-(a0c=({o<rty*zpv)+t8D;uMeL>YCDo+m18`kk0
z0t*2;nRW>Z_S=VsuHU0^m051WPla&9gsb$lwJsf<i;7&}#PKh#d*iIg%+FvpjZ9+E
zq!C|@Bok2>`GfOSZ!21q@V(k}g;7T*H-|FAiaw$(#KK#yap^(W3L8hcf6mrobr8lN
zUgVqzc~a?sm3D<ARyaytHow-|;{yGckL{Xb0uVJ48W^#uk@=aqE_>%dkys&<GFf<e
z>KyvToxvx|qc!~!!EJhOroj>fd`3EG*PQeGOwRo$<FL#s5Kr1W6ulG6k_w%TP}{tQ
zOo+-FQKB%<|3i~rAht49L5$-QwbK;Y<hr^?32EjKCor$@%=}tcI<p;pOR}?86B?Nl
z3yIC!8kRzmNYtg)joUp(u54|A`s<%Vwy>!<HYn~g+VU37S$!_Swmkdfx!c8rV!lUF
zad2i5N$MU61Z!o*BL6qvMcxZ|R><=Ov^RhHXM^Ojp|0Z4;}Wb>v8SslSB**qwz=SG
zeeE1Plq}c^mO?B_%j*~DeO;#+)vD|YG;izqQSk>mZp(&yc9B+gxw@*jC;Jl7>R#_o
zbE=66dplF6c+_S5$4AdM8oQmwK}9kDta$mFnq>R%+C@iA5^)y38hrBJ*d<_=hjdcS
z33P!F)W%MS*)DA|sk6PR`m1;v4%!Lqfb1gt8LaCB4!aa&EaMsBka15nzDlBI*M@Fo
zX$=wv-cTP^g5kh27G@6G$faFW7I|7NgpBBqmsj|F41xj>BGP&dB!?aWrR>FnT9xW1
zT$N#8r>Um1pebh6)Tq*Hq})>Dqp5()MX(M$t^2Ix-3_Of&izDJ?hqEZ=kA(4+%9a{
zsEOC+Pl}`4H->z_I!+K_QBWq`cDh{zz+gd;`CrCuTsUUAIx#A2Z-QgV5Q2We=`aDA
zE!l#MULadG%3kY1lQ+i*10(Di7auMqf>f>tHz;wi(<NFSiGnf=SLW;R1%oQMTRL)W
zOS0g2eI=re>STIWA7dG?rN^a-GO{BNH&Q!UI>a=SiV!nF2XZQ4#^gms-drMFOGoC4
zGzPbSK$S6Sa`7P*WR?)b1ht}pf}l;4S7Zr1EsUh%KPVH(+qL);%h_%NiP3nS_Ih*W
z0BfzXZx;>ZI@_ZD573BcySf$dWQ)&i@qFIne?oW8Qdy&!q`6RBUxFsL=c>O>&l4?Y
zR_03pydFz@C%=KZ8k$cmKhC4COD@C+^f6MN@t(2T&5^tPKkxTVxpU;B^}yEo$+p~y
zXYE(q)YXwvf(dlW4=2g^?99%5U-7d0wWS(stLJpRWKnJa8W=zySdaxLXoHY2{<z_c
z!x}cK5jW14Fd~eoPHQu2e~dMH{&Z|~{{U4{uA%xFi7>VM(~<~-wUOOuIrU6OB=pC6
z+dXxt_h!)=qg_`rbm>Q1IHMw?u)Q+i3=SboI)DhCL4#sPZg+6Xr|Zr=0-j2yF~Ni*
zgurZ^K*;GL2U<dxLi-GNteAT+CprARKSglG4<%ZjjfD24U38`YYAmmEb75O%+BgZ+
zYe$=RZlK__O#&vna7)RNS|ChqO)~1F6>sMG^VqCSxTAca6J&Y_f2g*zbag6(!35&n
z*y21#%TwL*6&$B`RwnT)^9mFF)AsX!66Roj@CeGn!~OyL-*=xWp;}3Wzb4A*UrI3H
ze`)k_a4<G@aJ4j{bFlgE+{G&z=gv!FC_mL-)M#VOvI47y+~92A^O6~<87U@7E?{8+
zi6yGtrmh4vzf=$V+b!YANjInvzx>E*irdY-u9uqbM}RI>&35L@P7>YyY!sO5{l7GQ
zlxNS`e|t}HU*2>51L#jd@=i#4+BpWyMPJw<Ilo&DAFC;FKdFu1bSP5ZvQvsR62=9&
z4bDTtNN6QPs#u6XPr?vOH9XW2xV7q=P7OYpsvMBE_gVh7Q$eO5IBOlIGX+ghk#LT&
zj2NaK#ei8#+$BA9G}qKvU>hbJ+Kd7tzzOj50ZQM|fRxlEn~%xo>GRZBnyR51&=iu=
zpH&~S06znP<1C+KpB|69rcIS32LhW;WLLMl{fVpcbv)rQgeb6^4gz(!14(nndSp!C
z;rSPY?7rstb}`x0>DBXk5&QX3ei`S;UN};G8NWbxQ>)QGQM~j8(LCpg_d+r-p$QId
z8RFf5HsBp#rwqu1krMeqAEiWJh~NS-Pmj|?gL0yU6`;``Nl)j`{dKu`<1@I!PJa=K
z{mK>R0`LDG0_$xEu#zt#-u@x5UdXsx(?X`d9bC{A&QAoxzw?)WPA*rLi;#r5kbpW8
z-9H=JNE4&jypP|X@jL;QK26{w1~T|?gQansrBR1H31tw7gmjvS$@9U4D<>{78RQ_l
zboc_~To#-YCsk;?!)zl)bM_oFWpZSKWwy#v&xAQBJ7D2*8LLos7edofNu$Ah46o6w
zS|D|(@o6*YCwl{yJk|WecT4-9@K%+7qVgiV$&^&<(pKvy7K6mzz@3~0n0f%TF_vb7
z{TN?kzbr(Pst216uz;)m@F)?P8S)0$Re)nB!9h;H_NQX7)v@;-GY^&)w?`uC>R{8c
ztNm4tE66)Hf*l6}8awCQ`|d#wUA1HYvQ0y#8W8g^4pTjZB_H`uAhI=ehNMP#$ALJK
z$U^_)%~RnBIKCQ!t12_70E!Np=19NY(uv{<nO~JT_FF0o`4U52t3Z_|cKHPv&fEJ2
zd+x^tCLU;iCYOSWrMbnFv~w7k`Ce+;$rW}su(n>Nvw;Jgt*7N|!2oCDaS7*dJ#L_-
zpYgPD@KNM?Q0_X((Aitf%e>6m?yccxZL=Sh2;a|T)gT|D=_PZ|x}Iwa2~#dlvF+Jo
z5I+;yrfr3Z`t$3;;1fWbH)#!LLMPP^qZUU%aZgRkC4EXLVe?as+&jtG2Di?5?kOBF
z<+5yVJTODNXWBk2D2_*%#%GPjVU3}2){Alu&Q3R`SWTbnkFKNOu|Sb)q^UzsoScvS
zXfv}yN@>T*NsS{Bne9~F(XjQoJxq9+&aVJvV^<Xe;*hu9l0gOERutA32+K8c3W(g+
zgFf3ffu{1D`xWpCvYDA0k?<abI(4H20uJpM*OQ+`OcP;j7626A2Rbia;!?T{TulZ9
zqqrJ>z+VJ5L!po{B%AH3tIbqy3BSWEBO87(5932oEIiExzqwzkD_e+g+7PS^9oqut
z3SJ+7k86c@Gs(F4B~Gv3K94t!&wqhg%ZZ6CXglK@y&5-c=0s7JY_ULi7`0PSDqc1(
zf;KhUOC+A*LF_gjuFJ8sm{CV=Y&d7@E7Alib^J>0U_j_53iQNou#R$CY?pqQjF$DJ
z^)=-Y^{qqXo7corcKJn3QCm9<q1s5*FJxUgM)M8aBMRFu-1GZNQA>9@JE6w>=<-Te
z0unfENQkk<q=dP}!-)wVG$gBD-aY7+P`ARWLP~r&s>i9RHqbE_Fi_hPx2&)n(6iQt
zqv;;rPttLqvSK=dAszOj2Q*;}P<yn5cukerL(-xUbrvwQrxNmj$8NOkz;%p*B>FD<
zz9%`Euv|<RbZ8b~Ar&-{w%!tGdlJFw1fr~G0<FMwa|kp3t!O`#+X~nDlM>ruMxo;I
zD0SxmDtSRBlYSn37Hh#Bw$*<Y)un2FR<thTQJmz7=?|{wl)i}UzJBcgVg50%30_U@
zt;4a-TudMnxex{MM~WA%2qS>t&e^`X%B>R@PAMtgi<)rns*7U}f7z64XQeYLsAmYu
zQ;#`7$RwI+KQDwro4Jp9K+*(N(a&r)+TZ#ba|pztW&XDlnJ_0AGT~i7I;0*37-M;!
zWUONU+G=3f8f{+$6z0vVdd{>it8I^JyQzbJLJ&lil;CuqBT=Q8sd?%<Mpkdzy0cL3
zehcKwd3!-`JZ#wJQn!24>*f6X@;ua2)kdcoz^uF1LpFhN3@Xc+T4;>YSWWUyUCH?V
zpNNf2!02=EzYf<~NB{tm|FZeHSU8y)nmFs*+5ciRjsHjg+x^A)>q(buxOzYX0D_$T
zzT$s8den6P!`AvM61UsxCk04wTl!)YAr)CvW&VLGZ?&o<O2#;3T~EADS#bODbvvvN
z13|UK=NWkBJ>B-ci48v0+8+!kv6e$?2w@*1FJp*hj8T#yN5-$^{D>2V{E``siH3Vh
z1{vj2@5g|i#&=j&#K{~bCoBaLPgsC(PN26)I)t#n<za~omjmBVHLVx1&X*A)t3OF(
zL}Va`1p6c&t^g4tG?`){j0nR}6B*^~C}1QZEbKQ!sxT>DTxuy*;&(BVJJE*;Q%^R;
zM5g&0MN1^)#56@>2sH;N85><9Gr~QmU89Cu>V-gb&d_@Ym0-SkKJ1iH?lRXH2LYQ*
zGkCXK>`ka&mgIWK?8^}z3^4~elE~YsrYiGk@NUU-l_!tm;TQH`!_eE48y9r`?`~*D
ze5`T$_8#4zr5&V=XEsrAaPTAG@XuGj#F2(PTKOEB(5V2t)Qosac?9h^v6(Y>Q4q~<
z9)}2*9Q#<6)HTp@a258R`$PG+0}Zp>qruu_kzFXD&RBU)x^wXSLhbWXql;1tXq;lo
zt0DWcZmSAfe25mi<*kBhV<{-HccZZLNaXO3HcQcuih?}=i_KWJ@iqmNytnMfA3=O~
z>XK6{PG3_%w;8@7K;=1S&Al@#1`u`e&4gFut`MYiluO;sV(QuCeS!0})+Qa^*ydPe
zQ7>Cs=+n3;ar-6V7O`WEJ$SnCwt>@c^<OaRa$|@{Qiy11ZOjy`m?QzoUyH!LYeCmF
zTPG28U55==4Tsx%FJsws1Cgd?2XWcrr?C|E4D}KzQ6(8WWAp2`>b7`X)>~=0wuJRk
z+m>n1B1<e6@Se0aY2TqXx_(f<ncB(KPeJSFN;mcf<DHSJk<5)wc#418uK2gc9gEgZ
z-Mc{>9lX5k*7bA2D~m}jK$Q{E&gJs_(;Q<eU?i2@ApY)q+u`r@fgG#lnP67Jv}{|4
zEs4GK=Cf?PNj8#$0HTRG`pJ{)Zr=cfq*LWIy<JhoJ5QOrZ>0wF7nlhhgD4Ow88>m7
zxQ1AX9nb$C(zsNff|LY7PHgS(N<sJy(IfsZ7n_WNiKUaiyQLj7)Bn5Hw*Sv-twnXf
z={GaC=Y!fUTlflwn$wOvym^UIL<q@@A_-8Sii?v4Qu|CHBn;&G{k98wqU8$5tCB7V
zt;>GTyQ{b~Z+0Jf*zRY0E4(KBvZ_koue1046ZC0SpqD*Ii4vvfV`>?1{j9APpR9iq
zjRX~jV8-BGd`Si&qFzZm%Z>pyM%UQuj-2880E&*n!%v2%FB`yS8=~t1lk3zF2j<|d
z26unA6>NI1Wy8B3ciFDZ-gadLEVp_O?2dREvACAY!M%6z2x{qd4kVPHf;pgs=p^Hi
zzF{Diw~*ECuBQjP$5mrb__)IE^2_gyD~FGlR~E+#Bh2maJ^Z}D!YhS&<6SrUe5tAF
zocnjLH??mOVz#nXX-~i!zv>O#_Z;4je@!UR-lxpSxrLv7y~jyCgPp0mmY`mIR31d+
z-dgo;-tPWo7Xe3CfcNfZjL_m7+tcPMih-!o6WDX^K3ov!dy8iq4Bl7sIl#QudNbh$
zZ(+8kL4^eodf_(eU-Ec5!EFWH{(&ynV$I-;!!rqKOt^e8%bUrNOYleFE_g^>ylCi1
zdzd(VtyOSWTW-DCj=GDP*ArxoA88<rJgyr-FlQ#>=o_DIY=?`8wHD94^l@cszLWz#
z{FT?Po4u!I^I+x8f9+jmbPDLKL?Qp7Lyvg^a4vM(UStqC-S#d?I2#?C5=|O*ibu9x
zrN0rRC?nNK?Lvnt=-+n^W%c(P<94GB@aLS6Qwc#Dftn~40;0A=s^x$x2vPJB6XFID
zkVqiS+JPWCbpfODsiMWVG3k-Bh9f5ZJ$Y87%9*SMCpuS=+oMj{pYR|_+CwH&q$njc
zPQJWi21F{k42^q}Ae?&oJM3Ib1?kjMdr)M#-r05%*s>tQ(L~CulI%^;mdFI2Rg%kR
zl%iM(rdS9GR30=BF@26GBPV2BL)0HNBRoB!K{cB|Ec)*)TpVQ`sa~QRi%2SSDQI0Q
zxM&{vpzEk9Y#-(deZm=4hFTS#1j%%>0^Y)W$MnEc%?gov1(Qr^O*E~e4N^JZSU5uE
zuocNWt~rTELvIf{b`V*=5KEDIJ*ODyM)vm6ak$W%k#`nY?ZOPf^(wvbHzHK%+>vY~
zCm=285qd`tA;lnw8AsxJTg>LA`2=l@wa;rIal=l6ll~-Z!O!@A?eJ1KYvk+b^zk?H
zaCJNIu^nx=y<5@REsAZ{iC;dxSUP_y(3)aT+OEPPQ&JDEg0C;!Y|i}4Eo}Uw=kAL6
z_&@$f-~B%a-C+HfrNGJA@PB68{71L7`Tuv@|NS6~M3S*>@LO8wvHrXA@*nT~{ptT-
z^S)X%Z0(mM5Po^fj3^apB9=l4HzX8K%c&@Z(3XFS58q5WUdT3v?x(zjDHVQgm%STZ
ztxG774+Smm=D9g(=4S4^XRZ0rr;=V{XI3+YZ-*m!;&XYhKS3jz{iaff|9pVdY5v87
z;K;T4<kWY=mnniU7bFbD9EJFj8R7?mtcHM*%t}IRage~YgCbW@T0{>3(|XLG1N+Fd
z*5BU}$Z^;>6FIzPp41m30zQxuP=aF#C)g}TygLf)r#`fRtTAAb+!;&QwZ{+gMU}Y&
zLFtDSgJi|bi7)*dk2#)5CDf8|o;{mMT>^Q=eA79r;go+&3m&+>w&fSZf8e<ww_#O~
z0=|~>pJ7Lgg4e1kV}UEQmDpFE70!HGBVSDr!vMLWJHFWljO8?Js3Rx#TGGd7DHpTm
z*T0?bj^y>RTP41a8XZ<O>9`e@M1YJ{oAs3ghSA7&PM?wQc`X|0nqr@aomkux+eS9V
z4kGl2UAmk&YF`;dJc~L=-)`k6XSr(bZ2|Ci3M$CYP4SXkNAto}L1Buyqm2&4ZM)H?
zEuaZ?9^`GxSF6+}`SrfTu15MJwbWAPsy~z3Y@H)*x+)wygZCP~rE<_JjwCE^7)Ct#
zVT+n!x_nVag0$hUcD$eZ@IARqP}Fb~OINtviqt{Xk6l}dFiLjV<FG?cd=(`FLH|=Z
z61B$e(F0b$nuh6|oTHPO)0@;odQ%Mf0*L04mlQ}-f!PK$a>lBw*II$%rIF14jMsS%
zLh%T~9SAs(miUxV{khHrv&N9!i!0NZ({TY0q75d^>P^KT|A9??koBTD9YzM*eb|~8
zn8wMWv6OLsnk1RQvyJ}sN68Hbp`@v=Yn&k4d!18e6(@N;NyQc+tH$ECq_8S2r~bJg
ztPk1@^?h@5398?2ti@Pr)vUmsOxaYmcB&*^Uvc9!mEoYX;rWQdln!!}>q|1(Kug9|
zo*yKl)LD&UgbIW(4&vMmJ-Tpt5;QLaFWQ*S^1PKNPo8qVJ#^ve$c=5@Nxi0`u>-})
zVQ3_Y**8lliXHmv1Qh!jB7E8uuO2OJe{aXe<xA|fL%vbPHP$*J_P(}hOVnx-5}}HB
znY03q#kHc>C>djVR3{<=CBW<g!C%arywq0C{!BNj?kw+dR}d3%5`YTE_%70<!6Y5M
z&J+)mCYBL1SM3q8M>Q}gcJ1`E8<(a^a3Kf|m+f}}b<uJ~QK;B*wD#5VXb=cts{MBz
zGND9;eDOAFw#O2skK$F{Wgz0WfqN9peYN6YeO<<u+27FzJ%M<^!>O{QWDkL@?S3>0
zHq$nN{MnC$Ts<J<sgRj${5Ro+BR>YM8LI|@UBkGAd$8W;@K9puxf11Cxx!Z^!MQ>l
zJp^o*wtN!~ib*w6XX;|(n`>jS|Icup&%{mra$o`BuMFdUrL<+1SrPQD6<aP{_v6&%
zd7*EB8BTt}h%FTPU3G8u0$<LYcvC2QZV_9kI)zo1E<;)4t18*%l{q_qm50sA1xG~0
z%|VWV?gS@$j9ZqvBux<6$ZV+|0%9I&azmWDZO~OFgu85U7g=MDLY7OrH{BMecvEc4
z`UXf5b8atfsXbAYW2`!SgiX78q7yqcNI{iH7b9b>v`hBT0o!vzqqmeH{|dECxcYA@
zRG2xIlRPMk;%A5UysakD5ZouMum>e{zSBOdj7r>diu6Gm-Z<L)^G2nU8=KtbB$}?b
zl=hkHq?%IpY;2e>4?WsW!{SBYA1>ASAljnO*{%W}|2MdRV#g9kfjdFIsYi=##F`4U
zM)O^AC-vb=n@=~dFT762e-e{p_1zTx9u;+`BvAM3@P0Tzi0Cfe;mkzb7V=Uckj5nP
z$dY;}5^dW$FiLs<*0Uj|4!)j!0NFuq;qMdYLrL|{Sgr8ubRUF=U>P$JHJv)Z+-5NB
zDLDg4Mx!G&7<P;*KmzO{y{Fj74aa)4%5`ChjkJ2!Cl0;#e!g{IRE?rh>2q>;(C-{O
zq*J{KON%#0UBX942-&=I1_-<vBBBZ5wNzsq;Kk02LLv~^t~-XfY*YREkyF>olT+h2
z<a&#lnl|eG{>nSb+^*-dFy^fqFYPd8-b7iQiKwqD&6zni@M0%M`KAfHOx%Efb79nZ
z1&z>~_LweZZ&bRHN>M_CrgIa%b|6utHzykQtSwVgIR`iF3@v*|ZTk4LJuQcF8>!%-
zN*jw07QeM(p_pF}Oj)~SejhyN6GI-Wfg*n?UrkZmn5#L&>!y2uN$;~?;$O?%hH2|+
zRK&$>hd!&+9~OYSs544WGMC?51fnS@lqG{;6$+A}us0dsCpXuq#!H(LW?6Y`G#Qno
zON;f@f>g>%n!$#@0ld)u&S)yQYhVrVJXnJ_$Ss-mgH;-J|NOUQJhgeKhnc0f4P7W}
zIjc4<#ia22M_4yGVI~s~uT*rJ^@rg99kD3MIn@$gfb*bB?8!_;dq<x5Q2191?&)ho
zoG9xL0Jsu5$5d(?@pW#uegCI}coKryTp%<6KppXacM$(y&D-A4^#5`TVg<|Ed2{sT
zmzq$)yc9${Ok6h_$1KcXx5P03ELUckU8Pw(VpF8v5*@hO)AyCz)P;nUipxEdHe~{n
zG|TC|OJCB{2JFosvFJ)hcLLQpm&b4a%(YYIz;?<Y<;jzg-EW!tIp7QW6`Dz&;ZlGf
z#z6M_?b3O=O#q`qBGw=uJZd}upgHz4E08i3c!I!oc31<tXVLYCn*bte3ujYkNXWS?
z>qw+WCIIXI<549rx=W^j1&#KFlP);PY$r92e4`07sl)(c29aMAfue^{Lgx15#pum~
zdGuz|H2F0>Dw!H}Di8^N!lV;*cPLeC+qeA+&sq5}N?~?My3MdkTTy>!RZ)mMyv@sc
zz=zs~R?GQ$K*<RAnGuV~?yB$a0lebzd4osKvj#x$Tn-vf-7?Xl;j$dy`k?d=&XYYG
zC2-eQT$pai8&Jxn@i@Bf=sH{q*3MmUJnsE`8uK14H&Q|_Ms-@0Qy*knkw=x;|J>Zt
z8-^7x(PV`2Bw>F^-q14@G#B1kGA%hgkqD+CFhUDH5`J;Uw*yag+?`@GE=VYgoyZxv
zKu7#@5{`&r6zw5DgDMUwfF6tH4>8FL1vaOP;cKE$j06^^%O)dI^B5+D#(f(JjXc!6
zLa5ofFW$p~{dljAL^|{OQqXz0bwf=2V7Ck|!&GtsePp&}39@p}b=#uXz25o_b#aa>
z6?!DU2Yt65{n3elA&vb*V%5Ra%pPuys1I<#szo8z+X&x9IhA5yNFC{EJ+aD|=7b*l
zCyH5RGR7hWuOJIgJBk8r8m&Rz1?TV08@#F*PCixwa1^-D1=g(>ff2tB2nH7ghE;f|
ztrP5s(J>{WBfZS$e9mnufxZN4#Bfeuwdm|>1=L820vpEa!q!rIklOZXn&nq;%!uF@
zGN-vJ8q);ZG!cI>G`*={z{T_3R1v|s*O5UiDAy0DXd=Hk=2c?XFTv_7-+TLe;UbV0
zs);5NCU!%8NuY>XnnaXnCZ~@zBc@6eZI37xU3a<@Hc9XiJ}iy<Uh#YVukx?k_#+wl
zvCXsoaW3u2lH-kC>dP#%r^)M9*z)bN;`IgMrLcdaH#kUK(2lAwRx?6e0w1pBXg=sB
z(64<&j=|MH-U)B}j>YJq2^d76kM9Ebqwk<#_vra{NFID7P%&T(=PLaYlcf*<4nFoA
z3h_Mm1hc4g%L30Pfc1wJ;)TyhYw;aJ8Z;x}kUmcQH{d?mcfaIMFDS2!5*VcFd`KVk
z=9xIp6xNa47~U7}H9l^S-)nNXzG<1)$CBe~<{t>ZE8OQ_>3+lFDCcR6AGYW3!n!x}
zXFjWOXi<D@c3j8fT$u9EVKh=Sd>>~tCx7P5#8z)yu{Njj#MmtPa($0<DLJ`R1gA4~
z`UyK!t@Qg(oQyLGUAs!`s3{T9y0uzRrp_z~8)qY%$0JxO5zVO%>z#miDll#t!*%uS
zAZIjwTRs#7?N;Ryt=!#G3ugfw@tkp1bI|NANkq~|+{bNP_qmqi27xOlSPLZmT`||M
z6Abf3UI6WBHY~YGKRmdJi9J(dBe(06dURI3Y2Rn%`rvixaV7cmlp6om@$>8K{@;ao
zckbaU^XG~Dta^_5X;m2nzC#FcHk{rEMDUzn_O;shD;LEyFdn#3tMQ8XLR=J9j*&Pg
z=RFack)rhx7Sn?*O2W|A+m{x4*nvk3pR^tqmdDuF8u{&*dlZRqgayk(imKs?2?Kdw
z{W+3wok=dV%^H9w>u?3T6$CCA0YbeHoIS5k`+$f!a^60FxSFkpqr#L{t|&Ag1ybwV
zC)DbNMqv?+vgi%n`eZEE6i3^8qf{%@>Osuu^&V`uvUXO(!85;qmEEbGs^(7=`odaL
zm-l58?KbVq94;o6|IG^UO4CDKSHAr^xS(O$*0LYGk{IJ!W})|ltMw&{j4VT@UQuWU
z<SCB)es*(V`w;oVppIROY>0m%NxIdO$r&ORDj2XDHSY*Ayo_HX`oMDk(vwUcZ~Nf_
zYODf_&i%SPkVw44i4i(S>-R`gvFJ?zJEdZEdfgzaPQhrMKw62f46{Qz@&|yrx`AA#
zf-8M(oStTan=dm&_$u~mMD|yW@{F5)dxK~c@!983f&H>Ald8?)7)@WhTCetwb?bsx
z>!@HiH0#)bhQ6p|Jp}p#Ky8EpuY#P}RJB*q90!^A%~{Hv5esGL9;y)|s5H*?3>QRV
z>1DP||MQjf5D&0^v4qI|A18yzE1LPQldGiD&-{=~Z*(#uB*Lk|mSp6?5A7byIV6d}
z{B>LnNI?_KG|I6^{E8*3egwh<Cgd|3g-xXAv$$QPe&)8zmu;Ne7&S1#!4kc!&}`q;
zho#!`&|Qo%9+6u?G9t4!2+}@MYpk0V%!O>$MjKUi745>M3c99NNG3Yr@sjU`Wng<(
zajXHaGPs1AQ;G6L=3_r;9HdX)&a#2Ip@A&#S9vWZ{1#05MJf0e#}mJH6KkcOjZKt_
z(9cM>IF1&bLcCPxPvI!RQdee~$Z*BBJY=FQ#H5#%#)_vfspKTD1JM8^6QuhnPiHPt
z74TB%;u1dr_vl3tsX(Z*;1+4-^hne&Al3!RR<M%~3`x$66iO}F14OT(Nz1_3;KBS-
zSu~{<K<<)i+VjZ}ts9L{{kS->b<k*q`V&5ws~4n2k|o5~iyZb?Z)HSpHe6&xk3S}F
z2)G3orEcv9iFj6QvxeaSPZ8m(uV&i3qPeYXX535M`!Gex4?U4flxru>3<hZy&DG-o
zq7spsy;;<Utl9=A1-{qxFvy6XSA*JOQ^MeG9}MZ_NY{K6Kv?;8D3AQco+SD+6)_Ay
z`E$bhwM7wCGH(nqvRXp@%9nDmPTOQYF1oKvwZOsm;Y&@3wme-km4)T`Ml7o6K|)?6
zxRsD&D>{T(T2Xgef&bFYFRdK8@hR+Ymf4qrMs}J(OHD0yk<?$W7TA6EICxTK>#|I5
zhGNK^mtc~mwM~zrg?s28+oqpYYuU`czR9|<-0vtb3RR@-;~ARF?e49zS~Rs$m`*e6
zCUqwpJP|P0cxjz*!&+6iP#K_xD8UfEZ<<|%MM*K8-<8tzK+ZZziLMXbOX!dM=`<+1
z)_5|0Hs&wfqOM0^%X6@U1^%WbOzl{q3O^t~)A6aq{@9)0d}I%K%TX6D<EDA67y7xT
zC)2MH{{@V-UDw$+E0H?h->P|bgH$G~DtX!jt%Z<w*DIz}v5rs`Jbh;|dFnMV)vAz2
zi^{j~GimhPHj++t^co7}&D1f-11^_xN^<H+3J^%wB4nZ0){ujGzBNAX*e&!C&-U$r
zr4)m0J|3;jnl{TsS*mWH44zOkuOj@BbyjS9q}k}gNUfd$a2=E$+h`O^F5fsk&d%h#
zjJB21Wc}DWo@2x3s5paavE&Rq2O`B~<}$@R0o^hL?ok+4Lz^;`BOl_5be-x3AASkl
zbwUN#zT%WtehSOCn)jw^!Z8%9d*4`aU|7^xACDa^Myd+il#Nl<Jf@4U?8=Z><LF|e
z_>-JTxV%sc?P~0My>B&{Fj|nu%IxVtsLH2l{Tp5bZHiN({5m=izcM!F#?@T3xqrpJ
z{>Wa0t>?|Ce`0Ka%HPQsrH9S>ICZtyX^lwn{Vdto=~b0Q)RIt=$ilGTR`#5uItpD*
zEmI8L6Iq8<wIOhoMqlvS9!c5tdL&8d1X1G6EcI&1D|Ks@f}e#}5_Mk=C#*x<yTa8S
z7y9s4d0-4BP{XO+SqdK~L>lsH*^ff*@z-W`?j|hAhwH9g6SQ`d=yYL|(7zzi_+G8H
z8u29k`zPR!n0+6<mb2cauN_|&-@lD;)1TtG7MOQZvRZfDwmci=2ee0#(Pbp(GR>*l
zRfWj4oEd#wb(9^^LORh}IVC?<anrPvg8#g|w`4!ILjUz;kp6N$|7+?0e{JuLEv*0h
zG24pz@0d*j#rITw+pGkNm~W7;I;GJ?G$OeW3mHb`dMd6zcNqBlg@eTEWAAl#9Spk(
zRd(?Y8e}zRE~oQchjX25nPM;)%-24p(JNc{&B%!8<?G`OK0_O&4A8}l8P>MgcV;FI
z7-ZWQh22oUV?P445rc(H5x7-LqJ)Fxbg`ZctprcBSU)t2oEP*35YH4@E~RY%y&urc
z10+wLFp~1XkS*E}t~15FcrqAHI(X?V7@W2jSt#w_R+2djCM4(cz`jH2?C#<7f#m$b
zz;w!q<^_cnbE~)!KP1Ae5hJ_?)xnJTOJWVDhS?LIh&@-Xt?Sn7qA(7(O+S}CNpx2x
zPTQ<5IJw(pt3Jj#7o_OHyp5;XN$aiK_<fcrDfZby4@sOom(3T=no%COQ5yl7tW502
z0(sY^SEEQl;BcvHYuGzv#at0RPpX1=*KQU;eT&S+Dqnsf@{<(IEQg9@Y*l<cp&^~)
z&$J?JU&b&nYa!#<Jy<{7&(5BwR=Kdpx%L45(t!0}5sA;my9K2K7*Y1p7vQTG2C~-|
zI5GrvcnYzD<>$!V(zN#vF_g~^t)Qrdo$gr=*`fQJAg&(?{tCUw*LDgY#?g|1cDV^p
z=8V{T?BW*fEDW!F;%x@la<CF_XN|e?8mfu1U^djD8UhR5$owb~osO|+$7RyXVgEn&
zx$Q%m4#kx!7WEptTa{OpA%WLXVA(8~iD!diT9_7ty`DMW{%6w<1sEw4#(UmOJg`cY
zA`X7e2$s;aVCursNR@}LhwELF56#uO9eF)2SO|iMbm<=?*?bz!LrqB|#BnBRM$H&U
zty0<k%wTp6Hv0I-)U#yH4py<hR@n!Uj$uE7*-QAtk+A?lVj5A(N6WI=TrY*&Q#@)s
zJK{(>Jged0O$56x!MJ7QBRPFK*>bgH7cx{TWzm6Qni*;;TCh}Hq-<b&Kw~bKf>m2E
z+PWo$+;VE7I}toIIU$olO1YH0r@FVkK8Uw;?%!&BWyo@->L`O6&NVnwq<qo}tM8<k
zC@Qa|s_y#XlSc5*vVQA~JnrHY&7#XA?9lgG!M9|m9ff&&pvZb$Q)+G{9=>rwQh$d&
z8`RG{3;#wk^JJf~j|#1vn(z_omNeQ@4Z?O7`W!KzUT?`{V5<qDbqd0v1*5PMO1v9P
zWFmkz(1)F(4m$!@k=-P_B$Vq0YCMGClAZqh)V$qTD0;B^;LPk=dSvgtRzvnEK@q0v
z!bjVNmv{Ubv;FIT<o5=>o%fyc(Ma=-@V#>}2?8QMgWePD3C|K`$q4C5+1)Ap509vG
z&CP-Zx2%qu_$%3JT7{`&mzVq%5Hc;{QujOWFI{0_&$HCu=K+u3+u3lVH-0pFy`*H_
zm#9A)2cn;W|9Q4g6_qlR1ONaa^b67auV?%JQFDx3Ep1GGb2H5B|GU|~Y3u;h;Qx%s
z%*!Xr<+&>KKmZvykQB9o-O*S}Ee`7K5k=0RJG#3+J)LrEs-~_fGxhaud6VI+^m1RX
zTOI3r)5%#50iVzzN?d!1g#%KyWLCT+AwiBrM1cN^Qesa&T*EK|7_}f^+$>H0*!gIP
zIGQnLL@z5K@CXh`dP%@O2{Ek3+NLe#x#K#K7w-8_z|hX-rkHsI0DvE@|J(olkNJna
zv$M^AUu3Uwe!-I*58i&DTcAi=mt>C7+y+^;fb5Ri#yK1k**hrFxdc-#)gq}VyoX+O
zU$^YcB&1TMHm3`EcJyGI>qwl;*{?8^*DP!r!PnpiJWljvkk(%hQ~Y|}+qPfHuw>cK
z!Z&%jFYAsdI!@$<*DM(zirq7txnpt;Lep{{(?!^Pn_vPERi|9r@&6)9z9YnG7WzF7
z(W(wcPM!82-`R}wf>LC!IUj>VN*KjCCWd1-)}J~4>f_*%O+RNK%Lvc4_=Y!SWXV9Z
zgAfODw9W+?8Vwm>hlM+Xfbu(#0A9Mja*LPYy3)ceLgdG8b3|?%X0`)P$EWA)cS|OP
z++XJ8Y}mBo_G2BcZ^0Et<1$)`)0ulG$^6PNO%3<Sm)v?>K_eZ0gT#9;ZrK)iWVzhi
zxjgJUc<*RF^t&-eTMs~ELsbr*Fg`d<$xE%SE~}TeHp7uQ?Qk>%h8#=)mDLQmK&)u5
zkh-w9vAj3zfuMdcG|$GbgWwq)$lOM;jwmu&*fz&yEVPiB5@6N<n`8&@*9+s%^cUV{
zg+#BTa&N-QuJ(-}bz+~44;O(Io%EVZ1}69PhS$2ULkk;(GFz%371Xt04w!<san)Y~
zoYou@X;3<~w`8oKRYuboU?a#w6fE&Wv-`$B0bt?ka@$GL`}-8T_5R3?bIkECTi@sM
zv_w5&(<V6(`2pa7YCP!B6%2HbvXpIPHLhg?372k3V%a-)<G5XMvbCVuB93kgBAJ^u
z2vWxmp*0@rP|`Y}ep7pQYiS`9@CF?G{N{$gw>b;g&6)3llL?;1CVv`*)144yJX!Q>
zO!oE1Vw%|P*Q-E-6iZ2|LLo*(Q#L>JK7yZny?v;T%P2sJ#&UfTsngFshpTr=1EYM<
zjD)}{BduY`F=t$5sL6Eh|ACUj?7gtDg@{^Et@q!S8_`Nr>0FaJh(E&?gd&2^+-;N!
zD!;Pz@=C$eQ>v@++YMsmUM+~?fZOdiPSj>j%a<A0_CG>=cUwdvlCliBz_2IIcuT4O
zu^+F69yeAC&H`A%>Xg(0Zq)03zPzHn#1}^4zt$Xndg*Xo=jZtSShQ|CgO@s4+&=q#
z@kCjbSg^LoG{?+u3E=Cw#6QUM;=r5DE=htJ&t7ZvK8}RTdea6HiIkz=)$-|GOACr?
zCeG;Vn)Cyq-Aj&iKl(2;`r5qBt1Jb$17k*-ilArvkCfp}27KF33@%W>_`v^p+$_tc
z1l5hLE)BWWsZVGS!`LCg(lj{xbpz}hdKm3T@5@R`u@-0xEz#u7Sv_-g(x|k0v0W2M
z0D+;LTUiFOib={2({}UB9_ToHfz2zrN^683uJIgTE{*saB1SnYZv}tWff*m$>I`Tk
zPWAesmOtdN=+d36Qmt|R8b81dUteopukCKHL{1$N$&*SLi}z+jR#LnZByh2f#BV<0
zw!p!6is0*<O9Dj?Z8>Lx_?;}6;5(ih!JrAz7fp@^#z!ohVTkSYuQL>$w{re&?GN3H
z*~lVV^t+`Mfy#Y<Kdg9B7+%dxsk>`#EBf=o@M-*`-4_-#EYo{<Pt7EPxxYGVEBeM4
zk7BUCJNL-wrTB6U6=#WA@?D&N)`#=;rIem=8Gw#20T#1YbL!uxSmFR(%2Ylk-xwRM
zxHYgtYr-rMNT}dMR`iu}?_dj_1XRDf%;&W@WgPL^n<JW`q8<ueuo59^&N!9+xc-XA
zjpRFpj`Ii0=D5O#4Y@poR7+C#Q6Z>ll~kZS2*5#n6hUowXf`4|Lfh}Z2(18H<u6)*
zxE#@@Fjt)bpo1zdJ2V75nVdFB?Di^oa>qK93l61Zh2*hIHgLz})G9_ihTUX2LIiH`
z;)y#*qU8cGAVF6k1Ywa1Eab=>eJE21o&trRMLy0OsUbY8y^Q{2znZi!@A5&vetg;q
zg^N&bt)7m5-9Y_9T@?vvhwJzK>D()l?)97z7RhQv2PzB*QT^dM>KS7>H#ti97yeaT
z>oXC34DobR71bWcK$FCdYG_IrD{NIuWer(504&NqWL3U`2#gzgQ5pYVE~+_EpiO|-
zhF+7xPlZV%09cb`r%dZ|8yLPk7s7*iA~Yy`r75lQ{JY)+ABvqa0u3wyHc*$uP__{f
zn|X9IAL1<Z(xXK+=)S6-WX*z;@swl{#3CbgMgTKjBG?}tl|-HSRf5<<^JQJ7A`t07
zwm%R|H-g<1K?jZqr1=s+`z&ej5~Okfo`A(nL<L_QL{d2<r4Pcg&H0M~LX;INStFOV
z-7#!`j?_pD&V|BOh7|zr6q98;WKrp48*ss8kYrd7*D9b{nV~rCn6~iG^HDrfX-#do
zA=8&xLZK`mL}@+)h=?VU*Kr-ODht*Gu4x{WGPDHiTv{<zsFmvm+gVv;EHuH0)LCE^
zYNIn|&}oUE(W`}+H5<!Dw44OfL5XqLo}uJ@WqmVSI&)dpIU1E_^_$ZQSDz)2qWaf_
zGD$=r1(G@1J!9`|i!4ZqU7%B<!`?z7gCw59It|cZB+2hmT-;@${vg$oB$Fg_@=uJ$
z7$M!)Yk))<C^t}$Rv&gw8kF3?Tw-bII)+@(D&oHmw2b{m<yiQ~quL4bH~vXdKRCJw
z5g4#WS-qfop)g=xdn}(aP0fBHB1JXcxi4h4JfegBlxO;j;|%3;?I@S`AeT_occ(n(
zU2}pJiLwl6>L*sH@di|o>7QZ^<uh)J$Ss@934;n;Qu1blAut<k3U(wufkrckXFdV%
zpyY8>*ffHRK5u1~?7d5OBnGDKoMugWrq;0VkHQ^c+Lr#E|2uAm9yFb#E<AOoC&@7T
zKn{CCx3pu!0CBJZIOqI~%{m!PX-goAMEMAnF>kt(=n8z$jOk1B0%1l3ZKdLfd-8Kp
zM{YJ#Y3r`yAX&YFd}nVfc-Hvpt@&mVh4bflB{SXOh}f!&#ul$;E144dv4XNGNO-S^
z`mwr@9yqEfTe+Zq>2q1AM@G=R>Fi>v1N%@%HFA6MtxG(3c0#esd|>WdvZ6pw$E}tT
z3z*3$mljDFhAOmnM%H1XgPZ=}v`)@VOSx2htBoS&$Y^^Sw8)%M>hp+HOr=7~>_31{
zgHvVPZci`?I5_80JG&E&;h9TQcJZb9lD#=P{Vck!wIv)?U%?<PZFo)Nv&))+2q)1J
zqAnGns3}oaeBKDZJx$aA3K<vLBn?{<-n9rUjazU0>aXvGbAx%_t7Tc(U{>rF%=k5n
z)g%}Dm3rEH+1jX0?;<4f>1_m@ie)h2WOtXYZ#q92-d&_)RTcVVe2^4=4sIT9T!!qa
zdIoIc47(3!2x>%;j0mbK0~*mP@f0Sp;IS(Ddn~&RO9cN_Cu~eSRG__XO$j%bZ-5d<
zu4!TF1F8(9n1UQjBqY0;8?**tL|`+HS@MDgEU_cnz(a^@y9%0r_cd?rg{b&HJ=*v2
zmk1k`%0y|Gf5s1#4?a~m_zMUB<vYg@a;kR#rqa)baI4#xjU5HPu`cu3F@bj?xqTj_
z#{xMde~ylz5k!!aT|1HqVgzf`yp51RY^>g--c^H=65s`F{N5cK-S*0mhAM?8$Hnk8
zg5_&vbmpx0$|+ibF;M=1B5KH4x5x%;+L-TA_;s0)Nv38NCW(Qop~GDrP|bQj?*Eiq
z&`^Hw6<O%4Wv0<m6}=rqi!r1r3e4(-IqnGMR!-n6%krhf@u()7#_^yg^H-+B3{Vj4
zY%EceeT67Nl*DNrljg7t*l>(=r{mQ=1fy4?fyO;tb&un^0~IR$WFr+Ep3BqFl=sP$
z%$4YU?Vq-m@uwLUKjxA7yz>57ic!f2>>37^)<7`BZN_Ne57EA2GsSz<eT6|#+15Zh
zQl~(nw)cPSjibB6joW^^L*JLcfA9>R&aHYR{ry-y^J@I=$-SbenDxJ(h(jWkmv^h4
zLI&0cv6oWvx=>eXe6`=KWuRKf*+MQI9fH5$L_vSx)q<0khp+bV3g8)Eq(!$90x(_o
z%K%-F$o}|oer0xWd4)cMFu|@#dluz8e1V}A-pkkIH)iKiMyRB^_b%D5QTjfsO)kic
z|C{c(5SY!q->#0<4Ks9|8}gngS&#UacqZ`n<szUqw=gpoUXfWlp-Aq&FUx{wj#(A)
z&&p^vVJWndwrYX5mM8dq`pv@3$cu7$OJ2a_r4YN6HQ7<?o<aCJQhbA1g8YSY2mHm&
z`{vRs41T^l;mJ3tR1^yQ6&;_Uq6O)K@#7}IbvdUU{pH4ptE#(93*DfSP-(6HUI#du
zls^WRx4{YLn$zqv?}u4oElu5XZcS4?!iNyz3mO?v6SV_|fL`6oqY^&s$MZ$5u4dtT
zPov6xQ)S+3jZh!7Z&Sj<;HBzLlfw0%pz>HK8!eHHx1WqF@JVi;JjG0h)sY9dH{!I;
zGsEmju(qc3qRbIB7Rs`T&Z?U8j5}G@r+zuR5Heh4BZt*Hn2j|gh?SW!Sg<88R86CR
z4QJY-5t;b>3Ksp_O<=Z__OiOE_Aq?edc{k95gWm7P`Iom{TR1#7uZ)<(TA=x-qg*$
zNOH|0toofqQ|KHgo##q3&N#~Z;-D0JFAUlYSq(TxvKrXix)xPw*VO7J>jyo#1!c_E
zCWpT@PU6vayCWx#W~Ji?P@;6yj_Z{MZlYhURVW-on7hW@<kh>gfFQ3M3j?7w%S-j9
z+iMewmtCKgPr`8heU?)izEDQPup8C|=IvzL(Dy0|6ngTf-=t^jp)&J<jijYH`5VKb
z5Am7wFCH=WCrj|tg1mpj4h@pC>Ir1FE26u&)(09iF{TZC0Uk*O)0&{Jh1tPIx&mSz
z!-kk(N@!JdHr_*Q)+nA9sFdTYnX<yOMvoOVGp!}simWd4z1<n(7?SARuhSu{5t3K$
z=o#+tq@tp=3X8;!ry1#3UOJ5#{^}Fr1-k9G<^h|sp`bq@h(WYuaX)cTLR;k{iy*oW
zdn1m?ut~KJ(t=K-PGT~bFizuv-SJn$RgPgh+Rz>{QjnIjTD4=f({jhO))^@3(&Yjp
zl4EY5<^=;iMpWj#wRprD?|Tl!zzsN3P>5qiLM8ZQX%4-Zz3|wTBOU@Kjf3$G7M?5m
zh$jk;uHA8>7{anO3?-P)Td=G2aNGoaNWi5d&!Yuv;Ar!eahh+J1<{$<2X^?6LIQkz
z_FP+6c<QQer6TH9E$X5=TgB-zu3S~~ofV7#SC_L6+HEWh%`MjEZWKnLLY9B2xkr0#
zpyyja_GB-=Xv(s-3YuSHYL;7OoFuxP)raAf1;lx^g93XjrC$k|kbJMQeL&cuxl~kK
z_W9Lo_9xQkB2ShzyN<UwFKB<GMFabY?or&eA#EgpUoH=<4{_Wvs8oUZChHz5j~U>h
zD?(}U)p@+=M5_x49sb-%tzP6R<aNkB7Y$Kp0s~cK$+zYw(HT|Jr*5tc1C{o9ph(b=
zs@G6Q?^9VpqZMm&;PnP|txtMpLMYld0VhFobX73{Ky<}jb5@9d8~vCBn0peIBrRed
zNRE%^HfUWLD%3Jt(vG0(LufSq6}#<Eu)kZUi`}41C7gm6r|iYhn^KsO0P;>Fmd!w^
zY#O=Af&1P!j~(Jqy5r8%8l3xr16Ebce_^&HT%I4EnXS&TzS=a~QTIA5D*Vy%$*J^u
zG}%S`_ddFfWT;R5ZYH{2V>Nx8)_hX;F_B3<3>LiovWkOQ%lpu2SNuV~U(UVz_Me~|
z{4$gK@Sp$y4oJVM^nZH;^*_`S4^C!A^Z#BhsnOW7+u}g*eN~?}3lw5Q;&!TsF5aL`
z025T`cSV<k_Q-?LEVN~7q)=4J&cE)vy(@%vZOW>}N6E<M<Z(XcNL~OCa~L{Amt)rk
zyg5F`H(zpom4E9dy`v;s7#f24KDeU32h}k*n)-hjJBI*E0w&#-ZQHhO+qTu^F59+k
zSC?(uwryLl=Iv${Gym=`?<ON7BjTLTjVt7WA;_~luAf&D(wC?Y!=Ge1>YYSN5<n9L
z0j>ZD`JC4Na6cT82Qvon+Z6M%6Fn@=kA@UU+}aZA4;B)^3|~0tEQD8cr0}^YpFc0E
zHmI!uOxTTRuUfybA^gw*I%KeZQ4vt4cWYZV|K{-@$_b7FP!`mzY9>L<^S`%2iyKgg
zrFP_rUq1Y17Qz`J#>4E$RV<9hQ7uO31+OLyui0WgX`mqAQlbKDZXeTH`z-6Le*&(<
zx{RjN5vDiT)#96c`jzc4nfP(+<iP^RAkb0|pwX}KtM}qN0Yd!v+{bC?p$vqH`k&Ot
zQpJR%=+INqua&|RNZnnE?jaoH_r5|q-cn;3BDTgq8olH<7XTZ5p%77CG?OBXObO@C
zr5EJ#+D(MnE&EBu2S}ZD1D2;!U0WV9Ul{Jy2l`qBmvDUGd<Q-!tX(2*Y>&LP+<O>q
z)U}+uJKs75818h&cT>wrNsar$dz&6A{q-~hAFx9VHPY%00|3oJ5NG|cd@$p?m^-OZ
zmU4#e7U<n+mG>M7k3zxJ(k<B7Np_UDZBM2f|DF`sl<rctd{`daa(Ie|+*TpXQ)6+D
z8il4koKvact&Z~h1=X*m#eytIh3uFVy@=f!R%s=M+R#6@wh#y0q8P<=!4C`<+=6n;
zpPJ{B*RtC10(ug8&S7j&G&3$5f3ScfgDlYg`ep<u2?$fdIgsNL5He|&4UVGf6f=_W
zv<GjGqsg$)yDPcLmSf6EMEC5q>jrq6sS(T9iHu@wq}iaNouTUUJgHW{N1@bc1<-g6
z+6={Zjae^YRfoQdYWdF^`OjMTIZb}<j*WriVarMn7AM6)m+DOtJ%Zm{K6gJ}@YK`l
zi4_$nN5_XVkd-$2(30*TN|xJ933(LU->Nb6y2oMDHgN0|6Ucc|#=4cD>J2#7_MD^C
z^<xO_9MBB+78|hbYLryB6hwIn#dx6gMZ{SVRJKj?=Qx6S{yrc`kvlzWMykg>j2kXk
zAKAAA4HlErPmUtlIEC1hHAM-$zE0W%XQ#mE181@rCL>QHsxjrbU~LaN#vRNG4(2aK
zlN=Aj*T&)xHYNkT7loaEC@8kSLUJ`^#>z>SADUb*O-nnhr_!2sgJKzv1dvAO)FL8}
zAgH1Tk<sjhs3$}xqj2{6|FzN#7PrLLcE`UoYT<r*x{hC)2~ZkaMLbRWlDVhOkW4h2
zmu7Z{ohp)gP|(t3ksbA`B2<hrj--`!aj^4Btj}<ck~J&4n-uMLyWX%;OK#NCw)O0&
zs#1%Mr^Wc$?T=kgvL$n?A3WR6St?$Qh-l=Teb$$;S*RW~iuFKKWg2?am8*?B>`nTp
zRHm9R-e4*lKN8(!{Y#fnjeEgI@6{HDEFMjY;dao!tYfSeYcZ{XTR5V);__mcw(c52
z8OA$7zs+jS%_~D19b=ujlD6Umk|{63Z5C#UtA*7VyO;22FZnG__XIdBBK%FlW*BD-
zvt7e7`{Q<dbXZ^d`kG-#dp1_XIX-%Rfn%NotmUIuX?4ZWv2sYKu9|xoN3EjSaUZGm
z)x@So(J-R4@<_j8YkpFZ{`Ei3`wY@rIrV?hAJkt2;D4XR|5vsBuXw-zz1SA3D#q@!
zA^6PHq}l32NI@zzDS2*5QJ#pF5gtM`u9S|FgtW?L{k!TdSonTvNTfk9aJ8IJ#_)ZZ
zVrPDi+G5RvF6><W+b&50^YQiVI`F+Ku0aA~25Km{8!+?GBT3RnX`1kN4wziluo@R+
zGMvCmdOwF~UWYCk0+}QvVJIk&Ctvb{_|)P+7r2wz6TtU~)Wi**CRG8dz}-X$^q-}a
zACG8JoB*bXyIK)SLs)OjcoC7E1y%wC^Qbx!HG|r%QBC<Ge)PZ5%`pgfK##ic&cg`W
z5+TQSD$=QBesG#5eIiprpXRGA+m#7bIH97hEW69~G28hwQYLBCO|~dI%E);pvfIcw
z#wpLS8u0~O(**n9i`4xOp%SMh>1#Qj41ni|rcJo#Qv7#*UH-lRSQBnEbPkyZiX}pr
z4(JBjy{ro4?7uS0tumzlI0^kUVWKVxh%1`vW-TGYNuyPQNi1?KmgaJ)utwVX&^Y|r
zA%5&PNds(KR`(Z`ip_+U!4p9<gi@s@{33VQN*SHTkdLt!UX=h(vADo(TYG9G&3sPt
z`GtLBWL_N!Dgyd=o#ar{9(o~Fp>Q7t0Lvu*+_Jyy((0~Qhwq7`WcA&i&T70j9brmT
zT%T3W;~hg}|5>1N66MByDppb5lPBr2Sh1qpXOqf_M&8&BytBqo9R={#BC-o|qDSeN
zIYX1a=U&s64V4k~N>cieDd~=6*#uhhR&<`ub~j$|z%3)_ksaQ4d`Ao01d5===!&JX
z72@3vifAyhC%(O7Bk-P-1Hqb^wFSH9V}q^BTS8rME4Dk5nu^-kc&_QV%jr*jJx=F~
zhWH|Y@HW4e38b!{HP_eu9KxIp0ErxwWam^r;Aq%wz*5RTh%x_L=}Y&{8UYjOI~=5I
zj=4EbWKX5r&&FhVyfCPp$C#l#pp8i~VkLMBE;aueb?{L+#b1+QsA7{&WQVA>8(Pe+
zC1a*%AKppxGb#9O^TaQ>4C_XrxmbbKsri}WtNbM$!A`wXKoMYtucri4qdykuv_rX>
zsUXVr5f+1I*c9H+I)K@B&qA+%?z_*;ci3RAI`yrrjgczag}9jLyXHO>R0E_WSr6r;
zkwZvNVmAfdfQ4b!gaC&KC;3@}FrtKG>;?MY!J41zr%u*iK=vK)KY4inTAJJb?+@>h
z=GE`^9_!cR&NwB7XwnyCz0kpCLxLqSo+1F!=-IU}#`FxZ{glab(AoI-t8q`q%)~U7
znBPcL<MM@g?&P_l?@4crwK@#b85|Qnr&rH%((B=~$;NTji(iXKa1bgybCR%~e|0@~
zoS%CAg|$T61qH}j{o^4`S-OgIK!f6zXI(7^%f#zP3n}-o(goz=x!~~1g27=U<LDj4
zgiicL7|AgUB|>Yw#L#>MAiG>G`@``O+2Im<U5Qc?xN~bj97M$s9kRm)|6cbRfv1qe
zOF;427Zb4I=sb!q`0x$y(|}s#%($J;Fkg?<@{_`icvDX!KbLHEcXTuu&HC5%Ml6_W
z+gedO|3ifb*4VCI^0_BwALWtSX1ac>YvS60!F@$6wLAo|VfU7B+nuRe@^2Pqw3s0_
z)@ICMD)k`BDYVmgI{Z4jyTCQtO@h@A!2s_ahBIRCozwaVlliJi8iWRN5k+V6#pL9X
zKErn0;{I}f&)*Q7^1VOpkENiiD-ERfT*cR&;zPKfpe6}uE{ezYT$KB^*A(|=uveVX
zR~iPNBO;T8V!4iA88@V^KZb|Y1=fe}42&G*(qRuDh{LjW>C;Cr-5vRUYTRglb7Q<}
zwB>%btmJRUczKs)YU?EE>GXPI@9*V1U0qp*G|VD991OU9UK67u3lKyu;X}@PixYzd
zauDpqKr?jX${|N1zugy~;JF+@G)%ux8qOFzAt^Q}3X8{x3JAgoR?);C!qi8`3*1NS
zg2oF&_N&5$^O$TH3Mi2nizbfJ&!c@UN-_mR7a8>7&Wq360~U4DzfUGjSOPVQvo{1Q
z(JE3QiQlJ4Fy-y`9|Z^BJ6tC+&db?;i^2l(Ew;1{w=mn>>xKq94tY4&3=#w&>Yyek
z6(7x~R6Cj<qj%D85Od+lBMH+aLS<tomLL+bie6_IJi^DQM$pCxFwcy?zO~{3<fc1N
ziE$|{jN$!oTmXkJmXjb{ZwkK~`p4f;+AwC|RJ<=WZPt5x!$#pRdV!1SjRkiE0tIB0
zwKRy%&;r7&@wd!@c3Asl9~=g+KjH2}|7!F_jzIjvA}*w$jo|4VH{oxf7c~ugx{GDT
z^4>^yqp8IP(P}1#sr;pUVQk@@9kFG2-{nBlte!)^czX)YMEp%K2t^i5o|GXL#njz`
z2<3;S6x+vaOYzdq&w5YVTA-dU3$_m2JF+K3llVb8Eol$Vffh#lH7}9No)UBwB-l3%
zruAl%ro#mYW)qTayYfP#Mnv~wK(R*YIo#xVe0{oQwkMpcL3b8%w7q9}BMS|hVpVG|
zcGN3*PIjp47XllrKe23+L7%f-A13NBqHvmr!03cAue>M*@?;}zcEkFM7HlC_c979Z
zq?5OpR*H_^IuL$ubtAmEs5`*$Aq19e&U(e5fp*f9@G`c%rTwPJ+MQ@|#aLu0B(siA
zc@U8%4UG)6W8-w+L*+8(Gv8*>NN2s)P(?cnriM6H(4o|cRY8dRZA2~`Q5C}&2Wm1e
zx};cGFe^K{lo<Oc*Xdfmt5rkt!d!8GP6ogDFx4zya7z4O{79`d0rBag&0IMk|CIOX
z&MHj4!*q!9d>z-Swv*$cBrrZw7z{_V(W!@rd8c$XiGNmK3C0O+kOA|S0sy#tbdI%U
z!__`6D{3<_{dRI*VD&#Lip=>yU&Aws8o$7~lWPQP`z`Ql^{=eKbiqCv^2~&QSWLST
z67wU~wEpp`Ah5g-cHw+<u?C*O(;%m14wi6Cj_44=6DF`4|7umQ_%uYtQ3dpG9nvTD
z2!|~K+B@1$gB>SN-cygfb^Z_TN{_Y1u0B;?t_Jgix-UGLfMhIkzULl`V^+}=v!#1X
zkP%+V^BthYx+R${hVb`Q62!0`Y~Hk)lnAZ8#UZy3xtcueeAA&MP3U?n?TCKJ0fk>!
z{4*M3JU<CrpdLa%H8rNX@XBU;Ht7$>5xS2EU`iPVRc`dtVM@vOzJC}#zP|%Wgo%GM
zqxQ-zD1`$oILTnhpVbyL&Is_*Ha|}wASjv18zUs5+F(>@4eV+{QPDGGiy8xxX#vnw
z&|NIeXb?9TYJ~#q0lhZ)rV&xBP_k??6v*5Y02g5d7&;QfQ7khR>A}5164WsO9Mszv
zQsgolHxdR&8vx|XsoPt220~YzygN}e3L9O`mpIM<og(E$`f#^8_;kECX01XmDeMIV
zVO-(h!wPlV%0nvPe1h7VDi4)El@*b;Pb=fi88;wu6_#u-PKwFA3L_6N3{Z2^9?Te1
zB7$$5xiEA+hpHznV;U$Gm5Q#<mP(4V6RQk%HOQE`AM2In>N%tN9O0C#jqis4d_b~N
zozLX+G}c$P_Uye3^<BV)6-?!qSc(?L&Dh|*R@9K4qejK9?|2YcD07uLUr^<A<GO+$
zexR#Q&D`-U%3~g1wzkQprNd0IA<GEHf+dBM@^KPhgIJsrL%Gy2iP@y?Gd}Ny8o_~V
z2y=9j$opH#wT>kHs@FwGnNjck1^bI^F^D(o!Kv&&1DS3f4*3+P*iCn@iX7!f_wqII
zw&RiSna?_@8s?Y%bAGtKTR28{@Ox-xoEBwH++6Epc<tbt5EJhAL2f|{?N~bfTB`m^
z4HiSir&6Ic!k>Q=<^_$~q+T4hHlW~YG<~lgB{giFJ#RvQduFlpk#rDuJe+gR!6bbf
zA$AJy^vE1uM-U6-L-Ay^BJ_^(%HyW~ezi0ru)2{<b7Up4pC)9e;xp`NF%N2iY-;g)
zR%N!ze=qb(9>r^4`GpwGCj85D4fDnRjSxC7%JIkcB@rWayYTI<tMT+hMP%C>NpRGz
z;PMUglJCJ_!MRo?j4^+Gnv3ik!LcUGk|HRN33AC-CvD*hKNe7^)ci4JDjzs)_&cT`
ztdn>KS+ugK=EJRS2;$%g3@6JBv25c<IgS;b#!<DGA0<p^qQ<EuwE{fU_7Z9f0W;23
z=6ffnKC#-RhpZ|EwJoN;C|{kddgL2!)jMpQ9(AveUtnPUE226gZwl>?;P&iKnPDx@
zae1YeY5VxpubZgtaCoH9MLTS1@;%OXx*3~a)pzcu$@4ukQjvOn1+ADb+J{nQ78^pX
zC{W`nP8}OvsQA>Dz4yH0|L-lCIn$kH*>6i$Px7DKQ<^$D{_h=Gw$`7&nUkpB)%tY@
zUUkgXHk=F7MV4HFMaeSJ0$@plSDg)kgHi=z0tR&lW}iEr(~j}A2zl!GPX69Gyq?cG
z=(@g_@v$cTz<AsN9VT~DN_%fB8{~K+>hbboU~{mUv+-63qlOq=!`mLj5<d?oJ>N&q
zB|q#&b{vdEcp52UW)83V-6$fGLu65j)CI46jEHdviR3&!$JeL`gsI20?s2_Emb>?9
zVZ2!U9ir2B`<i^Wm-`WMBMhY4C&?iB1eX2r;?|u(|9EndzyFL83wHX^4A>lc%GDko
z4k2Sp<}4hNNRt!n32`v2`tQwAEA_$SP>!)UOE^cOtt2o+`%gU~A$me9C_%iYaR51B
z6BZoatgO(})2kEyBb5BCWYE($&%5yARL8D+GJJKedFg{r@i}+Aj}>Xvb8C7#*)Go7
z!)nQU7R%yrD|G#ehdC8lf@GB)AQ3hep)LB^tr94vHkvd5O&N9y?1M;4?p3AV<;aOX
zdB62a2AhC>`&$BYGjkVN0+(h<nd)|Ne_Q~?RBnX%?mn4K0uuvZNB6MNrALIbM|;FD
z!KUinFBVaSfH5Qx4O5CR=KD>cKX!xXzjC9*fWu@qz|GYeiYZ1sC?}4ddT8CYH$jfZ
zS$zTer`dUCo9<7Yinw>}+SlwkaSZsx>=BKJ7TK3EhH8rg<Rv!i(j9TZ?+i?V-SfDv
z#e+A5xiNllO6Cb0TQLixFaJi$9>sHJ@`&SyF=UO`I|)U2V-W$H_f8#BFJkp3NC*|5
zKyjwZLOS~t)nvaaP;F68lC)Y=`X-L-6ta5>VK9&C)g=mi2i3+XZIaEgP~hJ|%|Kds
zZ6DdKH-kE>_7WxpbG`?lUQrHxr=LH;A0MYHrKNc?z-WceI7|`%?tF|d2LO{#bz&E*
ze8u!w<_-kcHrd&{{S^roLe)&UmuJZMoZXES@BSCcrkhm@K5COK$2vn>tR^F;_pSiQ
zS83|u0+-yg@g%i4NOW&Bj*UV-;=4qL9xJeor-~h0P=b=I4Gh%30eOzwwV3QHjX?f8
z8^hyqd8<yoz(>~QHxsP@mMs%<YOMr~xJLmDE75=W{9x4S)!O}{mUJtk%GJuE$^&J<
zj?1xh_hLfg9^~d!ga63?1FoKS#67hVU(!_nkZBTfURI5V-vd_a(DRUuN8SqrHJm+V
z|G;4qWfIQcy+X2=Xu)>mDu0}Vo1FhEUzn?@wzWTzN#5Wbj~bdySMkMB_%B+kQ!MKX
zbAN+wuthh#PpN0ir(%I-)4ls^G5KWVME;8lt#dn=SUSU*ET?$7S}Z3ue#$IIF~{um
zCOkHC#`Ad^t&v|e5ccZ9wWR>~-h-Qq;KoD})4hw<G-|7g@}Q!jG^%{5An%Pr89C@D
zkF$5*f-OfCz<NpJb9A2nf-|C)ZsPmjm4%29k3W=|#SewQWB}@<5=%;Oob<B?Y`8Q!
ztxd?k=W^a$#!+Feie?RB6>ZBw0#MMhWihX9S_u{5LWL;Ph~mIGcpIw|U4x;~xP5yG
z<g@C$A^oc+YqoCDsHo!^2*)^HsvvR4;VII-{j;i<=i(;W>GiWfKF*sVhotl;;R<hd
zQ{|-$s^?p{qd3}layISyr-Ulvl+1BQDi~nXL5hzOi@%og&?BT-JlsCxnT*Cy;J9_%
z6;Wkv`b30%;~zu1^?Pu5w~I>>;MTjh*0&JO8?$K_r0^Wvnw?N`DTY{$40&Ue&zm&r
z{$R&pEVf#qW&&>Uhzd;vd#jgX*9ZOZsq!Ggcy~zd$4(3U;YZI96ITvsn;vZb(rl*-
z-O5gEtYR_)YOL()D~NEKfvOPh*2f?w*zJS9E6sQb>mhwCLs=425=e+4gRc9|fmRg~
zY$4Uy9U9VK>{U=Ij`6A($fs6<cR$?G7-(E8$7;y*|5%<DiheB+g3A@jG`oP^JE&{*
zN@GjT#pgj<Y}lAA4H5Iax^`2@f}3&XW^?=bobVAG3gk)xorJMOP;X3PN%nhH#a?k3
zqaOp|R98;RsgAI)-bT~qG0F^U=p7qn^rYG$eOz+xev5-P`yL$APY)t=5aQq}^R$di
zxD2cu#~Q4HcA6^c&JYe2Nft*#d6o8*966Z6We-?IimcIcDAE4&C+)1cQ!oo9g<ESy
zG6QdPZrw90F|j8DmT^UjD8p{8IjJ-j1F*{p&}la=E?|_V#B0YcqDG@>tFECS7?jHe
zebZ1mG$l94zlTz|<&?k`SHRxpeb_oRy|U$|ln5|zqC58_4g_FM$+|hvrlCTlpojYP
zHtYL1)E5uwMpVjBjH~M>5V&}Ke8bZz!nZaM!l3H5_#ZfJm`=mT&CUX|b1}7#W%@8l
z>7`YmX*8k@O_!@qxnvGrb7_81aDyw>^!wa5RW?)=YOFGd+&Mc#Om&K74psX0ZCgEf
zCCr%delRMM>5OLZ2}dVv34oBN0*P5c)b|e@^6{z_mKCGKx=P6<i$lyiXL!^1D%w?$
z_lN7nG_%q7G#4W<SdahIpoJ1}jS;`81CBe()e_A^fuS^`j+2p9s+WB<W5mNu`Ut}v
z5|$JchRC9;3vcRaywikRb4<BWE)!^e(uFKyGT0=*0M@kfKgL4;+&jQ=^<37>ez@U;
z!h)GkmX)to<Vzd6Kms>3dxJj_Y5=B099a!O<o4|wizYdyvND8Dh-VoPXb9uw*00mV
z&Pf*OqTC5JkDCPN%o|{?)-KZE<z_nTc^#9@BAJW7r~eh;?zD;f&X0Io0}Z?>E~u&~
zksdMvRH0%ow|e1d0u?+LNc1$UC}bm*{Vuw=gHZl%y=cmwobUEFD#^D520c`=#^xi@
z-skrvayb2f1`l!!@{2v-dB&Z>-s<Z)MKBtL_*BQOoV7oUp6IgmT5)aW+OkB>4d#}d
zCEpX`JA2W&b+kJYq)uRGmlu3Rx}0pLJeYp6F3^3+XanJt4vaEe>0{gQ>1%|(0u|O)
zp^sA@YOnFP%RVe;7T@!~QCD;`*uZizB=QyVyDLN@eZCm`R0Ir(x*n`&F-~D*4{ZzM
z7Sb#}`f)lPCQDYk)~iZV@;_qB5zt1X9kHA^FUGcUXR+5QJu(!Glse)Zqce_Yc2}Cu
z$?MLXow|gqrw-OLIyHMf_Em>fg^S|5?R`?~$^ox}m)i@CnYce7O5@}7h2woGc=<Tx
z7mS<NMttjm{X_>#1mq3PMF*FE`(d{IZcS*RA6=<Y3XA;2fYLvD99kr>K=r*VUfBIi
zqQ?JH`-kW|h{J*u_no?}ee?6*o4_25{Vk^76{ZUIe=?V|F?F)|-@Cvi4c)){Z2v{o
zl$}KyQjmDBhT6KCOQdX>g~Y*-EIf}HTl;Ul|FPx_y1Mke>H3u}YXfm_xiotaO0<i=
zWc?-0mk|eMB4U^H7!Amt8I4U<w;L^#AM^e_+4m5{t3QN4XJVpG%Qblmn(UAJXKyQ~
z#!|Y*{6yyG&k)&L>>$UhG>A6^p==<;Cqi@CiGWNWf-K}C4~4`Djzk`X!YPV#49>X*
zMo9WNR7^=MD6>f-HP9QbEA<TcAZ-swETBV9HWtFku;zbu2AIDKJx$Yx*24a9<U#jw
zUo;9Z1?`vuni&8JIcPp;h;hQ4a?CGV`tjwH01(OpPcGS<d7oFF$9$)W(*Jm7aO;iG
zVYsJw&)h%M5&rYN>KcC(gG*-1aYvt&4&)})08<LDc9HJQ?)!Q44UD<BgJ{}~yU=w+
z<}e+0!HtPIBquV`>mP4(dU?OMTLb7{GHit7E`E*gckN;5>msDFF&;R>vZi%(YX9n@
z5CW=gl)TX6DV`!9ITUBlVZHh@@ZpFmK+P|@=z!9om;!XI7q7JnO+8xfh{&i*ry6ZM
zK|x*LDx!)O-?|Ysk0g}mgDEkemmR#xzpe!6$@$|fb6lC+Rexg^IrJ6%<>1ocrZpv6
zs{!@bjT@logydGD*tJbXS+@M1vQ4Yau{{FLj7=ZrxG-(gOIgf{A3?b@?7VrvV9Gh`
zA1klp0&q->H1n{CHoK6xGN8p-q$;-xpjTQ1fTdHJKfFAAmzBVlVe&ioIGv5ma}>DL
zm7^mmiR~N|Rq17fFstBjQCkNo&5fa=hhw5@h#K-n$uDm|gI{xbbZP6OL>atmD*L+d
zq{odXVnw9s@3N!@3DPq0ceoYsk5VMDWMLDa=wDka_%^kaBg8oh7;;&g8AG|;{W!+;
zBGgfreI8)W{G6^!P@oaeMk#GpI2SEzYpf13FfThT9cHWvDcXIW)gk+-2cRu8NtWZ{
zc?`ob48c8vaa=m@b2mJl7%iLI7!=4e-sH9B!E#)}reV&=UPF8;-F3?LEkzaG^KPmL
zzouk1-R!4R_G20n6Bo1w@8kxA*B)myNA&5GbtgwQ=$xK9S!yOGH|mEg!)hn>ARlMX
zo|HawS~QT^1F52EGGFZvbrYxl!yIl6*0-J2fuHg*BVu);CYj+F%Ff2U`1X7fx?NP*
z8L{Xm#r?I%q1Og|4qxvN%Qq)*6}n=L`V%$hXAjFAo^LTRI!{I}YP3ac>V`9Krr&?M
zqSEn^?`ZX_qz7fD(yMtfLVjr~l$^74DGIRcVz1Ct^=a$S=ey4tWm|Kdl)uSI@Xd{;
z<mCyeWP4ucvZ?rL*5l^;3cdS^L9ni1t_icj(yUo499F2W$mI}KZ=&P5*pv8+5q`F<
z&?1P#U_68*ZOdgNYxu7_LrUc<aU5$e4@%cOys$UcIM+NxUJAI0*5L5>>+8;9ATgde
z6XM>GS(GovPNGgMvLpm{TORk?%|*iUYSUu#*LthM%fVm2hqk4f*~y6Ao%FL^9&A9b
z*L6-sUOYH}cJO4BGT5HOse=K7N#!N0(qY}FY~>Vn`ETiLS)tzBkdRIVHdRS+O@n!c
z1-dyDPW8Y!PLV!|53JidqKZ!8bgs#o1K4{H!ey(5x*7o<+l73)5Xoa@cJ4(P>Upv^
z&!Ho)6-7Zw$qa{2UB!2PASQ=9;+#H2w)ft_xoZAie4_O2{us-4JbKQvJ8s)EUPS-K
zef3tyM_09G&SGLh9oU^TF{Sf=hEH|(@|CLo)?+-x|D+xpJK8(_@AY^}eZ%&E?Y}Nc
zWRwgDF=MVkEc~}vD6<x^F%*(|(Vad>ez)P}ag@PD39TI)b~iB2j5ZTvWbmS22HGSi
zj?*}B<$4{UHm!0EO<}3=0SmGCzI>b)x!*twVST#8uO|DwT@pV={sDs31uCO-FbN>T
zCIp6)B*?Kemj%T4M}vR|3Bhp>agYijnMG+pkzlbC!6Po{yE81I$vt2>RHLNC{8SO7
zH2Xn-o^To^1jh(Pl{Dercnoe4szuqUwo>H&GlbdH_~;+4JlcuWUU|vu>CEkT?TLo0
zWD7cZEet7AgAY1Gl<Uy9sB5B9ruWJ<FOQFlvWS66lI*AxdWMVCdrrhnQugjOOYfA&
zf(fB8KFL&33${*{Fv)lx{u<_1p4S}55s=rZiIO}wVk596l7|zgen(lJuRUvWuRNP<
z$n!4=ED{#p&{qaLm~IamlGGAyi?Oq4E*F2GZ;8{!LBTJ^pWM2smctXJZ8uJ;Zm>Nu
zf2Mp!eX2AH18H)J%kd5}z#>D?ArEjVvW|6zrDNuyi1Y<K3FlSKT@{LPaqIV#4@th@
z;tnR^2h!+Wl?UGvCs38=#z-B4FcrDf;>8dVh5cNV+g1Sy_r>+=*z-A(9D&<k`g*gr
zBZ*CZm~ql(Gwo3dJfNd~1XS!m>LfmoCOj9A>>U8FCmpO`Vc%~dMNpNo(ZBH)IB1?d
zkp4y-6h{WD`j>g_^L06jUEdJD3~NISLjfd1dd&MzF;WO&GjmaRwfgx|Y?_<fD}QWi
zKV1Qxi(Y5fO&b^_GPJN28JDaq(9gmx{!Qk=B%n-F{OMGUqA|b*#7UNEiej==7P3w{
z?htUU6kcvv@1Ji|fI9&P(z^uHDWL)-3&J$cjS7sixoa2IEQg$YK*49|FSVg$Ql${2
z(jNlUiMHKbt1?^AW>Rh0J^81i-9+$@O@=iNcl#=Hrg==*xbGarX<0-W9RK~%SxVnr
z409kt^7R>(>0!?>_W<cH;iS|m#+LA<kY=VwI3F0@NgT-E<Hy~}wR}w7uLgB#xrvxr
z|H%_Hz$q5aSf2#uMUDpRjxnd1`+vajcFj6R;i53gI`;x&_{$~L(3-`B+l+YWag$Wz
zK?MZtq|aK`q_k0?WQL-wx8fHwr;M|<t4bf9JjZ&0R;z7@N*5J)tFJo}69hfCEoT|}
ze}F8O=l`OjOy|Tce`R3xzKd?&^dhzQsbLFvQVMm^2t6m{Xeeh$AS&6O@$JsNm~doo
zt<-We;KX*-xpLcQb^N(`FgTnX9+*GtX6wFTnHY{sG7+wv1v4x?RnUC<FlZh`_y0t|
zz`|Cp>B!yNZDRj)^gV&wDn~THR{{K&Pe+OnWJ%GF1;4pd&Onu#Qth%60*@aNZ0KyY
z$Y&2`w<R*9OeLgQZ?N)<lh&?mldP3!ycjQ%cJIw%%ah#}&?T@+3=4^|Fr`BUy8_`r
zN_31e+FJ9hdRe}Yxsz#NfRE=MRKjXvH*`hIL7?hU|0}WPMh&q);$J~n7f5|`5>$Uq
z|9i5%3cJ<4bG4zpzP4NCLQXGI)gmwHB+BO7f}|J!BuzEj)`r)`o8n5PSCM=n_ORA=
zSADZN=ET*Gn}N9^TicCcXn5+8_13SSd==;H_h&AZFY*HYUOF53&nq#x8DjK5UM6v2
zrem;fJ?w7-d+tmbe>(GC!)df~gWU&K8b|+|rhx4NLfxcU8AbvS@8SdJvx)$Vu$yb9
z(-lnJu4P>rpt?OzK{}B0b!EhQ%#@bI6*(lSl=pMRB@G*7+^Q7_SMF2Arh_Y9rnD~3
zizwl9{r}!V50cQKjs9i@68=ZdNc%tk$63mhrp;e0airfl>YPJ`Q5-<sAbowjQZR@V
z1#&)6R@U`&6YC`$!~FHMnYkJgWc!ZKRs%f^bi&bK8`n4+gVW2S4F8wY%e%cV{PUhn
z$b`fsI@Uke8@&~6*$Y@1G@KAZ_~8RU9kKfiZY-`ky-^9)yaRUzB2ZA`YB#5eEif!1
zZQ#9I0SEN`-Xp}*08IKfNUFwP*Qb}F4S>!VhF5ctfK?bOIkyKP%4E=p{|-0LA_0(n
z5xz$NC|oFaKKihm6&dS(Ex@4)Gm04n9^Dv<522*7^(_B|Zj|R*MuJ1ovQEAeNl6_V
z(i5>k#v__m==s;)-qx0`@IGeJJr+|2KABYLnFAK|l_!NyYs*U&1P;B+ojuVk4^*1#
z>8OAunuRuW?naJN=kUI$;Jt>W`sna}X!iIV(_&6q!nhW(^N~H4b=lEHyix3DFHow_
z+5oHp%k?VZUtPpW8?Od>{;X(PZF*r_?PLxGBRm6yY|uyp{RynNm}fVIjlh|%$@F{^
zV>C(rIwoQ2r7r#`+;^WXHhk%OLr?nnG{In&UGPEJu9fJE@Q&1M+ZNxuLf-422KB0b
z{5Cs^{=zb$gp=lYdD1)DrEDGDXX`%~93(vT9odp2IWVEmdCc#1=DG0V&!O9@_43^6
z;jJ-+08~>>SA-6nLC6&PhN=^f0w2k@yLk~rQ_sh)m0iw>p&x0U`ze-i_^(KE<O-ak
zFk8JK2P&*-(nAbM1jgBiq7Oc7z^RsENF?^r#|sl5ct7*rWSJkE>N@KE8FS@*&K?N}
zaB}s%hj87Wt`DZw$3fCc(*5mxv|x=^Kv@uG>?V6Jp*Fjm(AS$@vZuVzUNiN={eqY1
z{!~_L$(NfX!Zg9TY}V#|lFb|JNnDBXGqXwKXqmDaRe6?kJ*mbIYyX^>0d@Wfdl(9^
zpicggP}p?{;lt^3DsKbg419QyDTXc+y0a^y4!zLnXYOOvP-}|XZ%^ii!6h%=WDtvB
zPZPRkz=tpy%xdkrE7K$g$HJVir<IdS;GzG0Evl@sYrKQa`R-Vw`4+DfYI;5^-&_tX
zxM!XlUq93PoWZ<r$+X4Q6fc-b!@rR`w(0Fim>sZYLwL)DodVDtV!<eqPDLHEEI&Y;
zVv0+~IB;PU<RPBLUPbN=+G=sPmfG4Rz>CSJQ@KShu?NbgLz_XOTQkB@P4xPqP~bk4
z%?pWQOauAfwhgm$y_wm+3>;FKF@KucC=#0SpzGL<V_Kx&DqFRi05~*&LjM|TT3XOb
z5zW~%C*XT|tr?qPKUJ+!ffmlzPriH~+n?pT<XS?93S8OR+p|<!a5tfpu8-kvkHl#R
z<Y$9*e02?Uy>MVI7x0!F^`Po=KMwB9N_ax52TP4P-p4g=(wv&)Ysh#%tY7bp?i=Zc
zQ9G-}_eILEcfuGXfsClBbT2^4a{Vk$PTGc-g;HD3rDGZ!OkX>HEMbd*&{L=>lJ}zD
z-Mcz`Qm|T<f0`Y%R|ZaAY?qlW>laI#zGL4Tm#_I~bM^&pMQyYQ0^e_V5(J{#9{G3b
zj#9bKb)0OJU(3OTeK^S0y&gMfN^TO1#wu-fnyFo9&zjNI)*|;SFBP9X{5n9RO^2pd
zkW9sBoC|#IsNdBS&u(l)H!us-HuVj;Ej41mW1JkwbE$`pJHdjgxv~+^>#pxTk1gyV
zsT-T6ut!krNa;CU>;-}gl6D$jbfnPjwD<k&7Qn!Ot~Oa4NbFyG$a|N1)gKP2eMkgy
z|8dI##RI-ErscS%`1n+?Pi+`QEw-R-YDKST{_!911RlmAw|GZ9T~RB1%ISwOCm}dN
zghrRfI1st6AN5w8_(yr2w)SHK%<AGaMH!h+VbVQCs%weTlxtNjEp)6Gn%Wh4=VtIT
z&0_+oR8d`t$lk@Q`;}WMUWN52MqD(U%MDC({p?=K|H`r67orLNsnEU}<2sTOQNPU-
zFh(fiO~R`vh;DbsbdB~pBUTy<ZrY;MnogL7U@IX>Z?OxRFg7w621aNsWx3}rrr@8z
z2TrP^Ck_Dy_`<{ux`ZVY&lBuZF7TSKBK7;z{s6S&sMmn(8urs0lh%I^q41uQ+9V^V
zVi)fC4zW~Rl%7>jY<!eMKoLq7a@j0POR=PyiRO@bvzB`h15&>B+>>Jf2K_OOIw`)S
zAxCd@A&(W+Kido!(_dLq89T%)n#M!A9Gck2z?LchEoxNhd|g_BL>FZGcz`5d<~{$r
zCnI<M6|3)NJmHfash)2sFIkhO_@;gGsHq@%5z5KBQp<W4@Q2nc$BOSL=T*f|KOUcL
z)lOO00sb!%sPhrOsd>)?n<$YtS|FM$ZL3mq2iMrItF@w^=6YoGOu3ua-*X=3n1c*D
zy4MU*Zu(uWq-USAXzv^bXf_uS3RsS|!U5zi6J~)`$OxdaX(nVZbC|<_aj{|&uASO&
zIH;6ut_d6Juio0fxa9sR0zQNY@g>@N)+v@N>-A)l-CP9jS$rBUMUmLhp%`S$cY@%_
zB*|TZJ+x5D#E4@E3696tm0KX2WHd&pX{B`&P*6g30OXjXvw`xWaT3gAXuIq)9Dm#E
z(GiAW#BC2T_hXO5lc}*KKwVsh;BF7S%>9d532hQCVg0gb9KV&?f{Nw<ZWTkRAwJq2
zCi&Jik?#{B(~=~|Nag$owHD*&KVl9RsBM(TL&!^0;U$}f4oCrh<g`LQUx?~;rGMk*
z7VwSZj984>Enx4Wxo4h;hJ<i1-p!RS8IYt#WN-g*yJgjfvYqKXBM+O-G08{CM#vHw
z<q#+=x6yHl{dC1?+1G{;l^W0gljhV%ru$0ukG->ETK4)lzIv(2P-gR7@!)k{t1LXO
zEG$GbUMOMqetBMMJZj#y9u7XgV@Js%dPB`fv$oVdg#M?Pb^|kz`c8n%u;^|V)R1C;
z<`82}{|G$h(zw%J{+eKG@UkgF^tfqcu~=(}5yQ4&vIBzy@A>mT?*9(G>5GYe#Xa?M
z{|PE#|9=k}f6WqqH(KvHd_fa3$0TB`rN;|-xyPccnPbT6591FX=QCkKi3lTEMI9x^
z>uOSewub^q00Q90uAA7a_(;%dH7@C%WfjCfJT36ELHC3YxBnq6-ni`GJ$7`pSakPW
zAQ}0xVdqy;yn;6)v#gR-5=6lNM*7Sq(S*&RjBvCMOcN3iwTe|oe_?Q29B^|8h5HQ~
zE0>9a<^JtGxe^ZQ2E%S_#*4!zu|PHsAlGbT)N02Qd)*#34A8+}>*IRVnP_2rzb2!O
z$ST~Eu$~a_BdP;f1-iZU&kLXjNg%?8or$`elo;7JKn7$RiB25VwMJt1dqS*7s<%xh
zG4%3sdi?r$831q#GrnO6vyE9TAfBGyqtf&Q@M&y$NxazD9_~BU&El}NZ+(x0=XL!8
z5$`_2U7Hh5bGzQRf6~$DW9O(h>PeNLZYcj?-^zVrR<u4NN9*>%*$F=K-0Yg4S-WTr
zA{8+2M-MMN5lA`%Z59`MiFuxLViVY-_3``b@B9J@lx}xvf^10Dc}O@2r+2UTIKvBq
zuknnjwrPMLtY%WhXpMnv&jiU$<hw_92l?f})rq06U+`t$z;Ng7MnphxVKec7mf{UP
zk>Vc)M3(6M`sYWxIY7yZGv;C^&w1AX5o=hMDFv{`0Y{r%B-GYEt0=FR*o(1SCq4DV
z!uKl4pI&f-j-KyXYI%#svwyvE4Q41Ml>q*OJ?{rd(*#3|d6rWz)S^z4t`CfJbvSkl
z8=q!DPm>|7*BXou6GMHp0d1AqAC3km1I4c@d~2sRJ<lu6_B$|ay7S%Ii*@F>C+qTR
zC_K594H*ZgOVX+TX{$(-LuPNbJA1R`Wi>n!V%7(Q*;@D>-6NJv-JrW6{tY|J%%BAV
zv#(xsZ`}s$j7~99ut)shVy;Y9oDvRZ{kYIJ=57~Ql|W$g;#oiP;EZzsh4{>RnYjk+
z<YeG37-9qz-T>U2O)eCdy3T;6G&g2jNtLA>tosBa?fuMOhI`fTbemY9i`;$|Sn(oQ
z+AD`hhg^<J0xyDCo8Atb;<VRGj1BRa`Rx=yzeA>kk(;!4Mx<8^mkkPfX-?<c;hT0R
z9o8|>_HS-n%@K0#yOT9nrh-5JST7~|d`6Z(5i&o>JqT-9F<^XXQ=)9?@;G_f*KuM1
z=gH*}8;N5Y)jLyv>rt5>c?8KlWuMrxTQ)Rl=qZ6S$fG(vjo}EC``M@gS^k;?ibFcv
z2m@ZmpkR~9Q_(tQrK4M>6;poZwKy6YN+Y=j1|Y)GpqFGwDo3)K8?-sB2fYWXp+oea
zIR+Q>))<3Qyk;+sEZR>3g{(HTwS{mG;1mH>GAc$;$(jNky<`NfDeB&)g@#|CnIsPd
z^SUe_tlNpiCXtWl7J*{61P(qecol7>5P+cIwfq^N*xs5vI#@m-$lHKAo6x%67v3=G
z<Ki(W%ossFJgVVquHmI@h{CF&cIJ^@o0RV0W1pfR<Srgj@;giLej(pUeroS^!hnT`
zeI^ur*xEKG>Tc*W(cV5F1n=>F58o5XJqsft1(F6~2z>F+$aQ6qskwmc>O??Bm`Zrn
z3`<{=E(Zr}l~)?Ld3_CMTD0f!p|$Pg)S4GmnAR2)?yPs%vV9c*KBQKdo&p;e1YDzc
zz4{>-h1(0Bv$W(iid2av;xv2^FGVEFz5C4T$I*#;n;S}bqH4kSAs)@bIGe}Fnh?FB
zyr=-*6PM_)*+38Wu@@7gc`ER&H@PhQxw!wXc|d4v8GPQ`MoJRq0;PhOMS4~`KKQ`g
z)8c9}Rai2ciCmlTW!QNhmOR)Kb>>e<P@tCP-MABO7a;0X96c=Y%d}K&xVIL5^F8nd
z#0Tq=MMYO$Q+C0(b-ru8uC3*Dz598w;+S0a?@Hgdh}E%t(oB_1vtUm)Ik6zms&8BY
z`5T#yEZig#=f(vNF1%s_#Y-II5BZW*%EEO-sJi?VsIo1C%!0%r$dy~?R1|qJnlkFI
z?Uw7~STDr3YK$l&j*hxq0~py8VM>q{I7c{MiUqf#ivGs_kPe^78vHhuEd7r_Z9=7J
zAK96SCGMNp;XFVr+e2Z(;V6bDH>q3G*oLkDd%T|DY{^vrUz>$Kne=&+Rxalh1xOzQ
z@u34F8c4eIyfU<BDfde>4IU1P32e(j&@em8{Z)c(HhHRUjD@|C8s!6PAm3ytzhdFQ
zxgis-EZ=q(`p`JoshP#k_N)OTHW3jJ7}oLc+>lQ))P6M_za=zzj;Zo8|41lsi(DF5
zNt-SjK)?ocoE11rh>tj{p1^hi?xPTMqNj^i{{1GaxmlMn;|Mb4l%Y$s@^NqI6Cd`_
zyD)*F!hX1Ts|kc9h7#-8z)*MDgFQ+QSdb9n*!_QF&EB6C6oYM@kSfKLl9ry)N)p3_
z*aL~|5^0`ZPLV}=A<movl2oD%fXAkKB0^IGiD|=ldywPkjEYE<Kg9K^R}atUQM}xh
z*;!WASMB?MK7h_CBgiS^q(m1J?P(v!$4V`66gQ=jRp-heRX<DBkvufkZxbOSY;+Kk
z-wh}pD!o8o$*!m7Zh97i%yFB`z>{JqQ~qq?R3eR!8)<5>*lOC9&)5$MRZ3<TN1IgV
z5;}a1u*_cQptzG&Jt&$KZs^D#>XouJcm#>5u^3T!PhvutdvDZwpz?_ns3d7uE9Xw}
zIKEYblwJSxPp^z8Sh~?pfrQv6;nJ2*q9a@y32OhxUL2GS&YSTgGu|OQoY_A9;|bXv
z|3N~Rw>lsVN=q^3f>_?xZALUJ=BR6&xk+KwCgAV_(w1jpg4Fg4HaIHgSMB>ylR-v8
zXt%Uqsv|(UMm|Grw1AF`Qu)#(|D2LKx>}$Q#DLev8EyDH9q<%`4LnaHCBILEWE)2>
z^Y*iTF?NTSi&l{QDJ|ZPyeLXNhwwWkS&q4ZQa8=<&r%8S;PEZUqxh3I7myUes-3NO
ze2^nt%hX3v)P8rF=<v)L4D`=xFKtR@ddNJc_^m)lP%~aa06JQB9N+uVN5Rdb19c9C
zn%e!T$yS~9S;!IJ*A>|_IUy+)KR&a^zP=AhGbeOk76VKXXwR>aZdG^Wa+~aJ6)lgH
z9dbW;iF+CD<)cQLY`b$wzVrRhSOj}lx0%sZ=Ui+GVw20Gg;PfYHd4mkDD2((S=SZb
z#o-Pz9VUmHrA_Cd+si>Ur{z;w<~D;2k-TeUC;;NZ0ov9@Ew=oJp>L)f`U3qTQJT_M
zK|iufR*Z#sD6<a@rabj!KKy#~T_k##OgHsKfJN>K%BT8u|A3zRg)n7hIq)f~ZLdj3
zLp>RUgUMXx8NJk|hYwC7wFf)USIi*c@`u%*Q_|c_0?1jQeSlg`FAxF9F%KIpkTV+B
zzCkywh-FlK%(8omiGvDIqB_nW57RXBg&OsTA1pa&*YE)&Wtpqi%VLt_j4C@zBxwo}
zk82<?;sYZFCUWHm51x+h_6(U5G2KNj2|LU`FxUNQ7tyvoqLbb|xX%sPQ}?Kv=@U|c
zV2Nq4Vh{0*eAUIm!LstT_aT~XQ>qdg(VuVAq_77*ngeMZtOZX^G-K<fh;>d|xn4;O
z+1C;{c)!G9;Z?51BWuqBo>k_~R19*r4u<iA6G!ftxJY<FT;~_&;<ivF571k`@9Ksc
zKc}$zO6f5DuionGQHtRVn2#Gb)7Ba+X2Gi1uDJJX4v#SRzK*A<i$)Ioq{J{lPOma`
zn<`krm0tsk-00knn(Taxe&&y?Mu0S^rfIh-p%L`Q(nqgW-x4;1xdf|T+hP2q+tn!A
zzdBJY>t=2c)si6^vP<;$J!kY!*OCwk@uIRifecG*clV0$W=VV5Mp+271Pg-L&lhUS
z(r3#jW>Kwmi2biHq1rM&roG~nN9Eb0DmcBDNy$|!*HRX&EUZHQ$R5jgEHHTfyp*Cx
zLEU5}=W-%G+%U4|3nUm=GbF&wT{;%5jO?OA%O91}wjCv`!-VHbJ9Vg2mV4?{_{!JN
zgT2m0d?drqA(r7rxe9+S_6&jefCr7gVf<~<xt+6_RQGO1Il9y1_I)Z>J|HDAjzG#%
zh|jpLn&Z)ivoH^crs%a?xRarYj11iD5A7Gki-r&K1DJyH6^jw;m9x)^fKvK3MA4Yc
za?L%-6Prvur6SxM`=i-MHnp!YTg+@q%bdxFB6>rTvSB3^huw!VKAri`G7H{*sP8P<
zN+LUCGfWr^*C#g5t$OZ<$knDZqwxv}fYNS%M!KBJNs{e#zf0)fOj@i^q8u)_p7d1<
zL9Tx0eV1@b;g1AahdTpxV`+QUR)b9E1lf9_@XpTawtqe=j@<^Q-FdqiVz9GaaxPR;
z7N=0YJU-od-ZnTQQ6q*D<(;#~$wZmij3=w>9FYxHhWeeK$4!%$2J6PC-;oL_osjRr
z{E|WF63ym}o<NQ}7>SNHB$Jcw*>@!U^@PfAeK_8Vnm(6Rptu>SC`)K9f`Bm350I#e
zPwM(-lxicirsK=Rg9|nzuD<*2x(p0(2V2Xl#!r>|sn9U_s_7qZ#N<;J*aQv3-x+F^
zG)N3XJ(P*bzHW?*(zG-qpTJrTV`I_ayPJkTlQ!0{SGhGU2FOXyB$yWtCz%vaVx21w
zg%{d?P~Ys$pzq5O;io)Uk(BN&0VW{tfqp_hv%(J-p;90L`fC9G-SR5TlBWv0J-YQV
zl%fApE$j`K8BEGDNVn$Tmag;KB`WAhT2?m75NxF7#1E+Lr5<MpZ~35~1UzHXH-#tL
z|Hck@?Wxh@`f`D|GILX%XoL_`T?isQ{xwqomdEzAsGOb67Hw%3B<=)`#^<NK`+Dh~
zxxC4%D;z_%*0Od;S}lEXi99PKseBW-c@oxxCm6~oN}g#HA{0MQaf1cBN>^N_eEK05
zhd>PLrAeB+)tQr~T@GDKI$R%Z!xXZv_<t@#)r#iK8y092Y^2zOrw*^fDT%<Bt=A{q
zLL^0(vfT-?gv*#$rG3KyT*}t0M$)55ko+MbS%=k-xb~#nmp1;kbd0fZ6i(ATFaece
zYBN{xYbK8M!hxlm?0fQJO4EyqV$4kTkrKxw>e(uUtILHvV-UVhV2_*UHx)4JBTW=x
zAXUC}@jN2&6&5VYk3jMXtT#!~H=<%9Nv^9vaWn0BIWW2TA6tsQ*P-p-zZT2tUxV)d
zP0#+{DV0_6|39TN<mQ1oraiNlz+W<Rv8n<^a6R8lfppV}UCkcm`S>@bGAcjfhmRXF
zsls|)oo+uX_GRqOv%eeMJ8jgebTtGELtn2Ow;MBhr!N6XLq)_y6X-?Chj3Lu1)C}v
zj$j{0iF`H=Np_K42?Xs>19CvbLP>xYs-QQ^z)c%yhm^j3I8qPbmf#P?11^MR-twRW
zj49S~6f(gMV>t{1phgO+d0Q_?^W-epwjme9H0WsZn9X0?jmm7{wO(hoS`)VL6HTvC
zOHFEN>NK{9DyxB_CF;@W1w~`3FFu%-4I6?h+{R;nmCRby;4Nn$D=FIz;Tg{%kYi^<
z`jH?)sY9MYD|O6iHNY-6Dt+fhdr}||Z?YPvYp9$dfeg{I@yLL1*m`gzC4?Td44WWl
z%mp36ol(G6y@7BHx7!AA>HMm`nWjIa6KY+}=Q%H{r)yYV=mXBcSA7SFf53^P-fXL}
z54T_DoVYS~h&=P&jPT$y(v?}FQxLW2&?v&^H!!wnl$_A{^Q@maue~|;Q5c($c4ON&
zw>|lKmwYh@K2S)<@Zl5^kkq+%G&i&!P1;#2SJIZC;QZ>MU+7aqDEst(Ol^9aTA!sC
zi#K-lYwYhCb2h(>!p*I*WAtB3!Y#e9VKev#5ac$w-l1ybE5TD|Uai&_w?6>?`v$DM
zx9H;JH~za9?LQ$2%uW9<wo^mXZbJ;g=cOjCRX}Qu%cfCapTzHqs#;N#jt0}_UFcRL
z99ywt(a};=;&X?)fk#9sG#leo`prPOgL`NCZt9YTTO8aTB$Y{vk`I>Ual7-a*m?fy
z3+lkH&t`DYg2j(N`E!y7_9PsxC}P7NFT`FPh;g$ntsMNg1u?7^Y}1&?jE|(>9Lfoj
zOs2HApl{&+G4@Z5p+(EuH5%KtZ5uP5v2EM7lNsB#ZQHhO+xqgJbG7%yUh8K3gI?7~
z^;Ye%+S4z9y%i^8a8)5F3?VTIDgeeC2nvN+MUN4|Y6Xy;E{NssH>^G6V%Wu$0^8>V
zDy+cOy4<}t6OnrjRKcq4douRrI6pD0lS0XV<5>>x2s=hPLgh$51ga`{wJvGUqT4{S
z{&!GIyVRHf<;>)`?w=jn+UaOF%ZP`e(@AQ@;uH@NLtqGz2@XbQ2n3g4R*sYN7Ajrf
zKSMOcBUUhiml{50VTox+Pe3EaXxLQHHX&54TB{_3vM2b6jK1(L3QO!iT((*V*?!fO
zC-PTSN`|Z~o!@>hIBaHDyV9F(qc3zm_SjJclk-rJnKZNZpiH??=(;&@ApXyBS~PXJ
zL7@OeSF8&DAQtVd9HTXhBQl-^-6f``bXx7T=!sp>fpkOf5tmK>(9_cGH&}G)*KQD`
zC0_6LiGi8!Q)mjh-C<i)g9SzG-?SAy%7j_5^s+YO5b8(>;k<*q8|IWaXFQI6*){z}
zHWb1AI!<I3KNN9&B2w)UX?-U5<I2$kAxaFOAR19gyAMo64!v;(?qrB-Gc|+TqSv(4
zs-#Ec!#v;sT1MGH80Vo|#!14xs`c5NX88)#T-3kZ1;XhhK?j3D0W2Q7Okwi)Km-nd
zR|>1h8S%n{LyR=?*(%W5v&uFxP}sf5<M%sbC0{dt$K@ns#fI7du;DmG0x|%^raO-#
zJv+bhoXz~#Iko0=`5^1(BXz{;;oIGcFpeC*V23JrM<=rj;5QCZ=>mcv11|aDuZ#+s
z2Ge%kx)}Yx%JtKuSq3pbtSQX=hY01+H~Mb;7%X>Psvi85T{+b|PdpOVQ%zwC9ca?A
z%v#ImtOC0~HtkR?-8er{*cbGeV8=+(g}`TxQ6x=F=n7twTJ0XVNoB%hj78(EZ0$1U
z8ad#(9bj4Y<5IRKlVj6q3);*fA|)S*EJDNl|McgeafE6BaXC1tkI^_xi#5*Xr79gk
zd>JRTl2u?00G6yO0fAPaC^Z_Xi^QrYsD)GjYjgvRjc-Jq57tEUPU&2$89$LiatsD1
zB~d<nC{zLr_)BG!`v2(^Pv?U)xnU;q$9Nd?&&{9%(Uto}pab0xbzX8kJa7X-3n%7J
zlS3QH_hQM;<GW|BSpS<OY#kNn?kgVU;<o(N8m>~rc%l~ZDXenI)yWp@OioC*q@fl(
z(l0kQfo1Sf3XOzWmL-rK`f(UZ)iE~B;?4x8d2|=mPNT{xP1dpTh~W*nTRkgwrTbN+
zGH+~7CE9EZeD~jPlI>>izq;M%#DIGq%Fg+7LpGAqEWRGXFBbu5PJf;bNB^<U@f1&O
zhGb+FaB4k344#5`npR`0yAbbG#~e%m3PxUFq*M`P=8b0-YnD6h8w9fjPXT-|5oKTS
zB#aw3s~!+yN;VV|md1SUDEXspx=BZSfpQb}?@cKcP1;aaiJ_6B;q=aU3^Zxg*7PKw
z12o6r#KnRKsQJ__t5&LcsvzKjvVE+{X29t2&R+b?)o$HPiBpm7j8|p_hOxxyr7|C$
zjB1#ASZz-l<WM2j!8m6wa0DS*f#1Nl@$6>k>q*axxAEuHS1_7YI>$w<=W_0e-`ms6
z(=x_px{fcCHx51K1KIhmM|yF4TcRhB^5!4KMXIIZ+k%K?Rs=9>Qn~c(of?Zrj0mIH
z62nTETK>FOF3|(Y<a@NU^HiYf)9W#2UC7f#Z3uXmDas`fYB_wrSk<=5>dCAn{G|c%
zG6&!Tf5|4?0DB$HVx2yr0dc6-2)*rML1)WU`VrLEq|q14woz0c_WEPhKz7hH3z@)T
zlcm<Jy`8b{Hk{bO-IH`r-Pldrqcz=W0no&HqO%Gnj-hSUX6~jiqbT-OIdI1J?L?EQ
zHtu})>#+|DSbw4PokZ9P5VPx=c>XPb{9|8ebv%c<;MyYb!BcU`*Ot$-@8m>V!Dp3E
z^(6o{rN50VqyqiutC7BXOP=(t;<r4_c|{8#eKUaXhYGlkQ7`#N;H9rvSq=EY4*K{b
zTRmy!w_;!9GszTuu~ZSx6^zNyn)-SyE%d=lsnz5(NI|pruUDO%=@N80CfmWMku{}!
znmtPdKGbfZMMS?){+&in<zq}G-`CX?zMB3rLVv8Z(y=Tn^RaGMnKyc^C=0U3$$SPZ
z>inz}bDD2`6w^EM4gG)iP{uXLP<9{yfd7|p@SoES>>U0>4-J-=w$1p1(DguFJPk^N
zo{8g7dLbbbPFgXl7OOOFJ~V>VOxRJeHH2^R+d-iR>l`V;SF_x2raHwKT=ZaG1o2Qj
zt6?{#N?LSni&t81<rM#s9+_kHiH7kvGSr$$(<VOa&#}a+1%w1yls7j%%8y!zROV_e
zAZh3*fF4T~pK0!{@0$Tc^Wg7_H{Pb>`auI%6|0OaN(l{NK{@HlnfuvO3|3gF4MRh5
zo1Dvd#bOGFM+S~chwQ@a-Rl+I8pLI(HMYaAn7`^Q<SUn|Fj=EaXbynfqZ$q0TNoC8
zqk(j6O{1R*TnwY1bDoO#>5bG(Sq9$r+E-)Hr#BbgYG=el_I%&TV=>y4?yDoCoD)b7
zIP~CUF@^y8&#!^rEaqyOW3QGmtU>L=Vu=&iM~lDTI-+uO0K_{96!s&R6?SNe5JpmS
z_K~z+r!#EJ_5z70yHD$a-?nKEF-)6otu>>tGMDry@3wPJ(gxYJJ6@?GV;5ey<4vB_
z`a}}Jdk}u?!jvakzNjI6Y?D+x0jt}PA&^0ek8T~r3s-R4y5#S6s@U6=2wlB)qs}!x
z#L4!i*Csi8;SZT}5X6N|WbtSctT!y1kVi?#pC97~*`WB;IXG2Q(5oM5iJm<Bf6_PK
zzJyr$1j{lc)93UzpuYuFbQ!kahTvM2Hm{k2+uGh9fd~z(u(5(j^<IH_dd_^{EIn?1
zhi(42df74uCfoZ~1Ypa)_po%Rb-;^uYmqHf`8s|7uX|l(DuhJwuW_gAzcTJP>f1X0
z-!N*HvbyYs1j?^*heNKczKsl8fm$Amggup|+&18{QT5UIa5ce=$Tl4lxXt><b7mE}
zUPy!A&msAyawlzB9e6r71s!_Yq%LUs=&0i%!sUcF(h#a3z@+=8A9v=2B~dShX}ZlU
zAd6&|5*!c@HIaX|H0%%5gfZb1NL215(YQc$A4wAw3@Oi2NQnvZE+0K1EL!Xll7s+i
zbYz+zr6k2{Nh}(Y8kl}I8YFamY(H^=J!rK)%U=wmSXm>#VZd~BXwYE(L}SonIFIRB
z*JP%+6r5kh1&L{bLOsqGCy2t^kOJDiP{q^h>*{137-780v}x6PS<!^~Fq8Cb=aN~c
zzItjRVsMP0D2?s#3iTZ21j&(lY@=W|g;77*)T`5!5V)CiJ#339CwiZc2%mfd;zyF~
z&3cN&LhtGB8ylikGU5il%V;UP%kUt+XQ2L$oJAW&>5^Yc55o+|G=(Au#~}k8M`qEo
zM1HJ7{OqN2DJ{ZhU)iRh!n|Q^Eepp0T3Qr-(wR)K-yhW^i9ROiV>CUEQ^686TVq8v
zjE{2pGPyaWDS-pqj;;=m=HD2v)}*cW?<5{5BR>U0>Yy|WuMi0r#4F4RO{ZGD*CppE
zESu=!CybwxkaE=(7SO;xRt!gunnzb%51-J@HFkCgq0c_o5tcnM!z%4WM<MlXq^A}9
z$Iy;D*Y#>CUI*q=?(ft{G2(mkS@IU*n*P`Q%?qc+&?#DXFj373pQWqbPchfgKRcx6
zu_W$h7#G0oC%5oU%jJThHd}r@fAMkP6^Vb=tGUnPG(C5Ho-$P(X&A)vnBDZLY$J@*
zJ;*>!;r$DPOi%}4wV3q#9IEWqmaom&j$i7atsQweL2OpQSmagZebZ4aEFZyWHL=K8
zc8$g<Ss5Pprs<$Zekk6WxZvRv8_xE7{r^R`BY@iuUPOCFk7iRdQkM9J7uAeTr_HwL
z6)bH4TAppEhgSfPh!#OUZPRg9yR_kLh`U-cVF&rx&-8F^?>>K<<$s?<Q9ZweK4Y-w
zv`*LZe}57IMjM)IkKr#o>b=(>Iww!yAXsJ<&ook#zal04TdrhQc~d@A+{kxxi}eME
zY=vs~Mms+fMYn>NS3+L2|MO1j&c?jvk&>8my^zN+Zqu@Hvhr@vIad<_$?wZ2gh44i
z(8w@fzW-qPw5ulBfvmi!8(pMRAp1OJ5tf`$?;furODX8PIs@gMvMMEn<JicCX8mFD
z1@=Gt5=Vs)D)es+SpS96|MT3y$k^^btchDI{{Iz+E2=PBxv^R`g+~5F8IpkH5J14;
zR)fz%IUw4iXqxFLf2pE9-(KL%DeD@R0!gNiCet_v%r5&du8lfWtrjpiVh$dBrw<xt
zYAq0sX~U10{Db3nYFQYrq==K?^v5}Q)<9roOXYbDQITSYB-FwL4MDR?<@`AV_Q26!
zmpRUX#RMR3m0fD5UI+^PWeSEEVHf0>qy6Yfo55236l^r79ps5FQ_XSQ;1>cD+W^#4
zGXor<Y+umA;n?Q=NgFyooZR_W8!u7vl%=qT!lxO;-=G`}AFvEHyfH;Ow&)TU1DAOc
zEs$~J^SiTZ88v10;!Z?tfX=Q+rET?eCG^kCN^6zXjzdHhUGp1@SYDfpHfsayO`dBN
z-8b^*^$Lqj=R|>AiQUKwq#^o+ir}RZJ1Y>XJq_f4iX5C*z4H99j-f4_(~K5|XgV_Z
z>58de9f0p7aemNs2kkT6&UmJ-@zE=4*3Qk-=@QN?M3bGlH02==3xi$&btKId8P9rm
ztU|2s7Fi7XbCEb>B${ktO+{8CqZPr1gWW<|ITEL<Mm#lS^rdR70)bGa={}-8b9VFe
zL}kqeST-Qi$x{q~Q+ZE12g1O8y|YOxdht^@PegQl;Cq3jdw(@!I57OiaYq)&Zv423
zRU_4#H`eLAn<cI-Y#=r|F__|q;Gqa3X;=g;#y*E_S-gc8Vi*U64KFwni;WOLZop?;
z;=3#Kb`Z8=IB<QIuGr$-0TNFLE>D-tF6b@F^}DU08vWXVK;hAM;d8N@O>L>YYbRk_
z556<BNzP2N_}fvAe;Uxs|Ln3LD0MM9?4;j&i%t!y_U^7vG0*;*de`~=p&*U}4EVgE
zc2B5%Hyr6Py+D4fvU;CbYY8~!W<(K%qR5D+yh-|ixFa}Tb0%$p>q>UE!wldA?!$+9
z{Pn?4Z*m{wU~X1u2hei{Qy-~A*~mGr1F06F=0<dm6UwKBAZ_V_ixvCNxo;aY>AQLa
z)aj=G%=Mjtbqig~A5h=0Z)wWct$zUj&x01=mF?X3d(a+!l??y+0{9=3SBg|D|6jb-
z*K|#5#+RIwTR~MksgeWIdVVW{zDv=iP;y<UTWwn1@PS<O)bAo*vwMQ|q6QH2f#>w*
zN?Wl!r2wdnQK!Nu<LqpE=V#TjP4jj?i5^3ETCFwoby6m?Y+%~?pYlRD6O_JG0LV!7
z{zc@6i@(BJXfLUMQ{l^Q(}22!kdI<=r7}!|_tNCS-C`+eHc=tU2&FOZPW{Lk4iJH#
z*9_~x=z0?(IQFY=F=*Q0nC=6L3GTE29m=&?T;_Om5K-wynTQ*}*uV0&bZ<zRlt+&r
zgsJ(YSyTS0?ppMNYK)BCL=8K%RZ2z@is!d0#YEvOQuLRBdm!ey7bv|aLDNfkgQ<o+
zw^f4QG;5k_nH2|Nv+^{BI}esT?OK7$<IJXp^RAlcl3qi@Yway0AmITRZa5jNytKJF
z-5%?$=d5QrP$7L&)Kci|Qk9yigVrx2A}=9zdbul*sKt3dN{xv`=MZjFc#mP2O;s@5
zm{b7&-K0GdWu`!e*w#m$?E<Sx*6&S;LdF14ESIwHbUppp?(D*a;r|spn0;HhM)Qz0
z)HzzpNSQKWaVB$q&$@2M3{PwS^woj;K1E%F<)_Ld`8hPKdQRg;<bj8(Gd0p|Rwo`j
zI08$jZ+$s;cqZ11f?h9BK7(!6p=!zIdf|%G2aQpgh%S=`qb5Tdl|RU!DJ*^)N&qP<
z()GGFNe&xvj|7GrIo~?^<B#vjNQ@lcE~izqNRBfm_xe#gEx9osW4gGdneG9EQdeTy
zg_~-E5>@HRc-$W69Ag{O?{#l7Zh~HV&T%~&yl_35dGii15hPvXbvN}E-k@6dp+PP<
zsg*#X2kXO}@V0W4A|pDp6VU4*QrsL^FVzJ`RTenju8*Kq=fo@>flfmEs_51zsC`Qo
zMhKND6HaRLiq|jWG_fJNyr8;)RvlLaxjxkSI<_Ql=Ph5#78_^9s#Z14t-LQXi30RI
zh9AuMJN-OSCv(vw@tHU4vO~$ZJ6T8B+1}gjxPmn^<4EHeedzWqb4k^^4kLG0gwNxJ
z*{VpD3)K;;K_!og7qqX$q8~QVSLZXwpfD*<!nzhp3-iXa6os$S`4EVefFIw&PdHS6
za8P`Ryz{|YVfXFSn4%f{BV4BIK*(2Rm6CDe5!&w=@NF3Pv2l?ZZrdRu910ivGDDs%
zKZq1dcDCLZa%Ae;pl%14aO4?n5os2}JHZw7#WYK{>L^$S?p9vL(X}FZ&p}stM*8p}
z3^x}ACg;mEb}Tq8V0FosuDAW4)qyMs*8Jyp#H#S$Eg3lehnx73y7_M|6T;WEE~B)6
z{|llXJc~KNh?v15x>buA+h0)iVrv&?fkMZ|Dc_wvLdj&~5os56?MgXeG)|mp9=K53
zRS7;|cQdzdp+D%7a3f3S^hF02SE{KrkT72R(IeUzVB6>h_N6ti^U!LT=gqLhjDCIp
z7?3vO)iF^awY4n}Q{pfyH!&goMiy7gq3iSS{zBs&jRUA|L*YCCYQ+qMBj$zDQwDN2
zLB@JUyyBEXC!f5sv1&*3;vPwsX;sWg&@6!3j!UDk$#421l-~;dl`!6tDOkd9>1R8x
z0$OA%hy-_P-(MWK15DM5)O5IRXh|CXT`^b_!pCTs(5Wpg6+pd`aUa9Q9->a0v^>{%
zwh-M-yu*ANpJ*sO``4ZcQf;nUx!ZTbmX(|$R)^>jFuu5j(QE^snzk)q^My++<(j-b
zketyTE!U>+nM^A+&S2wULFhp@uw;j+-P)SDJP)%=4aw7AZM%!>6==bDh0l`>L2%4K
z>=+K*AZokGz}GCw>GnWoQ5oYQO80>E*{j7t=Ehe7_a#v;7EwUt_Q3g!=qh@W2D1-V
zV87K$3Yf)@G4K*)KZOxJqHYz$qoE_k%6g-fZlyliTP+4_;f;gUMRr(Z*PgFp8-u2g
zdx6BB@<tX6)UWEFVNttBbKF$PqP7NhZu=wDq6v~ILdiA8bM2yW=9YIN+lt>DRtC4y
z2)mBPwx5w*=}V-9A+}ViA6EY_YV4b&;kfPdG-`&@RD=M|hiYu`j80iMzsWrs8NyAu
z#$nP-icesB|78`u34^X};&{GM3u{H8@>~30G`DY~4MTs@oa3m3h(+=yR%!4EFM)s^
z(pa#W4YU|96Tu?}pr{ccvZv6a1#++`r9ISAqxq03sjdRA`)LB`^_eD73UD$R@G){k
zIvdBJQ(1?et&sd%qQyDw(3~FQQgLq`8iO?)n>~7J6r*ki^)=|=J%bfuxBD(9K`x8E
zZ0yvX_Y>UXSspjF<w<{<WYZ|`5?Pcy9ul@}0_@oV?b*D2`ehkHu&t&3ru@H*RW;EK
z1Ybsd=XKS(sFe=0m2d~y=t%pPC3dWos$tIp?Heae=`N}b%iB^k#b8E_1l}9$>v6{7
zS4stev&ks|NQ+dQJdd9Ywk7%Eh_S=|0zIoO&8~}c*m2W}mn*i+Y>TV5laGb#$YEr|
z+0;fd(UPCK?W@ZNibi55s24l0bCnvoe_)cj5=Dn<NBd=P`vDr2KseCk40cN`9Frv&
z4bfpv1F%AB;A1hKYn8I+!$u4Y?N4(e7XaXhX2#@nv#_0l{5K`b5AxT`z6ghEWP@f9
z(&`owiHAj_h`d2`WR)I9_t-GMPjVe0ezOhrjCpE*AjPv1v-h+tSp-i!o@`uaV>k8&
zP7&;qu=0RTWR1Qi4BXI87gIM<PLBVs)+^zW{*h;h2ALHk#9HC$DQ3S_CkWw}L5k}n
zBzH+wv)j}+HI4nkMO;zXNT6ymz=sGYmih-w+tR`WvY)DJ7!h5*4y`y>x`dItxU{fF
zk*RZC!)$HeuaS<dG8XuuI~JQKT{Eb@QV8AeHd3@n@Um|g)lg^_-0d5h`U>uA;*ej6
zDk4G`9JY{gF(U+KAwvd4-$K23D3A?8-A}P6qQ!k(2Q(YSky22Q1{YK;T^I7NmXU?Y
zla?&{=vAH26O-%pGKsea8p&y{Mwad64J^Ymal|^mhAb6!y0BC<HSHLXuoc@uJiM4|
zb}W-jI9>e!8ruM6?Kf`BhykoyAtDf8|Ka}4lk+JXh;Zp%Es21`NusD$oAgrt5eP>I
zVpv8vTh(~<B&UobzDXGIK7OTp!SCct`zf%T_FETchw;X^jBf+wdkyldcH7G39UZLO
zM?$41Q2GQkD>}fV$}B@+gdifywCwPXBfB_<<ZuRvwJmFbqje51GV-O0T3s1`QiBa}
zp8I!Ztv+bC5?Hj$Hsf7pxbGeSZ2N)oi)^!(zhn$Q`XiIkE}7%W><qF0(AnvzP+oRG
zbMA%{qkP2NvSSL5dbpN``TOQJK#Dep#-1g@q7RY+PD3=9!=npniGDPjBifTj@r(N{
z1q0`R5#MU%@??t|8YdKje@ql-iM}#nETaXNX;o%$Foqa1ax1o6=D({<0Jut8lttj3
z!iV(oyw)Q<{@DlbCckN&xIi8o5Os$%0vcuocRb%ha&GXoT&E^tp;a-_+h^eMnG>XW
z(Vn3V9`Y$I&yS)L?wguN(%2p`dQ(qU3ImljiZYrSZH^df<wHcd2xoK$MuMGVXYM#3
zwtJ%|4RHB0xhB;3OqdEIKB*Oy*l82{Q<LjFLPxx)Ej$?6a_Y<#hsKLNsL9bBp;w}_
zU!uK+kIL)nt^4!8Mz7HIXJNf4000Hr{|%e2|6j1_TGoym9P!`Ty8dqGUh$GXaW<|l
zbZLbWbw|S3>i6OjCW@}AG!j8H)s*pslq20+pD!0Se!qBn;-%a3^FW&k4m1c>)V1i#
z0<2t#82u_Dcg%k1V2`?KrK`*HgZ)kA2XjUZXT~5;=9K6qSJ?M>3g(4vgL7gbc_luG
zRXDH$+YzPgb*n4TucmfX_nzShZzBXxR;@S|a*%kre;9b}F4wz%HN|X#?HU-mAktbf
z+Nr)Nr#=baZulmJXF3(X-ncOgcn3Bm)BB-;6*0w#B(4a%-Yl+db}jh&4mdslel_7=
zRLIG%MLD*mXpRlgB0I+<tY_842jl?x*o4C-%h>+?{PA(4#g-hgl2AG@fufBQHBjcr
zL1uZ4%<sB{Ugz^LbVBdK{@F6!-N&ikN0SZrRev~P7FH%@Oehodd*8@AH!>DEv)z1k
zsxfY;;DbN=tK(~osIi5f-5eH~BMLZ&g=~D}ldhUiT44n;-`KBewi5`nX7v#3kQ1Bp
zAk5K+)ich-=9pff6La9Y*Dv9nT^~A|lle7}e83L1u3*u&r`fstAgsq@wWDK1Jblr3
zJjLhofdN@4KAn)q3hy2np4a!O9|y}8orC4x?SeiR{N#P1BPNjklA`;{FE7}97%ZnI
z%W`cPf1UpOIiPQbZSZNpN3D7b1P>7QIV6fdO0?#TbADvlFEn4k$4|y*#<95J`^g2c
z_&JWhG4}dS^V1uM#(9<S*;<l|dU-tb`#mJ9sSMQ@Dcd?BHY@2X5tM^+W;%0KdQ%!Y
zg~|QJl>D(vr}5R2S{H$7?i%IM!iSIhYpwNScbrS=Q`Cp+Enpory1hnMPSHlNBIqHx
zzA*moM#b6hULLo7lUqu4#wCwJh+<qREdSqzAZ)D(!@ot^MCHFXMO57x3SI_Np^V=#
zPEeE(Xz3{PNXYKIx~gvC@f6J)mr;5pQ{O7Ffrvcf8n-cyVFPijCkA$WZ5U3gdR)%M
zi(FXU2@X~Fw^=^u?=Ffc2+<ahaX_B!GVRV>>NfkyZMd7~aO#IxeM>#q3$-HV>m#-T
z9@WonQ#t|4=$}7dH<N6U*aNK?D&!ySOTzvqv*AcT)x(o6*5DOoxI+lY+$^A<{#Z!{
zqgB$3%mZY8$m|D2@(>d7<2D_sk#s@UQlU9Nd&7BQid^y;GnZ;dNfUn+X1WY05f*6Y
z2`c=l9&~+qa=wTL{VTAd>B)Ns>0=y@$E=5v$cw=9_)*z)W^VNzHdI*X!Qzo^H;+d@
z^eW5m%lWaSr?V!$?H<j!%x2BbCWCNd(V;+TQT(w$h6kV*xBduA_ljM?aa-2<NMii8
z;TFWW+HvKL>MrvkmyBA$7(^BfrBsbXe45)!Ssx|fU(1Zs>x6+hj^FdeN_hV<+_4xg
z7JO6G-D0WgFxxXd<74UL58a6R%})|>wJFHFKVrLU2<<8%Xl@dK{oE1hR)q+u4as6d
zLX|62N7G5HAf42>3DKjC;9w`aKY8h25UWUf1x8g%MP7q9!mUBQh>r?q-^1jHZGhVl
z&L-|0OWUWo7Kp{z8GS$(ReDxtwWANx!J@E(LD&Jl-4N^!o3N2>8qT1Iz_^q*Mxpb^
z#be4nF3U*k=RhFQul%>`@8mYJd#6*k+~WrGYWAb*CRbT(4WR5j-3e+0BFX8;xS^NP
z%_Wzu=P9LUZig>MNJHxTnRN%iG=&Q@KWn;wQy$U-Wm*I_Do-b9E-;ETd!B0reFLCT
zM^zXGCcpckKv2K}Vw~rJ0BxN-k!Q~H!Qvv$8oPa4U5LStJ(OMe`ou}$&~}|EZHw%h
zlVDSm`|+fHN=MwS@g~`$l=S1=&|=kdB7;VQ(ND?eR`kAw_Gu}m77L_?n~&)z5-WJK
z;74kvy>jx<Q(Iu{V*Bbd^+iX4bY3bEABw954UrwQWV+u(?Z(S%aP!4|yJs_6y{+q_
z&fgkFFj~cK<<<uRrkBg$R>>oP^gVt8iB@pvK&g5avn^YksLPR&q0A1Bc+Sk;DzC`&
zs#b_X#w8Cx|0rAu!BGe9hA4*H<Lnqh@g(^A&yh_o4wj_%E#<<$0oKsf9oqlv0<D+J
zb}nJh%kGH8KAFPmhEC!i{(eNfQ#NK9AmGf}WZSjuhbl8+0f)3BB4h*uNYhE>dToK*
zL2(QIrc+fvjI&9qGT3^3jgFTe-fV44<|E{DqOypRajE~AWuw~BItwd?=O<cD&xyW%
z9jCK+1c=^RX)dh6=w=lf;I&pkd3>g}b11qe0C^9xog}g!tb!GwPTYcV)!wV4FNh|}
ztHI!k9$)G-g7Ru_5Zp^ra&;K$qdUzZ&1^4#TW~~KpWAcU-<;rKow|@P$-n;NIs?55
z3n8nY+0^sGw|IdMZFXTv^6B(zphG1471adV9oozHuj5-_>Yn)D_=K0_k{u@X)U{*0
zLsjA(^-a&Ht(>>=Of_quPHcv(ZXdV(%v4hBjM*<ceHGsQ8r*T3uJGNK;<+Qp6+0WJ
zw~9;KKE1V<Txo3r!=gN$W6L$GYhT?aN&O6r<;%Gt2XDJydKwyuT*qVam*0Ci;vNr!
zPr!c4DSYsqBct@lz~-CZNQ+{;>LEANzFHwDz-O7mQh@Q?W=)B9pV-{xD#Y|o79sKm
z5aOn6IdCI4=8<4S%DuSM|275-4d|wnI}vM9R;3kR)*;SOUL{@iMa<uXu+u4Wpju4;
zB-)%@)HrxaUw0_Klt+na3m(1N2wN^Nl0a$HGNLr^7W)CM(+;a4iztqtk<bE%a<lI0
zJ$6Bfsbj+UX=>VU<G8oc;9YBT30Z0?Tk2*bP*;qTL6Vs0m-hX15Q5n!rELgiisN??
zKer~PM*QA2y!k;_y0scqPzr|R7Un_KAtVR$@7}z)9BS`B$W7V2_<f2X(Mp6jm|Yy#
zycvqh8#ok$#uRbpCmdbW{|pOPDXkLiU0+>jcft&xEYPn!h}AOVX2RDv+mJB3fLYi8
zFV=~Se0)GrxN@9311YGFiRj03hS?B9x{vh|)JrChKI(nCGX#k61>b${_r=_0@3^@E
zJuDC&MUmc!(QYD(Sr>vP%XrJ(6~4SR@@KCxC42@5Zz-V%PJEZlZML=B^-e8MhtOf@
zDcr>HZ;<7YVRq@H&BS=t2Rg)xfJS!a?4O^?MQB}DE7D#ao=^Uj=^$Fq!V?I=5td{>
zn1tm8TTH81Hc=68%!8U=5+Ogync{owkdP*GRmPqfBMJ>^dDH;B(^M&_rX%Qfvj{@2
zl6gi5#D58o4XIslnF<)hhxRQVB|F^F7=J=sD=5As?rNdaP!p1@hqhAdWQM4;g^Hxo
za8{^DLJqj#9R%r;kjLES*%(Y0S^*4sV?j^VxtS-SC)*HvCkTyogpY9XYVhN4eEQHo
z_oT?B(2Tg(=G&57kb@iI`m=3tzf}V4GYt5*bz(z>uQ4xo7)~C}!d{L1!-#r*EEQYn
ze10=uiIc|V*y<KPhaeI5HWS1xQ9xZ$(_aB~397LGhS5J3A)+maOWL9({!f*jFM=!#
zJAmcZ9*9$e2rV*Ty;Ds!i)A~A$P!z09Wj=1b#@eZe81?wv*?qZTNX{8+)CIWt@t6t
zVlry*7s12_NLqC4;^~sRk-Ni|I!8t?{?sYw5kISo{0gq1lF^v+D3v?s%D-P}K~NVQ
zx(`RR{*L$d0w`NHhIg3I8sqbcSzWe!ooC}9P}3-%mkUo%MqKz>9I9VyVs)o`p99KI
z&%$S`i9+I<jK`D@XiGC&56kIARkMaoQzQ3OkqNJhG>!h^3vNSQ=K4KDTNIO`Uy0>C
z*gX0E5NQ71q>!=)5OT<5c)_$N%Fl4~5-mQ*bU@Q8@&WQp1=HhiGVYy@L^jwHQMsUu
zf?;dCHo$+sHLwh0!6@D9ZJq$i*>%X_a}2hU7hCu|MBkZNU*gB7-eOhBY|rpen3Qx}
zd*>0gqZlP`j@?M5gSKRh7##M9TvSb{2BA*!X2*p-rl~rTu*hy57)f3C9SwVvy=SXq
zP$}eDB)!8bxD471?Baw=Q9RDOXU!2t?)zmka5YZ_4Q1(J8YRZYD%e&baTW==JAM>5
z;sM4uV`6^8geFHRR536D-dTttoa=V!JlC~33lP$B(#Iq+xH6au`1&)u#s&0&u&h_x
z$?D)L&buXK?)p$CRe7=V>PP8bP5n-UEQfr_<AVTP&q8CLd1^_G(f|(cj3IAjl+Hwz
zQL`iGjwIY%^7Yk#Llh`2NAyX#Bj-I((o;w!J6E*6^EH!PljQJ<P-V$PMa$sSgAA!Z
zze$U!PY-FQ)0lAVDZ~6@sEre{Yxlz8z6phce$o-;?~0+(=?g}sDFPv80TKM&`r*GO
zU4i+J@aArry`l$D&nKl%yV8COVVr5~LEj?LL3POp%##&rCGdMw;#kb6zPf?f!d-b$
zx2B_O4TmQ0wTjk{B{mW9L*gE&VPZ*e`Z|=gw=)`z$8msMUoK)>7f`7Sv<mE=@Hm>Y
zCh!u?(_sqi)8RR-svhbr1jG_pRxQPHj&C|#se+;i>B#yRL*;?sCa6FNs%C8GjkbR?
z*Y-%2AYM*VIRg1kjb&!Iuuq!>?5EC2>0@|PZw1p{i>xAoY6A7dTcgCRgjAB;R+}28
zLDN4w#VClj(O{$r?ci7kY&V)?$lhL9zrPIPIKx1Q$qGYOip{Ggha7CL-Pol9q=~|s
zez82D^td22lAEbv`vLgd{`7YkpWFS0>|U?Oe3=wNvQ4MS^yjKyZ12QX2Fv(US#x@y
zKHmb2VddQt3kWALXlu{+*tKoD(FA+%E;zT`c!?D<E%rEoEHQ!*n)iRAs&0j0d&dpN
zG#b5x>38)Vxzs+s%b*>3{Z{|nS}KV4pB;%IBqru!ltaqcqa_jZ@DSDgJ~q$3AW8Pf
zZa6)d`*O@H&^oppeebiwQJ&$BP!*pu^q*pb(*5Ju^<wtPk#D6~4!YjxBnkh13#f0J
zQIf?EFmDD~PD*uE)Pj$CV$c2Ei$!;N!uSK0Lr%sC{$UL2aQeN1IJtg40py~nD02hZ
zA#j*JJ!Hh-IGn&qlKb$`^&(UTYrSQj?a+z`RO7Wa2$1Ti%5@k44Z!ZXX;`;VUChjx
z?@c5^ytPig(a#l;K~f7j;MJinQ<7o78%->CWcKl4xNTSEYp(3i1Axc%TA?aJj*$7-
zsNSb_uT@;Ac{~%eaXO`jV|gJG`md}8pHKx3$)7T{C=X9rRP0>icQ*Vw2tu{h&WJ>m
z_65t5?g?8D7eEan4kh_YD`BH;_v{y4rh{Y+&~E)}lmH0rc*JsTb~!V4IIi!fuN}MX
z2XUe1f1GuE%|<{!6Ca0IT4KY+XS+raR7TK146_({V@#(ZwO*iECm1Yo6=P60FjDze
zpb-;oMrIp9KiKObZM8f7f^7gd4twnPln7fz+c`eQ=<T-g9$%eLr6)}ALqPBVEHX!c
zPu?H_ECYonQk!QMOnlDtzvnQ&ODYs-YxQr#<-Tv&PvnKgt}$Ilf*^Xd;aIWpXF;qp
z#ra8b%Td^z2|T;KpNIkW88>{&5;Q<RPM4GxzG&gnYiN}<PR|~ai0O!N3UsD_r<Os;
zPZUa;W48!Gnmcp7kB~MVFZq!253ltycLVq2m4lxSZNqTUg`#`X37;n7PKr3;{A62Y
ze2}@t)(KLM#4-Cw0}F68(d{ntCprdk=#tN_qf)l2l8PK<E+2-!ICJ`1KN@brp-nH!
zsXni;u8ytze#6Pr|JjOOo8NfqkKCiT-l#EGO_HQ!PoVq3XSzGrt~D8`zEgq)R_@fi
zh8lo%V&x~GsoAjd_*KK!oKn2J)-g5w{?}jgQn;f<{*W;<^frr@M~$;KKm}gu=xD_*
zN!Vhy#NzUX#%ihj!vuNIDB;}fCi#4;_O7>T);X}T4Bu?dD%G*0DruJ5@Lq3BrtDB&
zd9h7iUELsN$rqP-54616${#(tYv|N!oVgHLzwDX#5E+O0;i1RSwmG9VQu1Ev)NK5q
z4k~1!t*(bs_0#ZIGa6R)nWfquUV#9)4ggQ8iO*f$FS51rcGA{j24LyZPO?YUFz;uW
zRo<_-Q^TXdE?3meDxdF|Led4)3Il9~3udU;iHeP=O>YcGoXKcOmdhzYj@2bz91+oh
zIW4b(J)h8Q9T<C!8}eSvFKUl@PvjPOpdtxLfA7X<5cA)uPwre*!&<6F;{Q@qJrGlA
zr2VjZ@)p2^{+vfn989<TFwo;ExN$A0Q&EG319&Er(mJaF23_K?526i=G);}K@w&dM
zB)?{;k^kBHHHnes6rTk0T848L1hn<{NADQqA#)}IIyms*AEw?@S{)|~(Omaw-kDxw
zP{Sxdev@dJs67=eoF24fXS87fWf;rTh|_Q+^CR4hhKIG4Yz9q?Kv8UXu0y3NdA;Ze
z58g#L+v4e-C1E>?m9@mNaUvDbeXL%v@XPHq&2dqu5rrK;o(h%3-aDd3C)rWfF}8n_
zCr0CcH3hP&BGR(gQxSUKaI42uR$iiiyDmE2S7;Sgp99LN$GhVwy#C}%*&H8~mX0Jw
zS9aqRyhVULnj~fKQNsP?vEQJ)Xmn|qxnhPsiZdn#4A(q8jD8uvgB>)dgOy_?>vpXa
z5u@I>#I(;E56E@sLQ|;NB>tnW!(%fk?7UX<=We<IERAOry>zXi`xmaHWIW0S?(BVO
z%^O9bvj$AHRBJ#xY$imB0wVto(QE7x5FT0XBLEo29f3*Z`C4r_t+7XveFBH?VBIxX
zq70I5dv|q#Y<#|?RLLrs_2r|d=(ghyDkuEhiBRdQ7^??8p9h}+9T&CRLLJDma_0N|
zjje`gLJ}qZrLiSrt@x&}W%Zh!ie~>O-~jm4ouC8nP`5UUJe0%o5clxw@n-z$G-|(s
zA!_)Dj7{T|)F?{tO*#m-ph=?sHM=M?;C(AdLabA<(rdAMnI7L`nekgOm1>*k=5!&K
zP1)!ECD1tIXam(+mg+(wT3|{gh;4_|5-scHS)S`q@@wq{eMh(F^?z*+#T#{xy!?U*
z^#2tF`2SK)|8EMgO69|LgAL((%Xf$sSYyKeQv%t_Ug6I#Rck>KjEr&-B9KeMl}{Z9
zBu>ky@N>f*{>V&)R*4)t%Cqh5`m!}(!)`I_mp7UczeSGaku|+0UbDa(+7Z+*E%SDD
zg~BIUmm3GxGaD9L4(gNMKZ!w+Dlc-h!(u}i+m~Mdo1tz<;U-0TikrHqBd`S#ler(a
z0`y7+H9CsaIx9zEVdvD3GN~@%&nL>V(#s)CG@&T!CcNi=RtVzC07pWEBU}neg{(A_
z0tN*y+5nOv6LN5|ai>u%Oo&KpA|Z)}mJZpN@~5#*vT=Gzq~q)Mb`~i$P{CYs^rM;8
zqQgleY+6CdcEzHH0k23zYER)THB9B+hMLPjOL0tmJ^GMog%VnGY%V(3aTe|^`#0$d
zwX7Q<uPllwh4m4zL6d(}9EaHlf0z38t7XBaYd3t$u~H%t0TPxrUC+r`!o2~E--D<R
z70qbJg-*nz>cs47DO<wRQRi_Y2K?Q<M<sj%_M#Nfr&L(O3<~prhMI{Wjbc`3vJVta
z?SqaaF%@l}21apR*uO*jU=^BxCj`$-ytW&uzo_^es5TkQzZ7J3vo}tOXmcLrJ4$>{
zdZMq<+6}su>dY^JiQel;Yu8Lyx0lq3$8Fs%m`0KEBINSL|LtcDKZ<MxAIK{yk$pmN
zG9b?P1l*OKy>Btc8w32t)}*iGZe`cyeq{B+c9&!+Shz%+T0?z?bJ$6ZOEv;Fk0I?~
z)aviABT;)^;BKZqFig@S9xXF@Gc~A1U0YjUBZC6#?T)eik|+Cv4K97Zl}~vSzBx}b
z*L8NQXoLrI3T5f3GYl+H02z}{py)eW25v<4*??M?_l5m-rITZqLKjPKBSJI07P_mR
z`lAW9opZyGn7%JW$kQovMOv!jqyd?f<^7p?;UWL6F2^nI3J!_co^9npDXc!5Dj{Cr
z(l%T}jKR(L;d%GNHBoQB#!8*n?F*~<#Q&tLv@8^VWI)!_nz!wHUzWUJ_h1!2%JgS_
zjEq53`owjlB8`XLp+qy2vwF`%Tp0hYRhY>S7a#w5m5&;+9Gm`w*ThR~`L6dRdx?6m
z>$Yk<ztD_<!|4q_%mEAhOSf<JUHuAX5Kfg`wfDWL>&(z45`O=4$Ds1xj7TFDy09{#
ztE=hv$v(a0vE6IJmJ9m>`2u=l#s-3k+{3_E?X8y8#hdQx+laFVIixCOA1S87*B?e?
z<e(3<Fy%Il8ggP~AM?tWV0p+$iQat=&Pf^__=f%*N_ik>Vuv&_5LK!G5Gum0hyfn1
zn358@PVJ%XHTR_R4XC9B-5r&(Y}L|iXHVsFQyJ%`iFiUc<&Xar=4q{aONswmRAQk2
z8?4aA*~;qwE-F*X`j%J%2wy%u2DNgLsU55E!7SE&WXVt}BGQC8(N8u{Y-=05E-wZ}
zhdr()H}R!|Y_UPY!qZvow%eWRBc-T+pk<uv*bLG*PjT?^@qIYXy@J$-^_A>cv*7fs
z9!X_!oFr4s4TVl6Adw|%8TOJhEVDy?c_-jFJ7agKB8fJ@76IZ41eUW}d0=dC!rovy
zLQ_k*bpdnEyH+VRHHb0)9~rm3KNNqRbpG}!_3M*r9gkV2r<3SIJ#I3BFbAPq=J(SF
zJsJgmo7-|+ZDp%#V;M;XJBv<AlCvCR>qXx)oj`q1hO1O4m)3z>8kbHnmB;6|XE8Xo
z3A>?y+yqG&r8&G>X;V3+dUx?#KpeHoONoZ5qsxT5r?Rp!odeBjS(ji=7?dH4pAy`o
z&5UAsG5?+5(H$^a2lb!6&7>ajf~PZtqm#VowNu41_Qwt^2vi=P6C*QbWjy6JkZ41d
z3>I?4VklNMlbYte%U6Pw*9fm_Y!ifHn&;9+5u~k4tR_o7wX}&f?0#NWaOlI4fRbl?
zaK5dC)p7@qZHNlK$q@%aLPAxfBuG=Mq>Qi$RuwrcdYDx8f|aap)mLWnmSxJ;iX)L&
zDeXf*$I|qtVJT|8ABWAe!14r`wELq(msw%er>^0^)aSW>F;t$&L^sX}$6JkUreH<L
zsUjPTYg=8eEyZM#+r+?S3x4~vB9pyfT~ifYVCxA8DygXCWp`goMO;01Vw&<~q@ASs
z^lv9!bB6Y!tUU;++C8Hdyx~vm6y6`ieN)?KLnp9CdLE9GR>GcMeEM!i8gpaWj;Qi9
zUe)(KJ?kYKyN~s&Fq<Q|8SucZ5?WxF=yIQmfr2lT4cWdaaRjA?&DtVoF^TTeM)xWa
z4+N!aC2pkjo0dr-PuuNdyi#LBgcdIC&{t2XoJAiVzMl|Z2YXvLt~QJr9uc0qy}4HQ
zv+4JOJr=xZle<SR9z1E2E@msIf#8AZ?`~c1h0l%$@gG&!<qk{lhDYeuTMz6*dAiIe
zo#kNF?dzB~*iDVwOmEwpvn<g0wH{^{*O$OF-~Yw+OLdcpp#So`z;OS~;j^+ew4yUp
zR)Pco-cBe|(~&Gyb9RFU00cSxJ-`3I&yb3w?XP6I`$JV~K?rG}uEBFvNCD+94m<0z
ze88YNJGp<nC>nN{(l67i`Pkzs3csOnb=BPQ2NoM_EX@}0(}bhI2mYO5`E7huWPkVT
z>?}0lrR0XMmq(y=N}iWza(DW4hr!8CzEv2TJ1BxB*i)s}E(UFiT2u(gpfU|cUOh5b
z4iU>vlfm2>M6A<Y4jK;!9x&SpFip*W9u6uZ@&L)4FqsmlJ2;g)7D_Pds0@WlSWO}&
zahFvJ76}TJ%Pt@YH0*>rBp*~VS+C*DZJ$>vowov7$SkgLdNkKgA)y;^PmSK5uEn%q
z&Y=y*BD`<isdUOfi8AWkE+lM10SW)fV@DFTSS09Hh?b8@1ttOClQ)2#!oTscDv;mf
zPmX-gC$Z4OJhu>e8v~J$SXjX+v`oQ5?8I%`C}33H;Q*6Bpt8ql2DGFCY^>69-oHO1
z1Y|v%Z?5>{vcR#?q_kXM+*QV6M?Feb%v|*7Wh&5aB8HUEOERU92-o;@pBZDHCmYnK
z365j#SA2uPP@Kj@pn;5SL+r$c97bhAY+QHMCEJH2?C;8=DALx=>mhvQ!Afd-+A=j=
zBiN@E&-IR2O)2i4Z}W)L_pV!6DbvwjWB1N~0FeSI5{ZfqCC5dRj$03*iU7+!X-<JS
z3LwX-4Y79kx29~r#>jup4SWPDpNRJc-?*kOVAiH|GQ)$lHGL~@xKRkxCK?@}v+~sY
zD*i$@M&(J)^t3%4f4hA{zVnr6i1~>2kU4%#KlpO^a^Bo3$fd2gmuu(x3CIDR8Z}i@
zXBB&lt?m1PXI6*XD^0=1zi?zU{X<u{&cz=MrmC+Jj<Zc^D05|fsy<^$q9WSF6-#^A
zC~<zi@y*(b<`?8&+Iw)nnR!q-vM<fJui%kWvdQ@1IB(F>0pZhLWW-T+4YH6^70jb?
zmugX>91%4Qq^iWtiLPA;j2E;rm_@+@x9gnn3HmAUCf4l{0qUL)w2ck$y#PerOVvTJ
z04^uEwq+d~r>{oxni#7p_D)?Gt}`)hw+{HLnXG=g-Q6pk>!N;&g|HRnWec?Kpgxf!
z(1B>=GcgiNl{rs_L!s5&l_<e=UjyloB4dTHA;D<AW>m6%?0)B)uC4WPv{8fRf}OiX
z;jXj`LNuRouia7fk7wtcJVWPL9%B*|fofk&X1L<%!+6FFVKf#ju@{24Y(_)_m+RWs
zL!6iXS7xgUi!$JtLxxV}5+%VCHmClim*|n4VW={3r^p8)%gs~ZV~$m*kWP}k&ckjC
zlfoZ`CiM$5Zq3=B*}MNyCd6?tUnXap6KVJP`q;ke+)<-uUF|A3h>!I_eb6wcRh@wu
z=$QgVJ;KbV6KWZ^hhK78CcCrl8hB5Wb?&qq!;6e&qlIaQ1G#Zve$7P34Y3w1W0C_$
zPMW)P^wJf$iZ*43q75MWW-8^X+(NYa%M(RCZdU|K<aMl?oU<$-o}C+8Rv@-^zDoO6
zWRhvBl|>^r*DJL})(cifbl90q6c+E4{7+T9fL7X(#|)YrI8CA@KTNUs5H$mWRk{V*
zskx7_HIW4bcC;0^$}F*Xz3{|$%}#1AaT2A3vuV`L=IAUbOA*Tokxa9wmzACd$LW9r
zK-`hvq%@Oa!WmzcQU%JnVoZrQdwd0s4cK_?wVHhUHU3@CPAdxXRaB^jYUu35_Vjlh
zZEY+?Ky}9pt#^E9j(q#1c=?-NX=9g#XTxCifBi;9g=Q2c{~8cyS$|d005|})cE&cp
z6gMp+9U~osF}<OKyPcCQy&DIcp`Ek25uKgY|5b6Xuq{<LM4y?zQ5A(s0S##kVG`$Q
z0oUh+fPxFBvPmuqMn<!Rla<UtILx10Zn~I>%|+w=ofaB8PH1>RJ@H(xKUfovYDQI(
z$u!}hTg=>q4AMcWj2&=>9)hHcGhyDp_KtIHqederNzoZ$Yief3jFGwu=*Yz|b4110
ziNyr|RNDzjRGUd8V4pu}OaPo^wy{W+iPg^*K<;71{)QpL!8I@SKWoIq_K0DotvMoz
zW*Sj~GI)(E>^Jx!d7R9rBBLR(rw;)(2&Kep4wnEm2juIuy8I;y-Kbp+Il99k=rh%#
z(96of&Ef0en;My?kOW8_QOIT>KcES?f~@1T%5cCd*|D<T+TMQtH3>=w>Lf}vA7;~v
zNZO8@3RE=BlZXD0G*rphem!MW{a*2^yS_tTJL>A4|ETaJ<5a7GS8+&|WZleU<GYG`
z9uY_S2tIF|Rl)+ljWh+S2>Q;b0r9kNVE4(<!>xnc{Y|{%I5><Ql=qqyEF2x0K;L?H
zwE#n_((U2!uN!cF1=Up1e@P9FbXAG2_W68r{;@{aZ?_-j;VC@=Zp*r{w~6v1p*EKQ
z4@J}GJF~LR*3trMsGb=y7262BdwM$4v%K>20xI=EYagww6C$U%Y<viw3<(CkEn4cJ
zP(N=hb6vR(-!VW)+og9tJfRo{ZB9=YVSimhy?77+1?hIFvhBfD14ZyA2cXiU3#s`-
z8>9=z#iLsa=Y`%bnYGmGVm50Y8b_os!exAQeQs?<{#?1RVxl7J({Xv}JQUFM`LD=$
zA8b+PHwz_hgW^uF$*&ASm4R1<pb13N<QccEE)b>>^Dx<g`|&qc##1zb6Y>-mR9Wj!
zEH`qdonEbPO9yj)LDpV%Z^0KaYy%sOI3+yguIIN>oz%!+7<R5Z(7K&((CsrR3)+0c
z&@72XRIe7G)nT-YODHjwe{d#P4j_#CBKW~`s-<IkJoBb(G`(&<0Dt1WArKu<nS)7V
z3-{(0rpCS7qYJzPnK3jc^E$YKj2Jf(7A&Xdzf@7Zc;<n<TO+fmW>SWi)3q^EfC>jN
zmlH2YbOsZ38VSR5rkpm?uI65o8hT%n?DS)*%qZpYpv>YxwA;Efh6<O|YQXAsNYOa>
zfS%e){z3+IEYLq(?#}kVqkl=MyUqQ7U7ifueoH#A)M`(8w-AC1)d(<ph$hV7`38qV
zP7;6MG6n-+VX`8e5Cj#Hl#>#w+UY0ESL$NvU{LLARbBOwvF3x?BtXts#;kj>Fttz;
z-+h)sDU1-yyC6z|2&Mhs@5LOw7dV4DrTL^wuj=gb3-96J%|TWLjqx)K=A_|TyEKt=
zEISm(1^LVW*~PUa(`<X=L|}h)5Tjv@TKrW)z*Fh^GTBlgSf?QXl4m7=kR^2f3l{8n
zao9JiFpdvil}E@!c67r|MYh(+;Ez&*0fJ3||4I48+BkA&UdD^?L0~Sav>axU5Pu}l
zBbnUt5hPYvQ)WT)N|=~)j&sxwOx1v5hp`dv`zOjC3@G%m7J|||`rur)?cz#fe&ORe
z64Xj&TE;=@+>$QT_XDRAETR?*BHo;%jyzEd7k*@fA6Hx1sE^f<u?r|5$gUTCZQmfK
zuD4bCN~N;o|0C=jqC^RxEWxyGXa2Np+qP}nwr$(CZS$vX+v;C6-HYm(s)<EJoLIz(
zMLgd7?wjF<!TNMd#Z$O|lXy^YR}#CspYp<=_6pD{r9_v{GK@OX$J3<OHFUoR_EMyE
zO@R){(-8`yfwsipRz0sq1b?*dK-(9_6Hk&jW@j?nPPyy{*?v7b_*i*fs4J6UM6Jfy
zWb@dWH&4l(xo%)OZC>iT{N$I~4b;=si+5xz*y^CD5P`-&_mqb_^V}2pqhe-x3D)95
z8W<{v%H-ChA;Z{jEmyy}H0<N-`TZ5$PwD94{d0BvPDj=UF{fag;^FVe+*$f{ckxlV
zZyun0ZN4Sz7V|CE*L#tOpNku@<Wx}6#A2r%A-dRh)G#u%R@e+t&Qt&ob46@LCEFIg
z`W|73U|(C`LT&@s%orECQ%G3XB6-U$Bgi%W=j>9O3r}y-#B_$;SCdwnJGaw+=DZ4B
zZEp9@0k)rwtWQTfXG^JuWi?|uXMuWlr2~=1f;n)?r{tb8U-g1#SbkDOpUO~qWTJFZ
zj5vA9BFD$YGl6322(*<W|HmuOQ0@Q<7cn$LUskush>(o$*WIJz{t7Gd{xXK$fQ>pI
z+5Vd>ZEkj)S@M08mfwN#PUq_~xwutsA*bCHp&tT_nhQkT0&PrTu;Mk<8lH9Gba=0!
zA9lvG2M^$lBM5__2UIn+Zisx#`!j$P5d=Gzq@bG9;hM+M*kCfr8q8$Y-4gt(0qMKY
z5ed9XnTwFFHcqPpc!&@iXU*5o%&u>@Y*E0l&Y#<13D~+Ko-AL!lx$Pg%v;?ZENl(i
zB#D9|m}v3YD-&T+hUn=VoV>q2hgbvVJtildHRT#)*$Pur{YCHzEXtQaP+4lq2E&Mn
zY^-?C8tW7_;P8l)gf#4<_*x<k63=dK{ykDgT$6Xs8lO3@GE+i`Q%0$}PT=-*Z3Eaf
zzyMMR$Ss^lq+qSFsvO{TTxy{Zh4lrNl`bu{0128gF42x`;U%B#8*Vf>gt}qq%NyU@
z538x3>7~&5szg0APP<=_M&wh8NBoK*m4eAu64FdR(-xs5-PHlCpgY;=R+ldW|4SeH
z8W1*#9&eGJ#(nwU$}YCa2eLfs=@<yF$CsCKl24AsEq@ab00^hc!8VbL0ujog2ND_2
zjC7@7_f5d8U@6=LmWvH_M_H9kSlp~oBlAZJu$a`o-LYTd7y@XCWuPK*#P>kag3D1K
zPUk7Z$bnBjRNJaZBl@nJLu{|Q!>%5k4&cw_LbD!G-qzIUXl$#}1^hQJ@+1<(t@;R>
zMf&M;WjNF3^=KP*wTk&s_e^da@ziL4oMw2GD83a)DOvTFh=6R2WzyE;VOJYNa<b5t
z2waW^r7Vnz2n8EMHQB4m1HDyQ5rSyHL9{(CX&7s9dO^2H-f8%5__ICUwT5n$h&EHE
zgS9`TZ~_S1h8mn?ygMBEY|KG)B|E%7yFSBX-@Mx|**;~d<`VZr2l2nOt_tv((gslQ
z>CrPqm`-B|kD1$w9+axC$z2bIl(E51*GSMD>C!jPnWM6Ia*!i$e@TGlRXW(<FJc+n
z5OjQ5rs$%_s#c{+HWjR$o?u-S?p5+H51OpUE<SsooCJ<~`P6}yI-JUqO2`0eH$8yB
z>jrQ<U8DP$yCZ<El=CMB+_>6XPAQI(1&qCxt62G=z_loJa9oTMcZn9e(mN3vh22Zq
z7&&N$@*ma9EF@XyMjuxW7#9j`nTw2}K&Dq>PVA_+@bp`A8FSa$kr>}7U=4n0g6GM<
zGLv2noS}nYh$Ac5OP_5~cJxD$LUb7M%C?X>IFE=A8!i>t&Z_HNMr=yPkh(2KEGQe(
zsYAYb9MKYurq4+<hl?B#W)j*cN@=HG%jFy={{_<AoM^h-9~cS9ys_lui6js{(Yu_i
za1Z0{+rX04_bJ6kO=GE77qp`1x;+t;vy$<_#kO{I^(k)$K$u|a2*cr^OeZ9u(0X7g
z9KirULRf5}ZpjX6#V<yoz$WN?@%E4_Om7#znSy=tVYmQ&*06d2a#yvr4Fj__s${V}
z?iQtCu(eacdyuvM*L}}+ivT~A9Gvc7)YZR;#7~WLr1M}B;FdCzHsQpCGyKvno6)fF
zf3jFBu$0$XPo~2sJ!|Z!tQWA#E4#B<9Gz-tl%9qDmU~>*Z&ezygy%O6!hwTRU1<%2
z{@DIgu<^hUPMct{?8Y964m31sz0hx40lsb%>OB@tqDHOlx$&$X7=_Zpw{*u~K1zbZ
zPLb8m*ATgnG0HWkfrkX5<Jna*xM&w0P3~4gL+63v$1V-dL;M46JXR!plLVynqYjC<
z3ok6sGWLQKvvi`pQ98d;F|&{y0_v&LQdD$>as}G#0ISlZv~ka=jA_L)13pp;4@7uN
zVNS{Eoi}K-B-Wi-Udex`6IwN+E*e#L@47})%e%9lsRu`B`*N|&B1FOmrfH=>rk@SY
z*;*wx1+ikY8DM~8>%fz5s9dpSB44$9_zsy81j-04rBqCAM{V@W#V57$iREr^y4-$Y
zM=D^Tt^QD20>1otzF?J+z0TPQisVv8kU$QiF=SY7l#mp;lr<ze914wT<5*Y==}EjA
z{1DDweeRrefv@-d{V+1(E^209zJ4&Cl_>%}Z0$(fd$fdI`&TdtbIXV^Mr6L{1+aq3
zRLKQ9f{@7G9Z)~t83uCsn3#MLwLCq!{p_=Ql2>k5O*+yhzh7sIYKiB95(tZ0W{=`g
zh;u>8+(nCs(^QqmAWhjSCQ|!9l7*3wNW~@pIGXT#DnMey>;OAHVxVyW2B?m3I?+Gq
z$wdk7>?E<Nz_#SzTi&22;D%CLwU-7)pA!>`!lC_f_l*2887md41YU91PM*-8*-7J9
zj;uD#SY3P{vxkrPvwFI}%FSN!QlSI?>gJb8?K*YHD<)WoDiL%^{%IYWg$>7DHLMgz
zGg_8wieyspmKyEI!s**)mW4>EoqqT`ksLzohE-1ai_yusS5csPbDaz9&JhZkUUdua
zZQaK+g(5mP$dM*&??$t->7qc^#f+t9so8w{3<zC=31e0xXgJ6n0#ljpN4zPnq?t$`
zsEf3HeUHHF&UI?!w1NweeZOMeiMzsC{}F8LH;ytL^W;wX?X6)u=x@1_vz3<lC+;Nj
zwmCUyyC%z%FZCt-uiY1_0i|Va(W_-xVdDi@yn`vvkiKD>EvZo3{9mO}JtvnSQ$05F
zUHz|-o5DNLa&c7}^s%gKfv!rmU!Lw&UB+~QW2WH3gvGh8rgRN-OwDs@C*@#XLD&e|
zDLBbf4Tqk@Z%1@?v~|?g7u1{f6KCuv!HB{QKjxgkSxx@)UAMV|VYwPK08(VESmg58
zBFuz!{R0t(JBA#_Jp8Rqra^ERDtw3UvW=SIoxvmR>-ohUw@fD&B+I@zryFuhNkZp(
z%lCi^mJ1e|e4(j8qPY?LUW}UgXLUS?A(<@b3d_w7U8sVO^Ei-9E9#~X$I8w{M!dAY
zQe_7n^QX{LpH737?PEv*ohUKrmWe>9Z7pKiTc)F4r;OT6JuGTftD&Afr8nDCW_go?
z%|v|6d)kNVMT^=24zgM6ZwTaG0!*W#AsQW4GrJjR?&Y3K7L{z!sWk38$`-F`mQ!<#
zX^SBJ$SJucOS0Tw#JWNmLlh+!-^jWyCC-H{Om{ZR81l3K7+;gzaiP%Y%O_NHWp}%G
zdm&gLx?i+Aa0u_W-f)_~K>u}Qb9=86ednLzV&K0vDc*lu@Z0HG*joIbC4Srg-~Ck^
z1(~=FdW4=+wP;tm`VCSkcphpS65)zwBu)9Xsa!%Mx$v&h*ipD-)$dzeE{ehuUiDnI
zTb?;FhqM9QX&o=Z9xI@3zjW!H`)5F1tYDQW*Cvg@%q_NLKvNxaoOc}4QGQHNJjo|<
zaAgi`k-Cypa~{gGYQaEz1EUX=XhL@;1iMj={;ErTI$3=k|5>9a$e0&-t04bfl2*WG
z(DRp?g+a;SA~+dFd}}ad3hH(n1ZgyBJGq6(pmAx_e|r!QJeuBuJXR6AD6WCeZP1&I
zcmg04R)gn1#tPZ-;yMoTy4gC4bQYo_3v#+4y@s9$r)*nNN|hk+8ytD<c=ZT^1OkM8
z3RTsIEN51%Q&(2Yo=Lkxs9b9{cTPD)1}l>VtDJL8M6iCbDqNev4dncHieNR<AHkYe
z82<7J?^;A9>vk`Chz(mi0h!5QWr^w9QAd|qPOFZy?Y4Q?YvxeJr51%pH|1g8-3QQ+
z_@VN1MBPE+l~NQ~VTc%K7rH|TiM7tbZB0D&6-7k9mA98qvcH#J*K($@WTw?!rm0A7
z4Ix03AkpXk)SQ5_ch1vJHd=N8_Jv`HTF7ycBM$e$dHv<|`1Xm*gD!`3h)-=grL#~}
z(LM`bFtF-t-2JbA%>olO5&J(4D8_%l*nckr;B4+_Vqol~=VtN$qXX6QuQmTqOR@J+
zP1=xvL_;8PyD+SiHeWGXN*MuGsrC@Lfl%#$bvcnBEj5SWw})w}M34ukEbO5<GvoUt
z>(uf{b1zUWc`ilW42pL2w6CA=5Fu4tbOFY;@&G@VJe`@6s?rl8i91ZIv1UJYwcGRP
z9DxDCloW~9Dp!z5NjKnP;HU=58mX5h)Gp^wztBQ|C{GYI3Ns5CPD%upD&c8=9+EC4
z0#c%((n;V%@Q`Y`bPzTMa3VeAh#~{CsktsMGRhBu6f7$=w;$enPBm>N)PkZyl_WJb
z2~@WppprA4Qf0LtZcOXub$vg^1t&h*is!N}R)&3O#>SC3Z(}u6Ltt`U@KFWsF8E^}
zEzTv34v9yS<C_hYv8MH<!AqCRs0pR2bCD7jcu}z@t%?Avm;FBM;y>i&U{1@AF$Tx|
z6>i5_^7dul6mc}F;&*JjMHN>!3XhPG8TOWFtTFog`kVUc2dJ&9w&1W^oOd+Q?s`nH
zIQDrR=nKv^9#&f*>?h)wyus=|0-eejnHtD0P}au|G1zIWV;KV@W?Q#A@O|6*#GJwh
zRZWJZ<!*6tF#-CpEN{%HpLE`Z(&ZhyVlUws7Ao^Oa~0}yTA7h1(R8T9urpLWX7)IX
zABsdh_NW_54swdf+O#=yoLNviPM@Vo;Bwhv?=e;j{jl;t8#}{1);(!YYHDYE;$u-T
zgMZ^wqLy9CrSuv(<2vz1YNQHy)(2{I<{g^1)jjEVR~G9%GYHcxE-b@u0q_|o`%En7
z+m79%rcGK)#$$G+Z9KcObtOz7)=YmCda&bk%<WMhkNT_Pg_U>tUk1~jjc-}DzjYfv
z7-ACh1l3b!o62{l0<qll$Cmpyf-L61IhaHa<6L>vp6;*lBwoh&IuaYs>`+fUzO8;%
z1Tj%JO>7iWdm~ddNI6hg8FiE-?DJpFh3uGU=%*!;?D9aVM8Gqk^;&*a*{(mXE^w!-
z<+Ba|2_kKT)-<lToj&g?wFfRqR7qNtxtl6>X=z2z_O{bYg>1Pr2%J#magf1fc)ZBf
zgV7|INmjO^U23rdzQ>-(GRmCeRlrrbYBrG+^<HY{n>3@e;Xco+{G1bMt~T;D^cG>Y
zTCJZn?u;sQFk}kF?*<(`b^U;u)BWG$d2XmOj<d!}ts*0VE+!;I(dG%O$UR41Q{5^B
zwrC^!+k|ktM28i>197pIY&&rUY**lQbD4dk?L?;e@oOw<eoIC9kUhy!A1eAuQ0VyS
zKbivI3cCaTx&&bdcz$~6W7^WSeN6H~2Rt>zG{5k@uMI&IIA&ZHl~B7g>cw7ky#WJT
zo;3r6MPgLq*J+H|%|>GUVz%o5vBp!tYOF>5sbY81sMra^)G{`SiauccWUU2hT|8Y7
zjO@>BCaYuS^?jtB-}D0dG3y5$cSRgI?s?O{t^W^T_>b@N?~uxqm;BG0|9!&xZ$p`h
zt3BO+Hm(07j9LG`VZ#6F=n9OG4n+Ssx?+U?355KQcmC%#AU(7H<LUmJAUUIE^H1;u
z;b*ok-F|U`U{H$pN$8PK;oxarAqa*;=SI24x+$OsYjZ<KaG~Y*+jR97Bk81AxFvb5
zi|KKCnyJZX$%-u>wupYisZ~>|{p@u&NAC&zR==T?KE|9rPfmYy$giBtpgrX>K8hB`
z2jAL+puaTmfvoe2Fn%zTJ`OC9)&QHD0$juY-Ut!HvMGa{RZGV|%pMxs3|@fTfU0~j
z!HRS*;T`2nElw0k9YD7|!utdSF9bKq3O2W&m>?IK|4b4*1y?!l1qupXQYlDglxQh4
z>pT~t4QC-$T6}h^#`w>MlYMccmK0{hYtN2t+hu5a5P~n;QI)Rsvee>v?eVDCvu@En
z^gn0WRcudklo+!8EaNd{W@}M50VLtE_r?=<OH?s36DV=ejNTdPt1v1R@<dSy=mH!#
zM>4J*Zd%bC;70$Op0Iv<0vv&JW38&Z&S+u0Su~P2|8lgddbkU=S7Obcl6HT97|nz-
z*k+f1bIP_5Y8Wsn)lITS6E3hEf=7P3v4A_VH52-Bw<NYiXk^uWW<1#e+c4p5x-m53
zZi#5sN$~i&Zf!|7t>wtpGI7v$pG`1-U|`xx%j6a9J_XF)7v9!;`O7I-oW#}nv&w<K
zq=6>Ru^=g$S@X9bPry2aO1OrF38jXkcd@rK)Hl|ZvES?RZ#TBqiOq?W$KR57U8N06
z6|M}V=1qmCkel81**f(D>IYz~xmffMP=>TXX+!02PCVIBzl=7qKrH3JMdP7o7WLO8
ziIRY1fzplI1)0}JXP{0d&F56QiTPHBA-SOmV@^W1q5Gp9UQt($x({DA=Q<Kx*W%-;
zgpmPmN6DB(2?~o8g?r{aP5|?J$s`(4-&~EaPs~zH9MKtRs`{rx<Qnm7t(m5^)89<f
zI`u8J+RMizYPiF&q3`vwHK))p*$dCdYqL3}@l^RMS;BJST(3%_2u_jQs4m-$W(UeM
zg$eoKi4LqjL#2n7%KMZ-(gD1DtG(QxWIM?lkij^wX(#Vpmu@<l_yXNzq^V(`zFm#_
zKzOu)9V{P!Kd-$%`E$&j_hXIm5Lf5O72oCRD}(1}JZ(uv&1xK&DbDe+$_iyycPRx=
zbWS&o>rWUz+rQCZvN87g!8gZ{o{8(JXlgzpR{u)OL`KmVZuhxs<s#Xo2|+OcA&XLN
zXM#uNOb-haXajsJGLxaycP?0L+_a0kY<Nns(|GWMkj?x%AmvoGc{L{mo}Fb3W&2MR
z(kN@9zo&}$=vWwYyzA__l1gqNTVf~{&AbO$fE&$>M(}iWFd#pvFd$l>Z$`^nTsRvL
zXiP!yyl_uNG$q}mHYs^G-2KF*iOg-}DiS6AsiHU>G}75k!})`1a23n3zAeS2;C9O@
z;bo3NOh4fsoNkJo$l-A2oJf?q{%O)nFej@ZZz!RiJ$3Q8ajVQFicQ4nl{`QHmnM^)
z;%O2#HUNO92LJ%W|LFHj^bAa#^o$IR^vrDxjP#t$4H#Ki|2Jjnzj0XCJfBXRtVw;J
zb^J>bvdzR=bX1bYT||6HpBL=8Yv(1Wj}GRMt!Lwfl8V0GF`sR_w0Oh-K*>kVOPAAQ
z8RJL|>eOhTK=u58)zro**JDcK9Nc*%C8`#zSNDsgW<>$t*<ne`%EXR{V{L)>NP;vt
zBM*#YU`CA|AgPFtl;T0|b?CK$g~Kn&pMoTiU?!{?VGI)`%}1-lmG6$B;ob%{h>ljx
zMQwY;7$X!JrGSQ$Vh4k@Lk|5x;C<<3B-sD>I&<NM?F_?@`=rN`JI00*-S<F7&?>?E
z^8n=W5>mbe#G|Y)?BD#{pZB__2{&QX!wwP03{7cZiOTbl>P9|`T5!tj)Yk3p?$(LS
zhY@4eiQGSPRyEIdHL*(CjRExbHa-}!-;XsJ@UwEfasFP4B~`U7w8A75577_0Jyfx0
zYb&t>SMJ$X2AbJuAM6pI2-4M~5EIR5BX}hhC_WspVu3|)y^L8Ep)X$ACxYD%W7i4Y
zCN5_c+hXm2-LN+T38HJi1(Z;oA2MTrsey3v055#_g!D75@wxcz{HA!zd_29L59GHj
zxVX*r#w+Z>T7ihVY7?~ysb&ZNLTx2W_l!9l!EQUycgTwQ2<APjFk)OGzQBcfVZ7ZF
zjVIg&Kn$AynYRuEp4~9*OS<y}8iZC(bk1&f6WF3l{UD+%9m!?mwsWQXSkr8ZDda*a
z&kJYsI;-PO_|}uvzFHj!8>pS)Tn@Vj^{gF~;E(0&Bn#4u<Ar<KD*8TrH3RQ%kPLaA
ztzg4N38VT*Rl!n4*x!2!64LE4oImnoWCV@A<bCS2Z9BYs-R(t<)Lt#Pg-zjW4}$kP
znZ)0s(*T@D<KDZg?EZ8I(scDa3f1j8_ELI1`YOzO#VqIJb#?<M3(6_-Demp)&{%iZ
zv1`NW4|^7{CM(DSslb*#tMAYY8iPV*w!u&hIKQ78Fp6pQ!Yq}bxs<*~1Zssk%kKS)
zk`~`rT9ML4j`J}3C8hT?wI$EqVEC7yNW&8J_+mi0A8G_5zM=+oyaU?%uSGuAXW}Dl
z7f>lk3(BOsow-^8@)Fi>q%xEv?Et?w&Eb}J;2_s>ClX5Hw)*o@7?#4hC3_<nT+eb9
zKr%3=nY?P_#op%jP*TvhT=-%Sn8y9kIeGYYHSIXfT0iqs#AMb&O&SAvcCd82vUl__
zk_01DIRWE%`R%A<THGU4Q<P{bzm_r8DNa*@Is=^I9?iFl2qj94IYMN9tVUB>zAiRQ
z`4}u8_K?b=7R($~xyJ5Kru{(>!zeDAqRG_VYa(UWh){eP6qV5Jnfx4ht~m(aSHf0Y
zAY=y!X%NJy-k*Ae+z3^EF({pB%Gbxj%>vE%wDMTAe5lzdA>d!rJ*4=UtYQJ*KtDSP
z<nDrE*D|v(vo7#YuRZYC*gGDGY52i0@(?(bNKJZDTW1#$tUKCtm?0`#^^Qn|L&28C
z7{hQrD(PdN6(DJ=L>u8!$CVU@nNoj}a`IH+k-!@A@b*CrRIAKUZG+@_5;!CY9m+f8
z{I8D}W7kV|Mg2i25C$$Wd^bN*7ga5P0-$^#47fU6ky>>d^63JO%DL*ac_xB-QL7Vr
zaVHlk8&IussoUIP|3|cOsT4^tlGRDiDC(q6b8G<t>;rYR1Zbc5a1~C-Xl}gwHe;`>
z=AD0(H-*-Y4v`H?Dvfv2igAY+p)d_o8k<5*mGpprUrKKDf{g3~6M{;g?2#>qs>jqY
z_bg7UTB5c}iI@_w;rr(8>^h!q9x;;QZfn2ORi1$R(ILh6dUneD?JdT)yEF&<He8>U
z^lSj`Qf6m6SW3~sWiSAAz=e^G*Y5RM*5#veXlHiFY^<oHut8iUsMA#W1|`;DciuSC
zAp1!v)Hq%xP8M?MN-t=kz?%QAHf|~#qChhifJuNf0V6F+%_g^H+CN-$&UzecCT`v9
z8PTpE@z(gZhS3fJwIfj;Y#S;<lr#&BvC4rua1V$BiM%*W;VsqP<^3e4%jg)UEE%-#
z5-%?y5}*Bw@mB$1DW1#%#cOqdBN0QVV(}!N(xR==a-$iE_<)U5VOp<6%h)}4CBM#d
zn9r_NcvDWhoY9c^JQSf&PkEUtAHljLjlZAg`KvBEjOAe-@N?@=vKV~;92qwZ*%JFh
z5C~bV7A6VojF<ua@Gf9NRahS}dxp>wA@$VkxgV^or!48O#2t1!J=91KGd>~RyJW4t
zI{>)sB%Rq|onijGwJ#RVZAV(1MZ7X4L?cQ1e7pK%4wgkAw~!tV5Lj11a4Lo!^M?nQ
z(OyJ9Of`^nr-#3LUK}|t*In6qwpO>FguUcs1ECdS%mG4scA;AZGa!5<<*NrhnCczn
z5SYwjUsjff4We{Wm@vvF3<~K7>Pumy6s*d_DBy!V9-NDT^JQ^`FpRpyTS+v|-2ja8
zy_&YH{~E0DPDmV7QPcyd9>)=C#ZX@Mz>+y9cF`CnSOk8U(w_RD>TxNe&Yc8AaDj97
zJGuRHP=fJ*ys3J}q5xobB6NO64COp9Cl9WdFFy%*&>}(Ucu?3m`_mAL=0qsx5NIm2
z{k~bsYt)|}Sle$3={r<@eTlZv;lgkZH2!Ry3W7B*h(8D{$cXuMNP<l>ypRU^c${}_
znki!;MbIK<9BP6CsQ1_shPUa}Pp}y3=p%NjK`!a=7P=DG(&o1<i0x}mHLu#4SE2z$
z$;}<4rr1{0@iz|B)6V>T>Mj+Nc6a;YtRnmFLz508yo?-USXvny{a?YBV_K8uVr#AV
z(%<9+Pd)6u)d|?!e;vA%cJTm!M}na^xdLUMRKjs_3oC@KE)ZyN4duejFA+XDg~h_$
z%Y>}Y5N=(<YvCO7g}Qs=1D)m1s_q0}7|N@4^zZhC@EZ%}L;_dq662$SxZTQ-1jImP
zAfsWv&Yve_dUn!E1V?W3b_sqYLBF$zpi6^DR9L5dN?Of}3jZP6NMRo!cvN?6^oM0g
zX+)liBN}CuW+jzm4!X7Xqnd{?C8A9RHH*n6De!oCUrt_H{C|tbO?k=&w+-hSm^Tyu
z99LvpQX!;&bZ1&pS?ztrXV^gYSxOJEIv^l}2*nZ4uTxY&IKxRZb>T+fp;4QnX%<%L
z1y9UZ@}|;G5fk<6jopQMF`WF<3&yCHYf}R6lQqIe(kVdBF3GrMmUcbsB(-TJ6~QgU
z#Zo_Je*jH}52EV=&x`Zp<@vJH_9UwjEgM@w!0&i7X$vAD4mX;oco3|B;>C2k4BgjB
z4^BG-AP=MM*1r%>nApo^9j#Sy#Pu*5ju*v<3~kFNMhF+g;EVzWDtJ^tb{@x9C~jN8
zrPURvPmeCd0D=x53aU`&*Cmk<UQ9?^v<;FG9S~WTz=|C+%%T$t<+D$V+yW1l%M?#{
zRE}QJu$E2<3^CK17Wf(#Y-oE*GfKo1_D|4?HP$+Q<Ah!JRjX0y_+<>wCp`6GGX5JO
z_?d}0)!khaYJVr4J<?`SywF}B9XZB|YKpSbXd<VeR?$sxc)|c56TG$UTi`lixP039
zq;Z%Z3knwIB%xH)LDG+oX>pGcB%p*-F&z5FP0{xdVM<ZZagzM_9<dc?FXR_n2}zXg
zv2LwVW1eRXG)>H(AgC{iRE)|HVO#H_Z~t@^lRo?nx=_)X94NJ~C4#7<qOQ_NP;(A+
zkn|L7aQef5%{Ov4K=xOl4;j2oSNz{fPQDzE!}}r}Vw4<CJ+P3AR0u#xdSP?!C#(w~
zW~VC*<R>QCYNNb`yTgsNbYjVCqaGD3$V&KS;GZo}hsYfWHkV^f^Qi>rtnM)$&au)P
zB$M#bB3vnH4sJVJV*#r$a1PJr$hnErrn&1>v|DFvmP9oLAYt$7d$1)~Ya>X(&6!i=
z4QrRw;${;^vd2Jbn%KeuSQ&6chUH;wBa8;={wK1E#+WI_Fl?ltCW`{%*N_TASD7qo
z%EFSvO@_TqiUTXnyB25fE->#d5pNpk-qu*VIe)vl@H(4;)rI?O?7M69dl%|AR%h>9
zn719&dmHsT7Z>ka*tea3&uQLtFW=x`-ryqNbhSu5u2mP3HDy#nG*?}tWYu9?`^~}m
z9dfDGM7?vcJZkl^@1HG?Is$DPyjUKzCs>KD{*F6|Y=+m9gdSlw+K7^m9$^mtyMP_j
z#oJb?u}HKXwEPsm`<^5c5NOyE{-%w@8b?YbvwahWTDR2=pv^>0F-VT<DV0%LyXnRv
z%1o_T4`>Y#foEAmCD{nfA6t3cpYy^gO-gg{9~Mok_Rx@u2Q;Lkf{q$eqF`iwRPm#w
zsQO!5Rsv}#%YinQBb(W1L3O)h#MBw%1$mEejpPxmW79WNw+ZDEC<68v0C@&k5d*;P
z@(ZWD*`Y=Vb(jEfg02apri>BLe<0;BgDRX>;-GgEP6lBI^y1Ih8=;iXyhIIhW!BLI
zjWn=zz`-DcFGo0iB2{$5NeN^@)ATFO|22fJLuu7%t(E-4+4`)!)qfm8tJ0XTdSC_f
zeuLDeGpCt`*g^8cen%=1Ke9BcuL)jC8ZT74=sYP%h-o@$OrhtbM5Ez(@=BuVD@Phk
zQ?(jT+v@IHVtJFo^Fh({6H48K1@(!RDH`wSF~po5-&CZusBLusV!59iVV1IYQ&&jQ
z@0CV_$^1e6IG#95hDiJHP98!SWhydKTGj)pvX2S2Si0$`5lLutLn6akx~8KI(|Cfa
z4@y&(bScW-VQSHz=q75;N(+Xhj6D%1x86{q<SuXkuQdW#Nq?m>kk>Qx`dManfFiKM
zT&T(Cprq$jLIxN4gI-=({bCAl^_32?z9Z-{I9;sw!k2^R%dM)QK%tC%SvQ@6<UQO9
znA8cl_PaTCPeglH_7hIp6&n-`<NL1o+EWpxg}5ar%&?X>g;{$?#u#aV5X9DAavJ`|
zDheXxei`F%Yj9@}_f_V`^LT*uUbN&caRVqPF9c3Vlp)hATj<3sqYE_ID+)*E%ML?I
zq4PFL&d>5`gGT&htiYHhTcl0`c4jI}h&k`dlL6-I4*K_cY79BhjEet~s2=CF2%$3y
zJewBSb5VFSQ8btpPnSo~?mRMltnmmVZE!;8$V+?}i{luZbO-g~)`#E_P%t3KfYFfP
zhdLIJYMtjj8*z?&^gD?wzLz-v0HO4^;E57KslE>e<Rc+wde)j7PxKe+;G-l=YM?*=
zb-);G$d6qD_{guGbYB7eATms{f3<gT8gn}DoVA}>zZ0%>vRY~MhuBD;QYp4*>4Y6;
z7$6v(KHiR$6ANbS#I$Rl{Xia0-+jRIpR%n&zi<k=TX;uKRbZsPO3EHLNall$B<K!B
z@$dyUf#uCPl`R)TU94d_Bv;jK-Tbu0nEN>JH%1OH1b!YUNR%hyOn9i<4RIlD64pY<
z0*WUvzK5H!cmr*($)qe=+?~h@4N0C7H|F8Y$RJfiv{3^|0Vyt(y%D6W6#pn0QzMM(
zobU;tN`MLnrsIoRE1~tpe5&={Bl*<)?Hw&RH7d1knP~emRxq_w9H0CcxZ~7L(S|>f
zhrr$1pPOJY{kn?tMHUE#;AUQNqXcB{oyk&BZ)*;ZbvjwR-<nH+8(4RvyyK1qA5cs6
zG9`V4OpW?Z?zMS|!)cE&DS+%i3YifUZ^vlCKXh(S=!!;|Z4_|!(dLrpiyHn+%v)@y
zI^UrVtqbWYZPCQ#DDxVJ>G){nQGn(z>uoYvzzeq@+(`KOZ#Yx-r9})7MOwWDaYWCs
z<#>iW0PYPCxILow_XN45WE*lKvL~43-hs?x^A#2Rq_{MT6;OA({3nqK>O7|zJxQe0
zO-@GHowO%DkuF_lS%?b}$$qkGchYCH#;$?cf5$ISex72Sd{R*vOUEMVb>7f~a6O)Z
zL4Bg`n1p3Xq~Jqetyvmk{y4v20ms{pIV}Gj?l|;Nw7{~sF(ZMcacg`WZ7^W!A9;sN
zKOCWH$Zht!B+;`v0;{eu!C6-r0QrM|mP!2G4x?lOC0vmm4)atRTSabfTHq8{-n42w
zNvtMmpFhCYfUK9uKQ6_Zxn5k>kxYSvhk80%>l83x3NI*uE&N$%{&_N8XI?eRkt&Pc
z)P#yflTj9%E~(33I}<VjEQqunNVoj=uQ5XJ7dbfm+ntcXo9381s_v3>y@qT1ZoF$a
zyjH$&TmN@BtGRSHqn%R2%c}Y{cC?EXuo~YwG)ak4w;@Lk4^ya`76^hluCPNW(DO#{
zWj^6~;7#aAM}P<JepLmiVPYM58?5K3z+Pojz0?H~-Nd6Zu9%vrDr&h{wvSR9rFox*
z1;a4IIHwLsO02>YOhQ6|rcxy<oApxhsQa`ESiOiACj+&=^RS@k67lY6e0XPp77P*W
zK(hRz4W;k4whWCDx3_Jvu&Pszn)TN+aI%Q-3I~;~XH4Qeino6Oq%FK{BuTbOXri<^
zbctNZz}QMMg*Z{;s#JW=Yk)Ys2)Ohw#*piYfAN<~c5#BVQNLvyE~_gA`v@_~jBYBU
za;6p0-2<%a%Vwg9P!V+N;r#qFhLn3~%T*^%EaG!neCU{E%cK?RHM*)LHf2V(^IyJd
z)*`RZktKvTeQ}lDTud*r$xITHn#4v|35~L1>!RXnEyb72G}JP-E9T~6<|`DSO)?{<
zY;31WO88>$n`K)VhA8?Iw*0h=fz;@?m>H7&!z>v#s*lmu`2oc*0qlUj#<unb79(?T
zp~8<=Ke+62Ran6zE9;>!{H#%XWfsLzfAnrMELqb4K*Y1t81*&SKdEr^^<k;_LCy8q
zX-vv4u__N6JIAFxQ;z);-6-}cRby1pr#57}PD+!q;^($JL_aC{x`~i)FP$wQ?}?_q
zN^(>h=cy<!S)Se&wkfHqB`kfCT2+g=dL>0F=hJnK1uE<5dL>mV=d*PWnpF=Qx*_X{
zq7`#fiXwM`pqbQ#wT^~6;x+9|adGm?^TyM`qPFNjfw>dz8YmU7b85veeW>U7W#XmJ
z`qED(g!APzXpom>%*#x$tP0zVv?knY+^9XCrN*=rDN>S0iHq&U#IzJ4Qj&X#i*4aY
zDKenR5b1K@4{oUnR#^U7tb3_|?Iyss*#4WWd$EA+M!-At0CsEsU0{2)ux~AZZ_gnn
ztR-a%FV$ni>1C)8LPBRVlV48VVnoB<LQC0^oYOXo7wSGjvHk2RhY(PY?8rce)v-kM
zBfp+LOCWL`w~+Wlm?qwmZQj1rvBKw^0qGNGQj#0OmBwsQZZo|pEM^rL6yvla_o20k
z(ZqbaErb4YJ4g)0&;3iqZ1!gitJtoGX@+;_w~6{7nCdHZfA%khO;Zn(-10_}Jre^u
za?(n&F0pnl^tPQUUwtxGvmWXtK}+i~@a<P;j&ocbesS{5Zf{K$d#+Ayv|RugdZ7)a
zF&JqQB3Zl|`YF>QLcA1A)jz2hSbV?c2|uj)lIZSDp>N+iO(td;ahY0u2OF{07M3k0
zTH$;8i$uM(hR3n=%=NJGE$+b&rsBU7RDCgcFAv~(+aH)%YCq={(V(!V?keU-+^~oU
zp{KQ-<m0Z$8+-hho%KS#^yM6)hRJ@VUa9Q|!W)o6tZZyzN~OYS<bwW8cLjffMZ1c+
zCCy^C%tRbR9OTk=^LKhbG6Utso5pS$<XRgVXl>F>BBDcL^|9rej6CL~@I~LO<Ghp?
zmRG}=Zz2{<KsdS{2pYQ=)Gr^E<gNA?u2PFm5{g>8)d{|CjN><#*cB7H?lwcy+$Yq9
zOwLRz?*cYH#8KWEUQN=<sbI3?i9M<tKhQgtcDtKRlT*MBExY@dd6HMWU7@YML%vyX
zvzG2QRjuHc0e+s0tVWf7-gjv&y>T&}n$a>#KIKE~L<~QAWio0B5Qb!wrj0J$WczRi
zih_IHod0A*!TxstUT#){lf2WlDnnerQ(XE#J=&fMB4hPh{~<U+o;=7Y`gGN9ACk45
zOgoAQgE#K6C?9rj(y{K}tF>-J*aSe0Fj{?If(FPJ@ghN+KFVohHBNS!<&y@UR#3-k
zsi|=6S>-Tf09xlSgzW!Lc1`mfvbU5$qBhIV@$iT{i5SXTMW?rl34_gZrO+&w!nmNF
zCwal=qTV6-23a^@apFpi<Mzc;&OX_M0rPTt=8CeA*yqI?!kjthpv0W<-t*u;kWo_e
zEg0vscCaE-2$}WbxYqr;igcd_w}fH>THwD|4kuAX#l1mMpAU7fNxv|TNPU+Umh+&r
zN~ldwSCVm_KMAR+8%ekS$0+9gE0J3-*1BL^;84<d<$?d6;rCL8Bb0-J4t;{DBh(wc
zeUN2B^Ew6AJDr!xBca(lZ?XnanF&N2$$`-RO?NYU>NeiI#Y`?lqEj5%sN61=;^wC-
zMABMT{C8q+X%9G^i0;J}7D_!sZzaQM?5@xxoq4}ykVO8ZD?ElmYZtTLnAS#j^~xhg
z<Vs@_*TmQdTX+5vHe?`ir&Ze3%fm`arabsHrlDaJbmyIm4!ybBs<4LIXV_YY1i`$1
z$$hCME1a4Og(!$Qa?QkNlEMnxvi_y#BnvG!lQOs3^0=&t6()!bk2Jo9m+x(bv4)lV
zI1HT%hWF4CYZyUn3)DEr`RtyCdKV=41P!{-z!@ooqhplnu--clf1<c}^k#&5Ik^sy
z?qEb$tt~u)*7v<7xy)j?pRT7>&q=2n6d_N9t}FGnvsI$T_ueId`x?pm-GkEAyJD*0
zI)&<h>J(7NY5vCiua!y)D+kv!x?|OfOT|v1YbSF%J<_9b>b|z`x?Q&ipXBosrINBv
z^W^7PSDr5q$0t`$wuLLdhvEZ1O??Eh(Uaq^h~UroM&@S1txyR@;{&E_0*%+FH}%mo
z2}ByVKL4ND3bWVkqbY%ovBN6C8Pz#Q7U1!t+jT#0NALF2gA5X2cAKK&Zc;j5LY$th
zhEit%SSPC|RkUlJ)?DFVs_^X`o!6nU9v}Pe^)5HDpx6EaH{iWAE_NQ<L_16=Wdcr#
zL+g1&l=N9m+TY*7Nqr19%;EdfBBB?W$k1j`MzKrF1}#1X?xPy-bckPgYPt;O?YkR|
z=ep;Q7m=ZEDk?djE@Oqe5t1o@TJh9^FOI|&+i$JLABx10TJr=DE7U%%X&5fpxz(JI
zxOyGZ{IA#45Tfr<qUYp+=$ZCjs^4io+=ryV^A&BP&(xJ7sh5`@tl-~YCqF4=y^Gs8
zWw$=Bc*NbjA>M#<F;m_j`2WfjFsbTkVf;6){D}krK=?nRa5nz|y!{{fk^csEn^F6e
zBVt4N;qe>6N!cLQX_RmeKa7>^Kww|S$tQj)Sh6s2g}rpu)AWM0@cQ*KyPEN01Cg&1
z60g3#XJg7U<HhdM4d8S>G)|24(i6D6-VEAyZE}Gi${SJ{EZVRCx3lgG+zr*4@p!Dl
znx70ppC6kTrv2y~_!SF6Slws;LEI6(ar}^?95lV3S|Ekg&2cD46L{~HJt$s=AQII$
z5jplDB$x})elLzz4ka97i(MLMfG}-Hom?;Il%6AeiZI*`RmdpxWFk1<o<9|<+Hc`n
z2hMAW1JjJ6&_l3NdCOFCxSbEQ)I6_FnJ~`AiyM#4a9Ut8AF=GUb=~;%oY@-{%-mLu
zayMcemN9O~tAZPm?JMs@iHlH?J4Ri<>zr62pxx$;D@w}|p4Cr0m30>FK#LPZqnq4E
zwL4x?6$zZv(LR4DK9XXekZQO|er1Plb+$~YjOzpTqSmuo<);?lr&!y>0%RyIC)KIJ
z`ZPHAkYS|KSl3JKy%Qvpq<vJ)fQGwJoYFl!1l(oACIH3HL2O?Tt%9(Ptx8-fmWH0(
z^wSc>4d_u9o-nGoJ+9tZC$B^vzK5{S%+u~nquyq=RuVe<95t{YP9BWA@!?B|<GBk*
zevliLH19P_ZwIydV4%$$Gssz%Zq{okVd+*UH;%Wkg|!UyI+yy9!vS0c252Yy%(}Bk
zV0Qp++lkjDv}mUv^QALrr@Yh#J$%iE?nW)n-VrE`?fWOwfT@ir&0cX--PU*&(1-6T
z02?B<m|hw4PU8rau#*pLf&*r@vn#B|6dDdIEQaW!#R4T$VAANfoEge_UO`koG2Q$%
z<Ei3FoQ#+rg~>5&;Ai5`kz%74ZB4f+tob&C>^LzieCSajbU%+XyKGeg_PUcRnpKK=
z{arPU(+-QfAJB}<0vzI2HfQ--yFWOZv3I7&xX^^k%9{GT_ZAm(4)X4CQp?7mLXSqA
zX{U>cl7+Gp#u9|by2eNNRGR@KuxuouI)VI0g!4~%YPly<TGEXEFJRp@nLCgDFPm<f
z{>c+ows$um#8OxE82w8FZaK^IHKxU19t5aM^eOILAvS!S@inJT)KvEN&QWN`HMcE)
zrtY1}l7gdHC+Wo0jvq`NHlMnrfl;wP^bf8c4i{(4X`+3GL9n4Yy2ZC*-QhJE-ZbZ#
z8M7qE)w>*J$FjdT2AuezJyQt``Grh+rExQDrNpmMgDoE=Ee}G!m7h(Rrxd3i%T{-X
z&Xj5^nGHl0b>1RisSmYFdXhDgKz)uC%6)Sd8eMGU53XLn=Uf;uxo*%_M?ph0@$hhM
z{H@PHb+7#ug$Gx<eB+8gLXo$Wx%DU-d7<y?%CCHy+`a1bq7?kwCEugCTP6uoWwZgv
z`RS(YDbZlP;ti$uZdXi+cfok<Cne#s3ejXntOJxWu<js8Lj7v^_(HEAU|W!A&D=XR
z=VcokOU3@Fr+u>Ft!jO8P(<qo5rVUMui_duik#)otRos$CfYldAoq*5IUJce<AQUu
zq9is_>vr268|rL!7ITWgsV+797ECE;1^$y7NKN-(l!yl-%CfjV$jXKSX^Isdlqi)w
zMKr_+F}ZXB;59Ex<L1pNAO}T(xhw|bES@_ctP)tf$j^MqBA!YJLyym)hTbhZD58xa
zJMoXJ=didto=JPvEsV5wNP+GaNz*tpvc?4xrbUUQ1y^mhNH*Oa66G6HnZtL@36c->
zvd7#J>+RW+f$kJ3Ok%r0Da!LE%2>I~DgQUE`OQY9TIwIASsvnlnq&SC-j<1;qY=yh
z%z>Cu-i_N}NAR7~V<=pNluu3Gxvr#fqiV3;C^Q8Ql-J3t-orSs`WtI))^=w5`x=Y<
zXk}34)gC4UfjH;A>&>(~EU+3x8*SX7;GKhg*5~Esaew0S3ze8XP;6|-8>e4+q!*2a
zp-P%2`KqsuLf-@c%T$`-sjmSaL9I4Sft+a~9}!JK56&!t9N5ZZ-7&0M27afaYM*Dz
zFAkhynmTr*Jrs!!v*tD_39Jo}@@g`mB!J27n6!EnJDM=B?5~}PlB6U}$Ce6(Z*3}r
z79(cB4c}&_sS35uSQ~RNHEAE=4qDOBzLl=n2Ol^#HkLb#*G%iFSQ7+>((dZn(LqPg
zbJwk=JzqG9@l`7`YC_kygWu9lFCFo3P;eu;bZ<&`r!gLN)&ew%Vlq>VI5&R%3~A0_
z>{t@~s-PP4H363-6oQu<+AhG+VtZ+9A$0^L5lwXzGrlklZO<YJOP0ZwKS6Idp4Ydo
z9)s-&d$W0nPKgmqjxU6XQSv94mSxumr+ePKc;1`F9@#vX^31UHc3_UrEZ}RPZi-2O
zD~O2aDN(*CQV9{Z-&*qTm(<Ee82AL!S*qxtC^IA1n=`MFtZ%oPYSNVUc29dknzO+2
zo3!>t$K%B6Q`X?n^$BmdzQMLr@nD0)e2dves8{$ua{AAj2!vpNEl~zRZ4E3JS>fsr
z>s_>tT+?AT!69}{-FMz>u|nJovg5PN89%N*>^3v3bsiLAZ<pW0M0~=>+CY@_n2&1w
z=20UC-;5q6+RD`WdcxN``Fml^4)<kHIB~w3;A0Xsgh%h$Jra(m6AQLPP;h^3dv4u-
zCq&(6fXus9&12C~PF%JW=TYjaGwrIrzh%7+)lUyLXom5hm*u~$8^i5RgLDcFOBI1W
z%wH)^$LK3^Ecm@%Y&R*dUF8WF`Kq4jI!@{A?YKrbtg*KPY<@P8hiRLwZndv2h+TbU
z)!poqAF89UMpP|S(v2vuqA66czY1=qThCjws1M!^Idi5H?^1`Oy0Dx59tJ2bvTI&F
z{XUkJc`Gg$={{sGl3t(ux=^=YI@wg4M2G3RK93GIbV0@nt)VE=)w8;1IjRbM-{H)$
zKDUTpWB2)W84~VOUjHxVlEfw!#ri)Bm7x5eXypHCrLOjR))t2Uvz;Dm*eD&bBK;#*
z%C}c8!?1M2{LyNY%8%^7!b4Xl4?Svp6)~}%iB|7Rp@Ek|x@psEJ3`k;jp12e_Gy0y
zh%WZcy-{_mB6)FZ9f#wHJ2(xdQwx;d?fv$Bz0>~)-KxXrh|plq(@WSS_B5^~Fw0OE
zk?0hg_0HQW;Fr8npG;(Vd;x%HsBNDbO!gp#=1D~;7<jXcjJCJu(rf40Av#h@PU!a_
zH6RvGWgJGN%1s1)#Wc{<MuQ#{IuI4Oaw2oa^f)ji8E{I+8Fmpw;(-81<ErQO6(xTQ
zq#{{cIex!7^j3{7QAh>I98*fT3zNQsI6^*vNY;WxEW3Sq&CAVwA*}x+^W8(PaYI$`
zy_MaQ0^zOR+t>2UhS%wP!tfwO$&GhiBU@Eqg9nuw9NTwGI@fUbKD1-0l{60dvd&pM
zk%GJcd?T;{1Z9ZQyG-BaFdwIlFV?1?I_=w0a+=omo4&oUCXwwQ8O~|Jj%$H@`r4O>
z>n1pRf?xLZvveJO6@Ho?)8@NNcqfn^9C1kVY$G6gb5k*Oh$`hOr$kDeD`=LlCE3gI
z2j8!^6Km@E4bZ|-u(L!o-`|)g)o?njo}nGBw@G@UtwiSOdu1KmlfldH<#B~a<a+Gr
zHIX^Q-$8AdJ{c@wO!P)w@0_z=CGh9+<|<WpS9^LV1sbXgwmja;Us$$(YYKXjClicY
zfB8P`>C5wHd&K%Dnf<;UEGTbr4&{qpu!!sky@F4qPbT>_*2-}*Wa(p1XfS*3y_XsG
z-QL$`O(BoZ&*W$I)8q7O<~<ILk3z&vZ(-R8n(Q$|M%l>`lhoTL7~EI)NRN(DIa;3T
zY+oxi*chZw;I1SA2?>W$Fm!)aGU8a2!XV)Tzj(Ml`>hXV(!@;OvVCN=4xx<mw4VI9
z-!Wgjk^XoJVb%iYwPj5tgHf=>{{Ax5sQixQS)(0=Dm-m+FiVTw;8ZQ2&>76|C<$Ly
zeA3To0mvw&ZfrwSxt!A9T>S`&^o|)W&4U4?AiR!jc=ecHAyzY%|GR;Yl}+Nq&aF}+
z`F(JLf}<Q7gxdbltVAd2wxpF}tCQqhZ8vcYPwSz5Kb8AsH?i4C3a?AMIWESe9ZYcD
zvL+{3OhZz+VNi&XMD`4k4jO1yk&w`Q{QzVmCwNO+cMr(A5=M;ZcRXfL86Olsimp>>
zpIS9iLde$l>-6d?_ez*Be1(2`Rfi1Tu75m7H(3;e_A<Yk+P#_V=8p^hmfOq%n-~qU
z7`UaNoV#-hnA?^<ha~_mpgi_?0_0wOvMl_s?Dh!om**<yIs;2f(n>;2w;eo}`-<_H
zGP+%a^&!vKj|`U`?>fWEfYzU^ZoKKiX>6yi2ZtnDeA@!b0c+}Mqumxo)Fjqk!&)+n
z!=oW-U4~bt{lID*X|0Tc^d5Sk*XEW(AyI)=G^BLPc!PM4bj>h(w}cL5x;=Jil3#z%
zSbI_O!i`f+E9DZZ%E+`yk&wa?HXY(<ig=@?@kX3(b;(!Yt$1Fg>d@3q#ncO&i0fR{
zOB-;&zk6`QU&7^;DzVT+D%h(t{rhmz2HyZFQ7bO&6MwmDhSMZmkUFTy0tPc8B0TIA
zhDQbQWG~7v;J<05dcrID#1hdwAPn=<m0K-x_b&y#+w(SE<3b(+W5c!ymbGOEQ+e--
z>??rB;kI3UB~ql-dur0!FCmtu<<(n*9I6}5<0nIuLu~lVIGb4%lSSF}5SHWr*j$3J
z9;f`vJ?bD^nTo-L!Z0@)17&4|d&R7b9cM8{u(gG%7Kug&!PITlf+iFJD$(rJaVQ2_
z+wH=xRhpUYtt{x*3WMo9&fXq&n1kUzW_O5%8l28n`7JOc)V0WMU_Rq%LJtDPH%&t|
z=%<|#&Z>bR%x7@cZOsH|KKHqX-2pAiUo&{@F#0--vu1Gnb4uO%C#?qPNlfY%8Y$44
zbvsN9b@kS~qOIB)Kyw37+-q<__b^^7R6(@OCP&XYdI63NkxQ1qtdaX5xxW{oqtpvO
zQeT<J()E74SQ8H1o;+Fe@_f=4qNd=R-g$bml@0+})GFO=JQ!GDyC;=qf^gQRg}PTx
zF7{|sk0Ah&sjwQ!ynFmpl(#GIrOr!%Y6<&&Is3+bPu}W_ioT%Yj*PB508%yapd)oa
z(zEZ|S=AVafNYwmX$7OK!8|m!E>a9ZY~RU-p9BjwifhAdk;hqdWggA25ev48-RA)!
z4>*Wc)rHF)G}fU^Jq*k(HQ&@_!E>*KTI^E_)e$`~%mj}MVD_OTu8ldA09KI^x8!Tf
zEx2rmq}8F?7%fSZoJh6sCiqomUJoh%7h~@j97@z>f5*m+Z5ubXZQHhOJ2$p%+qP}n
zcJj~Ee42Ty=6Sois=uG^>a)(?d;QisE0sD!o+65BROjBsOkuouN$E*u=1STk(F^2Q
zLIpfHe4CjX!+PJIJ&(?keipPU0Lu6INaB#5_kv*o4)dIzrB=new^Fil*GmX}tE3Wu
z25Ln5mV{=l*4LaPSzS&;D(y&5%#jFmu(NC|3~~Qx@6MOgurGq9((qpUu$)l{RVA7r
zXoFaOZt-8nJ#PS?r^QuM8HnKJ{KoXNm{TtVh4LPc`iQ~iCbrE@b@sFV@;%%H(cQ+@
z*r8Cvf=q(EPE(R(SR1qM#>BI}t$0`^x*=|WrkMT^6{=?L-NzGb%RmJ}_#36gZk8+v
z&_=+8s7BIS$}H<v_ckvacQ^8{H$?S{80m?K`Bjq)%1~c_^QqtekgPJ$hEsy^4a!o8
zYG<;8DWsnIl}6G8)uzauib|7;Q>78Ni}3>Ca;e_3LoSrsmA~Re@lnrSm;6G`dr#Y~
z32_hF<WMBf<7m@5c}+a7ZoN{XYurYTNe*(M2nCj{+Lm->!SL;Zn>*DK>&}CY|2XJ4
z2haSRQuUnhD%Zxh5eM_Qkm|ama7Aa0Hbq2eyo$1}V&yVfe9v;_x}|i%nq{5T&0;iH
z8S@#UlJl8wqIEkck|OgO$kPVWeGZfgr#yl(U#jMG7wzf(&oYN_cm9KPrNY)bCCenm
z`wtV$2#i1rr>I~H$EkCKYUbnrVl=gj4r?$20RUwG`cnQ=rODdJkn#T(P0@<hwi)#Q
z<w#*Gnopz$vo4ewZ<ijAuZ$dyCl`OYheWUnAghh@J~USR`LL2&iDQ|64e*|EoY`^&
z_rLIiCX&Y`*)V}n4eWcW_&!>)R5L|BCON85hJdE<nFrBV(<d#w*H1mEWrBoCR+4Wk
z7+et$p)!Izia;!7%R{`yOWPEfW$u#^ynOWX!^;mK<N-p1NXi!h|67c2%ns@yW)|Md
zMx0OXi24xJpRKPF$;uclhUoYQD~g$Y`SISY@NtOVvd)epeNrVMG!-#v(ISW<(Mpj3
zi9=T)ij+=}dMN{c_2#8}7B_L+o1n#C8VZxsCq%gV%>O`(KKl?Q?^cCCzkg<%H-saK
zD2Z!2PzYCYa&35qgOp^+Q9{3a*1D?Sj3u@^O4J*+SGTU%h0oQP<_#GEs{zj$j9W_=
zZki8N{M{74Y@g-+l#dnhOwyW9KZ<&exPc&KYiuRh<xlkTPM`GctfLQSE}nQ@Ja$xz
z+4`|CXt-FE{mQH->$JCIBPFwltTA_&R`nm300cYfX7Grwd<2W!{a3BE4#grBefY`<
zY2GVB<Mo#XQp)Pp<cnDDF#|{&{_Kj6x@np)@SlUV_j)P%i#a7Xa1|F898uEaCYznd
zo?0zf>sng&>}?s93-ZiKo0S}^&-w1jn9DJ^<!npO=u>U<>}-oE_&u-3we6`w;q@rs
zP25f|h$X43niKXH)|dsxgY=fO7RzQA#<J_kVN32P=y6ENEZ+ZF`V@wzB<1)Ggf_(c
zPamX_xv8<^fAA4^saxCbi~X01FEuIx`QvX?$Z5`+Af^?PCO8rVF?u!WQ-|FF*~MUE
z+kw-6ecYp~+@iZq2V(MkeNRxovGt_0B#RPg1Kn;%lwWliO9hI?`~BL|;Ch1Q8#)xx
z$7HbQ#pBOO;bWW~pr5ZIFzk&E1~_@j2lE&8@7v@j4<exk(sdoZ2@i4J3^946lpYU%
z25Rg=^hg#@uWDTH`j!AWGBE=YhsBVg+Pxp3=bc)iU+8YQGqN4)Bf3?qhWS24T4LBq
z2tICNWQO)8u5~za_pFSx6=OHX*0kuF1~p>%q8BdJ7#`vfXm-jjB}a<_WrQy#3`>Tz
zZZ4cX_G7RYcB){YQr5Rb74RmHS(DFh9vU%E;7i?o+i6X8WRW2*C8;1Qx|;)5nIG??
z>d10<VjmyZzp{h*wNE0?7#A-HJoix-`awmw?!;G|1q1v}KNZbD+IOt0tG3hCA|q<B
zv8Z&0R(oo$YsyD+8)sSkJ2YVpB4hNgkLkD1zBY9)`&(?qD+9pxY>%_XZ!^H}JCepb
zl<Ml;XCKD1Q{ndnDH6t@$cbbfOsA<7TCYEQWrPUv%nr(QrYn{^ciKn&!@};s$06is
z9tmtdyRp<N)1omNFT4Kk)o`SO6sVTPub3!^`n5&7yN{jJX9p5dEv8W$By+oUF_zvw
zdQ^5USC%Tjb<O3AwI)>ZaEGqjk2qs&;e8t57Y0&F?hP9}vH{uYDI=y%9Pd-)5c7N)
zQ_hsou>zgU)Su~l__C*N)!wyJAD(lk-Pp|DN4N)b9(ysCGr7w~YmqJ!cZECMCtm}H
zmzp`%sp8x}7|g!Al9j|0nR8c*7+XG=J28{$U#GbpZk>!LQna(;sPA5D<r3lSmWf3C
zgY{LwjR_(;2w^o<$v8vFBm&LmywKOC@>##l>dzQ);!YQdE;doFf8<$>SLG<%adb_c
zlw3LX6PLzerekJ|`q=jxl+WbL2h_%S70n2oe%j@RY0U#VQ6%AFGlh?E3}zRA@sA3j
z0x5=Nw*RPL8@?zS>Fgp9A08s~A^-I*nZppEI=2JflAiZ5h~wg2Xdd~`O&uEE`59{K
z#mIhDS`DgcF<QKDkB>ucncLu}UD)a$@%-fz5D6ht8>Jx!td0R6ldDM$ja7<fRERU0
z(IRHRh5Z7sCR$swg-p;~Zz;5-ELa{8&0(8GW96j7FbUpQ8qsQB^Qcv?`|~7q1l6dZ
zKUzCJQoVUi?o66PSp=&4fH+G!W6X^6{kcG$sckw@1eJR*MQIlc6#a+yZdAUXz&*0R
zxJ9Fg)G=+&26;HVks1n6lM<rQUW?+7&#pA-@}E|68Wf-1<NklALoPPQ5oKK{581ch
zs#Z92(J7u{A4wS-gf4L!<0!DY@#7#3WbwT-2E_|4E-?2eEfT8Dp_6=R0HSBn=4nJ9
zK8c8g2WL}R=haN1sfirmyc`^?BRL`uL$5BKb|Sh`xKr33IPhc#x*?HwkINWSCJSjK
zGS4Y0fe-g7E1y>=YJPk*)Sv-T`kz9CXgmj)W@Z3oL>iiJs&{%D;uqp9t>aS9qlt$5
zV+^PbK-2NhPkMhXJ_m>gfaFG1;!AdJ1UI4yqq5~dH)NE19Vi|$jFu2nHPRwA9E)=d
z3x1m5C-zDXjyG_!FmFs<B9=f5wM#<tqMD<KeML4Q%*T2SDxndRXCt1ZiU5A<1zM?P
z(T*j=GQg=5W{Co9{PJn%0vE9cfmmR&1?v12^SvTKy{5_=o$Sdwr9qKpgC~i*C`O|q
zifGfj`P{S#<ii0fRCLb#x+)I`ur|gHD2U68V`S_rf>eMHYIA!hW-2)!=JNMX+Y_L{
zOS0=;O-H8$RF#n<)K#jsLV=dbU3?*RlC83yV4LeE+Sl(fV8?@BM{AdNfn_X4fu*HH
zZvNSjj=544jS<Jmw%I3LGuPOTYXhdD;HETbDDZrvjgMP}AUwLWrAgUl#{N1IeOTVJ
zB?+K2w^}EM0eP84Qf;6vTLlU!pkv~pYPMwDB*2Eoa5J?ZBVZReP4Av;4kt%)JeZv=
zSjNMqNt69O?5YiG9ZV(Nd_hl;Az#DJ?4G9sxSS2Ul9M*k^kJ<Vo>aymV4;4w3NIXo
zE`1Ks9_^%K<h|I!rKCzp)guwcz@rO|i<-=ej&0{_K>1ev^X8m2D%Fgvl}46#QUxJ)
z&<qd%8c7W;9%I}C=lBKh+M&eJA4Jn(+^AFqT(2}Gg>owtNi!tmU>K6H7@`Rx`L|F1
z5KwJAvr463{|rGy<1D|d<t^&vXG)d3P?Xn}o|g4{8kWrr&<(oqd>b#;RjF|lkWr?g
zRNV!WIw|2mnD><vD>O$J#CmZUsD^ScBt$^Z`G-0u3y-r*qQG@#P~OR><<FhgA4<oS
zI`mj2ySFyDjvzg4ZxPDg<(CmgYZEFNTGSvXxhY<Zx{D<T53F-h+Yp{3yQ^unowZ-}
zt}i7*x&H0?&<N;seSxNqjRg8Uj<G0j{tyAaUGo;e7XK>Bh8nz%N1!Cm@XOd+qsBwp
zYDJTqx5yRm%J-#pwRkJBT~yl{{(Zx*c(!Hcw6j{6PC3?B{m;z+Wi#|IkIzi0FT_!B
zQOEjuu$EY<$a<I25IPM_p^$MQmJDqLI9XmMFfEWS1Zorryu2Op9q@pW=6{(%TRWEy
zw5>)HadU6c-jfI^i)jcA7*`EeaKohW^w4eUXb)syN6n4$PsUDtk-;Cn!aYL#|6u^?
z5|7Ho&PXS8OchVG>WXpOBV=a}4u(KdYvU${&^C`r4$t8ca&yY6N-`wl^x-#TZbtDv
znGLP>M2S;QN{&hT!g6~bi6zTg2Fhg!mjN#^CfNd%Pqp3Y3X~u9HjK9$-)_S>nqsKE
z(uRIGaR7gi;Hl(QUEL!VKiwftz$<Aae#!}Ev{H4rWE?H26e#e^X;y|XQ)_JKYcoDu
zJIw)zZP*gcV2bcUY%#^8RU~d_b6C<RdGx)*;sY~~tTx_|RX=FdZ2)r?w-mhbmP8`f
zdN{(^I*qPoXD%Z6!j`b!@F2fy@bY5=S(g%304lE^B0zhD)r$Y+|I=0R>D21z=LadC
zXxXKY6IRR_t&&c5Cn%GI3MZ?8^rEt(5_3Xm7@=KL^#kxfRoRx<5BCfBZ&)zS|DWQj
zoq_THeNL!ScemYOL;cyw36S;|c&6l8EHop{0E($%%6<*Fy0&6K|7D7eq@M=}kv*Y)
zU4Mv45IVEj7emT15$<?@zK%L+z%B{|(yxzPe<kN{4-E~K&0Tr(RnYJ^gn>*Pp-&y$
z+8QV>?#x-ElUXmma5d_|Kx+I88iXG-55y<6yj&+13k!7d7c>w;VaQ$;z|`athm=jX
z4(bl!Jk<0=4nn>{>_42X%E*nrKoIKQAkH6!{fF}&ccS4hJzF5zqUA<OiejJ%2(_{Z
zWB@%{z>Nfo7ZneU6$^IkWNu<9-WtiDen86Pvch>D(u+qF$=FR(B!912^6>h)3fC7(
ze7COewSyp)wV3ss{Eqw26*IcUM$eNoG}o7G(SG3hIYEoV9#~?(_nyP0Gq&`kdSe4A
zm`Hh+0AAjoZYQjJO?;+w=fh{ai`)X3VHMgsmcrag!_0<c%n+T^%)0LIpPy#m=F;(s
z36iyo{}d0>H3U61<d!gXm`!6a*E&J!PgcG(_IoW9*XaHA0Q&r{BPzr$oJ7!B^fCw;
z@|PL@D_{$PX6{Fr7OD!+N*uI+wEdLpVar<%J6O@{^ym9pX8tm3eGgfm@xcj+qP6^r
z$b_=5U8pImh6txxbVlirl7Cq^F^Fz2S1?qSYqjW>pZfQS?kOenm#9enI|u9C<;1ww
zsTl_*V?A&0-Pr6Y`1GvSe%}+{3ANV-0c7(^bM6z4py)$K-+g8zP{$T{?PrNkVZ?)>
zQsz%U#F2FmI0q_lK_O8y?B||Txp=e6jbC;NN*mni`>_@NpAzmnSuuBdzi%5iLu|T8
zW5v35Q?E{!GXp!7+K);ryBRlgBP9~kEe@R5%8z!7?E}vGk&4x5E`=QX{eLgcZ?DW<
z!wep}y4K0<?e(6{#^z8LPFc>eiZ7Mjh27n{q(b}S53p~Tvkp<os(dM?e=dz@8Fe=y
znyYNr(hw0`DJnHB^@36I@!8udL>U8Q2H2>~j&|tucz@)KOm{{adVbUvr+Z>ed2cX4
zUB16yI04?S3VC0#NuBP#D^~{4A|PwkH{Ep5o1)=2Nxk4RQyu$n&3CDp>b0QeNv7yd
zM}ck=W5@!4MwWTmx3=4{QX^T-SV9?`*oPM|bl^~RPby56h`n?w<Ox^`BZf5**{(z2
zMXbWcN3ePHqJdH@zK$A0O;>s{0+Y~V`=53^I8fF!sX~NPQJon|`)qL`=gF0QTd7TG
z3?pcCPoTgH-m2RC=FWRcjTdeNkRfx=GGG}r$1tR3fpA!F>l-;S@{@Hr$<9TmLIdmr
z8(A@ihGDU*;F|CWsS&|O7w1cv;NQMvnhvt)L3|K2GNzpT4y$YZ0?4JlPG@4bdT1YT
zYW)WpSdYL?%=hQerA4U_#z4OryE3M~Q}4IFUmvU(eglHi6<}Ox8(Q>iR1E3UJzW}C
z6sVk>7{3^Cb56<ae?<GGO|l3R+%6G|KU=|uB-X^_g%LQ$VdOWpsB4ed(7j*{FVz<3
zbCqS(4r_Wt%J0!_aP9rt4US6U1yrKuhZ>pmwPeN9mNMyg+5&XS4D}EQ081<>nF$j#
zOr&l3Rl|g3=AH{A`s!U|$x)#%xT(k}S~J<|3Q#9`$zkgX!m2~$gX)px<Xen&y-z53
z-)xQx4z?45pzwlg>wUW)BD-NlbEb~YkGi`Mx=QU|5!{mXF(l$72DA6VvI7z<F5+CE
zdiz+v=3XcIz4D`yns7HYv7+<X(O=L=Eh)UZm_8!=XmF+YHk7*h&P#6rzl@oVlv%nY
z2L>-iHJ)@PX1hvOwA?hcWCV5Q`WQ#4h<LvewO8gSQfSa<A5MYX8!jn6$*77uDM%V3
z6hR#!LhYhRAL`f{N-9<$M)TalijtMF5}X{hqa&B=(}P>h_?{^3<Kl(23U{e#vrx}D
zWv((JJ-P?re$A_~#XRk&=Yf$rJVNkU7w6DXKD$m+`%1LbAtzAfCh+tyrs$QW(xfkP
z_pnp}c6_)^OmQSqWusKDc6jrD_zzTM;Axs*l#Ia(Y~6LtEcam+7#A`CfKlcYtcV)0
z#FElmDZ3m{$l1nG@w)E4pJvOr0*{n1l+Z%5y;Ki@T`CM^DJth^*Nzbu<*)1G6R0^d
zQvXq#NkEMQ((Y>nT7M-c38V1o2lRdI{e#!x$bm(5o5zba4MYr*c>Pq@JnbBIx5vdK
zc^XGo*S(TOd&$ddU}8!X4QA3Dr>8#gGl9iMZk6#wl-~tVp4Jh*G$Qxday>shDlF+*
zTxQB`a+7C;<Bf(xX?Vh>o_|$F909j&mJ=>2$8Fw-xWum4h|`S}sya2NMueU5NJHyr
zNl=AU1!KRNqw?7?@NHjJvg@Ss+}UVK8m43NZdX2kg+ecfJyDs99g%20<D_j33Z(T=
z#NJeZ4w@kGhfi)HiV$ikd$zT}IH?3ZLuTF6(;*v-xT5jgVPMivsqW4h;Evd_lxCY`
zHtu@M><11+Dlu}#hZNEdyG_Pd+PjnF@`)22l9$O@iaQ*YXFeF4RjyNrayYxa`x5{K
zmcjP%H%ywlN-JKyEZJVg2__}3ZWXsKK)bMRD5?tPRG&Cb<FMI^Uoji?Or5IuL&3M7
zuO?h20d_s&zRy1^9v$EHMD^yj%@cVv$pYNq@$6hr82g-_6tq&wY_2EOfJAdrh*?#g
z3dnj(E4l4A$CD*V%U!(m?CXD3dZyUp&aQu%Urn_CNmCe@+v*zI82;ayVoJmFm-~hI
zqnl%J0R&h!8;{cnYB5BEEgBQe(TuR+dW8ezADh&~A`Ep%8I$nd;c9|+c<o?J5esZH
zH@wedVtR6ykwy~wg?pAT;BY5bmw`dn(ewTO@En=7r8~M575@NALrW(+Cak<YpO_Fx
zl9Qy&jSucFv%MFP-dVt0#WQOK5cF@ELegA*A&NRON+k%($bnr5=yFp5sihx~z&A;f
zF&0lu-l4vdVt((hN&>|MMIN4F`)&{lG0jP2=8&+&827<neyuopq4`#P<9@?b?19H2
z;P?RWOp36qZ0wjB+L87e+7uMI3AHJzWNLOQeQ#ldm<y9ky7R8R+wX55xqggaAXwtk
zlpHN)`2mcHSN6c8e$5LJ)x1}l{C)i~1{HY2P86+%a`0Bu5R^;>;dH3^Q|&IhBv=ED
zVeq<RDs_pX#@gZ|`d6(Q|6hKvW{<A)k<21HJsGn&nQN+H^V{>o%tup%u+ma?aZ`KY
z_gZP<Vw4GYHis2urs;L#=YVwY{8|HYm|pc3wfprB95L+W+|AAlo6<I!n%d`qCJSX9
zR8|A^@rq9M5XS{~)UmzR_O<BI(0JoQ_#R!S8MRr@re;o-s!~Kv)Q46aTi2KeuJDBp
z6ly;X(#q821SW#7vwScpUK6KrD2ZXy&;-?zlTcqNTG{Wvq{ORR?stkmC9~<b&xckH
zZeHHc;Qo+wKHo(+-p<}k?7ST9*t!UFK%Vc8jNdCmhgW?$7O@L=YZ(;>wJQhk&``vD
zx4&XOREd}O<sV!<9A)-lBf2`yk<+@1pTt|3(?+eV&UFHg18)Int4`lJh98ib6y2gX
zP1*glsMtS={U{@)*6?Eg5)Q65Hr$>JY@ILhcM8o(Gm<iz$n-7b+8ieAMr}4ttvfO9
zS%Is_=FqBGG9mzW_SBGG8a_l(21sc`KC-$8%dyEPph|zJ)iQEjmEhuLtv@<IU?lEo
z+i~vdfTMm}V(qn4`9PZ>s#A8D2Nr9y1KhVyx`IP9IMv&+9<d;m)&X1iVe$ue^J{je
zSFh)<pUi2Bem9jN10_bf6d0j3-|gsB@*+l(<MvdD1F!~-vE;mOPA=XanC{G^PQ_ik
z^C#<iJRaVEbw3<CSlP@z{BYNJ)UVN=aQWeI03YvOoCsyn@ezZ#DZt9O5V`&uf#ANc
z`p<w7A{MV;_JdO$;^~`ShUnrSJwQXSrj#Ve_Ufd8g=rlz^_uIKQu|5(F}UhNkYAd|
zk!QPTcx?2DFZ)+pe+AHF=y0meDMO7Ery-_>R7P=S>@O75{e5M>?BKNM80Rbz>_ByD
znd!gDJxMzpXE}MXuuRmKegp9)7E=?_sDAv@3yLP#kryAf@4Qk{f?91@lZ_}0T!d1S
z<PG$BaE~=*U<JXc-mxj4yh}3&rI6StGoLw}l#YmCOb2$6Cu?9&jBzUl6XL>xpoX=B
zgkw8Fk^%_hbEpyV3gg6w&q<Fi?kC71N|nj~6z{{&>mYc}=Tx*CkY#7Y7Dw_flmm8F
z#{WqH#$-QHFuLQLz&EYJO~njK?=(mmS0LAGjSs3$sOJjvLk6F@j2=85Wg_?w<J+1r
z{h0%WVayiaW#B0F8Irqui-+Y-3CW;VV>}ZbR$R}P(^cl=Y@gtd2jk`h@h1-m&DuAt
zk=lm8h1>P>q0z=UBLznTC-}}zOL2xktyp*)rdcPJdO<AIzd~M%f(ybt^z_}-@POiu
zW=p^>4TKCPO~={0Prr!>Bl!Sep~LKW^-ur!a_W=9Oo=pc;Bden{NaVS0Ny`o?SXhH
zwL%N!rbmo35FXge1kUUwgo5Zy>VB{GyaNFwe+soNE$DIOF&?Nlln`^hOQ!XvSP|TJ
zz^rp)k7qFKfZ4-$tEV&*(=<KaJz8yF6~3u@!MT|nD1>F&4-n<H_cMDY@~s<VgO2}=
zdSBBU(yhC+F-*<fspWx$5{5k}oO9$6%9{+uOKc(<bf@$NltEAVxEe<}`TkL(HS_!D
z_Jm)E+>XV3qAZ^t%`qU=5pf$z1V*wS<iq4md|s(O*JvO;%kK&|aNTU3zq@DN)MEHR
z37Iii%lC<(@Pi}M61ufTlSroKw36D_c*kDx?|w|{AaL#dkU4mt%TNw2S?>MtPP%Fw
zASv!l0IUKmPU|Bq5p>(@RwCsO1QoU=g_HxJL+vB(EFd8~@fwtwSCEN4jYJ$1&B=p8
zA{E$HpWd!I(`7pR>QWUH-!2-gnuvAys&*jQ=6YsjQupvaP)Rnl@t`87twd2EH3W8x
z9@p<Zd7-#E3v8@Fifu=TyiSZ|)9_&0!0mB`ZZ}q5H&ra~pm;zi$6E#1OPcD4<$+)k
zY^6o~n4?UzPHO7R>gTvs?I1bDe$kqXw=_wyb$dI7YSx<-?t(?vBsFbml98bXU4je!
zu#rup8jFjq_pIdE-e$K#W=c}B%cZ4dp6EP<D5hR)EUcAB1Y*AVAyhF>LhMN9JwT{H
z^9m1fWbCe*khvxA91iU-**}vlHKTqtpFRZLi8FM&UZ{bu0+^SmFK}bRY79J1OJgc)
z+KN@XrL>xo>a=-0mr!PoN%x|f2y|STj11PutQ;6u^BOPmWrm7Y1>M>-_^{;M-=5!J
z&6Nm~?E=c6L5nNYSAs~$T`Va|MQ0YReh9uzg>xXnRaaB0PH>^C@;af5{T*NLD$E=y
z_!DWMvg9Gmvo6#;M2b>gF5Y=W6Q5F_nD&W;VvgW3HRnHE(s+f<PJeYjXB*pGh8n`m
zbH2{YQo#je&OVox=?5uQgeYOWJiJ#!yJVC}V@2Y>dsO$ig4G2V2wO@;K?Eo|T}r%k
zvnZ^0Iqm$Et<*(vVjB^xivbRNCT{~3+O6!Azi0BBhlhMA(z}c*XOZgwOvSH1BRoR+
zxsIV8@IrJ=nevCzt4lNNh)TO4ZVB^+J}BQFp|7$kwReJss?L~Hw)<)Z;nU~HzI$3a
zR(CS?mp2}HnBC$V{_$L+HvKfw16mWssXsr1sPeAQ70?GZ1&R?~)^R0C<?Qrgt%R5M
z)~&CXkOK0=eQ*YIJpI?2(HsU61(B=M!<ECGwHsUaYAv1q<}PFUI4P@$9b8BTYIsW%
z<SD)6;ilbbt!)I@*?<RZ)pF|~*kyX&*{uv;U)T)hTmf>5PpvmVH6#+9B9^B3?rlz|
z0TLvnC6)4AlY!_;(-pxq4Z2yz=h^%9>t*Qm@@Z@>gIg31OPBrNQTfuB$}yd_h8{5J
zXe*dv`G@E@R;Gq7R<jQ11EYH-iP^u`xzEiDsUbhBI3U0|057{6eMD`pxFGyF3&;1D
zM1newK~3Mxy>f4LGu65G+###iO?U5813f%#Et}wG)%<-XIfi<NAG@!AGH=(!t?x*;
zT<0%No%|%V_*ac~Tw%Ek)>fi3P>|@(LbTHrDEtWCD4mFbn7BK49FP7BnPBiK)|TOF
zEaNUIWMiTtu;M}zjRPpkH4kxx!=h#eH0kbF8SLGSt+kRg^AvpK4^&EeEaRdYL?V2X
zGNOWK-Qx5&(=2soo2fNSDSm`#bm#iS;|(UQtf0~0rTXJz2~0gNr;%y)p5<{H7svwF
z=6P>GZzc+y4PvR{td~MYY8Xk7U*<M;g_E#yElA86J7N9;=+aM9IC~F5+>Kr|tBsyo
zv^df(NyDU%PmZ0W6-<@yw>c1UxXrf|3F}%}jeskC!j(e4uChl{oAL`a=1_Vk7i!5s
z|DI#0_%E-^ZfNsplFs^2=D9d-%SY4@BEO*19W9#9aIjg)fanCNb|J=~fO1#}Mc43;
zW6hbJFgab=Yi@)6<-@IV*qM%anSy7~gHAPmD{p7~`$Z7FNQT{f5|roYu+!HucQOIr
z<%yXN2u?>m8)Y5Mk)lgekt?xv26Dt{OaClmJnwjVep6Jd$|gIzasn-$%OfIW3Y_oF
zKh&M0sNJgcja6M!%ksS`VOdbLFuwh`t5?+r7BU}J#_Y{HPadnbPUNIKe86BF>a8nf
zp{AqSSH$twiInp?yR-peUfrn4{B{v5i}}FJtNs4JvNiL1S_Nz{f0L#>enWfzPruCn
zms<B9%rjTq)`}Zq2|I5n4Qo)wzr4$hS{WEC_FkJ(5@M85o(}ktwjk=-u)3~zsa=*!
z+n#IpxMO8T;<m014dtP}^z8q-d@_<d>zW0YN4Kqfat2ioq8c^3cY<PR95`Y|H{6-H
z+1Uwi;@6y!O^j+shZ~5s$pXiMI!E9r-0_O!9k8O80TK2&A_mOTMTqKCWAcNH5Yr(o
z37I?JqJViGmLcD~oAFuuxYMQ?>&1u$6QU0iwT2VIgk1HRX2iHi_AX6$!UN6G<7Dkw
zibvToV~Amjja=eDe^=@C6IZ?uEvRrb2JQteMiy?c%c)rmV1rzyfw)`E=nm$cjCizm
zhi&5cY$7^ZHixHbMi0)MLp_H?6{~UqENA+its@QKb$ERI<&G(nS_EP3co*yQ$Bv~-
z3-4z9k2y<(shezf(%=FWtc+fS%?YIw&md^Ew1q7Up{O7S+$F3yJq`uUjEzYFIgU*K
z*!ydm6KA%GJR>Z*vEb{zS#Vj2I{j3Lx)%~G+20Tol8zkFg46ikOf-CT-|9cDVBll}
zx^O;ZcndsVKKCB<o19<KQ3ZO7__gH;U~L$6%}n1lW~p)RcD!kz1$)HlI>rY)c`L)1
z7%<O}9ifuk5&eg_M&vMjpL#`q%ov7-On@71%)OXF`#|T#S;RwI<mXv62kigN9^<2D
zy=k6!V^7`WuEv0zgCkO3zf-{<?yk5BW-eZ^26hol4&MyS_ctDx3&rff?ZEo*dT_4d
z;o@Nbc)h2`Dpk~#xl8W|^0yYcs+Y*a*1^hbyBRqr@hAL@nj_N>>}lItwk|!re$C`W
z7w^p$ywGIrz<}F6U;RFOC$RjQPvKV7j5jx2YrAA(LhOHot@^xPuP-}$?zu(%p}oA=
zHnBRfIypG_&cCj%){o(*WHx}kR`EbwFyR--u|yQxO$K7;yrZGwn!zl4?+#N=yZJ}D
z!WtUmWQRM0%&Gu6YHDDIh7LAhnjAPIMZIco36US_;gMytQkh5B2pt3NyZR1yApeV7
zXN`WiDMFCJBxjulZH9nHHb^F@sSo!6_Jb6Tyr|W?{iD|3YT>Z2xoKwuBcNRwyrvyk
zO5CJ$zLB9h1fuuWGYrx_j-8w)(w!y3kGcpj4qT*PidlcW*VQ%PS_8jL)W3%k=7Byl
zBF{MK+20KOlsQB|(G0?9;)P^)J-Cp11%rY`RAYsUI*mRbgZ(am-4g6qO>b?Z4;m%t
z0_DTd6|)sj4jeOYn^Gte7q*uR`M!!WPei_g3ixhsIHY0|{g^z^0L7irfu|_r#l+7$
z#$R4J`>mr8jPnv2iZ9B%9PqqJW%Y!v72|ntjx9X~N{=B#_XZL3ueP`m8q+t`V7p6~
zX)9_mBwyGW4q&{t4IA^d1wb;yYLk@ap6Jt4yjP7^EaU3%@z&|)sgEbMrhuq5`kQ9;
z`1AR@Z~J3sC#&AX4BY))Mop%u20R*wf_lx)#a&#(jxIfBU$VOJbh-d4)Mjaq8ql<T
zxRI}vGT2>k{$<p@I|rI8l6^PKB3MTrVHW@jt~<JN!#bP9i-^KT4Y6pRrMyqo4=ST$
zVJP}UTn5!LH?fn$qvHkIyuLag#}gQ`7RqizF(}$Oco-;sd<mR|GZlGuIrj?+g1Du-
zAjbbSW4;TV02rIsofct~?~wM5I!<|h@luj>Q~(AGQKycXm@ugf@Fr&DlXh*3<O<DV
zL#WZ(_U2#AINx%&v_-w?@mx|8hD2!T3JR&7Yw&{&Dla|3h%`Q6o>fCu-nLP{wpDSy
ze6qav4umb@^Hm1CXh~?4bId9Koglbr*8`Zl@PA|Nxcp=vCn*4Jb@oC|H|E*~dunke
z3HYpPz{zU(0W&Y3j=nq_QjHjp!qb^>)sa5vZbDk@qTgf6*eg#uYh<`yV5BiAHdWBR
zVp)s<&fSBJOt{gf>T}Y834b{Yhl38v14#fv!ryXfE-`~P@xMN|*gK!8iJ@-M++D>W
z88hkB35Kg}|LV$9h-cVcu}nm~ztGnDOA$?Y;Ad`Z`STdj)%l4M<N?T;qBYS0tEgO4
zCgOG|Sp?w?lIrtZ3S?O>+v1U~{FvXl2v+tL3#0`No#0(dM0;sFs6@PW{^R2EhnSr~
z-EAmz{v2|C{7}`8ToAmB-^`=hXphz@a^HMfc(QGQ(#K=eQ3_Edt_~a;>23VJp*z5c
zD{#Kj43k1f1WqFr3BIt~Pn}x#3#ah4BFGV%8r@v{?{QlF^8j#@C|cB{cteDF9A3O^
z+ju&grt%sU1fwx}{1;x_kC=ly0Ti43YA_M4MQ*XD3XQGV;LCin%CLSL(<?F6NUQx^
z&uA|>NHEdnF$AdqlIH1<cLa(EdHMToPWfG>Z+=LiiCFZz-AJ9&wSBjbKUY`zEw_nt
zn*<TsVD0Tth4Wa>lirJC(C}hIn*fi&&en*!3?HlFYU!ES^rbLLb$nU^eyhJD!k~D}
zBC1)9nvcn%D&k1r7blWzIa6pzjU)x+unBH(o094gc02`XrHOvA;;N}N)H_bKA(I7T
zNfbL4vj8oJVCW_daF4w**|Guj`HX?MripTgb6Z}Bq4r<}Vf;{9xitW2KFe>N=<^w;
zq?tP_N_=`_D!}2wd-vFW=r5)CY@Bvb|4p?+9jN`?iEHUywO@O5QdWWsB8QCFRSkZr
zb~xe&FTYef8uV4<A=l+V=~O!NIq@v1%j_nU)yy^)Pg-dk=U#b<k5&SKaOY##7dDe(
zCOw_Xj>V&2t_iVqzFp_hVQW4{TBc!ame&T~Ex+rC<hYrvS<{Wx1O1;6{`gJS(WdI7
zRxpceI6r?vjexNjP4A|!q~&YND^CqiP0O8?bxw^B|K;tZO}$mUl)EfFb}NDxp#7l~
zLK8`OYJ?kIG6r2-cDZ6Ip|&7REH==er}xA5wabZ$!hQIeY6Rb^kmTV6(4m234nt4f
zGn(O2bF=iyp#qL{O)DSpeoIO~(0p*^PN#AYnR1VK&=k*3yJxq()4i5V?cA~&I^5XC
zw(r0H-jLVwPnKHK&fR15Hy8`Csmnak{L5f1O4};{hau9|;%+O(VVyw1>-gy(#eiVH
z#H4c{@FO<ji;~-{+J+NP&ok)RHI|O&u*EpQKBb+QT9x%#E*NF_u&kUj^i0dp1WZ!Q
z5>eG{CZhBLN#V|NVaLG#6v%;>^vV$vZNvC%cz*4@rX&pb8am)kTDOd_66iQQJXFy(
z|05UI6OA*KP_6yv_K!8f_JFB7RfvyOY8PW83ONmC+T3tbgGjYOF95wBqdn*j)(XK6
zq7O%l7y%Icc{CIUIfi0BV~yrGyw_ZEqyc1->$QJQtI%vkjDu*6ZS=H}Uod}_@SG`<
z49OlSm1uy@O+=VSI4G2cc$$rJ_;gdWNHc(4l2c0iXB4|2<uSuF0bR(?N6Ftv_2?DM
zIrm%1S-Fk54kDNE$eYuM2hz|>I{b)bWl1nqlXP;wW=^WWUK|o7g$mjDk?H<3|FptM
zC;r!4C<sa*+id&D(kR>zpC_vU>P#{#UqLMWREZ1NJ;@O{ah|&7#W5s1aKZnk669GF
zg!)mOIRk&VfG+z^#gZ=9+ZH^9q+0A!A4#X_D-7mOVxG7pguh{6u1tS-83R$$?VnRx
z%t&9<X$W<i-d`I3S>25EC#P`&-NgpuVM#F&*UJE}kzL#gX|NHM7@|R#K5cX2+TVQI
zJszQ*(+k*)|0LIWC81Llb3`E_W}A=qWDsl`BZ<c(Td0*ZI`(V16uwkv7XH-{iv&Z1
zkn29lGY?mk*6IP{#jH_MnndEylTZhot%K9C?eVomN(XCuPQ*$Fd<h<h_0+<e1+&<k
zus!UZg9oOS=`MOKe&YdemR!%4H*t}521S`e4HJAsJ9DFgkelp+UI6Xjef7NR`Y0{#
z#HY3R<<!7m@$=|^uw=y`))8uFt2*knU5vGFE>_k!8`+>6+5T15Bg=DjSDLj~SgRZ^
zR@yil{-7KF{#BMMWLL>$GMO7qBFs`9!UN0`KDF1sXoM1)8WhbI{_N&X6{{{V_x0Zf
zymug%wfEI&Gv?t2b**CCI;xtyjxNRS1T)fV(TI@4&ZIxSBXxa;OH$`voMhw?{gj#3
z-8*J^%lI^pv1ng1x6zv@XzZmuJsryo#DZ0Rrsr$oAck>~RnZ$}1971tJSBZhR#7k8
zb0pBgIw<8o!R9xujbg_Io3exu(1emmUH(}X|CLK*O_%kuL9M^xZNsG~xqEc~Foq~=
z2<*wlVE9S^LQ4y%HC5zf)5K!(FnR5?>>|n0vh9QRto%hq_^h*KV{IQ4;Q^D0`yMIl
zTOG*@O|KJ^GSLchzZD=Epw@M05k&MkjooRX=A4gOZp|X`u2#m1ooZ+Hy9qz0mB$hc
zjP0v&W%BjXMcQ%<ogJL?$`jZQF{=pvmYdab;M19vmC_lam@l8#)3H4{E30apYbDd5
zDKeKk;If-SEh{)J^4)FmUjaK%;UNquI(Rq<d^+RdERmQhYgvNKbRe&R+rX)tEuS}V
zK#9J^3AL8;=KnH({ZUXd6sm}bbMT5JOkrXxS`mYJX3U$2hj<3vHr)Lpa2ns4XwUB+
zBa#>;mf`c(^3}xTlyP-AkNhHr#RCR!Tqc*w7%rX1GrtCM;ALclQCzp0lh=vw02Dil
z&^W`#u!!Y(z#}`HbqZu$T;<|x@Ap>%U&umjW0jSZz8Cx6sgmyV=n-NmTiF%?b0Y9&
z0-(2ePu?6rw-qIG9+fh+3>(KmVW_ChPD1_(anG2R2@HQp<NV2+aX3<K>R}p-unk?n
zP$p2Sr|iH|8W81ghM{0&;1r2YW1<^w!zpqT)nYfinlkXM-)D&XQMedEZVd-1S&H9F
zlEe;NiX3k(qJLHVM}YTn0tvAZ<YHt_HyLWYeP<1*M#$MI8fcf+I4V!Ow<8Y<5HNNf
zSnUJmd5+O%s(agO%n}>#$Ad#mq2*6d{KbDO#bfuA>h9%b%<lfi`pZPCj$|jz4-g+6
z$1+2Ne!%SWg1aPOn3AzCsz?w~e?SVs@cLx0>O|1GuLL3hSNbAxDT`X04bBD?q~L#_
zoZA_6#NZj2Ib}Xw$aM6bN7u&5<mg4x*;_-Fdil7lu`d5P+i91KLi^_#Vtv|ZZpGg)
zEgNa)%mX||#FYre$T$GL#AGpb!pF2W+f7+7Ula<ZTO*KDRx;VFZT`zdyZSFCT9R5<
zW%O18SJP0Mc>!zCPdRzRLpKhzGwwix%!bL$jIl_78_VcA_V<M*FsjQcTVB$R+O#tg
zpuYn|=sm1TVv@Q?QztIW^#Y9Wi0BSM&lXVe0uV!o#9wYaIlGAqmagMFQZZhZQRY)R
z@Pbuf6bgauIV+&A*08@rZTU(v!U#Dv2aG8Tb%mmfZWfUynyvlw7QOJ5uiE>q*sE=s
zW^J=ORB`A^dHD0D<u}eYjD%DB)Y#BH+Eg0|mgVo>ueSuM`hUc2Y!h(bq_qBIIVu*U
z$rJ>i2{ZdhX9aED4dwG*EU##}zX6$NZuwy><a^^pZOl=6`@`iPt7;BMm37T(8{kBo
z=$H4t762OS!CP?ENl);l7-SE&j*RD{!=kR+Hg%j9FIXY@mVyHl&0;4DhoT_FPRxJe
zJKsqx2Su{KSfma%5%4Ip?>9mYJDdT)Ne+T(IQ%&?2$@*_fLw)AOm4_CP7~}N@Xjzo
z@2+kwEK(b8v9pf^7mjae5)u-k3?$@G+(K)Qsxix(CiG?6P(TVnn^4I&9O7n>W?)2$
z|FDdqF}!-fcy#wfddR&DQLrMjsk7+F#u+$=0|Z&WoYmnEeCPX6R!WG<n*JlNugw9S
zt;9?&&YQ1qF;{QrUpm&0Y|hhJM2`2!wbfr+&Bw8SxpAx{_!8Qb&hI~zKdV)$WWC)m
zh?s2Cy;#LKId?epUYY}=7c1+epw@cCEuUBKZMBdt(x>O?7^(cUva~o7^7nS6VsvDU
z33+prihaD6&B4_%;mS)YWqkDOLtsXpi10Dfe*%M;1^ew^Ccr_s70I?5BX7AdNvsU;
z9aT;N?g@v2JmXBHm4tW<S&6ggqaz3E^s^R;82vRDjP%3eJs14hZKwnz1aR-@2Y11+
zu-1N<>@6{?Q&F<!_|HQ0F;!Kj&0nJurY${-fnVDOE$q%O6IZyiI{K^BNzHg&*`0hr
zNS<!O?_!ta-q*Ts+IV-p?L8UQe5=Me`-1WbXo~*S&B*K@Auz9SJ|=1w<a-XY`(OY|
znGzmJ*r7|QQh>xnB#4fVY+pAgRHWJBM9hOmyYnEbjts4+HttB6%2+9<QP=uWmsAP>
zr!#eymA^F)?`1QaW!47nP%pIL*YR~f2j|>zN@J7cItPih_O=P>$SUw`yj#Nv(W*bg
zM6CA4g_(Ok{vq5}6A3BW^(6CU?k_81Gu1LhG(^?RRYz^XRAn8o<Bg63;*;(}a-~|I
z`ao}SXA^eD59z7hxKB`%ek?n6*eSA5tTF_QYlJ$Rme3R3i{|{;u(lt;Bt&oZgS_F~
zXjpoQwK4&3^WkahA*q34QXDwhfnCSBcI&&=Gw*IyQK?-vBcYqpEM*Yz`#tXqV!sIX
zQQaqhOuV77;t<ZqIJ9{^PkSw|z~xlQ<+L29eHzXxwprrIM+ZBohAQ`nKOQT<SOB)+
z8kmmYt4>-Ff?-EFT7RY(4tsv>qlY#t%ePQ5NhYHv%(x+{r)n6nI_bMM@ZHQ$62zra
z{HTPcgRn|g>rS-lxj^MzzT&eKrCMi;kyplEx0OzH)3J7>1>l2rw;8nc3g}wRkCS${
z8no5(`j-DmVM6+3K}d=fI;d_4(!hETqx%tmI9(`%Orq(M*4#Bqqliz>*^eD);G>D4
z_Prn5e+p^gV`J0c$e7bj9oKMZ!rSJfs||+4Kgo{lX)^hEieo1KEprom4y8n%&FA|(
zLXSyly!7xQ5{R)gA}*|m6p}Wln})w`mTr|Q8Ch7QCk37EP+Qwq69m5SYIC?EmGgm{
zQb8Nyu9HicP`}c50dhflJLRo|hOTH)&oT4XBmIhDLhIJUfI@_JB(`**G|~It+6H+z
z-A$FadUnsKV!H#@jQpW>GLzic@V;z89L`bi@QmX-m#w10Ex&3oXfZX~IIdV`N+#NZ
zDmjzb>AlVB=u#7@n>Yb8n*hUyY(xnLqp4Ul+VFy-C6lyf+QGh*`LdZpjt3K)FLV#r
z6+Xek=z2WHe7vM@xW5+x@2wLl@sD_{B)yvHrU<{Lu5QVY^nU6@K44_{K^bTUK}MEr
z0rW&vGFjM0^DFil)D;hd4g-y@>i}0P@kshT(@~Tpth1P=tisMv-n6cYrPYgrk~xil
zD2*`Ih7-Oiaj`GHPhy(+-wD}_40gKEatDY%oU)a3z&!V8IA?#$!ijjVru^N;Y_BMg
zXSI0U9T;P6ZjV-zdRi5Xm6&78)r|hqJLGk@l5u0d^D3F~!7sj+jXj)Srup<Q%ft1R
z!!5&vyXIN*LRI<bm~v+~Jb9dlXT+T60Jqq>?3w^jYid^Ysw}D=JPl%6CK0zyW7hnb
z7LkxRRErRGN-4P$hIfs%oU<2Fr>*7)<nuz<@y4#|@;fwTsy(bcn2Z_XGUfZ7k!jE>
z4e$pa7xHTJjd6PWf|!AQ{Dwa)5ahof?Y^Y23zugr121)VMZd2nBJfSGsk~?%aL=4W
zLcH0#+0QJjKpSJS1;@tZ!eH&9dg}Q~J|beqesO_#TY|uxo%aJ}8z4^eS3b>V!n+~r
z<l4cUjgL6i@SOw?2#=zH;DB%)oLkA$v1fBid`+mI7-%wNl#_gUJOG52IJaQTpG_vG
z!in@IE$H*Y*MB-aj$o$TsGB7j4Bai%3!6t@>DB7C@kY9>xLGHB6So+ac()9oL@`mn
zUrv|L7uV<;fUi9K9Tc(bbknYDJ-CS2v!6K(pZLzrjpO|ToC@E`ZlJ?&vVz|UjIgBu
z`m4oIK)c?<m?ACcf*1I|99OiaO6%$mVd+F^#ZF09_8Vr~R6G|IqwbZzgbdk3NEsT!
zl+#xfCQnq}T^NAXSQRPfIpF7gbkDhuAj&C0X#+t2px^F<)bM-;VN)dr)r-x0+R2AR
zt?b^nslqDd2TOQ#VRhnl0uCV)_eC2YER}b7pkTu8#K7heb;GxVjDI7VTT+zCg>6J!
z$P1Ttyl>AY2rJVWLkrO^uzR-@$#KqaJ+I8ADIrL>>8gQSW*tDMPT+!7r>CP+(aqIe
zh(UsYT{i1jwYhqJ!vJf1Sg{!1SSab7?Fzthbe!~<8A|khYE#IySG?w1><$zkv>|n-
zx;34h2I~4+ZV+Of0Y+m6&a|ZqL%xEyAgtkQzZYn(!s%;m@Z=L<swm$`i6qiYq^JdI
ziC|tPm5T7bX<w46WIB3>u9oiK5Tsc2RiVFrjBMFrv+4qcuhie*r08;9$E$zg9R41F
zK1Po&`Z8Y&wiU0hwUB%raA!aBpWCgvRJAb@8V0^?oSHgl7dVwplG`Cv3~(<IwZ!N?
zVtBpjCmu0bGHR^O4+9O;Z9h3_lBZ5exG3JTpixm7MR>1SDSsnptAbJA7?mP0sbV#y
znr}C6BuUahs$~IS=)ICnzKbgej}%rpv)%7DxGyyI_y~U{eU*=2?R>-1gn?7{U7J}B
zA7F#>ZJ(^j2QT1#_Bv9n;C&(cLp^JrLu|LN@%;LxZoZtDUNPJr7690ou`{th4jrdq
zP{M|dG66Y&0=KLV>vatr1?g$)pAX<gMK9^bfEDItvsuI)1$Y&x4~sHu26oV(=gVSe
z0Jw^NlD2n}qNs}N?q^*m;zteXNF>2(2_;1?6phLjzD1M2TP6@aITMK`EMHrcvu4Q#
zguztR02i>H=CG7~w;x4?4Qo`)x>FK4Vol1o4lxkllg1ovNW(jC&SG8#PzjrB7*zdF
zJevuAu>R-Ny`kpf&J7#@K$P0=<o*BI*81<jxc>+>xzf7$ox4Z;x$X(L0%G5=%MPWj
zEg|(|wb$I?klAhZ>|nzN8Ok@*wif?)$kjac<1>&lm~t4JXj?*8H@X))khW*XR`A@q
zA)xJqF+?YRTRS?tHa0dBYD!kZTW|(ckbxfR>PqC4A@noU0Q0o6Mkp~)w5Urv7X%|V
z2U5c3KKP9QfKVw<KcFAs-3aHMnJX2bUQfG78hyjQ_c4ti;45O;c&{UeZfuri5RgC<
zfIJmQBJ%1UasUHLkS<)|hT*mcQ&57hDQ5>az;B`xmj5vcYydxcfCdCg7Ze{59g-4w
zx5d|3G{*tR#4FZ7+^TEJ4|0HXXl%4eII;hTH!>nCD=UgnNg$mfDt~V`35N4<giTYw
zgg6?jS(OuD*R1t{?k)9~H!KDf&0>MERdszETt6gXRugw7K83Ad>!ygnYu*r>2ZTUn
z@4kCvb^Gpf?=WSgCuQ=aXs-;~cHB#t)lcOy<YI{%?62Rp$}^%N-VA>>hD1+WgYxCH
zU`k`NseG!5S@SL8qH#}$4!pX?4W~>+l8FxL<m^_X?^}lFLmBt$*K*gF^=*kKcdAcY
z+j;LUo6CXi>yWlSy&$jfiP@(!6Xh@?n>GHqfbFSgINk8q2QU3SC$$wW;<T+zAO5w-
z_3Lof=94Bwb|CRnM43lbj@>D^<3?Boot0nDYP`<mt}W-lZai%7Uuf<t^-8X$8IZQl
zYsb_yna-j4><N?U<g+p?vIp1(G)Xs}kK4V+l=)z<2a?idDzj$`JN9!~u<NOsA1B`~
ztVgmGT|I`D>k|78p^Yxazo&EJ64|Mf<Y@#9rt2cq?N;TRrB|a%1=pNaH%?js4bF)9
zE*%%naCE2lz<4<MEdLH~de<#0m^-_1V5`9o&N3zh<Hg2qJN+fhaf5s^Afhk5>KMJH
znj^AQf{hqgQ^5Ha1-EF$g6H}_;{J@Y2b*5?VK+I)&hqa(2qTyP{j5=7ewqRR;1x|x
zxUJ-QBqqc#VILFyK|47uEC`FCnhp3orCC`8f@Q;gQ%(h_6>;*&F`!HH|4Yz#6<8VS
zbfa9=%=8K^`q0c%8W_`pVPaOeKoRs6WA}Cd?jh==DCSp_?QT%!Z+^?XBhUVP^a#HQ
zdez!+xdwZu$U}9GNbxkQ_vy}tn@f9bPlEX@MBo5TQAbMIAK-1kb8>pCREJPc%}Ak*
z_PZnR$#=9+w5k#QC6h~IBHk$%sACZoQ%!CVGUZ|0CBOVfXEMyrbD`flqWw#zmqR5m
zXol#=p{*_vrq|2`03z<}Cjc>F@-uiR>kCgs#sbm<u-gX5cpTr-I%N|tjpu0-wByG2
za^-qOJ2hvtC-aiNHhZmTRF^0kzWhSjBMHAROmavC&qVPYGKRKQd>K)l0dt<Sqpk7=
zT<#9~r>Jw!7}1>v&_DJHvBg)K!Ug)rL%=Rv2%9LE@x~{7f#};~GhQgEK`go~=>IYH
zPtlb|-4-?)+pZWZwpp=l+qO}$Z6_5wso1t{+qVCFr=4@LcWdX{|J8f9E>;_Jjyd|A
z{ppizjLNw+Idsxo3rW2gsp<65*kB~a4$+liFr@tR1D{-7@19;>%;^Z#8($~)lg1pM
zj<l!!GlN!At~?up-*+kF=1WIYezr~)-%4u%jh6St(##sYT!CmoVDcH-Z0SobzASC6
z&U}xd1vQBRkB;v3D>VP8F3_R{K@;TuULsMG<HNs^UT$mz@YF!$`n^*B3cOHlBE>U-
zbvpoO40E|4bD#2b`NY?a%PzhaEQ=Ix3*=335?zlR(_Dxyl9oH*kYgwoU%wvPAcG3F
z-^M}sv)7ZJYP#jw^?*ND2gLt!kkUadSs6P>knmZS*>4LAZjUUHO|qNl0cnDqvARtF
zo|-HAIeoR5yZ`lgqsTeVu}&C0427fu?MKf6e9ReJirdDRn;Kq#Gq1rmph-%O#U0*-
ziGtLtACoc-F<y%+=!~>1&L~`|mms>jHUhsE1@pl|9ZfZFEUI2S4~$oDj^akj{IpKl
z2Gw>#+<jP0`qbx=^<1YW))(D5p!IuaCYf9w8!u74BoSD^o-1qN;3SAD8ZHR}kxF`N
zr&QRn8}247QU5ESUtA_ewscP24}~XkrvzU9ipfu;#wV)F7-j0T0>dUopj;tc``q5L
zqPGGpoqgmlM<FE!xT38SoMN;j#C<I^Su-a@nP^b}X)nprzdJH9a%BtSzZxkt_wb<I
zc#Y#S^}<(V*Cy{d`1r2ZRUCk`1fl>N>gvayD@E>LR21IaDH7X^I|CsS??ax74oY)3
zi&xiP3L@da8Q)0G9=D_8RkoXhjl7$^7+v7&n*F9VJW%P;%aFAiqz7(6ikLs1YLr{)
z*EF0+6$LCU(%N3z43f*xL4&K?ib<YM(sY;$tX?cDL^(hD6o3&Y2vKo?R)-3Uo96+<
zOa2PY(X51}Tm|6r_}Fy!r+3*sVY@M+hshv^pT@mtut9joQC_NyeHbkq;2Q=U*(^gW
zYdjhjzb81nx-`&2R7_*8yyfnm(aixtH#EvNlO-);7Ci`dp_6ypIia+txFkJCK&s>T
zf>%LH_8eTLRP}fghR_x_&q(Y_o7G+35&$e!DZP{QFZP^(jrA6)JoLf)yO8G4^hJW%
z$wv2<X4OVYG~AOVK6Rl^si=O14(N4hR42-$$sHb(o!Mtl=ssc7yjP+Cz?|q3Q7K0&
zrcjN&$STR3$e>#rh?g#|4%|XM_*dOr1Fq4z33h%&BQI*ytG1GTTXr!<u#<M2PN|ih
znw;E7s#%Vh&9Nub(8vvCC!|neRSIo>oAen~kWuTlUD|t1NLgU>g+>ji;W(VbQdAi4
zAZQMOMx?xF!}Yl5(3uH^GiE&V{QT<$W`ND*-a6ES3^(UAW%CGD^jiHZc7U3Rdk+SD
zGi$ElvR`SG=(MW>;P&qwrI(n$JMqieo!RvoLTUU=Hu(cy2VW_#q0Nme6jFOqE2oP|
zs{i)-bM~fu$BIObrljz^U1l<N4W*XkAECrwo<?W)C5sWVC}Gi4G9rb4CI!kH%ZDJQ
zCsqG6=L#u(SAW~I6G4%zR}6P%%KkhoNsCu*ULoFk?*)~uf5yv)CcRhAa$E*b?pBl_
z==`(qF*dnOp02k5NR7!~>x}@Sn&xZqeA{U?)DIVL?ssf0<s7n4UTMqZfaUyU9N{1T
z!nRZArk_a~JL{Pk)mcQ(GE>%}E9S!WJ}%R!L#)DP)a=H<;xLltxkN~8;m0E)5N5?3
znfvDs;y8PSZS9NWuQ90q<*K;5aP}Hq61R?6Cl2@9grmLJ9!xl7073{IKr1XwbJihD
zi0{1mHh2t1CysaJ+Ii>^JV~E5P+EB+g3@m`=>@8-bP-n$_1SVFxDoRG<<GGjU7cDT
znWY?i(qVr%L#=}blo<B>=eJ$|G(MMpAZeNWTS7%&xS;64^X&$4&#>k6NXT5bx9(vJ
zeMYdAR|9O4b;rhgs+e3INKwx^c4!e`JpH);NFlwt4e6|2?<R00c3OlyekhR8uc!8@
zwcZ@hG%Db%CW^$f=AT2Kbj$<Q{k;{`tCF89{OqcNjpBHG#6(bxt6<>P<<3f@4Js}y
zMYAy4bAuvs#Q7?MVUq37c~B$9c3)LKwWtWHo25v<+fl`AHC(2tz4FP>K<tJD-BA40
zuXtyywU&IO`6$HH*4b9vv(vHiuGC24O-BoQx~?9~Yf$n<#VmKQM@Ydy;DfC(I4Ba$
zH)oUnSQc>cY!W-JRfedZzJWdpQ5X0$P+-dDqHx-XAeAmukQ7!vFqU<dBWMy3X9@6v
zRu;A3Pg@L7w&D@>5X&2bE(a42h{b;AtAV>DY6HnDUTHvr(e)(O1keMBSMj5QEwGJU
zyUReR_`Gegg!dq20wo<}swyPVI_f2zDkYW2ABys|;pfdL;M2NP9)vU7d+l$pD_<2c
zT<5z60yaSw&Po-qR7xEKCQ}H<GQ4sbE)-~ls;ezwwm!oca%iV39J{bhET#kH{-Cv&
zjZR*<*6?|?^RE}!MrEjbT~U3mnx<OhA|(A`)yFe|TX9YZfWB=1jF^}ACZ72LDj~`F
zFvcyaX3FjsBa2$LKdwR8i1#`&jT6{l<@%O7gO8eSYxmPBPcL`asFT)nt3@*|$Ro)!
zX!L*D)M4!l5v;TGa#cyIns9#9XM27Le+im*pXUcK+nu$Qp0aCRCom$#-as;V^1*A_
z(5^s+*Y`11XC#~J*`^cNl>PjA2h)$W({QmK@wK3a>#5gaYp-x+n9WjCRLNDr1bvO%
z{b<>ZN=HD^2K6AbP18;AbiNbYO)zB6kJDU|aJ%o)1)YSXN;9rohlN*5`R6|xqbXE`
zSo@tT*-b-HA%mv(d!U3njOhEwKnp>gvN`XaC-#Y&cW%XygTBKOTK%ch{I;xAb@{+Y
zWjmaAL2krtKbq1*l=$m4<Rz*js~|(-)pmnlvx|yxnv7yeDLKQ}oQ4&#-ZnmKx(x7C
zK7WrmS#;d)-~{~!Qc=6o256r6vIyyOkEyOIMJgu^uGv{3oS0SNvLI}hTVCaN)!Sjo
z52vCXxsU`=p8qnX?U_ZM=zVLU8eOJ=ao&G30S-~n+KNtrz?MW@pI24(2;KmEj-rEh
zhV7IZJsO;aQ6;m>%bW~NE}(+Rl4MrZItyl(3mUluOYX-P(XaYz+A>%n#l+|%EDhVR
z6^ce8zhZAS;nu1N2p(4%G+|RnvS_B57c$J+Tja0q2|FEz+ptv_&K?ynmSY|k!5g6-
zKdHlLhBQ+$l<Ms3i_L2p*F9G`9pHA#xH@&?DS5>vnbzFf6D|8=u!;Y&k+K<J<fqw>
z&dZ#Rf`|b04Q&@oE0)L;J1h|@MPo==rb@A;XBFf0GpC!HRg{#<tD?d3C%>{PTAcnU
zxSEcIL*=yai(1&FEi4*Nl%q9D@AA$>>0zpowaVtWpvL%`NJn{$9b*I7luOS0#bd0T
zbKm10DwXPRQnP->7@C~JiU$sGNaOBC=8X!A)lYHZnWfKAS<MtcSGxC<Rd4pEnAEB)
zgsA}&Z*c`AX@QRp$(*;I!Nhlb^c@0a=EH`_`}ui}3YP&2Dx+cF+}=p(g{->#31gx$
zlG19$@H@$*RZGIk|J!c{;)OZ__XAaT!2iF<LPmN9*4F=r-K;2W+pa(qX?Xintuib1
zKzY5kw!q1&{D311d-OH$MfouYDa2(31Juv~x8m%3OT)D{j(K86)I)!lxxSuR&vZG8
z_i=^1DJs#3N;fbn`uKiT-|=^s!8XWL4hnwNGWAo|kgp@XQKS#XKpAeG2v!}Y3E?Vi
zDv!_p7ZNU|9`)|6xMS`mNp1;EMGN#JiEEkd6Z}dyHq+DZt@>;)V}-2R&Vw;I45-m2
z;)AGeFP_n~ur$o;1o@Wu;Z*@+fvb%cMp+(q!&@>ZU{_$dm@#xXv~+H*P5R5>MxBks
zTV8Oxt~d=Uws+|P{ahw?C0BtI(!1l?6MGIgBlW<fT?Sb_u{Cq!6lS<O9jKSm<#wca
z%qyR%u8|4MTZWfM=L-7#sFHY`n2v`u<GdBPz(0e1(hPfc5|dX_7LandSPQurrlWc}
zxN=i`k?iH3ioY*92m8#9{P*9w_Cxaa!vQ;G%3Jj4_KWXYw5G7=8+9dS;wzqqJiMH4
zPi@0H(_f#Q&5N$7mM2c9?(36>i;MJ7Ok@nXj3Mt?OnCaLm<Z8TKrVhZ#?l$dVH%{%
zAYI&BLss?>CK%Nn+I%THa+QdO9|dy5izWmbtc(FlKtZo^^SPnt`Q~stLh#}K82@6H
z@`JP({qus0qP)<+<pWi&oGU@!r|?(CwG2mwkVHYT;Pr#d*7HmLVWcb)(N*B5i9}6s
z7TN}ckb8?=4aD?ktC_w2Ya-+~F_&bQU$(4+#eX&QY9jBVDUqoy+-j(*yID!sJstpm
zpS|thtej+8Y0dfZd<^MAuAm%$W_Oz3k$Ybma!vdyOg@5}n{6QITUYawhehWmONFVX
zi!ZOTd9S7v9Bqv?Au)@yK7dPrzYL9w1_?SWTdB2Hws#4)bf2SXgie7CCM=VON(kSO
z^14?YdB_mll$MZSbrMV<1XY)mW6*X9fZQK7i|~(GTiKANB;&#xGWLvKczv=`nq$+d
z9OEYxfdDD1y%V5_9MV^4)~m%$Ix&?J>wo!&&cvV4s9o93N;}|W!q(4JOa!pN7Q8d%
zK~_{t_$S*4L_?{ftK+tt{0*$_nqBbE!bbeZz&cS&Hih+NcQd7IFpHsLFsrNbC}qh~
zfA>3k_xiE&LbBd6A3NV+cLWp<LQ2%1=(2ubO-a62)0ai1Wr@HAJk+?$IkgDwVsZWS
zel`}xOLHr~HZ3UQgXF=BOd>ur4k^mh8@#JWfWcE4UkloaBmBJJUbzr7k>-NcK&WE<
zq~~AS(TPSu4+U{f!EgdhNTj+`OW5&=LW#2&5~KdN&;S)iTbPPCm<z~~NHzpJahja?
z8H=d1%M>}f%hc?>#-=D_$N)=v-n)!H@<O^%i!@wF`MiB87rL0d*%g9XN#9pH*S-44
znKDb>;8FZOv8p;GGG@yXOcVt%UDOCM+uSU12(ZWiISw9H-X&;tH~vUZ5p+dl@9?i4
zfn`pZ#QTyvNUz2=yN{&ZR&IR301EPa?8uIK7Yy#|<<+GupCB#0UF?kye6{JVN7AEV
z*KC14{69l&EsI^5xp23%okIx~es)&`8iwdl>)!BJs=<!qlofv0DrS}AR1H^}MMMVY
z<+Te`NNlySG*vK3mz5B1<$Yyl7%GG;>&#1oRZmS?zTs=^i=JiS)-Lt7?>V>YAYVA0
z;B+5y8GK@Vd{tesRp&$7hryua;r#_5(>`fmCC~K#Q?-nKlF;D)K?<(@AO!*cRkgIy
zbF{EGu`&Md#@^_}^_aDvr*qf$Xe6rTghkNGYsn`~$rLlRmKaF?E}y7iYKf{*xa-Jq
zH80zjW9o5(m2K^ha$kqOrT5wqT4qpRW$RP|X0DuVw>#|`uk~}}v5u3bO@XBgUu2Ae
zZ2iOI#sY0K`WDbA(iBAwGf?CL;i&Z)f0%+4|6vM3C2B&Sk*QapSivLiq*4$@y7qtz
z=9TX1_o2~fNc!6vWsoo+)Q;RGiSQKvGe}Fifl(6J3ky`&FH9uK&bfw@<V%}C!GQA$
zoVC8eR?3gd5KR*t#Q<l@J0}%3KSLSN_PP0-G~I{36ewFjbv#@r?ylP>O)KKsbj!jS
z+HW94<D~*fyN@0Vl@4(zjutG$9?}gb(RLJ?N~U<qN@2-8G@1%<V292R|9P)2B3;=p
zzv?pPoD?7JL_6i`&JPRL$ZgBFwbRO`PEejLbF|NE4}QyI$zu@2I0w{|hCKGhO1!Kf
zdfl7Z8*Q*<bt9bQ7OIOQ%<me@Yr=(=j2egvq8KQ%vqpOz9|mb3Xcin_6mK!9L0R=e
zwG_8OM||cHS?2AyH$KmEUKM(w(u^@p)zle#{sc)-wir@Z>wR*B16qEyu6<ZRkBFmw
z4R^YjGxv6ZKqMf)fHn1+uOL1P-ZMQY`O?m7EK`MAJ%l0#uJXV^6okIAQ>!kTMn4%3
z+fEl<!+fKG9hZQ%Jd<KQcdeJMhN!E~gERx%=?RIw-XDw3d$hV`q1IHtZfBNe;^js+
zd>y&tA1>HZkXxUA{4Y%SaW@M9@;}x21N0~QuhnV)e|ye-6lZPM_>sJy)vQM&154qP
z6~kwg^Z6?%plGD2Z=IQ*0%~yGmNq%TL|&h-R(FsnqY11%%v@bvulkxGZLrGrN?+NU
zXU?DPczsWwy84*J(l9CZ-C^QYeHj}WXl$w*p!F%hXtV?U!Lb)&)4%}-4aGbn77T%k
zrlq~QBVpJe+vr;4hUZ*B>SZWTqsWDI^4QK?Y{w96+Jrkw5y9YeL@MusH^RkGkhb@d
z9{?v52~=oH8&qO)Vfq-^h(EaXD4AQaWcBWj)xT6M6~|j@Gis#9(I2hEE6>NPXeVs2
z@DW1!XAy?N_)l%r*@H`50yeI|XN9KQ_n6R4LT)BkqACc#zcei!EEL9tgUWa@RBv43
zn(4S?K?Q9R*nQyrVh7*-G~4?buLI@SH@k#*un`makR$QQs6*<QdXq*z6tTOKo%Jnp
z%+2?!g?c4~Aa5~Nc5C;0zwycC;K<}%GdO4H#vZTMyq>1eqA{-ia@%XzoCH|w<Ij2w
zD6wVMi||y2<J{m>@Z3`)zc@di<)$s){0K7>FU5=^43;{LU&iomOgOZvvk8+W`)jKK
zBHg|-zx5HaCsUKxc1VP-R;eod4j@$yi#*lVS>Ozr>m--=vTC*gdwrmoHbz#FP3I5`
z>ppSTw79>c_V6P^_HREgFk4+zZRtS?>5Ec!=2LetuL=I={?{EXM||~DVbMPn%l}?s
zCVF<(|L5js_aCC_(Dps0>}6!53M7lo4^WM&mSvu}NCK@+)+ZP)Z7+Idf=!~pV%rCj
zlr|{}NknktH}CgVPCpmp4j2USruY+<)yeA9;CqgbD|BR9A4}1O%P>RY9yvS<M|w=K
zG8u;i$o+?30H=y_wYj-rUdK`zcoH?X;E)iNfZ7;fnv!EI5VGiIX9dh1=@-o?M9WMZ
zWybO>qY_eW5Qq<qdAYv>)BuwV)-G@`>%4<P2aOU2G!*2nRe)i@opWMpU#hkS+7BG5
zKb(7GC}{+s3Y$Kc@S1K4GA%{O#fNE?U5=R2s9PiB|C=H?O^{b}I<&G5k9lbv>@dXu
zmkA%BA-=0b**s=O=x#j3P7$WhB?RPl!C4>Ap0+ia1-{`8@jlvAb4k74G(2R?bsOSV
zKN#4Y#*ONBK_iOw%KM8pN+@H;Jxa)YLs-q?PoM!h-NszlZAT|5o0yUWX#Q*>#lFB+
z0oNc}7{HApc~2psC_w(k4I4y487?Sv$1DL;77DnV8RJ8ejpL9qlpre9unK1OGutae
zPVq2hN7cTqFN1f|2JRN)fab!xwUwihI02b2kLp=qP?%V&&pX^8YL}WKV`s=<WgF;F
z)0PlD3bP3SlG&?RGT5e{lSs-c1?eZ!;#Q-SBi%`_$EaOt1lIqaek`Vo^a|mb?~IHU
zWx5^W#Ni=>Uj+sm%jY_S<qOx7TZmnvLh0+_5On;#H<=VlvnJ!p?R;)dq(W<L(u7w{
zW;vI9N~?SCi9L7!8%}HVPh6WL`=si8L_=;Vvpi(Z6hw?|sBCs>a8g5$?fhk-iwde!
z=Jfyv!NXY?(@7&z%BpKmM(L<pG50P!uA9O!Y}ni<MqjEo_dbqB;+@EhL)2%p(S_IX
z?`yd4)T;Z+@hAA7)VSrK^EN!%js%pAv-&L+SYwgdsbwU#St=Co4)1w8`|5SqfB7dr
zX63d>^wDnz&rdd3>WEJc)?M2yMa5nZw#)yukP@>&x$A$nY2lv~tp9%fX=G#KZ2o^|
zI!vn0+OBiK`8=!HZ$_dTk8<fh@4Dj1qXDxKp8WXaTfCUG#cCTV6NrA^8|8iTO4i{m
zE7WnqM?jmCNF5M)h$rGdf}ZpzkFX~cr-!iDOmBDf`F{7<i0(MazF4#Qm!WNo=kM0d
zq{mr8rAGBeE6Cdmp~X`(5fI1qX3PZHiyX<{aK`_|VVKYnFh`h{?5*EI+Nq$>|7GU~
z3m;4jA!erB8^8o|z)RE$F-C;^!x2p*2U}7$!{`X26i7%5Y?)_-8K%gwgG1xRl7MA<
zb!P3#iLPKKg$XxzDsL!s3oZtEBpp~gG0{9e+nzP=)I|gz`iq7GlOB^bR|;pAc1kLA
ztANx|$YU^=)x!-sJa6!n=b>&GHA2PC{y6ySFhd-FJrjx`WL0B-3709J!3jI+J5y9G
zx0qm<eP;WrfOJ-4V3bSPM%+9H`PZq8EQCJ7mHeky;YsY>EBC5!)Q#>9Gmy57bP4SB
z?me1EhD<&IqtN9HMWjdz`sE`XNQDe0Qi>-1R{vw_XdxuRGL75)8EA<Un2oz@ElJ%Y
z3TZQ9dqB}Uh00adNZ==ZI30lAggzj&KWQ?OM;c6RO(-B1pLV7^_E|IwR8BaMD{Q-3
zHAyC8)>FhGx*0GI*xpewaRoA|p3z7wgrL+^7gPmFoJBAsf`)!hlur&sr>>z%D=T43
zA?C`b-uEeIMl7umBv<%V+UHs_Qn$`?_x<sA5Ij=puu;`sL@DNXICM@xvQ=hdsQKcT
zD}!V$iAZ=?v&I&VCFx9)W_G4p!G>$?WZ6?XkG2&A?FG&zK1)ME#rik0z_uHOihYf&
zj9tPY%A0zN+|b_&IwUecU*eW5twCII!c7Til@l_j-_^#_R?sK*;VF%sS|q8$$-ezZ
z*8P5u^rEOKZ+$k{0ze<*%qLVC5H*0S^}rZzZ$W{~BeCMpgvNTEzwTnc@G%&XE9OD7
zU(^iy$=Ez~I~)eahm=Gfw$HSrn_7Q<fAVzhd|@!S56N`EdD)}t>DV;a9Yh;TFp_fI
zFfR3%l)GsXM~49UY3&c8t95;?G^9Qs;ah7;`!&*9eZMr5T#&z0Ii9iRWL>A8Vds3K
ze6uWL%NJDrI-ymK<-cSazPBcq{mGlQ+{H@@FJ8+_uEoEWm5Ec8LzYqWe3Q|=kM^ZO
z6$Xp`XTLGdU!7)jy^fs!d1Z*cl%l?o+)jlDDm0q)JBdENyLV)N*sG*neM$=~$aLB+
z$^osjz5W)l^x_%%g8iSZwT_eUi2J9tX8nv7|Gl-^=-C*v{9kj0jor^&F}!`OlvT<i
zFqGhGNnUH4$fZxK2?2Go)EOaY9ab_Ba{-$q^LfQRe5z?q9nF5b`FVZp#gKRHkLaUv
z)u3($Mc%o!n%O)|eytzxkd~x9b&M?C_%^5%6bZvzBm;!$fxw)puRjF8j57rSqM-^<
zq=Pq;ml$H*A(6fkoN1a;C9!q^@yjg_AYS!XhDzQ|2~21Bhr$W@C-V+PKwMl!;fOe%
zGPJ6vGK4)1B7qEL0R<I>96;}eArhjp^v`^OAm+H=D_0?z3>y`qQC*b+?a)em=Ex+h
z$b%qc{gO?7A&}AI?*o^!gu%RQoI!jd&qD_Z(R_y?E-#j`Aoywtq?(lYfhL(p+L=yx
zt2%_ncyXn<EOnZ6S)~VBEctD7FXihlK}9RqL1rBpZ**yqPOJx!r<d!77m@P6c}(Ip
zz<Ye?TUkt6RGW7obVQP{D<8;u|Fu#%-xa-WkKAq3{^zaVpA4fSQhBpmb3F`98dGR8
zn~JL}FE_7=@<J@WLRX9WIYR3s{hjp-I;`8wVR3)SJ?3Uzf`F&1%YeX^i+*C&fVMxH
zLZs2^Ql2LkDdsn@PZN!LXA1!?yS`kmI-I04mg3L^y#m7p!09EM!$XK~h!aPcLK@u^
zo^5oN^!QP9q4y%V@WZK*)W^K81nvI`Aapry8;1CUClX2?dEpyF_E|I4G_P7=O19&+
z^VnITN@vTZbA7dO|HO57nL1{>-iZfS@j3RWHN77uMW(u?_dl!heU}r%6&MJp?Wb4$
z_kq{Y#p36{XJKn<r=koE1p5CcuQ6D0+%}K_spB5~6(j@lAVq2(msq4~fuf|LPTwW~
z9fw9}{_a_)CL77Tg18WGa;o~dah>-{&EdnZJArd$s==kfm$RdqeHi((%QKQ}7ZrU$
zdw^m04v>N2-+~ol&2Kgf4yNLNLYLq$%Rw*>%ajlq1#|}s5@(T@B>coXAt<;N)knSX
z!V-<-{m_Sb(8J+DJ0T>iM~ZUFU#0Pwho+ce!HdWS%|^POv>Me@@+&w$|Jf3OcT1Aw
z;U8JQB?(m_+)^eb;=w30rh&;U@_<3&V<HO&D%QcM$s|Q1=qnR+DM81-lr=b+$M_zm
zqO1rYM91$ODTUlnA>oqKW^>18>qMr1#h3Bt&3WfoHh+sTqcChdF2n5=HVIj4eo#u^
z3LIByt#~P1f#-g{b@$G{R5RSC=r4GYlYV{OQ!+Q6nMRh~3+bt#+2k&__s<`lT*KJ$
z#E`o`VAr(&;t~Uof6&XOzI8ji9QpQ6)Pu!#jO73Gzs5w+Eznw?pIv4a4hV?szmAFj
z*=bn+U!-t$s{WwpMgNnHkakdrDsM;#t>CFGn;+C3ITjDqQm&$+f#cP?{wA}<8mIca
z&0XJ)fOK&{C2|;8>t>qcVQT7Tx;}}`Vvtsdn63^1Bg?(H1<gyRk8j^1<H3^|y-O$c
zb&wMvP#pkBM1bo<DmErG7$col-Ecz+`#03LUwgoNP&>^m&&`mBERc;6TeauV5Bx$q
zN@R$LL=NLP3M~dM*e4i-`!cj&27(-zDr`Zae&L`Fi*9ZYYb3yfA>>$tMa8TvM*s!G
zC$1D2Z5L87YOP#33YbQk#8fod<5eRTc!x_PZs#vk?y_oLK5tCahf@rZO`u&LDz)i%
z06`Bf-Kt*P3IoS|^(HdBTDH5MnYF%<wcVs&?u3w>EyFzG4SmL_np7)8^`=M!JSRD5
z5N$qi@u`LpcdHS_1FxszMylV^m>R5)<13;^c#(6^C6mZu@;wd4_M|WLuud4nw1fR>
zIjK1Jv;_TL0P;-(a^v_;7WV06c;}gcEnKegIZtF%>JzdrZ;*eSrFTnXuUZiPD>_M-
z{Aw=x&=F7-j`LbQjaHFZbQ@MwMt~fPBj_tdMoxfKJUe6fW}<zl0f%R#-yLV+HXX7-
zeAN7V%p>CJMQM(9BcN9KpJWiC4DkX8<=0WQpa6cwGVEE!Z8v-c_)zxk{cpxAA*5KJ
zs1l-mI<sAa0S}r%lxIG7;Bf|+@5g|T(%+(gV84uBVT4`;t_RLD<qB3e@M6hwk8%lm
zCC|^wDgmOjMEDOVqjAHuTKnP{yI03VCS4J8+tc*lC#m9$2nqQ1)GA~-g)(BL((O#s
z?jsS-#2y?>76elzMwssl>F*{CnX$!J)+|4_(~uUwIX4?i%5{1V&fT?Bd^;Z$EgBWu
zp-;SAAap4>$P#yh{QU<1Q0yIY$7S_D?B5*Zub&D|x7yQ{O=HkFA5q5Kk4s{l=>MHy
zkU*tU>oMjZPB0Au3ki(cFev`oLvo;8O&Cx4Jq^)d5h61Ha1|;%$b;p_p(<Z@sZ{jJ
z#9N1ZPz^U8zlekA=nj~2;xU7=dV($;@avBV=A<`_aR;=P<78tvvzcKQ=K^5cSIjTa
z%E}qhp5$n#%kZ+gbJ%=$;cR87+oc2!I_`f%4YhB6zLz|;R?2clqxK5=vm=&sZ<lsj
z;+;AOdEIHC)Tl1ZV@9mqe=X;y=%b@IsUO{wR;rad{^~QDq$PU)gd>su0BH1c^?dQ$
zi0hFWbwYY0!635acv%T8^S5OiqRw^h)^cH&wG4U?nYpi4s2vpRm1|3E%r(H>Kr}GB
zP9*m>Oxj=$hxnM#D<x)HHLKgHRN_XV;QBy<_LsU&5M+bgo4U4nENj%u{#)hqnSXA}
z9cu2+ootStPq1T~u|j^^Rkp;!!LEISXu)(({DQsYf?qcLw^rD>DFH8Y$<FgMnE&*@
z1XfaXxZFt?AfQc}|LYX=|03sZQuF_pka1$*OcHhn5`W~(oPID6fVx8J=eIE_PNFen
z+k^9uwq0W6{~M6ecFE?hE9>T+7S&!+QIS(#T}}1AS12kgzKp0V=+<aj__^EvUO%q-
zer?=UY>X>!$A*(2aq=x|Bg)0y^wfWn<;;e|GzgBIJ{J}ux4;Q0I%0LQwh&n=<eDQS
z)CXY0VHCmUP>+Q^pL7!Jdf~2X)D1gku8X9&Gq7SOmU0t<-dtzVA9xJAv<r;3@?ayK
zrqgmdV$4hnxA7RzV}K2#B}CMXL+2qRHDkkdj-H(mA0qa}1YsYJRzIP0op?0x5vK_`
zUy1^s9gd7VK0bCLa1P6#Y$d3s8_17T&%S3}xAptTSM@sgd@?<jzoYy?EaukO)#bIF
zGh%x#9rYpTfiyW_9-p^05O3`m?oy7=IbespLHqhQg-fdb27e3xd|!h6l*ZC{gD!D4
z)TwK2cKjXT#D!HkVwHJQ*b^rccra>BYlz`wb9c~=!1%?=NZ$QRZ^A^p?6gjliC^|<
zvO*Jn$(RK;RRn(hIo~=e3oQ1bNaMX;bmy2(0yKBD-3{zJXH#7ZCZ~uuXLASic<EsL
z22-&KwiAVE3T+@BN=vPAIm;cn(JgOWw@YB^+=|H)3jx-!p<1zxy^h%TQ)CNGM4655
zhO1o}jIWMIq496lJEYAA*h0J<_`<8}qI`2s=`VGn>SBYW#M>mo+a)&&$@e84K`gC=
zTd@2gYx9^PQ@bUFB#w3idSH?MLT(_5#E<l`C^!LJN4&^vRG=)jBCwnm*49?CDrt)k
zi&PLPK=)Yxyk9pXLQP}yg40HkEP8>LG-|>7cS#t}<{Srph)<_ay07G2iS@5HtyTK;
z8h-;8{9iCg{1n-Srh5?(bz-go0;rq^&T5F~)Ok292+2Cz+SD|4v<BQQATQO;rfqI+
zJg<hbT=P?%jO@krN_2M%7x1=r(PfMonc^(pOpK<JaO=s_-XIew+E(DnO}1#QTau#j
z`wyESn~0|My(h96WyI5&LLiLY8kQ(tIHiSs3>yHODv32UzK90Z#;jiE#h~~f($a51
z9-+}z9LzmkXq{prYp_0F9uyE(d(~DS$$b_~fT<@yb-ZwK&t)pjL!fFeU3VlvYjsp}
zV7T0Vx3R|fPFaE)@sW+9a&d-*zc9EQL$?gO^Gj<CtzlO9c0z*wAIM6;OOiP9uN0#Y
zYa3PGjmL9Z4K3stYsST7xoiYdi*|LEup6<z2_Aa^a=|y07G)GSn$)P~&GOO3>{)*k
zOu{+Km&UCV)@BN(;iaWeaZCV$hX-|^{cG0V?fw!G-PSwC^_1!1sKe=-vq;=bU+}YL
zT!a7CejyC&+&3{}@k&P<ZU}^g3*Op0wwI-@tFTSl9g(mQ>CD9m;)P(kad)e?E*)z4
z?I4G=&C@5ou4Fxzh?bb`5f0aSknYFJe@iQ)Sm~b<nqY(iOLfxv{&Dk%=13}P;Xjqc
zh;eC3>vpl3cgz~%M#f~Okdt^%>Tr_V_X|H`cM2thP4G6i+{j2g1)|HndNE+JTR_z~
z3y`QJNN_P_HsWH3WF~YPC3h?vDuIC8>RA;3l2|(+37;>A)t#O81Nb>&$3Q1_fZab$
zSuc>eyL*SK<D;1rwD*qeup=SGK>XGfMx`n5T;%*k)5_6-5z8@j@T@a1*N$1HHRvbw
zET1BFoZl2<#XrDWEwEQ9mD;s0j3RN_h@OCoBqD87nz|w$-9ScV(g(jq@JxtQ;0ltj
z-ipeDl<o^~GvtLt9_sg<2E{0kFOhGT6zwC}%l?o>VjajJ7_1t+V9jC!TbGQ(d?7T?
zF;BJj{zjGt_t!i^y|m6$4CNXao{~6#z0nabwuw|=Bp{kP#b)hcPw-Zk+!XOFCj&7F
zPp-b(NgHEFGJlsAcp$$4qVMG?#IZDpm@rNsC~S59&8|7@7pWT<RK$~oEn7~gt3)kY
zmp-sbFT%T3>{o@0dV+o3Q`PdbYQiTOLTmnI(I1xLffjZwsi7ZdF$KR&k~i_8Ft_S6
z8%@Cm0^)tJCh^G<Z=G!)CZ=v|dGIFQpCOr6>zE0T!<U7*M6nCx%M6oX<z+msxjg9Z
zeh2%q7_?Vewc<kKNZ7|EEL+DDqR)a8@djH<Ex(1GwvHdLb73SSSXXKfN01zm{v+(x
z^?)=axh~4aJz=<=Qb2Bk^EcH%l#KS%$9u{3T-{-_GbBH(gSD93R849`zyL^^#9s_>
zhO2NRE{2AY>#JgAo>!SzwSwly<)$N90i15M3^ua+9nvRvt2;@^{}gsY*DdgD*7$Cp
z;>+n=MR`Ofl9|oE@G!PHRi<*2@cNs4+!_au7X?u0FqEQAydxK4*n=b*{krcn7&gR!
zR6xxwu9xi{UgyxfVZ>6xqqf05>`1J^uwtUzzo5UTC6r{U60A)tH1U>N91$6f7_{!y
zR%*0!>(S&dW5tlv8dViRL?Dr>i9$FM{w13w#J<Q!(UXzGh1a1WSlNfO&1lj&ldtx`
zqB~o0f!;~=^Vvb~%vVDr{m*wycXr+r9Kp9niKA8t&3QI2>tv4FDMDAI<m59>32SrD
zWhF#m;O`EmVN1T%08fl(=wI$L!qF`%aZLg0mT(2uxkz~D7(->a2NAwJ*D_JknG(E6
z_wXq_Ku2tA6wK>$P(s&~mFK4+;8YDB@CoBk=*tuJ0IL9?S579Jn~orzJUA{#F0O%R
z_`Hsxx2lT4-kIN-qYtP3w9G5gTNFbx+i5l96;Z=Z-`1Rn9JYMa%vY!$i*C=zpb{yA
z246LwVZKcaJFLC?(L&rx2@bgyolF%N4moN5E>(|+HcAgEj~yr5hTdg#6^b>{d$r@u
zn|qpjHTt_^xXnB{ywjZfCO3{gC3w_=tC}|@H_vF^&IziK@0Oi9IZ`N}=8N6m|8&-R
z=Fq#n)X-J~h(B>Cn$q5B0c(dNae$*d7PjX;h-AKuuqp?Cg0Zkz`Vq(D)fd_c^i`wb
zsRB6`G!=u5klmw%t)z=Z%j`%p5td2k2t^+H#Yo4Mx0L$2=|=x2lh0hWqHL%^;vj%k
zz2yfJmXJ%c(O@cr#w%Q&zvqRrg-a1%Ym@JR52-&e1KVI9gc$)d(dD@BKpn9NQXhnr
zfWo&Hz(ugTZ-2Qhj^##3G`mK(ldzw}4l2s`b@4&_*l~Y!SP{N4V+d+{1MT;g5&uat
z`DuDg<36MNT()nB3ER5bpUf65D2td53F#3q{qW#{CGT$PLsD5&Q+OXA;*9m~+0?e;
zY?MIMHaUy}KEEkBf5^hpAUVlrCm@tD0s*M)58-d4=iO_J3ZNupeEw1{{!^`*HWWVv
z(vP%gG2R^A6`BomEvG+(Uz)q+*$pQ<->D|$QdMn+!)R`lpV}8E<ht6TM870S0ef|5
zHi)me(2Q$qHaj)#`N;i1g^M?Uo4VAZ+aqlI0gzpwkNwD3XY;41^{IY)+pTA5@nTsC
zSZTkFhR@}uQMPz!3;%0*@|)SAZF}k4l1l&tjSUKf^cjld_zqAZQkwaO8!y3|a83Cb
zv(XmYasRIkkIm5!<qHq_yO5g<)1I+yJW07d;xJZ4YCofw!#qxCeK}5M-v~F)K3QLp
z;A=;if@n}OOmsPwg}zQbt8d`{smrkL#GLE?BtozLJouveuQU9Aa@$$-%xw&e{xi(~
zciC`I!|MkKi1PjZLCJN2PU_E?22gf|SN4cz&ojgi&aOIitdtZtsuW65p2NBU?|OH&
zGJU``IHpr8p^9Ri-<*%tbDNHGYu5Y+9>}0Mw6z)4|E1g99!LPmkj~f=rp|yLyTgR=
zJ&23&37#A5Fz4TO-H*-)updPE0c$k}28b_>IH|`mU}E@>8}5KJcBO#?La+mNLso%X
z5HJ~<Q;~vjF`!8}y^ly49=#zhMh%c5>4C_z#JbEN5dy_xrxkY<qtNzNfP<PhL=AC9
z3rNHJF!QB@qh%rc?{DR!Nq31wEvi#*R@!y!>4m?rtYy8KrwR^IH#dL6+-1Yq0O8xv
z`|Uct4b+pT6E7QLcblr`<n;C*!Q(sf3D;xavRKmG_4~vkeLD1owR`dx;BE=FFm~E(
zk03|bn5m_A?#9`A>S}>*WY)Hp$5XOfnIq7wq*?C29BNg45`GKAGw;%Z|F%er&US-m
zc6#>lFztushy>-<ndnQMvMyNM8xPAv_fw@u(%RPaLtHcS!Po8gnUmU{C9`691vQ;;
zUH5Z%TxW0_)ZY8d)W9Y7It^{IdZlUEuh%^X59!uRD5#V(`vmqV64OOS0DYJ@`Sx_4
z<*OC#zmH9nBgF4V+MCFx<GLk!(B_AwZ5TB4H=^ilx>~J^?twu;pqx#?yl6aJw(ni1
zE#(~xq7CI!(I{xD+gn1+ejlJIKU>>iiyIX_EGO$tkq`=;AD8Q=MzPyuwB^)gF{({w
z%qN9zZavngaJQVcw&gBU(A{x>jb<D(3`%h!DUW3^LI!N%<s)UK<0bw+$o@`x&C9k7
z-(u4OfpaNP;Ke<R5wN420Z6CShZArQKTF_Hef2s($0sFY^b?T=1UN^~#eaaY*OM=9
z4od1nUZLQd(fDa8BXweJ8<i{0p^A(N?Fb(-ed+SDx{ag0O8@E*SLrV)jQOQE0PKvs
zZ4o1<w5W_ui1;vUW?><3WSoF4h5W_-@nVL7Ct|80M}SZXN<+Qp@uylwBPBh?Ds8&*
zYc)LQb>fXAlR?1*{QUO7ndyavrxxOK7HU{y$5Y8dNp(q5Si}~@fg`(5*C6Vqa;UI@
zY$XzIHlPbe+=s0u8A3zVNWB|$q6`+Bho87m{xE>Vy&aKzW{^)Pzv~_>Q$NfAl`&>!
z5YxKQm#>|}-vW0^&8*~WRq@bXOg|s>73TAy6bU!n@%jA3@a9)?+{raqq=!}tM?6OQ
zIE7#rmXX{7>6lV^r^nN}&u~oTcny0e%@}yD@QFpT(PBv4T%K8U(n&PgFonoL7U7!g
zBnRgw2d*3-+QM{bOnZYmtQrlc5_!R?Ryd4{rd>-So+O&sl#*wT;zK(c-jiVsWLv!k
zWrxUG+GeA4vo0O81!vGc9tB2pn9BWdP(`>ok|-G?^<v~@G%^H=i9+nkxX+-OFf>BZ
zg0%quq!Xvl5fcH?K`nw#*!L10PXbZm1H}M_QKRLU4*kis$+AW`=2gucX%095xPFsH
zJvF3t=G%!bb|$`-SZlYDu{C0hsB@t@+wGIM)_GTT^;Tul*g8U@2s+zVll1VFro?aG
zXyv=re~Nwv58rT=avm84rXf@xO=%^GZOJ>aqP8;|)*JX}A9*)(X^UixGrOoLJXO*E
zZwWBjpt$l(Ip|v^3p#RuA#S~m5fipu56{4FTMqDz?;%&u01D%bgq@;~pt=l_BkL<+
zsRFnnn5ja~yUqw@N$+(x3|>vB1%04rYJIU5qG2q1D)2fARTYxykE7isZ92L02IiIw
z&7Zy`g_E;&=1c=qt+v?a*SIK9VUnH9<^*;66G2>?^+3v}df)tES<Qb~5uitjD$+_@
z^>7yg@=T{^71OTKPTI1C*Do{1MJrG=?@(;1w7NPB?_bRoPb9+=Z6oZAETVBmY_jn!
zmoYL{EiY1vuxF!lDv$88t0T<t;kyon=NjSS%MFXe^-lZdiTadNeD|to_iKUD@yX>~
z$Rb4frn|e<qF!TNGD25#)`(($<$Uo35-m!txppCA=~}V|?VPnOpG9Nd6<_^ACUwCT
z+Y4T`fndW}G5p*uwftusM5wN&C&$ESJn~Ss6osc=yv@u-VVXIyZ<fU>R~S*C;Qd~I
z4;q?hiuL)_NEbf^k@K$KZ$}q1ao9z_eet?>O%RLaW@a#FRB6G(=}aqUZN=93BwAy`
zm!(N~@NoZ>DwbHCEpjSao}Vs)XKy4}eD%D!Dh_}L6YgutqgeY#KJ~WCg2U|ME{JFl
z$!yN2O;U4G#;?#GGpCsRm&8_LcH9O=0yK2QZzEucw81`E_Ak5@UB1C!Y8^qbK@`6D
zIfc9WM@3A}?B%5=zRB#3?T(!BA5X8Dg1LQ>x66z3KUOzC?6z|AFAnM*xsT^9iD+mw
z9HC_UWX8P!Zy%$DkkQ+8Jivr{E^`fmN5kolG`14crrPaW$HX}Js1ej9!p{mY_tX>q
zxj;heuNJpTO(|+yR?l{8LzmbaBYl&cbJhP2VPhuP;lw#rr3Rt>H2pl!CB~_8DLo}!
zQ`D4i;Yw}_Eol48Wzt*yz#zq4fH-NqiR1FAoaIyYe6G1(#%OWf8ws|?i&a*a-@iru
z1cQESZA|Z-vtPZ}pDK7gP6Fj{*@e~km4e@V@?3sDk6N)ps-&>k%XW#ls1ZhXx;$gi
z-e7gnR8JRXGmf46WhDLyu!=2=Va?Hoe>anCJoesu{#vy7UY?cLG2k^*{Yin2ej^Z}
zgK{O(d}od`l}w`}o9d1d-OH?mU3{`pJ-xGQ#1oO7@$4Om;C=}BZa(pfAOE`<xW+Mp
zg`N4xklv8~D#7vczmz`StqXEsCLo|^U*P}azVrXXHU94hm&@N)ZtHAy+n>~NldWZk
zBeDm@)i}$i4rnEhOSMjh?3r7(F$gjWZ0smyq?CNFncsiRZU}D=go-~-Sf_2N5_|L+
zu;5G~(t7KYN$UjPZXc+i<))eHzCJwcTs}SQ0&#P}5A3mp#l+qZd{DlrZ<y<t$EWrH
zIwaitjIVy^ig!fffd@QT)xd;7jRbE3Nf1Izks$(tOwbc)KE&fMcXk~++gw&bANbQF
z1MS2LS@9a!gjp9f(xVi(kbstlKnu~nu$Nn7E`-hz#1WCSY=s?MILJLO<ZwAAL>Mo5
zZ_nVrJBTzA{+HK}Ziq3igY7Iiq(C-U#TqC%6Lkzf3f(PJrCW;0{KH|r873yC72^Yu
z%&?V%<6D%9=TLjSYl_T}{Kx9t+&;tIaJ>QlpM$~N+wV6A7ENw16UrTOwRxH*U)ZUV
z7(|KuKl~R3N{`v8eLcpmK)P{M1Ya1U8gat-HcmjkmD!&%Z(QM_0$f<{Mu#p4w72<r
zFbH{3Myh`(+cO~g^@V{(e=*GZrb6-5LrF~j*=LS2BWK{*;^2vHx@+cc7Yo#L^Cj0)
ze7dswItT0VJ*~1s5WP4~K`-~+t7p0?@H;bu_RS;(p(Fg!i>r!ijGy=4f$iKXd=A1t
zJ(>arM^kqq3coZMvVdD?hFblif=Tt|Z|(`<nLwcycwzKIqA2_rVCs?VdnG7T5T>hK
zipCh+`kX-K5yrwZ_@1|ks@_5&hud>wM$7n+lVtPiX99eWNR3H(wiOBSArmdK+(*$@
z-=P{J6Zu6<aD_1x`9&xYwq*?*r4E^|(WpmsI2(a`-hR36+^7}eCqbjo!vdL?`{9&;
zPU9dr1CXviN$TqFMf(Lz(gH;MI0C<JOP*E>mxFzms_+(80gEpO^SALl`l-Jlz3@YY
z>N@&fI)qXL07dDHQ3`IO<_ox&?kO%3*k9yW##xF_mX+|cz3BWnT&7*x^c7WXcsbv*
z>n|Jekic9WX#y>7PRVk~5vF-yOWdKV$!rFM)RwXVERV9FjGPTA&+P}<(Z=$=1T%OE
zZpLS%TL8ag2-PP*P8_1$`?l>vj-Hk6lM3)5EHF6VN|wwb=lb;V#lAfnQ9EuIWb}@?
zuf077$3?eoW@NxfGm|1TW;8#jzh&t!{fdr)`vL~IBSGMD3yKXCz5db>A>4QJW$nO)
z2nHhg(iMG#&Iz2X3DF1c!Gr){-l478Y3Wb#%fIo7_h+U)2d0f&C=x7O@=H7jmVar3
z?r94Loq^WsPH#BELUy4{!EgRxfgfy6l`MM=f9n0=en}3{)-?s`o`1g;dt=5AXQ$4r
zpy$Hl%Cq0|_Kx*)i`k+zNIX`OXLDG9%qoKHA$VGZ#G-#?Z8=j^mg}QwtbwH}*arbQ
z_g_OZ+Z<$R6i!uK!n#g$Vr{I-YD$?9LB>v4+r`tA=5`eNOQGgECQ_ckv7;p9@z2o8
znS}?@n=Qi6h1|?&DxxM9jCzhPr_iOH!&lE*e3=Bx6`VA91Mk-*&8zG0Tw!VJhJfxO
zl4#F7_|#4%OFe$-D(ryMEF*oP&Sk&;rS`*!lBLLqa1S-FJXzFoOgvu-GMFy;m#WF|
zKJ{kgNKQ^ztL`nni*GKDwfAiuujv_nc~4WvTo!Fr*kS*b$BRsCZ?b<XtrrM}nO2B@
z`xwCuTWB86zTUT=w%`!-zB`3-c!<XL?)4d>=>v?<5FzmHj&p@Q?Yh=qXTD8tzI+H4
zqJ{x(%mxDVx6`Fs5hrWIMt$e^ZlBrD+%?Z`5;0iH&z+|`zdZzj9`wz=-LLm;3AA>2
z0B7HKh^<|y{NMf8*RhDpxxU-86_#g+0;i0d3wrC85*bn2Ql3@Idq5%<UnRN`ph!hO
zGS`o8i$+?cCTcMbldM+nJ%28Buc(};yDDkb8K+B$8y>4qI)#^nNf4guwQXw)hk*Fx
zTT*jcFFnF{AO4TV!3N5N`=hh3=>_;TrSrRlCGw8x8p130FPn`>E}0iM|KEaw%|}_W
zGF=vX=o@xj^>x!+^Yf>%YY6V^trhBS9PcqcKMVrxeCn38lhP<CT%qfAm$6%4Z&A>;
zr=-LqY2f_l*HI>HRC>>fZNZX5j}j|8aP22s-j?YT2=E2H-z%W+b7J!;Tvtw00d|mH
zkAHoie}~G-AnNx}bo`<&F+YQ-#9dn1tHNEHf>-D45c(RO)Z$ci5><Nq<@vk`rSvv8
zU|q(-SZ%Om-&kLaF67n2WhI8uR{7WvqTrNSuq3`(A^-eft0uG2t>5h93j%xf`{>*%
z{a(iFK#pfyLbx{OH&Shf7!$IBSY2rdLXo`6a|@aInV(b^wza+N=jg^=<*vT+S~WN&
zY43$&?j)OTT(TTdMv?H`#Q{RP4$C`ljeL8(PiiG;;}7#~FLIul{x^>Maq2kKiPFpP
z+p#zBMU`EG9@Dik?!V%fa~X2Rh@4+1J5!t#Pva$jTq&(l-iFVp<*}NYH`_onWWOu3
zID&cu=&EMvZ0x8z&sSzOQg1cr_-9g@n^Pl&$niuNZ4pZ}03E6zMfq>_=uFTB9C^;9
zw=A&ayS_ZNeB@DCMJ$1Cyp+=58<7QUAXl#s&s*Ph@4(I8BR?V7GqzO1nL;E~$~{Hj
zM_RHHaW2sKgof>^bEnvKOb<+TGJ21YcCImQDMd9pxX?(>>OYQ>0M0K^@Ae7F*&$K=
z;`#)U*<Rc4$DPgHOr0dxq2aG{-p`fM_Xt_w3%`bG7(BnGOI6J52yD$3fw2a(2we57
z%*BA5Cinw&pGQ)i_XO7nc%8QdCVYJ&r@xlW7U(OCv8)V$zbW<G2jt+jCJx%=Mr%X|
zq?|7{KP#UKa-W4FFWwq#8yMTcIRa*cnzf}@c8ZA!T}B>eb)EA|eo;1M#`UGPKsKDR
zh)vzUl_fyxHLJJwJ)S331799KA!ur-8T1Hsm3xJ|cs}82KQOH*uwZk4`|rZk*4Gt|
zg)q<wP56jY5$ji7bK}DzadBM4ACBL!DD8hO%Qrc*q2}ra4wEcgj5yC!O1v25B!$tA
zMKS5H_d|~ZDT>n+hH5mVa3R8FEog}_#!tg}W3=+ks+BVZGaWC1U}>a4@L!S6KnZf9
zxVcat-HGO1>Pr>Mg|0WuMrI<!0@fCO>3moqNZ(!_L70y7uc#qENg+L5!}Mih4`rHA
z*fmAme~3S`6ndG6KVN~(Y2@!@eOm}{e!CV_8tnLIIKO*V<B%vVFHV6aqAxsMuF=xZ
zskkhQ?Q*K{&1%^o`{!f*Nl7^iKGT*<8_ciJvd%@dh&h8!@OhQ6U3ZSu+(gll21(8I
znRLP5m_?q3S;dKu^vm)%2IdnDn<aFQVVD?UkOtwy0oB-pYk4FFyM#mJDwg*Yf8wo{
z@XMj}B<@)?Ek{K_6iUf9Qby;XN%h^D;~x<+O+eBQK8Ash?*;pR7(1utOrSN5c5K_W
zzSy>H+qP}nR>!uTbZpzUI+~u#b8}{@-m3izHmdfs)<Zk`=wyopWznqe^Hr&sn!iE|
zjaB)<EXD2x&QdVIE&!V;fhkg)EE2eFSz#RZ%>_mN{bZ$?LSJ=BF7bVgx)gmaL^R?*
zx#EmUnFLGw-8`AsMF=vF<j-zG$e$#yMxV=+fMH1vqAP^xks-~_!<nNye4yi8>0E2J
zdFYG>^|vT)`R`HE<WL^9*u7!C!BIwhh5Di&T_w{8J$r8{FQp{qnX}%tn{)Umoa?58
zZHn6_<#df)OVb8sa=B`cuh>?$=w}CCkCRqSRrA7Gv)%xHnpZmrcuUj(;L6|CQOT-y
zl64iPx!t6;-nOFq#@1zv@0aY!0i_gE+uI`j<xSAk^KHz|I)+#IZA!<Ncd`3lQ?GJ{
z%iQXc_)4&kce&3s23s=wqOzn5m<EuN(7GcE1y#=w#qvEcWATjcC7$XPt_$$rJHIQ2
zI8W@7E#L7p(Oj6kDlQe5H<IeCr2QgWk9Ol)Lq1AdEf_4BxoRCL|J^jXRc&#etb{s)
zoJNS#<gD=u!^KE56ZJ0M>nj~!0|fcfG?v=)=0Gl1Y>5ao7%DcGxT`<R)LJ^B0#jWL
z-FF;}m^7ykgVD{6-LS^8x~X)&K5FCqz*Y@;!#w{QjGGAHM9+v>tpyiAk4W!$n{7wJ
z+Q4a`gAAnvYlw9C^J2qIu*)qyn0gPiYpCGjWP&7p<g~?J0c_Pn$hO9ir5F=|IrpeT
z^ZTn=YNweGuY+y#dBZ-}Aa7-My?41Y-JSvVZ1SFAbx-}@BT}<g165hvp;i=KUQN#h
z?XJNcm(G<dRkJE^#=e!R82RaCDmN}M8y9wXe4zyA|9U{nX!&m?PDDdD;l8y3PU+}h
zyCY{+^Vof=8Zq3J&^|?3NrB?+=o<Jno~kAP`TD7riKzJ+RELx#@fqe^%llh9Z%#_2
zT1e!VSP3Ovua6q23pT#9>u&nq$v*7c>KQx9W=`7!`ZX%EsH7=V!g=Q~+2g3Et&#su
zDso&6N*rhao*_3b8yh0;mITwkgT>)GiyPdt+{XFASTScrUpX!D`OWU|`NQ%*m!|zo
zi)H7CzerP!=+Lg4<Y(D9iIq&FhVtJTBgW#9m;(fnNS)eaz3eKi5v3U>9KaN8G`d=o
zD8*zXT9bI%bvJ}=T&~HeWS$8gT&r^a*v@GP7n3EWBkC}mlfTs@ZWTO3f43t0U`<2h
z!2X~yiAH|BpGO)qb^92BwTbq2npN^kH+d+rDcT!FU2Ktzw5)3ydvp88`+501FaDj>
zGbcM`ak^g5ZAut$eVnpOr5X#wm@Z?2;MAlWLpkynA8FcSLi0+C!C+s$-O)&mS@JR3
ze;K`KH5CDrK?l&GszL)~%k>Vd#oy1n1_I19sSfhjwUK~yu{$KA^L`XS?HdiodDF_n
zyK}#2rWUX`z4{&t<0<+ixw7RBNtF*tS_IBMHCx#pKbbuT3H?3|?_O>do|S9H&*qPL
z66d?srpGNPbxD}8rIur2!jc|E#Ee<BO<aHi7VHg@w&fo1le&M>@@B743)zCNM0@s@
z7^IqiqcW#T>G1*8Fnu?(HLq;dmLip{DOuM_T1(p~ePQd=MB!R4_9KYb^OZCugBlD(
zlo=3E806%RSRyJi%v0jWAHuj$kOihIz0N_eKYuc_y&b)QHKzfJx!PerHNnxJP<s@!
zNx6f$hES(nDD#15fapGDqXd!yj;Uo=$NjG08lV`+lCe-nESc{G4ECPN<7yTGr4{Qu
z!{Ce1#34|SUr?hsqyvz1aXx7d32ZDPlk{?cO$-%WPrhn(d^dZZ(I2m55A=DF%6rJD
zdLJvI1i0k7Fr+nr3GUcp%BLWb5CLvL49VH;DeHq*TA@3g&=~MutU(cn)|XMCt)Rw5
zn{<%>tdJBqpuJx3Y)|q)^jlLP5;??z=u)DeLtt?M;0pq-ofaa|)#k`FfK5f13_HeB
zQGIHxrWF%*?nE%LHW>gbfP&C@c4#FJ!YZJ3Sg&+T6uou#wax+?26+q$Zpbz>NVU}F
zDmw^qHG!$sNlYTs{eglu71T6u0C8f+-IS;id@2KNf{@v=w{_w-VC491`1L*C(f__P
z=lRtY>n&~$b?Pl_&Iq9`|6H=iD?V7RHSRpxn?4R>*O5N%+**-*XCSBMPI5C76efQy
zV?m~?HFwo>Pw$BSK@*#_RQkauwb2XeW(~ys<t%#PR?*XX=AmmdL~F9H+#7kPXPG`@
zxTmC@w%*_jS}0X!u1L}Y$^6d|h*TMq6u$zzq&gcnO|TjrkKJr_u_NVE=OI_nz@Uw-
z$6w8W$RMm<6N?cMHnMMe;pTdW4Nig(!;MBaYF{-vT1Qg0F_SSmkYLSN=4jB3Wy}Uy
z)*2t3%wBW4lMSwhW2*%mYvWbFZWUWQ#TmXqUT9dh^9zb@;|*BSLgqD1(n6~snxb%;
zTmu#=Te3{70~maaVM89BkboV1h&Z2p=BL?0)%FxEgW`9Zl;(4Y)E-x1QCg2~&ZSsO
zm8m_(X=mWI)w=drhnY>6S|?d^U7-8)om<V5?V&F7pe~(v6OWNmV>{t%7ydE*3nI>1
z^xM*0Mjh6^p4cj~Y8P`|?R8vgotmMwWf2*i3bjYe6N@{@@`b!C-Kb~UJCSa`aA$y1
z&{QhD!1xK*JMdCtTTc-!y=i~$EY_Tfq-UYH$?5)SWvS~n52$MN@-y*8O)b8Ujx-{k
z*d>!mVTh}?#pLhO$h&SR<J@|7!yC&btHDmCJ!6Cg%Hbj!*Pun=ExDTzwy=#XUPB;Z
zTU&_ym#|Jrlt+Y?B>F){H0=qDdGKT%65|kJ2wJpT**}m2_^wW3zfJAEw{>+kBD(U}
zjU3aqYEEM6H{F~TAXSyy2{Q3Ot5zhh3(|Tl-LrT*f=47f>I43UM|gp)=tlo`mx@ng
zQdS>bnyq7G6WPNTTb5pM_WKokaG{9J4?6g7enx=zN08MikoD-ii(y{2<3q&{wsH+T
z-W>{%6l_ym#0>dBhxkE<Rv}$jiQz5lt6asl{6s!;P@dt#G$)zW&3iph-h?GS|4oqa
z!DbSwiel$J*f)I5&5wV2)}}rm{*j{Vgf~gNl&Op(Ubo+)*Uy)|w>@}x-A}Fg!Cg|M
zpEr5$;;sQOyw|LmxZF%&s;Cvbm-eYa{p0@j-u4W|oBdDvz~1u9t3{6_<S|CxV%M*0
z^}JIJ5TC5aKpvuBuZOR}!P`S1T8djm^uaT?7U}|3ZO!aJwz7~1!1WUgif79<9sD!w
zbRGPa$^Lg%Ru2g7F9?)+CKnFnKLJLff8!rM2^3VOe-xR4AXl2mej%-LZoH`xd4=mi
z+ml(0l-^xk=CsXehZ`xvE!^>&qGEWU^$dc;*q2`;zFyFr>ax-qMm;1*rZ07Ac8)-r
zIn~s=N4{819+c^{Ft8e#lsm%<Hz_P^7?!-}9%(U9zrEDH5Mwx#k@p*1yz84R$J2N`
zDF4P$6%(-s`GHuB|L*(g++9|wZTsNnN7%XQ-F~<I!9<@4)+_gfne7Vn7y9Yj^w(_)
zB&RdLxrf|dddt7r-}H)Qu^BL@>-X>c8foeOp1?so+`wHR|2W-9Xbk!8^ZyJSVw7`g
z?n&lRZ+<B{Y~F<L2A2hIyFeooThCNn#<5+E0;^bWiPwq_^3d9FGwo>_-99*s>rq{T
zl_rxGAkabrJ2!DvuH7~xESXp8byvPxX|ScI?|<K;CXZ%nuVe(V*%w>pdZ=}@cjP(6
zng%zfN_-_nn~#p;?qX@AKFJbNJC4qEI#ss0(woIv3C(iJW8TPb+3$SEC2+ME-Xx#W
zN|tyHD?KG`u@lD$Npt(yo)kMzDrCTLKQZze$y%nKBKy19xv)e0Aj-=I-+>@8Fn%&b
zDL#!&u8&Q8YxgIxc+h=G`^`t%@6{&MM34!JgaKxpWhMwRd4J*2Qc$E<P-8d3nS^z<
zBg;DHtb3pm#%!s~Mr*p{FX27wG^YeBM(cv8tp421RJ9r9a>lYNnb~#dgigv0ulckz
z<!a-gXY2#&R9|kfdyO=uFrV!N$pRoz>{643<+5da7}HhG&yu15XT4H_HI_FjP*ZQ7
zKhe|%$I<MDW+3mlTF0@!S5nteij%9<^<CiD(wJK6lrHiOY;=22oKt?6+M7aF4N4n=
zd~ntSBtwPCscT&c8{m}3Jm*qWPXo~qa3r;VJY?N&li&{MeG<1=#=41uI8GOi(Jwm`
zQfn)GLWi1&-+W{L_Uf$pwTBXsh<gg}DJ8_!comMh#x*o=N1PEliPq1RB|C)_lD;q(
z$vm)x<`wIyG4d{dmnP**Znf-yclzdv<gHh!vhfotKGK({SfQ_<d=ia4tCsw0djhFv
zC(3<Wv8Tq-mQ`{=_8%%&*F-oC?lKwTs<TbKvCI4R{+2#)*>hMNhmWNdEGR>MuB%LE
z6|8t-l=c_4m<jHC<k=fPB_#T@%J#wT6eXeMXVM;`k3OnV31x}tvq~|uN?M8id0Zz4
z5N*8KhpTvrSyW@DVNH0KlHF(pYs4L9otANe_eco23hPQVMK^6#Kf(i$Gb`o{koa4@
z^n?7UR5)xjHEGro>$jSvY-<62BMgA>w!f3H!B}i@nQ$JJca8d~-zj<f>yFdh&Sz)|
zOyfqqmea5*iAIUXX;8ZU9d3B$M3K&6C*>#!LgtLgpOMpdZc)$JjtrtE?IG$k6p<z-
ziFmYZYy4sps{6(Q6`;na7l0N(*L!dDOj>e!#^rIWjKGe@A$$H#xAzwg_Wm)QwPS>6
z9D*OffHfOai2l;iuSoo*u1-P)1*&q4_!Gg0ahuQgTq@)VL|Y?<^ij!>@~p#A&_N#r
zlvfs0PMb_-oUFfgo_1x0U9Yd_v|*~EnQ0~ovqkEJZ-`=aToxH&v3-c}v9zc~3cH}Z
zFBv$gb-*#1&Nz)@&XjuhTf1>ia}q=5x4MDhs8*So_YPOZ0tcSQj)TF<l8!jFp_`lg
zPC=h%{VUSaOFA?|KSv?|c}Fan38;bCRg56w0X|M21N@h=HvtlK-;-?gbXmQ=BFkO-
z=Z?4?Oa0^fRdLSxEc(WdPh51lO|AB*9BTevk0+mz`9zOG$|_k_wu6_G*nrNQ(BeM#
z&igvwzhq(bd{bLspET-#+_J!C@)G4F1#KRnyi0^EX>=9t<JCF&o0s~sV1b{qdhgko
zwcHta4qr_{kW9dm;-8g=io>Jp)$(;(+S3egUo>zhL(LQFF^k}HG@77^V}J%}_JFZW
zc&;21*%XH?kk37aC99d6H7S~DVsWz(X(DS|P&V(Lts7Jj03CdvAY)cAkPkX6Y`Y!2
z%V4lPRluGRNggw!m|^f2Lrp6ssnE7F*%GkxucZZbwvner?YzFfZMrh?1odjEAct!K
zO`D%u0MU)W4SomKViyMKA%!lHZOS^r_|-$ziO6AZ_Ahlo&>^#&wxG3vYAQr4VP!7L
zwX+_56`??f{<ls3F!BVP)g?()Y0!M;6ESW)TH4MLEuPqwnu5tS3%R1qstA@EdaxhH
zoBp`yfo!4b+-#VKu4SRQ+@0In)l~Gj2C!{DaA@WE)wWrUN{4Ic%Fe)8hlW`CC>^cr
z@u6jA?W*Y{XNCA`%i&k?j)A#&@@s|;q_gt?M5S2lJ+yw-!zl4y$3<~~u&UKOO-GRp
z^<+oq3gtJ3)`mi~l;ax+cZbvpe=>of1&%9RUc<_buUa~7ffK(RKs8xICUIuq*ai2m
z!BB;CMFHC)Vm;@PPr<Xn>*B{(&-V`Fs@`Rp=)w0GvIKamH%TH9+++DWuDb}f3Pu8c
z1KhrnsKhGNRu7LEyl<2H4L+CG1W|=)AGQDT5m@J#tX@yjqxeeA4$5+V!fASOqOL7b
zSGwjwVg>s!PK&-0llP(}Vj-0<^Tq%nr5Id!NK0SZ`!2uF&xiC_&iu9cR?+TghlSfp
zeL6(7L*z6pSk4NJL^ms4ML`o{RNiM=NZA&V0$qWl!BwfxmNFhT8k(6cYtvVh8ugV^
zvO=23JbFY{%h^iRaWCq#?us#|VCk`ZK&4)n%)&;B=ikNgjw$KdsN?IZA(G|@l^pj^
zYLtsyn%F>OH0i^FyN*EP>tR>nC=aa;Dp8&rln1;+NT2mU=X;JDY$|T??=`=%ELh2$
zarW7aLt{zF9YPUkf<wp-+bax$IS1{-+PF@=CB_of@|olE8_4zIn!Ada_Q6x|xboct
zN-BzNn$d~wIK=!vhJcM#VvY+jd&&TGE_*4l;+90pOd2wXt$Rlqyvs~iU2v_Ve0*>&
zalfr_m~`~y&6hfledNXk==YK6uzphm0VIV#kap@2ODnk^>)4!pFv^ubp_XY$9wNMC
zOJr=ZC~1J4p3RSlelf<gJ&b-m3iYS!r7rBTorKN<F+w$kv_0?o+m&&{Jdd2YX(v=J
z05YU_clxD1sUbRL%WN<yuC8Hu5`e>eh%yQ8J_{0-=CMe_IZ_G`eGwy<mfa`afVPd*
zgpnh?nP8#FjLe4uip2eEk#Jz3l%ALg&)e_jw1_ijAO}pCIp!hn>z%?-F6tN=0lIHk
z^wkhk$|sQEqfsah_~I8f*?mZV1}PTP(u55QH1gB9R16WbU`{%kg9aM?VhOxuG~zZu
zJx*Z*!9sJ;=6LL2n1VsKcjE%20lsn}nCmb8uqA8{LJ}##*{)M&9KKA&Wu?JGcOh|F
ztt0xxour%8oHveM)cr8f5xf8;OYAvSC`bMg@H3<^74^0&OG1%Yht+F-u4kJLZ3zT=
z1<hnFc}MjnB>vh$nmE!M6OO;3khYvWxf!o48^tOz{jmDx(Wa|Tb!k#FUHPG+DZC?x
zj2U9uW75~h*1_6<_^Z@7!Y#B>$ilMMcXgSZ9IE^pZi^qn>SyiKYq^8%iAqDmFTysq
zkK)%%v1b8s7m7I1LN}#U0=^Ur?KTitdNFt+`02_9f#Q?rwHLS=^|Rk>eR)jt_YFH&
zYUy>Wm&`AJLCklNX7Yl|VeHa4RSr76s?&ZBCIcGxWz_M?Y@B=txKqIzHZb0PJ3!zG
zWwVjkvgSSV#+E<U(y$dD!L2UY*-V_->KIQT?pMO(Xskr6^}P%ud)nfs#az;2fg7`H
zG2wG)SIv=|?*@{Ah+ISLGg&k<=?s}r>&s_|Lpx@MoDUB*Eo1DnAi5>D5;~C1YqHE2
zgV8pirTCzInzHV+OcaHKL-sE7x{{?}T$VXV(isZ2j#=_U=(#Or$+sPCd2)QS88@9i
z90K?v4q`mX%XQ}^36*okTfa!cg_Y6;LxG7<?*C~h_FQT008-RkGi#b`D_qc>#u|@L
z3g-3LJ7e22MyK1pky%5|L=OL4c1Z|_{x!LT!=4A*MPB>N`G3g-*xNQr+3qnP*fhgT
z?NpH$Q9QPZen6`7O@SJdSIqE^t&xM8>RhmEYD{y)kR?b0wj_oOj0mh9D|S%>I!!LD
z_k9v@C(E>c`<$a9l%k~s*kyuMU()bJJ8>wiJz6HbO;w2=D61zAk1?&^H&mv)O;xBJ
zFqg9nSv?z$@=dL|;ZdRP;AS!M)mA9mrEgC~t@Tq8wXAP^He&flXX=N-d3-!t_hzxe
zNwzFZ&(yhnQlY*KMN#rPb7_~T5tv;K#n`UOi|o_ch%Uix4aOGA*Hs!MC>bxJ;b;ey
zND5~R7<#Sbgwz~SC<gg(dt{aPsbA?4)+DhOe0b$?C$Qg~S*C~{px7-A&$CnZ-tA#>
zzmsyGZSevcC;aH>PtSkcTzuZ*%pSQ0>qc6_M|A-Ur8EarMUCLNh<l_xC4e^!KL`V=
zgxoLxtIs$J$5%~ah*F@$?Lu^XOt;1Ph1xq9iscX*-cJT8a!gtcv8$Xiw}{cb`<u@S
zg}J2I5ewAC)-9J}mUrpN*o!#%?uN?PYC?}1@*4N^C;bOvsW>dq{4vPLei}LoXVv;t
zG%)vqQ~}{w0wELna~;sAy(r6&<7_gEh-ET<wyi20eaiaeJqG}B`yVf@WedL^<N;SO
z!Dux#lmS<~0oSS~z3DjhH^p;I{-jaN5y1&Xej&@C@IH%8J)v15gvj&-;mHDwH$8NU
zBhs0fvj!d7sMD_kLMcUh-Ij(VgaK=nB>q%W$)OG>jDymwsTT5kB~Q-dE?jytflG)@
zEI~~#Mgd3%a(<+1E&c~4|73kDBYfvoLQVNj3>zVLiop~U3`XEFb*eaj?s;8}2>nb`
z95(kmbr7&-rn7xf6pK)nM)Bf3WdMJ)@$YsFQMkWJqfMY5d_H1i?n`Nl7sKVDo1-`M
z718Sk30hmem*93pEi7GEDQvOo6f}>_l4K^{Vk_ERvK24CP@}VQ->~;rX*{}1db|0o
zt(!d1k?ha<C6eoDPvlY?Mz}AR6|cqDRV5_d5qEm>I^(>}hLx$Owb~(WZjy%oxV~u&
z$0f6W7a55gXMsiI^$5|-XOlJge)rF0fhdfWsKQ$H-2E=lmQ2sub@dF^ZJcSZYYDQ`
z&N8=ED7LXvou+v;(z6!JOl&ffs5E3ke?t$r(#(#D*|XR<h9AaW@2H4BVM8dNws)|4
z8vBgTLK)h>Eoqq#4^|!g4M{URnz4FiaqI6sSvg6a>@yqpkhjFET=h~?#V8^<;$$~x
zUwYtY8Bk^OdRl{3WS%#C5F3xAekIo~CTM82-!;RTRa#d@?st#&PU&u)>@?fD9B<p1
z`B)B?-U7G6(|ZYLK!_`IX4iJ+jFMju6O_2oSK2)5>nO17{wLs@b&>Dm0ZY}DdDz`9
zxt`%eRO;p*-nkW{xw>n%Qvm}l1F>3uSz_NC?+I$#L;o)t1-rC~`Dy9|`Jz2ZbQWM@
z;JwHR`i`2(Y)@Esz40}Ax^oIW^<j~@`n8ZUr-y2$&SOe@%J-Us4lA^;@jjI`|8<*@
zA6SMT$QLsRs%&%T0!i(xPE+az1yI-WN?U1r#hX0qR2Ay*mF{$C)H8vvo%*E<`OUV_
zpbVOqpeJr{N8(9TPG6TC-)X~i&^xKp>plu+W|fz=q)tDL2WU(AsZ@N_m7ds@K1NnO
zPsLv@{6pf%8|z{e40P{ko#SSgnF+wVGU0upQUu@n6Q(LlS*j9!E`r88)iX)w!syL4
zpW|S9E|MzbLX$~j5xW=(tpa0#tC8zcbbZqObSp74Nq+Iv&B^dM`$~UUYS7$r(5wBf
zC<-KfOg;fjKRF!#r8RwG>o%EeaPjQ3FY8dYzBrv_Z9}vj9TIV|cb;$WbXBQDN^f&z
zL;p5%!s~+4V;j^Jah*qgY(h`eaF8*AQKsJ-If>Syv?D#Vu*`g@`LL_0mc*S1Y*$+f
zy0h2*jDQg5&W~rj4K<<e@kYWQ<2v2#pvA`#&MK34(wSW^JqaHXSfgW+@-&rhv(~ib
zFwkeNK;EDIC3gqh&ZD_CGm|YRIm*7>R^hCbcT+ksaLSY}v{RK2f_+RV!?6JuJye7~
z79EQhZ7W%fmzG6b&Z#`pb5BcfXJrpjQ0xIqD&NL%I`BjnUKiUzJA3$WZX)KJ-EATp
zUVab;bj&t2WxOA@T1{AxvRbRg)TPvym@-w{tkVQ|5jq#w{7M!J<<VHnx9K)`%AmoE
zd^nnR9hU|RXt8Zte%MFLZCs1vliwb8)<sml;@Csm$KAlKGVrus3zxBlo8UpNk#*`i
zx3%9Eb6ACAa;X4b_@3XK^JzG-nHB%#C(-PVSroqnOWrJ(S31n-bmGuqGj*UI8$*UI
z+)g{Cy<MYQ&8NV=A5pZDN`cGxik$-`{z(ocZZchq8ys~<W97ijqn7qb7H@&A=32(D
zl$;f@`bZztV%FEFup%EQv@YlDvd(~}VwQT~3_)M0IqE1ovbiK+EvbCV;?O=sP;m{^
zG4?mq5nTkY%4GnW-lgy451oQ%=*hSCO@bkA39U+WgSJbkyM#BidU&FBopvsEceeVS
zGp4bdtFzVJ%tcHiAnx}8I7}d(&fT+MTY`3d=W$gr-!twO8#V74sH{s6+n^#%GZYz7
zriV=@=s`x#BaB|^0&8<jC0s<AIA+O`Ijr<GN1Xl^`E2~*Qe1xt$x7co<kW+hww*@Y
zpiR?084r4}oNk6EbA2^d{w#4fY2n_xArCj!5M`{P5E@7n*H&FuA4-Gs1M5%dBw}>J
zP_}FZ$^Mk|ge0PflS58}VnfRlt2*J&y&=SF4WBJmC*6*JXTo*z=m!O`c%#$)l9Onr
znjM_=0X4F4Gl%<a=<>F;$l|oWpQj%wN2IEijzeUbM*s}3kzIbRrr1STNXn8Q=UV5E
zJ{O9X%a_`^r=dy1(@72}aq%BddM1Ed(vGbUQqanu_&*8*Ko7x}jrS4VXA8h*Y)GbT
zFtcdBmSpu)TJ^-e<D0w@>#PizP6_psS&Nt<+oA5M&<{Tp5=PTDzYC+p7d2}`mD5=v
zypRLp@N1L`s98o1>i_1HK58zNP1q;h*h;h&%bOk2<^)ZF2ia2Fs^DZ!qQX6p2z@@v
zvz<LTEWWCKJFxH!XM{9A4l3S`LWIL$r)pC%TMxMeP{dfoj1%%9BsH+-62Ei+%|!eT
zy@i0vCbB1UD-khhdL7#Pnh8Jb$^H7;g$O5b=fAq`_V07QYqIR&T@4MJo~pG^KrKNr
zF<$iwhE5rAE1G~4B$G}nj=)Pf8hT6di3dW>rj%=Y3R_3pH^~aXcB^RX@1pIOXsIcr
zejw9-!^8zj5lTZ;FMvqL-+4;i4ahst{e70f_ehL~Y+A;eDQ9@nE3GTQHLwDVw~|mM
z^o~4&aRmF#pZRWXt(A$)RZZ<OmjN_(h+W01detErI0}h&t1LrGL+7;ZgH>T^S%Fe)
zR*IcnIm%U6%pbjR-k+me?-DdA*U-C>v%iX0_uf_M+Bibg4*yQmuwX%bNgFUNPZ`z-
z|LG+;(r)soNJJ~Di7JTxG}$%8-qn`FHV*kh35=6brUHOb9Ro$^#{`rKJ<{P8fl=@=
zX4yB+LA}Wfg1(H@+jn*rjs2M~`R>3+i-(o1B1vWb*8K~umO3Ab_DS~|JYwbK8Xtd-
z(h*Rdyg~Ia)R|2DsVtZHjNzU^jH}5m>Jcav6+m=b6!Dg#e6;!8C5;qVolIOLz#1<>
zqdPG*F#G4q(@~tNxOz*K84_kWPm~^7GCy_Q#hi+iNQbl7N>Kuk9W3-<ZtAwJ3Oxa-
zK2x6~6hEXG(#x~I#mj+<`=Wm-7re%ANrsLf@Yr-9*OZSjVSN9DUc5KB+XxaW4+1*%
zDxNKNKeFM;H-Ui1{k3rb)0Dr39}=fox>ahdQeS3ilJC$Ke}f%!ob3>O+s<wK#iRZk
z7CV2bBT4&$x0%O#cikxTPEMW*_n2GVB{;aiR%D!~akx}~Ag)Kb6lK<ug3X4F8K%nf
z2ENMiX@to`Dtt*Ul3gE;m~TUE;L|b$z4G1}9y^--K%n3kr#WgWYrtrrooBZ`n!G~@
zRT}aN9HQExhC*0Dn{YZE9+`(|M6wfSXuS+=J1>|Min?u#8_2t7$EQfYjxSh#=aJ-n
zS6Lvn;9C+f+N#yohg}skc?N2+0t2zA>?0ZcBR}~cYaMElBGyiL%)0bk`a|$q^TY)l
zx=9tAoqE@Do7ph+Vsk5q<_E&8jwbLb$dO{C8_AG%s;g?F%dPLd_}S9br3034rd-*2
zDTt=3`v_=0B@0L#5wgk2oOLlguT8|7Q6az-5c2tYGteLQKLp^vdw`HnXD7iUzE;az
zw?h-^$hEX#aMD=Lq(@hukbi>7WJ)7d7|{YVK-*)9&SK}i3Opg|TR-s4DC$p0bqcwO
zslZyo9KJl*@RKZa%J!jTsZv9e0dN}q&!l|ibc;2p78>DX8>46L41Z?-jwv?CoBWNv
zHd3W`2?yR<Djh@4I-2q5fMj_vm0=(vXxV>^6GddzbBvX9e?GYsc7iz5g#j;j@x`Qt
zDef>>t%;wNRvt|yFl`-P-4LF0YVe3Rf}lAK<#s<9>ZXM9>qd_meGH<Xs$pvQbZeln
zmg011IJK1OsHKau4&T(_HgR6D8#aW$q3*gCp1lo^uZEw8dyEdq)f^*zJbg>QZD4jb
z6bmB~>x(rk5gdR@f>ALw^E_JH5tqc9?`GfcXzxIE<yZ$P(-n`6qrLZ(22n)j>h}!9
zLru>J#E(zv7SJ8ZG)TIgXRGiH4LliZ;?i|tFYsdM_b)XR*eL!-EJ-PK6N;8G$vPI#
zs|3~%`|?(%T-{Rd;8z}3CD7(glp&2Q@%rE-3TqW6W676>MASIMo8O-hLp9MxsIXH)
zWRdA{fY<c?W^8+IQgImD5eH7|uj?lv?gd^WaT>#4H_v3f8yk>nZ8Qu?7U>JtKqG+w
zlBPxzIfu0&M<n*35ycIJVtMXI2lh5+8ERr)${R~Md;<<U;K4-M0wf5K0eTI9%a?MD
z1WA|RK|W4n@|OoFIY{y2=f7>ao*MTuVL|(Pp-SpHupoYm;%W}d2u6!a8ZR(np=*V%
zYr?vMS$zt~|8G<Q6k;UVMW53dfX`@hgb9xS0Ksh$5!*i}>d16IO1lQ$^_I-IyS>T}
z;(p?k{Bhd$1e~LsPm5#c!-<x3ZIBA9dj+o&nC_1BbVQ~)b~e7~(<}L^rrqp#sDqcw
z9UHeCIYxhQoDtSY_K2eakT+EFBE3b$3O!_WK#zATbG*XGci~1j)P%0024K(VW1)B9
zPEKN?%(<A&ps6ZEbQ90!CQ`6;lV^AokcgIVP#)dB>-vgvX*OyFw4LdTj;Ons(1Hx5
zLz(21BhzZDXzlcvDnc7~#-1f{8LO;2#dXXit`r9Y<mEx=?bZ+<i9{)oa8~H?mvYG)
z2m-DkUF{P(Uxyw+B!&tR*^E|yZSbef`YDPi$DG66EfgV8x<3yOJnBTQe}+_m4Di&|
z#hJvy68%{eDz_ra*=_Wwf~4`Uu!?|IuW2*dZbsuhu8_)L)*K6=&~gw|HzDyv!C(tP
z47ZUSQAJ<5+|R(zG_74JY@C{iLXo$6=ND^o1$D%h2i6@kkaf>oAtk5#Oaw<OLZAP&
zF+RR7lXy9+K#wQ*O>Mg!DrqG;AfP95-!dOe&ip{$;4H`AYGc`NtJGVa!j<l~-$d5=
zC)!$B%2?GDSd%5#$kT*W@oX;zBlWkFmgJJdM#n>nuQW<)P+sgG1wf{m`of0PuDE(9
zq~J5;(IhDkZ?ZWp3I|I+LfMOFgr%+edLH~uzCtLps=GpK?&Frz_lVG7D7`;5^fU%~
z^n-74)qc&Pej`U#z3n&d>wS40x>+KEFsH{z%DY%NE$LA}*GXa3-*X!38SC>3>XLr?
zPLUu*^f=hMMO=3lnp5|a?qW?F_ebumY&(DigfFVPdQ)`THpOd+R2X9Oyq46KnB^A(
z54+nR9WEC3HZj*!XqM}`0j6g6p4hmNNXv8i<J_s68LrZv$?UP93t4wP7z(bICdKa3
zAdc>g1BYs)mA(PuZ7SEoiObRF)rj-H33N?>|0G?bNj@89(C(7)z_|4f#DCJUiiGHR
z=>LpmI1v9=9fE_ty@RRUe}_wARc`-RruUWCcR;BRX<SmXB>BY}$yixf8UUQTBCjR^
zdvA3$?zYj``tva(M+ww&@%HQJX8XOT>lD-$VPh`+U8}*=Z13#p>FDu(e;y;l6m^sn
zZP5}Eh3sc;SfCD&snQ9<J44h6hD}^q(OGVZfwQhhB>j7iB~++HC9tAp-xOMl%|ihQ
z;gi0<hSmVBPEZ0Q^k1T5A|nj!5cSMh$QeXNfLNW=yg`DJ2aw!xqMBVPi42qAj6%X8
z=F!_)b2mV&+vKoD5K|T`D>Er%*p^~hyw(knG3p6gTkD+4(8&iI7#b2*F9NUeRIfBu
zKnF|Bu`^S{-48rv&6My+EaD)CRV6+VEL!Q<x7nG72lV{Ix<*k<0B{o)GDViNII-d;
z4!oJ$Nt#PIvO_yI5sBIJ4kxTsV}>5GYfn9M<fe_;zBOaiRzN+oyA$Iby7_(-A0AE~
zf90gk*UWfQK!WvAjMzC*r<$*X{W<<6&LsR_a5f@6ulBk_=^ag>H_UPu;~+lrku@Nv
z(|~i6Od5jNdM*Qa!*}jyHX+@9#2CD{j!yT`H#&@7dtZ+Ty;I#?;L-t|P(#k?t*7<y
z7BA^WpY<S7*dM1`G>b4#luEDr6IJ<5sxqh>JIxBM{@>6Irf|_8a@!l%C6K;09sBKy
z9MI49ySs`ZEYM`M2p><4ri+v#*ZXl+KJ3nfw6>f87JB_~<JeY;FzREg+6Zl0FQ<sK
z%l4!Q8N1$nS)x`Kmb{LKnwe4-<a)nwQ`X7Vf4@tTB_XLaYaae+&h*J?G=D+I&_*vD
z+MU#0M+I@f6<Ol0cs~fx6ho+My$v~TlB;$A-I3q~R0ghpEjxsWJ*}u*`!^Ofo6060
zY#G}HPT%f6VPkod3q&E&QRGGzOiB?leiEyFod~q5?5M}kp#Iu7KmPlxlXHoS&Fz>o
zqk<}LAchgOq*}KtSJJ|&4ei79T=yl>Vf0z-`I1`e3U34)lePW4oiuiCdh~XMNR?ZE
zQ7@%-{ki^JS3B3c?qaUg?bCIgvb0u8Yz%!x_|F~3CfVfM_D>4ULH6qx$$#h3-TukP
zot*yrmP`F-Zpx8B{^si|O7)2($-m~vUcNqdLdN$R9fu_}$nlV`LJ!N!?7bt`yYeXh
ze66y}0y4wwS7g%?=9gDhU)9Fw_2C!3olhENd4$F;7{gFOr|pjEU8L=j5H86Y2k3^V
zP9M{pO8!l1xULl-_<lQF<gfkLk{h@6j|i4B9-B{0CHpD%3ruNTBh&o107Tdzj>gM4
zr}HcvfJAbn&G}-T5w%8vrWNLkpsLi*@ciGz=zW~s0_TL4ipISK9hC~0%5%!s8gOkj
zB#^%L7n=oW#r%*<i5`vei_F!oKs!njNqaGhj~ea_8XzVYG33Db?^1(gR!`O(9KLAf
z|G=&Rr(s}ugOZR1%qFNiY}HaOeCnsC&(6+bKwS~d4n>o0>Zuh-cjQLvB8Ap}I<a|A
z8u8PDM1ALC07=uk{aErQ!KQyg{?+Fx{T#V^;O!ico)%bZmBpEsMdQx-rrQjVWFK!f
zfQXZWP40(Ih}xryrqY*3w>JK^Qy%@!e4AG~ald{0Iop66cwOQ2clC2!0bAE_lsVKD
z>*0x%|5Z10e7R1`&>i${lzF(3)j(Q#Kn<ye1R&Wbj{5BLFJw47g&oMx_a1pm0#mFv
zwh&=vN#EKJZ*qPbE%uy(jMfzFT})^1n~~p#S4;++e1=W2UZQWZQr{Cq&Mx3hhdJEX
ziyuVol1qMC(X0fHpH4}SnOsOWGA*~nh3W*twvkE&F_j42P#x)L8tSg5#P#-K%p(q(
zsvN%80Q=X~MVMY75b){w5<9Q1fQ`%q_uY}p4r1JoGBn<i&PuH!#GZ&7a*SB*9fDT9
z9TuJg1MuL^#;9JDWe+SSy=`u%F-S?xHz~5<wBmoXB~h~u?QyB`p&hZ+bH6dggV%c#
zJ1lvx?x&6OqRW^h4hfiGHNFihf<wO|<6=v_z10lkAf2h@LPA(}(7TAN&}Oe8CUq^s
zirS`%mH53Sqrswk9EJsw3~dF=`XSz2u?14GMXaT-+9AS=8|kK_p~8b>^{yRxG`%P0
zmh}$CTJ$Tt$1Eb#<va9aB*IhUUMTE<oL^oGMD&O*5E1!>L+8bS`#T4Sfv76AhTcf>
z0=fw^B1mt7L%sJ(JR~7lPpq>MZJ1dYIl|nBiCP*uI0^-~wzu9-TgZ}CUnc<Y{5sL4
zaJ7C+VO2Z>N;VQ3^sTvU!p8^|>4G=(7HRR$c%(63Lk%wTf{$D~ll?G%Nzq+x@sL1G
zxuQ}d3xna#LY%GZOAeXng62zh4H;cq(n+Dhd-@LQTfBXK&8{uh&$5sA(mA{>;X%UZ
zJ=4Wp^Wo=RDtmRh+^kNjtnL@wH$Nt<9ZpLGS$0)u!p|0yXFB0aU+Ez|w+8Pn1o3A_
zxTfIO7t07AdTxKaKvkYDa@eW=`OGlH@cd@!-fjc&9)#cPBV*&zI74n_$&29O`-bMb
zeuDdK364E~q!cSz5Y82a&n<F|<y+}0%P8Y)&eMe}c*ISgQ5;L+bjeaVb88V@T`t%*
z%^omo3gt=D9ndGiyNP#x{3g7Y$cp(pu^7_5Xqu$e@^=M)MiH&UR&-UJ<|IH<w2wWc
zlI48wCUi@%#H_vOMDoYf5$O4GEaBrpZ$H^W*}!_E=V|wZN(9au+hNb@`0E)es{C@b
zajPQwQd#6++oZM<<?^)Bs}V|vhohiq8PD`j9d&mMTuai+XI6DeDH}ztWI-1)8sTG|
z<dJQrd{l^lw(CQs@oaXs{RzRAYu!v@!^*RMlYYK91>thZkp(F67_Cn#-6*J2yftF2
z1((`!^{)XnB%2nQ`B7t{>y<9}$=IS+?cd@I0>0bI7)^S#gu^;0wUacW7@NMd>^OWi
z(#R>|dYE})x8iVPe<mGjPT}j;!n#v$yp4#(^o{%oH~gD#Bao&WNpTFA)M-W(A`Lr-
zHMP?$yHa((NTa$r5J^V6Wfn<kz*&*oT6)muQsbpgd|5E6YH0E5>J?$Y8IYAUQ^Ht^
z?(21CfM40Q9a$GSPO5CDB$HES-QUNZn0Vcl1v|AaYr(sRbrNv4b9V9IVfNH6p>}@5
z!hkPPt{02}?)!@K0tM9}Pnai1z4j6%1;(z*t+wb4vj>|z)}pf&``gV2TSK_-_h!o-
zT<X-}CL*g;!$m3OT$B|(O}IT~;)50=@CpF;!07e^ExvZ2jQ9~q>5sH5llzCfTL3`^
z)Evv91zb^sVxU@k^i>cKRN<#E*KkSy5*-ACd!yk^VHXZl?rD%~0|wbN?_|w_(wlvO
zfg3c~9;<>qR;@k0U_vgV*so07)99~EnQ6?d+QZVK)sedE0HzWR%!L|^qDoLXC(#`U
z%c$Bf&C+0BiTjmsPoj^msGr2S1z78AwT_aLDz=G(X4=XtMHG0u`F4nE>QhIw0hEA(
zvk1d2jz$zvR*#^MRS(ZmR;N1$?F?V1O962d&FT8tG20;D7v9)(3}QWk)z&p9S2X13
z`YG_2u0fhb@RpX;49^)xwJMZoixiUr&S(vy-k5oVvthM0#}u+O3Ne=OJMuE(KhE~j
z#}h<p#qGG2AKlqZ-WSyNzmq0RT}wIP5!URy;xzIe19Fj(!Zh7s5;QnD<PvO<33K5O
zRJs)ku3EM*>VdXB6!yh<GY)A;*qlnQN00u<Nd}pyvqV^62Y|1td<eR<xvvqRX$nv|
z*|W~OsPVQ;No~^``G;8~n=FfKD7^hXy+P7+r`d*8Zdj%JlR^qoI{@_rF=!vuX{5Oa
z@U|Tg<q&-fdP4&|Eu?VEE%(BE#F|>aM$z0zieF1+HBi(Q92k_fP}{QE<d_xTleRv`
z)<!;%!BRr7TfSp5DfWh(7m((gY2dhry)Rq%ve6vgIzHeQ=OLK&jFXdE9cl0^Ni0^P
z7{|&i>{n}$9J_-ou54|pW)u3BjKj1^jz;OS3@>`T0?8ka)E!xB*Arp284dj!TSLue
zgUUJ5=;7R}0Pj)-JX%|sT3|s!EJ?t6RdJvb?1{$}(ER@Hb&>FTDm*8RZqVBnkPF)k
zv8{z$K3`_0FBTtPbVwXeVuA-hXpyyDj~3ouuwh2q6tS8V_j0iwyQaw<ReUm&n?IT2
zrKBC|Q1-dmaW6=CnW|GgINI&X{zhTad*Df7?b|48H@>sa+5W&Sml`G`3EOFU1z*jy
z?Ji~1NjGB#ZzH1*(|3=^u@R`9-sL5u<;ecxdH<lyNwQ6NyGFW+5;@|B@>idgII@q_
z`En)F%P(Zm4?#9}G8+838d)t8oTvZ3dMp`nA|z4&seB#xAGc66WBhyP`C|Rz|DSI{
zvk!*vCZu1#kR|_LZ$i8Oqm^!($I^L|BkdpKZ{VIv!ugPTK0Vc3Y(v$$RgC>ksVT>m
zEY(1X+?b$H5*AYZn__*J@0K@!v|l(0uiV`InJ7(SZ+{yj0QbhWf!7UtI<28STf*&g
zweNfNJG%HV-G*cT%4&2dJDaa7u2_C6xtcjWnNkj3g938x7X_(JKMMY?^UpsgX?5?N
zM}|ZGv~d2I47LIAa}?{{ejI-LB9Fn9FN?Xd`^2C`qvs$}TuwwttY|;h&%u4B39*SD
zOD@<T9PbRekQ`(?cyXYI-FQ)=i(x&?khwG{7{3E4(B-RKS33LllP2=CallEm$fyxZ
zI&siDqchn|wgjiNA199vEjk3!TmtEUAnGn&rDS+kPH<!nIN;O4`jP_4Yhdg2N|o3b
z2~S23Cw>bQldQ&^n>d9BetT~&I-MCSVt&A6ETag6_vn=wN9~0;u1bH{?rc>C>Q-dj
zdM+Ro_s!6-As8We9OmvEz1wuVZFR=-_OJbRpflI!bfh4N$&lapOZUl2Un{21a0V;S
zie1y>reB|A{2hujXS}eRPZGk0|8?X#Xo{IOg4xfXFl~@M`~GbQKI5(~o379Heb&d&
zn2|WS#`5rjXAaCIMTQH}{!oUb_gWXltW+BACv-Jdj8y#`k<XcHvbtKqS-Zb+<!V#`
z7OKDsXTF<Er}4&mIk1O*$i{#=N4ATHKj(Vi8(mimI?u~k(F&v}In^O?j~-{yjBr^G
zRDY(e8;a3~j*A^ZO3D()M;>jht0*^vfJ1!d+v7v>rF3Rx9Y40=1bnf*puFknAz=2d
zinNgS$!e1H7gVWR5O?!c?&9(NnU~Vr*I`6M5B@OFse}!yxOm7gYo*0Ji^JuGN4CQZ
z+<T(1n|bHIH>!S#ZM9(@3<%o`Yq1F14&!~77XGvTCr&hD)<jDazF}uMUc4sfQeh{6
z`gMe94VRm}lx+#Zgyf$Izr;J!6pO>&iG7hnRJM<R0IW8h5dqGYtgjre5agI1AiGM&
zI<{8f-q6GN-t7CxUl9qj$ml{g{Q|&1H6v~brxWmC<w#?{PMIT^xle(8Zf2PIU3sBG
ziczsc`<BQIEnI>#y1tWSx4dV5B@7y7!yS?(BRNlm7{Tw5BkkjXx1lc4p1cxgQ2<z<
zKz4!@KYnr^Jt7ZBF|U;@=-w_4q2ESjPseaSBT(%Kkug9_qUp$aK)G1;fRNC_whko^
zMkhgd?*Xq@Q5|Q&<L(FYr5ad2`;NlgMtIa~t97)`2}E-%cG)QBnfu4L#0EkSnp3z~
zoDp@$myl3d=A$VpZc$Tq8B@k`mca*J{bP3sjuWvY66R|hab>g)f|jKjPGQKveq)3)
zVxzafvprC+e8PN0?=Iwq2ISPpfIU&o2$;EMx<F9cYA5ZdBG0{Y=p`P27+R3(3|X?)
zr%5Zi2<1nAkF*j>5dp=@8LJ+ZISF|n6YxnXc!*U=0Zw}j6Z55SlsZtUYgxuZ{LF6&
z4!+$LL!=gAIO@0s5n(maoBOQ^&bh8DxZE3iI-@`R1Nl92eXsE|_3p0cE)c<0f`N2z
zRHt}R30F9rRmAMv6Xqfu%+e~&8s+OI^(EZ-MT&`C5~z2wi=Jbp#ZBO*-f)X9aw`w8
zfIwoxlf4-ymFi;zczBJW-06N$AuQT#GRyQKNi;7wJU;4%$&yo5$w`*|r>3#m{@JM_
z&>Zx)KO%2F`SD{K{UXM0-XKqR3{8}2CjUGqfC7l6Hfp(RqTA!)R2!fKa+5&%PH-1s
zgQy!wtEj26(<3i?`^r5T(WEI4#Qq4-`?ZGLiy41)8LrP+t8ycN_gH>lJVd#0uaqQ$
z2S@Zs4^7h()>RT^P`}y|@byZj`V$VDnD<p!jzljs&a5zkU?&hEH~2rvC_|(IX8w@H
zKpxfFEMc>pCla>jrH=DF#Xxrg4MVjM*%&}<e=5F!nmXY3lP>DWhKV&r73?~G91<Oj
zq}xj3V|edcm}O{pwF0F^5TgVd<+ag+E?k+7sj0-VQZ=@xsDa~@mM<QxfIb7)*Y|RT
z^UnFRJ;b*7$NaNSL*l2|BoLD-#V=V4^E?UuhRRXve@76pn>k|tIEX=sRl}|)E~6hp
zCYpzY187Kcp@^8nrY%PCrDxw`)uY{9hg$;Ht(rw(SOQSMc`)C)kLyy?>b(i>@6JHI
z66FeLQpq2HBERL{7SnL;ps?#o6P8+nga!JxOE@?e8#WCJBJ=C#$P}-jdH;30BvUx4
zJ?Q9LW~D7GExkwuSUu|C0L+!dwW6L2_v3t>)re%e(lv=T3M6(W)5f`@YG$aU%U4Pt
zkI$cb={@;06?=A>QoZ6u&(>aTY_3=z)v`nEOtZzU=&GihA<-;ZFe13+zuQe{MXVA`
z3M7Nrq9{t5Fh-lrS9dRF9<KXOJ6dchv>{LA)sUnlm}4jOz`{!4cV--CZuC#p`c~ks
z^1Fz+eHx9pf-P_FCGdCWo{n)}-_+jvFTeMFp!xQGV@|GP5>NN$2$Z_87us1&FWAdf
z31BRB_tQGY`@PA@r9^dGt-7F|Eg}}$T-c!)(%xjF6~gDG70A3VWz#KJM{ps%))bX(
zw4?sY{^ei?e@>*Z0%_0j8}UtQJx6q(8HzeyQs<VA?EY71A$*!u1f0er<_xMOF#E*}
zh$V`m+sAIy2^1q1?^0I6+Iin)cb}u&z>TU2?MqTy&ASS+l0x%_c~#apG-D7`R=n#$
z!7f#P#5P`d7Vitpv3xnbis!YKd{;hOd9_&e_8;ZIqRwRXvr19tiVdqby5E-Ls;`Ga
ztcoFl%k%8e?@G!9j2B^I0Of8nQVZX*0`Tc>V|B2@7<=&IVXTYlWj9XshZ9B-v&nTz
zJ2Bm_Bdf-5i7b5iIVr0rWcejOe~+J@dPT)G#QLm@On#19vi*t9^WAkhf7F&zUC<Uc
zymhVNpK?-n73skr>j}$71WWbaLr=x4#ZdtfxU>N23hH=~&cfSKzThA-+lH8S9ft^u
zrij+CWV&TYX|pX9<3emol9`)rfju>``jRh?-v+;v@nY|q`+;zb@*OVxPON%|yN#hW
z50If?fiGeah4{in%ho7?5Xc7CbzBn$9QV{A>x^TAah$nG0M5o&xj-e5f3Ev;rxB5J
zp~lDO+lO#Hc#f4kAeyBSSaH)FR)+>OZ$G!N?7l?A(W)sby@LNWu#S9*W##V(sNKID
zltq%oB&#*eJgeS1MJyZN5^TGD9M5K53fs^M-iv#)0i<1#@9TjIxG^R|DEiYvAdK0x
zm{uVespIxcat96w#Mw5l^BY<ajWXXJPQMZbdL#Pf9oWSLd>Kb<&9r_|sE;er7s=$=
zNR{&ngfQiW=T*7?!|sEC_CVi<y)FVoI<b%g9UOk595h5+T8)wE&LqGcI3k5o=;e-n
za)PzS$*5r~N%Nh4?FVxu%!vHm3*}a;(WH(`bgDg{87^2E)LGUe)fSvoo*d8MfS}g@
zzLG#B4XcboimKA&k3-HGo>=<BxKvpflZ@T%&5T7*{*ue<StvwD>0(v?E<_0_@rb>i
zOdhn>=HJILp9_3U@UljAjZIXuoK-7(5a8<pGQg(SNZ5&zhg0%cj1^x|lanx^fK2_%
z{N}I4Lowx`G8Cm#Js0Ch2#Qp=VkbdccyNG({@KYTrJFE9^YdOYe!=TYzy&Iulrv5S
zcpvyGNQXzT#ID_?{>3RxGRipM#Z{F`{arCZuW1y?WCF}#x|y?3*DOv~^~vu7)awxz
z+rM?K93987U15{$Zs)8T)rw{UrJ@VT^AVl~@1o&}=o|Lur28DsKBh=?$aZe`^lDbt
zZT!0^9TV(%Bs_5Bf;xI-MHeBos;B3VmvPhKa~59lwe?uh|1kEB-GQj<vUY6SwrwXJ
z+vwP~?WAMdw%xI9+qV5??eUH?&R!qpJpbWg-Boq9heIQRjPV=bggtbzm-*^zAv4+l
zgV_CTDlRW7RM$K+O2!h~9G~xfKi|E4)G%F<!4_N20(^V;@;pAXcAdHYt@}*pON-K=
z;%pIZ71!Wn)EMccXoW6783hD$V7571G$#vOMnWZD*5Um7%%(T}0(I4BD#PhZ!JIGJ
zrsXm|CASg*z${$@b$Mjp+(==4pyAvh*AEVZfV1Otyb{V*ar(B@Y0XLr5p9tMSqwwj
zBFg@(&|y1Y2xsxn&19lvxl_8?J3``Bd6f85(HDlaL<g%RWDE5QpyRWC(z1vHpy4L=
z+GLM60)B=HS2Vs9%QW>$WBQl##ybczYIRap8x;;eYDZu$*}L^q*$YY?Egwx&d^roL
zHqxed!-i(X)&+r*kY;(CAs@S|@L8oMMU==V`4dhFlG*^2@Yl_Ovj*T&LK@}(R;Nm8
zT0T2&;#`+i?W!vY+7(a$z8;xGjrr4JJzJ*wELX!C_V%nKWL*wbL$JE%eMsz3MDeoT
zQ&uOn8$z?gN4*5sHAa)TcQ(lw_1f}T2v???a+oW}t0$3;XdbPNaFJ-m91f1WQ``w*
zlH)|<*i97im>?T;HYQP!nEYuj^HoZ#k2~n>^##nn_9(J#`cJJnT^`5fmugydIRx}<
zvoN<2ddsK&b^Eq+^;8!7XT^N?d7(q##4%uHF27kmv7KNUbU#-KVWOO2Dp1tU^beGj
zD5Jv)12tXr8DZPf=6BzP3FK{@HV+Eyf{oa>X?aN9OMX37gIP~Xa#TrB<-!+#`NE41
ze8T#s($SacCVt$z<t<MakT~GqdSJUK_r)EhYX;UAd>sm_tBpUgc=fK0alj?sttJZS
z_nU1(qv>{59x`?2gByrs`tHobC&IlIo;oxN*rMz}rp;ADF%Xv=&yVL|V?1wxtel_4
z^VJ){Nd1Y(GQ)+KXA;40B~Zo{247zzJR<c!*^smNzEMw807mOJzWb!%qc7&8`cs}*
z12nrcKV$81H0M&xtWVivW3la9Fig0TY7pFy;_x?TpB`_KPT2NHqo9}i(+jN)DqCdi
z!Kk!ni>+&*NO+JFL%J}aQ0kU!W**k>h`4Ka$_HFE&@TK$=9*1#)|+z3QMp8BVGA5p
zvH46jHsNmSYF<9uuR8DiCeC}q`X#RZ9=R;3_wAJK;)U4W8Y0Bb_oqMN4T!6&3e6Sc
zy10){yymb<8V-ASC}g*W+tIz}J^K_8`JkJjdGnEPMqXQ!MOpdb8MTNu9BqzPPm+S`
zQb*3HF2U$UXhK<C*@Ls4H=J1^PTp$;kp|1qZjZ1jG%Z9y{Cc?dAG6JHo43G_J0>7a
z9ilOZpBYmcZ)buRQx@sODsw^Qg=HMMmIw{q{BL2GG4cL9utU!3>#4rf4efVc@o^$c
z2$r;dbrECifjasSbgW&qOqHn8%tiTjT)h+qNOZW~UfA%3NqYf*02umKny5Dz>2exW
zvp=pkpUVJMNo$H4mWCwGGp=S*x8}~z1DDCkkXH2{TtbZWY4?wugkfj7Z96K;+}1H4
zxNLhAEU=`tnbDWdtDk~dP3^<qi0V!OZ(6c^t|t!iN#_exkQU+cxhD2;F!Ur7d`t#3
zhOfU%emYG>sO~7!ADXmLk5wD7BGTm}nto5Uz8wv@R(Tn=G1+?zn7axAqTb{kZ&ITV
zK$F<tq#BQcF{nS&5h&_9(TASL7^yY7-%-Q-u^(VDQkx=3|Fs;9A7C=8g{3b1f>TNj
zow0ArLw!_r)FjFNFsovn*wNQIr{AS1h3`Z+I>qLww3HO<M5PVg`^#}@u3}d4t}sv5
z0@Kwr{b$VDAJ-%bw5S>mT@FN>IjmR{bl65Xb=;D46I2Uv&rN-Kx0#%@X6O9L=c>Nk
zB24=Da5W}bR?|U0MOW{UQ2l3K0t2&5bDs9g7UfJ*-zQ>{f-A1;L$S%bgVpm<KK_(1
z8Eo;oQ{z{OeM(j7oRbm;Nl8h@BuM4K{I@lbSZY?<Z-dqEhB*H6t}ifxv+6FH#l;p$
z2$w!}Fh%e4Nenf2SPP}E>c7{`8fwKi-Qg%4%jHK}zY=V{+XKVcX<e+>dwSgyE1Sa&
zrv8TKe}+k}De|8~roOrKXBazIvf|En|5s-<8v;N%=MUj7?f;2z$Mnw=!YHNxA>4gs
z>)PkffnZ8eD3UvGk~#NqHNsHkdcL9ruOP^U<F2CXuswEP<CJLS{nG4Oaedx!eBR*v
z58)12<*Mn2aCe-Nf?o61dB0pc!XYh1cYF_F)ATl~6m<SSguCVcn{Y=||2s~+jU`i%
z6m!`x#>@ddpxL<@ORoYM;6ol2WfZSas1&A!ClwNyI?i#YBQXU+NT~b|6MDEbrxmCP
ztGn=gY+*P^(?C!UWbb%q5m7&pWxW{>hRjg`_<s<0Y-BJNbw9tLvE|s@$#Dd!doq}o
zb?aR5|AV+ACLgICfyDFJN{cnuVT7}VWy%Y<_~idTh&%898*#U#sC7?~Exk|Q&-c1Z
zucq`L#GQ#3mV#6Vo+D9v$BA|}1Zt%(QND};@${pd_khvDCAPGDVWQ15aV_tght%hA
z;GpY`(uVWjZM>NhPE}1H%8236+EzVADF$;br{l2>{+&w6KevWUbk?d^K~YFBUKyL9
z#6Gtel=2c@#b=w0vx1v+97rkN8v~NDXC=JKb74(|q1h(kVBLDtiJ$5vXqC|41uJC^
z;<<|mNL&8IS&^YePaQE)whupqyJh14pKu2aKg?e6N)#=ckTFPpeAU)pJ-WGJx7oS0
z61)9t_I6UyC#*PddaAMi2XII71Gqa390!sxEIHrQb>H$Q*v?*XUa!71Q>D+;<c?&f
zOH+6E1^C|@CDosi3W*=5h|^D(I?+GRt#!?fjP?I{QBJBTIIeLZ_&nFFNSV;Nob5Tx
zkN>7mnL@BDk%nX->}=yR5BjU89eGf9AYVQIy_G}&0=~9i=L0D9?)`pwMb60yzk}1>
z{#(T%Tg$B5{r-J?Tc?SBhfWM5sgx`MFp~O{9tt{Z?WmoJ_5=lVgUiofi$$GRZ;6O#
zm^BtCsTal~NgvcDv{>C%@B~ec&7WKWdMBY;zgI1{F?cO^zpjmiApsP~2Tffw7Ai<5
zG5A1|fTn1Y_cg>sn5Y$qw<$A#GdP7>>=!-VTmtOdrW1z*{&HkBwZV8{T~g+fszsk#
zPgVcnQu5I>i3VK?tqd!MQlk^A+)}QQk}P#gL_l8x0Y{P~igU<KN?qDQ)yL)hT(~kC
z^<adEa>X2)!`he}&X3<dz1K{-o(z}`r_P7|5~QT|aIH}GChsBgo!jGV$S}P_4ia+Y
zWblw1AQ{sk6b6Y2NX^s-Xr>zzelEkwZMYh|;0k={GG@D^h2dB4C!4tuMKMegJ-C^A
zTIOV}kg+%YMY)I?25U3fxfi4#9{hW(k3quKd*icxY+q*^OqbBxb1LtZHkg0ihNPfk
zc*;VYoB1klwGeuXYG1qScTZbwjv-b96Nx4!r`iE`+&$D3CD#)rJRdmW9pMvYS>efC
zQ@^{O+fOHd@oX!fhEI$@2=}^GCSc9cW1n-6nL5!56lap2KlV=aWFiF#{YdfF!KhCe
zT}-TT^y02Tj`>p4r(oJPweq0ef$zvh9#y^`Z^kC4CuZ=HF^2VOP77fn@dJ<%Orieg
zv06>)BbRHIoohZLWsFW&C;NixuyS4%HK=vE7Xr)Nlm%&O>YtfMq9@Az5KaRoX(xaJ
z(|NF?y+?Zvdz5NO615Cm`Tl7}n0Mahtq<amr{HhGC17C>RQ64om6*WZyb)Y-jK)ap
zMU$y2?(_Ri=V9bem|-(RTF$^5^yjWNFudh-t`#9u46d4<#l>beHV@ZH8_`Y{ixUF2
zRtK~-Ius{bT$!~`-?<vC)2{d-Mmwby9N=wv{!YWo>m(m@B(^J&4vNz+P9j23(Uf<8
zOg_-|)cvBi<69{bsDlUhAMyJ>YANvwXtu#l&Ku>jxyF7$PGOdv=mqS5Z_;IO=<V>I
zOG60Z-yoF6KjsoUOJnzc-lm;uTDE%}C_cw(nZ`v50+j6LYECPv1_W99p+Hdjjf)n>
zMd4CR*cT)AYx%Pu&rMk%NJwUB)nxF9b<>C3+ife28LVb~VIf*aHN0?}<KyEIIwkMi
z>UbgUVWU4DWY7ZLx_*5O$C&z3(0&2{B`OiUJ%|Rei{>CgbIUXCRFRe7)YeqM=`_fA
z+L;3bUero<O#oMxkf=^jA<hBBWS7=sv6~%mjGKl)VK_d(P@BG<mhiyc(c^5U>~x7J
z4mLoKX=_3&=vzB#nQ(Z@vPc<nV#8*Z`lhfUX?4fXFy?Q*BR<qO7%RF*o~iy5?~c!h
zhlPBi5DF;G#H#ghMQ+%V!&@1Gf%T@f8b14gmBAaa0qvaTzvp|3JKN|>XMDS<h}>q}
zR@e?r+S6r)vg^~`&U6t&^|&U;&tVeWMA{@>P-M^RFN{2O)VwC^O)kihrc+i5fNVh%
zzKxtAzPCSV!p*Rv!Q<I__<-J(UB>=DQ2XORw0zjEGtxeg;n^QcIFdx!rMbbJuK@!@
z=@T|bGcfN_Yb{t|rZu>d{AvtZG9|!GNhk0r4Rq<gFY_20GmU|)kDE^G4QZu*HDR`W
z-S1hxV606S{C-bTd&-(3mJ{4-9U=;9OA)q!MR_QP{k0Ggg%~bJjVPKSsE8khtXOtQ
zxz;@`S%8EAnDd1PuvB+>f%@qqA}#%=PJBY_{i9CCSW$vaj%_!*=(AI<L7aQ*2-Nai
z5GJt%d178_QUO*hI`HCN8D^|n)o2lI=9q>_C3(iB%CIH)$43KiP8t0t&m3dMB2ur*
zdE2vukKHNBfa}!}AV6cWmX2EIr}8aVXhSO6)A1=v>PoVL5-Aw5yE?zuu_rnsEH%<c
z2H~9T`P2s&7<&^L(ylYds5!^(nb<_{>-<IR9GOEqp?r}7J%Hf`1bC<!TS6Yq`9vGq
zf?Y5@(kdGxjT-Ail6u~SYVyECkhv5sgU8;hhx|y<|1b-{KzbN~DYLmBRhPIl8I+iQ
z`Wo?s*;K4ZVA<Bzg!BEahh#>vwdnh8jH{~McEZ3}Ifaax4iVwzl+>aa+=Zi3CK<Il
zOU0{N_HI#CxuO=}mS?fOMHUJ-ou+%39cSyvfjurribQ~vUr!vGgoC!~>NlG1$>pS(
zWiTJ~DVR4}KE`(1@^x#o{unZuupZvpKQIuNk|@radeZ6r{)ZS=LhxWF_2waSvqi1C
zLs88)oO$ag)I$Q*1g;<iNa^y#C&DDbK8ajA8kFG9Dv2M6dyg<m=O!ne8z7h5gbBH1
zH|)LyOLnkIFq7G%3=nEsW2WdF$?3EJLfaxg&p0gso_c&Gra!A{-wAAi6Sm+&w>;D3
zd=J1evovR)xyE(FnouD>sXZwgu2&*$q5>zXY`pWUBVMdXvAxb2x@wUVkaAoParN|$
zLsj_?hdZWcmX9=%ugm~GnX|L?maU4wA1`Uy*;swLhCF!+kl6Hu;w|x*i^+x)%1FPQ
zflv^QBjLQ4?$@2^53w=Qa7iq}y~^*h1Mz{yssw>o!jP~3;<BdW1K=fr0stf<|Jz%{
zz})r+=JL;nT$P%&?K&I6*OjjQtzQos3O8LXpv*de#$FZR9GUor{-=>VlC@(3sbGG(
zk>%I>mAE7k>8eEFX&~*b8~yaA@Eyk^*iNr|I`5G|XB>m)`_pj&`*4G<Ufr%;*6qR7
z6_m~013jK32lXM@k7p@!kZ~hk2(abv&MP~f%nZV6I})KB6rNz32oJb<T6hzLC<_M*
za_Bx}&vIiBt!EHPk~~`G#Yhx|9;pG`2jM{)NSr{bO@n$Z$$=gHfhZ=sNn~6sX)IX$
zu2IN*gBVjVK8q4&M>|iBZ&!wz;V;c2Gg_qJiC^-Parr)Q((zlOW0f3fve(zw<dg;!
zf864a&dXHOu{aW<HikI7xiCIR;u+|O;jW=E!=36mn?l^O$**SQN#c(oBTDqYQb*N6
z5+-Nn82CyA+ca-Cnp8($TC7545@~Mx8957kIbaQ48<!v{PImPeREj<x?>y3ykkpaN
zo>@~63R8b@)dWgOJ>r$_grAZ+0#n9m<iVs1ZImPlL<4`NRz%0&e~a@8k>0TJ1z{%}
zHpL4Cgz9;-Qd73<yV5pgHjFG<9HH;wM?-Nrslf`OM5W&qB-Ndj3f;Cr1r;8GmvH$+
z3T2X6&OsRCEn~6JZisdz*L(5a?`lyI-Q0Z2fUERfM_Gt9j<rcB4UnAMkMD8l?QU~_
z81lveS2$sU?Nl)>)WDq3$S?9uqT|=l>y6u6iw!zp_kzE;0=&dJ-9DOheK_s*+l@yA
zR8{1|d9xN#8Grslox{)R{;mB}A1&QkPQypKeWJKzDGXBj)dRD5ofvPD9JP(lL)Zhy
z6tkrUVI{(f0nfrQsf2;c*2BmvXPv*)1SwL)`MnRuT+gHX0jWcQKSLU|hfP);M=3*u
z&SwBhO!}Q$&xEJ!UK+rGhfR%Q(MyUZGonD?m5Pa+<Y$%(VpgNbq-w&u%l@IS@`3`h
zj{hg3o=pgJ4zSi<SAAlcZQD67_v8h1m+hRpbV*xNQpU_H+!E#`%7kHe_|i;9MjB*?
z^g|G9I0&ceZ!S!GD%?R&50R&+XpP0+<|}2)F5l3&Y#Y%hw*|A2@-e`&*W6m_4cM6S
zTo&OW!v<Aq##PS2-&*}iVGd4tXxAw)g!WKNp$cgz23b4)RrkDPCDAt5^QHQ<LnqEK
z*L7I?(I&wUr3OsAa)C!F0Ktr=oJ1+F`wplL&I%=361O;Nqf5*d8pi2=pJPY441rwN
z(Zh=q#lOHsqiU1vB%@WG>9`L0d~iE)TyT}E;oxCA;NDh@txj;v*vuE|CYP5JPW8Yu
zoYL1bg_ft4%0rc`r>F0WLOq7756V)4gGNV-4`1D5-qqiX98tfmid{NFb2oYQu$5Wi
zF<q!XO%by5<G$|e(<|FiJjfvHt&Nnh|DI{R&Ss`*@Wj-5-dMJGd+5^Cs=%|4!0_nF
zC<=$P0HnKjwRUQ5O<f;FAcwkH>u`ZC#Ib#J3`j_Q<wAz>i<PJ-S!9Vm+@w~c;Yy+L
zTg^RBC>s|mo`M$rDLhL!<(uOHwAuCTwj|X4;?vbzdfvC1&5{hUnQfQSpN62RUD|pB
z%6umxQDjvxX+MyK$i}Qp6OCDKV~HBKadqXr%BJmF2XA8j);vI89`6`j1>)XpxQ|K6
zIVOjz{IvWIEv>UHsO>wKQ$bcqLGwfh1)bM~=1%+ScP=FLx;-q0jDCu8aZ{L{61>+$
z#8uZWkwhj6D|g=91k>zzhZc@``IA(~<E{-#D?Bx|bt?4qdp3YqjisUYdL^N1%g~ni
ztTC%&EjByLUDpN&M>T$-^DcCLzRet5<2%V`xheweGDI+^iaVxkLKYq~<oW5#-RV!S
znJ;(!Ve?FPc+lV@&^gO2RG+?_mQ^I)<i<FHb6opj9?s`~#T3BnsFLr01QCh<hnRw+
zvA)$mANbzN)^h6%2>($;&Pfsz;~NuF2Y?dFtFg_Blxd|2g7R4y2l`jyE+2mN_-=Db
ztg|#mtexz29Jjf8%0Q>jAfGDEm52x*9~``#NOjz!RwDzcQSK&;0*ESpkj91B6eANR
zL2D1`Sph%|i6C+k*F}hgSPBsLp@tLgGsfjovsB9aTf<=&>G#_MUWtIw?;^F%#8Mi#
zISHZiD2n>g5XD>M;t<`&Ghy9@^<<urkkgw>##0;+6myB}BTUX0<@LcErX|4Ad3^2`
zc5^8aC5)gc6_I9{q(cozK{WM}YL=X398VrQs_DT=GOCS`*8sR1bJ^tUVx)T}Kc?M<
z88iAT6&X@(9K0Wu3bv8OhfYKsFfB&PZWbyCCc^Px-nl`y&X(G>1We3rLNT&hD|IAA
z>_3Iis$*b0d`AXALau_Atg+#DM$EeV;yhH_=3$=xf{qwf(N`<YElZ&^*O2#Rsy;y;
z1`Lar7iy5m*3$c(+oS1Bn{}zjAS>Ga?g}B>U=DdK>Qt$AUJzqi|Cc>={L0#|R&NIX
ztDVpH#!)G-s7qxehQkx13Ajdeag}UUV2{HRo7v@~Dcs+i$;CVSc?yM+0Ghi-N(U5U
z3kGblW#6iZG<=FA)TQ^e3vOttAz+@_jQi#ZEawl2Wo>jf*h0aeJ|x2@5eiCXK*iL|
z*0_KvAn}I;x%-smMlWDwM?ZeAQ(1U@ozx?j_5M?b_WPz*kHski@Ws=_>i9$0xVe&m
zDW5zCZ86Ybf4_yC{oK_laHjR69;*r<WdH<7g!NryNYS=th?}a6{cz?IJ~H&&B3TKH
zNrynv!bL%}QdY#GJ>yN+qm72nJp^4x=WP-zGK&uVxeQil`hf~c8k_G@K9281oy$e7
z?P4-KpikGQr~&>$BD&_mx=~{%hcW**@(9?gO&WE*$LdF+8}3z?HJ_-a4pE4wGjw7_
zRs;u9lApuTW6<FVPOAoR`{^&(4p$E9^-DGGUotUY|D`Xoh_Pt!!2tl&^ZuLP>_6`(
z12&d_-cOU*zG~|ncfNeVV_ktHAV7`F9l>*aP<e;6!CgYOwzf6&)8VK@c2>*D{&pGf
z7wp8N%_QSw!B-t`&g>#sQKI*rqOvs&B3uUqe@r1eGVSUg@27pWx3@MtB<RQzGY46C
z`1uL(6Hfj_bF5CkkVwwK*5iX5Ak&GDlBdrdguG$<LD*;2BEl-2CD1&W3$=!j#VQpB
z2aZG8wRH-P*eZw?Z$$<nl50pJ!spZ`MrsH^c4E(_BBRACutWhL1rtl!VCFy^Kt%~L
z-3cMVwt@HH`3*CRfa)SB5^!_!o#bRc-`BB>A@v+JB$8XD+N1Tp1-aoY%W%ZZXX#u&
zJ-HAEFc+HFB9f-?ww0DdH!$wb1N3-GN%7a&p&0Rz)+k;zm>J$_V&_XBr3;VK9I!xk
z=CVtgFv73c8P-=;$$LJ9thz}fBWv-A+3sOw3X|x$n^PX*nG$m_koTw1gS9~JH$FbS
zL^_da>nWr<Fr~Xep7yY51EQJCKUH_q<z?&AF{2k=WUHzTV9I4-1J(exlP?TvI!ZjU
zayHgM|8$^3<=-gMVBeBZBokhkow*)1ru?>X9+esJn)B~&sc;H;P_3$(ib5_=J@nk5
zJ|55NB*5?}ILAT~fB;5|F6cEA=i0|W_&Atngr;<dj@Zu5#Qk96;Qvy~iLIKvL}yJ{
zKd`0$wwcJv&gw&YwZdZloDXaeW^FN^z<C-^yDTE*i=dnc0Eo9Dfv@=bm_`c7b-Ou5
zu&3Y{p-U6hI|&l&bFx#f9ziPC^W0NnpvQ&>!n(o&o^|^TcVkXN5cc@MbpkZNCeT4Y
zndk{g-hzyUloL&q1NhuDiJ*d^%s^Pa&j^TRo>F*%RUg~nSNX;Ldog7mL4GctsZI+O
zJ3qsXea90;P{2rVGV+d{OLoQ;9ctj#BF1X0q32bd3y{S^{~I4a2>=`%{Trm%lhXTD
z2#G8bF!iMa%xR9_+x51~*g`6!(x1tDRu$0Ghh1OKB^n54hry~zs}<6`gyS*K_x9@|
zR+{p~iyzl7AeOfXo5TBdefVqV^2`1EFoI4aIZ;v;h&#ChsQQNeP|b<>klhLKZvFH)
zA)z`@_m63t?a5K)SXI{msL5|1!4BGPOwl#%^nUvkD)7sl?R|e9320nVPYFEsyxcuP
zjahZTj|#V?z8DydE=5De)5sTGE1JT-Yrhmzd_ttG9GENrcC!VcXS66Sh$S0pW1NI!
zzfI&1bNWLZ1r+P#mnGeTA;6`oO$YJxD9&P%CR56c+^vn~AeD9M)BS{bx({N-zvsEI
z-IFO$qJ@d@GZD=pl~QA@uP7@(=t^4F&NRX1<AWD-jGm7ZQ}Fw=eS&(B2CWli4_yin
zX#9>-2fvk9EHF%OhR?^ca6bIYCV#CciJt4@i4{bS_kj3<a8BQF@Ax;^_K|!9epk02
zv`byJlUx{3&HVBM^bikPv(|G)E52X?aV2Aq>{ahZyD3DT<E|DL%Lc-1;<2`Fc4cjA
zjQm^+Ne$uTM(B(u{Gueg>x2P}=l>$0g{%^_F#a<l3iybmM<HhtXuqRfe3%@ZHv%D)
zeQ6%2%8rgJ9=gg(s60dSYBeG7;51RnU@?_Thi71xKU~VH!m4Znnf(|>O2k-DV95h7
zvK}NfCo*a`WKIQ)^XM7>LZp~PClvRA^)R=K{}-hk*v9_~({%1PII$-g@e-^!EJCws
zZHcmRK5rP1m@7UB=xQ6-O$~s`$okml(Y$q3C1qCho`w|0j3nS~NA#%_w$-pxfB*zF
zxcvI^MVwzHwlJCXkaF;@CmK5I5&OAPgY2Zt<A`IAHyw062at|4BQR2$Jkl>Eq^LuU
z!aldydcopfC5$<U8f^l1sJ-zxYFy#<J>)0(wJ=fzl))2BdDy>@(mL43&o^Xi11!TQ
zX}qadi1P_d)QdG?^jj>Ao7&QI?V<U@yK-Y`$fVl!{f%Iy2MtMY&O<nxA3KBUq0(sx
z&Bct?fJQwW=w3no4hh#W6wD3Vv!QZQU{RW|EzmQ`d5@bC*+JmUd4@YSTVp{v%fAAz
zS4oevXpS+V)7;H(Eh32Qrcl+_8ttuILdb%?C5x;ciclzLiV&w4=K|u<Cr;OK!z!L_
zM5tKn+1z8J6Fc<Mlnr;$vn1#h_6CUD_N=Y8RXDe|6?<5EhEy+bIcbwSC=HYd`}|Ug
zWkp(I)!vH(IOo}kCVv!G<>IX1ao7iy2ZSa-n5A8;%OeU`Mr3-1wa!;#rB73+t{jPt
z6y$&pH~NLKFgyCy;i!TxkjBNqTV{q++dk0L(q!4tz*jk06e(?C^`NUS6Dbjx6y50f
zw-`$xL}@X~J~4JF34>e>fe^#1vZ_rQ-2Ak$YmY?4w~}UaEIXst_$VHK5fyhYur1Jy
zcgEYJKc9w_9c4k01y4S*5As;jPR3k1e<m3Gk$3<Kb^2g*%~gE3bkWam3m~RQK9Hha
z)sBwGBN#lR7)M&aAMnLb3IZ4%{Z=r|yQ&?y_pgJqiYlmlufC^=&f#klm7h`k11A_T
zd;KF;jxE0pZhzN`!MU1<4{Z3IS{S~4hh)3BPL0ZqKm+obrq_IBPn8QiS-=}{<Tx!(
zA+acIO=jy;t|rgs#~utfsDpGMz~>vgp6k`FDvVc<;I>3yR|1$fINN$ymw@*(s5X>W
z>+N*T)T=?qUxS+2+w@qCq8@$ed&vO6C;nmtb4JJkI_%)sP;ci6m3z0HF`5}>A*Xtj
zIntj+#w}~i1o=%ACe~LJMW*5QSsd{)Uz)+q5=TOW%9QC&XGPeF3TJO`ibC9rs-h*W
z>u(L7uc}zq!vPG&^)&iy(3-NDTfq)GKX1KA?c^Q1kW+48MyR}Uua*l2uhK|Vzz~DP
zTGDqJ)Zt)DNfR~d6~RDLBlKa#)EsafDIpa&4G!eb<J=lXd62egK<*?K=bmM2g(fT!
zIpk6aN`<As;TRX(?UI^cE$JaUHD{M3r83ZnN)1M@>`pT*>L^rX=&vl8q|H`OG}$yU
zGBrtck(LoWwP&8^%y%KO={mZYltielk2M4^>6?T8>4adegE(OKfzFonEb8QoEmCm4
zge>H2O%{HjxrO5nK+;XN?!0P{cL~re+uW5KsJ^LHbr1D?er}^xy0=DWw}>|yZmm<$
z_@cach4<-#v1xF`19CNf#~+fazy{!lll&(&->-H(Tc&Kg^!FdvX%VY32SdpcH^4=z
zw(k6_Zz=TquyTQ$x^pVPWo1}4SGm|J&kkUPhKDY5Y!e`kP8d&*V$GVjKY@QX#0rr5
z^w9RP$2b~xoS*WP=L_ph6_*zrpsEyO)FRfsE-O0Ihw|Z6^2-yyjp6GtmbAi1pD&|#
zHNDwuyD%wCWY)TDnGx{C8s;v{BxiI=x{R~6Isn4<(oW_orj)lTrq{n|XZcZ$r!o}x
zxL-`yoj3D37Z_N!S@rV%KIrA0PZj*VU$iOLn8ywEPN-V}1r_?@ct*ZUE`RkA>ibB0
zM*h6neGf0*@^;+rIt2o{c(0S%bVc7KdPXbv)NZ31)tXfdjnZj6PbRd=@afsquwi17
zO3`dbr=s233s@1|?%1u)SFo7;>x=VU1hZ5zH8NjA3*nMvNa0YIi-Nluo)S+8+Bo6~
zmoxUOO{LuesOYnPhDFzoU6JmpLPnbqVL=g6q-N++XgA9Hx;C)d`q`6o*X6m3Y}7uS
zLKkS*=W3+)MtZtR3rX#MTV+por|7`qPv<3Mun_3)Zt(obxkOlvo)>B5EQ-@$PXIR-
zL}V&xl&XM=ry!{PN3~xd`!X-`Q0+%F+A3f>sbyh@sI@B+?lOTR%G$?cbEN!jI(;RC
z3XNBz7fEtA8xi?s&qS~LOZ|>yI=n>{^3;Z)2ZrxdQnNXFRsE+d(Ma@^*Sz`*!Qf`C
z2MHfUPU53S<=wGId^0ws=ZfONVnt<?Oi4PHqh3*1++lVn)O?R?k<)!q(z{E-cj$K?
zp)(d~nrq@`t&hT`^;!r?OUkSWJk)8={YhEz`zrV+Gz3d6f9CWRn&~LAhNX(BP%lF`
zP@0n2hVN4A1eUDH3l62V!Khr^ywIqUmre3tXyT)mBx5*(*=^&6Ni~wZG;02C&cqII
z&G=Xntq0|62;<<!gPvEnDTu8<*6#<u=6&}4ZH-U79v|j0_i0n4iEVmFuJHTvmppt(
zzMTc(d0CiNaRSMfwsNq$JvF*1^WExRVO+KBQqqFax?V)v7X^*FKFPSmbtmfeFxLw>
zy@OK!ARz)@$}f;G{Jt<Nk*6)S<<nc{vpwtBS}t|R9Yet6OTt@v&U;py`Rd=FcjZRw
z>>JNjtLT!y=Ln2D;8PDomsI9T-8&k*h|7JD&L+(LoN{7g^+0cRYv=^107c|bB2O=2
z(mD40rSRqJ_01gP<#hM@;ceb+XNIqvgV}&!@vF?v?f3PZp+01>LB4%}>12(nK`Bi}
zbbs~RWnVEjN&A+MQgwJ6&ewC*cFv-R5p|{4F^h)h*?Euc;Df-bdJaMxLMtI1vDZEn
z>VdyeTXEeV*?wmlJ6ve@==SE$d-0-)X!${Oxv7jhhkk^M-(WS`4NgQ{-|E+6?|c=~
z&bM~eT1B~Rsd4sxtq3tMMP>~BOqvHUyyKl-8K$+r`*&`v?0o8cXYsvO_}zTH*66Lf
zyF9;2Kk>&LHXriNxjsJZhrud@aC7joE;)v_56vSue;YCL;d*NHxMmM5Dn^dE_l9ye
zRDKaStlR{OC+Vmnj}mz{BKHy@v)u8Ct%YvmXy_ty!>qA(Mec)gD2_H)@CV_l`a)QK
z4NZhm@1@k-@G}ge1wb8q|ChASk5(Rz{Uhx=p#Iwg(^}Wj+|<SRU-I#tYWi~f90;FV
zx{P*nf0SpElWdAQ>cvqTDb{QR8*>k3ODITe&O2Dbt<X>EKA!J62<wnr8pk&ufhnSo
zCo_(38|H1;av@D6+6|o8&~NJIU!5N696un*9D!0O!-w|?f7czzAwitb4)W;#1?{8=
zu!PyMli|>ZC$W+s7{HqI8^{c*jTG(^Fk?`7f`YTN<IicmZUnfBC#Cs79SHX$B@ZJ$
zO6*S*1sPEiPy}QNA<!s9eBAfzAx3os&F()S@W&T+p!ecjO_`rZ6&eN4Eb9rm((q-u
z>W;oO8YR&bZ_|75p)@1f$9w_WKN2eZSax~8y{$_c!QzO~gv@Aa$aT??wWLFf%iOYI
z@yWMGpcMup{~g3)J}Ebz=Zyv3XTWa(Zk6;WY^&wyT~j1GR|Zd!xY{jlV;{@zeY_-x
zySq|?9FX@_&uD$PmjaRq$J%Ze8cSRPBq)6N^unJ3Q)p1|`)Tam<0?z0OOP2sF4PZL
zP4~@pRi1gU7p(FVRAK_uh++n%B2heSHkkWNI3dw&M*5qmLPlUjrrrT-+5#!7&tKZx
z=?}=xy(z{fOsFhkO(zqEC!;%$e3>7|rgba^q7<5N$vTC}b<+LeHYnnK!MypwG=~>O
z0&GYpwC#nC-dsb*?ZI8eeve~8&o6?+f)R*m(MJo~k%b8J6;|Dm9-{F`2)U`dl(-K$
z(;#S=5$ccFVQxDp+>&DJWNk)O2C5IA;M*F1<D-<zG%10;)IE-yDSCyV^{=Mm=naYH
zo#m~QIqqwC5BC0W*DIZeVdUY;I+V_dnmPfn6=+QZL(~YBxP%iYQZZ%bWs)tT;!L|R
znZuq@(~M;2zL)u)LpI|sCiE&o`Wl|HNbc4InfxRul6XAxN=MQ1z7f$Ol6c`x(u9qh
zTN|QN#P24NdS6jnsGuO1l#&y&e&W^**s$aAwgIgm5C4@H6+L8>UFEkuZ)Wy<pdo{w
zQa=gSdwa;%Q2S#G>JCNN7#>`dzq9vCb#!qDc*56|_CtzL&zq*bvf#ZH<Hwa$rtxE0
zXU3yqhi<sTec!5=S<h-W{EK#06@bfn0*CrK^!k{FHDl+h49}P>hk+BVT@bS0WZClf
zL`dkvWfMaUbeA|l{k|HysX$e>2U(u229lnbw&ylYoYR8E+B&pGi$-7bRUKKf6v*@i
zEOug@dE8fOb7M%p9HxVI=U5@hS`w|&tlQ-|&z^bu6sX=*$$uV%u|Msg-&DG`5)t!>
zvd;7?8TC~7n?}{{rnzZbXq7A9B=6_`GP1}_M(YN3R~TP<_ZQ)IbU%KdER`4p(hF(W
zL3U|{sz?8_(M9nNTv!s|mfX^T5XQvqW&tyX3Ld8yaz9rx=4#rn-%6-qBSI@vV>8y_
z)k&nyQlFT-^11oszA#sK=?%8JGuKd9XS*_yaU5Z7$FgPj7OQ+$Q6mQT8vcWVrLG3*
zn{H>3vFO-^kyXwHPBm4@H#*V9b|spD1^;UN;Bz5Vwlq=C@A5EHbse=7qDrp5+UGW5
z%xb#Lnyh+c2ZWnAk1{5UkfF_YDWK>$0Gm>A;ZT2MHhqQt2<)TedwksC{@3<2Ra}Pq
zojtAO4Tt`(N56OTOD5GXPj%aG(n9~%2=0m)VJWdS@3vgERf2P?*CHE0ZcK+NS69|O
z-{GM9XdbRBo1%<OPpQkT)2@&$G~^A<`^n^vRhu8<Mc|;x5B4C3D(BcztCU6E$?w1Y
zUF=v}#IZlUBxhLvHdA#pba1zG`e#WnN!?v(T@vYgJ176Vh>aA}P^;d)wZ(v-L%BzO
z=h%Vm*Y7^OT|f=R(;c@Aujk8b;ds)tlp?A+mihVl&vUIT6X0|^q##>FUv)A)*QzY*
z4_knJ(!h$?*OnG^J6zBhtL&bi3lmIXBV;-ooZX2a1RJg4B#m}$B+O0w=Ep1C?6;s>
z3lR^5Eob8|7~xCN$3MZ=(?SrObPwheD}cqkmq6nVL-&kPyUYoVyu&vUsB&UIoWtz4
zJF3W_W`&Z_wl8d#!y$e_;Qk_7c@s<l+7NM{&@g+MrV|m!B4h)NM~>Jnhm5!L3XvH!
zMVmkp`OKY_l9J-$$2Cy543{4o&9k6z)|fInCVVGbaO?l>NUzPn5t%R;&~|xv`-TNS
zCWZKnzqGs{gZqSIvl5p72zy0NbB9~AUsB;2^3<!n;W7(A_glN5s|CGbcJbor;As63
zqs1=k9mWQx#Mw4LA0rwvG*oXRgX{z3*24=%bUMVk&MZBO!ybt*^w^J{z~%2sT}MYl
z3W4Ut-Vf<}{20#Pw2(r2Iy<f{faTQ&_G)6t7u(Ob74SoV$3&z?gkV|KiWPo4aygl2
zH6ZneqqOYCDkHIzuMGnyR_h6X6P+i;zb>YiK|r6|y?p)2{bC<f-sy9_)r+>Nx81ap
zU_fN<!kpe!cuF+7g$0>C$I=mB9K)h&8&#Syi}0Gf6DiVRDdLGa8;w*-6tg&P_Czu%
ztCIUson5$E0o9oBlf&>(@vp=olG0}>4NI)BrHrhk5)X_NFSA|rGdiSzB}vjwq6F`m
zqfpU*OGKmusl-Zk$mEmA*NGAb%|wyUv9P1^RJ`U*WaCt<37GZtSy&I7$-NN$biKi}
zy36;$%<A=&UD%F{Qn}6RbnTNa_`NUedC1XV0YLRKvo$0@9b|PRq7n;LR~*<p74?>6
zhwOfUD|WX0Yoq3Ifz)A%P(2WMWo^%7NP<i%8YemyRE<)h<f?5LhlV8)J3``C&5)OR
zx}b#t)1&v}G`{;Nyp=PvDffm<7tGr$+{tE2)eRa?iqk`qvmJEO&TWRm<jfp8q_hrE
zzo<}1KkY>imI<?j%RW?i!OKlPB8Ve0MoVjuhOQKkbg`iC98rP^=q<y?7iFhFPfM#!
zVT)RJKHxSHtsnEWCohmIEHp+jPTZ2Yit3?aiHo#P^L*ns<opYx?@isWbo#7Pqqx5N
z(xzhDTYC26MzeMMTjO|4*Uxr4btXIJOdRFEI}(^3!kc;DKe@>b3Uz(>6q1F6SLloW
z8QXrAye0AmO%A~ZncA>~N6odTzNHmeg6h7NRz?kWcO@K})p#`Dauo}C7k1mch{Wf5
z1O{fRjvCt5tEl8eyF^Gae~QD&tZEd!T@eHu>UOkvstL&;vwX<cC2??xLjg`I(WJ1E
z$j8(Q2|%IV@Cle+g`4g`-<{V;@ipL@l$5=0AaMKZgul;adU+)dl~LXNo8jv>$Kbmi
zX!fYi!-_3Ds!%#X;n7}XkdoEPPWjJSC1@$jMyODb&UcB?0xtaV8TfhcXYGqJ!WRbJ
z9hP6bQLHbpL>=9-4-xVHSHrf`-;Qh@A3WAx0E;2#s6?zVV}vL5>&dGx0yC{qqGB+r
zDO1$CMbr?1=$REj=<z84rWoYC8W6*bDG`Vg!#7<xxqHU39?(6%UqJljtW*Uv{dV29
z_+=n?$pw4V?6oH8CG#UHd{-Ozr^O5p3PF&4LnQ6qkQ|P*cb$z1b8zX6NsPoz)=R1o
z;1G%XzkY}^zc6U%Q*90QIzIy7?VNr~Ei{A=)Lv+(C9-0^GQ|-Yr_>_#n+k$*p8wRz
zCIW@%D*&B1PindgqgBn|GD;X|L*%my_ywSc6Skl6o&{`S+h?A6aeC(ScYF{=i5L^A
z3X03U_pHHNukfh=?OZmDH;fll-(0Ae^m80N<IT4^s<jTSAvz)G=mZkOz-%D&J0JQf
zpEiUFd%V>Kp@$$dXyAiy5*Voek*6%fT<Q<lrc5fL4@Xv?%N|6z0>>nnhI__I)S%dV
zu?>s*2AGI2{}Yl*iZK&L$iYa1JB@l#=tFVcuF}XBf|h4k&=TnM3_pP6?5}jhRhD7~
z2=eSL36df_+LTSnCAEB|^q9=g%N;|KE;voL+;G0TDqT!#i1&hlP|m_-PgB8Rg5q(T
zs;d=rn5U>eI7K`vJ3n4L9}K0d``X{f+ztaIKW+N?MgEkm9W(9bY5x$N{VTiX9D)iK
zu=s{dwdJUF4IM^;GIi(ML2i>g^H27D^X}5E`(21y?JIHsCMR`rEyYrJm+-c+TOY1m
zyxyo;aIGYwS|l6)%`QC}C@n@W<J8NE9kkuuhN&eR2GNSYqI%DCPAdAtJcMP447|Dv
z|Jj=5kqYcSVU!mv#3DImi8M{o!>&BE*p{qBPtkyUE3T4H_+O<9th<N>8HW-`;t;T&
z4I)6SOJwHv&?%=8kn^}Mdeu78JH!}PXmXi=qyk{>p^}xu5!R!Ja4Qi=rs+Lv=koax
z5%kW$k%FQ~U79)(iby>S_q~<_aN^P2FiX^R-88Y^V*+SU!|#%}B;qrmPKug6-e>JU
z<0#T{bNjkd<Gy1GI8suiK`T1G?Ms2oT7=3c>ky~dT5rivIllC0=}JL9nw>x!c2~s-
z6Y&!_L`O79<>r}4i%#OeB%hxOy(uVH<qJAoTFYUCb=tR(#ULSjRP72?UHl1ogt{Gt
zxujmPZKbv#8ZdGLjBUhw2pJ`8+@U$g6XY}A=inFuD~toBUYp1!?cHVeWtM!MN&rPM
zFSJUiiZ$L-no<NX&}|fm2evqYPcRsF(K6T6sO<bhL^e)3syf<gUvkWkAsMLmGhPji
zO|J;`F-5Yb=<@Rfp5}wzKpuHxM1)b=;}Uc!&{{j1?mcw{bYN^~!e$n*#eRBbZB){l
z<kEQdfvdBl^^3iaJ1-vYjO@&;p9vOP$capx&z0h_-!E|`z3hGUfM44RrJx6uYPt~w
zbC}AG566SQKslw#L=FA3yVQh+f6oWt!?80d-pS@MkO(2qik*Zad92~j3&cgqj@jB<
z|JE!RukOy?xFQJ9mFr$<@YVI<V>DvU>wu8o^tXWSiANZg8s5UhI66|mS02SpC%xwf
zfuO>&>xaP{(<oyp8ihwFERpq>DL-5BiX13`Yy2oYar3QMl5YX|4i&2BG@rdTDGF-K
z9<<uZP5K-YOEEhVjl`r7Tzwmxm}T}3QRv+M{x2`TbxEP(3?KkN_K%<cpS}Fnx;D;M
z|6->Ij<>a)XFwR*epkx;6SP)JLOT~b24H^nW}t{U-%jX;+Sa^|<8U#;_Y7~gjoSff
zNDF*7#JA1MzwKxr$2g*Ak<r=j{EH!5dP=7gFKW9-yJ$zLV8Vbg6x+0$QqT^uw0`Q?
zE{}DC%s*7?Fln74O-$ZkQh{PWDM+u-K|qe7T}F@}_o=;aivaw^0(ij-eh3Mq1}T*4
zp;o9$;4;VpV#cr5xgZWZPcK3lcL%pP5W=R1E_~PkZ#=_WXple!Pw&3s^umMj-TBDc
zE{<$Aq2HLGQQ_K8X--8X%2x|z{gSO^Ht?CN#YVd^KffVCP5E41hv5k*YDSRC?N}mz
zvI4$4#=}gUv)`F;ql++V{O=jBf)hH5#XQa_9<oc?m%lGx8#lJhmxDG)GNX74qg<xE
z$h~={_~+_z#@)U#XXiUmTJEObryc@-2?Yo6zT=Z!A!O7+p{z<jhuJ<P8ye|PjU#;T
zzN?C&G>GtbK{Z43D>(~Bj3qLDd}(Xof8aNbxQ#Fjg6H+gH+Y)8kBi1>I{Owczd5)x
z=hWA<Et@y-H7^#P?_W===gH<>7CHT`7>wYLBXOIOi<**+E$VW>Tnx&;>n(j^H$FlB
zx22p`o|nPt$5NgH{cm0YJ62sohkyGRbgF9Eu8IGTqr4d25}8iFNOde&JduNvif|#e
zbXCO|)6;Kt&G336b-elW+S6nREJ2|Cvj5KS!m;Z<>wLn#LDQegDZy#-)QT?8*~3Hg
z`?K&7ZO9SGl~TVz0Y8N2H39^QD=m}!H%l(^uN^92Ksv-AdhrzjqQS)yK>dKA*t%G|
zSkm;7(jLXW0vtCZb^yEt7z1Benz&fVe7A#4sMNVI01Z%*BmqniiA>Q2Q$T;xBuAO-
z`2!OFX@WFy{9eAk`KJ6n^xy@fPn~7V$V?%!_()<c@!$iec!~5}UT|Hij<&=y4okL_
zabx0MoS-l)$Q;%v1!lPt#uWRY8<V2D^m>9ZAs}?25Ek<Zde>iwSr;SG6bV7h{1#wd
zS&~(JRA~pY85Qj0B^^e=AvB6br7X^uHAqA&wn%*-Ud=;L^_a;{?qJtUSQ66iFH?a0
z>7+On=+G)4gx(Usv0o%aunB`id4w?hPGYt^1D-w@nvzCpU8-GbR2U8tufdh42BN8l
zJTRR$wl7=uomVf&%7Fsa7At^cBp{AC!mN+MrT$E6a)|m(P#53MqJhcmJ~&)sVej_6
z4UhgGELq4tu?CiQo}h~yEYXnnLiu;{2n7=bNfnN?6REk(A@dc6(ZX^=r#V=wuZ1%O
zTliDQ-tsg9V9&ko4{uXDCLdqSZ`xJ|ouNWj7|P-cJO;F(xGjzmm~tbk)F0yIl7NGp
ztH;gd2wGk^P;YXh+4Q-v<j1JAW~#j!5?A1FkunVsg!3T9JmG@NX}QR(fNLI5$!J0y
zuz~MB_+8%2rEf*QOF(p*c6;ZuusHFrvjmp~2a0hy9d^Yq%^~hwMHliW%dB470S&An
zjy=4pJ1>9hLwdrqPvsV`A9$$AK3|R9;w*PMUfxHsk~8f~8<%c%W$@Gmq&}L2{f#X0
zxf!I+uWc-5cd_Bkmb5`FYOy3c%hW;FyYn5a{M#wy`Y5$%?g^}Fn<_o-CsBAcq@6Ts
z!r)?ab21s$*i17d{sVGtROel$7uJ2#!kt>K#sX#L<fjJ@0binfRK?e2*7&9V+H;W3
zwxIP6bCWy>9@XFo?)D&G#~X=9ELE`pT=kuV*Gl)a(>#B@?c8}TTjP7pRYW&|lm@`W
za~+WXH=mivC`RElE~%)7$vO0d-~t#&F7jH5hMBSX=xluah8m=tu_<2*9P*FEQ*kB&
zEBMn7?E4RPNn%R-zE5mMn_9ECqOB@U@{8jDXyytynfD*h#e9!ce<FEZbAgzcaqG`f
zIG&gX@L-yH*4;0fdEfGlu2aQtSK*Hvj7Q!~pgv=F{k^N3iM)mh&4%6ls3wCsRRuDo
z@z(l#k6{wHxu#%~bpoBj@k=-{0d!9wv(C*&G4x<=4lrnb#Pb`Z;Le6jT@gOa`D!#<
z58E!1iLT|rYJXYnK|{8;ygFJWIHJA%lynt3Rr9>{_t~}4`z#-Ts(kn66UR!O{xi7Y
zk*RDiuhjlOoM`HfW-og<-OXR1|NB5wQ05k3fCT^$r2e<d&)CM$*2wsug^o?Eb=7t8
zyG`BM(M%Z{hGr7v5W5WFu+>^&KTs2<2FT$O+NN40jXTM^V5^tss&bpr&H7A#5>xyo
zcrcaas*3X^Qr9Ict0-L3{SKDDxJMK2uXlqXmfTtw9uzCD>H}(OB^N|8d{FeJp$T58
zg&G;SqKF+L0g>8&qzjdHTl^94xL|n^P5Vp}R?sQOS=r)#8_0n0sf5W@u^IZ3A+znd
z(#Sfnje^{bhUyOmFd#`!@G?$mU@+5TMis;kXX`aE;3GK>iZb51O~eaM0j2@Jy})Vo
z0vjMT%qJ9Vt*X@c8IO{H+W4d%nscNc=mR}a?sLw;-g{+UI&n3uR%Z3!)zeszpIVC{
zIWM@Z^?RWJdX&t*P)2r|?LjxE9Qvd-hJs^JK#A#RW7d}FXGX9bDGW<p54oejt@W2+
zg(IyY&eutR`}rigA?CB!XCCK)KTY+mW58U)x<h%!lz3;m>z}~&wVKm8SfZzb+6e%1
zdpNqeFLqo#>)>|saaw!~0ALIWF##y1q_VUP9+aHkXVRl>^^Y-oZo%4A4#^P(G@Qp`
z|NRNxtQwK@Oz@bZceY3m=<EeTxxr!Xm+2`M1F`fso3*TPfEL^U;;7IaIl(l-=s192
zg|iGhV%OyXysaX{ETH$WN7}AmY|0NP!tgY!GmQ=-+hs~a3Yo|pSkw_nh~=VngUXpV
z9BK3!_?MH;IS@_GASWiI76XVq&J_kvxQU)0oX+BokYvp!?QH+avXO_!D++jbmBf$u
zd-P6&_pUz!kYSt4r<HN%MXZ-Xs5jxg0)pkgHz=x35|Bw+`>QVrJPwk<vhT@$Q$Mid
zH$$^;&(Xa%P#ee?iJ5F}HDLO9R%z5<F3xk^2fFtXa#P;5o+T4g$12Mt2r*k9?)OIv
ze_@EXyWOHGfaK*LZjDo|QnK1cr$K%dI=fX4FE0r5bM*Ju(E)yUb{8*q_sj9&;-hVM
z_xt{|ueaHaKlq+a=<cxGEQRdQw`_wKQ`Y1)-+J`=rdQqL{nPm4)codL>(j?dF|$$U
z{X8?MJpzyiiJpi!{?4!a%-@v4o^U~h7Wul~;`{?Uo8jd3FdzLE)M#{^C$Dv07pque
zH}WgYtzJkoX=o(FVZ?JR5-MAiFx^e7Vu$L7fsz>FVks&pLJm}!(dV(hfloJ8a7(f&
zt6kmQb&|r?8DgiVYTj$$YCN<u($Cp<zv-VgPBpE3@y%K2h4QHY5qUKXo&k<29S=Q+
zH$|^s<qG5*9&c;|i%pRibov}s=e;5_hi4y>A78;ZH?zU)S=}V&Hw%x^A3A?+^UpuC
zd3XPRgq>4(rQOoCW7|&0wr$(CZLio?$F|cQ+qRu_?2hd}`}=k6eX!q?dAQa|&6-v9
zjJikhmB_1~+C1Le-MP1~txuD^^A!2SdU5<#iNkz9Io;oypkZ=3+xfx&IsC-7i$mqK
zSG$tJ4me3ih`12OoFwB!obi(OfBx%8z&k!PvAsy(M>yU8-^Uhyztcs~FqyCJ{K)@3
z>bqsyTQ|tyPxq7X(hgclN65J7$D9r`Qk~mL%VeC}w|drRKI~1@vTo@3WJJVGv3`?V
z%m@xQ+p$IED~Rz+?Ta<9*;&p?2i#?C4R@WXcZ(n+ND+^{dJ)?oIDgc=j;;TB`zYMz
z;o<h*Iw#co>RX;X_M<hQvO;+cRgXG+0dH*6DEpY<4HB=*2+b2iVU^RK5axm}Hb<`&
zq84qSUYj@${Tal!OO(wibgXU`!uO0qLP)7y4Kv01Ny2m+ph#?f>$8M$Z^u)0A3;&{
z>p~(C)N~(6k;c7X_<<DR?pNK9b;-e&S<8!tsf#UeG)|Dw<sX_;Z)BPp8KxiX5NYLn
z0qR3)EBRw~OvS@rh3cn{M`g8tYeMUa;r7en=mEBM@ycqfUW7aY*%HbsAj!o;VY9n|
z;2WT$Ndq+5{RTVoKy(0=7W4#QFZ+tS60(!sH!L*I&QPcva}%Q#P-O!(n<=;4jO;&{
zU>q3s?P97OWJ+W9zJwa?RU3|^2Y(hJpmTR>*=~riO7)kvB&y1(pfr$G<se0E2Lb?K
zW3ZUs;6`5+Qh$sjtxngMwDNg1-hueWKUxE-iDn+$PDWPm5N}-UfSr&nZF>9N`0L#k
z!fwyR{ag%j{;sizfyX&HyKnjXJcrwFr*w!$FFDAq%j@XW8(*x)uf2Is9nA$EoC$4V
z@Yww2mRhykgOBE+&D})(``{Lt=%sExNJqL$kcU;*_6?dmT%GMKgo_qty~wBkP)9j-
z!n!-bb=FEumL}B&7SbkvwI-Ebgp>gL{X1sB9}#YO#UT|zhi;1&|JfO83l{>kFjJRd
zsZtZfty*R+urVI7TU%<a#0V}~ObRd&CDN~BiF${cbR}HM4Fq@w1)gP7#^Qz#D*+xt
zyac&4h47&f95M3onOx&;T1_i~Q5D&d46+-v=<|6pU&+_Dsidrm5&fZ$kPfOEFXTZO
z+WlZ?3xAbs#GqwUwN%PHB$+jUztWTnhgHYmR-KJ&CgRrlWpXa%h9CXWpL-=>!4uC)
zF>49I8ib*IbYx7|du)%az??s6T9u@L`l-&nzOqM@gL|-X$Jwqk=#ajPwr=q$Dt|i;
zTqNCFmDyhSqO*0HV#q`Y%WyTKv<6(sv=AoZq%G^Qvn)1)9BvxW2}SM{B!z~~2$o0I
zwrXTd?P!}JYagBoZz?h7nHxRFS$6u9!5Q!DZWR(XE}7NBao<oXpn8Ya1z7|``A#9*
zhFJhv>z&u)52>6HGHoghB^hX9z2a>~Xg>0jrM^HvG{%vJ9hkyC6Jjl?9iS%xW;Ili
z87Kn4yps`2^bpDkQtI_r(KGKFOAx4D8oWFD2hgf`&c{y)R3%C5P<~TRyvz!_Mne01
zqM233$y-u*r4pXhG9u6Zeq9-MW6-$nq(N6SS#BYj?jAw=x?ZhwS}6hGWlp(aPMYPX
z_)c@fEK~JVN6UD@5z<n**^X$iS|^rGR>!G@$W<bNfXmyUx09^r<wC6WDZ$D`4AQ;2
zACS)Zz{@zMLJrD6C3?TP3aFUQ-n5Fx!ZyWpxJYwgti!}OSG8sX)<m>2IiXYr4uoCD
zvYMqyCcJW;74yQ8D|u5ZTNFK9(S|_{l>=mMjdcpTY5EU13mKY)kAF8&J*}4ZSt?mR
zpnf`~RgP>{Ft@H77Pn}=C~$}N;L2;Y>1Ym>?Qj-3MFV4wbN64F)UZdl|2(K_B*esw
zyN%k#Oeh?fYcIiy=6_uMe8aMZWi!oluG2pi8hUW6kx)0C4w|GJgIll+p;j@m=R<GV
z>@WdkI#^)LDCY6BPY=CZ?0|OQj1*wn#EWM}H*~I;Y!xHyFu1rWHAe(w2^NDuibU35
z71&$Eb8BH3V{0>lRDt&6Kmk7oZ8w%jM_VBoYL_~dmaB8ERXoa`Wlu3%o>kz=-jMpH
z%9kFws$K=Mo@k%BHmyA`Ryqf;c<GQHOHZC^#5ic^Q}2CZ$<S8&_~{;&_gBW5AxM>`
zS}0wx@T1F;Gp2B1cuoEWrM^+~sRUZH(8*dNqjKc(pM_N()zcIt;xnv$0t=o8n$iQg
ziPzEzgF3qGBZXqzGNYBrpT4e+Bl?-3>e$MR!(#;;SuJ*NjmN=%u+OB5Im<004iYta
zr|m~VpimAHCmIG`3)n}fD4C)c1END&9@4@wHbLH|qxS0vGq8YGKSy}ha)*B3#8pTM
zRE9J9NK+}^1LczabN*vgy<IQHz6Fr4t*)LXqovz8QG$5dLCnP7ph_fS(F_^*b_knX
zP(-)rwdkQG@3z|h7aq-KzI=B?<M-tQn$EMQUNfQ@Y*D-T8rhtW>Y0JrU%Sz1(GLhi
zP0wc>EVG}_wk}+vPO3szk4rRawsPVmyWxuabv;4PucU+NfF472>d*o(B_yHvaDkW6
zal$+}Q;Mjqu{~R>fI7=9v=(_#mB~0Qt*RBv0DhCR!^5u{8n(1f(-->~ZsX?K3bDlv
zH69Q9W|wW<v;&W#;({pP;lvxcrliJK@Xzf&VUT;Cp_<=k6RS<ZBW8{s5#?!w*T8>*
zI8Sm5uMDqfuRvV=X_nZ@1)*l`6PylFc-Xc}PWW$HiRPl9k<rpHaDk{=S5`{Je*3q+
z#W*U%zVP9?P$~*##vELgM&*&sE`j)GD%z^SyJw};TG9QE;{LoG7jCEun8WY4wB3u1
z-Fig}7Wj=F>_}<Ir7HfO0ajUnGa^i)4wKe0APen)ZX0DF(}>ZN)mvYs9m_oaAXhN1
zSK)ie0g-Y6QQ6VFV{$1uf$1OI`B;2eBIPnrSINS&)G@z_07=@u_3WJ1z6@q^7V2;f
zgm(qZ`3dSsd6#k}NVN$uoNU4SGL-C<#TcUmv;<bq47cxG-rU9OuPcl%srm$5PEatf
z=;Afka*xkYYAjBxZ5<WH>liO|t(bHnp+vi1xu`om<r<vo!pt%PxXR9*pFGnDG4M4}
z*ZKJLmS!j`_3?(PxzB#Z)D11%y;MfR7_1LkqTlBDg#Gtk%vEZ2jNyB)Yv^0?^WO)N
zCI&{fw*Rom8>_7MZ9jwNJM*hmri8j;y|_4Fxh8WE$ZAPh&{VsrjB+r{lg-_fhmrN7
zX9gh<IfZp%p=oBMi=X2&1zdyi;6*+`tu)`of4c+Pp2zn&)hPWaT}%mzrO$s)wJ%>0
z8*@GwxP*}d1lonRZq@L>iew)>35_KZ84b<|_-rujlE`tgL=V|+1@yTOR+ECqP*;ek
z?nVha@i!?N=x55FF0fI;t(&}5zcQRoVf}n(eTD3N2(Ur9XfmqYjK{DvAzTA1EMfS*
z6f6Ixls?o&ScGa2EsR*}x9$7SIWy_Q+u$pQ7M=KW4oN9Kdi78J1C5y*=BCojOPytK
zBPu$iFvtp|UH!+??G(B6{vfhNg&}&4pR}Em{7S0ufX*?S_V6Nkk~;pyxnNp<DKiSr
z_?ytRT-N-iT`(c=L1<woVXK%?7#XtI4il)_2b~St2aq(zoYT(2@5$_bnbHc#M{LiG
z^r`+)`aX^u{>q1?o?+PNZD;EW?Pbc|%J1Ab()md8Fc<h{g4av&v`4MSKH5~Rc`p32
zK=0zNrPTz4968@^x16tP|7kB)tOn<$*Sz*HZewv08P75nVmOkr)CESz-P>DQP8<pQ
zyMcv#GswF#r855w(;t#?E0U<%EL_ZPjBo99DVc?|f4{U8kX&)YxR|{^Fow6@*yHuf
zU@qN^XAB6AcWt@hvko?5pfX+Lbqc@m5W3@n$<x5)^c{b5!rhX~5ajBzy_tOc$5?=H
zckmtRI~13{XW~Tvm2cx{U~2Xc1a99XrGFVAjcngh+250iu?9-zh-y(V8LFs(AsZ!o
zMhQD3A(}`ugNmv3_{@+iQoBt>r*wRMT>4vt%OPemCL9XYxf$gzT>SY1u=D8d>l92+
zrQGv`OHBG=WSRXXOO%3;Kf^U?8yJRdt;#bA3Zk`~Zbr#^q!@{Zo(>BqP}<wlCr)Rp
z3kd|P)yK{kkN`m)n`#16YBa<N!f&SeP2*;6qvMhh3;S(R>UfQ#B2up!pqu$~kZNoq
zSZpp{jeGUkh%s}pNJVx+8kx>wowB(aE?M>054Pr7#?nO(qt@*!P$?G6DbR}L-8#zZ
z5onl(LsCS(tEk8r4X%C<J7@CXy%C-Az7QcYWdidvMV#qWp}E%ba@=pPoU5~G=*<*D
zii3ImxKGX(*Nw~d7>Ns`dk*QskvZbAxeQ6tnGb2pW(-#&twd@|`|H`lDQG#48~)%d
z3{4n&&xznK-!g((TJ#M)pBZ`Ub2OaR@GSWmdTX&?Cg2MZ^dtln$yUtKZxV+v?+ps6
zZ*d?7m)n!cw>Y_7G-zBpUYNd0R2r`|TsGlFeYVI`$)}#H&LLVTA1_kzKkC-TTrVxV
zX5iKw=wiY8pL7p~T*9-CX^FgyyGkJx&L1vHduylY9&D{+OYLq(*7(=VVq*y)ohTw-
z2X+SzI5L{#FX@jdC{j>%7Nkxwuh9QJ+eyjX6>5Bs(j{U3N!$1@I*YA?i7maQnkqC9
z=vH!xroK$Mrkf`$5HQ%ucZB}WQKJ4$_L4;Uoc@LNAk$ZvAliP0#-9!4R7*)JM1)CJ
zNo`{nf5UF>(ZoQ$dHVS_wH}6*Sxm8ng7PQlIO7Q$F&F`iG10o{g}KGi+12&_^x))~
zW%Ce<17^sWDYz|lo2ib`ojq+G&QKT4@f;Y!elDM$2_Gr(IP(T9v=1#?QYqMO4($Qm
z^<y_&{942T=$aD0dKDt1aR<(uAj<_5n*r&XOUNt`R`Ng^Jv$Q2Xv$7Mk%JXpsvm50
zl^MmHw3a<LO25-oj6F-f|6Ht<k7eG<Sf;Hmb7b0C$`gLlTi3pZxolw9yNf{bwlCfI
z$AhzGa9Au)@MbLx3ZXmq08sy%m#Z6r+$DjaNgpkEzh;`*5+9WlnmDamqjb?Azr=9A
z0DeA2V$kP`C6scvsENdqoae{!J$DGuP!cSj&>K-`25KZn7J4zGNGv}$Z*V-@h{R4Q
zsDMw9_yk3X*_aA*=HvsWJXSZ_y}o2!NVTDiijJDJyzqh8IBiw@XnI>T74>xp?p4B&
z1uS;xf(x9?BJYN6WLMeU#C2ViYCa_fPf`z>)82HQN+r}tRKE(fe5t8+t$SkSTI=sw
zcwO+nLM<sF0qJjYt~Oa+eZI`64l%TPoJKxH(>=fQIt-zTx&UO~MdSAPnkn}e%Acfq
z>9dtvb(eSJKLEi9C5NB*_(76hE{8IFL$407SRJ&~ik%Q>_UI}azmT2PiP6&62&Ku!
zG9bn#eyQ<}AkN+MXC~%&7<9+-h8HUhbZvJ6@ZZ>7=^jwagaNQpsaN?H4OwG{1nUW7
zRFtK36c<iJ$z{zO2OEg=9QHf{v&NOZv;@+xWa<ObrLCdKqeJ(*)V!f$^m>WQ3$QY1
ztX-DP@4zasvQ(zuzksd>S`(dgc_z=jD2utMRE;CsAynU#{`$8@RBw*8Bq4%K9bc1q
zN=x@SCX!5Ux_$J|`7Oo@UtkH#!%+8@oDN>PJeJtspU~GFcF8PxFQbr#_sS0ZsB=*n
zWpgxKHAq*cYEmYx9yKTcsq@;B^CR1)rWLN9Y+AqQ@nlOscP~FD6eUWpHqkjg(Z(YQ
zGx_{<rjI9`1)6JPw7>i@m@6Z5Tl>8Cic{(WecjBeuaFx?DW8ZRl!a(MZz8m4(CBuo
zR)}?JrL`MH>)9IweK3s0*mKm6cE4D!*MH`}8d_FPtngnPn}5hyq%<^s49VxqXt!RM
z-3%9=z6gmH>QIXqV7uDlX0Xp6O?vyih~j<?&rFVU3ZNMm*BQUs6=M2mzHVXn#O8pQ
zLL=XxCzW;YjZI5~M=s@-!ha5JXIi!tR#rCGN6wr#L|j&OKfk`swaf{Xv(=-O7onC}
zU2_mLFU|QhMmwcUTZkDLCQ@2zC@Eiv8%1F^CRG{7WD;lOg{pQoC>`^5=3gMuT@Ej@
za$s&PoBg^3wJ#)J8zN6?EP~DCM4PhrF{7@Ee@dgw$-Zw%ETDe-55F?kOhU<ju?U;L
z6W5Rb`YzfTcsTy|VR>wlo<kNRTG-VKx<mylS&Wc+#X_@v@;a+cQ9TmbDSs^zFe-0g
z>|YVdZx-RqFe_CBaV&1k_7m?h>`ZfS7&3!LP%TTy-R||?)XVh+kES_TP}1+A{_u>Q
z9;p~dHKXBB*InuvqgqhX$w*RT5fqI;)`>DEqa;$rx)7*di}X#&*_E_!Bpz-nP>(0L
zSR?2#GPM*dBnvfB2^VmEtW=~R_FyNa3r=0Spd6FU4qa*JATnrozhnl98G{E-34dcl
z;7jtHXFHa_mXtoUm`u5-kOsPP?H;&j`9AZYvfq7Yd#zrrcLK9Vo2C!>sLh5G3$3%+
z6YY6SJ?AeJkUUcIpB-yy18VWiq(NeBn9+KXTzYL<3gN}p@>F0fYRmnIWkS#U_RLQf
zLOV3*kAuxX-%F}tZ_2wgU8G*ZTl#PU*$HQ|2V}=y8vJP0%3)_k6&l7Ntm@=lNKqd*
zPg>6x<al)cLHPUbh96CWd_jg}Sbue(DfC=4NsUm97FU>pWzOqFYNbmOO`3}^#!36b
z7Qk%rF9M4FB_pKEv2rIr9AnN+J$m!u_FI4ctc32YE;df8&3K*Ir$sTu92+|@z!gm7
zycXEXLWo5@i^&|K6aYXZ8*;ZnKLsu5!cUzi+?hM`=+lb$^LFX|apU#2I5IW2ot8^J
z;`F`#*k1q!_+CI3`CRXGDcwJNt;a$B1@81~=N>HggN%Fdw9?8svi<nOF~1_imud91
zbO+38!c9V3Q1S2|AsL!NHZ=Jil7<lf^o}|jd@l%Cng0XjELP>p=9>rcaoMw%+7}^W
z-4cwj?i!rHO)_aCGoR{if;FOKT+?hy$|XSgvh7iCJ7Ukn?k`2U)#Y=wm9x>14@r`H
z0j4(uBR@SYAJ0#a2MF3o?{yPjwLKb${f^9H!}O|j*wbD{DZ@%sQrYjwl*2#(v7*fr
z50R=5$fk<`S_+VwM0I^ID}(#HiqK0kLj>>9+Zv>c5?f?UZ6t*XVv3t63v7mT!zyDr
zN(_Qqxd+l2LM2p~0GwBa6f6Qa<BkJ^$XyR~M?rFBeWd1*bPO_wp-L@u+*XKp2Oc7Q
zJS1&)yXnS}6+565{4;W3Xq-*To@yjgEz_{oM(c_yItd`OBU}l7DF1%wxKtpE+}A%C
zJ4mkrox|f)mZ*f`IL2*rxP%C(_4%>wx0y?j_fdie0^vEkMEeeY^-11J5k&7{5_P5L
z`{{=rV^5fmSz$+LXM(cPORC58*90vb#M?9dc%mEJ0pM01Hqrxa^ieoD#c_q~y@tBB
zw%o7;L#McqCw8+NOwO3~e(eWetr1`q;CYQ5H<i_07;d6Ad_9w^2+Xg)_43)vd?RBi
z35S+Qtx3Ks?G9TPTUICVjuS(nA>z+`XN#L_^NpCviR&z;nPdRKeh-z4eV-K_8!u9M
zXlgl;h~Q@U62K&S0wcKxUw;&%s5A+eXc-Q&QZm<{t_NfM;+`(IpQk5E6xr?Nq}0BW
zqu3u2Ca=ts52j-8eflNQ=gE0<RjLna;2%`3`<r~i_v6>jc77SA{F}0KzmoC>rt47q
zg);n2|2oc|;gt?QxQvh_`g`GGhengO^5Y@E@S_OTMJ-mrr5tAF0qQBXC)m4k{AB*A
zUAg0G=^5Se-1x!~w}N?%U3UlQU8A;?I1=XGJfu7r?6g0iF${}=?NT5h3kSXergHPn
zJ9h4K-FH&Jzsa=}R6JIQ!LAh4#^K{XKo2Z!PpmxOHzoT!dH?sO#_k)F#r6-`JNbV=
zvLoBaD%s_%Lc=KBky6zgq!86&6F}(gZodkVvW8WRB_2z9OZ}d5_Fd^3Q--siFF&8|
z_|j*edczZ`pR_kkp~`}VzNR+*obqUz;T@5EYb3y6Yy57|j5Li(8=(!;j~%U0;dGq`
z9_YT67qm1eRB2%><)r&K*U01^M3y=hRmjcUz`Y7;LWzHcs6)mbC;DWuRwJ@Ow@W%j
zkx-P?ezr-PjvLW1R_(%<2L6j9I~+0yJvPxLmS~j1Mw=N&-f(#E$3nFvayUeYZW$d$
z>;(s<(F@zy>QDHtdj~w)gP|+|r7voG@o%etab%^wIkJ)e!;vL~`xi%cA-IZ+)R``s
zSN5TMP`5g`+DwI=wG4g|Q+1g+%Hr;MqgBE0dBnOF;l)l1HBWqTy>_G%Y3so!7*iPh
zya#EHoGXTRQNit-BYXHSjx1^Y8}e!{z(Dci#?lSmFRCN%X$17uDlR2eFlT5%L`(N~
zI$3&SO}op{7CvKDlJR@`ddZY@uwxY%=(f2>U&J=AIE*SvUfaVNmaC%!Cf=YKA!Z%&
z;==+Cwbfwk|KrH&zLm(+X<~ksnXII!fYgNjyhg@zWyeomyW(f}oAuvu=E@#@6`Nad
zQ}Vg-^yb&9-LquoG0@}mnDPCaxj6>El5<Xg`>ckBpGWI_&y^Y9&AlP7W0#o`upPMa
zRIA<Ae(BoP!7{^hGTQR3ezALUXRUsuS#jWtN2SmBwsHNBsN`8DC9C<4O7Cx)&wr0f
zGXrOne}a$vf6rmj5*WqIUQr4++Y~Gj8f{Tz*QIubf0+(TUW|4Nt}TA~S|ow&O9<Fc
zgi}6#C+|Nw_&t|``0dm>R!lNTnHm~tm<~8oEskl9ty8Ud@t|1N55W>pIe4fgv5+~e
zp^0*gjC*0{;PHIlfaAc3R#x6H-C<qO%h_Tvs7m(+We^%R#2ul-Yphy9>X1#xiQq^^
zMszC3PqZ62A<2kElhi0halBNJWHv7;l_b#uFt)ygUZTE+l#;?wvD&d9zZMRxC;i8m
zakjdl{(OvNywE}bJkfe57!%7Cz`sq`JBk-8*;{(%op_Al!V{Xm6zmEASay_h$^_vG
zepuLR?7_W?_&YQQ7US=!2UKM{i;Y!E7t5$N5h|*kdLdeD7wzWwZCj<S@)+vb_Kig4
z{(4SEmd9zc*Q2g43unh*oGUw~IO)JN5tkW#IR_9>hxwlJ^=>vAechb@R`sSofI9-1
z@m#}oy%Ev4tg9zMg%(4EW2ut>DutTbK?A*~YTG|{<s1gvJ+@b4NTNkk9jDm2*hZMJ
z3L{2=K-LP9z?tW(KQrLnf;w0|tWNNxNX(NEjDLpUoQ1gOfWjWSu!_)bHvLFbs_8Ni
zQrdU=;3G)cr#jqkpZ~@sJDbk{+EeIzb;M>F%zDF}wSzw?#Fx;W<vcuaY&XCDxD+T2
z>T9n0S}a}x;Jj&1;Q6<=(B`%<96VrZjQO5%z=qOlROLLvwKu}EU!8L|rfrV2V^KdT
z>+3wN;*F|+Q3G8;b_HBL4QuRsq<*z464!EtvQ06qpi~}bRm>mc8H|;ZXOphF*6uv7
zw2Z8M%D^!c&v3N7?RneluD-z|g_P({GisUWz6BF8@bG7iWPfz&v^BXJhW0-mf=J<2
zyu?gs%I0kU`#b=XSg)ApyO~e?Ub`Xvucft_fv1VFiNQb2KeyEWAL-k=gxct5jCIv|
zow{+rVkMfQRhjydDfkFdyrD!LsF~Wg|F#q*QHf<<snrY6bQiD3)24|d4TfqyS&`W!
zMPS(L>FM!6QT&5RD?HXc33=E6J)H4NvJ(81C?vBwn`Ic$W;z%+hiska^g9j+b~SyO
zEaj01F#sc&zBeQT*4AWm0`w^xr#D#E@Q6-G5<b!xLIP5^FFhP?71b;ef<9ne3(Z+U
z5dyY07>zf4OsJefFs?DYk04A!1~im`oEiLFznQzs$ihs8ITCs5Sb7BT(~_P^074<F
zQ}A5U*J*3WSSgt^SlLK!7?nfD`Oe8YFgFzIQhS*nlT{V~VUY6JRt<h^vp|5EIn)oU
zhr>XEf2%~d%0gvwU<LO9+|2ejNk6ZVN2GCpMqPj1?2b|laGprgK+trmhdC%3#8CPt
z)ikdpGIc)p2<-!B_FnWP!Wd)4bUfAl_${E39uhMLcfP$V9A-&D?LdQaGffdd?6}K%
zZCq~Xx)h{0v&_o>tF$B|U*5!q;im*}bc=^FNOI(#wSh+jQFOGgp@>B72suq}Y^Da>
zMe(3Be|aJ&o-pJ>%ieb|bT+kE^jaNY*S;!PwmRv8BE@+sVg?*DT=(c<Op|ts8V5S(
zB`-@Xa6>zK#q8WiTfBupSND1QKkOIAj!T>dnCb8>rO<%e#v{b(TQ2W3yZSwLlJjC1
ziM-0^l<pd!dE%81cM6uCMDej~wXvA44towBZ2d#eA}fmqxLOq^IbO0euqMSvx$$nc
zW-hI7<z!YL%~9vsWUkC5k2*VG(iH{vHzIp$Urx`v%u}y7y-Z0EK6YqMpk5=lr3i?6
zUzjAxoM=AM>CYGURQ1qc4LbZ>g_L9|r(tte?R7E2@%x*7#F&xl5mesnPC}c54uo35
z<2kY1^DC6MGzPcn6JkbxaCYsTcUrYcx4UjPr<D%p+l{(HW;Mvm{&&+2h)Gvqcgmqb
zs-u*Ot+~^qBX$Z2FI1uhDdlo}#u7I>c0>1ik``6gy!dFT%-mn=ykP|ca$!;O&)2z#
zxT}`{DS;PGv+Wm?TBc`#;#N<-$BgTj)mQj`znF8;U#UO8n+s3!f4Z2Cc4n@Y2Iltv
zy>eR8p0oePDEl7M*z?TO{(vb#yknHDGTUH`4g&$vw$q>yBTC=1lO!Io3eU;#-?kZn
zmV#n63U9`ZWOx6&zwh!Zek)152~4fkbrZel2^PVktc*~8T0V==u>J?5V<aEJli_G~
zPvls^#a-w?CwC(qtaxECB*`A~qolbT7>XvJHOdAF%k>4eQLhQ3`Zd&e;jJbcZ|x%R
zB_3hwFpO<@@D+040On#aR})miFLEa?MO;~nQ|-myav%yn8Aw}$lzx;N1+yGNu(SVe
z>p)S|M4}_p{N+>eFruw_%*8L#i2cA>q>`rs`NqQ7deXA9`M}SPqoAPR26?>WrM_kK
z6q~OiB3IVEBLkboAzk9J$WG@kzLPv+u~@-CpQMJ7Lw*)lF$LWKUu9IEGI6-SuZhWK
zIgkPK(nYHOoWR?zBX|=T2Og;9%|YT~joP|A1<pk1I&d7<cR4}+r48DdC_rnx62Pb)
z*drZ)nG<a3=)6l0ZIG=yNw@ze_$hx2;b9l^LjLN0J@4Uh%5;{%_tNSE1`zy!ZWu99
z^o5iY{Px3s2X9<RjI1BojBOrNOHCUa>&?Ihjwvr;kSm+~^k@(X^Hw}%{JBDkPTaf2
zf8)~amuog$y@To$B%pl3XTzv?eYD>&<ZUu+0RydV8A|}>VPY7`8_#GH7OF0gsMb1x
z2Ww4m3*a)oSoE^)9pds*e3Yb+b$q+uk|i&Jdz#!QNNCXF(^XCCrSo!Aq$+$Bu!_>v
zGABpLAfc9)ERY{n)vWxAu?pTSv0gLE6L(Dn_(G7dL6t&Rpa-M3#=B8pj}+qeW?gK3
zYm1Mr=BX%wCz|zOTok{M@|azD3y$RP#zufFigYjWfS`Q6+N#q`PwpsCw-WnE>7}rs
zV>7r>VHUA43)_U5Ub!QLBa1vZKxs%gQ=NaF%7;uvqHBm|>>kI_XnZH#q!M12IxF=r
zaclRzpvIAip&m#;@1Hucql`*(h;D9;%z_OTLWgad9TXG#i;CSPJM!q+&XDJ=WY9TM
ztJMB}569)`EV{AFjUkbRos?`HlvPNM(i#0Wnzyb7k!GGPbHrb}hxT_LJJ_DoLi-2~
z3tIrab?T=#Y0R`n_;o1Iix-nalTwSz)7c-S+0{J+rj*+^5#9AP=Lo||070Eu*GQLf
zhZ^1_ZB)rr6|T4-3CGr#B@T9#z8GM}Z6@M$=VEu+pHtYL5X&kJw9}WwFMsuKb7*Ts
z=mimSU|Lh8<KIqqWc>=Z8N9q-3YdkBODu(62Q0ZCohI8qeMs~RSJBM<Bkm-T))|XW
zQKgc4ryHcGck6pij#73t22;O`xI&buPL9D>Uek&?b`O?nq;6J?rJYJ{JCuaC)9Q)X
zEbYIfu*Lg5+}Gtxw-tHL<SzI&OD+F&w)apHyg(E7E1S+XV@XRorX`1PH9(6WQf%;>
z9~eFs<mYKTNc-SE7I=PZpIVh)E=UTlWY)rQ?)|L^#qN%lE<|od6`o5jNJv{J`1`Y|
ztO;ZIlLlJD1*eNn%YCZ4fUl5Po3$m1m64A%W!{{JiAL_BR`ilyo)i`_DhtIDktA%z
z+`L>W3;9h%WHiDb69S?+7`YmpkEb-VPDC!?-(yj)BNhMjC_u8kO(yk-0H=-rl4ZJE
zPdX(wJQQ^{>W=kxb|rFzm$&)RP@}e92elWOW9jaPV4-zR-=#T(*%-Q{<a`g={%+97
z?xh~^;4#CwGX`$ZCORlB%Sd@4w^vEi9lh|1Iwp2-_^ibqYdxC}Gx^&;MP`C2$1LZC
zuwb8&kuF%NyD}Ky0McfN|1e0Z8;p%5*w1@29hi>@K|+){5g{>)J}x11=C#=Ut9S93
z(dDlJCoQ}^{n_uhmNwT1tXxkM;(XkGwgOrnHAd`wJduh3qZ!Ahg3@UeqVn*Hc(5T@
z%)TsOmK%a$DHc)cnG=9~`cBwuFw$n#C>5O^WQIH)2rK|W#TchsBEb1Z)xOPhm<XbQ
z(&zyRL1MTpn1NBk2%z9z6S&)lT1R`+5m`nADRT>t5J{Ys8)TwWg;ZKMJtT=*q9dDD
zuM5_?Sd>m+r{tJpXnpt|l8w_WabaUu7@Mn53FSI1`TPo6pWq-^{iLi0E_B)Q*b;t(
z;1e;$!)Ezay0Vcj*%(=3vDd*(a#xQ-VMV&OVYz&n!A(8!9717-T+<adA%-CBV461}
z_k<*IXs8BeZIPWq*0UvHhW!Vg){FlW^WR@QvJ^Jm<L@%m>&HL7c>jCL;~z|ChP3Ql
z)+JHCnc8zs)++tGd`|ADBei7gPOY4Rz>nl<cNHP5y;ww6CBRuzM?D5llai7@-cuKI
z$H_>iToq;(`1lm!X?%EoLyq|UhI{cO&VPJ;I9Kk{_5lxu4wmoj^!tKqFYq6-1&(b?
ze>PGL3p*E%2O~bIiwK21`l*C`%DvBiM|{+~>7ofmTr#XCXE-~ex8>BL2=Tl(V`NU(
zcLzR6BJMpHBEh&v59)5xAPDr-`)Cn3K{sRWI5i|ny<**nvT@r>2m{Nbv&yHLL=7m&
zRbJCNZ(Y0O*mp=2Kvc>aAVI#})paC16!{G{CKvL(d6_c)@Zh#K!X=uh^Elun2Ca7Q
zI*!WZQs-l4aZL4O>v75Gi3=V6b~vW=m^=}l;n1;(N_$V+VjMmpIC`{|Q<gA#qC~^-
zwzQ(`+z?3@L`RpLVP=u#Ue|E?+AK5hSM~9Su`n<l07|$K;+>0#@3s$Tp2UdNY=TLI
zcdL$&_>3i!dYs>FHNxj)iymZMfJGtmYFc6Ha%BJWQ%tW97!Z<k>+@H%A7wKvbOt{?
zy_6*nJnX^;Sv&yqrY@YwRG}K_F^D+9jQ$P=vOL)ffiUsmpb!{4-v7isuCC8~lBDTi
z2zgdg;mJseL4)Xb;mJB8K9)9G_GEH|ibOVnRlngOEE#vEPcz`8`_1#VTR-eGTpS*Q
zHs*xn^A=eGe;I24ZVDaF0all=l~qz@M*<`(T;_z?l_7h2X!4fV6F26#P`l>CUc$`A
zUO{idW&DKr>K93WUOsuWOz^j%h!?KxMLB8b&6Sa93e$bOW29r6kBP2iB4t$qi79De
zDf9CCb%j&4)8h5+Bzn+&2qlKckEd~PfqLD7;?v0DL)ekXt=clLIW~cu-rRwai1;Mo
z@{+J7CdOG9p6%jhTiEd^t!uSPYk;_$dC$Yuk(tsE7+Y5-Z-R627DDlD6|rpekG(o`
zgik!vln(x&(Oo3#%0Nbzc*r~>2jgg56)^hdrkR=PsIzE4p4G&z67lz9b4&4e2J><)
zj7BCBM%A(wMLJT-P}xZl#7b>B>vB)Pg2{@w^jKvy^A82gF7R?tAyo$Nqh~3;>P5Z+
zAkEX+-2nV1oFilB(m1IJqMz1YAn9~BLXR>TZ=%yhhfYTIS%c5S<xnw2h<gzUEY!U%
zqW&NQl%}+aE1<U1uRb9A_(<f}A19hCsO!RTv5wmK@aUla#l*!4S_I6TbJMDv!wJWa
zs8-+g_X~aZ;|?N(`Y2<e9>3XT(k<k`plBAwB)}FKRW|bBLxXV;AQ0QT`fI6*@qpM{
z8EErle!TW5ab2H@Ep_5hRmF@=NZW2nrg3t#dM?Pwk&`><bpnJp_-xAZXTKuMQZww5
zz8z|%1Lmt;)?_p<cJ2ZfwA!seBG~DdaXm4MPzE6_mD^KP=~RTanA&pbU2h%O0!GE(
zDi#O!{LfEZXE3M;;?B+a2R@0~0-wsw%m$dR3}^}%;e&W%-w5oiwUbmsvr=8m3IY;S
ztKk&cUB^(bRCZE;_b0%Y8u96|3#gR?>P67BZ*)Dw$&&Xg`={{AfZp3z#@5AUsSLL(
zH3vz0p-9QV4KiOllkv5iH}n@@%uC-rGeiHLt1kCqyL$A+%iWR;&<qQHw*^)ogs_fM
zTh8BcZ0RsQ=HEz$Mw%g8wMWGcpZgcq4@}6@wi)eqBHi&`L=x;-tj(j%j$M?^Hg7JZ
z3O$_V<&<f2?1}NV87w%rafRkMRNlE!um_skE!V2a5fA&Lm7RVVCTdDf3_+C?O;T+u
zlJdjQFe`<oF>`~J*r7UffrAJ*n*Ep(D^eqPtZ%{i)nL3Nd8|dU!qE+Mrc)a0q&>T-
znpK!LpL=9mPX==zE89CAC>wj_TdfiOf>cX;T!mr2UK+zkVe*hNV+NHEGd3JBZE#4Y
zJ`c*3!hiDp&R?H~%;3aIL2TbvoKiA%28i~JF3USB(IUZ!wD#!XGVG9z`kx}nWH^eI
z9z)htD(dDOR%Qzd*ov6xlR|8a+BUs{4@*V#gopY+vx|I`ZX)zd)+!JfR%MwhY$Kb?
zNy_C=<qlzKE8wHT_tl?78p<jWGr9=7@J97ru1hvZxf<KkD+d=TIs5Hk>O(gsl}K1-
zTs85mE&aMSPT2T&u|(7rV2Y|enQ;)2NSCCyt!@dk4CJ%yR<pQC^q}T`><Xt4Rc0$?
zCcmV+F#P^ofn6tXtl7#U(%c9!rC^Q~F)JBEjh51*{BCf%e(+_95LSBM>yuJ4742<n
zcn%_`I?)s!`QGX>&zjYxUzWDsFwF0C$r$4S|Dv)M%%9A*$TpyA^kxz-@pt)o5l_ed
zi%Fd1l1u!Z7`Zn^Gi18MKjZVd^3q9Sy2>>~T1x4Zk}JE7tf4$eeJhXXJrr`Uu2!?p
z<<DiFM@P<|d@o@=<XZjnLMBVM^`p1DM<%|_*i7qf(6mUXLOQ6@Y1^dJGvm<I3^*Zd
z$98r?7NbhU0kZy5A{{HKB8+fiFQGABdd+#uay7^J1g{x~BO%)k?!103cH@0*ggY>N
zu29@QXIitpD4i0-mx}b8=Ju*k-Bn|RQ`tijnp^AAYq_@EpGR`<Ne7w<6!`JNvhfrv
z4lV%-9(1hj6Rv?o)$kMcT{bc#Ow5Szs!^5OrY>1~?#1F+1sorab>e2G{ApPSpenBy
z9sb<g4(1OVW_QY;z9>HQk^Nd^;SP<>Gnp3)ec_9VI$_(@{3C0;MV>>y)MK4XcSi?f
z!ob%i>!&hA7&5~oZ6Dl&|NN=nn9Wuko0Ov4tHyQ3$+x89HDyVt)k9o$r&!)}K)8%p
zFzvQ^-0?ug9X2+umX2<97My8N#L|AeAex0P5+F8n%Iz<93Tm4(qVY>Q5CmTYWuE~%
zSbWR?qH6m1VT`yYbQP-^1A5bgZXq+rCMtW`!5N5!!$*{X_mkQ45ssDkLg)?+azM|d
zMgce%FDS4;d)92aC{S~QX34o7HgV80=4Mf=TAK|@H4}aCqh1I1VFr)2He{m)HF<f9
za5aU~&zo>_TD+allw_=ZDTcTSP?!14^<!7iqmM+x&w50oY+`_{FOiu_4mxEJ5#j-K
zO14vys=<{s6}aekJEPgPTO8z6;2Pn*_QgV;u~Lr{dqQ_R<VWu<B-ILSA&W_6a^1X>
z-U%RP4MMBBd1KYPI_RkS?*_<CseiWj{(Pbd^!bm|UthpZ9TD34>rBG8&F>}Y+$jl(
zFRf=fuOG`7Ec6{z3-<d`&JG*>UGwiCZnkAOPL(Zs=3dAwrpE_Jq29&w^@Sv&t9PrT
zGhY-{=3uvimjT^Br6G}uXLi}oe6;4S=D!Y`bAZZ&i>{;|J_Y{0h|CV{1Cjeya!P!=
zPm%ohdFHpi>7UJ~zU58-$CpJeP}TiC6<8~+{WPKU(t1%Qh?{ENE%1j-<CGdXcvAg2
z#>-U)3E4(cN-4wYI~5oI)8>|oM=^IS4(pCAIn7WR3uySrh(wJ+dw5U(QcRy%|DYvn
zhz!}6Q9<Cs;$-o>9cQeGrw9VhAI7Q0ATc{q;#wlaj9J<sRZ-c%wZh0PWKYx0i2$Dm
z_FkWieqPPM1PJA+h>^+GFz9&f-wH%BaE`zQ*%VBOqN9dmQ<F&+tk_amPzffeKR5+F
z>xrq~!xK_%IXTbs;$Pe3CRB-Z2Ah-s**Nrb2116T4(76jd9K_OhxK%I5H<VFsta*0
zXQqdZ7Ul#bohns)2gET85q&Cl#Pk~t7P#Lt%`htD!5qaJ6x2H>pXQdsMDP;;_Za~u
z-U@}YtlaEUxNV{;VR80fPsTn!*_}O<2}1afJJ>I8#dB7{8B-hyMsrGN4ntCaxwLV7
z-48pE0TC#Rz#!3r=V6MR!TSM+tt|bT<^<lL&kY#^mVFADZKF;_7`tqZfsC^z2DV<p
zyntg`M`w`Zl>wuz^-~SF*{(oT&wGz2r5O;-7?(S<Sg{1C<P?o-D|0kCPk`>#R^Qum
zt0X|Dqh?9BQgyUZ5o)O=>(xCf&RQkJm|P8nS7)94A?FSR6@)1=PA@Nw)0gu_oSFcF
zX%95kntkhcrl4qGlwnfTY}^^x98_ciSd!p*iE1K*E*||R0+Z();qG3nTE6<MwGy`W
zbOu_h2JGgH*$>Cay7N|$KF;Q6^Jah+nz6R?=Cf4qR{lQaMze}#(nQKG7xu_$F?2{o
zhGqXHZL3Jk6h)QprfjO7y#I8l1$Kv=M0&C*n0osepxS|og4LI=&8_TPE$@{K?&1;K
z%!_4pyZiDmF}L#z*P@$1kmRtH?gcG{1L*OIM*LieUHcHc@089^FX3m=hxZO_^L>3=
zk)kR6l~$?SIitc1V&Uj9v6PFn>&8h;yUv4T8_&><qP(a3HzAz+J@*5gjx&UU^if^8
zEu_sQHIPN4?7FEoU}=-=89s7zCZ!~bn@f%<Ho+>EYH1}&4$TBt#IGWZ3HDm-T31*L
z;TuHSGT^M^Gb$RQyz`*b8h=5Ogm`zCV)QEAZC>?Pm~4M-=T_|to^_Ji=;b}>V+M0J
zT_UB4OOcv24+fCB)p-7ced?@;l2M2ZnM^#qZX;i@6ogCq58+znd>hz)G$2&>@pEm7
z$1-G%5%c%ms05#Y=H@9+e_`c^Z5t(WAEq1<8kS?+5wd%Y4sm@|JjXtCEX#Il<q(7{
z-1D}$86iBs{N&;!?>x^rX&6oab0J8|6FP%gX^h2K9ydqjp4(TKz~8(tr-w5HUWm0I
z#6R}4=X{0wn{9vCjpGm+LUN`LWr#P)GNb{>>B<PAzhYL-ms$u6Z+!%RGCcpZV(C?Y
z%=5h!)*UE69X$(WqGUcoYc_y{6tj$c<L(p2R=V<8qjhySLz7H1-o!6Unnq~PI&qLr
zbq}jOEL1gs-(CKD`>=L0N|=N2t2|mD>0Ty|FfOB44E@o=Z1s1|RCDmXDBfehfC>Ps
znZ3xK0~_%-vJTy60lS9A9ii)kg;=F|*A}ax3)4ZtU-1;MO3m1MSUU|54$hC^=f2xI
zjZ-T^d+9eHd@AF^grgn^q4Fh)m!)wB_X^58^(x}QKA|~J9WsKHI1Vh|Rmbt+v#*@_
zIkvYR>TuvI<T!@Ql~@Kp>E@cmy4xBv%A-cLuse-tpKbc=dx{c@72lB%55RCM^9{y+
zUPiX**Rl*DE9`6T%YU@{ey=&ZTi=;_;M+j!pTEHVL$80R@olH_Ekn&UU;>98N*set
zb4HUcLDI!x3!#+qxyX^H*|*&*iNjyZ0$SPc*^cS*^PsGhZ%0f+gz`Dc$nZT{TXU;Y
z3Wm7vdMIK@Z4Q~v;`oIazn)`~zJ_PNyqO~(&iL5HV=r}LSA6jzgz6m!iV6b8xC{K$
z0{Am1h-O1cdkFzR!1b8+O~_!BHx1(M+Ej`2(MH{=Y6(nvfvTl2LUoKHu|w_^=EQpr
z9$G;OflY1E=IM8(LwFKiH*!Q52d|UG?9{O;Y>2!(mw*XHJivy)MR*;yv>v<yao9I$
zY=bIhu;)<rjCkt%8PZUq3t3jP{PE$tFu(>DxN!e&Mg!8c=$zTC%XRXna_KSDhAWFJ
zyd^Lj_Lo(UjKKx8hVwRCPU@jRZ3&5e)+2!s#^?fw{jlb;>!>(~?Yuz$Q^KHfg$|$t
zfh3jg4_y<*sLnzNl<BkJ3w3X|n`p204>>B@Mwwm>D5NCc{dl+iyYvUheZ=9A2MdFI
zqcKSQ3O7*O6x@iC=&oklg>VS(bGFr+D$$4<0`h~}k{omzO(!ds)4G&4G<7v>bR=hZ
zrihva9VK^|R#WpG_jG`+i+Q^XdGp~l_kC#*LY6N+?(B~l=lsJS^wFel6>w4>qQWm(
z|B8WSR2R$Yl6WO+Q<9r}PmWf;p74WY8uy?r80>8H%voz716svz2h=g>(a2&M@kRVM
zOF*atnI;tJQ*ZqXAb10cNI?*tW)_<YLk5}No?Io<%{sn64AvyAOY2vz(8+;P6@2Z8
z$o@Lk)VI-M>6a3dqJ+9Dt!P={y)7}mc(9E4k)AZqnw1jK>MWMt6#vNy^vG7uA18s;
z<3Fae9auOpkp5+*pSH}V!E=VqEYj{YMi+Tu0~UH!jTKjD8w~}Ls@m)5+JKg+S|5#I
z{<cQKN%ueAn^W5Ud}BI15)_ebAJ@^?Hk|7#6`p;FBw8&P4TI~$Bs;p$Ds1vvMeB9o
z6r{EL^is%X;NF|PKM$h$JG$Fg>j!%}DcT@N9p-NfJ*-SXZZMxPv`Vb0s_Xe8-8`cA
z{EEk{6)c*LDF@a0M2t-3C;@V4?i*hcFfyBLCts@OZaC@MbcHj=&ifsT0+iNh;in5O
zb;R8s!{cl;Q4a=rrIpfqd01tOkYk4Y0Er?t1DH0(@D3SX&atv=o@~Q4th0nZa0{qY
zRl2X2qU@2SFi3WGwkka}Jx@_*HP*4a@${iHW6a<+)$nEnNMUpm3`I;wKLpO^MpH7U
z8Rt7$qSj!J1u*x`8u1~PdXz;wjo`hyEZ~&)^_2RG_L)K5A+5V;DhP2IwTiYTG^UX)
zy#!M-G0B#kK!8H^D&6Iq(ZF{27R;Qj`#>!`ci;eWAAf9V-td0b*kmi*1{eOjJ!Nea
z+T5KAxRQVmx{4`xZU>l0L%&cJ28wfzzbw7lZkFj);uuvY>{HR|rx3dCQ}^#a3pTSa
z)iZMS3LsB6f@x+tk<4H#*fY!xQycS$$R6xTAb~#9t-zM!o4@Efbo-L9QtAZGp<*mE
zNxJhM@g3C?Et8<dKoU@K$Q02C=mDWgKx`5d@DNMc1M+8tcOg;}I0z<&nZoZHV~j6K
z_vM)$vthxYp6It|aa+K0nxBd-i*z(kX{oNObADKz)+d@71uS&%IjxtJDn@Fdj@C#N
zHL`QFL8!6oD}K#`Wq<S0)j;<xdhB4{@_$3Rw)zCx7k#J@JZX*n=~CVB8iU{=lZo2$
zl1}x1=ufObkGcWWp*>H@Hfo_;>|Ac=sLvI(m*braJam<5qiw=kttnv|KhmL=*%K?b
zx8{(iNI<$DwbFb1sFH%maa7Li!e9CX6z(BsliP(@sEG`;GwD@?U=A}}HZN=*342?@
znWDGabe(vsH~nJf`Kr)FLHP8Y6v<oJhYgOUxLTV`pQav<neyb?9s=6hxJa@3ATRdy
zeQCG;c=NQ&iWVCLHD}|9<E48o2?i2tA_V?V<Dk3*6|~)N5KuSgKkaLoeJ{zlu>AMW
zq8GR}E*tE(9ezXX8Fz{Gwp!|$)K1xPv^0@rw<e?%cEkJ5lrYR|ilp&iWN$dz4n2AS
z#ez}Z2Xij9bR(s7yclnPhCnJcXcR-^2scBgW2Xvk{;oaoy!phIIa;xBBBpa--R}_J
z`<q~dyHDB)#JCq+w9l47Bj0Nc_EX_r5dR2Ta-lsEvjwZ;FeY*YkD=)hEE<*=>y>z=
z@AVM~i}Zrbogs?D>f3Eb?OS!i{;d-Yj)#Xx>yOeJcd7+vj?e;r4JHdR$jo;gzB$-O
zj(~Uxh31!^2%>payugR+y3jltFA~D;OiaK%kj}$Djo5d<I&;Juk-Ku<ux7g=fm1lT
z^)Qgto~^1dy4LhEIJEm9eOR}zWzTDTO}s}kvfX4bokhS!U{PSv?ncuI+j<V?aUrqF
zC(a(b`wmivb05>-vfs*6&Km}&T<@482MX*^H$s@?SO~ZRaAjNWK-R7A9Uw=i2EfZX
zs0K*o>ux(ktA}ob$0$ln50&HgXaMD{k|2zKonpV-Ahp@IPse&BG!aJ*L%LgtrcQ}7
zJ^Dw~X0FtK5eVS@?9Y6ihH9*2YjmBZ-HvXxtz53}NxX9~zt(0adm5#Jwb^f6jYbk!
z)S6%yDL<nkm&9SAfK2gWs`A-n^E>Mn5RCh=6(?cIaqWRwx80$x^OU?SUfYz>cxj*!
zQL$faQQU;=>El>Au#918Rb(U@h)rBUC?H%g#pv3l{HtI7_5Jny*S!99xa=qxTAV@f
z_Fe@4<ZOLwydozyQ%i|^meL?OWj0bFC)9hwerv?vy)Z9YRz0Y-9%BqA){8AY<*O0K
z6|hLi&vjwURXVDT?D%qr4C&~C1&dT{EKChb)1c&QQ^&bW56RtF`L{yf#dGqcdFf;J
zS|eEQU$3k}zf?mem3-kpMWKFfL6p~V4fP&rNA?PcQX08&pE)fEb}^?@#IQgP-UO-k
zy{DIPL(t!)o~+?~%Lw%sxh%Yw+V#VhBKR29;{&}&EOaYGHxJ^-24y6P!%npE<ntRZ
zJ79}koNr1uIJnb#1ef+&noOI5d=oX*iM6;VGL{GXDM>^tz*3F~gC;C~1S{_sbVP(?
z3;U^jT7+>_z=0B+^|PW(U}bDBBH7@Bq3yT&t}UZcs1|j@a0AyLkeFv+vGoxSEW+Un
z#4#d>V`a?|FgC`H(3(1Pon3!s46P<FMC(5_`nX%+Jxucmkgbk?|FN|>Jp2T-Ek-I!
zYcI+C#8S0hzYc?n#fZy8R16Sx7zpah6R6zG5Sp#MIXmr?m?x%9gwi=Ew>$jS20P~~
zOlRXe7^(4AOpUB24+9hNA`JW+u7ch2kC~O97$Y6X!AZSn%mhU(c7}%3DaitUf?QL!
z(hUi7^qstD_u0+<r=4CtkIA)z&cZ9v6pot3Sh(O7FQ!7897zxNQsnyDdY=4K4_&x=
zdY1TX2E=vFZ8f-g8kHbp(~H-DJ|keKkG)ZnPyujD<b5hsn*>5B=C!d2(Tk7^Gv9uw
zaqg=jTovr3Cqin2kgpa^%pvcdM3H>by*|7kl&1VBIPsj()fl4qumljJjcJ(-$1CFQ
z>n)<}u8RlNlKIL|A@0eg5Hv8+p3!;@)Zf~wQD{fmDVv{Qm}#d?nVNpxE9=shGK<>O
zu8&vTdLL1l?Me}a$MNnQd4s19pZj0YeKvCXoD08f?zbfg3_o%pM~4z6aLr@x->q&#
zQf|L&4xkP6{*rlxZ0a=Y*}vVy!m~g$bD0?m|1ZYgAxe~Gi`L#{+qP}nwrv}`Y}-}4
zY}>YN+qSXmulv8(xwmo78zV<{vXPw?F(THQ^P4A2bF$#m#P(~zFUiH^=`mmM>0IJu
zqK1!xypiTP7-`}REkmYCsA*=$I37@Vrg<2%;?8o?*6b6{59DXVLhrSOLsA#<=g1f3
z4$%-`-O0qq9e^zy130IvEOvxrw~ZTaOIAIs9$O77sdiBXi4*?SC%2?fmAHaZw9=hR
z+>P;FK)1UfPq@9$%_W!#E=|9qiDt2@xl4s2Elo6mbUS}tfvxsgeEX$TU)&O1ZZ$ve
za`aO+Rk}k!hgS#$`Yex3(bX2qH57%88p&5EW)lV`%W2)>$=E*}NzE><msA&hPUqbs
zFxv<_t|JQ0rp`<hWmpMz!E0S?z&#adrnuiMn-vfGT26WTL3<Qgvr6TEHxiCv7*^wQ
z7#@gAUDg#}yII-0I$9g^jE)T}-JP5zGDg+E&f4YRMB+S*2u`wJcU$&c>0n;<X_Oh!
zrW{!rqGkD-kyz?buv1MFZ?Gp_lS&>>LdB4<jMlT%dk9N}=No@^-fAmG>Q=&5%$w7q
zi79~_evf?%;!eqcC`!WI`7#9{TBZzL(v_U_iCcOr5qndC8AwLcxCDj4^%p6VoZ!}7
z=`VO_*P)V0Ie@(>T?7wk@kG)@>IBp54C2)d@!&O;n-}gLp1#=^I4v^B&cr(DD={3)
z1-1~g(VwNKI$}x&>F`wKO|H{Trq_m}Y+5|L$7%BCV~^oktpyCBpuI-c4=#F*IWTkU
z$tRGA4ZfM&4@r4kClcfH%*s6Zy9NvUUTUy5@YXIxY4H?9S>y~<Hd)*ZWIq43aey;%
zm@vDdYDo8W(fZFv6)I|*H5JhM+T>J>S?QDw2v~7s+H{W1dI2K#GFuJP!NOymXHN}v
z-)trMInK@l>UsE8L5?W%-+z7&*!<}kh!k2~m;hEK4}?GXoErt7oZb7KKB&GGzqeko
zl22oQVBu3$6lZ{inFH<pJ$5|%A~jQAIALJK<ofnt_$}+Y8oZ9bwTDesI{zIGwJg3_
zCM0cYM*;EPrwKl#f}f5NReup4Z!>>2sH`{f$-0CN;}8k~I|SG>uziKp5OOmYwtdXo
z^+MzEeH*o1Nur7Qxcz~9ovO_o!4vSM5<!zAZ$_a#T_0AT-dPwtVAIe?*0;1Pv%${m
zzJ;Sr`ZRQ?OR|S2JNK&iMk?~lEncZK0C5(dk`$Y?q;AL|U(o+O8|uNzb-zrTzC^CE
zK{wdwOxfTvXcYF0-n2Qe+u-Mj)+QeYlnWKHoHRb97>E|rQe;#w+({d3#}K=4Bw8n!
zB$%(s#-qZXXP;sFw`>@(wRni$OBQ4Qpd(6>5WsP;FakUcqCB3i8p-oAr6dluuHfPi
z#o(5)de^8ancA{Q%=~<M>A+}*c$H@VlWMi1aBzN#=Ap)L)?uS|aM0g!VR+qfQWbb1
zP_mn4Nd5H6IQ;ZP;T#za@s=gQcD(CYf8HI3jMuDQ9*>W4@FRK|a3$MbMSRPaTv1mv
za|N-gg;A1m^X*xYdv?M_Zq^OIdu3Uu)yicRs-C|yKCc4eSkY|&%@}KgWEPmtN~y5g
zh{EPUDO&VSAm>*RH=JKDXsIWl8mGjw2?%TB5ju&HqgpN=7%Pr{&WaEv>S$a|<Ip~5
z6CkD`^)CifrimaS92{+(6eDIM3>A!I*>&2dUL~{tHhg_*j&%D+Zchhkr0zWTsyZ5O
z%5AOD7hB~YA`hNvJFcRE9DbgDT2#MBNJ)B!>05=rXFG2nJu+jIS(YNQCRC&VZmF^!
zLn*^3xYJzMJApphfcoagDU1@XRA>@}QUi~3z(9?iDmICHwvSZ{-T5D<G4<V0zgE6*
zBp9{5)^>$=Y-V$n&O~ozxC@%(fi!6w{DyNcXPJQjEe@4n39C{zWM?Gtl?@5dLK|V!
zd4ctU)7#g_O1ufX6zB1i$TL8szY`MO8MsY21T_)zUosMZ4eQnkR$6k=7t}jMpWpic
zR&ph?*MNjM5QGYWjYUO@NO)j>XM|u`ATatvI&&i0n7j)+XOi0#T8#nhjGgdvW$jEa
z+hwFqO7JitMu{!HbLz>GlwB9uX*GYLlUwiF_B{C1Y1y&T)6UH7(%me+Jeua0a{al>
zr4#yf0;wtCE$J|@8A_RvTKKGOe)LZZt?h={G{^@I1o0`)x{8W2JCIJ&Z($WUahemx
zn#V1!9pW3x`HYX#26!v~R)}2BY6+ZpPy*r+uA9$#EL?d_H1p=^Ed10l4RNf!#dUn3
zh59Y&E~OSi-AUD$q1lC#RIgc2medvS6l)@J)brotflWFa@~|Hx${pgrHJxk?Y)qW~
z`R=f!ru8!%K=yg5VW0BjNA;3`bmmVX^~*r7fFfhqx8~0Q)+nU0Wu%BpLMpiM-N_Ty
zxg4$AFTyHDi(G8;Ik`P>*s<}4QX|xrY6fS?%+B&Y?dIe7!oU@T{LOH*aE4B*_$dGc
z6DS-iSdI&w4}KjT5a3x}s;w|DBs9F729iW2iN6;lIg7%i@C<?7;BE{OyUycRL+D@B
z14_$G9D&KjX$*NxozI^Gh-syd4OkaNbo}7gPqbiQxtU%k3YZg^W`P&%jU2l&j7%G4
zY-!Eij=3!x`j(9tE^HM<L9<3ZC!O03tcTSlf1&<0f5XSi`wV=XtGtNhI5(5@&YGoL
znu-wdqE(fH4woM!|60mykdLODq9qn(McIb;1k@JeGHBX$Tbgfx^LR$NJ^P`48vchO
zVEr?_g2$VkV`C4F#-o+~TJsfZV23PQE)1=fy>K1^SZ(ci$^72k4bFDf*4ql;Ct)_b
zrT&G39Y9;V_sZ_TfoqE~wvaO(TedPO2&(ntai{}l6FM4cgqoe`2IY6aHA#09S5fc4
z%Gj*OlWhoG4p;D6^hgMLP&aT3PUB3ZUm?Wlp$7AGc=8&C?Bns?VKqs0j~$@QY5=7U
z!22=gCdr!MTBj<Fldl9#`SFseVV!oub&>9fvs$*O5m!UT1$9LgFnwGLKx3Fi>H(=e
zYfLdbqwN9T**a7A-Yfb&`|cKqwU_lk%lsl#bbDDNk@dr3F@$gON8p_~{Z-*pgT<9(
z73?Lc-*+i{&kD<vQ#t(&R5?xR<nnMp!`6^{!3w>MHpO8_2ZZ8-bCmJWY`%fS-l1o~
z##|s<Yxl7Hh$;?{Y}=`ZZ<>x3TNpwQW`q@5nbBiYNl`zL78!R~%N+d)hZrH(Wpq4!
zIat0u&%4XdFasFmz?l!QS<cnC2QkX8O*0_uom-*?eZ=~h19iC4uK{j{2Qp*taf@1y
z4M+L&kGewVXMy;hvEM-W?i{8f7d~Q^?o(QKF*X@0gWL*5Sx7gelhAsO2sofDz!|oo
z@#Kj$UYaU%`azn(=adL?xY#fn`+_|-9<U0zU2({y@}*RC{uZsQMDaWDu=7x3v1+bf
zj{OTW8LLv!SjoK<2;mTFl$(=8S)vM{SSoNR6Cu5~Cp^tu5sRaD8#`TU4A;q3`;W{h
z$4R^?@I;ZC3yVwBS(1!2-3ckCMkCG!X)js8-N|<AIQ$?_T@_|^x=d=6gx!ljK7xb7
zYpv_i0bAMR0;zLxF4Dr=nCUb7smYzF`<bhZAGI8zBtCzm-NjhpJe8FRuc+%&JSjpq
zrOOHYl0|MolKZL~0+T=na3jzgO%#fjSaw%&e^syX%7EFXDj}EcM17otZ)OEuzNvYr
zuJ-jRdnWry4J=0DR*`|5q_Fs~%5uJuxu#YH`R-ez3VU}TqB(vqp)+K7KJsxyVKo6;
zR4;ANS3u_s=38^UAM06UeEe_orOmOgxU%P+S4YZDX6|-aZbXm9(sUV7G2nHoL>a-k
zOrM>32?dPG#U0&&t{jW!?l;zdZ*jr__wFY@&ZdPQ@%TUUZ0!G&UiB}s@#G|{|KBd%
z^FTGtSO%#8dQ~WExgZlUUl=hwPiax&`qL(M2vnmVWo@e*_uZ+30ZzAFe~r`s;F)Q|
zY%vl51GQ*Aa>kHg=iuV<e);=)2(&2*T+P&P$^>WY_MRAo_}&(!NQ-?s!XTaO??-_U
zR5RKy5NGJlOe`G-a%e5UK8i`oDmJT{Q6;!qkK-5097?<jC`ED@KpqoS>L-SYgr5;-
zj7T0xFH@feN=;l_%s77wsKnpzC%~Bs5CN2ArWM>DtZ13Wh6_#BV9-W3pGjmR@PkRt
zmP*g(3FW8k5FeM$?6~&ma#frZ2wRnSn`aTVjgLVZBNlD5(y*g|I{1$-breJ<>vX}V
zLgWu|CP*FDy$z`m=kI*gseJq01eN953fTF!bAPuldnXUCXRzPkj}CdA8n18zHEe&Q
zXxGB_Ewrk-wci6bJWqoh7lxW4xCj3REBwS}K*<`f1O%2KQkKpS1-Y<%9Y5RxaQ+xl
z*MAJDvzF%fI-XZMR5J~CEqk%qF8tD7hkat~tY(&x*Qo)23A=$2CWx81ii{E^pM%D7
zy&O;6d8D8s;H^f*N{eo!2n)Z_!KCJvgG+IuJO3v0VamO4yRkOfxK)qmq1z?hC(zF6
zt}K#a35mDc7cSIZiGHP&N&DN|_OAkj-zhGprBUi#9Z)w=Z3Iz#kalQ>MOALN)*z@A
zF`1Nx>fkeg>iEakgc^FW%t;ttFO=~O!Mblh_2NB^Y;QTM7gT_i5S~=x9#nfQ%&i0{
zp(&^og_T0RJ`k#RTP~Lhc9L5MucEy)QNG1y#wmXGFJ%DfMJv0SYCoDAK-(}`y0Yk5
zZY>Y!M9p<89W5@IDf|{4>nMi$Sfg4L`CT5CzMueWvF9;%ORHpIZPUuX@@-rOh#+h!
z=(mQ*r-3eRH0z+`@C{VyM^gH#+8bY;WgCAstLO0HsnIc2UP|^FQT`BkVUunpsedQ}
zW-+s_(epp%zzoZo-2NXt?-9qZUv&R0BG5B3H~4uN>GkaGtlb%y=>NsQ+JyC`v@v}D
z`)`C4r;N=fg^(g9Jx*#uP#F|-T=zWm4AEgjm1@dkAyZK2ZBNe@SC;c{&b5GN3&!xu
z4V|l(t7_V=E1G(lnEY3QyAvo;Q125Lu)iKc)u{i;DDUjVPJAGKPxOe2Qnf}Pu}F;y
z@YBW@l%zG6OyuIc0wgG8dFH_^c9vA#OCk-TFb1p>#(cds0e!7sBRS;Mj4%4&?+=St
zk&K7cdZqaD20-%IAZ8@`8Rs^~2<yf6NZ$6c7JxJ}YAnpnMm$I31h5Kn`wAe@2N!fW
zI7}usQj$7yuYp;Gn9KU4l=9j_bu8wW1D{H;9Z<*ay>YR%v-6uMjzA{RHfhomuq-uv
zL8sQ_*KSu;mEGqol&X>>tRm}E!S#Nv+v7YOhKwNFsr#7FB;a>*hg&!~)9gZ2W)_fE
z>cQCA+TrN{_}^Z{u`v_7o4JlOB$^uG7V|u1J#UEHMErX|ujG4nGmw=%v8DPJ`#rdm
zM4mz9H(;KsUZlSrBD<QwrF0IlE6kc(0Wn*>IiVl79jSj1)U`>F|8^A+NPN*Tr?bTP
za?KEDeL8w=eY)DQUlt&eRH>u^qTCYghDh_F<R(re^2JERUT$AH?TX!_d9UtJ?)kl`
zk%tNMw71hMIJw0!60}tO3Hq}5gbHQZW8YepNxK0}^b7gWiWNpP#=8XdxEHdgOl^aS
z^|l2J4k4ghv%N2x&N~@_N|%OjZEH$qOnt-kjg{w38!<zQlZR*L__p@~$p4gW2I$JN
zns9ViNMjWG8Lk0`|2gk;XC(QaUc8XWXpj-AX(Q3@N5;^V4hhzzZhsQ+ex1#U4>@f5
z)4&=yYW>Qe-y`Sc$PZ1hYhcy7q5O$JmpjW5)YHBo=VSK*TFcZJ>#1gj_Z#%hQ`2V{
z;dgle+_x<em?DT3d)&17NncMxR~8ZF_V5l>3gWn`ggCZ6f5rlM31u6!Kn??R8&1_K
z=Ea6}&sC^H#>ia|!tTY}GwcTbSUrpv2^Y}NGfdJFa!(oMvycB;r@yBAQ$$cOjqz!^
zDnEx74SwY2z*G;2H}re$Qv2G9pTBiU!MadGk!=F~f!6(WPC!vQ=1{*rCOz0zZ`&3O
zB~PXAg5}x7D<RNezd?9h0RkeYThet4FfC>|O@{WZom4+KWa}~pVfO1346TiJEeR^h
z25$9|>~TO#?a)^;Aj{zCAMjxCt}DS^n|*9-=x6XtS>Nj30i8-7PK!l}R9a*<xTG;K
z|BOir2(<~VbmtD8<Uu*+uxke4V%{2TKlRL3TwtPEKTFW(jv#6ZtATC6vFP~V3`Ep2
zVq1zq<fp%YB!-T6gsXmC<P!Q!a2Dz1H5V4yi8cj-AX5XEC8h{b(0LgHArA;cHs_=>
zC}gQ9H;c(El4EoI!F+*#g;!xAV+T!Y%K|sK0;g%jQ`ZpsF$PP*Bj|ubefufWSOL2x
z`CWAGv-mz>o&78`6+=*<Q%op}gKP@4+@Ka2_=7OYDB8UJ+8rU@;Z8`)JA^~TnG*v5
z!PFn;X7md(>BEVr{o7qtpbWH%8=wL{(nWwz1)dq1BA8I|!Rw7nXvghOHymX{+H@d;
z0o7Y%fRs4*Bs6!MlXYsVhBE8Vj0rRosG}6T9vC_Wy(`JYS!UAqQPcM+N-2-XvFM3m
zRQ^b{OH){lUT%?oHCIv`HJCOivVdqhn3Xm;vQ_2@>*9w&PqC3my8%C=@m%w}=Ljys
zkfYfxc8RZrQ-|}(<;E_#_^sAQcJWa`f_nF&S#tBdxf9|+T4Xir7?<w0g_D&UV4#U^
zEvfqXn@pF%Qd|(B%=ZZOvO0izTHeP+V}SRanvp_CSdfb0(bY`*WMzJecB8_H9r#99
z(~*f4+_^bAdN`68GeVkQ<&nn?7A(Xb)U`IWkdi7dZ7mZG3P`+dxX~qVwMKrHQKvF)
zu;`90k+u*r8y2P9ep-87T|Vj!<QK_A7VHA3Rbc(7P8-;y4S=Jc$joLNTEr%^d=tF*
zD>HE{XcD||GyuxjI%=spXoDcu?eR33x2XuQyTfXzbz(C@2$Q(brh7Hg4tv-BP6s$6
zcEAZ7$~xFgql)gZaN>SNq0qAG%?3w2LoK?pbZ2J9R*#s~a`W<f`#u3kPFRmzvde(1
z7V&G@tiJx(4(~}&s<Z^C)DZbuv?Xfh;%4H1@siT)Gu!as5mQ;rpS1Xnt0)YdFx+WF
z{=VSs7Sz#R&dW0_TJ`PI=rcSDUbn(PVNyK94tVR><sDMh;66U<ce4ec`JC3K=)mAt
z?=siBf*p$_fb(^UWh4xxJy2|k8cTZ|D^PWeM@Nql28BM2`XiE~&m4>BNYAWP**({*
zdo~0IWBjXg3OmR-OaSf@f|UigTqKVpardk6mYCKggDWr~cNTHU&&@Bxyzb;is}G0k
zH5brJA8co=M3`B;%rM_2|F$zbyg&YedCPK9^>Iheu7_<{zcmkG2R#HlM`5?hjT$n#
zJT7icw~X02rF)jR{u(J{;9-<aNHIFEo~8|mg2Yi30@Y8Hqm-ty3<3slc&2^Hz&|B9
zj06A~cDkq}({D5SKE}X)j@i4r5OoApfrFVo(Lx24M!%`?EXmTD4|rk8-ca1(b(oyM
z(uJ(-r#m{?aHa_fSzJ65%kawDWQlAfa@bJ6R!FHikgq&P5R{MYO)&wE88OMsqKp7m
zjpr(lMQD)58SgR1Q9275*Dkl2R%w`FOPnmq+B61<uXAe`PGXvI1fif~VuV?mx<Y*u
zoCT55{e{?VqL#XHkTPU0w>B^1GPH(21F5Sjox&!yJ&+|Z4U(t4Yfn?rEXB<9a$c$=
zG=`fB*G&GIX6yuYrpubsFO`G*kVS!o6~@z>|HbKg!c2La*JK3&lC)Cq9^gGEE~nbc
zX#mDq2HV(<SgkP2<oy1<6wV;yp?u#Y-FWdh#3IT!;(sF$3Of~zRjT>%uHyCpb^W}A
z^$Wf)2(QpM{6NN~Jp~2+-AuSMfIL%(L^_%SLlxbBMxB2t=%NG(Q`Vd9kR>FLB}BVX
zdH<PoS<y_5Y*V_NMdAfds`XpDzAD3<D&exAI$v_Hm1{ZvIw#&bOBr*ZEzvm`=nv33
z=4GWxp+VB|lv<nYx~ff*6lgT>i%RKLBOHx*``Rq`SS_xY6Kequ?)4fym<xRt8|z{g
zXKA1g*10XtVwOM5lMBw`RyWL(42^O{dUs9W`@77-YAeU}HmEi<{sxzCslS?mO6UuC
zhWwSOOD1QlYX@iG&wGHA%f<dG#l_WXZ{6jo9oBZO*=7DuTD-M5=n?51&UL41fF+8!
zPm)RvR}IGsm7X0(Y?04GX8PG5mLw*6?0pKC>Uz(81$-$0d<pa=>+mn@xS@(N?NOQZ
z!}Z1@)wkt>$cu-H1_(sGVHgAK9zv~+)^YX$0^ns!99rfaer07(Hwuxiw#QbJZ<WoX
zt-(ka%!&k=Ic*;*S=CA_9%owIC51G0z$OcHRCzY-p=OI!Cot7|QL5JzJgL_SMM`W*
zjM)>RJR631JCr$)p0|^#5Nre<gXxikUfv@iw@+lE>rG?b5{%&*A!9Dnv4)egv#yy=
z5uhFFtbV6H6ZX6cs5|#do3iDp651lcIN#nS6%AD5w2JRYEa3Q+(i$r&v=A<!2WEtY
z#ovE8d%@k~^0jSf_dw8YjG1}gjGSE@T{$_rTiHA4_vss|pOid@#6Z2vEQMA54L^3}
zD@_s1wJ3)_h4!H(!)DNJ&~ucXXV^KpdT2dEhEUTR<dhagC_vM92Z#TH$E9P%=g|-r
z5(#Xl3r^d+)ALMa5q}(^t#45wRa8gjWmm=&nYS`$Q0`PUfxtaa98`>r+35=nP>x~u
zd_2~D4Sx(g<@k+bCwD=OE;=Iy*Nt@~?!@}iK0E_<Jwb3Q`=XVPrxhI}7A-?5og(#6
zepRJ5xl-w>y{Vkvbji|aU#wkNKKdkL*<eegOpTrtQrCF{4pCLCC)ES_ZM<?`jOL97
zrwj3tm~QiFDQhoAmc!JW^+SXw^-ChzGL6L5WQ~~{!w~~7<<b|~8A`YKyABpG6EJ5=
zSsQ2<auzUlG6uFS$f=s<k%yqOv*UXnRt%l2>~XLiWp+1TCi8zzxOG8v=meHqXXQoD
z^Xi2bo1T|&mxfQED~IMv+yZWxYrG-vppxlRKAC*n_Q3>>9<kV#v5eEPHGCRh5io4*
zL=Rdg`mqR^O}n|&^)s;OKTT5TZsf9Xdu7PeNfr|qeQPLu&hYKi(>f?24)CGf#B_h>
zeXsLhX{^q+q;fM&*o>wmKFaj-JKUaT$Jb0CacI4>fx}z|X&%d)c#DLq9ccjTiiZcn
zENz?7B~yLrtwwoznW~6f#ag`-=!uEBAy<uh@RLPxDpV%W*PkR!Z>scer(a}!dOFY5
zXvFXxQ`Th%PO4SF2`}?PYw&`fL61Ks3B~bs?wR4YF<Em0yxDSl<hTS1cGoN~#B(ON
z3n~gFc;|&DDGUUt1)o5VvP=hfG|s!aRaxrr1Z!}x!B2cO7q{|ii2i0ymOL+Hc>2Ux
z)yWjnCVB0d?Nz1aOPwL)4$k!LKvalZkfg|HwK(Muk=!H+{v|_&f3g(!yvFaquDrJu
zZ8R7A>-?CgfJ0znZEpY69Cm0X&PV80YQ*{i>u%<MW6WwOkn<#e_!)&i9GQRDn;Y4h
z{&Pz?S=q*}fc-x>%`~YZ$oe(nt<=Qp`YPli=irn;@PzFxvd934ZjdPJ1>44R-=4ZW
ztofFW2Qb7L?gzK*J2z7!sNvfEDcxF~yxpzO%Pp<XPsoe_!PQyL7;kl`zi=`r)LJU`
z1SPf9Qen=1L1B`Vwic`+gi}WiNy`bQv&$GLxuDD@CxBX5Vm$VT(g1&tX_UusEvs{r
zl^;q2Bt|tP{C%V>3jCJh?#n4O6ibk=(<q_c<rWePC15^9Nx)^{w=Y>xY?<fd-nPeK
z3}5<4-KpYej1(bU7bu4rbouk0weysTd~>F*udj=-S;RGD+g7LAb2aG9G)v2cUnlEj
z)w5D;ME4SvF%A~?4fQ3Ly7NYgvz=2SybEIXh*YU4&kKL2T$*Y|WkVgg{N+AtiGA47
zectR|;k9BN?$~tjU#jGHs?(uDR0@eOvk7-u>Ms=3iV#tXOX8Yu1F!f~uV!E`(#h99
zQFYVbI!>A{N;&I_UgC1CzC+Vn6u8#^c?E9~5037Xf)G9xEap1x)}ZZ8u%|NO)%Dm?
z4P^ADq9OyvzRK{<N`aQb02j8~2~@{Bhob`QPt#N}c_yw7+iW9_fQ{ZL`UK2+%!9$m
z37bh|d+~EfcYJiLSy2YZ@*PFdc+Zhg1KkJNHqGxMCbUHkMz|X|Dnj!jt?O8KGnggI
zOU*4uVVUHb=z2R|4PYG@JciQ0g*a4mgqJyQK4<(r`*A!)PoM(}%{BacTxJk>b=O=6
z=<=h{(i-RWIbW8N(_dj4v+M?ar&yH-FZ<R$acO@wNV(@T*xTjnue^=pfV)L0nY|`Q
ztc6c=fUX~Br<CJSmC@DjtRbZA14`b?4>Ar_`?)g?19wp;@D+9#!yS7*0+#&AvUc=l
zppp{%RU<3%k4p`e@3PCaFrnSp=J2g4(UvKzdA*dK<lUeYkNm$mkMGz%nUVqaLi<-9
zIHFiD_e=LVvz$h6P%ZXwoT*|UAAh8q`%>{gneg}C=Pnq46@(M0iAMWD#t@TN@oFPo
zm~vuC>CLZJ#;eitWe#xrCtdBgyI9<cyUrVegO9Z`QAxG3#tp>R*Z<N3P8D35A@*O!
z4?iJ+#(FVplC74dzw7;XQ*_v4j34!9i3a_6i~mh*{39Cs=S8}u;pwz43jduWSJzac
z+>b6zCL?j#8p!a+H~`OxEX$ZXMpPWEU465x9ck5Ob7s3M5!mBbU!4}&5<J+m?Tf4L
zM>`jb6-uc<Di|99jys~}O!im(*MsZ@MduTECU8(z&dVP2VNMuP9+E_CXg&bWPAJn5
z{%#aFqHNd(zksA_4rdU=zTluXV!&kB-2nkTvIEhdRs+^wytm-P&oK0~1c<_8@wh1T
zg}eZcS8@D+CcC!|yGj`xz{ScQnr?)o2>Ywhul(!mYr|)K(TKr(i_$ce-|ZV*yf;P6
zeFgAEZOWr@u!IsE_o4byLnjg#VJB0^&YU*(jRN33eFF+irk13~%-kH$4jv7PYlV|{
zM5(>makNJ;cD}OfxzY)7Yd#AQc7SIK0s|Ypdj$Q=L5WI>=bd&qIqIQZ596eh#3WE`
zW5l!f<3wJ$nMC&m4@Yrx{dgWtj15wQh;?~W+APZPYyb+Jgu)1*eR?RpWQLICuN@xR
zxG?a#8zn@|Tm|_**tE8~paTT9{yQoJxb5j~6c8D9m%dUCpb_AKJ?YUj<%*fVXpeG+
zWA9NUFN4%Y!SOVPfXM@+&fHu<>3=K(ToF7wwc3KWZ%QD2E@W;7Y()$hftfQ2W9I}M
zPd-P3EK#D8%ryvWg_Iv3%*bb{Czz?GFs)~@WAXTg1)}j#PFV44J7IGO^L(TkK1swF
z6iw0}_u(6Z@r{64fe}Ce;7F#CDBZ+@;%A=;h<$~H#V312g@$%XCx!4;fxq3y-%uQ@
z2n}I@K!>QW9~Z}%Mqn!!BBgA+3=uMOT&LSHQ*2Kfon~)H__3hewNmASuP2y>esT!b
zP0)=}yz;*Us)3*@GWFuM^>%Bh{9(uIjfB;M&JM@!lu!%v`iTCBg1rXOgvX%>IFdvd
z2$G>)O@O4g9@a6h0rzWjRw@TIlDITtB^xFwlm($vMs(E3={-$XUT?g}I~}_4Xq3bO
zLcY_PtM29|w(G*<_?IIy+Z&&zs>Na`BZT*??U9R6#1TmLF)QTx@MB|H@!b+gU&h^w
z>$9M(8qn+4^23D^6OT?`GAIyTmS|MCc{{J);5^0bXo7tuUS}A;wGyK#6HoU#n(xNj
zGf0CtC1a%mHbN7!K5(0KYlKT_sWMds&$#QSwMmwZS_EN5>_U58Ya5g?(jT<=rMr;N
zD)hPOm!-HfRU!Oft5U3_Hux)6%w&@atP9@~ATbd!40J3EKxp=+LSuto7L~Se9Uct6
zgPRXZAG$xzx9+f*7Oa!fsWAs4^NYk6NsqNKG#?(vCPgd_vQ9!~)<!3*>&C-8Ie;Mn
z<l#lhP!BMR)M1t9;-V0O&j43ssjGy1iUDo8;Iv)gn^U6C!nB#)D!vV+RAk>;GX3&<
z>@Mwk(iF=-xFsb`T*c&tI%f?;V@#_9>6Sm3VdI*+@NT*>%~3vY0b_QaKGs(0ErTUU
zCv~bbVN`hbB$;cCs%sm9eEW1T#HRXkxQx3T^W*f_yvJ9P!#+gLvI3lKNKjLKuEu=Z
z6f2{z&o{q)_;vn#w!iXdzw`OXxpYrtdw`jwm`#7@VbwVAv@Az|3)Rq^9^5gM97x5A
z5y2G$b9)Njp6+<N*G8XoIP4}e;5t})L$Ms@0it(coAQzgX8i`ll2KVveXp05$XIuC
zL&Yx6!zuj(jyngI<G5wcW4zWXv?NZ>e(Z+O5#Yrvh_rqtBCnd}G}m4k80pJ|1)2=%
zS(oOnC0?|z&&Z-wQm!ICt}>Yn;S5sS7w2GxrcQ}UU~|*Ij5;yBSfPEXT@C|hf+l@d
zS<MlJdU@r4M`c~$hnHuQPWlPTwQ_~y7Nh9&DN#LXM?c%j+4y*p?S8Ajbw;a^iwm8A
z9EC<wCTiLU>5GM#^5som{~}k+0Cer75wJ%&TY;(I#Brltwqe+}$V;O-4#+?eKU6l+
zFT>Lo7m21@;?#mi0kpEyX-ed*I<fKlV)!NEI5hmw&grHdb2GW?-m{N6^;a7eT`F|2
zzq|YlF42Yk=lksZqU*c+yKy}1+4-`@$t%6-)VBNbQ=bD0QF$(B6OH=BPX-*uJGqqH
z4a1b=+d8a`yzFN^MimLYPZLV4iTK9`<6)g$XQD^?6xkw>NqLq4?L=Jj$89R<5LDu8
zw=vsyartBSaAtDhy}ZEz-!U!4%_j;=g(xL$HcyVN3tap1+?YX4t2<@SuX%xlwswk3
z>hTc5&(;>o9?1SI)we2XUG=}bVmvJpWwLrjKjE!+rAbj~2M8ySeNkH-%cwS43m+?;
z_<gyNFLO$iIB?J`3?Qp@AmJ{ap36BT2M?L4%r5ps;q>y@$Bhu4t!FG~291e)n-tuw
z7n=S!itb8oWC%T-6oJ@clo;#rbUA1vEoLp2Vbi8j|LemnuUI^M|B3fS_;L9B^AytL
z{~_LYDp4nPp8p5h{6Q6ymL^yWf+Vx-BEu?92q6GiF;`J64fl9Tzc88EuiEgvg|V)~
zi)tG!LuV>G^U-<Z#e5As>+erXDO8b}=j-zH{FI^ljq}5p*Mn4kctbB1{TA-C*K(|m
zj^0(3Omp`S#?WNOnj{3fuVjEwMr9&b2?2fmMRXwt|87`eVckUJhu0qDqUk>mT_iHI
zmq|@6LAcx18{m%&-bG7XB#Cbw{(#fj#|$4&ISVDL<8;0rIbN_i`1@M_U{0U?4;-GA
zYU=PDW4*Px0;5F<TU`Ch(PXeU-pEhD@4PL{^0;`0igx6_DTl(e)!F(1zMF*PD5KD;
zJ_ixb5#CD?Durl)A_kNa3bh5oQ5BGg5&S_h`#g{LER-+kGvMMFBHP_$uj4rJCL)G1
zMNtJ3Sx+rw=uYvNKJyoMCP`q&%`Ae~j!Q>j<%WxiMbTzmI5*3z!`9X>S{^f!#<Oc`
zh4AO62IznY?5Q_kGJKtTk(-C<a;Ov^qkX#Y&5V^PPbqmB=vIF|uF$blrTv?;de+O|
zc`KbAZ*$i;NtTj2X<j(77Ya9x_7=$8+F*SR_Bed58L4iO_5~DHU@nq@+L$1F6(gUv
z;c(vr40tCOIWkXhaNXfTQs7%RU;CigwO_#62b#z#r!u`z7Zr}_-*o?djC(=u)@1yd
zZO8mbc>b-boJ>sqg;h9}xMiEc4<CH<LLnNXyoL(Eg=Vp&9A7GfNd>GGqCB+}(YtCb
zgxc6KSeM`JX~tl2z}!v8Sf9pmvhfCBH>wYwSiVhJM+==9C5jg-CwibH4jJSg%@`x3
zUV2Vu3i>&WoIFqaY62l;HCrnjeU9Li%AbM~0bMkVjrpel@BvckT5-0ePnYZxM%!<r
z+&|PAs-AJyyb)Uo9EM7Pa91g$34nm00{2|8kWpwAT&eLEc0r(CS<uBy5wV20rUg|5
zPIaxne~mb7f0v}VLKJ}pZJpd<1zjOtPr$OWhQ4??hsUmAtrg`d*X2yr^6E-jcO^zE
zEi~Z}*GNpz)FhF}>+DeXB}c{a2=#<m{irqIEx<BN2zSaI8(0Z-iU?PmE<r1s`imU)
z%UCo%!#t&yh}r^I>=q6K?;_<@R<w)_V<S_$2ckF~)eM%Nd0zBIk%s_=@=r6FlZSmI
zuF-m-s4+34J`FNj$j(7Co|oS3n6(22^&9aUz`!IoM<aZhMW141Qz08Ml_H3cA{R8Q
z&W+|zD;_tT5i66yw3%hSPB8<ft7wL13N}R#q=h?M8+0Lq-p|u}*vFsdl0<BK?THY&
zI*@!%Z{Y2)yrRu6!(nu<5!-C$h@Uy*Ue%%W`mXHZh4-!TL5sNu{L9V@Q~Q<8p#O^<
z6VLc^YQcXlXJ^+Joy(KOB)Vf@gOjh3<hCs5^{cB)fg<qW!BYmSK{mKp0dcqy>D^xb
z*l@@P=)bGck?F=)@TVG&{~xN+$iT_@pKldYiaT;Y1aO}hJqOD9MO6X~GJYdz@jT%I
z!bX*iygTEfm<=~zvU<8C^Y!m;C-9;reovik$G<+CTfYTz1n@#cG_abc;XzAEMnZFV
zVP*B>CDM`<XHFQTW$u(9gKGOL>6b(4XAF+PQBCJ1AIOz*f-+SrgBDeb<<FEcdvX4J
zzCpBCuUhzLWy9I4Dc{B|=0XLHOO^!wsjpRR1AZem4$ox{+s~U+$qx>S?yp3!Gtoqd
zHz!X?gJ&mj)8L|bcNi6=#)T=k<Mt?9%V#W1p^Oxzp;899gCRb3`(YdR0QZ?T+(D)H
zt#8sza=MX%T(SFvz;W~e4Z|j(x+hD%S~92v=VbMya7q?1bB+NSoFh6lJvPJ?RGQ0C
zrAe1nxlfKD@j{<Kx&G3sTIP(4H7R&~k*agPTm4#56C!kcckr=`6EU1)_%j5YjQ=a3
z0zrhJC)I_mJ?nnY+yiCm)&36X9WaMmv$`2MrP;EI!X};s^gZYqz4N6@LLpYyh@$B<
ziy_2?VvCnNHiGtAt>BoozovkzwZ-g`jrpsQBp>@1LQ*j@l63o`cFmKO{U@V#(3Vcb
z34T<xZLxzhQZ(8pVK#Kl21JMLqfu;T=kW4|ljrZ&yVHc0$(ikDJzTK^yU2=SSI0-%
zH<O-E*39VsNcQ#nXUALpPo9|XGC>NBaPB&f-Yv)9=NDV;NEcslWer(zIw#Yg1FRDR
zPH00uOtAe<Wh-ec=n+!O&OEZi;+0V$0636YA&X_2b^k*`041FW7yhZvlAr4Q=g<Tb
zJ;Q%#OARI1{U=Lk`2S$H0VER{Y|M2^B>5LmSU`X)HT5*!4&ZCbaMn`i&DVeLa1<t$
zXFWT*BfVX>?PT55?flM#LsD7Rv~~>Y8yhP*fV%+`Qa||*c)LOc{0F>!4{V@pP~CW^
zuZ&#V2m+e2Y5&!$6#JjOGDvDbsnmF!Wf!1$wJ6srFiUmy%>7qOdB8_0Xc;`^01cRv
z0X`B4*x$5UL;-Q}MQ@ETaZ>DNzz5K6Lrrl+33&!l;uvw=WmFNc3Typ6XT(X>KBdW0
zNhBH+(55gd<cM<?Ve<>e!FjK{uPfIJiuOQ;;F8DT9hA2#mrm>(sDzIgCt_noWs1-m
zP^G-i&r6O)1jM!!g*~!%+B*2U)ZgS;bLos}bmrwMqoz)*-S#p1aF!qMpLy2yx9MUO
zqM@KK?eas*oDcPGInhu}Q$b@k>kR05;^IN@W<kiK*KS)dwy4&OI@+L8tQy~bJ^`_`
zSE`uzl9+Yz#;yrsnD2$IIBp-F4gB1#GF-HY+hqs(I*uJMj0O28&lLvIbgL@%P`{5C
z-(Xx*bo>s*_zelhy1@%*qnE5aS&$kY<~$a?Y3-|e9g0^X>04n<typ1C5-Xlfx7eM^
zf~B@L14(Hoi%%wxc{}LQS$p<IdbaN@lrBvhGh>Dgdi(XCZM@HLuM^XL#Kbw!>&<(k
zghXJI)o1wK98p^8H@==HmsRyl8^brx+1NR2UESD&lInd&pbw%#9VaYZzo6!@sb~!N
zT@#12iwT|n{`&8|^X+pJbO-#`FHP28zexX0V)G-#wYIh}_~-reO4CzmUlR4FD>KKX
ztPzBzu-TSE#MuIW2g?$Myt|yW-nD=tNYoY*B*V#h9kt^v$9E44&s?h1k#v8`>pgwb
z*)I3ntVUB%Ww9O&F2;eW;8frD+x|tr$0tmbDWDp45EHhe^k&r;AuGRF%&hrfS$=_e
z&JV_Z&aZW_jVKY5-mtShM3y>LI?hZcEYLhCnxb7kn58>0=q3qMP|q4}stL?^4cVR6
z!0U9<er}N-f^f&VK6kV>&UOZ^I8TF9-~}|x;W#1MINu7jenc6_5M~q&E(+ySKPgkA
zWx?_##HMGei3hAz20E2<c(ot|<^ZQqfz?*@te<Clqob#%W-T}HBAsQUZ4D{#xsbC7
zBP)ZyTa7XqMvAQqLVzs6OU~!KnWbuq7qHJ+u=unb4n0I?v!lQ2*ra3Qidm|w0@qgW
zSxoQNeD)HiV@d%`v)VIDp-fu3R-!CQ@p5b{pkeCNAyXJ`VYXd@*^<^RmUb`C%E>UG
z>tO2!IudbYzSS9;&$8k7+;tld0WGUbVpFPixq?urZiJUB{c!GU3b*q5_vwLZ$#)q~
zZ`B-LY59U3rQ4Jv0VMTGYaM>n<DcVPO8E+s#`9#3$yTK{bHg*q0_F8U`BeP4i)eoe
zOvRCfvJ?1Y{`Xq^Nj_RT;hi?&9idmJ52$t*tWF2(^>>@EU2wS}wYhT*YM*W}{--)x
z^Ia(->!O&S$K2Z(F`U&d2^XP7LfANv1D78IRUmbWZ<@1Ux#VKoY`RR*A^IC$I{AGJ
z;@eX0E9HFd+EZkYlC3PvCZM-2X4uFJQUEs%kQq)`nz>x17cK&LVsH21xKu-ePzeJA
zZlVmEr;K?+XcJqP(%cM8<x@0jEBN>n^8F5oWSt%~&d*`R*Zb>TrI7ctZjE1P7g<Zh
z*PZsm0WJ}^$sfw(0U;|~*hGOFFN1!ob=%N@3;9$#WuI*jFk0p?&ewCWh+b;RQgDl2
z7X<b-=gyC0N8LHpf3SaKMore^MPLQB^?Qb|&CII<=3`0#s)e>gr&giIec1-;Lxpi<
z`CFK))P({362i5!0S0`d&BE{<w?o)?bl!Nkbr{rT$<0sIPABXUoetdR#6Y0I9U~>(
zx}K+<cm+5#i2FVcnVnz*4PDZ>4Ooz12y#)mTbPj`QT?2ex&ou{m?&SY3Z+jsb50lh
zqpv2EuWE~E)t9s5gFz^(2M^iq?H8Zk@+Mh%+y($&0b*UcsI2=2xy7<7Gl_ylZ4PW6
zrD1aFI2wq8DlwY1a_|yP7O0>S6=yl6!{;mLGQpPmWLRL}_%G^SQ6`I1WD?L?Rf(Z6
z^fYFK(ij3h+f(TzOciJ1Kcp*s-HYKSwqU<5eGVrw<UJvuVt*k(_FgSxba!&vHE0qo
zt#Ml2$&%0mBvJSp6-Oc4=u7f<;w@Wg)5a2;*90Z!Bxv9E6VO`AJz~HE-ILqt1YW^G
z^Tu#wL&2ly!xR(8)gyDf)1WY-^o%Q~P*a?uKUH^ZiCQ0`7jCg4_VQw5k7(h`w1Bhl
zK%MwQf}|e*VUCevw`svm;29rJzskx!(c$3XS?ZvcbrRlpgrfUx4~gOF5Zn+P1L_{6
z7z&l#foyV?pNN_v^rxS&&b*;`;tv|V)iPr%PJ?X<%O3QExa_PC^Q3^oKD*alD?C^B
zoag45i>Q~<=oMoa4VBv}t`3kx!-7o?RkS&+N9|I=7<urxXzwHXmfqXg=qC|s;Vn0T
z^@L{n!1m>k`@_DWMHXU;k0cQk_uL4@t$`NmYwgQY-^K#-Yb_0w*Xqal?i2LwyX5VA
z2B2?J@LzM5&w_wEJ}G~X6u_q?$i<x)z(t7zxOK)ou&x?ZUbC%=WivfSJ_x4A2oq^#
z^76H7W$PIITFcG49n>AZTejxRG9{%B|Mz3PZVy2IQkh(<Hfr{iiCYz0sO|xFJdV*r
z9Rx}ODq;Ng=NRIoQT>>GvD(#?323a_UHCk{Lh0+F#UOx%BtRN^q-@27Bx@a+`>|t+
zSiM9oN)Z_a$Lu?{$5nL`GrmJedS^f>0#~{03o_^wfwsZh8snFwzKY8a#|pJo22iP}
z8=s~G-mfnkGYePj8)~yH{?79|Ixk(?WGLvm?-6AJhGZhi%5a8gZ8#GV2wn4c8)ju=
za$~A)+UfJqOE^l)zi=HiEPL~jwhzC(w!6)Be~YzpTrMR~kz7{DKiz-3UQn0#$q>_H
z$fx(SMtPU2p}hrJlMA3B?h4u1$OX7T0l)feWiG_Kc|wx4g_V}V`i4?=EGOC3GO3Ep
zM`nmWOZ#{Jj@IGFtnMr`VspOqxxU)OG|Q^1=GM{iG+GCLZsWhq!1vj0``gOwiaic+
zyjJlc54ll!!U?p!EO2$7*wI^F7PwZDqbC{@sW}%2=5C3^)h3<AdF+?Y`Q=VficvzV
zv8MJ(Az2L*E!|^wj2YP*#4#{huAHb-+AmL!GDwr1V_Cr>N$l?sN|RABs$@`5H?I)l
zGB7gE4JnJiA`h0J8A$gvhmtb4yHn32($cgpLdYH93W4}N{sa<t2z9+Lx5f%_y<5%5
zljz7oPZTy;lCVu~jA3{OtggR>o+0U2Un51>tgZ&_YS-@_>?-Hq?hozkIPTM6*ONJn
zK3a%qtN#|{BLMo+{F=}?sdbURKZB^}_!mHi+AjN<j#(6&szG?McxH6P1*0Cwkcp9%
zAxec9F=u>Ms{Dy+=sTw5G4*co{LQB#oB9*_t?J|6{o*j=#cWUPoKAa)gjyh6ieX0|
z(rEByWy|&EWsb~i83QKybeO<Qzc8@i?<Aq66+i-?_`ZL?&lpbcR}>HKjFo?E$sAd9
zi%Hw*z+@fHRfVQP3LAobhUP1SrkV}I<#ycMJtpZ1v&!qz8fl{PW#0|<HKm7@WY#07
zEH@LOH$gV4`#p3L5ps6F(WOkoJ_TAu;a@7&I0h+eGoZG$(~>itLCBuZ#-0@pI9p8R
zXa4kvXA$`$+=o5=0|u}j+<OKS2b#P8nP<7zR*`1@AkL0?|E&>XXkn*kXZ6oVr>*}B
zLGT4hm@Z5poQOT-timZdA(lJ{H!?Fknb##P0FV$jltJX?%`dI`{<xy$NBkwhQS*$O
zX+a6t5$Syc81!3I%X$!Z!Z|BA(xmU%=XK9+<D<iKr*5K1|D;TumR5FcLi#V|X8=y>
zkfP~Z5RMpvXD~R2Cy8Tx7g`@MI6>9IESdx@pem{VsJcO1_#!ga?ye1tn<u-$C7MQk
zT8#!Fl<G0y8S(_Z*#kYIwAZbOW-Yxzchmy;VL06?C3T9hcH*3{S2q0_3br4IUx^hl
z2pzb@psXCO+zf5;k~-}KbSa2|u5q3kY98=s)E(emib(u17#CN?k|m))2zM+gqt+#P
zAr8&7vBn^R-;K4+RaA3JnoqVVBd`952H~nhLP>4}7`E=;>l&VTnIN}TmB4O|>a~Kz
zhc&Mh2>6-E!Pu!o2rZNPU)K|ZWY4M-vtV;Yoq~l32OI}$`B5T@Q5vLfy@0y*tf5aD
z>Wj{9h_%d#-J^5t1`GmFWa8OmAW_H(N5PZ8WhBz`_41HViRnS&pVnD~x7wz6L0NoY
zkByV5^!cwZ1J2>1slp(`exxro)TD!+@l}28V}L2s{-Z%W9^Pa99GbZHD`le!rfG8S
z*)_(fi?7R+_0)b7nPbG74Inez-SCZqowkifX4tPlsb3<8A+mFF@Q*=9QW~Q83a@>G
zSWNbyo^7>#Xxw^04_3%YU;;(x+H`aa%BCRGgWMW{4*^zrmE0gJPaJ?pDZKsr8<{lj
zqNLzKYP9C)7=R?hQDSq24xvzMX;DJ0_-3VMM<`SYAgXt%>oMJvjL=(>$sC9^W%0p4
zxPixxGW{p|A(~nE@nyif$`)I@;7B4>@L?KpfZqA{zj~vA639<(l7GKR?dctvNE;O6
zVWa&bK5?m(U1e$$wCh8#mxld5dYvYEGzL#(uetX#z?OF=ZR_DSSKq{{XE9A<q{H7g
zs!O8EO}dXl17$;I*rb!pjU`|%yL&<LA>==c7xo0ms0%XzRWw32Sj~&4TJG}>QY7A8
zGB)>)kjKG~=`AFQqsy$Z;c*89lwEWtR6t&`4ACM`5%H#I{3W}qd=@NFk7Qh?Evk<U
z_gSiXh7RfvOeby%o|F!bAcm`^p`OdrSv$&pir=pv3{A<dUN{-g1}S-K;Jl!oB4Ko<
z>GE}XgpUNwdc+`t%8k+bL<j--r<Nj3tt)rnC%Yrq(((`qSv6i9^){okCX>oFeGMPD
zB~%!kK_vt2tr|jQ`*~9ft)H3m9`Lc3ML~U6ouS~ePzD@{g}|vzw+sz&IV}}qh`AoR
zjHJdL+-Q;t{#8FA$&<hw+}fOr10!3tY_nVyF=ZMtF=P<{B!)_1sc<`e^qEzYFFqT3
zIf>YSb;7M49;OYO$`~}_*G!(C#h`b3EX*FhDR~Y`ns@&pPi%khs9^clFR}tk?b}NG
z#koNy3j!1$aR)kb2Fd8qNx4-B)GK}z+`qd0f@<N~B+%$kiC2PN^yB*eAQWm>!Ns6G
zsDub<Fo4u0P8cGNCg;r_q63mWen_PHfbbVB<7NDE0EKbbU*yvFfCD1aTEhJ6#C~3K
zVT=fg)h3R(P%;!HZdAY^t&%-D=u`+I8<Mt3X^ITT#Uv$w(Xhds7X-OqMe#9WyWmy9
zFhEAEzmf|Qd-G+E35qFFDIcQ3fmlQY1@0LHg&vC1xvD>6$HTW+@a8c6vhiBy0uzj2
z4$v*3${gXF-4}d2GkNCXeddJ=8F7gzmUI!Yeh~p4VRl28zI(s^<sv`it)y^17c$?i
zD=u^^>JOW+*uCQCA3^6=D%N?>_e)kxty3OFb}Lr4Nb0rJS^DE=T8H<X%K52}dTt#?
z9oVwx$j~FmQGr`v5RS=TN*))D#0+f-z8J=H&NhoAOhSE+PZuCBn*tY25N{IB1dKpc
z-;db=Gp23~5$jrd6)tF3-)WP3s_QORG>WSXw{qQ&c%zgNXbCt_5sJP$xeEeeE8vEb
z7Yh<NR)LXR4&W+YaD?6n_4Bi-Rq$3UBxS|n0U<D$<YoP}TMl5`K>j8;`cJ}0OK9MS
z1N}<VJf0marg15v*RCB+8U(87_4ITz!G>7TD|J+_)xfCb23~UvWTsT69isww$X68q
zHR<YcX{g3De=Z8^8jS$}h(sB9WlUSb0zYZN9pJbCg68R*8QiRFJ|Er=_O}ycZMWK%
z4qsnq-&N3DUyKgDnaoVSc6z0?-h7vpzRrp3XnK-P_P_4W`w;%jk)40Cvw8Wre4U1E
zjkG>$7zfL<4P>(>;4W7fWv37^?{=1{<Df>_%>yCa@ND(`&`sOs$)L{ldX${=ZzdtF
zaZP74u-lCsdF`SBHlejnX!VT(q-hiPXQwW2FQZliiJB`sRN$ElBYv&r3RVsyQz*_P
zt{qI|tdYZF-W&7O)^-5Lsr_lUV59e0K8D=o&%4}(u`i=p)=~<Ra#IkDSsXP95bC8B
zAsGEaz52SgzeuP2g^u=Wy{Rd}KHZt7%gf~ph=X-Fj-S)#`X-JAU`FTb&XL8#>;7i_
zZaHbIrgHe4_N%;8p(l_1{OI!O?5tI2C>gifw3Q4;ZF2{@8y>WEn&_!L4*h&54dNV)
z>T*PDCD$+Ikf=itmL346B?*!dfKzsLSGE8beAtT3b2)qrifU5y%=!=w4_4*>W9%KH
zEbG!O;ZR0IhV96(ZQHhO+cq<7+qP}nwrys7@z(9HZ&!8Iefx}Y&N#o;*kiB#tU33C
zIqiaVa<=Z1=j(s}o?o@;$$S7iDYxh5t=W}rpUr><e+pG(U~K!TZ`z#O{0X;-UUG%a
zEN~z^g=R?;4V6t)ba{vrp)Jn=$c@~cU>G~z5957v*@nV}Itb+v;)fcwS|waUOe-`W
zm}g|}UM<irWqq99_*?%bdKR4&h>Vh4+jTG~H%nYqG5n}|E&zwGSqC^Gm07ocp+-WN
zTiFx4DRCe%%35Af!K$-tjh|o62+CV9(fI~@#5bXxmd$unuX*kP7n5iP9Fu(@>y)A4
z#B4SuEvrA9QG32=Bkl7R43pH>p&+je%QQ5;y<b~eS%MRhw}{{g4xrc0LUsh(wQY1p
z|EI$Ge4AMHQxSWqs-NtkEdvxd0EhxW*+I?aQDc=jaU-0oe3RZ(K!NShkY8qfb`_Z6
zGDkr8lZHdAi$KlUjIe;iHkW=bS9tIRR^*Da#fm1sf!ckJ#E41~d9BDW6BP8C`hqw+
zdtFJpxK*XMBIdGj4%0w`*W#3_&D2P)W7yz6TuG{HmE`(03<QVOIO~VP`;Mx5q?wNe
zJkt;SA2rc=E-PX`HGyE^&6C`*15ABg9OX~<ELOB{(!xklaY*K^!Q7+uoLC!UF#;_p
zEHB|QlXu+K*ISnFg${%%*%*m_{%!z!y*r!9OA{UU(ZeZ21z4+rk5DybV}KB|x^E(K
zC*Ui&$1*a0Xt!PmfC06lXKaxh-Q|N_Zh{GOc%%X-WA+j_Weh`X6yGUQ(iDi}CE9Z%
ztLpCSZvdKBW_QT3#*exgxp-Fg-JbKnwpl?2EJ0Et#$zx#U*+8U-BAU1WZ(j~IDd>1
zNjp>GJd)SvozGYqN@R9MwX8!S<Fr@&a`kvqG=1)nQb`r?Vr*@OQb(+0@<VRg>}uBs
z`!mE&bZ0dLL@%!`hW6B&-}VhL9S-*pyxc9|+liQu5gN@})N?b*u*RZ^J$QYywclE4
z7);xT0#UU8(b}1<x$1$LpiQVwf$k>35xIuEn9SmtglRLZMQC8e!pm-9--9|)V}W4a
zWf-GwQ`k(Tq?r#}sI)F>opE)rEdPtH7_r!>Za+o(<hDdJZ`&X{a5ycc<}}7`)Zyr7
zjjWTr<-l_=&}(UAf<pEsVkY!vR^v&dRz5D=rECfCe3K9bNWxqcQlD0ObI255lE)jP
zA&>fipD-Pk<&a(YLku>WT~xGn<+bCoiKK25OMBsB#rsdEnWa$BQ<km%e9XctDoJ*`
zkI}@iKb3Vq#$IYxlfCVv(0jfr`{SQtYmR^YBr(#=1TPj^YJVT*Yjm=a-cxid6BaR3
zmx9w%0((jmXs>BU@S0*~(Ft;`)dkR31ig2w>bm3U@^oVNVCqcK{^j_diX8sQx3(qy
zfd3@5J}mrb>vgrtSHmFYgw1MJZ}Ax8r-X+$AEz{%1zlsUzt)zP#luzNg^X|s+2)bo
zz2n25Y>1A9vvK6e>q*v4Q*0t5J>|`Qa?reLV>)HE!9si&*#bS?WaquHfXFNFcm^4F
zqOhDyzJGdp{@WxnKR|S5cZZ}oP~^>dpr}7Nic5=w$Xe6^^F6z&srbsSvz9w<>+;IF
zEgf@Hvx%WPH|Okh1Fi+|WXL!k!g>Uqy{Xhvp2lWvhpY^zI#Y1*lb|gCZC42@5kL#<
z9f2o>i!EDA^Ouga2~89Z4+mR1^B-G>)3<^{n=>kp&4+`F(^tRxBY^RN8s#G?et!NC
z_IbG6erMh3s78%Rktf6z(TRbOvp~0r8y@pI_VqF?jfo>yFR1qW^py8eJs34RX2vQG
zgH}hP9+Lu+h=4m*+o;jo)~oUA_RI-T{i*R1+sK<!Z<kIz)b?GCn&$7XHT#-Xz&eE`
z=W|n2g4cU@)RbPlF(n%m@+{be^r7VpjFTFvVb|U%@1rKe%zevSQaD%RQqWoD7>Lb0
zlXw0@I$CjxBP(2Q6v<q`GUbFx3*DaBXDWO)7n6nc7ez~0-}k^igCU{%`}r~HkG*i0
zZBZ|WRJ}W49K)3UTS8cG-gWQp##sJspLWP}ppRtjtJ!fb&s$gy-)B>A8NloL@h;#B
zOv_{4!B%BkhiD5QyQX(dr|}{)i+$bTHF@B%652qoi|--2A8jyJ*hObuv6z3H4$c=b
z06Z~CD?kIC2VkHZ>EX+?dbWIOy_m~TZJ(kmeb*R990|3c5C)Yfj;RT?)sa%CJQi8N
zO43Mpx>J6Ya5QZnMR>GEjPVP)VrEl`XYCppczux`sk}H5s?}#$-#M@&ps5tdXZhWZ
zhnfU-(qF1)BN_5<hLSS8<pcI@lm@vwc|I8mhpYfscGwkW<jzmAAt<%){4qE~={4RK
zY}I2Z^V_w~u`s!)n><HCK{iZ#b00;!4gt8!`Gx+JK9(z@C2e#8O=;8QQw=_8SWkBL
z2GnhF=?4!KhO<Dowf)7|n43wHR?e55MtvcvHgKwOoHX4|?52wR{>3s~(q9OjPW*i_
z?;mcf!o$YczL-&39{Tkp&YSg<Uz&ve!<z*^4xLMWw{WbQBEyxkpJFp*t&vy`Vp8pR
zE}cQFL2TJaYNSW&^1K;XZM&>Vd7m^PSh=RRrc1}E<9Kku%vDCcSsYX^L61yJ>n+$S
zqmpvd^L!qThU(tDH(0Dz&A+ZGl$>Izj=Hn<KvKi5{_!FyQJP<c?s(3G?AV6==!EpB
z#&ljmKayHId9Zkd%8>Rl6%46_3%@z>$=UFEoOyv5)DjU!9L$z~>c&-WGss0|RZ=aH
zxL^DsTGR9xDd>gBridD??3u}68hVZ>Kv96J4O2b~HuJ|@r~A{+aA;Hn;L_(?blb)2
zJpl}S?TyjtS-~UZD^K?=G(7U;(tR^G^s3HkX(luF55rK(pSw}S292>roiQ|)_B{H0
zp0k})%6Q*Rb04|JZg0y5agj{Mu5w46Pdjq+?PlfUoTdP1)TTt;KXv4vHve5V63><u
z-|-36ZTS{9phy0n+U@o1t(+MRY@N&usckKl6n_E$Z^Rd>YD<);I=Mmu0D_!+H|+o8
zXHwPUFM0Q`^baJ<3nwXx@i@!k%y}q^Iv~uQCcb!RsyO8sBJ#Z=6*BT@r%jXX*f`SF
zIE{w&aKKpot#@yi0%?p*y!pDFc_xWs#!h^;L%LtF`;^^>7xV}NwHJdR)?f#ec?Uw$
z^Yin_Y`d#A3#bQTWO)&&#BK<~2Zf5HBNFPe-a^2L(LHnFuZ&ctykm?x8KF_JE&8z@
zao-~1SC{F59aG|QuFZs#AY_mb#)1P72z4n4?)&qaa7hR}5_c(Xr81*Th_Q8A8l_e*
z+TwMMH@qvrw;w2!y*6YemX+Sz-ftfdW&#v-aRIfy$o}<CWU8QN8LmJJ_;`2vY?<0R
zI_c<yvPiY5x8r7o43!Ra1hE5X`*vs^Dm{221)-{>Ft@A}LfQ~>@;58^B0jN(?$aGU
z-gKQUuJt~Dls|oFvwp?d^}Nika1T6>ybwQuaIIl>gROx@lOPJw-n&M-n(-3rQSm?F
zZDsjal&TQUN0X9w`tqRz)Y<$9W6()kpYaVf+B+DeF&Wy*KG3)Mcv>9P-d8ixB!Sp_
zmYMbj+0B2qjX!-;<DJYOj@DY{8X!n|vqSe4vE6guh@LQoHBgwr^i2;U%)yf|vz>Ml
zQY5w*c6uJ&Y(J2e@UgeAbB8drL}@O)v6fA(i<t$85QXN<qkD)V+ssQ15UB$eSXcx0
zW7NfCebjeO&HKSjvu}Ahcry62VeoY9Q80;i`w__Op1BwpYCpY3(rcBxWm>aL5_c|n
zdWZebs8cr&d(V-0oh+8Edq9gphQm3uFt328aZlPh8XuUlB(9Pt&*-7Mp<aVDnY=Kq
zcpb$6RSeJ>bhuk4;|WPG2J$QRK3BHPiy!<wtZG{V^Mq1tJ(BrHyW@D_I<?qp2IfYY
z54EBoc^9xiP^dSqi^eMxJq~AIVi1w~aLEk;MoV+VkX2xQ*u)vT%B*_KJYRhL;;2|!
z5Brn@w~enI5-sEp$#MDLV`%;<tdXT)VB(nSScDVjy|~}Kt>^?ALL%F_8(^TqM@~b)
zhMThMKl^8jbn5_>n8MX+ctAaRGN2qKtJ6J0sS~kVXT_PEa-z+r5D3!j2J8hs7fV)$
zPI51*DwBjI!I6-q21-bm<?sp%`>=F_6I;gwErj%8;Zn-iGBFLw23mjwY9FA{stX-f
zgCOW>OR3i8@C6zh%!8yjRM|Di2aIw}A{iR@b<1JWuGOpa79o^)EBibder4u1!6vTk
zlrfj*Z9+MjR#P`QFLuwfN)4`8nXwBrPuz|#lbFzK1QN>@wdpaNW;&P3RI_ctp<Q7V
zD_k==0L!>)nEbG;gDo>xyHYmRWvDuI%b`$&N8zoZ@OLC+IyMh6?ywtoa$0y&dQ^N_
z9=cruRqArm-C-|GuCp?HndCD;x9b&Qc;~5JBHlPMtS7{Np3dr+!{ZDz@5zViWw<=s
z9q2bsNsjrUSo#%Xml#9QYCTo&<UspylBxde3NV)l@{ws&(hcfQ9@0hTFz3>a9jj~W
zXgz>W_DM?Uw3@~DxR2Izv?0>kNvqhZyZ`#6`D=Q3dRjVaI_=DqtexbsJgy9;#?Mia
zksTiS(ikFIGaAK9lH=ggkiFvYSQ=+Ua~lHUv!My<oEU1?cvNQzst&Mz!Ba7@c(fz7
zx-df6f!7-hbW_qCw~fsvUrsQK3q(ZXdVlt=3kxn0H_>-Osf?SD^z!X!!i>WiGEu#O
zkIvDV^fIt0K5?ihpa+0;YEKu8GmQZ}=ID<=Xx}eEUA8x@7-Nn_Zcv4EEz}YijC9dM
zG4x>pUMDoK4E70{kkR=}MJo(9V;!-6V{h8zQ_wpb*8sWvC6!9Xl19V=Yh#RjYM3`<
zeT$`bV>YMHjtz__jJuwO<(ec89I8cC%ifBrVyUbbZEe`wCxHAV)?{F~4#9_Mb1K|c
zC2DA_vr_HJP3g|G(p#S<CiRPm=G3<f;{#c?vQ{`PF+^D)c`fMP;Gi}Pe_%)_ra*Mc
zg+;huz5H6xyBy#6hM7oxmR>|gvnVxRkpEU>HmBk>-_WY5%p#>RV&v4HDVdBh?e0%@
zSIumCW^F+twVB)*Wkd$GWW=wqTQ#m<Zo`rayxC4B3!A;z0eT&)L$O;)yWY?o_bzxh
zB~tIgo!WK(HL|_>({~<S#092KBV-gorPfk@Gd`>oHY(Q!drj(*PT0rTbfS@F!n!}r
zkz3f*%d#vv(fx7<uyd$jF>A~_iLf&?vXySwc);Jch>O^HS9O5Rq!jn;_affYenn2f
zTZ&WY7wCV3qQo~S+Nb^KHU94OS@`a?{m-2~2F^zI4rVrgqxVy&Fl)WW3+MT)QZWH3
zSh=ZaUg&$b141H{M_iX#lt``?;x(j#?Xt9q9-jB%@f;yW`qOOjZs2liVhZNB&tA_@
z%`x}<l{|V|cju?w%XgPz9K1@>33Ku|LkJe}KRK;_IdqBNMSWj~P%1tFNhT!<byrfu
z#v;mM{&^q_IoTh^GQl<)GtENHz-_>=JL#6XV$8S&e!>dn2INJ#h8aMgsq<?9h%w_v
zlj!i@_Sg(c6kDT?_-ydF$HBNMxE))nWS**q6wH~L!Ey*!=IYE4ix5ST`u9V$VV*w*
zRJDyHD?_@vwX3<pI7}zGN>TnK9k`skCaT#7zDLa);2%r*jnnCsAOya*t}O)Dx2m)@
z>FARZ3D#d&BSf0Gh&jW9y--2T$w<TgI=v6R^$(k?b5}&FaLf=kZGuCiOxCX*XVj1@
zoOL8lGx8x)qqDuj?upJTk^?ekX`$-t3bdn76;gA2f5ndwnF`oHkT(T(6GF<sDtVmc
zPRT@~xJ3=PzZa<GTlX?j#qgFAp^?zskS;O{#;~<fsLhQCU~E8dh{nER{;6@nYOxLm
z{NBWhhWFdvg9&VtSr}Lzs#cLgjgc*VAG+bR%g-MzT&2t+tv+tHZ<D;y?D-GjO59~@
z9I{?Uj-|wQ9o6yf;UG<QQLj^7^HbA}rD6yswuAl`gzL0<sEC4iBjM%gpMczSvl#8k
zy=jjm=Ry+&oLUj9#SAoy<8G@+lH08Os_?=7*eeAK@NF#@SP1H_Xx7h2lvlrZmaM)L
zcZ8r(zvim9xaQ)erS<uDC7bsKf~{Y`J}8#~_mKbn{QgDi%G*2xGrmb(ClUa_um9K!
z^iApv^lblEA?rWzxk1%$_wjEVi0|=91Tqs5BnYedvpD6v&?Y%CfBw1lcSEWt|7JSv
z@%CVQsjv6R3Y{7^vK)@n54@H7>5hwuiwR406DHPxtcaxAls61^nzhU0mt(9eFPLU{
zSdn}{D1+C?c8s>LC!>nA8EBvu0?;2Wnzyb~ox~9MYQVd9vUad>Gy8NWaVfZ3K)*vD
zp;VjG0enV5j4glWF2s;Z+c(f4NecG(`M9_h@CELC8<2yev|*v}zYDt(6C>``!5yeF
zfG`A#NFW5^1Tyx4s&xLDEXkfvkkn5&`dMf|C*2S;f&)B1aBP8Hx~)+;s6U&~0#@i>
z6j5B6P?~5}e0r|td!t<GjL**^$_bM!?!nLe`K%<5J9OTl8aU5{vAk_Oiy<W`fTC!Y
zDn!MiExdN3PPL@Q>7aV?Ce^K7PK0-BASzh0>m2%y18wVcR5ya&$Kh(nSAl4oakbg#
zu=$DT<B^Shd?#f^9i&pzB8Sfjb}51X8|7jxdTl!Hg*SK}2+Kpg^#{~VSS%fk*!uL^
zPgvRsaRw?)UT35;Q(eBDi4^yPU+N9&f-bE4hCo2cx1abr^h5BoCb_6LD|w%I+$y2f
zh6r`4=obBy@qmp<qf62B;0Hhk0OaVy2#B}`5Qro{Id4`o`cv-VK2dNtEdY$c!9UaK
z!@`&1z#me@Bqyp=b5ls;YNu3v$p%dfG|iaPiA5qN4?bQoNe<{8^HihU&WeA}ooR&F
zHG0UsR(y^xPMzOxp3hS9`6wop^G!erlJFe)2J}aS8CnsplC_?mV;=u0dmd!2krz&A
z%q3Q*JFNv}2vgv|`|&GVmX~t))$xAD0Si-F2Jg%DtE!&F27b)ZeW!Kb*Qk|#AU~x=
zeTZ4z7Krm<fN(q(j8Y8>C4(!E2=SLg8IO8jf<=;Nc70D>Z4_>gA`Yca3cexXr&7<6
zBnXs(Z(PWL8~uk=KP$1DqW@4>k0HfPikevwR)gG|rrujXG<fOlby|LR8K8!mM&Y^9
z01GyM`y{6vdx?_tc}0wwfKpkc(&3RFt!gX%JrQ;iX>SuB2a8ZD0~ED8AFiE$VYA5?
z`hy)TDf~WvVVlRb=b!v#Y-fy`8#*A#?-8mB+vDnyLv6s-Gfwi5llJ1`3{bLJVO?RM
zerQaY_l_npO&@iWpg)QpLM0CK-JPX7mCTyj{OtzI%r%{V(k`ZAK^>daX3jY_|Csjs
zqhi9~9^7CEG+Uo5ADlQecT(5aLxvHRhI^W&f0PM_r>4kbd{yVN5z+^HmXz!Kx;Rq-
zYkzy}t>SK0A+fWOAz@xNq06{!z$k8vbtiF{3>Cao-1F$~*c}(zvYi*Ez9lhXN(^9U
zSV}%c66tf?$q_O~MtABYE7+h&at<5Z6YW{+?{8JAZc1yjTEEGUX*61?9h;Ad<d|Q%
zpxUB+Eb}AT(=R7V&n)J^f_YOD@@``Kc2$uW+>M#UXGZaxk;s{nU>J4{qY`N6?u@SD
z*3u)dA>D&I2B-8hu=WMaj)nZT+WB0UL*ynzf-@J|B<;J33)GJS1~2|4pFJwuCgyuo
zpR*+@f)XL`PcTl8iX>JD@<^mu2m-St(NmHu{)dw$u4L;_Tu;eaWoX`aX(F&8Jf-2e
zh0E&8an1R)`K(f7;=~c^euk5|-=YVLgzgNE2q&Im4m3PDuH2KhA7<Qv&D9MYA*ibN
z5}x4^#+=+9C^|#rz)i({$P3X=!`M2)+mBQiW0xWE8tE6kFCUHJM+q%2_4t}s=+dBD
zTN!5x8U<p8X7KQ_tBI^J%EX6C#@NNj4$%+HswQcb`Wh`P>geifCVC|gx@VWoUG14+
zJs+B*{(e&$<Atw>#VMGJsCQ7R$(IRR6DAN?oXKM!2ew-JxXjWq?)31(dhT#CsXv&c
z^q_c&kV3``L`<`kj0@<G*VXO$G|;SC2Eq`?wTsI0V<v@H+Pn2E<iXCRg2?gkoDw9t
zcef<~lnTwY;RzV>=#nx{S9ho<BMm@FLb|8ZR4Z;U*=1n0K*Z(pv&D(h#wxPi2=7Td
zA)-uL*J!Q5yKtimMA7h)FTjWTGF<ZX_7&k;>O0<PZfhr^=|+e4;X)7CzoPA5SgOMd
zK^tkh4ymw<s$|tV36mUu!I8R>7YpqA8Z>Ly89AYHuf&yI`5cGOS-tCini+q(fL2gH
z45!pk{jeBLtvz)9L(zDO-Hn!ZVj}V=2_~w5^_#pspH+d3I_F`VV4mUY9};sA0Dpb{
z;%xu;^S^$O|8LAQG_taBp!rAYV(U9~VflZjF8+ehf4>~&e_GDL%FN2>Zx{UrVF2)d
zTw~XDdzi&Hr<D92oc=dGy8m^J|F!5}LXt-I^whRSR{#5=|4qKdDq*y)oE0JXnR9TH
z!y1hNyQ3s%fRuN|m$rY(Hx(KbCcy3Ot`!?w3H~ovH(}wU>W{nU>uJC5Qj1R99zp^B
zPq;&o4=KIC0u?H;99AS<AvmNFfFZq!Y;hYl>ma~Nv2Q<1QavLPKe!iw@>Al=9^W9Z
zeB4lQQyUcL*)m_zF1Dzuib|Xi=18RX#M8;5rJk>!!8s&#KHB@fB;1`S)E1PADE?B(
zy`MaQDWoLLQfkFF+a~MxGUW1+M6Vmz>S~YljkOt7O%)d@NY{{drsOa1qtW0mU*UYv
zz!#F`2Op)P3d;LOm*T&PD*WQBeW8m3gRJJ(0`U<Fz7op!f?g^w-EF(UR<S}#dK%?*
zM?Tkqfm>qJ&6>I5p<_JbWW`Lb!v<(h8MJ<@Y8sKyPjCw##;xrPGlGo>2?9qj0zY7Y
zIIsC^RtdRk%UgL3DPluE+R~FhL)Pmv>$PV@HXm-82k;cpG-hVH98Ij9s$ZcBY}}s|
zDW4KCCKIMjvO$%2N6)swj=@PfPeBw(Q_8sN)DY((rni+)z_Rfk*+vN!BDp>kV!T_`
z6>HiFQ>g%n_w#0u1Pi#>wAM+-AGFP4vprj1VZX2f_$u=_j~L8+prw$N6X*dbLkbE9
z>I?dj?q=}U;voTlZu?AZa0_D`4%Zwpz*?=fR==z+$(=Nz&H2QQ1|iDAwOyLB1;Y-a
zZ?y6SP8g}8AUtJ`UE_YG!fy7569?q@R$X=Lq$8C{GjcA;pLdfML03ibEOtU!sxk_!
zDz3Q|;@M&$`$AG;oe&}`Ok>nQ6tVHh6uz!$6(u$lJL?IQ8Ajf%%t5Xl#5#-F8KJOx
z6U<oyP3uH|nw`CY@l}f=nsh60<Y5J!Y#BbY@LoFamw0SIP?jX2bz_ZqEWa!9ER7YQ
z=Uwk`mTzqgLdV!lR==7z9l6I|KAyiTvxAFn$vKl9{emzUM;o)ek-J^iS-=rR*7&1i
z>+=QNc<!g8g1X6V(=AE#26h4G=?i*P?7+rIL(*3|Jl!EZ#GpT+{VmpTRJ$(16?;fp
zIv3t0bS*NKW}U&9a^_k7L9E%P!e)%V7|Gu16%A#eWZ;28yRS!?V9YVL`zo9Gke*fC
z7W~`Lq+$<UQ`)JV5LzNe;31`R{HU;4Q2IfNuGv~)97D5mHjAhd{h7ha^x`Qh8jPrf
z*jtF+7NCH;1R$H2SZvnxNd2)w#C5je_g6%pG>S>3L)22vN+C_!Mx7sO?CQ#6h{+yH
zCSqv<ZFsD=C)WBCcV*su$#L#940&~|{@K>yZB)7B;v^kZ{0AZUM8ef^07*eUDvSw{
z9_i>_w|%c>kOBc`ogJzR7jQ@|0kKrFM{W9C;%}-h_-IZZ9;8vb17JqjO+#h>gfzBC
zLp!pJjtsujcoy#S;SLp}bjQQw75;ZcE&?1+Q3dv6#$^rg=?o9Jw|W=wVP8kWf|TRg
z8o56}kw9qg+D5y{%{NZR+Ubiq=r)$8ZW}RHT#(ear=MY~8qw*@{_Zoo&!Usn78P0&
zSr>Dkvf$)?GCELFyA9Nt`fFrrk<&{?EgDOWaHHz<R(TdR<JPZ~otIdN#~pZcUJMIe
z3RO~gwc8*AK~bZ~u`kg4CL>99?JS*v3V<wc!n&fr0VHsE95?eiE;@q@8ayjqX!5GJ
zdzcH3j8w-3$esbqHG;F{Kee)Ve?K@Gl0b5Bth1cye78@j2_OS9Y;A}1cZo)La)kF0
zd(%5~)uN#GqIpu^hKtWoELR=+!*@Yra2wZFt<TdlpP<OoXlZeM=?(r7OfeAhtPXXw
zjw*Xm7j!m92+IK0bFX21LAC!vE&o?VQ)N=o8Sd|_x5oF#1>ygU4-Qs;9p?YP-`-#7
z^KTCFN+rF&hSff^bnF~;=1L^Q3o3z{#DX4y^LQ8Q%tYhy<69y{%te|6PJO?+>h}{+
zNCoD}8zZl`xZblalSyxIeF@~KiP8@-_N<$qxv#Fg1Ak}qxrx0R(g(&Ob(@yu>YQqd
zBJ+2X>RLh|MU>{<1smfbpjY8Zkf|^RgqtY(Yv+@lA-xc<*!L)NfV3bXPmCh8%*c|N
zyE;xGNviSrZ51^v^spA_YokQmB=q^8Zp3k5h{Pel?1>|SAO<E&2m}EKG#K{p=l8A}
z&I}}!5Y`z<nvGVGPl7B-;I1tkswbQCgrocxBCP={43`~IQ$!W2%A{Ss2ilE276O#a
zo8O-YBxT-@n6|wHNtS%ZYr-=husApg_SpReu1zU*%P};cH%97duOLK}8S<K(jIdmK
z)|rtfpB6aWBFu;WJP90I-vDeTO$Y)AW4*SO3HHLq$sGca_yT3J9o!ECk~bF(>@^sO
ziLLq)4ZFz&t|)$pF$S{_y|MF7ik=BYP3I<+Y$1zfg)c%P68{Ut$cDgtiLx}+;JK$B
zo<xnmjuKDEZ#y-{73gTprk!ngzW|O<LcW!<QFOxlE>&v1!vd7!+w*|%i1MY<U4kE}
zZP72ul1Z2OhtIHL!{v;pF+U`)6LucF9wVz1;h-6O2AY?r!jc`f%Xvufk|gzQn<=Du
zo^(ERQLG`0;5=g62j;e-d>h}hc>XPq3&vNsa<*J&rAoVObJDxVO0A*>s@3#^!%u#%
za-Eax+e*PF!!?C8G@x$n^*5S*Y_Jr~2(V9u7MFfGA5XiDZOfbstIVIB`PoLiVrd-Z
zHNTX^tSgO#Zd=eiFwIMJp4cCyohn8s;MdoQ+=10J>j!Oe$}{)F4jdww(`eMMiq^vD
zZqpD<Lf%idG!?8px7{^C15HkLGmtJ=qN<W;>6FtcXTVMOG7Pm!P0VmiE`3k0PK&Ir
z%b#+q(DiJ62BU77H!91Dh}I&r-o*DMWc1sC$!@vm?W+B%1>>_j<Z^B)G~#6g6h|8z
z2Vov=Ok*C2hU@Q5`<+It<vr#dwLqIMja)mBw+)q>{Ga#41}xX(W7@Z+DI7F!uX{Xh
z{&f@z)k+$Y@tbsgPeT1W38{ajS=5fMj{g(Ka+sQ?5Syf!r7EQqZImY!t0bMJ84;V9
z*x!Q?qoS6(p%I;ggn5z!pOT!Gkdm_vE;$1Fm)R_`R6jKH|Hb=={^qdw2k-lTpnX&2
zEhs_9oP(+P`Mjn;0T?R{#Ju|MDMT?dY<?j8&ku=Tnp#R?&+bQum6ex=kFU?y*ZygK
z8#>`fKSV_!z#DLGSq^av9wPI6<EVQha7kl-P`-Kjm}W+HjsZsGzR>iGs7McD1mc23
zWzmd*QmVGW|KP&_Kv<0mF@`QM53DVnB%DA<=1W^gHEutF2KNcaI{{)!IHpALk4cq?
zt|u-N?a?pWxyuG3nNf{Cz@qL~a{i22jJ1|pzW&9qW~tnIUh;ZTwsr(^=nerVGRUKU
zLjbhft-sN;(%WCL!-I&vW-0Wi2wubvswWsjHG^{pw-tdU2j~aA&(LBf8F<+Ft8M$h
zAc=(RYi6+{?w1WL<xZito}fnV+0L64zgG5@vr-_L&w)d#Sbey{`HE3Vnmy`AO0b`L
z5tMC=p5K&jk8%6Ag8b;_GpQtVS!(ogC67SsdXDQ7v>d9&PUcCP+&S-n%&9$edMnE`
zo>YWW46Edu#qWGs<VUmN^#%5C7nQcV*Ut8BMxwD#%W0(0<Gq5`;^d@5NFH~S%3XHp
zJ9h4@>E#uFek1mAF5iCf#8<65ZaHka%Y`ux=?=1~ixiuO7L}cI003c!^_(5wr{Ny{
z^x8cD+I8GU`2;+O0+nCMX^^={>0jRaUJp!jWnICI+ng~Ur;n=vjAncAVDvs|r9@F=
z;Gd5#=0%=@0ayGC4SF~35?yR>64n0iGTf5evrxzbL=O|Tm#9Ruc5iKyiL=-xTw&9!
zSZUHfs43S~7MFrK8Q^p)fNlMWf)!$gu{%&ZP%o2KTo4kH@2gOxA3KN>7&fwAoQVZ>
zGrI^~Zm40rRG)W)NNMyVISgXd6OrWxtuNlf=1FZw6ed&dJ%x%N#AcT?#4WYD>beXf
z_uQt|DGe?vcpv|;V(Ny0BGp?N_$`ZEy(}ESh)rNGHS}!RXA_5)FcBN|sqXhv_v-k_
z`QR>UKKk^2e!?zf!Fp$MA$d)EV>dqF)F9scz`*KeQ91bivtfP-iAHCcNLwC54C?58
zFx6&q&#O!Wwn6tyxTo3C;xYnk5dZYV>Z0{I_<7Z+LW0uN9pvP!Eg$(b(|NVD6>KkR
zpPU!rQZAy%$6l?^!6V<rh8Q_+oI5}&=S+X|+5ctAH|#JUVdE%%A@xYQJuU$$i7Mlo
z{*w|@Bxui^%Pm6D7qFnK1VHGufV8V1P*k!7n((nm8bADjbF;CWHcZ7;Q`c8Xjs7A5
zrEH&l8T2^zJ_v1Lzpb6*<tV#zeNbY&D@ExEgvoI(L)H57anVMroK|Aqq=5kzhXVJv
zJ*Il^4Cry6(?W&qird03){d>!scnBdZ&*euo;t1Whq%PBPdaGK(Pfx+GJT|oMJfJq
z?*sHm<nkbWSN2k*J4S7bShaGicZpwtnkY)A`t!{m&4^`^7|~wo<&BKp1HQXEr!U;p
zHvam2Iof5%>>huh*RHdf2G&iUo5&ZuZqA%f)y+jEST+d&wHdmR4x&|C9<7|S-UaM{
zmYIs@b^r$V>|3y1IivXI=s@7<2|cpoPYiiYn{aKtt^@d|;09~GAOmT#m3~l<TYMBO
z$O<nqA~z{YZX=;nw%O!sTFu~;Z)sMEv`OHI9O<GU$C0;-L|GMSxNvf^iS(|GDSU8D
z>vdIFs0TEiHf0S}{eGkOomxfkAYg@?u9}43!uK}P+CiP4g2|$)T+V|!_h*mDXgyxO
zwLUuPH(4$&AyY-I6d9xl@t5qxwGoqvc4Q<RHzI+i$;ynPHb=9GEf&v7(w4RqhOg`L
z>^X+37*xB$v9h{1Y^av*n@}cgd;iFt{^Gy-(tl+6@5K6FNe0xw9G>>?!jQ)|^ZOgt
zXP{?c<o37cczo+zp7{3xkfm>bM#Bron3AJ50GjS~86gy_^aCTXI6D<{JKnpu^sQ`a
zdRoU&DrAXf8mt=&Rv352J5~M7<|P*{P+b1I_^(i<d1#PRu^-w;x6!sN(zXBstpnpU
zJ)UUtEJDKndRA~8nr_CRbrkpgevPbcWJv0AB2$EHe&>(qT@ZG)_*~^)f^uayYm4bn
zD<*?E*gIspS3Y)%d2*+iI-Yi?m%T!Hr=^ZV;8k<2yaB0?%@_n5-we}fl49PjMKza|
zt?f)&OFOMn0)+bAlYL50Yk-N<m$P%wB$u8krL8ave0{(a7bx!Kvmy=I4RdPDQ}hbm
zt+Bb*=b2I^at3h}0+3W;?9MHM!j;*o?Bz2pIoQLnR2Ahxp;%(tTQ?Qq3{CjfN}Z}9
z6$(?vl2+1s>S#IqtcS7;9%rQW936?^Sw3-ZBt~?nUGBC)%y&FV$-~W8?ibLm^GmD4
z?Dwex!Ck%SFSHfSGwaC$3dr#aE6f4N_M5KlVTqlQd|hz)GKj1_IwIAs^u}9{m(1#o
zFm?}p^d%kAwqPh(E==<G#&yl;!vjO%p}oZ-=y5Oy?maj~l>3AGm5r!4;_S+X-JgpG
z+Xbp)N4q}eXqG;kIdPs^7(>=9#Q5ab{B};Y;YE>?qIpG@J5D_$=qR~8ePQ_8rYhO2
zRxlujDhS0yUE_U~4X^s5D*$h($OF~djFRP;Z=Q<AGOjP?J-3y6ZQ`P{u@;u_K5Y1p
z?1QgXDA!3Op}6eM*GX!1t6~|}0~1~Bh?fuA)!R9Bs*MmZ=4PcZjpW<F)<wbz32cWV
z<yo<}*QZ%r<5x3Ktr>xAEJ<M9wF|5%BVmIN-UP)gs)*<43dMTrvTvvIAl)Er6ndHn
zP$M4r6Imno_wsIYdwgBpF(^viJ_=t%1!`ws#gAbB92mW(+5zU@K~ekfRXhKQa{c3V
z=zo=+{=?glmy*w4ZA72j*?VU|0hBFq8aYgHmcVs_0s*X%dWGu{NN{LjNiAaqyx&8{
zMcbV&NJb(-3c!Ao@3*ecSJ;Rl1mL^;OdM2WV}0qXmVeGBFCIBs%2_v<HH%JxlGHz^
z9UzY@D-)REGnSbuNPBz2F{^M~;ql<~s0619cYie0?O<FWrnEWm@eb9(V#(n9%9I5`
zulp&YsQ3RIR_^OjU%+}<&R{_a4AitrQ>RUJSb@-BvxVK~vnS@;)Clf{>QBe!+x5f8
zUfDate~lsToGei$P{)f{-0N!O*Xsf`CabP%qARxR*t8}H;zCmp5l^;DMtXP78?!ct
ziWbRd4OG+(!<u_JIwJ-o5GOMXqoOq#%1P!wa?-GU*%TOp-WFWU9>&tKXW+ToQ;#<w
zED+iYggOD6H{uTJ(8uV5gN2QsZHC`Dt}fRAuifX_=^q}{hsZU*+||7fx+`Wt{j<Hk
z`ZJLDcn#)alxN)1Ez^^K8?_6wC21M;6symeyGC9v4RPeWKDK@!_nqJVOE_&(u1*#J
zTiZExBU7hChMJ%y(F1uhFa881p~9t@YbmX!;>c3q^+z*hwX7d#^)DbU=ivwI#EfmI
zd3VavgK`3Jt#H`z=gmqBWsD0OS7=U{I?wAazX)WZp)-sx@j|&FOhie}-f|^n3T4CA
zEhc3nLUA?rW)s-uNMu57e8}bB#)M1wCP~2YKN!_HXKd1<Y38F*nPSAcCQTvz?UH}x
zJ`5?Ko!j{Ys0!Tp(-UizzmO#=`MTf3cTy&eN(C<<ql20hr1;JiX)D%WiNH!ETX>RI
zK%P}<3jr4xE%z{Oe?m+rt}5NVfYX4Vtop|?>i^OKHe-vr$ch)m0t{MTvrZBr3%^kD
z2*kzvc2^7!dtd*6+t7DR!`<jv<aUC3pn_n#JYZ}oOXcxUY98Q0?&P!3d33&TI*ggQ
zrA&YXXQ%sOp1C@RaX`a=@-cnZS)g?peBs)%HBcRWw%}hObE~5YGKS&q2_&1lYq&NU
zKi`T$&zx~>3lVw;>AI|6D)Ba3_N#r#79ju(TWZ-W^--ZtHOe-c7VEa5CfP?at8?0q
z_nLX`-%qM!ItGl|zY%sOW*Hm333~Vycev^em@z5GQZu9JP0yu;a8bJ$*EMtF_3$qO
zJhWk*s!`uz{Q4cn|3(h#pTpS5+Tib^*y^t+{&S^c_sA`Y!Z~_bgCW)gn0gGvmq}bx
z$D#|sC($sVMEoPJ%%I`(x-*}Y=qV13mJ&PL!*#loEm8!opPvPcV0^6iuORMEUp;TO
zRr%Rs7C2Uiyn*qVJ%X*-R5dq5Y^%0hLktFKp%?T@7!DE^YC+_XTS1zm6hyo8Yj$B1
zUeFK=Y{xYY;3HpS<rbLqGN;ksRg;Ly(uj(8<2cU_7x}<_c_FS`vq!saEFLV4H_qXQ
z`#!5bTVFb`+%6;@*Xo&h?MDoiNBUwVUlYH&$w85me113J)kw8{Rqe4^+x9hLBt}Ig
zqSaV~gLptjfqgs1?x|_QP>dLq9B-1gjus7H$p#j!v)yzjI^VWf;<6Rq&M|K)vwpH-
zH@DLbUGsf$bReB0ZQPjNUP1VYUpjp@zqTE)T?9=wasD(x&$NvS3tax5&Q3p0`6813
zW?Kkqb1Zv@mg~zl&*T)YaM%#`YJL0opojB4HGU5WJbrQ{m;XkWj-f+n`fF^WKZE~>
zwoXI`QRF8q@vAWOC!NGp9K%c*cgAzE1|?{c@J*&7k?O$>OU;FKXGaH2iDQeQ#(f-+
zI}`*<uml<n#LziLcOmnNAP1&Y8)@=6Q#lh&N_DF70z%otFrKlcv$pKH>!JKkWCCGp
zBAZJdEa3rS{8YjUgL%8DrBP|1Sk2NtS;S-uNuoxmcI<EgVnDV$2ej&r@5#AsdxvpK
zs6Sqc+z)*F^kDL-wh#jK>sLyeF*RJAq0gKl6|@#|fO*F}gc*%C?E_hl_gS$0!m_5S
z{Czm~m1LTmGBD=K%DgG=%K<6v&{~_oUJVvY3lJ)R4Zc66R#}R;c5H|0Yz^ue4(3@|
z6A$jBMvlR41xni-GOBR->-&x*BGAs9a9%K_)o&iU1SL}a3k2{~K~*eY%Wxp#8=W3`
z*ahyTrk~QM*HE*svFC5xxWR-HOhJd)%@uG-Vf-H>cT&HkiZ&atHa8}+J6ko-Nu)YG
zD)f0^0uD;yzT(2WZJz>3pv&z^Dh>~61+xh95t~Rz@8|FxQ}Pz16;QwK1NK>_BDQ8+
zxo7gcfU?1=tpW_Lnqr+^e2ip==g>CT$Em{<r?*@8zsj_=y2(2*5kZ<P*FnAj-rj1U
zz1oFSRznWgQrot!D~d0<7OZ{2aFKg}Ys91}6K)aXbtqB2nAHW+$MyKTqPqUYk?A_{
zp>*z>$x?rd8U0O4!a&c!$lmeqsBC6}RD2#gTF~=H_^O7Mzv()qdu$9GFd{84@5(J6
zX<v?&g|80JnpU&<+16y`C^gCTUdBD4o0}VD=uan~loi-gAt|`;NtQfX@ktfKv>YO)
z7$pC+HD9HHd7d$EJ4C3G0Vrz1oYpATU^wue3Vm7<-Tt*mB=9)6hFO^-g)lyU{3#aI
zCj8A-^1-XtjSSFoz&$o7J{)|#5k~DG{=~-Wb(g{oKfM6nC$1j;idU=Ld-aH5Oz_FP
zB(G^4k1G9EHY93+AV>HtRn-#9zBUA&!5fK$uTVQ+mk6E0(QYhw%1hD|+a6q8UPLsQ
zi6~LVL}EelrhAnMnSw{F?OyqH6vDQjlSW9%22~<)ukvwk=UBVFpHU{Y9;E6jx4>uz
zko&2q^x|bc$)GI&x?-BXlCB3Z6|HWyYD?xU3h5U1@=@h#VacqGD8terjn_`)Rs;5}
zQW2u>8Em7U^^^~=$}f$XwVoX9hAq79S=#gDtMEE(SL<#3)@y}A`H>Fe?M@8ss;*@1
zXHK1$7-Nt0AuAmvAq!-8W>n?Tt9|S3cFmq#!Qu)ajxNLtJfR>m+Fm*`uNv23jpFy3
z@*u3fpK%p9w@FZC(+CoZ_h|e+1Vi^ZDIC8^k~=wLygN<zsZf`Te2%=5&dQ++Kx!r_
zYHZQjyKA%rZ(Oz0SuL*A63}FS3Rhp{uam)i@wD-blKBK&$=Hi)W%t}9RXk_^Cf2YE
z>#7Wi=AiK#u;m6sT`C^mbtDW{#8GYi;rsmE=*BJq5j24~(2(-epTrX(m{qg1C4pe$
zxEsssC{h69fkknLZGK^>jzo2`QmJYS1W=mN<FF`6LBvN{T0!~t4|H@<wvyRw>6wV4
zYnfd}_Zf<0k#oFDA^=`z!C`M|uwVV9)1q4V(uK)!B&!Ug8)U$yYsz*EpNy_zvLk`m
z7zF{x=(Ee=`J(~q=d;KQ^gkDby_%tK1iurCe|`UrF8%)rjo-j%|94460UK*aBWp)0
zM>ks|c3ejzS4SFKOFc7d2nYo|D_ct=Tp3#<YXt>KTtPiYJzQfOdt6xw0R;jU+`krg
zvvvILJB0XW3f^;L7)kbx-RS=>*!|tQ_&3<C=wtC$J>r{zC-sI(8Jh%ARjh()CG)Gj
z1+-vdLPhA0*D8z9$7L`kct3BBI;S~W0TnK7cDlG+ONRr&0<kJB3jY?;+cjmy>g2-c
zdIw<n5mFvL&YIQNsO;lrzFW`~G)Ej5Ul)iD2sP2N>poZy_YK_S^3>4NIZ5ctx-O<;
zLqELepVoS^aDYCPnJ8C53+iMsr8%46K<(x1cU;J-DZzi1sw)@j(jV5KG}#_dNlC=f
z|1`Ho2W5b&W)=(r3wJb}zn>p9;ykq!Uc^|X*Q-FeUxNs8g`PmDs%fGhmTS<i7Wj*O
z2aD6>fg&|t1_o&*q5X2xM&hNc5rnaGwDYF(Lte&5C3EQbh+@O}Haw!II*;ftPGTv0
zp{MNPJZ_PiJaI!^PQ%KIL0LqslfjXsnFB2NF%Jjgs`|Rs3HI{t?)?L>=@XsWN3s|g
zT+s>#)|q-?pG>LlJ`($7`F(eou&Xsq3YYe)9j;ft>KS`^TV@{~WYN^Z$(UT;0m5rp
zeeF|JHHoN#^42DoamvN)&0Byebuv!AmQw7osE$0>Y&6J$gXd>-g3}M><)OW&%q#%p
zg_3B8CUK5Kt(Nnh+Css*N9x6h`UsSP(4Yb2twTNf0P)|*UfXxjbO<F%utdaFfy|ZL
z7KA_T>N)`*9IMB1?N7S#1FxeVG)T(<hF66x2RpJf2{FpWXxVf9-vcol3^15+JUXBs
zgp5(^=h?)heY<J{m@B{V(F$|r0Ik4=$)?y~a^=X@&Ci)Fb-?QflprrNy@bK=U<-f8
zdZbq^u3aifE|<p+Rian@0oal~_~pUGKHx133xrYI264^rpjMkmjn}r8F{$LXh78nJ
zwbbdXprsDQ!wIP3u!ms%wpfB$f(b;7Bg>yreck_=L^9kN&pa%)+g?U@JiR%57!g*t
z^bvglu__}~98%=l&uN!gw2{(5jY$q>R&^dD4bHap<o6VSEZs0Pyl`t{s?<d{{zOsm
z`%?C2v1<H*66AAxUbBo?oW+zJmCv!5eUY=x@Fv5us$G4Sswt(6<P}C#JFx}T>GsNZ
z>ET~s6%iSZ_~jc`9sj*o=>K_2I9M4P{T+e+Hm{hch5NImV@IL0RzmpWCpj8!<Sgub
zTctUGUm%j(C=*?QvmwWMS>)GL=DsCTlTbL)_V|ALah3!EG_JqF=0yZ01sF~7{Ob3F
zGHUg%Ly+xkj`;i!%E&)qtpWK<N^2`<QD+#+8M=BwD3i!2bbxeA{6{5}C^Kb1&@J7%
zXH!22m|+BVY_Whnm#HiVU=o~X)D5vz#2_uy2zH#JB7sYBm(z=q_z%G~PRU_^=>myT
zBb`W)kgCeM)*Fzr+ZKRnWMEBC&%4>ww=o4Oi=IbxSY|FH*zmGWm1kI7tP`$UH`f;Z
zs;D%u8Y_?x=jX6HWM&E?3E)HEBQF&UWMuoEI1ETEj4LZZ31m^2VJN+8qk`M|F;dVg
zrRn85a!b)%AEIRn#Q`eMhA&+P?*p!Igg8Q>hZ}xk%k*ml$~P;T1Qkwh_<HwaT%XQQ
zwE61K4s{_+u>j7W%f$z1!G%0KkEhpVqbANwAChgFjmy@g;^9-MJmV&l!#pVZk>CA(
z%^+lkd8G7m%MVFwGo&oej4;U+%4(HDv4_UXteM{ui>I4gGFa8JNSwR@t(JsyM4Dxq
z<C?4>xe%ri9eXy^@vO%kGemN+WE;km!Lu>P0mMZ=p-5;M`~M)c2G0VTM102nMTZ4F
zLQhuJrl#oy9u1K)=<Eoj(?P6@H$`B_lQGv&j|1E-a2;UHR+((W+ly~JQ?-bin{9h|
zqfsO~=w2I;#^{WaNBSN>khD8Cd;S!g29UGVwmZYh5-ut{7lL@Z=%59th>nfVGMxtr
zoO$Kc8b6V`7H@y@w@TJMCt8Q_$^QC{C8PBAvvcjOaWkheZ=lOKdIxecoZ5C_g4o+S
zUK$*+Ds+g!Ta(5cy2ulMf1N|KE_(Nf+Cpkf$(pM!$~!A~Ed^8HE1&U0g!?CncS%>h
zx0a`LFqT=p6Jnge%=P={#1d$%IL>ypo5>wl#B(yItEzm6%ibe1#v2cc@iWeRR?lo>
z@bY5p?(+`pKO^rq;QsH=e{9A2i=zI0f7gGvVo_i^lSzD|<<NKi{@?gl{8ym<*P;gB
zI*HcC|5JtVGHLs-7v16P{_edPs1b=Ar*7XVUmT!et$-G5_~w4!99q*eL%Uef$N~fl
zAFpl^rl<gG4^sLIBfz*6&f6=G?Dl-mJn0jwVe3Y9xNFCCCdr}pG3)o7_{S*n-<4xv
zb6$6q(wcF*F_uQqD271C#}H0=JLg_j1c{nzCikZ)o~UGtdwFIbolY9&75kz^PtA38
z$erHr#?qm*8hyZ1&(t0}b+Y>G?CfdsxmDB2sMXY{4r*QuI)B(xLvPpdTjVE`UUT;g
zWgO|UxRh=4-ia$CQPO8;o}qZof`PvHaGtMNn1z1cZ2rFX*|6EVi|N(thJ1n<&)Y{i
z)pB)7t2th$HmXQGEQ&xpBM68e)`7INr0<#o^)v@%`ZXfPUM-G^xbn!nr1@<fi~cU#
z_-8K1nWyu`ZL)oUy3b%Bz=a1Kp%i&O-!G0tE9p*V47s(GbglAT(*{|=_t>d?pGvA!
zW>MlA7m7@52bhP=7xyg${7npYcQ?yGo?xw86sRHcS_`6I-X0kOrz+u2uRQaU;d$FM
z<tqI(dFNdkLw=hc<2N|~p|cCK>vEk064z>AmF<a(;E1!-EXaBx(C*q(?`hZeOm@u5
za1F{MTq0)HemtR*?kK{_m4&mT`GeUJ__#pcJ}cV@*=@Qd#?A>qs5~ZiWooY$#9A9t
zaZIAF#gwTtx0_R!>LjxJnZSYucMaQhRqMG#dTd6nR}=H8anKF>qu(@m$kEhF)e$bz
z6M=_KdN6YYVy(pkz~f0DQL(AxaIqYkkvX(^{cSscD=TL6Q17~d$uOP{LjAC36wyR`
z`S><~uA`!{U#vOyTChQaMi2Y^!y%fQz$9RdYRQU?_b{pEt*sgaLxfby68jRwv;3u>
zuB*8~QB%UYRg-&2OYMD&QXk?3%YoFz)8Gfr8w20;JV3DuY)t`ZAFu)yqT<rm5P(*P
zcM^Kv(knA9kK$Q3AGr8y8j3I+ozFnLLNTKwK5FVm<Pg7?(Mg!~)gxSYPl$&X?9UJR
z6SwH=8Q~*$yv8ZQLL4JJ{OuhMzH}mq$-bCv;JZxUCWEgr$Y~YEc5UDF$XVCHvx3}!
zVwB4UiaBaBM2zKT%o1##!%3Nc=Cu8134-L`qW8bPBbDSo70&-FN^J}rZ0($k?A@px
zO#i1?ZItho?x%&~qS4W-)J&(R&Jn{ZGRv4@pQS*6NR=RP604av`{2@M8PG)(5G7<=
z^?vf09@TB4D__Cya2B<h>gGkCRaxXBJOByA3edqfOQCh4Fa%E`aME@Fj?{A%ejo?7
zSVKuxFSVyjhx|}J=g$g@{f&#Ax*okS-;lALIbv~c5tNQb+N)O@_k{d*NRpaWfk^Fy
z%WHsHBRaY`l@{0sXoaZz;wwK?y3AOK(lc6c#b{hY{e<Y@7Q+Eg;gBJ-bP`H2(!8jv
z5yE{5G%t2JzyhI%>Z%yfi+f!XL|n*99X`9**p<M6u{}cO&E_Awr2p&_g{%2h>jPT2
z?UT4AqQ+hj3<o=D=;aMKjH~yPFKr&i(VKw($(2k5#T&jO$aDE4e#7OTw}R8UD(Ch4
z91i{7j{lf2`0uT-ce4JQjj)pGHUDcPrgd&jJun73ujcx}FU=SWFYRbMB+Vod*W<B7
zzr4jyaw5<T)ZFJhWF#y_mW!j{FmK@eVNqLrul-(_Kg$Jo9o+?pM@z=$0VU(~U+|lZ
z!yL|kNE@Dr)tpo_*`ZKe0>$EWJ!cv;NZ*Jd5d$88=SJY+H5WknnIqVF3hXZi8~!@u
zq*XI0>vyhR!?aj-*AlObG8ZX$58@s(?|uhsb~1&EB&$pFHf17rRYdebr3*Q8-Rd}@
zGj_t^tsu%xVN*to>a%zbeQk7`ARSYgw7;~>`*nR(s(YKv%jqyZ=wI!at`PYwzA*W!
zXZvXB{V%;C2?7GVr{9k^9qixUS1XHu+~2>subs&@e}U1Ej!O3464Xh$SZ#dM3Q)uU
zN7*|?3AQLr!qsJ?%eHOXMwe~dwr$(CjV{|=wry8Uo%_xF^M7~EoO|YFul=-N_F5Sk
zk&%&nJI!mg1Q5GjYoLO8Q!E;33u0r=;oi@i^7+IsvgfV*zQwTun-0UcxVMQ3IWjgy
z98L3N?d_ko>{#CJ2}C9LwA7Fu<xq-ChkB+=t?lovMqCKySUdGIL;N1*NLjs6OR%6<
zG<;}M*#3Nb`>K%MQ-%CHw;iUoFNZH%rdp{VSl-o6z1v^#P*p?rfCL9p@U%J)-T|s7
z(A4jk+z~z7Sv1&akTQ^&{Oex7T658LE#2*wJYFb&tGS!(ygyXnEIyUkn;NHz(}bQC
z1`?+*BoDP0*EhL&P^_0qQ;5n+JKf9JX`B`02ixZh;G-tO*q($oE{us(bRvV~Xq89f
zfiP9npst<0*o&D`IcOrUf)BiV5-Gq|JCEhZnRS;Z1BykvIEETW7k9-~Om6g5N2AI8
z7HnIAZL%79?P^HD9Fa4+-z)6k1klP@GcS4{B45RHp&Oe^N4Q&&nRmzfafFwmXoh+O
z8~w0gz!nZGS_fxnR+N6dx|Y2)D9gpnx5EzX%gVN_L&q7ao9Y2A5O7zGj*Fb{W**v@
z$#-o|*IDeMVVYExbB>MYH8M%D&z9Y+%DK_Z7EWI1xSsI}$9_{K6*Hs(rLhjRj^g(m
zV#GnI8f0=4uF(2vLC3`&^5oO_LfYHF%iw`Su8=SlyJTH(j2k)}E8Ru(4z|_J{7hP!
zO7;7_7azXlMF{hxm@zrbO%XM^U(`GEFba~;gl$aTZBuEqiEG)m?E9L~vhIFnU4l?!
z+U&R+UtXg+ndZLdp3<a$)7Y9OWHMm1**yjQY8gpv<G98Wr2n^zT4M{TNyq0VKSy$W
zT~cyt-VIb8zYvAUiRslRzcH^vmtGjeI-Ce;LZ%=&m|l`49ZktAbj1##vU{n&^m^6p
ziJ5w=erqslp^Mt5GO8D0c2^(6`fXim^UsA*{0S4i^Mwd*1kP^EOm4F~-}$vKIF71K
z9B;Q|UfD%3ZL}{f4w!e#kEIj{HBaaOOgKy!ElTx1|7fm|*e-tjv<<U%0R-*Pdk|hp
z3rQAli)G6>tl1h<rkNx<yI<`;88wxM@2h-d*5{ai6~#wWB9VY8O<A9mKDUt-W4L>{
zN&?-#aU5$MR#_7%Nr#@w68OZlcrMuU_@qtEYZ_P8kZwoa0b{;qubw86@oH?{ql-(;
zf3lo_o)t(gZ#)h=%5FcITb!WmWy!RsnQo<hZX#LS@)%_K4@q5OufyqtyY+NemfMhy
zt@G?Y==k#Vl#x^>OVklEgb?Gd*5?)np|j7Fc<6>{K#)mSvrO!W(`70RUvU2S`s|)v
zX`c37n>D{{$$w~Q6@>YPq=o+uB&`%Ct=H(FyU)m<0fPKCoMHSo+%fz&ki(jTRue@P
ztZp9(7ac2_(LpU&_n%0$l??+4<V=M9!2?tIDXGLp<PngB@$oIvB<tY->&!L^)SIka
zOchKa5Qyy99sS46O>+Q#S^Cqd1S^^~UrJmzCpWI*0*aVr2;g`8G8!t}@x*w}&eblm
zHdXibL{CC9wH{uggx~+Re>LmG89}BX`w>!`Dnxp05gPr0RP!n=i>28Pk2N4<M$|HF
zq?N>H<PCzY>tQRBs^_6<XUF`lu^v+uQ1f6FdfqT}ozsZJ$I#aTCZ_KhgVL%TbaygJ
z4oQ9+-NttOf>cOlSmMwX(9U}0DC=J{)Dbls+2w=JUCI5f3iKhbJM}1d#S(wRaw4rq
zQ#=!<KLsc@Hi*GZl>xnHuDUD=eR=r)vBKJaO$pQH8X8&iFv#R=3hv*Gw<78-xG!%i
zZEs7+3+W-|va~$kd|az$Sm0Ms->=efK0}Q*-Ep=aE{-ekiuz$9*v;A9(<)g4AGPY4
z=fV8!#VZqn>x5<x-t#Z)_&+bH{2%s||NkUL&(`+;g&t{gMS($lI~HTUbqun<Z@m8X
zWru%ac1dcPD=<Y8`pfKM4teDd0l(>qR|$-c*ZCA$vgPAE-*qD0E|XLK`SEsy6Q8fv
zqZ#w{;Mf%VRHPG(^x^d$>{~33Si|kQ3GXVpt2WoOMl!j?!n~_@5_#_Bp{-Uh0g!+)
zzv{cvbegU111G1%nHvsm04G~r0e(V31RMv{fsp)6tu)StncA%Yv~tMi2fK-wW-&??
z2<x<S>fF*uCuN!t08+8Y#pe>j6N>&QIl=edO^fc?6It|Ho<F*NY*3aXJy^l<aGCjF
zORoZO;dvE1k`+|~^UC}qH|g-Yt|6KgR^hjdNdzEC_B*0T-BSS+MU{666}N2MsM;M}
zD`SzxjP^rwqYhy<G1Cv7Fmok>dY?|4AxN@kye(EQ=jMYBd$V*f4zCHmlR8QB@P{{X
zER6IdxL+IT2&O{J%E@`8Vm0XsE_B*l&aysKFhcfBaW2nbyq`hTQ<<LXYc%rdXV5cM
zmMrXy2u)Bf6BPN#)R`7i*ND?|AH>C?BS&gXd&(p11<E~+88P|=7w3dFO~$0TATas~
zqB+)8)ZXG65&K$!-AuHzy4V#^mLjgN^nLiCRJ7ctg4N?5mmbXScgWxhfv!hCM5}%J
zutmz}7d&as6ft=mNiGDOF;mJSz&s?k>GXQ%Cm`%<sSV-`7)MiJjszCQ9ye1m6kPUK
zQC*xD9^!^Bh9+KPt;(`<{4T+GJIhR9BMph7WBRu5H3$vj^DA-Ocfhx2$%LMMrWCl#
zH9R|@`F<{RjZqlK!P`7CtnXSU4%PU%ROb`}L!@OQ)QOiv&O*QJg%Bmi{U&^ZPKNGU
zUNBeFw;CgwdyF@?F{>Zp5VUi=*==&6ksU$ZpsgyW&GTa9(i7akI=GLbGYK+$V=mh~
zXU!N?YKoRo$c|3&&zjF)C((wIzvdPspCjqHH38<P=!M7l)qE*ZZHckK&+`L>oiKi^
zbTY|qw|qt4(LpKM0XEcS5T*THM_(p>3!eSXDMGrrTGefmyLUyWG&ot9%<LfA+68Bd
zM;v=4NgHafxjQkGux4hO#*5o5PBJ&eAPrHix(JGm$$O2XO*XOhmbPv!Mu;S?PFA6J
zfN!}>Ic!$Jw3ImNmjUclQkyDSmTtQ@Qr|DQIm>3_wi<-QD3(Lj-#?&rY<IcpKT+GN
zT~IX#yhFJ8m1UZX7iFQgcru}i`EzJJS>)0b>*(*=+S+w)!JKi0D!Nhf(2X_T<<pcE
zjQGX4a~5>f?Wub37-Ff+@3{o{Q?Rvw3GhI|-+m|Bg_o~03L_ZI3+!n9V$-jskuLb*
zvUWDlVC&)NgXVgsNlJ1a*7D>VBFYQn>Gc)${%kptqJ4XStVvY*`)>Um{|fCxv4;>=
zXr%z5JP_0w#kL_Y4luMjaF3Mg+O=CIvQQ(s8p}4Ev5Bjwok*EZA4Sp8f(K&C)(V><
z3MZDvq{{<DPbZd_CTwCPSJ5{#N)8bDz+6vy(%Tt)shMf{*PhUpZ>w52h5i<XwIN!)
zS3DW^o;(Mj|C%{hGoe;TmeCz-y`NmOaWS2mR9VdIjv*Ca76^(G0nN{($)-mbEuPbu
z?ULVbgK+0axW^pV$D8xn$~aZEIxLc_)HV=$?N(13XHAQSBri1ej6y`qzJPqJrkx&q
z%|Re1iKM)%GQKDl8a_zkRrG~keP@@{Y-iJFtl=eh_#8f;d|y-HhGAd4tp9%SSlntx
zQ1u(QwZA8^l>eaAT3NXM6B^K@FmByX2hX*vQ|GUZtqo&NX~zd%76K_ZZ%{PG0IMo}
zzTm9>{8lY!E`VPGNv^Qe(2<a4Cx&V)LPzQgwP#4dzJww{xd_^w8rR;~TOY+TXXOAT
z1N4Z!Z*)jxbskGoShOo+KFDzLh=4!7=ov>eoj`VqjiZdzTmqF>IXPlUe?nC^1mXIS
zNIQxYUqX(psK8;XaTS1&b1h;`woH+Pc}<0&LM~V5FcPG5??2h01JoYz2FI7AT>#Vb
zfdAO;xP6`slP|E(_l1@84BBq&0aakP4tC0UaT<K{Z2lVirl<!%WBOaWW6YJVGhJez
zM+w~*>N_t|?0NW*kt|iO&9+|^k0=zevp)_nqqbb3`ngU%WQK>Uy$5PQRb}94_M2YX
z1^KraI+O|siH<r6Ndpk}v+uiG=4S7|+taFDD|dl>byo**j1&X`WU4+3PgCoLy#E_}
zn}@`U1o_6vh;N*v_y<4F%-ZoEAtme23UGKK2bmj(Q`F5M*Q=mOI>12I{%r3i%&S7i
zzKWB}(;gq6fv|e>j~ma&n7uOmx1V3f`nOlRw7TWxY*`e;^&Hdf1RY^#;t21$M1brr
z6<GY@1COyXn7_-2Q)Xy5DHbOeAseIn9D#N7>$f>w!b(E^NMxpgixr=U^HY}VE1H%b
zblVeDg!8BIqIOCn(Xg+m@dl#hy<7Ysv05+-6Ua3nxJQA=V(b_H<f!Q#2tS=Mq-+Mh
zXB?>6^?r%oS*i2tP*Vv^qOcHzct*FUcm<=HSv9<Q>V@=319jG~WQJL$Turet@h$V1
z7?57Z?Y{0IwMrg9qQ69~fYx<vMDP;l?^TnB+TGCeW%{5Y<Z(3EplI<x#M4$q=JHQ}
zbO!#yv?f8H#-;S-2a@&+tPDqKz-|vb8|}8;P47M&fp#=->g=r2^Q1p5gRC64Kfm{2
z(J?5&$VV)%NY7d7ZT{U7?^|mbR%V6>MwpLcAp>tn&o*ZxZ5(&xo*kHYhSoqfVYT7q
z1QUNl(xPsmn#(ZfHW|^X+-vqOlgotbT8q^Qxhr30NQa`E0jf~zqZ#8vc>ClcCFxi2
zu%J+*0HR8`Gw*4YBOYy0c)9Rafp17<#C0@q=Ip&%Vyf@jP|UBx$s?UJ(7*_3mRm30
zF!F<FT}5+8Z*NF@kE!Fa#|2MWBJgz0vQ78T6OCH$U`J&UTdIdh=6#ACyDm~re7Gg*
zj6~=Cb443l&>h|sa;zIy5djwYKBPVfb{&GZTkOwEx~Zzn+JR2b=>37Ae(7vafQeZ}
zD6iq=u#sIvw(_@Wo$1>>YB@*izGAPKB-wkyuSJSxO#_Wz!FH^CQD&xRZUDt+(C`x5
zt;Y6iL^XfV`7j_V)z~Zv;p&IJjeNU&1CWE4Yo_IX!{%V~sdeO4iDm$MKCYwVlnd1b
zN|u{)eu-xnIdBbvwm}_8qQSTJX?v2UxH&WR1j5E~pE1ww69~Q{VyWW@RM$-cwo?s`
zpL{4ZI2K1Gt<^UJ!x>Jp2BNV*lT}<jP8<B8tBsuDnV-O=w=m<R$Zf>=G>T$~AR%Lc
z0}>E!M-8~~42RXzvh4**pdX=Uz8g;yfaE43@l#U1i{NX$G!h{*x2hz2^n0Advs~`e
zhdK;dGSB`AFki9k$UVQ*E>%FS$Opp7o{O@;eUl5+YGc&9-Xl-XAjfETKAhNuV;ZA)
z;v<YagC(V<cut*(7cETIq=Wc}NOWY~M)>3$E0la;^k~SU3k7&wIn0W03^@B1&-$zE
zNUQc0(Pzk>mJXHgfPax>NZ*7N<dNl)wv<WPE$#g(gGU8!G);1Gsz%w&%tyDhOc=$h
z5}hBtoF-lKSa9B2%b<cwR8>ai>)h375aA}GV68X$@^osuv;tyP&7MAwrz4hgiOQ3>
z62^qK>JN_8@8T3VE`(`R+9tc^shgV35Bm(zZ^MN#RVg%%tVYLjwP%=<cu_K6AKY8^
zuTy3$7`fLgv;toq((^?vO*$uXsEqEuV=Q`B9fRdhzuuw0m-+N;bAI5R(Uy>=xV6Iw
zYkLs#Qq_fM?iB_|tf&Rv;=<x1n}XPc*2PLm3A%rnn_9t||E-N%*pUKVoIcyckZTU9
z>`3X54w+&PI+JWV|MpDa&!e6uVwRQ&R^;*!vg@8Bd^OKrK{djv)q226^kmTu`dNWA
z`}4EM{ND$w9%9@pAK!yjz;AcMKOrQ4v6BBZwpmQnvLIwd3a%;8u?vN2gRuT%t!Hs9
zY@4|O?}Bx1xS|jq$85r-K0a4jD9-S9_9h{S6=La8m)MVCNr;_QbHqKz2W`4pt3_i{
zm|1mS{J>ytQZ^S%&Y_TPWEd}vSh|p{<k(F($a5+|nd*-QF4R`V3~O6dHT8+l;rcth
z%zmg9%!<{p@qn+~d985{*(>#nhxo`$0T1w9BZJVE9ck3j(UGY*Pc;)2HASVtO#Oq2
znkQOh^!aXPO+hN$^SISEj>dh<An^{@^LNhv3)Ba(T)d^UW|b2(`Eo`>%hh9s#w7#!
zIji=T0lTGZh&4?nci10?4iZ2=FgX?@G<nS4Cg<nHT;S|5W!WXie3ub!HBt#|0=XuR
z1<mTpb^1s7#nUE!u21*JwQyX*HQ&%5U{^kB<Zg+DdhRSl@<wXKJ%uv5zvRE;0>{h4
z;kgNFoEa?5q^v48*(3UA6eK+1NlC>*KZyglG82(<58#Dk9x<hTo9(Njx+xWE!umIw
z;HPW~7j^D*AA@ha&9^+3S!iX%9751NIb7IvW-c7vJd`?1GCBq)J=wM9I#WO5jFqj?
z8$^+F5!XB}vNr0Xkg!g~B-Aw_6_YOF{cqdD1QT1=xRL8|#Utrf%>#6bqG!dr5wWy=
z<FXOabG=Jf=ECAh)3~W*ZEq{_=+}O3l^TTbfx!o<j^{1{@8qYf4$+CIA+R_|B;3s&
zyjZd$rw(-Bv3lw@OwqKONoL_^>F={}NHhq!qial;0GE_0wU@1sLcVEy<VNK&4-hhm
zIG5riXxKtauz3FbSs*pZH{Ilc1&K-Wq3px@q)=znNpqdU_2iIQTlbn*mSw|r_Z4o*
z$GWVNGvkF@I<W{+UbKY{i{DkXN->}8WgKP>n{%EAe(}nvooR7dJq8S2lYqO-uprRv
znl<C|G#AX`l-4*_BcT8(ER`cX1}Jx){u@T@D{m<8d1`^s495^v`y|xFv<4+GviqPb
zI)p_bLQR1hDp|J}B>frlzpF>G(u7xF|Fe%F{|9}{Uwr>Rhf^%Jz*d+d0dHrQv~sui
z6Jbj9%hL7jFT^pXVr6@GX<V7f-kCAYy??xMqJ-9e4%esg1`~Tk0)3L<y+7Tc&KaUd
zhD<O-_S2K-X1lf`h;fuIX%AF-78ZCWB+Zq$Sp7iIXc75wF3{Np*X_op$yXf%pSNA^
zR5s#OiytG<#&R(h6m@JHGuLK<Ua~l~@2v#aBtt7=*2-o;QRl1e$j*<Z>laxBSn{WE
z`p@mEkfvCIX`v<m^OQjMe(2J%bJ~n})U#?l0^(L#Xxups6Y>Il6m>aUCrQ1@p@;8i
zZa+r$<EcLfj`Fa^QS=mv-)``6okg7zp!pv^ZQ`L-PcXD$d>#)Ij)4m#Sv1eB)(U&-
z#l|&182Is~_6gCO5Ag$#GZowh<$y#pj}@7z-AxBfD}3PwZu39y1@)sZu9@nnSIIzQ
z<Ph3dIK(ou=|O^r=m~mhH>k~pG|}=Z_Ia>*&|=3#zXzE{IY(9k60x-hbS~V*0!AIK
zskTzq^6JJ4qzvl{6yW$p9C1w)2mxn_4~Wo0;Y{LB3l@9Uy%l)XZQL`E*bvsdbowx?
z{fbZatZ|}Nyv&+pRy++iOw8hgOR6;b1^eO1<r=xU6hv=t)GfYafy9ZMW`aGv=AMr5
zeStTkx&|BhND3mtR9Jy)=wuLWO=dKCYNdH(G*cZrHY{I+ZCK^a(nL9i+LeyP;ihJ1
z>Q0sYVnt)Td!cLYt?8gwpJni#aoUM@$1|=rf1%vb`hyGi<P*FDB?k?P7qtd4z3t~5
z5zA}!7|7efU7S^5PDwib6pM0LrPQc~{vl|f<A{NVvb_9MUQ#E!`>?lM<6>5@ctY7R
zp5uB{doKXui0?&;9EHz^2%_`+gj%+HN4_6aF~a$_qAtjsBmRd?ojMZt<ngqv63s1P
zLq0*=MyVn|l+ws=;bjqj#br@~m_J0U-CsVA%DE~TN(J0?9HpQ*Q)5kVCP}wlie0qw
z@g^tLJ)A;FeEm*2<xSal5c8a!v|ur&|FSL9;C4}gsZ?YTg(o#pwA_lMXFi4ZAygHG
z+DaXSsfQfqPOHj6Tn4xGhkUDA8#{M=)%(;<e?SrcXgm}AVwV(=L3MCOdw-`r2txC3
z2#L;!C+ZXutjzK&D2)+uD3gl|QM^un{HCZvF_;Tc<0Uq-DJFmJTWFYHx>QzGK%rRq
z`BX06o;Lh$JQSWv@Yo4|2%;{|Wp?F|!{$y3>ZRfi(Kx8i!~h2FO)--)MhOCa95rkc
z9A2n)r7+Jwfqr=-Y0;q4WiO(gPp$)cDz=opX*%K?Ho>x1oz}#roE-d!BMZ;CXRNa4
zVF;v*=ockUgVadxO!1Z2Qjg+lQ<r6J?LAk;T%d))NGKionez0<R}96=_{Q%VtZ4H@
z^<|W8)MSdv<rCg5P?Yd#()XOc4kjeUR;oc-d;e~VdF%)__-B6^PAm62aL96}6{FSp
zr$is%8si)eqrhSz?j=ohpR{D9Kv@(P7mo^~=(;C)wj$Jqn6c|{3>8WL_?kR$%Uk)I
z<~6qV+gsn{XL;sND~xHSBz}l)bf<2C;Z3$MlIpr3b(01E*gjMpR%K{J#E6(}_K%+@
zlIAaW<h)Nd#xr#g(Jgmg0DJCKMZ5-m2#*dl8L>3?R+6J<d;#zcrZG`b%QcLK9k`@9
zWfL>F`aT{ObHm!s_VgaD)c0G309jvOWiS7>DJ6EN8VLG7mDPVj_w8+L{uyO#fh{;k
z5%$Q|cV{9fxg|_Bw09Pzo88ylKJnQqyE1dJOa9i`zdk>(X-CUnh97!y*OUaeC4C&p
zUv#cf85EV$DU!hWP<;u1+-DwYff)$cNV;sEcS|;U5Etob)oNg44oNpiWu8+=!!;mF
zizTTA%LNZrOfIM|wRBL|Ye49KPDzjR=g5wWi$HhT+;`Q|r7Q9yWh0fArj3{+T<29I
zJD_Q8r0AtRqInA6-%{mJKJv_0i<|%8*vp-(IL=TvylbN@jPx{H$+`Lvf4oAQYdd~8
zj^f|MH7s#8_;f#;l>h;i6fIXGs8zFknx{HWROn{hCbv~la@aFYa$$0{iJi@z?4<?n
zg|^`nWp+vx=3xMHL0QBo7MKNBmw^&pi81g{<DQDPgjX-t6DkPN!U)v$J{5@uO*xTF
zNIlas(~x68diQ9}Hq%9H<?~cRVDkmrtFaV~t(L;*)?0ltW#bEYKk$Xa<=3}gk_l9>
zW9r+W4{Ne?rNhgtd`mmuI90AM1+<W1Uw(Kv5LU9bykWw(JEWkvH0vv-3#8>aBP@Gz
zyE4C74fT(xQjIgL|13OFSS|JL&T>s|z}W8E$&!Eef0q#^qj@7M-aQmhZz_L`YjXE$
z4KvdNPnF=?Ao(TIzb9AA=Dzq=x2li)+g<h+2U7a?a~?Y30#b|Atx2#Ysf|38j)xuN
zu_@)vWQmglgjW7qm;II2y*@EwHoE@A695^KP?DaEbG07&UeTIAEGUqwtChgx&f$UH
zbU)2nd+c)rJDn=Eg+kTv>l0$@_c>rBL;2;4?28(`G_c3RuMu&iG>jC{y`zQR7PSGQ
zocM0dq0L2;6IT^LhO&j0%6->1e5c#CE-S&GI;yzWV+bYpn<L!mCMGzFj65?C9f^(w
znIFE0R~oU;x<<+V)-5mt45cNiIoPvo?Uj&`qUE{#PMB-AYC2&NDLKLY<o1r7Uq|-a
zS15g(jqoVnDFKWsxjSUe{n!}HH_c9YvAbQ2xF{a%>$}V}ONfxzTIcrY<}1WT;UW&2
zKGNU&w-55XN?`i#ZZq2`j;qKVeZTSp2+jsVH-N*D$BWt#ER8hxu!$aZA1)mkG^4qW
zP^&KmUqWTXxS#jx7)8I&&->O<_e#4)PBQzt(PWP)1;hcmG#}vBA6~HxTE|E~qansC
zqa^X`qKsH(D`lI=F{FTG5$xtfw<=M-G_I!$h~sRYqeJ;n7p?q>4Fg;4u&SrF3)AO3
zR)QC_gts<T&Zn6XBk$|~sY*+{QsUVhnUl%(ghKri(5rtScTKspt4=$&hwZdlE6{3I
zjJfNC;|51(7QSbtL@UDfg<s*Zo}7LLR)-$y7Vs$)M@`e~yTrwKrY+7MFcVI|=5$F2
z*Mt`1N)Xl>og<2>an|1a5_u+`Ud7KnSbG*&UoPCj<(_$$hV7-*g|KVGP_kRuzpU<N
zWi-&IPT@HrhdF*vL&XWEi!^?6Q=4RJJM+8YcHS-9Hb)|+P7p1$oZe}*<%ri%>yU8v
zvs&w*y$E1on8;MtLX<6z4~FO>a#Dbk+K!~VNx{peeA_=gGp+d*q1wif!Cw}WGPm~>
z8TEZBw6-hZkr_`$%KZ3>o@|UOcMNi#z=#8`WIXDJezHqN-%8;M4VoB|Z)~{{k32nB
zw|%ykQVMl!6YlXn&q!YMTt45Fs2$&zu`t8nU&`vgnQ>+4`QHC(YX9jF%iteLbKgTO
zRiwcGHN=9s*4$~slL8g%mjs8C?fIH0UON$g_1sYUczcQ=QUaT*0SNEu1Xv%G`!Fg$
z$r-Tu4a$e@g%_4j9??xfL&6>p21}kcvbIc+oR~elxz2K~c_~ENi!J$DRQs+(4gu(a
z|HdO6rQ9s5kX)LpCmSTJqE>hbyi!hF#oMjIxKZz3!<Q9;DQ#V&Se{-A4cwvl05M7_
zT|DK%_mFE_qi!DZ8$E0~!#Lx_RR@7P_;~7CcVo_m=s=^IrUvgVQN5Rq(N@+F{B(Yl
zvRhkovhWdKalWj#MWv<)9|}4BP4R?*x0W!NMCjKARVz@n17ACo1<gR<pS#Nn=%bPr
zDCUgq%^vDb&&uX|aC8Qo=lp3Sy;ih!&XS4;wN3UY&qUt3pLTl*Jn#eR)%3G@`W|O8
zaMD07Z&-BpaM>qT29j1)RMTML#}V<*FF>3Q(+af~wHkE!)P{utV_TLS?OQoqpg3en
zf#_EgVeaeU&tlrS*4^$I0V#tu_be*>8jr^!6RL0cbtFPkoV3SqRo6=Sw({LCE=5|a
zfExBPq12Gg{IViNvCUN*Svo8@NW(tfV#A6!FOsmtfvU8w8dN3d#5@LMi?_;q%D7?M
zYeR-T%N!*^Wj7T>d*O?S7(NWv>M)>XK`M6Zu)hTadu2Av`cmLoTc2{N;vJyIVzN>Y
z3t>HjDZ=k$(MFtFWTYa&EC`Y-!1qJ8#<}&yHO}>y=qv|`eK3nEWvI?ERcq_3uax$V
zGo8kRyCt)duN=IlJxXL7(!z`1hB#;lqz%6il-eYe;?7yz?(R`kC?cy`TV)czrTY8{
zYJET1msrSQJ~g0tdCTE7bedbtzHk9O@IJ5@>+$J?YmEotxL53m)nlIfI3o>(vdq@}
zmI&dzQE>C|NaQ2i(5T*9P<$R#aU<51s!eQ*xh-LhSAd_R_T3r?S%pXSMHvSWGoI%2
z9-aFXsNW}>&(K6Cf$@dd<pqXyWm4s`HU!A9;I=#EmN!mvLZGc^lNCmKu+6x-w6lt?
z^#M?RCA5)h$ly=04uo&N{VI^^Hy>D->T(zIenRAN(2H$wh8=e9SA`;#x(7GOD%Yh|
zLFD}d2K5BpCJ+;AsVktO&rN@aw^-12FsBaSKYcrQN<p_i?Gqb9LfH+avw53ApeL11
zkrD|_*wh<c#fL9fIlVgZv9@wT7TKE_(>{RBqq6UUmWNHJ<~lgXCjUoJZhVKcbBZ>E
z?z#jl(QQ-56)VHvY}-x#J9#J#$V}`L)K*wu**hBcXT{N^SBrKzfT|&I-S(qC0p*|}
zDQ%{+dOvz$i}Em_O7y3CHNXi3#~ypgDgCAX)g{)QqXhAb|6=yB1vejpU{I+mayrgd
zyUB<S$_oy#ahprJ=!8;|-QleE!c@{;-wDK}qcF5mpRiys8aBda+#tSj4hA~rpnap~
z)7ELxY0I0keUvImcgnBiRXS!j_aD^HW(3L{8Z0%e4|3aV=QhA1zIX3mWHIf~z2HF8
zKa~g<z+#R7M+pw~vQE9&M$s`V+Sl@FyqCu1cN(l0#99t@h-r>4e_55%?%jRZ(L{mJ
zY7ZxMDUPquK~!-<X$##otgNtfljGXM%jM3lb`uIc8){sHR6=eEe;mxr%ux!~q;zSf
z-D=HXYR(JEPB=~6pBc0%)FG^V!ri(kD~i5+wY{MJclF?iv|sG*dxRzaEzbRup4Q6Z
zUn_+U|G~+&m?SN`M+eV0ouNZN(^afkrV2q6TOJDZ(;xYu^(W+1A({fGD^{}DyX%m3
zIvbLZA7Yo#XKEVjbQI(2N=KY|jCFx2a0(f;@ptz?u;03XH>0X1)|UXR@Dfy64sLHI
zr)rgMhotrXed1_(I@&QPy!1Y;u{m}MHcuLD-%N0vL}EI|nU*csU<Y!vy1;qICF3VF
z4<A({#eV-XHk1<Id*iniS@k3{?^C#E*Td4$s?YYhwV(L+00QkB0<Q`p<d<Nk2~6Mp
z^k<-*Y?5%pZ%q!KkVz*CQAII9XT<x(PdGoY((^h|yF#wRTG%MJL;JiX=nzeS>(P3R
zGGt+`vLq0lSXmOO{vTdXCzb_Y%?~HP3GFTglF_yw7q{))sTooXoniw;jEzFRUt|5|
z74qwM=z9)kIxJd>J0B7@fA^-lj;l#4P-CgNa$S)l=G9hbG}T=vs_P|C2QC^`X9dHU
zOw&9fhm9qdQbMWgks}L8JxpTvU`2{57Wf(LST!Xdnc}$FV~$@e(W(~v8ND_ez5YlZ
zU2|V%h>W)qx@)Fwl?kp-xLT9(4z`Xt;X!E#zgogVi|jSGMSEA$yZP|BVdKhwkYG@i
zXlI@k1*ws>iDVtmx9fV2eygZI<ZL8~aKnp!+tZN)bpHuH_jmpl^#7YG^?i@`{~>}E
zZ(|+21sVXL=jY$7@%{Bl2P6BxmgN3J{%Vtocuj+9{Kg&SX12K>Iy9BNT^bl89Lu>S
z31gbu`@`Uqwvlsly&{E@i$*<_ur2K{eI_FPR1HH^$yRr3%~rSPg^kYPi-q&au#=6>
z+|1O5*{y7bDThw>wtG0fms+<$TJ^Sf+7R{o8mdXAH!XGvEh~1i<MZyEo`1Mq=KPM2
z&&`!dw@$8Sv7_l+p{vXZDp>B<>w_MMIDI!;-wl%djxVXF2ELa3^Tr+<ofx|+GRpo@
z3ovMg%0~wUk+HCvZVbWpic-sPQiC8*t(CayVlQ_fXJJD#Fim&wLB-CF<wrTp^qwla
zb*kh9RM3<k?pM2r%wTKyap>oud>6%(7riaMjxHDJi~}6;LkH;sM~M$Ez!}EZi2$!V
zS}DPT0|Cg}8IIy~N2mzRxL`Awy`3;?0dU6DTE*yFX`iSp#7xH}MCue2DH9)Bb`*wF
zhe)UGJpaST&&MhUx$T$?RluCdC|{7OskaG?4e@Ew<@LTrVmDuDa{kXfT&K|(svcc0
zQaaCNQX?^hmEIb)aZw;y1hjd?3hCS4y(8ahsQh2UtyyoXwWQMDH%jD(aXlvQ7<mAa
z@TM+^Ror$usWWFEf8Ze{>-5!tG0kM7*S+j{k!++sZlHINWPMnVLo4lBZ)VD~2Trrt
zO$gy<L>a_qW24r-!=7p|jS$=&4~kZ*9?Lkod=_=gX*LFIVM!~qEl@fjg7|G~*O97w
zu-z)L6pjnEFk-ZhYl(|Z6TjeygWW=(_ohyh_HdEs<ron!r3}^=srgBZ0o;_x09l*t
z^T|28&_O^QK^KMcDl}Dtq#`D+d(9BGJ?OTLuVtjK?vm4n7WE=Sib*FIT%CFH*YQXf
z=9Pz6ApN8vPMT$bMkj8jCsCzyYbzUeZ(zleZ}7Vdi@;y+V-pP3C`kD5<OW{$g?pI0
z@xt6`s65KjDptVHwc_s8<7#&?RLJNznE-@t1hUTp;iJe)G@;KD_CXfuKYGkE(z2d4
z15h2;i!QegKWC(C5!Nel+vb0y?5eMT`U!W*ZecJJegP@YvwagBBPvdJ<?VT-_xM{P
z*PHkJxPL{H&!k6^OWsOjnV-^boh-`?HLqd#j}Ma~!Jp>5fV92KwV(RC&xxsoJ73}^
zfC)g&0BqsTxd_m|I~DWT39~v@TXE9$ar4fH)2Weu%wls2jdh@NX6>n%rKIt%!BUM|
z@;hUUv*aGz({HhR=eo8L7}zSl1ilo`Q9}pESdR(cM0y(&Zd?cPvp`lP)Rq$LS!L`&
z8Y}{Iv94<Z59Kwdi$C4w{yAmr78u*TF25FBJxEAJ0^841u@5*pNwU1kBX1xUmC?mx
z7E5HyTez{?(tK8qjXBG{Q9x)dIzepX5amMcHm5*2cf6}3k`_@n<xs)~4Z?t6ZqCzl
z9fO1!XZ+Ch*Fc3xsTX08*0RH)7F#!mIseS29Gsw?1>}{~Y6yElHVmgUIH}mcbM^5X
zDcoAS2qz<p5_`1i`G_smz4j@Zx%ra7{v;0j>LCl7Z=UZdfR}Wm5c+!8!dKMAUYD``
z%;JC50e&?3+*QUsR_L}HmYo%(0_T<kW8HvILGT<8848GSdi*%of!0EZ{|ExBxTL7K
z-Rrrrq;^9kh70Ts0L){_%4+&PSKAeV|H^6Mwuo{9+b(hT^ds9O>#O_PrQIr(c*h%w
z;6oW4ZoA#Y<~8q}1D8v7&3l!u3+c1=gy9+J^=c&V3+b<C51-42(hJb*BkJ*G*0<!s
zA?#8Dg)0M-72lVgrkm7b+HegAn%hUqn_{tLNe4L~5vS<@^<tp{^V3nZpS2VrsynU%
z!`gFYIyJSYCBB3itLUl~@9Fo1b^ocR)XU8R?KN|_G9)@3NXZl$*(g^npd2u-8#X3K
zGZMb~G&8T*PPCo&Ryl4IN*PprW1+G(phXv=inRvoR^OhbJpQOF8ke$TDe6_W#Rk@$
z-sNLM`1Df30*PHtiqaA!+mJmrycy6ldzdF<Ck%VkArR=IxH&UflaF>^sTmk*$GpUu
z`1~fiM}NcGumW!?=_`-Lx@2l;GN#nLnf(#qTORr-_yu8%?K>W#%f8kn%9TuCsSd7|
z-ZPo!K>l_5AhET&qyJ%58^ZpQ%xj3*af`g&92;Msfx(p2T`#C*#P{t9oKe=gwLrYX
zW}C<%)l@TIXe_}KV9TIseh6apj8!F`c^D8_^?J+haO!Kx=6agadg2ONgs?WR?YO|3
zCu8N$v9EF%um@jiLaOU&c|P4ZpwyY^HB%JBdv=P<fh6qePV91ZO!6yYmZ|kERm|(7
zecSMKJrC32EwzpZc+$e^wIAF^`)Oie@rFAlTI-8~*jkaeEvj&U!^hN$GT5)s{5~G)
zif?w>L!z!|YMcxkkKkum6ngvGo7|5mzkxQnYljzpPkRrtkLtdrRLxLTE9<Ez$|L4{
znczJL3Z^zFoxtCu4g=f4<<)M@Yh70IBh~Z&nbRFES76R`{aKI0+O>a6aW|aAhB95E
z0JdaAzfkG?og;0R+i3|@^-Og^Q2E3nF-kFip~MVOy<e4X4HxXysmU?PM@Fz1DNCcy
zyEY>HYT?^h2*@50nEo+5((<G^FtPY^q|GsBgYFWFvpT#++BUp)orHVCBKSv=b9xzf
z8Pi=T>OAJmz4B)g!F!ktHmavu^v}$0T50gFT*W*f(j@;J<06Qw(lHe-Wm@W2=q40i
z*yTy6#Mj<Hex+iW$+5R%3Y$lHHMLw;1R<Ko^=7KpZlKIPbgw0UEY85Ena5RO>`^%R
zBD834O{f#7on$-a)84CrH0?C!0Fqf;nxM?rV@n;>&XBJ6e0=TseIyo})$2{8PZ4Y~
zP9)_Q(0U0Ta}UkTh=CI&p9%Qs%AyL-g{pZc;vTP`jMaY4@b5-VB{L=YQyO~rx4ITz
zRY)<YUKbtLLuemId-sLqe0Lr6L2edx&u)V|7vz{WIBAG3F=nufh=x9z%d1RWq7ybP
zAQ$l&w9F~eWDRz**^kJlMS<?P;fIvZ9bTB}uR<6vBnwanB34#zR@M0aAM+Jkj7-}e
zBAQWVC}M+kyfgUHB(uNp*&RfMBs&pcBMY2rg9d9}uo6=M3hn+Fi1hxcQdn0)42)A=
zJd9VCVBeeZeVv8LP5wm|kfIaCZ_BEQJ;qrx+bsV^GN`5<$QTM5Ay}aD<5vkxgH4h8
zC6>%Je61RrV<${CZQ#0-Q9XKvrho5cB21dJ6cKCgG;(xbE2s<ifbb_%qni5(L~KeV
zP#ob#E9ZPyW^&o(gnEJoLF2q#8*+pxq_E9P`BBadNtNPqHgz`<MvxXRBmx4F8Pg25
zpv(s>kmD3RJr$2V7I8$ePQv$+$VoEy4Oo|%jB}#G337W!w0PQ?>~34|GtmfxV^L@W
z&(sAi5`g{vD}2H5GXn(%?)W=8g@cT8$PBs=LID~_>+GLD86KD2<tdm~Bq4|54s8%l
z3W@Th?@N-v8<Epb0h@c-xJCwLAfxpgDLjl4sp-#Ny^J$*g+x-j+)V<<nmc5gdADO}
zp>f_XK{?LtftC3DL;L%oXx+$;OB`iX;p7E55lC5OyKwp<@VM}^0r~BY#T4jfeYLNv
zmZkoOD{Vvjj2zfzGakTgzt=1<$x3bmNw)w`%ol4qoDR}R9b2L_ME4CYk0;7jizOzo
zM`O09mhWznAPTLrX|a3T%j1)f^4L}42Poamx_Y7)L<DPKyHP9;HOjxjJql1W0QpaB
z^OOC)j&rnh=zSx3V<YsP?=Ki}`2!GbIB|5Y7@<56@6na=m$1*66^ZsGF+HTdcrNt;
zIjOWqpZq9!yGC=0Jd?ENeBsSkN4;4KQyc@pb?8Qxoa`X5jUBgbbGF4u!o;i&jOz00
zsoEWZ!WNB;?>^ZQi}E?=H7kRI)2bYXda>Vj-2${eZPlI!ST?|rhG|DE8Svkn#6miH
z5MDEMmPg+TnTx7#z0JvJ+f@Q5^58Zc{#11mq)l-G23OI6)jFP&@iSX0sc)l-AnQLV
zfPBIbwnRe14HDinqfusf22mA;+wEC;&lvtzljK@dAUh%S96e}{WB_69wwAWpYcwN^
zrWBQRntK_&HvFtdwI%P5Jwb4_wy?Bz05=|!*JxVqFM~n+Gg1haKl^JXs#|PuZZ*>N
zM&85M4Lzp5M5;vM!IuT@LH$E&*A5J~Jp#q?9l+7Lx;mZ~nbn3wIu)6&b(>jwSkNr-
zM#O11ZqULPJR0=nwMnR8Wl=Z*GgiHx&tjD)JxVD~%wJP8_7pazfm63}ImQFciE{kw
zJH#+&Y;x=0bkf0#!8E&X`ab=4t0RALBI)l;OJg%jqrY1nsgmdaFW+g6Dg>+$g>6ju
z0@DnOf)JUlsq6?FC{<*XWl89k3nHN1V!5p;lJL!xtFdznh)s~L2K*SuFFMjjNO7n`
zjO3tL_8Des{9MR-Zj}Z#^&habzH7F%?R1d=jG0@4)paCPkh#D-ob3m((jo?(&0<40
zmT|^*OtSSixf%EFUY<ev^&^<d>0B?BjrvONXroA^^O;wTK?A{*u>w|ZuwXkZe0|oX
zeF;dCf|Cdw>^ido?c3jW;bho()7QFGp}S>%Vz{pEgTsUj8s@VMSId&SwNUk{PZ9?5
zR{P~Fi%lnfN%TDrm!Lq7a7IzF_e>F5Ml`;TyR%}zcvv5W?kaNM>PF?=l(fA~v;C+|
zN(nyjB!<9Z@#|M#4vNfqz6Q{15|~dq@q&Z1N2Z%Z!7b3dRWdHl<f2u^&eoK{2%lpk
zGhYVjW6`_Zu_aDCq0gGD*!3n(JFIQXZ~gr1baMOM?l5M?8&BuIOEIgHS#f*cn)f~I
z-<%lv-~5)^z{cA6?~`DXRQ|sdx4Ri(du&d#4zJKPK<h*3p~zyfIekGD@JOK*O(F%n
zGPa@EuWruxdScR(2zjEZo6DVz0gp4+nSdXe<>m#0_C`B{vp3^{?>Cs5Rcx6mn%del
z+X2d7w+sD^&6Gux;Kjl}Pz`mr{V}U;+*kzg`qe`dB?lNwjfR;2ph)e+;1THYl0EJr
z^lp_0$6N7HKsD_I8mRR1(Lln!(;Os$;NvS9DS?yxg0;|7f#vE2j!hJoTTagVj#Mxg
zlzRp<<ER~ccYOS`UmA%lXU_jl9Hy?ephQ}=&`my9UQ#|Z<kGHLCJdrS`xTj}9o;p{
z7Rac+QqT8bSHtQIEtQ9)kXY#}QBh<}tO^oM#CH`Mswf`jxobq2+7Sw)iAvFhVBePH
z`jZWvsO0EsTK84&a-ev`kS4jwcuEh_64(qf<Zjk9@+(j(f@9!VRbnAZp`SyuRgjH}
z4)#6mR5~ac8%6E<^JwV2sV+^fU~w&4EWtr5O;tkK(a5iae);tVh~Q=xC_GHYT|iw5
z6rb?5|DFL`pj{sW^!elQE~WKJ2kv^$C}|F5lh4QY_H=PP<s*#Kos~D_NB1?R>z7@f
z>F9O#zIrJ>w56I`Tfx&QEn4AYH8FpG0NMdI-V+MYZ8KqaXL|N$T4s*$)cw5UjUCEf
zkRr?5(kBwV;bl-zyd>WcBtE-2E{?1-g7)&ukxq<`=M6!=kb^%Lj(_TXXZ9T(aJ*P|
zbTvv!*f?8OB9;Y9#BQrRY&55+Sc<0wtT1dGFFDdU!5p?g&nQ9KQ^>XCHDmCy%{Ce6
z7h04ZVj$;Q_6%taou4I+o^{^O{HewviGiQuZS<)c_+?rwUxaTrh89y$<`7#${R*}z
zyp#;UXe^P<vB{8(ID^{uR{_?WBZFQ0EcD$h8P|;24ehlbEaIC(yp|aOq+A1}^Zr{3
zi9cZai8sV>A84(*Y{Vp=Y;Oh}g_o`3Q7z2~>M<^1r%~p4<HuJ9OI8MB*0QE(st-->
z=1&&ShohzsBS@=Cab}7B?8M}z5}L&I=EjiVZ8N847^<*^RZ2bq(Bts<Y>M+!#H?ZG
zl#M@BKTuPeU!K?btFND}v5cCfF>8;$Uso9t!|7ysjYrS@u-dvL<uZ;zu0Moh^67{4
znSFeH8{13c|H?)mJC8P^T&j5$&siB1-ldUX>&qaj>5uXV-w?VV{R0a$%&)F2e>U|A
zcK-V#HGJ2Uw{@n_#kxsX%gHAqGUisKylFkdqujoSi?rjphcWR@i}`Cod;+VaMXhZ)
zrbm6vL<RvXX@ldFCL5Rf@dkjVt%|aT&XkV8ff8W*Pd>Rchh8{-0oy_;vK+QBjatmA
zG=)83?d**fSAI+Ap4FB6?~LsbUi58(&<NGhG^W;QI;b<`k^@M54G-wt=pF!8-uFAc
zk$}84{D20SRrT#t*U25c3cDmp^i$kz^~ApL9dDsG*dLhdLAGPF6V>L0XlaUg=cW8^
z!_ccJgP=hgTU@e+^P2tU6%rH3HRhqqzI4{kfXl(1NBhP6Q^8Tw(UQ%-mG<|4kT%Mg
z8~EjZc)@PA?d%A^3!-MNF|*$$xfx+G_F^#Agkqj+zBaYUm16{FCDG`WRoP`hx5Dxj
znN<y-bQpmQ%wiomL%UIbc(+BlWFQwNm62cvMm_~UXcM$5bEP@9TaHk;pxy*=j=|fC
zubhSN&Kl3u{_zB*o7S830(@TGTY(ofE)x)G{SrsQH21%6AF96x6<-VL4v2rB@<%2n
z6?$TkvTn9))x{bJWh`8`(`2x4Q(N((D#ZWQSnpB(7(KiJd!!-w<wE?FjQYA=k4{#h
zD4ggLbAq>=NqTG(*dD`7ml7=NWPlL|=W4yVTB)dI2vLQH+1|lfbbM#4U{&L#54>+d
zO%=1=F;5UqY{00rmVD%<t$QGX?RISE?Z+*E-k)QMh&XtG*1aNl)xs>be_?vy($7&V
z?x0ac%;HAde)aLMyp{hQjRMz`3a#`FAudpV69W1#2+=bzFtT<0d-#Y_{xA5b*0FQ)
z6J|hSH|x-oUj1QqYBki!6w0kD{1<$v{TF<Q#Qg;yx00(ch~Y!+oIEa`m(mG#zy_^~
z8zK=(Ry+3(XSgvsnVFve<LLt-(c^>qu*>QnlTc8oT~$de=$cG0>oY%qSl4a6rpKZE
zz%6JXX<%scQizvzpL8*5{8Ix9blD^rd}GQ(lK+B_u5b9T(98V^1NJF*J>?%OSK4d=
zoB$HiRNDjuNB5&p_vb>Dk?F)t=NddxcWe<*#xzZdO2i2sWBGEZGNeIM>qV8Et2R)B
zV|8;gqe;T3d)E}wW?w4FFL&mf5Rx4ZHLEqyNm6+xblmwiDAOP$YKz=?^CC4UWj_N5
zIxhWuIR%2e<0#XBw2mgfH4$VNf$Gee+Ww6W<)LgRiMQBmkXW>EEwOQ@LAv)9X18N(
zs0PR^OXsn~eY#BoIc-Vpx^8~Fh;Wq}?QZBcN=UYBqZQyU2sI|J(GW6*g^4WCXw3Z|
zU$pndf;Gd^=+<AJY<EL{6iO>U&2)&A<C#P1drtx_KCD0xqQj5bL8*vB#!n_0zT8-H
z{Cz~C6|<Z=v4!L6Cc^!#VT%O5lUMC=gr6i5vtc$|SV*Xc;)Qew1i*t!j%E$$go}2X
zuk_t9Cu%uf`>_paEX1G$5{wy~eM-Ypsm&{~Ovyzhem+Pg@9&QIAEIS9)7atH85>a9
z)EQ=wK;a=?MHvMjC=Dos8fa+lv(67XzMKs%zTI(qMQy`4|5@9(@K>*NU0Z?CCj6XQ
zYo1sq)~M<c{B{E~bf_2mvXE<j(C3gwgXotIg4!$6cTp&inHTFt_FVCL;gH=hlv70d
z%6L4xG{Dgf9llBgw@ugtN$6RwO^w$f-i{yS(9xU^yujW!*YJ4xyzVxj$|I#GB+MfT
z>1rv$|1!M>9TZ0z`ys$YsIx!_*Ncfk7J_m~QIZ3M(N3D}#niTc=E|<K-`#whyf;C)
zM>HdvodZ++N6oFT2|0-@b#ROMHhDfX41sZD(V{-WuBg_GPU{QMrD~8{;A4n&t6y9z
z@!sO)#ywp}*5}J-M0hfyqx0_13-%WLC2LG@elW;`FRnU<1!zb7Aqt7DMj=m*7*=tL
z*tq=e0Jr$#98!lqnx*H-aAGi#UrV>dCt-A6TXG|e`V>(V&v~8Gq**`V{w7sX-!b;~
zYu_><evAU^wLmS<cR~JaKd@DNY?UQ*I*2=4Oy7wtMj_S>7(j!HDQ`KGmQE_QHH7Vg
zyh=q_=)_Df5VXuD<zQsf>r$eYCNViR9_MdCWF~`IkV^$+mkdcw(2}8PG`1f!TVl;5
zfH^TsJU#ASW3Qc@r5ncr*U)py_7bL|7KuWP*uCTLU<6ATqu&`$TT90hr|r6dB-aN@
zXDy^A`T#7MnXC00g^13^dD8E70w^bQ$9}v?R^JzL2(|)Kq74y77h6k4QA;u}CC5j^
z03-cUmp)790oXNRx<h=fXGYB9$r9AZ0h5Dd^Ai|{y98c58~q&hq6jgO!gQVVBHvm1
zS$t>|PFSgw*SsDg-_XZ>bqf3>U>7oRaoO`-uYafno3i7#1J7FHlKDxP$ujO1Dh5T%
z8B<Swm8gygmmLHBzIzbjW_KMH$G1X`*(6l*8J)#JxZehVOLQtH+=N>!EM+=kAHpoS
zKx`ThuNcgFzk!&wd7N+MZp^Z}SNy9;YgL;v>JI!-cyON9P-6bma^v?tyX?P3_Uy%%
zYqAzDaO3S=!phoKKp;x_emz+cJ#%do(d@H>jr`893g*n?de-!N?k<1$827*T{7qam
z^?~2qP2js||6f=C|0>vjc?tj1L@P^Cx}ls6{(GWj>~n^UM^-B(<_iu1j4+7pZ+{>u
zoEW3?mFaOdDYYmyxofn@?ls4LvT%aSy9uSAQOhfZCGwkqB=kCG8_w^i|LYu6pOuoY
zAD>(-vu%Yy!eqSfSp?uH3#*HVU^L_|nm{+m0*#0RsD)~+sxMv`AGQaR6etuC+2Oh{
zA1ni>x3!T7#8gSaPdG<G(A%sh_{s}065+@_u~55<5X61E&cnEg$_wCtQVckzL{N`s
z4qtfaFB;Pzr{Zh<HME-bK(TEEHnjjI24E8Pxwt95Vg$*pKlf2PJ+(d(UqzbFS|>e;
zP(74cqE|yb5m2F|7EkVYIW>`fH8enqNNfPd(%UL`*n+*L>CP$rO&>H`b5i&1vOQxM
zCL(Y<O2pa8IrH}o%hNcH17zrjFrF_%t%?;Ejg(jEzp&@)B>3{!sKY6YWgLt;s7l&*
zz+LE%t@PELoOgfAdJIxKn2CcDA9Hs`$e~wJK|-r1CAIQyrjvJs80uQ<z~7m3{}0OE
zF*?(2+ZL|awr$%+#TDDOZ6_7msaO@;wpp>AitXgSYn`+2`SxnxTKn7|^Y7c*`?NVm
zpQDd4dbiH=PS7d_kI;^;a#d&>A8xBGQCklVbL4Z)DPc>xi0SNJ$R;T0sb(le8+7!W
zDE9EP{2^T04#w&56ZwX5Y(V2RWL~V0qM3*d9DOHqC&TriddQZjb}W0wrV*j!ZLi*<
zS^gAMc1^7L;{ZGbEg7lqqGg)i%&5I|cZ|0=(iG*z(~B*(_V(JrH?-}m8yj;}{*o-C
zKB0e7^1@J1|CSzx6n`*O(}=yGxb2*eX>SP%AH3mFju%^`EqX{B+`f$*_z(Fs;2pow
z?aU|$*ujAAN7TT2{@mTux-a%$y)(a)$m_p$YeOtF^Rzy<#9WK9&9MWtwU97$I&|^%
zIMv`8+R;K4<oGRZT6Y}kbk-k3PZ%*V9IM?ZfYbTGo?y#5#w)&HX!26kC#$l-VP9vQ
zg{46nc4Bl6b1lbsjN{})Z|272J9p@&pA8yrhOL~qV>e~KHmaXT_3wH|U0K{8Lk>{u
ztoG5fDHmM`oQBRPvn*+$RTirBB&QQRCT#M4`+YK%M^BUevabDI#;(bYp!^wFWV|UI
zv5ZODmYdsVSB?tM#Ta4}vd3H^?R7adP}4N;qLa)k;G?xM(hBFBNEoeP(wnwNhuv;4
zdGkG&(G~U3eOo+UBNp|-Ot6L_@Gu+~&sltF2ohVu%IxUUN=$>)LqTG>yQF$X`S<YV
z4_l&V2dqAM07Cq4T|@srB|Sh@@;`K~lM|$!@&!@<&}u%TgIP#BHbigE^Dxi&IxezI
zBtb$*Oi9@7D?^@Gn6M&KZJWdYtE7wDjkk*+7){oXvFtD~nqYC+4{aEC78MN>JTN@a
z*33i%KlQPlIO5VNOr;P~XW0UhHuCy*-OaREsZ<BqO#KMjVQvlR!mQ*ut8RR#1v_77
zt8m|0hU%F3%l%V5N&PGrW}U>t@96gyo<rrNYM3ti*2YTH&4$XEMYSfYGVfqK(vQV&
zqmK9MatplGAjTO|0y*a!c^(;8<mEZ$1D!znIxkRcAE4+=jcghymzRD4YzxczkQYCC
zX;9}?uZW8oyz=0{U5V{q{J#o{5_5HO3r3|~5Sv3%U^IlAq8G%(-~q8%{oXVz;tc)q
zV<=*N54J+UR9Ljy?!9b1c+4@JY<WC;#;GmZj&$Dh{evam+#Lf<C-BwU$9zkvJJj(r
zH6rkG!%=S>ObCSZQat%U@|%jqaW;;ws;MU&)ndnyfpau<-ICi5WvUUnC<TcDuH_7K
zG=e+g7|kU>ctAP^BQjfa=(dt+VQo;tn&vr$3z-=b88wZwc7PUv$g;4tb2s9!rDj(w
zL_;S`1(mE$zzmDD8uE9jz8G+9XXfX@!G-CKX)!1X4rz_@hnEW>BjGX<8&@Y+2gb~C
z96ogWZ{x=ivO$|Vsdf>kHvGV|B37s05Er?9Kp;GiYr&d>!PRrfEJmZ|3v$w}nh)o{
z32Pfy&bT<bC458ud@gokbzc9}L;jyCVZF3~jtOupi2$JUw^lfR+)85;CnHA-dwLri
zr+?xNLzHv?TBoQ!Kl}!ZvIodrcKCq5M-^*{Eyj?02|^Mrwc5Z{;c-ntfBvv4X^?yx
z6Ip+CxZpeD#1pAaWUIg_lcKCeS5=k6hMQt<Ebl#UDZuC(qBMb5v=d6NMAZ&B^r{HZ
zB3&1^q%~qUHA=&R={ut-Yau}GzhTnZ_i&}9D(ilxf;e%Nzl79Pw6$qXR##$i(KWqY
zb1RRH9lVkD?FOzISIU6TdEKM^`Z};>26qHnHwbS9i``J`RkaYSXSkZD`&=h1`|cay
zA`6zx20T7QTmaMz)Pr+CZr{^$9ECe(^z2h7RdNL$@k{CV&UZ(1HYC3xD2+D)No#Lx
zM(MgNa?$!{Y6e16j9aWI`s&q}d&vAd5&YhfODrLW9D4nXsl&)5+XDY@Ia;RiW$TxK
z=GHgkZPYm0u>{v=R@obG-{vd6Byz!<q>wQ!cO+}!UL3~^+8c-^{ncq}5;X85)&!-g
zFSF1Xg5YBrVy5qGeV33-HId`x)?My?aOYg(3GG>dODLMy-O!mQz-3C5-&Z&6+u>%6
zD5ExmTMmWw4_3F5eo?M&hYGn{HcXp;dorSYC_Wn;_K1RexQ9gaV<$y?q<oH{FM1MX
zRBi*^W7(2Fy^U%g;JHV+ZlNezb1+?;e1dOlU&m4!MaIW>q=Z|1DFP|uFz-hLvdda|
zwd?!z%BM8+x%c4##gQOLBU1nBJq+F3Hr6f<xu~|$EL0P)9{?2y2Z}(8ct-K>NzyR=
zk^~6AVaEf`-^z3UaUK6vv;MQ9r%s%#Ri7YY=;bR7IByfUOam%W7$RMWCbrCp4-N%)
z&5EoUh2p2ru)fW8-8lc{Ff32Nee=0z*bL~_oUc9&DsRL7j7%;xEg=xDm=Hp5X8b;5
zj#>I|nurIb{>x14n0nF>c1B2X$teSP<c#eFU2FD7MwO+N!nsU0ig1ywoHb^1aDGG9
z1NXAd4Enj1x(w4;C%*Z?An~Tvu?5Hr!nsW?EX>|EAN>Ro4B2;>NSgU#8$gG4deAV1
ze(B)%%NHeLn8pS5Uf%qvgTmn{Wtp#H4DK)A#)HW8(7(M<afK0*ya^URI7<)9c7yAn
zXLKWB+*&Og_{PhgKz6Pl`u#=bV8<QVk{b}{Jb=lmfBd>m06y8)#OOb80+s*62{_e=
z-5B%8MH)nB0_z@D0Y#D9uiJ>>K-P(BSQ`T<<zn4g04Jcx;0x8nz;;8tftS<nbrFJp
z&v)FPOxqk$?F6!i!QhLRl@sk3U^2B`Y`lA63*Ri|Yxq6D!o;!c4iUg9!*J&s^s*}D
zXmE=X_GR1#Lrp4{ijJYC;idJJ^-vg8v!8*9_&?SK%65Pe!6|1T#f-LwMq$7%rv@j3
zxA=?Njs*@A8(fXZ+V)zdVUvCb8%h2?%PD^AC@udaoPuuc>%->d#bITvsR})-SQQQM
z&9eV~gf<X5bug6lV#w<0?TsrnA#`d;`O9-3KKi$FXzL29IsZ+Ef}h|~am`Mk-7c^c
z*%I}pe|(%2A^a6pDD&cgJbhz;dZE0ONw`4E5G&ij_p;smWnwh#ig;8ebu?y=+|*N?
z9>(6o$MiBf^O!6~<8P3~kRlYw1htx=enK;hUu+q_gwEK%3|m8yxYuiM#tik>&$n4i
z0tcP$*ar(}lZqwRp__;QY*p#a6@<UC%Wo=*XFo|CdMje5O6`C9)m6G(?xR5#cXl@;
zXW;l+mvN1x^xFa~83b)pa*UZCv!k_DYjcw}Wk#fKx3Bo~?YZ8pb8*-5<;9af=tsgF
ztaQ_f2mY&J8uCa9kTdE2!0oX|5Z?Z<Wp=Q?p8$la#3c&Ds1cY?f^SQXyB=Q;0&_@_
zGxm*@Mz=Ld1}>J4tPO|mBGE7Ka}OlD<tkdLjWs*<kFE;H*Yoyg?_pyV6M`YLqv_hD
zz4}+gmwTwQ)?>?Oj=T6uN+!JrIYp5KLx`*iRc&r4vPlujG)N&+4akW2Q>FytUs&of
z+h|cBG<nl<A1Q^`@B1?^9rd=~YnqN8*_=gyscmf?^qFAJ;v1;n!TFEn-wQ=~7ARV8
zG82iibhE&L-nNl1cpob7vADT+u-L)h*mUS~vbB8Lel8+SRb5-TM;k3c%cV(p90H#m
zS760}dflbowo_7ZqL8mLt|ylffVzkm@K1<#^l3-`)F#+Q+=IN0qNvs3<&@<ii)3Yq
z|7G{Ss%7rtH-)}bz4f)Zeudb%^*ouI+Bj<wf+Pd9ZxJupsDp0>l*6oLg5w&bA5X|9
zz*)5=4ArVHf7ES7v6yW=#tOQ56H~o>nX!&*s>_(uPI;w7vBYvweJ`9^64PJ}4ya>b
z%%w<MTDyd^DLc{4z0+PZHe>H+&$z#0ZS)4Y(0TOt+!=D=&w9v%CgpqFWn&4|wJ`lX
z!pUE6hqkUGIGY*|T@I0{Z!XPSLZG&uZk?y0O$Cq=_-v!E?##hK4|cR*;3u#{jm5W0
zs@#{zLLMl5lR|c%+)t(a&@bm)h*{no8c*A)lU&+hwt>fF{iky|G5{_$C1fdv0FA?C
zS>X8qg4dN`*+wyJSvjk{?t+jNJ5!gwoH*M4zLYKiEG(2g0+|6Z@!7pzUm$p<zH8@k
z#rp-ne#K$g+qqZ$BsOP;@H8|s;@qkWh^A(2xT>9eo#inmC%id_A;2wV;8OpautuVD
z_v}f%BCW4|=vK#P0ltmWFt0A`a_1WXISWBf5Xl9@=eUyD!;P0(xbRyQ*s2##l~l>J
zwvndk5YdJ`W>RJ(p6gnBRfu$vJ}WS!*KAe!iXqaDoL9I!bus}b{|?PLc;~NBn=5H5
zU!A7krck_+;qM;~&qmOlGd>tAlAX@Se6Q68<Bi5vMkGWs7!fgbb>I|U&>#65Sm}ne
zeKl|N=Z7zZzj{5tQd7Sr>}yHUpGQ0&zQg=G=&^6I*AV~!59^P2*gwt38rj$x|0gvB
zn|Psb06o@_%V)F{SJCW-Xku22urgQ&!L<f_q@Tj4DdDVTyQsB(v577wjP&PDKejNI
zvU?7to3h0zE6Y?sDl1=Ve`nu~VH1(pB+~)k>y)6WUb%u|8Dsfeq1SCZ)N+QD&8Vu1
zRkAwDXFx-aFApm-Br6m@I|Y2bfel6jRSEVb(iMLn!>t?%sx-0>hwE2NW0=nIV}VdY
zJR!!MfOizkIUsw677Cp4$%mPx9J>34_JyY))`4TuLtSvCUYa<PVd^5$nP2N7aqyi^
z;OGSJEBu><T=EY$$)8MfkMKgjhqw>6w2+^l?fHH%oy1k!-ITa+XEJcC^s6&6h#aZl
zeL(18seS}}MP3)^v{x-@Ex~IdKKx`tp)L6Q%j-96ci(CrpoWVF`1=3&`u)Fn_|NYR
zzUWDS7%pP)rEf$4t`@|bT0|bi9;hed!ayg6O1yPIKHD63gWZ;mxzmb?Sy%ST&QlS6
zImZlYMP_s9vVy<MrZLYQYT#^E52!Be)X>jK7S#yYIthZ&f%5Mw1mPI&b7KriEtRJ~
z6QY8oe=9+6hCwYE>h&ptW)65U4NJ&mbnv?NUxjOz>Pb{IZ+FKx-7l&L*(oN~eKdg*
z+!oWWGFAVuN;kPBWuTCZmaFF?Y2~8a%n!I>5gQ&SGnwyR-e8mDmfh&TTV)el!GG<4
z7kv1Ov)I0d6{IFW;VKU5e^<o**Ny$Bf+1RE%WjVy)^}R3*94(4Xu|e#7(c^Ru=>;=
zScs<quV%-UQCTadv7SsMKl3p3<C27oOLi5WQvj4*%!gFK*Z5`y)YRVgC0eB%d}m{4
zb~xww$gIVRRQpkJYm<J*&FUkbtZ&6Xx|Tkuz9|H!YkOOq+k(J2841ydPKBy55e>F2
z0o@*=818FajRQ7bi3RvoDpoEE&J4JLeS$-c0=(rfskqppGo+-@IcJ~pV0y9&G<JO6
zKG8TubH+!?5sf&nZUf2}{ci|O9lYHwZJn4lQ?MyB)CV&^UxAYIUeQ5sI>Bq*hCRA;
zt64<YIG0R^s&4G5Vh@brT<Kbm5+yINID_OYetk#3NNL_)sm+bs#6^S~eBQ_rvv96d
zC3HTx-H+{sCfF?b9vYt|dK}e{REVMKj7-)@2>PaQQin$kMFCG^Qg@iDlc;Gid$DGS
z)!OiI4pMbJ2_l#9ja*7eQPjSVp|5I;D=E5$vEVUmT5oQ&8zt9l1~<of8{snS<#xEh
zO%MHp_UUnmIIGXu^=+sB^>N<*?&JpBbRkQr<;AFVy;cE!u#?#-&0q<_ixkC_j2|4P
z#F(rAe^Q8!oCupg!N6E|+(p=j3b+Vtb|sBka{jo&QevvQ+Lwk~39iyv%t}<n{#$~D
zWK+e$y)(R061>>f{HXynMadh^@57P{Iuk{T1ytgU4u%RcmHWk{Ij$nL+Jmkozf+60
zWnCRCR>9Q3gA=YYp94~5)SXb`VyY}(J@A4#&JcT!*O;qkSX(mqcS?~G2~6IZ1%wo$
z*MSGb*#$cCRzm5K8~fC?fk)RnB(hl7J}C(wr1iVIXlq0K9b@tF?<pb_A+D^0zy=!<
z`0j!G$ZY4-KS*z&fFwfhJaX@P*Do8>&cd5i8>TMEaFszSQx)Sr0|+L?c_q5ZF_+VC
zXe1*Cml3KADzUIntwo<naW`z%;HF>Fw6?!rMhOl07Z*q(RK<8iLq1cw&XJ2-a>{<q
znjFsJOEna`b$g3I(FJUCgNcN><8PKAZ5tvv>1A*EB|QBMyp8yYLZWG3Sm{~TPi-50
za^w)}h^VkDNJGEt`9&!uC_2++96H&kC>JWobEb=7rD?O0dbymr05>Uy<laxXRB~+8
zu$IOhP36FdNw2{nob_HdgFElh`RhKeLML{*4*Refcq&_k38Jv9)&^T$#(czyjB@B_
zsuc&X{JM!I^nn`jWqP0)B^?2hyh{R-Pi*j}wZ^rWM=_My6!uLPwCKwH6LREnDeOk<
zTQ}#_W7i&a+K1&`q)9)5&Afz;ooBJ{XBvVfjfv1R`TpzfGRM&P^~%Rx;Bn#-Z!Di%
zG}dZFMyP9l?fkp&F_B09T#z@(nXBwMMCFodo{abBv!1`Qe=?Rm#ci9dMPMSI*SgEj
z)?S=7s9y&fWxAVHOG_&iZ)M1S=kJKN*mBp%Ch1L<${U3|2(74D@N%MOqO>36f88Rz
zt;PYy2BdnDKM(E~JAg5hlan<a6Fn0>qX~fCu(5Mu_>+EfHgL8uqPMgEM>qLf1b|ok
z^|dpw;)`I!IKh}3d;~1yH3SUMUrMgJ7da$xK*<#f_a73bk+sDiMpFNIkf-v026^sh
zR2+3^EFyeL*MNVVI`?+8NMzXza{pO%0S0-f+I#;T<Z;|5wNbKu*_PPfaJppp4$g<!
zqr9jVQ4Iq!jQ}6}V`utX4J{_ECHd6!(UtD#H(EAE3mKwh{N6&^ohVG!ET+kYP!keR
z;tH;B=`*xJ;>I!oCp}3Q(7@bhUVXltz)yrYr3o~MbAkm}J86MdBOasvK5`m1{xA|I
zDyh6kR6%qcAz+V;_@uI+Bgv9+oI*D*5xG}Elyu8)#@sx7IgMtT?9j8!f0SH9_TS&2
zkwv^im>PYt#MaJTNoT<;$K#bxN0`I_+ZzTykw*)3FCpmX>P9g;h&gNV(d@X*@QDqj
zHvEL19(4;9_nqhW`f_txAdkruPMskw;wdp<uZ&P0K2Cu61#)QhbJeu_tT;Q<ro$NH
zqOS>zq=nzSA<0lg<Z;|g<7HH;Gv2EEgN_(JT!%4R-P_(!z{{RH!VDPDONKulepoFC
zr+S5n#x|Hw^Pf91zq9G$LZDwhj=mY96SEww+t|8AViG@EO6NtpfpozbN6fyDEHjv7
zB!w&-9z<e%{p#~oPpTF?N@x^JB;PD-PdCyixlR~#4V;wYE|oW|XCsMu6gVGGcq<Yo
zkN%zL?N~^}{T>@$*uK}iRqOkMt((X<U8AZr-WhNhaiTLBs)=6B(Iks#3uBc%tIQq(
zF#+7mWev%}8yngQOPV)_bfTUbw(g*Y6mejbbe>jM)n=fY&}ys~G=v&a%~zHb3R#O6
z9R@CZjK(U2uH1A(bt-ESRZrF{;Rm`-HGxz|ej%HQl-pZQIxZCQDoplr!2W^6D$#?a
z6<1&TXq0INCqrT*e7KdnlLv23M`X!u;>yX*>vPPv!+Hh>gY1Ek-RG-el*8kE|AI{j
zqwOo`I}>ju&{}iq(@R8#9R71pp2pUWZ=I53p&BnlS20$<iceD;#x&_fKhB~hs1Nn%
z{K8`MqdV+uk66gVcJd9}C<zQ2`7SM=YtH;C6uO5qklkYIjZW3>3(Z_z(Y1t_NZj#`
z8dKdP?FFW_t6U~~rV><LX5v?J+URExsLl~=*P6EyY*Ei3YfRqgnzh5FiJJQ!1I5W~
zRewFi-cChR;F~Yp%dYURN{?p2RKa9I?5IUPEh7iI{PykTAK80Ubz!xC1bGVL8?~p9
zS5Zt+TgIs27=aFJvbe#;StYAy@$N^RuFjQ{$s<C-Vpc^SHtR*TidUtTwXgLToi`*}
z#1;x)u*K4fIgN@%$rT0>C30w4q+H&8Tkb8C!TNE_$^;vyaNF1;Yvy8tRh$@K66yWw
zOoBPg<btiXCnvQ{-I2Xm)%=^85FVHGY1O7I_W0FGA&q?ZJ5YveDaPc6CNYo_f_dKT
zmrbeNP4WiCT&yY*tGYl)N`_LAcxe#j0hh)tbUU-_eZ$u9Y18p~gvutQL0IZ`DNVto
zG|4zj@?YGWwzdrz^4_jp#0+tmj`A`jnRCmp1xmt|gw4|pKU~T}%tXAL+tQ{mj%=#Q
z5auk%-8Lzf+m&8mvPW1HD1@!FRp0c=HfJk)oEO9#N4vi9gnD#P*Mdt5K>L(moCCe+
z{YLr}G9QD*xGv16GsNH}9hx`~ALwLG^<t{TDe%F3y)=~$-%dTa@p0zlep*(TiD|uV
zv0|ty=I@Kx89E?bcjX4v{AMRhoZsE9RT=ku6B@VO6oG@jY;3U;$6+l?eyg{MH`i)7
zao>ME#m*gB%hnoxo|E{+Z-0>j!hdot$1t5uYFqnK=kWvV-zzZQ_X>_m05E(44#7WF
zVE<WjT{dPM8kh-I?D0L~Y`yd|H;|E#I?9VG+nIcsU1aY1`mre{x4gslf-f}yl^fYP
z{QxXRsVNCHi6l@F7X+B!rV{#$2mvzD(589PB9Hu*mgJNA+eIjr_>Qi1RMJZ$Q|iqQ
zu)$dQ?nP=YrCZYFRj2w%Z}Ej5WRiATn_dTCD_S6zR5eg)t|{#F!g;;_aNXam?Cr;k
zq&2zRcG-+y6O-zrAe3yLQz>_U=U)bhu~mvxi2z@K;Xgv8xq+jJ@&6touY2)@UV8Ck
zgsQYZ<Q0x`NBj}}NTL3Ml%WK#bszwwECY~}f9p*02SEQfQW`j#{qxAuzvxMTZ}Dx7
zs4L1JKxv)<oPOE_w9YA^Z7rtt2T=ak$kKlSWgS_G<Wk;;zE(;5QOtBF6YhgPq>;u3
zRo4U@uK*|S>Tvaz!4H-+6&Y<E*&X50ZVkij2KH8EPtX!Epj6}Bodk<wTXk;0#B0XQ
zpX{U<fSm+Pyy^-G_I0V9A&7s;F@`hoh7iUsWh22&bb`ZTz^qvdR{4XSOi}4Iif2@J
z0O-yE{Kpg2{k79DlZ}+CFCd`_B<2HUr-u@6%Oy$X>r}&29Bokb7DA;P)DUs%#-q#b
z#u>FMRY|^^&9q@kHo|5r9LKVZ$!g?!E}y=Si775n1*w5jq!hflNFNdj7cVsHA@X+}
zI~c^l(F4Drl$+E+NaE9A!e8&0&b*dDJU#DOgNt--Bg<{S?K!tWh-lz^+FPrPbm{l;
zsY5EMMsmM;yI;Kxs!<FLi0(b>G0IHXNHg>JoetV?aW9C$Oo<oHQh<R^Z_jim3gc7<
ze1ZW)cA|21yW=Fa_Z2f!8FX>+?l~MH;1q#hgZFbM=%9V#;`Ph*`8y*L0$B|56Abu@
zd-b<Bnv#6p77eeiwBt?5$0FRzK<ZZ4I=p%Kd@!O*%o1;(ja)~Bg2gwHyE}HNOQ2zJ
zDR_9ST;=rL{M^3K+e~`=n!JAD!tE2Qs9|aNE{0v6q+Tk`n_t{!xv(Jn>MWTqF4~S@
zG>jbHeaEt_e+vuD%p34t;0k*;N?oCt2)3$U{*&+6Z(Gx7qiRDWbn+_mgZM>VN2}*f
zLy9EeyE94Wmg^fdeAlUKKI)4DoGvlQx7I9eUGYVJL*t@?iW@-zL>y$_6r`N$oiD1e
z)MO~d7M2#0Vq&=FCj*qCguS*l3{AH?-@-A2V$5hg`o$)>p?>VNDA2@6#?aszN?Mym
zSE={0{IJG+%##Pzs;UV}sB=6BDLj9j`i(%@iXd_EfVbk!|F&upF34kP>uOEHr$Hr)
zdJ3Yy+k||5ZtRRAOt3~fEw}BVHVPN|4sjDky9GiMw{?lS_SJ!IU&<Quli=RxG86^r
zN!pCpSld2(Ed{s1!y9o>s~oZ^v_0v)1o#sCupcVy;vMnBxSfh#No7dP0fMvMT4&F_
ztR8mhimiV9GL-7ah7ek&Hb~<JqSSX7D41k637C`tHnd9cHT2a<%H|(xxR*e(K>C6r
zqC{@)1oE74MY{c@GFU%vml*{`CR2f5Egj6@hDu1PG1`KjDnoH%4x2NZr=+)wZR)=i
z6yXd5X>6bMcTZ|%;&}Q}!|bV_?M5WA)34eki-I*J$A29O<w&SdW3sW}4K-}JTk$kh
z(wS)@lmdYrI8Q^U=SV!h+w(@(kvmMy$uJig!%BL9HwBtCq86H)F%NH6!w0Q<)^HM|
zjl&_P%pauQP4M8?oZR4aR0|H(P}8JbtIxk(ap!K&cq%{%B9%SJ@Cn50DX(<69pQZx
zXC=F0t)li-Eo%n&r{cQc>(vuP#u(r+K%WUk#42tD(+p0Ze(lg$5{uwiZrKmCNeCNL
zZ>39Zd1GD~wNSx1pI`RlNEd;;Ji3j%vUk2JLL)ps+J0*B(d_`#vNY%=_<b9%5B~JN
zTB#s&%~>wwTfouP91)<+it9B!=+YozO+kkv&Tpv*3^M746O;XW_bU?UJLZm9r(>f5
z7zQH0q<VTCF1sEX{vG8e*eckx01DS2i2otO{@2nx-G9um+5cUN{P-io4!ItrvYz{s
z$p)~xfP+*iEnmdt(SVBOTUQ}d#VMcZkN9ojNsiWKH=PFe#Kb-hg&|zZ1zjLH??|B|
zL@=m<>%x8mO!!^X(5k}PLX#ifLV3&I*rDUJ&`wHGZ-kB024P{DrvYjaKIxa^aBo@n
ziC|NxBw_<-nSR;Blw8@q6g6v?moI)}$T!D8!L0I@;=U6RRuUdV{x*iHnA^aH=@?kC
zq7(X)lVjYEwjGI_$b^?N!DC22F%b5l{o;yU*s=7Yi*FUk=IfM?>2_8rebun(XLW^)
zM{G@G@}|Lq?mahBTOcayyOhTRSg@bY@6^br<$dg(S!*D*g{Q!#3t*wiQmMy!C29zP
zOuq^aC_)aP1l=20yH)JaCthRFrz8i@k=T_I=x)eV@7(mew_Ax4$BG8VL9ct_irB4R
zB3#8ra?+q2?w08mro5-E-;ulGd174v3mDzY>uYw>UblW~YjiD=@6>gB){`hEtyV=b
zh$Wqm@k)UdFU-S$64B#27+m$Vn$HWQ8RH6eM4&off4+Xp;raTB3&by{Dq*q>thrI2
z%JA)*){*PUIY5m4n7(6=*}rNOhN9V>&NdGxQ&uDp($j&idFpcPZoWJbBL_z=9vg%4
zoim*i%cK;O%pUoRU79PEMzrG?){p*CRXuC9D|7R~^mI6ApU^!0(+5LlgbjrduKw}l
z2A*uG*1YrjX7cQQoje$nVvU9cn>y&G$fd;bt^Q~8hhg)FJy*4Y6+>^nt~TwcE>jr@
z|CCK!fsS2IvDC_QM9+tcq2ItUUc-3yC0Yeue!8Fd&O0K7aUZLM-6Y9~p(azHDcFS;
zMa37HGXoyTb3{+9KQx}MGrPC}bLS!KSh|9j4e20!76Gsv7C57^`*6AUKdhp&s{2JE
zTy`+tQ_aCrie!iHXvuUbSU02y9znW8cij48lKMES7FTdSqT>oyXd51gNNDhiL)`8_
zT8XyzlCHc#MATV+YB0?!_cW49A%kmjGeOVB>*IKtWghLgh4XXs#MjPY(MvTs^>C>7
zE@bQxeFa;*<*YMN!=OE+ifs;mRi+H;lvj`4?XbTSp7B&B(!}Fl0SWfGCY=06k>ln-
zq-MLJ^W?K;hujZdnK&r23i58T?bcf|tQ&QNab>7BnjE(o@P;`1RUgan8PCuMRWDdO
zlCJGDXgs!x8Od7UJSh+r=ZEgf>5@gDd)#273h4Nf&d3K!x*Lku0C*xfZOFADYd^6G
z%;Gw|0!48N%%wWLP;pIy6)^*cj96&EKmrU>3=@-5sCk&M?Bi6U`5H}}iHWt;;LBz@
z$&Ra6b9HF9klTDIqt`EMtzz%aDCr`^x48VKW-^T1A?i-Z>f!q5{8~Ld@n7%!EI#|8
zk7O+UHMQvvO_&_feJ2O63Sf6bLA25+Ex*Wq-Q56Oy5vQ<tn9dfV1qym3HY0pmRN0z
z3r5|!S7FXQX1F`Z1)yi0o!3Ooy;A2`Y2t%yd9pKzWJr1Mv;4VOOm@sjW^gG`u!rpf
zOQ#kQP}7iOfER4b`dev3RgB1An$P3pPehqyOPi9Mxm}n%0vo;7wP&I->m|%_e-j4{
zPnz3`rA8wm$q$3|+(Zh*wsOLsxnCq!c2siBJ;(GqD7O6^OEAhsuZy@i=d{4H!ew#D
z$dfD)><F)OrlF4LUy~@XN#V<_nVQ@YWmkzSWn~`jJ6C4gX>*c<#O9Vw<ti#es?Qx;
zF~p*C0OsZC2_|<bf{U}lm~Lyf;B@mv3E0TS+r!#T<}@i}6iwzR31@&X+S#OJri$$8
zhL?|nWZ;zhy;<!-XjGW%CseA?drpbI;|^{?wSKI7*=!1CK~|R!f`RAmGkX^9C7Sy^
z-^aI$1>Qq-MLif}ssw1;zl~$)io#1L#PEK3F@|pgx#yR83Ml8~;T%g}SD^{Q!t}AT
z!*N8ne0z0smy5|-*A5p+?1MG&wS0jAhY^yv0FcA5Ar@BuP2bt8Feb8O(V|deGp~D{
zb4OwzUJ63iE1z))E#%FHiKYaa5z*nA_(lnKcG1q#5W8(j)1~vUb7f6+!@0(+H1J%9
zMo7h2;;&KP*3?L%v6&MMS#ng4>Bsi>>)I~2h8;Ro>;7mLS6wlh<R0(~(b%t_!2gb1
z{YPdsy@0v7Z-DxM_@C-CfH4EW=k-6#&1EOG))jCghC2P&J*=W))W->gB1Kd`d)<Yt
zU(v^@Uj`O<KbTm^!jW-BEBm0A)B^}S5eO`T#Ya^7k?w=3_aZ~iq&@{PGo@@rlLqjY
z1N9;<sDn&>)pVzd5^LiCDv<K6etDW0r4K}g3MgBwzXQUqs0<GzgzKSWmSG@+mN*!3
zalx|A){fTQS!8CSPGP}7njZ%JjKN{<DC<RELW%&U7Uo#f%Eb}Oz_F$y)6PX{xE;O2
z%umpRFvjxy)G2ju&T=}vqVIx%8cV|QS0tLS2J>eDabp*7XF8zNYBc$!UN5wj;Q_jJ
z>^D;O8Tk>G^#Zej0QDiB^C|qehvy{KaDwVJ&3bK%Dvqw5?cV}~Ua|Hur>hdrh}a?l
z)RW>*<6qsPe0qu>fCRT+lXxLceVKEftH_kC3-AX7Gy2-#oRax5NPTZ&Yb<nxNpv_<
zd!%PCKCrerOv=)n`F<h_f7fGpQM333qZ)|VUqL-ffQ7{sLf3&=(a)9Av?%woA&j0f
zjPCuy)w4bt7x~u9g52rY!Q+0B@|P5CdMAH6p&sxS6E9CK28Y#cY2Qy*hBs^Jm=~AC
z`bMay8~A-S2k7$!Ov`{Wh?F+8A}2HW@jcw=wvTv6KjJ`*^>%e<iYjLOm<N3jGT1yc
z4xBC@92_CaNcD(y(dLMFP4V=U{hg8FyCMzTm7M(9b&Bb7G-jM2zM@xZJI*yE=;DjB
z^sUJaWB!45`&vy&JP2wjQwJAKaC(0{tAs|rh-z`JHeN+bjs|h7j#U#;gamiS=jcRJ
z5V>C@JTCh!tFmJF^MdLqMIZ(sT4v+ht%P}F7!PmDQSESU>F4aEH)?k7GGEq7;DjW;
z2*rJT$$WXw_##9`2s!cVG-<^4=g9_?-ezl~r=1|ih)ZW^zybJ#QcT_&SVJoQ!)@4@
zu9#{mL0jn@gvTqXKCjX!3JFKSNWEtmSIUo?lw1zxqZz)A`g_6eDlP?2S&4V5N|T{6
znVkOONeJsK28ky>%=mUle<8otM}m!5*l6lz&hzQrV!0lEEg8Hoho-^{9~G5^YHLfS
z;^)s668hzT$gH{CG)v2nBmc|ERo;49Hv8;(ng<f0sF^8N>L<^J;RC3b@`iJ~uTMui
z2eE@2wVRDen`r%)uv0mjBhlc|6^t?HLg<aImQgcX4Y!*UUxL{Uc%@A(ld}(lU$+M?
zYvEoH=ep53d|?hA{qfuKIqYO`MH-WDK7+urR~Jf0%f4t=X0^?wCxL#7-9sdG``up;
zyZ=ZI|Nr)BxPO-%?5&KPn3(?`6sCA*y9Pi3DaRWihW59u;s5?sdn-p113+i~pZc7g
zDi(IDf{5=^)oF-qb$DaHL@Z;ZAd#p7$svW4ODih|b@%9o+E;Z%<dZ))vDQT6Kn|p>
zpw6;AZVx8|EZotqa%p~PMrv5+ZCJB!HD^{%+oL!Ew%hPxAs82KI1p%^nQ^3Te$PlE
zV=DLuAaQ6jc&L9R-o+00F9{8cD<WFbZ#GZp1B1sZC#(6r2y|f#4$~B>tT_TpfsX?N
z5--7d_3BRpLmVPVuS~3tZLbc6bF@z;D~Vi#y1&2-$`V}8rmzzb$F;Iux7LpR$j(l}
z5^bHws2XWu8ZzJxH=(F)UCB%lJ!IMVQ@Wxzt&sk{LIIR*%<*@v4k@IaGIba+TmtRB
zy{R>&G2cg<mDGUql4>10s$R$0wq`dn6M{^+Y?oAjP;JkUJ?2CEUcYL4sj`ze2%!#f
z<Fal%_g&8&ZK)6<%bkb2dRwvpTF>dO;|vIcV##yaqt7wIYbVduLRK}*+Ih(##uadt
zjRXFcbDPiSOCM2KBtH0&JsTD*G{>kA+Yie|7?2{210zs)s(>J;r(@wf|0)TKU@`b6
zn8<1&7sKVK9RCa@A%ATTmk6x-1a8o><2RPdwvt%fH(m7-6>R*QOGgMF^iY0j<hO~!
zAv{gYl7V}15`lQyJCIIQ)t3gOle1abz-$SF0HjI(0S3PY-#kIS$~O8ejO0tYq7pWG
zj1UqhrXn}+qNQBpH9e5Un3MjdtH`OBcww<dVmqLyKvC?NMY>-Qn2+EZ3%Uu7ouchF
zMeql;{3Vbg&oBw^ZB9r<#)GWCMZ`=dZO*olY%n*?YmbN4IY!9x{Yc#AwI`kOUJpM5
z4!d8z?NNX&l%+b(U@P-Y<5<=jr-<ZKUpK798eC>}_hldXeixR<S8vGKx9iGW8#W_0
zmwOeJxgr2+gG7#pWSqt)yW73uNnGP)Kk`Y5>YYVO^8k{q54j!lwXW0K^YWqS^hgot
zW8wt<y21+vWcF=k*4_JzKmU<(6O>*f!2z~1z}}78{l#lx-IRN<BROpBFFWoA`e{j-
zfRUGV0I2^h;rD+d%+1ll+2o%?tWn9&YK;-`eJf`-gV|mNonn()y&YESI+yiSxGpBS
z5>thLSQAfL!f~DPWy7s*gPu+YGYD(#$+xrJ>l-`>0x)MhV7;BW88KSCAa&OK4V?c7
zG6yv!auC&2^Fz>fr=_lS!4z^>49H1MUq1%?9($e$h^wM(TOC^_k6LL#zga(m9kk2o
zp>06d57M5BM!gm;X-?Q=W@lL&b3`=2zZo|fOaVBRMg>yUF<5iC1L#tp8*xf1ZYf29
zxxl&6LEgA!0^Hiu6FG-r*DEJJnY=+6vwYCSB&5(2ZlbMiUDE`<zozOmuMjVaDpZl7
zzlri}5$n)ZMc(t+<28R@ESb22g&oZ?t=sR6df?tjFASSnn~y-S@>AZSf0EOYi2+uh
zC>%3*Wo6XR54SPXF?wQ--j-28b5|{?>s8-#6r#sTyw*R;W$X0>NQXeKgb6gA+p^+m
zoHjjsFcq;BXT71T8ls>X(SD(+QAgxAMybOBw<vg5e^@6J?p@xXi&`=3{gk(1fGf7(
zWnT>$eqdW!V~vC-s|by$44n%!nN~boOxB~<$|(UK;Z9}EM~l-s+vSBn8LcdeDk`85
z%R8jmbMv_N{(+iM1hs@?VzRqWpNe3>(Ue1#CU^+xN>kAtU2QJ2ar$V$9B><X;(Wwk
zyC~XJPQI-gfDuYgAPCXq1vX68m@`O#GDjziJI^|sYtiw3@so8iUxuonK3jb4o`r64
zVi(KSHP5&s4!l`jVnVXSat@c!x;4D2jZb$r?3B%%yekaXW=kvU0%=>XX3^QPVS_+F
zp=7sd?pvW7H9I6!8+W4d&!AP=i~5@`*PF$qPmwLZA1uT>nm1*ACx=gKAHNc0NM5=-
zzkw}CR3tNU-&}P3dGr4Vv4#o;k5~aD`yc0TpR@mc^Z#?lL0(!!iG+!n@Q)TYA;2)l
z+QJCX!M3w?f`(QD1dX$aEuo<Yp^~$Ss|le5py_RAOAr0`2>Q1IjYc;AFV3T%*K<@U
z0Qf|K{D;5z$4>%|o{6o|KS#EYicRb;JL1O=J*KY$tfH(2)xS^L)>Ky&<uuW3)oOea
zsWr$QkehpBtdG>4-99^6Vn85FFreb2ay)paJL1WZNEzqPH%ETDUU_o+yiT5;{K9ds
z09$Vsu3Um~XM7=u=V>|Du8fx5X|m84gGX2GgT56)r9wtp5<V2xP!KGEHt6vYn!o#s
znCO7&U*G_Jm3pB+{+QbkGzGou(AXe9ChqS(CUz=FJ#yb<L#o#5pY7a8fxsF-dIWtp
z<N)dv-0YR#hav1)H@IQ_;mb#0t?CB80&S5UpE)HN{Q=%W(!JWcsB5-j+bqpyS<@uh
zSXQ@51>-okYJ(GOrjSHdlY*J=@6yzvH6>KKe#Yc_J<y3Iq$ioop+mGCCYau6n7JsR
z!#UFYa1+273Qt^yTP*uC4Zo%A25O&;BaZax#sJqR>WhHD)`m!+r(f`6Hyt{Pg!54h
zgDr`Rd;9g3KzF7u0u(gs#Xy&DNA~;J#nvDwCW-KVT_Z)@isPiICRg5iHZ>b*={BgK
z1GZ3y8b^FHzy-0_daGQdK)Yz(8Cn}{#y(88P^G>b-=1s{qMYnW^(QoK-E8CO@UJ&l
zEXI|cy1E^-5c}X@uYQ#%46r@fpe-q!v$D$QVV{cIUlD8>7!#@TEWZ&|p7#*B9{3qb
z6TPWPe*#t<XiZ`a5DbDrjnLANdBk-vV=F3>7^zZxSp(v+;0o)4pU^x2{k5mEhIxN9
zgz!8@gj=$HQdHR9C@JK`HPR%PRe`J-&uKFcg(=u)#)|@MJx4tVnfY`nLAw+1_%PF&
z&lmj;<zH;F-q^wjuXj+oa6L`+F6(O)oh{ceOz^VySBrEs(YZeUG@}A8=VD;UZYrCP
z#e=maLs%mdxnYXpW~I`a_l>u~U`%az@LryCx+N&g`*AOpEfDO1nyj=yr1^NWZik=P
zfr4dTju@*#KT{*vE7EqR5OoAR79N1?M{1Q((mp?WpbgR~2byWO_OIRNV#h`YN3PE%
z-{HBeexIjOyB07?{D8S;D0>1i`{q7Z!`0lUsf!mn;#6@Gd=5D#uMu?x1$EALe=Q)u
z0a#Kyfs0=Hn(odR8Vk`}H^}5>VvYCVgSEiK0nRbiF-`pI7USY+%Tk`B0{U_YG=Pp~
zZJR(ar$G93*3DK%gWq;@b8%Y8j?eC1gb3m4OQE6r7xsztkUBrp8|gz+30X7q$kxnb
zr@OzbuPT#_68~ZCl?Gs#|2C=pE8>j-+im~&T=r460qha|5%CT*daI?R8>EQV{;W;D
zX^SyG!3IbRN2IHwi5f}PG}Pcec-&(8kB?Q$6ulW@FMoJVS>Ou6nze0Ww^HNbMvL3&
z;zz^l^&cVcC`DV=ru9r56QuEQ+Gv+W%WgOP)SrSvKQy0RH;hL_G?F!r88ZZmrk?SC
zg($YvnK3hB0DS<5>S?sqr)vU4`w;P7i=w9b7&OqOV+EcBSgY<*GAi}gWeGLUt1l>m
zj(LJxoI<^UeW!FHvjHT0%lo_5-i?@U?BzHj<{=GJBbh^zvd`ebdmVGFtN0}+ruCAn
z_xd);=Jir*g{%#UNwzu)?$}}$urQKj#I$oKgU+yEho)Ly${i@1A`T3NW97wy?ilj(
z*h`Yn2C*c1Ywz%^p?LAiF=>fErwRHhZix1a7!ik^Tku35k!CLU1}VbJ4j%3AO_;HS
zD{vm|?Ku>~=D#C+K3LwN8~&bc!Fzo=rOnidsUCeqY38Y_KOyFsAIo#Zuq-1g9&-b3
z;SY*(b4T`&juRt~AVyIU`%GqMU2Hr@=<~VtP_<An{vnoq9k(#n-kJ0Cqkz&q4ctjX
zx(%<zvNfsI9#R-h9>-&ROPeWv+9S`vkW8s%R2}pEM>0(ad7i>u=nPBe1#)Zf2ap-;
zTf865IqM84z`k?Ans*ZRSE7Rb5bgt)4W>DMBLN<*o~^lC7Q*j}fF-;_jkO*!+noMe
zlcwai7cdCeJLBE~oW!j%=jg=<G~hwdUQf1WrB}dm?ay`6i>dP+$)88`*-#><TRIq_
zv(P5J$qjsoNfMJ@Z3QC~vsyxzs#242t>w=1Fh6h9_uZ@JZhQJkLWM{11JDSLe=C`Y
z2(%l}gxZQb!@yZyH8{QrM?HxS?S<)%GWoxDTSz0<I*xa_+!bS6np(s1DdkD6LUCfq
zd8_F}ZrnUIz;Z2{j&tva<!;S(O-`nO$Kzo0c7Rn*y0I_&Km~>ky56WQZi-8}8yk!f
zqzB%CphfTSxl+tt9{)wigGVLaj~xJ|QUECZ+e-9bf#qajX3PA~p;f73@a>OhG9a{^
z_2x>Yr3z(ntP`P6!z}5P=`urEshGd7xl5mqxKiR>ZMnJP63#HQ!a*Hxbb3ATtW_&)
z3w;^RUzcc_U>kV<XkT*h`=rY{K$VjoJGy0(DSDDrf(w#568?z@E(XLhpQ|s9mYm88
z6F*`fts&K#kEP68fP4p%kxw6Bmw*Rx<}Bjxq|h5-?GFQ&oFDr2NTxRs4fR+>N*XRo
zgj&_47xEibMfwz7Yk>nP)ea#&s}Q4*dn=PNCT1ZSPHapV#jQc2Qhvfn3R4kTdnqf*
zGDCp*e5#es&mc<8>ZLqEI4QKexbafkh^#EerE=h%_#-i(iGopcX3)WutZTB1?Cq2j
zpaFKVBIX{os1mVcg{N)vf`qERxA_#|HpMj<WhtdA%q33lA)niT5tG#*Rtn_6FG1r~
zZs$NBxY2S%f|CS00P%?RAVK99{uvCJmgAYe?(UQBFu@{ae!&$++nvy@;?cYDE8NKL
z<3k|S0`?ns=5H}zOG&3ldXSLv>M;6E3}qU&pELDXZZ^mXCQww+Z#vN5hr1Mgm*@mC
z$wCM<62@f9#0=r%8EjS-v*}TD?Azofz^-`ixq>;b<q){*=KWWI-}vTd8}ptupy|Fq
zoFh*17WYdMQ_)9m4@8Y|*zi$w>G_$PPwpabg*WArpAP*p%#d=GWPKOr@Y~apkkWFV
zhK&Byuz33{<j?a=S8Z2lPR+zwu2<&au&I8WM+$zCvYVZLlFNUw%)qgFdH1wJ_+;L!
zKX_iT=1l8}hAR$QSuvm4<Y7M72AedDGZB=`;IXSIR+hBw+>hzE-$PmcW*HZo)%oJ@
z>DuI0e|qs_;+EGz7PZ^ItSS1dh^|3X`c2#3X0Z+m%=C!>7q?(yQ}LInZDvAVk@CYr
z{cfhV<(_p;%etYGZz!m<Kc))uV`(0Gq^t<$Y$Y2{?qq{UgS>2Mop)ZUY!vcak3*_i
zeXAvtxRa2(sSl@41W;ssuf%=!<eDh*z{?WEPBQS07uQUq?@!q|jy5Atv-m1(*F1E<
zV(oZ%H^19ayM+ca>?#c5ZWSbXt=QTh*6ntSTrR%;We&dUvi-Xipl+4<CwAzMnEWFi
zO&tHT$6nHCT{$Om=p*mo29GT!3tmTQ$N;6_vOi=0lz%!LIDC-D%S|gDo(j^&>WP}T
z_+j<i&Ew^CKt$-7UcxSNAu$x<!PhrggWy6nI>}s4RDCf-)R8Yk1`|0_c3ie0K$Vi4
zxgL}TCSL;(pT3lzke~PXhxil_hC`a$p}Wrh^q1)3im9roBnV@VMtw~_nJixH`GgA1
zrKt1M-Sem5??k7!qE$u@luhk@7XV75q-d7aD7o4)Tf6;6tr$)AypE@-anIaXn^o0R
zah8U93FBZ+{e(0c3;FaJAp{3<CR4uuRwkjOx_5Xk6-ibRkXY>xR}vgzGq)N{j9mDc
zRK6SXRC(@c-wm;X8&=xWsHi{kz6Ju)5}#?&%$Eok=ba!gX?FR2fZ>EiCsJM8go1g3
zU;H3pb$gf<Vnj?7B#IT}4ja^U)o-Ip%w1Q}#%D+w5ANQcnfei?-jLm(JuABTVAC>4
zpqQaCJKODWV)aDx0z+i|_PAK}gp4(nG-Hwrw$wLvwhdtnQO0!&x>%0(o4Z~Oc|J;J
zTPY0!m*Am&j93w>`&|+Ct4&>rwu3mG8n9HqU=~HFh?`w&om}F6+bkZ}qwNLW6XzFy
zRRPx#qnS6%G^%nEgD<KuqT<1Zq5+gUS;DnMs37lKeiQ5b;@AhnHHRz+Hmj}GPb-TG
z$4!`XehH%?DDsGH=jL3Y2!mMbtwO;QChF+O57}dvgrDgM8~qXFLAm}_7u|Z9s6XXc
zc^4H=yD5v|s$v9wb;4S!vx=-JuX+>_+2f-5!_eX$lcFh2W7j|za|wJadS2BjPHrf1
zH4yn}9DTDq2eY~#?<(nFg3jqnGG_}strz=l@%sfrs9FNWtXqjEA2;N9)A*4?@Z5E;
z)N37@wloE^8+XJDAlxgkI97<2f4R+DzPUaK7iTwF{cPEE=ox>0fBLG*4Jomy;7WCf
z4{bD#Ic9yOaJ{6rKp=sp^`U3)_X*N?8lb0!vB7WGEkpJKafaya4}MtU#Kp=$(N{J+
z-61!`VmP7u^pJm8yY`hY{(!P<E}~29^6ONFZ5C_VZ}0Lqa_u%XE>o;u(cG;*v9Lxe
zMqb#Adj_;graWUi&+^H4nLkR}LL-gMDt587<y^{1;iTh4?$SEP4~t4f<?dvenr)TF
zv9&8_e~?vTJ+j!CpFPCHLXee``-(B!e<|cI{gNX{E;(y{sCi%U)qS=h@-wPW4&AKM
zDP}QuxriZSy)FPFer5SS%xsq<8>K9XF(TgA8+Yx2zcPQm^eAr{p1L~T@b~7ybxgU;
zuSq7@#5YpNiKL68Ad12Q40tm#1Ip3eZpU8j5G4}cItL6lK9I0l5^~v8uiDJH<Vd<M
zq*z`70n|~4eGpcJ4P({7qztZmV+X3Njx3>*L=OJb;SM#EOy`5tW#Lz4J`w_N2_^0$
z)+H^-=`1hAmwGqIVSi`R!nC8=8ifzwXkg4&U6Y;E<|~&Y-OOLPSa#MY9_w*7d@%Ia
zC-2`^v|=;a13hPU9wjELttxb+f1J&|%R^EJeA9!K-D#lDHe3ZX`llC7TC^4$5l1zd
zZSt*Z#%-TzJI`^Gk2;9vd{`E`l&WNjYPUcKLSjbI;-BDz%|=oj+BrIdm4G;2#Pua2
zzep1ZIB(>4oOOm6HF#ILG2~Zo^{^Knny8P9P(1>bYlY@0zU$=dMBcd=Q^4@>ta1F-
zyXOMd5J3ZC+1v{2?~;h}=85Pd_hokKszt}>#q_4Xj*yz6S*kh+MCyXW<~OaaTAOEP
zKSoz%(9z-hG#LC4O*0bnt`2v$jrsYcDe7v8{5=cAz_W(+3B&OdqrCesGmoG(U{IU@
z8ipHi{&x57Ux}RF+5I1v0-UC%X(T6UX6edkB^nheB`Yas8Ac>0CiZrrCF$rDt{5aH
zVE}6b_78BXkW(_#(y|Knp~u_6e;I@{DJE+i0lfE$0q?!P-O~Qod(ZfP#hvW2{>h!F
z@yCgio!|lY(i75c5UMsbm%Dl-#u0P4VvAUQZF1W9{qVuV5;H$Hw^5qBd(AT4@vV+D
z5Y)771E;kNuOm~g`+0Zc?tJM=9j3)DM6>enO8;&v-`Re?RTC$(Pj<d10hN|E1nn?r
z`w!|wJ4INdH&00$)BZEh;)Nz$k`uaTmJ{qr$*so3OMX?z4D7l^Q?t~VM36T*--Qq@
z$#ac8p-izyu5C3DB12G-8O-w>GZ3q9jqi`n!w+j;j`6MP8zEB{v$$yK(<p5>Im-o(
z9^8{(Q;iSQ<F4&GKbgR-GL<uB7imn0vKn01z;`rIP542|tsR<20$_&6uu*!`jR=)3
z9xy}P4KagSfcvA&A9@;*{X=^f+pJpLq@a4ghhu$Tx%u8hAda4-<lWIbT}Yi71M@`R
zlKLmbqTNCXpjbi}L+Jq&ON!vnG~Kk7Bos<3Q$oqBt3N509D>UWqTY2MgiF8dX^J>=
z=XZO1tFl-M-;VZ&F+Xp%cXVW#Y_8;Ld^^)_)JK6oS(c<fSr$W;i3UgERvr}#3C15N
zUp#C;ue&;9;1hlt;Pl16{B}s+qTOC0uyty9cJjrk$rFJY^61R~|HQGW>2G4ke|&p(
z)L_lH?n_m`SYWW+tA6)M*(PO_^Euc^J*JW`tV<yKKb*aDaOK_BHJWtCwy|T|cE{-0
zwr$(CZQEwYwr#VM&dqb)b6<UR&hy>7tM;zspH<oQ%UW~HF~=Ii!T*;?Yb@b}LEd0>
zZg!-ovh^2@f@bqi8pZzw)-3WPE<4H@tJWBpf%u+42L<dB9fFoTilIzekfQiw9I|TJ
zGY)+qjR616D{?pmay|BY@hP<gztw3l03NjQ)78YYwA>>7Wg!Uf=^e%fOm}^i^Xf2x
zxAm5a_la$+PpV=)pV7bhJ1zO=QWH8+Y-`)E?i^}b;M#szL*vjdCdCCKrSZ(+7?R_Q
zNs0ExLa9#>e8A=Si%Y5fZsCW^ME#98KWdik?4Mjp$t42VS*1%eUZe`hR+VgqX!)`P
z_m@xF0D>f+1~VzJZE2_?@~Dpod24OZ&fa*wX37_{GQAq6ci=jEN2M2txDwUB;zm2z
zGkOSoU`~Q+q0hYTA>M}d?oI>Rv!4omjTjFk<D}9)^{|Z|pItPZQJ}XTmz~495Yfc|
z^?E4q*kL9?hN6v|H4?$#$z7^MbA_rhw6wcCuS;ofa1)UD9Fz;zJ~Tb1V=gvRo6)IG
z0AU$X4*LfDK+)bP{81`5JUsHaG5*$fUUb~xbQ1KP8>lQB&zHxAH1At>*b8Xdw&Su;
zJEu^^f|h7bzR&+Ux10ePC4^sx1nw6A{ad!>uLPXGVO#!Va>AFhm)sXBWNZ=?Wwi;W
zl`IJO5a^781^aTsQ5{H*BxZv(*!FUX-y~Jb;1?_Gc)q&YJdM8v8m6D0TpD#c-7)-P
zSMLnp&R{)hKs8wei%yZMqyEse1~e=st*u~8l|w0m)Yc*?r)tEFhzV;-js?{dhA1EQ
z`>yAe`9uD2<hZ~I`3ZBQ&?47BLw=dt<nO9UL4#6{1h{H7#SsJ5T$UzD+xx~kmz3RE
za4N>GkZXe@WD<NenOu6qpPg;lmO4o{@8)CTWD!e~vV`e2&sm0O<IB;XG{y4d6>rI!
zp=toTq+G{(PV5_Bo!RQ>6m&JF8yiWGl$!6$+@`8Iv8#-sCN{-g(`v94oIPE%r<4Kx
zGIL8BRl0vSPXwmDJ_6g1!3a}mUz(*z^foY&F6)~z(d!x+vTk}~0`&6Q+3L@L_JK&-
zLz9AxalXWZvk|obPgbpD!}Yj>UsG~j|8Tx&4rlPY2NE$7y1^z@t8f)2EYKcW$@HP@
zvMb;@*E0&RP;pg^ofvuOHe3$XV_{W0+k`9P=hUrklw|BSJlSl=S<qb8#OA@}1Vph8
zmic9X%8;1_e2BK@3+uA>g68U?Ga=-ZhLoXIo}|km{R<d8e=H9fHi<;@$36=d7>T~+
zvF$e@ri)cW-~yAt(DyiAi%Vu*bgmc=*qUSXw7yYHcay}8P}_uRuK6327&iVK!zW%Y
zrT9(|3^lgX{vWdbKf%nQ7y8wk(QJw2Zmes6ZfT42ssEN=!7`zCcDX_%Dda?})dO1=
z#;;4@nvj*arW_4G4rb!>Luan}?Y{7Y@xej!t#j}J%M<ju>4v`A@Jv5g)Ls?s+gm;B
zfHl3BrX$}Lh&u}JhI1gt6V0Pl?+S8w2yQgti-W8JGy86Jul6n{3&!2=D;W-xdh@84
zqBrg*qWM#sP@haPD-O}Nh-N57JS4p1L>UOTPdRX`=wfy@u#{5x+9I>pew=mLxUD)-
zBY#gTWoBINwedII2*V&m|H24oG=)}Z1J5<O4%-L=XImi}&epq{yT+PUmT+$wa3Ao`
z|5c(X()=*Y|JnZi+Y<dB?cd)ClB^QPrYc&|f{wX|(h3UrO}_<Ttu&JI>$|6t#LjT|
zfe1c7Bz<aXDTzP3A01XzT^>HZK3`w^r~7T_gdc&5i9$g%;@`3z0tz3Z@_plJ`yv74
zaiG+1UOuK-QC+`)BlBM921He4hOhzwAko=$zrd(f+Yvzpuz-+OqeF~g3(W)T$|i{?
zkWvKF*U^nTPGBK?!U;~ku_PW-qxr|CNyapgmW%c3m+#!=d?TAtjXA)f9Z+)qh+T}c
zmR`QbV_LIRZaXi1y(nKh0y%VtLJ<8*c)cO|w%en>(Yw+&P`Sg0jJakh@~0S4)DEUM
z7)v#idk4^l#FqOFl+kB+F^d8s?EKZXV{nK}QtmaY#1Zgm15dqEq^&2ck$1N9W+kYV
zbLFfQNa1tfkS5*`u5i9$RGMy&{+=4_r(O(W8>{Cx<=boAfwMC(w)sph#af;gb6mwI
z)V7}Mx&-?ZU1KNfB>m?(|Df!tJ#0oB+cbf6q*E-r)SE>_fgI|i*~t0==aLdt``v3-
z$2K#`uMf*<l+fe7!nTr><U?pacay4JPMJGS-t6h+6@Nh^&T$^!0g0qntvlYIxD1yI
zzqn*NDW)z`Z5~=xcFuu-emJb>?)W~9^a^Iw?E%rR1DfO$37`s9@KVyD^H4HAz4yHy
zSmw&RgPXRwW8Y67R|A;M_7K4tebUQFqA4Ig9$(ChJ%t0V1eqH3ZrmliIo>2|{C~^x
zN^Q@=pbnBeOxRwclg!$^wNEC^;+FD+O|#>q%Yf2Sud6IB1#>eY=vIEW^(P5di2H%t
ziQb8RnY`kHl$df~jVANhNt(#Ck^SOKDy*B;P3&?*3+JW!yc<MLrys>-5UZYq`g6$o
z;w@~R+;&u9GWFh5q~t+-c1c6RQmebZ+aPMsZEBs`;G&ZM@eez;ZWtI!gO!2bvgp;z
z!U3H41nyE}@0NWIX?Q6M>6a_}{s3*Cj?YgYz@p}(Pv6G}{6aRocNPzd*R(fo(*u4j
z@(m~!P7j;PK?G#u{1OVC&N7L%JeD}j(eI%&o5?+|at-)K-LoIPEshqKk>Epwrzchy
zZO_5at45WQ)TZtrCui*isHa)Zt7UEAd(r!p{79ESBa40P)%qPg3S4YRQRByX1Eh1$
z^f#aVU#5J+4hxVrjuIBqj$}IG6H$_BGOrmwsIf(Z_RM+QA{Bjs3%g5!L|zNYy9)!w
zq*`H#AB$xO!ymXen=0tTR9rQ6eU;Q0FA~wp_c@orj^plwFc$XPJIG#+a=O-sB*(i`
zm7YLY9Op7stuG%JZL})rCFe~Vnc(rM01@`s>U}d{$Nf$Vm9{Hx3wZ3ETdPys{&wE*
z%rt!UT0IZ(Nnsxhu-IeEa2*u-D3OcOg5%x?m{F(|LHe$oWhi&d+7@wY6;{6`@d7o`
zluq^MTRd8j%cZblyfP}9n0p3&cXv)-cxi3?^#yXZ%a1ud{=lwX=dcW}n>;sDE_mIX
zIiISVi%GI=5&>&7^`IQYsJ1>@IcNVCvir8oQZly#G_+^mitEZ9EilIbg2+hhk&|#@
z$Zy&Vu=TnQ5S&67s`G*lq{~qPr5(3;FI<rOvB-?ttSGgOf=S(OQ=n-zgI}?wSuNTw
zi7$Gji-sCc*&!NjRjlE{&CMa&xAsfnooiaJyV62Ep!u{pd$>B{jnQ{%70H8$9bvk9
z5^;;r+em8%eSQiqo2F_xALiVjGcvR7c=^`)=xD%Xxuldr6}?Jyh$_TistaHvE*s;>
zOgwHx21}Qn6-{f7VG~y(k(;b7WBCKIzT30+7@=}V?F!$@>fW%iMy7v4nY{h?d*1Y?
z;MJ%8BisL!m7)jc@^yTTtUSJe)V~K&Ux^uRe|w52w9Vy9d~N@1efu*yegx*!T(v>4
z46n;bkvJt#tiY0-H0<pJ@4m9P@~P=*9Yg7mCAw+w9vt`|fEn*J^*5WBJcK|Ac>zoy
zg=)=1gWSsf(0+!E_GQub1rS&rIH&3HB$H=RGQrog!sE~kGbXL0_%D(TRolpr+~q{J
z7}fmFAKAMw>}v73+PxI*%5K&c+o4We7JH~~*!0WI>J<CrPBCpf{Z21uh5AlQ9iPan
z_F8!ZS|67=2tJ_&uFE9VyhDp-E;~otnY@mETBY<G`Y4L)DI>iBHhzEZ&O!6fj4Www
zh1u`d2Q2Y{5?($lGSEG6r^bB6udqEDn``}^snw!qP)8v^$(6?LyrO74S#8Q*KGRY|
zy-Z8h(H>NarKWxLQ<2WF#BXi1X&Ta@aOG_2rERB<mLt!4Xv+}sMq1A?QAnN@6Zb~q
zBzM{sZX2Wm$CK22yaE+|0UbJcTAgMQrwT-O4W@V)E1GB4lZ8~!<CRv}gU}r}-P<FQ
zJEH}<5c1_v*?SBms@)k)w;nH9H5*}^9{QL|I^^xaFmgQDl)szSHNOH>41WyoEf&L$
zgFEo<At<8VAKb5OM8}inR5k8GE*@+bs{T6K^)bh=^x4df_te4~wq_$Gq`VfibE*q3
zj+zw9FSguq>LtTO%j@kABh)rk$zivG12I%VDk13}@2_fn)fZa<dP7GYtkGtcs=$8p
zR5X@#eKGI7t=ems5Sxv&utfCXAbjK;dbL8kP9_Tla5`TntJSZHXIc+VbaNtKK4{l$
z=hmw>LBW}umBBSpZhyBf{*jo-aVT1m9d~<un$0tQH3QR@8OXtw4Bk_>z@9o9HuT_4
zRKli;e2%G5qNgtRb}A3j1HwV2r-=kJ>OnY>J$ipH?>4t5(A^V@rqtu3@JUjrcJ^8F
z2>w5}#d(+bebLvpQ2#<W{}$bRkq|ltHdeNO*IfLx$>4|aK2~vEh1SC?^hzx@&R8gN
z3r#FkIANAf52V%IA#D|M5uL9*^T~mSTa&qrMacYkZQxr+0L25TO`H_J&1bgd&GGT{
z;pO`c#75HZ6hIiwb|XEuor=|JDNT_Cw_9JXYxAA?;%7no5H&I3c+)NgR1{_-p%Ca1
zr1WA(Z_9AlcbQ^>UfET_Nf|()pK`$=1Icpi{nsQ{-V(+ZxU4cGoGFeFr;UQkUUXkf
zo|GRChKQcX)uCR|v34}tvO&Ar`PRJFY?V@fyp=T^UwwdNh)Q>OIBA&qjW9fV#DH8p
zU`dHw3Gq=NE&(~YxEcb_O&f)OqD(lDeXY8sqFOgdJppWK74k7TqS2fwP&S&$ycTYp
zj*fj!z2}0zsB&PxUv9hg<`P;#gfpPg5X#>du0`Q`>w9~5bqxWaFGug$t07GQps^1Z
z0av>*JSGnn&|fJ+OOQJ_4V0{%2g|A9nneQD4(@cS9{HUY`gr#pSL|mNEtreUW#JKF
zMH@Lka@Zu=_JvA{Mo8E&j@uAa#w+69TpJAJczvJ}>SmB)<F}@#60fj|58g83@p#27
zEFxqsxu1^KDz>76M5m7Zz*am1zNR{tK)*Rlfy~tiZ&FvXZpqM4)47<^`h=yyeq;xH
z21l6H_*V;JK{BV0MDD+bRLWRv>r~kD&w!ZJYUq&oP<mrjHAXjdQ%uLpzf`FGUgfRP
zS(Zh`A*(jRMc@4_*#URL<dSchV@Vo<!YMK4&_5TCMoW(+&)H$Bumkg~{9Gjd(4M>u
zi$srM9AgOj%|LBqnoIiJl=m4<h)Y#u+LA0(VVbToQLCf>bs<~?JtbG<oY)4(?>mnx
zofoipHG<dr(a;U(BPrH1AKH4)5TH=0pBHT_;Q4<gAzueRl+AtZ0NO9Bqkq2x{*i$E
zca<S4Q92=?6XP$V-c=1Pf75kp_qbSu@5uE0{42Kv<o&r;7QQ-sYg#SlXIqn1W3*(~
zdztsdZf<VWp^#2KsVnehBGL$ZB`^8(5|b*1>A55<u_*rOYraZ@^L)R&?T}$g2VrQ5
zbK9cXgApKlEA{EgbO+X=P$1$F8fRsX6v71j38&apn+Z4DD2J}vHZs8~fcH3H1n>#<
zMwzvP1e2O-)?JD={PY6&pLlu&D_^bh?$slMu^}e&lf9<#J*xHFI8bPXf*cXERaHwZ
z``eNDhHfMiKSS-lyF}^~jrHIlQeTp%+V%nf{Kyz^6VYPKNu<IO&G#x3vW1UU+kNuu
zXvFQ1lSU{h2GyeRuk!J4=Qz84AJHat9^~pOx8E@ip!d_z870bnQove)bj3A&rCbl-
zD%;%Z)RxTI6f!LA<)bUq!cy3q&_-lJny#HHtOo7dq$9<CXL5{vG*CalE59^l)p>Gt
z7`F0vWNXh;t|IDiT&=eYTCWv}6ht|UcQ`S1sJc>goH=z}V*Pq#3|Z+c4OyVLGoz`9
zS?yo%uxs(;36@X*adaVF;0pzj)%Mbnebu-QYm&Ivlm}t={fMu`zfFcIpGJ~YyvGpq
zAsW8VP34LpOX=c{_3kp=r$JvX_BrxOKC6H&1gV{*s<p-B?5WifzH!ygV7ItZOT>_a
z{84jNuucK@$=A*|M&T21C2KFCmD78ZT=|?6L8@UF)?F16!$s#eXv+(XzEm>4>qs1|
zh_BiP>igUasmUn`6*Pf7*q93GPv(gf%&uA1nn<*9+=JtF6eWc9z^1svF~2ZePo_Fq
zrBuBI0xU!Aaaf$JAnKzmqo92I2R5cSN6Boq>`YYAwcIYV=L}7%*g3%^35cMp@USl}
z*stNzX;CeF>B8hVid~l34LV@cHFY~yKvq{V#gRz-7ZnlL*t5&w`J(~)$Fu0mKWx<g
zOV22-gxx6cMWFxn{<kFh7g=rpcO<%yjrEsg(UHc{&DMw$;ArIPNM~!QXJ!orrJ!eJ
zYiR_K{c`S6P>=!$>pAKHjBV@zLedI=zgBj${Y&=v4{hUr864Y7eN@<f;k)K9qU_&q
z<*#D)SG)c<#Z2kH<)8?lX^v6U>PfZ(rxoN0Tn^XPSAjx(<)Dafe0iRpw*Hv^@;nW{
zlRRGF*S){W4tc)ANe~7WrdQaMiD<9;k|KV*E}owb$=Yt)ww||6)N@cby@jBoRkJn!
zTpP6AY_28r^+RRT<hx`1LAaM5;V(HLxiT7WQ7g)9b?qM;NrcaiH3Edc2)1MiF0ZzN
zA;aB_2u3+;zmo&KrG|h6)pVuaXV|AlWw}4f6GcXm3i7Cn3C09-?JOJw9`0y(zpnPi
zD+!+Q6FbVX=u62T5`_wNi<L^EX<%hSn_$?nISge%UmTTGoq(74V!t<BtpOwJ4+sMw
zrxJ!xt8LKA)8{7(E~$QVFotobFr2lPfV1H?n!9z{cy}KDSvlzjzMPKZ7mKz|YAD8+
zS{(t20y~c&;_8Y6uJf&T`ntshL9eT)|2N<9J*2R?0X+C`Kq8-3+YLOQ%vWSCism}9
z$J;WaPPZgq{<Tgwm)#_q8n42fy_t<s5ukrU_8U3hWZ3l{rEM~?z0S%ZU+wmh<+2=P
z^c!hcPj;8Ijecu_2ZPq&yepJMbBAPUBHoH^bY>N#mi>4*Sdi(>o<TYpr{QzOgS)`!
zcf*}niS9T2cJP;2Lmj2X`gC)iZlLUFgl_E|=c!+eCRPzXO>?EYO^_qqJrzn@l*&gz
zTTaS{g<@)4E!P-VSXAO|3xEw8thiF)K5B4M$&*Ic!fj@}octVG2|$Wx#ynJD0Uln#
z)emHh(^=bqQh=vGsGSa}x498&?uO@JZn#nVXq}l+bRP#KDe=mnh56bihUuw&R863h
zK)_<eNub#(`c3q8_sH?w1(Tb*Kf3UPW&aBE88<JeOx8`WI94@qk;bZbw221F`t*}j
zK;Zk973R0+mREv@b^dt3+Ds9z9V`YViv1kb=>h2=kB3svz&3H$kMr0^=L4t1(wST8
zBxnc^f=}DRjay(l3<6~z@+TWbdY7`7Ni7Eh)yZdQ!3j*aJDQ*)F+Ba3Ky`b~$A-4Y
znBhbj(@t*U$Y=)7)d9+d?nWh3>Ob?ds@~-+)y_vc@z}<zWE_r$E36@793ttRXWT2`
zUa(U<R&GTc@MiQOBlRt9Wzn)Z64wNN+LtPQtD4xd)XaG{Qr=pg_^j%4%StyaFaJvl
zg;9Op&GB`}{N<znZx5P(pwj>U)4Hi?X(b3?DDuDqD&ita_TytTlp-|rlHy2-C`XF_
z#RY0yf(IFW{XL6cSm9q@WB7l^bxzj*7kF7g`U@{3blp=GKlsN%%fKn2wj{|fgG<WD
zrya?aA+7ZSY4p*qY3-^0{NrK#5}H6x5pU#tG`Y@Z6U_bq2u!ku|B;*&Fh8_6UNS#4
zX7Zv%pxIO!ZwTEJ`6nbT;C@PJZ3SZL9Lrf#S1$x@lI92zkzrZcxRm;6rVIzR)r9#m
z*55ba55$8BVlV!t01@0@I%mTBRta@-!zf=D%x1Vke<?OAnxJ0@PjgB<uVPH`hJt?G
zcK*HoJC}ZCC%vQDmK|zUbP10r4ed;W$zQ{|&eO~VMH_zh>WWN@OEsM9=ig!q@JmZ^
ztVY}@Lk3(w57X0k>W+s9h~tR~iEoFF^ri7?4FkR|M{b4jiqFKz8#$#AdE$ocqh*x7
z{rN#?aj_1`9E_Z;7(J0dxr46v%MwnF1SXIG*V<&O3;f}IMN>db%O_y`{L&dN?`p$U
z^~rZpB)+=QzI5XUDwbgT3#jiYto`iR+&R&{u0q^#S*gWa(%OtJ7WPDN`lEHqlKO#}
zF<jL=#d_s0-p%7N22#H<(zOiBnHg+OO-Z)+H^p7vLrk!4D-8TLuH)%Gwm*ZU&=9<0
zEa&j=iECznoah#kdd2CQotqiceq>45c-4CUiOlD&o*mMIj)Q=lnjkoAdhyNQ1#~>v
zO7F5~kMnm@=L<6(<aTqL2{$Xz7HF~k9Fl1<2HF!_UHYkq{<0|CT+QNPm>Yaas5Fxk
zsD4fl0@!EzRxn;fqHfGTUnnwPDvF<qXP=WO7`KW=xa1>q!LO^jB%uRFts==;8{ua)
zbwpNr4i_X$P(Eq8z^@ViXU7+i!Hg*PRV1_jZ;GVh-->smzKY~O#k+}gR*La(kRaHA
zs4DzoC%GzLe!+0=<24L<uKFw|)SK-#hs>yGD>*B9uP^bg+tt+MJcv9y<K$Ag(&6r@
z;oaWY{MeSmiyT3xjT{{sQ>w;2Y*EO-lFD#94BR=^6h~hl2WMl7sxio*Dig_1F6z8R
z67?IO-i0jaU`w3A-ahj0FZ$}L5j3Xzc}}D3-STkB<v)6<!lJ;71k#-psPahqf4oxq
zil#yk27x*3f`URr*)+q5fJejVHY60Bb__MPaLlU<QYGChYc*<P{%QemA1iIKS@TV^
zWk?%`1~@nwUr=7h--(e`ytfzMaEssN_7d`OabyUFX^(~nk_VwX#yd+=-$)>UZ-7%#
zFKLiR{m6~zQ!1_+mrMLXjVY!oVh&1h5|cV~5XrmSKO!;SPJ^gDbaw}~toC>W7oyqG
zfon>`g;d1T#D7ZQgXl~$0-(|(kUq8Lknkqv&uJmMCLp=g9_WZ^SjCVRD$>D!4`O61
zk;mHPf){)`Hc3c{jdyll=KWx%J1Uu{JNO;Fj=Ma&n$J#%v+zfl4z^I(kj!_yY1GvN
zT)cMBj!IY!Ex-EI$A~&=d<|Cgw)_4*pEaLaP*$pMa=Bs$?hkiS9U2LIm`E9xNXvJX
zs$>bMn1u)=tP0v!E)}V+ozBr5VM=CeD7@C)-m;`089z<H3@}y%e8SZGZxBr)`{Vei
z_F?6O^o8jbJl&O5%S&>1{8@19*VxavPrDy#J===19tcWXerUPG9^v{aZ14u6|GJ=j
zeMQD&nCSvdu%_nKnYY501)4+&gD$13E6$7f-FrUQbZyhORC?&;Pw_Ex>7Zw3@Z!EY
zDYczuZSH(BZ#Y}YH<%v(NBog>^1P}?iN6QNMZSmxN|EkQhDD2Whc1lB(}WIa<0L@F
zqnB_*NHco>9%Z|lg_BHq1sxy36?vbEmDp%luXuPfHk!-ZpgN)vXOnMEPl3#naQ_di
zntkNXh|^kpv*ho?8MimYx<O-eny&FWDYUoL;**LijwcP=Ij93&73z#s`~Ytf7aoeC
zIYP#Q*-4_s)o)F+SIDS5ouJ^$ztJogsx;7+-jgY=4x(wq(4&ZjEM6CH!N+P2{ugU$
zZ2c~m^i>4Eye5IL|J8lhzrQwA6~h46Pmcid+hfR?ITRf56A%X%D*WOL39ZV`dwv0O
z=iwi_^WBn5VdCoCplR^Oex>j9U~}&fqPsvF1M=8|dG$DXc*q(q{Fgr4gK3!1N#8P^
zCen|VX*v%KE)t)nRd9fKCQ8SIKt7}A?c^KWqI*L{a{b$}FxF)#6W7P#F~#$T-nSCO
z0HzwRANj@ni0L+m|FC8IufF2zOaABUU*1bHa<={daILqQkj&xN7q10|^luQvUrXwJ
z<((K<{rhHMNY%n-ofYLTC3PHd0B)-{-+YztacdPY9jt!K$`UG=$WK-kH6-F+(QFSr
z*LU*a#3R-h&b@DbwJ+??*#qN3#Z48^t^RTN7lLh?6sAkqRp={@dfiAjv<O?4tU(<!
zpOUtq1FBW;^yU3CPP^K4p*z~bgc}eY;rv(@lx;VJdO{bggdj-)c9RH+j>krfxAmH!
zFPkxXlg>M@P<vlC7ftbq>~p99yjBPlG5FRVIL$F`T3xEe@LuFpkU%DQPf3Q%30wEt
zdAXN76QmVKMy&0rVKbeB5rX_xM)|x(eG)HC{BH{Gn-XP!_Ugsvb*n{DxSt2gAGT^t
z5$2FtXA)Ifnc5w#rE%Yw!qlKJqD|<rKA<Foq5Nlbf-SXXF9?y-sz5hnj2&vz^xL<=
zM%etjvNtA~<%u;%Dn}OTi>Ucg*$WJ{>JVuo`8N7)tdW!`V(<$`HdoMY6bda*Ra9#1
zwIJitoh<n+zw!7QG6$i@ppZ+GJuH)+1Dfd}nHu}{dfNf8gh63;3tIzzD-j2CLdKp$
zf;*mFFVxQXe0|e5)1W&&oYq#L8Wq*+Z~QHh?y4FsmvBuF9rH6)20yIcq$`A5;&s(%
zJ~o}|lW^zfEHjK-Jld`1q#_OpA0aDzZVwL|aJccQYJ2mSNnnuuYB}=YN-yPm7P&w(
z%+jD&wDdQ~U@}r4LiGlIQ3x<#QVd3gGp`Z<=}e(qV4#xbZIqA2^U5yUi=}jGpeqbF
zK!{S$La7khW}S2(PZzRmd$qEq$TrRC=aw7l&z*5jfN-g2##(^NUmG7IFogyShA3LH
z#WO=*@;!mQsEk~5ZnmP4aOH1B8)}GBr6F3SKyi%|+$I;Nr-51|<CGTiTR2l7<hjp~
zw>3TTmDin=03K&Wff#~NBx}+T?v@=}zqAx(Cr~#Qy-*-0Z>F|2O>Yo->4)fVxHr<b
zvp(ahAjoh(>pFNKRfSErQeeeJ>awt3dzk|x%@3O5cjevyEidF6M<<1UXc;oKe|Gll
z!I<<3psL3E3VeS+d8xAxQUNZqT4wqX(PtkB&x(n1Z}=FC1ShC=lt?KPkCC1^=j$4`
zw;RriNC`uNf34FYy+(8HghP{&6O0gfk&y344L#WIcab=1$fWM|{5ek;5k%HpWQfz{
zOp0QQS^1FF20e4YgT2Iy#guMNDG+}+m|#wTClRWi=S`z!Ftc!%^b57si!bYFT_3@o
zu9K~kWGi<LSc9F~`OE2BSG;rPc5QK)UYjv5hLB!Kj39+iB`@QUK7Csjec<-Sm;rkl
zJpq3H)=B^dN`tk?_GEirxDI8Wd0JMN*HZx^M)%N*r7=3b4Jn7%l_qX40e<>43!SZP
zhH|w^&JdxnDdDCSY}?^Bi6}6tC~OTrgiYP1{XJ*c3xCH5aHr=ZWwGgrSIH9j5dz`$
z5qZnwM@Q&cL4lvoZ+mK*%mwA4+&Yp`hLGTHuZNr&`PAeVV>XpM2I40F>c!K}QR8tN
zgGU?rPOA*u9gB3{3rIe{pEgT;Adfk5&9Y6Ne<AfmJ8F6;)vSJmM64~GFElybdAlvH
zI-p=te^TZ5IADBW6Q9gcxv-hjw{cXsAZtI6Q=mDrbjyc`vSu`+BOpU*)M9@#n(nu{
z)k4$uv%R-s^(KmLeHqiRslF8~y1lpDSoEPFk;z{Fg?)?f!FDyHo?b6m_51VI?ACWF
zA3lq=0oGyPrj6ba5<lv7aHOn$r#$n?@RgX>Wn~)vvX8@i3cuncHO~gLa^=SbmnG5*
zj?nS8-pO<b*W?Ux=EMxuONn-AK>o>ex<{)x+_;}39OwJ2Lkfr59(CD(j>Tlzg_Js6
z0%wHP*`zs1m+1LG8Og*c>caTgJ?k|>$d;SQCcF-R>st?P^lrM!A{dila)iogLSu#6
zPK|mM>jaB`@&h~??QNCxldDq@e#U~$bIv^EUAGAG!9N@&{);pEV`t;#`c)*TzKqiT
zWt;iWB4P4(MWRXN+5w9V;p3`DU#JB42EiLUa=uu|>Vk2fGm;>?*(?~*#UuBqwPW_Q
z){N}aLxoBUE|iBrd>@`stfIvx=PA4O?G_Pdz%A1<QIndb5o>bE0jr%}i?CCIK3%F>
zuX3+vcAkFpfl=8E7EBMK#aIZcB{g5YK!*qr;6%d{DgQta;i;J0qAS<|V#K6o?^h%N
zyA#76khH>&VlgVu%<fL10AU#F3y(*NWeB3(DIrKf2*0a+MiRh<0lpUovDb!%LQT%S
zib4LSPl$Qp?#SDj26NxWJcW|?%D5;o#YAJUR>N=FU{mH4pS^hg{QTUMYA!Zki&i1B
zX<go7Z!XydMbYW)sAvL88m~$S6O7!-`3cKhjD>_sm#C^F?Nl~Ntqj3dFoxop7nJr)
z5L%_1QgAy6D8c}9=KD$293H561Cju17exSbJxq@gGlzBmBJ)E#^%a7zcrC@w>eb%j
z7pi;?Uz6|oAhjGrao{n&gl@WDxJt59{A5_5mb!w2oK7uR8L2*=8UCywT9G~CPoph)
za#h!gRj!RrH)y`T9#MXuDDXkbD2M6D$=*mZ9wuj*$(05sX{IL)oPoHgXv_{WZs!WP
z^S}bxAj~?8A3bV=SyLRy1&$wtq&rgiefJ+Yl8qcpqHL}g_mR4l*;yvVC4IBM(Q_&_
zs$G6vJ!3|eHLLm4&hwKx|7!HO^iNG1vuX90mO74Y4BHaNRvp5)NL*!eJqm2PW!H<K
zU}gt%>)xbJ6pEudxD{_?Cp1;Fg3BWg>=`H<cvZjj_X`<1X3crX9N|5_qahp5=5So&
zAX}#!ZQwy$7!hK3^I&9fjc~fMJuBvc4!&>=;^+Bu(GY6oLCgI_U&4Hi{*A?h^$I~k
zo!Xh*$?aMbC1lAGg<7NelxwK(txJ$}oo7>ds%+Y6h0?<`$WZ27^$kFug$ah?W}a|T
zpH_*ZhG)p!a6kL9ynA`!`NoCg@wN*}H!3ESd5Ta#X}a$dm$gk3NqD4oQ@m>Gw6*pq
zJUf-E`D@eOG$H!~HHoqVaX(g5Yk%Nrjjlk2iBE&10YH(kjOe-8<b^8#3O_8c>Rr_e
zJD9?}S*4G*>$O^ya4IbqK$cL{*2xOlW_2(?Ng6`zGEQPkEgHAL<VlWfo^%}LSd~y6
zSEE_hKY4zBerd-xb`rh8r9Q($`u&ChL9H}zJE*PDB8isI0W*HFA{7O}o$M3MO}3&I
zV9VRpl?@vl5V2~=o)vXf9m2*XG3sQL6HXx*E;lzMbu@8^)F6w}p_SI~SbpF3?NwH>
zu1#8{POv>~Ahx;&V-AD|GgTNH1BMoF?13|{1FQx4Beo@(DK;zp#G^>;j2<wyeuxZd
zDS1`oTJJ;NS0P2_h}}^V!0CZEyw$-ixm9(%ApqWJk-c3^H>de46#j7H0l42Ei!@w1
zQQX>_JhkL-f6jG1#9)o8n!ksT-9B~tqKxXS>~yCbYSKFTBaT+1v<*$6j$JO$cp3B(
z5entbZuaaqPs-hGg=RUF`G=8=lb<ZcVxOpuO?H;dJ@0gx;C;nL+Tzkr?VV3ESx0Uv
zGY?vq5*tGiWE0q!-!leEUfB5dY2Cj<aEAAJAH@7cy-voi$g|m&KV@HM@>-4*SPeOW
z@x>?;`ncCE5RD(2A762MhwGGJ{FKUHWwYq+d77MKLg(-4@ArKkoLQ8o;P~^V6cbZe
zp)STtI{fD+?&+lis6hm-doawNuafpb{I#jQtXKAGH;t?66}Lwu=-61$KjYZ?aVh6R
zw@Vy_hhug~n0HLbrFjj#mHnB>we0gviiEi55}OGbjqU|XK|f@Sbhvnn>CQLEpMB0a
z4!mrPM*l;x_aCi<M2?)qfA$eyKcM`dP1Bcc!av;&HWG?dEhS4;om`=TfI&{aNRfYh
z{1;#H*J=^O8jea|5h#maUd4F-VzvJ;(frTR;9u)%|DWp?DT_~6NW_2T^mg+s>a*6m
zMi^$B)aseg>yk3TA1$LlZ(Ws_oNcinef>LrNftOV6YkTO+?wAX2R`2)k<UI~>S}6u
z4)C|xybsEBLa0!*8OENxzs<rcO8&7EoUZel{j8%Q`ZEG=qxA~NNx|pKY4&{Ey*KkK
zchkN<{p`8<TzKE&|Db+dIIKBqJK*E?{d2xN5LR#gag&c;8viSR{~b3-N(r?z;kXYb
zMOTGGt{jV=m&&+lHg-b>IhXM|roN^)a3>t+IJj4_w=ai(UxLb?9RWNy3T8gS1#(dE
zpuHW4o-Cn&Wsq6{RcAXf)OlXT<xzGEp;Z}<zA18$+?TMfsf+ITN8AxuDoK#e6l6LP
z!-uWP^ERk|FYc$d+}&EFt>mXn-k6X^?!gu8?SO^S?4DG#CxoACs$cuMe`xx$h2#gS
zLJbCc<(p0&52Ek@NE8e(HA-8{nCPyj7z>0?R>b!%iolEPjWU4n^Bhs*<s(ptdcd8m
zH|rt2U4J+<0bRWyUm=RpUViOiCPLIVCBsX8b2tv57(UQqia##r1bALLS`S^E)(tTo
zLPiwIpB!ek(pa&SWEZ+Ucbq45j+(okIy)NU&*zguDK)#cD9K=_orsm7T1XX=*;Hy2
z&c~~YJI1J$odru@$;bNm1rMW&;2-e=T4K^V+7;eV9Su~JqXqN*K4lQx<yZYD@Um?b
z$&oZtJ^67xn~UhEFNySoufnT>>~&A~6qd5;I4UBO6R>MID%wgbXaY}W_o1Kl62#>?
zKK0@uJ2Xwdc<mdmQB`%wA7T4K6Q=_9>s)FbtB7Xg5VRnE>lbx3JK(I_3*9pKj48}3
zvT=}lsaGc$q(iBnF=;yLLNPTuuzlTUZPecr3LT`rg*!sM)o`@SITd=Kd0D6x!1x`g
zirRp)!I?sZc)1Q4-LTq26tSd4V4<R`&kd1C3ht|!!qAX%+YQ}wa+U{diyHX-3=Ty1
z(_h{W6AonpG;Yj+V+9t$qAtA@Ayi?Gh7QYqLhF^w?Z&jL^v!$h=RLTCjaYm0pCR=G
zp~DDYx;)2ggpt>GV@4p`=#gycb)_K_{V3_fWG5v4TMw6Q6eHjb$*Cci_X_!i@7b{W
zycY36Tl?>{`+H%_y?eimJ=u~bu1@F}#er71ZAIvdQ&ID9!eLHx8z939mAyEt5nY4f
zHu<_23Dz>!<kVoS5O?q5ldIO+L59wTzc&uJ@~zfQdr-LH)sDlOBQ0m+BKgUpe1Bj$
zI-Qpxr)y0VW#gtBl|5SIj_y1UCT5t6#lLc0@kx8lZ&B8$?3xgl>S?|qNWy}(ibHk9
zM;-d*axab!Jp3`>q66ZSVtvJRFJ()L<*cukepL_193qvRD(m|Lk&}O)o>ve9Gcb+b
zy~mg;oFH{mrZUKA^F%O{j@de7_pQC*Ad0k+ceeMED2W9Iq-XI6Lk$qMzJpw$X*2no
z?fl3Mj;u@tRi@_-hX@iJX3a?9n{HQcC~c_B!wr3-G02~{^O%+J<eQ$NCmY6#*PW5u
zg_B<&C;IPn6lmbK9|!!OQOH7ICJH618-?z7Y3e*4ncX_d<R5<G5!RLo+KbN|%zaq-
z;q3x8j1r#jZa5;29-<(0wMXTmB;MiIW%y1~8D;RR2kd^{p5T~Nv*a&mk2}w&G-i3&
zGlW6N$`o#))mK(TKiJ6`a3R~P3vVB1N}g2^Vcvw>%IweB<e1N9+wYI`@N8K3+XTOL
zEO)=nM)xr<&b@SARD!<!fLghtwG$%~svRJI+F84)QjSS%ixRS|U3z(SB`PYLdAqW-
z<8kNq*n)U*rCieBUrPC$#K2?G8GW`}*Z55ss)#il3`a+l$aR5muK%Yy`wAB85dDK!
ziAOQa<+IuGGR!fYpc(s;%<CM)tBfeW0;(5u!$t(Oe^jEQsgkhB{R*7(aEMftvsn3$
z6oy*uUfAOUu=5SI7TxLwVXVn*s0QNsleyEfB?6iI{F=sA>7xWcG8QQqKW>eDNp7cF
z!U=vL>!OQ*iDm_?Rl19Rpe`bAa`BWUVe=%{lgEPk$04M=ukUzY9XgI}MBFd>g_?o2
zBrM^pT)a{9eIzF!2P+61Qb$(|HD1V+GCF%pVga=VJmE>HW1m%mNB8Eo1`kPGx;h=1
ziBi@vw2E2CCP3$rG)G$*pNGE3DYLgnsiB~J;-Y{HPTK}~^i0!WQR^GI+TEJt{Zlz-
zP+ZiWICrYhb9h7Yc`oCJm-k}PD{+p86m@<+KU;d|3&EWc^|u3@NeZE9jwY<&)bl&c
z3JY<T5_VO?q&#-c*RhSZ5TDJ^#@xm&Ey${ft9$6PL-GomK!#t$^OMuh0k6gd^i)er
z;r07(Wo`B5nd^gIgitfHiPW@nJTCetcMj=tr}ejJ_QrFyQ1^X_aXh4Dk?P!#WYOUi
z?sO`|6eg47%4vcLe;g;m=e`q)%CW5ITGS`0P@7zB`jwliX%;J2pV%MGV#F>a<DN3i
zY9oir=7HZ$n$34OAg_=)y3iN^#@imGp4v-Su-f1f=>s}us@D|=<GMYHNqwcI3$Qo@
zB)f}?nZ+L&HcZ}ha~*wcP*nn>(Y}yul)MT7IWpY?D<uB?J&Owt;65k0!u)Y!zajgl
zXsiue#{6?oe@n!$fA!Df=on7QIH)BPV6N`zjt769Xw$^sgUdOyXtb2u2a4GU^5ftn
zIK?>Q@S!jw5ocaGv9o3(WZ4kn+4?$=Mc4j>PL4l`SLlDbYM@smOettp6t`3^TA#LV
zdMv}dyH#d`T|k#i_u*G#^X78;G);7&9e8Bio#NpYzM?&OLGrpuT6El9+9|}oV+$tD
zgkZXDl-h{tL1l;Tb4`5b&H-0npjJs>V;?$|z>=3n*`n7+QS>YaHoKbLXjQ~=h$S`3
zatZvY5{sS!(q8hDQaCW3P8!sR%3CJN+7WWNS#eq=zN9&|UmrBw*Ndt(S$7mpEZ@<o
z+R+W9C8^NnP2;dB8CKJffoKftv|pFLZOuI;sTRSBOjRzl(3MiEnic*8VkVc34q=+>
zg<hyW?;bqY!sUL^-s0u47IV(pcS!WKJ`=u4!6X2$uwnEG0+9z7YEmPLw8BP$m5-q6
z!gtGAs4+F;j3h!Lh+q;oTg9h8O*ga0j`1RM=g(&NAK8xA|CTBI7g%$pi(fPO;>st!
z-hh7v)>s%AY3z;c{tm7=#dXDJ&|`>rWb1nj8+_}tK-V}C5=0aJ1qA}_$U5w+M-c53
z==SECz}doWa>Qy<=L!d5v^PW)r_XyIOGt+p2N|}QqKT2oklO&RFbSl`Zs#_eJz+;l
zLc-~*h&Yskf1)ACy`vXj<aN6{<#DzRCFKkj@|I)iN}Sb8(-OC~9yH`xTaNMK_bY6&
z)K9(8w>7`(WIXR=9IcWNIl1oyJ=Q5SA*^NQit#n#x4J<Z_^xX0kv0@Dq^~ghlGq42
z5K3ypAKH*Vt<kXA^)5YYa`MB=Zzk40Cx>}xAxDb4POBt-t}gTWl6Co3%^fwv3=`35
z4(i?7@SCtTVYjs@<2QfIw<yPj(gB6BzU^FWT9RyQ--wH1vLOiQZR%O3-Bq&+T%j%E
zOMf5E+a}4abBrX}vJM1XLdUJ5pUZRHUiSr`x;i<?8XP-3L`31>yK*5`sAc&WUhM}?
zK4#pufFizpX8rkZ6ZXFzpfZ3r2^td!NYL~vBlBN8z^}Nje{%Kz0%%|G{B~Gpo$L8s
z!@tmWqBj=P_;I8^bVbgJe4f925?8qI%H9YfZuvrqZ|_<4`MeIwj|3<SL4EH2eZ(uR
zk<hE}QrDq+;Sc1l$pv7sKXr%iZc`0DSR6Z@hJBg-jJ=JI?-tFPEfoUm{*9d#T!<PZ
zxeOmIHeNr9fDK|O_Wi8p<N^YLpgNkPNQU2p*xq=7EH7|)PpQy9hy+-*91roX0vmDN
z6%dUbPo5h}rkM_$mVrj{u%75nz<|r>WHrqQYa%h$g-MHP@Am_ch6QJLE%@CR7U&rd
z0ksoAEVN{%W8M{qmI7*h@Vz+=GqBqYJ*XJ^(n~*Z#TqkM+t%6B)5pi>KoH-*m(%`Z
zh{48@y4|4>#tOPO1|BZj;vfVwD+7)s<>M-MbM|4jb+N<T>5WGk-=d(-o5j*+AsD33
zhd!$eb&?+?_!v}lTweVSY}F1;bR3#IBLN-fv~ms~=)NGD_syx$MO5YE=i?4I5?eSG
zS=W=Pr_;@MC*z}cegV#g39e{n+Jf%uR`XeA&zn+p!?b2hF!Qw7(c7$3G!@U^uLqB3
zqLo~sMRQhOOTPo^ysMnR-b$VpU((-Q?dhGe0L1e}y9tH%%y?TH@ecCl%o3B-!YzCY
zh7ceEyU#>9AbE)LD0IB33R|VhOz%VGm?>#8V!68ID6QJ18M+PI>E;SR6NwWvL>kNy
zI3v>I7#+Q49oyJ(>Ia@q8y+TFEC_Ilj@j3=*4~_LMqPrEICJ!OK||^EVB~f%8AvWu
z;RqXS7o@jkm({)2qrYyX*`PvAFn2c|t?GgBqTyN>C&lA9yv(1yJ(YNNHU-oG%7yZA
zfzyMo@;op5zP)txpW;p!sZQU#2EJj=A&Xobx|~3E`$hZSMcP?m0%`Elei=JSVuEYE
zRz|`Q;@n74;*qD!5{2X{ZRg7bCD_FO7$8FLtXDIlxdG>?Sjb)E$S3jnBR)8uLU*^W
z)+X^sY;9+ni`$YC)P<L&yI3R!@}3AI87~y~;0n7qDBn4EdIK183s+a8_FRbr$#4QV
z*oTl#hg6jch`Fijm*n*@0qotpRaRp337c)`=n<s7CP<#w5{NL%C5K{8LXJE^fe_i1
z#EZ^?J}yu8;g*7rx!A;TW*%i<y4*4Usp7C_c9mr@<r}Vf9Y*cIyg2foPGAGT(XJlu
zQ2Jikhqo&Pz!<>|?@>Tn=?)rFYZ%dkOH!&hSan=S=GXh;adV7eI(Tk4ereNiAfIy|
zKJS=6YCsj0^Bde{;;QM+Y?+xV%tUH1U}1-Vy(6vTYBp<k8_MO`ve<(Z`@HJizOLr*
z&y@6B4($h&V}qw6S}<hL)PhH;Ev}%_5*$0my=YpwhKTs+=k>u5$Eh?YZmm6F6@Z5k
zut0f9GcW?MZYjg^_xoU>gby7}*E8)KUYM&vPQ7r81pZV#Qu*~G{Cvh2!-d{HI(rtC
zN6TWmJR?$ZzZH;l<{zx8rq*^uoot|tdh$*VVuF`|?3m&jjISH%?=NAO7LBRA^3GXB
z=5Sq}opG<vIZ@WmdwB0m=#-iD^Jw1qy}f@K)knJ6oSaKK{F|$Tg72Vm<l^L5Rcvx<
zI3$~*9=_C&^d2iMLbo^^yp|&7L?XX|jJwL(`q*z_uC#3S2aVKnI1k<kfLNBGjqwgz
zMp&oOJVN0N??EW|h<h<5oKtyt9}s-rsc>Ukw7BDlubGi5#srJP8Q{7acnMD!;DCS(
z(y4oUV>ugyNqT1@2oI=-H_#RcX73)4T5%}_=+g1S{OAu;#N|)q)rt?Nhylv<*_j^0
z^!XNeJ8yUQK<d^mmfd)8s`V;0q<lr{lyG2{&8;?;kihLWrVu-TM&hJUR;`=szY{eI
zrG!C%tOgfjaR4tgRwDHloslk`YwCwdhJ|U4vN3Izu%lsK@sj*VkHPYb55tgl1?5OK
z7UXs30S9{D4o??BD9|v|sXqbUF*5I5a0V!VJK##yO%^tLnhB!;qM}T4;;ytvjkpq>
z0!qYE|6&kyZbra?`&gTH-OY~)^USkSMXA4x$QGId>2VA}LccyA%1O@l`9t;Ohe%=!
zk;jZV{LhXr2_<#hZr4iz^Gy4Q%37_WiSBhfP`OjyP8}^!XU+W1Lz3p_uD#<MWf{EX
ze6jpv>H3wqIE@opu6vpKd6&)eoI6)*!v<GbH<$bRX^-?7E*6-=Kmx-<<Lya3i<lih
zKe0;84{>RTBY;v=)AW8J+`U!Vl{+_Hp_jH-64(2!kY+%;7q{yH<W8@NLW~fgD#*@Y
z9zc(VV&a&33CkFgiW`{-oh7a7IUF|6r=8a@ED?&hAaL#1<{O$21@2Fwi!iMh#%l2c
z$3C}+F?A)T#9WH!b=?`?m;%6C!;chYNYMMKVf$kX3o=0`cSo{J`~o7iEkHA7EtP7r
z^mB+}aZzu~hg%yWP(UAqBr3*BOi&JlVtUp3;bufL*^eQC{+g7bb43qRLOu7_*N|Xe
zL7YXjBG!c*+}f`xFi=+*(}&CshKWC`faIpyUKV^7H8mtmQYuf<oENsYj4h!V0A$Ru
zQ+KYJT>`4y5YV-t<_fqW6K_l<vJki!v2XaYQ1jepnomkids&xCFOka(<7O%zx&I+j
z|IKac-A}{%piCR|ICt6QL$8HpNuyxPOr1tLI<um#-=H;0^Z|5wl3;J6S5J0#W_6f=
zz5dz|VKy8S$z0MGA^sJey@`K{SSk1WA?h?4G@w}kg-8UYkM(CQ$6;I3P^|S%UB!*5
z&3>G$=JX`-NV}h;^lrTMe!OhY^d!mGuj3X$<A<!Yc8uQEc!<YfaI!6&END;MY$`bC
zVBKKh2c0k}eUoNLX%ZH$?4^B>$LP<s-$)-_rRk8zd1ur3>aK@AmfPj2$H_V)*ZprS
zq(uP|9ulIw-Y?_sx3>dJ+WatD8xe*1<XdAWiE86m+}tug;rvVL4-KQl2CJIXBHxb-
zXWo-y&zQ00rKREL)aq6;K@<y%y>L!aF8i8TH+Ty7S`%Z#_YX-ZB;+gXROzBi_FPU_
z{b@`iFR%Qnz{Cj%H3}uuO@sm8GMa$zg^6SH*9jpG`)Y-WkbU<?aA<4U+0xRWp|mJb
zG@i{HM&S(8RvV)3&b0k1FVrZ>T$2q4S5=9KmMmpoL;qZo<ImY`)(~sHSvRWs|5PJw
zbULmaVlV_nG~^FH1rKl19b4-j8B>d5qmJxT5|h8@b~Bn0;;0*z-Xn2~EID9^w+Isu
zW`hRz;biV2-Zevm75<tMZBSpwNU?)*VC#6;@K*5!8FmNOp)D#}NXH-Mmi92U`1gbx
zr$M5e#TKb0CwlkvKB=lBMro@rW}-rirks6WuC7Qn{GAUbXjjoLNjUk~>tMR~Lr-^#
z{7w>mhs1M0ZDulz*+BX3fU+P%i~i|}3v>!Z8DK}c6*;Pg-RuVhGV+HNRjD>_C|1q{
z4ZaLR+i`SHGC0qI#9VO4y*_#((N`pVR5yQ!5l6F9t+`&luC{vqx@)<kYFd>Twb4Uq
zq6LI%2PC9w%cCk?NdH!i2iWL!MMl}yjNPcNA7$Mi(Kk4Aw0phTF`>y<Rlk~e&nY<$
zt3KA}r@@ft!3R(~FP4th8Gh4l>E`t*XM%iltY&7y{Bn&>PG&v4m(Cswba37#_C6l`
zOG;Bz1ev_sl*r03+egO-2taM09OF$(n$54pg-M5tRcE;OUcENTscffKj$&;w{PJ@^
z+49<SC>}X7d#o^@g%p)%u{gggiqhS=K))FfHT=m2u;#xNRp$@{zb>TSyV8@D@Wrdj
z&{!<m!>yuZ$)Abou^Kn6q`9{$lxfY=(bdS)G1SWIv0BR-yubSVie{m>;<M>LBz=NJ
zP6O}{AW#?N+bR4)dB*We@{39$ubmDUMuOBFjezlOrhZo)XKfB%fZMC8OzrkuXxb{2
zti^nUZO%aLp_PRlE$&rZ^+sQRk@!CMGRVgr`cW5gnmC~u9AX0kCik?8e!*ts|4yLL
zXJcJwRa0s+g-^NHB*XjZd50ww{M4aCP=eLmu6vP9v))MIY!2dAL<Yww1&i84bMn#h
zIYT>Acof{cf-{T&PdXsrQy90#Mpw48Umi;PU5|cmoz@n~MhQth=9$5lkyaS}(dBa2
zG_%GBdD%t1GJSCb-;T1ZvK$C!onC_?aW?xf9C3Y^ju*#z=DLy2M;iDiJ%A}T0nZy+
zr_H5@AfbJij&iZR9zDQ|%VZ}1I4#lf62pRvo_7Khvo)E+OAh%pP}%sDq9^hpmHSY!
z5W8VD?26%`G=uXzDUhM#8<lWh6d(z75J>yL!y4c`!b%(O(yb=8*6jP+z)(To0^kDg
z-n+yX-X3%}uo=~+>0Pm-Px_Rs`4iqPrjXYE%r2sPL6nsp>dj4_p<+_7@LNb=5?z}m
za_0X-*g1A-0ySASZQH7}ZQHh8Y1_7KqtdqVq-{GZZF}nNPrYVMPydM<aaZiK4_6hV
zF|&4B(1|NPP`luatF5{_l11XpNPdE|r0;0`u!MgB(!n#j+T{h~rTr*Cor-(Y+Ldfl
zS1L-e#HizXbxg<FzUl_MZj0=p@K$5IK(Vh}x1mZ8qQSzu6n<p&cT^&Ff{HCx1ZD^N
zy|GTV5`*qYTI(;4n(<fd8w<jg8H2$j<WQOIA{wi!2@PvryUFJiTKk4-6{mle0;~P-
zdel^n)*Llxx$JWzwl+_j8Z)KYP$`7${Xq=+$@@QhyH<MK3nxJ`-u1=CbsxnI+{~-q
z6)L`G5QQ1>M^vua0US;Rt~ysU|0V_e_^|V$J)+w$JFiY;S(c?2(rv%pA-U@Gq33qr
z^&~HYYJ+F0XqCS}?_Kg2z8I70scjO)k?czhbuE*KzsMv{pCDa9{07Q>W{X(6(2G0q
z+&J_2v=lb%&A0=XbaE-6thVP={6g^(1zzl<dF|pCH2dH64w98@O3Qr-fLy$DqEqrk
znS;%`8lGx5?SZ?OH`9wkjDA~fuk7(u0Eg8qX?D$fto7pENXZS>2Y-)f-$-`}vux^k
zQo;DLV#B=;UAa&oP3T+ZI$AeVETaw7niw<MygZ{@)(Mz9bY)Ty))pu7TlMX(hD%X;
z)!do>u`T5$kQX;m3{JV@&#VqIp#jX7@U85em)CvQzIf;Qh8KmDE)p`yDinOuin^D*
zyf3>icz;<@cm>#R*%cnzw|IZNJ7SNjNA>VeF_<89-(;vdTnZ=Zbl}(sq#8$=c<b(-
zJqiR8p8AKK$>GMmT>VB+U^>1WJ-kdqb5loC$Rfg49#A3X{Rx*$#1G2Jc7b5BXgr9`
zN6-sjkvdFiM<6k#;-ufBt?;*p$%&}NL+YIt(nFPSn&@D8x^?(Fr+FV6moXj&-Mg0C
zT^YTnq+LkQn$@bE=vN%+0bdpMQjA5MDc-B_)^JDOtAZ5A=@;v*>X(R6OBOzP%g4{<
zk({H|C5O4bc*L)yfulN#*L-rc^Yoj@5@*lK9SO&8>_&i5vRMAwa=ly@aiU@;3zKkl
zBj95LZXMeD9`-FoBDo$fUn9l6V@Yf1QoV&YGR>^xrDUHIfyaEwP=Pr=JY3%=j9e%=
zC&4t$13}sJB+e{Rv5{3B?Us1#ZOiq7)Ik<eW9H7MRkU!>br8|7@uBYI*osXHSU%!F
zNZC!2i;sK!d9r@lhqpMNhZw8vh<5)N-6k}bu&N4mQ*U1$Pj_4)ERA-zTXOrgMAh%a
z-Rp=!1cMtdTRehd5{{(zVr`s@1+oov8y8qBgXa9`wChbp-tO8*W#CyXL8BGRUqQ2P
zh)_rSlqE57WEW%wn_i}ZV_~8qT}voos@AbmosR$wsN)S@;~eFJ0(6wCe3KLwr)=W^
zZnwVS#=_ywmaHj9FmnK%VKdTdov<3z7eb3WWhMv&yK~~ZhC(I@k+KChJiP4!jN8jW
z_)y2Bvt+R@2VKngZZvu6uc_3L{Lm31B^2{df6u=p!lH8uUr7d6XJ!uPwDstN3rj{O
zf7{Jxr9LqGXN?~FMaLKhQOV-m6XDDfBCuqMgOsegkP|ig=1FVtZpoc_wr)7tEC}nI
zo=jItL-L4=bZ~$M!qa#7&BX<GQ%v9Df#E<Eis5^l7KG4}yEd;Wt+2tX+wW&1*J*BJ
zeG5#_!l&X}&yr`VM4S)yJfD;6r<R>p2F#Ldx5Hf$DF%1N4Js^th6CH|m?fE}TS~(3
z+ev@(th<SJXrSx_j&(jDZ%Nuj?O9ixJlqUoS$|^*!EQaE->)O)<7Oo<xxGzuh_0(J
zD44IIq)d#y?1{q$k>9ALOj;DNl&Rv62EX8~b6MBiNa*1&`oys2wHFggkiS+VOtPHE
zwQEWJbw;`cBNl|rkK9!9ndQB;!!DV)`d!#aek)j1SH!kZu=$m<nui~-xA4mt>hu^K
zR-7?pmYO6hAuQb(GwV#3_Ny*w>U2`Y9nbu;rf|Z0$u1nfn#W+iRflXlg`at_MALPk
z|B83E)up{p$;ittp#vY!Te9!n)HpA{65c`_V56U{=Wn8o4O^Psk_#bZg1zQ6#{9Ge
zWDSIhiH*H(2XNU~QLwa&njv#L))^w?E4+13I%2Dsf@UY2PT#pPJ2IgPpi(9pH`f~>
z7p8ZJQOiGU^iZ_!^OktS`+hQB5dmAEd=^#z6?4l2(y5hsd4kr5iPI#zRLj1E!r)0#
z9ql?=5X!0zlI+gL1_p2u9mNeSaopS{ZYN`Hf*Wz@PNa)gW;->!qX*YkcePphE=>4b
zM*4`h6Tj&UI8~6+LC}obzyWEZXB>iHjZvXzaDX$G1w#jcxG4cajEf@7&;;;+xl#+t
z6U(8GPzMaWX#+>W1Qg+=r~`r5{wUmj`QNkLz`S-n?ZIqy1I2m&1JZQ1w4h|r>!p-5
z&^XPgdcn%f(=(6{`;9=2r05u|ecI=8cp5Vda1;m!I&(AkXK(3QVeN^cXs)NV+Czw6
znpnx#JMX7=@1nXEbv&!7qwl(*I%LvKB-WVsWERMI3yMV|USq5qIrH`*Ipjpr?d0v^
z*XUa?&uuL-yRaO=KzC1HkvhDD@@X8Tteffoso1Wm+udw8x2>d91ixX12WKFnE`IJ8
zoz2PEx?X3H@$-@w9}$F>m)pfQ<zVfm0BD)I4)~R?CM{W11P#vEN{-KOa)Gkz<8oZ%
zTlq?JX%7Xcs`T`~6LB4rx2`ZxentC~WFNEZ<EhG}ZUtwK6d7?5#muQZO~S?Ld4($w
z8AiaDrn4wlKI$4znUg!2YceAIwQEUPG??%4>AFl15uVW6e0nYsw*fU7X<hW>&&{47
zH^Vj8#Zk|wJui`+xWiBA{zJVD5-GqRU<O|0E_BU`=7c$(C^I7<AlFZySwiF1!MH;N
znao-rPw1vvTEWZIrOHscWua-PbVpKg$}9a6>Ew%>>2XZaSKm0ykD7?fzF;SV1@mXh
z>k<|@rR>y-;0H%^;;m7<W6t5WNGencQKB2`s=Yem#j~uT$LBApH>!wiMOt}^Bhz}*
zF}O|LZ?cmhC(L!n9IcqkAsp@$7{6@PXAejHy}J8PJ^+&PudzS=n|qX(qvFm!omBi$
zpv@k@Cx2mgORYC{!4L<SMshFBUC{X1e?v;Vy3{J9*K)<$+lm-j4G}wRavo#uS$?@=
z$*-bfswn_%_H@2RYxv!se49=Y(tjl9dE`V?J#yE)Sejsccek$+Du{0^5135N9lQ4V
zR<Ipkz-p}#cX#`E7hbYofN?^=s+GZ{r3UaGetfL3Qs#&+WP=Dnl1Tv-&8K2}q}}!R
z4MHT^;(m*4jJZfZiAp2UtTMSpYs{hh8QW9dnH=J`u;Ad7k=3G_+L~QrF{G)!iRe}+
zBGZ6OzgA)F)JJN(ms$WhOD*6IpSxn@oV?P?ZI4A7g<26CLt1<i5{i0|2hsXi)w}$*
z<UGn>a$j6gqG|w(=x$KEp3{Yi;ii!y4<6BYhZkrA_o$()lDE%?^97zHg&KzkYKqy=
z47l3U4@1L3v({W0iu$f<qS3U(f-353#3X}B%R^U)QlzA&$^*4T<7<{qLV<a|naR%F
zzBDf{I3rGwdv{x$?w*o$)8G81>ziqBV(!T{DyRZ$AMjgX)t~gkHQlO1JBz({GJ7I8
zgtOKjQRg|uQsqKK`OE1h#Y@gQM>V2()KlXkn$T)jwQBmSlD5-p{%QHTDNyJ2*Dt~9
zoC{)!iNs>xj*>>y&`{rlu%<9dj#IIu<-n%rI+3SmvF24qv%<5xGrL%j4*MN%4-8wr
zFZL?Y-OhrQm_(r>tysAZTaVE%?bl_*MrDaKIZ9~2@b%EXZP_C(@`S5jh+*|gqwGU~
z^dt%GP$SnT$i>Lh)x4e~Cu1u2UB0d)nM*J(?G=Tn{+T_~fHsciU1ht+FroL)E2kQ;
z5t*9=0$1q7&p9J%W(FYapC*3T6rxcnGxqO6?^;H9hsPcRE()!9g8wkFU6T=#&8NLh
zgMR&a9>qATK`=GWsZ!chc9Tnt4IaLLwJ3aQK#`N(4m@9_ZIjb?s3-cs*}gO7f;5WV
z<R8=T|K>XQ&vgZpq*(pqKLP1~y$%15fb@TnQ6?@1Huk>_Y%HDsU0LkR|EuThf4H-x
zrcByZNg{>4ct%~?#s(VVVra3#|23|K*xZ}97|snFF|=dn{UUapu|PYcZM01NR&MD%
zfA2b|BHZJA$JDU=(Ep|DD&sHcr@=N^1{2*LeQ1tdh!*O&NGE{6OFxg6?%HiLy3pt5
z*p7Elm0ysa-Y3BDdO{YpSuf-oUU_lxQKhLy6=yIVzg4AO${@x&)7VOLJ-D6xyeyXI
z1OhUd+-FRnNo-##DETRit_WQjc@EX+chLe(yxd<U>f{l7>+$Olf$yNdkZ*o;pIF(d
zq&$_jQVz1bNs!XoP?(zD5*!gy94RDMJ@DlP`>ASDpg-vMGx`ryx-M51;U92=A-ty+
zLJ%7}LT(aM<vUsOdN;uXvHL_<^j1EUMfFO;G7*+Frr^Z-x#=df<AYzG-Bg*2=a<1+
zw$%z-KVf%}dqX#$h>6E~7qOqig*DFsK(*AN&M%vi69DkDsyWJ%?po4^zcH3&E2xHC
z4DIl%s2x-Txdq`S{9gV1kubdK_d08ig&+rysBdl7y{HdO2*1CEVC&qr;2a-74Hdz<
zh%eeKfoE{#8gUU;K|D(_QMT}5+SyeT%G;_PN&uDlm%}5nq1u1%fp|;Hdz~YtVxOX?
zhGI2_>1v?rw|VLATwdIDUn{=Ja0Ps{IJ2zWcD#3(&<DlbT~HSfPQ58MQpynRl6T#a
z^d%I8pjX9G^lXg!6t&Y<S*FK#R=P@(eJXZ!vycp2?fe;n`~8CWe|Fs!-&DScONF(p
z33@{%=*!JuNqQ+Z<a)_Jy!LekfkWoFFWL1tx3!9tX6*_s_PVEW-QcvS6JE|Du{~ZS
zP565ygDJ%Lb`fXae)JJ{xvm(#!b{rwT9WoGNzTH2n3J%?4<Z$>#kD+KhNgb1?Wq^b
zKw_O`gF-;;cV?w+-Z!7d2F+`?cl*btqN&M>I}_w|IL#FnPQKq~Jl|D+6sRV1azJxs
zqSp;2O>e*;X^kKQm{3{vejzS?;lUORw$SpC;PTXJCtit@z+)}D^%lJ;9f<s`ojER7
z?wO87vtgd^=Sn>`79+`BfF)-bx^CZ9*|=WYZ}Q&1^rBs_X_do4-t0XlnEmAu%yB{a
z*l3)hIrf4;K?DouI(VWuaTj@D{QlP>dy4^<Oz?!h$IHCz53b0I805Nn$MJ|`kJxwf
zL{NQyqV3o+@dIaxT!TJvkVH6a7XvDf8-wW()33wYj}d+bBo4BaE8Ov6cprRqdBo3$
z-~&1TN;p}jNGbDlF=G6ledG}B9oLTCp>31GF=ph{FR}C+Pn2kyMA)^G3fpv&^&r+$
zmJKXnB53$ScbZj_5!>^EK@W#jwXR;B`%8%ap6<{8*4g@>ccnCBqFnudVI)m#EdQw<
z{<ow1e`6$jssI*@(QT4{Ss!>Wfi|bGScd8tcD=i*@+!SoB`Hgx#7vJOlPOHJ8{ac$
z{l9Jn{J&n$1^lLNtPo~*Tw4e|eHeyTkNj<u&OSYgE`&tB8+=BY_2&QC*XaHON&0;4
zIA{64wt7A99&^n|vdK+4fBsN>=V$EV_WSw8Z9gcLK0Jg&j`@GRb1H?6ATn?hq!1zU
z-nF666Qk8q%m$w+2f#ZO1h^MG!P+$sB+P{)FlM?7G{Ukd*Neq9`4-R^o+vn+!2A;A
zMDi|xXWfqE_{T^ZZdL+0(4+?gM&a?J;(z@LmUG{S_<3auv^GNw7bAioK#8b1!^^=3
zbKe|-9~a=9w0;(K|AM#c0|g7*{K-{x+Q?~!<>)q+a>-95bqV8i(x$}8nNdpIi|o1{
zm_`$o{rN6?{NC7Gg>WnWPPdf-Q(6@I^$X}ltaj<GKi{na;=9h-ajyoJzl&^t`Jti4
zVeI2Qq94Ip@$*ih^O7RXz>)s|EbQi816*2nuPx`;BoI<;<*~#(oe${?dd~H(Po^!>
z_mzC47ro8X-d<8EV%eVrzE=_y#%U0uwax(i#@^kA0C$mJ1&?kuDBf|PokbxGs{^m>
zd0m0{(Lv5IpO}A|*DObAxClg`i;)wKJZwT_Mcg8m6+Bb|t+dk_1DYx8Jft~yFjyK#
zwpm`QHR0_aGP%~fe)b96``igRvB*F%f@a1t9?4&=|0JPzoW8GC1Avn3Q)AVEZ+$e{
zrJs@3>j0M)u>mh8Zv?rEcNoJuj%VPX&$ZImdp>|HWfQE@r>-SQ$Q3OGL)d7ExW1sS
zc&r^}efvf_bIHNGeb1!vihkcJWt`IZP4P!=u!di%$rpMDC(u;gzWCe<XRtl-_ReyN
znZ3Kz%!<iCvS}Lik3FXNALXaoK$YpanB-cqa0DI6;7BpSLT8{cSLEGRk{$MaOg;Q5
z(AFR)AUi>zzjf-=&#|C&n{8s;vwQ<(fv*HZU?fB{lwGe230<KRyW=8Ylj)VmA_!Rm
zeC}Z-))xlV%UrVGD7VCDZV?VS*_7vnJv~YDEHEa?1XrrO{+%Fyz;EAsx~ifZfd+$`
zB4auCo^bTYV{>M*j1%u!QpG-{BXO{F=Y1y1lGfor#K@t6k|A56z^WIqtXmI)FfsQT
zZ8;Xh%87L+`^E0fwywgr;@xqMOy2xVW5)h+-R?}Y4AI(_qsupaQSZty1hUhZk&BJQ
z=4SIxC*y_pyJcr7aNs_Yor-_3?$ivzo^<|ud|DgC!7^>e^ZU8Zk1F8o=X%$+2<+8~
zO_zcv5|($N(Nm&&AVhav?kWkC^dD!6&;Sck9A(ze=S=F%NTqUx{0t8dIbT6#gC=cQ
z(SkNLINUK#h&*PpCSisi;7Wx@Bx0J7p}l`xc;8g&mMO6DO1Ii&1w0MV<~1}uDi(>m
zZQ1^c8Bs;|><HVpgk~Bse~=_N#4Z~8s$JETr*_%x7$k*Tz5t$@24b%P2L4~jI`c^1
zZA;&BVfdJznh0>cy@YBpKV*OdLw^P?MgJE|^~k_Aru3t`X1{47ieuL1vd*G%pCR0p
z?YTd>EYtcSc%$=}jkd)GQl4L=9&s+z??|VUgP_d)kvHfCN24dzBi_n(;Iu0Cr4di)
z&SJ+W2vsLVyd;*ycSp#arm!pzv>lz%F~I&WXnL{U{_jhBdaW1m^wytu9WHW!w`0;9
zU8mX+uxZe<oO{NF1NE7*k|dpz$h!=qi>g%PcsKAUPs}@BzBxV@wHFi_iIK}|X08yf
z#q+J$2!7jE53|cxKmDZ%=neg$`_Uq2#2e|5Z8~d}ysH@+bNoZC&BtlZ6qmi-!abIu
z<PBu8>{;R@J)yR=*z?MX?Z;w~$Z5}!m(-ck(m7gOn0|==5R#FeN7ed+a?ZZeA`lZ)
zmulsoL>@beuk8tm>02>WC@<a^*YmJx%M!IJuM2jtE%Ko%Cs$?wie^7li(}%-JoBY&
z6gx3eM!(LDK*d?tuo<eMFr2d$d6`!(+|`yHJVNeEupz%*Xc2URv*;I2Fa!A)ers_y
zhqfc>sH_&s7pHhl9S!jwgNYR5(FyvZka3LYnoFe)8M4dv4ZfzY-d`Jl;Kwz*tPkTM
zm?nY}aYl3Tjlw(ToHd91JdXi8h1LB@bL=|ezqH6>m_Tpg+xK)uj@A}M+N(9|<Nnmd
z3<yisG#tgAT02n_3D{TP==J36=Q`OFIvY5)IkF`J5Hz+KP#h>%xDh_c(E%3fel15h
zs4yw?8TBzC=&Z(R<v9FZ3VtWdA{}#4GOvXM|B@yTd_m@!4gf7&{wy{=gsoZtrqmel
z`KsSsOK+LAE<Iib(Q1>pei3k577oma-5yO`8G2BkLXhlrx7H(kjdH$Lmd+@k`0do%
z0lVX*d!*`L7s7kWh#%)03HWftS1nf8ALJm=Zyq+Ri6@6&jq}#4W-pMe`k0Gbe{KTN
zEGPfw$O*s~^46&5aNcwavyw`<Mz5rZ#wY}t&z#5<hlt3CrN-5Gyt+Nuem{xoiEm=T
zZ9ABa!!acJ#;`}l@XJAW|8ue1LOXe3%$zB@%Eh$`8h4m_OR*&<;hlD$q^n}Y8TbAK
zY^g~-XWGB<^}ynJ#hUCNCE5}FZYzY%Xdty+d}n)Q_2R7uRW0waVLVKO@ws_Rhp24!
z4%=c(It@mDxL)juLk!m4W<ZpDg3{N-s;sUwv{cW+AE>}Dba;kg3hbh9JF8l=;Hoh<
z&}jhLrX9G$Ui^)&HD>L!wI&kp>>hO2lcqF!^tDTdnNY9!W`*5lp*O9yJ4My4#DrbS
zqOIMZrtKkwHs2G#l6-W#!`ri2f$Te~e^QW0>q8wCqV)1k%0W)(CLYIFJTCmg<Du70
z!;jSupRnFfk&RdT4lc*wx$75|PPrS*_M19EqBS)sOH)tgpdK%(<q!&uIai}D&j;#y
z&X(`sJ)z-JfD(}zaet3H4MG%<%yTiqnG>e4&77v=j)cmMX4dpB_ey)x(@(BNm1r&{
zAe^Bv-KEK}`(_J6Fsf^L?U~GEGzsugR@JqNyM&-WQ?hlz-wEZIZ@{EfT4*J1e<`s(
zi>^L>)_OCd&m+f-(w))i)qUVER(Fs5#ig81oH*NN?zA37vALU9^z+d1e?yW2Yd4V#
zB0xY?7{EX{{{v(9pReHmAF{jh{c_)AZ#=zuqd|INEyG)H*pBz+s9iLflrGlUyq9)b
z+-i*vPom6@6|E#aj^F<Kb!E>FgaRZaCEw`%lGnyv9xDYBJTPU*hy@41(3&4%J1>uc
zXzAjc9R1bzd7Paa-1B7*xFtvH5yL`+_<g`E=Z84j!Kwe3Ln`Yk>Tq55u|b&p-3X(s
zZQm3Vh`74R0&hf%6M51DrHo{?f9f^)_SQ@U!-my8)FYi1!0UnJm=tY>L6Y-HJ~7Oi
z6-v@g7#^)F+JHsz0HFQX>`8fD^cfZ)!-z7*86n0z0ZNG{cn1It3WB7S>YwSnngJ9P
z@0g7<gIgq1PA*zBPZfimmy?V&?8xOYG^R7?Z*6a1k<W$GW?zw?J;ByK3cLM&A<v&J
zc#Wn|=#3~lI3vvwcjUbLoZKn+Xxe>-?5XnWT11=8gMO-Uhn9q!`5fp9{8@Y}csl~0
zuf>G*u!@8{mBIsoe-KqSa_T>H%|Ja!cHo6w2tdwL-aQx=(FQq0TCru+2|EyUXz{!y
z;O>$YA!^8=KV(u%IVEC(TF0m6hb`xFjOV{rUhP%%(Ck5hROp2|lwt+Uj2^B#p+wy@
z`k;_?anwy|G+CJT$rQh4?aDQ9InMuzg4@+|gZRd^Xr}#0=our#FcJrJh^fgSqgt^z
zZRhE+O$O&!rPY-ma^_>tEu}NDn-<}eS=u~F!VJT{9(_CfOz#++_igzdf44%Nuo3RW
zH+_M=w3!|G<%2IGb@Kbwp=$loI5`Nv7LzEKp09evY46Ee`x<DdvdRLNZ>+p2ZiiU6
zG54`B^{dwe8p7S+d4jkTa`|lAj;=$<Bl0h1+Dn4<+AlZ4n-a0l8P=j7;Si#3Ew^O0
zhyIewV?~r1PgDDY<--I#e_=iuj5sZPpd^n3jdVn2G1@19e7lI-Um5=BhW&e<4WUH~
z#UT2Ow%x5KA9DR;h=On!aOXLC^LdG=FoQr>Q#AimxryfgefBvVV@uts>-zODb1QeF
zYQyl$pCAY$KjN38qbtO%nmsFyxzY8>fCa|;ILRz8>bUJNKMNIh$tvA>{Ku$Ri+-Z=
z^TRwGmSGEz!OZ<>{y!0j4f4@=`~l@l#<!81FDBsp@ReMP7L%Vf$#e9J5MnFO#;ZAp
zJ)d#1;gWEY6p>;|m6{O(#Qv+ZZ5d@VI%wq)JK(ZA=*K9MuND~Z`P3ETiw;fVwwDS}
z@u%NlIIy}9v@`T&Ezy%Po6H1JhFrzI>vb!{4wF%vF`{0&6>5a>jky^yW*x1JAF&~H
z2A|-ZvU?39_+?&rYg^P)QqA2_TQPs1ZK{Ug5skcqvKS=Ke>sdp4vUdn0b@2lov+_d
zAe31=QV9p*hOEYP(;_Ayr-W<9RVxSuP9?luUNFw!n$=YmMj0j406&#)^+ToJ(wirr
z0U`E<tRp}BafC1h;{8t{L<Y(@ta971)j5ZpMFg#oDX^uwDHr^M8BR1GWLVN2#5-YB
zpC-Zn2fNVjyQ?*9YN(HuO(yT&g873<Wwmpa#dCU4|7`vb1OS7)?cfL@%;rAt2s##h
zj&Y2$(TG-kJdJJz>mKaK--~oa?Eq_RA8|f)NWM4{>bIdwt;OD%RirC>X!~Z6PW)i<
z{SN}kxB4k0Es@ssRdBVBhq7$<XnMNeOA(K5VQUFDGce_oJPcjmi_+*$m?f+4t&r1r
zz!Y!F@$>EP26!@A_)UKCMW@sx^ufw{sQYXTDgbBVax}%K`X4zWVt<YM_^CZ+K*Zdu
z_=Iraa1o02IZ6U$K&FT*e6+`0X4xx3YDJ)*t1Nm##o2NKg;FQME$YSccOg0OeXf;B
z8dx&5L<Dk_SCU;AuSJuuw?(6S&TNvkKZG?-nFyb|t=m%Kj<6O*^fuPQNQNq&E556?
z@I?`MWAd@je*6#`T+%K7i+m?vLoV$@+ADU9MT2i$efn2oi3ENuxKGwcGG|U;=+Qi`
zrr_JUQ^<u@zHHZrdGz}xh#T|4TtuH{5U?;jo9S6`*u#Txui9runbGO~q#P13pb2gf
z{_d6S?}0T^#gbL^a6OuKn}eRKE39o~nHH9}h8`;!T`Z_M`DWS@2Q6lq;zIg`f8F|H
z0Ro$8P>7`qiBK!jgyGta{%1gZCVlR0Xat7Hi%%m2A1!g7QSLS1czMp>*X=Xdf5X$)
z$Cdq&VK)y0<ue9G=!wri6L_3Lh=7Q_Gv&9t5`Qn%#{N@9ygGkNF(y7FW2vrdVXWWH
zr_*cW`+m86-^cs5jEK-@Pm%caK!%yS6ijlf%BI)Ou}+`wK|TRuJiu*nJ3ChcX2J*@
z3ejO5Vov1iYjVe)bKoGwY<B1zGIqaRZU`={J6snes2K)o+R7wL^HQVF&*Q)^Ng7a+
z)eJekKzI(0SUOJZ5z-{{eyv<@`9tUT19R{K#q>TUEFydhRfs*CM7t#luROrbMv2)|
zKSsN9ykm<ZhbHRVf`BwKSHY_ajyq8Yv$98PJOtcRPIZ7)ref=>QIwLJ)d94lY_+YW
zjX=@F+Ut^*=E5qoDD&G<3crc7#|CGGQ9(fx$B-i?=BO~tn9>Y@={qLaRasW8jzM!=
za!z2>!E|Lo*7=Q<=3i|1xkKXvVsk!7Sif=Dx87_G?fV)d!C$@U@&o)w-3_w6-0&J0
zCi|*wfC0k-FHUg^uYT*uXrHTUP-3BCLqR53x0gD+_1yv|B7#4`9b!bNG)&yk1`M_@
ziM5gLG^PjfwzQfB@#GK?EU{G6Z)a3Gc<>3b>g9BLn-MwG#U0jEjU@xO2Ue{U{|FEo
z*r*^zt>gqM?dY#8p;=+gWN_HYAV-Jtg0@|+PeaEUE2rNLTraEAj|A;Y!GX9Fw=bKu
zmjY)`STS}?9z0sGIIE`{;XhVrMHj-Lk~M!@!WD}oETihbq#Mr!?Uq{zUyxi5qgk&g
zp^`&x(6A@WI~_{TygO0)D)ISq5yBKvO>y$|T<;ITV)bHt>i+(v?>~p~VHn#aRLjG;
z6L!GI&2^t0;AXOb^dffvCW*QuKF(~yCVM%F8p{0H!um;A-CnS7$jn5(AUu_wCL3VW
zTS?0!Wk`m`F2CkNBsi6*E|iH8SIai(`2_mqxYKhx%Z(`jx7&PFkH%xXYuq&qLza@7
zO9$k1Yr!vFN`xD#Jiu&Z6&<+4(IKwC+9BtyvCH?~RRO!EO(2UB?pm4v$vSG3re?Oz
z8eFOXW92(K>=OCgeeZ>*yyq~v2_c$Xx}2U|x-R~=QNleINm0Z?F2b({s+Jq_d$Uuw
zWah@1`NXyLU5h0H?7xu#=~CMGpN#MAl?vd@;QiEP?rbx{c|=y7T32&BFc2o;2<+#I
zjM59dIlMJ)2ZRB+DpXmMUh4hFE}Cml%Fw_r+gYibl#Gn?>VSdM^$!}>$sWWZa2M@e
z_QFJ-hUgm&b_;~1IOrP2=h$-4ZLo=`ZRRYQdg?2CV%1MjQU_iGk1Z&_<<Dl#wi0b4
zFpK=>*jx+|ZEU8B0vK)w9?i|X<MvPL@}ftsDzbR>R*R};P*Q0~^b`a<N_<A?18+wn
zeT+O3)Rth00=K#9R;@d+8~>;=ECg;wAsv!Y>AnJyk9!YBLGVvp4hkJ2iroV{kQO;%
z;3Y{b+F?R4k~9?J-%06)c|MCr@XZwJKg*nf+R0>UD6@sPM)2*7y<!#y95kDb-QZxk
z;Up+itL%hxox7sG&A}e9u|I|+K-wwfcf7-FA_?N{Kh(Wbf(;4HIyDyfEOZly*6*<y
zXFC?c8uw9QxTrgB-PyxJbv5$VRaM|O^|KZM$>|!(c$FGup6moP@b-e-x~)#8@j{jM
z)eu(WfDlGdcZ-u<JQ1w?;-6LkdMJnEI>yZQA?}=yVX-MmH+asD_+6VpG*Mmz`_xiI
zAv|ze@gb}B5#s=`o#AK59Ts`mJm?e0LpkcHtR$0?5}Y`Bbs+^i93?MAlMzWttPp&X
z7`I%(HDyj<rgSS6<rUVSQ28J|Txm=Q`$jNIjsZG#kjLo3v23NVwaYkwUIH<I>6)^)
zwUCsv3ykIRjkII(@jGxq8^pJOowiT#!y!Vwg$HeUnVezNx*#Lg!jjusdn#!Pdg55a
zu7ec7Txs)qAk8$EEGd1efv_Kg=Z5@UnZ$qBuRT;At^ZNYampD0+<b$?^<uG@P=oqz
zDBDfmz))cm2h@f6s>1~GSYBE0++=t}qFnICY|0)16+yYcDg%afN|GSXYd1Y~q5XH?
zepp*I3I4_Pvto9+r!2Hn=m@~vbtldmFS&tTi*z1Kj8|%7sEd<fS*3<?DoJ>T57@cT
z|M~PdMdT4c6sYSJ&f4GMBvx&~<1kHiHrZTv;pl}opD(%9DU6`CEP87J7G6{|ZhHG9
zIYAglO@WFZC;t7CHdpR$o214vtx`YcvXBTA0Ddv_K1YM4vmbYztU~l_C#oetEn;q<
z6ilv#G9R3Zu^yHt!{(1mZnjCGSYf9W-}-!w!698u@X@M@VQa@=o{`)-DsvE%?$p%|
zz`C{G!XB%-%F^ZPVdpnmHUvAkUr{XeG%XBNfg0*HD~xW2;~^ZHky<R3PxLT=nH6um
z&_(k$LjZ|cP=WPjY<3-GHY$x3CZN_O!(huv>5u6AmV|rb_2gx#s!&9*VNm@$4ftBi
zc{mkZC@T4=b=`QAgD%eF2y<bpQ5x=?d&pHf3yj&D1zMD!M!gZqA~ix`_P0I8Frq?E
z(S8jI6cw8qae{Kdzg>ypoUEn%h6;;l>r7on^@*r~t2T@dd+oeP4cR<}AR0&-+(XI6
zE$^=8tovt_8RlVD4g~tiAO#74lS4F}Jnn>1siwK!cdCsXuzL(G#1@P^zBo0gdlurw
zFp*_<fZ0IwiPBX(Uyk6@(M}t+fRyl6=w^D%%zVJqnRh`yPN3v%hSFYf#c|7FS*)U5
z%&l{IrXpqwZXzcalOy{{I{3vHHSr>ipdO@iYsAQF_jCH9&(h$>&EIv-3UGVwWwf4r
z0Rog>k3;C8dG&1Bq-Et=ZqGSbv1ZrS6P4h8U`N{Nr;>{Ap|;3GWZ6#oIUmBhtH`ql
zD~F2R=a_?=GTR|aTTEc-R~w;*c8jx0z_Ly@z4%E92<XpX@00uZes8S>mG9eNl(S&!
z0{@kmq?qG*W9SIH5ZcbwP;DnWwO?TZ<jV$LS16P-vOAGdDl5W@!op~SFyk?i={hH0
zhR^dCwhZLSy!odmLjhtR!3cF6HtE}4Dgf5VGha^mu3!g<3?s#91#*Th(^@(`52zXW
z0&Y8n#dp511qXmurj%;6IAWj8;Z-4~mFk3uAt$iL-SbB0>wMiF0+*kz2OX|f!N5a#
zQ+;jkbb(gL4@e->p8$h?!uDRy2%m4!R<s4tw$?ei@MCs7;Of(q&q?xe>dZ7);gY72
z`3takbg@EyIL2O{5;D~4^T9U~e@eQeE(`XdmVDg-;;2SYCkb<c7-UPq^7*8TjVuu9
z==5YDTRH-v=>^gz5&q1(m2dK%A-U_Q99EjH2eZ{c8LV2_)YPxqyMMdcL=6W%Z1r32
zVzHvx1X=&_wsN7OVV6C)N@WaHrpZCUzV$)~02SuT{F)F6*&2()5-2qb*QLg;o^2+$
zVe35^|LJ-`RL9JBw}i!9{;nGIT@pk}XkwB{$AZFxuB#7ff%YiRc~py|UKtB@7Wh-f
z_H)8E^$XPbIm}<RzvKZ(zK*ZG1l7MbK3M-_)LcwOIpKmc_s!#SuKsuWS@oO&>_{q!
z<mMNPSMrRk$UgbFljT2sX)@_@KINc>&RV0wl(z1#cfY;|4Fp{I(KlZJa^IA&z$8$^
z;|lNSeF`;d=@;3xKFRYe62&WI;($M;=x1g~VFl;`V}v5Kd};$5v3Pr$NL-v%QaXzc
zJw`Lx?<@~;Lk##uXGpYoqmf4>6**i1H9tqEi7?Zn5q|dl#4gaE%Bz5q9C>+d1C{Bo
zp5VHcu=Z+OQVr<)r2z54BxNAi!|<7U;=?~2kU%RZz5YW?`Y1EF1^=3GgsVYB8~?DB
zHNwg_3N=P~yfe-Go6W1s5RDt(Bh<~gHZ~fzOAs-T5<F)%$>#mcVZC=_9B!&?j*RZw
zT)I8){8FxWh4_qm4zLs&XZy^rLV^p-QF)?=D`yNkCh$I)4bD~i(<rFJFGYbr;wmx3
zaJUEmkQ6c@pnu+s71|^?9mbyJ_`Lda>J(kGnwgJK#$QvxTg^yP6w-)o3y#dUeU-!Y
z^{s<O9%E)5HvTMl`XtZ-LceLWInmhNkJf#SX0+rjr7}O1chK@SfU$CiCN(>U#$~FR
zf-=lGD?6%2A{u0Pe0djYj8x0fd6pfkiaZ*lMn;2SZJR#yH@aB4$DJjU)6H)%;@)9M
z8J%SXEnW&<(zxZ2;_LiYi0n|Fn<87<sr*a{RA(s8q6sY3Etsom4ZnUu$1+xQrLK}H
zE=GPR``b}6aL8oDTA@Z6YlkB3JaK|2@`$4$^7nQbVC8r1yGgZ1nw{bM*R*sh(<Hd`
z`2Pgb=@lKj6wb75H!XIvhI*(5jTcrWP`0YY)JnD&iDV{d%-tt{C9_2h>PC*2aRbg4
z)cUtTca8^HkM|pj@lT9L-=C95c=~Dg&VE*n{5PQX75ahG@BYBYD&V8dB};e{*^)K`
zYhN&`o0L3;CFBeg{hlU`@t+M2M_$|E{NQx0x}vg#mggaA6><KT1-_KZ8Nur2fY6UT
z9{er|ZJd1SaH@J(wDa^5v(U$VnvVz@*&*mWF~F<ZQK>n!c+(J7GuP0ZeB?x)Lku#A
zST_$+TP<PR3|Us{g29$QR|=2D<A1Ugek8AV^_xCP7>fD;@=uCwBvOdAbcz10sR(vV
zpebW9Dv+nP%>ckMVl0p>z8q=tO(CRyb-Y*x?o5(BBpOj8ja4=iWZAa3UJ_dm+&6cu
zdS?nv9dj6(ajn6>uh%c3Wm*mK`Bjyy)loP<9!hBDd_Lv%h*#n&IDyxprM2P*mbb4e
zT1#Nt`&w_#UJ1fhR)XRM?YTJjFby{^7pP_Occ@&ac8OSSMWdiGQ|ikmw~xT9fpWY(
zP)OI><q2}Mg?+W+Ne&Br(|}_&;o8T+X@$pf!->fWX45PAq?~ZO!0){QZA~E!O^%zj
z^bR|QOcYDvF^j6ksx+lptF(-xq4+3jq$ZW{u%3uEr**-Y>z(&+(rX*w@uvxJ)EJsp
zti|eAP4#HM_;<G~*5A_=WN62Br8?6UiF!IwejHHZSIPIPV^glBs0>3u3UYguG~71R
zsoWDpovNwBg;sK3grCSw?4D;w7O2|N#JDTr!rMw%&xeZPldSK0n0$1Bc~K0Mhydh`
zYP8&04v4E|XBCLW4wI{NKK@m`Fl(LGiI$N9wTkQ%>+<s>Il>L=7;FY*86?5{(RA0*
z`1q<>^@$2+uLEz{?4NS==1DtSDRj1RIy*O=UDHafG2dq;WrwF3+9&;qdIe^ly((m2
zqXI!_`c6C}`A`UY_c~s^(c`fl-1(wp9us<i>sQ%kq$Warx#zszOzWs{5w=5d*`^st
z>xM@1HB<;yRSg4AXX4($UaLMIb{4~3T;Nd1$BASl(sGxXGQvXBCd9;g{ARq&fgvRi
zH15w0w{w6hZmj&nnDR@1#ypShf;Ux6g9p8NMX28F@HM^5_Fb7Z)|;RztGuwW)m1{&
zYMc{JvS&0#)Q$7pw}e<&j0@|D;K60R@XyQq42`U?oMlD^^@^x0C5?m2k#q%AAvI5<
zY1S8&Qu4oxkOIGI0tgC|ykw;sC2<A1wqjbtpkn+eQD{wv<NF@Uknmstq;y7gF@2lQ
zTsO5?ScHS`xv`vUR@-UMz=BxgUZJoq-R|V+eUTP|-Fg#dpPf3Uu6jSL{Gv6@62AX&
zfet`{0u}z-5*`IHn&Fz=vwoSa<E`XMS*cONoKm*T*r-wBMhDlCF{RB)N5NnC4B^{c
ze#4#Pc!hP8bN9R=OwH+}?<}TQ&*qY=m_^lPEPV!KmU7vGvUeDCbZ%J<ICBM=Tr?-a
zcj?*8gYbB#H(Ig{mITEha4xo(7sfop7aIxY#u*ES?(%}&`LrU+6z*{hWI*fstP*5#
z#wkN{dCwl>1-)$5%XxAF_&2WCR-+RpGgRY3h>dP-4o4wqT<~bZfUO1hG#5emQ^+gi
zLSUB&cknN3Gi^W7oASEPnOTva^MldoolV$(oA<3rU{agA03YhEFU4~oz?xMwAD8~H
zCY|Z8Ra9meHu-8PEM4WESrlc{s5jIDir9yVpfV0ssC(dDZyZCX37FWV9m4Z{yTGYx
zKf$S?5~ShvmW0dC`R76yRd*dsfjGW=<uX5p{u>xg$F-ru@>#S%=v`X+pWEkEuZy`q
zw`I;g+Taf=<pQVA^jTsXqH*caHymA*f>LGDCdwVS0Znl6=6!~rJ{595JN?$b3lOGA
zW7Bp%cHWNf>d6Fwj_scdOEq9q@a@%kYU@xan9)}MC@F$bZvdF~!3gH8xGazVB!p6(
zqIZ23EZz|0cSM021$$~z?S27Eod`oIWJ$b<fEOP&U0b@p&MZSvXx276y51Y)KF=uy
zJ`imlYrWzDJYh%aXOzz<_2baGVBk<QVghSHIZ7S+xhO+_O)3#<?retsn@(=%Q*Ta1
z^+9uY4r@1gy6`;cAqA*ukD1!FYUP?Vijr5EjBqWjT%-$5<fJ0Wwg^(cnnk>A!6XR8
zggYCgjN9$2vn5N!_b&uWvMkQAb*VyMPE^G9dsL7IM9&EEd>+tU@XO(4RX^V^!vlA*
zo6mg3pxQrI*^c|%Qb%K)Ywt6BXVm=iVs!ztkQ8o~yyHTveC-oIPn8_if0E7kzZAM|
zmv5i^4>D!u9MG46QWO>vl*u=j1r46w@jJCAYE!pK-DkLiIeOY=a8gnTWG%Wtp!e^z
zLgiKY<r{fjS15;9l%h|9tnf!|`WMj<qN6*Z&!;Xu+HVUNcyBSA%*xd8T<9C_-x~Zq
z-Pjm+HAae|0Vm#Ow3<*Ogu1O9K&hb*e+U-#kP|FEjVr-nN4Wm<U2DA*H9?G!J}=&?
zSNVADzwijCp+BllCp2zdz|Ku`zpf&%rK!=t)2nM_s#WFGRDdMkx!R})dcKB7RS$SA
z(k@@*)eaDL9ESU!4)@r6<o0m`G_?!4nb^i(4BUBsm#1=7|8&x|<W`dIE=4zY8wpi`
z#2D(YsyRkRl9RYD%U;+Wda*4c98*{3JA3f|k+Lbz?RoGRM4qKivR&P#zdz!JtYpHz
z#$~~u>GNnJ;bLmNV^Gd(NzRcTLNhhWjG}@NXQSps?{`2%`g`qmbB_;CMw3(tf<R*j
zb^ZG2f@<++n*;36r_zX9;dnL-F|@L!h1b1eGV9HIZeP?D>t}HKfml^k(cgt0Mrk8p
zL?rxdYB6Z)xuR;(Tgdc+ic*QR)-`$YzH}a1WLANWHu;uh%;!7=QIMe5x^g9eu}%|7
z6*FPTu!?Kif}q6`(AdPJ+6g?vyXduQh{jXokj^xf{)*u&=L(bF;hcA<s#ZoVbKw*8
z${hY#vbUOc(M>!-LK49ooK^G0V(4oy+nXhd`7t*hpRv|=k1sJsknj0KIV@183Ucv<
zsW>w+IkXvCFqt8aoN!n;<j(|ob%}LOEC4`<g|0Ts1!ob^wiKsR6&KRPh&Uhlrwjeo
zid|Mty1ynZ_bpKij*f)nDF7l4iIkeHu#AIJ(<#BZUQs7*Fy8dnca%s8S>1Wgo&q$Z
zxkn<_B2Wknt_|2-d(}E3WtT?#yjB5zu7=4tch|Ro^IcKRPz)_QBlB@tP2MoX4vuyO
zk*ttemYwQh*|}Ik(m*}Qk;$3ILyE@VE}eW(h(OgR*zOuB;Nat`O*@4eZ#FW$!upAR
z5=+(bU7hn?L}{32c39{=b2AO5+_+yiitsN#Qmek_o-iX$-o4shz+%S|LYSQ2jW5}G
zby3%hTTFH|3-pV_giA^s&zAEVx_6$X2j5XqZUf53NHQLyd^~8cV?IZHa$1hqIA-wf
z^3rBg_>n)8VsCz$Jy1^*j<7~X+m3+yL9M4MQA=*z>Xj<}kwZ!FlI@kjE@77eEl>As
zM`-($!!$uhsjRiQ6SaM2GbeG6EGdTDiG_Pd`X<6_%cx&@h9i^A79ovn#uw^G3XbkL
z{!7&t>(Un+9V1Jgl?e+G8bnVm{M}UR(cNlCW7;zpK!vk|u6=llih4Tx*O{4szUL9n
zPwa8{39nSp@dy^zIb<z8$gW{sJAxf&rr~_5Mdj`tpiRWIxmZEtH0QZ7OR-0JLuemY
z{b@;XvkNqx#G?u%z`bz><8smC@(N9HI74YA8;xJ)n}Ph=&}u&y(J?J=X>+dbtJ2>e
zI@voU+ePf$GRj-)UiZGX@>4^WFpB9+w`I^uIv{~4L~$iq2`e)OY3fbqgKFjvD&E4S
zbYuTnecBq))zqJC?ZQp5m7%q+AE%qW->)J@-!hLn&Y<8Lpno7@YS;0$3*y6R{Rv$L
zU>8_D94fnPiI??=<vyp8Vr`ikNY1yg*6trC(^1Lf8&j1Fs4w9TVMJCLo5DcgC&v=!
zs$z5j!;w<2Y7$Viy_Rg&*lNs?$>4Bd{~~xSK6g0fHO%Z|%Pm!e?lm>@qH$Vl@y+gD
zk}N%Z7f*iOox?-o;~&Su*;%IB@Qn^*xQ@$WO6}|#l;@wv7_v4FW`j2!J!x@h<yZFF
zaO#G-`>V^ERVV_#dDC}r05FQlTcVynbT^)^v)rdK<w#?(h&>rpj*rnGr0UD)g*=8+
zGhMbmy4&#2Z<)CXn+~C;R#PQtdh9GxgZz=1971j)ZJ7QDVH>BM*io;B!DKw1aK7wr
zAh!;1e7=;Pm8E9yF}y9_jZ6~O%q5k2;ztXG7-h9g$(MB0hAT>$1sZrf-VJnNf~e?E
zVc7U@csgj&f~Ezt!Z6X<V#TZhL7NOqR*Lu%Q;U#kCbbq85`Lx4dX51NyqoM^x5bgG
z8N30@gt53;Qm7k?(<)lv9Qa>%K1KI)L8t5xe1ucm9Q|r`4Q2|GoUH0g0vGuC?9D03
zX%Q7RAV*vcw&5G~im}Lrc?Z&ofhQ^2m3J{r&=Ql@n80SenahwckqJ|vqwgpyX_Xb?
z^;5}N7YJ4}M}eAq?SoM;OrDhhM=4BHM)<m7T11sCM1XHU`1{GF2#>X0CGli2iBMy*
z7`GuP2>}lPr?q4wmHpg<^hP3KNVE%0D5%M+cU@}?o_jiJFHN@dolaFE<n6gl=r<Jg
zS@=NxE*F0}oBn)cPt?BEz~J2gC~SZ(JhyM3H`C>#0bv^tJV+@%Uns>#k^tLMbJs50
z<qXddM~})D>^f;YWv<wE5nhr{xUnPL(;;P#7453SKub=eLb<e%;LjSpRIp9BU0|N!
z3~K2`)k}3~DJ&_x5y+S@Ss@@m0=|Agv5vq6^y?dEv4LU|je%|8f;-)k(K@9K>gxR4
zJ)0Y4eF4&fTf<@Bmtkml%p$={ws1{-)r3cdd~|^xK&m>xP)>o8FqK04^>;JH&Pt~5
zmP=iq<02`hiQ~^AbZom*&V(SkngM=UReb5v5>CfECK%l-^TJnvkl_n@^f&=Q6j8rf
zS}Po`(au4l7QycLeX)|3K0dk1>YCtTu~JhQ0$R}HD09a6W`qm`72^Pdci+D2=Gu~i
z4g^*@98!NQX+fT)C??pW4mLxnkimF!OH9MKO7pVuyHl6AK-Wq7@7#wO@Y8vY(O?e#
zubZdP@@VBryGAVyTs<d3gH4-kcOd@S<E%~t#cvPCppK&GTRkrn$X%ZgQO^O3Z_^|A
z>`;SL8oe2PhT=qr``5xnNG4Evute9@uvEqP&HdPzd%hNCZF&Cz*>+`-jQZgFPV0B+
zSubQ?uGkF}*roEhRDN_LJ=yY?rta*SiRj-twX!i2z~<}^G7&2_rsVU-<Hd7}H1;Zn
z>A9{%SqL8?Vzu%+X^00w*|#;|qSh;3#w$CcmyZwp@CYOZzd_%Sf+H9({|=AfW&*Fg
z<#=!rhMsj+x4eE(g0P^&-;JaG91V(0=~ci=PxwhYJu2#nJ4I8l33i=t|I;-xu_7i`
z0;{g#Pa6ej2C+>QD+=UE+B;Z9HDA?8YM#tSSC1}}20@gbsvu=XE7|Bq2gBP9xq1zI
z^ySDGdv8)Ov{;1ZR5i<2Ncnvni*{uSy&2N1PsZ{sYv&eA|I~IJL!DKo4a^~XN;rve
z!tVxk6?o`(mq6Txwhn#q><CEm>3GjY`{*)(8<RrIom8<D)?H<~8LZoMd-Tf@F_LHt
z|E4K6zZ6(2yV~3C|2gw9oC|cS9Ib?fv3qPoVome{!}WQQiIHF4Ocv#CPGaQ+`8z|M
z5z01O97{Hq!2%=c{_Z0LzWs7!ld`=yfS$FW_!L~ptXkX1&Z)LBasouN5wTx@0&?5+
zaqqD5e)%>pWJn@<{VXi9WVfhR#KE8ax2XAiZcC!Fj&+=g<@gsGmUOVHF~U_{x~w^>
zR%1~kf@~^T+XYN&lemsWK*u-tlk!3JCf7mg>-LgaVy%xL=GP(G9JSb;lyuR88bz}&
z>V_XaYw$wp#v5ts0~MBfp%xZ~bPOam!0;4+t&UpPA_NM;iL%&}lN(J?&5}SjhVFrr
z=k@{qQl0cTE$!MQF031tWDd<-mQe^tP-3tf=tiZm@YgOtD39!7SzRjTTy&-R=Jk#D
zlm}-6%ol$8t8=54-inDkG>(<TS#r~I63omi_Od0nw>DWU%K9%HOC?c_n?iE;f%{Q?
z;L=qeAgHWb!C<9?wU7-;Ro`^qDd}|$-II(l-{kRQ6tnzW%AGU8k#QMdShQ^dq5}Ib
z5;)ZWx1=d}1~m0{3Ek&s=?XCtDV~Cg9nXE>z2>^}XRQ0V!QYES<G8t-<8RS;MEJlN
zbnf>Mri);G`$eKPX#MzD22;3)^mRy3UkyXt2NT7wkh7|2qbeCUHnU~g3iPyW+H!$G
zZe<|8W$bIb<Cek}%1`(MuZ1(~v_#O2iH^~gp-z;)Tp*SqOi;hLC?~ayY`1f*wuQs9
zhT9mtkFjXUIG4QXn!q>?nSQc87D&25tt>`XO`9L0tdOr>UDe1f+=Zpm*x?%7JPFV%
zDc@LZel}pbCOO|tuq*!$Vdu0Y3b19{vTfV8ZQHi(s$IKm+qP}nwr$(EJL2}sc{ttw
zkdcvd<(gv<_ZAbDX?AJ7MhnQ!a1r3Fs#&o{Y*J5$Tu~$kcjxT_D97OXKs0jPqn&_B
zwo}lf)VTeY?hyW^L5n}{D_^jnqtWC}=g+s`RMg}jW8}v?H@C}~5L;6um1cUh^gg=`
zWwp$_&@G;hw(8g_ns!|`$bPKS=`NF|JKhlGQi1rAzMWhzBK@^qd5=qj<F19!tMq_b
zxcqx~-j^1G8{Vm5pbimZ$5Cw@4h6*C^?s>rwd|R=%2*o0uj2Z*MlTZ8<oPR+Gp~D-
zy<6e=v1AfZ6_bCM<u!RTSH%_9a+0omff^6jS@8L~cP`+fPsae~>m+B#>T;DPzmBiA
z5aoWg)>W<gno41%YG7--VyY|l3T=7!oo2hjzaSkb_rfzF61uRq*-4GghygNx?SpCa
zUpK(bHkI?`k7e+7u_9i>ZYX#IYo{e279Q*_W`D_wk1Q<Y3%(>!ieD_LU~x+%NDPGT
zWRQcsRTUdg4|+6sdIXIemYoux(fX)d&Ggfu)bC2jO|?CntG(*d3Dv4v@tt@_^G|Zq
z-D*k9+ef|D8+GH4db8G=<l3kV6j__Rdm}Ggy=(~ta4G9zQ07ghJhEK}cS*Q>ekbr&
zDK|Vn__q4qk(*#e!LRbosOt<Dbnon$xr&r^cdVmwsFA7J&RTlge3soapg5THTQA-!
z%@>{^V)pKz-oJVgxL+j<pE^3L1bhjX`t4Rf#1?fcaQS5tPR>;h`hAIFwA+S8Ye{d+
zF%)R}d=!b|ubUW^y*#S-Ys%D`;X5vF=*NfH`?lJ*_Y}2j8Ft+$Be%mXX<%odi$o0V
zXV&8LtE1+Da?KW36i|hwN;d<FHwEgnt)~>N=BE}6>Z_*5TZ)|WsWEtPxTK-q)Z*ay
zIHdl<%K^7Ipu4VM%K@J;0iUe8I)A+|hXkdECVXJ0HtPYbd9wCAaOM>wzQ|NOcl8Zs
zBD;yXzIw&sKfmha;laf_JJXU?x3+^UB@WO5s#pdqtq`=*q60<4$~_px$q1@(L(T4s
z4J~w{yDc26PToQmZxw>{5R|dNzrPG{c1{(=YA55+)15dZk3F5f-<n&-fvS0YW2F9E
z4y&26i$zXGMjMZ*$>bc`txGAe85NLnhvc(q(skVn0S}6<fV`Fi9NrgPaN*_Owp}^B
z1D=D^9_TF>e3@lG4sSuVqlJnVMU$OGCd^<hPZFW3q38=}Y>wN6T=Jq&a|cVU(@IJ5
zm*^H(7t%7<z<WV#aUl({F78IFGF-f_c2~#3nij$=*b~95<SNvlKXeB^$=zoipr~;2
z5xo$0&^B&wyzvs}J`o?hs{GcWAHSZ?jz)S(El{uw?5D>Aj5Km=Ew#(XZ-fpMyhT<E
zCr;EbJ6Iu9L@Z|^Uzkq}{umbbL72Hv9|}L`EC#gp+9@VV#BrG&-XhjVPPwee6>lK<
zlY&$dv8p>^`>MudZdV=l&Nxa%{ToMS?+AE2l9ov-RL(NGzeJizPbF$E{DS~<tv55%
z<u@>F)JQFn9-FUR^pA<V{+s>y_~hdEC6XtHHP4D13z)mg|BV>lp`b#u<nzF%MdQd*
z`8gR7EW(wq$Zt=s?T*0wsTj}JNspAsRsJZzkk^XF^FE6}Z;b<>Wqn?1*!j7iv!=|A
z<|&;!TE)InE8Cs%sZ?m*9ZdAFyt+S}#gsS4h~Pj@!?wB4@9|fE$&IL-ZewMLI83+U
zeHt_X+TaGfjs^jzQp&0Fb3^jGhRm5!8Gj>Z`p_aH_LE13L=zO{BzGgvL<=UB_olG7
zW|ZSZm=8{RO)?U&yTwNQP^f<zRiupI>tiSD(utfcomFUb8TC3MAz;baP?0sYI{Csa
zKhfyNQ$s>vSfK*N+CCAd?>Ve<3LJm?kwBw3ZgWaVjWm32K<E{IicIs*dO4ZQf`lTq
z+x84f2m<iB<a2IOu4i_QTZVy7X(=Tkn1kqC%tyr)B|-T9^o&ao*&)o!xFNQCXia`Y
z18X9ovYP>ha+!xOtbrqCl|JQ%ghwfYq1S=ZH*CoC_ub)q{VeT{Y;<p#?7YfA<q(eK
z?TU|#;htFYJ78=3x7n8#^Z1AR5PA)~qdiL9?H`RMIt)-?vlXXSWup?ax9&<6Of4p`
zRHMobL?X|_;~b2>cqpYs&(89>J_r$my3#_L#ao%A%BWzEmdUFY+R0<-kKI|yVQgJM
z{(Qqjw`XWLPpF9XD@S?|=B)NeM$l{R^ixu5ccUHlqF|0u0DFa{$;4dGqq%KvUdFpf
zF3GSdQ{;$ZTDMJ;MS4jsXBqD1cEJ7^Dahhq{ZtF3!C0k!MiX;3oG+4?ELKihoMqO>
zf%Y>3N^OIPWi6pyh}23o#qRvMtAaPWEc%B~b<rQ>871O#vd#GfxH86rgSooh{3(F^
z5kd_V;<7FBIQTEX$h2@u1qeant8pW~6ahmOa4;E)nT{S+3ANhPSiUNu0u~y-#wMPw
zs`bD|$2UEekaMOY+t$^yS<A8&mwkI2`o~O?<r?leuQFH6u<LzlR!J;|nuZ6uK&fX^
z@2UZUPovN+<RlG#P;2tTqmZkci8~_<nF-nk1id&%e@%GlOy0zkP;U}w;6>rG%&Qc{
zVvr(7|JSCu13E;P9s~^`&fDgeK*((Ju>nX<E{jbxv*^?&T4<&9A>}0q0Cdy4eXd?X
zojXcc=B6VD+Hp5|B;m(H$23zUv<(vucwRr*+09M`6D*NNQZi1+C0lyuGDIC?y~s2j
zHV(&t@!{$L=CN=P3_v5m0HnICbaBRcaXJh0`A-FwfcZAi7q80?GAjYxnh`9<!44d|
zR#r*}xpxq~a13qh6jwDvbkM7JPSIow$ow`J%cgOq;A~@mS|KHqc8F!~xQqUFn>&d~
z?gixN{Zw`FgH8LM_lrzbIlP^)RbyCa0}la!k*(q5;G)olsuVTTM<6tfc-z<ccG;n$
zS$==+UJ-AJc2&(jr*+)*ZuNt`OnV(`9b-9aTDb3185jjB_2<BeUIpVc?MjRFs(cIF
z<j@ufg=G{`3zdjGL;h&ch$Nu?A__lAmGDWk819ZJBX8uGUGtm{=R{RVv&0&01xz22
zD(^&-=htX8sZi&*JGJM(o|?Sdr|PXB6r{Bloj%4OMHjFr3Ymn7BvU;it&|-{&6%|q
zYJ-)3#Hmsv-Za1-A5%~%oOJMN2WqZX=fO*$GRTHR?KMt_ShyugwAUx$Qr^z!q*5$!
z3)n?tk6yc_kg~;}2(_xN1YREs>toTtF6IZ|8yx+)eS()$u|+c=hv6AoWeQP-?#X7+
z4=Q{|O09t%H*jJ41J3nef+vy$W3tFcwy9}`EX-ukewea7wVJOb30L@C=(xTQnIE8F
z>bz+hQ7`e&y3K}KhFHBM-=aIl0v|AFlxeY!&rRwdt$>uDi2AMaz@pK)YsbjHmRtb^
z$_EgL74Xz#ad<ixkE3p49WG3pG@tq6iX;0fLT*@RiPbz??CV1;cZAUMn-r6#G77w<
zd59l0tZ%H7^KmLZ)W7MtfLJ!(Z3I04@NVb6R&sz`YUt3fu9tUNT{VIbXjKri%GZy5
z45H3S5fH{WrPe0V>HCa6V>_}^6X-PzkL41NX}F{lUJc5N#veYwL|V7`xx1H&(6$8u
zF<1=d3nc^b+?)PFh0h{`FiGAR@zBLFf?$C!IFg9!>AsQ2rbRKbDsW}ebQ$fdN%<z;
zVAF^TsOa6>%yDEhCQB>2NN7N&97O`EgG}Lg(O7HArr=aqM`jEOVvi&Sld9{KCFpl{
zRUl9~rXP$Pvk&f@=G$GQueQT8yrN<?M}S($9$e>FMTTY5kIQ#YK`nB@24dPtP5Y%9
zB%DG}rEP=4YmSejS*psUkt8|-#(9{7kgff(Dflc9Z^(y=23E)fA@>33Wba{HzwLNK
ztkr!|jQhGDYsPDOV7{Cbu47K)aCLw!r!a-*(|oQ_Dz$sn^PO&x8PC_R(@~6hy$L?{
zNH57}DQ*&_BqXTH1SA7Tl#@Q288r;#O38XqMEWeUVRroyktXk7h0!*ah2qD)4)H@@
z-ztu>&TX=}sTdS13J@az6`ak|$(M+i+38YFw+9s6)2W&wFB4Ic8PJ^h5Veb_B1Yd!
z+z!%=+5R<OfcUdd64zLoAoSMJ)I<qcIGg?*c9{UNAs{Gj$ofl7o4{%M4?7kS2n{R!
zw~3V%)rk|@Nyq1Q%=&1w&J3^6#+1dc*YC#xE;szN_gc@}b<X=Cc+Za-W-=Vv110OB
z)H_Af_bnKm<sL<E=PA;hg4h`YsLF#!TTbYH8+VF!T({-Vqm*xEVZ*4q*A1o6P^zQQ
z2y0{BQ<chXc)@(#_emQ(y#!-LrA_N2k0D!D&-JtX<Tm!Jq_XEiv_QRoO)MzrMxre1
zeLD`+T+)vsYgNNG#3;O2|FURnw2#!pTm)4!LY2`vFYC(sTA2>c=?FMMaJ!nyo7U)?
zQ%D_c7iBF3VpMjY>Pq$OZiRh~(`@^Mv(Rf?kpvH`>7?)G4a+<XExtbP_3bq_EkCdL
z?DV)W9$aGUJc$i(Zud*E?^aLIFxX^Y5)Sr`w&>M^Z6gXluJxu{8rpdUbqN|EvAh3~
znR3q?_zRVMTDDj2QYY-6q}nsZ9E|V$(TRvFo_1LMLrn-t*)mgnCAp&=m^yshI|hE}
zhOWZWl!C8-w`YmF<eX9S@0t5^?%qdciY35>@wcdUyJPlE-$8XCMlp&lgW6iL`hXKF
z75+9vvM2+=v)&tB-7GbP5s-%C(~=#zs6oF%HPZAYT0%0>jq4eMy<9iC4qSAA4?UnV
zv@^Xg7jHKW7tE$H+#AqC(W^%T!V?T0W-<4>8#-~aGseV&F!#uWSNh1G$2ryaeE*qY
zXyMi5wg*aOuhR`SWl9_UJJ{!UoF&_|gKajam-5U%WaCKH8jVQ$wz=fcJAq=au6Wat
zxNH+CTcFfTayJ;5ki!yVB&Dg9jfX$**+kfae5*S48!#^DMT{H$D1wD#BCI`~=;*@T
z1DS`Bi_CL-mP~XoivdkvE7^C^y2uQSBkktl^&l(SLHDFzm}cqj>$mY+U(XebzTmuj
z%^=%jGK9I-#<&JBP3sKF1f7Xe2X?@^=wf)UE#c#D)L0_*V4`6Y{H)YxAQWpapG+$u
z)C83E*g$zv2mzqHXcb?;F!mRTRrzF-DPXr?gEO4X$-E|Exy{)BUhSN{iVD*V{lWQZ
zp@3@XbmmUGfLFaPn2}<*!dOkNe)TMt4C1doEP#%pTLbTQtcKc@Q5$5};MqpN6%inh
zIpcIz3=_43AjzeQGbDwMssN(iu(SPlJU7_xLt~1Kom;%pH+1XrumW!6?swi;M@s|w
zg>RW>A0rg8^ixpDM}9GgnP>SbUk8kB3g@h4XV5rFUc2BszMrm(i2y$xFk~u!OV4t=
zf=iZt+8*)2B(JX&^n;jXzb#MO1(d#XeZY*LM+Fxdk^pHN68XhMH=q<Pn_e{GSH>Cm
zbNA2YT(LUCK!Ey_1FI>fV~ad`DafhKf7F2k-X)jmN9?l6+^Dcd!@g|_pAm_hnWXru
zh#oO`Y1_(%^*qb~jU~873wWC}!f?p~ll0(4d3u9~4>4d|-VqLw!!Puy&<<nnk~Gkl
zo6x<MOZvV1qNV*UzVMb3UO7Mg;v)N3Q0Rk3m9|0bn#^xM8C*;gJ4jR;8mjR;PHzOw
zyC?X(2r6)a4t(rlAXAqMpe7KBt`U4GX1y!?Ic5cd8i~^UH2oS+nLVl*^F_oFQ=x^+
zbpa0OJ)M@`+AGiq!9nPU!LGV(IK_QQR|w$`J{h71F$)WExKlz_mmo93-fcO{jsPS}
z68HN5r0l9WRWOm|6e%w@+F=d-vOa2)4s9}^_&$YR;}1V-8JFV?BnWzZ{&@mMOq!e8
zU!)1`_0+h>X9wX49?SpJQeU)#-}G0t&|vG#Uxj!$f$orElDzXMZq5W>Y$H-W(YMvq
z4yvB?l}@t;TPzm!Db_sN(H72>9h_yvV+SNGNYfLB2;Xi>(yxBOE)F~vSEl|6r6=T_
zR<q=A)|}nq3P{RGN2Z_A8UcN%Vgs3FgnbVq>aX3<r9Ny-KM0P?jNaf@n9<zATRI&o
zH}&C&3cf<|9RBZKyQ`*5+%BJ+-EyVY;kuSC@n~E&;4rIYj1r&W2+gp7h9|X1d&shX
z#f46A#O3IwDWyB1>v^EgsrWjHR5fYOO4&eaglYg!^3?e9(==uoK?xUqr@lMA-1p+)
zetjP+jK+n(%P3_v8E^Sf1T{;x*LZ_Qn~J&N)opT(au5A;yP=U&yn2DSyM@aP*J+NG
zhkKN-u7Vt~E{+Nb-NzXIIeFD1BHEs-Iia&Zf=xJ;(gSikENyT8;S8Ve>^@5sQ1Xwk
zlN_6|4`I1zRX}WQp~nLjG1-{#>A+>WmnBxT9YB3$1Y`b$mv{h<(YA7~skq+v)d9>a
zZBCQ9B%0ITMgQYu5BZzB*+VAAZRQ6}g@~b>@#VV1T({5cm%3Ho)guC^_PWXobCm!k
zerKRq|6SZUe^<gN&-L3LKKz8zMGtV%@N}zFQMJ)(^f(y!-@jxL8v+Q0DMJ>nw$%-a
zsStWsr&ag^BXLRpLMtYaC1JysLcd^5TePFLc#R)QuuICVSv$Wx*^I~;Rwe5@)2>u;
z@jJ!hUQCS5m*gms)!(F-hdf8<6cDgKADC-|o$RoOKv&*K!%u=-I?)!dj1#%~Dff4_
z^@+pxg^hsTew-uNZXXPs`%w2NOLKL?CQ7WC!;GLiKE`=qJSC3daQK0guo#WJ)$MFm
z5|z{CR&{$Fu}-r$Qj4a&Nx74Z4M^si@^+L9uO+;%$;pYPJsoVJ)(^1mEsL7?wt@TQ
zyWMSFSW>DBNuIWvd@MZY33@q(hH8q}4`hXC(P8Gz66yJgbh%yrsE9l&TJfnm03<q}
zm0y=FD(I)fIz+eESKK(#Qf9KYBHm<$cZ%KARdM&#<_t4^`s#uB;CyLI0qiCQz<Mt=
zA#`R79O?msT33iNe<Pc>byzn)yKI)v-YLFFN%$U2W74@MoUR10;Vr<J88XNYz&^un
zXbA*R=u<dpZ#dy{M>NU)m0U|8o>S++0I8IMSZR>4MKEbuDEDYO0hxc`YOM#$zM%{#
zr1mA#C*tQ0Fp403#u@JcaZ%tg<O0g}JtcMkC++WWilWqs4sHTm)3<_K3CYgKI2&LQ
zVoxFsqC)@J2W(R8Hv*0Gpg?1C`&&MZuwzJr4&`soJ%k~v#0-4V!ITH)!C*ckmMuK_
ze?ADk023H_EUV&dqbqO%2=_Wt3u8198B49JD@lIvB9r$-5o5dgoKS9h2uH*awUSQ;
z$HFOe#CL+(#Dm)RTea9>Lr&^GZJ2ipihn_hkr-18M%=!qZIcrAnVVNy<c+D`?_oIe
z;_nJoTz%kH#|ntmi0YIto&op)3Qcm*Ar`LTeTQ8vjWQE@v-DdZNH8rbOFqO@m_RJL
zI5So8Nd5Lk!xR;z)YC+-G_B<*5l~oX>CpgS%1Fol<Nc7GC9T7V&0Yx}^?xdOyVfyB
zI0+g$8fG+e_@K&@(iUjuTT38z=gn2i?T(6gi|_hO=hYNy!;}s!E}V|u#@V$M@K9vE
zmMNX_$mf&a2+7F&tLv4MSe3V&!OvpoM44ioAq5(jiz9I_s1VB_2}tTvBz#%l4@!Cx
zqdhSTzF|@jToGoErab_Xg(Fy}yc0<VvSjdHsRgvq@MTDY*P(CPHff++I`G2xJ#|Mf
zkmQ6i72Cdx;yP!D;D~X-<IPnKLYx3+XC^Q%itbCi(~K1nf)1(H#xJR3SUfI<D|=@w
zz7JneC{ci5ek68r;^y)oY4@YmbVZIXd3S9p<)9^}hofOEh@F@S^sh+&ajJ=G6%!bR
z3{X5&s7$w0VlK`o*L<`~%y3tElv_TE-bd#-X2LAO86X)aBw|QliuwUtH--eugyx$5
zqwAs~z;$t5cZ5{~5T-buVpMy`SY*>z!Bpfze<=})IZkzq6J(XwubjesP=&oilCQH1
zxg!^u8462lh7?G5w`4?eSWcRkB5`xTu-*USu0Vcop(0-7J#}-TjL2+;NL#ajEAD;R
zi~eu>^!3})k){kz^cWA6I+`yaeXatji5Azze*E6AfU)#(rdV0BCE%e(VgB|d@l_{9
zgUt<#Rr;<V@uFs@0f`~6Sgb(mqK`cF&(9`bP8+>Bo}OBY=?{<6ZA5q>1=p3nZc}x^
z(@dJNO6&bsCL>Q%o0;lAt)N~2|G6H{>n`dy&E_6_=!=!qUkkO0H!s}lidxl2+9<`h
z#;|(uOJ<r3F<{lNn8%opsX?}=@hD!(C}NodK$)X;iYx^?{;8XR$7S6%(8I5cplsMh
zG(75Txwu$8W&gZ!nAx<4ElnLg+@e)!l{r`#lEg+;JR!{??euFX2vXv9ac(#D9<O}@
z-}49&L^2jBMkC6dPd9t`Tj!bESb)=z9<Bx?o|=&SdVDCK(;0AC1BWTe3>k75Aag9;
z3Ri=eO%oYE9;)JTkrPeLPAN#uk6Gevy+l8mKM1F~bk+IH6>uuV=Q6f@d2G6AvXbS;
z)k`5Q&iGcXNPx*M-~o;k5>U!2Pg>51(5IR}<wX0VH~s>{3Fv7k@7)p(0YWt<9%_DY
zg?W}lVv;_Mm6K~K(vghCOm7oVLm+}4re|!L4oZnm;xis438^2mweyd1z^1w`cqw1T
zn87Dres10qczklcnW-fP1Z`$N-t<kw`3+=xP=CwKC=`Q%4=wcR^?j$S#FmI~5q_qQ
zSi|&><sLdJGWD+V$6r%5vw03@i=+cn`b|{snVJ;Iw~{rQnKWhN)pt~6%2YL&WSSp(
zvpb47)sWXoK+>a%z^ubN!++{RE1k3W%+j=G;xFP_$+1l5u30Y;@4~BpQCMD@vuNA}
zlRobN(S+ge*MJ{|ZP3G=^yaKSY4IljI|CZ97o@O};~0h46|*!iRn!I`bjFq~NXfr9
zZ-y;zuk#qxZwnyPP(>m7QS8G5RUr#lv&R5{Hq3ePx;iaBYvug~F1ojxqEnr{R5MUC
z@Z^I*8!=z!LV@%gwQew1%igpn!xN!7Y;}Xp$#mEaG0TkF$c2HnD;H`UcM<%2GDUbN
zR66@Kuz$rCAipfGYP$HIe>)d%J!erUkImCJmEG==Infmkl#RyR#l4-N!)>X+hU*R*
zJsTiQ87Ixcc*k57Avz2Q1NcXb%uBt2W6gXh(fCIyNRRLY8v#o2Z>VwMy`BV*lK7vH
zq&Ks#q2i1^ic@*;vtGa|v#3=3+~Ms0aZQ}_?~I8Unomt^ytohy4<^P!D8$UUawRqE
z$%mfeM_249C-oWq+6;OZM`DjG<p%5Z2qP3#CPDJZyLZwxg7!Zh3SbF?C8xnUIO|n!
z%Z)td#z?>B!H!d=2Iz>00RuTGwzQClJ%<0zi-Qi%XAVB4Su#P1<=HJbAQfkkrRV*n
z|9UOVq<GD^>K+}OO&U#IAP4?4PHb>|=*>0kIJp@XW4)0DnWg*f7L-C|Q{_y5O(L5b
ziStTUaLJLk_<~`SD&P;U6C>+5iK=%TL~{$}jN4mASPDZtD15JI>GY-9{^!i1k*f94
zN~r%|6YeGQMY2S8qyLKW7yRf_uk(p2soj9%OODi!(Y|w_j1<6L_W{TxFO`nlub~he
zKE0irwx5GWyE<GfM?f~zGm_yg=?*9UIdJ?ohl`cxRZvLIqHwI!UTFjV^c^j7xy4dk
zNhGQd!Imq8x)E@NRfS+jXI()MM6#)4P-rRYA{&1v^BPb7k)hZuzQr^Jv+#KOv)j;q
zQjPRsT2*Qg#|A&=i~m2pw+q9pp&!ry0GhM_0J#5!5@KTEVCZCM`@e%imbLykZ?+-+
z>gNKfjjR+tHM*8M;xRYSXm@ZWP>;KJOETd|1xe^pBoI<^+sW;AcY4GTP)fNZn3ZJ7
zhybmDqebrC0P)$aN@Tix?@_wYaFdnN>*wI-WM}<k%h*bZ0X~x@YCEBS_|AFCa8<6o
z44#F#=%hx)6A&3=&ENTFi1$HwZgV+bh%S*(&lVAeqq5Q663N<BMfyLlAQJX|Qa7;V
zgq@C>pei0AZ_0_F#YjVbGnER;;KWXSo9=Oiu$Laqhue<m)FH~8gouA>+VmL!hk(nE
zLGd||7`t(wy@Vv@*hGG*LTt&9M+lp@MBw6|2^$Sbn2$Ol=;Gk>^YP)mGlWt&#eU6k
zorsJYaf!Qixfs4VR=*6~pWI9o9W`V4(D<D8v~o1;4)_I2qMNvYbII5}?@RPvtcDck
z@BDFR|JKco;T{~fHRtk6`P?_q`Xi`YCw2`gi6LHp{uZTLGVN;CKC-5{Fwi!4Uu9#w
z4H0lQR#SOc^w1bUvMxMWS7d&Y?2_gtIhy*Im`bV(sA~l8M%&f3Plju;OF+)V!G4iG
z17ztxcTdrNp{oy9g6!n>(CWKnrD!uWgEMAqwDIA+GSn(y44WfH7y2P<zt&B1{a*E4
zp%$476al4R-wZ;#1~qMq&*SG^jp&gldmBA^1k1^@{I+_A)g$*N-s}FSloS|z@N)hQ
z_ZD+oelfP6!BR&2HH1CTFxK7Wv-^hs{j%xxmeLnHhUu_Byv753?W~6R2I55b$9cqe
z#@d=Q-p&`K6Uc15m)sz}4<fqw2E2{1;1%DH$U8&-*yL&4r3x|4>aZ?9{^PHS##6wR
z_|f+OYt<RCCwxi<r{mLopt`=bcDOIA&M1ix2BVNy{@jx71(@q_M8MfZI1oBP;J!$c
z7G3lmC8<-Fm(~1;H3^1CKb09l9-Q{uJ`?5ydVym#OsF04N}uOQ7_@u0J7s-u1nPwe
zF6X-is(PNhrT<N}RH~x0-Qs(x*9dSMV#iv)-&KYDTE=`@h@uqcBE1sCE4rLJdO<EW
zNN0M?kiL!a;d^<**5(n_n;tP4pZdmK&ICqKh&hzkO-^)K|0e;$TSz*93$xWe-jgP<
z(z|p(4oLn`0Um7h8oYALw%5VN#ZU*pcZpGNqu0TQ_ZqCZD5@^u4FE?1vyq658&Nb5
z#*LJr8(muVt(jX-uqI}SBcY#Bls0c~ykb$^W?I1Z*AQKuM`BDtAeh)4o&^SS-HB@M
z<WXLmB%3%UVU8D?KnVifJ$NdNJC}&bifow}5Pw8g`X@+_33mQFL?-&(3!sBy@@N{|
zt-bwfGix6VxGo%{G{iE@pXj-az=^)#rp>$ixeCXzcAO{)?15+O034PDFneVD+BE=&
z_7+R?3=ZtIZHx!i0UKe2kCc$Zxp^j-w=Bs_vTFK?)W~UZ8Vn&m7`fBv?3fXEENF1u
zA7rI3FqomR0WBK2OaxCHo;+0lV&-K)UKS#S(zzLi0A{03R?`$g&x1iA1L_&v5rB(}
znA0IyJ71Qrl+j<b(?^TK`wUtAIM06<VWsHH&X~t4k|Izp1XEMHY(~!p2YcV2p}k1h
z>O;mRAp4=OCVdZoyuA}W7DC#2LO?+MtynsUk3+&3ahyc|y))ngemTW6I{eAdX@JPb
z3JRP+X*DuABu;krO<_K7Qh6%q14lCI3C*|@yop2W%^`J-NV7=${!4e8WWorGBLOb4
z%4EZM3DlR#3ufr@d&@v3BAdURY~lPr2(Dm*S!7Po<Wwp-YId}V-M=z&IFJofak3(Z
zs(H>NDzGj}@$`|0nk`PyxoU@gfV`6eelnt7m@0HFhMC?d-rUoBn=_tfs#j{Ow=~k>
z7Ora14_y+TdeI4_?3z~LC8*6KPh_`)L|rP6U9Pm>_=1`R*H-1BED@xvM9pUj(>yMH
zJHtJ%<oM(L{%fOtnGJ|7G<8<-{J$pgr>q324bIAIQfZoFX7H8?iaaLa0T-&Cf5|jS
zW`MJ3Sn+HGo`J&pl;t1EJ*5~5>vX@uykK4$)8YMkjSgs#YMCX+9l0~>j8N&5M<frX
zXotDBK$i(QGF`Z&mdn~kV8%?)MW)4<0pnod_AEoJu)PTgoIdj`zZeqKHZYf0M2lSn
zXb_6;z0`?C)nHzt2@LqEI^$9<X-H4k7c8Nt39~&Ldr(&st0|8n@JPn7v}cZ?oInL?
z=i(%LEr-CQ4T-^L<2{6;+n)%P{X!3}q-vR&5i@QeWvNY&Yaq*dT;PJi8cWl}K&Ay`
zr^qMFl$tb1f?Bn>*+Q38?c%z4=W93T!aHpj;(H#a$<ULbw3zg%uQK-#7^l!a{I(Ms
zV4!e$F0F*L&jCOc0jU3!RnSO1sf5Y(5>Osigrj_k^wj<S+qwL6(x|p$G+^~XRD@D|
zykw4+h#e4Zc*^}wi291lH{2aM%hf4S#Ut1(Glp67fsL|Rz|7pP+j8u)6P3U|AV;c-
zGkkg(g8BOBFxvDj7JHq_Wn)4^@v0?D+5FmiqjeJW{$M~%CvzVJ`J>4fNRT@;LJkE=
zkBs|R-QYU@R&thl1F3BT**Aa``!f#RMd*P7N?!Mh!NpKYq7+8BCB1YuX63O26>H@x
zAYyzxBAc^sU4+QiRCF>8N?No9awygEK&-$PTBXxK(~@Y_$&8tUCXEZXaFQOVl%6CJ
z+71L9W7}?O&@#?DYTF=)gQCSmO*s)LH}*qtk*A5=AFlBH>%BDw_%2qv*@Uf@!x+c~
z1rxh(XMIAN`^(Joy{_=i!{1n(`Rp5#x(-Ty$-g?<B3?s9xAKdLm(oL8Yd|%pM-sQd
zQ;@qF1j>Ru3Ikvs3wvB8cjo_M5ah|Qso-WvTdPH*Y0oBa5}4ivvY8ZvOH>v_QyF?T
z$fZ%o=>R2o!VLwh8Y2wHaMsue`who{!DG$iv054T_jd&o9(*tp8tIPNDXL8abIgPV
zA1NY%Ec<fDJ(4-e#3*#h_wVKx-zlhCJS)b}Mmw&Kzsy_rubOAftDm|ps_FNGx2CU3
zsw@AM&d$rzxr9V8OCkG>jQC;pgH+<MNHmJT$vCLy4OEE={fXpjAmw6Bhf;(K8Ex-a
z_?v9N?jGTk9pri;)L3sB;sJ?y(pzp!MASV9@Z4q4^7R#M?{(~^rg6)-ebU;9uo0bA
z1(CU*E@Z+UZ}#~VEKP#pguI7i<|$d0L2MlkSHm~z(i+}hzknUF@9u7#;d?u30F~$w
zbdx^K$_r91^gt0zhic@ltBMv)&v;``22Y>(AaleBOI`}@vQTmg$0D4^H$9ZV3HHH1
zVa5G0U`^HOr9mPD2cn8cU*Jl}+VhB-_k7-yFZC0IeDi^`XrcBanc~~Pad|MJqW-WY
zC(?ti-=2w-TJS@EZ;usNqm1;><Srg?+IBB>o<|TapZU@nny6}1ztczEh*F?!aT9cV
z12R1J!O`Yr|Loed@OkL3Yl33Q<sZ!3fK9e(UBHWtS*D*~l;A=DMW@@4r<0CVF*O9l
zc<&Dln<#<XXS1FTZiBNdrGxv+c&y8{C0f(LZ*t=0#*I|Y9j4}TuK;7W4}9f0pLm!v
z!`n|k{Z%GDyXIR2=+$OYrJ<f_|La_-`44$8(d5KbjZeLZh@9?e<x0=GPn&!d8Ownl
zwzN&Fo^xwIgR$5wCF74t|K|#-XXJz<354Q#T|~{bAdBCYTmwB2Q(O@DZYshyi@>v!
z)Z!rEdIx#njZ!)Ks`KP`WWyRvDOmIBf!&a85e$;Eax4+9MmR!Tim`5#u9k`YE}i1J
zoo6EK?V(*kBZ8<zs2eIA)^TRaraXgI=gv@-%IUl7y>17Qm4e^=K=ce<G1%^;C9x|h
z19Q6Ep*ml!JnFHA>6x3F=EwJ=6pSHgm#M&R3K%CHVhjzJ2_UP$Lakes!MPk!(KA#w
z(d@)g_ANN&`SC|Z>1!HJI`i(NVcw2{)i!R@Wj(BLr1Hvdam%mw2t4Z;tmzT>Cj<Mg
z-@2&8uyR=jj?Iz#pqPdN{)TV#4;^32`yRJhB<7;7=!;lH)wtZe&Vkie?|%l0J{vw7
z3OE1&WGVmv{QnXt>>W()oSkj{FYx@emaY9J2htDDH<VtZKt^!oN%8eHCIs9L%lb5{
zte0cQwrD+rMR-elylA$>@ICHL?=G{jR0>YB?%qeesDBzgGtSH;v#?U<d`%mj3Ll<6
z)H6Y<Xo-l?Lwb&SvCGDhQ3*4u@yfN3w*RlRv2F{Ra`9t(S(ViARFYAR6Dq`%3`vEH
zR|)cY62)>am1#C;Y?)bNMfwcuY|9LaT3awsCJi(7LB_d`W<1RlZu67Om-qJzjP>as
zIGi+%Vn>l~Zf<UJq8K|d_1al_y4kYl?e%5)K|)x**h!vZ(OEnl%HikOUk>hWRP@@}
z8aw(K`Wd^R8FMp?YpiTJi_FcXvsjC%iXfBXeVuBuvxY8I;m^>kwRz+0@MJgWowY>s
zi+;sbWWxw8Q4D}ca<Gn8He`5u_@5UM6*=>bYH*@dX;QQbl_`QM`A81PVL{5AuT>0_
z*U`ExU~CzGGEEAbie<@w!ozb4=ZY!9gYJns2uS)*5_jnHAt5cp2b=BQsF`3l2e2?=
zzMME&ljQbYYsJHFijOr4=`Xp94}jT(_Bcx^;De6?*2aC^1n78<#pX5XqaA^(e%qIz
zDdqapE4=qz2p1)dX*wt)kMV4EKHHW4;ku>$aYJtu{89R`YF_DH{$56H+3LlbgX))g
z{A};n+>B-4!_<3fq_6C8mxBHHt80XK8z*kOWkBFnH#Iq^j21o=a-uN={FaYct?was
zW~VL8cWSjSsNcMA5uw|DhD4D8a5?eBxt;ZV36<t;3%j~4b#0$UjCB5GQt^vN724_Z
zu$AAw6!q5%ok1v+GqtVq0ns45tHxdb3r~yXN6FWX4XBhoM8f&=@d+EGl=~pl6?ru?
z>;e@o&SbS^5ia><;VV2Gic7}+Y*qxdcCb9zJt<!SV-QHQ&=pK-@&4A-Ox_P_$f>%N
z3PHw=^?lD2H=0HQ-oT(@3wW5ru!0b9Pj*2%7q*D9Wi1n?`+VX1p+QHK=DODTprV;J
z1!=@9A1*6n7ZcTT(-n&ucF}7RN!1i8cOsY5Wv2=$rPkl&1^2TxQ`c3KqFVuEmAa}b
zVIV;Zy3{nl%(RH)R7y|zw5Q2@j_&rTwE*lJA7E{v`L2Sc*R_!&x$4XFd}wWPazw9+
zIoQowc246+5;{O`jp7_>*+v*`1NtzcfJ;ee19?AKQtj%LTIg{QueU*~eiET%<zCO;
zXSok&YGfsX^%Q1^1@(z{B{O-5aYzhwubw;+oeb{e+r_P7l2?Cb**J5MASn~>z0sY)
zA=LKFS&@|OV&4x->hRg7iG`36bCq6RjCzg4B_D^ev`M{ei4n~KyNpF8bbwedF7FMi
z1e0YA9n8{@11ZkTv4KC(0q_q3)G9a>QVIvD#2L2zlUTWtoVcyL&~dt>Q^e%P_g1sd
zIh4!}9}R!NCTg&QV#)w_RBFn9-<GA_zCi^DnN3WPi5z58HuqTkF(d>W=Sb72rj#L`
z!Ec{fhnco5ALtR|ej=?RriAo%Y`(6ogTjR%b}M1cwkcJ^gtR8CYioljm4iI^$Oof_
zVDb_!)?x0_fz8#NWL+a^Re<ux4@j^c>Su~x7ZlDRI~h>BNSROIqGrZJS3wPD{7OwX
z66A`Vi*wY*T43=Us)0{&91coT+^N$2;a%4&D41kP$=?e{fB3`Fs8jYEzsE{dgkXQI
z1JWeW6lp_4`S^oymU9AWlGCW%k24MeIXsju5dc<?I~TUB&-}qJ8I@;DYksE@e#ZgR
zyTz-qLo#9Gok59QR<R>ds48HJ;bev>>(X~O`g5lKj%-!B137cveg@C?p(LrwCE~4?
zJZz8_E6X7<Nyfb%p)Akk81k$YK7fM>Jy@_P)!u1PMhkp<S%xqtN>rHQ&p)44xnEhA
zUtg*)-(9P*vM%=saB_Lv3onLS91<mZ!<Q2u;i~Xaa6Wn#Ukeo{Zry@kk;Q@+$jV#=
zNoMBcWI6lFxNf6AM5|&JsLehqFgl7x#_1Do{0*@r6_qZn-pXqss2byBt_D1H$f7ir
zZ=}iMzxR)viJXv)=!4FSL26KO5&8E=2EPn0P+8_AT(`zeA3&A5foOdxHRFF3*Tfve
z5$vhU7L0=uSw<NYa)4{GRyr!fi_lsNcbUuI^Y_#jNe|uq!%+MQfu(V1(cPZTC-{c<
zqqN5xdhd^m!<`Yn4Hf&R|BRS0A7S`w>nXp7)uue1IfsX*RRR&abe8Z0A17A-@Zy$D
zkx&Ws<|IRAYvFz7e(f8$EYXq%Z`J&tbX9M&UxtqMj<yd=h`S*`u#+IT?pT0v_VDH;
zH^K6!#L3}!_Q|02T$WGrKMARBO59xu1;@;Gl%I4EMEIt>hV`&QE(!Ox`V&07LS}A7
z`$I)my}X{vvsq#DpEF}hr&AYYo7DJ1_Vj&*CNkSaxn2YijFku^BsV_zro<2!X~kY6
zIt8>zLwlxY5HhGbM1shp=YemCPDVejm9?^g0-zzcuL{j1?PKSB0H-PNT-l3`Ke%W;
zF5adM52ep6ODcW@IB(@mL@r~=QizqD$yt~{eoVJFhP8giB0x;9sYh4&c90+aNfZ<W
z#Yp%|F2pC~55p;X2xu%zT5MUa^)~#W(+i5^hjpiljVGwH#{I0Slrz8Ms7Y_vAK$Wf
zfv}c`>a}_z+T&2!=1YV^^5$!co=hlr=B=|!gN%!NuVif(gX504BGm^_{f&O{Dtzj!
zSI#V9CE80I-yS8g3CQ;a_G6K5E(oHkaNcD|>d92qv<wrOG&-5-%R)pep`^ZyAX#;|
zMFd^oDt&`$(8-U{2<8k@n1HkgWXV&oY?P-;!eIS-&{q=4`~vZtT0__se9}EI^m|+h
z9aZV=s3{K^YL;i4pIn4X-Sd=4I0wM#ad!|dKpt|(uIv8vl1kYz1am4{*;!Z%phb=^
zM=mTp__{H(5-YixB4XC7?Be@m2s)%!eqwg#Yp#)3=#i0{5S)k3#!Z_z1ee2<BBfT&
zu$xP^yOrP-k3Hx;BgW5;a5mdVdcBY=0d~IK*v?*7CI<44z^;H1>$)kpo*KT?biaWb
zx*-zqd1MnAxuXd2CRw=|pDIj)9RQ0qnLD#M5O9eUI4~CY*O^5;;}uEr#kiWGxu$Fu
zlWv>I0a8{=;<xK^Rn1yQD=(I{(<EFb$Ltk;I8k)KI3)lLOxVVtlKD(|<K|;ipcOb=
zmTZ?Rpy*D9@#D=z>NXG0dd^+P6+TvY4ri_VT>i8#MLqMs<GT}qJ+5iK1E_n4RKpR$
zG^q|!bU@uu-xDr&7Pg5KfWFChV%79YRS|%yIW!7lA{<ZjGT}+fxPx-8TzlAUPRgJi
zR&2zii9*1WiX#wHYR`-F!fk>R-5O{mPphOhj6#qBl314uxp!}IwU};@kw+&tnLz&-
zZ(5|;1`R(b;TYAsm<S(`*6^WZ1UWCGZc5wa=sFpHj_uteTzP@Ba7NA|3f2)5-&Pp5
zg8M=q#I_3o2&}ta-SweQBlaIpE0?L{V7FTqb5Fy)(QXFAuEZ@-OBQG0x^Kspp~9zI
z<w$o;YlWR{8X3V~Q4b$R&Vlhh+6ppnYMuu-fw~T-M>df$vWZLu$mNsRCj;z}_*S0x
zZgbmj&S}A0_f_UV-2j$;=_mL;5|P7~lE=Z_a34ww&ye$hFuq+tyxBlPn6$^6ZHe;D
z6QhahwM|snU^w1!7`H-337lVr*wOeiQTGY`VyRS$5Cc%S0FuvU+Ec8%_Y~nK-(iDd
zBWJZnhc{^WkY&f2I{&pw>@Ll0p+6Hcr5gaKbL-4;43Z=C>z5uuNfJEUn)0AqZB1I(
z3ZaQ(sF*+kc8QhPA0Trs7=*)|g9S%%fukrsWnMvx_S&9D-V+U}^>Vkvg1rP>{SLuT
zvoO)2o3&x{Su2?5l<%_n|Bc~=N{`O*$qDfAaA4tM3O|Yi>`Y%IR*~KyP?9+K6T{o_
z9?oH$eVI|oeH%&uPLfDbM-%Kt0OHd+H1QYllgY5@iQhv<!4V8S93*~cXDNjSL`&c|
z7c(c-{)(0KlsMaq(?+d**TgEH<3<A`_6s>m-LseFE?@rxFejiW{M4N|F+pr8D~3>y
zTb9;5#WJgGc;aP~$J-wtw>~^*d%jn9eW~gB96uoCNvn&w1P^I&9DCP!POi{Bz2rIJ
zIHG%Qit;g&%OXvh@YR;_ESxtMjO759(Fw2S#o5J|dwcNQ#bOVpGwNUK_G!`)U$O&O
z<tUsE`MNn_><nD0b5s;(!qf7#khjzdL5#NcvQnx7RyXrE3W3FZ_EhezkMz;UIU|`*
zJimPMrNHv$dhVgir>gu#`1VOkx*SNCthjL%x<y}<GLNYV(bA7Sc0L-q`;Ld_jEz84
zPuzF)ChmVBhpfsNP1E;fzH91{+1UNzE81^*Hp`|tJ0uxHt_#_UYF-;;3R`;w1SEl_
z=QJWVzZ@<Kh4xFMvZOLXe>gj){`Hht)53VNiWpwJ4C#2uzY99wrtnq~!SS|1^jLwf
zE|+`fV(S_wa`9>zNv=CBOunw;#cIMDC9vj&TLH0E({rOf!?(Y2Kxi5BjrH~D_tnS4
zgQT!-GHd|}Q(CCNY|@3cRx3V&C1$!p;7J{m&%maKhb#L>?uo_4v1u1FOX!3IEH4qV
zAK;uzaA9HOV7kbeyWKTZIy{I88E9m0U&5jiBC4C#_V{kk|3w29*OnI7{(QBNo)4V1
zR<V0|f2`rz3i8Ua|K@IXC-7M@INB@{{0)Np{X(+uKtFL(FGY59`pw(bI<Vn6!9a3A
zzz3^t?iu>={m%eu{z(`;4F~{W4+QWpe&PW9PuQeoq+_IGFs1+h_A^tb|I<-qn=tKE
zA%GD4$}_xOO4IL~!aE2M2*<@h&?c-HMu32fd2}v(aH6)o+4&=<o~yjfiv=4TCc4d^
z<`IyA5=g-BP{bgmXlno?80{a(;&D}V2|T@-2%Uw%QrAX~4HgWlC7>|F03R6hw3j~x
ziwct7S6q(!vVX{O{%{!WzJhvyk0?khvBx)ys1z9PBh7eFu4^*z0(HVH>1jhjcnWro
z<rtPVPFSF675vTMf$NogAY&Y0c3-Ws3N%xqa%u<fY=)BX+-1BfT+l@j?<;IJ!?hLo
zD1``3F%{=2lhE(TP$a^3z%f4|dsZQZ<4O7$-gI2sMy7j%LtV?WeR3Q}BK4w|ETShb
zTa@#6NGa0Y41V956FEXLXx3yl<jhlYx<U5!F(O^W2rtu`lbIlq%um_?0wgoe`>I83
zd2W4scGBaRKAFC0sU&8TY_vs7W0_O;Wmd_K?G`cAs|&ckO?Tm2j>oa+52@^^L#=bQ
zPt_A;z<CgLuI5YcB4*a1!Of@U0*B9qsN6r76<F)Z<20o6w%r%Cows|pD$94yT6NFF
zDgsArwjKX^Ccd{G-R3Z?#mf&W3I6A@2G&*ABxDX%@2#-T;cn^&*nb|8#_rrDS~UOw
z3PV5uy#I1Uob~@lWo7)ox$&yFt=%_U5_TW|*%3(cao*QSHb-1%;!QX9#Y&orR7P8`
zkMkuY4q!zekcw<=6MuV{J>v32*3Y*;NJfzu(lDp~0K7TeVy+VhvS^>q8)?QJ=KA_{
z`Z~FM#mJ;2MKNWx-NZ#bKIyYiNc7UASkAyn@W+G)LSr~m6u#ra!UG^4V2J_BV!%qK
z2eFU`hmfHu5B2rOfLyu2L$u3EH$1G8NJ1+yMR-J*4vq0dQ0Bt}PD3G)l1Qj);=D@=
zjQ>@k;dBZYBZB-2Dry`6H^A>}WGx7whZv8Ct@gL<EWt9iOb2dZFcQU^o*<Gk{44j5
z^Gq8_WPA$`e|viiue1hid@q<m4>w#O+@2k1S|0)Ub+_I)$m{gN{>7r|<mB>{vUZ+2
zhVC>Qy!8m%Uf9#XGK$NPF!O%%Rd5$bdKOUpc(5}o_>?V}p`v~50tvxc<jxZE9c(f(
zJZuRF%$fJtF7ibp(x*|*M(wQjAt@Nqly88NfI>;61hl}hRQ@WkFi#})#i5t@$wLLD
z!K<Bkc@`<pS4{fIxnDm^WOQN))Og;N+>ckrWtcZ;b(&rOSuPyqDEGQeYQsa4d)6Tx
zK%uR)$4f;aEK@b5U^Zlsgmmg8u#@$*I;*>tvXyYKEhl*b>>Ip+BFrr5uTq0TG>yU&
zls|2jM*#Nk<x~ZHPdZSh9jxjJrX9dA1_P6@fLf(>L}2;`+vJ2b2k{hbL3PEOq#h)P
zC?TkzR-`F*s5iX(SEUl5WuIB?<V+|kPte5E3q4rpRjFopfu5tVqedca0LVdpU;dFt
z3N1-kvR-8&%x|9~#6t0d(P-8}uPQl8fZL}*Y<K2ej0vB7v5TyNgz(+S1Xgc48<#W?
z0TLpBkzZY+T}K%LU!P(G&J>XAH5t^0C7in>YwHO&QG*VXyHLLx`Z2)egU<Ul4%_;{
zktG`ez~STNC?$$ca<_*xm*(@pPlJu<Twg~6+1ey=JdC)jZmYk}UN;kNuMT{WlBmgs
zkGxPecCAoe4PU*}*x5i=EAYp`Lz~u>Gd_QrzcmC+p&N%&L@tZF@O*g`lCzhzwUE*u
z5<pahxbGHWF=sE}u?JejpM0{%h30djD+JPHr-A&$!2*tK@du%mn++Ghokrjsr~zs|
z`ZxoeDC`@7R8S`*=?e+v5@ui%+%^o=Fv$*fc;3bt2DXS(?2%_(gDUWX@L9<%K$(F(
zw26_tuMAf1V4Zjt7naY^LR8Ow4x#FPyAv<G4|VYgT8vcT3lt;)2*&Q5xgi3N;oD?@
zryVpP+>i-rAD9R70R0U~QwcxR(`ZkI@kV%0+f=6yOeLkS3z(r@LLg4ZK(38h!}i>N
zT-ZZK4|T8Qks_b4%@mR@-tSY~`5;=n=6M~vPp)L94~0;DV4J?s0FpS2HXj8S(Z=(9
zH{2z;NDSRCFfFu>VA}tcNDm)Jpu<@iY4IRgi0o~T3WSgfDg>$M&!tzdUgu6QCx*-T
zWa?3Sz+G24xY@$rm%srM@tph*MNHD6714pfw5^--Mtln-F=vG|9cEYA8cOGb6{wpx
z%@MeiY_w$lF5Zv!Z48FV7H!F#R(TVbWj;VhI-6Wc;FRXsse~8D-0DOD8QaV<X0UVH
zTM~4Zpfar$STftmfP#9d@dQupg)5Z#h!WF&acrwso;whGx$lB0$_lh=1$<^Tm*f-c
z*mp@4kzZ+NkP6T85P0=FL{+)RcKk340TSy85UHNp$Ma(A??e1#(Xrd3x3i<^9r@+D
zOV|)J5%O6lupHwT`Yy;JIhYQ9-ajGZOi&U4l$lrlmvnN=2pM{N!7gfaW0;&980M2t
ze10N>Sk6Gx=pA~3F<yNl_@B&Jz)`%oaM%=B0&%Icc~=zxGu4RenWE+B9t2k{$NsOk
zOa;MtHDosn5K^QNLBXRDPJHYjcnpVl{XhoveFlM(r=~dW@|!d!EDobwgiYG;2g)a)
z%z?y)yn+_9v*_C!^v$d=1(Ij?cb)w>GhvXxz3#c+?@@iREdXvL=m$Yq0kS^UabxvY
zW19})>jk*-fy`L|V@&dQsdE00SS5HI;1(S;15bSMndbLkglmL8(8@&rbf6Ot*i-|I
zQK^zBVi@9tE5aiR5R48LpaF&|f}(Jg*=hiLvS2{pLNOg!gmgR<Y6L~ZzB>VEZJjKm
z$7$*jH)I}r!s7vTC5KTsw_p`;H>kI{K^=}&;qNROyWP#;yO1Z}uV-D5T9LQ<q|^%D
zjR}IyH{xmd@OdUdT5w3F2*SwmmrPY*g1Bg;q`bCM-qzle$(Jmpy@p;vOFH2h*rJiC
z0`;-otDxDRacz*^{|`ezyuT$-I|5xOF0q9G??%>|(S?2SDxfpc8N?BMsfIeIvgD|t
z0m~Wpe5{p2ofcD#YbZ)6NvM%G5knwoRIZCgft^bssemYpp8TvB>1|1L`=>!@<v&!r
z@F14`B?Q%O|0A-vN1(XnlK3S~!AwAe2p~o_h{Bw7Ui2;*>$?>j5Ij8|Oy@=wihHEf
z5bN*I(VkW)o})Os%{TyI$Hlfehj!3>0K(YDtgxSe-<tKdvapklU9#$+xm2B7(=Mg1
zg?FF}L1T39uj?&*BQyp-{VT$7c2Xj*Ua(hyyT`wErJ&Km@n?^h(oivPc@7Ss_so3k
z`%_U4FMvj}fgf5wDv=$kP!4W|jIu<sTAB2=jgrm_2F&SBscBOBKl%EV7`oAQapJ=k
zwpvb$6sl>E4MyS9zieAUPDSsoc8WrTqB}Wz5pr2R>Z2I#D><X0!RkbhtAq-?&7uT5
zSt&CdJgWlRl0HBmbuugGh73PF@=|(`CLF#<)FisGZ|sRz9i2g1#vu<@iXX)b-x@Lm
zg$m7acWrx;d}x_aW^5U|zv)~dpHe$2Fg(s*8%1<*$rN_>fgi^+Klp+%w@6dMR(LF6
zya>Bwp5}Zf#)~-Y?%IIHOpi2Wi9bs8^PE!S@s09dP(%mW8r8$GZK7;J_a7S}DvFz4
zENri)q*qRLfR$GN{<{eZ3o)@=!M+#iiNIP3y^c+_Fuqk4=OLc(fm-07&*K_>C`5;R
zkEcWo6;`2QX!5GR1S>BCfQ4}PPz1#Tl*`gkROQV%Kdq7qAOOnsg41Tbi)A7Y@`=Bq
zdZCQ7dw!@_%raF~s37@)3mV$@E&(_}yOFCCSt4SQSCcb<%w*`ApC_K(zcwegW7Auv
ztnhGB^V;o|9*V<YUGn^l>>t-^%Jx5?!Jm=mydZ^K1%)g009bAyIP~(s%X8J0;1Wz6
zPXq!Vk1I-92R0cIYS#6PFmh8+GJ2y=y9zOEgul-a&}|<x2I!qVkb7+kLh3M#7$R9h
zRD*H4P-DCpVT;oi?-zkMTa$U7uApfHFco@nm9VlWSBWN6Tj#H`UDRNQ={<o?8?t7e
zmKoF6!B%OqD3+UxVcjZ9q7`;0(1Y{HX5+$d1O)8$ohwjJby|Z%_VoJPbUbJXoIajS
zy51!e_G1S+Yx3?*(>p-0ztTLKuRYs?6z?qzVb<r?6`&z|wyH_hK;<Oowl|o328T>M
z^o%n(;3f3lkfyEHWMZ~uCf}N=TEseSD|1HUw)HQPv^D~`BIc!GXxQirwb}D=FnsVV
z`e4AWo)A<|BJasm3OV&yN0@C;&Dk=V7so~h3mTL`eLRNP;Khe0dR4i>Q}+MnDc5+?
z>ECe$lf^#`$pv4!e@u*38X~(*reF~G$qa}L3n;>Xnj*X@Qa=p6`!o*`^tdY}5v=%9
zn-e*bp##Qw+RK&x<@c=qj<&<cB(2snfWy6gad`ycM9=;h{&>~N-J`fq@m4BJAwIrG
z_<aIV2Qm`?aerONBintvD8O=?r7JugMlZwCuAq2(gs95oOM>SC!e7<Jl}?(UB;Wub
z#}z(QR7uql@^$LQp`Q>xtFC9NTNHlQD~^`=g%2Wz_=uk)en!nn@C(WUeALfF6+ZCJ
z2Dg4dh=oFe7!gNvfQyQf(_lT`wTjG*CA<jifE$3rHC{0RihByA^nLckd3MQ=Dgf}F
zR<fBYdxEJI?u=ZPIf7wa>+y?OJW=2w-mmEK8z9&Pp1`A8V2YFCaQqrch$2nooekcb
z$@5FZiPv#&kKVrFNBscHgD40S(B%=7MDpGTEK)Qj0(XiWh-eo_Oh^Ex#oaOP9CC-a
zo!rztPUb$p!wRyJ$G~!hha8QbzA7*vj0&lEfYx8NpU26-DWf*eRG8H;I#grbs=TNo
zusmYyLF}zg8>`9zTw1R@0HY0MK)3DzuuC!)8!(FoOkG_x%UZ-QdEEaX@*H5RMlfIM
z-y!kwko08V0h=XUOthdmdtVolJ6HT(*k=tOTfo#H_LC@*-;2c)NES~csrvC+1*p4V
zNdstx(1pB(EsVfeAX{6)J=V1MsO+}I|LEbvuAT{hYLP<%MJHHr14oAwZqMhySQjZq
zLoCg4LwNC=(fmNG0Yyrw>4<oUY@$cXu*7RU9*wGKOXN+%0kKwDOji(((wymd*pj!S
z(&>~V-}!M#)yo3GD})Gkz{%=$k&X)Q{ZxdTQE+$kY5q8(f@vP^U<p#LyjfH*W6>qQ
z@S^10nz)$LT52R4ZKbJ=TD!tLcG}RkDsqbNX@I}>mZ~o9#y1z9J8_1l&F@h*Zb&c?
z;b9E-aCr)r-G_fiERqL-SgoI7)b+5@P6I<@=ruX6HpduN1+r0BTN>YZgLChqKk1WT
z<`qySSM^>jjZ2IlR0x0>LAhJ`!Dh)XS3oVE6<(Cg@gjk90ckPs)N#zfiynp8Q~BG#
zk)9^k9y#ifmjWw9$c+>IN17)zHhi4I@i!w{qwhz8+vf;%vnC8@kHdjXV~En^)$d2I
znk^X43e#v_@Td-`$bioj?~GZUGFmz`8=APWGn$NS^Q!99#2t5gqn5xRqApS}tDRjt
zLUEu*`@V6)8~TMW_Kfc96{I=}7Tpkp3s(2_I?B4i-=5PrY@P!&IIkRHgQq=y%Ca#C
zV~-!4iw0?9Rh0CaN8(ZPIF=o!5RJ|4iB60AWqq<O?;E>Ymt6S%4PW@IWI6UVO1@%n
zX6vMYiYy9vNd_S{f(lX#i8bFl^PxJB8gtgt7y@pHM~D#<uZKk4_nzpEfYq@P@w*)o
zfp2k%oNnHM;g+KAmYk42J`1A_^8DY4Mq?-F%P9FR!YK6z)~LTle{3v*xic|=K%19O
zyE)*;Z^zB50JH>=id(SO$BF|Rd<^B)#%ORX(!@x_|MQO=2l|NoSf3+4b_^rp!A={)
zJC8>~z*cF?m55Ol^9fcpjJA3Y0^^o28hp=P(QcQKvEV6Z(e%bo@#2=;#*t=p#Shzl
zJ3c!4qwS^%*@i^*+Z#~(ySHzDeD_CvOz%+6r-*D26>)oqc#b`fXdE(Z8nD|;MR&<~
zPX`)PuB1>O{ec(WQat3t2lCTtWB#}?|B@U%TwXRIP7s32q-FV!^`yR5o<>V3*xeh=
zzEnBaxRFt^5?V;>fi7lt)A`kOEc<fAAEbfRfC=Hlw-;gC;kw$6O8(}x@ExeJQr&-Q
znjP>X$!w3HHWZ_p%^%A{0PNU4(g%DDm5O)8_+T)NDO8X67&DXC`S(kF+nM206$08s
z9MEQ#tC_ezn62f@PjJPs4DbmSL^1IkGD@;S=oV@;fQ9cRKcuUgK<OwcZvds;F6o2d
z$<R-S_c$_TqT)fBveK3egmus6a96C_K6#Gt<XI4Cy+{=|Z(7X;TL8HlQPL%c<OJki
z@vLI?28IC7ud18d5=`YM*eS}cPS;5^o5hsW2R`bePW70Z70<qEgLqOvWFjxXPEN_|
z*HPnk2q`>h4G2#WjO*3#rUL^ObvMfK?S}>r&C4|0+X;4mxVZV2<Du;(N27`pw|V+>
zvvbCuI&tvbeU-&*_n}G5kfQr1@BZ+}Y?Cr5;Pq=@zLt0car3E!xF-H{8|)WoYTj(U
zsi<@%xp=-o|B+p{-Sr7O<l(4Uu!0Tk6GIxez*9N$1vkFh>W&T$PTs!l$)$`O<4rRw
z1AOS)!`|!&2j+eh^M0}~JyyI$mQITaRzzvSzC>Au9cT<CI{wyz!cITt?Jo^IZtaiw
zGHj@FWa${vzqu2up)SCEhwF-A2soMcO5(2eGAf0tz0{Hlxx@EUMGhg*z!?7$aX?ve
zB&R8ty8bGw+c-nIL&F=6>?`luvhh$y8|Z)LC%Y6!Os8*OnRuvFnE_J5DcB6Gd){zM
zoa;8A@6f`GZ4q_JUE?v77A0!y67?erjf;qEg#Z~jDlByn*tSlM%CUT2raBnk6P6>`
z5sJR^^KAuU;u50`<1zMlrIdG@hNEl-ZNJ%@aGKEypBs94Zq&~K_4Rp<wS}^_Lwvqp
zXwTol=ySRsB@r)Gm^?XQr{WJF1VgNYZ?-U5R^`5WoFpx^#HTN(Z8M^BP4m{t6{h;;
z%+6*{%x_D({>XmAil#P(KgmnZ7vw7byVGm>C;8UXVHKwUu0B4og0m0c{Pz>Eq9pI&
zFML0va%U4toY%@2tM<LQ;k|j|#%tTWMB>eB*)^<8JWM^()94%qG%=o%`ThqqTyTr|
zMt8WQ7;3A8f@~wAZXBK&f)k)6tju^BK<p8uyZkV1E2Xs_q`YA7$-STBbNcsW=7)H5
z-X|}Zq#7mf;mfY49QcDzggIeRP)djSzC8U+c@>^3@*-YRWhC|)6sj!c633hDg5k$S
zv24C>!aN!J3Frn@;D@2XeOQ`qZI#m6gdy#C9wIs4ETtNP#I8>~DCVz9nG)qwhu94{
zmkIEPnV$<=i0m;r3mI>TcGtt7mS?el3)_4t<VTUw|9;-vpB`_=YDNn!T)UJ0;FCAH
ztpCnpf`5P0#o!H)`b$XgJ51SMye23fLmL9P4h}(DCfbu&ewd`Yy>_Gm%Xt#i1+J%$
zR+>Ch2&&K?ZWO~Cxry&nijaH&%{B!6`ZedZMUr9<ALNO)IyIyyhS3=BxxHYSMu93_
zVGK_-2wqe7#JABUZc}{uXb#7{3h<2>d?)8d?nHbVj~w}FFtTlPAiqp)>vO&M^YwUK
zFTob~^0uBGm=y|VSbgv=MmP3w)V~lTuIakoXgblpS#}c#w9MDl^7@M)=Q-v?yuNOX
z{?F7hCpDUL$1*SF#vJprRr4iB1w8*~g9p_sQPuL#EKK{#vP}U5wVd35b!DS`<=Rp8
zy~1!|o=>mDv^a9o2EgbiQ&)Vx5#!amYgYonhf8ZH3F}Nuoc_R6f*VX7YjW#tAZd=H
zbk0YvTJv#qgYtFjeR~sAX%ks9d%NC<EBx@;vo6Hn&h^wt?~y;$!FNp+bIy3`no@D_
zW!!h&>I*s;Y<BXo9vK2he1VR^yB;~_l{1=--HNWJydQhD8b|h}rO5`gaqOM+>d(jZ
zXYuI*KGvU(HJvuriod#%%9>2Yhfn5hZL54|4Wsr3ANyeF;(LGGSNpU_`Zo?F2eiIY
znYlhAX-e}n8(w=pwTAy!-nVzRaU=QuKcAwlb8L~eBujGQ-Ie3y$PyiEBbi!>j+0Gt
zcqp<Zb<EeYNy)ksfA@=D6&?jNy4jTNnYnxW%*0|hP$&QepsG-hL%&5wQD~8VIsCX)
zSH!d?DhbUezu7-NeJknCXuK>noptPJ@>f{(xf<m5cGfwyqj#ca`xmzj$v1S_M1W2@
zya8D-<b9z(o*o~et+$8W*Jt}?G421-Jv};Y9jjGzZU$@rPz{k-vOlY3_U=UNbHVTP
z;P>nO<KtKA_&Ps0|Je@e$>F)#aoWG=c{$vF+X8*<t6lH}vr*#9W@n;f!I>?qbKL&1
z%kvdby90i9hO0u+WUEE$YBk`0`()0HgE#G?gO)lA`S*E}n~P6Y0ZK{Y?`zlTaJnWA
zkYs&xT`?AiSw0>1?l{Ikz8H;^IJKtPc~xnW&rKydCf0LQdZ#3;O?4QK5eXqvJbT(3
zxJo!J*W@9zK3!f(e^?8SEVRe#X03B@`t;~Dxh0z%T+(Y$4P$MjI<U8vpvh#dDbSfs
zKHjZ)Gbx}RXehAk$$CjXP5YT*e&MaAs+qfYy3Xed0RUEWjw#=NO~<KjXEDw`u8Bid
zkCka)a-%~)xF+7I8k>X32q7Bsi4wZz1l$qD-`Bp;5Wg|=g;6{@z4?aBqI_J`g6KTg
z^`5U;w!o|R+|`rKu=&oK#|G$W>wtlojFV{!Yam>5UBZMbWkV=!%_ZhBwUf{6!}@nL
z3Zf$U7^{I@<Vp}YZJmIR8^K<RF6#z9EPNC2ct>7;?dDGcW;hMNRIK4)>#RxeHGw$5
zA5zm-+HiTIPG{K-pulk6Ls2n;uoY30v<ZypqX$diXb+9`7GVAaSPrWV-~`l^0F{l?
z66|o@Z0MB^)DryYT6%gtgTWaGPjD~}_NTr1wHY{lAgw<oIBvw*`EN42g9v=Ezn)6~
z)J^}i;kgt52#-SD@nqAhZVxD;MLltc6B<=WF|;hqDi$P`2SZJ8MZerpTLRaI1(W5{
zmh4ct=A1aoYjmyT2+;F`_biOTLnzU8BG6cXC_poNzSx``NG-r1)`i;O*@BYD&WE3-
z-SLF3lt_z{uSJg#f4njlfl-NdKRNc;aiZq8PY#W!z1eCto;5WtX@4>si223~xqA!d
zMK&~>Ov&bFmTppn3T<jJX8%(c#wG_Q=WN`+d35O7v98T)1^$;expP&3&FSUTn#cv$
z{(QhV%Zv{*^bDl+aX#zeQhK@&i*l5k!o=2#_NLkh!1&JPUL~;%tQfHVy&aU-dZWqd
zqK(?bdfJ3}q1q=l6)JtQE2ZNSpYr)&A`u%yNdOZsvnZStz(}6JSTxUv4pEd=6DtN5
zfmzI;lGvc@p3X?>zh(ebOmwe58(x|nf&?+HbfEpIj$i9Fm(E5AZ3EeTlAxpmLAD!f
zo(RW4-cBq#Q<#hFYTQjHrfDm`amAynF*?jQma3HF4~VKa*;+(yDqSC*5CIL3G=Y&*
z76A5!Z#Gv;+l`=RmBmtimovc&tKGyDghB2IE8`-)q{#w2t=e&|d>l=uf**6DyJ+Q&
z`mWC{UQfTTZ5r$n0QhZ_xtKqGUlZ$BwQZIziNylqvDu$N$ndeDNhF>~)l##ob*NYA
z828VUnHUze9&pcXhQ%rhK>v>P>1Ldw0BDCE^)dir_g<r3&?k`rLH1`70_e`cP@~a>
zS(xF@te_(L*(SF-yru(IO@~^_Fx1o$chnpW)pnGpuwI-qe@LevOshR^zy?onEP;@O
zM3XHlh2}8VsHVtbsOFCD>kytH4tJQ2BcMs70?Xz@A5tJGvJ1E@G-a2@?zUJFm)btC
zoA>h@-I6aL>D@0KYtk?d0r)CbmfFY7ycsc1pOv6fI&d_tLX#&+H6P8Vl0wy{;Wiq}
zQ=T15M$Oxox`<Q&9>7%-dMmT6xky5Quv2-l&!!Va>bZx5WJZl93%sbtrG)+DAU8gb
zr|sogKghaZkNcKdF>!_-4B;6d4o&qx$%nIQxX_H;Wj+0x9*MIQ{Z>MXc5cuI5$r!m
zOYHz&%(B#Mlv*bz(6ewH0IFaFOLALv$U8H5DXpa+Gb=u7Ri9{rPb9O>VV#9RC;kE3
zyN+{o1q)*U%H>YdU(DbZEl>VH?Iv4ljfpQZ)!3Rla>)B|;R$h}CMgQvsqaKPZ5}J~
z=?EGN4?eIpUFKt)NMzJPSQHVVh>G(%!S%6Y-o=WiGQP+l^j0J{h+|B#%1T!AWI?)I
zNBpyEcAU<JYE|ufMFRGVDa~usQ;DtIs3u*%RYADG$s0RQr^f5x6(L@MwH_!b8c9`~
zoPvEGbL?ydfV@W(rooJf0PidAYQXn)gLpIJiRL$Q%ki+T%WR7#ga-w%o55E0Cbc}u
zFrE7=)_KcXnzzb9dEA|+b1*c*T+r17kIqp?-lW5!IR4oTSgu%41uvEnS;Q?yQwpr7
zL;$a;+(w?zDwAk%A;%0a1TRPWeX~#g&mzs|0Tq&^E1e%gLnO5;&XUv{Ay%%65yHh#
zo+NaxrlYCa2E>@i&NOH;1T(@+SS}{HH=G(mC&jMEc<|1K_YSHK9611@S0oJ%ti+I;
z=#c7Np=~fgvS9=VGcB_&SF;N`z$6v8o=wJ+1&kHbS)f6}HNQgTGP8TMQ~eA5qf?`C
z;e`&+>8lL#=`e#s_ju5~ob@ckP_eu|c4P`SWAdnkScdBQMx4|({n_1go=mf8I?TqN
zsE23@_H|TMEgCuLeauFSkuX5epq~!Xpb6Sg86zoi_Xe;PwF0+RfXg;a2q0pPb=U~<
zp>_ay_pk@D?GCHRwOUzf)eEnFaj#-`Md!!Q+^jxx^ZCpW#eX7{lJ>p7c_vm)1RAbv
z+_tde_Jf@QH1+akXF0U4gx8f2yCpEU>OkF<P<JKN-4dv~)lhL;Wz-f<&g9E2r`|<4
zQMJ#|)~YD#(32i@cszrQx$%neJLADqy;~-_7TC-~7E}wgqDX(fFa(dgGgcd8x91?H
z;}1%hxl_cazAo?Pj_Bu(=xA|14r@&Ep*J4`Z$b`BX5_Hel#l}gu5ZowLQ!Kzm#=k&
zj)=Yr{Z3S8<QhX;@Ao^MX9n|Ic>=!o)Kw_A`D{0t_ovR`uy6!HOC%ITl5ECGti2dc
z`s50J)Gj$7&7JYz*JNNK!>4<f$XZ=3;wK6AKL6nActyuBCrcWTwn1^*ADc@i;LIM_
zvnlzz*?VTblV;fPhU+ch_B=OS5jMSb)L0ki1bfyw7@p?cxa5`8><-mI=%e7Sy5$lx
zu6df}A-$hkQUmXt*CgS$;QUKP8{*<zw$jnA06Gfs{JJ+54y0GfTWuY=<u_qMaEJ!n
z4L&dG6YX-U4Zzf#!D*C(a#YWj=WC})()f0bQ$yMQrF4;FdHZD<mU492NJAsamo*wi
zW4_@S5&pc9Oeabvy%^plz2v$#8&Hh#L3)$PYZ>Bg_>R_t8ZlCloHMaHce<s*`K==p
z37*t)Re5zc^+mOkYwVp}C**a(^OI>~a(>WJtY>eS!z~2!ktblA!2v5aX?*327*-$M
zb}+SQG1H(G@)ELEl1RC9KAcDmy0|+xI-pLXig0`b@Q9ZEle-@qq|)p`sk{Agdz+((
zd?H(9&mN1&@1T9`TV&DOZu_-1G2ow2YRTWH?bB!S_tD9|_x-hBywf^<YfPN@4OF_}
zZ!Igx*XD9XHg$IJw@(gtYZ+iXW67?TFBFf?NK8?E^X&tma#O?Xx+d=Pr_bycbkZr}
zM?F^u-E}%d0qnJa1s$~gfc|-3v~t=jpa;M)GU;$k$}BmG4x?G$A#`?N-ZKSk^L(4|
zyGQ4AW!`;#y#Hfk(oBB;Thf@o(3CFRVbE`XJ@<Y=lj*%6n*;emPf=601)~7lmTL&F
zn;ufYK8_SPXRjTwFohT0$g5od@?H}^7rxjjzUl5ZDUQ|aS(+w)Jszlq`xk8r#?K6a
z{S~v9%{k%-g@;ls&R={b{nwW8G9ecLnE0ytD5o9V38-)H&y|hMsAnBarL~<V{hi2o
zUlccjGYLEhy{}AZ15TZIgT+)AXQv!eE}AVG7q|_IYBjs+n_#4Hvb?cjpb(TTSG*NB
z-un5pd-_xBSBl{2p=Hcu!<QUIiXEH92V+Y6%eUMA(Ny0_X(UVFgL;o^w(zyl@Sg6U
z?Vlu%Z>FO{qpe?{I7}X=ANxgw)Gn&ADn+Yc;fr%kjZ5woH_i|KEqYCe^13`vgE>Zk
zGXJ{U83=o02Q@v$Z#E22BT_?yC#}w#_F?jPlq!biCB!j1`|8bPV0?@uakAFZMW$hm
zU8L`Q_@3Hgx%(vxjl4o+c9fH&j(($MF89uB0UBY^`Ua6+@P^2zTZZFx*d4s_0pQv(
zQkB#>h2@0JuqlgWV_X%+>i6Kib0s>@F*fwC8>1f%UX^r2-xP}R*7uL1XR~22G*bz|
z+^|MSMLVZm4=KckqT}IK`mu*#E?bJdT=TtLl+dg=Y$H6YR`g%GvCBah6b-%1<sjeS
z3sCi!a44PFjw?<Dzckju2wo_(xfqCzgL%?llgrDEgvo>NrC!2y`D9<6R;?2UhNz`j
zKvkU$FBvdGvUkB{y+o9gk#5GvhOce>cew~rZ{Ar`5eBW5_Ut~Q_pP^Wu)k{Cnoky#
zu_pj9XFM{5;?K+vHA=<~f+6SHdj5kN-)u0y-eBv607E-uxf`<4K&!X`T9hRNz3ydi
zlnsF~8UG=L$%gqv4(zHcZMFYEa@rTeY;HC=?tv=hILd^mvSbSEJ*JO1dy~%*KbTa3
z^cTO>;nmek`b&N3LRP{KJq1rZzM|;*F6o6#i}C*G?P2@<xt|q77C1RSY@atR9=$mX
zCm1)uaq~p6in2&6-u<%sME;)GDS9J8NS>{0GKppeu<9{#6D854Ytlgk@by%U<_iz$
zY7vnC<WtU*-t0yp`fdt~k0m)s>|iUNYspxLJIjsNq}l)MZA#hxg-d~Ma0I*XuKKSF
zINljAzHQ^d=P_qiL+|>i*;lB%&yTu@^?IJ{Y;RLt>kgS;<HQhwHR#6UH(BWqv1UX7
z4&wy0!7GXXq?kE%lntKSstbiPPOs!>EY~%8fmaJGiPQuMenbb9axtdN*y<5B|3gqK
zjP_D-U7y>Kjf;mmxlGNw6xN2-U9rVEQoE;771L1S`oepG5rQ4LIfA<Kg=>l~bKEO0
zCQ5MkLdG=llHTQsD?<YL-=XPH(**Y{`~@>>^A~HhJ{h&N*@4B!z>n;k$?Un`fqoYU
zhdx0m3a<WB8-<ylY{w8(6}OXmm@94;b$S-MF6_?I|0zt2$gRS7h-ine54-=}I%_u`
zX|6#tSoXEyA)3h5ko-jBqW0N5-JDMHj4p6hUrs2|&ACZvvlV7Yx=*ScpwaD8YMjM*
zI?3|M*kWm8sTiy^+J*84eOtly2YFnABs+ir8xJ)?iXK6jR}^j<g4u7|CbW^4hlXDS
z{74~J4!<<?pkoV=_*9UqWYAtMCrRPSe6}Jffzk14)ppNSYDTJu@8^W?4S4t|>Jqvw
zycH?DzZxLpeaM)xXd&XC=uAWirjF}F4Ir;5my2?vigF`et{_N)+3j8qdslg*Pw{*0
zN9Z`T+B5kpe0_3=Yf}SI%s05c2213a@r{Dpi$+!_Oo8@<>S5z=G%2RIRs{xL;Rh7;
z@p8h6`(~r;BZY1R=39k?7~YQa((X)PoC3X44fk*FyLf2ok2Equz0F7=PL67kGE$<9
z+9I{pd0ray-;8D8817RKQ_!;RVoTQDm8z|;*j?L8bea181-t9@H`KzZZa#TpPr&c}
zP^Bfkq~M59cjGETi3}qo(wh#`pj&>p#5$9qki&(Xz|Z$X7KindC%!+kJH$D9wk-QO
z6X*BzVnP<PUO#Eh);Cpq-{JlD>-G9=|1`OzCZ2OQ94+)>-iy3FJ5z5}*WmlMw|u@p
ze&nTw^0X0XyTz^8jvGhWHV!8{zfEjHfZQnAu*_3P0kx#1Z-SIoMP>*~)dv@mX0d0z
z2q0;eNs<ws3w54<coB6y^Duk<<uH4`B5IDU@@J)e-nj=-QfK`LDxwXVO?Cb>n$0Kz
zg_fZf``nhHa9h1)eHrn&jXOQ$JvtA+OCJHD=(NxRN{H)Bba$3eq;<^n@W9)p<A9T8
zDNO>>=h8?Sks8+yA5)>7EE%w}(KpujK0K|=ToD#C!9Jvz7VosxI(rc*Mb`vdgLF#T
z&E9;HHOfZG3-4MudZIhH#)QFVd7_h36`HQQa$1EoEA;Ivj@-f7aRAF{qgMxIy%~xy
zh01WJCV^<z93Pg@pRY=A?4}a|N9vYUd#n9^_lnd3NUS<_RHPkNPDqJ*2n(D?LJi(5
zQW9rIV=kfg_<trsR^|Ie@CkiJV#|}MUpk!Brw{2fQV!e5+cklb`$#~&R?QNF>m>TR
zWZga3SEN{+CU;#KUJ;u|TxdqZ6s5P_@nSd(2{;D202y%tiy)_q{My##g9BW1BSIdv
z0q~w0vh{dMxnEWgQK}|mEXR>1%NSrhMb;G0r+SoCHbu0Om<k#bx(+H^DTS8Z)lms^
zSis_!QY<i<-Si_i5TNl${aG82a%Ko#O(8d=@6T$IHg=%G&VO0Ieq<@T<t3G$HQ~Xi
zGz6y=X>}ox6G{L>-o<U#gTwbP0jq;$taiSszPFKk^G@9}Ei}>FTXJh;p4hDs7wcZ!
zb+bVw{}ZWP)Eb(nB8%ab8b(e|%*l`zia%n2ML8T#`5E*nWLv8S4erFjsxrm^D>4Dv
zB|D_C)d{t|98^t8BQxv}iqSFGL`Qftg^>Kqg}O%``71?9(_TclCcMjtoq|A8)zEv5
zbJ1GeJOg+`lCrkB66BNf!cg#aNX;S8VHSKC@>&JU1V=b|w2Pf!?KWHqrLzVD|L7q5
zZUJErc2^n*-*+@%rdOqls2^$x%-xzWP56y)y5zOW3g-t!t?*$<qmC6;K-e*D`4NXu
z;q2f6mQD`A;qB*7UvXzsaD8wT))JTSI>oRD5++N@^vRRh{?C!&KMt}hwdg1=^fZhN
zZ(EP1qQ?_GL=bJcM-Cd=W6kE!E~Y^?&kAhe@|$;W#I%b?Fv)zszGX6?mQMtRNnU_|
zmyn&SS`$d=P#iD+vRsy}Ns;VLQb1Q55&Y|5Y5hG)MpiqBEYsVRCjJ`v?jxMb)oN*?
zbQ)>?UtpY!b5C)cg#E|PKOax$AQYcbO1$?EMzl=n>AZXcT&1zms(PsN<7YlJA6a~l
zBkSA4l$WdE>vp=kRc&*LI;~fgtZaX0Y5OHp6={D(>O-BSt=DaPrIuj~7-h|@m7r~j
zO}-CHZNAMDvF|+m@eJmjD{ym%JS3HFuPbBb59(pvQLQNW<@yTpU*eMcMfzK74OJHX
zB7N2_)%8fPXr#KD^mWpCSFa(@-nEAeDe}}_p+y-0DqvRwbKaVKx{j2&x(@xYwUIn>
zX6s)>fnMa#oNvNCZYww{Odu9XCyW(gs<HBc2_KIYLD|@hK0s-g|832VQlK6mjCEUB
z5i1kPGm!qA8$?~Ts0&*Zj{bd7lTnF+yAR=?vLa9sdnnLTcwQZKd%a&&cvzQ_d(1=;
zns7m>EktW;<q&$PbuQW}*Xr^TFm*@HIuwWCgmHEC2$u1)A}~~u6z?}TG8j~Z6z>N#
z3}@>Dj(G3g8$JiPEpGS)SHH4LxuQ?tYIk!b4apQ;<|(^j3qbt8bI}%r0FKPE=S*2w
zZ6`b}q6|sF6~jC+Hw-~pD{v+VW94_pxw))tw_xIO1<XJ>DE4mBX(gw@N7Cd8hZUEr
z<|R3=gvn~mLyA0*C!qiJS29InUiEW*V?9<JPr<1s^q%>{sBNan6E>}iP?%}_$&;e<
z%}dX@C$3hE46cWy9*WG*GHjkt_n>PNL$`#Foc6Mr<RVSz1I0r6=4GFKtLviPg=R0p
zEo()3G?8jU?Tw$|e065h28}Inl`hCE;?I5_@Z;9o3iz~cD)oq^3m#GBf)%gbkm}wM
z`0?L@;f=a2EwxmOR*PhR!-LeH;ln8naUk5LgJhFpDo{X$K|0JXD4-8at9t{E-h-5E
zw<+#*lioN6jZJ)XFrh?E=Hxa~>}la$y!)g9JJTWUjuo5GJtj?YaUs`Rwq9twKv5Jp
zgWZcpOhmj;%JF<sSAiU+jCJm0-@i<DYx(dT^bkfIA;!o+e)Ai$iQjx)>dxbdu-r8K
zUW`A>V$?-iQ?oRI6@8{Owk42kNn?H+W*Sxy#c-0R;e0ghYQs}DYo#~Z`5*td3c^=}
zOnc+D3Z)~o$w^lbA1G6Z&{!cFz6M!og<p{O9U;z$j;K{i;*MTmTegFsP6O_lwy;Lg
z)BQ8G`<|YuKVdr?CWbR(@_+}$KRvv7C8lTu0*&DV9>gUOsE7~Yf$G=idfVs`S9G(W
zl|JeXp;l2lklH+Yql@fnF<IpG-5>Na2@^4E%JO&U&!w(He3#0(mgei;Y?m@J-t+$v
zNf=E~4WcLmv<j`bJt;7=w|4e$RFXQ{2VRhcC3|lS#WlATlN%WW&uKqKuvdf+N8nX;
zx?ZO<-$E+tXj#Spd|!HSE<G_`sgs_=&r)s>3la{pH8Ju}((gImjXZd3A)%m%Xtcz9
zENMR)ULp_%nYNu2xTWJLzqDzuDKUE}B}$A%WzOzdB4Fmc6*L}+3KaCC2;E;zg$7nQ
z&e-e@4a4kiQwBS<3#-2CA8)ATJ@+FR*x`EsPhDuTZwC#n&^BQQ9^p6tXf7oK--d9i
z!(rB>LZ_<^_iLfWwtf{aiWMb#Yz_nO23VcgA{!!(4Fyx+-lgR`T_kGaG)S<u7LWtA
z9VdYrX?-iF*LB(sgy-kTalWYAWQuG{c_Dr_qTPyhg#mu`zSt`dkIMvM+OFiH6dWV)
zW5bJrL-bmDNXL52LHh%VzLY+V8;-=$#15m7QG#Qc4ed0{hPI{*;S&xtYE*0+i+NsH
zXC|?;YQMNceCF)vUTD7t)6J;XRHL8ExCIYnB~pl@1oc1e_#NwCZ}8dOvp5hlgw|Ik
zP9{NZ+8@~UyXyW{3UlTz)g#+c-br`JJ>1we2VNhDqeQj%cxx=%YopwXPW-(=!Ba<z
z{xyQ&&Uz*T6X#Ml!Ekl{AO!r~oVhrSZm69Mt8so%q)!)yso3pY*ISyhe5e?hbd+ss
zG&u_qz@+SzryFS&RwNtilIK|wH6lyxs({heCf6bL2^hxUw}F3iP3I8}4qNF0rnMF>
zDg~t>@nA9S;<sw0p?9o~VsQj$EeORsRf=yl+)q_@lHsYZ%?$0SFRUc-9((QAV*w;P
zB4VWI@F=kG5UPukh$uBSgmR9YDZ>^dQ?mKTuAi}|K|x7$S+U}s;aNz2rWgEG*B7N@
zYQKs><pt|!vG`qyV!y9dnnk(>zvu}e#?SN<0bF2t!>qD4s^M-6gB;!Ol4&WxgKQFk
z=d5<h;aPwpNFbK2fWOnF<WdZjoX6@Bc&-UtI}#I+AVkOKP$cQ8B`V&KOa^JgM#wp7
zAGTQ4UD&tdlIC_9+(>avv&9dEwn7=Qv=y(Qn@szvxXpXo*b2xxE_m0Jzf5PS!fi+(
z#U>u`3c;$^!H1lSr24t!$VXW^_9)Yo?v%Cq*l@S*8`i#L!(Q)K=#?zbWL>rElBZz}
zIrWvfJN|qEt@dP#I-(U=dO2mfB*`Y)<<9Mr9+cW#W4?k1Tg@#{d*KleS;VY9LtO`s
zI}I!RO-M1XojxL588a!tp%$SS;v;lk4S>4JZYaj7KZ1R2x91O^oJF8wW>OdCX_Ox>
z!VX5cla6Cg{Oij|H=jOE&d5zYPqvYHCSUaXX`Vj_V{l1S*;%e@GJR@llPxv*UZno9
zY=(<+f@&yVTps&W(Ahu|iEu1)BdSo(Q0T=finfS4s~Mehp%cr~AtIynFSt$drGKGV
zN%z~g*PwHbEimM0LvPugvuy?i?ld24BuE#dRB?(C^_{7@VGKMBw<cTt93>sqUtKwO
zUz(*}a2I)m@nXY{(7g#31~IE)?_DjReg7mSGZtsNQV7hd-uez{-g%(JeY;sK)WJ3C
zA`l-sTz*0ppMrf$_Qy)~WysZPjZ$^vswetp35%d0JK<U7!sR`S_It@Y&TxYp|AATx
zG*BW{;=_g7&OT(*sVZD46%>c5S=@8nUJTF3_(s6J^|pN_SLTQ+?SIo7QHlAdS{OQc
z&-p<I+bEU=DKku_r?fX4-pRDEI$t>bt(OlAh|<LK(Ibnsr8I3--=8}!`k>SOdH?w6
zaG#<`pSI3Uj?T}Ier`3tl#KbnY|m^mibOQ593m8)9ci<0kjw6TK^?5vl3dxx$<bw^
z#$OCzmXkV($84~{$=XaRoh--w*f>oGh}t|!2FQRe!NJ8>CkLiW!HdakzLmUJ1U$O~
z5mWr3441xFz1ct=zj<<z_InG?f<8`eQwgo#8#6>80aGc;R;@A0DX|@;2<pR%iZX3B
z==Z31hg3*;nvNy7^ad>;ZMW#}Aj_$z%`H*%sYe6-p`t||@kW7d3)hE^O~Nt({cYn+
z$(2!{6J5sg?hL`m5k`tI2G<+b2>y#utl=kUPgYWhrqZH3;)y}2=Hzk5lFyX@rmLl}
zl~6A?60Nou*6Y=xl`x8nFn~4?`IhRIaZ1-cjB~1*{c~W0oeTYzA1_Kc-Xa{B1`&uy
z7Ar>@Nwp#_bV)88k)FqBpuy<kqe&KL_}KtnE#|<TEHEjPDd<*X5=`r?`y?Ici^4}U
zTUtzsk1`7PFT~L5+9i`h#hHPa-VP!&3;Cu{s%(m7s=HuViw?$4EsUVeI=F}W({rHp
zv{bR?^pYoKl8^o>Oo$n2ka7X2kiwEcpeUH|mq?ZdYc>Waq5+Og7%SIdLrZxa7?m)G
zN>IU~!WtdEo%=y<#;p~NO1_M)vu~VyNiU5)zYseWMXd{UQ;2Y<I0{ZO<6VTPS95Z!
z_QH&4Flsr@!n@c9C|@_8usW3|({xP1^h~zn<RKeq8C1Xcg&_c|4xP46v<^-|5QES_
z2ShppA};@Oh*cx#XV`ZI`d_;5R+OQ|%q_!~jGL^t12gW}eKmlua;+<7M2|NREHJE|
zyQa_jJ0&#wXO+-wC$0TIyKn$));`L;;nSxpEZ@3(s_{4)0QWi1ki|}*U?rxlub`^A
z*OuySr|553x%LLTWG7uK-GC!|>{r-Ki-Y64bJgu&+1cRCf_w9d&MF=rsYS<WvMDhk
zJ1M>jUm=>e-!lT0jbL}leG4a)UamNwuX}16qh#|8nWUX16AEwL*&x4nM*@GZBKJZC
zMBWB;lRU^MHv=5ajXT-?N$cQE>)@wzv(va6?~o88i{vwi0McP}gw{3-%d=wMi(=9&
z?UHNIo?Y$;Vy1b^#v>&uvGp*UihDMzUMjHSJ#e(QTJf=`evKzDb->~)1!Jh_xU1o5
znKU?6`@@Oa<Eca=ujo^xZF5DSoxxj&jfdO+{!5e3Qn|fz7{|hvPNo!$8@@Mk*ui{Z
zOR@^IJBt}K#)=-s>i;%-c{Y(|E|r<WoVl^dY2o5N$bKxwpgPlC)_g6JX`0UHZ=r$C
zIozdT`vx!~#<<|c+xEe6`@9u!KMf0JO9|vNU3vfT@Qm}vG*{X?M-?um!H8E8&$1cu
zrk{{EoumPT^CWelh5YG{Y!B<5?TYRJ7Mqf{Aj)>a<?F;WMWae=kw55PU}Wr{4dl0N
z5{UV1$XY>O-RYnK^4Lg98?T9Dfnr3CC^I`jaFKA}_4}>)4Gdw5F8AX5f(y{1=$;+?
zY=WFb#!PiscM(4iI*3qC)y`WKbi&pp5#f<;MBd<h4sPd)L%k<%#NC$Q7MWwQag64R
zaBTgr$#)#mhNv_fe;^|o^&aPGeRuJb&O5~&C~g-im$s6Vg<@|mQZPZx>O34)E)hHx
zSiFcL!SVw({^EC90{QhK$Q9xH{TY^DXE<>ZMf(){@PEB)o&Aa^HW4$t2ZU{Iv1Lp*
zL@1m3W9OJFFd(YEc(mKk?s8zCkLT&*<hC~^AI`x9O+y3SpD01)E_A!BCQ?<kdw6ty
z&_){gK)%-PvW^-}24|gYDL9|Z1{WSs_IR|hHv<+Xd5o80;p+ID(#rC(YioPEvA}_>
zhv$^|Ta3E2%Ptyr(y@~YYXlxJG&NX^rc&`<R)w^VTuo;mZ(7EpVEn{3pbCLnkzSp$
z@FiSAqw7I^6&gUZDCV<XUmBc<Nv#Qm-h?X8uqbO>QQTRv{viI|ONv7w#zF)n4%J~o
zx~J~}cKTBkL9beXphToHwIbo?q8V49rwf7U<CZuAvksh$&<5Q}Kc5DOhW7&u#8^h4
z0$g#Y%P$tVqSbsyx*1$Ip)we3-U5kk#d0wvOcoou&!vrBuTQllOg<n}>O41BtnyA3
zDl{bo=JP=|ZZx%v7!Hcd0Ur;xGn7PGE#07ob^rGEKT|k>#-*v0$y)3@LTyT8cj|NQ
zV)xr*H4ZD;SM;u5NIGotVY@eZp-k?T;a584Sc6Py4%){$3vn~ZOk}8yoX>4uXXkk?
zJjq27B;|2s{PQe~5AZnYTxU71Y<uHmaW%Y4uGQL7B5)5G|DX{`h7(E<*~@da5z?7U
z*Rg|12<f_aL&~%3-gq!fIV;^JEHvRdJ5}`*xZCSYbsV>={mDoP^JCQjF71bD2yNQK
zDS|8D@kCz$U#GM566T4fC0zPq8wPW)NQQv}?GPC5n^j9};t6?9)!ItV)d9Mg8J`Bo
z;#qH)^sg~Fs{gmKPU3J0A;AfGLNGYI7LA@7(wUN*ZqV?RdK&`5?c5A<rmBkTa&?B!
z7qbfj1Lu2lPi<1VK|{?Z+*<)C|H!92*pr1?>ycb<bjV(M$F)9HxkK@YyEsoT!wtew
zl;TFRIhpcAraWP(hVRxvnIXQ4g(<RJA{D%yU&a7m6l1~3K?78LMp0+!963ASXSfN)
z@86zr(3{QmSa+G#<L1^{Z;soz3Yd`s1DUOYDo!-J9GZc;-w;t#G(`5x*BdK5Y^O6*
z|7&p3H52nDba69}Bdp5U9QPUe8skW_GntlsB0f9vjaYw;d97?;RRYi2ARFM$<uX$<
zW_D}rV|-O$r*5NE$4XFO&4S&dH@>^=-ED0}E)@h~d^+3N`F$2IjZ>^)PV)HFyLpPA
z9jEQnXJuzc&_oq=#c+?~9Z+wLF5n^m0aNq4cqp8>+qrIoG+5~%F0?I+hPG@Fk52YW
z58!|F_PoNDptdPPVK|*f@ZhsbafGRSb##2x`Bf2XOw9DR%`H(OHtqM{H67gl)!XFu
zAGp<6-}>LMO<Jn@$83{Z$v<GDd|l3C|C5=l*Z<-?*4LxpA}Q>@>%2+6E+HVL>R#-n
zj@wst5Wu`NdI|*H_znhSz0n^3Q*nL!aWov~y4cJ0>-l`T_w*@+n)$f(XYb-7oo!8K
zS5LV>zP=37%XO}__fVCcPhKK7OQM}9U#{<LZLfb{VK5#f*?lR-Ci%gHS6EB-k~Q8G
z%0bx#wLiE&_mUva5w)4dIEgBHCQ?PUKZ+BfsrvzM{xRgtf$*K>1ogNrX5+mqonP*;
zpXZ)>y*I``)9I!vw!RiUIAEwLPnxQ|Q9Xrbe_vbD?(b{ikyYFm>WyLiltk6<3Ra8e
z5z6l9Zd5i8pDLF}DG9GUDNnx-_lWpdRB@(xML)Dn9?fsA35Wa^(m{-qD7hOj?12Y<
z*)G*-9lw=n8U1O8axd#spoe+jHH8H{nEZz3ilm~BrK9}={B_t?|Dj{I8(a>EXZPE0
zH|U>d8_74%{V9I23PQKpaJU4e_eaOa^$^<qcIPwExtt)jX1)ZY^H<&wy>1^Lx8I-Z
zZ>?$!w}Ih?ez&tBzkRb^g*i?c3Xc&iIfYaw9gfLxkQlQ3da@V}l0iyr|81INdA>-?
zN04J~thCiqtO}~8INN71b{?gp{%EQ<QKqzw<XJO_GijcZ^`N@4f2BAAGIR=%Mqen%
z88m5T#Ph|)rjc(Vf(&VXb$1N00juI69hTH|u#r4p!t%s9JbyxZ!yI>uxaX^f`{&Nc
z^XQC-KGmO=WxG)!QG~y0((z&xSx97p!Q8}#8MF7Z34(^;U4Js<I5y;@^QKc|gB=ik
zVX?tLG&))*5Di_+PM7{l6JnkR^&T?)J%oB+-Zou$m{ZT6D&7n{uU1>S2$lB{!~M~~
zjR8V`sZ%T=AtYmqIT~;ykZdK%ejk>Eq+FjQXRi;Ef7^Ywy%EC7=IeRF@vYRzryqO$
z`S4D`{Qz};mhT1S!|K%6!Is*$27}}*?d9a;_i>JX2W9<9y`S)7)K0(sJ4@$DG-&#&
zqB5)!Y4m(L+)$gh8p0Va)~ujcEiRM%M{!rHg8heNORFc~xSXve_4hxxzq@t&TiU5T
zP^d<&a#SAac0=(qjQ?8flwPY<EF@h}>Ix6MVTi}n25Aitnux+^C%h+uw6E2B<dBYR
z8Bv)V&;1oqpCa=1Zl!$wb+tue2=$=HhHtrv%aYUL=<J|Mh*pP1I?MY1j9s@%&s1aR
zmtSU^CrV7Z<KkXfKCchE|J^!kHy(i(xEzG$hIruf0;ezaHJvvCEH;vgngwgRbCbbb
zO%{hpj~dMdbr(@nJUsC@_D6grs@fRPH7_)byfqHUD>uAl<yxh<DfUYBbfB0Uy4+4<
zm9x2RDPK&<jNZ)pR&oN1dSH{ss)BJOh6G-ONmrHaCOH61E<Md%FN$=iiNA$&GaZ)z
zsc}gMTan7e&B&V8VuE#`BSd-UkV-_F(Y*=^2_k#gj*PEXD4AE4<oF*AqW=wEDaqre
zp|@3nDOi)r<U52*jPJNB9>{psIt-W8uGs0Jd9{<)csMY$)2wtXG*2lBM%EUdl1wL`
z;(C+&Uu%dvv>oz3&HKIarO|3Ve2fgbYlz6gTMdZ-JMn2PL0KK1dy1_aO^4|gq?>QP
z-Ep+N_v>WA#vGvOS$dV_^K=$x!3%(PC7^fX597)0I4O~hOn)18&wNRks4mMlyCr=C
z$(CFI#e7fX6J?Gp-riCMZ?wkqwklb~`YJm1{6AJ%8xp@%o!*(V`3I7*8&f<reKJ<+
zi{*GsXCSBk+je+%e_b{wXuB>4e9m$_Sy733cE?Bj@_Cj<?hWzO<fCL{ofj`8wiO(K
z{X{Aa{$@YY!U1<+<0<M8ie9qUrVN~d2VZY?=)}>RG@BaQE!$sf`YrsMO$moz!3J8C
zj`%46*$i=<vN<DbA|T8s^WLyKO9fr$QJZ;PyEqe}<sc1tOenDhBT29|^k{-E+i;Aj
zi@U|z?rA4r)j`Es4N9E>@I>98mY#}+rqy}<Fz@xT=c+y7DlK)CT?*1g<bd7b56K!`
z2w}a%7Dwa&w665T1(bHS!g-z@zi!L+HNO5YI?~Gr4(x0(8uwr~ytQ!ijyXsOe4~!-
z-cS@5MF^rKnimkIP>)4#_hqw%#}0PggQ(xVm}Ti@B_;ZC8MV#;VGvqsyL@$gbpEDw
z7~e1P@UcVjD;DbfpWSIg<syECSGp?2o)Lb4v{PL!h6vLc)1i>~t3OkO(I{S~#O7w%
zT8^6g#zu&B&31^G4>9ap$*@2_nsS6Cwt!U!2$n240*_!w8^3fg3176@usk7Oc*W~%
zlxr_t*Gfs}Z2=5o+32jklMQB*sSFL)<4c0EYp<N#1{0<=brvJ6Q3<i(sj{Lk>x*;}
z42|aFwTLq?&c#bvD#0(<KhYg6xv5#S*6`|F0S4E-+{$&r0|1YWW~;wzmzHAe$n#&%
zyYG+Q9=6|~^Kl$2aB_aw4)Q;ecRU@XE2X<j*$7(;noV$36hiTqr?@vry0>)Ug_DN7
ze7g~vc}!%{YQIi$#Vh2O8F`2I=37b9QF1%Ut-a*n^xfw5<mw88H=InSQ9zV*4~p|)
z?@DLbOFw4w`r^CwYrx?36q7x<j4w=ItK)lBcuJkpdHVSzl7tgDSWk-8S_bQfrUi2u
zaX~7oXbl|}Tf3j;%5~vhKt1%svzHcv=J}A$!VOhP7S{64-M@o1I=Ny;Wi{W0$UMdS
zAuPYWWHCm{2t`U9FApx<t<L$IGj?hq<p~EtPvHlV6<jv@i<#onaT^3j2zb&rpzVDO
zH;+_xKi4fxVBM7DclkUW<xtlZK^X-T#^!Fa&?h449ePkS&ryxEb^YrJ-8`jGBuo_n
z&%zrh2g3tEM+e>`;9!~&PFE8h-;~jw%*ya8I&@%ZR_>sR#A<G!#rb(h<MuuqtHUdQ
zsw!YJ8ufI?ou3bHq3Rp@)EnOR?g}GIl#*!Y7e(xQ!bwMULDe;UM_AH})5yU7g#R&u
z2&po&$>QpID`^AVZKi}P1xm|&nt-se<EnRd7sAoR#drUN2O*X8@PEbmd`R!6GsVQF
z`Ie^Dx$%JtLBSbngT0g#i!*h@hKQv@6FEfTMu!QgYA_*aOMG-nY=i1;8YSQH%x|1Z
zKB7W!Manhr2ES!GTKmTA7E5_9ohW2}Qz2+Q$Z)<j9)RVbGpnl=unnU52X+9;nNl_R
zs=^|T-Jg|;OkcCdMpqHpP79~V7e%AceB{(6b;L?86i5`TmyEq*kSM{@HaI+E+qP}n
zIAhzkZ5wB7+qP}nwzc!^{@J?`_kFh`sym{8RCGsWR#rZVN7oq~hWn}COn$7@11dJb
zuu@92H7WnnN+voPOguhoS*`9TUrB>yfEckT(9kA@)SI&h2rN<VD2i#_*L#(Rlh4+<
zJmwHS67Kyw?np?bmSs2PJ>yR1OK8bft$-!iwgC?fD_XVOJnJNa--o<W>ZO5vjg!kV
z$9boD=g-<$S)9GM_dR3ysYeyxmB}Mh$msy1<9t8{EN<F_CEXn0zVlNfADwfE%8*L~
zzeKS_q%!qtihG34@E#FP7|}-M90p`k*KqhQa>#@R-C7^;%aPzkFdKri7yZ!9%Z^L?
z%}fkue0a?G?ieQC`%R+iNW@3v#DWxj)wQ`yA(8o3Dq)vycq3<GTyl++x~t^jo3HSU
zU2?0z$aKn#D20j$+gm;CPLEWQ-%ab*_u1B21kXoNx#@)F2xu7Q>~u#%%TP#H6UIb#
zEr?J76{RZWU6<ULLp3|L6iq(*sj1Chw{vY#u!6F}_`u(CjaTt<>#Py^I;XzcY9~2~
z(G|!O<LviO@Z@h(n2)X()AjTApEVz4?AH>`WnfJYAr=3}LfJ72!JU4V8DY#->0LZ#
z)qMPX!CCm=P-FIullXL<J;B!Dt>csML1SGWWi;xsF?eyv5jou=NkJFF+7zQ9H?_ZG
zaXComj5$kmRr(ygkVooFMh6lH5df@UwsE4}3)Wqn?A)BUqV=gS4OVPjr*QQ?2MU2*
zN+5yg?#W!V45V!Qa+@7XEjpMp7UT?V1x92vYa(zcsp`&_xatxws8n9dYIfyok!VA<
z|Hh^w1iibXvML=*Mdc3Z#nYyWO~57Ryn@B`mBM7i_)V)?s_?p4BTg-J(aD<_p9a^S
z$>eTf5La3{jJY`J9oX)aTL_^o-+13BL`y~a2~)vwF2G$)xi&g>{6HH0lL-BY3+L$Q
z;J0)O?+U<0dg@VDLr0Yh@ax2lB@7TCKPjbIwfnp%a6hs?DeVcbON);njuP23!im~q
z{hpKuDKHy-+nJjZCI!fSdEyUr^&oGEYGzBlidz-O^&S+|`cH>LXVuJ-9Jh;p3(q$1
z=-r<z`>(I>u9MES3#@oTMq)Lp-j#AJwM43^((&5^>B3<fC@b!oRv)VhA8PuFEGyHE
zDjpjMBTA1Z_YRr0py#>6>7SHU_4|}ljr|DOz=|$igSKF8#)u}HFL7wH*XS)aKw!^i
zqK(`jq(0KVVvlp(Lkm(q=8d@AHSDhY25!eYNfRQ+KL1t1JG9^APx_SI;o?sd6~7dE
zj`MNA9psF;M#Rc|d)*Uv<Dn~$+WI>9#qNw;9HlZuT_uu<XjvzwC$PEBUcPL89-Cl{
zj8>7#F)OudS_+TTB?(GXMZKb1q^BbQMmZM(bv*5uUfe;70QS5Vr=EyUSde0aspA6-
zzAPCBDI34r>mp@QCsanf^M_D+^$u5podWpI-k7Kw)|=%mY(R#H@(Az2F4}#saCX0l
z1?qF=lrS}MTkdFhbIjfSjm8x(oPiWy8A>0lb2%~VaeRCpVZVP0DmB<uTuB#y++eHv
zYM8EA_Bq+4vTT_ezwT~#b+v9t?&^~DY<LUie7#;+$#+xBA3~BRB&^1Jc5ZtP#w6UD
zprtT)^f>%6F+P^xo`E!BnO^eT28bCJm|^?@$I9Q(ph_DUuEI|(J1Z@(lW@=c1Ycoi
zJjG{Crmf&8eMeX4eE{LM5~OgUU9ALpCf}V#wB!bhEGT3X?ABX_T)SMqx~|JFTvkt*
z{y;WcVo5BaM^(I%MhT|%2wdc6JjVG0x)@(oV2(teqHk?&txb(QsQ-^JxEe6%pbCuC
zrkKk(16x|pW>GC_j%R2l`o6eq@i&n4lCTn%9)eoulZ5S6V%b+MoO+1#iEYi=z4Z)H
z8Uj;Bd1(f~aV}XeEn`}%5H;vsN|=aKM{a#?+M>c&6{op5fr~?m@xp0MXy9nbI)e*g
z`YDT3^ltp^AKV<+VAu+Bc9T@L*ge9f-TCxj{_<F|T%&a@<bmdAkI$}LX8kwyfs^6t
zX#KICx~oK0>+nc;idufy!x%~cx3h*&EhTn#Fb0aCTDY}frN>3?B_7{Ta#LEYc*LU3
zvD)pszit0XZFOjy<8Os*K@BDO<HNb4eo6(Jjp&B0Zlt;MgGH~Mj`laEy=xS5<d97S
zawLb`v|`~9|9BIXNIMKu&$2oZbeoN@CRvfVeIa1n5C>Q})pW>2?I)00Q<miy6$ap#
zu{ba7;cHoY0{1i<`(o*OLx%51N7l|E!+ob4jXXLL_U@+UlvIvuTtdxPyT67E=#9`J
z56M}6YzHQ)h<JV(7pHeY^Y)0hfF^ks_c!~oYN0?3ZE)c8SQ$WQ&Q_wziOh$5Uq)}v
zvHiRKIuRL>EzfISx_lTm)zUwlr{lX~PJ-<$T_vK2*nS$_9vkou;|}-v*KzH?&XRWq
zTev5bu$!&-a6r@~n|VXRB3(iJg=0VR$C~GC@WYU|?o>mn);2cZyu9)-#;LVxiwfhB
z*r-?)_3+?{^bLI!XF>!EUVwLG!;@=mSF*zt+~eu2qdVsIcVwTq<YWc@t_xVSw@{UG
z4KWi4RYTk#d~wA4({;hTe49ALZ`rbY>DEa~6}_2+5>wxIVHK|FeOx*sC55fon*nb3
zt(R9^g@B$Rcvq5dMHOF6vPua7kKKy7HZo42_r>=lAUb9;A2^V1o2{ym`;E}32Y?9&
zwNDJ96vnjI&mN4-fbT+%TAPF848b5osOrMLTCClt%JkXJsbI=mYJyC`@pJe(DGAat
zm_51|&;;9V!dwcaeA)C{Vc{|!Y+Y7i+=hL~6+)u3sj{QqwL3T_Z=L+wFiFjepcqT?
zyfC1)<{efmZAtH8%P${aPMjqmb?efCgx<9|dgu@D9p#~7XWQ=xT%D>zm7Cfr*aMJ5
zXW#74#ZCU|lxyLYiFsuVITRSJCebYU{#o~1#H5xZBN}6lD2CDscakucXF!>6`IqHv
zo#Ri#WRe|(4|9zbt-z{<0b;#GSrkdN;6;?rsCHVz87Yco(!;KjxXRq<Vle7ai=<A8
zPr0Qx+FFzISmc&}5K*II9xk>+kr^%%9s*%6Y?C`36Jg?nh(lYVrXUR>ZAl<u*l)*I
z*<zDl&Hk~tA&3*}v;iz85ki@0kRKCXv|(SvK*;79-P1DYti77t`}1%q*?J6E%@XBs
zfw~5A)9o@bbRS@Wzs8H3-3I^tibE$@#1QnHoXeYj3gC9%O-vvgu;Rr7l7LM;cv6%Y
zEub(JoVY)e?<34b2CJe65%>Y08Y>D~$)QdH37E`T*CbYDWR^kUV$gq|+?*dK+2kHf
zN5r)?{(f^`a8rA(!?@6zcGIP&)%#w&-7ZhuZU5~m>N04}>u^^er<q_N^RgELi8D44
zWPy3;)BBx|e{ZrVrZLhbc<cYlS=7fmxagL4MqN`}6!wudKxm+F<KZ#OVe?ZOH29p3
zh#rziMRLIZaX&x)wz&7b=`+vx<M3VH+mcpND~BbmODvadR3u6bhVu`6yNDse!&l{C
z6w9emBfd|;?vb(I;K)kHlcnq4xuLyY0<@Ub7IJVgCpDcdA6MUBFo`j$9$;Od>UQBy
z6daBHNR>ah`<s_GD`=lYywF8$t^pDH8a?2gftZD&f@agE{JbW!D+sTeq{LJ#@?=NY
z@;t2qIa>-R$k7>l74q0}4MY(;V(3(`N}W-LF>2}(NFrA15K2LU&Fo_9+(Tt5<maBE
zMD67AzM4z?B%(o3M-=UZ6nk6LE8|@tb{?b4Kds(0=KN9Ri@EBVBy<=ybIXUdOV-py
zjxxdmG7p$Cuz^YTPPTwQw@Opak?2!+(rRb-FNqm?m(IQ0yTBcwLD9VJ64C&9MU}HX
zAS=P{^~4~uvPas}o~bwwX6apaYP|mvZ8@WRpvH3v{d^eano>9?Bm2VK+rXws0wtCp
ztU$oI4|HaAby>+j6E^pa>&hYJWI;Zm1En<kCy!#HtTgi$$P97!kE%>@SnSby?fAGi
zfeRQpSx^>f_)ZaL2v&DXW12>2MB`g+ID_cb8XYMUu6b4AQkPYarx<H$916;@UyPnu
z9+hzHInJRsP{M(L@;UDM+JT`kF(N@jaS(9KbvG^NF?dU!d&DhGN6Y)ZKpwTQtXz8E
z!`ywKXce<YK~h^Qd!j=Y)7J2x<0kJapRDYLDUOC#WI3<{caGKxOyq5)tCZ69ye=CL
zhG6q0qe<vkJ>Qsmm3zE^{@~^pXwEEpn+zSjCUx)U0X}!l<KaQ?N^8kujh5Mr!<F;Z
z*DXND4-t;wM|_obQ%RSyo|WGfPY|yap`UFY8z3|R`uXv=1{DfH*T;Gdvv}8@(v{EQ
zl!l?*tE_a7?ln>b2=hpZ?a=9v!|WnfSy6!qk&4h!zLBNi_*~FIDX+-U&O^hrIX#%$
z5@>h>3jVj3w^OCtlNW1F05y5>q7)pGE5MzZtMQsB!G7lFdgV1@t%L^YW!fnQ3<*GI
zrAeW&X2y;oA6=#M0x-^s)Wg(q_Yl-|veb3KtAb>(7gOI0^1!wTXA}cv@b`C;q9XNT
zCV^pD_et8-Tc^ErOD1+fau-OtSC|(hIyGoqOwIAidE6wn?}gCa>2gn?!ibnH=M~}3
zXW<UGMcJQMTR%;x6r8b{PYg_~rJw3EzLcsR=_+=U#~|{}8p7c!ALS}#su(YC_{+5#
zqbAICsm{V)TmSLO6i!$=U<ayegS=C0Xi6%!R4Es@7FS<&sFM2@YG}Y7VM3>oR@a#;
zp{nCrp1Z|#c<^go1}kLqBxJ7`G@&%mp*{j|TgGu-%qE0;JCp>J5C$oA(gE1aq(dUK
zY&J$Zw}H(U2d%K}%W<vOVL3_H4~tk~zZ*)O%f>I%bTgAS+QC2aCQuJd(VEDwi%C{2
zQ9~%07Q}$7&zlIaG^ghJv5rr}NNhSH)-~NoJMoF7b}FT?E)CTy=^?P3j3UMNbyhmc
zrTo3kyjKE5X{al3l+dUJW&5^ZkV4ffy9_oCj=xa2NM#FD;fcnV_h<d`0sS3k1sq90
zQG1I%jA)<<Zw-P56jR3NwoC{oHPQgaLeE}=Yiuou?*t)W%Fqw!e>R~-q2=}1ga-g%
z;{NY_itY3r9bJw7XX4ExEX%(KqW4@q26irJ5K(nq&1(Qs5ul0AD1b3yHjWuIsniqA
zHpXLQW3|M0zCG93p(ey@X~ZvQO5v)pXV+)0ax=9pU46}K=FFZEUw6dDQyyL28<lLF
zmp1!#73pZ(+d8!u?C&in#g|6evia;~b&2?TY~XRVSaf&$V76+&!eJNvu3hwZAy&As
zU1>#_|NMLnP`fL`{82iFSLx<5WwOXnMJY1KaQ7w1eELOwb{TFmE~XTZLnot)8+u&@
zR}5o)I0+7cqWSkZ2_pZL0SDrs^Lh#@-TDzhtclz-db)2U-z1pf0ypR76xQ*jmH2?%
zGB_#*WfY!KbF6N7dU;if^a>?_G?C-p*yr-}$yz7K0;6}g)ZJzA83@@PhW36hvCOu0
zo$Bg5`Ept|@O{hc%JOAzZo1sOZ^4zAb}dBT41x`dWp95vc(2%6d7T6c`3~CKK*~!A
zc`SD|AymAZ_-z1ybGP?-oz@W<(PFQVj=XO~FlCT5NerP=tZrhxBEZtU?GN46)4?^6
z=o*k=N5~P?Mj$Y~`Mrpw<)zxe(}IEiOH_n7bXr{|U`tq(@J732xEmq&WrIviYC|Fm
z*$DMPy5V)z&|UR>{`eDUX`2zfZ#KU9YMvs>p4f%3wW6iO1Y727=~D6P8Pj8X@wkz@
zL;BTSw1fK9Tmf`!9h&`e_JZ@}6Wc=*V1-~5iLXfmv0$;lB+v|AFA_%s>n_-Xclx5#
zmpR8YRV%_|wE(>#Tq5JNE?iP|+88dI@&CFxfp;$?(c|>b5zumh>=3-d_PK(03*BZR
zfeJZZWzN%0H3&Ui&T_w)XMYHr>dvi^asEDYPA`$Nyz?96oSws{zsH96<;ynV{<22B
zGm%N)hNANBRk2-?$;PR)L0H)y2>F`u%4Xq*X}L);k!yL8k7yd>d8k@({R0*yzRPL5
z3Ex=60NF-Fe&u<_?PR|zr@r%jc&G0W!~dkY6@-P2kDHX`VNux)n3<-wS?%?HXMUJf
z?zH0tRqeRY)_&fS0NIm7XYaglwYBNpbrqO@baIB3bN;@q^R(Ai2KG!{`#M^h*~-{{
zqx0J2yY}4T^6_-N-^-t{wQZ+AR^iUn+F@q26Nt)8-Pz988tv$4*ghH-oPK#cKoPdk
z3*p;gq`mZE9zf6Xn(lmh86Si)L9sr!vUIH&r!@6pgu*YACzUu}C_~~?MpXtp3<Uyt
zHPjRXx4YsHk|m1>g@^@AV`j{y2MT^GAOrjt4ou;&r9`Vx78Pq4i$n*)!X*^e1IaRy
z>2bFRmxVtdoAQ^zXoBOH%BKJ+)Q@OPG|^re`tD)wM1k8`@y{QQjFL%-Rtyur{&PwW
zXZu}E@yhF<Kz=vq;|2MG@NR`UmX>7vSsvmib!?tjA@CYz(m?T0$@xM9iPK`?RWJHp
z+VE#=l7H?ZOmzP6!&k7_mE1|0S$fz*^5oJLmqy2}aW{CG=;vV8K8On%X0MA55EQ8s
z>>BqQ5&GAH-4us{U~$`_-z|uUlR%l%+~U?*=mcGzJ*{f;Zi(^GpZbtRup+EvxE+)s
zeFK4AeP4n3NJ(5b7=-Mbqx-3NiV}l-N*E&Dm*GgG*+Y?qAn~Y-54S@r_RPFV2n4@j
zkGs^-2)ySpL^t7p+)=3NZtC3KCxT@W_q&}JC**n6p<C&=HtycCxSKmon-3={t>A*u
zd{$VH!1%lL*rC_T>se7Ia*S=~@W;EN{kTwXH>+l@Ts;s$fj%g3H*dbjzmZhvESgiG
zLK%PEGjmyKs1W7zUTB)EGOW8(3ARxQ5|0OQwjv%=Y0<l}z2xtokN<1~*+jL1iP8d5
zUCiW;ON*f{#(0+^_O0rYfk7J%(8ib&kynbKSARt?0CFHZrmnC{5;eXJ5ZXguk;)h$
zGHCvO2AZm>w>4*%R3hZ!j!NI3D?viiC_!dYnj;f--PxSv483%Jwn+kDaRObbV@jmi
zK1kQm;=B&w0lV;%Q+Za#AwnFJsdU8<Mh0;{O{73^B`}U7Nic0BsevFg*$z_r;tZfp
zyC)U}`QQFnar#Cw#A%)~*e2W)c?h<tX*-I9X;nWis`Bw&cdA)>b@5*YR!IuByjLSS
z36iV~dJ%H>Pa%iFClWN@RegFKjx*AHQd#16@{?LqhJVw0GuW&WtrR!qC2C~gQ;Kg>
z!Z8J^Meisz<^=atcU)TgZpb@$Oxz!9IdMU|Eq7_}J9Df1%p|@F78+Ca<}OO_CFS(Y
z^-_f*_A!hgWd}E9bX;<oi_Xq2X=OA@WLuLBI?Vl|)3q;2gN2%<z{eF+(`8YmP5?8L
zrVMSlnCh&Tv5b9ys8X4;2O#g}40Q)ie`}#+DVZR>4n<I8Vfjwg;s`Fo9)qjYSUn#D
z{i46X;0DKj$r(@p^6nq?!};4VD3+PA(*ff~Q0ec@`HiuJj6Hpv9~K}6->yrzWazd2
zT=Jas3?_~TsW9Vo33`l-cmlrmNg|D<D*ub;y6crQBo|iOmGf59BTF>Hg<k6ogb;bS
z3j$$`PFPH{KWnP0GN^?hZ<FVxb7R}0j$*D2V<YO@E-oDhh?dPKlpTj0iR!{x=3cZ1
zQ(!M%rYdE7)S{D!TOi&a22KgmR@9PbGzF*-ZmgYkE`2FG(^~pz6WopqW6B7JQ?XCj
zmA3F_N{bcM(W-+QU!DT~YQ%5x@+$Uw@@fNiK%exUEgR@}hrf(CayifQLL%ziBjFVF
zFeE#BNX^Muw1V#z_332aq|a@5wFx+`-+?rZ+v(ubeW}x(9f=aO-cW>MF4Cr{gTFKd
z-@~gNPZ*vnE<%Il<{Tr8ufaYaGT&FO%wb{hs`eerh)!v4JNed8@ktprG#0D_V==vi
zApqd(u!tM-#|@w0Mre!uYwSoUYk4~4ceM}BVubE*pQLpdJ{Oh8-8Lmc#H5034Catn
z=;9Kw+>q|f6fJv<b(NDTqvXDsT_Ppzr<-p+hLxhOt7s{1GBt`4E$%ZW-dV^<t$?g!
z@TNg%jwxnRAjTnIDqSI%q>-6BY<p_1!N{zgZ?<SqtrA?sdkP%wa9ISQCQtg8=auy`
zKi{CV^4tZMNQb*uug=2Xvm<defxN{BrsWcwGJIMYi8h&QuL4hUEX?hiA?!Ktg?vE*
zSMpUKLlF6fJ<1?fe=5qQ13G*kV&0tb?Q`$@v-zclPK5RrQ&g&|7~f2A1nYo5D_hbi
zFxAQvJl+s;4LKi0ywymm7Y(aue!A1j{n9)A0^*0#)YrR2b5GqZ8SE(dE=b3J7_ET_
z`kD&c9x1fkE4rsVvEE<lb-vcqaX^Sw^nzU0Xt&uoHumI1;nF>YG{1gEv>zULmh_Ye
zc{0=i(XmvE`W0<E%voHb#x2&RK-Jl?57>PPZ0Hlf={D#n=VA91kcBjt(xvwjOpTPV
z9DyBWSv*v&B7DnGhxv9rga?svvtN{()<%Pfuw!_-F3oAUJJQWf#dOjASQDxIdGO1+
zH*9esjNItq$Ii3Zjh{IJCdMc7)|TQjUqTjSw+AH+A^kK4%~;8BdCcl~P$%t=oHCFW
zC+g{}%?JFSk7}gRXwPy^1V*+Iu{io5*ivPE^Cl@GpcA$oDYFM0N-4FF`*LI=0I#k~
zZzD6yYCd3I56#-Rye?Earvi6y&}_EKwMHacCC3H*jLgw_R-dKqtnZj&({91U<Y*`G
zh-6jr71bup?wY0D5ZYXNfAPP6S8ARjpi|zJ@R1+;)OcO-ExlrmJ)wMs8z-Mj?8#w)
zQJ!Wz_*`sn-qE%u@NRg0D44eZ4VTkk9m7fyrg!w!-xkz=9<Pzci7tlaLS+haY+cGJ
z{vhDA6TR(LUCLJ|_yH$Dvh{}t*GT%5;cj{~8FyQIjlI`HI){YooNfKHnq;tC6C~oU
zV&dD9M1M!l-rgOqF{MIaX3r5l6fn>;PDxABQzXH?<3y{5<WE*jP7SziRPa;Sgrpdy
z>t)iI;?gwaG>x9IqrL*o(8s30#QUr%Q;ue0CLoAD8&epeFF{cnTV=es5aJ=^ax7fP
zs~ksx<z5H?F#Sds6rg(~Xz~j5R~7`WHd$NJqA?2CoC%Ttgb$)zNh+!a6dt##WROpb
zNZ8p4*Bs}5;Nx2P3?QyB+Vm0~ooXuD^lD4X@RgjNQpEjH(Ku=Cs$M0mIlu`v4j3$s
zJu<aaeS|m;42NO^MSku4(D977l}oBf?C|=dv<xv|zWaB%McaQucUr`Zk^e?m2CbS+
zlgh}pmf;h)LXVV7o^eJs`*@J!?%*H+)~QWpJXsN%P?F9W`3J#r@xra8p&=kEne+=A
zZ9;fKtL-`%%7lX0G&zfHqj~84!H-=RD?P;=ZkdH>EObVvq2;aU)Zve+SoTpNDro)(
z9lpl?A|2T~8cPVqonF)SvRDd*MBB`|7L98fiGC&a5~1qbT`)3!-2+SBCn4`)q@XfA
zq$@M#TJ10_lHDxD9VCe<u^etVqwY?@cxvlcI+`4xY5hDV*kV86b;W*Eb+eEJ<}X?N
zAGk@9J7BdTi2E>)Y}EC2WGQ$CK2HKzfWKyWE%4eJZL)yfJ8N^p8v8b(&Q|n~!`)?&
zL+C&T@sUfkU~}k71(-A(#oF&}G<<BBy0B-1RJu1ht~0W<Hy$O$Fn;LQLVAo@h7B2X
z>w19f&w_LzXsxAHK@(UE=j$f8l@?o#gt6IYg2+>iqF@&h(%#Ja8ONnpBYPxH_q-K?
zu1anc%$i4fUGh`O10FxhY5mhNT1IK@%MYShKU?m)QK6hMm-4mq{&E-0w^#2iEd^Sx
z71)dQ(7S)YLM--9!&t1JM;;*cRI)!ADgiIi{)&y;hTB}s%v!^5EqgdQmjf()Dx#JL
zr+6#b6;w6lW{;@L_i8MhA_Gn$2^fgJk*vhiTW_7SQ+bd{dKFfyVdH(S<ytE7ME0LO
z{frb$=HK+2hQXjR!AMjg%(TUHf6GArCTj<de14$|elNbA*BRk@wz6^B<8p_^HxiH%
z;vN~wY&HV6?Z1`;DSWJwILDP`)K^g$*9G*wP{S46baw|gkxZ>^nkBE~)B9&6PBeV)
zLNEpxr@OmvsJMW{pO-qp)pjmXxBgq}JSZ3<`U-S1P~s1T`E0C3OM$Va9$0Y0$Syu*
zQFs<^I{F3|``t`eUNW|Oao($og!9IN$OUa~9)wt&DuE(~z%Ivj>mpbTtYn8)lX%*A
zuAbt6lX;kq!p&-bf8TV0S@`=!d?HriK-tA3-w0`P#@gkFZt~^hC;YA3bK5Ig?#*Kl
zN7o3om#O1Eb*<!w@x$w7Xj1&5Y*W5MxSKxzz=eQ&e6_>{LYWM&)ObXsan&@vOWP$=
z<fZ>CN@g6Rc=Yi=#?87xE{7LqH%COT4VFRm(r*^91OnF~qI4$50K3>pvB(-_MWS{g
zL&zke@esU^(Y5k35v>{Q93bkO4U;}}#j&1zM24Vgudc>8EeUizUGF~hhqvN4yAVyZ
zp0UWQ5a(`gF@&-Iw??a)Lox=LGsU#%K2e#lsvjSBYSE>Ud1~O~8$@nE+Xq%EPJV+v
z0Vwp<zx^33-`qA8VcAHy)uB0R@J-!-o0$SKKC06ML1|S<hpeZ#2FWK%PTDxZny$jp
z81g8RUe;`6Z55OOmNuzRlDz@Z3jL#U-#E)csQ-1p2Z#c<sx79#{!)6ZZE@I?hD(>|
zMFWeKOltj=?mrQeTbR<`?_XA@J79qSO50;(#!Sz_N^56q{Xfz61S^ik6sW;>KA@D!
zZPl0euKI1wW3RgFu?9{#0DrDdP7m;Vf3?2Pr^b`Ul!Z-3$$NQq_DMm~+baxNUyoxX
zkZEt-+<}<@;Dcw<+O-WL_~wP5<bn8*q=l3OZB635)>K@Zr2xD?OF4u18)I5FAwn<K
z)0RdXJ8TCQ+0Ho;Vwh&3dY{de@oq^ckW2f<+LVzl^zQIs!kGLO^q4QYsesnMyC)2g
z61+DISuIC*{SdIk@U>w(`6uyLlrKkHsRD^c?u6t-?zdZ2%@ACfscf0UuD;B}qjfQ-
z<uJ!Y*#~fDi$zpFvsXGVfU9fqTE{haN_(t)BemxZM<(X9Cf+zuGa+5A^kUX7#`Lk1
zQ7p4}>usCzp-MhZRl<>;dYwPE(dR@W-Fn_{X6+YG(n@Bv?Nj*K4X~&#uqxHKUFr@t
z$1F_`R)}(LTwO6K-9uC#vMYQK<I_B!x@U@eo8+qTY`O|85E*kVbsf;%DVx}78Svgr
zGDp`|VeNe9Ce4jVMm>sp2m{B$!59fTE=zl^+aA$M_hlJ+t@xkx?qk4BcEfFnzOPv{
z{~p|++I<rxs*z4go)EG#H;pVNNpLA{DZlPR@o_L!AavI&wv3exgH({B^1=CFgHM{6
z6dIU=RMquQyGW7Lge=v{V3(fcgQ<pcBVKL9Z6j){6GqfNt~E<cOl|D~Dv8)gX_3Ep
zYgwcb+UB*|=-OY}Axe_xe*<Y=Ca+5~Uy#Aw{K`m6xVJ8O#|F4aY|Q|S@f1Y}R;j(u
zAynhR=B0Cpbt&d{^0Psv0e|#-$EnlzeU-5vAlU`DaS37|!|=wK9^#WuGuB58H~B$E
zAZCWE`+U*2GK`&K+hWADG(M_>X($gcM|?0-%zpZZ7$+oO^ZMIu_EBd>Y_50qZ3YEC
zwig70F6=y|76@$|!+t>8A1_91v8mwCOLjo~+pDvArNZiGY$n5jSXdZL&isqfp&bbZ
ze?rA^UKVpaMOwT*)^0(&eW&%IM$r34$e#Z{TE*~SM-vVS06<F(0D$#h$gu1z4ISD4
zXBcuy!`gA972&&D*Pq_8?oh!>s)|W6b2G|tA{<j}UOc8G{Q@Qwl^`-&xE|kVWa_NP
z^*5)G-@pFyb^Sh22xxW4KsS3UxV}e|sN;}W;zrGh=b-TE{plk0DsY*~fuX=CZr+WX
zmrN+-Gf|eEL+4(-zn<q8`A<YZG%^xq8n-cP1&fMXac9o67Zs|H5*i0*Tb(>YE<4CA
zLG_5{5$q<Fst3Oo&$O$bB){KlASYTdlZE)=&7&YwkR}}?%n}pe&O2n?XX?|c`+XrG
zoj`@#yAP03;yMb+YgeS_vdwk&Jfh8$LL&8Nv!DEcx?SU*9MD4)D8`9tdf{^F`}^wZ
zN(abvwEj(}zxst_uA6guJBseO)~iRw6L%=_jj{01dU$|*E#u1qZmOW-9zAm3(sB}N
zo_Qm~eVDT8#YYm2wJke0N?Cfd@H+f)gV?gkzIymZ5p$j*@6JKs&p_mM?v0!Y1a{14
zDT15c<V}p|A&&c+#du90h8NCgZ0y#9K9lb1MGlN;&e7!Vgvj08mG9|OhfEW>uDrYs
zbVv@TLnq&<wv*WVm(im$_(itZ0{Rg)bf4dWW7_SA0p$rkU&e69PD{7wGMe~T=CD5V
z6oyvwQGk^5^u)8BQ?c+gC?;;~$UDHR4W5CM*SZi2ZqAB|Mg|!k*sil!)4xw#q(z?*
zIYp<I%a$F1RK*3pPK>OQ>^#-_2Zs`g&INL*6L>sA^7<nKgjz1!B_&}6Zkg47ON~FP
z976p%nY0{zXMTzA=B`28JeNK;$ctkMSch#>#9w-2H^%ToI{M35EyK<5cFVj&xV5*c
zi9JmTWM?fg8Wo*_<pNc>KAae?lFasq_T$_ezQjvtewnDh2Lmb~g#AP#497&b{%ghS
zHC)rUf%LN%WCA;k1vTnFK~m~YNOqFl3IphD)-~x|3$n!=xsx++V=|sMejxVZqzatC
z?ojn9s;}Fe>XtXNGRv}Siw&L1h_MuC0ANDIX}V<4w+;es0k@QW3vr{h#(Ba;{YrL$
z4PpyieRYbF=5fYtbf@I;^T^-)b|@02)T7Mr>)4QNbA3f_=+*V{5T*j?d0u^5AMyxE
z>!qcjhIuZx2_iUgMEcU!A_o`b#n~`+!FPvFiG>j4#}+<d6y~V4x2$?`_NOw$MJnix
z7~4K>>1X)|EO5yS!DUe1qZmCm$^LbA$Re9yUG;hbZD;xsneN8K+C-*Uqkn5ax-JgO
zWNi2!V!u-#9+a&?!7+!l@=kypym0t{U3knBAk0!Oulq-23P|T3y>0nj2xfYS#CM20
zb~Vlq#Hr&@i8>Z>yRhE}<hE*z*g)B8i$QK*2NZ7RLqUNo^p(MGS2Uhq1_D>UTVDWA
zD#IaqdC;&jA4Bi}rCg1<HzEfm{Kz=lDLNSRs+07=!01pb*y~5s9J~+j>*=}zFc808
z+-^VO%X}O&ns}o8W5Oi=@>Bi93&ZA5A@7b81}Jy|t_m6Xvn@JQT;;gT#PnoJVN;SD
zS3|`CJuEW3Dx%dVOBz@n5GIdW&r_X`D3Fh*1?0rI)eQ=Rpxc#CfRDQ)>LTIjBm~Bw
zUQj7d7D|FrXaI}mf!r3b?>nCjo_5J}aGHrL*qWMsdhjR+Gki^7ME`MrmPIpyQ5M=w
z1niYFDa=j_L;{g&dW|-8Vh&K)jVAf6iUt}3;~DbO=!rnYE0+n|)U9U&@joG{7W-Uu
z9^2-l2ipZqzI<<!#sBhyjag<J(HPlAf(y^QptU{~^O){i-WXjU-6sE+@XoX;^Dc*@
z+Xwp;0#ey9)1N5IfYv=by<(<DeXpJTY~@~!4%5vMOaYNk#G9(e#anLR`B`?q>YiZe
z&rTwBJo?ld7(PF9Tr|+ugaf7ymcmRVU}6bNxM__F>R~-LM9wdHQU_ovWs`aZsX1X}
zu>Ky5?SVL;(|l<S#f{VXlQGlt!0LsPks1{xc#IrJ<Wa(_11~KTG#?9WyS$7Z8<hX5
znYlS^^xAE?*wJIefzBe4Y?iT9w?0oQZ}wB^lN~;P;JuO~YOl6}ho&2<t*i7LVffcr
z>+L1??vS!kBZN$qAX_Pwr(R9%WxA7EkOYMJVI#EWb8N{-^VBY=3l?!U9EBhZOb!vR
z{($1mPa%T`{!8hlVVaKa5_eQyrGu4E_$cb$_<TZVXmQd%<K{SFblv{4SGGXQqU&Ai
zq(-b-z0qrgBe8nm(03rmX+df4uNt_9Y?0g=zVD|3_8ZM2rQDu*JD6uK^JG#8PZRS1
zm}KI=`NG)bVY9!t@!~{31`<^jM@Rjp%m?e6<e6zcCRY|W#ph02xQ&Zp>}qkvyu<s}
zYBNHe=E7vye`6}p(3|wu)fHSZ0x94BIp7ND60DL@3%{~-E>_#921}c`c&}N+q0xye
zD_KSSSwin4h74I5;uZF+&3tI5md|rEoozcQvddE_q_j1Tr1}`jWFW?(RyFcAd$g0O
zatUn1uR6}IK|;wdvsfCONyLBLW8n+t<wxR@v!+IWxxF5dZ>?oxtm|^@nursXPX&BO
z%%iD>J`d=Q$IDHsWpf)K4!0#of(4|uQtbt6XO)Ohf|y_q^wg|LCTS@*n+Wh%(R*mO
zhDn?@>zL~H<cZUt?FkMDcqh+2zy($J$C39g@;=4(E4FAju<vQ=)?9?u_T1fmxol7-
z5$SvpD6N5JvS-0mVAy3%*Z^uqQK|kK5}Chy3+)TL6m(NP;$hzSGG8m4_=}h;oDCoG
z;-p>l>IZ)AaXcIP(hOG=NGFj*?5<F*!@86?Ee55sS%}<14qKH!J<hSK6JC&^r9u7e
zBWVKKPBND{>@*s<zxYtTjaWQ6w<N8+2f>R)Px2RI*dlpTr-P((*D)vX#G%5ewHnLY
zw^T(bm%pNaV~NFtWW+f<9&4Xj2{A8c`~7}It>i6uaW{Of$DEPme&Ax*EqOMX4{Yy-
zKq$F>hreghq1pHqS>Q?zqsUA=l(RxPVrKlx1|@#?5tN2n|50}$Z0^>+H5g7ssNmqc
zj4pw?c%^+Ka>%(A#Kf*27}~#`8Sylwfg^g!R7jxl)LokmB1@*bCo6<aIP5*VhVf$m
zVK6WLLf&LdE1bl|*Fto;?T!MeHs0Z<=iZveSGz-`y0Q+(IDy*hMzxI=THy-FuKXOI
zT4?GcD*@?n*v_im2CB<)HHH$3uuI=Pk;Y;%G`*-CTzevA<6^OFwnQbbsOP6`STb7T
z1aJzZ{A}i$*oaJ7B`-d-U{ybyCh<Ka==v9Gy>CvhZ0Qyv*_MF6vCA9F9FRl(j4AwD
z4eA<W=Kz3UgDs=pSddL@WwJAb`N|%vHt(>6Zt`E)YPM^FS;4N)Nrhp>E{e8pzU<h-
zc_!+(7=b*SoXuc#gm{h03A!YwB(WO%LF#&dflRj8qc6gPz}*g~kkqc;5a>wOTk2<b
zuW2S{me$q}S0K+TWx6dN+INekvVt2k_B`0>bSvG9>I7c;`4LjiX}`56(QC?Yjh;ml
zvnXbVE^x#&Qqo<toarapQ{+p7x=0NnP%T4<E>EZtK8wH@6UDO~Gx$6yZ7%-;`%j-y
z2b}Tt;+G9L@Yip||1YOoM+SOEW(Q;Y|IKT3R+Op9rw8bKpxWN*1b-dVhqEq|uNANJ
z8kH$iArE**cKd#Je%WGOlQ?E%8Z%0G`}6`f2nE3d7t5>!2g3FhP8)KY_({vbBmrqg
z5%lx!f_UE?wuDRqjzS+`5}^(U`vgKr5&-f)EY-nq|HlpG$c{&AHJb@}=`)#f!2Zf>
zA|ESrK?rZuubj{kpRc)$)YgDBY{kv(mhEnmjX;rkSkx7`q&W+b0NfNVi+w{GcW&H$
zY2Ezr$x3!o4Gu5>&!{(%1$)W`q5&4b63ra>;#KU>z7jloUeMrmmHkZ70zxG;1HUD)
z&)qD`#&Kp+6<-;x?(<SL;KqQVu7K9`&-dYA;xEaAtvseWE^OJsEQRhQ2wcU+V&#Xw
zYwjrq^2VCOqLp+q?w_V3Po8dd)xVM4y0YDgv{G!26|zJ*(FQL*3TNY*nSD#P>!P?h
z3ZTTn0K2}X`d6lCe>OrjE6z}G-x=8%9kJiJp&QWlxEh@>c?v>3tz=>k+QdE`8dd{8
zruubPGL|>@nuUgyT1Dh%0&^{qpFuraDu8m4xS2DcqcoQl$ctlsspPMP&y)>XB%&(n
zmt|j`D5{{6rx#X|D@KH7gf#ueh0ypoE&$q(inMx{HS#3nupKhzbk}#F_Ikg6x_p5D
zQ;56^15eXI003rT0RV9Rix9aOJ2;x#+WgN>QnHG*?LIsFceXA=#*&4Qh`#1kR^y`w
zBJ!$8zF%(DwUetL0mGoH1ooP&dgFf24my{ul}6FG-<@0b$isQ7r+y#kX5C@$8Eu^1
z)6oQ7>Pk+vPjIMTFE_!R#cwUA=?|iuAYU@zK|b&oeNYh)xEi9sE7Kj9cwuYtB2gVa
zZ(*Gr`zWGJX-lty;0F166>M(~b?_(;|0Ho?068v(JfJ2fBK{6ff_N^28?~h1`7o|O
zPjX-Q<}5nmOtimsVdOY%IT@HpFjSE{VTSCrXu}eDB1DRV(L-5Wrj4Qm#y&@@;vNtM
z(%gm1%ZGPp9-Lqh&akUC%sHkjr+<{7(v8NlC#I+VInt|)cuu|St*0{b{8U@if}3jm
znoUBOtX^v4<eK(<rqbS8$Ov4x(UWI}+C)oQ49z6k>6b-&_SDMDfaL|xXCdC(3K>AS
zcYD<U%?<C$UhB)7^QK*6`M{fSXG{jP*cT`MQ}_p`1AX;?wP5p(B0^Ga3OBK^zeJ|!
z=q-Kv%(6}|ec$Z>5H`7HY>HHC@I*zk&eTZjdm-A6=z<8BDz@3)Ecv;4Wl38$s)xt?
z-yKeql5Ot{!{BYT6rGygbUT0LHj{8l*}D}!xANw*P@FjWIw{oNk%?IA+E6880+)rd
zU|~!VTE5khX27;Tb2E#ofE$64I9DC>G>@#Jw(@fuh0Kr1q!i5FT&}H!XLW8;t`x3v
zGDm-7*ubf<1TVSyNzlVxnMw0uYnvYARi?ucFRfrVX15@my<b6t*4$U6;QI&zf(amE
zwXd2f0q6;6XVvY{P#T@yV#JXkpc^+CaZz$jxn`^(f~sa1VAMGspVkhXJQ`!t>>A1B
zT!PTj3P9YFR{qf0acF7n?zb7A9ahN1sB8i)6Aeq^DzR)IdS=HAmkGjD=#(y=`3`G$
zjegQgCaIp$Q=z0clkZu%CMJ6;boI{SkSKqI^#v|77thaale4X#IB(5!fADM1#|%JI
zlkOBPSoC#lRGw)Rzc0bRqTB-6si~i~y@oT4cVV76sEaS5OCMi=)abW4vnEwRoTN3t
z<%7kBwJOp4K~JlU<@6m%(>+S7W5?nm#RwVed3zII%2;Abwv1RSixp&b3gBbmHIwHd
zp@K@hub`X>L3-)IOxS}WE_q}-L|<||R9=iT(UMDCaS{6G&LgAn1LKbR#9g#(F8-(_
zr}Stpl<kvD7AqxSq^QfNK$fdd8l!S2)w0{kmA*dyLWO#wA*x{`Ny0kQ>#XwdTIH-^
z=b7PKpCdYv+%94g`w}=;53M@zNZx#020F8v$&{c{mK?(`D4<gaY+6otg6joOBch|g
ze6TqhI)?{m+ptfaLdhaRjOD@RmMLAA>u4a7MDj9a6lwmW&#k+iI#wT9id+>nW%UGb
znV?z3zON9d?vl(A@f2)o%7f}!zN?y(`-I)P5GTYVcEMp+LNIb>t|6D-j9I_S^c1WY
zbAdkX%rHcXBVv7)u{#B7&zAk%Q$2p<_w{X(vS*}TJgYjDp)T4`lZauGKd9mb%YfJ=
zopg_movCnU_67H!`&~fj4E6r6(RBPZn*R+F`u}4u6DAz;`O$-4xJ91JlE@kR?{A8&
zHE1E{#a9WYv;#=Byx-G}Ot?%xl(Whm-90~ugvlLs>F<D>P0@kw_mN@~9dBWFh(j5i
zJPm$(kMspnl!ssO3+YcmP~uz$dy&fBD(r=TM*!?>-g)ftsD3KS^GZ?sebQY5N!kSF
z?m1WsrC$y46z|hYm+ThTFfvZm2@rza;W?&d72x4q&wm6Q2Ho#F%&n}jW<^M6L>y-2
zKdc~-9<xUk&%(P!Q$<GEXPnFa#9tmbT&UE|56!!Ks^v`HJ+7V0DplZltC<X!A<!@e
z#5zfkV=I<qccV7u7g)>RS?0NEn6G^+FO#84>QU$`Vw+N`Y@<3Xbxn7-i*aGcV`8p8
zR*Xzj3w9(_O=A8Hv>5H7Sg5_McI#XTUeqlYYCpd*<m7GuOc+{p+CE~LC1^Mw1t_?G
z@ZyfVU&vCL;~qTtQxCRN=izfrZ0$Muul<|`bGd<M^ccNpO0);A#yu5W8ADD5M0Y>{
zpqd3H3%9P@XGQKZu7-jRMW$cKSf_mJuS9tKh+7|O?@QE=WG5jUv}eHBpW#43DGe%N
z;Tv2v5iVu)?4Svey5P{4;w1=4i=pb!U5fQ&JR>ZsX6Nt8qMQl%mDiuF|Hn-JLWjSX
zWRAQf?R@^%FEkJEe+KS<F_VtQ4!@R?*3rT0f5PYK8Ge)RfI*OdCj$S!r`Aq?s-FCn
z#-!i5@&3!yc82;imd5V?+bPaCv8_2@@>jUK4IE~8N~v`MApV(L6(ht!v0`uqlwMA(
z%uGt@1}7`a>+1T(D{nRWa%5uw=zaw&zsvbB3^MDh{9}~&qe+!fWr5Syh+(u-hVjD!
zp-~%0EXq{^bh}`zC9k@;GlaQpFvE^k_eZ@0G(8l=G9SwwhDkxRqup%XdEeCh{etW8
zfG8PQSc;y1g7J;kaam$6n6DwG9*Spy+!{OcRe|LS9H)ln8~1jBsBgJ{Sg!_1`}+^;
zLV>LdtaB>+8K~Vc$*7Al3l2W|*P4HHEZ=<+_g9D4+FY--BE01hF#u3fl(IdYYF(Gz
zc?)|0PxvJ{2X@bjOt-DL<)r8%m(x09LYvoLrL|h8s!nl#qrj$klC<KDUf)qA@}52o
zpHO05-Yl-bJO}A*G+xQ}pvloJcW{yz2&x{;O?myZ6G{1}x^g?1HsFQ7Vd=QbL#>d!
zlDM31C|{Fw1{v%c&6RBhF7PC6zeuB9vlJtwsCju>(SRFz++_lGQ4ejG5L|5(jo5Y*
zDVBCdLh*bb8a+(kPx%ub@EKbbWhDdOkzCaZ!V8L{>?Liy+zU#^I~ST9tRsg4S6>9D
z;XhX4)q1nwGQ$&TWE78o27014m;VesUDCcHnvVo@&HXZnLfE~prq!hSTQ*9+7#Az3
z05bQ+$$;Ag{%P<&_m@8oK1|Z+lFVaWpQ!M!b*K#^!=~nwiKj^|@|>a*!9c%9UBD;b
zEOK7nJSc(EC~*tP+2+aSF9?W*Kg;DLfLKCwlJg_peZbNAa9?4#4<8KslyK*DU#`am
z&Cot~EWo$^cYw9#@D&^=YYQ}A#|Oq%5;Gzez=tp=f<Gvhw{Rb&ZgwW7sfP!F(t0ZC
zhe7+~BmKd2Gb1?%t6(~PRH(Txu~>(-2Tc{<(I)CXy1Pv<Og`nBDf=(L6)<3@C;bQa
zul3Q-&KKZ+DoIu#Gm6dcwmtGY{+p5*IqLr(Z|8qg66?8^=5l@j{<-X$R-TC>dJq~N
z2BTZVkVz-vu`uE`pD(B<t|Rl8vqv%k73T}7``uJvZL{(2OAp_laC&F$+42r~0(&Pj
z*)_WH3*5jLx3N0&u(HztX6vc@Tl1!zsW^qnDiTnwXjX^eUHp*T-2m^uYL@8Za*0Ln
zQn+cM<x>Ret`&F+1&LySHcH#WbS^f9Q71#JzBR@@@qL1;xZlMkXH}Shr`iPbGZLew
zavVAs%X|v}IK(Vvd*2ed6BY*O3JFI9JVCP6=_I>h(4>gT!md}}i3j!kZs4x3N_o1Q
z(xXK-4PfjAAWOZ5Ipr&CLa{6v>O;3(+!xhdh<fKnp@hz3?7V+EmF$<hLZ1IUP8CRH
z!{ve4AZ5m`?^;v~3DsRkuuzVM>ovPG%!kS0CA=qx+e~DN1yXaTe5(QT14GELY|Yyf
zy-!$|sIAhC(hS&W2C+1MI2|H6cC3PAR_G4$!LKEJUp!*{=Q6GsSUfrWdK&SJ|J~bg
zGIn(OT}oQB|7jP!`nO|yFpMy=^QCI_V1&2H<ohEY2NppX39w=rZ;2a`Pfs3RzobL0
znc&#Q`nDrAZQ9mQpSd1u9uFLotJ=}f@L<`)G*H22dK_KW@{;44k+Bg7F;V~OjU1Hz
zHeqf1?X<Jw{dzn7>E7}s*2A54erMOQb+z;F{6OsCs#VXn`|9QEI@IUM1)q7|qecDM
z^~1*)_eSMw8k?ID?`<qIHc)ppTvw};<+x@;?7{nGZPOa=*nTJ03AQDpOWl_Dx%kI^
zZ3l1ic$&IpXUBKb$#r7eYaQDrxRt~(oVtUnK^wbW-+@iK=Z8B1^Bdh1vd(p9aq0tZ
zin)1*_xg`T#ngB01~o2R##OD4Y5PFy^|M{;j<37()7e5v%f=q`$Ja>9#?}-{Wc8)}
z_BL+!54&^^Cs&6DlS2<<<cx{$4jiL;%)kR&vb*B~UbX56Elj}!UUSCMkgC{#K0L`x
zw3vXR^nvMzkn1WnSlcxlo9h7W#D<M&uDf^7#^-HIPe#pD&&=d4-7A9>U8pJDj4?0o
zfq|Dv-)mIDU0a-Pq=Q$rQK8m&`OvF$N@@yf!JdWJaaLulQCC!@;F^%A%G}Y~3|-xO
zEBih(e2nB?5t1x$-o`|=F|`)d4b&Q!cI=FE^^E|peLE_x!Cns%WqK!A|A8bqtw&LJ
z!VCUf;?R~bRRRub-L$N*qGcWyxLEinCJ{#7(wH0Z!-7wKG87t=d-YLE(`EV-<qh;T
z5RNWX75_A{C{mR{*}AmxiD0WZ(;m>;*t^m&aJ<!K#df4oelT^M<!o7J$`I9~Tj7uc
zt=4o<$Y`0Fk=ULE?Lk#0al(r{bHaqV(6K3!s&#QeQ)UB=69}b#9vStKQg|igDqWhH
zF(X&9w?TT=q*A#(P0u~8BT)L^(M<H}iEx#5$SZl0F`MwH6GkqChz1KUm3!%0TeGPw
zxv_E4(!n+dwnX=Mai-*_2d$lWOk^gq8p+q0xt_|Xfz+oLyTTrq;(IHN<TdKMX?XSZ
z>GcR{)uW|Bxxb~*;mF2C-vhF3@)YZ-Z=D?bNSd)j&5&y)2p`p5YAF+$?Fu+1`6&7P
z`;Q!nj?-y0inPYW@HSX(q_iRJNG<_3Cz4VwQt^aN!3OB1uzNA~okVg<gw7X)v6E27
zqC`E)!YGx>%Z2@OmAB7vZ_0WzymN>;=Ni_mND)Po6OOh;W)b3=#^-35?rHv^yEh7c
z-`P6$Xr`x9!=ZIGhc#<#zHUETcvBg7_3huLKW`3h-dfVO13#gAKU4fRnVsqx4-fih
zxgY-HPuf3cpZon@Urp{mTOF=wjK-fW7jUs1T#mE_R!s4DD%0D#bgZs(``4QtWOP$L
z4>dj=&m*+7(Q<&**(A5E?CL+QZuOsQ!DJILXgu64r+a7lp$8&tGc@h)?Wf0X@!~4M
zMkE$K?_-%Afp{>uKW}#BL3cZ^3(+5E{hXEbZ9G;oJsWi&Gcln%(H>hbp}X(jdnSiZ
z^U#8rF<y@LcTkaHV=)1kGd$M^YY~cAuzF=O!z?(@>g}f482aS{x2cJ5IyJ7|d<hNx
zScNo1F^7rz&0d`Ehc}^QzB{WuG-#QZC%UkaL|WXzURqxW@?x}(0AQ+m<b70o<$L8x
zFVrovyxbrA=tfS0BuOtt@?b9XT!~rzXt_Y0ynS8_Zj!TLr;G_z4t<V!wJnF)pd$gN
zMkcT^(OWW*ApmQmQ9zl=X50<z(OKL<Ad<2;8vH?aN|ihjS;L#k#ccM(T*-(vTy8h9
zZ<GS@^)r&Kr;Jz}zg-bquap1Ij!`-{@=NvOpks8a<g(l%fpe;Wk~z4<IUFlRDvkl8
z=1l{T5!SRmm{ldaMlNnf|6h!~LzF1dvb9^bZQI&q+f}=4+qP}nwz<o;ZQHh9b<Z8+
zoc}elosC>8N5qVn^Q)t}+%f5&*`%=CtJJN;W8h;TTL<9+g^Mikj8xx)5RQ7IRdUq>
zn1-t%1rL9W8Wj}nqxQ}l?!K;Co=O5tg5E+sZ(AT%<K>?hCtQAF2Xsfn1XoAIQbSn=
zqoJk2V=<2R$oEWmvD-GfgR14cFNa!5`QWu&B;w}?zfFg<0MzwE(X2}1h>?4QnXh-D
zp$3i%ugX%DM7)GD01O|3I}1SU>(HaM%7;|iLHumlel;=|z1@tL^Z&kAYK{a)+H}~1
zxCCktgwwMYvC_kl=hBCbiUCIvEEad_L^yXYA<yRcncTy#eTZus3N&Ief;=UB>MXCr
zYHaGQPM@uC%RS@1jBxzZ-28s0b+0o~ej*!-iq>o84lXp@;COf!$vW3CH69nvMXV0x
z&KZ`7Ly(ZTo&_rr=^Y0guUYC4)5b;ok;v9OiFPjBQ`bC?D;HPR$y8T0Nv}0YhE%w<
zSxKt42HtKW{2TAHl-Lx;pHx|H{}1heyqX{m^5Q`W77iK8vJ@s=d)Xt8Ocm|#Kd#e>
zD7+I9NZxS#m2m`>=`TQ`YE#ej)H71L+(VWAQmh*lJ=VYZ`E&y~^j!S|ic^lz&HOaY
zx7Q^tEiQY{13F;_hkt`3&;7~y9k?@t<=P;)Vn6hEa%6-UotnbL7TxM_^%9;Ot~HsI
zZ&W+6YC=bSl_-hCh~Eip3rN%FVR}e`voAPCkAYG@ii0zh7St-8we-S-!;}tX4#PX6
z*t`_P%Ey$}svEL0DX~qwr||OMak*Q5=aq(g0Uw2FcEKBv^kVRfS9M^TU-t1J?!>rS
zVH=c>L@>=@4LiLD&|RuAXfN=kX~=}?l%L>Ca2Xk>rEL|9+P=wS6@jllOebKv$u+X0
zA4&a@kkkvZ=-qJ*Nc?gsT}e$y)3PaFDJ|c*#npyv2Q1b@x&p^;Um2fr1;Y65a(6ef
z`_LSCOXq_kfxQ#UWuXdk<Qtkbe^}ww7k#@7_MRlxCH;sPi)P_p>lhHp^!*hYCriH)
zoKv#TfD+b7qRmVFk<&!ZlL0NvX5)~U#E^msiCddI=urX5?u*dsw9Y{V2lOPc1QUsx
zvSevd@|!^fX`OR&5Br>_A;mR<MtlMu#jY@ro<Yme&B;|^(2q5gMb{y3Ns6gg=%Nvn
zH&9k9jcGci3W;&auY%wExjGWNXmu7y?q2()m&@mi{{U%6o{KMQV<Ebi+w3O~GcM58
zm)fC7{0V?`z?6t6Z9-iqIbzuo@BYnt7#G=B$H~LgE}bSbBh2^AaAXZm;puJgS7q$q
z64!wqZk7?Q&sVwvz*lu3TDP#<DuksM5S{REgq%N%aZ#$ZM54zms5UJht>vd7Fu3F&
zBl_EO)_IIYio_BK+s~Dv-v(yZ&YY6u!*qm0p`y@`XGCDRe5a^6Ca#H7y}gh`OTIfM
z*d?YIzfNlmI?m9-zHhd6eAv&0j-^)SvqyKvO&zbS1gHw-5e`zkjuH&-0KbkLKbj*i
z(Ff~ZFL~AdP)1UOl7(VRzcfxc^|z=%LQ;{!82~GHABsTlfH7Xz0{MJG(0lZL2ygmY
zLg4O7*eRn*c|PfYqSs010IM5FbuI`EaT={I3?cnJ)H+sPRIRewUSVGj2Y-Yfic~m&
z5UOV%inHd<O<71`7Ai~jDX}6bwRMl-Dk%|DLCP%Nd&4KA$`%0>Q^3+Rvpm4)LucD<
z4+TQDR7#WF0>*Kz=bnkVJ;1#BvweK1h(C^NONq*D*A+!(%5NKEi?jCruMBxwfL?xw
z$aeB70Xmb)<{Z71qx(d~ET$KcXUnC;ZgJxA5w;_zQCkMByVBnco)Tu0addZ_2L4Rt
zs_Qt<w<_nv;c?Rho+hLv=wq3yFc=7ptTNiCqD657)dGl4oRs;{DQ8Dp-^<8;h_#v(
z;v9|-!G)mC<sUTuLqYVO{=H5OY~ry;kpU-jc@cu2(rz*O9O|W?b3bwpJ`P?5mlnzB
zpa;e360va+p=sSW9-TS<Z7SFFMrD_lC#_l!Gr6GZ+4z?Wg8cVDFl-Xsygunaet*<1
zO6LVy@GFPrx~6e;&rn7;-Sfo}NRkdRnJ*_QA@w)n8zJw#Iv3HZ>cHqV<X89)7U>K+
zF*q!;Q81?#u`Y-3&eyC(Z<I|aD(n$iuMJ?xc}EuhURf&>1(V-!;9iLT*^u2y!5M@8
zH{~2`tMJ$COETEir8^qJ(h@%ro={cA<1Rz|*H<Ze2h-V(nS%I_p0W;+>f<&bx6m^p
z_;)@zC>ge%92qQZdYO2tGp%C}h`S=x#)o|qh^p!K$U7Kb3Se9^4?o1rAYYwZZMQ0z
z4Ff#5OL>!MA6%>d_zy2a8$i^m36vX&y!_zqSFXf;&8y}v9bqf(nhP_kw#b3{ql=`h
zgEDe3SHCTOghDz6!b)8`Z%bY4|760v^>-5vRF{HdrYHgq-Ocg9+ZzNGd+)6P6q;%=
zL#lcd{9LRk&;O-4w)sWl%klb+3Jt$4GhyBCs+fK7bNyy`@tMZPwj$KaxiAOwV<!PH
zUDLZ&w_7;JM5x)}Lp!-rWWiXHDp~4Gd9eH~p=S0dze3`$5n;!@<d2)ppl~r9`l2Go
zAH<PvHmVQtc(wcz9oh1rbeq26iv>h{gPTf@PhKap-tEX}P9$pov1R;M8>kpJ@)jav
zQ)D`i4$KzcR83qCSfoIHvQ-3yO!JdOrPO;+TmYcZmn*y%S~l?SB)4#h{dw2UPzrF1
zQ63h--QLQ!4w?cI<vzLQnrIYmxq{Y_D}$cCeh<fF9ybuHgDsnC3v}vMZLk1>j6U$r
z6uHB<p5;-gn@W~QSnOssE1>K}om|)(z+?(60P;da5`)SE$0d3P39muqid^ICWzvX%
zX8u9e3$rDIwepO!+AJql<p*+}ePcVg^+$P@zbLjN1{O29rvgbw^?32F*UoVQ#H-$u
zGLh8^yZaJa?hcC6y-!Z*xo5bet!q8w+y0e}@1)LbuNB*UO5fbYw+1(U=B3cOr?>#D
zvMF7QT)XFd>d%@tyS`1XxA_0r$d)3<)ulrJx|=EfyTkcc3^X@!|KC%yC5<1)^?yh|
z*}oLll4uD?iTC4e>BL7H3PM;#D3~}MkFJ;zKLGOKdo_pdP3`ZOR_Zae2H1S>8y`36
zQa$shxoe9a^X!2ys5Nq0G@jva1Ip36jaEMVP7cm*HcWcTGcgvN=yoH7Mr=;hqVzD*
zNcTXNKtC9JKysmRb1yMdSOCGQ8opw}Qs#spW-Mg=UJ#22c6PO;pe2pKIC>gF>YMl=
z>9`=pK}4zC#5R0+LHrUHq(S(xr0Rm+mwrmpmu@vlJJ>>j5*_hXVK@FuK=;Qm`CGpv
zq^b?`X3s(w&S7;V;PuH9qG$5(Tg<B1aB{mXg|M((9K7wF9X5>7UiVqOyM1|D&c%I}
z6a!R%H~rr&ZG72ZI`J4LI&<!yl%7=~f4;HUA)kMB!xcIxcf$=9@@HM}<nE(R0mJrh
zg99^Swrn$-UzJ{T1=Lw(zvy6Js0t(_PW#))t>v*lRZe0D-*s0l!z)I<RCpGpXjcic
zw%JkA35$Cyf-#9Y($9Ak=coxkQNvTqVy(V}=qsZ>K#M+V^ij}%zG3_}uw4Azu)sU%
zFb||$ZpMpQ2VAdlqsd`t9&kA-5<A>?Y1zMdtCa=~g-xAg&C;sGeHpGFJpuZ5Psel}
zd@&q11_<NuaaNWTe*^*d28=tn%1nd0;Inl!r<yVXk6)R-yywo&?{s#u`p7w2hyR^N
zhpHCZe`q19!4uenfxut8|Fr6~?kp}8PJG+iTr{km8QbOhmsiRSJ9@r$^I53oD41)e
zdf#Ho2YcWl%BS%8I;jV3_xJb!>nBrvOM-?t;x9v%8Q$pC%2uduYR)3xCnVN-%&{>Q
z*PG?#|H1MNS}J{4@te`voe9&C>P*YQu&j{65>^)4@R)0xDFiTxfFa>lukL(h)GU(I
zs$CGQEVgW{fHPo$e<v`2hcTYsPbMc0V$%<gy93rDdq&YjhN_X?#XKXxGx2QBh$l}`
z{#bp1iytEk%E1t%j>Lz|L`Edn;=dHWdUf<Yha8u|dCaV^X7V(J5)*ATB@}eg%deW6
zi0ky2HX?vaV@nha`0|t>pb>A=g<FYZV%~@S$Eq@^lIf~pNwGl(*_`IVH9&s<u9j#s
z8wT5ic$}Vy=`vL)(S;zuWZBM75f+e^J*%W9&bU&gCJjlmb^u~PgW1G~Xl(w6C{0PF
z1%8mpb@*C{L*w|U<%=~qk6Jw2FR`XSn?^H4cU%N!tO2$$PMtO=ZquZ^Cz&h4UlwIM
z5i`)qs$7UQBNW5-16X{akPai^w-_bFqWfe}cEXZ<`3J=;Pd$3Z8IE!CP2v_r1%Nbt
ziDv+Yv4R_9z4=0pHT~Hpc&Y8&A(u=ZX3K<Hw%P&&X59a<Kh#u{xXjDFxkN>^TwXoK
zdkhoAUY$f%*L+7=!Ffn$nP-$9-$FygobTW-s+bncu-x{#50^1;Oy1y&UQL6<3@FB^
z3BWvV%6zP3Ri~1VCfGt2)D$9@aY<3=zXcK)L@NSJwV<>lZX$KQrmD+`dVBE7(i}o_
zf&f-ZbaygnpTrKzu@$$?)r{p{npRT{>(JMGxtI3`OcLgTF#O-HPyb)?NHL8W<E9LQ
zBcE_4PPm0i!BOCUbCIs*DYa*vq4;p1XHF70CUCMm3=%S43QU|hCWWu=J7*n;$60N_
z%{kD<xM@#PK7zAN@C-8&u1jMu$fnxk#T;~!I;%*?MP1|(A)~V8NG%SmMT#vDUwrke
zBPcVBv?pjpJu%#8itM+{&OU*adjRv*9eMrPOm;}6V2!o9ne9@1$3S(O^%1hrEbJNU
zA^zTnugygE<rKbQso*1GINj_P&1&i?cEqiA?x)pdfjEoZrs^$JBm0U+9VoT3(FB{*
z=dGKjsm${6g)D<fIV0Kb1aDhDyGl7c@%?y`J+4Pkthq{$9P4ZTyh3|_EMl$j`(Gb{
za3!)s2F@|yESrHAMD&VlSe&|jtY@SR&bLzR@*}7-!=1xKMG0y+nzife)W!_Y0DiL7
z%-2i{G0zU%T(gK&MfcYbO|{Y2`9nVrU9lRSpGduK@jCl5h41AVJ=@ee>`bd8INh74
zFPt6b@O>;|v?(^usUmHfls=W%k_x#t#>pgnwWg;uw!CaMoE{1@-b^10Ebo4<Kl4!<
zg_UT7ZxU+9^Ppnt-@kVtnrq&y#~hSbVr&W`)(oT_XDQfGB@Qe4*BATa|2icf!pz<U
zpMXP_p(jNi0p0<v`aXwkv364Ss-Gxzt0T*Cjm2xrTB%o!JBnqWrue}cxkR)aP=qY~
zs9BVV7&SN;j*DQ)*MBc69y3t!J%yr6jvOvg@0-beec0k&S(Y42DVU{;j0ZFv1-GwA
z!p%n;Nh!C2&;EIg_ECJELd|(@<G~E}^icmBQlwb4UQ%;3N{9O7ytt;baF93`4q_F3
zDNAl4_Afx%Vi=TYq5(4}+U`<R=dybKD6Rj=qik`@oWBdBdE8)R@Q*f~Pzpv3(pr)H
z?wLpBJ3oUtmFeLsw`yDXWx2)hqVd$Izy&@P1E#lZQ;s3mW*HBB(;F`$mYv0AN-ah_
zu`&i)f8Y>`#=Yv#23j|3(8$$hiXBV^Ffu!3&vW}jn!#Rc1*(<sbkTV#*G{_wr$KxM
zi&`o&`@isKbxD|cOABX)3;RIs5<S(d5<pgLGzlCeaAQ7Vu|w7SkgQ#bNj~N8o%O4B
z^8h2GpZr<fI!-{b;6TM%%-5#Qk%ZwVtqCBYt9SP1*1h42f}y{2!_xc8jS{3E?xO5I
zZY=`<I3=z*e|9Rk;`7Bb4CWX0JE#hw`vAPR__fPt!+C_>2?%__tSUNO;xx{xXjr%^
zQlws9la=nYmDE5l`qEE`T<A*1RS9EQD4sM1<BmjRmDW@M0sEfg@V+SnE4+J(AdWo!
ze@^(wt*L@%(K6<bg7)3g7flWWR{Sd^5Jlec%)J}*UN-(3VU|AzHhGv^FquCKE`SgL
zuaWog1Nc4W0uN<&NQ#NaO3Kg8Uis22u>Zz!{(X*eS;<(+lEP#nZqa_tKiSG!$BkO#
zi`>MgMiAP3G<3H;(^&asz={vq?4f0H60=dwZ1IQ546yEUzFUn=9jBlS;<8g#Sv<CL
z(TkTA5}(RQgc2K@i4xa)y*RiCRvZN()vSCjs{FnJf72Z#+;SMH{tGU7fd9{(Q9$jr
zG9QTg_Iz;zA3|KM=e0=dTi?~oy7oVUq}zyNzx77h!n8h_H;EJz%Qqp$vj{O0T_7k-
z^$XtI*v8~wjZ%!LBJ}rQf{wxw?qnmnsmvz1Lc6~)-eAY6=FpYW-iM<IauaTiN%3az
zqF-UkKwhX70ax^w&VngPdMFkH4q^+0qTNSwYXEU1F_d-{U3o^?68Wj7<$+shR9b=D
zH%=n4s~!XOE2v$)o90}-jlA;PElo6Rjq9*i-qzmC`;ecy!{B9#tJX++QV$JHs!A`2
z+uB7+`vMl&){oTPmjfM(Yyl}6v_Qt8Jp*_Vv&k^yJmV`E>C(0GzQ_AU#3pjA-i`*7
z$GZ8aogv@;H^8;vTe6kFBAWQ!J*#YwVW8iOrCOBh3>!>!DxT~v^qIs#moW97DVE4<
z_gBc*6FocyuWS&9WP9!J!>w&?saa~kLbwBcz;m7Y&y4UP7+GMB{MtcI%LF&b{;P31
ziF#nD@%SKz+mTDURDH@kHiraoY?3b9cv19QI~xPtTo$hMn}1J)YQ5<|>6-dA<elF1
zfdr>Oqwi*L%|;o&%PE9G3^!WNA9>k2aC>cXxTO{bTs<{U>s&8gHoD+%m%445H%?5X
z9FZ%0>KoD#YPFUbZHX_RMy^wzSCdyWC2BoVr?%bElQ}P=xT;OicSo+a%NAywb9;fR
zkjC8x3J=&img*U)rKZZPP+Zi&h_<=z$tJL|t#v}yooB{nS=wAe`l5mRFc-#r0sgbt
z?`{4Q;Q<K%kU;<dfbm}@^u~t&yU?#z-%{L{MDsnVHLF+Y6BNdO7Fg*R(mR%n1_I@5
zUcOeL3IX#VCn=XD656`>={|XMMN-<t#mg%C$kNTdapZJ#nI|AOiYwBbPN~e&dh|dq
zMelm(NeD$HJxCgET*FPjJ>+AVl;{~%g`8<G!WS`$fWb_kkGe<aya7Tm*s6~k#>`G6
z%2AYc04Gb(EDDa45m~izg>;vMYJh7Yk#$foLb1O`ofr)eNt(?ilyU4gKq9+fF%ZB}
zXwZL?^rOZAMFL}#$aw$=116Abg#e`&r|i8B0k&m%c+^Ni!I?d#nc(oGb4UT;BNvGA
zs^peyoM>#EGFgz}52cB0ht$oHC}A#^bxp1%Cg8JVfm6p39m-1Rp}c2)vP~O|ygp|m
zP@6mph$1H#xSYn1_O_kHh!*R1<#Ttt$1nMsyR7+P2udEAyUn*3C$1Ach{M>W$!!$o
zPhKW^*3vwr(Mdti6v!~yQeG%tNZ?)3dxAUqtj<n-jLuG~u`i835||d0f9=bC3{|v~
z_}r&Q>Yo07vvrX9HbZ#*niC#z$Pid%;WA>vi^2Qsb9>y%oSsDqy!$dbpEB8=vJ_)P
zx%;4rEyR_syka)x8neyqmJSWEdvtSsS$FHIh|C4!R{LOqlbRpt%b5PE^J4+9yVA1V
zjeURFj^=aA@_C6ucq9+98+FLLT!No$r5u9Dx33>I{QJ)?nZKxfK_11HGk8I6hU?z?
z6Ls6;{%E-)(+OtJ?$MdME0ybD1pH$^+6O<TGlqx>B*l?sSoQ98_e+RJ=6&J2%a)Za
zR+ojIJ7typYi;tfuki>GVcU#AcMh~0)si7=(?d}eN;o7*d82iESMxx5!`O~1#0ac#
z>;*IbH*hMg|7cfZj>4Mrm~f<Y1b4nuUmZ(e3Ne_Bdilc7Hgi~p#zx}-$8?k-YJmt{
zd60BKkF`i4`5;&bZbLv;b}X80Xq@Tpn$}g}P{z{B;S>8lI<nITPM#ASQy0(InPZ!a
zO7>EJylost!YeBgB|=2jXO>ogX&`waH$x)C|1cfGqAIsnzueem)iKMh{C<wYfU+cI
z6f0eorIg!oHp27(1l0m*=p)^L845z4p9-=(KdTY<8W2hh2eSxD1ar#3N%#d&s1t<4
z8TLd9%a9v65eZ^FvCKP$1v;ndkHVVpUPK6AhAg`!N<Cp(zOcz`Ox|dcbf)n#7F9=u
zzC>I^5jCDsdt)-9)=F7X5{B%gH$cI;Zez+c1WB2=BiOe-v?%l5dGsjbZ|(Rm9Rx=u
zFKi~?NAu$JdbTPVoYEANLxv$M4icf>k(j#PZc0J<Z^-qC=IAqvj2oPg<mf!=(I}9N
z6{2cpBSm7n-G~(0f=Qd7WIZ0U5?Cu20gBr>$GV_b4G`~6UV-C#e-S3Uzs)q-QbVi<
z|C7eR=6wH&AN>FvB%ohbR_}yV2Vvz}>RwtFf1NI}(RCcMUAada5{LqWgWyCZ@K5Fo
zNF||YT1Vhq%E9-|!reho7LB_?QE~MRvax_(>;O`uou4f(f!E1|BuLPWi?MTvJYoff
zXilY)JK@pTym8#w?&ZWT9eo`JjcQ@NrE2@ks)-;{8--Wg(8)IuRGgQqTxf&<Tem_B
z`Hogi4rrn`5kDkj&PN<4o^UhOMYD5N2NZL>2Zve#!??Ek&SGOt_kFT6MCmJxVE~;7
zDTd-INf!-&fZ#itG+gbhyf<27C#evUVf_KidduKO)vR{4N&&k;T+fnCVxT2YL6b7q
zurAnu=RczAL2a1&ZHoN~+{y*YDj-%D$BtTue)KQPxd6iDP<vE`d-^rfz9w!F4;b;S
z{f?i0rigXQwI|#3Lr9Yo<u5xN>~YhAgs{zubitpZJ5SGC!qCurN-F^kaJM9w1T@|N
za1CqqpzdwH-yeZuD9+ifMXS{3vAA(-1H()f7@v!zLcE}9DTfaq&Yxm04bo9R?5Y(p
zGA^HR4FcJr(2{X41x7}`<a(!!oSRU;0VPa+<IkK=lLo55f24Z4Bw1Bd6cyc<vGVA`
zE5%(;ec>e)QM7xxPH`DF=WZq6zDV*eOH6oRvZ4<}PsSInLT#<&HC9!&MqybpAXbP!
zVTm$PvtqMBz7o7?zX$PP!Ovcm+|zj^;DHh`i&Y&GqIsMb`I*7ynz8{?^@lusOGO89
zV{2W}#nHA54Q?a&MH<cCmZI?V_=~sSa^QQ&r6$w4{+VOSAsfa_wjOq?!!%ljH6;V_
zQA?kCCfBzDhzQ^A?50SJuGuP#E@EpAkpm&=86wiPMi!w4c7Ac>a%)nvgu*Gy3+!gx
z`3a!X+O=twgTO6oK)$ZXeR{tbV1vXfr_X8k(56kdM<acb+f@&YO`UktQ3Q1e`K~ez
z-Ze5W>^{Y+)XsU=&Y2;4BZqQttQkjPLZCx2C;Qz0<b+}QAbP$+DdBTnd^<OKTFL=f
zeTeyWAvN?3bU*;30P`A!7iUdy0$RTsZGYfsV-xx8%+{#`dRMuwhty_k)=exu3|bZ{
zRLi?aoQgC&K`&+u+;*7q_+Ly~rn1uCPZz>Q6cU^6(vrw7=zlSl2Hik3!eUjxsNgZ}
zzs=e?ukd{v{f&D-{k%WSR)C@gshe|kw<}I>*0Et)KDaeMhHks>3uF{jR&*Rz0ZVQS
zD)JgsnN4jrq{3hyGmLMX+$lASFUQkfKVf<t?_RpeR~hGM+lUd5llA4E!=e+N*RjHJ
zQHfr4Nf(bWP51}LyS5uv*Y?9uhEmVfqRf^vZHhra`4HQd*1fYZd5uFRYb$d9r3Hl4
z_5LYXD>AT0<L)R6*f65axC^8l9ojSON<9L2(h2Q`tt8o!7Wg^$o(zjaXxV_rm4!xe
z|Ju6l63#n2$+^D1;ct3&fv&1l4U*zz_&Om^1fji7vZJdMwjM@eDuKa+4M&D$+ZW;}
z0~!OkaT-sx{DP`htQM|C>%kY-MhNp<gX<r*6VLIFEty#Aqw!(8td2Cpr#Du{9V(Gf
zBz<C}YJ~}_<R;`9%`%&rCVMqd8ZL<uH`*p@pj7O0*~gdh&keA?_9)iUb_TAJH{U6R
zp=F+5utq6a=M|L=VK24dmCNn4+;e`;Mx1<)E7Pu@cL6bE_|^~qtCFP$?TcEbMVwA5
zS?wT>UVE9&T_A;py0Vf4Qd12Vdo+cX*yEI{rj9RJGIPjAu_f0tOkC|Qqj_IX-TgXy
zlJ4ja^nccJQW%%DC*S}8sTluVxHWXJVzOiVf7Eko*0vk$NZ-FPpLYh9W64(}y*jfc
zuyHckHLluRb=rFHuHXXkr)k*gNWxU~YKJ{LFqD!>)huV)PlWX$55w;6zX{zt{=8a6
zYlhRdtVl82T_47FUT%-@YStK&%qcXfivPwJdekWPI^!}~(1qAz4b|fO{6LXudJN|f
zP~&ST;nj)MKtz!0af*t`mZf$P>NS~Mwg`Lq7Jyp%h)K$W1R3Uu*|d5yMqpNjMwuYF
z{Ta4Q7~vD*`gl^Yi#wGRsUQPE<}EP^9Q`iWh|BxY_m##=5+m=dI9OTY(Ksw3|HX0i
z(2>af<qhRe*c2U??!=G2zPSmdycP&^OFL#Gre&dOW!@aMj=C(AJt5BtvPWcmB`_LX
z*gLKg7<YGQ6!JtNeoJGVBXA9*5t3XnpqYwQ%VGPY1nsK+(LX>Rdb6(Dupytt-8k5C
z1%37hHNc^j*oeSAEItWAI3B-23(7aUR5O?8ibnMW-S_oD>O}6bH<-5}v=uKXlOU9r
z5joX!{Y)N!s0AzqMKeven(QGR-$o&d?sE&!EABWJ9r_g_kXWu~ivI3OzUPxQN5>uY
zz{rI|*K3aYp|<kfn5i=C7qaG4pLU*$elT?Iz=Z3X69tUkGgYrJ%k|YA#1I>+Jow2{
z$b|Uw4&R=K``OW<Z@=8U>A#(KBJhHYt{&xF9ifi0VI9ZklG~{eMt;Gv<I)wf(<OzJ
zMWRmVp8^aC{K}#uudWl_vp8=~NPA~dso|qDijI0)q$yVN(#I4TZoYb^5r2`r_Kuw;
z5g~BS8c;dFAVuj#pcuA5aKBqCC@%j5q(nbze4ejr$y{W^EV8aV1iU3>apoi=5)3QD
zm!!ag;x{=5wLd%bRvr*+3C1y@=GQbndU@gWzUbc1qKLXexn001hU(&joRM*LFp<46
zNBQH-6w15)2~ji<$Qx4b#i0zN>Z?T~mzSG;srYqt_+a%JjwWK*Y?1zk8nEbaPOlm{
zcG;-;EJb6)<+-Lmcv#8mnKL!ggkXu+YKH~Zysb8e*c(vnx8Z4n)WF?!cYeLxfFf42
zp{(k~zmaFbqx+^7kC#;3DK>-ox9&vQxKAwG*$Ylire~!Kin1iW><}bEKl7b?Z+?!W
z=+ON``_e+@1$#a8pr}}{AFt@3-R^d7H(K+VlLtsH*A7_L0(k%+wk6@s8``;^pX!{f
ztZZdM<DQut=WxC4xI7jkmgk|-4PN)J3;*ZhC>USJPf2&NOiFj=3E5D)sf1IzZ5Bhh
zc_OPsM)nDj0bX|CfNJJE`!dV$$}UcvNVajPj{z@^YU}e6da~^x1^jjzlKoal#JB}!
zUkTp|2egf57UkbN-<Oh#N&Nk3qn3m4v(oWkRa;B)Ol4x9QZmp58Exa*zPSq)46W_h
zdd0vLu&^(LZg*fb^f1kyaIe+S7axT|#;5&8jpxd_e|B}XjMRfA4QESt9&~-49<D%l
zi{(E^^B4e>Ek4shEa3#Ui%dl0`qmZdLZ~PHk^#|l=VgRWc@mQ&_LLL`XQx2@#Edsf
zyB5VcPVq*Xhv!>Yb=VX&b+29=To&W!P~kCcwlOgH-a_hf*cCi_jLT!p9`zIJi$s`0
z=)y$}^SWm(Ki8K^;i;O<f?{&igJ=?V(K3oLq<$(08m?I2`kK%QFx%cyuaT>k=LO^C
zg`$8w0D9`JDo%<rl%!OQJZzl`oLrb$b7s-=54yfD$auI1kJpoAxn9vP0Xrl#4wlzu
z;v|P+nITkQrurG;DdKkl?G$nTmMaX&u!7qbpYENvpouZ_E+Y>9BT?XD*K9A=aulmW
z%Gut?h%UtZ+m#s=O-pEIdwM+@R+?DUQDqr;Rh^p53EEH$=fok~LTHBxq6*Sn+1p?t
z%N&Mo@I@c{HvTNfYzHH*H|WW;A=KI`k}#J`P@~LZu%@N#h2CaDy9SyQgbN$39bLvH
zT`B-Q(E9=EZWCMHNj4ok%io^Kfati~o6WLvzp1A_%Gok|WVl{aLO4G|KB)^2<FY&O
z9qu_*+p2s|$$Icj69ZU(Ke|n)x|ap=L2_rBr(S^66fNHD4=q0lqC_#X@Z=;dQMp^o
zEq0md<KK8s5-817I9(shhfiE$boh0O;ZOqnzW>cmPE$9`Plikj@-*)U;K@8&CTh%8
zSUc7(IOSZ*e*$D8xL&NYaSUl(bpydwtLF#XmyROa-SQ>Waf^NlfWHUg-=E59RpaZA
z+d7=9@5V>0?59DS+l-eGQXsnVz_HPE4q-R8CxV|l*mj@OruELF-cVaZK(El$)^3{N
zkTQN1KnRfywukXx;2@Gp9Nmi9xI7wmb2sZ8USM0Mp@lm?5GK%7^!?pv&ZyxrsyGsq
zk(%}0EwLX%Lq#R@40gssY<FL=AhC4tEYD|IMVv%fO|Q+y`=nX4o_pVX{_U-N-JGgV
z6;bm`>Mj6oX7c37CfU6eaP*yH8#JFG+!~-AGs>@!C6%yi$=YmT?V8k)zG|it_J3R(
z1-<Eq<3ZR{6p#c$$gBIU=OeN=D_c~22pL8i*0Hmr_m`V-eRh}Es?!ETYDw$=gf4;e
zvKR8VOc9W3QQ}&FQBtptUgAh3Q*}H}7M{OeZEW>5{msUz#hYCFRPslIMIy01ponIR
z5=>#Zbc?Fw`AxnIU*U~oEhtE-$h+J>@clnq=$z#0EziFj=xM)pjsNBXF*0LfU}67%
zEuja;OF0(sqXfTvQMa2UD~;z-1eA~e3N?ZJ@+fwp^HV~3_2$A47b8ZAQ%Y0n+warf
zSzK5=MVR=b!4s&zLx2iHkYSS#Z9G75LK#(S?I&2}*W_j`Ehv<f_6rbv#;c|B=jM9v
ziG{x#Ue#XOsVB{@4>17Bzr<>b8RbBw6qit0%$YAuwpF2tWXZKQLqgX9$enB&MZrCi
zYT93}Av?pewI&i=!XB0I#ete((1h`{4jFo7dZ@SK3)|pnm=o`UQ1dxSqb5vx$zzMU
zPACJ~O!_~jLV(35j?b)A=n3^W>CI9zd-^p(-XT>sVY8kqQg_>rGx=t4AB+$QyKahR
ztj+mYz^w-wa3k}NIgaZs8?qS^^Y&#X`kBtcKMzpqLn4%7Cc;gYdNtMN_S*F8-d5X8
z<?G7hom;woP2nvnI)n6U(`>{W&}YRRi$}Iu!1IfjU$~z}HvcAky@5bDt{J2;Lbyld
zab}X{>UVd{GV6+laT?)}L@i%O^5Mtx&2>p(uv$}C|Lut=2;3gJP0X17qk*8jH4Cn+
zki|-4TyKSEHb(dp%L{uvJNy#*lteBQvWMIdeZpspaG2G)l}TVHS$W;uo7Jh10?AQJ
z?H|9OgmeO6#TfDfIJ74GnV!0^_mRVeb8C14!<I&hQ(C+Gf6|FWZDuOOeos@+@AKbJ
z)Bhh!LvZYbLjXUD@XG^gs}`v-WyI?yVNBU8e_oV6+o>^saD9k`Ur($_yp=-ow)2X5
zmQ6EWx`Jn0@EVZT0y7&+Ud~UJrcq-PdP!YrN#$43wxx8D<6j*h4ddwy+X=;y9t}Xb
zY&#`q>F>Et-3Wq8RlGa*`5vw3rqHQC+_sG^XJqTD{_uTe?%Zr`V)nArx;pO1lXHxc
z5ihe?b7R<5Puo|Os_^CNr}{AuAr_bt%9N0)%+A=FN40A7DZ8W9e74PCz*t{c8ClwU
zZ$BGT-z_4608pSr2r7Y77pFqh;`8wBbR$fvB+x+xqgl1%*n~nLaLc?UN_`G7f*KUb
ztU*{fcotNS)7u88)6(ztH2#9ct~9d@q<xhpMJ0Pp@fuR94s#~nr;!6dLf(DfJR2wH
zu;3u!B)J7FNiTNC$-hj&C#-Kk|Jf;Ad@J>s|9+a1-^)(?UsPWgYe!utV+U(pM_WV7
z|Ls`tj+?USXFv$LagRXNA`pbMJI&|GXDKVoS7KB;hfFsTssiI`V3TqGSVxGX67YVw
zWNYNhzww8UuZY#SlnOX=y9dCR0+U8vbciNa8>R76R~9&j0H(xR+(`ppKAQ|5mB*UQ
zkLR$+L(*3+G@|i8*9!1Q_QYMq1_Q{g@CW7#Py&e-NEIq(kPm|b^ku4o3<{FQJ(sjg
zCu|BBS9C*P2sY9RSVwGSXm#^;`ult^s;Jfww$Fy9%TkDCz2KlP9;q!PsNMr6JFSYe
zbj%2|(E^*a)t5#k?}48qqu(kkKcC;=cIxi^ceNN=ZRE^hLS^padFUcgIcSit0R27Z
zW&rC+KwM|-!9-V_!PdwHi%@|BYesb2PRyKJbHvUkQFG8SYf#m|qZX4`Hu|k~$*V=2
z)jXA@Tcl0~WhhEJq;26`n_9uCYVHX!p@v@-pZ%(#6Wa_#_D-=#bb^`1tKmf?J+lAf
z|DXt{t|#kse$93^O8?#O>1b_kZT!F6y)EtyhYit&oA(Gr?H2yv6eDtV)hx40jEEL@
zns}-Nm!am4p@7l+FjR<LfIOos(T}TAPmh{^aeDil@Ri`$X=lGQg0r&?7&i~E-WYXy
zS-gc^m*hrOzOToHi51h@@BR|%X;H{nvP3DD?BSoohb(8dH!9gi<YibP)?q+Q?1!k*
z7cYCDFoYFjhLgX;=vK(IZsQKnGUD2k1H&mGR?Tu4A4s;V>%K;Rvl?ZF5#_p}m|9>2
zr(ah%<Q&k1t?+6S8Ey+XOyLE(kw!_e!i}!QXu8L|0iFT5-G!BI1LA<zj`CLUW#21k
zBiShRG(psJz}Pam!}PtzKXFE?@43geb8>jOxw8ftLTRAo_8*^<z_Q2Bva0T#A$Ci_
z!AnQ196bK~J7?}i0ed6Xv?*xgkJy?CFvGJ!%lb+<iX`Aw|5`Ga3_M*nw|tXG$ga{r
zOENle%Hbt*2Mj!ydTnnHEH!r?S;3$2$=IUDzwo^28R-tBd3n%->z`0R-g#KdDs?}e
zQuP^+Y20Pqr-W)7AX~7xIk0-1{(v2BQPy4lUhAuaTlU)@9!Pzy89;DjO^+G=Qn!7_
z=E^zI)gSC@1l0vYG(}Fjv~rp{+*w;uH4UEjUwUg_<-qL3e;z@edlRZ}<hzXS(UQww
z@Er14X<7%Zi|hvTtnLFNWgrppa@)~deJnI8X1{dw<#u}!f%(vfe!hsc70oRHx)g)9
zg5Egj-XHytdJ1E*1b;K^2ZTPDGno=yS?Duk&#X0=^?1Gk9t5>+{C1n1UYk(G^}y~5
zY-RR%o9*em#^6U{aF$@4hgK*eH%QEpKr`W%$#^gM+BsaXW5JO9ILP-%EIib_5prc<
zp~%bU%aK*Gb>+mZJc;Bry99qCBbmF<*!<zda2dg(x1+3=E;;adiO2yTi2UXnK<hre
z>$*GY_&!yTZRF~VyT|IrhxvH)+RB!;vMD9D@MXi307{hW`IhT3m8j-Zakzl3IlDXW
zC*u6~oyQM05bHh0$K8n?O)8r-+R;~hn7@KLgEe5fd%KVvT<^J+ZNVsE_GR)8CiK*k
zA5>Y2*cUl80I_Vx&f}(_vHZaR#0;yMyG=f?Gzgh7e`)&zfJ+Sf**edx6$S@P%kAO5
zs9!CY?mMy5aDw@fiSq~_(sB-BeK0n*Q@E^X3LOA!ETS=qH>|)5pWqkRh7=M@+oyah
zzG{$H4^3_9{XC%8M<O;U_oitnZ8<bhWNeMgaY{6rfZ$bV7q({7^}Ha)ES_LX>7DQq
z5%OG~SnVDH#8`;7iC64eNFttXVX`|ebugFHdbuS<Og^gx)_r1L=VisQp#drE#JGn?
zHA>=YyC1!;fC+%bv3@v4X1ap!nP_T@!9Fv^y;HQjN&(i|uQ*h~h+^WeiEi%%;uH39
z=0%#qq6X&3cY+xLo`79Hde~!iIGfO{<w;OXZa1Ix2M*^3{mt>vKw1?P>x|bL&01Ix
z^ADc+f#iacPZtoTr`nyk6F-E3q0a4QZY_(2G3gT7LEgmokB!@sJl~8WPn>i$5A#qo
z{@Kw8B1Yid<Zc@zk<v?yVURVq`?;8Un4^5dv|-9aZCjr|@=#roa+8}_4}?qrJA<>T
zE<e}!^g@cIODt3I?e%WInm(gOOfp%8;YiYIU~vB!ER;+CE>sd-p))B>AOxGg6jK;L
zU;7c(ZebfJ+?J2*b&mV)-j_^TE7xVaZ*cvMh_4lK$3ZOZNHBqMxmpmtM4+b;9zi-f
zjR=AqlaSN8NeirsUz6M7_o<nAT2s7a2+tS+hYWOfJ)#l8w*@AIDl33F;<7A6F>z^8
z$Q5CsJ4^_f0*$!o@u+!&M8Yj1_<o5T@T@0?I34RX(<&gU2~jMm4h*>XSqb9<dL+u?
zmLKhc+Em0oD3CY!l<}^WW8hiVycw#pcyda12=Jz~%cjVNEdg8IF5h9D62xdwugYfV
z=1jrr1({FHWf&AnjO>uryi5r1@S0yFz#>_!wb;tVy5~R3n_Wqi>wd92DR6&C9ULx7
zC$^}sU~#ykhMPglsi`1=KW^Gu|G1lzsDc14%(!bKQp|aV3!odeIZdH_435Bu@fGZ(
z3rPzx$z$I|orQcZ?}IF$#Q}Px^OBc>^+b(t^v0M+za87Cx@?vWT22PlY_7?NJuA#K
z+n$}{pf?xy$iHF9769W`==v3oxsST%y-{N-Z%29nJ=Z%j7y<;*hiEpy3|3lX2Ctc-
z?pAP4ZWZ=TWaah2$|-h0EKnb#(!~czV}*+Qs0bOlQ8MFbSO#<?^_%D=!397ZK$gN&
z0s8kTno#>=(Ijz&Rs1v6YL1KN4VBdCEe+>!Bf)S$Gr--qU@^`#;Y!xQMH+$V`6ikw
zMhAu0!4DiT1nZ5G-_xmzFkmc)mY0ID+z~hLX-s|GuuBEHH400?ob3bP?=gz)1R-U}
zSV$V_Lg4h&50tFF3DnaOq7%^5d7a>LK&7<U%&y_d6Q$HR(ml>7-qDgYz~_>Z5Lf;&
zEpF*cz!<avN?kW5=hETHpP_&9=7sYe%n_*}4eymsOq2$ai|b1l8^U6XEpmQ7x@_w!
z{ox2n{dfi}X6}I#y~JQ$<`}rcb%FUF@ANx=Yop)sMFW1%ttF(p_SGLbCBMR}k6yFC
zA2wfd#w3MUWeD8!teV{{|0lmNaSdRu!lSe7Odx^~9;dGcqWFvuWHbU{k|!*!hghJO
z&mJKuFbi8THqnJbALtU(p?dkstIkEBSH{00&s)UO8z3Ktl~)OEVA!Ig#6PPL56ozl
zxW{%Qfwj{fIK+VJgT)Wyn+4WXVIzgGhgaPTHkS<?h8Vq|H*N>&u9zrm9T{dm5y+~6
zj3jf6`&{XRRx>daGDzuW_v+%{fu=}o6G*X)#C;LQHujY6uO9METY>IQI?ng5_jeye
z22DeZk^QJ`u>Z|~Oa#2PUqjPMBaKq}*&YYXU)v7v)CS<sP#7u?lU4KWm`@lKtikLc
z_jZ_Dj9UkrBGCfSM~TW<P%!`-AV77G7%c+<&`p9nUb&mZiz%Y-?Ygy#EX76!2f{d6
z^eT0@P=#sMVIu*QLu?g7MsAFzt~s(QJhc|=Oyp4>L_b%Nqg#!nx3zk3U(Y4sC}H@s
zL5F=zjsQ?kwHa<~KB}GJ(ZHjW6nh{FKufSI@*p!rMjr~_%r+Ct2t8uXy#rOKo<J!v
z8HKy5Z!6;|P1;fJ#9;m4{`{Z>kx8v2R*L+T11o_LWSSI&>H|V~e2)7o#Kms2F@P^9
zmNOvbCv<V)RSUCDVp4%)dYk{~K}|v;5c+t6+5Ob*Xw@0Kti(-?Efe`}ab3td&NT<M
zItR5yP(9N$qX2VOLrn{GDTrkVve36S1Y!v$t0bYz9&woo#u(F8zqtGqgTj_Ax@dq!
z2;zboI(}RFPI9h*pGldLx;-@~=pu@7GK>_(3u6A{v5OuGLo}j6vOT(Bka+}xR1nuK
zp}3+G3Y8L}m;LnjK?t&peTA?ycqUX8rUsRTjfez6bQ@0RPBR0<{Oo2}P<y{?<Yeoq
zyl`DGpcu1k>n^)xh>*#gW+}D4R*-C3as+=RB+q1hB+P_a<M7TZpt(?=eB5b*Kx~Qt
zcj_bsdNb~&x)8dUduQZI%=^n@+CqFJRqV@%fAe_%et4&WE_Xx7Spn17X!ojc^p1#&
z$0V2(1S8=_ESnluK^AJA&9d6a6FRi=BbY!CAjsoLX)(eWiK$E4C4U-s*8Uq3%6FIB
z9)H87&9TX28p>pW42Fsc*t0H&%hEkHp$zNV`0N#fCFju|J9hS&%|UO`0GRF{PUZMj
zN=)^CuRo~JNLOWRN)UrGA6wt#s*YDUK5|E>rP4Lm8fQP<t2GhFvO{kd!PWsfqw8aA
zkmu!kibAOs>;cbY?UDPT;<Kg4wn^mPm%eM=Z$ss)-JZIXqFckQ%UV<>pd{bQhr`Ks
z%ems&wXD6X<2@(q9$UAhDa&TO&K!?668k%fQz2ir^(Ms)>%N)64(PM16+EyZ+>=`!
zoU^z-{?;_qRy)H{qmDkQsFhe9CzGeWvqL3PDV_)YLj6Q^>M&c#shs0Z_3B59!*_0|
zsw(j<gm~@%ItU%*b~hYdGXzx<z6yo%P6ES`Txu>`Qr6Px&mA`{4uaT$-$NPYRG~J@
zjY+0$8Q^FN#;F#(vsE4?dUpkOGxIIrJwMY;JQf?rx@n&>IqE~Rl`?7I5@y#AgOteP
zw<yc-1F!z{y+xV|bQAkyb^n3|2EbnXwj*Y4W~Yp^4){BJ8iQbnl<*Lcb6@~%*dG!>
zU{G{duV>+)_0L0}2<?Z8!1YIM{Zk%$-5_ydM~nCzOEr5w<=~i~V8V(QpcUq;Z4X;2
zu3mHPR1>W8VRri0l$a^XC{!Crm#ZVsUR)HeE7G0Il`{9|`WRH+&2?MHk;0-<1?&q?
zC2Z%iXz%#7vvmJLxfyUzy6FSwphFEjgA6UoaK~bok=1MxOA4PACBMv#mVEx@u+Gh<
zDMmLHBYV!u{-dor#i3(gmo~D(SKqs#dLb`2dfFX1hv8cnz+BbHO~b8ib2f^+fW9bL
zYn-T?Wy2?9*jX2U;-)G{5WPUfT-#b{y#Ews#Waee(rn_!Wlm-jfnb_bWrZu*sP~uO
zD0q8|`iVP;B)m2-_5OZrig=q`u)@IEBDrx=k1U)z<q+k}=-OGR)snrY7RpwHrQHTy
zS=GRyqNT=&YC7d=|9ZhCA&^h7!E0JusQwL&Cuxn9MOCY+?Nn}aR&J}K*AopoXX-V;
zmoIZ?l2O<rgsWnXHPws>@7`UfBR_ciw<0u)IUmzf1-v2tU3>+0TKbR=Xt5M8Lvt6G
zZFPeJliGGi^oX1RS*oXly&T=pToP5^<gdDY6Slo!5E>PD)!{ga$x|WF)84h`vXgZI
z`BGY>PPR{O5{D*RU~uD)Vhh6|j4!W3Rj#DT+?RYDF`TDVDrH|nJeuABDjs96am}2e
zn_gD@9cyu#X?d0n!WEmXEX8zZgFJ^RQWXjz<DR{-g$K{t+(_kNcpwF@v&+cU6BQI(
zI2&B;{uMZ-7QpR1E!5&*X<c*{wfF9-(?z}5u!=-t$Fn<7*lSH=c9&W$%*4iZNy2k(
z@=gUAWlNp%6X+p50tQz^sK3LzHl|2*wV#NS=fCbugS0)&r_q@$7O{Nxh^Lkh{8l9h
zQ4x#`U?`)MX8d6-n#+dKRYp+ngo9vHn0t+6#}+Q?d3R%5e-8n;p&Xk@vRiB6p!)@1
z=u%7Fm;7aro+FHaQkL@xr=d4vBeqmjCe5UppGb17ZECV8Dz&X3qG?w{RHX{)HTP&7
zQdyd=Jvl(<W9NH#1F_jXNiWm344FWkvp9KCN^3*m(r%}{`rWpMXxSQwcb1x6cQx46
z!M@q-LQr(TIzOkz{TeqwM}6jO&@;1<b#bb%q06L??0Y}NG82b-m1)V_oZB%&pG>99
zX#>%6swKFR_-gJCMs1G>`}(*_C=VAH5&=wg+uO{o`K4`*rG(MF85csj+4U&;tr4<Z
z(ej#0`Acij{2`Hxg$>+?knlYtehyXG2dA@n8W<0|0e@@-7FWIASMy3SG9<p@s?XTO
z(gen@;NKz<JmPZ(S5|>*oFZq@N)AY(PH84g02+06<;Hb_uCFKtI?dzR2p;{1{HJdj
z!1LHF6gwlOLG8%7jH<jK^cKkeA{g`%Ju%B_IY+M&_G-sl)fG>i?XpKheX0xJ=3l9a
zl4FjT)f;q#sPY_%`+~kMwdlVQp_C(|Vwjpbq=WBL$ic9{m#=W=@*0Ebp>>kUZIm}E
z(p{9jaSU-7m9ZuYC~BoDT<N3Heetic0LYW8ot{<l9QqZ~$^<TTa@z{u9VVS6nk0i|
zk9VN$OO|{S7T|pSM~c<_)HRR%XKh6!!37ZlA`!(#!J{N)?>|C?_A1K#jw6`Sr4s=A
z#H!Y1SG6gp>?E(~Y`Vqh){b5F!vQvZc5(I8M@=a~paO)dhFuxr^+_A3KvT2=$2cZ*
zzaS_0TkJ)mv8x}wA(<&f$&9*BP7P`GvN&;45&4pn9d1399gUl;DHTeaDV>Qu?J4@h
zfBI-sDk0wN>gMyt{37}-TvuC(XgzIyE?^v!tPdO{5EC+|vd!i#2Lzh$0{>EHZ)dV{
z=d5hqeaK`)OlI0nlg21A@Ch5HY?lzv;Yi)Yf%5?)aP`zmP@7MzibnXZ8I{j+XbYSF
z%yPTZw`MjEMPXnbt4Pu$0X)<1QCH#bPaS9+AsA{dVE8f~aeOBT<GDVft_4iq1suZ(
zzb>_j2H!T19->a+z8;dFVHM*jM>g{cR@ddD?w8!)j-x4gjfoJDc#GYe@Tm;N7E_dC
z_A@bQDpDP*Q{_Wop+Yee-!x~hswf;uM&zM(>ZD0ZI#R((QP)3w!1$K67}WAQY(7@a
z{XrQNPcM+Q$gI0F;t=k<ha<3U)?_(x_DJG|DI8iHaaKVDio<-xHP+SsibZCU<Rn~n
zsen_^I3m(|yATGnR`_wqlUcr<ZVqkM!-&~vDqH2xK1IFaowLX`P7_6>PtwR{Z=e%T
zB1C7ku*|%V`@mFneLzK4DX!WySejP4n1mPFq-;=!^fL?B(_TQ<b%|*He%n2p`Jv1G
z{NAL}4U?ODa5g}h=q@iro%Aw{um#Yid0$)9gr}AI3lG>HB<}N4PfP5=+>ezTHj9UF
zisE2EjY>lY*>Di{l8itb^r0$%QuP%#rSEO?`G)&JzFjml;KL*;fdlp+_BR}z&+kAi
z*7`0m_TzgszZu4$XM8-(O(pmHoDhR@uI2d<o|J0LgJoCVn<ff>JtCL;_3GVW7TYfo
zqwi;#gE7ZA87!K&<xVgIeMkS`!lk20?JoPh2?G@2Hp(h`DhBq=>DKo@g=aF3)W@q|
zU*Sv^007p15uP1&4GsRcVmZnE3oT$x-1(wLaLtm8v5=aU%3ZbRj1V4aXHO7Qm_M9{
z2`wOqG>teEQmEfre%Y{f1&jmGHR_PLkzL?Ks<TzQq(g&_`{>ZLN`2}-C3~hzp}gqy
zdiyL5bU6Xdq~pLA;ZBpDUUkR$Mt4<Q)-Ii3kbPELd0E3iL}ERLjP1F5!$T0%FwL0=
z44PTvOndmnr()_l)q}CxNcCPF;~C}-{L$oKqk&Ltk!7EkNY&{_%bCIKadA&#qSv$e
z7vVJnsWn~G=_D~oiYYPZ41_kV0Pcqi5Ni{M^7;P}c23=ag<F)3ZQHhO+qP}nPQ|uu
z+cqn<Q?Z?N`mygA_x8*A1?ORnZ?83{fCP~n+nMH2WXVRN11@k&M_O?MyLOo##Otp-
zby&O9G8yOkMqgL=DwH9N<nCqg)kvS<YHI(Ib}0pZ??YSrql+NmW)9~ik#;38`UnYU
zK6}Pa!>FrwEVvnTSHj#ensWfhuVg2RI1s<P|7q2ER*&?23;HFsZiZ|(3w6_ozCC~q
ztQwu*HL7mwtaJe-WNA%T^cGlh?rjj7<Ab5$a-#fYHdD@tYf}z|)O+fx2H#;3?XN&x
zG1RjsPL@)6EJnK8iw?hiU-h+Mj+)yv&_XXkq}VBgbrQ2TN8?ACHh(?RtB>R!Pr5g>
ztwCf>SgK_{J5~>N|7-QmTIPoN%I(!-@<7>xk@ZCpD_*uwtGE5-_3Ks00E%Zc_GTnK
zlH2sR!4=x~3nZAaf3x__9(ot=MkNwbOIu2@+`o=Jh)8$D0N8eEa<C#8dR{oNy-}Vo
zCDQ3t;?Q%@il7%D`X`*-58N}Hrso8#N+8#PMWq45Rq$ljWr0ik*xf|mq;n63?2Xgy
z0S|N?MoDd~MY>=>mbULTA=!LF)-^=HuSYHiwa*A%&!E1{<v4u%0jxs&FhHHPJ4U7{
zz*}J53y%478_SvgJBtf9>*yntOtl^1#_%+y)ueL^oAsV^^45#eRVk@Uqb`F#ty708
z3Sul4mVj3jx`WFGML>W(8Aq4Uxf|D9u>-%*_`st$6eU(3myiZ9iEOrj4G;pv*5rS9
zmZdE(H!Wkz&!>5piXQ7G{w7pD%oyv493Gt()7|r>fwssUhdG>^sYS_76q8oXT!bZb
z-fO=0kcn)4vk_PhsQ5x7fTS0gwZLq0rn6^qK93m%zD_H?)^TAg>joB<Oy<D4Wsz*t
zyFs?FXQ__(X`wS5bwTk3B6ZG3n>vRt^EK%xVh?T@)#~{tLpdPjEgCtw66}*+fo<6?
zi0O*rGlQRJ$n-X+PYv1QgMU&kMP6g}=4l|2^@32{WJdn2g@6&<+AB7Ij*3+HvXf#$
z)ZDFIYaUi?b6>%QJ-e{{it~oru#j!3kTlx2Ni!<2>MjC6uxj9kuCth-&(`b-$>7M6
z;8P78EM{{#-}DlzJ$<HKn$`^-IuxOY!`B|gynB~Y%^BV4;;6*sv~XfepUp8|$FA4&
z{WT!Lf8s{j&bWj<jB^Z*I59QMzlLVS;5b*X;Rti_FO*!#hhlkgDO6LQmRp&Jb!0~z
z(LH%>j>@(pZGE}$|I~QLb$K&^9=4y>cSWPn9PJm8b^9C4$CLLv5EA3|H}d=jW_+xI
z!fuIlJ^ax4ATOST!BcCcKzlq8OI7Y!W{l@oM$ZpM?*6(gj1?x~PJu(XN7*~I;g+Es
zPEoChC9%x;e6S315}oR01cTLRQQ#)p6!d13XW{Mii>febKjA*rg8(3Nfy)I(Y(Ea}
zrC@p>iAgq+o8ftFkJ==sK}!fb%)G9ZzRzG4c`);p$A=EnJnfsTOH`2!qrJN2zg!Mx
z1a??V4AP~M!)T7}M*P<#{DtrTOeTtHX?iTenK+D8<_6UOWoAUXG+{2J45g+lWQrAl
z`EO=OIV)9Pf4zvo2|Y;?Lc38S7ax|4NIvn8U(M+mi|#5$&#wOL;X9_mpj`*kk(`(K
zgeeAJl5L^1?L#9mw6^-h<YA`Jg~~)nWo(QTIcO0zUt4v?oG^9qL#6;frPAb~v@BL&
zZHdYJ^f~s~GaT^quo=#PT{dfc1oG*KIS7~3N`5(5JWm~d#blehPA`k8NSpnC4kmfc
z8tsBw=UOOp!g&f32PX%zfkFR%k!j5l6cZL>He8fZ{ZzekqZUBM6jSj;!a@f%r$60o
z@%fwkmY%6_XHGP4dYi||VMRb~dPJD(%@^v<+FZRkXJIwAhjon{54u~lN$FmqJEgMY
zgPHqg<SK3~a<_QhtQAPztBBBi)Z&<vhgU)V@sy$QHZCELB0)+{Ep)X`o}OqAx0b}*
zv}&kAVTGsEWO<VgvLZbEfT+~DweQS3cV67ZJF|XyY`WPu7F9J-lTeH92tmRg-9U8P
zQHbVA|I}xv7u>U-%R$n35EiyskG<<h$lZGAJwQ(Im;2u8uy5i@R3k;AcJ)Gb#HQxZ
z?=^z`gYdJ4C*KKEr4?T%J4eP~gst^!Lc6+cB^7)pjsG?=3L;1eb)Pw{_P0{v!t`l;
zcl%K(VygfUjUrX3Qa6*eb)7C~O5|-tFIOXk*g&PQ7f-V68X^lLDO^AR6~4YgQ$so?
z@qzB)lt$8*tE9l*Tz4UXt;cMIPLk<B*pyvHB7pKT8*pTwv^LiJX3g6&=n2XY9V&s1
z%e{iKlZ@t#ZMOMI2-Mc00m<%#1@pdMK+uqHI;33Wn|{7fad|Ai?dN%(Ooq?Q<ypun
zRZv!~55V)i>pd~6OB2=IIsgu#i8G36$S`b$TG>H@-dD_}-XG^>uA+r$G)2Lu$R?bU
z<p3fOucUJ}T>#|p!RW<~^}}r(o$X%VSQ%!c(gU3kX&>*wfi=LBdH|B;`VM8ObjYD9
zLW&dv>O6Gj9lO<nX@Re{R65>Klc}#KmdABqNhB*KupMV<h7nR!5f=G<wB0D=PJ$YK
ztspilx~`*I|JO;4<jcUCtb#B=Qb0sli7Q{~y?Fc_(mBC$ZyMXI8qIX_qxV3PqM^z%
z@QRBN(p2k@II7pFW9vYQBQ_E2K$a%g*bHpHQ)m&n8*9ZwBQ}o~-B7d9l}Iv@Nnkbq
z7+C0atIWS@pc9wEaLbw&Pj<$~eKkfxvX?lW<x@4t!PZn))<ek=LCH-s3N``;D`N}p
zaK~67(Q;tbVhdN2E72D#@dGGQt;Y(hb=3+j9M~H*5M56i)|bQ+XdoK!672?5<J+^u
z_Zm`;QY-ld%3H}<C^egJzl3;_vj{M<ko6<b9ZWKA!SWO2kYST4xuwQwo7;pLi4MAM
zQ&R^$>II-T!z@3;<imS(61<x%jBqECV}yzhys&9>)dj$%)vW@D>WD|2AE8*TF-a(K
zZDuN~U~z_XOMzlI%l$$}0EWlp2~aeXTC7|!6_un>r9SU~a-biPP;b0mZLV`hvXzjk
zH&H!#rs&{BG_nmuKUs7H@0+67UT3A238kG`T}1K6F|^)iH`+n=rpEAnozuyLJm?^d
zR8TT*N+_DL0!n&#C@7O_V?w29sc?h6xPOIQCVfu4eu4utX4k!Jug;@}_(XE>G(0Q)
zJYd8trrK>cI0yJ*qb!Xc?lKz#Yc$IKNH_Y)7gTVG%cGtk#5Ijz4{dfso;u<JuN|)b
z6T!f#;$XvWz~lns?6{#1=}o73x08kiqUu2*a5?Bm&u@arnDQa5P%3##kvqy+Y4(TY
zl5A{xoKw-H4rdpB8^#_zX#IvqCmv4_zL66a6IPS5L<r$dw&c%?%eU+|9YktVe|QH6
zDWnpIabAl&=!GkSGkeHw412Cc1WZIdY2WC>Aqc%XD%F6*ZNokMtD!V-xAE6#$_r*~
zH&CCiFHqj#hAstBa0q_BBS*RnrY(q~C<_wGury|0n5}*xw8RoMdyJa=G+d1!LqCcr
zy+_Czc3PVc7p^TPHFEi^a+J5o_QJAITLh=QiCB`Qx~FWzmdbJFE2C`JXxecYSrc!Y
zfj23<vL#<jH0|0?SjLLu3(NS2oc;Fl4rh(KyrrJ>G>Umh)}TOmQGsd`bv0bmePKGL
z&627J>0amK7)KsOab~gdBr7vh`nrMWSMNHsVH2gk=p}C7gsgZ8!a5xYlXzj3KI#Iy
zbV~TQ6LJi=8MiargHnQ^na3K@cxvnvb^D_{JHvS%U$(ewqL!J>lhddf4X|}d$3ESX
zn@w{_1l@rSgj{>nKWrZ(4Ly=4yM1wi`zw#feI4C2Vfuk7rl6E@SNa17T-NqY8iy1H
zl-&H6@<q>Ydn4*pE5myvXQ0Rx+y@FCwV6@}dK=0T4b)kCrzH})3?I{mBDGrWA=}VF
zXJUp$I{uJt)Lew=)xF;Jl&S7gndAMx-KOc`$oe8JPw2w{0OR8k96nFSs~Gfwp9Mhx
zBUtCA>6kdo1FeynL=TCJd$>r|y8ql|R-R6iU`>ivSJhOe1%4;W?l!I;m-4A!nSL1X
z7qbS#A_H5qBMI+v!@ZXx`kKaL`c3PyQFm{wn|G(xfSM6M73<Yq4D<O+-*!nZm45M9
zn#5JL1&NtLt_)!B${M^5sUa#zX;H9X=@p<%;oY6e^CNYK1Iu3NOtnVzCEUnAyRL@0
zGtq7g9!B9W{kA#)ylWpPYV<c^*4i;uq;Vaum6&yk|6~q7agL=jw^1>e3xxRIcQIDT
zl|Ovl@8y~%sm~I5dlnolo=UY!#8g)6u{A)qWZNDp-4MGrFEmg8j>ksBOIx&y5>Ul?
z=3m?DGEs8m==C<ti4{F?$5FT=xw4~CL`!peboL)_t7DrZM=O#B(=c4*{zk)DSqLo<
zVf@h{5T_YiH;Ngj4~wScfUjguzTCW|ex(yC>=8qimL#pOOBV@zJgjkC4(Hr<(roS&
zBVR0;Xh;SEG^HU~=Ozape4j~ZjjxEm<u{o;rqUT0b=RKTP)7*l>$|crEpHWk4Prm3
z+%v-*bz<QDovS-!c=A_qD;`W3$L0g|fTp<r!t8T0uVeq!0&^$;fRhIJ%@*iS2m#iQ
zP8V!M19&f85nG%Ww;Nq{L}m(`*W#1m+%$MaWB-yEJO=%8^u-aZ4BVR!BoA~P&TcFK
z2%=-O-+xE9=v?s4vz+dSSrB=SjiC*O{^U1l5ri`1gYb3rFa7<gs5GJmxWpf2Sm7ne
z(}pi@6D{B7pm)uOR+qf<;%VhVl8FB-;Y#q`$3C?^Bo95FtFeF{k4JzGJXu3%3<!p!
zaRwiJ{r3B>rFGYazVlo)A)!}DFJIMn0`GVv38Fx94L%lC_Oqk8@#mkqdDuPk*ytI+
z6rf<xa{lBh0tcXDIiZAGo`q#l3%<;0wSjx-(%dpJ;DI|xZ1<qRUYy3l0UN^@^h*W!
zpPPYqiDOvqIT^ChxAYQ#3;_87uKbf&;JR{qD!#u+23P8jwQD``i8uwk+aVutbuntx
zd*W6Y8qNcNvx5B-w8SO&SCo*iD`HRnV&GikJnOIy^r-3HM|^^m<TGEQU{LPVbK-B6
z53e)K(qHY%<PSfJxHwpSdqzjlV1W3f72?*z%2R=hg4Q?}X>Rg&6=00}sz`_Zic>wO
zOTW?wmaST4GpH{A3#`UUfsou_tF3JJQ_GgEuiuLx>+}c$!k(ujF({&*1pqnTrC1tK
zeM=Rke}pgdC1wwDBRcba;FiGvpFW`d*bO&j=jXuEeYf&PrxcxyyV%^2Vz03{5o<~<
zCA+o93;j4<qe3N>)8)FCAzg<?e5>-wgFuQ8(pn{?!FWYX4_5V|#%e76B&sU}Zfi35
zgWel#W7BG#zOvKvzrR&iRxGNJvvdb0!VBv55_o=Z$LOl)REzWAe<W!w;x|rlbhhQW
zP;J4NOOu%GI4&D8V?iEEN=7ou$HX@JzdxCmD!>ZsF0ur!L0ufc75e&Xw#b#iiJMZ7
zS#^C&ggb*<J;hW?Ztyy!=b{O$a|FN&O!r?Ga(O2v+^)$sM^H)ysyJ$B!`u|<-~vUL
zoM}e7Rq$VE-WR{MKn0M{K&sLACL`}cItfH(_GC%7(nf#=gMJvm+KvsgR_b=Wfn{BK
zTOYF#abhj;)MZ<ojNq?x*OXiIwi!E~ls`J#Zz=@nVd`Olr_rUD^KEeEm%KHoL>&Iy
z?m40iP*<p-c*)mXd%TbSlOqSsotxy5jpjI(%bsmdva>d?6@~qJXw8c(SUK{ahh))X
z+I`1{Q?wk{x?>CP_zS1|l$FK}d1<&mhd%!-+G)alW&Zu7Zlk1%z^z@_5?b4QOuM06
z0U{RNR2wUWG}-jjX&#C@4$7}lr{(e0R;m@WGxz7B>OhSFVLD5y%oP>gIfVpoGf*e$
zAF2oaPL<nUB0?W1C}XAQwk5vK;a7;*ap);o^}!7N&gzEwUj+}0^->`yr}fRvO*#|;
z=)ugm3}xLUsdZ@o92(QF&Q7I-cSsw3s@97GlbDI^2p-Hb^6jGx>}QjSqsb1l=(Uc1
zlSIfa8Uw(P8Uh=@1jFA^?E4ZZ{-`-9(8f%IjXdfHW(<qolI&kS^t^issPRU0H*XKQ
z^fL{>#LT9pmu)>vNtcbOltVKPqlb|L8)gFv@vG@_=AnTaGHp)9kc*Z`!7hb$)#ZpL
zxwJm@i@;8&jA0wqfvIz*{c}OQ>_;NU7C7_xEgn7k{wh6BQxR{ez=a%UvYShk1t|4J
zrtXQ?ZVEq~<D%(WZ0>c}Ln05iO?vPJ^FZ0rB_e1aI_k)!>^UawLz(_+-6d{YF3n1}
zoYE6fMM)Pk4l&)peMSL5dhor``L`_xL?3PV^i8VD#XwE#MrMs76%5V?&vgP*Y5}2x
z0MFnZOoQh9K^UK&_~v@Xsuh&-3<wF89_%uaEbu~&WIE3PS3c9g!Z&i8Z^`5zHbYyJ
z{iC<UD{l5Zbj<|GER+ciU^9^Hm;}reLc|RGS+gdl`f`@BsB+*0>QwrFic|?XGA>LD
znkq7+q1luPR5lOCP5|7#UldYdI8TifHiaPt?XhaLLC)jSpm4{?@H+>=JSV`+MCuFZ
zwV#6q&o0822_oL%#gtWl8+Hj2-fgkb_TL!!27`XfCE`EQLyO^YBcOLN|DX%u^{0u3
zZ6Ign8*_I#3m$|VPs-tIC|#0<R%*9g>)eD|^aR=?7AB6VGaH#lx@(ovkpMl$lwmO8
z?&B%gOsS1_pjZf3H61+hGSJ=WZm-0_TpD2v&j%(gYjf@T_|3XJw7I>Vg5Pi1^q+ev
zPZ)d})Y}tR?09sv{J2%`maVpMpKZCQ?J(+ktyFs>E&${1v*bOb5J90SEw7BXuPTS@
z??tuOWjWr(t)wd8j3!luy9x+8r*4wUQT#{L4Sj~ttao=mEvhpU81*Cx&~m$bYPQR!
zVLkj1xvMVG{M<<S!DeCWB^@|y>`$1tgKH3~tp;O<y`K;c#zF?XLQa_<L71>&jZ$Oy
z-D*i-VtBo!#4z%4lALhKC2vu+ogN;~IJ}z!B=E6S8Y&2nMGzt%k2G}4MFG~yLD}i{
zpgg)AsV@aPDnVuoQ+#xDEk-uq2>G(>9xU*-8BHd>BLhwOcq63TeB7^!K+<m-9SUxT
zr*O|yL&Dq%F}5M4Qsv4PY#O{d;?OjfBa(?sjtsRp5(Y8ZB|x<tr<Y5#WzW&tya3f~
z395Apt`Xs43_R3nLNql$&e4}QKCa0>e0OtUzL(y$AVLm|z=bL~D#$D`N<ZUw8Uo`c
z)j>lr-E&-t>|uT+;CrR--0z?oE<j!>KK~q6-8yv45SwObu-UBPt<sSe^AOVVxt2z5
zFW))O7<?`axKK2^X~3g$nj(Y!or&W<X`t*<?`)B;`)aNwoOt5Ya!VySmt;me@bOV6
z{YbIniXSPPKO3%RizMb15K}T#@CXO6t6we+@;q<_enTV)Aul!m^BR=Q>E6THBlc)@
z-XWcX!<U#D<^eW=!w}*sK);*K>0ydnUzZ9Hd>$5ElD+2apm&;Ghg1yabATYk*?(zT
z_sR1RBu%sJ0U0ZBnlkTACIV10_I&Q;3G|_@t}{CFJ0Y9;b7WP3H$D2QH#=TV?(GOS
z2=rv7a5+u@i$x)}lhT(Y@>$#dqWy-Hr~`5Z3c&<ffwe<tC$9CQyxH>7oIrB-^P)WM
z1jRUT6fkvtHGnh`C@BC5zb@BY7Gr|x4M5&HcFG9SJn7!&^;lF{W^NOk9U8*Bq^qmD
zt@~B^j#|xnvcB#2w}uSy98oBU3yCxQIRG%hXHakiy#xe6EHxG+>Exw>Vbl{&S~)pZ
zs&eaRzh|?lQpHjVQhPh@YPp2ZMzxsFMpVgp9VmyKX0PzCU5?ZN>qG%a4o}b6ET7gN
z{D`v2e_S?<syE0%UDC6!J`-hZ9NrPBr<l-NPptZ{u<Sff3}B-jW9&5>`wTc?3nz{A
z-RU!bW($<Z)~AIw7!tlr*dFGKo7R!?8|I?TNAzMq6G_q9bWJ33T%|@V%1k2MzH{A(
z%ulyLdZm&+o$hk9Sqgj(X}4>-iiKf~*5k)YSb>EBk#*!x4<*@smp0eGYF_rcksV<j
zL^ah!%gVZ^=~Z@}FV%A<W$K}L=r!ZTJB5)9T7D>lS!pQbEv|^L&4G&oJ)bwEd$-V_
z)moOqnIa%%$VcNU<Tp~tX3{1s`NR!Q)?q1@5%H1W?l&1-NwY!3B<urPMVnnF4gH}=
znFO|ht4sl%_dqV6R~De{4;9$@n5E#4^1cI=hGTB~uM=iG0gH5d&s~2R#IzQhKWv$E
zDNx%ca2JHpu?CkXuZs8H_t9H;?dVxqEu()LdMm=phjPiHmJPfqxG0!<2h>W^+6c7m
zUWn!B#)VL!L|HDX`OA1iL0UmARq60~Ru;N&u;I!N{zx*D&n85B;?v7IaN+rUfl&to
zvEUT=5?5=o4L#PMPM)N~$oxDYdMy)byyDP{l!DUI=I80emCjS=r<pvYk@3=x8At*^
zr+_g)1>=>H&e63sdmC1bSd<Iuwalf^viC9fio>)IpYboBM=%`vFQ|unGr>bHTSQV`
z5H2=Z2$+HJVqg2_x?!Zc!{1C7J1<GymSHWeI<*H%thz!!kOSnWnuF*a?|^=*5sW`M
z6vi1H71j%LFwx%L&mj9DIIf?dz8dgVx$q|D-7^CDJ;D}+tPH{1(C^Hj9AN)zJa>My
z%sF&JWo&K-eu37p$pp1CTWur6gohfTmQrZf#9wW<VT*-&Wzya|C;3wk*u6i(Rsv^9
zDD!;_M|-CSR`;!k#4IT?I4cTrm{|nkFDkUX6TvPL%F{E`fI&hEWQMj)8P{x};2Rg?
ztQY^jYGr-lkPa5@omt^2h`sj?>Kv*);{m|T4yfpL7r;SF_z+RjwBQA+IU230AjP2g
zW{luWBB(RK&`gCwIYo?M06{9V_skS6dw@cuP&TM(@R)K;K?YE#Ci>$5jOb3SH1b~d
z!PT(7e%5T&Rm5=^);t}tqdXJrIMgR0PaO@H6rwBggt%nnqM@`zdTBhIqt9f2y(+_5
z+_zpcOUbDZe+7Qxk|D3)bA=eH$(N*pp})A08r#?g5^*z(4MUtucNINPy`D?q+jc5?
z*v+3DY&lX(%cZ}q1?=A-%tf(?t&&ny5$O?t<7o58Ch#5ch322Y<_l6X7ty;Yx69fd
z&z~!8ZYCBCrRk1LHueva6@~15!A>*V65{(MMZvM?bimV>G2Do*`!lHVbT)PrbXnfY
z)O}{nF?~xk94<}u>2*`FoJK}-+yaqH?kV1P%Be?L){Qh_X<O@Z25oc=#$;mD>dDC;
zim{Z8$OyEj{>ntxaM1<Rv<qa>_|A-KY1f06Gb#$b+Bk!gmhqs1$|<pv8<?2%6N}2s
zPf)3f&5xqATwk7&eA-ddmU^p*ekwC)-kiG9xU-s$9RQ>WYh|^YE6J`U)+@rDAG=+D
ziv?@WU$SGI#72VX0GI4y6$Q|vue8!(<OunEF-C-5jy76-bXUkaPoG^#@AfLE-M$J-
zWFpw(665Nk7BQR8l8pf7WS>5iecdC5=?N@^t2x5COE<)BQHhy<qC}6#y3Nqk{TL)H
zf94f1QS9u3sZO8(5W|-^h(ZAkb=4~#V#L^)^IJShlMR3sH#T2IYGTaTa`;}Av8+}}
zG1Y}gC8=H&J}(?gcw8+VvHOjs6OxmLs80m}2r;0l1A;aX=Dzh&*kOgF=1y*6BcIf!
zTtb$orSbZ-;yQBPctA!mzOtWXO|0xN4NahQt=?wJs_VTFjngIXjsFGgxHM2&UJPo#
z7iB?@1Y$yuOQVs(){~fUFKI!&$&3B&L9^J~8We~;a{`9uPku$M{*f9m*kp`&05s0B
zXpt#s+GjFq4&$F>82qQBm2+(fTjJTiKP^<Ig-<@LJ1Mk?{<e7aPt3f`eaWlQp#W#N
zxjHyywrg3KVsGv@RxG3d!V`HZrm#fyhFu_^oEoX3C^6(NE==qZ??yj1buOOn#+{(7
zFQZDMT;VzL)`Y4xLbB@bjeUPso_*V!^3mP~Y41m{qW#ymbj(2Po>+*jl}5flmDrAd
z!Sz*5V(x;D+1upnC|@S0!%8p0Whu>@HUMF#Hghkz<U=+*nSao5h8MT-ZUed}t~vd;
zR<a>Ihp4&Ri4ETnz^(v9TADuM)cZc)=XSsU_Tj)ZQC}p9Swi5A{NPM4$A`7?M7b51
zz1lAAQyo5m_7T6JC#h7^%IY!sj3vz>{%nlioNUj5O9o4C^tV+J2$0OJBt}0^T-DVj
zw$L`;H@eYA^T?0pFF~>oPt;pQsV-5!3kyj0^#bvAN8&xre=HO>G!deH0?>nDN{Qk4
z#7LaiC>j^7HKYh_;yc#@QMR=Tl|dqWo{+_dbo;ZF$0V)RC8=YFu(tV<2HcoPNkR0f
z5ScxI-o1T3JUg@6D>!coljJh}p@j8zZ|_pFuC6dNFkhLR)8CYjT3<!vC;7w`jvd0(
zGG=&)hvml_33KywITy_@Z|r5ED97ydOiC$Vx_r(c*SQv)=Qv8T{=@dX>|1<1g80LU
zrc@qeFe>JhK4&<#0gmNHtVgUNh;o#pg}**GW%>KA)gF{eNjL6lwh9DmrA|3-=%1N@
z54hvUx0Znp=-SX=*mciUpE11upbc-Y_pz$Ev^9OgU_x#|(uKdwUAQ1+t}X@$tNB|-
zPE)o`mz5yWiyUb`TT-#-(0-||kzWgN&td)duCP|VFCI=ccs9(^8L4gYbQcffPuFzB
z@A6kJ=VuePeoCFn*Yj&Dx!5NH>Cb1@wkZZzyYtq@_PeS1YCb|=NGWTnzDJtT^SmUV
zhDmhLbSh7e+UezSY$K2nu#~!t;P*zmSKiTY)YUo3k33;!g6HAqq#|LRo-EY_4fUt8
zqu_#3sfU*Zhhc(I_7jDd#KJ%Wb7Pb3mJbRKg#rx)EFtq4;KTEs$+wxG#rVYNe7q`e
zXWRvcMx!J4Ksm6J5J4J6>9M;w0@hpyq_(<*TSt{8Uj$xr!BWdLi!A}q+L~((+M0>a
z)a$Gk>B@k4N>;*Z5U*)Uw*IlP_<?fz682_{UDNc<!ozoTY)Wj8m{$VEotswxZVsuC
z$Oek>#~*;BJ@O<0H}nY5py7{G92afyCeUs}J-V-3ROyMj7k&(}`O6wm5z!5a(1ds0
z5w$r{%<ms@ow)ojTeAKftJ2N=pw5g;;q}e|WyKw!%A5!4Sy!d`Oz3p5GY=z8u54%|
zBx;UVMbYKMyg(D&h{|n0oH9cii5(!H1@s^Lh~Tka0m#O+1*D0)@p5hbW=l`;E@vX5
z1A<790O^y*BDIr{D>};WkeluB@DEBv<c9E38K{LW;Dp}cnmXH>Bfbh%n15Ws8u&h#
zQ58Rh6uzua+?v&SW%lt_{z8D&_u{;Uv$}AC+Wzqe9tuVyEv!KQ+Daq%MoM>B1-0RF
zCDG3bQXS5Feh{1{OU8$U0*-o-b@$0>*VjW++euKK{c8<mbqca3RqrN2K!TEd@(SQ&
z_cRQ$CXgmL26QkO`U!DWSUA?mYOWc8Ffl7dF&Mt{r5f$h!Zg@fG9&_rVsQT|3QZ%}
zw@xN1dtm~iNDGckSgF}KC?Wf3j}HU7=27SnCs*t1WsZ$LIHwGbGKNXsy7<q7*0v&@
z<ceb<JgwA4ggE+~sWKqo)fgybP5aJ0;+GA0C($3GL<h_f<qNQr4CZ)1#Bi9;zLCTt
z>el^w_VhTz2s#EQ7R!9Om+qW{HA}0*`yIm%V61duCvLk-W3Nv7a3oe^&ww=;7M2Jl
z$U=Zzr*JpR4r=3n5rDXko6JuZ1WUL4U>udfSost2H9i&$DvFkekDT}~VQ+1edUaHc
z91ZJ-hTc+;J$oBtqGF8RxJcu>_4FxibaQGsiA8RmIZq~0VcdW*E1B0Jl=ceeXBNp;
zC)fY>>sc?Fnv`zaxh5OkY$Fi+%l^LQt)TR0uTvU>L}9mBlTq(+_i2_6p=yhFnUU|2
zX%A^oSkVbS3hz5nl#d3}rO}s4_(E7M>sau`oFaoNS$X+Qs~@==WA5i?ArdakNh~wv
zm+`1O>ZU@$z)uzRG_{6%5i!+TXx_G(4<E_JXwtjM+zS`;_2XH4TN-idQr$ZREGKe+
zbK#-7it{kIu^R?aYN2^8gxcd!GG8tz<if2lfbKETGa=p(_es&v6t_u^!J=J<I(As<
zgnTz@<2qj3c0(o<`p<hL9LAg;iy`f?M$Z&1)!K|37LvrFu?0+9VEhHRgoqys^R(*$
zVp`7G)kQU6^z-zF{YZo=BaPP33v;@2)Eb_hxm@Qu-+v3;?r`PP)5&h@s<<^iz`&lm
z$8FmnLdJ}spAs&}!!#z+dB?}a7D7qiKTDq-RtSlbdwC2hs*&OV)>PLyyGZ13<u74P
zsh&ir(G@k)u8Gf*C>C)pEsJoG+iBtJt~$9(Ffq#Jj}=kKlh~2$d&QcH%s*6wr)$M<
zh&AFf&OAW%mBn*YSW>dD;AtM?ucq1~3XMfiCUO!PSB}m9L!pldDb%_|tShJMq@6sz
zRN%1zm!qM~&);KFh6}p01-W1`Y{ALtljlaQd$cAzL4j2!C2>fj?&`{o!~Vh}g<V^U
zdxdIVP7pY^Pr6P&L8_26TTN*ID#uS|L<>ghV5V)<!N%$a#i9<_QL|e8PDz1Q>0S+^
z9&+G>wbSU`P&m@9fVAO(2+Ew-4`%3Y8GuE%C{h7=QqPM&?8<f5PBEU43z}>h!s<C?
zJ~>HyN#xz2UfA@8tV1c+AWM?^SR-o@dkBfWH*ZmnL>MIRQ|l=p7%k(<sb>RHshXMg
z1At~JAy#rAUVXajUfC{~9MQ-U$rT-?#ZL{F-x+WBQ<e{E3jt<y*d6^q>D6yEG>UPI
z!gB{!xZ+Fe7A4KgjaFzO`I)bD$HA{Aill`EaMpn6CG)=4sFA3RS1uk+jt3|^K0L&!
zT5VaFn2?autYL8VU=*PZU=;%4f6Nz5upmB$lV<LLya54*kTO}sv|}~t*W#mK_U^q5
z34NNpz$*TTYJT<)CChu&kJ4G>y|4vlz1~f+$o<o!D+DvEPus4wAYPg$x#mDPM<BLN
zcB}zlwt>m(%cygx8Ihn&5%JJF#WIfXqI9h^s=h^bgvCryf`YU+LTLY2_3bT*3w%se
z!9OBZ1$y$Ox82~8qEQDA6deGx78M5?I%T^dapC@{@fGRvy+s)~KZ#HQB<7GQk5Bey
ztJvGwOj^^yl3<4j7#f4lLjTSxde*)fN5)r8>i5WUu%4gmgHhR48gPT9+^z>L!U7-)
z7$<HX4Ifz=?y~<^6!FaClZHDM{v5FwXORilHWKbz^7ByQ$?R{VP2l|FDYl))QrrDi
z&G<2`|Me}}J0bNMlvie*Xq+0*sdC2(+-%ZFhNOX?hF&2szndy^x6eeF^GS&RE^jOJ
z39v7UFsH?Dzl|r&jo|=5t8+kXiM5JNz!YdRSIBKw*cphd9xgj!;q*T-9RZ%XCPTl=
zeYanu>VE?(7`a;7n9y0;nc4p@&7i6Bgxw|sLeB@a#z6S9K?kHlF?0w~e9oXi7KYoB
z^gk#T)&xjtl&OTKe%HPpW|Ad{SU6^TG(NbBu`h{cZt^f(wRu!AHUcI_m70#fe|wW+
z8^II4P!IL%{Ez&vv3!`ZqUVV2zA9>v?-;=*$^sFHB!|x!(sj2k#Si}0FH@|tCVN}b
z;*~cR=Dr>Ln>zU1WU{8k7|v9hs=5&6>xqn1eNL)4Ku@Yb`l=RjHYyR8qMi`jgbk^`
zTlqVXyTJ@(8j9NmTaz$@s2({j@LT~gne|g}*HF<62sUeY3ZY^!xX6b|dWD83y#CfG
z_$phgYB8Z1>7mcGM#aM!vq$s(BJPq9y}iWo#~l}cj%)i?L=KD0#V@O#e0_e2d`Rdo
z7R)XP8pJhRcDQc7pa2aEvmr9`uPoe+`Y&U~;gXBb`f!mwKCr+xmJs~Sj^8b@Es0(1
z4{l`O%}|)&GS~D{C9Mm+cC<&QU*<3?%)#R%)zNi<K$(W&GHcg#pPsyzlaz8osj;m}
z4|O0G+0xsi(_&qmb&nZkBih4=&9`sH@hQno{nEqc?WbZ*uOaHYl5H+D{YrJ?txkF5
zbB->|_kR#v`1Bem@_+Gf_P<B~od43TH8-_$`t?s5|F0jTM8i<|kPZ3QcHa=fS^toU
z0Jm|zpvT=G%3Z26NOIe|WXX*;riS!_GeJBNA~WTGQ%f@DCUMg4`2~1u_3~@&cv;9i
zl!NASAiYnKF?WU~zuED1e{6NX=iQpagmE4nJJfDZI-p0hZl`$Ek@y=LO%sfWNrAyQ
zazrfM2_d4<W;xw%1c}09h~xrG)+D``P=AH8>4(0@uGmkc1&EFXH3A_%rwqEpV%(o=
zlxi)(Ic$_*ZaHiWHl;EL+aByl;5aNO;}SB7Sb0hvG>E>)V$jB}{x#69KbcHHQb<~{
z$drS^g=#@hxM;$@%B6lfHa2zKNX-CN(pVecWNhtnIe0$%L?rxlsAkQ7?5IWp<LC5m
z?Ao2?wVC?|6SWjFYw#A%7h^Xp*pLHDzZq;uaP7y({YTq_zZ2t+J^i)4!aYNKhy7I(
z%+kU}IBVmgBo&OBE}1glCQ9vcgWj=>Z2~p!d1*WDF{f4QMW!i25;}G&wag?gHFB@9
zV5J56nsKl3@p;!y7p^p?_T>h}0VM4{*6&sphVQYC-u`;*w$=SvxJr~$!nk>f!5C*7
z>M&B=-qRq2CtynOwSm9AGenN(&flhmBFDw=4>~lDh_lR{jsb4}E^R-!si8kh(2Ii$
z(puX-Ywy$LRN42HZoL{$%islb8Rx49^O^e8P`Gzj0PEerx2roNUfnO^#y#)7XvO(_
z{BIfI3Y(YZ?wF|xQCX#0-%sSPOytLIPBXR5nr~o#!4TjIzG9NuMtI4)QiF!5!-^k#
z_H0=*JM|y@+Ef_>YU|X;Eruy*)nnb<hH6O4$P=bVPg&BhR`B44E%%#$v~YfQ!{kCC
z;jMn&vmj;wJ?vK}%^AI98Kon-tdOC6+<ehN4$u@<O<HI&Lza7Ap%Q`^pP~VfItt<m
zpEPGu99nJgAW`vq+S6p~X2ubXik~wrmI|sA*mxSEXI?sO&^cyfGYo{`7xM`nOFtE|
zf?<+-;AH+bXp?yZLtMXi?qc8@3bSN~TH=%{Ge`p-4^=uR(I#A-CC;EBj#Qb%Q@*(6
z`$u}dECh#VXP>7%r;*zdrcEH9l^T6S14kf+aOQG*ykNhsRO3#tV*iHa)cROYEO~tG
zPYA`Qv!yS<1DPZtu4cC#2FDeh+T53-zvF|$;}bR;qTP?Rd_04|mEIr5=hU`nO>Gt`
zu{l40&}#Ag<9!+%{v3;qg;He_689)Ta^FirDpM+hPdpPrTkSNU%5~`BkkOA&YTh2S
zX(ZgfEz>%$t<3C}2EbK2$q-3zB5NMwIay(2ovAc^yPD0rf9HmT*5!eX0}K?m5W)-^
zw`ei5pXVPSH_`jnYWS-kyhNY@HE-q<9%)9G4~p^y?$06{<{ojcJc4}>gF!3h`I}3N
zTp4E&yuAfTcbW`6hddkAM1J+gciBTfvF45=5jRK{dAb+b$xvGBJb9{JT%<_q%8Goj
z;K=)w{jx@4zs#vngoC(%mFr})@fF+#jGXrHYMQ8LBMGy;wUnw*7b$SJ=(e*m-EEY&
zbV63TCzrK?JW)umEmJqwy0#MiWDPJLA{$a!OG(G$H0O_-X!}8yUII|vMg&jm?rFUY
z;8iD5+La&Kb)9SfxZvoIT)oh~3t{nQHpFQ&%RAW6ZBIn^icXiBUC1Y3cmEXz%1eJ?
zJk>i_^N;+=WZiazC|TzGS9hS&rh=|6;;wXvsPx_QLXLyO(biBRMd%g1#)k-#a3Zhq
z@h#`a=y=G2tt6BdX`WFtX}8yY-5>es^<sZ@(wiJ)=ThT1$tEF9h<tgpanADaY@^$d
zEiJ&39G33M1+Kjgr~@ya_e&&x&s#mZ0iXmi{y?SD4VNmxG~>t&F{5b!JO~Myps`*S
zs!4D#ozqyr(4n}o*7Q)Mcx}ELJWWsR_i3YrI#N2)#!M+f*d7V&KvjN6p+PB$GfO5u
zOe8I*ikZ7e&z|$n+P6R5pcz=vD;Bp~oseP%O@<LOZ~ps`#;I(l+}G{hdi}H@=ZXR@
z3t&om$b;FR1tPDtIpsx|NJPEddQ}l`+wJB<VD~=aKnh2+AGD9|c2F=M{-E^l@8lpx
zPbtl9rsyDah0<LtTzsPJ&n03hwwz`}Z1`oQzzjzaI)l|g+pOG~>p?1$=!a`die}SU
zr}#M93M+P#e}{xcZ~fA0NZ$y0UA0dp#|rf8!C&oPYQuiwqIy;;px;op;$z3H*xShl
zX;=T{c6qxKM6T3m_lA|Q-Lp$lQVvrWDPn$KtQ6Zyi3SE<R;J@{Ymc#5N&526RPC-X
zn?py50z;0w+Nt_9xe$m!V$_zdS!-KMzdj$HA7yyS6o-xASlvz`O_s=Anz|5fJA`|h
zBx`>DWjD@;3=w%ZPU{rse8dd6o2H;xP@tM|2V&?M8EL^Kekx-(z!Y|lm)X=n3XQ%s
zp^IHyZG6iM$MQN*;Rd3T=U<$Eg_I=hVHBR<&;GdWahS|bOQxP{oYgH>a<IA&qZTgk
z{x($EHWZ)c%KKMgLcd=Z;eB{NjpNnj>^45+OG9S={D-w}MqM(sRc{o_gDhmhpe*|q
zi_)tQrB-`>(4YT+0KrxtJShDJ!utO~+WNoRX<@<tAGgglVMeJ+043ywC)Asol%PT<
z^>iA?p&#>_1eox$77K!35gCd6{!vVKcgIh4TX(x@T~(q%f&EXam`G4yK^EzGw%Q5y
zEDj~e!LWl32#`4GlSRhPt<XifP0+78vJP+Wcvzv-QxoQ|7a#A)LdSs$7t(`%ds2ob
z{Amn+u1LtWTj)LM3i?63VG$IF<-E37M;Z22A}uF{&3kau#U@8HT~H~60I!}l#2I9%
z>#K{+-dro2-{_qh?wFTE<u#uy{CPWkqp@Xb`1=CoxJxeX4VfBTpgx&{r>6D9cc*aH
z%ABDe6kUzGL8u0WyCEnz>?@c-#}3K4Hfi?uSW{;yvellJvASyDTw57K8=VN-8_cY$
zT%PlD1H=yfE1$k<o$xA;jh&$rzL@`Uwkmz=%mR98_D|L#o6pQUS@rWFUu@5ZgbQt#
zv)?n>$j{FR`v1Fq>QMw{NW%sIsPOvlss$J4|DDaQc(vU(M;C71QLW#H3sIzcv)OEO
zhIyMsxUEc-5GmRDBH`gAgovz=3;-1xwJ!Sno!7Ymkdhbud?D~{5Z7{Yaz3W@US0gf
zFQbcGJhMjBn}oVOo-eb4(dTmgiN%^EU{V#CaB`!XXuiZ*C`H^=rx$7XQMTW7vW>%a
zvc)}<b;Xy20Yd8K4keS17F4PeEt4Y$ftXL#3uEB58x5^*6e8fyrDz7V6N*DMju8hb
z%^d0I4n0W<=aMWmBRCL~TpF^+44EQ_Wp$<@+Chi|Wd=ox4~arX30d@ah$vozXd&0m
zClu@WFDuMFJ0}4)SZ1SX@am#CLccR0pfA~}qfEc=&zG{YvW8Gj;!hujSh~C>b8;uo
zab}}Na5DL~*FAB_lisYbB5zC{%I<$8Gj;H0^#p^bEL|wU%mapQS<c{t797g>&%k@!
z&5Pg%&bl}8bKS(rZ;uN7nKnFeW&*L|Lc_AqmpDizW}7^D=y<0OjwXHApwgy39ab7Q
zDMiLe>;K6no3h%cE)<@~qLD3Ss*CD97-jE8=ahXADE;V&dIBy6Wao-cs4`v<jEyov
z=y*2-xgSDcbZg8+dqC>Q(vRc`#s+}Lfg*6o5do_3{sS%R`QBWBAAI+D0LLoArz^*H
zBI`v`R5EEJKr|%$IHl<zA0uI-JJb8|1+WidCokj0cA<_b17x#bKp^jUUHs_qX5som
zfO+qs=g?uCDwOzD)KC`EpnIx({spz&Xd8;fa3402|LiOhvuHD1k<X0~H-1Oo@qIJu
zL9-p8AM9L3zIgJmw>KxJA0*0+xUT=<!RY?hzOf*Aj-DHdcKM8Bn+K!d%?Qm{3$M8H
zt<u7WeYYR}=7B8(T#7ThYCb)E#pont_0tj+*r&-12gL}VQe_e}or-KkqCpV-M9u<S
z9sv>=59EM_&X0H?=>=juzl`XFXTR>@hu*=B{u)`n>Xi`;w&!NCNdzOYwGJ?Bl1xUW
zi|26cE2|13L|Zr=RIp)znf2xe)NF(}!Jntutdj@hsR3xNbFw<dTs|y2?J{%oLIPv<
z8q~PU|D%>oqdpQm(Ia*LN(Jc04B~;N6aJuT5=K72eIDm!?|qud6JmqSC>)ap<bp?g
z3JXFpWTq9Mp`?hh-EoBY<c1$q0EoNAA!sK<Bl7kfLN)EIPj+ym?BZ?DND5_k&HRcE
zW*JtF1fp*xDX}E4h{OVB8j|&1lk~Kou?B7?7u<v&7v`_T6dI(rpwP%0eNXxa?Q2wL
zGt*N$(CCEia9=GTV+^&rS{W~5=)eI_X4F=4ZO`J7xu25HeVBF4zLnLr2YJu1pJ0P-
z<}QKdC^h$Z-xUSr?VT=13Z+D-FPuINmgPNj!}b)}s=X%+@I?i_Y**18)2RG_k9uky
zst^{!sIcYa^OT?OL;AMY-S7TH*kOhDrWg5Rbt<%o_nx*X!&L&Y>h)9Mw8Jbn2EvP;
zX&YLP*r_v5cDUqaXko9rj56Aec|4lM88`=A-VB+l73$9fWoaH4T9DS1VolVhX$YoR
zay44KnF1MOMoD}{gg-LZEzMa@Ui8h#zyq8=c6Xrt-0Kv4&r(yY<(j|u;>{g)^8~s5
z+YMnzBtS;rr^^EOPrpB&ySVPs$Lo=;J;woi{2I=Ke$oCqKqA9BFcSgP@-arwL&CW~
z5jX~{-{sR&+rY@UpH1(xU+a7B%d8x~#;alZto~f*P(hIE;!gv)Hmv;4v-c@j{{p=3
z-zZOF#>-q+asKi?*yZT&vri+Af4JBXH%B46z?k$qS6h^BIA06_I4B+?yWv28EILW1
zUZ%wNKpxI_YcyH(TWM+|wu850EpW%)obYy>{Icu%$;{enx?(Sf4c(_q*RS2z?jrPR
z8signq?BFQ&o#91yxpBIIgZi{U>VuVrn8(JrLuK6Ofa-!br@FciEsV$MdN$_gy9@z
z=~-lJrGiL?>>BjK1<wxpn6Z*|m1IgI8jHl8r&xq@!Z1hkLCXcb$e2${YqyFRiK{KG
zP!=<H%FWNdDBLM|1@tV20;FJxXS5$w6lVZxA6;f>_eL=5nLj2bN|qL!R}ej<*1;vN
zQ>KWh)Z#cv*)(9=C`~Qmu3y=VDDu6k%@$iy;r%rpu}gL?eT4-3!jn#cw|Sc!7j{g;
zpo~q}Ipp`;CKR*LjOzM;;)Ycd-4-bADcR*ozEtH$3oD?V!fOAzt+62HjPpKil`$C1
z4+)wPOPO|JR$sJyO-yMhMo$K@RwM{X37Wezn_`urVGctD(vCc)fp%7{Ys`RHFrR8L
zTe(#s(Kfqdodv>*nqqk%A1tt(Y6z0LJ4cmN^1+lxh>&)GQcU@57<d#nzdb0YZg04r
zqN_R1)FA7IfgxSzBxk@~-*46N?*2$V;u|g`pr8#0=Aa_V-prxRr3Ah{v~eBl(B5_}
zUbvs}gN(5IHx#eCz<cY`H9?DUf6O#f-_mS9|Je{hk6foSj;ASfFfBf)+?%QC4%kS9
zOxz$NI63M}LLoxFl*JJJd!&oijKve~vh<lCNNEZj2P)p{7`$CI>4%d#nz9IL3{csj
zb#m;t+480I`|bUgk@sku0~^SueUF@<Z_nbEfNA*P7WgMI^8fS6b$VkDvI(n)I0e!r
z>6Ipe@G1wYK?a8zeg=L03xGXy*j=A(ZSB$p;+b1SJFDM{5sW4mj-vAE6hM|o?H?YF
zzu$FybxZ9<^Igc5<pH<Thz|rm3<u#&flf$(ICL|4i|l|9FD2kuC@xdNN}ypdQT@CZ
zS&bR*mBu)mf;=}Q@U6>P+-luPj!oGp#BRw}b4l8Q6L@F>m$q;~ydNhfj+GDaU5c&>
zFwRk5sz9qK=rG<IC^D&>GG2lM4YZc80%udm{5cmzf&n~_UOl1CZrAayVgzR$&0&BI
z)|tD%o4Lhd?Px#~?xmL7P8_UCq`p34UR#(e+g%ykSB$;<Q}i!PYm1P!^pg`FtzTVA
z>sJA>sOT#2>eSOVG-(mVo1eG#qwS?LTXu92n{t~WK1I_*<<6pNVF9TFul_Jdr|GWp
zR_<m|!anPr3xbte@+DFsA!=-tDyHTn?LUX)O-6HTis5L4Rp4_$A65efL2ZkQpdz^~
zM^*bh>s8(-#Yu}ihSHgxCKpA#7^_jNJS=6FvlUU*9KrtzXbR2=T9TjgU1$OO&7?~}
zNw@gdL`)}buFBaQoKz=5k&&ucKr|VJe8LopKrn#dK%RbtLQiCfNQY*Qa4r8|5|*-M
zC?;Zm2FGLWZMr8we4c)kTUG;|EV)Es*7Hv8Yp!{788wtTr3C>779?;9{(DhZutk$a
zQ)5A@YxSd3T$uy2u%cy~@;WfJKgW2{jViB!{JZ4m5yFg&Sz*owJUK@6<S0FLZf@R?
zazG4~(az!N(*yxPcsxqlm18!TVyYm<t?IXu!LXA69B!~m#v0yt)IRB~+<{)Mzoi2V
z^A@8j$~;|ykgvly+j&!QBotOJs?yBJs{Rtbw_G19GtqQM6FbJ#che~H0n1KKqVXDn
z;hyUzwt2Sbei@VpQ;$0!7Izydi<A$QNq|yC)G5u*^<FuU2_>GTvSKN-qQqo!bS4Xv
zC38r_@E#m}%tI>j=|(WPB<3@%p&{d7=rEn3G(+X>UeF?(skB8U#=cM!%=3epLp{^J
zBz@Lf*q1zyV$2O;Nu|xcP~)_>unrjdj>=l<E_4<W%_cX?F!%)y9)epo?8il8DD-eF
zMQb*88Y2&+%EEYReR<(NbKYT^tt}oZ8&6W1Q68<KV#yG)1tyy<bYvwu9R;qFEo{}a
z7%sa#q;wjqj)U7;52=V;gN_5&{SMMf*J0y}M+gJj65Ds16d&oi?BdQv1bOuN4qI-q
z-S~^Zj-kB<Gab30Erh${eyJJHSli*)aFf1&4_b5=?nB*k@~*Xfq_+>nA8lF(P+TES
zm!i3D4Mll%(S{+4%-SluLj^|B4t2^EdcaYR!Jvs{k!Cz56B!HZ1gGCQyTlPxnzWM}
zpe<gZ6n7cc+)F*NColiXh`edME3%n})|Enx4`4Bh!AGOQOu4F2$Y=AkmBk-#6m?En
z1d9Pz{8&W7fF=;62JuTg*3s*#H<ZFkQ6GW@%w04^I)|MFl;9z*%Sn<+$0Odz>1{dE
zE6Ob)Bq{BWqsTCMk+Ln94Yf_>^fP&t(MkAc8#mS2iZoNoNeM-Q5tSR^G?m(RX&+NR
z{TB1-OJrr_rov6}6i@COqhL!!p8O%GiV)amD`%4Ux1!&TD~N^pJ`q)YV+;}i7;WG!
z1SY<3ELjy1ks`pECKO11W!qL}KB+#b=s2J#OC;GQ1U+iyvPfADx)?F)pFoF_nhhUC
zEXjmwBt;S>ZL#8in#dB_c|1<;2Mv?u+o<h*qF2;RSyLA7IyoBBG=k3-oAFyr#ktyK
zb#%e)<dOpDI6>+2X4sho6py!1i+wqKEC|x=RsdohHAB*kW3pfKIdc&1;@CG)i`)e&
z34Q0OFhzGxhe(Y|_Wy^ncMQ%nh}K18+qP|fv2A-|8((Z=VkZ;Zp4j%pw(U%CW}mwE
zRPA$X?_Ia6-mdpouj>BMYxSxJtOtxzNln?j6)&UGd07S~h^rUW!O?nLu*7SBO==YM
zS~(oZ7q>OZw8|M@XAYMaMamILY>Jc)wrDg(F6v$-x(=i8J7Gs+&eWI?3@lXs9Q%>2
z3iHQhGcb`IXdhh&E~B&~<H~5%9H8+CXa$q*fc9(ZfC(~-3T{_uWZqK+g9m(LIhw}<
z>9KEOb}W(`s^R$UosBq~m)r%eXx5Jrn-MYOz1BtI=tt2~4eimWa6~|;Rx&dDQ%&pH
zd3a0FkQ{wmt;t3yDmQJ#+%)#|_}Lv!-X%s^@mwvI4lWgf8~v`_m}xdM+jFK!L=z>d
zlH^8^u|~9``~E_Ajgi=+j-ox6dNDibY8Eien;wI?fDkt*6yld|p|MQs8p`&Oa(mKj
zsNJ>z^m44Sj%;R#Q1pB6P)O}TK$G;k13Qh49$N9vHdIZ;F_)-dP9Cx>M&freDarAd
z#sP5bk}X#%mnuAvxZw2*Gk*&dLe{p|$YQn_8B4ogb)8AEvPu>k*9GmgzPR*Oz9&2H
zOTIGQVRT|NvLAt{tA^tBt<359RfHc$+$_}(qQeDsTC5b%0EEe`WVJQYm~5dIPNXqA
z05AGjeN&v;_Ou88{`BsLfhWc<(3-};S6b>~n~6ni=RUJO=R+sLQRcVz5U+~g)X2xN
z5+daV%CL@DzamVpbE;V)=(wb+<9l|^D25Q_m{yaD$1M|0ysc{~!aKPwDz$rT1vMHG
zlK89N#>jc|VvQ;bNt0tV?i}bt+YS&(33@Zu$yyM9uV1-{EW$-{;RuZaE=-|IxMk%l
zw`Bk?c8h(9Xyn(SGPn7JNFTGg&ueCP(SWhS06r*$jhQ0xHXm+Z{G2X+exWll;nuOb
zU@s8_Cq9*&bpbzq9_+t+9}}EW+a@HoG9Mc*W25LUg@RinIXZpTP$qc*=7?~30~s=O
zarh-^9R#C{?Sl;peeo+zLHPW(b8MZaDGaLhEM--a<$o=AgVg<FR7?cd$8!Y47$aL~
z_lm3gAMgn4N#x-&8y<pQVc(+Rta@XS{842X&P`KL?Vnw7oGbRmS>97GQ#<n!O@?BB
z05H&XDByt)c?=rHQB7t+3VddeVD+$@q(3j-Ky6G2;sG35SI&8JQTSP5Mn4&0BNA{)
zj>tyx(4dTBav3c(JsEA6n_8R>D@o7ei(=?TlPnYQSl7V<!}#IF-l+0yKIAuKAJt(v
zQ#hp!V?sp^H7)A^HT3fwsH28FmWWr21JlQ5{rAU1C`-Qbog;Qd$y9SXgCzKda)?*N
zcWZLssA`^*D;rF)pn5V=Vc>mA?!R+tNxVz`sfLc_ZPtKt%PIm2sHg1i9{u3jNIt7+
zjK>D;UpMb58rw}mD=($m|G_9nTiDI*ZhD@g*6csLucCA&!>TNUo@WnN>*9>kk24gZ
zL@s3R*4%$`L7ZV10Exb1s@oD}%eFjQ5tIKkaI>O<+C{mZuo)T{O0F>ncs-{(3hI)Q
zMc`@;PtoaFrAz}>iQ5ZGY&0=r@jm{bE6D2D>j<Z$E9TG!J59=mCq7{Z5|Ik}P8>qC
z>9B%Xozov^m+ZW%WY>DtHm(Lin{B8%c!^gJf6>c|Y@O2cEoccpM|(GgO%9`(2`#MB
zNCVWbyo=-hb>}#ChGckFesaPtdC!N-aHBS<DzYi{SF_{C2L44*&zi+IH0n#)kX_5m
z=n?#j5Xx+%f9RAs?)ETtm4W*gp>u0&WQMcwwSuGgz^Sq*tgh50sNR1`b<2m8d+(mE
zkUj2Rl3fY<vc#+rJCAlAX-E~oHAw+#xZrB9H%tZnR)R>s7G`7!_^XY-qh(HcTdj~D
zM6f$>r*>y~*Rp;W%=lxH&g4SNDkoZ?NY~bYb!k2dcQu8a>CQj_qHG^k8N=P1;h;(m
z=?l}GmNj)5D~b%Kfk*AJQm7f3m5QI~2TOY-z+efKBU)&mYG{=tC?aOx3{xkuf-K`;
zJ4<3A{wI1)h*p|hs#5ct=oHe=xn;S`d7Y7^t0zu}S9{j@+8_h*nDP5%qO>WT$4LI`
zxmuV7dO8G}etWD2Wg+y2KjPrm+6<w;!(~@g?5YdC{Mm=`#J}~p)v9a!ZzV8&$EtzT
z>G1ohb&;h@bs5Hbf1<NBLvmBmDNN|`wbD3l)eOqiAYO9wCGal<k;_WM^ONvj-p>c_
zZ>wt?<&7&%!Qg)eXpMod489e)nJ#9v_mWDJ%^P#ib!7E3O!Y^FJf-m0kOlmex2~}g
z006$A!fW8NXsz+z?aOUKsQ>cUlGsM`uRR7-Z+9zFsBu^HA;T<KMQ(`gAk=$AMG!Hm
zX{6x0#3>1I$yaL2HiKwr{K1Ts^m(V_>??i_)EtJv>yRW@rymU{h%}mnZG`Fr_q|~U
z$*(C9tVKWpNjP7<3!+$wL0Z@ZMDBi{nZsPkS9Z#Hsy;37q=d`i2qQ&10$RN$aojdE
zc{HG}zK0kJSh#WqOlfs~ywJg;*YkFQ4d!StNh1eEJDV8oH=T)=^L<~!raNc2zuz>o
z)NTc^6SzxZi>(PH(6^?Rlg``X!n*q|OVU%Vz;n1Dlu3ib|7}fqlB_>e#~|h=MqCuI
zj=vsiJN+8F$XtX%IphYp)^^$vJ?1zk)N<%=4nlp0ie_Crb+`4|AS66sVhlI0?Fb>~
z&Z|9O?ZH>h^~G9*y$5DxGfbtIj}TVLLp0@9)ec=I!Bizxhxpn<t}Gi*mZu$l)QYZm
zP|vL{zWeIvc7J^8w&MMhM`{!xnJ!nP&avIBckTEocW(dU!3G+W=MF29+A=2v3JThN
zH2IsSFRr7l-ViOo)=)2tbRe7|qQ`v(>FWv6>++<+OaszokP@V1o@(t14T0MzOC{I&
zPps)R7>!bpA9w9l$}y>HLQ8V_2!^BbZNE(77EzWsD#ti9?ULM)f~|<{YK-+6Ad(So
zInu>IBB-XO-UnaroQk9$=(_6{1Le*fU%eTliU(RO&Gh4aSHs=Zr%`Q|hwjeVM;dUq
z1ES26S>0F<826Dr1?2h$|KiOWYKI0>i4A~9ShT~_$yOx>fn_ATLIAQ9)64={x$~fk
zLtntG&2QG--fP#aqGhPKbeAffN>n!YDBV*16-J45d)+;4X-({j%!a99di+}o_NL1g
zMAGZ%5D!^pEG;jHo-1@ycLnD*d)Su1%p6z!DI5Vcze>4)nke!(*%?<|FWf-Poe>mB
zp?j}ow=i##+ycH8t<LI0(VylNfD5ygV!Iq?+k11ISuLGIG6htNm)DH%Q)Eez7r&Ro
z=D)g*FfUx9K3ZeC6za8`8^BrQi=$utgstu(SyNIgc3g{gZKiE)pD~_40&>*F&3}KU
z#jrww6&yggJx~8`=idftgs_|5zMoLt-+9A1k~2w@srMh^2KP%{EL1OfZDz?Y1JCdc
zUPx?D-{-AS;(LLv$}7f0G7v^TyxhEUVzQ4#S&Jb4L%086$^3OYk53VbuuT+Md0<1L
zyWOM(NsmO6a@Ha{z`7$J1<jQbtV2z6u3nRbaRj?Sk*m`z(?{Sf!t?&Sj#g7Eu^h_K
z@OokWxKLMjf-0%!IvKHVP&9Cr%HxdJ>gODBy=MlSVryoI;QFubmEV3!FWFZHYXZY`
zo)NGpInMihm5o5}Q;9X(n$!;P30_nQrHh&og~6KIyO_Bn)YQaO{wh5rt!^1-O|MWW
zpFM$qi@((ygRR@%xJ6;1&s{_aDs@Se?vF8LOT#K1Uz6$T4lN)be<hBeAy-seFVb{Y
zFauUn)VlQMr`=CW>?w2$>>@g^ylr@O>vX03gcUjf(ogS7izUkzVyoQAYZwehY(}1;
ztt#zN`98$?oW#G~O%E2R9`qWd+TN>>9FD5JwkG6N7^TmMm_Ld5;G6h$fJv!_G7rOA
zoBOH1jcE;|(=;C48S-odU+1gOy*ITKwuQ^L__tlK9a58<(CXjU-R%WWPxApK)fJ6r
zb5l3Hmbdudc|pw$g4P1IR{zRG#49B$%Qv(;UGPdGeedT#J#k>3`re)@uT=8b5saXf
za_P5f@$Agz0jCHo;Xip|n9o6XK#oR=uibG==6cD7*vS3n#rDEnj+U+}g=0%RwzhN5
zfwUP+_T_!hD7>I$!*5xCX%BrXgR`f>|DI%Af#-8J7cq9ZVE1-LU<++yd2SDMnkdyl
zPWAqt-wy@I%!N9gYa`6ZOI@zgI2N1JqQoU%I1yD5cHg%_>-%hG%<;FDtyrq&>d8&`
z^rx8z+17)o$0fwlrtGK3LoTL0T{S9djiO@Ih2f8sgSJgTZY3o(X(i_gZeefHI!;S8
z!0-7DCAPcu?z<2f-ff3p+O$L_k*&c0uH95Vg2y{y;7qS|K8t6X@$s=x2atliNmMhZ
zH~OoU?$3GZh#xsl?<ybV|GFD2y`MJCmX!}A`#OaDak8z!eDgj__~?d?cs-6D0TA=~
zl+lE!K$&UNopVJrbA?;y=&Xz6mj4w*ytAf3^(<$Pe5IzUO0ZQ9xx1z^`TdOyDMNfi
z5{&bTUItYb(w~5B>7^m_Zr#Gr;nw234QBi~_tPC>)SC{ud18lJRe=APJEnS9)6hZN
zWROD?%j^%gze7+<De5lsAjBe%?G3O+0<vbgC4KsZOt*Ng=9k~a0+Ul>r`^Cx+QlCX
zifA6_p`Wbhr*0AJy9Tswt54N0Gj;JJarMX1-}>jQ2oM&KWu$d3d-HgOj^=*%`(r!N
zN{2CDo<Or}G7kM8Rqw=mN!3+yQ1&WFtvI185~;OhZmIV`;n70-xZ;aK0#m9TUW;Y0
z!Dn@@N?xRfr`Z&lkP-*A_fTb`MM+o}*{_k<d6dt&@Ba&kMeieygZ2-IrH}dF__8?J
zn*0y8>bY7Q4jYmvek)q?IL%a$x~(x(!bu}xl@n1Y8fX;MR`VDT3bjM_G)dY_H8^44
z-RwSl5=r=-zV*XfnN6+&O@ND+U&uvW?dZPA((PVP=SyeEC)mt;d?qZ++O4_@CZzYh
zIus__;}qCOAmP?<a;h{Y<FZr^Isjpkfvo#TbIO>4i62zLt;VX|kW7qxl5=-ZAOVM%
zc7yz5F0dNoFj7=qp`1#%^>wK96t@V4zIw%gDKaR2CUi&#V+3goi=R7VC}Cn4%-1k*
zM$)Q53e-h+cATxY=7zB1F+f_#-U^CY6(eC98Ro=B8l(K&E00c*c)=8NzOmtBdHP&j
zPpGKPQX2o|3xN}z6iwEUd|BKF-=F#(>8k!sy;NSUXSFgt=DC>E4ACw>c^Gj`r`M*x
zNIl5^!GG=usfNJu+lKGrIAA9aUzb;~PwL`tFzn>;1%O)h88t!XOIXJ-7vsKI;xh3C
zApzcj$hD9MM`+svXJK_a$6Bu*wMN?sW$?XNInyV^bx$Mv2h7AH0jE3pBa`E)ZvvTT
z-xR9^EI!<saZi#poZdn?iq50e%;8n38itI52vTu;J+&i67u(%W#*hB-?vJG_i#PN%
zG0Y|yhme@cZzo1pz0cRg)F#$@&Avg&i|E8TMnIin?YqjUNt;f@;at}ne9AoDIBsg8
z!~qI=x(b_i)Jgg?j_rYQO4u2CAk9BKHZS7~=b?1HGMn<uj|~$_QPNk&nnd3k{ZMlq
zJ+nbKRgW65q+l{s6YGsik;o(#1)Wxt8Ie=YnK8IPhbT!6iDm1u;c^7Ead9kJe_MmG
z0sD(72FC%@^N~=&Sw#w9mQ2m+ee-W?GIM%)+syhxh-W`;!8ZBZmZip)@)p4gMpL74
zZYxJh?a@xO%$B=^b9tX~ias4o1~Ql*^e!m(oFwD4LyH;1fC1lOVVdZ!W#R5w?o=4-
zpm^_@72Ky?-=IHjSwA@B#c;@3t^rLI4K;-!AE?O{ZGJQ^3?bQ%NSU0l5?%0+Xw;oY
zeDkw9SPw0dIes~cH$E?`#2BVq_<DzC>4strQNDfAD04RllQk=g-S?AbNPbheT*#nZ
zDltWGmvHZgs+Kx>uzt%1pUp5>8SJOn8NX(h?R>lO5V1|8?;zf-&~Gknea`tfeFPs-
zrBh!DSY~zcd)T@=fBl6r*fin;lMEw~kW)UyZ%T+I!>?cwC6!vKse7{GIKV6Asa8F+
z;)LUT5n)*uvsjX-jM8Wc|Ei$R^Y3kNTR|Z>%n;S3v{i<BW8B3}ubm;KoV`)aFH`Y=
zg&c5qElO#qTX+I^JukC$S;8dcp+x{w0<+t&$@fvoKi<dAU81TY6+YH4v-#lEJ?ji|
z5<rmv42L%pE5gIRviJ2PxQ^1Ex0xAn1RSj!mdTR@wnF}{UOcG47kQVYpIfH$^$9b>
zZ$$~2Q@<nrKuVRF+-?bc;2%CPOF8}g`&?Z^{}d%1E!C;rn#M#F@k^!!US(yMoRwqP
zgZ2F0znah{_G)eZe1#h7xUVdnD=$(#VT8#rJ2Nk`yuC2S0(f{P&5@5(j{q)!s^IE{
z9lJ@NSsg8`MA$a+xcAZPeB(21v`;N3u*8K@ow7{V10`WJBynO`Q?oud7ey+N<QwjJ
z6L|guyVD)`8eZJHLjS&Go4ld|hX)_j++?C!nT-{6OeXnm{kCKt@^=J9P3cN(Dpu}+
z1?jdd=7D_upAa1~z#Z_~Q9HD<ey#|!F}vjZwt<3g`jM^lFz_xZe5GeHsf|g}SZKdg
zfUTe_-%&okkvGai>~T%xWN>Q;?cJVb08w>uWcJL|Cra9LRF+<ur^IZV8_``{h6?^W
z(F=#i*FJZZt;Ci(567xi75Xn7G_u@*UmfL1)!%V0|GidZE2sdem*b;^RWKDI_ORW|
ztYWDL#wAQYJ4lPm&hS5X$E}0e+2hAguP+zfeRS@Av#Yb&-6XY;YNLfFI|R`$qtQgO
zx6_nISDqzV_0Ue=eyjb}zV+<-uDr#H8r{EcdTaC2R@0W($d$VtpiUccjYFW`$;C<k
zrtMBCjM_GYECFJVRlsn<9`_oKb?gLT$mrT}1P`tbn@o#}<Li06rssJe5@Qw${bJbS
zJ#d%Qr|c98js*Q(+dhG%vRBRk$pR`OwLCYO%Wu3-A$XtOa^i`mdu0QyE@(VW+?tpb
z4#M$O$Ef(z(n$zLwMT_w!r?)AtIPueQ5*uMjlr{i_3BG($|)f?*S>|MEB6;}lv>fe
z{colz@<m{VYVPteGqB`fsXeTSY894AM>z7`qP)maw2;D<>J;^N57Vil#*~P_IpNz#
z6>#`Ce6y?tBs*U5?)OftZci$FziPM^rVpw~-lwq5d>T<w3)l!NIQI9!gx`(Pf5y{b
z<BYi4!GeISk$`{@{?~YCCtGvie-Emu(Xn?t;Q9~0>;Cpt?PuEfCg?}8#tpJ*zU*Hz
zcB^Y*F&82~8P_$n(jbzexwqbXJ;RGBRFeo#JmN?i%J;fv*~N~VSI7ihQj2F9^lKr2
z{5T(8_a08q<UoBDHd$*x?sg)p+*h%y2ormQEY3~xBn=t*X5V<I%S4{l9JJ)v1yjyq
z#$uqEvoJ0yRJL?C84^<~r%C4q_2CNzx$Sr6P!tJn*_c$ds3Mk$IP51|Sp|uS{P8$n
zoTyNqS|jYREZd45M{);ovKf^x$#W3EPg3(XFePbi>uTxNgl}raD~WX%D^$PUDJ_a6
z=ri^e?4>4D`t9xP%%bUx+8F#qMaX1Qt>sKTd(kM$9pbR8W*ON8kkA;I<f#u~vS9RS
z#@N7OsB3F4qyP+9;wo>>Sxl+Dx_X13SdGV4s_<?A8D$=`Lhw+$>553?_I>sG%VPH_
zeD1Svj-%EQHzLw*)zW?|!2>Pp=0(#r`v{aVMfN*E_-20|=|u{7sU->^?>6MaHqv);
znS#u$^Of|LK0>36f3$iTFoU*J-94VR#FXrVqS4#uEh*=TYvQ!}_Tu-xJ+6Ytk?(1R
z@im^tSEM==;N^8)T0F(egF4@{@Z$E66RimKW`BS563E)bMn0c>b>W-tRbaZQbG!*Z
zdY<e|C>p;yh}#aG7%+Oeb$%uBEH4|~bM*c^_wZ%UX>RSf*WxCZ=Bk$$P=ZIMpgqR@
zzWEjgny;@sM@w37u!OoP@-bNlzyR??OvY?>*SxQqPM(*SvXkVS5v%xw_R>_S7Uak5
z+Gwz0_1fr>&h!uB#cx2sj8IMnoq{=8h_*fDpekm88*cg$TA`>Eq-W7@fI50t{)ZLS
zlFCV$6GApTa!|~ayXa&8W_cV8pW04T+!8P_jjZWkc(6R_DUT&i+R*uJ^bJE-Nx{u!
z>e4(``(o<tk+XLjZ^^{w;odlE>fHv@h?u<z9Hmp(r#YK~T7?9WG?_5(lq-rQ$?E_M
zZSHdHLd*pW{&kCqqem^1-=bp*C}MZWaVM9&8Vt>STerV(=*8zQAIMbWzaZq7Y}1Qj
zPxctVxKYbLj1SmBRNgTvGi+Hz;>!e1DSmd|qR-Lf$T;@(jGYuF{GuH`w!Tpy?$2WX
zm`}uIy(AkKl?s~VVg*mAUJQj5!jcM=r%k1T8VCH7e<!7m`WrA5)=4C|wPmlTM<anA
zxjaWnpntpOa%}^1(LboxRx)v)zJYocbhCqgxSK?z9_`=$69V$jS{2^5H1ZKg58cmM
z?<(~^-C=LK;vXhKy3fIPLrEpu%ndl^<wGE_bd>U>SbT}%jD`3dlCM@|1A~-*CQ#UL
z*_HYkie4cH2J`f9Td9-rj8f%Qu>?(eCM7ze&-=-TW(VW<X&j5Px9G?`F!QJ3rag1S
z9b-g5%Qh&bZe0J|*lZ3VN2nP0kSYFPnn4ZaxC0KJn}JpJ;hVJi)|p<HXnVn1Vo?z_
z>q&odf8-dy=aUG4na2-jnAdWsT;v6$MOF9i7BUf_Z>3dy@YVDFI-;4e_E-Q7=9t=O
z9DsC=|JfGZ5@JM(qo|eo@zfpr4lSN~Kt}%CAV!K*%V%!cYNY(TLx)f=m2DoL66qk6
zaLhs@ZH!*00<JZ)Kr$zq;R$0iQxK1!y3oPN{U$vOyyX#ZbYgC)w9%9|9G7mvV7{@@
zEdO32!Csn>mN;w>utCx}6y~@r%6<MD35^T0IFmC!z(ey^EZ6|$M1DYx4;h=3K+gm7
z_Dk8$R<>eIvwlo1q{p<gRBl@&jJVt(Zsb*3E<BbLN`+Jy4LCS?w@+}j)<&$r`BbTg
zxLb}PYOvd$Uez)w(h}%^4Cg3F$2s~UJ^F&l%8IwJW`Y|&n8s-M@*Di6im4OaNaG@P
zHE}rqzzp3qh@k4|w?V+S!WXl#@{DG0L(8!MyPi+1OX2}ZC8ZIu30`X!@Z3Mw^HwxJ
ze>^a!NDWTY0`}UJsvERS9~smeod>VXK%kT0pvn6*tA*6|-{nhVoO&;pd!J-505;}9
z&UodvNr(AoDm?b~&xHs93ti<?`_bINaX3CwvL1d-il_~GE;MG;iJs2;5wJ}!|C569
zo$@xU?sSrl{t#Q)rX6YpUh$q0MwK95#gKjO(zzV)izfeA3S*;6^<|KyARd}e05*<i
z%RKDdVrLj?_2V<u5k^{MAdjTO*!Z5yNxPWHg(;yiL-?nbRpJl2?qBTm`7P5X8yvW7
zIc$5YIvsMwWbdhh>12E2<ONi9Eh1l#wo*+S*DI$k?@k`=vU?kS$`DVLYethHBZi+b
z#E0pq68ULjo{YcaAQP4YMVBzvGX+maMmB+@jtI`HT$K{Kv#A4W=AW|HNwL|9iw$gU
zBE8*H(!k!#<P!amfaiDV`|mWcCfN#}e+^r&6D~d`oRauNb}YMz^z#9h73_3?Q1smS
z1Y6Ga6I>B$SZyxyBk=mTjYQT$2m6=t$d3=#`E~yjIh6+oQb;MkgIrKaHCaE>l{k1V
zp<p1D*T~!57*c7gk1-_=9V}U*r9Ah9jk$VuOPm8RG?bIEa@g-^lu)D|GaXTCi@0ac
z1#9$%xw6<dlq9lL-2@x6fv#K{rlOEHyWHa;c%~9cIcbU7sHQbKH+61TMM|TR*Xxp~
zPPibcdO>9AGg>~(^NF@@wWDdl3@<47c7qO__qG4|VIVyYCul)T2<}^yS_G1WChhDA
zO!BhoJ{K-safFU>f?X(=E7juD%51rkn9(${My0m4`W<bumq<D3h%=|SpXq!Hnb=X1
zSQyM~W}*jxVM`NUV(`Z+IegF*2WQ+{I@1ViWx1}}r6MCUS1@7r*Xn_A?qg~i6Rp0R
zOL$oGx1dhkchbWhtC<(C%;5qBqc}nq_BwsoK0j@W=J3&XNh7dVySGGbw>-A(CWayg
zT&FebTW-7mGFJ@Vgw7||!TmiwIs_M-W<X+};NtX%UF)-L;bR{X+U8prN3_R99YI#;
zas&hA3WH7={*L7z!Ed79GCtQz?Zjv7^&8KlW@SKw{g+-KWTwgwO-|+>&@Q`JzQ^wZ
zJWC3?y~Liy3yj>@M~kIMX8N-6T2S(H+x6y>TYy=0jvkaGvTOr5uJccuM}ExUCb<6I
zN(e`Kh;F+6UV4atp^}R8$b+fd?IB7_UH%hV*pS-GGZiRv)(g#pUi(k*|0v<$K>lOM
z<}1to@1Or?`mZQ!X6E*eYO2c2|A(?>Cs(fR?gbA53UT_61o^+G|Ga93J}}^4>jmUL
zKGy%DF#La4b#-wv@-TO?wy-vLVRG|wV={4bbNN4^4FA8O+#Rf)-OY_$-GA7ao4Sz*
zkO0kH;r?@BN^f3mzx6M+<v&P1!~f6t|6OPaWmX69f9}K&a9}#{-{f*-47qT_X*USv
z&;5-z-atQdZV6CiGzqlgy7oF5lLVAxmUUS~DYX6&XflFZ9z=_jxTZ?si*Q|Uxy-Gj
z=!AtmTJobmXfodSW=d`3EtnX=2C`KBKYlChK#Ab0uRW&vRfrVCRRWoqQ5_;BiV40!
zv6PX#Mim!yPS|!aBx5@jJ`{RBb8}sJ7&l})Dd}LWS$}i3oJO|zDm0`ScDu(Er9D`v
zpW_I<c+I%K!ktZepwwL0e`ssPNb=c(Nu4kF!|UEgPmLO@yZ0SI|K}sj&=I_5fC2#l
zqW;%hMkg0XOIIc*yZ`RUS~Pte*QHUu`M)sKk}CU938W*l7St8gtct`?D9>`eDO+N@
zM|yDTE;tobhy0$i*Pt`Hm}*>T;F=y@r!TwGo-B=(BrFmNhb+cDrFF3ME}X^|FBtG5
zcsZV*b+e~yMwoKK5TIz~6qS6Oa_)LF(+B%GkbzX^PAH>JqEKLp8OCd#$164N;^z`X
zau5$DS+5KsT_9-ms3}o83(+OAguCqd14G^6p(iYu2qyO|Xei>W;2uW}91%322}%n*
zF6asU<|z?qdPP<UvkHL;F4(CC>PmH}u-2+6+TBHiir>wqUcpN25D(;umh)CwQUufN
zPOcpA4*<+MyTAAMjWc&(qC@U^arWk>7oC3webMyFzk(<kTwS58M@9>Y=mLstBYArx
zlUN~OVzD#YqY|{@&_qOrPI0|JB2*1X6wl#giL^lRLU?4gw;EYEg$uladJE|eX(X-6
z)Ctrg9M4;uVUFp~dR?jf(RT^3o%TA(wqCV+5SL;d3slSD+;{BZCytq)?lhGuNyx*F
zN6gp9$R{~pj`r8QCri;{q{x%-h}`%-UgfB4+p!&nFc4BJ(wnf$uUGx!5khn<P0KVs
zb2XTu8E`@aSUiVnLckzgk~qW@OgjKRRY_}$1<B+=Y>9Cd%@tnPbx-0?+tUmCK3*t?
zP^*?!6DFPwt0|Rb;p0u+had50XRS3I=HvCs6kchAkeyhQ)w>!C2zAhPM!ly9znRz5
z3|fA{1^ko3On4_Y44O3$VH29jPwe}%S;p6CO=qX^!68XY3z$}?t)|YT9|BhPi<TQ@
zF*N_poDZ(F*LicF@Wld=D@8x`KPTq1%unE7g$c~R&P=`yU5dn+j2=qLd%d5GS@>z5
zB;T;jY07>_$W4T;erh$HetT77)HQ@Li6M`k;IO|tXR{NdE#1Nh<O!#F5#<h{bMM?&
zHA<}tRi;H(09Rksl@9oJF{I5xj-QQ(`cx|qXHeYWWB6gBe#5_2<Ue}m2jKbqw;^+K
zQ4sjQ9=t!pa8u$4g`*6P805@2X2S^1eTw>JhBDm`|CD#ojPLnE{L}C;xJ_ZB>dD!O
zYa@b8*)94qxmo-hZ(6&bL)dlUUd&%Z=fa)PC4q<4B5am(oT;8lk91MVMT`Vn%bTjE
zV+>mV4VBpLsiJBhc$EZ;jX_L1EoqZA+O}GL#oYV}iC^(&dUG6+%R0iiS*(bFZcBsd
z0Z#we+QEA-N^+5erC?3_cz<LV9-Cf-!EWUftzt&g;)gcb5vhhr_>g{Dfb(2fFi@dp
zmnN_gV&@zBvTmSZX@BXc?>D7-dq1n<r}gX^a?WD^-p!zyY54ZZh1VO6vaqXh0|`gR
zq$S;tXGA^FV`blxuSt;#!6!56RPQqpsgw{=WIGI>AChHn2l}|#5g!d;Xq1LMJg!fh
z+e^`2EAYz%E%o*4n(lv6HK6D1uC~**G~8`#IPO$HZ*8UgT9o~2IF8BELt(a{U~fCu
zHd)newbVA45s?oPq0o1d1J{NeFC9=@5WIkeC~}$-%p&int%J5q_z76I_3D*s^%)`@
zFQa7X24&e(+Cr`TyCWy*KEoiJ8*H8)Q?tJV+5<Fy7{3fumFm)DZ!b75*L)2KH2Ari
zlDNAkpLCEp$`Gj_b7xKtSromwEaC(IfFF-_C0^nJw{2@9@3b*YdohOHIDR1KkKqLP
zVhB{<I?yxu)!aJJVs+Kt#_o?{+G#2FCGe;+WRhf-*?;;;>?F?W^U}t?xd6HdKU+GQ
zC=uB?xr>B>MJY*L=E|vR%EhxkhZ1=0nVa3(v+CmE8QnRu`mH3A;~}Swo%0oXD#x`r
zJC=*-Z32?i?^J)v77A0?%hTYmizmsUQ>suUaZzPZxk{0_t5Rr%OQgi7k8R}^KF=(Z
zffotG(;Uf--WPw+t-q#T)tYKFd(=QKbQH!=$=xs>C=oVGQNpBg;Oe~qhK|!u?+GoU
z%7{%09eVm)X!jCSYxC;ix`zg~tF`QXx_<LdFR1%{+*TGUJZasWZke_gu8m_1B{Q0X
z{T;6HH9ecASpKfhBKBYBY^}V|M10Tp7I+E}ls~@OuUiH??)}dhsI*lmPv~C;B0>4D
zGtfUaz1jc7rcc$fcf{jG`I@P7ip;t!MEof$P%+-3nzg{i2L_WQt5K($X)t*0-tc1Q
zNK^TG!)@wg1XG-T9T7@63wYQEj%*v2N$?%&9^z**p)1T7_4>O%HwJt`cgW%3p2W^t
zh_NN^6JuGsXq<{mFHvggNS0dt8cU(2BG%r7BpJdhMLmcfF5YEL7Uwo*>l6oIwC4WU
zxIw#@z%Y~G4uw~M8%B|$t{{uyFb(~T)UK78kfG27rl}IKHY&RR=p&2;kD{UeQA<ms
zraa3H1Ib)&-51Wi5;AY6{2yHUU&H^wrN`#OG-iffvP!qgt%@;p>^Ag-Jp84;jOnu0
zBq@-t$UR?$@W-cS*?FR<IuiG7vEpU(Tl!Xl8wd{<lfgLV1;#oRzGp?ylW))>d7#46
zp1bJ>dsC`aw03)b4Mp)%l-;?^I{AyB##EJ*p0I4dnA4o?XmWHQ?)*$)<_~Dcg8EJL
z2FI*O)7Bq`<cu3$2Ca+~rRu3SbohosrRoo_rGU>N)fvt9g#q9Cz*ubh^1=$W6qr?*
z`zDE9P#vBO#c_NW52Dq!J7}+qjdZ1uJ&JOS(HBomKu6YeWqSYV!L*fez@SH0TW_r+
zRX)_>a_gh_r!_*Z+nUYV3$6|uQbicqD3PjBZ;%@P!t8=GPiHn1!~mZFKce(s!+FY1
z5@w7y*&|gya^pNT87<4z@_>hDuGf-J%d8Ss=P#Jl%R-YyMeVdUd>Q_tmw)7Wk}Q*S
zI!$^y?v_NF<|fu99={l>1JRQ(F1xpxK2`1gLk3xF+FOF68d8@^bwoAHXLZhB2&gKF
zhf&3qW+sSav<Vy2gu<>(P^MyY?S)NczE)V+Xu46DLCYC~yFs7ENj9Xms~)cOlhFuX
z6x<!tN~^C^b_KrRkQ1(?oD{evzySmdx07HYvIcwHldwDU2_2udOuMg_pH&7((o89`
zCu>m0>Z0ad;fNHhKGODt@gmHM*jO%ZLIe(adRAOxEq2YAQ#{B!1;D~UaS%~HLNDO0
zUh7@8<ATXtG>o%#@r}bsF?bZ8i7+1vTs9m_qBJz%62>HuRskxXy4E{zqR0RdU3kJ7
z+vc*dYzfo=X24Cf<kB13Wi^=-LY0A84sJ!BVgRmzEU7>cg);pNeCf1cNB&@IdUXDi
zQCLGHQ$idHmW56pSSg^VU2Sz6xz!_~M~%~S0&6+EhWwAH&g-qFNVGEz;)~I&k%FSc
z5r*2@tJcFqlB*~Jw<>+&y>(>@^XA-rYb+SS5>?P|SPmbo;1T|A21=cI;Dv1=X3XZ+
zkUpyl;zQCg>371z?cujR@a&1o;_7xnSUu1F(HFStuEq`ZV-U(Kq3<|p{s#KzX8W4N
z##!YKL^H<v@L)T}q6CpHoe!pk@cZo0a7Am3F6s$4d9#~uXbZ_U>i%klIT*vMC(|-P
z2mti_{VN_)@Grkx-%YE=w}gL6u2Hq<_&*nW$%Xck()Qznjst>l8>c|_6L)zktd-~G
zW?t#36k8C2{w>NOd&AMZT(qY=Xa|QJp2Quq9T6nNVhk@|D@0GakY+44s4or=vo=jV
zY`7Vfp?*C%7%2!wwkwUGK~j=ElvkF#Z9|cN*bPD=i@;J3tT!J)LoT+bOMNKQa{4&2
zN2rH&K9Cf)jd$ilJ+g13eaJFbV?wX#+t^{(J`i@q(TdLGk3uNQYf(0+f|RwpEmB)c
zpa!LtjGeOFtA%sr-d1^1gP&riyco%-=oAG9H>6&YYkp3Sx|xrr$#W!_5`Mfb(iLh3
zbD9RIE1^Yi@ev_KX%^IRv&<cNx$>&4*B}pj{8eQ2WQRRRunLcN&e5KA{xD0F=2_+g
z-;P!3)G_PjN=V|3mLzXk&kY?6KC$TEm%)!6N-lyV%d(Qnm?3{@;;S0?#o@0YcvE4+
zq52)&O!U*Ou_-v;7nk0KHmT*R1`E>F0?UAaY=c-0Jlo7*|CT{>q&{7$mbM)+sWC#^
z!!h;-zJMS(tNOr<SQGIy+LuY<B?w?J*wYzIVax=1w29E)7TlckRu^rK*F2_+6TQWB
zY$d0Plu(XI7R}z@^*R#O+PJbKyP-5n<&7XmssAp~GxdJ#q--mZ#xP_h*Y6MH|D2Sr
zbU%r1{=F)F!2WCXA5#-X7jx(Tk?ftMkX*<DB7XA`-JzG(w+j=&OF?R^+$SzFV1GzX
z!uBg(^!4fBI<Kwj{qg<J)A55AiHFQ>I14{Y1c_6hBf=ug4RXM){vB-4RVd1@M-3JN
z>aHh|12D#c`g_#4B2=Y75!4|R7-9ngMuCw8dEzQHIjLa*@GoQ!!FVto3gtMrs%g~X
zx8JA{oVLCm#QGCg8LAuMhAC7*vQ8kdXhr)Q;*_;3C*`=}Hb`7Y+of_cPg7vRtf3gI
z!Bu?$al$8}^_>1zB-{&;kF;;?G!%Z}2sRSiNMFK3M0lB}1hEd+jdi0@3E6d0>wzW*
zx-o0Z^#wqM)eiaiwTG&y0qF+jE=z`#xHi1a(w^28H9ALf?yG|iol;tb^UtDv(%aps
z#3Px-E{?B^0_x&%QFQhr9blX1r2XFnB#f8%otZRUv#n63tCtIQm_YhKL@=5x+oeCX
zoaHEUo#4VSkP^9t`F9hG&mvtm6t*?X;#&?ZQvLx$I+wAXm4S^%-LT9BzuT`|nIQQ+
z%klyoO|h<2OA@rw1m&UQo<;;{7fs76(nt2ftC#$1EZ-z8$Io>SpJ<npBAz~Uq>;d&
z9rlTEI@CSniB6S!lN}jZs=B5g^4Od7-zoO1wV!hj(3$BKkbV8>0+#xNJ_Bm}|1W?_
zFJ?$m(Z4PX9wi6}?tjss_#b70T6FDQ@p#ex6*fO*>=Bsk4*pzg3~ygzdW^tgA~5x>
zDQp=iAd(m_hj4H*Q`H)Lzg#R&N@w8`+&B74<5c`rsapDUv%Ni22_Z<NClaFCv&l{T
zXMz#H>%S!M7dx|-7I!#BfePFu`&Q@-K;8||d!P^??WQ3!RhJ&mDCGeDia`evtrp=a
zV<>@7YJyadw&)jkiEehPuYkzDLKhXh%drcV8t{_5Pa#umMN(@-AeTKo;f-TQV`DqX
z=79s}Dl@~kum!C(#ux(_ht4*Fgo2|a5Tn8oDXRt|zH4ne?VmNIoWTBK9N>@}(8&uU
zctl4tD{q@=<Pi`O*m7v2CV2i?IuEO)S*CiXZhvByYfpwEWY1w3YDaVgFYB+dUv~b@
zYdM+x<VaGlKSznX6^xi1Bt-CbAXCRmfarH~?D0OHAMZ0b{)_u+aBQny$iC|rYJ1UL
zFvgg5D@;e9%SfS<Ca%0_D;=W6UifdZX_ENGWcS6ih2>c~`ZL@t3Vw?uj@6O}l$(sV
z54o48_=*e%kEtmfMUKYNj6x;aN$y?kz29$HgKIx~@gM|Qj(rYTfnxEqeD~IFh)M=;
zx7+xe9&r6%x858*iR?w46~No@n|HCgqEI-{BA}0F#poWr;`mMX_z)1JKolB@*i6VP
zA5NNGH87tju}$A>#Fwxh6VrJTUA~r6;S^GaHmp6OOSXxm2!Dcv-jZWqFLr#OD}k6~
z^AYLx%(L#LAD~crFn^oNYR^Mgo#!1;?#Nx#<{8o%<=gIkV?Y~N^>yXrxaqa<)$1)3
z%+YDZarh7_to#ZXxs?5W5W4LKWcFs+;teZY5RC2JnM82xgj*AU62c%!KTK0e6J;wA
zmS8keDsfH6yBbHxsb4nn%)%%_>qIy~#p@=uZD$~K({?;LAi&JB!<X>bz_L#?ojAj^
zPjQu7gB`H6Ab^fIr*TXM?K(cI#+&8L!pUQ5EwFB%-~f3@NI)OOuFuHXbhMlBq%$Dh
z#bq&CO5=W<L0a3;p5LZ!G*(m6NbkFoktwkh!vF9fDeBqJv_xe=4Rt3zEiw}BfF<`N
z2PIVwe7CP5)V6SRsO{(hBE>t06fB5`F<M68Mg@7WJG0SfTA4pKX(qu^x;un%ls5Cp
zk!o4lzmg@~H|tFFHZtMRJ+^oi2pKKD`7O$5SNu(++Phbw5pk9+_)_6&<63KG*Q0-0
zB`-E5c%TRY6GAp6AyEhQFiZkB-upQ(F<I&0NZri^d~5V@@O^UCi<lhzWKE%;(VT`O
zKO3{`M-V-BA{#<t1r54C@df3K7k><rEQXAM0H(Cm@IdS`B3@^kue*u_KqvA^V@HA_
zYYQhSTqT!D%PV`@k(?1tVC|{4N2Q+kR@2*HPH37mgxB)0*<X`L9lAvf5j5Ij35Y_~
zg_t!UqMaI_iqSks)lrc|c!u<=9l)03h(TI=fp@FG69=1d-WV&$jLoA00L}PGX-5Nx
zkzguCUtu`imkDF2;?3-l&YlqEGbAHwl3fXHblxCQ(+02&G`BpBfjOrzPM#!+uM?U-
ztA9+(Rk}cnLitpTWw63VBEj%yR3R&~H{jQgWK#I!3>VIY96bNxD34ab9Su#r3YF%<
zmU9Zr(deKhh8V;)g3k=yPj8C3nWE9hC0mB>r4D>KAAp4`lSW5s2r4?Y`x!=u=!S2>
zh)aZnP1xz%cC_7U3#ibHp~r+$v})Nn+>N`gU#}cHpbm5J>!D(FK#oq6fX!ctjUQ!!
zTU{m30Afb>7_XVb^QjYit4ROMUvLeUaf!Xx{_TF?bZ=Bm)GlD&`Bm*TGS7&;G~9se
zyfUOf=2CSI|Ct!EvgL!i_Pc$uuc8gfi4oU^@dM6s&PGnLy(ja%d#?-$SP{~^<?$Fp
znR=jaY5|L4P(w*c?`DBDc@t5zUhcT5nrJL!rerL41_AH=HeoRSH4NF5d5phHH^R&D
zlp2^+X8_o=kZl4yo6pyGZ*Q$AUjpPT=+^l*@C$ycDR}z)SY<ToX07YNvT9TC5zTx)
zBpBTbFI{^kV0mn*Dh#d}?I7^fnDMAIPFAT}kVw6$LL0tTC;<@^@>q80EIE*iN4=`Q
z&@%vi0XSU78GvXQz5LN)Y=k$Fy~(2~)bL<+bKb!gX%^(qQ1+N1qjvR}eN8hl><JZn
zB|7)9$p~ohzF5d{{0J@0EJbe?l^3hI&N|vOSC{+MS(L^Dfk2b!W`F;(Q;(U-#lxW3
zq40%R;2Td_uYE=mX-d3i-)V(eyw>oF^vpQAggw--5xV~4h7uOz6?2;HatRWkghi|F
z9ka2y@K-&9LJ6%})8}nKmmDg$)dO-fUG*->S<+m5ZulW)f~zZIr1lky2L?|qP}P4S
zT;mcI-D`MbNa6yh57#G}*adn`YikR;xVS!T%ei`MT4!MvB*;v+|LWm_?eEA2*zf_x
zsI9)GxTQyF{cX5%PvJk;!GeEhycgoSTS4iQ6+eIdvk7UwK<bW<aVLD&V25uGkKE1;
zUl(6ZLUX?8*Or)6Jvfltd5iK!gYSoL<TE?N579xkdK7J{l=WmKDtO2g-NE>gJM9tv
za6Tnf!Y89>%kfj1SY}hdU1l@(H6tDDl6`-3)&yn7n`H*oG19%&(qL}uqzY;1XXnJ0
zWzbitYZz=aZ0t+V2_4j!E1MX(t2rXY3O-4`vO{+bj~uy#c6_7f9mE@lF;w;mE1n!D
zEr=ABzmyOOT|;n|xGFIvLsZ$^F1g$utA<GSLiHzq5QB7D;a!>-v2T!f|I911RxmO`
zy9J-<O?*sby@z4;dY(0rU<55N66?<_I6;0Q91`6M63EitJhfn0u(;n+&~~RoSJajn
z7=Q6;itc%C{~>;4R_TtrIKTmzF8hgGygPVllo!O*s>nQ}3f_M{oSW8h<04Y_1?hWU
z?mR+;%%=uyT_9hN7!o$!xK*v*^1i{+|0qifVFdpbBh8zvcz;wUIgsR$dZR*6sLuZg
zmc0<_@CqJ=Kgza;-@*2U21>bXV{`YQzOU{&GirIX_1R9Lo*NZZr@wgd9=fh*oE=)Y
zqio2PSQS~*1F_CaVaw@4qN;7*!A(|}r&YzP*{ub?1FS&g!V1-LQL%?@5%zVbT?Z|Q
zpWswYb`A@fgpv)iWN7wTCZjsnkJ_3L+LZ}>y3?k`JAHku`qT+h&HHpVtijWJT}kOY
zY3#la!jE8LGx(I?-g_op>h1{Vw-{WXtPSbR)JKv`_mXWHeZLd)k@B%yPPn-ejGVWx
zs{NEv2vGNUnfc|SwNlu!7n-lD+1K_NDL)YB&06=x*Z&sBG{fGupmC{nr57iidURN^
zs+7754DzA<Zs=c{?VNCN7ZRcJcVqIusmS_<T#Q>|wpox|7?SU@rWpfGQ0$FIA+-)h
zWzBg((cH|eRX+4Nl7CXw=y8kv(yRqP#4B_y@NB&(;by?Zx0$uVVqnRgO87$&cLvZ8
zpTpa$a$NeSr$LM~URR=7<uR@Qr45A>9I^>V<MHe}&16t4j|-K2=#vyGITx+`Iibpr
zUn64qCW6s|z)m^{N1Ua<Qov+D&t%+bfq;aQM2*0Q8cp8ke$Vpte?6W8T2Hk9N`QcH
zNP~j>bKL`RbTW5vb+uz;WnyJwF=sY$a&l!h{U5Y3r}X{)InOVA@8pANQa4o7`ODOC
zuRNM7rk#q%F}_joM%7(8(V#YJt5L|QdH_~@Uo5fVQ9xwYl9Df6vt$@h`jBIWf9!yq
z*S8GnR^wB@SUYu(t=)O<`2F2Kn!npwGwWYt*_-$B9bsB{^%R`cu}o#&=ioQaWicba
z{Mmpy>*YQ93I4C{Z89Dyiv4Sc`35lW07X~DwA~*Jw_9BmGQOlUY$)-ZE#$GRiX~U<
zfnno97M*z=#Z_{_61T%*PG-3+#I^Jk=|R~=lMJ5fiX2|t3>hKfP`XBigIiS%%zf&d
zF}^If)ajB1okng1AeL4EA`1d0{>h>--UG%B35mA1wg`t<A{gM2_aEPX@)7=%USha6
zhnYt9^gz-Jw#UYH{L3(@^}ws=g`4d{#3~fuMbOUHZ7Jkh&U3dwTYnO<Q^4|R88~N1
zM8uE;o^hxIc2z}^6-J-mMBKQEydN^G^jyS}k(OT~;$|<Dee?p$%-K1MbZ2cLl*SIo
z8J_RzvCyRw)wty_SR}6u$P1V<2>1<k$yHJJ`g%3*d133&TTvHNM)TYD7;m<bGlbGN
z3R9UKnm4cM<@)w&MvEcC)Wi#vjYH6NRLk^b>kTJQ3^F8(WZ!?$-AA#lGeJows54r4
z$d?t%6aazCtQDYs0sE9lJhcap4C<k^r(5LjB}C9oc++$;dx76|gX}%{Vk#2Wa^DVb
zg~JQ?InQ9_B?ES8qkgP7Sg%IYKyL6Acw}lYvV2*>lu-Y{EifZ%oEQ7|+ry(L$zD9F
z`{VhB|6RrMvfZ?d{|p&=>XpO7P^`@b>LzfbEO)XgYU2v0=GV4fSch#3k&@(RzwJvG
zyZ<DE{5tRT!lVP9#Kq+Jnb2krCr^vv(L+Fr6%NnMRxNv0?3Q6b@w&vvOzs`WtiF&m
zzNU}ehR~HKKl*3}ZZqO>KLSSBmiJ}sdu|gN<}VL$W`_Rw8L0FV>X|V+9=SoQ76^OO
zwr-rKo&MWvy%X6sg@s+La8JiqzoNA9?wO_b0kfUX+4JlK>fHHasV0Uj%Z~J8fAh4;
z1oqP>45Mg45`hb!zGnD=$BD8%@KBR<?!n3V_Dyrp2|tDW2gA5P#!t>Bo}0%YI#NNz
zp2y%hM6#8HiJ0BK{hmcp;TU1AmOpMVtryX(oz@7N<<06d5wNGAt6Zi<q?OX?0aGHK
zL2;9GKfrTk=f+~)31>$AM*SAgvNp;arogV5y4K>hJmz>k!?C%%$?wxP<C436)6*$9
zYpG|0b#LtrYgEwUe6(;FA-#Y9hDdb*-m_a_u7N*Z6VqQ?(3?<BM3=Ci{laS;0ik^?
zC3<BX*!1)j5-#h9*O_oMUHyG30x=IzOn)@c)@?kICFSc&+3O1)o<#-k6PW_US%ZOw
zMg@WaT=-1Y_=(5|_?h*cp=QvVK?=JVBu8N}d|-E{Z>zPa_DUe@BgKfNL5|w9mJ&g-
z2CtB2nI#ARIeag0V}aEYf*X(l+BgiMc0Z5$8%5>X)Ifg(G*K_=L^Oe)Qy^Q|wce^O
z!yUX@q_+R_kl5>Gu-w|)O=-Cm$(~2I0p^ZW4f&_|to+@<4irgYR~>(uMy~hMu6klU
z>ezzRgh8;$=DlIsgjX-AfjG5eKM(Az?N&Qx^MwK94^p*$TfyxMuD$GWk0@J@hj(q6
z)zxuA#3!kep!41XY<cE3$w7PnG_(TW*xZIiV5zzCSqMNp2D=TTZJ-X<D@0TT#3J@U
z!XKRC*(hh(7W~wan~M-Rm$FwO%Z;Ff*F5`zUKM358L6|UE*Cjc6jSK-ZLJ>#W!$x>
zFWESLuOt6RD_i6_NIe_a2j7`YQ1RS5aJQOZ8;UZ6_!*oPC5wxE5(yQonaaM$<m+t0
zuKkyiLeW=H>T>7=e!{T-Z5CTNM57hMf!xJ5NI|1HXtQRxB7GD(tj=(=@o*&Dp3%|v
zj196uad+AC13~7)SLI{B@s%>{PQ}_cX?f91Py<Rx3C8iD&(hNxq#!&x$?R|uaE7d7
zn}wkpN3ySxS5308OPgB61Ff!C`MH`q;y<qaJ&S+b_$Xk3O^hO~cfGt;HY$F{8l@LO
zuTe;;K4$Nv_C2gi`)vyEZf!I1&0U0WAFB9?=$Pd_t<4MjXPN!?lPLZ{)=8<G>1B3Z
zW9cw3Z(<b6D=bMP_+nQn+cs+o%h%(eQ0-E6$~YmhY%ZsVxf}ob+zN6;F*_0@K_89W
zCc>OqB0)Pc_1t~%vs8cCbFfWOiGyKM)dn3p2txc8=zT*)n?h-wd$+qvsLHeazxX<*
z?%cL$+s3wS+qP}n*|BXqS+Q-~_KNM~i)}kO>ptFxa~{Son5Fbt`e=2u8m(LvciJ+J
zmIgxF2_#YcUjyOB-ow>2j`ZlPl82c(+5+{;)t($P@@Vl&lJGqAeG{+l$Y5;qFBEaG
zWgRPy@FV899Syu<BP%+9%M#OW$MLR9(6Qnqmz4)Q-W(YEroZeK3wntYPUIYyB9l!H
zlcXz(^pSsg@9V*K5p#1G{~4mGd$LNZi^{mjm<f}_=k<({9Px~oYIx}<vlw=Gq0@E+
zJK+;F4m8yn11V#wFt>S$nTn3)`FMB#xa4i|GJy?*Elkk)V;EZO`surb^}H`JWD+eh
zYukuQg_1ucer*;gSeu(P)%#CM-0YKWA(1nWxYd;_yG%gfQd;U^BX?y?doF_?d0`st
z2KVJ_EIY#kjh*_cZzy@D-emL?tX@1oS{R}QFFU4&<h3XWYRpY~e8`=VRu1r9GSc>G
zv3|=#w4_GRoEZU)Di`$ifGb5e@fd&uOF#iH>b(Jo>E*C_3Z{eZ_2F@v(3mPs2XG3s
znp0Lz;*xKa)!kO8=vbcAGsVI9Fy-CTh1BCfyxKVKG;od@gcIRQq#guHyb8qum^cwy
z$3WA-<kXpT!wPJ=@F!UzQ*5K|-=s_nYHc%g<Cz$O%;s%L+6VdbM_rWs18O|eZiykO
zFx3JhUF#clkGDUO6|m9sIH$a_fJu&HwN-I&mCSbh19pu>Cd1$hrfYQ^Y^F##HX0-d
zD<6E1sGf~nn6}UEp|MVw9dorV#Ql3x=%18^U^_;yCSdQtah|(Iu%@GWto|B5NTZZ<
zgQ5<xh0YatSv0gt?P)wAGk5&+wK*;*Z~+AgcXsgz-aZ3*xCIFlerui7RMs?1K}3_x
z-AY_h2HZ~u99Lt7IhF=av3-K#qXz#=e6_>va%2>4f*^s9pNfN5(lH|<n*{;qnYUqD
z(2TvT%%u0DHrs9HI)G|@GHl!Lci5uS_4M?F3W#S9pPt{e){0^IdrQE+A!;-cu!HZb
z(MT^-l?}u|rJIn++zrVEB!O7C`+8DJ;7TCV2V!Hubt=WX!5oqt6@jarsQ4lruYfC5
zU__fnr^2WzS%tx$g|YHVAB(v3-1%3I<P|lf$!Inhui2k3tMnDRgMW-5SY1U|lIpIP
z5Y8Z4hrWEVR@Fpjok8?&Tq(hFwBv2GkOc);HQF+Ws|9@y6trV6a!*27h=?n=25iXK
zL|{;6XOWE@jm=`XA=gKcc<d7#5+B4@7^_6|LjB08laqj2n<M=iUxUf)7e!NSzQ~gV
zo{b)s1r%>VtwL+QzhfpiQoP<itN?3LJJe8yUv`*bMw%}EKCGCM!fA#y4@MvhQV%=@
z3Ku6$w;-^n7cXr;9Qq|Hwl7Wg{PY<@h6A2+=qmpK)2YgyM99Vzh6ITQsAbnU;r6qr
zx*{}nuW%m7yu}7hy>uzHUxcgv_^Wg%97l8*&5{EBcI=O`?Pyw~Vvnc<5j5=lSHo)$
z6PWcpOnng$n+ZgC@GL9q(nDyt0$mP;N({eRcr_KG2y-ozh6WzN0K}8#Hb~)8V^h00
zlS6~OC?3=o8;rLViYXin@dKww;gOn#t=RcC@|+WAIKc>t(TS!k6#u3*Cd{fd;^;bR
zrVUlv5O+zfUo;KE*^mvn(TRA=U$Z-E4lWvdHC7yiM{Aha9NEyMDXYV02sjLtee!B*
zEKn7pJGAW>rlW;cW{2oOoVIS6(0H-bMT;35BuKtkl#k(g0;45R^Nqjb?DF=IV1VI}
z^Z|z<34dbKK0gTM^2q%RPVnA`GpaFey?sW^pJwK~;!Wmhh`rsRhGt!!pC~!R1%e@_
z_%K2HhA!HVS`{7<)HWHaN5q3Ms3o=ooFR>NU%be_ts$g6K9%H{_qlvqMH;c5L=0$&
z<rIk9t%%gc9><ax$RJUdr4<ms`7m=a0dm1=FzKy!fd;0pQ4K?8<o2jPuI>j>jQCg=
z%+XR|W%hW^lW7_be9UYgDr%-kk$5!uG;PB38x6a>My3ee%`Cz0OQHLoA);C#7p%gj
z|B;5WK>u}&d>|%)1Ij`Egomyv1>!K%OfZc@RMzH)&Sg{(Z#P9Pv_GpDIWnSRMGgz`
z!x!7^FT)Fq531;zNy5tMv4Y~ojg`6BH6}ZJ+zQ<0@^X<RGU+>Bnx%|n7oVMQ84Q&m
z@d1l=FJqCUr`o=`Robpp^%C!cAVg)a8Lcg+!PME-PHeSHC1_=?*|vxNFY*+#i?^z#
zh-sDFnn6Y3dvL_-I#!F;kb)^one{xM_rR&Iq+A?jR^&XlBX`0KY-|1bK@Vj4G^kM^
z!$RX#@^SjPRykc5*GZA2yKys;58oQxtU_IN#${{81YcSns`lM9QMfdMAs4PSC8^Rq
zT&i-9Q=F@dt~jfU*cd}XT~{gIgQo_P4A;H82}}*K2~Jz&^C~Sb5q3`lx;c4u(g+Q|
z6rII_)`UWiN$pfJubVv0-7?dy^~j(sVogO{x0o$=<>@u+Uf4^oJ<hhD86IZL=HpEj
z*E`-UIIqfZ=-m2einITlr0(fkBZ;D*Bb96g`mdx&IT|<0Wb3RdLtU{lb%IMF=(6V8
zIF+86D|%ogWkr<2hv+-jWMk8?T0H`A0a)AeD6IH_MLb0EU`xb7gp(^I2s~twmD^tt
zE;RTB4?iXI<kW|pNTqQ`HIVw0j|o0pbgHaB$&nMF&HKR|pS}7eSA_~YG}f3A*j=Fb
zIZ9AM1(T_aG7SmGj!p2-HM|zVn~$hosZFd9YZ`gIQgl4|3rHVVVzNkSD8*XpIv<XM
zRn07UbP&9uipmv**l?F76b;gCP;p9If5UE2M|MC)+csj&5#gA!K0j?=B~y=f)3H^*
z%=Q?9x!6q~_u(G#n(nK!%8M7O@dL+vtLxG<q7;NqW~`99_tJvM{nL6){);m-^4b5L
zAiEl@Ka1QyB0Ilu!4F{s`h5PpSkG8*9UtK)ac&-hekNYv+w_e6*;B6+oV;t?=~wFH
z5}*@rW;;WBd6$QOyK`14>Yx9kOERI?8dui7ac@DDQr#v@*WE#`o-x(7&;q@K0;9S~
zPNni;<A|U;dcU49zI(XSDK9aY;%@bU&K_vTVOE}b!!VeY6)?Qg$hygqS6Iv`M*FZ%
zUWYU0JVl<wZHKF<yGg&mWMwKUZFha_G*36cA;x=~`gZJ~h)mvMmov1ng(6GQZpU;@
zEdUG;*A|B{t?hytbcE~`B#pdy{yuUISGRfPW&Ha3N)Pk}HAA)X8Lo%o^@x%VN9pug
zsh-io4`b0GgRArj*s><c)Mlh@8$#Z21XZEwF8ZA?1*B0VZq(HUAj>8iD(f5K+nRIM
z;YUYJ$t=*oO^Gc7X*&LXC0}bGC#$z9>2G<*Umndi{Y8||PkMNHf)#WdK1MqC#1-*c
z!zDSZ@s<8~W{-nUjDGT!PPcaW_>YxHW_F7ztiQK%L)q#h34;A5!}h{JiKfpMTC{e3
zxE8%zW?EAyb?R4bxpAr1NM-MiOf0i`cOX-(=yuHIczE^t%_&ZWHtg9ZMe4f3h8@=8
zNwzoxI*gGSVpNd)`Z-e8PAnQXo}}qlk>Kb!TtF%DmC;V0HNC0UP`vX8W)F2HUFtSH
zE<MqG14Xg)RkklH({Ejm-zcrW>C#NXRyW!3=yA$N;W%eCx-Qjno+~>c#u7N6lZM1r
zAWxw;08sHFtDqaZ`))#}rIbB}pP|oahxqiLXP=DT<YzYEc3~Lh$tvQfU7cyrv`M^F
zMMIWzG#dd0o|UOdh96_jW{D`>(^xKibu>sHhjF7>?nu~mzSd~|+<GzuoKbq4>BToQ
z&mO1twYo0vT820tdGU7jq-!*Lb(Csq-7rjV`!M%*Z9iHP$uWOld5*n28|h(P9{kHg
zZyQ@TDr)LKJ+34gVkKv?AQ1g=8HcW!tyS8k>&5B?M3+GmP!=IJHWmXCZAt{DI}uiW
z#y`a>2=&O2eS50If5^n-F7WLv*_<tjUsd$Jx$HE&SCELsBU&Blknp72KmL{rQBPue
zUmO7Bg2&V1Z~}V&GZaLj-;0@S#@V+cv*Lq)XEA+y1n$V1WAXZvT~2_~Mrp=Htz3vj
zycda_2~umNBeTvoB=O~oBFO$P8`+<jtDA2BODLsuRe_CZ8Ef^%E-!Gc)*mIb^(d?>
zgh}1(+?-Oe;rO$%CwWeGKh76lfvM`_!X}X`jK~i~jwRLb4}!kJ;V9-2B3gtN*+he=
zR9mp_%cGjeY<r&qgAne1gp{V*oC$Mgsha_vx`z_!E4&e2J~wYJoB7fq-%c1gMsmj=
zTRI>>76oI&=Z<Pq8h0@bx*B~qt3aJZyGc_CqrlE~l>9*vm6pud_A*MmBXti_s`cX0
zrH}`5*nX@bPB}<~e^hc;RgllSC0KVzu&KWRw$q-j{E+Etyo;JBY%L}?$a2CwK_0C*
zjwc7Q`;Y`bZFug?7d1apVPJrl_2ACKZKtmNWO~Sp^(6M|9LYu??gO^Z6gYO<!u#XX
zZT(2+UxoQ18(h@2wo#Y_U$QVF)leMr_mt55mBWVtvnaTax#^D%u#V8J!?M+kuGmSo
zC{Wnv)%sZV&Jn^Sa9$|bqtBuHd$X<Pm8~f}!N!51Qs_-b*ZAD94~A2G`g|<!ppeG2
zNId4#LN<)^{YC$QVj_9neTFN<JMuZRKa#nqgB4~2y?)tTRf236j68Um@9mdG;=6j^
zk_)pSvrb%hv;B8nsQ^ZW)5Y+noh|EqfS0)h6pydEuk|JCKgG%^%qAD${5Ip#cvJpJ
zggI2kp=dIS1yIsDwe&}_sIc-F3|##dcBHVt+VCqh4f7xy>D9FoOPo|>D|<{y!aI#`
zs>jBjM=BtwM~0aFrL=OwJ?82)KOpOzm@bq0A0zm(a1_{(E6&kJksljuS8_?1XnVL8
zenHkP(RELna7A4;v`el8+E!bQ1n+fipnt_sDJilcAsqb};GMhh#$80w>z4_I?d_Yc
zmZSAftxQ|DwUIRA+cnTPBKO*sJ*o5V7n6F1wzoUpJ7kSlzIZlvlId_&8qKs3d7<Q<
zMZXYm>+e8Fu7qCyG940Oo#anj6hroIDC<TI-QNgn|D}<5tegIN%<!>#@ES7^D98x#
zsh8kD<XK-&sN{qBYy~!OD?ZQ^By)Icyy3*p1mp`x_vJns@8#vW8FUW^xvUamWtOnZ
z-dXXUOc*+N=Xi;{6F)|Kbhex2bq4+V@cAx>08*GA+N%gGW4jVoed`PrcazvZKH59h
zCAPg#Tz)>7f@`q4RUMe3b|a8(r?Fu3G9}t75hCR26CVV@=3o||bEo9h0^eo*$#pdd
zuFo~7FkQqDMS8rLjxW|o2MYs<0}Hr%F{w)ypUf}Go-FX{7aS}KCSONZ5H+hXBIw~4
zRK8$XVlwFVn>n%%vI$vzy&&{hOAw6$-Qi9OI-`Q~KrZq?#{i}mF6bX`0J2{0V^{6;
zQYNIa0M9|ec>B?8HduQTtm0kC&R67Yg9Al#KzrEnm?z4I=K(sNYhwspSBpFpnbsY1
zU$J4(C>s7qnektX13Fwnn8dO*1mXdq%iEPC<A3QbSuvLG<X?eLU{u)bE4`kdS2|Jq
z7^i2W(d+&;y~ITk$`)jsOY1P9-NWD8_hBYFp4i~(i}HuFUfhkBsKzf*C*O(0Z6<$1
z%<lS$eb@-J;Cb@$bRby%(4iH$(0e1`&%qux=R*6qnlz^6nEVkzqe+35uMZpA{=D@y
zc{RoRvG|qtncyT1Yl;cRUQ{Qer!7Xw{=zA+(TSC?kn+DJsFl!pwENH{)@`qs3jj;*
zr6+-P*5A}W`tM~}-Q&AEgMO4EoR9JtczC1U_(lVL42xQbQ4gX^zl|(@u=Z;o#L2%l
zx99zv9j#yd0iy#1!G+;S0Q*<|heZb9_G307OsUO2j!V-kVz`XP%f{q8gXVzG3xBDu
zMJZO(!<HQvp3@fTF`V;@3z^po|3&caVFlKBSSK~_pAL0QVE@vbwo-A1dt5NJ4`V(=
zC3j&KQlwbcXBks}d#WHNXfzen-p06rl@x~;(*z36g{$Vi)*Dg&pDR|6tL)m^vq=D1
z0(uSA#coAzD=#Ag!;0_`4H0pgvv+RGDg<t;>$-yd$p9(==mcw|d7$*ipQMZWH>SS;
zizSWMl^~G?2`hm_?$LqJ@oWZ^x!FxBZNtm@f57HreO7bE>j~BmtXA+4!+(9ie+|Mm
zwsaI84<cgfNGMXS9fP9-f?iM*xR^~c)DaxV&1IlMANBFs|07E4q2L&%D0kku!~2UM
z!+Auf@q$8;(Ba=cqLnu0OYNI-=V<l7!)07Te7?a`^45;rYyX@LA7K%5`obYjhcvwN
z#~a^G<u9Jbtjcg8HXf#~BJTC=A;6LA!jvUtgUpT$NEcK|0waIm25y!cW@O^;pM#bE
z(u((7*0Q&)OS+A~uNz#iFMDPAxxpX8Nik^sgr@Z6B~<5A!FhGVDmLCfvLOjmA(!{5
zG}D0^J%AM*m#D#-^cu$+uNj<*bA;On_dO^M3TQ0~2piqjSEhG4>9aGZJ){;4ZAa=7
z@Q5_#oG`X4Pg#4~^k>3{ef)f3)QAxNw&Ci^^Mec1!IV38ULMP=`lMS!_st)(56H^H
z{DSz6Ju}9_bIvdJx3gw#QNZ*5>5$?=x_g0w)6ObqtvLTcO(ypyDCrM{2Zrf4#Q%2O
z-jI!lVe*z=B%m{Ncq2f?q7Lj&={WANFsr`Es@4b6!4q9kSlzA1z2<+5@EK?FGpwz_
zqzY6dvL-Wf8#YSnqRpGA-kk@Gt$ua~X}!fQ2F;!mbbE0)TK==)CML;U2VdFg$Q3%p
zpo9vXIMCMJHCqvLXb3FIjD+&o*s}#fGM9$=-%Tl--eP#khA5{o4dmb02ma>?m$(&=
zg{@De6yr6X>XrvN+{me_5arK#14HN&J>t6gPLFf8{)O`o6TEnulmH^4qX2$qWe}cE
z1<i8|4D?y}&p*;ymXw~2%C0Iwt~YPEN4)XHQ_*gr>RrGAj}x8wHM60Lhm|ATY{vLB
z8xa&PJd-=ZN4jh;w0KQOHYkvQ!VL0J3n7#KErqT%`_7iadaBNWnOE16oZB0#M-kcR
zx~IGoxS3VTec$7lyQT`E7ei5|rPss<K_94E+i<;a0O2KwHe1l>kILmX6m5sqx*ZEQ
zksG#^ouno?wa~vj&F?$?W^fcyI^d%aPT)7*qWC=G25mc%u(}`If+p)k%6>lnE8Ns`
zUy<mIFbCa5xb&$p*K$NyRL})x^sa$$d<yy4laBJHQb6a4G_8nF)-yP`)PIQ6+fzV7
zY5-M8+|gDm$wft8P1R*b?HaX)87+E(R#+3KIQT_S!os?To|q911y3<zIjU?w<X?6T
zdvU$jVD4ss8#-`+6Gxq1nXQTX!1?o5{Aev8T>?CGWKyRf83OpO@_@?TJBieDXpWsG
zrBcFjld5?Q*Y)*sQ)G{snjxs*ApD|$y_`-UfgzntK<~yWp{~(^pTvK|a;Zy0zM(*(
zKJ*eN(gAu#@~!%$Tqj)j_vQDl=W_EmlzFJi_yF;=$sAGj%q<UqMlPjC!Nj6i*cPj)
z0Nwy9CC84>3GJ7#;XP$QIMaVtWK`(VUih};!M?`>k;MW-MP=^VbQSO8<uyMeVTQa~
zc;r(i(mUy1JBI`n_WcaE>;@_TZg>0sZ<J|_>kYmrww_$YbE8-;lm~0UQ@}YxnZkno
zxLPh3^>X`|XR@SkT0f40&?K9rrsKLOJ2%cUAMx+u6GF{HMU?r32ZCG8lv9m^8QBRW
zD}U;hgf)gecJ{c8L33_mwGl6IyD-g>vY{*lp@EjtU>mAFYWSr6nFwyGILC<TZADRE
zcx9z9xL#<i_7bjgDs`Rlc6lsnR)w=NWCr~NiQ#Z?U?sg{BEqf6$6gGJX3%)q*@Grx
z9+7eCxnx39Q9L}-;^10msphfO-cvNFP1oX4!UU$LCY4I2WLLfo;&R9{GZfY3wTTgT
z=NJiyKbf(p*R&Q^`eAL)8G`t)@peH``)GRwpm3!Y$JVf0xVk&~)}YRN$rF{)0r9sp
z?DwxOS6ePu|4=Y4^y?pnDGQIe^<4o3#F!-I!x`c;!A<S!zB?(wP37Y>q_AwU1&a6g
z{HNcD(turc1Qo~>z5P9_7I>oW0mY4M!Pmk3&%NIb0mq%%-EuR&TVS_m2Vvd1I`d(l
z>-IyRyTC&iMEpFIJI^G2V`AXblbG3svrJx7Mf`=IsPf5`^r4O1u_K8{0;F51wW&M9
zPi{lpKr+}z0~b?Xxe17nC=Lk(%O%F-{G0qEhpN`YGz)HBM<Z%or6^}mRy??%;DZfJ
zqWXITuZ*HY+fagfK$#K#*jRLh$KEuS*}DonBuC!u*%KM}x*+#i&lTPcxul}PL@K{R
z+n`?kN9L>dViTA4egmD-MW;gmT{o8IG(ShDB42Srojfnp`YTpENQyPy7W0TcGCi18
zgNJJB1Vzgrhe(~?89K&1TN7ux0E_g7mQ#<Ux53CRU0~%q-1y!-bd|hd-njloAg3R+
zxo{#d>M-7$*Z1?VbOmeS2g#cEFf&U+&vrCW=sl`_5)dzuU%ub&$KGoY_Q;Ork$R$!
zEND@j+^(?wB>hG=;a89XDM{Ez_?JOY8>syue}4>$aKmp~yw3Xp_fg}Q<z}uumG<5g
zSaS!ZF3iA;ndbMqSCb{+yS4JuxrqkRt>?$+?a-BNsOMn67ypsn{RjGn=+KAH$$dAH
zD|0iF((}n75EMM?-255(ia9K70lhy&e{!Ey0kP9@$7|Xyz$E1%-67aSTWnI~q8z4l
zqPFM<_gOM?*<6#GE)#zf_(NW-D0p1<j+{_ykmQuz)+EJmy0{wjmle?=S}yCUp{uR=
zGepFD>L?qs#NM`TAX&iq=5)fc6fN}56VhiIr*UHvxH(!lOv~#_v)$)kYn_c{0Jda+
zbaDUod;gJerKx|vxgSh3aZvgMFV-8D+v0zjGxq{V`d&o%kf7@)TI{Sjzdrg#z<m48
z`;b_Icf>YZB5(%3`?s?*9!)Kt4WPNdRn<3;TmXp_d<bse34Cg9*>j*2Vdt*9gt}*J
z$BaaKfYZ4Vu;H!wM?B=j4U#=Aqfr)G_1@>WAWDbcKglXlE5s@mw)^gNmkO!4sj|gP
z5^V{+@DdpUfr~o?N7Q*==;W9J3^EWdkDfZWF1u@s^^Mue^k6il+P*&ft>5Bv6->HV
z^=r*yBm<$kvPad&9+f4vZYht%%zu|hEB7(8neBv{A}=l;Xmde>*!YNZ)@$ININgju
ztEPRh>J>EC60Z9|33$o9S-*u1O_7AMy;KJ$GkiXkz4}-g1Kd<FmtgJ#55NaS*$M12
zLqwSm0t|9-idkuy7+rA2L&QtfzG2V<>9>O+;1NUSLd``P?|5K&<OUkI-tBVZH%vIJ
z9|%yFg&k(qfE}He29v%p7qoKL!4#HxH{ERp>J`Foun)U_I-x*t(?lM>Tro_J&^hox
zT=tNRfzDy9W58axfV(Qh)H~m`$iBMCBOBq@fFd9=|4e`w7tUkKj8aC;jw1hd{#W2I
z^wF)GB2Q)}Zo8mZma=U`R5lSiNFbjyCI)Eh-&xvbK={B*{r8(t0QSU~p)E+Sq-g7#
zCUFeGLWkD8ui7SYdb)sYAyruZDZy(ZTo?n;nW%OE3waD1;w&%|0sXf$=JsLy%HqJk
zYRyCG>u*mBiC#?B-g#a@`>aAQiHyZGm4oEhn62L_Tu^3VCBpX8qr^L9_?Fcqon4L|
zD6KGWo8YM0e3@d~X<7l=p0mqG72fHdVIl_o-`^IM*a1?^#}U0U&xjnAOw+Z#;MP%b
zMnw?GAt>il`EY}6GBY`4-*|aJt&%19B-`0qA<KgXT5g0@m)To$E$RBeH(f3>U(`Q+
z=l^z%gXnVP0C2D33^*GG^xE-d37@Y&qU_&<m@{)CgdMhykiNTAxta^OX#u##RrmH}
zT^@eaLF(BN57?pJJ%g&Pjq;QWz2Eb_6HuPf(&J6~01isY2>py+f*go}%b<R)yXi*F
zY`mN?3c51Ed~L21x5LF&5He3M#}Ss+Zy49(T(Q_C2#}xlO`9+Irpw#Ygr8N+EdlGw
zXT(q@^VD+UT1fzVf;x|Y7rV;MfA%H<7}Zy6HZP=)5XE)kbv(6D)khusp0>-d9lLJv
z)ILxpMV!4&0&~0;v@gZgVa<1(%iUr3n@Z|0PUqeX`l;gycPlHtCyv*%=!a9|tT5Y*
zI8lSd_`KTNXlexzZa#bI3ijI9OBAeAi`{{0);y6D$@fbeX^b$@o<$FnX&y>DN(iVQ
zdLcpr2OrgK4A&^`qtIiN5yIk4V>@G@qcbA`9Y@57%0R=v>8*@4rh&nU)+=0DUoO=X
z9so%L%gw<_PrSG>Um|PVCT;f23)P@~itgG9cViftdEisE6eO!l*Sve@Rl86~|9$9C
z2B1b4JRf$im}$LU@33V;!qw%!N9qH+WA2`^qZK_!j6sP15xwzKPo9;oP{g$JbbVsi
z-!Q2kmDpgHo;<s9Oh8}G5m2|mW?nT5;7;@!J(*+)y{et{U8ky9)>iv+U-#~Kiv5$K
zhm3FQ{_D1Rn`a;lI3_e0^n0u;*SK-cuwKD>D{Z{$)3~~B#AakdA_W;wiWK^U^if{K
z?tM1~f&M%ad$y|4<k%q7u(R=kRA*WSC+Cskh^o&wydw17;{UEXUR($laSE&Me}_Si
z0ry|QM0;6QKzQknU@TzpyW7H)G|cbeSrxzqG!;cyR#bU4&<drwfrbTWYbup*$+RnN
zsQ5&LZxXYWe6fUG?KlZ(M6}wo?jR)2n*7No0(I!ytY7x4?Ugg_l|EG+33U<*3)sjx
z{cY<0s(IWc0{J?i!kSm6oXYh`nq7t;dWZKW+#wOw5IqlJf4yGHGPA3tObQTbQVhuw
z^~XWqF^(w%6`@KYYhbC!s>Ye=T^^&SL3hJ1*osY`a0v~y8kg53ccSKqNHP&t3>0cY
z5}wScO0qL^Df#MN!;qQI$;U98(O_H1#!=J(4XKO=dckA$=f3Q}VEyydUub3gOcXf$
z55r8b*GH8}p<~<0sw{wA^>m*|&Io~%qUE0&?-jryR-?RF2Nlv^4{ne`su+rqC=5;z
zM7UyJr#Yi#2z)#xn58LOOTU;fyAr5{EwWQp5CVP%eKFwnFa$*kaWyU^5MuD}eQ`yn
zTbdTN+_O-rA3QwMutm=)=yKDGhj^twSh~;X6nh+3+0(^_o(aYq8iYFrz?BQ@H0xRa
z4PNmTwjZ2_ARfg9IfY$h%<HfhccX`ox922bLD~^Wr-wq0PN#t1e?&@*Jh!)UMi!Vt
zjt8sKgSH}YqS|akOV0W$wh%wmq*7``CSKTtMFvLpTmD{3Oq;>BSix2miIaxn&kH?h
zUfIve8`rqF`^SkPm6pRID3ytBb}iB*%4`BvC~_h4xBv_v=;)U+TaP7wyVC4Wny5_c
z0pl~Dis`a(LV#y(;N00o-4S}v+_6(*wiEtVwW&j+f94^#?Nq1c+#o!@#GB7KXhDxg
zQ<OydY0n@h;>%9J)<fBs$)ByHatMqmBxumFLI{?$MMM$;2n^H3vESQhLdC`_>n855
zp2jUuBwl(KYoOjO?oKXM*ZlHC!ZIYQ4(P-RVF`kRy=$=r0xr2q`TEC|N%7+Zx(Ukc
zZ;z+h9li;(CxUIczx+?~4HFh+INUCexN=_*P~ctHzvH<2FOx0`EFnpdN!p}9R6d6|
zVD}gG8mdjS(l}9d)-enY|7O_kKzkBnXITp{O#J-N>+rB2Wk@YO_TEHQ07|9DwMOOg
z3q*YtW;9{`(%YrDa|XH*cAoiY>t;D+gG+%NDp?^Rg5)jipoy2RbeNbGiO%C~ZAC6}
zRl-VJ9(5t20F6)Pu?5l>ki=j@L+7PhSzG=Rh6g;kX}D6W-bLMVUTjOL_wn*(A*kvb
z;~xGlZFHuHqyv}Se2*pTb>dLpoqV4)Yt=omUp<ZkW|OGqFiKSI)<<wn)Lin~(cb;V
z(V5%nmG3WkbI)Q{gies_NO+hD4%{JZyj#mJVOFEJxZ|GHAle|Fzw0{w?n_L+vdHoG
zpivSAak&X|D8c^0V>z1$6q%TD%P)~sp|)@NNB?@jebcau6<9`Q*Y?&)eKb*g9T7AW
zML{_JQ(uIeIrm)s31{A~xNOoe6hh<Vxp0+e8XRB23UIyqJ)IkVt5{g&d8=YFZ0s!@
zwNf_<(VvJn``?_YM5};_N%vw}Z%c`6K}kKN56to1Fb-rQfn~g^4oM4}AqV(c<t+QF
z@Ep_odbBiLrknP^mdm^7!X${Imi<BAlE=CGa7w+6xc0@zNA^H3Vv?vTZj2#SI5HMz
z&*kSO1=#_LJ3mePOn$J&cE!;4%-~BeswFY+Bw|;)cp%VDTAmWaz>iESda*(URC4fK
zs7`4)fVKtvN59EWq(Hs$snM<v6L+`PYqh)<=PGl!ylj_Tiz4IIL@DY^v(0XBOqQxg
zuP`80D&WSSDYbo`FlgaLZyEJJ^10F}u;{o}+X~i9xU84s8ndZ_i#;@fgBS8o<11BE
zC^$mS9^?~&F+J!>3%mxD6Hnx6KfDi7m@^aj28QIR(;#nQJdc5DCJ#{u7C&CT!z4pb
z!)S9yKi##ANa`nMdBR8^q6llPCJt%4G?UZpcpdfV#VjM|W(D=pHmrN>g1*vlOX_gT
z{W_c~Ux6_(r!--g4_Dek5T=L_Q7SX`<A=m0ox<K&G{|e|WA-vE6zUsYJrS~aF<Bk$
zz(ozO>Rbl|{v+BoM&Ff07bJ}jOMGs1G7vtEe;%#kYOd0=U54|q*EsVkN|AV_#{Xms
z;SUyXbGHixEYCq){9}MCLl)W+bUJDw$_G*C)V6?z2I)cijI`(qIpNR@5)Fs+LI|n=
z9jbnrFAbR3`pGgO3$zDV``To;2u$6r!50BVk)q&=jNs5AZtuNa2|Ja=T*J#4tveEJ
zrT#Q3>m3n|z8J#{)`8VZ*@}s99{e~Xy8`r^g#(U=w7}WmZ!`0Hd2}Q}h<%dMx3wrf
z?yoYn)(Z3o0SDWgaUJiMOR!|R1lWkxiV~Y4$}%gFONiRW@#i6aR#^Yh=B&M3Kq+H0
zq@QT0Jzt|TWc`Mt){9Bu5&+l=L3Qd=1H>-NC0dzhOj(TvDL%*t(B9Qh_vPO#GwP?I
z!LspJ3Yd-{@MeJ>%)W_CqUy2_IfhL3y_lqF4zSHMHP6YwM?HD`^2@wXVO*m)tZFN(
z8)sVzYZLFB2~2A2B41bZebD?fYlaLplKGSAp>Q1cEShgFylK~%QWX#R{$t)S2V@r}
z>AHa*jDl-;!UgECiKB%#4$am<jW#U^c0dv%M7{7E8f|)Vv?!Y!BDk(4^hZtL^YjG;
z^sA+K&nA8q<PBV!Sqi%<ERy8*$cE_nz93PKKu4w)Ofu#}+Q%rvw|2!qN3pwJzA#ka
zNG-Y6Ifs+iM|eFwc}w+-KaCx>a5Bp@Y;jOyu(W(Q-6-_XKd%V;=gO?~imb$FbCjr7
z31-O^sB(Y+rE~`S!MfVFR>|V;%Tx-Z>x(K~D&>ZvcF^jTeFJKwT3_}Uat#u4iV6xk
zl?h8hcVw$MbAnfb?u&;d7pnCydEmWEjuk*HQlW%57s6Y*8&mXlxOR%I3W*rcM20bC
z_-FT{1a@59Ua`xTQcMhywfPs7%EGSX4~@KQ9l52YLsBb=mos@TLr#a<{=1<D%E9hJ
ztK=NGRnZJ-YHZQb)&t?^=0V$=Q}&L@YuNO<u~&+QpD>dGMmClU)R)mA!T?SWs8bwi
zj5{1>Q5)RUTv;$yrIY*$0U5Qx0o&Bt+0cfsT$0&Mr8(BR&fI<BoaZhodUn2qovh@~
zE*pKJn@fQ!b)uDgrJwR^qO1OmnIg^3?xf(WX(*Dz4+iU`-ZavuSit4Ei}(EE8(KY8
zZgQKQRhWBOh87@pxj^#0yA^JydDO^y;BEBxlm^=71YUG1K&a7VHTy53R532jg>oh+
zX}I18gEgJ{NMwMG?-~MYp^`C=9uD=}nEjE*27r3eWn&Hax2nWxH`HwQGuwiDz*`ZO
zecRA2NABweA_RuQ-Tqw(@`CG))aFmgmoV>bzL6o@JMY*m^gb&(YEfPT<K>2RbC&R8
z!tr?ES)Q;#+UaGOto5HQ{ZoIo1jWGv?-qx70KN@BT|B%ohC7F2q$CfRa|eZl<CGVS
zrDm7YuI7%1L^!Nbvg+57t(mxZ<wwFs+LFmZnTOPJhPOp`1UH6(L?V7iBiig-hZ7m>
zcAj9m>m001x-<&(>$ZjJV}TCOHUd_>G(QY97kQe478yV=nnSr&PWl~XFXIxmF=N#3
zzk*-2;^eOS%uv4jL<@6&!%_tx?w8<%Xyzq_!^jnjse=%`Od@(9mkoy93gbT?^M5dg
z+6yUBBL|ou?cE9|n1V{hY~Q=Kb{XMN@56sNY@nC;jh)p07BxD<EzJ_W#Q1&zzQyCu
z*2SdZiBJOz)-G=({^QC-%?caRiY{}Ubc9m1KZ<jZYc&Xlgsqb!jUdX#m0Fou>yKV}
z>XfqP5iUq+1!@8o{>x_;K#R2+$>@f3`7$|?Dh6tcCx@<jHh9CG?F!EpRXeWgyqX4_
z&9O{GDF0et<{f5BnRBk}N?&e)bXv(AT)i(}!4do?N|-aqc)EVcS!+lJ17GGkGTjj;
zPyon1pH3mUkike~9BMmv6fjRP)(4<WQRQfh)5|X}=F6_y`SYE;)DZhXt#P~T;qW`A
z|DuJ&w9cmbX9Rlu@Hf*FBy*&KY!R%x5Gq(n5Wy&M@o|CA;7-i*&2<r0EmbqP?110E
zn{n)*nq=h?iqP8-ks&#K_bNXCbpqn5{Grtf<I9*q>0AUsu!oPnDcHYr-=i+;-#W)@
zHQw?3^Y8ipde{qT6HhG=iwLxLaA&v|M^PScgx>tbr=vLMPMQ%dxA-=!4Eh?|PQ!+_
zIljH9rG;mfnR0$Q2`y!Sz~$>wQAbu#PEfQ+R8aNA8AAG0j2Vi=*?bfTqBM)tLz5&&
z8*LQOC&f^OjN3KpD^nU5gB<^`pw+1dIf2gJq~84m@LT^oA<j}>uoiP8yrgO`2!o6M
zr}R|b4TXENfVQaZ_0bz5g5O#)pQT}o^vjEPRssKXhsp`5+8{w5*-`ePqpikdx*pHP
z2zoV>9o-r<;WW?DL=Rj<3CD(u({a_8qKdd1w7cn{c<az;#oaaIUU#5Gl`l<KBPCb_
zA9;Th-Sf)ScYQZy`Oaf;J)$9gK>C-CH~fdOV#j{z7g4dX`4s`;L08sl5$RHSPVJ9`
zb_2V64c6u8fd*`SMGtsXm$!M+Dh^km(6BnjVE!oZ>y33AmEO!Zm*e|Uw7pLf)J06Q
za%H269U9n}no07gZvn~7l9qg%7h6)BoHphA&)M<R(a{r$*Mjt$pFB5*pcrNz59J%W
zz5{%#p_1+Onjz{t3{5S26U)lb4^yBZ1OwZRxdlz+q8Xy8Vcks!r?M{8_Bb`zwv)4A
zr9Fa|$(2`i_JP-}$CQ;h+4}`uYDS@o81lbSnO3j9n|yI>0TE^Kce5&s%gw;mou_aC
zPAk&j5`4hyCb9Ng?!_!6x{CiOv0D^Z(Z;*{5F=?W@Ih1fwsuoQm48g%8&bXHE1u}P
zIzFIbM@-^-qRsJ@l#{Kp3*S<;5(3UBNIze5hgsSDbR9y{izk%M(fIkF1=7`tbSJ49
zO6T8wQB|zkXElGm-W}*JYsK6Y^?ABOF6m>Umbbt&(}fFY>??%|s+4hvRUy{vM>vYL
z32!No@euDhBL)xS%~Bq0CT@{VJe<DqmS!5}pFt7bUZfwLZ6^!9Fzo4k8;_ir?gng-
z@zUYVjGpkb!i+Pr_cv2{0SG?wL2N+i0VjN#8wwW+1beA>9{W)=73hbl0q5U`+K8cO
zr=dG%@AccTWy@}*WM|d%Nji|O!eY5WIbb1d>Q5grXE-3Agp|`EI;V8gWP`w>N%6|M
zs_HNb<!5lrC+{alS@SkjX;m^Cvu;om;AjpVrk<Jrv1UgqoZ$p7C`f*~>?ndsub7#+
z{b{k$x3;x>UUp?XMiOOFDq7L6VMsE1Z_m}D(sFto3qaB4i1?#9t&TxgQN$4~45PNw
zWzJcJGF`omgR|zyBA%Ca{B{b&tRiJ@%wx#+Ezi#5Z6CjiXo5qtvr4c$3%3Iea0Wo5
zRQ|ykPL0B&;&1!%>g;Ny`Y5u{MFTu@2xv@j3tP5Uq#W6DxO;I4<PGTB1R6`XeRZ?s
z)|Zt1baIR4_9X(~^(Lq?=ny<>hDi{llVI;h(vb5^Ap2q#{kuo@aeCXI(@H)Fd*`_f
z_iBDDxWa%{4^fJ6g+y99pE1EJE12|-(uLeer3vl{#1@^_FIhh26XEE?KutT?)q3eZ
z2_ue3qk-vq3a#*XK$yzs=2F(Aa?#k5pV)7@BV8V5RXa;8_gR~p-<w;R1UpNbxXp#B
zySuwQMAxRJM%M(SJ#LW7P?M|}5Lm0}A+iGQd@4)z!p&X^c{9*5?4SR=u%jhC|K2jc
z+wM&wufZEcHd3q&3`lLe4hI4HGHDXt6s-jx$>>#d!xT!adK7V2e6o7h+K)OXU`mnk
zt2<#fjb<Du01(2fNO=`v-1@VrE-8P4w2jZ7&yhPPTEWQK6p>++p8c3hTbcBZk}(?0
zNuukcMlXjjIsB;}PN$j@@k+@{1xxRY=5v4GxGgen^mntJZ7C=wHsR@h+_J5C0VDYD
zb>dI+=1)WJS3~+&f%{Jj;yBK>8sISJ4|&3Us9Fx^Ew6o-hFipvre$AfU<MFXNQqP}
z^5W*m$%R7KI1lP$(RKei0%rAi-V~3^8NLAg_ySWNTmTG_VINABJ1@T;ux9;AQ>C=)
zHgl{RstX;-PozT~4WKJP3HhqLv+ihgXKL<OA9}U{)O>GmbxG<7=ehAKazHztd!d|k
z+9M;UWT|LZb$yI`BbkhVg*n0)EN_&A&Nd72v%5K^@DJ*BcCM*Ng?lg8CBHrNwV4Yj
zdI3?d<6ZQUDqW?K?S8N=Q@Fp{u+JA0TY|Wj8H~k)0Jb<$7^{x{9w8OWN8jh>$5P<x
zS4t{dc^Hajm+oop^BT~V08t2e&@x*B`Hzz-NCc}62$lIRGJ^(*SE1(NV4Fjv=7=4#
zg7-uf?sNNl8OEp<*=0%c@|5>#$790W6JnbA!?{C7B=)z3H7e7V4nCEG1DL%_O?fap
zQcs{00(<gyHBAUBMa(!#k!zz>XZveZ-@G&7s-wob2)^rDVJuVWQM%rxB#nYtmb5GL
zuv;-QwT$u_By~ACoSw0MSVh;g35dWO>#z{?0*l{TDUqqRbPyY9y4Psxv$6E&Q#E+Y
z%^BL+r#^9o!b-<^#pi*TD{(KWIObyGHB0?N3R)0%`g=M2Wao0{kE=BPqlgZs9&TU@
z!rLHk{-glVZ~N7wPajCpQz*4I!)<R>+Gddgw04DZ;gQ$jP2FcOsQ50<ds(Xynyk8+
zoa#%H;w%<E-26bOWEkOS5k>8bgBx8!H;<iQo#eL1NyBSYyp5gz-N==H2W8&7{;bv4
z@HU8Zi#T0i;eN4(&;pk&G#WgP7HBP2Z^4QUU+&*`&UT-3;o&w${+JrR&IE*MWnL_f
zjA0CjIngWQg<H(Vs6kcjF#Ku;lkeUT=k1`pu35d)Q&W~zc7GX!9vvamz8RCuA)H35
zTnQpag+*bjZxm`d40pbx8KrK-cQ4q?$C5<uq_5#SAog=Ls$m{l2-1aM;a^`w+L<xH
zsS&?>sC7ERu*In%>N?JdB|A`x*Hk%33j{`qY)ugzl}qh<*=RI^IXJ6oQH~aCk6mXd
zWt4B2plwTfB}+<|*w#%l;OP1ap{43EEId6OM&m;J=(RjZmCrHuQIEh3=ASOTd(3gm
zW3+US9y0w7#C^Y9dmjL&^}<xtqr1dNmmDE(;|cjy#%rE+O#_fThgmVSo#&7>n$WZs
zxd5V*XqFaaf7d5WQo;?%4!k}0HRFPQI;Y~(B&8jcv9}uhq1#wtAbxw;?FrT|+t)cr
zQT%5jyQ=g~m1i46XTFJ~P)tG@x17(w3)&<b7ed^1kztAUCJ-PTpgB>HXF|~|T7XxA
zVQF__Eo~AjCU(9%ybfRNY*N$03|k6O{sTQa(2J9>Qs_-2rYap^&>p?5(b3I9-*uf=
z%{^Oin^qmXO~t-qR+<0>zwfn~P4!dpodud0)xU5&B-U7mzL<)Ius3+zb_6i@FCgW`
zG|Q^L%skP#$1DCvzUv5PwO6@D+(Ue(=;;IhWj^aijQsZnool{tK@Yr0k>)JH&0fAn
zgjR>|qgm%c(6(fOhBrtF18k6m^^wjb*g9-e&43ip{e@(@4c1h*24A&#&riEr*!pqx
z+;2S`wxkh%kd${W)VgtA0KoyHs%%=KP1!rSx%hrXiPMEE{!9k#d#H(!=}7P4Hr5A{
zh>zRtBMUH{u@llnz+u#ztJD~JmbVt3o=Pfw+l9`poE?KfH5ds4uHev~r_{KPWEX%)
zl<A9#2zL>~#9-l<J-DajuhAw>+AKLrZY&PB^6KAz6fhL~^EQT)-4*;|C;!E+`@u#j
z`>4~RS4+*M4^tU{c7e*JdZ67*E8Q?TYNwN!Z4a@hD|$nu%AtYKqEf00p(ke11?+&F
zeN{%9x(I3+5xLt3lhL?k*;7(ZakwDBR{<7@1zGeyeqYIwLjn@%tt7Bz3{W#NO@c}a
zvq7cZeuUaZ<hGj6{vU1!-Gn4Q&Yl?3S8cfT%C_(`>hv+y-PbEuR`zVyeXMD--<w<*
z&qNfb6N1bUY{T|f<1k|eTpo9h2=G+{jF<V9Vz|;xr&7ItF!ir&el?^eBkIQ>BUy7*
z=$_N&I240LMs@r7_u!d*O&z#);zc^-=dnj`b+v8AKL77tS9*V|J{l{zF{b0vk^@mV
zif*1kZq@Ex{R=0lNB}ENmLkRZ&YAv4Dvs*l93wRtZ}AaeqC?6u1X*!r_FTu!IVIUm
zAFlYst#H<xm-PE!K~idhS*m{EQPJt)M%(iD>*<J(JFJ!K{9jn#4rb3uz#lwyWbxqk
z!r+#IudP5K@W$)Ssi3p~05umN_Q%a#s6gj!6IPtwX);0V0*!xC&6cn!h8@hlKJt<C
zXqXkOPiEAmk&Jkq*M_YpZ-%BQ3`@t|y2F365LkL&Ah!Z)*B{?+&}Qt90C;2U=%hbF
z@uNqch+L2%u?ww{%*5Y0Joi?QFim1fkCIAV?dcGY*27hQZPX@N&}4M7pzP5Tku^FW
z`9aXkr9tQr^80o8{{ucf6crSCI9%GEq*>+BNHXnhMe_xJ*=x!zEegCv!i6$|+1T89
zX*-!OK+Kg6{FMZ*f^YPW`xEPlpSdMfr0D%&qZfJ141DH*gei5VzmUWpILjFk>Am-v
zjFQNL<rNYTa%<p8ot+j8{!_vpD$u0ZKq3>fyp8;##>-K%bTK-LY>v-d#Dh`dvZ90~
zmVlb=0hER)Z0mcX-b2k*Ex`DbL6(p2=H?O*=CT&*4goy;V~h>Ext`&(iLe2j*)>FU
z{Wm$TvoD4O-^DIiFK+V{UQ&0}V}e72mNz<$xj7{lbsxpv@d=2C{qHAlZ(m=8sqes;
zg}Y}k^Djjq5PvIsfN%j^-kt3IRSonTV`;t6ENRuh%H4H6uz*sKph(*FHrJ5keJ3{K
z*LZSoqB~ne?T1Wd(MN};upgjCEPF-4DB!<+#0);zRMGSSCBPc|%CO!c-2@c5YnhW?
z2rrX|@<fiK<Nn^N7nZHP7v7|hy37%r@Pgh;2D4P_>4H+)Fr}?-q4H*Pgu<H}Akuq*
z<Tybpliu}WcrUHqejj$He^eBQFt-u84sHhfJ^m`d2KZ&=_`?R=R0&eg;i#n~OXo7L
zNYHL6v?s5152$lU-3$y+(YtMzg`}}^FnJ3KSs%#Y7n&Tmpy|7Aw#yK%7As}!DF|%_
zf_Biwct&KSOs`}{G8i4V;gdU5jbTD{g-&xYgG>{jW#oT;#_=%#;}ZF|5x5MyKWNFx
ze8U=rkul?7Tq{~c#>=|mTEmpEsQQWeC7?$+^L5k953JMcfkBk;aO1qLC&4xpalH(_
zdsqZM#(c+Up2|QK_jB<DIi2jQSQku71^b2gEJgpuWkGUS%UV}FiE%&{haie~DiS-$
za&F-xQ4H+vz*t^~N^DemxV|iyVKC;9k%I*-^@B&S7FjHP*46#ko)rNb5$Fl&B0@m(
z0866K&ob?!?94{goV1W-W)>Ci1g^&Uds$njr#oD%zPFJ{kysp9g0eSF;qYO<1-?i)
z#oKTHSI0^d&fd*q-alL5_=~1qwzWvFmQv=fpv=$)7gi#FCRISf7F%T#6y)L2wsjeO
zU()~=CUTz4JerzeaE}7MdvimfTgAFEhv`_@wXxY$-M)dNst5m{H;Tp+7vrl4W1Iri
z=;TIA1Ca1QY;|ufy@pi*Gyp>Gve)f=5c_&(b+hJXt;J@&o_<Pur`~F<VfVk8y*s-F
zyX$!6Z))^oy)FETgw3{^Is<wm$au=ITHZtCl!~+qrBshUtsLV<h{|T-qqWO|zjZ(F
z{g(hQv{mdEP2&V81G7IBA6_|EzHgTbA@=@1UZ=yGvp0wfvwSu$6ir>Zh?>6}1&_b)
z&MTKqgPeTK<N@`+Yh7=?HKOx0AcU*6tVo0!iuV=4OGBuZp<pfC64<GFoBM<#a=C{#
zF0of6uF0@57TKnw(1lApiT9arr(h1!RQk;#GM>F5LADR8e#8pH9VO?HnHJn(S=QV|
zlpGelk(XW8w6i3?V<i&o7Hi#*CBfKB7*~dhI#h_lImH&nID>ojz#W`Q+(f{sKGENe
zv4O6u7IZipi8CD^?TbW-L3@ptd~ItQvY+<!Bpn9a4VT#-)2>zh?DVHf{Oo$^51U$N
z@c3MJ(Bg3$2^OtconIGbUk3!-M2r$D(V2j(LFzE&-fa{FLugvGubJh>t|c$_Chr7G
z+4&J?L-wI7-*riO<QJReM2LXrih7U-K~WsKxcGUvS)TFodS1hSQ>fa<Kd{^D`&WGi
z?J2>CUS=eYIKwfW(`s0*!unEajHAcn?<{6D5Wx0_WCg#XV`uiQBwfZfFFAdGLvEu#
zUVWCcdO;<^v(lf<9&;F$AQsBz+~wfVdi5@1OLE@d(Cv08D6HfNd1;qxeZudvMNjBf
zc-d^_pd`T{CyPuH(SVvCqevKYcT{wTa8fQyp(v4DsDg}b^R&#G@b;s|hwC`)Z$&tK
z=*xF|E@ACvKX4`|m-LG$e)tixCTjh$mD*mma1EQ3NfYhB9&H2fg<BJ7ID6jM5mUKH
zsfHCvJxa~%o8bT7#2N23W;gS%g)`-!f`agWDU)$@wsQY}@-atqyZ_5kV4ghHW-0?D
zblO*Rx~h#leu(u{P=zMU7h-fGFNRcf_q^j*?t%Dfi}<p(W=N#Lewlt~MSOS92s-|I
zglTS#Lt_mOg00nXQ&wi99>s*zp#{7bE`%thf5~0J3={$r#2wjWlDVV+;@GCR+ybC9
zdmYmCgCu%A8_IA%Ms|0%hSvp)r@I|aV#T(!H}hVue0s#0ihC}Q2nMd?Svdg2hO2%Y
znk!?Gxr#U=MIjUwv%nw=!k?3dHPC9g#C>w`HqJgZ0iHMYPWC1-Ia=AJrhBcrv&yp$
zyKg-ypJe6FeNHh8IEaC;R+!le=TPgQ)FnPEA=JI_|A(=23KAXK)^*!nZQC|i+qP}n
z_G;U<ZQHhO+q!)o&#BtGZmRN@%0p5!8FS9@e_!Jw_6u`?9fkQY@Pm)dqujeqPFx4?
zwrfTSe94T1{VN0oJ*T)N&f&-j+|`ISb_RcBc<^&#*!=~)LPBABvP;8IIM3ZcqF=RM
z>b#HmScku%nNKUvIHSAup*BU^LM;=TvX2{oL(yUrQast`tMuEpN3{~CYG|)N?VSmQ
zTJa*tHB*&8bBGsxN6f9)3x{<A@QhP=sR(GWcST_TDSeBNqo<Fh%9sJ&9fw-T$7@+p
zS{<;?!d_ZV+{L)OigC>ILv4Lb7r_u=;%xyLg+hNn=JHneh7MaY-HXMZ=<3toc5#<>
ztVj?eY&u5<uyT1y<_JSG=kW|YHmIT)w9{M+%S=O@6X?&_BQLC}MD@u&C*8bMV`7-0
z8E#jRkk`9b;=Updsl8oGFAR#}p{q;BZ(3ZDL@7t_#HA|S?`AykQ+o8+WUwiL{6J)x
zCXKs^>>lSlbf<<Zh5+QR$#SorbY7p08uL0gXzS9}ziV~tx-<!}>t+AW_8pPc>8qtH
zkBy?j;5J!sG|u!W7Ml)PbFh!RrK?Pxmp(=_fZZOicyKZOm$kI<w%Iuc<IM;)ljFgy
zZBRJ~YJh{a$ZLwoGP;?=kb1|yzB1l#7_7#Aey;xya>)f)aWV3jS9|w+;{S(H;>g0l
zNb~<OOswPD;>-B}035sfGwTxtqxAy)F%Z?jVl$-pWKs}Q1Yh4@yzVX<6ROX@zUiRm
zojN-_^iH&%5MIqp^ACxh6N@gwft^4B1OdUiXgW7|CB_;Awm5c-VUM=e)*!KHLi78D
zx3=>VUH$#D6jNOY3caerY#aFgVWcpu;11TEl9J~o@nBD?7nXd;gF*xKvH+kGMyC-t
zsI8(3c9kK>B*MDEEc!E_=uhDaX*s$yzNY(Xrj3)_DC%jb$#6MG#w<OrgS2M5Gf+)(
zE3jgh(I~fhz|s>I!iv`6n$4h4qd=SDRrY8cC6o0XeFmYUh8^dJ3C`lz+PPjQE#%!b
zvYk7p;Um_cuYmy!qVhNze}B>_!fyzWyOdv-8=^M1d}B~MuB*3aR*5EqWN~k|hfI*0
zI!eeHkO8Jycv(cEchGBu7V&a7=1>hB3iek!<S;&(?=45TVD;#7Ty9N#C<;z}0h<dk
z7A**6MA)$LqS6(m3w_F1O$)PmVX2y6dS9b@$^Q%!!2Iw&{-3vui>LAM2?_up5C5N0
z`Hs5(!`GrU`)?n@ELCgAb&>x;<*%|Y2+<>BbDc3u&tv@ZQ6L#`2Z>#}%^n>DR3$l&
zu8jo97IwC`xFCaI6kFZ_Mz*dSI%c{v(VsbI1LMe-<LUmu)@*lsKRk@xRp{!)(WjzN
zyKYfzirtYxvt%Z5A}YY{QcLU0KtUZ#F}(HW0|Fr~Cx%k1QU@@`q=IbuiC-bIH@Yi9
z;yQx^xaJ2<>I%{_Cx#<N%d`fhmcXpO#G+uj!R3vHCw{n(>J9yZ@~Kjxh#wsh{Ga7l
zMehux<z54cVOO0PF?Bl*JY>TZ2sH+ilDWxQ&`Rn0Rti(hv`cqF29_*X5YPh^&iF=;
zW+`DS?7+gN6_D{<IA`2(i;V|&y-EI7b_>Rh1RlD^|06J9m{C8Rw3+?mdfw(*{bKCk
z&G51BvNsabb&|6gk+yNg9U281bQnON)4;udr*BpPMW@r-@SZxEm5q?O1$gsUtQG9x
zt;R2hw`rG_j@z~K)Fq@C;BU@WKLlZ4qPQsui2Wf&ao>zR1xLD^H($U1MGDlXT#8S6
z^`7P!i%GCycG{lPYJtRHJ_CCuQqX=pKYk%H6;LuEuq*33yH2aBV<qqd%n7%Y7e-$q
zk6l#izb43+g|#YIo{mhZ5tY|RBTpA^A0P0k6V-^7z|KjaN;5>k-nv`qFi=Zq>9nxA
zUBg<V)`S|v%?kdO3{=Mp04R+1z1hGJtaT$O*Xlv24-#F)ltW2Ss%IoFB#c4tA%$~g
zn$iR?yU1vLx?*lYlLA)QYc~&f`3wuUq7~2rGq-9A$F!R3ou<zGf*|o{m|FbYSOMsH
zLIbCr!oMhQ4kNoyN5ARPy?}yOU8zBt;LV|Og7uDn7Ns<?CY%5zy~tSOvf0iXa@R|T
z4uH1nR&9_mEFgcU@Gnhx5#U*cou!hN$_aO@8E9r?wnOtJ^<-xHhGO7%I|E*B`t0v%
zKb64eu3TK1MHk#PABMnRKPbxowCFc0c*jrG9K21|p#m}{>$AgsUk}*hQHDcCHJ)cz
zC)%1k2q&}@tklTL#x##StQoMTOS6q|Qb%)gDepZJ?xoGqb<v-4HiptzcZ*fW2$#IZ
zYvf=eda&0re^htea1uAjvxf8V7Gm5`Aa1|d+nh+KYJ|yoxRxL&yl{0$8;mc`xV1Oq
zqJwKNO1l!ktdD$jHQBW}!)uSEiGgTE&Cm`z-aJp;Y2J(v2DWnRcoID8?S{UPQu^1S
zBf2tV#B|N=quM{Y2GpIc3KzUt^wG!Yj1u4HO|ZM1=Biw;e9tj#nf>CcH8XZldaxkY
zcfbXs)l>gQ^6t2?;f=V06-iGX+oPEl#B5*A6DVJbG)_25%E{d`-%pBI>lWz{*dGy8
z`LrudzZrq?$mer-pq-Y91_bBMsEtmp$RfZ?N*x=vQ5p&mP*JZtbX8O~1f+5p1>0cK
zN!_K-H~;;y)xV~j;!GAw6w5HusE)#j2FGDy0jBLN6(VB;HRc|&jzBV*tG3srjR;I5
zf<@l-=8CsZQ;}?xW_>}~58Oq370%<%k2<Ma<us&WgVdc<)=NQMC^fYR+cGiG6z}xy
z><`y#A@3ZkP%B*`Co{27Gb`AF9(Q9S#k9cHp{B0+Q%sLU6)C@D;#^+qI_9t-oH1ho
z!F()aT+aePsQVEEL4sr0X<naQ<<x4#k?<D`6Uu&OExE3$B?b%@5?4ywl0D6!vUV=6
zJobFgarSr{B1g}C<T`q7O52Za+Sp7pLT7PmHh<IYU}Mg$n@@ZICF@`_5342Ka;l&T
z>QOFN#u%6_Ig%r0sC-|Ar82EEnDuBW@ft<*P3cvBA*wl&!J15X$a?TrR=B;aq#euE
zcuZZ{BrWEvGmR`Xg!_wZSCVjuk)flz^0d}#alz%`yen0<`lq)oB64FC^S6^@>z@H{
zzdW_#5@{<(ch{Vk1QGTS9I~Iie6bF(3dh_My}_!YhS+lRT&5WOorjakE9aW+Zk(BO
z8cXxQVHp6i`O}YPqGy1WGSxPtmg0M$!x~icc_$xva~9AK!2hnU!BA`S?SADea=!|<
z|D^VHG<I~<H8=Y2YTu<_`^p9@!mrxb{;pQd0fmcV7EpQ_NPWK&42i2&8-IWmB3x+0
z%2*zuY*_u`r<*Izqp5*?t6K`s>dfus*3Ii0ap|Tx7aEPwN9xs}Z1?bLgH5z1M%E`_
zExwQ4WX{P0wk7O!&<pgWOe0+Ad6yeTUjPt^RI2_E8rlOwNNr`)G|mXHP`(#Q4kc9%
z-d}jQ+1_e{$8Sdnis}ZDFb_W|(rz(cGW8)AQ1gRYrI+Y-h!U<1?F|OERl{T#Y}oHr
z2V`Hz{q!==^HWUjl`k7(_374tJ{`^>1KB*l3^0Xq@1<-X=-|&S@(@i@_>p<f&+YB(
zpH?u6fow5UZ=6N8i8GodN}(5@iYMThPkLDNPio~}VcWNE8>nBBbn>m4d_z+gdvcd?
z$G-9L^$r`s17I?72l%pW^v*SI*qX%)01Xnj#yNutU<Po+JW8ak>A>CSQwq=ujIO31
z+WKan5zx)<>EN8~0hJf$GCUsGN{h@MJGOQd8JmaEr@hKw7}4Om$86YZlXWkK)YOi-
zRINsPZo-&l(wU3>0rZxq%BA@k#aJnc6!7YQ=AuV8z6Ls+7d2NT&<8FgqNmu-*k-y8
z7@=Z)k*<u|Rh@@*UG`E4F~@}JO<C&(oT|v|k^4%3u%1xS0G7u^c>x=JuxcrRkaLhX
zS4fhD<v=P*1xz<)@MbZJPt2s>?0SBp3uW5U_1dUSL{wvl50dDFrb-hflO*tyimTzo
zH-t)c&bSpXQY-hU>QU2-ldJ(A;o$%Ltue+KS53unD_hjTGt$fxXWDKkF2e{(k&K%|
z5KTUW7Ul7ssGV6OybyC?P%w7kRE|;QNn8a>y{;6C3GQe2NDjX_dQT6Yo{F3J$Hk8*
zu7S@pxNxLO#CT6b`k}Q3_$PEdAf3u$;pEgGtJl%fQO4+<gX4|k`Xo`ifjLVf;B_yP
zO>C?~Sdh{k*e61+Yp3$Cm=-t6-%|F_+tuRJ<%tYg%uJvB65N+yP5O!mWCjI@<dWO*
zxG~9|vu8FVlS9^FJuyTw%1H<}#Jnw!`#OT=V9Oyz!4q+qvybxSo;e^YanvbD9{WgL
z-3OD3Bt=;q)1mY%Geb#e=IetXBkU|Dn)i0KY4w`tAlr$%jXp`#@+}^DyaF*!7I2ow
zK&t*pGb%=BT-h0(N45n^T<4n+t@tFC+#(vrjOMh)S<2qPpPOjpkMZ=N3P2jU+BNfV
zoT+=uXb=-<c3i~iw%?9;$`+#3{zb_Nbmn_72UBy3@YG*xAE~xsq|LSCuuEMSX|_Zd
zsx0<-^1A+W?7bZqDL;EN3D%7Qrle>}m2>W_cKg9A?!|6#n8{`wcexE}cIh!UMJGgv
zQYn~r?DYioVb2RQf6p0m_Kv1!G_M0b26{k}W~OdStO&8;)3nw&u8Wka#WA0hL0@)n
zwy((=so<a$Umz1cDK)R{$$x6?3ME~IpI?KzTMo4Jp<rs#*mECkhbD#7VbrqRoR*G1
z^=`>I@?$_7-k{Mz5P<*|Q{<-DnmjZL5V`ST)tvFb<;vOVL}%i9{iOGJaVdzBR-IMv
zs_()N=|A)jmE2`!e6u)tnBTc7zU+?zTS8rvORogc7#d<Wz$4ZSt6>M%CiVC>)f<0&
ztPE4p?X8R`7I4=OA?uM3wwZzN2iTPLoL7nYnbmbVQ>t+~7CaSv);Ly6ouqp0-ZXEa
zl6WD9cT=}IB*cP$fD|ZRZAXSNQAhD%HF9`=v4q9!v)Ce>7eg~@gbQ+F@T2o;>*=ea
zbeu_Z4&B=x0XB02ThRnO!w|)>7bj;KUBJQi?TWu9&7W&!^+Jnr+5P#HK2&PVt<WGU
z5x*r!9S9j+aLrxKjdLH9m^?LZ|1MFkO;3KGTULtE)VJ28RZpi}hM=!#)DzDpLrnLV
z*LuOqO0y-D?p&e?h2+Os?7#Hb!$!F~!Lnsau_STc#7gEHSH5I%r-!zGG8ie*m@N?A
zb{NBYbHKjwu9<00N%AFoj^xp_Wgc#bU9;(rJ@mz%7~Ga*^7N@};ex~xAgDh@CroZ^
zd+&vHy+Hr|Sf_Xo-j&v-*_LVBhG6$3>_+HcQ1dfLvs9;qcV-h%AE9<0YnG1?i3(a4
zrc2epBHn4CSW#%;s(pE113bd8mEOxn0Qlr$Y#Bacrf>)i8GoR(38PGQ@P{~y1o!+O
z&&EQtp4Z#2V<RKy*R}B<roXm^j&}e3A9loJ>AJz1yz@nc@UobU^A;zy!F0jARWK^C
zUq#avpDA84wU;L}ek??&9PhB7_TF>j4KNs3D8#k3m8PDPEdt^n@q2uL^cH;4)X}w%
z-P1-@+dABRzP_&YJsg<sgxyJ#gH6!mMokYHr+?C99_KfV+r~3<A!og5!PN1ShUlXf
zx9HnJ_#rI2Gs7NG!wgcw^(!5MrE>Hj(NJ$DqqMxh1;28rhXwnR?GvL_Pz$lYN&osS
znc;<B-7#q$5r+)YsgoZ@V@mQ~k&oCwv;yMzihZc##jgd8@yh9L5Rkd`q=8&~mam>f
zd6bh$Dv)zQ<&#V1jFLnl8)buY3_CKobxp`bMRWdob4uyKsI&4)&0i4NI1z_Bx+TyZ
z%YB(yUR020Ppk5icc(1H9QG^_XX9*t`mvbsv;PT{<TG%(egfal<!awNhkw_(*?0JC
zV8eBJFL;=Kg^{R!H$AAT>E}Q=q|#@@{^Gvh){e~8;<HB%?e~ni>73iOSiN%ZdO6Vf
zX>|2yq!S5C1=T@4?vDXxkSw5wW3-2znLwVEJaI)5swH9lx`NJymmzzMBKnp9s5JvS
zP%zVq^6(RU8QFFVDgx!N=l+L8?61ulLt50&9A1;v&#e(8GsoPcsj!9`S%()wU(Ah|
zAh!gu`$8=)m~O%WyHEP)Pr)Rj?Z5t<GI4opvJq5$O!pXn*|yN&!6to^+{RU$ub;l$
z$xmBu?$}Z3&J<>;<MsXg%4_p8SP4p<Z&JT>6ZJEX@!Wa+wpPJ&h-8AN{AuA7o)AO_
zGrnWoyS@;kKb^%<L#iI@tyDv-h^f4Ph>FFlit>-nkM|fw4NzeVTpwkc|C77b(nMM>
z2KvXbQH^Gh8-~|E(Z9*}Vx|Cp{04;Dj~r44LD-jNW~jvgaj1ejk(;pXJ^x|bbA^MK
zizkr8V+|`CR>q#Au{#*$ZtHG)Sta?yof&krc08b0vUqJiBgA~W|L6+VlUMsm#IUX>
zC#0uo$TO9>E~aMVNfJ&-BspTcL-J-nk;+qkmj-Bwd%RvbwHolZ<F%dFBXA{BpoI-P
zC+nKO1AoI)K8$YkZZt>LfV=BXv2F%s+35{jZwuyTgBXg>3-BH3X~|%(#I;J*6u2&@
z^1eBDxQ4T!;kuTs9r+_cDj9`nz~4I74HJdLWn`e?8>^S}8BKq=vyCghIhE|L3E+xh
z3nYk=_H*Xj`83jZ&lkr1)jXBP|28kZW9|sR8CyoD*=w-11Lx*3X%(InwC4R>wcX$P
z4F2Tjeq?(_?#s|^#ibRfHIHJiRyJ2H-48)_Lr=kIjs*gVblmD%*ESRQ@D@GUDZ>}^
zTYH$7%m<*?uQ0rL^5Elv_^p)^HIP4Sy7Xs~>mtU})<aMO+Jp1oRX+Rpk(6Jw`CTf;
zDWkZf=NxF5{F1u8q=o~Cqc2C6P?*>4T?;HJFvdwOfbx+F9Ge~rHXUX7YMp@CwM4H>
z!;W6xHpVI@PO4$2czu*t-Z%C7>)X`8I?Co8&ZBODTK73%jM&mPvXZ+r0{>oU=rGtQ
z0={yd;OsJAcrb%mTpx+L=|Tnw4Bs96Il_47wjH@nc%Z4Z4`ydbiJ_0%23L<28Vb1T
z!HVe#j}Ob=j#GX>UM<*P!D^ovsy1AR;nw4&v@bw9Qu}_(S0C4`NR6+G?3az~SE8)2
zVx~N`2nVyp1)*BW_L})zxGq{%EL-lv^ea?*(?@=JQGH8RL-$gqh4apHJ8yKjM%PP<
z-oKnNg6L3HqTKOUYg@CX!6DX5$1K$>#a_W>@L%oYF4+ZSh+xcct}o}sMawxGTp5}8
zYjpt`@PxLIn_qpRM7v0Y%}G6zPX(AscORKY3Bej_(4_-RBaV9(8yFNl$<S*oTO|i|
zs<5jUE2cKeC}0~2@oABx%`F@|$PLOe(g?IPjs{fyYvV(M0irl%RDj4d{@CrllD)^t
zVt)3@g|7DLNyI{xXH!7CE%<JfztH|k9KLum^&Iqs&l|u*DB22dvu*#I!-krK!HZrC
zO|xu)6$f}=w3o0su+>hBF_GFpy>#8Ki*K(<pmMj?(II?3?h4J}_>POp@wJ0$c+!;(
z(uiJoeg-*J1ZrwR?g&4-iRWoR><IL{FfyT{Ypuk|#<0ZB6hc;BIa#jUim-qAu++St
zWlTqksA&q&4&gmnsb=j4g&`O(3xrpT^*=<+u+{EF>3QYKIFK0`HV_)<>I86^NGqFh
zoWd^R5saljUCf{*>Sg%13<<%40jwN3=BXvF0<ORzT%~JkTg_CHhmWLpHngqbA=iOp
zoH-eM`{rtV_<*BRT>QOia<G_o5aTeV7L8Ar$E+YCy*n`Aalm3m_of>m%=7olxtM{<
z*AaL-kXC3@`DHQDqR420&K>}UP?P3=x{<bzGePt-HIXwmAsaJ#t5~^^0HiasGzRJK
ze2LHJ1u6(xy6+!Q=#!bQP$-KRPaa7#eUL#RV1yFOh(qN9Y|YDAa&eH>{A@qTS^47g
z8_<I-T0b>JqT3xywa7=29QXrZ(DO#`P9iNr0(X9;5bhi?#q!l3a}q1(K>;@9&z~|1
zz(wd$B{bj7<KfExhRoy9AJR*1*NK3&$D{?bQbvdX(+nBeM=^oWjr1*Iwbp=1Qq@mO
z7O*l<_;C%;5!B|?WDUR^!r2!Q#xEhQHe7z6(9rLyTXI|K2VeLY4t2H>n9RQz{o=k-
z&oZuAnDzc{fCR4@e3jR>Sz4oJ`VXyqGOAk=!dAXrhcB@@^<*%;Vhgo(n01gDL~>LZ
zW9}+o1%I(R^1`Yii*pt*%?Ny&R1k1|Zs`EZF+Vw2e5)esko|nZk|ow#mmX1iZNYQ@
z*Wq*tUWTMPXxKAtaOptn4Q?Z`8+x0=6Z!_!26=DjKbFGiCM11vlN)6^!2j~&Yb`-2
z>4+=vHk7QF6STOLp$jbM^DO7|BP(!gH3Wlgz_mN_Su`swHNfSeo+S-5?Cc%%_Htn_
z>p=#V#I*7W-7V#aTESd`%XGk3LV}N_tz}UL<oZNn0;50;IktPR%TF~ysUzr(5sVj@
zwchU%`%~t(nbqL5UX+jDR>GBvHTzU@0>+d<m8wEOqyUor``V0dA3Q+P>?))}!Jr`}
znmA~@F(Aik`@&u@#UcNsIt8T*I2Hvnd^jAt`~4kH2T70<!*R3<ahBqjGRBbHiQxE%
z)KR7~rdFEp&uo;~6FOf>g$oxfThoh?+2_nxCDfrIO*NxpiR!)muB<iMso5+z1S{9n
z=pEXp(QvW2j0$Fr8Z9zPzF@M*<xrB-J~lE~q^vO31C|eR;Z_*<ng=k}M$-RIL<*v5
z!d1QF))2zigPD?y;|(V4XrYZ(Go%S9D>4Wvj*fdZSGCc|b3jHjxn`WZi0ZN=Z3Z);
zZPCClCPc@i1W*C*RxdH2e0<NhW14L+4dIHawvYO?jf+Eh(?tdwtR68fJTd7z1XbG|
zP{`mD3;^f`RB8q@3W_#hg0xpzIooTnyY6}zRgieJ)^-CAPtws_8nb;juzudWwd^zv
z?d|1}yZIL&F&^UYz0^$4+_YTlT3P2!3F`j?MUSBwk11SHOafdB4c+LXfs;JVt#qS6
z5Xd;le}@z?;4y6V!_z?sYPSlr;ioQ<Y{ghJF2kGZ`#y0U`4kYTSkN<ATG?|mB8JuE
zweND6F8o}FNmJ=!37lH~Xp-MJPcLc|mu6w(04|mHDQ<6{q%b3rRvct5gW*h@S?X0I
zTE$6+qzmNNi-(<6++mWK457Bfma&`dO{c%?Lx9LWB5#qfEfRNI!*HS1^P3O`1!lBu
zC@SJIf*z}$j`K-pB1WrLyO55@2rL*)^fA!e5Z&lRh@6%}5JN;sWde(_33>a6E2wPA
z$bK2_!jJ6bvZo0UJI;z@m$ry6$sP1y+7fG}<P*m!OiSJ2;@#6GeY#ofq?67j;Y~6G
zg4c2;uEMqKtQP07V1#nQnB>2vAMM$NJX4$XxC03V;S1lQtfveMno2FJq8ACG74c>H
zjnn5VY$cyxpIbJlTj+1CH@<L$8N5)Adk4PwT~1o?3n01E2>C%Vb*UAI3lCOB3HxrI
z?8f}J<}S7mBq746;_x07-}w3^P==55gBr%sG{M{k#u5Y?f<E!rqdD<m|26@w=J;Vb
zyKqUWF}oDiQ}}S76HppTFewQLR7!H$LM+v~1{ml@lUhsy3CzFg`FT+C_%AGwiAB;d
zyRuSHLC`ZKJyx-_W~HHgTXPk$pU~L?ETc_D(kQE0mOh)TPPx)XwiL>)E?5YnTVvHA
zb>_QX>F78aO3?s8B9PT2^XZGilxO3T-ZGGJv={X8$jVw+Yd|x&T27X!3@`R~cnE#8
z?7oh)P=%wE`KmXgA>Iap-QlWsMSuXTN1Ql92NBIbL{2Hb2|#vn!5>3V<}_>$^^V6!
zyUC-I6Y)jL_Kk++{bHM%kdtQsrIrR}7)@fdEWlM1BT^q}P=s(9P!j8;RGJCZCsE1J
z<>h%<e%9*wHe55!OSx#ROML84aHbstQK&hd1kEK~*qgB+XqNy2J$wnAl|9`wvfG<(
zhsf6$CJzpa&k^qdr(WN52H4}e%d>>7zp-!hX~qL_Vt)~$r!CfIsZpLPF{qO|>j^O4
z>lreAR@4iN;e57{$4U7{rU2B{sYS)=R6f2)Hom_Am)rr=WOS-PCH8g|E7#mMQBpB6
z-{n_Tj7l%zsFP}bb174v^bSf<evV7Wy9~NZ5cEr4=<AtX77#cUtY9_qDp7hB<FLx9
z(~2y9GEHR;hMOF}7dck1!!VYVTGa+eZOM)6<&Us%KnZR%)?@W6Vw7s6M(vGKCqkbx
zptpTicaDNvK+1?GA$q`2M`I)xEgVGBPfIH^rtX<91AGa#YMC}u5?`BOTY#Go*W+?@
za?Wl+rK4ou1?uZx_Xd+p<%9Ptw9%~iklR^W@ha&Xzka~(bq3Bwc|=Q*0i%HrFU(4;
zpI+TusVCjmtRFAN`IpFMIJ6!`a7{zw2jI3E8x|1lI5D7d)PvbY(5yz`JFZWHRUB}@
zqw?{_RTwYR5NgLDn4t73rC#QRxP{H(j(lbcIl4&;%P;^>g#Nn9-FVP-oB;f{LEVJp
zIWCT!A|opR+Up>nRHqu+ja8VdZWqZZ^9Op@L}LPoI9nAEk=Hict_mq~CzM?Z-Yq0K
zS(4OvRvZcc9exnLVbe3RcDaMG#%AwvXWp7f6jnDSvGyr}7yD=p6ZIMAOs?%E(70vx
z`Q@Fi4eO~J_KECH@N=e<qa<2h2+yJ07$=K<EkWUpBc*`8{2(wKi9?c>^x^%eFc*Ec
z5iw^e^#@vmgJ)*Fx|KfJ?P-)^Yff2jwf@@=Z%edyjkHY(D-F1hIsi??+l-7zvozxr
zo7~`Xi5jd%R<sJTOk&CYyN!*PtmO0VmZhuzQ5@6a5sFqqcI(wh7h+MeFPv(uH#b`N
z{Vm^=*8)+guK0F3Tv5e}EcWJ0hCbT%;}H|=0^#Q{wQwfAuHZhpmC}JCMMJe>c{#p%
z4k|_oQ`S8w4U3dx;MiYNSFsUpKQY<Ic{O!5Um^?md|flrfzl7BeAmJ2POe^N!yw?%
z|H@!G(Uba$R$_dm_ird<vAogn5RXKR*pkNX=ayJW(-LkJT};8gHyv1T<$|v&!h#LI
zV`8l0)iBd5JS?Lryqw6~7`z!w{YI97@g?(FL-1ssdLadIjzGs<DiZH_N6E&zsdvDq
zEe)=4MV1fza)~eB0D;!_YeUW}KM?Q@wwkCEnfRxyFhW8hJPYS8sDR-!B7owxLD=8x
z)!2NctLdx$BtU6E@h*E4bUD6^CKf)&1=<otP;$7pw9FFvtVv0ry@=?PFZu*bN5-sc
zF<!({#;uO6G>Bapv{5mNHJgW}7!k1ISvgrt9rM;EYuEiSt;3Dm4<E1zV-h-oV2oz>
zMdpT`T2)G^zLpd75PTHw*k`<+nWjKngC{&QafInzb)z;@uvMl#23D0*q@&odpraq1
z{=<N~(4++r<GtI=LQ0@6Sd>dim}MkSqQV8qCdI^`;IAHOt!ZYM#OqW^P)GqA9mWB}
zq?)PN^s&4tb+G*bTnLzkQ|wu|S@dY&o(XRwv`Ll#Ls&*)vxp7bd^H$~8yXG)1g~Z|
zs8wM!i4ImR6TRkn)$);fX#W#-WjW`h&KSDyT>-W_kSoJ1P}Xz-{q$0pz^1XCo7-q-
z9cbhqVqB~nGEEuYYr;C2wuZpg0kV;{Z_+YlGIKXa{jhN2^~G*QTPOiC*J>d-f}V(J
zj%k@2C2K~V3A&*iBEq|xeUQH~a@oyvu=Ha4vFEI@4pseVZ(pt`cY(Tz%%Q$b(|s$=
z{hLM_yHOmu#aCM&oz8#9Z@V)WN78%^B7!{l#~{$q&(e|-1aNZAKO(6b|6#dFV{>mX
zF`HD4RwcG->?R*s2e($mHP;_=%72)NYleK$GgO%Ev!KMP7^~TPlw1UY8e_bGPl$?g
z`}jL4tyU&PT7nd4&lyO9STz}3AAYX~T+{1=NNb#HgBEphS*{9XZG0LimWox^JD*ju
z8}A{a(zGLm4m(-VvY=8#RVf4*Xe{VjC5y}idITbaH;v)4oaql8$a%zP3$2x25`WW7
zB}+5bhr<@FRyJq<lRxbxRpZpfm)NrB77q*yqq4mzK@lEtxkM!q%tnFoGt0Mv%msqB
zPG28m4MAc1b9JjMG#E&sQ&LczS2elMnx=roQWwt0@7xCGJ|U;6^FUPdN>Tm75USez
znNfP<+3pYtF#9clZgz#j37YKn3AlM<o@yL|A_TJQ?FVbyy|)$MkfNult-s<@U0!F3
z6<3qiR`UwP@{~_;&~Qtb5iXN8u|awZGwHvpdBDg?r;a_&QF-9%ToEm(84bjYBBJ&J
z{}N|D4MV1m8Kt{VG9bjgE^QLx<>#PhfEnMvC8DL%8_eNhP!1{q&XyDYBR?d^02yuF
zrNi<sCEBo86ju`rVf=31=AP12-)ZUUS)^b^^@Ig8FvJ#nrC^L3QP(v8$+=b)Exkej
z>RViMPDfJ+?&&dl5o#QRb}b@wvWsEMNIX#rLL7V|gpWc89Z~dS-zwx~G*<k;G{gXA
zasxLWrFA_g(i1(>FZY6jQK}tMCF=l0lZu$&4ia9G6z>iQ{WEKexWe7ejFfH_gC)9-
zyRQ+od@c~U;?onxH2HHp-1_ArQgg^17k@E*9jKQb>b0MQ8jEYNp*iUwyPQfk#L9@q
zZ(hH{V|g|Ya6{iK^><Q6(JyGayaw$KMFah?q;Q3_Pa|dB#!{|rWidYzD>04Qr)}w3
z+U_A6S6wqRwAa-#W5?FrV}>ZVU0aya)sRzp=!EH$q=>>z_0YL1=tb3y*xM!2|5Qmi
zCS%HIJ!c;!nE9&C>}<TAAl}S?pod3Ns=}F+ifonNq1dsdO<8UyQh_k+q_h<YA~hS9
z&!T>`E#ka(cJ8NQy2^Xe!vXjl@5+i{nmKX4D4%Z0{{p$mm25!}U(HFOmMP_^Yqfsj
zX!}|guEyMA!LTP>%(_F-&HC)vz8**(p@{Dan`EZ7p<Fj5_Pl?IRJCqG;zR#O_`HS<
z+hf7~v;;S9YVvAZ6@O#Yg3@8lK|tqY&MQepios=iWk}&9EnrWHYHGd9n%Y)G=)9vZ
zhEl7%q;bDpL!m4|s!e#P7`2@snKpEZt;dF7#cthY!0a)a7NdbNT%G)0GQMt@>jEE7
zc`jc8hv38^vR)~v<X!lvx!wR+v;NQ()D>k(a%$lozg4U4?lYjV_F1#7R)$CO$Y&@b
z*`<8h{PHP%?XS#C4Otp#a6_GV-|?T!_GEjd1anj)=R@WKMOtCWBx?c%d2PJKl_;ni
z#cSo>h^r}+rja{~m_23O9z`gynMfe%+Uu{Lb&`$yWQYUMWUO&@o6Sx1GFc&a--^-X
zJ!GFyf0|3;sc3Dguo_D{Z#ws|z@dGofR~|=kjkNXrDbTSrfB5JKlla{#H1tcl~LvQ
zi44Mr*t92CRe)psY!5Xb)S&kMB++$-?rFB(iVxI`$l1tLJ;SW$<+-BHqbdoVA;Ldz
zH_Eyr<;3XkSrNF~cCh(jl4p#Us-}h%ox3>yd=8Sj$+%>`Y1DOW7KqRN0O2UT19HUf
zYCDY`IZgSLrVMv)AaxEo!W{0Or`q{woU*e;v&Dy!CwUMuQZK;E*&1*BeQn|rQ)B9@
zqux0S3I<RwHOkj7u+b4HOs^h}Ae@9S{tQ-6A}J`M+>9Plxe)(kj0gUd>`<wZsZLgy
zHfr(rVKg088JQt{s3T!XJr=Lrz;d0K`d(%2!-9w<X?ETpl8&oL>h*eeVgmW3=}@#z
zCcgM9SG7*GNg6hpalDu))e<b%ztlWPO;pqG34UMQLEDvd({0rgXbw!2$kP0<lk1N4
zb?~MgMX^vA%eVt*>2ko!7%f66>_-czT_fL@iH8AsPWQ&D=qoq?0ZS20aIEc#n>QL8
zgch5Yq-NuA@GL<tC})c^_YGjc$by{uBkstuNvhOk$j54dNZK0{f5C#ko9V7>p=r0T
zsBD$G1sFyfcp&G@|En>Ve8uJ0N>&d*6xpN-Ux|^jm68)iPhj*iXCDycb$2jZ<S5Uj
z0p~#ms|uiuCy$<J@fQ+~6;yyw<WIwt2Q8A2Dac}L*BxOhBy8MeGg$g`oH--`pV56_
zKspP*o(Dc=dau-&GpSWa8a*-vZg#0hDMAUXBHONU$74EC7GvR;a=tgP##=_-+%Oxr
zM9b+!zIhx^c?;3M+1ef1KGT6M(6n=-aftP-iHzci>NyrH_adx>ls>@)&U-t|xj1n|
z-zHU*FpprM-x@eZ2I((;GjiY<f6#q0WIN+sTCph<C>A&PqF71o=8?K@PLiobenoBq
zL>P;pq+Hs;C1>G64^Q-!hvFo+!D@(XA%<h<k-jnN9jZmORAB!=`2gzClg-Vz*g}X|
ziNhVpnLRZA@bx#qlv?N!&-h-g4S1tYXh?i=LI7CWgyxlmaEL!cW%)!`_h<EIUq|bj
z`3CCIM}2=rIWuz~t-&w<@>Q^GE0$s~t-caC!0pwz`2sPq!sayS{ZvD8Lld!xq+5vG
zPg^j!J@4_@syo~D5H}hezu45%2CgmLBYEs%U(wSLQ@mP4f10)R6IFy!Ksk-n9cd7n
z_Z=BtS|1CUl}7)S7M*h3ZxtnU7~Qud!%j?vV~i+cKNVMRSWRDf?TMXaQdbq@Nh2j`
z>aCE7NzO^eW08IpVXLG4jc<IERxn6rSA0(Cr1TB=Fl1QTy!tG$^e;Ozblu3HO^$?`
ziIbEiLKDzbfz?DG(*5I*^z^R$GxEJl_a#ylffH99x7z#N1Sa2Ccl_gObSds&!C&Vl
zqB%J!o0k_r9SnI`T(`E}gZma9CF=K0S5m|MIlL088_lan4um_xtNTp<{?$WY&lcEs
z_H$m_+wa7&jnpHrrA4QqkB%1Y+Fe?s<gnPsR8}T?i0)4Z-2aand{QXmqxCMv_Kw(4
zb!VXLTjg#Zd<II6kadS(v$2HI#g6Y0K1p(%j|Tqg2mU(Q=X`tm-(Q#dh#n25AAP;W
ze}@okV&EpgrRp*xoI)pnKnQdmxQ(emy;k^5MWSIjbbJOpFxmtZK9w{$Po}r#$-Hnq
zp?Lv;ZQ{qR=BV6RC^%Mkw+{fL2va@U<Uf=mM$`mpWf77s@~F^aMIUw!nCv-7+1eZH
zNYhZv>f2-5D2!E=PQ`r_r^>gMZ9mDI$%~r`6|9KJ&1H{xlhDdz$OjCrBRpA<yPl&?
z^kIv#_Pm|bevAn3)zNnvw(Cg;9<AmDzo_<RBr50Y*_~*5cDgH;rr+vb`f1y@??kw$
zK_ogsLbm5jSKH50+4;pekuKRu^NkGIM(#%0_BAichXJ{(l=(8k!)ooKm$diaUo~&J
z6cuc|%SP2Nm5@sV^k7QHGgAx`6SBMQh=7JZ6Ho8w?|fH6wrfD&d3#;n<0|G?bGFR5
zDJpwi>ObRkLxAbt<~BCuUQ6IqGasI*q^n)HC`b?(;sy``_-Zto8zUo>r+QaUu}y%h
z#6CX2*ULiMSp*c5ivN`Q%N+vV9j+tV<uEKFcVhJO$2M~|$E>0H4tK#bUxAQmdt{Z>
z?SpK|(A*?$&JLD&tMbo8^Mw$K-f&Dw0QRj@vuC3X9`A2iw#1>~(f63SyTQE&T`us7
zWalz8cd#x=RY&ytGabk)ir&3M8>$ZD0VY$2b)L&(7^GB~9N|eH>L>-3=HyFg@Nki5
z^g7Rv5s=*LkKcuI&*wo>#&A+l+12CnP<nlSvNTLa(b1iB{r>KkKhEjiEUEt>gKRF9
zu5j?+T=%8(R9jHFHWM}}S^g#X>cSyVccm?}5V%A)3Dj0%wJ(HltqoF1>yHnk24sIw
zt~52%xinBFlipgLX^%VlYx)<XACHN2EHp@(!oJnVHjc$4CFjg&@GCur*-*hyH#5Yn
z?OzSA@9;(rJdoEQfyiB-!?o;yU|-Jh<Y0de-tNmrKR_`$D$gp|+8!#cmtjpmW!4{v
zS&Po)q<ad3SgmPQn#Rm|9*VEbeHgkxw=fPACgEqG+#Uo;GRP3~7n0#_m!9pWDE`X?
zTIn@5nMsQSh7W9^75VM^>h`K5x|zRzRI(e`Rr@D$mz>=A98opA25x|OCO*t)33lfP
zuGaBs|A;er+<0^F+E)&dM^P|TXOY?8Ptb2ky#`-)B5Wydygsy**gUQ|i6!qA+h5<d
z^8=NY>k}MeTZ=PUy)Poy)j_|m=5WyQUG?inbtt;sze2sLyaKyt+Z+TF4PzeYS*a`5
zW2O-bgc&MJb+hq&A5P$n?onlnor8+!Y=;D#co%`g*Osw&ybUX&cm?3>1rHvP+412~
zMXtMHaPyb>CydO+akBrom4PJ1w(yPB98n1B;STBdZS#3U!a*dUknP9TyInrr5cv8*
z<HCZ5Ms>Gb|C__2Qo^ZiGl1!$P}{KeFq{<i6>K5G<r?Ah$Vm|+!ADp55N+;66UD!J
zUD>#My+2*sGj$Y?_v5dK+KVXJ$3kX<@Kn9*Mv%>+y{NY+AB+_e?TBI}$QdK9&p+$~
zG|@aP`aFUi1{1z)>Kx>fpW2JLO{gRfHeps|*W1+1)ZeGskNFhQ_fR7QphZNe>%HD*
zTPUXsdC4FaQ>WxeK}%Bvi}2D!#4)*?@$@2?MUxYQBd4MXluqmiWOp@V7_ne6$&Ri|
zeV8y&ngs{-C;Ht|*M`#=MK`DPh_Lf_F@+ZTlUqUu(bO9dw_;#^h+gS~>hl7t<EiF4
zqJA{ne(0KK4|`6X$Bd90SLmu+Z`$p$IeuGU2Lu-wwZ3wa#YW_m;<@83s7qN}Z$+AB
zc7fJ(V1R--3&tm&|0~}nR_LZ-IweYF%2Kjn^)d<5C6S#Q8~-aJdD~c@xm>wP>uqMd
ztkX#!SDx5ZI1eQ+DeDZ=rO)`PqcI<g4ZQuu0@@a0Wt=kHF?~lQh<a)ty}<Pi(2lpN
z8jAkil1X_Xq<(d!sMYqYMWa54;<y9yxCo-9cd|{kuq&tZr3{O;{0~Z>21D|-=XVh#
z&G;S*Om(R4vEPECnLRaUUGbR{gNx058rJts&uE~f==Lw_Ow2D~LgL+W6Z8u_{16}k
zgsfjTe>g7-M|Aa#-`)gDmcyK{e90YM_k@jX{{nzYj-={5XEpT7x?>2R6TXbEP5bZr
z#=b+kn6a%AE<A14rtRKx9M66chXm39?L1TM^jf^)J_0s6LD#RN-q2#w4>Ie%hVhf?
zyOK|`!4ojj#j>Yr^><(SAoAmknTe1?kqo1Dyy_e0ET<Jv$7kmx&3e*v>&`P*?Yphh
ze^AfzMCyW?Pdk7p8x#Z09y_PG+aCe#t;)Ma{BDZER5n;avd$!ZA1wb-MZ&Q5u_&#2
zwHRP4K*CCDHc#Z@LS^xfHC~Yp`7~r@e2FVevDXEJjc@sCHIC#$3vzHBA()z-Z3j8J
zQ6{K^7FR<qCxp?<I?2fkCo|m_P=IO{kn=u%QeiQbxs4>)%7x-hP1jy-(}1Iy-!K+v
zy%n6>Kxd;#t74-PSr5;oZ5N7f$;~Rwi2?ARK)n_xeD`QY4(MJAx8nIyV!Xlc?8{2A
z@ROG4W?=;9<pSxkx<cSt+4%ZprADSa6~@pMFd7IYP<HBdi<vkcP9bZptfJaN6&BrX
zCa<;dtnp!ay3Nwc>ogkc*SROYP7n%P5mwBMm1UD7O_)X@fH*&?0JgUPf(Wop)^30f
z*k0VvUeS5o<V!5ULhOy)oYeZ@hTuprg&{vmU!?q`lPap$j-coF?&h8GxLIQcx`~xy
z1w75A)CG6vR9mp%W(n&9D8qQQEfcIndoBt}IX^X%i}0)h6d67BL2J8$pP1zKc>mzd
zr$Ch<=|E+qJP}kS@u2=U`u2R9L+K9>zsEB6OdSH}>it*)lE*U7Sr&F8ekC~iHLXI4
zYwcpU*2;>m(aL*HqYf&iRICq7M9_=q%@mI~Nwv_UD&gTbO%1qWhSdF{$k}BEq45-U
z9=Dh}1mlTY2G*R67{fo(Td+-SUn!X3EMR$9@<(ZWg6(m6rrSFG=QD7L<Xn^NGL<}$
zAtyVOwAC8EBf;mv3)v=UW}JlRGA$TutWg?w`bKi-a3Kb~1!7hVMMBu(RP*--4{;-^
zwH^`lJ>ozYfne47wmuz7{J^J?LN2cyHSFZ|He4kFf5iF9B<2;=JQ&!o+_Ng~07zZ9
zKiB-y))F9%_Ee5R<xK#vaGD~s%I1w_;+3_)rQT!Tf3thZjpY^dl-1&zf*j{FZK=?`
zlItiLlIPV}a!O2taPT2TGNT41Vx6Nid*5vTyC=H*8ahu81OVUy`ad_5**F^8|MzCH
zC>3kl{ojnuwJw9GbNCcTZ04ebdy>NW0)c%jP@G0n(org??acGL%L>6<*v~e`4dx|C
z^($~~1Jlgq<iljT&x$`SjL;q78|9pxkG;M9``zUyS}GX~Dd>c01LCIS9bE*==KmyY
zo_1-a^(6qIevAIM-@p<GVI^XWdi5&MxK|(XDVUT+b1#YE2&YRYZf{P05VeQDmKiw;
z5q6dxsAM*y-V6g3^DVYP912CueQIC&MIlfNJt}du140a^zzM`w1X@5psJn_@!5%*P
zOu%}v5Cx)jUsCdC-J+IWXONhpR=#r{?Z?-X$JQUUKm~KzQRN+wCu@!_AybO>7n~Ea
z>=E-eJ-e#MfCwFj4My?o8jWTdCFJrHCrlky*&aQ0uFh>eh53*IU8rU~Nj>+pzC)kC
znUMqRh;F2>*8qRbpaaj4ZFV0w*(%1!w6fBMPV}5^Y;jH!)Nec1(4(hb4)w3CEDrll
zAX%@+?I%6J)LvWUkQeEnR(K&S<9%+3scAT)knJ2i_61Mas>6{ns?C&*lZEe#8t$xP
zQ6WqVF6E_G3m1jU0RK#{w!|Yo2p!PIpJZ*-$yQUCq$-MSNGG;8&_LtZV(rq*+zpsD
z+Ow)r%ruoT3bM2{h96Qs6UY!kZqd?abB`!}UDyF>D=osxwZdylnWCvC4dC(SX!E_K
z{mnSGr_X`Cz7DiQkUAkq{z8ZZ2XtbvoTw27f-o%nqwLL;DIr1;XKvFx#o(?}*6m)~
zoEK{lJfr~fH3&=0a>%h#O_6f`sOjWM+Q&(Nzk<R_YC5z2#O>y)7%|n5pDVi8I}F*H
zZyrh130wJagnQu>t};j}ef4ZTG5~ZUPPZjWD}W7k_|VlJ1Rlvl;;Xigt(o`qO`0U<
z{e1b<fTXbtLQ}m>N_N-mm=2fIgjnhzadLe&i>OXn*Rrsfncc#VOA^t2&5s_vv8OqF
zW+aw<ffE|&I0v>ae#BlF)$l=lwpdTzAjepAVb&cap<bB4WQ(Q!G^$|zqy~#zC#kCY
z&sAHgc%9{G4?+@qPd4E!rNi9~&&xblF>~&P>Xio6gnNf?BOKAw8=@ne8>aiILd@!H
zC-QOIe`HRbEkhC@>E}Yoma1;Hq=g~jm9ZP}iKTEN1i$XdydB*2!VBAr=j8dh-v>Wu
zj<E1qp7OHA);3|Q<fKXe!VslM0@L)?Uyf&^^*!>YSvXOBV9oM5Av-XI51#~%Hw$T}
zRj<6N@l$6`dKSo>+ll|x#ZSi^r-m>gyna_Vmviq&=H28Y0<$GqtD)TSBZ=?*K5Q23
zI>WLg%gE5f^l^#sgfG0y=?ZxpS?5>h^{m0NGtX=G;;(`?cigqKpnY>+F5SC_2?qhe
z#_MIKV$7o5!7FS&rg485H5tK3B~TxluH%fNtkV6#QC)n{lz})HtweoP|NRG%mc&pj
z*13vCKgcnXeLLoxB~^_mi&L1w(e4gQ8tdf$q@)A3rr#{#008ni{&SAQ?l=4C{JZFG
z_}`*|N1C3t8zM+QJ2?hb`3y&+HQ3d?YvO<_$%@+8;;}eH{5AMy=Eik-Vgc~H>#rR<
zlhc32C5odq_x%3E25pYmnwXxnO<Y>r)>^y77s9K%HIT1ne0}A(Y+vGi4$`7!Mk(Ox
zYGpRqCx7;pfO64B2*)3FT(XC+f{-0r^*d&7-LKIC5G=d1AK6cvRz{j~8wP{^kw<%|
zts??=Y43>i7MEy-!BxvduAJo9M~<L3eW2fu+>v$HsHHbqFiI2AN08;{fQ|?TNTEkE
z!W^V-qXk08?!A2k%-aPOg{pn%6ZdtSQ?+(iF!5uBejtRdnIM$X^BE2RI-v<CoPvLO
zzP`S8`J*P7E!rXO(jc1feCXhUHpCdP=ZS^I8+6A^X<FNgFa5A3Jkr=H40Jbjy>D6}
z9dLa|ZFw#B<}ehwfy~9~lX~Zl?)aSdGlUl%;!W!NAv5E~*c#v~JmbIdaE7+jx6RH&
z_BB={@Uby0q5~q#Zv0hI$BVj^lC$Q59vaL`bKPZ*bOM?|8xU#jn>7`9S`3avyXx|u
z#Cy1x)7jFu{EZFp?WZXW@fvR=`L&M*f3{!-L<W1$9T_NfA5i%!zHa!n_W>wo(Ltif
z&IZzTfoo2or#KzK_@p?^G=l;)D)_6O+TYU2Qd@`WPj7&#Qr`!D5O0r<*U})e!Z_KJ
zh5-|QOsGF)*hIo>0pBLXWs@bYrdk+Kn}IV-4bR+9_B*D>O_5~9)P)lf^lcaG<zCeV
z!dU<OHtOH5%L>HpikjZF&e8F?%8Btb$wd&D@puNu8#!5|N1yL0kWDcGBd@a%tx}#D
zK^q9XyF1LUDfRmM^=L0ehZguE2yC~M12f(ISa~A;V+10*$b6<t;UYt-JDl?9uwH@|
z<p9N0^N#srWw)&=HIO`a(7Kb8nsN{k;XefClKpEaDnkoNL)(0e%m3Val;X{N3B`($
zI3??e?(OP}p8W`xgIU#|g?+Sov+W6-HJAK8r*=zpsf5+j<kI9>=74=*22!Q|wAG<a
z;eVcWzZ?_S-(<k5dqO3H*>9vCZM&wI3(Sq|<qXGwSz6$m;xsu}U7lgLS3;d)vTw{z
zPhLqc-83^uJOxSs3}o1ioa0G#SIkE7$XAG1m%<jVE5slfJqTnT#g|%g3a@<xK$Jn!
zn5QNO3as0GX>c$%qFIVP{u#f)cpfh^LDkS6QBdLd21@U{M@HG_nd;xj-KD)~;f6ke
z&&n>?192c}KimvaURaEj{o{7dybcN!x1#31Z0PWJaN!p0(@qIda@dwD*&EUH4;)h>
zJ(CoEe4ASyiEhdRhg~6q8}}5hLXqY=H)Mruma{oarQ5JIzVZ4v@hem=X&vy)9?c5h
zArdm2OC2^g#p?pLTwBu~0^9HHY>(KF{)__YU<fH87}lwA9`yaVSjhr3C}bW@%1J;5
z+J*-g=$UzBg%1!Gh_FD1GbX4fh+_8Pe~ki3#P6TxS$=>b2OM0R0UB8*7lPy(ZzB*-
zDP7^3-=lLrVN1c7rncw@#@6o+1|Z#aAH1rBLi-04sI`v<Xc_y`GNISe*o=bOK54t?
zNy(|nSZ@B9S;G`jXN6;>pf?jQ_ZJc#QY9?{@=1tX&?j_ffpYxC-3F7VNPZM#k71yU
z8IHZx$rSV;A1G_asg<af4h^WD<2=8vV+JhK5ryBy=eIR=&F$#Du{N8C8h%eD;c#QL
z)9l`7AOEu{203HXi*Mla)$3veJQ@UPDH&ORWWd3l9qdTR{^{iN-FgS%FJsJ$ewZBl
z<hcq!vC~NQkYw%Fc4Z?s`(aGq4+9o}PxvUrNUR&pnh7##U1g#zQ!^eB<gzwu6UfZA
zkh`$JnI4IrNRS3Wq|;|TKj4y1@{9P4FYr%!yi(rpP^Y-tM{u48PnIK+h>z`cL=aCE
zok<-QX9;CnyfI`(n{_Z2xXhZSkZu7?HuevSf1~RBe}sKyR8(F3t|AD6bcYNK-7g{?
zqqHE>-QA$lIZ8;kgc2j6Al)q^-3*=5F-SAi3`|_^$9vcM-~0Wnwa<F?IcM$j{GM>t
zO&NH8^eYb_Q>8b+X4)R}<{R0&>d6QDOI2)2^3MY@fuH8o>&zM3&m2#Fn*5%&t-4RH
z9sEZ}Lbta3F7SO&D54vXA2cE-BFq!Hc_*Ct#%8GPGsX7%hC%|F(8_kX>GuXFR^p?F
zRM8#LXMe4LrTyrxvv$j7)LX|5%daHFZ7-E`g>$kOlk|PlKb+Yr9XjAueN6gQ@-I7U
zFLEX&p)KGUw*pP;hEez!Ib(a)GZqm+%f0LloMKCo=9kWjbuGN`2TyTjZ&`edvblw+
z(tbMyl>z?shr26A7HX=R%S=a-p7A3W7|FXNHeT+TZyI;RIs=DIj*A#^h&L}r4Lf41
z9iKHSQFlZ6|Ete-MsWE&q#rd|_nA^w(0SM(cSe$<1T`}Kmlu>9tDLqv^PPqUrqI);
zA6sAZCHu(VJ+oy}*;W5IFpY75#5Bzd-SJMb++YewA)KF?s<4!I)RHMNA13S}E*R@m
z>F;9jv^u(%{rHdXtNpE|R~<ighk7RaMZdn(q<Q*{R>+#sVuf9AbK!A@ssf>5R>pDn
zZdCID??|h}{s$LX3sctS?o6eXExV>gGCH+pU-D9Ck?2Yj0@nYGAD216zn)}_%=Plq
zIjX-(iyF{uRL;Asv5*?cFgHu8tUeH)6<cEXVShAN@vYclo;M48wfcpOszw$hTuhW9
z5;yI*-Zf`)AU5;d+U2N#vi{Ffi<tNob&#>?j?sMdSMYOZ&8|1~gzAm_c>UJ$cirpT
zGE=%dn54Ecjpw63Am^Pr@gJYltmY2Y794-3lh-Ss`AL;-3OS-B-eQ}Z!naOTt8KC)
zbi8F3&5v8}>Yg7?w7dUjmq;DwCi%DQA+GZ?;^l1YZLqRsT&G?O`xok~vEzZ|T+&0J
zlC|A~&zTU@X}Xd_Jd3ZXHw{mz-aCjtEjok!*VX;u=SRCjKE9YQ5E}~i;l=_}B@4&k
z*+g-o;F)%1%528H5#{91hW?Pcr+)<A5jgTc(5YMxp&gmd{X%mf*NNxqi?^!>YZ{6j
z<#K(9>@6B1Q3>l&yr$bsUOZf|otr<7r)Fb*9iPEA8Wv@lkouc-a!L^KFCzW=A-C_+
zil4$ySMs+JftnVHp9Y+|)9K}8Eew~M{(jy&)&Xr7evzHND;Z&*eC{1BudjOkC0LxX
z#Kdzq_Jua;MP5uO_w|2o?NptAYT=dfXYU0!#2p8$XCB)|{Md4vfOKE2NysvXVi!SC
z@-a)>!)L#x=m&oEP2zd3gwU{0&q7$pwK2R;oD}q~_Icf)_Z<FJ_=4yQoj?mdtC%~)
z<!o_J=U{VvRe_9eMEhnSqF+MlJN3Z$=J(;fe}5}gHRn%W9(fUna&mGT^D*)pI#zl7
zk}7>P@)97)Fhj&HEzOiD+;L)%)%;q&+-b$7-l4j+vRoCNlYlYykoPmN8`A+$05gH-
z?ElWJUfF8{ke&^XWYm>~Q&>m~oGk<=j?)mY7F+zlv#tNd6QtIR{YRJ6v^lON|In<7
zbyTo-@h6EJ=%L4<nTExa*M@_TFb_A)h~<hNqV16n<Coc0IXN<(7D7;RlGE=ijX~;6
z^?UrU{8mo4TGb|I>`bMBsSRg4L&flFt1Q`iCIql~aP80b;eu8-Azz^Z!Myk8>6K1l
z$5?IbaqS~ygHtOb-ps+MDYff-hpYROEfzC!c97<#kx48SHQyce`cGc1^5Nzp4Rz}B
z@2Xrq&tHX-+O1y4byz$lpx^Z!xd<im(^Q($kyZK;btnDer*BFiT@>Yuc1|NM>w3J!
zN>1**{{T5fqH5K%<azbq>$z?ZnKWJ*e%5+8q7NDIwPt)?Ap!qoDJt-=2h<Su^n&g}
zU_P2lv=8P;p)x$%&}#Fno!oex%r|9O(1Y~Ut`zGdP|f{?w7<M_0sZH=!zt}qI}@Vk
zsnuZ>-`lxYmQBll`!eLMeNln<YHpQ39K3s9r5v*ukm*2dCi!)CDXkYM6AJfr)7L$}
z3)ZoW_6`S_nw({#;}c1C6l0!UuX3x{=+HgMJC7x-4Gnr%LG|!ih2MsrkU|;nbmn+D
zD`n(sF{7)>9Q-aFiG@*S(eHYC-PkPCL>!B!92N?0bh+<yBzed6#B5tkxQ#X_h|%CT
zhP&E5yI^Ac5Dq=XMS8C19xa;F%A9+&YsQF;Kic_K?)cuFaHcMaHL)pEVd<}Lb!MG*
zzUxRQW_TvX9)6hhpYad!J@G9Lnd6~lf;KJRYu?F@ug<QIqKl1Zr`?B{ccUc{2Ff3~
zmyTQ&W<6`EGJu?9Z-j!rKGOfCUDOq+ro9r`Ofck2d-3;{;<3f=@gzB?N*(GJ+3~(<
zL@<|pI%B}rNJih;$zW=`vG18?_v8D)1bRZJM6A;+an*Q6cv#Xbf;_h<5L)A4Tx8wa
zayOv-JIzxr59GmuXg%+1c{x<EEqDnWT1KVa-VRLk{ZTKEv7Tg#5z7(1-Gzj+LO;=q
zPiH1F5lKi$U7dr8#}+cT><W80q&JBL?1~=P$U8lYnx~S_ENkIIpO@Ny)S_M|(754i
z?&FQ&K>yQ~@%<<Gnq*#~%hJ!`d!@dN+@MrN_-t8}dAQA$s&#r!;Ch+))i)<vPQw=>
z_*JX;5_Y578W62wf9n0BQJ6Y})Vzbp*LGL!hsa02(}xvhNZNl)lkuwJoNI^a3dOVB
zS)gUc;*9TUY5@%*Iivz1Xc3HeoaX>@J+mCT1}?I4(9mmE6!E0^*Z!5H$L)&5H*Z0`
z?RR)-_{XuzpLzsG`#4aJTw&U7(VUc+_ll#f)e|AJhA}cN6)ek5Wtlq@$Fd_z{d$I{
z9}>+cqLXBLs#+xvrp$<Jyz_HAcoyB>?&213l8Lj*`Dl%}=Bq`KvuH%m<Ap+`b0KoO
z;BnQJl(tIzsbWb!HCDJ}S$gkO`M}lLlBW?5Go_0$pGAWo{hzGcc`|N%|G|R?4EG5}
ztp9_B)4|8~KEvq$7xU$rQuiU^zXvY^x_VZ(tK~HwMJfR)sb8f(a9et663<4V{5>?x
z9o}^=bXri2i>TGSCgF)9c}#HmK1v07*}g|D8OimzX@A9?{fFUSm3Xgej9~^>IdoNv
zBEbTYLOijlUWp{mw__d4NYXS|ewiTmL+aVlK{qMj@0~p)|9zsDR{o*_58==)QD?Qa
z6xU4Q>!Q)(Gxe3}ADi{gCZq5GyPs;`%)DRrkUo2`GH+jsziNc7*8E(KJK}*G3~8p;
zeLBY9pAC+;|LUV8{b|qCK1d?XmUp?4_DQbX5RpYyBUGs~0Q(I0e_3FYsDCFpM?82C
zyz}sXOmgsb^zr@RWBdOO2g>}dStD<rz9U|vO=*W;Ru+HrsPFrn-N#wH*>QaK$LGtI
zapeM<Ut3(vV()7sFT}_j7A3_#v9Mq+{x$?unv6pB_PVfGC^~l!>VdsF#i2l$%>W!0
z5boOUnTxIHI^Np@V`Dl{02~Ti3cfkTYF*r4af7=H!%m|sz^Gk7I4%Z+wY;doo&$2h
zcctX$I#kOI;1q-g+*}1f!>1r!hwJE*PTaqgn>q9-$npm8&3elnn}(Z3!@;+^;Gdv-
z*I)wF{Tpug1~-k4!GOeZmv`3Rz^H9Z>FNJo;AU{|q66HSdxw)d1!I4pRzc$MQ(P|y
zw|#mImO0%6VNbHbNYsb0q^_O6xL+vD`6%`fa0<nuK)6y+*jx<`t_?<AIO6u8_iw=}
z?(7uXak~lt<3zy7tCi|?%y~8leS*xk4!^mx2H|3yaJ$-&yBO<m6dZ(I0OM|O=OFAL
z^bS*VdNv5cZm(mo<T&gpYI6P14|@U#N0H-@hY%cQ9X$>JFM(03sKZ>``8|q|@YRS5
zz_oS226kISe*ss6Grw4uz%8u5fMRPfpqOiKFsAJqe7ocizLh=#;gZ)ItH5IO-j^tM
zENbkm6f$^S3W492LLl4l8W0F~g`R=!-lA%%x{M*#U<EJ+eQkxk^ueKSUSL8;VPY*1
zur~-Mr5#qI07i#8-3BeQ;MN8p>*&f|wCTdxMeYf_qq;)@ibLbDSd@3^`Yt*Mfxftd
z{ex+Ppr!>^0i7sV#!|u^T%;Ppb8&nDgI&Ynh>PEc2ss@5G#L_L72dUbae;~hYlmYm
z&$}vn8^CfXg!6#Vgg0`W&;PdO7R`Y3gntErS|IC?N;G`<aNpU&Ijk!QHU>&>K%=k5
z_^_2*4Cp-w<TM}dj8n);I)<A+o;Y=;Pli161a}2E(t<+XE8HU=>JI8-##Ub3qLy$+
zUd*K(81%Tb0t{!W4MM?Lr@8;xBoz`YT%fPu7b}diAd`3y2nLbPpGuzxo!&!(%a=q4
zEni*;4fRi=zJ}$^hRL16g8C-H!mp256otdP!t%n3pl;;~>kTU%3xB=VjxlhteMF4@
zJyi7z@F}`$rw&1(yixSUYhQfJBk6p#@To!2#b;2(zL`6r-YiybJA8+Jv_GI2bO`JC
z-Zlzrvj9P*C+!+XZ^e+LQ|nkbbDaty)%!c<1*3Hn1Yn*RB@bT1OOSxCV9-u-T=ci-
z2+V#ZNL?3q;e$oV%k-e?IG`sH3b0>!2@7&nS+Q5}^&`<Nl8#n+gb&*a=oEURAl>DN
zMwNKrf4jNJZeB-ut-_#FW%ey-JF(Q{&FS@7xO57{Tcu@6qH=XL1b4<|GId@D3H>Z-
z;XOJWWqpepqhxi(1!1rDad2l)ZSB!9Dp%~Vb~hj97;+htX}yW6MygJHKrJPNw<O-A
zV0J`Kro01jq1)raXtcP5&)}eCaQ3YnlZ2TwGD%S6ZhAoscZ%DqiF$0gk^+{Nc**}3
zch^$)u=(BbTKjw3fV5IbLz}VYz3Pd6DcV}w1OgIqpYAdZNqhAopj&C8unGp3l$+Z8
z-5rziK0WW)xdp2QgAYRB_A64bJ2=nv1DNcFt-t0dcIa^(nM{=Dx89afr7e&&sB>eR
zxmG#Y+#!<a7(O01(++{zvm?<PixK-ACBz}gT*~Hk&d<W}%r6(Seq8aStvDv@FIHBq
zo=6@Kws>OEXaeUrZ{}1$<?(UT2K07NV%t4X07EbjXj7)H%}BT!JiUJaC0X?(@JXoC
zcp<j9T9%cDaDVgZ4|f@T6qfhAhQ?T<LVFy~4viyiF!-lh7TGD<AgfdXmtEYlH`NST
z-|mk~A{^viqyUcHi($Jea;v0oyy9-<>f~=zu=mJFpk`9Zwg~+P>w-Xcr(bv|QUb7?
zlqa-wg?F91DU0c4dchG^QPDea#T^9FsL^cx@mCIhsV%{5sccJG!^1(y_DUS51n%<{
zwda|G$I02^HOjeZk;M^I_rXqIPBJ}sbA=V<eJ*4IE|NT=c|X6=Vge*qK%+-_20PyG
zdAbOHNU{X+gMVRojCzTSK_K@57+EMitL-%^DFxGd?*?Y-DX?{pvp6#{aog2~!D(Mp
zFk|GX?*t%WAwq!<?Q*ec)@u}ZZQChnsL7%+a4pwi1NaU`95-T05b_DWcrKj5#ngcg
znn>xSb^Qu_JJ*(MMIsyRYld5*6{LZ;7+ha<k_1udMJ4{7@N}w?@XN~6y6rvLAPITx
zyUPvombH%#SI};b7^4Up2f<7@!hO6J>$H*oR(N9a2dg)vkvj?+YF5`bOjxw*s_oRu
zOA@m?$Wprsr&i<pXKN(?B_y@v_~~(hO8v;Zi=|L!eEw;fXUV<xV4AthH8BO4G<8(~
zt+s^Yv(rIv7*Ie)coYcoE+LIeL=PggFMk{Kp^l_kzXs;`v5%%-)?j3n%u{-y?9Tmz
z?EjR4mJ!gZ^{k9u?X!hNN0q}xLoDJPlE?U5^6cx(UDSBLF!g3Yv~*`J=}xv-FEJnF
z&Lk@pTr#srfvBm(o;?9TyZw=J&F?S>s0l6b>DrdEPY9U4jgiXL!y!ez;5VmJ_gi~#
zbQ{|<<rgscE5%6`!9>9k>soN=9d^;$*0bdYg-3!*+M9wLwYIq;!`VA)1)upb*U@mB
zd{ayKjA-+7wW#pKtX*vzYM;#@EtU8~WVixKkSM<(#bTpjxV#QXo1KkSE%;-FaFCNx
zAZL^Y68m`(-u~g~&L|;~^Ql)&W3C@KNdpV^eLEMBVh`e88rjX%&Mbu<ftGl9U>&KY
zAK^`PYRH_!I?%{^PqQF<Y5M%jw?E?@Nz9R`9sfXDhlhazc1GC8d|5vgP}F+S1zXIq
zK7Ryj(ZS%*Vc5D<_;%ROcw)d4c9;R(C-^I3?J&)J>prx}xwfl`zW+n>Yxlj21)syN
zXA96gb6lk}Iq1gu!{KdM{<!z05vVQ;E$7FY;vpl+Rxb5uJ+#wXKh_q2ibRibFvmLs
zd$<c2>eTxDheRNPoNWpzS1JH!P4QO3yEl8v28uK`D`NqGFqhMm#tr6FPP+ug3c1(B
zqY|~|$gnj?1J^QlGlv<#9+xOvFA#`#BwfcRJ9444d|mVRsaBsPTR?zg3M|<r;4SnY
zcJXmxoe7{*<9o~y-f91dg-NxV<nYy=q8Pwc`njaVj}#c+V$1lsk>YwBVO`W>XFroh
zl>J{VUNJ_=VAd(t^@RI-iFN?NMYIQe&Q|h39TaWPrsF!Vn}rfUz3{q18wT^mB{Itc
zPW$`N8S_8yUeYZcb0L%w<OtaIxzIk}b*dc6dQ`rxN@#)M<!;bOGvQVbf2~6&Pu&wK
z^4pk1%M{GyO<D`fn&%E-?rVdHlE^jxf%zdn9%yd;ZNKxd7*7|y2m;A{M$~_t`$OwF
zy?5hdr~O6sI&p!NcxHdCuOxws9!XMp=C<aK08Vg)&Equ9P+>Edy8xA^s$}uIM`WX1
zG9z!(RtB-32GksZ;!NYvo{IqMHqUvrz#g8nT5Xl0@r-DDOUQ+>7qNt<+?&goJ$p){
z!)bkOv=|m1t$~>b+qx2BDq;3*s>cUD!1$$D(k<UuBY*hMD%=W+S=Q&H8@_~`f&6}S
z2lbQuPdo3j92}M19a_VdI^xHB!D%<6%Qm{)5b5O~<vI4FOCLUe{&;`3U8o@<P5C3q
zWd6tbaz0fWO<s`j?A1(ca~4lCVTEar68{QWo=5zUAEtc8`%{PQsG~FaX;J8lcJ;A)
zL2n3d{v{|{gAHusQ?-r@yd;!oPgm1ElS8&ie<117ZOR|S`Yi8DbVdC(0cLF_(X2Mg
z<OhS#UKD+MNi-0928#`imX?EOiziBKJzeuBKfI170^nj`hN}k%cuKjqcxE97fk`m@
zv$@0HeNYyCoCRJR2V!&O*@{ndy-!C#u8$es#Vh^$QrsnQ2`1Jh<A~XEz|3}G=a<Cs
zXoZCGSS6B>yaQ#944^04Mn;oHuJHoM-Fe0cQRGn<p+_kn8iXdCE)`zWKN2$7wGRek
zsSSfC@Z>jZ>cB&RH<`@m3NDoI@!I&{AbfzLxIj^ZGwzR3!$@q)ItSzk*pihJx&^vE
zB8p0J$q!{gskNV5?C)MJg5GKG5L$LdzMhJ)lm}+{qT};9?<~OPw6F92E4S>ppyzMM
zGqTB5I*KT#>Lgj5ZotZS218&w7LkwGqDrzYX0b6I0?j>d)pq3ZV?JU!0H}Ue&rhWn
z3+m@)f*cUgx9fcnjucc#ylE%j?YvdI=$cADh(l^qD9ZKGq_wo_Df^myimy1pq&W+U
zOc&_BxLfECIZpq90D!dVM!6@cJBf&-&C2`?$B+H6`tyH)6PW>n9A_c(ASeV%ke;xk
zkzJlXBX?A{9ftK(mMYKnOP_?JI;Wm>m4PQfx}w+5w+S0}iBCT#GUWF5Sh5G19PVtR
zjk5DVjk*}!tDrNno0rjnR3<s@`bcjhVFQ{*0&nWu(!`S5zsA_t2L03~y7aV0zVC^m
zLc-@kgyoMEBVsmDY<+!|Lt92iUyaeS1G!*4XLe%it@ZS@L976dEQ_R$w?N;0fc{hl
z#eL!YT+mP?=)y*u7(BH6PUQ<1?h|~op`)y}M}Y&|(Nleg$&^+`_kJy|+KJF-TdxcV
z+oEUxIrMt=Wy&9dNr0grPrgbR_7Zh^P8ViSfy%A4I8gu><!g0pS#sj`e0v6;RE479
zR79k*Al0VVLu&ttLfkMUI0|Numgc{@hB^~0V~m4PO9PSSzPLX|am{fSb?g23p>y-m
z{uJPJ+iju8?(E@=iQULyhOB^C4ZDG8moM)guJxmCJeRoR+ltCL`PRZzAzM20aKcd(
z>r#Z&m+lyy{LG_2=j(&+N)nlAs$4ZB1HfQu>(d+Uw-prFah@0&A~0wCdvvXtQ*3Hq
z*BU20MeyTjTr{Fj#71~@hc?2qSFZ!FfdgwX8b6ETNI|#62F3ijHl?H#N*lS&128@p
zP>WA16Fzt!W)QMt3Av#U?lQqPnx~0*>Y4{N?ngtLC<#uxbriF25=HB1_OkM@?*FL)
zi?+{T;+4F-ITzLrN_C!W*_!VH?}mDYMr9YS%bdN!wYvzu{w_AF=Ix~D5Ad`*Z#gTl
z@8?VLW&K3N2ztrt+pNrM%i}=s3m#?F-dw}v`=9-djdY|VcS}0j2Nw_cJk)ls?rCFd
zzK_t+Gq`0=8)Xo!C~E3n7B@CbF#LjJsLJf4>eOY<3~aO~QEnCsXDnbQ?KfN1wOt3w
z-hL4YpW7QYjn;|C_zq5^zx+hmfn^Jm!8GULrE5++T=|&au90wn4yRs8V;Ag>p$D+@
zf4Q;8#l+6Uo~41<i9zeUP>MG7KES7}c<td8Zfw{fKe0&2ob{yjTQW$P$^@SUaZ39?
zZ>wuCab96kJe}FcqzAZDfnxBI_tMx)mwvr!jmrz~>(Rf$!{kAF`+pe~oCR`mN6F{R
z6F&R~KZ8<lq*Ug4cWPP_YnEFV8!G%LVX|tw%tFfoGQVJI{W;niJrUXod$4YOQ7jvX
zI<#7}mRGcUYG~u9mNjyig0%qF!hSJ3JyF&f07Lz<=Lj~Nw~0t!C|7-9s+VN#h4ZFe
zFSNvJl+t#fa1~p*?ZL`#<FX0JABgH+;jadBT2<zE-*pi1_$3}tI`dYiQRbdeS-vCg
z*UJynFn)JB{*$7s%arHk&$><hxdm3Oj~NGVE4V)7v)j>5X0uE24f$B_+Xo%>Lo6~x
z)GJp*{2)U)@WE{hXd3y^JgZ!?(Bk(>UkN+<N|jn}Y*OZ7dJ?T*?r{*9!am67QmlSQ
zqQt%2q5>5cV$G_bIj5MBYd6oD2~p?}dvgjqL~XQw586<uaQqsp=@)74Y(SS{Xqn{?
z?3yL2la~HBVm@mBZn^S$yCs#2CwMU|%X2B;xc}Aj!HF2b)F%|@Wsedwy-s1&?s0_l
zCM_m=i@|n8mFx6&nN&dB&@jR0lFmm7t`bt-nxTO~<NEAMDZ;!)C>dN=JIS|Fjc*b;
ziIGh<ze!*f7YRtWr+tkH7B@s|16Hk;|FnJM&n*>?yld=8`eG9YV;f}B6`fz!#H|fE
zbT=#-`|Zi!@kp2-VvMh%cnfd%`-)5K&H|6L4Vq*9(k!kO1FhiRt^%jQj)DkPKn;!<
z1&yFiS~oAaSufU*<qXKpG!8pnGL~AsqZXxjxWV&hwRxjuYklSAZfs5p&-PJ-yQsq#
zpFoV}zKij1wVGJ_r&-YjjL#QT{&G~G!>e%WE6>nOwR>HyD==ZA&EU(L6cb0%Hx=a8
zHE$T&%DQrm`)}SpK5;<pN(L%;xSBJ(872pdx*4X7*$Q=RENgd{evrh^`NQO)P-n^!
z{$N)sL2U`W^PmY=%yk)WR`r4k*V~RKf0D$oNo&Fm54aUPEr*GdSCqTS*2I$jZ6dEE
zg=ms`lMN&zk5w&@Zx(+ZZR-*So?WDlZj*?n8QXXRV;t3JwW;#&d)t|ht_uL&;(xH(
zx{<dBD?v-A>-C&{%g4Xz-mO=)(~n?3V=HDjZvPDJbWb*K99&l~QlG;_mb?mX70x~1
z$rpsSUz3Aro^=OY*(vbED`&(-D7V@zsO|Vf;Vgm1{Xj%+TVwI1h{=uGnaavgPM_2t
zM2$B_*MlCNCv-6*>p*GH?iNxL@5tP$3t*`hUSk3L>dJs$#8dYs=t6X?c{(o6S+)DI
zVUCsVbGEsJk#P8lr2$k#p$E$o45+q=v?qWo|6P2x1tmOh?QKc$PH3zLFA^9{1e_<I
z&^UWeeFC~G?NNqu`f*UyfDkF3yV5R0Oqr&3+>Pp$T_Z#zI6}>srgzKw4x(z8?H>!;
zw)%fXY^VOH`IK4SA$_Y<T5|*0$`fyTh#?L40957_Rt^b-t2N*J!7o+h&MjpH1m;i{
zOG{af6iB*L3K*{nQaE!oE9V^ii@p6A4EH`IT1zsSMV0zT!wGL!RGOt#05;a*ea8I)
z?oEBB2;QY1J!0hz`-Y-48njdMbeS}lYL#ECDnd}!qK{@^YFHjQk<JQ6LeF;^$+11r
zvZPt=yU%CC0C&GwV}_PeHng6E#d&2_6#WUtjeCa}d*LeaQtFknIe2@vyp~r_Uwe#B
zr09xrJ9W=QJe0v501?Ke#~Y=?G8W-r!*y2NsB=BDj%5P?lF+&B^v@UlqxxCnf1UpY
z|HLvq*XFmqN~%G7r??m!nq7yU-2nM|Kx0zF)nD&InhyTi<6h;xygF&Y$rG!EU6Y5N
z5eW#B@zUNo<KiF<<W%{DroW4z2Mx&Axr~RpT!Zk9gn1j&GwcX7l?)E<PU(~Ir{v*W
z2#s&QL*#+ZdHr;DPYp9XMns0`mA#eTjM(DLHA##DpP+3>$#$*Imr1~~kD~1%^<9yc
zbjDkw;eKh*7DkerEE113hW&`$m^?}r(`!(X)RJGPPpx(y*dB%S&ZFq~9kW9z=4z$C
zRG*Er5GZ#aF>^+TsA?zke?DP|{cF+iBKYwBOfR;TQrwPCY?aXV_=tN_T^3vl%yvsi
zx#$6O*bKX@X*$PEzaTiGV#3IQUsuY`r;DjZnKaPHylvbnm7aj`(3Ebcag|(<SzP#I
z)$&pb{N}lU#+x!3V6jYp=()X-U$h|pX;|V=uKqi8mrBYm#j3?3qkoK`qM`KK1ZrXP
zHwvF8AL)~X*0gF2rnW*-TD{JpUQ+B6>=O?Q?O-JL6y3-r%v}my4i%AEFs#v<8F=wf
z)O@jRDa0Q?BW5PePg#!z_ZikBX-C;H#HG-m?#4>Cg>J?<bRbo)6dKIC5r$O+)^-EV
zmk-&6l-}{C|45fOK_BEWM3N>>yxsI{1b4G1Co>nh9U0qn8;f!jthd<mS%_Lca%L@t
zzVgdGQ>np#(S$seWm)2c4VDd&u|>r(V~LdW98Tav$f5`5Et$fO<<Vd^uE)#{lswct
zG+$T5mX1W6B-E+xeHx<_O4fD9*X*J9rKRsI(ALs%o*DeALQdD3S55@GgXs>^g<F89
z<PtOPh1b@9-vb9o5Y*tpoYTwp>as4tHH6Z$e6Kq$@qFP3y?+Ik8|Nq|aH*gun1`mR
zCeABv<IEj|!)E_24}ldZgXC!IjIoVs`6Z-{0v#d~HuuhaI_!Qey26ebS-jO!W+#nX
zEJ{(%Z_Bs=lPioe{Z+lQ&X*2R&GR?iEB#X+ld7WKtJ}B`jOpPk${@9XCcRY-h-`39
zKbQlH5*AgAXw}BkEr=B7+K~!|zP`3nw)MQS|AIZr(y6mm1t%QT$X(d~d$DcYl(uh}
zhEYbO{oR<Xvvx|PT5-){eLrE#r%K;p^Wk0*^n%1lC6DU&w=D_+!Z?eFo0}Iu#Zpfd
zTAf0kOO(ah6i*o+l7~ckw^liCEqs*Ne3n7$h#_YsN?WHxHcZxSuq9d}{g{`S+L2GH
zf4S9BK1+5KvA(PM`@G!JZtI9W|F?g#q!3ErF|46Stf1!Y-sD@qly)qGp!YE;<-aOF
z2}AnK0QQa`1ZXofQkw*0xXvQseR)zn_e2kt;?~XdevdK7klBJ=;WW9F{W(nRK-uBF
z=9QWpTqf*(MlnN|TL6jn5vOf<Pkfk-3zvED4Uwf8Xny{v8!tff3*({kK3k$?p4@dn
zV*BHuZo@RY-#8o8SB{Gf`Am>1T@fqG_JT>14bk_uee@OcTGs(^9x#uqYpni6=WwIx
zA8HcL$)3T5dulGYQ~ckInx34Ns<h91ib#!mQ)d~;x-|;+Owik-3phLVLB%&D%7O{{
z4JeWO$fw`O^+33erHN<)SqHJ}+{}IMvxaG`HYw0D{pJ${0dIwF$y_j&#CFobpofw*
z$e^c<8V$U*>};zs0q3^ShFG)E&uV5h`yqRlwG;Y*#A04tRg^(*&i72bROlPlhpsZX
zKG4;9qXy=2PHL&{T6v*cF$#gI^<w$3HzqoLCJxGn9MDQn5)v*|Wn{hZ9UoN2DSKbr
zxG7iC0rS1A7;1SHFbX>F8w9^1kJ$0J9+9R8>K&d^r4|2VVS@*rBWq0JyO4=jK_09`
z<jsvzRaz>qdRV3sL@?%$Z0TAYThJUNTP(K43HRUQVzliAGW5Ae0bT3}PthZ>=F-&o
z^}S#B(sv)ZG~YpOQ_oJpgu6jd&5}ENyhYa*;28A&`UqYIOxW@H(D`p0G}M;afZvnf
zz%jTl6}qRDjr-{omG9(T>#~pA6zf$zJHA_Z(JG4kXK65M6S7ItaJQEDI#eK7cuc_V
zvowEp{AgWvmUYSVq6c<a5<oK*-9FyDv_tK=?nODnqkX~NWr|`xy}|ge(1AMx!ymu+
zM|ga*S`|f!op)}749e1iHjR~)7yE72w>T1^_O`pUMOl2xFIvlCi5owYUax->W)h`_
zKQ$}*C&0*2YqibO?KYI$D~2AS&2+z9$oSkOSq1s^kGeZFeedaX9`^<4Iu4^Ri8%&y
zjB3_ycO9zPzl*5ZFuTuv4Xq0-Y8PF?X3KjQ@c)+uy7W#N3lpY;li+Cif4g|+PS5<l
zO(=jDtL$0l*O{rvezF78fH8i0=Zjt!*4(uAu|<}9BI)r^^=N5TjbvnFL}9Y~3p!a|
z#-5|tceIlQQO9RIa1lL~tTScXzoCuplV?wiQr!H4XbB9zkuBoYN)5_vx6X~hDU(_o
z#?^Y`XQ>`Jw43nZH-HWS9LFF#m&mAy?-ce+w-^u^aimPjr@JV(a}<ZV^z(P?+v_0}
zNo<$A5`wzl2gZ|b?of>W6+isQ9q&wt+o_KA%IA9${=gpMQ+>0K?f6gZ&RB1nps6iM
zvCHOm$@vY%)*;|S<u2_8?dh=a*hBp*uKb#kt$UMkQBpcgVChZ$#~Sjs&T_7AYwhZT
zX#{uxD%c8#j3_6;oTRoiA*w?N+UlemZt>*+<5l9sAe9tX>grst`q$bsRs$Z4I|{A|
zdirgiX9U#MWs~C1JPbRSTYELK5@F`3quTyTr}=JOL<W?e+mC=>?5omy_TfjUQFs_S
zrPx&r29{NQo$P8DOAjru)%43$8Qvl>Sm6jV1-|K0EUL9*dSatT@X<BuvDrmA)V-j@
zzrlZrk3-1hT(<0rDOegsBVLkt1-gxq?TA1>kDiF#qkfm8`a%9xm0tevoyc&KB9hJ_
zx?=?L1018RvIBMLwJ3TiiT`V{q+NW(>nLM+HJwOVM&1m}LPMtOf22h6=|A5vC7Q*R
zh%74=PtpT+mZ<MEo;ex~z;TJP6+%PR2e_>{V(vt4KFb%E_ajZuB-qiz;}696Z-*kx
zs9C<?=bsR>8FA36NAZjzOu32|ZqLE(9y}wyp&Tl<*V-JrtEx<_8k>K;q`QH<bgxH}
zazChoRh4(%g3m+k0ke&TAF~m-hb1lNSf;WLbNWSB(rX`P+f&S8agwg_9zJi$G;3YX
zpb3JdlR(1x-1XuGCqn<7S;qH|Ovm()uP+(VEE3LF!o-!K*V_FsHo;;_ruJ6T?Asad
zO$p`sH#<LmlBMej2J4V~7|K@rTi?SGilw4ZhI}`mAWwG2Sv`95C=@<sK(<GN^soG0
z10V+4hjTl={*qLbA^DoPtvCuO1H7d^=Xo+sJHM*3*`Yo%t^`lO2k`0W_ntH<GfT>*
zM7LMks_97WJe!Pl1O2*K5kf5j<OZoGqXuHh6^v8%y^900>}ftr`RE>gw6Az)bgMZw
zbKBVAA~f~jyDr3)Sc+JW^Db)7Vd4TFi$qzw<8G0M$PSj(kGnGj_$Ev#-Na|=1QFkL
z!s8Y1LTer)0p54)Wv<N=8^>u9mgoHehLMW$kdi#!@H3e>i`t4%5z(U0Q^8NQ7UQBG
zq_~tz7r$iJJEDfF7evP5CXI6ACvIKNwmN^-h_(kzJ~Z)Rru)hRp>z%DYf_b~Lrkhz
za#8(wpV|D;=uLUMpke!nz!U7lm}5$Mf7tDmsX8N*fub^9(gS`^0zSb3im*zd{dqdk
z+{fyVm);B2n+}s(y}!=z;rv7Q#hY}mH(u_Rhppmfi6YwneK?a1z>_R;kiy>zq@d0C
z<T*e{$yssK+FpnE)BCp$H2aLLA64V=n=bv)tnUx#C}wF*V}+d$I<Y4eNmf-i#aAVy
zZZZU)yEbO`1{1Q-goc<{qTKa_S&c*n87H0OMLmNAmzYNhQ>i_}&-s7*qMt>jby}#{
z&qg4Iv2jSu(K;OyP>*X(_~_tE5@f&TwN{IEuAHV)OPa(bQ$DkuP#2I-UE0`;M2_F(
zVbI(@Pd}}-A*YLmc8!bJ1CMOw4de4s7*^n|N`mTPdUabKhK^}K=U7t&O~N<*pu){O
z#KDUnvMRT9j`YJ$^@tPZEfR_|S-Ab;{$6igN!&;(%ZN{!M4uowABb-aiNREqmGk9k
z(BoZ(!@1sNdWGDjNOPhSd5Y=t(6n5SB5y+h1pxWE$)*SHKAiRHHrDo&K^L-RPm1Ql
zLqF`C%GqO?9#wB9>V7k3XUH9A9Jfjs{4Q8ndW0thqcX~Ccr&z!YLK%?%^oItP&D`v
zT^H(1>3fLY_MnljUV{tBgPosAL#taEfh252JLngj(nJGA>p8OxAsBs{oC~UTi852A
z&G?$4`?#%Z1#r+qkH_b-^~fn!%vYp6vCI;s@@HWk<s^0lL(4D%Owg@sjO*ibNtDEH
z9Wq4<7xO-6`S2;QLxPFM0}AJD-Dm)PDsylAvqv5F_<G^4LEx3_tK|WgT3TYolFK=o
z9_z+en;dUTU-FLJ9!V+={{6z2cZ*mr#F?|vo7g7#NHrE;1r-H1#zS-sLZ>JtpwQQ}
zOgFJ!5n}k_f#iDf=Wt7{NfA^VN6(D-j4lz?uX~uhG#&>{F|5DTJa1q^FyF;Ma{(yr
zo+lsTTiE02O}($<Cz!5vt~o-JiLMhsL8`)+Ok-F-mD2i2HsC?g5F4)x!!7+UU|I;}
zTei$s@d>fSqg4#u_TPcabSTG5cyti;MWWTO*QRpd*!c}%-cEl16f0=8y05<H3yben
zn#vUjvYoPguIUnn`FYjo;uJ+JE0f>j_9M}6mXohvlnI|{o{5PQSz`Yo%_FB@Ns*X)
zumT5oJ>7|=bK(P$<<_2=bK*Zd;}h_}Gg8^{L)J)<F2DHs9TrPIOaii7tId4BvYLz7
zoOk5y;)ennI3S0hIV$lTk$a63*dvru?ckzAyfVQpGgQK#HVH3UsN*^wH#gCAH#R$@
zHD;OgXIy{OSO59-f5dBQKziNp6Qa`GO?-;4T7X%)`r-RfUXaRvfy1~Q<v<s@PwVeL
zEIyx@D<R8l2&svf0V3FZ+IVVqtJ`NupnwQGHdoRPRo@@b%EvV_AT-T<gtlrVi|7Ic
zBSG7djh<&C=HIQbLjh9k9Y$McLhImf@f^}MFl0WlX}DXA-1LMNluWtF4tCoi+0mAu
z3d1pJbi1CWB>)?O9+GEiYJKt|b`ffT3^^|H=w=O_bAZLLrO)DV&1!oUwqGKDoYh#`
z`x$yoeh~uF!8G4CBO-o)OC615MkiuuO?$&PiW5QQ1WdBgQN~e-yewgEAeg=QOo#Y`
zs())ji@e~mqE#&LoMZr0SoK!H+>(fNoL2dZ&y!QCg}}4d^#`x&=j57s&+a;dSF|?u
zbsj7XbtcDlQWYOnOzR$!FLgyMt69`kEKuRLOFY1MLQEtpq1UIxqs8ZH8C{2lP&$dA
zz?fGw{eS<&+xEwK$*VS9c*hJW2Ep2R<x<c?gNyg0sECP3k)maxJ(6(8I=W!qOkqNz
zMhCvnN*A>xXMjG?A_I9-!tx2vH*1w{&iGaIPVqN&tJ4(tyvjclhR#2Zans0Z(_1}+
zngY$$s5tPJgHzE{qT_PQ5m!5j+>&Q{m^`Fzy+G84)eHPE)1~U{W+5`Y)Nf@+nGZUD
zvqlP{M&&+t^F7&yuV4!{3w`_Fyjb*mr8AfXq<`P<K6@$#Z&M^ms}oCg+9uqgLw2$+
zvkzS;=uUADQZB)e<Ws<k^1mf~qlNz1spamVwqJ^Y3`U#VF!EPP^l+PnT*<Fc%kIB=
zvd(8wzEk!#y5BjbzEIZv`XDCQv#F27??#*}f(LMk`RhQ!$cay(0;&>xRKpzR@!!%~
z-%U9c#y^lf7M)#Gx+EXtFZ<_qpypG@mFWsS<CtSf_-{>4`D7xPOOJ<c3CS!l*sHb^
zXF0`I$wp*7htxSAv_VbL204UpHvCZ0B{|c1UQYX6tKCb=EU>zaWPf_%unO#^7yI;(
zI_HM=j$e3@?O*6N*c7Ui{rGgA(J*H);S0_J<FzPPIrl7&FSM>aS3TyCK8<I*@OaVA
zQs8YO{nbn_vUgv8#*rbgV@Y;FMYWA4OXm(S)x)B7uFtk*ypOof1ix;nZFXRPzbs=}
z6tYElJ*PE(1V6gTj@lZ%=Su|-c-;byt(nd0?(Qw5!CXGJU<k;F(xAR#Swp{#cYUJk
zY`BTvvk8Y5zfM4AVw9W-!3&l{qwW~}jajBXrlsjGf@GEE?8`M*-f3_fo>G?`YUhkh
zYI=EW#_F_-f<mu#BQ|Ty>sqmIH2jTK8^gEk8^z868`dVSXc2Tpij?zHH-(P5!S=nP
zlx(z?0z1~+Dz4n@fh<+XQK5fPg9z4JS<|gg8N7A8hd8W3D$%dT<S#{#M4|I>HP}*;
z=7@oZ-}@K!{Ht5>Yi=peQ;_Dxu-DnIlCrE-;1hszNM9TDmk(Es$$~&yTDW+>#V6@}
zcCfk?{n9@JEfZQ0zS1j>%ORFn-bWYo?Tv0KKX6m!RX>x*gB6vh9uxn39Ct1R%{yb2
zyAVDy2AJ+!@J^C|bIJ`%e&s3AGjCMIo<u|+6w0W*Sm#e5xF0u>`%CDi+ObRaCx%x@
z|JGqE(!4e4+C5}46&z#K8dlZ}#ELTL+I^A5nhI4ZElMZxk<sBOk;S>U!>I<+?Sj%H
zM8&4MT9~=YyK-=GkXuQz=%Y&OdYZ(<Kd`#e4BQISRix1Kcs?n_fVM(+67!>mx&AEm
z7iKK6W>3Y*jO6F_IMih{PiVYn>8;LttY0KcB7Ez3i=AIxi2>u)aG<He?^7&Q0r;a}
zI_K{}TS6CV3RbqwS=-V}mb*Dac5@xp$Z-Za&;IEtvqeJs&F)xDFg>K|Ggb8N9NQ0<
zHt7+)Ol;B`?Hct?QfrRSL&{W<Y7Ki7c&DuaEfB6m7eQauo!QcLV+b{i1lK?I2~O<%
z%rm;){_8&n=DbXFP)c4{qS=o18E7*)_8m?CAdJOx{u_v{=~&<ZzNJDS8<KJYBqzwh
zqn-OGE4Ogpkb3p58}9{{6OFKUy;C0hRd}M#iOuDm#0t2FL^{4bUOe(=lZhuPfFGJQ
zjCOn%81BKo!)`S-gx`SPWHCCtwjkRP49wKOj9>sw5q<CbJT;WsFYrR6S1}Ps1^NVe
z?=)oUu(S1d!;<6~-`yvJVkjllwUM>}TqkHpFpi_WkSi$GeCQ7~&aEHwW&smcsOGiV
z_)_`g>lRy;J7Q^}-mX3oJk^v@b+~r_6{Mp>Y>#($XKJU-TdJTWL+|iSHSLO1AMC!O
zxyKcJn914;O`A_%z-U_e`NKzxGk><K==WU+@2dY0B9^`MdE0QAPuz#rkl3nS^P;!>
zdmOC>qVR8*pkJT^i3e4RPX0CfPm@~@jZK)h@`NfqjaD4MFCWG&9DyU4!7<U_B8*jc
zQiSZG@&@W{u7^#Yg#_)lRsW^@tc*Pbm~g!huhr5Y3hJX(n@t}Bv=u2Sd5#v6c-GB*
zQ+zv%+rOnn(SM_sDl9hv;IKre9yp#ou`G97R%qoUgTl4;*d}y&vwh6{j$YP6JmLnY
z8B-w?iY8!G1ms<18xERv4<QdI+#}^zROL!1TBLmDaF(`xk}5GvVhp>c&)T8~ehDp4
z#lPba;Gmv7%Xzsdel1(xe{3AX{r;BrDu>I>%9)LP>rH4<7@?sO05sQ|QMxS0E5|#z
zu*m7>SVX=V*Riq3W?OzwEB<U(Eb9`USKF)%l=UrcX(sJzF1e~sf3)Qz?iO;<^7nna
zs>{iK$pPL<UU+Zl^qia_NicikjwzD|fxv&aiG4jv^uyr4?0-=x&D!=Lkva0S@ltVL
zpU)ILDLXEy{NA%6xc;n~^;xW%haCP2Tblh5jdw83gx+0>QCKI;_<0Gvd-oSP`IPaz
z&OJWCC-66N%8gN2xrO}S6u>n*vd>qPqS=TAn@?X0CHhh4mgRJhCxY>b8|c9`3b5Np
zwt!-12a@0Fg25O&hMPIbGxd^ksvn-?k<^7MPW!4?ujc^uZkNPKPq7I7i(o?&SegDO
zx;Xf-IlknsdH5XrP|IYb5nXxEVlp!CrRWwqRwzyj__*8Wu&1GnG(H;RAZ5>H+d~(@
z)2srI_#E)@Kk1(GWXRsLNDTy)^hP3yPdO2|b_Z5S;_hH*uI%pejS(2&ORJ?T^j0o}
ze1b*RF)DkN6)#i21zZ~~eqG$++rrAcpuzfE2{8Kg=kut0O`kR&PV*^68>PS9Q!l#b
zWIks0{#^q<f8F7Ge5-UqB$u19xZK!Ay=VvRdg49d4#ztl7|f5h`+`nqS0;tWyA3mV
z@O0Kbwg^5_KU0nKEVYT{UnbuPE=T?X`eM!h6Z~0gJxtAVuK@Y%ue$C<AJQ#LJ_TRk
zHlMNY#nV16ZV{BVM#T4NvqQY2>YAF_Y?;)gO`X038N)qLuzlxltVNnF<#Bm$<3&JQ
zPo;bA5I=p5#nb3muD}6w|GOSmH-^Ca{>6(jH*iEW{0Vsv+YHGTuE<CGTSy2kARuQo
zOT)5;){^}IwYf9J;=lYXVoLkn7tg?Jy=R|o>09hxEMOsZPUuq))YQ#Ze?*mntdjMW
zf))x7*uy1NEKQ(dHA`((>r;t$$><%2F~wMZ8}HUQ#??ybGSB!y@9Qo@=cCcI&WE(P
z%Cy&q<(zA{TI^=_sU2A+HWg!NaD9a5GMYMPwMGIsO<1eb>2{l4oU&OXn=`!3%VvzX
zwE1p~9MkSgci7#*k>d`cQ_FjK>=?0cvw>mgL`=fw8}!AKyC0+AqTZJaODZj&8SUyP
z^I>$5Bw8b76GP12d9o9)+D&|WxeS=QX0=eUNRtbI`iDopfyv(J44A@wvN&`jPx*bI
zIH9;V@u#6BF&bG7TM6fFiB(AHGc{}|xE$sdsBCW*lbYNzvZogV=l&KpW{BCZZ3ohO
zigCOY;lPRYK=R81oQCSmgZSv07wK2Mr!tFW#O5Y?c|It^D0CaQVdAMKsKk9!D!}tw
zhp2TBqQXO#;(48n!gR*Zt!$3%8)sZ!u1LkKoRr8s_RK2Y+zfkd$j*V4<ACc~1eu5g
z)~AXbp8m_9iM9_62O|Ek493<4q*#)C9%ittb8)v?`%IIcncs;ZyvnEaDHQ8&)`5h5
zkL|klBdJjoE*=tSI6jKF>+ueBwwz;POy-~MCv;^kFk@G23ilVTd{$aZPu&=_c%tk4
zA=*EsQgL;qbfHKWUhJ61P=#SK55jL@^43<Zd{t&@{vCL+2<m^T3wL>BIOq4J+j^!+
z1a`Y56clTN_phh<&vf-Z;C)Qx!Crn75h_h6zLUSBAFhUNDI5G~b<-^klc}q&mGuMe
zg37n+_@WHouw2t(NE0~GmvP{}4n;)?TnL#+<z}SqzwKqdBbKQVigcJ+1W#0=kYSa;
zohG(!pg^sK;(5g;re(cn!K%7jOB%TMETV0VPN3E`?ANXUPG{X4`NWQog6}+_ZrzaQ
z*98xZK#aqT0OkxUT7DJ%X5qTMCos_4kIQ3GkF<uIMls#%v#YNPC1{f;3ZimfH%=5j
zg%xw)5XpwMmXVsSX%roxDztN@lJZc=Wb|9h!mUq5C77!mJo}cqjiwEl9oTa&x+E&e
z$q6SeFDE6m$7R|rxpb{*nO@I1VqPmNTQacIXRT}d8t#>uI(9|Ri#t9`?LTA&clXr#
z{0?~K=hb<?#U6#rP`)nNRz|Qt|C<Zv144B#191D0|4J<CW<#3++8V*!rk1}$Y{7Au
zm)C+Bq+{6-byK&?w8<X=o#9y{Ip&K<WPiA_cjqnmJ+HWdQP;;Vz2FCU=_<dM?#yg;
z5)?ib2-h8BG~HosYb~FvC>T2!!9I3E4u?nRf0#B96pt23AiF7F1ckI2llS@{l+FnI
zuYF>GoyBFgUQ_IBG{I-ky3tLju;xCG9T_`#bG5pRF}R0FL2Wx4MHd<_%9zU|@=`68
zYZNf=b&jRx@z=c=b+7r#<%HHq1clmv&>515Ff3mpvwoI*#IJky#Y*rRM=j5@Gd(~~
zgG*O=yb_-H?Z(9NiI$^AuW`(Oq8$T|Zq_{O5OsD(1}bU0ppa4M?GsQIo$u=<Qp#8C
zO^&!C0spEK$X*>TT0-&%)bf3rJFXb}dMs*pLg46n!@mO8Pko{=&$3zii8r(yQW(_w
zIxk@t;PFgeg^v5M#}bS=vbfs?Rqqr2Ez*9wP)*QFnetQpeb8Nse5X{bhS6-6O^9Xx
z-^v?uw9X9w8AYXZ?JVB`<oEfg5N9@#{gv?AC--=ji+&20N4WiBrK*IMxh9_M0Egf$
z9;A(3(-vx2A}IVnKy04FGc@YuXdg9qPn#m~c~Di;<Wth3x!<>RxiMn2$T0djQ@dX<
z<Cr)8E+?Nr6#{~-D(1H6U9i{a5-X30phD`XY&nOM35D1{jgy^6AF8_{y(GkzNV`RV
zEy`D(045hEGZLGiiz;9D?Op=_f!28RbLdYajvBZkMagKG6!6{@)IWo;zZ1n@{uxxw
zPGaxd>WY2Ij`71%W|EAOPDB=o6+q2!=+LApa_(dXvuthi?BG=T&|Q(BVX|<=r>IGA
zNkXT|Q%UW8l7h%R*Nno)h|ic&tdjLz1jeMushGF&zI)B=`!J*RQ|-`<pU%-3sUqUn
z$wC(2XD+O+LY@n1i6<mB*Lbx2dIQ&A3JWV3a=q&KN6cA}($a%qQBbk&@Ew?lOL*Sr
z6+_Fxp|93>p<Qx|SSk1fe6rAi9_~7b7P-sFA)NX!!PkYC-B0|+nmVH8k3{y6;_^P@
zf=BnA5a?TyB&uVM_9I$Fxoqv$j?)PJ*_gX0CoCTFhh?P})R`umIAy9O^+=OFE18#q
zSz7JK&SjKn<*g&190yq6``p%Ya&CSCCtMTXzygFZ^x)jyemGVf);4j`;)>%x;JHnt
zDYiJhN|0ol3m%`(LGO90r~T}g#i_9tn|)9l_ep9s$lgLE?}?l@iYZVdWbuW|(T873
zzF_`L7#kwf)`et_Ua;rCsoFtA<H}-6n*=L2tFr%W-HrhH!->6e+VzIzBuAlp&PQ1Q
zZS{P-Dwas?vbE*8^|Fej@`UYYpz{SZCrMAd=bG4D**V@o4L!(oA>1;2nK4Yl*Z_Z(
zz2&n<M#KN2=seunZr?Wkd$g2lsa-|YZf&(^T4MB3QnhEyqKej@$zv0{T56{D-m7Lx
z?G;gbQ-n|}MncBx{R_Uw@x8}!U+48X&+C0OA4wvml`kkR5h{lIS}>{+KKeX{sP>EY
z5dc#tJgMEfz$LpTP?45p?m}o+iq0M+TYVyBoBH%0u7U~q(zrUM>KQmP6Qwh9+3cxX
zr!zg=AG~SZ>wTit$X?RZ9ko%M6Xmj92i)VuPo0?(uk<}arbD)93ks$}rIrVGV=OA<
zW;*vr+@@taD&{f>+T(Y?MXk2rLRc7hk~sjhJM=;1^h|l*zlZndU=|{u3wDSWKf7d-
zO0F6*jhT}^DGEH^Pw-RTr#Sg#b<oE~stvXfZuJm`<oqgp&$=qe9@r1|KAldHbQI_3
zb*{%RUQ3;+pv&t)BM7|e<G9$1%3pS3Cgz4M-#i(-q_3HMenkS3;X*BFLIEg5w?&pU
zmn(Gh4(1>Wn9QcWc)UHoe4OOq^v^a_funQNon|!9%aLc3Y~)LFg0gtuTb0JQ4U<_1
zz$*|5av?hbF}%?6(|&s6t#yC^A_Cf>ne(667wbn|5+i5a*P|Ywu#dV0yk1jHJcJRn
z7<9M9>vvVST~z({e60PUOeUi2l-1>uCC9a%I-<WMb9kWkxN)AlO2CA07QA<A_2a_~
zt=SQGX~nmHL>}PEL*6~nl;SyL@?3RwAODpuz-G|}>w5T#g{*l4`f7y2xU375YTA3R
zwgJ*Ru%}nC?H=5@+<6azqsGlCsu#m4<92*gX*)Cm6BkuTBB*e=x{&b((Y6XA+1>p~
zW$gUtl`DB8QOj#UAaaYReli|VJNy?lx=+WXM_EyIp$M>MX}uaYJ$|mbAzW**#OtiV
zhP^u=5`fQp(`Gt2%GYM<m>OcrO}y24bn5%JaVPE$WH_#3>1l<CMt;OOsRLSh{ouGW
zAKy-PJ?2n^B5rNG5u(kz6W?+zAGfOvc}st=A;e!$mTgKwY3d&)WCV;ZSfwZmJ^jr*
zs^#0u^)BlMLQl4sV1bwuQpXXWVv<Up+y1>NAn10w1)1&oD+}{i;oezd-ik{`oy(}x
zO2s=n^uPRc;mC=N)B-OBs*WZ3=^-SQ_lpd;mY5#rC!eO%<_xk*M1H9f?b_Q9_1f)o
zi~Xh~KGt{mbo7=l6zR(DVBNj30lVT-mcLyf&{WxMQx5t~<gNx8pGe47?z#=RqTPJ!
zr?27y3p6xW1P^q49^2u!0al0}lF#e|mAlBbTXRPR89i6=6AV0z-tOk^FUfJKc==LX
z6`6@T?VI6-Zs}0cQOfQ%3cBfRf6K`(!em|rl53sNUgi1lO-m$lD_5E=q4S%(C*qiX
z_SwW8IM3<5Ev+tF(~!B77C_cxou)<nmQSm?offh+8&Q!aVN@LWBcw;}B}{?V55*O2
zXq!~);SeHNT4#2bg-h)^CMQ0Mv3{L>W>)swZ*_kao+RWQQm~*`hPmyzpq%^i$I|PE
zw>003jd+Ixa#%8NW+x(4n{27!D?+rw^Uns5=Sx37)TdR9+IffPDzb`O-e?_hu(ino
z+jvY%<m{RU-t*UKNQK;_%8;Fo{w#F@)MsPn*eQ;?wP*BE1RombCayNX=e`v(KddNR
z5tQ-D(}?7DLF2Zlq4^N$x_@eP;rT^thE#|*I~m%H`|Z=J|M8U(Lkl^6k9LH!fHjG^
zlGZ*R(L|)pc{}rO-dNJb=av!`ME43#+oz@sq$13%)c9L@%7mr+EJl@f>6m5*!e(<o
ztyLj(RwwT;J$5uCH=xduHOOmobY2NPlV51}2#C!pFS)-?*^SA_=@cybbUFk$y-7{n
zWC>Px_%2J|S{nGHX_{QXIw(CxMpZXtm<DK(Z>3)%-`y#O_O0mz>qse|eh)>mhgM`@
zoB(}oLf-eba$?Q8IXi|R^f&#$$Q0=gF+7I#VOM)`khw6~S^!BpOun?I)jE0j<G&NO
zA`3$Xb?-R8lZ(&#yvBa{!2rO*zqk(@n*{!j1i~-*Emw8NGiW6nT_Q}B6ZqoyK<y>E
z2gz)AhtJUeLJR2iwW|!N9eIukqyxT2NoA48p>#Pxal)qzW{Zz-Qb)TS>I3TpG=Jg&
z#am`J(Wh%ErF&8g2xxd4!lYH>cejUGEC*xwQbCRo?sxEX$dPT#b@Y>QCVn}XO~sbV
z*v4p#I?oMAEOb_NpLD{NQ!HgKH3+Tn^IqhxHFS|RAQa!w3!+m@K?=#U=qhFJO62#z
zAGc%t7n#K8jYG0OJXYfHOZ`T^Ctmj#`Osn}I)-IY%bFjfq+$2+oaCZlp=zd%F5|2T
zyBPzs0zQce@G!G%h#D=G?FacS5+x4Aq`+*x9(vvUJO4<#b#-vhAt(?6`g|56!-ftx
z<2*;gXYBt<Uu2}$4LSIrbUK2F#C^i_l2w<U-a?e(^HR{+t~vAqrkyn<9asYzx=Dx~
ztYG*;s!oT=2FL{)S=NIq^iRchxUnWZ<d+r$>%MyvF)#i}<hG~x)i5#AtsNpqsWUxe
z>1e;G#pUSX(;fG%dg2X<H=z2J$|pZ`uC{Z>i>=w8l*g1c<X8abNrZ>MrYk|#vu7<w
zsr>U=|7V1jgtq<gsXj2(xV9RboVT4bnP_vbpVc)_^lle!WNo5MrNTSPn)({cPWU^J
zJa??9tA(n2a=g~Krf=~5WT{L=$fCR>tibyY=<;=N=ms1k1`reKySK@GPU^(GtpR8u
zN4Si46$_qh3UA%<i|{lXr=bD<)BEbg1c!L3gw3h>(<&mB9czdlT28JD>AiW~zK*7>
zd_sCs0~<lHr|GNk7^7@*ZtQSHSK9Rx3|vSsA$5!Mrz8vOZOF#}uzCOH)t|pe+EV(7
zr+Bz<L%^V6kiiwxn6Dil&>&S42Dl03D|Oti-F58?F|?)1%6T#Ii-X~h0wli|(vN3y
zr;HD!26{g$v0dQatU_1-e$Zl}v(QIS>MgBH2A`nb#tzG~fMHSqN&T20v$XpqT9#$>
zyg$(O?&w9Nnr0G^64lrey|anBT>p%V_MD9ytJq;xapS$~1LP#vUVUxKD*G?T`Q#Z)
z`gOvMzR*nj6{=6FF7e_a@2bqo{rFgsq;m56ZOA~$bN`i?MDa#+*tRMs+LY*$s8F5k
ziTZ%(u>e}xlb(E<U{Ld?W^FCu`>%4@CIgQQ{@!aX3GiyEIW(cubt4+PN8&s$Nel+b
z`O@x2+RNncd4=PpV#A4@I-#n-?s<tpGU{vDd!pkrLD*C^wZV$T3Sd|%HKgf(q8Zlr
zo(*;KAH!$7O7Ju>+Zob>11{nt^3e53h|G3rYb^UTDt5vif%3Q}_oES1mgb>>KyB3M
zEaZF*qxSu$XU9*`8PoLKTVMaAlm5H!o^C%r`KKd*eDJAH3m1(xxx(qJvW)ffdAZt+
z0exz?>21E&o!9YZQ4Zqo6l~FKXBo-`L>Wp}oK8HvdCOI!@lQf@8*t`<w$aG3FC`&4
z*R3VHR#Tx?`37!AQYX~*i&@a*s2`p2meW;(v7O1WXP~td_U7T7J|#`?Dr+F#DzJZ)
zblIb4$VS)kG0;ExMUhHAd*}m5tC@yTpb#6~PBJDOjQ!JB{lcPNz@VDr7Q;<vsFX+P
zj-uu{1tf%ZS~PNkX*5{<V}Qa$f`Ylckx?@qU;E3HBt#H=_;$e{7TsPz>s@YkXpAs)
z|8V>}))2W~wYyWbX^A*SNEhg>V6>W;eKqq`OtpQtkp=*5bzk_i$Is48eY@;UXV9tS
zgIO9<&BMRDA8-%XJ|-cV(27BdUZ*6^vFystl|{tRh#BQ6pZP=nYCSxzajW{kv+k}8
zO?If37sbkOW-AK8+?6=A%wT-mK2w0eEvF<%kT@}MjJ;`-FNR2Z9br<-i4N$Wei0i1
zM!8MpLpN}2x#&6z`Lf5JVP_!jBAt6Bu~+^oTDaR6o9StQo{qHk0@}xEOj%!ZuZSxF
zE>ylb?;dc<hL00P(k`_O6)57T@At=Vdp%<{$AbuW3|@rTgswVv%%A^K+QC_lx#=rx
z3XOAK>n?<$Ya>aoGKL<=9|6=1RcCj<{()lrQQ1J^o38mD@TleV3P2#w?ATM*nM-6A
zPrNRZQ6>*(N7mVg<`7t|OjctPLY_l!SB85IkhI9jC5v}zN;s7Aa1KcmcRp!Q9qn>i
zJW0CzzSg;)yl&MK!nb2Ymg;CU%Sb>}${pA5goX!7-WI>6(JDQWwo}f}-c3F>oqd}#
zu1y=FQ5pmhsc;b{O(eaOqOap_R=!D6t(jyx(Jo|*8DqB!sD50@M*6-W$_>w{FvcbC
z@+u>a(K)dGg`r>C%#Fb0aRZj|OHwM2S9({mQ?fWrTtU6s6Q@AT(>1be<dfgG7y%?8
zs9IWM#wW+^(u!T^{0dGQ)dJ`a+LTHo`qhlb4;G@<$*bujEnfR22b?zl4YekU_7Ozt
z3x?qmN4%&_R$rnBj<1`iDp>{G^}j8~fczJ9#a#WD)#u5x?3iTxNFiucC=aCL>?ngg
zu10wV4@EV_j{|BKkLIo&jF;8}ZNe%m3LZFb;LPVoHvRdaGoltZv^CFhHnx)dfqr6_
zb0xZ=v%k$HFDMO-OssdlVMOV)s%B+%y|NOx>!dA#sHyZ(D3ONQgfw{0N9b{PM`0!Q
zDY7CGc}d9}S}8eY3og7qPaZ8e@Je6^(kf#Qhq`1QS&ux@ocRI9^>eC#WV{k(os)>i
z)oVCKIE|=pTvpq=;dc`HWJtG1@xZ&3K${!>9#o2)CxOhLb&M$9Aww$P&o$Px&38!<
z9?*<;Y^0E%Db2OKct3`iX}Y!Lb15WC%hS2eHM=7JdS|RhapLV7F1zau+gCLAvKm?z
z)g4PQFvLCGe_REZHXR4x_B#VP+P;;%VB~v*fQ{t7%l@d}7iIgh4>`2?JuPSh)V@S_
zpHHLDf|0Dn_6G|VA=5TdDUasSlC?4>Rb-$+qfpb3RWzZe0NZlSgL&W1K%_;CE@{X@
zS>jD*R<$7jS+;cn=m@vIZtM=|XjWx&vEJ{}m~2euWo>zY*|Af*-I0Bj|A&5sUza&?
zT;03Ar6*Qd#LJ@rB4l!p?0yzpfo{cSHqR)|G)W;gYE9{6urdl4?dVl3S`JQN#DO@5
z(9(@1&qUVosxHOtE<*5hK`14x;wqR&v-V1t`-9zh$Y8DBD#MC>=fA5qBvUSr{_*!C
zAVG0oZS8b)j9(lg(T2<!n0N|b@9if{j53x?$m&y@tJivxIiSu&!>x~IFx1mMMzuf3
zHxXeq@Z}zC&(eEdh|#nUnJ38Hz;PH1toi6RySrv~i*}(`Tbs<#(p-@>o)+J*XzSxv
z^KQe*laPHc{zxC3z;=^aLz^p3yt9EIHYumbOL-Q09UqH{kTQvZD=#gXs2-b7660eo
zr$`*g(qV4gyN3Vzz49%Aeq_Dn<AliLiCx0G%njz#mUk<=ha|*V^#Q<F_=Csy7uM^-
ze@w}DSp|h^hhW;i7K9jBk{dB~h7+au(kdTDeeHF{JceMb7%Z=vZ4+t#U-}DD-DnF~
zcT1%rM_Zf90Lb0Nxz3WeHm~hbJJGeSj`67Jar;tgvqo~D&)Z{H*_XbOFe?1Hnnk8r
zWE)H5;q@Q)A_bs*os;%s4655BN~2mf#qbxZ4-+R4scX_WdG&a{cob232qzXAxD6UP
zrl8e<7vp#uM6k*IovMV1k>!-Kgd}lQ_PCJ#+ID|w`-PnJOn(^{gep0|xurZ_mG??Y
z;g8|Raso+_$D9xs+goBQzG}em*Bu%Mu1QH8sms0y{q_9xGS%t}A)1_uRul6Mo^L*Y
zN<*@&iT*|}H)@$ua~M{Z`(4V2^vFtOOZAM}vcPaFC`MElT3AsPY`;KO^Wj+yPYA(h
z!To{grH5l}(iIW*D9AZE*Uo(!AdeGm9ooG%OFcPK<(<p-DGW60Ydi-@_r7?Ui}*0h
z>G;x*O7%YB^68FV8Y!EaZ8%i|me(eCP;k`%>$gA-R(_bOKsOx@skFZ+YHx58K*Z&o
zZk16!LA2AxVYvmOYOmrIg2U39dqSpt>SCqF!IOj+K1pfF9IlRpgbl^vr^|>zZ;M(#
zdgiykdw7-1h1<oi2QO1Cfw}*)&WRVBGGY}i`HDA1wS{?%p%lHez(9^p;W@Yunw`<2
zdm9A0CY;Alx4V8LpX$9=PcYG419!d}Ps`bqxUfAs+-U6|9CXIEyra;nj%zM!eWX%w
zwVK@^Y=6iRrxh)si+?ohOs5w9zNE7})2FA%nEriT*3$0Cr1a2&3eC5t8}gptLTsDR
z)U^k%O)iR?zoed|MTGr!@?1Ec8BXES-ArRd^5u7JpWIce5Rw9+Di`ud9kM57>uDoM
z_ThytVfzOw2^>}G-Iqz<KH;;9rdR=W&z74+23)c0AtBub#HpfWPyqdfywuN!CaKi)
z%I=^d{J-Y)$qAaAYNCN|_nU?G!u_+bbuw|eI&|hwqJJ)`q(=I1^$Gr<YR{DZpv&gc
zsQhwnccY895}9o~yDQXI0a`bvnG_qmSwbv-gwP5Va^boZZ3~KE>C^&5cvQv*Oyudb
zo<$C37Ni;2B%TjmXUEMB((!p?WMk>R%02M-^ce9?W@P5)uL4FT&CBpZY^55C?X#k$
zz(?BgakWtqdvVYv+lWpd@kBA~cAV<Vi)b;+W>^NPr6<fif+%7#|IYeN^JJP!YWm8l
z#F^u%g^V#B{^eVDM1=peR@E=(Bu6LiS#ePBO<vg9XqjVtJ{{HIQIA&lH_6Q`E)s3M
zC#q%L;lGUuaAu@%O@wLu*z1#PHC%{BJ<%prB^|WVk$S?F&+y%;SFQ?SCv?K=A6TX>
z-Y0ffZQ>pOqim+;M`ys;{*5)4cP5|cL>NJW>_IT}yIecykh>3eBOFx2_L`N4t_QuH
z5NjyoJeezrqKPG2H8LgcN(CPFjUD#IGHqhB!dUL*D=Trz2=%2+Ywsfsj0Z}pWEIE{
z4eBfI*YG#U_dKWQa*d$(r9viQm&SqA7win`Y@M#-T?x+AVgVCJv7NfFRs6ayIhqZO
z+bf;X#xxv!z2>|zOA&EOw~>Rdk3rLO9c8k@f2eb8tQWfU>n{La0aE65tf};So(+%J
zUq`=wDk<q_#4v21Ye;{~mud|d*5c4uID4Bh$G?u6N9oM(oS@Pu+wFFVXiR&tT(Z|i
z#{9Tj6Boc2ae2ga((3u#;QnJbJvGSyv`nk0WKsFN4GTc4TGRSIFtu>2=^2t|Lgk3;
z%QR+izJcC4y`Z#H?rZ2f?;e&2P-gd*2;;Dw>l+v83hIYyH{6LpiV8mQ^f!lD(<p_n
zRkRB*z7$oq*pUShLXHsc1;SY3_Z0#qWL}9Eyx|LUo9F%{sa|-oj(4lLKLi(%>Ld4j
z-H&&>s3IplQaf#c@|5RDip+7j81-)E4)6Be?_9kw-4%L7cR1?W$UDI+*}4%2pVV_2
z{+_{&DE(H|zZyKdnf+}C=kE2tS%Q4M&iBO1%(Iv|MJlQ|I5^x{A{t~~VM>aDKe14Z
zFkaNWZ!JIeiT4n=S{<ku`f6d;b=a*i&Fz9e$^^aerI~la#D=N6EFR*=XMkzm#%~o|
zuc;x}<mxff<+Qc`mb@cA5$b|BYBN6>!%iM{3cs``Xt#6#FDImlfAL+J{O*0Oor(rH
z7NJ_jG@wTse?{J!xkVjT<D(&CemYy(qE0T@ZTz1u3J$HsD~zR!a62~)ZF1pVXM(|}
z!9hNPEs#F$cf2kmMnG!I`Mt)X>cIA(N%=MYsGMds9(@Lh?~j6vdY3kT&0NXD*O)v1
zIZtG?KJ5zI${LO}VPZM#fnaVCS$;j}c-!@l1aVm9?>z#QhypNI!~b{iXQxxT*iCbQ
z)UA5z{VQCNN?Zr6XK9-vio?rfO~Y_Dzw#l`i7ZnbIK3d}L>W8kC7fe|{`W0#JL|nk
zS9kJQV$TK}d=aO?v#+<;RzMt@osUwi;7TVyd*6lOi0slf7D^FWLH~H~F9K2Qst`YZ
zy#fpa_tZQ|#eqkm`;9Yw-}<jgJE96JZG|PQNXjW6nqpPw61ldL!=xReW^45+W*!LM
zXyEZzc^3QgHh#?nwhPDBNEdr8BZ2f6HF?Uk!jLDY@j>5|Aob9mjh}_C7U7=Z-<sgb
zW3R)k@-s}0T;SycwK%6Zab@#*TWT5x%-PnBr-cqfiapeu{p{^os@BaGkI~Or0jc#u
zw)jWogqLCAT!7=Pm7|NS`!)+f*ze!_ERoktrS%&2nP;T2&&I{(o~w=oMXjA_N{7Es
z2R<0KFmIh?N?M&PZ7`95wG4`GtKJ1ld@Vmojl#c>X|htsXRT*;nkDw<od<(LA6o=I
zR){Mkz*9c?Phl-5?@nlaO<8}lqX+4IxE%N9Yq2(DlEPO<2pKKk-?0QqZA<(6conT$
zpyOLvOVR>)vCOf$#&yevBz>#mQPln<w@)mb`x<&!c-2a&VSA6bgz)(MkJy`x9*n;M
z{cnun3!5Nm_PfYHM-$nm{*EZtcTuZpMtvZs?X3@XXz%E;hqDV8X#^&km2fFZN>2`U
zRAj1s(ig%Xa$#Q8UQbVq730dvc@Z0=Jov~G0O*ozxlLX&6*a$N64fxCis<rZvsf|O
z#*{&lVBGet0||jaqj15qvsnhTr-M)DePgE&75dUttssMsQW7?&8J8DZeIdr#y|tCB
z7c(@^1eK4{Q~i%o?PVh0UX{I?tu9Uson790!Q)fON*Yb`Ik7VEFSZv4dN%<N@*Qd%
z_XTe^QNZOb<Lh*-=Vd1(j=_?(zdMLDIb3A?u$m&TENE)yT9Dk#3zi&QUyv|Zk|)WS
zs9|%k5344mdF5sF(wIe|+;G^=M4}q)%pbs1W(gtYq)`^bZ(8pNZ(Y$~eNj^avmb>}
zI&c#9nL;j<-{ZWeDL4VU7vFauPa3hWa{tXEZgqKW!2l7(t#_D0=mi@~Vj_w^P1Qi}
zK%$#*k;ESqE1eYamwGTGv-6f+!Xey$p3(Sm>K7rXiO{RFCoXy8dyP4TAdO3@%(!}s
z)8yFBB-^I~OvEak#;s&5U%YCQ{CGsXz2+@ia>&eDB&+wSU7M`sy||oEUJTZUFj2#c
z?HObU=5KJwuj_XzyYwVRyC0|4?q-j=O7)UMm<*=nUMyXdsrVUaGQIuy@4!CZTxjrA
zt0@+^*V38dG6+^2rc+HFzbEL#0nt2}C?toTSs#QgSEFv}kTSjHW}S)c+lprQtj{!d
z?os3$et*+~NVO|hXXAou%yaj9^)Enk5r=Q$8m)NIfI?Uc3(S<nVWc<@=&V*)pGOWE
zFl$~3E?e)rK8{r4HC;(#!*$%iHE-|bSP>Jx+R1~&<Wz-E(mkKAhO_`Zkk)p{b|Y(W
zv7#P_e7PW#Wh&Usl~0^M-Kli8ml1r@Az9e-`8TWnl1dxUhcY`(h3d3;35nCv|8%_P
zWAMk1<VPjkOm*jqNmXH<(JN4Iv}2W&CjDE5@6GYTb9k!-Oz{JOe^UM8ZDT4bezv1>
z)vvohtw_CBruCNRtv~K(X|lH{iu!Of2c>pVKHQ*>JTKG+C-wbL@7JUIGDCf)ycVBm
zyH9_+>8Xann&ZYAX_*h1jEhQFPhi}sh9U9obA?Q=?hWrs`Vk5(Crsf4_SyIUnr!^_
zJkgWe-FslXD{cQz#ZLz#)CJ~m8BVPIj$MGuCPRnu%q$xHW_gPZGQ@N&JzuMAQlzL1
z+%WbGoS|>sMVokDY+!%?jcVPVd;L~5(M9?=g72fI=3J}5jC@;!c4C-!+~wnY+MDX<
zg=^qz|0`AW@o^R|c&{l7rgLF`jlj;W2kIF}qYx2*NMKS8luD$AR=Ip(D|>Dxnk>&0
z0wdK)%ZNG{ocr0g(Y^A?B{MK;iMCw<=Y|67zF6C_pOdPj%?hR{AivPV6XA2Vgb#E%
zFH!;D@b<$T4NPSOi)z5Ug;9O<t|NQp;!-Cu84t!xp_!RRkGh~)|FYLFzb8}n`UH^G
zdI*M|;%0BA9}d*MO0hm~mFefc0$wHv8Xc}`&Ox^kKV1V_kHanNq@CtGy7oj!CiHSM
zQ$6UA+uqtMvtZJl>YvWB939t+o4vptRo1r`p8@BM4>W<>FL9%To^;TkX`&smA+<xZ
zGL}5TFmI<kJ&v?KBLpSo4}!II-S|Wqr~XVS$r%Ic?FEgJ*^NJV5vtG5qY$=anNQ4?
zK$~#i`#XDYbiko%N-upx42;4i;ff!5LN-YK;NA(Rs82AgkoQt}#`dcVvtohv+L&E;
z1zzmKKbAS<Vf8<Fij9Q`Kz)A_qykyJ1u%P+HE(q97aD=dlY4I-GRH?YZRr2yHJon0
z!s=!R)**_J_=J(>(xzv(c%*}?o+=qoSPs8pcGy<bGnXRm82Z**kZp(A3n1!R(v-EE
zBd#<P;FFQGB1|CdY*qQhLCA5%reL})i?Dq1YM<Qu3+=6^QZ&2N<9`s=O8MHBb)PhN
zO!aoa?fY5CG|k)Z%Eth>Ux+<!mp?>QW*wk?`14TwC3zEYzvr$JAB-!)G@MY|qyB>v
z!3J-9M%W*Le5**u`=l^nYbT*i3Rm~8Fb{)^e$bax<C877pzhNjkUy7=qIjk#7*6#h
zv&oN`E8;DFG84vmoLO(Oy_THQb1GFo<kcPg>iDBCw{pZzO$p}=*DUh*yPJ8&|5JLt
z=JaAdd_816esH&_ksK+l2;5rMCaRUH(^wCXuCNU5BHn*;g^os<n|1hCNS-t;n+(Js
zirI~cHF?EmPXx$0R%mZl5Y7SL!+X&4Nt#s1u7-PO!qL^^5O64+XGi)ibjoa(7VmGD
z+>U!>%=zcYrSj?*)lsn$>LhBbxavd%!leNzPfWD)Mh=1J>?dU0Ux%X--TIPaKu?9H
zyHxBodwe04+l~pXGe+IE9+>E8O|<pCvuS~)-Tj>xUiir6dhpKLiT|$2IhAa&V(;^4
zL@0lhsvM*uo8bh|1u`Ja4X^2Jm0dr5Oq{C{pH;caMep|Zo_c<|D>eM-1iV#sr|zL<
zhJnGXiadxhDUbV8Pb!6qeDnXFll!wauZle=+Qs^_N?)_;ivE05j$+{}CCIaG)_Ld|
z7&wTTiH}Q@F@WEFlB>K8p<YR{T{keZ0!ag+5O^-ZpjmHu05u~yKVGE;*v9mm^zT%W
zwlY=K=3{GLQGKV*3E^02h1;6GZ+T}7#NdYv*HtiqypV(&5*>Od9k8($(i+rg;l|Tm
zr6^_K@R1zmk-6BpBYqHbWznm|OCDHDw$*>tlInMski)?pmcWw%PQwkP{1uznySMkF
zU~nXNzLukw&g~z?h=xC9PTVtG$1v{mkWS65wuTT#nMQ&4K@&$w=iEI6&ItETpbtp&
zLY3yGgBEMvo>Ht@u-~R|_s03HN{kd2hK|&PuhhCG4<PCT&CX}MF3J_I@kJ>XBw|Q6
zeclo$krrl;nk}PvEa1R`=vysg`f=$$oX%wM#1&_Wg`cE+rzka@7sNgsrf1C(qNx;S
z`cNwUfJKvJKH6(D20l$DX%qEsWXz_;5|yZehoDV9P)D^Ld_B;$;@{4~oqHVQp2~p*
z@i4z|mCGI|SQu7`QzTl|{ivsPURTc&iuF-NgN#e)33~Td)}gsQ3?A{CmKWT$oH<9O
z8t7E&%_*Mwmk>3?jEem%`{S1@zCFC!5<-K>YIwr-)XLUL*NEbrf++&fvfa|O>jC7I
z_`u-I@Z<IV6{zn1;HI1`JxMtjEo0pF?NEYnlA!Pk`#RRG5LS1Gynqyf{0@bzuXT|_
zNzr5<X65<=?nmiE4qMM)9;sG!%cpd;IPJ1k_h+mVEIA!~6}M)|d@4|G9LIAgrGzaV
zu!jH+5H{1ze-ZDW{ex4~fu7Z?qiY*%{55&)%}P20ZIuD#89(Qz!;`wSOSskBr;{JV
z7@=qN07Y;JeaoDIZ+nTCmG9#XHY+kUvU=}VAE#Mx$U9q^#dsky`)1_nz*H%yC@_e|
z%eMv*)0_(b2fazC@9*P$GNsdwMfSrxV~(6F(g&aM&VjEo{E542=94?IiUaE)*Onro
zfAm(R8;+Zm&hnsXQM!gH3~P~Ls(g28!Ow4Q`P^Tr)&ZpOD`tQiS?XB+Q@&#Vv91)&
zbEVhQ-VZ*kjM4h?el4HHSI^$}npF!pwYFUdt=g4@a7nERnfWO4BtGRtMiD;|qN0VN
zJd1FG;|z=T5$z1kHCzqzA^5mdhF%2+*m~POvvdw}jKHp)tsvWUI*!4O2sb<iF~Y8<
z&To3ucKE#y#u~pH#a#i(80)g#cN;fIeH@bZ@uV%gAyAhm66sM{^GL^kIg(4w@bYCN
z6i715mUYZO{R~?(QzX$dKdZYpvt~IuWW7SuOg5-~=LzWl=yA7Skz($lFsvLWbUn=r
zJ-CG(ClH0(M2T@D&Kz)jQL7_5$!zYp1)Np-Dtd4@zj{7=oRLNegM(6&%1b`11@(Gc
zEZ~>eB-+mWFKC?E{;;l|!Y1V3JisDk7Zm1OOgH5%J1O&86{c=ru@C;dwQ61`eD4i<
zH?5#s1SBHV@ntKSlJ7s_-2L%`Vj<Tx8~itd^j5f;<C*#4%+XZ?_dNOkZ-C2!0?BA?
zqRJ_jCR#?R^qEQk9WQ3Wv-H*bJjWnQQc9iJH`85mslsJ)(nG{+Qc6izT?UJ@j8p1Q
zPuV5%z98e9Vu5dn_D?dnj4Z!k#ErxNp%5us@(!vsZ~pSjc@JkAxWfR=SP6<iaQ*#O
z*@1}yH-a`Vj$3-RXGOEu&ocqV*=@t&bnvzk%0BdPjZfNtLgo#SEqE7Ao+66oGlGgd
zdJeAoT$1D9%nMbDXe?Z4!YN~qUMQ#|WuhqEfAQL(3fgyGbt+1kd;j9Km^E4)B~#HJ
z^LJLYRid9Y+|Pe7L_HRv*I@~#&#uf~R;qQn%Nm6lVKL}FE|l|$R`_#|&`s<2#I2rq
z4K#(T+`Gu&y3a~xB-pL-FKg#odM7FE)A$*np{{7~{#xY?Rw>-s1MUvj<RKaJ==nlg
zk>rgMH8&H&W$Ku`lji~1r*Yhg$Q}-bQn9W@-vIt*jxJYjl4%Q5&-F+)=k|EP!EuD~
z1Y1so@&lB3yPL|eM-p`=!JXFCR8!4f#<<=Zu+p{2<8=Y@nI0m){=B>+lwLvLo44`r
zOAeF|+K~wMy~-dJa&#2GNhnx4k{HX&<q)v0#S!ULjia)TC^BH8X2vOKLSGw9IO#nV
zk3sM{`3d6=QU@I_rad8uc*LTYm#^QW4aq2*d^he*2egs5>c_W{^?ctQlZW9vWP>fX
zl}sQ0+mOhdq}A%2-qNJk4NJSs7lb5P$(WezDV4U{&wpiYK=b#&SdpEdg0U%w$M8O=
z24RU{`pG2RGIFbe>~P+_JCTX)f)He&@>(o!q?hj;Axbp9u+C!nPI)J068U-n+O-+B
zKJBELuPSQ$YXuO|?BAF%I6|JR(WPqc{;x=b8L8t%X#&(L)!qNo&h7$Zj<RNrWBwtz
zm~`u|)YVZ6nGH*W|9k#d0AY~b9sV~v7h&nMY8}Npi`A&SI_?bK7}NVCl?)?fZIMA?
ziS(IdEo<|u;Hy%!vrp=bOOUrDXz@5F5Z-_n3bAR8{Pp)f>yMo~l(Zo4`&NMA3DZue
zC%jpa91G=Fe+MM4m4n=~+L&#aebhhOSS_0p(}<Q4l$14+T2}eWMk2LA3rBLIRUV+t
zU_OZ)UWh*#`$z?)YW7+~^3lYQlp^Km+C%&rqw1~pe4f)gO)oq#IBd&UnLdb_qiva?
zbGnVUoehH0W-~Mi>mR!7_spz}h&W8ah(&3vds^08XUli2;jj;IinA01lh#X~6%^&d
z%;D_SEtV@_?&nYgvICy5({pq{j+Km1>{Y9T9-OsL+7rgnfzWO2lbEWT;SeQU;}F`D
z_7&*M57eje+YV71b922PswEEL0uuu0_1wZG8<zeRWu-axuSA;29HzxvDDH?16)jD*
zo#X=uXk2e#qJ=~-QC%AUWqQ2>V3fY?{hfAVj7xO61Jf)3ogWq;QP5_J-k#-r?Tv)q
zxLB9aMdF0bSMn@aHTZ|c9DsaKl#k8|L%eNntj@r(4hq1ocFDvr#e(Z$SFG9L4jo6Z
zRA`BwoJh;wQVlXMsbKCpLCiuw3BF?`1=mdU2%ebM|5a#QB|p~So6lALb~peq{u?)M
zF)Ms#kv6u0{Eixsz{gL5A5?<|Uiav%bmN%<NC#rYy<UUQ9>o92KylC2ntLBR8XNqw
zxZ_<*OV}qhtQ{<~xA}0d2se0`6~Uq~_^{v0cB2D*0(HDVhQ8;2mY{Ae5BBe|7FOXl
z5h#5{sB(x`D3DtB>|9M61Sc;-&W{dKH|TnpCb_J_$gZq?_;l_!iLw|#dp+IWBhk@z
zv1uF>=-VEr{QjlJF<Xmm%r`{sl1M@8YZUKnv?sk^pV4O<G~0z?TIu{o8SA(mD({iI
zDz|%bPTJ-4UwIU^XV3O1BrR>n-+Hx;FTf(}@L}_E2QKJ5<i@~zK@a2+e&iy)R)Cqt
zw{Ta8+4uV&U3^YBL!ELHW>VPo%;FQ6-SRs{8<vLUUul1+bY*vhd^ZdE^Ox)8T`s6=
zi~2=51Nw<#2DBSj`8$|=IAoRnvkH5`%QHwgBiJ0s8#o=`K?Q2&=jR^4@t2lE^dt>$
zk3v>oDritOMt`BU&MNeVt7Adz02vDQ8|(T;z@;gZ>t65J`nYl>9DI2?F@yf6<htXY
z*`q@3?4#!p(LCP^s(Z5lJ&yuNgkRwih@kKl;F@<=dp#0HC#@}vAoQ+9jYOlT3Hk*Z
zUXcqHE(A^aLWk_|zZFWsz{{!Bm%#>Crg-4*?jU^Bt~jZ6=U?W+4P%7C)_=|M3Z}9h
z3zbZ;cLarsD;Vn^={|%uF1flO_DV&_sLTsH{Xxx!jck&P7Gw{`uL&?P9{+v;IXW<K
zlt@7EgR;M6D`fgsr>k!z|M2o5sT-MB{X{GFvWFw`lNd>rSpO|%u}58OwQ>LUXbMOi
z6Ov20I|9$(Ln2iI?PagL`&$FI!4=_lfpOBeqEv5@1$j^Olw8gk#{P;F^z*gfGHR=V
z9n%81Z}qnql4<u=)ycy(32;zq+aUw~)4K-oFft=w8<~Ez^scUnOKR-ywnBk;YZjC_
zSUDQqU6Aqmhg#<E0_!TYGkWITu=TCL8N%GULI7!i>yxk_<o?dq1K&Nhd8r+Gm%JBs
zzOq7JW5tgxH`Yo?r^ZmjT+xrKQu|i{F=eC55W;QwP1$?^E~dB2a@2U;zZ8%rpUTvh
zVx8L)&P?8m2dHY2qdb&12#WD_+X0W};C*6Yfe*flOuTAkTqB9!Y=nL7X$fOHE&aMO
zc02=Z3R?$+d~$_6=Jh{Do<_IC99f=n+zWHmaV^li0G+M!VK0X+Cat7m3VFkU%QMm!
z2eH?+vA_EQGdq{mPv*H)0Bujt>5!n&`O_2+Ri%jLxvierhFub1Sk&CHw#)r7tLE0W
z`$uyXglMU?t!5xd#vg{$^Ot0b#|a)Bhjfl|vE#WC-su_ii2s0QBZ1M8%=V4Ox_w&F
zHi{%e^8ef>2t2}!2fYu>+D~Z5OLUl1%#;)c`(^?M4LwOtlFRksS#n_Cf|8JW!8z8q
zSQwlIaeL<p5b(Ynqxoa?G})6iey1TXE-Ku*yQ`x@Q)PdUyIfufw|}!Xu}W$+Vt%33
z+|~R$$yt=Ky!&s(nQ^&C;5RA{x+t?6yRSOZe`*521mBILn4*SqrI;)DWP0*M=d&Ut
zZje<WU(#|Fd)$VZ_`ZtxME-nWZhL)@LV$X;6_DPOl0`*J)yKlv`gcCwW#IDfKP*QV
zq7B-dHQPZ-?^&z#vC%8!e+h4_?Z%lj?-Xk7C)+$aA{$&S8<C2#f~V~-ajhQumqfmv
zg>7tmYha=?m9`Zs?BuuYercpgdVj_pzJuYXBM@F_Kz!K)O!UP#+_^M;WM72za-x2m
z0b9P4Ow1#aK-!CL<i3!FkcoEGQ{F)}Uf;{L3OP;I#O=GHMA%cu*zSTqZlp{>cws;H
zD;>j=(w%lLNCrM0`h7UKYdZlK)jDY<o=4BRo;@GoT^9T&wX>{p-y`sXntS`olSnS{
zGC5C(pvb4R9nL6T!T~@7>MpEwNNw5(^2ghSw)kFT@@|UVcFqvXSX3W06dEOH)S?!+
zT{UFy!~YCh6;ik*pVBHd-)=eW+it6d?ALutL=d)|<$imgZf$!54`CTMW?_jsFmR&_
zT9_5O%VOp-2B4`GZE*rh-87<BXk}eAzaoqQwpiO)lwy%<SAf16VmASNGRID=4dlBw
z6Yg05bnS$YjS>1F?DacRlK|v!qhp@CS~FH{D0gAo!3%Y4N1zm$!RN+^zMb(fc%p%{
zX8hu=hm|!nepN0cTVXD&Gj<MwBiv-a>`)b*Hi*0TAbzsBus+CJ#2y{TL^yfSCaamY
z8exqvYF9OEq<mL!*s<F?q^-FUU;7za)|u^^g_T!G=)ISIom&;zL9&(^y~$7q4sbk^
zc=%5`IVZ)xFVl(5^py7k7C!=IetcY|=Ua2Eu05?;^10puAOe&>>FuG&tXRCRQs)dr
zLtR$w7IxfIb5vC>nTg;Ygi4iVyWMlq&n5FrE1TrI@xlFYvxnp5hn@QTN~J&dqxZ1x
zh=HGo;gH$b78$OuOkz;uBT$p2@p%bvI}o@4ZPM}8L?_RWjRwz_jt^ort)xS?x&6QM
zE@&!Ko$`q#38$R=QvUew4<5^*&TrRYQumB0gEne`FJVlvF3GsSV2OFMZ_qVDOhqWL
z<he!XQ-=E{oE@jK&^Mk*#9sBJSw;Ja93wO-QRF>q-vWjJ`{8xp=9$ejb}8yYBHi3K
zaxFc)Gf?|dJqRLK|0yRegtU1?Y@7)Tg6tdbeW0LR2xoZ049Aq={c#c@`anDDI!PJ)
zbA`vPe@g4#SWc4_ORF?fb#F8{#BoF{A!&>8yJog5S{Qmg0-o4q>iD&|^%oLAsuZ@b
zy-9q?QHc83vZN$$igv`NxtbD2vtza`BN~g$66A#jD)q-dlWjeY**~cTIt!C~bRNS{
zCf5kF#o4kqwFY9-Td<o@E<ALT>JG^#5;?UsouWQ5N(gl#^*s2k3O302pXnP?=)c<k
zlC<E$Eg`V13=B7mx2%%`+oc3$uPDjt`;Yd(7<pbVE+3c#fp9kmT`!ru#lxq5sl2x|
z3LS+qw@j&!=;3jM6Ff|R4LK;M%@%$5D)xtod?~ZI#RXr$A+D`asWWRRJ=^}~KM)C^
z6ZY)WUhAA?b}8r8`h%-t!CLH&o!xJ!0H1bj$~Bs;mT9z_W}#I8gbS9;9fwYD$$Zdw
z{ZGKkEaQqm*7P3E{j&UYr|+P>QE>A93PVgXmH_q>sEE=%KzwZew)~OVhA@Jd91+pC
zY)#=#*YyRO`knP2`L@zuNaNYU^zB#DudXx5i?;%o_&{v5{0C?&-vt<a0lPcNUN9l6
zDOPyDXoT<;<P)r8QO5e9ADq4{oAM5MH0}X1wmiZOU|0j1UgRnz6H(*V!zQq!DZ-DR
zYeon!@;<9_GJz3Gh5l^#A41kxb3F=Ruw?NZmT(nUBK_dmWssICH_boQoJ3B&C4E0V
zNp)W6Z9rD%lD(QH5JsZwS(7HoX`#Cz9_a+}Vh+UXgsm%QBiV8lJM^4w5@d5tw_jiz
z8qw$-6$6f-RMr-ww$4!{|G-F%|GLjx@V6O+yqdG!3L>#SuY4+5_pyGvVCPqosBwSr
zHd5pJco4b_{2Eo*U{pdp<=#As`29eW3Tkcj-)w0|Xg@bhrO<24bEhF)Pcz8DiJt{P
zDaYSL@7|?eOA)U&%7)l%RpkX=fI3GOu4A^<-!2Y9-k(Y|=rKQ@wdi`XG3U!S!UyQR
z(6C$_+C6sC#+jY?s*<1c%G>Sb46$eZ4wkrq{!B>$w@I>8*i4s~vUfL2O*{?YLV5hB
z@m79fIp|dV6<yS;8eK@-`@;DD;rA&hSA@~fS$jf3GNPN0%p?9NToW}Tl+6YeFgrgG
z@T7iML0oh2ml)oyB;^O|%k5i%eWywYm^8c$;xAldN0#H+N0`7jXKUltg;Y~wcQPFt
zKiHo}n*|56s6(&4Z{Z8Jyy4mVkr>@u4!=%KSP+}YGS=Z%N^)yrdzGY(&+ujGd3vU}
zFx>xC+Yox=LWn}BwKmAoYjBNfH}j_;n>YWSf*tdWIw<T``F0+#G7%f4$S@Zce7yMM
zmHt*dqF}{gVV{j8shRgfOSI5KB9GlHc00LQ%wWkX91660uB{z^xWvAC;Vfd}ZI~s&
zs)X|TD3upL{7SAe2s9l}MKZ<TQBE+MBJiAuMr3!fX>12NZ$9$Ps%J$e-_1)*xy6s6
zZrfx}{R1S$G#_?qDB^Wiva0hIzG%kd_}*V&);Rx+9kZvl@$y|DtR=zELHmUg8rA_W
zFEuY~uhOcfT%S!5VC%f`fR~B$gbv%UyE``u{1N8D<L;cH?-DjRwyls>wQ{JPK|;8F
zUj34cY55zQd9Iae>ZJXEfq1felP#ETqzdTYr1sG|k2xK!y>ew6lD+t2=rya-!vE&y
z&4cdO@4gfo)&Z*(Mm_V}`lw5ACHzT&@t)N&!lzc*21kovu>^dJajUEAqs8?-Ghscg
z0W;3TFk?ug$=hs}XU}Z(`azB!A+%mv1O~II^e)c+;$VDj4tGQpRYnhlk@kK2owhA(
zNYN&BbnB+XS!p9Mg7DzReTOE@mStjEN_#p2qIP!0QMDwInb+Z?g&i_5v03KR@7E29
zWKGj3jCLVhREzzsj#euMI6}7N*u#G7TCzTSExKVUlQDQnZ$)xjNjW`9sxht(nQegl
z0XWir{VL;>k5jH6!VQd)<;dANfA5XqV{=@S36}l`>(7?S$wpeu4~F*|X?Ya74-k01
zEbOqqw?0GQd8*<V`y6BiUcKNK_Hno6@9<}DA&F^1@e8M<GW<P;HU_RrrO;Pe`}mxZ
z-4zp2P|kx?kXBIj3BoonKR;{s@nXpjwFXP%k+I6@(%qM5y(x&Tzx;V{cxJ|-M0~<}
z>|s{t+;6Oe%tmW-^fNZ~3|!4_xT3Ij=nQx5Pkih8W-MiwCF`IB>B*5ONm{{9GRvo9
zZ|7*r$`ji<^gb>{et&_X-ikvM)`1a_xE>civ`s263_6=|A~_JiXin<AM;~}rIN35g
za2_>qq>b~A%IS8D{wSk)$VvuzYP@jXoVWE?aFV|fS$$7km3vL{z3JQDtPv<~oVEGI
zAi(u2_tK<FY|zJr+1Rq9TKryc-FhRL>PUg*-JFrnK7PZr?rUF^P<&5%1LOn2<yAeQ
z5-Io`iie(Z`m~*=$)YANxwVXx?l>DlWZ#sD@b}{yJp$-<crA*C6vdoBZY(3dR=wZ6
z_rXRBWt~%o5!<(fOdKZ$yc}mNbLl9@j9GLRutCJP<or^F+)gz_GTr~}xR4;|Q8TnX
zWuZ}V_8nF66i)hba*H=PHb({}t^n-~Ul`R@KCf5<qn2bScl@+$09qv*xbq3MevO6`
z9ho)-h$}TS4tEN7=qoXF)iJ!_wp4qUI7GN}@ap@ICv)xIf(m~yyTYQSv&m5|z7={-
z9`JQ?5~@wk*yaod9*F&YcsiNfw8vUg7JC84S`Pi|L-zC8c*=HvKggKn<SQb{pxPjc
zBmQwFV)N0>*;%8+QZE>_aE7{@)@Ap_UtASV2m%5vykc2@s+7LyQz3s-FjtjN{d=%s
z8U_Eer?^7;3k_)Sxc-wH7;jsj#wId#wOJcl;H4GWtlbQ@5e+g3ffCZ;Gyp|l^AS^*
zW2i54I#FPvs;0<U0)L-DK&Zg{JNTT|I5^zBkK_hhTtC{@Tj0VX>fA$t9_{%~^-bep
z%igPv=olUjV4jY$%gnZ_DcZ~tHgGg;%w+vwWHurY;*9?1Vv)$*2M5;VB6P7a;ZYhk
zW9*6$p(O*)E0;|8E!`Q*|LPmpcHqr6*&eH~(m1G^g;x~iBAH4~n$p{wo^?d%6j@zV
zc04*XIbo}F7upADN-u6aZC3)E{&ULQ`C|IRONbAx#x!>hAfCr3*uCOoDw_dq^5NZA
zCwyeZzb?rthCyL$v7Bi?f*^TND(4*kjsjR`w2h<IHo=qLq)O1oYN~Fh+@1-rP78~-
zzF>=d*i`W2EArW{U+Qi+ig~w|^vNlY9jZ;rfA*t_BJqOge(*qn-C%MrcmI|*Cc@gC
zykM;6LKCl&yfV&VEfbGL!9m|wtdA3h(qHg26eNhj@T~@cCau>sOpv13u~J&UZ%4_z
zmCF&D)$eby1|D~aqM#diy>^bI`KI^YdJBqq7wx&RU4$U0o^f*Cr*Y6dX7xrh;Tyn6
zsAAF0QKX$xR<xIKw{IP{Pq(7<XIRJJ%*qEf*Q5w}=UG733ax1ceG;DNX}mjkG~{=Y
zkfvN~F5fOTtFq$1ef3W%>}D9Go3PjNt(6((zZ#4uHsph&cjP*0)8h&mzP9I>Da2Ak
zy|cuF+4k0*Jyy$!U30|YJFP_t-K2^qIz~@EXQl35m!>2R$xZVlXm4N-@E+{v=<<rk
z291-<=P!WA#eotHXwUI5nCsmawyPRj##x`DHJgb4TM{7M%{4$<J^|?@ZEn|+>YrgG
z+NGauGWxtu6X_<j9(q5q=v}<c28oL```rw40G|%Jre(iQ_cs0#j%_sE!Ye_Y#B<jI
z=|msyoC%5Eab_n5tK1jiG%IP}y@hAR{+PrEsdc9k@C~eEVZ64DzI<jgy~2=hgy_u!
zDrbY%UCP1Y+NY$ifCo{HWDF-g!BCZ=pVR$0nJJG^#FSMTqlkQr<k6jgc6?b|sAQ?N
zy}5Gcy5{Sf$uXB;)xm(gWK;hAk3q?t2=^W<)`{rcU$xpqzw)sTR|k@biKUO_==#iE
zvCJFTQL~PymmS4Q$%?B>%xchd+i1S|sL;tP-khx*&28F*uU(R)<ngg3NK08PHJdgq
z-_#j_s>#Ao3{|{-RL7>fouj9Dcc3;_66;Z;`krL?1lr3DxXS)aE^Dg|<2<|BO35##
zry>wB6WV#ODB$VQWIV{oM-^Zgs1DSH+eVhR4~uJA*^wgcm-?adKvtF85++Yyi#!YJ
z=XQ3i@!xvu{;}lh=WZye;x8A(f^AITBnH*L^!y#M<Cn<mRGynsfemxxc&~e7uE-2C
z^S0^qZgoPP3bm*$K6<*$jI@f!uBe>EqtW0S=E=K!iNaF%iwDENS}^HD->mb;;kc)L
z6y{=z71JP3vhQuEHj};(e2wKdS6xOD_-L1vy+FM@xZSeL-7wS7^7Uv2@!_wQM21po
z6fMxZ%21R@OEPZwh)x-muIoF(vl;r3Y%OIFKQK+>X`0&FKS?TJ|HsUg#W$yBRAiHR
zX}774n68?XMHG5)Q~KP26q!w40{)1#AVRz2asG)maw`krMT{9gNE6o|u4Z@YDGc!F
zOr45N-Z?-lpujs1kryG>ti`O%!q&0nSvO{<+dgTPpB)ypS!hq%JU~z_2`#BxAZ>lh
z;*)jyFX#SKgsUx?ZYNs(hm#eSH6S|!V&QM!DIe{!bNWt<Ue=C>&DOIy`-q5dC`Rok
zFGjIJsyqx8e%l@bQ_a4_p2&L6;tZ$R=iQ4!%hgt#ktpzlXV4}>**?#?Ws^@#1IQoX
z7!r0}%F?)|CN}f7;9V6=|Ja$6OatYepxqfW_F6PbC<|s6>T<v%)_g>srAN5?U1Nc4
z8s@DT<hMwVGj$izZR4_^|Hs!kg=ZEm>pJSBW81cE+qP}ncG9u!bUL<e+fM%2=FW5O
z)_%@jH*?<4F-O%H-&gh4OkQ^_*LV5OA8aD$sB>ca(;_0ktEu;?u<{#wS_lt$Jbh5k
zJbLv{>(pwdneZOrT(&@8>Pg|v2l1A3APShgM2jh@v)iMdA5TyG{qN@A{(VV+-6P|l
ziz)R_v1kd_2Mlz)cutU~+YqJJ7t5Y`{g*`Q?1YdtUMvTcI^`?iW5AqB4(`hd{{rUA
z7t=qI$2kU${I;wvPeeWEdGs^uB<Tt!is}XLle!aqXDCU>|IerPhtI9ci;PIZ*~9n#
zb^H*yMebM4gg0Ftvo?Coe)QSBw8>ZdH=~iFW2$F#L}<{rTr+|fRqn&CGh)=wJgKDa
zEBd*qoH+oe$R_~ixT`%W_c8hv`DITP^$zf1>Reuu6zVtBW3)Y;7<(M4A93`Wwb5bm
zku+KcJKaE)*_SaFTN)VJ=8wWTQVAbeGFH<7^_2KhmeRQd@FZ*NyTH8y?cwhqjvq?)
zewC*g$yq}K;9vA#5IKDQ_AiHw?n|1?%1hWG+z&dR@SicHP5a=PkNSBhne3tV=>DKh
zQHKsc%%5zgI$xss13oOHkn;q!skFVOg}M}~`N5B?)@)juM0Lm>=vz;U&dC+Ym1hhH
zdPd_*nH!gb4x;@@#^4);MzPmO>ku>@9OtOMN&AKG&3_zDfjgp$og>$b@0Umm;E8{l
zz4#L!WmdV%(c)h>4I-|_^{8w2TTV@(-}j$8nLRV(b-xJtqe#Uj^woW3O~1)|00`-8
zSbmt8ZN%Jl-zw_54qplQTm86ie<|~qPH*P%2}v4QMSK~vL8$RR(60Pb`AzfK&lA1e
zg3wFiBo0SD8m1GAUaadrOmxd&uWjCmbB!K6<@)vs+HH!WN}_535Pz`cQjJ_qkP#iL
zvmG7Q<N-Ajztkw7nC?MT8Qmu$4#F8Lp==kCYA5=y?I-lLW2)!z4^Qu?Mmd-NxZS4J
zny#A8^oW1W*%A#Jh*)ba*p7XpbTlmUYXKrY!cGeN(aYO?y-RZa>2k$gx)XY2`byN%
zw@>b$KNb7Y1Sq_^Htuo0v_3{o&KdkWqqD=)WnVNO{4Jvdcb|`EEbgGxB1h5nUEX%a
zdxCoQzX%^R8xm%hH#!7Fx<zyWr{$EN@fPBqPAV!c+6o?sTc)qs{HSP^zsya_$Mwnc
zu5crEZ&<$#;Im0EF*%`aAiv7qSAHlt{p2*E&O=c2%X!_oDt7}}GkzP54Z05{I&&*#
zUnO4CT>P-q4B_I#)lGeMx;^{h#9Zzyib**G&Nf~E01B`FdE3k=f3SI>CODybX59HJ
zeP60c9^fSJGKjN5#69=DML@c}7yK%woRi-r7mK>}&#gKQ4;!-;UA@H*T14gW&a1n&
zV&Tml3~GAg6piOY-!bIuzD)kBd^@Cc|BWvF-Ti^|GOy)x<-=r~KRr4V+VvzSYdme_
z$=5H67EM~>iqm@WGUD&kc?!RUoVyESJgPaLlcY}NJM@%4z_#dEwy|ieCmTA|`>Dm-
zZwg~n5?|8=yY&R`gWm7pb<RQ*zb^Dj#^_UH<uHg~NdHB48=;EM<-*?tPxoc@$@=S`
z8QG>^8Z*;3Yazl%=sCXs>2x6Lz10W4<|_KPPEL4LY&zy){r-o!u7#Ys&hdKB?o*M!
zxJMwhk)*1NxTIo^f4#2YS8&7Vb>xr}T>$_h32=%gx*U02U!<6Z;2fMHcm1pn;m_{P
zCPvdV%*-+|GGosF3T<O7()g-t%K+7K{U&(crP$aR(ug!6!&mWn{$<)Nnhm-Q@;X9{
z$Cp#_hI@98=pPeUa;}#?koX=MG5^l5!dvEPHQcwO?8>lOGK2EZ%l|^A)&Ovlp*2AK
zsHh0_jS3*i!sc-=NJ{Xu(pxg-54}YEMus+?a68w>ezd>ne=X@TCh%E9EIEOC9e|Qc
zyjB0yZJBjRZJ>37&P!`?4*M*bp4X0w<Y_M#J&wu$dtp2FGmMtymBL7_E&{#>{ijV8
z-r9+1)YBSLFg3ZM=)SM9{&SyspX^|di$Bledi>>I;X-21A2i4Nh#sV&C_Rv)>){&X
zmgdo+`{rd@FO<6TZhnEut?iDX_v^jyuw5bxy_Rc#93QzeHYhrVGFlgUjfcJOq_Tdv
zUr>2n9G>6lmuW`B<qPI5XBdxZofG5t>dWN~vVl9Yc^+o9%w_vWi*L~JzS}yus2&?z
zOxz+ROHc5gC{AchW$znqm&?w>ncvS#J^q7y(9XG?Y3*$g)M9Q|ub^c!Xw=28^d5mr
z0QxxVq2KiHb-$ujpG^!xK^l~bIjr4xUQW-NbOT2XhvH}Tw-{|d0iVV*)1yMoCq0Vp
zW?d`L-&UZu+(p{5n4D~37bvp67wml6?h}aS_qlyL>VTWWru3eIaw-R=C;eA=@9DD$
z9d=2rHTZo)Hx3&+Y+V#(26R9a%lT&={!2}-&W1qpu))=n{!0><4D^y+?lk;e{T84G
z<Jb4QPi~TOIG3Z4hhQCTEyZ5N);EQ1j<1&c=ryiu0_6*GpZ@Xn=>1Fd_-vL?^;NG^
zU%%T7J(xV<%-)Vhv7Xm5j~Y<VZzzK=cuwSZ92>{2?1^W$ui;ndZ>8L*mSI5Ao}%ck
z%TkZaIlcbNC2E^3x(=SK_x1jv`KQm3{KW^Vh8_MA)1Fn|x5KA~GOEAdbRXJ$SJWUX
z0Y752hu<1%t~xnRiuIioUt~NMbSTXy;TPng0()LCTh-Sj^J|f%zw`GolCKd#`zQ?;
z^*f?3BR&9sDBMcweuynH+a4Mv`K9l5LeD4Q*zl*Xm`CA;@~v#szdGX+k^dx2)C4Xb
zt;xY{{6qB>GFPWdQI>Ee69;$Ol+yd&%ik3`B%3DTRq0zcZu@4HeydDw66aCatpJ{`
zZq-!vn)X$=#WQ-h$7b%nlAC*0H1}btNB*Ojvnbn{fqrd^I=%2+{cC2-vbhgu9Vt7B
zu+sV%K7x7v?OypKOveKLEBwmd@dMiiVu{CF(n7fohB1ldE-|M24&O~wXLqV2pNa%=
z>oDo*qlLC=oct@3oxcbmaDsMy@+Pm6ZrV@;EyVh~m8Vh`bPa!G8>~%~EA((-=Dwq}
zCOSrc&8#Iic*9BKY+K90I=A#f@6Q`*<LfgmTpRo>K!w9kblIQU-+$2;-E01YnB)1i
zj=GdcyN}~q0C6v_0mFUtraahbtRl_gPf%+zRkK4%N&m_nWcwlVGINDDmlodr_`}-x
z<7`4#MZlNUsdpa@Md`KVKeWH@yRKc&U_{SqJpB<{p8cRGszQepQ=8p$@+zKp602xW
z#{+G0{6y|bFGHAE^R|UnmyzBurw&=@FD`Dt-gWtm$7(;V+4A}8&J#Rs^`nVyRmytt
zbmruIb~1V?bN_xPSe2+58jI~TJ2QL^t@Y`awZ|?RMl{J-zDDzz-gW)8H1_M8^UYnw
zoY-vt8PgxU{qn2C9M4)=&w&zpjfaNC#!ltz;Hy~q+;TkC((mNZeVMj$Zsq803a75^
zm?U;NoAmX)Px|@uhklk)TD645OWw{*;Y312wBuj-&H<idbw3yrIHZ{1Vb^WBp6*}0
zzPZ294(dFyVYrmjAfc!Kip<3iuJx~t$Kr4=sRvq}`Wu-ew%wo~if*iP4;xz1>i}QE
z@q%Y&C+gpg&x-ESp8Drs*yg;eNs*0Lv?>HPx1||=<Q^nx+63Fb_wmlKrD=e0{h>13
zajl3;l&%2pA6M9t;Y-{Oft7pe0=AJu5#eaRxu-?F`W^kP=e6fMtLN1pNI@DD3<U@X
z=r@p5o`RIiCx@{T0uT^|C=d`a5Dt*NgQ=afvkfgH9U~osDZQbCgEPIGt+T$1sgtd~
zv%Rr3ow2G4BoOFkQi+D1bh(DB2Q&~c*a;{Q(EocJ;aEFwu-!ScJQFJnIg;ejOh_eJ
zUzRf0)3jK9MwJ|{OY-7Gg^<WmDiI2Dx95JpU+xQn_>4O3Z#N>lD`^fI)vZ3$30z+;
zj>4UWPpBSF9mlwEzt@a*G$3MzD!W;WH;RS@E|Br=kgNYjOrpkGI0<XFO^-~H=M4vE
zbd^MEWg)VW8yiXlFPfvg9YV0&9cTxuV&4e)z#=m-tdT%qN*qMFt!+b3ssJbp@pHM1
zMW7>)>(Kblz~M;Q@v;F%NwFda>p+p@(qVhq0_fEvpt=c2#ND_q;HSkwA8Fu{e%H3?
zO%mBBGSG*-BGzF}XE8U&z&}0N+1qarUJ%B8x?xN`4HomZ<veB6`T*_xUCQ-RPLqo?
z1)i{yhy1wuRr@Ke;pk!&>xVlQXlgQp#-=&T(QNMH>J8F}tDl|wR2??L+6xB8<+rbN
zm!sn;@5g1xU^~+TAW*(b(HOARNJB5$qgUI(((UXzgU>Ya&ML3N0iIgNOIs8TD6~yL
zy`jw~U__%z<h<WIk71f7OXKRsT?^t>o*pBx$v+%+ru&DzA^+1x&S-1+4Ob;g1O-C6
zK;rNsA_-TYi`+5M=gVcPqyA!$#e7Gp7;@Mw+Rh*bx{`%O6P0lunn;PG>X!@I74^Jo
zC25?U;EfkPeVu#+4l*8q)(rU72JDmRoeY*QWrxR1q0TVDTdar@@=JjG4w|D2p_wF4
z@>j#>(WV%mrNAx8uOdDS#4E%C!^c6xL80Gw5MzE%trgw`iIymIqc=t_E<7BT-x8$;
zAiO$(5|$F7O;rRsvqK?b0s-vMXe>a&f%p?azQGY=_^hFu^@r{2%pa0L7-s#Mw>&Yk
zm3#OI&92ZlY|{I}B<F+BHhD15bP*oqQxHKeE~M0H3I;q7AMZ78<aoqMs71S^Ncnri
zalLi5QL0zue*0h-wK%S<?W}|7YBDQ#v}xPD{0<Ow`nRHKHNWL~T}*ufh+G(8|Eg6B
zbv?jj-z;S-2VTid#?yS)GUUb)Mpu2Ri$<^pCA#>u=Qnnh5K$4?k^rk)oU!54y~*G#
z;}{iI|H7UaG?|aC9xHZ1xsmK!fil*!=z4p*(R<e}ayFF-{(W;>q~17%4}K7jAD-cv
zdQkzRD`GCHqpj`|2JE34Nw+}H+Ob)NK^@r{Qd5+O5}~s=Q_<L_)sAGtb5u6{!)ev%
zIGDbx9p<gY3;pNbrT-@DQ$>`%w<*J8tLtP7S_=khHQaU2ifWl<wz52nQVVK~3d-mH
zOF&hirlZQG&&{yh1dl8K1I$AW<W=*+bI#V<LMlD4;dVx^JfO}*JnS^3h9a58v@^su
zjgUf<fO%NHFLz38k%w}E2Fm8jGSV=DMiUrx76=6dNh-r@bdN?f6I}DSh}65AeT+XQ
zI$%<Jc3+2koZN^mHfL13vRI3+dWXg+dd|YoP;NDM#X9r>+Wnf-%#Sq;^JFou4S?TY
zB%BhzNA`DEREipr%b9x|7>{(}^!;ig?J%#{+qWEOZi})NaYl#UmfmZpi>zi0KL_n}
zvn0Rm#?<I~rohHamMfeU*O|YNtq4<ZKA?=&=p+7uWr5UAh+!GV2j&7Ec{v(0Z<VG*
zt4cp)uT^efErTWjE1R5~cHXW97>YVQ2e%DlZ*c5rlv^*71r2gHTVa09_mwu1QbpEo
zv+CAH4Xf{@@cZ7tM)xU9ec8i<t<{4YoRrrWT2#z@3q+ichor@MCd2r%zVSd~QBDTr
zLCjc(BF_(<gBT%_AsZRKzfj=`ekIn85h0dtga`q03kSY>nr1VT6%PpaJ0SLgZy){w
zy6OqhpQB&A6am#HkQQi>5(NCZF+}#V_nQ5>W{DkZlV(Ss-C78&V#!haz0{f3qoxrx
zV_RwgZ11K1S^+*7;f7t;@;n%b=eOtA9w!@WZjWc2)g58rAi`qnHVSkAnc(FP5UZn&
z!s1XO3koW&(hs1Ltw{xz+I^@E*Rr5f$b3FOqTGPFybEW_08ly+aHN!Tst@aRAQ)})
z7ni+31e(W9xbWqysnoov<@3vc#R>}(^YeF>%>_HDa#XRtSOKUFljU=esghKC-=hBp
z-r@l>h@=e{vb5;#slA|X5k?3|M{Kz>vBtQl1k>^Gwm$_}Uh<agO}cF2lza*>LV>jJ
zmp0(lkW*HDu>g-O9bEJ}Z)oMwX2{A8N4fkBU-{2S@IoIkG*Zu2B&<j>siHtH_tMq;
z$>UIaW+%$cTBMEFqj1`|fag#KSwQkkA8=Rx8W&#7oBF`S?NExs1dSM;a4N``!Na-5
zUw=opWp4gzYTv~6<c7)!KM9M;+7m@w4v6v!%W;$)FPK6N;W9N(Y!@+-YfQLhZX#_e
zS};+1t-ozUn}zO1urm+`Xo&3`VUN?jc-o|pa&2@yezI=QS#9;p3`)ogf{=)^_0qYn
z-LJo5)C_DhLrdAG1`A1ba;z6DIKDp+w6~6Cu?@HU5tcuB)GUiLl{rpf<#+U8Sz0@&
z!WW|%4|?&q4l#irJ^hNj$>-KIs1H0)?bkr$jXOj#sIiql%sbKxx0#CumP(Qq;%bzB
zt&zP?L7YOYYuU44eL48`nDGc~e$!)iOH!Eh|5@9(rE<t0ep4azyAhhl$j-KZ{MYw7
z#zn~^V>S>?3qASqvNd-)bH3|T86diFEFxfA2iMxbNtVk}6}Y?r>5N7t@6L<rANSM^
zT=0#nsy--HUByEVwk;$HH;HQQW^EjUXaOymNWxZR2qL)ajw#{HC{Lo8!U#V@=v!NZ
z+D8XxR@{5Zz#uF0HsftOiMWa-3hkv6d-6Q}9=y;Kuf(&rRtG~|lI^QBq=ar}c=6hx
z=>@~MZ;wUv=980HUo_v&wmHa)Ju1Cg>t23kgYQ%ES1O;}x~fCjZj3HxJ#q%_4jMKX
zyEjKZGEXHX)6?<qDU~5vI%CnQE<$^PsJV$P5rJeo*<YHnw9ZIm2xV_xUwR`oQXKlp
z?$Mx&?ynM?)0|c48U3v!1+(3Qr9?Xz7*P!9oY@_N{y4S8(L{x2=&jYY#8}I)vfH{~
zUE#?rQ~PI+#hoAo)~`n=gV?2&FUl7p>qR1fy}bN29I4Qp3S4mdE!hg(NvrWYe;DI=
zn_bAu+547%6Zg%I-)D8>5r<nUFGS5=xte1$C&svY0xX!{?}Xb?=s$jQ!`*y~?oncP
zptz|JQdhr>V%QH3OJ9r8Pif@j+k>TFQd!R)wAMLLVnl=KcKTLE5iY&u?N<*d?AN``
zvh>i|rA&5ABD^-I(gS6+km%Qnt0vVyl2E@|{W&|qBHRbQ@{0#&Qr6q~XHOICIt|M^
zs;4X~BM}+0UU8dy>wzph208_Ci~q8uz#pb*NoDWYRR<?uny0^c^S1rqn=Sh2aWG+_
z=jN3&*vg|tI`X42AQJ#!vh}dWJVnElNWbx#_VQSdHi3A!oMjMHM%^a)f#9xRBX+RE
zP7iPB6q$z@quRu0{nU4Iss?-pMZ?mD;Z(ty`#3WUv^s^WHl&-SZKJjL4-FGhCRE22
zhwqcKAtGNOJfmf<_-fH#xZ6rT+VyO9e$P2S{esk^r#c#qVH)f$vmZ{s9NCSjyEtH=
zaHco%ol0}OoL;QRmm(Hu20MT5N)M#nmHijf#I->ZFkPM|YF{V<y5CZSYT5aQb^VX!
zRZ~sNp0?sZ_BJz}Yj3~h69$u(*de0VaLP28`uxwdAYfOs?7W#f$LsIgs4SCMw397N
zKnvQa{qXT93R=PCIkbvQeV`*Azq{u@@jt@K8MOidvIB7v#@fPj^TH{mTuZF|yl26v
z{c|@s%^lrBFEr4~m+b^#fugUaxFX42dnN5L#VW(cx1IkKVs6LF$hAgJKiZ}kPKLl-
z?1btDLs^LO;SR`iFO`^CH~h>THrNtFeHIQHUOOclt`vDPjQ%wKsX!l+X=6|7;flVK
zOqRwqho;vYtTt9k)_zJ9!+>LLB#BhS>g-EuQ({M9clR8y#|srqAN;CRlFE8~gsJ=+
zP@A%H&;;>H@5gztLpP#&v$35?rnd}ht@;dbs%!*bGPYdlnrdXNG<_g;>BlejTlcJK
zozEvlsjhXk%rmt#d`?>EzcMZh6&sOWso@XJDh|paN+nvMy7o*LjFVkIor1ZbIZMVz
zGi*;`+ooNALHvbWW-*5BM=!#LRKg>;5x|!vzAN!!%HlC5%ws*A^(t9hTeqPgMJOie
z^+#h4I|c?sSLd?b5Z4~jcKLcm=m@L4o?6hlw<RImdKiByR~+>Bxca&58#5{^`=YN)
zyaV30&}<yCmg$Ez6!E_ZC9=C0R3*4NnuN(@^>v}jFehxRon<xtH@<Nv-#ef#iL~w+
z*T}(yzm<*__v-2xojge;6g=_>nqVP6pVs5HQ&!-wM=~(^K_nOi?&Lq%$RV&pQQgog
zMl8Wq{`OWZcJ1Hj`R`g{dxN<FPrum=K*J)@We}9@S;!DyfI0(PqAQ~Dr%|}HQ8BDL
zk;yfj<%p6PbV2wSYn0J9L4{HSy1--QTTEK>r|v-G8Y-F#c0~K5?6>;*eJMiO)VzlF
z^_)h)p35({^o2P6i+Mo!;>)ev<&p7OB~fu{7cngLJ{Ca+453E|TW=S23WQ>p#`7P{
z#!(zNPAkGG5((+X6|t2nDR`q5TI(|*<V9tUXw0quB`3|JW0{l9k3`Y@W$5<LIks6|
zq^)l*y-(TEeeZw&I=?0e9x#^X)+*QIwx77lUk#Xoz5Q1aprSI5!zFa(msjd8`(-D|
zuPk0c5o;#LD@AsVP8QuSH@S59HWc0X*6yK~{RSy8-5>$>%AJZlsxxJ0Jl6ESe~J95
zi*;{A(K9qLeihItp}Q$Zi$Yk>ez86Yp0QzvM&pd`x{Dbi=R@Cdffb^}IjHW(x6uv|
zns|#%^iTAi>M-S2c#aXdwoIB3%bSZ?eF>T)ON+*HsIxeb7EOVTo}x$o*CWyB@4rz@
zLF^hqv%RthAIp5WXwz+@uY9{cMwA=LF8`qZ%Wb+pU~1>y-S&)s4R{gi5t*wmo|(Hp
zewzttNA2ZS8A*lIf#LWbatwxF%q0>Z9d020{sx>su0okz-X#`P&PS1s*RHdUcGBi%
z3BnU2Dl&0Mg8#>6;_x?xt_OY8c*?%MqRAa|kJHmt&&8rSay9lLmS3QhspjMrP)HSp
zhB8myqmNAto}!5)mO~PKX{X^23%CrutAgn{rylzR(t}&;HMY;t8K><-$fFu=ISSc7
zBmZbkps)U-5oY8l9>GcECP3raT=hk}<~#SfMEY?0^A+DYQr*w$iT17br?c4Z*}J(G
zt-8w!u|RhCo}qPG*81dt8p;Wz?8CMU^eByw2|j7m2gJ_=_7|h87DXN!uq-`4Nx!w-
z$CCAjFlxR!WcNG%eF)~b<Kc#or_VIW5?0!zN_iB|FWsRYFCa$bCRN2=@zSU*M&|+;
z`-J4n-|I52IpRF86!dERkpK&ZKx=V2w0ng&A+hpp<^&NL&snR89_xZ->rBXIk2OIZ
z;1~S=lq+~hs>)Wufq+8MfPk?654pm@+SK#Es}%n<be;FvP<#RE6x)_Y7~vtltKr2R
zxQT!08o)3lxV9|0@gSfTjA`O&!cE;?uDezeZO8u5Se}O)NIv6j%@A{%{{y#7u+Fss
z)21Qy^!NMPd-(JOfVSx?F-ckQ<iL$;-1MBvB-)Xs=@i?}#}Y9Kh9=8cNDVQ=ZUBX7
zfU*@iN(m<p5u%D<F(haa(aCXX&001?zK%23L$Q$@Cz?=-;<TAiW;8?~z1fN(OKQlN
z`J{-@M3^U6W#}C5Vu=M$2BqJKV+J???T>*M7z8A8uIBr1Vas_B>5MZ2TM$Z@7{q6o
z;5__-Bsrrkk(rNfXn6G6I^Gq|6tks6GnYD*=~&PkR|VTQj~(Vln<=CzJ_M+Q#k8d5
zRZ;fshq3~|Bomv{;s{HgIi*j=)#%a65$I`n$XjRsWQBye$XR6n8@2G+!H4}^OAM|%
z^bYO?b@sDoBE%oF98oTsqm7wf+I6;Pc#`V-x^ZJ^Q>HEof45?|k}LZ(e1wa}vU#!g
zUu8y=vZeiWP^IG2Nm+RA+PROELN;GqcTkDi+OoKnd@hZjc7=$w-2*%V5D%a0=M)Yo
zC38=P0g%V6p9k~~N};<Q4aJK47;s5R3&`;t>@>1O6oZ{_^EORTgTrfHT9HG}bZT1v
zA|}UhP~ROBC4(jcNv>q=gG^bjwpgicb0vklV2;OV&*GV0g#$<=l+n1|KID~*y{jCO
ziN=(`EETueK+^XX=Svx&ko~}vG8K04jBGv6F(Ub2RW|w=sJyE>m6`&_M%5#k3j`$u
zz}jKi37q@XXS;qM2xUNMf-M3yLp|Y0L=nkCuRExtXN@<ql?XjKJ<V~Th7|7<!z;=C
zlY&m?SVzzs8PA9sVM(osHOXIu0Tv1xH)fPdARx8I5>2t2q~>>FJ_$OyjiiAQ5Nk->
zRpBif?6?IV=aOvwBQVFDN>jl=gCaOus~$AEcFIIe4X=P6=AzhgV{As`{)L-0GAdrg
zh;Z!!bZi|pn>FvzXLP1<STF(Qt~h}w$$|1s48~0`ArNvd0A#yhUP^V38!ODF9x)K!
zXRxsf0xiIT3R*=_OBV-Hm+ol-{=0Z7sL#2f0AsI`pNMv}Pdw-h&r(q0ahC~QAvFQ5
z$=o0N{eZr!ra1InLz+1sCj(mNc_gnOPn&A9S-}qS28u1Gt%bLMYX@%yRz*PyiDv_`
z833lQgC?TQNWN!<BwR8|*DL#{yj|gmH=laSsOeRT_S(!fv;2yB=YD(|Vo6(X<xEw<
z=M+Pt{ZDd~q74J^m?)zQXqdnaUv!3xsuyETuIQ(1XuF<~if)>94#tH;maNl59S3;U
zTR<;)DEF|9q>i23^dH2go1xsbF)%Y=?3pwxUG;Q$x*?}4KBlVyPB_#rWiP?nad|~P
zdwk!M#%~cRk?+RKp@!W=Vdaptj;sSgv+GDXqWTVUjG>}^KffEgv(1KQL+5?GJ+n#{
z9iLE|R@tSc7WZdA_m?H&5m80ftW>|YlDKT!$)fze1w82o#5XhLe7!xNU)JMVU;2}Z
z<n^|(YjGu{;RAu;9Ui9iJ%|d7>9OHkDM}fn-TRu%Isl0MWna3ri`b`24(+*JZQ<~i
z2(4Wf+LUY+L?wX1?3N3P1%wewOE@ly?f3?b5DWIH?c1wpKRCt9ivo1zx!@E+bTzz4
zM~7!Y%2Hp(iWwUJkPoi0FW%qNU~l)0@~?eCMI4Z|adegxQOCXNSEg(z0BUn=g?!$A
z0GE;@Hy@dJJBc45u9IRdmC$j;9LS3vp*jODY&JLCP8eVFJC}<z+AR!708qK-CrE?r
zeet^Y_CrVjvzcH?i2WRn&6H?*zoBtss_d7xX;LM$NI$$BzEc3EBCgdYRA)afab{a(
zyBEu|jneoLuhpRFRyh$~hzD?Z!r$^C>T5E*Q;*^ZkV$T1*I(ZtX$H1Hu{Yn4-URUd
z-jxA&#RR>7`O2jj?(>NibTTKklPJx=fPvktum(Sy3=-ecL3a^aU5TpOPZlE(bE*vi
zs(Ga<5-ZaRTR=sw?*CSeBSC^A-owmHGs=3HI=eI=c+aMx(t1CRb`DT<>(5(MNsjLm
zYrfa`H_FguHq<stl-`tRUCRche=N!_cvr{*{cnFvLLXK18r!;q!mcenqz<V5{a|L<
zlbD~;yyQ1Y3ua6{ZZ-9pbIqzN$00iBYq+_?WiQ*xVy|b>J2c=qiUVQ1dR<t(Z)j2{
zkG##L!bhRqfp+>DI~89#3TIfJ2rPvTUuY{m{TMOaQE!6D&rY^j5e=F?e3dm`p;^oT
zX=<oa21aDYFCDh#*#9l<^Y{8Z@`3>Yg+T!U;s2Lh>0sz&X#3w2W{TQ|-G&&#Pr{Tz
zK`8~(O1%FAK@GXvE=4So05(R4)%Z&=iP{m{Ds5F)3lZeg+q`umi#~87JS02E*~|<u
zIa(A50ot1Ss(7nwwL9hU@$@nEvQN8N43o-<oHd1`CiOL81gah?Su!u&I?kklEHIF1
zS$d_(Bto>Gd7lnBg+w9JkCKiiYZl*2Zal;J^d=loQy<{#0!9dnl8G2E*%n4SgHe0U
zI05SbT(=3pj2D^Q?UmI^<i-+55(hcViJavWdj615c@fMdUGs6{)wL;2k)04C)b4Lm
z{HSKoA<`2x`JIN9bUrb6;=lnzx}5LImTbjdpPxW&o}TF&c11knJtdlr3K{IaPND<1
z0FRrrZ?sbPSje+7(71Bv<S53u;l8&7tbCRc{GJWR<2<SPGm=WAF8t`stXU_-k&03C
zWe=Fo0=n#+wKM!ay4R1Ee}84w&nI(QUGQgDYn<Ob4R>$Ke7o33o7!g6`Q_1;ZdXLP
ze_BR9^W5^hcLjc6a~~%}JrzuzCO+za8;E4h#OsaMcdkUinFGv$AN&ruW)x6MP+aPE
z#Lrf_f58og1}j9FU;k!6_B0&lW4Ehk=u(3;#~*dnOdrV&^R3abO<;>gZJrXy;9-`r
zj9^KwW>pv^i|9a64?r;oFNPf!p+U}$4vWOlyZ@JON2^XTF@<xxWU6IH=B87t_nw)c
zi~LR-m&gl8kfwFtaS>4|Pn?276k2HZy!ycO8yRv(Yk26=$L~&VHLJd=o!&beGfyUA
zeF%6^0yG%dZ}XXVgB%+d9EMw*CTafd+y)Xfo6H*8AmGRir_{fye+h7^j-gOHjrc>W
zYuu-<nd_z!qeoAY3X3fj&?=gWk9I2GsOt#R8N*GL`t3CYx~M<;i@p0_5)=&HM1y@1
zj*`*6?`Z%?(&M|Y$76S9RyQ&uFIJjTb`br>Fh@TdCt!lS>YP<8A<HbE)14jrn56rk
z|A=WsaJ=lds6GhmSN4ZtbjLXC@Qr;Y1l9bJ9xt~g$r(uo51ib<a;&5%Qp5LVtV;al
z?8{JrS+re#yE6)6)-L~Uk21~M6BxYQN^s11>bE=@HGmFt&cZB;r!n|wB^x+Ke^k1o
zXyS~-@0Q7@O|Tto$>bw@?~wI7v6XrX?OlP<w$gh~o1#gc2=Ce2WsSQ`n4R%RCF$XW
zoNSO56*c457T^F$sUw7+c22L(zGwATG9<^r9SDD7ZMo`%r`VxK^t{J;h4kv|)MADZ
z?kX-RVW{>vKXd^CZ7-pZSj^ifAGfVSiNjtvxO2OVHPUA-2@0_;1R3g2qY6fwX4g($
zGgf5dqKuy6ps-mR&YGX5tMw@vOqRjAYIWIeGVY??8?ao}5r(7;-zZ+8>!#-3sv7f3
zm+Lx>an_WHv|Qs4Ew#ch&II+?8>7AxrA8t6E!&y&{J&1{W(|HiPCs^`G6c|1O#1&D
zj;2md&Mr>>JtT#y7}{^JA$(TrJ1QrLx|vW?&Vn?h0b8E^1BaQY#YGXt`du$0Nn@cz
zP{E-G_}(s}U~NXS`7k(-d&c_#%cDQxo(%k>cuqVH4f_j^zYV*sr`Hv(Do8*DsZUqN
zkhae)$-1f1j-d3*VF2Uj@YNSYL4-d>CO|a6T0*%OWs|>;O(cjv$I$UB*RfqTe*+q*
zI|{0K46k)ofzrssMG(~_8IeGql9E*cu3|MchKz@_wy3>)3_CN7M3y6>NsfV|@5af#
ze3l`Bb<M?zJC}CkpM0bg(MA{*?P>eG3W1(bA#C+*yUGB==A~O;FHW*i;2%#5LBk|D
zg%jF=n_0(gh1_~8;a&I=b``LpyfQkm72UjI9{$@lNzKZ9hxo$Gh5^^K`Yi*|!l;#&
zh~ygkbQ6bxx%WgH3Gfhg?TF*Qk}S~+LO<Pd1Hd{b(Ie5nbOv_ETht!VwbGVfcygz6
zgrhq@aSQ{+<BTs!cVE*@Xrz?2T)zVZq~D8vjZ7@{LlpDjXTR@mSCEhkb0|CP1mM9y
zZqxk^vft!=`GyQ9!!V#BbwlD`5y9Kr462>??e>QL5K$dd2x_`gY1$%l`i5rd$dZGf
z2EH%UY2mb0G|jC;&M4z679}d!5kIH{d{AvUD+<I|nd7!p*T1)1Z}Y#*(wB^0#_c7F
z7)MrD741hI<Ln?I^FV}+VAlW}z^IXzW?RkR*-t-mA6;o?>KZ0rdlm{h-W7N0!TWXC
zZLC>m8m0D^rJ(Ib8k=YCcGw1m*La{u{}d47lPl^JHoG1dSQ&SsrM}3(?!h5~E`W^I
za?9q(>VI<891mZPhoY5FPMsVjl)9IhXD-4tJX;~In?n1%`U7xq-p@OG)4j7Y`Pr6|
zMGRTR72N$)p7-|mTisYd<tejeGFDo2on}^%$v(Kx`&jRu+R-~(J-UAzM&Tr6pg!$E
zbEXyJr6rQYTml1fG3z*Z9B4=%ag_U`Jjq`;qZ;Rp3?BB2ULGLv<Jxtn%2<Z_;&h40
zC>L>?s*3%j+%ziSSa|A+IOSH38qv&Rh=;9llh#a7<%_c9>*{W%<jnl(<ty6H^*tcF
zb$xPb3em2EJ=1f*i_i|<`s=zJCV9=ArhOD1@QIl2xB6TTsi<@(no^G}UH(EBr5aMl
zN&TR~@ekmp<^S_0PJY=t!VL@rL<<50g!g~!V;4(XQ+rnzXF7}jRx{ul-zV2EfDm@=
z8-++GWdu!<xf|OUn~1_do9;nWk~7b`v1R7IJigHZJ%kbLypePLeJ9UwX8=}U6CZ_Z
z6*OkU){z%S9$#C5xJ(;GBfYCS22b<*ILxY|5#D*4&=nY#(n=*y<4x^Q2a;OBf~GG5
z33ZkpmcM3q*%!{s!2tl;DGe&?2Sx}PBL*nQv@FLE@2vsR1|iG;BRio<2Ne>h=$rVQ
zsi$-Za+vD`4M4MxmovqW;~7g7#i*%&xhpGCTvlU}jk<(ow7iFMa%#&gUy>J`b<Lr_
zgw=A^uM~EG`}N7`Ckxx+vFj<UwpK)~QPppPJv3+6pfP-YNw(4DAzX`1c5^llEk+>I
zAYP)&T$FP~j>ubfe?$knLx<Qp`Cw=RpwIYM_$^@{QD}nt!QDJM)f81d%l@BB(o8dx
zg+u}bWKazRg!z9giLtHoe~+tMyq`Z69Q8eb8UdH25Vw>;xApF2yEn0>6czQ2I|;d(
zob%YQREw-Sku!;LxvR|Q7JeEu{AhTk<b#fG_iQ=igx)KoI-n=$-ib?bn=IVpiFi>j
zSKYd<oE-by>&pwjsp%SIHXX7x51+~Ds1IMJe;W3xx&YDFpvPlpwjd}{Y*JIDO|k}b
z9E4sjxiU#LGUn!SGs!+G5VN>E4KRA{dIR(GU&cMh)Xfq6^)xlBl`=qbt~sd}OgZE<
zuMD!OsM5@AQ|J?(Smp~MTO~_PKy-Z)1PdI-ucD~;{fzY8AHVZo;3+5raN*(J%MQA|
z)Q|rL31^j<surXFrJC~m3>rdR?5M6ZZTr4E+S=NR&Tc870np#=pOLD0QD)umw`)y$
z-loOlbsbjmU^2s*<*MPY9Z_XLMciD<Te9WUm_fc*SD9IU?Z0`St0tJKFL%gw>ZH<F
zb1U2@Hryq`&Tt$Z9E_bh^w-@y%dDg=c4edCr=j*g@zW)VPNfx7SatinSOGT1E{{gS
zW?E{j_~g(@eLPjv98=_8pQBQ4ZJ9F2L{-HW&RY#OOubS_e?7>g#m;z#^UH?W7wU5?
z(mwv%<jP0jm>qi{3gW-dq6;oex_xz6%)`n3?r$zzf>8cqlQ*xDD3xrlA``uPR#j3<
zA_cghI)cl=-B(G~Tm8{J?%WR|2&y5jV(+)I@kZPsL59#MmQ?d)=EH}T+p*&{!sgo$
zWvsZXwjlau&Yf|dPARPVt&ImVVwynj6P5}In2^15tdEKIKz#J)%gX*-{6^JmKjgWr
z7E}`_u7O416r&^130t5sJV@%3^k?Exc6H~wxN6mhI6TjNcIEN#UdN9eTKSO@J{Jb&
zYRmy4?G|aD)pK@jNAYiZue`c`yJ-*?Zs$enVBKHJN~cTTZTwiBuS=ERrpSDBF$3-Z
zwbvSn*V5A1H@dpHmAy*q3cj<PXB(!%Z>vJAad|lL&uvfrl<(3yba4Ck1LyJVlMS&K
zja-8WH}_10PHtYD+-%3Vm{^Sqw!1A#IMk<128q6Ne9MF=H+@z^2Grz9u?~GU!+`0%
z9IsV;3eQ-#jd2jC)a5w0p62qRhJIV6;xv46A47whH8}k4r4dt*XaxNVHRWv9pW%;`
zIp`2T)H+vrMr6P!rxyc#MQBM7X!SsKmo%>mxIAw^Xq)<_Ao>JA@ZPD3SI&Kt=KlUQ
z+2>qD%fYK1x<BlWz~7sZ_|JoeYB~-MUuK+~U39vu<B?sJo@9aA2^rP3(-%~)@sE<$
zIC}?`%&1jn-8*)ACqE9JGwy4Iu<CGR&{V{MsjpCB;qLsR=sz+Lh^Z<{@ja9Ij43fb
z?o0MV&|~5F+g(l3+0XujF3-c^!F_utFR*?*xNvea??uXw(e(!|9;^5{$cJSE+pn(@
zzC35nbFYe@NQpkH+yguOFmm3+kYP2Z!NgD@?!6kS2eQX6@|S+QHNXjvb`D;P{=x;j
z&?eaSa{eAwROh)Ev1H~t>5}KKS=+aDUvFj%SbyuoMYi*|?7>GW)xGxZ7aqGBw%hDl
z-=&j>rcr1I=;3gUw*^0)r!%TQlbE5RzfD=vvmb{KdSJxwRP`OtK3158Cd=I`&u;du
z^0VP@ci4*xZ029K;Qg=g6M^UPD}Wt22#gh6+KzX}685`GQ@#x`hWue>U|N20joXNd
z*YIy|y_?;oB_JVq-2NbljjsRJ+=hnToR#yFnZA|TLzER?^53&x{}$T*ga2M6p0_CD
z@^bJ88^<TJf5(_H{z$qOYP{zwc1DOp{8M>KgyGp0Gp{U{*MHeG$KBK?<)VR{^!;zu
z13UQHJ@o96e&-AAxzEqY`B^RP@Hwk|<gy7C;7fQHN4GKAToUAA(2+Vgs`C$=nKm<8
zN+ZXFizKd`bCd3iKVzzDTv8K9*&81Hwbbg-qB=e-DN5C$=+SX!))zbG%H<rRsehp?
zbOurB)M@sa{W>$%wRPQ=`GKP^%lVml?^H$ePd#yZ38lFPRGTPgSr!%@6?PEETOW<~
z*gQP@t_$*o%u|wau2;_^57qGb>qV7<VA8c3LYC(jsty_bRC31tIn?lJsN%Lu7)~+z
z<I+{d;3<t&nQOe-_QN){O0`bW#<1DCLXLrOZv^X*gdnsLNm&rzj`iN16*|oq{4GkA
zxwVv)-7d7soI!#P(sbq|=>ahfY#<0`IDzu<!G=_zW|=1o1>ylK$NdMjUgL-=FQeL!
zuk0jJV42{cx8P(2+!9r)Zg8d5S-%vZ;E3J)4{vsVH*!x`qcY6uUm%*6sT^aWoW`$r
zDV_Ly-{ufy*P`w?=G3^VJ(1z*p);%fI09+if+6Z^6SoL(;&(>^TwI+-^D&-1Bluq#
z>B7}X9;qlLr^~I`rKgSQ`ceWSuLb4x*?$Km3&2C>A}3k4Ima8!QK^$!)Agbwxw~Y_
zI$NY1%p?`jLE&)8aX~f{L5hsVB!zpsNQuiRD1D$Ls?f3EsLc6d$5By$hOerVWPBtV
zsG&HkD}_MCNaGXB1co#4wiG~p+$1IUCKIW0^{geNL{-iyubWLjo>h^E3UrF2O|a-)
zO^X!A5j!QQ8FTi+JuvkH%IJ@D^CKC7=;vWlIka(0Y%8NUr~$nwOWvw<CS$$3Wb$0+
z3bd(>#X7pbTWIJ9|50{lJL7G9PGehoL8ojB<WXPrCa&hD)cY`rvaby$5X##&4|#&X
z+@5K0vHt5NA0%O$=$ZYyB!r<qiOgz!C!|(ZvWp3;iai2NM?>mON2pCawKyl$xvZF3
z+s7ey*OvK^{L|6}rU$I{mFaHMXFbvnoNZ=0WDcIHe@8?!bBxa&qhM0%Ysp10$nJFO
z6BiAYrlVmByiJ2%eTSotLNRb@<j}rCLnlaHuH};wNmQ5H#||vfE|BpMh?J=7aqDB3
z4|yNvR;{hY!6xfz38KkbsuH*mHrK#jjxVtV^6^^Umq53#9IMcv!wkjRObAdll+SHe
za$7BG@@~BHtfLYvv8w8d`D?9<JymZ`U*LvX$t%riUzttSulcoED2VOy#6tb%pX;0v
zw4Ih|jcf@*S1_F(%j#gOA=+I&f?^St&D!Wk0IRrLJjkj?n|2>x8`XcOaswGNCS`;;
z;F--#!$7TgTT)L=xDt=8h!_TYfHZ-bJZVk}BSoRh>>^c7OM;qbl=5YLacq9X+>@SL
zO&gtwrn`-LYJ!<|q^nonAJ-%sO>PAOE}y34KqI|LHNArJ3kBBsOR?@lV+=Y%OvNq`
zpAMZqAMJY2rm1!J-~j6JHM@#bpr$z>IR`$!0(CGSMOzQuu|miiTquQF*Q(qq7eJFc
z6%te)9a!vIehw7f4GjDMHG!(&sKbd-JFel^Sd}3{i8&5TI1weET4)51Z^&fr{ObeN
zNex4@xiL36eUYhcaV-g%6~3_u^xvRx5HGxD4D?b1xp>qKaY2i-WA}J;W4m4eR2`Kq
zEA%kNy7u(CWwDl*dPJ2$%^k2a^kG00Vo92jn*bY;!rBw9v@xM_i`x=U2TP$)pcFJu
zA{zUfx{X8I@={8T_>*S8;6J+KQxyTET*K;EXWyin-nB1U|0E^VP3^FlV#<*O-o)%X
zt$-5s$W&Ecs!e_?(#yc=ar3rL1Z4mAPPTPSuJ~eg32bP|wvOki`wpS={M4246U-N^
zH>`1?`^cfbK%Wi($XqTR_GpWDlfYB=+d6PzmoXc{*ZQwJ^5c=J_%~zQu%A*#i+y9}
zfW4#pFU1{*9Fv9zrU;M{@ecLsc^Ucila{1J(3@Lk>2{lp`-;mTdQrxXxac)qon9vQ
zto_518_4{!>$rIS$l7429J+lL<hhg9)=W1{v8I;S_>F(!CmZLn^6uoqjLdbm)=cI#
zm_UO-Bk;k58^>Wd-RJeT8YK_#)eTO}D<8*DiFDDA!ict7df!Y#TL>+`pVEm&ndKTj
z)xg8o*kHKcLfK=51Ftz?I3R@%VNqw}k<UxC?+<?;d?gJ{QYqpSBLzCoE5taqROxI}
zAgh8>*n4!0JNRa#|1mjXW7Sn{qYX;z{H!Iym^Wx9iEzMjwKik}{hmzQ8T_X5l{fEF
zybiJ5p}R~ie4)f$-3^jl^8z-K*q*f$z$g#SgevD=CJ1Jo3I-1*nqbY&seU0XxKKc_
zG&`s-C}`aHiA*S|K&<7ZH+$ye`_yUIa3CjGJ|(`#bQV;mB7;DMjRUabL_JVpw0rV~
zpBlQvJ?)bn*(2%%CJZWbv2*+&Wc!1?uaWCjFUl0T_$Dz)KSq8{$em4QgE3H14R2Uw
zEyr^!6WCV_U6P;kHT3B$Nro)RHK$gQW^|qo=&`>8)C&d4pe7`3NHL%Ty!J99<+0Sz
zNyK?C+H+<JB1E<HTY_wt6x0<*gI}J+@mQ5BiN0=}DhZC1Qb>xI{1dXKa%ldHs4Np$
z9xOP&@od_;I%SGe#D6ys-YW6XS+DzEdzn*VJt&f_F1v<5$UcoG$^q);I7~8iQ&d~~
zg0+x!O(;8GHK9%y5>zB*1;DjTGBr=tZwj+qLl>)RONi^f!XQ>ik)}!j1FwPCGpy?N
zVkRxtD5Aevvh<KC%IVAbYeN8S8@>}a_C*^GyHMh|Lx)hYlCCJ4C43XCJDH#I8IuMu
zQ^4cJ&)5joS66M3Tdd2g&WS(fBg=o2@S~{@L&k!QCd@$hD-cW5{xNWv5Ci3X#c(L-
z6u%+A4z`fS5+c{>j~~{3Qi0u~<^Pn<PmXDbY@<kgArpv%iP=g*;nn0pp@joH66I4`
zKuCIhZTYbvr=<8Sz?H(lR|Qi>Hw8n2pKt{zl=8BmCRl;0rr1K@g1VgV8dbO<I96*x
zAWGYUD2CqJjBcORcMwjh`7}v$Hw-@H?#D0=x|Y|eNE@aW3^mQiQ2Jv74M`Ycx7J%o
zud>**p>ff6B7USUF7(rOD1h^>xE0c@z*Rz)RtH;4HD?RPugiJpjT>8oWlhbO3T?b*
zg1Oq_l&gMMFIp*8<61<3u?vLETmqd+IDoR~mf}jFve^ZcM>YP!z;b~TIF&-Znv5OJ
zfgxZAK_^`g3cfKSW}%ox!^qSjbdc9?_%0CB)Q+Ia-jpb$T7;trOTh**3UuogsVW3s
z?r_APXtcZ8wROH03T*Dp4sdReSU1%!BDg&@dnq>H-X)sc1akJ7Mo&(98t4SiM4FQA
z9ph+*on{h-wv7O{Oaod+x~{+*FPT%KR0g)j{_V)w7{0*G_mr=o9%{YJ8i1sDVP;@^
z%2mZU5y3y`7V!d}{_wm{G=4iNARH62(i#m1oRw-aov^aUah|tmw7Y}AmwpHb_x3G&
z6F9Odu3?|<CAuY!{c}bx`il5bNhRFpm1RYHQ$x+2z12wZR=Xs48nQBhdGRx!{@KAm
zgM8D`oMvnxq)N#<h&Pu0E1CW40)`(~{FgL4u;{~L=dP5e|JUFt-vR3mLN*Ko_;6#C
zdVbz?Qg@lWB&OQ7%moH`>nqus6(9WD+v0(D(e7;^t@=?@|1ztr&Cc+>VQuIxm%Uw{
zL-lu-7Q{OZyREiCpW@%;u)lF~(6^kTI-~KX#*qgqyn^f}1RbcHuS9b2i~!HfNe$OD
zxg^@BVlaJ+1scr}xT)>k&F3*Q4%YzcWqoq|@ygW>4P7PiePst<?s6RP&Mz2n1Md~~
z@uZA)aKl!D{?-1}+l{~Gw)!1bO<NjrPrmP2-_POhEfKapcHy9Z-tY5m<Ly_g-=8{C
zrc9rCV(CQXep^~A%d<~`-2a-KW^JtrfrSwFPmX9CLmI&U;;G<M@qQihrqbaC?sKa2
z6WhR7XtY9~-mc*0FMn~16`5tQnQ(<@;Iv`sU1X|In}9SMU~z0xTNb6uCq5*B>M4-v
zz!FKZhZ|UFEPiVw#L1Ai2xjX0l4X_3xCCf}9d#M&k_Wnqu1Z8_uzrpwXSPe^v>>pF
zX1v8kUmmex>p0O;w8`G1l5865L5p{3322${WK|>!##!YGmCi}~lg?^l7AR6lrR(Hi
z=_29Hl3S|H@VbtBE%z!HX<K#bie(<ChcBPRWRpS3tj7hSgO}B(E<1^lv4486fk<>z
zvI2*#o=V34WtQDubEu8LSutBfrL4<}s<u+k*+fb_Um^4u)M~7hYDby^jH&XdC-+r|
z8@P@N4y%^}vF}w}7t4R|1y4v{zsX}WxIttVH0)XY$ymcC_kWP{KZ1^u>Gk@v2%jK#
zy&xDAD92K3SA5zja{)USNT!~|tZgF6E6_96DYr^SEZ0!z!^F4n=qI^c=f1D44R3`8
zH|T5ciA;l_M8>&*nhrWDaaTzk(C>YoLe80t{a1`gzf}x{QD39hBW26vRhLW!%ja_q
z3)YTu)qNycs`P<2+B@3x5(&Pwo8YcZ>x7DMc*Q^wx$nAX;k6DJfUeIn6+>I@3J{iS
zsoG#Ml+*&Abl)7cuujZ5?r&12YfIL3l4j|AXlfcHL8Q7>`yofWz8&3P2MXD-5dS0O
z+9Hk|wG@3AQ*pEJ)R99&K*)rO7xKd#<I>6I_JV-^`A7B0M9W<<3uF+{t_CDfRa?JF
zC(?vKH1lJlX(he&imuKsPPpvA%kWg!O3UEDrdr`r99gDsuw-W={n^|pzj-(>V&4xk
zHQ||;3w2DKTXK(Nj$63f&&y}M?VqsOFUv=^`+&LG%p^G_&Bp#h`UFAd*`;fS=h)b<
z>j#q`d*oLMEueL7zAQrV(034eG?7-qdQfbD@I>K%;n&xxRz6xWQtnPlYGNxj9+5w4
zb)paO*9*_Y8&Ylry~^SOL$=QuBSIH2Yxe@}-Ctq&COfqtWWP|krq1Vve2zUQ5uP$?
za^!KD!zL0S5IVvd8lUH9DA`no>vp~3`cun=ql(RYA!#d9*aB-9q|nyKjV3L1N~JkF
zBZ=uT0RInR=hP-xlr7t|ZCBd1ZQHhO+qP}nwr$&4Y3o)$_CufhC-&N3%n>6%UKAt^
z+4K#8143acVfg9Ryj1b}cVXz-O~FEt9qN)UVAtnN2nB!a1IJ7<9f%j3!OTn{L1~fH
ziQcaVyyDk4X8sZ^xO572dprb4uf`Zg+eoWOv?7Ft(K8Q$Kv7RdTibUnccihh%JXUT
zn0}CudjjItJ-r&Rm3v<m*A1Y{pE*Lgub%v?R8Rpz^P9$Z4&600MCcQ17A*#I9+bgB
zx9BV9Xh42JZzZu`ZKoyWVP)ab`{p0B*2;|{{X6}?mB8et8Wv_jhGE2~4$jTRr^%mX
zjq<J5unA3sny(_wKaU{7H;ID_DRV9>c@sSrcB2m4*!Gb-vL_Z)>QnV`vJuu>o-fF$
z!t4-6f`tdAFA1~L4{IQZYY-pFQmTs61JIvcedKyF=G|-fCGe(=NojirF9`xvo#$vu
zyg*WuIEo}%6aMYl<T5Wa!-%|kaK|2inQPUiNV69&t(i&b50%V}?-J$1vW}hK+tdiE
z`xf`5=Arp=!G<QV#*wBgU1YVtY3n4QJxHG5&QNU$(ircyau_$Q1Y<{rhrMglO%=xV
zm{&!nU?JYO7ANDh%jm5uTO6Zdvp6IG0kolb*iPGO-*X~bGikbg;H^~VS~ITELfYi7
z*_EpuuR4~J>t`X7)B$^88!YvWqG0!1Yb-@J44V1*F%NzKElfeze6%HylQp8ADU={_
z(88`Tf{=c-Qpb+qpZfVtbHJZB?QB@EYU8yVV9ws<ZHTz5Dl!nfy!^BA!^y&I4u}D(
z{@Pdeu>9}Dj<ovHU+Ubh8jfskui`or!4H7;Z^cILkxvEE$DUseCl7yx{-?7@RuV}J
ziDLm><U>^mzQQ-ao8erc9oU3$PBMxfykjaCb*|GhBo#uw?!in7xOd>=3@UKQu<3{G
z1_8nr4nUQA#K~0rsD&H^-|G{|vK6Fy1Aabua1Y9#-PDW19}Go7UrGpH7D;>4FWjtK
zXk236-X8$x9~SHy=kmj#O|%5YK>6HH65n|*<=|e;9oB@a8>xCy5+<*QCV}L!Q)wys
zp-(^#4HZTYj>0c%;jloTwbFV^ANnX#;BzX^htb8DC5x<$JZLdK?V>5WSf+irZRB<M
zu8rch4EC;y*F1Prty2O`y)BOR!90#D3gV?E^q~5UMax3Nq{!bMLtV{V9M2?rAIG|N
zMvy6@XEUqq-b|WGr{J#Kb!;PbH~aV|KVy9P3|89q01v(Gqt|y8_T3iG-a7Ytv94ra
zJlow!tYU~9HUjYEsbLeZlwLEFa3U<LqQ#mGrfIvpX`HlbirxITkHcyxMk9m|mu=o}
z4^zW+#)tIy(3j~!6a!Ls8|lyjz%$m}^)(u&N!S@cp&<kbL9x^Rk7bRl=^v>BY>>-h
zhG~%00I}`9m6XrHPEWBkj*+U_(MJwpT8p5p(PIOgCFtSp6t_+etTafI&3zmFu7^oR
zNJzsHK=6gCe6(jyd;Aa<E1Km({@5M#&Ct6+a^aa+15Zt1SbNWhUI4l#7q)>SICqF5
z`LR3bb9+H`uYQ6u1RMfW&Z$i(?^Wy^c+X)*HsNuikCG}xasl)>nV3t`0*RUgs&uSE
z<?BTgici{XfuTjZUVAbCk2eC%I(JROgw3OEo_3meG63)LWdfVSJzzP-jTi94`Hq;g
zs$q9FMKfE(n+}BvNKWiSe~Ig9Z=wu17Yi{qX02luG1Vj&O$}U#wVw#!Veb<_JTlc9
zJguO5Khz2oe|Ofc9P=_j&Hd~dotFZt2#5+Tkxq$vXlz`|O23MNJs5YYh?ZgC=0V(U
zf`qhisJ0{KhJY!Qk>`lcq4;hYB%7~cl05G9V<2S#zNor*1<12#8BaU0@7}PR3#H6L
z`7xU5Ng>}I(03QLvAV2w@dS&OFCdr)xHy4S)udw~XEJpWa;>hI>`c(rCxh(n0rv)!
zF<ipfeNu!)cTV=q{+*UIo9z5I3~L>)wS6D{Vy4^b!54jQ-xgeMx;6$yH61c<hIa8%
zhHOHf5TnJTC`LM3$+u?v$GsjUcz8=*E^z!oBQ3`kM0v-z!Zrih5rWCe^qSO!Ze`c0
zekf^js9jNpC;$F(@$C4_Ra{~`^}v|)9kD~|+5OC31vhZH=HM~NeJwyTZslPnJC-0}
zRd6^$Ba{8%-OyUt!kJU<^7=vKZX9w#&M{yZo0`^U{H|Gs8{AE8PjHr@A|A{_^x!m<
z$SAJFh(!axkhoK9I&*FuuHy8oGyXqfovQDYO3K#O#fl>b&o{Wil{)g7x|E|*mBg3_
z*(ak4Ds{+E<W~?*?vcDOT`}TO{;T=GY$xg)ly_4$LP_fi#dLKDvn(foT|r7?Bj1c4
zwwU}BJ$~+oe4xRihtLm`vXPZ8v%ilCZ2TAOs`r06XA*>K)^eDD=Qf?9tx-!ibm@1B
zgh>jmGLzxfAc~ehQ-Qgkow{07*6YZ}0fd+m1YO`JQ`3*HGr@V6dO)O}!;@Bn*dnJM
zDYCixXJ&S2iI)?CIB~djBlRAK*BYF7R%ZCF5u%k4m=8$aziiBe?H-wcr~xsb50)92
zi?C_>_H99YLcDWO)!B3g9|1`7Q~XbnDafRfXwNApiCI;(FqQ5V)qXa^xHQJ#jXH6u
z)j-KtU9EYHA!L*GLk=$Qf6X+PN=#&o;`XhLYYI0*l<m~h{GttHoI$rLX@AwLGUX=X
z^NKXA^kNB~k_*3GnQ$o*f^4an=|E&iXJi$yk9nA@FOyxj=c#Qk7AV1bzQLL5mi&lM
zE2-3~%GId+`TYC^_!EzD%zT50^xBmQ23A{iX&OlvjJ`<jr`u+m>RqTE8>@HJ51vN0
z3W~=D7&dKWajma6;`<eB6ntY+(dNv$7_o3Mp9>Vcuz_9*It8U(4l9HEq$zcW(E3N;
z8b)SUy|pdD6ZT{7fVugd#&y);7jre)BxS0~k%w?(LGVJt%(dw?-g9ZZw%Kjz;{=9R
zpHP-~ug~Q5nDl}pY>!&w#VWiY6)4+-Zwi{(@NGm*;6C9DncNtwJT}g@dK|RO>blM)
zs-;FTt|0XHnsU%KP7Z7B=2Zhi9a(Z7M0ILUUGrLExU~9dkDPz}dv0?Q@vbxWN!Arx
zKCOQrf?S<^eivg?N;{*cfBG&>5&c?gqam{WsGdMHB7x2H>eak%ibV>__m)pfX(fOe
ziiI_8dEP5UE|FS5g|aZQ+t-PmWOow@7mR6Ha(5o^J*0%MN~P;H>SUu_8#M&ih^0(h
z@z7l$$4$M>&&&wGB=wuW^#0&moeFdv9Of^_b0VDsx@&{emP!Rhkdwj>)Z)_Nh<BB)
z`eEW1PWnJWn1M{rdi2hLzCmu6!0mFluzTu9L$d97`rGH!fJKbmumYr*&9?Yc-FC0!
zo6Lxw14@i$d0&$9Py-urBWjqGYAsX$apYXa!D@obhqsoI`<$=`0zV!k0Ly@36M*)B
zZ4^}w@MaI7+R3VLZilUJ#>k1sEwcsdwHsu-@x*`aTKi$3UXQNRg7Y+F8}fMX9{(W<
z9I!W^IR*C`Dy%JW12%lU_>OE$O{=SXwAyx7sVmNQ-f{df@hohXpnc3~Xg}XxpOUp<
za1@WF^w*2F*?VKj3F*D+XZ0m|ot5lmKY$`X)&q_*amib51|-71ii}SO^)#B8pjsxV
z(*47}pnd6Ehx6(MtNN;q#)wZDnc40w0~wXmi2^8q%@6rud<>?9+%TliP{tTiAl_6q
z(=F^4___LkyUGE!Hp~^22mRP1ek!3&dI_Q~Qn$;Azv!`(R={Q)7T^iZK%M>`xJaq}
zn+f4SQIbvrhvzWVSN#^rjCzlnX&1+4gS65js-Wsdm&9JvuBVZ=FMWvl5=-pFQ;L9@
zKwv<Ut#qB!1((r@rzJsxG!KXPo2e|qC0+u!4vm%^D_k3vBP}i{W}B8?(a#*&^m4+=
zCDG)JI49ycC&JxhaI0nlD%q*6mHN(|<BOt|GF)@(@ZtcyJ>0BCZ=t5`le6bsaUI1D
zptfdC7XGeFxo~LrvRMHH215&txSV1V;q$x+6sTniT0D07q14W;tPT7#wQ;|1->(ut
z@SAoWA6k>BTXG=B==1@m``5<C!zX>Od`dBZ&O(uLsDEBU3hTaSW(l)v@({FcP*29r
zScIm<?z8M$;nv-8lj|amBdU&(rgMN%o_L}dSDY{W6<qYR>$<0y8s7s=l_1c6Eh+(s
zG@5%8RsPN$l}ncbp+`*k)<-y;3^9E7b6}myVYyRFtWXkQ%}cBevYqgtr3y&nF8;d{
z2)rAwyheqC68`oHxNT@i)%e`kwXW{!(d#mB<-lt@hB%!%Fvzn3Xo0G~euH*DUaOFA
ze{pg_W+{V2cce!9YwH*l)Oa2e^pG0^Ver{PR2eKvt22fQVbII+rWy8fJv@Xb;|4lR
zWU^PkOO{ZPK$aD9<FuAL_tchFq@OwsA9#!a%%F1u)68KYVA<HTdEE|&TQyNvBB%3S
z9{~{JY`qS+vp61dLCpkYnGclX@Hc)NZI0O5Js0XeSa*5SjHt|*H44Yo+P?YE-SdPN
zUU<9QTUOO2Cy-&!VtlA%Mw19t<O@`oZ$522yB19<axE2!GZs*)elFc-qfFD2g!R4%
z#5*l$mS(8kIs+Z{J~Veg3A6y0FFVobQ*YB6wSAPDf1uBcs4}~p5Lxt!|E>jOCtF^a
z0qeUWgxl^xLKC$o;}+6m0D)0aE$19CH{AVNqP0;?9m_Irf=Rh+B07Z`NX3G%wN@nh
zjNm^T$z_6auOg$U&4{GhT{7Ag6(^!Ms>q*U!DgGOCjVZ@mb(@yc<2l6#liB(&}1sL
z`vK8muL=>D<FUv0Gl}0~Hg+&RI|H)uNYVgaB>RqXQwigK`8d7=VCbop+qok81q?@J
zItK)3OI?0d=+5ruWQ6U8?og@<kZpSm%6Wa@e_lTa=m9Sfm6sHzL4mSt9-xx%m^be)
zctwrp-pjaFhY*lV1`NgNK+HTBA^W5d1@0|IH<Zz;B)*S)_W6+={gQA<1I>dHTk?;?
zw(gJ-XOpCdN<eofv}c|Po?iK8TgLbUJnom}XlFrrh@d3fs{6MeAMC88IV|f|dQ)Iz
zPFuj81Sat73;QL1l4e)QB;zQOlE7)!AdzJo3_2FYI&NUu&fGkr_FBkiXylLM;;#em
z8N`#R$aS*PvmvEEY16OSMI!4pxh@uAPKX^75J*dPq2r8&3L-;B%*J$~b^MuH<=i5G
zHdN;o@D(&b-imh2pxxL#PPxfFPC>tfde&AXh_LaJ_FfL^9%;WpqKzN)|Avepc*y^K
z!T<p7#QryAWMXUd|ACCSZPd2doA%yOEnk}1H~9UxUYsp1oPdkBtSRgvZZ2rIl8)F3
z9UP4Hwg~2Fe!pj<iM3L5_Mbfdre!S&8A>o=%|xHdIC9m%t{RFNIRE)fvY2%B`@9)h
z-JSg_<;rn#O?_xc&u(z$@D}4maW%VSfkC!ajSX@Q1c>B1fQ+~IaL<Y_s7=;8CNel?
zO*_hMS`k1RuQNR`8j7`UZp-vy#%{*+nj1lH@)%5%>wHOey$R2L<c1fgcnW<Q(nNlz
zbKuZ=w?sjpW{!e1hf0l8LJQ++;O-n(z7Hsd)R^?6aO*t3WFx^I2e`E^x48aiMu`vP
zExm(cP-cl)@`WpB#ION(5G#>*9qvd%49I2Kv9;`i+W#OYCPvTu0Q8Z;%r4RSI&5pH
zZKSmS&xTC{9qCAGf8M)=qPbPO0tgMPQF37!Q)AfzE_ZC2^S0;;?g2zdwzAu9&-!~!
zCz<O=dnef;(}n|VrTxt8Y`|ks(!s^X-TC#=`zT#CNB|Hi0`2HeOTePkEm15FcHcDQ
zM*gpw+%Io3{M{0IwkL*nHhP!WO!c!o3s;?H7nj#u7B;rTWoa)sb20V7h5h6$j@{*G
z^+^;fx!s{0h<SrG)R~1=>{H+4sTHgj_J>ib^w7xsV-ZCh@))#8Vq?<~UufA*9M3A!
z-{`iJcC>Iyh<faH6ymI?cbIg?4L&Yh&n1NBi0`I=WTCBkH-`bZ^;KIf-khGGGTisO
zUN^_xS+LwE@U(X&Ik=0w$=fEmw1+VdH+uPUS-;!7N`tXVC10P}h3woMH<hz|uR{Cm
z+>^dIudqDdG(NtZyjNOgxcB)P1{af0y@#v2C9dQk@3;Kk-Df#Z(kE~p-1v-x1RYD*
z@41K1qQd)fzn@;WhWq>ukEb7)R*rg2UU>hNUHWKyH!?N7fTYB^U*=Noa4ayjjnh@r
zESA`BVyJ$c1X#(_rVQ*oHoQ$J@d?cV#9!2H$aKWguBQ85^JB#g?;zk$!pt(`_y>c0
zBUmBJEIWt&4Q`sa=xyOS+LO+V{dFhv*wTh9^QKfGdzS7piW^9}-nd2Y;r4`z;6uPR
zQFBofZO%9cv3%5LJ1(~E{dtce#TZKfuvFmcE<0(*t@+M!ecnfRl)*?rLt$R|;Djm*
z)y>R_S=@kvFdE8HTW-@L{3lzCXuP0`8AM{+{CAoa%|JiFzXEBl2!CSt7{FbtxZoE{
zIeGx=*g^^Mmu;s-jqS7IPLo6ps4}PvZ2`LBoDkGtZ!ZhN@Xyoc6k3KDZlgJTTL75_
zw<t(qxG~cdMax`q+eZ(@K&*^#{2L5y2ajb9v~1z#ZBSm>1myoTSW|!BucrLdlzvYx
z#*-kveqDKyVsDuH`oJOrO792aq9P+G0+ep#Tl&Vlv>0qaRqTWzWr7(au*FO#uY2`l
z2zQm~TOZSQ@Bd8~d9Uq=9m;4~;bo?tA};H&M~6Yd@BsoIONje}GHRyf1Q02YcWq@O
z=0ytr!j~pG)0|n<l2jxv5z)b0?|UuBzK*Nkj_$+;ib!bV$Wrd104gU;?mkrCl<_xm
zM!8Ccx6>d~gQu11?*OZ)0!G<6*~BFQM7!6MtzXU)JnGx4=qbp9%nNQH!7^yEJ(Jq9
zj9|fzABBDVu9OxF!+n#9d0(oNxNDmR3TXr%RR1=;{pnE%wow0=osR|nigxh*)6&Gm
z&?qoF+;+%0vnhfE=iB}$a$QYfz`wdKD_b$LLIJ?DKak$d-+x}9&UqmMz~{N`h}#5U
z!kGP|gL;B7$xDqWp+AZQTJWD{7_sH8tRn>PLl7^@KLE?8aty;**ZhCw-pW@&Td>}|
z^5#<H!^G0`)c?iuP~VA9-YC)d3}?t5Fa2?2)hxNh7Krc-Hj$bc0<zy)M*-9(FBlp6
z`d|$9Y##E~;fMByK>YGH&Vdg>?UAtW$kCt$DG@mZ<O{38Yl@cEQ8$zwXn`<jlcLKB
zh(G|fLKbbdDOZL4GMUaFm|%*IcS@azUpYnzfx-QBf_nHKU_#%lT@0m(q$)4|dEsWX
zg&uCM_YKgcO@5m_Z%r|>O`TL?D38jsr%?bGfP5KAO3{G<$y7)VuTytIw{r)O<Todu
zbpW1OEw6l6r<5=>&VZPY4i{=?e`3Mt#(|0Q1EB=(^bTDnlH=`Q!i+f?2`!SMd%-gh
zR$@zMWuaj_r9b0@Q20*~mPuUAV1%5eH|;T60lC?G34VrY!P(wdX4gs&S6H0*HM%v9
z_aW#RCc{`a0OJ>@Uo=TGb{N080bIz92A`Afj<2?TY_KQ>@8wvjx8lhIAdeXu4V>ky
z`XQHro(P%!kI}qdqERCNpMf=V@o7exBNv1gC#=AgFvaN&-j;#|qN4%f-Ek3VgA32?
zU_5Is?wKG5<OVDsR>NT5*U*CLzLpbA(M1+mgWN-$8AOEk*$aRWzi3@Dg?lD5r&)**
zirke>gH4OVV)bBm>&$!F{Z;#8G6sEdU9Xv*c(mAa2TqqRhFpC@jgyQd6|<4iBhqsi
z>7K-F&vQ1D^nVnM41lMW$Uf`wtt@k1-~`-u@G(e1_Kj!K{BmEL``*{Py!UAN>E6>X
zT(T$vt0Sl=XqVaop?e6SlVNEC<M2B>EBtTr&;ppkLKcBmTr!{U_&3cYxE`IY3<s<0
z!ztZ@tO^qYB1UlelkS}HU`@hLjM=yJSuPKFY7O6HXHGP%roN43B7A5G$8lX`+$Gtg
z*qhI)BLH!8WAZVexMhc+a9Aqxmz%-`$0%4B%3=H}_+M59mRgqeMkH7y8uDfMw86jX
zz7xA<-5ZBd`9c*<>d~B1Zw3Bz(r=gtiovzp7m|wRj4-g#kDA#9pg8X=r2L}lyr0gL
zhCp$D%QVdkCoQ?RzQ4+jypf5ch3cOA`jSqn-#s3IBVWUA4g8sfT_lXJOln%%V?Z#*
z6*XC9q{lQkk+)i)R=@I(*KkxGU}cbAPPz{(BsVUsFBK?;3beTcgyqEhxA?2lFm8Nk
z3d2zW)lcW8M{CoecSPwd-ikIwzXfmx9-w!qzk>yI&8p-9{Z)IHw8n5ozf3AX&jd~>
zKf0?75`>j=;;QE19E}>MO-(<n?ml6OB9}zXYI(L;51~C17B-j!1>M%FU*sPeXv>*C
zTT%1i)*T^f)fzqnC9(pXdY#&`P6#}7%MFKVeJ#OB64niIbl+HSpYtrq1LnEL(7LKC
zKk=TKC6LlVtvm@?6H#U7VWNSrjyxeYMPue_!%C~pLak73lAS6;KD0rSG+CcQnhQM{
zYwl=QlhFh-SA~tSey>?z-h?DUfX>t?vMwlE17S50acSAuZT0rI`17-V>k6+b;q<S1
zCzXA-EG2oubY!H8R}sdLn&Kr!@$4YO961mBxWu<32Zk><*IyQ^`EmU_KYu|Dw5FJD
z%2Wb_iRB%ydnA<{PcE8OxeaT$Z=zWsd7WyD(8q~nBq_Bp_6HDs=@Dn0`TlohHhbZZ
zNw(`0jWYS4#}rx~z+kB0tSZdH$tQ5RlLxU&>1OSk0h@fovQk{O6Oc_(6fb>=6B<R8
znM*iNx|)6fXkwD}NURLdN{|#(kR5WYS^Owi9<kI%tVSual*(ii7$L+L**N|RW!UM2
z>Vd*Zo8nkLEX~fvi>WW!i{OFqj`$(mZgG81E5~Ic@g8|R<*Za_B_X`Xsk&I{<7P_g
z1_bIT5yzTYlPF*CAo&cf%wr|C#?bBUbp@f#%7<5&yc3}&)szbKvHW|4lVbNqlegK-
z6%rB+eXzk)*HR%LO(=80WEKy@Rta<uc~WeJYeS)tfRQra0RHXv*{d}b17H>Lfz;{3
zCrdlCv#P`9nJi)QzvBfO&1HYEwTt;V)M?(zI9m4Hi&q0#unyv0febX|%oj$R-XVZC
z8?W`0`IN;tU|Z*~jB<HYh1ngYbZ(TxG={ZIuo;YTM57A28IH=Uuw)|gXO7WUxcN0H
z<rS7)>xnIwh+q<lWv0N6#8l>{oG#=v2xjJlOsbTXCB#^=Pg>H7lmadvP}Q*AU8o~7
zg&I6Pig<c^2^rp(f@<~Eh!<0qF_ORLw&UKhwsdVAJS<gZ=Z!sJulEg?*r^y`2mn{>
zgO!;ZfFZk;j|0pwI(A`COxMMUnoNx_Ngz5Mo6#UZ+t?F!aZU^^NFZjEVT&-x<B$hb
z${V}9LE1@l^|*YdL^&Ul!6Fd659C=TfeE&(RLlBICR87~5`*Zsh;Xzgk$`k&N5g<v
zO7unU!<s#ErAb(=ndOrUliQ)lX9Mt{&NNpJl8hNudLpG$g?{7KzaHM@nlJ^f8Z#yX
zW+aOl2__&0n2qy+xSs~f$W}4ekC23vt)yTAppcr9lE_Z@>y{=RTGuVo9aCiqWJSpK
z$sVHN=*OvWq18H_Azp+$s>Y$sn7Tz!=Vii(nG<N(MWy5GF<#>Vm`EeHs`JLTY~n?x
z$$lC8IYDI!Fj1AalBXc=Wr4GRIQVCb{~Wl`0|;ydL*q?tQ3%5+_JsRr+nEz3ruD=(
z@t?CSF@We7Od<{_U5ul9W``6ixwpy|B$3BNZALIG$EWkcw8!tFQ`O(CG#}C*M^-nb
zF`)=+XP9b*wUW|CW~GJ^DNAdh29Aqs>*$v(JQ(vp!$1yD!n{>Hb@#Tr0Q*I+B@oXY
zILxMj1AjDeo)5^m>_5i;iPv+Miwi6IOeT}{U}$`JNn%K=Y5iCdl-c53OWV_Tf@Ced
zk}skknTeW&qHG80Y*G%Cb;SX~wy@*aNH@&KFjrzX_uhQCl&CRM98LGp37H+Z8BJ;T
z{nAGRWho1lLrW-X|K~?K&RqH|UsU}!CBv)$DXE1ReXn|T-6_ynP$mwxNlcddz<720
zCLa&TU1u15=o?#0i;g?hTSFG4f}~Dn6+bO@neg80p8ZOd7?wT6#5=S_k=W$Om(1dG
z^CTJ=`ED(&rs7N3rD6J&VCUM<d(5A!FX<J2dc*kDf2-m>UuvkIMbAUq+qitiPl3KR
zN~QMzc4b5IS~*1zTDj2zeW;U&quNy4o;HaHk`rIvP71{i0)Dw@PrgT-xX~9I(1=}2
z3Dwx3Ab=9rM6}m6z?MkJ+G$2+i?i3n*ShifZaj(nBGx^#D}C|m_laQ8HMnzn^uCpX
z7!n%;=Uk}UdesSW47!a9Id;$}yFfh#_UxZ>ohmx+ZrDhyu5?>l58M=cy9ak-kxcuL
zEY|^Hn&VU(f(?!Ny<@tzFLo&td2O1`lF+dAC_dUJvNQei!D(qZO2a=IS$@JmL-UY^
zp-qmQ=`sWqc^DuOv5@k5HMw=bZ2Uck^8DCEe#gTH`}h777IcpAYPsM!J?6}TLfE3=
zuoZOV><tXp7N^@bcRtJWEpZtG_8Qifo-W$xZwYH*cly{@MyKkGTG;LiQ0L5<c3n8t
zNPb|2G+f7OyhITn*yq8<p<hpBQ-v7&36e-<;hN;c$#bcpY%LtP)$y@Z;z)oTouH$q
zljHCL?7j;%b6f)#@DV1NHR326ryBDv*u7xFL)Y>!7!-5KD~rx~C^0Ugi9{FS3Ia>-
zUvoyfK2Of4MJ`Q-T<20Z)1TyyULvdwbYITlwZDs9tV^`=xd`cg3__Ym$@mIoAe3jR
zZP2OjB2DWt=%y{cC?wlm?eR^p6yp-vjx~j;g!3c~g~?HBcM)5cDkKxBIh|ij9Hls)
zzhtW`|Mm+vzl|9p_0?30pg=CFYcJm(A}A4**{Mf7Jio8=CrK6{6Xae2FjN1YgwQ(%
zCPT3myszn1Es4i`UCi#Lg?8%S`qiWh!&l#pl#Em}7rPIbt}p@?u2QPWD*BDQMGpEo
z4w#I6k9#ukt2_0akXOGresB5twY;0iRLd$;*E|Sv_+Em_!Ecy^G660`ISS&UO73Ip
z?++*w$oCc7=^FB{y$`>{m3Y$J=&021jAQ6>n?Hx}`p`4JSoaC#ChVEeV+QM=1SYwF
zlvx3q-j{}B&C9Qg?XgflV6{Y_jOk@Ilc6|*j8hse7NzOZi>VS)&Z>EImE;qiiX@7a
z4U{XRxnOSjeN;O5F68xj@8(C5pwKFW(t@5sFLhM+he=Cys0YZ!^cT^^Ag6;)C8C$%
zIcRcn6jdctepj6fbX2`Oj7aSS(n%s<uJ$YVhUT>Oc<)m8DJQ%6!DohiPB4UBGaP)R
z^41X|DOs$*DQ1raa@@hvz+?Z8{yOIG#w6F7E~t)}a>U&K(n374M&yAU02NLf>J&+g
zx9uM49c^Y8s|28{050oaU99dxdyDM)&!jxA>0S6v`O&P+E^ZMKs@YwI%0R}mKuv!}
z{OSraz~_ClDw)-agxgvEyYh*YYM_`0<~g1RszFD86m7*reKj@%UFc(lK7r{bfNFBN
zK70e^Vdf279wR=;W?`N#y|@c@vIHgDxqEFPwc2eT+YV$R4EACLLVua|(1hhdCBaC#
zu)UD^UV2xdgGb3*6R<&)TU*$W9!IM;;`gipkn!FQIP*uI=&v)iYH35=Jx-e8w!Wr(
zv-4YA#VR(8V|e&mdpw5n(20vDbxT>k_x*QDS6dbkRe=QnpsD`9JxTv@JOAI!%xdoc
z*qmGUzNzd}GFplgZq_ZlvN&&WH41HPj3uZRE1cZi>QNvyx(mcp@lC3-eqO!c0D1*B
zE~?91sQ0_=?RDKRs{MpNj8Q~C*S)rhkH5Y@Z{=urbAS1(VTm5YK}$JEqS(LqPKk}v
zNwerr%Z$%IjUynksWHv&V>`<DAuMEg!a%b-h+(zSl8S{#({zfXVsJs%FLIC`IHV_5
zca!j?#V0WrC0Oyutme#udAO)0|08tX7VR|yha-~HZA2VK#T5CE(76@~+usHt?nNAm
z7rz*vH77bc!@}5xTiPi9)RQ}+M<vspV1H~_7Qrrw81eVw`ugJHf;pJM{%>CB{ZWQ6
zr_vC|4zbps{<+xLU3V*tr_61vp@xRyp^?GjHZePhW)HwB7NIV5cHhfDS`66ti_#z&
zE6^KP3K`(r4zXU}8Wx33;BlN!;JwGD;jKX8zW65IfP!LrjrGPRpT^Mp=$eWMq+SAQ
z`yQ8wXYj0{FA{%EwDTaWznD<20Xdny2)+x(e_EXDy6a2M-v4!>wK~6IX4q(aWHJ72
z$0q*k$5o}uqHza4Y=Rx!eE_t-Vyyd?CK&RbLf7LsNzTlXe!DPwxhZ61YTk|`I2D`f
zIuu!@H5FUItMWMVl$IK}bXoX+_3L%xUu*z33UZ$YA$NoEh#@R_I+JSOwJkgK`txx(
zi086W<9ppj`vb-i6C+Bq1JX^rb7FIWopKwrN)57nz&2-}@<RLu2rw9kac?so1|T=m
zKqF!Agb=}XCXRjX;AxZv5M_dg`wOo(#Xyt|itLsnE_^DiT_h~tC0M|3dWwnVLmG-9
z>cE*9U52$vEx2^i|8gfBzBCy4Qxe%?5I;@C2JM=l-c!6Fm5zbPS5)XJaQzOJ8sVH>
z`*Pyy0|<_6RpjxPf1<B5r0kRfqK(~oO|iHA!AuL<49V5HYw_XprgR#!-9HZ-C^A*=
z)=Gu`$F+=w#zO`M1%eXG>cKQIvlG^R2B`NFa<wAQ-&(>q%r*C0q79wQXVP7qyS97t
zl+c<XM2ch&hR0k08j(g%9MzQ_GV(*cPJh!O(r-8o9`esbFLH?Rz2b#9(lUitO=Leg
zkap*9pp{BAA(CD`h<iIOg-b5eVnIwFuF870$mTobqla5~g5tH4!sY>?u~k#ow@r$Y
zWPWi)_TWm32Zdt!K%?G!V0WSh+Ax!Y0KC*Bi#~3!Ton00EhQ)Amn?vJ``b*gfdbvh
zg<L?ZOUNJriXX^Y)Jv{e&0jtnTLKi2U%5B-1P3lJpMLgV80svX&2L~;-cH|dUqk-H
zYm>`q)8&hUTC+XQaQj1{$zqIIB+Dm2Br?wejn8N2C@pEqnzHpXT`3y{jZ5Q>7o$AV
z-tzLt5`CM^yGh`3HyjOzY}By=+b#U__97l$^Tf)JR4cUa2&Oa|HMG6pXr)pogm+Mm
znpzn3)}NDEPXE0f=X2a_Owg4}Eq#6**=n-`kC`38sVtrgx?cKrWMGTAJ|Z*X==hN~
z8|w00T31(Zld%+<%4F8JJ1Z?AFxZAATOx&A;nFbPPs-ZxwwPaVG?Wn?ve>oGd<6qz
zHF{dGPQ;`sYqXQM%OA3k6^`Wvu3n<YL!0Mmu$0W4wk1=W=gelw{2LlYipdObAW38u
zuhbg7v5rxstg+Q&;jdY?D$j&Pat1WbP(}c5l)0R}ZEUmpu-oik{m<Bn`RHqisrK}B
zD8`v5<8%>q>N)iZ9YZ}-!h%`I7?z|FN}m;^NwZ;^id7Q7NUmw>>29~PSaClw&H{+c
z{EG_4<>z0)keVt=;LOQfQ`GrBbUWc~nwtMB!>Ir<^4ZH&j`_vFhZi4v)0r&}G2O1d
zwGKxsaE(fhuMFPqbrvTOV~Hh3P;HKtOLYEIbhwKfjk*|s849Q#XMFC`IJoqRa%3)c
z6{2`8$uF-6m5t^}8*Q#cR_^`AJ`X`1jG``|YTZ*TbeU|U{zozICS9*gD|g=YFdW{+
zgcV{o8)dSbCxJNY8Y#Mkql$VSXOCrhpm2U8991DHQgMv*I6`(rq<C?L&?{Eo0Omwx
zSid1_$=qnLwRLSi2FjBzDQ(@Rxu;wf<LG2cnG6~T?T?Vi7BMUbZ8WBfJ{o^Y$Z^b@
zm-nJEasx&+2;=)Goc13nZ;?>_8ZZ|=<LXcc&+Ibl(%DcBJ@+z_dT84m+I7R}`G9TR
zpjhP3MDa4jYbNgn*jAG|i49DnR_Kxq=H~>Z5z0OZjnV|hXP3**$sYKHl)swD?U~`k
zD)SVo*2KD8dwO4QtdCA5wVWF1=I5cF6==6u64Gow2nUQ0TwE{0cTt$j?hITL5P9T-
zF&Z$eyHIbN0t3y7gnCo*h@60eboZN^3PEY(J$sW<t$6@F5R$`SeA_+w?N1Jg*?J^7
zS8pA7=-iYFeA}Y>@KkeS7_TU!da~E-(!gqL3H$W4L6TfATpxh~W2lz5DeL@6>mUFV
znGuyO6TqoG@yK7pwA;1XzUSvtDUA8}C!``KEA@wviJdA{jUw1=h7GcbO~@k!zy*+N
z8MS6Y?1u<~nbpNgj<GCWVtTL_>JnrzLkMUDLgQ>dAH;Q6S<;E@CkWR1CjZo#{4F1n
zb~dij@8I_aD=-8p5Lm@ks@6TG;`<e8^cra)0ebBUMY>4=1H$%>BKhASF&GZRjCBl=
zf%T!Kx<6PB0%_qsaM|eP5F%AKe4z*jY+I$LjJdaTSlkWS)vyAKRImk@bOyL58yHap
zjcBDRHG(cg2_f0h<L$7g*7}UYrx5En$5ddVV1nTpoC!=USgd2n!SMh{6TS9nngdl6
ziZKBI1QwkslBKG|Qi6==YJ}snFFfc$VZDtBTnhUFb6yS1G{h^)ONkNuh$M6$uI;2i
zUDGI4!J-K~Sec?7!?bjaeuS|zO#BK(zrv~vO?}#_2$J}W{9nt96jGO|yNW8_7=p<i
zVFHnnEugZgSz!^zBS!}03IKRu8Pu8|Rw?S(${oIz0TWf}X&(!oo26ySjm`ecmT{~B
zQHBSg5aRbV2qnealu`)-TKthH?(XA+c`X*T$zhuOloG|DrD*SZ!JdHo-y&P#lLpP8
zrAU{X29e~er^3(t%3CLsRC%+%IP1rr^EQq=##!2DnKHHD9}DtcxbT4vKW+^{1-$cB
zpA*j8#Qy4Qk0(3%_~d-7!}Hft+~=<(xqbE2OH`0?eERC4rVbza#wpq)_-vHQ*Eh;y
zWEc8lY>1R6Yuap)$?D7AR5YEEJbO3hsMS+zK-tW%lJRt=6fd43`<)eqC>&a2YcjQt
zN;pe-w${a6^ndS?-L0v;Kz>zKa4bsov*)3Xwk3OWZW+kT!ELs=o}0h&Wv1X~n!oNG
zHPHgCeAF)+YpPg+l}~>F43t%++7wM_4EF>0DHP)k{HKh#+>NuXF;L{Ss0Y>Bzo3lP
zpob6A+hy!MJwwR`-RCJ|GjmMy8C(KJr-5d;WbzpZU;@Q&!QRQNEOXWP7Cz2K;i@1#
zI~kzKIWzZYB*l{!#EKf)px;N;1;6XnvDPrJm)kL8dFf&@9F%OZX3UyM1KzDI(qBzf
zP0UA%o1<tHx9$Hu4>>Fs=9~<ss=GB<w*vi!+VT`JB1*e_8rxV?qz(5pc!s+s`bNOZ
zPA%Df)CeKISdYaK!=<!HMmlh=cePCAGK8b$vw91Gji@}$x4SF2f9{d<^4u<$XsfQF
z0MFNR+@9W=Wdrc?9XxkQ!FtM*I@tM73u&h*eU3Q*Ey9sDB#->b^MLa&V?#~F*Y_;c
z8;V(IpFBd_R1nbENE|*}T{5;S<f)Uo&NwQN8+^1$%U6=lybUDEE|fc)lOe0nB*^L1
z8YMZOah4I&iVYF;bDGG#%m|u6g4J)`5r?S)$q`zC$`aN%dA*u*ctT`fFa|x<uW2lK
zblAX%$l(PR2~jok-J-J`(jPv+tVXpYqwX2?WfvDlP;hSx)J;7D!m8X0>qA}yO90?5
zcF@|mVvz@z$e{`xHDsAZL7g&fMf%I`@-X;m#Sr^8O%)&#XLJN2!{tnRSTX;o3a}{S
z8UOy77c${n<Zef`0FgIke|QN^TDGLx7A0jRLsZYLzZ{0s=5odU>K5Cg6A9t2y_&_I
zww9`C79kcb4_$H*{O1CQ?4oqP5;?l+9RqTp)HBeLqV^L7s3s+OZsg>2VSIk9Sewil
z6iz)>;gBOMKlsF3&l4hsn>6p@LV>K4>5aw3<L^*LI6r5+n(}5KZEtM;6JrP4{Sj2^
zKFEV^D6)UcVuUhKsWi9sV7wTeepK_SA&l&nsc%d*QEsdG7i_F;#^R(yx0>sc*I5dL
zS<1h@eIGJ7;F4b(9kmMA`f2shk^()@9V-`R5nX5G03B^VR0AonmaFqY@Js>Pg&cTS
zntdHv4cjabYQv+T&UP|F1^USSk(le|B&Km^IrYZ0$(l`%cB^SnL`%SIq<=v6L$J*k
zSs)d%CY?~J?FsLE($P`MEkRBTK$7AfA0+e|&7ZoUS@MlA1Q=V<1H(p1hGVg1ApCrh
zR2L6yvp!_6)tOSv`f4WUn7r?V12L&beU`?P2Y1(b2=CBU=;3h=^>Ns%IYpG2#)gOo
zeY-^my~mn@J&gm05Eu_<0=DS7(!k*sD#0%10;ufx_P5(Qpnd2@1vKHBDD<^!1=gx%
zx)|Wct|0N@AFwc#R){LsWSDwwt>-I>d0!Uy`AQ*7o&SN%5dcww)!90C(u4f|?nXY~
z35*nvzf-HujgJ^G56ChUYm(fU%iOodh0i-cRR%n`A~FN`4$vrE5gh^i01dfB{F|<z
ziOjWr#)ei$z&K)txK;U&g%e#Zrd2iLiN^tw&VjjwlhWjcf&~Q$PuZy*ZO|SB*hW~y
z9zKS7p;kkU#$<8am_HAFM~psxIEODxwSLcOFTgs?VCQJ&`T9gseWrbUEgT#frz(@W
zScV^>vtY)@uC7*C69+q!mi{ng*T_wznvW^(7490FSUuux(s8(8!O!NbQUZU%P9&?Q
zc31D#(Jy|4I3ZG2$Bm$=g{2%E#ItH8J}JZJ6M63&Dg7B2!AstNIElB~^F4m=vEzqU
zfLET~AQ_PAX^&uRK7V|C1aM?TDK3lgiM!&;x7dz}A(`;&JX3l&046x&fxR9}@bFy-
z?wRk;bW7q2Vm8>b(2v=eF*ap3=v(UF%}`r<S3!R9g1w%upI)#xST^vRAIK!7_%*Ko
ztqEv}2A2Z=ECPF3ZA9Z-f93r4{U}d5_^N?(r4C!EkvU$=RBb6gg)TRIU``*}FpJQj
zGHMo1ZdooLJR_}T^sjr?_}R>s#O0jbS-ZUUu959uYm6l*5FZmt3kdv+h+FSCuo3&m
z&CV;0q+To)-`KUO{k&f#w_Vtl>k`ei&+fJ{tAB%3IWPE9kl_#{K8aCMBg=Uw62)7d
z`wU?YX7&8}A<*p)dW)|jA;9nI*gRM!VGF5!iUzVwoC>h7lE<a7<`E*EYi2&Eq}MT>
zAHlQe!_?dx@6ERsz3X{uQ<j2%xf`2z{#{@HOy;fBO$boyOOq<_ylji*JYg|bG~4Bg
z?2o;e<5Y{{jbu}8^JW@yEh{<<6*7SI$jP&`=JX#K3nwPz3BYTZ0ZkiW+Lg}d<D>)z
zUK-^Z2vKT-BBYm9o^TH~u<9CYm2Kc)>kpVshb9)-UXTN&`D=fJ`r^&(7Pf5&N>ZDy
zZW#)k6>J2D(CXQJk!PuoF7vD&5q|e-$xfF)XjG4#Q;PSl=cut!Zr@fXfaYb&W|6O8
zySF8p03Wz23>D)*0gzHb2M?v>NxVB5#>A?3h4?@uaFJ`;hmcqsHXJS)N8$D)vHau4
zGJ_!Ke~B8xphgU-QyUR3hQH0bPb0?2$%kd}O2)&KA0W#-5kiyiTu!0v5Oenj^;QKW
zb-k-1SnH89#qJ-;BWnD9&F)R7pm+aGx|ehlWmMua-@0`$5Jj@$z2i}joSj12KEBmo
zlD#%fnDep*lOMQ7rBuYlmf$fS*h=ASd1?3VX|3_)^4nk>5@cV~^}Tos5}0RJ`z=pt
zL+EJk(D|0QC1FxCnz60Yyw~!MEg+*LFSj6fDSklu`cUuX4zAmzj>Oxv5?0m;W!vjB
zb`~BLuyiNWT`)>tuJ`se=FnXZY*6Y*-G=e?ryuVvet?ru7S{z|Qh4qgS_mt}*=jUG
z?o9gyr(b%gHL2-yX3+yFH=odMnxJJcIxJJ=E<$S___hIU$h0MR>IX?EaC-+nM>#7j
z`ppU>w1JP9ydz0#=tZRMUy8+#f-(%3**spztk8T<(=~+&lBiPo2dOtU8BNe1xw3Q&
zG!6P@c=g>};2~fw=Ni9M5h0~&oZt_DA!)F(NGR`;Hk{egxK&9Oq|!>dmrw8ofhP$s
zRFv33yo!3+2_XWE^xPeOC#RQ{+_On5_DK-UM5N@VKvKC~S=@FH{3U#qA7-!f?i@ew
zpamUKqGdb!w<F065Fa>UW|zO1s#dY_(XmZs3cx)a(IbvH7$t_;uwFM0<X5Wzj5D1Z
z6*p=Y@)&ZXw;$(cck>-N;by1#SOtPC4@`Y;lCo1bgH}&9p_fD=srHNM@Y5|U&Xb2x
zi#XC8S`_E(OH*AHrU4E}MYu|08R@7m2@PoYEAqqsDhTG!Lp;bPk^i@QCM}-|vs{Ho
zX%rK-gngxTT$UAF7p=%&Aicme4*_yr5sSB^!Fl#Lqwu#%jiT4{vH!k=6juWt-|<2F
zOlLE|^FWNqNu^m$p&}yB&q3(L7NxDcrrMHGV=#&?-k%V#Or1Ge(#%ZN8l1cFzStEW
zA?_jF2zKIK8C7At+TA2pxcwZxxRFXY5L^(dnnc<F$KEmaEP>nQj`GXDJLP#jX>6s+
zGv*@)#5kWk$UAtq_FEhL64LtAa?$%3PjAHAILXr|4xCJ*FfwD#dX_PJ+YHoYQTg86
zm^Stfeb~*3VXW@tyz28uJyVRpH%MF!@atxmo+blCH}`O|)nGj7G`ueX0uOl-@rVg>
z_FHZLY&Z5j$QMiYHU{sn;U+!h50rPu*lSih7MzOodj_NJwTWJHe2vRUM4HcKIP97=
zn__e1ZM*%v{4hWuL?plb9h}r?t^0B`8#4o>pi!fWmEfEHBR$5r+1z7Q9~Kd`0c%0s
zFBlM@o6&Uii9P4Lo>4a9Gmt>@2LflRXaVKXeaiU1AHTK~+7}!HP|B`3Djj_L1s8>j
zLj-?oJw$J^UydQVAcqYm4nP+7zLM(3B}nnX@5a1aN*zONw$Jz8nB2GCe>g&q2Lqx&
zdN=pd_cd6oRvI|vc$N3kb6DkQ^&B)X&Qa1imo6R~R}6SZk-N1y=K#LRS=rI3<C2a7
zm&D;^q*84BgL8-;Sg;i=K1*}8$&vnW1BLu}0xE_;;u{H9^pr~Uv;M+8>O~h7F)P+!
znAAH+ADv|<jc%O1FyMq=9oGDksLyvmb%V%a3bL+_UQ{We$@jm|d~t~tA^7$yvOJ9w
zVgW-@awSPfG14D_<f4FV>fhEeO9Rms0e;JG&*OU9jZ40G56SLE#zt5V)86zf&<pc!
zZ&{5eOKu!3<iNNHCds604Bm)THRW8}>+6Kl&bis;sa2zxeQrwrR$sX62yOBquGe&F
zu$rnOr9nMg3VDf>b{@K7OsdE%{mpZv<y88Lq7)3geM$*RVOkGyo{9CG6PM5$%9_SF
zrWbBfPtppfnse>WnIOBU!GH_9v|}>besL*g!_g);8iWqXBeVJN*+B>;^+HMU`vQIT
zbeX&7xhC4O?{Y+^E6|`;$M8;Vi?C(|nr*@WycLZl4gD(RpqWB(hT7*Ml@wr48SvE2
zDJ`scj%R#Qhr51ULN^$FY~sHaqAz^BQfaN1{rEhv9yX9sX0*)BLvxAtAmA-7=5@Rs
zK55~BHFO>$bt@*x%D@%1Nowt=7PZG-OfUVsGYgV^a*|gbg`oBP&qne`m2rTiGVMw<
zsTjhvj}=M!)p)}-&AuVnm+iiZq7^w&6PmHeDvFR~Iiiw&JuG&(srKX1$05Y!gq@Zt
z&iPh(mp`r*v68J6QJMVpuhH_Zzk8%_G=ul0Nr<wvAHS%78Dq(st}H!@W$vMIeW#$R
zZP;MY93B)A7rRafM57NN*Tb5>E8hgw@LG}d3FQ)*0C-eX#fz+JPAx~!M`n#}`!X{n
zv2a-Ol9;A87igyAdl0+*`lekeaz%AV)@VBT;n=N6AtVrQ$Y=3DMVbqqX-|+$vs8p%
z1@4>_dg%~Az=8QBA?HU8{qI<9lMV}zqa4Zl3x%c=t~=Nzin1%A6eVhpVh<zi*>vdg
zIU^4h5SD8UEE%ac2F|$Y)deQ6XfR`BrQS5g2Q^6v=Tx?#-gW`a2v9-1Fpx7EBDDm+
zomqrS(8ERfxyll4JD9yvTe6gb<R=ppE_ata>dZ8D8=pVj**_wq)~po|Z02siY8$T>
z9fzXz9MM4J@@aIC;A=+*P>e>%{^A-n>{qxkLYfve@t!+uR*nJSDB(Lei)MwDf7D<B
zOf>ug2Cc^axPyj~9vBI^C#jx@{L34av4USOOjtQ#54%-P971P_Fy`lS#&^AGh|*_)
z5WYKHKJ4T9nKniz4mG)N4MLYBw!d_<Y}pg)j7pu@z58M|ZmNU04^_}^u?r>B?{+?;
zF$q?nol2URzm`@HCg4%t_TG>b;lasr#16aI@MsC+`^o++5EmsFfIy?@Zp--gI|y_Y
zoS8#~3MC#`b`pT!4Ih>#lAT|wyxEj<%XMika7FQ^_h(>C(>pjy8+wxYRC$1ns@M;K
z!h@?h<*+%evWeg&8EQbQX_fm5hpUyS2$ocdi@=qSYLEIi;!d;7HMHif#EW$y^hK+p
zPplH|f5bF4;f5;(n<hVMv4;d!$Ua@HWd4=bjPnEdx?2T>tJPMT0j$4VAE9ZA2~Bqd
z@xgJ>kEmp2gx?t4O@=2WmR@<A)`Q|zOB`$Uz?v-c<6MO61>lP%8eM!T=T&=HSo~3}
z(2wGvQyx@32=@d0@8cJ;KZF-B3;;kh)&EA+jU282Z$!OC^U7&c9O-vfk3oS_0O6~9
za%Cj;HFCXi2oxBU{Y0C!1PMPHhoIu=uE_PfPw(|foQWs^wu^(8cyaov?$1&krbnHI
zk&G*rXk3F^llaC!82qgp+$;Rg#3*#yGZ7m`Os6$MSleG_lN)NCV28%3&EC0C@%Z|J
ztoHjHt}Rgf;Y&{?Ht}uDslW{ECgp&8i^vRi^Y9Q+qqGJ)gVEGkBIv<nlZYtxi$SUN
z?MIzcUg;fj6W#vOf7vDvS$gO7t`s_sc0WXX1#-Q8B4_=2z{vuU-~e>(vHs3%#R|5@
zyE>97L;g%RaZHayswctx*tA4~Z9=JnV{@CEpI;w#Ae_YEZRq_B9^wt8i!1uYV%UjS
z%cd1w`p3q!$)6<W(~z#Hy(fabtmH96y7q-p7_!L3osfcRr0!QzlX36Cn4=YB_}f>$
z>b#E6vCEEeokL+7pXlujE;HMB8Vx`CzfWE-&WM4V*Kt@uf1)>5?Z;);X9c2mKhEx2
z<>>Ni{^qMtUq8)$4o#)Hm;QdL8F4_+J>89bkcu6M3}D36RujlLZx!9I>{s)&p7)sP
zSlyoG?1r%5z;N|6fUx7bda0%5IY!IfG%1_~=F(N~W~|`0UEDPDn8)#*&7I}ck_dSE
zxS;L5ar=E*!g8JMoqNC_K}t1?<((w$+~!u8haC32lz{#&O`T}mP_%tqobkThIMj&V
z60yeka7EASB;E4$A2$E-!+>6kgBkg#?p3m5IGUCs{Bsxuu98TTCi`X1-2#$;K0V}a
z(cElPnMY(m7T%bA(42(FWDiF6sKi=Nt70i+Yx!Ly7;@jLgkT^Jl1M$R7-Dq*G2EJ0
zl2{j5zyJm!bpQVdJEty9fF;Tnzp`x`UAEC>+g6ut+qTtZ+qP}nwx(yTdASew&VR_v
zh?8;R?5uZNaV+R@Xj^TaxNj!{wBz6&qzA#vEzYtDeWX1|M(N#{vA%O1Cl6I&;Y9H^
zxZVZz{Vg!W9cfW%;YquQw**qhgUz7+9*Y$}TEET_jM|2rqPuL;sRAqk>?L)=_4rIC
zZI_``fBb6xL?Hi<JkZiU5@5SEY(IHTJr0KWC!vsx1-8*AM}|NgvC=pNI5`<T>51KK
zX)-E1eUOB?B8D{N8EQZT;WAngiW%U;;M8AEq{IN%3<)br248T?Zu)aJT@Y*HWlo|2
zQxfA9L~4uF8naTM+dhBst;{G11<GBBfF*(x{*pI^fx_j*blWTDrj#yN3X@XTemy43
z$>6lDv^&&JZ)-J^-=ULM@Ft_({(P#7%1SA~+4^{h8nL}LpNxrUB~oDX4b<$c{G+>&
zX#6lV<uH<PBd9a35V+099re#EuE>aratf6TTy+du=)_Z2FaB(2(4XOsgK`{?adJKR
zN=2&<QfVS$Sk{gTT?knO9SHg{CBUr&p_tTraN;4gqKy2ReZm%}&tGi7BtrN$C0dwA
zzlpQquSsMToo+qpBmk7rAuHL*Dm;EZqR2nj`0gR|4ZsUKwdeU5c=_`iXuU`QgAF8X
zn`VB4=+Ix0ZlP*-#wFnqNqYor{I^8K3L?#R)~$!y*0s_V)HwFMfrOUOf$4rE%8s;_
zRlA+xvQ__tPT_B|YwUOQD34_?zxq(f5wB0Bl9`NF;B!Jf9_*J;bW8GG;Oh*H4=1mw
zjD^R4td*;m9&I@F1%!cI4dv_`-}hK&E`UY<SQVS4H{L2}DMTff;Ce|N)uqI^8U2iU
zViddxM;vVyXoKKHJrFNK^AG|Nb>Pvat4(bMGNCytb|VTqoeWEUn$c<kC7lh5H_+u|
zq8y{&kbJc~8JP&QTU!o@O1GH3n`2fBbG?=U5gdBX)Q6D5)N2E+(Ib6Df*XQ`@CzAY
z6E%E{;h0UVHRU)Rc}DnnYw1I=JrsuHhu}>F9{q`gN<dCBv<Rr^(_HXA(hSC=&<Fhr
zJtWLPIJ*IxO7_7C2z?7~2<}|?>0X1m3udr<OINRy3^Z0$a>_bBbZ)y|9_3#wXynGG
zHS=0E3iq9DL>ba=WDZ>!j7iv~zA{iV_PST|p;J4^LceI<(kzU=e?JP-G8_Y|cG~_{
zcjTOgY62aB7mNnS(P!5;s|p1kLeHPBC_;T;Ft}>zMhz7YB4kKwmFvVmLw_EvdV@5L
zvZL9}j%f}>eN6XBF8$XKb*9N)TA8inw~wbc%*_$O)eN|GawIOf_|>45kV#`dgaW4Q
zL{7d|ny3wLQcJ=2lb-8F^|YwT+uwVt)#G`5!VL*y=p&>%w5U^FQn|9EFSPm<3X22L
z+Wx?)#-G5m9r?=`rjI<F+fI<!VmZ@GZf^lfsjCyF*}=y@3JXsXyuOu?zdBsyO=6Z*
z&&XsK`|-c%J`DIPNW$8igPX<Bl8d-9^=IE&Q0v`CYQbZ85H8d;N9w?Hc<@uRgs#+^
z`!3Y(wYM*={0ngNooT!5*FfqxWYrv`=3cD)e}`J(m7mtI!TsjCOR_3<=^-P`*)td(
z4vf3vOS83bmO4(?OPKjJv#gwQ6s49-`-&Cx0<4<SvUp}Y`CLZ+GgM7)yH;O}2P&IG
z8BdZMf^VZ|c#$?Vt~PJ(U~S*rdcAhC^&Gr)qp>ABgY4vn-@nid2d}RfI7h8%Ckm}D
zR^p$4+8Ir)svxAuEs4we5QqhtBFdIMDKp+grx0e$OowA}szW2~Jp3kZ@1z9pHEm_O
zz;S0=R>F(J>7R*f8F0*y$yhv4<TDub_hXwj|K1sF?E5pZi(27!8h^Pl4KZ<ATN`94
z;Z<wRM9UsFo3-C9=H|{4-&oLY*1Tuckbfyc%zl_I+zqr2fbx7eCtDBYLqY66mZ!${
zy;JV?9oh4lH*;48NJBW{B?=#mv9f{plb%C%izOV7bO^3bSGlL)**f_xs8DDHLh{#v
z({JEo6INSS1;TlW$3;go@8T7j^ON^TfP5#@aHK8UMz<RCIxtLnRf9fGJ9oz^4p1zy
z*lR?v1lE*6L&w8ORij--HP(L|b7E$~?&AIF*GeSx6G`fmP$tQ;P`-3Dgd)N?*`l7P
z_nyKg<@7}JLL-GD8X&cr<&}Gn0Iqd|I9Bl2g2;nR4g(o^OlpH@Gh?8DAEqmbCK+AV
za@0xr{m_3$gw6i2zpM2Da*b^z*Vg~MxRm?dyjx<lf$W-HaNpsw>g2OP&2f3A;z52M
zOiF0XBB!;d`;rcIL&^NNn_c2|ueqbE!e(X$!<9|w&P$V67wCtQ8SENf#yHG!kjh9?
z`H-6sjm^m1rtO|g5?L`|-VDuz%%KVl=aIFX(hVgj9SECST!29C)&@RjyNhNc!wlA*
zgTp}A9ov`Z(w$;d1`3ZYEx}wiYB>Y@!K$txrp)-hBtlzqr1Lk6jpgYko%!Bdu~l)^
zG5O&^d0=6w-FdB9C_Z-g3g<v=OL*oof%2SWdfX)NBCo8M;xnmEx{Bm2T4+oaHAz0W
z4q9U+zv#sJk=#;NwMCK`^w~olgv_OFg_A~^5365!hXlkLD^45o)6{p*Cq(Cn*L3P@
z&OY$SZ@_UzObPK8AQh@@)+zti7acd<ir(u<F_3*_yw3~A{)pl_d3z$;Y7<zHvzT;I
zDP3evYtl@^cAw+?tC#K17{ZNZpyG-EavtCU^x8!0R9t0yCe%;^DQZX$J7Rrl7&~!)
z(>mGgP6O^F(Cqlltmf#F`$vAIJLI%pEc-{3KS{AP;!)CquXd`pF^e5{0&8(N&p}zs
z2tfVhhJZS~Hm?(M7vaM2qjK^2r=n_?M2OemWIlspCX@$P@v=7)kKA8k=a=>81p{->
znmQ3l%|Xj2C`?B%3Xso=HQ23o)!|HJo3GoK>7P8ho}F)VqGN6szf8HXiY}eEugoQ1
zg!9X=rP%X|@(Ju%C0m2jKQR-iZT@uMlf9@r<eHT}dTM+^)a)c#c7Yv8oqv-5<=qsB
zAG!4EDmF{IX_RW#-BU@uz!z^Q@+G71h%mB>U$1)FFL;D9cOZf%r3UOW(IF8|^|m+O
z82xg#w-zi#xpSKfa4~^2_GiA+`TW3ySGRVWIJaOc-J4YCLl}9YVY1{P%^9VSisaK`
z5QwiOsl(e5yBoSa-|lw85z3ZsH%ytiwZveAa4@m&JqnC3S^ok0PgP+Vb!j394+KO{
z4Fp8;U()q$?M!SO9j)kG{%^{@jp_fQ9$aZ!+iq|mf8%~Z>vjla1Q&8iY+PVL!f&&z
zO|i;&*tc&9*D#oeH@C%$W{VHq;a&IaFbhkj;IixNzSoKRr~P8ag*VH=f`4N1pst2a
zj{S`xv^60bPZgi$Rc@w2mCe?cb}l`X=FGgJy8F|wo?101a^^)&U7^UxTAWs<4GzML
z7EYa=b1uR~Cizq&sbSVfQodI7r`&O>p^7;e&8E7Sd}1=8)s#z3mDJHuijEhpN4txA
zX#K4k6oOpU0$1T?dV0Dptngy*D6`=qQt8i^oyXgSzChs20h64?+=8c?r2W&vj;x%`
z;9KUxMCL=o!-8f0Lm8HcT(s;+<CM&wM==&t6`}fhyXq7pCynih{4Zgb%hUYnLB$SE
z+sm=;cGtxxk+cF;BtY+exc_z4)Zo{|w_Z-z_&<E1irk??{-Abp1Xj?K1rkL*2jx)W
z4|?F`H6+DJFF+|z0v$T@k8{HAsT<p57PVuTTL}}bQ2&H=LPwjEA$=8td-HmC)O4^5
z10alq4{srTl-e=ZQsJPB@_ms~%8T6DJIG{Adz7UZ*xva&WbKxIEJ!?SO!AW4p@qW5
zfUV;n25r^ZCH2x4l8dU+6a}2I@^G0Zm+eB|Q2l)Om5?tgb|1rdIj49hcPFiieAz<n
zPPJu@0RQJUH)F~7AoY$0`Lk=xslXuK>IyM_`p}f65)bhAsuCB2#oC!LMl_Cy&-{s?
z`91u`<FJ(Z-mLN!?pyF9JZO8MFA4<;hXX4{*wZYOM`7vYx8uN=cf-+2<lJ3JJ1I>g
z&BqLZqO~nV?!GeJ<X9Z(+bCP!wQ^g(d)$PUeFZcIQcUerz~890CwCcvk-VxZJ4zl>
zQZ8Pd^yq<zochUb0X0+0a%C>gcvbN787{dc@5^gE$_vK6Y*tFuHb85%fohMiCm4ch
z=rR_SSWIhXrp`MJ)M{-?IWW`u+MavLGi?JQA7}{K3<B&y7*804JGTM*sdh!dvVHv6
z;0F>XM(l{fBFMgnT6ocPt2_)+)UNR=;BvHFaiVg0%WNk~)S5{`C576x|0S|hQ(9R9
z`=uwt<U9t`sajNw8bL%5CUTr>5XJ4>&>xEfU8(MyiR=clz=s!+Vg;jdST?e2r$0oQ
zrH1kekBzBYr9#srA0|_b0?DI%Hu^xXN_Z3?p$!sTE6JOhVT#n;8-gerw0(fSjSosK
z$=9mcO)rE3*hi=UPlPm<{XG6!=AN6SlL-rRYR8pFoKl3(W%3m2mF3`EY2X|>n%^w<
zian+$)j+(oh^i$aR3_f|=D+_<PCvHqrC)Ewuu+oRX!x#NL2GU9<@dBPK!i?{u#Nza
z8L(E1GFB@kFYBmz4)U!a7b>SElOW5Ao;qCS->N)KUVpm`@)O823w;C~v7h|<6lbb+
zTR$9X8Z&J@0TQsH`_Mb8-ns77Wik$%)oqjGUvCM>C;4N?kxX;W@9~r%;|s4n3X4|{
z#n)Pps5QU_j3q8GcY`dAdQ8Rf(Z&9rVHkhSvX=%a{v*mNm`6lo%l3T@w<*#Wdb5b#
zY?DkaLPQtb#-7@rMCHYkJJ$z0gj$<$eufH}0cw%rAZigsrwo#RHYmXoWR@*qTTFC^
z;$lOsE@e7NhnXD@R|74SjW0LRNR};mBFS5Z=!L_xy9hD7cEIDOxm{`u;9E4QC>Uii
z$uo|{|M8_Tl+_1(c*e)p24R1%VDiOJ7HYyH`1n8)Rq#Rx(lDxAkE6Xo*xwc{_W@Ur
zzZADE%z`2;8~x21)Bed+_>Kf+`tVz1hh@hhK7bZMB_9|j4hEwUJ`OD0=UAPzz0y}Z
z=Cit9=I*oSwEYO4>qRxzkWIu_`+L7mR;;9s%p`&Meh4-;S8c$vT5JUg5p+9eUZlI1
zuZZp6d{K-wElo_-<So!5YNj>PoxI*H;{dv0L#Bpu)sQss9l0Vy(HZS1ThAL5gXkIu
zNd!7&mfY-^9OKwSP>aKl8@9|>heBTE**uulK_dCkjci*vzT4!H5?UFKqTTw5ynRg~
zO+%^K?sWuM12+(zj<*2k2;GyW^vDq1`vgbScG6Y0(FW56ayCvXF2KRLb@-6?CTNVP
zXXl9QdLk}$$j7T|u0F*4cbd5aBNH=M(v`vl>%uaW%?Y;yL##ap7kTX;&hx(C7CK(O
zDfXQ0D{fo|(F06V+@8O$-fU;P#C{gd?0~%xKE5zK^_AMrEZeE!Ui(S;HnX~(7hSm9
zvi9+h%OoN;Y3=B!TE^xe>2r=u>ClLE)^tPGI&osQ;e7`9&5^5z&kdrt$13+}K1cSR
zj^2)DK>aALnK@)nXEz|@yztbeEKX1*ds?+|-;A)BKMqWPoN|ndvuEKeNNwE*X^)yc
z1P{BcBDJgn5Ou7)HcFUg;E~etEI1g;)-C09PnbsxU-OykXE__VE}zFgW;@V!8JG%e
z=H+-1gVI#(kda+&aZE@cG1G$A&FJR<l7_d$PGEnb$>a0FH=Ox>{Ib$~m(DF0dKLWl
zJhe(S6S7W}@q3q!3T4flI(%b;f8nahr+nY%gk(V@27T}ss|LZhDN=c{mLxF;g32Fy
zd(^7*BJlvne^@%$<l8{K&n1ad5*8y9EE&@sW9$!w=<cGkENZf8d)HmMz+V&>$_^S#
z6q-)a<O~HkmMdm`WiwOW#a1A!^uaF|MeB5VAX$UaIOQmYLh@!C$eoPE_2zD0R(z2B
z?Yn7mTuMzWTo2bAL(4LY5mtPYUaFnhCd{x=ICvaL-<FCQinJEiZ5;4HRpGqNm(*4%
zZ{+hg*cRD)Pt%|yHT2fFcP8Eqx*`PM<IMv>Z_cX7f)T;(qcjF<49k>fVqPuEl7Pbk
z3;b0}qVf$QYHGP>JNiz$##HI|AbwtNdY+;_ZlqqEZ)<xIB=7pW1k&ynK}4vZWEN_d
zvv|b>qMKC0nJGvB#lqRaP#h!f-(^nR+qH6I<Ra7XwE)4Y(!od&GC<TOn+A^FoNu}S
z%>6<?S=e<L9vMEhaP+Ulpuos3byjH}+xQ2>N;>(X^okidKfqk2zSQl4V+n}p+m7Po
zVP&c<e)H!79=fETh~cU1AuIV2tfUtXf{;fsnVK;Q6K9H%lW|XuF;MZdXqLD!dj{)}
zK&1yX#=3A)$<<RIX<3LZ_Z3chSg+Z%E6Phof1ZNoqF7d;w>5dMTQY~!YrHj46G9Y9
zA*53IRZjj^7fh&lG{2`JcJ!wWwaJ)jckT~XS2uPj9!1S`>)Oz^<*dj}^VEK~rlhzH
z=PiTz<o_V%J=IEmqsRj0n^de!n{WUwJS3g1n5~h130Y>N!n-XFYWd@wW2gdKdhZs)
zLfl{MYa<y{d5!5(zJQOhH|~snT7H(4Bn=Hm8;V83kXxP`gWnIQc>PwuQ2Z<PHXKP3
zQF>lI^*e0@Lfh0$Qk`_A*v`SOsNN#kDQoOqi`1*p$Hni0qLNoT!_RG9Z$rXaPutGm
zI;rLwwZa3y!5O6xUa*Fg__|EEC}bCMuen78oVW10YpLgW64Cc?GI7Kt3x~FIHuE5I
z9qNG@|3zBW@ASTw|AN=1NnHE39DX?eOwA(3hEwOL$3$Nf&9|HXLPPE4D#y>m+RL?F
zUB%m%pIGvEdK~^}s$fU9r<DEgnJ(IFV8z=EQWAW+1S<W>P4&KKr$8>FNp!vZCzV3x
zFtouL-c1nP7Qq2bTI0#qJO&fwIHHCvVdY*7yN5=D`Y8B;lUoTkv_6bd{lY*5CZ&)h
zU{p@P)N|R6^eY~-g_tQ1iI932FIp=@@9JKp8M9+NqV2rSILS?Lmr~WgPQldQf_Mvo
zDv~}Uf^(*b;wOdY0-$X&N3E=XgOfZ{b3t<Sh!s_zpzti&05DEq1FN|Km<l%B?KOnp
zA65KW{HM+PQ)f+S6`sZrtv+^>=??YsnM**Lg*>3V;Hh6{$Bz{4WO6?IfV(_jj#C2B
zCnInb6BmgU<X1@4q*nd~BuBo(0j%Ti0cG6JGZt`$5?U(G6m2A65yNv2Z)xASjLNF0
zLjv3<qW(NzfuEV_QDGsXg^sJSCs7*y!ouzXPg^m%sMQS_f|hwLYzX3j;QhFLn$p<w
zXM|TI324e5J$o)Ju<Znekc7jcM78%9EXgaL*y+O2m&bcgk2l_~&m3JJxnDi@9#FHz
z2}sFtm@pK$2+K8V>%rS}rMP07qRTEha#QvwgG}i&)RM7I?Ruzde17M|PEXKh$LZq`
zV!S`CjA_^pQ`_KKM=bR|pn1oP&M{wVln{G#oj$>Z+U;-G`%0dM9jHPa-EU_SWzgnT
zUrT7jcAu|i=+b7ev|w`-_J6glyPt&pZa05cje6Xg^F)F$FGVHVsI#z2&SfbclNigK
zj!PvM->YeJiFiVOC3e2J`$cio!6F>#2Av=pJbZvH&kMiS@DsSHt|ULR^<Y?VcyGJ)
z$R0m#A%j7;3X_juZ}l^ewtlDWy1Nk)DGXG^sKcy#@UHcP=Sgd@k~KQIzuqVRXp&yi
z!Fuox?XRf_>ue~wO+S*Ob+Z%0Z_hxAUx=+JmuP3e-89%0(rF!3u0G6-yR70rYetjA
zHQ_^B2C&im>OgypWp|y0(K_rAtI@mNNrean8ON?prvoZQ?fnC=-ssOzp>iL%Mdk*Y
z0XIxO9-i>Y&5*G8RPX6AfJv9I838NLNa$u95tf>t8`K{g^%v^#O_Yd^<i>`U+cj3A
zDTNg5W4qaZN)7w&fYo-S({a4gD})n$S^lNews!EV=UyJ|iD&1H-O^UzbFh!H6+Zl%
z6Yu$rbz7O_cu}pyh|S@rbw_jGiN%ltnE~+zP}S5u{O$Xn>U3=RN@oNB1f+`w1cdWn
z)Ty1Nkt6&6o_bZOS=+9QBYscUq{(j$$%9A~=`I#UCrOPZ(}07OEiP=0F+GELvi|eo
z3l~KE_%P=*bpaCMI^IE7JD6uWFDIE@N;Cq=wL|BGX-{ClDQtJTIk|ZG-oR}zKtkdn
z$rJga_HPOHs9PnMh@%qOwBPumB#8X$#6`R)I@v&wRQ1}4#e*O$cEd4~fDazf)f?4U
z0-k>3?8Y(#7e4?AmJ-T<?Ue>g>yvu}?{A~UgJAjL(39wK`P1l=EfIsRFklZlgFu#y
z3mQNS6+#5`LnKW0zIR<*>(5WEBrrrHO(lj$9I>b{iF{$=ih95l7aVpjXjG|QAsUGz
z_uvgbz|%N8aa;v!zEf_OE$NQ+J}Jrdc8It$S^c7~km}B|sUBiVQ(H;Wju@BR3NI+?
zD#c-1&x{E>D0k>al0EB9*vj0eU+=R2Iexvm&OXh|%;K#lOKDV4LWsW|gcXUSH{fW$
zf`e%8fMk@o?E<*%Wo+Ta?(yPgH@;f91<H+l-qvjpG(q=m@0xOaPjV0ZYB>_Nm8ZR*
z(id+D-nV|K*v5?Z1btZUzK*e_Sij$G+0N6_I*HNs#Wgh0Ui|aP<4>#49aT!4!2k1`
zoips_DfqUqeUAwjAFny@TaY|HmMm+@I)VP*WJ+GIr7;24)S$Dng}M%JJI?S|m?C)N
z6(vUi!WN^-Zt2I`Vs&aCK{s<_ZIM(RgGxv;v89!1TDjR3p}^MY^<HtAIwM+8F)e{W
zP6z{sGGcuU<mRj}^)2pEQoH2lNx7GLC1<~?05g?hBt>oD7g#@5E3v8rxsF(PQBat8
zvo5D83fNR&AO|y**RQ~QT>|g+oGjpG?elULbR2Uw4asxv^WZpU3AmXApmc1GKG0hb
z(}n1-EDcgT#5FfEGvKEoyP!elGo$wVbE6C5v<ZR5sdkY}DA5P-v4j>a#9#^Hl5f!a
z_5Sd#WE2wXaBi!b$uLMBPNTuTR3Bd*EhEN6U+qyTV-Xrh_M8qnJ0y?{8Lw8$#n#$2
zCKm7%E+TE?imV1xCsmEFCiWom;W0}(bH#oc;QB$bn_0lp9-3)W<Wgy*lTr54DxEUv
zU$(vq7zNyEIBq%y__((q$*7xpp`(q{$zzg<9792N3JgyBBw8S%zcH#~@Z*F~t4wj@
z`<n{$nkqi#4C8+UZ8TL&lR+N)|FG=tdQZE+O%XeharAG3tLL|!a=9I9zIu(EyG2!m
z$&e~vUoh|8nl3Acu*m{w^Kug$^N6{K-Os<W(${^Fisk**Up_NJsRuJ2=$oTaHdL$?
z<ASWN#((?R7sS4>4P2_TlA7t`#j(=kMcUlqRsvk7rcNru;^sAP9d%u!e}fm)mN%$9
znPJ16Y`~kbgnzr*MmYQsT|WYFat^B$TWej_aVRt%S7G9r?rRK>=v?awK&Jet{jRrp
zpO~wwK`^twkrBy1;Yy*KF2jelHNguu$%TsJr=o0Br|uTUbXUgp_VcoI=Zo<oMUKQo
zP13DNc5qXdRI8X|G9d;3P4?{A;3+7cl81(Z8YqU>l$;d8Wi%)IaCS8aa11$nFu;6S
zv9gl5))?+&i?iV{aJ~ex(Lozn_ZHawsA9f?>bUSF8g%oGzOlCxGM<-rSF&l-0n@0K
z1SEIDBMZ#2J9+Ws(G7y{Cf16B2>G}Jh-Jtd84LYiwaIo{PHA^b`HYy+giJ%c4mlWJ
zRD*3xOBL5p;pF;}zjLRR%XF4o(<{cVmYyg)-Hg14W&!{#59E|1pD9V+yw{1wm#G24
zMT5nAH9Z??YYPG%r;l@F-Yl4F6J`aQ8R3E35Sb;?#3%l@%~<KXoorW%pjP-^z<&cN
zi(~06t_-yj0!tx>eN=3|Xz{Gxz0usZc4c4HA?1b%c{ZSU4x#Bj>eJYoUSjM+_ahCL
zi@m>-Cf6yUqSCv3NqMNL&9`w>L@>HW)tNjiddoc^#@M+l_>4tDEO*~8RyrJ<<yb0*
zZgBb0D*b|1R%H>|#0Jbgold&#L+xF+ZUjmh(%s$9n8r1y$wA3_WeMQx<J&i242M-{
zlSfPAy*xHEqrMcAYel*wZJeqsH(b}S6ta2jMHXK)Hg4SIDW^k&TVr$4yk)v-PES#U
z>G*2tl7;3uFi?LO!^!kf?tP0}TDLs-w>gDiZKI{nu<j;%r%2~Qc%GutD<}f?_Eqa7
zdEF;iZcph{XmW5zr<A-*H%(hVshS+O=bJ_*w`4Wbt-k3TqlizAQmc3)gKHy52m3L^
z*WYk7`O+yPq~!rPG|dMeNzp=j#r8nx-v{IE&%ge&Ha5(TLR|jCP4}?=kJ{*9Yxe)y
zhHlc(QX=L=^*K>9-ohA(U`JIOS%(N(&Ij}%mo%G}G?)H`nzh`K?l0v&^4%fz&hIz_
zL%wpii_5y17#lnCI&o`V0rK3fdH%{{Z+(OPO9UwdJ-b-kbLWqPN@%6T0-mU*FNVY!
zWye7Q5kK;~O^_l=w~kv+-p<Q@Zrv6iFV{a59Ap3zyikE)bMIE~P<~c-UNmeB*xVDp
z^#lmy8cFb#A_JdP+j~V2*uar4kgDJB*u2vX^78(dEAl|L90ZUTLTYb|Uhsxg00)9j
zE7+tq0`TL0UKj{FknE{gjwJ*<$PB#><b4o1k^Lo55Xv8Bqs(-%nyiSgemZcCo|QTP
z3C&kbkksVrU;6yjY}zs$CLRFWQ7d>c(wmpt>*uEzVm&M3K3<TU4`v{I;t?)w=?tj*
zs`=~+q|6*_p8i?jg>B&U>)uB;xDPAPhwB#ud_R!jw*kG&AWH66+3SpbA$b43(PNmd
zLBw5&(MINp^lMFY3)<JwAKm6KvW>rMOm?r5!$E%?&AROtr0%j&09KnCtC*MI&ADC|
z0MyHC`w+Q~&xYs|c<IX3lU)Aqx1@ij8+?y}KFCYDI1C+fo4cAcHJyug_S)gEUsrRf
zceftwc!pqbk3vZBgH~)%F(f!BEYEArV-!<@xLO0MVA1A4UU){A7Fg_sVxgaPyvAG<
z$^#yKAQm6kKm|w=rj-)0xOiGR_X453X&wH<P{NoE6Ga9;`+qJ`I=(gI&7MDHW<m6`
zp<b`Hw$~k<;mJISbDLY>@e1}Nj8X1+mTJvfZd%LCYV5Vz-r8c?rgI!Dr)c_#q{{Dv
zL|30!ZJ?S#qj!xOYsZ8}bPqPo@mx(S(a@P(crd`RLvx~nsps7UN7Mcc<q!%DSO0zu
zuNfgADjLA&UB|v*?89!!`a^1r?&$j0z9NlxPtn4%SL))_Fwpr=PDEjHKNLyz#AvK9
z{RErzJS6}HuCVqtxlp>8QVd0dxCMzzgfR;eAsAeNjv*1<0p%~5av;v0KQh4tXs}=<
z1S&uqXf!l2s)hyeOu)iF8I?GEB2;ua1tF4!jsV?VgD;EJFjz3leF;#Gf_b94)XL;h
zaaq>9=PqbKbYJMDO)4^Emj$c>DCd>8^-Wkj1ZbcurIT7nnFuX0ilZd<_wV!)D#rfF
zI>8>|P{mUz_n=CA%x6J-6S5&f7O`o)>)<{Za<`p5^S#hKXoSV*Z>)J&4V2GpmsMpq
z8{!@a;7`2&Qp-21O*~4(Q!mfi^QZ>4t&JF{!{R6_G@$>mb3C@|<;CCD2%IbB$A=v$
zG&r#&lgUcwP^+E}If^1vUqd;aE+6G?DU`I)yM4zh(Hl|&AH;_sFXo&q;n!f9N5wpF
zP~p;+i$#XdA;#jVST!KBklbJYQj|a|QJPMvI5ps$Dlc5eYocj`+IegI40;>18c*fS
zv_<S~Dysh5!liOKYS1Zx1ANTlhoyFI-n{}eu`lS|oEEbSCU~s4Yqe@<X}5r*zND?~
z4B1}E4J@T;9LO$|Vi%&)1ClZraoFn6*Y9s}0D?{$b=j(#>#x4W(5!6)n!*z6K@|QO
zPF3HInPL(@Smjx!#o-Kdvem!QK17B#V0MM1j;N6^>X1JqppgoOUX%(pc!U9JGKH*;
zXq@1Tz+Kou%|yS9sj)2O5B~O7*P-$dlWRrGpUj(r8&CC!8()fly7j!fH-T_-SLvSR
zB=^WV$2cDgWz!wrwHt{d#_$?91tA|SiH~7O7fxF(7aE>?A33B^40vK(Ipp{}$*6%I
zo|ak_DyBjeFwxFgn`dM~m~X;qwY2O{7EBY&2eqjL@K_H*Tyb*_oxpIrpddmYV_c!`
z6g{h)reh*YDz_ZgF~{g*-Lf7hkaFzHwWRN3owFI2J6K4x6zNM?SKFBvd3B7?wuMfC
z0U1M&Ebue>+PwTe9-xT;kC}K^sZ|#cx33ICY;Cj$j|>i$hT2i%YpXooHRkZPb7T$k
z;K!%lksdGpC6oMXOYwDh2}bz1UB6a&LA*bHk(H6{BCOA$i$w4tBUG?q8<SR9FhP9V
zC6k8!TWuE4cYTt^++@?Hqr~!b;g8c=r3#ytSr1kWzGSPr`r-?dPkn8yl#3-`%5-hX
zIdOT7JTdVhnzrhoDNHrEzM&gs`dQ1~cY~LYo0?JIcf5Nu<Dh)!`%iLLn%gtUA6aU2
zgMQ&<Va@H{$JkqLHsX(wsRwVff}{@zLI-j{Z{**-C|GkA5}5F{DBM<q;d03yZ_B5T
zE*J1JqmR)CZO_bF8cirI+1jzE7nxdjoE?6_Dw@@O^-kY_E7e+AraCAt?k&6fRyp4n
zPc^jHAD$Hkr(h6@gG}Q4J|_x-$rr=nl?zRk%v0HT>)#ypl{Vl+;b>XFd)_CF0SMgZ
z3;A*_z8=QotChx98FM;1YFnY{XS`FES(|uhTqEXnRpUd=e6JjtJ>JmcROSBng}>_G
z3M-u&$k!9O+_E+BJoQknB=9;7c#%p&p9izl;(aC&QX&>#H55EFNA9DI%13*T8CBx3
zN0iSj@Fv(}%2-A+#gt_&aOHwi33_g^4c%Qd#W>_*CpE|nFAt!iU$oEj&z?siqhGZ0
z1+{L<1kfsPD6>?$my!Ls_TO_XN#|ai<+~5^6Fn@xsmCZ=Hu5k%!TNT!dI)~JEIW1n
z4*Y=rX9K}w+S9lM1_TrV_rDs5f3W-iEv~!Nb{zNF5PeQ+R$CJz$B=}XviX8^Z4;6{
z(+cDKjWc9345E<Kd5zpjIfJ%udtB8L`i{jjJCzaY$gX@oEMBzISr9DkATfxwB>5s)
zvl=z|@v|Fad;>bt1o@55>{f%dsJ;#3LmIS4gvx=Y6Tkq6dHTJmi8EHngop;t?t_X$
z<Z&e^<btXC$Q|H(bRN^Q6%ataVYtV8$cp(yYEgDhlW5ZJ{eE2{v<tmTVS_wUZfU<^
z(X~ean|&N{l+uDx&SAqu8D>%e{ZJa%wbxUkCG3}|mXe3abL83<V<T<HAYWub8J~t#
z%+Bjp^yrZSyI4t*AVg*|7mH3KP=>s6vz;0hU%d;IV-&DH<gHHVgFQ*;T?`Y-h@NE3
zq3gIM!^*#y*$kBQE%-veueM}**dq-6?RT}{>~_~nnK64QIJj(9HGYuI=(yXioosO|
z2QH=qb-K?VxdIzHVzRS$HsP)|ZZGGnbhKURyJ0OWh);){2_6=!moB{^(+?flkg>?b
zdHD>)rB1bwTv$4BSb!w(aPe4rJJj}~virLO#7-W;V%^Fa69o}@zS2D^hI@e0=&<qq
zo&s{b&4Cpr3u+jKn2;(M_B=HD9}H8Bb*Ttq=4!M}pd=?xC66B5DN{{KQk!Ok_Z+5l
z1rE6;o`&s)70HFCI<FQrQ)ybF&zY$<IAYpVb=yE7usC7gc3=k^ImpK6F{`(fIp_@6
z9IWRLzVI88)=dmM_DXk`{nkPNz*dfoShTCF>lj|z8S(MV)L9-cTi4~yLNd3?+`N-@
zGhP`X4(P12BuRE|VTmUmQ|AYt$K|d+IJhxNNw9*AQ%rCA<5dpUgkJm>$!VE%<H6p{
zBMi0)7G9jq0&K?QLzOzGK81RSqbaHu1m5!DBsmUOTJ3`k3MwvJ1+<3k)LwcVB}rZ8
zJ-VS?a-uU!+20nFlRl_{zs4gK!Z5O#`L^n~Fs)Rr3*JeJ63)x`j|~Tl1`RJOlv>4N
zN#+|BI#F!=0&LTaIERPQpsWy6WY>2>i%d(0iwcqIduSkrYR_!CNG63@BdQ+k(e!CG
zUY$c-=j2qv5-7LBgy~d=>=dD!cKPsdD`LsKaj>0r(Wb`kqOGhVRgjj;eGv*(tRGTE
zv`?9HV@Z`t=UnQZE}J7vHe8f$t8i3N`MmtPh#O4Kx~Ye9YPUeBjgWF3*w)Af%Gp#i
zM>`DHzExuM4BEtos584HEzQ$tr&@S)^mGno>F#r<>NI=OVa_{4tGaKcYz9M`FOQzc
zCBL*$LOC;GHcD^w4d7#GBb1}9%<3^n4Qz!yQP^O!?|0raTXjO*>SRty+HI&%_Oe+d
znirRIsf-RDN!h?I?9Pu-(C0ccen0h?*ux<5@BQxmU3qj-<r~Ql9=bKB%yf)_L!%#V
zNEYFA^*#%D(6P+iet)(9fPEB9Btydp9iCjIiDW5C#=g#uQu+Z+PLU_jlG6$$C9iQe
zig9(bMY?@CWLr>U?w$j%ISnQSoG^^tF}K#7lRI~CUekxri8oF1;y5ZLMu@oF)(10#
zou(EkP&2;KcjLtDR(y>5Rs4}!(`ua;uW?^^g~eCHKgT6_oRQQ>9@?_P&#WQ;JEZ%G
zxdmzM{ikuvL^9UJTIB=cKVM3QmJp<NNFX5Df7w&G|K%G}SdiY%ir&KJf4O6(FfARi
z#qJ;OXx3>|z|?37+mQ7{j57%j<>Se~$DZ4yWm#!KE1M=AxEqABiawv6W+uD!pIRgN
zH&f_bN(dHiuG6b9TIj7j^V41zHn0*KkWd!DV*@<xZfLY-;V>#jbEi=+n>6WMYnnbl
zwI?~U=vz7X`9m5gKgW5&v(=~i#o6*uz!(TYpg`%}ou)>j$I%_Qo_Xm>3502fc|ekl
zkTDUJE#~UNWUGL0Iin1wRSAW_>kdbMPkBM1@bC88@^s7Z!rb=15#OfYa?pCSE_Bji
zObi%-^v4^9O(J^N3CX_7hGneS_iS);-jG=`MUfb@Jr_rODpY<Vj*;j?kC{r+9r`r1
zY188nQ4^ZXLKa#q%(7I`N2g~%pjEw=gwf3w^cEnhtbFnUs6~dVIbNYT68SVpS*VGj
z-VZHLBg>glwRRWx=pt2GjpOA%e=m(PqlthgOe<M`$;#_Vn{+6q*XVCZ0w8u*)k<{k
zD3%y=UqP~Kx47TjIvhPhG;;}VHdl6=L0%6}ml@WRJ$Hd^jFBSc`&){_%tcy{=O{%2
zKv$cDG#)3e&&Cvfbm~Kuv|X<EuHkV}Q^n!Ab7v%=TqjkLb-!=BbZ%TC;<lD!A>TL9
zJA=^7;upmOw{3&ssnPCyYhdE*X$T8^$M5)_0bhkP;M&Ryxs|k^xjQXBv;wwvef`ru
zS2;J=XnBz|a@W^HxZW{22KIS`;Z$<c(pHA50f*GOK;5)f=hFRzkg2D3G~YvKSoSt7
zBVPC}++~_Q&y9`vA?xLJyAP=P)(4C%lEAZ9aP+W)2l3PafDvqD@V29Y@7=F60|ekI
zwHjRwx!gy-wQO)b^p@XoTR4J4Q%FgdF||!sNN%Q+sr`*-QH9~9CVYHf^ZCCxA1I)=
zT>v+H$Drq>zMBird?#sMC{a-4j2#q7+XB!I`2}eD@olF5{5D4EeW;=$w1UwQQDT1Q
zdf4R?x8;WO{v2Xse@Anc<NiiOVmfly#lc*^q2$K8ieq*}g`63lMfA7*dW#`1pb!>F
zG`rpWXW2D=jXGC!4FShlOOc<zECi>qu~&+fDx;F4Q1>PI()=w${yUua@9QrEd3_{<
zD4hqABpA5n#6@@y;;032`Tm8KuJ4X8ul(K5{aSWRzXgo->h;Cp2<x;F#lA3M%G)1f
zU&<^OD6*<USdGwtxAQo5)h{Ic%;5@Q({ipPtWzWxOP6xtKCTpLh`DO|=)Wa~wb@VG
z9hfeTf1Pq#P!7Pq(b&Nh8PTLlzeB}V={Qi3`ztd3(Wvdi#{`o!U{zbZ1!<fshwJKX
zN&axN!cMoOUa_cCv}2rQ%~>it=lKSlhJd<zUK+7qGYL+q4KQE-s?_y(dmIqO%UT&r
zndZ7;x<@N{PC@y%1(-Ewx|I7)QS)G*G~Oa*vG|!PH8a!Y`jt4m6D>655@F>PpxFCN
zmXEXlOy1DN1twjNJFz{shb@fKpevAF;X6O=y$3j6c&9Rm^xA`K)aQ4;)f`EsDSPdd
z+44q)XkUzaqs)=5^E&Win!P0TDyGd_&w1#2c1DfVPQN=osGK!E=Z1KN1@~uEZ^E(y
zozAj3IO~;ECOcfmPF#Unm&c4D>qG`s_o>kv;BP!eqjr}7{sy(yb`G_@-o*Mo=qqU6
z3K|?4Vu>Kjy!V#Yx3jkHag=cs_t8O$X<O98?{F;UM?0<&WaE8}CmjlH&GdoM3zMwn
z{Q0s#u6%a28LSbOmLzth@(V}rPP<ROoAt4bCv!SmG0k&Gr))|r?+KO(GV04SV4)!}
zt!3(h_11NM1QK4{oyP^HSLKn;Z|rIx3%$<pP<4p-z9e=%H{n<zcXJNVSvVf0gAfi0
zZ)k#SXFE-|Rl<23RT`hIMRP2}S2`zhhAfoM^fyRH!Dj4<=Ogd$4pz;W`-ykJr<sd5
zpInW-Jw@MdWFB~ci0oV&Pl})k>V2-tp}x5|3tO2M%m&*ey%0Z<sH7a-6W~mkN-Sy9
zD74x|TUQ9UJaB*bn{Sh(q&X#JA+L=zBgR9W1o4Ma){<T3l~q=YBTr8uIo2t9#DNek
z#f_TeLL;Zh3>d`1q70c6|M@Y0)~zz-x?D^>BM=Wa6a-hb7yrB*>X4$+Xi*;K)z_~R
z55D=v_GV+vtz3}9nNzm=<2V#1P-&;udjXez7JT|2{i4osPHO*60{%Hpu;_7v|J>E_
zFxbd+TJ>ga=`UmcKW|Wod;L5ImF7K5?J|Fn235VpK^A$dnC@Nw_g~+*7kWlYFLa*7
z5~`Euu#1?qds77Y0$mSHPXP!!G6eEP3WB^7c4)awj@^CxlcVAhd;w<1+)ZV#Dv+u+
zt0}c+uPUl`jS(l*Bvs~xo(6}%Cq&td5VbNCUB5bdHuB_BvR`OUO@%5?qC~B1(VaZC
zT^*|u`AXq8ptV_2*ig%~oWzkYGg~EudzGxAl6Gi?F1M;xjZQHcL#H(t2#E|}h88nT
zzkuEOYWO$h?Ti6ikUOH7uiMa*Gh`?<tcA3b#Ql#{$Q4mvKcig?D@j+$%zd0T{ywx&
zEEBu#A%qeg**%n&WdxB}&(hB0N+&(br5rBkPV;Ii9@T?LKv0`j=Rh)<B3xtY_+5Xx
zXE9is5+2`R$faPD>VK6X>@2?>f6ABA*ha%bJOj?6zqU$1Ws%dHHr+F1Z{K0G_|3K_
zX$6;V$6QzXB_=T^bZOx6S~iG2^Ofci9@jh?mPk9rr9R&G!<ix$rbztxjzEx>+mWkT
zrr>rpJG&18uEks1<}_&Tu$CS^^`|vv%5Fqn3)BZJGns{3tXhSzEFwnsTsLK_fBM0<
z?rZZnq)A)YhW`airI5y(|2pG1YcG_GevV<#nAyh_mHQVhz2mLcsZy!gD;#bzQ`pw*
zm!3F>`nz<0>^ZO%c~222@~?>OUji<KtN?yO1aF6x1KKW@2s0hWoqRosL6;-B|Lli;
zPYL|)LIwgV69EFk`!D^_|1%B$Z|yksFN$+tJmDWPXUVFO&Z>8qw~KMX=>-h1cAOCk
zdVBpSBX?>{>EA3WK?2p$hV}C@QAsUPj8SlNOq>#S#i)|5@ituv;c2f*VpeqH;kl!0
zD>VOhR?<>cF)_U}W+*(iSZKvZ5bwG3g`pEt)B?j^P0%PYV?PRu1j1AZ{FHlI4i^-+
zJgTdRK8v<ihxQ~<8fQO<I%ii)4}1~LMwGjSx0d1AzZrK465-SzjfXhlLYcplvIrAC
zH9EiL5o29XMmFQpx;IFMC1GsAw9gkp4wMOWeHD-DB`7Xy#d3L(*oGesemxEGhlU%{
z`@<e%oqqRY5EjW6B}Di3dVl}zt?eoRR&cjb$Jd)Ej=qTFN~YBr=(9leBXcTc+D3Hj
zgHU_T#`A%Z^>D)~8&8Y#*~mk>+UYKh3{i&ms|zD#k`sq{H7T!ck~-(@`T4$NA1l@-
zl0qKMs~?0$%h&@!GCMYEY;l&NWguMl17~bczPTCe$ULdas=|-<$y-9T*n_z<7Xzu$
z>X-Z&Fg&dQ{&72F?lb>cBxf53Nz^=AYvB>J8Oz_{C%gGfZ*m}f5g&$}M6(rFRrBGr
zDi8fMe0qf%;Oy``ly+ko;h4jIe!g_<oo;WE6r*Y)1`dyix3`nFyIA{(AH0ShiG#nK
z1hVgiq5d|TJksxxdrpS59xEg|29$;+DLUY&J2%l!bLOjo$)s(WXI7h9aqkzZC)V<E
z!ygNC18z(dwg%o11yzuHBg8=j#32d<j<NLC3q-&sL_nOSSnpHl<#%4LSD9M*h!Ubd
zCanzUuI={xncLGIMg>h=aHPR?A!nveE15fjklfRSZJ*ePRWaMz6ck0>n;uVqwKTaT
z9>wu6Io=WN08adu!Sy;afK6{=z$hM&DIhC)7VZTf+;9d}9D*qS*g-f)dWVgGh+vhr
zR<MDGU!02)(o0N;@5|fl!`wMfP&;ywWFgC7TT?&g{%qMh06Y$?PzoE&rB%#T7(~nQ
ztfPw6WRYDs@8L2Ks?WkOXM@KPEFWuKDj&$mqfoShWfberd~G`3AGzwTKTag-nZd?K
z*b`ThG{Tk+gbRAVGL739y&V9){9o@{LSPa?n(#scACfQWXbBQYIVkMtxi`*+!J-0j
z!U}~IVG-&`R<_q!v%Qx_HE=nB{BdIg=8IKJ)uBob0C)JqNQeVQSBzr_B0<vA2yzAn
z*w^b&ZaK@v@34I%zRoU!?F&|r++JPgg}Fm{l#{5vD=_uwPVD^I2BPlt3C#po#G5(x
zFJ3_!zmdSKO&JjEfP)%P7DB^y^f_Ho;PBdz(M3%bwk!dluut>H-y{d`1{|8O6u51V
z4-^vlv46Y#=W=CjLRw_1Lw}PDzgV<BV6|N?M<728$eRQE@fexmXh9Eo6`KsEvT$v!
zOVODa<?l_=Yq!nND%y`>(?AbRZ(&p?#G%30v-Zr7a;LQwXR#prGlr=Gqq_WCa?Qln
zM;IS;Wju4Xtovqt#2TGR;<b1RV^mh_nj@?UIypo|?*m?-u_Ji2fe&c(@n1Iw5+rdk
zJ`W8!Q$jHjqTB`S0%3duX*<Yr-SWTbnE1;<;UX{y<PW1eWOpnA)kAT{(D=7dl|tUP
zHqf5095D&lon5ikNW}G2UKdiM2xbroE&n<X-(OIo8g8fB@Z5aHRM9#uY)rr<u0k!w
zHDn!2KZ4SoKvu+U55JqvlV~^_7bpi`=simhU6%(4{_1g|ukm@U%6vdkH@=WCJDajO
z8Et(HQB-dx2$BJ5Z_cEot#qXlg=lq&0ml_dRoXRnS#_V~v~d^hZA92M{h;3vBC`@(
z%j38^>e8V_qY$(c5cZlAVP!*q{{;gsSu_L*+nwASE{)aK*8+>%9#?roLwE2S&cOkB
z25VU0<^@M_rM&LYw|44Scs=|U<umgmyO7r4(~-m7aVbs{mB<ay0iin*Zbv=0#7}FZ
z$sZt_O8=}?U_Hz=#u(&~YyEsYz8bt7d)`iQ*Dt~M0Da#l(Bsp}I{fa&^?@6VL5}ci
z9FdYQWPJHR;gIQ+m(LG{G`*1j!>cC^J5HKtz?z7Y=XzOFY(628qb`UgZ|tTvZ?0$I
zBRA@-DF3jM)^qjRu>HNT79oaXcL^XCMRy9t>HmZzL5KftW$KpKgNO&@Vw3R*K4wmi
z;F2(hv4;J7Cm#q#NL2*nF`xoPJNsrMAp4|^kA?H<S7kMA9HJWXoD}hQh0~R+Q>RN^
zp)pMvb-F-;k9c+80;qH=z7r$E*g(X`!jWw>sg?V!a7Nxl&7V+7j%FvC3OWlasu3Xs
z2Q~>g`1@Bj?}7~TI$7GGz{=HNWhrsfd8gt(`m^_%1a$<9igSr80R`-FW}`~62zXXN
z-O$AWt%fw9nTJ(lwNyr^^P4fEo+iu^vZFNBA)78tmGoLwHW5z`540ooH>m$Wo!A%x
zt1o|MNx|qVjvRZ~@*6{dCxd4hHePF>c$qJOS|>!w1Ff@{ugaMYQ(Aj@jD%oFoI&0&
zuv_rJ#T~)Nz}tqfjD@X;M^nRmIsxs#%J`H7>R0*H0@o)y*4mX+UoeYn;9;?~UOW!z
z(UJ<qv-i0BW{Rm4qy!S#og~h$a$J18d%Puj^m2*w{0p9eNH$F>;u9Oe{^aQ90eY2r
z0>%Mb^;tT#bI>PlJeqNFAktn@O0^m!*8QDJ%1(V1`p@Q_MgI5D9Q9+KP7AnoVzoOf
z#PC-0#A-eHj=4T>ioK#p#1`I!YFJH)4+w*@v5Y|t9qEr@x%>_jv$nep(#_<jmZ!!U
z>ovwfDsdt+U7A?6L$Er&xk6f|O+f@}RG{6`9_J9Df@6#*{ld_tc_83+%^IrwL#BtX
zlD}Y$B~@$PImvv#p>7GFXmpEuC8<L<$Fm2=!2!Jp>;;G7XZi6hAjh{xZ%HYPu>?!h
zaln#!lC8c}%`&9YsE0r7RPYjroOT&h#Vls6hg1e__PnR0L}L)0Ykv&SC!BGDWrTK&
zONj2I2@rhJrSfP%hQ2n%*`dI(mE0(+xvpC88>Pw-I5eJTsU{q&)psdwwtsQ1*YFuj
zY309m-t;RCuK<f@+0kSqLaJn?69UI)nON!p$Fn&6n){B%$iu$>jzJKuB6)!<_Dppv
zI}5;*Y8+BoCxDM&qa@B>EkG{|k_)4Y7770ixB6u&GL^-2$lmTYOSNIKJv?$1HSff|
zD<)A9Ido7Te^>0po?*y5NBs`J-rmPPxZs)OJ3YezXU=x_c&!$tz9;Xi-|SV^<z)F*
zSXX={SYfIzZEF8T@bcT&&9`KRFqIu<A@s9UV<#YMOPV0ERi+NwX1oxOliDbKw8D)H
zVYA(7FbJX!N#}Ps7)&NIX#tsE@xpWr38Ci~ukOPw-u8$G7m!}C4K}!8IcmP2)cu|j
zDvOXq9)|melz&1?MPtASs6#WI%Jq+8-NpebH$G&s&5uq}`5nsQaD01k$eaHfIw{O3
zX$PIHAN%56*s5Ay#vr-yrrYiv!!TuN*Mitf;hq<;*49~VjZ{978|-QnNKKWjl2_(-
z*f3TPp&~QjQf}m6+n52vF>tSnPYqziz&VGrC2KY?w58rJRU(TL9|&zFef+HyGpNro
z5}7J^MMfjbJ_fpZ27NDp$Eu=sNL*5-H2dBQ&oi<a89Aj7@&54gl=@dB0+kvG<r@4R
zG8vv5{??<J=}X1RFQ|W9cY)B#1k$8w<O~WSJlw_tG0n0QTon4KNXG2yy_S33G_2yh
zg1kmvqUZ#QX~J_l!9oYJ2*ib~3Ae+Yg3?eefzEJYgO}^M{wewTVUXEISwLMMrI(%*
ze=B!!flpnWI)DtF^`9vMg-HUfA4M)6Gg8+6jnT$y5g#vSd|=)Rwqp$IeB9*Ry_6@Z
zuK~k{JP{Ybq6AFbF!2D06=a=C=79B3mdTo&$jW;*1GXAU#VKez-$lN8BE9AAZpodc
zs9hO`ucJXbk<W|w>sQ@=#Javo?)pD`T~lx-K(mc)Ctqwk+1R#iV`JO4ZQHhOXJgym
z;O?#a_E-J)d8+1Nx@M-kPoHzV1NpLgs%&@lAaBP(4Vv9QhIlAR+Wr;7i;$vupPE|T
zq?K$v<QG6x*5I9yd>O4Ar5GWinT3w}ZH&V`MNXsxGL;+xZe1UIiIN7z5tB;LF}%)!
zV*T=nEyd}-BzqD0$`hP>ISBp3?{7)GB%q*`2qm^YeCil0yp;%H`s#T%;fT}F;v?*A
zs@RPe^qGO3l}=r{*#@xLlzsyJr68B2FETHfS5ini`l@ltk|-&3b3_ia>fdnS2Cm5s
z<$ggRVV)JFbslmhyU{dNQ@`n_nI7xi?NSP3jAszJXSk@3aCYFhYJ<XnmJ9vfsnU4{
z?n-r2%=3;m$4Go1Jn1N<>tvRQ#TVky51k$+3_ltH&E<Oh6ZY01k+zF|#|`5#<4<yW
zT1h!AnP+~d?Jy&jzqTNZ?~&y)eJ}f+9?CFJB?W%~QT&|1p9%~i%+Ljv#tcHm;b|uK
zO?fBL`qq#i78n7dYL9DChRt8!UqHuM&6|pMO}Nd7N|%2?wcuB?D(H@*Kax+?R*Oi-
z2rv5w8U~?HZy1A#ETmfLCol17iMN>;*mUX^HNT%IQij5|Agh6*Os-z)cTRQc<X5`>
zyQPeaW2*bcQvViBTH>i(m~!_bqM!Uc#u$7$KF0KVHYC%qJ$-PM4$w!;pam5OO@mB@
zi^?WLOW%R6)<#w$N6aJl)a%0qVXqpU$7+$T6!d|$ZUm8d-=op1@V61BdHvVnZIC;?
z`&L<PUXyF{=HMu?xC@KZ8MFIrPij`{G|z*V5tW#vlGt$YIM(h!umGhYm{Px@Hzlx+
zFEl=O$yqCR3TS&BWWn6sdq^_yXLJW$`Jf%n`zCr1`M@0Z3o+kLMAm@1M~ig_J;Ig7
zr%*w}oS3j*98iJu#dqw=NYY#|LUmX;GiWPxMp*B}YI6+`mHIF?CduiMY$pW4OEdB9
zpuFKYnL2caHJIvLTE`u4B7UQ9{zAl2!mTk1=vQx(@VgvD5et8w40(?^2Gr6!5pkSX
zrdL!^x2P|34xVU|ZN&sw%a+qow849#f?h-@97g>iUu<?Sf?U^u%^ha%!kf}5djFA2
z@UQ+2upD+RlWMu5b`-KY$08Ps>R(nh$Rm(e^IpBkJwL^M?9=`(B3$-vaJv&o+}kAN
zVMn;Vzw(@;8+zNb5D3u^qhv>13<Zw{>xr!12;S<s-bZ(P+*p#2dq>Suqi$c%F!I#M
z1-zm6xX12F%xH4c^4Q}GT~QvL63xy?_s<M=hxjQHdr&9zl<QMEL}e%wQ3sz%S=n)3
zPQ*tpz{*Fx!q1=mu%`8NIc1WVP3-KVq<^nF{bmse5-*+{o~k8uDWZQ&?1|=xb*rsC
zY}XYKAjCfx9m@{WpjW)#do2Ei|1vRW>h6-$m&}OwZFb^m&RyW6k_U<_7Z!BO2;&B}
zPj);<Yy_mVW{<j7PB1dj!<Q<Liz*8%Rq;ueWY;+psU-vIR2<%2EKFwRTv8IvYxc3<
zJ{=j0cwzK37FQ7s*0Q9>0;4$*l89Xw#Xm=>!O<k)?84nC+`tiw?UrsCaiWlGxBl!q
zXh+Iv=m2l7kt309u}A%-pmRRMZ2%^4hB2pizd=({)yy@KyV8l`ciK6DRgOO7%u*>L
zOPoGWD0Cc5`?n()Erc7ocTY;k1PSk%!VTh9WG?3idj44!JLM7(f%^489maLxvsfp!
z@ctV-;tf)QOr-E#iuqBLGvd7v#%Jp?t#C+(?4ujkOD}{6Z#T_oNC*5wfI$~fS{dKq
zK_xmiK@H+ovhJo@{-{(mq=LcudVxztEA}Wx1)t87Dsf7fGP__BT{RROU1>2d-J?+V
zAlT!lY9*OnC4|}6PfOBoP9w1;H)V`;N<Dx3wDa4c<`tvlJ6k{{9tYt`X?L&#=IK74
zwQN9z>;dt3oL_~wk51fIJ7SB!->on5-twmt4p2&+a9Sb>_rDvQ=1tZcR)Tn_(Z5tH
zU1;_#>oBTD=vdLGR|?@Ha{2ZBljCesC7o10qs<dy8F%`AtAW#>R!h`K*1|ijoOkh2
zh(vHwJzMgvSliP<|ESJ>)g-%Y0!^H&B+HB2N&a^d;9RST%uj`Zs{XdPqz1U6g{)Vx
zl`cQsfLXEErStM=DY$sD;a%77QwxpEI(zz%<fldPPc5z1718+lR*JPoM{7ceqdFOz
zV+y}|x`6LLf70X7)Y$RN=lsY6f6~y*BnlXI+a_WzQOy`Cys6tzFsB8%pQTgI#)vau
z1FydN-#b=<{jMO8X}@CSVVbdme*6_bAw;>O!~rwQ-xUSlv})a+s&j<cKC4QA4l^tM
z4U6Qws>g-p5b+R>RL?&|v_*|ZP5y!I0{HIZ+0mkNc0d1t5h~B37wJF)0j>X&=py(p
zJuxR!M^{rvW_o*5oBt0cEKwVqy_`<jdZgm(m)<Z)9UtklILUsD<y1xq!pik^z8zT~
zjdmj!Kq?<Rr+=YZJ~y4}WY+)rF!cNWxL@h}N#Ct|r>0n2@g08e=;@9B839{*zjt3t
zg1;Yoz?*XRcpYPHe!Jzb{#O<{YWi(CekVU7YR_KI?J}0@rq*Qt{B8MZJ9))_Xik09
zz_95|<)`)kzP~hdS7i6q*ts_mGz%E}5hKz~?eH3FG*Gp!pMonl1-DoV#Sy-fx(P=>
zN^sdNr1|GH{Rn6LS0Jr_Ku^HXio_oa$;$wWbvwchcv#2a4>hC$4Q9}cIK1vj6w6SM
zuG_Kh_mDL%OE^CD8Zd#oLO)`u6SFH4WosBtpdWMU8bQR(M_2a`{T|23+ge~C%Tc>-
z7f}RhLZgu6S@*#>w#klxb7(k69KW;tj%=*>)2%hk90R!@lRefpe*<rayDVf66!7wC
zhL}01A7?PaTi<sSuzb$rIWM&2ocPP;K#DwafbfmLSD3!@f;?@XsrNWE-0riaBu08a
z0oIf_i2RA=66%NWfxt(Zz?#QXoHGIJtP$L7-2qYF6;2|9N1b)=S6>-?Zy7vP#=h%a
zl={HqAEK<RsF#HW^WMl`F?-x6!56bQ?{1D6Fm~otu4{R%?khn*loRE|mJ~r*T=i|Y
zAT~;T24R`12TI|03u2<pBsfoIdSwz!Ce)QB(Z+w_=k;d&*H|K1qjQY2+PX|$kJH$P
zqqmI2>YU%up6nXSA)DEW@>^c$iaT*`>oSj=JZ;A?d6(J+ucNB=&wGnk*yEV~GF6Q!
zNLAPt6oBYwlYE4d3fZ?i>Lx2kFch|N6TCMk8V@=SO*eR|bOgXbfvC8*Sxw5oV`i)<
zdoM{5c{T5a1H+gqLeD`;LjR*EK4@K41Aa}4`^#o73;p$=T+mF!rm;9Yy-Z+nUkbcw
ztZUI4rM+;cL{5WR<^uI!UtwxlyYF@CqrD`=uO~|fen8+b__iuDQHCoow~KO4r5dOW
z&<HT%eAnV3x%#jc4TUN3`-Oz@Tfd7v1nbG~<EA^&;mns)-5lxOdJyEmirWM$Z1|HE
zj`vwgL@toT2rkCkE6p`tFaM*btLl*$axk-@0gu}>G1@ljUzW9k?EI*g$yKXV4GN+B
zdRuBI>M8D<AqmuP5-{TzafdOoNyv0d80yeWXXkzmM_;VDBH8}nC8V~c*xCHTs1>K@
z#Lh^bYThXcZnX9%gt}LZ_ae4hv%#5Nmfx{BJl%luVHUcTtXHVfJIz$yO$zlCWf$aA
zj?MPh0;JtV_!Str^|n|<^(LgDep(JWu-7P?2t-vW#$SZpRNRbp89YX|>JGy!ZRm{3
zz5EF`yaQudOxdI9aW=KHSY2L{5r(~CoZ*zeyan#L8oD}4>@dEUuMKbv#yM4|CWoef
zF2vIq$Iy{p>Fv^aN9egC0hb7)X(@tpi%xZ0?2Y!EN=&_j6b^n?*?G~C9bGb==Jc^<
z5d}^1(y_PNKeU)HC|e`yNj^W9b^HNSfUTdnKYme0W8nO$B#`<y;>U-6qf9@a=tBbk
zKn`wvJFsl|%tuSR=<ZYbcVd9cblvK{=<jW=6mtwAXc=$VJ8kfHBAMa9x|SB|xCIE3
z6i?d^O&9>v9<XWsE7wdGBIQtNj#iLf_2z?vK~;r+uJczYWA45wEvCi_neg7Eby_`>
zY+*#FXoJ$Q&J0Qqo43gzq068%DGiz4Ep<p#)goJOh{f-P;q!ZPaYp^6m}s2p!?XOF
zay$o!Sx&yQ->8(f5x`Aq+9dg@0Bl*anr-XOeU4#tDMO$aVTa(6n4G@K)5UIn+oOm2
zLvCT@!naeo6m(Sf(rqh6gbzj6rlL;1lBk#X$}V6woBf^kqi&KgzG8y0!%H^|-ehDl
zgoTU{-4lQK^xX(*%P8}f7#&Mx+DB4nqywWrN9ZZja+COFhjG5!B@-v>e`xi~`1319
z3kV(3%Qoc{1>s6xS5ZLNNuLRUhDTT=V<vENzu#76e42w~BfEpK_2MjI+9cLuPRDk*
zz1$bHvRICj?r&RUwE}u=u_2-L6F@|}P!qkB!rMH5UevNwoFK2q!!l^diSMvK8u)li
z#hEj*33b2H{e~@b@6~~4*aB@HeD?<b*#DhLA$W2{j?n`vHm}ik!hJfr#>=ttMTIsE
zj7BvBcd@@;D&|jt>(pJU|2J#z5cEK=bR&q=fW@v7nDyDn$Wft|7LRFWxg#HeGm4n1
zvbM~x7kbRg$`I7tTpZMCewhx*`XaQ8YG7}yszxF&jAEBi*O$C0nnj|*&*!!mG&T>5
zzL4_dX>9>>&#LI4>fW<Q&U+)I`Cj>HI9=1m`ZsqZr>t#oDY-U3=MrK(>x$pyUEPzF
zJB<AT#PZSDKWeRV%_>wb!dXmS)iJ$AQ%;A>R=Yui?pXJO;v_87FRxW+P%iFMO=epZ
zzL50A*K*3GqI*bln#o+=+#4pZ-<&tgI<->Rh1%tAq7+2w5>|79VBafvr1Qe^Pes0F
zfivyX^8kgWu@Qxasrj=}jEL)G)o|4wxvW*faYDJzg-qj#S!X#5JwPAHF7_?7aqmcI
ztPC2lZ1Zv$<Dq7(sWupzAa5bLOHJ)K^*aS_m9;XKrvv;5S-TYo*T;q=JUg+nmVZlm
zqwqrj$NQhbZBjb5{Pw}*q6TWjCLpPEcHcG+q8dx$+qEdKcI7RER;b;wJunY1sw14m
zhAFSkfLbPT$(#g<BWFZs55?BYX+vzBoI-~E(s?2CKAbZ{4=G$kajW#!L)kHcEL#+X
zB*vsl#>Po-^w;R><<UUvF0@+}<F6HpYthFXSyq#nsl4St35Xuda|9>u65aPE=%!O`
zKB;;gGGa%@F!ElIHxLgNyr{LdWV6o3551-hIkq~BN}_BW55LbHs+W9a9q!w$`|0=N
zlUe(|ImVSl!_Rw%tJUXW>gA859^Tt3-9g_D6}QST`u6(3FB;A1VDURa!!5k50UkSb
zZ(p?FoFP?S(#_VJD)L9RAL{Z$WUrf1DOLwQukzPiPc%?(Xn5-pMkc5BBlc4UVm}F9
zx2@y9r>YvxR*zi=JxDuT2_*>Tw3~+x^risj;D%c&j~olWQCuzqrOW$gxDCITAR1Q2
zm@W>zfy@|71>E10SH3@WOiu*jGykc6^wh>Pc%}se6jKZgg#X`?HvRug+x~wfvzh1X
zpQ&JK-)Wsdb5gLQiRg>%YprV%Kr|Jgi#9<qA<JSDCY%r-!Y29vwb<G^^W%HV3q&fR
z*x0oFXkrurgunBODbUC1IU2i8DA!uiu4#UC^!K)po9{a3Gly<9TNV|6=G53VW%Osy
zcl5)fHCB1U^o!AiMTc-BS~_><J|ET}X;tHmCy~d%1MM!^6eC>$o(Ynm^=VkGYid1>
z!yI5YRmfr7aRf!74LhMmd=$<9#xs!~o=#wwsNkM3x6w1c3Z@gZAmGhlbkF=~&<MGd
zL>Cyyz>(x1BObJG!pAyil3fNwhr}#B!aOGecd2}0+HRX;8o}fBc=G+-3jl>z3f<=D
z@hHORSvYcD+aM1<x69@AavI+G2KZJIb6!8oZScgcQ|y;DY)wYnnS{j<6C5$(H*K7a
zAx3d#!JiIo$Pd9Lg8~pBrZFdQzzCfZfO9+&hpCtrBuF6ch#v;+r$Btig!35<q>a`;
zJqP(>AezoU{~4%!vW9Jw2ib;sC<4jEpj8>TVyGWwQL>$*uzdHq-{WNsw+$+DrBma{
zSaXGUMjZvRl0~Tp7pIx#_CXYzc2C~)pe@(4F*f%Pt7QcYu5b!^0fSKelab(#hh$`8
zwaPuJnC_vhVgW@LtHK0fo-{JFxZP<Oamb6L4O*F^8~<E2COFjbY`#yS00)#hfEC?W
zA`c))Nd)p?Cb!j|5NJ<#NWI^C!v{lNk?gj%_{Mum1e>S~CuBEm9Q%J=Kk@h4k!WU;
z2K^;9i-3GH4W*1AM>Q|E(IVV58PJw!-US0A4fw}pD`zKGg4h|a9+VzuV+^7j;NaZt
zugpSghwC$}Oa80l-;FE-+!OSPaz^Mq14ZA&A?dzOb=QSi0_6`UKglENMvP4jc6OTs
zCGnE^k4`@YrKqh&8*T{P{!eE@ts>l(V`lL;RXY*TJ|kGtcn?wm1<y=ts5l`W!)9Tg
zbVU5{&;SSBFShJ?cga?8MDbWe&L9?IgWzO6D}NMyWBZae+^_NlAi!TCP=2@#Z_kdm
ztvvV*i`iPUr93grA=uT6xqYuFAACAKnL123^68JH5lr?TldlQP7YEjkvp``1!mp^P
z1tZp+`jKQHz37u52frsvj;x|7EPayxh2YWV)9d<)r^9l2+Y>7eEZta$y^&rt>C@&3
z_hmnRoH&EEsq^UbfY+vTwl}VqZ`i-gJ!XtR%E<F*dvojdjs4)af1TFR>~Uo2&5I`D
zhU6Lj$K%MO_T71KX>0!)lfGJU1f6gC$eDxZ&lSBZyw{uiAtw-=0Gso_ZLkBY|IB)l
zHVF)K#|br5^9zG3&Z*^3(;(mXJMhPm`|;WoW#Lw2<hy#K2jO@+!uI;a1U}su1>jqQ
z0?$d4_>&;l_0@xX^n?e#>7ls)!;no$YJye)H=_^Dktx`VS#0oz?LojI0HOCt;30B@
z>Kl`b*|MNGtebfAJVhdLbvM6TMqqlPSi1%8KoC8D;VFUpwOkXxy+4&;;dC%9unHb3
z*zst8;XquVY!ln-9TT{<kYplVP|T?z1RP@mzzH}#sj?UdgfE(^4P-T`%fNH5v`9T;
zpQAktSB3@T7nqTKUFqY(+zk+AM=pHm<nyJ+tMz`}KD1C22ck;8wwD`qNVriMe9~9E
zP6a`kzZZsWm#&212@|Zx%OsGpdpz|<<FDx8vy1O1%Nsp`cH5>jhK)xd?k#J~<retF
z)%d3*^YT#2Xk714S&><lBrjh9V4?VdPR+@w@Z3wA+EZba8+#^()7EZMV0ddbOSMe)
zAlbK4kG=h_oma?b8#f>w=XoBKzsw7%s_F|-h^-mv-~*eD$)T!E9(|UY)ICF&CrwqQ
zF3hsjmvF)*T|<j%<m^1NEMLwc064xU^T+)`yj}vGXb9OW{f~e<o5L|A8t+Aza0U9z
znNjV~tq?{!UB7dKcHY2GMeJ}`d`KQ?pdkbQZXa9Fc()s7gjNI}H5$?j{jy~~0u&h6
zU``^x@yaS9>u;7R<!^>tIk_c7qE~xf0#s!6(QmprT-@>-5L-|&(=!kxs8TFKwlJ$b
z6#D~4)Le<vFN?|8RLQV{JIJU!;E<~VnAcEo+y|x+SD=f?{(){<W0+1jw{axFQ*7=}
zWhPIJy})0U`xQ`&Ss&^5o&MR%2Glg=i;1d}uskLEicO;DrkDilidbF&fNEU{?e3UT
zS!9&z1=&_<KQN|QBX~O8C%h~VydD+0;qfX=%J%l(8Fj^P6y|o=Xl3G8#cm&MFk>`{
zp_*e9r*klEtyr^|H$VqHW+qV=A<eLQl`Y)o&CKU2GnH7O06I~)tfyHwg06UZb9iH4
zoLcHQ8;Jh?BTpV%T<#h~t4pQ+Y2lLO`X1+jsO2<`B7nydm_jG8{>d-+aPtDN$IV}r
z{VRFjcJ%J3r~*E^_;om9sTF%w)RIyZw(qW>sZahRl4o=t>%l&zD9b2z1u8ss<IyNN
zINs8h(%dcuxf&5l#4)AySaUXeJj4XnI_@FejG@J%6(wC0j$q|igIWYYal+*rP>*_#
zxe6ny*h%Bs0+=uez%E1Dt2n_Ry=ZY-r*o4Y{RG1C$MXG*X&PU3JmWQ3zx_SpZwA1o
znTH||1>GlEC*1?Tr_IU)4;0hPyjnoE?X*HDZMq>b7li!YuH3X_e?vBI&oj0dGGIZP
z9Rd}b$Fc{wHgIdiNXPmeqouAG*1&-J#%NtXf($zeyJvm%BElWX0GXthI(R}D!i0>1
z+zpMpPc%%53tDiHxqo&<5TSyTB87T>JZClhices&(+3-ov(uMYuTFTz3i_ik)(=xg
zSg&0D+ZsQROK=6Y1jg*t151G^-{~7LeqCe)ez=`Q50>jb#Dn3U(e{+D1s*~ZKB457
zgqG!!UUOyhf(z#9KNPBBLRxp%Apn%o6ZuGK!G^qLgixQ^<4L4%7zB(0s(}5uDu&U(
zYw_iE96Y|(KpveUg%umL5<pxT3QR939X69jJlN`QR>ACdD6{$r{N@FNyt2?+Fr;Ut
z+~AynK~;8N&W<RtGp-U8HxS|;4s~3GF8^woK00J%IN8J#6TR)*(m<T#Th_eT`Z*-Q
zK8c-bHC?ZM;APnU^r`I}q>0PYF(4N8NNfRms!TlQfedl&qoOhHtdUaiX8aZho#vFT
z_0h5q;NK{WhSI__0d2QaYeb(br;1!8_Ctaw-e1XKb^RdXS*rATIr^f_3j^n|E#t8m
zcwAhlKtltr&i~NQdWIB>$fU0ApQuw4+|sD;8Q`N0$NBb<QAe)yvybcHiI7s*6OX}E
z_6d4F;&Z=bO*qFh=?9d<HNRB!qm2F{R)QLkyOCc{HWGK6dO!|dUzWWgnm(ZDUk!A%
z^`r^bD@ch?7YIc{(xM7OqdBhpCDJj&6;s5K2G=%PE%d71hy{#pPTcR<fD-@FIA>kU
zO_jQOXs!Uc>>4NfnVaH*%qZ$&72a0~53OuVDA;~@H4E#sqYAYf6~CF|c3*Q5Rk@WN
zP)oIp3^J%BK+K*i$FHZ~!EbEsuXP9zQ9~}&PN%{|9!$DeCr?uVHa3Sq7E_45*xa(_
zPqr;j!vCwV!fcn~P<+ZKXSWafQbf3qiGtQAYvY2{c620!j5Zmhs0n%{S7HUe*+HEg
zMM#qbGC%EU>T?8+r>cwRaUL@vDFrQ@35u}MKmbI29`n+x@?-Q3$M|#cGInF?w?Lr%
zl7rhvg3f|~(<OcvtzdVzaqL`4YfFeO3S;jHX2P}TC>oOri!(L-8|c9rHZcUl0|wM{
zErWB6;yRLlDg0Kr(c#cK`%_414zJ7O6L|5+2cZ0K0^hcQ28E7op>;hnCH4yI8?P@*
zBhRjS?j@U>1_%vNv^nz6RhX46NM-)UPG3L9jy*eY0D^hb`EULcuQx?RF48n5RmG?|
z*W=(Yw0rHZ4k}k{HCL-*G<;Q50g0g3Y&b>qC?JC_7W5caEcpERj@oi798JFENYK7{
zuV2s2gII7o;KKJbY^jc&;v;7{)CD-67Oo3oGc1_h**9n5R*2$psDi8m*0}N=m=-{#
zF@g=~W&L6G4#@cT_l_yLoT8n-Fg0l^(ifzC#)qO(IF@$(>k6<HdzthoCKg9y2A*ml
zQa4dh2)Ff7e~x0R61y8GYqKo#8s%f8y51bwmOot?#Es|O8S9gNK8s%Gxv!r$)#L}i
zSarP9_3BCHcU^EL)UVZ7cgRI9{bBR8Je+S!K4|ClPqW~E)0lb?_2a@hYr`XJ|252C
znz=)xd-1T>8?})E_v3trFKQU|^Xzf=^YPHM!&z@vra!>3K_=2DH0I&s%Hy)>%C!sg
z1dBk7ab&N5qGDt2fNHsr_2a{eNf(-<r+PKk*w~BXUw;IlaW0Vxs-odWf3_un5O8fW
z=Z)oU%vN!nbHw#B;oKO=J?3~BcVr&qopQKpI2PFRy$P5n&?K;*KXvay1nR7IMGtnZ
zDXIIi^4g-tb?gnpD^a_xOsFsNVkFEd*%O~PVUXN{$Ic8=!>q&2TsEt#2!Tb`qru~2
z^Nh%g+qHZgj%8r;nnGq?+OcDNxLDhv=^<hccRw`62b)HiSpk~Cavih0D%PUQz9QOq
z`HD-5E<Hkj=_zYn@)nG?g=^JQ7G3l2&D>JF15gGP<W_(X6kIKoo8oFDM7~7AZzu+*
zBoc%0b4ho-6u&gdNeen5<M`fQ+Yg^>ZbN`OBHrR=(e^MY`d4v9Gp;qP_76qeUdi&F
z!#Y%syG_IJXw<64lK*{E4|);g<s2Un^IekE>uq?uOt$m`V8iVSzko8o$=kQ9vuT&b
z`gT<|pa&d&-vase2Be_>vH7DY7jyVi7eV}pYvhe|I;F4@={#QaM-BX>{seMF=T8}x
z|DC&h)JP*?R5K`k#6#JtEY5CIrg|k%gDz@BDcAa0j_b6$rh`JKnqpUOVkH+Dt4eL`
zER?lczOzz>po^f!BUtR>lTy=9OYx#@T~Y<l3>A;<&YP|f2Bc~?Xcu7SzJVp05i)9H
zy{EmGt4X~mCt4bqc7STDvhG8rhz~%7+z@FhLatbjasnZskH~zVrDQ!-7CEcDW%Xc!
z0fJReav4!{tqPKS=+?d(Lfseyg-q`}9l6x7b_g{X49&>G+;0qpd-ZH>_@{1gEtWvy
zRNDV7>K~+30im1yEj)6)h9wO{5a{gC8W?!g^TFn6Y8S=tKk-h)s81)EAin6F>;-t+
zB)29W$;8v96auGy(HFVGM)eZ$X~%DL^wUm`GllrjCR-<T2a^2RKZgyp`%^Q+zdfW<
z*5&)6U}sp#2hEN`3lEN7C}xM9Wxy17c9txsRqsqKpeAonVW$S<qcv6yR01$tb*s`>
z;~i(?UZ1HwAY%8#IDEf54dFf)1`l&t;Y!Vj3R0_Y?k``>Ea+|+v564|dI!3*AOo{n
zuQFN4SmCgy-kp@S>GDIEuSw{9A&ki^+=uI8`5F-aOPa4^iJih}40;-Q`umvF3Ru$`
zrwS^)k;E0itfy6;b*E=LGjV!2!{<bt-`uXv`!P(gG`iGAqLA9G+C*Y;GWSHX!MZ+^
z4M!-Sl2fkj%ZIO9Fngl5i-$M}s1cK`UPtKfnLj<JN|UVC3k*MJuXSygl2<(E%3slI
z9o2WpOkoF4x>r(q7tp7rBml}wZ8$1vK`&2cR|oXp^7#r2f8_8emOc2@4aLguVgB9p
z1~%kM*FSfP0Irv;zAI#dWLIlnq5DkWlWre#f~ez|R8e2=*CxW<4J_)2g#@?<lq%HM
z9`BKE-|9gF!Qv_u70Kv=zLq1K1SLm%#mf>tme0hk6_Q1f%*LZh^VJ(ihE-7s4zl4y
z(O)*H;)k03^64dH=`I7@O`{f=Fo%KXa-|dEuRsBGC0clwEdWHSnXsH=N_bpa?R%;p
z$Eo`*bj^_IZ3Unal&H?TUa)e!#}|S8d+<6I_hBOaVX3|KzdN)=22^EQe6H~^wJRqQ
zWL83o7ke;ZssK(}hBbEiBPnt>u^4Ogdd1ApR(OV$-e(P5#v)$&{tQlKX~!`e;5%ow
zpx=X4w4+5Nu21!kaB4E<!Y(N=Dh$@?Og=xmLjxd_yT|;_=m;PV=0iUn__O;=7DA>m
z_&NHr_iTkEXj?ZNJH!CpJ+|~o4M9X3IDF`G99aqhM5+A!tFnQHEY87~d&-7Gw@s>L
zVzg4~V~@xZbn}uh<x(v!ojapjC*;K#n?-pWB6q`ozAMs0EyiB;#I<ZX+4NKe$k&X=
z!y|vXW`oe34TX3mcqx3z^<XBGg*WN#wkw(2ogc!b8{Qq-X+D%Vx6{hI-=e&4rEAKr
zN5fs>z1#^!%NxGS=W5Llx8qfL*QtV*j0<Uy$_c_%73TlsHhj6c-JK$rX5grp9<qH~
zgC#h{F_(M%P){n#XcP$t#|_9;Z_SMW@wlM^T8tZ!=*%t0ipTD<*h+QMv1y1Izb$eo
z!)RuwvuUlulw4SsDO!@X<|<FWRYwTb*7g*n<J9;UFW1f$4BhBQD8|x_66jh8m=I|I
z7PrD^-AD8z?XYm|Q#CY?WWAu}_iCtPYtGF-%c!u=##_NO#bBqx@0=X4Q4PV9xyDDJ
zX555L;Fwu3zL1<;0d3owZTqvj6<(d=B4cv35eDW=dUtA9EGkv)fuv92-otD8cJldZ
z=&_oagn>Sv>igpeiY`7y*z)u2fd!AaYp{X%i9oyeo`3Z2*FbQFBYctOy?%@KlFwwt
zlP4`L43rm5{*o~Z3_yH*OM4SkZdgiacc}ti3b~q4giUw<+D!FzAqH1tJ-~yS1SW>d
zZ(Hqf*E3|OhiFi#E+}2Nm#m?+;_6w85KJ6>i_F#L-~bl~Cr0;IVO>NJqc{wc75z)9
zi@qKi^v64jN#VY<uq!__ck}_8T;a%SJ%|^6OUmeokTkwB)5O}mp>h*Y**K5psj55R
z9e@=9Qv~E9#d>wngQL<HK+rCl5PfK~byYnX36nz2l~#|oP>N4iIlrxATZzgU)v)Rl
zIZF1$bd-F8k5t3iB*QmE)4-jTd^K`=fsT>bUaebcEzwJz;~e?z)p=Du>@_CPQp40J
z*c(tO34fT%URS-PDVwjZNZU#iRZPTKbdin`fu9_4Z8fD((l2&Fhc)y2a{07BW&rx`
z*@|6PhGK}|x;3lQX@1MSsFkK2C>-(I(e4r6e4$v1qCkylzd*1ixe%5~gT}`ONaeam
z6^Y79aOGE(jR-fMy}(LZ{8{B?ZswwxI9nS!OlfOzMKd0LG1}1Bt&~<=vR?ya#DO?~
zM=IVc0_YttvF_a(f%H%q<YkbQi&P8OFH_|?CpnVm`C>DQ)@n*TSi(H3CCpt2=D-TY
zh6IVnxl%$~By6~*Aq07_{)#AhU$PI&<S+K#gSnhv8|d!nuKmaXzsM6LPTH1O#wqBz
za}H`?D^%ypxdD35;?h;e%@%>aY`W3}NAfi6U1ewdMT%b{i%Z39`t`%*Ih4bGw;r5g
z<?hbDjfa@|q2Q04wW!?TavJf6=$>iBZoTaHzyGflYILU(ID1(IpUqf6of2?kUO67+
z*VIoJQ|o`s;lgW;X?|OdE%q=Oe0|GG`}>%LeX$BR1X)kEAI2}6UhHe+uF&<Vxo<_c
zC|`0Sw-h1L7GGs#cf7CY;O7GUr;O#Vf!l|C@5tZkGf_yP11?V=-=ujqTNU%i*0N5v
zGIf@g%}+xlV>6tE9NlH~nUkz%9KTCXmYr_4YjX8%2mUAa=YvYm7UfdSz|L@n@X10j
zriIORz1UwMrRr~(R62fmu)EGId)SR>da&2!c0X%7ZR{-xv=P2}`U@w)f{gw#Jmv=w
z_<w_Gp@$G4)KFfgb2Aj6TtFM2wOYW)UB7nQn49o5>(r!2-DY<#W1U9JyQpa{Q&KWg
z;vPxX7oHB=J^q!gc|E+G);AYY{0o<P=XqK^JKbmVyO^hR?`y{!6LuGMOG!=o=eI1H
z8bO}BzjJWE=wbDAShcrbSGzvmHN|N`--{~p*R;zZ#PDkS=lHX8a@TO4u!Fvv<z{1N
zWk-r0SGhl)tsmXKAbVHh>8-9?D;8=9*5qc-+z#IgS1Tof-~ssGtO7VNv|r4OfX@9;
z*zc>YP{lgkWv;Ogz~7LRH&`6HuE27Aelt`EK!jceFbkBD&j7XSc;bfV-`g|_+0fOj
zsiY-{u`WGsE>0U9o*9M+ie7uOKb52wLGM+tJEKpJN7vZ2;@c$8f8d-RXO6W$WQqfO
zEZnSerr3V~nZ8atX6@szIZ19ak5jR#FG|()pI^0KYCnedH_cWq2<4i6zjK^@Pq8*`
zoew*a*^wcT;Mw7wFN-ZdcJ`d0@3Atkr`%?29}n8!Yd0z-O&B)&T;t?txjxc<*Sg&A
z<bvOyC|$+7Hc_=nSH1s3C-3$_cOySe9m+@~1#7<kYUTuh&~3hNEJR$qj+{e3eOE8=
zTCFVat@vK*W$UnlV_USUMzw@$$ckeWV|ub9cB;O-2E1$A65N-)U;5WTSJCHfxaCNH
z96l9qTjpj^3zc_Tu*IP@Sgp*`;()B}-`FMo+AssZb(d8<($98C6{eU~<%7<FU3lP>
zk=0iBrAQsM3k`qxRfc=nnm>^iZQtYO`xDv+K1F-(`}Ou&jPMQp)Rl8Id1xGXs{but
z4^m*f-^Xs-wC@~50HW=seb8?U_i$eSDj;|^Ji&P}gU{Z3H7P~7Vtc1-VBJZEofRYZ
zb+9o3ex4fQO_<Yp++dwu@laf-vTLxE3xqr1lFmMEYBj{?*6P@XcYzAF0Zhh0xuS0E
zaXN4HFHp;|cM3`6w4*_DfX{MJ*2Ea;doD?evr4iedVc|tTD>Huz@o>D{!dcF&tiyo
z<~c&!d3mhlv8T^dc%KukW8c+dVhseyLwOu|u5jr71T25vGw^U0g~;x3h)o9m4*cnd
zj<5!_5BBWGjLzNJlgJn;IUFeg)@=dtt}uAt(eO&+@=ai0DU~d<Sza8@Q^hxC&~x6f
zBS!=vMY;%P1Gl6Fp=z{fv*jVBQlih1_qZB;AYI>$IKzzb?0r+C8Us9D;UIvv^_vXC
z0adIZI{<zZD6#wT8=@MZT>?R~*|Qhdyx+w0TU>{Am#mc5Fj9Iq-_A|d8@J&GC9mG4
z7+C8IB5u$_DL@QtTCAxhr+?QG3T{t6Ba_M`zyJ*0w`l;+|ATD^N@b6R&UF^wpwXEU
zTqU&Tq_ee_&Dno4ehVB8SlP&eWIPZ<7@7HK+rpAYW?&aP47mmGpWZ>bky0`rD2ZuR
zsbOl2NL5Y*r)<s2c&dVu<`Hc2m0=;y^=2z*noB2gb`jENqjE}ShgEwL*}mL%0%brO
zuX?EHOT%~bY<9`-MI7%{BT7u!+*tJ@_KJO(2xr$l5b-Xx7>dK5ssh3ciyV+V5uery
zvmxu20{`tK#tUZR{&Qq(q-o1bL_zl)Qia54gy=z)+wcieLQIzEM_|`qLZ!L%>*3Lk
zs-PJf)VsYoTh<GF*n-K!S+s4`183=x!%wz7t4YqJrvPC`g)D>GCP-krJ%Nll&o4Mq
zdxzN<rMKj{C1`QDAzkW1(Q3w9xM<4pdyVJ<wK}HhWH7;EEVW=ACXTkk1y7r)O4ti`
z-89mY8gsdAXCS6a@+L@ve)mT67CR9<0bK-H<G>?WVopN_wCBd(bx7gxY5Qg(Jy1FT
zjM^*>=}zu$PO;SD@e21Y=&heY`cP|WScQMV?RJ=MWvNUg#ieRNN^gp240c#M{P#U(
zRcFcCH7T-R!m|+r2ZX-rTUjRqW8FDD0^3t^;$q|IC|Rzy0mkgL1d8#Op1!`mAd>8$
zmN0ZLh}=?t_t>~5nrlz`>Emq6j+`(mi0DTBp$smG0Hq)QGUphZ-G_I3UEP;$gy8P}
zGrEN#L9H>LJAgRl%?{S;wVm}3%>~2cYcCR{U-kV-WoK2B_7o<R$s|f;Vn2UwouN~~
zu2N{3jfC<eMYq`u&&;{M3a@)$>9s;|?~34^<r)5C{~lR+4g!17f~-JR@4z(+rrn1n
z%Or4ZZy_&OYkZ3{PsmJz4O3#SMO}sj>MUQ42iGkLJCyDxB#C{Qq)340BRyzLOruR}
zXKK%zpF0P{I}~;by+RS=Yv*cgAdEHvPyfLjUKW`+u&(xC!<9K7F1U=+ES_mSS?`;a
zF>-f4Zfy3E?mU%gX+*`5X_z9|vLR4CD2l+()T)Vf!w7&B2uhz8m525TPbdn=j(~Q~
zT9oej$gZ(-fXH&vZu+WG?p>}n?#+_B851a#Wh+f<rsPVIM#52WpjrNKCWhc@`=!<9
zM<XKD`X?D9_8M~b*3bc+ft{%=dq_&l0D#=yF(*e48Ao;%lx9u8|CF+4I2Jhs6CGkR
zbqbABFlR@lfP$sBYR!jHYj4?NNh7XqlMKXFqa}_rn#g*ZzT9Bt0-dXEMWCdq3%E&e
zcPTA`$Mr>G^@6w}Qrieg$B3fB4}pavpY79<PM>m;x`vf$)0sqW@F)J+<YA8yOS9!0
zHyXq-trarkEf*eF#Ag!!jGNjqu{mTL(u9-7o-xcj=S-|FhijnMPgD&9j)@xAdPo(@
zDvkL!M3kDLvyqKw+G%?UR}Bts+u=oR_UHHCsPurgmJ_l)?ID1zSZKBiMWj;e64F1e
z5<G-4u96@lJOhv|te10=g$)=0e`(G7J8{+kvQb3`JcpW8Ij9>e2~(i1Zk?XF1olmu
zG3&SXgT|4rC6H+VD~@MtC(k)dlg(R91%RiH%rerft$1ZoMslUKhbKKQI(Sb=Z#tA+
zrMoenxDNhGE2AljSSACr(;!$|z5S2E7V@}bB*P##BIn&35v{mZrBF9YNPcAYkYk;6
zH*lJ9jIxD0b|C2vOe}(snnP<^+ku?j5pk(~ru46veNA+#0vZ5BJNP{%gwHk!$0%cN
z)pCxpJ+CmP>@e|YuBlrjcMvxYME6?QS<U2M3X+ka<Q~e4wJ}k-0+vUxQ~fE@NKM&!
zcX3vt%%f@=2svdb*Y4YdM_)cN1XQEa`#q~7$w>q}Y>p4leDiEw6sF#~SkpaQ-H~Uq
zRCz6o{a?g}+HO7j7}f?{!}hbr;Z@5^HSOy1-hKhEH$t9GhAz={5y32gS98RJ>2!qB
z4W#UnbS^Mr%!{>wDcaTXuAS2X3nn8u8I-3cR;SGVl6X!dY7RuVfu@}f;zJuO2Cf0#
zNu-#w%-=wrzW|lMo$QIP{GTV|Ue8%yk!VITn4@)sw8v``9>KZ7$$B8*0fZrFb#{?Y
zIVCEMjf8a**ZwHu8s4oy1{Yc@qe6}!*(wGZ!u2tyd2MO&U8#J=W=q_zI~M@uiAUip
zUUZ^)-1b5=?ZhT3u*b<JS~h`cG8*mY7BCpH<R76>G?g-%QP3%`p?4*&ufeMpOtZ8e
z1(rv<`sWbJAL!QA?I<IAdvmL!eNYl8g15clKV3n`d!4ujX+c+`{x@mB+Q$Y}xW82c
zzRvt>FoH(XSHRE)Woaa#7}95`A#<?0mGR?bf(-EPPkxV8%EI~AAUMcroWP38?dfIG
z`|aJp-R_6>KsF!@V=4#S(EX~W`R$97z1TxeM=_jyphsXnv@cT8@{u%A2F&R*8xWTy
zV)PD#SC7o~@2N?j5{p1ztUqCHA#XCAD}{AGcg6>#vK}XD4y8>+AJjYOz^yPlrrxEX
z-*PBJ#`_%FRoqL|%)rsacx*ohFAn7BW@CpaDV@uMMb)R7_oE5O{L%oDKGzgSW_8X=
zpDD}4&}@Z(YjNTc+~d}ZiS{%e7?0^E)2z!V$iIU?w6qC*bN|H0VyEr}j>c2N2V>=>
zWrOj3J@=J>UONOh%u-KePOmM)^NvrwVQ0$(TllhhBjNR2&nU_Gr<%EecETU{kT8%3
zLkP_{JxIJi3}L3q?-#=dZJp!itnR3h|Cu1*CryEN$D?|P4#-=E)i~RUvfWcf2hyx_
z2<l=$`24l~&q9D-ff(5G8rT&&of|Arw9=jy3Fjft?*d7dLu&#dCgFH}*_$DCp>Ae3
zDJOemb~hxCDyk&T6n%*TmAzeVl<PVS{Yn81+1=WN={xh`U{E2e&#*HRkLV;!H=H-k
z!az*)=fU2=KFD9F7`6UmXgByX`Lae?v56nBnLlyNB@W2}$n_Y|VJtQSwSi5_={l!m
zlwg%CUS%ef6gKdEwcAFy3r*SAyL8v34jn-o{dIC`07tzeAX`_cdn<Roo2`z_BVcLe
zCOjXUl}4nE@suOZokEXQ<7`SYr~hD+DJKIHDDpD`A|fOHI00hpRg^)a47C7TvRI_A
zB}xH^%>BhP5_Q@uFP;!a<C8db&;jG^+<$pqATs?#*@$J)Jm0Al^9u7Y*i!|)igh#N
z5EsgKe_^Tk<xB-c#3S`o9D%xla!Sh(X&aU3qw^{jL=+E`ts~*uR>c=Ez})Vh6J<lr
zZr?P@6mn@`1%oLIWmp^d%f`zAr}|iCXI5zX0w$J6SBAzutR63VHosf9x*cMxn?3_<
z!h|gX8R~CT!~w}q=Yw$~*!C{pvX*(^reH8iniZDjRvb0ah-?x}G2H1;0Lv@Y0JsaD
zBlewZV|I?p7-J*MAIxs>r(~!>Ra>^{s!<3mOrh&f`t#vptaGy7Ppa#$B2F`fO!%5=
zBjs;cwPffxV1Yf7{NlM<Q3G5fW}N6QYGPPhGzEPP27|MKJ>?~???7d6Nv;x{9B;~F
zMNx;^o<dsX_zen32E+Q0JJzu%uV{aUQEk!B{Y#Zari<KO$ek4JaZb{sf7e7lg>jrZ
zOtZybO_-#%yl}|^XOI*=U#WQEWTU9~o5P#g{RG7<k@kmP91uF)mFrvN!2C3iLt+fD
za1*>vPPzwz_pWX75@ZrfR%GtLma7F5a_iXu5}~?AHwGsT^V8d`yFGi(36}r6Ds>X#
zB}<0#s1!D!o^uH6`&Q8d<?r-eAFT6~WO`7DNxOj2z30(@q%4%e(!w(c#AJ&vehNW!
z)|8IfUt`>2uMp^P(X?>(>BD=qeFSBxt`5!9i4R4x2uAvDck1$`3%Z<6U5#_6R|p8i
zAMfv=B<c6Q_Ix>@Ccmen&4dZ()Icoyu#x^@OHSFEXRD2G?#TFjD=HPPO9~1^vZQU2
zvx`>oV#<LrGXj%T5QMI+BehR9axh<BAAB4UML>WF%|q2*iJvC$YaSxOQldV?e~L_@
zTPRuA;o|Md%vZ5}Mn&h+_A2br-}}0(S^20bjFRI>#nM-q-80;?sUq8n%nc~(-+wsw
z%p@Qubh{PwV4f?WiT9DxBEr~Figr2NOEhSMra>fBC$3WARr{^jN7h%7hag-S?#Wml
zIJ45L1inobMuEgbc>lI&0Un7HUyo$$8p7}ir6})zjsfU3UUMD{z1aEjK6AlzE5k<d
ze|B0xs$r3_hF_T+LdR<iH2k}P?SPI$4MNt5K5sYVh%&J+Q>OB$iSq~b?(J_N*P!3X
z393kzxbD1SLhbORj%A~o76SDkZHRb~kpLRC0O_!%+J;(VGMqbvC<7rNGXL*^JO?$A
zc8nW>s9EzF(&)s_kX}S8=6Gg|r!bNp_#;H;$HK~<8Iva3C{@rHG<IQbohJN|$Ab@V
z__Kj{|KAf>p-QRm2QuUgj~=1D8Xqt)inpV-#iXGpTF<vOSSto?$c7f#TwC@V;NyKk
zq|7D`wt1EoV|Tow*NYj7A&WYr@WkdlILCxHpM_=bZf|9NUdvpU&QtT}((O{#V$kbX
zUuyeqGEzuI(i#rrV>y-x;sAo931zPC?ow%lu<Nll6Ad0X*s$|*SI13WPN8o-@8a&Y
zA6>9R2HbTaoP)RyXZ>U*D$gx38*Fq<x6<O>GG0-!$3roZja6Y~6z`@LhqAm&6E*NP
zE*C~NOvI|7MX_x@nNnW_R7}L&`#*3DZnc@3#z=zvH%<5QKq%+)@0?I6u{#CqJqy1h
zKo>go)?d=-O`ph^>T%`z*n4bdnyqMD6+Dq^xB50WZr3@TdhRKGK>LINm`>WQqss}J
z4Q;UPoerYq%;6J;1G1@}Pr4Y^#QiOz+MdxZX?!mS*1_XaALz~{4L2}HJ>EyE>vw5}
zoiAL!!CtI8ze8<?*IYi>V6(ij@n&VVYf?#vk4TM%<}vH54pIF_>7AzzOmxh$n@(JH
zm)pgo;gfc^>$dbAbshdz+09A6sQ>L>_kZK{-bf(PPka7V+F|OOth<5nW%cV1AK$3J
zNDq_(B8%a@aB5uB-y3%(+)fsBkZZwExJbTnDpDkM7dHng|I7{)tguC(a2k3l!KCz0
zdO!dJJ2^TD%iZOUL3_ICt`zSJAG>I~Nw{LIjO+d?c`Ipm>c2K>9|Ps!K^r9oW2UaX
zedY{sjO@L+B~N5U!2OmZB?u})`ycgpn{nQ@gZdR49m)J@%c)SytjFZizXllRi(f5s
z1wgE3olQ8~uYycjwQT3Th)Dp8noa!%uk9e6o$b`Cir5-tU}JsYG%#wPIi2`LaU1ZX
z*|Z=}Jp{B)0uP?J?h^V4ghyF7A|~+{bP;)HJXk5vO`QQ7p)6Y5YEr~?Jy&b?3T3uy
zX@WYJg?O`%%hznbUmB9!Kk@7qF1SPi6GeNNlbFU>1h=2|d9q9V%ZYVLz|ZG2s`*<i
zC!(~l@H~RE1revHPiR*vftJd95%<tE(@R~gZLkyL#YZ<u3ohBHaMzkp2&R(V;tAnR
zm4H{<xI!?{Z1$k4ao1;OF9ltj0WJE}+4O3u#K4<O<n)yXlUZ=08cB5|avt94-|d5v
zC<gw~$V!^6khn6&jM3mr>Wpef6v|?}#WtDhMSTGZ{JG;;j9xSmy^iE?t^%5Vl@umJ
z9l5pA0`x1yVlrb_6or<KX^ilJ0~X9JO|9jSLFK1;O9L|odgpqpG~7$qK&NpMvLa!l
zQPXAaf>s{v89|rQFPfY+w!AZK3cW&Q@pi%-DPE@Oj4jzqbOv8IhDwI%?eJF&&>#I!
zIDzL!-L>m4jonvPM{^vWsn^I&FJEgH|5|Z7J8>qv`i?(7Z+8Q=vZa}1)|cg4L|9~!
zyu<P^s(y+O#q+Tj2pPv}Pc)Gdd#|R#O{XxuSsjg&nkRqm9l;L<1>3Zi*;6Q&JQXJf
zUl3DU{S-RCBqj=9(pvReuT!)jPP^`?D!XG`q>r9f!##T{DE5e#-2Z?eW~kblT1eod
zGkM7XOd(tH_YPgq)qZ~6{;v2^)_79n(ji^)#G9RG(j6(&)Xnx=>!4kWzuL6uh0+|a
zo+p0qPP0binKaG6Rpl-fzT|}Tzqc)r@T|%MJyN^evZln;jy_o_$<tZpri8{7dga71
zKJM?ha3~29-Mnj--t0}0^0hfbi)3C6O%mtTOnj{onL2w%ZK15FHTBvXIFu8uvQo+@
z%F#HMgjVNy4&J(3O)}~K+PO(`=+|~B^%xI;(%*8xHs;Qn@$}hiAiVC?Xdoe~KGI5>
z1(n6<7vEI2K*PuZ3vWM~4tx@$t`hmT%2~yFM&G*ZO{W3xs0wkkV$R+ByE7@jniE&<
zCS<D#5-o1<xOBtbKE$x3zo#UPJUvJS7dKwvhCJvAp2$K3)8wc@MCRm(PvI)#m43^|
zq*j}`eaZ6rUvXykYIC|iiw_~+Q6)knkvtT{rRQN?gNzQCL|>(i+hLA>=DxuEQvbLu
z;9oNWgURUFBwP$b<f~W<5oe~wLmFWJWkVm<#0gF{(cF|4E!!hr;QR_iDgp@O=)@`q
z!+|p~Ux|cCg^qE6L{O7g8-a1MLoz}!k~Gl}l4Y0`44CnOGjvSV4{Ye;Md52Uz^utp
z^mp+Gvi#Mw0~MGO;o}aF@dKPC-G~^J^~ByZmkfQ0#Y04Hi6vB`ON9HXIi6hCyk-{0
z-Q{S(Km&(>I|^H=Hhxj`RB-Hhdidt46^pLcw$6aOg5IaSLGJ!$7zwfE8lE<o!~o;Y
zC?QkaS4*qijxbG_NH0z+xL7ItPz4C2Q1pP&XqwLKr89Hjdno8&J8@FP!UzZT59h%#
zaesr0T@~D?H24Yq5wwND7EKWUaDM#9B}iS}K1lMyqMu;E%_U=3UKX_+4fPq`Hxll&
z76+nY$3=XSejd4oOZFJvu|L}iW=p1jiny_`O(AnKdF!wi{nE(A=2>=#JlCG|J&EGw
zB9a`x4vYPZtdYL*tX_HnA9|?gkaF=qe4WFBC|ZzZ)3$Bfwr$(CZQHhO+qP}{rk(W$
zJ*h$0Pn?Jo8|#pCN61He5)v*xiCKvSifTgA;Z{vuvuC>Nj@D#Nf8+?;b>sIMI_F{%
zISM>Yjc94RjnKO8!VHl;?MtJV`9HG>%p#}mgE|{ybq)MhnFd}-!bjo0wOVY4Ol;n3
zSnRPCPDc$iG3xLreHiA3B#15>6J5ea2Zh6{1xM?2Y-rs{TnJ}-N<QScUMT$VgL+J7
zKJ1HJCakM0-u(ox%SgI`Mc^pU8wMx<OpFk(3DQ4^5?wK&X?|DLzo52CsC%8wxT_@#
zRw(_3@w`#-7USOM>aS8qfpTGsUY&m0u&H-MfUCL0^s!A^51V2yxNFjL5T*ESNzU$J
z9>^$*OXo?KD`4`B!$OepWIyIKa@Yr+%F*YNQusJkIM~%j`>EfO>IeSHVSv(WCxJ#r
zja)=0QY-~NcSOq;6{7P`;Fz1DmW8;V&i6+U>%>_t)652B6kSuTB3+n$R;_3IL0N+}
z<xWeARW1;2ECB*vWGx?f#UcR0Fe9Hu-y{xx$2ZFj1z(6@F07kLHOf&K7_d-B2*bO0
zO*-t|Ju@PBXj>9RN1{uLV|)x*OX;gRay&fAtmHy!AG%8?iN$a>0|4diq7Uof?8?$;
zOLV_zH7Y07Aae@fTSu^ebYfaXcqtZ^kmzex>uvuIAbqS+e5}_n=fjFF+E8)V64$;5
zOrB>W@yGZ*5yxxdK~ZbDV>E(Q!#{@nH6*ApXQAkLJv*q7Yoq9EkU|z#xi3aVt5*yl
z!cd>)b-6=<S!#?Vm|S8|!@7}G@Gq)s=A^<=RzbN?i%{L5g813;&irjqJe8Zl@KZaP
zip#qo4F?X$vO2syCuMrg&{vwa6FL7K1lrL6%<mYDA7)}Y)l2dwvF1b4ajM+CRG)~t
zdT+vvj_Kiog-3Q4;szW!5m_+iAXZf5#xN72?Ocb*V8lOADJvG>vf}00`$U*zHOGu{
zl?X!lKs49iITcIC=u|zlvD^hh=*18Cf+#W^gO>RRK!=_@mPg#1^3ixexIS%<;^gdG
ziok8Of$r)V49}-N!cz+n_9YDPt*;!-7V`H@bqJ@924)4PcKpN^7T_QbBdDr3N}xMs
zB4|8YShsDTByRBXb0rb{V=1ni)g3_Km=B}~02EN;3=qpBrc(hv(dJB8{Tm(!r3d<0
zYHDi;{pfxYOTI(mg(I)Y^v4Uvrl6Co`5UyJUhNduZiK=*D%Q8vHb)O=tLug$n3ky5
zRsH447DTlQ240j!*;P9R&|+Ve|0aIilv@(=@8t1>`<Qza?WZq$hwM*up=7v3?WS_+
z$1&PN3RBfNB~VTQJ^qrWh?mp)&dw*d3YS)PIUS%ZPtBQiD|K#-wCSzJEosM(+%-7t
z3oJA(_FWjYkq$xNa!Kp9QzWJ`ZXiG)pF6>NKjM#Kc~w#Ym>eVuop2VL$wNpMG!bp)
zI<bN_DSHU<12R>-8;}WaLcIOxwax)_Z;k(`d*z}*U}`-Q3m2f|E|Fpstwev(^2`xT
zMTe^c(g@3medwzqN_}*9mkjYKnYlWl5?YiRR49B9-ZXSLO(cQe91h@R=Nz`^v9X&z
zZ2O?1KIyQf5S7WLYk@LG*F+G-im@L&pxl{e@LYA$(JL{hcJzASIT{r~DOKg<$F^Yv
z*JzbR=Ve34W1!Y(^$=9uJOtMT;mK>z8bHws@SR%-#XW<o2E8HV5v3t&!!<>&hD(7k
z67*}dVvMPZA7K&WzHpg5!nQT6xX`Fa%efZC&gLCl#?KR9>Pb5StK$0)CAi)QqQ40#
z?{!2Yw0ep-<AVAKxq4f4T}uFeqgeoUhd4}x)*r(RS<v-E&E>J7Yx-Ap<D@uWR%xpp
z<@M%exYHn!2iyFsLoBlTUwldyl)&u5%|?UzG4h1E+!037u;p$x3lFNnbRIBG^p2)C
zRayxRS^=%>QyVHY{pA4ylHq~IP~>dW0*co~6G4@?;w5&VM<g~|YO)cf>9^X69kHAN
zpcilGr7#Th!c<|@W-_vUch88gkriVtK|5#2hXqx&!sQCN_QKax&*}SsQj!I0+{HPw
zYY{sgtGQ#Q-0M%It{cE#IJ!%#WvmL2FVw6MOWS6xp|=0xUD?Vp1xxJZU=Atwp?~Xp
z4c(r{_!>TM0;}fp4u2ZWh_wUhrNQskD#RRguEl|4dUF|M5CjEo0&4Io7&_jkucI#w
z3AQg4Ouaj@4c|C0DC*RdAL=}LK({Olc4c?t6cumox_;F`V~Kbd04!W!TZ6K?xhl%9
zZwO(**2mzO4)aR|){jb@pBCqL$PWw%c;wmlcrs_IC_dY;DRat06b%?3zvcj8#~JL>
z@;O8^PScfkC2FDAkp@COVDdk1T+jqg_4X-~IH$=1kOF%!H$(eW>sAmAyotW;(a<=A
zf@0<u4K4ql0hgHtz<!9H132)ISFet^DfHdo^9s||KXvLF4%K5~BI0??5Rtx>#Q(%N
zJb59d8p-+AExv(fmd(vQ8i{vRJgkZ8<m;jn!)m#hrFRGtd~2?Ud~<F{lDg55Y9`;N
z6<|SY19G83N|O*FR#+}Vw0z(ydlng~4F>v(0OoW+1gj-dfS2WJyIdqjC(AVT*5^+x
z!&p&@txssH(a|Rf=!z4fM|31wvX^v5Jaku89Aa6%VH8C@7))zt^;J+O-aju?!dgCp
z2N+_EY^>&`RNKezRS6J>cchd~RRPqlNax{UkT?d4k_1pg(-wbs(5=5U(YK#$t?tNA
zf3&nv!#nj*p}x{sbsLUO$451)6zYu7DZMQ)RGA($p^l6$uVVqu4FI|fdO?eMaS0)?
z30N=TMnFKPA}kSZDN90U3a_^-%avE!2<o#wT|?wiIB{}mQ^bEw7iclBsM=wB59lf(
zrwH4yN6jUQ6snAEp)B2Tby8r5Ff<0&5EyVEe~Y#2T?bAUTyko~pTtvmAdcRwWUKZC
zT4kVFMME>`6OxYxp^bc0Sb?F>jNw9Ie(fPW3XIV$3KD|@xcS}8X@yF(1EnZ@s}Mqk
z&@T|#vYi$)n5rc=3ck6f?lVZ@=aYV*ig{h?$<Kot6%^yU4xax8De-C2s4J+uI-NGR
zX19zHis+dJ6&N5rOp}wITq+B9LzZ|H)5xnGsX<$%J6zJ;P^}A=b*BeO%K*%n&y!7J
z{A7*<1J4Ra*Ak}#=_2bO-sQLs7p<oijhI&Bpg!tudk_MWm>8&-TR*|Tz7OduKT5XN
zZmn3O?8x+(Vo_R`c>;&64}7t{2*`KAO`MEACN&yCbnX-Y-zzi5dys<6#QA9H2DRc+
zFD!w9-S4UsC+o+`Vfj)!iy9Lg@2zTVjZ<6hWlwIRm}BXzDq(h)r##(-29S#$`y$`8
zN}EdSo^Y9Fyo8+6867V0KVU1dQrsi8IKJwYabPw)9h<b)BeM(vuE!JZYL{*MD%s_(
zuplx*5J;lHQr(-Y{kSf+kI9<pR3pL>X{u#V<AC7GVSr4Uh#fXmpXisHqZ!{1`+-{U
zcA)*R$|eo+Vx0!P3*Um0lpl`RM@%)<M^IK9i?R%lFWH63xf41Z*YeLza>)Eu+uGCH
zN~7wQHe@3Df|jwL2ds@|!Mb54ym)i>U(bTVap51g8`i}dHnS&5XxH;rd>0c5za;sm
zT$IyvN=f}S)NSov1YNm0w=$;0)G?LXV3W27ah6H91P*Vx7Q}*edNiV#QMJnfQQd4U
zk*f?QO=(FH%oU>0pH`uUMI7qUhYgt!oqc(8cA`%~=@gji<Rf{bU#S3u*fn(y$Jm?<
zJ+P#py)-7R)gJD3y+UVnj!cS_xrij4E>BmFwz!1qlnwS4Io`QuNx@^Ep^7Q*$=-rp
z{H*u<k!Y9bcd;@`NrinM4TtX-N#Ot(dmdqO=h1#R>teh26lxK9ijdZcD}TJZzYb4o
z9DfUA>7)zq@3&%~UfmF$adY&eEZzC;Cc?_;X(>a%Ab8frG7?IO^aet1t`49~G-^i>
zlU@j1gWdH*e$7X0hu@^&-g4SFw1gJT>V$$l{|oB%$8nSsPF`_fM*rzY+W7#j?i&p4
z0<eB^==ag=sV{0MT9eQUdw|!Pzz{AbMTTmGRl<=4DW~NJDV3_Df=X4KHi^|R*9bQ}
z(iU93GL`kC7C^tq%@v;#Tf%E4ZsNBZxxsc<F=c6PrF+ZO&@B<pn)L<LhJk$Tq34{#
zbZM;_VNw_9_HL{v;Wp$*4pVGifVh&X?bPt#P)$c{r4WjiLQ2>#Km|Xd=jX1=&u`1R
z+j2Sb?`|gCzn!}q;NOt58}6g405o2;UEQmGFQ)H3zm6(ZoOr|x%zJ?&Ss1YzbZW~g
zqYD?>Oo{0b$GSRN=d-Sj!V+JIIxtgD?R|6YSuRLzi3tCM7R?U*3xk4l*g?MUHPz_A
z*>|N|1mOZN>dEg3CTURDTnb*m;QiOmk(GYxPdji_s!rcCi{eG{1UUKD|D~M>7XPQ@
z5~0)VTx9+5h?BbU=eKF|1D9wnOt!=1Qhx>JYM36HPs?8+-aDv}g9M~+04U;ZD4b!>
zj;8O^y>HGv=^JmCy$pGfQWD$)FS8MhebV5e8C|tICfV)xi<h*+OKyzNw<;n{F$dHv
z^_D9%(|;Rl&$OqosIodg@6T)Lmfa6o`FUf@T=f_>PH4!Yi-={W0W|}5x?nZf5s_X)
z%w&x6=GD*EO1u6aUjU3S5U3k6yO;h<3C{~w2bz{1$4E^fRl!S~L3?~wB>#|2Gp$1o
zQ3Ng%KTmUvjcz;O8_8)fNg4p5!Pp!r-j?fUdDH@{>&oGpcpf33aLy_{*}yNjLK?9m
zRf@tm2r`10#$i98?YwjPXCVEfX5C#@Pngi)Sm7boTl4_UHIrQ61^?z=IKHweCyGdC
zFAHbSY6n*s<W7I==$Z#NhI)JQnuJ|ARw+tjQw|e%Wu=I@%E7MBcq}QMo)*nd#wfAC
zAvtkFirLZRSp$Xms~ce*<kv?1Q}s4^r<O|dc3W>RcL)gMI3UD1e?ojh_~a2_hE}ET
z9yTB`#DG!vyC9BTo6a%Y4L+t=?2SLG_Gzjt1xga|Iy|}|g!!O8UBdh-GXgHigIWL@
z%R)ZWfLEjXSFYjuOwCbmE_Nnb(X&~YuvI7~<?Vh8WdH?Z&aB*bCy7ct2Dg}2I9c#c
z=#t*7*@g!kz2+KZQw?Rry)F4`Tc#js8jTD=jAatvNy%~!xFE$4LS|~%gm8{KLcwdh
zdzzq;*MYSNi_7iBo;;svq=6q(cGP1QPS*e{3{*e`^Z3ipKF0)j<kC#2TDOSzKU2k)
zJ0FiX3?wffe>#U<5kZDP+}lz-`|>3l7M?FgjIzSOj`>17ZA3H_AIyavO!XKx%q3BI
zP|qECt4_?skI8E#dv?SJpafMY?kxAvbilNO;Up`d$FqI&FF8)n-aDYoUl}uD<1IP4
zF`zFOvb1xVgKOb)*>WLME>i5iJlZgd7txuuANK?({r0_}jg}5YP>ad>dNALG-H+q}
z|GB%Eltc2%E+gPzA^{ji1pcRvpjL-<Ov;I!Qd{%${%mJ90ptZl0u_$GsJoD-bFc|R
zLVG<ELeP-2j$kS|a0!{;Du7Qi*p)pVeWZgS?3DmMQ(Jgy60k%%IGWTBF2OMYIux$F
z7TqJG;uXnazijRD5h%}hj#k|D3>R`~K_`*vWa2{u@-l(A5W`qyVtM87wS&TQgIH9^
zw8@e<RMuzF7&^XbBUz0A%@ySNZxGhe1(zjsB%5DVihfbx^0*ZdJ)~;>z0KzKuUB9y
zUQ#6^vOa@t7QrdLd-5TxPB5qrp8@8q*Bc6YP}qr;BkbB`#g<GSDIq@^(77_a2Z+Bv
zX<Ua1N2Uy@Z7w9%rzJx!l;tB{98Ok;f{GW97a!5WN%6)b@W1(Z{;*9Pn4H#*-}7;P
z!%Dj!#=WR!;gFhauPrObgqui8gxbEcwYOKJI?jy>131Wwe1nb%i}wLy3$X(%k+;{O
z1_ZqdbjOvp-wfN(Y5#wFpY~p!aK95)b^4lfsT!m*?P)ZX2!LKj;f}*Jag8JaR@cX#
z0KR^5!C&{<f-hh^h);!MADYg*^OYLJKZhjqDFFDC;ig?_igDSV!n{(wNDK7?$ZLfI
z$MR;26F=wrJWf;)F|I(onqEMTIMXmb6vW^>+=-Ndhx8af2#~?$7HU9T!N+E`tDeg>
zu3Lwk#!t^?(594L?gJ80S@JJ-ZKwK74~vg+2C*ZPo7?X_MF?3hW>3{M?B-aw@b?dc
z0P;Mn<_z9u7AR)%j8F@xe%<;zm=w8k35%2V-uY2c(}lYZ)g<2a$W0J(V4=fe{?WqE
z2cy#)NYU{`tFg6DK77~m_z76m*wPR%SuI)K=CkeRxyf4P2HN2bkqB69y0zn3baody
zk799~Li#M(wI}@_*`Jq^Pc_TD{MGEzfXPxv8r=Kp$`-7UWI*-l_5a2YO4cY~(R#*=
zYk1q9>56vJS~3F$I-D(k2)u~JY>rWw`VSh&KTJ{<S<Q*)b&kRReryQNbSYErV}&#W
zR?!EK@)tsvmi$_Ze<C(^sCY^cC2z>4U)JNWfvUn~{;GO=_%STX;?@iTyn-8^C;6d)
zpj2NXLbLXRfIwRCc}sl)p$ei01=FU;1X@;Ing<4p&)pdF!r_T9_VE2vKtpa`cqpoe
zlmS5UoWA(HntYQ+0?^<o5gqoz{fAUT+KK@2X9YJ_R%feW=6`5C6fQ<1)`&rVkfB~5
z0CNqy@U4OXih6G^KR)Wy(W#vRRV1;tNH2kA0UMY>c|@*(c163Ezf|-Pz<Q&JR*mZ<
z6oKq=qU;DpW><mR`of$QDNPm*D+8uupIZ}JW8r<E3j6ZFZnvijp=0lR!Ti4=<^(_L
zaGVaPNQwFM=)?YjHeQiAT#LJ_`|)SI*%N;ev@9_;=4|2|@Va7%Y)VR?SH@>kCyYBx
zKKKd{y`4Sx{8}qj8m?50C$|V-U+VydLf0*f!q+Ct859VK5*q7wCdE+Ha(l(ITUF1w
zzwOWMhcw19E8{A>EN_BO`FGe$*m*BgTFi`X&AanoLg<_YRZAVLfvLGzx=jkU|F>D`
zar5eO;U3kengLkz?rqc~Sb^eMW_MNff#5A@ABm)6@N@v9R(CpYa%o#S;Hld;nVAoN
zpOt6K;pG`V78{%z1&!%FXm@00?BV4N@Ij9bHLe~VdRzU$B?iGNd3ae?XDrN$!li99
z_10{-A9LzVL9IPuJ=RB!-8I*0o&_bpX}O$+tNs&u;WN(GU=X#4qDvbr0pXHE^hPYw
z_zBSp`i22@{~T;oWvdIu>8<Xbq9(Mm27fdLkn}VgIb-V!iFwmMpwy@toA5-KZM8n|
zKQ&`G-11`Qy?^CkeB`d-KO$`zO{hKkwbJu_@DEfE*Yh!7{W<5Z)~o2z>U!Uex_-C_
ze&qRd>J9Z$a8x9v9dr5#^*UgJ9!2h$4WhQIY0+T`G~fMi$Zk;gJtVXdc6#C5xsryJ
zk){p(sSin2Hont&p%i`TK1aNL{1HwL%|k=CR;W+4(;%FaE(u1|#Nn`qsD}eS6`!A~
z0l1k;?1pLQz5X*Tcl<q+(F1JFdO4f?G8681CrC8@9U&2>6sYm@b6cx%mz$eMVp+Av
z7(saoPls5--RGy2%*!mkm1J4o>mrng!hI5c+k>FLh@!ubT7{6NH@B3uWEhHA#vyT?
z$u#scv`<|Vw(D*S6G1#xtXdd#QrYd?EKDEZCFfqIN$y|dRt*zhy2iZzuhMV!RPpPC
z|2GDM1H2hixjL@CHa9o}Yf&@@WHf^}-H`~c;)YpdV}gKYvVvR|qE!6uCa|Qs6wdY1
zCqr1K*yct~vUbrT@?S{@z@Wn}>W^Zocze?AtwvBn!yf@cmkB+lY4PL@;l((FbXsJT
z%&WW}WwY=V$gT5G^dO-pW5J>TeWv%VL(O!wo^JV4`sAmRydUG<YMwGa5h!O|pAUlF
z#P%tkuPIx-a=F*Qz&}Vf8WG<eS|)-K*Q!sb!n@)}hr<T?g&)PS8<2`aW8ry*MIrZq
z)nj?I7jsbsGu1HJB+Yj)?}uW*HE67q@x)W5;QA#<_eTiUYZ?aq^wPE>r-wTv<JHkO
zRL|(}C8_4s%e8$M?pd~ntlYJGthimwN}_@>qpn<56o_d7%zoMc;JQ$tMYn2gepH9J
z?DFz+(saGVfoc&2h0{$;PgNZ7%BliQ2>R6_&?0DBMLxQG4!x`=HY-qC#SfIZV=rY5
zCe6Sl!G}bhq8N&DdQD|v6)omxS{9*GueK<#3q=-wY73vBti1Z=2bx_$(eCo^xyEM!
z{f#(@y!0n!V+#&MRt)`M&h}iM+ABePq;86$P8zacwC1ex*8O4{>C=HLo0xR-^Ty<c
z8HVDR(*%0Lx{rliY?(`ADoDpDp+47nf7;RLNgrMbXSir}N+7jC5yD?gHKcJ61=O&S
zHut5WCmZrg*n4mIsSc=}5{mZ+37V-r*)-=-LC8gI*biq~h6~gpm<d-+OES<y3G`w`
z`_}>ar|2{8%H3cw2_u`}QOAiQsj<TbG*So@o2~=%bX-%LF@`Cg6gv9XHPZ|_;CVe?
zwpRx69xj$KsAH78)jihkAPPaDMX0{PINCZsApv@b<0uY0>D`JL7TRC8ol0RQE<jIF
z=*ddug?EB^bfbm7D%&8%1(s2<7H|={+;mhOOG8JKkPA@DEU@Km8?xSS-J9nSy5XkS
z0VK$qh2gXsghjjilcSDJAs7c86t1Odm7`(VF9YA{RKAW&So<4>oDK+J8mZ<xl{~qF
z{-EEu9f>?I-0UHs?Cu#_QOgdD%J^E_8zK+ZDMtWk$!7N7z+%S?8x?`s{@9SF9vZsw
zYtMDG#z`f4J$;+4{T_50{JPvzXuh<K9xUpM<FMwi$%9B#_r%B}r3E7RBNFlgiun3V
zz@96hx{|3N{&+dL>`6HJK5JaqdJIJnX4yt@kIjUEk^c0l;y_OC?EF#5*v0sn@7pSw
zzWTI(jb)>~>kWxJhlks`p#E8=K_61N-su%<_)}E?vfjXMg;=u3ByO^4EiH!>F1IB=
zEa)^_DJVRR2u>_p3b~uPKx0j0k=B0_Y-|SmB<AP1b*aRyh?I$8z19Ee;+)UcuK+{9
zEBUZq!y;8hX5p`nD3!4Ja)qP9GtH6NyTfH988$x5{k$@Ha7oqSoS_sghMHd^YMGmd
z+c{bZaDabc4%l$Xp<~F;m_+kH(N$wX7LmIOAJA6lkuOw3@3jeDAvcRZm=y3qIZ^q*
zmGqNb!{jiyZGK@q?<X`P!y~7oltF-=`~en+Fb~oWMKrV{yuNxrw!^tQ{&2r8TRKv)
zjpd*8)Kd+x+h=CeR&VeU?f7%E6s;EtO>=T;<EbZ9$i%b2DW%*5<SN8ea;$=t8;Q{g
zH^>BwADdvy(ARa_>EbJ34-F|ndM@>jGLyoTXJl^%>Tn#NNRi_laXRi4yD;673Xa?O
zlu~5T5te!|ZiAPf%XJCArCEBrst?zY!)KB5HVK8t7^ojnze9p=K6n)WmU_se0C7or
zDfw3l>dA!4v1gI>r)Kz2Uch8GQ|3W0hz#P!HPfO16Pq%T@xb?K<D)3Wc4A{D(_&+!
zL_w)?GJBy=kndeFA1!k;roj{LTtz>aTAnjX-uv0O$}_qM->G7~n0}!_+%;xS1)?KE
zBAAhvUW&>4bA*-!J7x(c5vvt!G&LNryqX*?sQh3ShHmG^zV%5gQm~;~L@*R^x0_qq
z7}0=O*n~)f2REVL=_5eL#r<j(9I}2vj0Y=WgParLsk5+*xH0DAV?)GHvdfFMMFVed
z?>2>n)(jmoW)txuk%LZE%!vPZC3gFL61o&_*f^hzWSm8BWjd01sds7Et<H84r_)^0
z0f}vkYSX}cnrbbjMS5`|T@m>>R+@u+l}P@pwtopDADRQYPiX0g)Rv?+zktR@1K^zf
zB;bl{gnX5aN$+AC7ra@r3^V?SB5Mc*GuoFe>dzMW3ng15J<=38CI%DQHxv)oWD|{~
zGfKj-TZYZG?v@$wF3>tg2||V&8=&MGp|*HZ&)~)d5R!hw6h#YR;l!b8icAoI?yaGO
z2{DKm`&n#h`q#E8`CtFyk7QO80JuGCy|p@UYkuK=H<*({K|zO0K-_fYF0(Pr87W0b
z`EKQ^|7{+=YD_{Ktq9{d8as-(0actx1j&J1wkI19V!{fAAp5Nzk?&G2O~YrQ!=;{T
z2iMZ-szi9@cE4Q;?6FtF%r;+{ODi=!WI>=);|4W>I<C1;m96PtC%`YK!A_5mMEt{x
ztK<#s`?e%?ws2L{5l!+H<d=Gg<W`i~eDynKl;IBn20^7|LA5N7UXvKM=?OhL#)-g=
zX1m1ZL;XVy77t?^)r(J&ydKB*J{5DX4W8*8=$%hRvc##fU?>z3z0b1ei(o`0SidBX
zr1#H<5Y8@qfjH>4Zi5gO|AHrAp(A5R6^AGo`*Gy8mE?aQF*9W#b<hZ3DLv>Te|*Bd
zKOEroS4l*pq7#8w1eWIulZlGea5W1IX>@Q`e$LLYe0YzZ*!G|XfNT&A%!q<)+tZE1
z#Ug)d<0U9QbAE++{Ug&*q%0u))Ruy(L(&$<ol6}a?hXGum3)4Avi#qSAI7?1CL^AG
z;N5e=untc*ZhY9oWqf9T+<#(8vHEe`_j3Awk7qsqydTeOf4-l4UasO}`*n|>#>cKp
zU&@<l6eJWNs&_g!R(M!)j`CF$I&9~)x9!I42Yc}_<UrIRfz0ylz=Y(?Z#?jMWqxo2
z8Aj0oRfD^~&JX6(RrnD9B0-x}@EjBvutLFfMB4l|p}0fdbN6uO^u>TFNfpb9mRGJH
zWp{l{m9tN?uVTxt+ekO=_l!8`?V{*T3TYY9yZ7>_H&f(sZ8xw78a}@^YY*rQ`vG!s
z7jg4zd>3o-Q0a1tDKy>|=H%L`1M#y829PC+!l>?fChx$6d9X}mC<<zf4h{)Arxg5L
z1VAVP@k&jK<;2*_o_2a^JF#NC3GG9^k(*r%#02CRBZ#v7ub8HD{~4)F^3xXb;U9~P
z15<4DijoP0X{xoi%fG?FJr0+9ul5H=sElZEtch_!oxj>GAXMTT;Yh9^^L`<M^p+FU
zCuRUCVfTS*2gf6_ubHxVf4m;-m+!EUn)RT%sfhviCa8*dq(qCk8r$2;=QKLaLcSV-
zpmS}0^G%PT5Mb7U2u=tDSAR3ibSk<W861FE@^vHgvKO#(E5i`FYhZY6lqpaQ-jS{5
zgC75D41hobBmTvJe?4f2fIhc;1fo?(BEe+9a74mU)d?G<Cp^P9{&|q(<XKku$FNG@
zU*@~b>$$0D(Q>|?_UiFjHo`d4oWMLnWcIB>5%(=j=g1VWRq8p+Zob+3ewh@>S6<wQ
zXuMJoRFR2LX+e+aJXqv>ZGC~s3`mAUMWyRF0Mr3ti31bQ)tC^AV<%WM=Hwu)O;}w%
zfyKG@%;aqHq5$T?>k+qE>jgA64O&{P)-#9jKGh>p;N%@0N6tmg^dx+>`vNB1A)-&U
zzyqv#@j^eZzz_wg2zNZ8(yFx#Sq1X(7JUHsj9Mtw`{rIN{zH$xYyv*xl!GhjwYY0C
z{(+!i9pr)0Q9(heE*IWAs1YCeA2U1*0Hvor&$iPB$82^WBEbJ|*_3EmQouZx2d%;&
z^rSU;@M`b#_+xFF1e#eZ14$`VOP0tJ<fO-QKjobaAu^1b6CxTnq}$TVA9}98s-P&*
zxtRh@#5I*ouV#HL+R2t@nC%r#&5i_z0cKEKb?tBr*w!Di1{?GXR1<De-#bV>fHl%m
z$O{2TqsF|^2Nb)vzrRsN_?(A3BTZ6*>bO(RaooE-S@GfeT<~|Mh{1xRDd!&iON)cp
z8=+S?0wx&6J4ry@;SKT=3qTpe8`e9C)QR|`H=^dZb#a}zueHCQRHW}(#sT^#b@5Hy
zy9#}h9s9=8-tS8_f^RrRx0eKWrs>y*$$O(zMd2s|!REkR!3ydhhk+*mnMbgWO0`Th
z@<YwGWbl&uJP6sLqpWy&-RcFgYe34G13y3%D2qV+@qOiF@TK(h3zJ<xBFisuIP@tJ
z%FMC}oiOk?#s&1m7R?GR(gGpL(Ef`m6$3(c>Lown*X%yw*4-E%MF6`|d*c-$2S4cH
zw}?Yo`|>yd@xr1(S~Xmh<r8tmz+og7Di0SK+p-D;AK$PyL|6St?rB1JP{Q>T9#n8w
z;^k|Sg&paz2b#F$dD=98pOT^WJMs<@sC!!gTKK2d11I<7;M0{n<7&7$FD?~|2=G@6
zjs95F;$bhnA0Lh7B09dRN7{J5dhw|7K|jS3eCl=NYWBjoyi+CS>`d8A9H>|t=oVR&
zyta#dofK&8J(T+~(sa*Imxs6%5DgxhBknSiFDegXG53_$gQ2Dgr^gUfb?H`9Jm{it
zIw=%#{|3MYQqb$Xz<QFA;5+yy{V#Ik7Dzbk8MJZkwBvNtMb$$&8%54|LzsoxaS9jB
z1bx=wxx=ngK4hFLJd>N0YT~QS-zSEt97t<xahN8Y#MqaHtVTOKj#?2P>rSRw+AeP!
z^X$O4WoF4H9*d(m=6BByrKrI#{YA>-Zgp{m)_<Svp<{a2D}!A+LtA6*4Ij<TzvJs&
z`aW+BpSOm0H$1eoL8F5fzgsATxesjqPT{?wXwNwe7qpb8|NO^Zn@|szq_9UqWDC;Y
zcvD~8JW=_>RKKu|99H|np0xOrf2f5$KKB6JS8MQrWIepgHttsTa`Ic_JXyAeD5d_W
z^40fsDtAx2sZ#B4yQx$`ckb#`-Ml~R#9d0X#hrE!4lf|@@d%BH=^rTxd>@KsE$vYk
z9?=C3>F$R9G3^3Es{Lk%DhJC7N}qvWOKUKaRooqz?u0T}m_SitzjobDhlLG+x%&~?
z3?kw$)?#ctU4HU=I(U#pkZvNHrAHO46fcmTksVr=3$}2-G8QR6qXsJlDIp-X<hMqo
z&#!={82Nz!*|m$%`or}F4Ajg4WUqhvrL^84vFrO07bN#q{g%rO$zttmmn{3bE?bj>
z&UGl=h~oz};Fm@%Lxn}eeFZ~P%W<$vr779v*?~|P2y#}-HTH35`*2pYWbLZl)(f@b
zqAb;dp~0HmgT0-ruX0X|$it7AFDhl#lRpN2(f4MV2Au>uhbYsx|MdaF4VIcUWlXB$
zY!JwwB}0OpjuV_O{|7~4xsggxcd12m2p4Af?n8&sO8f85t?3V^eh>fF8@@}@y?MR>
zLB8_*vgqN%gvUp+969hP^}QIbL#F9e@E|9LWmIqSr4S!X$dYd(OvMoq;oO@sT&3EY
zA?hRduKNZiJP07@;|eD(^Y`LF@Ng=TC2X7$OOVPY1Fo#3c)T}MQQ@*=C&?IU#>Sid
z?NKYN8*R<0VZ|gN#&R|L)$SlTgvMHDVhw9+_h|M4yG-AhJKS2P^88Y5p$WUCm;Sg8
zc&DOKz&)7_e)?z#^9>rC7>4DY;z@A%_L-pi>9){c+V5=l^#NSUq5o_+=B%?CR4*vs
zf+HLc>y+bh8Rf<;Axb%e>DSsZNvfgY3UEOs4Bot_(x8o5){Fol7oH3bgA4I~`W5hE
zz=CU5Y$L<xG^t9D&O-XdGjDdhhrpOb9q%xH#_(tv*JpNs2FTTn4d|8#43pb;4&K5K
zw8|raxzb27{wh(Hyi8S*BCL!O>UEi%B^ZVIA2Cch)dV;y62D8wa5{rVc*gkPN!s`R
zz#sT{Omi+tjlpO~TG_VQdV)UN{9hO!wGmbjy#EF|6v|I)kp6(0paiOw6H5Le%%n=x
z)J`8p@qU?=@*P?BL;Aspax?ZNEG!`hu!=IZL}T5QkBZ{Z!D>!Vj9^$~jY*TEf6~zq
zVF%l~Np8``Q+lFo<;rFgH;|*Mx=o)8V=YQ7keewxB?h!PoreBxr9-_(0(q)IdfY_k
z#$Awe>WUBz$t88w>wly-QsNL=R6luILibd{us^xQRLvpAb_rHNlmNB?SDYN_qlIr0
z37BrWD7una$}#4%;4YU6y73cPYofxeRF;v5T>nFc#!_Z6<};8<P+zqa;J)T=xc1=x
zhW=fq24qn_DD)tKft@sM)G#h2j3QJSe9*CK^494QFH`ts$#%XBei|Z+kXkAm4zUz&
z($S*C;swcLE~XT_6CM#H63*Ug^H21f!@wy-q<k;gT3}l{dJ{1V%AC^qX|S^!SEi4a
z%xVkn6!ViCf`b1vrgSy1wS0n3JLhhzd$4_b0}&jtqnY<~=o}rnsCpLchZG<>BBSTe
z$N9?~!(f%{;aRqRmw1})KgW2I-UpInmoG%M6?Gai7Z=3dS5OU)>c}9$qL8G#<XDAL
zQxG~OvKN#*(U3VBJa^HmIn9vU=<W`R$}E$92UEAvsiyTzEyc%D*F-s0v1AnkFzKe4
zN5$GqyIwVZyP&MElbU6l+*P^chD-~`AGhY0zD=XI-4NqE;v$F8y?&w-4ss0Y_&&=j
z9^$3ON9IAS9n&(X?b_`<H8I}cB_|EfS17mZ9T|Na<bS8XtLIlaw-Qfl+hvFm&TRty
z8spVub|sOq^YsV1@2C(aX{a*Oe*pg*1T6fm2}k@N^yC2(;J@~49Dx4^{iS83W29p+
zr8jhNaHe;0HaB&lv$Xrah$pogyY5?DNd9#Gqa&u;8_*=T!+abmy(t`&=Vb#xmU8U3
zPBF9t>|<`Ei6O(M{`;7d`3MqkHctWqSs#{t<|XUo*<2~P3>ltJvqNanmAEs+V?VSj
z?WOArkj1QTXV8$S<xuzYb9=)cg9Z4F20T{70pb2k;%o)CUj-K+4rCbq26n{*ay2h+
z=J&sekMUybko+y`PKZv0j$v5l8HWT*t>+B_4Crcs(;O2x5%ui_LeXL}7An{P`opL+
zx2zzAA*lus#OQeendi&~@^H~49)KK&Opm<W4j4RMPK6D|DHy|zz!2q2Vn*1L#jHe!
z?nEjY>$`EQ*qW1B5b8LCI`R^Cvg%9FiMheFiME8MBs0s)<KyFE5l|3^>_U9}t32h6
zbg`j2pQT7sFd>H%&M&>&?6dN22cI&3eMU?%C6;j|)#!AJSj*oQ&}bXe85ggwYb@N<
zciCm8(J!50z73rL`0=UzgaA|IRUL7^O}_qC+;0rRo}A6P^cmEtWrf{#DI-=@YUIzz
zY@`GIr&v^{r9UUl26X7G6wsE^YN7BCUne|;6wYMoJQ*ErEsp=C_i(kc2$<=tAt>xw
z#Clr`XK&Szy_tC^HZ$r-k+m(%zExAsRq<%Q^ulrbo^YpBe7H!qEl=GdO8>K}1N%19
z+uFXhXn{#ma8rH1686hR*{zoI)fjX>ExFB0#_uG1k{iNIArzzhTyHApTb3iDZa-le
z7C9(J@Wh<!hDnW9Yg>!}<(-c%i7g_mYSh^U6m9f{FPaJu-~|T3J&CD8kcI^h20L-I
z<V`7->08W&vJW$;S637l(GZb5$C+(JS}%_fQ?H^79`T&KfSN*YhBM;>>P8If7E@Mu
zNmsB`x!8rR{|tIOj$--U#MfZ;R9AUKXtLSiM9e$uwso)n<gwzshL3p0Je!%oZmX-=
z>nMvno0FibMsX&`PVmP@3-hYy<71#xK&F}zE4S2-Dlalz#E&(YXvpjuW9`AzeceW<
zkKF9UjQz|DU+c54S?B-<55yMZ<c}Q>l2`j0!djQA*Wbm+MG&G)e0tzABHutv*BB?a
zlrL#B$%L4y{52Z+*dp{Ux>b<i6P?gJuD1$%6G2s8`SVllBbavgT)K|!`qhK&@0GOP
zbf`%c$HWtPHfKX5cQf-~x6OZn`evC?PIWz=GQRD=bsJODo2T_*^0@Z>5mqFA!(U&&
zUk?z;YvsptBUMtucBM<$UwZhxVD&NF&8`(}G5J#u80vU2KZ1E5USQlP=L22#0$tN!
zq&1*aFMDf#YNbWLX{Tn>WqSfTQ-8dmKMUmudb4!(P85oQFBG9Ka;-V!0RLA@!Z{wu
zb!&Iuls|llGjQ1x!fX-Gf9e1R?f^FK7<RiS`uB9w<ZXL8@D9k}hcnaFh4I4eui?o(
z3okJ1{J|XMJT{8+29)|w+<NPwtISI>D1k+xD2{t20+jBRY_8z~0&)Y}h$`_#{;H-+
z+i*#42`TwnU9QlOv^vVuUKJ{}&1(=IcRRevlIcn|`O@kYx-0dH1K*yGo>D#*=k;%$
zh=CyWjooX@(h}6VpbYKP*KOxI%YWsE-H3$MshFW{RbP>~)ny+E_<R_ww~8?(9Xr;>
zX`#(gD1C9I-0@#ia5+8o>VM`kte#*`yVn`Ve4l`3D;y+9blF$#jfy1n86i>@(+;bI
zWVyegswI*P{_rv*a-EO5t{MX3l0x&F#Ulx`l@(Q>3jt>LjzDyhd`QIv@KWA@LL<(x
ziD&O$5f(wZo+>fI;3w{X7|=80iVYSdJ=eHxa^?Hj$0{s^bfREH)n9U;nN=L}L5?PL
z3{v$M5$yH{<`_qYg1VS05w~7Os14;1;c_y9;`0myj$x72pw6;OBz+?$#NLJu^(2Lw
z)I-W8RYoiW`YyDs=P(m+K9wM<s*${hyNVY~C6sJjeZ-?ISjPfPB8-;Mrkuf_Kv`Ys
zatm#=9o5VhP2?##WMgaYIuM1JbtWxI@6>3$5pL@K1YGHScZHGJ@GQ0a&91~o(xHfg
z$o_If+7aUk-QkHi7F>PdZrKY736Jgto0iq2iFL3mS|-z@h8%FRT^8BTfsnQDXA2{1
zOo)Zf^AhFVW;y?A?<F2-BMKK%koHDl3x1`45g-njd%;9_a-6+Ct`iV1sp^8|I&_R^
zRvHN#N)QD=k>|#iB)T=i&3SZ&JX}m;13}^O;Dbp=t(-op*`!ijoK?BV*~&M-j18HX
zS@3tfnVE2#jp1bM=44sWPqX8AD71U&u|a!k&1&!87Th7v0_&n~4_DD`jb2i{@XfMA
zmhF$)m$mQ&l`SbnNXg;Q9-e;!^(0hy&>5GBCxiLn6{Emqm`IdrQ#2V;L9NDt%y$*0
z@+@qdKa2yneqYd4j+Ptklq5Hap&P>~DVev>dWe_KDUgBDg1fLwjwVLd6W(0Wh8pFz
zmHa4_3<F4s7*$3qj0K~k`}KGfUHMZ(Z7W+?OAaiP|GP|WsPTiqdR!0$=83APLE=jP
zdr0n|Jg;%rD>~=wVb0I1HuK5!7W2{x>GPu(u6S3oR5~|rYmS)Bh;D5{H>fSLOXMY1
zol@3j@M;>c61+zZLEF@6h$5>W+_sPH{$uI;`?0OdziwhD)EiR%!%kTCOh>7Fr3uap
z@fW%y&(MMcP0dAsC)%3j&`Vf0|COSl3QJoADSoeeK*;~Y3bXj{rKOZf>tqz!4*dZ*
zb+|EL)VDiZbOjW>c&$htFSb;sZE@>*5_D6wUWOB&M_jmtwYwlKuuNEzLf93!B%C@E
zEHh%8q7b8PraDyM8yu)xYY^m@j5sE^E~#v|s!?k@d?)M;Sh|Wfx7y0*cG1Sbfgbap
z3kRxn()<@g-E6Rn2|!^G?GBYH%QA|ln=_VYrYz^in`4e7YtE7URp6G~NlS~i9bB|7
z5G(b5$#5Uo8E)ba+y1-<FqyM5VMH$%FZ5t(gt?UYlkJGc)U}6NFYwVIjhP?G0<u)N
z#$+Ywb=##|e>bW{b36}{ou-iAN^F7V<n?tr%=#jq=QkrAnR>Yj-VOW`=qqn4{SW2#
zeFjbqaaaFUPvqQ>qxDBJ?xg>JFJ4LM@aJFf000r3|Nq6y)Xv<}&h-DrmaJ-fD{o66
z{q5%)6{!TljPcmvt0QzgVj*{cW;e;&DbtiDl{WH5(^NhOIAGs3>%Z}oEKYmeJGr)2
z-E5_qd3AYr`Tt-vw(k;cm*9uYBWlwiJ9YH;_j`BvKLBUaQDTO!<jd4e$fA6U<%T>j
znP7@Ira$w<$2bbfjIoq061#Q_Kv?QBhJP};N?vud5JifOA;(8VvcqyNShz!e;FOq{
z@+0$0NMI?KB-3choXr%6_&Hi+Ae<qSYlPx8`-Ufxr_pdaN{S&l+T?>YkAw}f!NBJy
zqI?e|=4`B*`ZMIftn_k75Eq;^aYSy=$Z7yQ5gU<n*k_U$`n0saJwLC&3WRaIb_up@
zASb_;aO|2kJsQ00RllTt#HDwo_#_O!os=WLKixf|fX(P~kr!hh7&@84imw^G|8wH7
zfE5?EcJO8Xv5_6`Jv^ym?+xK@AD*_nrhO40u5A}VWWQmE>6RAmej$|8L3==jdgEcM
z-igWRr`T25S)#D=I-<{z$HpttJCLOIgrkfS|8W6jaze~81+XIOZ->xvn8%74KMA?P
za~Y{$<ow=3=cfZxXV0}U(BH|Kg8%Sj#+#roo@BxQhOEH3k><+htDOIyE?<i_s`O_B
zBIdAb9l3`@9MTkw*v8-A1*RRmzmKA}X2Nxcc<5>EUL_o}wV}U2^h8hQ=DgHHx^(OA
z{~VJxpLO|#pbtJto(S-dmPA6JZ_tg6Xe`mQu)s=^$!X+x9x(4H9=WtK6`%ho5$8Nk
z#_|ItlWQA5NTzsLNLFjRAJaa;naSOnOBx|`-N*?%hpJ=I!fcGunvVv4#+n1nr=zqR
z9Vu-@W~@Wc6_YEG7<JRVi<*I74w>Qg2K1}XNK%1zVG$CQ`p4t}!~_}Zv%P$Ix{S-&
zuCD-1cfV1{Ym6t2aU;Z_UmQ0wL8H8IL0|a<AaYZ}6g{xF5zqE?lUbfTVIecU4ao;F
zM4kw%7i=Z*W7Ahs8Hp^mvhZz0EhcrmqV7ff3RIvVMNtqoLy=IrGX($%A<g0>Sc7qV
z*NQ3V4Tn`<9PUylejLc)e|dKSJ_H)m$0B4z%zqP@q#rvu(RC?H9|xdo{+^HBD30}C
zV}UwxF?UaImzQO40Qh)hE(7>m4giJHeyiE#j!T-GNL%}%bvXZ4+$O&zxQM{m=y1m_
z65ZU{$VlSJNeIDin~QJHI}bqc@V!6Boc-fqM^0-KFTI0|<X!?d-26EU)7BOWr}_2z
z53S={X(}yTz>Q-5(*hZ{$ZyQ{$#Y0XC4O@#{2GW+%Lf;izfg(^DqgzA9_2q6VFOQ8
zS0bv9GbkjLr^X3neErpM0Bu1NJVmMuK02QCqNA0g;0Q9yljNW8J88}GOp+|Gkh?vI
z)7ECpC|H$rV{#?5;J;<kDtz?wU@a_r@bTL8AX!1a15F&knS45N6K;uQxWzY-0qMmS
zj1%4l?WsNk1cex+i~(TWcXmI-n_JstX+9m#(h!w92`oGzr@-MrNb3ItmKoW(sDE^R
z=-FEXuZUCv4h4LrWD1!<7&kY4eYL1n_}>Bv+@TC5xAt{qK3}hGqs9m(bAp5!|5Oki
z<Ov<YmAWqg0|FmvZX(BNMx+9)aZt%u+yI?W3rl|}0zyIx*hh>S)CIAB(J6D6#jlE0
z7~-^_nQJyvSze`x`qMQ`U+U*;o~rl6ubnt>W5Ro@TcbL<Q;2quOTlMZvL)c{>%otw
zf3>EZV(NBxq_9wULM~oG0;%HJ8sr0}na{R)AO%$mv(zk;oI(Z8Zb}&eC=#z-QD_BD
zrVq#A1SP_0o}E0Lxl`M~uD}tB3v?z%cIi05tqd}c2=&pDZ~lu~h#k{H91I3M&MJCx
zmVC$yUUiO?qu?87gwqqLMVvbzAEDRdq0pZ26*>le-Gf4(+4L0(5$Rq6>2@kjQ>bmm
z*NZ`phh*ce6snpwX?O+q>R7Wnq5sk&RgAJXi4#5ICg$+G4<_r2P)0I|NPgCXffL?0
zw^9j*NUg_C)U=rap6-yISS#J)E7+h?zxDTQ|J|i42k176dG;G(Z_O@4ehl!$(-G*O
zF7M}5tx^d))97K>5ol+DGP0UFwaJRYk=VOS;7w!&r<G8G9oWEM7ne_ru^f%}<C!PI
zLiK)wH>8TQ39hxPw<N$uY-<pr*qIly{C$8XE#~Z)Y+e7^#Lmg0E~Iwbb5pa^EdiDG
zC!!q+Y_JPjm=Y}iOLbk$j-WqpALc^~z=fIS=qF~*tJiOaWtOcmm7l=!!UtEr{&wQY
zbo$En>%(+`0#ogaif)|*hZ*m(OdGCI$U$KCYly;X@cA_Ps65Zq%JB~_cCOY20cbS{
zXWDiI-i3E?ugurxcz+Y8k|xT0S~nrGB2885DI++|N`~8-@dEu<T|u;<U?@eGI5(3G
zTlBMDKZVLL_*(~4&AQ}_y*4r@0^Zt7_uk;n+fWB4eC@;2B^Jh}Dxe8UZi>5d4M>0K
zsudYjb7ufNbnqYlHVVlK*)l5WVRdbqxaTTfLZKN}OZ||4Kel<W<WJVk*jX`w^W?TA
z!=+kU$naM0l4#vNQ_BFkQF=RUL?7K}ca3%WTWL>5MpyTW0o}=C(IXThq(G@T8R*?w
z9Yo4JLGrVyiE@5SIt&(%cbNpOu~`A4GP+&WS`EVx?`s5rfPi~64`_u(LxZiZ%~=U{
z4Oi)07s^whE11hzp|j7=HraoHcB0>3+BjyIh+QoI*p&QztWKJ@%_w1FMW(K4CO7oS
zS4zf)dLk}(MKQa_U%z|VXim-$u4xgBOVewiE*YwxbyKERj(tn8M~`hk*}ai)p-SW|
zG+XG_O=1^)MNX)q(uE`HdPS$1i!Da*1{Pr%rJ{g~!5^8lv+bl(Fz)>xD;8jVLqTjN
zCKy!~<8cRJXmvDJC_36-keR@~<rf@XNNsOQ<rjd+1lzgDJ)q;&`YKr{xw6GLHKmEE
zuq0ioi89p%m*)`+WpSchKZ$0^;&YSY0~^k7(TP8>POBxs630{P=mUA4oDuD0Gs|V{
zht*Vw@GTt`^Wt5?<T^Dcp*rw9V3bZnGhfy!8I!{2f^^JyKu6KIBQSL31<TkssBdhG
zy;9sG2@Av!TqBCxN!?26(519wE+yKSzh~*b3)^7+=a+(?8z8c9=(P5|3oS$M*bvi(
z$a$xQGrNHRP3-$?POj7#y72q%;S2xHxvJ}gKp@;^dr`={$I1HCx20F*#yPxR^?>=z
zOlgg6qZfCavO^(<3oaJgA|dtFhE6UuMV#gq!&`O?vB6YD3ZNtMh7|Fene%Hb5iqf!
zFj%K<ej$a%ktT9)6cXZXvpx`mFk?@&PS}199gJ#jhYo3!!}Z;l^iba(Ary-M^1)_K
ze<hr5mx*Z)s$b3JG-RIaUci}h8YiuyDAxr39{L>oDrlUWyHr+f0d4Cs1I(>B=A&b|
zs<O&tMs6jL0z-ne*UR*{Lx;hA*_Rpvk;ktT)|nj<%sW3+QAJa(ehjLLWzP1j6w$UQ
zaNU3hEt%%-m*=r{+NPg?hKOpi_&9ZzAy`Vmubh|{GxuFFoFQ@-LEwo^JPpZ6AK(dQ
z`cN0`Jv3G!8vi%dU)yhB1V@l!_%O^&k{{UEGe{#O*-x0d5ObN3xsB~kqJ|K;peK7t
zF;U1ZiE0rj0>dXB26eaP*bnIfwt@i)?bCjz5*U-!0JPwwtdP|>5VU{hY4N>_y|oPC
zytN^>QfUCk4b7?5;>`(@6ff<QsgD{RtQ<!fATra(mMj9J#=sjC<?5hNLgwuV98D<h
zO@@bRP8XCr=(UXs!2vDdQ4;0?<uQ(X?(Agn6v@>n0Fnm;Eb+iK^|&~#ferL@=XTnG
zv>7AWT85XW!~Pf%7aj9atWeI+qP@Em*e-T9)UrpV>g3^{M}a4H*Ycg+;TthP9-1Gi
z^MGVuxnPFIjCmww4`R5B6uoB!ieMx%0ANm7WWnay(!|ph&|g5}TvCQ0VcB+p0_S_h
z*`0^aO342Zc1}xzKwA<m+qS!G+qP}nwr!)!wr$(CZM$mv^-jc{`HIXqC-+*C=KB7O
z4V-Nun4ND8;IkA**tj}yO5|FQrH+T?)Dd<OD67Kr@eLaDfxH!SecSrD-hhRo2PK^@
zY*E&R>QLVPL&3Qi@7#o1dkK0dRpNV(-adFm3av<4{tk$;z~O0snR80;QB3Bo?%;z}
z3YB9=s!*bcE%}zp^7K&nf$xH*A*4%1piJV`R&@U^F^l1M+b(C_=ZP0Y_G~er=DD<i
z1`ubYkQ7^l%o}&CBSGP_=?aDDgJ$x~Lg%ofks_V}^drc_0U#v4V<^b<r1vv0G~x__
z9Y38<2r?@NfB_2eF4#Rv=i)%SbET>)^C}@J;MeyA`?#}o`0l>kFOQ;r5?MKe+yHGt
z0LzFd!*YJj@{`JK>Vi5Y{G!M*yp?Oo8~}!7{avZ)%IRB{ePr|&K(?A8>Y)p+XbaMV
z7Gh6aloYy9sbN8y5&?n@RRfTkAx1_e05<m!5yeohfPOX}sh*t?Zce)&m%P0?qs-(X
zzMZl$Gia{@^AT8An0Enpn{v#m+WLFctsc}4w%<9A7y-toPv2pzKMM1R;eXEz>FTjD
zPlLE-#i)@`opsxXWt=m!wXvd;j~&pi5UUoWBlNzI(g-#EpnJ%vZPHx*0TrYcaIN?n
zZXV70${{}7z{x^M*GfwDw-Q2Wlwbw<Zmhz~Mn<P$9H1~$cS$iBkN=S6v5{%tCb!+e
z#s4B!XGa@m1o_gGlhkR~5eqy=#}`MsWSzg&VQ+diXm;gU-!mZw7T*|6O*OG(^}Yz)
zQpHxjlV|OGX$Q}nE@hGMHihvXcT8edee?dwik<G>@g>Hc;}fk*+Z$Vz_Qy(gq<eq8
zb)AUdiIXj5)I3|{%}Kp2cqu>7Kk}W8-DH|mJ&S@!1<GAI0tBH}IQNprQ<3Zv5<Pve
z?|}el68Hr*ZhU4&=zHUD^J)|G$N4Q9wHwAKX^rQr{jRONhK5atvY3mebCjm@I#6Qi
zv!=7&VgboQnaHbLxd??yHQHcU0oEY+hqVB0r*`dloxor16hg9vvhln9*<wkZvI-&x
z3)CY3?kVbna<+)ew6dODmsi>z^lU+aJe?qd5Tj)8zr00QV~+(kh1x;*x~w^YmhltV
z_{&|b33oa_uaHMQ@5(KS78WL(8^D@fBvwv)uu9h*Mq4FJYhXFgy^-pJE(-Gn1-7g;
zj+d*MVeu3l!(jFvfrkoQNXS#1{kjZ6UrVS-Ggose-NWFSGdo+0&s$F~5*#~}(}gA%
zp0&$v#m_WSqmqRDrc3pU7{APM`|agY`G(p1`GfuYaR;D=KVkGOVya6o^+fRAj+a6n
zT23W(jX}*z6f@OaY<oP9gZP&d^a!uwZHH7<tI0}&e<}#5;ugTm3l35gCJ38e+3o{O
zymDMa3F1^`-mDMzFSOzVrnP>-{_{cMo}8@r7YqQP66(L}>y4cZXzYy){y%+vOzL<|
zp(Il1E4RpXbs}I8LsaLO@d#MbR2?u==DaDh+`m@2a&7y}vyD!%E=-Ps`R><ya60=P
z6j*e|=MMcvFFg#}a(74xq8E^xUP5jU1_iPQ<uud`=7DCW?XB~@xNs0Buk=riE2r?Z
zw6IKC{88PWTqZLM4D<LBOJC@+G9ocE!yVDI!+fqflJJ0pMVWNe>P22L{}R69?k=k?
zImP2Wf14PG8S2HG%1~W@z6aw*)s^7WD_-GLA#+AC+GlbgdnXpz5_bey4PKD8<pJ$4
zG5PlrvCB69n{q^Gr0K~yR-g|#z%8XVS1g^B+<FVs8L19g75H?F+Ken3lDynNOKia;
zf2<|Xh{wWKC=7M^(eZ++p8yW3wk8YeZY!=*?Xe5QB|}9Zt^dh5b;f~a$;qKcJ}J7f
ztd)q78$mApnAoFoJIFDg+tr<~OVoc|zP8YbNRImg`a$C3j~V=x^jscZd`8DIbKiXL
zs=_2lI_tjM-Ap?-0zY3ulePd+$wOsHo3wM1vsAgJ4fF$>F=v6G)r1)t<-U%R(e1uT
zRbBb|jFAs{c394WU@NK69#W*;pYccCgS5?W)?hlYJWab=C+?M)5w6xBl@Q9fQ8zGs
zlFihhOdY;pqaJ`R8s=Ox_(Fn#EIwB6lcS3*Zl}%+n?cgtDjROS=yQ9bgXecxwkzwj
zIB5%<5ya_K8vCz^RmzV;_^Y%TknCTp@9(cPUXK1IRE7PXgA#w7{)XQr^3!`9aHud~
z2<jQqEoONMe|r#ha~#KPl{J4zr|l4e)i%vsquKRRJG6+Ss&vDkE4R8ulKdQ`@$aFS
zC@RB+FvSJ3hE%Qw395m}u&z7{y@mCtAd`Jufv{e3%+_vTtN6XsKN?sf0tD0^v_)RD
zAgiMcH(kUJ9lVomQ`(iqid-tPA89R&M5Z7KY*oHD-ZNl-Shs?}!iG`>AD6ViCu+yY
zjc+d2QnFFe(+F_C8;ub?uXxs2n6W{lz&kwHk_u)Y?U&hN*}Y(FXqq&q6&3^YT9nif
zg2=Sq4wJLa&o!_|+4oIGDg|%Lj5v}j!!AZ*Maw=306V!=NiV_Ev278Z<61jbm;tlq
zI<FXmKOptqdeUmDG-hKFmei9vbh_?m$x|)^2!hU)Bvb2)VFkr<Cz@4PD0c$Kjk}4A
zXn3CWQ-?*2ktCYq66Xx*-c1|{C3JBf_JLUak*i4wIy-rvw<6QOqODK}?(gpZ49pya
z&9FEc2bUM@usxiqVVqXW7x7$ni4PrK^)xX2(uW_A+J}Jx{ifkvae4pH@~pYNed&1C
z{SJ*z0>azU*FF|Z7=$<JI6&0`)@}J_V6)@rQkfxhQ=De;r{qTf8eGKTAo~w6+p=aV
zKuboUO|!9USAp)B;=#;6+^+dVE$bD&k~wz0glsv_yym!8ycqqe)$SIA`-~p!iXeW*
zio^i(+CdkMKv%X<RL(%ZZC?ZVE}~7lqJ2}npx8?{B3|?4SLYk-%lCCcNDLGRuA*7n
z^uDMmz)`D(8IR5pT?r%I&!IuV>iQ1T)9L|D7T(XPmClK^ORcDgue==sD-fx*(`2QD
zrkbp7t2yL=a|*ttQHYn)4ffSY5$JWwujjM_T=}GvK5G?XbD=Uo7dDvEQBp~<hGlk1
zj+Ja4^&3R-ZVaJptW|TJ=;qm?${}m2Pg?jGMJ~a8y5?aubfI04)DCBib=;jG7`0^&
zX+lL>SQStdI3jW3q}~*5fAQvAV(YP>eMaKdIlF8K*jmIJO6KH`6}g>`#kQr!BxsDH
zBSDn6FWrRKO_%pj|A4T0a5G1NsLN4D&CW^sUWyyw(tU0a{AI-6%A#~fP8=m_d=lKC
zGQF;O#YpkY!cU!2flMj%g(I9b{qx3+hhIcRB%$|tLtZW*C8g$ZFUDOKBc)%gvjJ_1
zJxXO7Ryl~=KBUY7N7s~<GNSYM@KWLmdXMRX*ww{V`_3xf*;?ip)o92%a!DQGi?gen
z0ijdt_8B~}H^$qy7~oID@0KeTX^kRDrxRp{3EPY<1VnKYUY4$75H}A`5;}!6pDAcf
z=RoM<by(9({XNllqa`hfl7?J@HuNq9QVK!y<FqcArDoPEK>PNw?v=17V9S}grLL(8
z=1Cunw{*#BaZi_B4TTGT`uhdk`Y}Q0a(ZIGjAkB(u$z0FdJGFu&|KZ%H&0|j50e<p
zLt3)T7n}h>xTdi`tJEyGj?ZWbKb#c)u|km2r_oQULjkq<E}cHej~S!7?;mJrB$hmZ
zcpWrb$R&M0mOTz`u>P6t(}rJkS(GT_!Uk9u>R_S>E)cR+3H>y&96-<y67NYXxx_ad
zoB@hAd7oKO)z-t~M889+UY=9@|IAg@zX-h7NB{ua82>$29i0r=88{gKzg%_6Xq^d>
zY!G$IIXE&8cIyXmZ@jk!#`Hbx_WAgn9jCL9YFg5HUe>(${W`rp6xLw*b>Mly-&7G=
zLH~UZzyC%10R{-I@WfX=R(~0Esv2X3(<DS3zy3qy4YHQ$enZT<ZRIC$Fi=u9*t1H`
zxb*6a|FD3RH`Ne4`gZiVFIs&R{k(n!b;U;jtjdZB=gdmHnsJ;nfdoTVg}7do=!PM$
z8m;3h?oaqE*cl|&wzK*~owA)*!E+scu%s>rGdxJs{>#H;1tXuWkf>F8<!@KndI#&p
zV(3pmfEGfWz43{VZCc;q3-22It-<*h5ZWjZGeD^tcdfJLou^!EsGGZya^9rkr3q|r
z-jRB|3WZ8wCH~mI9u2kvuQH5>!`He=sNTXouVhc~tB!T!9gWzF)>*$>(4h#U4j*+t
z4g%F-)Y8h?OFM2lW17`%m1RNOt5L%Iw}yY(E~1hlTEQ-6y!WmZ0^gfiga20+VfyC-
z>I%szSvsS&*bF{hlhye!&2$R1`opt$%J3g1Kx#0+ywxOjtn~wPMGQpI!u<g%+tViM
znN$9lU1O7hcMr3``s)3CMZ)UB?#+LPt1cdDH-<@qxo4*Qk<uJ+?X>y<ZBjaxO=l5s
z^`qZo+>PLw)N%z25$VSU=r1>ew08E76+y^ry2W1iG#xx77=|DqUKm>zQ3#P|yGLeG
z?z#4C$!qr8<yAV1?g{@(8=Dcn`q4Yb^wE3sTpk!%J|KA!iSC!x)bY_lg&21EAEAem
z7&WYKEVzp4wh#ZOs|LX}#2wm(2!aBOTU>8a>pN(aDePKyWw_wk;PH~Q&+Et~ZvKN2
z?gHQ7X(^!}0HG#Cv>?pWxonUzSy~5b)VLrZH9BZtqYbUg1-T(N;8oum6Yh_PH!DaU
z8Mv!ktYO;3M=`^+K}gP823dAqa&H4Ej4_-ikWE$(n?x22p7gU`tr0%Z>v13<$B^~L
zd>gF!q2r3?KU>Wjoo7y<KL)vtQNn!_2p0f0-J`%>Pd5P`CvuL_0Tk^o-F|_kK3(qI
zUK-$By(Wb!I!Tv>G#3!~z4elSJ%gl_&|_rGyyTXUuR($aK@oK_uE8aGhm`&KmJU&0
zn{0{Nq>gV;tlLSV1$8yb08Rk0O3gO=bqk$8n9=z$CW8b=`-P%4<2LrK?`h1wTQLS<
z8YCrArEa^>(7D$~gTN&*j<nz2vX46CvMZVPA<N*%zFKjAYoib?Y&EHRA$drTx{NaL
zVYdg!hs*$}+Md8+7+c!qE0=6KR8mR|hUUkRy^5q0-jj)h@&J0nONT7l$e*nC4GuI4
ztG)@cG+sZ!9=ei(t0b(%nR;YmUe?E2O-^o^hK~DR`n{P@tD-rX)cKfNoSU1-5fnJZ
zH!o4IfY0PkL0|mAO&q`gQ~frJ9}NrCd?YRhlw+!qkv>^>_?Dzy6p7x;-7&9TYg)<s
zOu^T_*>KQ`Wbc?7YPr?-UWNJ=I{J`~IXEIoHW_p)`Z%daWh=&@!UkOf*`3boEwaGZ
znq%AM?<2daEwE;{dmsuXVWpI!f0<KGdwY&49}wmWt)tQ#2GLj32hh&Y-y=N1(p&dq
zdW-yNY+2D|GhE;`aOcPfQP>~wJywn^#EBKu!u8x_%yqoku}Gci4*CKz4g51O8Xlnv
zvp9H?Un9+tKB8(FD(uGRDy2oP%M0B-+l0WX-{=_Mh)=;_F4Whuye0PFl;$*h%a@3s
z0{#?ddh#(3>}P+*JNH<7J)vVzS^C6{eMxKFByXgJ5~X@^+@|$$%zZhx`Q;Wf+!Jd)
z12Z?GiZIDT$xkBTHN<mK6A&gc$f4$92eo>cRQg7;NZJID=<V69@T?*~ebr=%@Df4f
z{=&Is^Q#X!CQJ2)?t7UIr>=^{YayAO+xdM%vd5nG3Dp1;+2?CH`EpAg&%aiR#X;E|
z+n<)^PBe0UJu4T!g!i{dV*lw;`#T$AC4|aT|MjSeTDQMHP>_&VpcPaSQ(iss)peFm
zeho$Urs}u726W$e+o>3K+%3I=l{>)vH;kmv88ok~=|d*u=c%{kdYFf#rRL(QaGHJl
zTs#3mkJ{fitgWy_H|e<_YS0DSZMfYhNuAw4imeIV-FNAkx+R^&YF|&a-OQmSo=_l6
zxSS2%VAr{2S>}KQ)KAR@`XHN|KD$T-;NwnSl_g0Y>}EHdkxrQ2Prok4HGDkN6EeHP
zC(^@qj<{hl_r*L`sPeE2agBY!5q3=GIAFqD#MDL_UkV#p6!nNTvr={YOpr;f9SH>z
z4+VyGp6-(N46<0=7K~ecehY|vXVl<;CF8`FE!Kg{^&>Bl{V_~cr-|c03HaoF`BHE8
z?)T@Y`RwNc7n1f+XMzo!Bu&%3w~CyPfck?m=!r;?vF6%(4v~Wu7_X}!#Gac@b|%qj
z^s-)c`0)r6e5iOCxXuNYlx`jQlQ@>p``&|fI_vP;vB>CVd)81%&==;Ce0wd?j>7w%
zlwpRD+Ap0eo0mTiEvn<Gi0_;*K$bFz%@efRojASpnIf%5GtkbYKocu{Vb8cHm!`6m
zc4GePAC{4Tgw+Gls*y1<2g4dM{_Lup+O*7406lPy0y6?-bLCa|Yxi#1!~lQ&F!H=l
zH_8K){7@MG`J{|1IgZ6MIl6Av$jO2e2~?5cO7he=oIqIVelaI8qTj|={@W9$(v?jL
zAQ!~;JcZs0r%RaUohC7f6+?(Yx}-r4IkD^QV4GO@8^kR~ZHI|xe_G1=Mer}vJFp{f
z;mSaF*&uGCxk@Pc_ck&(t41=O6|Nvj81HBYm^^_@D|=xU<DzHsSc-6uS2RG#{Uc85
zG2a;l-w?jnlEx{OCvJ&k(&SK94pwVd7sN}(_T%I%6i#Q|(xo+OBMmnMg7X!&Ad%jx
zUz?S&USiu7oTa_>Qw}4=A(fgd`aO^hV!=~1)y&EM+_#TzJd&VL2f!m%sW*w$vROOM
zXawEEld?bVD(J-n;gc?14Cpscra9bUp?+QqGyDSk-6eDDeJ2pA?!K7hV>`IfLmiCA
zi6&5H{CZHG#w?k69`W}0kwCDx=h_A<k!RIchNRbM8=(ULEJxFY5S5JGhjRkB4>Th8
z>#Em8_w9gP;{J84@E9~(Mm@-wZ5R@sW(DoeU+EVh5N}n!nRRDvZ`WN*qJr9Z`*w^t
zFWSg-pHZwZ|I_q2kf~&JK%R~RGf%2*zcWcfyMOC(YHe(c^X{cP!zHL7q9bS9G-Qo3
zDDE2QLpO7?7IF!)wtXNG^INl>qY@eSR%8wWlqK3wHXc00=?V$$Ujg~hd2`N-xFgqX
z0yO+8*V#$J?%Jq?gHN^Xxjb(ggO&C0H(;5Y!+-9;Q^nLI46x<9YVA6YVw*-mom@AO
z4cz)|J*2O?))OC)Z?^RJ-S@V^?FWAApp*+29)|bQqn=Db$^#?3rU0G{FE~GmHLPG!
z^T)A#%fB+c=}rQ<!5ERhP6f>Xp=xATEqcAce~IM<&b#T?Nfb18<lYYdJRM`ls-R5z
zulruu-jO`@lbb7Xg$j2Y!`izIWJ(Qw$gE1WKx~e<X@@2Am~&cWJEbU~Frdm;lnSKk
zOhn=7Jy(%j#G$&c?9&mHPAwIX(k!v`{0^gA+?!n{EjFy0zR65F;Dm@)?xvs12_jx1
zu&QIy9tI8innCOGN3TWaZL<>j)27??x|<Yd`T{{*F0eDJq+iyT#_l~t86#AY_%a-0
zi@Sjhtwj*G^|^hsEAc-~w6}5nL;BI}ov5kKudVMA<!3pX;rL)~PRcA)p<z14>l?o_
zXE8|nVFTr^lx9AtfwhGq_$~+vCA6J@3ycR+)`MzJrw&L8E~R%zJ$qktqt>3<!obkX
z@zet{g9iM~I>_%ggLPwqtZjVRC8x8We>iDvko%{(a0w|2j672<$EWL_TIqN=9B+w&
zbf>P^2U7BqTX@eui+}lu-gN$M@FtTF-17QicMz`8^WcJT{2qngW!Yn_g#2D8N6Kr|
zGzR)cCmu1>B@loZ@IA+lJzx3aRhm<foK}UnlI!hfuS!q=U^{~e2EoP=ipAi!F9BXY
zCnngwx5`0S{W{Vv&0ZY*4s*ua{8z`ReVw3Ia8#$VWA|-GrA4||h}2mCQKk<OMPA=f
zJ|7H?aq3MCJUG~D8w9a=6M`t;IX!xf;#fvgf-+)~;f5>2mIh>D{mWCr{ikXlc4AmX
zkW^$Y@RjhIFTjc^6)^^)V=21Co@{h@bJ?>+AhS9~G~S_ZzJP$3vJq=@M6wj!YmpyY
zq&37ZK-5h-wmn>!%Lhk8TuuiYSt=i*SLU~UV7>}N{W77~iUmN{2QkvEadMj@TM=U;
z67&0J7D<ZIOILECYFy{zl4^`GYs{L0o)YfbH&oeRQTnmqBPqZ%i=Wzl(KB4o3C+@G
z^OZRlJV^vM6$)Yk##D0~TV)$^oe57Rv+zx1fyBZ623)&|f5gD_JkCBoR}Ftw+Td-%
zuhY8Q^}+fr<$m^tmG3K1j_Q%@ELUsqMppnRyt_}R)Q@UiPZk$y!_VLmdNNFB5eL^r
z`va>)P(@>xL6XkOxM4ak7U?wBcAj?$Q>F53)&|j-75ClA*m-C7&*^d=I+TxXnp1&3
zWE*0`3vA@#hqYs6LcD4_xNx<@V2tqugD83&1cpmMJVwEp<6eY^-xF+H6pwQ}n`)1!
zM{qv8YugK1BEw!*J@at8Z=i*%hLy4LED7wwg{FBIF}mE7(O&1{w%7C!nlz-}%3%{T
zNJ7w2a3dE2Od3OIY8rva(ShQ?n>;PE!SH&b^+Y|hGK+3KbD%iWy&URtgNM!%niH@;
zOlM#cWyqD{SY4Jt=gNex(Nc<4Ek5Vr1-4yA!54E>)#ndCTT9xgmzNiCgF><Bv~9%(
zWN)iQ5}W6~fsK!c?)LH4hqB&}3}=eht%Za)IwnewC2k28)Fa4{j#d|68#rUpCaUe9
zV|qVCx1QyExENsOTVcCeX1lit=rc{QaKBrfId~2^-T(Nsy|-_MLB?*i`5967$hY|i
zxYGlGhQSV;OcPm>G5y>DInkRalPefZAEi3jcz_FsAJW?^iq>%IQKDz|6eB10p3%|!
zvzO@9I)<pw{M%Iv=h87;h-w@QMhwJ!829!?xm-W#$A<wLi68u4O=!CpPXO0r0?ymC
zLQ$$b!3R(WT<bW?%>*-wvmZs8u%3HE)W0g%Czj~pbUsg<hnRh1zbi|Ip8`J>u!{Qi
zmlhzq``&bm>0epH-Wn!+h#BI8)wJ6$_9PIKh*@;Q^4Lq)rQ4=p2mMI}z@z%S5qr_W
zyMsO8xK%yx>%zZn4N<Hvcsl2t%bkp$jOP%>U078lY{DU;DLACF2JZe=L!BkBYcr@4
zgVl+yTieWC_t|@=>{NWBsvX9EgDWikCe<z;GasnN<ACr5?O@D%d@EU|{j!2qSsm3^
zAfE7z(^GPc>}=8IonFnTm3wnZQ7G=HHsitYPHuTW8G0J_&%${5!LUE3@nYfyAvF^T
zC$vta<0;I{=siNpk3-+zZ*K?I;4)z2xEXB|6HCFl0-`RsNysUg)#H*Wa~##xePjZ4
z%Cct(IH#+K$^c8Zm!#G)Q8##a2IsilO%_pOSO@ioAzm$k02ic_!bjg3XoQ~u#cro@
zyCDf$M!z(0dts_!;9gHD2zT=$8#u>dZ(5+wvs;6>d~*8H>LB78(ThXLx{<_nS{bT<
z6s@fN)bw<?mkS-RMP;NNVX<xiu1o(h^w9~ut}>%jSg+uZA-I(GZi$}0+pJPPtfeOv
zjBHct@ne<#&`GS;w!WOYO*eg`2ilS*PRz$(@8ZU^E;%7=SNo<aaB`H5jf&^vLl8Sh
z-CDGRgXi?wG&_$&ShPH!X@Zu1_*6K#u$i(70CLmSwCuq$rJPcgl|@&neKXY5ZC(C@
z%4GCVB^VNh#a8mBVeJh#5<q!pbsuaMb4w~Y28Dgt{u#lrV0OoL*@9_d>G|o7#0wQc
z<rm+3f-KNr+n&*nO7Jncl_|}*aFk)p%i4?h^e7)h?gw;@lYFx2d9v_EwvA`y7ol~n
z)7y%eZ8^W%4FM=NY`vQ9S%VxOddn|@1Zf=txm^}-J)*jG*T*1}tunjREY_h(e@sPf
z3IF6CbYR)nJETccJ~A;UnjPqYMfh0n(7hG?N_}$8&r)8i3(^?Y-+w2d_>Zaiv)?q1
z6c}?1Ap201=Bu)XjsYhiN~2`V$I4J^AgX?JAu%^Z{`Tcz$wrSRi~79oAr|AetJjrX
z2~j0#clKGDIUl9!Nu1G|_ez%3E1?VOW|Qq}*JFT#-Jn5LpYZuUAu~yM>BA$Kzebi9
zI9L2`dXd=@gi+^qT>#g;k&Di~HrgoGwIr}UGI6mAt=suJkU_1}52nTci~jZ+Bgh=`
zdwPBFzweCB*Nkhu!2tkF|J@nk{+Bx=BMW<T6Gx~2d+*w;ZsWAciu5z17eJmAs%+Bz
zzR|uRW2!BdZTzp|kIz4s{F6f>G0w}Azyr{HGJf2)N&y^1iA$Y7-SwmSZ=2QAt?Ag$
zHH)Wdlbs`*z2=h?;`_ecSaaj}$k_@>no`81O;Th$9?4xuIi`%$?-$6`6oga93&ew>
zCiBhZ!Sjc+nDEAc!iuATCnIYFMl7M#JJc6Ka>?e#`;lR;yUUTtl8l3h;9xQetWXyO
z^L{X=1P>3%v04mut(6*28m9+YVZa`EF-Y7Lfe+!um&!qaA{R~dm*Cfsu}wy3AWMt@
z(&!61x~55_0`QUL2=~ZOC~L!jZC<zJ`ojqde+Tcvqb%}QF2Wy^0zCwnbQ{;>n*jdd
zgTkyU!tbf36}hVE8PV|8)3|iEp!_f>6)rY`CqGqjZ43Ypf|cSeX3nz`JhT=vecXg^
z#9oC*W+!_$M8v2&kwt@k_{T2yv}FCnG!<g;;LDit@)|h4?#!yxBP|X&e(Fl!mQ5?X
zn5v!~9ro_|QU}sZ9;!;dl6!nNHXxO<GMn-H_64KuY@%k-L&_~CJRXoyd`f-0hG*|x
zxRD|&QrMt47u3z|zDbzjB3*zOpo*hNuwljXySVbqJQr}Pf_aa8=ma@n4lDzBjW^C7
zg(~9%Xr2Ou@>eM>2@K5Oo=dkzk{u5MqGk_1QODZQz~Sj1Utr!xx{;L_l4^;aFKy%)
zx^}$SnR4XAAVAE<rhbYI9o!}0924m&a_C!;;XfmRB_U>5;BPl#LHOZC9HS9xH=%C@
zTIIvE*9OB$0~|&Dho|y?yLEN=*T_SY1g>n#>a*cojC$zTkqEol@7f%|1RU?X5Fi|3
zb0cT5uz>XjGrcOivlt{m_n-JM2dVk}AHw0H+BtaG3}V&JncefK`%l@~a!VGon>(8}
zk^!;BPlPDZuXsb-jO$4Nw{pqQQJNS^-3Woa;w_8_Bk(={Itvk8obOWS)f+!Z4EubR
zL9DsQ)fhMvW93d&84ry2XyV-Ek&G%v1S@6Sr^C=yZzH;y15=DoFz#g~n&2U!#n+79
zTCHWvLT(K>rFXRi9GDye(Z7$xhu`TF$p1WF*A`t)ii!K44NEm9L{-!7=<4`6oAGUO
zY=*smjt>A<%%Tz<^B29DIDY!R#5%K~KwV)2p-)XibGteGfwUHL*n<>6CkWV__9PuG
zH*BDk%ggH&vGfWu<?$3i)X`Izc6eGKl*+7prfzQ+ZU@Ox9fOuSlV2DaC)?oLu;y7i
z9`}jZqt*I-**5<gEiShfc_xxDXoQW@sY~gTC1!&k(X#-gB~Bz_m(Cw+r#4+s?e|xh
zt5oB^j<*T_j<F%jq$!D8aK(8zh@p6jtw~}BVV3t5zbfiF^V(yQ@t&{iQ17GEH_GTP
z+p5pyo!UZKh}Pb8qjtzw3J89Z)Q*?y^9p@3hV@CQ>Hgj|64xs$;O)eGjgZdsf~18H
zG2*G65dMR>Zrc)uNhuyi2Cb=5jN-skA-Lsm;bXhEs>6>xabb0zs#5e}!-*=Q(iU~7
zHXD8Lp&~8cK`CY;h_1-v&GP23t0RLZ)kdL0Q{h&ST_eNT0y--(lNF9k(z?h)w$4NQ
z>3r@d^7B^qbwB=~MZS3?#A+MOkW@S^pYcI;Xu)6?tCzhnEpPEna+R&}HGEXzL{=)8
zDHxWqTC`-{xT^^1BV*kR|M2%<=u<Ia)h0xUSl(zBK*K|w{^(qsOcl1;vXk~XeyWvq
zMNi2akd#b*xC{(ry_J9oB2W??7_gy6IywolNG%o~obVFdYIJa=9I!ULz_rUvieoGQ
zfMRVzuwLzv80<U$(o4bl^gTCa&By5Cukx<|7>Hye%o;u8g3TN`xCa$t>ZdT*Psoc@
zdCS2|R0E92<pHtMzNKmDR7hcci!6JXXXLK%(j|yNUIpul(qWHhU!^SKZ16s)8M%mB
z&nljdSBE4ACHdoK%-E}PEEG_66Tf?D8(NGt%SQJQdIwI*bZ~db^aG<D#yg_@R>9`5
zm6ee)!pn85%OP4!Em0^hyne+Oyl%1rzdvuQ>F$!Yf=GDjNT$UnO9yuz{I!KB4Fx8g
z>Ld~kV1n`8&V}}p&#w40R4;dtEDxUMc~tyHImpZK$1leBLWLrZ!$3f_YM6k*$WJr+
zpF0@S{`^^W`@MP`^bHp@m;k(8qgdD~yWPZlK1~TRFGU%yj~&9@`29mq9vc&^)r=pH
zzo%W^C4q18SpPJIFpmr>9PbY9wkI*Q$0PRSEn#uBp@({27x)~+2&#EdKOEq>@Eyj#
z2^Y7xI!SjOLBLOvlpGaOB0;)^yh2}06;>^<JQDbDadlkXtustj7qwYLEni?UY|HK}
zxy6~tF@Rz<E!IKAV%Ods@9s>Wt1_nug?~KA2ZypUmvod$Q-q8aQ2_qX08x6+JiKPY
z-fFsYy@u=m7LQ~3ae+fxnq|b14Qtgrg$897Y3jNcR5%%BNVn0WA_E3I9k_2(p8jPi
zWtKC1@1fXvw^X2U&_KMg%KRBI8uSC_d;Eg`&yO*5v`2VALI41s1ONc6{}So$Ec6`z
zcb+fvd^=&c*7si4`e)ROP&83<B+W$OmI_HZ7l@WTkyE&2n%c@9DR5_X8QsLDE~)-{
zxuNSp<HX`eK5UFy7~#UHQ=>&~58nX28oEhcMGkuVsuis!N#b}vPOr}D-Qa&oXiFnG
zaLP42J|a7)9^oe${OO3YOhiA<Ig>3l^oNyX5T7V|`y2fNfH1%*5hkHZN?boCDnUpI
zW=g3S!HU+RJiIcKgTQwR%@B1foT_H1KnhWsSyYTsx+qN2I%upL!HhiU&6-={z$!f?
zqbUQ?22|(|b0~eJrUH{<RL0vYB!B160=YJRZ&2&EvuI+{Lk_S(PE$$Lt*LAQcMXlG
zwq~oS^7ybEh0eyt=EV`6PhINe;qWcU>X{$f$X0HuRQ6+Nbs5EsEsI_#?5(9*$h@27
zeTpWtNYz^<-e^@?g*tnByi+u6S>B_k{Z8;4)iwq9@9C@nqPJ}V3(GqvOmEA#`&Z^M
zYgR90_gHO=-Q?|<J7XN(NI#{XohK-RgD>Kvbbha^^Eu=n`C=j+i)5V~H*5npWHaWk
ztCk*h+4lPR`*7zWyp~>{Q0AWxji#3g!wtq^v2M3{h1XN3d|$n5JDU_0?P8&`GN9Nj
z+1iaawV!fgUI3bc$EZaCI?k>)0@twR>lrKEZt2=a))l1AR^0i|b861d`q##_Y(L2x
zPGuvM-IRyg{U&kS%9+$V-$8CFD$CCw@vGQ{%c3gIgS)0*IL@g?2eD-g*#p6=RC>U^
z6<REIvw3=o3TN-t7IEYO+s8rLnk?D2MJ&q?GtsgijFIMk))t=LGrS*+>>jJj2%cUH
zoY&snfc&D>_b$rsdsGYVKP1=!NGwq#HHlzYP8TeKkn+vM9jD(xXKjA-pFM2;2h?fy
zQAcdT<HaA|3R91a5hryQl`orzO7+lIn#ho)LJo85#{g}JB}Te{!POVGIRvAm>xN)g
zz7F0SaiK{#M{#dt2GAx7cJv5#LytkR-kd(*a-R?TVLRg*qsrVjy<E6mX?C)7bXUMr
zF+LbiKWaY?YsG?#Uv-yDTzo%xKM8(^j0t|(F0-?7pHM0Abyc#SXh0}^LjwfLCOU}m
z4D_FK5jVS+TIjj2V58f}%LQS-t+W2S2JmBVXqQ<h+l7Tu{m1PWpgCaOy-#p-FyS}j
z4r=?(YuMW94$qypUT^yM^2A=dJgT@kcsaQuX+cJ?lLZT5`xijKd*A2t$K%DMslrJ=
zBj=+jW#N8+G0Qlvvwr$c?!Lb3*kgk0hsRo6DDSEYK&i5J_Fz<F(hDNDTmO6^C3)J;
z;OOcCF|~fi_;7w_xIYkouFk>Z)1%3i`xAq6;$~4$Wv8zeP|`~WlLG!CL!TP=orcIs
zzS_?TJz;v}x8x(r4%{b%6om^KN6N~@20l6IbzS2DzDn5N#xY~|@ZG#VvBxvD+&nXK
zf9<1CL#Y=&ylYFU#w!xwOz8QBu#l^r@o6O)bK2EElegsBxd~sA)0`^N`;6^Spf_r0
zZ#Ca=RVZY}JQ}VnTnf{6Uf;JMDOMj^_mqLGL{Qyp`^Sf)FG~J>-idOBo1nrE`T>$X
zd!?PL33$MT+X4W~+a+R!!qb#Q!@^?9ut}w(3{6fTfT>&*dFGk}dP8IF`-VeYB(O?1
zuvtWTf)bh@E5CMwIH(fm3j#xsrwGpkWr~|zKoE;+xLyDcT(*5Md;<D)=gmcND5sHx
zmZ~UCr9wYi%0)Fslm`VY_=dVVp1pVO*P<Kqk0f>AuwW3_6O2y*QGEa`GHDlw+Sx(G
z#fh%M3SOA|e%DDgb7LwhalgsCfX_RYC`b4Z^TEGPrJ4a6dte=>mSxFL!8o8fYYrDH
zB%+vfRb-3>M%7U!PG3=#fvE@}MZJ;PA*EN`5+_+iykx_!ZxJ=+r0G0_s(Z$wbmD)^
zKpVob*s~>^ZgLK{F3n6vgK*VpX){*?*g2^aQp6Zt7Z*n{c3JdHjYC@uv9)VL5(8|N
z(2qkNy}Yo7P?NV6C3sG^u2!XH4b!aC5QO+gVq0025J;7$$}2|*O(aEwm4)2d0f;eh
zD+4e5mr*d_1ecj58n(x=imDA3e4`rvE4cR#3I$UUl_84=`7Ldp`Z6AINHECGgN`||
znz1((@Hl#PA{q;ph252!Y#Q82OgKbLFNide$<IX7D7?c<pw>sH9M|h~;AA#E+!a70
zHswaotwNjX@;qzrjSN}@`sRzDsiiNd@q-pXrYu**Fv*;iQd-+U1l_l6ryyY)b%4S$
zQ|iXd2kz=g@)NJn-lvRMAHYK{9~|S%vT#jA20*dv$q;ffNB$L6@XgYcGvh0aDeMK(
z8Uy2P?F>MGun*T$`VT_B#3dfCG!-c3DO)p(2XM^}(%4FFH%0$;6SOvIYs}J#`(y~7
zo<z|)ZQnajPT?*?(<FeRG*cTXxIoZUw^CrpBnJmr&IDK0qAl<g(fY`+TK{wydB4q`
ztrmaaggL=*HxWPIz{OQXSug@nMNQ!eVY42MIZGHMg~xnAcs5teTU7|C{H&H?99l?V
zYqdD@Cm}NXCqNu%QnCRp`!V@9Mu4p7T+6EUok>#La(p}-)|N?bHw+}k-PexmI1NL!
zy;I_c|JdNdjVMaklws8BiklzBmI--Om&G!X^8n-2Y#DN)#o0A5Y2qo`%>EDp!+-df
z<NXtKt*JR?rNaH_!h^MF;)2W$!>TGDX&6pn9bTj0sl>*LlLA*Cwd*^QRb|C@Cp3?v
zHM?5{UsC?a!#pBFhG1%$0|bih+ZHZQ^$H0hViTACJfR}HhI2!Zg2$%@fu*hoT+S!)
z2}MVFhsMS_c+#8>kbziYukD!ol)8>UO~^SUoJ1`Uf|Zjs6B-JFSgO;Twr<0OLTG{q
zIhrPFH5;}RLnWgK;~>~GG*N;!KLlen61>~GqLQ!Agrv-H5Nv_f1}4rZWZCnYd0`%h
zC}?4-=S{lNH;rVU?3jwv-lNJF^-e=6vx=M&6!pOYZ93wi(+`?!0d1Pq@_K2*%MFq^
zUI~wK6s}`d&I^7Z&H<GWV?s)ENe;Y#T)??WIEh6eHWMV8LVmoXi3t2M4sa!oGBDv}
z&wL?jd*%--NJfFmY!T%asZn6j=B=A}!36pP27N3iA+$7Bx`QaI@>rY(HCQ|ps83Nb
z#3(@Rsx;ZS-my8&k!B$@fj4e6$@mrRyEJmuVV*vA@lO?jqgR4|o!!Ruz*+MbdRL_Q
zPB$vHYUMvXHgo_ZE`Zr{O}3<2Cry0Z`7l>@Lf8do4T3Jz8?`vBT9~>yEF2SOd?UR)
zKe&kb7ps=2EppB6B(-5|5ApvfJaFJX^gtN?J{%qSUj96<q~5m${T(A$1t=M<E7TtE
zyu0%-llq9TyfMBPCCFQSxu!_ay$Y;Xm_C{Da-=8}+z(l3hMfc*?sy#WJffTbQ@i6b
zcYezocb#Ny;r#?th+8j}+H6CbCeUV(<g{B}T>y@Da7|yM!oLai`4QvtrPZAZYtMcw
z=m6Uq2o;paFA_2qUIY>@MA{0MaRO*BYPVjY3hZHW&J6%i(%95=Eg!Ji>}>cxYi_fe
zU!1XtrsFLupnrFj5zwI-?dS3Soa;Lb7xkstGyg?*YW~k(4D}`zw!*nlPp~U#lK)eJ
z%ll&^fIFe4$T#wa#G>^|1aurSEcxtVXYF;u86U4)C(3Iq!59hE)O)UQ>#B`Xq}Q_2
z>KL;!p=L0YoN<*BrK2%mTtpqe1B_1NXh;r`hf{FR+_N&|h~HLD3(a!LV87u(KxNM6
zUl6r1n?=^Rwx6)3tJ1s|2?DK8mF6mcK2f0vh(&IGJZ?eI8VQ}pXb0SMV5~^jq%|8-
z@a57{Cut_3Jf1N#ddO(7P0QHKP@?0++9)ji^n|Ph&>(pP;9v+!q&ASI3`4Em7@kUQ
zctXZv*)W3Man~H-jI2s>r>@T_WxK%@iDNWh@`@CKi~P|w(+>hn(DOCqAd(yKcGzj|
zzMML580~MAj#PP25O%|#C}xqWYEynDKj`vzE?jWWH1M)!dqxFY8{#?}_x>nGd9d`>
zRT%)(@6VN6DDwP_$38;$O~pec|G7RuF#z@<-AngEDkBP)tzNN5G79L~N9i$Dz{d~A
z3K?4r)Wp>{E-?^0Z-`gAs_ZGonZxIh0MU`FKgNfe{f<T<Iwrc~XMcuIV75g2;s~Ds
z+6LFeKc@wv%Rgi^-(sS**{FqGhjOx0LOam;Jw<p#SjY-h$>;N4S>6J0m~qivVYGzJ
zU)B*&5boi&9L)V+^0Tp+y}|l<&Bugz4|10yX$GBd@;888_sMAtMr=odwdC3^k#ZXl
zTLK)A{N?`fX(xZliHmCZoy@`G(lM4)g+Q@&L(XULLBdGCZz=9_wrsiyiOr*Vi~??`
z=lNu(u(GSJwh5(45UUyg=+2J2HrUSnV9M7F=vl1kEFmShCM<rFR67Xy_DUV|l?z+{
zk(e&JUXZK_pYBX0D|Z}M9hB(oUH^b)D*Vb{EY!CZE1?R@-8%TW^th~<#CxpOG{&3d
zTyn0+46+Y&W>)Q7CQh>winYvT8BXcGt-HDby~m2KT7#w3o1h01EQeM>E!+LIjoMAW
z%1$dHM7NuEVJtp(ESLBi*{2qVz`s4;Qp($^bou_5Sw5^C&!)wyVc%n%+%vp`Kc*zF
zLX=0u-7*Ij5uyi-5axW28^1l6s$BFOy!Tfb6avNl+Dy_$RhibKLqoaX5hxJP3y6tt
zI~YK=6yHW%V=Th~5v4zFGTj@OKVql4x2?wzR(bK5Q>kBZ$6)Kzzo1-a;%$?#8{;bk
zDy+AnA%%h`Sk`_HhxmV5ugx}q@77$Cp(@(9xqLzGaKKoin-MJ=UW|xIb<lE#gRWAP
zqdZ7>j&7i|lXh}^;k1xr)D7Zige2b^Sp5r_jJm#qp8ahAsEmm)l8k`asSA!7f)44n
z0177V9P>3!FTvskv3A&P+5C+jsI}!+bh-ekqo+FclSl27+LID!>>i?{9Dv0ceUBj#
zuXDBl;3lIUVJJuAx&eh@%0a=)wkNUU7y%Ys)a`~ek|ECPSAat;7TCM%8C&m24Mj;^
zJp)JH64^9XN?G_qT(|5%K$nx@MLDKdm7O_LX0@2JsH9V-PX`PL17Sx@2CiB3NB*t@
zXePDSF|=<Blllprk1DZZ+sRmG@Q-CarHvQ5EQ{Rd!`df6LeSzM=RqDekeKiLzc7Ji
z9>+l$aZ7_O3#<Z@Ovm?%m$-j8`)sWW_4Bih1IlViZtjSS@`zuZ3CqMSTYE2N?R}&|
zlH5`E#Ly#%k#?gO<WX)sX9>#KLh}x?0#c#)O{bRi&kY@KFlx32?G0?VvSe~~9Vf8`
zyO@)O_l~H?=fl59jeEYUqcE87u(*1^X?0&}$pE>%y7m4z8&PWO_o$rom+UYnA)y-*
znmF=-oZM>w5ES!RLtJ<FzOb;(hz><XT`8sR8V|)WE*o9@B#?A`(SfnJ^f@v_LHQRl
z42hR|4o4v(T7p`)&3e>vfKe!zoVz4$qwpE<^<Mo>oGFTZ`c6K5582{h`^zwY3h{Zm
zEqwEGUcbuf2bBV0D2foNy2o-VVg}lvDxQa5XW69Q_kl^mW)V-6<T$`@YTkR}!FGHX
znrDs{LVPOhOnl?6+(D`qE~*u_KtehzTTU=(5aGM2E_A4&co5bkRRCFS;G8>V*Va%4
zCoM-sQ(*zxE*A}*wJrMD(Z_!qt$HX}Qm>p#aLI9Sr=*A!C2G+r#T5T_rkCPRB%O~)
zCFUd<_*m8n-WG^aZ_cpO_1c)bFDd}~5IF6*J3<d*+#04MhO3|ofYNX~?tA*wVVEb(
z-xLHJ(q44TfmviIc|z2_vQr@9I$QeiW(8)|Nup4ek02&dYC4w$(2q=`-QHwnfq%~|
zQ8LxXmWQ?N=!l9<R|L)XRvA?sq5nhQG4j{F!(Y${;3}UT;|OLJ3w{_A+p`~^@dM$}
z=uhG2!luZG^ZL<U*Xy{rY#S5`H`JP$xcmxWWzv4SaY(GZ(3AU5L`7_Dsynly3=D_$
zW+L}r7TLjFuvp_iHnRGW3EeOuAsw>(lkPHFX(U!-@L$XA2Rmj8K3st4vNP8(weOk(
zU;JoGD+;El9>K?NLsio$$%xgxq$udY!>ndz77nNf?daU|@^RiQun}|Pf|`=1IsS>1
zEnK8pvsvEO?K=&LIpp!0c}oT^hIX8fP1P!}zqheMz2@2^kV~8Q;o|axfRVcl%Qe;t
z9$i>k+E1UF|CYkjgo%4wh>V5_(?)f(@;aHwVc0X6ViF}ugsl2o0OWqDL#;LAOX1l(
zN&E!Q`_zIRvAeh0GHBgwb}Iw53Z&{yVs(0>z;ez+MXnX%xCmNN3j^z8H3IctNx@bd
z;tTrx0n2KePi)n(g9-^dJxVUdm3!vJ-RHG|EfR7?LqjPQGZxZ_H}t@hdu;IDk5i*y
z1j#Hxq~#AaRF}w>%r+>Nh>TX~8$xD2P<O3%Y(YnRvWy^Fy>QVBG1Ux}7RbU_;?@G>
za!@i4*OYMPAUphIJ3k5jS^BuP+fu<3$IK_B)nb6m(c6(=Hh&}lpVm^enSp7AYLJF&
z)m-)=N4-pmvIexe3Ht)DY06LuawrW;<KJ>DO_1nSq0T%!hz4EDZ=)7ed%3Mno+rws
z09ZF%xD$39)hkeT0{k?%qYpzP02dfGZM(NV!Th}R@-4h}I@hFZpK}Fw^hc)ZYhf(Z
zTaVaU$QM8qFl843W#u=Gqb7||xt=<RbMWmYty<f_BPWX1w|b7>*EjC3m(xP30xSsg
zA7hBfuUSp*d(p~dzn%SurJDm*^?c8v6_NX2GZi+1WI-i_uAtGL1F+JhQ}~IN8$haf
zVUM8LMK8tddh18plncROq|I2E<D{qih+$+t*0QTyIa7tzyLo!#*R!0(B`K{*3m^!Q
zNKb4&Gv1Y=I<-Pq<a4NvpQrV>ShoBl1v2pwrg!xpG~+vramwvavGWY|bH}Wsac)=T
z!2x4D9ImOdvtwC^*a=GRrORBmd8=g>jq@Fdydo`egO#Pr0P#)JD7?#lvg9B1J{Vn@
z-pfKnrWNi9<(#S;I~d04-5Ox9=3Zy06s<cU^AUJ=U+H$EwkxGuoT+mt<91#WyiMg)
z$RI3%ExSnS<QprcCtH0so(czRW#l;z^fkhXAS4Xo@&NSA98rYr_|6FK0EY6389|TB
zR*w_xxBUY!tHi7u%O+gXOR9kYhv@P$H(5i#q6E2v1HR*)b+h6kNgFLRLL??U;gM1^
z8S!|+%S7V2th~xh3E0O7V35-Aiz7eCRg!b3;58!w0uw(V44K!AZ1!u=y((TwU9g{5
z5%Gl>1HnXu6R7j;tupPfW$fY+a%50|n+kTQP^}UrE1^^}SvRoJ5Sll_4I2t&NH>js
z>^|Gih<tZxbiix{r#l*c&wqZU?I2|=ewcKG;x81xeN_N-<ElebU_$xOOd)8(v#}pt
z>l_$^@xmdP;PFBPo2>)H1}+Jo<~ihG$=}$9!4CHg<~0X%u4ku)wQ2{*5WFKs<_W6#
zrqD6LcqKAff;UeWFkUuqTKQOqMz<@SAT72KS07{kXk?Q~DI}e*@hk2^>bByo<K^7$
z3Kis*#E&kqO7OVTG59o&9n2C$9#&cm1|SG}@u-#juwbLVR&t0Chqf_qZQ&9Hmslsq
zhLaziFon!jL~uG17r_owa}$}<l>(m*@E0Sw|KYj{H`54;+rhNYeN;y~pe?6L-4*QN
zfQ?-#?k|fDxD3R6{%~88jw2R@hqM5890Q}WIOx?Ge@$%u(cHuQym{iJTd-tAcE5HB
zKVIEiDDKcGrTATi2Bc#%kf<Bp`x%u0iuT>^8zMpZNj%?8+{n>O%+#{Pud%`etBa>I
zHRxuQY3MtetJ;H%B%e*Bz!Nv$>CmGYaaS1OOZ1NRt8Fy!t%n}cGjWYdT|+%>XjS7Z
zq2gKt(c68#2XF?AGYWi=6z5(M_#S5T4!G$1JfB1q;ZIvTWlEW)k1AdCUJG^ghxgPx
zj<E;u{fk1#JEA<4NygF#OiL;}_{Ztn8s$uqHl>aHfJ>y#GLhXT03p}|H-B_cyZTQM
z7u^<u3k5Ne$La=t47=<PSlj*QEUSR5mFh;!2Wom=f*DUL=A<O!4%Vjve$oP2d+ODx
zwct$yZooEK=4C-p4);TsHqKy$*~T&@%A$M3zv|-`ErF_wZPP*i5umQLxf|Ey)KCm~
zA6gx=Pu>A<G4A!x9&?7?@lp8+*b+Sde!uJ43)U3xB(ml%yne^%(=<*Nkuu;5xr~#a
zlJu6heYQf<F`-M|1L5ZipvP<!q|5vTS`CrX$Sq~+Q9tDTrqdZ%TI_CiY8^s{JLssv
z>8W9ABe4WQ)6F_hJ;d=7i;Udm)=>O8+4u5w99BArrg)bY*XxR~lXd`*AteYchxYlc
zVg1XqiB>!GQhB|sCF>@ucNOWFNLNDKC9SsY!!1)A+156AD|%nC5;t+<nuqFd5qF}z
zh0VF$wM1ipx#wlV-(ZIxybkc$tv#x_yb7wghAy*fzi}>U6y(dP$L7FSJ2zD7LW13?
zF|yzSZ>(YXwL$ua?fvQ=TDFdW?wBm=s5JP=Ecj_OT^cNZ=4f+hdN$^i)+_+_^s~;Y
z<ZIMK$u`L%ZA&kJ&xxie!)<Y?-OX+~qV)57?WpsOHp?$&%r6-5ubtUEtU2eYz$`Dy
zK6>p+ULcOR*zQZCE;6QSrOx5${Q*{<H*IkhffMe5kVh(HdCKRd|AW@V!bib#^IJ!1
zW>3Jvl;a}$c2cyxai)7_G+vRg5QV@8+wT+kKr$U^=yyX(Fc04arDb{#HHBej|48%*
z7D>mDO36r_v(`k=f)ous{o!@N^}v@BupLTFc`Mi){;6cWgtSa{772r?Il6D;{}6Ug
zv7$t6w%xXE+qTcPZQHhO+qP}nwr!hd-_yAdH+_@8d!;I=r+QrZYSo-$r2p;6#r#uo
zD(Vvb{BaaCs!|h|M7O0k!4(_Vi*|4SYv@7tnU5P*YkOLKj+-AgXTxcs_vjR$JBUZf
zoIOMNP=~vnzaJnBRNq9@(~gJV!I(D-(S8j5>l?e@sRyg)`=+mfe|=w4V##3kkI`)+
zv=}ed^vfCs$bF5VCzjWD#A!lyB8$g(22xe9l-@p8JH{#&U@vDOA~*R%)IURqu3-uT
zFvu(dL!AT>Ry9qiSE=~XL%P)SEq}J5sm!sxZlj*{m@nNO`GU^(O#3a`Hy<mO)1>8l
zE*|$B(L@pSL(2q1bRY;lm;-It76*=_<g@{x+ua!5bR3^YQpkBy#uZ<dWPBUoWG;qZ
z5`K7rLRlNRfyrY@($`_Rn~zfBm}Mk&qU@?gk2zX7y+V>UJ$2KYz@~kVDg{+rW;h;<
z?ec4cU=VZHC~W^LRO(G<Ro*TA7j8<ec~K$`cINxAHR(Z}WQl|h*#|M+_W1p-IKmK1
zIf`g#S~h#i>q$q4y(0SBhACEA*7xbmV(pix`m1R#Y~}4<N?Z-v$AE9wOg9gv{9yOC
z*2sBw=05WHf?qyuqddg9v~>$@C!g}w%$W~OUZX^{=u!#vGHOKKalhHaWK(_LeQqyJ
zlX)UwW&5e|6+PE!*OZYhW63kJVd>zzRwe<8mlYs00?zSN{~G_YTeL8;Bkwu*=VrDc
z@22M_z9E2q<aO_@?W#1!jS0u^&4A@dvalk2{NdU0GN{N%x>R#gV-<N0GZpLn4xU-!
ztTe2ahyLc6`jU5V;F5T@GX^8bRqq{5#3|DU(@!>=uzZN2^2|)_`x|6zjRL^zVk<sn
z)<7BaE0&?1s)OYH_qXP9v=kO8%CD-k;bziK9lTFv2f}uQy*fp_S?&F<ju7&PzF;r)
z&sk5&ePGB2dQ5{$QECD!x{T~3sloGiW#p3d$B21l7SJW()#&+)0bgI#bO}s}@W^m~
zMJ-OH6u|GQPvy{TwnxjwKW)qs;_z`>){d!vO+cO^*O2TV+J`0AtBgc*&2&kY3i-p0
zJsYYzO4FXd9Ng3`SRAWo67A?+k2AIBdAiTK6YxY%b^{Evy6Wtn75wLE(OiZJGD(fY
zaicrKCE=|3{&j#mckD^d90_Tm#m|I%>()0FZ1h0W*cU;@j-s|#u4T2sy_<@wg>C#3
zUaaSdN$20$wjQ^-+HjuH$hqfPBYC_@G0$hH%3<8@<A#16hVj_C+btrO@-D?_F^AJ(
z+p+t;O7Xqo5F+36uM}-#D(sz%MHegvypHfweC5WM_us&=F`E)?+vo230RAXl*^QT0
zXr>hIzCxydc5lP)-bt|jVg}4;ALQhq9511pI<`UF`mJ_I4k7@(gTprvcBgUIF}@c|
z4y(-uH;yNHH3arD1+0$|L-#E<T~vm&+-ca;Y0PUvt*&*R0f<>%)&60kA}Z>>_q19W
z=37-Ux<<8=n1Usw5j1OIavO}SX*6c0le^;Xs9J3CgL*dY07LN658=a3^}Ad~p|*9)
z2o2q>aYyR97njyWZd80c$y)};dw{N2E#&fc6b!^DA@wK?b>{e?sw2Zf31v>16!gc)
zCb0-OIbvZh0cSz_<ROK8dmt*JbQ7j0&{oTBPCutY?CK~x4h@7$qtu9Ma#-f>dMEtU
zva`p^d6V5u7{0+>i0O4jL#cqb6!zHSMPiSDTb1qqE0SA*^o>{5Ev7FQ&gW@Ws?<qF
z7Es~>9t6k>jrLk*Tuexd>rY}VvA0jEq6#SEEaeB{b?-zW3|B7)pK$*83HE7T{$w$O
z(;!dE@G&PMKhue%yI|ipa8mN|4?=fo6|Fe7K{=v#z6(g{Ify0XcC5qx%`Ne$J=^Ne
zg~XV?If1jw4+?eurGeGYI^!vfU|u|PlfJ7~^L)cYAb<HUSoeq!3`&NP4vzzz#c&|l
zxM1zj?IYt(tT4pTo~PNeBT(?H-=e4Xsaegd?81GM1-C|T^&D2|wKSn<^BYF#h1s|(
zzr-)TP`CV)dHnX*8r0eQ$h(0Q$V9QNZhl2Iw_|dR*IlTMQ1H(UjR2CHCAmX8pRCw(
zPnWZB<W4PFhwAD0ZRD6}05GGovH*8yh2!~hv^Gm=t{=@`lN)a~gCfETpCBAFt=RB-
zTa>co`<G^vI*?tl@SHz34`vI2utLyMKiqiAes(<UCb-vg5*L-2UJOz}>w18Nd258#
z*UHVmo4C&p;k>@#Uo%S!a1$Pv%NoV0O}A}-VgGxmf=hQ2+W`~+U>){9hbkNmY>oft
zP(_NGjog+v!rxpy#^Or@C1fF$0%{bJ%|&XYwEW;)O^0#EYng7fF{_(e$PTvOA5+)0
z*nhRLIidKR9FNnR3<nOb^M1f?<PpV3jmm@fm#aN^z1KLoeL52c8g)Lrz5W`M-+J{S
zlL{q56?nQP7*XSV{b7`(IGPJW1cROX^pi+Z`BTWGd~Ak{9-z2jowD^8F91DZ$R~5i
zj(K@1Q4X#Xs8SxI{#-*<^L@@?LtSH@Nh2`mS|#9HeH?L|69O_Wp%aLeC{n?L02bKw
znU}7rf%nQpN(D(_srJQ0ImsE&O{s8}jS@}t%ja|R2K8r<(|qMsWJg!ym{@JD9_2Y^
zW&TU&+y|c7Nsy$dNTHWS+dt1_t5ZNJ^jJhC$aHKXiD%4-tiiJ%3&u)ao%)Kmz3~dU
z7z~cN^_2D9*+ciQx1JmjN6Pw8_cg%p`83^FG5a`hall?!zWqvjczn7$+h8q+_e(iT
znBNY(?TvY2X+dwVOIuS9D-%_d_fBRi9^P*b;V=AG&et9=D0&o7m0g{F0&Z;Sb}3W#
z-t15Sz?=Nr@cCa7BFwH(bEw;LP3EO|081a-ceR0enLnr|Jb-6lL=&>uY&*#&B5esJ
z%${>9354XZh$@_UVvZebNF}aprD$L1#!NIW3YLGGTgXb*ZB)(mZnn6y0TD@A*?CWh
zX<Hb88j+kN?E;lpj5w1L&>Ug8BT%?KR&3C>MgOj98&nwuXd{r7n|8{%wB}JK#a&xy
z{bJ^w4rd(D#!kPJ;lSwh;UZ0$@tEzfAyaT$qRiHGz~v)IK1j3<M@SQA(A58puNN!M
zbr^gMmZLq~Uz(YzY!dR-$E9IE<(S0FA>xbz4o3upgS)>!ccW3OHsa79#{=SEUTj<Y
z!_lv-DP%R{B;<-7u)tJRfQF(tJxf(vX8}D3MVVO<{}kTO4<qKMYY1Emo>oK;c<--y
z8Y+GWPh4U&9Zmy@5hp$zf2QrlMlMNaE)!^nORESq^%UGRv61xZjsH4Z_3^yZJzr!`
zI!ftYNEw{~mGXE2cVQl^I9!UUzSjj53VKV#`(l3++-^``Gq*x1Zv`)r7by=b3J*@j
z@X@heWkwc1zkb+cbH-wAlb1|F=*1nWz}s5*qxTwk)NxR3%ib|`=!K0(mMEg<MxasH
zG5{gUsDoBu(xqkuHvcQ4y$NNroLTV8EYt<Isjel>%GDPd27P#@@1~Y_=L^+xS?!0s
zMNO9WB+pb*HEa&DtwP#b#0JVtBK%?W{ulT4`Z|5Vqx+5@<R07b!&$`X4J=Cci>=sx
z+tvMDlkEhKS-ZPHqto@2SM8Cv3&a~8{bR4a;=m1FJe2_d^n3p1ZbFe6^f-o;g{Vfe
z!;G8aB>PhZ_nL^9{n-%Sfl|z*lvm6|yAxWwvz0SuJZ8mo{Ys(YrLxx6zPLkdnk#2t
z>SX&krzu3tudKia*26cb0K`I>U8ikF4Jj+D!n8uM5k~wJKrQE#su)jCKMp$~rQ@&(
zr_V0)gpac9t?si<4iD>KzcY4;>GzVUbS!&;`mp7w6&-!q<%aq%J@WdF<7Hb?`E(5s
zr%sW0a+Yo8YLbKg3p*9b!Hh>zO;^;C`JArRWhQAkN<}F21Z&YO_`JQ$=<5<1V4F{^
zze%Lc{!;B*`$l)a!>qMPK%aX9tj5S;=@7`0&#s@u9(TFm_W;PV<JKcM;7VTkZ`hd%
z_nI5GhV|q!-kKscIvkvlks?eQb0I$Cob#x4mM4ph#v1g{?*Y$BT^SstoE1FDo)s(3
zUQeq~GuM4zrDarmJ;@Zttm=!df$vWbS+?ZpAjMSoOFDr!rPC1@Y1ORXf8WG81eAJg
zAOHZ=|ApQ0{zEd(Nzcj7$m*Y0!{~p~YTT%A*%GrO`K+ngoBl%>#glpk;1alYhZ|8t
z6XI>fUvK>5FS;n99idg2G~FN~{eI;hiugQ`<{Ce?dM0G*(5${J7l?B6whqZYdm0_j
zEH?hw_5GaP^1r_F*H@M3qgxf2HZi+eJl7F5UAH$%*-R30(?PM7z>;P~DyDNMz!!u&
z=S)bKD;`%Xb}&q{Eu;KJl`?;@LGa$fXL^mQU5~U&UrbdgA>ehTlxmF+(LZz|TTPW1
zVd~LDPpp!z_p(Tn^^iwSHr8h3ZNnMFIlO|c7zCE!GBHa^dib!$S(DVkG@mlDh{;w{
zwY+AJ*4k`qcGba)7JYkr`vZ$V*@$83#Qc~gI*@a)SPK;%=h?FWhho|`c#EZAA4Nbz
zm6EWSxIMYyJv7NeT`ZsKka9EtIyZmorf4FP0{yCE;ZzYe<=2u1#d%kYSz)_rHHfjY
zLuH3TziBm)rSLx6tQil0L(up8ry)ms*9U{aLZjftCSrRB%9YBl_yknzF|p>@O!9Fv
z#K9(ig1|A^v4?<E)HsFmBu8Irz+xk0PeY!F02m@!#o$128q@@xX|xQJa+q5W5=SLL
za#%X`5_`(AAztzrI5e2CCK5IYI#pM9nvB1U{Nno1(=!kxt!4X1(NwBBo{dx(Zm1>{
z-L01*S@siQ7RvUXYzeG&%a9qTu-r5gb<h_%#e>_EPcO<{$k8F9Ff*s5Nze46EUxL<
z+1qi^>~61#U4clZZfW8}rSFZ-5{jC)OJk@I^fQDB6nI?0ZQ9^2N4`V*`J6_C=^^_G
zy4~YZsczMk7rU$EVFf0Nal!7xQwJ{1u0fd-bS^x_0>!%8w#pc<^5FqHS*yr4o)Nps
z3*CagoGe;YZ9o8|8zmKLv<<?<LxnQK;SzrHFK-Wrz7^~mBxn7A<&Yf+Riy&0@7Mf|
z`sE^C`(c5e^g~MitBw<jePe&!5&qKE)5M(5Vknhbu%YVLjFrux>E}wSKBQwo1x}{s
zcQ2^kgrSrFcv>P!AiuB2zP&Y_`P{L$H)}XQA50;Zy13`}(Y2%ZVY4D8j<C)%fDEd4
zAeE##S660i9DkzQ?Zfll(or0sV;uz59Vr7RGf+M7IkYE)5dhEfsLfkD^g19XA3@II
zOSM}7F0P0YILQ@}Frtn*3Ze`3O^iFg#`1$(yMMXD6p&bgOYYgY_J#kjhWSkBvDz)|
zeta*L2`M4PhK>p5F}ez34XJRbS7Eca?zm%w#L%|=rE2gRzuS<J)dgJ75TSyD4aA`*
zu(P7I<KK&SYe%fjKnr!VTT**o4i3~-CV=~&)J$GaO?wUHQHfYjxV%d^@$(H_egZXw
z9P0_dXO!~SNGYK>7rtiRRFt36#Pc^_Cr5s1y2YcVrHkY5G3eGHfqG(BUmsW3^Igv!
z8%#PaqT+c7fM`F>`eWFMq!!AL_~$RJpy;Q(8&CrtAykPa{qofaw{bNj+B_ZYZ)cy3
z+-#ZAGm78yAo`0phE~6J-W5u2Loc7#t=H}c=geBh4QnW8z%6kA{%2-ut1MwTc$uL=
zEEk)@?9qTQn7&<*-wZ7qQF4{TrV#r+3sBJyhu%cAKie98ATxr!!l4@Bj01nQB&2K%
z{>^NnFzv&NY9hBB(=qifLJDh^z+6glovOC-Ahwu);3Ul{3`SdA)7tRDLX}M&cw>Qd
z1BKQ}E}rQQpuT?IM5WraU#B2Vihj$V2f>f13#vO{5^CS)7lm2>(0AARmLr*UT=CN1
zYO#1sf`RznM@xFXWV`I}3Cx&RG3#*rna_{$EKr1A#c}!U$#{x?i}Pkir;}?Nq)@2W
zh92Xdw7ek?A&#Y;M-L_eDV&*;ZIby64q@4`sRq&;QGXN%>s;92v*azR32;p*-|;l(
zJm=!@H%0O<L(TUe;oJB6sXepxDv&~SJW*x|T$i@s4h{1&H*2afMHF(95iAMt|9kI5
zoDLyi#lb%&-(}PCN&WNzF8<gr98hZe@~vFWqE3hz9PlR%zAcG1S~uV%lDnd+ku#G6
z!LX&3Ht1rz8e#k0DT&RI(EDp43*)VmJo-Mz8G|v#e^&72Pq9WvY+GoVI2s-xDs^Uw
zZg{%KOoO{<TE+9P^3_xY+819|o8f5N8aMo2I~#<2<Ra%Ku+A0?)u}Y35>Y9owznmj
z_MWv-3L#>y;(NNhpMic0jYferZo{FoipG-kIA$V$*rdv_{f4(y-CA*X47jvPRYzAl
zWB8D7JiEM4kE2+aFlg6Vi`l*bfnV1b@R?c(RD?%_Q%~ywdZLm&H#E!-)%Nm?l?ZOM
z;nQhom+=~{8!P!A=@JS7E}^F*wEP>HRrda_lzXS0gi$d5YRrRH4PJcf=Doav5V?dw
zK_5{l_(l)6rB}m?m(b4#C?QB;LkTG!{cl|vRErYd#IQPof&c?gUcFhSwn6%&=?(W!
z3m%_DV_#Uwj}-C!JVJlgtEi-tJ5q1Ikn4vvMBcfn+_g8F6))JCqQC<=rNA0Z_Y<p0
z!5DPEP~w%=PDBP=y}416WvZ$)vN!6fTDGqlVzMV9?ju}R*PwESf=AV#UTNCP&>CX(
zA*F7H6;qZ0Xf2NzsM}T-_w{I4izw1%j7puwjH_87AFLCUSd=`Y*70Jt4!6IHdfxh0
z5nG?QR2VPaBUpP$l$zV}sGGiK>>F6@uCU%FczRi-?-ur(HSjiB2>!<8S#QX9ZDOtd
zJGdb`f4I%~4m<t{bWeb>j&lxCz`#_-ZhgCihpKjVTs@@H;GcE3H+$~;*lc~X$6pP}
z<KYw3i%{Xt@uxt4t}ro%TBq?HA~q2V88267uyKB4Klt^B9%Sfle=}W}3!my}0AK%a
zWA7h4^52rolb0-ad9MQg_xxWs!G9QH{;?!!jZ7S!>6{#`|EDpAfgS3<Pe_$3Cj<QC
z|LTCP005Z(;pL7d4*$z=#B1fWHJ-5dLM<x2L1Lnr+ATqqu$q-fx~ZxPpGR_MOVu?J
zC@wyj0a6c8E{62`b~V<`NFb;&adH_b*^R=m^k1v)BEzGlfsAd~H<ce{;zfqE_4j>j
zugANm<;Tmx0Xb@kNA_R%dU%ZJ>&{&}qQ}D}3H79OJxg{3Q<Y*wLwj_@hGzpr0OE=Q
zbIbx$ZkQ)$IHa70LFq4v=X)bDwCiV<&^KvTl*Ti`Vl~nelPJfEjACS!F;>*OFV0zt
zxFX}M=?6>1q65us;$^766a&&Yhop$BhKM{z;Nb^wU?6`z2_QGuHhyk4{7M&77CL}U
zVzNqt_G}eN&}T?ERkfRvibu!O<;u>^jwzTA#ngqVs&?O@WSy}an_cAwN@Sm=)|X6T
zY}u0pO)qVgM54{E_gQZyS=wzERmO;K1(8Huj$01J+|*1~tcs-J)8(R_uur(%(|wpj
zsxGTCW#oNWxpdo*-mPET%h)M>+g@;=N!qxy$-5EW+#o)klCK}AwF{{%{~$#!evGWF
znAw?^RUcx@qX?!#2uBWyT7f6{fhTg=?xtP7YU1djce|g1yC>1|66K*D_vzEtP?VDa
zFRnZOOxemgQ^jN~-RsXi{T*Cf=!;?A5xB9O(&N#_#lsjhw7xFDlUiy2z`@7J!Niwb
z*cpB(cu`W%Q2`KSHw+Dn++>zJlVni_sLS2q;r0DZSyX{=E3(S;TSLe({9be@zYai7
zexG`6P!MP29W?>MG<?<Z#(iIQp?I?XfRp*_@z1&Y-M5!*+J-kv)Z|?0a#@s{9|o=_
zORk!lUwybYgLm88#knDfG7c`R+^(MYzGGdR?-#hv`TKpbDnQ<zO`on7byd0KD8o5w
zc-Gtl1lRl*q!&2<Fql3+!Vo@REFTa+L&8u#%<wxI)$k|@u6>OMs|?h;l?(_T%>W85
zIKl7aF&C&H$IPM?fD-SqgWsCyfn%;Td6A>+)4&)onWe_WYJ)h2J_dZuG>kj+g3FeP
zDi-O5%4y3c$j!H*-S5}JMc3}%i;1oUcrUTMP#==X^6zWI$hv%HY9OJ^6@iB-k$zPY
zH<r3a`7-QyAn!p~_BVt5e3aT9pt%X-;<FP9XeaQ5^1zPM1^!;mex%2P!nOrxJmygg
zrUZV`CXyBYqOX(sO_#I%;R|qys+i}79e1Sfpr#0NSOM2Ad)zV#7}2AtTqO9SpQyay
z(e_R^sX_ppz2T#|B8%+Td)ROG=q#-S>VU-yPGo$KNnb!vX<qa+CNfr__E-Q~@M+dT
z4X)&O0xFVsQE7N0xSoFBW}pEX+vA02tYmnI<)pVTa)xcBHjW-JMjNhxr0{gl;L-?p
zVp%?1+zvyg%2D=v11mQh*ajh9ys{@u3Mb_Wfjbx)#s{}SxZRjgGc)<`lUM&=E}yWJ
zk2v_DqBvlk`}^aaiw#CUPSBg8U;XS4c7*qz`(Zy5fA8;SwBOP_@*(^W@Yl=x9y%KW
z{M_?X7zm00Kj!wHCnpsMzbkk%FLLlsRCM6#Uj;O7e(yTJzMZc1-~20Y4vwR}u`=+y
zSiT%=0DhP`xV;LxY&@8`6}cUbWOpx5x~@3SP36&vYAp~*6NZoH*SS;lb-C{`P<5DZ
zXp?{dCz#5g_~MK6YXPKv{X2T3v?s#9zt{G6;<52;+%O>KIJ#3%W8hYLC}G!r9H343
z>tVlqWfqwy<~M16KcMYF9%pwsS?-x`G_r_0X*&VuI3y-~pl`w6iH>|(A|rp!rUX=l
zQWU4TEWJIdyYA`_4KnAb1M-R_yFq|YVS1wChK!WBfr-bI*R;o9<jz(U0VFmVt5<$j
zEzw{lyKtAlP`+nF?~;QfHW|I?I!RN%)k)eEP@&%`Dq(V1$^utFXKr_>tKWH*3Fe}>
z4J=Qdq?Qshg{AEx(2@c0p|e<87T;@)W?1R`koFGZXO9*G;|@tWZrh&{E}TY9L{NkH
zBYG+k`{ku(WXRUJuOXlNKm?`XNS1~!Rg_abg_pH!lMteIOh$yc@@;*V+R*@D2C(P?
z2_CbEsE)AWi6qH!wJh~r&~|f*Xfn;++SOhahE1P=tW1~z6JL;U+~QXp5LGk|=69ph
zQG}41o_O%c)!>P!KqJp_9lfN>;tM-&labUCX*`odvJ)XdeQ)DK+2sZFun8omCr$-Z
z#8$cm8d3Hil;;8O|DFD68FB*$IZKQs#EuIkvVmiY5cE?bDtrPo;U@1H$L2;F(u<%8
zEEP=66f-yz3SQYi&f&WMIEjhi+8#m}5i7|DqotT`81v<%;i`#C3GAOhsR*pK$3PQ!
ziba_t9cupt|0I!=Nv9EUn-Sv58m^?Jd@8A*TC@d)a@FQJMlHy4Am8>#$D~W~6jC9_
zn&gsA^1n3!3mj6S#4`A%pw9gF;i>5<hGvEs)+)*px&W3-xgLPRd!ZE7^Yk+`)EmOY
z5NbeB)0!US8y-oLm1c;8uHu*y?NDe4I+C<{9O=g@pWN#dfTG#Et>yyo-fDCubh`kG
zCTfeip`w#n0KeO?TsqU5I6)K;0<!M;#0cvFghpVGH5gTH#9BXXZZ?F-aSq%d^LzCy
z&qD^9KAP4qfH|-4SEr>JEbOK%^JnqF5or{aihN)3m`4QoVz;y9A;b)e<0)hq5%@gS
z1>tx#(b*kxwkDGy_eUSmJY6)6fN9Dj*9;U<0|NmWaHQrSLm1vtxBg>cMq;d99YoXc
zU*%OD7=S2)K)5PMKRk`$r?BF($fS!x@xYAK(#OYAMBZ{VmUi+D5nM+-zb^Xs#)M%Z
z(ijQ)5+7Vv0X=d2jyoHsMQUi$npcCCLgWKArhI`@{!e!rUwHz+rd*=cM0@}O?$&lB
z)iDP}q_|b~#0TUtm>*s^4=|`VC#VXE0EhIgJe~C6mhm-}`%xqYuU*y$8e+2T(IJOs
z8Y3JAEcXR%5sH56l-{rcQ>1uJq280p4YYc}q(Zg`<X5<Y1F!1rJ=nLymYz|R^WC>G
z_H}2}ffvI!TY5!vR50i+UT!38K5rj(I4nY*EZ~XHNNM<Wr`B|YCn$eI8f3~qmowD4
zdpH(n?CT3AT6o`L^9)zF^JNhaGB!om<R>`plYMW!Q&jp5zVEkxGbZ^5taOQe!4Yr+
zV^(xOF>5-*Q3vY!$ZFFZ3K%lJO|7Rv^X^O<phw4T6p2U|l{~5>kPtzQ%m&V{p7Gi{
zKEs_q@^wK<-8Z7CxwTto$Pnq$b!GTbg5H29ZY{Y{*Q<V@HXO>b>I-(k;1&&*s5oY+
zLJcIf=0LCmANRi@^_^6XI2c$nN*TZ7gCut^{GZZr(5|1)2rO`K5$wP|Ft899kI6b-
zN@|C4*j6|ArogWWJoFl&8|R{LWml?f+{4OWLMhfkQ9(0?P!fBT$4F>Eu8|Zccsy{4
z7X&)lPs(P(uRh7-Qh_Jz#{H7I4|Zg5|LH*svkhDdYBOC&rpO8m`dHadop_E^;7vj}
zsETgLsW$(VdRFdyj3Re<FM2fXNY_t|zE@u`8(yBK$lpcrMP0Qp9%tRwJMW>rYhYsS
z%A`>eO8M&L%kU>A67;2{DNfEKP2apCZG(R7Tw!96JD|<X>>f?usJh=fZO|R0I!RTn
zXNm+nz!zlaxq2J1JWtoqV-bVNzy5<+lWv_iqRX?ES)NfKV8`<aBiVjySeEEmHwW#K
z(lE+FlVy+)rY+-G@_Ds^_VfksZ!qKei-t!pH`!l4j6l>6ZJA`>J~aAbRni-6Z@MUs
zPaFYJFk!s7nA|+MK)5O;bnI-Z{--BxEEF~_tshr=+$$rq2-@O>wa9G#SUP;siD8zz
zmKfzF74^<d@48$9^gFS06kXE%iFJ3y)%m8x_4Jz59aM_%5w=*(__2}>g{IE78;F?z
zGW2w`#H|~BfBHM1d8krSfLPHE2AY}<!!+Z5n-j`Lw@37Jd__6liE9p?hj?*(c5#La
zUdpnW>J<wm;L@2m6^*b$54<aN(@o<36?-S^Zd5?S^0~6UW?r@6;f5Zpm31mB|CURf
zc!hp|HLALT*@RSn1z)_5Td?xaE(NYUS)XB?^h5k#gsYd%kM8b^3MSyC5%LUFoJtsH
zWv)LjY|&}WhU_XMpgqYVxt&QU(k@@+t2dicEAZfEtOJv-Hc}W&=9fT>t*%lOI1(-a
z=2hJ`b_~UrE~1-PHH6E>L5|>?Z@|RWEwSR@<)kPum7N5aa6qXR8`N-Jo<EJaVK)eR
zW2h!f0l=GHvn6?%0i220nI-dVqF?1U7w<eSM;PF*GXY<yqFBVFwmui|c78eWqX6a5
zYMyHfDWox>rbPtH4)a_YCe~IyB3;X{#fIt*nf~}%JETV#FiWVkieL1&*3^3B#N2Re
zN9SWi)LJVkIUZ2Bg9eUiwxdgSoY@d1aE2~l{je=wi>n~anuaEYTe*5B;D@R$Asp#9
zK+QzzRj%vo)yXcrMs8NQzOqeSC^c7SIOf_CH0SChYdYb`PL#h<4G5^`>2so>01CW9
zFc-|z<+MRjQ9*Pawj}kGRlt1wInlegH$C_{xiE44Gs!QyHsMiAK})#xstnX$lBHt8
zq!||NY>KKA&QygLxRWs1kcVV+hSSNTpJd}?C5umIg<}h5q#%DuT1VhS5?Klra+RVV
zZ5NkX-};%d3;;M9DgFAZdTC_>6^+$VFl*h_(mATuPNmfR+YyuK!N@BVzM{6?m5Hq3
zf@e<*2UHSflEG`f`8Ntv5JGfvO&5ek6})sMgax_dt_ISn6J2$J2)!uiyecDn`RB!8
zHHncBW;nqtD4`#**19Rm)YLG>863!^$bv&;q=U1=K#%XQtyywM6#{~%B6Vw2gJSbb
z5Uioi=^oVLyrI_*=kq~jCg3><)ZV#(w&qW=S{ABe(rj2zN^SIHk1)wthAAEUn-T;4
z3Bn>F5U&>R&j4jYf(h)U!xaHxQBss7dG&;OXpaC^%j|x6u!49NJW5I~tpF%o!Ph{r
zA~9SnqDXR!lO`ajCq@QSvrARYRZp2SviKP;o|`7tn6><aTi56E)R(D=u&A(p%$5dq
zaxDc>$aD6JB6mcwJJT8Ah{3rG@R2n{KH^mucxzLWz8l_=WmE(p(UHeierkVnt8XrS
zl?&*+W<Od2h$vkXd*PeQpTEeW{+x-8$7_!ugi~kv)^}fm4@dG>SPjwQSBNnTL792_
zENDl1M!8M}KC;%zPq_w26rw$MgYuPys5VgyY-c7Y2DM}y8_vht;CxR+z`FVWX!+4P
zzR=mDEe!Ilt5?rQv^I`!J{nS9zHB$6nvcatD6@6oA|W{TpxG&Wc%Y;l>Gp27a!PZG
zoOovH1j-FUKnMFrp`lih=tf!^U5oGe?Ku6#C$2eh#rNAht&%W*Y^yZnnUcukA2unA
zJL)_M)Ie#f52<}byoTGL-lP3Ix%~%`DZ^Hm*$ut_>?5~Pq0iM`MT?1$oZgnvXVFkY
z8@2?cGDdr{M8e#<S3+Ik1O(R1NYj<HHUaa)=YLO(BwFLk(cfpi?`;Q6qs|OeVfR1~
z?r|q7MA-=?3hG0=rvdvt=X$*v7GVEl8aMqLz8E2CV?i9~zzM|89SUO&Ttz9|sK0p>
zGz-Jlj|Z#q1XbE~u8G}7X0{{&=-voNe|H@i+j>jVI%viFL#j-r!a4Pah>e-|SY5L`
ztbGF2l&LIknXGP>s={umIc&%x6+OjUoNH`)YjL<_p@AJcnS|}8m5g_dQw_Mq9Zyr_
z;1#>tQ;v#bCxPUBbu0K1Krx#9DP}kQn@jrP?-;-E`_aIMF1AC&SMUs75T$c{=YYI)
zib-MjM5LvBTqM{42`Y>^52Z<`Q84xf5kmbO8IaQ#c=GX&HJ1j7whk2xNmw&N3!T;E
zf%yapj`Mq)31Uw>W^w}n8eiv)L36%XhIJPa;4Tym<g6JO9g61z5lVyp`T(nl<Uz|S
zf06);03p0EU8y7t6DAmvtDbk1t6IK|_uzJAn^pWXGQXREp4&K13d2?Uev^<j2@j2_
z`=B3aXbm4_*jG*Iu~!Bjj4Ran$w6=ZKjJEG(4`xtbaogAHDl{>pzW~-Cu#8Mt8cu~
z&9)vJ8vPApT9#o=XA4w$AejQ{g{5ge4$xI3Pm0UKne}flM$|b|-J~YLTH(waU&zq*
z{IUs@-$aKkr<g6AvyR>#ssw5m)Ye^{q!6SShD@k6^w1wXDntY&UE(SX4HuCe2+Hw1
z@xWjw8JpbV9;X!${f?nP>t7XtuDMCN2-wkOpqXG{0*pXh6SsbxMt;@TTG`K+>B>=E
zFF<K;%`nQ7(@F&e(eb;P2FW<uRE!bow!0P`J3rRg27`46PZkdvbl#cdu-lIF7ZhL6
z7)5flRJIY5+AEf+>St~H*2BWfkTLh4qkHvP4P)esn1J(h#JF)Mf$|<#(cpL~d@V~@
zl4hh5$`BSG{$bXso~I?`Pv*FzxyV8BD$lC$$BpxUM<`oG2M?U9V@vuJ71v`+O~7Pa
znb3R7SR-bT<cPNPy32Y<Ys3~=t3b{L{%_H78p;sTif;QsMEj(CqOR)&*#CY<?<#UA
z&v|3=UOA{93OGmI3YfjDbyuu5<wjNU0&wl%8@bu)%yy@D%ZgeWK{sl_2LUY416ho#
zI7~0hkkhF!IQx9*?E#Nm##EWQ5Y2h?;lR4E9Kdoh4KB)NdHzAh$e{MCX#>?HXq=!V
zBrRmaVaHaI8E+wlMb?Q!btX!7Y6B3!0ECAO47w7$<RRkP3o(Jq`zm6h0yF%{ZS}oW
zQnki-HN|<kT?tJ$wusJx8Fi3=p5IARucvk^`2-})6qC5R#_nl{94Ef_v3k1JK<=X{
zl>9+A4DP9|5b80g$vhFKMNdY3i@u{A)xht_-E|Z-l0MqfOKd)p^^q{ze)q&iM{x~i
z;`c@-s%o(fEAX*If;HAqAYw+S%SuJII%dicEdX2++(_7noAgq5QEGJT={aS?R!ik<
zg&nQ6mi#;j?svfmkiXmxOkKOouIx%nKH;IG5RreAmD9G&RVrx*nJi2xw{`@0=<iiz
zH;B@aj@E)L$Hal|!16D<jmxHMH3s(ABHjfNtOshZ)J#{e{)Zz%32dAek`_`j%RTys
zm`ZWP^Z4SzEi+GZL8tMYJE=a6@mu#am;T;ie<6j19o1aDci7I7zE*j2b?Wk<EG_}P
z-~&^z8u(O*U*5K&KH93Wpcg7}=)lff{d6Fb!P~AV*N9yqIa7vF-t-Rl3*xc~Ay`xl
zK~0PzB>mSP?KgFA#QodSU575lJ1aKusJw0W)Tb-tO+tc{`pb1{r>;M2hADSo<iw|#
z+`iX{@QbUy*Y-Mr1ZsOf(^?u6(w;~F58EK8mq1l(f>dhhykoaAJ8yktjDt+Zv2FGV
zkobf^_09k(0f`N<;anK+w=|6twbHR^yMvS91P@P|s_!O<Yf?V<_gGyjs~1=;JNIUv
zaB?*rWDGEms9DFTVrYc{O;FM>`z}vN0-8Po`ITjuFEy{AEuyjO;91fS#w)P&7D_Y?
zzG-Co`*3u?*=Sqv6bW(_Ufig<e3Uc>5=gs<)kp$JPh`Sb7lh5U89}V^U=vs}GT{Tx
z;Q?it$XK=yJ~Y8S4z&@;!sxqzE&jl+<qXJAN{A~%Xjk<szx$DBk&2F#y@O7foC%Kp
zPgQuxCYF^hZ6*Csz3V$RI=MN?NS-kJWhCxG&lR2UpmoLGiZS%)1h7P}OJ<1adZ0$*
zWV2P$b)8(E7m8YEkFs5~<1^7z^G9~kq$!potPG(sw_ZSka%F}SREJk+d9+~*zwE7w
z7K+-kvnydjHbl^aGM#kDNxNoaPQP2UbQ=&z>wc=N<kMpb{h}4G)~0FGp!rI<2skAk
z+GF!rn+ujlx7||@$!OqgZLzNAbQU$Ig?mYC4AJ#rmIu~OAk5gg{g=SKP&h>KfxI8K
zK@XJ|W(p&oV?k+Lo}kiHRen&&E?zJHhcgYEBDxX9T(A(81;sNM-vt{(NHJk&?A#V|
zF5k4dg^XDUTxa>h(HKzN?naib83C=WsdHqh%)VwwC@VrukC1D<i|Rt43sf^s;u^AB
ziqJ%e{3q?*VlA*kNFJCQ({}@;wiH6arGcK=#3NXM@AIc<&Smozn%b_hxd(5&_WO9i
zd{DhMPB7$}{Fl{*X@_;y;;g!qys=mkvMzU{a|4>GeD}2sbd+vjqprQQ;@u2IrfiLg
zIPY(Tv#s+}VsyMGR|=SZ$1!Y4^j`1#IKD@JoTW}_iAJD^N)eK;YFw^oq`<3}=UIJ7
z&z45v1T|=v<2nN>gK8P>#uviLZoG>fa-@M3xXi~w4c&~E8}v93fGI$L-KogrcT?Bv
z3AOE)zSw53z){1S&$tuLjDm|h6>ia#Sg8qdZ_H3TEcD%`yqZaH>`vCfL%<~v+|^$g
z3$OmS)DJ@Mw`f*6<rVf@Y()rj6Ikl?3;e|!0+gC>c-Sejq1Iuw*J9Gymn(Z3Z<g}T
zjwa#xg$T8DEn_$io5=Tno(_2E!NPhIG}wwQUc0_y0mOl;sWY)>kbNgHW8!3*lR$Vv
z$=`+QWk-f-)<0;6Xz^T+QH}e+IC{`+S|MoiN=5q@{5oF>oJfL`p_!FSYYao^Jr%jJ
ziAz@#kH*lLYYbPRC@`(5aT1v}xGS#fLQ;5nLda0>t-2=if3quMMTNgGh~382gDv^G
z?x$gSK%^#Fe7@q)N@N3rjCKi7zCMYtW6^xz1g><RN_d3YZ6u2*7^tyA2i!GrGT>u|
zGEJWKmr-_af>GC~J0;{oG7}Yt-#EVyr_-j?^~}e}j;V#cuV6_X>=y91zQ@>p9zJJI
z$#iGQZ_l4Wug0Cb9pLjvPB<n%n(y*1@Vdry6-0vnW@=Ryw>IBFG*aviS=aJV^*<As
z>9A`YjS8TJ6+fsRL3}y@JRe&N<|h~~4Y@wSSbtwlZ3Z4Tp10cNegAeOPBn&G{|TSv
z`@7=lz}feC^}4!B-_^;n^BA1Q{6Nh&nM$ux2%Ums6pj&i7oK>xb5-(Qa>10m^O6Ct
zA*6Yit=+<5Z`_2I<I^h49cI2hAVu>q{&<cAYtZpg`aP}0FZ*E#o%^0_>kJIE4;QCF
z*uXFw$wS?bn$_N`?j8lN`~46<18ue;^Er?u1qib6i}>Ji|3&aXCkP@!GB>*Kc|a%P
zps%M&A$vX;0<@RMgA@Rb<hcG>=k%;V?0~u#fQc?gPI`|*9M%>b*x-Qu^a7T)MDg?8
ze!6?$(F^gXRbJuAQh>+>0~$Y(-(4F!Of8rNxuI(Vcl=5#UvOuUrMI#jf9j%@A_8q&
znVH<&2vGus-M>IK7VJYsnY)?a!mTZJ^STV49w_dMJMj}JjpuXR!*7Z^ora;?OG1**
z@9JO1`F7*sGU02$PR}=txjpu(vm-I4L;~Cdww*2=81)@(XQ@q-9LR)Jjb-pK$_^+(
zIh{DM*a=>X1^wFWPqv?|qcm6DJs!5P%cS1Bh0=F3u`gD5JJwNiutfS!#ume)#r4nt
zw(x!D&f?d8Z6hN1F&eF4=3V6XNR%hIc${54`^L_N;_pfx@Y~#sErSej9#3*cZNA;{
zLA8+gas1iA=B}XD<%i-?G;9lE^;aSGAfijMOJ`?XK-^E7C&*l2<4If#fQS9(>s&Kn
zQ~211OXj`~O1=ei_frWJ>BX~v8xRf8-?Gj+-7?6hOqOIgcu{waCzT;6W|^nYZ-EKL
zQpwioItIuSI|o<NbGI{%iVg34jH2CsH#-K8-b*JHkR?9Oux3zB-S#fj8NkPGWi6M(
zF4s&lKi&qEIt0z@OG~{VM%{RTUBfcaw$%%oVJprK4NDe8|IZP(mhUUi(yc0qy%aBY
zsZ4OU4LH{>x%Tv+e!MQ)P%3cKw@X~0kOybn$lJccKMOyPaEOw(I<+{^{&?e6>JO``
z78mgiyVoxo#mS>xCnGyxPK#GbYda+RICKojk>CW&JSHew<N~Y*TZEejscwXFGD%x<
z_vH$2hei6S%Kzwd_mJBq`>PD7>5grSE724h)pDE+ExP)+7xB%>HBn%-Pfni+hrf#i
zCjuavNX<RLvn^LpPId0?z~hxMjl{}AN&1hf>@l`dJuL!M4UD>acMul6%dqNHxQ#5?
z2@8*iGHIa1f52?lnIJVf-dQv{H(B9rmh_BQERXRmVE2t^0@nbO)morAh!8BxN(}tx
zmN3BIgJD6udxO6^x8>`F;+MnpyP%V4_-KPU_zai}0l!{Ph4t$)ZhfJ>4)w(SO|6a=
zg!QY803p#VEZVN1VdGFeH;nyxdgF}4c?|HetrJ#0F`6Z?KFe*8Yh05f8Yu#?+%s)3
zEvl;lrWmcT-g_sA9sE{Qy9SZym&_pGg=eX-<d(-^^Pje%p+5+(Sg%Ow`a2ganrx41
z0BE3u!X#QqHm%3vh5%B*QoxO~V;B~roYT{uofOJ5zCT_84LrLfg*og4<rtt;xjVzq
z#GL!F^H2-*4#w4zeDufS@$mVfK%=Yeg`M&txN4B}U-_?d4rBm_+P=WUzTlA013(d|
zgA*7OM&s&(1x!xLCkq|3N&G;|`_}ER<$&K&j%Vy2WGHS=FV7D~!pjGVNf?6yYDENV
z|7AT1+D)P|NQc*!ASzCR`@A<pr8b}40iVkgf*SplS2k}W1m<ZFjG%`XE*V*x?!|hE
zs9;~w>G9_=Qu%1T3Z>BLd&<g8kfTz170BJINWS}6%l{o8*Xa8`pfe5i-Yvo;jD5Bi
zh|GbxxpsUj*(%=OH>Ug$xH+JQx@W-vvkn(`6oY8`#E&F8=n^^?G!X<z4cb<Z=pw6G
zShg$a@6%iVlar(+q+g<{d=4aFd>~J!ni34W_|#PJ$Xs8CHKe-e{l232_!_UL8=*vP
zyl7DV{jB~rDH~!hOe`P^>vPK@P2w|glYJ<qW|vET^+*Up;Al`WK@EIk!aakxCYKVz
zblNavE)!CA0Of0=Q|~RHzfLmbwxpb8e~H)C>H|RR;<x)pj#bq%Ue&AZ$DzDh_0^D>
z|1}@VFZh{8qx-iJzFKs}n%b1*01bdzU10LISZSCcZJ;WewT!&)xk7;HuET<enA>$(
zkgUunz5K2K+ufuzeF2g|jvS-R7_VIpudh;qQUDeVaNJ;?M{-5DQvytT<_H}yFCP{Q
zOytf{H#{|>qg;AoxPRBDq|qZYck9!#U_d{dxF<&ICH*T)&htl9J$%$7JQG@6Ab+L6
zWZT=*8s*X_1tFepEaqdbVEgS*Rny>}_&K`IOO@2MMaq^_0$<iIzxCp|HT`ZD2YNsi
zobG>8YQ!nRJZhBUrvfp27TMg!UFX(e{Vl@&f0vr`pBW2*m43_uYN{}@o%vT$rv5;<
zcNL*M+<3IDq@ay&xUw~tIaQfE_n?GBg?)>4yLqHs)eH)GnXSi!k^-c6-xmb;Efx+B
zrwFI?4s~bgk3Xnso+soWi4Gd02bJ^-ymXQpIUjWWv2j;0L>gC9EOd-{43Z*OyTWf$
zUPkbICYe*z!ue_KiO^37b%+tuyo?Mj`3H2~=bjx0WOg$WAY(~OH|UJJlKLoq($h+V
zeT&r1k*ZDF5$_zVj<ls;Q1?C;-R#)g=LmFo$TW(`X-tyCTKV~z?gRO{ic(!{Cf7BR
z+w~c+ud)K?6<+t<JBVETy(u5zBpdZ`Rpd?)x&%3z0sCa^kLI2^qD=wY)D&zaw%syv
zumM{kR$n+)U(EUb<W1ar5Uirpk=+X|UYvWiW;PN{;ezqYB3P&Ox;V_mO6CuCLtJ({
z8@o2^TEvCnDoa%mI4@Mwo42ayWi_5pwA~*@Zw;`bDr`3%W~J05`%b`Y@_ZtrhgG2O
z`(Dk;es^~vO%pCN-Jf1l_lz9eET+A9dnk>7Fi~1$gwQrpZsK@=Y~X*_U-T`3=4I!P
z4o1S3fExn9U-sO=G2I=^|JnAQpc)wTtpYU6@VuIx(}?H<sAQV1pLom$f)yp9$R&O8
z%-S3Rq!0r!dr(Zkj1bP`*=8!&LsJ^!hrT3_Fx`EV|MXd;)X!=c?QTvZq+Gm0ya5;b
zta;5QV?&U!L*f2Pq6W@e(r=LW@}YSawEpsMZR>;k7ng_;co#Q2qPq!=ts`$b7X#An
zPdt^!^gqPG;n~ln-HNkm2MbH|ml;L|8+~ENsO1KGC-XF89M1OPl#aBDA!7~R3ooNU
zoo%u~AS)3MU%v{II$ORL(;aNXp>{?nqdwb_kctjs)x4YYOLn2|uux5pU<DU+9?B3e
zM`mT`euB&UDbptN3d`fi92~@!cpqQv`@`Oe>mC)NGnT6YT^4xYbAfDG`V0`_I$uiK
z$H=_O;0qVY>OeB2wdnPxnwa`>juPA{oz*tyPXn3d$5++MaW%eld@OPY6IEj-K|WdU
zr9AL;yHrJTb%b2CT)w|O1horrB*7eW<w%It=8_2#bj@>*4*YS1l*sOoI#uo~wMVBC
ziy0C6p>kUSbbl(**u&5<qPU6*H`O`Pjdu*^%(7rPxpF-(=a0u|p2D32UW6)VjBANV
z_=kY}?3*KQR7t62+#WR^dlp8P$(Vk^OZ6ivIhHcdvRx!{o&D}l8mJ)Hp)=fA7W|rH
z@CGV=!>rHX<y~3!hnOYU(z{1wDrH@<;~*n&wt_QtivC!|0jrcP*5SOAH$sit-{s}+
zCy@|oU%h*`7)H4wSz!6tLf*&X*dFP*CZEp$JyV(Zk(n8V1A`~2s_uLEBM29;3@iDV
zh(Utpu*`}ZG{vCWjUl1)9?3of2mm9=_qp6v5)6$L2T3t8&b;W_TXzv{%>HeBn{nAO
zORdvC%1a)=HHvX8y5=ZF{{!i4vnOscUxK^-%?z)y&<zC?Q(k9CMIyxW8#BLt?Fri2
z14RD~RM!K9?Hgd%4a7AYJ0t_n^g{QLyAseEWfg@d#a1B4#HE*hMuK$kE}+!usw`_{
zK4?B+G#}LzkwSW&>%WYSefeIbZ%_1lEk=Gkm{1x;d-x66Wis9tYY%^3eC%|-N9Zc2
zLnrzxLK0)79M>wPeq(#MB*yj8LBqr+nkVwa>fP9zwJM~&zt>CNa0Ue}JOGt;E1@2j
z2ti%kA#TeI-YFGFU{8=VC*#s<HKU6%-OCz4H?qrIWciWOc@=^<_DyVNIURl-jo%pS
z_0EQC;Cf{{LWt4XhC(OY%8WE_nPpt@B7qbu7|9=D(-6e+T3!wh&JH~oS9HpsRwySY
zzw+P*rtmfwOH(+g_p29P$@N!Q_~-xATyBz#dZz!=M;HA|0RE@W!hh+b|95+IPKwl;
zkvjg!8K1~ZljR8Qa6UNr7;9L&o@qD%1d@>VXKJNyr<Z)s>Q`z&fDP{1_f3!AUY{L0
zyvfQt8Q1>ShN{p0pdD8<-=G^z1r<Lk6}<l}da6BtQuOm+i6DH%N30p+Vz6+11xZJN
zw}V872SHxyyz|zBg9AJ5wf9@<Y8S(<RU(||)~Qtr*(HG1ClxikpW12>Ho}_|n!5vO
zlPM1lUP^jnwf)p7qg}nl8LtdEUxE++RHhg!8-DrMxY-h1D6x<I8;J=mcVXJk8W!MJ
zK7_A8c&L$$7^fLjsAHsrAPJH}KJ_Pe)Ke5{+h1sBCVP4uAZbH2dU{z%-PJ>{r17x~
zvbz&PR=S&u4FeM&Zbcv1xnWt<7LyeK-Czse<~E~c<u$I$T5s8nlr}xd7|M)IOZp=z
zrrSgpH~}sLS#wIOqq}8dT>CjOwC4CezATexibSNEUJ^TFb;#Q!FGTQp9$N0VtBZ-a
zf(;Tkw!!(}tbGLt5s<`Qi*!r%j(bEY8JWqzya(<cs<i#u`pe?(?4@au-9J*3(Q2E`
zelaYg3o*jzg9fF6%$q$zHC?4kO{FKZf%g`e;?jwUwidRJVE4AtdW$Ty*_B~+H=Ve*
zhDDSSmC%AsQHLBJ$_12-M<dSDp-pn<Gz?u*h39Z-%wrLgcT$|&A{&alxxBiQ{w9nu
z8hMJB0;CPbbv;}jVSoF5-C?i}>w4aP@a>@HT~#Dd`8r`~;kj=2{-S(m5%?oP_5(G!
z1^uHoVj|!jx0$8h(b|Ku>0$7}Ly@qIQp0xJJi2-$^nfbq*#A(viigfPC;Yf=ezsHT
ze5&_8ql2R68saOr?>D^99qQ+TLWeP{qA-0(MDU44?v7k~QWMy>;ch&?_7R+`*-|OR
z%2kGPTV@k=1+JjIgjjc}czEKdzD`h`bbDRCiXd26(c(d%uuJY{uQRzF{ry|4)wn2S
zqnMgVSgYgx7|y6mS&>lWIJnA|fz(Oh*40roPkFth=7e;$dJsx-M7_u1o~oB4K}n9O
zYv{DJ<wP7?Yh=iNkpO}*ebezEX7yqz*eD#Sm*TKC%d`(vLA5v6g|o}cX}jn_4JfXo
zqu=WCOmOVqbWIiB@JGHk-s0IAui8Mnp%bghD=5Mvp-Xi?$HZ<*p7b&QZAW*t@Jnzt
zg%jtYoD;uj21<SR&rNP=6gGXXI0};%JBJ_7``V?oWSw$ZaW4pAl}Ux2{ZaJQLdg+U
zXZeQH<Vk912|}ohx2ONI-dFx!!l4BUbPiZEjGr?)f3qORc^q>>oC`v`Lh(nF5PT;Q
z>BdWhit}s*eF8;}8M8R^^ijo*0(<4-AXN74At_faOj-*mJEL8jxTHQObiY{<elk^0
z!ur64@D8`Tt`0kAQQU4$M?-7G5*}3oX>eGhMd<(G?3}tYfwndq+qP|2Y}>5Zwr$%^
z#kOsuV%vUWCtcrV_vmwajK0~wU|;OL)_mq8HFfqNx(AsG4gH!EUp5wa*7z-2zjipI
zmr+HBh#kcPWM&xGY=KJ##hVD3-J?;z?I?ue^}KJZYY`JY8}P^2YSh^cp)@~ULD6f^
z*R|64vzQK0*&?6hh`v7IAj(<tP3!c7U7<gAbK4#%xi!t#1IuKu`C70KA@4JfW~vKl
z2yHbfZ)*GI4qNj-2KdJkKWiW$zc0Pa;YAU!z1s5sITJ>SbP%fQ#3C7%>x&*npBaBL
zJ1p8JiX&d-2K%)mwBjt|K=z(SKBRT%i`i+x^K7mJJl!ebWPF8mBbEkO3nf2@7hsd6
zIvIyX@W8WD!P5>^;Bb}Y@OVC{iB`s}HCp}A{*4w$p`9-*S=2$bXPhm>VI#{dXK<H)
zq8RlPU$ch!+duukoj*oZnxYu5HaY|coVQ`8JLZx+aj}gS!VWc^3=bcsFZ`)=diZmJ
zA?LRRux**mvXdvLznh%VWiy4gRvv;qC}Ae}*^&u~=JE^9f@*G^ZMn;0^$K=uZ6KZT
z@~<HVI}lEh8|^H6_CcDhX(9jV;;b8tMcR6wH0HEMJiWGq?{)hI&s}jUzOl&pI2f;O
zFCkFxUdOU98|p#w+?8@N-9|<Fu%~;77QRxSv4feA8ouE&4~VFuiTYu7Qtg|>l@>2g
z$jIz)5sM*nx8hIENkASCO>u>Gz)9*;_&^l2pupCFl|jv9hFi%Pv)O#D%s-&Ks20`u
zH|QYU4IbrkuCg8q2?bOu4&B?_gZVxA_;xT_RL8{-y3l{MK=^-lru(_g=Kl|Y{(r~Y
z3I79u{{Kt2dz*NI8zKS$RdfI65VwiB^Zz6Jx2^pTZ|A`Hs?`UkMa_0O(s0{c=Z?o8
zOGA~zn;_-NbxDQ`M<I@c7juGIh-zE*-}SyD5mc^BG2>~PLTrTs!Nh!Vya66h9>U-v
zOP6|22yOC|pY?k`4=*Y!GZ#qe;vx@D87-QJ@0dx_KPRKa6ysN5ag${zjDT|lA{Cjm
za8n32Mha=P8-$L<hL=Q!WFze$ra+002#&Q~Z@4Bvy_Zo=2>lT}Afp5?qN2<XkC7dU
zKzVl+Ud#z$&LoRwgZc6ho?w|i{oRg68Y=slL3X$mKFjZ-K&XheWuU-tRqDQe9p70Q
zOD+bn5R`DN#mR8b6nKYy=ZyDj?ja>NKZh=T>JV(DU(+SWqzRSzOqAi&Bae~f%x}Sp
z59Uxx6)c6<+!Kjn>>*uU1!J_yN(U*_xT@y5jG8B}EmqIzCfQM~*h{d<W+wQf`AvvL
zJiPHFT;HGbtKv;c8gmBm1lB)DK|B8MwaWd)*HigRo!uq!RtU4&%hA>2`7Ywmyj7^9
ze9&-q>1@?b03L<dPGErHK3&*&=JZz#UR<<gIH2sXS;PUT=zfed#!)o-tm@;T#{Hx9
z1D5Mkn9!<lk0Pcd<{t~OhQ}>sl$MU)v!?$yZn+am^e{^ZOXH?Voz`EHx;A%oBnZy#
z)+@O8S0*JA`Oz<aw2kf?2T8qzqNccZ+}}gn744pjJssC)ap{GQR6n|pb;ET7A3S%)
zOWxa<eRhoEMR}iJ&hBen-z8|yJSp^E(<9p-h8kNz1GSJt?#k)kmwJ8H-_KsRcJ|Ur
z_ML>oiyA%OBZ|`97rkCT+MnGw+i`meKd$Z`JXcS*F^RVfM^2B3f5E=b#XoDh^q=(H
zCEROLSq_e~flcT&HMim=nT$Kqi!*Aj4$bQe>Tm5Qqjt^^t{^!0|2YE^p1n`z&bU0M
z$0fMVSl=S_c=-9hKdJ5NxN*a*%i5q5jbHu6@4+05#fcH{9J=&H1C(M6PR449TlmV9
zHaLFMwRFO0;Q*gF78s8h?VBSW7ewMYR&?%~Vf996IVr~lB%t`6oC47yB_UT=rzEtv
zg4HDUBeNF;cp(egCeeRxVcm=gZNl|}mc{@>pj%upVX^}6W3cxVPXvMa-4r=ug@WNd
z>pKg^O1(Ux_g^2$aDg8=Y(iZGr<WfWj4zUm-Eo4R;E#isG^7NeF)<=6vMA>_FxhQJ
z22>`wF^UV}JvCrToo3FV9i^inQE!+@N6wR4sE5&DF)+>ydJB|+A(j5Ck!o^y|J#~0
z$F@B8$%RImGddR?Lt{CD1rtF}H$&%WdSgdkFU7ZAp$i%ieA+&3%@z+uPLF8A`1IFF
zkP1SwD+m`-CFL%SABr^^i)7aJ1)p2DAi~;gP$L(L@T&e1JFtw53d3@p(19R%P#oVG
zO|<@OsEh%!ay<3S1OfW2J!7EX(#U13bvsOUC<R~0GJBqGME;r`%fdkN1LaHxm_V45
z4jL{4gG(VGI#Ko<Y6MBe%Tk!Cc`^)7R;*di49!>IWgU;q@=cvCh4d2CF(mkkwiI<T
zBR_N=bak=C2zsx{_Ru|(j>HWq4udV+CG>ds^aXt^0HFjf@<SP-a!;a(40Hsu1kVg+
zu)J}lIA@eL?0!S+6DT07R4Of)Srp+gL1I58IeCCyv41{xm2g~`GISoxB4`p#4I$Ji
z!sCD$*eQVmi2D$#2?<NE{?TwBxCc>A6S=1c3Cp@mPj#lgJwh`Gxqu=g^abtUJrHjK
zLbF4dWKRd`1?7xzo)fCfXz=?ZJ6p~AN!E$BIsvxdG@Md{Bin^chbtu8yN#TNqD;eJ
z7ZWVp9q>!BdgzXXDjUe|c!rf<oGuto*%*y(;il*u3k)8j{msF}-SKS&_czZZqM{wK
z@$Vh%!r;^(v34fwc1?(rK#f$oa~$4%*P?GpRoHq#u274{4=1N^YY+F(tGT~pS45&g
zo}AC;{7|Xt|Ee>ZAl|YZH+mW(aOmgIXlWvmq(qB~hc$nQ1vz8UBuD(Ehr@6~E?~<k
zbb)My{2L^wNv{%O3gZLs`mMT|e?clQl@Oj1pwUqC-ic~ag|AY3cOZEv@1!?jdlDZ3
zC>O-{Y!LkmKk(p|;>+@NnbpUGW{^W%(a2FH?5OMi=EDK*Qp{}EGe6+)Ig2_dmCZl<
zLknHn_^FXHwva7@7TxHgs6!b}&oIWMjxsX*X7E?Zy&2Kc-N}(hqJe=FPKKqXN1;)W
z*5A7SxN?T5C&Z>S_%N_8AC?$g^mF_T#wVovWagoakd;`=9|}229LrBw7;nikGJ{5Q
z7mPK3nn=vva6TYWYFspcbB!G5+V)D5@rGgbo3kM{E|=BEA%k0$@#ri8+iPk?B0YDQ
zM*@lK%B3@?MK7}CT~k6)X4O%RB;$!f;a$Tp6W)zG0E7Ma>ICJH-CJ9jh<d-_JpVOa
zjO|EX&BkzRK{pX=Yq_7o=}jfcWFj$@Qhm3b>pl-@*Ttx`=~}bzahH?yw?3DmP;oPA
zF9>TUdI^=&#>%Pl7zUm|1=&vMBkegnSCBr?1e$wWK4=ZA8nv+mC+B&SMU{D5Svd85
za}cg~p|m4^SZn-5h>d#Tys)RFB!IXMz0){lMHIW((tRt)AO4PE{Wo8VOx9Sh2M2UW
zVdvukNmON1Hp;|pUvkg;-(~}63Agi<s#k^%vQ`@S=oGjXehDdE_us`h?S_esQ!jeO
zYhpD*wPO7Zg%N$j6D;E0YrF8JoRm5?OD4-SKP1>HqE(t6*ovH{3?>%$iR&?yl`svI
z7L@C|m_d3;tjXaurYh;L-$Y@#`1jgdwv$dt!w17viJI#!=F1BkDaTNcYsuuth>zu3
zXtizvmfU$<r(NQ_BAhh&Fj){*c8ZGU=0I-eQqa4qNhSz|<&<Fb1S{UthZ6p^2gh4=
zX5rMMQP!LzLfC`E3}G!pW8)Buc>VsNTz^rdMpKkp8`%q8ms=Gtx}j|_N57AvgX@6m
z6JM5Q!mg4<P*iaG-5@F+Sz>}sCdPN;<^adD+zq@xip`|Yg0(eGfA$IN^b*48K_!|R
z;<gyBqtoQKsbU*8#6FPLwgE-@3~UoYGkU90X9p2oyv{VF!B^9EbY*OVzg%N`<gJ})
z!gMFatcg%x3WpIzWh>-^qMM6l6T)G~H01JlE!@ebZW4lzg*vRi$~G=xqy=Y}zjR-Q
za*-2$m&f!$IHv}7Nj$q4`UvmI@5A;f9j|V~=)JzF<00|Vij)~{=e;r$bjBw8$d9Jf
zr^pXlO18Nc->Z#;MtN=WFHtgY?EtWDQowwF{~d_!jgYh$Hr7Y*F6Cfv+YDNjRs-&p
zudM`Z74&Jb=HP9Vdr+0WLq)&FJal*fq&}f4r2vBM$HbAqlf<KqU^jOW&Vi>{tlEh#
zM%$~uYO5+|)Oa=9$>Y1ar@9aiJ}r~{Tjcp)&p0VF<*eVb?yd&1g&dlAou7}-;>=9&
z<Hj>k>~uA*OwMW5j&h2P#C*9S5U*Kc98N=iv!f)P%EgpuS~UDUok*^9=oSqZA9cQ!
z0H^nq(In=Ven9Jnu9_oJ=%#m<weD9;=Y=HCJ{h&1va-_SrJZ86)^i)DEC9*h=w6tz
zyxcfw5$j<2cONROm#unrv}%_VA;N+ZsIQyqSjr{@x0u9cabP56k1s{AY>H+PXl?Yg
zDmu8g6Ln{CQOB~)QYyjK9Ee5Q`E4V9C{*bT*EwTVuu9BD5g2&V)Y0oyJ$k>Cj>e}d
z@B%xno)K17%v?6@uwALpC>KynvXDkc|G3aYsVxlx`hyq50!k&^!j1@f{$fdHcR=+b
zmg+wUV9Hn@j2|quVzZua()z8@>Lon`6y1pzNYSZKsMu0hwiQ=wA~jpwlg8+?uMGsB
zF|ieGr*Nx+JznXTg(7uz@I}Mnmxb)N+iDR8p^dg?O9GpJ?e(U-eL4K#GU<PY%1tEQ
z#}e3NB^(nug5=(n#1b0x%Ql$^Aq>6>HekaY>lz&TBZ9?z6|u|ry%;+GoFfWwFZ<9v
z{97j#>6>y_@$Q(`(CCj`mfZHLcA)^|#=iM0Fu}iJFn3!*r8*EXH>tT0*k(uNWO2i;
z>h-q#_r0cyAZpQyV`Q=3@VDIE+Wd?wqH$q=<Z^L#E>>elX@%b!2&n~vE4nG0Df(NC
z<+%pg@Trx1*x17WDhMXD3lXiBCH*a;)$83f*+0S$lfea?snMtA(Y$v<YwWE9;;l7-
zsd$a!918H#PT9-nvgjm$@$oZ5us%-6>NREjL0J{Q$HBf1)Nr1!f#Vs2C3Z6ud#aJK
z(oY_h8<p=r!G7-L@kpw~tF!i^F6bIYMReb-9Vj&Q>S{=KuX#&eYI;9LLf8fhmFlr2
zW^opCWzHu?O9Br&uD3gIwd2GXJ)S){cV?{f{o!SKa|cact(npQ$ERe2?q;eKlB0cd
z)i}d;de7E&+2GrB!b=!<n`?D;WBQ;l6|ZX;?C4KY;IsAi*oxlES{BlnW$|wn!)<BO
zP|m#fr9=tVpBv)O?!3RnyqoyTbvNjWj}ysWtm?;13>G7bt`}3LKDWil>C(9io)?!^
z3*7|0UsXKvuZ2b`r~J^M8k*>Pz=>rilCM>51yN!0Bp2o&^CKFk2a70N>P5cgRslF;
zIwKwGC3TSCQ1F!5t_0<kN@gm#@KyXl^7a?S3MLoY&<d&=ia2CN^=9JB)&`Z?e;$Vo
z9HT1hz7YkM()D|ZBLPkzD&xk6pGeXxym>2gd0JzY6axLG7mMFs-R0$CqHA%$a6&Z5
zY(z0?6F<*hjJX~wA%?;Y@0L+_6tzAA!`ltDC-!u227kULndOHdzPMw)#+9-;zfr^>
z!KxQ(kQx7cO;z59DR~A&#TSbtuy|ObI_ssv<5s`KQCkcObdat3VF5E&seC~MYh3<l
z@4~jhdK3M0-8=te|3b~?Wz5f2&+Xn%u#~`*!J$twyq<+sP=*_O0NarGbt{;*%#-pH
z)nL_2+Xh+h*J}HInBK;)3$=83HD{%{U>sOqdt73Qak50UX^L<TfD9Q0^RS{(H)XW~
z4w|=_O&%*#xLfqgn62Gwi94!CuxAgJxvJ<fpGUc)%br^7xhNLG2<CPzKX-Y|XkkaJ
zkgRldBVc_2uQ+_DWV1V*c1>ocmsTl=n#N(?)Xtviwb_so6ui1U%;>>v(U6N($=6u4
zyDZSGL5yd~)Sw{b5@WdkKL+5YN~Z2JAV5GV{{rv-X#oCjAYg6k$>3mW``^;;rpX<x
zh0;Jk&b>xXvwTEE8v|h5S2{AmBni-sj3idUK3~(_k80|vt8;Vu31*tF>4cidyw-hq
z^lzB{SaXdj-loLm!ZDRMTJEvH7z9Fv=SX2NczeofZV0sSgW-V%v^~(@-1_GvHVs>>
z>e33p8|W{FcNkSLi76V0x+-SI0_>M*)w9>hZVrxc{SCFng@>#N8!WvikLo97utm=k
zXkcab=7bnU)_Fs$GJOwOc+1wC*NZ8`a<3K1sLjY#{!=z>O^cFd=uwi>*EDH=TKJ;-
zu_)evqgP2Yb^0;ij8)zZLsG+umQrW}jcEG@qqfrv2tGbWHd*@kR>zo(57M_koEh{V
zJpq5s*wT9=hAM!pR(97?<EfSE+2{#EHF3r+hf{rC*NY-Rp^?U7EW>;kaXc89ElgPA
z6+|+%=03V%)feK-h-9TR#y$gntI?D5<EdWQPTKnJhU#kgm_w8+G&PDR8Py~<EV>Vi
z|J7)m(yBWO8=u!AmN+g+{V1!?dOE#=GO`2(^74vR_c0ic)?-C_1=1)q5x0**@MHXd
z{Ic#OvsCS>wL}3h%(=l3SE4%dI_%uH(7%)!ZfH$AVG@6=jG1)`NcbD(ud!_eDfi0b
z%ycHHB-QZtjV#lf)n#P2LZN|=3d5}uY|>3_t!{<mXSE$1@^m6RtOz9zW_5L3yr?BD
z1b4XFJpbu70F?5UUBTYH0guG4=cLE5ypNBVo;pj_CwHfFT2T1A+pBEr#j#(pX+}Go
zoD>Xnvr%<CL%X2#*}vw7J)VgS7<}IEX$garcD-f(1~27v3V!zCg5K)=zS@%_={?n<
zhIXZ!1@`ienquI1q_9J>vSL2n&;3HTc8hUpzbioM^D2Tv<Rx%gY(cD%Is8nM5RPfH
zgoyknE|Vhk0e>{VP@H@{557u7+6=GePu}gz{2^GZfB(7t2KwK<4G$@w7{Bm<fIMA+
z{>{wrfb1Pi?VO!$=$RRq8JJ8N4ILbu86B*RotatwySicdf7A`)N&nOhqfR3bEh+St
z&gK&GIfY~!``Re3g*ju#%2W{nqScZ>kO5x53xE8!`ECaSf{uRIrl~nf8kClGm6ho)
zvU>G2jB>2`>20N+A6J`g?*1!%Jegg2?rUn&8XOf%lA{Q}DxUtyl(pv2TxsgA)@vB>
znU!x48Iez>p{`4QMF$er3_oX^s3bF+qLY_a$2B<lM27|JcUrXXc#o_xz9rEY@}wQJ
z>!?EyR+w9kFf4cuCT&_OFVW4cvFW2duuYaicS&7h17jM1C0M33e0IkbID*YY^MHX1
z)RP1A;9VoeQ;NJ*Po|R#MlV(}EIyd#p8V}IQHuRCbJbPts?*=y+UlMR46DrQo1B_j
z?OwDNnyu36$q;#1wYHvHwBgnth5k@y^QZq7m}!dEXnOg(7c?><mPPK!#1AY=5x#%N
z$%`fLWj%Iy=-}bv^ep4y#?6_BhcGJ+IC{7{v$^(Ufh?`&Gl%h08?%&0sxg0f?7pj)
zZIb!e_fkb$u3GP0mnY$+zm3`mrPHS{UB54t#IUumEnR*_=nZMhadYGSX8SZ9Tr$6O
z+w|!W;N{E4Vsw9;n!gKYHa459dz$(ZX*<<9Jnr}H=xJ$HUslSM2fobGrEukxlYTXa
zI6(dUwAb0Khxhqw{>qn=6RQwzQ&joDa$eW4GIwNC|3i)EPXxu++8_k*x?OQd@aUkj
zNTKPLzNxHV+kt)-H*QU2G{i$nt~8^}f2Q2zu>sv_i66=aIYYq_S6imU0c`S4yvBD6
zI@YT9@AV{uL-q?H`13-)NKgvEDXfbp$z^+BhP-;ZXt6VC6g#5~PV5ai*aMI=0%kOr
zujhzPqoJ)bp`}KHRjVlqd-A2WjV-7QELROxi!QX8vB`RZo0=BqcTSs#Wg(t3G+Gcz
zlSAmV$(R;g^G0pbw!%1bm?v4P7XER?g->tyL5r}>!i>g-Vh=JGI*@qWW2b;atcXDO
zAS`XK2i~YRB<ktTuB1v@TnBL4R!#+w&t9eew%$;Ia(;_G^<8x6GoUn+DRA8U1ohlm
zC&isB_X8ka*zmHlE1uSl?bE(d!o5|DpSvLdptug_UTe?(AL6*XzX>pZa%Fj^%1&6>
z7YOlV34o7j8#}x^W&K8P$vL|pGH{vh%ll&E$Cgz+EE@QZ4~Pf?=Ku?Y2Jz#^p1K`7
zoX;G_;yxz?3-+TSdW`7f<9#Q~2DVtnKan$l2+qBNN1u4r9RLP(Ba#Yq?;H!C|8wTV
z%Zal4Oi6h#6+l2kmE<&nS**`Le7h2zKUxNfGCQ$%1(`fET5o)({<Ux$Hby8hHq_!x
zP5vPeGoS;6e9%W3v)QOvy{zvKO1w|<`0-AciFp~;U!R`M_+j%!R1?L;$#FEJIyFK<
zbGvf;QK*tubfMK&BIPpOlwN?I=Gssk>W9A!U9?j9>r>ipmHzI~mr`mbj$#eRw@fQV
zmjX^Ba2Xw=?ndT*<1FTqr!u`{lV?iGk)}Ho$s1|R?Oco-{0M%y%(<!WH+ta@XZCKz
z%>&zn_8(D<6d~G_FCo|vx^Rpr7!(RbcqKQ;rgYusb%FE(o!VrU9;Oqf8HRgT=XEC}
z%5nf!ugN@@Ac@XB-ZZyG$uU}{m0}P=P;oG$2Z9OG7{x`*FV(M$Y`oav&LYAiUJRwk
zTnn+_dBHJ+ZJjHp<n)G-2r)MB!4>$CfXNXfNJ_i`LkYkm1B+@^7_N6`A1TnNRHz56
zhcr7er=816I3DqYiPPy10=yQGV9{~68IbM6Wli1yMF5nv-}bx!BQ3bg?jCx#$W(GV
zkmr8rdrqRx7tv@{!U&ddz)hGXB^h$7D0B28EHFn0y;EqR>YeZom)W4}u;f_Ib~DFG
z8ZMBt8Sw!NIGB#at6VV99g_hS?O>o!t>n1Rmt=kQd~PpJpc>Njj@#T6nM`rYrMyAc
z3Oub@1b%I~Cx7e-lAXLc7G?nrSn60$Ik{k^v&wE(MnDXe>^MbM1{6f=nH3iNiPl5>
zbUASc<hiNxau^*Qb4VBw`g-A!(Z5^T^{?86-gFQQmY8Q=lb6Z_PZQg;0cfPAEpVH-
z-IOK-p_0H$pNp?w?=2|M+7)4-HzT&2ZJCs1{vKS<@6rfLiCO%+fS!I}#8gz__fMb*
zQS~@PeKbmfLoq?O2A9r}mBVO3{Q)h8AtMtbGZu_hl~<4eiG=7}$P15jnW^3}rhz;K
zrF^)h2^>WZR<iF&hCxiVp;iEOwDX>cGFg9oyZOC5v-|?@q(dfY2?xwZf+Oqmjv~y=
ziUkOo!?~&>_Y;r_l_oQ7k@Sg_4V0JcakL}WXgeZ^kc^4ozC0deaGqqRVCqYjHNR;m
zPQo*!nCjdToCD<Tv2{|@{``rU9s^0l+X72wkV}xc12F1cBMWdw5C_x9G>{+~`@7j&
z>9Q_QYS;nSxYY2e6ZwRig%<^UPmkq%iS8;!I|towlp0cM^|O7lJCc560!awFy+*+s
z<KlFTreYh`pFv-YR+=ubYZ_bh9_Dl+|7~+Igd`6HYhoj$rjcJtkx=?&K2G!x?w@Y}
zfZsL2mSdD}2W@Y^Dm-}R@v$nz94_Fnvu#w@`8%Qt1F(uLolm0q0bEY39d{9^%6~Ay
z1Ddf|Pa}L7Igd2*w3=H}w`)`o@Ci=4$9q_l2*hxZlC;-Q7Qyn0c>npTvHx^O7{Kv<
z@+uN6%nG9*`g~yUY6y5kN`cDMHH`nN+pTfAR82t;hm6F>-)jR<GSOOOKxlnFt>|fs
zJUIB<|Ky(Q^KCud?w1`g@X{_C<pmfjBQ1TBLKQqGBALvw2-Vu5eyxh~`@|n`<}lWB
zQkHDDa%LWb(-jr2D7d;&&InF7V?o8Pd6W{e0ke5sLRyBEs{NcGgg`E+LIvBH|M12e
z9R{A6A4#?c&0lwrumWfvWRmeK`5fT<BUggBd~%!Mz3C%-;#yv-A;bq4y=w0Tl(8ty
z%l>KODV?G(Nv9@KgkXI@@^mtWCw7O<-`LK2k~4wvkDBlvVfe*@{-DzJGR-V-?|Ffv
zOYcJefM;Z5HxfZP&C|;K`<<*B&-Er(6z55z?3D$r8FCv7+41KTI-<q8^C>7O>{IuT
z;syILYEG$GV-9#`g-dA#`F&Mxn3fy=YTyH1Bu7Q8`-ZjUSEh1E&!58E;?lIb%?dVV
z86rT96deyt$G;!K+)_Vv^mr~}MzQP{=tbp$;AsBWX<W-&K!s@}vS5XxCw#Vq{nzBt
z5uMCq8$Lxcsk$J3#~qY{g`%c^_#>_#0ucz87X-^xNm~fqX!jIR%B~Jqb-Jn<WF#G*
zdSodIULtGx+73xHY9#E>wW9<TOOH{oQkZ2GE?Q!t!<lDy>@^F<9Q&Hc`nR;iLWfx^
zun+)~SEOXHX9}o~p{a_lZz4!9zo-8zE^irBpjbLY{%X?A#WAO$gLVnoJF&}RdXpx+
z64wk-&@aZIWnk?}{%8+i3<~4U?_k%D0fCRnP$GrbK%8A&^DIIndOuCd;`DMFiuT?s
zeyf0tm8Yb|-UyKRxe8?dIe??>8IX_%GX0GMAuCE7A40y!C>Kkb(?13?wl^O5#MX@v
z&%bWath1{|D~E?U26av_RV<WDmx6s<@3d|YH4%*|j;pR4+ByZRcPy7df9m{52OfhV
z)wD(X$rgw{Wkn&uYT8yM+tK*e{ATY3Ges$lGH0;fKMi#ay@xZdwZDxDWMotYeJ8c&
zfiVtIdeA5_WW`{KzRah+`N70$G&*ZG9iED8>lQLpq%`)qcOiXYihK{JT3~V2RI}`|
zQ+MvqOp|iA<Aj_hr6$9$Z&kL61Y~#4Zlwe4Rn3a9c>w*4Ze%zb{<`MS=5-xJ&23$*
z1~F>Guo}Aju2%%0qlrpzs&OpXc!^Eyr#+k-!SvW*MScz|8ETw%j4r5Myi&du7M8UF
zY^xhm$fum1O`~U`Bd^sMM69#S;2d&<r9%HBHurHdNr>}a*wV01a7lZt`%yavAV5m<
zzs3j$QJIhjCxqhzqs)aj{_K0E33|ZKh4e73#RTNGVW@n1hI+zTn<v^u$>l%rOp_g!
zOT}b{hVfa6)uRN<q`*0eu^r1la`1cXOw0KZu*=e)cpDs#8akrhUyMN*1sb^JtDXOl
zy@9Lrt%hTFPPJdUk&wB#_t-=5q!rX1t@?$01VuyznZkB`zFt4~tnex)<z2d*O(qJM
zbDPhJn6^@5Z4MW3y??=AvsFmQ=LZB!tv`fm%)wHnlL(?!^lgf>wv9*IpLNu@INhEF
zB>jnQpC6@`%ocwtv|uazY*%bc>J}_T)ia0+N{{>|R+it|z32P>+V|v~t#ATsOF8`1
z!oB2j&c&`rT6&!rj;t9xItdV2Wvwd0wB>hfX4<zV3J$(i%c!UQ>{2sLzZ!adv;gv(
z1(e5ox?18AF=_v5Tfo177W3FS8LvH=x`Y?U?bkf#%a8Uocul;3pN?InT^o2iyAR$#
z=7BOGiZDkr3G!p2CQsBG!DzKx#%~!3qxb`Fk|013DzbE{k+Q8T`jj#}z1Jeu^=Yt4
zM9yVM{eb}rN;3k6NI`V(1^Bf0e}E6q*CEJIOuw|~l?53{UMgB3dtdV6mMPWv(;s(q
zmF8C4U8(9<e9-;`iYfa#S3HfZio?ogHqRSNLwJ2J@~ZfOwAFuYFag`$;pT+jFD?P{
zGaeUkWZ5`ghuTZZqaYMtBgoY6w3&D0oHL#LE+l?9=BPe1=X+@R06p=wpawV@E80_^
z<o6N$(K@y!E8k<ma=Q2x@oKpY>_-AOV?YaC{TkWG(>gviyaO6vNy~)MPJ<^#?2Lm*
z4Y_`!poI9FS9L-L({!KG!({*-#0m`18tO`PHU;B@tF6H>;vzagjwyTWnz_VriTjMx
zb+cxRb4s2SB~WlmgL60%3XFL7PLi{%6XT06?)4g!59vf=i}RdiufioEFuZX>$!A~}
zIjDylxi6MUmXnhw5%@sddx-A`H<qux^ae;H%psO9j?{hakj}REZtm#MSn5dEZ)8^h
zcieYP;TaGtIn*i$xP>ghnYPhdMl_Tb<Vx-)wRsaykgLddhrqd03%;B~TmARg-#<N^
zm~ilaG-TriJeY_ry{nagXbc`NS9**UX2Wu%*Mb>FW`r<3BJV&c9z$C0QSw8{lPB81
zQ)#=Let||g`S*JepeQs?yb$aT%qSLa-Q^VS#wUDx?7g1%P|y(*vWT2-@U3FBd64_^
zo8;Tty>w3|vE|D?^?D58^p?Xp3{u6lofpV?_+b*nBmAYmT*TNcgdvZB1Q+&+dj`u4
zp786Nh#Lzcy`al70r`w1!#DE1Dm$`E3P9OP;+J>MFlRa4Z%W1obzASoZiZA3uoF8K
z(Sx@DJHyu+Y1Pr4WsKgtd(aFw6;s@eN*D%lc)vB(rl3WIiP!pJ%V&8pVo!I5Y+}jB
zaOZYCkSWL@8LaXgE<I}=K3EZSA-^*ta~NE?7wdAuSvJewxgDyR;m_SbF~x>Q1}EFX
zzAcyN8a?r`U%I3*^725A#@Lfo+$elNFm%S-nD7nL>EM7HFy2ZFQ3uY$H9dGGx)&d&
zs(g;`1tNi{E1+j$M~drs3tP1!js^(YXY87^i}j)T)jhgH1FMOglHovy%n2-JQf~WE
zV*C}xVl4;`;|v!^RnuxVlbx&et7F6KKqv=d=bpTtfZf+}F#hu!zNp6SUu4dtV2_A_
z)iiU0TFI@71&VPh9icA<9`x$MX?%9dH5)R9=Ss>V7bqO!e&Q`D)?L{dfhl?DVGJfB
z6V%6pz2)@L7vd<osfQMB%;FAhsNtzD;r`kHo14rln_^GuVppotC{i7<2boyyFAkJs
zC0Uiy5#95>=&gZMH-22)To_?PToXprlpJI>WMoH@oN*hx5YFwFal5~G?EQoP1qBG9
z!*!davy<GL@L*EqgIEolc|*@(C6sW00T|;eP$S`whA`{<JRHO2WQIWX7BeN?cBC+<
z`*srIK8W*3VC<0+&GT}%tGoEZ$Pok5$Bq%7GWxhUU+YvW;&NPUj=5f&nLP2F(3U}>
zz@WTA;O==5u509~&)F_-h>J>#Nw44b`%D53vJ^EerHcK{!O@Ti>m=0u2i+?(S|<S1
z*OwQNx{{GbS$N6oez@Z1A0b+$q$0<=Z=KfJx>sG@2x;w|0`G>lz28wVXHK|te+5sM
zdC8`)o<UN6R+t3q*)mzXi5>ET^S~=;L?(E23=*AM#_E<ld&-2Uq&_pC*seP=!C<s>
zN|$@$SZH>cy0~VRg*rh;{OW`vpfv+H=bgC1lp(;8Hbqri%r#AefTuhOJ-c3)+9M*+
zz$vOaJRWDdK)_mV1FN0;9GV#2;tHVXjg7^CMiTKd1rpd<_5mBDi`z{~9g)L^a$D4t
zn||?QeK^Yz8X{>S*Xs88MoZ0b+cKSkQ6WDy^-DE*zxqQswk!iL;M4)V(-O}5ssFA&
zRHP>IR%?*xXO=J5GG0N;C5jB3TX>^=+8+<2G72TJ-#IS%veE4kgc<sCLE`Ncc$bL8
zgEBLC&-@h%#toLx_4tcPBeIqh32D+KPgIR$%8X1R5tL0mi%Vh9f?uLHYHWrK@ukmn
zGy+EpR%W{O7Jb*i#=8g-{F`nn20X*cyUnfdxtP`?YqhhPJGRDsg|n@*83eHVOd{W?
z)pprE;QhPuY>*4A=^cWA7_J>WF6)dX`8$c9guHUj5=!tj_I$qL4h&$bF1lF7q`kuG
zMViwQhJvw3B<QUi$%bQ!^oBG8W^@;J%YUE7J3qF$aV{i}M)TO?AF@Yz-CtMW(e$Qg
z0=Xm$%-2{`p4ykCZa>IbNvc6ldWs{8X<ttr@O<Vs_HdoCK^#X2q^QG=r5B25=y=5&
z>5C1u3VvHY%0(jrok?8MHC@*Aw9G$#_?kLs_Q2;uZfDo4@xCj!=f2MpfE<%X9Ij~q
zkD>L~fH?3*m*P1_U`WV^E27Z_=l!;e1YRgzaJ}6HhO~t%(VeH`1WZ79^l4$a1BSo;
zVMR*&RcayUTNq%J)ZEK_jikmr*xqG5Drx@+<kWLN24V7t(4wlLqWEX|78i9x2aRBV
z6$9R)9$$@k!b$|WRhkmo9FofhVYG!h|GRk=JdFO+Hpv#a(YC*b>vogYyl1M!Mxi&k
z=1^3?EYDR5FR7sBd=qfw@<>WR^XI_^@J{bvQE|_fdC$?Ec7yTF{!!h#Uvr<~c7t;$
zQ)5+vrHB!-^M`I+HIBD_!v?R=awJWew*r7ekNUR<Q};%jrE8MHEB0^M5yEn;E!?&d
zXQk!CM5Ypn-ENXZkf`b)RscEfc(gu^Gtr(8Y<N_gr5iD)Ng+B~cUs(>fb0o^v=C6h
zMx4!>Od+@$118jF4p9h=$I)2+-0K8Dvi)IP!|@Qt1?3LGwm;wuM+fXPI>Ciiup#Lp
zG*=C?MWPj{!28~fh4#TTXE>iA4a&Vu)BKf!RP(syH$xr-2{@G8KPi|rQ+Ffzyiow=
zw8>%{u%hi^yb0H0JYgiY0+_JBEG~*LiMQRa)i_l9r3dWGKG}_qPaLu_=r>2h&=Ie4
z1N_~pCegaz*x&fzpB~MB61v-FoKI#GUKF(Ct29)8xqSbu;$_V;u6Cb*n<82nC~!Hc
zP&KGzx9lH;uFZ*U51jSuq*Y0vODtpusyUmGda=9{x(&Wh$V?d121=STQm-RC7IOXa
z*ba>Ze!jCRwaxM|jOSsHKeh{H*V7h4I{-o)XRGA4H|{aM=mx;hii3V2m6B`e`gZ)4
z2f|6-%QE^X?m)xSL56(~$tn|eAmL6cak(!Ae;KZAG+U|UrK31n=0XyTsJ&~B)xG3M
zj%T@=CBOPtg_!-)N~KfV2lu9DUmt(YeiDUk7I&&%Qfq^U-IA!f2xEwLy&KT4xRFA$
z^4*Es6FOwC8g!HYMb{s?_`Z^#p<>#U`II*(G9>lu&l>5Tmcc{)pZUgrO|&L5$VV4T
zEF+n-{Vv3DIP&P@7t*ggn20q^v35_z1npxx*_5<gl=!M0;>DJ$U#~=yM2b*5S7Ryw
z@m~vNqXCuK;kE3k5$-^jB!-}=@SaYP7WK-+)HP8OTYqfHu%jNxhI%fcZvA!lve=Eq
ztp#`|O+hmHimQ5mc}O64+`ub9lm(MUh|N9K$Y%*UKj8ieT&)^Y6L^p5YF~;!JT10p
zsI&R&RDrxh4#`*WG|LOinUZ%!+NNN6yV?t2sR0a_K)O&~n_m11(NU%}CFe0Vqlh|0
zV|QQ+CvZ)frER#RcH=ous4WoEZBo`UHDlU|Gt2g^NX?;8yvWq56%5Uea)o-AsLiAt
z`g!H$-67;2^W*w$1svu{%u*U?!nr#t06L_Lv1dXZv!zmi7q<)hl0xlcorN~j_p+m%
z%sCeWR{cChNX`|pcj8^&g(<@l3<0V=auygkeF2A{x9ey9c*5H31y)!6ysm-%eVVFS
z_a||tl5VdkYjGGBhacZ(uMkc@h3*pDftJb!TFw}0q3X3z32tHlS}PP{r%UT~7pJ{`
zSS{`WDscpnu&`^1=4wmXlN&d@|Ff{_<izqInlK*f@YHW6eC*%9=`W25=g)ADY?ByU
z>I)0k-_7Suo`^=#A(3bt-%u*&0~|OTm^L+Su)KqF$fPF@$Vw$eQ4eJ?rCl_ixFVjp
zFsO*2*)=jn(rUIGsB}Z!DQ)ufvUrV__{C=1sOP$sCfyVJp4}WGK{eTgOi*MO>gNk-
zCOm)lnotycSj}@kPaloE?Uwifv8$v(V9%HrWPjpeK*-WM`}G^G?4x>HcfV53uMy33
z7-_X~T3CY_fA6%as^`8V&`S?B*Ad?%@pHU1@-rL6_M}Bml+?kW$J<!L0?~AvIhAgr
z-@DrK58YE{N*JK*k7E!!%Ja~pzLi=f8E+b&*I2BA%1oS4@_14^>x`7I0Bz2~rQFuy
znEnWf%RjXm1v=84H1yzHqVU_HZ`Y1?V6V65D6)5LwlUB)A?2TyjLeBJzIr7@;(i`y
z#OMP2hAxPlZPuHfb^^7rxuQHMg3sD54X?wTcQt`g2e8DD>QA8|B%oy5k@t`Qip-Uz
z<?Evcd62Z-^#k64aJzfC;KNpoAGmEX()_bxK2_my?0KHbT%kKOLJzS4Hwf}Hnt;SJ
z9-r)!DOrc<65>ufL)H?@dYK1<&aIi~S}`%%!x#cAX+yY|IC+nf6+7daWGGIxWF>a;
z`p28)x5B;U*X-K{pP~m~`V(+wg~lnblRN7Tb!Z_#bDP!322SR>G@<e6hxt%beeACb
zMpMU3<)foT?uwx}S<B0nT;y-<sc^|nT)w>ehev3W%-nCr2&*G09Ya5By)>2JhEJLk
zY3-WC733L-oB7yf7+|@D_;Dx}s5D~(Pbr1BO>4x}Y=gHJU$*X!xK=km@l@~xe>wll
zj`MN^e^0qWA$2tWsfH_GsJsEXvS^T>aQBm#`0z`TV>1g%oRN;vCG%gVJWDN4wsNJ#
z%FhrIsPx*^B2&K7F8DRcnkb#6jn(VHt_%l)b3Y*e`!Z6w3l8}X83?FG;Xg~{ot+&1
z`zCUR*V1{DvvK!})}Yi#CC<mh%35GpN{_2GNi9{R%g4l>CRur&gpB!*B!<+RN7MIh
z9WEv?QVJFMgPRgNDzrq={4X4O!W-K}KBuf>1u@=SwWGG8qQ2`Nx5xL}BQx;{G5N*I
zOJ^r7lil-n63S?+H1uO&E-4hJP*`avF&XWx#WNrv;_3$v*~KJrlSJ`mqErZqeUafY
zc?H==FUXM3Jo<579}-LTL@_C3dG=@-mPl0Tv%`!N^hgz!*%MEc@biqM@b)a`J&+h6
z76g@~Z8c(91VgXykb*tfS(E<R@Uq}NFQSi08zrD-DuybOUL93Oh)Y-$^>#aTHP5#b
z0APQApD36$#ndSQeNm+MOcC$YKz#-^!>_&Ni9~*Ef~4@MCc}^F8{ho=$l#fPLY9P^
z7&AR!=;@8B9ZOeV*A5(Wzyk1gfATUvvn=J{>*vH8lDBE#(exBVAsAPKDJsNJMKy~>
zSHu{3i<2vsBVQvQnJ!$;<+2LIC}E-09HSb)Ox1|22!xpoZL6b&(ZO{P>ZwOC&CAR7
zmqwoY&B2KeOBYc-kq#^iGP>LA^^xS2^ONnJla~-l;odSw-UTUmZwku7dz8X*COP-{
zs3|!cb!#;P?qjD2&2wdIU@Up_0r$w14|8-#OgR>-R>u@w{SFI3E0MZJocV0D$lr^F
z`$O=#u!|piZZPO-B=J?1@3^_`=@diwK*ZbAZ@QNxLenP)Ng!^#%bl#9PvF*eq6b!+
zJ}Tv^ueOX>FvsH=xB(A7xM`s80vr{|Q-I=je4aUSLPz-<OA5KCySD=eB47O6=tjc*
z<96NO5dGQUq)LPDz6>OYehxUo_{leeuDqdF;b5ns0b_ppp)P<p0q*YW`ROb>wy6PR
za~1(uh;YuCFtTiAY`%@4mhXaH9qIxKhaa`n@W)Zwg=pkiUlv9jAufVKXinPWmKCWL
zFGiZZ&{B=}{C=vKC6?f=%v*cQlswf)S6ayo1h#41TM+UN9o6+<|NWL-So(dHi1Mmn
zVkP{a^udttZlF1~KjJC!rIF0P|K}U<E!o3QP49%CeGkZ;8gfs7%s}1p`(|nns*@|_
zX(KrzKP&Iuc5mHw_sutFh_SQ!RUKNu;cN24YQZ2?^AO2cQAYdhp@M?MF?QMFfYa@0
zXdml)%|n_jhUtl@TsCh3YF63ff^WGTzrAlKf=n-LF}~{39y*(aG?lixg4;(;Ryxqe
zzu6PE@t0#=wo)gnEE=fD6~U#z7Qwh~oPbUMStNa*`qlglyfD}ve`bhmV$=`&hjE62
zKYKUWU`(S>PA_rQ0Rb`n2wU)v7&UXtbx|o|8nS4+zA@8Yh<~|4CB$EA=zo~_XC=`J
zYl^1r?&l>070?oppPI1pyN#~G?q)@JG7_)5Xr=7m6iIso?vBad0AFaIz=vSac2Gyp
zOi|hFlI}(!_=J=jDWQrv#U;u9>&rwxuX*!~-?NKkQ+{;!$fGv=pLNxm<08-Xpk#qh
zP%^Me+#&U5=IHWr*oKYaOJYo<DHa5@?|20uL9mxd!qttz@RU6_LnH{dL|Z52s6yT;
zdFjX5zYL%=*KO^{BKn`LP(V02K%Sx~6}A}8%Z3r6v7FrCNNYAEtvdHWz*NGdOoOtr
z^n=y*nmar-(;P3FQ*1!u1Wd#ppPuIJ{ZX}@-sa}dAu)oI?zYRbqW{K&rbw`$Nfuxm
zaF$#DD>hERbZ{0PVxKU;oAa=NgT*t5DXKcp!NZLmu-ghfB&>wQ8n=zO0xEJ`qU6D|
znB(})(q|$?4hL&VT>U_yV5VY(x+J9b8B6X?&PzRm`{hlpak*pp#q6Q+anc&w;ew4K
zChG`{46UA-C_{vXJXjY|`o?a_VgPlW-3#pXtJGr*LZ}Ts#Fqi+gqX<y4->5?VtD&>
ztOC2kIM1|<|A<CujN|%=TTEEQh1@a&ipQ(YBa#!Pqs%hS)5lI|EIC?n)g=6L#d@?e
z%<c>{ELR;U>ksy~eg<X8ajSgL-!1NQw@9AT7P%zb<P`P`v+xw~NsMJiHX(Rz7?6S-
zob7B)LP1yKhllso48nt462gvDX4`3Tx1mP(K2^ue-x*=&j7#ec1yj<o>_oWAF%1Hr
z&Q}L;OxLcEH$*Kv1L$$VDsUBiMQ-bZ9W{@8ORP)E8^&#eho+#c9%w;=^>}njzw%7)
zG_$DAaN%of_YyvcVy-qvBx2Iv(*5CP89%HJ(g&8qqc4F84=m}vxj5hGyaH$SnFL1q
za&vN*tL7k1gK?PwZwEH7ckbVBJ|4b90=_V>eQm3t?FPQx<*Rymzx5GEsQh}{(Pbb8
z$_$y-ywd&=n`0vY7a+F%-MY+jQ?60lV-2|Zw}zibGqwr7>jV>be@snRjC4;F{yP`D
zj*K~x_GjLg5t0G72KmHb#vbToLb4E~MiNBU>1}arX#&B2yHj}3;1!RHOwldhXe4<k
zLX(PJFEO0i<FuT=UF4hg;zCU@OlQ$x)7W?^ly639=%d~u6~Iazg4qf_)?i^sDYA`M
zteaYaP(|ZaZ#440C}Iv4su(DxiNHmATyrE)L43(C?Rl`BFPX6qaBXp-9KZ!3{G;S5
zMq4EiIP)Ru_q@vOV3_MjV^$z5TfFM<B*6W7452=6TrN!`IGd#v8nD#n{p>a4DY@K4
zbeM`H%eQO2pZ5t1kdW-JseVbGY0dva8%m?XOh(h-jv3@OVMKB`0Kn=cuJqsl+@g<?
zBgX+<(p*%13L_K+n1f+ni4NZANTD|H5qQSXk{2lw_r(693r<;*jE|^rAGo9s)^AY=
z$PSr2!L<Hg5{QPt?;^Lx9k6mj!km(it8+SY1&3Hf1%7iwoKJT$nzCaw9)XN6EOvXi
zLuw0v7a9S>=gO(d`5C8uU>O@IYc52>vcOlkFiidd$P;&IJE4+v1N{RW*_1n4zD=w!
zK|Y71`Vp^)L9z_v`E++y&h&NgtE!L3WgkCdr|p5inE55D+<Rz5hq4e$CXVQC)8HAr
z?xbc;(WNyUBus`W7w6udaS<5nkD53?8`a6OoIH5p?AXx@2a~5h5@9c{!HnI!ZKJ*U
zk>u3A)jm*^t-Dg;W#JgdBEMtJhv#BsiKKfnK1b)hUBP>RaC@Zrc5slo>2{G)zI}7%
zmbBZmK>b#O4z)acEFsK*Quf+AxH=h~6?n;npR=12Vy7;ZPUS-CSYMFuzb;atPY{A?
z2@$Zi)-#FV?gYC7BmL@dd0oONnziXx!N|A&fY<(88}0`NyF@^{E5`xfpx}d^rOM_o
zy_-B6>0rb0Fpai~CxPH5k4K|j*{3PHbbahyA$EjspYD7(5cV85PJwcSpBWh^kv|UM
z`Ev9^%Vf9~-Iw(j!?T)OJ4t)#qb8Zbt%i){)<es+ZQ=%ihHr(G#e8Q0bx^YH6HgHL
zY95i^#QB0ZA*L^sI6T>aY8zS_VLm7cO-UPtmTJLG*twdjYqvHPWd@_aIi|yTeZZhW
zn11~8K!sDUSQ+4@E;5fAXZ(x8BaI*QcOzzr1GN53h%HvQ=-%P-h8<R}FvGcrx|+SO
zP=5SA+yh<Z8gz-9#w>~Kf;AQCvTBC!?f@qF`TjNU-SO1mJrJ_2p<@7lc%##PYv%w6
z0O=WuB4Z0l-n;X(K!~&F0!A3ep+w(D$PuBERM>|fbs`;pG3EBrAC(8PV=l8)8)Obh
zrK29N@;++dW|G+Nj%EB!$A|JZDgDR}ew&ORIT**gJXux*JmnkU(xj6--J3FX+&wB~
zm6#j1vC`bM9XTb8vcol~cS+sst$o=#4C){mO=8lUyM5}R+&P16>0yPD0Qo2hAcG|h
z%)iZv*1Ugveo#twdiN0uv86;;#A;i9Cfbb-Nwd+agYUiI-y%IlGePi}oDLgD9rri|
zrqc^t2tV53VFM^LCvrxS{<=1igjGosM^?KVRwlq6PB#?g?b@<9H>!4gm_DG6kG7GC
zG4ElOe;+;Q?dd4;8!L_Fv18W!vYB-9Wp@hv%P4;{CWCs|**(QT_<EjB^~>618H=>H
zc=Up;A)|t{Vq{XTw>(|NS4C#m3aHApmgD{U5t5J(CwPcj{7RaE6q$5AdLx4DlqS*v
zO_1QN+!yE3y{{`<bR~I~H?lFOc@hv6tK}E)XY`W#$V1;>Tja{2(ARG&N)nbOZ~hKZ
z+02=asYFUu+WSsMdV+(2^ioyMe3KzFATm4adP;Rh$44D_3KsuDPMMZ38)92}?qXWO
zW}UR>BvQ?N$&=6r-y&?%dU6RH=@OyHJ#9VIp{O{~3<Ehq6k%$~1!qE4Rw4|F31>3a
zs<59<Y!J24h1S`P1)HV_?ha!z$b7Wor8~+F7dt9Vk$b`tNJ0~T1uQeu&Xi<I!H&0}
z8ItSy@XBjG;$WDLPAX~~j7~&nTFb;}%vYPB8rhg@H$Ep@Pb1?1bHct`FP=IqSVaa*
zGvz}s{dXew*3cjCzsk&7WJ8aVgvoGN?1wO2%}S~H4ZLL~^)|47RJA=##xxpaTruLR
zMn%FR&k20+QJX4b1z2u&Zi1lJX%uCcy$@SyE~W<sE<r*}EHS#Jd~jIt9nsALd2X!8
zVZD8zl0yUpIYEeQ`l@f*Ld6Y+^>pq~$^!3dR&KMn?6V*3xh@tA6qBJ)Oq)#vS_}|{
z0=C#@VA{cwC&}p=??k(Ev#S*fbSN)3HV38K5>w&v=s0~NoNwOvz;|ocK#_Q&FjA(}
z(?vHJ&kJo8oi+lmC~VOuc`N=(%PC!0aGE!Mn646Mk6w;m8mEu5RZtS(!~{)JV7PLP
zvA~&*o37Y&o*qPdrF&YOZl1E!l9@QGOOKmr>^X?E9`eL3Tq=?V%IQzfuDBArYy1rT
zutz*Vy!(Mj&cy!uOf18tQUfRZaxVH7X=Rs#<+x2b1?9S{3Aeu+r(r8rXv~RP0`>S|
zn^eY03|8}Wu%WLEnX%0=vEJb}_12>(od5M4F-{LL+%`}0(pBN?oa=6{k(NDG8fc6>
z**T@d{9{YJ;dVF*5x3UXdcm)YSN;Jq^V>zA>}s?U{2u?0nkvBT;MYt{a5U%AWd*&?
z%NB<;U_Nv6_{58~5*i+(Mbd5x#9+Y-c1>zkXOOdNCuzg4wk1YqHeX}5q}D-=Y;f^^
zG4_o?wuMQyW!tuWtLoM*+qP}nwr$_CZQHhO+kDj%F%!}AqPu6u+57y<A3O5PlP6cM
zweH3P;=V&n%UOIFuhfm+m!L-s1#j@fViu~=2d}v&5QZ;L4sDQKuCaNx;;fKU3hoIc
z8GIf{yk8Nm`amqP*>aW;U^DQ1*~n`$Gl`WAd-btfSNQE#aioC%3_U)1)Oyuh_ZR%G
zt!#!(CCzva`fL;MF{<4Uq4SKlg6uvB^W@8Kij`-%54K!6?MhQXb~!5C*>fgc(D)N{
zAs%Jy@YPb~SMJ(3=i^rID1qqAktw|0MN!eibu??U5t$<eRsmgz$R82zkLs&<&>?tP
z^BD;Qqwoc^M)oyz)0%J_Zxtl3tAQsqzI4@MWWj#(v?YC1_^9%mPCo8J#H0@*uR;H)
zD^g#>opA68T~oZ)%JbJ?(}jK8P*xr6La>UW<z{v13d=&n-_EKkYGteb@<+?oXs&k9
zr7VrMZ71N>8@TXE80iKJ({r~S?!%5yXANCVp>|p`P2qN0rmFn$<ch91eT`@3Hu<K7
z%0{oU{4+kA@hbV1iiL-=an$O-H~J3ExFpi#46W*mQ=&xgk5eA&nm`)ovRCf+T1Kny
z6IW2Ob`>~-nOplxZbFCW=L~qG_@X0&G$M-xPj$I3neMBtvubw&Fw<)IissI@oHo`f
z&za$;?T=@@wdxsZ#Fsq;zoYV`0{3=SjJui7+h)4UnlGGy$BXf5{9P`q1xr^-FI^uW
zJ*U>?^paV(Y*f8lMfBYp(cUU#qZU*(rDAaG6*n~`w{9%HpyXHs*vdEf7l0VA+x@gl
zmyQdJC(rx_Ui@_g_%9O$*36W>&Ili^?u8#Lk4k-FKk>UKG08W2wqJC_mJD)9l<BTL
zgVo0X1e)`_4=*tHrYD?CF0MB=dFA9@=uy5?G>Mf9<yXySi5(KOn;BNWuM+W{_D7XG
z#M!i#E+~DH(Vn7Hy-wEK$H24({Y!P@7yLiVK>Wk)@V_tYf3eVRXk=w0z(@Z-ln+aZ
z5>+QxXaGQvlOL|ge?9&=Xc6p@3FuGMf82!sKB$9{y_w#>_fGuvOXz>OC;o<ozTX7|
z0GRlptC0Tt_y&6a<<IyZ7%Nfn5-I7t2tm&uP)}@_yjfzJH6`A@mov0h_p;9ZFc93r
za=bpDtTCCE@tF&EOI+KP>`IfQm3J4G*ek&^vP|2_c)yHUwlC`YrJtvl!8bXo@gvnt
z4UBa4s1Faz%e$srz&l4}ti0z~q#Q<Nn!dgfVAh_W`4^1%bvV-vaOd56aDoYQ@M)#?
zBXjfmFcd@h#-c|KA6{c?>Lx)%#p434g-eEWoqM4uso0X`R*-?FOAz9Mb0B)`UovMB
z^JS19G=q|N#4b49`%kS(W7B8?M@x8dqR>c6Xz@0B0o%<!hS(8tw+0c()yS{*QkH1H
z<36ZW+sVmsjPS`c?J)<|$L$%onZVOpu~2&rwLKPX5U#EXBA%~c<Ev3!d7FtKHcBQ?
z%Mw=1R|PHWz3L{Z673kYDx$0OPh&;Hd4mCrfiuxm#W@!^J4O`Ibd-y(T^~W*+W8Vy
zhL_)6^IJdMnDfoMZdK@&Y)FQvvSI#ITi`XOl(sXno5Yz9WwYX~b`4Z-!>wG4J4Sm_
zuma`yv_Zrn{m@HUj3%fYC8VNu$e88MVds>c<`ZOMrkcoxbD8#J7CJLKZ_A1?Lt8`@
z+JcoO!y30{Hwm|Nz<EA8hg|OyCy*Xq85Lu@IVZ6Hd2qT?Q)F-UlRG((001QaK7Y)t
z4UJss99<p%C;PSk|LiYJ-i}XaKpCojq`U(f%p@VuWFRJzrf;yQbS~;N_+_28ICE#B
z@%{h{;vzTC&>o?kns)u{6>@-M%XOp4ImD8isQdojQx9lx-O<M&>Z*-KTtSBs*(c+j
zSPc1=thA?xp#=ymNe4NHP%lnWYnt|GMbb;aa~B`?Fz3qxmhlkEt=vw8++VHo0#GmE
zuZ23w9BL(O3A>kyC=w7kIiecSVmz=&kd1lEEUGIE1k3oFSOFF(Jx(@YVq!!xK+u?E
zj=+J5v0Dfr1F;7S%pGHfp&*11EBJ{)vHxKL#xxkrJs6Bx0hmhxIK9>{yVlRx8s~M!
zwr5BYmvY3qd?0_s8=CSt;PPaA?7Jg1>gvOYD*hr=`EZm!!rmn6s_DzVzKa=GXqc7j
zg_Bz<I%;d|OWkf!EHAK8j7ds<u$2O?c0~(h$*npH+dv!wj|m+I72Ro1`&chPDslLO
z2T!XuL@DROsq;l`@&Nd+tV(Hb3-%hbFoY`#iVWS{5!<$t;Y7aV=!sI~!Wf55!QCWb
zcb(sm_}ClA?wRh_%8Ex`$$`-89z<%kMZ>oHUL$ch{+?nEyl9~#P|0#rqUGx!unlE6
z`*lmO%Gz}ocCESO{vlP5sx6PJv`kuD$wG_vs9p~m+^4-$eS++}OlPiRi&G?;K3!y5
zb52$gyHR-4w9R7hXk{M8-iWmu?(#bwR2z{JEvdbZ2K^w__YXGdCcXRRg6Q*!ufD%`
zo805)WBr_H?}_-%rqpxf+303&WzZ1y`_p9yY*4Kf4%#BsuASQXLh2*<R-n`pwB)0!
zBjL#9?l@n-|6FGOyKevEoA}?Sv8}zCv!0{Tf2`psKcOK0%l<a9>7kDAr@VK8007YZ
z-+~+H{U6AIQSwsFd8{ZK_tYEROt7JEc+lu#5C|lGH>7pQf(SxgimqR8w@%NQS3=X7
zqjgtON}CE!Siv4!)h0yh0kRLcE|XSLj!O@Ylj-h9Tio4~7wfwjCxI3R5uufc2*Doe
zhpSef-#o8fS=T%!AsyDn0$V(H+Artle3l3-5h?NP0xQs=(g+YY&v68@{JL_4ARmZ;
zQzB8<6;cVYcX7XZeg)%1Mh9C#O@YM<z(|C<qDZHMvDE0s0q`LLs1;`iD?s_s_=UaY
zPMFp$rZnkuxo{`Or;33viS80D`PWMZpxg0g19`>A2~DE6<fyaMp}!zwyL{(<#MIo#
zOH)jA(dWkB>3XzYADu;=$c}vqA*ODvR(T`lo(hr7kGlFF978hqpre5ZD;{xkl54#3
zNji^Kjgpq@3i}xnbTfIzQ(+Aw+#mp$0id9VIut;#gfsE1Z#~DCubUvRJ#vnfS9z^!
zxPIg(<c)E(z8m}w3v1a<A1mdWIk9Vw>|{N&qY71#YHl32TkrZkf-B(~p(!g10q~_j
zgms)_@@7lbT;M;gh{Vhsh~&9)|F9dQe7z^#o!KZoi|!Z{^**Wmj64Ofj%F4Pztc-2
z#l6sC-LyRY+U|i0fvX&r(1V}UEBT(%_pwAV4bHSoJZr(SzO!i)WDn@3)=W@S-^(t!
z)S&b9LELc<vpr9u&bFxry)VDa?O`(xlh<TZRjR${>@pEFDU{x16X7ryLBP(r#fSwb
zU2s)h?jH()ZU5re6AHM47D@|+Y!o+e#OJ*MrJ*<`NO5nLAlyrWS2m!QdA5QGpJ3rC
zWANp+N?NIgJ*EkBaKB}l0L_Sffo8nVb8d!?Up$5YCM~|R6qagVT-G^Lpf7lQd-sDz
zYjGXI%Q&l`4~jkB7M%?NW-_#tLmR1-d5d()wXDt=V$By7?M<~E?^2-K{$4S`sc}hz
z4Yf@K4_9H)^1N7AwXhBDZ`Suz7L;BuMSdC#1C92&hy<hQ-ax3jF55e;q5Qk$)Q-<m
zldNKSb)I5`4KMkqQGI^#>Qw02iU{>vKahHUCHh(_H+Dg<*ucB1Tg}`=HbBFX>8*F=
z{7>B%>MK6-=l}XCtMQf>l|}#nQ2Fz(35oVbrg{#h{~iXs#Qq^94&AnU4+de5`wpaJ
zvf2qsloI_)8bT>WG#f6>>-FuC69fgq*pQ1EI;%eAImJJ};_~G{NGxp0dJ>2Wle*Zv
zyu9>y-kDkgTO|rHbN(x$;vlW<<f7fY6LURcC_PG%KkCX!VB+?sf@N!8b8ydWVr7po
ze1L<_U@wh1X=AzqCKzgg0LrY#OfpVVz_tsPt_p_;?g#t3cDD)g^|w}hkdI7!VghM?
zXvj3Nu(6yZWGA%gkXT|YftI1&0XZOPGvZ(91E?r|q!&oB;*F3|ZprB@MAVKQNk2<l
z`xX4?cdVf~Be<2m&|A)QI=95Wx6Buu<w>^b73*RL507=}U6{zhOXlvg5g}Zs%%@Cx
z{hy<`aw2LS4>3{zoo=f`koh(eqj;4Hl%GEkGm1HBut!d)=Kyulk;@h^Dp^~L5{BGD
zk!&MNvmGziAUYa&^!))&Y{S;kz&7diRD8m2KAq<!HoPo{G%${kdSQZTF^vt89v3^6
z7Z^Ns0;9@+=en;my!F02Dw5*)rU>J{)w{ZybL|H7whrbuObO1D8Ld^<Y9`5ZhK~mo
zdyFeR1-=#X#kRUlY}2;wcx(5ki!42}c^m`-x9Rwu41qvS-EVM~Xs-gOz%5&mJZ~eu
z9ExG*8M9Kl!vq%$h_43FMi7z#;b2y*lVL1QWr&FM5w3HT>f}LG7~MknO54Q;A!Bz3
zCQ?s$3XW`e>$F$ImjVop;Lhqf<QhOafgwGKIvBk8a|{ZWs9L+51+7F5;|5M7pm+4e
zkQoO#^<i@etPZ#qus&IL$YEyUW6L1(gKnT5XiNMA_d2Xr_v+XXT8jJ@U9m42GNOw2
zC8yPFN(?JR8$~&Ipe=B2#^5=ERlMqasQ)CK(R=pWHW>U)I;P`xROc<FGYZ^(17CW|
z=dyB!TMKMCv3f?^A9jrtu7KNQ1G(5DzH()m9yOj9d1S-neocS~vk`dIes`D6EY$G(
z;p;}r2gp#tHvy7H-qE>fghQO^f#ZT3vf%q|Ah}-6QDn84ENzap(<=XU?_sps#Ou1o
zhkNy$WpVsf*T!U@FP|HXAN6cM;I{S;7S8X(YQ1mt$MfRZ1J#NZ-oY3kJAT<ip^?1q
zUNaPCfa?A*gg(Soq<t<2A!+ne*hksW$cs2!3xtg&X3)P~B5k0WjDD7cOk7to2JW|K
zkIw|k9wMdc>7YOG^1jQQDYF={O>BtvrXd0?26~$q7w!eT3J4pz&#Y$GAdo=qt`t^~
zA(o%N?9~c;3usPJB?!aprtF!}D`-djr`O#i=_^Pvxy?2bIA2DA$8#q%fAdO2hTui(
z`avT7eL>winO#}?=%r$&UkQ%v5J50P=@b_1$uJ7P4LkA9uV2~`CAtWwA-N3z#fl1w
zH%Dc^m}$Q(cxF%(tGVs14-e+XGJpzC5tj%{o#=yjX;3BdRMowwaTJ~5104FN8kMD)
z);VTiGW%$P96_1QU%VMg?4ZS5!2{s#LM@@YS`I)l^$>8Mz&{m=6`c^`RCxlJ`_hbS
zCK!Nw99D^W0TGGkD;i_2#%Ngq<<|I0R?KW<L_rOx`w-y!2A<Hai`X8M0+JwXvG4|!
z==df3a0&5m(7bVq{Q|fNve<gy(ItfmQaUVKI`wChRh9JW2gt;#+5Y|(!5gss>&}}!
zWZUwhC<}=;Itw09u6RFXd%?xe^nov2a#UvLY8bH~aB$>L=Pz_*IyeA2Xmg3Db)dIA
zK$v)9cwiK3cY~>Fbmr$(Ij=wG+UpG29$g26gn~pz=m6^}JqjJnw*&f43#gK0ywRS=
zIX+K4tQ8?{A%KWF64SSQYf5IzGD2s@>kAOL#t)0Rm(STR4e3?m3ap31Cco0WBj#70
zjJjrMYHVXvqi(S~)(R6uYZm7Ng$T7#$Um<hwA3UotUJMR334KFNZz1GLE?vzI!z!9
zjhncq(Y%m+h93v1Wl*7rVG%oIHy~(MYhJ6UR&n}HGPcz9P{{E0T*Z|m7D%Xt>nrX%
z$Nqc3Vkjj|aS&I{Am}dxs!%=yO^ddMGMSp`MOGx=A)PI@(@`@R@P>O)Y8Xuwa{y{v
zRCR#~rC*V=(y(EXA(Hyp>60^?e-}jnujNaQlFkAXj9{shN&!&WUgrD`me^C+)+beA
z<c(rtW?i(Q+E@fiZbbdO#W$V<aLHrt($JinxR?caNRhXwxQQ>S9Z>=##O-)swIPZF
zg`q*&^wq)<j5Aqn<o?951Mad45`3B*lpFwwc^ODy*9^pwaHBtpEe|+w$IRj)X`m}b
zB4hTr8zqV<p1_hj!p3AMZkU%C$lD#**V-0~5e|XU8z=f~Vdb=r&;^_zx*d6HyLDD+
zGfWhMiRZg>jHia5RSFqvv5RY-N)O<GnK_`fs(f9imsr;tG5tFIxEHlY_<X6UB?%q-
zr?VLJgOYH%*8#wnd1J+Vwc(|2ndr8icM#zYUwn@V3UNf{GD!y5d%9|8Zw8j5Ql?tU
zT1fzLK!uaLLzWw)MldF))=+fkc9Eh#+3IOqVHWiw0?tRJ#xy^m1i-HuWGLKatPN%q
zIB61GCrJCKD5RM(x+W#0NJY5N#mcm9Y5!nt@{~DF$q-qx$2ob!C+oT3twymnQ^BfT
zE=Da8h(&Ae)^G>~cy!MGmEJ<sMhm^y{n6fC4x0xiJMONlubnIyAG}sWYH?#_cJ0Wx
zN)BNENd$^lqXQ}vfz*%%rB{%4Z%<`>{&xIPxgB8Y&G<XKxOgCx7m*W(TxDRV_{UE8
z4w$)e5aZy25-pzvA?~t3Vguq53%m&jVn6{6XBC4zB`E2vvxAbeI+%Vs2_u)mnA1p^
z)gn2i{5S%kb;Dz`CD#7W=jWvhO%azQ4TtaG_!z5LGDxp01A8313=suZLSt*l&Lk=o
zDn()&3`@o-)r3<e`8)KAFg|#Xsg-)<wQjodcTeGvF})!t4cTxF{?h5UV(r{1yf<Wc
z3df=~-f^By{)|pF=~AZOo?$(W+8p6-7i%jp74Yb7Cuh#w{gv!26$~|U9Mt^B0CPf1
z{;y%qoSpZ;c-slgxdRkh49&h{hcWk^`Ex0v*2VXUc?nI@Xhg1Q9j&+fq(WD|5zH^1
z%WK2ZRiiYhLJ{T_B*JV&eh*OZapRQQnXVA@3`z5YoTr`-C1Y=6Br`Js;QR){zm@p#
zs!7j0Wo3|IAlitAl9`uPsX%rM;we&ZK+?t8o0?~lxDCKDpoR3z-bq9r{y3s5X!2qZ
zSehu`QSHVN;+G6{5wW;pfF5c~5$7&~ubT0bDwbMC;)(?1`(PvDDWb~|9{_4}>{h`r
z76ludk$w8g&LKrJG%62TQ~HCqe?#Kw(5X;n!u7DPqZmv~z=XpQ&p^gS7RNAS8ck}a
zko2fii}<=M8mLNvjge_7INw>cJF(_ab4h*9j<&k6zCxT-O7d>P6A0aiXx+s01x;7c
zQ=yaN-VKF*iy==(=m(_!Xou;-&L6@Iv~bh*{JG!2s7WPjr!!-;(F9<_L9t=*P)=6V
z-jbS<3HEV5G*`}St)aKXdjSlero{M)_~U-85BIjp%T@(4nv%J3gou6{N8uT~xl##Z
zb`Z~1Ai8v^6pp!~q=bAcFDKn9i%=p;H+!S)tlhS9i)2+Loo|u{-cC(7Kw#GU9bwlV
zlsC9Y;f@QCHrug_rKzxtdBuKJAi=OSBuAyDuq&KaW18msx^{;|DG9V1aUWSRhy*6<
zE8Ls|T{HB1FULhT@JjV@?-IwR8@IS<HXu1bEwmmpc|<T=cG=EBmb_50@=4Y%Gl>BX
z&M^so73rgnkz(LQwB2bmtvB-Qm0Ife`N`oezOpB1iz;hPdW$%|gah5_y#FFxj&?<?
z>gg)08p%<Z<V5Y+e1r!AKJtBHFsE|uSfXHimU!k5rv=3kHORSJ_hmbM%WxMm@f8yj
zmFyNN40n^kCnBD-@lVWb?pW3z%oOfJ$nl}AQC9{}@IjFbJDa#*MNc-_Q@o^IM3xe2
z0p+-Jj0y{RXwZeeWZDJO{OF4CWp>3j3v~etYwt2A<x5;y!!3YO1QjI@$lr9K?$rHx
zqqB{>y2!4#6u{{e59Ob?R(G8dxt03N(``y>ax|;C^lv3L)RR+-pf4xms!|oRnM#~K
zaCVG@C3SN5V|m@rmTwj{d-J_ES@9MRtdRjzJH?!`fi$-o_<tLBisk%Lr`h{2yIL&*
zE`xXG9zj>vu)%`Fp1U8U){TPVoFdHoH6Kf1J@RTl{Nt9sOs;q)hC8%k!8*l%#-5x@
z`hW0uzGAn+pU~vSE_qkO@Z%1dBR&DTFV$taLt0L&5(1&Z53@R#gw6D>+`mR3Rj+v@
z22L`N1!iKHY!@|b$aD&@&s4ty+-o5@+eGQ`39ZsXR|trJoaG2DL$7-oWKQ8lWbrB#
zlCawF+n<^6XRldNPOCR`3Up<73=6#o8vykqN>Xw7y4sIM{DqQ|<6k)|j1r^s%7axV
zKgy?5n8dcZy%1Aq`u^5^@r=%zXR2H92g5V*q`qlB>`-dA1u+-lXs$335BaQSeSix{
z=~>Av=6-X;rXRbVbwSm#3oM}%ma|ejP%~L>ENz%I$ye?g7)>Zkh-_Z2i-vdPtpUz&
z$AlZtpIF*6V!8KnMgeU$fTS+-@PyE+b4b0iykRC-y#DmYnZF~#Lh|S91Hy0+|7z~V
z<bIqBe18<rwsha-G_!HyW#K##3dLR<<VZOKF=>1EQOJH*x%Bx9Is)r7Y5QY#n0%pb
z4z9T8qG`oLUt~9j2Wz%(c7a&An{tPr1mFvpm)j!n6t@qh4`mLi^|Mx~JEHs=DY!Z;
zez9y-eR=JyJz1r`x%c{8Zj_#2zpE#G%cz@v$JVm4o;>oi%+`R>9fBgI842y9t{*TP
zOb9W_psodm_Y_XXEb@VhB9@PklgERa0x{<|K7sd6mt^z@R$>P<X0f<tr?-xjz9@f>
zdt}=7aJhjW9L+nCbx&jBgUYn5XdA6#<3zc{$tG=sc@)hZuwDeB%F{xQh4PZSpfG?W
zi8p^=d`!4qTpy9k8x)w1T%71ibS$>OSjZu%^fX((Oj*y;(ePL_E$&oq)oLJs%})M2
z0|+0Zi0pcacY4}|cDnXS86I?-p9}3VPrkG1Bxbjj>T0Abv8GATsp)wjpU}8C8B&Iq
zQfX6I{RW>N#ZodUW*>?<=g7jgXJlR$#tI~fzP(*WAa7wySjii_>z)Fw9ybK4NC|xG
zr^;lasK}i!#DYnH4n<I4^pv}^Ji9!6>?u(Gc6LA5%^=<}wopz_&Gi!xOFB(U#O5OH
z=tE#?YK}6NPrGH)&8cA$G=JG;W}w*}Bw)e9eym&=JWFw|S(u?*eVWm!)8v4beb@|M
zCsxew|2tUI!90W+gXf=oux~IpGuTGm2^B3Ia+eeEJpf9KXpwr^2rI9tr38Gt9Qp{E
zTl0`IZJ*MZtrz;I?~gZ%0p4u?77Qe3SbPmZ45PMlENW+-8_md|k7|J1o5S}i3d!yN
z-c$DB(5JrsfonW|M(+PgYTWimTFl<a?mtP3ImL50<TC&SdUy-HNs?iNLJC1aLaHGM
z4vh1f^yo_a;`;)Azuj*xHZy5lqH%0rtgkB|AdhKFUW6><kwM%>#JB|p+{nC;wI=rA
zrIGE-&g)7ed^!6O=pyU6+DqYyKzjq=FVO_&I8QFE8NRzxB_1Zac*c#;$9_Ri(?zei
zOXlEE3ag~Yrf|rGaOkvraVD?}{W^x=Lo<R*C<R4??@_ZCs9{8A2?^BE6sJNT8GxxG
z$!QH|4W2dvFbxEJps@pA+E9d8d=SX__9Vd<RfmFm7Ae<UpgjNRgc}{~xHefDKX`Lf
z`ti12^Uj|r|5h7Tx^DGLp}<dJp|nZzzPB88z+33{<8=KFt9pbq-*tyb*3ao1OE)cI
zTI0xohAh%lyndd#3g@#~7_OUorL`&2_V=Fmt`otq+Elc|X<)jjqOXpL%1zfVI)OyX
z224eiu{zG2o$u83-M1M5EK`6f$p0K5eQw{fKbV&@bpuWoBumJGn3b6=vq}q)aY^cN
zTR59li0nXOgAe<|ds4$^PiL?W%?=loQc!J=y#XJbPj(p@c~=1)WW1ERa;rDF=OzGU
zGHFKD%)Sv$q#BARo@5TUWucJN-0M8_m|5Gq(lpZ<H7dU3so0)g&&VOk`4<1B4bJrN
zt?>!=&#(<1esaUX&wv``Czt+}_|}g_i|v0(BCBZ$7Xe-j-`!4~IIn18+VI2SNIOU+
zd8Z4*AubYm;fLktx~q0iml%pKL;byAj>H~1e+(ecKD)bjAwpZoAiREV8?T9bKdfF(
zH0Lb}y^Qf?PPvZak=<D@2LB3$VKysqlt)X3S+fESLWCRBnaaNzl!)Gfft{8E>ZF|w
z&)^153O9!hB|7+lVm45U=C0lYWme|O!5k;MYN>@{4rdQ5cpr1eD2SVp^mlERYpZ+B
zRoOi1G2-`8^M~b{IV(7uuHDMGv4s!qFp$1$EoH8K=^ia*6@OP85x*Q+1;6vU0sr~U
zfhh7DWc+CVHxmDAZNGoKIX!zltA9TyY{W9NS!aD}_W|9{YrK$~8l;&ix+Jp8ivAUb
zOF~yOIKdlBy0)Z<h8icHe)-aU?ZHVRo{ZGYLER80+4WAA)z23KGZI@Eqt>7aY5(!|
zIQ>p8GW<<ak4ie9NY>n(a=>ojGshcSuUVlw1V5sNlYlL_a}aEwzBzvb06|zePLTsy
zOgNelYb>a0sNX1rqj_Q8WBu(LJ557w@f}AZ8Jnq4K&*^N9zjtQ=nZR1C7KxPTRG2q
zm*5*8B3eOWCnbyw`4L#tdIPuue)E7R)(ak(I6ybtKYQS8xWqcnl!GR$X*kP?jtKk_
z`2uvS%wO;^xx3rn-wz0k%Nhf(+Qg|S8ls*Rkfb^c;JtF%5gJc0B_O_Kek1V7p*y;#
z`-lgCMyM5g`g_FI<5a3>D`dTX%8>n5SY^3>dh6oI(%!?31-pN&c+_>tjn9BV<QSBa
z!U0iOa;~gmaJHj~BJcO6|9GCEn%2de*%-XC7WR}V&-R|7vuSeU#Y94KRO~w~hmH@o
z`(|Cz-0!QM<c5vmSwq*WN#W*t=@4igLBJh|K2V8H`Ug8PWE;eHiMwc=EHs2?8Yswg
zgQ+El7!e7cr~1Z#Q0SqzEE`-P8Q`e>`6)2Bd6Gyp)Zm;*^a;|ig(T`Qi7E2z#26TV
zH~f`|;l#Wd=F#OHhtoyfK?2KAeMpO~lOr(JOZ@h;`3E2)6?|_@E$w#D9asBbovrd5
z^D^~!{jTyfWhtvC+izB?c``+V+z_wlC-v?jzVA6|GThPR`AB*!U07K%)l(eU#P2sL
zl!ovWMcmtYsPa7b%XkvM9A0dEd~d`XZ8lM(=Bo-JPA{J|=ROf`nS&KmUMKG#*QW8>
zu~mqLM*WS>t2Aa?T>L`!NhW9YR@cxC|9WC<>K19oR9RkFo5gQwKts!SgBY~dw4gL8
zS{AjsCc`6~sIy#mHX~A3fP9+sCaEMMRx!a~{zY!p;e~G>vci&{$Kj`hrY(b{CY|wC
zx<M9B6{OT7%p@#nSDL0iiDAx7qo+s|rw{<?g=(0P>8rve;)<p~&%qU)tP#(Tg6OOL
z?FaE!pfLt%vYk+;k<SqeEB}N5_^s4F#dj`Vpj9PJ^aGTphm7F_Q93s^So4>xSXgAd
zx|C8}1?HR~CTW94m|f)r`3#>G@>zVM9p2==NX^jLbRRfRKo{>dp@x-r{K>)m;bBp|
zpX5v<uTd}7S~Lx$cN2^z5&$M6Mo)-`f&q#TV@@o&=z(HY-Yqz9VVx^?c08aXW#dsi
zAZrtpu2RNWaE0(r3`ARf8I7usp^{v0&K9z`0Q_cgcww(1<_R&qWJG-$c<wb)7L&#~
zBMNG-UXrY^9d3(A6^sLDqVX(Oa3+XV7}5ZXoj!oXId#2%>dKVWxgz>pB&}B9JXP{j
zsUlNfPee=j4FFiuL`1wO>sZJMr%U<NBWi94s=Xsl(Jj)<-0Ab^7Kg(4dmGl+7Z9;T
z4G~;DIxxPzEO57(YG<pTQcl!h!^ZOMZlS6$8eD@Jd>t6k8>x=~L)kN;_EB+F4S2VK
znILZC#gQ7Ls4>IUDT_nJno@QNiM+Eqj6UAsTYeT>DZkDkDs5<e2#nGS+Y8i|?Hg4B
zeU%{qzmxMQHFEu@caUJO5_S#MG-v)-im;x!f2t@o$x2l86*W(lQk=a{ggSxrWSY>B
zXR&@+s8SdqrnFGDds)s}IPRtB@`L{$E2mygWvd&|2yyMn$csHWBM98qvfwI(;dV&Q
z3L<!yVMVW&aP0--c7|(FcnwD`^WQ;e$6o-*Y-WnBsb}BJK~lvZVMdFI<DQpBiO|GY
zOX{6Q$x0l)nR2E*BXrq9jC`nqq3_$#U%nlHZC-cFI(6rrK_?zXP`Ge255@@m=sj{(
zvNb39H_Cg=sy6xUp=LH~S>Hs%2T`1n6xBU&$rha3t_XYHc+etB7^&iQ*%}WzRwxUI
zwTi&hPNiqL9kK|<@HsL0$Qx&yLhp^C5(~~}pqjaLmw>DsV=MRiM<ICj4vOzijvtq1
zW6BSdQB>_5%uTF;Z*|d6j~#42C=4M)Dp>j!>r}CoK=zXxp$)Z)3sc_kd<M^^G|a|p
z{$$@f3k`e#m0>|kW#bg%H{pcQY5>QhhHBFGmeI>JIn(u0?g|~K{(P^XVwzsePGQET
zad&LRX*HZ`)}^P&V6$YO2S?v|1aK`p1scdsUgp0X4{`W+V|%pj7(psQ13@nUx6+$}
zz>-7fi&rOZJh5tUfMi~DZi-B$jE?1~IA`-_422@f29dZm4c!PJwgf=#`XIfPtbm}w
zcLq^kD1zsw+b_o>gk3utch&<`0^F@m=bQ$@564k4pZ8R^LJ?}nDFV?Q2qhLeu@~}F
zQlkN{d6GPYPtyBmIfJgIE?@RnNwd3jdi~1{V9xrI7u9h|^Cy+6#NC005%Nlrta>j?
z`b{|QZdMg(scpism{%>MQ0uVuz|ySul5$UHt5b#UNRG~s$Ku@Ncmmw;mAs7~;)cq#
z6fZ3)y+;0A!U@3tUKjB%t;mN}_J5*K0Q`DIDEokheZJNGRZRWOt?$-k@+@)BoDGo8
z=)Rf$(sL?8>33Hj$+1pasicC73QI-rc>)AG)`Xe|+smQ4*))OK!V2<tQ#yM5t8mQJ
z6=}D#%8}=pmyCBIw=#5GVv`C^@{{3_H-;Y->Hui=%k1}c^4NxH9OvyZ!&N~13baLI
zy?Hb)j80?nqM%)1lMy8>A?02Np~r&rJFap%T_zPM#hu;VDHPoOVe40wr<QW`<I4f0
zVsc>cTRg!-kWFJ9h&r%T4HHzX@HC6M@QAwIL7|I8QgOBXix2qs<vk-oxflSs3Y#Bm
zX=CMxI>L<_P+}F>kC-lyz^HnY2)NjnpmYwJ<1~3-u{Uo!i|}N^oGW7tI6*adUKb25
zMc?+ptu~~tSb--ic!DqMv$ygbz+;<hC^(H7QlcgK07sDP^Jb_-P>Us>rJ~~dkY;q!
zK4i)IlGDL_<&XpQtvei-#Bv9(*Lc04&~|i(@AQ`kF5W!_TN?Qt)}RMw8w2!52qP&p
z-Gfx#pGK9#Logej$=9l>e|)aK2i(+-J1QKszdkdK{w$G&)bC_B@!f`NIhfcO?9eib
z<Ek}#GmB=6tX+T<j$o;=EZ#6J?}%?O4p*?ZlgnH_1~fSJuFq|dki0OmLt0!`D$n1R
zHn0YSNnH^}=rWf%w}N?6nl{Ya<y%_DKP6<r{>2>*UvkS~C}7`PPS2uIuCYYDC7;p~
z9g>46>oF@2ZtXA(inBep+@e{3dVnPPedxUz$)Vl@=Rs2c-YaFH*=fa~@9k2cMa|ef
zH!R+uB(z4mBQDR9b{1&_c2CY!`=uJ7)_yuRLusJ*PA3GZsaa&YVV?(<QLfRlcS6qw
zdgSUaMx>Hg(6rY(<LCYyah+9BSJXPNaJ;awHy6*Q%n0uNeCV>b{ixLPbtf@p==!>h
z{ZJ86h|=HFR+xYQ-Z@XzV+Xra%-$mgt1AosA_BYfT%e*ZvbI496W))io$i0b01QS~
zqf!I+Ma!qN#x(U>hM529oOAo2ELs?)`Q9c`J;o#Cnw$I${m(7$Z!Kmw-+%0P;s5JD
z3-%6rPL7uUzTvG@`&L+QLHg$M3Bo!;B}YdBy55qM@L*zNuqui*#Mv3!XunMrB<x~u
z5@~|$!2Wt}E>EIi(=lzqW1>xNcwb#K?-p}R|Gi{bEcQmy_wF_o4F?Yo9}U<3t*7EJ
z6-*g3ybsNSH2T*wzFs?S8ab{}jXpdz1P1fob!ZUyZxbLyEnOdE3=_AJ5a*%)A)2J1
z#6<6C8&Sodwa85}Pz?|n8fklFLmaz1x71oS47(wGa?VLLjC!#;(R_wb@=V%(Pr6>z
zNT4*3UlLb$0HMGHGJg@Ez(gr~>E4R3bT7_YX(&N*r21*lceUa|Aa9`24n}_Lr<gsq
zPk-#EoPj(>>PoUg-{F2aEjX{;dm;k56)Uep|F};{vc2bwaGX7pgqd8v((^K8++kuz
z^M>38@nF1dwWwgjfOmPYwY5D~cWmi;&bFWRPdw)MD6Q`!rsg*dGuv~C&R1|%YbfB$
zKEG)1)&GWVLC{c^?^>xNssm8bg=~N|nBtZ2+4yGGJuBAGYP0M7dZnesRZ7|DEp_2&
zi<cN)EM!`y`CLbO8ti-&(f$VWu7*mGSnfVU)xe<3YTHUuzHLz+|0^GTbYxcxkReen
zeFTYv{azl-%y8VEJ<MGfU>zac?|^|jw^Q%&%N(<>xA?24FzL(J8@{^wB>xYdqX?JH
zh51yq$?}hm<np_e-NOc=mml!V@X7dTYFAem#}yVHGwWo6*Xg>0O=6j$8Wx2HmT^tI
zGE!w;_d9S+0@6Bm%p<d8Hhky!T0P7B=`kV5m{_Io{x9GZio1~?;rO_VXPzE$!~X6w
z2fRY3aed2g-R{9N6TM_%gn7o;di`360fo=j!qmPNYsuDcK+HEg^#ew6ST*?rr}2gN
zZi3yKk!8yM7i^z073bE!n5vpIW_k<~19{r3oHOmBJV?6&u?`2iqNoQK09iB?d6`ig
z62J*)E{80Moo44GNKLS-5S&?nge1`Yth+??Y>&4Ub&Li6fn)>7f-b0KZMYDtZHEdV
zj<8{930M7y5&@?u1TX;*$>Dr&g?gb0PJ0jQB<1Vb<|B3;%SP~<Pt)l!Y-5VB=Lo=6
zxPco!uz<ytpMlS7tSG>OJi%sT@1<-+{f|9Dtn+v|#KEjK2l0EGx;+FD?Pdfy7?nay
zK%!L2&rl_>2kx($B!i!sNs;8LO~yikjBtr`g}!V)nP||+q=~qR&VOHt`;|bgTkr^R
z7b+)oS7FBl|9W{Xb6;7rYJJHz+k^gc!*K)>rg0DJ8OxkFAV`FBQJFB-#DKw*8Bi!Q
zsFwU4csRG`>>=GcS?Q241-)^!<rr@kYeZI~m|hp4rfgrJf2s+RMz<dduxN=^y`Va_
zaX59AtC@(MpDDd#s;X{X%M6Hnl}8@h??zBG&dZz9gU?SJG(2xB92;;R5plf6L^94W
z<&>w%3%$3)itwC(mH_}^!J>CFQzEzb(a2*cWh%hU2x3}GhSQCeDGDSX{oBpy$r!{A
z0<<PgKe#T1frpvT+vx6mI^<gQJ`Suv7()Vh&A%Ku6@M~tQd|Uhone64C`!oQrq-AH
ziztmK)eKeLb%%S&B(>>`>lXEwF@Pzd7#YzDkgcWVVjqC)PO4Pf&My;_&tCFAc@ZE0
z#F#?Wq<J1j$u}-rhG+RHlilx~4bb62>m<wqz(2pis1nU&hj@NYU@><aGb|y(?Y<zo
zk%Fok(3XF_DNT-F9TZk@tH74O^_)6oE3CiT)U7TKxt!)NpNTBtfX>&F_mp6&iI)Vv
zSgE54v5Qei;YcFyZoQ>@U9_6ostl*Yx|UAXzicjgdjb}aa`)92T>T?#yzUjLZ7a>+
z5x*ii6x+`KzLUr>_)0GY834;Ag=GjDn&h)Rz~ip(PT4C?R)<5GOt=NyjR@g<1m@df
zCDKgM_o_`1Xmrqamdus_B=RRcmYr=t;(4y;Nchy`1;b6te_6B65LTvEMV_k=$sLvY
z6G{%<6FpK2tu3)_AU0Q&E17bHx3v?NBB>Al%55cva^z70Nf6JmRJ<E`&Z!Al4Hhzk
zq|^?9JhZ?jq1nX2?S_L}bX6Nv>D7~{gN0kxZdEaTC^MxF0){M;b#B_c?J0fhpa>Cl
ze!zb=294<E$6QqEEQ!ing_ZrSP7g$tj^9+!aji&Nne6B$vke<{#Y^8uI9m0Ja<W|W
zrA=0F<*+y@1>b<Z;V}6TgQ~rJrN0ZEeVC4Y9-|qo?`=vY(U_N*cr>%sWh8A@`6ns3
zOb`7l>agA9dB^ouQ1hg-CU(5sBi<fScQVM{+Nxe%^KX>4jX(3_tnhfLLV8)Ddt)=R
zK>s!MF%+Qr#y#h7c_B#9__zzoDf6n^_j%zv-WjT;;Q=gnElIF4UV}o0h4TpwuR`@7
z*86;t)VC8txY96CDftsH@eCCU8r*@p`dfs>BniP6$Ha5BN)u=g0V{CpPF7DpiP*+p
zhl131hKg2b;3~D~By&>*oNaZNL~!|25FQKhH)i_znQxTbRug@Y7sFs8!>$c6>vOm^
z6x^A$OW$^+sRwV8w%TfL+De{_u!x(<5VZP)`dQm3q?^ePSx}89dkGc9Y31m2@_e)y
zzkUV=e}*iuauho;+N}2kk_8RZ-`f#GmXQhun>BPgJ6RX_`#P0-I+Zsa2y~u1G^iH|
zs5f)5Gz@2GEnu}ClK{Fs0ks)zhEo*I)(Xv$z4bGyFEzA37^Knp{^26#z`Tlx;hZg~
z;1;|cNuP1P%Z^=Bf{qg*X3sZw!}>sfBxZ<p;3ti82#X|p8`!&F1Q$$CoA@lEIL_#&
z_YOd5^oO3$^Z`kJ4<^x-Z8NFvC4d&Nx+-_KOuLl)wXZEhx5$Ox%}bxq)V$%UhB)=@
zw0N;c$UBF;Z@ZsI`AXk?Ef!-0cqzz7Lv?8sAg`=KOWetRi59NRY%ay@ND`=A^C-?&
zyV~<n_fVA{^vw`8;v?1umcCGOv&1@Cb+s;0I&52|+Uh&>rLpQqi1J%3*COj!dj0EH
zc>=zozLeMo=?Vj6N)~Ja+j9tV-A2nN0wFfLS8JspxiVY_?7RKwutj<P^Z7dd9MvWo
z#|evazAZScQUk*WbskDt)ksvhU8G}(_68PqgKWv&bsWpRd?4F)8Hc@J(8#Zw3nRor
z9GRnVR@OLgg&lJ&KT;!%>WP=wX*qR)?y_0x>flF-;Kn3c$%W9Qvk^Q%@2rJv3y+79
zcb|Xm>P9E$IhudEx<Sl;z4GjA<)C9|WMH6UW^MK#EJiC;KONRsvA(jp`JL9eMEwE{
zt3BqKv-H9eCUHnH309xlaARsfO)V_{l7`f9yl!8+kzz*zTRj_dB>>btcynGCZ}kUY
zap-oksukL^EML5oI4tyaFI#e=U$7(2n*J!en0>V0{605!$15(IY||SFcI2(il_ly#
z=fe&RRn~bUk|)wtLkUehMM|6L(sxpKyo-{~pIjMcHGuBYm#a`K0-2q4C|ywu_74Ns
zAxR$%eZ3`uB#rUxO_raAz0H)A9ymsfAWt`78h$bqD!2)7#?t>R&*s2r9ZV0eM_B+W
zb)+IsOa3)g9BIM+XPI5j=0^x(+=wF>PCV$6H4Ar5Af%Q3vQ;~9#ap$UD@6e<v@}vs
z)+F2I*?U2k=c6aPa=FT;$8+HsY<a77{oG9@puBeVPNUK@c1uaxU;Q~it=vP~hV{zB
z<tnz5!+-}jtH)SGBx>zG6Qmut75lD2!GkW3S31gdrS`K;nS<Hb;*%C$4l3~4gE78s
zOLrMj604DbU4goAkpK5+7nJeKD`;)^*;Dn`J|iv@X~QoyjJ|nYFd|eLwHQ7X7F10W
z%Bi^3{m4u~VI~8<xr0GK=>4<@w-KT)1WUr2ao2<GV)Qh0?fnonf)$NIV9e&@YbuM}
zOhvSMQSO8C!XF#NF!O0#{=Ztmw;=J<xW%4eB4o;{T@bGmKmxxEI4yuL;;CQQYoIQ?
zF;6Ew=tFlwO)3`IekTgEPkQ#nj7;t`0L-vivelrm;DJgK6#(ZNhC_56>m`rptAr73
z%LSvn*ALyiIAqrWv%8ynCm<Y6m|f0_3mkBHsk5s6kwQGEIfJ_zs|gV@YNG|1n<QA;
zgGFRGZtEZCxGv%d#Eu!le-AY>;v|$X0Yc(^ZfaB!3yf#Y419UOd{LzZn2|D1z#vTp
z9WV_-5$0BL%l;9AaAxYbYR#Y33%gBw*Smn5+H}|xF8FeEhB{$ZJFZpp7>mM?jI)+B
zt|K7$*8CguC5Cw#VXgwvj!s;?47!?;%V8hlf;x5tOwo$?*LQ~qx>53mG*oYay|+Cy
ziN$!o3$4^#7K{0U1&MjpJ{ljiasWzVHrR0~JW$?{_xJ(t7_ms2WBXNcMhC*rPUw}J
zkrwzmD3TS&J6~_pUBSS1{rb=9tidIswL*Oac;cvD%c@tF=LNv_hw+tn!`rDtzA{F=
zlBhH&%%fmU7{op)8zf&;8Bi0M5{X*+K#@Ix6d&7#b{%OSf#zKj)d+%xuw-ifi(+7T
zQ$jbDbB?C7x(IpYz5$Cn57mvXiUJYKF~h^CodwZv34Kxcl~e%N@<YvnJh5zSy?q`8
zFu`syJ=xfv*HNln@l|t(^B&F()-bX1ST>n*iz<r6noobHt(-D?q_6FM9qU*@a-cD2
z=Vyg?lI55?+gOPv7H2{NLL)yd<gQqF!3X~>6sT3&gI^Z7mipeG`^kNvQBhlxflzH#
zvqK^n@0#l*AhSIKNR(4xnBv{5fY0S4$`oE5l?}5^TR#=nrmp<z93LAL&icBozX->>
zYY3|}PP1C+<w)4y9~-!G11ZrvrF21EaL6CqM2&<X9SOKTY&#$<Y={*~#gH{Vf0H5~
zs?;Vw7AOMzIlhA53gMu%zh}$Ul>^HoQ63A7o)&?(gH<OvHgB)~S5_1u!D>MpA|(ER
zTbsGMZbbbfiI7S{aJjJ1z3(FJ=8%e9F@S>NpAQUDsUy6gNTOIKKR+=WSp$K5eq9uL
z7_EyTX+u*nOwb_ODcO876izt=_4E+|gcKA%pWo0>Co7U?e~@}G{D^{?8jx%oLyhWX
z!yD8T(Sq@!L)?WhDmS4tf$i0*pwAmifF<io3J?2E3XK}p3R;~?6Qtr%bfzqY*=bP+
z14L=0=2#6V9=G~hT(m}c1UW0w>9Gw#B=%6xdpe@o_%VmgGS!6*r`kZ$@)gKdHO3Kj
zbUMepAY`Pk5(@H?ed_xxI|+%`jfm-#3qI4J6n9HjBKNG?g2f|*qk;}{KLRqy+|q@L
zr0OsI=2Rb7y=VgDGx&KT1}ybP+fC^a5-g7@U6R+p<D_E~qPot76q-n@kl~XWJ62uW
zz<OM+9(Q&!oLXPY8rZd#OC<O{fk+JP>XzcRE)ntP`VIvhbzH*1zBfK!pX}$264+qN
zDa)^k?<Uks;+jbxEN6JP3-@ieSB>#*v+^@#ddmrJ&|H%tZIG`m;kcGAzJbEyY5-a4
zxz3oc#q?mXXWgS)N?peorMnNjDCOMdlAT#ZpZ8e-qnM|R9jE|JdE_R-$5#`wD?6jR
z?Nt?<N2jgkr;dErbSWwSYOH8N-h(Z$F01SJ>s~tO^5bY9cyOhzb(LJ}Y1Z<E&9&ni
z`!c&gl=qZGW6jt9A(#(c2dONS)u^jHWa93W;J(irz^sysH-G0G9C)5({ept+LM|?5
zmJT0Kp6mXD{)KK3<H65w?jX`b>M<-;;F&nHX#@fd-Ls_}Z#}JXe7frMb*U!QE4=8a
zaWpQ(j2K`_x4cR2Z_^rl_;g{Jf}i2izA_h(sWhm0+2?t@Tg{zy<gG__L|v|6nCNoT
z#Kk!O!wM_dFvEQ|ipyi?xFDsxL)r{iIyIX4qP6d$ea?P)?}o!Vj08X>r_UZHFJGsQ
zDJtB&BvgsBvvly%I?mkWmXZO@={#e-Ft-iK^sv4jM7MVF<Z#4Hw%#O@^$g&#H|TkP
zS}(EAy!CjJ<-L4}uhz&xl3SOx0oa5*;wA{&pZ|El#bCd1zPavwtPY_4@J(kFy_~PA
zE!MOS=~2$}IlIev&BQd%^CHM*J00!-&1XDJ9O8z1r20ii1{OpHZGcC>p?r2dIdU1b
z{yIP<_G;N{m(Lr42FeK=t`->)Bu1gcEwst!FAT{1S)&ATs5X@cDy3SI6<s<=&aSyW
zO1VhER8q_3hddbefNTC2b!wFI4U{RfwmGN$3Y?=rO@ac?_B*r#l>HT9Iow0<$VlPH
ztyObt@^Ml30<IHL%+)!#9o`v*Nrt!<{FEO20_6OF$3q)`{@jzOErWykt}z9QiO#91
z#%`=2eZo`>e_V0dQ&YRaiX1sRT;`imfXsQoH1T#>tyO2=Nd5B7&*-(r3>3R!Yowfi
zOZ|E`6ACL3g2Vhk2L!FCC3W5smoAtkfj<JL0;9n@B;~S(Ft^rgP8+%l9+6{Nv!X**
zTD!uAVBv0tprlsnWxcFQ$HsrRRgC%luRt4-vhmSi;1j0?jq>XzvYeS@-|Dz_^`phO
zmk-mItKFiDm8V0fMNb)wc~~D9!hVvER`U1%0=Kd4oQK`uf7qN{006lEf~jU?@PELz
z2Q{pI4Cj%)u5|nu5||39nkpoj5?U^!h?%14nhxSFB$+N@Lkb8Y(8CuH5^<X!eY&-1
zc>N1V6s+gZ0%-hKz$3hd<GC%bYgx|8$KRPd(o8CrFQ2rZ+C-{X7c=W;<A)PQ+1e!&
zzHbQ($jdFW3-)}o1QD@`{d5iJT;0cu!2tqQkM(*CdW$VlW!%OXfyweTCWiPVq#D%0
zBfX@REq6ETSw~mIZ3jk=a&_w&_9A^?Ul<MaCj1R+Bl+p!SlglNTR~J9ph#}?lV8%n
z6Sz{lIz%X1deV?CJZD^jkws#{43mJ?m{HWQ-pXkteYuUagB|Z_G{T!hLR?&2z#%XA
zLQe?9Y~aF9WUY>MvuTNbMDUtjR*ZSRK>xOhuNb1%M=*#Y+tD+2A>guv0?+invSGtd
zacfGgtfaB-%S@Fn^&7?SS%XLz+ZSsmyY=Ec5XGxG9~b6;mH!=hZK_1;@1^WMM6`4s
z^Q3GaeT>zDdE1{oxIY+cP3`IH|KbaAyH%WmX9kfq6cgK&sKc5>z)EZ-0R9wSQ%x>c
ztmt4Z*Uwo=iboL8K;YdDR>-;kI7rT*zM+6hQNyUw1yvsXV0fDIXp+o(XH^T-R<y)V
zmf`JVAPm1+)xt8ytSJ1UZc^g~-NK$vbG>BuxIATSJebwBg>m+hVLtbd2;3?s^-uX#
zE{p?YLl5Gp4&O7t<t--G<0t;YE$b%eU+w)MPyMe!r<Q+^^wj3=h|`-#|Llwt9bGkd
zyUKpT?!m`_IRNo;fA8X!1D@Z{WW$85W~4}uC|BG-?nDKw-nQ4`UVg>aZRRdn!j7SN
z!Y$pcyD7e_f8MblmuE{5$+G44@%<_TwmI3;&*iDkgFz)0J4OW>Av;lqL8eD><=O*=
zo8gFk|JQq5C+FGB;t7|g)9GG-gZJtvIb86y$Ubx%Q(G4m9az6-thXi`Pr1&gf5&(4
zsZYV|eJ@B=buT43GXPZ9k5NO{h+i-{dbA${mbZO`5xvY1IeHb-#r$C!)5nQt(Y7u;
z)C6WWZ1B`pz?S!SKg8a~?G~Pv3<i9%_8IMlA!R@x{ddr1f~|M+5vRI(FvZH(_$OSw
zv_Nen0ogb&jdBDiYy9JkoS+`3#9YuK<*4O17ZTjwA(esa`uK`OC<T)Zs?o(<tL{@N
z)6ff4w+5(k-55-b=1Cxnx>3fCq;&<q*gFq~rtZX_k{Q0exv}Kj#m~PJsBsN~Vf7Ak
zkv@wJh7cr;61I7g!3=l|ln&XqiX)!DDE9cEqT6#|ibT&V-adaPmF)<CjbiQT`*j0r
zK#c)`?YLg@az_9luM*IM6zKPzf}!>x?Eg~d7uGCc&;gC6g|h)}5JG}+hh|buT|ra8
zFropst<cx(51?ksREB?Irv_lIAM5--#?G-h6R6GBv2EM7ZQHhObZpyp$L`oq(y?vZ
zc21v<Gga@*RP8Uj_7B)M*18sPHKg$$M;JMZ3~v%53Pn_XETw4)G1DlKsPT%_FO(&h
zS`j!OtOhv2(AvXE{TTM-l6g@&Z=`7vDdCajxI9t0K6m(Pj&2-Gqh&E*sCk=UJrd-a
zKpsgIjsB#Ud#(l><$>L{SZ~U_wsHP(bf@G>Y5*=lz}|}nHy{yf#%ofQjW}?Cn_C`c
zZI%TT`RandJ+7ZE{ybQpDK~=-3(S)6d;n<+MVP2?X5Xf>gh}F+FMP8`UDWdt=Qn2O
z7VsD}@_XU{KgY}bSsslE(fa}oUw$}iFrGm{f#4;-kQQ221Urbd3sd?$1Ee?|yDCE{
z+xEnqkra*F2r9OrBxZ(^lYH)i9^P(^u5?|5ZRGKbKTciV_ufO-9Z^AhmTRR<B)s|c
z99G5QqDml{aRsCNXX-Cr%YSZy$;)L-v9856Q(*U2dQdeVRJVTqp48S2C+Cgzk}_$<
znyDac09Sg+4TR;;1uPc4UIUwZHEDecnj-YERN`bekWGa=)Wp19z1xvyq(luq&V_I(
zl{`>TZk*&wMvY$zMYZ`^{-adet<>2h1GrOWyLw-!(0-DPlQJ<lp>eE&vQ9jOsK#)O
zDT^LK;NVL*ltv?zqe-No*jc>=t3kSUC590+yv$Y9>u8?%HoTmnBQ8G11Mf=i3jHYc
zlP{GFoE4=}6hbI_+OX{bi;!yT5+i6C-rpj!5G=nK;&Qi@QCYFtWN7`-)QXWH^)mDj
zJqulLK>+nGg3K|K$X@($N|SJn6ZBFN?ufBPieHJbXH}VMOnQ4xiGdxjvKcd-Wt-0B
zT0&>P9knAMAutztGAl1LBnZ-2PTs%E!i_InxqsxnroA3+BhB01LKOX4qz7L3F3f9!
ziK!Rx#&Ta(e6_1t6Ymrg?fKOqO(ZA!i?5C`KFr8lev^!3<Kn1Duyn!UAndmr9V7a5
z<`>)wsc+LA<>{b<GJ{tDF+Hrz7{W&e$B0HXSW<n}q2}@5h~V=H9SfRRE6+)8tMC$;
z)ruRMm$E)H-F^k}3~#M9XH%`S^rF-peD;!?jHnM@B@=Dk@@3*e;$Y>abm#G)a^mbN
z^9d>OP@7nlg*b!^d1N9hO@IkSF8))FW+kqi=UG^#b$gQoi0=}y7p1E@v+hE=BaU!S
z5!romJMoS85!mNRmO}-+nyZ<pL}f37YnCM$t13HS=)4Q34Q&wONzfRX=5l<ZFbF!o
zHk|?epxmu%gZ|pM{&mExy7|;*PXs#8`d`}bJxA%1Ls52<j2grWc__+J-x{)S4yBhi
zxJe!0IH`L2kz?4COTE;oYLr#FkxfNeTwR-Y#{96F+sOqof?PLDvxID177tV}*+F9F
z1bc6+hM>^sLDM)jjCo5ft(+<?@D+K_5$}ANsK=dD`xodD{LJ{`U^&QwS`JApI^#Uv
zBg(c5bVU%A3<xeF7=3Qe<mI2^=Gv8zK`{?lwUB|pjQEax%=d*kEPB_S*E#VEx+6V#
z|CSbSDvzMnB>V}Mu;EL{9yq;UFZ%A(TtGxGYU7kK;0etKaj0MtTj%!DpfSh=eSjZ+
ztr$`@071`30&c`Ye&kg!2m}qT*xAvlI&BrB!`MHfZk}`iU*ZV}2cCXoiXvsmLyG4~
zyt<?&oc-YPr%t*t;VW~rDwFf9pedsPfqM~87>$~W`X3ciFJiOds&>cPr9BVS-|9u?
zzFt(_6Qk)fiyH8-{UKnZ+pBxVUAsL~*U67Dkdl&-rB-UI_E}tCtV?JqTTGFO1NW!$
zjQq(7h__WQU$*T{dr-)e@@#hcqY#)b2g<0D-gu*y1Heb=N{8hA{p5fqq=X=2JCU!?
z<6ZX|C7q9kLr)Ufkm31NJ}Lf_1)HMfE_FpM-%~B<OIeH!cI;LgjuHV4D2AaP>OV*i
z>cU4$bm-%x_q&T<Z*d=;Cm6Hg;!M9Fn%ost)&u+%$*x9xldCy4Q$p*mt>Ll5A&_5o
z2UpD}m=w@La&^Yj!GXkd#i58hs1-<)h7C<d{mN%AF^k0=>==wm?BnJ-iA!|Z7%+6d
zdvpuejtV3BXp1`u9gR01_K3h@M=84Q+bCJ;1CIDaoz>7H0s0lEy;zat(XDxu^7Peq
z=)*7@j5;jdH%DeHd^Sq}?yIo6g}zU(EY47UB#2p0DT`3OCP8_a2-V+H-P9;*OfEhT
z8&vKb=SRqSV$fV_M^O%Q;|#tTtOTfN#bo^{Aa?9hAa8d^XE4;p=rsPp@@P_S*)?c>
z;4s^ZKu70Ot2p^Hve<D|b;;mTjmp>RPFv&LR<7>=*4Gl8v}UH?4vXYykhU_S>(!+k
zoI2HzD-1jjg%AbHqE4Wqm5y0|dfa;sVQbaVmHQT<O0(Aur_`9YuNv$c7coZ$WYg1#
zK-a7+?5#t>LmLojsr=klEzV(2&WBD@TZPA6S+n=uS=@`vGF)mQ0(76&cHo(>O$=4J
z9qGTm?jW1haeME~0y4%P`wQ>fzW9omgYMdkBvf0Q%UZBD&VBFvM-J~GT}Qf%mqz}S
zbJTKb%}uM5B?vbsN~&V+ST-mN10*{%3c1w{=Mv-aN)m3QhUfTmM5&>JG?t^)4w<4D
z&J~*dM9Dpe<CNC<eESw1VxGzR_}{K<CAS--*09d@ejE2Rh+)EqOk~)lLboj!sGsNB
zdYmE0gWbF}9;+F6a-?~`tFB+Af6n@#Mag|4d)uYAw0Me+-@lJptz*Lp@wdc`<d59~
zBRtE6Lp%+w2+o!*DY|I77iIXk#Ze_dSA(aLW{vXqVT?xa+NfUITQ_~g%JQ`27PyHq
zFzSa|gS&Rqw!hF1d^tk<lYTJlz~#3*!DEibS!b|6$ND~UEm^r$z99+kz%PMKw6y6E
z4taIM^@g#C*Si?XU2T9(GxUx0O|U|+XxJslpbB;mY;F2b8!Lad+#)Kwp+U-1@fSaO
zR6It_@8qeBu*LXaD%2KdmIYkLD}~Zew68}tms^XAYmgAK5QY?UK)7&w4poE6pH9Nm
zGw1megUG*}N~`ryD)-oknX3(gH7InhCnQj%e;CJFW69&`l@9$bn|u_at^ab*4oG$U
zRC<<LI52c&rTf_M*!EH1?xu0v7982Arg8L7<NP7qv$ww}{|!|(ezv$!B3S>;7n6{+
zuTh7%0Y@k#r){9p^lS{;IfVfyq^>`!6yx#h@#XgrRc__#(?LGo!c*RS*jkHqyCeA5
zB0t|2u(`l*7)?Z)yXS9f#l^Ss@e1ZTEx)Ii#`l^<{wlnJ$AOB&jM~0=WK<u`gR?pq
z+HOBSP584UBya7IO^eB!E3O~)khhKtX&UMS2(`y~5RPRWY9h@VJu!DT9OZI8-7@DP
zp547UY?wM^Sj4c-IEOXXw{O{2Q|oTs_M!oL%iy4}p0iE}&$&%Dx|-)qay5I0PfMcS
zx|tq~a2_UJ0f$6cw6EEznY2HiJ$Db3xY=a_?LLfvO}PBPTXa;+t~-X_)xvG`h9z5y
z_YP}uvb3%Q*c0*41WC+2*{6|qzVR_jpr*L4#uODxrQgH4?jOZ%qBQ(Z3DcIp{4%%u
zi)_!qG&-Se#-BM<iMfcqvav;K3oFCSm?Tn2yzC9T_<k)&fGeFlPi^5L{GkDu9^ePA
zU?DIQg@o&U)U(#;BtT=Td^%yKtH55j3&-8I-Bc7W+;8yt6!1z?i@c5A#9*l(b!o?r
z2f-n!FY_-4unC@1&u3S7Z2-DB0vCrMnREXlUcnDn;}E&{^vRuQt>yC8A$UI#_X)VA
ztcZ;iIv{I=KWHFtQTOPmoTJrDHQQh!zksbU4q8tLxu&}gwX^K|D2I-ZpHVvx8e#!Q
z2~_;(z6t)<9Zw%zh>JBW5YR5!e-^77yE-uc>*!toH|>tS>W0++Z|Irt)EngNKr6Qv
z!`gU2DE1JT%yX+ZChR-RZ0!^i*?Fu(MX&C6>V17AaK=C;)n5b4ywA>7D!L?jH{kzF
zDVTpIM!tzO_9PGnT=nj3ee_GfPD3y!I5;w{$&>UwRGLs`>5P(HHKs6`iEbt~5i5GT
z%!CjiiRfgQjF+TB(#3$}GaV&DTSt3yt+K)9ToIV|jm6S`L1IV`H>Hx|w<1yJL?yC*
zn~s|fi~XB>V@C`ol;_rl>R9cE#}czVky22OM+^(lB@iZ}b??f^U*7Mx1o&;VnO07s
z6k<fGk((q_6B`E%{tElRkQqMvo}RX8J(o@-mLJNOJLYY%{u{ZV``a99!V@PBzcvUJ
zV*u_UM99jgS&U&#d(Z(r0h7<f&<GQbusnL_p^rN>AuG8Zo?BEz--zZJbv84Wy=+ND
z4pR=XjBa1(pHl|;Z45M|Y)#D^S}`iEFVYIf0{E{f2(fR>!Mzd{#Zse~*u%WmLc&2y
zn-xzrTpKT+^!Ua@)JMDj{@?m8!V622UO-g1Po#IhWvt{{GQ5KXX2`{z8?kam02|il
zz-qf7UK8o^*2V0`F5b4s*^%teeR&FFce?-~Ts_ZmmOrGSq{nVefPH>FBv<YYu3m1|
z@X1M=U-NNOz?b)9SpH0}!B%F)L`*fT<;9himn%#6)xxFaZSx#cfB?Q;f#+pY%)*@f
zPt~2(Fy9voP#>Qa+v!*On{`XY6(7Yy#g0Fuurz!C8zx_DPW)`mlD)gugIuXIlya#k
z<y5+?Q|z(nUptgJIf@C3iqgDgZU;2wT<Y+JUK4!^(%W`y-U~!*r!y5RjCVVH9$w<6
zXmb`-dC8qxQ$45<5AuggSbV6-_r37|sXM?QSG{Jt8ht;5eo`U)Sp8y^nglav7HoA#
z=+f{st|Z}bV{HDKtJG%gao6&=E#1arT}5C$A*=LZIBz!17>hMwD^&R+1l2(KSiQiU
z=wvaY8PNz*dz-6%hHp`Ffe>=IePJ;iiFp&pMEcsdF>K{Yy3UwG8k3;<UwjS&0aoC=
z8zPNp8Zrl6*~a`cY}%ly(p8xSlWT{<!1F+ojH+!~OP6XUMQO*Bi7bdf*~FGm#c+@y
z{lpH6TqXg5M5{1>?z9C7AI%WsfSLpA6(5iqU5g?VW~!^hXP*Rl5pLsZFeTW;$+;Cg
zCkgT?7cCOq8tLB=l7l4quj7g1duk<~QHyF4%@*V}QJEY&<)t=Z_nl~EaQC>STC<Uv
zk}P||U8Ppc>Ok33Fu6p~wleqLhSa^Gi`;jr-+P!&<&|)5o24NB#;{~thw+qQb#;9P
z1_B%ez)>nkw9MjvEralMle*6a6<0Z|TR^cf{IvzbtIiq}4QKvp3i<jbPpu0<OQU)H
z3EjLrD>4(f%Iw*=b=h%1>ivf$DA{p%x5J&?izHTr^f_J_4zv$>nbU$)0IIylq~a86
zxrc~In+IH-9zGHxop0|#eC|D~*xtRn=Gad>*0s!|w{uNE={BRlMLHzbhf*;h0_98t
z*-sUt!NK<`vPGBZjVJZFjncIzJgI*pymD|>w<^<+RoGyMpjd%d6(puMRY)lKED{wK
zxCoYLy2#lh$>CF$Fuy7aPw$o*WS>Gx%@q&zE+i|7qzW6{FztfwHfq>q4F7_O!sP?s
zhvZnp&`y!QWyTYS@5hnKGzG{d;KA`%H|HyESfpe!&yeO+cpfxy#*+5pNNQvGTygM{
z$hXO(a9nf60}C!r=0I_WXG4j++IP;>y{d@FA4e4BzN>-0lYl|JB3dXNHv1*2X2}M^
z5rDJZOW6sRMMTY~NEAY;fVkWpk1q2wkW#A+DPj4{<L8RZZVZ30mkbfdg4okhM88=c
zy~Fr+wG%Y%Xkhj56fJ|(;>WAYzR97XQ2V;4yI>}}UOD_iQ|CDvnmu*A6?3shBpgue
z<{&<QOY?B}Ex}_q@$T29Pm)w%!=`m?ne6mam!1Vfib3asz)=D^ET5$WOjBPfHmsgT
z3kvU>GdDY|krgVQ3QsKrujU+q$8K1St>2>_sci=$rOM(qCBNIzMeJO4KMruUyH7&{
zKZB<>`O;`419tKhol?fvl->U^8C|wFkG`12vOEKEZXPo51wl75fA{wBD{GYp{v$DY
zc&w>1L0cJpt3Xntb(B^53NTKH+ZUvuin&>Hf$QmNsv!|Mvj+Oy0`VS?OsQ{~ySLz%
zJhOpT#_PIbZb21Do%8@jtAj?X3x87nF(j2#mBRAG&1T%a+FjWBtBRx!?4WqtL=`rL
zz&=Uc9Qt7LI49lzq=&+TLjj9tU|DHINofu2Y%42>ic_0sq%nY8ErO^O;NT^5jYFO`
z1lA6`x_~(1L^cZS4OY$hTGRwj;P%xG?(w(OK;=4LcJkbTp713F%!MgG2p(?vo(lSK
zKe|~ozhbIgk)o3P&ZLPWf7~l`A6!nFFX7x;)xb3GaLKwRzhS!9<AN`VwzPaBd?O~H
z+5UOu85J$JG0)y3<+iS}fotRD&r@rLZ#Zz8;7?1W(h}`9D}Guh?#9Yt4_qtLHAQJG
zE+R1l?V~}_wa*lqO-03LqYdbURFEJ8(9&I*E+th1B95)9nbMYYQAH86drN$!J=lbR
z@%jlkbA?Jd&^^{5yN(i%W|Wm*xX|7Z;{_|ACVd3o-)=FpO@-QI?;Ia*vGNqU4`9(6
z*RqX`Sz8HKuoBFaJ#0kIBs9Kd+Aa46ks9Erds9D`z`@E(R~D4aF#a}-{*8b7WPQ@4
znCjId!?--n%|>9F3LE6fypUn#R-d#V2C1(yL#_%dwEhMnpK<?Vf#-N`uVvG%=h)ap
zo{nt4LbM2}(&MokFH#F$(olxA^o+JXU3fCoNim%Z^l-DSer3>U`}-aBPyTrk%j=eg
z#s%fphw(@y70QwgRM}6wv04mHE7Xop&Y#C4Dg#0gd*s4X)O@2M^$XbL;`)8KAE3+B
zNS5!^HZBd|ig$mdJfR`C6^dWx=d<^>Y;E-$x0pFdDLXOF4mb(XkMzwm2E=NB(G1nB
zAj_4^U3fI4obv(}x_1tX)lVEp{^9){MZiCN4dkL8@j@;wQl$iuVm+V951F4Z_Oc*;
zEh#wJ!1%ag$bk9Jp-)N~&Ksx3MkQfuYEWn!wT#FLL3Zl>$&GM|mrx$zw;4T%7Jd4^
zm5pS97*o0yRq9|u^b1MoWnHF{9eGL@nsb#I@I`6wIl;y2+1?T$(;=3gO~V68h`%v}
zXV@kvEC6g^$*S=4Xgh<Oy!p&JfgP{ci@HqTdxv9CMg~K~Q`z}wJ%-8*gk)oLlb5{f
z%9p*kXvWLy?+VAz-|X7Kj(dhRSH|ac?$n%Q{P9N{^0@mN6yRa(sf!rt(P4n{U!`SE
zQy$fgmpEA~vUp$x!Z3e-;Jk^Ka0c-|f9}y8-Q;HNF*&ZXThg6jbz>aKNYf$7mRNr)
zdUCi0=teKWuh!!b{9vxwF$sS;Z4Y9L;-^YJoHGyxu}oQ8CYf~P_yw`+MkCjDBehk^
zBbsWeb1K-UyZX#kqSIG*0UuADw~CpJtTb2Uuat$UYp09pC}DYjS{EoyS|WF!8f`3$
zOG3Kx8~7FwXo3ymNS>gt=U<eU^Uo72SiU*)A&|E;wM$GsEX_RoMya-2?@&6^%048}
zP~jePg`|10_;-{s;JZko1}(zNWgJr!DM(vGC=cpLRfmz&U}*8MYbTwPtfv7aTE6e{
z@a*k*m)-6;T(TF)pj(H~Lh9&YQ-wOi@?%x^+zSax;7GS275qYZPiYpus)A?{R~!>s
zgodpzz7Wzi6tAN=t<lfhH=^ksZSS6tGC-xeTtN}H0(3kXRfOaCIldwPYXR>zSqfYW
z4+KQQ_@AZsu7+;b_U8X{`F^GIZyz^;{5@^x9R8PBNVL=-S%IGWj0z2{GD#d>dd>L&
z0RkkR#0Kf_K0@-6+D}i{3kaUje7VYtsAVwr1i<*EqsOlg6ru;=EQwfG0PXBbFR@3n
zzIS8oUkQ(zHBF68Z!M6emslPA6*3ZxmtisuvrYL|TViCie=O5QXLGI;Q7F<qX@u>B
zjo3VYHW&()LNy^WCM2H1ty_TjMq3(V4s<Mwh`b__^q88mnXM$$Kl)51k&TjBm#&#@
z+*IaTl{sS<M<N8Etgspv8OQ~4e*`Kr0Iwp`5c6Q{#0@=(WoZs<B|R>lw4F*~-fx&F
zMYN+ANiK*7cYSm70k_=my=*yrCBzK>=<@E`I2!nC_KZ*Qlx~W;11~J4`QmKsbc-CW
z+&ec7n!LV4N@cm=XBKaKKId60>9~!{0{;9B^8F|Ch*h2$lz(RQ6egX$1Iqb)?)F3{
z{X&{ZGWe`C+_m^9`Q>Cf8(P4x?W2l1!8>@u@WV(NGY%2~k@H}oSP8&-FBg^BF7Z0{
zA^mFM!jkQkcLH$Aj#$Y!NjZ}~;hsuygSenQ>Qu#usnMzFRt?~e5mZsW045GEnV2x*
zf@e(F0TVM+7}=-FVP!z*`+DB(KXZfNzZC_sQ_g}$SrB=g>jXX9hH$`<E8k<nQj9{i
zq@EHdY}vKqR4S&Q?|#Sjs{#u$=Dc_0+wXKZOj-f--0|IG26IN-ms7+Etd$DZ5VNz&
zfoN@xl^WD_QbKlJ6^*&c<%Z~MQDG)YnJ&Vek=u>l;|1f9^rw;H{hExx8t0}mCO|KZ
zkhxDIspv~IpcC+xM2{Bd(v3tirR**viNzeN51`yZJ*hB~F>rF>$TNU{e(xfTM&$l>
z1rp(-qh<&`J_5Pq=O_H9Bg+;3m9)cSMTP|%a))K)@%+o3lP9c8-`y2MPwx%A=ueXm
z8($yKKesJsrtH@{w^w~ce0_X{CC1I&*_(J_zJC1U!uhlhMz^Zq2ryXY``f{jVhYZg
zJ(GaoQnTF5junp5wy^xe^;Xw(iT3TS9asl+OVKrDXatG=Y$E*}g&vKv^#P})LUWmE
zZJwKFr+~A9O7A35-1z3$#4rgBL9V1B>+pDgcKy6ch9^3>^Y)araFmf)N^)chxx`2^
zdT=`h8PKM79Od8Ua+wUEBR2U!RAfsk!acIYQ@=rKa{WBqNRtD7Sg7Ke#@ZD>dSN52
zBi9gD^loBS4LTAuoOFd0oI_GSC%P`$NY%r1bua?iZ&DL_CrS?0MXsR(bFyQFAy+BS
zK&$0PX`R4xtvjLBSh$3)O&xhM;IHs%YG*p2jym-1+$*>Q`sa1Rx##sjO1bpeSn()2
zM-LQPOKUvnaow2Y_T^5S`klZH0L`k&gIpR-&Dm*>X;|X@Mqhd&&+HmBAIEfrg5d)?
z+T<mhN!^t01G2b2^G<5pW@E5gv%&;Ol^+8tQR3(`h|8LMcG)1xTRg_uq*o&J#dVWP
ze2})vt*z~s7|Z?)8Y^|hF7E8;q^%j+Mx!cNF^Z*#F*USiP^LLnq%;{xpGuSI(LD@Y
zCt4i1^|06mHTqrdEqR<Uiq&}f9DQxvh$?YwOI=i;SXmG;3nCt^-&!;zd&&DX0$D80
zRPx3B`~H68gO?fl?isV1tVm5T8@@jAoq@U-ipI8)65}9sd9Nzx6!@Nj<WWyBj2inR
zMo}OQP2o)}OU8#8;`yv;1!<J}yq*vwRaVJ9$Fuv_`M^{jaEd7B(dA0d)|X>Z!_V7|
zq)T^|U!sFE@{*PMBMze4+R$Ie;Ip;U&_@h37nu+-g}Pul!P`575pVZ@!$d#CV>o&Q
zT$l?cxHeX%;J_DlW8w~W$aL^7bt8#2IWg=i+zaafO@7g(qnc#wbGmJ7vKR;+v?8rm
zNf2TVlxRz7*hy<APy^8A5JIJ1)ktt;6S-wA><P!QDNwSwhQdTMGF~p}@e>?FRE}tJ
zV|Zy1D6V`Ke(udzt6ip&4w8ejJ}at2tZ%R#fU<r4*)W+}o?av=oio3DAPy+V?;&C+
zGQA^}Q(6CN316H15AO3Z_pIabGs-=YgXc@%g-)-3UZBcCDB;-7NrG5X1^BzY?72HE
z31D2@pm%Nq!Tf|layufxWRJ8q)D;Kd9M)f|F31z|tZ_Q?x)2dQlTq`xIp+#}$R+6A
zuNEF|54<UE=cLHXI`xQ-RM1NY{)FeNW3}}cXNiWujqH7h+>-+wDsAR$p;pIh#|Ypj
z8`QyV52z{+Hen;&Ljlz~@=Y6cfj0?t{O%(^ZH~e<%34_(Mc;ur4}(G@b>cyR6Y*ez
zhG4sNsQA4Ub>%<0j2?DVOFD07Q5d1qwb1I6e<(>RpUa^&$U7-bjbWEZ-u+y%MyjJM
z$oJ@bCfUNPxpeC2oz*tBn+m8^6!maD^yN!CLF}jzIHYvL;~8WWVKU_xL>QNHm#QXm
zQVTC&m7J7?o}A$mBn`$%02U6u3IFJmQevTSK4ydmD6VXm>AoRp<eImFSaeu-m;1(b
zaneSRU?eos2YSKG+JT%)!7{FKd~quW8a#ly#!7%i<H$)S9;MQnpe;Ik-g}Jt>f(wE
zus$f}2-0uzH!PTIhbu7o1I^Tt3iSxJ6wO`)jN-Svi&1}Bh%i(6MU%G4292+bSgP1g
zYRFby7)P4-#`FdC+KOwjqRMv9MrGiM`bY!Q)hSyj-o)DibC`g)ZZznw8D!Pg84HXY
zj9Rd3qRhrLlD1gN6Nl>dd@Nx1!WFh>xK3rI_E#e}bb=un8}IzJLzxxh^x#_Z7@XT>
zXeD4NiQl}$m`8TyZ*KVa^4Qw2%BDamXhNDId@L<snpsOL>ZJ~8Uo^g)gQ(e@N0_H5
zHM=9c0taAeM0M6Yy};G2W+NOAQl2&Q7r902{N-=8J>2QO^avaDdFCjq+2imPu>mQ3
zPxr)x`b>Ywl=FY<Kj&^$JMf3udp;(O+n<B@uYP!V!_k1Y&&|`G;n?@YXc26;)A$?U
zK%+VLpr?LF){>@f@bfgaMxQq(8rBnWRtHVf!Fy;re&ARZ*=&@?3)}%*<=boTa6q-y
zV=SxRgrkd|DVeA(VDoc+DNp~(+e$Js4X`l0ir&{Ot4f=e&)mUm`0`w0uFqA1JxE%K
zD>S%CJ!Z+tQ#+w(X@$30q2e1f0JY;Do4Ap-Ir%s_gF~da#H2YURv5X`E2l`iK@Og<
z9v1qh|2s0k#1(*>t9DSBcEUE4A<t0=PeENp3g0~|<vhZr?uc26qrAo1YBtk6S^qr1
zhzlRD%nxMr4tK<zwr78Oq>!HPFjt$Uyqf+&MI*+BtuwLp=OvFuxnXRJHO*rQ!AD`v
z{(i!n9;r*u5sX_4v?=P(ihYJxx5b1Cpl);6wLzM?#(c^`d+fx4eY;_=rm&?pA`KLu
zUD59u*rQ2x>U5lUaMLsQcZgb+D$~ViiF;&@2u2{yOwr4Mcgjf}SqnbzUQf$C?R}+J
zJ-{sw@ht+6r72H#A-DVVX67~NbH<+y=!Tlf_k$)pGPVd)+g6d1f36<$LbSbVh)|LH
ztkD1XO@qq;#U(CKJ2=I%JoVKDfMOG6S%N;J^Y&*km!3$9A?w1XOv(39C7rs<X$>U<
z&$gHkByKkeK{A;lv`CQz@q5<D%9QS(O5)=7d*pd2)wqRv9MojD<-RP0y-W_oZwWj*
z`vVo7D2y-GjPrhr*YYrb{ADBA0NOC*G;Z*Q%GB^&tNuX>AJv3(vt^IN{^EpY_aBa0
zSG{*f^+|&^zs|#u#;w{N;j|EuwsLMJeDGO4W*rk|{m*a>&n&;qk({5wXG?h<GWKjV
z#%lg@Z%duA-WBjqhP)A}UF!SK#&!MHli%_NXCL*C91&mZ(gGyvxb~0L%eU3b`NdD+
zRyB8@4(N*{sYI^@sYcJmnGp<k&A4(GCuaq(i=LlS>DrxqJ?u}lW>?5Ig1?{niAACe
z0k7Dy%i)Wr;a)SvS3K4};Wco-KYOepFGiqFpHH_UD&O;5mR-70e)4!e`RAxWzp6W0
zGfe*W7!8ump1z~LJ+n_@364yYaS3QF@p!%{EN!ED(f#ER=Nj}M<!bU%v*5wSPRAqs
z9IU<b-)z|0^+aMlA<pnUD^}p}%#Ug8Q7s|gw(NbEC5kLGUQgJ`4h}2mzk0w*hMzAb
zkX5V`0mKK*EVBKU;&;2{w11Cnd3RHG_g{OK3fd?+$&IHry`*1&=Fvndo|+CG$v$<N
z2s(DG9Ic(tZ;FBN)K1C;)`Tqo@E;FeB@{-yqi(i2QrOHC34-$DPQ<ns9Gnn=b0Lz6
z{(?u!5Eph$;%^x!WFBCAJcP)2<U0kX8XaKgL-qQeB5W^&oveX6+GgHN@dD74<6H)%
zA&q!zCVIP3mT(43$uUPa!I32Usrll5VnOP}?IT@PWUec505u#Y!+A=vrLk<W9I@!w
zeO4Zww-shPYI6;%s%l2G?lE`1JY}Fg?WD73*9sW8r!^Z`Emm|^p7-~*Aj6Iv%(Zu1
z%$s-m@X{itI#)bRcy`qfw(Xr--b`HA8bZr%4`F_~#+8RIp^me<kD*mDrfZVlbzAT*
z1a9qP{c?pFs;;B71yQtA_~`#zN2h@iu&7UHk-x0Dc#8GkHJL=;B*yLka9_Uv5(J3;
zgC^6JnTdt%|Bx79pVINCN(u<bwRitG*Vhak&S2JV%A|SJ0fHljjfy7c*Vkl@7fo%=
zbmh)YfU=uahhPTM=PM>HaMJg|>6_u5Eb)X&^N0$NQ!0g$XHUF&Uhg23f<=0yb{En0
z=B-}du*S=<_82UT+~?)18+oS_Dh;2y^_~7as2>lV^BCIs#rDR{+;4$6c5*#3O8X6O
z9(l_<20Tm8?jkK6`O*-&eA@z?7i%_%w<=TzmfW&_GPr`e%?!GYsR?#s;yd3Xs(1-p
z4Uyf@gE@>z&M{3{P+%ph+fW#%UYEAiNpHr!`xx`S>yC6QX@e!O6HjZ0MDGb;Tgq_K
z1>do9cP^-4XM}vn@WG<>;JURpQ#5s5_h&Z2o%eD7U4{;Csx?8&F4&~l8Pn$|kpU%I
zwLi2kdlo*v+}!Hv{yM1ZkHz&{ONcJ2;%#<dMfc$^pC;K(N>yC4iCBW=0zP(ur$W(%
zFs~XUIlon97%%xbw_isfor>?;D2jjh;Ai6xYS;lu8z(Rb-q|uDY+jXv$$luou+wu6
zYTq&Iwo_A&!Rng2z@xJ}T$X>5qU_TZHOpd2N%~H%(T!ZsHNqdSw5Acx{$$zeTj(RZ
z<6&PtuEULS#FYDyW5!ep`^>tJY&1qOR0RGOF6_X(j!a78E~pS(h+%)y_l$JcQUy-M
z`Eo%Fz0tsmcI5C1RSXy7(`~J|T7*y{)m3Aj4U6EjTby7SZ5fw5JvIxZ!U@xT-A$m4
zf=4$+10icKnxd%t)y`r#x4ATs%)Fn1u7ETw+{e9f{>10H9D*M~Qk==;=i!jQMOt^4
zs-s=e^rhQLe{KNhHe<7&HyzE-r}d@okY5+lS~`szK`7U(i*cS5lL*0DBXgNN=?|-r
z>99Ukrhd&J^|1*p46#ZIVsO{LJ41Nh7v`q<@zeVK-&D$O*JrZhBL8><5x_wIDQL;n
z$=uxRf1Zgf^4n@|NHy)eq4OWonesx|g+RllaQ|IZxQ!pc+ZdB$$SEO}WtksI?@or>
zn?CN_sq&ZFvX|xva>5n}TwGGu*Z+5_{2L6{NYLjIFkXs04@OG;UFJ9K7tbZlE_uuv
zoIdA%E7lF}?!=>~EVFooFs+l;uEoM36O)Kix(w?6-3Aqrs=m>VC*<bPe*c4-tVP0V
zN~AJ4Xm8-$)h#(%VI+Ng%zqb>Nk<BK2B^bKs^oNyd{}b9V7~ih0{$>O$?7*j>}hbR
zvY!h_X_6%XP0<LQCjYy)T~g&Xn4P-OzkaI+&s|&_jZU=C!dDs3C&l~{JdhBDRf3N*
z9&?WI<Kv%F*%$bcINHKj*sFOa@!8w+dDBZE<orWd_XGX@8QNbhjm@SN0-N5?Wl!4}
zX-l$^HKD5XM7J=)zW~nnX67#`%Vm7$P{LOH?2tN=i6aS$oVDT<7Y9A&BMSJ!>olA&
z{Ki$kVrP#&g_ad>+cX@HZ3=YS*69#=$7yRs$lO1SrZ01FIOB$|y2(37ts^u_ATnfh
zC+4ILn5dPKO9<E_FX~8>R`}ffqiG&QbRI3VH54q!d|N)e*D+bU`yoc>)ik#`0)YfQ
z3O%0LWYm7k&a4Aa@zXC?jxI{iBFw+DP&d~u*TaWjF334lT>6)#i16VSaIXr09Ppk#
z5#5OOt>@h))^#6n#{8Q|&*C3EGWNRgo|w9%<?0obS*JyoCMYR&o{MTFYBSEj<m5Tv
zmZ$ND+O>I)(RyV&-+}y(938d?3Lov$H%^<i%~<_1vkg7EVt!BEs-cL5Ui587lUjUW
zSmC%eBuY3}ptcx0Atqtf*rp&0H^h*r;POLC3W6@Sb`VMCb6lg>k>TI0SZQqr$U(G$
zgbcnV&XyNx2OHaNF(^o{BZNH@A>px)7kMWe1Na9d1G61jues<ps>MYUL33yEW+uhG
zSEFF8K7aSB!8U4R9Qt-_&6QgxJ6J&ts}l{1oaU^}h-a=wc)C3hid!)rm~ii$@C{gT
z>$R!)JRNk_Bv3mn;<X|$^WK%|t6OJvxm>$4=LDyHhrXALW@kv8PQshTktU<1;Wn~Z
zU~1V}aQ?8Gqv=e!du5Hot(-NjoLQ_Bcs;XwaGrbcYG)#QeV9x(dun^7XghH}k+fm8
zZQ;Z<|CK?jPnxA_E-?nYX9@jzd3LTVKH7NGcx%<>9dkulqhI5uU(=DLeeArVbBR~y
zvN;C!lz|?8SpHjg=fL!dUs)!g^4v(sC}DoT^J6jCpXLD(poBQNM=c&KI+Z27m<e7(
zn%GGFW|f7{;VG)Q##;e^E*r+nS`zrUby)l;aA3)}_f)A`!HGzFpS$qk4$^P=W@GRv
z(dc{mzAyIWrjUfxg>G015X8dCAY>4;N}QgNQVLEarMF2;Of3`^A$CmF5)PN*bK8Ik
zUEHDSZsr2^m6R&Uav^?Cz4dHwMIW}f)IQ|M959Uh!ykDn5?S;w@6Z}#c+h)vyp$yJ
z<DcD{7wEU>(JMi)64I0X?pmoz)vv~ikwwOo`E)BJ5k;sAtj&jNvit89=38Fl<9=LP
z#B^tn-@n2*1JlUQnU>RUjagxX!?3r-Ado&|IA(GDI_+?O@N$Xmp*S5yD5GNoAX8MK
zKP9U<Io1yZrH`f`O@^ZTSWf2?x^WwfO*$;3Xi|>Y>bsL5nU0b2AT$^ZIPi|35@yF1
z_&7tK_82PzQ<!_XURE|O1PU;`f)FGDiJc~{fN6-xT>&ISxyzSpN)=~1p<WA!mp3)Y
z4hdwt;z717v3PWzMq>=%j_Y>rSwaisnp|xx+K7`<-PDu>O^Gf~_icO@KgueBKC4#k
zq@2_qN5e(jzYt=}2iFCrDjki-lN`Ne;TQ!DN8oDnnf(^L+wfdAp;(dnCgE{n;}uP+
z6S0l=R;{p+M`HTkr3i#lmDH-iD{yX=AZd;cpen<2-qi+jFgAfdI=U6wGpX{*r4-0g
zFob021S}RYnZSe+^|hz4285yUhBzoZ-8jAMjc|V}c5H`90PDNDh_NQI>hOPnke!__
z?G{yno#t2ZfX&`-F=ibImIp<(*W1IMZx@!li~<!03^L30_3*DwhXy%JE&cc%9C5J)
z708>y2J`|M+S-w8+%H16AHR){fB#up`&~Qz(h826PM7v<5!dL`F;&Sv13ziXAWX^>
z<G{v36v{$jgn!G9<4<i2Ew63Fg`#d9rviS4wNU10>`*&NonAd3D@wE9kqcq!(U2=t
z$PwN@;Uy_83#UpFgCrBj9V&Pnr)naMS)h^B86f(3l<N$vdM1B){<=B=LgK7Nt|MHM
z4d%@)Xw!wtc<d6GC6MA5xt-pe8Rg)iDqngIdASCYE+7`Ihl3T4gOsqId=<k8EKToW
zG#OMSIW|veEphyGnEyrrwaWwjCMa4u5j=I(v9(&aPZ;yVZx)dK3h9bO?!|B*dzkJ1
zi92ndiFTR-o`#M6dQP%i*MLSi2YbNkuNdR<DPl1L2QDxV4%PeMiHP&@R4VifJ;w8M
zI?Y+0avhwKtpD+;l(;WgGX+^pMS4VLLS?a3ZphOCQx5`YSCL8oU?K0KaWQfl@0Bf!
z`wTtmVFh<3c9->aW4ztSgOv74=U0ZGz*1^%d>~bA>S?>bT9{%fjlYOGv_FN$7<1)q
z#XE99DIHpu?f|yfUNA56pdsh7#2pQ?F3J2_tkgLXH$2V)rJ7f)LR8J7t7g@bAT9Hy
z&2w6#JSwPmgF{y?^SsCo$Lwsq@aH6sRz8j<=J7FR1Ou~?4|iq>Y8Dr9hx4xpif8A&
zu^*A{%s_dhzX?M|&V98`(ym`UFSXydBJ!44BUYQ%xZ%lvBOUmTwyd7MQ&F*ntXJ_9
z1oho3hjipEq|o~T$-lx++rYx3#v4F)sPAt27tt})*WY6TFt%QgYXH0&^5<!5lJfW1
zKlJEfMoybJ@kP<8U08^9zvnC~09lJDe)kmYMNW4#DMj~1ysVf>pucn&enAB&_w;hJ
z4s|%6yg|k#zq?;*C7m*p1LX~}@O;~}_*y?ls3cjFi`;xNV|hTiRk$ya&P_UFyp$z`
z7(kBpgXKh~Hjc31XfX|Dldsn?XuR(OCT1-~7_tkw-vE-spF`=!xor%*Ukt0xP`zLi
z!pmim-F_2j>c<Gu=83L>f`L%rSF=Hd&X<FPU2bnhJN3y!>(H+Z%NsPt=IqZ(3UiI@
zGW+x)Qd4tiAZfX%Cb&0w?TD^2oNyrxWJ&!6&D(+E@C)+*SU4dd!JbEX9zjSL-_pl~
zH55z9-=)fD{!jbWObtZ0RF$)iW2kcYLd}n;m=fB={cIYv1v2Iz=xDj7jF!7x#bGC^
z*c#8MVzW?>(|UBVUI_e7gSuE+NJWuon3e~)_-Dz#H~^?B5F5%__`JlsWj3Jff#GB|
z&vcQwu1>#LA%lVw=-1wVbNd}c%|dGLQFP1x;cA!Zs4%S|(^}$I{=~=MVO!5G+=TB0
zOo)!N$&1n;(P5>xIpsCf91~O^U96GwGocEf?%LStwfYDd8T$|;($d;(qv+=kvMKYB
zw+vo8Mot+T^fA!l1Y7^jW|WETRqKgG`F$oD(gtF3s4fgdB)(MKVRzn1PTMP5%88%3
z)gak3P-ff_WC?9MWZ)4YYGu=AVD1>=c?z*Q;oTOXE>HWct6Aa@@h>rQn1DzBoqAlB
zap#4h>+)@1G+<M<kukjcHTLJo+w@riwesHw68EPUT4LiQ#Gnh7$MlBuPoyIlY-hn9
z4}9e}O3h#kY@Cp!|MnMlHvsZ;^fm00lw<|(jMX?D>0eCM*Tl}Z20h@%YPui5MRV=)
zDn7X8k%ui&6qU)P@;3&9^&$UCH!9urRjo@gN$W6s^yVb;?#yV1&hdQU5)5eCJlcYn
zjkKXw8c)~kd}rjJ;gY?x62uNm-z0EcQARdMu<I|zIQ5nH=vZ;E7Gb~Yx@-gT>#mdY
zw<x6uzC%OoUWoc&o?V4ZTKgHxk6yH;vR}P{#gJP@ylQZa2$+}jU-H?XnfWNE3#hH>
z<`@;3ja!o0p}4-<oT(Xs`}OPtO5C{9ZmW!CvXmn?7@2f{LWPcQq`_(<;4aKmVj|J+
zey^P9^j@x;EZNS`uh2ghB(d{bd6au(+hHOk@UvUUAcAR(a_0t_1GHf8*zS0es&P{*
z2LVBW?`wZ&SpvaUd<m#_N-RFdxc?)JS-X(45DiAx+*Dg?whvf#RYTI-rWX#bmp+o@
z_U{WIw1K<j=3fix#HFH}N-_ebB-ZB&SVyC1BgfQKC9;QB(<F*OQ4kGcBOeU{8?bYM
z;Z7yW6i^_RhaQ}-2XP@2U1x!u*U6a^ur)<V6OAXAYFpr!5~jpKsEd5aUuHvM@OD+w
z2ZcvPUc#j%B949!g5dGZka|)A-4o%2WM@aBz}HRvdQU>&v4%=yfSq)3nRSL3coruV
z?qo|O0%dozCK5(SE(;P+Yl;f5GWy)bECfYgtfACcPAp3*eZZDVm$>oMOqMv1f+U}}
z>Yfv-WW#A<+b(F6IH7)^B(abtLE-Hem*9zuv1YP_hKBweZkBO#Lr3uHR3THM3tBLU
zaLe4qb4eXy$C?5w8Dq{qYk^5Ypa(Ely}>0tnGCTBOWzBLbg_gUg@wA17vyyW56za6
zCD(im8r+rPN(9>97OmFs?NN=b)QV6|!!&p~N0jKu-7Bd?23>H&4S5vnr<=*<rlQ%2
zb@7>JzEkU?^3|3j?UfJ_16=KG@Hy~Oc?y}!5C}18@U3FV&r*@w=F?RuE9g5E)-|TX
zDTs|*aYcD(P%<?Px?5$8*x94yqfAt34V%5Ai;Vp>i=rArsYKjIv-8w{Aqg+mCW>qE
z0Py}U6NhcoVXd20CGz=ZAfc@t%dM)>>o-fr5F2;uSi>1ZONSndX7fm4gVE{hp$q65
z&CgOWhD>l+MEUW&+LWd!$U_=4WX|;S{8r}WJ5~jp!y#v_gAGJ@0KSapop{bkQE_FB
zUP(Y3JHR3tWgM-EDo#KnGV3&aD}+*~sgXJyX$}jY!&7)?i89kn5=G(fk54oI+RNvK
z90Mbs#cP;h9gi}}nR6|gVac%IowLA^V<WI*lOXw~1Ko*3n4F*x^^OW%8iD{Y!-y|U
z#*ur?SFK6X95&kbjUD6}1*}gy2lpXVO+*<jgqMRfemVX6T@4kJ6W3WsxcR6m$YV6F
z9D@tl@)~FGOD-m%)dUF>qrhr-inC>`b9st&+d}{11lzG?dv-#*+P${IvU{y_d5Lwd
zZh1uzcgo@`G;Be<nm)>}=_#EKwk%ORuR70`?F++VHbnx4-`Z*xg43kV5PzLdrbwk_
zxUg^!3}yxg4J}V-Pdm&Xcny~7+#n<v0)>k2V%8Mer$$s57aA>}o$8b<Xs{V3Pf9PZ
z)`>l-okw@ihQ!(Z&)|~S{<&RPbrfJJ3!u(p$0|2C)eO}(O0-Gh>l8CNK;Hz>Hj1@L
zqU#hR_wNGMHj1=K!u#)~pS}sCZ4_#g1oz)d|5P&&%%==~I1uYgqY24-Z@(LV+y?>Q
zvue{sshFogq9Js5s`+ii1asJixt}7Nxc+;);9vs?A?+T`@-)JR_?_+5MGp1H7?~7p
z8g~TQjb$H+S2<-(=_9{`?n}mls?X-NOYj>v<4CJ+c5NK!s~iO^CBTnB_;mO>*P{Pl
z_1@Kfhg#`u;)WQN*4FZKI+bOTq`V%0%Io?LN7|y244lRyaAf}+b`IkD(v~{~xUCI{
z({tNBuwdhO-<o(iaP3v+Slb<30X@41U*Ki<WDe6=VN<?+%bs{~eM=?o@u#m>-K`o?
zw4RaeS4c};O<!+X{UVZ5OQLU7iIlq4p{aMcF1iRkSHUoxUagHGr>RVQIogO$6Eu0b
zaJ8Kfac?E8t$$viot$U0;4c^_Xc~L%K=<&9)8kXok5H_u6;;=cm?^Jr-Doe+6`ry^
zG>HpdKCQ^AED&>13bH1XMU{8I<4M|I-?|jkQ94HkFN@D{H3Ls+%!zE)%3r<Z38|QT
z`o+kRTTgB#xuMn6)Due5fIrpkUoPPm>*=+bLuzz`);WCKcbz!!fa7zRz0yBY0*BwF
zY<H$bI<puQ0x!pZ(lXo(3!B+~+|Boo&0<nJTc{AU3e=f(*fd?p*L4^eWjj4VN)Ac3
zEQ4^4CWTPwo$UKLmV1(B*EH&u=kkd4Mxhoho~t&I;xeciUkF<qbi>{I*ezl?;kYui
zt)9{NfECqD!0$}ern=9!EN~L)L^mRv4of`$ft-}*<_4D#xA!(N%fr?yb}pSCi)t>Y
zQ-WJvk%w<VX%Y-mhQC}%5~mb4P#=*1dG?vR&drB=vSmP6k#o=phBz7tU)J8-g0xB%
zN>GD0Ov~5)qM|mEQ5>^W{!&hcmU=YhA%s;uWEDYOC}Zu;c;?XwZ*dqG&(@2k9i8^^
zG`QHMMmDRiTpW0I1M%T{OXYlF8|n4XuN^S^ou|*Q<cQ~Jj!2EA0IxE4af50dyN50N
zXj+askXWzzCMwE@XI4N%&qemG;zobfOQq3vx)@!q>88OX3jJ2QTNtg2h@+f?x8<iS
zVxcROFF%S+Nz`XJDsCBLn4I{QpKFQg68`sHfViGl^}D-~p@&ece$^|Jr?gh%Vku~A
zWhu$Hf96DcIj{dG=iF44@KNpEi-oe~Iyj`SLV&|VQ?V?8@=o*OCgF8%eYAr>vNBgM
z>j9~3cFJq`T<gp)s!c6dVj7i7UnG7~_pj8OvICS6q^rg_ti#dk-26=Ym{jF&Dg1iL
zs%VD`UuZG%0Fzx1K7vwta%JKOFGE^P%PUr~!%n+2*mNe{!Ll?PTGfT_4!W!8Z+9%>
zUYSH2&xofAsRg&{A=8bU_nj^Oa=cQ3Id?cc+PU8rjf{;=5cD&>3#w_D_#VYB4yYb=
zo(mhM`M%h<*)B1j*Y2kkyEYCt5o^x9o;s~r?oop^=n{=2BagRVYklmPa!M5vo&z+P
zva|f$^`~3TWB#}v%}sxVDPI^0Ggzl+H9=-`Zf~tNb(>N&Fjh{D-F*!6+nE%J$0k&8
zLA5nk6g1@8MOriOrr6*-N_8Te-PSGw*K;5U!uL#HcOxNDLtldUcdve7!xlYGa?MY2
z`R00W5`4tTr&OLzr58Og2IvYJ3gX>&`Qh;a2%*htvyu88^yv#i<KM{X-!;rya<)jH
zMC|F<8-FlitLs~tD5fi#8x09fOl$5kjLgNQ{ia0c^;gepxpVYXo?YNl4UVZD9@NfP
zo2Dvzld<i4t2b9gt|DHAh^JKIaLr37Vw2eo$e&T)d!}KZe8Dp&zj~%<8mlVUt4!K5
zWFDL?S{th`KK1qVea=IDc>MRtE*$FFGswPg6SVz>nYy&JDn(^kDwUy9?a*+e#}yAA
zL&-SZd@Ie&VfCd!pb4tQ_S5_Lq680rWRJjo0E01{KhMh*I6JBv292Jn<khc#?QADF
z#z`(d&gd%z``-=X4*;%|X_T*X3B?VndgDuxh@ITezEk=frYl;FrkZ+Hb;~(5%Q<E^
z-R)WWtwu+k9`pkfj8>MO&9qk7E3HF>WiUM*Jx*xtIb25i>*NE@X%DS7cX9$Fai}Y?
z!!9fjbkU=X^@<WA$4Ud$Hw$Wrk3~+FP1*Se`|mvubq)>i<7zf>**@eZ<dsV6kAjpn
zPU8UpLABi<#UNY)1UmyUe{x#i)QP5$f$Ii35)3sI^?D=fH|cRcmPu~#78jiHLnc|P
zeVHhS$5{2fuW@e?q8-<}CM0wt5NA-PvM^BKsF2m%qyB!O*hfN@-%RJPP(6St(|}Cc
z6LpByfae6-ZFj2&Ro*a{JQ6>MeL&Xd8GV}jnZTHu5UnwoW;#hma^gh18zejHty_(c
zU9OK2KgwGk{ypjyw$LJTHnFi>vq`#m;Hd4sb6p4VuHZ6hOrU|X)Q@johz{B*a}k)_
zhQwXEat&~wT+H$pPW|@7sF+Ossz|)7G-iFzjPJQ1qI4~Y@qR&gP1lu=Bu82m&8mBQ
z=VoQ#Y9wMgc}D}?RO(zF=8vJT;`%0s%jL@#db8XZ1-T4{^w{%wlxkCa>-Kt+Oma%b
zNxK#jaJE(wQ4EkdulCOi=a#Dx1DsHFY1&jV3M2UB+REeOquUEayFxY44Y)O+!q@rr
z`}|Po;+L%~rNRwJHJiJShrh>@jw7s;oF$T0le{}Hf$-yqkHhdXTEc*yZonMYoK@*Q
z+;62IAv?%AM>WQ|isMCRg)ALWFC7`4(lGX1kU%slu2(_=;H5-*Mr_@mN+QFQ$uY8Q
zvn2fxULJG`o^LdG*z;b&2&~a!l9&nJSRWDvUxu{Zxua#O*WxjHuXm(tZqj~5H3#vm
z!MlpTTR*%Vzcd5L1UXXc{Toe(hERmLK6_IM5&j=z=M<b-)UE5-wr$(CZQJITq+{E*
zZCf2X>DX4s>Ud|LyZ=<}ea_XIt7_G{9&@~7JWpD>vlG1xSRe{zvlMo`)wLvlKhhc6
zwh<RtrJkn@k{`>X6!NY|`0dAYHpPMA1`ijX0!}Z1=;Pmzi#_5|raxm=OSF9G));vp
zU7=$I`T)0;99+G4EFidubA6@7PM*%XsU#ZkOsK=^b6JHvj=$vVO-VGQHoT+;*T;rZ
z`o-@MxbQhv8f$Fa%7(*SQ;;T9Pq9cKZYtup6eQFo$wO|v!Xo!|4f6<<otwd==TKz$
z5jEXLT+w?hezT$}WLu=hq*gTewHkkpFSCfv*LFe9bdf+fB%8f~7qE{vtl%}MkZ|49
zCa}KvxOw~g{zwlFK7iA!Z{XlgLD*Ux(}w$>b&IoVC{FBCWAyn)tnYSa(5un7jR@^Y
zZ>G!_9_9tW#5Y%i0ACdcnbiJXw2FFb*9pJV6I;0QVu~7y2B1s`W2a{l7JC1oBU0ah
zQ_VNX(lb*KJ|zQStVMHCuLh47(MNO>H$GHU`!t4iJ{4rQhY6R0XCs0IdV+$)2ZzbF
z;oPe2It&~d7Y^A&@;%t`H!xq$Jpb6Z!Q&N0XfQCJ?t-T`HnDbVKW8RKJ8ws!^Vp@N
z>}5w{iE3*5gDjkk_6Xs<I-Uk^pNokUGS02vDp!x%RGI$nKo=uN_sMgR!izAlCTkFJ
zT8>EDX(gMPTlgLtYV8J~ezhmj1cHBDj~1?kGrk9DC>`Mk&3c6B%fP=Yj=rAVlOaxL
zv1fWfDkDj#`l29VtdCcTdrWX%0l?<h$()n7I3l6w^4o_<gpWr#Gy$I6M2+n;`kL%M
zg?59P^=FI8Q&10hpQzc7X1qy<;+TX2Cuw~YeCuTXgkTBhCR}*_qi7K0_<RC=P!ZzG
zF?3m@gHDh!I(ZeXkNw*U*}LF7W8DK^c6&8R6$=cN#G>m%h%JSN_`L$$e%~h{Lbn@9
z8!RUDAM>`NF+WE>rmJdIyi581k`6dVSiuGuv1oPLLCG1udcts}hW0!^EB=|{$HC_J
z(&aLpq4ZgT4_NFWkA6NMgzqo3fqqW@f1ELUyL~PodYur@14m2IFrs!hzE(HB@x)b6
zG%EuHRf@GsU-Q=Al=AYmnvD?8L_!B82kn%OJ307ifz>a(6rnr*r1VS^BMEb*m{Tp|
z*W$GPt*!k$=IcS|Mudmp@_MbApld|~?nEk%-S%vLirN*NJIpwSAz=K`N2&3zA!AHO
z?5P6(HUQ6sv}wF32hyC-U~w4O8$@VqpD@Jvv@D?B1mVIM9X`Ry)_;-x8VvR^FR}d^
zclI%Hfj>-&2XJ;0BPK*%^gXTy`C<B;kAf#WlT4H*C%W#zAu7{D2fL<*_MV!Upgpy7
z)I@VrbD++OFW@pbF6O4rDZ`YIh8s6(guyPjM400axksH{ez!_;7*>gi43+I`dQ6%A
z3V+^@uuV-+Xy(k`5m(EV+yB&5V=Z3@aX2ahD|3<5KJ=!;fgM7^mC=?hW~QIP0g8yH
zNZ^Btg8OId;^z^QMe`23Shj$lVkJ)~#gq$Sm}!7Z8Ks={y6Cj&Hh&pgPE0TG(KVdy
zr2^uK<(Lky^6%J+Od9<vnwl({$0R{%Hf%6iAl4hn*Gop6_T#l*&^^D+7?USTN3iwg
zpDxuOha36S%{htv=P%V(r_<LRwO7~vZI#PK;@+raqqkOooc5*lDTgDmt>>d){&2nq
z`6QlA<)<b6lj256R-3l9cNJ&tmvlB;`Ajy4#Un#-YzZ?e##@I{9n)Z$QNz?d<6Pue
zmKX^cjKTriA#?M(BV1xGrp1kxi^<0fh;j2S)=L*kQ3D@h=!{>p(9#Fz?^KS-Ca1-}
zoY4fa{o0Q<y?<jDG2)eH{7i8rwC$#%qi}{rXK44-*$RkUjRQq8C!6ytl!}#Rct>I;
z(BkApfY;PyJgo*1J|6TsvE?a+VFhg28-;cvs3O4c-O*s$UU->U2_o|qud<yyko_{`
z@@NiMV&TqyA2X;7@=suloE3u^4kCzd;wZAP?fuF0g@O~6=VvA1G`}1Ec+1d~DPq*_
zT>$cz%{x_|0-B1gHJzFZ#uRYs5l<$x=gm@}{l{Tf0tx0aVlR3k#`m;;j!cYhih63P
zwJ#9c%uM#>Yy1LFjrk;C95?T>4Gwo_6{m#WwO<MHlqW``+D)Er3#Is6!C9C&GGG8<
zN%ePRMl(UtJp)19VY?+NI8vup-))PW@jPlpv`4*5=@O7NvFU305L$lm%Icp$z@dUN
z>@A<ZxoP&ny`RYlO^(2^Gt_MQ1+>g2z2LUj*a#c%plV5jQgCj1-dQe2qc~hi%F%yr
z*oba1vy6+Jl@8#T&=vtP%G9k&5Hl>=iNWts8ekTs!yd_pz?P;u7Cn2<9=8J$lfZ*J
zOu^`Ql_?5f@rjp-Kq7*&PRu65w!DRYEQMCzPqG`cJF<}@f6Kr{Rz@!FFv%nzWMztN
zS}&P`P;*Qm)<Um5u;O?SI|Um_pj*&_cgxUy7_cryk8k(`vCg#;VbHjk>Q0JkN6?XS
z%*R;{V8d-#Zq!lX_K90^V9XGjRY+KvGG;I*^73BK#%@<3?OR$mW685n)(V}A%80H7
zqVS&qHcnhxe*Sz<r1#WD7^3hZgL{cP)aPt27L9Fq?k6kiHXnSoza=M_kucl334X^$
zx56#dTg>wEbPcRW*@_`;SMFSuFnC!GoT29Q%JP=Eu&D7g;*6=)Y+Jz;hAV94?_wTT
zo<W%Y$<wh^VwC-Elgc!$smg_(ydlq2Mbxum2NKCqgP>CAzNC9jc+Fg}2Ltgpef+Xw
zEB=^`(Xm`gb&--0ymcmE0%Q-b!8vRo1B|36I5Tz1Dc(xl2z8TyS8LZAEsh01Ue)+1
zco%r*RA;-x<r3IEqg?uoq5!#WKqk=W%9ONm(vpd$aOXs~@xZ|ur=WYlU9Ff%p5Dek
z-Q6L9ue?mxou0c`z>fft4Id*0XP7I12jdA;=4D$s1%A{R-@x$0#clbbuXx#db;V>K
zkAXULmyJHi(4iP5@-L9os4f%j!Yal$_Q=5XQ3X6j8%*oq&PfHlL_19D0*EGZKTQFf
zhHBI258vroJ9ATJ<`*~=EG#m{$%DWwvPBQQNQSZ;(O&^3SXm<s8zx&uQ5-OJvLq<2
zj42>?w{lnxFKXmzdt>Lq+)DImk(>&(?8${q&bZ2kcJrS_pBwRdO3A*?0{Idnk}^xm
z<_M;G1)t#!*wbTXcP$)qn@;517VBq?K%P$_EIMe2;Nw6eC5XVm-nHhn@!^+yuankT
zwT19ZR@I$`x@Q06s%7lmrY~9)27RzalmWGM2n#j@QYExvuqUxXOYGG}gA1+&y@G!`
zu#2;1pj9|wG9zV8{w#QX{?oXX9<JEE{d;^Qpz_ET!TeL)>wPxQ5)wb+Q@plmTfk90
z7~V_`G*z7OpxGk0<+pQv9edlk(=^y1EG6yU3Zp?ZaC{N6x~17U1(#JS#~NV2@48&0
zC8z%rpk7}7RwF|v>v>G}W~YNCmw(@LuXj>sBA5QpK7G9c&Ctg^gR@y+tT0aLme8)p
z+doQ^vyF+OYb~UYpS#}z6VJw(r7)ZE1hx!e@~p5oh=IzJ@Ze|Nk2WBkB_Yj87B{%@
z@|>XaHB0;mA_ONVj>?17G-Q%r5tK%EaiSjJ?Qzvs-Q{nrrmMuzMGFK9wQuecfE8_V
zo7GT6Mg=11cv0r9%E`XnQ7ZPj)Pprh64cfx8DB9wKeGEb)<j*nNe=RGuHmXx4;KD)
z8a`22F!^+NNjI<+igBIlMA-Vd7({ekAwPcbS!$VdL+UN4;D(Mo{EQ*XZw4Zz)I*Kh
z(9*|4&wcR8fcdZr&sGNeob*B~v~V43R;mHpCv*kFGF~*i+VC27?`(NPUu}~=10N65
z!>Cdt^-u3)SG1&Oc6n@|YfMbcsW2IYqB;G!uhiUrE&VZqk6#|BEG5#SRn}^?)o#_N
zDIaO@9s`Nmxy*T&q_!m*I5k(P<ggJ)nCIW$UXgJ!lWfJLpv+Li#FCgdjsFmInSPaU
ztdc~9I%@ChrcyXwWosxP7DhVz+mJk8?XkPPD;o}~X;TD&?;Kc^;Sc{~EW6WB5bqZ=
zy!<ejF0tkY-u9!@u3b($)vLdI^GAW}4E}P$3owNWGX^VfHRI?i9ACT59&^OhSy=Bs
zjuF80R&R(%Ft@@TL>)l8FJFdT!BOrhMT0aI(SB`HA*g{V>hW~gx`wLrFoFwa;%F}6
zjPPz(*76toHtRG4sE&*PW-~pk2N4t%itFRTdwQUx5S?}AS-YV#E$&0WdR~JL_5h*R
zFeC<j{QyWj+<|oAkRJ&M?<oN^p_~A(Z%Wk*#m#2b{1QZ!H{i|Y$W*;o2zR;nA8f&U
z1n;Ad?jrwNY^LCW!siYKQ6x4SkoBaPZ{{7W&fus_)_6TLm3+$+1rjRxm6az|O4;*O
zSr7fOCb}6Zz_9Ql=CK>L3EnSoa8o8vpf96*d$sw1T3<$BX@nW;*}{n>hK5Alru>kR
zc}vh(fX>X)l5&@1!j^t(hU8~BIS%GRtCL|2)ZMl$#<nZOL-A5`H9UP4UX?nqY#p7>
zD*VgeM^_V*iCg1Fg2KLnwr(&Ro*K^6d37&-;Gll8*=qf~(P_mk!-e36Aq0SqAV92-
z%JWg079`XuPnFzts51b=muNJj8sQ^wQ)#%2_<oH@cV2%9JH>PPMuI}a(~oaWN|bFT
z_)YaN+G%qVIp1>b{&+!DyY;kBD^+k%pU(4lIvyM;D861Hx*ymF!#`Eq3kEiVjaeMr
zYzM^<(@5yqW1pT#ZeH9ipwbPt&$vlzm6Lp-^0GOtsiGkOkxNGfQxiDPNbIwu+J?TY
zYVeD1H!q{f7AmbNtw;gUb1(&R*X%l7U%Zf@t!C~{vb4+0WlOM<ZY~+~ugD^Zxoz4*
zugYPCNGgBrsDW3gZ|#tuHaG>Z89cQNpL&K;qIyZpof`6@goeuR_<l+<-Bw27u`e5`
z1sitZgFG9U#;GhGPymf9Pb#`=7dy?X6cfc}iTNV7%psoBKg={*oT!xfCY7&IUFP(i
zrn3907DbAcR)yE<#VWZITlN2brsJp{JJP6awbNW{Rzkr>Y9Jb>Xqei@Xe9R2)Y6#O
zXz=>$?gS(ZdV}8ETZ5`d*uoz<(#iv;Q`*A(wJ)XS!b$jf9dsb_zqA+9JvRe=+q{RM
zqdRky#cgOT=y&G;vami_6NAdeP~;`WS9M#i?d_g&SFP5QrEjN<%7ksUh*THVFmYwR
ziTe&kHKO*<>u-o|t0|(V>MAG1uEN+6e3)m~anu+f+oq`D%Hk!7jv#1R!Q)`^^+Us&
zd@xJa6UW9Lf#zX7>GYj-97tQ=VCMI<r)q)s1cY}+BOyENg!&mjz;Nrt=bkxAKk6Rq
zSa26$aKhtZ&I?rxQngqK3ENf72+$P=&I^MUrb7&ITMyXG2!rl7Sqp^+Vf(uppzMty
zlE}Q0`!4h{d4%G?bIE8Ff*5?1bEpLW^XcDif)a5f5~BFlh!A1srW(<WJD@M-+UYp!
zlo~!;B|&(YFU{e@qwo4zvXMi%L$3^TgH`Tt$@8cxOi8VYSv1_pjf+||e9r$2Tx>0P
zR5wrQ%R(%zhfC>u11+r<t{nJNkhG^SmxADi2Op*U+nCuY@Yi1WKO=(x#Hs-wCAe#m
zXDl@oKy+low}z58_>4)>VLy0E)qN<p$^Pse7is?3lAX}o9VXXj7?Bal2Ywg(V-Oh3
z9W1w#9IyiS`6^qq1obPPW$+yxYPcvbyEFYDUJc-p4Q?LiF=99oQWhzsd01g*;FAbz
z#p@v>DH?<&at{zSS9WB<UeQ{^u~X)e6WPme;VV6dY{A#cM+tC1@W5gGQiAXO$i0#q
z3_^%2VuKeDcgF|{a9^CZZ}qx}4{8}WpypZ)lEnKyo1jzc*C3Z=yh48%I}*s2u)Q9p
z^i`odal}8JM?>0+jL0HWyGZfj4*=d6{k@>0<eYMNaQ04gXw|vKm4%4!@aymT*_tjS
z$1@qra~~|jb6QkXFS(J)?&$9?9;QY{=Ei;ox%s*@n6FQpJx<^lN=2OvINBySeBKk!
zH=s+$D{rLc2#7u5#^z>KRW!(m=BS-FYmQREi=r|{<j~c1Sb}9z+kvfZ<9T)bZOCY@
zPEp8^Zm9=8J9!k}$iZX$lfO}=vi&Q%qv4KSl*DnkIZ?!dz1-tvU~DJ^hs(+xh?qmM
z2_L%}Q;1Ti^2bIl{CI)$+61yfuId1hAZLQ26tuN`iNw%JlSW8?s;%(w4%&3bHCa_|
zb^}BK?Xb4eeblUKibFf1;qxb+0k}^op~J-24I%h3Wm#|z9&rW;2d)Y&$c{onXa_!g
zZQKrP$0_jk7#{7eAYL}gb4FtlQqK}CZh`x{tTMzg?*<ZHJrWbM>=zA(%*)tF!s~=)
zm!n(1tSrp=jdr}6L-L|<cEB!v=WU_Jol8p?K9Sqv^mg=0FoF}BAqhy_$>y_{gACO?
zW}GVRSio6D<-2VyB<db)?xTbE{qw;6{E%hSTAC71el6ZdQ+e6`Q=0&onDL+UItXYJ
zo(Fn-2o|;Y=GKPbvl?sO9_bpb?A;G-@;-#SAYnwv7M#3&Reh-&b^Z61VCo(1rDwWd
zOc_O>I>=>fYM7%bw?9VJGBHc}&CrKJBN&Jl9J#wnhBl1Kx;$FR)Qz9d*?gfYio74A
ze&@3+hi1q;Rq7*_vE7w-J_=yT)rx&ktLkH^+M@c~{QSc6t<cDZ{XjAELL|eaUHey{
zzzGlk>mS@ZfG_~~K|j3@C@owS%^9&r`T`J&y7PhyMTmfDTIG#uoigI-E@|1qPue3=
z+_q`s`TU$O;Pa*Gq<WYh=qgo{Mu07qePLesWXItK02l5M;~9>myQvutKDA~GNg-vB
zi`MN{xJ>t0-fip+>?V2;A9Bgt#J5piYPp>|`#n6|f)0)AN*Geia(fV?*P#n_hVnKd
z)*;iw(Yn^t&4DGm)OXmdgB+cl0!^NcMUL-#9lw)HxC#ro1Q?9?gHECpX06nA%sm+S
ze&o6>pRR~c((2wE#%)acTWn<IpxYwPY`Sj+VNOI>38u=&UYL-GGg2AdH96+rD^N#d
ze5th|Ko^8F)zlO@hVCrC;LF{ggR}6lVZG;*e?2Gg!r(bNeC)(UE!3_q<nQOT9mD8i
zOMR(8i1-rD^zcd9tmhF0Le)Eg_{4w$MDxDyTlk2zom8k@SUw?0{JxM2glQslTH|5W
zsHnHU0K|}%fvg1q;^FO?5jqaA-{2s9q-H_wJ4;lIt_2f}L_9z%W++T;oa)~zF%t{|
znI#%VxT$YU(aWhR8k~B&fW*G=ZPqws*%uGz-SFPc4TH({F4CPM0mk`Z1PnD{p8(iU
ze@eQF8CvF~+4uXljJ4BkBdM6Z9s{R$MxtaWojnKu9ipv-{L*FCRv>RL1!L)2kgII_
zh2`oC)Of=;*7~%Q<H5&b<FiUGnph>hPxGPa+K=5=)#>KzzN7tMyJRt-0pg*L$JeL_
z7L>+J|Lu<0i2+|?wgXAT-j}CrBRihgAeSMXl}~SQ2qv8!2u>KXmCO(DlQwxI+{MC&
z4Gef7Mw724z+{353WBu_1Rli<ih$L{vp;_Igb6@d_x4?-M`Y^HC<F%UqGSu{zPRMF
zCzp)JFwse{&;6TObj}V5;%=znUfpLHURWQwOrCP^$ND96X#*Q?hZT9hy~G(V=vlw3
z*V;u-K4rJeH=f`o=Twv>lXj}gFlF~~z5MN#%w>m&>JIW4%kv?Q8ZD@0&mifJ30hyB
zynHFFK}@^gtL)7JxIWJ;DlZ7HU->8r=bKtJfDh)#m}a}YwM)A4#BbVG^a-ZQfiJ$|
zl1@$uP>NAu$rhS?x+9C0yzAF8;~NifcmT1N#5Lm~5D&hybU}SOt531wHhYlqaOw@J
z25y-tL%G_f4ytXN-eT->j3xz+0hCPle0B`$m7sB9Zn0q^M&(4jN})Fq?*y5I*1+!7
z%$1SEt;ITKG7$ICp5c&A{_EnCPTMX8#+0gKf)*L4Hf`^_v^va=WuLo%R&1rUxS=#o
z5ceym0eoB{@xh`d0^@wz{CF)<iAMaPrI}&$ecwWVZyq{4yQ4(D#pT@$dReH-3KRE}
z0~FCNkl1dHKCVm<Bp<o;ju{Z=;=2=O8JB+@DiL1_<s~kDXn<cv!W~`eDG(h=*wh$Q
zbdRrfp;+T+{XHso^+_{n&$#6MO8GN47e}lm&WR6JOW_<a;C=qo2Pip)iV-vxg42|s
zi;tzA!4sa`>&%oGthLqGv`xK9jtVmj-qHa=L*_9H7g`Z~eRk!;TQpA+3aQ8E)jgRw
zCcmtVzMD{4$ggY>+7nIWm&lBvUE2U_5<lNE$Zq&;#-1nCt2SuqoB-Y-IG}F=a7VSg
z@B=>EzW{6F&>RKi+Z~K$8|Ms|EZ|eRqlU|4ocvZpx%S*nMLqNFu|FO7w37LfvC&Ph
z4URPiGzfpUFI}tRVWtWeRDCj$;Sv`Hkl|4>osFsOD?<Hwc4+Mcb2TDyn}<aWu8b1r
zxl7;+<X?)pCc}}zL24}`-ACXnYkn3vIAq8g{j8tDAd*O12qhoS$4nyfHwXeVc4{<-
z^6%%PE}};bqc3Y>EBu4{f`Lv^>lHfDD-HsBkQFN8!(13ppr0>il{yX<dTy@d7s4F^
z%^sO2^VtzU5x`{5u&vYPK@CH-ATUd`uAT6Uy!eid#k{Wy+1@_&OcaA?vO=dB7hNbZ
zLzyq|g{Z9zZwCflG?5$#C<b0gtxa3UQE0~ie*7<O24|UcgkTmQE;lmc(Fh!BLs^wq
zPev8ChC2JPEsWOLrD}@M<0n+}LueY8hIP>DKq_7{o$fLI<gkft(ph=mrB>L+^VIu!
z<8upP9D&c@Kc?}7X#}vMf$o$wP1hl9D7YIY_W<_G*}E5IabDP39*`+ldTs=*ELnwr
zNXzqwdhq%XOX-(+%N<|uXL)1bU8i?H^jO<%Eu|N;U>!AxmK6rjzUb@D_6D>)F2i6f
zz+P6lD1VcDa`il4eCNrz5}Fr7;nPJVrKI{FG4^wki%6Ng1QdDY@Zam@V7G2;KRxRg
zl^Zqam|*2bFl{P@FW^%?HQk%%f@X${-^fsZ9qT2t>+cTEhRa0g2}H+F0So>!<!6Z-
z6Ug&PNSC$?>nEcqalyo<ETO}{Ct@6s_t;iJO=-oN092oPVyZk5$i~TIda&5J0!j6k
zLP?%=R|-)+9*>byBRgsBiAIX&9z||;JMiFq29vD16&{N>*&6g?QFRVfH?n`=0W>HK
zeBi&MQQeW5`1)cYgL?F?0whalRXB;%FQ`ez^|Y`vJK50z*ZxeNYWBMz@wKg6>3lyf
zXvYf1qXAj9D466W<-Sy6a{^Yq#JhoQHLE@2Gkq&h(0I#m(0FGj2WXBzO9uoG>rNAG
zp=6CDQ)ykICUZ@{v2A!?P%O*($nr*hXWD+3_-fZlxmszo=`g1|O}(hSAUoE6quptk
z%R(r2K8y$5Us;b_Ve>&EymE|D$Pbxo-`Co0Lc|mIOtw4T(shLfmjiGuZwzu0szy~;
zX0M4I#<XBsh5vNR!#<k_qrXRCvG~sGZ>&t&yjp~2^Z0JrX-fLN&lC~f6hv_b^W<H(
z)Bf4WGWGfQCTQd-bsV&ollYgluBLv_F;OlEkkwTJy!dlF%#GR$gKa*jT+xd2C@*g(
zL}Vh~;j?lZvC2f{KcFt<0Ptm#17O@?z<9KRigws0y8!(}RyO`S9X@WIbi>Wkvu`DY
zl5WSr7mN4=M}l?mSNts3=E@S95q3!AW)hGdPj61$>VI~Kq#(h-7#OS=$1^mt{o<A?
zBHh<*tMDX{V{j82+8=UOsBD;WAU^GQ<C?xaION)k4IF*io0EMfaCpJh?PSmchBHYD
zGO*rX@3-G!WgN6QV*~<CD>WOF{$yTx2+EH&N2br~zq8>%9^;tfxn-6y?U2n;)9ad3
zE4KOB1WO#43Efo;W6iOo(f>_9T+&E4hb_`Gth}~g)1>X9^{Q-kV!KFbA8&?Gx67Mj
zrAoL4KXmR})(ZJ3ZJ<Pg(Kkk59f5Zwv*I~Xs|&6^8rqVVIo9?nCWx}lGNMIN&g$r(
zv~tjZ&Dt|4=*+}r>#$#@3a`q*>4~}_QA_&RsRkdxDSgX`dwc_!ix^jywDjyenXE80
zeLKA)pWKM>eyYJmPR=`R=^!0aFSYzB2eexLiI(-9^yDfgx`gMu<mYp(d%aDeJ3nwf
z%i?DGaK!V(Lc{vh0wPVv4#FjZ$lIoyL)4!rx!`2$F=)&cMpeFSV}}wQZoUXpb1+{!
z(Fj{L<6Gzz?!Y!icEZfSgrIH7JLzwUUF=d!q|G4w3;)WZkf<2P1kEidTE?ibtN(Qm
zD*e;J19}2w6+ezAz0#ngY{BV%li!gq0>kNxE~8G>c3)W7RbZ%}-N~(9jip)n_4M_3
z#(h;E{hCx|5TNABA!}7#Kil1-gpYGeCe(f@66I9uVqM164KG!#UJIXiGwA?&kIcQ{
zgekxV>obJC(aKz)*LruqhKrDpuYr9fn2gdxIJkZGqq_B!2Fa1@4yJ;7npy`$`cyr{
zoY`Eq$`CT#5Yt)R>Gpc?M~s_JT5-DB#Y+plaziNWZp#}7N9=T)iI4-S(~L?>ZDPOd
zb=jS1<&GHbUFQPI)3iS@8mn<BRx0`G3$_1gk3;A_7;H=_t1cBf(Ab4L`uTZIgc(y=
zOy6OOrBoWMuZS>CDmc>z0q=6WhK_E=Ltx~xbGGT?SDaKdhg`0kV0X;~vm~TTA$J#a
zd|Ay(;$yE{wVt7P$wHpmoIqQP;|E*iOtuA@Y><&;aw=}k@KVo&I?cKN#&gpXWIGpm
z+v~0n;n~$JhFic6uSzzhZquDpeFQH+6uc}z?D0yv$5hP7s6<XCRhOY^NW)0Bd^a);
z`@UTIM#rz-qG_jhc-6-M=j?v2)*#0zPaPlKiP2W)$h+aYs{XcqTJIMx&hn9()zIPX
zPBFt@&LuqR>A@zfUR-aCpB>so&vmC+)UF_5Z)rqf5V73vJ+r$e_BxwZ-hM4a$#p&*
zS7AY=>5QICF&!vf)VB0ochg9mf2KjnYW3=NKa>|lJK<_J&?pvF2(IC&bS!}{=;4<L
z^I5KFyy#eV5ee^D1>^rwz!&W$i>%8Q?hM*Qc=8$Fj3zIS4}TsfpBEs3j$%IXmB7>@
z$f@Wvy3evQhJmmfrNQ|<f{O8)tQ4SBALxa*i4a^aC}qTJd7{CEALfa0_AOrZbSV0y
zlG3SYu`>-}R<k;@<9VVVd&g9d9S#x1>+^>#dmqteRS$zO2b`H%Vri65cVDl#{klaX
zbUUT@FHZl~h_g0csuw{Y8n4eLM8g$vHf!QuD!@1RJp8D5e;IDJm9!(|NtzSRIoF<l
zBo=ZLY4uq#aKr+iuv?sgSfYZuY;xHz@q*3^tCfBE=ZvyU`pT0nkGj??(k8$IaVr?*
zbL4;*F400r^Su;fc_f={wNHkH3W<=Pc~x*X+#d)L2v$GqC-BSl6@$0Z$o*vW<j}UO
zdF<2o%*nb~cm2>=u6tVw85`GFW)!-kb$@|Y!a)|%C|h=HjQ(M$X7E%uJd)i==yRVA
zAIpRW3t~x`zy17Mdh(vT%qdP4OCtkRYpNMb<VU##0<7l@k&`D+wh>N-L(xpFb=-<+
z58hpeF6ImL+Caz5GA<!Y6bNgvXPmMJPW)gACRG+sE=_c{mf+-KC*o$dObrCf81@0{
zr2~R`8z=BGe#APENIDw3&lu&+o`haNiREVk2vRLKoA!&Q1pqXH9@lb9m7yZUz+TLm
z7W)(IuR1{YS*BE;%<dgA!Po-`-FeF~eD5}MlzP!_-CjF`kXg;Z_PDGMMg@4BtB#Lc
zQHSCyd2XLTL7{W9|FpW2-kv0&Pn5MJ-QQEO&5)wRfz2wR1zWRKHunegQ$4%q!4@0y
zp#Y6(I!E0Iw7lf|{YvcLnI3IFa~aC^N@T<-GCwRrz`UIv0o#o$QpQpK8IfWm9-@08
zJ+9|+`;BzVC6Bk}Pw+cM>f+b$i<7|g71wqSv5EM%1?Il3jYSQCoyYi4`a5Wj7NlDD
zyA>;W@JJm2$mFguDw|MI#KJm;_yNv+ton?RaqWMyO>n-0y-D-Tv>)?d8Q-1jh^o)&
zG88Ey0ze5ikn9LHIx$}}Xlp#fO86HXRLD)&Xxlu-Hqs)?C?C&3cJ|~aCk`lzMc#sT
zYdLxY@g)%IA*6-AF2*Bj>Txs~5i+ckvNj|}{r}KOOI^EabqNxB_qjr$&)R?ysu7_B
z;{CQhD`Ljn%Sf}=*|Uuer->S|YF#<@@w)>xp@ejh_c22q+GAjht)t83kBg5Jg-8CN
z9i?7n2H6lJC46Nqb-0evx7C%S5spVNGw4tmq3S#PHbtgn#0YXqCzLfKb7@O}K~pJY
ziXf98u9pLwQzn78BkRY7X@#jk=}Y_$1h9Jx@cX!mXj2oixgc*p_*z}Hy$Imka8gb}
z^v1if<cUe=F2MgTP;nk6SN>K7v&G%gH~>NMf1&TnnTM$SID;>%c|7!|h{tDRYeWp-
zD7-lIzZPhd9ai&LkUYOzIh;K5h;e{m?ZT0-bdwfgDcKP4l1rD2`nr=EHY&6UPnN>_
zZId0a=NvLuLiX^$#VaI^-*rrOXqTa1o<-5S5E6(O_s?oyp?ID<>XPLdXn(jKVV4Dn
z)jr!UF-||SO-vASovSXo^=$!+FP^dvslo!e8w};PJ|@6_83C!i&ClH@&H5+SAe_L6
zD>vjIVA#<^vIB*B`5<!RvUR3sdK_|^tMl|>gxVM;S_TSWEo@eV8L-(<64nbcRhn`a
z61Rl7$&Hf`uZyiC&>PU53DN0;ZcSq@#K=$3Iod?@C-GZKI~$bF%oU_cUMtt2A-Rf&
zC0bk_hM`{KNxqe{VxDw++AENAfOc1^Fo8kG=Z1E>K?HHnGxpj#Coj`q#u#XAeo;@V
zKUA_WJZF&DnBAd2U?^Mr6r@^luPcor8e1JfGJi21VoVoFJ({^hF<%u2U*-V4N!IPc
zmxbcN=z0Nalc@_EJ>*sVG-&LLKKj}H(USa4Txb*A;!?%bt(o^Pz>Wr5x&v6eu_?wO
zWKiCG+&}r$EO|hoUV6i6Q0}X>{PSt+t@<hDTe|O<BGb^-l{inJe;EDnXl7!w>u>&?
zCi|wcJ$}5-I_8X?ILBd#${oe_#-hX+KxH+sru5PC*GnOJjkh-lRMYxYUjt$gr!j70
zGwt7B(6{DHnYXSpzuX9o_BO#pmX=du#9KhNwN&w5NIQp1MQLoov_Of=+D1Ijy-m$C
z74fjeVVWYCh@64g_2$o?o6Zx|#}HT39lOFQ!^gI(lP|9~Mfp_Gbf0)^XI-14Fp(_$
z!=zRCofRCamD;?~0v^Nt@~ZNCBl702vqZl%ms?bw+)J1ku|5Eg5r)*Stm~imHFJ4<
z)EUH@ZaVNmx1iJLfsxeZ2<P#fl&6I5>!gJarKJ}Jcm@Q0r4Q!{LDo!*)s1S#A={~H
z<#ubpXM2>wHyDm?7ZwZ_jb+1P75t7pLawR-AQou@!q#|j){MlRuwl*PU5YTMzYvPL
zwi6Q%tUyzyc(<o6ulGkrvYU&CFPlA2w-1LeMKz!D3%m_*t6baNG|w>@;I1&A!!f!u
z3)zPE_U%UG+G7Uxn0AbR+3n(|f_Jn)4F%o65wC#jl=@-Fhbucl+TCppK#!%&d>~M?
zPJ}LMmU1zE?DNq}tXL&U-nTO|u(jMZqMKo`5=nixvIBueJQ^xyf(Q*YLpcFBdTfC1
zgC*#-0qvR0d9tu-B#DP2E8Z7MX-3bwY6$%9S}SBDq&x;)b>gQX*I-2WTI4uOW~+QH
z$7sLgvC>TI*6<mCYkWdr>K>uMvFr<}1;5pQDbAISs&j*dmLCzdNTk<i`Nb+wHPHp5
zuHoy4=R2KQ%i14j$a}tDKHN3`_@13?Pe@L5m|Ll}V+VXwhn^N`Y6)A{NGIzPZa)-E
z)D1?3_E*H0!t7h`bmVMOT9Nu|qNP?c{%lI=gujF*dY@ZKQ*Ey~+z7kEkW5LQca9`C
zgY^%a-f-74b2;1{&8YPatNx**Ca!W!9gh|kcSS2ci1uGLI2~)NBXgg2yxK(kM*L4^
z=&bqPa5xOm4`=*;2FCobQCM02KdjEj+V+l{T>l6A@9rGCYeL!E-7CKNm>|Dt59FxB
zb`BBF!DJN~*O@4mTJqOB`|Bl}SX|q27JJQ)*SOK0%7yD;dU|-@isftoXx6Mt`M|?^
z?|k7-(W&+5mf?8f_!w=6_7xHlF2}-xI+bA98f_3Vt9l=FRj(GnC4o(5K?9O!MIe$E
zq8CUV8M#G!wqV4WzjhT5{6)$du?~S^O|+DAlu<h0fP@VB#lBYwoG3(e$c91(%~cbs
zt+U^mp(izflHfY*#4>z-9wxR=$hHKNotNL+*YWFWtYsQa1~!yKW}20htWI+Pu2vT(
z`NA@J!n>D1wng~Tif;MpH+|O8NlZFLoYPy$k{4YP(WD3h;|dA%u}*wCqipa-NMgq7
zSc;TGwJCEn3HCe|0t3+zY~pQ$=d<7Q-Nnq@r-CG|g%}Xw9AljjE0{k<$=qj!6dc*F
znLqYQG2pUgModn_)u*8$sc6Jt$d=M+&u8&|r@D~0#Ka({3pcV3vt~u+zjw_kW~SHQ
z^LAVE6}5>h_<<>%9`V3>sGcF2@t&{Xcx9b;rriILIYf<=8sok1oXgpf<x&P7Fe}0h
zH3lk1?P}>|?00^kH;{$!&Z;6oFbF7=hlf>bk#UWT9+t#RM2VC9=491bFGf~bz}3sD
z7|GwtI`|`s_-IAZ!`E2<c3ay(HO9_PlP@>tEgh(#uiDe%vj8!S`tO{uRGkWxQ+;dW
zY#*z$6ZAb^4{Z;B`w^MCKZUJjN|6p~c?OL$QwGNN?9RkVP;cd1ENdq~_iu?GB!O{}
z1N;+iyPUhrgMD1>w~SGl420h0x;@!x?`3m)IiXR*XaV7R`(*@WYJzAmX<0hyxX7<#
z52xz;1kr(qg@@>V!Q5W%egM0VySKYH{F&~FK`(zVfZZ2<YRfE&!W+VgnAu}GX@4~1
zO*=~_R8SlZLN0VAlWqWNkq9-0s|2bjCS(Lpr7R|$1T&3C#X?CjO2~vh2M;Ecj5>91
zJYh8sC}Kv5KsCoN)Tks~<b$JW63+@Q6P^UiOePu~a%d7X{0K-Y!~>R0FdLDhqc%l)
zW<WOBd*~NvVv1)=3JNMPJAy`08#nB=OU&5M^hoxI14)>mw^jE1QH9PA&ohydIhp#t
z3^EzCqd$Cd{&Wtqb$+fC7E7f@tyR(&YW=s3W2^8?C(2tK+INz({VTV{McvT(Q6Yw`
zlyCR$7X@4v#YeZrAfD=Dofv#jStpl6NlxqRT{{z>%PFqwSLwqLiOO&GDqBwqV@`zZ
zt6iggJ|3q-uzlQ^22K&{2MFel>&_By5$$<LZ9PRo6<_J9e8Uev9)5pzS83K^L4m#<
z>!_t&mdaKWFn=>FJ?f>boKt&}eT>&yqU^bfu~w*8Y#V2C|0xnuzjdr@#5UxS9M)lQ
zEASV6MCL^Ob3ZK*Hwu(c_U9KqtVxt^<R`P}Ag43u={Psd19`$q2A!u|DdD<?QEXj|
z+X*!o(RgrfbG(Fn1}3${UVW=r#7WD@e7$_%zpm#{<-5C_LhJ1Qzkn3;gszU4k{bL(
z)re3@lVTi=|Ls&_-B)-=oQ&}uyZC#iu@&<2g>lCp;h5C$vAMCQ+NU&2Fe4*7CI&(I
zqaY|%#wb86;j7Q5$Bp0A?p`~uL`9_4&rhLKUl}x3KSPbt{38AHQ7>lRh^9O|qo2F#
zTFC9jvmEEn+jyl_4=R^jTX4}rnB`C*=f`x@bSXJ3eS-LzhLNw&`wl{mII*7~HCM*i
z`*|JBLNWvU#eO<nN-4*9PM4I`Khh8la6E^kEsd?sXzUu>AZ3ltkJd@5Ai;VKny+#>
zq{Wq^C6hM%0At<(K{2Sahp>gcGMY(7`j*be1Yg+DcKE)rdikB7?H*PH^)EGhbwY+J
zQz`eBS2bv6V&3{?+o$JQPr<UzjwIZTKSk0Prm>jk{M5uZPWOV2Sf3ii(^b?zTniC2
z>NWKm(>bO>(Rr_Hb$4=WcG9(g#!Q#z_usfvP65Mwa0QBa@2cXf+C)*i`VLt>ghs4j
ztuT|o(!9!55!*4uOQFMfk$AmUwB6|~^O9BF?!Wxkj#F-z>V}2I5k%XMi^wS@9h?jl
zkkouMP<`H1k!H{2#YImgDg&r&9g{5FYe^&DPwQ;6DQ;Z96f9q!dxm_KOBAp%GR#$`
zP2FFRmCT*1%JPX5A>m|oVd=N`I%{1TnP8cJScZ>e(Wf2kZ)H?Mopnq+GeZ#*R4#-1
z(Ute&=`d)KR#I-sCkr6;Z<>Gb2EN&Jo$7`4S3Jg4jN?cALU>SMK5V1*7yS5Y@P$<c
z7Rjw)C6>(HzlK=bH9O$>Rj0vy2ry|Els~(w*@n>RtffEY2ars36$NdPEY@jtq5Mz-
zlXMv1(s%;FQ#-FEKxFy6WDOeHQG-vR4d^z=ptrYBbzbm>7}*=oIO<g7bQB^Z`p+5S
zL(;?m?Zlk+8%IVVW6X%)&El*KhybZ`{7JZTI4E5WJ@C=1tQ^J$8rLTw+rP^H=*UiP
zany%#lhb$V6y2wgi^kiBq||VXIYPg54zf^X8u3q*Yej`4Mwu7JVRRLeGP-)NhPHgA
zG#f0S`W1^3BuOa#5{k)$?SI26>BoUvP7X6<icX=&V;d|WRWDv;NQH)JbvN*3ZJMHZ
zZwoZ;<)r^5*WJ{cr}zdn<fDCyZ$wCT{`=q+1GyPO8J?LZW>S~2As6?9-a0)&F#Hi&
zZM%k7mrgsRTfGI*hQgHnO>;Wp;bszY6K;cI4a%VDOp)6<_mK5q*w+q8?Nsn0(qapH
z>0FW_QWhe=)}-A`$rO~m*P@UVL+5<pAft?Jbez#vq8;y3!|wY?=`MJ(^g(Iy<e5ao
zAG}hTr1WZccDt#D<rkkSP9Gxvbv_K1r*e2$YQK+1aJ>>opzDngo{)V%AYflEPaOJ}
zn8diTw`DoPY*ty?fpxa)HgJRRFu=I+QbE}S{=)V+G?x)Y!i%?PuO0F?JL$0C^JK2*
zGbcc%j%x?AI?&y2Ge-in^$YE~N%tFEvh{ig%RcT1bNpV(z|8HXj=8R}D>>8oO36n?
zlMBr|DN3F%@PU-i?TN_t_;g#+-CvE;3l|kIu%31XN~aPM#!qcmFC*y&JkSJEJ#>_I
zTB~PXnfJD0e~`6c%In`ZIo!lRzrnDL&v)BjRJK@KW!KsZ%6H$NJ*8{j_K)ibHY}vC
zK3oyCN0C?z<|j$n8q!Yra|9J#J&3CX0#KW~!-{zUxg(Zp1J>>G|0j!`dK}&+Rj(hl
z1=d5SeEeB)e>JGzXkXk`d-<$nSxp}MssCZcINz^%&PJ<~=uThr#dt2Uv&FL69H_I_
zX;@C<@6oP&$)m$>poRl+T<#TUCtR@ceUEuYL2&%M8viT;elz+;2;Y2}%Z{tn%AMcT
zV|e5JnYxPD-jNeZ&O0FhtAx${y}#0~UzP7J`_}U7@o6_-)&~B5Md_}$^TR~FM=Mn~
zKg=J!EZyJjTC<NcX|k{PvEuyM8@gpz(~`IObISEoy}1xet+=}OMg0{>hJR=*ZPJq+
zCclLfrX8hbd`!yOWZ{+ZKMUM3K9)RCXdoa80w5sl|AB~T=4$-E)8A^f?Oiv1gjTcl
z8GAgqdiSuEo7GXh>$G;sAuJFuPR}Zynl!+mXLM{d)@BDA$Nh#cJysTE4HFvw_M}+1
z=N^4ts4&afU4Bx4`=qcbbjn&pLO*UF|MfS>%o-|eGB$#EAG3_6?*(kitDJhRtlVS|
zv_xbUGcz&PEP<t0ZXjX}#+(JNV%MZG*DMr=K{1zTHmAlqsLL5wk-o;9nqW*6R)zZ*
z5(L9gZ0!(a^2hfWikuMU%tm*VP+`7eGt~Q3pdUT88OHArc`u;fzzLL$P~ePG)C1nz
zn+pD03%1x(szTY}*owo}v!W0m)X-e_wOoo#)zQ&27Ot~G;dIfn+Fd;fa+or?59o%H
zLVn8C_@Q@nlcy;kRpX3*`dKj;XEpnQ2Tc?(&6vQjNBR2&Z*NAgbo}REcoByuIQ>~{
zUdDQ#OJHf^Kd(zX#7LPWuOiUKvGc>_jJR!;xoYXkjC<(l@15kgOT81w)?cd}RISg;
zQ<EPN<d^t)AL!P`9&-M!zkW>}hx6+~>))(rj&>*?GD3@IFa9Kf#-ZmHv=Dv7{(qo8
zjAm|PB#ubAZN2X8Z=rV>j;GQU9M8~0w!g{;&xEhx2q;fVHyJU|rM_L;cN23k%a7tB
z_i}540Mg=CjcAAd;;P>AEHcDw#E+~5PF-cpWV0y}cEQHQa|C|9;SoU72Ujl&?>jxQ
zl*Pi|&55moR3VveU!{2j5T5b9V~q#iJ;0qa!10{mWA>i^N?BFRuI{uh!{>z5Hf?lw
z{IG>4^;T`}edPuQ1!S32oBY2q|5DX{NcxHwmpH7a<mBW6O8hV_q`@lb@42T|FNu6B
zf2<*Bqp)dpmwBci$>1y=hh(Q<?V#6*-LnyJyog|M#vR(T^v^?vN&X2BoWMgJ4qHA+
znWp(?(XMja_g@o^9DHc#qS&mW)mz0i0|%%IDC1Ir@(DG22anwrNpUHBqQbF-A$VF1
z33Yoq&0Yk@+Pz0FER1MaNk^(w8b{m_F0xu$^pEL@MH#%is5Q@lC#qxN&g#YmOgNYS
zlBgzyeu{f+5Dq{XUIS4O9ji-)Qj0I~1&2zaS!xs+%G0WNLrDU14Ktl!FN})kgUH2v
zoFS1#a!4s2&jy_wQEnpm<N^tU`u)PyZY$rMqNS3rc2A9FlV&y-LK)HggjPbXk(vm2
zb|ZJnkNV3JClO)~((8A2S`koB;h<`-9*N%kZlD=v2`pN3hK^9v{n~;IGiPDUhLDOE
z&fM^b0_k{Fg+k#S3*D^JlZw|dG9OVp^pn&O5m?y*Y{(Xk)M++RXqsHU=sBTp9?+HG
zv-jo(#sxA2*GdsP+dD)b*tyGzF}T9SIdu;or)?9*wj1OT8VFbvdXr(a_;j@Do+n0W
z!chuO^?Wa@0*_%h4UdsvUMJdt5|ss(xyvxBWEZUTWEw{>oUg4RL{m4?Xn}0#XpR2m
zn?n`5u?uo739Vf~ffoMe-W9^1A8;V;rIx9gD_ScYAw6AuMHQ*E7&tWndZ(mH6k_eA
z<`UQ)5u7iRIn1A%dVIlXeQoLzC=>K6$ohHT4<-aJQExo`t9AQIYVw_$`G2txs&vd1
zD^?s6-SOTqR#hjV{cseM>rreOy;R<9Bz+r=JUD|iMy5Bc@BflHl-iaAp~MUy1H?fk
zXbHopq(b}6HNlql;e;FX&l$YF2y3D$T$e(%S!U-oR@EaL9=d`GP9nA{aL&}V4Y|dh
ztzR;ngmG?e>9Ez|e}Rp$WwE>q^2>dAd}m9>x$|*kBltU)G?md#vxO$LsU{_%@qk7j
zA`UAT4;!jgj+f>ap^mHE8!1cpDbZ@r=rM&%P|cwlrWxv1Pk}m{Cwn+w$vg#{RE6n}
z&`xf}gJ4`e!>k(ftcISzz{C=C($cNT)E{+CEpAK&$-7cckvHL8)%%5Jm4S%l^0)>F
zZ<4Aa@2cp;WY@vFgFE6|aOCjo11-ZL9BGnPz#6}e1X7ux(2oS!u!fVW4NJF|gEE^H
z@2Vmm;Zd<r#^;-~MKb%u4aUF21gJ`S=5*I)_OJbM8=GA9lVPm`B_v1MoF8JCQFe$`
z&Q*C)u<jB3{zLJP^7lz92Pg;(B_Uz5XV78+PDC0AIs{bG@3Et;X<YGHAC0ac;-fC_
zfaS7n70>4Zg)EU>U6om9E%aL_-`N6S9qJn$7v1WsP|(BKkpRecgkWQ{0c8ik?kmI+
zniADjOBgvTl<FS*8EK>z(~B|g4o=e&U<7cSm?qhBfaYj)zvGICDJ=_m$8AaYXxuSL
z53`1jk7TENs2JCwV@hbZH59Lqv;sdFWR<9*L(w3LHiy#T0^+;W+xdefdsk9K+kT>(
zR!)LG*UqwDY0qI)#fiKtPC$%|u%_NDWk2xdNvmZ;sge1>59eApzJ$yxpmxltaY<lb
z<!xyA1BHk(Ox?EH<cLyOm)7w&wmnvbJ?5%X1X4XXcThvm+Mz4|JsvRu{Pj<|vlRo{
zKT&!jBL;CZ82mW&N=kaq-l-cAQ`#@Vjk><`O%G+O`uz;4MmCh(nU!*up|nGDM>~f_
zCA3_bP9^0cN9hsvO8)Eizs1p6#!)r8{2~c-zXZo>hIc}sA;vHRm8%d+krwVWpqo*e
zXkd-5efMbSj)>n=f_e84FCq8@bP^9H($WNFhhh2_mM0m``V2~6`<|0u&Se$(&kW3Q
z?M^@4w*-DCARcD_$mV9+mZlAFvVGnXxdpwNU_IqHpFebKEXxYgV|!O8uFvC&r*Qvm
zW^(>hhf0+0(8zcE<3Gto2%ntOUD`*|f5FZx<)Nssxf*;5<?dyA=BG~BfaX_5*Y~DA
z;xFn(`n(Y5$EfN-6ZS!(yx{&uK_s#WMry+48Bm)o3#mcKrPMJ}i5Pe0U;7Mn9XE6c
z<XFvY3uo#7u%2eVc3w^mhcx}wqSzENJ0vc3dT<zNQ&t}zCj#7{C*?OH{dW5*{-@A{
z&F>95819RG8<wLk${^I@KA6fTqbp=tU2D$FTZR;76~i}w)o<~R(ViY++?N-E0Bm9@
zgKf`HYyIN=^#A5elOSILH-G^F3Bvs^u23f@Ll<L*{|8vNRzunGkOR)|rQS$&52f5b
z38Mp;lM%ehpdB4*gXEkbY}<&c4aL@-Of)HZ>iT|Ha#F#r+}d-^0xecPk&rs+t-^0L
zm|?5Ju6Tr`(dl)6`2D8<KK8s#aRQ8Y<S2~YRxIc9H8D-v7qy%ZQpp>OKtNDzIrSbm
zBL+g*(vdL0#}lVBuNv7hSvP{=qqND4r0s(KlRs`S!%dhJap2lt6T`}gP67SKyPFP5
zK&muPgP|Zrur)@7G#E-DLQXEQNGoI!eX<i(`X`))VE4<@)km;*dm?6%y=Y`ei{7FW
z9p;LiN!BB>HS@J^*RXz-Kh%eb;)=TW3{&FMg}3)NgR0t%&rW56a@JS}cba)wdJD}2
zBDs)1g&Je0KvO|xjP(d>nl`d=2nO6KbD0ZNZ~?<f^jgJP=BCLADYiEpW$}Bwag`R{
zq5*GW(x^xZ6TCi34)39sG;UpHTHnhE=r1X$Dv(Qb6*LBA(KEDu(T;C-zGu+#%K?km
zU$aj)n!$sFXIsM4h%LD(c_>rj5;uirvOCmBvx5=+9a-rCX9sH2jkYJZw-Mr5al`N7
zx6h~X2r=br+(%==#t=E8gmuPy!|A>KexBb^=z6XV-l7(2e?zsL&q<1ifZk!d!S4#C
zEaD%*II_4YMW<CaIR;u9@Z>qxvRr^!G5CYk-&Zb{-QM3{yek=kd$nA%Z99|gdQ}-r
znFX_C|Gl9rAkgTlJsd37JNoA1U8HQe{SvVvvn+R4c^Vj`;TPQD56K*@%kXT_7OiVk
zs?}@49u0Xfr7Dp3ElLxr1H32Oy$-hT^~_iD*HZG_$<CGx=CE9%=yoN(x`dfE?Iqb-
z+yzifb2Vi+*H}5r^l?L3ao=m5C^rqqXPWmO0;SYrmV+*Z<%UhCl*+M;;WQqIO97CU
z;A>FfVtQM5|BJQrfNE;l8gRfaqNs=k6jZE87qBZ*qzEV|B9<6JfJjJU5}F-*S46QZ
zDq=+iRP4Q78)C)YyI{wz|DGgAnB;JBChvEx-0OR9y?og-yHA_Eafn5Oz6NV&`Gk3{
z?J@UF@n_4AZ)9UbN-E2vY~vkUEnEJ4<AD#h(tY*9|7+F9JIv8Gp;f^mexqMDlQKVA
z6x=v6ckA1Yd$vyDe`q}Y#lq6AV@ih`S#;aGE_CSCQM-oz*l{iH&7nU7S08p4?EbRl
z@0csLLDBJ{`Ky<-?|a*SyUVIcQJY6}9d2uVtFzza?uA(wiXNYDK6s$)oB4%7PUCmB
ztkGuWljbigyZ`=GPhqept<#2D0@F~=szA5NY0Y=_G``*A;FxO9zJ3$`Fb$Mg_DL(e
zdcykPcR|Mwzd5;i&X$v^9?JN$bC<+=mtt7UPFEDO7W<SKZnpM3;c@oiHt}nV|DMc?
zTAugf=op(}pGWLZ@R;6u>gN?NclDL8Hwf6!$=qz&{U;AEZ<c>bDKW6|@AF^4phe5p
z56QS$y!w5O_f76|hY#HUvo&A1<;L0-J*HY7DO?iy=D>Z?&`KkJO#eF3dvY_&=hutY
zy$V@5qy4Vu3l6O~FsfZdp9%ifC#Uj_??w+DntRz|R_fGQt@|g3zf7;cyY{pphkE@e
zOp4$7cGloAquj417jFw#Em&^uk>71qpGg~fJ*m|=ySDeGR)6QL_Z+c)?K_tfro5QW
z_gcOEFmqVyiNB+Fcb+zIZfW@Lp;KSK_+j~cRO-q6s<O0_J@&qF8+In`_-bzZZgf`Q
zydm!-cy+lm=$3Q4DjZHOETJ^gt}X+E26%<og$9HS98iN(>2BHv*z~<AEI!GIV^H}e
zT+y%m$K23ik~`ieV_)nD%P?43+39*W(<-$-yDwOEa^jH@n*&p=Y6L#*zyC+lnfpxx
zY>phx8?$gj(f0nw9D03BNK8mbI6KMC?nN8t(G!vbKFx2VNRF3{lJ{7@HSa%*ua}H|
zJUPYfe|h(xjc)Gww_9zA4?cZ*QtdT=q@S;)Zi!8slennchQ(PsXV1$V8gTlQ>5o|j
zp1G}CU;O&=bA;=fm8<5~^lZGcR-Lsjn|&tlDXre%rENgH!Pyb(&Of>JNHSnWl7Ej5
zi=BHe8Xz8<@$zRsVY|IA=Vtp)srUX==C+Gx+CPg~ySX&5zTM&>X@{#ddy*cMmR@C6
zkQuzix^L;KD~sAcNI3oaeTRm}PoM1GWwv+A&e^dgo4;&&;@<z^yn9aRo^tV_>oqTA
zF7~T(ukWAUo%(#YzF6yY_&(0ZqQq5o9@csIGA(QI{wINNmoGF6ua*|780+LU>*kh&
zwhhJ|Y_a;!qSJ~KXYc!5F)plf@0H22<qys$zFggFQSFH?4ZdBN9XTLlqfjxzy<3aP
z;k)hje0P`<diCK6+e!x?ujRE!ynpRlpG&SA-h6ND6276?#%%6#zqMVjzdpNj<Bt1R
zc3!ayGBKE%@$7l0AGue>u3ak~me+ClHqGI7-Pz*b4nyjDJZM#Ec&EAxzFZpB!6xm~
z$-1-sdz*%DS=epgm1DirVh$TEZ&zeIVe7t$c|Eqdjc9CE?e}!E)q@v#_J89#fAGkJ
zp?R-{?Y^FsxXN$qO-WMcZ%4<xAEW5_M&XscW6bPP*N68>ocN7XbMrBSSxMq1@0Wfx
z8a8=w?fip|J)hV)xK1B;y7K_H!}B^!-2Jvm*zc>n)Zlkkh6kEG<B2QRTNY;)9DMmm
z%*W6-;yW`kZy&wiS9oAS*UE1zg<n5w-DyGRxYk#56F+bF&OTSowx#jtoaeibJaLYF
zdb@SUrR_b^noe4CcjS-Y(WY|?n;rfc`uN?=9e1wR%S_+8Zqm%0o1<FRvWmHoTW96d
zV;xHe?#Yk1<nd_Lz=5Tnd(4~taldP6UcYta4pz>C4I6Y@-u~&qPn9I`kNb9;)o^pY
zxvuxadwPz(_g^z!gV#rXF5N2Mxg~i1v*g}+k=1yHzvqUvE!-M+tB>d6GaGLn81vx4
zxPrulk3G*^Sho7ft6R?DXB>O%G`w5$$&_4&1vfHRHEO!-WYpRXiD5OTY`*7|?R{sL
z#jsyT-aq9%AA3tCx-{8$LPXH?_Q`owZ9^xXILl98@Ui;(fWiHp3_`cfFYGWvDqQuo
zFtgIAyOVZ(`n@piQt09Q-6l2a@Z?1`tDpUJ+w*F|!Ib-@xhIkj_it%z<T~<BzXy*L
z>!<gL%5VBuED96e?Q_>aYIkU<rNrx6g!k3O+r|0bRhRf5>yY`{sP>ed`*zv37#_2;
zMq~ad!3wW}pVM;IG-&8zZY=8VKHC3ct*Tj3)<s_qExaGlazX0hkE@QE`;0Zq?pJ^8
z>>Kv?3u+J9W^g~SO0Cm((}waYkJxpgdW|2hxgAGd>^|tO&Bhyj<@Y~rn9%F!d4qu`
zyID0qRCLmzWAXtvL+c$T)AI(NK4`=}*M8f9r$@w*1>Wzohc14<curJKwW;QVUfRB2
zIzFmx(1Fs)dBdNbUedGg%~9*6|Gm9*ym#9E^&cAj&37I6*n_{aVPdz(b+1k@*f>ZL
z7H#=7G4^uZA-s=noH>a-_Fbyeb!v}KiJ@=f5-tb0WPPe+_4dsB=*9a_v{@O>sa?<|
zZ>OK3U+2j8yS=~8wY<5%iFwicar^wTe+!<k=xAkNSh^>rXEaA--SA+nac_s)1#K_<
z`ZVOR?<!uS%#+O@`hJxSKWF;a5O=+oejG9WSdGIeX~^N2X}jLOz8+qIAzn<5_hMMA
z<jLs<zu}qs_YLnD4KB&@z5I4vub7#82A^H$7yPD)SIV5Tsi%xjHIJGW`s>}85~)xB
zT#GUJ?OYAbY|@;+jw*RGw5g+O4evi4O9z{rk@xHo@%CNUH7&dOhEAHgxb2gq<8v0B
z+Ody!`+b{>ubt}88kK(i;0UkPvw~+EoSz<X*6hl*rN=G~NFOYg4IbHg$%3fSS6W|e
zaQgg(9!uI!IO~7*xc{*=;i+>54g65~Ug-j7UiHB_CZgsw_woEUzx7|ee6{U`84u<(
zTUdWg`wvgYew8Z}AH)UUcl@--NfcRcZSyVH>21gE{C5+6ypp_l@cY^C`Ca>6TJ)<!
zuyf=Eo0?HUu~}2hUiXiDU(&S3EYI}V^&h<gOu{opep|ex@A>cz#tNemS*xp0-ra0x
zK<%dn)qdN@dIaBaI=>|OobTz0qgsWvy4J<bJ91m_N5_K7RVJFxeiUprv7^1^=$w}A
z6cXDD)uM0ze6%{=^x=(d1EM+&jjc4l*7SX@os7Qw?67dPuDm9=$;rrx_4j!{lvart
zJ@{(tGdDW44KP~0V`>wp=nIJjb5pJ~bI5j-x^3k>{ClQZ+xXy@o~^Hrw)H!4r)Zc}
zhfPK+hsawFxMXzb)PvK;_Nyiyc8+uX6(1v?8a==FvY}}u*;ZGk<b9U5+q*f{Z&B4n
zcG8IlM=jhvbopH4*6xPg2d0GIiJ!UgNV+U!#@m#W<E3u%>mScdxqS5Iu1(G{uPR49
zu6sS~*s@bs1J@oHni!FOslyVp;<YCmxON@ZIAq-3y+tBd4<DP|cGH5p4_(=`tHoi<
z+kWl8H@Q9kYl-EZ>P_Em?jb(tB`tLH={l+Hs_yG9WVTpp`h8Ej_pTlz_h!njwH)%;
zE3MwD{6mH(HU@WYuxj0w_A7o|Ssrm_d+i>UJGYn&y;D_~G=1);uiX~={kkhZ9FSr;
z?P=lGJ=t~pzlc3&bTX&X)4l$3K~Q|b=JPeT4;>(T_Aq{U$&Z^q?j~Q&Ec*2P`L;hF
zM(lXFVe3WX@cHRJ&Ax1lR<wIHVEl=bW4qg@t+0w3m9+S7a^1NDTxTB-I#y(vcYe&l
z&-o+QzqkC;mUraW<5QgyWycS`YV^0nch=t>gP)#p6i=;dB#utwaGN`R%<_GBrjl9T
zK55@OEgfE`=vg=3Rfl7Zju_Xo@IP+Qu7zWPB=`NSdp`<aR-G_<$uVo6lI;6it(Ns}
zeqd6M`4<nit>OJ?X2aA)x4JE#`moy5%bjNQsc*mc%b7;u$4qA}`}^OT)*TLiXq`5>
z_Owu+1t&$OfoW|g9^#qi`CFQeSyKN<Vdq2B-&TL|Uw(0Z-Hgc_(hUBa5&fs_(Zr)q
zPB`1|w>0TtV*c~*$|n}Xb8`~k3_DSHb=ZuTe|q@sly;o|Ye=r;-jkoscdD^4`ElMG
z2a7Y-T}#&oW%T*bXMfKce4~fmN~>K?OA76t$vO0`<+vj&&!n7kT-tiP>BVSYlfZ(P
zB>_p*GDd83+qkpd^GDbA8(%p7a`n@C&0MW3B_uw1lI&?R<XX3*yyl#V>oX_R3r~r@
z@@YxH?>D~E;-Ee~4jKDi9%l0MMs53=5nbwcJom0!%<3Uu+a>JG{(js4amri=qwP!G
z{#174*L!lQrTych8&bWbiYJD>1b_RCYByw1wXIzT1}#plGi%V+ZpFI=H%In=b@=$~
zF@xRiJuzMMF?!6*OSMDx^)SzE7-_jM{b{WEg)UcPk~Tj7G?E+6FRAh^YVVoIuD6rN
zf8*bZp6@cRL+r0dD>v~A=6dufItp)=n*Y7*`n^&U^TLL?GoQuISpzTqe)-b$ZtY1o
zW;7^>l-@hGq16fQh__3{0khjAI5+U#c+l{$!?9VfI&}CrwZ-;nJN#Qsi96M=YT)8Y
z_li=7pZj?5>x?EY3e$xzXFYSZPaSlA==Yi@E(ZSQ<y|@GBflf4B+q-4<8PJf;$iUo
z%bB8yRYmtNKactRd!koPwEym~QHOf3$w;v6+r=Wx*Rr_ppS~^UiThc+%yFLa=kD4$
z)@KEged>IzWpyxkXV~thaZUJR{72>(@@%YpALkDk5as`AP;N%CvEhQE9g!|~hK*bl
z#_#cF`0AA-K4dg%ZnZyfP{J-rf!m_+t_gQVQ;#k_-g_b^_GtCBSDx7#H93B}V2J-M
zlS=o^-ej!FYGSeBtj~o?ZR-XutKGsp<etf&CPTe<58d$i+{@DWu77<l?mU0a^m^{g
zZxaI|AKNDE$n0LfvTxeBmEY>_Ugr{b`rNe!XCvz$K4klFK)ToP@a?artnAJ;2tU&G
z<=@QMhlAcuoba;r>x<jJew@EEC~kZ~!r{O1kKUYK>ij0aXiZY3obmCW_rKZEcVR-q
zwI%tf?fGrGP71pH!{%hYoTK#?x}Dk*Ik(A`;>TA9?x>${@-#KBQQYiXE@3k#g<P4?
zNwVL()K{^x&EWiIxBtX1;oINkob<~a;1<w(jo;7N4YP;OC|Q58O{=FLx8-Ez|KTs_
zmls-OZ!P<<sOs#kJ#1cI7`e;w)|TJLdmTI)GJfMK%S8Uyujvge`=;HSE?;nJRnt=o
zjr;Y<UqAMZ@rGeRO=Lf_j8Cm-<K{VMeM8rJ^}b|ncp6|{!*>j?-S;bVPddH3AN(=f
ztzQ1TA~+V|y0Frl8DBmaxh*{LX2!iGrLGIp^KWyf-@ANw+17NM!LNP4aIYI}xoId`
z(DUQLhqHS-bbS2$YwfQ0$HZmC?c3v<A=!Q8@U|pa_B*zG&8am_3q9AZkuE&RvwC)I
z*N8z=#V^JWw_kBAhrd~#V)y%iu<Esso8Al!dLfFkm88!bQ0wp24z2!H>E~}?*sK!N
zYVfD;ntp!Dzo`FF2MRdV9}`ZoJNlbMDiF)%B3nm0M>_|B{lEcLIF%kk4X07RF@32i
z_NBhsU#bwu6*|7z6#ie;l|T1I>VOZTsvHgvQl6ITZ#IDcH8W*N1>Y=>5eXwi5?&<Y
zpfye=5z0X0{;TQOZ!?EuJE9WD3ImORj7wu&lp+Wcr0CyrJ4KR$EoJSuG105xhwp(;
z3ye}Thn|8EGC5BgA7LjI#IfaAd_Qm09+rUZU11p*<5bS2=R_(*@&rebP_7V&$wn@}
z{jm3P7^B}XMNKi*yaV*CBo~Lyy!a&clf&zj+~7ED*L-&#J@c+oT9p=rouEfVlo#Sb
zMH*Z-{oLK{hOdKH1V@6dHNyzfXY_<Pfg*-%pe9uI<<Ewn{Q*9f7-Qs1dWL%PNoJn=
z!su?h>KslNIPHoH68M@P5);SclL=BCF0W_|ZE$`s%^5HFNY4;P3&;?oU0d0_f-ckP
zIvh?LY^-|zrAH(PWWuOqt{_Pv<8jGguB}{p-2+&qmYNeYvx)(&?epZx;_`#WLc=!L
zo4GUx?c&zg9JC`w^biks1=^({j#64Z3&b#+wF%L%L~#?`JwEqt_2?1u7@i~9SOq)1
zG28^!ex|La7^P<P3>n{r46(XrQ^PeN#%yq4xI_8UtO7(Fp|?Nh_w>L!F!viUQn<H&
z(~=$`7x3c*ab$uF-fYmlK2S2?gByIuHuMzq{b*|rfvd0iy-TDucoaE&a8WYaRSb~{
zMmdpCT<87q=?v}Lz2I8#fYQu{o)QD=V4z;H0&a{zBo)Z)V%P?+PBxjmD!^&mSTjiG
z+tITiWl@?um#;`-&$&1H_@So2xnEB+w`k->&yl)t`7)`(iO|1XIIwg7B^bOqT6Vdx
zCp{=GlJ7*OYeiSLW;}(gA`sL7xBa~y^bDD!s{<LMp<NB1uJHYr;e+e*XHR+tFG3<y
zl!LHvVrRZN1wMhndI?Sj*XJ4D^blFRSUDkbJE@3S$6);7k7gR&L>*r^9Fzv1@}sBl
z1u})4b>2Grs#j|(2q~Mu<F~`&S7U#s?~mX`+DiGZw*MY0hU}HapzSI3>)uR_!_9ML
zKPDVcq;Mi-T`q9oI)g{M2%ol?XiY+ySbQEL*}A!QB5^z!!%w&O0(A(4fPg0gJHnW0
zHau~%m;b<jFc!l&pmXwKYZ%6DFl+cQ4jjq^OO#2((dDPC!kVcp;~c!Dm23eBhV~TT
z!+49w#1ixQJSSVEjsGNLLA#OYc558aRsziio3!%+CYnHCD;LNhw{nkH#E<}c4sz<(
z7Jx$lXo~@}g-k%1M553WS>>M9JxjF_;HuIsjtQw6QNrnq`_?qh4CL#gHGKzVOfaQ<
zX!eN0Z)yGiVg>;%QH$0wfr$pwCrFYCW$@NBK}zwwy~U2MYMLE3cg4v}G(Hl}Mn8QC
zX=+-nDooydFg<IGxnLX<6Cpj^?O^tpU4NP3-I!{7l-^f<p2S1~U+GBdD=i%6H0uT<
z8LKsKvKdS)rIv^#Vm?tS7}{{+y{SOkq(w8C!$d;{;7sgNe$}4cHXUflfwjkG?CX3c
z8iY7y*uh*F3+Fs#nqQVJ@a(jt`;f-OgSexI4WzvO-LxsKGnu%AiKfziLTAF;^?de3
z$afAxf`WVJKP#DFg187lWTYT6#AATmnZ&|P^SwKuK!?&3JkUMKWC9{h!EAs<=y4f%
z$-O!4NJejAVkvC^29n58X6>^m-3m%_PfICZ?O=kbl(Hjk1T2(tT3D63U4VxiGwv$C
z<uUQ(|AVV6uK8_x4H(ebFnP@}!&{!u!~_}t`AHU{`P_TnDGo%Npk;4=4l-d>7Jykd
z3oXeql2ktrb;TISDsdCIc$A5z)Di?EO)Q=Jie1A%JZ;zf`#2L2S%5}n$wIt&S4z9>
z1<@7(5w8dGPczXVfa@dNrRD+4TLUT-<_^bQ`Hu;w)Jk&c3?v4B76b02mZ}W7$b>`g
z#1XeS7Gt^KQV$sqXmX%+!1O=3kckE`J(H8i7Bhy^Cq#{}GZIzWDH1|Yoiu^oG=gJH
zxlMcu4;C>oDNj~D1hKI8&N;ECkHDb*hC#)nd9VArah>o<WWf_OwwDK}H59jZ{$nN{
zSf73g=BK=oU0`j8Mr#^8X9CKB$k%HIuMZA;K;Hwn^NNY6n!!$3oMkbhsbLpy(>t``
z@0f7NEXYmX@{6G(sz|imXQNL{G#E}jXz3Q4_gScOh*p@%7nU;7q<lPOXX9P!+P}&H
z!M=bY;HgpHU(6`-s(j(%^f@mfD%1v+6DHO$jv?*B0}2Lm`|^38BUdPw$3uUWpupR7
z&*v?@2hFL(#6_`BKU*-G`f>#|fw(tIs>VcA*+OShTWDXpw2vVSYAoms?#;f|(v5Q?
z_GSfEzF8YVX+8iGZ#@jF%fwUW)5NJ#$Jjp<4A)RW116Z1?}7`)!WyppFr9$<{wUVs
z11W0E#8TzA<Zh*98@D>Efp=7EAZs*b;^|dU{`Hy5?*uR>fZ+pKy*U#MtN?2B2tJ9)
zHQfIwp1x4Xux4T@2U5?FH%lDoSQ9J&^;GZ{WAC<%%=ic)te?xs`YPXzU+tsXZ@7=%
zZp%cI^6?fl3$0A$rW=NWP(NUW5I46D(3z&&tfBIo@nVH69(Fhob;C}CO72jJ7!G^V
znF*%qs+3Q|SV;D{g|MLjR1(#bxStgCWP(w3LR_Q^iB_h6efFXSZCthWV8S6+LMT~=
zNt;HLdf<|6_hCY*A^;x7S!6?AmP^-#z(CH2fy4`Qhd?Hr_<tzOSFLIDs}V3!PZ-yf
zH~pEI|7uv0sq-IW&>b!Id1@8Rkpr1vSngma=d<3s<ai>Z$QPsw((;xK2QdMa2{hqy
zMb@*eAt}JpUamMA&cs4ypjWOg|0C)`U*Tm9X9B8P-uf~3^fJ9OiB?G82qvaLV51+<
zZSIV4s;7yYphFZBP-TL|i;`a|-&sbP1770ojAg?8GY4BjZ+2~_Wqxb$W@z~iPgZOt
zOhC1Zall*}3m=niKfiYem_W3~g$tOkVB#qS6iZZfEQ!rmx%ed;X{mO?;*-P#L}@$e
zl2eBlGYWITx15K;#D#kTJ-UixY<d6UOyXa*S6h=h5`_B>qlvEo{TR;#M576r3PJgE
zVEB;2H9*>><;jjuVj`hxk~CR&Z!*^BGO((EUgE=eY#I~mpH5;x7E0;2Xk6DQ08R$s
z@a|aYEG8hVHR;(MJD6~*8LF7IMLa%_i75Y<X4=YO?*{wbt^VsGFHjj7?#GH2G67X%
zif1k?MzqPm(Wy(+>VmtKp-Xk+G*pHK&$poX?Ka?{ViM;KTB(Dl+&e<5F<0^*Ja-0O
zZ{Xo&LNx4LtJu<2Zj2WvAX=fhem29}4`|wH#IN;CG-dCBFpc=^_~&aiFg&zUf|n#&
z8<|*oR6p_UhE3fGVxhJXK54bGnNXmUFlpoqPj<N_bx?B=#X8&uta5bl^x5<?ajSpi
zArKEaXME%O`aMiIk$@LPV%i(0)UZKqXzfPI!Tn4ekV#_&n}wm3ca^x}-#yF(L#~p%
zwXywEfeY#YXtz=_k2BGfDW)DvPE+T#jyVmy+Mp%4^7lT?#FO$AF(QGOWY+4>iJwB>
z+=xEMgi>{h^h;(34P3koF|~7{8kd-ukP9KlMdY)F)f`+*zgV%pPzOst;ie?*bwsrm
zT2RBYhJn|afaQ}fN0J#F_WVWjRLJ&%0E)YlO1GGR>dX>bd}U#Ir?1TDKORup_1)Jy
zOgJcg^jrNIb~od}b^vPc3%LD&38-?<<gTUEtMHR6@U*q_?Gq**YAupRR5!(vqun43
zY=*te_*T0~FPK>Wie+1V3{Oa8@J@%b-_f^)Ta_>&RozT--#Nr$p_qOt?f3^K9u-~7
z_o`T^XD#nzkKEL=hr3R%uS__#HINwIy4veY@&Tp2?t1436H1lKcE;-w7NVW)v+-eb
z;Q51R!FyDtf0%g6Ev{H*$)cNS7_{U!+OjnWV0eH{GOWaqS*k)FDeZiQMJ5+$+WP{k
zRb`@~29<tZ#pKwxN1K4C?Nu(+U?Qp}kKC)=F<NAbwsoL}1K!juGG^i_1D>9q(<(lv
zDz!+0M~0}nOiU^=5cY6#9+ytD01;6S6<?DvXuyO+B9bah;@NNK>6?Dzpl?-i;iFPd
z{Z!_0e79pR5NOfvdAv@r0<kM*DvK>}V_2kRV}gEy)Aal2_cdeU!SrdkX%^1qP2X>6
z^!mwd!30z4r=B*LG^U_CYQkyznBrDUOjRf%Rhj+#-HlM|0hL{NWEj(qiH0OBAB0%U
zoQeApFZ!7G(~b#6IhXP{7IRl@|7*lq7{?|c9j=(;JL<-{5(lE>3zZW40gtO?=v%<u
zRBQ;Kn8X{S>rL=}5(6x>s)h%>aM+z)G3#H3L=w>rx@0alf<Z*9u6U{3vKJFfSt`S%
zvE9e+`u=GWQbn|f7Z++47<|P-sW#n}*A5oSc<9mEd-U6VYWXw4P;AxkBP?j|%xgXE
z3-g7xFXH9TsX!(g)a5kw77OKHe$uWt{b`kiU?w0kYdRzg8K)E`cprrzuoC3N?X5~E
z6Ovl#g>zIw61BWpee`Jh8n)eFCLVoTn8lc0hkJ;j9m_##g9~_PC^Jy$OHiOI6OaWj
zImb7feuG~jWQ7&m1KN?MUo3zA=fS#`Y74|yESB(@h%kkO<`=YVxi@{cuaS_6q^f_M
zF&vAbtayLe3NaH7Z6%~JKo-_8b9qen0B~ex=J;9M;*<y(6EQAU8NubO4;P;@J`zf8
zM8osTTFFcxD*qxexk=*GhxBc+8PNP-&`2drzk$pO>GOx$(Sgg?9@d&GW-1$~<+YN9
znru9|rZY+xPz1vDf7^5>7Q}?|Bo^x77H7C<3iy#s2nhJ1mi1gFlFF`a_1N_zZ&2HT
z+K7WEdbLxTh-&vtq9%d)2^;7e!&l(AK*dw0+Iv7AU5}M`y^VyyMA;CoBGRQyJhf;<
zom2O9J)P;Daz_Y!70ZU4vVI0oz3GDw2SGXmP)xk%@B`L-8HoQ@BT42?{`ulEYF87k
zCXF(gXetvR8cMt4^(vhM!OTD~Jl{*-%!C5VCSQZxGP(CD`h@6MHWTcB@LZkvoX1%p
zUoog9eyph<tS(nPaS-GF%@_-(HOIg_2-O|40fVO{{dY5AR2##{tu57ZdasGVLn~*v
zhE&<d#G}?A3D(5}A3RN=FTbCHMN~Y3XwsbYG`AKHV#m-Mxa=qs6D{ZJmvss3kM~EL
z*T-nNuTCeKh~U16Tk9i?1*fQN0dIbNKf}aQ)!=Sem}8-v_2$$W=n0~s%MS2Pe$quI
z9E>GOgV25{RBin;2NsdF>#{7z*Wghkuy}wUL1<aXge<?(<gCXLgjWXgv&%r#gIZ>o
ze3OZ*8d;5v>@0@XPVl)VvJLGMaS3;rcuI#xZuKWN+CN_kY0)3pp^V>K_xHXo9MN7F
zBl}CQUDf?WJluVL#spH;Af(+y)9`Ua7J*2uyW+i#;*>crnP_r>B3^38K1;7-GW;fe
z_!;|=iGyZK&tmS&p>rqmVIa}Y8~olGqf&Zgf~tW}6vV~Ti!OA6UAwTTs&R#m#dms&
zhr3*^e65ZBJzyrY-yE@q<K&xQmT*zBf6zmuJbtX8{6#%1JjdDBh2}fpdNz);=8Z!(
zaP)>Q+C=iigxA1z4Xu}J21Dfo(%`|`sUAI}{8douYnmkLkz*m#;Q<S-?F3JF%}Vp?
zv2CXGyhJJCWl)`W+{xpafC+hO-es8AlpYZgMRtSIphba$L=8BcUi~$F&q%mCfo@{J
zsdCW;kmW^T;Zwz;)A=XBT;h#1N6Xoh9wZ~Z*6PvZNF#r6H~|)#C1!vRJpvSfFOkXO
zrG)A{WW>2Yh0uKn8*ZRsnWg>dN&nPYC}!KUEsgH8ViD5kx|%tzm6#qv>9d_8PS@>L
zWmlYZlGK_#4oqep{8#u5dUZz8W5C0dQ!*Bo@_CkBhp8PnoVgD))%ZygJwj0a!bBE?
zRadQ^H3A_%H_;U0@P-NqNy-~p+21RABY5734KNkoyfqQF+4Km$qP&f;kfQD5up7%D
z5eNj;!l$C$5qbn%n&;x^L~wQO*Ep-YP?T||fmgv792%ddM??rET!ENhUKAGQZZ@UM
z=w6U28pC~g_!V<4&e3!DJh-F3>>6GcjDxpaLhivuve%`Wp=*BuJp&AcCl!{Xu$UC9
z>-*nDf@)oAp()9S7xa{fc%dlLPAHC&C{3M(B=6oy0*}CbF1EnHCqDZfJwpyx3ziKQ
z3o-udXix>+mw_e)kMk#fRDh6+5CU#UW`9j$(!;47M^LRDPMU+Y6gI8Ug%h~1xV&ny
zkYsDKi6>t|T7(K8{DR-+uzit^(a#C?j1%0A`m#gH#Fj8tTfk88y9>D{^aM0ee3^)(
zm^wUrsIfH|dlaNaxP{!QM-M?!mu%8M?QS!)EezF35C#`yP-A)q${=A%NJeYERU5@e
zfSiKSGRF?47eT|9Zaxy6;pScTp0~PB)2~J_Qr21{WeF#g=m2Px;uS)XF2$w4<B?J-
z)g6zMVAY0>ArtV0QUUv09=B|;a=QgmoPq2FZx0mdAaruDMFMfr4Zo~U;B|V|Nni@I
z0vAwe;7o0p1#(p5;36#cxXXsQvn>Dx7bj`724;6)#!=Fhzf_z(H?gX9u``Tn5M(co
z<&>{DrM?|A*G(-Z#DqA3T+WLY!0qg8b2Ec4KbFH4#+)_qDc^i4PRZ%WjO|QKW{gb0
zizGmHYU;&D$kp({^~cVY8R_7n(jQq|Bzp<H-&TJMmoIV#gX_S1JsaJaanyuT*{JfO
zUDhM}WJ+>=1K_TJ58k5~+nJf`s1`FahP{+OyPv2*(eTX!pSm#9oYnIvjSz_9*#k|@
zZ*PFQnll;-M|(_P<GL{e%jqjzv8j-V*h6nUwmPnW@q`0w8e@7H(g7ytM$IK(!JhVE
zU`}vjplyXudE3ZL$?DBaqijQ+a<WI}+TQkV2)I@7!I%76d$L0&IHP_qd*b{|Vbo!u
zJ%b^|g<S8&Or+*fc`dw9!X8;AV177q0Bf~`JllsENjU(h7MxsM*%QZo@y<#I+Efs-
zymQS=@$_XTQbMYh<=|3p5rLqg3;QJZ2IO8y@NiG(<<E?zTmZ^oSbH4DLk2$I0f$<!
z<u}R}r@Rhe#yL2t9IHeYDHQWW1kT*S|M`Bjq&f-Q0Isn9{h67RMM`7&az`ijQYK9v
zY#9SYJ9vu$UomSN%1lIem*}`FyR4g#>9}AdEI)9TLd8@*Y!s)w31`MoDg$9d9xF%`
zDq<W6@{g7BQQy3wI==^fEZiQgxy)Q@KvB4oK;6b#Z`=o3jiL|8g;HiDWsh-@9ogd=
z@FykZK=GDtjJl}h-!<`*G2_aOEI)!T<wb(FMzaS`IMB5hy__*g%-}LP2^4kS=z2Gh
zFGp?;56O>`nQ@f$3;3u9&Uzky^{^?(1v~uFg2U-pZeWX3hK*qcmK#_(q>w_1SRv%c
zvM0yfil{CEoAiL5DBiIiH-(w3;7i1i1t27WampHxZcarIoEI>YnMci}Fj7D;vJrk)
z-q45TGqad^R3;D|7b%R2Vn3q0strk|*HzCs%tT5;bOeF5>U6KZa>4`9Q&^_cn7~7G
znQ>0)WEDMc#GWS|VKX!qcqlrS4^^2doCVB0N>!=uJ$q)$B#RCLP|(KEz;!5R9+@du
zQ`s@WvqG^9L6RUqMvlI{_8oY;WzbA=!Kmw2F;g8JRY6&v92X%GaiubW9NL!zsonLn
zyAC{u3GEI(0Z%_TnapTvQsKcA_T%eVy^V)C%xNxs%2x!LDZZPSag>q72zW9@gn&no
zqxX$C`v?|CIk6yP`Cw9<a&a>=lu{&^RJ4siuHY%+3FdX)@+r0H+Y%kNGlMB<;dv<b
zgInXf%OEtc+reP)V6uJ(Gmfh7cu_nNL9oo+;bGVdfF)Y9xgUZzQ>jG(;i)*)!&L00
z?DpuP45`pI_>`Z`%oKheGn5)s2q!R;V(2jmNvfbejUqd?gP~mws)QHoZ+0<*9h_BG
z8ZTroreQ;lZ-1bnQy}HTS8+;0J~NFHGb(=cX!g9}3mfgH50^IknR#Wwginz91Z=b1
zxe=!Dua>fIIKa%K91kiA+}I1);+^M_ZUB4&AG`|5Im8V7r>x>=p_srPt3{n^oCP#E
zb*~XjLXI#K%cbe+C0q7#ikB31-3!!vK*i<cA7iFciUZyb7LM2x(=4*%kQ=B8M7$hH
zIl+zy4~W4bAA)3Z+IU|{JBXM!o8i`xnbP(YGm;uw313c7am^|by+%`c0z@otjhQLC
z&#~j7jxYNmJ<)twiv_@g`<*nx@{tS7Jjy!cLW1h<TFAY$Mu0+Z<l$jC_YyPipUzN^
zi?Ww7$=f=-Dq3rVN)}fe=R#&EHHWB*6$=vCBkv`5?s*eBAERK+8BZxQikOj9CIGVt
z%Q<lbQ(4lx<5G7B8R)7VJZwC8z|5r9CL+Y_CEQgn>?^$+pY(*8M!9hrJWt1-*FAY{
z?0wLjfnbby{`l)DGmlbKw35iW2B{)5+lX4&s9whHu=`7993>uFd1uet{Gd)1<V@j&
zwT27d^NN{A=_st5#Rz2R`B?T;U+Iz^2{5SOJvCf-(Hmx}6V<5a$>oUz(|DyIc1nGa
zb0vIm!`M~AOr#tDw6Uc!*qY5=${v3%9HW*aaKo^F&&;IeGJ>F39&Bf0kqhpv8FZBJ
zUR~A)W*TMs;BCP4;TdSuhhVL--QU&u(FW#n4zO_pIa$igr8+!B{hekF{<eTu5IDO)
zVR5G#_?;O?DJ=B{F>48f#+|5#=23gCZthQJBsGtbB&(6*^TxJ79uBQW;x3@dZ)O}d
zpwKcSST&3NRA1R;$<X3W_`}Sj#6xe%vR9a+FKvU6eA>%9-~a01QOy9JSg1&5PyF_2
zMJAd+M8s7z-k>UD8AnMd<9B3_t2B0)CrTIZ!v`-@iw$+))B-9W&twnW*Z8q)B)}$v
z8J0Kw%#?+dnSqq)mw!T;J@>AmV=A0v;cS2;2Orm%s?1!<jYBVoJ<h{y`!Ljigm<bm
z#&t?fW*p_im8*2@fnU0;PNz3~PAzso*x1D$XJ&O}8a*z_m>E~5rUdQI;kQdxBiu6h
z;C|+PZFV^HemHya{0DzuW&#@869NSu4uvMnyfVMWo;KFN)q&p2+^NS*qijO8GoC$B
zzShD%8#-|2KAP4r$ds8#MJ7H;+FfV2^{8~%AKkx~W)2nIlo>}QrYfUnFW~zjw)Oc)
zSzr=zbLY2VCjM(MBoLTGod&0FwgK;ws#RCCYsZZHH=YEm8>Nw{N2t02?<(YWV5U*V
zr`o;CemG}MzcKD9$TuDmHhehk?3jtv1V%a$G%=nJFxuP*W^WyQ@C-QKi5W+EPwEY9
z_9D)o>?=P7JaZ5ecQIdJn-^36l$t`c)1E!=;~np6^hV#zm6=D$sCw+3J#mh4a8eVH
za6No*r?%XUnMkQkB7sRrCw1O{4gsgYvOlh*W}TU79o2P{Oc2A96C{VHn@(IzpE@n<
z!Azv&gM%OJhjY;B&pSP!UGlYu<`&nQz36eu<zcdYv<*Z(*BC(%Y6Q+2-=Ce;pB@6s
zh-8R^B^x3e!Kyy5izcEvyk0`5_|PRFLrm&1mNyby$NiR?r;8KC^oU?Dch3MXJ1Fy%
zq_{}78`@(Qm|38M^(hc;@ZILU#?qryE4^d_mCl{8?=DP9Ms3Y83!O+$Q8ma3j!DOz
zjC^?C8VZ3$n)e^foJo&}fo2gn_E-TIwmnJVtt~#=O{Lk_M?`pot<Esh6z9x#dX{QK
z7r|EQFQ#X1yMrsZ*IsiMP~<LpgnFA=xrt$Mo*{Vg@H&@Z>I>~OuOHwXqsO4WC1Rk>
zqJ-xG3ctLw>H`S|dcg(X<Zch|5ztwVQVVQ}?z{~iUVUIU*txxit9j_4;37RFGN#;^
zRd}p{eg`@whH3{o?=?LE_3M?ZXzVwkC#<bI_XA`{VwfB}9PHN(@eT0|3i052I@?KP
za<)pHwb!-s4wxBqQ-d3}kYD$sPO%1s1o{HdiR-I;wvHPNM|MfhSmd<M*-F7(F}P!?
zPPlK#|HL*m|2AVVSo2DBt_NfH`=OKV>CE+j)pf3y7m2ui*1TK@Cn7jCpt{DzHQ`jF
zwS;miq!c&M(~%l$U$S>HPKizOU>%0@3)uM86|1V~WP3W1sMJWATe}*dPSJqFn-^z|
zbfN<F*QRaJ16tky=2H+6&rQ3V=;RIx_Vwg?I+Dow)i=yE0p#=pgT?djL^GW{5L2l^
zgwuE<Y*o$zU~++ptI$AmolLd4>Z?N6>i6_|3t2JRrjB>P23qN6`}+HE1Ic_-c*L+Y
z%3km_zN{8Hfk=_`8DWPP){9EiE*RIM4sCTpeM5r!5jx;oulsqvr*-+`?RD}7`Rn2G
z^PD=wQ1;mg^L*D_brY2?|9`O32hzyyumG)eMELjyb=6Jx4fKI{Lt>??jb`<NCwghL
zcAPsq9--F0sIxktA*AtLHI6)GrkwZC3539+XDnS-!%5HvJOeBZaqw9U=&uv2@(duT
zzVv$2rv<^fyK+|X#O3)wopdU3A)42w%}Tpac7q4BCPQ@+$^6g<3zH9&!QeTPkgpRp
z$RE;_|G{1+9h>yx4vcI#q=a~$@+4X(9MT0n@|1YLU9Fyi$)K$qxT9|+)`=X1OcdlL
zvC)#nU6SiV)UE-!7#`KcQr$o_!1`<MSV{Fpsp^P|?_~XusFSVALG=x&eJ77Oc9GT<
zei+LFjY194F#l{Jn@S(rT1?i-Qzb}5wZ+BvLn~3$4DRX`vvl*6uAYcDq*#8FKD7Lo
z%7O<83fXuztWpvTn{bo~C+_sVF44_Xhi;;jbMwP*;gn_K*FCzd)=7lofy5~9b(t~~
zcCB;lpo4>_x5*hSSb9}Rc~!nYy{;ZnTw_LM>13*sFCrOlcN^CY-BqBS(r($tjz^dr
zWc>(kaZ@cI9<{!1*9jz>zq}^H?oh=wemc;0w{Dc)HGP4@O~E_b{JGCQo!CLBN+1i)
zRlVw3KT`)Q+$5GC)yX4_Q>6z3sv>pK4vY_u>trb%D4`A3l4obVrUiC5#TG~uBJRy8
z7E+NIPj$we(G66!gY-@!r=1VnM%8<G8u0g$Zn!GX(l-__Xb^mmJ{Hfprkky79uN(5
ztwn+o`k6g+TQ^TtOcMd$bhSxGK;-IhJE?U~Cy>y~^?M|aenG3Yp$~Mjly02RFbn(a
zNu<;k*PL~aSOEX01k$#7d=zYs;hfZpldWFqWTS?j9vS-Vh~zg^v4^+V(%!LP>TRKo
zuTQ;9UkSDTtdpzmVCo%Nc4lXoQUML0<cx1R;mR^h|K8%^7bmCD_r8umN0n|7qg?A&
z?fHpv+48+FJbIh_)d|$UO`LaQ`!f1!Xldo@I^|SWV)}aEfukENpmJNh>RehwH(FJ7
z5+#47i%lQUNApKUEP%>>CJ`{4)9@f=wRmu~tF05LwjRArx7+goOM3X}dOG3iCWhYd
zDNo<?=_{q-4Ryk)_7KrnZxSB9c$K!2SlLu3QI&=g@y3TdjiC%j;}~vBojko)bv&~p
za_ObK)K(`|*{LC`DaOvPCZZ~AyyC55ubZc?c!|=Mwyo38QaK@RGcGQ=iRxyxzAkA*
z6G!*ww0X>lE;`}rJcdY%EOLfTNrYTtOl!@}N44R&GhLX$PKFY$%qLX|oH!QRiqGKa
zIKB(yg$F%Nbqx=jh4Zp2M*=6ApLhT}KpOSaywdVe06nGrW&`%yGivl7;<^!5vQI!B
zMqLpHbH~X{`8JfEgD%q}xk<0F!_bG_p-uS;gu|}{{4#=`0Q>m}=Oi=oc2l&?+yo@S
z_YlsCp=U%3!~z-I_{vq@YpI+Y_V>Ybd|d2<j+hofRe+0hek46kd53ij$*@iN*z^}-
zGy{=v23JJS2qC`YaAfetM~7gtpTGydqy1AHJp&DtfNv{BH!cxuI0_xzE!P~{#V|S=
zTg{B&+I>0;jf-?*V=(kPO(;cH?KGJnr$?aghkHQnnKymV6R5|2RD|m~2tiVTI3%R6
z4pN!%KY4ZeQ1#}pr%kB2l;EsjmW3h>0NL!Mar%fx*^f%JjK%DMtmVt7_WtlAaM+Go
zi+z>SNpNr(COj3OL&~yY&1iJ26}lf{2Y4gA{tH?~fDIACMbrWUZr*A4gM+|TpluKM
zEmhfT>AC82(rhfCOuQC>MMq(_I7eG(S~EA39s?WgZ3Rg@Bo2%t>+7(-4Bt2WCb%Ye
z@IWJG^oNcAbk^L@kt}AcAAdb<0}#-qg81#L<9E;#29g0R+79c{6280&1adrxC*{xs
z1WA!RxE2K273;l^LB?yY27{iDgh|4E_?KPu6m%6486!5%?c_@vNEGgBGS(cRXP~<{
z$QV0(S1fN13j7p4`2E@sUeGgC58I&IqDjJp!RJ|z&cS`S=I)wz-4A_D&-r(+2%$tn
zjOW;`f|+RzcL3otGvx<835}T4jYJwtu}h73P~v(pYPgOi8`PjR6U0#7okS2?JLk{n
zwG85SE`0C~rB9`bDFVJUK7u%mFKik1{3J*;M@u62%Ji&%F9Z-sl$YCOR}{F)d`N%s
zx#3o&r=X+kWE$OJ`}ePxfZ<+W(<L`GqGu>nSKE?d9A=!4n+^5!Laoiu-X`=IIAKYK
z=)A7+zK`Hvwv5%3q^%h}LK-Vn$dy}c34H#WKSSax!L-lQaslx+^cW-t9BBqUBQct|
z4~5Ie!^HfAysHVm&B~UZquS1|%ycT;#7&>XHB^7UD$~hwqW^xrf^}Y#a?LY$HT?J!
zkYG?5BA5#lQ(r6oa*-sOtGqS<iqa_Ngsm*r`;Rf`9tdCU3DZICt5%Udxm73z+-c!x
zC+D+1@IA9Qc<UiZDE_q4bo<LY(?h7s0m`Xxg>zCSjNone5O^?$15GWB>L9N-JqPZX
zEQhFYA9@*L;sIOU9ylUU9ro_yGgGS%J>uW}V}z0A#>6uY58!=>`T?3=-)aCoNqrCn
zJxRbivk+Fk`tla!F9D$0RJEg;|H0Ap6xDdK*Dy2Zs$u9V6EVC+fk&?yvGfFi^4cV_
zdD$A3b2TOqHqyg|6nJVJC!?pRM@xCDDeK`f8<Nv&5BOm&oT;Mf8`W?*9HYnl>km+E
z6_NzG<?!B9P}jIvE4%PLLytqFro7vqwMcJ8xBQ#K_cwRYjFM;1(=#YZ*lSt){%Kpz
zf|j)a!^CyK{bmIW<&^|vI<PkUrul2ovR3h$=Fh)FPl0<R$PjY`ciZ`cBMyNNo>F9f
zqDRQ%z#YRSCrPZmrDKqAnKOv7+*^~;=QBM6-A_R#$B{k<7LEm%4_A(Bxcw_eHEB~y
z<xTEn5SNS^wZ{QuC(JxP>l<s+L)7oU5uH6Uc(kC@AN<P=c&7{B(=)y<J*Di19YU8Z
z>pX13YZ$RuNGS1O*|rfqN_jtGxlyYyh|wn&)TpTvi`ZuL5P2M2OQ?LdlKoMq)Y(Br
zyI^jlsCL29qf;y>{IVxdSj5b0Qd1*8u>79jW$<lfx0>sgNFE2tpEF77$KN>hO9bfL
z64(ZgF9uC-ubUSaTW&lF9$L&yUEMVfV!;{s;8KRz>82{Bl#)pK=}o)P{vahh=A;pd
ztR2|!1aOX+pqRRAW>jl7q@y#nCb7tw4Gu1yCo*fxIMZ2Pv`TZPD;pjt4H0i=_;AB{
zwDL(k+3-L<A|-tr8uWf1_!4y23x3c&qAwdB+(<+)dzQD%&eKa59L$CW(h+IP<AH9y
z=uO@;oDC0VkBB!%KC}TWGtp@0#|Sn&^x7%Oc($**l;aJ?cUa5#a%0)>1bi0CNgora
zv_lmWhDhjfu=K_1@M{^PG<fdKZjjcX54Gh5{t7i`o=yh3H(QnHij)t9L<(fg1!x&|
z#}JElU;=Ogv&@aDu;Ef&q9H6)igr42W%Zl<$SV_9n7DWFp}e#Tcajy359dyG^UB1l
zTKLWtbcBOG)aAn}-f#sA@oeFOJX?5^AWkTbhnicbpk?6h-R{Gy#T*X$Pyt>AF3<@E
zr~?V>`-%T%P(o6B)m1E~cmg4bm^-iDMHPioK5D;`in&@R6XYWw(2#ZGJE3<a(1$Ah
zRKThUY=lIY5fRMa)>^j~Qu5*Rm!cB~@)7CEkCIo-ArIuB4{j7sb+TfF(J@>FFIu;3
zWk%>fv$-+c5zSc&EqXj<4@{&V%5pE|l*^_o%stD@0L>8f2lt%O<LFUP-LmqWW#W9i
z-on@$vc4bip==!f3ZC<bP6k}r3Rm#Q$4M3Fl1S9KgQqc>eP<cC;nr2N+JfO7YOe{F
zP0%HrqqA+4j29gz5W`{=#byicb|PbBPteYrO*K!9Rhyy{+{qSQZ46?I1<?|P5SFQw
za<gThyIiAcJP1A9P4n%8J=1lv9hGdZ#*ni`8}F{$8(x;?oPsInj1^7G=jcRNAU45t
z@2d4HCJjb?Yg^6hDcYy%!aH=b6-$W~?6I*^Gq?(Z)1r?ivE^c2M8}S{{CHUcEC`eI
zqrDnRPompT>qG5^r^OTCstCFz;WB%5bh3q)*hpwkzeEQ0g-6$AaO)zzr@8tXT{L*!
zN-C2mBz%d;mU?W4gkASm*I;xVTN6volcguG=wx@c<%!6rQ*g^9XgheOuP~+f{=wiI
zI+2dHa@BqX5+N^3c3%(yaS(WW{CH<nkuIX6tIAQJluP}P1_}D~y#agC;}(BljPVoM
z?zi<s6WHqL#s<sepvNtsT*il5a90-{Zu*jog`~lt%77)`I|5M%lS?H;swmXsfi7a1
z<q(KyxuMG0>M*zspz&7zWvI-Qn~!t?-L(8a0XgQj{ir@5+fVr5QycJ1Cz(D35YR6a
z6x0cULEh$5mMy6Uy6OvEbcb?=%QosPYuxVi1Q_Qf&C3ci74J~7E}o<II5T7EGbgHx
zhBB$ll#L&BVqI13NY(Q<BvvbHwQxDQk?&!5O=0VP)J1iGh$9k0Lc`_7D`1Z#!7}LK
ztGDheJtK@Wp298sstXIZscN_=0%ejt&kf!KvsoL!ROzIe-0bhVz!3RRGA!pt@Z==h
z$VyJS?&<*$bfTsQmd2ci)pF(->)@tx%Cw=6K<?yY?Y>+FZ`B^02USg}<WBjm^EZ_F
zM`mR%mnoOr-?<Z744%U^al1H1x<oEZo!H_U6s<Zu4YZi=r`dr%Q(Y&{6?uPK^j4mL
zESuST`Ak|K=#f3F8sphaer;V;+H!zkJ|7-@^8|IH+rYvo9t>{R)5WH-TLN-$s^fb&
z*2wAKT+?GLGt)(;w3tgJaP0ShR=d!4-c<0G)?47N8O(^DG}DD;G$OV-cI@nq;vg9D
zvG5~smvyh5&L5zqV*~@<@AH3i(5}risD$u)p_bX|0^>yi0rdVl$=t5c;9WRc)1q$K
z>x636*lfqR-un|#rQoGR(5S#IYJ4YMRCvRSA1_x(;*fF)qmoJUxrbKgs@Dege63-A
z+EphTOV$a7`M~j8!@I-WqNB=qg*&8&PG|)M5dpq`O!N^n-eIu(jq9{gFP(V0@n$>G
z4Kv4^pr<3zt29)y1OE|{9WgvV${Z54<3C%fU+hd@Kft(v8B@(E71hIwo(e}ZU}=Qp
z_=jJDps+3687&)IN#kh7GjDnZwVQy;=OxJPV%Q2(G<#3MK}d`H!A@v=aeQPgW7;89
zCNJ>n6u~-H+ZSD;x&r`qjr`j{tV&8JK*xY~o??U%@Y1CK5<+QI5*uOs*7Wmx93-%O
z59hM{Q=t`sdG|(5wK#!ZgF=*Fd^c@FSbUNZ$DlIW(XRYQKYs(mW|hE2!yoj;Pa23f
zLu$)GAADQlKtHW7R$nme?b}bs_p1^e^!?(Y{rTZm98RzZ3bS%Qyg22#_V=R<Ss2ac
zr}u@ghF|>ekD2<bRf|ybW3_&|L~a`?kg7I3R=DY*EI;eKk2Aj|d^_x_)7ZK9pu+Et
z;R$2o)%vLefkwt*`IkJ{AjTO0pL*p+CNpKQNbBc&yZ6^;SSVFd4a+C(?}e0|^_aMu
z8k9srD)$naZ}{1TUU6DK7=5wanTy{4Q0@HEF(PO}J5P4zp(XZ1O*HrZeV;%NK-Ul_
zQRfy|5OSlM^|t8<mBtbS4G|X2peH!P7FKHeA`3vkyJvsaLIbVOd`%Hd577fa1c8jY
zcA5oYcZ<=VH^PR`XCMZ?LDJ|REddrJxiA~-r{QDUuu;~qulv_f&3Uf=nwFq&B%9|^
zbJ9jGg}71(krlt6J%v+S(`hOd2?i-1dT#7xsB-kG;)xYF|NWYyBsHW(fD8&5ygSTV
zS;H?y7I#!Yq1?bwLzOnStcXCQO4idxn3_PY<z}imN={2F0w~uo*vk-ad%VRMKpcm7
zfLrvkm9&URM{b-vnmr)vP2&+0B^=IXc+m@2R^eJ&0L(U-!G)zZ%74`fZhZfsIZ8e2
z)~QIB(1tr*La0KdW}Klyq{^XA@S{bjp3i3OSC^SfX5_Si!&Iv@ml&=xem`KiB3`mU
z#*K8;B@O5hr#c5o)52rrq(CRgB=2Zm_WoSPBn`}rGptjghr!vyq5}QoKS99~p<Zc&
z#kj>AbiyLyqoV#@$j`zvj<tC_{u|`WLtsT5hke+>1XBsc6-oFacF`LRV=bR5vtU~r
zC#7{+;-^ZL{c?1}*mKspbgeZErt9Y!P35?8KnF*y9CBy&^ELEk)t%j7zKUSAi`wg{
zl4@}Y6OGMLl`<8SwkZ+ygM>5zVm-d5X7h=Of|h9=VS|k#jwfX=Q`q@}N?Aa&hj4)V
zpnIjXv^dDkC6Ta9sLZ%nDBj?)E4x>RVM^7CXSaUP5|l^tp$v_ZutiMY^yy_W6f;p!
zh~go$(=S>Ca-?y5SiNU0#U=lY?-!x_IS$Tu;K5*QB@<dt>dfUw5Tth(a=R2=1N#gB
zXMh7%H?9ak6m1GuR!MvYIu+hRbEeN&(gGly$z=)xU2^fsZ?zDtett(yf?+#a0%$BC
z2naJbam|e&y<2LdInl43X$feed2%s91ZZmV^Scz50sWxn!;QReFIt4^p)^7VIlgJ`
zuT-dti<@iCwpm|V3d$l$a(Rb4eV-p{3May$1BaW$uYt4xG*Zg#a;!~aM1f&HYnblO
zT9aX-s1SjchS^))xY|E2@?nUg$7>GL?D4b+&{-B~B%AETBZC%ze!n1&b@pO8&h$uc
zs1&l{-7!4sE@AwB6$XqWfuQ&~Hu!aC0r;n#LQPng-%P@&VSEvsd|^HN4r_*8RKV0s
zoKm)9(E#$O%oL7)U0R2z8aXwL#VnPDL=(%VjnUbcBv`J%529Za>1MG{CyK6qdbk-l
zd!fF=XG<p2%^`FFB4?W~`ypV3MQI8(7Ua}uj)8UBt5r|+FZL7Fl_QsahX{{eM#df5
z!UaqmvaF@?-s*+X&=Xpht~qqi7BNxO>VT3L_97|%JpB9!U>D|TI=Ae-^e}L4asj$4
zf^ABX(EHbr$I#Bngw7nE7d^XMAp-W@vnM=g^Zi2s%nLeag9rSk?`a9rQSpL!f*QQt
zHg22Eu++91GJZS+xPPVvpb#L0w}siu@Vnqa>H^SVW1$w}SA_`F$7GKvcxw|H2A#lu
zUIrRcv^A|qYbGECn`(tV2$*86(wh-l2y|Ri<^Boxvr<!_Dvn$6>A!hE-;jPXNm8;7
zM44~=w$6R+BJf%M@L%B@iN@+ega}~6pUg)f62WyHtgq9VyZGb$k)T$u%rzZ<yikWs
z!Kwn8J!@iQo3RVPZxzC>Kinbr9HoO50Orn%CfR6l_Kr{26;Pxshe`rpRdSf10~RPq
z3;`Z&%pIWG2*6&%o&$Mx>H_f!m=QjIE|YXnJ(SyLNawGhUCUF^Fs9w$1Tnsyd+Q7x
zK&569sLI}$t5?uV^?6`x)FBmBjxZ`+2TG-z{(@w$BtE=CNHmcyMICP!nQ%CvaheNt
z3zpMkAsYebXD5zlZ3Qi=UCg)v(>4Y;<!=@!PC2@jo*|C`3O7*()j2#t%6{8;@rXa3
zj-Zy8U?9scI~J#W&ZQ^C#YPHcws1U=_0>+R;!39f04H+3v1X1iZZ|zc9&Z~ZgbhtH
z0!o{bIR}L>UWe@Q)wJT2!UOaap%^-90%gpu(A$=|!ejo``({CZ#t<q*d`)xS1^Vxg
z5=!MFp*WU6h*#@;a+6NLP{B$+es#gzLV5^HJ71P8RY*wm%XXB-h~H4Hch}f)Rh%+n
zaed9Or;JHd#uz1$#qkuja!EXN?AZ=o)w|JaGa-9-1oJGfWSJ>PSJUG(x-=}NXY%da
zx5olwDSXPORK+O=*U&Sh5;z+}aHzLe)}W3)sBH$m6gSFw8T5oGp*YeuQo^@|w1?!X
zhrZ)XUF;wTX2L~6xT<yBOiz*vL{ZAaFzl_ext+sObb%b&6OD^=U?)99DNZ~bJ`+UR
z!nzsjhb=q3<T-T)N)_;E<)^<mMVd!X;>V(exhMj|IdZ{v@NAGK04%h;;S{GB<kK_a
zVwFk;oj?N2JoDv^<Ds+C5p;k`xl}Rd#XfpWqy#(}Bnqs(Wmxt#aaHh?C@n3o$Z+=Z
z1U(`y7Oi5kCq#zbFkJ{aPt|icp*W?^y^08t0+M0+Q_!%X4a`O%%zF8fx;W*li7AtR
zQ3o)#j-_8t=y7zH=?sW2c$G80K0SvoktP!il}$^Rdaz#2nE}F-H<HYh4`%d$M4=*v
z8^sfeB6xi8{5nEDeVNc0D-)hKq9?(N$@<j_lzpgbh0cu`zCMW6C8P9Gl$}&G;S{?s
zVujIN{*(pe9+TgV`2rK~0X=Q}SjA`7tbP*Ma-?I9%80Fh-m2dV986pA0Oi%KI3>u6
zeh}kgWqbm4Tk)>e7k|*_v$Zun<x}g50LuO51YxW>cajee7_A_{l+VzMQ>M42XQ=%?
z3S>N~kU*U2^&9+{1v8WcGlV~w*QWzL3ZChf33w4A0aq9Y^_422<rCzyV_$bYa1QE^
z*|zuyW~Ov<qDMlEhGPPDu>F^<*U1}rYwI#lf$Ol@1i#@pycazKzMKyg92bUAcOF1*
zO^q<0(9cf`1Py$FOw3cegbJ6==)awcWh$4jj^W$Oybd9PDtc9j@465JKpxux0=PyN
zTH^2mc}G{)ZSh0WR}RBqejY%O#*YN?p^rgjvW|9+b`Apjf5WB}jE3qiQwZg-17E2f
z70O)ZByN0~*L)=;p|{}E6<c?A8c0qL;Kd4*2}HlXY=1z}*he?3K+MX94=%n(s2)GS
zYk<35a-1rCVIh8-W_Q-^flXv%yft4j-#>_)?h({)uy0@=X3^<Yn!1cxrEia9<Z$&J
zjVy$&5??xD2>8@DP#*Ne<~%^I4;N183X-G}nL-e0r@AYQ#gAC~u+_rrFy|idL%Lu;
zqIsfTKf={k5*5RqZ@(<;Pd0e_m9UP2EB?r2z4#q%<-8~X`yVjUsLeh()EE}flJ15L
zz?=zs{QyT>I87zwv;PJ4>;ihXhg2~SyiX787sOA~=NC9S!ntAr<X{A9a3*k<ZC^-I
z=0l$XpN57r_4y5OwmF6eJtfw9_-R7x^=QvCoD9^MhN8K8{Qx-P1$yAb{udOs`Z9SF
z{DJ~l{J<5#b)i1L01iYcc&J&xdJGoVKDlZyD8g2-2X{;n2Bhot3($EAfjW&~|1*~E
zZoSF}e#R-#2izr0U#8E`fO9O8c!FU#f7v7C0Zc?9_(gmoJXY$(cT=i@Gy4%(J`=8E
zhY>(K;qYIuG()dn&>6KpBr^8DV4G=Wt^v^BfHLB$&~UvzzW{Cti4=&0aY9J<<m`XO
ziB#9w0!T>~!v}XwX&d$V84eErZaQFX6+8W6?9s*Lb-_J$$E-rSNuS>UC&(gXl30P5
z{V=Rt-MfcB1j&Y=mH45i?_0=!LI6sRM#?3sTUuDe=sNrInuJ1p+zsUkeuyl88#$iM
zB07C?L><diB}d~9le3}ktRo?(CsTv2BEQj-jPi87@V(V)r@{|EqMzVOJXM_N_#I`H
zfrVk6E~BC9J^`x~L74jA{(t!${mLSQx~IWHBV88{Dfko&kCA?a6Vcd@x_9RPVQ{GK
z3X5NIuJ8I5KfycQ)v8+p%^MJxZ2|6qzTRFT1DH#PvdQ_{J$fWMe}}>){<_%#3v#+|
zV8{UXzB)=adIQ1RW(m!7z!mULfgJW~>(D}a7PTa-vW6S1SuD)2Y-G<=y3{TYMiyNX
zh5Nj&mTZN?430pjLXI^#42sQ}3w%mg_$%xq8{S+8+f$M#7D;%Ks034A*sMc|(aEyT
za|4E*0YM)^4~lBzs(`y&XaUt{`n)_mlv-NhkwMj1qOTu+$UOEqlsJj7GDMw+P<?$t
zYpt)h1Kmgv%KugGEWSVUGp|)1;5-Isw$Gl~YJLB|-h{Gi7s*zJmA1v*v%$*X^%adF
zdf!`%p|KEHp$PQ)ji14L@1^zi(2&z%II6Mthp`XL9u<EJ61g5wSmABI?%uRt9O5y6
zo4^wZ;f)_y0FtN%=zc}#Ld!t)CZ3L%1%vYzHVRVVQZ>nPe|k_zU#`c1FxZ5q;PMp|
z6ZVV1v0Z8*LKmKX0P)u>qyuR2X!{^rH#==`S}DAq$B6>j@aEL9ioYD5IaA7q%u#)U
z9&N%>-c<+vRJCY2tP`CaY2q{D%3`q2#xRBW4J#{#RVW%oM_c^3u!$oAZA)O!Y`HbG
z{&a}?w;}Dr)n+M=kqM1(Se#%FvP-*Z(i?okU+A{u#okyUBgi8tpdXhP8Oh~K;-Jb@
z?lj`6PGXSozaBW3bPw#~Iuts%piWXoej*R`-`NZ5n;O(613)i9XK|-4imwn9)Xysr
z%_Q1_s63NN06g)u^ZX7VRpVxwEtOHDD+HFQje-mNPa$FDs_t>&#tM?*^ahE<E+5~n
ztpj@d9oh-hrJO2{P;Xj=KLEXWiGD<gS4fC&P#_8K_-=2h6nOB`sfH>|omnBTyuea<
zELVO1l9mf%VW*SA2lqFH8McB#5uah<Tt>cHR&JC`Q08)30LL0PGlFx@oUyGn9mC^P
zMj+*OCCW=XiJZ}T(FmJFn9yp##rLoMw}z1!4Q^f)a=CJ0G*1*wgiXKx_vLMvTX?=t
zV{Er>V8o*6B9DnzL_%UjqD+5G94@0<E$)DCqMGt5<$b-G5lD?K+By91QXckh;_&*`
zzpR1V7P#d%A!Me^&SvC_1&Ji`O|BMqYY!;u2P;kajB*$`NIuw1qdXWRj1odTBhuL$
z$*+As!3M6Vo|-yqdq5`_y`cst$I((NiLB4xCLC-Dx!WNaSA5Itj6y~x(pee0pPRt#
ze$SeDuNYwFFoF02f30hbFqv}SKUc1h3B}PQMAJp5i+X`w*h6-LH>kKb8Htpt>d3xW
zcp_1QargQ{x^NN}FL7%zd&u|`&_bpdZ4&0n<E84gBZ9%+o0Ga}A-LQb5a;m3?9vNH
zE~UlD<-<#pVuetV%#A_aasqms>5E=(V48hl;PLAF%3Gau<e1bE7EOG-oG`kM-95Mi
zT(HNHz=<|$m0IPX>^?KXc_O%ul&eUV3iQym(f7_gLO%F6h>WLesec)%l&;C8B9zL&
z;t+&8)$PqBL;msBg&M=bx(>jk<1uz~bu-O&3#yY)ny-xUL4n@Nbezyn?rvDMUnc-Q
z1t5M`n8=6`h<rzR?IMx#LyT?b9RU3dfff(4#<g`q;m%^X)d6ZMxU+yP>5u&)%D)V9
z!d1{3R@|m8BbJ(66;kzvAAub;KIJp29f<1(Y<%&LZ^p=_5+~(YtFJQFC+POwFKIs%
ze!xgAtukoL_ybgeD{Bv;bmqwEM&Yv{3TE`xj7Z1LnSn@+`Ef)g*0c<hCApwUUm<0~
z?<C81WQM7$b2wA2U6Zqj3iCd#or3lt9)`$(M}-S+I>Bg8Rrk(u<0O$p@%~;;oh7S5
zU^{48<J_ZNbaIsiGjh)82apv!QP-~RM=x8$Q(79%>0B>HZlr_@2Rb4lJ&q+3^k}`O
zP0{uF3m}oh{lo?@M&Lh#MWFz$_>&P~6Pi>$HXE=Rpip?Lr;{HWtRpqCXcr(k{-@A>
z=?_pT1+)|K)~ss~8$4GLC*?-Q=%vz^Rvo<16I3f4dNFuSn=y!y&5sel{%|<ABP1$A
z3P)Y_O@yI_=jO0|kC`bR!x(uyK3^au%4W`8T2*oyvYGABiNSXbH;!OLCCXq`mn6KM
z$yjtXAA~A_tPR(n?m|WqrMAdMQO+nt-5;?6l1LJK*i{Qpbjz$a<S}?ZEn3V9uYlL;
z(2fFv5ci*;IuAWp_zJ|vUD6~OBNKTc*v8I_7okoJG1sMX6%LAQ!+?u#W*r&N$fbr@
zCO{`ANJQ;pZI)CYhW8wp30`g4CNUz>?2@)XuD23eeFfMA@PK#<zIKdG80sE^?#Os5
zyHwrvKrpF|Ef<9>0!NezO;Y??ni>-;gnPnq)&z7V13cVG<O<yCZ11uYrg0Xy0&2NU
zmGJ+aULg&ozGx>FVM$rLIATa7sLcuBmEUfinNnviBMYf(6p^~r3J6L-XYqf5HR3Vs
z%6vwY2bIyIU>zmmku{X0k<BLW0qG8bBgfx$a9zZVrIsvI7qxr16Q{dvKN?%37e!lx
z&f@4H%UGdD#S1}XeY#rd76acdfo=L(Hk$5W^eR?p^-aJ8MiLp*>eD(HXm~V2Be_r7
z#tNxS64aTXK5f}&2|n?a!Aj4AmEyxaKZo59P|dXRcaSB7iv!zRpeG)d!))U<y5T-X
zG%_RbOmT1*kg6?0;()E^k1Xg0&UXTYSB>~~fRRdtS3M*>H6!1A8CWoCh2VVwqhqX?
zWv@*Ci|r&bFN&_ZDh#yD9JCCVxzRbDd=v-N@s5O9%l}AGDU9<%C^PWZK+z?gOmJFo
zmlSy;eBcnb6L5hf=QOAkE~wjeMkrM)E5Yc_V)i}h4m<oMpMlvPvO_%K-gT3a`A?w~
zB1yE;PjXe~3fZ&AFX>%^o&oF)%7rJ~jqWhAQB=@lQYHV@T;>G4V<0OYj(86kdCKfX
z6fcjVs6-8cfi16A9RWypaL#yN>(67ISR^WGjr_B~yyQ0+OqAB5@`+b$fR0@C+gJp8
zBv}$T-5AC;6a>ZHVcU0%OymyL5db}WCL&6`m!|K(X$t<o7VK5P{r{Sej8sZ{(L+@*
zsUiXN$;teG-%8{6D?s385b1Fb(c%Xqnle@-ILi7-to3B&yc;_q=)6M~i|vj33td}{
zgGA+9qzI;74kh6U&o}?p8dxX|$4i^~oQ6!iazZ-j(XH&YTsGnx$T<<X)Xq><KD@z@
zJvT-oS14b6CD7v-i_tq)gYDRBH35vOFp|*-t9qnF&f!koPW~f6%E@3ics6calaYrU
z16elSr5d;KMwrZ(ARb;XUNB}vfoKj;X~5mGaz45?fW3!**sM;IL4d0Pp&Qqq+a|h@
zDxxZ1A#JU^6<b-NM?()m_{P_cRyAPcQhtFd%cVTIJP|q(M4KZ#mMQi{!JIAz&xHFz
z2Mb0znp0?ch><r^t{9Sxb(@qm>z6|$g{5STij`x<NJW~fIzm7&vpwu;*WC^?TMcFw
z?<oC(>nIpJ5nm+W5p7orZ~tn1WpJ_vZ~+spL)GmVNoX!1{ex(R)Q7kOP$J8U-2&!f
z2zrFK)|1?rx#f#jv{itwNFtd??+&XU%>dPbn>93AX!E-;gVp6L)!*UspfgFFJsce6
zx&JueuLB<M@yzPYh}WlRUHQF55_(hRBn&ccsM&suFv?KjsbnskLQ+WdSsR*JvLWd%
zDDhmVrtmP+AdnrMm!#Ay;y%IO_?|5ff!u?k#=v(Ha6_2M>O~?hPZpg(qE)`{PXwV2
z&ug{Rc~U4N5xEDY^GB{&k6j_YyH0O?1cTfO(qFu{Wf#r}M&6KcgT|`sIY#i545yA(
z!%4zrWFd7zJ746=JL1q~%p_y`d;70$G8osFU^2KKh4OV`k(dam*P6xaFG2fbK#wlL
z0OO&?btEGhQT0x{_iapSg1P~{1e%+&tH)JH1y4varkBq2t%(*Gzk+0V)wFqXg$$J9
z!Z{!rPnN8@+L0ilt-E@ASYyzgFEEjKdXzqm5r}k0l_K$Eyf_jW4-Yq<@DTFaWWeIy
z&uo@XB%Fc$x1&+@lo#Pz$$67LqE;}vXTVtSR}N$5=%lM&=OGbx#Zs^IE`U1-u^g{m
z-ou@m3>gD*KzdaB)xNy#Y6S{p4otkWF>f&=5361DTZZblX_M`6m{bwy629}e*-}O}
z=^Dx2yWMP#!2J2bMqu2z-de#3LP|@xU1m>gR$vCitJSbHjQg5znT#wnfw1i#ZYEC_
z^Py-VDj_aBnYbIh#W@a!5^vfVZe^rW(}?Uu{az)3H~7!_dCMW7srw-7#5)V!w=-g?
z#6&KDCJNelCK4nFh&-Qolf6wXP#!ms825bD_A;XN-DFs^pnDw?09peO&#;pYFanjw
zAJn_5VX=g?|EF+~rKdusc};7L?ek$qE(9+}E~@TH{7+CL%L24qS_u9C_dhRAGt!Xy
zLa0Qm(j>g+UfW+!2i|Mo;d%7N{}_2lgZK&=k<Qf5Te~(1K$W2!!~MYg3yd&zxk)0}
z;SugnazU_2EsKmUWMrX%EYlXWN=kxt3OZ+s+)qm__cP@hTPz$+jFb?CXvu{O)rWy?
z^aDNBh$6QcsVYAJ2Xs)TrK-f_!qG(CzJU`)g`mr~(8Gmz1v=zDGrL>`>Imf#T-ZZY
zfxbFC;i>?@+d*jD=hlDB3<lLj@}iSMTwV;}d7=03?$*5lGkhL)so?7$Po6Pjef#-%
z1uJ)TvFrDNmB1f#hEDkx^*^ZNk*dR|&EL{8eS!uJ2vVIcV{vls`0N`^7K3}M?5No#
zRxo`%RJ2KOB&V$4f_oLzM?P6VkKPJ6ya%SQI*3VKt*7dq%Kk9O1gC(AFiX~+ZJrJq
z0@o;O<d2gL8_^|ns-e?IDs)tC^z74fqQJ$?gw8DP;>Omb#Zf6G-&TF2nt;`vQAjHW
zKmRl(2Q;yj);)2(>(H{`U}e9czP=uVxn7~}s<VORvnw5whQvF3b;y)J@T%z`BAzma
zH=sqrC3w*SnG{YGKu?y^4jnr;k!(AU+ge+LI-pY%l*X&Hqe>%MP`OJTDwIQIP)LsQ
z21OkRRvFaT#<X9rx-6L0c}?{5r>1QU+pKoTcv!v6`27K%9!^|eblpFd1y(4G>fkF9
z=95Lh>5VWU=-F6Y=WaJ;5+>L^&=d6@|FKxii|NSUHUZ%24ZvOC`N^XeOf1h3cXjzW
zs_bY93)w<Di`%XS9e56Uj<=u|wqxRjxj1y@h71S__987HN^9irmcwXXh0(+di1ZFj
z#9)w68XqAN^3l_h=x%9}aXm8D#}w^+{|QY#JiC=UGEu!exP82(u#OKm{y`U2`3~4W
zu8#3Vin^lut^Ol`YX@Asg4p58#PtXWLG$Uzh35kVLa8EH01si5OO;rla{}xA=L}Q3
z8|>u&NIUPiCYNT9WAD9p>=gtR>_<@$P(%gndSXZdL;^%Yvx~hQJ@(#FkG=QadvC|y
zyV(0{xxY<F*(YRopL6}(y!XBLkLSzG&d$!x&d$<@N`o4+(B6I!*Cs~cpvVl_G2_e7
zJQ&Ylw4S7kL-PN@LfKf6dB<d~0}?)KAzIeEuKb(|3l2e4NRRF$Ul!k|Q+tKCHXMrW
zWPAW!u4l+{DzE=U%+{Tlt#oYmqAiPSzV&O|9>T1!FOES&R<R>BB5;()m<ER+a0LiV
zPunLUEHDxHzlr+l+^BiwU`=;mP4u+Qhu0O&t87~LN^<C&=FyEq9O%{7$K;;W@-D2z
zhV5Cs7>0EUts7}MXZB=KiL)RfsAR%&956BEwFl0|9K?iuhzUzO;DzBVV!B-w1bDT+
zW_v@PvL_)v%{!`N@yIo5Z$CXrHVS7_h~+%EH9GPH#xWVzLx<OeV^}<&pdd6iKtON0
zzG!7~+yh}2`1ka{-jHu8rV2fZKCvt&af0!94Z(E%-!eZ0h*|d~t{#9<90}W@)3`+v
zn8c8PcE0JXYaApooM)PV5!->x0mGq@U;D9;+B$0NloZB!5*KRKE5~+-Ub|LZTc31p
za)bM!qo86#SjZOs?Gy&g4eK75BOih7UNQF$X(96pK)M$C{U|0Z(C${A04;a-z}Uyo
zW^udf-BROOw013n+e4kk#nN={8yypkN1V;RRRG=mh}(!;uv9#sAvwp1nZ!aH%au{3
z6|d76OjCtQg$a=V>e{W`2Uu(-<Z<bo-;S9qvQJAA{ssH{Qn45ZNNm=lNR0vtID;|J
zG@aKdu!IF{@6#4NuyHAb9L*`nG=*2th#z|pdzw*X!Zc%T1dfpC`EqY5i%piW_HBH+
zl71DaDHR=ABJQ3IWp12=3GaoDY2SBi4GU?UoBtsJNW^TGxTN<xSkqh-q0nOH-N<4R
zr5fuNP(m7QvuJWgl^~B~{eJ8rjsu2c3q$W$!glbGgeIy|!uqGHV*S6cpb=P3=;Nam
z2U#p)u(%W_7k7GHhS1I!!Lo2dH15$67LKf5zCIy}0RI+pq{}cl$2uSEY8RH420imn
zuy9_%T?1PxI(zwt{1@Nn7xVfhY1jK1g3{yH_A-k~bSfuuC*#+D>NU+-j2&q`L@V^#
zRThhwr&>dA!#Ji%X5i4tU4D^Po0A|K9qnYl&B7VC(xhl8Iv!6viN(o;S7u*$q&rwo
z?IMpscUe5+jQ0xgZ5O0a%Oj5OHK14|Bn*a2rFUIL9<qoeVzo^c2`vAMhGkOx2Bt17
zln$%zK4zha2W`<8@A8Di;H@!>It7Mr$^CEtkjHuAL8XtXy<f73^m@_0P0Qf=|6#@0
z^uj-ml;R)pl**guHH+@;6Ra@h{K=XjDleHGt!n;Tn}m@4@$e13d(ZNlMQj<=wS7oC
zV=7vcM1~c02x^Tr`!1sDELVzz!HKu9bK>8#mtgF-h^pnZ=ptgy{_rE=BxXo4Bsys)
zu)hF{MVx>%7b76r&K<d${X`v5{W{X9BeggSXPlI#oD<0wkOf&*#Uc?^^}kVvDnis7
z5S0$Gx>aMby@CVX6(L>Q8@I7?OlV1yK>ZVVpmCU_H1L5d3rJQhdkHz(B@$Mjr`mlG
z-n=t{Ncz~ur7jC-l+bcX2fHrv0#%x)6~LDKd)l&zkg*7k%4r+w)|`cH*P^u|TC1)T
z6WUu2ZdIFw+xo!^#Q{mLkpXR3IMde0revBU8d*dJom}k~h#@?Vpo7lxRB6v*S;9ut
zlWCQ@K-oR|9?x$+?Fpb0uoI!TT=#=n;4}wo8_EeRCpC53r+<Z*_3WbK>OELAVyVV?
zn3ft49Y&(s{5dnl4#9@`TY0HVAJdD)G$+vHWzGokPRYzW@?i-h`v7`A#^_i?lk>qA
z3zO2#A|gkv1URqSnJTTJ(mr_pf!+W-jOGGOO$Fo@Iot~9J~tnNx`xm!E#uTA7LwSF
zdmV)e>xcM#f8ukVf324z48V&>N7CzL_CYM5WiOYO^^L__x%jUZ^>QXBLEjuZ@ZbzM
zf;UhxjlMmMg|_Ukz|`us#(p|DX%$72k)7MG`j=rar47K-S?7nNS!j~+F-=jjdzQCz
zCfsioI_BI9O|Pve_3#(RvAE_*6X2&Hy)|2P3~Xr;mt)98(<L&sd)hs1t3ZdF|C`0a
z8n-3(xmba*9nr30f)>i1Z?|^tUce%fu_e>g*aOQVq5v>4U$4k97|~o1lOEBrDJ-B*
z%l2*BlT@sRyncXM3)?<p94;AA&->oGk8nt*F=6Srdhl`<*XWdt$#tK=kf5%{fB_3B
zZjM-_78uxKwT^^jM+)&#ZK;QPyoyCP?Q&6Xh8{1yW2^@@9D#`~<y2e^BCQVgKwx?w
z7_x_jB+GZ0A~Ze>t;H=Oa(G0+hemAPPD-$pb_$L-$l|p#Jv2x%F{a{0U3d)gUJ>$g
z?v46s{+Naw{|uNGy#yRS#-fvz)p%1z66bORCJJug-@x-Ya6yQ5X}7rl1P^H{=rg|F
zo3^A|v(f_Su16YQ{2RL7f*_QhL|;y`&}pe#gFYsj)ZiOi=E)i3bM9vgWdgSsc1^UF
zKU`pOgWLM!bjp;@gy*mz1!m6SH$^U!tN-L78TwGH=T#Pxm@$rSASPMb$#nw@m7`!{
z%(XX_*`vp}l4rQ-${ytn7FClVoI4>VG&g(Rnxvx*@xXK@qt<;EhWLBiOoo6&VV`p5
zsR=zUgH-fEMz%*R6ghOGovpy2jVOGhWi+Dd0Nm4{8?a7!%7Xc|^|G#)9HEH*e%*M}
zc0M?7a21c<HuQYM;#lSZN@>wVQT{{-KUt-58w}blghceE<cKdUFo{V#6zyBI@orT|
zK}jp1)eG4Ii~AFAURgT(O8;O%y?t8w2m0X1&8uY_MY~p_^MELLifYvSp|BbSW*;5q
zp3YX1ks?V8{ct5&M!-jaA+5H(_JU&10Z4B;H|1ghO^I1~iS<{z+m;*wRtLmBwDpAK
zXR%rYlDmG2sCXUzcXV8MOq3>8IOj#YON}iTFNFh48j{i1m|7KKfz8onC!ZkF*IN<T
zv26>VAj^0Pm{39W-&0BPTOrWt0JBs{7CB91Z8WwH23bdaef#y@oCUNC7*IM4IaiuR
zB>NT;8px>^AqI5&_RP#RF-eLzOL+~-vv{Vgg{0#f#|4qG3{o7}z8y2f8*Yd`@H$qD
z#WTj0X?rqik_e3An!eM^*9UVnd^xStr*14JM$uRUM8Zjn)o^4qy4lzN3nRVeIw9Pk
z?R9897VrOGta-m{$@hyu9!+wYR3C=r4OwKPc73{ppz}YOD5OqBUeHd4)~jBDL!@m=
zGKQAUx9#|Y1rKUj&q%b*gmXrf;FcxTXxId^WGWU-I=ITvl7%yS1+B7f9hFj6{IRsg
z<ifMD5gU#$hrV2%(uReEA=wsP3Yd`Bul|#}K#yDOPW<O~V3E?&{2_j%I93rGAFYs6
zYe3Yxw^Hi;lTc~10BM*W+Lc8%XZeli@9kr?2}s!3p5<^xl+2q4Ln=%e2XC7VDyDtI
zoG2EWY)WD^QOMI6Llas4_M+l_H*ym%7?BAbQclpbm>5!WfFs8(EUVPuFgYAk*zH2H
z$FoqD+(EGM+}$5{a)oz4WJIs~e6PL}D*XX29U~a}vAD()PEEK~Mu8!m?)i_d0DQn*
z@aXNwUqe_dBBM3qM#@V?HA^IHH@8dpb~yK=NNCcLN%r9^Dsg)WbxnsFcy%PSuOiUj
z+XCi@OTgV)dR8ZQbAQ>nJeP4iutIGt^OS?jP~*^uH^7C!?a>D*D<-gT#zJM&l(ah?
z6Ogk1qs(u7;fM-0kQz{?DJ(202qY>N6_NOWZ_`&?+yxQOK%?}0T)C9RBJqffEgnI6
zx0-pQComd3AV9mD!z*|w)8#4AC!<V-`-C~>Quo)-V5wK2PI`?Tvw_7#1++1Js28uL
zC%CNhs{A0eF!g|>ahJEVaHa)Ikr)$eo&5r<)?XuM1`ovGy@OWiz$f2s7S57%H}0It
z{+X;E7PAo`cRGIRTo25OVJM5C1^vE{MTTBUL9QIrA@ja&|1D1Biu!NtNa)yO$8i?U
z7-x|)R9qX75$=$otezn##1%ui8v3PA-h9rmkYuNaf)P~a%F$<FsTEzS!-o&XnnBNv
zE9Y1=%Sir*L-;|b{yj>bg02i>rM-CA6&BN|RMR26X^zNgcR*CzEzgZY6Ci99PB7?Q
z`?!BuV2iMFYsOMH9lU=Iz&r@k>B|X&?g#<RR}=7<2f0TXrm*SGFECrqr-Upo3Ogb<
zWoajS;1P=tx6n@$Yi&UyfO@b#D3P=yoo;8gp3j&lV_H2rUT3{-EI@0XD`;{!Xyu6+
zQTv}MFPJp!c@k~*0vr@^0UdsQT5<-MD$pT4hFxE=Q0DE2F{Mo&ZHz;wptKrY%M2A*
zl=J4u=&S*M2iy>yQk(sT#W&6t(;=?bV2Bs*vrT5o=GsR)l0YjE8z8zmH{v}DYMCi!
z!;Oek%Q0G_@Y~aGs6N1oNDnAF7xVWw7TXxc8nsOoKXX(}r2XRYWwkS=X&vN8=)n2;
zPZp8HB2>W>$D9aja*a3R{=iU9z&?b|H)}JMVr34E*8^lmK7R&0S#k_&ERDc~_U_rU
zvtY)gPee?-j@%E36Hnq10grW3Mg0%<nhmQoeFjrMKaWXP%>PogM!1o0Gj@InvvCHO
zjtu4(VsbmSQnW?onoQNIcGaEs4&z8}_0f^Rt70siWrmn`K^9LSU^*4wHpssMn(YEp
zrIFrcSV&`e6^fmFkav<HC7FwEhiaW8xBq+NjFvtf4sm87jn2n-I!ul)QQ?4oNZ57Z
zmas)&fqB_2@$<;j(D5fkUvxfiXjK-Sm~WW0>!*N%|I8EiEkCBqT%<*4Kd`YDkLTs>
zZOu4ySVXf|ZZzqohip9&i_jbB3iVhlOJo@x6W2l$CgXJ#GD+5jJSz7So~K+T>BjO$
z0~VE7ZA(*=1G!-|!A|VAbLwhX?R}ULy@sh<^03AW7ubg3K5DR+#d<gzCQz?Dp6^S;
zA@qg)($K#CEGTuEhU$mJfs$eM*wsCMSIkk;{+M>}zXDj$w4J;78*xO!E<2BvdkO#Z
z4R>E@*!FfTn9;pct?f9H5m=ro7aN?w7+yjwOCRfJ?!khQeTk*E(|BpnSg9g9l0>N+
z{6`Kd1RwBM4XGb!63RjorP`S*$L|o{sv_U-T!*NWFgNK9$|fC)XDxm-R&9{of=#W6
z0QhXpp1ZTca$K>7(V@?`SQgk+M?gXmawE#3S^?txrFT9zf~cJ!Ds4iVL>AHLhN$h3
z0BqQpt8Ld~a(Dnp`*Wv(ELaSAw-<|7fPZj^9N|iTS5BOS1WZt4X(Q9ZLs&eca5zl#
zZ`D=N-Ydwft?}4G_A?+GXNPYk?-|}g2|vA@6raMy%eebNW~bBFbz_s^=x(C8oQ}Fm
z&t<WUu|aT1kbj`Bshk1vmqo<_USY($b>rK^$v(oeNoOl^EMal6!z8J-P<ibzZXGN9
zwGj;H6^L{^yK5PXMiP{Pnm7ZFfi%=I!ZBK+*_`#pE+&uWl1u(Hv*!vHlVrNd1VIFC
zY@;AYt8-rdZ|^aTCT=52Cd%{GEGBX6b`Fm-ip1gldFbbib&zodtd*9r@MadzyvIdZ
zC#e;&o>mCxHSdPGnLUtoibp6y`?{LjSxgd&m>MU@Jpyl~t6BJCMJJ~o2~t}<dYDNJ
z^d)s7GEVl0PLnoIaoZ1@xrYUsPBxW(&Z3zX5ouaYK%ssY>;1@u#e>|ErgI`*Z&*M~
zMOBPmxKM-4iJ{3!H}Yd1F0h-2t3I$$R4ibd7ZtHl|E~3%A>I|}lRguv_?g8t2h489
z*@(w*#or?&q8>lKvI6NE`UF#hjs@0!XJMgLb1{su%sVy)?+eNC0aeF*+fxkstqVUu
z@Af+WW`T_-2#7n7SeJX}tY2X0Y0|0YB6bM0$zIA>nvt6z=d${E>6IwXm=fjQ$g#L1
zIRILO4Hpf}o}C3WU5O&KlUPJVl}aY%|K_}Mtp^GFLqd8<Zj_$|G#ZiZ-kCEW39C`A
zbuBW3Rmsk&o-NE`*#vV&Utp0>fO(+#>YC9om<VjNXrpOVg2gn-*S=#5a=Bfmn0*?w
z=@|(z_aH#0{dhiS7Lv$@8y}#NHx5LFBvv!tP<WUQGlTS~r>*8*B^J?`79e$v<b7%j
zP{2%QHGa6GAYAzt1j+RBxS<*gXe_4;^6AjgCs<bIg$U`Akox8r)EWy*rPEn8U0F;b
zBy>vc0|Z2Toaf8#3DD_17!MtqcdX0A1uCNBqmbLdonBFulF2doVa`+U2oIBku7vfi
z&*CM?JZ9cg`1?b0Q7;e5-e~Kb+L*;5QHBq0BC0iVqm19`Y{hg~8w<l==-Q#^RxBb}
zhNG-iN&;gxylIo4L7+GxilXO11Ai8YblF1eO#;Oj;bUJiXs0?H$QT5h+zN%#M)D?*
z1+<h5$=IBdIWTN(J{K>{xyYJQ0hb1|c%*Y$P`i%pWyLi_K;MsUH%GuK!{J%z<)Mv|
z1tf_EIh$c3oUXO|t8$oa&FsqB+%zl}?4(72f1o$nvDvz60fRYxYV+}i7`x5L7tx!w
zt&uDw^eJ5!I5eWne#)ag^I&=hpn(>h;p~vWq8ZmB>s@PG896H;QR~EkmHy6%A-oPU
zy#gK|#G;xCFBI->b?PbHJ+0R)If4>o!B4LD8w0r#qe;7J_n}NAtVU+%9D-YZ{e9L~
znD*n5h@*=y&W&K=NNGu0VEEtiaC;ut8cWus!&sB(b+Gz)7MV;B3)(j9=Zq(@qPec~
z4=%-Y?2kMSZAD!sv6x0HGM+$~YE5j?8XPLoafx{UiQVDED?wV?iHFZ(QDH^4_R29H
zB41FMz9|o3Jc}?d>HUTCTo%bFA2}~G#2atjDa0BNTPu`$r>e4Efr!OnN_6H=kDfD*
zyXuj=25yJQ+stH8&)i5JD5-$-6uojRTf%~oWjGi~6gi79(Q5TP*MC%pR!Q>}`rK;3
zN*2%T$Q7nDvz8%f++)g)S%Mn@>sh<sYXf<UZ~*AEw8hr4=tNrMafb{WBG&3wZrT(T
z=Hvh*8tIdc(HmGiEG3p{iCJRv6d=cN2{iYd8SS>gewxF6XcdR-VnJKl^tm&Z@sQ^`
zaW-i4Y$%6L2KeEk14lE!#s5Htj81k8+{>bqG_tLBIipEX^M40D8jR7rg3+YItlLLf
zC{rRw+Np>GB$_S1Xl%&?aCwj5^5`h!z)2R+xWAE6Aw-1xoTKM&@@{-9EGG2Y_243l
zMIO2_C2*}(LLAWuu5}H~xpUBEFvO$%s_VZjoT;Oy=o}=Z<`45NS_I19P$HcW?|zF#
zGWykkcJ10Ae8kHg5vbm^UiallNCvOc=zN1mVoK~o+)67n;t`8W22c7Hg1|iZIJE7=
zk(h-fZ9^MphZiiIQA|^HkV+{>ujNmzu1=msx(py4Uo}Z(0f}ct2W8`H@wlrX2U&dh
z+LxhF>0K<5w2U?1@{lGGWyBn03^hNz&N;zKUt-2Lp{mQ?e_{cN|4ut4H+Km#y~wFh
zE90zM78usK$+`<`p=B+^rnjvT-&lWvIVx~d#B0T$xgj!l?LI!}3+Bs0Y)9z5!GIqu
zA_)iNm9mi8>9??ATo4kuZ?F@g{lJyXWf;LnM}N8Adye8n*$1%IvUVkyBl5FI#9sAC
z`J>6b@i5nzt}<qh6z-zNOZ1wx&#H!`gHIfEOUKMNi?H~XSb$iP?TRH}J%2ALRcRcU
zUSQJk$D|T0W?D+lcs*Q}jQ6LFtpZ*P%olnzhm>LQ5P!&!jA(Ou@BV+0IPxEiCcPWT
zT%JWD+B6*+$&Drn)z@WKkI9&cCy{8O^?9!<j~c8|>f}VPgxCK}ws~VA<wQj5^bYT;
z3yWtATKxk<e0<X$BS9|^&w7@T6tEosKXk9>V<bnxa%jJEwjPTd<c}PWH}=i+3kL%0
zrQvdgm7@^5Dl18Kd$9qFNRE>J%TZ_Qy5Uc+z#nvg1<_?Jds?t~M$g(ZC;$;Ny1O7=
zHFegqD3>EDae5lVhTZMq)Qj6Kof-UCX!9wnmtKzrG*S+-%!MW&@&or6<4If6_SPau
zZ8UlW#Yd4AMWON51TRNeV#9wvFZ*X@EZAOX%0@5Rp6ys<5(nX3LDM6|7Ew8-OMo3u
zXHG2*?f!=O(vx(5R~C>QUK!J&%2=yv1$cf>oAm1j0iCNzdChw;c`fl$3nr-?*GH@;
z<ga=zq<dHr<fC^5zrt8N)0WoeQ3cN65!U?SuWFNiCjGF(qBoRLS{BQ;pNVn%V;MjJ
z=%Pb6H=Tjk`-YlxdP8|ViUl>!Ok<{pq(h9|F3J3qdBd;NwYulYdkSN5az>j^@pu-U
zsMqKcWX71c{6=1wh*?=2^Mj6~a}8ke$V%4MTej;XGi2?bweO9^sGftnr7bAKa2AqG
zNqxK_!ZMhg*+DF5(xIvai(<JvP*r+b|8g{oW%hMiJd}fOaCmA(*8cL^)GZyVVS;Rd
z;nLn+H;siQ1wzDN8??7vXr}5T1<W^W_>iY0NVs6Plg>1Yg%0-fs^j4)YuzLYuD0xH
zW6}X`GX|87guc#a;YbHK60`re{%<1!!_JolaS}|3jt?F$Vo{CywW!u&NCIkY(E3R5
zcg&NA=+#c&MA0r|5zRXx)U(BDqRHEd3fTpGy5je|%VJ2M!Ohd%jxMcbv1L3OP3GnL
zoSQx*La7z8A);MDz-AW4c)Uz{WGL|ZxOn=EAa})`ZkzzEUb5Tm)!4y8wrFK{ubATu
z2(4C1^@54$37a`aDqzL~EE@53ID{o$Ku!ovrbl4q=?@RX2{dwXa%xO%;qTpLA&q8Z
zI(#BQfw>V$s3Hunfr#2Ik-7d5r@3Tq4#c3+`@Ry-S$}|K-zQBR3h3GIkNw$7!Cu$c
zW!XJmGnwX)L`I1lk#WhWCl|HwK|07u=L|M~VDU^bp4>Zs9lsrDN={0aVOZ%Edhll+
zjYI}=b1<!6cZ;lz(bHCv`nsdvSv+DwolMOJ;P&L$%wzxmB}ZcX9%JF8eR}t-Wf@r!
z+ag|_COSM$c&R3%xU~2Ejk7R<P3_!|TW%KB#!}(gWfjznP^kV5g5f*?miBmV1z1R1
zL1ktRA_^}*bP^sf0()vY_<3H4g*4`6Z6CuGn1?Oa?RfJKMB4?8(w17NG>=8@5%~wU
zYG<(<0iJsy{fpk<sllVysdD96ytdvRaxkT9AJUNW{bn%Hrj$>8RGEdb7>aQgYQmK9
zI?P66Qw-97Th5<w(d+uB{>ZG~tSmjW%vGKBCy-GLQy2`w6_{iVxj#OWUqLvWDUjEh
zlJ}`63ns4xYPX#G%lF5|<14m3^f_#BBNhe8v(V@|p;~JyUBFT@csDw;3b4o6<<P5A
zZ7&wg7-|?a(Q3SJBxmDF{7buXO{!go*(5`a^lWJ1$6}gR2}6u3QeKT`*HqOzH>?pI
za5P9ObZ{FMPmQ;eP_k=N$HoayiEzitRZwk$jg$e9K4!`v!h)rh)Q}m0Qg2CU${9#v
zo3q+x^CS%jKVmTHrMGq$7T0)5ny%IpkW#azNy>OQ&lTvPLT{@I^<dG+M#H!{4l;MT
zmetgVD0tMKr2Lhz+nA3kB03e3SIt6OoDRvKQ?Ho|X!qxc_3=yLP$$}LbLK>`pyu5x
zdBH$yeGFAV!(T`KjB^3;xm|FxES5zyIkr%xK_i~%C2IZtLV5c-cp=!@(37%0B6W84
zhul~3h`k<L&~GDI?U#W^&y%<TES}L`NhD61a7jxRIeI1B&etyl6@gCgVWUIKc{G{D
zHD<4*2U{E-(QC1G+5zO1DDtKW?O>aYW$}z9^rUyUso%0S)ylC}BeUz&;n^@dXXB`w
z_65KGVlhn)mTHzDK%0K*cg4ccs26+zt<mslESjY#Q)b}i{i)1c@@CU$%te}acOH|6
z&7-lHMn+XFv6#Z`6gf(xwa5YdXl-6zlr9ei0xoz%RjD($YLb-Xv0hi+L*JML_(#Uh
z_+Qfgqj*}3VS24PXi2&>rCx6ke*Jw&3Eh-s=#+FU7+1cj2quN`b*%AnVzN@&t~IMb
zqO!<j($VLV{f<RwiM!mw(HPOx!2_Di3Fv2BzPS`r>6BxPAxdUh)AnaRFCJk36^saz
zmgdtv#~6L2%FsZL($2j-ldlHmtSh2E`nB~suN`9y8iPS*rY9-%@~x~ef$uOi`fPT`
zCk6=3-^s%iazr|uSbqI1WFBtUl9u$BDOfJOCB<mUM04(S<Z!MZeQ~P=T;1S0Qcl4N
zjyaMgS-{ba`g~`{ZaBIOaCBv<$+NzmV~)m}B@$pfYn>@|1I!>2%M)z|hnun(#`;}3
zO55nMeJ+U?$y!M7WiI+S2B90iELWiJpxU{o3?7{6DfKsN{T)+OHcuJ|=u8=}AG-@<
zavzR>uCO{B?ii9}Y5^(V4Acex?Eeu%)Ed5rzNzwHuwz`TK^Y$>%fHn*@A>vTqK0ue
zKcF2?ozadt27RPbmc@B289$jc?%Zp)sqHz@F-C3+)Ps4-t?Ytu?+Vrhx;*pvWXBX$
ztga662leGxc7qco7L|wFajh<$LW5^GMx{l#azK+t?QJ$1GOdG5v?2Ul<`{%@oHklk
za;!k+7InH{?^@JH>ap*ya?CN1f&`?i<w&IIz1;~<Z93KLAoXxF4m&2<T=N!~t#kja
z7?1-dy{?+nB^<f!n1Ma996?I?d(JP4VL6OLBHG-lzH$sv8lv6lS|<T{dOX^C>mSUY
zEO4Z>70mtY7)7o)Cd$fmEy$a>?0Q&RX5{qf&~4#&#~jQcIeIHOwq#NA9>sRdA6l3d
zza2wjHKZ_B4yR7S+>qCZ-^-yuo#q&_IXesu42n3J!CP{pMWeES^8`js`_MfF9CP9f
z$Wh1<XKGN%*i9Il7BD#)Q>K(-jBL+#>cX0*PY_hs=p@xzO=rg#dBvC{vi@h};P~P&
zY0}|>7ALBSV~#<uvFRx&Fmnc8ZnI)H5LIAobO>^<nPZIJwyr{e;<@45t~SUvF2VTF
z5!GiO#}p`y91+Vgf^S#yJ*@--*oJtA2F>?#48na2xf0FWFrvpLc$=+=d1y~iF4!>$
z0f-!F4wT5zb3u8u?~IfVPMaQ%Atb1hLwT-L{z>|wmc#~&_5<F798;h(nbO=YdFwVQ
zJ|lg?X;X_C?wF$vH^_1W9rmAYj)#?<f;3VKcs;=}#Z(b4E5Q>Jd*ER$*z_7qQd(`U
z|2PKWVN4Y7$r+wvQ%X$uj`gODvs9q1D;;x)J<E)Bk4F|R+ZyZ69c<%hlg_ivF-R@X
zq~CSww<HP1)*Hq~?|j$qWkO_cuGA45@;8S#PwY1HBM&o35wbxsMbA8ohY`2{M#ni7
zPdf&Y0g{a>v#?;IH+<+<yEx~|ImakWRhgp{+-E|z?b!YLH<nJ-8J8V%VpIlMSLJ7v
zZM%#dU2eh#i*^Vro;jxIwDKInr^#QZh2Ta*t?trzdeckC6r1}uob|0W7VFoY8!a1x
zmEhVRXzNO4B^0^JOG7F0I7nL`S07^oqmCh2oHE^-vb0NlQZA<qnV-RqjQ`QTO@@qR
zGnp=i62ib{i^fDEh?<H2mpLVw0V&FqWRHq=gur$oKEbY?{R2h6-e_#(2qnz-5l$dW
zP=EjXS`NP6-X|zP^z*4JhaamAvpod?=+7^!XZQKEWB|@HL_gnNJEh?rC?gh#Qq*5x
zt)boLk>5(t^o@yi?Hi>N1)PdepQ#FEBe&&Lh5~eNYzJ@+*P`oIT&y-U9_=?o5&Mr0
zEZh#C?~EVqe6QOh@HARryUqbV-o8F<@z7_mC}icYk2zvbWOQ2WlijH(B}Z}-J2_hV
zc?J6V2!Fdk$&Wd&D-o-r1Gue$rY5({T1h$uS{jey(DX^<FDLo``+FwM><`m_(FoZx
z>MxIuu=~13fhSrbjGuORID|L^|H#ZT{+G1>D3tbTQ?kFoK)X+OY8!0I^9xMbo0V^5
zjD~wl!E#4O@FUXyFg~sg>+3=$0MhUxsv&=Wh5dPY`@w^5!rY}ZZ-GP7{rl6hETlPH
zY+StF6*J9M8!d`EKV;X|xA0Pn;V$S1``gHLadAjf8FXlTW#~&%io$Xo-W)o4EYued
z_0dO6t;VGbvd9$?AE%B<jFu@_L_O{Fh7io(ZW*sPfyvY28BKXQ%rL9(Y#*3h8~kX0
za(Ys_sI+`lj6P0um@2N!Sosk??+d?3*IPtPP8VU;UVNMuXJ+!`8BlZBu}uKI#c<I<
z-I^)s!e9(>F4}07E}m3&a9w@+lhvI5H%->P)9grQFQbgZE;8+WPGH_Tb?sMj6^!6l
zCF%8?qSJW{H#Zk@?C%n%!I2}ec?cIBCOT+ii{=O;#gsTYlXTOoJ)cJ=H_U<py#j(=
z&0-5VSK>id$L8+u?u=F`qov2=0~hnK7(Z34R__{xxg7_YMMVwCH2Ba_BnF#zlXloB
zdWgqN#C4LGM1xC|GE!qaD3=3{$=|H6e>3Q~Lk5Xk@xQ?XySssj+AcX`>NE9&mmlUv
z4a^Pt%GKu*l^v~%X%_3@=A!N$t|#tA+=$w2JaE<zk<c+Lm$ctpQi=y`=myJGM#<t8
zuetBwJ_tAmOj^Kp&O9Cjj8JML<7EN&-V3R86C0rY6{HKEp#l#GSA$njWm)R1JRy5C
z*2MAIDrx=ihMGKFe6%*nrR{$))BAgGMI*=K<YADy)H0oURMQ4SbSB1TuaWT$_AVRL
z((${NC`NLH6F@r{QJ|(>qqTp-V2)u%&<0xbZypc^6QwlBGtk?!udmpMr7$CybnQsF
z$#y(fgewVJgNq7%yW=!2u^OEQ{@m4I3MU0tk2+iK4|ob%Z_wx%yY3V_npejVzji^K
z7~8b^kti6Swfr+j!KT%(_f)%Y$Hm0x(iXjY?ENMA^pPvQFHgb8FW^V-KXy3!G<iNp
zjmR-9#yIi<kn>xXtowzT>tmMzTsqCc->*WaX5+y|T7>G5lD?LTQ33tW`F0djWR<2T
zhr0#SKAh+&JaSX#-SBj?ae79Fzkv%Jeq5taMQC-Th|E=G)Rh3}y|e3!NSto(!~#jD
z7sFE+AaqAS*;AxAM?dB9QWY|OGnLX^itA1WN3AsU#c`mpILC$@-tY+%US$_uzdFsu
z7&XV)&{>CQO6K8hx+03&i);fO`Zhn$K*gXCoy4W`hG}~9aGcPSl|ed8-!Cy>Y3kDm
z>#vUUj}xJADK{Y)y_t-^?2sdwp#oOtGHT_&^RSux4$Gs>yUtaI7?`(Gua&2_)g2pW
z>x>-mzs;qfTDKV>^B{>EUiiXaEgDxs%b2-R$9C^I14Je)50bviF=wDmjyW!G6={%X
zb~#wbOt}Psae1;}{*O_(VsQ;AD7u361RJ0s{ZfcWa7k+5sUYRZrVw3#d1LkQ|4oBu
zSnekc47QhM3Pmwx0Cy~Cfm?Vai7w3tZ>;SQX!5PD;xp+$t?#u)V-~f+@X;n--Hk($
z=ZB8nDs-5<I&%Wc1?`9O)?<LoCN2*)e_8mviqM-Ue)JanxTgS2hW_UK&V11wB5lI#
zrH?!O>oZ6uk0;Mbc=`DrItf$`yCa<IjTtD5Hxgbl{^~PLS00+Hg&%DbPF@U<d9mdg
zU;2*1ocS?1ib0M+$}puaT-a4;wuTQTvj}%=C1!VphtMdDC>h4^yu+@8q#$M*!XY}A
z4{qU5aVB}vVDc>D`PRgzt09;YOCdd{!hJbB`HSJ5sQoFVOOzV|30k-~KMu@RIAJUN
zSu&T$A?(C9^^o3%tP&u`<E>cMAnE1RfWBAZoO}_F(Kj#s)q*Txxq9~-b*itslT+Ip
z(j|CsxI>mHsNe~d{>(BvK-0|XFv}q%0Vks|u?n>&%$y$-SQpoK^J!iKGpr~gbNbfI
zIzduIqN#~SL`+O1@1VjuWYPWeId_EJ7sjyB`&gfC4ka`N8@My0io=;#lrmOy|B-v;
z7d-z&3}3n!|Jd%BW{d;{{Rc@s##I>9F9YJuu~<yZJ6ec{W6eH0>?rc`8b0mT7RrpX
zgKDr5b4+IX^nrbLpT_fYcy6gh#}G8|X6G@|x444TKC|QzJ3y597W3<)#{GL@jBCQL
z+HS>Dlf%;eZoIJp6^ZX;#9FOdOnWsBfXxUhY3-Cgp57miV^d?BE8z{x@2rhnra+3V
z*zcF5PV9c1P7h#`LVPx~yP0<xX>s6zV=wy1{o%Rvz8|NH(CGAa>xdIpY`v7V9oY+^
zG>(>F>E-kYX%Yx)$it_@r0iH;KEOzAclfEvem5O|Uw$0FZ_s(q;TVaI&=$>EeTTtG
zOO=Z67ji1jl*j>jhCv?Na*ovG@%I@Vty0#mWasDW*GPMdm5_!$XMXc2J&N(7ned(`
zZ>}b<Qt;*NnC9mAj5v+d<dsj;`?^6B9;-o<Z^4;IT;AE;U;pX_L~Xl?vGkQ4!c@uO
z-P*T(`~TvW3R7;W>pQ#ehsF2nCmdNu4li)GDF!$<Vg_5~q$DqQ@a42pmngO9s`FDd
zw+uNcA$2geqnnc4_*43SJnr=i&$#zX{_XVw!`TsEr)TuGFAly=&f<l?KVZ}4@oVtc
z&%<hFKAkizIiJ3z|NZ|Ely2Sf<TgI)0~u^rhm_>+KhkGdE9!*>@%9?&NlF)H!cOUI
zliTm~A;uG3RZJ{el8NgpIQjU&n`yGpbwS@URF$SpjHXI%B?(JWGPu&rhxmMdsEYo4
z)yxh)k4k;v&;RsSy|0ATXLCd83e+=e`kzm`3?fVjz8+g34~Aj8oxNTwmOjB)`z!o?
z|67{%DhzP}*ee|bG$@(=_e0StIze1TV<SH=uY?gegde>~zb%_SfQ&Nk%Lwl+Che+I
zMGY0T#iC>DlTwp=JEu<|VF0<2(^u3dZ9BB6Flmjxx}?-=RIZplg3LH^CEY7~V%lMh
za1U%VX(gSmk^c8XaoQG-LoiVZp60!|zynI^kFll+Ph8U{s7do6?rBB(u`qq+(#PG7
zkXHD?S$ER^xY^~Iwsr>{e>|<8g#)qfu3}5II{P<tR39Tvmr<3f<4^)KBvcoZ7^cPb
z8)3U0y6(rUyugvZedg^dCJ8n^c|EweD7B0*wtm=~-23#nnfW54WZT%UK9>{|+FKEY
zyNtqewVys|=`F~07;2>Dn)45r7OV0QC)M7ytBVH56uBd%q${iVBvh>n%k)q^^DODZ
zRiu(MS27cwG}COr#og82)lE~|Y}{tkAjOC>MyvY$>E}Pg5kyp%O67qPR2~ZljKWft
z(kA8%z}Dt?dnswmH7-f7i4rHR)DO7*0lJIYCCwPueaa;nS2SUvP9~Iy)?q0)jeI2C
zm}W%oYCQF&X_pk+xJH;uA_WpcV-_!-OSYn|;j-wAc(;OFsPPi7uzW4^*4p$QZXyi6
zf<{#?#zkpVY8f8NDbwR^Eh{=X`JpU;p2-QtxhT?XQ&^~xx@xJ-Fu#uBaEngr7Hh&K
zrL`&$hwaU}(+ke&6f$_USlfKLFjB23Oq#0RwtrDgJl-%{Dpsd<TvA%ar!cJ9n8Q_?
z1Lj{SgX9FGOMgC0hJ&}YKss^!X_)|sTtpETDpTm{*)tItk*zXq7{32-S)uV^VR9nL
z*H@#5cw<_X#p*>*t>&w_Fw_pnaPpCr#uVxa6uCaufXa<MT*E~v6y829TPpkmTLyIW
z_EGq>_YY|2+tJ6>Pc#}l<zCk#1?0NWDlO<n+z00@F<P}o#sCHtcFE9Pjbf+=86=Z!
z%SJAWGzJtlmBTZ}_4{5P(ZD)say+_Nb)Ha&a*!XFF|}{UHaVIPhFKaaq=Uti4Y@Sb
z!AB@nkuq?-zO7W&gU{0A9F)d2Y0AZ=4QPV6E}uS~_rV3`c@96?KrVT6afl3L%!IBn
zQ_D4kE#AcPNzZUaD=rFk$C@a$xLn76=`!{QtN@a_v|Qi(xUdLWVerwXtFHUPK#Cx}
zPOmbT+Hg@yIjhY2<EQ-BAPiP3rAOCE?YN}SXmRaDHQe-85AC&w_GrgHRKo?S<8%gh
zan`5rN$ZP3bypD)&?6Ouz?kEr;5X`uqn?cRIYx3U)nI`%>R3D%rIKY7k+JQIGy&=t
z0#w>4>Lzhfu__tUs@t<?gQFnOEhKj6u{zU_OEOjV347igr#e0IhN-`UgQ68UdoY)U
zLk7M0Sm~C=WNm=j(aXK1w%&9Y7bVBPuc&(V{b1aG?dv0TOBd&GL1_;p2rJNK=a9>N
zFi_R%OQqVljti3$(U+U+5>GnklddncRSen91(}+#3JaA#bF=aW*m@=KXsh^jfXgz(
z#>udX`u(^0?E`8M9232UoIlJ(#U-KZaj3Wny0x2js0?6b?A*oMV_aC2TFxXs;pO{R
zCCD@v7EhO-=uUD`24xs(SrKN4i*`QCrMsPx5IBX~F|>JnJkRBs`ltw-$LH2As-p-m
z=E8B%W47uZm!%0+skJh;EX6bQ&UqFva=VZAyB8mDVX>-u;woJ4lWX%3kcj2ef&H&X
zT#_WPZy(f7W?;WRm->%c&Q4D44oK(R+b3MQyaoD6g$8TL#mv1}r0MDXEL#ok0!@0<
z2%F06nfIoB!Za9#$|ySc-JOSvBE^*CeL!(s|7MXj$+LO2kdUBfLE$1?oXi=Qy;{Hl
z@^p6>WUFYyoL!vHij^UivQWM!ci~6Y4v<Q<uMC$&jx*xKHTdrL;ix|l3_QavMp}cv
zJh?2L@v?`oaa_J!vUw*=wi>WST7z@{;Ig9BGN$%9m+l^CPz_zZwRDwk@5LqIkXl%z
zSv3-aS7C)7w^=&1`h{>o#*-&u)CAq+A>=`I@~j~}i-!;7qEt%s;SfeW7{BLXBv48W
z6g`Xo7{Wy*M#Sp$xXvVwYun6uNj5m*arn`=+{3syqC|P89_6D_^8W&=u$^=X!?`$;
zZ&u&}g}8J}2Cezg0X`}cQ6nwgwUK<BGD@S<X=P+_de(Zq^8`$Pdbo6wjT_6y;ly6p
zN@jK6eY+}z`spGiZJfs?$x1DT|9e~25%yTk&T-UV$t6XpWt>xeznQ831e`Pe>m_v@
zFIIC&@iMHUX3Hgo$0H%t2KSNZ*?i>y7i2p05KSQ}M>h;=R>8?BVVX32+kcXaGBte_
zH;P=^K^FpG?Ip1y(>}geDi;>1##xT2Sa*7NIsd^8PbXEBrYm#4<B~LJ10hV>T*lce
z0xSO)yOqCtg__*>DMH5Nt=xEZ^Le;vUtK5l73HgPNo1%L31NN31q<r9`Q>P&DPQ_Z
zjj;S5T%56i6i0{Ymj#&X4NYYM+1oipp_#uXHd?6@t_$e8t=hN3aP5onqi0p90EJxn
z<OpOfK`1e*${Et}#2djA{Q%RI_I!cjB5-9{jaS@N8gZm|uE(FJK(dmUU$k^bgZW5V
zr+iz6W%9TLlOKvORPyR=M?MPv3Bfg9Vj$f|6}ZqQBN$kp?Tkkp^coAj(#z$yZhSH-
zZ9>tAQe3BpYA(#%1A>0X-iVHW&-dix)Jila7B(4|Ze{MA0xK3J1N1(6d?=q4g9o2v
z*k|FGwH>p<SVrPU3${I+50jVb+cERuZSp#NwHi{xEUV?S)CL*H&)?dVZbJ_KzTrpf
za84p06@xxXGIZ#hdrtCjfM&xUX&pB2%ZG`t(xlS3Xs@Hy2E#b6!)Ma<kCpn{u}Ir8
zl$FJZ_2eR-|6gv^vSzM$tp+!1=}rfq2itw#KQK7ND<HtQ5<BdoVDjzK7dXt{Hu?4u
zYwf;mO1PRlI;UA5`S!Q@dB?87+<aV>u2WA*zT)uPMubiqnpSgn+fhS>^d&IYR+=QZ
zwcC*d<Z#s_hC_g9wIE`=cI$of4y<S<LOwbya^J%QXcelkP}JO;$_E8Vb>FrAxF0rK
z1B-<11%j01sQnz0M#WW`RU%dY#m~J^+@i*hUW~>ZWO5``)B++MZSiV9S&Uo|s?ezF
zhnOfbL<*f{^$|ezn9^}YC^VN5`x;t%-H)?T3RS4N!-4>(R?fB2$H3VH8>H{BmN?Df
z7)U#3VRIPcnXSTY7@i7Q1KRMKp67sKL=4X~hlq!P9a#RE>-9}@DCv?T5)MyIQ^=v0
zF&P~Be%p-ie@%p8lZ%kF%1$%C4~D{O*#e*e+q)j`0LUx5xw`!dOAv`+3y{30xSg8`
zky2m@^x%a5%OVkx5@VHUHN|$(R^`Q(Z<zlAOdz1LRCzsb@JM)OQXKSP>C*oNK%@dt
zAT83k`#eyT)?l7O0?IqpG_qumrg+5Wla%D~kVnGZ2d+%%TekV8h{>|wIM<Ty|I*es
zV%e6S5dzZeUAgW1$||_Pf%TcbFX~&K#{kPkug7x_!VTSq@9MPcMOS!*4;dtzmta2u
zTC`Sju}wh0_h&QID1Z*dEze62$Wj&yAYBY~8@eUQ5b@!xUEh|%+P#NKc_r?M@RYGp
z36=&N0`mRSc>czZNTNUJBW=J@A+rm|NQ?uhj3wqTK8B0`Y|#hHpVRckQj6(dQ3Pnb
z%E#$uWpyB>{w#ZCN-a2#Z=~@8c7^zdX^s;3h3$B>Py-Q=C=}1q2;1me?Tm~5o$yxf
z^bFLDNKKwKfJY=e59<|Mf#Hi@Ti4ea1uUI)bf>}8WbaD?G<^e^Gf?sK%cR+e$NQX-
zZgY=kaTPF^D6L*jf7Yg6mnX)dM&ehLv?a}vdIGqxBo_nvpQ{q^R)O#Us^V{~`&Q4%
zY0(5)r76ja`~;XLCnJM5p_NzWu{d|s!DwuI8>S}z8YsX^Xh2L<j*FSt=dharE~fcv
zdQPM!r%vMm6ZGaefk*FzRr>B_rw1LJar-DiN<6xYM<hJ?gXq+H)9>0iPB@GH33M-`
zfwu&RarOQKGjYCh>2w!7g9p9RskOpy1eh)=&w5FE9qu-YD|X-4dCr+?U@D%IwuvZE
zrZ#^%!d49tN_Y9I;_9ZU|MbV!_H2qY&o;zYm|MrgQ$BfBi>}=Vpl8IHzoeZqwJ~Dk
zs8IRTVbzEC{TuRTTP|Id+l}K<O;bi*pz|{%@Ooltls>@k(PcR;H;M6VIyDF^Bl}0T
z9CrdiX>8>T5+79dJdZ~vDBbr<02r7!E^{8VYq?Zb8p#FZb>kSWX<e3$%yDqn)#&nQ
zAe|(gp8K2ekft$|ja09i*I*~i=Ex#x)^D1UiNr<;Fp+TI8tNR|SK)70Y+o8<zeH~|
z*N@@BkgO5kD<!8y4jl(jUAtq=#^ZS)o20scm6Qo@;Pe;5HCJpjX^|>T<dIaCyoLa1
z$%a}plK@%^v1m}<Njwnp4LseM_GHqWBb{w{IN1>hXU@V2yY1tyUnh-{UqKLhA6tJ4
z>-%6RNPpclNd!_sS--4aSQ^=_O*k>7RTeUhN3u346#xxbSMhDzJh%eiTnaifiwDB1
zG~yDe;&SKmg-tg{zK+&i;&L9y<~Fu~NL@zk`*a>7R5qJbq|$46Bw1;+(TlxvlI*-Q
z+ypI>|9T!MN)s0$uDncM^QUXEvAT*MO{%hmMUrHn1eEt6XLKbG97XNLu9Y^tR3?d-
zxIlK@<WR|69cIvU9gn$03N2~S;C(ES2q+=e+|olpB26Yu9`Z7)!7kYuaexO>YxL$T
z^a7+(gEHpxgV8NQ1VyK$uN~%*^zsa%c#}zAk7JlxRg@aUpwm1Qsi+h;z2ddIyF7sU
zyzOc?Qm*nyHtUgq`j&5fT{Q+N_N<;#^*y@5BcUQn&U}ho_GffB46mErYQFI)52cUg
zdOeX9DdB}95PAa$uSn-SoUXKl$-Tuko^}i;ncoLPVSJZQ_{?C-nX|(&Firt>E-3On
zOA`4mXz*U2o1}<h9b7Bz8GbWKM5Y)Vy$g$!|3Z&K<1too2qMiXTzDj;ubzBzBocNS
zXimywh#0_0JP;ze2bGp4#+^7}1ISjT%f4YyR$jYsv1|s`_rZ`Ek_;+TqD4!nhqNJ~
zP3?Ck9?7PujesL4&@J!V?2xAfRtwqy7G~j*lsXx{ty#>m%3&DrO?Eb&B^L`M-==#_
z$gxz71Znv{r6QeRlE^U0T2^(fc3j1~C{8|hqcpY>OC$nHQpP9oEZe$(_ZrhbAq)P`
z>^-EXq7ADsNePi*QRbFk0@iRV;MY^K^D1TM4rVuEav)KRoJGMkEMP!k%v|^CQUkBt
zlm{YjD2S`BvrF)-YFK*6>wvU@&+z4uWJULdl=ouF0+bbvk7!WoKpsdR*+5*Pn-9uG
ztp+Fzp%3jGW`yuTa?Y+N9qNBCBMxDE;>~NivDu>Tj!5KGL#2<`s$ES-8yu@62g^Nt
zPp&M8h4l-rQ_*Mszf_Je0qs$Yr64cHq$$qf-dJRP&_z1ppf*Z)eYpN>e@F;qSkOWm
zRPASe9}ERvX+pP6;pH@6&*Hwh;kFZiqm9kbpCt-G$+GGJ%?DIVfR7_hB<XUmTSIuD
zv=vues?Hxbulb2cyKH5tRGWtKV6r@Sj={Z}PJ!xfG?0Sw{KW$$Seoi_Oq=Yyl2?2k
z8jKZhg59e3b1n-cf7L5-{8I;Vr!%+Ro`3B;7KvDdyuE{4gTtlrAdRsHp&Y&S8k@o+
zsdZs0Zb)xk_tYK}HvNSOJkeR|89r~|qr?o4cp&fQ{Z5_1nip+1o$l^-#8K+>XiQ=B
zbYjOG#2)tNOUg|ij~|AEcyn_$Qy84%pd(Ne2_H4)!VHH-m%g7fS2CK)B}QLx1ktF3
z-Q0qNuN^DH_x!-A6zzL%vOcd-=@rrBHDX~W_pQ~6q{+TcPUq1Sk@h`3uQB8>gY-C-
z5r>Uh;_g`vJG((T=~~ymTpb6S2PjRWk{2^xAE0WL1-|q*tc_m0Pu5{#Wana@ZVD@t
z6Q*_*s}a3;yLd233R#IcjjvnzNX*#vLDDHY*_(}tir2|7hSP5S%3Q>(DfCjh5OwX!
z<e02ZU#E_Y8qN~eAD-KZdHKLD4jw;^0h8~wlOOK+T4qcpr)PMrnm%b=GJ^p!n|ME%
zxFSv&s*|x3A2@JPtu5Pdjj?)0iTkcv-qW$6tKwr5G<7^Y+#8C|sSe*WEiUGbSGkHy
zCvfBI43t?qy+<8$V^D`)&$?CwP2Sz75`tBKY$<5Bw5d#e$8uo;N6JfR{XM$azIf!$
zUfbo)>Q!Na$P|{B5d3zx;rqf!2&N)Bre(@rmyL>0kh@&Mu6Fv>HP;kyO9cR;*Yv)g
zY>@2ZmQ9)0Mb3jv`R$Hd>NjMf6#7`)M-rE*>)^NUo3Tz^g%hM*t$R}@NF5<_m`0a6
zyQU^guL$lE(i@nTEt#Z9$Rr~idipct-l<Sq0P2=#b2!<C$*H4|=WI(=ym+)L+9cgV
zzJUhq>dXWwWG08VRc^Jp8|HA|IO!tQCyEV{RaO2p`1i3n*q3V%htmU8WhfgX?>Oww
zOj)z_!v;oSw}B}$kI6|=$n!xXN9#&?0W=8Cjuz<SGA2l`h_Up57jUY>y}!-vf>{4l
z6Y2O&TF>N&>@w4jSj~N@O%bd2UIxZe-zy+V`+&Mn2VxtM@d5o>bZYV(9>TmHk=52k
znUGY+T-PLkRqvjV@dl>r65NWcYg4wFnmp_-M=}aaS8ND?8zvq+e+Opx;VxZXl$v}p
zZv)56AyKImEJNHU&Wj)H19kL9x{NC|xuAy}DpmX|AnnMp`e7>cDD{~^b5oL=c9+Yw
z)B_4|+bphnJ`a)z2i!AI*ECa;bN7|QmDB|akZZX7oii5UX?ql0(&7E64Gc2E9a#>*
ztJv$41F?vb<_R<=WGfq^N|3Qu|I>L`uPn%3_}V2;Ywc!Y^a{LCEd$i%O6_wxq%#*!
zlCEqM4st*SJlHNCeN1=Tpi4q7CP$zY)cF<@R7W8Xlx4x=+3$KfInBpQSM*w4E0qaS
z7(;q-iOT-(%~*1{Kgli_?boKEV~+xhQ$=VjkL(JV_CHhl#UDkO)1kIhb<YCXAekro
z2N%@Z*$b;%m8#MT{#@OeptL<@e4ORkQvtC)x}H6ND>zP}7o|JcGZ6wbvigV*R^K|s
zGYrQ9TeO-qK*%?Z3B$QAKR__8+|o;Dbgt>m0!N(CFjKC{VandLsUx57I%-I-$=H`n
zMyx}-pB4)lpAQYQxeX|Qxv`?vt-Wxj8IaPVF}0VlF&fLW&H|WqDG8Z;A<arSR61(&
z`-hFOxpOGMDfxKFu${;_=RyjDb_p+6vN-e;<pQ99-bts=!e!4-KxLLqbd!>taWxAR
zrm!^d5up6Nf7yD{c*zwbM2}95V{D47YlqdG>U=jo@`!ba*4n)jY>e$iO^5QNKWFG@
zx6l~|$P(>3L|Erdhc7E`Plvkh!Hv=v=X>)Ip<yy_?(`3M9GnO1!aT5OtL}A?Ar9uK
z&AEesOdD3edwv6E5Qm*MJw7L{usOCjxH%w_q_5)t`h0B&qpcxL(mP#u1kxla)XF%e
zxPv}7=vB>Yd9ldVq6=bDlSe;t1c@>B^WZT|hDHQ|3$Xk%pEj7bRogx|VyMy@UI`xu
zsITfbEQO;{zy#=iA^AUYA*v{yPN70e2;ofC(3@A<6)um8rQT9p@y~pmxto_T?rf^p
zh*wbJJxEAPH?deF2SJZTh4S;k3oZ`Zxdk@f2r(9YUE)r0F3zY-n>pn$CQ08y%yY_Q
zAzw;yc@~G{5M**l#1tQ`iOU*_)pZFnN_0P)kkUdRBAoqYCINDtsasb5LWS*!q0$Rf
zm1+x<$-NL6+u%$~w$y!78tbBlPBx?@j}4T?w0VPGK-9deB77ggP{-O$#Yd4`tkHU`
zR{#WX*?(XD(Fn#m4htqdH)=+U;jFhc1aJ{whIUSbbmYbcjXSOv!&$=t0o?0HQNd4u
z3&k=@PsPQtVmO=Y^a8v?&pcdagGX8w(&D{}6XU5Y7eyT6(x3U}SI$f`|9OHVoUz@g
z@WL?u^o>iSAW%Jw7abQgOJozsb8Ts7>JBBbx|SAGysv#B@ds8@I@YPsm(9^dpdFDC
zt<Hs)gJFwH+}Mo0$a80D4AOTXkEO(mXTqT8XBVv^CBS42r-d3jiVc##=$t7yZS@rl
z)J0f2ea`MYn$0pAgh+#z^zDwmH`HmYBN$#fGg+NLzoM-tUU%3ErDcXd^r_EE=JzFP
z6ClkkIjF)4*xf{AdCY4kpeSkHJB}p@q)}M6jRK&WO0PE`F*d{P3jPjH<biC$0Rhqt
zb@a_^n69%CV$;eiI*miJjj;ttt1GCFUIEFzEl!)69FpyBOMn#N^eERUkcwlKqGcL1
zheJ}>Y`X<WzgJ#*um~1V9!5bM#Paz(l67fv2ugnrnTzR7zI*9H7RVB?Ib>M9YST{z
z8h?Z!ZQ$+bekeb=3|P4B9#Vjo>sao`&X`9p;qT0=k!dakFLfl5Hd@O~{HCundeePk
ziz9;RQ7qvFZ~5kY<48O-1ap=4+0I)z2#`ch%&fyRabxc-xOME*96#D;@7&I1X?1Em
z*cTRKY+fX=!Y<mk@6J33RT?8iR|f>_;KGdWiV3fK+w{Z27hs=Is-<-A?YGwviWJDH
zL&L=uSCUoST(Zr<qLAk(Y}<CCrY1MP;0S^fDRW`7Sh*ho9a#S$E;~R+u$`kbSDUUl
z0+}kCqx)*p<Z+m=Fxj>=2}^g+D|*8bh8%30EZZT#WNicxGaz^FT##cDvLdtrM6v;B
z^Q*8qLKi?y>*755J0{UHEI~Bt${nUGN`<zLS`lWxFC>5(wrTF%tXNa)>ZK^x2W*rf
zS`mfLs=N`hD)3r?;$b6*0&&`4YjG*bQ+~2h<UIx%pv#%o-@kxqItx7z=%713V`B&T
z3Zp4NeU@`H0o^spo|2%1HH@e!T~!ws;&7ruNe@tyM-U+WHS=k!4={*4c4<FlIVMS6
zN2}1si-U?ycwA&DM0!?5Y7QGJFhQv5GCqkXj>_3UmGcdXO<Va%wYSBUgM#if+&d3e
z!^@vz!x8er@L0P;yNoTFq-cfSS_djHOiPZGnCuBqJgl5HyvD8AAcH~EM_hH8Yq-z+
z2*2$D!=wGf89ycm?U!Y`qQTiWmiL9#sVYcO&cRGn9A=avT9YU)Rpih0T^|CK%~={c
z9PQ3T={*z%<5fm+)|)@d=!PP=azS)Q2gErvOcv~16{j)BTmm+6uG#&A$6*u25PH)#
z@jQ$}Qpd}1<T*mN|C<4vg*aEECCbyA$x%gMS;rMqQwM1QiM}Kqb6pC(6~p37`*EF)
zNy0ekLuL5!9AP)JyI{_iLKPlu=Fxg4NT~?b#>sN9OLI@TkQuYKl$}i96Pc(unJ%Ks
z-D#yd!th9ETw12?1DGJm-dtduKHNE`{6;X4iMEJ*gP16N1DQhA`1UUM3(VXMs6L`e
zVMCcDr2;)Y;-bXo?a4*`eUe}jBXPHtCaoREA;rh3<d9-#B@{UTi+F`-g&wHkQ<x<4
zd=ih4&uz$j<Sz)-1aTNWp;BftQB;=~0gIT_Xz$lAkm)?B_n?ldCoE)xNU&#!3pLmN
z2(T*DzFq4xe9>P8q<-)5QYI@*UJ&-~VVBQQu=0I~TIg}AznaN0E>Ps5FX1RG+x@w{
zD?oiWfTGoxX+0A~f=ihPy}I{BGLiQ3wZWrpV#H=9i);YoM0^#Gt$N=XEAEyFQvKcB
z$^;qpr?%Y55-<sml;tI!qlT_|BPnXqH9pE(B`$#S>3HDNZ$yB@yGc>kA2CtJp|Um_
z5<qom_$fRe7G8h5k*fcliAqu!^pV^ht~HF!_;plPJxpQ%V00w0<Oc_opp-Fl4Q;&o
zo`XC3j;cy}M#cPMa!l)cg82%sfbPc3h;7pvfsxv7g`bzT32UcjG`=u?|75H7GUadW
zHVT?cfKQ^OYL$nNGFWbG3P|-zbv@)TFblA|p;5K+Gg0U?q>0ty@f=~7bShx-*wsKC
z#r+N%)vhQL6-FMR&_<gRMgmgZ@4RI3ID`^6%S%z+N;6SdrQ%|vaT#7%s>i#te%}k9
zUc)YO@vh25B`K7;@E92z>st+`-5_r_euNRyZnjrVCMizl<n7wIOg&sSa~fdhB_6sm
zK}j-WvEeNql*)(&YJ6SkFlpVHAfx9)e_iom%3opl$vA97@7P(y$tHZ1^|HEv@s;2B
z=eI(bPBW1#pzVBKD<;b5D6A(<0;v1fDp$&lQOXA6qfz;~F;Qg08x<qR&ObGN7ts&1
zcNUUWwDtA-lZ~=1f)bFaT%*B*OW|mE5X$svnL4Q1AQHJ)n<WUKGTfVxxj1ARkJW>g
z=~OHmrHGFUGq(T{0crc{e_@>3LM|HAJc$W1=EP)}`KcxTZe_3@jzGygt-Lt{nINTt
zpyXs@FE-A2MGr605blWH-V__bM8%nQyyA0r&e^Jq$b0W?>=us4qnM;5kitoEg0MGV
zH{k93y%4G=grfDgVLTH>CX}8$NG*&yHMzv|BESsCx=*9dPGq7;Vk}y%G2a#yFuzV8
zG(I^Y)px8OwE4A|&O{jlbQ$J1L%a3;ErflIFj{ojw_+v}g!ob`V|}0cJv8DPgjsI4
z=-!{r<S402sRF8-`7(KYKd9~`+yp&JMHg^LYP<ttX`di~dbgxl`!~o;^tYS4Zx%68
z#&sh;PDa=~$8gh|jMHE{gJ`;niAutT*V4^NK&DH@X1m<SARTg(ZbK8+FhRz9sWz<|
z1Xzc6b=S7XFr~mv&{n=}JCl`!{jO+qNopf&X4t<nBWxlgtlWGw4P~N`M7`G$$n+SU
z$vFs|;BN7a(PV%uKd=QgR|1<5d-gj<gpm$DX&%TS1fzj}(sE<^7_!(=M-Ww%QoQrX
z;_3@yJOFErA3b?=Y=9(z=uj5ZmWjxcVW!vCgIM?$*tNcLI>wZR2*gvF71Q+gy}3m(
z^m#G#v_xgjaWHbPTKha5RGM5E^g_%)qb6VAp=92xn&L9<+D4dHINX8R5KPvly6Ol;
zI)<6d*<raz`j%#%F{T2T-v2rRXrjZl(Hh}mj{98;Ri1;9sR$#W)pdY}hznK38f07r
zD0yyK@dyZ4pn|m2X4g%QG!RN||Br+Ie`F;I!?7;X%8?OI1ZXJMH!lnV)975GKRS??
zdxydA&}Ax1-wVJ*N_?!7Nm;Rav-F27`U?k!Awzc#@p(JkrAD_?2(}s)m99e(-#I8U
zWU6R$v?ZX!FPGo8ER2#EJ@$WeA@Y<AO&uhP(u|$3WOrc;bgG&A1@@a;y`{3{DlEWL
z_vJ1b)*<WWJoNH1c=K?$2iiV5R^zbb`}7z8o0+>5rt^Jl&*+l29@RN8*asr=C^;=I
z&#qfpdKMf=b`a_P%yl<DO)aBV_)f%wK?^~u1`@5r^L6<oT+Nl!6Y^ZA_hm8xMsig2
zLBIu14vbi%te&wCzf_p(3-3`I5g5&?*HC~JrZk^b3(T?{^`~|nifCDl>x?w(W>W!{
zHKQZI>U6hO$SUaX9C9D@fbD4|z_KaK5P;Q~G`rkR!0sbkMc*qp(OLi&tBzGho0nz*
z+@6}-5ADTbHn6%>wkLrCIGwBxaZQR>TrnTU_y;VX9<(goI54tE%M$F=!x74Z$kmTP
zSw6iT$kda=3i9#tZtEjjZCSTjU<I<a)PkF$g{olSfXEE9W~>B8D=N48%He9*j$WYO
zvr0*B+fRUHYND;yB#5t^ecD#<>jiV14|AlQaN-gUku1`-dtd?ihAqF5^%iL55r5FM
zlFRutz0A&Fu`gGSybQVAuxX%2uFEP8jf@;Az%x~%2uRlIMa|dEA=xrJJ&xbPVL^{7
ztv*6yPQ*B*r5|vc>$6P(x9bi^G+eDwMVjJmhatT+68PwxYZDC7iR|xa-3{juB!Pec
zYsvtxdzs-fTH=ZxJ(Y9sWJ_a|>A&q$=*uoq2ONPge}y+GqkC6=TptSSfFB)W9AJK5
zqB4gDU>%-S&O^`XU~Z&OGp({t2U(Ip8hJg=+~OO(8UXHE$V6u<${po^#GO!f_xJr4
zW8H{DN`&rP@bLx<BF~YZnb~rC1?cQLc3ZU0-ri<Wh|XliNi~YzxlbM?*o%0AHiMY^
zERcC?pyA|^()R=O#{1?IM<ntfK|)<&N02AR<!d5@$%f(?+7Z-w%0VR5RmABG=B<^0
zBbamcOQS$6wKuWdp;<XnIV`=ZuZ_bNV7YcZw<Hs0&ndgz$F>gwER_;nba<Y}I$vFn
z<n7T57XA;yXIiq-|KrfmPc+V&XcmyHYoF^S-C!eyt4Pi7)=v&Ap{_Mt5g;WFE_v!5
zwu*m2Dmp3CJNq9Fw!&%V2ivd~xC@{vRh@B;<gmz#ZFG#jGbbOV#GcBWP7r`?7~JUA
zA=rEi3?MyPXL9plDA_S@xdm9^s@cAEVTbQvhqPdC3-Vcpq-aY8umJ4SzB_A9BKDe$
z&b_o?!%OmEsu)Y2M1WQ5)uRtnVe+J18EqVEt8!VSx2X8+8m0;Sdl9LGt1Lw=s=-Cs
zoI(glwXTKd+l#P4KZ2v`78iN)QSvS@PA>QN+AYpbPL~%-S(h5|SxU9q98n6$^?qXa
z`sC0f7e<Sg>sfaWOOq5wnysY8$^xvaSx$Jq2kR-!p0<qEe{xuG8~RA|B@zMDk?N^y
z`eK)OxRZ2t%~5htWJST{4jE3q^174zI>HsI?6Rxzi5wW@GS-QU+k9fRB;T`$GdI|!
z>S_+)z$D?OfEs7zd8RuB$;x3_p{=9aKn{$Im`W?d`Sx+Sf9@ab*j8zztPw*6Sn;vu
zGFkz-PF^3X%Z~$?#Z9EFzvl8;s#sjy<Q$S%Lx8)6)BbnhHS|dI(^mg;C7%Tyilf$f
zPD=b2NjfENozZJbqiuXtH2l1|2ZMkPyB+`XtSCI<H9Old9OJ;q6tiaP1X#a<k2Yuk
zmEN+mjprvhEZCvaz(3Toj@OrJ$L>ymTpKZFv=Wo=@>!wsl=$$|!;+-pp^Kdo^$$5P
zqC|3OM%WPNzVREJ6_dHYots+zl*57&;qB!(;Je?O<QW0M+8~!pYccOD4vYw9)5J@_
zJiga#d#OlyC#R^9(kb@w4F?9vtR)r#sN9pMYG*--E8sn7xgrWQV~4&(uIL!GjD@9P
ztHZI+urHc}7?E}zp+z|`;(jeX%?0H8={LvI9d|OyG?SuM;Qy7jLv?X?b$4~s)J}V}
z&l=JzEl)@YpuP><@=sORU`#`)3LDnsqg47BoeVFfU(i)`6?S;u&gc)+=fm{!X7d5B
zYr{w&u-(o$zBU$sVK&Q<Y}>Ua6UQTJyNfV~UYpl8=fiC3eFTQgyZXeAq#$rU+$7DK
z-HOj5yD)J#RWIdhd`FB}6-0?Nt8QC9OJl7I6p-tGOCL8M1Xc{Z6g|P7wdb<rZHqkr
ztn|AWP`mAd-y<PhltQcY;As#m2>!7PfEsskgi^&s>4o#1N2{)n3qqW6qlGl1_BR`#
zQuMQ~`vU3Cn;)KDAU9X<*eR`91XB_sj!lRmfLawZA5|WRo$#YgAuN)Kl0?-4sD0~C
z`jhTyqcD4ER0bUrWt7UAsS!Zw4*fmqAa)9M;FW09%V<7I;Bf~LtIOTT5z3&^sD(3<
z`q9^ajfWG;iXsf!F(}ypLb1L3Cg2#B@45D%2lVELVWRccHi;>WktNVY$Qo~sa?a~K
z8K@(6sO<gtC~K!c0jcJ8{reRzzB%=>v+-~JnJ9^k3!pw+f0BI5*~zIsB6hmv%H#n|
z6j310)mfG2yR7T><xrkCJS#m;C+2Z6HqEI8B)WaqWA`keUfGS)xdj5KuuyTS4lQb3
zb_P&SfHF6h!vBd%)MJYrp<)zaT1)sK;2E4N9#0?#mn0WXAMk8l;)tQv>7taD1f2ln
zR=H*;_Tn#p2SMlqo_5O}LGawPLK&-y5I=+c@@9kApCFLCzBDC#g(Hf@q8-YTzJH?+
z5zDQ1L@`7th27h^Ia5ovKm?BJKgsElf%$zfWIDI`tM^QfgT5YOhfAMR723&?M4~f+
zIdgquUUxT)|4002(&ODM5@d3>d8=K3wD)AQ{FSgx8j9Pt^c4leUJl8_y$)|`rf&u2
zscAZa|8RxHk<;_-_RNgO8et1@yAryCP`TzdS9uJgITy(@CIagFe51#e{E#vWT(&EP
zeDz2Osq(Csq}Rn8%nd^YnA*(A?K<M9G}=x~^&0^uhRwxLx1n2-4CF(<DQC$|^WhVn
zoN7{HIy*IYu*)TLn2a9&H+gu-!`gvZK*sXB7j-FA5!=t{(hkJ8oCSeVp``1vO$TBD
ztZS8DH9DgrWf}6RwJ15ec?)3OU2q9gYf#D1Y_>o0SFeUW_LB<qJ4Y$W#R3J0M6>_F
zg!122oJy#HJ}}2<Ia8BYbQ7Su%hzo7Nfm<<5q~VlHAY&qBSr`iiP1)pbvmszhrn14
z_w)%oiI8_qJ*j3xXA2VlgJvsTDp)r!<g9`lKC};-zDAHr9*?p-;v^vG4Mpr~EriVa
zmi9rZ$+->+B4tk$=Yo4Rktjd<+!5ui)I_=US&%8;*=~*QowNy!R+@%L1zlgri|>Vq
z4auILE<NV#o{07SBi=@|Ek8|7K2=+Q36G$c;|>PTyuPFeaQoo<=wkUjjfHUJ{dyUb
z<m&&5|5*l;WRELtuBpkMz5+a`RNp|Rh)Z3EJ&Z%CT*w+)qbbQdy9yxPWv(Q}WA-ik
z11_EPsi2pxNkfHja@Wck&AuOOQyxp#RO!^HH(m(%Uly)X+Aqg$qV)TB5G`eD^0PGp
zP~+5)WvJRRC$1JR?&S2ZA8j}($<<B>0F6%(!q3UE)pfHz*7L(s8CzXCH<sTQK)TCa
zK*}95Y%PieCuvwkTTbw6A)fJxbs3X!-P_~_PZ5jHYAp?V&VCjH5{<g(l(FF&8CaK7
z9Xn|tr+Z<koX+`L@ZGArOI$>JRHzK#$Ze%w9Yw#fY!Oo6i(&#mVyyC_Nxw@m%0DqX
z{t2dokJRKMo`OJ`esx#*(<?{8kJm=fOxw=&_5wtA7r8;e^2#fA@4x_#Yfi6?Dal8A
z2m#ZUW2KC7oat2gj3*-Hr`}Q@@T89blZ+z~Q;rYF5O*?c3pT}Xu??p;#>2+3kYszO
zh>4bQhFH1nZO?x2Hd7JE(HrCGe{o3Gm+l-!Z|QH0=@;m9vmJ5bwZhqv=<B1aj=*No
zqq{VpxR3Suc&*JTfI}%@Z%)~bM<*T1RV=SZ8p#`p7+PBkRxzX?m>88#ycB9~!7TyB
zGvmSs6iBB>BR8-)*7U!CIIZTa+2;k}df`WxKHu5Gz{pSZyjnZ1P$yLHe)pB;VFzqw
zfS@;X@w0Fl!^qZsBU)kFkf#{vA#y*-M%la*=}>p+8?^cMv?<eb>9iw`N@<7_K1KUp
zs_CI~n3ZKBrGr!L3==>o3WIolG)u@Imq<m+Zyedt8VmWw2H8B2;V?sLojmXRTpQH}
zlV>?LRCF@_kBluHEWk#M83htJY_g)X^ZrcO3!}~lA4;R1Wn-cwrY#`Vp2jKHC&Jb=
zD1@iyP?j7_l*;zq3IWiMz=Q2C!m#V$jEi0q-sRzdY~SJ#AYBTbf0DfVQ4P@&O)6i2
zL$ZBe#33pDNn}1{FioP6!c3ASU+NHIHHL^=wO2QS(muig(VNXRd<d~U+b~RkS0nJB
zOp9T71u>`S`P2sQC8S>~W3qFF^<>Z?Cw=A79>~9pBM!MtDZHqD`tbLjCa{A*m^VF(
z=Cc8WBJYOd($T;F{eh#Vi^zM>sD{o=Sxl&K^O>MSwOP%f+>W>rxnT|^;O=PD)M|WG
zLX?aeoMrVDH9Er$&BBjH{dQ%d<h!B1t+P*`0fRe(Xq-lEsm(+g6)3CfqT{ADhdRP6
zYGJ%+)T+7yC`%k9Fjk97?>_n$mW+jnw`i2YlaETYoJBfZ&#h)L;&hR?p)d(0w%s(U
zO%pCEOskU-a|cvim3;{EG~fND{<T&B6BVVFc^f*%gfaE1Bf8&OSy~g3Gn7d(T19-c
z*8GNnLj|Vqj_6BgQ=%QQ;>aC=P+^C3Am6RAGqEVWN0yQvqZd4ciNrg|vzo)QF{eUd
z2~N01E-B=^pU9C$GI<@U&IBV5w>*Bfa-bTMw;;4hpHN38If7wJX?qUN>6At4z5<qS
z7&-{9e6Zc-rTPFz6k}FUr6+BFf{i!h9ZHkFA<*kmresH)D7C7NaAbTb)04aPF)nTG
z+-es#Kr%7{4(RlP&i}rH&LVN%N?Y7(Hi`&jb3`qG8nVN`%PE8nzu{VG)E}dmY9lC{
zO}|4_`XfZwDnyKNgfhgY6#zQ40PE!0JZ<HU*;pM$BGRX0;@!;egCTD}e%*Q25_edE
z7k+f4x@i(i5Q!lOi1am6mL*wmf>797DpHHdED{kZ!O}0;At?Q^p(_YdQXGLy58D`o
zCs3!2O$rlFFbr6_-@*?r1FWQ2w4oG#`SU<?@9}Hl-TsIC3{AVWf+rDZ3L{Rq<HF%8
zn@9J>UhHElspEdNMubMLtZ^<{TMa#8)XqCdX*l)9j~4CdJ|0YBgAS*ymDb>R=Lb`<
z{GCJcoTkO>=h28FiD=@(mNftR!OQSP+jB^_O_~!TG~=*g*%fW5vg2gja#B2Z53xCY
zbz<IW5uU6Vw&And*Q+@@IgLTS(DuADCHciU5g2J7h*EM<*+Mru)qM3HoeZvKmdF<W
zRs?6gM=4+?UER7>A?<dSB5<Y^dGMjPgZ-!3gAg;ZrVs^S3-iAA9thZ1xD(m~A9%up
z$?MaQ{8`(<6YJwE{AjV}KIf5$Sh5mGMcog5Tm+HkV@E(wwYo1wU`FE?b|YD~P6;Dh
z(j!=4Xqx9+0h&gI$C1S+cIzpLLw3RQ*Q+X3WXfkQO%aVAt>!JTfPEwk@{6pCAiDE0
z=|tO~!G~{*M$x!V#I$-!-&mw0n@$ZJ;m}#xv~qG{X!3o}-peXBMJ$M`>JoEb$^3q(
z!Jxo}5cB1A0n&)T2bof_1KIje8V>sSvLqoSb$F~&M*Hj3&F6OR!IHVtUmDv?>cc}p
zd1=d~fK1bN_#b|a!75){3R*Rc2?|q?M_$E2H)dqdas>hCMeMTa0QB<&CJ0Tot$sp4
zqQmq5jr{~aQ4+BY4XQSS2?|q0%TitGfaOi*z@fWfoM=DWZ!QxAb1=ln=}>;$uk@K?
z2-k8VZ$OJ=Sj;3rq<EdV>!^V4Zl9ZS<s`zHgXN{58Ot~z9n3-88X}vG)NhCG0--xP
zA-i`S6QoebN11QX3J6qX{ieXBhy;VMLeXP%aSM|ZPd)W3K<X8=ufjV_q+yk$s=Kn4
zNrE-#Vq~;jR|TB^WIzDesDcz!@gNgqG&*zPw17m(eSYK~1ILPM%@W;xIK>1(BBe@i
zj@boB*)lvUw-NR|81_wD!;KqE5`2Tod`m-sQ@r|<ZJ)t-j%AkSJiEi>$egbgTmQ47
zId%j|;nE>$^oq?P-Be^K?%=1K^LxOl_J&iX1-h20m4l_6tgU243Nt6@1r*n2YrZWn
z5K_JYi=IXkbMZLxJkWTjD;bX>?wVw`OkB&$B*7G{QL=zYT78y|2G~NDT2hg|7h!^k
z>a4kC0aAtO%1iAqVJ{#>N_+296?i1P&@Jv%A2mEW;{pyFhPq2ZiM5y@vczg-%%kx>
zd-9R_8VCK+=CHH@4-}=b^a2*pU0}To5C4ZMxXHbw2EL^Ulcca|s^gGj3R0yPaOog5
zcPB@jSXDjYG<n3)^Z$_d-VWOB$$BxrFUd$aOjcPl66Y#=e<+Tz`H5wmwze}}Sdu^*
zo7w>ZP(#(Ok53`eN-X2F5wz&R1BrB3N`G+Z{M#r6i)1;G7LX>zv&t3nY(X9D_vjPp
zyIclTC;MK@%UOvo$wg7bgzgQtWqPT}St58c5uWV2`Np|BOuvoNM{O7BuJ7d_5unU6
z#9GPqclC!K-;5}nzKu|Go(S$gT!83RW^BR}EE|2AOUs}0q=+D+)E@HHdMMy+$sq`0
zZ=)=T&J*<5DFT&OP8#{_^4M5-_;{Sj+geRZ@*k%~XtFOM)KFEJSOc;1S-beT$iFNg
z@g^emb?HxX+5^wK?uZnr4iiqWZ@D?s&=Ce%0ds&p(0j-Hegq(CORzw0WrTBZON7f#
zDEE~(#fA4+Qb_!~07+kB=KtowVP%CpwEJyxpG88SPj@t$ks;H@g~yIefTJ%0M^CRP
z^`EmyP@GLj=1`>cO@KbGuJFnc2oERYe}t{zOZ)n(U0};38B1p@`|=Q?LzKQe=8{oU
zDOI-D9C<8DmqWE#SNuQkT&dxKV(8_lN_4Zi5tW)8DuOX-kgkUopniGLetLE!!(QH|
zuMDInXUOjBVC#`KSVXuqD!q&eVEfLilI<;29Ef0=7B<dZ982A-5ugTp`%K%8)%ptV
zD%)PRO-(-AM4W1KAxnTc<Lb?%Ss3NZ5mHHC2a7YQYJLG~|KZIJWX6SsU&Ex5zKam2
zVpwHlzXun2*m58wt*LQxs!JJg&tc+BX~ZBPY_keAv(124OF))`K63J%$pM?}*Ct{X
zz&)R{CrX1Qs33wAx*dwwe22KSTiT|A58jD_$@fUJ?zAt>y3`RXRENG#X*C}X_e>_g
zLlE;L8s$?V7zx8vq{ZpULzqbBGYbJ$#Rq*xHO88%!jJab&Ko%5Nc^?{%&kXoEO{0t
z9Hv3Xbh~-5D1~g%s)bK8L}J61jKQOK9(y<QL^BSUZJ;F}UC|Tc#`gkm4>s>K@2~A*
zJZ+TTd~rg6_kXROcUV+M_s3CUi@lrJI~EWS5XIgicCpuGSr%AfVclI3?AW`p#$Hh)
z7VH`m#ol5svG*Ru5>4#-`_3-Q?%drwcjkS5KJVs9-aqcgbLPxBXU?3N8Mf;0X&YcB
zYsyK@q|+Z<Jb}W*_K0G;U5{M9V+t(W$SKlX$9MVwP3WI;wD2hIT*dp%vpnNq?~CxG
zi+fvHpAV11@g^^WmU}0>Li)Co*O3#s!zgTN3jPy!*UUM|5F<Rw;l4r+?{|9I{khHI
zJ%)CZrjdW1W@9W*Q1a*C%hvz-qA#XzR>(u=t1<VPAV2TA2wVJ$8&jxaP&)kiXJiJn
z;;KAif*h)C9E!U)b5*H)z&yiJn#RPYvoT^zmog#syFqOWP@<yE?eZHoCR}T<-CxZi
zj^D~JD?Y)ql1GGTaVGx9=HR+^ek-`&WujgSaXLC#!R^mXjIXyJ?m*zTf@~$n<voq*
z@-Ke0xh?<31o?RT;s7E)=;n_bKO)6<JLm*D>DEdn<A%GD#6OM^`sZTq<c@$u;zwJ;
z>?{mWc$80FA;**B?3%c<#OWaYqB)JTGC3-TA~J_O(~@Vb{s>bD!z7|PG1=K1hY|({
zXT`?eMabjgu}<<F$i?R1i98>E(|&O~;CL4z4_I_tYN`Bejxj>x@8jdgk2+E~eOeh{
zJ|pVUll4qNHp;#k!=bsDcFq3IhaBOpmvj!bD#peLKCoIbQM>j#n88E@B3hoU<=G(n
zji?;*{P|e(<87$zUsMKZpHRqyjlo+bnVkW$AlE4fT{Ua(DGSo_x22xFI`VcpOszk3
zMpv0uFu$(})2KAjCfnwftR&Xe1lfUU=U22q2auAXHd<xr-YiLQK1*yBcB)*|<R1}#
z%uZu7zcvemb97>$p|j?z1|yNuKq^{y1?sXumV+Kb=2q-N)@QXqy5U56QjbLv4-M1y
z)p>jbE_*umGwD$pSf540aYr%b-MAllt_JM9VL7St<~3%4!nLHGLgYYG*B(Ksm!Z6c
z5Q`qB@@-fo7#{9ej}>^cdh^5ZR1zN+Vf{~&y0v4GEGIa%nb(kWOs2A%Hr{QIDchlf
zbeOh;ut-FELL#{z9TrC#1AcRA4CvdF1&Xj-NUpLiwm3vu@Y{wVk1<RaFif=Nt?I)f
z8F4wKkVv^prF|O=-IYhWO=k;F`>{Y)k@!Pvxlb>%o`LErJGs_0EsJA0IV>d6oJEm0
zib8Ft5n*Y&dmhCi#cJTiIY_R<5xrBZieZsN%H2N{iw?O^8PAFCkXC1QDl%;Lt@q<?
z6Ystxzv?XXR;U484^2*bK2u2|(9GBw#-^JlzOFz$^vC5{Vxn*&tX(~+gq4<ZFa^&>
zA6;B#{b1PPQrIC~?Rv4EgBBKteh#I&q&>_VS~u=K1Ee3Y&rX+IPoyf*EIz|w!<55o
zytv<1M^5P1L^lL&`g?b<a8{Qq<lK{wl^%k$;v8lJ?Vn!!#v&2_1ViD!8=}HL`p&5k
z>7<j(J(9)(88~ONeXJUG&c2#dCMUuEX^}1*V3AB_qpwi@a<6emO(lT#IytC?M_8Z)
zVUbE7FW9~=Lhw}NFSI?BKEWal7#J>?&+gZZA65qOirjTgD{tFr7D-s7ohiNYK7l=q
zbc!Rj&ayz(I3ki&bZEOJ@hqw~hw4j38hC+4GHJ~!A$vHSyTr6;%%xRG{%m(pK#izK
zuDH(xp$?^RD$RAQvO%o7vk_0_AcLZeF^0If81BBWZP)LO+JwLP_xS76?k-IkB1z9V
zx|j~79U641B5L~+q`32cE6Oy;fXxegUpfb_r01fvijXV?KRR?|%^xgNk;+sda1M#O
zEY0<R*=Ce=z{VF)q-ACpvLL(P8~M+%uPt#-HdlzWk>~**Xplj?k?7fh;cdEM<F!}^
z`lh(#q*<O^(gCX1i(IXI>A;f#P2q8`RgjKehgOP2jGn_;YFVYa9zFU9`kT&jH1b>#
z_f#ugxToem46y**JMG$AbzuS$$V*w7rDa)B?Dp|u?C~0tKw5^7Mc3aZc4Lzu4}!g|
z_l5&iH9>Rz8wwS}aAyfEl(C00Dn{V_#d)!JJV=-F)~ZsW&h%F#krQYcD<2M_(!(|k
z2t>q+a*9~P%!(*gxa|l72WjKH%lD=skUYW;4XwVygOo|}wfSW#w%U72S=4<e_(;|F
zZKyIylX<3vL#PM6&EMCAk#EQ3q8F&cCNoiH72ZMQ7b(jx`O3Y3MKrD?6)D@#OiqHz
zFfhy>@Hs>(ls!++auBIHaI{Dv3lvaB?Erp}4&UpN^9aK6UCds3=AK@{<cNpje^x&`
z+XCX82#|{OW+@Yu;P8YwhwAQ+KmWrXOr}~`4$vaaUd!gd8JQCe0`vBtas^KZU?Ft}
zt8W^$X}uy!r8e6Rws1)G?C-f14UkBOzBbw*T5M;c%qk&+7~iYktHv0m$2enP%PC+R
z$TSP?VR8~wBslR~-jq?}3j7O!#=#TOy4!e!4I(kaegKj~cX#)kT2Kw4$-~JavYt^!
z8GRKm7_vvgoTZ=NKMMbv3&TYF*GcD@sIWxGLo^&hwQI9;%?5agk_d)0DfJ4IWF07h
zS8ewNJ<Hn{wZAvbr6aZbCYwY?D&An*^WYHb+JaXTu3(fVBk!Y)BL0Ok%D%(Kf%@=p
z{rd*c-)pC9yEgo%jKT_z-_!%=gqm8y{<gtY&{73|Qbd^y(E`us<{N3eAA+%(gPv=8
z`o8$eMp+Kc^UJhhdX!s3G)xu7X)zkKIDc!Im5wEQg`tP*Y~2wY<CJZ2gRf1HM_hLb
z8-b;mpaiktp6$!A%^zS7rJ+4~kS<kcb718fA$ur(p~=}<h)}6;6g0}yn~fqd!<cz6
zjYE4`rVoy7jU~<E8q#4ZTbqe83%c_Pw-#<0hWzUZ)=socM;bCg#3=Asxvlk)L#Eh9
zpQn8aL&bDX771!auri9{q9eOIzke^~!99e(mM{!js?X~cQAQ!7n0H|1i3H^T<OWb0
z)gV<7rNZSQ{Bt*Hi)P_w_@bs|q^Kf0lu<(I#J<WE|EUAiK_^tDG-VVn)!>)v{({iL
zUEpPt5fEtw?mnuF!irZ3<$CE(HyP;vltbY#6?da!jr)e*PeYUjK+>^&KlA%wIF^t&
zwgXzN|EW(W82DMZBbt<ch9!w4{pTRnkMJBa4))#3X|H$DITne?<WN|VCAl6Qde3d-
z6&5M8A|}hQJBHKgZ%?*F<#$|FX>sa`B7+>O6W;^touivudkE=`=5o5UIOd6xRD>wD
zO_Z|!>iBj@!V<emX?|~bXqLl~*4r34wE5(1so*2X!^k;p$5VXiN%!-%kx3>XljTh_
zBAf7`nKH9~pWFi`KN)_V&R+7BVgUi;xy8_KCq+B`vE>P7@<K>Qx9J}&BL^}^8MW$g
zlgeQI7bUl3hm}1$w{RBZ6t|JW&}+mz73E+SLv*~PQ#Js*o?!G*3Y~`>#}KVC`S4$#
zS!uI=z!!LnBwQLnAEnr*gfRH{ifyi(Z=nw94Yf5y;GoB-w6}sdgcYvU*wR@JQ`h&)
zJ$55jIDQC-H0-KB2TVWEY%5rCz*78v)%*_cUIP|LYw<|~4wxa(b|VG{D@Xe)F$pLX
zyupta%)PM!OFWp=`M3P4DyUNQz@`K(*bOBZ88RUyZuFhfIS}Tt0<(%{g|$`?%n<G4
zYhRRdDDi5wBO4}Ru>MBMPAl<a2PGEdBCCT8cfkQ0d${@XrGVwcGL9DPVP_tgNuc?>
z{-w0j#0sy$^l8?E?i?&bpsgy$Ay=a|-vVmDxo?DXr&)2mIav165(jJB!67fno$wl*
zKbH(xUk+BZ&SYEoaKIY3I*>C8mY4@FpBAip1P2Tkfbbi~^s7&<q(HDB2u8EY#&EDS
zMq4_~Ay>qm7mtU-II>_y(@Lyn=3-@Dt;7NQYU*G<49oa{ej6H=Gl2tU3R6e&YcXI_
zndcV~#s;FuNyEH`alm2?Y60_D(dk-LN7(&BNJqmoV>n>CSe@dSxy}LTB)iCXS(w%s
zBa&nfy3zfB50LdxOr-^iQDh(`jD+&|`>=NWv2Z{HR;t@z7j%C8b%v5afaxKa04=h>
zt!60@tvb>G$1{iNNk<ka(Qs<oGa*K8&U{#o!|FQ+JpcC#jPUAwY1iJxRZ6^!wTem~
zN7}OZHF~u8)=9^p(Os3KYs<QOl$e^Z%%?gzq<hq{{gPpDRx6Rg(PO7NqC~>j#fpvH
z^^M2!KgZY=$3+vgSvEY)K@)>5OZEAo06d5a3kZ6FKKZH=OziI3t5xDt*Lu3S4gZ<G
zpe8-(!)+y!bpa-9mA`EpWz<19Po!4#EXb9wt<1X5kl{pdj$fE}>~+1jS_IHSuoL>Q
z%U?xgd6s9S@wR}H;k)*YbR*T=A7wFdF^N94z4>cIKW;4J-xRt1ECf!vk?N%~L_FgT
z{k3(ADplOvc21MxW|vZw$&eu&f8e~_D1W(PsIRE}>B}^dlS((^#;J5#t+tN8pAy#f
z$l2-w){d$rA&OX$(6-}gRxfu{dWST}Qjogg;S(Rorc(0aZ-hb7IPFCO-|AThwnkES
zt{-_g1iQTW12b|<Pl}1)5;2o3Uc>S>7B&A--OcU68N7l>v8#*{V_O}LfY|FoD^)*@
zZ6psElrM$uv_T9lc4>*JY-+z!Sj~A<kY436`42I!<D2UoF|qT}1_v);W%s_kn_C@9
z;3CJw!2iQNB6r_E$P?<}=63nGRNK8SiNP_@0;Bxx!j6<BNCdJViKC}gm9Ju4(F<|b
zeed@68)n%STy#Z~eY3Zd3uQK+PdrEFv=Y6brlEORU^Wzm{mfGG(vsrj%okueOl;)C
zf`@z%eilLFwm3&zNpe!5AUQIw!R5IF%kHmo@1A+|FuqDIFQ6fd8p=U%NvKK_BTx#d
z`199=?J!H*SCnR1yBo_vtS*SUhDNq_Y88jv5ffAL!`9AN=hlJ?rc)4YTRBqOj@U6*
z*<T8iy<^06AS;zI`>lbja5p&&Dbd#9-lKZ|XT9DJk-NnqgwO>7odUta5h{x%Huo4g
z1uNUXk-O2XjeXhD7^3T_^t#MmOb(-V8#(RR92m3~**(o#5UR`)JGb6w#PwebBeBng
zvsCn!<@6|Jmi>lW4zVK3yc|&$)94v~v{+f<l~Ft!aP}!%RCD5bFZh9Z_|dG9gV-$b
zytHNFie>weC|+zNU5wRBV6%v6n8a+uw{?l&t*EXnMj}BA)@On;OsqP4WzW6D5pWV8
z#z|RmQ<YiaamvLU`+&JmnczMThA|a$jJCt}YuPN^ovnf*l`?EQ>bDj}Urz+;o)fCY
zIyQ=o*Z+L>lD>_|bAuczESB2=Zr?mHU<4e}1}rA&-L{de&xggT2E`dUE3qVEs6M&t
zYhr<%jC_i|r?dA~h8W<4M`etQY{0O`r3J<Q%$14=Sf#QwF5NxIrfAHz{zwkYnsJki
zT6otFPF(=c&ag4K23~8l?Kmiq$n^=sjz4%%8>FVFdfAq8usb9t8!xj-33Y4x*j`jn
z@T_EfzU0eOW;zn>syZpC;cYeukFA(&C07NB2<WfG>ytteaf7iZN*i4D=WLKR!Qjhh
z3Pf|d`uoOxfMM4`5>0a+{ln%MwHg7%xs~Xg-V3gKsJGPQf<CZ0;ktM}afsTE6|1q%
z9cuH2ICRGKDrb9{%p7h2^T(c}D2xu#+JhO<ca5+&@@OiJX`i2sF%1yNR6Q<DezgYq
z<9Y0S(t}g7I2%K5(ct&flW(UsC;+QIg|<t2`jjcp;22Hn!8kp{X$3@YyN|T^I2zVg
z25yuFP4?sgDI9OKN1pj(vlYICMZ{7hTr?=UHUlJ{l1$OJ3Ht>@<by>S4O(1>1&YP>
zarVb9I6O~~o5{2Z(%`XIiOJ1q!UjcZY^I=K*<=DuT+!zn*;5L`T%|30Q3p20zT?P&
zQ6)}^D}(Wwf=NVM_RKD9jKg(n3LIi^pI81mZ3`*AwUiD|o*rxthDT&2F=axh?kf;|
zR`-_btz--vB$U~2?pvVw12~;xbEJAJF`A8u)n$es1#2UE^S_?7<|8;&>Phw1V?LW>
z)f?ADCHB_5Z|jJ7c!QnMQoW_7vO#2P#rmKfhaGg^p4_c59M3IyIojSv?q_47jd8X_
zghOwy>h&Mq2vf(@RVq%Yqihb|WmR(6))ha|8d96gKXg;pj=va~%%Zh|#t34|-`#&t
zK#sVeiF8Sl_p$;aEY`6Bk%RSN+4JHh5Vb!+bM$iw5AP|kZ1qad$OzxeJy{N<>Zd8^
zqT#oz`q4$8^rY~o3P@|U(Aw|FL29vbWXJ-TT_fy_(t9_aZxl%JI#X>=eH`9I%Gi(M
zz?Jz}<}IlZdM=^2*^-m0yLFJyfGkx>1GFj1D_1e<;u(}rx(t=JbIvNOz{}W36cq49
z5A)6x6xe6&l<xl?ZJ+=&s6CB3lg78Zm&tMi4u?9=^vR|fgnjM$$ip3XEt8WjgeuU~
zF@`9$s5*n|RQ9ckeWJK_S=?$;mHdr51)hUC{RIprtm^%*z2RDtVKnr9deBB?qUgMv
z{YPbEIP$cIo#?5ap7ef~0xe?;N?4^erj+xji_B?%Iq47{Jf(mn<#|6*5tFAy-v~y=
z{vtv;;X|)0@JJ`MsKxYay|UPAEaZcJmrlSu?-g()ftU1Cb4&@p<zCY(Vmjm;CDmtG
znT~7^V;#akL(D*v7q<hwS6S`hiPY-vwo=|xe+8a(`~)4$s?jU_@6<#q%SC$p(vt?a
zRp40^s*X><MX)iv9_E<)sZyO0A7)gQo-WvvsDMMDwZ%U#IB;I#m6Ws>kG$O6T5pji
zck$yChz_m(9G3EUWWgWuL9}<+X`w^kZ`&0>WCK)mCX88-D|iVe`Y(vIv?r^6Kmix8
z6Lu?xDlPl@p*Fk-i)KepjX--=ftKOPMCI!;vruSlq)Edu`RI!Dp<4<>O`Kp#_VaJe
z@3lbs*8^2)I_`CUsKB!1N20O~TNyI(3`%wnuqdS0(QdC5cn-V995%Ul?x*ejQ60iN
z)|8Q?C)IqT3=$Qq^yEP&3^2({NLU;XyCf&Q&(?|UD>K5mU|zfA$(r0-k&exuPLEr9
z(y77<K+9gVsDSx~Z(M%>*+V|3?BRir0*|yd3cBX4?Y(>sz?l?JlWqXzY@kHT$o=?J
zzq~(9c=!zCrgCzVHPlKlLuN-Khe`Hdr7pVwIc9e(xaqlO8lwQR&NV?BnIG6WU;})}
z4|>{jr6&!Ts>CDLIpSJJ!EsABRP*19#@>tlrPE-{Dg~nT(Kb<__OY>hML6flSSr(z
zXHA*{&^GThw!3XPMsVU!y;i+NDeF8O3mpqQPb=VTu|RMPtE6=LsU4Qfsj<>nF#azt
zVjzD4w$tmQ$7q}nT!D!|x25_$QeZjuF)8Sgl%3X$ICD{r)qy@vT0SY7B}Cp`qI|C(
zC~#D&e!CGBCm}=k(nvAqin1|6=S5yGsP(a5R&3;<@I>ovhc6prEutwkp+Zq^Io*if
zE@t0T>Ed_R?Mb?7YxHN6(C4jGcCup%PVXB`PEo$W%%X$z@_KBHDM}Y%+x_Awqtzb0
zOjQbDGY)AuU9Owhhz+thCTm$xfkTR1U3>ZD?}T}K1z8R)P?mOVPFRdCbB9I2ur1ZJ
zLvNzyU<w%qO9e{p!UkFV0#}`raD039+i(kMTSOJ9K+ED79BcEqmmw~kXAMCtF74*t
zzmovEi(H!?q3c5!Ak0+kfN@#^5oqq!yrcFZ2#2Ler|PcpY>s_nN@0A6IO9LA$mWIA
zb0Ca?o<J8;*ciRRc4G^Ny)}6<x$|p8`Uvz<(U?9P<uKNUuz0=ga1e(ytM`uCd=-*h
z$Ew*@9=2|W|GHBS6Q{z(wMwo4i5~tCg<1Y3;~(^`2v^eN5c=?pC!-ZKMZRDD%&^;7
zSh=;ukM^B4_p!b&zJph$`Mr;>kB9GLk|2%P@$jW@PcJ6#@f^g+&>{^y$P$Tw9PSF`
zP@bknxq^e?r)Ohhg(g)zszl=H{&H;w^u3m!{*)s{>D3zU#+xkpwwGTC+kJ>QN_Q)D
zJjnzQio?xe99r|$HkcL&bL)a1jS4x<M2Xwn*e1o(dt!hNL6bD<DH|1~R|&oc=C`$u
ze|;1U3OKo(<rkPz5d|vw1AA&vxca6Ie<9DQhs{=6qQGkk7?t2FHku0&d9xw)ZH!hD
zI`ru8$e}D*wzYlNT6a|F-X$(*`kI=$b4Wsl)<?sFLn%Hv>GVrEjy6mau2WQ->-l5z
z)YjJBcVFZfMjf8b3b)Q64lzp2`~A;na65ZJrBAT6|Ehp6>cbs94+pHP*QIBtFkQU?
zq)Su_vUZk9;4|bQu((*;(Qgjcj2u<n)?lvQ#*Y^4=ywV%$&BTI9ZwDJxgC!C8WJlS
zb|#wwj0oo7Rb^qWt-_WjSgqn=UIkd@7OyPEK4(K4Ren_%6X{7~>8iYOJ`N1zax5xx
z0GC}a<l7xiA{coIt;AiW6@Y+QJLs&P1+p-!5=rI=tH}IAcf}hj%E8p8#Mq43q>yG2
z!m)bW@^&DG4!fZ1%|{dn7LMc8;-KyNeazx+kjS~wdQeriJQ8c?U=8x<JGvKC`M8>N
z8R6-{W?3Z52pb%rvR;3slDqE5p!7wn@PRJ}NHs{E+4{^uTYEn8!D%EC-4PFI``aAI
zL*wWXbZvk1B)$`*05fVb-bv+<shLOd=r$y|hg@{;L{NPWjMWlj2gcaSCmhItqxEKQ
z0Ft~aNF&o5h#{?$nFG0V?3vKkz+FbtL>JhyH0DNf9ICN8M>4sG?yaBnGl+4pPRB>j
zlan?#<t7^9OuB@OM;SPz?B+G$-DEJ6oS17{2r{`V28M)(>21KQ>!jI5t+<&)vkGHr
zofzz;W4ktTM2(*R)xKtDL#z40CErBGOBZ#PGrtc8&zS>z{5;d<@Go28|GT4)h)zU(
zJF^5KAd%}?*5&Z&T@u@<&3&ZHxhCC}IMF!K&Y#6^-F>zuX*f1kma1;IMv0^qx!tDd
ziW)!aP(G^QD+TS<D}s!Qbqf0!xwZao@OX^TWmH}0F&dMo1j_82<ybs6a2vY42*#+O
zr*w=WhbeIkgG9z?M%3Q&fmmgg=p$9#)rm?ZZLF=Ao<pRZ0iMhIBd}b>kFFxbE@puw
z=>`XB#dqhgkPeUGQPM#QSi&NaiDVL}UmH@F&8`k(Sb(|+?HSUxDRFS1i+>&+?9*=c
zI*ifqUeeWY%Uwz!!DDJQ#w46rfK_VY7Sd7bcv1-^c7U-&t-{-9V9w6>muj!oH6@bJ
zzKQ8rO2M4iVmO79lJqbIJW>Q@UYN{bcjaIA9k&Pea0|hSb`A^QDuHxy{N}K@@Z*<e
z#MmIjb^27-w)b)z%g(MwZEFfvSnx>WD!t$t^+}Fmx#owv7^is@T5twVr@e0~wY4h>
zgg8x@k8dEq#{Lb74H}D)84R~g`<|nDy2#WKtg_%?FCo(3&y3eTgLKBJR+>_PP11yE
zgh)9S`cAltn)ZoeStK%jSCmbP)aZpsZORn=6o`CI<s?&3TQ(`djEg%3#;I%Ki)+4^
zJqf6h(c^TkBb%fVB!#suxBC|?I&_eWt}Lm0vq|FdDBF+^BhAPlwP=!{*NHv)vRM`z
z<S9G5PKRyI!CLI`)UsijwH^*v*GfBjYX~CJggVmY%y<q;WR%(z<!R}rv~@OeFn>8)
zaz<O!mk!mXndwPQ5|t&hFb#p^&Km*dw*S5!3_vQe=_h(^nx6FU1Wu->rOA<h^S$<%
zapT9=z^?eO(g)LKF6Bj9n@$Ae99!nvoqlk|ZM>w=QGaqm;{(ZvX1<xmF`$WK^A4_$
zOYBZ2(D&OUCk5Y7hN`uuSe++)nWW{I1N>xgfew>M29GW?dNKabM`dt^^^$gc0S#+&
zjeHY;X<8E9bUsx1|ABi~W(Xql(#p*2&gHkJZgJB>S7Hg)5baX5sAKc-Vy!1s1eith
zHSC6jYgiMhG5uVEmuc<O6439WQ_Vx>!Frdjkd|~hRON*_w0?3}k#6PGS;aADHe%7~
zO^s-~ZoI^db}a!pv(&$Mel=|Ol+()abOf8K5e)lZrp)-^IKoz2ge^K4pN~@@nT<kW
z|6aK=`^k&RFJPoJ>BArel3;rFW$xM9jj-tG1WTd!75^K~CJi#Gas9JmF5@~7(=83N
zC&{6Vnv84CW%F};DI#uTF1Hp~1(ZMrLoaKdFuxCmN~^Iw7S93dRV3@j=2*1HI4#^K
zO=SrpNt8H9)0SPEQU!L9js+-f2Q{a$NJJ!)&>MN_pT_ng?^bjHjV5iHtw6Fo^_#Ku
z;E<{4F87oxSg4Ih=0e{=b?X-v$*dL_q7SVHye2PmPjFh_<X^&qKyjAGx%tJ}@-F_|
zSXf+NB!9HkHCnDfQelO|4_Y%RYi+U{b`v0agvzg00y(s|$c~WfiAvw~a(b;CNn_?-
z<xc6leW)4+;CuwWd<x_98Z(ac3mg^Ran++yYhe6fXSV$ztZ#5<$<0(Y#{Q}iN6_1I
zbK3CZu(X{{6KB+RHikUbl=%oK2Wj{Zb7xJ5Kw5-YTA;PN*rc!kKmO9d*U`R(!=a}Q
z_|XPEYcB&Mac&&)bok|Qmin-|OUQWX>QI+71_*ZGV9p$zon?$)c43CjMFvLe?fG#w
z$G#uQfq8x|&Fu)>%{277(vkGrX*R|Lk?a@$aG=T^TRmYhT)|@Gv9v3wbcKz=#fUmh
zBEK;_`B<Q7G}41=)up;CdxK4aQ2dxA&ol2xQtn$tih1~$jfoS%Z1{awr<}lCLvK25
z3HM*KF)?uh7u83+?l81J4DL6ShipxIR?pM&lN<)OEb^<Xx_keUGvRZ{73*{e&F0ok
zX6b|mSCtV>u3Y^c(sHLw3TxfuRaQAjoW^9}jsxM5S0fuDv3Z5%0zF|`xHAESq7rh_
zS%+V)SPQ#HhpI{^%)J82D2;9Jo?~i;#O&(65}_a%UVxsOaiy80_}VHW7rznQZL8AU
zf|d102288ZP>D&hs1I8c{3v6a|8`!2txdpEokne_ri?Nf1vbU5_q^UZH`Z8lous<!
ztBex5>!s|6H@kZy$gRhZma0uXCQ3Zi1;6c8V=O{<Yvdv{Dq9c}Wf?1>FjV{d$rTG?
zR$WCQl14pk%z?^$xsSuv$9CIW%>(Xq3*0G<>e*fyCA4K#RCWB8A5dS*Nl|yYE2D(+
zM%95)?`}bX_28E18EjH3qoO#Y9%+HOoz!mPW3mYYd#5w4)Hpd(=JmB2TPLS%-;3*n
zo_6JLOmZM}14eMW@@D%RL?*yN9B>+*R%RxEP*g&*wz@uY;5I1D=;Vva4pT;jYa=ou
zAcuYbTDno?oIv%1Kd0^6H%S>~%G_JzK<&-*Y;Fkr(9cf3X#N-`O57K9SnHOpGvdZu
zq;<4Zt;aG^ma!7@MQ?Zh@Vh6Jr$hH4jru%M8Kveu`9rdmy}^g_lJlDD8%a?UepW^i
zv*0?^Mo{Z3oalE2Yl(K)r>CXzTc(T>IuN+<X2U<OW2{<X%}=AEQ<*5#e(+$f$OAK1
zbEp#+AxkX)gQxfZR&8UVEM}osXEr#>TDxn1L>CyA?~r4eGaA%n>lgMy;KI3gy03sw
z9gjLKo#ww~eco(x*jVJiOq`WGx+g5VQG01`?d!b^DS$DO{8ekzMc7ti9JGt$5|8yo
z&R-B|1ifdv{-Od+JAk?jkpuR_q~0kBs68LjOO2ubWd#^SGwC92$t4HtYsjbLM!3D}
z_|Z|Y>1zf{;`lf~Q;LqAG#!&khu}{4LKpmp0m67$$I4-i&Or<MF6GiH_`aWEA@q1<
zeaEH|>u|ihk^^?6(fcMX5PuV$7PdLRvSD_A&Vl*ww)^op&|pVYplF$X&E8#R-HCZi
zEFLyE(5#EG9kS$rxkm?-2}F!at}QJOEy>M>5s#GN&N(=S*y*q5!ds}yNjbj7*&K)V
zE)Gu9z27e(XQ5k`mnyGPSvH3lgrM>!BnBjWg(u&RoSAlke^p__?8%s{Os*Zd?Fg5(
zMo_DU97Y$bi5VEKRmd$}Gi*j@WsFy3Sns)3$0)$;p`+fz$_al!Z{!d$y(#^KAEq%T
z8q7qG)>?~fK(u4;?L1RH3Bh+Z96XK9@2#ZAOc`yDp73LX5C7OU7}%@8)}l6SKlyND
z$&qv1t;sFxfcT38Jpi2xD1EwNLv3!T<^E-EWIw%b{U;#DU}PPiN=i<u@6V02jjD=V
zE6k04e>L_>9iW#vsd#lAZnQQwQiqd!+|Z}{_Sfr=a+jf^)SOz@<%W{&2{Bpg72Lf#
z8)O}gAHDxyvL!b*F08*6y=(l!<{R|aZd~T*_5wf0$AXfRCjG=s4L8N9EMX(cOBZXo
zqk&`API{D{lgK*<Kf0BqMKCwndZ3GYXh%P9GPozqcr#K9ddhBT&CS$AsqsI46$i||
z-Nz3?KF5z9SaW-BC^8K(bLuc_Wa$qe>L6}y$~zV6$W4WJ5+2uDe=PFegfyoo)|0e1
zP6*)!ljJ~5-qP1*KWPkkJHb`Z<}|B2Hx}~Zr3!9ysy<0Ke;L-YdC@mZPoAKj+)RCV
zZC_|vkGo;`$xr;R4=V~ErA22eZBxNf++=OMK}^R3&Mt~>i=lmq_)brsV`gqDbSxAD
zQl_nLQ2`0foodnyb6BDrG@}oSqe0!CMa&-CYvv00g_HQd9FxBEq)(&eIOzVQUftqw
zd%o_)&*aCPJdNCvE|9*TB!@9a8MW$glPZ?`1Ue~@wko%H>PC<XI2A~>)8t5*1=8Az
zuXMQ1G3nMM!%R64?jp6Om9lxVePjw%ntvk{Le#<)Mf4i?5cB(BI8;YDKr;(OoFUf+
zrB;-VP0|9EAOsYr*4nn8I7qrW5BnF#OsWhgNsAP^T8X5IisoORRi8Bb)J)U{$os6c
zxm`?Qfy4_0ySHtfau!S5Z#Y#%lMbz8ku1tHnQXg+9Lj6d_Qak1DC8IlN$Yz5{Gmi5
zFY4Gfqd8Ea^LEu$VGb3AwbMd{9#BGwEpWfR`1cQg_=Jz>=b%ZYk0_DEN=A{suY3Lq
z(w0h6+uL+Ti6m6;SW@ENO<#;t7pL9a?N^mRdac>^WE96R?cLXKO;?b}%Pq9>THID5
zX^aNjt`i68P$jQo<R$U)PQK{<10|9n+J}GQJ{VSORRws5EvS#u#p}{96hUIzGrbtU
z`z!pzMmQu|drQ73q4+}*DgLkBm;CH8V(dPgfuP;q$8SocNUcCw)aPoh@pX_15+6&0
z8s_LBQ)?q3i8v$sekX@Lte=;&^=deXJx&hdd@d!BNgXFp(F<JHtY~hKuEEafQTi*d
z63O9N8V;F84P7#DKS*!jBxvO|DyT#fa^zLU<kfwHIfOV(roKg$K!(f%-5e6--tu(f
zJ|q+?`${L%Z>5w#jyGCypk{{eJ^BvHtL0=6SA3LEBslSV2)*i6wXz^hN5(=MglB*f
z$>B;34w>5St<s`6%+4Ka9h#I<SBd1%ZOB2II(}jDTzI{+*d26C!jqHAHj*RZm<5%D
zb6{@XNhy8{9&Z%XXREy8KhfP<po1JH4$GFz>s&Yz{d2WzRwTz9eK9=rENa<Fj$upm
z?RSC53d56rU+*dh!qShss=HiM=w3?*l8oez9{pO~Sl_o?oTkd$%;Hd4T*%{DC6O!)
zPL!4oF7#rNv?`q5BK_bh%e{K0D7CMDK*mJkz-rg+*-rA5Psk_fR@$ENEUaDyl5N6r
zaNg^?u5Sa2>qznkswDGx2#cdt88!a=;sjs+vD#H2f~!jnZ|Vpp2IT<z{so6TyMH>;
z%O62@35<i*+rbGekY0uBvTW;14o-{w)vMG)EYje79nI-7nZ*g$MQTN!6}#E$TZ4C4
zXI4gY3_WB2p3UNrI*K98)=|VE(5bpJp1y!v*zP3-HC)UBktc3B-kr6toR_EVY8s2+
zdUmk1U^8(o3*<bZ1k7C1`{M1Fh!j(LNP}(YAr{o?FN7>G>yX07@?ho;aB70zc!7n|
zsL*j?J3YcNU{n7K?%5cYehrpRyTD>sSscB}dVL`O<b9mxS1AV}!B5aWV%v2V$slGJ
zX;V8?cmd2*Oe-2w>=p~7RmH^!Txl|Ev3n4?gQ&UFN?moAh0%}&jF>apQn%crAV{<b
zLqtn7;2{e|oRPr!j!$>%7K=x!up3g*mXPBK3nQtgaM+ytE%(j!A<Q|HdFhs->rYuE
zB9OmeWU5>=&(c%KC~nr2DsRvW7E3T-_}`iKtREuNRZLg<DT$>YSQruj{j9Mavhh!*
zhPR$q&Eks}enw=G*n~Q3PnlI9$&4)Sj~~;iT(Q!{U=Jk`JLved$B%_EsNxKni&_qg
z2ngOfY$qmcU}b68s1?ZKkoaUT+;D&*KGpiV6{VCy!BSAOri!3g0lykhz%8XNChdHu
zN!z&#3q)*OAc3ep>Danp43HVNM-R~BZY+#er3=@p`3>Q6j@-8=LX@UXnevogOb$sP
z><3OcMrc7<w=#1O_~xRuk(S7$Vv$G&p%-xAIW||H`vwCP>}1;ES{4UwY+ALgq{|_X
z-%ox$8zN`e(m-l)TccPUB9GAdyhg=RCYFTajA$&Q{dfC8ED&;iT_if$_>G~?kGCrR
zjM@4(@-KRbjt*s!OqNy&evW=ka>!Xkq$MzLnzMBri=$UL6ahGf$g^VuZ!?U0sndG)
z_5>Ek;IDEhv2uVqbqQ+hjV{9`HKYP<n#uwpGmZ-v$imIRSB}?$Z6Ag?(2A?Skj1ei
zj{<Y3?A=43bAt0128hl~jxJ_#461OgfG-Vh^JYbNj87}4!c+BSEDVVb4n-P{0WvQr
z+lqMY9iZ9n1hQ67ZYQ%ydetD?78wU+?3~JnPl6JP0wFz9jcZsGNpmm<srGO0{9LDw
zi&9u5OQyv?QG@=fRCxmgA_rDzJMi7W!dS8&eoXNSeUpP=YBS(_XuZ|j#Kt6OP(cwe
z>~oX9&7F<WNvI+vUD(PZSr>W{wsJnl2vwfr-{&#pNko?^Ez{xMOp?|22&4*&#_rGB
z4i4cbgmAhB@cm&HiOeFQ2tNGd;=4BiI*15PTf?>!Ob~Km0eP1G+_}hIc<jA_QYZKP
zEE^N9HPz;~x*N6h9uwdXUSp+4i&O0;ixZ3Tx@{AL!w{N}`X})*=FkP09qqI8++$&=
zwt5cE!v1HL9Y73vSXWv&>F|)n(W<Q7VZPp~%!X3#qcN$~iY#x9nVSp;LEGNoH%usO
zPm|fS%^}^9!N(gH17r-Q6Fpev-!VamNCJbEvhL!8j|dFp&;>nMGrzJiVwuUiB71xJ
z!YHP}{%Fn<w_eO;o=K|}@OQ@AFGn;5=aCa9-kr_Ss730K*{l3Hu{k(voZ@Sd>}*b$
zt#hBl2tItik^MFnM7_|wM%Nd%<YZGcn6oi4I)Q~z;-(E%7Qv%FYA79{*9BQDlHSMJ
zx?L1xA}vpMMob9Z1=rw<?4F)MPb<iAEcXUd8%VNeLhXfB<AQAaBQQi4VcK*G^tGBC
zNQ32rNrx^!E{8zGS+{%Wm_-n055V*`)!v$N6o_MQdy|#K_3ly8j7<sa0f8;GofzR-
zeVo!sGS{D`56))sllipedSULyu)QyTpGe+kXbWFPn{YQafHcf#jd%xJYkihlc9+dQ
z;@v!2ooxu`+#6GdPC?4oV+v!^6Phh#bC8Pb+voPfW+djN#EADaV3WwnF>`|1(t*tZ
zsy08VME?x+(JdzJ8!CdZ6c*54@iEI9{f_xE1RA8ZSG+kBrBRctN`SOKs^94Tplo&u
zqTW9-N!D@7n4BEi^Pae;$25RG07OTfcdZpb_B|X9&dV`x*OJS)ybulOQM%in$<e4a
zT0CZ`s5|?F9kw$sd3f55{Al-CD1?cEKt>VE+xIGbYBlKY2PfTaWrIw5dkuy|cZG`<
zsPZ1VGdrb=f!&w_ne_Ixw=Bo5IOr?$5AEru^pxR{u~BlRcJEW8WPCNUbxf{EqBFL;
zY=8z)IyQpWBOLsDcJu1U*vbH9J1u5i*^lqbl!M%~F<_w9nCNA)cF)Ty%`Q{@*p16R
zKy4F1pbfi_N)cup7%PC9-K<&Tr;y19ttB+7e<%~BkG71H0BZ1(_5J5VqCUXUBef-*
ziL$<O${s1#7H3O9tYLd~1QVk+82HVuPyMMmav?%Y$NZrW{klaeQ!IBVD!L!LK?Lj1
zHtPY^^@FFQpQDeCQKspm6GX@A!uRE-WP^B<As)RS<q@k4#3=^B*fgY7gR5WQj<Uk-
z(dwLGQs$A76Pe5%+Esj+BSSj+mGM{c$}}=~LJ3l<H$BE=&#)DG^m+|d#u?+{M77!8
zr}1YZpR;iuPErPH1jp`i)dQ{Gz&OcH2rZu1cx9SC+7gUSijKtf45zPo7&lP{h~*M@
z?p*HXjhs8NwVZ~64IS&RvOaIp8c75enAL~V56>R}#hr0-i0N|~a<oI@7om&MvK^w`
zd0acSc*cEL!&~ek(QAR<<}ol<c|64qz2{Gxmxr{Q4?<y$PW?VFVX@R2jaH=De0zPb
zE#%Z~Q?Te*vLTtlA#+J&gc^>&>=gjFln4~9x+%XhFd3@D9)*B4-1v2+rw>@=Arie1
zsIZQ~LfuJ&RvIt8-o$GVVe?;B%mTZcfgf$)n>R2>wlU&Qn(ihP>R%7y1YtJOp!}%}
zkO?*yi^ID7D~^C$0b9yKnjeV%sQ$s#+ZZ5?<<cB}dB)#+5Pbo8S!tl?Au6|ng|Ugl
zPkPWZI%h8gd$LVR8(ycK43cfm+Ajm*$Tr`kmduKsSd5T#lyd*UVwu%uJeeD3;9ga4
z`PjZ-OPIqrl#gklMzKJe7@aoOEa-^pe_3B=0|fepAAOaj#{q^=JgKJLv;Nq1Rk!j0
z)N<0C*FgpZy|G4AR|PaTuI#5R?$F#?Oe8u>U(W(%Xija6<ey3>{nz{VM%L$!q9l#V
zcbp}YCHmoE3IWu?$B~=%!?SjPWOT4Nc7}mMc8Rr{qGxrTFVGJxJ-i^pF+^+dpbmG+
zQ2*TCL*GG?p-6#f#}IUpO)x~01FZbRqYj-ndm+5s4d{#>p2e4yNO-Q!Z0iD$^$T{j
z9a(w!u^%j({OIBN<r*8sGmGpTd_MCJoz7LgF2l)uR#H|B`y~DL`h2yy7@NXQElz`3
zpQm4y<luCvc)S8x!pw83sKnf6h+%nDGP9e3gA>$s#)tsO)7q)rdib6KN3h)LSVX3+
zy5}PX>3=98f43=HE^NcP)x(dD-xZ!KkVJ}W+SQe}AA{=1vmSIlvYmyo4pC<J9>*BP
zms_}|0zjpms(9C4G2|g2p(>tZothS?$6E%+Izq}W)INzEtJJhFDEpBC60T7{+Y|g|
z6(&(HxHnp$fG;c#6o-o<Y&|p_Bji{+ra^&jy`?*&*3BJ^PA&1uad6j?+nT_v$&WVe
zNOuNEv~Fx{`(>R07PkWyN6X{>9Rouwj#vYK04lNZ*<Nh@yOCuPEzj8;ED#wTfgPCM
z={d$~fw+Vun2vMdIawIUGZ5WwBBn5Up<ls{P~8$I)p_JrK!tPE!tIkNBKC8~IZ$10
zEFWyOaQrLI)?Lac1N#4pq-ptO0Hmp#cip(7LRHfVOw8;~oh*e4Fg}kHXm}Bc-@?8Q
zh#QswObuk9w1w3v#>U`{G9`>P?I2soP<-Z}BGmTo_obXL_S&%Q#<6vr$(JWr>TT|d
zh1(@$>-6Sy51B7ZYDXN5gjzGNMZ$Pa;%BRJTWu*@71w`zlfRFzC+<tkbo(5XZsi)z
z$^8S$EKyinQ|sy@Rb5lCsL2=tj?Wjbu(I1H;<S)5(N3#U6W5=&Jkk+~^Dm@pBx5<v
z0a`WY#F}m{M`UOV8IWbsDWa=JS6)s$-waP$;F(a{T`$%Vsoudg!&<hs%svho&L8$4
z{}E-io}S1nsIllc%k}reqwu(!+BPLP5c^^p*7QJ?uyA$hqIvmJ*9dY<!*Z~le=H(D
zm7jVFiiv}Fx2?vkdaAI|HH2(lh>XP6JxecocEd)3I*Vlfwb<mEfb79K-qr>b4pkNP
zYB=}?98_&wGet{rB6}Zc{$TMQ2DQmF$hOksAiT=^>%Onh(Q8Z)+KYTH?wSxD<>y^D
zKtxkMZw#Ij;S#-SN+VK8N!JXrFt)wT#vw$%oW8G~VRT1B5ZX<7S8)w6`FQ*K3A(9a
z$)lf;gED7fyY$o;=;4||Hym*YGHU#pn)e`x34+kETkGi>!6kz|9C@8z@dYF8Mt<~g
zFRJAlkP$RY#u#1~(s%y98%g8%Y(VIu*gF}9L8JC`+z#T<)Z)>8MPs3<qxjK~Qng(R
z5^hqHK^HOH%VGWhHDa`9;0zl*;`jYrL(Dkv3{b{JavXB3Dg5)MU*K;`c}QpY`ev>X
zFe>}i+Z=>_+x;gEMpRl*&JF&&ge4n+(vT0%@8Ft{StsE5dYcl@Qy(Lx{RJPUJ(RYm
z>#u8!F}{X6{NcM^)t)>4!(VtFOo}$y6>8Un@F-tzzd(_JZW((f<tH%G@S_>8G;$14
zV|w<rOPUVfUky3vG-SHgHG@2QWY!vS^eIjg&2LiGU!2_34|!s27pW8J8tEEj>H6az
zkt%h6d7BP<J+sJ7l7r+NDg(gf5d7aCnYbkUAT$;46qABix&FT7bT5b9Hte_AV;Sr=
z4vM1fHhhh12JSz??L_=i<XwO7O$eme<YZI5Qe6{>^JvyY#BTR=a`*lP7j~@0{Q~sd
z{%*4j!`45}p`#i@nwKa99rZysFCC52PrClP$$))!eiaojal{k@*K`%GiT1BuF1iL_
z5F8F_%F195couh;@ekWLTl;j1-*Sy0Wth$(9j)tC4#K=Xi6fvOH}a$JTh%KNaPhSD
za(*3l^ij3&Qk%_2-Y8o`yIy}2NU}VuNxAiOK`bwEUeAUvYGMtQh?B`SRRWGc;(f=p
zDh<ZC$jnzfWL0Tj(yrdoXh|aw$|2>Y30oeyCcqv@xaCf$(|dg>^AdmQAx^>Mr*zi@
zq$XTBmR*XpqN8W7ga!UsS-PB^_R=*&$ghmp@wmsQ7T7Rpl|?e=$9#1CdD4T(JIK=#
zkLXXiOy15l?(2HRVbsM7CU5cXoi9$oD7?mx&ez{Ha}BYS6$B||%JzEm85N#RXgZ{=
z>1GQVipsKBwsuf**lYG;n^qWLuN^V>Y5!HLtqehHGT~4=|9D*35jyk(3~Av~X{`M(
z#5Ka<9X<{bQeNa<9*RZHGvuIjJ)v2m>+i>!P~G9Sr%^Xge~3m3y#m!-T1D@Mx&A)!
z?*q-Yv+Eopyq@;$)D!rj60jyZdHZdOYXn>d%2XnOc52~0QzJ*=?C66m5-~nZb<H5b
zoXl%(V={jU)P%tCd0=kS`Qgq2{ansGIzQwdlKPd_uek!N9g9mK=^>9O?;6Ata_#=F
z(Y~SoHh@WugAb&aW-~qHzb{xsir6~5j}iG{XXGdJ<o57%4Z#f@7!iKUt(v~?Xb?=w
z(<xNE@^(!y>-5^Vftk1ebC~Xqnr9Xks)RGv8>OLQw6ALhwo>>-$l1UnduN<)ef5*{
z^G~|D{ya8>_&>jKP15AG=;^`Ta1ukB*5CE##oTM*kvWIBqq;q%hV-vLd93U2V{OU*
z*N>j^T-yY$$*a0_!rh(W`tuoeNKZ^Wk-G5lzta02#f0nUlt+(P<{CumUjj?yt!Izr
zc#esX<}Xdu7p{>3STZwi-&8*$Z5!Dmn}nV!dL?ipRStm3z&{q=JI58=ozu;&J<N%o
z&e^xS29SkPjP1D#j;Yr2RO6O=u%)!Nxik<J+v}Q;S#{>kojRW`y0Q<JGgn}<wBxIO
z&NaeXToZ~!Z+F%|@T3=R4ojAnoo`>0f#5C}OVcoSglP7;XTFLM<P|n$=+P(}pmG_C
z%%(`KSzt6~{*wRkC*)-lkQUH{d5v5XGG3A4mf^KW)iiRq?K-C@^t6L(0<r>6R3b&v
zf^LfnG)#w4-9+_^9`PpKT|<x(1p3q!8u6!B!c$4hR|H0bPNBy4cMZ|#3{g1i%0K;z
z7kiUGOL;f91~a6dyqD26g1oQ8|NVOXPLv#gRQwA32c2@H&T{>I%M(f5gB{qo^Bz6i
zM-QloP65sHU4I`92`H+;W)&E)9{eHut-lU@zmAm6$&X&N)Lr44LCV^eT_u6ydCH}S
z`x{loVDFH|yty(IvN}}|!k(L5t8`>AX&oc$Q(93TCtM3bW(CiraIGkMQj|F7n(;sA
zX-IftHZ>f``g&4}GRr{1BQx&+;0PDmPTE1Xbug`{YIkLY5L}?Xnf<v~9lUv%I8f>Y
z+dpv4ur`eH4|mA#c?!Npxn@HLsWn}93w7zp$zx~=)?^=PGBs>}Y-xeDxK_5X>(7(o
zTC*nHwYAlGA4S4#xRD>-q+w<Q5b<<s?j0-tyt&`pMXFDBt>`wOi)@UfQH#T_u54Ou
z)B&>$;g#-oEK-cAGF@!AHX*aONtWb#aBS;I>)>23!6f1J&Um#s<B3CAklm+D+3|Ku
z6L`hFND%2tWZ(~6Ai95#gScsUNUQc(DtE^#@pSfZyOe99Q5&T;*&ejuAdCnKt6{4X
z(mrgor)vUn_JW1NGG*s(djQKW0@I_#__LO42%ND&BtQACOH<84n8fyqQg@%tN1h<o
z&f(wJFL5NXX50=<OYuI)H3K=2P=V+8sS82m-p#{^?lwz?%20Sd-NH42R7TJ=r*XV8
zo@3NY4v0URh@i3zw;<A)*1Zm{L0XMq-6Ac|Xrm6bwmX%iBeF&18bO}10Yo61GoMV(
zvH_V^g<8@PF-5y(V4qQFxmNCL1@$g?F>;**oeRY$$`HtQsbG9Gzj)f_L{nJS_$-oD
z=Y*j$6odUjA&&7rt-W(_Jf_Ej@=`I@q`3y*VF0`q=kO2#2jyse-zDxa-zvCumu_#H
zaKbeO(_ASC+ud)4g3q#$_x>7T)k$Y6w=TH;JgP7%vHW^dhpV-#Aqa1Qvgm!rM^~H}
z?K^a7(b=n8yUx7p=F=b3^8SMb&I`PFUX0qxQr~j=dfVV;E!uZ(A^+`cNN=&y$aN)G
OT#fJCRz3>FfBhc-f3R)<

diff --git a/trunk/auto/depends.sh b/trunk/auto/depends.sh
index c58f81d53..315de899b 100755
--- a/trunk/auto/depends.sh
+++ b/trunk/auto/depends.sh
@@ -507,11 +507,22 @@ if [[ $SRS_SSL == YES && $SRS_USE_SYS_SSL != YES ]]; then
     if [[ $SRS_OSX == YES ]]; then
         export KERNEL_BITS=64;
     fi
-    # Default to openssl 1.1, use 1.0 if required.
-    OPENSSL_CANDIDATE="openssl-1.1.0e" && OPENSSL_UNZIP="unzip -q ../../3rdparty/$OPENSSL_CANDIDATE.zip"
+    # Use 1.0 if required.
     if [[ $SRS_SSL_1_0 == YES ]]; then
+        OPENSSL_AR="$SRS_TOOL_AR -r" # For openssl 1.0, MUST specifies the args for ar or build faild.
         OPENSSL_CANDIDATE="openssl-OpenSSL_1_0_2u" && OPENSSL_UNZIP="tar xf ../../3rdparty/$OPENSSL_CANDIDATE.tar.gz"
+    else
+        OPENSSL_AR="$SRS_TOOL_AR"
+        OPENSSL_CANDIDATE="openssl-1.1-fit" && OPENSSL_UNZIP="cp -R ../../3rdparty/$OPENSSL_CANDIDATE ."
     fi
+    #
+    # https://wiki.openssl.org/index.php/Compilation_and_Installation#Configure_Options
+    # Already defined: -no-shared -no-threads -no-asm
+    # Should enable:  -no-dtls -no-dtls1 -no-ssl3
+    # Might able to disable: -no-ssl2 -no-comp -no-idea -no-hw -no-engine -no-dso -no-err -no-nextprotoneg -no-psk -no-srp -no-ec2m -no-weak-ssl-ciphers
+    # Note that we do not disable more features, because no file could be removed.
+    #OPENSSL_OPTIONS="$OPENSSL_OPTIONS -no-ssl2 -no-comp -no-idea -no-hw -no-engine -no-dso -no-err -no-nextprotoneg -no-psk -no-srp -no-ec2m -no-weak-ssl-ciphers"
+    #
     # cross build not specified, if exists flag, need to rebuild for no-arm platform.
     if [[ -f ${SRS_OBJS}/${SRS_PLATFORM}/openssl/lib/libssl.a ]]; then
         echo "The $OPENSSL_CANDIDATE is ok.";
@@ -520,7 +531,7 @@ if [[ $SRS_SSL == YES && $SRS_USE_SYS_SSL != YES ]]; then
         (
             rm -rf ${SRS_OBJS}/${SRS_PLATFORM}/${OPENSSL_CANDIDATE} && cd ${SRS_OBJS}/${SRS_PLATFORM} &&
             ${OPENSSL_UNZIP} && cd $OPENSSL_CANDIDATE && ${OPENSSL_CONFIG} --prefix=`pwd`/_release $OPENSSL_OPTIONS &&
-            make CC=${SRS_TOOL_CC} AR="${SRS_TOOL_AR} -rs" LD=${SRS_TOOL_LD} RANDLIB=${SRS_TOOL_RANDLIB} ${SRS_JOBS} && make install_sw &&
+            make CC=${SRS_TOOL_CC} AR="${OPENSSL_AR}" LD=${SRS_TOOL_LD} RANDLIB=${SRS_TOOL_RANDLIB} ${SRS_JOBS} && make install_sw &&
             cd .. && rm -rf openssl && ln -sf $OPENSSL_CANDIDATE/_release openssl
         )
     fi
diff --git a/trunk/src/core/srs_core_version4.hpp b/trunk/src/core/srs_core_version4.hpp
index 11c87cb3a..78e48d470 100644
--- a/trunk/src/core/srs_core_version4.hpp
+++ b/trunk/src/core/srs_core_version4.hpp
@@ -24,6 +24,6 @@
 #ifndef SRS_CORE_VERSION4_HPP
 #define SRS_CORE_VERSION4_HPP
 
-#define SRS_VERSION4_REVISION 77
+#define SRS_VERSION4_REVISION 78
 
 #endif

From 98839d3d538e8960d1195da74c97168a01a47386 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Mon, 1 Mar 2021 20:59:55 +0800
Subject: [PATCH 083/102] RTC: Fix TWCC enable bug

---
 trunk/src/app/srs_app_rtc_conn.cpp   | 21 ++++++++++++++++++++-
 trunk/src/app/srs_app_rtc_source.cpp | 12 +++++++++++-
 trunk/src/app/srs_app_rtc_source.hpp |  1 +
 3 files changed, 32 insertions(+), 2 deletions(-)

diff --git a/trunk/src/app/srs_app_rtc_conn.cpp b/trunk/src/app/srs_app_rtc_conn.cpp
index f0c9d18e6..27dd2a903 100644
--- a/trunk/src/app/srs_app_rtc_conn.cpp
+++ b/trunk/src/app/srs_app_rtc_conn.cpp
@@ -866,6 +866,7 @@ SrsRtcPublishStream::SrsRtcPublishStream(SrsRtcConnection* session, const SrsCon
     pt_to_drop_ = 0;
 
     nn_audio_frames = 0;
+    twcc_enabled_ = false;
     twcc_id_ = 0;
     twcc_fb_count_ = 0;
     
@@ -930,7 +931,7 @@ srs_error_t SrsRtcPublishStream::initialize(SrsRequest* r, SrsRtcStreamDescripti
         media_ssrc = desc->ssrc_;
         break;
     }
-    if (twcc_id != -1) {
+    if (twcc_id > 0) {
         twcc_id_ = twcc_id;
         extension_types_.register_by_uri(twcc_id_, kTWCCExt);
         rtcp_twcc_.set_media_ssrc(media_ssrc);
@@ -941,6 +942,11 @@ srs_error_t SrsRtcPublishStream::initialize(SrsRequest* r, SrsRtcStreamDescripti
     pt_to_drop_ = (uint16_t)_srs_config->get_rtc_drop_for_pt(req->vhost);
     twcc_enabled_ = _srs_config->get_rtc_twcc_enabled(req->vhost);
 
+    // No TWCC when negotiate, disable it.
+    if (twcc_id <= 0) {
+        twcc_enabled_ = false;
+    }
+
     srs_trace("RTC publisher nack=%d, nnc=%d, pt-drop=%u, twcc=%u/%d", nack_enabled_, nack_no_copy_, pt_to_drop_, twcc_enabled_, twcc_id);
 
     // Setup tracks.
@@ -3116,6 +3122,7 @@ srs_error_t SrsRtcConnection::negotiate_play_capability(SrsRequest* req, SrsRtcS
     //negotiate audio media
     if(NULL != req_stream_desc->audio_track_desc_) {
         SrsRtcTrackDescription* req_audio_track = req_stream_desc->audio_track_desc_;
+        int remote_twcc_id = req_audio_track->get_rtp_extension_id(kTWCCExt);
 
         src_track_descs = source->get_track_desc("audio", "opus");
         if (src_track_descs.size() > 0) {
@@ -3131,6 +3138,11 @@ srs_error_t SrsRtcConnection::negotiate_play_capability(SrsRequest* req, SrsRtcS
                 track->red_->pt_ = req_audio_track->red_->pt_;
             }
 
+            track->del_rtp_extension_desc(kTWCCExt);
+            if (remote_twcc_id > 0) {
+                track->add_rtp_extension_desc(remote_twcc_id, kTWCCExt);
+            }
+
             track->mid_ = req_audio_track->mid_;
             sub_relations.insert(make_pair(track->ssrc_, track));
             track->set_direction("sendonly");
@@ -3143,6 +3155,8 @@ srs_error_t SrsRtcConnection::negotiate_play_capability(SrsRequest* req, SrsRtcS
     src_track_descs = source->get_track_desc("video", "h264");
     for(int i = 0; i < (int)req_video_tracks.size(); ++i) {
         SrsRtcTrackDescription* req_video = req_video_tracks.at(i);
+        int remote_twcc_id = req_video->get_rtp_extension_id(kTWCCExt);
+
         for(int j = 0; j < (int)src_track_descs.size(); ++j) {
             SrsRtcTrackDescription* src_video = src_track_descs.at(j);
             if(req_video->id_ == src_video->id_) {
@@ -3158,6 +3172,11 @@ srs_error_t SrsRtcConnection::negotiate_play_capability(SrsRequest* req, SrsRtcS
                     track->red_->pt_ = req_video->red_->pt_;
                 }
 
+                track->del_rtp_extension_desc(kTWCCExt);
+                if (remote_twcc_id > 0) {
+                    track->add_rtp_extension_desc(remote_twcc_id, kTWCCExt);
+                }
+
                 track->mid_ = req_video->mid_;
                 sub_relations.insert(make_pair(track->ssrc_, track));
                 track->set_direction("sendonly");
diff --git a/trunk/src/app/srs_app_rtc_source.cpp b/trunk/src/app/srs_app_rtc_source.cpp
index cc328b176..96a6bcc18 100644
--- a/trunk/src/app/srs_app_rtc_source.cpp
+++ b/trunk/src/app/srs_app_rtc_source.cpp
@@ -1583,6 +1583,16 @@ void SrsRtcTrackDescription::add_rtp_extension_desc(int id, std::string uri)
     extmaps_[id] = uri;
 }
 
+void SrsRtcTrackDescription::del_rtp_extension_desc(std::string uri)
+{
+    for(std::map<int, std::string>::iterator it = extmaps_.begin(); it != extmaps_.end(); ++it) {
+        if(uri == it->second) {
+            extmaps_.erase(it++);
+            break;
+        }
+    }
+}
+
 void SrsRtcTrackDescription::set_direction(std::string direction)
 {
     direction_ = direction;
@@ -1630,7 +1640,7 @@ void SrsRtcTrackDescription::set_mid(std::string mid)
 
 int SrsRtcTrackDescription::get_rtp_extension_id(std::string uri)
 {
-     for(std::map<int, std::string>::iterator it = extmaps_.begin(); it != extmaps_.end(); ++it) {
+    for (std::map<int, std::string>::iterator it = extmaps_.begin(); it != extmaps_.end(); ++it) {
         if(uri == it->second) {
             return it->first;
         }
diff --git a/trunk/src/app/srs_app_rtc_source.hpp b/trunk/src/app/srs_app_rtc_source.hpp
index 8f29946f3..f22bffc27 100644
--- a/trunk/src/app/srs_app_rtc_source.hpp
+++ b/trunk/src/app/srs_app_rtc_source.hpp
@@ -439,6 +439,7 @@ public:
     bool has_ssrc(uint32_t ssrc);
 public:
     void add_rtp_extension_desc(int id, std::string uri);
+    void del_rtp_extension_desc(std::string uri);
     void set_direction(std::string direction);
     void set_codec_payload(SrsCodecPayload* payload);
     // auxiliary paylod include red, rtx, ulpfec.

From 812d4ebfeaa53d53c33186cda126e7c2ac053655 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Tue, 2 Mar 2021 07:35:35 +0800
Subject: [PATCH 084/102] Refine FFmpeg-4.2-fit build, copy source code

---
 trunk/auto/depends.sh | 23 ++++-------------------
 1 file changed, 4 insertions(+), 19 deletions(-)

diff --git a/trunk/auto/depends.sh b/trunk/auto/depends.sh
index 315de899b..b7d5cc7a0 100755
--- a/trunk/auto/depends.sh
+++ b/trunk/auto/depends.sh
@@ -631,25 +631,10 @@ if [[ $SRS_FFMPEG_FIT == YES ]]; then
         (
             rm -rf ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg-4.2-fit && mkdir -p ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg-4.2-fit &&
             # Create a hidden directory .src
-            cd ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg-4.2-fit && ABS_OBJS=`(cd .. && pwd)` && ln -sf ../../../3rdparty/ffmpeg-4.2-fit .src &&
-            # Link source files under .src
-            _srs_link_file .src/ ./ ./ &&
-            for dir in `(cd .src && find . -maxdepth 1 -type d|grep '\./')`; do
-                dir=`basename $dir` && mkdir -p $dir && _srs_link_file .src/$dir/ $dir/ ../ &&
-                for dir2 in `(cd .src/$dir && find . -maxdepth 1 -type d|grep '\./')`; do
-                    dir2=`basename $dir2` && mkdir -p $dir/$dir2 && _srs_link_file .src/$dir/$dir2/ $dir/$dir2/ ../../ &&
-                    for dir3 in `(cd .src/$dir/$dir2 && find . -maxdepth 1 -type d|grep '\./')`; do
-                        dir3=`basename $dir3` && mkdir -p $dir/$dir2/$dir3 && _srs_link_file .src/$dir/$dir2/$dir3/ $dir/$dir2/$dir3/ ../../../;
-                    done
-                done
-            done &&
-            # We should remove some files(in .gitignore) to keep them in local generated.
-            (cd ffbuild && rm -f config.fate config.log config.mak config.sh .config) &&
-            (cd libavutil && rm -f lib.version libavutil.version ffversion.h avconfig.h) &&
-            (rm -rf doc && rm -f config.asm config.h libavcodec/libavcodec.version libswresample/libswresample.version) &&
+            cd ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg-4.2-fit && cp -R ../../../3rdparty/ffmpeg-4.2-fit/* . &&
             # Build source code.
             PKG_CONFIG_PATH=$ABS_OBJS/opus/lib/pkgconfig ./configure \
-              --prefix=`pwd`/${SRS_PLATFORM}/_release \
+              --prefix=`pwd`/_release \
               --pkg-config-flags="--static" --extra-libs=-lpthread --extra-libs=-lm ${FFMPEG_OPTIONS} \
               --disable-programs --disable-doc --disable-htmlpages --disable-manpages --disable-podpages --disable-txtpages \
               --disable-avdevice --disable-avformat --disable-swscale --disable-postproc --disable-avfilter --disable-network \
@@ -660,13 +645,13 @@ if [[ $SRS_FFMPEG_FIT == YES ]]; then
               --disable-lzma --disable-sdl2 --disable-everything --enable-decoder=aac --enable-decoder=aac_fixed --enable-decoder=aac_latm \
               --enable-decoder=libopus --enable-encoder=aac --enable-encoder=opus --enable-encoder=libopus --enable-libopus &&
             make ${SRS_JOBS} && make install &&
-            cd .. && rm -rf ffmpeg && ln -sf ffmpeg-4.2-fit/${SRS_PLATFORM}/_release ffmpeg
+            cd .. && rm -rf ffmpeg && ln -sf ffmpeg-4.2-fit/_release ffmpeg
         )
     fi
     # check status
     ret=$?; if [[ $ret -ne 0 ]]; then echo "Build ffmpeg-4.2-fit failed, ret=$ret"; exit $ret; fi
     # Always update the links.
-    (cd ${SRS_OBJS} && rm -rf ffmpeg && ln -sf ${SRS_PLATFORM}/ffmpeg-4.2-fit/${SRS_PLATFORM}/_release ffmpeg)
+    (cd ${SRS_OBJS} && rm -rf ffmpeg && ln -sf ${SRS_PLATFORM}/ffmpeg-4.2-fit/_release ffmpeg)
     if [ ! -f ${SRS_OBJS}/ffmpeg/lib/libavcodec.a ]; then echo "Build ffmpeg-4.2-fit failed."; exit -1; fi
 fi
 

From c9d68aae794fb4d342cc5fa69b78116b1d8f34a7 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Tue, 2 Mar 2021 13:20:38 +0800
Subject: [PATCH 085/102] Refine FFmpeg-4.2-fit build bug

---
 trunk/auto/depends.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/trunk/auto/depends.sh b/trunk/auto/depends.sh
index b7d5cc7a0..0f1ded99a 100755
--- a/trunk/auto/depends.sh
+++ b/trunk/auto/depends.sh
@@ -632,10 +632,12 @@ if [[ $SRS_FFMPEG_FIT == YES ]]; then
             rm -rf ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg-4.2-fit && mkdir -p ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg-4.2-fit &&
             # Create a hidden directory .src
             cd ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg-4.2-fit && cp -R ../../../3rdparty/ffmpeg-4.2-fit/* . &&
+            # For libopus and other codecs.
+            ABS_OBJS=$(cd .. && pwd) &&
             # Build source code.
             PKG_CONFIG_PATH=$ABS_OBJS/opus/lib/pkgconfig ./configure \
               --prefix=`pwd`/_release \
-              --pkg-config-flags="--static" --extra-libs=-lpthread --extra-libs=-lm ${FFMPEG_OPTIONS} \
+              --pkg-config-flags="--static" --extra-libs="-lpthread" --extra-libs="-lm" ${FFMPEG_OPTIONS} \
               --disable-programs --disable-doc --disable-htmlpages --disable-manpages --disable-podpages --disable-txtpages \
               --disable-avdevice --disable-avformat --disable-swscale --disable-postproc --disable-avfilter --disable-network \
               --disable-dct --disable-dwt --disable-error-resilience --disable-lsp --disable-lzo --disable-faan --disable-pixelutils \

From 921e4041ba500c28a558e1509024c26d95426077 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Tue, 2 Mar 2021 13:27:52 +0800
Subject: [PATCH 086/102] Update doc

---
 trunk/3rdparty/{readme.txt => README.md} | 3 ++-
 trunk/3rdparty/openssl-1.1-fit/README.md | 3 ---
 2 files changed, 2 insertions(+), 4 deletions(-)
 rename trunk/3rdparty/{readme.txt => README.md} (98%)
 delete mode 100644 trunk/3rdparty/openssl-1.1-fit/README.md

diff --git a/trunk/3rdparty/readme.txt b/trunk/3rdparty/README.md
similarity index 98%
rename from trunk/3rdparty/readme.txt
rename to trunk/3rdparty/README.md
index 331e2928c..b07e20281 100644
--- a/trunk/3rdparty/readme.txt
+++ b/trunk/3rdparty/README.md
@@ -3,7 +3,8 @@ http-parser-2.1.zip
 
 nginx-1.5.7.zip
     for srs to support hls streaming.
-    
+
+openssl-1.1.1b.tar.gz    
 openssl-1.1.0e.zip
 openssl-OpenSSL_1_0_2u.tar.gz
     openssl for SRS(with-ssl) RTMP complex handshake to delivery h264+aac stream.
diff --git a/trunk/3rdparty/openssl-1.1-fit/README.md b/trunk/3rdparty/openssl-1.1-fit/README.md
deleted file mode 100644
index d7c5dbc2f..000000000
--- a/trunk/3rdparty/openssl-1.1-fit/README.md
+++ /dev/null
@@ -1,3 +0,0 @@
-
-For openssl-1.1.1b.tar.gz
-

From 3749d4d833d9a90c6cc32063021b1c90eeff316c Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Tue, 2 Mar 2021 13:30:41 +0800
Subject: [PATCH 087/102] Update doc

---
 trunk/3rdparty/README.md | 48 ++++++++++++++++++++--------------------
 1 file changed, 24 insertions(+), 24 deletions(-)

diff --git a/trunk/3rdparty/README.md b/trunk/3rdparty/README.md
index b07e20281..607742317 100644
--- a/trunk/3rdparty/README.md
+++ b/trunk/3rdparty/README.md
@@ -1,76 +1,76 @@
 http-parser-2.1.zip
-    for srs to support http callback.
+* for srs to support http callback.
 
 nginx-1.5.7.zip
-    for srs to support hls streaming.
+* for srs to support hls streaming.
 
 openssl-1.1.1b.tar.gz    
 openssl-1.1.0e.zip
 openssl-OpenSSL_1_0_2u.tar.gz
-    openssl for SRS(with-ssl) RTMP complex handshake to delivery h264+aac stream.
-    SRTP depends on openssl 1.0.*, so we use both ssl versions.
+* openssl for SRS(with-ssl) RTMP complex handshake to delivery h264+aac stream.
+* SRTP depends on openssl 1.0.*, so we use both ssl versions.
 
 CherryPy-3.2.4.zip
-    sample api server for srs.
+* sample api server for srs.
 
 ffmpeg-3.2.4.tar.gz
 yasm-1.2.0.tar.gz
 lame-3.99.5.tar.gz
 speex-1.2rc1.zip
 x264-snapshot-20131129-2245-stable.tar.bz2 (core.138)
-    for srs to support live stream transcoding.
-    remark: we use *.zip for all linux plantform.
+* for srs to support live stream transcoding.
+* remark: we use *.zip for all linux plantform.
 
 fdk-aac-0.1.3.zip
-    https://github.com/mstorsjo/fdk-aac/releases
+* https://github.com/mstorsjo/fdk-aac/releases
 
 tools/ccache-3.1.9.zip
-    to fast build.
+* to fast build.
     
 gtest-1.6.0.zip
-    google test framework.
+* google test framework.
     
 gperftools-2.1.zip
-    gperf tools for performance benchmark.
+* gperf tools for performance benchmark.
 
 st-srs
 st-1.9.zip
 state-threads
 state-threads-1.9.1.tar.gz
-    Patched ST from https://github.com/ossrs/state-threads
+* Patched ST from https://github.com/ossrs/state-threads
 
 links:
-    nginx:
+* nginx:
         http://nginx.org/
-    http-parser:
+* http-parser:
         https://github.com/joyent/http-parser
-    state-threads:
+* state-threads:
         https://github.com/ossrs/state-threads
-    ffmpeg: 
+* ffmpeg: 
         http://ffmpeg.org/ 
         http://ffmpeg.org/releases/ffmpeg-3.2.4.tar.gz
-    x264: 
+* x264: 
         http://www.videolan.org/ 
         ftp://ftp.videolan.org/pub/videolan/x264/snapshots/x264-snapshot-20131129-2245-stable.tar.bz2
-    lame: 
+* lame: 
         http://sourceforge.net/projects/lame/ 
         http://nchc.dl.sourceforge.net/project/lame/lame/3.99/lame-3.99.5.tar.gz
-    yasm:
+* yasm:
         http://yasm.tortall.net/
         http://www.tortall.net/projects/yasm/releases/yasm-1.2.0.tar.gz
-    cherrypy:
+* cherrypy:
         http://www.cherrypy.org/
         https://pypi.python.org/pypi/CherryPy/3.2.4
-    openssl:
+* openssl:
         http://www.openssl.org/
         http://www.openssl.org/source/openssl-1.1.0e.tar.gz
-    gtest:
+* gtest:
         https://code.google.com/p/googletest
         https://code.google.com/p/googletest/downloads/list
-    gperftools:
+* gperftools:
         https://code.google.com/p/gperftools/
         https://code.google.com/p/gperftools/downloads/list
-    speex:
+* speex:
         http://www.speex.org/downloads/
         http://downloads.xiph.org/releases/speex/speex-1.2rc1.tar.gz
 

From 8089fc004c77a2f6631a08a020cdb955bffd46ed Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Tue, 2 Mar 2021 14:29:06 +0800
Subject: [PATCH 088/102] Upgrade libsrtp from 2.0.0 to 2.3.0, with source
 code. 4.0.79

---
 README.md                                     |    1 +
 trunk/3rdparty/README.md                      |    6 +-
 trunk/3rdparty/libsrtp-2-fit/.clang-format    |   79 +
 trunk/3rdparty/libsrtp-2-fit/.gitignore       |   49 +
 trunk/3rdparty/libsrtp-2-fit/.travis.yml      |  259 +
 trunk/3rdparty/libsrtp-2-fit/LICENSE          |   35 +
 trunk/3rdparty/libsrtp-2-fit/Makefile.in      |  331 +
 trunk/3rdparty/libsrtp-2-fit/config.guess     | 1456 +++
 .../3rdparty/libsrtp-2-fit/config.h_win32vc7  |  162 +
 trunk/3rdparty/libsrtp-2-fit/config.hw        |  182 +
 trunk/3rdparty/libsrtp-2-fit/config.sub       | 1815 ++++
 trunk/3rdparty/libsrtp-2-fit/config_in.h      |  196 +
 .../3rdparty/libsrtp-2-fit/config_in_cmake.h  |  115 +
 trunk/3rdparty/libsrtp-2-fit/configure        | 7782 +++++++++++++++++
 trunk/3rdparty/libsrtp-2-fit/configure.ac     |  429 +
 .../3rdparty/libsrtp-2-fit/crypto/Makefile.in |  119 +
 .../libsrtp-2-fit/crypto/cipher/aes.c         | 2189 +++++
 .../libsrtp-2-fit/crypto/cipher/aes_gcm_nss.c |  609 ++
 .../crypto/cipher/aes_gcm_ossl.c              |  583 ++
 .../libsrtp-2-fit/crypto/cipher/aes_icm.c     |  530 ++
 .../libsrtp-2-fit/crypto/cipher/aes_icm_nss.c |  562 ++
 .../crypto/cipher/aes_icm_ossl.c              |  541 ++
 .../libsrtp-2-fit/crypto/cipher/cipher.c      |  664 ++
 .../libsrtp-2-fit/crypto/cipher/null_cipher.c |  153 +
 .../3rdparty/libsrtp-2-fit/crypto/hash/auth.c |  187 +
 .../3rdparty/libsrtp-2-fit/crypto/hash/hmac.c |  283 +
 .../libsrtp-2-fit/crypto/hash/hmac_ossl.c     |  273 +
 .../libsrtp-2-fit/crypto/hash/null_auth.c     |  168 +
 .../3rdparty/libsrtp-2-fit/crypto/hash/sha1.c |  472 +
 .../libsrtp-2-fit/crypto/include/aes.h        |   83 +
 .../libsrtp-2-fit/crypto/include/aes_gcm.h    |   89 +
 .../libsrtp-2-fit/crypto/include/aes_icm.h    |   62 +
 .../crypto/include/aes_icm_ext.h              |   83 +
 .../libsrtp-2-fit/crypto/include/alloc.h      |   76 +
 .../libsrtp-2-fit/crypto/include/auth.h       |  173 +
 .../libsrtp-2-fit/crypto/include/cipher.h     |  248 +
 .../crypto/include/cipher_priv.h              |   62 +
 .../crypto/include/cipher_types.h             |   84 +
 .../crypto/include/crypto_kernel.h            |  215 +
 .../crypto/include/crypto_types.h             |  116 +
 .../libsrtp-2-fit/crypto/include/datatypes.h  |  378 +
 .../libsrtp-2-fit/crypto/include/err.h        |  139 +
 .../libsrtp-2-fit/crypto/include/hmac.h       |   58 +
 .../libsrtp-2-fit/crypto/include/integers.h   |  146 +
 .../libsrtp-2-fit/crypto/include/key.h        |   88 +
 .../libsrtp-2-fit/crypto/include/null_auth.h  |   73 +
 .../crypto/include/null_cipher.h              |   57 +
 .../libsrtp-2-fit/crypto/include/rdb.h        |  125 +
 .../libsrtp-2-fit/crypto/include/rdbx.h       |  209 +
 .../libsrtp-2-fit/crypto/include/sha1.h       |  184 +
 .../libsrtp-2-fit/crypto/include/stat.h       |   66 +
 .../libsrtp-2-fit/crypto/kernel/alloc.c       |  101 +
 .../crypto/kernel/crypto_kernel.c             |  561 ++
 .../libsrtp-2-fit/crypto/kernel/err.c         |  108 +
 .../libsrtp-2-fit/crypto/kernel/key.c         |  122 +
 .../libsrtp-2-fit/crypto/math/datatypes.c     |  490 ++
 .../3rdparty/libsrtp-2-fit/crypto/math/stat.c |  213 +
 .../libsrtp-2-fit/crypto/replay/rdb.c         |  137 +
 .../libsrtp-2-fit/crypto/replay/rdbx.c        |  386 +
 .../libsrtp-2-fit/crypto/replay/ut_sim.c      |  107 +
 .../libsrtp-2-fit/crypto/test/aes_calc.c      |  157 +
 .../libsrtp-2-fit/crypto/test/cipher_driver.c |  603 ++
 .../crypto/test/datatypes_driver.c            |  256 +
 .../3rdparty/libsrtp-2-fit/crypto/test/env.c  |   89 +
 .../libsrtp-2-fit/crypto/test/kernel_driver.c |  127 +
 .../libsrtp-2-fit/crypto/test/sha1_driver.c   |  387 +
 .../libsrtp-2-fit/crypto/test/stat_driver.c   |  252 +
 trunk/3rdparty/libsrtp-2-fit/doc/Makefile.in  |   32 +
 trunk/3rdparty/libsrtp-2-fit/format.sh        |   35 +
 .../3rdparty/libsrtp-2-fit/fuzzer/Makefile.in |   34 +
 trunk/3rdparty/libsrtp-2-fit/fuzzer/README.md |   88 +
 trunk/3rdparty/libsrtp-2-fit/fuzzer/fuzzer.c  |  936 ++
 trunk/3rdparty/libsrtp-2-fit/fuzzer/fuzzer.h  |  176 +
 .../3rdparty/libsrtp-2-fit/fuzzer/mt19937.cpp |   17 +
 trunk/3rdparty/libsrtp-2-fit/fuzzer/mt19937.h |    4 +
 trunk/3rdparty/libsrtp-2-fit/fuzzer/testmem.c |   25 +
 trunk/3rdparty/libsrtp-2-fit/fuzzer/testmem.h |    3 +
 trunk/3rdparty/libsrtp-2-fit/include/ekt.h    |  181 +
 .../3rdparty/libsrtp-2-fit/include/getopt_s.h |   67 +
 trunk/3rdparty/libsrtp-2-fit/include/srtp.h   | 1759 ++++
 .../libsrtp-2-fit/include/srtp_priv.h         |  280 +
 trunk/3rdparty/libsrtp-2-fit/include/ut_sim.h |   83 +
 trunk/3rdparty/libsrtp-2-fit/install-sh       |  501 ++
 trunk/3rdparty/libsrtp-2-fit/install-win.bat  |   35 +
 trunk/3rdparty/libsrtp-2-fit/libsrtp2.pc.in   |   11 +
 trunk/3rdparty/libsrtp-2-fit/srtp/ekt.c       |  281 +
 trunk/3rdparty/libsrtp-2-fit/srtp/srtp.c      | 4727 ++++++++++
 trunk/3rdparty/libsrtp-2-fit/test/cutest.h    |  713 ++
 .../libsrtp-2-fit/test/dtls_srtp_driver.c     |  261 +
 trunk/3rdparty/libsrtp-2-fit/test/getopt_s.c  |  109 +
 .../3rdparty/libsrtp-2-fit/test/rdbx_driver.c |  360 +
 .../libsrtp-2-fit/test/replay_driver.c        |  285 +
 .../3rdparty/libsrtp-2-fit/test/roc_driver.c  |  170 +
 trunk/3rdparty/libsrtp-2-fit/test/rtp.c       |  229 +
 trunk/3rdparty/libsrtp-2-fit/test/rtp.h       |  155 +
 .../3rdparty/libsrtp-2-fit/test/rtp_decoder.c |  785 ++
 .../3rdparty/libsrtp-2-fit/test/rtp_decoder.h |  122 +
 trunk/3rdparty/libsrtp-2-fit/test/rtpw.c      |  701 ++
 .../3rdparty/libsrtp-2-fit/test/rtpw_test.sh  |  176 +
 .../libsrtp-2-fit/test/rtpw_test_gcm.sh       |  260 +
 .../3rdparty/libsrtp-2-fit/test/srtp_driver.c | 3837 ++++++++
 trunk/3rdparty/libsrtp-2-fit/test/test_srtp.c |  185 +
 trunk/3rdparty/libsrtp-2-fit/test/util.c      |  212 +
 trunk/3rdparty/libsrtp-2-fit/test/util.h      |   53 +
 trunk/3rdparty/libsrtp-2-fit/test/words.txt   |  250 +
 trunk/3rdparty/libsrtp-2-fit/timing           |    1 +
 trunk/3rdparty/libsrtp-2-fit/undos.sh         |   10 +
 trunk/3rdparty/libsrtp-2-fit/update.sh        |   15 +
 trunk/3rdparty/libsrtp-2.0.0.zip              |  Bin 359773 -> 0 bytes
 trunk/auto/depends.sh                         |    6 +-
 trunk/src/core/srs_core_version4.hpp          |    2 +-
 111 files changed, 45307 insertions(+), 5 deletions(-)
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/.clang-format
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/.gitignore
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/.travis.yml
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/LICENSE
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/Makefile.in
 create mode 100755 trunk/3rdparty/libsrtp-2-fit/config.guess
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/config.h_win32vc7
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/config.hw
 create mode 100755 trunk/3rdparty/libsrtp-2-fit/config.sub
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/config_in.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/config_in_cmake.h
 create mode 100755 trunk/3rdparty/libsrtp-2-fit/configure
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/configure.ac
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/Makefile.in
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_gcm_nss.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_gcm_ossl.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_icm.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_icm_nss.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_icm_ossl.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/cipher/cipher.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/cipher/null_cipher.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/hash/auth.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/hash/hmac.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/hash/hmac_ossl.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/hash/null_auth.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/hash/sha1.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/aes.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/aes_gcm.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/aes_icm.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/aes_icm_ext.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/alloc.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/auth.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/cipher.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/cipher_priv.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/cipher_types.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/crypto_kernel.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/crypto_types.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/datatypes.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/err.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/hmac.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/integers.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/key.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/null_auth.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/null_cipher.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/rdb.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/rdbx.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/sha1.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/include/stat.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/kernel/alloc.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/kernel/crypto_kernel.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/kernel/err.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/kernel/key.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/math/datatypes.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/math/stat.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/replay/rdb.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/replay/rdbx.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/replay/ut_sim.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/test/aes_calc.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/test/cipher_driver.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/test/datatypes_driver.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/test/env.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/test/kernel_driver.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/test/sha1_driver.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/crypto/test/stat_driver.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/doc/Makefile.in
 create mode 100755 trunk/3rdparty/libsrtp-2-fit/format.sh
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/fuzzer/Makefile.in
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/fuzzer/README.md
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/fuzzer/fuzzer.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/fuzzer/fuzzer.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/fuzzer/mt19937.cpp
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/fuzzer/mt19937.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/fuzzer/testmem.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/fuzzer/testmem.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/include/ekt.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/include/getopt_s.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/include/srtp.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/include/srtp_priv.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/include/ut_sim.h
 create mode 100755 trunk/3rdparty/libsrtp-2-fit/install-sh
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/install-win.bat
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/libsrtp2.pc.in
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/srtp/ekt.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/srtp/srtp.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/test/cutest.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/test/dtls_srtp_driver.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/test/getopt_s.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/test/rdbx_driver.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/test/replay_driver.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/test/roc_driver.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/test/rtp.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/test/rtp.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/test/rtp_decoder.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/test/rtp_decoder.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/test/rtpw.c
 create mode 100755 trunk/3rdparty/libsrtp-2-fit/test/rtpw_test.sh
 create mode 100755 trunk/3rdparty/libsrtp-2-fit/test/rtpw_test_gcm.sh
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/test/srtp_driver.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/test/test_srtp.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/test/util.c
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/test/util.h
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/test/words.txt
 create mode 100644 trunk/3rdparty/libsrtp-2-fit/timing
 create mode 100755 trunk/3rdparty/libsrtp-2-fit/undos.sh
 create mode 100755 trunk/3rdparty/libsrtp-2-fit/update.sh
 delete mode 100644 trunk/3rdparty/libsrtp-2.0.0.zip

diff --git a/README.md b/README.md
index 5dbb1013a..a9f7c23b0 100755
--- a/README.md
+++ b/README.md
@@ -156,6 +156,7 @@ For previous versions, please read:
 
 ## V4 changes
 
+* v4.0, 2021-03-02, Upgrade libsrtp from 2.0.0 to 2.3.0, with source code. 4.0.79
 * v4.0, 2021-03-01, Upgrade openssl from 1.1.0e to 1.1.1b, with source code. 4.0.78
 * v4.0, 2021-03-01, Enable Object Cache and Zero Copy Nack by default. 4.0.77
 * v4.0, 2021-02-28, RTC: Support high performance [Zero Copy NACK](https://github.com/ossrs/srs/commit/36ea67359e55c94ab044cee4b6a4ec901a83a287#commitcomment-47654868). 4.0.76
diff --git a/trunk/3rdparty/README.md b/trunk/3rdparty/README.md
index 607742317..5d5ef35db 100644
--- a/trunk/3rdparty/README.md
+++ b/trunk/3rdparty/README.md
@@ -13,6 +13,9 @@ openssl-OpenSSL_1_0_2u.tar.gz
 CherryPy-3.2.4.zip
 * sample api server for srs.
 
+libsrtp-2.3.0.tar.gz
+* For WebRTC.
+
 ffmpeg-3.2.4.tar.gz
 yasm-1.2.0.tar.gz
 lame-3.99.5.tar.gz
@@ -73,4 +76,5 @@ links:
 * speex:
         http://www.speex.org/downloads/
         http://downloads.xiph.org/releases/speex/speex-1.2rc1.tar.gz
-
+* srtp:
+        https://github.com/cisco/libsrtp/releases/tag/v2.3.0
diff --git a/trunk/3rdparty/libsrtp-2-fit/.clang-format b/trunk/3rdparty/libsrtp-2-fit/.clang-format
new file mode 100644
index 000000000..358e22272
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/.clang-format
@@ -0,0 +1,79 @@
+AccessModifierOffset: -4
+
+AlignAfterOpenBracket: Align
+AlignConsecutiveAssignments: false
+AlignConsecutiveDeclarations: false
+AlignEscapedNewlinesLeft: false
+AlignOperands:   true
+AlignTrailingComments: true
+
+AllowAllParametersOfDeclarationOnNextLine: false
+
+AllowShortBlocksOnASingleLine: false
+AllowShortCaseLabelsOnASingleLine: false
+AllowShortFunctionsOnASingleLine: Inline
+AllowShortIfStatementsOnASingleLine: false
+AllowShortLoopsOnASingleLine: false
+
+AlwaysBreakAfterDefinitionReturnType: None
+AlwaysBreakBeforeMultilineStrings: false
+AlwaysBreakTemplateDeclarations: false
+
+BinPackArguments: true
+BinPackParameters: false
+BraceWrapping:
+  AfterControlStatement: false
+  AfterEnum:       false
+  AfterFunction:   true
+  AfterStruct:     false
+  AfterUnion:      false
+  BeforeCatch:     false
+  BeforeElse:      false
+  IndentBraces:    false
+
+BreakBeforeBinaryOperators: None
+BreakBeforeBraces: Custom
+BreakBeforeTernaryOperators: true
+
+ColumnLimit:     80
+CommentPragmas:  '^ IWYU pragma:'
+ContinuationIndentWidth: 4
+DerivePointerAlignment: false
+DisableFormat:   false
+ExperimentalAutoDetectBinPacking: false
+
+IndentCaseLabels: false
+IndentWidth:     4
+IndentWrappedFunctionNames: false
+
+KeepEmptyLinesAtTheStartOfBlocks: false
+
+MaxEmptyLinesToKeep: 1
+
+PenaltyBreakBeforeFirstCallParameter: 16
+PenaltyBreakComment: 300
+PenaltyBreakFirstLessLess: 120
+PenaltyBreakString: 1000
+PenaltyExcessCharacter: 1000
+PenaltyReturnTypeOnItsOwnLine: 9000
+
+Cpp11BracedListStyle: false
+
+PointerAlignment: Right
+
+ReflowComments:  true
+
+SortIncludes: false
+
+SpaceAfterCStyleCast: false
+SpaceBeforeAssignmentOperators: true
+SpaceBeforeParens: ControlStatements
+SpaceInEmptyParentheses: false
+SpacesBeforeTrailingComments: 1
+SpacesInAngles:  false
+SpacesInContainerLiterals: true
+SpacesInCStyleCastParentheses: false
+SpacesInParentheses: false
+SpacesInSquareBrackets: false
+TabWidth:        4
+UseTab:          Never
diff --git a/trunk/3rdparty/libsrtp-2-fit/.gitignore b/trunk/3rdparty/libsrtp-2-fit/.gitignore
new file mode 100644
index 000000000..c8b1235a2
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/.gitignore
@@ -0,0 +1,49 @@
+# Misc crap
+*~
+old
+old?
+*.pc
+
+# Object files
+*.o
+
+# Libraries
+*.lib
+*.a
+
+# Shared objects (inc. Windows DLLs)
+*.dll
+*.so
+*.so.*
+*.dylib
+
+# Executables
+*.exe
+*.out
+*.app
+
+# srtp things
+build
+Debug
+Makefile
+Root
+autom4te.cache
+config.log
+config.status
+crypto/include/config.h
+crypto/test/aes_calc
+crypto/test/cipher_driver
+crypto/test/datatypes_driver
+crypto/test/env
+crypto/test/kernel_driver
+crypto/test/sha1_driver
+crypto/test/stat_driver
+tables/aes_tables
+test/dtls_srtp_driver
+test/rdbx_driver
+test/replay_driver
+test/roc_driver
+test/rtp_decoder
+test/rtpw
+test/srtp_driver
+test/test_srtp
diff --git a/trunk/3rdparty/libsrtp-2-fit/.travis.yml b/trunk/3rdparty/libsrtp-2-fit/.travis.yml
new file mode 100644
index 000000000..0994588a2
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/.travis.yml
@@ -0,0 +1,259 @@
+dist: xenial
+sudo: false
+language: c
+
+env:
+  global:
+    - secure: "QD09MuUxftXRXtz7ZrB7S0NV/3O9yVhjvIlCSbXN8B87rNSDC8wxMThKMT7iZewnqGk53m+Up19PiMw5ERlHose5tm2cmY1FO/l+c9oAyWZaAL+4XNXryq6zI5F5FX5I61NbfqV3xcnfLTI2QIJF6WqDojNxhPjTbNzQGxIDuqw="
+
+matrix:
+  include:
+
+    # linux build
+    - os: linux
+      env:
+        - TEST="linux (gcc / valgrind)"
+      addons:
+        apt:
+          sources:
+            - ubuntu-toolchain-r-test
+          packages:
+            - gcc-6
+            - valgrind
+      script:
+        - CC=gcc-6 EXTRA_CFLAGS=-Werror ./configure
+        - make
+        - make runtest
+        - make runtest-valgrind
+        - make distclean
+        - mkdir build && cd build
+        - cmake ..
+        - make
+        - make test
+
+    # linux build with openssl
+    - os: linux
+      env:
+        - TEST="linux openssl (gcc / valgrind)"
+      addons:
+        apt:
+          sources:
+            - ubuntu-toolchain-r-test
+          packages:
+            - gcc-6
+            - valgrind
+      script:
+        - CC=gcc-6 EXTRA_CFLAGS=-Werror ./configure --enable-openssl
+        - make
+        - make runtest
+        - make runtest-valgrind
+        - make distclean
+        - mkdir build && cd build
+        - cmake -DENABLE_OPENSSL=ON ..
+        - make
+        - make test
+        - cd ..
+        - mkdir build_shared && cd build_shared
+        - cmake -DENABLE_OPENSSL=ON -DBUILD_SHARED_LIBS=ON ..
+        - make
+        - make test
+
+    # linux build with openssl and clang
+    - os: linux
+      env:
+        - TEST="linux openssl (clang)"
+      addons:
+        apt:
+          packages:
+            - clang
+      script:
+        - CC=clang EXTRA_CFLAGS=-Werror ./configure --enable-openssl
+        - make
+        - make runtest
+
+    # linux build with nss
+    - os: linux
+      env:
+        - TEST="linux nss (gcc / valgrind)"
+      addons:
+        apt:
+          sources:
+            - ubuntu-toolchain-r-test
+          packages:
+            - gcc-6
+            - valgrind
+            - libnss3-dev
+      script:
+        - CC=gcc-6 EXTRA_CFLAGS=-Werror ./configure --enable-nss
+        - make
+        - make runtest
+        - make runtest-valgrind
+
+    # default osx build
+    - os: osx
+      env:
+        - TEST="osx"
+      script:
+        - EXTRA_CFLAGS=-Werror ./configure
+        - make
+        - make runtest
+        - make distclean
+        - mkdir build && cd build
+        - cmake ..
+        - make
+        - make test
+
+    # osx build with openssl
+    - os: osx
+      osx_image: xcode11.2
+      env:
+        - TEST="osx openssl"
+      before_install:
+            - brew install openssl@1.1
+      script:
+        - PKG_CONFIG_PATH=$(brew --prefix openssl@1.1)/lib/pkgconfig EXTRA_CFLAGS=-Werror ./configure --enable-openssl
+        - make
+        - make runtest
+        - make distclean
+        - mkdir build && cd build
+        - cmake -DOPENSSL_ROOT_DIR=$(brew --prefix openssl@1.1) -DENABLE_OPENSSL=ON ..
+        - make
+        - make test
+
+    # osx build with nss
+    - os: osx
+      osx_image: xcode11.2
+      env:
+        - TEST="osx nss"
+      script:
+        - PKG_CONFIG_PATH=$(brew --prefix nss)/lib/pkgconfig EXTRA_CFLAGS=-Werror ./configure --enable-nss
+        - make
+        - make runtest
+
+    # code format check
+    - os: linux
+      env:
+        - TEST="clang-format"
+      addons:
+        apt:
+          packages:
+            - clang-format-3.9
+      script:
+        - CLANG_FORMAT=clang-format-3.9 ./format.sh -d
+
+    # big-endian
+    - os: linux
+      sudo: true
+      env:
+        - TEST="big-endian"
+      services:
+        - docker
+      addons:
+        apt:
+          packages:
+            - qemu-user-static
+            - qemu-system-mips
+      before_install:
+        - sudo docker run --volume $(pwd):/src --workdir /src --name mipsX --tty --detach ubuntu:16.04 tail
+        - sudo docker exec --tty mipsX apt-get update
+        - sudo docker exec --tty mipsX apt-get install build-essential -y
+        - sudo docker exec --tty mipsX apt-get install gcc-mips-linux-gnu -y
+      script:
+        - sudo docker exec --tty mipsX bash -c 'EXTRA_CFLAGS=-static CC=mips-linux-gnu-gcc ./configure --host=mips-linux-gnu'
+        - sudo docker exec --tty mipsX make
+        - sudo docker kill mipsX
+        - file test/srtp_driver
+        - make runtest
+
+    # linux build of fuzzer
+    - os: linux
+      env:
+        - TEST="fuzzer (build only)"
+      addons:
+        apt:
+          packages:
+            - clang
+      script:
+        - CC=clang CXX=clang++ CXXFLAGS="-fsanitize=fuzzer-no-link,address,undefined -g -O3" CFLAGS="-fsanitize=fuzzer-no-link,address,undefined -g -O3" LDFLAGS="-fsanitize=fuzzer-no-link,address,undefined" ./configure
+        - LIBFUZZER="-fsanitize=fuzzer" make srtp-fuzzer
+
+    # coverity scan
+    - os: linux
+      env:
+        - TEST="Coverity Scan"
+      addons:
+        coverity_scan:
+          project:
+            name: "cisco-libSRTP"
+            description: "Build submitted via Travis CI"
+            version: 2
+          notification_email: pabuhler@cisco.com
+          build_command_prepend: "./configure"
+          build_command: "make"
+          branch_pattern: master
+      script:
+        - echo -n | openssl s_client -connect scan.coverity.com:443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' | sudo tee -a /etc/ssl/certs/ca-
+
+    # windows build
+    - os: windows
+      env:
+        - TEST="windows"
+      script:
+        - export PATH="c:\Program Files (x86)\Microsoft Visual Studio\2017\BuildTools\MSBuild\15.0\Bin":$PATH
+        - mkdir build && cd build
+        - cmake -G "Visual Studio 15 2017" ..
+        - msbuild.exe libsrtp2.sln -p:Configuration=Release
+        - msbuild.exe RUN_TESTS.vcxproj -p:Configuration=Release
+        - cd ..
+        - mkdir build_shared && cd build_shared
+        - cmake -G "Visual Studio 15 2017" -DBUILD_SHARED_LIBS=ON ..
+        - msbuild.exe libsrtp2.sln -p:Configuration=Release
+        - msbuild.exe RUN_TESTS.vcxproj -p:Configuration=Release
+
+    # android build
+    - os: linux
+      env:
+        - TEST="android"
+      script:
+        - wget -q https://dl.google.com/android/repository/android-ndk-r20b-linux-x86_64.zip
+        - unzip -qq android-ndk-r20b-linux-x86_64.zip
+        - ANDROID_NDK=`pwd`/android-ndk-r20b
+        - mkdir build_android
+        - cd build_android
+        - cmake -DCMAKE_TOOLCHAIN_FILE=$ANDROID_NDK/build/cmake/android.toolchain.cmake -DANDROID_ABI=arm64-v8a ..
+        - make
+        - cd ..
+        - TOOLCHAIN=$ANDROID_NDK/toolchains/llvm/prebuilt/linux-x86_64
+          AR=$TOOLCHAIN/bin/aarch64-linux-android-ar
+          AS=$TOOLCHAIN/bin/aarch64-linux-android-as
+          CC=$TOOLCHAIN/bin/aarch64-linux-android21-clang
+          CXX=$TOOLCHAIN/bin/aarch64-linux-android21-clang++
+          LD=$TOOLCHAIN/bin/aarch64-linux-android-ld
+          RANLIB=$TOOLCHAIN/bin/aarch64-linux-android-ranlib
+          STRIP=$TOOLCHAIN/bin/aarch64-linux-android-strip
+          ./configure --host aarch64-linux-android
+        - make
+
+    # ios build with openssl
+    - os: osx
+      osx_image: xcode11.2
+      env:
+        - TEST="ios"
+      script:
+        - wget -q https://raw.githubusercontent.com/leetal/ios-cmake/master/ios.toolchain.cmake
+        - mkdir build && cd build
+        - cmake -DCMAKE_TOOLCHAIN_FILE=../ios.toolchain.cmake  -DPLATFORM=OS64 ..
+        - make
+        - cd ..
+        - CFLAGS="-arch arm64 --sysroot=$(xcrun --sdk iphoneos --show-sdk-path) -miphoneos-version-min=8.0 -fembed-bitcode"
+          LDFLAGS="-arch arm64 --sysroot=$(xcrun --sdk iphoneos --show-sdk-path) -miphoneos-version-min=8.0 -fembed-bitcode"
+          AR="$(xcrun --find --sdk iphoneos ar)"
+          AS="$(xcrun --find --sdk iphoneos as)"
+          CC="$(xcrun --find --sdk iphoneos clang)"
+          CXX="$(xcrun --find --sdk iphoneos clang++)"
+          LD="$(xcrun --find --sdk iphoneos ld)"
+          RANLIB="$(xcrun --find --sdk iphoneos ranlib)"
+          STRIP="$(xcrun --find --sdk iphoneos strip)"
+          ./configure --host arm-apple-darwin
+        - make
+        - make shared_library
diff --git a/trunk/3rdparty/libsrtp-2-fit/LICENSE b/trunk/3rdparty/libsrtp-2-fit/LICENSE
new file mode 100644
index 000000000..af0a2ac31
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/LICENSE
@@ -0,0 +1,35 @@
+/*
+ *	
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ * 
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ * 
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ * 
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ * 
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
diff --git a/trunk/3rdparty/libsrtp-2-fit/Makefile.in b/trunk/3rdparty/libsrtp-2-fit/Makefile.in
new file mode 100644
index 000000000..b782fb1f6
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/Makefile.in
@@ -0,0 +1,331 @@
+# Makefile for secure rtp
+#
+# David A. McGrew
+# Cisco Systems, Inc.
+
+# targets:
+#
+# runtest       runs test applications
+# runtest-valgrind runs test applications with valgrind
+# test		builds test applications
+# libsrtp2.a	static library implementing srtp
+# libsrtp2.so	shared library implementing srtp
+# clean		removes objects, libs, and executables
+# distribution  cleans and builds a .tgz
+# tags          builds etags file from all .c and .h files
+
+DYNAMIC_PATH_VAR = @DYNAMIC_PATH_VAR@
+CRYPTO_LIBDIR = @CRYPTO_LIBDIR@
+USE_EXTERNAL_CRYPTO = @USE_EXTERNAL_CRYPTO@
+HAVE_PCAP = @HAVE_PCAP@
+
+# Specify how tests should find shared libraries on macOS and Linux
+#
+# macOS purges DYLD_LIBRARY_PATH when spawning subprocesses, so it's
+# not possible to pass this in from the outside; we have to specify
+# it for any subprocesses we call. No support for dynamic linked
+# tests on Windows.
+ifneq ($(strip $(CRYPTO_LIBDIR)),)
+	ifneq ($(OS),Windows_NT)
+		UNAME_S = $(shell uname -s)
+		ifeq ($(UNAME_S),Linux)
+			FIND_LIBRARIES = LD_LIBRARY_PATH=$(CRYPTO_LIBDIR)
+		endif
+		ifeq ($(UNAME_S),Darwin)
+			FIND_LIBRARIES = DYLD_LIBRARY_PATH=$(CRYPTO_LIBDIR)
+		endif
+		CRYPTO_LIBDIR_FORWARD = CRYPTO_LIBDIR=$(CRYPTO_LIBDIR)
+	endif
+endif
+
+.PHONY: all shared_library test
+
+all: test
+
+runtest: test
+	@echo "running libsrtp2 test applications..."
+	$(FIND_LIBRARIES) crypto/test/cipher_driver$(EXE) -v >/dev/null
+	$(FIND_LIBRARIES) crypto/test/kernel_driver$(EXE) -v >/dev/null
+	$(FIND_LIBRARIES) test/test_srtp$(EXE) >/dev/null
+	$(FIND_LIBRARIES) test/rdbx_driver$(EXE) -v >/dev/null
+	$(FIND_LIBRARIES) test/srtp_driver$(EXE) -v >/dev/null
+	$(FIND_LIBRARIES) test/roc_driver$(EXE) -v >/dev/null
+	$(FIND_LIBRARIES) test/replay_driver$(EXE) -v >/dev/null
+	$(FIND_LIBRARIES) test/dtls_srtp_driver$(EXE) >/dev/null
+	cd test; $(CRYPTO_LIBDIR_FORWARD) $(abspath $(srcdir))/test/rtpw_test.sh -w $(abspath $(srcdir))/test/words.txt >/dev/null
+ifeq (1, $(USE_EXTERNAL_CRYPTO))
+	cd test; $(CRYPTO_LIBDIR_FORWARD) $(abspath $(srcdir))/test/rtpw_test_gcm.sh -w $(abspath $(srcdir))/test/words.txt >/dev/null
+endif
+	@echo "libsrtp2 test applications passed."
+	$(MAKE) -C crypto runtest
+
+runtest-valgrind: test
+	@echo "running libsrtp2 test applications... (valgrind)"
+	valgrind --error-exitcode=1 --leak-check=full test/test_srtp$(EXE) -v >/dev/null
+	valgrind --error-exitcode=1 --leak-check=full test/srtp_driver$(EXE) -v >/dev/null
+	@echo "libsrtp2 test applications passed. (valgrind)"
+
+# makefile variables
+
+CC	= @CC@
+CXX	= @CXX@
+INCDIR	= -Icrypto/include -I$(srcdir)/include -I$(srcdir)/crypto/include
+DEFS	= @DEFS@
+CPPFLAGS= @CPPFLAGS@
+CFLAGS	= @CFLAGS@
+CXXFLAGS= @CXXFLAGS@
+srtp-fuzzer: CFLAGS += -g
+srtp-fuzzer: CXXFLAGS += -g
+LIBS	= @LIBS@
+LDFLAGS	= -L. @LDFLAGS@
+COMPILE = $(CC) $(DEFS) $(INCDIR) $(CPPFLAGS) $(CFLAGS)
+SRTPLIB	= -lsrtp2
+PCAP_LIB = @PCAP_LIB@
+
+AR      = @AR@
+RANLIB	= @RANLIB@
+INSTALL	= @INSTALL@
+
+# EXE defines the suffix on executables - it's .exe for Windows, and
+# null on linux, bsd, and OS X and other OSes.
+EXE	= @EXE@
+
+HMAC_OBJS = @HMAC_OBJS@
+AES_ICM_OBJS = @AES_ICM_OBJS@
+
+srcdir = @srcdir@
+top_srcdir = @top_srcdir@
+top_builddir = @top_builddir@
+VPATH = @srcdir@
+prefix = @prefix@
+exec_prefix = @exec_prefix@
+includedir = @includedir@
+libdir = @libdir@
+bindir = @bindir@
+
+pkgconfigdir = $(libdir)/pkgconfig
+pkgconfig_DATA = libsrtp2.pc
+
+SHAREDLIBVERSION = 1
+ifneq (,$(or $(findstring linux,@host@), $(findstring gnu,@host@)))
+SHAREDLIB_DIR = $(libdir)
+SHAREDLIB_LDFLAGS = -shared -Wl,-soname,$@
+SHAREDLIBSUFFIXNOVER = so
+SHAREDLIBSUFFIX = $(SHAREDLIBSUFFIXNOVER).$(SHAREDLIBVERSION)
+else ifneq (,$(or $(findstring cygwin,@host@), $(findstring mingw,@host@)))
+SHAREDLIB_DIR = $(bindir)
+SHAREDLIB_LDFLAGS = -shared -Wl,--out-implib,libsrtp2.dll.a
+SHAREDLIBVERSION =
+SHAREDLIBSUFFIXNOVER = dll
+SHAREDLIBSUFFIX = $(SHAREDLIBSUFFIXNOVER)
+else ifeq (darwin,$(findstring darwin,@host@))
+SHAREDLIB_DIR = $(libdir)
+SHAREDLIB_LDFLAGS = -dynamiclib -twolevel_namespace \
+		-fno-common -headerpad_max_install_names -install_name $(libdir)/$@
+SHAREDLIBSUFFIXNOVER = dylib
+SHAREDLIBSUFFIX = $(SHAREDLIBVERSION).$(SHAREDLIBSUFFIXNOVER)
+endif
+
+# implicit rules for object files and test apps
+
+%.o: %.c
+	$(COMPILE) -c $< -o $@
+
+%$(EXE): %.c
+	$(COMPILE) $(LDFLAGS) $< -o $@ $(SRTPLIB) $(LIBS)
+
+ciphers = crypto/cipher/cipher.o crypto/cipher/null_cipher.o      \
+		  $(AES_ICM_OBJS)
+
+hashes  = crypto/hash/null_auth.o  crypto/hash/auth.o            \
+	  $(HMAC_OBJS)
+
+replay  = crypto/replay/rdb.o crypto/replay/rdbx.o               \
+		  crypto/replay/ut_sim.o
+
+math    = crypto/math/datatypes.o crypto/math/stat.o
+
+ust     = crypto/ust/ust.o
+
+err     = crypto/kernel/err.o
+
+kernel  = crypto/kernel/crypto_kernel.o  crypto/kernel/alloc.o   \
+		  crypto/kernel/key.o $(err) # $(ust)
+
+cryptobj =  $(ciphers) $(hashes) $(math) $(kernel) $(replay)
+
+# libsrtp2.a (implements srtp processing)
+
+srtpobj = srtp/srtp.o srtp/ekt.o
+
+libsrtp2.a: $(srtpobj) $(cryptobj) $(gdoi)
+	$(AR) cr libsrtp2.a $^
+	$(RANLIB) libsrtp2.a
+
+libsrtp2.$(SHAREDLIBSUFFIX): $(srtpobj) $(cryptobj) $(gdoi)
+	$(CC) -shared -o $@ $(SHAREDLIB_LDFLAGS) \
+				$^ $(LDFLAGS) $(LIBS)
+	if [ -n "$(SHAREDLIBVERSION)" ]; then \
+		ln -sfn $@ libsrtp2.$(SHAREDLIBSUFFIXNOVER); \
+	fi
+
+shared_library: libsrtp2.$(SHAREDLIBSUFFIX)
+
+libsrtp2.so: $(srtpobj) $(cryptobj)
+	$(CC) -shared -Wl,-soname,libsrtp2.so \
+		-o libsrtp2.so $^ $(LDFLAGS)
+
+# test applications
+ifneq (1, $(USE_EXTERNAL_CRYPTO))
+AES_CALC = crypto/test/aes_calc$(EXE)
+endif
+
+crypto_testapp = $(AES_CALC) crypto/test/cipher_driver$(EXE) \
+	crypto/test/datatypes_driver$(EXE) crypto/test/kernel_driver$(EXE) \
+	crypto/test/sha1_driver$(EXE) crypto/test/stat_driver$(EXE) \
+	crypto/test/env$(EXE)
+
+testapp = $(crypto_testapp) test/srtp_driver$(EXE) test/replay_driver$(EXE) \
+	  test/roc_driver$(EXE) test/rdbx_driver$(EXE) test/rtpw$(EXE) \
+	  test/dtls_srtp_driver$(EXE) test/test_srtp$(EXE)
+
+ifeq (1, $(HAVE_PCAP))
+testapp += test/rtp_decoder$(EXE)
+endif
+
+$(testapp): libsrtp2.a
+
+test/rtpw$(EXE): test/rtpw.c test/rtp.c test/util.c test/getopt_s.c \
+		crypto/math/datatypes.c
+	$(COMPILE) $(LDFLAGS) -o $@ $^ $(LIBS) $(SRTPLIB)
+
+ifeq (1, $(HAVE_PCAP))
+test/rtp_decoder$(EXE): test/rtp_decoder.c test/rtp.c test/util.c test/getopt_s.c \
+		crypto/math/datatypes.c
+	$(COMPILE) $(LDFLAGS) -o $@ $^ $(PCAP_LIB) $(LIBS) $(SRTPLIB)
+endif
+
+crypto/test/aes_calc$(EXE): crypto/test/aes_calc.c test/util.c
+	$(COMPILE) -I$(srcdir)/test $(LDFLAGS) -o $@ $^ $(LIBS) $(SRTPLIB)
+
+test/test_srtp$(EXE): test/test_srtp.c
+	$(COMPILE) -I$(srcdir)/test $(LDFLAGS) -o $@ $^ $(LIBS) $(SRTPLIB)
+
+crypto/test/datatypes_driver$(EXE): crypto/test/datatypes_driver.c test/util.c
+	$(COMPILE) -I$(srcdir)/test $(LDFLAGS) -o $@ $^ $(LIBS) $(SRTPLIB)
+
+crypto/test/sha1_driver$(EXE): crypto/test/sha1_driver.c test/util.c
+	$(COMPILE) -I$(srcdir)/test $(LDFLAGS) -o $@ $^ $(LIBS) $(SRTPLIB)
+
+test/srtp_driver$(EXE): test/srtp_driver.c test/util.c test/getopt_s.c
+	$(COMPILE) $(LDFLAGS) -o $@ $^ $(LIBS) $(SRTPLIB)
+
+test/rdbx_driver$(EXE): test/rdbx_driver.c test/getopt_s.c
+	$(COMPILE) $(LDFLAGS) -o $@ $^ $(LIBS) $(SRTPLIB)
+
+test/dtls_srtp_driver$(EXE): test/dtls_srtp_driver.c test/getopt_s.c test/util.c
+	$(COMPILE) $(LDFLAGS) -o $@ $^ $(LIBS) $(SRTPLIB)
+
+crypto/test/cipher_driver$(EXE): crypto/test/cipher_driver.c test/getopt_s.c
+	$(COMPILE) $(LDFLAGS) -o $@ $^ $(LIBS) $(SRTPLIB)
+
+crypto/test/kernel_driver$(EXE): crypto/test/kernel_driver.c test/getopt_s.c
+	$(COMPILE) $(LDFLAGS) -o $@ $^ $(LIBS) $(SRTPLIB)
+
+crypto/test/env$(EXE): crypto/test/env.c test/getopt_s.c
+	$(COMPILE) $(LDFLAGS) -o $@ $^ $(LIBS) $(SRTPLIB)
+
+test: $(testapp)
+	@echo "Build done. Please run '$(MAKE) runtest' to run self tests."
+
+memtest: test/srtp_driver
+	@test/srtp_driver -v -d "alloc" > tmp
+	@grep freed tmp | wc -l > freed
+	@grep allocated tmp | wc -l > allocated
+	@echo "checking for memory leaks (only works with --enable-stdout)"
+	cmp -s allocated freed
+	@echo "passed (same number of alloc() and dealloc() calls found)"
+	@rm freed allocated tmp
+
+# the target 'plot' runs the timing test (test/srtp_driver -t) then
+# uses gnuplot to produce plots of the results - see the script file
+# 'timing'
+
+plot:	test/srtp_driver
+	test/srtp_driver -t > timing.dat
+
+
+# bookkeeping: tags, clean, and distribution
+
+tags:
+	etags */*.[ch] */*/*.[ch]
+
+
+# documentation - the target libsrtp2doc builds html documentation
+
+libsrtp2doc:
+	$(MAKE) -C doc
+
+# fuzzer
+
+srtp-fuzzer: libsrtp2.a
+	$(MAKE) -C fuzzer
+
+.PHONY: clean superclean distclean install
+
+install:
+	$(INSTALL) -d $(DESTDIR)$(includedir)/srtp2
+	$(INSTALL) -d $(DESTDIR)$(libdir)
+	cp $(srcdir)/include/srtp.h $(DESTDIR)$(includedir)/srtp2
+	cp $(srcdir)/crypto/include/cipher.h $(DESTDIR)$(includedir)/srtp2
+	cp $(srcdir)/crypto/include/auth.h $(DESTDIR)$(includedir)/srtp2
+	cp $(srcdir)/crypto/include/crypto_types.h $(DESTDIR)$(includedir)/srtp2
+	if [ -f libsrtp2.a ]; then cp libsrtp2.a $(DESTDIR)$(libdir)/; fi
+	if [ -f libsrtp2.dll.a ]; then cp libsrtp2.dll.a $(DESTDIR)$(libdir)/; fi
+	if [ -f libsrtp2.$(SHAREDLIBSUFFIX) ]; then \
+		$(INSTALL) -d $(DESTDIR)$(SHAREDLIB_DIR); \
+		cp libsrtp2.$(SHAREDLIBSUFFIX) $(DESTDIR)$(SHAREDLIB_DIR)/; \
+		cp libsrtp2.$(SHAREDLIBSUFFIXNOVER) $(DESTDIR)$(SHAREDLIB_DIR)/; \
+		if [ -n "$(SHAREDLIBVERSION)" ]; then \
+			ln -sfn libsrtp2.$(SHAREDLIBSUFFIX) $(DESTDIR)$(SHAREDLIB_DIR)/libsrtp2.$(SHAREDLIBSUFFIXNOVER); \
+		fi; \
+	fi
+	$(INSTALL) -d $(DESTDIR)$(pkgconfigdir)
+	cp $(top_builddir)/$(pkgconfig_DATA) $(DESTDIR)$(pkgconfigdir)/
+
+uninstall:
+	rm -f $(DESTDIR)$(includedir)/srtp2/*.h
+	rm -f $(DESTDIR)$(libdir)/libsrtp2.*
+	-rmdir $(DESTDIR)$(includedir)/srtp2
+	rm -f $(DESTDIR)$(pkgconfigdir)/$(pkgconfig_DATA)
+
+clean:
+	rm -rf $(cryptobj) $(srtpobj) TAGS \
+		libsrtp2.a libsrtp2.so libsrtp2.dll.a core *.core test/core
+	for a in * */* */*/*; do			\
+			  if [ -f "$$a~" ] ; then rm -f $$a~; fi;	\
+		done;
+	for a in $(testapp); do rm -rf $$a$(EXE); done
+	rm -rf *.pict *.jpg *.dat
+	rm -rf freed allocated tmp
+	$(MAKE) -C doc clean
+	$(MAKE) -C fuzzer clean
+
+superclean: clean
+	rm -rf crypto/include/config.h config.log config.cache config.status \
+			   Makefile crypto/Makefile doc/Makefile \
+			   .gdb_history test/.gdb_history .DS_Store
+	rm -rf autom4te.cache
+
+distclean: superclean
+
+distname = libsrtp-$(shell cat VERSION)
+
+distribution: runtest superclean
+	if ! [ -f VERSION ]; then exit 1; fi
+	if [ -f ../$(distname).tgz ]; then               \
+		   mv ../$(distname).tgz ../$(distname).tgz.bak; \
+		fi
+	cd ..; tar cvzf $(distname).tgz libsrtp
+
+# EOF
diff --git a/trunk/3rdparty/libsrtp-2-fit/config.guess b/trunk/3rdparty/libsrtp-2-fit/config.guess
new file mode 100755
index 000000000..c4bd827a7
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/config.guess
@@ -0,0 +1,1456 @@
+#! /bin/sh
+# Attempt to guess a canonical system name.
+#   Copyright 1992-2016 Free Software Foundation, Inc.
+
+timestamp='2016-05-15'
+
+# This file is free software; you can redistribute it and/or modify it
+# under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful, but
+# WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, see <http://www.gnu.org/licenses/>.
+#
+# As a special exception to the GNU General Public License, if you
+# distribute this file as part of a program that contains a
+# configuration script generated by Autoconf, you may include it under
+# the same distribution terms that you use for the rest of that
+# program.  This Exception is an additional permission under section 7
+# of the GNU General Public License, version 3 ("GPLv3").
+#
+# Originally written by Per Bothner; maintained since 2000 by Ben Elliston.
+#
+# You can get the latest version of this script from:
+# http://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.guess
+#
+# Please send patches to <config-patches@gnu.org>.
+
+
+me=`echo "$0" | sed -e 's,.*/,,'`
+
+usage="\
+Usage: $0 [OPTION]
+
+Output the configuration name of the system \`$me' is run on.
+
+Operation modes:
+  -h, --help         print this help, then exit
+  -t, --time-stamp   print date of last modification, then exit
+  -v, --version      print version number, then exit
+
+Report bugs and patches to <config-patches@gnu.org>."
+
+version="\
+GNU config.guess ($timestamp)
+
+Originally written by Per Bothner.
+Copyright 1992-2016 Free Software Foundation, Inc.
+
+This is free software; see the source for copying conditions.  There is NO
+warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE."
+
+help="
+Try \`$me --help' for more information."
+
+# Parse command line
+while test $# -gt 0 ; do
+  case $1 in
+    --time-stamp | --time* | -t )
+       echo "$timestamp" ; exit ;;
+    --version | -v )
+       echo "$version" ; exit ;;
+    --help | --h* | -h )
+       echo "$usage"; exit ;;
+    -- )     # Stop option processing
+       shift; break ;;
+    - )	# Use stdin as input.
+       break ;;
+    -* )
+       echo "$me: invalid option $1$help" >&2
+       exit 1 ;;
+    * )
+       break ;;
+  esac
+done
+
+if test $# != 0; then
+  echo "$me: too many arguments$help" >&2
+  exit 1
+fi
+
+trap 'exit 1' 1 2 15
+
+# CC_FOR_BUILD -- compiler used by this script. Note that the use of a
+# compiler to aid in system detection is discouraged as it requires
+# temporary files to be created and, as you can see below, it is a
+# headache to deal with in a portable fashion.
+
+# Historically, `CC_FOR_BUILD' used to be named `HOST_CC'. We still
+# use `HOST_CC' if defined, but it is deprecated.
+
+# Portable tmp directory creation inspired by the Autoconf team.
+
+set_cc_for_build='
+trap "exitcode=\$?; (rm -f \$tmpfiles 2>/dev/null; rmdir \$tmp 2>/dev/null) && exit \$exitcode" 0 ;
+trap "rm -f \$tmpfiles 2>/dev/null; rmdir \$tmp 2>/dev/null; exit 1" 1 2 13 15 ;
+: ${TMPDIR=/tmp} ;
+ { tmp=`(umask 077 && mktemp -d "$TMPDIR/cgXXXXXX") 2>/dev/null` && test -n "$tmp" && test -d "$tmp" ; } ||
+ { test -n "$RANDOM" && tmp=$TMPDIR/cg$$-$RANDOM && (umask 077 && mkdir $tmp) ; } ||
+ { tmp=$TMPDIR/cg-$$ && (umask 077 && mkdir $tmp) && echo "Warning: creating insecure temp directory" >&2 ; } ||
+ { echo "$me: cannot create a temporary directory in $TMPDIR" >&2 ; exit 1 ; } ;
+dummy=$tmp/dummy ;
+tmpfiles="$dummy.c $dummy.o $dummy.rel $dummy" ;
+case $CC_FOR_BUILD,$HOST_CC,$CC in
+ ,,)    echo "int x;" > $dummy.c ;
+	for c in cc gcc c89 c99 ; do
+	  if ($c -c -o $dummy.o $dummy.c) >/dev/null 2>&1 ; then
+	     CC_FOR_BUILD="$c"; break ;
+	  fi ;
+	done ;
+	if test x"$CC_FOR_BUILD" = x ; then
+	  CC_FOR_BUILD=no_compiler_found ;
+	fi
+	;;
+ ,,*)   CC_FOR_BUILD=$CC ;;
+ ,*,*)  CC_FOR_BUILD=$HOST_CC ;;
+esac ; set_cc_for_build= ;'
+
+# This is needed to find uname on a Pyramid OSx when run in the BSD universe.
+# (ghazi@noc.rutgers.edu 1994-08-24)
+if (test -f /.attbin/uname) >/dev/null 2>&1 ; then
+	PATH=$PATH:/.attbin ; export PATH
+fi
+
+UNAME_MACHINE=`(uname -m) 2>/dev/null` || UNAME_MACHINE=unknown
+UNAME_RELEASE=`(uname -r) 2>/dev/null` || UNAME_RELEASE=unknown
+UNAME_SYSTEM=`(uname -s) 2>/dev/null`  || UNAME_SYSTEM=unknown
+UNAME_VERSION=`(uname -v) 2>/dev/null` || UNAME_VERSION=unknown
+
+case "${UNAME_SYSTEM}" in
+Linux|GNU|GNU/*)
+	# If the system lacks a compiler, then just pick glibc.
+	# We could probably try harder.
+	LIBC=gnu
+
+	eval $set_cc_for_build
+	cat <<-EOF > $dummy.c
+	#include <features.h>
+	#if defined(__UCLIBC__)
+	LIBC=uclibc
+	#elif defined(__dietlibc__)
+	LIBC=dietlibc
+	#else
+	LIBC=gnu
+	#endif
+	EOF
+	eval `$CC_FOR_BUILD -E $dummy.c 2>/dev/null | grep '^LIBC' | sed 's, ,,g'`
+	;;
+esac
+
+# Note: order is significant - the case branches are not exclusive.
+
+case "${UNAME_MACHINE}:${UNAME_SYSTEM}:${UNAME_RELEASE}:${UNAME_VERSION}" in
+    *:NetBSD:*:*)
+	# NetBSD (nbsd) targets should (where applicable) match one or
+	# more of the tuples: *-*-netbsdelf*, *-*-netbsdaout*,
+	# *-*-netbsdecoff* and *-*-netbsd*.  For targets that recently
+	# switched to ELF, *-*-netbsd* would select the old
+	# object file format.  This provides both forward
+	# compatibility and a consistent mechanism for selecting the
+	# object file format.
+	#
+	# Note: NetBSD doesn't particularly care about the vendor
+	# portion of the name.  We always set it to "unknown".
+	sysctl="sysctl -n hw.machine_arch"
+	UNAME_MACHINE_ARCH=`(uname -p 2>/dev/null || \
+	    /sbin/$sysctl 2>/dev/null || \
+	    /usr/sbin/$sysctl 2>/dev/null || \
+	    echo unknown)`
+	case "${UNAME_MACHINE_ARCH}" in
+	    armeb) machine=armeb-unknown ;;
+	    arm*) machine=arm-unknown ;;
+	    sh3el) machine=shl-unknown ;;
+	    sh3eb) machine=sh-unknown ;;
+	    sh5el) machine=sh5le-unknown ;;
+	    earmv*)
+		arch=`echo ${UNAME_MACHINE_ARCH} | sed -e 's,^e\(armv[0-9]\).*$,\1,'`
+		endian=`echo ${UNAME_MACHINE_ARCH} | sed -ne 's,^.*\(eb\)$,\1,p'`
+		machine=${arch}${endian}-unknown
+		;;
+	    *) machine=${UNAME_MACHINE_ARCH}-unknown ;;
+	esac
+	# The Operating System including object format, if it has switched
+	# to ELF recently (or will in the future) and ABI.
+	case "${UNAME_MACHINE_ARCH}" in
+	    earm*)
+		os=netbsdelf
+		;;
+	    arm*|i386|m68k|ns32k|sh3*|sparc|vax)
+		eval $set_cc_for_build
+		if echo __ELF__ | $CC_FOR_BUILD -E - 2>/dev/null \
+			| grep -q __ELF__
+		then
+		    # Once all utilities can be ECOFF (netbsdecoff) or a.out (netbsdaout).
+		    # Return netbsd for either.  FIX?
+		    os=netbsd
+		else
+		    os=netbsdelf
+		fi
+		;;
+	    *)
+		os=netbsd
+		;;
+	esac
+	# Determine ABI tags.
+	case "${UNAME_MACHINE_ARCH}" in
+	    earm*)
+		expr='s/^earmv[0-9]/-eabi/;s/eb$//'
+		abi=`echo ${UNAME_MACHINE_ARCH} | sed -e "$expr"`
+		;;
+	esac
+	# The OS release
+	# Debian GNU/NetBSD machines have a different userland, and
+	# thus, need a distinct triplet. However, they do not need
+	# kernel version information, so it can be replaced with a
+	# suitable tag, in the style of linux-gnu.
+	case "${UNAME_VERSION}" in
+	    Debian*)
+		release='-gnu'
+		;;
+	    *)
+		release=`echo ${UNAME_RELEASE} | sed -e 's/[-_].*//' | cut -d. -f1,2`
+		;;
+	esac
+	# Since CPU_TYPE-MANUFACTURER-KERNEL-OPERATING_SYSTEM:
+	# contains redundant information, the shorter form:
+	# CPU_TYPE-MANUFACTURER-OPERATING_SYSTEM is used.
+	echo "${machine}-${os}${release}${abi}"
+	exit ;;
+    *:Bitrig:*:*)
+	UNAME_MACHINE_ARCH=`arch | sed 's/Bitrig.//'`
+	echo ${UNAME_MACHINE_ARCH}-unknown-bitrig${UNAME_RELEASE}
+	exit ;;
+    *:OpenBSD:*:*)
+	UNAME_MACHINE_ARCH=`arch | sed 's/OpenBSD.//'`
+	echo ${UNAME_MACHINE_ARCH}-unknown-openbsd${UNAME_RELEASE}
+	exit ;;
+    *:LibertyBSD:*:*)
+	UNAME_MACHINE_ARCH=`arch | sed 's/^.*BSD\.//'`
+	echo ${UNAME_MACHINE_ARCH}-unknown-libertybsd${UNAME_RELEASE}
+	exit ;;
+    *:ekkoBSD:*:*)
+	echo ${UNAME_MACHINE}-unknown-ekkobsd${UNAME_RELEASE}
+	exit ;;
+    *:SolidBSD:*:*)
+	echo ${UNAME_MACHINE}-unknown-solidbsd${UNAME_RELEASE}
+	exit ;;
+    macppc:MirBSD:*:*)
+	echo powerpc-unknown-mirbsd${UNAME_RELEASE}
+	exit ;;
+    *:MirBSD:*:*)
+	echo ${UNAME_MACHINE}-unknown-mirbsd${UNAME_RELEASE}
+	exit ;;
+    *:Sortix:*:*)
+	echo ${UNAME_MACHINE}-unknown-sortix
+	exit ;;
+    alpha:OSF1:*:*)
+	case $UNAME_RELEASE in
+	*4.0)
+		UNAME_RELEASE=`/usr/sbin/sizer -v | awk '{print $3}'`
+		;;
+	*5.*)
+		UNAME_RELEASE=`/usr/sbin/sizer -v | awk '{print $4}'`
+		;;
+	esac
+	# According to Compaq, /usr/sbin/psrinfo has been available on
+	# OSF/1 and Tru64 systems produced since 1995.  I hope that
+	# covers most systems running today.  This code pipes the CPU
+	# types through head -n 1, so we only detect the type of CPU 0.
+	ALPHA_CPU_TYPE=`/usr/sbin/psrinfo -v | sed -n -e 's/^  The alpha \(.*\) processor.*$/\1/p' | head -n 1`
+	case "$ALPHA_CPU_TYPE" in
+	    "EV4 (21064)")
+		UNAME_MACHINE=alpha ;;
+	    "EV4.5 (21064)")
+		UNAME_MACHINE=alpha ;;
+	    "LCA4 (21066/21068)")
+		UNAME_MACHINE=alpha ;;
+	    "EV5 (21164)")
+		UNAME_MACHINE=alphaev5 ;;
+	    "EV5.6 (21164A)")
+		UNAME_MACHINE=alphaev56 ;;
+	    "EV5.6 (21164PC)")
+		UNAME_MACHINE=alphapca56 ;;
+	    "EV5.7 (21164PC)")
+		UNAME_MACHINE=alphapca57 ;;
+	    "EV6 (21264)")
+		UNAME_MACHINE=alphaev6 ;;
+	    "EV6.7 (21264A)")
+		UNAME_MACHINE=alphaev67 ;;
+	    "EV6.8CB (21264C)")
+		UNAME_MACHINE=alphaev68 ;;
+	    "EV6.8AL (21264B)")
+		UNAME_MACHINE=alphaev68 ;;
+	    "EV6.8CX (21264D)")
+		UNAME_MACHINE=alphaev68 ;;
+	    "EV6.9A (21264/EV69A)")
+		UNAME_MACHINE=alphaev69 ;;
+	    "EV7 (21364)")
+		UNAME_MACHINE=alphaev7 ;;
+	    "EV7.9 (21364A)")
+		UNAME_MACHINE=alphaev79 ;;
+	esac
+	# A Pn.n version is a patched version.
+	# A Vn.n version is a released version.
+	# A Tn.n version is a released field test version.
+	# A Xn.n version is an unreleased experimental baselevel.
+	# 1.2 uses "1.2" for uname -r.
+	echo ${UNAME_MACHINE}-dec-osf`echo ${UNAME_RELEASE} | sed -e 's/^[PVTX]//' | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz`
+	# Reset EXIT trap before exiting to avoid spurious non-zero exit code.
+	exitcode=$?
+	trap '' 0
+	exit $exitcode ;;
+    Alpha\ *:Windows_NT*:*)
+	# How do we know it's Interix rather than the generic POSIX subsystem?
+	# Should we change UNAME_MACHINE based on the output of uname instead
+	# of the specific Alpha model?
+	echo alpha-pc-interix
+	exit ;;
+    21064:Windows_NT:50:3)
+	echo alpha-dec-winnt3.5
+	exit ;;
+    Amiga*:UNIX_System_V:4.0:*)
+	echo m68k-unknown-sysv4
+	exit ;;
+    *:[Aa]miga[Oo][Ss]:*:*)
+	echo ${UNAME_MACHINE}-unknown-amigaos
+	exit ;;
+    *:[Mm]orph[Oo][Ss]:*:*)
+	echo ${UNAME_MACHINE}-unknown-morphos
+	exit ;;
+    *:OS/390:*:*)
+	echo i370-ibm-openedition
+	exit ;;
+    *:z/VM:*:*)
+	echo s390-ibm-zvmoe
+	exit ;;
+    *:OS400:*:*)
+	echo powerpc-ibm-os400
+	exit ;;
+    arm:RISC*:1.[012]*:*|arm:riscix:1.[012]*:*)
+	echo arm-acorn-riscix${UNAME_RELEASE}
+	exit ;;
+    arm*:riscos:*:*|arm*:RISCOS:*:*)
+	echo arm-unknown-riscos
+	exit ;;
+    SR2?01:HI-UX/MPP:*:* | SR8000:HI-UX/MPP:*:*)
+	echo hppa1.1-hitachi-hiuxmpp
+	exit ;;
+    Pyramid*:OSx*:*:* | MIS*:OSx*:*:* | MIS*:SMP_DC-OSx*:*:*)
+	# akee@wpdis03.wpafb.af.mil (Earle F. Ake) contributed MIS and NILE.
+	if test "`(/bin/universe) 2>/dev/null`" = att ; then
+		echo pyramid-pyramid-sysv3
+	else
+		echo pyramid-pyramid-bsd
+	fi
+	exit ;;
+    NILE*:*:*:dcosx)
+	echo pyramid-pyramid-svr4
+	exit ;;
+    DRS?6000:unix:4.0:6*)
+	echo sparc-icl-nx6
+	exit ;;
+    DRS?6000:UNIX_SV:4.2*:7* | DRS?6000:isis:4.2*:7*)
+	case `/usr/bin/uname -p` in
+	    sparc) echo sparc-icl-nx7; exit ;;
+	esac ;;
+    s390x:SunOS:*:*)
+	echo ${UNAME_MACHINE}-ibm-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'`
+	exit ;;
+    sun4H:SunOS:5.*:*)
+	echo sparc-hal-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'`
+	exit ;;
+    sun4*:SunOS:5.*:* | tadpole*:SunOS:5.*:*)
+	echo sparc-sun-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'`
+	exit ;;
+    i86pc:AuroraUX:5.*:* | i86xen:AuroraUX:5.*:*)
+	echo i386-pc-auroraux${UNAME_RELEASE}
+	exit ;;
+    i86pc:SunOS:5.*:* | i86xen:SunOS:5.*:*)
+	eval $set_cc_for_build
+	SUN_ARCH=i386
+	# If there is a compiler, see if it is configured for 64-bit objects.
+	# Note that the Sun cc does not turn __LP64__ into 1 like gcc does.
+	# This test works for both compilers.
+	if [ "$CC_FOR_BUILD" != no_compiler_found ]; then
+	    if (echo '#ifdef __amd64'; echo IS_64BIT_ARCH; echo '#endif') | \
+		(CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \
+		grep IS_64BIT_ARCH >/dev/null
+	    then
+		SUN_ARCH=x86_64
+	    fi
+	fi
+	echo ${SUN_ARCH}-pc-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'`
+	exit ;;
+    sun4*:SunOS:6*:*)
+	# According to config.sub, this is the proper way to canonicalize
+	# SunOS6.  Hard to guess exactly what SunOS6 will be like, but
+	# it's likely to be more like Solaris than SunOS4.
+	echo sparc-sun-solaris3`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'`
+	exit ;;
+    sun4*:SunOS:*:*)
+	case "`/usr/bin/arch -k`" in
+	    Series*|S4*)
+		UNAME_RELEASE=`uname -v`
+		;;
+	esac
+	# Japanese Language versions have a version number like `4.1.3-JL'.
+	echo sparc-sun-sunos`echo ${UNAME_RELEASE}|sed -e 's/-/_/'`
+	exit ;;
+    sun3*:SunOS:*:*)
+	echo m68k-sun-sunos${UNAME_RELEASE}
+	exit ;;
+    sun*:*:4.2BSD:*)
+	UNAME_RELEASE=`(sed 1q /etc/motd | awk '{print substr($5,1,3)}') 2>/dev/null`
+	test "x${UNAME_RELEASE}" = x && UNAME_RELEASE=3
+	case "`/bin/arch`" in
+	    sun3)
+		echo m68k-sun-sunos${UNAME_RELEASE}
+		;;
+	    sun4)
+		echo sparc-sun-sunos${UNAME_RELEASE}
+		;;
+	esac
+	exit ;;
+    aushp:SunOS:*:*)
+	echo sparc-auspex-sunos${UNAME_RELEASE}
+	exit ;;
+    # The situation for MiNT is a little confusing.  The machine name
+    # can be virtually everything (everything which is not
+    # "atarist" or "atariste" at least should have a processor
+    # > m68000).  The system name ranges from "MiNT" over "FreeMiNT"
+    # to the lowercase version "mint" (or "freemint").  Finally
+    # the system name "TOS" denotes a system which is actually not
+    # MiNT.  But MiNT is downward compatible to TOS, so this should
+    # be no problem.
+    atarist[e]:*MiNT:*:* | atarist[e]:*mint:*:* | atarist[e]:*TOS:*:*)
+	echo m68k-atari-mint${UNAME_RELEASE}
+	exit ;;
+    atari*:*MiNT:*:* | atari*:*mint:*:* | atarist[e]:*TOS:*:*)
+	echo m68k-atari-mint${UNAME_RELEASE}
+	exit ;;
+    *falcon*:*MiNT:*:* | *falcon*:*mint:*:* | *falcon*:*TOS:*:*)
+	echo m68k-atari-mint${UNAME_RELEASE}
+	exit ;;
+    milan*:*MiNT:*:* | milan*:*mint:*:* | *milan*:*TOS:*:*)
+	echo m68k-milan-mint${UNAME_RELEASE}
+	exit ;;
+    hades*:*MiNT:*:* | hades*:*mint:*:* | *hades*:*TOS:*:*)
+	echo m68k-hades-mint${UNAME_RELEASE}
+	exit ;;
+    *:*MiNT:*:* | *:*mint:*:* | *:*TOS:*:*)
+	echo m68k-unknown-mint${UNAME_RELEASE}
+	exit ;;
+    m68k:machten:*:*)
+	echo m68k-apple-machten${UNAME_RELEASE}
+	exit ;;
+    powerpc:machten:*:*)
+	echo powerpc-apple-machten${UNAME_RELEASE}
+	exit ;;
+    RISC*:Mach:*:*)
+	echo mips-dec-mach_bsd4.3
+	exit ;;
+    RISC*:ULTRIX:*:*)
+	echo mips-dec-ultrix${UNAME_RELEASE}
+	exit ;;
+    VAX*:ULTRIX*:*:*)
+	echo vax-dec-ultrix${UNAME_RELEASE}
+	exit ;;
+    2020:CLIX:*:* | 2430:CLIX:*:*)
+	echo clipper-intergraph-clix${UNAME_RELEASE}
+	exit ;;
+    mips:*:*:UMIPS | mips:*:*:RISCos)
+	eval $set_cc_for_build
+	sed 's/^	//' << EOF >$dummy.c
+#ifdef __cplusplus
+#include <stdio.h>  /* for printf() prototype */
+	int main (int argc, char *argv[]) {
+#else
+	int main (argc, argv) int argc; char *argv[]; {
+#endif
+	#if defined (host_mips) && defined (MIPSEB)
+	#if defined (SYSTYPE_SYSV)
+	  printf ("mips-mips-riscos%ssysv\n", argv[1]); exit (0);
+	#endif
+	#if defined (SYSTYPE_SVR4)
+	  printf ("mips-mips-riscos%ssvr4\n", argv[1]); exit (0);
+	#endif
+	#if defined (SYSTYPE_BSD43) || defined(SYSTYPE_BSD)
+	  printf ("mips-mips-riscos%sbsd\n", argv[1]); exit (0);
+	#endif
+	#endif
+	  exit (-1);
+	}
+EOF
+	$CC_FOR_BUILD -o $dummy $dummy.c &&
+	  dummyarg=`echo "${UNAME_RELEASE}" | sed -n 's/\([0-9]*\).*/\1/p'` &&
+	  SYSTEM_NAME=`$dummy $dummyarg` &&
+	    { echo "$SYSTEM_NAME"; exit; }
+	echo mips-mips-riscos${UNAME_RELEASE}
+	exit ;;
+    Motorola:PowerMAX_OS:*:*)
+	echo powerpc-motorola-powermax
+	exit ;;
+    Motorola:*:4.3:PL8-*)
+	echo powerpc-harris-powermax
+	exit ;;
+    Night_Hawk:*:*:PowerMAX_OS | Synergy:PowerMAX_OS:*:*)
+	echo powerpc-harris-powermax
+	exit ;;
+    Night_Hawk:Power_UNIX:*:*)
+	echo powerpc-harris-powerunix
+	exit ;;
+    m88k:CX/UX:7*:*)
+	echo m88k-harris-cxux7
+	exit ;;
+    m88k:*:4*:R4*)
+	echo m88k-motorola-sysv4
+	exit ;;
+    m88k:*:3*:R3*)
+	echo m88k-motorola-sysv3
+	exit ;;
+    AViiON:dgux:*:*)
+	# DG/UX returns AViiON for all architectures
+	UNAME_PROCESSOR=`/usr/bin/uname -p`
+	if [ $UNAME_PROCESSOR = mc88100 ] || [ $UNAME_PROCESSOR = mc88110 ]
+	then
+	    if [ ${TARGET_BINARY_INTERFACE}x = m88kdguxelfx ] || \
+	       [ ${TARGET_BINARY_INTERFACE}x = x ]
+	    then
+		echo m88k-dg-dgux${UNAME_RELEASE}
+	    else
+		echo m88k-dg-dguxbcs${UNAME_RELEASE}
+	    fi
+	else
+	    echo i586-dg-dgux${UNAME_RELEASE}
+	fi
+	exit ;;
+    M88*:DolphinOS:*:*)	# DolphinOS (SVR3)
+	echo m88k-dolphin-sysv3
+	exit ;;
+    M88*:*:R3*:*)
+	# Delta 88k system running SVR3
+	echo m88k-motorola-sysv3
+	exit ;;
+    XD88*:*:*:*) # Tektronix XD88 system running UTekV (SVR3)
+	echo m88k-tektronix-sysv3
+	exit ;;
+    Tek43[0-9][0-9]:UTek:*:*) # Tektronix 4300 system running UTek (BSD)
+	echo m68k-tektronix-bsd
+	exit ;;
+    *:IRIX*:*:*)
+	echo mips-sgi-irix`echo ${UNAME_RELEASE}|sed -e 's/-/_/g'`
+	exit ;;
+    ????????:AIX?:[12].1:2)   # AIX 2.2.1 or AIX 2.1.1 is RT/PC AIX.
+	echo romp-ibm-aix     # uname -m gives an 8 hex-code CPU id
+	exit ;;               # Note that: echo "'`uname -s`'" gives 'AIX '
+    i*86:AIX:*:*)
+	echo i386-ibm-aix
+	exit ;;
+    ia64:AIX:*:*)
+	if [ -x /usr/bin/oslevel ] ; then
+		IBM_REV=`/usr/bin/oslevel`
+	else
+		IBM_REV=${UNAME_VERSION}.${UNAME_RELEASE}
+	fi
+	echo ${UNAME_MACHINE}-ibm-aix${IBM_REV}
+	exit ;;
+    *:AIX:2:3)
+	if grep bos325 /usr/include/stdio.h >/dev/null 2>&1; then
+		eval $set_cc_for_build
+		sed 's/^		//' << EOF >$dummy.c
+		#include <sys/systemcfg.h>
+
+		main()
+			{
+			if (!__power_pc())
+				exit(1);
+			puts("powerpc-ibm-aix3.2.5");
+			exit(0);
+			}
+EOF
+		if $CC_FOR_BUILD -o $dummy $dummy.c && SYSTEM_NAME=`$dummy`
+		then
+			echo "$SYSTEM_NAME"
+		else
+			echo rs6000-ibm-aix3.2.5
+		fi
+	elif grep bos324 /usr/include/stdio.h >/dev/null 2>&1; then
+		echo rs6000-ibm-aix3.2.4
+	else
+		echo rs6000-ibm-aix3.2
+	fi
+	exit ;;
+    *:AIX:*:[4567])
+	IBM_CPU_ID=`/usr/sbin/lsdev -C -c processor -S available | sed 1q | awk '{ print $1 }'`
+	if /usr/sbin/lsattr -El ${IBM_CPU_ID} | grep ' POWER' >/dev/null 2>&1; then
+		IBM_ARCH=rs6000
+	else
+		IBM_ARCH=powerpc
+	fi
+	if [ -x /usr/bin/lslpp ] ; then
+		IBM_REV=`/usr/bin/lslpp -Lqc bos.rte.libc |
+			   awk -F: '{ print $3 }' | sed s/[0-9]*$/0/`
+	else
+		IBM_REV=${UNAME_VERSION}.${UNAME_RELEASE}
+	fi
+	echo ${IBM_ARCH}-ibm-aix${IBM_REV}
+	exit ;;
+    *:AIX:*:*)
+	echo rs6000-ibm-aix
+	exit ;;
+    ibmrt:4.4BSD:*|romp-ibm:BSD:*)
+	echo romp-ibm-bsd4.4
+	exit ;;
+    ibmrt:*BSD:*|romp-ibm:BSD:*)            # covers RT/PC BSD and
+	echo romp-ibm-bsd${UNAME_RELEASE}   # 4.3 with uname added to
+	exit ;;                             # report: romp-ibm BSD 4.3
+    *:BOSX:*:*)
+	echo rs6000-bull-bosx
+	exit ;;
+    DPX/2?00:B.O.S.:*:*)
+	echo m68k-bull-sysv3
+	exit ;;
+    9000/[34]??:4.3bsd:1.*:*)
+	echo m68k-hp-bsd
+	exit ;;
+    hp300:4.4BSD:*:* | 9000/[34]??:4.3bsd:2.*:*)
+	echo m68k-hp-bsd4.4
+	exit ;;
+    9000/[34678]??:HP-UX:*:*)
+	HPUX_REV=`echo ${UNAME_RELEASE}|sed -e 's/[^.]*.[0B]*//'`
+	case "${UNAME_MACHINE}" in
+	    9000/31? )            HP_ARCH=m68000 ;;
+	    9000/[34]?? )         HP_ARCH=m68k ;;
+	    9000/[678][0-9][0-9])
+		if [ -x /usr/bin/getconf ]; then
+		    sc_cpu_version=`/usr/bin/getconf SC_CPU_VERSION 2>/dev/null`
+		    sc_kernel_bits=`/usr/bin/getconf SC_KERNEL_BITS 2>/dev/null`
+		    case "${sc_cpu_version}" in
+		      523) HP_ARCH=hppa1.0 ;; # CPU_PA_RISC1_0
+		      528) HP_ARCH=hppa1.1 ;; # CPU_PA_RISC1_1
+		      532)                      # CPU_PA_RISC2_0
+			case "${sc_kernel_bits}" in
+			  32) HP_ARCH=hppa2.0n ;;
+			  64) HP_ARCH=hppa2.0w ;;
+			  '') HP_ARCH=hppa2.0 ;;   # HP-UX 10.20
+			esac ;;
+		    esac
+		fi
+		if [ "${HP_ARCH}" = "" ]; then
+		    eval $set_cc_for_build
+		    sed 's/^		//' << EOF >$dummy.c
+
+		#define _HPUX_SOURCE
+		#include <stdlib.h>
+		#include <unistd.h>
+
+		int main ()
+		{
+		#if defined(_SC_KERNEL_BITS)
+		    long bits = sysconf(_SC_KERNEL_BITS);
+		#endif
+		    long cpu  = sysconf (_SC_CPU_VERSION);
+
+		    switch (cpu)
+			{
+			case CPU_PA_RISC1_0: puts ("hppa1.0"); break;
+			case CPU_PA_RISC1_1: puts ("hppa1.1"); break;
+			case CPU_PA_RISC2_0:
+		#if defined(_SC_KERNEL_BITS)
+			    switch (bits)
+				{
+				case 64: puts ("hppa2.0w"); break;
+				case 32: puts ("hppa2.0n"); break;
+				default: puts ("hppa2.0"); break;
+				} break;
+		#else  /* !defined(_SC_KERNEL_BITS) */
+			    puts ("hppa2.0"); break;
+		#endif
+			default: puts ("hppa1.0"); break;
+			}
+		    exit (0);
+		}
+EOF
+		    (CCOPTS="" $CC_FOR_BUILD -o $dummy $dummy.c 2>/dev/null) && HP_ARCH=`$dummy`
+		    test -z "$HP_ARCH" && HP_ARCH=hppa
+		fi ;;
+	esac
+	if [ ${HP_ARCH} = hppa2.0w ]
+	then
+	    eval $set_cc_for_build
+
+	    # hppa2.0w-hp-hpux* has a 64-bit kernel and a compiler generating
+	    # 32-bit code.  hppa64-hp-hpux* has the same kernel and a compiler
+	    # generating 64-bit code.  GNU and HP use different nomenclature:
+	    #
+	    # $ CC_FOR_BUILD=cc ./config.guess
+	    # => hppa2.0w-hp-hpux11.23
+	    # $ CC_FOR_BUILD="cc +DA2.0w" ./config.guess
+	    # => hppa64-hp-hpux11.23
+
+	    if echo __LP64__ | (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) |
+		grep -q __LP64__
+	    then
+		HP_ARCH=hppa2.0w
+	    else
+		HP_ARCH=hppa64
+	    fi
+	fi
+	echo ${HP_ARCH}-hp-hpux${HPUX_REV}
+	exit ;;
+    ia64:HP-UX:*:*)
+	HPUX_REV=`echo ${UNAME_RELEASE}|sed -e 's/[^.]*.[0B]*//'`
+	echo ia64-hp-hpux${HPUX_REV}
+	exit ;;
+    3050*:HI-UX:*:*)
+	eval $set_cc_for_build
+	sed 's/^	//' << EOF >$dummy.c
+	#include <unistd.h>
+	int
+	main ()
+	{
+	  long cpu = sysconf (_SC_CPU_VERSION);
+	  /* The order matters, because CPU_IS_HP_MC68K erroneously returns
+	     true for CPU_PA_RISC1_0.  CPU_IS_PA_RISC returns correct
+	     results, however.  */
+	  if (CPU_IS_PA_RISC (cpu))
+	    {
+	      switch (cpu)
+		{
+		  case CPU_PA_RISC1_0: puts ("hppa1.0-hitachi-hiuxwe2"); break;
+		  case CPU_PA_RISC1_1: puts ("hppa1.1-hitachi-hiuxwe2"); break;
+		  case CPU_PA_RISC2_0: puts ("hppa2.0-hitachi-hiuxwe2"); break;
+		  default: puts ("hppa-hitachi-hiuxwe2"); break;
+		}
+	    }
+	  else if (CPU_IS_HP_MC68K (cpu))
+	    puts ("m68k-hitachi-hiuxwe2");
+	  else puts ("unknown-hitachi-hiuxwe2");
+	  exit (0);
+	}
+EOF
+	$CC_FOR_BUILD -o $dummy $dummy.c && SYSTEM_NAME=`$dummy` &&
+		{ echo "$SYSTEM_NAME"; exit; }
+	echo unknown-hitachi-hiuxwe2
+	exit ;;
+    9000/7??:4.3bsd:*:* | 9000/8?[79]:4.3bsd:*:* )
+	echo hppa1.1-hp-bsd
+	exit ;;
+    9000/8??:4.3bsd:*:*)
+	echo hppa1.0-hp-bsd
+	exit ;;
+    *9??*:MPE/iX:*:* | *3000*:MPE/iX:*:*)
+	echo hppa1.0-hp-mpeix
+	exit ;;
+    hp7??:OSF1:*:* | hp8?[79]:OSF1:*:* )
+	echo hppa1.1-hp-osf
+	exit ;;
+    hp8??:OSF1:*:*)
+	echo hppa1.0-hp-osf
+	exit ;;
+    i*86:OSF1:*:*)
+	if [ -x /usr/sbin/sysversion ] ; then
+	    echo ${UNAME_MACHINE}-unknown-osf1mk
+	else
+	    echo ${UNAME_MACHINE}-unknown-osf1
+	fi
+	exit ;;
+    parisc*:Lites*:*:*)
+	echo hppa1.1-hp-lites
+	exit ;;
+    C1*:ConvexOS:*:* | convex:ConvexOS:C1*:*)
+	echo c1-convex-bsd
+	exit ;;
+    C2*:ConvexOS:*:* | convex:ConvexOS:C2*:*)
+	if getsysinfo -f scalar_acc
+	then echo c32-convex-bsd
+	else echo c2-convex-bsd
+	fi
+	exit ;;
+    C34*:ConvexOS:*:* | convex:ConvexOS:C34*:*)
+	echo c34-convex-bsd
+	exit ;;
+    C38*:ConvexOS:*:* | convex:ConvexOS:C38*:*)
+	echo c38-convex-bsd
+	exit ;;
+    C4*:ConvexOS:*:* | convex:ConvexOS:C4*:*)
+	echo c4-convex-bsd
+	exit ;;
+    CRAY*Y-MP:*:*:*)
+	echo ymp-cray-unicos${UNAME_RELEASE} | sed -e 's/\.[^.]*$/.X/'
+	exit ;;
+    CRAY*[A-Z]90:*:*:*)
+	echo ${UNAME_MACHINE}-cray-unicos${UNAME_RELEASE} \
+	| sed -e 's/CRAY.*\([A-Z]90\)/\1/' \
+	      -e y/ABCDEFGHIJKLMNOPQRSTUVWXYZ/abcdefghijklmnopqrstuvwxyz/ \
+	      -e 's/\.[^.]*$/.X/'
+	exit ;;
+    CRAY*TS:*:*:*)
+	echo t90-cray-unicos${UNAME_RELEASE} | sed -e 's/\.[^.]*$/.X/'
+	exit ;;
+    CRAY*T3E:*:*:*)
+	echo alphaev5-cray-unicosmk${UNAME_RELEASE} | sed -e 's/\.[^.]*$/.X/'
+	exit ;;
+    CRAY*SV1:*:*:*)
+	echo sv1-cray-unicos${UNAME_RELEASE} | sed -e 's/\.[^.]*$/.X/'
+	exit ;;
+    *:UNICOS/mp:*:*)
+	echo craynv-cray-unicosmp${UNAME_RELEASE} | sed -e 's/\.[^.]*$/.X/'
+	exit ;;
+    F30[01]:UNIX_System_V:*:* | F700:UNIX_System_V:*:*)
+	FUJITSU_PROC=`uname -m | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz`
+	FUJITSU_SYS=`uname -p | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/\///'`
+	FUJITSU_REL=`echo ${UNAME_RELEASE} | sed -e 's/ /_/'`
+	echo "${FUJITSU_PROC}-fujitsu-${FUJITSU_SYS}${FUJITSU_REL}"
+	exit ;;
+    5000:UNIX_System_V:4.*:*)
+	FUJITSU_SYS=`uname -p | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/\///'`
+	FUJITSU_REL=`echo ${UNAME_RELEASE} | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/ /_/'`
+	echo "sparc-fujitsu-${FUJITSU_SYS}${FUJITSU_REL}"
+	exit ;;
+    i*86:BSD/386:*:* | i*86:BSD/OS:*:* | *:Ascend\ Embedded/OS:*:*)
+	echo ${UNAME_MACHINE}-pc-bsdi${UNAME_RELEASE}
+	exit ;;
+    sparc*:BSD/OS:*:*)
+	echo sparc-unknown-bsdi${UNAME_RELEASE}
+	exit ;;
+    *:BSD/OS:*:*)
+	echo ${UNAME_MACHINE}-unknown-bsdi${UNAME_RELEASE}
+	exit ;;
+    *:FreeBSD:*:*)
+	UNAME_PROCESSOR=`/usr/bin/uname -p`
+	case ${UNAME_PROCESSOR} in
+	    amd64)
+		echo x86_64-unknown-freebsd`echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'` ;;
+	    *)
+		echo ${UNAME_PROCESSOR}-unknown-freebsd`echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'` ;;
+	esac
+	exit ;;
+    i*:CYGWIN*:*)
+	echo ${UNAME_MACHINE}-pc-cygwin
+	exit ;;
+    *:MINGW64*:*)
+	echo ${UNAME_MACHINE}-pc-mingw64
+	exit ;;
+    *:MINGW*:*)
+	echo ${UNAME_MACHINE}-pc-mingw32
+	exit ;;
+    *:MSYS*:*)
+	echo ${UNAME_MACHINE}-pc-msys
+	exit ;;
+    i*:windows32*:*)
+	# uname -m includes "-pc" on this system.
+	echo ${UNAME_MACHINE}-mingw32
+	exit ;;
+    i*:PW*:*)
+	echo ${UNAME_MACHINE}-pc-pw32
+	exit ;;
+    *:Interix*:*)
+	case ${UNAME_MACHINE} in
+	    x86)
+		echo i586-pc-interix${UNAME_RELEASE}
+		exit ;;
+	    authenticamd | genuineintel | EM64T)
+		echo x86_64-unknown-interix${UNAME_RELEASE}
+		exit ;;
+	    IA64)
+		echo ia64-unknown-interix${UNAME_RELEASE}
+		exit ;;
+	esac ;;
+    [345]86:Windows_95:* | [345]86:Windows_98:* | [345]86:Windows_NT:*)
+	echo i${UNAME_MACHINE}-pc-mks
+	exit ;;
+    8664:Windows_NT:*)
+	echo x86_64-pc-mks
+	exit ;;
+    i*:Windows_NT*:* | Pentium*:Windows_NT*:*)
+	# How do we know it's Interix rather than the generic POSIX subsystem?
+	# It also conflicts with pre-2.0 versions of AT&T UWIN. Should we
+	# UNAME_MACHINE based on the output of uname instead of i386?
+	echo i586-pc-interix
+	exit ;;
+    i*:UWIN*:*)
+	echo ${UNAME_MACHINE}-pc-uwin
+	exit ;;
+    amd64:CYGWIN*:*:* | x86_64:CYGWIN*:*:*)
+	echo x86_64-unknown-cygwin
+	exit ;;
+    p*:CYGWIN*:*)
+	echo powerpcle-unknown-cygwin
+	exit ;;
+    prep*:SunOS:5.*:*)
+	echo powerpcle-unknown-solaris2`echo ${UNAME_RELEASE}|sed -e 's/[^.]*//'`
+	exit ;;
+    *:GNU:*:*)
+	# the GNU system
+	echo `echo ${UNAME_MACHINE}|sed -e 's,[-/].*$,,'`-unknown-${LIBC}`echo ${UNAME_RELEASE}|sed -e 's,/.*$,,'`
+	exit ;;
+    *:GNU/*:*:*)
+	# other systems with GNU libc and userland
+	echo ${UNAME_MACHINE}-unknown-`echo ${UNAME_SYSTEM} | sed 's,^[^/]*/,,' | tr "[:upper:]" "[:lower:]"``echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'`-${LIBC}
+	exit ;;
+    i*86:Minix:*:*)
+	echo ${UNAME_MACHINE}-pc-minix
+	exit ;;
+    aarch64:Linux:*:*)
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    aarch64_be:Linux:*:*)
+	UNAME_MACHINE=aarch64_be
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    alpha:Linux:*:*)
+	case `sed -n '/^cpu model/s/^.*: \(.*\)/\1/p' < /proc/cpuinfo` in
+	  EV5)   UNAME_MACHINE=alphaev5 ;;
+	  EV56)  UNAME_MACHINE=alphaev56 ;;
+	  PCA56) UNAME_MACHINE=alphapca56 ;;
+	  PCA57) UNAME_MACHINE=alphapca56 ;;
+	  EV6)   UNAME_MACHINE=alphaev6 ;;
+	  EV67)  UNAME_MACHINE=alphaev67 ;;
+	  EV68*) UNAME_MACHINE=alphaev68 ;;
+	esac
+	objdump --private-headers /bin/sh | grep -q ld.so.1
+	if test "$?" = 0 ; then LIBC=gnulibc1 ; fi
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    arc:Linux:*:* | arceb:Linux:*:*)
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    arm*:Linux:*:*)
+	eval $set_cc_for_build
+	if echo __ARM_EABI__ | $CC_FOR_BUILD -E - 2>/dev/null \
+	    | grep -q __ARM_EABI__
+	then
+	    echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	else
+	    if echo __ARM_PCS_VFP | $CC_FOR_BUILD -E - 2>/dev/null \
+		| grep -q __ARM_PCS_VFP
+	    then
+		echo ${UNAME_MACHINE}-unknown-linux-${LIBC}eabi
+	    else
+		echo ${UNAME_MACHINE}-unknown-linux-${LIBC}eabihf
+	    fi
+	fi
+	exit ;;
+    avr32*:Linux:*:*)
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    cris:Linux:*:*)
+	echo ${UNAME_MACHINE}-axis-linux-${LIBC}
+	exit ;;
+    crisv32:Linux:*:*)
+	echo ${UNAME_MACHINE}-axis-linux-${LIBC}
+	exit ;;
+    e2k:Linux:*:*)
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    frv:Linux:*:*)
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    hexagon:Linux:*:*)
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    i*86:Linux:*:*)
+	echo ${UNAME_MACHINE}-pc-linux-${LIBC}
+	exit ;;
+    ia64:Linux:*:*)
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    k1om:Linux:*:*)
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    m32r*:Linux:*:*)
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    m68*:Linux:*:*)
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    mips:Linux:*:* | mips64:Linux:*:*)
+	eval $set_cc_for_build
+	sed 's/^	//' << EOF >$dummy.c
+	#undef CPU
+	#undef ${UNAME_MACHINE}
+	#undef ${UNAME_MACHINE}el
+	#if defined(__MIPSEL__) || defined(__MIPSEL) || defined(_MIPSEL) || defined(MIPSEL)
+	CPU=${UNAME_MACHINE}el
+	#else
+	#if defined(__MIPSEB__) || defined(__MIPSEB) || defined(_MIPSEB) || defined(MIPSEB)
+	CPU=${UNAME_MACHINE}
+	#else
+	CPU=
+	#endif
+	#endif
+EOF
+	eval `$CC_FOR_BUILD -E $dummy.c 2>/dev/null | grep '^CPU'`
+	test x"${CPU}" != x && { echo "${CPU}-unknown-linux-${LIBC}"; exit; }
+	;;
+    openrisc*:Linux:*:*)
+	echo or1k-unknown-linux-${LIBC}
+	exit ;;
+    or32:Linux:*:* | or1k*:Linux:*:*)
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    padre:Linux:*:*)
+	echo sparc-unknown-linux-${LIBC}
+	exit ;;
+    parisc64:Linux:*:* | hppa64:Linux:*:*)
+	echo hppa64-unknown-linux-${LIBC}
+	exit ;;
+    parisc:Linux:*:* | hppa:Linux:*:*)
+	# Look for CPU level
+	case `grep '^cpu[^a-z]*:' /proc/cpuinfo 2>/dev/null | cut -d' ' -f2` in
+	  PA7*) echo hppa1.1-unknown-linux-${LIBC} ;;
+	  PA8*) echo hppa2.0-unknown-linux-${LIBC} ;;
+	  *)    echo hppa-unknown-linux-${LIBC} ;;
+	esac
+	exit ;;
+    ppc64:Linux:*:*)
+	echo powerpc64-unknown-linux-${LIBC}
+	exit ;;
+    ppc:Linux:*:*)
+	echo powerpc-unknown-linux-${LIBC}
+	exit ;;
+    ppc64le:Linux:*:*)
+	echo powerpc64le-unknown-linux-${LIBC}
+	exit ;;
+    ppcle:Linux:*:*)
+	echo powerpcle-unknown-linux-${LIBC}
+	exit ;;
+    s390:Linux:*:* | s390x:Linux:*:*)
+	echo ${UNAME_MACHINE}-ibm-linux-${LIBC}
+	exit ;;
+    sh64*:Linux:*:*)
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    sh*:Linux:*:*)
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    sparc:Linux:*:* | sparc64:Linux:*:*)
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    tile*:Linux:*:*)
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    vax:Linux:*:*)
+	echo ${UNAME_MACHINE}-dec-linux-${LIBC}
+	exit ;;
+    x86_64:Linux:*:*)
+	echo ${UNAME_MACHINE}-pc-linux-${LIBC}
+	exit ;;
+    xtensa*:Linux:*:*)
+	echo ${UNAME_MACHINE}-unknown-linux-${LIBC}
+	exit ;;
+    i*86:DYNIX/ptx:4*:*)
+	# ptx 4.0 does uname -s correctly, with DYNIX/ptx in there.
+	# earlier versions are messed up and put the nodename in both
+	# sysname and nodename.
+	echo i386-sequent-sysv4
+	exit ;;
+    i*86:UNIX_SV:4.2MP:2.*)
+	# Unixware is an offshoot of SVR4, but it has its own version
+	# number series starting with 2...
+	# I am not positive that other SVR4 systems won't match this,
+	# I just have to hope.  -- rms.
+	# Use sysv4.2uw... so that sysv4* matches it.
+	echo ${UNAME_MACHINE}-pc-sysv4.2uw${UNAME_VERSION}
+	exit ;;
+    i*86:OS/2:*:*)
+	# If we were able to find `uname', then EMX Unix compatibility
+	# is probably installed.
+	echo ${UNAME_MACHINE}-pc-os2-emx
+	exit ;;
+    i*86:XTS-300:*:STOP)
+	echo ${UNAME_MACHINE}-unknown-stop
+	exit ;;
+    i*86:atheos:*:*)
+	echo ${UNAME_MACHINE}-unknown-atheos
+	exit ;;
+    i*86:syllable:*:*)
+	echo ${UNAME_MACHINE}-pc-syllable
+	exit ;;
+    i*86:LynxOS:2.*:* | i*86:LynxOS:3.[01]*:* | i*86:LynxOS:4.[02]*:*)
+	echo i386-unknown-lynxos${UNAME_RELEASE}
+	exit ;;
+    i*86:*DOS:*:*)
+	echo ${UNAME_MACHINE}-pc-msdosdjgpp
+	exit ;;
+    i*86:*:4.*:* | i*86:SYSTEM_V:4.*:*)
+	UNAME_REL=`echo ${UNAME_RELEASE} | sed 's/\/MP$//'`
+	if grep Novell /usr/include/link.h >/dev/null 2>/dev/null; then
+		echo ${UNAME_MACHINE}-univel-sysv${UNAME_REL}
+	else
+		echo ${UNAME_MACHINE}-pc-sysv${UNAME_REL}
+	fi
+	exit ;;
+    i*86:*:5:[678]*)
+	# UnixWare 7.x, OpenUNIX and OpenServer 6.
+	case `/bin/uname -X | grep "^Machine"` in
+	    *486*)	     UNAME_MACHINE=i486 ;;
+	    *Pentium)	     UNAME_MACHINE=i586 ;;
+	    *Pent*|*Celeron) UNAME_MACHINE=i686 ;;
+	esac
+	echo ${UNAME_MACHINE}-unknown-sysv${UNAME_RELEASE}${UNAME_SYSTEM}${UNAME_VERSION}
+	exit ;;
+    i*86:*:3.2:*)
+	if test -f /usr/options/cb.name; then
+		UNAME_REL=`sed -n 's/.*Version //p' </usr/options/cb.name`
+		echo ${UNAME_MACHINE}-pc-isc$UNAME_REL
+	elif /bin/uname -X 2>/dev/null >/dev/null ; then
+		UNAME_REL=`(/bin/uname -X|grep Release|sed -e 's/.*= //')`
+		(/bin/uname -X|grep i80486 >/dev/null) && UNAME_MACHINE=i486
+		(/bin/uname -X|grep '^Machine.*Pentium' >/dev/null) \
+			&& UNAME_MACHINE=i586
+		(/bin/uname -X|grep '^Machine.*Pent *II' >/dev/null) \
+			&& UNAME_MACHINE=i686
+		(/bin/uname -X|grep '^Machine.*Pentium Pro' >/dev/null) \
+			&& UNAME_MACHINE=i686
+		echo ${UNAME_MACHINE}-pc-sco$UNAME_REL
+	else
+		echo ${UNAME_MACHINE}-pc-sysv32
+	fi
+	exit ;;
+    pc:*:*:*)
+	# Left here for compatibility:
+	# uname -m prints for DJGPP always 'pc', but it prints nothing about
+	# the processor, so we play safe by assuming i586.
+	# Note: whatever this is, it MUST be the same as what config.sub
+	# prints for the "djgpp" host, or else GDB configure will decide that
+	# this is a cross-build.
+	echo i586-pc-msdosdjgpp
+	exit ;;
+    Intel:Mach:3*:*)
+	echo i386-pc-mach3
+	exit ;;
+    paragon:*:*:*)
+	echo i860-intel-osf1
+	exit ;;
+    i860:*:4.*:*) # i860-SVR4
+	if grep Stardent /usr/include/sys/uadmin.h >/dev/null 2>&1 ; then
+	  echo i860-stardent-sysv${UNAME_RELEASE} # Stardent Vistra i860-SVR4
+	else # Add other i860-SVR4 vendors below as they are discovered.
+	  echo i860-unknown-sysv${UNAME_RELEASE}  # Unknown i860-SVR4
+	fi
+	exit ;;
+    mini*:CTIX:SYS*5:*)
+	# "miniframe"
+	echo m68010-convergent-sysv
+	exit ;;
+    mc68k:UNIX:SYSTEM5:3.51m)
+	echo m68k-convergent-sysv
+	exit ;;
+    M680?0:D-NIX:5.3:*)
+	echo m68k-diab-dnix
+	exit ;;
+    M68*:*:R3V[5678]*:*)
+	test -r /sysV68 && { echo 'm68k-motorola-sysv'; exit; } ;;
+    3[345]??:*:4.0:3.0 | 3[34]??A:*:4.0:3.0 | 3[34]??,*:*:4.0:3.0 | 3[34]??/*:*:4.0:3.0 | 4400:*:4.0:3.0 | 4850:*:4.0:3.0 | SKA40:*:4.0:3.0 | SDS2:*:4.0:3.0 | SHG2:*:4.0:3.0 | S7501*:*:4.0:3.0)
+	OS_REL=''
+	test -r /etc/.relid \
+	&& OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid`
+	/bin/uname -p 2>/dev/null | grep 86 >/dev/null \
+	  && { echo i486-ncr-sysv4.3${OS_REL}; exit; }
+	/bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \
+	  && { echo i586-ncr-sysv4.3${OS_REL}; exit; } ;;
+    3[34]??:*:4.0:* | 3[34]??,*:*:4.0:*)
+	/bin/uname -p 2>/dev/null | grep 86 >/dev/null \
+	  && { echo i486-ncr-sysv4; exit; } ;;
+    NCR*:*:4.2:* | MPRAS*:*:4.2:*)
+	OS_REL='.3'
+	test -r /etc/.relid \
+	    && OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid`
+	/bin/uname -p 2>/dev/null | grep 86 >/dev/null \
+	    && { echo i486-ncr-sysv4.3${OS_REL}; exit; }
+	/bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \
+	    && { echo i586-ncr-sysv4.3${OS_REL}; exit; }
+	/bin/uname -p 2>/dev/null | /bin/grep pteron >/dev/null \
+	    && { echo i586-ncr-sysv4.3${OS_REL}; exit; } ;;
+    m68*:LynxOS:2.*:* | m68*:LynxOS:3.0*:*)
+	echo m68k-unknown-lynxos${UNAME_RELEASE}
+	exit ;;
+    mc68030:UNIX_System_V:4.*:*)
+	echo m68k-atari-sysv4
+	exit ;;
+    TSUNAMI:LynxOS:2.*:*)
+	echo sparc-unknown-lynxos${UNAME_RELEASE}
+	exit ;;
+    rs6000:LynxOS:2.*:*)
+	echo rs6000-unknown-lynxos${UNAME_RELEASE}
+	exit ;;
+    PowerPC:LynxOS:2.*:* | PowerPC:LynxOS:3.[01]*:* | PowerPC:LynxOS:4.[02]*:*)
+	echo powerpc-unknown-lynxos${UNAME_RELEASE}
+	exit ;;
+    SM[BE]S:UNIX_SV:*:*)
+	echo mips-dde-sysv${UNAME_RELEASE}
+	exit ;;
+    RM*:ReliantUNIX-*:*:*)
+	echo mips-sni-sysv4
+	exit ;;
+    RM*:SINIX-*:*:*)
+	echo mips-sni-sysv4
+	exit ;;
+    *:SINIX-*:*:*)
+	if uname -p 2>/dev/null >/dev/null ; then
+		UNAME_MACHINE=`(uname -p) 2>/dev/null`
+		echo ${UNAME_MACHINE}-sni-sysv4
+	else
+		echo ns32k-sni-sysv
+	fi
+	exit ;;
+    PENTIUM:*:4.0*:*)	# Unisys `ClearPath HMP IX 4000' SVR4/MP effort
+			# says <Richard.M.Bartel@ccMail.Census.GOV>
+	echo i586-unisys-sysv4
+	exit ;;
+    *:UNIX_System_V:4*:FTX*)
+	# From Gerald Hewes <hewes@openmarket.com>.
+	# How about differentiating between stratus architectures? -djm
+	echo hppa1.1-stratus-sysv4
+	exit ;;
+    *:*:*:FTX*)
+	# From seanf@swdc.stratus.com.
+	echo i860-stratus-sysv4
+	exit ;;
+    i*86:VOS:*:*)
+	# From Paul.Green@stratus.com.
+	echo ${UNAME_MACHINE}-stratus-vos
+	exit ;;
+    *:VOS:*:*)
+	# From Paul.Green@stratus.com.
+	echo hppa1.1-stratus-vos
+	exit ;;
+    mc68*:A/UX:*:*)
+	echo m68k-apple-aux${UNAME_RELEASE}
+	exit ;;
+    news*:NEWS-OS:6*:*)
+	echo mips-sony-newsos6
+	exit ;;
+    R[34]000:*System_V*:*:* | R4000:UNIX_SYSV:*:* | R*000:UNIX_SV:*:*)
+	if [ -d /usr/nec ]; then
+		echo mips-nec-sysv${UNAME_RELEASE}
+	else
+		echo mips-unknown-sysv${UNAME_RELEASE}
+	fi
+	exit ;;
+    BeBox:BeOS:*:*)	# BeOS running on hardware made by Be, PPC only.
+	echo powerpc-be-beos
+	exit ;;
+    BeMac:BeOS:*:*)	# BeOS running on Mac or Mac clone, PPC only.
+	echo powerpc-apple-beos
+	exit ;;
+    BePC:BeOS:*:*)	# BeOS running on Intel PC compatible.
+	echo i586-pc-beos
+	exit ;;
+    BePC:Haiku:*:*)	# Haiku running on Intel PC compatible.
+	echo i586-pc-haiku
+	exit ;;
+    x86_64:Haiku:*:*)
+	echo x86_64-unknown-haiku
+	exit ;;
+    SX-4:SUPER-UX:*:*)
+	echo sx4-nec-superux${UNAME_RELEASE}
+	exit ;;
+    SX-5:SUPER-UX:*:*)
+	echo sx5-nec-superux${UNAME_RELEASE}
+	exit ;;
+    SX-6:SUPER-UX:*:*)
+	echo sx6-nec-superux${UNAME_RELEASE}
+	exit ;;
+    SX-7:SUPER-UX:*:*)
+	echo sx7-nec-superux${UNAME_RELEASE}
+	exit ;;
+    SX-8:SUPER-UX:*:*)
+	echo sx8-nec-superux${UNAME_RELEASE}
+	exit ;;
+    SX-8R:SUPER-UX:*:*)
+	echo sx8r-nec-superux${UNAME_RELEASE}
+	exit ;;
+    SX-ACE:SUPER-UX:*:*)
+	echo sxace-nec-superux${UNAME_RELEASE}
+	exit ;;
+    Power*:Rhapsody:*:*)
+	echo powerpc-apple-rhapsody${UNAME_RELEASE}
+	exit ;;
+    *:Rhapsody:*:*)
+	echo ${UNAME_MACHINE}-apple-rhapsody${UNAME_RELEASE}
+	exit ;;
+    *:Darwin:*:*)
+	UNAME_PROCESSOR=`uname -p` || UNAME_PROCESSOR=unknown
+	eval $set_cc_for_build
+	if test "$UNAME_PROCESSOR" = unknown ; then
+	    UNAME_PROCESSOR=powerpc
+	fi
+	if test `echo "$UNAME_RELEASE" | sed -e 's/\..*//'` -le 10 ; then
+	    if [ "$CC_FOR_BUILD" != no_compiler_found ]; then
+		if (echo '#ifdef __LP64__'; echo IS_64BIT_ARCH; echo '#endif') | \
+		    (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \
+		    grep IS_64BIT_ARCH >/dev/null
+		then
+		    case $UNAME_PROCESSOR in
+			i386) UNAME_PROCESSOR=x86_64 ;;
+			powerpc) UNAME_PROCESSOR=powerpc64 ;;
+		    esac
+		fi
+	    fi
+	elif test "$UNAME_PROCESSOR" = i386 ; then
+	    # Avoid executing cc on OS X 10.9, as it ships with a stub
+	    # that puts up a graphical alert prompting to install
+	    # developer tools.  Any system running Mac OS X 10.7 or
+	    # later (Darwin 11 and later) is required to have a 64-bit
+	    # processor. This is not true of the ARM version of Darwin
+	    # that Apple uses in portable devices.
+	    UNAME_PROCESSOR=x86_64
+	fi
+	echo ${UNAME_PROCESSOR}-apple-darwin${UNAME_RELEASE}
+	exit ;;
+    *:procnto*:*:* | *:QNX:[0123456789]*:*)
+	UNAME_PROCESSOR=`uname -p`
+	if test "$UNAME_PROCESSOR" = x86; then
+		UNAME_PROCESSOR=i386
+		UNAME_MACHINE=pc
+	fi
+	echo ${UNAME_PROCESSOR}-${UNAME_MACHINE}-nto-qnx${UNAME_RELEASE}
+	exit ;;
+    *:QNX:*:4*)
+	echo i386-pc-qnx
+	exit ;;
+    NEO-?:NONSTOP_KERNEL:*:*)
+	echo neo-tandem-nsk${UNAME_RELEASE}
+	exit ;;
+    NSE-*:NONSTOP_KERNEL:*:*)
+	echo nse-tandem-nsk${UNAME_RELEASE}
+	exit ;;
+    NSR-?:NONSTOP_KERNEL:*:*)
+	echo nsr-tandem-nsk${UNAME_RELEASE}
+	exit ;;
+    *:NonStop-UX:*:*)
+	echo mips-compaq-nonstopux
+	exit ;;
+    BS2000:POSIX*:*:*)
+	echo bs2000-siemens-sysv
+	exit ;;
+    DS/*:UNIX_System_V:*:*)
+	echo ${UNAME_MACHINE}-${UNAME_SYSTEM}-${UNAME_RELEASE}
+	exit ;;
+    *:Plan9:*:*)
+	# "uname -m" is not consistent, so use $cputype instead. 386
+	# is converted to i386 for consistency with other x86
+	# operating systems.
+	if test "$cputype" = 386; then
+	    UNAME_MACHINE=i386
+	else
+	    UNAME_MACHINE="$cputype"
+	fi
+	echo ${UNAME_MACHINE}-unknown-plan9
+	exit ;;
+    *:TOPS-10:*:*)
+	echo pdp10-unknown-tops10
+	exit ;;
+    *:TENEX:*:*)
+	echo pdp10-unknown-tenex
+	exit ;;
+    KS10:TOPS-20:*:* | KL10:TOPS-20:*:* | TYPE4:TOPS-20:*:*)
+	echo pdp10-dec-tops20
+	exit ;;
+    XKL-1:TOPS-20:*:* | TYPE5:TOPS-20:*:*)
+	echo pdp10-xkl-tops20
+	exit ;;
+    *:TOPS-20:*:*)
+	echo pdp10-unknown-tops20
+	exit ;;
+    *:ITS:*:*)
+	echo pdp10-unknown-its
+	exit ;;
+    SEI:*:*:SEIUX)
+	echo mips-sei-seiux${UNAME_RELEASE}
+	exit ;;
+    *:DragonFly:*:*)
+	echo ${UNAME_MACHINE}-unknown-dragonfly`echo ${UNAME_RELEASE}|sed -e 's/[-(].*//'`
+	exit ;;
+    *:*VMS:*:*)
+	UNAME_MACHINE=`(uname -p) 2>/dev/null`
+	case "${UNAME_MACHINE}" in
+	    A*) echo alpha-dec-vms ; exit ;;
+	    I*) echo ia64-dec-vms ; exit ;;
+	    V*) echo vax-dec-vms ; exit ;;
+	esac ;;
+    *:XENIX:*:SysV)
+	echo i386-pc-xenix
+	exit ;;
+    i*86:skyos:*:*)
+	echo ${UNAME_MACHINE}-pc-skyos`echo ${UNAME_RELEASE} | sed -e 's/ .*$//'`
+	exit ;;
+    i*86:rdos:*:*)
+	echo ${UNAME_MACHINE}-pc-rdos
+	exit ;;
+    i*86:AROS:*:*)
+	echo ${UNAME_MACHINE}-pc-aros
+	exit ;;
+    x86_64:VMkernel:*:*)
+	echo ${UNAME_MACHINE}-unknown-esx
+	exit ;;
+    amd64:Isilon\ OneFS:*:*)
+	echo x86_64-unknown-onefs
+	exit ;;
+esac
+
+cat >&2 <<EOF
+$0: unable to guess system type
+
+This script (version $timestamp), has failed to recognize the
+operating system you are using. If your script is old, overwrite
+config.guess and config.sub with the latest versions from:
+
+  http://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.guess
+and
+  http://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.sub
+
+If $0 has already been updated, send the following data and any
+information you think might be pertinent to config-patches@gnu.org to
+provide the necessary information to handle your system.
+
+config.guess timestamp = $timestamp
+
+uname -m = `(uname -m) 2>/dev/null || echo unknown`
+uname -r = `(uname -r) 2>/dev/null || echo unknown`
+uname -s = `(uname -s) 2>/dev/null || echo unknown`
+uname -v = `(uname -v) 2>/dev/null || echo unknown`
+
+/usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null`
+/bin/uname -X     = `(/bin/uname -X) 2>/dev/null`
+
+hostinfo               = `(hostinfo) 2>/dev/null`
+/bin/universe          = `(/bin/universe) 2>/dev/null`
+/usr/bin/arch -k       = `(/usr/bin/arch -k) 2>/dev/null`
+/bin/arch              = `(/bin/arch) 2>/dev/null`
+/usr/bin/oslevel       = `(/usr/bin/oslevel) 2>/dev/null`
+/usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null`
+
+UNAME_MACHINE = ${UNAME_MACHINE}
+UNAME_RELEASE = ${UNAME_RELEASE}
+UNAME_SYSTEM  = ${UNAME_SYSTEM}
+UNAME_VERSION = ${UNAME_VERSION}
+EOF
+
+exit 1
+
+# Local variables:
+# eval: (add-hook 'write-file-hooks 'time-stamp)
+# time-stamp-start: "timestamp='"
+# time-stamp-format: "%:y-%02m-%02d"
+# time-stamp-end: "'"
+# End:
diff --git a/trunk/3rdparty/libsrtp-2-fit/config.h_win32vc7 b/trunk/3rdparty/libsrtp-2-fit/config.h_win32vc7
new file mode 100644
index 000000000..3b2a78c7b
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/config.h_win32vc7
@@ -0,0 +1,162 @@
+/* Hacked config.h for Windows XP 32-bit & VC7  */
+
+#ifdef (_MSC_VER >= 1400)
+# define HAVE_RAND_S	1
+#endif
+
+/* Define if building for a CISC machine (e.g. Intel). */
+#define CPU_CISC 1
+
+/* Define if building for a RISC machine (assume slow byte access). */
+#undef CPU_RISC
+
+/* Path to random device */
+#undef DEV_URANDOM
+
+/* Define to enabled debug logging for all mudules. */
+#undef ENABLE_DEBUG_LOGGING
+
+/* Logging statments will be writen to this file. */
+#undef ERR_REPORTING_FILE
+
+/* Define to redirect logging to stdout. */
+#undef ERR_REPORTING_STDOUT
+
+/* Define to 1 if you have the <arpa/inet.h> header file. */
+#undef HAVE_ARPA_INET_H
+
+/* Define to 1 if you have the <byteswap.h> header file. */
+#undef HAVE_BYTESWAP_H
+
+/* Define to 1 if you have the `inet_aton' function. */
+#define HAVE_INET_ATON 1
+
+/* Define to 1 if the system has the type `int16_t'. */
+#undef HAVE_INT16_T
+
+/* Define to 1 if the system has the type `int32_t'. */
+#undef HAVE_INT32_T
+
+/* Define to 1 if the system has the type `int8_t'. */
+#undef HAVE_INT8_T
+
+/* Define to 1 if you have the <inttypes.h> header file. */
+#undef HAVE_INTTYPES_H
+
+/* Define to 1 if you have the `socket' library (-lsocket). */
+#undef HAVE_LIBSOCKET
+
+/* Define to 1 if you have the <machine/types.h> header file. */
+#undef HAVE_MACHINE_TYPES_H
+
+/* Define to 1 if you have the <memory.h> header file. */
+#define HAVE_MEMORY_H 1
+
+/* Define to 1 if you have the <netinet/in.h> header file. */
+#undef HAVE_NETINET_IN_H
+
+/* Define to 1 if you have the `socket' function. */
+#define HAVE_SOCKET 1
+
+/* Define to 1 if you have the <stdint.h> header file. */
+#undef HAVE_STDINT_H
+
+/* Define to 1 if you have the <stdlib.h> header file. */
+#define HAVE_STDLIB_H 1
+
+/* Define to 1 if you have the <strings.h> header file. */
+#define HAVE_STRINGS_H 1
+
+/* Define to 1 if you have the <string.h> header file. */
+#define HAVE_STRING_H 1
+
+/* Define to 1 if you have the <sys/int_types.h> header file. */
+#undef HAVE_SYS_INT_TYPES_H
+
+/* Define to 1 if you have the <sys/socket.h> header file. */
+#undef HAVE_SYS_SOCKET_H
+
+/* Define to 1 if you have the <sys/stat.h> header file. */
+#undef HAVE_SYS_STAT_H
+
+/* Define to 1 if you have the <sys/types.h> header file. */
+#undef HAVE_SYS_TYPES_H
+
+/* Define to 1 if you have the <sys/uio.h> header file. */
+#undef HAVE_SYS_UIO_H
+
+/* Define to 1 if the system has the type `uint16_t'. */
+#undef HAVE_UINT16_T
+
+/* Define to 1 if the system has the type `uint32_t'. */
+#undef HAVE_UINT32_T 
+
+/* Define to 1 if the system has the type `uint64_t'. */
+#undef HAVE_UINT64_T
+
+/* Define to 1 if the system has the type `uint8_t'. */
+#undef HAVE_UINT8_T
+
+/* Define to 1 if you have the <unistd.h> header file. */
+#define HAVE_UNISTD_H 1
+
+/* Define to 1 if you have the `usleep' function. */
+#define HAVE_USLEEP 1
+
+/* Define to 1 if you have the <windows.h> header file. */
+#define HAVE_WINDOWS_H 1
+
+/* Define to 1 if you have the <winsock2.h> header file. */
+#define HAVE_WINSOCK2_H 1
+
+/* Define to use X86 inlined assembly code */
+#undef HAVE_X86
+
+/* Define to the address where bug reports for this package should be sent. */
+#undef PACKAGE_BUGREPORT
+
+/* Define to the full name of this package. */
+#undef PACKAGE_NAME
+
+/* Define to the full name and version of this package. */
+#undef PACKAGE_STRING
+
+/* Define to the one symbol short name of this package. */
+#undef PACKAGE_TARNAME
+
+/* Define to the version of this package. */
+#undef PACKAGE_VERSION
+
+/* The size of a `unsigned long', as computed by sizeof. */
+#define SIZEOF_UNSIGNED_LONG 4
+
+/* The size of a `unsigned long long', as computed by sizeof. */
+#define SIZEOF_UNSIGNED_LONG_LONG 8
+
+/* Define to use GDOI. */
+#undef SRTP_GDOI
+
+/* Define to compile for kernel contexts. */
+#undef SRTP_KERNEL
+
+/* Define to compile for Linux kernel context. */
+#undef SRTP_KERNEL_LINUX
+
+/* Define to 1 if you have the ANSI C header files. */
+#undef STDC_HEADERS
+
+/* Define to 1 if your processor stores words with the most significant byte
+   first (like Motorola and SPARC, unlike Intel and VAX). */
+#undef WORDS_BIGENDIAN
+
+/* Define to empty if `const' does not conform to ANSI C. */
+//#undef const
+/* Define to `__inline__' or `__inline' if that's what the C compiler
+   calls it, or to nothing if 'inline' is not supported under any name.  */
+//#ifndef __cplusplus
+//#undef inline
+//#endif
+#define inline __inline
+
+/* Define to `unsigned' if <sys/types.h> does not define. */
+//#undef size_t
diff --git a/trunk/3rdparty/libsrtp-2-fit/config.hw b/trunk/3rdparty/libsrtp-2-fit/config.hw
new file mode 100644
index 000000000..6fc65df67
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/config.hw
@@ -0,0 +1,182 @@
+/* crypto/include/config.h.  Generated by configure.  */
+/* config_in.h.  Generated from configure.in by autoheader.  */
+
+#if (_MSC_VER >= 1400)
+# define HAVE_RAND_S	1
+# define _CRT_RAND_S
+#endif
+
+/* Define if building for a CISC machine (e.g. Intel). */
+#define CPU_CISC 1
+
+/* Define if building for a RISC machine (assume slow byte access). */
+/* #undef CPU_RISC */
+
+/* Define to enabled debug logging for all mudules. */
+#undef ENABLE_DEBUG_LOGGING
+
+/* Logging statments will be writen to this file. */
+/* #undef ERR_REPORTING_FILE */
+
+/* Define to redirect logging to stdout. */
+#undef ERR_REPORTING_STDOUT
+
+/* Define to 1 if you have the <arpa/inet.h> header file. */
+/* #undef HAVE_ARPA_INET_H */
+
+/* Define to 1 if you have the <byteswap.h> header file. */
+/* #undef HAVE_BYTESWAP_H */
+
+/* Define to 1 if you have the `inet_aton' function. */
+/* #undef HAVE_INET_ATON */
+
+/* Define to 1 if the system has the type `int16_t'. */
+#define HAVE_INT16_T 1
+
+/* Define to 1 if the system has the type `int32_t'. */
+#define HAVE_INT32_T 1
+
+/* Define to 1 if the system has the type `int8_t'. */
+#define HAVE_INT8_T 1
+
+/* Define to 1 if you have the <inttypes.h> header file. */
+/* #undef HAVE_INTTYPES_H */
+
+/* Define to 1 if you have the `socket' library (-lsocket). */
+/* #undef HAVE_LIBSOCKET */
+
+/* Define to 1 if you have the <machine/types.h> header file. */
+/* #undef HAVE_MACHINE_TYPES_H */
+
+/* Define to 1 if you have the <memory.h> header file. */
+#define HAVE_MEMORY_H 1
+
+/* Define to 1 if you have the <netinet/in.h> header file. */
+/* #undef HAVE_NETINET_IN_H */
+
+/* Define to 1 if you have the `socket' function. */
+/* #undef HAVE_SOCKET */
+
+/* Define to 1 if you have the <stdint.h> header file. */
+/* #undef HAVE_STDINT_H */
+
+/* Define to 1 if you have the <stdlib.h> header file. */
+#define HAVE_STDLIB_H 1
+
+/* Define to 1 if you have the <strings.h> header file. */
+#define HAVE_STRINGS_H 1
+
+/* Define to 1 if you have the <string.h> header file. */
+#define HAVE_STRING_H 1
+
+/* Define to 1 if you have the <sys/int_types.h> header file. */
+/* #undef HAVE_SYS_INT_TYPES_H */
+
+/* Define to 1 if you have the <sys/socket.h> header file. */
+/* #undef HAVE_SYS_SOCKET_H */
+
+/* Define to 1 if you have the <sys/stat.h> header file. */
+#define HAVE_SYS_STAT_H 1
+
+/* Define to 1 if you have the <sys/types.h> header file. */
+#define HAVE_SYS_TYPES_H 1
+
+/* Define to 1 if you have the <sys/uio.h> header file. */
+/* #undef HAVE_SYS_UIO_H */
+
+/* Define to 1 if the system has the type `uint16_t'. */
+#define HAVE_UINT16_T 1
+
+/* Define to 1 if the system has the type `uint32_t'. */
+#define HAVE_UINT32_T 1
+
+/* Define to 1 if the system has the type `uint64_t'. */
+#define HAVE_UINT64_T 1
+
+/* Define to 1 if the system has the type `uint8_t'. */
+#define HAVE_UINT8_T 1
+
+/* Define to 1 if you have the <unistd.h> header file. */
+/* #undef HAVE_UNISTD_H */
+
+/* Define to 1 if you have the `usleep' function. */
+/* #undef HAVE_USLEEP */
+
+/* Define to 1 if you have the <windows.h> header file. */
+#define HAVE_WINDOWS_H 1
+
+/* Define to 1 if you have the <winsock2.h> header file. */
+#define HAVE_WINSOCK2_H 1
+
+/* Define to use X86 inlined assembly code */
+/* #undef HAVE_X86 */
+
+/* Define to the address where bug reports for this package should be sent. */
+#define PACKAGE_BUGREPORT ""
+
+/* Define to the full name of this package. */
+#define PACKAGE_NAME ""
+
+/* Define to the full name and version of this package. */
+#define PACKAGE_STRING ""
+
+/* Define to the one symbol short name of this package. */
+#define PACKAGE_TARNAME ""
+
+/* Define to the version of this package. */
+#define PACKAGE_VERSION ""
+
+/* The size of a `unsigned long', as computed by sizeof. */
+#define SIZEOF_UNSIGNED_LONG 4
+
+/* The size of a `unsigned long long', as computed by sizeof. */
+#define SIZEOF_UNSIGNED_LONG_LONG 8
+
+/* Define to use GDOI. */
+/* #undef SRTP_GDOI */
+
+/* Define to compile for kernel contexts. */
+/* #undef SRTP_KERNEL */
+
+/* Define to compile for Linux kernel context. */
+/* #undef SRTP_KERNEL_LINUX */
+
+/* Define to 1 if you have the ANSI C header files. */
+#define STDC_HEADERS 1
+
+/* Define to 1 if your processor stores words with the most significant byte
+   first (like Motorola and SPARC, unlike Intel and VAX). */
+/* #undef WORDS_BIGENDIAN */
+
+/* Define to empty if `const' does not conform to ANSI C. */
+/* #undef const */
+
+/* Define 'inline' to nothing, since the MSVC compiler doesn't support it.  */
+#define inline 
+
+/* Define to `unsigned' if <sys/types.h> does not define. */
+/* #undef size_t */
+
+#if (_MSC_VER >= 1400) // VC8+
+#ifndef _CRT_SECURE_NO_DEPRECATE
+#define _CRT_SECURE_NO_DEPRECATE
+#endif
+#ifndef _CRT_NONSTDC_NO_DEPRECATE
+#define _CRT_NONSTDC_NO_DEPRECATE
+#endif
+#endif // VC8+
+
+#ifndef uint32_t
+typedef unsigned __int8		uint8_t;
+typedef unsigned __int16	uint16_t;
+typedef unsigned __int32	uint32_t;
+typedef unsigned __int64    uint64_t;
+typedef __int8		int8_t;
+typedef __int16		int16_t;
+typedef __int32		int32_t;
+typedef __int64		int64_t;
+#endif
+
+#ifdef _MSC_VER
+#pragma warning(disable:4311)
+#endif
diff --git a/trunk/3rdparty/libsrtp-2-fit/config.sub b/trunk/3rdparty/libsrtp-2-fit/config.sub
new file mode 100755
index 000000000..6d86a1e2f
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/config.sub
@@ -0,0 +1,1815 @@
+#! /bin/sh
+# Configuration validation subroutine script.
+#   Copyright 1992-2016 Free Software Foundation, Inc.
+
+timestamp='2016-05-10'
+
+# This file is free software; you can redistribute it and/or modify it
+# under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful, but
+# WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, see <http://www.gnu.org/licenses/>.
+#
+# As a special exception to the GNU General Public License, if you
+# distribute this file as part of a program that contains a
+# configuration script generated by Autoconf, you may include it under
+# the same distribution terms that you use for the rest of that
+# program.  This Exception is an additional permission under section 7
+# of the GNU General Public License, version 3 ("GPLv3").
+
+
+# Please send patches to <config-patches@gnu.org>.
+#
+# Configuration subroutine to validate and canonicalize a configuration type.
+# Supply the specified configuration type as an argument.
+# If it is invalid, we print an error message on stderr and exit with code 1.
+# Otherwise, we print the canonical config type on stdout and succeed.
+
+# You can get the latest version of this script from:
+# http://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.sub
+
+# This file is supposed to be the same for all GNU packages
+# and recognize all the CPU types, system types and aliases
+# that are meaningful with *any* GNU software.
+# Each package is responsible for reporting which valid configurations
+# it does not support.  The user should be able to distinguish
+# a failure to support a valid configuration from a meaningless
+# configuration.
+
+# The goal of this file is to map all the various variations of a given
+# machine specification into a single specification in the form:
+#	CPU_TYPE-MANUFACTURER-OPERATING_SYSTEM
+# or in some cases, the newer four-part form:
+#	CPU_TYPE-MANUFACTURER-KERNEL-OPERATING_SYSTEM
+# It is wrong to echo any other type of specification.
+
+me=`echo "$0" | sed -e 's,.*/,,'`
+
+usage="\
+Usage: $0 [OPTION] CPU-MFR-OPSYS or ALIAS
+
+Canonicalize a configuration name.
+
+Operation modes:
+  -h, --help         print this help, then exit
+  -t, --time-stamp   print date of last modification, then exit
+  -v, --version      print version number, then exit
+
+Report bugs and patches to <config-patches@gnu.org>."
+
+version="\
+GNU config.sub ($timestamp)
+
+Copyright 1992-2016 Free Software Foundation, Inc.
+
+This is free software; see the source for copying conditions.  There is NO
+warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE."
+
+help="
+Try \`$me --help' for more information."
+
+# Parse command line
+while test $# -gt 0 ; do
+  case $1 in
+    --time-stamp | --time* | -t )
+       echo "$timestamp" ; exit ;;
+    --version | -v )
+       echo "$version" ; exit ;;
+    --help | --h* | -h )
+       echo "$usage"; exit ;;
+    -- )     # Stop option processing
+       shift; break ;;
+    - )	# Use stdin as input.
+       break ;;
+    -* )
+       echo "$me: invalid option $1$help"
+       exit 1 ;;
+
+    *local*)
+       # First pass through any local machine types.
+       echo $1
+       exit ;;
+
+    * )
+       break ;;
+  esac
+done
+
+case $# in
+ 0) echo "$me: missing argument$help" >&2
+    exit 1;;
+ 1) ;;
+ *) echo "$me: too many arguments$help" >&2
+    exit 1;;
+esac
+
+# Separate what the user gave into CPU-COMPANY and OS or KERNEL-OS (if any).
+# Here we must recognize all the valid KERNEL-OS combinations.
+maybe_os=`echo $1 | sed 's/^\(.*\)-\([^-]*-[^-]*\)$/\2/'`
+case $maybe_os in
+  nto-qnx* | linux-gnu* | linux-android* | linux-dietlibc | linux-newlib* | \
+  linux-musl* | linux-uclibc* | uclinux-uclibc* | uclinux-gnu* | kfreebsd*-gnu* | \
+  knetbsd*-gnu* | netbsd*-gnu* | netbsd*-eabi* | \
+  kopensolaris*-gnu* | \
+  storm-chaos* | os2-emx* | rtmk-nova*)
+    os=-$maybe_os
+    basic_machine=`echo $1 | sed 's/^\(.*\)-\([^-]*-[^-]*\)$/\1/'`
+    ;;
+  android-linux)
+    os=-linux-android
+    basic_machine=`echo $1 | sed 's/^\(.*\)-\([^-]*-[^-]*\)$/\1/'`-unknown
+    ;;
+  *)
+    basic_machine=`echo $1 | sed 's/-[^-]*$//'`
+    if [ $basic_machine != $1 ]
+    then os=`echo $1 | sed 's/.*-/-/'`
+    else os=; fi
+    ;;
+esac
+
+### Let's recognize common machines as not being operating systems so
+### that things like config.sub decstation-3100 work.  We also
+### recognize some manufacturers as not being operating systems, so we
+### can provide default operating systems below.
+case $os in
+	-sun*os*)
+		# Prevent following clause from handling this invalid input.
+		;;
+	-dec* | -mips* | -sequent* | -encore* | -pc532* | -sgi* | -sony* | \
+	-att* | -7300* | -3300* | -delta* | -motorola* | -sun[234]* | \
+	-unicom* | -ibm* | -next | -hp | -isi* | -apollo | -altos* | \
+	-convergent* | -ncr* | -news | -32* | -3600* | -3100* | -hitachi* |\
+	-c[123]* | -convex* | -sun | -crds | -omron* | -dg | -ultra | -tti* | \
+	-harris | -dolphin | -highlevel | -gould | -cbm | -ns | -masscomp | \
+	-apple | -axis | -knuth | -cray | -microblaze*)
+		os=
+		basic_machine=$1
+		;;
+	-bluegene*)
+		os=-cnk
+		;;
+	-sim | -cisco | -oki | -wec | -winbond)
+		os=
+		basic_machine=$1
+		;;
+	-scout)
+		;;
+	-wrs)
+		os=-vxworks
+		basic_machine=$1
+		;;
+	-chorusos*)
+		os=-chorusos
+		basic_machine=$1
+		;;
+	-chorusrdb)
+		os=-chorusrdb
+		basic_machine=$1
+		;;
+	-hiux*)
+		os=-hiuxwe2
+		;;
+	-sco6)
+		os=-sco5v6
+		basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'`
+		;;
+	-sco5)
+		os=-sco3.2v5
+		basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'`
+		;;
+	-sco4)
+		os=-sco3.2v4
+		basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'`
+		;;
+	-sco3.2.[4-9]*)
+		os=`echo $os | sed -e 's/sco3.2./sco3.2v/'`
+		basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'`
+		;;
+	-sco3.2v[4-9]*)
+		# Don't forget version if it is 3.2v4 or newer.
+		basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'`
+		;;
+	-sco5v6*)
+		# Don't forget version if it is 3.2v4 or newer.
+		basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'`
+		;;
+	-sco*)
+		os=-sco3.2v2
+		basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'`
+		;;
+	-udk*)
+		basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'`
+		;;
+	-isc)
+		os=-isc2.2
+		basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'`
+		;;
+	-clix*)
+		basic_machine=clipper-intergraph
+		;;
+	-isc*)
+		basic_machine=`echo $1 | sed -e 's/86-.*/86-pc/'`
+		;;
+	-lynx*178)
+		os=-lynxos178
+		;;
+	-lynx*5)
+		os=-lynxos5
+		;;
+	-lynx*)
+		os=-lynxos
+		;;
+	-ptx*)
+		basic_machine=`echo $1 | sed -e 's/86-.*/86-sequent/'`
+		;;
+	-windowsnt*)
+		os=`echo $os | sed -e 's/windowsnt/winnt/'`
+		;;
+	-psos*)
+		os=-psos
+		;;
+	-mint | -mint[0-9]*)
+		basic_machine=m68k-atari
+		os=-mint
+		;;
+esac
+
+# Decode aliases for certain CPU-COMPANY combinations.
+case $basic_machine in
+	# Recognize the basic CPU types without company name.
+	# Some are omitted here because they have special meanings below.
+	1750a | 580 \
+	| a29k \
+	| aarch64 | aarch64_be \
+	| alpha | alphaev[4-8] | alphaev56 | alphaev6[78] | alphapca5[67] \
+	| alpha64 | alpha64ev[4-8] | alpha64ev56 | alpha64ev6[78] | alpha64pca5[67] \
+	| am33_2.0 \
+	| arc | arceb \
+	| arm | arm[bl]e | arme[lb] | armv[2-8] | armv[3-8][lb] | armv7[arm] \
+	| avr | avr32 \
+	| ba \
+	| be32 | be64 \
+	| bfin \
+	| c4x | c8051 | clipper \
+	| d10v | d30v | dlx | dsp16xx \
+	| e2k | epiphany \
+	| fido | fr30 | frv | ft32 \
+	| h8300 | h8500 | hppa | hppa1.[01] | hppa2.0 | hppa2.0[nw] | hppa64 \
+	| hexagon \
+	| i370 | i860 | i960 | ia64 \
+	| ip2k | iq2000 \
+	| k1om \
+	| le32 | le64 \
+	| lm32 \
+	| m32c | m32r | m32rle | m68000 | m68k | m88k \
+	| maxq | mb | microblaze | microblazeel | mcore | mep | metag \
+	| mips | mipsbe | mipseb | mipsel | mipsle \
+	| mips16 \
+	| mips64 | mips64el \
+	| mips64octeon | mips64octeonel \
+	| mips64orion | mips64orionel \
+	| mips64r5900 | mips64r5900el \
+	| mips64vr | mips64vrel \
+	| mips64vr4100 | mips64vr4100el \
+	| mips64vr4300 | mips64vr4300el \
+	| mips64vr5000 | mips64vr5000el \
+	| mips64vr5900 | mips64vr5900el \
+	| mipsisa32 | mipsisa32el \
+	| mipsisa32r2 | mipsisa32r2el \
+	| mipsisa32r6 | mipsisa32r6el \
+	| mipsisa64 | mipsisa64el \
+	| mipsisa64r2 | mipsisa64r2el \
+	| mipsisa64r6 | mipsisa64r6el \
+	| mipsisa64sb1 | mipsisa64sb1el \
+	| mipsisa64sr71k | mipsisa64sr71kel \
+	| mipsr5900 | mipsr5900el \
+	| mipstx39 | mipstx39el \
+	| mn10200 | mn10300 \
+	| moxie \
+	| mt \
+	| msp430 \
+	| nds32 | nds32le | nds32be \
+	| nios | nios2 | nios2eb | nios2el \
+	| ns16k | ns32k \
+	| open8 | or1k | or1knd | or32 \
+	| pdp10 | pdp11 | pj | pjl \
+	| powerpc | powerpc64 | powerpc64le | powerpcle \
+	| pyramid \
+	| riscv32 | riscv64 \
+	| rl78 | rx \
+	| score \
+	| sh | sh[1234] | sh[24]a | sh[24]aeb | sh[23]e | sh[234]eb | sheb | shbe | shle | sh[1234]le | sh3ele \
+	| sh64 | sh64le \
+	| sparc | sparc64 | sparc64b | sparc64v | sparc86x | sparclet | sparclite \
+	| sparcv8 | sparcv9 | sparcv9b | sparcv9v \
+	| spu \
+	| tahoe | tic4x | tic54x | tic55x | tic6x | tic80 | tron \
+	| ubicom32 \
+	| v850 | v850e | v850e1 | v850e2 | v850es | v850e2v3 \
+	| visium \
+	| we32k \
+	| x86 | xc16x | xstormy16 | xtensa \
+	| z8k | z80)
+		basic_machine=$basic_machine-unknown
+		;;
+	c54x)
+		basic_machine=tic54x-unknown
+		;;
+	c55x)
+		basic_machine=tic55x-unknown
+		;;
+	c6x)
+		basic_machine=tic6x-unknown
+		;;
+	leon|leon[3-9])
+		basic_machine=sparc-$basic_machine
+		;;
+	m6811 | m68hc11 | m6812 | m68hc12 | m68hcs12x | nvptx | picochip)
+		basic_machine=$basic_machine-unknown
+		os=-none
+		;;
+	m88110 | m680[12346]0 | m683?2 | m68360 | m5200 | v70 | w65 | z8k)
+		;;
+	ms1)
+		basic_machine=mt-unknown
+		;;
+
+	strongarm | thumb | xscale)
+		basic_machine=arm-unknown
+		;;
+	xgate)
+		basic_machine=$basic_machine-unknown
+		os=-none
+		;;
+	xscaleeb)
+		basic_machine=armeb-unknown
+		;;
+
+	xscaleel)
+		basic_machine=armel-unknown
+		;;
+
+	# We use `pc' rather than `unknown'
+	# because (1) that's what they normally are, and
+	# (2) the word "unknown" tends to confuse beginning users.
+	i*86 | x86_64)
+	  basic_machine=$basic_machine-pc
+	  ;;
+	# Object if more than one company name word.
+	*-*-*)
+		echo Invalid configuration \`$1\': machine \`$basic_machine\' not recognized 1>&2
+		exit 1
+		;;
+	# Recognize the basic CPU types with company name.
+	580-* \
+	| a29k-* \
+	| aarch64-* | aarch64_be-* \
+	| alpha-* | alphaev[4-8]-* | alphaev56-* | alphaev6[78]-* \
+	| alpha64-* | alpha64ev[4-8]-* | alpha64ev56-* | alpha64ev6[78]-* \
+	| alphapca5[67]-* | alpha64pca5[67]-* | arc-* | arceb-* \
+	| arm-*  | armbe-* | armle-* | armeb-* | armv*-* \
+	| avr-* | avr32-* \
+	| ba-* \
+	| be32-* | be64-* \
+	| bfin-* | bs2000-* \
+	| c[123]* | c30-* | [cjt]90-* | c4x-* \
+	| c8051-* | clipper-* | craynv-* | cydra-* \
+	| d10v-* | d30v-* | dlx-* \
+	| e2k-* | elxsi-* \
+	| f30[01]-* | f700-* | fido-* | fr30-* | frv-* | fx80-* \
+	| h8300-* | h8500-* \
+	| hppa-* | hppa1.[01]-* | hppa2.0-* | hppa2.0[nw]-* | hppa64-* \
+	| hexagon-* \
+	| i*86-* | i860-* | i960-* | ia64-* \
+	| ip2k-* | iq2000-* \
+	| k1om-* \
+	| le32-* | le64-* \
+	| lm32-* \
+	| m32c-* | m32r-* | m32rle-* \
+	| m68000-* | m680[012346]0-* | m68360-* | m683?2-* | m68k-* \
+	| m88110-* | m88k-* | maxq-* | mcore-* | metag-* \
+	| microblaze-* | microblazeel-* \
+	| mips-* | mipsbe-* | mipseb-* | mipsel-* | mipsle-* \
+	| mips16-* \
+	| mips64-* | mips64el-* \
+	| mips64octeon-* | mips64octeonel-* \
+	| mips64orion-* | mips64orionel-* \
+	| mips64r5900-* | mips64r5900el-* \
+	| mips64vr-* | mips64vrel-* \
+	| mips64vr4100-* | mips64vr4100el-* \
+	| mips64vr4300-* | mips64vr4300el-* \
+	| mips64vr5000-* | mips64vr5000el-* \
+	| mips64vr5900-* | mips64vr5900el-* \
+	| mipsisa32-* | mipsisa32el-* \
+	| mipsisa32r2-* | mipsisa32r2el-* \
+	| mipsisa32r6-* | mipsisa32r6el-* \
+	| mipsisa64-* | mipsisa64el-* \
+	| mipsisa64r2-* | mipsisa64r2el-* \
+	| mipsisa64r6-* | mipsisa64r6el-* \
+	| mipsisa64sb1-* | mipsisa64sb1el-* \
+	| mipsisa64sr71k-* | mipsisa64sr71kel-* \
+	| mipsr5900-* | mipsr5900el-* \
+	| mipstx39-* | mipstx39el-* \
+	| mmix-* \
+	| mt-* \
+	| msp430-* \
+	| nds32-* | nds32le-* | nds32be-* \
+	| nios-* | nios2-* | nios2eb-* | nios2el-* \
+	| none-* | np1-* | ns16k-* | ns32k-* \
+	| open8-* \
+	| or1k*-* \
+	| orion-* \
+	| pdp10-* | pdp11-* | pj-* | pjl-* | pn-* | power-* \
+	| powerpc-* | powerpc64-* | powerpc64le-* | powerpcle-* \
+	| pyramid-* \
+	| riscv32-* | riscv64-* \
+	| rl78-* | romp-* | rs6000-* | rx-* \
+	| sh-* | sh[1234]-* | sh[24]a-* | sh[24]aeb-* | sh[23]e-* | sh[34]eb-* | sheb-* | shbe-* \
+	| shle-* | sh[1234]le-* | sh3ele-* | sh64-* | sh64le-* \
+	| sparc-* | sparc64-* | sparc64b-* | sparc64v-* | sparc86x-* | sparclet-* \
+	| sparclite-* \
+	| sparcv8-* | sparcv9-* | sparcv9b-* | sparcv9v-* | sv1-* | sx*-* \
+	| tahoe-* \
+	| tic30-* | tic4x-* | tic54x-* | tic55x-* | tic6x-* | tic80-* \
+	| tile*-* \
+	| tron-* \
+	| ubicom32-* \
+	| v850-* | v850e-* | v850e1-* | v850es-* | v850e2-* | v850e2v3-* \
+	| vax-* \
+	| visium-* \
+	| we32k-* \
+	| x86-* | x86_64-* | xc16x-* | xps100-* \
+	| xstormy16-* | xtensa*-* \
+	| ymp-* \
+	| z8k-* | z80-*)
+		;;
+	# Recognize the basic CPU types without company name, with glob match.
+	xtensa*)
+		basic_machine=$basic_machine-unknown
+		;;
+	# Recognize the various machine names and aliases which stand
+	# for a CPU type and a company and sometimes even an OS.
+	386bsd)
+		basic_machine=i386-unknown
+		os=-bsd
+		;;
+	3b1 | 7300 | 7300-att | att-7300 | pc7300 | safari | unixpc)
+		basic_machine=m68000-att
+		;;
+	3b*)
+		basic_machine=we32k-att
+		;;
+	a29khif)
+		basic_machine=a29k-amd
+		os=-udi
+		;;
+	abacus)
+		basic_machine=abacus-unknown
+		;;
+	adobe68k)
+		basic_machine=m68010-adobe
+		os=-scout
+		;;
+	alliant | fx80)
+		basic_machine=fx80-alliant
+		;;
+	altos | altos3068)
+		basic_machine=m68k-altos
+		;;
+	am29k)
+		basic_machine=a29k-none
+		os=-bsd
+		;;
+	amd64)
+		basic_machine=x86_64-pc
+		;;
+	amd64-*)
+		basic_machine=x86_64-`echo $basic_machine | sed 's/^[^-]*-//'`
+		;;
+	amdahl)
+		basic_machine=580-amdahl
+		os=-sysv
+		;;
+	amiga | amiga-*)
+		basic_machine=m68k-unknown
+		;;
+	amigaos | amigados)
+		basic_machine=m68k-unknown
+		os=-amigaos
+		;;
+	amigaunix | amix)
+		basic_machine=m68k-unknown
+		os=-sysv4
+		;;
+	apollo68)
+		basic_machine=m68k-apollo
+		os=-sysv
+		;;
+	apollo68bsd)
+		basic_machine=m68k-apollo
+		os=-bsd
+		;;
+	aros)
+		basic_machine=i386-pc
+		os=-aros
+		;;
+	asmjs)
+		basic_machine=asmjs-unknown
+		;;
+	aux)
+		basic_machine=m68k-apple
+		os=-aux
+		;;
+	balance)
+		basic_machine=ns32k-sequent
+		os=-dynix
+		;;
+	blackfin)
+		basic_machine=bfin-unknown
+		os=-linux
+		;;
+	blackfin-*)
+		basic_machine=bfin-`echo $basic_machine | sed 's/^[^-]*-//'`
+		os=-linux
+		;;
+	bluegene*)
+		basic_machine=powerpc-ibm
+		os=-cnk
+		;;
+	c54x-*)
+		basic_machine=tic54x-`echo $basic_machine | sed 's/^[^-]*-//'`
+		;;
+	c55x-*)
+		basic_machine=tic55x-`echo $basic_machine | sed 's/^[^-]*-//'`
+		;;
+	c6x-*)
+		basic_machine=tic6x-`echo $basic_machine | sed 's/^[^-]*-//'`
+		;;
+	c90)
+		basic_machine=c90-cray
+		os=-unicos
+		;;
+	cegcc)
+		basic_machine=arm-unknown
+		os=-cegcc
+		;;
+	convex-c1)
+		basic_machine=c1-convex
+		os=-bsd
+		;;
+	convex-c2)
+		basic_machine=c2-convex
+		os=-bsd
+		;;
+	convex-c32)
+		basic_machine=c32-convex
+		os=-bsd
+		;;
+	convex-c34)
+		basic_machine=c34-convex
+		os=-bsd
+		;;
+	convex-c38)
+		basic_machine=c38-convex
+		os=-bsd
+		;;
+	cray | j90)
+		basic_machine=j90-cray
+		os=-unicos
+		;;
+	craynv)
+		basic_machine=craynv-cray
+		os=-unicosmp
+		;;
+	cr16 | cr16-*)
+		basic_machine=cr16-unknown
+		os=-elf
+		;;
+	crds | unos)
+		basic_machine=m68k-crds
+		;;
+	crisv32 | crisv32-* | etraxfs*)
+		basic_machine=crisv32-axis
+		;;
+	cris | cris-* | etrax*)
+		basic_machine=cris-axis
+		;;
+	crx)
+		basic_machine=crx-unknown
+		os=-elf
+		;;
+	da30 | da30-*)
+		basic_machine=m68k-da30
+		;;
+	decstation | decstation-3100 | pmax | pmax-* | pmin | dec3100 | decstatn)
+		basic_machine=mips-dec
+		;;
+	decsystem10* | dec10*)
+		basic_machine=pdp10-dec
+		os=-tops10
+		;;
+	decsystem20* | dec20*)
+		basic_machine=pdp10-dec
+		os=-tops20
+		;;
+	delta | 3300 | motorola-3300 | motorola-delta \
+	      | 3300-motorola | delta-motorola)
+		basic_machine=m68k-motorola
+		;;
+	delta88)
+		basic_machine=m88k-motorola
+		os=-sysv3
+		;;
+	dicos)
+		basic_machine=i686-pc
+		os=-dicos
+		;;
+	djgpp)
+		basic_machine=i586-pc
+		os=-msdosdjgpp
+		;;
+	dpx20 | dpx20-*)
+		basic_machine=rs6000-bull
+		os=-bosx
+		;;
+	dpx2* | dpx2*-bull)
+		basic_machine=m68k-bull
+		os=-sysv3
+		;;
+	ebmon29k)
+		basic_machine=a29k-amd
+		os=-ebmon
+		;;
+	elxsi)
+		basic_machine=elxsi-elxsi
+		os=-bsd
+		;;
+	encore | umax | mmax)
+		basic_machine=ns32k-encore
+		;;
+	es1800 | OSE68k | ose68k | ose | OSE)
+		basic_machine=m68k-ericsson
+		os=-ose
+		;;
+	fx2800)
+		basic_machine=i860-alliant
+		;;
+	genix)
+		basic_machine=ns32k-ns
+		;;
+	gmicro)
+		basic_machine=tron-gmicro
+		os=-sysv
+		;;
+	go32)
+		basic_machine=i386-pc
+		os=-go32
+		;;
+	h3050r* | hiux*)
+		basic_machine=hppa1.1-hitachi
+		os=-hiuxwe2
+		;;
+	h8300hms)
+		basic_machine=h8300-hitachi
+		os=-hms
+		;;
+	h8300xray)
+		basic_machine=h8300-hitachi
+		os=-xray
+		;;
+	h8500hms)
+		basic_machine=h8500-hitachi
+		os=-hms
+		;;
+	harris)
+		basic_machine=m88k-harris
+		os=-sysv3
+		;;
+	hp300-*)
+		basic_machine=m68k-hp
+		;;
+	hp300bsd)
+		basic_machine=m68k-hp
+		os=-bsd
+		;;
+	hp300hpux)
+		basic_machine=m68k-hp
+		os=-hpux
+		;;
+	hp3k9[0-9][0-9] | hp9[0-9][0-9])
+		basic_machine=hppa1.0-hp
+		;;
+	hp9k2[0-9][0-9] | hp9k31[0-9])
+		basic_machine=m68000-hp
+		;;
+	hp9k3[2-9][0-9])
+		basic_machine=m68k-hp
+		;;
+	hp9k6[0-9][0-9] | hp6[0-9][0-9])
+		basic_machine=hppa1.0-hp
+		;;
+	hp9k7[0-79][0-9] | hp7[0-79][0-9])
+		basic_machine=hppa1.1-hp
+		;;
+	hp9k78[0-9] | hp78[0-9])
+		# FIXME: really hppa2.0-hp
+		basic_machine=hppa1.1-hp
+		;;
+	hp9k8[67]1 | hp8[67]1 | hp9k80[24] | hp80[24] | hp9k8[78]9 | hp8[78]9 | hp9k893 | hp893)
+		# FIXME: really hppa2.0-hp
+		basic_machine=hppa1.1-hp
+		;;
+	hp9k8[0-9][13679] | hp8[0-9][13679])
+		basic_machine=hppa1.1-hp
+		;;
+	hp9k8[0-9][0-9] | hp8[0-9][0-9])
+		basic_machine=hppa1.0-hp
+		;;
+	hppa-next)
+		os=-nextstep3
+		;;
+	hppaosf)
+		basic_machine=hppa1.1-hp
+		os=-osf
+		;;
+	hppro)
+		basic_machine=hppa1.1-hp
+		os=-proelf
+		;;
+	i370-ibm* | ibm*)
+		basic_machine=i370-ibm
+		;;
+	i*86v32)
+		basic_machine=`echo $1 | sed -e 's/86.*/86-pc/'`
+		os=-sysv32
+		;;
+	i*86v4*)
+		basic_machine=`echo $1 | sed -e 's/86.*/86-pc/'`
+		os=-sysv4
+		;;
+	i*86v)
+		basic_machine=`echo $1 | sed -e 's/86.*/86-pc/'`
+		os=-sysv
+		;;
+	i*86sol2)
+		basic_machine=`echo $1 | sed -e 's/86.*/86-pc/'`
+		os=-solaris2
+		;;
+	i386mach)
+		basic_machine=i386-mach
+		os=-mach
+		;;
+	i386-vsta | vsta)
+		basic_machine=i386-unknown
+		os=-vsta
+		;;
+	iris | iris4d)
+		basic_machine=mips-sgi
+		case $os in
+		    -irix*)
+			;;
+		    *)
+			os=-irix4
+			;;
+		esac
+		;;
+	isi68 | isi)
+		basic_machine=m68k-isi
+		os=-sysv
+		;;
+	leon-*|leon[3-9]-*)
+		basic_machine=sparc-`echo $basic_machine | sed 's/-.*//'`
+		;;
+	m68knommu)
+		basic_machine=m68k-unknown
+		os=-linux
+		;;
+	m68knommu-*)
+		basic_machine=m68k-`echo $basic_machine | sed 's/^[^-]*-//'`
+		os=-linux
+		;;
+	m88k-omron*)
+		basic_machine=m88k-omron
+		;;
+	magnum | m3230)
+		basic_machine=mips-mips
+		os=-sysv
+		;;
+	merlin)
+		basic_machine=ns32k-utek
+		os=-sysv
+		;;
+	microblaze*)
+		basic_machine=microblaze-xilinx
+		;;
+	mingw64)
+		basic_machine=x86_64-pc
+		os=-mingw64
+		;;
+	mingw32)
+		basic_machine=i686-pc
+		os=-mingw32
+		;;
+	mingw32ce)
+		basic_machine=arm-unknown
+		os=-mingw32ce
+		;;
+	miniframe)
+		basic_machine=m68000-convergent
+		;;
+	*mint | -mint[0-9]* | *MiNT | *MiNT[0-9]*)
+		basic_machine=m68k-atari
+		os=-mint
+		;;
+	mips3*-*)
+		basic_machine=`echo $basic_machine | sed -e 's/mips3/mips64/'`
+		;;
+	mips3*)
+		basic_machine=`echo $basic_machine | sed -e 's/mips3/mips64/'`-unknown
+		;;
+	monitor)
+		basic_machine=m68k-rom68k
+		os=-coff
+		;;
+	morphos)
+		basic_machine=powerpc-unknown
+		os=-morphos
+		;;
+	moxiebox)
+		basic_machine=moxie-unknown
+		os=-moxiebox
+		;;
+	msdos)
+		basic_machine=i386-pc
+		os=-msdos
+		;;
+	ms1-*)
+		basic_machine=`echo $basic_machine | sed -e 's/ms1-/mt-/'`
+		;;
+	msys)
+		basic_machine=i686-pc
+		os=-msys
+		;;
+	mvs)
+		basic_machine=i370-ibm
+		os=-mvs
+		;;
+	nacl)
+		basic_machine=le32-unknown
+		os=-nacl
+		;;
+	ncr3000)
+		basic_machine=i486-ncr
+		os=-sysv4
+		;;
+	netbsd386)
+		basic_machine=i386-unknown
+		os=-netbsd
+		;;
+	netwinder)
+		basic_machine=armv4l-rebel
+		os=-linux
+		;;
+	news | news700 | news800 | news900)
+		basic_machine=m68k-sony
+		os=-newsos
+		;;
+	news1000)
+		basic_machine=m68030-sony
+		os=-newsos
+		;;
+	news-3600 | risc-news)
+		basic_machine=mips-sony
+		os=-newsos
+		;;
+	necv70)
+		basic_machine=v70-nec
+		os=-sysv
+		;;
+	next | m*-next )
+		basic_machine=m68k-next
+		case $os in
+		    -nextstep* )
+			;;
+		    -ns2*)
+		      os=-nextstep2
+			;;
+		    *)
+		      os=-nextstep3
+			;;
+		esac
+		;;
+	nh3000)
+		basic_machine=m68k-harris
+		os=-cxux
+		;;
+	nh[45]000)
+		basic_machine=m88k-harris
+		os=-cxux
+		;;
+	nindy960)
+		basic_machine=i960-intel
+		os=-nindy
+		;;
+	mon960)
+		basic_machine=i960-intel
+		os=-mon960
+		;;
+	nonstopux)
+		basic_machine=mips-compaq
+		os=-nonstopux
+		;;
+	np1)
+		basic_machine=np1-gould
+		;;
+	neo-tandem)
+		basic_machine=neo-tandem
+		;;
+	nse-tandem)
+		basic_machine=nse-tandem
+		;;
+	nsr-tandem)
+		basic_machine=nsr-tandem
+		;;
+	op50n-* | op60c-*)
+		basic_machine=hppa1.1-oki
+		os=-proelf
+		;;
+	openrisc | openrisc-*)
+		basic_machine=or32-unknown
+		;;
+	os400)
+		basic_machine=powerpc-ibm
+		os=-os400
+		;;
+	OSE68000 | ose68000)
+		basic_machine=m68000-ericsson
+		os=-ose
+		;;
+	os68k)
+		basic_machine=m68k-none
+		os=-os68k
+		;;
+	pa-hitachi)
+		basic_machine=hppa1.1-hitachi
+		os=-hiuxwe2
+		;;
+	paragon)
+		basic_machine=i860-intel
+		os=-osf
+		;;
+	parisc)
+		basic_machine=hppa-unknown
+		os=-linux
+		;;
+	parisc-*)
+		basic_machine=hppa-`echo $basic_machine | sed 's/^[^-]*-//'`
+		os=-linux
+		;;
+	pbd)
+		basic_machine=sparc-tti
+		;;
+	pbb)
+		basic_machine=m68k-tti
+		;;
+	pc532 | pc532-*)
+		basic_machine=ns32k-pc532
+		;;
+	pc98)
+		basic_machine=i386-pc
+		;;
+	pc98-*)
+		basic_machine=i386-`echo $basic_machine | sed 's/^[^-]*-//'`
+		;;
+	pentium | p5 | k5 | k6 | nexgen | viac3)
+		basic_machine=i586-pc
+		;;
+	pentiumpro | p6 | 6x86 | athlon | athlon_*)
+		basic_machine=i686-pc
+		;;
+	pentiumii | pentium2 | pentiumiii | pentium3)
+		basic_machine=i686-pc
+		;;
+	pentium4)
+		basic_machine=i786-pc
+		;;
+	pentium-* | p5-* | k5-* | k6-* | nexgen-* | viac3-*)
+		basic_machine=i586-`echo $basic_machine | sed 's/^[^-]*-//'`
+		;;
+	pentiumpro-* | p6-* | 6x86-* | athlon-*)
+		basic_machine=i686-`echo $basic_machine | sed 's/^[^-]*-//'`
+		;;
+	pentiumii-* | pentium2-* | pentiumiii-* | pentium3-*)
+		basic_machine=i686-`echo $basic_machine | sed 's/^[^-]*-//'`
+		;;
+	pentium4-*)
+		basic_machine=i786-`echo $basic_machine | sed 's/^[^-]*-//'`
+		;;
+	pn)
+		basic_machine=pn-gould
+		;;
+	power)	basic_machine=power-ibm
+		;;
+	ppc | ppcbe)	basic_machine=powerpc-unknown
+		;;
+	ppc-* | ppcbe-*)
+		basic_machine=powerpc-`echo $basic_machine | sed 's/^[^-]*-//'`
+		;;
+	ppcle | powerpclittle | ppc-le | powerpc-little)
+		basic_machine=powerpcle-unknown
+		;;
+	ppcle-* | powerpclittle-*)
+		basic_machine=powerpcle-`echo $basic_machine | sed 's/^[^-]*-//'`
+		;;
+	ppc64)	basic_machine=powerpc64-unknown
+		;;
+	ppc64-*) basic_machine=powerpc64-`echo $basic_machine | sed 's/^[^-]*-//'`
+		;;
+	ppc64le | powerpc64little | ppc64-le | powerpc64-little)
+		basic_machine=powerpc64le-unknown
+		;;
+	ppc64le-* | powerpc64little-*)
+		basic_machine=powerpc64le-`echo $basic_machine | sed 's/^[^-]*-//'`
+		;;
+	ps2)
+		basic_machine=i386-ibm
+		;;
+	pw32)
+		basic_machine=i586-unknown
+		os=-pw32
+		;;
+	rdos | rdos64)
+		basic_machine=x86_64-pc
+		os=-rdos
+		;;
+	rdos32)
+		basic_machine=i386-pc
+		os=-rdos
+		;;
+	rom68k)
+		basic_machine=m68k-rom68k
+		os=-coff
+		;;
+	rm[46]00)
+		basic_machine=mips-siemens
+		;;
+	rtpc | rtpc-*)
+		basic_machine=romp-ibm
+		;;
+	s390 | s390-*)
+		basic_machine=s390-ibm
+		;;
+	s390x | s390x-*)
+		basic_machine=s390x-ibm
+		;;
+	sa29200)
+		basic_machine=a29k-amd
+		os=-udi
+		;;
+	sb1)
+		basic_machine=mipsisa64sb1-unknown
+		;;
+	sb1el)
+		basic_machine=mipsisa64sb1el-unknown
+		;;
+	sde)
+		basic_machine=mipsisa32-sde
+		os=-elf
+		;;
+	sei)
+		basic_machine=mips-sei
+		os=-seiux
+		;;
+	sequent)
+		basic_machine=i386-sequent
+		;;
+	sh)
+		basic_machine=sh-hitachi
+		os=-hms
+		;;
+	sh5el)
+		basic_machine=sh5le-unknown
+		;;
+	sh64)
+		basic_machine=sh64-unknown
+		;;
+	sparclite-wrs | simso-wrs)
+		basic_machine=sparclite-wrs
+		os=-vxworks
+		;;
+	sps7)
+		basic_machine=m68k-bull
+		os=-sysv2
+		;;
+	spur)
+		basic_machine=spur-unknown
+		;;
+	st2000)
+		basic_machine=m68k-tandem
+		;;
+	stratus)
+		basic_machine=i860-stratus
+		os=-sysv4
+		;;
+	strongarm-* | thumb-*)
+		basic_machine=arm-`echo $basic_machine | sed 's/^[^-]*-//'`
+		;;
+	sun2)
+		basic_machine=m68000-sun
+		;;
+	sun2os3)
+		basic_machine=m68000-sun
+		os=-sunos3
+		;;
+	sun2os4)
+		basic_machine=m68000-sun
+		os=-sunos4
+		;;
+	sun3os3)
+		basic_machine=m68k-sun
+		os=-sunos3
+		;;
+	sun3os4)
+		basic_machine=m68k-sun
+		os=-sunos4
+		;;
+	sun4os3)
+		basic_machine=sparc-sun
+		os=-sunos3
+		;;
+	sun4os4)
+		basic_machine=sparc-sun
+		os=-sunos4
+		;;
+	sun4sol2)
+		basic_machine=sparc-sun
+		os=-solaris2
+		;;
+	sun3 | sun3-*)
+		basic_machine=m68k-sun
+		;;
+	sun4)
+		basic_machine=sparc-sun
+		;;
+	sun386 | sun386i | roadrunner)
+		basic_machine=i386-sun
+		;;
+	sv1)
+		basic_machine=sv1-cray
+		os=-unicos
+		;;
+	symmetry)
+		basic_machine=i386-sequent
+		os=-dynix
+		;;
+	t3e)
+		basic_machine=alphaev5-cray
+		os=-unicos
+		;;
+	t90)
+		basic_machine=t90-cray
+		os=-unicos
+		;;
+	tile*)
+		basic_machine=$basic_machine-unknown
+		os=-linux-gnu
+		;;
+	tx39)
+		basic_machine=mipstx39-unknown
+		;;
+	tx39el)
+		basic_machine=mipstx39el-unknown
+		;;
+	toad1)
+		basic_machine=pdp10-xkl
+		os=-tops20
+		;;
+	tower | tower-32)
+		basic_machine=m68k-ncr
+		;;
+	tpf)
+		basic_machine=s390x-ibm
+		os=-tpf
+		;;
+	udi29k)
+		basic_machine=a29k-amd
+		os=-udi
+		;;
+	ultra3)
+		basic_machine=a29k-nyu
+		os=-sym1
+		;;
+	v810 | necv810)
+		basic_machine=v810-nec
+		os=-none
+		;;
+	vaxv)
+		basic_machine=vax-dec
+		os=-sysv
+		;;
+	vms)
+		basic_machine=vax-dec
+		os=-vms
+		;;
+	vpp*|vx|vx-*)
+		basic_machine=f301-fujitsu
+		;;
+	vxworks960)
+		basic_machine=i960-wrs
+		os=-vxworks
+		;;
+	vxworks68)
+		basic_machine=m68k-wrs
+		os=-vxworks
+		;;
+	vxworks29k)
+		basic_machine=a29k-wrs
+		os=-vxworks
+		;;
+	w65*)
+		basic_machine=w65-wdc
+		os=-none
+		;;
+	w89k-*)
+		basic_machine=hppa1.1-winbond
+		os=-proelf
+		;;
+	xbox)
+		basic_machine=i686-pc
+		os=-mingw32
+		;;
+	xps | xps100)
+		basic_machine=xps100-honeywell
+		;;
+	xscale-* | xscalee[bl]-*)
+		basic_machine=`echo $basic_machine | sed 's/^xscale/arm/'`
+		;;
+	ymp)
+		basic_machine=ymp-cray
+		os=-unicos
+		;;
+	z8k-*-coff)
+		basic_machine=z8k-unknown
+		os=-sim
+		;;
+	z80-*-coff)
+		basic_machine=z80-unknown
+		os=-sim
+		;;
+	none)
+		basic_machine=none-none
+		os=-none
+		;;
+
+# Here we handle the default manufacturer of certain CPU types.  It is in
+# some cases the only manufacturer, in others, it is the most popular.
+	w89k)
+		basic_machine=hppa1.1-winbond
+		;;
+	op50n)
+		basic_machine=hppa1.1-oki
+		;;
+	op60c)
+		basic_machine=hppa1.1-oki
+		;;
+	romp)
+		basic_machine=romp-ibm
+		;;
+	mmix)
+		basic_machine=mmix-knuth
+		;;
+	rs6000)
+		basic_machine=rs6000-ibm
+		;;
+	vax)
+		basic_machine=vax-dec
+		;;
+	pdp10)
+		# there are many clones, so DEC is not a safe bet
+		basic_machine=pdp10-unknown
+		;;
+	pdp11)
+		basic_machine=pdp11-dec
+		;;
+	we32k)
+		basic_machine=we32k-att
+		;;
+	sh[1234] | sh[24]a | sh[24]aeb | sh[34]eb | sh[1234]le | sh[23]ele)
+		basic_machine=sh-unknown
+		;;
+	sparc | sparcv8 | sparcv9 | sparcv9b | sparcv9v)
+		basic_machine=sparc-sun
+		;;
+	cydra)
+		basic_machine=cydra-cydrome
+		;;
+	orion)
+		basic_machine=orion-highlevel
+		;;
+	orion105)
+		basic_machine=clipper-highlevel
+		;;
+	mac | mpw | mac-mpw)
+		basic_machine=m68k-apple
+		;;
+	pmac | pmac-mpw)
+		basic_machine=powerpc-apple
+		;;
+	*-unknown)
+		# Make sure to match an already-canonicalized machine name.
+		;;
+	*)
+		echo Invalid configuration \`$1\': machine \`$basic_machine\' not recognized 1>&2
+		exit 1
+		;;
+esac
+
+# Here we canonicalize certain aliases for manufacturers.
+case $basic_machine in
+	*-digital*)
+		basic_machine=`echo $basic_machine | sed 's/digital.*/dec/'`
+		;;
+	*-commodore*)
+		basic_machine=`echo $basic_machine | sed 's/commodore.*/cbm/'`
+		;;
+	*)
+		;;
+esac
+
+# Decode manufacturer-specific aliases for certain operating systems.
+
+if [ x"$os" != x"" ]
+then
+case $os in
+	# First match some system type aliases
+	# that might get confused with valid system types.
+	# -solaris* is a basic system type, with this one exception.
+	-auroraux)
+		os=-auroraux
+		;;
+	-solaris1 | -solaris1.*)
+		os=`echo $os | sed -e 's|solaris1|sunos4|'`
+		;;
+	-solaris)
+		os=-solaris2
+		;;
+	-svr4*)
+		os=-sysv4
+		;;
+	-unixware*)
+		os=-sysv4.2uw
+		;;
+	-gnu/linux*)
+		os=`echo $os | sed -e 's|gnu/linux|linux-gnu|'`
+		;;
+	# First accept the basic system types.
+	# The portable systems comes first.
+	# Each alternative MUST END IN A *, to match a version number.
+	# -sysv* is not here because it comes later, after sysvr4.
+	-gnu* | -bsd* | -mach* | -minix* | -genix* | -ultrix* | -irix* \
+	      | -*vms* | -sco* | -esix* | -isc* | -aix* | -cnk* | -sunos | -sunos[34]*\
+	      | -hpux* | -unos* | -osf* | -luna* | -dgux* | -auroraux* | -solaris* \
+	      | -sym* | -kopensolaris* | -plan9* \
+	      | -amigaos* | -amigados* | -msdos* | -newsos* | -unicos* | -aof* \
+	      | -aos* | -aros* | -cloudabi* | -sortix* \
+	      | -nindy* | -vxsim* | -vxworks* | -ebmon* | -hms* | -mvs* \
+	      | -clix* | -riscos* | -uniplus* | -iris* | -rtu* | -xenix* \
+	      | -hiux* | -386bsd* | -knetbsd* | -mirbsd* | -netbsd* \
+	      | -bitrig* | -openbsd* | -solidbsd* | -libertybsd* \
+	      | -ekkobsd* | -kfreebsd* | -freebsd* | -riscix* | -lynxos* \
+	      | -bosx* | -nextstep* | -cxux* | -aout* | -elf* | -oabi* \
+	      | -ptx* | -coff* | -ecoff* | -winnt* | -domain* | -vsta* \
+	      | -udi* | -eabi* | -lites* | -ieee* | -go32* | -aux* \
+	      | -chorusos* | -chorusrdb* | -cegcc* \
+	      | -cygwin* | -msys* | -pe* | -psos* | -moss* | -proelf* | -rtems* \
+	      | -mingw32* | -mingw64* | -linux-gnu* | -linux-android* \
+	      | -linux-newlib* | -linux-musl* | -linux-uclibc* \
+	      | -uxpv* | -beos* | -mpeix* | -udk* | -moxiebox* \
+	      | -interix* | -uwin* | -mks* | -rhapsody* | -darwin* | -opened* \
+	      | -openstep* | -oskit* | -conix* | -pw32* | -nonstopux* \
+	      | -storm-chaos* | -tops10* | -tenex* | -tops20* | -its* \
+	      | -os2* | -vos* | -palmos* | -uclinux* | -nucleus* \
+	      | -morphos* | -superux* | -rtmk* | -rtmk-nova* | -windiss* \
+	      | -powermax* | -dnix* | -nx6 | -nx7 | -sei* | -dragonfly* \
+	      | -skyos* | -haiku* | -rdos* | -toppers* | -drops* | -es* \
+	      | -onefs* | -tirtos* | -phoenix*)
+	# Remember, each alternative MUST END IN *, to match a version number.
+		;;
+	-qnx*)
+		case $basic_machine in
+		    x86-* | i*86-*)
+			;;
+		    *)
+			os=-nto$os
+			;;
+		esac
+		;;
+	-nto-qnx*)
+		;;
+	-nto*)
+		os=`echo $os | sed -e 's|nto|nto-qnx|'`
+		;;
+	-sim | -es1800* | -hms* | -xray | -os68k* | -none* | -v88r* \
+	      | -windows* | -osx | -abug | -netware* | -os9* | -beos* | -haiku* \
+	      | -macos* | -mpw* | -magic* | -mmixware* | -mon960* | -lnews*)
+		;;
+	-mac*)
+		os=`echo $os | sed -e 's|mac|macos|'`
+		;;
+	-linux-dietlibc)
+		os=-linux-dietlibc
+		;;
+	-linux*)
+		os=`echo $os | sed -e 's|linux|linux-gnu|'`
+		;;
+	-sunos5*)
+		os=`echo $os | sed -e 's|sunos5|solaris2|'`
+		;;
+	-sunos6*)
+		os=`echo $os | sed -e 's|sunos6|solaris3|'`
+		;;
+	-opened*)
+		os=-openedition
+		;;
+	-os400*)
+		os=-os400
+		;;
+	-wince*)
+		os=-wince
+		;;
+	-osfrose*)
+		os=-osfrose
+		;;
+	-osf*)
+		os=-osf
+		;;
+	-utek*)
+		os=-bsd
+		;;
+	-dynix*)
+		os=-bsd
+		;;
+	-acis*)
+		os=-aos
+		;;
+	-atheos*)
+		os=-atheos
+		;;
+	-syllable*)
+		os=-syllable
+		;;
+	-386bsd)
+		os=-bsd
+		;;
+	-ctix* | -uts*)
+		os=-sysv
+		;;
+	-nova*)
+		os=-rtmk-nova
+		;;
+	-ns2 )
+		os=-nextstep2
+		;;
+	-nsk*)
+		os=-nsk
+		;;
+	# Preserve the version number of sinix5.
+	-sinix5.*)
+		os=`echo $os | sed -e 's|sinix|sysv|'`
+		;;
+	-sinix*)
+		os=-sysv4
+		;;
+	-tpf*)
+		os=-tpf
+		;;
+	-triton*)
+		os=-sysv3
+		;;
+	-oss*)
+		os=-sysv3
+		;;
+	-svr4)
+		os=-sysv4
+		;;
+	-svr3)
+		os=-sysv3
+		;;
+	-sysvr4)
+		os=-sysv4
+		;;
+	# This must come after -sysvr4.
+	-sysv*)
+		;;
+	-ose*)
+		os=-ose
+		;;
+	-es1800*)
+		os=-ose
+		;;
+	-xenix)
+		os=-xenix
+		;;
+	-*mint | -mint[0-9]* | -*MiNT | -MiNT[0-9]*)
+		os=-mint
+		;;
+	-aros*)
+		os=-aros
+		;;
+	-zvmoe)
+		os=-zvmoe
+		;;
+	-dicos*)
+		os=-dicos
+		;;
+	-nacl*)
+		;;
+	-ios)
+		;;
+	-none)
+		;;
+	*)
+		# Get rid of the `-' at the beginning of $os.
+		os=`echo $os | sed 's/[^-]*-//'`
+		echo Invalid configuration \`$1\': system \`$os\' not recognized 1>&2
+		exit 1
+		;;
+esac
+else
+
+# Here we handle the default operating systems that come with various machines.
+# The value should be what the vendor currently ships out the door with their
+# machine or put another way, the most popular os provided with the machine.
+
+# Note that if you're going to try to match "-MANUFACTURER" here (say,
+# "-sun"), then you have to tell the case statement up towards the top
+# that MANUFACTURER isn't an operating system.  Otherwise, code above
+# will signal an error saying that MANUFACTURER isn't an operating
+# system, and we'll never get to this point.
+
+case $basic_machine in
+	score-*)
+		os=-elf
+		;;
+	spu-*)
+		os=-elf
+		;;
+	*-acorn)
+		os=-riscix1.2
+		;;
+	arm*-rebel)
+		os=-linux
+		;;
+	arm*-semi)
+		os=-aout
+		;;
+	c4x-* | tic4x-*)
+		os=-coff
+		;;
+	c8051-*)
+		os=-elf
+		;;
+	hexagon-*)
+		os=-elf
+		;;
+	tic54x-*)
+		os=-coff
+		;;
+	tic55x-*)
+		os=-coff
+		;;
+	tic6x-*)
+		os=-coff
+		;;
+	# This must come before the *-dec entry.
+	pdp10-*)
+		os=-tops20
+		;;
+	pdp11-*)
+		os=-none
+		;;
+	*-dec | vax-*)
+		os=-ultrix4.2
+		;;
+	m68*-apollo)
+		os=-domain
+		;;
+	i386-sun)
+		os=-sunos4.0.2
+		;;
+	m68000-sun)
+		os=-sunos3
+		;;
+	m68*-cisco)
+		os=-aout
+		;;
+	mep-*)
+		os=-elf
+		;;
+	mips*-cisco)
+		os=-elf
+		;;
+	mips*-*)
+		os=-elf
+		;;
+	or32-*)
+		os=-coff
+		;;
+	*-tti)	# must be before sparc entry or we get the wrong os.
+		os=-sysv3
+		;;
+	sparc-* | *-sun)
+		os=-sunos4.1.1
+		;;
+	*-be)
+		os=-beos
+		;;
+	*-haiku)
+		os=-haiku
+		;;
+	*-ibm)
+		os=-aix
+		;;
+	*-knuth)
+		os=-mmixware
+		;;
+	*-wec)
+		os=-proelf
+		;;
+	*-winbond)
+		os=-proelf
+		;;
+	*-oki)
+		os=-proelf
+		;;
+	*-hp)
+		os=-hpux
+		;;
+	*-hitachi)
+		os=-hiux
+		;;
+	i860-* | *-att | *-ncr | *-altos | *-motorola | *-convergent)
+		os=-sysv
+		;;
+	*-cbm)
+		os=-amigaos
+		;;
+	*-dg)
+		os=-dgux
+		;;
+	*-dolphin)
+		os=-sysv3
+		;;
+	m68k-ccur)
+		os=-rtu
+		;;
+	m88k-omron*)
+		os=-luna
+		;;
+	*-next )
+		os=-nextstep
+		;;
+	*-sequent)
+		os=-ptx
+		;;
+	*-crds)
+		os=-unos
+		;;
+	*-ns)
+		os=-genix
+		;;
+	i370-*)
+		os=-mvs
+		;;
+	*-next)
+		os=-nextstep3
+		;;
+	*-gould)
+		os=-sysv
+		;;
+	*-highlevel)
+		os=-bsd
+		;;
+	*-encore)
+		os=-bsd
+		;;
+	*-sgi)
+		os=-irix
+		;;
+	*-siemens)
+		os=-sysv4
+		;;
+	*-masscomp)
+		os=-rtu
+		;;
+	f30[01]-fujitsu | f700-fujitsu)
+		os=-uxpv
+		;;
+	*-rom68k)
+		os=-coff
+		;;
+	*-*bug)
+		os=-coff
+		;;
+	*-apple)
+		os=-macos
+		;;
+	*-atari*)
+		os=-mint
+		;;
+	*)
+		os=-none
+		;;
+esac
+fi
+
+# Here we handle the case where we know the os, and the CPU type, but not the
+# manufacturer.  We pick the logical manufacturer.
+vendor=unknown
+case $basic_machine in
+	*-unknown)
+		case $os in
+			-riscix*)
+				vendor=acorn
+				;;
+			-sunos*)
+				vendor=sun
+				;;
+			-cnk*|-aix*)
+				vendor=ibm
+				;;
+			-beos*)
+				vendor=be
+				;;
+			-hpux*)
+				vendor=hp
+				;;
+			-mpeix*)
+				vendor=hp
+				;;
+			-hiux*)
+				vendor=hitachi
+				;;
+			-unos*)
+				vendor=crds
+				;;
+			-dgux*)
+				vendor=dg
+				;;
+			-luna*)
+				vendor=omron
+				;;
+			-genix*)
+				vendor=ns
+				;;
+			-mvs* | -opened*)
+				vendor=ibm
+				;;
+			-os400*)
+				vendor=ibm
+				;;
+			-ptx*)
+				vendor=sequent
+				;;
+			-tpf*)
+				vendor=ibm
+				;;
+			-vxsim* | -vxworks* | -windiss*)
+				vendor=wrs
+				;;
+			-aux*)
+				vendor=apple
+				;;
+			-hms*)
+				vendor=hitachi
+				;;
+			-mpw* | -macos*)
+				vendor=apple
+				;;
+			-*mint | -mint[0-9]* | -*MiNT | -MiNT[0-9]*)
+				vendor=atari
+				;;
+			-vos*)
+				vendor=stratus
+				;;
+		esac
+		basic_machine=`echo $basic_machine | sed "s/unknown/$vendor/"`
+		;;
+esac
+
+echo $basic_machine$os
+exit
+
+# Local variables:
+# eval: (add-hook 'write-file-hooks 'time-stamp)
+# time-stamp-start: "timestamp='"
+# time-stamp-format: "%:y-%02m-%02d"
+# time-stamp-end: "'"
+# End:
diff --git a/trunk/3rdparty/libsrtp-2-fit/config_in.h b/trunk/3rdparty/libsrtp-2-fit/config_in.h
new file mode 100644
index 000000000..31e6ffe38
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/config_in.h
@@ -0,0 +1,196 @@
+/* config_in.h.  Generated from configure.ac by autoheader.  */
+
+/* Define if building universal (internal helper macro) */
+#undef AC_APPLE_UNIVERSAL_BUILD
+
+/* Define if building for a CISC machine (e.g. Intel). */
+#undef CPU_CISC
+
+/* Define if building for a RISC machine (assume slow byte access). */
+#undef CPU_RISC
+
+/* Define to enabled debug logging for all mudules. */
+#undef ENABLE_DEBUG_LOGGING
+
+/* Logging statments will be writen to this file. */
+#undef ERR_REPORTING_FILE
+
+/* Define to redirect logging to stdout. */
+#undef ERR_REPORTING_STDOUT
+
+/* Define this to use AES-GCM. */
+#undef GCM
+
+/* Define to 1 if you have the <arpa/inet.h> header file. */
+#undef HAVE_ARPA_INET_H
+
+/* Define to 1 if you have the <byteswap.h> header file. */
+#undef HAVE_BYTESWAP_H
+
+/* Define to 1 if you have the `inet_aton' function. */
+#undef HAVE_INET_ATON
+
+/* Define to 1 if the system has the type `int16_t'. */
+#undef HAVE_INT16_T
+
+/* Define to 1 if the system has the type `int32_t'. */
+#undef HAVE_INT32_T
+
+/* Define to 1 if the system has the type `int8_t'. */
+#undef HAVE_INT8_T
+
+/* Define to 1 if you have the <inttypes.h> header file. */
+#undef HAVE_INTTYPES_H
+
+/* Define to 1 if you have the `dl' library (-ldl). */
+#undef HAVE_LIBDL
+
+/* Define to 1 if you have the `nspr4' library (-lnspr4). */
+#undef HAVE_LIBNSPR4
+
+/* Define to 1 if you have the `nss3' library (-lnss3). */
+#undef HAVE_LIBNSS3
+
+/* Define to 1 if you have the `socket' library (-lsocket). */
+#undef HAVE_LIBSOCKET
+
+/* Define to 1 if you have the `z' library (-lz). */
+#undef HAVE_LIBZ
+
+/* Define to 1 if you have the <machine/types.h> header file. */
+#undef HAVE_MACHINE_TYPES_H
+
+/* Define to 1 if you have the <memory.h> header file. */
+#undef HAVE_MEMORY_H
+
+/* Define to 1 if you have the <netinet/in.h> header file. */
+#undef HAVE_NETINET_IN_H
+
+/* Define to 1 if you have the <nss.h> header file. */
+#undef HAVE_NSS_H
+
+/* Define to 1 if you have the `winpcap' library (-lwpcap) */
+#undef HAVE_PCAP
+
+/* Define to 1 if you have the `sigaction' function. */
+#undef HAVE_SIGACTION
+
+/* Define to 1 if you have the `socket' function. */
+#undef HAVE_SOCKET
+
+/* Define to 1 if you have the <stdint.h> header file. */
+#undef HAVE_STDINT_H
+
+/* Define to 1 if you have the <stdlib.h> header file. */
+#undef HAVE_STDLIB_H
+
+/* Define to 1 if you have the <strings.h> header file. */
+#undef HAVE_STRINGS_H
+
+/* Define to 1 if you have the <string.h> header file. */
+#undef HAVE_STRING_H
+
+/* Define to 1 if you have the <sys/int_types.h> header file. */
+#undef HAVE_SYS_INT_TYPES_H
+
+/* Define to 1 if you have the <sys/socket.h> header file. */
+#undef HAVE_SYS_SOCKET_H
+
+/* Define to 1 if you have the <sys/stat.h> header file. */
+#undef HAVE_SYS_STAT_H
+
+/* Define to 1 if you have the <sys/types.h> header file. */
+#undef HAVE_SYS_TYPES_H
+
+/* Define to 1 if you have the <sys/uio.h> header file. */
+#undef HAVE_SYS_UIO_H
+
+/* Define to 1 if the system has the type `uint16_t'. */
+#undef HAVE_UINT16_T
+
+/* Define to 1 if the system has the type `uint32_t'. */
+#undef HAVE_UINT32_T
+
+/* Define to 1 if the system has the type `uint64_t'. */
+#undef HAVE_UINT64_T
+
+/* Define to 1 if the system has the type `uint8_t'. */
+#undef HAVE_UINT8_T
+
+/* Define to 1 if you have the <unistd.h> header file. */
+#undef HAVE_UNISTD_H
+
+/* Define to 1 if you have the `usleep' function. */
+#undef HAVE_USLEEP
+
+/* Define to 1 if you have the <windows.h> header file. */
+#undef HAVE_WINDOWS_H
+
+/* Define to 1 if you have the <winsock2.h> header file. */
+#undef HAVE_WINSOCK2_H
+
+/* Define to use X86 inlined assembly code */
+#undef HAVE_X86
+
+/* Define this to use NSS crypto. */
+#undef NSS
+
+/* Define this to use OpenSSL crypto. */
+#undef OPENSSL
+
+/* Define this if OPENSSL_cleanse is broken. */
+#undef OPENSSL_CLEANSE_BROKEN
+
+/* Define this to use OpenSSL KDF for SRTP. */
+#undef OPENSSL_KDF
+
+/* Define to the address where bug reports for this package should be sent. */
+#undef PACKAGE_BUGREPORT
+
+/* Define to the full name of this package. */
+#undef PACKAGE_NAME
+
+/* Define to the full name and version of this package. */
+#undef PACKAGE_STRING
+
+/* Define to the one symbol short name of this package. */
+#undef PACKAGE_TARNAME
+
+/* Define to the home page for this package. */
+#undef PACKAGE_URL
+
+/* Define to the version of this package. */
+#undef PACKAGE_VERSION
+
+/* The size of `unsigned long', as computed by sizeof. */
+#undef SIZEOF_UNSIGNED_LONG
+
+/* The size of `unsigned long long', as computed by sizeof. */
+#undef SIZEOF_UNSIGNED_LONG_LONG
+
+/* Define to 1 if you have the ANSI C header files. */
+#undef STDC_HEADERS
+
+/* Define WORDS_BIGENDIAN to 1 if your processor stores words with the most
+   significant byte first (like Motorola and SPARC, unlike Intel). */
+#if defined AC_APPLE_UNIVERSAL_BUILD
+# if defined __BIG_ENDIAN__
+#  define WORDS_BIGENDIAN 1
+# endif
+#else
+# ifndef WORDS_BIGENDIAN
+#  undef WORDS_BIGENDIAN
+# endif
+#endif
+
+/* Define to empty if `const' does not conform to ANSI C. */
+#undef const
+
+/* Define to `__inline__' or `__inline' if that's what the C compiler
+   calls it, or to nothing if 'inline' is not supported under any name.  */
+#ifndef __cplusplus
+#undef inline
+#endif
+
+/* Define to `unsigned int' if <sys/types.h> does not define. */
+#undef size_t
diff --git a/trunk/3rdparty/libsrtp-2-fit/config_in_cmake.h b/trunk/3rdparty/libsrtp-2-fit/config_in_cmake.h
new file mode 100644
index 000000000..25daeb379
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/config_in_cmake.h
@@ -0,0 +1,115 @@
+/* clang-format off */
+
+/* Define to the full name and version of this package. */
+#cmakedefine PACKAGE_VERSION "@PACKAGE_VERSION@"
+
+/* Define to the version of this package. */
+#cmakedefine PACKAGE_STRING "@PACKAGE_STRING@"
+
+/* Define to enabled debug logging for all mudules. */
+#cmakedefine ENABLE_DEBUG_LOGGING 1
+
+/* Logging statments will be writen to this file. */
+#cmakedefine ERR_REPORTING_FILE "@ERR_REPORTING_FILE@"
+
+/* Define to redirect logging to stdout. */
+#cmakedefine ERR_REPORTING_STDOUT 1
+
+/* Define this to use OpenSSL crypto. */
+#cmakedefine OPENSSL 1
+
+/* Define this to use AES-GCM. */
+#cmakedefine GCM 1
+
+/* Define if building for a CISC machine (e.g. Intel). */
+#define CPU_CISC 1
+
+/* Define if building for a RISC machine (assume slow byte access). */
+/* #undef CPU_RISC */
+
+/* Define to use X86 inlined assembly code */
+#cmakedefine HAVE_X86 1
+
+/* Define WORDS_BIGENDIAN to 1 if your processor stores words with the most
+ significant byte first (like Motorola and SPARC, unlike Intel). */
+#cmakedefine WORDS_BIGENDIAN 1
+
+/* Define to 1 if you have the <arpa/inet.h> header file. */
+#cmakedefine HAVE_ARPA_INET_H 1
+
+/* Define to 1 if you have the <byteswap.h> header file. */
+#cmakedefine HAVE_BYTESWAP_H 1
+
+/* Define to 1 if you have the <inttypes.h> header file. */
+#cmakedefine HAVE_INTTYPES_H 1
+
+/* Define to 1 if you have the <machine/types.h> header file. */
+#cmakedefine HAVE_MACHINE_TYPES_H 1
+
+/* Define to 1 if you have the <netinet/in.h> header file. */
+#cmakedefine HAVE_NETINET_IN_H 1
+
+/* Define to 1 if you have the <stdint.h> header file. */
+#cmakedefine HAVE_STDINT_H 1
+
+/* Define to 1 if you have the <stdlib.h> header file. */
+#cmakedefine HAVE_STDLIB_H 1
+
+/* Define to 1 if you have the <sys/int_types.h> header file. */
+#cmakedefine HAVE_SYS_INT_TYPES_H 1
+
+/* Define to 1 if you have the <sys/socket.h> header file. */
+#cmakedefine HAVE_SYS_SOCKET_H 1
+
+/* Define to 1 if you have the <sys/types.h> header file. */
+#cmakedefine HAVE_SYS_TYPES_H 1
+
+/* Define to 1 if you have the <unistd.h> header file. */
+#cmakedefine HAVE_UNISTD_H 1
+
+/* Define to 1 if you have the <windows.h> header file. */
+#cmakedefine HAVE_WINDOWS_H 1
+
+/* Define to 1 if you have the <winsock2.h> header file. */
+#cmakedefine HAVE_WINSOCK2_H 1
+
+/* Define to 1 if you have the `inet_aton' function. */
+#cmakedefine HAVE_INET_ATON 1
+
+/* Define to 1 if you have the `sigaction' function. */
+#cmakedefine HAVE_SIGACTION 1
+
+/* Define to 1 if you have the `usleep' function. */
+#cmakedefine HAVE_USLEEP 1
+
+/* Define to 1 if the system has the type `uint8_t'. */
+#cmakedefine HAVE_UINT8_T 1
+
+/* Define to 1 if the system has the type `uint16_t'. */
+#cmakedefine HAVE_UINT16_T 1
+
+/* Define to 1 if the system has the type `uint32_t'. */
+#cmakedefine HAVE_UINT32_T 1
+
+/* Define to 1 if the system has the type `uint64_t'. */
+#cmakedefine HAVE_UINT64_T 1
+
+/* Define to 1 if the system has the type `int32_t'. */
+#cmakedefine HAVE_INT32_T 1
+
+/* The size of `unsigned long', as computed by sizeof. */
+@SIZEOF_UNSIGNED_LONG_CODE@
+
+/* The size of `unsigned long long', as computed by sizeof. */
+@SIZEOF_UNSIGNED_LONG_LONG_CODE@
+
+/* Define inline to what is supported by compiler  */
+#cmakedefine HAVE_INLINE 1
+#cmakedefine HAVE___INLINE 1
+#ifndef HAVE_INLINE
+  #ifdef HAVE___INLINE
+    #define inline __inline
+  #else
+    #define inline
+  #endif
+#endif
diff --git a/trunk/3rdparty/libsrtp-2-fit/configure b/trunk/3rdparty/libsrtp-2-fit/configure
new file mode 100755
index 000000000..93c9840e8
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/configure
@@ -0,0 +1,7782 @@
+#! /bin/sh
+# Guess values for system-dependent variables and create Makefiles.
+# Generated by GNU Autoconf 2.69 for libsrtp2 2.3.0.
+#
+# Report bugs to <https://github.com/cisco/libsrtp/issues>.
+#
+#
+# Copyright (C) 1992-1996, 1998-2012 Free Software Foundation, Inc.
+#
+#
+# This configure script is free software; the Free Software Foundation
+# gives unlimited permission to copy, distribute and modify it.
+## -------------------- ##
+## M4sh Initialization. ##
+## -------------------- ##
+
+# Be more Bourne compatible
+DUALCASE=1; export DUALCASE # for MKS sh
+if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then :
+  emulate sh
+  NULLCMD=:
+  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
+  # is contrary to our usage.  Disable this feature.
+  alias -g '${1+"$@"}'='"$@"'
+  setopt NO_GLOB_SUBST
+else
+  case `(set -o) 2>/dev/null` in #(
+  *posix*) :
+    set -o posix ;; #(
+  *) :
+     ;;
+esac
+fi
+
+
+as_nl='
+'
+export as_nl
+# Printing a long string crashes Solaris 7 /usr/bin/printf.
+as_echo='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
+as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo
+as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo$as_echo
+# Prefer a ksh shell builtin over an external printf program on Solaris,
+# but without wasting forks for bash or zsh.
+if test -z "$BASH_VERSION$ZSH_VERSION" \
+    && (test "X`print -r -- $as_echo`" = "X$as_echo") 2>/dev/null; then
+  as_echo='print -r --'
+  as_echo_n='print -rn --'
+elif (test "X`printf %s $as_echo`" = "X$as_echo") 2>/dev/null; then
+  as_echo='printf %s\n'
+  as_echo_n='printf %s'
+else
+  if test "X`(/usr/ucb/echo -n -n $as_echo) 2>/dev/null`" = "X-n $as_echo"; then
+    as_echo_body='eval /usr/ucb/echo -n "$1$as_nl"'
+    as_echo_n='/usr/ucb/echo -n'
+  else
+    as_echo_body='eval expr "X$1" : "X\\(.*\\)"'
+    as_echo_n_body='eval
+      arg=$1;
+      case $arg in #(
+      *"$as_nl"*)
+	expr "X$arg" : "X\\(.*\\)$as_nl";
+	arg=`expr "X$arg" : ".*$as_nl\\(.*\\)"`;;
+      esac;
+      expr "X$arg" : "X\\(.*\\)" | tr -d "$as_nl"
+    '
+    export as_echo_n_body
+    as_echo_n='sh -c $as_echo_n_body as_echo'
+  fi
+  export as_echo_body
+  as_echo='sh -c $as_echo_body as_echo'
+fi
+
+# The user is always right.
+if test "${PATH_SEPARATOR+set}" != set; then
+  PATH_SEPARATOR=:
+  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
+    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
+      PATH_SEPARATOR=';'
+  }
+fi
+
+
+# IFS
+# We need space, tab and new line, in precisely that order.  Quoting is
+# there to prevent editors from complaining about space-tab.
+# (If _AS_PATH_WALK were called with IFS unset, it would disable word
+# splitting by setting IFS to empty value.)
+IFS=" ""	$as_nl"
+
+# Find who we are.  Look in the path if we contain no directory separator.
+as_myself=
+case $0 in #((
+  *[\\/]* ) as_myself=$0 ;;
+  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break
+  done
+IFS=$as_save_IFS
+
+     ;;
+esac
+# We did not find ourselves, most probably we were run as `sh COMMAND'
+# in which case we are not to be found in the path.
+if test "x$as_myself" = x; then
+  as_myself=$0
+fi
+if test ! -f "$as_myself"; then
+  $as_echo "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
+  exit 1
+fi
+
+# Unset variables that we do not need and which cause bugs (e.g. in
+# pre-3.0 UWIN ksh).  But do not cause bugs in bash 2.01; the "|| exit 1"
+# suppresses any "Segmentation fault" message there.  '((' could
+# trigger a bug in pdksh 5.2.14.
+for as_var in BASH_ENV ENV MAIL MAILPATH
+do eval test x\${$as_var+set} = xset \
+  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
+done
+PS1='$ '
+PS2='> '
+PS4='+ '
+
+# NLS nuisances.
+LC_ALL=C
+export LC_ALL
+LANGUAGE=C
+export LANGUAGE
+
+# CDPATH.
+(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
+
+# Use a proper internal environment variable to ensure we don't fall
+  # into an infinite loop, continuously re-executing ourselves.
+  if test x"${_as_can_reexec}" != xno && test "x$CONFIG_SHELL" != x; then
+    _as_can_reexec=no; export _as_can_reexec;
+    # We cannot yet assume a decent shell, so we have to provide a
+# neutralization value for shells without unset; and this also
+# works around shells that cannot unset nonexistent variables.
+# Preserve -v and -x to the replacement shell.
+BASH_ENV=/dev/null
+ENV=/dev/null
+(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
+case $- in # ((((
+  *v*x* | *x*v* ) as_opts=-vx ;;
+  *v* ) as_opts=-v ;;
+  *x* ) as_opts=-x ;;
+  * ) as_opts= ;;
+esac
+exec $CONFIG_SHELL $as_opts "$as_myself" ${1+"$@"}
+# Admittedly, this is quite paranoid, since all the known shells bail
+# out after a failed `exec'.
+$as_echo "$0: could not re-execute with $CONFIG_SHELL" >&2
+as_fn_exit 255
+  fi
+  # We don't want this to propagate to other subprocesses.
+          { _as_can_reexec=; unset _as_can_reexec;}
+if test "x$CONFIG_SHELL" = x; then
+  as_bourne_compatible="if test -n \"\${ZSH_VERSION+set}\" && (emulate sh) >/dev/null 2>&1; then :
+  emulate sh
+  NULLCMD=:
+  # Pre-4.2 versions of Zsh do word splitting on \${1+\"\$@\"}, which
+  # is contrary to our usage.  Disable this feature.
+  alias -g '\${1+\"\$@\"}'='\"\$@\"'
+  setopt NO_GLOB_SUBST
+else
+  case \`(set -o) 2>/dev/null\` in #(
+  *posix*) :
+    set -o posix ;; #(
+  *) :
+     ;;
+esac
+fi
+"
+  as_required="as_fn_return () { (exit \$1); }
+as_fn_success () { as_fn_return 0; }
+as_fn_failure () { as_fn_return 1; }
+as_fn_ret_success () { return 0; }
+as_fn_ret_failure () { return 1; }
+
+exitcode=0
+as_fn_success || { exitcode=1; echo as_fn_success failed.; }
+as_fn_failure && { exitcode=1; echo as_fn_failure succeeded.; }
+as_fn_ret_success || { exitcode=1; echo as_fn_ret_success failed.; }
+as_fn_ret_failure && { exitcode=1; echo as_fn_ret_failure succeeded.; }
+if ( set x; as_fn_ret_success y && test x = \"\$1\" ); then :
+
+else
+  exitcode=1; echo positional parameters were not saved.
+fi
+test x\$exitcode = x0 || exit 1
+test -x / || exit 1"
+  as_suggested="  as_lineno_1=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_1a=\$LINENO
+  as_lineno_2=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_2a=\$LINENO
+  eval 'test \"x\$as_lineno_1'\$as_run'\" != \"x\$as_lineno_2'\$as_run'\" &&
+  test \"x\`expr \$as_lineno_1'\$as_run' + 1\`\" = \"x\$as_lineno_2'\$as_run'\"' || exit 1
+test \$(( 1 + 1 )) = 2 || exit 1"
+  if (eval "$as_required") 2>/dev/null; then :
+  as_have_required=yes
+else
+  as_have_required=no
+fi
+  if test x$as_have_required = xyes && (eval "$as_suggested") 2>/dev/null; then :
+
+else
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+as_found=false
+for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+  as_found=:
+  case $as_dir in #(
+	 /*)
+	   for as_base in sh bash ksh sh5; do
+	     # Try only shells that exist, to save several forks.
+	     as_shell=$as_dir/$as_base
+	     if { test -f "$as_shell" || test -f "$as_shell.exe"; } &&
+		    { $as_echo "$as_bourne_compatible""$as_required" | as_run=a "$as_shell"; } 2>/dev/null; then :
+  CONFIG_SHELL=$as_shell as_have_required=yes
+		   if { $as_echo "$as_bourne_compatible""$as_suggested" | as_run=a "$as_shell"; } 2>/dev/null; then :
+  break 2
+fi
+fi
+	   done;;
+       esac
+  as_found=false
+done
+$as_found || { if { test -f "$SHELL" || test -f "$SHELL.exe"; } &&
+	      { $as_echo "$as_bourne_compatible""$as_required" | as_run=a "$SHELL"; } 2>/dev/null; then :
+  CONFIG_SHELL=$SHELL as_have_required=yes
+fi; }
+IFS=$as_save_IFS
+
+
+      if test "x$CONFIG_SHELL" != x; then :
+  export CONFIG_SHELL
+             # We cannot yet assume a decent shell, so we have to provide a
+# neutralization value for shells without unset; and this also
+# works around shells that cannot unset nonexistent variables.
+# Preserve -v and -x to the replacement shell.
+BASH_ENV=/dev/null
+ENV=/dev/null
+(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
+case $- in # ((((
+  *v*x* | *x*v* ) as_opts=-vx ;;
+  *v* ) as_opts=-v ;;
+  *x* ) as_opts=-x ;;
+  * ) as_opts= ;;
+esac
+exec $CONFIG_SHELL $as_opts "$as_myself" ${1+"$@"}
+# Admittedly, this is quite paranoid, since all the known shells bail
+# out after a failed `exec'.
+$as_echo "$0: could not re-execute with $CONFIG_SHELL" >&2
+exit 255
+fi
+
+    if test x$as_have_required = xno; then :
+  $as_echo "$0: This script requires a shell more modern than all"
+  $as_echo "$0: the shells that I found on your system."
+  if test x${ZSH_VERSION+set} = xset ; then
+    $as_echo "$0: In particular, zsh $ZSH_VERSION has bugs and should"
+    $as_echo "$0: be upgraded to zsh 4.3.4 or later."
+  else
+    $as_echo "$0: Please tell bug-autoconf@gnu.org and
+$0: https://github.com/cisco/libsrtp/issues about your
+$0: system, including any error possibly output before this
+$0: message. Then install a modern shell, or manually run
+$0: the script under such a shell if you do have one."
+  fi
+  exit 1
+fi
+fi
+fi
+SHELL=${CONFIG_SHELL-/bin/sh}
+export SHELL
+# Unset more variables known to interfere with behavior of common tools.
+CLICOLOR_FORCE= GREP_OPTIONS=
+unset CLICOLOR_FORCE GREP_OPTIONS
+
+## --------------------- ##
+## M4sh Shell Functions. ##
+## --------------------- ##
+# as_fn_unset VAR
+# ---------------
+# Portably unset VAR.
+as_fn_unset ()
+{
+  { eval $1=; unset $1;}
+}
+as_unset=as_fn_unset
+
+# as_fn_set_status STATUS
+# -----------------------
+# Set $? to STATUS, without forking.
+as_fn_set_status ()
+{
+  return $1
+} # as_fn_set_status
+
+# as_fn_exit STATUS
+# -----------------
+# Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
+as_fn_exit ()
+{
+  set +e
+  as_fn_set_status $1
+  exit $1
+} # as_fn_exit
+
+# as_fn_mkdir_p
+# -------------
+# Create "$as_dir" as a directory, including parents if necessary.
+as_fn_mkdir_p ()
+{
+
+  case $as_dir in #(
+  -*) as_dir=./$as_dir;;
+  esac
+  test -d "$as_dir" || eval $as_mkdir_p || {
+    as_dirs=
+    while :; do
+      case $as_dir in #(
+      *\'*) as_qdir=`$as_echo "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
+      *) as_qdir=$as_dir;;
+      esac
+      as_dirs="'$as_qdir' $as_dirs"
+      as_dir=`$as_dirname -- "$as_dir" ||
+$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
+	 X"$as_dir" : 'X\(//\)[^/]' \| \
+	 X"$as_dir" : 'X\(//\)$' \| \
+	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
+$as_echo X"$as_dir" |
+    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\/\)[^/].*/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\/\)$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\).*/{
+	    s//\1/
+	    q
+	  }
+	  s/.*/./; q'`
+      test -d "$as_dir" && break
+    done
+    test -z "$as_dirs" || eval "mkdir $as_dirs"
+  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
+
+
+} # as_fn_mkdir_p
+
+# as_fn_executable_p FILE
+# -----------------------
+# Test if FILE is an executable regular file.
+as_fn_executable_p ()
+{
+  test -f "$1" && test -x "$1"
+} # as_fn_executable_p
+# as_fn_append VAR VALUE
+# ----------------------
+# Append the text in VALUE to the end of the definition contained in VAR. Take
+# advantage of any shell optimizations that allow amortized linear growth over
+# repeated appends, instead of the typical quadratic growth present in naive
+# implementations.
+if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null; then :
+  eval 'as_fn_append ()
+  {
+    eval $1+=\$2
+  }'
+else
+  as_fn_append ()
+  {
+    eval $1=\$$1\$2
+  }
+fi # as_fn_append
+
+# as_fn_arith ARG...
+# ------------------
+# Perform arithmetic evaluation on the ARGs, and store the result in the
+# global $as_val. Take advantage of shells that can avoid forks. The arguments
+# must be portable across $(()) and expr.
+if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null; then :
+  eval 'as_fn_arith ()
+  {
+    as_val=$(( $* ))
+  }'
+else
+  as_fn_arith ()
+  {
+    as_val=`expr "$@" || test $? -eq 1`
+  }
+fi # as_fn_arith
+
+
+# as_fn_error STATUS ERROR [LINENO LOG_FD]
+# ----------------------------------------
+# Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are
+# provided, also output the error to LOG_FD, referencing LINENO. Then exit the
+# script with STATUS, using 1 if that was 0.
+as_fn_error ()
+{
+  as_status=$1; test $as_status -eq 0 && as_status=1
+  if test "$4"; then
+    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+    $as_echo "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
+  fi
+  $as_echo "$as_me: error: $2" >&2
+  as_fn_exit $as_status
+} # as_fn_error
+
+if expr a : '\(a\)' >/dev/null 2>&1 &&
+   test "X`expr 00001 : '.*\(...\)'`" = X001; then
+  as_expr=expr
+else
+  as_expr=false
+fi
+
+if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
+  as_basename=basename
+else
+  as_basename=false
+fi
+
+if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
+  as_dirname=dirname
+else
+  as_dirname=false
+fi
+
+as_me=`$as_basename -- "$0" ||
+$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
+	 X"$0" : 'X\(//\)$' \| \
+	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
+$as_echo X/"$0" |
+    sed '/^.*\/\([^/][^/]*\)\/*$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\/\(\/\/\)$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\/\(\/\).*/{
+	    s//\1/
+	    q
+	  }
+	  s/.*/./; q'`
+
+# Avoid depending upon Character Ranges.
+as_cr_letters='abcdefghijklmnopqrstuvwxyz'
+as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
+as_cr_Letters=$as_cr_letters$as_cr_LETTERS
+as_cr_digits='0123456789'
+as_cr_alnum=$as_cr_Letters$as_cr_digits
+
+
+  as_lineno_1=$LINENO as_lineno_1a=$LINENO
+  as_lineno_2=$LINENO as_lineno_2a=$LINENO
+  eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2'$as_run'" &&
+  test "x`expr $as_lineno_1'$as_run' + 1`" = "x$as_lineno_2'$as_run'"' || {
+  # Blame Lee E. McMahon (1931-1989) for sed's syntax.  :-)
+  sed -n '
+    p
+    /[$]LINENO/=
+  ' <$as_myself |
+    sed '
+      s/[$]LINENO.*/&-/
+      t lineno
+      b
+      :lineno
+      N
+      :loop
+      s/[$]LINENO\([^'$as_cr_alnum'_].*\n\)\(.*\)/\2\1\2/
+      t loop
+      s/-\n.*//
+    ' >$as_me.lineno &&
+  chmod +x "$as_me.lineno" ||
+    { $as_echo "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2; as_fn_exit 1; }
+
+  # If we had to re-execute with $CONFIG_SHELL, we're ensured to have
+  # already done that, so ensure we don't try to do so again and fall
+  # in an infinite loop.  This has already happened in practice.
+  _as_can_reexec=no; export _as_can_reexec
+  # Don't try to exec as it changes $[0], causing all sort of problems
+  # (the dirname of $[0] is not the place where we might find the
+  # original and so on.  Autoconf is especially sensitive to this).
+  . "./$as_me.lineno"
+  # Exit status is that of the last command.
+  exit
+}
+
+ECHO_C= ECHO_N= ECHO_T=
+case `echo -n x` in #(((((
+-n*)
+  case `echo 'xy\c'` in
+  *c*) ECHO_T='	';;	# ECHO_T is single tab character.
+  xy)  ECHO_C='\c';;
+  *)   echo `echo ksh88 bug on AIX 6.1` > /dev/null
+       ECHO_T='	';;
+  esac;;
+*)
+  ECHO_N='-n';;
+esac
+
+rm -f conf$$ conf$$.exe conf$$.file
+if test -d conf$$.dir; then
+  rm -f conf$$.dir/conf$$.file
+else
+  rm -f conf$$.dir
+  mkdir conf$$.dir 2>/dev/null
+fi
+if (echo >conf$$.file) 2>/dev/null; then
+  if ln -s conf$$.file conf$$ 2>/dev/null; then
+    as_ln_s='ln -s'
+    # ... but there are two gotchas:
+    # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail.
+    # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable.
+    # In both cases, we have to default to `cp -pR'.
+    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
+      as_ln_s='cp -pR'
+  elif ln conf$$.file conf$$ 2>/dev/null; then
+    as_ln_s=ln
+  else
+    as_ln_s='cp -pR'
+  fi
+else
+  as_ln_s='cp -pR'
+fi
+rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
+rmdir conf$$.dir 2>/dev/null
+
+if mkdir -p . 2>/dev/null; then
+  as_mkdir_p='mkdir -p "$as_dir"'
+else
+  test -d ./-p && rmdir ./-p
+  as_mkdir_p=false
+fi
+
+as_test_x='test -x'
+as_executable_p=as_fn_executable_p
+
+# Sed expression to map a string onto a valid CPP name.
+as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'"
+
+# Sed expression to map a string onto a valid variable name.
+as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'"
+
+
+test -n "$DJDIR" || exec 7<&0 </dev/null
+exec 6>&1
+
+# Name of the host.
+# hostname on some systems (SVR3.2, old GNU/Linux) returns a bogus exit status,
+# so uname gets run too.
+ac_hostname=`(hostname || uname -n) 2>/dev/null | sed 1q`
+
+#
+# Initializations.
+#
+ac_default_prefix=/usr/local
+ac_clean_files=
+ac_config_libobj_dir=.
+LIBOBJS=
+cross_compiling=no
+subdirs=
+MFLAGS=
+MAKEFLAGS=
+
+# Identity of this package.
+PACKAGE_NAME='libsrtp2'
+PACKAGE_TARNAME='libsrtp2'
+PACKAGE_VERSION='2.3.0'
+PACKAGE_STRING='libsrtp2 2.3.0'
+PACKAGE_BUGREPORT='https://github.com/cisco/libsrtp/issues'
+PACKAGE_URL=''
+
+# Factoring default headers for most tests.
+ac_includes_default="\
+#include <stdio.h>
+#ifdef HAVE_SYS_TYPES_H
+# include <sys/types.h>
+#endif
+#ifdef HAVE_SYS_STAT_H
+# include <sys/stat.h>
+#endif
+#ifdef STDC_HEADERS
+# include <stdlib.h>
+# include <stddef.h>
+#else
+# ifdef HAVE_STDLIB_H
+#  include <stdlib.h>
+# endif
+#endif
+#ifdef HAVE_STRING_H
+# if !defined STDC_HEADERS && defined HAVE_MEMORY_H
+#  include <memory.h>
+# endif
+# include <string.h>
+#endif
+#ifdef HAVE_STRINGS_H
+# include <strings.h>
+#endif
+#ifdef HAVE_INTTYPES_H
+# include <inttypes.h>
+#endif
+#ifdef HAVE_STDINT_H
+# include <stdint.h>
+#endif
+#ifdef HAVE_UNISTD_H
+# include <unistd.h>
+#endif"
+
+ac_subst_vars='LTLIBOBJS
+LIBOBJS
+PCAP_LIB
+HAVE_PCAP
+HMAC_OBJS
+AES_ICM_OBJS
+nss_LIBS
+nss_CFLAGS
+CRYPTO_LIBDIR
+USE_EXTERNAL_CRYPTO
+crypto_LIBS
+crypto_CFLAGS
+PKG_CONFIG_LIBDIR
+PKG_CONFIG_PATH
+PKG_CONFIG
+EXE
+host_os
+host_vendor
+host_cpu
+host
+build_os
+build_vendor
+build_cpu
+build
+EGREP
+GREP
+SED
+INSTALL_DATA
+INSTALL_SCRIPT
+INSTALL_PROGRAM
+RANLIB
+ac_ct_AR
+AR
+EXTRA_CFLAGS
+ac_ct_CXX
+CXXFLAGS
+CXX
+CPP
+OBJEXT
+EXEEXT
+ac_ct_CC
+CPPFLAGS
+LDFLAGS
+CFLAGS
+CC
+target_alias
+host_alias
+build_alias
+LIBS
+ECHO_T
+ECHO_N
+ECHO_C
+DEFS
+mandir
+localedir
+libdir
+psdir
+pdfdir
+dvidir
+htmldir
+infodir
+docdir
+oldincludedir
+includedir
+runstatedir
+localstatedir
+sharedstatedir
+sysconfdir
+datadir
+datarootdir
+libexecdir
+sbindir
+bindir
+program_transform_name
+prefix
+exec_prefix
+PACKAGE_URL
+PACKAGE_BUGREPORT
+PACKAGE_STRING
+PACKAGE_VERSION
+PACKAGE_TARNAME
+PACKAGE_NAME
+PATH_SEPARATOR
+SHELL'
+ac_subst_files=''
+ac_user_opts='
+enable_option_checking
+enable_debug_logging
+enable_openssl
+enable_nss
+with_openssl_dir
+enable_openssl_kdf
+with_nss_dir
+enable_pcap
+enable_log_stdout
+with_log_file
+'
+      ac_precious_vars='build_alias
+host_alias
+target_alias
+CC
+CFLAGS
+LDFLAGS
+LIBS
+CPPFLAGS
+CPP
+CXX
+CXXFLAGS
+CCC
+EXTRA_CFLAGS
+PKG_CONFIG
+PKG_CONFIG_PATH
+PKG_CONFIG_LIBDIR
+crypto_CFLAGS
+crypto_LIBS
+nss_CFLAGS
+nss_LIBS'
+
+
+# Initialize some variables set by options.
+ac_init_help=
+ac_init_version=false
+ac_unrecognized_opts=
+ac_unrecognized_sep=
+# The variables have the same names as the options, with
+# dashes changed to underlines.
+cache_file=/dev/null
+exec_prefix=NONE
+no_create=
+no_recursion=
+prefix=NONE
+program_prefix=NONE
+program_suffix=NONE
+program_transform_name=s,x,x,
+silent=
+site=
+srcdir=
+verbose=
+x_includes=NONE
+x_libraries=NONE
+
+# Installation directory options.
+# These are left unexpanded so users can "make install exec_prefix=/foo"
+# and all the variables that are supposed to be based on exec_prefix
+# by default will actually change.
+# Use braces instead of parens because sh, perl, etc. also accept them.
+# (The list follows the same order as the GNU Coding Standards.)
+bindir='${exec_prefix}/bin'
+sbindir='${exec_prefix}/sbin'
+libexecdir='${exec_prefix}/libexec'
+datarootdir='${prefix}/share'
+datadir='${datarootdir}'
+sysconfdir='${prefix}/etc'
+sharedstatedir='${prefix}/com'
+localstatedir='${prefix}/var'
+runstatedir='${localstatedir}/run'
+includedir='${prefix}/include'
+oldincludedir='/usr/include'
+docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
+infodir='${datarootdir}/info'
+htmldir='${docdir}'
+dvidir='${docdir}'
+pdfdir='${docdir}'
+psdir='${docdir}'
+libdir='${exec_prefix}/lib'
+localedir='${datarootdir}/locale'
+mandir='${datarootdir}/man'
+
+ac_prev=
+ac_dashdash=
+for ac_option
+do
+  # If the previous option needs an argument, assign it.
+  if test -n "$ac_prev"; then
+    eval $ac_prev=\$ac_option
+    ac_prev=
+    continue
+  fi
+
+  case $ac_option in
+  *=?*) ac_optarg=`expr "X$ac_option" : '[^=]*=\(.*\)'` ;;
+  *=)   ac_optarg= ;;
+  *)    ac_optarg=yes ;;
+  esac
+
+  # Accept the important Cygnus configure options, so we can diagnose typos.
+
+  case $ac_dashdash$ac_option in
+  --)
+    ac_dashdash=yes ;;
+
+  -bindir | --bindir | --bindi | --bind | --bin | --bi)
+    ac_prev=bindir ;;
+  -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*)
+    bindir=$ac_optarg ;;
+
+  -build | --build | --buil | --bui | --bu)
+    ac_prev=build_alias ;;
+  -build=* | --build=* | --buil=* | --bui=* | --bu=*)
+    build_alias=$ac_optarg ;;
+
+  -cache-file | --cache-file | --cache-fil | --cache-fi \
+  | --cache-f | --cache- | --cache | --cach | --cac | --ca | --c)
+    ac_prev=cache_file ;;
+  -cache-file=* | --cache-file=* | --cache-fil=* | --cache-fi=* \
+  | --cache-f=* | --cache-=* | --cache=* | --cach=* | --cac=* | --ca=* | --c=*)
+    cache_file=$ac_optarg ;;
+
+  --config-cache | -C)
+    cache_file=config.cache ;;
+
+  -datadir | --datadir | --datadi | --datad)
+    ac_prev=datadir ;;
+  -datadir=* | --datadir=* | --datadi=* | --datad=*)
+    datadir=$ac_optarg ;;
+
+  -datarootdir | --datarootdir | --datarootdi | --datarootd | --dataroot \
+  | --dataroo | --dataro | --datar)
+    ac_prev=datarootdir ;;
+  -datarootdir=* | --datarootdir=* | --datarootdi=* | --datarootd=* \
+  | --dataroot=* | --dataroo=* | --dataro=* | --datar=*)
+    datarootdir=$ac_optarg ;;
+
+  -disable-* | --disable-*)
+    ac_useropt=`expr "x$ac_option" : 'x-*disable-\(.*\)'`
+    # Reject names that are not valid shell variable names.
+    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
+      as_fn_error $? "invalid feature name: $ac_useropt"
+    ac_useropt_orig=$ac_useropt
+    ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
+    case $ac_user_opts in
+      *"
+"enable_$ac_useropt"
+"*) ;;
+      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--disable-$ac_useropt_orig"
+	 ac_unrecognized_sep=', ';;
+    esac
+    eval enable_$ac_useropt=no ;;
+
+  -docdir | --docdir | --docdi | --doc | --do)
+    ac_prev=docdir ;;
+  -docdir=* | --docdir=* | --docdi=* | --doc=* | --do=*)
+    docdir=$ac_optarg ;;
+
+  -dvidir | --dvidir | --dvidi | --dvid | --dvi | --dv)
+    ac_prev=dvidir ;;
+  -dvidir=* | --dvidir=* | --dvidi=* | --dvid=* | --dvi=* | --dv=*)
+    dvidir=$ac_optarg ;;
+
+  -enable-* | --enable-*)
+    ac_useropt=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'`
+    # Reject names that are not valid shell variable names.
+    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
+      as_fn_error $? "invalid feature name: $ac_useropt"
+    ac_useropt_orig=$ac_useropt
+    ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
+    case $ac_user_opts in
+      *"
+"enable_$ac_useropt"
+"*) ;;
+      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--enable-$ac_useropt_orig"
+	 ac_unrecognized_sep=', ';;
+    esac
+    eval enable_$ac_useropt=\$ac_optarg ;;
+
+  -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \
+  | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \
+  | --exec | --exe | --ex)
+    ac_prev=exec_prefix ;;
+  -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \
+  | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \
+  | --exec=* | --exe=* | --ex=*)
+    exec_prefix=$ac_optarg ;;
+
+  -gas | --gas | --ga | --g)
+    # Obsolete; use --with-gas.
+    with_gas=yes ;;
+
+  -help | --help | --hel | --he | -h)
+    ac_init_help=long ;;
+  -help=r* | --help=r* | --hel=r* | --he=r* | -hr*)
+    ac_init_help=recursive ;;
+  -help=s* | --help=s* | --hel=s* | --he=s* | -hs*)
+    ac_init_help=short ;;
+
+  -host | --host | --hos | --ho)
+    ac_prev=host_alias ;;
+  -host=* | --host=* | --hos=* | --ho=*)
+    host_alias=$ac_optarg ;;
+
+  -htmldir | --htmldir | --htmldi | --htmld | --html | --htm | --ht)
+    ac_prev=htmldir ;;
+  -htmldir=* | --htmldir=* | --htmldi=* | --htmld=* | --html=* | --htm=* \
+  | --ht=*)
+    htmldir=$ac_optarg ;;
+
+  -includedir | --includedir | --includedi | --included | --include \
+  | --includ | --inclu | --incl | --inc)
+    ac_prev=includedir ;;
+  -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \
+  | --includ=* | --inclu=* | --incl=* | --inc=*)
+    includedir=$ac_optarg ;;
+
+  -infodir | --infodir | --infodi | --infod | --info | --inf)
+    ac_prev=infodir ;;
+  -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*)
+    infodir=$ac_optarg ;;
+
+  -libdir | --libdir | --libdi | --libd)
+    ac_prev=libdir ;;
+  -libdir=* | --libdir=* | --libdi=* | --libd=*)
+    libdir=$ac_optarg ;;
+
+  -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \
+  | --libexe | --libex | --libe)
+    ac_prev=libexecdir ;;
+  -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \
+  | --libexe=* | --libex=* | --libe=*)
+    libexecdir=$ac_optarg ;;
+
+  -localedir | --localedir | --localedi | --localed | --locale)
+    ac_prev=localedir ;;
+  -localedir=* | --localedir=* | --localedi=* | --localed=* | --locale=*)
+    localedir=$ac_optarg ;;
+
+  -localstatedir | --localstatedir | --localstatedi | --localstated \
+  | --localstate | --localstat | --localsta | --localst | --locals)
+    ac_prev=localstatedir ;;
+  -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \
+  | --localstate=* | --localstat=* | --localsta=* | --localst=* | --locals=*)
+    localstatedir=$ac_optarg ;;
+
+  -mandir | --mandir | --mandi | --mand | --man | --ma | --m)
+    ac_prev=mandir ;;
+  -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*)
+    mandir=$ac_optarg ;;
+
+  -nfp | --nfp | --nf)
+    # Obsolete; use --without-fp.
+    with_fp=no ;;
+
+  -no-create | --no-create | --no-creat | --no-crea | --no-cre \
+  | --no-cr | --no-c | -n)
+    no_create=yes ;;
+
+  -no-recursion | --no-recursion | --no-recursio | --no-recursi \
+  | --no-recurs | --no-recur | --no-recu | --no-rec | --no-re | --no-r)
+    no_recursion=yes ;;
+
+  -oldincludedir | --oldincludedir | --oldincludedi | --oldincluded \
+  | --oldinclude | --oldinclud | --oldinclu | --oldincl | --oldinc \
+  | --oldin | --oldi | --old | --ol | --o)
+    ac_prev=oldincludedir ;;
+  -oldincludedir=* | --oldincludedir=* | --oldincludedi=* | --oldincluded=* \
+  | --oldinclude=* | --oldinclud=* | --oldinclu=* | --oldincl=* | --oldinc=* \
+  | --oldin=* | --oldi=* | --old=* | --ol=* | --o=*)
+    oldincludedir=$ac_optarg ;;
+
+  -prefix | --prefix | --prefi | --pref | --pre | --pr | --p)
+    ac_prev=prefix ;;
+  -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*)
+    prefix=$ac_optarg ;;
+
+  -program-prefix | --program-prefix | --program-prefi | --program-pref \
+  | --program-pre | --program-pr | --program-p)
+    ac_prev=program_prefix ;;
+  -program-prefix=* | --program-prefix=* | --program-prefi=* \
+  | --program-pref=* | --program-pre=* | --program-pr=* | --program-p=*)
+    program_prefix=$ac_optarg ;;
+
+  -program-suffix | --program-suffix | --program-suffi | --program-suff \
+  | --program-suf | --program-su | --program-s)
+    ac_prev=program_suffix ;;
+  -program-suffix=* | --program-suffix=* | --program-suffi=* \
+  | --program-suff=* | --program-suf=* | --program-su=* | --program-s=*)
+    program_suffix=$ac_optarg ;;
+
+  -program-transform-name | --program-transform-name \
+  | --program-transform-nam | --program-transform-na \
+  | --program-transform-n | --program-transform- \
+  | --program-transform | --program-transfor \
+  | --program-transfo | --program-transf \
+  | --program-trans | --program-tran \
+  | --progr-tra | --program-tr | --program-t)
+    ac_prev=program_transform_name ;;
+  -program-transform-name=* | --program-transform-name=* \
+  | --program-transform-nam=* | --program-transform-na=* \
+  | --program-transform-n=* | --program-transform-=* \
+  | --program-transform=* | --program-transfor=* \
+  | --program-transfo=* | --program-transf=* \
+  | --program-trans=* | --program-tran=* \
+  | --progr-tra=* | --program-tr=* | --program-t=*)
+    program_transform_name=$ac_optarg ;;
+
+  -pdfdir | --pdfdir | --pdfdi | --pdfd | --pdf | --pd)
+    ac_prev=pdfdir ;;
+  -pdfdir=* | --pdfdir=* | --pdfdi=* | --pdfd=* | --pdf=* | --pd=*)
+    pdfdir=$ac_optarg ;;
+
+  -psdir | --psdir | --psdi | --psd | --ps)
+    ac_prev=psdir ;;
+  -psdir=* | --psdir=* | --psdi=* | --psd=* | --ps=*)
+    psdir=$ac_optarg ;;
+
+  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
+  | -silent | --silent | --silen | --sile | --sil)
+    silent=yes ;;
+
+  -runstatedir | --runstatedir | --runstatedi | --runstated \
+  | --runstate | --runstat | --runsta | --runst | --runs \
+  | --run | --ru | --r)
+    ac_prev=runstatedir ;;
+  -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \
+  | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \
+  | --run=* | --ru=* | --r=*)
+    runstatedir=$ac_optarg ;;
+
+  -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb)
+    ac_prev=sbindir ;;
+  -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \
+  | --sbi=* | --sb=*)
+    sbindir=$ac_optarg ;;
+
+  -sharedstatedir | --sharedstatedir | --sharedstatedi \
+  | --sharedstated | --sharedstate | --sharedstat | --sharedsta \
+  | --sharedst | --shareds | --shared | --share | --shar \
+  | --sha | --sh)
+    ac_prev=sharedstatedir ;;
+  -sharedstatedir=* | --sharedstatedir=* | --sharedstatedi=* \
+  | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \
+  | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \
+  | --sha=* | --sh=*)
+    sharedstatedir=$ac_optarg ;;
+
+  -site | --site | --sit)
+    ac_prev=site ;;
+  -site=* | --site=* | --sit=*)
+    site=$ac_optarg ;;
+
+  -srcdir | --srcdir | --srcdi | --srcd | --src | --sr)
+    ac_prev=srcdir ;;
+  -srcdir=* | --srcdir=* | --srcdi=* | --srcd=* | --src=* | --sr=*)
+    srcdir=$ac_optarg ;;
+
+  -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \
+  | --syscon | --sysco | --sysc | --sys | --sy)
+    ac_prev=sysconfdir ;;
+  -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \
+  | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*)
+    sysconfdir=$ac_optarg ;;
+
+  -target | --target | --targe | --targ | --tar | --ta | --t)
+    ac_prev=target_alias ;;
+  -target=* | --target=* | --targe=* | --targ=* | --tar=* | --ta=* | --t=*)
+    target_alias=$ac_optarg ;;
+
+  -v | -verbose | --verbose | --verbos | --verbo | --verb)
+    verbose=yes ;;
+
+  -version | --version | --versio | --versi | --vers | -V)
+    ac_init_version=: ;;
+
+  -with-* | --with-*)
+    ac_useropt=`expr "x$ac_option" : 'x-*with-\([^=]*\)'`
+    # Reject names that are not valid shell variable names.
+    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
+      as_fn_error $? "invalid package name: $ac_useropt"
+    ac_useropt_orig=$ac_useropt
+    ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
+    case $ac_user_opts in
+      *"
+"with_$ac_useropt"
+"*) ;;
+      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--with-$ac_useropt_orig"
+	 ac_unrecognized_sep=', ';;
+    esac
+    eval with_$ac_useropt=\$ac_optarg ;;
+
+  -without-* | --without-*)
+    ac_useropt=`expr "x$ac_option" : 'x-*without-\(.*\)'`
+    # Reject names that are not valid shell variable names.
+    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
+      as_fn_error $? "invalid package name: $ac_useropt"
+    ac_useropt_orig=$ac_useropt
+    ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
+    case $ac_user_opts in
+      *"
+"with_$ac_useropt"
+"*) ;;
+      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--without-$ac_useropt_orig"
+	 ac_unrecognized_sep=', ';;
+    esac
+    eval with_$ac_useropt=no ;;
+
+  --x)
+    # Obsolete; use --with-x.
+    with_x=yes ;;
+
+  -x-includes | --x-includes | --x-include | --x-includ | --x-inclu \
+  | --x-incl | --x-inc | --x-in | --x-i)
+    ac_prev=x_includes ;;
+  -x-includes=* | --x-includes=* | --x-include=* | --x-includ=* | --x-inclu=* \
+  | --x-incl=* | --x-inc=* | --x-in=* | --x-i=*)
+    x_includes=$ac_optarg ;;
+
+  -x-libraries | --x-libraries | --x-librarie | --x-librari \
+  | --x-librar | --x-libra | --x-libr | --x-lib | --x-li | --x-l)
+    ac_prev=x_libraries ;;
+  -x-libraries=* | --x-libraries=* | --x-librarie=* | --x-librari=* \
+  | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*)
+    x_libraries=$ac_optarg ;;
+
+  -*) as_fn_error $? "unrecognized option: \`$ac_option'
+Try \`$0 --help' for more information"
+    ;;
+
+  *=*)
+    ac_envvar=`expr "x$ac_option" : 'x\([^=]*\)='`
+    # Reject names that are not valid shell variable names.
+    case $ac_envvar in #(
+      '' | [0-9]* | *[!_$as_cr_alnum]* )
+      as_fn_error $? "invalid variable name: \`$ac_envvar'" ;;
+    esac
+    eval $ac_envvar=\$ac_optarg
+    export $ac_envvar ;;
+
+  *)
+    # FIXME: should be removed in autoconf 3.0.
+    $as_echo "$as_me: WARNING: you should use --build, --host, --target" >&2
+    expr "x$ac_option" : ".*[^-._$as_cr_alnum]" >/dev/null &&
+      $as_echo "$as_me: WARNING: invalid host type: $ac_option" >&2
+    : "${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option}"
+    ;;
+
+  esac
+done
+
+if test -n "$ac_prev"; then
+  ac_option=--`echo $ac_prev | sed 's/_/-/g'`
+  as_fn_error $? "missing argument to $ac_option"
+fi
+
+if test -n "$ac_unrecognized_opts"; then
+  case $enable_option_checking in
+    no) ;;
+    fatal) as_fn_error $? "unrecognized options: $ac_unrecognized_opts" ;;
+    *)     $as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2 ;;
+  esac
+fi
+
+# Check all directory arguments for consistency.
+for ac_var in	exec_prefix prefix bindir sbindir libexecdir datarootdir \
+		datadir sysconfdir sharedstatedir localstatedir includedir \
+		oldincludedir docdir infodir htmldir dvidir pdfdir psdir \
+		libdir localedir mandir runstatedir
+do
+  eval ac_val=\$$ac_var
+  # Remove trailing slashes.
+  case $ac_val in
+    */ )
+      ac_val=`expr "X$ac_val" : 'X\(.*[^/]\)' \| "X$ac_val" : 'X\(.*\)'`
+      eval $ac_var=\$ac_val;;
+  esac
+  # Be sure to have absolute directory names.
+  case $ac_val in
+    [\\/$]* | ?:[\\/]* )  continue;;
+    NONE | '' ) case $ac_var in *prefix ) continue;; esac;;
+  esac
+  as_fn_error $? "expected an absolute directory name for --$ac_var: $ac_val"
+done
+
+# There might be people who depend on the old broken behavior: `$host'
+# used to hold the argument of --host etc.
+# FIXME: To remove some day.
+build=$build_alias
+host=$host_alias
+target=$target_alias
+
+# FIXME: To remove some day.
+if test "x$host_alias" != x; then
+  if test "x$build_alias" = x; then
+    cross_compiling=maybe
+  elif test "x$build_alias" != "x$host_alias"; then
+    cross_compiling=yes
+  fi
+fi
+
+ac_tool_prefix=
+test -n "$host_alias" && ac_tool_prefix=$host_alias-
+
+test "$silent" = yes && exec 6>/dev/null
+
+
+ac_pwd=`pwd` && test -n "$ac_pwd" &&
+ac_ls_di=`ls -di .` &&
+ac_pwd_ls_di=`cd "$ac_pwd" && ls -di .` ||
+  as_fn_error $? "working directory cannot be determined"
+test "X$ac_ls_di" = "X$ac_pwd_ls_di" ||
+  as_fn_error $? "pwd does not report name of working directory"
+
+
+# Find the source files, if location was not specified.
+if test -z "$srcdir"; then
+  ac_srcdir_defaulted=yes
+  # Try the directory containing this script, then the parent directory.
+  ac_confdir=`$as_dirname -- "$as_myself" ||
+$as_expr X"$as_myself" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
+	 X"$as_myself" : 'X\(//\)[^/]' \| \
+	 X"$as_myself" : 'X\(//\)$' \| \
+	 X"$as_myself" : 'X\(/\)' \| . 2>/dev/null ||
+$as_echo X"$as_myself" |
+    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\/\)[^/].*/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\/\)$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\).*/{
+	    s//\1/
+	    q
+	  }
+	  s/.*/./; q'`
+  srcdir=$ac_confdir
+  if test ! -r "$srcdir/$ac_unique_file"; then
+    srcdir=..
+  fi
+else
+  ac_srcdir_defaulted=no
+fi
+if test ! -r "$srcdir/$ac_unique_file"; then
+  test "$ac_srcdir_defaulted" = yes && srcdir="$ac_confdir or .."
+  as_fn_error $? "cannot find sources ($ac_unique_file) in $srcdir"
+fi
+ac_msg="sources are in $srcdir, but \`cd $srcdir' does not work"
+ac_abs_confdir=`(
+	cd "$srcdir" && test -r "./$ac_unique_file" || as_fn_error $? "$ac_msg"
+	pwd)`
+# When building in place, set srcdir=.
+if test "$ac_abs_confdir" = "$ac_pwd"; then
+  srcdir=.
+fi
+# Remove unnecessary trailing slashes from srcdir.
+# Double slashes in file names in object file debugging info
+# mess up M-x gdb in Emacs.
+case $srcdir in
+*/) srcdir=`expr "X$srcdir" : 'X\(.*[^/]\)' \| "X$srcdir" : 'X\(.*\)'`;;
+esac
+for ac_var in $ac_precious_vars; do
+  eval ac_env_${ac_var}_set=\${${ac_var}+set}
+  eval ac_env_${ac_var}_value=\$${ac_var}
+  eval ac_cv_env_${ac_var}_set=\${${ac_var}+set}
+  eval ac_cv_env_${ac_var}_value=\$${ac_var}
+done
+
+#
+# Report the --help message.
+#
+if test "$ac_init_help" = "long"; then
+  # Omit some internal or obsolete options to make the list less imposing.
+  # This message is too long to be a string in the A/UX 3.1 sh.
+  cat <<_ACEOF
+\`configure' configures libsrtp2 2.3.0 to adapt to many kinds of systems.
+
+Usage: $0 [OPTION]... [VAR=VALUE]...
+
+To assign environment variables (e.g., CC, CFLAGS...), specify them as
+VAR=VALUE.  See below for descriptions of some of the useful variables.
+
+Defaults for the options are specified in brackets.
+
+Configuration:
+  -h, --help              display this help and exit
+      --help=short        display options specific to this package
+      --help=recursive    display the short help of all the included packages
+  -V, --version           display version information and exit
+  -q, --quiet, --silent   do not print \`checking ...' messages
+      --cache-file=FILE   cache test results in FILE [disabled]
+  -C, --config-cache      alias for \`--cache-file=config.cache'
+  -n, --no-create         do not create output files
+      --srcdir=DIR        find the sources in DIR [configure dir or \`..']
+
+Installation directories:
+  --prefix=PREFIX         install architecture-independent files in PREFIX
+                          [$ac_default_prefix]
+  --exec-prefix=EPREFIX   install architecture-dependent files in EPREFIX
+                          [PREFIX]
+
+By default, \`make install' will install all the files in
+\`$ac_default_prefix/bin', \`$ac_default_prefix/lib' etc.  You can specify
+an installation prefix other than \`$ac_default_prefix' using \`--prefix',
+for instance \`--prefix=\$HOME'.
+
+For better control, use the options below.
+
+Fine tuning of the installation directories:
+  --bindir=DIR            user executables [EPREFIX/bin]
+  --sbindir=DIR           system admin executables [EPREFIX/sbin]
+  --libexecdir=DIR        program executables [EPREFIX/libexec]
+  --sysconfdir=DIR        read-only single-machine data [PREFIX/etc]
+  --sharedstatedir=DIR    modifiable architecture-independent data [PREFIX/com]
+  --localstatedir=DIR     modifiable single-machine data [PREFIX/var]
+  --runstatedir=DIR       modifiable per-process data [LOCALSTATEDIR/run]
+  --libdir=DIR            object code libraries [EPREFIX/lib]
+  --includedir=DIR        C header files [PREFIX/include]
+  --oldincludedir=DIR     C header files for non-gcc [/usr/include]
+  --datarootdir=DIR       read-only arch.-independent data root [PREFIX/share]
+  --datadir=DIR           read-only architecture-independent data [DATAROOTDIR]
+  --infodir=DIR           info documentation [DATAROOTDIR/info]
+  --localedir=DIR         locale-dependent data [DATAROOTDIR/locale]
+  --mandir=DIR            man documentation [DATAROOTDIR/man]
+  --docdir=DIR            documentation root [DATAROOTDIR/doc/libsrtp2]
+  --htmldir=DIR           html documentation [DOCDIR]
+  --dvidir=DIR            dvi documentation [DOCDIR]
+  --pdfdir=DIR            pdf documentation [DOCDIR]
+  --psdir=DIR             ps documentation [DOCDIR]
+_ACEOF
+
+  cat <<\_ACEOF
+
+System types:
+  --build=BUILD     configure for building on BUILD [guessed]
+  --host=HOST       cross-compile to build programs to run on HOST [BUILD]
+_ACEOF
+fi
+
+if test -n "$ac_init_help"; then
+  case $ac_init_help in
+     short | recursive ) echo "Configuration of libsrtp2 2.3.0:";;
+   esac
+  cat <<\_ACEOF
+
+Optional Features:
+  --disable-option-checking  ignore unrecognized --enable/--with options
+  --disable-FEATURE       do not include FEATURE (same as --enable-FEATURE=no)
+  --enable-FEATURE[=ARG]  include FEATURE [ARG=yes]
+  --enable-debug-logging  Enable debug logging in all modules
+  --enable-openssl        compile in OpenSSL crypto engine
+  --enable-nss            compile in NSS crypto engine
+  --enable-openssl-kdf    Use OpenSSL KDF algorithm
+  --disable-pcap          Build without `pcap' library (-lpcap)
+  --enable-log-stdout     redirecting logging to stdout
+
+Optional Packages:
+  --with-PACKAGE[=ARG]    use PACKAGE [ARG=yes]
+  --without-PACKAGE       do not use PACKAGE (same as --with-PACKAGE=no)
+  --with-openssl-dir      Location of OpenSSL installation
+  --with-nss-dir          Location of NSS installation
+  --with-log-file         Use file for logging
+
+Some influential environment variables:
+  CC          C compiler command
+  CFLAGS      C compiler flags
+  LDFLAGS     linker flags, e.g. -L<lib dir> if you have libraries in a
+              nonstandard directory <lib dir>
+  LIBS        libraries to pass to the linker, e.g. -l<library>
+  CPPFLAGS    (Objective) C/C++ preprocessor flags, e.g. -I<include dir> if
+              you have headers in a nonstandard directory <include dir>
+  CPP         C preprocessor
+  CXX         C++ compiler command
+  CXXFLAGS    C++ compiler flags
+  EXTRA_CFLAGS
+              C compiler flags appended to the regular C compiler flags
+              instead of overriding them
+  PKG_CONFIG  path to pkg-config utility
+  PKG_CONFIG_PATH
+              directories to add to pkg-config's search path
+  PKG_CONFIG_LIBDIR
+              path overriding pkg-config's built-in search path
+  crypto_CFLAGS
+              C compiler flags for crypto, overriding pkg-config
+  crypto_LIBS linker flags for crypto, overriding pkg-config
+  nss_CFLAGS  C compiler flags for nss, overriding pkg-config
+  nss_LIBS    linker flags for nss, overriding pkg-config
+
+Use these variables to override the choices made by `configure' or to help
+it to find libraries and programs with nonstandard names/locations.
+
+Report bugs to <https://github.com/cisco/libsrtp/issues>.
+_ACEOF
+ac_status=$?
+fi
+
+if test "$ac_init_help" = "recursive"; then
+  # If there are subdirs, report their specific --help.
+  for ac_dir in : $ac_subdirs_all; do test "x$ac_dir" = x: && continue
+    test -d "$ac_dir" ||
+      { cd "$srcdir" && ac_pwd=`pwd` && srcdir=. && test -d "$ac_dir"; } ||
+      continue
+    ac_builddir=.
+
+case "$ac_dir" in
+.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
+*)
+  ac_dir_suffix=/`$as_echo "$ac_dir" | sed 's|^\.[\\/]||'`
+  # A ".." for each directory in $ac_dir_suffix.
+  ac_top_builddir_sub=`$as_echo "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
+  case $ac_top_builddir_sub in
+  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
+  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
+  esac ;;
+esac
+ac_abs_top_builddir=$ac_pwd
+ac_abs_builddir=$ac_pwd$ac_dir_suffix
+# for backward compatibility:
+ac_top_builddir=$ac_top_build_prefix
+
+case $srcdir in
+  .)  # We are building in place.
+    ac_srcdir=.
+    ac_top_srcdir=$ac_top_builddir_sub
+    ac_abs_top_srcdir=$ac_pwd ;;
+  [\\/]* | ?:[\\/]* )  # Absolute name.
+    ac_srcdir=$srcdir$ac_dir_suffix;
+    ac_top_srcdir=$srcdir
+    ac_abs_top_srcdir=$srcdir ;;
+  *) # Relative name.
+    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
+    ac_top_srcdir=$ac_top_build_prefix$srcdir
+    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
+esac
+ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
+
+    cd "$ac_dir" || { ac_status=$?; continue; }
+    # Check for guested configure.
+    if test -f "$ac_srcdir/configure.gnu"; then
+      echo &&
+      $SHELL "$ac_srcdir/configure.gnu" --help=recursive
+    elif test -f "$ac_srcdir/configure"; then
+      echo &&
+      $SHELL "$ac_srcdir/configure" --help=recursive
+    else
+      $as_echo "$as_me: WARNING: no configuration information is in $ac_dir" >&2
+    fi || ac_status=$?
+    cd "$ac_pwd" || { ac_status=$?; break; }
+  done
+fi
+
+test -n "$ac_init_help" && exit $ac_status
+if $ac_init_version; then
+  cat <<\_ACEOF
+libsrtp2 configure 2.3.0
+generated by GNU Autoconf 2.69
+
+Copyright (C) 2012 Free Software Foundation, Inc.
+This configure script is free software; the Free Software Foundation
+gives unlimited permission to copy, distribute and modify it.
+_ACEOF
+  exit
+fi
+
+## ------------------------ ##
+## Autoconf initialization. ##
+## ------------------------ ##
+
+# ac_fn_c_try_compile LINENO
+# --------------------------
+# Try to compile conftest.$ac_ext, and return whether this succeeded.
+ac_fn_c_try_compile ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  rm -f conftest.$ac_objext
+  if { { ac_try="$ac_compile"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_compile") 2>conftest.err
+  ac_status=$?
+  if test -s conftest.err; then
+    grep -v '^ *+' conftest.err >conftest.er1
+    cat conftest.er1 >&5
+    mv -f conftest.er1 conftest.err
+  fi
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; } && {
+	 test -z "$ac_c_werror_flag" ||
+	 test ! -s conftest.err
+       } && test -s conftest.$ac_objext; then :
+  ac_retval=0
+else
+  $as_echo "$as_me: failed program was:" >&5
+sed 's/^/| /' conftest.$ac_ext >&5
+
+	ac_retval=1
+fi
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+  as_fn_set_status $ac_retval
+
+} # ac_fn_c_try_compile
+
+# ac_fn_c_try_cpp LINENO
+# ----------------------
+# Try to preprocess conftest.$ac_ext, and return whether this succeeded.
+ac_fn_c_try_cpp ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  if { { ac_try="$ac_cpp conftest.$ac_ext"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.err
+  ac_status=$?
+  if test -s conftest.err; then
+    grep -v '^ *+' conftest.err >conftest.er1
+    cat conftest.er1 >&5
+    mv -f conftest.er1 conftest.err
+  fi
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; } > conftest.i && {
+	 test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
+	 test ! -s conftest.err
+       }; then :
+  ac_retval=0
+else
+  $as_echo "$as_me: failed program was:" >&5
+sed 's/^/| /' conftest.$ac_ext >&5
+
+    ac_retval=1
+fi
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+  as_fn_set_status $ac_retval
+
+} # ac_fn_c_try_cpp
+
+# ac_fn_cxx_try_compile LINENO
+# ----------------------------
+# Try to compile conftest.$ac_ext, and return whether this succeeded.
+ac_fn_cxx_try_compile ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  rm -f conftest.$ac_objext
+  if { { ac_try="$ac_compile"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_compile") 2>conftest.err
+  ac_status=$?
+  if test -s conftest.err; then
+    grep -v '^ *+' conftest.err >conftest.er1
+    cat conftest.er1 >&5
+    mv -f conftest.er1 conftest.err
+  fi
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; } && {
+	 test -z "$ac_cxx_werror_flag" ||
+	 test ! -s conftest.err
+       } && test -s conftest.$ac_objext; then :
+  ac_retval=0
+else
+  $as_echo "$as_me: failed program was:" >&5
+sed 's/^/| /' conftest.$ac_ext >&5
+
+	ac_retval=1
+fi
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+  as_fn_set_status $ac_retval
+
+} # ac_fn_cxx_try_compile
+
+# ac_fn_c_try_run LINENO
+# ----------------------
+# Try to link conftest.$ac_ext, and return whether this succeeded. Assumes
+# that executables *can* be run.
+ac_fn_c_try_run ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  if { { ac_try="$ac_link"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_link") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; } && { ac_try='./conftest$ac_exeext'
+  { { case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_try") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }; }; then :
+  ac_retval=0
+else
+  $as_echo "$as_me: program exited with status $ac_status" >&5
+       $as_echo "$as_me: failed program was:" >&5
+sed 's/^/| /' conftest.$ac_ext >&5
+
+       ac_retval=$ac_status
+fi
+  rm -rf conftest.dSYM conftest_ipa8_conftest.oo
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+  as_fn_set_status $ac_retval
+
+} # ac_fn_c_try_run
+
+# ac_fn_c_check_header_compile LINENO HEADER VAR INCLUDES
+# -------------------------------------------------------
+# Tests whether HEADER exists and can be compiled using the include files in
+# INCLUDES, setting the cache variable VAR accordingly.
+ac_fn_c_check_header_compile ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
+$as_echo_n "checking for $2... " >&6; }
+if eval \${$3+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+#include <$2>
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  eval "$3=yes"
+else
+  eval "$3=no"
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+eval ac_res=\$$3
+	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+
+} # ac_fn_c_check_header_compile
+
+# ac_fn_c_check_type LINENO TYPE VAR INCLUDES
+# -------------------------------------------
+# Tests whether TYPE exists after having included INCLUDES, setting cache
+# variable VAR accordingly.
+ac_fn_c_check_type ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
+$as_echo_n "checking for $2... " >&6; }
+if eval \${$3+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  eval "$3=no"
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+if (sizeof ($2))
+	 return 0;
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+if (sizeof (($2)))
+	    return 0;
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+else
+  eval "$3=yes"
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+eval ac_res=\$$3
+	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+
+} # ac_fn_c_check_type
+
+# ac_fn_c_compute_int LINENO EXPR VAR INCLUDES
+# --------------------------------------------
+# Tries to find the compile-time value of EXPR in a program that includes
+# INCLUDES, setting VAR accordingly. Returns whether the value could be
+# computed
+ac_fn_c_compute_int ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  if test "$cross_compiling" = yes; then
+    # Depending upon the size, compute the lo and hi bounds.
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+static int test_array [1 - 2 * !(($2) >= 0)];
+test_array [0] = 0;
+return test_array [0];
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_lo=0 ac_mid=0
+  while :; do
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+static int test_array [1 - 2 * !(($2) <= $ac_mid)];
+test_array [0] = 0;
+return test_array [0];
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_hi=$ac_mid; break
+else
+  as_fn_arith $ac_mid + 1 && ac_lo=$as_val
+			if test $ac_lo -le $ac_mid; then
+			  ac_lo= ac_hi=
+			  break
+			fi
+			as_fn_arith 2 '*' $ac_mid + 1 && ac_mid=$as_val
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+  done
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+static int test_array [1 - 2 * !(($2) < 0)];
+test_array [0] = 0;
+return test_array [0];
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_hi=-1 ac_mid=-1
+  while :; do
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+static int test_array [1 - 2 * !(($2) >= $ac_mid)];
+test_array [0] = 0;
+return test_array [0];
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_lo=$ac_mid; break
+else
+  as_fn_arith '(' $ac_mid ')' - 1 && ac_hi=$as_val
+			if test $ac_mid -le $ac_hi; then
+			  ac_lo= ac_hi=
+			  break
+			fi
+			as_fn_arith 2 '*' $ac_mid && ac_mid=$as_val
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+  done
+else
+  ac_lo= ac_hi=
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+# Binary search between lo and hi bounds.
+while test "x$ac_lo" != "x$ac_hi"; do
+  as_fn_arith '(' $ac_hi - $ac_lo ')' / 2 + $ac_lo && ac_mid=$as_val
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+static int test_array [1 - 2 * !(($2) <= $ac_mid)];
+test_array [0] = 0;
+return test_array [0];
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_hi=$ac_mid
+else
+  as_fn_arith '(' $ac_mid ')' + 1 && ac_lo=$as_val
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+done
+case $ac_lo in #((
+?*) eval "$3=\$ac_lo"; ac_retval=0 ;;
+'') ac_retval=1 ;;
+esac
+  else
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+static long int longval () { return $2; }
+static unsigned long int ulongval () { return $2; }
+#include <stdio.h>
+#include <stdlib.h>
+int
+main ()
+{
+
+  FILE *f = fopen ("conftest.val", "w");
+  if (! f)
+    return 1;
+  if (($2) < 0)
+    {
+      long int i = longval ();
+      if (i != ($2))
+	return 1;
+      fprintf (f, "%ld", i);
+    }
+  else
+    {
+      unsigned long int i = ulongval ();
+      if (i != ($2))
+	return 1;
+      fprintf (f, "%lu", i);
+    }
+  /* Do not output a trailing newline, as this causes \r\n confusion
+     on some platforms.  */
+  return ferror (f) || fclose (f) != 0;
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_run "$LINENO"; then :
+  echo >>conftest.val; read $3 <conftest.val; ac_retval=0
+else
+  ac_retval=1
+fi
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
+rm -f conftest.val
+
+  fi
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+  as_fn_set_status $ac_retval
+
+} # ac_fn_c_compute_int
+
+# ac_fn_c_try_link LINENO
+# -----------------------
+# Try to link conftest.$ac_ext, and return whether this succeeded.
+ac_fn_c_try_link ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  rm -f conftest.$ac_objext conftest$ac_exeext
+  if { { ac_try="$ac_link"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_link") 2>conftest.err
+  ac_status=$?
+  if test -s conftest.err; then
+    grep -v '^ *+' conftest.err >conftest.er1
+    cat conftest.er1 >&5
+    mv -f conftest.er1 conftest.err
+  fi
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; } && {
+	 test -z "$ac_c_werror_flag" ||
+	 test ! -s conftest.err
+       } && test -s conftest$ac_exeext && {
+	 test "$cross_compiling" = yes ||
+	 test -x conftest$ac_exeext
+       }; then :
+  ac_retval=0
+else
+  $as_echo "$as_me: failed program was:" >&5
+sed 's/^/| /' conftest.$ac_ext >&5
+
+	ac_retval=1
+fi
+  # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information
+  # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would
+  # interfere with the next link command; also delete a directory that is
+  # left behind by Apple's compiler.  We do this before executing the actions.
+  rm -rf conftest.dSYM conftest_ipa8_conftest.oo
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+  as_fn_set_status $ac_retval
+
+} # ac_fn_c_try_link
+
+# ac_fn_c_check_func LINENO FUNC VAR
+# ----------------------------------
+# Tests whether FUNC exists, setting the cache variable VAR accordingly
+ac_fn_c_check_func ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
+$as_echo_n "checking for $2... " >&6; }
+if eval \${$3+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+/* Define $2 to an innocuous variant, in case <limits.h> declares $2.
+   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
+#define $2 innocuous_$2
+
+/* System header to define __stub macros and hopefully few prototypes,
+    which can conflict with char $2 (); below.
+    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
+    <limits.h> exists even on freestanding compilers.  */
+
+#ifdef __STDC__
+# include <limits.h>
+#else
+# include <assert.h>
+#endif
+
+#undef $2
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char $2 ();
+/* The GNU C library defines this for functions which it implements
+    to always fail with ENOSYS.  Some functions are actually named
+    something starting with __ and the normal name is an alias.  */
+#if defined __stub_$2 || defined __stub___$2
+choke me
+#endif
+
+int
+main ()
+{
+return $2 ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  eval "$3=yes"
+else
+  eval "$3=no"
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+fi
+eval ac_res=\$$3
+	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+
+} # ac_fn_c_check_func
+cat >config.log <<_ACEOF
+This file contains any messages produced by compilers while
+running configure, to aid debugging if configure makes a mistake.
+
+It was created by libsrtp2 $as_me 2.3.0, which was
+generated by GNU Autoconf 2.69.  Invocation command line was
+
+  $ $0 $@
+
+_ACEOF
+exec 5>>config.log
+{
+cat <<_ASUNAME
+## --------- ##
+## Platform. ##
+## --------- ##
+
+hostname = `(hostname || uname -n) 2>/dev/null | sed 1q`
+uname -m = `(uname -m) 2>/dev/null || echo unknown`
+uname -r = `(uname -r) 2>/dev/null || echo unknown`
+uname -s = `(uname -s) 2>/dev/null || echo unknown`
+uname -v = `(uname -v) 2>/dev/null || echo unknown`
+
+/usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null || echo unknown`
+/bin/uname -X     = `(/bin/uname -X) 2>/dev/null     || echo unknown`
+
+/bin/arch              = `(/bin/arch) 2>/dev/null              || echo unknown`
+/usr/bin/arch -k       = `(/usr/bin/arch -k) 2>/dev/null       || echo unknown`
+/usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null || echo unknown`
+/usr/bin/hostinfo      = `(/usr/bin/hostinfo) 2>/dev/null      || echo unknown`
+/bin/machine           = `(/bin/machine) 2>/dev/null           || echo unknown`
+/usr/bin/oslevel       = `(/usr/bin/oslevel) 2>/dev/null       || echo unknown`
+/bin/universe          = `(/bin/universe) 2>/dev/null          || echo unknown`
+
+_ASUNAME
+
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    $as_echo "PATH: $as_dir"
+  done
+IFS=$as_save_IFS
+
+} >&5
+
+cat >&5 <<_ACEOF
+
+
+## ----------- ##
+## Core tests. ##
+## ----------- ##
+
+_ACEOF
+
+
+# Keep a trace of the command line.
+# Strip out --no-create and --no-recursion so they do not pile up.
+# Strip out --silent because we don't want to record it for future runs.
+# Also quote any args containing shell meta-characters.
+# Make two passes to allow for proper duplicate-argument suppression.
+ac_configure_args=
+ac_configure_args0=
+ac_configure_args1=
+ac_must_keep_next=false
+for ac_pass in 1 2
+do
+  for ac_arg
+  do
+    case $ac_arg in
+    -no-create | --no-c* | -n | -no-recursion | --no-r*) continue ;;
+    -q | -quiet | --quiet | --quie | --qui | --qu | --q \
+    | -silent | --silent | --silen | --sile | --sil)
+      continue ;;
+    *\'*)
+      ac_arg=`$as_echo "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
+    esac
+    case $ac_pass in
+    1) as_fn_append ac_configure_args0 " '$ac_arg'" ;;
+    2)
+      as_fn_append ac_configure_args1 " '$ac_arg'"
+      if test $ac_must_keep_next = true; then
+	ac_must_keep_next=false # Got value, back to normal.
+      else
+	case $ac_arg in
+	  *=* | --config-cache | -C | -disable-* | --disable-* \
+	  | -enable-* | --enable-* | -gas | --g* | -nfp | --nf* \
+	  | -q | -quiet | --q* | -silent | --sil* | -v | -verb* \
+	  | -with-* | --with-* | -without-* | --without-* | --x)
+	    case "$ac_configure_args0 " in
+	      "$ac_configure_args1"*" '$ac_arg' "* ) continue ;;
+	    esac
+	    ;;
+	  -* ) ac_must_keep_next=true ;;
+	esac
+      fi
+      as_fn_append ac_configure_args " '$ac_arg'"
+      ;;
+    esac
+  done
+done
+{ ac_configure_args0=; unset ac_configure_args0;}
+{ ac_configure_args1=; unset ac_configure_args1;}
+
+# When interrupted or exit'd, cleanup temporary files, and complete
+# config.log.  We remove comments because anyway the quotes in there
+# would cause problems or look ugly.
+# WARNING: Use '\'' to represent an apostrophe within the trap.
+# WARNING: Do not start the trap code with a newline, due to a FreeBSD 4.0 bug.
+trap 'exit_status=$?
+  # Save into config.log some information that might help in debugging.
+  {
+    echo
+
+    $as_echo "## ---------------- ##
+## Cache variables. ##
+## ---------------- ##"
+    echo
+    # The following way of writing the cache mishandles newlines in values,
+(
+  for ac_var in `(set) 2>&1 | sed -n '\''s/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'\''`; do
+    eval ac_val=\$$ac_var
+    case $ac_val in #(
+    *${as_nl}*)
+      case $ac_var in #(
+      *_cv_*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
+$as_echo "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
+      esac
+      case $ac_var in #(
+      _ | IFS | as_nl) ;; #(
+      BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
+      *) { eval $ac_var=; unset $ac_var;} ;;
+      esac ;;
+    esac
+  done
+  (set) 2>&1 |
+    case $as_nl`(ac_space='\'' '\''; set) 2>&1` in #(
+    *${as_nl}ac_space=\ *)
+      sed -n \
+	"s/'\''/'\''\\\\'\'''\''/g;
+	  s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\''\\2'\''/p"
+      ;; #(
+    *)
+      sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p"
+      ;;
+    esac |
+    sort
+)
+    echo
+
+    $as_echo "## ----------------- ##
+## Output variables. ##
+## ----------------- ##"
+    echo
+    for ac_var in $ac_subst_vars
+    do
+      eval ac_val=\$$ac_var
+      case $ac_val in
+      *\'\''*) ac_val=`$as_echo "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;;
+      esac
+      $as_echo "$ac_var='\''$ac_val'\''"
+    done | sort
+    echo
+
+    if test -n "$ac_subst_files"; then
+      $as_echo "## ------------------- ##
+## File substitutions. ##
+## ------------------- ##"
+      echo
+      for ac_var in $ac_subst_files
+      do
+	eval ac_val=\$$ac_var
+	case $ac_val in
+	*\'\''*) ac_val=`$as_echo "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;;
+	esac
+	$as_echo "$ac_var='\''$ac_val'\''"
+      done | sort
+      echo
+    fi
+
+    if test -s confdefs.h; then
+      $as_echo "## ----------- ##
+## confdefs.h. ##
+## ----------- ##"
+      echo
+      cat confdefs.h
+      echo
+    fi
+    test "$ac_signal" != 0 &&
+      $as_echo "$as_me: caught signal $ac_signal"
+    $as_echo "$as_me: exit $exit_status"
+  } >&5
+  rm -f core *.core core.conftest.* &&
+    rm -f -r conftest* confdefs* conf$$* $ac_clean_files &&
+    exit $exit_status
+' 0
+for ac_signal in 1 2 13 15; do
+  trap 'ac_signal='$ac_signal'; as_fn_exit 1' $ac_signal
+done
+ac_signal=0
+
+# confdefs.h avoids OS command line length limits that DEFS can exceed.
+rm -f -r conftest* confdefs.h
+
+$as_echo "/* confdefs.h */" > confdefs.h
+
+# Predefined preprocessor variables.
+
+cat >>confdefs.h <<_ACEOF
+#define PACKAGE_NAME "$PACKAGE_NAME"
+_ACEOF
+
+cat >>confdefs.h <<_ACEOF
+#define PACKAGE_TARNAME "$PACKAGE_TARNAME"
+_ACEOF
+
+cat >>confdefs.h <<_ACEOF
+#define PACKAGE_VERSION "$PACKAGE_VERSION"
+_ACEOF
+
+cat >>confdefs.h <<_ACEOF
+#define PACKAGE_STRING "$PACKAGE_STRING"
+_ACEOF
+
+cat >>confdefs.h <<_ACEOF
+#define PACKAGE_BUGREPORT "$PACKAGE_BUGREPORT"
+_ACEOF
+
+cat >>confdefs.h <<_ACEOF
+#define PACKAGE_URL "$PACKAGE_URL"
+_ACEOF
+
+
+# Let the site file select an alternate cache file if it wants to.
+# Prefer an explicitly selected file to automatically selected ones.
+ac_site_file1=NONE
+ac_site_file2=NONE
+if test -n "$CONFIG_SITE"; then
+  # We do not want a PATH search for config.site.
+  case $CONFIG_SITE in #((
+    -*)  ac_site_file1=./$CONFIG_SITE;;
+    */*) ac_site_file1=$CONFIG_SITE;;
+    *)   ac_site_file1=./$CONFIG_SITE;;
+  esac
+elif test "x$prefix" != xNONE; then
+  ac_site_file1=$prefix/share/config.site
+  ac_site_file2=$prefix/etc/config.site
+else
+  ac_site_file1=$ac_default_prefix/share/config.site
+  ac_site_file2=$ac_default_prefix/etc/config.site
+fi
+for ac_site_file in "$ac_site_file1" "$ac_site_file2"
+do
+  test "x$ac_site_file" = xNONE && continue
+  if test /dev/null != "$ac_site_file" && test -r "$ac_site_file"; then
+    { $as_echo "$as_me:${as_lineno-$LINENO}: loading site script $ac_site_file" >&5
+$as_echo "$as_me: loading site script $ac_site_file" >&6;}
+    sed 's/^/| /' "$ac_site_file" >&5
+    . "$ac_site_file" \
+      || { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "failed to load site script $ac_site_file
+See \`config.log' for more details" "$LINENO" 5; }
+  fi
+done
+
+if test -r "$cache_file"; then
+  # Some versions of bash will fail to source /dev/null (special files
+  # actually), so we avoid doing that.  DJGPP emulates it as a regular file.
+  if test /dev/null != "$cache_file" && test -f "$cache_file"; then
+    { $as_echo "$as_me:${as_lineno-$LINENO}: loading cache $cache_file" >&5
+$as_echo "$as_me: loading cache $cache_file" >&6;}
+    case $cache_file in
+      [\\/]* | ?:[\\/]* ) . "$cache_file";;
+      *)                      . "./$cache_file";;
+    esac
+  fi
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: creating cache $cache_file" >&5
+$as_echo "$as_me: creating cache $cache_file" >&6;}
+  >$cache_file
+fi
+
+# Check that the precious variables saved in the cache have kept the same
+# value.
+ac_cache_corrupted=false
+for ac_var in $ac_precious_vars; do
+  eval ac_old_set=\$ac_cv_env_${ac_var}_set
+  eval ac_new_set=\$ac_env_${ac_var}_set
+  eval ac_old_val=\$ac_cv_env_${ac_var}_value
+  eval ac_new_val=\$ac_env_${ac_var}_value
+  case $ac_old_set,$ac_new_set in
+    set,)
+      { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&5
+$as_echo "$as_me: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&2;}
+      ac_cache_corrupted=: ;;
+    ,set)
+      { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was not set in the previous run" >&5
+$as_echo "$as_me: error: \`$ac_var' was not set in the previous run" >&2;}
+      ac_cache_corrupted=: ;;
+    ,);;
+    *)
+      if test "x$ac_old_val" != "x$ac_new_val"; then
+	# differences in whitespace do not lead to failure.
+	ac_old_val_w=`echo x $ac_old_val`
+	ac_new_val_w=`echo x $ac_new_val`
+	if test "$ac_old_val_w" != "$ac_new_val_w"; then
+	  { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' has changed since the previous run:" >&5
+$as_echo "$as_me: error: \`$ac_var' has changed since the previous run:" >&2;}
+	  ac_cache_corrupted=:
+	else
+	  { $as_echo "$as_me:${as_lineno-$LINENO}: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&5
+$as_echo "$as_me: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&2;}
+	  eval $ac_var=\$ac_old_val
+	fi
+	{ $as_echo "$as_me:${as_lineno-$LINENO}:   former value:  \`$ac_old_val'" >&5
+$as_echo "$as_me:   former value:  \`$ac_old_val'" >&2;}
+	{ $as_echo "$as_me:${as_lineno-$LINENO}:   current value: \`$ac_new_val'" >&5
+$as_echo "$as_me:   current value: \`$ac_new_val'" >&2;}
+      fi;;
+  esac
+  # Pass precious variables to config.status.
+  if test "$ac_new_set" = set; then
+    case $ac_new_val in
+    *\'*) ac_arg=$ac_var=`$as_echo "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;;
+    *) ac_arg=$ac_var=$ac_new_val ;;
+    esac
+    case " $ac_configure_args " in
+      *" '$ac_arg' "*) ;; # Avoid dups.  Use of quotes ensures accuracy.
+      *) as_fn_append ac_configure_args " '$ac_arg'" ;;
+    esac
+  fi
+done
+if $ac_cache_corrupted; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+  { $as_echo "$as_me:${as_lineno-$LINENO}: error: changes in the environment can compromise the build" >&5
+$as_echo "$as_me: error: changes in the environment can compromise the build" >&2;}
+  as_fn_error $? "run \`make distclean' and/or \`rm $cache_file' and start over" "$LINENO" 5
+fi
+## -------------------- ##
+## Main body of script. ##
+## -------------------- ##
+
+ac_ext=c
+ac_cpp='$CPP $CPPFLAGS'
+ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
+ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
+ac_compiler_gnu=$ac_cv_c_compiler_gnu
+
+
+
+EMPTY_CFLAGS="no"
+if test "x$CFLAGS" = "x"; then
+      EMPTY_CFLAGS="yes"
+fi
+
+ac_ext=c
+ac_cpp='$CPP $CPPFLAGS'
+ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
+ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
+ac_compiler_gnu=$ac_cv_c_compiler_gnu
+if test -n "$ac_tool_prefix"; then
+  # Extract the first word of "${ac_tool_prefix}gcc", so it can be a program name with args.
+set dummy ${ac_tool_prefix}gcc; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_CC+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$CC"; then
+  ac_cv_prog_CC="$CC" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_CC="${ac_tool_prefix}gcc"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+CC=$ac_cv_prog_CC
+if test -n "$CC"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
+$as_echo "$CC" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+fi
+if test -z "$ac_cv_prog_CC"; then
+  ac_ct_CC=$CC
+  # Extract the first word of "gcc", so it can be a program name with args.
+set dummy gcc; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_ac_ct_CC+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$ac_ct_CC"; then
+  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_ac_ct_CC="gcc"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+ac_ct_CC=$ac_cv_prog_ac_ct_CC
+if test -n "$ac_ct_CC"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
+$as_echo "$ac_ct_CC" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+  if test "x$ac_ct_CC" = x; then
+    CC=""
+  else
+    case $cross_compiling:$ac_tool_warned in
+yes:)
+{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
+$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
+ac_tool_warned=yes ;;
+esac
+    CC=$ac_ct_CC
+  fi
+else
+  CC="$ac_cv_prog_CC"
+fi
+
+if test -z "$CC"; then
+          if test -n "$ac_tool_prefix"; then
+    # Extract the first word of "${ac_tool_prefix}cc", so it can be a program name with args.
+set dummy ${ac_tool_prefix}cc; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_CC+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$CC"; then
+  ac_cv_prog_CC="$CC" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_CC="${ac_tool_prefix}cc"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+CC=$ac_cv_prog_CC
+if test -n "$CC"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
+$as_echo "$CC" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+  fi
+fi
+if test -z "$CC"; then
+  # Extract the first word of "cc", so it can be a program name with args.
+set dummy cc; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_CC+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$CC"; then
+  ac_cv_prog_CC="$CC" # Let the user override the test.
+else
+  ac_prog_rejected=no
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    if test "$as_dir/$ac_word$ac_exec_ext" = "/usr/ucb/cc"; then
+       ac_prog_rejected=yes
+       continue
+     fi
+    ac_cv_prog_CC="cc"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+if test $ac_prog_rejected = yes; then
+  # We found a bogon in the path, so make sure we never use it.
+  set dummy $ac_cv_prog_CC
+  shift
+  if test $# != 0; then
+    # We chose a different compiler from the bogus one.
+    # However, it has the same basename, so the bogon will be chosen
+    # first if we set CC to just the basename; use the full file name.
+    shift
+    ac_cv_prog_CC="$as_dir/$ac_word${1+' '}$@"
+  fi
+fi
+fi
+fi
+CC=$ac_cv_prog_CC
+if test -n "$CC"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
+$as_echo "$CC" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+fi
+if test -z "$CC"; then
+  if test -n "$ac_tool_prefix"; then
+  for ac_prog in cl.exe
+  do
+    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
+set dummy $ac_tool_prefix$ac_prog; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_CC+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$CC"; then
+  ac_cv_prog_CC="$CC" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_CC="$ac_tool_prefix$ac_prog"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+CC=$ac_cv_prog_CC
+if test -n "$CC"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
+$as_echo "$CC" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+    test -n "$CC" && break
+  done
+fi
+if test -z "$CC"; then
+  ac_ct_CC=$CC
+  for ac_prog in cl.exe
+do
+  # Extract the first word of "$ac_prog", so it can be a program name with args.
+set dummy $ac_prog; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_ac_ct_CC+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$ac_ct_CC"; then
+  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_ac_ct_CC="$ac_prog"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+ac_ct_CC=$ac_cv_prog_ac_ct_CC
+if test -n "$ac_ct_CC"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
+$as_echo "$ac_ct_CC" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+  test -n "$ac_ct_CC" && break
+done
+
+  if test "x$ac_ct_CC" = x; then
+    CC=""
+  else
+    case $cross_compiling:$ac_tool_warned in
+yes:)
+{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
+$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
+ac_tool_warned=yes ;;
+esac
+    CC=$ac_ct_CC
+  fi
+fi
+
+fi
+
+
+test -z "$CC" && { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "no acceptable C compiler found in \$PATH
+See \`config.log' for more details" "$LINENO" 5; }
+
+# Provide some information about the compiler.
+$as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5
+set X $ac_compile
+ac_compiler=$2
+for ac_option in --version -v -V -qversion; do
+  { { ac_try="$ac_compiler $ac_option >&5"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_compiler $ac_option >&5") 2>conftest.err
+  ac_status=$?
+  if test -s conftest.err; then
+    sed '10a\
+... rest of stderr output deleted ...
+         10q' conftest.err >conftest.er1
+    cat conftest.er1 >&5
+  fi
+  rm -f conftest.er1 conftest.err
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }
+done
+
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+
+  ;
+  return 0;
+}
+_ACEOF
+ac_clean_files_save=$ac_clean_files
+ac_clean_files="$ac_clean_files a.out a.out.dSYM a.exe b.out"
+# Try to create an executable without -o first, disregard a.out.
+# It will help us diagnose broken compilers, and finding out an intuition
+# of exeext.
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the C compiler works" >&5
+$as_echo_n "checking whether the C compiler works... " >&6; }
+ac_link_default=`$as_echo "$ac_link" | sed 's/ -o *conftest[^ ]*//'`
+
+# The possible output files:
+ac_files="a.out conftest.exe conftest a.exe a_out.exe b.out conftest.*"
+
+ac_rmfiles=
+for ac_file in $ac_files
+do
+  case $ac_file in
+    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
+    * ) ac_rmfiles="$ac_rmfiles $ac_file";;
+  esac
+done
+rm -f $ac_rmfiles
+
+if { { ac_try="$ac_link_default"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_link_default") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }; then :
+  # Autoconf-2.13 could set the ac_cv_exeext variable to `no'.
+# So ignore a value of `no', otherwise this would lead to `EXEEXT = no'
+# in a Makefile.  We should not override ac_cv_exeext if it was cached,
+# so that the user can short-circuit this test for compilers unknown to
+# Autoconf.
+for ac_file in $ac_files ''
+do
+  test -f "$ac_file" || continue
+  case $ac_file in
+    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj )
+	;;
+    [ab].out )
+	# We found the default executable, but exeext='' is most
+	# certainly right.
+	break;;
+    *.* )
+	if test "${ac_cv_exeext+set}" = set && test "$ac_cv_exeext" != no;
+	then :; else
+	   ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
+	fi
+	# We set ac_cv_exeext here because the later test for it is not
+	# safe: cross compilers may not add the suffix if given an `-o'
+	# argument, so we may need to know it at that point already.
+	# Even if this section looks crufty: it has the advantage of
+	# actually working.
+	break;;
+    * )
+	break;;
+  esac
+done
+test "$ac_cv_exeext" = no && ac_cv_exeext=
+
+else
+  ac_file=''
+fi
+if test -z "$ac_file"; then :
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+$as_echo "$as_me: failed program was:" >&5
+sed 's/^/| /' conftest.$ac_ext >&5
+
+{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error 77 "C compiler cannot create executables
+See \`config.log' for more details" "$LINENO" 5; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5
+$as_echo_n "checking for C compiler default output file name... " >&6; }
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_file" >&5
+$as_echo "$ac_file" >&6; }
+ac_exeext=$ac_cv_exeext
+
+rm -f -r a.out a.out.dSYM a.exe conftest$ac_cv_exeext b.out
+ac_clean_files=$ac_clean_files_save
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of executables" >&5
+$as_echo_n "checking for suffix of executables... " >&6; }
+if { { ac_try="$ac_link"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_link") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }; then :
+  # If both `conftest.exe' and `conftest' are `present' (well, observable)
+# catch `conftest.exe'.  For instance with Cygwin, `ls conftest' will
+# work properly (i.e., refer to `conftest.exe'), while it won't with
+# `rm'.
+for ac_file in conftest.exe conftest conftest.*; do
+  test -f "$ac_file" || continue
+  case $ac_file in
+    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
+    *.* ) ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
+	  break;;
+    * ) break;;
+  esac
+done
+else
+  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "cannot compute suffix of executables: cannot compile and link
+See \`config.log' for more details" "$LINENO" 5; }
+fi
+rm -f conftest conftest$ac_cv_exeext
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5
+$as_echo "$ac_cv_exeext" >&6; }
+
+rm -f conftest.$ac_ext
+EXEEXT=$ac_cv_exeext
+ac_exeext=$EXEEXT
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <stdio.h>
+int
+main ()
+{
+FILE *f = fopen ("conftest.out", "w");
+ return ferror (f) || fclose (f) != 0;
+
+  ;
+  return 0;
+}
+_ACEOF
+ac_clean_files="$ac_clean_files conftest.out"
+# Check that the compiler produces executables we can run.  If not, either
+# the compiler is broken, or we cross compile.
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are cross compiling" >&5
+$as_echo_n "checking whether we are cross compiling... " >&6; }
+if test "$cross_compiling" != yes; then
+  { { ac_try="$ac_link"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_link") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }
+  if { ac_try='./conftest$ac_cv_exeext'
+  { { case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_try") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }; }; then
+    cross_compiling=no
+  else
+    if test "$cross_compiling" = maybe; then
+	cross_compiling=yes
+    else
+	{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "cannot run C compiled programs.
+If you meant to cross compile, use \`--host'.
+See \`config.log' for more details" "$LINENO" 5; }
+    fi
+  fi
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5
+$as_echo "$cross_compiling" >&6; }
+
+rm -f conftest.$ac_ext conftest$ac_cv_exeext conftest.out
+ac_clean_files=$ac_clean_files_save
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5
+$as_echo_n "checking for suffix of object files... " >&6; }
+if ${ac_cv_objext+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+
+  ;
+  return 0;
+}
+_ACEOF
+rm -f conftest.o conftest.obj
+if { { ac_try="$ac_compile"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_compile") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }; then :
+  for ac_file in conftest.o conftest.obj conftest.*; do
+  test -f "$ac_file" || continue;
+  case $ac_file in
+    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM ) ;;
+    *) ac_cv_objext=`expr "$ac_file" : '.*\.\(.*\)'`
+       break;;
+  esac
+done
+else
+  $as_echo "$as_me: failed program was:" >&5
+sed 's/^/| /' conftest.$ac_ext >&5
+
+{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "cannot compute suffix of object files: cannot compile
+See \`config.log' for more details" "$LINENO" 5; }
+fi
+rm -f conftest.$ac_cv_objext conftest.$ac_ext
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5
+$as_echo "$ac_cv_objext" >&6; }
+OBJEXT=$ac_cv_objext
+ac_objext=$OBJEXT
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are using the GNU C compiler" >&5
+$as_echo_n "checking whether we are using the GNU C compiler... " >&6; }
+if ${ac_cv_c_compiler_gnu+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+#ifndef __GNUC__
+       choke me
+#endif
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_compiler_gnu=yes
+else
+  ac_compiler_gnu=no
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+ac_cv_c_compiler_gnu=$ac_compiler_gnu
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5
+$as_echo "$ac_cv_c_compiler_gnu" >&6; }
+if test $ac_compiler_gnu = yes; then
+  GCC=yes
+else
+  GCC=
+fi
+ac_test_CFLAGS=${CFLAGS+set}
+ac_save_CFLAGS=$CFLAGS
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts -g" >&5
+$as_echo_n "checking whether $CC accepts -g... " >&6; }
+if ${ac_cv_prog_cc_g+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_save_c_werror_flag=$ac_c_werror_flag
+   ac_c_werror_flag=yes
+   ac_cv_prog_cc_g=no
+   CFLAGS="-g"
+   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_prog_cc_g=yes
+else
+  CFLAGS=""
+      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+else
+  ac_c_werror_flag=$ac_save_c_werror_flag
+	 CFLAGS="-g"
+	 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_prog_cc_g=yes
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+   ac_c_werror_flag=$ac_save_c_werror_flag
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5
+$as_echo "$ac_cv_prog_cc_g" >&6; }
+if test "$ac_test_CFLAGS" = set; then
+  CFLAGS=$ac_save_CFLAGS
+elif test $ac_cv_prog_cc_g = yes; then
+  if test "$GCC" = yes; then
+    CFLAGS="-g -O2"
+  else
+    CFLAGS="-g"
+  fi
+else
+  if test "$GCC" = yes; then
+    CFLAGS="-O2"
+  else
+    CFLAGS=
+  fi
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $CC option to accept ISO C89" >&5
+$as_echo_n "checking for $CC option to accept ISO C89... " >&6; }
+if ${ac_cv_prog_cc_c89+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_cv_prog_cc_c89=no
+ac_save_CC=$CC
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <stdarg.h>
+#include <stdio.h>
+struct stat;
+/* Most of the following tests are stolen from RCS 5.7's src/conf.sh.  */
+struct buf { int x; };
+FILE * (*rcsopen) (struct buf *, struct stat *, int);
+static char *e (p, i)
+     char **p;
+     int i;
+{
+  return p[i];
+}
+static char *f (char * (*g) (char **, int), char **p, ...)
+{
+  char *s;
+  va_list v;
+  va_start (v,p);
+  s = g (p, va_arg (v,int));
+  va_end (v);
+  return s;
+}
+
+/* OSF 4.0 Compaq cc is some sort of almost-ANSI by default.  It has
+   function prototypes and stuff, but not '\xHH' hex character constants.
+   These don't provoke an error unfortunately, instead are silently treated
+   as 'x'.  The following induces an error, until -std is added to get
+   proper ANSI mode.  Curiously '\x00'!='x' always comes out true, for an
+   array size at least.  It's necessary to write '\x00'==0 to get something
+   that's true only with -std.  */
+int osf4_cc_array ['\x00' == 0 ? 1 : -1];
+
+/* IBM C 6 for AIX is almost-ANSI by default, but it replaces macro parameters
+   inside strings and character constants.  */
+#define FOO(x) 'x'
+int xlc6_cc_array[FOO(a) == 'x' ? 1 : -1];
+
+int test (int i, double x);
+struct s1 {int (*f) (int a);};
+struct s2 {int (*f) (double a);};
+int pairnames (int, char **, FILE *(*)(struct buf *, struct stat *, int), int, int);
+int argc;
+char **argv;
+int
+main ()
+{
+return f (e, argv, 0) != argv[0]  ||  f (e, argv, 1) != argv[1];
+  ;
+  return 0;
+}
+_ACEOF
+for ac_arg in '' -qlanglvl=extc89 -qlanglvl=ansi -std \
+	-Ae "-Aa -D_HPUX_SOURCE" "-Xc -D__EXTENSIONS__"
+do
+  CC="$ac_save_CC $ac_arg"
+  if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_prog_cc_c89=$ac_arg
+fi
+rm -f core conftest.err conftest.$ac_objext
+  test "x$ac_cv_prog_cc_c89" != "xno" && break
+done
+rm -f conftest.$ac_ext
+CC=$ac_save_CC
+
+fi
+# AC_CACHE_VAL
+case "x$ac_cv_prog_cc_c89" in
+  x)
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
+$as_echo "none needed" >&6; } ;;
+  xno)
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
+$as_echo "unsupported" >&6; } ;;
+  *)
+    CC="$CC $ac_cv_prog_cc_c89"
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5
+$as_echo "$ac_cv_prog_cc_c89" >&6; } ;;
+esac
+if test "x$ac_cv_prog_cc_c89" != xno; then :
+
+fi
+
+ac_ext=c
+ac_cpp='$CPP $CPPFLAGS'
+ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
+ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
+ac_compiler_gnu=$ac_cv_c_compiler_gnu
+
+ac_ext=c
+ac_cpp='$CPP $CPPFLAGS'
+ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
+ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
+ac_compiler_gnu=$ac_cv_c_compiler_gnu
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking how to run the C preprocessor" >&5
+$as_echo_n "checking how to run the C preprocessor... " >&6; }
+# On Suns, sometimes $CPP names a directory.
+if test -n "$CPP" && test -d "$CPP"; then
+  CPP=
+fi
+if test -z "$CPP"; then
+  if ${ac_cv_prog_CPP+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+      # Double quotes because CPP needs to be expanded
+    for CPP in "$CC -E" "$CC -E -traditional-cpp" "/lib/cpp"
+    do
+      ac_preproc_ok=false
+for ac_c_preproc_warn_flag in '' yes
+do
+  # Use a header file that comes with gcc, so configuring glibc
+  # with a fresh cross-compiler works.
+  # Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
+  # <limits.h> exists even on freestanding compilers.
+  # On the NeXT, cc -E runs the code through the compiler's parser,
+  # not just through cpp. "Syntax error" is here to catch this case.
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#ifdef __STDC__
+# include <limits.h>
+#else
+# include <assert.h>
+#endif
+		     Syntax error
+_ACEOF
+if ac_fn_c_try_cpp "$LINENO"; then :
+
+else
+  # Broken: fails on valid input.
+continue
+fi
+rm -f conftest.err conftest.i conftest.$ac_ext
+
+  # OK, works on sane cases.  Now check whether nonexistent headers
+  # can be detected and how.
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <ac_nonexistent.h>
+_ACEOF
+if ac_fn_c_try_cpp "$LINENO"; then :
+  # Broken: success on invalid input.
+continue
+else
+  # Passes both tests.
+ac_preproc_ok=:
+break
+fi
+rm -f conftest.err conftest.i conftest.$ac_ext
+
+done
+# Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
+rm -f conftest.i conftest.err conftest.$ac_ext
+if $ac_preproc_ok; then :
+  break
+fi
+
+    done
+    ac_cv_prog_CPP=$CPP
+
+fi
+  CPP=$ac_cv_prog_CPP
+else
+  ac_cv_prog_CPP=$CPP
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $CPP" >&5
+$as_echo "$CPP" >&6; }
+ac_preproc_ok=false
+for ac_c_preproc_warn_flag in '' yes
+do
+  # Use a header file that comes with gcc, so configuring glibc
+  # with a fresh cross-compiler works.
+  # Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
+  # <limits.h> exists even on freestanding compilers.
+  # On the NeXT, cc -E runs the code through the compiler's parser,
+  # not just through cpp. "Syntax error" is here to catch this case.
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#ifdef __STDC__
+# include <limits.h>
+#else
+# include <assert.h>
+#endif
+		     Syntax error
+_ACEOF
+if ac_fn_c_try_cpp "$LINENO"; then :
+
+else
+  # Broken: fails on valid input.
+continue
+fi
+rm -f conftest.err conftest.i conftest.$ac_ext
+
+  # OK, works on sane cases.  Now check whether nonexistent headers
+  # can be detected and how.
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <ac_nonexistent.h>
+_ACEOF
+if ac_fn_c_try_cpp "$LINENO"; then :
+  # Broken: success on invalid input.
+continue
+else
+  # Passes both tests.
+ac_preproc_ok=:
+break
+fi
+rm -f conftest.err conftest.i conftest.$ac_ext
+
+done
+# Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
+rm -f conftest.i conftest.err conftest.$ac_ext
+if $ac_preproc_ok; then :
+
+else
+  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "C preprocessor \"$CPP\" fails sanity check
+See \`config.log' for more details" "$LINENO" 5; }
+fi
+
+ac_ext=c
+ac_cpp='$CPP $CPPFLAGS'
+ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
+ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
+ac_compiler_gnu=$ac_cv_c_compiler_gnu
+
+ac_ext=cpp
+ac_cpp='$CXXCPP $CPPFLAGS'
+ac_compile='$CXX -c $CXXFLAGS $CPPFLAGS conftest.$ac_ext >&5'
+ac_link='$CXX -o conftest$ac_exeext $CXXFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
+ac_compiler_gnu=$ac_cv_cxx_compiler_gnu
+if test -z "$CXX"; then
+  if test -n "$CCC"; then
+    CXX=$CCC
+  else
+    if test -n "$ac_tool_prefix"; then
+  for ac_prog in g++ c++ gpp aCC CC cxx cc++ cl.exe FCC KCC RCC xlC_r xlC
+  do
+    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
+set dummy $ac_tool_prefix$ac_prog; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_CXX+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$CXX"; then
+  ac_cv_prog_CXX="$CXX" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_CXX="$ac_tool_prefix$ac_prog"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+CXX=$ac_cv_prog_CXX
+if test -n "$CXX"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CXX" >&5
+$as_echo "$CXX" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+    test -n "$CXX" && break
+  done
+fi
+if test -z "$CXX"; then
+  ac_ct_CXX=$CXX
+  for ac_prog in g++ c++ gpp aCC CC cxx cc++ cl.exe FCC KCC RCC xlC_r xlC
+do
+  # Extract the first word of "$ac_prog", so it can be a program name with args.
+set dummy $ac_prog; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_ac_ct_CXX+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$ac_ct_CXX"; then
+  ac_cv_prog_ac_ct_CXX="$ac_ct_CXX" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_ac_ct_CXX="$ac_prog"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+ac_ct_CXX=$ac_cv_prog_ac_ct_CXX
+if test -n "$ac_ct_CXX"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CXX" >&5
+$as_echo "$ac_ct_CXX" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+  test -n "$ac_ct_CXX" && break
+done
+
+  if test "x$ac_ct_CXX" = x; then
+    CXX="g++"
+  else
+    case $cross_compiling:$ac_tool_warned in
+yes:)
+{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
+$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
+ac_tool_warned=yes ;;
+esac
+    CXX=$ac_ct_CXX
+  fi
+fi
+
+  fi
+fi
+# Provide some information about the compiler.
+$as_echo "$as_me:${as_lineno-$LINENO}: checking for C++ compiler version" >&5
+set X $ac_compile
+ac_compiler=$2
+for ac_option in --version -v -V -qversion; do
+  { { ac_try="$ac_compiler $ac_option >&5"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_compiler $ac_option >&5") 2>conftest.err
+  ac_status=$?
+  if test -s conftest.err; then
+    sed '10a\
+... rest of stderr output deleted ...
+         10q' conftest.err >conftest.er1
+    cat conftest.er1 >&5
+  fi
+  rm -f conftest.er1 conftest.err
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }
+done
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are using the GNU C++ compiler" >&5
+$as_echo_n "checking whether we are using the GNU C++ compiler... " >&6; }
+if ${ac_cv_cxx_compiler_gnu+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+#ifndef __GNUC__
+       choke me
+#endif
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_cxx_try_compile "$LINENO"; then :
+  ac_compiler_gnu=yes
+else
+  ac_compiler_gnu=no
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+ac_cv_cxx_compiler_gnu=$ac_compiler_gnu
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_cxx_compiler_gnu" >&5
+$as_echo "$ac_cv_cxx_compiler_gnu" >&6; }
+if test $ac_compiler_gnu = yes; then
+  GXX=yes
+else
+  GXX=
+fi
+ac_test_CXXFLAGS=${CXXFLAGS+set}
+ac_save_CXXFLAGS=$CXXFLAGS
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CXX accepts -g" >&5
+$as_echo_n "checking whether $CXX accepts -g... " >&6; }
+if ${ac_cv_prog_cxx_g+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_save_cxx_werror_flag=$ac_cxx_werror_flag
+   ac_cxx_werror_flag=yes
+   ac_cv_prog_cxx_g=no
+   CXXFLAGS="-g"
+   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_cxx_try_compile "$LINENO"; then :
+  ac_cv_prog_cxx_g=yes
+else
+  CXXFLAGS=""
+      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_cxx_try_compile "$LINENO"; then :
+
+else
+  ac_cxx_werror_flag=$ac_save_cxx_werror_flag
+	 CXXFLAGS="-g"
+	 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_cxx_try_compile "$LINENO"; then :
+  ac_cv_prog_cxx_g=yes
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+   ac_cxx_werror_flag=$ac_save_cxx_werror_flag
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cxx_g" >&5
+$as_echo "$ac_cv_prog_cxx_g" >&6; }
+if test "$ac_test_CXXFLAGS" = set; then
+  CXXFLAGS=$ac_save_CXXFLAGS
+elif test $ac_cv_prog_cxx_g = yes; then
+  if test "$GXX" = yes; then
+    CXXFLAGS="-g -O2"
+  else
+    CXXFLAGS="-g"
+  fi
+else
+  if test "$GXX" = yes; then
+    CXXFLAGS="-O2"
+  else
+    CXXFLAGS=
+  fi
+fi
+ac_ext=c
+ac_cpp='$CPP $CPPFLAGS'
+ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
+ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
+ac_compiler_gnu=$ac_cv_c_compiler_gnu
+
+
+ac_aux_dir=
+for ac_dir in "$srcdir" "$srcdir/.." "$srcdir/../.."; do
+  if test -f "$ac_dir/install-sh"; then
+    ac_aux_dir=$ac_dir
+    ac_install_sh="$ac_aux_dir/install-sh -c"
+    break
+  elif test -f "$ac_dir/install.sh"; then
+    ac_aux_dir=$ac_dir
+    ac_install_sh="$ac_aux_dir/install.sh -c"
+    break
+  elif test -f "$ac_dir/shtool"; then
+    ac_aux_dir=$ac_dir
+    ac_install_sh="$ac_aux_dir/shtool install -c"
+    break
+  fi
+done
+if test -z "$ac_aux_dir"; then
+  as_fn_error $? "cannot find install-sh, install.sh, or shtool in \"$srcdir\" \"$srcdir/..\" \"$srcdir/../..\"" "$LINENO" 5
+fi
+
+# These three variables are undocumented and unsupported,
+# and are intended to be withdrawn in a future Autoconf release.
+# They can cause serious problems if a builder's source tree is in a directory
+# whose full name contains unusual characters.
+ac_config_guess="$SHELL $ac_aux_dir/config.guess"  # Please don't use this var.
+ac_config_sub="$SHELL $ac_aux_dir/config.sub"  # Please don't use this var.
+ac_configure="$SHELL $ac_aux_dir/configure"  # Please don't use this var.
+
+
+# Expand $ac_aux_dir to an absolute path.
+am_aux_dir=`cd "$ac_aux_dir" && pwd`
+
+
+if test -n "$ac_tool_prefix"; then
+  for ac_prog in ar lib "link -lib"
+  do
+    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
+set dummy $ac_tool_prefix$ac_prog; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_AR+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$AR"; then
+  ac_cv_prog_AR="$AR" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_AR="$ac_tool_prefix$ac_prog"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+AR=$ac_cv_prog_AR
+if test -n "$AR"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $AR" >&5
+$as_echo "$AR" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+    test -n "$AR" && break
+  done
+fi
+if test -z "$AR"; then
+  ac_ct_AR=$AR
+  for ac_prog in ar lib "link -lib"
+do
+  # Extract the first word of "$ac_prog", so it can be a program name with args.
+set dummy $ac_prog; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_ac_ct_AR+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$ac_ct_AR"; then
+  ac_cv_prog_ac_ct_AR="$ac_ct_AR" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_ac_ct_AR="$ac_prog"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+ac_ct_AR=$ac_cv_prog_ac_ct_AR
+if test -n "$ac_ct_AR"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_AR" >&5
+$as_echo "$ac_ct_AR" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+  test -n "$ac_ct_AR" && break
+done
+
+  if test "x$ac_ct_AR" = x; then
+    AR="false"
+  else
+    case $cross_compiling:$ac_tool_warned in
+yes:)
+{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
+$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
+ac_tool_warned=yes ;;
+esac
+    AR=$ac_ct_AR
+  fi
+fi
+
+: ${AR=ar}
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking the archiver ($AR) interface" >&5
+$as_echo_n "checking the archiver ($AR) interface... " >&6; }
+if ${am_cv_ar_interface+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_ext=c
+ac_cpp='$CPP $CPPFLAGS'
+ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
+ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
+ac_compiler_gnu=$ac_cv_c_compiler_gnu
+
+   am_cv_ar_interface=ar
+   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+int some_variable = 0;
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  am_ar_try='$AR cru libconftest.a conftest.$ac_objext >&5'
+      { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$am_ar_try\""; } >&5
+  (eval $am_ar_try) 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }
+      if test "$ac_status" -eq 0; then
+        am_cv_ar_interface=ar
+      else
+        am_ar_try='$AR -NOLOGO -OUT:conftest.lib conftest.$ac_objext >&5'
+        { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$am_ar_try\""; } >&5
+  (eval $am_ar_try) 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }
+        if test "$ac_status" -eq 0; then
+          am_cv_ar_interface=lib
+        else
+          am_cv_ar_interface=unknown
+        fi
+      fi
+      rm -f conftest.lib libconftest.a
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+   ac_ext=c
+ac_cpp='$CPP $CPPFLAGS'
+ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
+ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
+ac_compiler_gnu=$ac_cv_c_compiler_gnu
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_ar_interface" >&5
+$as_echo "$am_cv_ar_interface" >&6; }
+
+case $am_cv_ar_interface in
+ar)
+  ;;
+lib)
+  # Microsoft lib, so override with the ar-lib wrapper script.
+  # FIXME: It is wrong to rewrite AR.
+  # But if we don't then we get into trouble of one sort or another.
+  # A longer-term fix would be to have automake use am__AR in this case,
+  # and then we could set am__AR="$am_aux_dir/ar-lib \$(AR)" or something
+  # similar.
+  AR="$am_aux_dir/ar-lib $AR"
+  ;;
+unknown)
+  as_fn_error $? "could not determine $AR interface" "$LINENO" 5
+  ;;
+esac
+
+if test -n "$ac_tool_prefix"; then
+  # Extract the first word of "${ac_tool_prefix}ranlib", so it can be a program name with args.
+set dummy ${ac_tool_prefix}ranlib; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_RANLIB+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$RANLIB"; then
+  ac_cv_prog_RANLIB="$RANLIB" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_RANLIB="${ac_tool_prefix}ranlib"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+RANLIB=$ac_cv_prog_RANLIB
+if test -n "$RANLIB"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $RANLIB" >&5
+$as_echo "$RANLIB" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+fi
+if test -z "$ac_cv_prog_RANLIB"; then
+  ac_ct_RANLIB=$RANLIB
+  # Extract the first word of "ranlib", so it can be a program name with args.
+set dummy ranlib; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_ac_ct_RANLIB+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$ac_ct_RANLIB"; then
+  ac_cv_prog_ac_ct_RANLIB="$ac_ct_RANLIB" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_ac_ct_RANLIB="ranlib"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+ac_ct_RANLIB=$ac_cv_prog_ac_ct_RANLIB
+if test -n "$ac_ct_RANLIB"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_RANLIB" >&5
+$as_echo "$ac_ct_RANLIB" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+  if test "x$ac_ct_RANLIB" = x; then
+    RANLIB=":"
+  else
+    case $cross_compiling:$ac_tool_warned in
+yes:)
+{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
+$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
+ac_tool_warned=yes ;;
+esac
+    RANLIB=$ac_ct_RANLIB
+  fi
+else
+  RANLIB="$ac_cv_prog_RANLIB"
+fi
+
+# Find a good install program.  We prefer a C program (faster),
+# so one script is as good as another.  But avoid the broken or
+# incompatible versions:
+# SysV /etc/install, /usr/sbin/install
+# SunOS /usr/etc/install
+# IRIX /sbin/install
+# AIX /bin/install
+# AmigaOS /C/install, which installs bootblocks on floppy discs
+# AIX 4 /usr/bin/installbsd, which doesn't work without a -g flag
+# AFS /usr/afsws/bin/install, which mishandles nonexistent args
+# SVR4 /usr/ucb/install, which tries to use the nonexistent group "staff"
+# OS/2's system install, which has a completely different semantic
+# ./install, which can be erroneously created by make from ./install.sh.
+# Reject install programs that cannot install multiple files.
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for a BSD-compatible install" >&5
+$as_echo_n "checking for a BSD-compatible install... " >&6; }
+if test -z "$INSTALL"; then
+if ${ac_cv_path_install+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    # Account for people who put trailing slashes in PATH elements.
+case $as_dir/ in #((
+  ./ | .// | /[cC]/* | \
+  /etc/* | /usr/sbin/* | /usr/etc/* | /sbin/* | /usr/afsws/bin/* | \
+  ?:[\\/]os2[\\/]install[\\/]* | ?:[\\/]OS2[\\/]INSTALL[\\/]* | \
+  /usr/ucb/* ) ;;
+  *)
+    # OSF1 and SCO ODT 3.0 have their own names for install.
+    # Don't use installbsd from OSF since it installs stuff as root
+    # by default.
+    for ac_prog in ginstall scoinst install; do
+      for ac_exec_ext in '' $ac_executable_extensions; do
+	if as_fn_executable_p "$as_dir/$ac_prog$ac_exec_ext"; then
+	  if test $ac_prog = install &&
+	    grep dspmsg "$as_dir/$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
+	    # AIX install.  It has an incompatible calling convention.
+	    :
+	  elif test $ac_prog = install &&
+	    grep pwplus "$as_dir/$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
+	    # program-specific install script used by HP pwplus--don't use.
+	    :
+	  else
+	    rm -rf conftest.one conftest.two conftest.dir
+	    echo one > conftest.one
+	    echo two > conftest.two
+	    mkdir conftest.dir
+	    if "$as_dir/$ac_prog$ac_exec_ext" -c conftest.one conftest.two "`pwd`/conftest.dir" &&
+	      test -s conftest.one && test -s conftest.two &&
+	      test -s conftest.dir/conftest.one &&
+	      test -s conftest.dir/conftest.two
+	    then
+	      ac_cv_path_install="$as_dir/$ac_prog$ac_exec_ext -c"
+	      break 3
+	    fi
+	  fi
+	fi
+      done
+    done
+    ;;
+esac
+
+  done
+IFS=$as_save_IFS
+
+rm -rf conftest.one conftest.two conftest.dir
+
+fi
+  if test "${ac_cv_path_install+set}" = set; then
+    INSTALL=$ac_cv_path_install
+  else
+    # As a last resort, use the slow shell script.  Don't cache a
+    # value for INSTALL within a source directory, because that will
+    # break other packages using the cache if that directory is
+    # removed, or if the value is a relative name.
+    INSTALL=$ac_install_sh
+  fi
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $INSTALL" >&5
+$as_echo "$INSTALL" >&6; }
+
+# Use test -z because SunOS4 sh mishandles braces in ${var-val}.
+# It thinks the first close brace ends the variable substitution.
+test -z "$INSTALL_PROGRAM" && INSTALL_PROGRAM='${INSTALL}'
+
+test -z "$INSTALL_SCRIPT" && INSTALL_SCRIPT='${INSTALL}'
+
+test -z "$INSTALL_DATA" && INSTALL_DATA='${INSTALL} -m 644'
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for a sed that does not truncate output" >&5
+$as_echo_n "checking for a sed that does not truncate output... " >&6; }
+if ${ac_cv_path_SED+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+            ac_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/
+     for ac_i in 1 2 3 4 5 6 7; do
+       ac_script="$ac_script$as_nl$ac_script"
+     done
+     echo "$ac_script" 2>/dev/null | sed 99q >conftest.sed
+     { ac_script=; unset ac_script;}
+     if test -z "$SED"; then
+  ac_path_SED_found=false
+  # Loop through the user's path and test for each of PROGNAME-LIST
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_prog in sed gsed; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
+      ac_path_SED="$as_dir/$ac_prog$ac_exec_ext"
+      as_fn_executable_p "$ac_path_SED" || continue
+# Check for GNU ac_path_SED and select it if it is found.
+  # Check for GNU $ac_path_SED
+case `"$ac_path_SED" --version 2>&1` in
+*GNU*)
+  ac_cv_path_SED="$ac_path_SED" ac_path_SED_found=:;;
+*)
+  ac_count=0
+  $as_echo_n 0123456789 >"conftest.in"
+  while :
+  do
+    cat "conftest.in" "conftest.in" >"conftest.tmp"
+    mv "conftest.tmp" "conftest.in"
+    cp "conftest.in" "conftest.nl"
+    $as_echo '' >> "conftest.nl"
+    "$ac_path_SED" -f conftest.sed < "conftest.nl" >"conftest.out" 2>/dev/null || break
+    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
+    as_fn_arith $ac_count + 1 && ac_count=$as_val
+    if test $ac_count -gt ${ac_path_SED_max-0}; then
+      # Best one so far, save it but keep looking for a better one
+      ac_cv_path_SED="$ac_path_SED"
+      ac_path_SED_max=$ac_count
+    fi
+    # 10*(2^10) chars as input seems more than enough
+    test $ac_count -gt 10 && break
+  done
+  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
+esac
+
+      $ac_path_SED_found && break 3
+    done
+  done
+  done
+IFS=$as_save_IFS
+  if test -z "$ac_cv_path_SED"; then
+    as_fn_error $? "no acceptable sed could be found in \$PATH" "$LINENO" 5
+  fi
+else
+  ac_cv_path_SED=$SED
+fi
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_SED" >&5
+$as_echo "$ac_cv_path_SED" >&6; }
+ SED="$ac_cv_path_SED"
+  rm -f conftest.sed
+
+
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for grep that handles long lines and -e" >&5
+$as_echo_n "checking for grep that handles long lines and -e... " >&6; }
+if ${ac_cv_path_GREP+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -z "$GREP"; then
+  ac_path_GREP_found=false
+  # Loop through the user's path and test for each of PROGNAME-LIST
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_prog in grep ggrep; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
+      ac_path_GREP="$as_dir/$ac_prog$ac_exec_ext"
+      as_fn_executable_p "$ac_path_GREP" || continue
+# Check for GNU ac_path_GREP and select it if it is found.
+  # Check for GNU $ac_path_GREP
+case `"$ac_path_GREP" --version 2>&1` in
+*GNU*)
+  ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;;
+*)
+  ac_count=0
+  $as_echo_n 0123456789 >"conftest.in"
+  while :
+  do
+    cat "conftest.in" "conftest.in" >"conftest.tmp"
+    mv "conftest.tmp" "conftest.in"
+    cp "conftest.in" "conftest.nl"
+    $as_echo 'GREP' >> "conftest.nl"
+    "$ac_path_GREP" -e 'GREP$' -e '-(cannot match)-' < "conftest.nl" >"conftest.out" 2>/dev/null || break
+    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
+    as_fn_arith $ac_count + 1 && ac_count=$as_val
+    if test $ac_count -gt ${ac_path_GREP_max-0}; then
+      # Best one so far, save it but keep looking for a better one
+      ac_cv_path_GREP="$ac_path_GREP"
+      ac_path_GREP_max=$ac_count
+    fi
+    # 10*(2^10) chars as input seems more than enough
+    test $ac_count -gt 10 && break
+  done
+  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
+esac
+
+      $ac_path_GREP_found && break 3
+    done
+  done
+  done
+IFS=$as_save_IFS
+  if test -z "$ac_cv_path_GREP"; then
+    as_fn_error $? "no acceptable grep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
+  fi
+else
+  ac_cv_path_GREP=$GREP
+fi
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5
+$as_echo "$ac_cv_path_GREP" >&6; }
+ GREP="$ac_cv_path_GREP"
+
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5
+$as_echo_n "checking for egrep... " >&6; }
+if ${ac_cv_path_EGREP+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if echo a | $GREP -E '(a|b)' >/dev/null 2>&1
+   then ac_cv_path_EGREP="$GREP -E"
+   else
+     if test -z "$EGREP"; then
+  ac_path_EGREP_found=false
+  # Loop through the user's path and test for each of PROGNAME-LIST
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_prog in egrep; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
+      ac_path_EGREP="$as_dir/$ac_prog$ac_exec_ext"
+      as_fn_executable_p "$ac_path_EGREP" || continue
+# Check for GNU ac_path_EGREP and select it if it is found.
+  # Check for GNU $ac_path_EGREP
+case `"$ac_path_EGREP" --version 2>&1` in
+*GNU*)
+  ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;;
+*)
+  ac_count=0
+  $as_echo_n 0123456789 >"conftest.in"
+  while :
+  do
+    cat "conftest.in" "conftest.in" >"conftest.tmp"
+    mv "conftest.tmp" "conftest.in"
+    cp "conftest.in" "conftest.nl"
+    $as_echo 'EGREP' >> "conftest.nl"
+    "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break
+    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
+    as_fn_arith $ac_count + 1 && ac_count=$as_val
+    if test $ac_count -gt ${ac_path_EGREP_max-0}; then
+      # Best one so far, save it but keep looking for a better one
+      ac_cv_path_EGREP="$ac_path_EGREP"
+      ac_path_EGREP_max=$ac_count
+    fi
+    # 10*(2^10) chars as input seems more than enough
+    test $ac_count -gt 10 && break
+  done
+  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
+esac
+
+      $ac_path_EGREP_found && break 3
+    done
+  done
+  done
+IFS=$as_save_IFS
+  if test -z "$ac_cv_path_EGREP"; then
+    as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
+  fi
+else
+  ac_cv_path_EGREP=$EGREP
+fi
+
+   fi
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5
+$as_echo "$ac_cv_path_EGREP" >&6; }
+ EGREP="$ac_cv_path_EGREP"
+
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for ANSI C header files" >&5
+$as_echo_n "checking for ANSI C header files... " >&6; }
+if ${ac_cv_header_stdc+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <stdlib.h>
+#include <stdarg.h>
+#include <string.h>
+#include <float.h>
+
+int
+main ()
+{
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_header_stdc=yes
+else
+  ac_cv_header_stdc=no
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+if test $ac_cv_header_stdc = yes; then
+  # SunOS 4.x string.h does not declare mem*, contrary to ANSI.
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <string.h>
+
+_ACEOF
+if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
+  $EGREP "memchr" >/dev/null 2>&1; then :
+
+else
+  ac_cv_header_stdc=no
+fi
+rm -f conftest*
+
+fi
+
+if test $ac_cv_header_stdc = yes; then
+  # ISC 2.0.2 stdlib.h does not declare free, contrary to ANSI.
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <stdlib.h>
+
+_ACEOF
+if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
+  $EGREP "free" >/dev/null 2>&1; then :
+
+else
+  ac_cv_header_stdc=no
+fi
+rm -f conftest*
+
+fi
+
+if test $ac_cv_header_stdc = yes; then
+  # /bin/cc in Irix-4.0.5 gets non-ANSI ctype macros unless using -ansi.
+  if test "$cross_compiling" = yes; then :
+  :
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <ctype.h>
+#include <stdlib.h>
+#if ((' ' & 0x0FF) == 0x020)
+# define ISLOWER(c) ('a' <= (c) && (c) <= 'z')
+# define TOUPPER(c) (ISLOWER(c) ? 'A' + ((c) - 'a') : (c))
+#else
+# define ISLOWER(c) \
+		   (('a' <= (c) && (c) <= 'i') \
+		     || ('j' <= (c) && (c) <= 'r') \
+		     || ('s' <= (c) && (c) <= 'z'))
+# define TOUPPER(c) (ISLOWER(c) ? ((c) | 0x40) : (c))
+#endif
+
+#define XOR(e, f) (((e) && !(f)) || (!(e) && (f)))
+int
+main ()
+{
+  int i;
+  for (i = 0; i < 256; i++)
+    if (XOR (islower (i), ISLOWER (i))
+	|| toupper (i) != TOUPPER (i))
+      return 2;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_run "$LINENO"; then :
+
+else
+  ac_cv_header_stdc=no
+fi
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
+fi
+
+fi
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_stdc" >&5
+$as_echo "$ac_cv_header_stdc" >&6; }
+if test $ac_cv_header_stdc = yes; then
+
+$as_echo "#define STDC_HEADERS 1" >>confdefs.h
+
+fi
+
+# On IRIX 5.3, sys/types and inttypes.h are conflicting.
+for ac_header in sys/types.h sys/stat.h stdlib.h string.h memory.h strings.h \
+		  inttypes.h stdint.h unistd.h
+do :
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
+ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default
+"
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
+_ACEOF
+
+fi
+
+done
+
+
+ { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether byte ordering is bigendian" >&5
+$as_echo_n "checking whether byte ordering is bigendian... " >&6; }
+if ${ac_cv_c_bigendian+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_cv_c_bigendian=unknown
+    # See if we're dealing with a universal compiler.
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#ifndef __APPLE_CC__
+	       not a universal capable compiler
+	     #endif
+	     typedef int dummy;
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+	# Check for potential -arch flags.  It is not universal unless
+	# there are at least two -arch flags with different values.
+	ac_arch=
+	ac_prev=
+	for ac_word in $CC $CFLAGS $CPPFLAGS $LDFLAGS; do
+	 if test -n "$ac_prev"; then
+	   case $ac_word in
+	     i?86 | x86_64 | ppc | ppc64)
+	       if test -z "$ac_arch" || test "$ac_arch" = "$ac_word"; then
+		 ac_arch=$ac_word
+	       else
+		 ac_cv_c_bigendian=universal
+		 break
+	       fi
+	       ;;
+	   esac
+	   ac_prev=
+	 elif test "x$ac_word" = "x-arch"; then
+	   ac_prev=arch
+	 fi
+       done
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+    if test $ac_cv_c_bigendian = unknown; then
+      # See if sys/param.h defines the BYTE_ORDER macro.
+      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <sys/types.h>
+	     #include <sys/param.h>
+
+int
+main ()
+{
+#if ! (defined BYTE_ORDER && defined BIG_ENDIAN \
+		     && defined LITTLE_ENDIAN && BYTE_ORDER && BIG_ENDIAN \
+		     && LITTLE_ENDIAN)
+	      bogus endian macros
+	     #endif
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  # It does; now see whether it defined to BIG_ENDIAN or not.
+	 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <sys/types.h>
+		#include <sys/param.h>
+
+int
+main ()
+{
+#if BYTE_ORDER != BIG_ENDIAN
+		 not big endian
+		#endif
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_c_bigendian=yes
+else
+  ac_cv_c_bigendian=no
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+    fi
+    if test $ac_cv_c_bigendian = unknown; then
+      # See if <limits.h> defines _LITTLE_ENDIAN or _BIG_ENDIAN (e.g., Solaris).
+      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <limits.h>
+
+int
+main ()
+{
+#if ! (defined _LITTLE_ENDIAN || defined _BIG_ENDIAN)
+	      bogus endian macros
+	     #endif
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  # It does; now see whether it defined to _BIG_ENDIAN or not.
+	 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <limits.h>
+
+int
+main ()
+{
+#ifndef _BIG_ENDIAN
+		 not big endian
+		#endif
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_c_bigendian=yes
+else
+  ac_cv_c_bigendian=no
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+    fi
+    if test $ac_cv_c_bigendian = unknown; then
+      # Compile a test program.
+      if test "$cross_compiling" = yes; then :
+  # Try to guess by grepping values from an object file.
+	 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+short int ascii_mm[] =
+		  { 0x4249, 0x4765, 0x6E44, 0x6961, 0x6E53, 0x7953, 0 };
+		short int ascii_ii[] =
+		  { 0x694C, 0x5454, 0x656C, 0x6E45, 0x6944, 0x6E61, 0 };
+		int use_ascii (int i) {
+		  return ascii_mm[i] + ascii_ii[i];
+		}
+		short int ebcdic_ii[] =
+		  { 0x89D3, 0xE3E3, 0x8593, 0x95C5, 0x89C4, 0x9581, 0 };
+		short int ebcdic_mm[] =
+		  { 0xC2C9, 0xC785, 0x95C4, 0x8981, 0x95E2, 0xA8E2, 0 };
+		int use_ebcdic (int i) {
+		  return ebcdic_mm[i] + ebcdic_ii[i];
+		}
+		extern int foo;
+
+int
+main ()
+{
+return use_ascii (foo) == use_ebcdic (foo);
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  if grep BIGenDianSyS conftest.$ac_objext >/dev/null; then
+	      ac_cv_c_bigendian=yes
+	    fi
+	    if grep LiTTleEnDian conftest.$ac_objext >/dev/null ; then
+	      if test "$ac_cv_c_bigendian" = unknown; then
+		ac_cv_c_bigendian=no
+	      else
+		# finding both strings is unlikely to happen, but who knows?
+		ac_cv_c_bigendian=unknown
+	      fi
+	    fi
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$ac_includes_default
+int
+main ()
+{
+
+	     /* Are we little or big endian?  From Harbison&Steele.  */
+	     union
+	     {
+	       long int l;
+	       char c[sizeof (long int)];
+	     } u;
+	     u.l = 1;
+	     return u.c[sizeof (long int) - 1] == 1;
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_run "$LINENO"; then :
+  ac_cv_c_bigendian=no
+else
+  ac_cv_c_bigendian=yes
+fi
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
+fi
+
+    fi
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_bigendian" >&5
+$as_echo "$ac_cv_c_bigendian" >&6; }
+ case $ac_cv_c_bigendian in #(
+   yes)
+     $as_echo "#define WORDS_BIGENDIAN 1" >>confdefs.h
+;; #(
+   no)
+      ;; #(
+   universal)
+
+$as_echo "#define AC_APPLE_UNIVERSAL_BUILD 1" >>confdefs.h
+
+     ;; #(
+   *)
+     as_fn_error $? "unknown endianness
+ presetting ac_cv_c_bigendian=no (or yes) will help" "$LINENO" 5 ;;
+ esac
+
+
+# Make sure we can run config.sub.
+$SHELL "$ac_aux_dir/config.sub" sun4 >/dev/null 2>&1 ||
+  as_fn_error $? "cannot run $SHELL $ac_aux_dir/config.sub" "$LINENO" 5
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking build system type" >&5
+$as_echo_n "checking build system type... " >&6; }
+if ${ac_cv_build+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_build_alias=$build_alias
+test "x$ac_build_alias" = x &&
+  ac_build_alias=`$SHELL "$ac_aux_dir/config.guess"`
+test "x$ac_build_alias" = x &&
+  as_fn_error $? "cannot guess build type; you must specify one" "$LINENO" 5
+ac_cv_build=`$SHELL "$ac_aux_dir/config.sub" $ac_build_alias` ||
+  as_fn_error $? "$SHELL $ac_aux_dir/config.sub $ac_build_alias failed" "$LINENO" 5
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_build" >&5
+$as_echo "$ac_cv_build" >&6; }
+case $ac_cv_build in
+*-*-*) ;;
+*) as_fn_error $? "invalid value of canonical build" "$LINENO" 5;;
+esac
+build=$ac_cv_build
+ac_save_IFS=$IFS; IFS='-'
+set x $ac_cv_build
+shift
+build_cpu=$1
+build_vendor=$2
+shift; shift
+# Remember, the first character of IFS is used to create $*,
+# except with old shells:
+build_os=$*
+IFS=$ac_save_IFS
+case $build_os in *\ *) build_os=`echo "$build_os" | sed 's/ /-/g'`;; esac
+
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking host system type" >&5
+$as_echo_n "checking host system type... " >&6; }
+if ${ac_cv_host+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test "x$host_alias" = x; then
+  ac_cv_host=$ac_cv_build
+else
+  ac_cv_host=`$SHELL "$ac_aux_dir/config.sub" $host_alias` ||
+    as_fn_error $? "$SHELL $ac_aux_dir/config.sub $host_alias failed" "$LINENO" 5
+fi
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_host" >&5
+$as_echo "$ac_cv_host" >&6; }
+case $ac_cv_host in
+*-*-*) ;;
+*) as_fn_error $? "invalid value of canonical host" "$LINENO" 5;;
+esac
+host=$ac_cv_host
+ac_save_IFS=$IFS; IFS='-'
+set x $ac_cv_host
+shift
+host_cpu=$1
+host_vendor=$2
+shift; shift
+# Remember, the first character of IFS is used to create $*,
+# except with old shells:
+host_os=$*
+IFS=$ac_save_IFS
+case $host_os in *\ *) host_os=`echo "$host_os" | sed 's/ /-/g'`;; esac
+
+
+
+case $host_cpu in
+  i*86 | x86_64 )
+
+$as_echo "#define CPU_CISC 1" >>confdefs.h
+
+
+$as_echo "#define HAVE_X86 1" >>confdefs.h
+
+    ;;
+  * )
+
+$as_echo "#define CPU_RISC 1" >>confdefs.h
+
+    ;;
+esac
+
+case $host_os in
+  *cygwin*|*mingw* )
+    EXE=.exe
+    ;;
+  * )
+    EXE=""
+    ;;
+esac
+   # define executable suffix; this is needed for `make clean'
+
+supported_cflags=""
+if test "$EMPTY_CFLAGS" = "no"; then
+  supported_cflags="$CFLAGS"
+fi
+
+WERROR=""
+for w in -Werror -errwarn; do
+  if test "x$WERROR" = "x"; then
+    { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ${CC-c} accepts $w" >&5
+$as_echo_n "checking whether ${CC-c} accepts $w... " >&6; }
+    save_cflags="$CFLAGS"
+    if test "x$CFLAGS" = "x"; then :
+  CFLAGS="$w"
+else
+  CFLAGS="$CFLAGS $w"
+fi
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+int main(void) { return 0; }
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  WERROR="$w"
+       { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+else
+  CFLAGS="$save_cflags"
+       { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+  fi
+done
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ${CC-c} accepts -fPIC" >&5
+$as_echo_n "checking whether ${CC-c} accepts -fPIC... " >&6; }
+save_cflags="$CFLAGS"
+if test "x$CFLAGS" = "x"; then :
+  CFLAGS="-fPIC"
+else
+  CFLAGS="$CFLAGS -fPIC"
+fi
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+int main(void) { return 0; }
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  if test "x$supported_cflags" = "x"; then :
+  supported_cflags="-fPIC"
+else
+  supported_cflags="$supported_cflags -fPIC"
+fi
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+else
+  CFLAGS="$save_cflags"
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+if test "$EMPTY_CFLAGS" = "yes"; then
+  for f in -Wall -pedantic -Wstrict-prototypes; do
+    { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ${CC-c} accepts $f" >&5
+$as_echo_n "checking whether ${CC-c} accepts $f... " >&6; }
+    save_cflags="$CFLAGS"
+    if test "x$CFLAGS" = "x"; then :
+  CFLAGS="$f"
+else
+  CFLAGS="$CFLAGS $f"
+fi
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+int main(void) { return 0; }
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  if test "x$supported_cflags" = "x"; then :
+  supported_cflags="$f"
+else
+  supported_cflags="$supported_cflags $f"
+fi
+       { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+else
+  CFLAGS="$save_cflags"
+       { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+  done
+
+  OOPT=""
+  for f in -O4 -O3; do
+    if test "x$OOPT" = "x"; then
+      { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ${CC-c} accepts $f" >&5
+$as_echo_n "checking whether ${CC-c} accepts $f... " >&6; }
+      save_cflags="$CFLAGS"
+      if test "x$CFLAGS" = "x"; then :
+  CFLAGS="$f"
+else
+  CFLAGS="$CFLAGS $f"
+fi
+      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+int main(void) { return 0; }
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  if test "x$supported_cflags" = "x"; then :
+  supported_cflags="$f"
+else
+  supported_cflags="$supported_cflags $f"
+fi
+         OOPT="$f"
+         { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+else
+  CFLAGS="$save_cflags"
+         { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+    fi
+  done
+
+  for f in -fexpensive-optimizations -funroll-loops; do
+    { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ${CC-c} accepts $f" >&5
+$as_echo_n "checking whether ${CC-c} accepts $f... " >&6; }
+    save_cflags="$CFLAGS"
+    if test "x$CFLAGS" = "x"; then :
+  CFLAGS="$f"
+else
+  CFLAGS="$CFLAGS $f"
+fi
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+int main(void) { return 0; }
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  if test "x$supported_cflags" = "x"; then :
+  supported_cflags="$f"
+else
+  supported_cflags="$supported_cflags $f"
+fi
+       { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+else
+  CFLAGS="$save_cflags"
+       { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+  done
+fi
+
+for f in -Wno-language-extension-token; do
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ${CC-c} accepts $f" >&5
+$as_echo_n "checking whether ${CC-c} accepts $f... " >&6; }
+  save_cflags="$CFLAGS"
+  testf=$(echo "$f" | $SED 's|-Wno-\(.*\)|-W\1|g')
+  if test "x$CFLAGS" = "x"; then :
+  CFLAGS="$testf"
+else
+  CFLAGS="$CFLAGS $testf"
+fi
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+int main(void) { return 0; }
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  if test "x$supported_cflags" = "x"; then :
+  supported_cflags="$f"
+else
+  supported_cflags="$supported_cflags $f"
+fi
+     { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+else
+  CFLAGS="$save_cflags"
+     { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+done
+
+CFLAGS="$supported_cflags"
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for ANSI C header files" >&5
+$as_echo_n "checking for ANSI C header files... " >&6; }
+if ${ac_cv_header_stdc+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <stdlib.h>
+#include <stdarg.h>
+#include <string.h>
+#include <float.h>
+
+int
+main ()
+{
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_header_stdc=yes
+else
+  ac_cv_header_stdc=no
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+if test $ac_cv_header_stdc = yes; then
+  # SunOS 4.x string.h does not declare mem*, contrary to ANSI.
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <string.h>
+
+_ACEOF
+if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
+  $EGREP "memchr" >/dev/null 2>&1; then :
+
+else
+  ac_cv_header_stdc=no
+fi
+rm -f conftest*
+
+fi
+
+if test $ac_cv_header_stdc = yes; then
+  # ISC 2.0.2 stdlib.h does not declare free, contrary to ANSI.
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <stdlib.h>
+
+_ACEOF
+if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
+  $EGREP "free" >/dev/null 2>&1; then :
+
+else
+  ac_cv_header_stdc=no
+fi
+rm -f conftest*
+
+fi
+
+if test $ac_cv_header_stdc = yes; then
+  # /bin/cc in Irix-4.0.5 gets non-ANSI ctype macros unless using -ansi.
+  if test "$cross_compiling" = yes; then :
+  :
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <ctype.h>
+#include <stdlib.h>
+#if ((' ' & 0x0FF) == 0x020)
+# define ISLOWER(c) ('a' <= (c) && (c) <= 'z')
+# define TOUPPER(c) (ISLOWER(c) ? 'A' + ((c) - 'a') : (c))
+#else
+# define ISLOWER(c) \
+		   (('a' <= (c) && (c) <= 'i') \
+		     || ('j' <= (c) && (c) <= 'r') \
+		     || ('s' <= (c) && (c) <= 'z'))
+# define TOUPPER(c) (ISLOWER(c) ? ((c) | 0x40) : (c))
+#endif
+
+#define XOR(e, f) (((e) && !(f)) || (!(e) && (f)))
+int
+main ()
+{
+  int i;
+  for (i = 0; i < 256; i++)
+    if (XOR (islower (i), ISLOWER (i))
+	|| toupper (i) != TOUPPER (i))
+      return 2;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_run "$LINENO"; then :
+
+else
+  ac_cv_header_stdc=no
+fi
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
+fi
+
+fi
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_stdc" >&5
+$as_echo "$ac_cv_header_stdc" >&6; }
+if test $ac_cv_header_stdc = yes; then
+
+$as_echo "#define STDC_HEADERS 1" >>confdefs.h
+
+fi
+
+for ac_header in unistd.h byteswap.h stdint.h sys/uio.h inttypes.h sys/types.h machine/types.h sys/int_types.h
+do :
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
+ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default
+"
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
+_ACEOF
+
+fi
+
+done
+
+
+for ac_header in sys/socket.h netinet/in.h arpa/inet.h
+do :
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
+ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default
+"
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
+_ACEOF
+
+fi
+
+done
+
+for ac_header in windows.h
+do :
+  ac_fn_c_check_header_compile "$LINENO" "windows.h" "ac_cv_header_windows_h" "$ac_includes_default
+"
+if test "x$ac_cv_header_windows_h" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_WINDOWS_H 1
+_ACEOF
+ for ac_header in winsock2.h
+do :
+  ac_fn_c_check_header_compile "$LINENO" "winsock2.h" "ac_cv_header_winsock2_h" "$ac_includes_default
+"
+if test "x$ac_cv_header_winsock2_h" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_WINSOCK2_H 1
+_ACEOF
+
+fi
+
+done
+
+fi
+
+done
+
+
+ac_fn_c_check_type "$LINENO" "int8_t" "ac_cv_type_int8_t" "$ac_includes_default"
+if test "x$ac_cv_type_int8_t" = xyes; then :
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_INT8_T 1
+_ACEOF
+
+
+fi
+ac_fn_c_check_type "$LINENO" "uint8_t" "ac_cv_type_uint8_t" "$ac_includes_default"
+if test "x$ac_cv_type_uint8_t" = xyes; then :
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_UINT8_T 1
+_ACEOF
+
+
+fi
+ac_fn_c_check_type "$LINENO" "int16_t" "ac_cv_type_int16_t" "$ac_includes_default"
+if test "x$ac_cv_type_int16_t" = xyes; then :
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_INT16_T 1
+_ACEOF
+
+
+fi
+ac_fn_c_check_type "$LINENO" "uint16_t" "ac_cv_type_uint16_t" "$ac_includes_default"
+if test "x$ac_cv_type_uint16_t" = xyes; then :
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_UINT16_T 1
+_ACEOF
+
+
+fi
+ac_fn_c_check_type "$LINENO" "int32_t" "ac_cv_type_int32_t" "$ac_includes_default"
+if test "x$ac_cv_type_int32_t" = xyes; then :
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_INT32_T 1
+_ACEOF
+
+
+fi
+ac_fn_c_check_type "$LINENO" "uint32_t" "ac_cv_type_uint32_t" "$ac_includes_default"
+if test "x$ac_cv_type_uint32_t" = xyes; then :
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_UINT32_T 1
+_ACEOF
+
+
+fi
+ac_fn_c_check_type "$LINENO" "uint64_t" "ac_cv_type_uint64_t" "$ac_includes_default"
+if test "x$ac_cv_type_uint64_t" = xyes; then :
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_UINT64_T 1
+_ACEOF
+
+
+fi
+
+# The cast to long int works around a bug in the HP C Compiler
+# version HP92453-01 B.11.11.23709.GP, which incorrectly rejects
+# declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'.
+# This bug is HP SR number 8606223364.
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of unsigned long" >&5
+$as_echo_n "checking size of unsigned long... " >&6; }
+if ${ac_cv_sizeof_unsigned_long+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if ac_fn_c_compute_int "$LINENO" "(long int) (sizeof (unsigned long))" "ac_cv_sizeof_unsigned_long"        "$ac_includes_default"; then :
+
+else
+  if test "$ac_cv_type_unsigned_long" = yes; then
+     { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error 77 "cannot compute sizeof (unsigned long)
+See \`config.log' for more details" "$LINENO" 5; }
+   else
+     ac_cv_sizeof_unsigned_long=0
+   fi
+fi
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sizeof_unsigned_long" >&5
+$as_echo "$ac_cv_sizeof_unsigned_long" >&6; }
+
+
+
+cat >>confdefs.h <<_ACEOF
+#define SIZEOF_UNSIGNED_LONG $ac_cv_sizeof_unsigned_long
+_ACEOF
+
+
+# The cast to long int works around a bug in the HP C Compiler
+# version HP92453-01 B.11.11.23709.GP, which incorrectly rejects
+# declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'.
+# This bug is HP SR number 8606223364.
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of unsigned long long" >&5
+$as_echo_n "checking size of unsigned long long... " >&6; }
+if ${ac_cv_sizeof_unsigned_long_long+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if ac_fn_c_compute_int "$LINENO" "(long int) (sizeof (unsigned long long))" "ac_cv_sizeof_unsigned_long_long"        "$ac_includes_default"; then :
+
+else
+  if test "$ac_cv_type_unsigned_long_long" = yes; then
+     { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error 77 "cannot compute sizeof (unsigned long long)
+See \`config.log' for more details" "$LINENO" 5; }
+   else
+     ac_cv_sizeof_unsigned_long_long=0
+   fi
+fi
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sizeof_unsigned_long_long" >&5
+$as_echo "$ac_cv_sizeof_unsigned_long_long" >&6; }
+
+
+
+cat >>confdefs.h <<_ACEOF
+#define SIZEOF_UNSIGNED_LONG_LONG $ac_cv_sizeof_unsigned_long_long
+_ACEOF
+
+
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for an ANSI C-conforming const" >&5
+$as_echo_n "checking for an ANSI C-conforming const... " >&6; }
+if ${ac_cv_c_const+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+
+#ifndef __cplusplus
+  /* Ultrix mips cc rejects this sort of thing.  */
+  typedef int charset[2];
+  const charset cs = { 0, 0 };
+  /* SunOS 4.1.1 cc rejects this.  */
+  char const *const *pcpcc;
+  char **ppc;
+  /* NEC SVR4.0.2 mips cc rejects this.  */
+  struct point {int x, y;};
+  static struct point const zero = {0,0};
+  /* AIX XL C 1.02.0.0 rejects this.
+     It does not let you subtract one const X* pointer from another in
+     an arm of an if-expression whose if-part is not a constant
+     expression */
+  const char *g = "string";
+  pcpcc = &g + (g ? g-g : 0);
+  /* HPUX 7.0 cc rejects these. */
+  ++pcpcc;
+  ppc = (char**) pcpcc;
+  pcpcc = (char const *const *) ppc;
+  { /* SCO 3.2v4 cc rejects this sort of thing.  */
+    char tx;
+    char *t = &tx;
+    char const *s = 0 ? (char *) 0 : (char const *) 0;
+
+    *t++ = 0;
+    if (s) return 0;
+  }
+  { /* Someone thinks the Sun supposedly-ANSI compiler will reject this.  */
+    int x[] = {25, 17};
+    const int *foo = &x[0];
+    ++foo;
+  }
+  { /* Sun SC1.0 ANSI compiler rejects this -- but not the above. */
+    typedef const int *iptr;
+    iptr p = 0;
+    ++p;
+  }
+  { /* AIX XL C 1.02.0.0 rejects this sort of thing, saying
+       "k.c", line 2.27: 1506-025 (S) Operand must be a modifiable lvalue. */
+    struct s { int j; const int *ap[3]; } bx;
+    struct s *b = &bx; b->j = 5;
+  }
+  { /* ULTRIX-32 V3.1 (Rev 9) vcc rejects this */
+    const int foo = 10;
+    if (!foo) return 0;
+  }
+  return !cs[0] && !zero.x;
+#endif
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_c_const=yes
+else
+  ac_cv_c_const=no
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_const" >&5
+$as_echo "$ac_cv_c_const" >&6; }
+if test $ac_cv_c_const = no; then
+
+$as_echo "#define const /**/" >>confdefs.h
+
+fi
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for inline" >&5
+$as_echo_n "checking for inline... " >&6; }
+if ${ac_cv_c_inline+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_cv_c_inline=no
+for ac_kw in inline __inline__ __inline; do
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#ifndef __cplusplus
+typedef int foo_t;
+static $ac_kw foo_t static_foo () {return 0; }
+$ac_kw foo_t foo () {return 0; }
+#endif
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_c_inline=$ac_kw
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+  test "$ac_cv_c_inline" != no && break
+done
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_inline" >&5
+$as_echo "$ac_cv_c_inline" >&6; }
+
+case $ac_cv_c_inline in
+  inline | yes) ;;
+  *)
+    case $ac_cv_c_inline in
+      no) ac_val=;;
+      *) ac_val=$ac_cv_c_inline;;
+    esac
+    cat >>confdefs.h <<_ACEOF
+#ifndef __cplusplus
+#define inline $ac_val
+#endif
+_ACEOF
+    ;;
+esac
+
+ac_fn_c_check_type "$LINENO" "size_t" "ac_cv_type_size_t" "$ac_includes_default"
+if test "x$ac_cv_type_size_t" = xyes; then :
+
+else
+
+cat >>confdefs.h <<_ACEOF
+#define size_t unsigned int
+_ACEOF
+
+fi
+
+
+for ac_func in socket inet_aton usleep sigaction
+do :
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
+_ACEOF
+
+fi
+done
+
+
+if test "x$ac_cv_func_socket" = "xno"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for socket in -lsocket" >&5
+$as_echo_n "checking for socket in -lsocket... " >&6; }
+if ${ac_cv_lib_socket_socket+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_check_lib_save_LIBS=$LIBS
+LIBS="-lsocket  $LIBS"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char socket ();
+int
+main ()
+{
+return socket ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_lib_socket_socket=yes
+else
+  ac_cv_lib_socket_socket=no
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+LIBS=$ac_check_lib_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_socket_socket" >&5
+$as_echo "$ac_cv_lib_socket_socket" >&6; }
+if test "x$ac_cv_lib_socket_socket" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_LIBSOCKET 1
+_ACEOF
+
+  LIBS="-lsocket $LIBS"
+
+fi
+
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for socket in -lwsock32" >&5
+$as_echo_n "checking for socket in -lwsock32... " >&6; }
+  SAVELIBS="$LIBS"
+  LIBS="$LIBS -lwsock32"
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+#include <winsock2.h>
+int main(void)
+{
+    int fd = socket(0, 0, 0);
+    if (fd < 0)
+      return -1;
+    else
+      return 0;
+}
+
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_func_socket=yes
+     { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+else
+  LIBS="$SAVELIBS"
+     { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+fi
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable debug logging in all modules" >&5
+$as_echo_n "checking whether to enable debug logging in all modules... " >&6; }
+# Check whether --enable-debug-logging was given.
+if test "${enable_debug_logging+set}" = set; then :
+  enableval=$enable_debug_logging;
+else
+  enable_debug_logging=no
+fi
+
+if test "$enable_debug_logging" = "yes"; then
+
+$as_echo "#define ENABLE_DEBUG_LOGGING 1" >>confdefs.h
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_debug_logging" >&5
+$as_echo "$enable_debug_logging" >&6; }
+
+
+
+
+
+
+
+
+if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
+	if test -n "$ac_tool_prefix"; then
+  # Extract the first word of "${ac_tool_prefix}pkg-config", so it can be a program name with args.
+set dummy ${ac_tool_prefix}pkg-config; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_path_PKG_CONFIG+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  case $PKG_CONFIG in
+  [\\/]* | ?:[\\/]*)
+  ac_cv_path_PKG_CONFIG="$PKG_CONFIG" # Let the user override the test with a path.
+  ;;
+  *)
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_path_PKG_CONFIG="$as_dir/$ac_word$ac_exec_ext"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+  ;;
+esac
+fi
+PKG_CONFIG=$ac_cv_path_PKG_CONFIG
+if test -n "$PKG_CONFIG"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PKG_CONFIG" >&5
+$as_echo "$PKG_CONFIG" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+fi
+if test -z "$ac_cv_path_PKG_CONFIG"; then
+  ac_pt_PKG_CONFIG=$PKG_CONFIG
+  # Extract the first word of "pkg-config", so it can be a program name with args.
+set dummy pkg-config; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_path_ac_pt_PKG_CONFIG+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  case $ac_pt_PKG_CONFIG in
+  [\\/]* | ?:[\\/]*)
+  ac_cv_path_ac_pt_PKG_CONFIG="$ac_pt_PKG_CONFIG" # Let the user override the test with a path.
+  ;;
+  *)
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_path_ac_pt_PKG_CONFIG="$as_dir/$ac_word$ac_exec_ext"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+  ;;
+esac
+fi
+ac_pt_PKG_CONFIG=$ac_cv_path_ac_pt_PKG_CONFIG
+if test -n "$ac_pt_PKG_CONFIG"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_pt_PKG_CONFIG" >&5
+$as_echo "$ac_pt_PKG_CONFIG" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+  if test "x$ac_pt_PKG_CONFIG" = x; then
+    PKG_CONFIG=""
+  else
+    case $cross_compiling:$ac_tool_warned in
+yes:)
+{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
+$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
+ac_tool_warned=yes ;;
+esac
+    PKG_CONFIG=$ac_pt_PKG_CONFIG
+  fi
+else
+  PKG_CONFIG="$ac_cv_path_PKG_CONFIG"
+fi
+
+fi
+if test -n "$PKG_CONFIG"; then
+	_pkg_min_version=0.9.0
+	{ $as_echo "$as_me:${as_lineno-$LINENO}: checking pkg-config is at least version $_pkg_min_version" >&5
+$as_echo_n "checking pkg-config is at least version $_pkg_min_version... " >&6; }
+	if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
+		{ $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+	else
+		{ $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+		PKG_CONFIG=""
+	fi
+fi
+if test "x$PKG_CONFIG" != "x"; then :
+  PKG_CONFIG="$PKG_CONFIG --static"
+fi
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to leverage OpenSSL crypto" >&5
+$as_echo_n "checking whether to leverage OpenSSL crypto... " >&6; }
+# Check whether --enable-openssl was given.
+if test "${enable_openssl+set}" = set; then :
+  enableval=$enable_openssl;
+else
+  enable_openssl=no
+fi
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_openssl" >&5
+$as_echo "$enable_openssl" >&6; }
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to leverage NSS crypto" >&5
+$as_echo_n "checking whether to leverage NSS crypto... " >&6; }
+# Check whether --enable-nss was given.
+if test "${enable_nss+set}" = set; then :
+  enableval=$enable_nss;
+else
+  enable_nss=no
+fi
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_nss" >&5
+$as_echo "$enable_nss" >&6; }
+
+if test "$enable_openssl" = "yes"; then
+   { $as_echo "$as_me:${as_lineno-$LINENO}: checking for user specified OpenSSL directory" >&5
+$as_echo_n "checking for user specified OpenSSL directory... " >&6; }
+
+# Check whether --with-openssl-dir was given.
+if test "${with_openssl_dir+set}" = set; then :
+  withval=$with_openssl_dir; if test "x$PKG_CONFIG" != "x" && test -f $with_openssl_dir/lib/pkgconfig/libcrypto.pc; then
+         if test "x$PKG_CONFIG_PATH" = "x"; then
+           export PKG_CONFIG_PATH="$with_openssl_dir/lib/pkgconfig"
+         else
+           export PKG_CONFIG_PATH="$with_openssl_dir/lib/pkgconfig:$PKG_CONFIG_PATH"
+         fi
+         { $as_echo "$as_me:${as_lineno-$LINENO}: result: $with_openssl_dir" >&5
+$as_echo "$with_openssl_dir" >&6; }
+       elif test -d $with_openssl_dir/lib; then
+         CFLAGS="$CFLAGS -I$with_openssl_dir/include"
+         if test "x$LDFLAGS" = "x"; then
+           LDFLAGS="-L$with_openssl_dir/lib"
+         else
+           LDFLAGS="$LDFLAGS -L$with_openssl_dir/lib"
+         fi
+         { $as_echo "$as_me:${as_lineno-$LINENO}: result: $with_openssl_dir" >&5
+$as_echo "$with_openssl_dir" >&6; }
+       else
+         { $as_echo "$as_me:${as_lineno-$LINENO}: result: invalid" >&5
+$as_echo "invalid" >&6; }
+         { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "Invalid OpenSSL location: $with_openssl_dir
+See \`config.log' for more details" "$LINENO" 5; }
+       fi
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+   if test "x$PKG_CONFIG" != "x"; then
+
+pkg_failed=no
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for crypto" >&5
+$as_echo_n "checking for crypto... " >&6; }
+
+if test -n "$crypto_CFLAGS"; then
+    pkg_cv_crypto_CFLAGS="$crypto_CFLAGS"
+ elif test -n "$PKG_CONFIG"; then
+    if test -n "$PKG_CONFIG" && \
+    { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"libcrypto >= 1.0.1\""; } >&5
+  ($PKG_CONFIG --exists --print-errors "libcrypto >= 1.0.1") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }; then
+  pkg_cv_crypto_CFLAGS=`$PKG_CONFIG --cflags "libcrypto >= 1.0.1" 2>/dev/null`
+		      test "x$?" != "x0" && pkg_failed=yes
+else
+  pkg_failed=yes
+fi
+ else
+    pkg_failed=untried
+fi
+if test -n "$crypto_LIBS"; then
+    pkg_cv_crypto_LIBS="$crypto_LIBS"
+ elif test -n "$PKG_CONFIG"; then
+    if test -n "$PKG_CONFIG" && \
+    { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"libcrypto >= 1.0.1\""; } >&5
+  ($PKG_CONFIG --exists --print-errors "libcrypto >= 1.0.1") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }; then
+  pkg_cv_crypto_LIBS=`$PKG_CONFIG --libs "libcrypto >= 1.0.1" 2>/dev/null`
+		      test "x$?" != "x0" && pkg_failed=yes
+else
+  pkg_failed=yes
+fi
+ else
+    pkg_failed=untried
+fi
+
+
+
+if test $pkg_failed = yes; then
+   	{ $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+
+if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
+        _pkg_short_errors_supported=yes
+else
+        _pkg_short_errors_supported=no
+fi
+        if test $_pkg_short_errors_supported = yes; then
+	        crypto_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "libcrypto >= 1.0.1" 2>&1`
+        else
+	        crypto_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "libcrypto >= 1.0.1" 2>&1`
+        fi
+	# Put the nasty error message in config.log where it belongs
+	echo "$crypto_PKG_ERRORS" >&5
+
+	as_fn_error $? "Package requirements (libcrypto >= 1.0.1) were not met:
+
+$crypto_PKG_ERRORS
+
+Consider adjusting the PKG_CONFIG_PATH environment variable if you
+installed software in a non-standard prefix.
+
+Alternatively, you may set the environment variables crypto_CFLAGS
+and crypto_LIBS to avoid the need to call pkg-config.
+See the pkg-config man page for more details." "$LINENO" 5
+elif test $pkg_failed = untried; then
+     	{ $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+	{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "The pkg-config script could not be found or is too old.  Make sure it
+is in your PATH or set the PKG_CONFIG environment variable to the full
+path to pkg-config.
+
+Alternatively, you may set the environment variables crypto_CFLAGS
+and crypto_LIBS to avoid the need to call pkg-config.
+See the pkg-config man page for more details.
+
+To get pkg-config, see <http://pkg-config.freedesktop.org/>.
+See \`config.log' for more details" "$LINENO" 5; }
+else
+	crypto_CFLAGS=$pkg_cv_crypto_CFLAGS
+	crypto_LIBS=$pkg_cv_crypto_LIBS
+        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+	CFLAGS="$CFLAGS $crypto_CFLAGS"
+        LIBS="$crypto_LIBS $LIBS"
+fi
+   else
+     { $as_echo "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5
+$as_echo_n "checking for dlopen in -ldl... " >&6; }
+if ${ac_cv_lib_dl_dlopen+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_check_lib_save_LIBS=$LIBS
+LIBS="-ldl  $LIBS"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char dlopen ();
+int
+main ()
+{
+return dlopen ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_lib_dl_dlopen=yes
+else
+  ac_cv_lib_dl_dlopen=no
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+LIBS=$ac_check_lib_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5
+$as_echo "$ac_cv_lib_dl_dlopen" >&6; }
+if test "x$ac_cv_lib_dl_dlopen" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_LIBDL 1
+_ACEOF
+
+  LIBS="-ldl $LIBS"
+
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: can't find libdl" >&5
+$as_echo "$as_me: WARNING: can't find libdl" >&2;}
+fi
+
+     { $as_echo "$as_me:${as_lineno-$LINENO}: checking for inflate in -lz" >&5
+$as_echo_n "checking for inflate in -lz... " >&6; }
+if ${ac_cv_lib_z_inflate+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_check_lib_save_LIBS=$LIBS
+LIBS="-lz  $LIBS"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char inflate ();
+int
+main ()
+{
+return inflate ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_lib_z_inflate=yes
+else
+  ac_cv_lib_z_inflate=no
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+LIBS=$ac_check_lib_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_z_inflate" >&5
+$as_echo "$ac_cv_lib_z_inflate" >&6; }
+if test "x$ac_cv_lib_z_inflate" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_LIBZ 1
+_ACEOF
+
+  LIBS="-lz $LIBS"
+
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: can't find libz" >&5
+$as_echo "$as_me: WARNING: can't find libz" >&2;}
+fi
+
+   fi
+
+   { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing EVP_EncryptInit" >&5
+$as_echo_n "checking for library containing EVP_EncryptInit... " >&6; }
+if ${ac_cv_search_EVP_EncryptInit+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_func_search_save_LIBS=$LIBS
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char EVP_EncryptInit ();
+int
+main ()
+{
+return EVP_EncryptInit ();
+  ;
+  return 0;
+}
+_ACEOF
+for ac_lib in '' crypto; do
+  if test -z "$ac_lib"; then
+    ac_res="none required"
+  else
+    ac_res=-l$ac_lib
+    LIBS="-l$ac_lib  $ac_func_search_save_LIBS"
+  fi
+  if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_search_EVP_EncryptInit=$ac_res
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext
+  if ${ac_cv_search_EVP_EncryptInit+:} false; then :
+  break
+fi
+done
+if ${ac_cv_search_EVP_EncryptInit+:} false; then :
+
+else
+  ac_cv_search_EVP_EncryptInit=no
+fi
+rm conftest.$ac_ext
+LIBS=$ac_func_search_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_EVP_EncryptInit" >&5
+$as_echo "$ac_cv_search_EVP_EncryptInit" >&6; }
+ac_res=$ac_cv_search_EVP_EncryptInit
+if test "$ac_res" != no; then :
+  test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
+
+else
+  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "can't find openssl >= 1.0.1 crypto lib
+See \`config.log' for more details" "$LINENO" 5; }
+fi
+
+   { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing EVP_aes_128_ctr" >&5
+$as_echo_n "checking for library containing EVP_aes_128_ctr... " >&6; }
+if ${ac_cv_search_EVP_aes_128_ctr+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_func_search_save_LIBS=$LIBS
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char EVP_aes_128_ctr ();
+int
+main ()
+{
+return EVP_aes_128_ctr ();
+  ;
+  return 0;
+}
+_ACEOF
+for ac_lib in '' crypto; do
+  if test -z "$ac_lib"; then
+    ac_res="none required"
+  else
+    ac_res=-l$ac_lib
+    LIBS="-l$ac_lib  $ac_func_search_save_LIBS"
+  fi
+  if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_search_EVP_aes_128_ctr=$ac_res
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext
+  if ${ac_cv_search_EVP_aes_128_ctr+:} false; then :
+  break
+fi
+done
+if ${ac_cv_search_EVP_aes_128_ctr+:} false; then :
+
+else
+  ac_cv_search_EVP_aes_128_ctr=no
+fi
+rm conftest.$ac_ext
+LIBS=$ac_func_search_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_EVP_aes_128_ctr" >&5
+$as_echo "$ac_cv_search_EVP_aes_128_ctr" >&6; }
+ac_res=$ac_cv_search_EVP_aes_128_ctr
+if test "$ac_res" != no; then :
+  test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
+
+else
+  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "can't find openssl >= 1.0.1 crypto lib
+See \`config.log' for more details" "$LINENO" 5; }
+fi
+
+   { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing EVP_aes_128_gcm" >&5
+$as_echo_n "checking for library containing EVP_aes_128_gcm... " >&6; }
+if ${ac_cv_search_EVP_aes_128_gcm+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_func_search_save_LIBS=$LIBS
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char EVP_aes_128_gcm ();
+int
+main ()
+{
+return EVP_aes_128_gcm ();
+  ;
+  return 0;
+}
+_ACEOF
+for ac_lib in '' crypto; do
+  if test -z "$ac_lib"; then
+    ac_res="none required"
+  else
+    ac_res=-l$ac_lib
+    LIBS="-l$ac_lib  $ac_func_search_save_LIBS"
+  fi
+  if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_search_EVP_aes_128_gcm=$ac_res
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext
+  if ${ac_cv_search_EVP_aes_128_gcm+:} false; then :
+  break
+fi
+done
+if ${ac_cv_search_EVP_aes_128_gcm+:} false; then :
+
+else
+  ac_cv_search_EVP_aes_128_gcm=no
+fi
+rm conftest.$ac_ext
+LIBS=$ac_func_search_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_EVP_aes_128_gcm" >&5
+$as_echo "$ac_cv_search_EVP_aes_128_gcm" >&6; }
+ac_res=$ac_cv_search_EVP_aes_128_gcm
+if test "$ac_res" != no; then :
+  test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
+
+else
+  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "can't find openssl >= 1.0.1 crypto lib
+See \`config.log' for more details" "$LINENO" 5; }
+fi
+
+
+
+$as_echo "#define GCM 1" >>confdefs.h
+
+
+$as_echo "#define OPENSSL 1" >>confdefs.h
+
+   AES_ICM_OBJS="crypto/cipher/aes_icm_ossl.o crypto/cipher/aes_gcm_ossl.o"
+   HMAC_OBJS=crypto/hash/hmac_ossl.o
+   USE_EXTERNAL_CRYPTO=1
+
+
+   { $as_echo "$as_me:${as_lineno-$LINENO}: checking if OPENSSL_cleanse is broken" >&5
+$as_echo_n "checking if OPENSSL_cleanse is broken... " >&6; }
+   if test "$cross_compiling" = yes; then :
+  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "cannot run test program while cross compiling
+See \`config.log' for more details" "$LINENO" 5; }
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+     #include <stdio.h>
+     #include <openssl/crypto.h>
+
+int
+main ()
+{
+
+     #define BUFFER_SIZE (16)
+     char buffer[BUFFER_SIZE];
+     int i;
+     for (i = 0; i < BUFFER_SIZE; i++) {
+       buffer[i] = i & 0xff;
+     }
+     OPENSSL_cleanse(buffer, BUFFER_SIZE);
+     for (i = 0; i < BUFFER_SIZE; i++) {
+       if (buffer[i]) {
+         printf("Buffer contents not zero at position %d (is %d)\n", i,
+             buffer[i]);
+         return 1;
+       }
+     }
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_run "$LINENO"; then :
+  openssl_cleanse_broken=no
+else
+
+     openssl_cleanse_broken=yes
+
+$as_echo "#define OPENSSL_CLEANSE_BROKEN 1" >>confdefs.h
+
+
+fi
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
+fi
+
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: $openssl_cleanse_broken" >&5
+$as_echo "$openssl_cleanse_broken" >&6; }
+
+   { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to leverage OpenSSL KDF algorithm" >&5
+$as_echo_n "checking whether to leverage OpenSSL KDF algorithm... " >&6; }
+   # Check whether --enable-openssl-kdf was given.
+if test "${enable_openssl_kdf+set}" = set; then :
+  enableval=$enable_openssl_kdf;
+else
+  enable_openssl_kdf=no
+fi
+
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_openssl_kdf" >&5
+$as_echo "$enable_openssl_kdf" >&6; }
+   if test "$enable_openssl_kdf" = "yes"; then
+     { $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing kdf_srtp" >&5
+$as_echo_n "checking for library containing kdf_srtp... " >&6; }
+if ${ac_cv_search_kdf_srtp+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_func_search_save_LIBS=$LIBS
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char kdf_srtp ();
+int
+main ()
+{
+return kdf_srtp ();
+  ;
+  return 0;
+}
+_ACEOF
+for ac_lib in '' crypto; do
+  if test -z "$ac_lib"; then
+    ac_res="none required"
+  else
+    ac_res=-l$ac_lib
+    LIBS="-l$ac_lib  $ac_func_search_save_LIBS"
+  fi
+  if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_search_kdf_srtp=$ac_res
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext
+  if ${ac_cv_search_kdf_srtp+:} false; then :
+  break
+fi
+done
+if ${ac_cv_search_kdf_srtp+:} false; then :
+
+else
+  ac_cv_search_kdf_srtp=no
+fi
+rm conftest.$ac_ext
+LIBS=$ac_func_search_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_kdf_srtp" >&5
+$as_echo "$ac_cv_search_kdf_srtp" >&6; }
+ac_res=$ac_cv_search_kdf_srtp
+if test "$ac_res" != no; then :
+  test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
+
+else
+  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "can't find openssl KDF lib
+See \`config.log' for more details" "$LINENO" 5; }
+fi
+
+
+$as_echo "#define OPENSSL_KDF 1" >>confdefs.h
+
+   fi
+elif test "$enable_nss" = "yes"; then
+   { $as_echo "$as_me:${as_lineno-$LINENO}: checking for user specified NSS directory" >&5
+$as_echo_n "checking for user specified NSS directory... " >&6; }
+
+# Check whether --with-nss-dir was given.
+if test "${with_nss_dir+set}" = set; then :
+  withval=$with_nss_dir; if test "x$PKG_CONFIG" != "x" && test -f $with_nss_dir/lib/pkgconfig/nss.pc; then
+         if test "x$PKG_CONFIG_PATH" = "x"; then
+           export PKG_CONFIG_PATH="$with_nss_dir/lib/pkgconfig"
+         else
+           export PKG_CONFIG_PATH="$with_nss_dir/lib/pkgconfig:$PKG_CONFIG_PATH"
+         fi
+         { $as_echo "$as_me:${as_lineno-$LINENO}: result: $with_nss_dir" >&5
+$as_echo "$with_nss_dir" >&6; }
+       elif test -d $with_nss_dir/lib; then
+         CFLAGS="$CFLAGS -I$with_nss_dir/include"
+         CFLAGS="$CFLAGS -I$with_nss_dir/../public/nss"
+         if test "x$LDFLAGS" = "x"; then
+           LDFLAGS="-L$with_nss_dir/lib"
+         else
+           LDFLAGS="$LDFLAGS -L$with_nss_dir/lib"
+         fi
+         nss_skip_pkg_config=yes
+         { $as_echo "$as_me:${as_lineno-$LINENO}: result: $with_nss_dir" >&5
+$as_echo "$with_nss_dir" >&6; }
+       else
+         { $as_echo "$as_me:${as_lineno-$LINENO}: result: invalid" >&5
+$as_echo "invalid" >&6; }
+         { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "Invalid NSS location: $with_nss_dir
+See \`config.log' for more details" "$LINENO" 5; }
+       fi
+       CRYPTO_LIBDIR=$with_nss_dir/lib
+
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+   if test "x$PKG_CONFIG" != "x" && test "$nss_skip_pkg_config" != "yes"; then
+
+pkg_failed=no
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for nss" >&5
+$as_echo_n "checking for nss... " >&6; }
+
+if test -n "$nss_CFLAGS"; then
+    pkg_cv_nss_CFLAGS="$nss_CFLAGS"
+ elif test -n "$PKG_CONFIG"; then
+    if test -n "$PKG_CONFIG" && \
+    { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"nss\""; } >&5
+  ($PKG_CONFIG --exists --print-errors "nss") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }; then
+  pkg_cv_nss_CFLAGS=`$PKG_CONFIG --cflags "nss" 2>/dev/null`
+		      test "x$?" != "x0" && pkg_failed=yes
+else
+  pkg_failed=yes
+fi
+ else
+    pkg_failed=untried
+fi
+if test -n "$nss_LIBS"; then
+    pkg_cv_nss_LIBS="$nss_LIBS"
+ elif test -n "$PKG_CONFIG"; then
+    if test -n "$PKG_CONFIG" && \
+    { { $as_echo "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"nss\""; } >&5
+  ($PKG_CONFIG --exists --print-errors "nss") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }; then
+  pkg_cv_nss_LIBS=`$PKG_CONFIG --libs "nss" 2>/dev/null`
+		      test "x$?" != "x0" && pkg_failed=yes
+else
+  pkg_failed=yes
+fi
+ else
+    pkg_failed=untried
+fi
+
+
+
+if test $pkg_failed = yes; then
+   	{ $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+
+if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
+        _pkg_short_errors_supported=yes
+else
+        _pkg_short_errors_supported=no
+fi
+        if test $_pkg_short_errors_supported = yes; then
+	        nss_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "nss" 2>&1`
+        else
+	        nss_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "nss" 2>&1`
+        fi
+	# Put the nasty error message in config.log where it belongs
+	echo "$nss_PKG_ERRORS" >&5
+
+	as_fn_error $? "Package requirements (nss) were not met:
+
+$nss_PKG_ERRORS
+
+Consider adjusting the PKG_CONFIG_PATH environment variable if you
+installed software in a non-standard prefix.
+
+Alternatively, you may set the environment variables nss_CFLAGS
+and nss_LIBS to avoid the need to call pkg-config.
+See the pkg-config man page for more details." "$LINENO" 5
+elif test $pkg_failed = untried; then
+     	{ $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+	{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "The pkg-config script could not be found or is too old.  Make sure it
+is in your PATH or set the PKG_CONFIG environment variable to the full
+path to pkg-config.
+
+Alternatively, you may set the environment variables nss_CFLAGS
+and nss_LIBS to avoid the need to call pkg-config.
+See the pkg-config man page for more details.
+
+To get pkg-config, see <http://pkg-config.freedesktop.org/>.
+See \`config.log' for more details" "$LINENO" 5; }
+else
+	nss_CFLAGS=$pkg_cv_nss_CFLAGS
+	nss_LIBS=$pkg_cv_nss_LIBS
+        { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+	CFLAGS="$CFLAGS $nss_CFLAGS"
+         LIBS="$nss_LIBS $LIBS"
+fi
+   else
+     for ac_header in nss.h
+do :
+  ac_fn_c_check_header_compile "$LINENO" "nss.h" "ac_cv_header_nss_h" "$ac_includes_default
+"
+if test "x$ac_cv_header_nss_h" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_NSS_H 1
+_ACEOF
+
+else
+  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "can't find useable NSS headers
+See \`config.log' for more details" "$LINENO" 5; }
+fi
+
+done
+
+     { $as_echo "$as_me:${as_lineno-$LINENO}: checking for PR_GetError in -lnspr4" >&5
+$as_echo_n "checking for PR_GetError in -lnspr4... " >&6; }
+if ${ac_cv_lib_nspr4_PR_GetError+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_check_lib_save_LIBS=$LIBS
+LIBS="-lnspr4  $LIBS"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char PR_GetError ();
+int
+main ()
+{
+return PR_GetError ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_lib_nspr4_PR_GetError=yes
+else
+  ac_cv_lib_nspr4_PR_GetError=no
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+LIBS=$ac_check_lib_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_nspr4_PR_GetError" >&5
+$as_echo "$ac_cv_lib_nspr4_PR_GetError" >&6; }
+if test "x$ac_cv_lib_nspr4_PR_GetError" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_LIBNSPR4 1
+_ACEOF
+
+  LIBS="-lnspr4 $LIBS"
+
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: can't find libnspr4" >&5
+$as_echo "$as_me: WARNING: can't find libnspr4" >&2;}
+fi
+
+     { $as_echo "$as_me:${as_lineno-$LINENO}: checking for NSS_NoDB_Init in -lnss3" >&5
+$as_echo_n "checking for NSS_NoDB_Init in -lnss3... " >&6; }
+if ${ac_cv_lib_nss3_NSS_NoDB_Init+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_check_lib_save_LIBS=$LIBS
+LIBS="-lnss3  $LIBS"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char NSS_NoDB_Init ();
+int
+main ()
+{
+return NSS_NoDB_Init ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_lib_nss3_NSS_NoDB_Init=yes
+else
+  ac_cv_lib_nss3_NSS_NoDB_Init=no
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+LIBS=$ac_check_lib_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_nss3_NSS_NoDB_Init" >&5
+$as_echo "$ac_cv_lib_nss3_NSS_NoDB_Init" >&6; }
+if test "x$ac_cv_lib_nss3_NSS_NoDB_Init" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_LIBNSS3 1
+_ACEOF
+
+  LIBS="-lnss3 $LIBS"
+
+else
+  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "can't find useable libnss3
+See \`config.log' for more details" "$LINENO" 5; }
+fi
+
+   fi
+
+
+$as_echo "#define GCM 1" >>confdefs.h
+
+
+$as_echo "#define NSS 1" >>confdefs.h
+
+   AES_ICM_OBJS="crypto/cipher/aes_icm_nss.o crypto/cipher/aes_gcm_nss.o"
+
+   # TODO(RLB): Use NSS for HMAC
+   HMAC_OBJS="crypto/hash/hmac.o crypto/hash/sha1.o"
+
+   # TODO(RLB): Use NSS for KDF
+
+   USE_EXTERNAL_CRYPTO=1
+
+else
+   AES_ICM_OBJS="crypto/cipher/aes_icm.o crypto/cipher/aes.o"
+   HMAC_OBJS="crypto/hash/hmac.o crypto/hash/sha1.o"
+fi
+
+
+
+
+PCAP_LIB=""
+# Check whether --enable-pcap was given.
+if test "${enable_pcap+set}" = set; then :
+  enableval=$enable_pcap;
+fi
+
+if test "x$enable_pcap" != "xno"; then :
+
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for pcap_create in -lpcap" >&5
+$as_echo_n "checking for pcap_create in -lpcap... " >&6; }
+if ${ac_cv_lib_pcap_pcap_create+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_check_lib_save_LIBS=$LIBS
+LIBS="-lpcap  $LIBS"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char pcap_create ();
+int
+main ()
+{
+return pcap_create ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_lib_pcap_pcap_create=yes
+else
+  ac_cv_lib_pcap_pcap_create=no
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+LIBS=$ac_check_lib_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_pcap_pcap_create" >&5
+$as_echo "$ac_cv_lib_pcap_pcap_create" >&6; }
+if test "x$ac_cv_lib_pcap_pcap_create" = xyes; then :
+  PCAP_LIB="-lpcap"
+
+$as_echo "#define HAVE_PCAP 1" >>confdefs.h
+
+     HAVE_PCAP=1
+
+fi
+
+
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for pcap_create in -lwpcap" >&5
+$as_echo_n "checking for pcap_create in -lwpcap... " >&6; }
+if ${ac_cv_lib_wpcap_pcap_create+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_check_lib_save_LIBS=$LIBS
+LIBS="-lwpcap  $LIBS"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char pcap_create ();
+int
+main ()
+{
+return pcap_create ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_lib_wpcap_pcap_create=yes
+else
+  ac_cv_lib_wpcap_pcap_create=no
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+LIBS=$ac_check_lib_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_wpcap_pcap_create" >&5
+$as_echo "$ac_cv_lib_wpcap_pcap_create" >&6; }
+if test "x$ac_cv_lib_wpcap_pcap_create" = xyes; then :
+  PCAP_LIB="-lwpcap"
+
+$as_echo "#define HAVE_PCAP 1" >>confdefs.h
+
+     HAVE_PCAP=1
+
+fi
+
+
+fi
+
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to redirect logging to stdout" >&5
+$as_echo_n "checking whether to redirect logging to stdout... " >&6; }
+# Check whether --enable-log-stdout was given.
+if test "${enable_log_stdout+set}" = set; then :
+  enableval=$enable_log_stdout;
+else
+  enable_log_stdout=no
+fi
+
+if test "$enable_log_stdout" = "yes"; then
+
+$as_echo "#define ERR_REPORTING_STDOUT 1" >>confdefs.h
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $enable_log_stdout" >&5
+$as_echo "$enable_log_stdout" >&6; }
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking wheather to use a file for logging" >&5
+$as_echo_n "checking wheather to use a file for logging... " >&6; }
+
+# Check whether --with-log-file was given.
+if test "${with_log_file+set}" = set; then :
+  withval=$with_log_file; case x$with_log_file in #(
+  x) :
+    valid_with_log_file="no" ;; #(
+  xyes) :
+    valid_with_log_file="no" ;; #(
+  *) :
+    valid_with_error_file="yes" ;;
+esac
+   if test "$valid_with_log_file" = "no"; then :
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: invalid" >&5
+$as_echo "invalid" >&6; }
+      { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "Invalid value for --with-log-file: \"$with_log_file\"
+See \`config.log' for more details" "$LINENO" 5; }
+else
+
+cat >>confdefs.h <<_ACEOF
+#define ERR_REPORTING_FILE "$with_log_file"
+_ACEOF
+
+      { $as_echo "$as_me:${as_lineno-$LINENO}: result: using log file: \"$with_log_file\"" >&5
+$as_echo "using log file: \"$with_log_file\"" >&6; }
+fi
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+if test "$enable_log_stdout" = "yes" && test "x$with_log_file" != "x"; then :
+  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "Can only use one of --enable-log-stdout and --with-log-file; they are mutually exclusive
+See \`config.log' for more details" "$LINENO" 5; }
+fi
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for extra C compiler flags" >&5
+$as_echo_n "checking for extra C compiler flags... " >&6; }
+if test "x$EXTRA_CFLAGS" != "x"; then :
+  if test "x$CFLAGS" = "x"; then :
+  CFLAGS="$EXTRA_CFLAGS"
+else
+  CFLAGS="$CFLAGS $EXTRA_CFLAGS"
+fi
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: $EXTRA_CFLAGS" >&5
+$as_echo "$EXTRA_CFLAGS" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+ac_config_headers="$ac_config_headers crypto/include/config.h:config_in.h"
+
+
+ac_config_files="$ac_config_files Makefile crypto/Makefile doc/Makefile fuzzer/Makefile libsrtp2.pc"
+
+cat >confcache <<\_ACEOF
+# This file is a shell script that caches the results of configure
+# tests run on this system so they can be shared between configure
+# scripts and configure runs, see configure's option --config-cache.
+# It is not useful on other systems.  If it contains results you don't
+# want to keep, you may remove or edit it.
+#
+# config.status only pays attention to the cache file if you give it
+# the --recheck option to rerun configure.
+#
+# `ac_cv_env_foo' variables (set or unset) will be overridden when
+# loading this file, other *unset* `ac_cv_foo' will be assigned the
+# following values.
+
+_ACEOF
+
+# The following way of writing the cache mishandles newlines in values,
+# but we know of no workaround that is simple, portable, and efficient.
+# So, we kill variables containing newlines.
+# Ultrix sh set writes to stderr and can't be redirected directly,
+# and sets the high bit in the cache file unless we assign to the vars.
+(
+  for ac_var in `(set) 2>&1 | sed -n 's/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'`; do
+    eval ac_val=\$$ac_var
+    case $ac_val in #(
+    *${as_nl}*)
+      case $ac_var in #(
+      *_cv_*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
+$as_echo "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
+      esac
+      case $ac_var in #(
+      _ | IFS | as_nl) ;; #(
+      BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
+      *) { eval $ac_var=; unset $ac_var;} ;;
+      esac ;;
+    esac
+  done
+
+  (set) 2>&1 |
+    case $as_nl`(ac_space=' '; set) 2>&1` in #(
+    *${as_nl}ac_space=\ *)
+      # `set' does not quote correctly, so add quotes: double-quote
+      # substitution turns \\\\ into \\, and sed turns \\ into \.
+      sed -n \
+	"s/'/'\\\\''/g;
+	  s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p"
+      ;; #(
+    *)
+      # `set' quotes correctly as required by POSIX, so do not add quotes.
+      sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p"
+      ;;
+    esac |
+    sort
+) |
+  sed '
+     /^ac_cv_env_/b end
+     t clear
+     :clear
+     s/^\([^=]*\)=\(.*[{}].*\)$/test "${\1+set}" = set || &/
+     t end
+     s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/
+     :end' >>confcache
+if diff "$cache_file" confcache >/dev/null 2>&1; then :; else
+  if test -w "$cache_file"; then
+    if test "x$cache_file" != "x/dev/null"; then
+      { $as_echo "$as_me:${as_lineno-$LINENO}: updating cache $cache_file" >&5
+$as_echo "$as_me: updating cache $cache_file" >&6;}
+      if test ! -f "$cache_file" || test -h "$cache_file"; then
+	cat confcache >"$cache_file"
+      else
+        case $cache_file in #(
+        */* | ?:*)
+	  mv -f confcache "$cache_file"$$ &&
+	  mv -f "$cache_file"$$ "$cache_file" ;; #(
+        *)
+	  mv -f confcache "$cache_file" ;;
+	esac
+      fi
+    fi
+  else
+    { $as_echo "$as_me:${as_lineno-$LINENO}: not updating unwritable cache $cache_file" >&5
+$as_echo "$as_me: not updating unwritable cache $cache_file" >&6;}
+  fi
+fi
+rm -f confcache
+
+test "x$prefix" = xNONE && prefix=$ac_default_prefix
+# Let make expand exec_prefix.
+test "x$exec_prefix" = xNONE && exec_prefix='${prefix}'
+
+DEFS=-DHAVE_CONFIG_H
+
+ac_libobjs=
+ac_ltlibobjs=
+U=
+for ac_i in : $LIBOBJS; do test "x$ac_i" = x: && continue
+  # 1. Remove the extension, and $U if already installed.
+  ac_script='s/\$U\././;s/\.o$//;s/\.obj$//'
+  ac_i=`$as_echo "$ac_i" | sed "$ac_script"`
+  # 2. Prepend LIBOBJDIR.  When used with automake>=1.10 LIBOBJDIR
+  #    will be set to the directory where LIBOBJS objects are built.
+  as_fn_append ac_libobjs " \${LIBOBJDIR}$ac_i\$U.$ac_objext"
+  as_fn_append ac_ltlibobjs " \${LIBOBJDIR}$ac_i"'$U.lo'
+done
+LIBOBJS=$ac_libobjs
+
+LTLIBOBJS=$ac_ltlibobjs
+
+
+
+
+: "${CONFIG_STATUS=./config.status}"
+ac_write_fail=0
+ac_clean_files_save=$ac_clean_files
+ac_clean_files="$ac_clean_files $CONFIG_STATUS"
+{ $as_echo "$as_me:${as_lineno-$LINENO}: creating $CONFIG_STATUS" >&5
+$as_echo "$as_me: creating $CONFIG_STATUS" >&6;}
+as_write_fail=0
+cat >$CONFIG_STATUS <<_ASEOF || as_write_fail=1
+#! $SHELL
+# Generated by $as_me.
+# Run this file to recreate the current configuration.
+# Compiler output produced by configure, useful for debugging
+# configure, is in config.log if it exists.
+
+debug=false
+ac_cs_recheck=false
+ac_cs_silent=false
+
+SHELL=\${CONFIG_SHELL-$SHELL}
+export SHELL
+_ASEOF
+cat >>$CONFIG_STATUS <<\_ASEOF || as_write_fail=1
+## -------------------- ##
+## M4sh Initialization. ##
+## -------------------- ##
+
+# Be more Bourne compatible
+DUALCASE=1; export DUALCASE # for MKS sh
+if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then :
+  emulate sh
+  NULLCMD=:
+  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
+  # is contrary to our usage.  Disable this feature.
+  alias -g '${1+"$@"}'='"$@"'
+  setopt NO_GLOB_SUBST
+else
+  case `(set -o) 2>/dev/null` in #(
+  *posix*) :
+    set -o posix ;; #(
+  *) :
+     ;;
+esac
+fi
+
+
+as_nl='
+'
+export as_nl
+# Printing a long string crashes Solaris 7 /usr/bin/printf.
+as_echo='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
+as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo
+as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo$as_echo
+# Prefer a ksh shell builtin over an external printf program on Solaris,
+# but without wasting forks for bash or zsh.
+if test -z "$BASH_VERSION$ZSH_VERSION" \
+    && (test "X`print -r -- $as_echo`" = "X$as_echo") 2>/dev/null; then
+  as_echo='print -r --'
+  as_echo_n='print -rn --'
+elif (test "X`printf %s $as_echo`" = "X$as_echo") 2>/dev/null; then
+  as_echo='printf %s\n'
+  as_echo_n='printf %s'
+else
+  if test "X`(/usr/ucb/echo -n -n $as_echo) 2>/dev/null`" = "X-n $as_echo"; then
+    as_echo_body='eval /usr/ucb/echo -n "$1$as_nl"'
+    as_echo_n='/usr/ucb/echo -n'
+  else
+    as_echo_body='eval expr "X$1" : "X\\(.*\\)"'
+    as_echo_n_body='eval
+      arg=$1;
+      case $arg in #(
+      *"$as_nl"*)
+	expr "X$arg" : "X\\(.*\\)$as_nl";
+	arg=`expr "X$arg" : ".*$as_nl\\(.*\\)"`;;
+      esac;
+      expr "X$arg" : "X\\(.*\\)" | tr -d "$as_nl"
+    '
+    export as_echo_n_body
+    as_echo_n='sh -c $as_echo_n_body as_echo'
+  fi
+  export as_echo_body
+  as_echo='sh -c $as_echo_body as_echo'
+fi
+
+# The user is always right.
+if test "${PATH_SEPARATOR+set}" != set; then
+  PATH_SEPARATOR=:
+  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
+    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
+      PATH_SEPARATOR=';'
+  }
+fi
+
+
+# IFS
+# We need space, tab and new line, in precisely that order.  Quoting is
+# there to prevent editors from complaining about space-tab.
+# (If _AS_PATH_WALK were called with IFS unset, it would disable word
+# splitting by setting IFS to empty value.)
+IFS=" ""	$as_nl"
+
+# Find who we are.  Look in the path if we contain no directory separator.
+as_myself=
+case $0 in #((
+  *[\\/]* ) as_myself=$0 ;;
+  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break
+  done
+IFS=$as_save_IFS
+
+     ;;
+esac
+# We did not find ourselves, most probably we were run as `sh COMMAND'
+# in which case we are not to be found in the path.
+if test "x$as_myself" = x; then
+  as_myself=$0
+fi
+if test ! -f "$as_myself"; then
+  $as_echo "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
+  exit 1
+fi
+
+# Unset variables that we do not need and which cause bugs (e.g. in
+# pre-3.0 UWIN ksh).  But do not cause bugs in bash 2.01; the "|| exit 1"
+# suppresses any "Segmentation fault" message there.  '((' could
+# trigger a bug in pdksh 5.2.14.
+for as_var in BASH_ENV ENV MAIL MAILPATH
+do eval test x\${$as_var+set} = xset \
+  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
+done
+PS1='$ '
+PS2='> '
+PS4='+ '
+
+# NLS nuisances.
+LC_ALL=C
+export LC_ALL
+LANGUAGE=C
+export LANGUAGE
+
+# CDPATH.
+(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
+
+
+# as_fn_error STATUS ERROR [LINENO LOG_FD]
+# ----------------------------------------
+# Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are
+# provided, also output the error to LOG_FD, referencing LINENO. Then exit the
+# script with STATUS, using 1 if that was 0.
+as_fn_error ()
+{
+  as_status=$1; test $as_status -eq 0 && as_status=1
+  if test "$4"; then
+    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+    $as_echo "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
+  fi
+  $as_echo "$as_me: error: $2" >&2
+  as_fn_exit $as_status
+} # as_fn_error
+
+
+# as_fn_set_status STATUS
+# -----------------------
+# Set $? to STATUS, without forking.
+as_fn_set_status ()
+{
+  return $1
+} # as_fn_set_status
+
+# as_fn_exit STATUS
+# -----------------
+# Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
+as_fn_exit ()
+{
+  set +e
+  as_fn_set_status $1
+  exit $1
+} # as_fn_exit
+
+# as_fn_unset VAR
+# ---------------
+# Portably unset VAR.
+as_fn_unset ()
+{
+  { eval $1=; unset $1;}
+}
+as_unset=as_fn_unset
+# as_fn_append VAR VALUE
+# ----------------------
+# Append the text in VALUE to the end of the definition contained in VAR. Take
+# advantage of any shell optimizations that allow amortized linear growth over
+# repeated appends, instead of the typical quadratic growth present in naive
+# implementations.
+if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null; then :
+  eval 'as_fn_append ()
+  {
+    eval $1+=\$2
+  }'
+else
+  as_fn_append ()
+  {
+    eval $1=\$$1\$2
+  }
+fi # as_fn_append
+
+# as_fn_arith ARG...
+# ------------------
+# Perform arithmetic evaluation on the ARGs, and store the result in the
+# global $as_val. Take advantage of shells that can avoid forks. The arguments
+# must be portable across $(()) and expr.
+if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null; then :
+  eval 'as_fn_arith ()
+  {
+    as_val=$(( $* ))
+  }'
+else
+  as_fn_arith ()
+  {
+    as_val=`expr "$@" || test $? -eq 1`
+  }
+fi # as_fn_arith
+
+
+if expr a : '\(a\)' >/dev/null 2>&1 &&
+   test "X`expr 00001 : '.*\(...\)'`" = X001; then
+  as_expr=expr
+else
+  as_expr=false
+fi
+
+if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
+  as_basename=basename
+else
+  as_basename=false
+fi
+
+if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
+  as_dirname=dirname
+else
+  as_dirname=false
+fi
+
+as_me=`$as_basename -- "$0" ||
+$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
+	 X"$0" : 'X\(//\)$' \| \
+	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
+$as_echo X/"$0" |
+    sed '/^.*\/\([^/][^/]*\)\/*$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\/\(\/\/\)$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\/\(\/\).*/{
+	    s//\1/
+	    q
+	  }
+	  s/.*/./; q'`
+
+# Avoid depending upon Character Ranges.
+as_cr_letters='abcdefghijklmnopqrstuvwxyz'
+as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
+as_cr_Letters=$as_cr_letters$as_cr_LETTERS
+as_cr_digits='0123456789'
+as_cr_alnum=$as_cr_Letters$as_cr_digits
+
+ECHO_C= ECHO_N= ECHO_T=
+case `echo -n x` in #(((((
+-n*)
+  case `echo 'xy\c'` in
+  *c*) ECHO_T='	';;	# ECHO_T is single tab character.
+  xy)  ECHO_C='\c';;
+  *)   echo `echo ksh88 bug on AIX 6.1` > /dev/null
+       ECHO_T='	';;
+  esac;;
+*)
+  ECHO_N='-n';;
+esac
+
+rm -f conf$$ conf$$.exe conf$$.file
+if test -d conf$$.dir; then
+  rm -f conf$$.dir/conf$$.file
+else
+  rm -f conf$$.dir
+  mkdir conf$$.dir 2>/dev/null
+fi
+if (echo >conf$$.file) 2>/dev/null; then
+  if ln -s conf$$.file conf$$ 2>/dev/null; then
+    as_ln_s='ln -s'
+    # ... but there are two gotchas:
+    # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail.
+    # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable.
+    # In both cases, we have to default to `cp -pR'.
+    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
+      as_ln_s='cp -pR'
+  elif ln conf$$.file conf$$ 2>/dev/null; then
+    as_ln_s=ln
+  else
+    as_ln_s='cp -pR'
+  fi
+else
+  as_ln_s='cp -pR'
+fi
+rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
+rmdir conf$$.dir 2>/dev/null
+
+
+# as_fn_mkdir_p
+# -------------
+# Create "$as_dir" as a directory, including parents if necessary.
+as_fn_mkdir_p ()
+{
+
+  case $as_dir in #(
+  -*) as_dir=./$as_dir;;
+  esac
+  test -d "$as_dir" || eval $as_mkdir_p || {
+    as_dirs=
+    while :; do
+      case $as_dir in #(
+      *\'*) as_qdir=`$as_echo "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
+      *) as_qdir=$as_dir;;
+      esac
+      as_dirs="'$as_qdir' $as_dirs"
+      as_dir=`$as_dirname -- "$as_dir" ||
+$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
+	 X"$as_dir" : 'X\(//\)[^/]' \| \
+	 X"$as_dir" : 'X\(//\)$' \| \
+	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
+$as_echo X"$as_dir" |
+    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\/\)[^/].*/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\/\)$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\).*/{
+	    s//\1/
+	    q
+	  }
+	  s/.*/./; q'`
+      test -d "$as_dir" && break
+    done
+    test -z "$as_dirs" || eval "mkdir $as_dirs"
+  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
+
+
+} # as_fn_mkdir_p
+if mkdir -p . 2>/dev/null; then
+  as_mkdir_p='mkdir -p "$as_dir"'
+else
+  test -d ./-p && rmdir ./-p
+  as_mkdir_p=false
+fi
+
+
+# as_fn_executable_p FILE
+# -----------------------
+# Test if FILE is an executable regular file.
+as_fn_executable_p ()
+{
+  test -f "$1" && test -x "$1"
+} # as_fn_executable_p
+as_test_x='test -x'
+as_executable_p=as_fn_executable_p
+
+# Sed expression to map a string onto a valid CPP name.
+as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'"
+
+# Sed expression to map a string onto a valid variable name.
+as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'"
+
+
+exec 6>&1
+## ----------------------------------- ##
+## Main body of $CONFIG_STATUS script. ##
+## ----------------------------------- ##
+_ASEOF
+test $as_write_fail = 0 && chmod +x $CONFIG_STATUS || ac_write_fail=1
+
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
+# Save the log message, to keep $0 and so on meaningful, and to
+# report actual input values of CONFIG_FILES etc. instead of their
+# values after options handling.
+ac_log="
+This file was extended by libsrtp2 $as_me 2.3.0, which was
+generated by GNU Autoconf 2.69.  Invocation command line was
+
+  CONFIG_FILES    = $CONFIG_FILES
+  CONFIG_HEADERS  = $CONFIG_HEADERS
+  CONFIG_LINKS    = $CONFIG_LINKS
+  CONFIG_COMMANDS = $CONFIG_COMMANDS
+  $ $0 $@
+
+on `(hostname || uname -n) 2>/dev/null | sed 1q`
+"
+
+_ACEOF
+
+case $ac_config_files in *"
+"*) set x $ac_config_files; shift; ac_config_files=$*;;
+esac
+
+case $ac_config_headers in *"
+"*) set x $ac_config_headers; shift; ac_config_headers=$*;;
+esac
+
+
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
+# Files that config.status was made for.
+config_files="$ac_config_files"
+config_headers="$ac_config_headers"
+
+_ACEOF
+
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
+ac_cs_usage="\
+\`$as_me' instantiates files and other configuration actions
+from templates according to the current configuration.  Unless the files
+and actions are specified as TAGs, all are instantiated by default.
+
+Usage: $0 [OPTION]... [TAG]...
+
+  -h, --help       print this help, then exit
+  -V, --version    print version number and configuration settings, then exit
+      --config     print configuration, then exit
+  -q, --quiet, --silent
+                   do not print progress messages
+  -d, --debug      don't remove temporary files
+      --recheck    update $as_me by reconfiguring in the same conditions
+      --file=FILE[:TEMPLATE]
+                   instantiate the configuration file FILE
+      --header=FILE[:TEMPLATE]
+                   instantiate the configuration header FILE
+
+Configuration files:
+$config_files
+
+Configuration headers:
+$config_headers
+
+Report bugs to <https://github.com/cisco/libsrtp/issues>."
+
+_ACEOF
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
+ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
+ac_cs_version="\\
+libsrtp2 config.status 2.3.0
+configured by $0, generated by GNU Autoconf 2.69,
+  with options \\"\$ac_cs_config\\"
+
+Copyright (C) 2012 Free Software Foundation, Inc.
+This config.status script is free software; the Free Software Foundation
+gives unlimited permission to copy, distribute and modify it."
+
+ac_pwd='$ac_pwd'
+srcdir='$srcdir'
+INSTALL='$INSTALL'
+test -n "\$AWK" || AWK=awk
+_ACEOF
+
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
+# The default lists apply if the user does not specify any file.
+ac_need_defaults=:
+while test $# != 0
+do
+  case $1 in
+  --*=?*)
+    ac_option=`expr "X$1" : 'X\([^=]*\)='`
+    ac_optarg=`expr "X$1" : 'X[^=]*=\(.*\)'`
+    ac_shift=:
+    ;;
+  --*=)
+    ac_option=`expr "X$1" : 'X\([^=]*\)='`
+    ac_optarg=
+    ac_shift=:
+    ;;
+  *)
+    ac_option=$1
+    ac_optarg=$2
+    ac_shift=shift
+    ;;
+  esac
+
+  case $ac_option in
+  # Handling of the options.
+  -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r)
+    ac_cs_recheck=: ;;
+  --version | --versio | --versi | --vers | --ver | --ve | --v | -V )
+    $as_echo "$ac_cs_version"; exit ;;
+  --config | --confi | --conf | --con | --co | --c )
+    $as_echo "$ac_cs_config"; exit ;;
+  --debug | --debu | --deb | --de | --d | -d )
+    debug=: ;;
+  --file | --fil | --fi | --f )
+    $ac_shift
+    case $ac_optarg in
+    *\'*) ac_optarg=`$as_echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
+    '') as_fn_error $? "missing file argument" ;;
+    esac
+    as_fn_append CONFIG_FILES " '$ac_optarg'"
+    ac_need_defaults=false;;
+  --header | --heade | --head | --hea )
+    $ac_shift
+    case $ac_optarg in
+    *\'*) ac_optarg=`$as_echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
+    esac
+    as_fn_append CONFIG_HEADERS " '$ac_optarg'"
+    ac_need_defaults=false;;
+  --he | --h)
+    # Conflict between --help and --header
+    as_fn_error $? "ambiguous option: \`$1'
+Try \`$0 --help' for more information.";;
+  --help | --hel | -h )
+    $as_echo "$ac_cs_usage"; exit ;;
+  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
+  | -silent | --silent | --silen | --sile | --sil | --si | --s)
+    ac_cs_silent=: ;;
+
+  # This is an error.
+  -*) as_fn_error $? "unrecognized option: \`$1'
+Try \`$0 --help' for more information." ;;
+
+  *) as_fn_append ac_config_targets " $1"
+     ac_need_defaults=false ;;
+
+  esac
+  shift
+done
+
+ac_configure_extra_args=
+
+if $ac_cs_silent; then
+  exec 6>/dev/null
+  ac_configure_extra_args="$ac_configure_extra_args --silent"
+fi
+
+_ACEOF
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
+if \$ac_cs_recheck; then
+  set X $SHELL '$0' $ac_configure_args \$ac_configure_extra_args --no-create --no-recursion
+  shift
+  \$as_echo "running CONFIG_SHELL=$SHELL \$*" >&6
+  CONFIG_SHELL='$SHELL'
+  export CONFIG_SHELL
+  exec "\$@"
+fi
+
+_ACEOF
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
+exec 5>>config.log
+{
+  echo
+  sed 'h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x' <<_ASBOX
+## Running $as_me. ##
+_ASBOX
+  $as_echo "$ac_log"
+} >&5
+
+_ACEOF
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
+_ACEOF
+
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
+
+# Handling of arguments.
+for ac_config_target in $ac_config_targets
+do
+  case $ac_config_target in
+    "crypto/include/config.h") CONFIG_HEADERS="$CONFIG_HEADERS crypto/include/config.h:config_in.h" ;;
+    "Makefile") CONFIG_FILES="$CONFIG_FILES Makefile" ;;
+    "crypto/Makefile") CONFIG_FILES="$CONFIG_FILES crypto/Makefile" ;;
+    "doc/Makefile") CONFIG_FILES="$CONFIG_FILES doc/Makefile" ;;
+    "fuzzer/Makefile") CONFIG_FILES="$CONFIG_FILES fuzzer/Makefile" ;;
+    "libsrtp2.pc") CONFIG_FILES="$CONFIG_FILES libsrtp2.pc" ;;
+
+  *) as_fn_error $? "invalid argument: \`$ac_config_target'" "$LINENO" 5;;
+  esac
+done
+
+
+# If the user did not use the arguments to specify the items to instantiate,
+# then the envvar interface is used.  Set only those that are not.
+# We use the long form for the default assignment because of an extremely
+# bizarre bug on SunOS 4.1.3.
+if $ac_need_defaults; then
+  test "${CONFIG_FILES+set}" = set || CONFIG_FILES=$config_files
+  test "${CONFIG_HEADERS+set}" = set || CONFIG_HEADERS=$config_headers
+fi
+
+# Have a temporary directory for convenience.  Make it in the build tree
+# simply because there is no reason against having it here, and in addition,
+# creating and moving files from /tmp can sometimes cause problems.
+# Hook for its removal unless debugging.
+# Note that there is a small window in which the directory will not be cleaned:
+# after its creation but before its name has been assigned to `$tmp'.
+$debug ||
+{
+  tmp= ac_tmp=
+  trap 'exit_status=$?
+  : "${ac_tmp:=$tmp}"
+  { test ! -d "$ac_tmp" || rm -fr "$ac_tmp"; } && exit $exit_status
+' 0
+  trap 'as_fn_exit 1' 1 2 13 15
+}
+# Create a (secure) tmp directory for tmp files.
+
+{
+  tmp=`(umask 077 && mktemp -d "./confXXXXXX") 2>/dev/null` &&
+  test -d "$tmp"
+}  ||
+{
+  tmp=./conf$$-$RANDOM
+  (umask 077 && mkdir "$tmp")
+} || as_fn_error $? "cannot create a temporary directory in ." "$LINENO" 5
+ac_tmp=$tmp
+
+# Set up the scripts for CONFIG_FILES section.
+# No need to generate them if there are no CONFIG_FILES.
+# This happens for instance with `./config.status config.h'.
+if test -n "$CONFIG_FILES"; then
+
+
+ac_cr=`echo X | tr X '\015'`
+# On cygwin, bash can eat \r inside `` if the user requested igncr.
+# But we know of no other shell where ac_cr would be empty at this
+# point, so we can use a bashism as a fallback.
+if test "x$ac_cr" = x; then
+  eval ac_cr=\$\'\\r\'
+fi
+ac_cs_awk_cr=`$AWK 'BEGIN { print "a\rb" }' </dev/null 2>/dev/null`
+if test "$ac_cs_awk_cr" = "a${ac_cr}b"; then
+  ac_cs_awk_cr='\\r'
+else
+  ac_cs_awk_cr=$ac_cr
+fi
+
+echo 'BEGIN {' >"$ac_tmp/subs1.awk" &&
+_ACEOF
+
+
+{
+  echo "cat >conf$$subs.awk <<_ACEOF" &&
+  echo "$ac_subst_vars" | sed 's/.*/&!$&$ac_delim/' &&
+  echo "_ACEOF"
+} >conf$$subs.sh ||
+  as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
+ac_delim_num=`echo "$ac_subst_vars" | grep -c '^'`
+ac_delim='%!_!# '
+for ac_last_try in false false false false false :; do
+  . ./conf$$subs.sh ||
+    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
+
+  ac_delim_n=`sed -n "s/.*$ac_delim\$/X/p" conf$$subs.awk | grep -c X`
+  if test $ac_delim_n = $ac_delim_num; then
+    break
+  elif $ac_last_try; then
+    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
+  else
+    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
+  fi
+done
+rm -f conf$$subs.sh
+
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
+cat >>"\$ac_tmp/subs1.awk" <<\\_ACAWK &&
+_ACEOF
+sed -n '
+h
+s/^/S["/; s/!.*/"]=/
+p
+g
+s/^[^!]*!//
+:repl
+t repl
+s/'"$ac_delim"'$//
+t delim
+:nl
+h
+s/\(.\{148\}\)..*/\1/
+t more1
+s/["\\]/\\&/g; s/^/"/; s/$/\\n"\\/
+p
+n
+b repl
+:more1
+s/["\\]/\\&/g; s/^/"/; s/$/"\\/
+p
+g
+s/.\{148\}//
+t nl
+:delim
+h
+s/\(.\{148\}\)..*/\1/
+t more2
+s/["\\]/\\&/g; s/^/"/; s/$/"/
+p
+b
+:more2
+s/["\\]/\\&/g; s/^/"/; s/$/"\\/
+p
+g
+s/.\{148\}//
+t delim
+' <conf$$subs.awk | sed '
+/^[^""]/{
+  N
+  s/\n//
+}
+' >>$CONFIG_STATUS || ac_write_fail=1
+rm -f conf$$subs.awk
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
+_ACAWK
+cat >>"\$ac_tmp/subs1.awk" <<_ACAWK &&
+  for (key in S) S_is_set[key] = 1
+  FS = ""
+
+}
+{
+  line = $ 0
+  nfields = split(line, field, "@")
+  substed = 0
+  len = length(field[1])
+  for (i = 2; i < nfields; i++) {
+    key = field[i]
+    keylen = length(key)
+    if (S_is_set[key]) {
+      value = S[key]
+      line = substr(line, 1, len) "" value "" substr(line, len + keylen + 3)
+      len += length(value) + length(field[++i])
+      substed = 1
+    } else
+      len += 1 + keylen
+  }
+
+  print line
+}
+
+_ACAWK
+_ACEOF
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
+if sed "s/$ac_cr//" < /dev/null > /dev/null 2>&1; then
+  sed "s/$ac_cr\$//; s/$ac_cr/$ac_cs_awk_cr/g"
+else
+  cat
+fi < "$ac_tmp/subs1.awk" > "$ac_tmp/subs.awk" \
+  || as_fn_error $? "could not setup config files machinery" "$LINENO" 5
+_ACEOF
+
+# VPATH may cause trouble with some makes, so we remove sole $(srcdir),
+# ${srcdir} and @srcdir@ entries from VPATH if srcdir is ".", strip leading and
+# trailing colons and then remove the whole line if VPATH becomes empty
+# (actually we leave an empty line to preserve line numbers).
+if test "x$srcdir" = x.; then
+  ac_vpsub='/^[	 ]*VPATH[	 ]*=[	 ]*/{
+h
+s///
+s/^/:/
+s/[	 ]*$/:/
+s/:\$(srcdir):/:/g
+s/:\${srcdir}:/:/g
+s/:@srcdir@:/:/g
+s/^:*//
+s/:*$//
+x
+s/\(=[	 ]*\).*/\1/
+G
+s/\n//
+s/^[^=]*=[	 ]*$//
+}'
+fi
+
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
+fi # test -n "$CONFIG_FILES"
+
+# Set up the scripts for CONFIG_HEADERS section.
+# No need to generate them if there are no CONFIG_HEADERS.
+# This happens for instance with `./config.status Makefile'.
+if test -n "$CONFIG_HEADERS"; then
+cat >"$ac_tmp/defines.awk" <<\_ACAWK ||
+BEGIN {
+_ACEOF
+
+# Transform confdefs.h into an awk script `defines.awk', embedded as
+# here-document in config.status, that substitutes the proper values into
+# config.h.in to produce config.h.
+
+# Create a delimiter string that does not exist in confdefs.h, to ease
+# handling of long lines.
+ac_delim='%!_!# '
+for ac_last_try in false false :; do
+  ac_tt=`sed -n "/$ac_delim/p" confdefs.h`
+  if test -z "$ac_tt"; then
+    break
+  elif $ac_last_try; then
+    as_fn_error $? "could not make $CONFIG_HEADERS" "$LINENO" 5
+  else
+    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
+  fi
+done
+
+# For the awk script, D is an array of macro values keyed by name,
+# likewise P contains macro parameters if any.  Preserve backslash
+# newline sequences.
+
+ac_word_re=[_$as_cr_Letters][_$as_cr_alnum]*
+sed -n '
+s/.\{148\}/&'"$ac_delim"'/g
+t rset
+:rset
+s/^[	 ]*#[	 ]*define[	 ][	 ]*/ /
+t def
+d
+:def
+s/\\$//
+t bsnl
+s/["\\]/\\&/g
+s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
+D["\1"]=" \3"/p
+s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2"/p
+d
+:bsnl
+s/["\\]/\\&/g
+s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
+D["\1"]=" \3\\\\\\n"\\/p
+t cont
+s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2\\\\\\n"\\/p
+t cont
+d
+:cont
+n
+s/.\{148\}/&'"$ac_delim"'/g
+t clear
+:clear
+s/\\$//
+t bsnlc
+s/["\\]/\\&/g; s/^/"/; s/$/"/p
+d
+:bsnlc
+s/["\\]/\\&/g; s/^/"/; s/$/\\\\\\n"\\/p
+b cont
+' <confdefs.h | sed '
+s/'"$ac_delim"'/"\\\
+"/g' >>$CONFIG_STATUS || ac_write_fail=1
+
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
+  for (key in D) D_is_set[key] = 1
+  FS = ""
+}
+/^[\t ]*#[\t ]*(define|undef)[\t ]+$ac_word_re([\t (]|\$)/ {
+  line = \$ 0
+  split(line, arg, " ")
+  if (arg[1] == "#") {
+    defundef = arg[2]
+    mac1 = arg[3]
+  } else {
+    defundef = substr(arg[1], 2)
+    mac1 = arg[2]
+  }
+  split(mac1, mac2, "(") #)
+  macro = mac2[1]
+  prefix = substr(line, 1, index(line, defundef) - 1)
+  if (D_is_set[macro]) {
+    # Preserve the white space surrounding the "#".
+    print prefix "define", macro P[macro] D[macro]
+    next
+  } else {
+    # Replace #undef with comments.  This is necessary, for example,
+    # in the case of _POSIX_SOURCE, which is predefined and required
+    # on some systems where configure will not decide to define it.
+    if (defundef == "undef") {
+      print "/*", prefix defundef, macro, "*/"
+      next
+    }
+  }
+}
+{ print }
+_ACAWK
+_ACEOF
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
+  as_fn_error $? "could not setup config headers machinery" "$LINENO" 5
+fi # test -n "$CONFIG_HEADERS"
+
+
+eval set X "  :F $CONFIG_FILES  :H $CONFIG_HEADERS    "
+shift
+for ac_tag
+do
+  case $ac_tag in
+  :[FHLC]) ac_mode=$ac_tag; continue;;
+  esac
+  case $ac_mode$ac_tag in
+  :[FHL]*:*);;
+  :L* | :C*:*) as_fn_error $? "invalid tag \`$ac_tag'" "$LINENO" 5;;
+  :[FH]-) ac_tag=-:-;;
+  :[FH]*) ac_tag=$ac_tag:$ac_tag.in;;
+  esac
+  ac_save_IFS=$IFS
+  IFS=:
+  set x $ac_tag
+  IFS=$ac_save_IFS
+  shift
+  ac_file=$1
+  shift
+
+  case $ac_mode in
+  :L) ac_source=$1;;
+  :[FH])
+    ac_file_inputs=
+    for ac_f
+    do
+      case $ac_f in
+      -) ac_f="$ac_tmp/stdin";;
+      *) # Look for the file first in the build tree, then in the source tree
+	 # (if the path is not absolute).  The absolute path cannot be DOS-style,
+	 # because $ac_f cannot contain `:'.
+	 test -f "$ac_f" ||
+	   case $ac_f in
+	   [\\/$]*) false;;
+	   *) test -f "$srcdir/$ac_f" && ac_f="$srcdir/$ac_f";;
+	   esac ||
+	   as_fn_error 1 "cannot find input file: \`$ac_f'" "$LINENO" 5;;
+      esac
+      case $ac_f in *\'*) ac_f=`$as_echo "$ac_f" | sed "s/'/'\\\\\\\\''/g"`;; esac
+      as_fn_append ac_file_inputs " '$ac_f'"
+    done
+
+    # Let's still pretend it is `configure' which instantiates (i.e., don't
+    # use $as_me), people would be surprised to read:
+    #    /* config.h.  Generated by config.status.  */
+    configure_input='Generated from '`
+	  $as_echo "$*" | sed 's|^[^:]*/||;s|:[^:]*/|, |g'
+	`' by configure.'
+    if test x"$ac_file" != x-; then
+      configure_input="$ac_file.  $configure_input"
+      { $as_echo "$as_me:${as_lineno-$LINENO}: creating $ac_file" >&5
+$as_echo "$as_me: creating $ac_file" >&6;}
+    fi
+    # Neutralize special characters interpreted by sed in replacement strings.
+    case $configure_input in #(
+    *\&* | *\|* | *\\* )
+       ac_sed_conf_input=`$as_echo "$configure_input" |
+       sed 's/[\\\\&|]/\\\\&/g'`;; #(
+    *) ac_sed_conf_input=$configure_input;;
+    esac
+
+    case $ac_tag in
+    *:-:* | *:-) cat >"$ac_tmp/stdin" \
+      || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;;
+    esac
+    ;;
+  esac
+
+  ac_dir=`$as_dirname -- "$ac_file" ||
+$as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
+	 X"$ac_file" : 'X\(//\)[^/]' \| \
+	 X"$ac_file" : 'X\(//\)$' \| \
+	 X"$ac_file" : 'X\(/\)' \| . 2>/dev/null ||
+$as_echo X"$ac_file" |
+    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\/\)[^/].*/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\/\)$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\).*/{
+	    s//\1/
+	    q
+	  }
+	  s/.*/./; q'`
+  as_dir="$ac_dir"; as_fn_mkdir_p
+  ac_builddir=.
+
+case "$ac_dir" in
+.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
+*)
+  ac_dir_suffix=/`$as_echo "$ac_dir" | sed 's|^\.[\\/]||'`
+  # A ".." for each directory in $ac_dir_suffix.
+  ac_top_builddir_sub=`$as_echo "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
+  case $ac_top_builddir_sub in
+  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
+  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
+  esac ;;
+esac
+ac_abs_top_builddir=$ac_pwd
+ac_abs_builddir=$ac_pwd$ac_dir_suffix
+# for backward compatibility:
+ac_top_builddir=$ac_top_build_prefix
+
+case $srcdir in
+  .)  # We are building in place.
+    ac_srcdir=.
+    ac_top_srcdir=$ac_top_builddir_sub
+    ac_abs_top_srcdir=$ac_pwd ;;
+  [\\/]* | ?:[\\/]* )  # Absolute name.
+    ac_srcdir=$srcdir$ac_dir_suffix;
+    ac_top_srcdir=$srcdir
+    ac_abs_top_srcdir=$srcdir ;;
+  *) # Relative name.
+    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
+    ac_top_srcdir=$ac_top_build_prefix$srcdir
+    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
+esac
+ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
+
+
+  case $ac_mode in
+  :F)
+  #
+  # CONFIG_FILE
+  #
+
+  case $INSTALL in
+  [\\/$]* | ?:[\\/]* ) ac_INSTALL=$INSTALL ;;
+  *) ac_INSTALL=$ac_top_build_prefix$INSTALL ;;
+  esac
+_ACEOF
+
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
+# If the template does not know about datarootdir, expand it.
+# FIXME: This hack should be removed a few years after 2.60.
+ac_datarootdir_hack=; ac_datarootdir_seen=
+ac_sed_dataroot='
+/datarootdir/ {
+  p
+  q
+}
+/@datadir@/p
+/@docdir@/p
+/@infodir@/p
+/@localedir@/p
+/@mandir@/p'
+case `eval "sed -n \"\$ac_sed_dataroot\" $ac_file_inputs"` in
+*datarootdir*) ac_datarootdir_seen=yes;;
+*@datadir@*|*@docdir@*|*@infodir@*|*@localedir@*|*@mandir@*)
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&5
+$as_echo "$as_me: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&2;}
+_ACEOF
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
+  ac_datarootdir_hack='
+  s&@datadir@&$datadir&g
+  s&@docdir@&$docdir&g
+  s&@infodir@&$infodir&g
+  s&@localedir@&$localedir&g
+  s&@mandir@&$mandir&g
+  s&\\\${datarootdir}&$datarootdir&g' ;;
+esac
+_ACEOF
+
+# Neutralize VPATH when `$srcdir' = `.'.
+# Shell code in configure.ac might set extrasub.
+# FIXME: do we really want to maintain this feature?
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
+ac_sed_extra="$ac_vpsub
+$extrasub
+_ACEOF
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
+:t
+/@[a-zA-Z_][a-zA-Z_0-9]*@/!b
+s|@configure_input@|$ac_sed_conf_input|;t t
+s&@top_builddir@&$ac_top_builddir_sub&;t t
+s&@top_build_prefix@&$ac_top_build_prefix&;t t
+s&@srcdir@&$ac_srcdir&;t t
+s&@abs_srcdir@&$ac_abs_srcdir&;t t
+s&@top_srcdir@&$ac_top_srcdir&;t t
+s&@abs_top_srcdir@&$ac_abs_top_srcdir&;t t
+s&@builddir@&$ac_builddir&;t t
+s&@abs_builddir@&$ac_abs_builddir&;t t
+s&@abs_top_builddir@&$ac_abs_top_builddir&;t t
+s&@INSTALL@&$ac_INSTALL&;t t
+$ac_datarootdir_hack
+"
+eval sed \"\$ac_sed_extra\" "$ac_file_inputs" | $AWK -f "$ac_tmp/subs.awk" \
+  >$ac_tmp/out || as_fn_error $? "could not create $ac_file" "$LINENO" 5
+
+test -z "$ac_datarootdir_hack$ac_datarootdir_seen" &&
+  { ac_out=`sed -n '/\${datarootdir}/p' "$ac_tmp/out"`; test -n "$ac_out"; } &&
+  { ac_out=`sed -n '/^[	 ]*datarootdir[	 ]*:*=/p' \
+      "$ac_tmp/out"`; test -z "$ac_out"; } &&
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable \`datarootdir'
+which seems to be undefined.  Please make sure it is defined" >&5
+$as_echo "$as_me: WARNING: $ac_file contains a reference to the variable \`datarootdir'
+which seems to be undefined.  Please make sure it is defined" >&2;}
+
+  rm -f "$ac_tmp/stdin"
+  case $ac_file in
+  -) cat "$ac_tmp/out" && rm -f "$ac_tmp/out";;
+  *) rm -f "$ac_file" && mv "$ac_tmp/out" "$ac_file";;
+  esac \
+  || as_fn_error $? "could not create $ac_file" "$LINENO" 5
+ ;;
+  :H)
+  #
+  # CONFIG_HEADER
+  #
+  if test x"$ac_file" != x-; then
+    {
+      $as_echo "/* $configure_input  */" \
+      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs"
+    } >"$ac_tmp/config.h" \
+      || as_fn_error $? "could not create $ac_file" "$LINENO" 5
+    if diff "$ac_file" "$ac_tmp/config.h" >/dev/null 2>&1; then
+      { $as_echo "$as_me:${as_lineno-$LINENO}: $ac_file is unchanged" >&5
+$as_echo "$as_me: $ac_file is unchanged" >&6;}
+    else
+      rm -f "$ac_file"
+      mv "$ac_tmp/config.h" "$ac_file" \
+	|| as_fn_error $? "could not create $ac_file" "$LINENO" 5
+    fi
+  else
+    $as_echo "/* $configure_input  */" \
+      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" \
+      || as_fn_error $? "could not create -" "$LINENO" 5
+  fi
+ ;;
+
+
+  esac
+
+done # for ac_tag
+
+
+as_fn_exit 0
+_ACEOF
+ac_clean_files=$ac_clean_files_save
+
+test $ac_write_fail = 0 ||
+  as_fn_error $? "write failure creating $CONFIG_STATUS" "$LINENO" 5
+
+
+# configure is writing to config.log, and then calls config.status.
+# config.status does its own redirection, appending to config.log.
+# Unfortunately, on DOS this fails, as config.log is still kept open
+# by configure, so config.status won't be able to write to it; its
+# output is simply discarded.  So we exec the FD to /dev/null,
+# effectively closing config.log, so it can be properly (re)opened and
+# appended to by config.status.  When coming back to configure, we
+# need to make the FD available again.
+if test "$no_create" != yes; then
+  ac_cs_success=:
+  ac_config_status_args=
+  test "$silent" = yes &&
+    ac_config_status_args="$ac_config_status_args --quiet"
+  exec 5>/dev/null
+  $SHELL $CONFIG_STATUS $ac_config_status_args || ac_cs_success=false
+  exec 5>>config.log
+  # Use ||, not &&, to avoid exiting from the if with $? = 1, which
+  # would make configure fail if this is the last instruction.
+  $ac_cs_success || as_fn_exit 1
+fi
+if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: unrecognized options: $ac_unrecognized_opts" >&5
+$as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;}
+fi
+
+
+# This is needed when building outside the source dir.
+as_dir=crypto/cipher; as_fn_mkdir_p
+as_dir=crypto/hash; as_fn_mkdir_p
+as_dir=crypto/kernel; as_fn_mkdir_p
+as_dir=crypto/math; as_fn_mkdir_p
+as_dir=crypto/replay; as_fn_mkdir_p
+as_dir=crypto/test; as_fn_mkdir_p
+as_dir=doc; as_fn_mkdir_p
+as_dir=srtp; as_fn_mkdir_p
+as_dir=test; as_fn_mkdir_p
diff --git a/trunk/3rdparty/libsrtp-2-fit/configure.ac b/trunk/3rdparty/libsrtp-2-fit/configure.ac
new file mode 100644
index 000000000..fc312bbdc
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/configure.ac
@@ -0,0 +1,429 @@
+dnl Process this file with autoconf to produce a configure script.
+AC_INIT([libsrtp2], [2.3.0], [https://github.com/cisco/libsrtp/issues])
+
+dnl Must come before AC_PROG_CC
+EMPTY_CFLAGS="no"
+if test "x$CFLAGS" = "x"; then
+   dnl Default value for CFLAGS if not specified.
+   EMPTY_CFLAGS="yes"
+fi
+
+dnl Checks for programs.
+AC_PROG_CC
+AC_PROG_CPP
+AC_PROG_CXX
+AC_ARG_VAR(
+  [EXTRA_CFLAGS],
+  [C compiler flags appended to the regular C compiler flags instead of overriding them])
+AM_PROG_AR
+AC_PROG_RANLIB
+AC_PROG_INSTALL
+AC_PROG_SED
+
+dnl Check the byte order
+AC_C_BIGENDIAN
+
+AC_CANONICAL_HOST
+
+dnl check host_cpu type, set defines appropriately
+case $host_cpu in
+  i*86 | x86_64 )
+    AC_DEFINE([CPU_CISC], [1], [Define if building for a CISC machine (e.g. Intel).])
+    AC_DEFINE([HAVE_X86], [1], [Define to use X86 inlined assembly code])
+    ;;
+  * )
+    AC_DEFINE([CPU_RISC], [1], [Define if building for a RISC machine (assume slow byte access).])
+    ;;
+esac
+
+dnl Check if we are on a Windows platform.
+case $host_os in
+  *cygwin*|*mingw* )
+    EXE=.exe
+    ;;
+  * )
+    EXE=""
+    ;;
+esac
+AC_SUBST([EXE])   # define executable suffix; this is needed for `make clean'
+
+dnl Checks for supported compiler flags.
+supported_cflags=""
+if test "$EMPTY_CFLAGS" = "no"; then
+  supported_cflags="$CFLAGS"
+fi
+
+dnl For accurate detection, we need warnings as errors.
+dnl I.e. Clang will issue a warning about unsupported flags.
+dnl For the compilation to fail, those warnings needs to be upgraded to errors.
+dnl This will be removed again once the tests are complete (see below).
+WERROR=""
+for w in -Werror -errwarn; do
+  if test "x$WERROR" = "x"; then
+    AC_MSG_CHECKING([whether ${CC-c} accepts $w])
+    save_cflags="$CFLAGS"
+    AS_IF([test "x$CFLAGS" = "x"], [CFLAGS="$w"], [CFLAGS="$CFLAGS $w"])
+    AC_COMPILE_IFELSE([AC_LANG_SOURCE([int main(void) { return 0; }])],
+      [WERROR="$w"
+       AC_MSG_RESULT([yes])],
+      [CFLAGS="$save_cflags"
+       AC_MSG_RESULT([no])])
+  fi
+done
+
+dnl Note that -fPIC is not explicitly added to LDFLAGS.
+dnl Since the compiler is used as the link driver, CFLAGS will be part of the
+dnl link line as well and the linker will get the flag from there.
+dnl Adding it to LDFLAGS explicitly would duplicate the flag on the link line,
+dnl but otherwise do no harm.
+AC_MSG_CHECKING([whether ${CC-c} accepts -fPIC])
+save_cflags="$CFLAGS"
+AS_IF([test "x$CFLAGS" = "x"], [CFLAGS="-fPIC"], [CFLAGS="$CFLAGS -fPIC"])
+AC_COMPILE_IFELSE([AC_LANG_SOURCE([int main(void) { return 0; }])],
+  [AS_IF([test "x$supported_cflags" = "x"], [supported_cflags="-fPIC"], [supported_cflags="$supported_cflags -fPIC"])
+   AC_MSG_RESULT([yes])],
+  [CFLAGS="$save_cflags"
+   AC_MSG_RESULT([no])])
+
+if test "$EMPTY_CFLAGS" = "yes"; then
+  for f in -Wall -pedantic -Wstrict-prototypes; do
+    AC_MSG_CHECKING([whether ${CC-c} accepts $f])
+    save_cflags="$CFLAGS"
+    AS_IF([test "x$CFLAGS" = "x"], [CFLAGS="$f"], [CFLAGS="$CFLAGS $f"])
+    AC_COMPILE_IFELSE([AC_LANG_SOURCE([int main(void) { return 0; }])],
+      [AS_IF([test "x$supported_cflags" = "x"], [supported_cflags="$f"], [supported_cflags="$supported_cflags $f"])
+       AC_MSG_RESULT([yes])],
+      [CFLAGS="$save_cflags"
+       AC_MSG_RESULT([no])])
+  done
+
+  OOPT=""
+  for f in -O4 -O3; do
+    if test "x$OOPT" = "x"; then
+      AC_MSG_CHECKING([whether ${CC-c} accepts $f])
+      save_cflags="$CFLAGS"
+      AS_IF([test "x$CFLAGS" = "x"], [CFLAGS="$f"], [CFLAGS="$CFLAGS $f"])
+      AC_COMPILE_IFELSE([AC_LANG_SOURCE([int main(void) { return 0; }])],
+        [AS_IF([test "x$supported_cflags" = "x"], [supported_cflags="$f"], [supported_cflags="$supported_cflags $f"])
+         OOPT="$f"
+         AC_MSG_RESULT([yes])],
+        [CFLAGS="$save_cflags"
+         AC_MSG_RESULT([no])])
+    fi
+  done
+
+  for f in -fexpensive-optimizations -funroll-loops; do
+    AC_MSG_CHECKING([whether ${CC-c} accepts $f])
+    save_cflags="$CFLAGS"
+    AS_IF([test "x$CFLAGS" = "x"], [CFLAGS="$f"], [CFLAGS="$CFLAGS $f"])
+    AC_COMPILE_IFELSE([AC_LANG_SOURCE([int main(void) { return 0; }])],
+      [AS_IF([test "x$supported_cflags" = "x"], [supported_cflags="$f"], [supported_cflags="$supported_cflags $f"])
+       AC_MSG_RESULT([yes])],
+      [CFLAGS="$save_cflags"
+       AC_MSG_RESULT([no])])
+  done
+fi
+
+dnl When turning off warnigns, we're expecting unrecognized command line option errors if they're not
+dnl supported. However, the -Wno-<warning> form isn't consulted unless a warning is triggered.
+dnl At least that's the case for GCC. So to check which warnings we can turn off, we need to check
+dnl if they can be turned on, thereby forcing GCC to take the argument into account right away.
+for f in -Wno-language-extension-token; do
+  AC_MSG_CHECKING([whether ${CC-c} accepts $f])
+  save_cflags="$CFLAGS"
+  testf=$(echo "$f" | $SED 's|-Wno-\(.*\)|-W\1|g')
+  AS_IF([test "x$CFLAGS" = "x"], [CFLAGS="$testf"], [CFLAGS="$CFLAGS $testf"])
+  AC_COMPILE_IFELSE([AC_LANG_SOURCE([int main(void) { return 0; }])],
+    [AS_IF([test "x$supported_cflags" = "x"], [supported_cflags="$f"], [supported_cflags="$supported_cflags $f"])
+     AC_MSG_RESULT([yes])],
+    [CFLAGS="$save_cflags"
+     AC_MSG_RESULT([no])])
+done
+
+dnl Remowing -Werror again
+CFLAGS="$supported_cflags"
+
+dnl Checks for header files.
+AC_HEADER_STDC
+AC_CHECK_HEADERS(
+    [unistd.h byteswap.h stdint.h sys/uio.h inttypes.h sys/types.h machine/types.h sys/int_types.h],
+    [], [], [AC_INCLUDES_DEFAULT])
+
+dnl socket() and friends
+AC_CHECK_HEADERS([sys/socket.h netinet/in.h arpa/inet.h], [], [], [AC_INCLUDES_DEFAULT])
+AC_CHECK_HEADERS(
+    [windows.h],
+    [AC_CHECK_HEADERS([winsock2.h], [], [], [AC_INCLUDES_DEFAULT])],
+    [], [AC_INCLUDES_DEFAULT])
+
+AC_CHECK_TYPES([int8_t, uint8_t, int16_t, uint16_t, int32_t, uint32_t, uint64_t])
+AC_CHECK_SIZEOF([unsigned long])
+AC_CHECK_SIZEOF([unsigned long long])
+
+dnl Checks for typedefs, structures, and compiler characteristics.
+AC_C_CONST
+AC_C_INLINE
+AC_TYPE_SIZE_T
+
+dnl Checks for library functions.
+AC_CHECK_FUNCS([socket inet_aton usleep sigaction])
+
+dnl Find socket function if not found yet.
+if test "x$ac_cv_func_socket" = "xno"; then
+  AC_CHECK_LIB([socket], [socket])
+  AC_MSG_CHECKING([for socket in -lwsock32])
+  SAVELIBS="$LIBS"
+  LIBS="$LIBS -lwsock32"
+  AC_LINK_IFELSE(
+    [AC_LANG_SOURCE([
+#include <winsock2.h>
+int main(void)
+{
+    int fd = socket(0, 0, 0);
+    if (fd < 0)
+      return -1;
+    else
+      return 0;
+}
+    ])],
+    [ac_cv_func_socket=yes
+     AC_MSG_RESULT([yes])],
+    [LIBS="$SAVELIBS"
+     AC_MSG_RESULT([no])])
+fi
+
+AC_MSG_CHECKING([whether to enable debug logging in all modules])
+AC_ARG_ENABLE([debug-logging],
+  [AS_HELP_STRING([--enable-debug-logging], [Enable debug logging in all modules])],
+  [], enable_debug_logging=no)
+if test "$enable_debug_logging" = "yes"; then
+   AC_DEFINE([ENABLE_DEBUG_LOGGING], [1], [Define to enabled debug logging for all mudules.])
+fi
+AC_MSG_RESULT([$enable_debug_logging])
+
+PKG_PROG_PKG_CONFIG
+AS_IF([test "x$PKG_CONFIG" != "x"], [PKG_CONFIG="$PKG_CONFIG --static"])
+
+AC_MSG_CHECKING([whether to leverage OpenSSL crypto])
+AC_ARG_ENABLE([openssl],
+  [AS_HELP_STRING([--enable-openssl], [compile in OpenSSL crypto engine])],
+  [], [enable_openssl=no])
+AC_MSG_RESULT([$enable_openssl])
+
+AC_MSG_CHECKING([whether to leverage NSS crypto])
+AC_ARG_ENABLE([nss],
+  [AS_HELP_STRING([--enable-nss], [compile in NSS crypto engine])],
+  [], [enable_nss=no])
+AC_MSG_RESULT([$enable_nss])
+
+if test "$enable_openssl" = "yes"; then
+   AC_MSG_CHECKING([for user specified OpenSSL directory])
+   AC_ARG_WITH([openssl-dir],
+      [AS_HELP_STRING([--with-openssl-dir], [Location of OpenSSL installation])],
+      [if test "x$PKG_CONFIG" != "x" && test -f $with_openssl_dir/lib/pkgconfig/libcrypto.pc; then
+         if test "x$PKG_CONFIG_PATH" = "x"; then
+           export PKG_CONFIG_PATH="$with_openssl_dir/lib/pkgconfig"
+         else
+           export PKG_CONFIG_PATH="$with_openssl_dir/lib/pkgconfig:$PKG_CONFIG_PATH"
+         fi
+         AC_MSG_RESULT([$with_openssl_dir])
+       elif test -d $with_openssl_dir/lib; then
+         CFLAGS="$CFLAGS -I$with_openssl_dir/include"
+         if test "x$LDFLAGS" = "x"; then
+           LDFLAGS="-L$with_openssl_dir/lib"
+         else
+           LDFLAGS="$LDFLAGS -L$with_openssl_dir/lib"
+         fi
+         AC_MSG_RESULT([$with_openssl_dir])
+       else
+         AC_MSG_RESULT([invalid])
+         AC_MSG_FAILURE([Invalid OpenSSL location: $with_openssl_dir])
+       fi],
+      [AC_MSG_RESULT([no])])
+
+   if test "x$PKG_CONFIG" != "x"; then
+     PKG_CHECK_MODULES([crypto], [libcrypto >= 1.0.1],
+       [CFLAGS="$CFLAGS $crypto_CFLAGS"
+        LIBS="$crypto_LIBS $LIBS"])
+   else
+     AC_CHECK_LIB([dl], [dlopen], [], [AC_MSG_WARN([can't find libdl])])
+     AC_CHECK_LIB([z], [inflate], [], [AC_MSG_WARN([can't find libz])])
+   fi
+
+   AC_SEARCH_LIBS([EVP_EncryptInit], [crypto],
+     [], [AC_MSG_FAILURE([can't find openssl >= 1.0.1 crypto lib])])
+   AC_SEARCH_LIBS([EVP_aes_128_ctr], [crypto],
+     [], [AC_MSG_FAILURE([can't find openssl >= 1.0.1 crypto lib])])
+   AC_SEARCH_LIBS([EVP_aes_128_gcm], [crypto],
+     [], [AC_MSG_FAILURE([can't find openssl >= 1.0.1 crypto lib])])
+
+   AC_DEFINE([GCM], [1], [Define this to use AES-GCM.])
+   AC_DEFINE([OPENSSL], [1], [Define this to use OpenSSL crypto.])
+   AES_ICM_OBJS="crypto/cipher/aes_icm_ossl.o crypto/cipher/aes_gcm_ossl.o"
+   HMAC_OBJS=crypto/hash/hmac_ossl.o
+   AC_SUBST([USE_EXTERNAL_CRYPTO], [1])
+
+   AC_MSG_CHECKING([if OPENSSL_cleanse is broken])
+   AC_RUN_IFELSE([AC_LANG_PROGRAM([
+     #include <stdio.h>
+     #include <openssl/crypto.h>
+   ], [
+     #define BUFFER_SIZE (16)
+     char buffer[[BUFFER_SIZE]];
+     int i;
+     for (i = 0; i < BUFFER_SIZE; i++) {
+       buffer[[i]] = i & 0xff;
+     }
+     OPENSSL_cleanse(buffer, BUFFER_SIZE);
+     for (i = 0; i < BUFFER_SIZE; i++) {
+       if (buffer[[i]]) {
+         printf("Buffer contents not zero at position %d (is %d)\n", i,
+             buffer[[i]]);
+         return 1;
+       }
+     }
+   ])], [openssl_cleanse_broken=no], [
+     openssl_cleanse_broken=yes
+     AC_DEFINE([OPENSSL_CLEANSE_BROKEN], [1], [Define this if OPENSSL_cleanse is broken.])
+   ])
+   AC_MSG_RESULT([$openssl_cleanse_broken])
+
+   AC_MSG_CHECKING([whether to leverage OpenSSL KDF algorithm])
+   AC_ARG_ENABLE([openssl-kdf],
+      [AS_HELP_STRING([--enable-openssl-kdf], [Use OpenSSL KDF algorithm])],
+      [], [enable_openssl_kdf=no])
+   AC_MSG_RESULT([$enable_openssl_kdf])
+   if test "$enable_openssl_kdf" = "yes"; then
+     AC_SEARCH_LIBS([kdf_srtp], [crypto],
+       [], [AC_MSG_FAILURE([can't find openssl KDF lib])])
+     AC_DEFINE([OPENSSL_KDF], [1], [Define this to use OpenSSL KDF for SRTP.])
+   fi
+elif test "$enable_nss" = "yes"; then
+   AC_MSG_CHECKING([for user specified NSS directory])
+   AC_ARG_WITH([nss-dir],
+      [AS_HELP_STRING([--with-nss-dir], [Location of NSS installation])],
+      [if test "x$PKG_CONFIG" != "x" && test -f $with_nss_dir/lib/pkgconfig/nss.pc; then
+         if test "x$PKG_CONFIG_PATH" = "x"; then
+           export PKG_CONFIG_PATH="$with_nss_dir/lib/pkgconfig"
+         else
+           export PKG_CONFIG_PATH="$with_nss_dir/lib/pkgconfig:$PKG_CONFIG_PATH"
+         fi
+         AC_MSG_RESULT([$with_nss_dir])
+       elif test -d $with_nss_dir/lib; then
+         CFLAGS="$CFLAGS -I$with_nss_dir/include"
+         CFLAGS="$CFLAGS -I$with_nss_dir/../public/nss"
+         if test "x$LDFLAGS" = "x"; then
+           LDFLAGS="-L$with_nss_dir/lib"
+         else
+           LDFLAGS="$LDFLAGS -L$with_nss_dir/lib"
+         fi
+         nss_skip_pkg_config=yes
+         AC_MSG_RESULT([$with_nss_dir])
+       else
+         AC_MSG_RESULT([invalid])
+         AC_MSG_FAILURE([Invalid NSS location: $with_nss_dir])
+       fi
+       AC_SUBST([CRYPTO_LIBDIR], [$with_nss_dir/lib])],
+      [AC_MSG_RESULT([no])])
+
+   if test "x$PKG_CONFIG" != "x" && test "$nss_skip_pkg_config" != "yes"; then
+     PKG_CHECK_MODULES([nss], [nss],
+       [CFLAGS="$CFLAGS $nss_CFLAGS"
+         LIBS="$nss_LIBS $LIBS"])
+   else
+     AC_CHECK_HEADERS(
+       [nss.h],
+       [], [AC_MSG_FAILURE([can't find useable NSS headers])],
+       [AC_INCLUDES_DEFAULT])
+     AC_CHECK_LIB(
+       [nspr4], [PR_GetError],
+       [], [AC_MSG_WARN([can't find libnspr4])])
+     AC_CHECK_LIB(
+       [nss3], [NSS_NoDB_Init],
+       [], [AC_MSG_FAILURE([can't find useable libnss3])])
+   fi
+
+   AC_DEFINE([GCM], [1], [Define this to use AES-GCM.])
+   AC_DEFINE([NSS], [1], [Define this to use NSS crypto.])
+   AES_ICM_OBJS="crypto/cipher/aes_icm_nss.o crypto/cipher/aes_gcm_nss.o"
+
+   # TODO(RLB): Use NSS for HMAC
+   HMAC_OBJS="crypto/hash/hmac.o crypto/hash/sha1.o"
+
+   # TODO(RLB): Use NSS for KDF
+
+   AC_SUBST([USE_EXTERNAL_CRYPTO], [1])
+else
+   AES_ICM_OBJS="crypto/cipher/aes_icm.o crypto/cipher/aes.o"
+   HMAC_OBJS="crypto/hash/hmac.o crypto/hash/sha1.o"
+fi
+AC_SUBST([AES_ICM_OBJS])
+AC_SUBST([HMAC_OBJS])
+
+dnl Checking for PCAP
+
+PCAP_LIB=""
+AC_ARG_ENABLE([pcap], AS_HELP_STRING([--disable-pcap], [Build without `pcap' library (-lpcap)]))
+AS_IF([test "x$enable_pcap" != "xno"], [
+  AC_CHECK_LIB([pcap], [pcap_create],
+    [PCAP_LIB="-lpcap"
+     AC_DEFINE([HAVE_PCAP], [1], [Define to 1 if you have the `pcap' library (-lpcap)])
+     AC_SUBST([HAVE_PCAP], [1])])
+
+  AC_CHECK_LIB([wpcap], [pcap_create],
+    [PCAP_LIB="-lwpcap"
+     AC_DEFINE([HAVE_PCAP], [1], [Define to 1 if you have the `winpcap' library (-lwpcap)])
+     AC_SUBST([HAVE_PCAP], [1])])
+])
+AC_SUBST([PCAP_LIB])
+   
+AC_MSG_CHECKING([whether to redirect logging to stdout])
+AC_ARG_ENABLE([log-stdout],
+  [AS_HELP_STRING([--enable-log-stdout], [redirecting logging to stdout])],
+  [], [enable_log_stdout=no])
+if test "$enable_log_stdout" = "yes"; then
+   AC_DEFINE([ERR_REPORTING_STDOUT], [1], [Define to redirect logging to stdout.])
+fi
+AC_MSG_RESULT([$enable_log_stdout])
+
+AC_MSG_CHECKING([wheather to use a file for logging])
+AC_ARG_WITH([log-file],
+  [AS_HELP_STRING([--with-log-file], [Use file for logging])],
+  [AS_CASE([x$with_log_file],
+     [x], [valid_with_log_file="no"],
+     [xyes], [valid_with_log_file="no"],
+     [valid_with_error_file="yes"])
+   AS_IF([test "$valid_with_log_file" = "no"],
+     [AC_MSG_RESULT([invalid])
+      AC_MSG_FAILURE([Invalid value for --with-log-file: "$with_log_file"])],
+     [AC_DEFINE_UNQUOTED([ERR_REPORTING_FILE], ["$with_log_file"], [Logging statments will be writen to this file.])
+      AC_MSG_RESULT([using log file: "$with_log_file"])])],
+  [AC_MSG_RESULT([no])])
+
+AS_IF(
+  [test "$enable_log_stdout" = "yes" && test "x$with_log_file" != "x"],
+  [AC_MSG_FAILURE([Can only use one of --enable-log-stdout and --with-log-file; they are mutually exclusive])])
+
+dnl Appending EXTRA_CFLAGS, if given
+AC_MSG_CHECKING([for extra C compiler flags])
+AS_IF([test "x$EXTRA_CFLAGS" != "x"],
+   [AS_IF([test "x$CFLAGS" = "x"],
+      [CFLAGS="$EXTRA_CFLAGS"], [CFLAGS="$CFLAGS $EXTRA_CFLAGS"])
+    AC_MSG_RESULT([$EXTRA_CFLAGS])],
+   [AC_MSG_RESULT(no)])
+
+AC_CONFIG_HEADER([crypto/include/config.h:config_in.h])
+
+AC_CONFIG_FILES([Makefile crypto/Makefile doc/Makefile fuzzer/Makefile libsrtp2.pc])
+AC_OUTPUT
+
+# This is needed when building outside the source dir.
+AS_MKDIR_P([crypto/cipher])
+AS_MKDIR_P([crypto/hash])
+AS_MKDIR_P([crypto/kernel])
+AS_MKDIR_P([crypto/math])
+AS_MKDIR_P([crypto/replay])
+AS_MKDIR_P([crypto/test])
+AS_MKDIR_P([doc])
+AS_MKDIR_P([srtp])
+AS_MKDIR_P([test])
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/Makefile.in b/trunk/3rdparty/libsrtp-2-fit/crypto/Makefile.in
new file mode 100644
index 000000000..44f29ad2c
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/Makefile.in
@@ -0,0 +1,119 @@
+# Makefile for crypto test suite
+#
+# David A. McGrew
+# Cisco Systems, Inc.
+
+srcdir = @srcdir@
+top_srcdir = @top_srcdir@
+top_builddir = @top_builddir@
+VPATH = @srcdir@
+
+CC	= @CC@
+INCDIR	= -Iinclude -I$(srcdir)/include -I$(top_srcdir)/include
+DEFS	= @DEFS@
+CPPFLAGS= @CPPFLAGS@
+CFLAGS	= @CFLAGS@
+LIBS	= @LIBS@
+LDFLAGS	= @LDFLAGS@ -L. -L..
+COMPILE = $(CC) $(DEFS) $(INCDIR) $(CPPFLAGS) $(CFLAGS)
+CRYPTOLIB = -lsrtp2
+CRYPTO_LIBDIR = @CRYPTO_LIBDIR@
+
+RANLIB	= @RANLIB@
+
+# Specify how tests should find shared libraries on macOS and Linux
+#
+# macOS purges DYLD_LIBRARY_PATH when spawning subprocesses, so it's
+# not possible to pass this in from the outside; we have to specify
+# it for any subprocesses we call. No support for dynamic linked
+# tests on Windows.
+ifneq ($(strip $(CRYPTO_LIBDIR)),)
+	ifneq ($(OS),Windows_NT)
+		UNAME_S = $(shell uname -s)
+		ifeq ($(UNAME_S),Linux)
+			FIND_LIBRARIES = LD_LIBRARY_PATH=$(CRYPTO_LIBDIR)
+		endif
+		ifeq ($(UNAME_S),Darwin)
+			FIND_LIBRARIES = DYLD_LIBRARY_PATH=$(CRYPTO_LIBDIR)
+		endif
+	endif
+endif
+
+# EXE defines the suffix on executables - it's .exe for cygwin, and
+# null on linux, bsd, and OS X and other OSes.  we define this so that
+# `make clean` will work on the cygwin platform
+EXE = @EXE@
+# Random source.
+USE_EXTERNAL_CRYPTO = @USE_EXTERNAL_CRYPTO@
+
+ifdef ARCH
+  DEFS += -D$(ARCH)=1
+endif
+
+ifdef sysname
+  DEFS += -D$(sysname)=1
+endif
+
+.PHONY: dummy all runtest clean superclean
+
+dummy : all runtest
+
+# test applications
+ifneq (1, $(USE_EXTERNAL_CRYPTO))
+AES_CALC = test/aes_calc$(EXE)
+endif
+
+testapp = test/cipher_driver$(EXE) test/datatypes_driver$(EXE) \
+	  test/stat_driver$(EXE) test/sha1_driver$(EXE) \
+	  test/kernel_driver$(EXE) $(AES_CALC) \
+	  test/env$(EXE)
+
+# data values used to test the aes_calc application for AES-128
+k128=000102030405060708090a0b0c0d0e0f
+p128=00112233445566778899aabbccddeeff
+c128=69c4e0d86a7b0430d8cdb78070b4c55a
+
+
+# data values used to test the aes_calc application for AES-256
+k256=000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
+p256=00112233445566778899aabbccddeeff
+c256=8ea2b7ca516745bfeafc49904b496089
+
+
+runtest: $(testapp)
+	$(FIND_LIBRARIES) test/env$(EXE) # print out information on the build environment
+	@echo "running crypto test applications..."
+ifneq (1, $(USE_EXTERNAL_CRYPTO))
+	$(FIND_LIBRARIES) test `test/aes_calc $(k128) $(p128)` = $(c128)
+	$(FIND_LIBRARIES) test `test/aes_calc $(k256) $(p256)` = $(c256)
+endif
+	$(FIND_LIBRARIES) test/cipher_driver$(EXE) -v >/dev/null
+	$(FIND_LIBRARIES) test/datatypes_driver$(EXE) -v >/dev/null
+	$(FIND_LIBRARIES) test/stat_driver$(EXE) >/dev/null
+	$(FIND_LIBRARIES) test/sha1_driver$(EXE) -v >/dev/null
+	$(FIND_LIBRARIES) test/kernel_driver$(EXE) -v >/dev/null
+	@echo "crypto test applications passed."
+
+
+# the rule for making object files and test apps
+
+%.o: %.c
+	$(COMPILE) -c $< -o $@
+
+%$(EXE): %.c $(srcdir)/../test/getopt_s.c
+	$(COMPILE) $(LDFLAGS) $< $(srcdir)/../test/getopt_s.c -o $@ $(CRYPTOLIB) $(LIBS)
+
+all: $(testapp)
+
+# housekeeping functions
+
+clean:
+	rm -f $(testapp) *.o */*.o
+	for a in * .* */*; do if [ -f "$$a~" ] ; then rm $$a~; fi; done;
+	rm -f `find . -name "*.[ch]~*~"`
+	rm -rf latex
+
+superclean: clean
+	rm -f *core TAGS ktrace.out
+
+# EOF
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes.c b/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes.c
new file mode 100644
index 000000000..c9cd77420
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes.c
@@ -0,0 +1,2189 @@
+/*
+ * aes.c
+ *
+ * An implemnetation of the AES block cipher.
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "aes.h"
+#include "err.h"
+
+/*
+ * we use the tables T0, T1, T2, T3, and T4 to compute AES, and
+ * the tables U0, U1, U2, and U4 to compute its inverse
+ *
+ * different tables are used on little-endian (Intel, VMS) and
+ * big-endian processors (everything else)
+ *
+ * these tables are computed using the program tables/aes_tables; use
+ * this program to generate different tables for porting or
+ * optimization on a different platform
+ */
+
+#ifndef WORDS_BIGENDIAN
+/* clang-format off */
+static const uint32_t T0[256] = {
+    0xa56363c6, 0x847c7cf8,  0x997777ee,  0x8d7b7bf6,
+    0xdf2f2ff,  0xbd6b6bd6,  0xb16f6fde,  0x54c5c591,
+    0x50303060, 0x3010102,   0xa96767ce,  0x7d2b2b56,
+    0x19fefee7, 0x62d7d7b5,  0xe6abab4d,  0x9a7676ec,
+    0x45caca8f, 0x9d82821f,  0x40c9c989,  0x877d7dfa,
+    0x15fafaef, 0xeb5959b2,  0xc947478e,  0xbf0f0fb,
+    0xecadad41, 0x67d4d4b3,  0xfda2a25f,  0xeaafaf45,
+    0xbf9c9c23, 0xf7a4a453,  0x967272e4,  0x5bc0c09b,
+    0xc2b7b775, 0x1cfdfde1,  0xae93933d,  0x6a26264c,
+    0x5a36366c, 0x413f3f7e,  0x2f7f7f5,   0x4fcccc83,
+    0x5c343468, 0xf4a5a551,  0x34e5e5d1,  0x8f1f1f9,
+    0x937171e2, 0x73d8d8ab,  0x53313162,  0x3f15152a,
+    0xc040408,  0x52c7c795,  0x65232346,  0x5ec3c39d,
+    0x28181830, 0xa1969637,  0xf05050a,   0xb59a9a2f,
+    0x907070e,  0x36121224,  0x9b80801b,  0x3de2e2df,
+    0x26ebebcd, 0x6927274e,  0xcdb2b27f,  0x9f7575ea,
+    0x1b090912, 0x9e83831d,  0x742c2c58,  0x2e1a1a34,
+    0x2d1b1b36, 0xb26e6edc,  0xee5a5ab4,  0xfba0a05b,
+    0xf65252a4, 0x4d3b3b76,  0x61d6d6b7,  0xceb3b37d,
+    0x7b292952, 0x3ee3e3dd,  0x712f2f5e,  0x97848413,
+    0xf55353a6, 0x68d1d1b9,  0x0,         0x2cededc1,
+    0x60202040, 0x1ffcfce3,  0xc8b1b179,  0xed5b5bb6,
+    0xbe6a6ad4, 0x46cbcb8d,  0xd9bebe67,  0x4b393972,
+    0xde4a4a94, 0xd44c4c98,  0xe85858b0,  0x4acfcf85,
+    0x6bd0d0bb, 0x2aefefc5,  0xe5aaaa4f,  0x16fbfbed,
+    0xc5434386, 0xd74d4d9a,  0x55333366,  0x94858511,
+    0xcf45458a, 0x10f9f9e9,  0x6020204,   0x817f7ffe,
+    0xf05050a0, 0x443c3c78,  0xba9f9f25,  0xe3a8a84b,
+    0xf35151a2, 0xfea3a35d,  0xc0404080,  0x8a8f8f05,
+    0xad92923f, 0xbc9d9d21,  0x48383870,  0x4f5f5f1,
+    0xdfbcbc63, 0xc1b6b677,  0x75dadaaf,  0x63212142,
+    0x30101020, 0x1affffe5,  0xef3f3fd,   0x6dd2d2bf,
+    0x4ccdcd81, 0x140c0c18,  0x35131326,  0x2fececc3,
+    0xe15f5fbe, 0xa2979735,  0xcc444488,  0x3917172e,
+    0x57c4c493, 0xf2a7a755,  0x827e7efc,  0x473d3d7a,
+    0xac6464c8, 0xe75d5dba,  0x2b191932,  0x957373e6,
+    0xa06060c0, 0x98818119,  0xd14f4f9e,  0x7fdcdca3,
+    0x66222244, 0x7e2a2a54,  0xab90903b,  0x8388880b,
+    0xca46468c, 0x29eeeec7,  0xd3b8b86b,  0x3c141428,
+    0x79dedea7, 0xe25e5ebc,  0x1d0b0b16,  0x76dbdbad,
+    0x3be0e0db, 0x56323264,  0x4e3a3a74,  0x1e0a0a14,
+    0xdb494992, 0xa06060c,   0x6c242448,  0xe45c5cb8,
+    0x5dc2c29f, 0x6ed3d3bd,  0xefacac43,  0xa66262c4,
+    0xa8919139, 0xa4959531,  0x37e4e4d3,  0x8b7979f2,
+    0x32e7e7d5, 0x43c8c88b,  0x5937376e,  0xb76d6dda,
+    0x8c8d8d01, 0x64d5d5b1,  0xd24e4e9c,  0xe0a9a949,
+    0xb46c6cd8, 0xfa5656ac,  0x7f4f4f3,   0x25eaeacf,
+    0xaf6565ca, 0x8e7a7af4,  0xe9aeae47,  0x18080810,
+    0xd5baba6f, 0x887878f0,  0x6f25254a,  0x722e2e5c,
+    0x241c1c38, 0xf1a6a657,  0xc7b4b473,  0x51c6c697,
+    0x23e8e8cb, 0x7cdddda1,  0x9c7474e8,  0x211f1f3e,
+    0xdd4b4b96, 0xdcbdbd61,  0x868b8b0d,  0x858a8a0f,
+    0x907070e0, 0x423e3e7c,  0xc4b5b571,  0xaa6666cc,
+    0xd8484890, 0x5030306,   0x1f6f6f7,   0x120e0e1c,
+    0xa36161c2, 0x5f35356a,  0xf95757ae,  0xd0b9b969,
+    0x91868617, 0x58c1c199,  0x271d1d3a,  0xb99e9e27,
+    0x38e1e1d9, 0x13f8f8eb,  0xb398982b,  0x33111122,
+    0xbb6969d2, 0x70d9d9a9,  0x898e8e07,  0xa7949433,
+    0xb69b9b2d, 0x221e1e3c,  0x92878715,  0x20e9e9c9,
+    0x49cece87, 0xff5555aa,  0x78282850,  0x7adfdfa5,
+    0x8f8c8c03, 0xf8a1a159,  0x80898909,  0x170d0d1a,
+    0xdabfbf65, 0x31e6e6d7,  0xc6424284,  0xb86868d0,
+    0xc3414182, 0xb0999929,  0x772d2d5a,  0x110f0f1e,
+    0xcbb0b07b, 0xfc5454a8,  0xd6bbbb6d,  0x3a16162c,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint32_t T1[256] = {
+    0x6363c6a5, 0x7c7cf884,  0x7777ee99,  0x7b7bf68d,
+    0xf2f2ff0d, 0x6b6bd6bd,  0x6f6fdeb1,  0xc5c59154,
+    0x30306050, 0x1010203,   0x6767cea9,  0x2b2b567d,
+    0xfefee719, 0xd7d7b562,  0xabab4de6,  0x7676ec9a,
+    0xcaca8f45, 0x82821f9d,  0xc9c98940,  0x7d7dfa87,
+    0xfafaef15, 0x5959b2eb,  0x47478ec9,  0xf0f0fb0b,
+    0xadad41ec, 0xd4d4b367,  0xa2a25ffd,  0xafaf45ea,
+    0x9c9c23bf, 0xa4a453f7,  0x7272e496,  0xc0c09b5b,
+    0xb7b775c2, 0xfdfde11c,  0x93933dae,  0x26264c6a,
+    0x36366c5a, 0x3f3f7e41,  0xf7f7f502,  0xcccc834f,
+    0x3434685c, 0xa5a551f4,  0xe5e5d134,  0xf1f1f908,
+    0x7171e293, 0xd8d8ab73,  0x31316253,  0x15152a3f,
+    0x404080c,  0xc7c79552,  0x23234665,  0xc3c39d5e,
+    0x18183028, 0x969637a1,  0x5050a0f,   0x9a9a2fb5,
+    0x7070e09,  0x12122436,  0x80801b9b,  0xe2e2df3d,
+    0xebebcd26, 0x27274e69,  0xb2b27fcd,  0x7575ea9f,
+    0x909121b,  0x83831d9e,  0x2c2c5874,  0x1a1a342e,
+    0x1b1b362d, 0x6e6edcb2,  0x5a5ab4ee,  0xa0a05bfb,
+    0x5252a4f6, 0x3b3b764d,  0xd6d6b761,  0xb3b37dce,
+    0x2929527b, 0xe3e3dd3e,  0x2f2f5e71,  0x84841397,
+    0x5353a6f5, 0xd1d1b968,  0x00000000,  0xededc12c,
+    0x20204060, 0xfcfce31f,  0xb1b179c8,  0x5b5bb6ed,
+    0x6a6ad4be, 0xcbcb8d46,  0xbebe67d9,  0x3939724b,
+    0x4a4a94de, 0x4c4c98d4,  0x5858b0e8,  0xcfcf854a,
+    0xd0d0bb6b, 0xefefc52a,  0xaaaa4fe5,  0xfbfbed16,
+    0x434386c5, 0x4d4d9ad7,  0x33336655,  0x85851194,
+    0x45458acf, 0xf9f9e910,  0x2020406,   0x7f7ffe81,
+    0x5050a0f0, 0x3c3c7844,  0x9f9f25ba,  0xa8a84be3,
+    0x5151a2f3, 0xa3a35dfe,  0x404080c0,  0x8f8f058a,
+    0x92923fad, 0x9d9d21bc,  0x38387048,  0xf5f5f104,
+    0xbcbc63df, 0xb6b677c1,  0xdadaaf75,  0x21214263,
+    0x10102030, 0xffffe51a,  0xf3f3fd0e,  0xd2d2bf6d,
+    0xcdcd814c, 0xc0c1814,   0x13132635,  0xececc32f,
+    0x5f5fbee1, 0x979735a2,  0x444488cc,  0x17172e39,
+    0xc4c49357, 0xa7a755f2,  0x7e7efc82,  0x3d3d7a47,
+    0x6464c8ac, 0x5d5dbae7,  0x1919322b,  0x7373e695,
+    0x6060c0a0, 0x81811998,  0x4f4f9ed1,  0xdcdca37f,
+    0x22224466, 0x2a2a547e,  0x90903bab,  0x88880b83,
+    0x46468cca, 0xeeeec729,  0xb8b86bd3,  0x1414283c,
+    0xdedea779, 0x5e5ebce2,  0xb0b161d,   0xdbdbad76,
+    0xe0e0db3b, 0x32326456,  0x3a3a744e,  0xa0a141e,
+    0x494992db, 0x6060c0a,   0x2424486c,  0x5c5cb8e4,
+    0xc2c29f5d, 0xd3d3bd6e,  0xacac43ef,  0x6262c4a6,
+    0x919139a8, 0x959531a4,  0xe4e4d337,  0x7979f28b,
+    0xe7e7d532, 0xc8c88b43,  0x37376e59,  0x6d6ddab7,
+    0x8d8d018c, 0xd5d5b164,  0x4e4e9cd2,  0xa9a949e0,
+    0x6c6cd8b4, 0x5656acfa,  0xf4f4f307,  0xeaeacf25,
+    0x6565caaf, 0x7a7af48e,  0xaeae47e9,  0x8081018,
+    0xbaba6fd5, 0x7878f088,  0x25254a6f,  0x2e2e5c72,
+    0x1c1c3824, 0xa6a657f1,  0xb4b473c7,  0xc6c69751,
+    0xe8e8cb23, 0xdddda17c,  0x7474e89c,  0x1f1f3e21,
+    0x4b4b96dd, 0xbdbd61dc,  0x8b8b0d86,  0x8a8a0f85,
+    0x7070e090, 0x3e3e7c42,  0xb5b571c4,  0x6666ccaa,
+    0x484890d8, 0x3030605,   0xf6f6f701,  0xe0e1c12,
+    0x6161c2a3, 0x35356a5f,  0x5757aef9,  0xb9b969d0,
+    0x86861791, 0xc1c19958,  0x1d1d3a27,  0x9e9e27b9,
+    0xe1e1d938, 0xf8f8eb13,  0x98982bb3,  0x11112233,
+    0x6969d2bb, 0xd9d9a970,  0x8e8e0789,  0x949433a7,
+    0x9b9b2db6, 0x1e1e3c22,  0x87871592,  0xe9e9c920,
+    0xcece8749, 0x5555aaff,  0x28285078,  0xdfdfa57a,
+    0x8c8c038f, 0xa1a159f8,  0x89890980,  0xd0d1a17,
+    0xbfbf65da, 0xe6e6d731,  0x424284c6,  0x6868d0b8,
+    0x414182c3, 0x999929b0,  0x2d2d5a77,  0xf0f1e11,
+    0xb0b07bcb, 0x5454a8fc,  0xbbbb6dd6,  0x16162c3a,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint32_t T2[256] = {
+    0x63c6a563, 0x7cf8847c,  0x77ee9977,  0x7bf68d7b,
+    0xf2ff0df2, 0x6bd6bd6b,  0x6fdeb16f,  0xc59154c5,
+    0x30605030, 0x1020301,   0x67cea967,  0x2b567d2b,
+    0xfee719fe, 0xd7b562d7,  0xab4de6ab,  0x76ec9a76,
+    0xca8f45ca, 0x821f9d82,  0xc98940c9,  0x7dfa877d,
+    0xfaef15fa, 0x59b2eb59,  0x478ec947,  0xf0fb0bf0,
+    0xad41ecad, 0xd4b367d4,  0xa25ffda2,  0xaf45eaaf,
+    0x9c23bf9c, 0xa453f7a4,  0x72e49672,  0xc09b5bc0,
+    0xb775c2b7, 0xfde11cfd,  0x933dae93,  0x264c6a26,
+    0x366c5a36, 0x3f7e413f,  0xf7f502f7,  0xcc834fcc,
+    0x34685c34, 0xa551f4a5,  0xe5d134e5,  0xf1f908f1,
+    0x71e29371, 0xd8ab73d8,  0x31625331,  0x152a3f15,
+    0x4080c04,  0xc79552c7,  0x23466523,  0xc39d5ec3,
+    0x18302818, 0x9637a196,  0x50a0f05,   0x9a2fb59a,
+    0x70e0907,  0x12243612,  0x801b9b80,  0xe2df3de2,
+    0xebcd26eb, 0x274e6927,  0xb27fcdb2,  0x75ea9f75,
+    0x9121b09,  0x831d9e83,  0x2c58742c,  0x1a342e1a,
+    0x1b362d1b, 0x6edcb26e,  0x5ab4ee5a,  0xa05bfba0,
+    0x52a4f652, 0x3b764d3b,  0xd6b761d6,  0xb37dceb3,
+    0x29527b29, 0xe3dd3ee3,  0x2f5e712f,  0x84139784,
+    0x53a6f553, 0xd1b968d1,  0x0,         0xedc12ced,
+    0x20406020, 0xfce31ffc,  0xb179c8b1,  0x5bb6ed5b,
+    0x6ad4be6a, 0xcb8d46cb,  0xbe67d9be,  0x39724b39,
+    0x4a94de4a, 0x4c98d44c,  0x58b0e858,  0xcf854acf,
+    0xd0bb6bd0, 0xefc52aef,  0xaa4fe5aa,  0xfbed16fb,
+    0x4386c543, 0x4d9ad74d,  0x33665533,  0x85119485,
+    0x458acf45, 0xf9e910f9,  0x2040602,   0x7ffe817f,
+    0x50a0f050, 0x3c78443c,  0x9f25ba9f,  0xa84be3a8,
+    0x51a2f351, 0xa35dfea3,  0x4080c040,  0x8f058a8f,
+    0x923fad92, 0x9d21bc9d,  0x38704838,  0xf5f104f5,
+    0xbc63dfbc, 0xb677c1b6,  0xdaaf75da,  0x21426321,
+    0x10203010, 0xffe51aff,  0xf3fd0ef3,  0xd2bf6dd2,
+    0xcd814ccd, 0xc18140c,   0x13263513,  0xecc32fec,
+    0x5fbee15f, 0x9735a297,  0x4488cc44,  0x172e3917,
+    0xc49357c4, 0xa755f2a7,  0x7efc827e,  0x3d7a473d,
+    0x64c8ac64, 0x5dbae75d,  0x19322b19,  0x73e69573,
+    0x60c0a060, 0x81199881,  0x4f9ed14f,  0xdca37fdc,
+    0x22446622, 0x2a547e2a,  0x903bab90,  0x880b8388,
+    0x468cca46, 0xeec729ee,  0xb86bd3b8,  0x14283c14,
+    0xdea779de, 0x5ebce25e,  0xb161d0b,   0xdbad76db,
+    0xe0db3be0, 0x32645632,  0x3a744e3a,  0xa141e0a,
+    0x4992db49, 0x60c0a06,   0x24486c24,  0x5cb8e45c,
+    0xc29f5dc2, 0xd3bd6ed3,  0xac43efac,  0x62c4a662,
+    0x9139a891, 0x9531a495,  0xe4d337e4,  0x79f28b79,
+    0xe7d532e7, 0xc88b43c8,  0x376e5937,  0x6ddab76d,
+    0x8d018c8d, 0xd5b164d5,  0x4e9cd24e,  0xa949e0a9,
+    0x6cd8b46c, 0x56acfa56,  0xf4f307f4,  0xeacf25ea,
+    0x65caaf65, 0x7af48e7a,  0xae47e9ae,  0x8101808,
+    0xba6fd5ba, 0x78f08878,  0x254a6f25,  0x2e5c722e,
+    0x1c38241c, 0xa657f1a6,  0xb473c7b4,  0xc69751c6,
+    0xe8cb23e8, 0xdda17cdd,  0x74e89c74,  0x1f3e211f,
+    0x4b96dd4b, 0xbd61dcbd,  0x8b0d868b,  0x8a0f858a,
+    0x70e09070, 0x3e7c423e,  0xb571c4b5,  0x66ccaa66,
+    0x4890d848, 0x3060503,   0xf6f701f6,  0xe1c120e,
+    0x61c2a361, 0x356a5f35,  0x57aef957,  0xb969d0b9,
+    0x86179186, 0xc19958c1,  0x1d3a271d,  0x9e27b99e,
+    0xe1d938e1, 0xf8eb13f8,  0x982bb398,  0x11223311,
+    0x69d2bb69, 0xd9a970d9,  0x8e07898e,  0x9433a794,
+    0x9b2db69b, 0x1e3c221e,  0x87159287,  0xe9c920e9,
+    0xce8749ce, 0x55aaff55,  0x28507828,  0xdfa57adf,
+    0x8c038f8c, 0xa159f8a1,  0x89098089,  0xd1a170d,
+    0xbf65dabf, 0xe6d731e6,  0x4284c642,  0x68d0b868,
+    0x4182c341, 0x9929b099,  0x2d5a772d,  0xf1e110f,
+    0xb07bcbb0, 0x54a8fc54,  0xbb6dd6bb,  0x162c3a16,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint32_t T3[256] = {
+    0xc6a56363, 0xf8847c7c,  0xee997777,  0xf68d7b7b,
+    0xff0df2f2, 0xd6bd6b6b,  0xdeb16f6f,  0x9154c5c5,
+    0x60503030, 0x2030101,   0xcea96767,  0x567d2b2b,
+    0xe719fefe, 0xb562d7d7,  0x4de6abab,  0xec9a7676,
+    0x8f45caca, 0x1f9d8282,  0x8940c9c9,  0xfa877d7d,
+    0xef15fafa, 0xb2eb5959,  0x8ec94747,  0xfb0bf0f0,
+    0x41ecadad, 0xb367d4d4,  0x5ffda2a2,  0x45eaafaf,
+    0x23bf9c9c, 0x53f7a4a4,  0xe4967272,  0x9b5bc0c0,
+    0x75c2b7b7, 0xe11cfdfd,  0x3dae9393,  0x4c6a2626,
+    0x6c5a3636, 0x7e413f3f,  0xf502f7f7,  0x834fcccc,
+    0x685c3434, 0x51f4a5a5,  0xd134e5e5,  0xf908f1f1,
+    0xe2937171, 0xab73d8d8,  0x62533131,  0x2a3f1515,
+    0x80c0404,  0x9552c7c7,  0x46652323,  0x9d5ec3c3,
+    0x30281818, 0x37a19696,  0xa0f0505,   0x2fb59a9a,
+    0xe090707,  0x24361212,  0x1b9b8080,  0xdf3de2e2,
+    0xcd26ebeb, 0x4e692727,  0x7fcdb2b2,  0xea9f7575,
+    0x121b0909, 0x1d9e8383,  0x58742c2c,  0x342e1a1a,
+    0x362d1b1b, 0xdcb26e6e,  0xb4ee5a5a,  0x5bfba0a0,
+    0xa4f65252, 0x764d3b3b,  0xb761d6d6,  0x7dceb3b3,
+    0x527b2929, 0xdd3ee3e3,  0x5e712f2f,  0x13978484,
+    0xa6f55353, 0xb968d1d1,  0x0,         0xc12ceded,
+    0x40602020, 0xe31ffcfc,  0x79c8b1b1,  0xb6ed5b5b,
+    0xd4be6a6a, 0x8d46cbcb,  0x67d9bebe,  0x724b3939,
+    0x94de4a4a, 0x98d44c4c,  0xb0e85858,  0x854acfcf,
+    0xbb6bd0d0, 0xc52aefef,  0x4fe5aaaa,  0xed16fbfb,
+    0x86c54343, 0x9ad74d4d,  0x66553333,  0x11948585,
+    0x8acf4545, 0xe910f9f9,  0x4060202,   0xfe817f7f,
+    0xa0f05050, 0x78443c3c,  0x25ba9f9f,  0x4be3a8a8,
+    0xa2f35151, 0x5dfea3a3,  0x80c04040,  0x58a8f8f,
+    0x3fad9292, 0x21bc9d9d,  0x70483838,  0xf104f5f5,
+    0x63dfbcbc, 0x77c1b6b6,  0xaf75dada,  0x42632121,
+    0x20301010, 0xe51affff,  0xfd0ef3f3,  0xbf6dd2d2,
+    0x814ccdcd, 0x18140c0c,  0x26351313,  0xc32fecec,
+    0xbee15f5f, 0x35a29797,  0x88cc4444,  0x2e391717,
+    0x9357c4c4, 0x55f2a7a7,  0xfc827e7e,  0x7a473d3d,
+    0xc8ac6464, 0xbae75d5d,  0x322b1919,  0xe6957373,
+    0xc0a06060, 0x19988181,  0x9ed14f4f,  0xa37fdcdc,
+    0x44662222, 0x547e2a2a,  0x3bab9090,  0xb838888,
+    0x8cca4646, 0xc729eeee,  0x6bd3b8b8,  0x283c1414,
+    0xa779dede, 0xbce25e5e,  0x161d0b0b,  0xad76dbdb,
+    0xdb3be0e0, 0x64563232,  0x744e3a3a,  0x141e0a0a,
+    0x92db4949, 0xc0a0606,   0x486c2424,  0xb8e45c5c,
+    0x9f5dc2c2, 0xbd6ed3d3,  0x43efacac,  0xc4a66262,
+    0x39a89191, 0x31a49595,  0xd337e4e4,  0xf28b7979,
+    0xd532e7e7, 0x8b43c8c8,  0x6e593737,  0xdab76d6d,
+    0x18c8d8d,  0xb164d5d5,  0x9cd24e4e,  0x49e0a9a9,
+    0xd8b46c6c, 0xacfa5656,  0xf307f4f4,  0xcf25eaea,
+    0xcaaf6565, 0xf48e7a7a,  0x47e9aeae,  0x10180808,
+    0x6fd5baba, 0xf0887878,  0x4a6f2525,  0x5c722e2e,
+    0x38241c1c, 0x57f1a6a6,  0x73c7b4b4,  0x9751c6c6,
+    0xcb23e8e8, 0xa17cdddd,  0xe89c7474,  0x3e211f1f,
+    0x96dd4b4b, 0x61dcbdbd,  0xd868b8b,   0xf858a8a,
+    0xe0907070, 0x7c423e3e,  0x71c4b5b5,  0xccaa6666,
+    0x90d84848, 0x6050303,   0xf701f6f6,  0x1c120e0e,
+    0xc2a36161, 0x6a5f3535,  0xaef95757,  0x69d0b9b9,
+    0x17918686, 0x9958c1c1,  0x3a271d1d,  0x27b99e9e,
+    0xd938e1e1, 0xeb13f8f8,  0x2bb39898,  0x22331111,
+    0xd2bb6969, 0xa970d9d9,  0x7898e8e,   0x33a79494,
+    0x2db69b9b, 0x3c221e1e,  0x15928787,  0xc920e9e9,
+    0x8749cece, 0xaaff5555,  0x50782828,  0xa57adfdf,
+    0x38f8c8c,  0x59f8a1a1,  0x9808989,   0x1a170d0d,
+    0x65dabfbf, 0xd731e6e6,  0x84c64242,  0xd0b86868,
+    0x82c34141, 0x29b09999,  0x5a772d2d,  0x1e110f0f,
+    0x7bcbb0b0, 0xa8fc5454,  0x6dd6bbbb,  0x2c3a1616,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint32_t U0[256] = {
+    0x50a7f451, 0x5365417e,  0xc3a4171a,  0x965e273a,
+    0xcb6bab3b, 0xf1459d1f,  0xab58faac,  0x9303e34b,
+    0x55fa3020, 0xf66d76ad,  0x9176cc88,  0x254c02f5,
+    0xfcd7e54f, 0xd7cb2ac5,  0x80443526,  0x8fa362b5,
+    0x495ab1de, 0x671bba25,  0x980eea45,  0xe1c0fe5d,
+    0x2752fc3,  0x12f04c81,  0xa397468d,  0xc6f9d36b,
+    0xe75f8f03, 0x959c9215,  0xeb7a6dbf,  0xda595295,
+    0x2d83bed4, 0xd3217458,  0x2969e049,  0x44c8c98e,
+    0x6a89c275, 0x78798ef4,  0x6b3e5899,  0xdd71b927,
+    0xb64fe1be, 0x17ad88f0,  0x66ac20c9,  0xb43ace7d,
+    0x184adf63, 0x82311ae5,  0x60335197,  0x457f5362,
+    0xe07764b1, 0x84ae6bbb,  0x1ca081fe,  0x942b08f9,
+    0x58684870, 0x19fd458f,  0x876cde94,  0xb7f87b52,
+    0x23d373ab, 0xe2024b72,  0x578f1fe3,  0x2aab5566,
+    0x728ebb2,  0x3c2b52f,   0x9a7bc586,  0xa50837d3,
+    0xf2872830, 0xb2a5bf23,  0xba6a0302,  0x5c8216ed,
+    0x2b1ccf8a, 0x92b479a7,  0xf0f207f3,  0xa1e2694e,
+    0xcdf4da65, 0xd5be0506,  0x1f6234d1,  0x8afea6c4,
+    0x9d532e34, 0xa055f3a2,  0x32e18a05,  0x75ebf6a4,
+    0x39ec830b, 0xaaef6040,  0x69f715e,   0x51106ebd,
+    0xf98a213e, 0x3d06dd96,  0xae053edd,  0x46bde64d,
+    0xb58d5491, 0x55dc471,   0x6fd40604,  0xff155060,
+    0x24fb9819, 0x97e9bdd6,  0xcc434089,  0x779ed967,
+    0xbd42e8b0, 0x888b8907,  0x385b19e7,  0xdbeec879,
+    0x470a7ca1, 0xe90f427c,  0xc91e84f8,  0x0,
+    0x83868009, 0x48ed2b32,  0xac70111e,  0x4e725a6c,
+    0xfbff0efd, 0x5638850f,  0x1ed5ae3d,  0x27392d36,
+    0x64d90f0a, 0x21a65c68,  0xd1545b9b,  0x3a2e3624,
+    0xb1670a0c, 0xfe75793,   0xd296eeb4,  0x9e919b1b,
+    0x4fc5c080, 0xa220dc61,  0x694b775a,  0x161a121c,
+    0xaba93e2,  0xe52aa0c0,  0x43e0223c,  0x1d171b12,
+    0xb0d090e,  0xadc78bf2,  0xb9a8b62d,  0xc8a91e14,
+    0x8519f157, 0x4c0775af,  0xbbdd99ee,  0xfd607fa3,
+    0x9f2601f7, 0xbcf5725c,  0xc53b6644,  0x347efb5b,
+    0x7629438b, 0xdcc623cb,  0x68fcedb6,  0x63f1e4b8,
+    0xcadc31d7, 0x10856342,  0x40229713,  0x2011c684,
+    0x7d244a85, 0xf83dbbd2,  0x1132f9ae,  0x6da129c7,
+    0x4b2f9e1d, 0xf330b2dc,  0xec52860d,  0xd0e3c177,
+    0x6c16b32b, 0x99b970a9,  0xfa489411,  0x2264e947,
+    0xc48cfca8, 0x1a3ff0a0,  0xd82c7d56,  0xef903322,
+    0xc74e4987, 0xc1d138d9,  0xfea2ca8c,  0x360bd498,
+    0xcf81f5a6, 0x28de7aa5,  0x268eb7da,  0xa4bfad3f,
+    0xe49d3a2c, 0xd927850,   0x9bcc5f6a,  0x62467e54,
+    0xc2138df6, 0xe8b8d890,  0x5ef7392e,  0xf5afc382,
+    0xbe805d9f, 0x7c93d069,  0xa92dd56f,  0xb31225cf,
+    0x3b99acc8, 0xa77d1810,  0x6e639ce8,  0x7bbb3bdb,
+    0x97826cd,  0xf418596e,  0x1b79aec,   0xa89a4f83,
+    0x656e95e6, 0x7ee6ffaa,  0x8cfbc21,   0xe6e815ef,
+    0xd99be7ba, 0xce366f4a,  0xd4099fea,  0xd67cb029,
+    0xafb2a431, 0x31233f2a,  0x3094a5c6,  0xc066a235,
+    0x37bc4e74, 0xa6ca82fc,  0xb0d090e0,  0x15d8a733,
+    0x4a9804f1, 0xf7daec41,  0xe50cd7f,   0x2ff69117,
+    0x8dd64d76, 0x4db0ef43,  0x544daacc,  0xdf0496e4,
+    0xe3b5d19e, 0x1b886a4c,  0xb81f2cc1,  0x7f516546,
+    0x4ea5e9d,  0x5d358c01,  0x737487fa,  0x2e410bfb,
+    0x5a1d67b3, 0x52d2db92,  0x335610e9,  0x1347d66d,
+    0x8c61d79a, 0x7a0ca137,  0x8e14f859,  0x893c13eb,
+    0xee27a9ce, 0x35c961b7,  0xede51ce1,  0x3cb1477a,
+    0x59dfd29c, 0x3f73f255,  0x79ce1418,  0xbf37c773,
+    0xeacdf753, 0x5baafd5f,  0x146f3ddf,  0x86db4478,
+    0x81f3afca, 0x3ec468b9,  0x2c342438,  0x5f40a3c2,
+    0x72c31d16, 0xc25e2bc,   0x8b493c28,  0x41950dff,
+    0x7101a839, 0xdeb30c08,  0x9ce4b4d8,  0x90c15664,
+    0x6184cb7b, 0x70b632d5,  0x745c6c48,  0x4257b8d0,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint32_t U1[256] = {
+    0xa7f45150, 0x65417e53,  0xa4171ac3,  0x5e273a96,
+    0x6bab3bcb, 0x459d1ff1,  0x58faacab,  0x3e34b93,
+    0xfa302055, 0x6d76adf6,  0x76cc8891,  0x4c02f525,
+    0xd7e54ffc, 0xcb2ac5d7,  0x44352680,  0xa362b58f,
+    0x5ab1de49, 0x1bba2567,  0xeea4598,   0xc0fe5de1,
+    0x752fc302, 0xf04c8112,  0x97468da3,  0xf9d36bc6,
+    0x5f8f03e7, 0x9c921595,  0x7a6dbfeb,  0x595295da,
+    0x83bed42d, 0x217458d3,  0x69e04929,  0xc8c98e44,
+    0x89c2756a, 0x798ef478,  0x3e58996b,  0x71b927dd,
+    0x4fe1beb6, 0xad88f017,  0xac20c966,  0x3ace7db4,
+    0x4adf6318, 0x311ae582,  0x33519760,  0x7f536245,
+    0x7764b1e0, 0xae6bbb84,  0xa081fe1c,  0x2b08f994,
+    0x68487058, 0xfd458f19,  0x6cde9487,  0xf87b52b7,
+    0xd373ab23, 0x24b72e2,   0x8f1fe357,  0xab55662a,
+    0x28ebb207, 0xc2b52f03,  0x7bc5869a,  0x837d3a5,
+    0x872830f2, 0xa5bf23b2,  0x6a0302ba,  0x8216ed5c,
+    0x1ccf8a2b, 0xb479a792,  0xf207f3f0,  0xe2694ea1,
+    0xf4da65cd, 0xbe0506d5,  0x6234d11f,  0xfea6c48a,
+    0x532e349d, 0x55f3a2a0,  0xe18a0532,  0xebf6a475,
+    0xec830b39, 0xef6040aa,  0x9f715e06,  0x106ebd51,
+    0x8a213ef9, 0x6dd963d,   0x53eddae,   0xbde64d46,
+    0x8d5491b5, 0x5dc47105,  0xd406046f,  0x155060ff,
+    0xfb981924, 0xe9bdd697,  0x434089cc,  0x9ed96777,
+    0x42e8b0bd, 0x8b890788,  0x5b19e738,  0xeec879db,
+    0xa7ca147,  0xf427ce9,   0x1e84f8c9,  0x0,
+    0x86800983, 0xed2b3248,  0x70111eac,  0x725a6c4e,
+    0xff0efdfb, 0x38850f56,  0xd5ae3d1e,  0x392d3627,
+    0xd90f0a64, 0xa65c6821,  0x545b9bd1,  0x2e36243a,
+    0x670a0cb1, 0xe757930f,  0x96eeb4d2,  0x919b1b9e,
+    0xc5c0804f, 0x20dc61a2,  0x4b775a69,  0x1a121c16,
+    0xba93e20a, 0x2aa0c0e5,  0xe0223c43,  0x171b121d,
+    0xd090e0b,  0xc78bf2ad,  0xa8b62db9,  0xa91e14c8,
+    0x19f15785, 0x775af4c,   0xdd99eebb,  0x607fa3fd,
+    0x2601f79f, 0xf5725cbc,  0x3b6644c5,  0x7efb5b34,
+    0x29438b76, 0xc623cbdc,  0xfcedb668,  0xf1e4b863,
+    0xdc31d7ca, 0x85634210,  0x22971340,  0x11c68420,
+    0x244a857d, 0x3dbbd2f8,  0x32f9ae11,  0xa129c76d,
+    0x2f9e1d4b, 0x30b2dcf3,  0x52860dec,  0xe3c177d0,
+    0x16b32b6c, 0xb970a999,  0x489411fa,  0x64e94722,
+    0x8cfca8c4, 0x3ff0a01a,  0x2c7d56d8,  0x903322ef,
+    0x4e4987c7, 0xd138d9c1,  0xa2ca8cfe,  0xbd49836,
+    0x81f5a6cf, 0xde7aa528,  0x8eb7da26,  0xbfad3fa4,
+    0x9d3a2ce4, 0x9278500d,  0xcc5f6a9b,  0x467e5462,
+    0x138df6c2, 0xb8d890e8,  0xf7392e5e,  0xafc382f5,
+    0x805d9fbe, 0x93d0697c,  0x2dd56fa9,  0x1225cfb3,
+    0x99acc83b, 0x7d1810a7,  0x639ce86e,  0xbb3bdb7b,
+    0x7826cd09, 0x18596ef4,  0xb79aec01,  0x9a4f83a8,
+    0x6e95e665, 0xe6ffaa7e,  0xcfbc2108,  0xe815efe6,
+    0x9be7bad9, 0x366f4ace,  0x99fead4,   0x7cb029d6,
+    0xb2a431af, 0x233f2a31,  0x94a5c630,  0x66a235c0,
+    0xbc4e7437, 0xca82fca6,  0xd090e0b0,  0xd8a73315,
+    0x9804f14a, 0xdaec41f7,  0x50cd7f0e,  0xf691172f,
+    0xd64d768d, 0xb0ef434d,  0x4daacc54,  0x496e4df,
+    0xb5d19ee3, 0x886a4c1b,  0x1f2cc1b8,  0x5165467f,
+    0xea5e9d04, 0x358c015d,  0x7487fa73,  0x410bfb2e,
+    0x1d67b35a, 0xd2db9252,  0x5610e933,  0x47d66d13,
+    0x61d79a8c, 0xca1377a,   0x14f8598e,  0x3c13eb89,
+    0x27a9ceee, 0xc961b735,  0xe51ce1ed,  0xb1477a3c,
+    0xdfd29c59, 0x73f2553f,  0xce141879,  0x37c773bf,
+    0xcdf753ea, 0xaafd5f5b,  0x6f3ddf14,  0xdb447886,
+    0xf3afca81, 0xc468b93e,  0x3424382c,  0x40a3c25f,
+    0xc31d1672, 0x25e2bc0c,  0x493c288b,  0x950dff41,
+    0x1a83971,  0xb30c08de,  0xe4b4d89c,  0xc1566490,
+    0x84cb7b61, 0xb632d570,  0x5c6c4874,  0x57b8d042,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint32_t U2[256] = {
+    0xf45150a7, 0x417e5365,  0x171ac3a4,  0x273a965e,
+    0xab3bcb6b, 0x9d1ff145,  0xfaacab58,  0xe34b9303,
+    0x302055fa, 0x76adf66d,  0xcc889176,  0x2f5254c,
+    0xe54ffcd7, 0x2ac5d7cb,  0x35268044,  0x62b58fa3,
+    0xb1de495a, 0xba25671b,  0xea45980e,  0xfe5de1c0,
+    0x2fc30275, 0x4c8112f0,  0x468da397,  0xd36bc6f9,
+    0x8f03e75f, 0x9215959c,  0x6dbfeb7a,  0x5295da59,
+    0xbed42d83, 0x7458d321,  0xe0492969,  0xc98e44c8,
+    0xc2756a89, 0x8ef47879,  0x58996b3e,  0xb927dd71,
+    0xe1beb64f, 0x88f017ad,  0x20c966ac,  0xce7db43a,
+    0xdf63184a, 0x1ae58231,  0x51976033,  0x5362457f,
+    0x64b1e077, 0x6bbb84ae,  0x81fe1ca0,  0x8f9942b,
+    0x48705868, 0x458f19fd,  0xde94876c,  0x7b52b7f8,
+    0x73ab23d3, 0x4b72e202,  0x1fe3578f,  0x55662aab,
+    0xebb20728, 0xb52f03c2,  0xc5869a7b,  0x37d3a508,
+    0x2830f287, 0xbf23b2a5,  0x302ba6a,   0x16ed5c82,
+    0xcf8a2b1c, 0x79a792b4,  0x7f3f0f2,   0x694ea1e2,
+    0xda65cdf4, 0x506d5be,   0x34d11f62,  0xa6c48afe,
+    0x2e349d53, 0xf3a2a055,  0x8a0532e1,  0xf6a475eb,
+    0x830b39ec, 0x6040aaef,  0x715e069f,  0x6ebd5110,
+    0x213ef98a, 0xdd963d06,  0x3eddae05,  0xe64d46bd,
+    0x5491b58d, 0xc471055d,  0x6046fd4,   0x5060ff15,
+    0x981924fb, 0xbdd697e9,  0x4089cc43,  0xd967779e,
+    0xe8b0bd42, 0x8907888b,  0x19e7385b,  0xc879dbee,
+    0x7ca1470a, 0x427ce90f,  0x84f8c91e,  0x0,
+    0x80098386, 0x2b3248ed,  0x111eac70,  0x5a6c4e72,
+    0xefdfbff,  0x850f5638,  0xae3d1ed5,  0x2d362739,
+    0xf0a64d9,  0x5c6821a6,  0x5b9bd154,  0x36243a2e,
+    0xa0cb167,  0x57930fe7,  0xeeb4d296,  0x9b1b9e91,
+    0xc0804fc5, 0xdc61a220,  0x775a694b,  0x121c161a,
+    0x93e20aba, 0xa0c0e52a,  0x223c43e0,  0x1b121d17,
+    0x90e0b0d,  0x8bf2adc7,  0xb62db9a8,  0x1e14c8a9,
+    0xf1578519, 0x75af4c07,  0x99eebbdd,  0x7fa3fd60,
+    0x1f79f26,  0x725cbcf5,  0x6644c53b,  0xfb5b347e,
+    0x438b7629, 0x23cbdcc6,  0xedb668fc,  0xe4b863f1,
+    0x31d7cadc, 0x63421085,  0x97134022,  0xc6842011,
+    0x4a857d24, 0xbbd2f83d,  0xf9ae1132,  0x29c76da1,
+    0x9e1d4b2f, 0xb2dcf330,  0x860dec52,  0xc177d0e3,
+    0xb32b6c16, 0x70a999b9,  0x9411fa48,  0xe9472264,
+    0xfca8c48c, 0xf0a01a3f,  0x7d56d82c,  0x3322ef90,
+    0x4987c74e, 0x38d9c1d1,  0xca8cfea2,  0xd498360b,
+    0xf5a6cf81, 0x7aa528de,  0xb7da268e,  0xad3fa4bf,
+    0x3a2ce49d, 0x78500d92,  0x5f6a9bcc,  0x7e546246,
+    0x8df6c213, 0xd890e8b8,  0x392e5ef7,  0xc382f5af,
+    0x5d9fbe80, 0xd0697c93,  0xd56fa92d,  0x25cfb312,
+    0xacc83b99, 0x1810a77d,  0x9ce86e63,  0x3bdb7bbb,
+    0x26cd0978, 0x596ef418,  0x9aec01b7,  0x4f83a89a,
+    0x95e6656e, 0xffaa7ee6,  0xbc2108cf,  0x15efe6e8,
+    0xe7bad99b, 0x6f4ace36,  0x9fead409,  0xb029d67c,
+    0xa431afb2, 0x3f2a3123,  0xa5c63094,  0xa235c066,
+    0x4e7437bc, 0x82fca6ca,  0x90e0b0d0,  0xa73315d8,
+    0x4f14a98,  0xec41f7da,  0xcd7f0e50,  0x91172ff6,
+    0x4d768dd6, 0xef434db0,  0xaacc544d,  0x96e4df04,
+    0xd19ee3b5, 0x6a4c1b88,  0x2cc1b81f,  0x65467f51,
+    0x5e9d04ea, 0x8c015d35,  0x87fa7374,  0xbfb2e41,
+    0x67b35a1d, 0xdb9252d2,  0x10e93356,  0xd66d1347,
+    0xd79a8c61, 0xa1377a0c,  0xf8598e14,  0x13eb893c,
+    0xa9ceee27, 0x61b735c9,  0x1ce1ede5,  0x477a3cb1,
+    0xd29c59df, 0xf2553f73,  0x141879ce,  0xc773bf37,
+    0xf753eacd, 0xfd5f5baa,  0x3ddf146f,  0x447886db,
+    0xafca81f3, 0x68b93ec4,  0x24382c34,  0xa3c25f40,
+    0x1d1672c3, 0xe2bc0c25,  0x3c288b49,  0xdff4195,
+    0xa8397101, 0xc08deb3,   0xb4d89ce4,  0x566490c1,
+    0xcb7b6184, 0x32d570b6,  0x6c48745c,  0xb8d04257,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint32_t U3[256] = {
+    0x5150a7f4, 0x7e536541,  0x1ac3a417,  0x3a965e27,
+    0x3bcb6bab, 0x1ff1459d,  0xacab58fa,  0x4b9303e3,
+    0x2055fa30, 0xadf66d76,  0x889176cc,  0xf5254c02,
+    0x4ffcd7e5, 0xc5d7cb2a,  0x26804435,  0xb58fa362,
+    0xde495ab1, 0x25671bba,  0x45980eea,  0x5de1c0fe,
+    0xc302752f, 0x8112f04c,  0x8da39746,  0x6bc6f9d3,
+    0x3e75f8f,  0x15959c92,  0xbfeb7a6d,  0x95da5952,
+    0xd42d83be, 0x58d32174,  0x492969e0,  0x8e44c8c9,
+    0x756a89c2, 0xf478798e,  0x996b3e58,  0x27dd71b9,
+    0xbeb64fe1, 0xf017ad88,  0xc966ac20,  0x7db43ace,
+    0x63184adf, 0xe582311a,  0x97603351,  0x62457f53,
+    0xb1e07764, 0xbb84ae6b,  0xfe1ca081,  0xf9942b08,
+    0x70586848, 0x8f19fd45,  0x94876cde,  0x52b7f87b,
+    0xab23d373, 0x72e2024b,  0xe3578f1f,  0x662aab55,
+    0xb20728eb, 0x2f03c2b5,  0x869a7bc5,  0xd3a50837,
+    0x30f28728, 0x23b2a5bf,  0x2ba6a03,   0xed5c8216,
+    0x8a2b1ccf, 0xa792b479,  0xf3f0f207,  0x4ea1e269,
+    0x65cdf4da, 0x6d5be05,   0xd11f6234,  0xc48afea6,
+    0x349d532e, 0xa2a055f3,  0x532e18a,   0xa475ebf6,
+    0xb39ec83,  0x40aaef60,  0x5e069f71,  0xbd51106e,
+    0x3ef98a21, 0x963d06dd,  0xddae053e,  0x4d46bde6,
+    0x91b58d54, 0x71055dc4,  0x46fd406,   0x60ff1550,
+    0x1924fb98, 0xd697e9bd,  0x89cc4340,  0x67779ed9,
+    0xb0bd42e8, 0x7888b89,   0xe7385b19,  0x79dbeec8,
+    0xa1470a7c, 0x7ce90f42,  0xf8c91e84,  0x0,
+    0x9838680,  0x3248ed2b,  0x1eac7011,  0x6c4e725a,
+    0xfdfbff0e, 0xf563885,   0x3d1ed5ae,  0x3627392d,
+    0xa64d90f,  0x6821a65c,  0x9bd1545b,  0x243a2e36,
+    0xcb1670a,  0x930fe757,  0xb4d296ee,  0x1b9e919b,
+    0x804fc5c0, 0x61a220dc,  0x5a694b77,  0x1c161a12,
+    0xe20aba93, 0xc0e52aa0,  0x3c43e022,  0x121d171b,
+    0xe0b0d09,  0xf2adc78b,  0x2db9a8b6,  0x14c8a91e,
+    0x578519f1, 0xaf4c0775,  0xeebbdd99,  0xa3fd607f,
+    0xf79f2601, 0x5cbcf572,  0x44c53b66,  0x5b347efb,
+    0x8b762943, 0xcbdcc623,  0xb668fced,  0xb863f1e4,
+    0xd7cadc31, 0x42108563,  0x13402297,  0x842011c6,
+    0x857d244a, 0xd2f83dbb,  0xae1132f9,  0xc76da129,
+    0x1d4b2f9e, 0xdcf330b2,  0xdec5286,   0x77d0e3c1,
+    0x2b6c16b3, 0xa999b970,  0x11fa4894,  0x472264e9,
+    0xa8c48cfc, 0xa01a3ff0,  0x56d82c7d,  0x22ef9033,
+    0x87c74e49, 0xd9c1d138,  0x8cfea2ca,  0x98360bd4,
+    0xa6cf81f5, 0xa528de7a,  0xda268eb7,  0x3fa4bfad,
+    0x2ce49d3a, 0x500d9278,  0x6a9bcc5f,  0x5462467e,
+    0xf6c2138d, 0x90e8b8d8,  0x2e5ef739,  0x82f5afc3,
+    0x9fbe805d, 0x697c93d0,  0x6fa92dd5,  0xcfb31225,
+    0xc83b99ac, 0x10a77d18,  0xe86e639c,  0xdb7bbb3b,
+    0xcd097826, 0x6ef41859,  0xec01b79a,  0x83a89a4f,
+    0xe6656e95, 0xaa7ee6ff,  0x2108cfbc,  0xefe6e815,
+    0xbad99be7, 0x4ace366f,  0xead4099f,  0x29d67cb0,
+    0x31afb2a4, 0x2a31233f,  0xc63094a5,  0x35c066a2,
+    0x7437bc4e, 0xfca6ca82,  0xe0b0d090,  0x3315d8a7,
+    0xf14a9804, 0x41f7daec,  0x7f0e50cd,  0x172ff691,
+    0x768dd64d, 0x434db0ef,  0xcc544daa,  0xe4df0496,
+    0x9ee3b5d1, 0x4c1b886a,  0xc1b81f2c,  0x467f5165,
+    0x9d04ea5e, 0x15d358c,   0xfa737487,  0xfb2e410b,
+    0xb35a1d67, 0x9252d2db,  0xe9335610,  0x6d1347d6,
+    0x9a8c61d7, 0x377a0ca1,  0x598e14f8,  0xeb893c13,
+    0xceee27a9, 0xb735c961,  0xe1ede51c,  0x7a3cb147,
+    0x9c59dfd2, 0x553f73f2,  0x1879ce14,  0x73bf37c7,
+    0x53eacdf7, 0x5f5baafd,  0xdf146f3d,  0x7886db44,
+    0xca81f3af, 0xb93ec468,  0x382c3424,  0xc25f40a3,
+    0x1672c31d, 0xbc0c25e2,  0x288b493c,  0xff41950d,
+    0x397101a8, 0x8deb30c,   0xd89ce4b4,  0x6490c156,
+    0x7b6184cb, 0xd570b632,  0x48745c6c,  0xd04257b8,
+};
+/* clang-format on */
+
+#else /* assume big endian */
+/* clang-format off */
+static const uint32_t T0[256] = {
+    0xc66363a5, 0xf87c7c84,  0xee777799,  0xf67b7b8d,
+    0xfff2f20d, 0xd66b6bbd,  0xde6f6fb1,  0x91c5c554,
+    0x60303050, 0x2010103,   0xce6767a9,  0x562b2b7d,
+    0xe7fefe19, 0xb5d7d762,  0x4dababe6,  0xec76769a,
+    0x8fcaca45, 0x1f82829d,  0x89c9c940,  0xfa7d7d87,
+    0xeffafa15, 0xb25959eb,  0x8e4747c9,  0xfbf0f00b,
+    0x41adadec, 0xb3d4d467,  0x5fa2a2fd,  0x45afafea,
+    0x239c9cbf, 0x53a4a4f7,  0xe4727296,  0x9bc0c05b,
+    0x75b7b7c2, 0xe1fdfd1c,  0x3d9393ae,  0x4c26266a,
+    0x6c36365a, 0x7e3f3f41,  0xf5f7f702,  0x83cccc4f,
+    0x6834345c, 0x51a5a5f4,  0xd1e5e534,  0xf9f1f108,
+    0xe2717193, 0xabd8d873,  0x62313153,  0x2a15153f,
+    0x804040c,  0x95c7c752,  0x46232365,  0x9dc3c35e,
+    0x30181828, 0x379696a1,  0xa05050f,   0x2f9a9ab5,
+    0xe070709,  0x24121236,  0x1b80809b,  0xdfe2e23d,
+    0xcdebeb26, 0x4e272769,  0x7fb2b2cd,  0xea75759f,
+    0x1209091b, 0x1d83839e,  0x582c2c74,  0x341a1a2e,
+    0x361b1b2d, 0xdc6e6eb2,  0xb45a5aee,  0x5ba0a0fb,
+    0xa45252f6, 0x763b3b4d,  0xb7d6d661,  0x7db3b3ce,
+    0x5229297b, 0xdde3e33e,  0x5e2f2f71,  0x13848497,
+    0xa65353f5, 0xb9d1d168,  0x0,         0xc1eded2c,
+    0x40202060, 0xe3fcfc1f,  0x79b1b1c8,  0xb65b5bed,
+    0xd46a6abe, 0x8dcbcb46,  0x67bebed9,  0x7239394b,
+    0x944a4ade, 0x984c4cd4,  0xb05858e8,  0x85cfcf4a,
+    0xbbd0d06b, 0xc5efef2a,  0x4faaaae5,  0xedfbfb16,
+    0x864343c5, 0x9a4d4dd7,  0x66333355,  0x11858594,
+    0x8a4545cf, 0xe9f9f910,  0x4020206,   0xfe7f7f81,
+    0xa05050f0, 0x783c3c44,  0x259f9fba,  0x4ba8a8e3,
+    0xa25151f3, 0x5da3a3fe,  0x804040c0,  0x58f8f8a,
+    0x3f9292ad, 0x219d9dbc,  0x70383848,  0xf1f5f504,
+    0x63bcbcdf, 0x77b6b6c1,  0xafdada75,  0x42212163,
+    0x20101030, 0xe5ffff1a,  0xfdf3f30e,  0xbfd2d26d,
+    0x81cdcd4c, 0x180c0c14,  0x26131335,  0xc3ecec2f,
+    0xbe5f5fe1, 0x359797a2,  0x884444cc,  0x2e171739,
+    0x93c4c457, 0x55a7a7f2,  0xfc7e7e82,  0x7a3d3d47,
+    0xc86464ac, 0xba5d5de7,  0x3219192b,  0xe6737395,
+    0xc06060a0, 0x19818198,  0x9e4f4fd1,  0xa3dcdc7f,
+    0x44222266, 0x542a2a7e,  0x3b9090ab,  0xb888883,
+    0x8c4646ca, 0xc7eeee29,  0x6bb8b8d3,  0x2814143c,
+    0xa7dede79, 0xbc5e5ee2,  0x160b0b1d,  0xaddbdb76,
+    0xdbe0e03b, 0x64323256,  0x743a3a4e,  0x140a0a1e,
+    0x924949db, 0xc06060a,   0x4824246c,  0xb85c5ce4,
+    0x9fc2c25d, 0xbdd3d36e,  0x43acacef,  0xc46262a6,
+    0x399191a8, 0x319595a4,  0xd3e4e437,  0xf279798b,
+    0xd5e7e732, 0x8bc8c843,  0x6e373759,  0xda6d6db7,
+    0x18d8d8c,  0xb1d5d564,  0x9c4e4ed2,  0x49a9a9e0,
+    0xd86c6cb4, 0xac5656fa,  0xf3f4f407,  0xcfeaea25,
+    0xca6565af, 0xf47a7a8e,  0x47aeaee9,  0x10080818,
+    0x6fbabad5, 0xf0787888,  0x4a25256f,  0x5c2e2e72,
+    0x381c1c24, 0x57a6a6f1,  0x73b4b4c7,  0x97c6c651,
+    0xcbe8e823, 0xa1dddd7c,  0xe874749c,  0x3e1f1f21,
+    0x964b4bdd, 0x61bdbddc,  0xd8b8b86,   0xf8a8a85,
+    0xe0707090, 0x7c3e3e42,  0x71b5b5c4,  0xcc6666aa,
+    0x904848d8, 0x6030305,   0xf7f6f601,  0x1c0e0e12,
+    0xc26161a3, 0x6a35355f,  0xae5757f9,  0x69b9b9d0,
+    0x17868691, 0x99c1c158,  0x3a1d1d27,  0x279e9eb9,
+    0xd9e1e138, 0xebf8f813,  0x2b9898b3,  0x22111133,
+    0xd26969bb, 0xa9d9d970,  0x78e8e89,   0x339494a7,
+    0x2d9b9bb6, 0x3c1e1e22,  0x15878792,  0xc9e9e920,
+    0x87cece49, 0xaa5555ff,  0x50282878,  0xa5dfdf7a,
+    0x38c8c8f,  0x59a1a1f8,  0x9898980,   0x1a0d0d17,
+    0x65bfbfda, 0xd7e6e631,  0x844242c6,  0xd06868b8,
+    0x824141c3, 0x299999b0,  0x5a2d2d77,  0x1e0f0f11,
+    0x7bb0b0cb, 0xa85454fc,  0x6dbbbbd6,  0x2c16163a,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint32_t T1[256] = {
+    0xa5c66363, 0x84f87c7c,  0x99ee7777,  0x8df67b7b,
+    0xdfff2f2,  0xbdd66b6b,  0xb1de6f6f,  0x5491c5c5,
+    0x50603030, 0x3020101,   0xa9ce6767,  0x7d562b2b,
+    0x19e7fefe, 0x62b5d7d7,  0xe64dabab,  0x9aec7676,
+    0x458fcaca, 0x9d1f8282,  0x4089c9c9,  0x87fa7d7d,
+    0x15effafa, 0xebb25959,  0xc98e4747,  0xbfbf0f0,
+    0xec41adad, 0x67b3d4d4,  0xfd5fa2a2,  0xea45afaf,
+    0xbf239c9c, 0xf753a4a4,  0x96e47272,  0x5b9bc0c0,
+    0xc275b7b7, 0x1ce1fdfd,  0xae3d9393,  0x6a4c2626,
+    0x5a6c3636, 0x417e3f3f,  0x2f5f7f7,   0x4f83cccc,
+    0x5c683434, 0xf451a5a5,  0x34d1e5e5,  0x8f9f1f1,
+    0x93e27171, 0x73abd8d8,  0x53623131,  0x3f2a1515,
+    0xc080404,  0x5295c7c7,  0x65462323,  0x5e9dc3c3,
+    0x28301818, 0xa1379696,  0xf0a0505,   0xb52f9a9a,
+    0x90e0707,  0x36241212,  0x9b1b8080,  0x3ddfe2e2,
+    0x26cdebeb, 0x694e2727,  0xcd7fb2b2,  0x9fea7575,
+    0x1b120909, 0x9e1d8383,  0x74582c2c,  0x2e341a1a,
+    0x2d361b1b, 0xb2dc6e6e,  0xeeb45a5a,  0xfb5ba0a0,
+    0xf6a45252, 0x4d763b3b,  0x61b7d6d6,  0xce7db3b3,
+    0x7b522929, 0x3edde3e3,  0x715e2f2f,  0x97138484,
+    0xf5a65353, 0x68b9d1d1,  0x0,         0x2cc1eded,
+    0x60402020, 0x1fe3fcfc,  0xc879b1b1,  0xedb65b5b,
+    0xbed46a6a, 0x468dcbcb,  0xd967bebe,  0x4b723939,
+    0xde944a4a, 0xd4984c4c,  0xe8b05858,  0x4a85cfcf,
+    0x6bbbd0d0, 0x2ac5efef,  0xe54faaaa,  0x16edfbfb,
+    0xc5864343, 0xd79a4d4d,  0x55663333,  0x94118585,
+    0xcf8a4545, 0x10e9f9f9,  0x6040202,   0x81fe7f7f,
+    0xf0a05050, 0x44783c3c,  0xba259f9f,  0xe34ba8a8,
+    0xf3a25151, 0xfe5da3a3,  0xc0804040,  0x8a058f8f,
+    0xad3f9292, 0xbc219d9d,  0x48703838,  0x4f1f5f5,
+    0xdf63bcbc, 0xc177b6b6,  0x75afdada,  0x63422121,
+    0x30201010, 0x1ae5ffff,  0xefdf3f3,   0x6dbfd2d2,
+    0x4c81cdcd, 0x14180c0c,  0x35261313,  0x2fc3ecec,
+    0xe1be5f5f, 0xa2359797,  0xcc884444,  0x392e1717,
+    0x5793c4c4, 0xf255a7a7,  0x82fc7e7e,  0x477a3d3d,
+    0xacc86464, 0xe7ba5d5d,  0x2b321919,  0x95e67373,
+    0xa0c06060, 0x98198181,  0xd19e4f4f,  0x7fa3dcdc,
+    0x66442222, 0x7e542a2a,  0xab3b9090,  0x830b8888,
+    0xca8c4646, 0x29c7eeee,  0xd36bb8b8,  0x3c281414,
+    0x79a7dede, 0xe2bc5e5e,  0x1d160b0b,  0x76addbdb,
+    0x3bdbe0e0, 0x56643232,  0x4e743a3a,  0x1e140a0a,
+    0xdb924949, 0xa0c0606,   0x6c482424,  0xe4b85c5c,
+    0x5d9fc2c2, 0x6ebdd3d3,  0xef43acac,  0xa6c46262,
+    0xa8399191, 0xa4319595,  0x37d3e4e4,  0x8bf27979,
+    0x32d5e7e7, 0x438bc8c8,  0x596e3737,  0xb7da6d6d,
+    0x8c018d8d, 0x64b1d5d5,  0xd29c4e4e,  0xe049a9a9,
+    0xb4d86c6c, 0xfaac5656,  0x7f3f4f4,   0x25cfeaea,
+    0xafca6565, 0x8ef47a7a,  0xe947aeae,  0x18100808,
+    0xd56fbaba, 0x88f07878,  0x6f4a2525,  0x725c2e2e,
+    0x24381c1c, 0xf157a6a6,  0xc773b4b4,  0x5197c6c6,
+    0x23cbe8e8, 0x7ca1dddd,  0x9ce87474,  0x213e1f1f,
+    0xdd964b4b, 0xdc61bdbd,  0x860d8b8b,  0x850f8a8a,
+    0x90e07070, 0x427c3e3e,  0xc471b5b5,  0xaacc6666,
+    0xd8904848, 0x5060303,   0x1f7f6f6,   0x121c0e0e,
+    0xa3c26161, 0x5f6a3535,  0xf9ae5757,  0xd069b9b9,
+    0x91178686, 0x5899c1c1,  0x273a1d1d,  0xb9279e9e,
+    0x38d9e1e1, 0x13ebf8f8,  0xb32b9898,  0x33221111,
+    0xbbd26969, 0x70a9d9d9,  0x89078e8e,  0xa7339494,
+    0xb62d9b9b, 0x223c1e1e,  0x92158787,  0x20c9e9e9,
+    0x4987cece, 0xffaa5555,  0x78502828,  0x7aa5dfdf,
+    0x8f038c8c, 0xf859a1a1,  0x80098989,  0x171a0d0d,
+    0xda65bfbf, 0x31d7e6e6,  0xc6844242,  0xb8d06868,
+    0xc3824141, 0xb0299999,  0x775a2d2d,  0x111e0f0f,
+    0xcb7bb0b0, 0xfca85454,  0xd66dbbbb,  0x3a2c1616,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint32_t T2[256] = {
+    0x63a5c663, 0x7c84f87c,  0x7799ee77,  0x7b8df67b,
+    0xf20dfff2, 0x6bbdd66b,  0x6fb1de6f,  0xc55491c5,
+    0x30506030, 0x1030201,   0x67a9ce67,  0x2b7d562b,
+    0xfe19e7fe, 0xd762b5d7,  0xabe64dab,  0x769aec76,
+    0xca458fca, 0x829d1f82,  0xc94089c9,  0x7d87fa7d,
+    0xfa15effa, 0x59ebb259,  0x47c98e47,  0xf00bfbf0,
+    0xadec41ad, 0xd467b3d4,  0xa2fd5fa2,  0xafea45af,
+    0x9cbf239c, 0xa4f753a4,  0x7296e472,  0xc05b9bc0,
+    0xb7c275b7, 0xfd1ce1fd,  0x93ae3d93,  0x266a4c26,
+    0x365a6c36, 0x3f417e3f,  0xf702f5f7,  0xcc4f83cc,
+    0x345c6834, 0xa5f451a5,  0xe534d1e5,  0xf108f9f1,
+    0x7193e271, 0xd873abd8,  0x31536231,  0x153f2a15,
+    0x40c0804,  0xc75295c7,  0x23654623,  0xc35e9dc3,
+    0x18283018, 0x96a13796,  0x50f0a05,   0x9ab52f9a,
+    0x7090e07,  0x12362412,  0x809b1b80,  0xe23ddfe2,
+    0xeb26cdeb, 0x27694e27,  0xb2cd7fb2,  0x759fea75,
+    0x91b1209,  0x839e1d83,  0x2c74582c,  0x1a2e341a,
+    0x1b2d361b, 0x6eb2dc6e,  0x5aeeb45a,  0xa0fb5ba0,
+    0x52f6a452, 0x3b4d763b,  0xd661b7d6,  0xb3ce7db3,
+    0x297b5229, 0xe33edde3,  0x2f715e2f,  0x84971384,
+    0x53f5a653, 0xd168b9d1,  0x0,         0xed2cc1ed,
+    0x20604020, 0xfc1fe3fc,  0xb1c879b1,  0x5bedb65b,
+    0x6abed46a, 0xcb468dcb,  0xbed967be,  0x394b7239,
+    0x4ade944a, 0x4cd4984c,  0x58e8b058,  0xcf4a85cf,
+    0xd06bbbd0, 0xef2ac5ef,  0xaae54faa,  0xfb16edfb,
+    0x43c58643, 0x4dd79a4d,  0x33556633,  0x85941185,
+    0x45cf8a45, 0xf910e9f9,  0x2060402,   0x7f81fe7f,
+    0x50f0a050, 0x3c44783c,  0x9fba259f,  0xa8e34ba8,
+    0x51f3a251, 0xa3fe5da3,  0x40c08040,  0x8f8a058f,
+    0x92ad3f92, 0x9dbc219d,  0x38487038,  0xf504f1f5,
+    0xbcdf63bc, 0xb6c177b6,  0xda75afda,  0x21634221,
+    0x10302010, 0xff1ae5ff,  0xf30efdf3,  0xd26dbfd2,
+    0xcd4c81cd, 0xc14180c,   0x13352613,  0xec2fc3ec,
+    0x5fe1be5f, 0x97a23597,  0x44cc8844,  0x17392e17,
+    0xc45793c4, 0xa7f255a7,  0x7e82fc7e,  0x3d477a3d,
+    0x64acc864, 0x5de7ba5d,  0x192b3219,  0x7395e673,
+    0x60a0c060, 0x81981981,  0x4fd19e4f,  0xdc7fa3dc,
+    0x22664422, 0x2a7e542a,  0x90ab3b90,  0x88830b88,
+    0x46ca8c46, 0xee29c7ee,  0xb8d36bb8,  0x143c2814,
+    0xde79a7de, 0x5ee2bc5e,  0xb1d160b,   0xdb76addb,
+    0xe03bdbe0, 0x32566432,  0x3a4e743a,  0xa1e140a,
+    0x49db9249, 0x60a0c06,   0x246c4824,  0x5ce4b85c,
+    0xc25d9fc2, 0xd36ebdd3,  0xacef43ac,  0x62a6c462,
+    0x91a83991, 0x95a43195,  0xe437d3e4,  0x798bf279,
+    0xe732d5e7, 0xc8438bc8,  0x37596e37,  0x6db7da6d,
+    0x8d8c018d, 0xd564b1d5,  0x4ed29c4e,  0xa9e049a9,
+    0x6cb4d86c, 0x56faac56,  0xf407f3f4,  0xea25cfea,
+    0x65afca65, 0x7a8ef47a,  0xaee947ae,  0x8181008,
+    0xbad56fba, 0x7888f078,  0x256f4a25,  0x2e725c2e,
+    0x1c24381c, 0xa6f157a6,  0xb4c773b4,  0xc65197c6,
+    0xe823cbe8, 0xdd7ca1dd,  0x749ce874,  0x1f213e1f,
+    0x4bdd964b, 0xbddc61bd,  0x8b860d8b,  0x8a850f8a,
+    0x7090e070, 0x3e427c3e,  0xb5c471b5,  0x66aacc66,
+    0x48d89048, 0x3050603,   0xf601f7f6,  0xe121c0e,
+    0x61a3c261, 0x355f6a35,  0x57f9ae57,  0xb9d069b9,
+    0x86911786, 0xc15899c1,  0x1d273a1d,  0x9eb9279e,
+    0xe138d9e1, 0xf813ebf8,  0x98b32b98,  0x11332211,
+    0x69bbd269, 0xd970a9d9,  0x8e89078e,  0x94a73394,
+    0x9bb62d9b, 0x1e223c1e,  0x87921587,  0xe920c9e9,
+    0xce4987ce, 0x55ffaa55,  0x28785028,  0xdf7aa5df,
+    0x8c8f038c, 0xa1f859a1,  0x89800989,  0xd171a0d,
+    0xbfda65bf, 0xe631d7e6,  0x42c68442,  0x68b8d068,
+    0x41c38241, 0x99b02999,  0x2d775a2d,  0xf111e0f,
+    0xb0cb7bb0, 0x54fca854,  0xbbd66dbb,  0x163a2c16,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint32_t T3[256] = {
+    0x6363a5c6, 0x7c7c84f8,  0x777799ee,  0x7b7b8df6,
+    0xf2f20dff, 0x6b6bbdd6,  0x6f6fb1de,  0xc5c55491,
+    0x30305060, 0x1010302,   0x6767a9ce,  0x2b2b7d56,
+    0xfefe19e7, 0xd7d762b5,  0xababe64d,  0x76769aec,
+    0xcaca458f, 0x82829d1f,  0xc9c94089,  0x7d7d87fa,
+    0xfafa15ef, 0x5959ebb2,  0x4747c98e,  0xf0f00bfb,
+    0xadadec41, 0xd4d467b3,  0xa2a2fd5f,  0xafafea45,
+    0x9c9cbf23, 0xa4a4f753,  0x727296e4,  0xc0c05b9b,
+    0xb7b7c275, 0xfdfd1ce1,  0x9393ae3d,  0x26266a4c,
+    0x36365a6c, 0x3f3f417e,  0xf7f702f5,  0xcccc4f83,
+    0x34345c68, 0xa5a5f451,  0xe5e534d1,  0xf1f108f9,
+    0x717193e2, 0xd8d873ab,  0x31315362,  0x15153f2a,
+    0x4040c08,  0xc7c75295,  0x23236546,  0xc3c35e9d,
+    0x18182830, 0x9696a137,  0x5050f0a,   0x9a9ab52f,
+    0x707090e,  0x12123624,  0x80809b1b,  0xe2e23ddf,
+    0xebeb26cd, 0x2727694e,  0xb2b2cd7f,  0x75759fea,
+    0x9091b12,  0x83839e1d,  0x2c2c7458,  0x1a1a2e34,
+    0x1b1b2d36, 0x6e6eb2dc,  0x5a5aeeb4,  0xa0a0fb5b,
+    0x5252f6a4, 0x3b3b4d76,  0xd6d661b7,  0xb3b3ce7d,
+    0x29297b52, 0xe3e33edd,  0x2f2f715e,  0x84849713,
+    0x5353f5a6, 0xd1d168b9,  0x0,         0xeded2cc1,
+    0x20206040, 0xfcfc1fe3,  0xb1b1c879,  0x5b5bedb6,
+    0x6a6abed4, 0xcbcb468d,  0xbebed967,  0x39394b72,
+    0x4a4ade94, 0x4c4cd498,  0x5858e8b0,  0xcfcf4a85,
+    0xd0d06bbb, 0xefef2ac5,  0xaaaae54f,  0xfbfb16ed,
+    0x4343c586, 0x4d4dd79a,  0x33335566,  0x85859411,
+    0x4545cf8a, 0xf9f910e9,  0x2020604,   0x7f7f81fe,
+    0x5050f0a0, 0x3c3c4478,  0x9f9fba25,  0xa8a8e34b,
+    0x5151f3a2, 0xa3a3fe5d,  0x4040c080,  0x8f8f8a05,
+    0x9292ad3f, 0x9d9dbc21,  0x38384870,  0xf5f504f1,
+    0xbcbcdf63, 0xb6b6c177,  0xdada75af,  0x21216342,
+    0x10103020, 0xffff1ae5,  0xf3f30efd,  0xd2d26dbf,
+    0xcdcd4c81, 0xc0c1418,   0x13133526,  0xecec2fc3,
+    0x5f5fe1be, 0x9797a235,  0x4444cc88,  0x1717392e,
+    0xc4c45793, 0xa7a7f255,  0x7e7e82fc,  0x3d3d477a,
+    0x6464acc8, 0x5d5de7ba,  0x19192b32,  0x737395e6,
+    0x6060a0c0, 0x81819819,  0x4f4fd19e,  0xdcdc7fa3,
+    0x22226644, 0x2a2a7e54,  0x9090ab3b,  0x8888830b,
+    0x4646ca8c, 0xeeee29c7,  0xb8b8d36b,  0x14143c28,
+    0xdede79a7, 0x5e5ee2bc,  0xb0b1d16,   0xdbdb76ad,
+    0xe0e03bdb, 0x32325664,  0x3a3a4e74,  0xa0a1e14,
+    0x4949db92, 0x6060a0c,   0x24246c48,  0x5c5ce4b8,
+    0xc2c25d9f, 0xd3d36ebd,  0xacacef43,  0x6262a6c4,
+    0x9191a839, 0x9595a431,  0xe4e437d3,  0x79798bf2,
+    0xe7e732d5, 0xc8c8438b,  0x3737596e,  0x6d6db7da,
+    0x8d8d8c01, 0xd5d564b1,  0x4e4ed29c,  0xa9a9e049,
+    0x6c6cb4d8, 0x5656faac,  0xf4f407f3,  0xeaea25cf,
+    0x6565afca, 0x7a7a8ef4,  0xaeaee947,  0x8081810,
+    0xbabad56f, 0x787888f0,  0x25256f4a,  0x2e2e725c,
+    0x1c1c2438, 0xa6a6f157,  0xb4b4c773,  0xc6c65197,
+    0xe8e823cb, 0xdddd7ca1,  0x74749ce8,  0x1f1f213e,
+    0x4b4bdd96, 0xbdbddc61,  0x8b8b860d,  0x8a8a850f,
+    0x707090e0, 0x3e3e427c,  0xb5b5c471,  0x6666aacc,
+    0x4848d890, 0x3030506,   0xf6f601f7,  0xe0e121c,
+    0x6161a3c2, 0x35355f6a,  0x5757f9ae,  0xb9b9d069,
+    0x86869117, 0xc1c15899,  0x1d1d273a,  0x9e9eb927,
+    0xe1e138d9, 0xf8f813eb,  0x9898b32b,  0x11113322,
+    0x6969bbd2, 0xd9d970a9,  0x8e8e8907,  0x9494a733,
+    0x9b9bb62d, 0x1e1e223c,  0x87879215,  0xe9e920c9,
+    0xcece4987, 0x5555ffaa,  0x28287850,  0xdfdf7aa5,
+    0x8c8c8f03, 0xa1a1f859,  0x89898009,  0xd0d171a,
+    0xbfbfda65, 0xe6e631d7,  0x4242c684,  0x6868b8d0,
+    0x4141c382, 0x9999b029,  0x2d2d775a,  0xf0f111e,
+    0xb0b0cb7b, 0x5454fca8,  0xbbbbd66d,  0x16163a2c,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint32_t U0[256] = {
+    0x51f4a750, 0x7e416553,  0x1a17a4c3,  0x3a275e96,
+    0x3bab6bcb, 0x1f9d45f1,  0xacfa58ab,  0x4be30393,
+    0x2030fa55, 0xad766df6,  0x88cc7691,  0xf5024c25,
+    0x4fe5d7fc, 0xc52acbd7,  0x26354480,  0xb562a38f,
+    0xdeb15a49, 0x25ba1b67,  0x45ea0e98,  0x5dfec0e1,
+    0xc32f7502, 0x814cf012,  0x8d4697a3,  0x6bd3f9c6,
+    0x38f5fe7,  0x15929c95,  0xbf6d7aeb,  0x955259da,
+    0xd4be832d, 0x587421d3,  0x49e06929,  0x8ec9c844,
+    0x75c2896a, 0xf48e7978,  0x99583e6b,  0x27b971dd,
+    0xbee14fb6, 0xf088ad17,  0xc920ac66,  0x7dce3ab4,
+    0x63df4a18, 0xe51a3182,  0x97513360,  0x62537f45,
+    0xb16477e0, 0xbb6bae84,  0xfe81a01c,  0xf9082b94,
+    0x70486858, 0x8f45fd19,  0x94de6c87,  0x527bf8b7,
+    0xab73d323, 0x724b02e2,  0xe31f8f57,  0x6655ab2a,
+    0xb2eb2807, 0x2fb5c203,  0x86c57b9a,  0xd33708a5,
+    0x302887f2, 0x23bfa5b2,  0x2036aba,   0xed16825c,
+    0x8acf1c2b, 0xa779b492,  0xf307f2f0,  0x4e69e2a1,
+    0x65daf4cd, 0x605bed5,   0xd134621f,  0xc4a6fe8a,
+    0x342e539d, 0xa2f355a0,  0x58ae132,   0xa4f6eb75,
+    0xb83ec39,  0x4060efaa,  0x5e719f06,  0xbd6e1051,
+    0x3e218af9, 0x96dd063d,  0xdd3e05ae,  0x4de6bd46,
+    0x91548db5, 0x71c45d05,  0x406d46f,   0x605015ff,
+    0x1998fb24, 0xd6bde997,  0x894043cc,  0x67d99e77,
+    0xb0e842bd, 0x7898b88,   0xe7195b38,  0x79c8eedb,
+    0xa17c0a47, 0x7c420fe9,  0xf8841ec9,  0x0,
+    0x9808683,  0x322bed48,  0x1e1170ac,  0x6c5a724e,
+    0xfd0efffb, 0xf853856,   0x3daed51e,  0x362d3927,
+    0xa0fd964,  0x685ca621,  0x9b5b54d1,  0x24362e3a,
+    0xc0a67b1,  0x9357e70f,  0xb4ee96d2,  0x1b9b919e,
+    0x80c0c54f, 0x61dc20a2,  0x5a774b69,  0x1c121a16,
+    0xe293ba0a, 0xc0a02ae5,  0x3c22e043,  0x121b171d,
+    0xe090d0b,  0xf28bc7ad,  0x2db6a8b9,  0x141ea9c8,
+    0x57f11985, 0xaf75074c,  0xee99ddbb,  0xa37f60fd,
+    0xf701269f, 0x5c72f5bc,  0x44663bc5,  0x5bfb7e34,
+    0x8b432976, 0xcb23c6dc,  0xb6edfc68,  0xb8e4f163,
+    0xd731dcca, 0x42638510,  0x13972240,  0x84c61120,
+    0x854a247d, 0xd2bb3df8,  0xaef93211,  0xc729a16d,
+    0x1d9e2f4b, 0xdcb230f3,  0xd8652ec,   0x77c1e3d0,
+    0x2bb3166c, 0xa970b999,  0x119448fa,  0x47e96422,
+    0xa8fc8cc4, 0xa0f03f1a,  0x567d2cd8,  0x223390ef,
+    0x87494ec7, 0xd938d1c1,  0x8ccaa2fe,  0x98d40b36,
+    0xa6f581cf, 0xa57ade28,  0xdab78e26,  0x3fadbfa4,
+    0x2c3a9de4, 0x5078920d,  0x6a5fcc9b,  0x547e4662,
+    0xf68d13c2, 0x90d8b8e8,  0x2e39f75e,  0x82c3aff5,
+    0x9f5d80be, 0x69d0937c,  0x6fd52da9,  0xcf2512b3,
+    0xc8ac993b, 0x10187da7,  0xe89c636e,  0xdb3bbb7b,
+    0xcd267809, 0x6e5918f4,  0xec9ab701,  0x834f9aa8,
+    0xe6956e65, 0xaaffe67e,  0x21bccf08,  0xef15e8e6,
+    0xbae79bd9, 0x4a6f36ce,  0xea9f09d4,  0x29b07cd6,
+    0x31a4b2af, 0x2a3f2331,  0xc6a59430,  0x35a266c0,
+    0x744ebc37, 0xfc82caa6,  0xe090d0b0,  0x33a7d815,
+    0xf104984a, 0x41ecdaf7,  0x7fcd500e,  0x1791f62f,
+    0x764dd68d, 0x43efb04d,  0xccaa4d54,  0xe49604df,
+    0x9ed1b5e3, 0x4c6a881b,  0xc12c1fb8,  0x4665517f,
+    0x9d5eea04, 0x18c355d,   0xfa877473,  0xfb0b412e,
+    0xb3671d5a, 0x92dbd252,  0xe9105633,  0x6dd64713,
+    0x9ad7618c, 0x37a10c7a,  0x59f8148e,  0xeb133c89,
+    0xcea927ee, 0xb761c935,  0xe11ce5ed,  0x7a47b13c,
+    0x9cd2df59, 0x55f2733f,  0x1814ce79,  0x73c737bf,
+    0x53f7cdea, 0x5ffdaa5b,  0xdf3d6f14,  0x7844db86,
+    0xcaaff381, 0xb968c43e,  0x3824342c,  0xc2a3405f,
+    0x161dc372, 0xbce2250c,  0x283c498b,  0xff0d9541,
+    0x39a80171, 0x80cb3de,   0xd8b4e49c,  0x6456c190,
+    0x7bcb8461, 0xd532b670,  0x486c5c74,  0xd0b85742
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint32_t U1[256] = {
+    0x5051f4a7, 0x537e4165,  0xc31a17a4,  0x963a275e,
+    0xcb3bab6b, 0xf11f9d45,  0xabacfa58,  0x934be303,
+    0x552030fa, 0xf6ad766d,  0x9188cc76,  0x25f5024c,
+    0xfc4fe5d7, 0xd7c52acb,  0x80263544,  0x8fb562a3,
+    0x49deb15a, 0x6725ba1b,  0x9845ea0e,  0xe15dfec0,
+    0x2c32f75,  0x12814cf0,  0xa38d4697,  0xc66bd3f9,
+    0xe7038f5f, 0x9515929c,  0xebbf6d7a,  0xda955259,
+    0x2dd4be83, 0xd3587421,  0x2949e069,  0x448ec9c8,
+    0x6a75c289, 0x78f48e79,  0x6b99583e,  0xdd27b971,
+    0xb6bee14f, 0x17f088ad,  0x66c920ac,  0xb47dce3a,
+    0x1863df4a, 0x82e51a31,  0x60975133,  0x4562537f,
+    0xe0b16477, 0x84bb6bae,  0x1cfe81a0,  0x94f9082b,
+    0x58704868, 0x198f45fd,  0x8794de6c,  0xb7527bf8,
+    0x23ab73d3, 0xe2724b02,  0x57e31f8f,  0x2a6655ab,
+    0x7b2eb28,  0x32fb5c2,   0x9a86c57b,  0xa5d33708,
+    0xf2302887, 0xb223bfa5,  0xba02036a,  0x5ced1682,
+    0x2b8acf1c, 0x92a779b4,  0xf0f307f2,  0xa14e69e2,
+    0xcd65daf4, 0xd50605be,  0x1fd13462,  0x8ac4a6fe,
+    0x9d342e53, 0xa0a2f355,  0x32058ae1,  0x75a4f6eb,
+    0x390b83ec, 0xaa4060ef,  0x65e719f,   0x51bd6e10,
+    0xf93e218a, 0x3d96dd06,  0xaedd3e05,  0x464de6bd,
+    0xb591548d, 0x571c45d,   0x6f0406d4,  0xff605015,
+    0x241998fb, 0x97d6bde9,  0xcc894043,  0x7767d99e,
+    0xbdb0e842, 0x8807898b,  0x38e7195b,  0xdb79c8ee,
+    0x47a17c0a, 0xe97c420f,  0xc9f8841e,  0x0,
+    0x83098086, 0x48322bed,  0xac1e1170,  0x4e6c5a72,
+    0xfbfd0eff, 0x560f8538,  0x1e3daed5,  0x27362d39,
+    0x640a0fd9, 0x21685ca6,  0xd19b5b54,  0x3a24362e,
+    0xb10c0a67, 0xf9357e7,   0xd2b4ee96,  0x9e1b9b91,
+    0x4f80c0c5, 0xa261dc20,  0x695a774b,  0x161c121a,
+    0xae293ba,  0xe5c0a02a,  0x433c22e0,  0x1d121b17,
+    0xb0e090d,  0xadf28bc7,  0xb92db6a8,  0xc8141ea9,
+    0x8557f119, 0x4caf7507,  0xbbee99dd,  0xfda37f60,
+    0x9ff70126, 0xbc5c72f5,  0xc544663b,  0x345bfb7e,
+    0x768b4329, 0xdccb23c6,  0x68b6edfc,  0x63b8e4f1,
+    0xcad731dc, 0x10426385,  0x40139722,  0x2084c611,
+    0x7d854a24, 0xf8d2bb3d,  0x11aef932,  0x6dc729a1,
+    0x4b1d9e2f, 0xf3dcb230,  0xec0d8652,  0xd077c1e3,
+    0x6c2bb316, 0x99a970b9,  0xfa119448,  0x2247e964,
+    0xc4a8fc8c, 0x1aa0f03f,  0xd8567d2c,  0xef223390,
+    0xc787494e, 0xc1d938d1,  0xfe8ccaa2,  0x3698d40b,
+    0xcfa6f581, 0x28a57ade,  0x26dab78e,  0xa43fadbf,
+    0xe42c3a9d, 0xd507892,   0x9b6a5fcc,  0x62547e46,
+    0xc2f68d13, 0xe890d8b8,  0x5e2e39f7,  0xf582c3af,
+    0xbe9f5d80, 0x7c69d093,  0xa96fd52d,  0xb3cf2512,
+    0x3bc8ac99, 0xa710187d,  0x6ee89c63,  0x7bdb3bbb,
+    0x9cd2678,  0xf46e5918,  0x1ec9ab7,   0xa8834f9a,
+    0x65e6956e, 0x7eaaffe6,  0x821bccf,   0xe6ef15e8,
+    0xd9bae79b, 0xce4a6f36,  0xd4ea9f09,  0xd629b07c,
+    0xaf31a4b2, 0x312a3f23,  0x30c6a594,  0xc035a266,
+    0x37744ebc, 0xa6fc82ca,  0xb0e090d0,  0x1533a7d8,
+    0x4af10498, 0xf741ecda,  0xe7fcd50,   0x2f1791f6,
+    0x8d764dd6, 0x4d43efb0,  0x54ccaa4d,  0xdfe49604,
+    0xe39ed1b5, 0x1b4c6a88,  0xb8c12c1f,  0x7f466551,
+    0x49d5eea,  0x5d018c35,  0x73fa8774,  0x2efb0b41,
+    0x5ab3671d, 0x5292dbd2,  0x33e91056,  0x136dd647,
+    0x8c9ad761, 0x7a37a10c,  0x8e59f814,  0x89eb133c,
+    0xeecea927, 0x35b761c9,  0xede11ce5,  0x3c7a47b1,
+    0x599cd2df, 0x3f55f273,  0x791814ce,  0xbf73c737,
+    0xea53f7cd, 0x5b5ffdaa,  0x14df3d6f,  0x867844db,
+    0x81caaff3, 0x3eb968c4,  0x2c382434,  0x5fc2a340,
+    0x72161dc3, 0xcbce225,   0x8b283c49,  0x41ff0d95,
+    0x7139a801, 0xde080cb3,  0x9cd8b4e4,  0x906456c1,
+    0x617bcb84, 0x70d532b6,  0x74486c5c,  0x42d0b857
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint32_t U2[256] = {
+    0xa75051f4, 0x65537e41,  0xa4c31a17,  0x5e963a27,
+    0x6bcb3bab, 0x45f11f9d,  0x58abacfa,  0x3934be3,
+    0xfa552030, 0x6df6ad76,  0x769188cc,  0x4c25f502,
+    0xd7fc4fe5, 0xcbd7c52a,  0x44802635,  0xa38fb562,
+    0x5a49deb1, 0x1b6725ba,  0xe9845ea,   0xc0e15dfe,
+    0x7502c32f, 0xf012814c,  0x97a38d46,  0xf9c66bd3,
+    0x5fe7038f, 0x9c951592,  0x7aebbf6d,  0x59da9552,
+    0x832dd4be, 0x21d35874,  0x692949e0,  0xc8448ec9,
+    0x896a75c2, 0x7978f48e,  0x3e6b9958,  0x71dd27b9,
+    0x4fb6bee1, 0xad17f088,  0xac66c920,  0x3ab47dce,
+    0x4a1863df, 0x3182e51a,  0x33609751,  0x7f456253,
+    0x77e0b164, 0xae84bb6b,  0xa01cfe81,  0x2b94f908,
+    0x68587048, 0xfd198f45,  0x6c8794de,  0xf8b7527b,
+    0xd323ab73, 0x2e2724b,   0x8f57e31f,  0xab2a6655,
+    0x2807b2eb, 0xc2032fb5,  0x7b9a86c5,  0x8a5d337,
+    0x87f23028, 0xa5b223bf,  0x6aba0203,  0x825ced16,
+    0x1c2b8acf, 0xb492a779,  0xf2f0f307,  0xe2a14e69,
+    0xf4cd65da, 0xbed50605,  0x621fd134,  0xfe8ac4a6,
+    0x539d342e, 0x55a0a2f3,  0xe132058a,  0xeb75a4f6,
+    0xec390b83, 0xefaa4060,  0x9f065e71,  0x1051bd6e,
+    0x8af93e21, 0x63d96dd,   0x5aedd3e,   0xbd464de6,
+    0x8db59154, 0x5d0571c4,  0xd46f0406,  0x15ff6050,
+    0xfb241998, 0xe997d6bd,  0x43cc8940,  0x9e7767d9,
+    0x42bdb0e8, 0x8b880789,  0x5b38e719,  0xeedb79c8,
+    0xa47a17c,  0xfe97c42,   0x1ec9f884,  0x0,
+    0x86830980, 0xed48322b,  0x70ac1e11,  0x724e6c5a,
+    0xfffbfd0e, 0x38560f85,  0xd51e3dae,  0x3927362d,
+    0xd9640a0f, 0xa621685c,  0x54d19b5b,  0x2e3a2436,
+    0x67b10c0a, 0xe70f9357,  0x96d2b4ee,  0x919e1b9b,
+    0xc54f80c0, 0x20a261dc,  0x4b695a77,  0x1a161c12,
+    0xba0ae293, 0x2ae5c0a0,  0xe0433c22,  0x171d121b,
+    0xd0b0e09,  0xc7adf28b,  0xa8b92db6,  0xa9c8141e,
+    0x198557f1, 0x74caf75,   0xddbbee99,  0x60fda37f,
+    0x269ff701, 0xf5bc5c72,  0x3bc54466,  0x7e345bfb,
+    0x29768b43, 0xc6dccb23,  0xfc68b6ed,  0xf163b8e4,
+    0xdccad731, 0x85104263,  0x22401397,  0x112084c6,
+    0x247d854a, 0x3df8d2bb,  0x3211aef9,  0xa16dc729,
+    0x2f4b1d9e, 0x30f3dcb2,  0x52ec0d86,  0xe3d077c1,
+    0x166c2bb3, 0xb999a970,  0x48fa1194,  0x642247e9,
+    0x8cc4a8fc, 0x3f1aa0f0,  0x2cd8567d,  0x90ef2233,
+    0x4ec78749, 0xd1c1d938,  0xa2fe8cca,  0xb3698d4,
+    0x81cfa6f5, 0xde28a57a,  0x8e26dab7,  0xbfa43fad,
+    0x9de42c3a, 0x920d5078,  0xcc9b6a5f,  0x4662547e,
+    0x13c2f68d, 0xb8e890d8,  0xf75e2e39,  0xaff582c3,
+    0x80be9f5d, 0x937c69d0,  0x2da96fd5,  0x12b3cf25,
+    0x993bc8ac, 0x7da71018,  0x636ee89c,  0xbb7bdb3b,
+    0x7809cd26, 0x18f46e59,  0xb701ec9a,  0x9aa8834f,
+    0x6e65e695, 0xe67eaaff,  0xcf0821bc,  0xe8e6ef15,
+    0x9bd9bae7, 0x36ce4a6f,  0x9d4ea9f,   0x7cd629b0,
+    0xb2af31a4, 0x23312a3f,  0x9430c6a5,  0x66c035a2,
+    0xbc37744e, 0xcaa6fc82,  0xd0b0e090,  0xd81533a7,
+    0x984af104, 0xdaf741ec,  0x500e7fcd,  0xf62f1791,
+    0xd68d764d, 0xb04d43ef,  0x4d54ccaa,  0x4dfe496,
+    0xb5e39ed1, 0x881b4c6a,  0x1fb8c12c,  0x517f4665,
+    0xea049d5e, 0x355d018c,  0x7473fa87,  0x412efb0b,
+    0x1d5ab367, 0xd25292db,  0x5633e910,  0x47136dd6,
+    0x618c9ad7, 0xc7a37a1,   0x148e59f8,  0x3c89eb13,
+    0x27eecea9, 0xc935b761,  0xe5ede11c,  0xb13c7a47,
+    0xdf599cd2, 0x733f55f2,  0xce791814,  0x37bf73c7,
+    0xcdea53f7, 0xaa5b5ffd,  0x6f14df3d,  0xdb867844,
+    0xf381caaf, 0xc43eb968,  0x342c3824,  0x405fc2a3,
+    0xc372161d, 0x250cbce2,  0x498b283c,  0x9541ff0d,
+    0x17139a8,  0xb3de080c,  0xe49cd8b4,  0xc1906456,
+    0x84617bcb, 0xb670d532,  0x5c74486c,  0x5742d0b8
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint32_t U3[256] = {
+    0xf4a75051, 0x4165537e,  0x17a4c31a,  0x275e963a,
+    0xab6bcb3b, 0x9d45f11f,  0xfa58abac,  0xe303934b,
+    0x30fa5520, 0x766df6ad,  0xcc769188,  0x24c25f5,
+    0xe5d7fc4f, 0x2acbd7c5,  0x35448026,  0x62a38fb5,
+    0xb15a49de, 0xba1b6725,  0xea0e9845,  0xfec0e15d,
+    0x2f7502c3, 0x4cf01281,  0x4697a38d,  0xd3f9c66b,
+    0x8f5fe703, 0x929c9515,  0x6d7aebbf,  0x5259da95,
+    0xbe832dd4, 0x7421d358,  0xe0692949,  0xc9c8448e,
+    0xc2896a75, 0x8e7978f4,  0x583e6b99,  0xb971dd27,
+    0xe14fb6be, 0x88ad17f0,  0x20ac66c9,  0xce3ab47d,
+    0xdf4a1863, 0x1a3182e5,  0x51336097,  0x537f4562,
+    0x6477e0b1, 0x6bae84bb,  0x81a01cfe,  0x82b94f9,
+    0x48685870, 0x45fd198f,  0xde6c8794,  0x7bf8b752,
+    0x73d323ab, 0x4b02e272,  0x1f8f57e3,  0x55ab2a66,
+    0xeb2807b2, 0xb5c2032f,  0xc57b9a86,  0x3708a5d3,
+    0x2887f230, 0xbfa5b223,  0x36aba02,   0x16825ced,
+    0xcf1c2b8a, 0x79b492a7,  0x7f2f0f3,   0x69e2a14e,
+    0xdaf4cd65, 0x5bed506,   0x34621fd1,  0xa6fe8ac4,
+    0x2e539d34, 0xf355a0a2,  0x8ae13205,  0xf6eb75a4,
+    0x83ec390b, 0x60efaa40,  0x719f065e,  0x6e1051bd,
+    0x218af93e, 0xdd063d96,  0x3e05aedd,  0xe6bd464d,
+    0x548db591, 0xc45d0571,  0x6d46f04,   0x5015ff60,
+    0x98fb2419, 0xbde997d6,  0x4043cc89,  0xd99e7767,
+    0xe842bdb0, 0x898b8807,  0x195b38e7,  0xc8eedb79,
+    0x7c0a47a1, 0x420fe97c,  0x841ec9f8,  0x0,
+    0x80868309, 0x2bed4832,  0x1170ac1e,  0x5a724e6c,
+    0xefffbfd,  0x8538560f,  0xaed51e3d,  0x2d392736,
+    0xfd9640a,  0x5ca62168,  0x5b54d19b,  0x362e3a24,
+    0xa67b10c,  0x57e70f93,  0xee96d2b4,  0x9b919e1b,
+    0xc0c54f80, 0xdc20a261,  0x774b695a,  0x121a161c,
+    0x93ba0ae2, 0xa02ae5c0,  0x22e0433c,  0x1b171d12,
+    0x90d0b0e,  0x8bc7adf2,  0xb6a8b92d,  0x1ea9c814,
+    0xf1198557, 0x75074caf,  0x99ddbbee,  0x7f60fda3,
+    0x1269ff7,  0x72f5bc5c,  0x663bc544,  0xfb7e345b,
+    0x4329768b, 0x23c6dccb,  0xedfc68b6,  0xe4f163b8,
+    0x31dccad7, 0x63851042,  0x97224013,  0xc6112084,
+    0x4a247d85, 0xbb3df8d2,  0xf93211ae,  0x29a16dc7,
+    0x9e2f4b1d, 0xb230f3dc,  0x8652ec0d,  0xc1e3d077,
+    0xb3166c2b, 0x70b999a9,  0x9448fa11,  0xe9642247,
+    0xfc8cc4a8, 0xf03f1aa0,  0x7d2cd856,  0x3390ef22,
+    0x494ec787, 0x38d1c1d9,  0xcaa2fe8c,  0xd40b3698,
+    0xf581cfa6, 0x7ade28a5,  0xb78e26da,  0xadbfa43f,
+    0x3a9de42c, 0x78920d50,  0x5fcc9b6a,  0x7e466254,
+    0x8d13c2f6, 0xd8b8e890,  0x39f75e2e,  0xc3aff582,
+    0x5d80be9f, 0xd0937c69,  0xd52da96f,  0x2512b3cf,
+    0xac993bc8, 0x187da710,  0x9c636ee8,  0x3bbb7bdb,
+    0x267809cd, 0x5918f46e,  0x9ab701ec,  0x4f9aa883,
+    0x956e65e6, 0xffe67eaa,  0xbccf0821,  0x15e8e6ef,
+    0xe79bd9ba, 0x6f36ce4a,  0x9f09d4ea,  0xb07cd629,
+    0xa4b2af31, 0x3f23312a,  0xa59430c6,  0xa266c035,
+    0x4ebc3774, 0x82caa6fc,  0x90d0b0e0,  0xa7d81533,
+    0x4984af1,  0xecdaf741,  0xcd500e7f,  0x91f62f17,
+    0x4dd68d76, 0xefb04d43,  0xaa4d54cc,  0x9604dfe4,
+    0xd1b5e39e, 0x6a881b4c,  0x2c1fb8c1,  0x65517f46,
+    0x5eea049d, 0x8c355d01,  0x877473fa,  0xb412efb,
+    0x671d5ab3, 0xdbd25292,  0x105633e9,  0xd647136d,
+    0xd7618c9a, 0xa10c7a37,  0xf8148e59,  0x133c89eb,
+    0xa927eece, 0x61c935b7,  0x1ce5ede1,  0x47b13c7a,
+    0xd2df599c, 0xf2733f55,  0x14ce7918,  0xc737bf73,
+    0xf7cdea53, 0xfdaa5b5f,  0x3d6f14df,  0x44db8678,
+    0xaff381ca, 0x68c43eb9,  0x24342c38,  0xa3405fc2,
+    0x1dc37216, 0xe2250cbc,  0x3c498b28,  0xd9541ff,
+    0xa8017139, 0xcb3de08,   0xb4e49cd8,  0x56c19064,
+    0xcb84617b, 0x32b670d5,  0x6c5c7448,  0xb85742d0
+};
+/* clang-format on */
+#endif
+
+/*
+ * the following tables (aes_sbox, aes_inv_sbox, T4, U4) are
+ * endian-neutral
+ */
+/* clang-format off */
+static const uint8_t aes_sbox[256] = {
+    0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5,
+    0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76,
+    0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0,
+    0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0,
+    0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc,
+    0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15,
+    0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a,
+    0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75,
+    0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0,
+    0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84,
+    0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b,
+    0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf,
+    0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85,
+    0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8,
+    0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5,
+    0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2,
+    0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17,
+    0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73,
+    0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88,
+    0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb,
+    0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c,
+    0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79,
+    0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9,
+    0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08,
+    0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6,
+    0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a,
+    0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e,
+    0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e,
+    0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94,
+    0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf,
+    0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68,
+    0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16
+};
+/* clang-format on */
+
+#ifndef CPU_RISC
+/* clang-format off */
+static const uint8_t aes_inv_sbox[256] = {
+    0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38,
+    0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb,
+    0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87,
+    0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb,
+    0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d,
+    0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e,
+    0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2,
+    0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25,
+    0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16,
+    0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92,
+    0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda,
+    0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84,
+    0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a,
+    0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06,
+    0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02,
+    0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b,
+    0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea,
+    0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73,
+    0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85,
+    0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e,
+    0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89,
+    0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b,
+    0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20,
+    0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4,
+    0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31,
+    0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f,
+    0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d,
+    0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef,
+    0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0,
+    0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61,
+    0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26,
+    0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d
+};
+/* clang-format on */
+#endif /* ! CPU_RISC */
+
+#ifdef CPU_RISC
+/* clang-format off */
+static const uint32_t T4[256] = {
+    0x63636363, 0x7c7c7c7c, 0x77777777, 0x7b7b7b7b,
+    0xf2f2f2f2, 0x6b6b6b6b, 0x6f6f6f6f, 0xc5c5c5c5,
+    0x30303030, 0x01010101, 0x67676767, 0x2b2b2b2b,
+    0xfefefefe, 0xd7d7d7d7, 0xabababab, 0x76767676,
+    0xcacacaca, 0x82828282, 0xc9c9c9c9, 0x7d7d7d7d,
+    0xfafafafa, 0x59595959, 0x47474747, 0xf0f0f0f0,
+    0xadadadad, 0xd4d4d4d4, 0xa2a2a2a2, 0xafafafaf,
+    0x9c9c9c9c, 0xa4a4a4a4, 0x72727272, 0xc0c0c0c0,
+    0xb7b7b7b7, 0xfdfdfdfd, 0x93939393, 0x26262626,
+    0x36363636, 0x3f3f3f3f, 0xf7f7f7f7, 0xcccccccc,
+    0x34343434, 0xa5a5a5a5, 0xe5e5e5e5, 0xf1f1f1f1,
+    0x71717171, 0xd8d8d8d8, 0x31313131, 0x15151515,
+    0x04040404, 0xc7c7c7c7, 0x23232323, 0xc3c3c3c3,
+    0x18181818, 0x96969696, 0x05050505, 0x9a9a9a9a,
+    0x07070707, 0x12121212, 0x80808080, 0xe2e2e2e2,
+    0xebebebeb, 0x27272727, 0xb2b2b2b2, 0x75757575,
+    0x09090909, 0x83838383, 0x2c2c2c2c, 0x1a1a1a1a,
+    0x1b1b1b1b, 0x6e6e6e6e, 0x5a5a5a5a, 0xa0a0a0a0,
+    0x52525252, 0x3b3b3b3b, 0xd6d6d6d6, 0xb3b3b3b3,
+    0x29292929, 0xe3e3e3e3, 0x2f2f2f2f, 0x84848484,
+    0x53535353, 0xd1d1d1d1, 0x00000000, 0xedededed,
+    0x20202020, 0xfcfcfcfc, 0xb1b1b1b1, 0x5b5b5b5b,
+    0x6a6a6a6a, 0xcbcbcbcb, 0xbebebebe, 0x39393939,
+    0x4a4a4a4a, 0x4c4c4c4c, 0x58585858, 0xcfcfcfcf,
+    0xd0d0d0d0, 0xefefefef, 0xaaaaaaaa, 0xfbfbfbfb,
+    0x43434343, 0x4d4d4d4d, 0x33333333, 0x85858585,
+    0x45454545, 0xf9f9f9f9, 0x02020202, 0x7f7f7f7f,
+    0x50505050, 0x3c3c3c3c, 0x9f9f9f9f, 0xa8a8a8a8,
+    0x51515151, 0xa3a3a3a3, 0x40404040, 0x8f8f8f8f,
+    0x92929292, 0x9d9d9d9d, 0x38383838, 0xf5f5f5f5,
+    0xbcbcbcbc, 0xb6b6b6b6, 0xdadadada, 0x21212121,
+    0x10101010, 0xffffffff, 0xf3f3f3f3, 0xd2d2d2d2,
+    0xcdcdcdcd, 0x0c0c0c0c, 0x13131313, 0xecececec,
+    0x5f5f5f5f, 0x97979797, 0x44444444, 0x17171717,
+    0xc4c4c4c4, 0xa7a7a7a7, 0x7e7e7e7e, 0x3d3d3d3d,
+    0x64646464, 0x5d5d5d5d, 0x19191919, 0x73737373,
+    0x60606060, 0x81818181, 0x4f4f4f4f, 0xdcdcdcdc,
+    0x22222222, 0x2a2a2a2a, 0x90909090, 0x88888888,
+    0x46464646, 0xeeeeeeee, 0xb8b8b8b8, 0x14141414,
+    0xdededede, 0x5e5e5e5e, 0x0b0b0b0b, 0xdbdbdbdb,
+    0xe0e0e0e0, 0x32323232, 0x3a3a3a3a, 0x0a0a0a0a,
+    0x49494949, 0x06060606, 0x24242424, 0x5c5c5c5c,
+    0xc2c2c2c2, 0xd3d3d3d3, 0xacacacac, 0x62626262,
+    0x91919191, 0x95959595, 0xe4e4e4e4, 0x79797979,
+    0xe7e7e7e7, 0xc8c8c8c8, 0x37373737, 0x6d6d6d6d,
+    0x8d8d8d8d, 0xd5d5d5d5, 0x4e4e4e4e, 0xa9a9a9a9,
+    0x6c6c6c6c, 0x56565656, 0xf4f4f4f4, 0xeaeaeaea,
+    0x65656565, 0x7a7a7a7a, 0xaeaeaeae, 0x08080808,
+    0xbabababa, 0x78787878, 0x25252525, 0x2e2e2e2e,
+    0x1c1c1c1c, 0xa6a6a6a6, 0xb4b4b4b4, 0xc6c6c6c6,
+    0xe8e8e8e8, 0xdddddddd, 0x74747474, 0x1f1f1f1f,
+    0x4b4b4b4b, 0xbdbdbdbd, 0x8b8b8b8b, 0x8a8a8a8a,
+    0x70707070, 0x3e3e3e3e, 0xb5b5b5b5, 0x66666666,
+    0x48484848, 0x03030303, 0xf6f6f6f6, 0x0e0e0e0e,
+    0x61616161, 0x35353535, 0x57575757, 0xb9b9b9b9,
+    0x86868686, 0xc1c1c1c1, 0x1d1d1d1d, 0x9e9e9e9e,
+    0xe1e1e1e1, 0xf8f8f8f8, 0x98989898, 0x11111111,
+    0x69696969, 0xd9d9d9d9, 0x8e8e8e8e, 0x94949494,
+    0x9b9b9b9b, 0x1e1e1e1e, 0x87878787, 0xe9e9e9e9,
+    0xcececece, 0x55555555, 0x28282828, 0xdfdfdfdf,
+    0x8c8c8c8c, 0xa1a1a1a1, 0x89898989, 0x0d0d0d0d,
+    0xbfbfbfbf, 0xe6e6e6e6, 0x42424242, 0x68686868,
+    0x41414141, 0x99999999, 0x2d2d2d2d, 0x0f0f0f0f,
+    0xb0b0b0b0, 0x54545454, 0xbbbbbbbb, 0x16161616
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint32_t U4[256] = {
+    0x52525252, 0x9090909,   0x6a6a6a6a,  0xd5d5d5d5,
+    0x30303030, 0x36363636,  0xa5a5a5a5,  0x38383838,
+    0xbfbfbfbf, 0x40404040,  0xa3a3a3a3,  0x9e9e9e9e,
+    0x81818181, 0xf3f3f3f3,  0xd7d7d7d7,  0xfbfbfbfb,
+    0x7c7c7c7c, 0xe3e3e3e3,  0x39393939,  0x82828282,
+    0x9b9b9b9b, 0x2f2f2f2f,  0xffffffff,  0x87878787,
+    0x34343434, 0x8e8e8e8e,  0x43434343,  0x44444444,
+    0xc4c4c4c4, 0xdededede,  0xe9e9e9e9,  0xcbcbcbcb,
+    0x54545454, 0x7b7b7b7b,  0x94949494,  0x32323232,
+    0xa6a6a6a6, 0xc2c2c2c2,  0x23232323,  0x3d3d3d3d,
+    0xeeeeeeee, 0x4c4c4c4c,  0x95959595,  0xb0b0b0b,
+    0x42424242, 0xfafafafa,  0xc3c3c3c3,  0x4e4e4e4e,
+    0x8080808,  0x2e2e2e2e,  0xa1a1a1a1,  0x66666666,
+    0x28282828, 0xd9d9d9d9,  0x24242424,  0xb2b2b2b2,
+    0x76767676, 0x5b5b5b5b,  0xa2a2a2a2,  0x49494949,
+    0x6d6d6d6d, 0x8b8b8b8b,  0xd1d1d1d1,  0x25252525,
+    0x72727272, 0xf8f8f8f8,  0xf6f6f6f6,  0x64646464,
+    0x86868686, 0x68686868,  0x98989898,  0x16161616,
+    0xd4d4d4d4, 0xa4a4a4a4,  0x5c5c5c5c,  0xcccccccc,
+    0x5d5d5d5d, 0x65656565,  0xb6b6b6b6,  0x92929292,
+    0x6c6c6c6c, 0x70707070,  0x48484848,  0x50505050,
+    0xfdfdfdfd, 0xedededed,  0xb9b9b9b9,  0xdadadada,
+    0x5e5e5e5e, 0x15151515,  0x46464646,  0x57575757,
+    0xa7a7a7a7, 0x8d8d8d8d,  0x9d9d9d9d,  0x84848484,
+    0x90909090, 0xd8d8d8d8,  0xabababab,  0x0,
+    0x8c8c8c8c, 0xbcbcbcbc,  0xd3d3d3d3,  0xa0a0a0a,
+    0xf7f7f7f7, 0xe4e4e4e4,  0x58585858,  0x5050505,
+    0xb8b8b8b8, 0xb3b3b3b3,  0x45454545,  0x6060606,
+    0xd0d0d0d0, 0x2c2c2c2c,  0x1e1e1e1e,  0x8f8f8f8f,
+    0xcacacaca, 0x3f3f3f3f,  0xf0f0f0f,   0x2020202,
+    0xc1c1c1c1, 0xafafafaf,  0xbdbdbdbd,  0x3030303,
+    0x1010101,  0x13131313,  0x8a8a8a8a,  0x6b6b6b6b,
+    0x3a3a3a3a, 0x91919191,  0x11111111,  0x41414141,
+    0x4f4f4f4f, 0x67676767,  0xdcdcdcdc,  0xeaeaeaea,
+    0x97979797, 0xf2f2f2f2,  0xcfcfcfcf,  0xcececece,
+    0xf0f0f0f0, 0xb4b4b4b4,  0xe6e6e6e6,  0x73737373,
+    0x96969696, 0xacacacac,  0x74747474,  0x22222222,
+    0xe7e7e7e7, 0xadadadad,  0x35353535,  0x85858585,
+    0xe2e2e2e2, 0xf9f9f9f9,  0x37373737,  0xe8e8e8e8,
+    0x1c1c1c1c, 0x75757575,  0xdfdfdfdf,  0x6e6e6e6e,
+    0x47474747, 0xf1f1f1f1,  0x1a1a1a1a,  0x71717171,
+    0x1d1d1d1d, 0x29292929,  0xc5c5c5c5,  0x89898989,
+    0x6f6f6f6f, 0xb7b7b7b7,  0x62626262,  0xe0e0e0e,
+    0xaaaaaaaa, 0x18181818,  0xbebebebe,  0x1b1b1b1b,
+    0xfcfcfcfc, 0x56565656,  0x3e3e3e3e,  0x4b4b4b4b,
+    0xc6c6c6c6, 0xd2d2d2d2,  0x79797979,  0x20202020,
+    0x9a9a9a9a, 0xdbdbdbdb,  0xc0c0c0c0,  0xfefefefe,
+    0x78787878, 0xcdcdcdcd,  0x5a5a5a5a,  0xf4f4f4f4,
+    0x1f1f1f1f, 0xdddddddd,  0xa8a8a8a8,  0x33333333,
+    0x88888888, 0x7070707,   0xc7c7c7c7,  0x31313131,
+    0xb1b1b1b1, 0x12121212,  0x10101010,  0x59595959,
+    0x27272727, 0x80808080,  0xecececec,  0x5f5f5f5f,
+    0x60606060, 0x51515151,  0x7f7f7f7f,  0xa9a9a9a9,
+    0x19191919, 0xb5b5b5b5,  0x4a4a4a4a,  0xd0d0d0d,
+    0x2d2d2d2d, 0xe5e5e5e5,  0x7a7a7a7a,  0x9f9f9f9f,
+    0x93939393, 0xc9c9c9c9,  0x9c9c9c9c,  0xefefefef,
+    0xa0a0a0a0, 0xe0e0e0e0,  0x3b3b3b3b,  0x4d4d4d4d,
+    0xaeaeaeae, 0x2a2a2a2a,  0xf5f5f5f5,  0xb0b0b0b0,
+    0xc8c8c8c8, 0xebebebeb,  0xbbbbbbbb,  0x3c3c3c3c,
+    0x83838383, 0x53535353,  0x99999999,  0x61616161,
+    0x17171717, 0x2b2b2b2b,  0x4040404,   0x7e7e7e7e,
+    0xbabababa, 0x77777777,  0xd6d6d6d6,  0x26262626,
+    0xe1e1e1e1, 0x69696969,  0x14141414,  0x63636363,
+    0x55555555, 0x21212121,  0xc0c0c0c,   0x7d7d7d7d
+};
+/* clang-format on */
+#endif /* CPU_RISC */
+
+#define gf2_8_field_polynomial 0x1B
+/*
+ * gf2_8_shift(z) returns the result of the GF(2^8) 'multiply by x'
+ * operation, using the field representation from AES; that is, the
+ * next gf2_8 value in the cyclic representation of that field.  The
+ * value z should be an uint8_t.
+ */
+#define gf2_8_shift(z)                                                         \
+    (((z)&128) ? (((z) << 1) ^ gf2_8_field_polynomial) : ((z) << 1))
+
+/* aes internals */
+
+static void aes_128_expand_encryption_key(const uint8_t *key,
+                                          srtp_aes_expanded_key_t *expanded_key)
+{
+    int i;
+    uint8_t rc;
+
+    /* initialize round constant */
+    rc = 1;
+
+    expanded_key->num_rounds = 10;
+
+    v128_copy_octet_string(&expanded_key->round[0], key);
+
+#if 0
+    debug_print(srtp_mod_aes_icm,
+                "expanded key[0]:  %s", v128_hex_string(&expanded_key->round[0]));
+#endif
+
+    /* loop over round keys */
+    for (i = 1; i < 11; i++) {
+        /* munge first word of round key */
+        expanded_key->round[i].v8[0] =
+            aes_sbox[expanded_key->round[i - 1].v8[13]] ^ rc;
+        expanded_key->round[i].v8[1] =
+            aes_sbox[expanded_key->round[i - 1].v8[14]];
+        expanded_key->round[i].v8[2] =
+            aes_sbox[expanded_key->round[i - 1].v8[15]];
+        expanded_key->round[i].v8[3] =
+            aes_sbox[expanded_key->round[i - 1].v8[12]];
+
+        expanded_key->round[i].v32[0] ^= expanded_key->round[i - 1].v32[0];
+
+        /* set remaining 32 bit words to the exor of the one previous with
+         * the one four words previous */
+
+        expanded_key->round[i].v32[1] =
+            expanded_key->round[i].v32[0] ^ expanded_key->round[i - 1].v32[1];
+
+        expanded_key->round[i].v32[2] =
+            expanded_key->round[i].v32[1] ^ expanded_key->round[i - 1].v32[2];
+
+        expanded_key->round[i].v32[3] =
+            expanded_key->round[i].v32[2] ^ expanded_key->round[i - 1].v32[3];
+
+#if 0
+        debug_print2(srtp_mod_aes_icm,
+                     "expanded key[%d]:  %s", i, v128_hex_string(&expanded_key->round[i]));
+#endif
+
+        /* modify round constant */
+        rc = gf2_8_shift(rc);
+    }
+}
+
+static void aes_256_expand_encryption_key(const unsigned char *key,
+                                          srtp_aes_expanded_key_t *expanded_key)
+{
+    int i;
+    uint8_t rc;
+
+    /* initialize round constant */
+    rc = 1;
+
+    expanded_key->num_rounds = 14;
+
+    v128_copy_octet_string(&expanded_key->round[0], key);
+    v128_copy_octet_string(&expanded_key->round[1], key + 16);
+
+#if 0
+    debug_print(srtp_mod_aes_icm,
+                "expanded key[0]:  %s", v128_hex_string(&expanded_key->round[0]));
+    debug_print(srtp_mod_aes_icm,
+                "expanded key[1]:  %s", v128_hex_string(&expanded_key->round[1]));
+#endif
+
+    /* loop over rest of round keys */
+    for (i = 2; i < 15; i++) {
+        /* munge first word of round key */
+        if ((i & 1) == 0) {
+            expanded_key->round[i].v8[0] =
+                aes_sbox[expanded_key->round[i - 1].v8[13]] ^ rc;
+            expanded_key->round[i].v8[1] =
+                aes_sbox[expanded_key->round[i - 1].v8[14]];
+            expanded_key->round[i].v8[2] =
+                aes_sbox[expanded_key->round[i - 1].v8[15]];
+            expanded_key->round[i].v8[3] =
+                aes_sbox[expanded_key->round[i - 1].v8[12]];
+
+            /* modify round constant */
+            rc = gf2_8_shift(rc);
+        } else {
+            expanded_key->round[i].v8[0] =
+                aes_sbox[expanded_key->round[i - 1].v8[12]];
+            expanded_key->round[i].v8[1] =
+                aes_sbox[expanded_key->round[i - 1].v8[13]];
+            expanded_key->round[i].v8[2] =
+                aes_sbox[expanded_key->round[i - 1].v8[14]];
+            expanded_key->round[i].v8[3] =
+                aes_sbox[expanded_key->round[i - 1].v8[15]];
+        }
+
+        expanded_key->round[i].v32[0] ^= expanded_key->round[i - 2].v32[0];
+
+        /* set remaining 32 bit words to the exor of the one previous with
+         * the one eight words previous */
+
+        expanded_key->round[i].v32[1] =
+            expanded_key->round[i].v32[0] ^ expanded_key->round[i - 2].v32[1];
+
+        expanded_key->round[i].v32[2] =
+            expanded_key->round[i].v32[1] ^ expanded_key->round[i - 2].v32[2];
+
+        expanded_key->round[i].v32[3] =
+            expanded_key->round[i].v32[2] ^ expanded_key->round[i - 2].v32[3];
+
+#if 0
+        debug_print2(srtp_mod_aes_icm,
+                     "expanded key[%d]:  %s", i, v128_hex_string(&expanded_key->round[i]));
+#endif
+    }
+}
+
+srtp_err_status_t srtp_aes_expand_encryption_key(
+    const uint8_t *key,
+    int key_len,
+    srtp_aes_expanded_key_t *expanded_key)
+{
+    if (key_len == 16) {
+        aes_128_expand_encryption_key(key, expanded_key);
+        return srtp_err_status_ok;
+    } else if (key_len == 24) {
+        /* AES-192 not yet supported */
+        return srtp_err_status_bad_param;
+    } else if (key_len == 32) {
+        aes_256_expand_encryption_key(key, expanded_key);
+        return srtp_err_status_ok;
+    } else {
+        return srtp_err_status_bad_param;
+    }
+}
+
+srtp_err_status_t srtp_aes_expand_decryption_key(
+    const uint8_t *key,
+    int key_len,
+    srtp_aes_expanded_key_t *expanded_key)
+{
+    int i;
+    srtp_err_status_t status;
+    int num_rounds = expanded_key->num_rounds;
+
+    status = srtp_aes_expand_encryption_key(key, key_len, expanded_key);
+    if (status) {
+        return status;
+    }
+
+    /* invert the order of the round keys */
+    for (i = 0; i < num_rounds / 2; i++) {
+        v128_t tmp;
+        v128_copy(&tmp, &expanded_key->round[num_rounds - i]);
+        v128_copy(&expanded_key->round[num_rounds - i],
+                  &expanded_key->round[i]);
+        v128_copy(&expanded_key->round[i], &tmp);
+    }
+
+    /*
+     * apply the inverse mixColumn transform to the round keys (except
+     * for the first and the last)
+     *
+     * mixColumn is implemented by using the tables U0, U1, U2, U3,
+     * followed by the T4 table (which cancels out the use of the sbox
+     * in the U-tables)
+     */
+    for (i = 1; i < num_rounds; i++) {
+#ifdef CPU_RISC
+        uint32_t tmp;
+
+#ifdef WORDS_BIGENDIAN
+        /* clang-format off */
+        tmp = expanded_key->round[i].v32[0];
+        expanded_key->round[i].v32[0] =
+            U0[T4[(tmp >> 24)       ] & 0xff] ^
+            U1[T4[(tmp >> 16) & 0xff] & 0xff] ^
+            U2[T4[(tmp >> 8)  & 0xff] & 0xff] ^
+            U3[T4[(tmp)       & 0xff] & 0xff];
+
+        tmp = expanded_key->round[i].v32[1];
+        expanded_key->round[i].v32[1] =
+            U0[T4[(tmp >> 24)       ] & 0xff] ^
+            U1[T4[(tmp >> 16) & 0xff] & 0xff] ^
+            U2[T4[(tmp >> 8)  & 0xff] & 0xff] ^
+            U3[T4[(tmp)       & 0xff] & 0xff];
+
+        tmp = expanded_key->round[i].v32[2];
+        expanded_key->round[i].v32[2] =
+            U0[T4[(tmp >> 24)       ] & 0xff] ^
+            U1[T4[(tmp >> 16) & 0xff] & 0xff] ^
+            U2[T4[(tmp >> 8)  & 0xff] & 0xff] ^
+            U3[T4[(tmp)       & 0xff] & 0xff];
+
+        tmp = expanded_key->round[i].v32[3];
+        expanded_key->round[i].v32[3] =
+            U0[T4[(tmp >> 24)       ] & 0xff] ^
+            U1[T4[(tmp >> 16) & 0xff] & 0xff] ^
+            U2[T4[(tmp >> 8)  & 0xff] & 0xff] ^
+            U3[T4[(tmp)       & 0xff] & 0xff];
+#else
+        tmp = expanded_key->round[i].v32[0];
+        expanded_key->round[i].v32[0] =
+            U3[T4[(tmp >> 24)       ] & 0xff] ^
+            U2[T4[(tmp >> 16) & 0xff] & 0xff] ^
+            U1[T4[(tmp >> 8)  & 0xff] & 0xff] ^
+            U0[T4[(tmp)       & 0xff] & 0xff];
+
+        tmp = expanded_key->round[i].v32[1];
+        expanded_key->round[i].v32[1] =
+            U3[T4[(tmp >> 24)       ] & 0xff] ^
+            U2[T4[(tmp >> 16) & 0xff] & 0xff] ^
+            U1[T4[(tmp >> 8)  & 0xff] & 0xff] ^
+            U0[T4[(tmp)       & 0xff] & 0xff];
+
+        tmp = expanded_key->round[i].v32[2];
+        expanded_key->round[i].v32[2] =
+            U3[T4[(tmp >> 24)       ] & 0xff] ^
+            U2[T4[(tmp >> 16) & 0xff] & 0xff] ^
+            U1[T4[(tmp >> 8)  & 0xff] & 0xff] ^
+            U0[T4[(tmp)       & 0xff] & 0xff];
+
+        tmp = expanded_key->round[i].v32[3];
+        expanded_key->round[i].v32[3] =
+            U3[T4[(tmp >> 24)       ] & 0xff] ^
+            U2[T4[(tmp >> 16) & 0xff] & 0xff] ^
+            U1[T4[(tmp >> 8)  & 0xff] & 0xff] ^
+            U0[T4[(tmp)       & 0xff] & 0xff];
+/* clang-format on */
+#endif /* WORDS_BIGENDIAN */
+
+#else /* assume CPU_CISC */
+
+        uint32_t c0, c1, c2, c3;
+
+        c0 = U0[aes_sbox[expanded_key->round[i].v8[0]]] ^
+             U1[aes_sbox[expanded_key->round[i].v8[1]]] ^
+             U2[aes_sbox[expanded_key->round[i].v8[2]]] ^
+             U3[aes_sbox[expanded_key->round[i].v8[3]]];
+
+        c1 = U0[aes_sbox[expanded_key->round[i].v8[4]]] ^
+             U1[aes_sbox[expanded_key->round[i].v8[5]]] ^
+             U2[aes_sbox[expanded_key->round[i].v8[6]]] ^
+             U3[aes_sbox[expanded_key->round[i].v8[7]]];
+
+        c2 = U0[aes_sbox[expanded_key->round[i].v8[8]]] ^
+             U1[aes_sbox[expanded_key->round[i].v8[9]]] ^
+             U2[aes_sbox[expanded_key->round[i].v8[10]]] ^
+             U3[aes_sbox[expanded_key->round[i].v8[11]]];
+
+        c3 = U0[aes_sbox[expanded_key->round[i].v8[12]]] ^
+             U1[aes_sbox[expanded_key->round[i].v8[13]]] ^
+             U2[aes_sbox[expanded_key->round[i].v8[14]]] ^
+             U3[aes_sbox[expanded_key->round[i].v8[15]]];
+
+        expanded_key->round[i].v32[0] = c0;
+        expanded_key->round[i].v32[1] = c1;
+        expanded_key->round[i].v32[2] = c2;
+        expanded_key->round[i].v32[3] = c3;
+
+#endif
+    }
+
+    return srtp_err_status_ok;
+}
+
+#ifdef CPU_CISC
+
+static inline void aes_round(v128_t *state, const v128_t *round_key)
+{
+    uint32_t column0, column1, column2, column3;
+
+    /* compute the columns of the output square in terms of the octets
+       of state, using the tables T0, T1, T2, T3 */
+
+    column0 = T0[state->v8[0]] ^ T1[state->v8[5]] ^ T2[state->v8[10]] ^
+              T3[state->v8[15]];
+
+    column1 = T0[state->v8[4]] ^ T1[state->v8[9]] ^ T2[state->v8[14]] ^
+              T3[state->v8[3]];
+
+    column2 = T0[state->v8[8]] ^ T1[state->v8[13]] ^ T2[state->v8[2]] ^
+              T3[state->v8[7]];
+
+    column3 = T0[state->v8[12]] ^ T1[state->v8[1]] ^ T2[state->v8[6]] ^
+              T3[state->v8[11]];
+
+    state->v32[0] = column0 ^ round_key->v32[0];
+    state->v32[1] = column1 ^ round_key->v32[1];
+    state->v32[2] = column2 ^ round_key->v32[2];
+    state->v32[3] = column3 ^ round_key->v32[3];
+}
+
+static inline void aes_inv_round(v128_t *state, const v128_t *round_key)
+{
+    uint32_t column0, column1, column2, column3;
+
+    /* compute the columns of the output square in terms of the octets
+       of state, using the tables U0, U1, U2, U3 */
+
+    column0 = U0[state->v8[0]] ^ U1[state->v8[13]] ^ U2[state->v8[10]] ^
+              U3[state->v8[7]];
+
+    column1 = U0[state->v8[4]] ^ U1[state->v8[1]] ^ U2[state->v8[14]] ^
+              U3[state->v8[11]];
+
+    column2 = U0[state->v8[8]] ^ U1[state->v8[5]] ^ U2[state->v8[2]] ^
+              U3[state->v8[15]];
+
+    column3 = U0[state->v8[12]] ^ U1[state->v8[9]] ^ U2[state->v8[6]] ^
+              U3[state->v8[3]];
+
+    state->v32[0] = column0 ^ round_key->v32[0];
+    state->v32[1] = column1 ^ round_key->v32[1];
+    state->v32[2] = column2 ^ round_key->v32[2];
+    state->v32[3] = column3 ^ round_key->v32[3];
+}
+
+static inline void aes_final_round(v128_t *state, const v128_t *round_key)
+{
+    uint8_t tmp;
+
+    /* byte substitutions and row shifts */
+    /* first row - no shift */
+    state->v8[0] = aes_sbox[state->v8[0]];
+    state->v8[4] = aes_sbox[state->v8[4]];
+    state->v8[8] = aes_sbox[state->v8[8]];
+    state->v8[12] = aes_sbox[state->v8[12]];
+
+    /* second row - shift one left */
+    tmp = aes_sbox[state->v8[1]];
+    state->v8[1] = aes_sbox[state->v8[5]];
+    state->v8[5] = aes_sbox[state->v8[9]];
+    state->v8[9] = aes_sbox[state->v8[13]];
+    state->v8[13] = tmp;
+
+    /* third row - shift two left */
+    tmp = aes_sbox[state->v8[10]];
+    state->v8[10] = aes_sbox[state->v8[2]];
+    state->v8[2] = tmp;
+    tmp = aes_sbox[state->v8[14]];
+    state->v8[14] = aes_sbox[state->v8[6]];
+    state->v8[6] = tmp;
+
+    /* fourth row - shift three left */
+    tmp = aes_sbox[state->v8[15]];
+    state->v8[15] = aes_sbox[state->v8[11]];
+    state->v8[11] = aes_sbox[state->v8[7]];
+    state->v8[7] = aes_sbox[state->v8[3]];
+    state->v8[3] = tmp;
+
+    v128_xor_eq(state, round_key);
+}
+
+static inline void aes_inv_final_round(v128_t *state, const v128_t *round_key)
+{
+    uint8_t tmp;
+
+    /* byte substitutions and row shifts */
+    /* first row - no shift */
+    state->v8[0] = aes_inv_sbox[state->v8[0]];
+    state->v8[4] = aes_inv_sbox[state->v8[4]];
+    state->v8[8] = aes_inv_sbox[state->v8[8]];
+    state->v8[12] = aes_inv_sbox[state->v8[12]];
+
+    /* second row - shift one right */
+    tmp = aes_inv_sbox[state->v8[13]];
+    state->v8[13] = aes_inv_sbox[state->v8[9]];
+    state->v8[9] = aes_inv_sbox[state->v8[5]];
+    state->v8[5] = aes_inv_sbox[state->v8[1]];
+    state->v8[1] = tmp;
+
+    /* third row - shift two right */
+    tmp = aes_inv_sbox[state->v8[2]];
+    state->v8[2] = aes_inv_sbox[state->v8[10]];
+    state->v8[10] = tmp;
+    tmp = aes_inv_sbox[state->v8[6]];
+    state->v8[6] = aes_inv_sbox[state->v8[14]];
+    state->v8[14] = tmp;
+
+    /* fourth row - shift three right */
+    tmp = aes_inv_sbox[state->v8[3]];
+    state->v8[3] = aes_inv_sbox[state->v8[7]];
+    state->v8[7] = aes_inv_sbox[state->v8[11]];
+    state->v8[11] = aes_inv_sbox[state->v8[15]];
+    state->v8[15] = tmp;
+
+    v128_xor_eq(state, round_key);
+}
+
+#elif CPU_RISC
+
+static inline void aes_round(v128_t *state, const v128_t *round_key)
+{
+    uint32_t column0, column1, column2, column3;
+
+/* compute the columns of the output square in terms of the octets
+   of state, using the tables T0, T1, T2, T3 */
+#ifdef WORDS_BIGENDIAN
+    column0 = T0[state->v32[0] >> 24] ^ T1[(state->v32[1] >> 16) & 0xff] ^
+              T2[(state->v32[2] >> 8) & 0xff] ^ T3[state->v32[3] & 0xff];
+
+    column1 = T0[state->v32[1] >> 24] ^ T1[(state->v32[2] >> 16) & 0xff] ^
+              T2[(state->v32[3] >> 8) & 0xff] ^ T3[state->v32[0] & 0xff];
+
+    column2 = T0[state->v32[2] >> 24] ^ T1[(state->v32[3] >> 16) & 0xff] ^
+              T2[(state->v32[0] >> 8) & 0xff] ^ T3[state->v32[1] & 0xff];
+
+    column3 = T0[state->v32[3] >> 24] ^ T1[(state->v32[0] >> 16) & 0xff] ^
+              T2[(state->v32[1] >> 8) & 0xff] ^ T3[state->v32[2] & 0xff];
+#else
+    column0 = T0[state->v32[0] & 0xff] ^ T1[(state->v32[1] >> 8) & 0xff] ^
+              T2[(state->v32[2] >> 16) & 0xff] ^ T3[state->v32[3] >> 24];
+
+    column1 = T0[state->v32[1] & 0xff] ^ T1[(state->v32[2] >> 8) & 0xff] ^
+              T2[(state->v32[3] >> 16) & 0xff] ^ T3[state->v32[0] >> 24];
+
+    column2 = T0[state->v32[2] & 0xff] ^ T1[(state->v32[3] >> 8) & 0xff] ^
+              T2[(state->v32[0] >> 16) & 0xff] ^ T3[state->v32[1] >> 24];
+
+    column3 = T0[state->v32[3] & 0xff] ^ T1[(state->v32[0] >> 8) & 0xff] ^
+              T2[(state->v32[1] >> 16) & 0xff] ^ T3[state->v32[2] >> 24];
+#endif /* WORDS_BIGENDIAN */
+
+    state->v32[0] = column0 ^ round_key->v32[0];
+    state->v32[1] = column1 ^ round_key->v32[1];
+    state->v32[2] = column2 ^ round_key->v32[2];
+    state->v32[3] = column3 ^ round_key->v32[3];
+}
+
+static inline void aes_inv_round(v128_t *state, const v128_t *round_key)
+{
+    uint32_t column0, column1, column2, column3;
+
+/* compute the columns of the output square in terms of the octets
+   of state, using the tables U0, U1, U2, U3 */
+
+#ifdef WORDS_BIGENDIAN
+    column0 = U0[state->v32[0] >> 24] ^ U1[(state->v32[3] >> 16) & 0xff] ^
+              U2[(state->v32[2] >> 8) & 0xff] ^ U3[state->v32[1] & 0xff];
+
+    column1 = U0[state->v32[1] >> 24] ^ U1[(state->v32[0] >> 16) & 0xff] ^
+              U2[(state->v32[3] >> 8) & 0xff] ^ U3[state->v32[2] & 0xff];
+
+    column2 = U0[state->v32[2] >> 24] ^ U1[(state->v32[1] >> 16) & 0xff] ^
+              U2[(state->v32[0] >> 8) & 0xff] ^ U3[state->v32[3] & 0xff];
+
+    column3 = U0[state->v32[3] >> 24] ^ U1[(state->v32[2] >> 16) & 0xff] ^
+              U2[(state->v32[1] >> 8) & 0xff] ^ U3[state->v32[0] & 0xff];
+#else
+    column0 = U0[state->v32[0] & 0xff] ^ U1[(state->v32[3] >> 8) & 0xff] ^
+              U2[(state->v32[2] >> 16) & 0xff] ^
+              U3[(state->v32[1] >> 24) & 0xff];
+
+    column1 = U0[state->v32[1] & 0xff] ^ U1[(state->v32[0] >> 8) & 0xff] ^
+              U2[(state->v32[3] >> 16) & 0xff] ^
+              U3[(state->v32[2] >> 24) & 0xff];
+
+    column2 = U0[state->v32[2] & 0xff] ^ U1[(state->v32[1] >> 8) & 0xff] ^
+              U2[(state->v32[0] >> 16) & 0xff] ^
+              U3[(state->v32[3] >> 24) & 0xff];
+
+    column3 = U0[state->v32[3] & 0xff] ^ U1[(state->v32[2] >> 8) & 0xff] ^
+              U2[(state->v32[1] >> 16) & 0xff] ^
+              U3[(state->v32[0] >> 24) & 0xff];
+#endif /* WORDS_BIGENDIAN */
+
+    state->v32[0] = column0 ^ round_key->v32[0];
+    state->v32[1] = column1 ^ round_key->v32[1];
+    state->v32[2] = column2 ^ round_key->v32[2];
+    state->v32[3] = column3 ^ round_key->v32[3];
+}
+
+static inline void aes_final_round(v128_t *state, const v128_t *round_key)
+{
+    uint32_t tmp0, tmp1, tmp2, tmp3;
+
+#ifdef WORDS_BIGENDIAN
+    /* clang-format off */
+    tmp0 = (T4[(state->v32[0] >> 24)]        & 0xff000000) ^
+           (T4[(state->v32[1] >> 16) & 0xff] & 0x00ff0000) ^
+           (T4[(state->v32[2] >>  8) & 0xff] & 0x0000ff00) ^
+           (T4[(state->v32[3]      ) & 0xff] & 0x000000ff) ^
+           round_key->v32[0];
+
+    tmp1 = (T4[(state->v32[1] >> 24)]        & 0xff000000) ^
+           (T4[(state->v32[2] >> 16) & 0xff] & 0x00ff0000) ^
+           (T4[(state->v32[3] >>  8) & 0xff] & 0x0000ff00) ^
+           (T4[(state->v32[0]      ) & 0xff] & 0x000000ff) ^
+           round_key->v32[1];
+
+    tmp2 = (T4[(state->v32[2] >> 24)]        & 0xff000000) ^
+           (T4[(state->v32[3] >> 16) & 0xff] & 0x00ff0000) ^
+           (T4[(state->v32[0] >>  8) & 0xff] & 0x0000ff00) ^
+           (T4[(state->v32[1]      ) & 0xff] & 0x000000ff) ^
+           round_key->v32[2];
+
+    tmp3 = (T4[(state->v32[3] >> 24)]        & 0xff000000) ^
+           (T4[(state->v32[0] >> 16) & 0xff] & 0x00ff0000) ^
+           (T4[(state->v32[1] >>  8) & 0xff] & 0x0000ff00) ^
+           (T4[(state->v32[2]      ) & 0xff] & 0x000000ff) ^
+           round_key->v32[3];
+#else
+    tmp0 = (T4[(state->v32[3] >> 24)]        & 0xff000000) ^
+           (T4[(state->v32[2] >> 16) & 0xff] & 0x00ff0000) ^
+           (T4[(state->v32[1] >>  8) & 0xff] & 0x0000ff00) ^
+           (T4[(state->v32[0]      ) & 0xff] & 0x000000ff) ^
+           round_key->v32[0];
+
+    tmp1 = (T4[(state->v32[0] >> 24)]        & 0xff000000) ^
+           (T4[(state->v32[3] >> 16) & 0xff] & 0x00ff0000) ^
+           (T4[(state->v32[2] >>  8) & 0xff] & 0x0000ff00) ^
+           (T4[(state->v32[1]      ) & 0xff] & 0x000000ff) ^
+           round_key->v32[1];
+
+    tmp2 = (T4[(state->v32[1] >> 24)]        & 0xff000000) ^
+           (T4[(state->v32[0] >> 16) & 0xff] & 0x00ff0000) ^
+           (T4[(state->v32[3] >>  8) & 0xff] & 0x0000ff00) ^
+           (T4[(state->v32[2]      ) & 0xff] & 0x000000ff) ^
+           round_key->v32[2];
+
+    tmp3 = (T4[(state->v32[2] >> 24)]        & 0xff000000) ^
+           (T4[(state->v32[1] >> 16) & 0xff] & 0x00ff0000) ^
+           (T4[(state->v32[0] >>  8) & 0xff] & 0x0000ff00) ^
+           (T4[(state->v32[3]      ) & 0xff] & 0x000000ff) ^
+           round_key->v32[3];
+/* clang-format on */
+#endif /* WORDS_BIGENDIAN */
+
+    state->v32[0] = tmp0;
+    state->v32[1] = tmp1;
+    state->v32[2] = tmp2;
+    state->v32[3] = tmp3;
+}
+
+static inline void aes_inv_final_round(v128_t *state, const v128_t *round_key)
+{
+    uint32_t tmp0, tmp1, tmp2, tmp3;
+
+#ifdef WORDS_BIGENDIAN
+    /* clang-format off */
+    tmp0 = (U4[(state->v32[0] >> 24)]        & 0xff000000) ^
+           (U4[(state->v32[3] >> 16) & 0xff] & 0x00ff0000) ^
+           (U4[(state->v32[2] >>  8) & 0xff] & 0x0000ff00) ^
+           (U4[(state->v32[1]      ) & 0xff] & 0x000000ff) ^
+           round_key->v32[0];
+
+    tmp1 = (U4[(state->v32[1] >> 24)]        & 0xff000000) ^
+           (U4[(state->v32[0] >> 16) & 0xff] & 0x00ff0000) ^
+           (U4[(state->v32[3] >>  8) & 0xff] & 0x0000ff00) ^
+           (U4[(state->v32[2]      ) & 0xff] & 0x000000ff) ^
+           round_key->v32[1];
+
+    tmp2 = (U4[(state->v32[2] >> 24)]        & 0xff000000) ^
+           (U4[(state->v32[1] >> 16) & 0xff] & 0x00ff0000) ^
+           (U4[(state->v32[0] >>  8) & 0xff] & 0x0000ff00) ^
+           (U4[(state->v32[3]      ) & 0xff] & 0x000000ff) ^
+           round_key->v32[2];
+
+    tmp3 = (U4[(state->v32[3] >> 24)]        & 0xff000000) ^
+           (U4[(state->v32[2] >> 16) & 0xff] & 0x00ff0000) ^
+           (U4[(state->v32[1] >>  8) & 0xff] & 0x0000ff00) ^
+           (U4[(state->v32[0]      ) & 0xff] & 0x000000ff) ^
+           round_key->v32[3];
+#else
+    tmp0 = (U4[(state->v32[1] >> 24)]        & 0xff000000) ^
+           (U4[(state->v32[2] >> 16) & 0xff] & 0x00ff0000) ^
+           (U4[(state->v32[3] >>  8) & 0xff] & 0x0000ff00) ^
+           (U4[(state->v32[0]      ) & 0xff] & 0x000000ff) ^
+           round_key->v32[0];
+
+    tmp1 = (U4[(state->v32[2] >> 24)]        & 0xff000000) ^
+           (U4[(state->v32[3] >> 16) & 0xff] & 0x00ff0000) ^
+           (U4[(state->v32[0] >>  8) & 0xff] & 0x0000ff00) ^
+           (U4[(state->v32[1]      ) & 0xff] & 0x000000ff) ^
+           round_key->v32[1];
+
+    tmp2 = (U4[(state->v32[3] >> 24)]        & 0xff000000) ^
+           (U4[(state->v32[0] >> 16) & 0xff] & 0x00ff0000) ^
+           (U4[(state->v32[1] >>  8) & 0xff] & 0x0000ff00) ^
+           (U4[(state->v32[2]      ) & 0xff] & 0x000000ff) ^
+           round_key->v32[2];
+
+    tmp3 = (U4[(state->v32[0] >> 24)]        & 0xff000000) ^
+           (U4[(state->v32[1] >> 16) & 0xff] & 0x00ff0000) ^
+           (U4[(state->v32[2] >>  8) & 0xff] & 0x0000ff00) ^
+           (U4[(state->v32[3]      ) & 0xff] & 0x000000ff) ^
+           round_key->v32[3];
+/* clang-format on */
+#endif /* WORDS_BIGENDIAN */
+
+    state->v32[0] = tmp0;
+    state->v32[1] = tmp1;
+    state->v32[2] = tmp2;
+    state->v32[3] = tmp3;
+}
+
+#elif CPU_16 /* assume 16-bit word size on processor */
+
+static inline void aes_round(v128_t *state, const v128_t *round_key)
+{
+    uint32_t column0, column1, column2, column3;
+    /* compute the columns of the output square in terms of the octets
+       of state, using the tables T0, T1, T2, T3 */
+
+    column0 = T0[state->v8[0]] ^ T1[state->v8[5]] ^ T2[state->v8[10]] ^
+              T3[state->v8[15]];
+
+    column1 = T0[state->v8[4]] ^ T1[state->v8[9]] ^ T2[state->v8[14]] ^
+              T3[state->v8[3]];
+
+    column2 = T0[state->v8[8]] ^ T1[state->v8[13]] ^ T2[state->v8[2]] ^
+              T3[state->v8[7]];
+
+    column3 = T0[state->v8[12]] ^ T1[state->v8[1]] ^ T2[state->v8[6]] ^
+              T3[state->v8[11]];
+
+    state->v32[0] = column0 ^ round_key->v32[0];
+    state->v32[1] = column1 ^ round_key->v32[1];
+    state->v32[2] = column2 ^ round_key->v32[2];
+    state->v32[3] = column3 ^ round_key->v32[3];
+}
+
+static inline void aes_inv_round(v128_t *state, const v128_t *round_key)
+{
+    uint32_t column0, column1, column2, column3;
+
+    /* compute the columns of the output square in terms of the octets
+       of state, using the tables U0, U1, U2, U3 */
+
+    column0 = U0[state->v8[0]] ^ U1[state->v8[5]] ^ U2[state->v8[10]] ^
+              U3[state->v8[15]];
+
+    column1 = U0[state->v8[4]] ^ U1[state->v8[9]] ^ U2[state->v8[14]] ^
+              U3[state->v8[3]];
+
+    column2 = U0[state->v8[8]] ^ U1[state->v8[13]] ^ U2[state->v8[2]] ^
+              U3[state->v8[7]];
+
+    column3 = U0[state->v8[12]] ^ U1[state->v8[1]] ^ U2[state->v8[6]] ^
+              U3[state->v8[11]];
+
+    state->v32[0] = column0 ^ round_key->v32[0];
+    state->v32[1] = column1 ^ round_key->v32[1];
+    state->v32[2] = column2 ^ round_key->v32[2];
+    state->v32[3] = column3 ^ round_key->v32[3];
+}
+
+static inline void aes_final_round(v128_t *state, const v128_t *round_key)
+{
+    uint8_t tmp;
+
+    /* byte substitutions and row shifts */
+    /* first row - no shift */
+    state->v8[0] = aes_sbox[state->v8[0]];
+    state->v8[4] = aes_sbox[state->v8[4]];
+    state->v8[8] = aes_sbox[state->v8[8]];
+    state->v8[12] = aes_sbox[state->v8[12]];
+
+    /* second row - shift one left */
+    tmp = aes_sbox[state->v8[1]];
+    state->v8[1] = aes_sbox[state->v8[5]];
+    state->v8[5] = aes_sbox[state->v8[9]];
+    state->v8[9] = aes_sbox[state->v8[13]];
+    state->v8[13] = tmp;
+
+    /* third row - shift two left */
+    tmp = aes_sbox[state->v8[10]];
+    state->v8[10] = aes_sbox[state->v8[2]];
+    state->v8[2] = tmp;
+    tmp = aes_sbox[state->v8[14]];
+    state->v8[14] = aes_sbox[state->v8[6]];
+    state->v8[6] = tmp;
+
+    /* fourth row - shift three left */
+    tmp = aes_sbox[state->v8[15]];
+    state->v8[15] = aes_sbox[state->v8[11]];
+    state->v8[11] = aes_sbox[state->v8[7]];
+    state->v8[7] = aes_sbox[state->v8[3]];
+    state->v8[3] = tmp;
+
+    v128_xor_eq(state, round_key);
+}
+
+static inline void aes_inv_final_round(v128_t *state, const v128_t *round_key)
+{
+    uint8_t tmp;
+
+    /* byte substitutions and row shifts */
+    /* first row - no shift */
+    state->v8[0] = aes_inv_sbox[state->v8[0]];
+    state->v8[4] = aes_inv_sbox[state->v8[4]];
+    state->v8[8] = aes_inv_sbox[state->v8[8]];
+    state->v8[12] = aes_inv_sbox[state->v8[12]];
+
+    /* second row - shift one left */
+    tmp = aes_inv_sbox[state->v8[1]];
+    state->v8[1] = aes_inv_sbox[state->v8[5]];
+    state->v8[5] = aes_inv_sbox[state->v8[9]];
+    state->v8[9] = aes_inv_sbox[state->v8[13]];
+    state->v8[13] = tmp;
+
+    /* third row - shift two left */
+    tmp = aes_inv_sbox[state->v8[10]];
+    state->v8[10] = aes_inv_sbox[state->v8[2]];
+    state->v8[2] = tmp;
+    tmp = aes_inv_sbox[state->v8[14]];
+    state->v8[14] = aes_inv_sbox[state->v8[6]];
+    state->v8[6] = tmp;
+
+    /* fourth row - shift three left */
+    tmp = aes_inv_sbox[state->v8[15]];
+    state->v8[15] = aes_inv_sbox[state->v8[11]];
+    state->v8[11] = aes_inv_sbox[state->v8[7]];
+    state->v8[7] = aes_inv_sbox[state->v8[3]];
+    state->v8[3] = tmp;
+
+    v128_xor_eq(state, round_key);
+}
+
+#endif /* CPU type */
+
+void srtp_aes_encrypt(v128_t *plaintext, const srtp_aes_expanded_key_t *exp_key)
+{
+    /* add in the subkey */
+    v128_xor_eq(plaintext, &exp_key->round[0]);
+
+    /* now do the rounds */
+    aes_round(plaintext, &exp_key->round[1]);
+    aes_round(plaintext, &exp_key->round[2]);
+    aes_round(plaintext, &exp_key->round[3]);
+    aes_round(plaintext, &exp_key->round[4]);
+    aes_round(plaintext, &exp_key->round[5]);
+    aes_round(plaintext, &exp_key->round[6]);
+    aes_round(plaintext, &exp_key->round[7]);
+    aes_round(plaintext, &exp_key->round[8]);
+    aes_round(plaintext, &exp_key->round[9]);
+    if (exp_key->num_rounds == 10) {
+        aes_final_round(plaintext, &exp_key->round[10]);
+    } else if (exp_key->num_rounds == 12) {
+        aes_round(plaintext, &exp_key->round[10]);
+        aes_round(plaintext, &exp_key->round[11]);
+        aes_final_round(plaintext, &exp_key->round[12]);
+    } else if (exp_key->num_rounds == 14) {
+        aes_round(plaintext, &exp_key->round[10]);
+        aes_round(plaintext, &exp_key->round[11]);
+        aes_round(plaintext, &exp_key->round[12]);
+        aes_round(plaintext, &exp_key->round[13]);
+        aes_final_round(plaintext, &exp_key->round[14]);
+    }
+}
+
+void srtp_aes_decrypt(v128_t *plaintext, const srtp_aes_expanded_key_t *exp_key)
+{
+    /* add in the subkey */
+    v128_xor_eq(plaintext, &exp_key->round[0]);
+
+    /* now do the rounds */
+    aes_inv_round(plaintext, &exp_key->round[1]);
+    aes_inv_round(plaintext, &exp_key->round[2]);
+    aes_inv_round(plaintext, &exp_key->round[3]);
+    aes_inv_round(plaintext, &exp_key->round[4]);
+    aes_inv_round(plaintext, &exp_key->round[5]);
+    aes_inv_round(plaintext, &exp_key->round[6]);
+    aes_inv_round(plaintext, &exp_key->round[7]);
+    aes_inv_round(plaintext, &exp_key->round[8]);
+    aes_inv_round(plaintext, &exp_key->round[9]);
+    if (exp_key->num_rounds == 10) {
+        aes_inv_final_round(plaintext, &exp_key->round[10]);
+    } else if (exp_key->num_rounds == 12) {
+        aes_inv_round(plaintext, &exp_key->round[10]);
+        aes_inv_round(plaintext, &exp_key->round[11]);
+        aes_inv_final_round(plaintext, &exp_key->round[12]);
+    } else if (exp_key->num_rounds == 14) {
+        aes_inv_round(plaintext, &exp_key->round[10]);
+        aes_inv_round(plaintext, &exp_key->round[11]);
+        aes_inv_round(plaintext, &exp_key->round[12]);
+        aes_inv_round(plaintext, &exp_key->round[13]);
+        aes_inv_final_round(plaintext, &exp_key->round[14]);
+    }
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_gcm_nss.c b/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_gcm_nss.c
new file mode 100644
index 000000000..54547cd1c
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_gcm_nss.c
@@ -0,0 +1,609 @@
+/*
+ * aes_gcm_nss.c
+ *
+ * AES Galois Counter Mode
+ *
+ * Richard L. Barnes
+ * Cisco Systems, Inc.
+ *
+ */
+
+/*
+ *
+ * Copyright (c) 2013-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "aes_gcm.h"
+#include "alloc.h"
+#include "err.h" /* for srtp_debug */
+#include "crypto_types.h"
+#include "cipher_types.h"
+#include <secerr.h>
+#include <nspr.h>
+
+srtp_debug_module_t srtp_mod_aes_gcm = {
+    0,            /* debugging is off by default */
+    "aes gcm nss" /* printable module name       */
+};
+
+/*
+ * For now we only support 8 and 16 octet tags.  The spec allows for
+ * optional 12 byte tag, which may be supported in the future.
+ */
+#define GCM_IV_LEN 12
+#define GCM_AUTH_TAG_LEN 16
+#define GCM_AUTH_TAG_LEN_8 8
+
+/*
+ * This function allocates a new instance of this crypto engine.
+ * The key_len parameter should be one of 28 or 44 for
+ * AES-128-GCM or AES-256-GCM respectively.  Note that the
+ * key length includes the 14 byte salt value that is used when
+ * initializing the KDF.
+ */
+static srtp_err_status_t srtp_aes_gcm_nss_alloc(srtp_cipher_t **c,
+                                                int key_len,
+                                                int tlen)
+{
+    srtp_aes_gcm_ctx_t *gcm;
+    NSSInitContext *nss;
+
+    debug_print(srtp_mod_aes_gcm, "allocating cipher with key length %d",
+                key_len);
+    debug_print(srtp_mod_aes_gcm, "allocating cipher with tag length %d", tlen);
+
+    /*
+     * Verify the key_len is valid for one of: AES-128/256
+     */
+    if (key_len != SRTP_AES_GCM_128_KEY_LEN_WSALT &&
+        key_len != SRTP_AES_GCM_256_KEY_LEN_WSALT) {
+        return (srtp_err_status_bad_param);
+    }
+
+    if (tlen != GCM_AUTH_TAG_LEN && tlen != GCM_AUTH_TAG_LEN_8) {
+        return (srtp_err_status_bad_param);
+    }
+
+    /* Initialize NSS equiv of NSS_NoDB_Init(NULL) */
+    nss = NSS_InitContext("", "", "", "", NULL,
+                          NSS_INIT_READONLY | NSS_INIT_NOCERTDB |
+                              NSS_INIT_NOMODDB | NSS_INIT_FORCEOPEN |
+                              NSS_INIT_OPTIMIZESPACE);
+    if (!nss) {
+        return (srtp_err_status_cipher_fail);
+    }
+
+    /* allocate memory a cipher of type aes_gcm */
+    *c = (srtp_cipher_t *)srtp_crypto_alloc(sizeof(srtp_cipher_t));
+    if (*c == NULL) {
+        NSS_ShutdownContext(nss);
+        return (srtp_err_status_alloc_fail);
+    }
+
+    gcm = (srtp_aes_gcm_ctx_t *)srtp_crypto_alloc(sizeof(srtp_aes_gcm_ctx_t));
+    if (gcm == NULL) {
+        NSS_ShutdownContext(nss);
+        srtp_crypto_free(*c);
+        *c = NULL;
+        return (srtp_err_status_alloc_fail);
+    }
+
+    gcm->nss = nss;
+
+    /* set pointers */
+    (*c)->state = gcm;
+
+    /* setup cipher attributes */
+    switch (key_len) {
+    case SRTP_AES_GCM_128_KEY_LEN_WSALT:
+        (*c)->type = &srtp_aes_gcm_128;
+        (*c)->algorithm = SRTP_AES_GCM_128;
+        gcm->key_size = SRTP_AES_128_KEY_LEN;
+        gcm->tag_size = tlen;
+        gcm->params.ulTagBits = 8 * tlen;
+        break;
+    case SRTP_AES_GCM_256_KEY_LEN_WSALT:
+        (*c)->type = &srtp_aes_gcm_256;
+        (*c)->algorithm = SRTP_AES_GCM_256;
+        gcm->key_size = SRTP_AES_256_KEY_LEN;
+        gcm->tag_size = tlen;
+        gcm->params.ulTagBits = 8 * tlen;
+        break;
+    default:
+        /* this should never hit, but to be sure... */
+        return (srtp_err_status_bad_param);
+    }
+
+    /* set key size and tag size*/
+    (*c)->key_len = key_len;
+
+    return (srtp_err_status_ok);
+}
+
+/*
+ * This function deallocates a GCM session
+ */
+static srtp_err_status_t srtp_aes_gcm_nss_dealloc(srtp_cipher_t *c)
+{
+    srtp_aes_gcm_ctx_t *ctx;
+
+    ctx = (srtp_aes_gcm_ctx_t *)c->state;
+    if (ctx) {
+        /* release NSS resources */
+        if (ctx->key) {
+            PK11_FreeSymKey(ctx->key);
+        }
+
+        if (ctx->nss) {
+            NSS_ShutdownContext(ctx->nss);
+            ctx->nss = NULL;
+        }
+
+        /* zeroize the key material */
+        octet_string_set_to_zero(ctx, sizeof(srtp_aes_gcm_ctx_t));
+        srtp_crypto_free(ctx);
+    }
+
+    /* free memory */
+    srtp_crypto_free(c);
+
+    return (srtp_err_status_ok);
+}
+
+/*
+ * aes_gcm_nss_context_init(...) initializes the aes_gcm_context
+ * using the value in key[].
+ *
+ * the key is the secret key
+ */
+static srtp_err_status_t srtp_aes_gcm_nss_context_init(void *cv,
+                                                       const uint8_t *key)
+{
+    srtp_aes_gcm_ctx_t *c = (srtp_aes_gcm_ctx_t *)cv;
+
+    c->dir = srtp_direction_any;
+
+    debug_print(srtp_mod_aes_gcm, "key:  %s",
+                srtp_octet_string_hex_string(key, c->key_size));
+
+    if (c->key) {
+        PK11_FreeSymKey(c->key);
+        c->key = NULL;
+    }
+
+    PK11SlotInfo *slot = PK11_GetBestSlot(CKM_AES_GCM, NULL);
+    if (!slot) {
+        return (srtp_err_status_cipher_fail);
+    }
+
+    SECItem key_item = { siBuffer, (unsigned char *)key, c->key_size };
+    c->key = PK11_ImportSymKey(slot, CKM_AES_GCM, PK11_OriginUnwrap,
+                               CKA_ENCRYPT, &key_item, NULL);
+    PK11_FreeSlot(slot);
+
+    if (!c->key) {
+        return (srtp_err_status_cipher_fail);
+    }
+
+    return (srtp_err_status_ok);
+}
+
+/*
+ * aes_gcm_nss_set_iv(c, iv) sets the counter value to the exor of iv with
+ * the offset
+ */
+static srtp_err_status_t srtp_aes_gcm_nss_set_iv(
+    void *cv,
+    uint8_t *iv,
+    srtp_cipher_direction_t direction)
+{
+    srtp_aes_gcm_ctx_t *c = (srtp_aes_gcm_ctx_t *)cv;
+
+    if (direction != srtp_direction_encrypt &&
+        direction != srtp_direction_decrypt) {
+        return (srtp_err_status_bad_param);
+    }
+    c->dir = direction;
+
+    debug_print(srtp_mod_aes_gcm, "setting iv: %s",
+                srtp_octet_string_hex_string(iv, GCM_IV_LEN));
+
+    memcpy(c->iv, iv, GCM_IV_LEN);
+
+    return (srtp_err_status_ok);
+}
+
+/*
+ * This function processes the AAD
+ *
+ * Parameters:
+ *	c	Crypto context
+ *	aad	Additional data to process for AEAD cipher suites
+ *	aad_len	length of aad buffer
+ */
+static srtp_err_status_t srtp_aes_gcm_nss_set_aad(void *cv,
+                                                  const uint8_t *aad,
+                                                  uint32_t aad_len)
+{
+    srtp_aes_gcm_ctx_t *c = (srtp_aes_gcm_ctx_t *)cv;
+
+    debug_print(srtp_mod_aes_gcm, "setting AAD: %s",
+                srtp_octet_string_hex_string(aad, aad_len));
+
+    if (aad_len + c->aad_size > MAX_AD_SIZE) {
+        return srtp_err_status_bad_param;
+    }
+
+    memcpy(c->aad + c->aad_size, aad, aad_len);
+    c->aad_size += aad_len;
+
+    return (srtp_err_status_ok);
+}
+
+static srtp_err_status_t srtp_aes_gcm_nss_do_crypto(void *cv,
+                                                    int encrypt,
+                                                    unsigned char *buf,
+                                                    unsigned int *enc_len)
+{
+    srtp_aes_gcm_ctx_t *c = (srtp_aes_gcm_ctx_t *)cv;
+
+    c->params.pIv = c->iv;
+    c->params.ulIvLen = GCM_IV_LEN;
+    c->params.pAAD = c->aad;
+    c->params.ulAADLen = c->aad_size;
+
+    // Reset AAD
+    c->aad_size = 0;
+
+    int rv;
+    SECItem param = { siBuffer, (unsigned char *)&c->params,
+                      sizeof(CK_GCM_PARAMS) };
+    if (encrypt) {
+        rv = PK11_Encrypt(c->key, CKM_AES_GCM, &param, buf, enc_len,
+                          *enc_len + 16, buf, *enc_len);
+    } else {
+        rv = PK11_Decrypt(c->key, CKM_AES_GCM, &param, buf, enc_len, *enc_len,
+                          buf, *enc_len);
+    }
+
+    srtp_err_status_t status = (srtp_err_status_ok);
+    if (rv != SECSuccess) {
+        status = (srtp_err_status_cipher_fail);
+    }
+
+    return status;
+}
+
+/*
+ * This function encrypts a buffer using AES GCM mode
+ *
+ * XXX(rlb@ipv.sx): We're required to break off and cache the tag
+ * here, because the get_tag() method is separate and the tests expect
+ * encrypt() not to change the size of the plaintext.  It might be
+ * good to update the calling API so that this is cleaner.
+ *
+ * Parameters:
+ *	c	Crypto context
+ *	buf	data to encrypt
+ *	enc_len	length of encrypt buffer
+ */
+static srtp_err_status_t srtp_aes_gcm_nss_encrypt(void *cv,
+                                                  unsigned char *buf,
+                                                  unsigned int *enc_len)
+{
+    srtp_aes_gcm_ctx_t *c = (srtp_aes_gcm_ctx_t *)cv;
+
+    // When we get a non-NULL buffer, we know that the caller is
+    // prepared to also take the tag.  When we get a NULL buffer,
+    // even though there's no data, we need to give NSS a buffer
+    // where it can write the tag.  We can't just use c->tag because
+    // memcpy has undefined behavior on overlapping ranges.
+    unsigned char tagbuf[16];
+    unsigned char *non_null_buf = buf;
+    if (!non_null_buf && (*enc_len == 0)) {
+        non_null_buf = tagbuf;
+    } else if (!non_null_buf) {
+        return srtp_err_status_bad_param;
+    }
+
+    srtp_err_status_t status =
+        srtp_aes_gcm_nss_do_crypto(cv, 1, non_null_buf, enc_len);
+    if (status != srtp_err_status_ok) {
+        return status;
+    }
+
+    memcpy(c->tag, non_null_buf + (*enc_len - c->tag_size), c->tag_size);
+    *enc_len -= c->tag_size;
+    return srtp_err_status_ok;
+}
+
+/*
+ * This function calculates and returns the GCM tag for a given context.
+ * This should be called after encrypting the data.  The *len value
+ * is increased by the tag size.  The caller must ensure that *buf has
+ * enough room to accept the appended tag.
+ *
+ * Parameters:
+ *	c	Crypto context
+ *	buf	data to encrypt
+ *	len	length of encrypt buffer
+ */
+static srtp_err_status_t srtp_aes_gcm_nss_get_tag(void *cv,
+                                                  uint8_t *buf,
+                                                  uint32_t *len)
+{
+    srtp_aes_gcm_ctx_t *c = (srtp_aes_gcm_ctx_t *)cv;
+    *len = c->tag_size;
+    memcpy(buf, c->tag, c->tag_size);
+    return (srtp_err_status_ok);
+}
+
+/*
+ * This function decrypts a buffer using AES GCM mode
+ *
+ * Parameters:
+ *	c	Crypto context
+ *	buf	data to encrypt
+ *	enc_len	length of encrypt buffer
+ */
+static srtp_err_status_t srtp_aes_gcm_nss_decrypt(void *cv,
+                                                  unsigned char *buf,
+                                                  unsigned int *enc_len)
+{
+    srtp_err_status_t status = srtp_aes_gcm_nss_do_crypto(cv, 0, buf, enc_len);
+    if (status != srtp_err_status_ok) {
+        int err = PR_GetError();
+        if (err == SEC_ERROR_BAD_DATA) {
+            status = srtp_err_status_auth_fail;
+        }
+    }
+
+    return status;
+}
+
+/*
+ * Name of this crypto engine
+ */
+static const char srtp_aes_gcm_128_nss_description[] = "AES-128 GCM using NSS";
+static const char srtp_aes_gcm_256_nss_description[] = "AES-256 GCM using NSS";
+
+/*
+ * KAT values for AES self-test.  These
+ * values we're derived from independent test code
+ * using OpenSSL.
+ */
+/* clang-format off */
+static const uint8_t srtp_aes_gcm_test_case_0_key[SRTP_AES_GCM_128_KEY_LEN_WSALT] = {
+    0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c,
+    0x6d, 0x6a, 0x8f, 0x94, 0x67, 0x30, 0x83, 0x08,
+    0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
+    0x09, 0x0a, 0x0b, 0x0c,
+};
+/* clang-format on */
+
+/* clang-format off */
+static uint8_t srtp_aes_gcm_test_case_0_iv[12] = {
+    0xca, 0xfe, 0xba, 0xbe, 0xfa, 0xce, 0xdb, 0xad,
+    0xde, 0xca, 0xf8, 0x88
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_gcm_test_case_0_plaintext[60] =  {
+    0xd9, 0x31, 0x32, 0x25, 0xf8, 0x84, 0x06, 0xe5,
+    0xa5, 0x59, 0x09, 0xc5, 0xaf, 0xf5, 0x26, 0x9a,
+    0x86, 0xa7, 0xa9, 0x53, 0x15, 0x34, 0xf7, 0xda,
+    0x2e, 0x4c, 0x30, 0x3d, 0x8a, 0x31, 0x8a, 0x72,
+    0x1c, 0x3c, 0x0c, 0x95, 0x95, 0x68, 0x09, 0x53,
+    0x2f, 0xcf, 0x0e, 0x24, 0x49, 0xa6, 0xb5, 0x25,
+    0xb1, 0x6a, 0xed, 0xf5, 0xaa, 0x0d, 0xe6, 0x57,
+    0xba, 0x63, 0x7b, 0x39
+};
+
+/* clang-format off */
+static const uint8_t srtp_aes_gcm_test_case_0_aad[20] = {
+    0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
+    0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
+    0xab, 0xad, 0xda, 0xd2
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_gcm_test_case_0_ciphertext[76] = {
+    0x42, 0x83, 0x1e, 0xc2, 0x21, 0x77, 0x74, 0x24,
+    0x4b, 0x72, 0x21, 0xb7, 0x84, 0xd0, 0xd4, 0x9c,
+    0xe3, 0xaa, 0x21, 0x2f, 0x2c, 0x02, 0xa4, 0xe0,
+    0x35, 0xc1, 0x7e, 0x23, 0x29, 0xac, 0xa1, 0x2e,
+    0x21, 0xd5, 0x14, 0xb2, 0x54, 0x66, 0x93, 0x1c,
+    0x7d, 0x8f, 0x6a, 0x5a, 0xac, 0x84, 0xaa, 0x05,
+    0x1b, 0xa3, 0x0b, 0x39, 0x6a, 0x0a, 0xac, 0x97,
+    0x3d, 0x58, 0xe0, 0x91,
+    /* the last 16 bytes are the tag */
+    0x5b, 0xc9, 0x4f, 0xbc, 0x32, 0x21, 0xa5, 0xdb,
+    0x94, 0xfa, 0xe9, 0x5a, 0xe7, 0x12, 0x1a, 0x47,
+};
+/* clang-format on */
+
+static const srtp_cipher_test_case_t srtp_aes_gcm_test_case_0a = {
+    SRTP_AES_GCM_128_KEY_LEN_WSALT,      /* octets in key            */
+    srtp_aes_gcm_test_case_0_key,        /* key                      */
+    srtp_aes_gcm_test_case_0_iv,         /* packet index             */
+    60,                                  /* octets in plaintext      */
+    srtp_aes_gcm_test_case_0_plaintext,  /* plaintext                */
+    68,                                  /* octets in ciphertext     */
+    srtp_aes_gcm_test_case_0_ciphertext, /* ciphertext  + tag        */
+    20,                                  /* octets in AAD            */
+    srtp_aes_gcm_test_case_0_aad,        /* AAD                      */
+    GCM_AUTH_TAG_LEN_8,                  /* */
+    NULL                                 /* pointer to next testcase */
+};
+
+static const srtp_cipher_test_case_t srtp_aes_gcm_test_case_0 = {
+    SRTP_AES_GCM_128_KEY_LEN_WSALT,      /* octets in key            */
+    srtp_aes_gcm_test_case_0_key,        /* key                      */
+    srtp_aes_gcm_test_case_0_iv,         /* packet index             */
+    60,                                  /* octets in plaintext      */
+    srtp_aes_gcm_test_case_0_plaintext,  /* plaintext                */
+    76,                                  /* octets in ciphertext     */
+    srtp_aes_gcm_test_case_0_ciphertext, /* ciphertext  + tag        */
+    20,                                  /* octets in AAD            */
+    srtp_aes_gcm_test_case_0_aad,        /* AAD                      */
+    GCM_AUTH_TAG_LEN,                    /* */
+    &srtp_aes_gcm_test_case_0a           /* pointer to next testcase */
+};
+
+/* clang-format off */
+static const uint8_t srtp_aes_gcm_test_case_1_key[SRTP_AES_GCM_256_KEY_LEN_WSALT] = {
+    0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c,
+    0xa5, 0x59, 0x09, 0xc5, 0x54, 0x66, 0x93, 0x1c,
+    0xaf, 0xf5, 0x26, 0x9a, 0x21, 0xd5, 0x14, 0xb2,
+    0x6d, 0x6a, 0x8f, 0x94, 0x67, 0x30, 0x83, 0x08,
+    0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
+    0x09, 0x0a, 0x0b, 0x0c,
+};
+/* clang-format on */
+
+/* clang-format off */
+static uint8_t srtp_aes_gcm_test_case_1_iv[12] = {
+    0xca, 0xfe, 0xba, 0xbe, 0xfa, 0xce, 0xdb, 0xad,
+    0xde, 0xca, 0xf8, 0x88
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_gcm_test_case_1_plaintext[60] =  {
+    0xd9, 0x31, 0x32, 0x25, 0xf8, 0x84, 0x06, 0xe5,
+    0xa5, 0x59, 0x09, 0xc5, 0xaf, 0xf5, 0x26, 0x9a,
+    0x86, 0xa7, 0xa9, 0x53, 0x15, 0x34, 0xf7, 0xda,
+    0x2e, 0x4c, 0x30, 0x3d, 0x8a, 0x31, 0x8a, 0x72,
+    0x1c, 0x3c, 0x0c, 0x95, 0x95, 0x68, 0x09, 0x53,
+    0x2f, 0xcf, 0x0e, 0x24, 0x49, 0xa6, 0xb5, 0x25,
+    0xb1, 0x6a, 0xed, 0xf5, 0xaa, 0x0d, 0xe6, 0x57,
+    0xba, 0x63, 0x7b, 0x39
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_gcm_test_case_1_aad[20] = {
+    0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
+    0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
+    0xab, 0xad, 0xda, 0xd2
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_gcm_test_case_1_ciphertext[76] = {
+    0x0b, 0x11, 0xcf, 0xaf, 0x68, 0x4d, 0xae, 0x46,
+    0xc7, 0x90, 0xb8, 0x8e, 0xb7, 0x6a, 0x76, 0x2a,
+    0x94, 0x82, 0xca, 0xab, 0x3e, 0x39, 0xd7, 0x86,
+    0x1b, 0xc7, 0x93, 0xed, 0x75, 0x7f, 0x23, 0x5a,
+    0xda, 0xfd, 0xd3, 0xe2, 0x0e, 0x80, 0x87, 0xa9,
+    0x6d, 0xd7, 0xe2, 0x6a, 0x7d, 0x5f, 0xb4, 0x80,
+    0xef, 0xef, 0xc5, 0x29, 0x12, 0xd1, 0xaa, 0x10,
+    0x09, 0xc9, 0x86, 0xc1,
+    /* the last 16 bytes are the tag */
+    0x45, 0xbc, 0x03, 0xe6, 0xe1, 0xac, 0x0a, 0x9f,
+    0x81, 0xcb, 0x8e, 0x5b, 0x46, 0x65, 0x63, 0x1d,
+};
+/* clang-format on */
+
+static const srtp_cipher_test_case_t srtp_aes_gcm_test_case_1a = {
+    SRTP_AES_GCM_256_KEY_LEN_WSALT,      /* octets in key            */
+    srtp_aes_gcm_test_case_1_key,        /* key                      */
+    srtp_aes_gcm_test_case_1_iv,         /* packet index             */
+    60,                                  /* octets in plaintext      */
+    srtp_aes_gcm_test_case_1_plaintext,  /* plaintext                */
+    68,                                  /* octets in ciphertext     */
+    srtp_aes_gcm_test_case_1_ciphertext, /* ciphertext  + tag        */
+    20,                                  /* octets in AAD            */
+    srtp_aes_gcm_test_case_1_aad,        /* AAD                      */
+    GCM_AUTH_TAG_LEN_8,                  /* */
+    NULL                                 /* pointer to next testcase */
+};
+
+static const srtp_cipher_test_case_t srtp_aes_gcm_test_case_1 = {
+    SRTP_AES_GCM_256_KEY_LEN_WSALT,      /* octets in key            */
+    srtp_aes_gcm_test_case_1_key,        /* key                      */
+    srtp_aes_gcm_test_case_1_iv,         /* packet index             */
+    60,                                  /* octets in plaintext      */
+    srtp_aes_gcm_test_case_1_plaintext,  /* plaintext                */
+    76,                                  /* octets in ciphertext     */
+    srtp_aes_gcm_test_case_1_ciphertext, /* ciphertext  + tag        */
+    20,                                  /* octets in AAD            */
+    srtp_aes_gcm_test_case_1_aad,        /* AAD                      */
+    GCM_AUTH_TAG_LEN,                    /* */
+    &srtp_aes_gcm_test_case_1a           /* pointer to next testcase */
+};
+
+/*
+ * This is the vector function table for this crypto engine.
+ */
+/* clang-format off */
+const srtp_cipher_type_t srtp_aes_gcm_128 = {
+    srtp_aes_gcm_nss_alloc,
+    srtp_aes_gcm_nss_dealloc,
+    srtp_aes_gcm_nss_context_init,
+    srtp_aes_gcm_nss_set_aad,
+    srtp_aes_gcm_nss_encrypt,
+    srtp_aes_gcm_nss_decrypt,
+    srtp_aes_gcm_nss_set_iv,
+    srtp_aes_gcm_nss_get_tag,
+    srtp_aes_gcm_128_nss_description,
+    &srtp_aes_gcm_test_case_0,
+    SRTP_AES_GCM_128
+};
+/* clang-format on */
+
+/*
+ * This is the vector function table for this crypto engine.
+ */
+/* clang-format off */
+const srtp_cipher_type_t srtp_aes_gcm_256 = {
+    srtp_aes_gcm_nss_alloc,
+    srtp_aes_gcm_nss_dealloc,
+    srtp_aes_gcm_nss_context_init,
+    srtp_aes_gcm_nss_set_aad,
+    srtp_aes_gcm_nss_encrypt,
+    srtp_aes_gcm_nss_decrypt,
+    srtp_aes_gcm_nss_set_iv,
+    srtp_aes_gcm_nss_get_tag,
+    srtp_aes_gcm_256_nss_description,
+    &srtp_aes_gcm_test_case_1,
+    SRTP_AES_GCM_256
+};
+/* clang-format on */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_gcm_ossl.c b/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_gcm_ossl.c
new file mode 100644
index 000000000..90d5e3b4e
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_gcm_ossl.c
@@ -0,0 +1,583 @@
+/*
+ * aes_gcm_ossl.c
+ *
+ * AES Galois Counter Mode
+ *
+ * John A. Foley
+ * Cisco Systems, Inc.
+ *
+ */
+
+/*
+ *
+ * Copyright (c) 2013-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include <openssl/evp.h>
+#include "aes_gcm.h"
+#include "alloc.h"
+#include "err.h" /* for srtp_debug */
+#include "crypto_types.h"
+#include "cipher_types.h"
+
+srtp_debug_module_t srtp_mod_aes_gcm = {
+    0,        /* debugging is off by default */
+    "aes gcm" /* printable module name       */
+};
+
+/*
+ * For now we only support 8 and 16 octet tags.  The spec allows for
+ * optional 12 byte tag, which may be supported in the future.
+ */
+#define GCM_AUTH_TAG_LEN 16
+#define GCM_AUTH_TAG_LEN_8 8
+
+/*
+ * This function allocates a new instance of this crypto engine.
+ * The key_len parameter should be one of 28 or 44 for
+ * AES-128-GCM or AES-256-GCM respectively.  Note that the
+ * key length includes the 14 byte salt value that is used when
+ * initializing the KDF.
+ */
+static srtp_err_status_t srtp_aes_gcm_openssl_alloc(srtp_cipher_t **c,
+                                                    int key_len,
+                                                    int tlen)
+{
+    srtp_aes_gcm_ctx_t *gcm;
+
+    debug_print(srtp_mod_aes_gcm, "allocating cipher with key length %d",
+                key_len);
+    debug_print(srtp_mod_aes_gcm, "allocating cipher with tag length %d", tlen);
+
+    /*
+     * Verify the key_len is valid for one of: AES-128/256
+     */
+    if (key_len != SRTP_AES_GCM_128_KEY_LEN_WSALT &&
+        key_len != SRTP_AES_GCM_256_KEY_LEN_WSALT) {
+        return (srtp_err_status_bad_param);
+    }
+
+    if (tlen != GCM_AUTH_TAG_LEN && tlen != GCM_AUTH_TAG_LEN_8) {
+        return (srtp_err_status_bad_param);
+    }
+
+    /* allocate memory a cipher of type aes_gcm */
+    *c = (srtp_cipher_t *)srtp_crypto_alloc(sizeof(srtp_cipher_t));
+    if (*c == NULL) {
+        return (srtp_err_status_alloc_fail);
+    }
+
+    gcm = (srtp_aes_gcm_ctx_t *)srtp_crypto_alloc(sizeof(srtp_aes_gcm_ctx_t));
+    if (gcm == NULL) {
+        srtp_crypto_free(*c);
+        *c = NULL;
+        return (srtp_err_status_alloc_fail);
+    }
+
+    gcm->ctx = EVP_CIPHER_CTX_new();
+    if (gcm->ctx == NULL) {
+        srtp_crypto_free(gcm);
+        srtp_crypto_free(*c);
+        *c = NULL;
+        return srtp_err_status_alloc_fail;
+    }
+
+    /* set pointers */
+    (*c)->state = gcm;
+
+    /* setup cipher attributes */
+    switch (key_len) {
+    case SRTP_AES_GCM_128_KEY_LEN_WSALT:
+        (*c)->type = &srtp_aes_gcm_128;
+        (*c)->algorithm = SRTP_AES_GCM_128;
+        gcm->key_size = SRTP_AES_128_KEY_LEN;
+        gcm->tag_len = tlen;
+        break;
+    case SRTP_AES_GCM_256_KEY_LEN_WSALT:
+        (*c)->type = &srtp_aes_gcm_256;
+        (*c)->algorithm = SRTP_AES_GCM_256;
+        gcm->key_size = SRTP_AES_256_KEY_LEN;
+        gcm->tag_len = tlen;
+        break;
+    }
+
+    /* set key size        */
+    (*c)->key_len = key_len;
+
+    return (srtp_err_status_ok);
+}
+
+/*
+ * This function deallocates a GCM session
+ */
+static srtp_err_status_t srtp_aes_gcm_openssl_dealloc(srtp_cipher_t *c)
+{
+    srtp_aes_gcm_ctx_t *ctx;
+
+    ctx = (srtp_aes_gcm_ctx_t *)c->state;
+    if (ctx) {
+        EVP_CIPHER_CTX_free(ctx->ctx);
+        /* zeroize the key material */
+        octet_string_set_to_zero(ctx, sizeof(srtp_aes_gcm_ctx_t));
+        srtp_crypto_free(ctx);
+    }
+
+    /* free memory */
+    srtp_crypto_free(c);
+
+    return (srtp_err_status_ok);
+}
+
+/*
+ * aes_gcm_openssl_context_init(...) initializes the aes_gcm_context
+ * using the value in key[].
+ *
+ * the key is the secret key
+ */
+static srtp_err_status_t srtp_aes_gcm_openssl_context_init(void *cv,
+                                                           const uint8_t *key)
+{
+    srtp_aes_gcm_ctx_t *c = (srtp_aes_gcm_ctx_t *)cv;
+    const EVP_CIPHER *evp;
+
+    c->dir = srtp_direction_any;
+
+    debug_print(srtp_mod_aes_gcm, "key:  %s",
+                srtp_octet_string_hex_string(key, c->key_size));
+
+    switch (c->key_size) {
+    case SRTP_AES_256_KEY_LEN:
+        evp = EVP_aes_256_gcm();
+        break;
+    case SRTP_AES_128_KEY_LEN:
+        evp = EVP_aes_128_gcm();
+        break;
+    default:
+        return (srtp_err_status_bad_param);
+        break;
+    }
+
+    EVP_CIPHER_CTX_cleanup(c->ctx);
+    if (!EVP_CipherInit_ex(c->ctx, evp, NULL, key, NULL, 0)) {
+        return (srtp_err_status_init_fail);
+    }
+
+    return (srtp_err_status_ok);
+}
+
+/*
+ * aes_gcm_openssl_set_iv(c, iv) sets the counter value to the exor of iv with
+ * the offset
+ */
+static srtp_err_status_t srtp_aes_gcm_openssl_set_iv(
+    void *cv,
+    uint8_t *iv,
+    srtp_cipher_direction_t direction)
+{
+    srtp_aes_gcm_ctx_t *c = (srtp_aes_gcm_ctx_t *)cv;
+
+    if (direction != srtp_direction_encrypt &&
+        direction != srtp_direction_decrypt) {
+        return (srtp_err_status_bad_param);
+    }
+    c->dir = direction;
+
+    debug_print(srtp_mod_aes_gcm, "setting iv: %s",
+                srtp_octet_string_hex_string(iv, 12));
+
+    if (!EVP_CIPHER_CTX_ctrl(c->ctx, EVP_CTRL_GCM_SET_IVLEN, 12, 0)) {
+        return (srtp_err_status_init_fail);
+    }
+
+    if (!EVP_CipherInit_ex(c->ctx, NULL, NULL, NULL, iv,
+                           (c->dir == srtp_direction_encrypt ? 1 : 0))) {
+        return (srtp_err_status_init_fail);
+    }
+
+    return (srtp_err_status_ok);
+}
+
+/*
+ * This function processes the AAD
+ *
+ * Parameters:
+ *	c	Crypto context
+ *	aad	Additional data to process for AEAD cipher suites
+ *	aad_len	length of aad buffer
+ */
+static srtp_err_status_t srtp_aes_gcm_openssl_set_aad(void *cv,
+                                                      const uint8_t *aad,
+                                                      uint32_t aad_len)
+{
+    srtp_aes_gcm_ctx_t *c = (srtp_aes_gcm_ctx_t *)cv;
+    int rv;
+
+    debug_print(srtp_mod_aes_gcm, "setting AAD: %s",
+                srtp_octet_string_hex_string(aad, aad_len));
+
+    /*
+     * Set dummy tag, OpenSSL requires the Tag to be set before
+     * processing AAD
+     */
+
+    /*
+     * OpenSSL never write to address pointed by the last parameter of
+     * EVP_CIPHER_CTX_ctrl while EVP_CTRL_GCM_SET_TAG (in reality,
+     * OpenSSL copy its content to the context), so we can make
+     * aad read-only in this function and all its wrappers.
+     */
+    unsigned char dummy_tag[GCM_AUTH_TAG_LEN];
+    memset(dummy_tag, 0x0, GCM_AUTH_TAG_LEN);
+    EVP_CIPHER_CTX_ctrl(c->ctx, EVP_CTRL_GCM_SET_TAG, c->tag_len, &dummy_tag);
+
+    rv = EVP_Cipher(c->ctx, NULL, aad, aad_len);
+    if (rv != aad_len) {
+        return (srtp_err_status_algo_fail);
+    } else {
+        return (srtp_err_status_ok);
+    }
+}
+
+/*
+ * This function encrypts a buffer using AES GCM mode
+ *
+ * Parameters:
+ *	c	Crypto context
+ *	buf	data to encrypt
+ *	enc_len	length of encrypt buffer
+ */
+static srtp_err_status_t srtp_aes_gcm_openssl_encrypt(void *cv,
+                                                      unsigned char *buf,
+                                                      unsigned int *enc_len)
+{
+    srtp_aes_gcm_ctx_t *c = (srtp_aes_gcm_ctx_t *)cv;
+    if (c->dir != srtp_direction_encrypt && c->dir != srtp_direction_decrypt) {
+        return (srtp_err_status_bad_param);
+    }
+
+    /*
+     * Encrypt the data
+     */
+    EVP_Cipher(c->ctx, buf, buf, *enc_len);
+
+    return (srtp_err_status_ok);
+}
+
+/*
+ * This function calculates and returns the GCM tag for a given context.
+ * This should be called after encrypting the data.  The *len value
+ * is increased by the tag size.  The caller must ensure that *buf has
+ * enough room to accept the appended tag.
+ *
+ * Parameters:
+ *	c	Crypto context
+ *	buf	data to encrypt
+ *	len	length of encrypt buffer
+ */
+static srtp_err_status_t srtp_aes_gcm_openssl_get_tag(void *cv,
+                                                      uint8_t *buf,
+                                                      uint32_t *len)
+{
+    srtp_aes_gcm_ctx_t *c = (srtp_aes_gcm_ctx_t *)cv;
+    /*
+     * Calculate the tag
+     */
+    EVP_Cipher(c->ctx, NULL, NULL, 0);
+
+    /*
+     * Retreive the tag
+     */
+    EVP_CIPHER_CTX_ctrl(c->ctx, EVP_CTRL_GCM_GET_TAG, c->tag_len, buf);
+
+    /*
+     * Increase encryption length by desired tag size
+     */
+    *len = c->tag_len;
+
+    return (srtp_err_status_ok);
+}
+
+/*
+ * This function decrypts a buffer using AES GCM mode
+ *
+ * Parameters:
+ *	c	Crypto context
+ *	buf	data to encrypt
+ *	enc_len	length of encrypt buffer
+ */
+static srtp_err_status_t srtp_aes_gcm_openssl_decrypt(void *cv,
+                                                      unsigned char *buf,
+                                                      unsigned int *enc_len)
+{
+    srtp_aes_gcm_ctx_t *c = (srtp_aes_gcm_ctx_t *)cv;
+    if (c->dir != srtp_direction_encrypt && c->dir != srtp_direction_decrypt) {
+        return (srtp_err_status_bad_param);
+    }
+
+    /*
+     * Set the tag before decrypting
+     */
+    EVP_CIPHER_CTX_ctrl(c->ctx, EVP_CTRL_GCM_SET_TAG, c->tag_len,
+                        buf + (*enc_len - c->tag_len));
+    EVP_Cipher(c->ctx, buf, buf, *enc_len - c->tag_len);
+
+    /*
+     * Check the tag
+     */
+    if (EVP_Cipher(c->ctx, NULL, NULL, 0)) {
+        return (srtp_err_status_auth_fail);
+    }
+
+    /*
+     * Reduce the buffer size by the tag length since the tag
+     * is not part of the original payload
+     */
+    *enc_len -= c->tag_len;
+
+    return (srtp_err_status_ok);
+}
+
+/*
+ * Name of this crypto engine
+ */
+static const char srtp_aes_gcm_128_openssl_description[] =
+    "AES-128 GCM using openssl";
+static const char srtp_aes_gcm_256_openssl_description[] =
+    "AES-256 GCM using openssl";
+
+/*
+ * KAT values for AES self-test.  These
+ * values we're derived from independent test code
+ * using OpenSSL.
+ */
+/* clang-format off */
+static const uint8_t srtp_aes_gcm_test_case_0_key[SRTP_AES_GCM_128_KEY_LEN_WSALT] = {
+    0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c,
+    0x6d, 0x6a, 0x8f, 0x94, 0x67, 0x30, 0x83, 0x08,
+    0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
+    0x09, 0x0a, 0x0b, 0x0c,
+};
+/* clang-format on */
+
+/* clang-format off */
+static uint8_t srtp_aes_gcm_test_case_0_iv[12] = {
+    0xca, 0xfe, 0xba, 0xbe, 0xfa, 0xce, 0xdb, 0xad,
+    0xde, 0xca, 0xf8, 0x88
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_gcm_test_case_0_plaintext[60] =  {
+    0xd9, 0x31, 0x32, 0x25, 0xf8, 0x84, 0x06, 0xe5,
+    0xa5, 0x59, 0x09, 0xc5, 0xaf, 0xf5, 0x26, 0x9a,
+    0x86, 0xa7, 0xa9, 0x53, 0x15, 0x34, 0xf7, 0xda,
+    0x2e, 0x4c, 0x30, 0x3d, 0x8a, 0x31, 0x8a, 0x72,
+    0x1c, 0x3c, 0x0c, 0x95, 0x95, 0x68, 0x09, 0x53,
+    0x2f, 0xcf, 0x0e, 0x24, 0x49, 0xa6, 0xb5, 0x25,
+    0xb1, 0x6a, 0xed, 0xf5, 0xaa, 0x0d, 0xe6, 0x57,
+    0xba, 0x63, 0x7b, 0x39
+};
+
+/* clang-format off */
+static const uint8_t srtp_aes_gcm_test_case_0_aad[20] = {
+    0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
+    0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
+    0xab, 0xad, 0xda, 0xd2
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_gcm_test_case_0_ciphertext[76] = {
+    0x42, 0x83, 0x1e, 0xc2, 0x21, 0x77, 0x74, 0x24,
+    0x4b, 0x72, 0x21, 0xb7, 0x84, 0xd0, 0xd4, 0x9c,
+    0xe3, 0xaa, 0x21, 0x2f, 0x2c, 0x02, 0xa4, 0xe0,
+    0x35, 0xc1, 0x7e, 0x23, 0x29, 0xac, 0xa1, 0x2e,
+    0x21, 0xd5, 0x14, 0xb2, 0x54, 0x66, 0x93, 0x1c,
+    0x7d, 0x8f, 0x6a, 0x5a, 0xac, 0x84, 0xaa, 0x05,
+    0x1b, 0xa3, 0x0b, 0x39, 0x6a, 0x0a, 0xac, 0x97,
+    0x3d, 0x58, 0xe0, 0x91,
+    /* the last 16 bytes are the tag */
+    0x5b, 0xc9, 0x4f, 0xbc, 0x32, 0x21, 0xa5, 0xdb,
+    0x94, 0xfa, 0xe9, 0x5a, 0xe7, 0x12, 0x1a, 0x47,
+};
+/* clang-format on */
+
+static const srtp_cipher_test_case_t srtp_aes_gcm_test_case_0a = {
+    SRTP_AES_GCM_128_KEY_LEN_WSALT,      /* octets in key            */
+    srtp_aes_gcm_test_case_0_key,        /* key                      */
+    srtp_aes_gcm_test_case_0_iv,         /* packet index             */
+    60,                                  /* octets in plaintext      */
+    srtp_aes_gcm_test_case_0_plaintext,  /* plaintext                */
+    68,                                  /* octets in ciphertext     */
+    srtp_aes_gcm_test_case_0_ciphertext, /* ciphertext  + tag        */
+    20,                                  /* octets in AAD            */
+    srtp_aes_gcm_test_case_0_aad,        /* AAD                      */
+    GCM_AUTH_TAG_LEN_8,                  /* */
+    NULL                                 /* pointer to next testcase */
+};
+
+static const srtp_cipher_test_case_t srtp_aes_gcm_test_case_0 = {
+    SRTP_AES_GCM_128_KEY_LEN_WSALT,      /* octets in key            */
+    srtp_aes_gcm_test_case_0_key,        /* key                      */
+    srtp_aes_gcm_test_case_0_iv,         /* packet index             */
+    60,                                  /* octets in plaintext      */
+    srtp_aes_gcm_test_case_0_plaintext,  /* plaintext                */
+    76,                                  /* octets in ciphertext     */
+    srtp_aes_gcm_test_case_0_ciphertext, /* ciphertext  + tag        */
+    20,                                  /* octets in AAD            */
+    srtp_aes_gcm_test_case_0_aad,        /* AAD                      */
+    GCM_AUTH_TAG_LEN,                    /* */
+    &srtp_aes_gcm_test_case_0a           /* pointer to next testcase */
+};
+
+/* clang-format off */
+static const uint8_t srtp_aes_gcm_test_case_1_key[SRTP_AES_GCM_256_KEY_LEN_WSALT] = {
+    0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c,
+    0xa5, 0x59, 0x09, 0xc5, 0x54, 0x66, 0x93, 0x1c,
+    0xaf, 0xf5, 0x26, 0x9a, 0x21, 0xd5, 0x14, 0xb2,
+    0x6d, 0x6a, 0x8f, 0x94, 0x67, 0x30, 0x83, 0x08,
+    0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08,
+    0x09, 0x0a, 0x0b, 0x0c,
+};
+/* clang-format on */
+
+/* clang-format off */
+static uint8_t srtp_aes_gcm_test_case_1_iv[12] = {
+    0xca, 0xfe, 0xba, 0xbe, 0xfa, 0xce, 0xdb, 0xad,
+    0xde, 0xca, 0xf8, 0x88
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_gcm_test_case_1_plaintext[60] =  {
+    0xd9, 0x31, 0x32, 0x25, 0xf8, 0x84, 0x06, 0xe5,
+    0xa5, 0x59, 0x09, 0xc5, 0xaf, 0xf5, 0x26, 0x9a,
+    0x86, 0xa7, 0xa9, 0x53, 0x15, 0x34, 0xf7, 0xda,
+    0x2e, 0x4c, 0x30, 0x3d, 0x8a, 0x31, 0x8a, 0x72,
+    0x1c, 0x3c, 0x0c, 0x95, 0x95, 0x68, 0x09, 0x53,
+    0x2f, 0xcf, 0x0e, 0x24, 0x49, 0xa6, 0xb5, 0x25,
+    0xb1, 0x6a, 0xed, 0xf5, 0xaa, 0x0d, 0xe6, 0x57,
+    0xba, 0x63, 0x7b, 0x39
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_gcm_test_case_1_aad[20] = {
+    0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
+    0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
+    0xab, 0xad, 0xda, 0xd2
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_gcm_test_case_1_ciphertext[76] = {
+    0x0b, 0x11, 0xcf, 0xaf, 0x68, 0x4d, 0xae, 0x46,
+    0xc7, 0x90, 0xb8, 0x8e, 0xb7, 0x6a, 0x76, 0x2a,
+    0x94, 0x82, 0xca, 0xab, 0x3e, 0x39, 0xd7, 0x86,
+    0x1b, 0xc7, 0x93, 0xed, 0x75, 0x7f, 0x23, 0x5a,
+    0xda, 0xfd, 0xd3, 0xe2, 0x0e, 0x80, 0x87, 0xa9,
+    0x6d, 0xd7, 0xe2, 0x6a, 0x7d, 0x5f, 0xb4, 0x80,
+    0xef, 0xef, 0xc5, 0x29, 0x12, 0xd1, 0xaa, 0x10,
+    0x09, 0xc9, 0x86, 0xc1,
+    /* the last 16 bytes are the tag */
+    0x45, 0xbc, 0x03, 0xe6, 0xe1, 0xac, 0x0a, 0x9f,
+    0x81, 0xcb, 0x8e, 0x5b, 0x46, 0x65, 0x63, 0x1d,
+};
+/* clang-format on */
+
+static const srtp_cipher_test_case_t srtp_aes_gcm_test_case_1a = {
+    SRTP_AES_GCM_256_KEY_LEN_WSALT,      /* octets in key            */
+    srtp_aes_gcm_test_case_1_key,        /* key                      */
+    srtp_aes_gcm_test_case_1_iv,         /* packet index             */
+    60,                                  /* octets in plaintext      */
+    srtp_aes_gcm_test_case_1_plaintext,  /* plaintext                */
+    68,                                  /* octets in ciphertext     */
+    srtp_aes_gcm_test_case_1_ciphertext, /* ciphertext  + tag        */
+    20,                                  /* octets in AAD            */
+    srtp_aes_gcm_test_case_1_aad,        /* AAD                      */
+    GCM_AUTH_TAG_LEN_8,                  /* */
+    NULL                                 /* pointer to next testcase */
+};
+
+static const srtp_cipher_test_case_t srtp_aes_gcm_test_case_1 = {
+    SRTP_AES_GCM_256_KEY_LEN_WSALT,      /* octets in key            */
+    srtp_aes_gcm_test_case_1_key,        /* key                      */
+    srtp_aes_gcm_test_case_1_iv,         /* packet index             */
+    60,                                  /* octets in plaintext      */
+    srtp_aes_gcm_test_case_1_plaintext,  /* plaintext                */
+    76,                                  /* octets in ciphertext     */
+    srtp_aes_gcm_test_case_1_ciphertext, /* ciphertext  + tag        */
+    20,                                  /* octets in AAD            */
+    srtp_aes_gcm_test_case_1_aad,        /* AAD                      */
+    GCM_AUTH_TAG_LEN,                    /* */
+    &srtp_aes_gcm_test_case_1a           /* pointer to next testcase */
+};
+
+/*
+ * This is the vector function table for this crypto engine.
+ */
+const srtp_cipher_type_t srtp_aes_gcm_128 = {
+    srtp_aes_gcm_openssl_alloc,
+    srtp_aes_gcm_openssl_dealloc,
+    srtp_aes_gcm_openssl_context_init,
+    srtp_aes_gcm_openssl_set_aad,
+    srtp_aes_gcm_openssl_encrypt,
+    srtp_aes_gcm_openssl_decrypt,
+    srtp_aes_gcm_openssl_set_iv,
+    srtp_aes_gcm_openssl_get_tag,
+    srtp_aes_gcm_128_openssl_description,
+    &srtp_aes_gcm_test_case_0,
+    SRTP_AES_GCM_128
+};
+
+/*
+ * This is the vector function table for this crypto engine.
+ */
+const srtp_cipher_type_t srtp_aes_gcm_256 = {
+    srtp_aes_gcm_openssl_alloc,
+    srtp_aes_gcm_openssl_dealloc,
+    srtp_aes_gcm_openssl_context_init,
+    srtp_aes_gcm_openssl_set_aad,
+    srtp_aes_gcm_openssl_encrypt,
+    srtp_aes_gcm_openssl_decrypt,
+    srtp_aes_gcm_openssl_set_iv,
+    srtp_aes_gcm_openssl_get_tag,
+    srtp_aes_gcm_256_openssl_description,
+    &srtp_aes_gcm_test_case_1,
+    SRTP_AES_GCM_256
+};
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_icm.c b/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_icm.c
new file mode 100644
index 000000000..7551c7514
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_icm.c
@@ -0,0 +1,530 @@
+/*
+ * aes_icm.c
+ *
+ * AES Integer Counter Mode
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#define ALIGN_32 0
+
+#include "aes_icm.h"
+#include "alloc.h"
+#include "cipher_types.h"
+
+srtp_debug_module_t srtp_mod_aes_icm = {
+    0,        /* debugging is off by default */
+    "aes icm" /* printable module name       */
+};
+
+/*
+ * integer counter mode works as follows:
+ *
+ * 16 bits
+ * <----->
+ * +------+------+------+------+------+------+------+------+
+ * |           nonce           |    pakcet index    |  ctr |---+
+ * +------+------+------+------+------+------+------+------+   |
+ *                                                             |
+ * +------+------+------+------+------+------+------+------+   v
+ * |                      salt                      |000000|->(+)
+ * +------+------+------+------+------+------+------+------+   |
+ *                                                             |
+ *                                                        +---------+
+ *							  | encrypt |
+ *							  +---------+
+ *							       |
+ * +------+------+------+------+------+------+------+------+   |
+ * |                    keystream block                    |<--+
+ * +------+------+------+------+------+------+------+------+
+ *
+ * All fields are big-endian
+ *
+ * ctr is the block counter, which increments from zero for
+ * each packet (16 bits wide)
+ *
+ * packet index is distinct for each packet (48 bits wide)
+ *
+ * nonce can be distinct across many uses of the same key, or
+ * can be a fixed value per key, or can be per-packet randomness
+ * (64 bits)
+ *
+ */
+
+static srtp_err_status_t srtp_aes_icm_alloc(srtp_cipher_t **c,
+                                            int key_len,
+                                            int tlen)
+{
+    srtp_aes_icm_ctx_t *icm;
+
+    debug_print(srtp_mod_aes_icm, "allocating cipher with key length %d",
+                key_len);
+
+    /*
+     * The check for key_len = 30/46 does not apply. Our usage
+     * of aes functions with key_len = values other than 30
+     * has not broken anything. Don't know what would be the
+     * effect of skipping this check for srtp in general.
+     */
+    if (key_len != SRTP_AES_ICM_128_KEY_LEN_WSALT &&
+        key_len != SRTP_AES_ICM_256_KEY_LEN_WSALT) {
+        return srtp_err_status_bad_param;
+    }
+
+    /* allocate memory a cipher of type aes_icm */
+    *c = (srtp_cipher_t *)srtp_crypto_alloc(sizeof(srtp_cipher_t));
+    if (*c == NULL) {
+        return srtp_err_status_alloc_fail;
+    }
+
+    icm = (srtp_aes_icm_ctx_t *)srtp_crypto_alloc(sizeof(srtp_aes_icm_ctx_t));
+    if (icm == NULL) {
+        srtp_crypto_free(*c);
+        *c = NULL;
+        return srtp_err_status_alloc_fail;
+    }
+
+    /* set pointers */
+    (*c)->state = icm;
+
+    switch (key_len) {
+    case SRTP_AES_ICM_256_KEY_LEN_WSALT:
+        (*c)->algorithm = SRTP_AES_ICM_256;
+        (*c)->type = &srtp_aes_icm_256;
+        break;
+    default:
+        (*c)->algorithm = SRTP_AES_ICM_128;
+        (*c)->type = &srtp_aes_icm_128;
+        break;
+    }
+
+    /* set key size        */
+    icm->key_size = key_len;
+    (*c)->key_len = key_len;
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_aes_icm_dealloc(srtp_cipher_t *c)
+{
+    srtp_aes_icm_ctx_t *ctx;
+
+    if (c == NULL) {
+        return srtp_err_status_bad_param;
+    }
+
+    ctx = (srtp_aes_icm_ctx_t *)c->state;
+    if (ctx) {
+        /* zeroize the key material */
+        octet_string_set_to_zero(ctx, sizeof(srtp_aes_icm_ctx_t));
+        srtp_crypto_free(ctx);
+    }
+
+    /* free the cipher context */
+    srtp_crypto_free(c);
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * aes_icm_context_init(...) initializes the aes_icm_context
+ * using the value in key[].
+ *
+ * the key is the secret key
+ *
+ * the salt is unpredictable (but not necessarily secret) data which
+ * randomizes the starting point in the keystream
+ */
+
+static srtp_err_status_t srtp_aes_icm_context_init(void *cv, const uint8_t *key)
+{
+    srtp_aes_icm_ctx_t *c = (srtp_aes_icm_ctx_t *)cv;
+    srtp_err_status_t status;
+    int base_key_len, copy_len;
+
+    if (c->key_size == SRTP_AES_ICM_128_KEY_LEN_WSALT ||
+        c->key_size == SRTP_AES_ICM_256_KEY_LEN_WSALT) {
+        base_key_len = c->key_size - SRTP_SALT_LEN;
+    } else {
+        return srtp_err_status_bad_param;
+    }
+
+    /*
+     * set counter and initial values to 'offset' value, being careful not to
+     * go past the end of the key buffer
+     */
+    v128_set_to_zero(&c->counter);
+    v128_set_to_zero(&c->offset);
+
+    copy_len = c->key_size - base_key_len;
+    /* force last two octets of the offset to be left zero (for srtp
+     * compatibility) */
+    if (copy_len > SRTP_SALT_LEN) {
+        copy_len = SRTP_SALT_LEN;
+    }
+
+    memcpy(&c->counter, key + base_key_len, copy_len);
+    memcpy(&c->offset, key + base_key_len, copy_len);
+
+    debug_print(srtp_mod_aes_icm, "key:  %s",
+                srtp_octet_string_hex_string(key, base_key_len));
+    debug_print(srtp_mod_aes_icm, "offset: %s", v128_hex_string(&c->offset));
+
+    /* expand key */
+    status =
+        srtp_aes_expand_encryption_key(key, base_key_len, &c->expanded_key);
+    if (status) {
+        v128_set_to_zero(&c->counter);
+        v128_set_to_zero(&c->offset);
+        return status;
+    }
+
+    /* indicate that the keystream_buffer is empty */
+    c->bytes_in_buffer = 0;
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * aes_icm_set_iv(c, iv) sets the counter value to the exor of iv with
+ * the offset
+ */
+
+static srtp_err_status_t srtp_aes_icm_set_iv(void *cv,
+                                             uint8_t *iv,
+                                             srtp_cipher_direction_t direction)
+{
+    srtp_aes_icm_ctx_t *c = (srtp_aes_icm_ctx_t *)cv;
+    v128_t nonce;
+
+    /* set nonce (for alignment) */
+    v128_copy_octet_string(&nonce, iv);
+
+    debug_print(srtp_mod_aes_icm, "setting iv: %s", v128_hex_string(&nonce));
+
+    v128_xor(&c->counter, &c->offset, &nonce);
+
+    debug_print(srtp_mod_aes_icm, "set_counter: %s",
+                v128_hex_string(&c->counter));
+
+    /* indicate that the keystream_buffer is empty */
+    c->bytes_in_buffer = 0;
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * aes_icm_advance(...) refills the keystream_buffer and
+ * advances the block index of the sicm_context forward by one
+ *
+ * this is an internal, hopefully inlined function
+ */
+static void srtp_aes_icm_advance(srtp_aes_icm_ctx_t *c)
+{
+    /* fill buffer with new keystream */
+    v128_copy(&c->keystream_buffer, &c->counter);
+    srtp_aes_encrypt(&c->keystream_buffer, &c->expanded_key);
+    c->bytes_in_buffer = sizeof(v128_t);
+
+    debug_print(srtp_mod_aes_icm, "counter:    %s",
+                v128_hex_string(&c->counter));
+    debug_print(srtp_mod_aes_icm, "ciphertext: %s",
+                v128_hex_string(&c->keystream_buffer));
+
+    /* clock counter forward */
+    if (!++(c->counter.v8[15])) {
+        ++(c->counter.v8[14]);
+    }
+}
+
+/*
+ * icm_encrypt deals with the following cases:
+ *
+ * bytes_to_encr < bytes_in_buffer
+ *  - add keystream into data
+ *
+ * bytes_to_encr > bytes_in_buffer
+ *  - add keystream into data until keystream_buffer is depleted
+ *  - loop over blocks, filling keystream_buffer and then
+ *    adding keystream into data
+ *  - fill buffer then add in remaining (< 16) bytes of keystream
+ */
+
+static srtp_err_status_t srtp_aes_icm_encrypt(void *cv,
+                                              unsigned char *buf,
+                                              unsigned int *enc_len)
+{
+    srtp_aes_icm_ctx_t *c = (srtp_aes_icm_ctx_t *)cv;
+    unsigned int bytes_to_encr = *enc_len;
+    unsigned int i;
+    uint32_t *b;
+
+    /* check that there's enough segment left*/
+    if ((bytes_to_encr + htons(c->counter.v16[7])) > 0xffff) {
+        return srtp_err_status_terminus;
+    }
+
+    debug_print(srtp_mod_aes_icm, "block index: %d", htons(c->counter.v16[7]));
+    if (bytes_to_encr <= (unsigned int)c->bytes_in_buffer) {
+        /* deal with odd case of small bytes_to_encr */
+        for (i = (sizeof(v128_t) - c->bytes_in_buffer);
+             i < (sizeof(v128_t) - c->bytes_in_buffer + bytes_to_encr); i++) {
+            *buf++ ^= c->keystream_buffer.v8[i];
+        }
+
+        c->bytes_in_buffer -= bytes_to_encr;
+
+        /* return now to avoid the main loop */
+        return srtp_err_status_ok;
+
+    } else {
+        /* encrypt bytes until the remaining data is 16-byte aligned */
+        for (i = (sizeof(v128_t) - c->bytes_in_buffer); i < sizeof(v128_t);
+             i++) {
+            *buf++ ^= c->keystream_buffer.v8[i];
+        }
+
+        bytes_to_encr -= c->bytes_in_buffer;
+        c->bytes_in_buffer = 0;
+    }
+
+    /* now loop over entire 16-byte blocks of keystream */
+    for (i = 0; i < (bytes_to_encr / sizeof(v128_t)); i++) {
+        /* fill buffer with new keystream */
+        srtp_aes_icm_advance(c);
+
+/*
+ * add keystream into the data buffer (this would be a lot faster
+ * if we could assume 32-bit alignment!)
+ */
+
+#if ALIGN_32
+        b = (uint32_t *)buf;
+        *b++ ^= c->keystream_buffer.v32[0];
+        *b++ ^= c->keystream_buffer.v32[1];
+        *b++ ^= c->keystream_buffer.v32[2];
+        *b++ ^= c->keystream_buffer.v32[3];
+        buf = (uint8_t *)b;
+#else
+        if ((((uintptr_t)buf) & 0x03) != 0) {
+            *buf++ ^= c->keystream_buffer.v8[0];
+            *buf++ ^= c->keystream_buffer.v8[1];
+            *buf++ ^= c->keystream_buffer.v8[2];
+            *buf++ ^= c->keystream_buffer.v8[3];
+            *buf++ ^= c->keystream_buffer.v8[4];
+            *buf++ ^= c->keystream_buffer.v8[5];
+            *buf++ ^= c->keystream_buffer.v8[6];
+            *buf++ ^= c->keystream_buffer.v8[7];
+            *buf++ ^= c->keystream_buffer.v8[8];
+            *buf++ ^= c->keystream_buffer.v8[9];
+            *buf++ ^= c->keystream_buffer.v8[10];
+            *buf++ ^= c->keystream_buffer.v8[11];
+            *buf++ ^= c->keystream_buffer.v8[12];
+            *buf++ ^= c->keystream_buffer.v8[13];
+            *buf++ ^= c->keystream_buffer.v8[14];
+            *buf++ ^= c->keystream_buffer.v8[15];
+        } else {
+            b = (uint32_t *)buf;
+            *b++ ^= c->keystream_buffer.v32[0];
+            *b++ ^= c->keystream_buffer.v32[1];
+            *b++ ^= c->keystream_buffer.v32[2];
+            *b++ ^= c->keystream_buffer.v32[3];
+            buf = (uint8_t *)b;
+        }
+#endif /* #if ALIGN_32 */
+    }
+
+    /* if there is a tail end of the data, process it */
+    if ((bytes_to_encr & 0xf) != 0) {
+        /* fill buffer with new keystream */
+        srtp_aes_icm_advance(c);
+
+        for (i = 0; i < (bytes_to_encr & 0xf); i++) {
+            *buf++ ^= c->keystream_buffer.v8[i];
+        }
+
+        /* reset the keystream buffer size to right value */
+        c->bytes_in_buffer = sizeof(v128_t) - i;
+    } else {
+        /* no tail, so just reset the keystream buffer size to zero */
+        c->bytes_in_buffer = 0;
+    }
+
+    return srtp_err_status_ok;
+}
+
+static const char srtp_aes_icm_128_description[] =
+    "AES-128 integer counter mode";
+static const char srtp_aes_icm_256_description[] =
+    "AES-256 integer counter mode";
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_128_test_case_0_key[SRTP_AES_ICM_128_KEY_LEN_WSALT] = {
+    0x2b, 0x7e, 0x15, 0x16, 0x28, 0xae, 0xd2, 0xa6,
+    0xab, 0xf7, 0x15, 0x88, 0x09, 0xcf, 0x4f, 0x3c,
+    0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
+    0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd
+};
+/* clang-format on */
+
+/* clang-format off */
+static uint8_t srtp_aes_icm_128_test_case_0_nonce[16] = {
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_128_test_case_0_plaintext[32] =  {
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_128_test_case_0_ciphertext[32] = {
+    0xe0, 0x3e, 0xad, 0x09, 0x35, 0xc9, 0x5e, 0x80,
+    0xe1, 0x66, 0xb1, 0x6d, 0xd9, 0x2b, 0x4e, 0xb4,
+    0xd2, 0x35, 0x13, 0x16, 0x2b, 0x02, 0xd0, 0xf7,
+    0x2a, 0x43, 0xa2, 0xfe, 0x4a, 0x5f, 0x97, 0xab
+};
+/* clang-format on */
+
+static const srtp_cipher_test_case_t srtp_aes_icm_128_test_case_0 = {
+    SRTP_AES_ICM_128_KEY_LEN_WSALT,          /* octets in key            */
+    srtp_aes_icm_128_test_case_0_key,        /* key                      */
+    srtp_aes_icm_128_test_case_0_nonce,      /* packet index             */
+    32,                                      /* octets in plaintext      */
+    srtp_aes_icm_128_test_case_0_plaintext,  /* plaintext                */
+    32,                                      /* octets in ciphertext     */
+    srtp_aes_icm_128_test_case_0_ciphertext, /* ciphertext               */
+    0,                                       /* */
+    NULL,                                    /* */
+    0,                                       /* */
+    NULL                                     /* pointer to next testcase */
+};
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_256_test_case_0_key[SRTP_AES_ICM_256_KEY_LEN_WSALT] = {
+    0x57, 0xf8, 0x2f, 0xe3, 0x61, 0x3f, 0xd1, 0x70,
+    0xa8, 0x5e, 0xc9, 0x3c, 0x40, 0xb1, 0xf0, 0x92,
+    0x2e, 0xc4, 0xcb, 0x0d, 0xc0, 0x25, 0xb5, 0x82,
+    0x72, 0x14, 0x7c, 0xc4, 0x38, 0x94, 0x4a, 0x98,
+    0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
+    0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd
+};
+/* clang-format on */
+
+/* clang-format off */
+static uint8_t srtp_aes_icm_256_test_case_0_nonce[16] = {
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_256_test_case_0_plaintext[32] =  {
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_256_test_case_0_ciphertext[32] = {
+    0x92, 0xbd, 0xd2, 0x8a, 0x93, 0xc3, 0xf5, 0x25,
+    0x11, 0xc6, 0x77, 0xd0, 0x8b, 0x55, 0x15, 0xa4,
+    0x9d, 0xa7, 0x1b, 0x23, 0x78, 0xa8, 0x54, 0xf6,
+    0x70, 0x50, 0x75, 0x6d, 0xed, 0x16, 0x5b, 0xac
+};
+/* clang-format on */
+
+static const srtp_cipher_test_case_t srtp_aes_icm_256_test_case_0 = {
+    SRTP_AES_ICM_256_KEY_LEN_WSALT,          /* octets in key            */
+    srtp_aes_icm_256_test_case_0_key,        /* key                      */
+    srtp_aes_icm_256_test_case_0_nonce,      /* packet index             */
+    32,                                      /* octets in plaintext      */
+    srtp_aes_icm_256_test_case_0_plaintext,  /* plaintext                */
+    32,                                      /* octets in ciphertext     */
+    srtp_aes_icm_256_test_case_0_ciphertext, /* ciphertext               */
+    0,                                       /* */
+    NULL,                                    /* */
+    0,                                       /* */
+    NULL,                                    /* pointer to next testcase */
+};
+
+/*
+ * note: the encrypt function is identical to the decrypt function
+ */
+
+const srtp_cipher_type_t srtp_aes_icm_128 = {
+    srtp_aes_icm_alloc,            /* */
+    srtp_aes_icm_dealloc,          /* */
+    srtp_aes_icm_context_init,     /* */
+    0,                             /* set_aad */
+    srtp_aes_icm_encrypt,          /* */
+    srtp_aes_icm_encrypt,          /* */
+    srtp_aes_icm_set_iv,           /* */
+    0,                             /* get_tag */
+    srtp_aes_icm_128_description,  /* */
+    &srtp_aes_icm_128_test_case_0, /* */
+    SRTP_AES_ICM_128               /* */
+};
+
+const srtp_cipher_type_t srtp_aes_icm_256 = {
+    srtp_aes_icm_alloc,            /* */
+    srtp_aes_icm_dealloc,          /* */
+    srtp_aes_icm_context_init,     /* */
+    0,                             /* set_aad */
+    srtp_aes_icm_encrypt,          /* */
+    srtp_aes_icm_encrypt,          /* */
+    srtp_aes_icm_set_iv,           /* */
+    0,                             /* get_tag */
+    srtp_aes_icm_256_description,  /* */
+    &srtp_aes_icm_256_test_case_0, /* */
+    SRTP_AES_ICM_256               /* */
+};
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_icm_nss.c b/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_icm_nss.c
new file mode 100644
index 000000000..d161b8f56
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_icm_nss.c
@@ -0,0 +1,562 @@
+/*
+ * aes_icm_nss.c
+ *
+ * AES Integer Counter Mode
+ *
+ * Richard L. Barnes
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2013-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "aes_icm_ext.h"
+#include "crypto_types.h"
+#include "err.h" /* for srtp_debug */
+#include "alloc.h"
+#include "cipher_types.h"
+
+srtp_debug_module_t srtp_mod_aes_icm = {
+    0,            /* debugging is off by default */
+    "aes icm nss" /* printable module name       */
+};
+
+/*
+ * integer counter mode works as follows:
+ *
+ * 16 bits
+ * <----->
+ * +------+------+------+------+------+------+------+------+
+ * |           nonce           |    packet index    |  ctr |---+
+ * +------+------+------+------+------+------+------+------+   |
+ *                                                             |
+ * +------+------+------+------+------+------+------+------+   v
+ * |                      salt                      |000000|->(+)
+ * +------+------+------+------+------+------+------+------+   |
+ *                                                             |
+ *                                                        +---------+
+ *                                                        | encrypt |
+ *                                                        +---------+
+ *                                                             |
+ * +------+------+------+------+------+------+------+------+   |
+ * |                    keystream block                    |<--+
+ * +------+------+------+------+------+------+------+------+
+ *
+ * All fields are big-endian
+ *
+ * ctr is the block counter, which increments from zero for
+ * each packet (16 bits wide)
+ *
+ * packet index is distinct for each packet (48 bits wide)
+ *
+ * nonce can be distinct across many uses of the same key, or
+ * can be a fixed value per key, or can be per-packet randomness
+ * (64 bits)
+ *
+ */
+
+/*
+ * This function allocates a new instance of this crypto engine.
+ * The key_len parameter should be one of 30, 38, or 46 for
+ * AES-128, AES-192, and AES-256 respectively.  Note, this key_len
+ * value is inflated, as it also accounts for the 112 bit salt
+ * value.  The tlen argument is for the AEAD tag length, which
+ * isn't used in counter mode.
+ */
+static srtp_err_status_t srtp_aes_icm_nss_alloc(srtp_cipher_t **c,
+                                                int key_len,
+                                                int tlen)
+{
+    srtp_aes_icm_ctx_t *icm;
+    NSSInitContext *nss;
+
+    debug_print(srtp_mod_aes_icm, "allocating cipher with key length %d",
+                key_len);
+
+    /*
+     * Verify the key_len is valid for one of: AES-128/192/256
+     */
+    if (key_len != SRTP_AES_ICM_128_KEY_LEN_WSALT &&
+        key_len != SRTP_AES_ICM_192_KEY_LEN_WSALT &&
+        key_len != SRTP_AES_ICM_256_KEY_LEN_WSALT) {
+        return srtp_err_status_bad_param;
+    }
+
+    /* Initialize NSS equiv of NSS_NoDB_Init(NULL) */
+    nss = NSS_InitContext("", "", "", "", NULL,
+                          NSS_INIT_READONLY | NSS_INIT_NOCERTDB |
+                              NSS_INIT_NOMODDB | NSS_INIT_FORCEOPEN |
+                              NSS_INIT_OPTIMIZESPACE);
+    if (!nss) {
+        return (srtp_err_status_cipher_fail);
+    }
+
+    /* allocate memory a cipher of type aes_icm */
+    *c = (srtp_cipher_t *)srtp_crypto_alloc(sizeof(srtp_cipher_t));
+    if (*c == NULL) {
+        NSS_ShutdownContext(nss);
+        return srtp_err_status_alloc_fail;
+    }
+
+    icm = (srtp_aes_icm_ctx_t *)srtp_crypto_alloc(sizeof(srtp_aes_icm_ctx_t));
+    if (icm == NULL) {
+        NSS_ShutdownContext(nss);
+        srtp_crypto_free(*c);
+        *c = NULL;
+        return srtp_err_status_alloc_fail;
+    }
+
+    icm->key = NULL;
+    icm->ctx = NULL;
+    icm->nss = nss;
+
+    /* set pointers */
+    (*c)->state = icm;
+
+    /* setup cipher parameters */
+    switch (key_len) {
+    case SRTP_AES_ICM_128_KEY_LEN_WSALT:
+        (*c)->algorithm = SRTP_AES_ICM_128;
+        (*c)->type = &srtp_aes_icm_128;
+        icm->key_size = SRTP_AES_128_KEY_LEN;
+        break;
+    case SRTP_AES_ICM_192_KEY_LEN_WSALT:
+        (*c)->algorithm = SRTP_AES_ICM_192;
+        (*c)->type = &srtp_aes_icm_192;
+        icm->key_size = SRTP_AES_192_KEY_LEN;
+        break;
+    case SRTP_AES_ICM_256_KEY_LEN_WSALT:
+        (*c)->algorithm = SRTP_AES_ICM_256;
+        (*c)->type = &srtp_aes_icm_256;
+        icm->key_size = SRTP_AES_256_KEY_LEN;
+        break;
+    }
+
+    /* set key size        */
+    (*c)->key_len = key_len;
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * This function deallocates an instance of this engine
+ */
+static srtp_err_status_t srtp_aes_icm_nss_dealloc(srtp_cipher_t *c)
+{
+    srtp_aes_icm_ctx_t *ctx;
+
+    ctx = (srtp_aes_icm_ctx_t *)c->state;
+    if (ctx) {
+        /* free any PK11 values that have been created */
+        if (ctx->key) {
+            PK11_FreeSymKey(ctx->key);
+            ctx->key = NULL;
+        }
+
+        if (ctx->ctx) {
+            PK11_DestroyContext(ctx->ctx, PR_TRUE);
+            ctx->ctx = NULL;
+        }
+
+        if (ctx->nss) {
+            NSS_ShutdownContext(ctx->nss);
+            ctx->nss = NULL;
+        }
+
+        /* zeroize everything */
+        octet_string_set_to_zero(ctx, sizeof(srtp_aes_icm_ctx_t));
+        srtp_crypto_free(ctx);
+    }
+
+    /* free memory */
+    srtp_crypto_free(c);
+
+    return (srtp_err_status_ok);
+}
+
+/*
+ * aes_icm_nss_context_init(...) initializes the aes_icm_context
+ * using the value in key[].
+ *
+ * the key is the secret key
+ *
+ * the salt is unpredictable (but not necessarily secret) data which
+ * randomizes the starting point in the keystream
+ */
+static srtp_err_status_t srtp_aes_icm_nss_context_init(void *cv,
+                                                       const uint8_t *key)
+{
+    srtp_aes_icm_ctx_t *c = (srtp_aes_icm_ctx_t *)cv;
+
+    /*
+     * set counter and initial values to 'offset' value, being careful not to
+     * go past the end of the key buffer
+     */
+    v128_set_to_zero(&c->counter);
+    v128_set_to_zero(&c->offset);
+    memcpy(&c->counter, key + c->key_size, SRTP_SALT_LEN);
+    memcpy(&c->offset, key + c->key_size, SRTP_SALT_LEN);
+
+    /* force last two octets of the offset to zero (for srtp compatibility) */
+    c->offset.v8[SRTP_SALT_LEN] = c->offset.v8[SRTP_SALT_LEN + 1] = 0;
+    c->counter.v8[SRTP_SALT_LEN] = c->counter.v8[SRTP_SALT_LEN + 1] = 0;
+
+    debug_print(srtp_mod_aes_icm, "key:  %s",
+                srtp_octet_string_hex_string(key, c->key_size));
+    debug_print(srtp_mod_aes_icm, "offset: %s", v128_hex_string(&c->offset));
+
+    if (c->key) {
+        PK11_FreeSymKey(c->key);
+        c->key = NULL;
+    }
+
+    PK11SlotInfo *slot = PK11_GetBestSlot(CKM_AES_CTR, NULL);
+    if (!slot) {
+        return srtp_err_status_bad_param;
+    }
+
+    SECItem keyItem = { siBuffer, (unsigned char *)key, c->key_size };
+    c->key = PK11_ImportSymKey(slot, CKM_AES_CTR, PK11_OriginUnwrap,
+                               CKA_ENCRYPT, &keyItem, NULL);
+    PK11_FreeSlot(slot);
+
+    if (!c->key) {
+        return srtp_err_status_cipher_fail;
+    }
+
+    return (srtp_err_status_ok);
+}
+
+/*
+ * aes_icm_set_iv(c, iv) sets the counter value to the exor of iv with
+ * the offset
+ */
+static srtp_err_status_t srtp_aes_icm_nss_set_iv(void *cv,
+                                                 uint8_t *iv,
+                                                 srtp_cipher_direction_t dir)
+{
+    srtp_aes_icm_ctx_t *c = (srtp_aes_icm_ctx_t *)cv;
+    v128_t nonce;
+
+    /* set nonce (for alignment) */
+    v128_copy_octet_string(&nonce, iv);
+
+    debug_print(srtp_mod_aes_icm, "setting iv: %s", v128_hex_string(&nonce));
+
+    v128_xor(&c->counter, &c->offset, &nonce);
+
+    debug_print(srtp_mod_aes_icm, "set_counter: %s",
+                v128_hex_string(&c->counter));
+
+    /* set up the PK11 context now that we have all the info */
+    CK_AES_CTR_PARAMS param;
+    param.ulCounterBits = 16;
+    memcpy(param.cb, &c->counter, 16);
+
+    if (!c->key) {
+        return srtp_err_status_bad_param;
+    }
+
+    if (c->ctx) {
+        PK11_DestroyContext(c->ctx, PR_TRUE);
+    }
+
+    SECItem paramItem = { siBuffer, (unsigned char *)&param,
+                          sizeof(CK_AES_CTR_PARAMS) };
+    c->ctx = PK11_CreateContextBySymKey(CKM_AES_CTR, CKA_ENCRYPT, c->key,
+                                        &paramItem);
+    if (!c->ctx) {
+        return srtp_err_status_cipher_fail;
+    }
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * This function encrypts a buffer using AES CTR mode
+ *
+ * Parameters:
+ *	c	Crypto context
+ *	buf	data to encrypt
+ *	enc_len	length of encrypt buffer
+ */
+static srtp_err_status_t srtp_aes_icm_nss_encrypt(void *cv,
+                                                  unsigned char *buf,
+                                                  unsigned int *enc_len)
+{
+    srtp_aes_icm_ctx_t *c = (srtp_aes_icm_ctx_t *)cv;
+
+    if (!c->ctx) {
+        return srtp_err_status_bad_param;
+    }
+
+    int rv =
+        PK11_CipherOp(c->ctx, buf, (int *)enc_len, *enc_len, buf, *enc_len);
+
+    srtp_err_status_t status = (srtp_err_status_ok);
+    if (rv != SECSuccess) {
+        status = (srtp_err_status_cipher_fail);
+    }
+
+    return status;
+}
+
+/*
+ * Name of this crypto engine
+ */
+static const char srtp_aes_icm_128_nss_description[] =
+    "AES-128 counter mode using NSS";
+static const char srtp_aes_icm_192_nss_description[] =
+    "AES-192 counter mode using NSS";
+static const char srtp_aes_icm_256_nss_description[] =
+    "AES-256 counter mode using NSS";
+
+/*
+ * KAT values for AES self-test.  These
+ * values came from the legacy libsrtp code.
+ */
+/* clang-format off */
+static const uint8_t srtp_aes_icm_128_test_case_0_key[SRTP_AES_ICM_128_KEY_LEN_WSALT] = {
+    0x2b, 0x7e, 0x15, 0x16, 0x28, 0xae, 0xd2, 0xa6,
+    0xab, 0xf7, 0x15, 0x88, 0x09, 0xcf, 0x4f, 0x3c,
+    0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
+    0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd
+};
+/* clang-format on */
+
+/* clang-format off */
+static uint8_t srtp_aes_icm_128_test_case_0_nonce[16] = {
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_128_test_case_0_plaintext[32] =  {
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_128_test_case_0_ciphertext[32] = {
+    0xe0, 0x3e, 0xad, 0x09, 0x35, 0xc9, 0x5e, 0x80,
+    0xe1, 0x66, 0xb1, 0x6d, 0xd9, 0x2b, 0x4e, 0xb4,
+    0xd2, 0x35, 0x13, 0x16, 0x2b, 0x02, 0xd0, 0xf7,
+    0x2a, 0x43, 0xa2, 0xfe, 0x4a, 0x5f, 0x97, 0xab
+};
+/* clang-format on */
+
+static const srtp_cipher_test_case_t srtp_aes_icm_128_test_case_0 = {
+    SRTP_AES_ICM_128_KEY_LEN_WSALT,          /* octets in key            */
+    srtp_aes_icm_128_test_case_0_key,        /* key                      */
+    srtp_aes_icm_128_test_case_0_nonce,      /* packet index             */
+    32,                                      /* octets in plaintext      */
+    srtp_aes_icm_128_test_case_0_plaintext,  /* plaintext                */
+    32,                                      /* octets in ciphertext     */
+    srtp_aes_icm_128_test_case_0_ciphertext, /* ciphertext               */
+    0,                                       /* */
+    NULL,                                    /* */
+    0,                                       /* */
+    NULL                                     /* pointer to next testcase */
+};
+
+/*
+ * KAT values for AES-192-CTR self-test.  These
+ * values came from section 7 of RFC 6188.
+ */
+/* clang-format off */
+static const uint8_t srtp_aes_icm_192_test_case_0_key[SRTP_AES_ICM_192_KEY_LEN_WSALT] = {
+    0xea, 0xb2, 0x34, 0x76, 0x4e, 0x51, 0x7b, 0x2d,
+    0x3d, 0x16, 0x0d, 0x58, 0x7d, 0x8c, 0x86, 0x21,
+    0x97, 0x40, 0xf6, 0x5f, 0x99, 0xb6, 0xbc, 0xf7,
+    0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
+    0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd
+};
+/* clang-format on */
+
+/* clang-format off */
+static uint8_t srtp_aes_icm_192_test_case_0_nonce[16] = {
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_192_test_case_0_plaintext[32] =  {
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_192_test_case_0_ciphertext[32] = {
+    0x35, 0x09, 0x6c, 0xba, 0x46, 0x10, 0x02, 0x8d,
+    0xc1, 0xb5, 0x75, 0x03, 0x80, 0x4c, 0xe3, 0x7c,
+    0x5d, 0xe9, 0x86, 0x29, 0x1d, 0xcc, 0xe1, 0x61,
+    0xd5, 0x16, 0x5e, 0xc4, 0x56, 0x8f, 0x5c, 0x9a
+};
+/* clang-format on */
+
+static const srtp_cipher_test_case_t srtp_aes_icm_192_test_case_0 = {
+    SRTP_AES_ICM_192_KEY_LEN_WSALT,          /* octets in key            */
+    srtp_aes_icm_192_test_case_0_key,        /* key                      */
+    srtp_aes_icm_192_test_case_0_nonce,      /* packet index             */
+    32,                                      /* octets in plaintext      */
+    srtp_aes_icm_192_test_case_0_plaintext,  /* plaintext                */
+    32,                                      /* octets in ciphertext     */
+    srtp_aes_icm_192_test_case_0_ciphertext, /* ciphertext               */
+    0,                                       /* */
+    NULL,                                    /* */
+    0,                                       /* */
+    NULL                                     /* pointer to next testcase */
+};
+
+/*
+ * KAT values for AES-256-CTR self-test.  These
+ * values came from section 7 of RFC 6188.
+ */
+/* clang-format off */
+static const uint8_t srtp_aes_icm_256_test_case_0_key[SRTP_AES_ICM_256_KEY_LEN_WSALT] = {
+    0x57, 0xf8, 0x2f, 0xe3, 0x61, 0x3f, 0xd1, 0x70,
+    0xa8, 0x5e, 0xc9, 0x3c, 0x40, 0xb1, 0xf0, 0x92,
+    0x2e, 0xc4, 0xcb, 0x0d, 0xc0, 0x25, 0xb5, 0x82,
+    0x72, 0x14, 0x7c, 0xc4, 0x38, 0x94, 0x4a, 0x98,
+    0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
+    0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd
+};
+/* clang-format on */
+
+/* clang-format off */
+static uint8_t srtp_aes_icm_256_test_case_0_nonce[16] = {
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_256_test_case_0_plaintext[32] =  {
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_256_test_case_0_ciphertext[32] = {
+    0x92, 0xbd, 0xd2, 0x8a, 0x93, 0xc3, 0xf5, 0x25,
+    0x11, 0xc6, 0x77, 0xd0, 0x8b, 0x55, 0x15, 0xa4,
+    0x9d, 0xa7, 0x1b, 0x23, 0x78, 0xa8, 0x54, 0xf6,
+    0x70, 0x50, 0x75, 0x6d, 0xed, 0x16, 0x5b, 0xac
+};
+/* clang-format on */
+
+static const srtp_cipher_test_case_t srtp_aes_icm_256_test_case_0 = {
+    SRTP_AES_ICM_256_KEY_LEN_WSALT,          /* octets in key            */
+    srtp_aes_icm_256_test_case_0_key,        /* key                      */
+    srtp_aes_icm_256_test_case_0_nonce,      /* packet index             */
+    32,                                      /* octets in plaintext      */
+    srtp_aes_icm_256_test_case_0_plaintext,  /* plaintext                */
+    32,                                      /* octets in ciphertext     */
+    srtp_aes_icm_256_test_case_0_ciphertext, /* ciphertext               */
+    0,                                       /* */
+    NULL,                                    /* */
+    0,                                       /* */
+    NULL                                     /* pointer to next testcase */
+};
+
+/*
+ * This is the function table for this crypto engine.
+ * note: the encrypt function is identical to the decrypt function
+ */
+const srtp_cipher_type_t srtp_aes_icm_128 = {
+    srtp_aes_icm_nss_alloc,           /* */
+    srtp_aes_icm_nss_dealloc,         /* */
+    srtp_aes_icm_nss_context_init,    /* */
+    0,                                /* set_aad */
+    srtp_aes_icm_nss_encrypt,         /* */
+    srtp_aes_icm_nss_encrypt,         /* */
+    srtp_aes_icm_nss_set_iv,          /* */
+    0,                                /* get_tag */
+    srtp_aes_icm_128_nss_description, /* */
+    &srtp_aes_icm_128_test_case_0,    /* */
+    SRTP_AES_ICM_128                  /* */
+};
+
+/*
+ * This is the function table for this crypto engine.
+ * note: the encrypt function is identical to the decrypt function
+ */
+const srtp_cipher_type_t srtp_aes_icm_192 = {
+    srtp_aes_icm_nss_alloc,           /* */
+    srtp_aes_icm_nss_dealloc,         /* */
+    srtp_aes_icm_nss_context_init,    /* */
+    0,                                /* set_aad */
+    srtp_aes_icm_nss_encrypt,         /* */
+    srtp_aes_icm_nss_encrypt,         /* */
+    srtp_aes_icm_nss_set_iv,          /* */
+    0,                                /* get_tag */
+    srtp_aes_icm_192_nss_description, /* */
+    &srtp_aes_icm_192_test_case_0,    /* */
+    SRTP_AES_ICM_192                  /* */
+};
+
+/*
+ * This is the function table for this crypto engine.
+ * note: the encrypt function is identical to the decrypt function
+ */
+const srtp_cipher_type_t srtp_aes_icm_256 = {
+    srtp_aes_icm_nss_alloc,           /* */
+    srtp_aes_icm_nss_dealloc,         /* */
+    srtp_aes_icm_nss_context_init,    /* */
+    0,                                /* set_aad */
+    srtp_aes_icm_nss_encrypt,         /* */
+    srtp_aes_icm_nss_encrypt,         /* */
+    srtp_aes_icm_nss_set_iv,          /* */
+    0,                                /* get_tag */
+    srtp_aes_icm_256_nss_description, /* */
+    &srtp_aes_icm_256_test_case_0,    /* */
+    SRTP_AES_ICM_256                  /* */
+};
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_icm_ossl.c b/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_icm_ossl.c
new file mode 100644
index 000000000..451cd18c0
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/aes_icm_ossl.c
@@ -0,0 +1,541 @@
+/*
+ * aes_icm_ossl.c
+ *
+ * AES Integer Counter Mode
+ *
+ * John A. Foley
+ * Cisco Systems, Inc.
+ *
+ * 2/24/2012:  This module was modified to use CiscoSSL for AES counter
+ *             mode.  Eddy Lem contributed the code to allow this.
+ *
+ * 12/20/2012: Added support for AES-192 and AES-256.
+ */
+
+/*
+ *
+ * Copyright (c) 2013-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include <openssl/evp.h>
+#include "aes_icm_ext.h"
+#include "crypto_types.h"
+#include "err.h" /* for srtp_debug */
+#include "alloc.h"
+#include "cipher_types.h"
+
+srtp_debug_module_t srtp_mod_aes_icm = {
+    0,             /* debugging is off by default */
+    "aes icm ossl" /* printable module name       */
+};
+
+/*
+ * integer counter mode works as follows:
+ *
+ * 16 bits
+ * <----->
+ * +------+------+------+------+------+------+------+------+
+ * |           nonce           |    packet index    |  ctr |---+
+ * +------+------+------+------+------+------+------+------+   |
+ *                                                             |
+ * +------+------+------+------+------+------+------+------+   v
+ * |                      salt                      |000000|->(+)
+ * +------+------+------+------+------+------+------+------+   |
+ *                                                             |
+ *                                                        +---------+
+ *                                                        | encrypt |
+ *                                                        +---------+
+ *                                                             |
+ * +------+------+------+------+------+------+------+------+   |
+ * |                    keystream block                    |<--+
+ * +------+------+------+------+------+------+------+------+
+ *
+ * All fields are big-endian
+ *
+ * ctr is the block counter, which increments from zero for
+ * each packet (16 bits wide)
+ *
+ * packet index is distinct for each packet (48 bits wide)
+ *
+ * nonce can be distinct across many uses of the same key, or
+ * can be a fixed value per key, or can be per-packet randomness
+ * (64 bits)
+ *
+ */
+
+/*
+ * This function allocates a new instance of this crypto engine.
+ * The key_len parameter should be one of 30, 38, or 46 for
+ * AES-128, AES-192, and AES-256 respectively.  Note, this key_len
+ * value is inflated, as it also accounts for the 112 bit salt
+ * value.  The tlen argument is for the AEAD tag length, which
+ * isn't used in counter mode.
+ */
+static srtp_err_status_t srtp_aes_icm_openssl_alloc(srtp_cipher_t **c,
+                                                    int key_len,
+                                                    int tlen)
+{
+    srtp_aes_icm_ctx_t *icm;
+
+    debug_print(srtp_mod_aes_icm, "allocating cipher with key length %d",
+                key_len);
+
+    /*
+     * Verify the key_len is valid for one of: AES-128/192/256
+     */
+    if (key_len != SRTP_AES_ICM_128_KEY_LEN_WSALT &&
+        key_len != SRTP_AES_ICM_192_KEY_LEN_WSALT &&
+        key_len != SRTP_AES_ICM_256_KEY_LEN_WSALT) {
+        return srtp_err_status_bad_param;
+    }
+
+    /* allocate memory a cipher of type aes_icm */
+    *c = (srtp_cipher_t *)srtp_crypto_alloc(sizeof(srtp_cipher_t));
+    if (*c == NULL) {
+        return srtp_err_status_alloc_fail;
+    }
+
+    icm = (srtp_aes_icm_ctx_t *)srtp_crypto_alloc(sizeof(srtp_aes_icm_ctx_t));
+    if (icm == NULL) {
+        srtp_crypto_free(*c);
+        *c = NULL;
+        return srtp_err_status_alloc_fail;
+    }
+
+    icm->ctx = EVP_CIPHER_CTX_new();
+    if (icm->ctx == NULL) {
+        srtp_crypto_free(icm);
+        srtp_crypto_free(*c);
+        *c = NULL;
+        return srtp_err_status_alloc_fail;
+    }
+
+    /* set pointers */
+    (*c)->state = icm;
+
+    /* setup cipher parameters */
+    switch (key_len) {
+    case SRTP_AES_ICM_128_KEY_LEN_WSALT:
+        (*c)->algorithm = SRTP_AES_ICM_128;
+        (*c)->type = &srtp_aes_icm_128;
+        icm->key_size = SRTP_AES_128_KEY_LEN;
+        break;
+    case SRTP_AES_ICM_192_KEY_LEN_WSALT:
+        (*c)->algorithm = SRTP_AES_ICM_192;
+        (*c)->type = &srtp_aes_icm_192;
+        icm->key_size = SRTP_AES_192_KEY_LEN;
+        break;
+    case SRTP_AES_ICM_256_KEY_LEN_WSALT:
+        (*c)->algorithm = SRTP_AES_ICM_256;
+        (*c)->type = &srtp_aes_icm_256;
+        icm->key_size = SRTP_AES_256_KEY_LEN;
+        break;
+    }
+
+    /* set key size        */
+    (*c)->key_len = key_len;
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * This function deallocates an instance of this engine
+ */
+static srtp_err_status_t srtp_aes_icm_openssl_dealloc(srtp_cipher_t *c)
+{
+    srtp_aes_icm_ctx_t *ctx;
+
+    if (c == NULL) {
+        return srtp_err_status_bad_param;
+    }
+
+    /*
+     * Free the EVP context
+     */
+    ctx = (srtp_aes_icm_ctx_t *)c->state;
+    if (ctx != NULL) {
+        EVP_CIPHER_CTX_free(ctx->ctx);
+        /* zeroize the key material */
+        octet_string_set_to_zero(ctx, sizeof(srtp_aes_icm_ctx_t));
+        srtp_crypto_free(ctx);
+    }
+
+    /* free memory */
+    srtp_crypto_free(c);
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * aes_icm_openssl_context_init(...) initializes the aes_icm_context
+ * using the value in key[].
+ *
+ * the key is the secret key
+ *
+ * the salt is unpredictable (but not necessarily secret) data which
+ * randomizes the starting point in the keystream
+ */
+static srtp_err_status_t srtp_aes_icm_openssl_context_init(void *cv,
+                                                           const uint8_t *key)
+{
+    srtp_aes_icm_ctx_t *c = (srtp_aes_icm_ctx_t *)cv;
+    const EVP_CIPHER *evp;
+
+    /*
+     * set counter and initial values to 'offset' value, being careful not to
+     * go past the end of the key buffer
+     */
+    v128_set_to_zero(&c->counter);
+    v128_set_to_zero(&c->offset);
+    memcpy(&c->counter, key + c->key_size, SRTP_SALT_LEN);
+    memcpy(&c->offset, key + c->key_size, SRTP_SALT_LEN);
+
+    /* force last two octets of the offset to zero (for srtp compatibility) */
+    c->offset.v8[SRTP_SALT_LEN] = c->offset.v8[SRTP_SALT_LEN + 1] = 0;
+    c->counter.v8[SRTP_SALT_LEN] = c->counter.v8[SRTP_SALT_LEN + 1] = 0;
+
+    debug_print(srtp_mod_aes_icm, "key:  %s",
+                srtp_octet_string_hex_string(key, c->key_size));
+    debug_print(srtp_mod_aes_icm, "offset: %s", v128_hex_string(&c->offset));
+
+    switch (c->key_size) {
+    case SRTP_AES_256_KEY_LEN:
+        evp = EVP_aes_256_ctr();
+        break;
+    case SRTP_AES_192_KEY_LEN:
+        evp = EVP_aes_192_ctr();
+        break;
+    case SRTP_AES_128_KEY_LEN:
+        evp = EVP_aes_128_ctr();
+        break;
+    default:
+        return srtp_err_status_bad_param;
+        break;
+    }
+
+    EVP_CIPHER_CTX_cleanup(c->ctx);
+    if (!EVP_EncryptInit_ex(c->ctx, evp, NULL, key, NULL)) {
+        return srtp_err_status_fail;
+    } else {
+        return srtp_err_status_ok;
+    }
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * aes_icm_set_iv(c, iv) sets the counter value to the exor of iv with
+ * the offset
+ */
+static srtp_err_status_t srtp_aes_icm_openssl_set_iv(
+    void *cv,
+    uint8_t *iv,
+    srtp_cipher_direction_t dir)
+{
+    srtp_aes_icm_ctx_t *c = (srtp_aes_icm_ctx_t *)cv;
+    v128_t nonce;
+
+    /* set nonce (for alignment) */
+    v128_copy_octet_string(&nonce, iv);
+
+    debug_print(srtp_mod_aes_icm, "setting iv: %s", v128_hex_string(&nonce));
+
+    v128_xor(&c->counter, &c->offset, &nonce);
+
+    debug_print(srtp_mod_aes_icm, "set_counter: %s",
+                v128_hex_string(&c->counter));
+
+    if (!EVP_EncryptInit_ex(c->ctx, NULL, NULL, NULL, c->counter.v8)) {
+        return srtp_err_status_fail;
+    } else {
+        return srtp_err_status_ok;
+    }
+}
+
+/*
+ * This function encrypts a buffer using AES CTR mode
+ *
+ * Parameters:
+ *	c	Crypto context
+ *	buf	data to encrypt
+ *	enc_len	length of encrypt buffer
+ */
+static srtp_err_status_t srtp_aes_icm_openssl_encrypt(void *cv,
+                                                      unsigned char *buf,
+                                                      unsigned int *enc_len)
+{
+    srtp_aes_icm_ctx_t *c = (srtp_aes_icm_ctx_t *)cv;
+    int len = 0;
+
+    debug_print(srtp_mod_aes_icm, "rs0: %s", v128_hex_string(&c->counter));
+
+    if (!EVP_EncryptUpdate(c->ctx, buf, &len, buf, *enc_len)) {
+        return srtp_err_status_cipher_fail;
+    }
+    *enc_len = len;
+
+    if (!EVP_EncryptFinal_ex(c->ctx, buf + len, &len)) {
+        return srtp_err_status_cipher_fail;
+    }
+    *enc_len += len;
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * Name of this crypto engine
+ */
+static const char srtp_aes_icm_128_openssl_description[] =
+    "AES-128 counter mode using openssl";
+static const char srtp_aes_icm_192_openssl_description[] =
+    "AES-192 counter mode using openssl";
+static const char srtp_aes_icm_256_openssl_description[] =
+    "AES-256 counter mode using openssl";
+
+/*
+ * KAT values for AES self-test.  These
+ * values came from the legacy libsrtp code.
+ */
+/* clang-format off */
+static const uint8_t srtp_aes_icm_128_test_case_0_key[SRTP_AES_ICM_128_KEY_LEN_WSALT] = {
+    0x2b, 0x7e, 0x15, 0x16, 0x28, 0xae, 0xd2, 0xa6,
+    0xab, 0xf7, 0x15, 0x88, 0x09, 0xcf, 0x4f, 0x3c,
+    0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
+    0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd
+};
+/* clang-format on */
+
+/* clang-format off */
+static uint8_t srtp_aes_icm_128_test_case_0_nonce[16] = {
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_128_test_case_0_plaintext[32] =  {
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_128_test_case_0_ciphertext[32] = {
+    0xe0, 0x3e, 0xad, 0x09, 0x35, 0xc9, 0x5e, 0x80,
+    0xe1, 0x66, 0xb1, 0x6d, 0xd9, 0x2b, 0x4e, 0xb4,
+    0xd2, 0x35, 0x13, 0x16, 0x2b, 0x02, 0xd0, 0xf7,
+    0x2a, 0x43, 0xa2, 0xfe, 0x4a, 0x5f, 0x97, 0xab
+};
+/* clang-format on */
+
+static const srtp_cipher_test_case_t srtp_aes_icm_128_test_case_0 = {
+    SRTP_AES_ICM_128_KEY_LEN_WSALT,          /* octets in key            */
+    srtp_aes_icm_128_test_case_0_key,        /* key                      */
+    srtp_aes_icm_128_test_case_0_nonce,      /* packet index             */
+    32,                                      /* octets in plaintext      */
+    srtp_aes_icm_128_test_case_0_plaintext,  /* plaintext                */
+    32,                                      /* octets in ciphertext     */
+    srtp_aes_icm_128_test_case_0_ciphertext, /* ciphertext               */
+    0,                                       /* */
+    NULL,                                    /* */
+    0,                                       /* */
+    NULL                                     /* pointer to next testcase */
+};
+
+/*
+ * KAT values for AES-192-CTR self-test.  These
+ * values came from section 7 of RFC 6188.
+ */
+/* clang-format off */
+static const uint8_t srtp_aes_icm_192_test_case_0_key[SRTP_AES_ICM_192_KEY_LEN_WSALT] = {
+    0xea, 0xb2, 0x34, 0x76, 0x4e, 0x51, 0x7b, 0x2d,
+    0x3d, 0x16, 0x0d, 0x58, 0x7d, 0x8c, 0x86, 0x21,
+    0x97, 0x40, 0xf6, 0x5f, 0x99, 0xb6, 0xbc, 0xf7,
+    0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
+    0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd
+};
+/* clang-format on */
+
+/* clang-format off */
+static uint8_t srtp_aes_icm_192_test_case_0_nonce[16] = {
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_192_test_case_0_plaintext[32] =  {
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_192_test_case_0_ciphertext[32] = {
+    0x35, 0x09, 0x6c, 0xba, 0x46, 0x10, 0x02, 0x8d,
+    0xc1, 0xb5, 0x75, 0x03, 0x80, 0x4c, 0xe3, 0x7c,
+    0x5d, 0xe9, 0x86, 0x29, 0x1d, 0xcc, 0xe1, 0x61,
+    0xd5, 0x16, 0x5e, 0xc4, 0x56, 0x8f, 0x5c, 0x9a
+};
+/* clang-format on */
+
+static const srtp_cipher_test_case_t srtp_aes_icm_192_test_case_0 = {
+    SRTP_AES_ICM_192_KEY_LEN_WSALT,          /* octets in key            */
+    srtp_aes_icm_192_test_case_0_key,        /* key                      */
+    srtp_aes_icm_192_test_case_0_nonce,      /* packet index             */
+    32,                                      /* octets in plaintext      */
+    srtp_aes_icm_192_test_case_0_plaintext,  /* plaintext                */
+    32,                                      /* octets in ciphertext     */
+    srtp_aes_icm_192_test_case_0_ciphertext, /* ciphertext               */
+    0,                                       /* */
+    NULL,                                    /* */
+    0,                                       /* */
+    NULL                                     /* pointer to next testcase */
+};
+
+/*
+ * KAT values for AES-256-CTR self-test.  These
+ * values came from section 7 of RFC 6188.
+ */
+/* clang-format off */
+static const uint8_t srtp_aes_icm_256_test_case_0_key[SRTP_AES_ICM_256_KEY_LEN_WSALT] = {
+    0x57, 0xf8, 0x2f, 0xe3, 0x61, 0x3f, 0xd1, 0x70,
+    0xa8, 0x5e, 0xc9, 0x3c, 0x40, 0xb1, 0xf0, 0x92,
+    0x2e, 0xc4, 0xcb, 0x0d, 0xc0, 0x25, 0xb5, 0x82,
+    0x72, 0x14, 0x7c, 0xc4, 0x38, 0x94, 0x4a, 0x98,
+    0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
+    0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd
+};
+/* clang-format on */
+
+/* clang-format off */
+static uint8_t srtp_aes_icm_256_test_case_0_nonce[16] = {
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_256_test_case_0_plaintext[32] =  {
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_aes_icm_256_test_case_0_ciphertext[32] = {
+    0x92, 0xbd, 0xd2, 0x8a, 0x93, 0xc3, 0xf5, 0x25,
+    0x11, 0xc6, 0x77, 0xd0, 0x8b, 0x55, 0x15, 0xa4,
+    0x9d, 0xa7, 0x1b, 0x23, 0x78, 0xa8, 0x54, 0xf6,
+    0x70, 0x50, 0x75, 0x6d, 0xed, 0x16, 0x5b, 0xac
+};
+/* clang-format on */
+
+static const srtp_cipher_test_case_t srtp_aes_icm_256_test_case_0 = {
+    SRTP_AES_ICM_256_KEY_LEN_WSALT,          /* octets in key            */
+    srtp_aes_icm_256_test_case_0_key,        /* key                      */
+    srtp_aes_icm_256_test_case_0_nonce,      /* packet index             */
+    32,                                      /* octets in plaintext      */
+    srtp_aes_icm_256_test_case_0_plaintext,  /* plaintext                */
+    32,                                      /* octets in ciphertext     */
+    srtp_aes_icm_256_test_case_0_ciphertext, /* ciphertext               */
+    0,                                       /* */
+    NULL,                                    /* */
+    0,                                       /* */
+    NULL                                     /* pointer to next testcase */
+};
+
+/*
+ * This is the function table for this crypto engine.
+ * note: the encrypt function is identical to the decrypt function
+ */
+const srtp_cipher_type_t srtp_aes_icm_128 = {
+    srtp_aes_icm_openssl_alloc,           /* */
+    srtp_aes_icm_openssl_dealloc,         /* */
+    srtp_aes_icm_openssl_context_init,    /* */
+    0,                                    /* set_aad */
+    srtp_aes_icm_openssl_encrypt,         /* */
+    srtp_aes_icm_openssl_encrypt,         /* */
+    srtp_aes_icm_openssl_set_iv,          /* */
+    0,                                    /* get_tag */
+    srtp_aes_icm_128_openssl_description, /* */
+    &srtp_aes_icm_128_test_case_0,        /* */
+    SRTP_AES_ICM_128                      /* */
+};
+
+/*
+ * This is the function table for this crypto engine.
+ * note: the encrypt function is identical to the decrypt function
+ */
+const srtp_cipher_type_t srtp_aes_icm_192 = {
+    srtp_aes_icm_openssl_alloc,           /* */
+    srtp_aes_icm_openssl_dealloc,         /* */
+    srtp_aes_icm_openssl_context_init,    /* */
+    0,                                    /* set_aad */
+    srtp_aes_icm_openssl_encrypt,         /* */
+    srtp_aes_icm_openssl_encrypt,         /* */
+    srtp_aes_icm_openssl_set_iv,          /* */
+    0,                                    /* get_tag */
+    srtp_aes_icm_192_openssl_description, /* */
+    &srtp_aes_icm_192_test_case_0,        /* */
+    SRTP_AES_ICM_192                      /* */
+};
+
+/*
+ * This is the function table for this crypto engine.
+ * note: the encrypt function is identical to the decrypt function
+ */
+const srtp_cipher_type_t srtp_aes_icm_256 = {
+    srtp_aes_icm_openssl_alloc,           /* */
+    srtp_aes_icm_openssl_dealloc,         /* */
+    srtp_aes_icm_openssl_context_init,    /* */
+    0,                                    /* set_aad */
+    srtp_aes_icm_openssl_encrypt,         /* */
+    srtp_aes_icm_openssl_encrypt,         /* */
+    srtp_aes_icm_openssl_set_iv,          /* */
+    0,                                    /* get_tag */
+    srtp_aes_icm_256_openssl_description, /* */
+    &srtp_aes_icm_256_test_case_0,        /* */
+    SRTP_AES_ICM_256                      /* */
+};
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/cipher.c b/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/cipher.c
new file mode 100644
index 000000000..de93bc90d
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/cipher.c
@@ -0,0 +1,664 @@
+/*
+ * cipher.c
+ *
+ * cipher meta-functions
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ *
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "cipher.h"
+#include "cipher_priv.h"
+#include "crypto_types.h"
+#include "err.h"   /* for srtp_debug */
+#include "alloc.h" /* for crypto_alloc(), crypto_free()  */
+
+srtp_debug_module_t srtp_mod_cipher = {
+    0,       /* debugging is off by default */
+    "cipher" /* printable module name       */
+};
+
+srtp_err_status_t srtp_cipher_type_alloc(const srtp_cipher_type_t *ct,
+                                         srtp_cipher_t **c,
+                                         int key_len,
+                                         int tlen)
+{
+    if (!ct || !ct->alloc) {
+        return (srtp_err_status_bad_param);
+    }
+    return ((ct)->alloc((c), (key_len), (tlen)));
+}
+
+srtp_err_status_t srtp_cipher_dealloc(srtp_cipher_t *c)
+{
+    if (!c || !c->type) {
+        return (srtp_err_status_bad_param);
+    }
+    return (((c)->type)->dealloc(c));
+}
+
+srtp_err_status_t srtp_cipher_init(srtp_cipher_t *c, const uint8_t *key)
+{
+    if (!c || !c->type || !c->state) {
+        return (srtp_err_status_bad_param);
+    }
+    return (((c)->type)->init(((c)->state), (key)));
+}
+
+srtp_err_status_t srtp_cipher_set_iv(srtp_cipher_t *c,
+                                     uint8_t *iv,
+                                     int direction)
+{
+    if (!c || !c->type || !c->state) {
+        return (srtp_err_status_bad_param);
+    }
+
+    return (((c)->type)->set_iv(((c)->state), iv, direction));
+}
+
+srtp_err_status_t srtp_cipher_output(srtp_cipher_t *c,
+                                     uint8_t *buffer,
+                                     uint32_t *num_octets_to_output)
+{
+    /* zeroize the buffer */
+    octet_string_set_to_zero(buffer, *num_octets_to_output);
+
+    /* exor keystream into buffer */
+    return (((c)->type)->encrypt(((c)->state), buffer, num_octets_to_output));
+}
+
+srtp_err_status_t srtp_cipher_encrypt(srtp_cipher_t *c,
+                                      uint8_t *buffer,
+                                      uint32_t *num_octets_to_output)
+{
+    if (!c || !c->type || !c->state) {
+        return (srtp_err_status_bad_param);
+    }
+
+    return (((c)->type)->encrypt(((c)->state), buffer, num_octets_to_output));
+}
+
+srtp_err_status_t srtp_cipher_decrypt(srtp_cipher_t *c,
+                                      uint8_t *buffer,
+                                      uint32_t *num_octets_to_output)
+{
+    if (!c || !c->type || !c->state) {
+        return (srtp_err_status_bad_param);
+    }
+
+    return (((c)->type)->decrypt(((c)->state), buffer, num_octets_to_output));
+}
+
+srtp_err_status_t srtp_cipher_get_tag(srtp_cipher_t *c,
+                                      uint8_t *buffer,
+                                      uint32_t *tag_len)
+{
+    if (!c || !c->type || !c->state) {
+        return (srtp_err_status_bad_param);
+    }
+    if (!((c)->type)->get_tag) {
+        return (srtp_err_status_no_such_op);
+    }
+
+    return (((c)->type)->get_tag(((c)->state), buffer, tag_len));
+}
+
+srtp_err_status_t srtp_cipher_set_aad(srtp_cipher_t *c,
+                                      const uint8_t *aad,
+                                      uint32_t aad_len)
+{
+    if (!c || !c->type || !c->state) {
+        return (srtp_err_status_bad_param);
+    }
+    if (!((c)->type)->set_aad) {
+        return (srtp_err_status_no_such_op);
+    }
+
+    return (((c)->type)->set_aad(((c)->state), aad, aad_len));
+}
+
+/* some bookkeeping functions */
+
+int srtp_cipher_get_key_length(const srtp_cipher_t *c)
+{
+    return c->key_len;
+}
+
+/*
+ * A trivial platform independent random source.
+ * For use in test only.
+ */
+void srtp_cipher_rand_for_tests(void *dest, uint32_t len)
+{
+    /* Generic C-library (rand()) version */
+    /* This is a random source of last resort */
+    uint8_t *dst = (uint8_t *)dest;
+    while (len) {
+        int val = rand();
+        /* rand() returns 0-32767 (ugh) */
+        /* Is this a good enough way to get random bytes?
+           It is if it passes FIPS-140... */
+        *dst++ = val & 0xff;
+        len--;
+    }
+}
+
+/*
+ * A trivial platform independent 32 bit random number.
+ * For use in test only.
+ */
+uint32_t srtp_cipher_rand_u32_for_tests(void)
+{
+    uint32_t r;
+    srtp_cipher_rand_for_tests(&r, sizeof(r));
+    return r;
+}
+
+#define SELF_TEST_BUF_OCTETS 128
+#define NUM_RAND_TESTS 128
+#define MAX_KEY_LEN 64
+/*
+ * srtp_cipher_type_test(ct, test_data) tests a cipher of type ct against
+ * test cases provided in a list test_data of values of key, salt, iv,
+ * plaintext, and ciphertext that is known to be good
+ */
+srtp_err_status_t srtp_cipher_type_test(
+    const srtp_cipher_type_t *ct,
+    const srtp_cipher_test_case_t *test_data)
+{
+    const srtp_cipher_test_case_t *test_case = test_data;
+    srtp_cipher_t *c;
+    srtp_err_status_t status;
+    uint8_t buffer[SELF_TEST_BUF_OCTETS];
+    uint8_t buffer2[SELF_TEST_BUF_OCTETS];
+    uint32_t tag_len;
+    unsigned int len;
+    int i, j, case_num = 0;
+    unsigned k = 0;
+
+    debug_print(srtp_mod_cipher, "running self-test for cipher %s",
+                ct->description);
+
+    /*
+     * check to make sure that we have at least one test case, and
+     * return an error if we don't - we need to be paranoid here
+     */
+    if (test_case == NULL) {
+        return srtp_err_status_cant_check;
+    }
+
+    /*
+     * loop over all test cases, perform known-answer tests of both the
+     * encryption and decryption functions
+     */
+    while (test_case != NULL) {
+        /* allocate cipher */
+        status = srtp_cipher_type_alloc(ct, &c, test_case->key_length_octets,
+                                        test_case->tag_length_octets);
+        if (status) {
+            return status;
+        }
+
+        /*
+         * test the encrypt function
+         */
+        debug_print0(srtp_mod_cipher, "testing encryption");
+
+        /* initialize cipher */
+        status = srtp_cipher_init(c, test_case->key);
+        if (status) {
+            srtp_cipher_dealloc(c);
+            return status;
+        }
+
+        /* copy plaintext into test buffer */
+        if (test_case->ciphertext_length_octets > SELF_TEST_BUF_OCTETS) {
+            srtp_cipher_dealloc(c);
+            return srtp_err_status_bad_param;
+        }
+        for (k = 0; k < test_case->plaintext_length_octets; k++) {
+            buffer[k] = test_case->plaintext[k];
+        }
+
+        debug_print(srtp_mod_cipher, "plaintext:    %s",
+                    srtp_octet_string_hex_string(
+                        buffer, test_case->plaintext_length_octets));
+
+        /* set the initialization vector */
+        status = srtp_cipher_set_iv(c, (uint8_t *)test_case->idx,
+                                    srtp_direction_encrypt);
+        if (status) {
+            srtp_cipher_dealloc(c);
+            return status;
+        }
+
+        if (c->algorithm == SRTP_AES_GCM_128 ||
+            c->algorithm == SRTP_AES_GCM_256) {
+            debug_print(srtp_mod_cipher, "IV:    %s",
+                        srtp_octet_string_hex_string(test_case->idx, 12));
+
+            /*
+             * Set the AAD
+             */
+            status = srtp_cipher_set_aad(c, test_case->aad,
+                                         test_case->aad_length_octets);
+            if (status) {
+                srtp_cipher_dealloc(c);
+                return status;
+            }
+            debug_print(srtp_mod_cipher, "AAD:    %s",
+                        srtp_octet_string_hex_string(
+                            test_case->aad, test_case->aad_length_octets));
+        }
+
+        /* encrypt */
+        len = test_case->plaintext_length_octets;
+        status = srtp_cipher_encrypt(c, buffer, &len);
+        if (status) {
+            srtp_cipher_dealloc(c);
+            return status;
+        }
+
+        if (c->algorithm == SRTP_AES_GCM_128 ||
+            c->algorithm == SRTP_AES_GCM_256) {
+            /*
+             * Get the GCM tag
+             */
+            status = srtp_cipher_get_tag(c, buffer + len, &tag_len);
+            if (status) {
+                srtp_cipher_dealloc(c);
+                return status;
+            }
+            len += tag_len;
+        }
+
+        debug_print(srtp_mod_cipher, "ciphertext:   %s",
+                    srtp_octet_string_hex_string(
+                        buffer, test_case->ciphertext_length_octets));
+
+        /* compare the resulting ciphertext with that in the test case */
+        if (len != test_case->ciphertext_length_octets) {
+            srtp_cipher_dealloc(c);
+            return srtp_err_status_algo_fail;
+        }
+        status = srtp_err_status_ok;
+        for (k = 0; k < test_case->ciphertext_length_octets; k++) {
+            if (buffer[k] != test_case->ciphertext[k]) {
+                status = srtp_err_status_algo_fail;
+                debug_print(srtp_mod_cipher, "test case %d failed", case_num);
+                debug_print(srtp_mod_cipher, "(failure at byte %u)", k);
+                break;
+            }
+        }
+        if (status) {
+            debug_print(srtp_mod_cipher, "c computed: %s",
+                        srtp_octet_string_hex_string(
+                            buffer, 2 * test_case->plaintext_length_octets));
+            debug_print(srtp_mod_cipher, "c expected: %s",
+                        srtp_octet_string_hex_string(
+                            test_case->ciphertext,
+                            2 * test_case->plaintext_length_octets));
+
+            srtp_cipher_dealloc(c);
+            return srtp_err_status_algo_fail;
+        }
+
+        /*
+         * test the decrypt function
+         */
+        debug_print0(srtp_mod_cipher, "testing decryption");
+
+        /* re-initialize cipher for decryption */
+        status = srtp_cipher_init(c, test_case->key);
+        if (status) {
+            srtp_cipher_dealloc(c);
+            return status;
+        }
+
+        /* copy ciphertext into test buffer */
+        if (test_case->ciphertext_length_octets > SELF_TEST_BUF_OCTETS) {
+            srtp_cipher_dealloc(c);
+            return srtp_err_status_bad_param;
+        }
+        for (k = 0; k < test_case->ciphertext_length_octets; k++) {
+            buffer[k] = test_case->ciphertext[k];
+        }
+
+        debug_print(srtp_mod_cipher, "ciphertext:    %s",
+                    srtp_octet_string_hex_string(
+                        buffer, test_case->plaintext_length_octets));
+
+        /* set the initialization vector */
+        status = srtp_cipher_set_iv(c, (uint8_t *)test_case->idx,
+                                    srtp_direction_decrypt);
+        if (status) {
+            srtp_cipher_dealloc(c);
+            return status;
+        }
+
+        if (c->algorithm == SRTP_AES_GCM_128 ||
+            c->algorithm == SRTP_AES_GCM_256) {
+            /*
+             * Set the AAD
+             */
+            status = srtp_cipher_set_aad(c, test_case->aad,
+                                         test_case->aad_length_octets);
+            if (status) {
+                srtp_cipher_dealloc(c);
+                return status;
+            }
+            debug_print(srtp_mod_cipher, "AAD:    %s",
+                        srtp_octet_string_hex_string(
+                            test_case->aad, test_case->aad_length_octets));
+        }
+
+        /* decrypt */
+        len = test_case->ciphertext_length_octets;
+        status = srtp_cipher_decrypt(c, buffer, &len);
+        if (status) {
+            srtp_cipher_dealloc(c);
+            return status;
+        }
+
+        debug_print(srtp_mod_cipher, "plaintext:   %s",
+                    srtp_octet_string_hex_string(
+                        buffer, test_case->plaintext_length_octets));
+
+        /* compare the resulting plaintext with that in the test case */
+        if (len != test_case->plaintext_length_octets) {
+            srtp_cipher_dealloc(c);
+            return srtp_err_status_algo_fail;
+        }
+        status = srtp_err_status_ok;
+        for (k = 0; k < test_case->plaintext_length_octets; k++) {
+            if (buffer[k] != test_case->plaintext[k]) {
+                status = srtp_err_status_algo_fail;
+                debug_print(srtp_mod_cipher, "test case %d failed", case_num);
+                debug_print(srtp_mod_cipher, "(failure at byte %u)", k);
+            }
+        }
+        if (status) {
+            debug_print(srtp_mod_cipher, "p computed: %s",
+                        srtp_octet_string_hex_string(
+                            buffer, 2 * test_case->plaintext_length_octets));
+            debug_print(srtp_mod_cipher, "p expected: %s",
+                        srtp_octet_string_hex_string(
+                            test_case->plaintext,
+                            2 * test_case->plaintext_length_octets));
+
+            srtp_cipher_dealloc(c);
+            return srtp_err_status_algo_fail;
+        }
+
+        /* deallocate the cipher */
+        status = srtp_cipher_dealloc(c);
+        if (status) {
+            return status;
+        }
+
+        /*
+         * the cipher passed the test case, so move on to the next test
+         * case in the list; if NULL, we'l proceed to the next test
+         */
+        test_case = test_case->next_test_case;
+        ++case_num;
+    }
+
+    /* now run some random invertibility tests */
+
+    /* allocate cipher, using paramaters from the first test case */
+    test_case = test_data;
+    status = srtp_cipher_type_alloc(ct, &c, test_case->key_length_octets,
+                                    test_case->tag_length_octets);
+    if (status) {
+        return status;
+    }
+
+    for (j = 0; j < NUM_RAND_TESTS; j++) {
+        unsigned int length;
+        unsigned int plaintext_len;
+        uint8_t key[MAX_KEY_LEN];
+        uint8_t iv[MAX_KEY_LEN];
+
+        /* choose a length at random (leaving room for IV and padding) */
+        length = srtp_cipher_rand_u32_for_tests() % (SELF_TEST_BUF_OCTETS - 64);
+        debug_print(srtp_mod_cipher, "random plaintext length %d\n", length);
+        srtp_cipher_rand_for_tests(buffer, length);
+
+        debug_print(srtp_mod_cipher, "plaintext:    %s",
+                    srtp_octet_string_hex_string(buffer, length));
+
+        /* copy plaintext into second buffer */
+        for (i = 0; (unsigned int)i < length; i++) {
+            buffer2[i] = buffer[i];
+        }
+
+        /* choose a key at random */
+        if (test_case->key_length_octets > MAX_KEY_LEN) {
+            srtp_cipher_dealloc(c);
+            return srtp_err_status_cant_check;
+        }
+        srtp_cipher_rand_for_tests(key, test_case->key_length_octets);
+
+        /* chose a random initialization vector */
+        srtp_cipher_rand_for_tests(iv, MAX_KEY_LEN);
+
+        /* initialize cipher */
+        status = srtp_cipher_init(c, key);
+        if (status) {
+            srtp_cipher_dealloc(c);
+            return status;
+        }
+
+        /* set initialization vector */
+        status = srtp_cipher_set_iv(c, (uint8_t *)test_case->idx,
+                                    srtp_direction_encrypt);
+        if (status) {
+            srtp_cipher_dealloc(c);
+            return status;
+        }
+
+        if (c->algorithm == SRTP_AES_GCM_128 ||
+            c->algorithm == SRTP_AES_GCM_256) {
+            /*
+             * Set the AAD
+             */
+            status = srtp_cipher_set_aad(c, test_case->aad,
+                                         test_case->aad_length_octets);
+            if (status) {
+                srtp_cipher_dealloc(c);
+                return status;
+            }
+            debug_print(srtp_mod_cipher, "AAD:    %s",
+                        srtp_octet_string_hex_string(
+                            test_case->aad, test_case->aad_length_octets));
+        }
+
+        /* encrypt buffer with cipher */
+        plaintext_len = length;
+        status = srtp_cipher_encrypt(c, buffer, &length);
+        if (status) {
+            srtp_cipher_dealloc(c);
+            return status;
+        }
+        if (c->algorithm == SRTP_AES_GCM_128 ||
+            c->algorithm == SRTP_AES_GCM_256) {
+            /*
+             * Get the GCM tag
+             */
+            status = srtp_cipher_get_tag(c, buffer + length, &tag_len);
+            if (status) {
+                srtp_cipher_dealloc(c);
+                return status;
+            }
+            length += tag_len;
+        }
+        debug_print(srtp_mod_cipher, "ciphertext:   %s",
+                    srtp_octet_string_hex_string(buffer, length));
+
+        /*
+         * re-initialize cipher for decryption, re-set the iv, then
+         * decrypt the ciphertext
+         */
+        status = srtp_cipher_init(c, key);
+        if (status) {
+            srtp_cipher_dealloc(c);
+            return status;
+        }
+        status = srtp_cipher_set_iv(c, (uint8_t *)test_case->idx,
+                                    srtp_direction_decrypt);
+        if (status) {
+            srtp_cipher_dealloc(c);
+            return status;
+        }
+        if (c->algorithm == SRTP_AES_GCM_128 ||
+            c->algorithm == SRTP_AES_GCM_256) {
+            /*
+             * Set the AAD
+             */
+            status = srtp_cipher_set_aad(c, test_case->aad,
+                                         test_case->aad_length_octets);
+            if (status) {
+                srtp_cipher_dealloc(c);
+                return status;
+            }
+            debug_print(srtp_mod_cipher, "AAD:    %s",
+                        srtp_octet_string_hex_string(
+                            test_case->aad, test_case->aad_length_octets));
+        }
+        status = srtp_cipher_decrypt(c, buffer, &length);
+        if (status) {
+            srtp_cipher_dealloc(c);
+            return status;
+        }
+
+        debug_print(srtp_mod_cipher, "plaintext[2]: %s",
+                    srtp_octet_string_hex_string(buffer, length));
+
+        /* compare the resulting plaintext with the original one */
+        if (length != plaintext_len) {
+            srtp_cipher_dealloc(c);
+            return srtp_err_status_algo_fail;
+        }
+        status = srtp_err_status_ok;
+        for (k = 0; k < plaintext_len; k++) {
+            if (buffer[k] != buffer2[k]) {
+                status = srtp_err_status_algo_fail;
+                debug_print(srtp_mod_cipher, "random test case %d failed",
+                            case_num);
+                debug_print(srtp_mod_cipher, "(failure at byte %u)", k);
+            }
+        }
+        if (status) {
+            srtp_cipher_dealloc(c);
+            return srtp_err_status_algo_fail;
+        }
+    }
+
+    status = srtp_cipher_dealloc(c);
+    if (status) {
+        return status;
+    }
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * srtp_cipher_type_self_test(ct) performs srtp_cipher_type_test on ct's
+ * internal list of test data.
+ */
+srtp_err_status_t srtp_cipher_type_self_test(const srtp_cipher_type_t *ct)
+{
+    return srtp_cipher_type_test(ct, ct->test_data);
+}
+
+/*
+ * cipher_bits_per_second(c, l, t) computes (an estimate of) the
+ * number of bits that a cipher implementation can encrypt in a second
+ *
+ * c is a cipher (which MUST be allocated and initialized already), l
+ * is the length in octets of the test data to be encrypted, and t is
+ * the number of trials
+ *
+ * if an error is encountered, the value 0 is returned
+ */
+uint64_t srtp_cipher_bits_per_second(srtp_cipher_t *c,
+                                     int octets_in_buffer,
+                                     int num_trials)
+{
+    int i;
+    v128_t nonce;
+    clock_t timer;
+    unsigned char *enc_buf;
+    unsigned int len = octets_in_buffer;
+
+    enc_buf = (unsigned char *)srtp_crypto_alloc(octets_in_buffer);
+    if (enc_buf == NULL) {
+        return 0; /* indicate bad parameters by returning null */
+    }
+    /* time repeated trials */
+    v128_set_to_zero(&nonce);
+    timer = clock();
+    for (i = 0; i < num_trials; i++, nonce.v32[3] = i) {
+        if (srtp_cipher_set_iv(c, (uint8_t *)&nonce, srtp_direction_encrypt) !=
+            srtp_err_status_ok) {
+            srtp_crypto_free(enc_buf);
+            return 0;
+        }
+        if (srtp_cipher_encrypt(c, enc_buf, &len) != srtp_err_status_ok) {
+            srtp_crypto_free(enc_buf);
+            return 0;
+        }
+    }
+    timer = clock() - timer;
+
+    srtp_crypto_free(enc_buf);
+
+    if (timer == 0) {
+        /* Too fast! */
+        return 0;
+    }
+
+    return (uint64_t)CLOCKS_PER_SEC * num_trials * 8 * octets_in_buffer / timer;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/null_cipher.c b/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/null_cipher.c
new file mode 100644
index 000000000..969724611
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/cipher/null_cipher.c
@@ -0,0 +1,153 @@
+/*
+ * null_cipher.c
+ *
+ * A null cipher implementation.  This cipher leaves the plaintext
+ * unchanged.
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "datatypes.h"
+#include "null_cipher.h"
+#include "err.h" /* for srtp_debug */
+#include "alloc.h"
+#include "cipher_types.h"
+
+static srtp_err_status_t srtp_null_cipher_alloc(srtp_cipher_t **c,
+                                                int key_len,
+                                                int tlen)
+{
+    extern const srtp_cipher_type_t srtp_null_cipher;
+
+    debug_print(srtp_mod_cipher, "allocating cipher with key length %d",
+                key_len);
+
+    /* allocate memory a cipher of type null_cipher */
+    *c = (srtp_cipher_t *)srtp_crypto_alloc(sizeof(srtp_cipher_t));
+    if (*c == NULL) {
+        return srtp_err_status_alloc_fail;
+    }
+
+    /* set pointers */
+    (*c)->algorithm = SRTP_NULL_CIPHER;
+    (*c)->type = &srtp_null_cipher;
+    (*c)->state = (void *)0x1; /* The null cipher does not maintain state */
+
+    /* set key size */
+    (*c)->key_len = key_len;
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_null_cipher_dealloc(srtp_cipher_t *c)
+{
+    extern const srtp_cipher_type_t srtp_null_cipher;
+
+    /* zeroize entire state*/
+    octet_string_set_to_zero(c, sizeof(srtp_cipher_t));
+
+    /* free memory of type null_cipher */
+    srtp_crypto_free(c);
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_null_cipher_init(void *cv, const uint8_t *key)
+{
+    /* srtp_null_cipher_ctx_t *c = (srtp_null_cipher_ctx_t *)cv; */
+
+    debug_print0(srtp_mod_cipher, "initializing null cipher");
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_null_cipher_set_iv(void *cv,
+                                                 uint8_t *iv,
+                                                 srtp_cipher_direction_t dir)
+{
+    /* srtp_null_cipher_ctx_t *c = (srtp_null_cipher_ctx_t *)cv; */
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_null_cipher_encrypt(void *cv,
+                                                  unsigned char *buf,
+                                                  unsigned int *bytes_to_encr)
+{
+    /* srtp_null_cipher_ctx_t *c = (srtp_null_cipher_ctx_t *)cv; */
+    return srtp_err_status_ok;
+}
+
+static const char srtp_null_cipher_description[] = "null cipher";
+
+static const srtp_cipher_test_case_t srtp_null_cipher_test_0 = {
+    0,    /* octets in key            */
+    NULL, /* key                      */
+    0,    /* packet index             */
+    0,    /* octets in plaintext      */
+    NULL, /* plaintext                */
+    0,    /* octets in plaintext      */
+    NULL, /* ciphertext               */
+    0,    /* */
+    NULL, /* */
+    0,    /* */
+    NULL  /* pointer to next testcase */
+};
+
+/*
+ * note: the decrypt function is idential to the encrypt function
+ */
+
+const srtp_cipher_type_t srtp_null_cipher = {
+    srtp_null_cipher_alloc,       /* */
+    srtp_null_cipher_dealloc,     /* */
+    srtp_null_cipher_init,        /* */
+    0,                            /* set_aad */
+    srtp_null_cipher_encrypt,     /* */
+    srtp_null_cipher_encrypt,     /* */
+    srtp_null_cipher_set_iv,      /* */
+    0,                            /* get_tag */
+    srtp_null_cipher_description, /* */
+    &srtp_null_cipher_test_0,     /* */
+    SRTP_NULL_CIPHER              /* */
+};
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/hash/auth.c b/trunk/3rdparty/libsrtp-2-fit/crypto/hash/auth.c
new file mode 100644
index 000000000..f19327dc8
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/hash/auth.c
@@ -0,0 +1,187 @@
+/*
+ * auth.c
+ *
+ * some bookkeeping functions for authentication functions
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "auth.h"
+#include "err.h"       /* for srtp_debug */
+#include "datatypes.h" /* for octet_string */
+
+/* the debug module for authentiation */
+
+srtp_debug_module_t srtp_mod_auth = {
+    0,          /* debugging is off by default */
+    "auth func" /* printable name for module   */
+};
+
+int srtp_auth_get_key_length(const srtp_auth_t *a)
+{
+    return a->key_len;
+}
+
+int srtp_auth_get_tag_length(const srtp_auth_t *a)
+{
+    return a->out_len;
+}
+
+int srtp_auth_get_prefix_length(const srtp_auth_t *a)
+{
+    return a->prefix_len;
+}
+
+/*
+ * srtp_auth_type_test() tests an auth function of type ct against
+ * test cases provided in a list test_data of values of key, data, and tag
+ * that is known to be good
+ */
+
+/* should be big enough for most occasions */
+#define SELF_TEST_TAG_BUF_OCTETS 32
+
+srtp_err_status_t srtp_auth_type_test(const srtp_auth_type_t *at,
+                                      const srtp_auth_test_case_t *test_data)
+{
+    const srtp_auth_test_case_t *test_case = test_data;
+    srtp_auth_t *a;
+    srtp_err_status_t status;
+    uint8_t tag[SELF_TEST_TAG_BUF_OCTETS];
+    int i, case_num = 0;
+
+    debug_print(srtp_mod_auth, "running self-test for auth function %s",
+                at->description);
+
+    /*
+     * check to make sure that we have at least one test case, and
+     * return an error if we don't - we need to be paranoid here
+     */
+    if (test_case == NULL) {
+        return srtp_err_status_cant_check;
+    }
+
+    /* loop over all test cases */
+    while (test_case != NULL) {
+        /* check test case parameters */
+        if (test_case->tag_length_octets > SELF_TEST_TAG_BUF_OCTETS) {
+            return srtp_err_status_bad_param;
+        }
+
+        /* allocate auth */
+        status = srtp_auth_type_alloc(at, &a, test_case->key_length_octets,
+                                      test_case->tag_length_octets);
+        if (status) {
+            return status;
+        }
+
+        /* initialize auth */
+        status = srtp_auth_init(a, test_case->key);
+        if (status) {
+            srtp_auth_dealloc(a);
+            return status;
+        }
+
+        /* zeroize tag then compute */
+        octet_string_set_to_zero(tag, test_case->tag_length_octets);
+        status = srtp_auth_compute(a, test_case->data,
+                                   test_case->data_length_octets, tag);
+        if (status) {
+            srtp_auth_dealloc(a);
+            return status;
+        }
+
+        debug_print(srtp_mod_auth, "key: %s",
+                    srtp_octet_string_hex_string(test_case->key,
+                                                 test_case->key_length_octets));
+        debug_print(srtp_mod_auth, "data: %s",
+                    srtp_octet_string_hex_string(
+                        test_case->data, test_case->data_length_octets));
+        debug_print(
+            srtp_mod_auth, "tag computed: %s",
+            srtp_octet_string_hex_string(tag, test_case->tag_length_octets));
+        debug_print(srtp_mod_auth, "tag expected: %s",
+                    srtp_octet_string_hex_string(test_case->tag,
+                                                 test_case->tag_length_octets));
+
+        /* check the result */
+        status = srtp_err_status_ok;
+        for (i = 0; i < test_case->tag_length_octets; i++) {
+            if (tag[i] != test_case->tag[i]) {
+                status = srtp_err_status_algo_fail;
+                debug_print(srtp_mod_auth, "test case %d failed", case_num);
+                debug_print(srtp_mod_auth, "  (mismatch at octet %d)", i);
+            }
+        }
+        if (status) {
+            srtp_auth_dealloc(a);
+            return srtp_err_status_algo_fail;
+        }
+
+        /* deallocate the auth function */
+        status = srtp_auth_dealloc(a);
+        if (status) {
+            return status;
+        }
+
+        /*
+         * the auth function passed the test case, so move on to the next test
+         * case in the list; if NULL, we'll quit and return an OK
+         */
+        test_case = test_case->next_test_case;
+        ++case_num;
+    }
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * srtp_auth_type_self_test(at) performs srtp_auth_type_test on at's internal
+ * list of test data.
+ */
+
+srtp_err_status_t srtp_auth_type_self_test(const srtp_auth_type_t *at)
+{
+    return srtp_auth_type_test(at, at->test_data);
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/hash/hmac.c b/trunk/3rdparty/libsrtp-2-fit/crypto/hash/hmac.c
new file mode 100644
index 000000000..6e91468f3
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/hash/hmac.c
@@ -0,0 +1,283 @@
+/*
+ * hmac.c
+ *
+ * implementation of hmac srtp_auth_type_t
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright(c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "hmac.h"
+#include "alloc.h"
+#include "cipher_types.h"
+
+/* the debug module for authentiation */
+
+srtp_debug_module_t srtp_mod_hmac = {
+    0,           /* debugging is off by default */
+    "hmac sha-1" /* printable name for module   */
+};
+
+static srtp_err_status_t srtp_hmac_alloc(srtp_auth_t **a,
+                                         int key_len,
+                                         int out_len)
+{
+    extern const srtp_auth_type_t srtp_hmac;
+    uint8_t *pointer;
+
+    debug_print(srtp_mod_hmac, "allocating auth func with key length %d",
+                key_len);
+    debug_print(srtp_mod_hmac, "                          tag length %d",
+                out_len);
+
+    /*
+     * check key length - note that we don't support keys larger
+     * than 20 bytes yet
+     */
+    if (key_len > 20) {
+        return srtp_err_status_bad_param;
+    }
+
+    /* check output length - should be less than 20 bytes */
+    if (out_len > 20) {
+        return srtp_err_status_bad_param;
+    }
+
+    /* allocate memory for auth and srtp_hmac_ctx_t structures */
+    pointer = (uint8_t *)srtp_crypto_alloc(sizeof(srtp_hmac_ctx_t) +
+                                           sizeof(srtp_auth_t));
+    if (pointer == NULL) {
+        return srtp_err_status_alloc_fail;
+    }
+
+    /* set pointers */
+    *a = (srtp_auth_t *)pointer;
+    (*a)->type = &srtp_hmac;
+    (*a)->state = pointer + sizeof(srtp_auth_t);
+    (*a)->out_len = out_len;
+    (*a)->key_len = key_len;
+    (*a)->prefix_len = 0;
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_hmac_dealloc(srtp_auth_t *a)
+{
+    /* zeroize entire state*/
+    octet_string_set_to_zero(a, sizeof(srtp_hmac_ctx_t) + sizeof(srtp_auth_t));
+
+    /* free memory */
+    srtp_crypto_free(a);
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_hmac_init(void *statev,
+                                        const uint8_t *key,
+                                        int key_len)
+{
+    srtp_hmac_ctx_t *state = (srtp_hmac_ctx_t *)statev;
+    int i;
+    uint8_t ipad[64];
+
+    /*
+     * check key length - note that we don't support keys larger
+     * than 20 bytes yet
+     */
+    if (key_len > 20) {
+        return srtp_err_status_bad_param;
+    }
+
+    /*
+     * set values of ipad and opad by exoring the key into the
+     * appropriate constant values
+     */
+    for (i = 0; i < key_len; i++) {
+        ipad[i] = key[i] ^ 0x36;
+        state->opad[i] = key[i] ^ 0x5c;
+    }
+    /* set the rest of ipad, opad to constant values */
+    for (; i < 64; i++) {
+        ipad[i] = 0x36;
+        ((uint8_t *)state->opad)[i] = 0x5c;
+    }
+
+    debug_print(srtp_mod_hmac, "ipad: %s",
+                srtp_octet_string_hex_string(ipad, 64));
+
+    /* initialize sha1 context */
+    srtp_sha1_init(&state->init_ctx);
+
+    /* hash ipad ^ key */
+    srtp_sha1_update(&state->init_ctx, ipad, 64);
+    memcpy(&state->ctx, &state->init_ctx, sizeof(srtp_sha1_ctx_t));
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_hmac_start(void *statev)
+{
+    srtp_hmac_ctx_t *state = (srtp_hmac_ctx_t *)statev;
+
+    memcpy(&state->ctx, &state->init_ctx, sizeof(srtp_sha1_ctx_t));
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_hmac_update(void *statev,
+                                          const uint8_t *message,
+                                          int msg_octets)
+{
+    srtp_hmac_ctx_t *state = (srtp_hmac_ctx_t *)statev;
+
+    debug_print(srtp_mod_hmac, "input: %s",
+                srtp_octet_string_hex_string(message, msg_octets));
+
+    /* hash message into sha1 context */
+    srtp_sha1_update(&state->ctx, message, msg_octets);
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_hmac_compute(void *statev,
+                                           const uint8_t *message,
+                                           int msg_octets,
+                                           int tag_len,
+                                           uint8_t *result)
+{
+    srtp_hmac_ctx_t *state = (srtp_hmac_ctx_t *)statev;
+    uint32_t hash_value[5];
+    uint32_t H[5];
+    int i;
+
+    /* check tag length, return error if we can't provide the value expected */
+    if (tag_len > 20) {
+        return srtp_err_status_bad_param;
+    }
+
+    /* hash message, copy output into H */
+    srtp_hmac_update(state, message, msg_octets);
+    srtp_sha1_final(&state->ctx, H);
+
+    /*
+     * note that we don't need to debug_print() the input, since the
+     * function hmac_update() already did that for us
+     */
+    debug_print(srtp_mod_hmac, "intermediate state: %s",
+                srtp_octet_string_hex_string((uint8_t *)H, 20));
+
+    /* re-initialize hash context */
+    srtp_sha1_init(&state->ctx);
+
+    /* hash opad ^ key  */
+    srtp_sha1_update(&state->ctx, (uint8_t *)state->opad, 64);
+
+    /* hash the result of the inner hash */
+    srtp_sha1_update(&state->ctx, (uint8_t *)H, 20);
+
+    /* the result is returned in the array hash_value[] */
+    srtp_sha1_final(&state->ctx, hash_value);
+
+    /* copy hash_value to *result */
+    for (i = 0; i < tag_len; i++) {
+        result[i] = ((uint8_t *)hash_value)[i];
+    }
+
+    debug_print(srtp_mod_hmac, "output: %s",
+                srtp_octet_string_hex_string((uint8_t *)hash_value, tag_len));
+
+    return srtp_err_status_ok;
+}
+
+/* begin test case 0 */
+/* clang-format off */
+static const uint8_t srtp_hmac_test_case_0_key[20] = {
+    0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b,
+    0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b,
+    0x0b, 0x0b, 0x0b, 0x0b
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_hmac_test_case_0_data[8] = {
+    0x48, 0x69, 0x20, 0x54, 0x68, 0x65, 0x72, 0x65 /* "Hi There" */
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_hmac_test_case_0_tag[20] = {
+    0xb6, 0x17, 0x31, 0x86, 0x55, 0x05, 0x72, 0x64,
+    0xe2, 0x8b, 0xc0, 0xb6, 0xfb, 0x37, 0x8c, 0x8e,
+    0xf1, 0x46, 0xbe, 0x00
+};
+/* clang-format on */
+
+static const srtp_auth_test_case_t srtp_hmac_test_case_0 = {
+    20,                         /* octets in key            */
+    srtp_hmac_test_case_0_key,  /* key                      */
+    8,                          /* octets in data           */
+    srtp_hmac_test_case_0_data, /* data                     */
+    20,                         /* octets in tag            */
+    srtp_hmac_test_case_0_tag,  /* tag                      */
+    NULL                        /* pointer to next testcase */
+};
+
+/* end test case 0 */
+
+static const char srtp_hmac_description[] =
+    "hmac sha-1 authentication function";
+
+/*
+ * srtp_auth_type_t hmac is the hmac metaobject
+ */
+
+const srtp_auth_type_t srtp_hmac = {
+    srtp_hmac_alloc,        /* */
+    srtp_hmac_dealloc,      /* */
+    srtp_hmac_init,         /* */
+    srtp_hmac_compute,      /* */
+    srtp_hmac_update,       /* */
+    srtp_hmac_start,        /* */
+    srtp_hmac_description,  /* */
+    &srtp_hmac_test_case_0, /* */
+    SRTP_HMAC_SHA1          /* */
+};
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/hash/hmac_ossl.c b/trunk/3rdparty/libsrtp-2-fit/crypto/hash/hmac_ossl.c
new file mode 100644
index 000000000..8146438b0
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/hash/hmac_ossl.c
@@ -0,0 +1,273 @@
+/*
+ * hmac_ossl.c
+ *
+ * Implementation of hmac srtp_auth_type_t that leverages OpenSSL
+ *
+ * John A. Foley
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright(c) 2013-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "auth.h"
+#include "alloc.h"
+#include "err.h" /* for srtp_debug */
+#include <openssl/evp.h>
+#include <openssl/hmac.h>
+
+#define SHA1_DIGEST_SIZE 20
+
+/* the debug module for authentiation */
+
+srtp_debug_module_t srtp_mod_hmac = {
+    0,                   /* debugging is off by default */
+    "hmac sha-1 openssl" /* printable name for module   */
+};
+
+static srtp_err_status_t srtp_hmac_alloc(srtp_auth_t **a,
+                                         int key_len,
+                                         int out_len)
+{
+    extern const srtp_auth_type_t srtp_hmac;
+
+    debug_print(srtp_mod_hmac, "allocating auth func with key length %d",
+                key_len);
+    debug_print(srtp_mod_hmac, "                          tag length %d",
+                out_len);
+
+    /* check output length - should be less than 20 bytes */
+    if (out_len > SHA1_DIGEST_SIZE) {
+        return srtp_err_status_bad_param;
+    }
+
+/* OpenSSL 1.1.0 made HMAC_CTX an opaque structure, which must be allocated
+   using HMAC_CTX_new.  But this function doesn't exist in OpenSSL 1.0.x. */
+#if OPENSSL_VERSION_NUMBER < 0x10100000L || LIBRESSL_VERSION_NUMBER
+    {
+        /* allocate memory for auth and HMAC_CTX structures */
+        uint8_t *pointer;
+        HMAC_CTX *new_hmac_ctx;
+        pointer = (uint8_t *)srtp_crypto_alloc(sizeof(HMAC_CTX) +
+                                               sizeof(srtp_auth_t));
+        if (pointer == NULL) {
+            return srtp_err_status_alloc_fail;
+        }
+        *a = (srtp_auth_t *)pointer;
+        (*a)->state = pointer + sizeof(srtp_auth_t);
+        new_hmac_ctx = (HMAC_CTX *)((*a)->state);
+
+        HMAC_CTX_init(new_hmac_ctx);
+    }
+
+#else
+    *a = (srtp_auth_t *)srtp_crypto_alloc(sizeof(srtp_auth_t));
+    if (*a == NULL) {
+        return srtp_err_status_alloc_fail;
+    }
+
+    (*a)->state = HMAC_CTX_new();
+    if ((*a)->state == NULL) {
+        srtp_crypto_free(*a);
+        *a = NULL;
+        return srtp_err_status_alloc_fail;
+    }
+#endif
+
+    /* set pointers */
+    (*a)->type = &srtp_hmac;
+    (*a)->out_len = out_len;
+    (*a)->key_len = key_len;
+    (*a)->prefix_len = 0;
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_hmac_dealloc(srtp_auth_t *a)
+{
+    HMAC_CTX *hmac_ctx;
+
+    hmac_ctx = (HMAC_CTX *)a->state;
+
+#if OPENSSL_VERSION_NUMBER < 0x10100000L || LIBRESSL_VERSION_NUMBER
+    HMAC_CTX_cleanup(hmac_ctx);
+
+    /* zeroize entire state*/
+    octet_string_set_to_zero(a, sizeof(HMAC_CTX) + sizeof(srtp_auth_t));
+
+#else
+    HMAC_CTX_free(hmac_ctx);
+
+    /* zeroize entire state*/
+    octet_string_set_to_zero(a, sizeof(srtp_auth_t));
+#endif
+
+    /* free memory */
+    srtp_crypto_free(a);
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_hmac_start(void *statev)
+{
+    HMAC_CTX *state = (HMAC_CTX *)statev;
+
+    if (HMAC_Init_ex(state, NULL, 0, NULL, NULL) == 0)
+        return srtp_err_status_auth_fail;
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_hmac_init(void *statev,
+                                        const uint8_t *key,
+                                        int key_len)
+{
+    HMAC_CTX *state = (HMAC_CTX *)statev;
+
+    if (HMAC_Init_ex(state, key, key_len, EVP_sha1(), NULL) == 0)
+        return srtp_err_status_auth_fail;
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_hmac_update(void *statev,
+                                          const uint8_t *message,
+                                          int msg_octets)
+{
+    HMAC_CTX *state = (HMAC_CTX *)statev;
+
+    debug_print(srtp_mod_hmac, "input: %s",
+                srtp_octet_string_hex_string(message, msg_octets));
+
+    if (HMAC_Update(state, message, msg_octets) == 0)
+        return srtp_err_status_auth_fail;
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_hmac_compute(void *statev,
+                                           const uint8_t *message,
+                                           int msg_octets,
+                                           int tag_len,
+                                           uint8_t *result)
+{
+    HMAC_CTX *state = (HMAC_CTX *)statev;
+    uint8_t hash_value[SHA1_DIGEST_SIZE];
+    int i;
+    unsigned int len;
+
+    /* check tag length, return error if we can't provide the value expected */
+    if (tag_len > SHA1_DIGEST_SIZE) {
+        return srtp_err_status_bad_param;
+    }
+
+    /* hash message, copy output into H */
+    if (HMAC_Update(state, message, msg_octets) == 0)
+        return srtp_err_status_auth_fail;
+
+    if (HMAC_Final(state, hash_value, &len) == 0)
+        return srtp_err_status_auth_fail;
+
+    if (len < tag_len)
+        return srtp_err_status_auth_fail;
+
+    /* copy hash_value to *result */
+    for (i = 0; i < tag_len; i++) {
+        result[i] = hash_value[i];
+    }
+
+    debug_print(srtp_mod_hmac, "output: %s",
+                srtp_octet_string_hex_string(hash_value, tag_len));
+
+    return srtp_err_status_ok;
+}
+
+/* begin test case 0 */
+/* clang-format off */
+static const uint8_t srtp_hmac_test_case_0_key[SHA1_DIGEST_SIZE] = {
+    0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b,
+    0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b,
+    0x0b, 0x0b, 0x0b, 0x0b
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_hmac_test_case_0_data[8] = {
+    0x48, 0x69, 0x20, 0x54, 0x68, 0x65, 0x72, 0x65 /* "Hi There" */
+};
+/* clang-format on */
+
+/* clang-format off */
+static const uint8_t srtp_hmac_test_case_0_tag[SHA1_DIGEST_SIZE] = {
+    0xb6, 0x17, 0x31, 0x86, 0x55, 0x05, 0x72, 0x64,
+    0xe2, 0x8b, 0xc0, 0xb6, 0xfb, 0x37, 0x8c, 0x8e,
+    0xf1, 0x46, 0xbe, 0x00
+};
+/* clang-format on */
+
+static const srtp_auth_test_case_t srtp_hmac_test_case_0 = {
+    sizeof(srtp_hmac_test_case_0_key),  /* octets in key            */
+    srtp_hmac_test_case_0_key,          /* key                      */
+    sizeof(srtp_hmac_test_case_0_data), /* octets in data           */
+    srtp_hmac_test_case_0_data,         /* data                     */
+    sizeof(srtp_hmac_test_case_0_tag),  /* octets in tag            */
+    srtp_hmac_test_case_0_tag,          /* tag                      */
+    NULL                                /* pointer to next testcase */
+};
+
+/* end test case 0 */
+
+static const char srtp_hmac_description[] =
+    "hmac sha-1 authentication function";
+
+/*
+ * srtp_auth_type_t hmac is the hmac metaobject
+ */
+
+const srtp_auth_type_t srtp_hmac = {
+    srtp_hmac_alloc,        /* */
+    srtp_hmac_dealloc,      /* */
+    srtp_hmac_init,         /* */
+    srtp_hmac_compute,      /* */
+    srtp_hmac_update,       /* */
+    srtp_hmac_start,        /* */
+    srtp_hmac_description,  /* */
+    &srtp_hmac_test_case_0, /* */
+    SRTP_HMAC_SHA1          /* */
+};
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/hash/null_auth.c b/trunk/3rdparty/libsrtp-2-fit/crypto/hash/null_auth.c
new file mode 100644
index 000000000..5194417ca
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/hash/null_auth.c
@@ -0,0 +1,168 @@
+/*
+ * null_auth.c
+ *
+ * implements the do-nothing auth algorithm
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ *
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "null_auth.h"
+#include "err.h" /* for srtp_debug */
+#include "alloc.h"
+#include "cipher_types.h"
+
+static srtp_err_status_t srtp_null_auth_alloc(srtp_auth_t **a,
+                                              int key_len,
+                                              int out_len)
+{
+    extern const srtp_auth_type_t srtp_null_auth;
+    uint8_t *pointer;
+
+    debug_print(srtp_mod_auth, "allocating auth func with key length %d",
+                key_len);
+    debug_print(srtp_mod_auth, "                          tag length %d",
+                out_len);
+
+    /* allocate memory for auth and srtp_null_auth_ctx_t structures */
+    pointer = (uint8_t *)srtp_crypto_alloc(sizeof(srtp_null_auth_ctx_t) +
+                                           sizeof(srtp_auth_t));
+    if (pointer == NULL) {
+        return srtp_err_status_alloc_fail;
+    }
+
+    /* set pointers */
+    *a = (srtp_auth_t *)pointer;
+    (*a)->type = &srtp_null_auth;
+    (*a)->state = pointer + sizeof(srtp_auth_t);
+    (*a)->out_len = out_len;
+    (*a)->prefix_len = out_len;
+    (*a)->key_len = key_len;
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_null_auth_dealloc(srtp_auth_t *a)
+{
+    extern const srtp_auth_type_t srtp_null_auth;
+
+    /* zeroize entire state*/
+    octet_string_set_to_zero(a, sizeof(srtp_null_auth_ctx_t) +
+                                    sizeof(srtp_auth_t));
+
+    /* free memory */
+    srtp_crypto_free(a);
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_null_auth_init(void *statev,
+                                             const uint8_t *key,
+                                             int key_len)
+{
+    /* srtp_null_auth_ctx_t *state = (srtp_null_auth_ctx_t *)statev; */
+    /* accept any length of key, and do nothing */
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_null_auth_compute(void *statev,
+                                                const uint8_t *message,
+                                                int msg_octets,
+                                                int tag_len,
+                                                uint8_t *result)
+{
+    /* srtp_null_auth_ctx_t *state = (srtp_null_auth_ctx_t *)statev; */
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_null_auth_update(void *statev,
+                                               const uint8_t *message,
+                                               int msg_octets)
+{
+    /* srtp_null_auth_ctx_t *state = (srtp_null_auth_ctx_t *)statev; */
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_null_auth_start(void *statev)
+{
+    /* srtp_null_auth_ctx_t *state = (srtp_null_auth_ctx_t *)statev; */
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * srtp_auth_type_t - defines description, test case, and null_auth
+ * metaobject
+ */
+
+/* begin test case 0 */
+
+static const srtp_auth_test_case_t srtp_null_auth_test_case_0 = {
+    0,    /* octets in key            */
+    NULL, /* key                      */
+    0,    /* octets in data           */
+    NULL, /* data                     */
+    0,    /* octets in tag            */
+    NULL, /* tag                      */
+    NULL  /* pointer to next testcase */
+};
+
+/* end test case 0 */
+
+static const char srtp_null_auth_description[] = "null authentication function";
+
+const srtp_auth_type_t srtp_null_auth = {
+    srtp_null_auth_alloc,        /* */
+    srtp_null_auth_dealloc,      /* */
+    srtp_null_auth_init,         /* */
+    srtp_null_auth_compute,      /* */
+    srtp_null_auth_update,       /* */
+    srtp_null_auth_start,        /* */
+    srtp_null_auth_description,  /* */
+    &srtp_null_auth_test_case_0, /* */
+    SRTP_NULL_AUTH               /* */
+};
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/hash/sha1.c b/trunk/3rdparty/libsrtp-2-fit/crypto/hash/sha1.c
new file mode 100644
index 000000000..36c049ef8
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/hash/sha1.c
@@ -0,0 +1,472 @@
+/*
+ * sha1.c
+ *
+ * an implementation of the Secure Hash Algorithm v.1 (SHA-1),
+ * specified in FIPS 180-1
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "sha1.h"
+
+srtp_debug_module_t srtp_mod_sha1 = {
+    0,      /* debugging is off by default */
+    "sha-1" /* printable module name       */
+};
+
+/* SN == Rotate left N bits */
+#define S1(X) ((X << 1) | (X >> 31))
+#define S5(X) ((X << 5) | (X >> 27))
+#define S30(X) ((X << 30) | (X >> 2))
+
+#define f0(B, C, D) ((B & C) | (~B & D))
+#define f1(B, C, D) (B ^ C ^ D)
+#define f2(B, C, D) ((B & C) | (B & D) | (C & D))
+#define f3(B, C, D) (B ^ C ^ D)
+
+/*
+ * nota bene: the variable K0 appears in the curses library, so we
+ * give longer names to these variables to avoid spurious warnings
+ * on systems that uses curses
+ */
+
+uint32_t SHA_K0 = 0x5A827999; /* Kt for 0  <= t <= 19 */
+uint32_t SHA_K1 = 0x6ED9EBA1; /* Kt for 20 <= t <= 39 */
+uint32_t SHA_K2 = 0x8F1BBCDC; /* Kt for 40 <= t <= 59 */
+uint32_t SHA_K3 = 0xCA62C1D6; /* Kt for 60 <= t <= 79 */
+
+void srtp_sha1(const uint8_t *msg, int octets_in_msg, uint32_t hash_value[5])
+{
+    srtp_sha1_ctx_t ctx;
+
+    srtp_sha1_init(&ctx);
+    srtp_sha1_update(&ctx, msg, octets_in_msg);
+    srtp_sha1_final(&ctx, hash_value);
+}
+
+/*
+ *  srtp_sha1_core(M, H) computes the core compression function, where M is
+ *  the next part of the message (in network byte order) and H is the
+ *  intermediate state { H0, H1, ...} (in host byte order)
+ *
+ *  this function does not do any of the padding required in the
+ *  complete SHA1 function
+ *
+ *  this function is used in the SEAL 3.0 key setup routines
+ *  (crypto/cipher/seal.c)
+ */
+
+void srtp_sha1_core(const uint32_t M[16], uint32_t hash_value[5])
+{
+    uint32_t H0;
+    uint32_t H1;
+    uint32_t H2;
+    uint32_t H3;
+    uint32_t H4;
+    uint32_t W[80];
+    uint32_t A, B, C, D, E, TEMP;
+    int t;
+
+    /* copy hash_value into H0, H1, H2, H3, H4 */
+    H0 = hash_value[0];
+    H1 = hash_value[1];
+    H2 = hash_value[2];
+    H3 = hash_value[3];
+    H4 = hash_value[4];
+
+    /* copy/xor message into array */
+
+    W[0] = be32_to_cpu(M[0]);
+    W[1] = be32_to_cpu(M[1]);
+    W[2] = be32_to_cpu(M[2]);
+    W[3] = be32_to_cpu(M[3]);
+    W[4] = be32_to_cpu(M[4]);
+    W[5] = be32_to_cpu(M[5]);
+    W[6] = be32_to_cpu(M[6]);
+    W[7] = be32_to_cpu(M[7]);
+    W[8] = be32_to_cpu(M[8]);
+    W[9] = be32_to_cpu(M[9]);
+    W[10] = be32_to_cpu(M[10]);
+    W[11] = be32_to_cpu(M[11]);
+    W[12] = be32_to_cpu(M[12]);
+    W[13] = be32_to_cpu(M[13]);
+    W[14] = be32_to_cpu(M[14]);
+    W[15] = be32_to_cpu(M[15]);
+    TEMP = W[13] ^ W[8] ^ W[2] ^ W[0];
+    W[16] = S1(TEMP);
+    TEMP = W[14] ^ W[9] ^ W[3] ^ W[1];
+    W[17] = S1(TEMP);
+    TEMP = W[15] ^ W[10] ^ W[4] ^ W[2];
+    W[18] = S1(TEMP);
+    TEMP = W[16] ^ W[11] ^ W[5] ^ W[3];
+    W[19] = S1(TEMP);
+    TEMP = W[17] ^ W[12] ^ W[6] ^ W[4];
+    W[20] = S1(TEMP);
+    TEMP = W[18] ^ W[13] ^ W[7] ^ W[5];
+    W[21] = S1(TEMP);
+    TEMP = W[19] ^ W[14] ^ W[8] ^ W[6];
+    W[22] = S1(TEMP);
+    TEMP = W[20] ^ W[15] ^ W[9] ^ W[7];
+    W[23] = S1(TEMP);
+    TEMP = W[21] ^ W[16] ^ W[10] ^ W[8];
+    W[24] = S1(TEMP);
+    TEMP = W[22] ^ W[17] ^ W[11] ^ W[9];
+    W[25] = S1(TEMP);
+    TEMP = W[23] ^ W[18] ^ W[12] ^ W[10];
+    W[26] = S1(TEMP);
+    TEMP = W[24] ^ W[19] ^ W[13] ^ W[11];
+    W[27] = S1(TEMP);
+    TEMP = W[25] ^ W[20] ^ W[14] ^ W[12];
+    W[28] = S1(TEMP);
+    TEMP = W[26] ^ W[21] ^ W[15] ^ W[13];
+    W[29] = S1(TEMP);
+    TEMP = W[27] ^ W[22] ^ W[16] ^ W[14];
+    W[30] = S1(TEMP);
+    TEMP = W[28] ^ W[23] ^ W[17] ^ W[15];
+    W[31] = S1(TEMP);
+
+    /* process the remainder of the array */
+    for (t = 32; t < 80; t++) {
+        TEMP = W[t - 3] ^ W[t - 8] ^ W[t - 14] ^ W[t - 16];
+        W[t] = S1(TEMP);
+    }
+
+    A = H0;
+    B = H1;
+    C = H2;
+    D = H3;
+    E = H4;
+
+    for (t = 0; t < 20; t++) {
+        TEMP = S5(A) + f0(B, C, D) + E + W[t] + SHA_K0;
+        E = D;
+        D = C;
+        C = S30(B);
+        B = A;
+        A = TEMP;
+    }
+    for (; t < 40; t++) {
+        TEMP = S5(A) + f1(B, C, D) + E + W[t] + SHA_K1;
+        E = D;
+        D = C;
+        C = S30(B);
+        B = A;
+        A = TEMP;
+    }
+    for (; t < 60; t++) {
+        TEMP = S5(A) + f2(B, C, D) + E + W[t] + SHA_K2;
+        E = D;
+        D = C;
+        C = S30(B);
+        B = A;
+        A = TEMP;
+    }
+    for (; t < 80; t++) {
+        TEMP = S5(A) + f3(B, C, D) + E + W[t] + SHA_K3;
+        E = D;
+        D = C;
+        C = S30(B);
+        B = A;
+        A = TEMP;
+    }
+
+    hash_value[0] = H0 + A;
+    hash_value[1] = H1 + B;
+    hash_value[2] = H2 + C;
+    hash_value[3] = H3 + D;
+    hash_value[4] = H4 + E;
+
+    return;
+}
+
+void srtp_sha1_init(srtp_sha1_ctx_t *ctx)
+{
+    /* initialize state vector */
+    ctx->H[0] = 0x67452301;
+    ctx->H[1] = 0xefcdab89;
+    ctx->H[2] = 0x98badcfe;
+    ctx->H[3] = 0x10325476;
+    ctx->H[4] = 0xc3d2e1f0;
+
+    /* indicate that message buffer is empty */
+    ctx->octets_in_buffer = 0;
+
+    /* reset message bit-count to zero */
+    ctx->num_bits_in_msg = 0;
+}
+
+void srtp_sha1_update(srtp_sha1_ctx_t *ctx,
+                      const uint8_t *msg,
+                      int octets_in_msg)
+{
+    int i;
+    uint8_t *buf = (uint8_t *)ctx->M;
+
+    /* update message bit-count */
+    ctx->num_bits_in_msg += octets_in_msg * 8;
+
+    /* loop over 16-word blocks of M */
+    while (octets_in_msg > 0) {
+        if (octets_in_msg + ctx->octets_in_buffer >= 64) {
+            /*
+             * copy words of M into msg buffer until that buffer is full,
+             * converting them into host byte order as needed
+             */
+            octets_in_msg -= (64 - ctx->octets_in_buffer);
+            for (i = ctx->octets_in_buffer; i < 64; i++) {
+                buf[i] = *msg++;
+            }
+            ctx->octets_in_buffer = 0;
+
+            /* process a whole block */
+
+            debug_print0(srtp_mod_sha1, "(update) running srtp_sha1_core()");
+
+            srtp_sha1_core(ctx->M, ctx->H);
+
+        } else {
+            debug_print0(srtp_mod_sha1,
+                         "(update) not running srtp_sha1_core()");
+
+            for (i = ctx->octets_in_buffer;
+                 i < (ctx->octets_in_buffer + octets_in_msg); i++) {
+                buf[i] = *msg++;
+            }
+            ctx->octets_in_buffer += octets_in_msg;
+            octets_in_msg = 0;
+        }
+    }
+}
+
+/*
+ * srtp_sha1_final(ctx, output) computes the result for ctx and copies it
+ * into the twenty octets located at *output
+ */
+
+void srtp_sha1_final(srtp_sha1_ctx_t *ctx, uint32_t *output)
+{
+    uint32_t A, B, C, D, E, TEMP;
+    uint32_t W[80];
+    int i, t;
+
+    /*
+     * process the remaining octets_in_buffer, padding and terminating as
+     * necessary
+     */
+    {
+        int tail = ctx->octets_in_buffer % 4;
+
+        /* copy/xor message into array */
+        for (i = 0; i < (ctx->octets_in_buffer + 3) / 4; i++) {
+            W[i] = be32_to_cpu(ctx->M[i]);
+        }
+
+        /* set the high bit of the octet immediately following the message */
+        switch (tail) {
+        case (3):
+            W[i - 1] = (be32_to_cpu(ctx->M[i - 1]) & 0xffffff00) | 0x80;
+            W[i] = 0x0;
+            break;
+        case (2):
+            W[i - 1] = (be32_to_cpu(ctx->M[i - 1]) & 0xffff0000) | 0x8000;
+            W[i] = 0x0;
+            break;
+        case (1):
+            W[i - 1] = (be32_to_cpu(ctx->M[i - 1]) & 0xff000000) | 0x800000;
+            W[i] = 0x0;
+            break;
+        case (0):
+            W[i] = 0x80000000;
+            break;
+        }
+
+        /* zeroize remaining words */
+        for (i++; i < 15; i++) {
+            W[i] = 0x0;
+        }
+
+        /*
+         * if there is room at the end of the word array, then set the
+         * last word to the bit-length of the message; otherwise, set that
+         * word to zero and then we need to do one more run of the
+         * compression algo.
+         */
+        if (ctx->octets_in_buffer < 56) {
+            W[15] = ctx->num_bits_in_msg;
+        } else if (ctx->octets_in_buffer < 60) {
+            W[15] = 0x0;
+        }
+
+        /* process the word array */
+        for (t = 16; t < 80; t++) {
+            TEMP = W[t - 3] ^ W[t - 8] ^ W[t - 14] ^ W[t - 16];
+            W[t] = S1(TEMP);
+        }
+
+        A = ctx->H[0];
+        B = ctx->H[1];
+        C = ctx->H[2];
+        D = ctx->H[3];
+        E = ctx->H[4];
+
+        for (t = 0; t < 20; t++) {
+            TEMP = S5(A) + f0(B, C, D) + E + W[t] + SHA_K0;
+            E = D;
+            D = C;
+            C = S30(B);
+            B = A;
+            A = TEMP;
+        }
+        for (; t < 40; t++) {
+            TEMP = S5(A) + f1(B, C, D) + E + W[t] + SHA_K1;
+            E = D;
+            D = C;
+            C = S30(B);
+            B = A;
+            A = TEMP;
+        }
+        for (; t < 60; t++) {
+            TEMP = S5(A) + f2(B, C, D) + E + W[t] + SHA_K2;
+            E = D;
+            D = C;
+            C = S30(B);
+            B = A;
+            A = TEMP;
+        }
+        for (; t < 80; t++) {
+            TEMP = S5(A) + f3(B, C, D) + E + W[t] + SHA_K3;
+            E = D;
+            D = C;
+            C = S30(B);
+            B = A;
+            A = TEMP;
+        }
+
+        ctx->H[0] += A;
+        ctx->H[1] += B;
+        ctx->H[2] += C;
+        ctx->H[3] += D;
+        ctx->H[4] += E;
+    }
+
+    debug_print0(srtp_mod_sha1, "(final) running srtp_sha1_core()");
+
+    if (ctx->octets_in_buffer >= 56) {
+        debug_print0(srtp_mod_sha1, "(final) running srtp_sha1_core() again");
+
+        /* we need to do one final run of the compression algo */
+
+        /*
+         * set initial part of word array to zeros, and set the
+         * final part to the number of bits in the message
+         */
+        for (i = 0; i < 15; i++) {
+            W[i] = 0x0;
+        }
+        W[15] = ctx->num_bits_in_msg;
+
+        /* process the word array */
+        for (t = 16; t < 80; t++) {
+            TEMP = W[t - 3] ^ W[t - 8] ^ W[t - 14] ^ W[t - 16];
+            W[t] = S1(TEMP);
+        }
+
+        A = ctx->H[0];
+        B = ctx->H[1];
+        C = ctx->H[2];
+        D = ctx->H[3];
+        E = ctx->H[4];
+
+        for (t = 0; t < 20; t++) {
+            TEMP = S5(A) + f0(B, C, D) + E + W[t] + SHA_K0;
+            E = D;
+            D = C;
+            C = S30(B);
+            B = A;
+            A = TEMP;
+        }
+        for (; t < 40; t++) {
+            TEMP = S5(A) + f1(B, C, D) + E + W[t] + SHA_K1;
+            E = D;
+            D = C;
+            C = S30(B);
+            B = A;
+            A = TEMP;
+        }
+        for (; t < 60; t++) {
+            TEMP = S5(A) + f2(B, C, D) + E + W[t] + SHA_K2;
+            E = D;
+            D = C;
+            C = S30(B);
+            B = A;
+            A = TEMP;
+        }
+        for (; t < 80; t++) {
+            TEMP = S5(A) + f3(B, C, D) + E + W[t] + SHA_K3;
+            E = D;
+            D = C;
+            C = S30(B);
+            B = A;
+            A = TEMP;
+        }
+
+        ctx->H[0] += A;
+        ctx->H[1] += B;
+        ctx->H[2] += C;
+        ctx->H[3] += D;
+        ctx->H[4] += E;
+    }
+
+    /* copy result into output buffer */
+    output[0] = be32_to_cpu(ctx->H[0]);
+    output[1] = be32_to_cpu(ctx->H[1]);
+    output[2] = be32_to_cpu(ctx->H[2]);
+    output[3] = be32_to_cpu(ctx->H[3]);
+    output[4] = be32_to_cpu(ctx->H[4]);
+
+    /* indicate that message buffer in context is empty */
+    ctx->octets_in_buffer = 0;
+
+    return;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/aes.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/aes.h
new file mode 100644
index 000000000..779c3ac74
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/aes.h
@@ -0,0 +1,83 @@
+/*
+ * aes.h
+ *
+ * header file for the AES block cipher
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef AES_H
+#define AES_H
+
+#include "datatypes.h"
+#include "err.h"
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/* aes internals */
+
+typedef struct {
+    v128_t round[15];
+    int num_rounds;
+} srtp_aes_expanded_key_t;
+
+srtp_err_status_t srtp_aes_expand_encryption_key(
+    const uint8_t *key,
+    int key_len,
+    srtp_aes_expanded_key_t *expanded_key);
+
+srtp_err_status_t srtp_aes_expand_decryption_key(
+    const uint8_t *key,
+    int key_len,
+    srtp_aes_expanded_key_t *expanded_key);
+
+void srtp_aes_encrypt(v128_t *plaintext,
+                      const srtp_aes_expanded_key_t *exp_key);
+
+void srtp_aes_decrypt(v128_t *plaintext,
+                      const srtp_aes_expanded_key_t *exp_key);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* AES_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/aes_gcm.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/aes_gcm.h
new file mode 100644
index 000000000..4d6031f4b
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/aes_gcm.h
@@ -0,0 +1,89 @@
+/*
+ * aes_gcm.h
+ *
+ * Header for AES Galois Counter Mode.
+ *
+ * John A. Foley
+ * Cisco Systems, Inc.
+ *
+ */
+/*
+ *
+ * Copyright (c) 2013-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef AES_GCM_H
+#define AES_GCM_H
+
+#include "cipher.h"
+#include "srtp.h"
+#include "datatypes.h"
+
+#ifdef OPENSSL
+
+#include <openssl/evp.h>
+#include <openssl/aes.h>
+
+typedef struct {
+    int key_size;
+    int tag_len;
+    EVP_CIPHER_CTX *ctx;
+    srtp_cipher_direction_t dir;
+} srtp_aes_gcm_ctx_t;
+
+#endif /* OPENSSL */
+
+#ifdef NSS
+
+#include <nss.h>
+#include <pk11pub.h>
+
+#define MAX_AD_SIZE 2048
+
+typedef struct {
+    int key_size;
+    int tag_size;
+    srtp_cipher_direction_t dir;
+    NSSInitContext *nss;
+    PK11SymKey *key;
+    uint8_t iv[12];
+    uint8_t aad[MAX_AD_SIZE];
+    int aad_size;
+    CK_GCM_PARAMS params;
+    uint8_t tag[16];
+} srtp_aes_gcm_ctx_t;
+
+#endif /* NSS */
+
+#endif /* AES_GCM_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/aes_icm.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/aes_icm.h
new file mode 100644
index 000000000..8ded156a2
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/aes_icm.h
@@ -0,0 +1,62 @@
+/*
+ * aes_icm.h
+ *
+ * Header for AES Integer Counter Mode.
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ *
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef AES_ICM_H
+#define AES_ICM_H
+
+#include "aes.h"
+#include "cipher.h"
+
+typedef struct {
+    v128_t counter;                       /* holds the counter value          */
+    v128_t offset;                        /* initial offset value             */
+    v128_t keystream_buffer;              /* buffers bytes of keystream       */
+    srtp_aes_expanded_key_t expanded_key; /* the cipher key                   */
+    int bytes_in_buffer;                  /* number of unused bytes in buffer */
+    int key_size;                         /* AES key size + 14 byte SALT */
+} srtp_aes_icm_ctx_t;
+
+#endif /* AES_ICM_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/aes_icm_ext.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/aes_icm_ext.h
new file mode 100644
index 000000000..ad306ddca
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/aes_icm_ext.h
@@ -0,0 +1,83 @@
+/*
+ * aes_icm.h
+ *
+ * Header for AES Integer Counter Mode.
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ *
+ */
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef AES_ICM_H
+#define AES_ICM_H
+
+#include "cipher.h"
+#include "datatypes.h"
+
+#ifdef OPENSSL
+
+#include <openssl/evp.h>
+#include <openssl/aes.h>
+
+typedef struct {
+    v128_t counter; /* holds the counter value          */
+    v128_t offset;  /* initial offset value             */
+    int key_size;
+    EVP_CIPHER_CTX *ctx;
+} srtp_aes_icm_ctx_t;
+
+#endif /* OPENSSL */
+
+#ifdef NSS
+
+#include <nss.h>
+#include <pk11pub.h>
+
+typedef struct {
+    v128_t counter;
+    v128_t offset;
+    int key_size;
+    uint8_t iv[16];
+    NSSInitContext *nss;
+    PK11SymKey *key;
+    PK11Context *ctx;
+} srtp_aes_icm_ctx_t;
+
+#endif /* NSS */
+
+#endif /* AES_ICM_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/alloc.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/alloc.h
new file mode 100644
index 000000000..1fc041014
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/alloc.h
@@ -0,0 +1,76 @@
+/*
+ * alloc.h
+ *
+ * interface to memory allocation and deallocation, with optional debugging
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef CRYPTO_ALLOC_H
+#define CRYPTO_ALLOC_H
+
+#include "datatypes.h"
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/*
+ * srtp_crypto_alloc
+ *
+ * Allocates a block of memory  of given size. The memory will be
+ * initialized to zero's. Free the memory with a call to srtp_crypto_free.
+ *
+ * returns pointer to memory on success or else NULL
+ */
+void *srtp_crypto_alloc(size_t size);
+
+/*
+ * srtp_crypto_free
+ *
+ * Frees the block of memory  ptr previously  allocated with
+ * srtp_crypto_alloc
+ */
+void srtp_crypto_free(void *ptr);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* CRYPTO_ALLOC_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/auth.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/auth.h
new file mode 100644
index 000000000..774ea1687
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/auth.h
@@ -0,0 +1,173 @@
+/*
+ * auth.h
+ *
+ * common interface to authentication functions
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef SRTP_AUTH_H
+#define SRTP_AUTH_H
+
+#include "srtp.h"
+#include "crypto_types.h" /* for values of auth_type_id_t */
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+typedef const struct srtp_auth_type_t *srtp_auth_type_pointer;
+typedef struct srtp_auth_t *srtp_auth_pointer_t;
+
+typedef srtp_err_status_t (*srtp_auth_alloc_func)(srtp_auth_pointer_t *ap,
+                                                  int key_len,
+                                                  int out_len);
+
+typedef srtp_err_status_t (*srtp_auth_init_func)(void *state,
+                                                 const uint8_t *key,
+                                                 int key_len);
+
+typedef srtp_err_status_t (*srtp_auth_dealloc_func)(srtp_auth_pointer_t ap);
+
+typedef srtp_err_status_t (*srtp_auth_compute_func)(void *state,
+                                                    const uint8_t *buffer,
+                                                    int octets_to_auth,
+                                                    int tag_len,
+                                                    uint8_t *tag);
+
+typedef srtp_err_status_t (*srtp_auth_update_func)(void *state,
+                                                   const uint8_t *buffer,
+                                                   int octets_to_auth);
+
+typedef srtp_err_status_t (*srtp_auth_start_func)(void *state);
+
+/* some syntactic sugar on these function types */
+#define srtp_auth_type_alloc(at, a, klen, outlen)                              \
+    ((at)->alloc((a), (klen), (outlen)))
+
+#define srtp_auth_init(a, key)                                                 \
+    (((a)->type)->init((a)->state, (key), ((a)->key_len)))
+
+#define srtp_auth_compute(a, buf, len, res)                                    \
+    (((a)->type)->compute((a)->state, (buf), (len), (a)->out_len, (res)))
+
+#define srtp_auth_update(a, buf, len)                                          \
+    (((a)->type)->update((a)->state, (buf), (len)))
+
+#define srtp_auth_start(a) (((a)->type)->start((a)->state))
+
+#define srtp_auth_dealloc(c) (((c)->type)->dealloc(c))
+
+/* functions to get information about a particular auth_t */
+int srtp_auth_get_key_length(const struct srtp_auth_t *a);
+
+int srtp_auth_get_tag_length(const struct srtp_auth_t *a);
+
+int srtp_auth_get_prefix_length(const struct srtp_auth_t *a);
+
+/*
+ * srtp_auth_test_case_t is a (list of) key/message/tag values that are
+ * known to be correct for a particular cipher.  this data can be used
+ * to test an implementation in an on-the-fly self test of the
+ * correctness of the implementation.  (see the srtp_auth_type_self_test()
+ * function below)
+ */
+typedef struct srtp_auth_test_case_t {
+    int key_length_octets;  /* octets in key            */
+    const uint8_t *key;     /* key                      */
+    int data_length_octets; /* octets in data           */
+    const uint8_t *data;    /* data                     */
+    int tag_length_octets;  /* octets in tag            */
+    const uint8_t *tag;     /* tag                      */
+    const struct srtp_auth_test_case_t
+        *next_test_case; /* pointer to next testcase */
+} srtp_auth_test_case_t;
+
+/* srtp_auth_type_t */
+typedef struct srtp_auth_type_t {
+    srtp_auth_alloc_func alloc;
+    srtp_auth_dealloc_func dealloc;
+    srtp_auth_init_func init;
+    srtp_auth_compute_func compute;
+    srtp_auth_update_func update;
+    srtp_auth_start_func start;
+    const char *description;
+    const srtp_auth_test_case_t *test_data;
+    srtp_auth_type_id_t id;
+} srtp_auth_type_t;
+
+typedef struct srtp_auth_t {
+    const srtp_auth_type_t *type;
+    void *state;
+    int out_len;    /* length of output tag in octets */
+    int key_len;    /* length of key in octets        */
+    int prefix_len; /* length of keystream prefix     */
+} srtp_auth_t;
+
+/*
+ * srtp_auth_type_self_test() tests an auth_type against test cases
+ * provided in an array of values of key/message/tag that is known to
+ * be good
+ */
+srtp_err_status_t srtp_auth_type_self_test(const srtp_auth_type_t *at);
+
+/*
+ * srtp_auth_type_test() tests an auth_type against external test cases
+ * provided in an array of values of key/message/tag that is known to
+ * be good
+ */
+srtp_err_status_t srtp_auth_type_test(const srtp_auth_type_t *at,
+                                      const srtp_auth_test_case_t *test_data);
+
+/*
+ * srtp_replace_auth_type(ct, id)
+ *
+ * replaces srtp's kernel's auth type implementation for the auth_type id
+ * with a new one passed in externally.  The new auth type must pass all the
+ * existing auth_type's self tests as well as its own.
+ */
+srtp_err_status_t srtp_replace_auth_type(const srtp_auth_type_t *ct,
+                                         srtp_auth_type_id_t id);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* SRTP_AUTH_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/cipher.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/cipher.h
new file mode 100644
index 000000000..4f14e3560
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/cipher.h
@@ -0,0 +1,248 @@
+/*
+ * cipher.h
+ *
+ * common interface to ciphers
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef SRTP_CIPHER_H
+#define SRTP_CIPHER_H
+
+#include "srtp.h"
+#include "crypto_types.h" /* for values of cipher_type_id_t */
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/*
+ * srtp_cipher_direction_t defines a particular cipher operation.
+ *
+ * A srtp_cipher_direction_t is an enum that describes a particular cipher
+ * operation, i.e. encryption or decryption.  For some ciphers, this
+ * distinction does not matter, but for others, it is essential.
+ */
+typedef enum {
+    srtp_direction_encrypt, /**< encryption (convert plaintext to ciphertext) */
+    srtp_direction_decrypt, /**< decryption (convert ciphertext to plaintext) */
+    srtp_direction_any      /**< encryption or decryption                     */
+} srtp_cipher_direction_t;
+
+/*
+ * the srtp_cipher_pointer_t definition is needed
+ * as srtp_cipher_t is not yet defined
+ */
+typedef struct srtp_cipher_t *srtp_cipher_pointer_t;
+
+/*
+ *  a srtp_cipher_alloc_func_t allocates (but does not initialize) a
+ * srtp_cipher_t
+ */
+typedef srtp_err_status_t (*srtp_cipher_alloc_func_t)(srtp_cipher_pointer_t *cp,
+                                                      int key_len,
+                                                      int tag_len);
+
+/*
+ * a srtp_cipher_init_func_t [re-]initializes a cipher_t with a given key
+ */
+typedef srtp_err_status_t (*srtp_cipher_init_func_t)(void *state,
+                                                     const uint8_t *key);
+
+/* a srtp_cipher_dealloc_func_t de-allocates a cipher_t */
+typedef srtp_err_status_t (*srtp_cipher_dealloc_func_t)(
+    srtp_cipher_pointer_t cp);
+
+/*
+ * a srtp_cipher_set_aad_func_t processes the AAD data for AEAD ciphers
+ */
+typedef srtp_err_status_t (*srtp_cipher_set_aad_func_t)(void *state,
+                                                        const uint8_t *aad,
+                                                        uint32_t aad_len);
+
+/* a srtp_cipher_encrypt_func_t encrypts data in-place */
+typedef srtp_err_status_t (*srtp_cipher_encrypt_func_t)(
+    void *state,
+    uint8_t *buffer,
+    unsigned int *octets_to_encrypt);
+
+/* a srtp_cipher_decrypt_func_t decrypts data in-place */
+typedef srtp_err_status_t (*srtp_cipher_decrypt_func_t)(
+    void *state,
+    uint8_t *buffer,
+    unsigned int *octets_to_decrypt);
+
+/*
+ * a srtp_cipher_set_iv_func_t function sets the current initialization vector
+ */
+typedef srtp_err_status_t (*srtp_cipher_set_iv_func_t)(
+    void *state,
+    uint8_t *iv,
+    srtp_cipher_direction_t direction);
+
+/*
+ * a cipher_get_tag_func_t function is used to get the authentication
+ * tag that was calculated by an AEAD cipher.
+ */
+typedef srtp_err_status_t (*srtp_cipher_get_tag_func_t)(void *state,
+                                                        uint8_t *tag,
+                                                        uint32_t *len);
+
+/*
+ * srtp_cipher_test_case_t is a (list of) key, salt, plaintext, ciphertext,
+ * and aad values that are known to be correct for a
+ * particular cipher.  this data can be used to test an implementation
+ * in an on-the-fly self test of the correctness of the implementation.
+ * (see the srtp_cipher_type_self_test() function below)
+ */
+typedef struct srtp_cipher_test_case_t {
+    int key_length_octets;                 /* octets in key            */
+    const uint8_t *key;                    /* key                      */
+    uint8_t *idx;                          /* packet index             */
+    unsigned int plaintext_length_octets;  /* octets in plaintext      */
+    const uint8_t *plaintext;              /* plaintext                */
+    unsigned int ciphertext_length_octets; /* octets in plaintext      */
+    const uint8_t *ciphertext;             /* ciphertext               */
+    int aad_length_octets;                 /* octets in AAD            */
+    const uint8_t *aad;                    /* AAD                      */
+    int tag_length_octets;                 /* Length of AEAD tag       */
+    const struct srtp_cipher_test_case_t
+        *next_test_case; /* pointer to next testcase */
+} srtp_cipher_test_case_t;
+
+/* srtp_cipher_type_t defines the 'metadata' for a particular cipher type */
+typedef struct srtp_cipher_type_t {
+    srtp_cipher_alloc_func_t alloc;
+    srtp_cipher_dealloc_func_t dealloc;
+    srtp_cipher_init_func_t init;
+    srtp_cipher_set_aad_func_t set_aad;
+    srtp_cipher_encrypt_func_t encrypt;
+    srtp_cipher_encrypt_func_t decrypt;
+    srtp_cipher_set_iv_func_t set_iv;
+    srtp_cipher_get_tag_func_t get_tag;
+    const char *description;
+    const srtp_cipher_test_case_t *test_data;
+    srtp_cipher_type_id_t id;
+} srtp_cipher_type_t;
+
+/*
+ * srtp_cipher_t defines an instantiation of a particular cipher, with fixed
+ * key length, key and salt values
+ */
+typedef struct srtp_cipher_t {
+    const srtp_cipher_type_t *type;
+    void *state;
+    int key_len;
+    int algorithm;
+} srtp_cipher_t;
+
+/* some bookkeeping functions */
+int srtp_cipher_get_key_length(const srtp_cipher_t *c);
+
+/*
+ * srtp_cipher_type_self_test() tests a cipher against test cases provided in
+ * an array of values of key/srtp_xtd_seq_num_t/plaintext/ciphertext
+ * that is known to be good
+ */
+srtp_err_status_t srtp_cipher_type_self_test(const srtp_cipher_type_t *ct);
+
+/*
+ * srtp_cipher_type_test() tests a cipher against external test cases provided
+ * in
+ * an array of values of key/srtp_xtd_seq_num_t/plaintext/ciphertext
+ * that is known to be good
+ */
+srtp_err_status_t srtp_cipher_type_test(
+    const srtp_cipher_type_t *ct,
+    const srtp_cipher_test_case_t *test_data);
+
+/*
+ * srtp_cipher_bits_per_second(c, l, t) computes (an estimate of) the
+ * number of bits that a cipher implementation can encrypt in a second
+ *
+ * c is a cipher (which MUST be allocated and initialized already), l
+ * is the length in octets of the test data to be encrypted, and t is
+ * the number of trials
+ *
+ * if an error is encountered, then the value 0 is returned
+ */
+uint64_t srtp_cipher_bits_per_second(srtp_cipher_t *c,
+                                     int octets_in_buffer,
+                                     int num_trials);
+
+srtp_err_status_t srtp_cipher_type_alloc(const srtp_cipher_type_t *ct,
+                                         srtp_cipher_t **c,
+                                         int key_len,
+                                         int tlen);
+srtp_err_status_t srtp_cipher_dealloc(srtp_cipher_t *c);
+srtp_err_status_t srtp_cipher_init(srtp_cipher_t *c, const uint8_t *key);
+srtp_err_status_t srtp_cipher_set_iv(srtp_cipher_t *c,
+                                     uint8_t *iv,
+                                     int direction);
+srtp_err_status_t srtp_cipher_output(srtp_cipher_t *c,
+                                     uint8_t *buffer,
+                                     uint32_t *num_octets_to_output);
+srtp_err_status_t srtp_cipher_encrypt(srtp_cipher_t *c,
+                                      uint8_t *buffer,
+                                      uint32_t *num_octets_to_output);
+srtp_err_status_t srtp_cipher_decrypt(srtp_cipher_t *c,
+                                      uint8_t *buffer,
+                                      uint32_t *num_octets_to_output);
+srtp_err_status_t srtp_cipher_get_tag(srtp_cipher_t *c,
+                                      uint8_t *buffer,
+                                      uint32_t *tag_len);
+srtp_err_status_t srtp_cipher_set_aad(srtp_cipher_t *c,
+                                      const uint8_t *aad,
+                                      uint32_t aad_len);
+
+/*
+ * srtp_replace_cipher_type(ct, id)
+ *
+ * replaces srtp's existing cipher implementation for the cipher_type id
+ * with a new one passed in externally.  The new cipher must pass all the
+ * existing cipher_type's self tests as well as its own.
+ */
+srtp_err_status_t srtp_replace_cipher_type(const srtp_cipher_type_t *ct,
+                                           srtp_cipher_type_id_t id);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* SRTP_CIPHER_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/cipher_priv.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/cipher_priv.h
new file mode 100644
index 000000000..46848ea7c
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/cipher_priv.h
@@ -0,0 +1,62 @@
+/*
+ *
+ * Copyright(c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef SRTP_CIHPER_PRIV_H
+#define SRTP_CIHPER_PRIV_H
+
+#include "cipher.h"
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/*
+ * A trivial platform independent random source.
+ * For use in test only.
+ */
+void srtp_cipher_rand_for_tests(void *dest, uint32_t len);
+
+/*
+ * A trivial platform independent 32 bit random number.
+ * For use in test only.
+ */
+uint32_t srtp_cipher_rand_u32_for_tests(void);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* SRTP_CIPHER_PRIV_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/cipher_types.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/cipher_types.h
new file mode 100644
index 000000000..18f0328fb
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/cipher_types.h
@@ -0,0 +1,84 @@
+/*
+ *
+ * Copyright(c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef CIHPER_TYPES_H
+#define CIHPER_TYPES_H
+
+#include "cipher.h"
+#include "auth.h"
+
+/*
+ * cipher types that can be included in the kernel
+ */
+
+extern const srtp_cipher_type_t srtp_null_cipher;
+extern const srtp_cipher_type_t srtp_aes_icm_128;
+extern const srtp_cipher_type_t srtp_aes_icm_256;
+#ifdef GCM
+extern const srtp_cipher_type_t srtp_aes_icm_192;
+extern const srtp_cipher_type_t srtp_aes_gcm_128;
+extern const srtp_cipher_type_t srtp_aes_gcm_256;
+#endif
+
+/*
+ * auth func types that can be included in the kernel
+ */
+
+extern const srtp_auth_type_t srtp_null_auth;
+extern const srtp_auth_type_t srtp_hmac;
+
+/*
+ * other generic debug modules that can be included in the kernel
+ */
+
+extern srtp_debug_module_t srtp_mod_auth;
+extern srtp_debug_module_t srtp_mod_cipher;
+extern srtp_debug_module_t srtp_mod_stat;
+extern srtp_debug_module_t srtp_mod_alloc;
+
+/* debug modules for cipher types */
+extern srtp_debug_module_t srtp_mod_aes_icm;
+#ifdef OPENSSL
+extern srtp_debug_module_t srtp_mod_aes_gcm;
+#endif
+#ifdef NSS
+extern srtp_debug_module_t srtp_mod_aes_gcm;
+#endif
+
+/* debug modules for auth types */
+extern srtp_debug_module_t srtp_mod_hmac;
+
+#endif
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/crypto_kernel.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/crypto_kernel.h
new file mode 100644
index 000000000..1f8dfa771
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/crypto_kernel.h
@@ -0,0 +1,215 @@
+/*
+ * crypto_kernel.h
+ *
+ * header for the cryptographic kernel
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright(c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef CRYPTO_KERNEL
+#define CRYPTO_KERNEL
+
+#include "cipher.h"
+#include "auth.h"
+#include "err.h"
+#include "crypto_types.h"
+#include "key.h"
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/*
+ * crypto_kernel_state_t defines the possible states:
+ *
+ *    insecure - not yet initialized
+ *    secure   - initialized and passed self-tests
+ */
+typedef enum {
+    srtp_crypto_kernel_state_insecure,
+    srtp_crypto_kernel_state_secure
+} srtp_crypto_kernel_state_t;
+
+/*
+ * linked list of cipher types
+ */
+typedef struct srtp_kernel_cipher_type {
+    srtp_cipher_type_id_t id;
+    const srtp_cipher_type_t *cipher_type;
+    struct srtp_kernel_cipher_type *next;
+} srtp_kernel_cipher_type_t;
+
+/*
+ * linked list of auth types
+ */
+typedef struct srtp_kernel_auth_type {
+    srtp_auth_type_id_t id;
+    const srtp_auth_type_t *auth_type;
+    struct srtp_kernel_auth_type *next;
+} srtp_kernel_auth_type_t;
+
+/*
+ * linked list of debug modules
+ */
+typedef struct srtp_kernel_debug_module {
+    srtp_debug_module_t *mod;
+    struct srtp_kernel_debug_module *next;
+} srtp_kernel_debug_module_t;
+
+/*
+ * crypto_kernel_t is the data structure for the crypto kernel
+ *
+ * note that there is *exactly one* instance of this data type,
+ * a global variable defined in crypto_kernel.c
+ */
+typedef struct {
+    srtp_crypto_kernel_state_t state; /* current state of kernel     */
+    srtp_kernel_cipher_type_t *cipher_type_list; /* list of all cipher types */
+    srtp_kernel_auth_type_t *auth_type_list; /* list of all auth func types */
+    srtp_kernel_debug_module_t
+        *debug_module_list; /* list of all debug modules   */
+} srtp_crypto_kernel_t;
+
+/*
+ * srtp_crypto_kernel_t external api
+ */
+
+/*
+ * The function srtp_crypto_kernel_init() initialized the crypto kernel and
+ * runs the self-test operations on the random number generators and
+ * crypto algorithms.  Possible return values are:
+ *
+ *    srtp_err_status_ok    initialization successful
+ *    <other>               init failure
+ *
+ * If any value other than srtp_err_status_ok is returned, the
+ * crypto_kernel MUST NOT be used.
+ */
+srtp_err_status_t srtp_crypto_kernel_init(void);
+
+/*
+ * The function srtp_crypto_kernel_shutdown() de-initializes the
+ * crypto_kernel, zeroizes keys and other cryptographic material, and
+ * deallocates any dynamically allocated memory.  Possible return
+ * values are:
+ *
+ *    srtp_err_status_ok     shutdown successful
+ *    <other>                shutdown failure
+ *
+ */
+srtp_err_status_t srtp_crypto_kernel_shutdown(void);
+
+/*
+ * The function srtp_crypto_kernel_stats() checks the the crypto_kernel,
+ * running tests on the ciphers, auth funcs, and rng, and prints out a
+ * status report.  Possible return values are:
+ *
+ *    srtp_err_status_ok     all tests were passed
+ *    <other>                a test failed
+ *
+ */
+srtp_err_status_t srtp_crypto_kernel_status(void);
+
+/*
+ * srtp_crypto_kernel_list_debug_modules() outputs a list of debugging modules
+ *
+ */
+srtp_err_status_t srtp_crypto_kernel_list_debug_modules(void);
+
+/*
+ * srtp_crypto_kernel_load_cipher_type()
+ *
+ */
+srtp_err_status_t srtp_crypto_kernel_load_cipher_type(
+    const srtp_cipher_type_t *ct,
+    srtp_cipher_type_id_t id);
+
+srtp_err_status_t srtp_crypto_kernel_load_auth_type(const srtp_auth_type_t *ct,
+                                                    srtp_auth_type_id_t id);
+
+srtp_err_status_t srtp_crypto_kernel_load_debug_module(
+    srtp_debug_module_t *new_dm);
+
+/*
+ * srtp_crypto_kernel_alloc_cipher(id, cp, key_len);
+ *
+ * allocates a cipher of type id at location *cp, with key length
+ * key_len octets.  Return values are:
+ *
+ *    srtp_err_status_ok           no problems
+ *    srtp_err_status_alloc_fail   an allocation failure occured
+ *    srtp_err_status_fail         couldn't find cipher with identifier 'id'
+ */
+srtp_err_status_t srtp_crypto_kernel_alloc_cipher(srtp_cipher_type_id_t id,
+                                                  srtp_cipher_pointer_t *cp,
+                                                  int key_len,
+                                                  int tag_len);
+
+/*
+ * srtp_crypto_kernel_alloc_auth(id, ap, key_len, tag_len);
+ *
+ * allocates an auth function of type id at location *ap, with key
+ * length key_len octets and output tag length of tag_len.  Return
+ * values are:
+ *
+ *    srtp_err_status_ok           no problems
+ *    srtp_err_status_alloc_fail   an allocation failure occured
+ *    srtp_err_status_fail         couldn't find auth with identifier 'id'
+ */
+srtp_err_status_t srtp_crypto_kernel_alloc_auth(srtp_auth_type_id_t id,
+                                                srtp_auth_pointer_t *ap,
+                                                int key_len,
+                                                int tag_len);
+
+/*
+ * srtp_crypto_kernel_set_debug_module(mod_name, v)
+ *
+ * sets dynamic debugging to the value v (0 for off, 1 for on) for the
+ * debug module with the name mod_name
+ *
+ * returns srtp_err_status_ok on success, srtp_err_status_fail otherwise
+ */
+srtp_err_status_t srtp_crypto_kernel_set_debug_module(const char *mod_name,
+                                                      int v);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* CRYPTO_KERNEL */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/crypto_types.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/crypto_types.h
new file mode 100644
index 000000000..7fd3178b0
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/crypto_types.h
@@ -0,0 +1,116 @@
+/*
+ * crypto_types.h
+ *
+ * constants for cipher types and auth func types
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright(c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef SRTP_CRYPTO_TYPES_H
+#define SRTP_CRYPTO_TYPES_H
+
+/*
+ * The null cipher performs no encryption.
+ *
+ * The SRTP_NULL_CIPHER leaves its inputs unaltered, during both the
+ * encryption and decryption operations.  This cipher can be chosen
+ * to indicate that no encryption is to be performed.
+ */
+#define SRTP_NULL_CIPHER 0
+
+/*
+ * AES-128 Integer Counter Mode (AES ICM)
+ *
+ * AES-128 ICM is the variant of counter mode that is used by
+ * Secure RTP.  This cipher uses a 16-octet key concatenated with a
+ * 14-octet offset (or salt) value.
+ */
+#define SRTP_AES_ICM_128 1
+
+/*
+ * AES-192 Integer Counter Mode (AES ICM)
+ *
+ * AES-128 ICM is the variant of counter mode that is used by
+ * Secure RTP.  This cipher uses a 24-octet key concatenated with a
+ * 14-octet offset (or salt) value.
+ */
+#define SRTP_AES_ICM_192 4
+
+/*
+ * AES-256 Integer Counter Mode (AES ICM)
+ *
+ * AES-128 ICM is the variant of counter mode that is used by
+ * Secure RTP.  This cipher uses a 32-octet key concatenated with a
+ * 14-octet offset (or salt) value.
+ */
+#define SRTP_AES_ICM_256 5
+
+/*
+ * AES-128_GCM Galois Counter Mode (AES GCM)
+ *
+ * AES-128 GCM is the variant of galois counter mode that is used by
+ * Secure RTP.  This cipher uses a 16-octet key.
+ */
+#define SRTP_AES_GCM_128 6
+
+/*
+ * AES-256_GCM Galois Counter Mode (AES GCM)
+ *
+ * AES-256 GCM is the variant of galois counter mode that is used by
+ * Secure RTP.  This cipher uses a 32-octet key.
+ */
+#define SRTP_AES_GCM_256 7
+
+/*
+ * The null authentication function performs no authentication.
+ *
+ * The NULL_AUTH function does nothing, and can be selected to indicate
+ * that authentication should not be performed.
+ */
+#define SRTP_NULL_AUTH 0
+
+/*
+ * HMAC-SHA1
+ *
+ * SRTP_HMAC_SHA1 implements the Hash-based MAC using the NIST Secure
+ * Hash Algorithm version 1 (SHA1).
+ */
+#define SRTP_HMAC_SHA1 3
+
+#endif /* SRTP_CRYPTO_TYPES_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/datatypes.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/datatypes.h
new file mode 100644
index 000000000..6a588d0e9
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/datatypes.h
@@ -0,0 +1,378 @@
+/*
+ * datatypes.h
+ *
+ * data types for bit vectors and finite fields
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef DATATYPES_H
+#define DATATYPES_H
+
+#include "integers.h" /* definitions of uint32_t, et cetera   */
+#include "alloc.h"
+
+#include <stdarg.h>
+
+#include <stdio.h>
+#include <string.h>
+#include <time.h>
+#ifdef HAVE_NETINET_IN_H
+#include <netinet/in.h>
+#elif defined HAVE_WINSOCK2_H
+#include <winsock2.h>
+#else
+#error "Platform not recognized"
+#endif
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/* if DATATYPES_USE_MACROS is defined, then little functions are macros */
+#define DATATYPES_USE_MACROS
+
+typedef union {
+    uint8_t v8[2];
+    uint16_t value;
+} v16_t;
+
+typedef union {
+    uint8_t v8[4];
+    uint16_t v16[2];
+    uint32_t value;
+} v32_t;
+
+typedef union {
+    uint8_t v8[8];
+    uint16_t v16[4];
+    uint32_t v32[2];
+    uint64_t value;
+} v64_t;
+
+typedef union {
+    uint8_t v8[16];
+    uint16_t v16[8];
+    uint32_t v32[4];
+    uint64_t v64[2];
+} v128_t;
+
+typedef union {
+    uint8_t v8[32];
+    uint16_t v16[16];
+    uint32_t v32[8];
+    uint64_t v64[4];
+} v256_t;
+
+/* some useful and simple math functions */
+
+#define pow_2(X) ((unsigned int)1 << (X)) /* 2^X     */
+
+#define pow_minus_one(X) ((X) ? -1 : 1) /* (-1)^X  */
+
+/*
+ * octet_get_weight(x) returns the hamming weight (number of bits equal to
+ * one) in the octet x
+ */
+
+int octet_get_weight(uint8_t octet);
+
+#define MAX_PRINT_STRING_LEN 1024
+
+char *srtp_octet_string_hex_string(const void *str, int length);
+
+char *v128_bit_string(v128_t *x);
+
+char *v128_hex_string(v128_t *x);
+
+void v128_copy_octet_string(v128_t *x, const uint8_t s[16]);
+
+void v128_left_shift(v128_t *x, int shift_index);
+
+void v128_right_shift(v128_t *x, int shift_index);
+
+/*
+ * the following macros define the data manipulation functions
+ *
+ * If DATATYPES_USE_MACROS is defined, then these macros are used
+ * directly (and function call overhead is avoided).  Otherwise,
+ * the macros are used through the functions defined in datatypes.c
+ * (and the compiler provides better warnings).
+ */
+
+#define _v128_set_to_zero(x)                                                   \
+    ((x)->v32[0] = 0, (x)->v32[1] = 0, (x)->v32[2] = 0, (x)->v32[3] = 0)
+
+#define _v128_copy(x, y)                                                       \
+    ((x)->v32[0] = (y)->v32[0], (x)->v32[1] = (y)->v32[1],                     \
+     (x)->v32[2] = (y)->v32[2], (x)->v32[3] = (y)->v32[3])
+
+#define _v128_xor(z, x, y)                                                     \
+    ((z)->v32[0] = (x)->v32[0] ^ (y)->v32[0],                                  \
+     (z)->v32[1] = (x)->v32[1] ^ (y)->v32[1],                                  \
+     (z)->v32[2] = (x)->v32[2] ^ (y)->v32[2],                                  \
+     (z)->v32[3] = (x)->v32[3] ^ (y)->v32[3])
+
+#define _v128_and(z, x, y)                                                     \
+    ((z)->v32[0] = (x)->v32[0] & (y)->v32[0],                                  \
+     (z)->v32[1] = (x)->v32[1] & (y)->v32[1],                                  \
+     (z)->v32[2] = (x)->v32[2] & (y)->v32[2],                                  \
+     (z)->v32[3] = (x)->v32[3] & (y)->v32[3])
+
+#define _v128_or(z, x, y)                                                      \
+    ((z)->v32[0] = (x)->v32[0] | (y)->v32[0],                                  \
+     (z)->v32[1] = (x)->v32[1] | (y)->v32[1],                                  \
+     (z)->v32[2] = (x)->v32[2] | (y)->v32[2],                                  \
+     (z)->v32[3] = (x)->v32[3] | (y)->v32[3])
+
+#define _v128_complement(x)                                                    \
+    ((x)->v32[0] = ~(x)->v32[0], (x)->v32[1] = ~(x)->v32[1],                   \
+     (x)->v32[2] = ~(x)->v32[2], (x)->v32[3] = ~(x)->v32[3])
+
+/* ok for NO_64BIT_MATH if it can compare uint64_t's (even as structures) */
+#define _v128_is_eq(x, y)                                                      \
+    (((x)->v64[0] == (y)->v64[0]) && ((x)->v64[1] == (y)->v64[1]))
+
+#ifdef NO_64BIT_MATH
+#define _v128_xor_eq(z, x)                                                     \
+    ((z)->v32[0] ^= (x)->v32[0], (z)->v32[1] ^= (x)->v32[1],                   \
+     (z)->v32[2] ^= (x)->v32[2], (z)->v32[3] ^= (x)->v32[3])
+#else
+#define _v128_xor_eq(z, x)                                                     \
+    ((z)->v64[0] ^= (x)->v64[0], (z)->v64[1] ^= (x)->v64[1])
+#endif
+
+/* NOTE!  This assumes an odd ordering! */
+/* This will not be compatible directly with math on some processors */
+/* bit 0 is first 32-bit word, low order bit. in little-endian, that's
+   the first byte of the first 32-bit word.  In big-endian, that's
+   the 3rd byte of the first 32-bit word */
+/* The get/set bit code is used by the replay code ONLY, and it doesn't
+   really care which bit is which.  AES does care which bit is which, but
+   doesn't use the 128-bit get/set or 128-bit shifts  */
+
+#define _v128_get_bit(x, bit) (((((x)->v32[(bit) >> 5]) >> ((bit)&31)) & 1))
+
+#define _v128_set_bit(x, bit)                                                  \
+    ((((x)->v32[(bit) >> 5]) |= ((uint32_t)1 << ((bit)&31))))
+
+#define _v128_clear_bit(x, bit)                                                \
+    ((((x)->v32[(bit) >> 5]) &= ~((uint32_t)1 << ((bit)&31))))
+
+#define _v128_set_bit_to(x, bit, value)                                        \
+    ((value) ? _v128_set_bit(x, bit) : _v128_clear_bit(x, bit))
+
+#ifdef DATATYPES_USE_MACROS /* little functions are really macros */
+
+#define v128_set_to_zero(z) _v128_set_to_zero(z)
+#define v128_copy(z, x) _v128_copy(z, x)
+#define v128_xor(z, x, y) _v128_xor(z, x, y)
+#define v128_and(z, x, y) _v128_and(z, x, y)
+#define v128_or(z, x, y) _v128_or(z, x, y)
+#define v128_complement(x) _v128_complement(x)
+#define v128_is_eq(x, y) _v128_is_eq(x, y)
+#define v128_xor_eq(x, y) _v128_xor_eq(x, y)
+#define v128_get_bit(x, i) _v128_get_bit(x, i)
+#define v128_set_bit(x, i) _v128_set_bit(x, i)
+#define v128_clear_bit(x, i) _v128_clear_bit(x, i)
+#define v128_set_bit_to(x, i, y) _v128_set_bit_to(x, i, y)
+
+#else
+
+void v128_set_to_zero(v128_t *x);
+
+int v128_is_eq(const v128_t *x, const v128_t *y);
+
+void v128_copy(v128_t *x, const v128_t *y);
+
+void v128_xor(v128_t *z, v128_t *x, v128_t *y);
+
+void v128_and(v128_t *z, v128_t *x, v128_t *y);
+
+void v128_or(v128_t *z, v128_t *x, v128_t *y);
+
+void v128_complement(v128_t *x);
+
+int v128_get_bit(const v128_t *x, int i);
+
+void v128_set_bit(v128_t *x, int i);
+
+void v128_clear_bit(v128_t *x, int i);
+
+void v128_set_bit_to(v128_t *x, int i, int y);
+
+#endif /* DATATYPES_USE_MACROS */
+
+/*
+ * srtp_octet_string_is_eq(a, b, len) returns 1 if the length len strings
+ * a and b are not equal. It returns 0 otherwise. The running time of the
+ * comparison depends only on len, making this safe to use for (e.g.)
+ * verifying authentication tags.
+ */
+
+int srtp_octet_string_is_eq(uint8_t *a, uint8_t *b, int len);
+
+/*
+ * A portable way to zero out memory as recommended by
+ * https://cryptocoding.net/index.php/Coding_rules#Clean_memory_of_secret_data
+ * This is used to zero memory when OPENSSL_cleanse() is not available.
+ */
+void srtp_cleanse(void *s, size_t len);
+
+/*
+ * Functions as a wrapper that delegates to either srtp_cleanse() or
+ * OPENSSL_cleanse() if available to zero memory.
+ */
+void octet_string_set_to_zero(void *s, size_t len);
+
+#if defined(HAVE_CONFIG_H)
+
+/*
+ * Convert big endian integers to CPU byte order.
+ */
+#ifdef WORDS_BIGENDIAN
+/* Nothing to do. */
+#define be32_to_cpu(x) (x)
+#define be64_to_cpu(x) (x)
+#elif defined(HAVE_BYTESWAP_H)
+/* We have (hopefully) optimized versions in byteswap.h */
+#include <byteswap.h>
+#define be32_to_cpu(x) bswap_32((x))
+#define be64_to_cpu(x) bswap_64((x))
+#else /* WORDS_BIGENDIAN */
+
+#if defined(__GNUC__) && defined(HAVE_X86)
+/* Fall back. */
+static inline uint32_t be32_to_cpu(uint32_t v)
+{
+    /* optimized for x86. */
+    asm("bswap %0" : "=r"(v) : "0"(v));
+    return v;
+}
+#else /* HAVE_X86 */
+#ifdef HAVE_NETINET_IN_H
+#include <netinet/in.h>
+#elif defined HAVE_WINSOCK2_H
+#include <winsock2.h>
+#endif /* HAVE_NETINET_IN_H */
+#define be32_to_cpu(x) ntohl((x))
+#endif /* HAVE_X86 */
+
+static inline uint64_t be64_to_cpu(uint64_t v)
+{
+#ifdef NO_64BIT_MATH
+    /* use the make64 functions to do 64-bit math */
+    v = make64(htonl(low32(v)), htonl(high32(v)));
+#else  /* NO_64BIT_MATH */
+    /* use the native 64-bit math */
+    v = (uint64_t)((be32_to_cpu((uint32_t)(v >> 32))) |
+                   (((uint64_t)be32_to_cpu((uint32_t)v)) << 32));
+#endif /* NO_64BIT_MATH */
+    return v;
+}
+
+#endif /* WORDS_BIGENDIAN */
+
+#endif /* HAVE_CONFIG_H */
+
+/*
+ * functions manipulating bitvector_t
+ *
+ * A bitvector_t consists of an array of words and an integer
+ * representing the number of significant bits stored in the array.
+ * The bits are packed as follows: the least significant bit is that
+ * of word[0], while the most significant bit is the nth most
+ * significant bit of word[m], where length = bits_per_word * m + n.
+ *
+ */
+
+#define bits_per_word 32
+#define bytes_per_word 4
+
+typedef struct {
+    uint32_t length;
+    uint32_t *word;
+} bitvector_t;
+
+#define _bitvector_get_bit(v, bit_index)                                       \
+    (((((v)->word[((bit_index) >> 5)]) >> ((bit_index)&31)) & 1))
+
+#define _bitvector_set_bit(v, bit_index)                                       \
+    ((((v)->word[((bit_index) >> 5)] |= ((uint32_t)1 << ((bit_index)&31)))))
+
+#define _bitvector_clear_bit(v, bit_index)                                     \
+    ((((v)->word[((bit_index) >> 5)] &= ~((uint32_t)1 << ((bit_index)&31)))))
+
+#define _bitvector_get_length(v) (((v)->length))
+
+#ifdef DATATYPES_USE_MACROS /* little functions are really macros */
+
+#define bitvector_get_bit(v, bit_index) _bitvector_get_bit(v, bit_index)
+#define bitvector_set_bit(v, bit_index) _bitvector_set_bit(v, bit_index)
+#define bitvector_clear_bit(v, bit_index) _bitvector_clear_bit(v, bit_index)
+#define bitvector_get_length(v) _bitvector_get_length(v)
+
+#else
+
+int bitvector_get_bit(const bitvector_t *v, int bit_index);
+
+void bitvector_set_bit(bitvector_t *v, int bit_index);
+
+void bitvector_clear_bit(bitvector_t *v, int bit_index);
+
+unsigned long bitvector_get_length(const bitvector_t *v);
+
+#endif
+
+int bitvector_alloc(bitvector_t *v, unsigned long length);
+
+void bitvector_dealloc(bitvector_t *v);
+
+void bitvector_set_to_zero(bitvector_t *x);
+
+void bitvector_left_shift(bitvector_t *x, int index);
+
+char *bitvector_bit_string(bitvector_t *x, char *buf, int len);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* DATATYPES_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/err.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/err.h
new file mode 100644
index 000000000..326f5e96b
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/err.h
@@ -0,0 +1,139 @@
+/*
+ * err.h
+ *
+ * error status codes
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef ERR_H
+#define ERR_H
+
+#include <stdio.h>
+#include <stdarg.h>
+#include "srtp.h"
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/**
+ * @defgroup Error Error Codes
+ *
+ * Error status codes are represented by the enumeration srtp_err_status_t.
+ *
+ * @{
+ */
+
+/**
+ * @}
+ */
+
+typedef enum {
+    srtp_err_level_error,
+    srtp_err_level_warning,
+    srtp_err_level_info,
+    srtp_err_level_debug
+} srtp_err_reporting_level_t;
+
+/*
+ * err_reporting_init prepares the error system.  If
+ * ERR_REPORTING_STDOUT is defined, it will log to stdout.
+ *
+ */
+
+srtp_err_status_t srtp_err_reporting_init(void);
+
+typedef void(srtp_err_report_handler_func_t)(srtp_err_reporting_level_t level,
+                                             const char *msg);
+
+srtp_err_status_t srtp_install_err_report_handler(
+    srtp_err_report_handler_func_t func);
+
+/*
+ * srtp_err_report reports a 'printf' formatted error
+ * string, followed by a an arg list.  The level argument
+ * is one of srtp_err_reporting_level_t.
+ *
+ * Errors will be reported to stdout, if ERR_REPORTING_STDOUT
+ * is defined.
+ *
+ */
+
+void srtp_err_report(srtp_err_reporting_level_t level, const char *format, ...);
+
+/*
+ * debug_module_t defines a debug module
+ */
+
+typedef struct {
+    int on;           /* 1 if debugging is on, 0 if it is off */
+    const char *name; /* printable name for debug module      */
+} srtp_debug_module_t;
+
+#ifdef ENABLE_DEBUG_LOGGING
+
+#define debug_print0(mod, format)                                              \
+    srtp_err_report(srtp_err_level_debug, ("%s: " format "\n"), mod.name)
+#define debug_print(mod, format, arg)                                          \
+    srtp_err_report(srtp_err_level_debug, ("%s: " format "\n"), mod.name, arg)
+#define debug_print2(mod, format, arg1, arg2)                                  \
+    srtp_err_report(srtp_err_level_debug, ("%s: " format "\n"), mod.name,      \
+                    arg1, arg2)
+
+#else
+
+#define debug_print0(mod, format)                                              \
+    if (mod.on)                                                                \
+    srtp_err_report(srtp_err_level_debug, ("%s: " format "\n"), mod.name)
+#define debug_print(mod, format, arg)                                          \
+    if (mod.on)                                                                \
+    srtp_err_report(srtp_err_level_debug, ("%s: " format "\n"), mod.name, arg)
+#define debug_print2(mod, format, arg1, arg2)                                  \
+    if (mod.on)                                                                \
+    srtp_err_report(srtp_err_level_debug, ("%s: " format "\n"), mod.name,      \
+                    arg1, arg2)
+
+#endif
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* ERR_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/hmac.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/hmac.h
new file mode 100644
index 000000000..148818122
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/hmac.h
@@ -0,0 +1,58 @@
+/*
+ * hmac.h
+ *
+ * interface to hmac srtp_auth_type_t
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ *
+ */
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef HMAC_H
+#define HMAC_H
+
+#include "auth.h"
+#include "sha1.h"
+
+typedef struct {
+    uint8_t opad[64];
+    srtp_sha1_ctx_t ctx;
+    srtp_sha1_ctx_t init_ctx;
+} srtp_hmac_ctx_t;
+
+#endif /* HMAC_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/integers.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/integers.h
new file mode 100644
index 000000000..f2cd7c064
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/integers.h
@@ -0,0 +1,146 @@
+/*
+ * integers.h
+ *
+ * defines integer types (or refers to their definitions)
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef INTEGERS_H
+#define INTEGERS_H
+
+/* use standard integer definitions, if they're available  */
+#ifdef HAVE_STDLIB_H
+#include <stdlib.h>
+#endif
+#ifdef HAVE_STDINT_H
+#include <stdint.h>
+#endif
+#ifdef HAVE_INTTYPES_H
+#include <inttypes.h>
+#endif
+#ifdef HAVE_SYS_TYPES_H
+#include <sys/types.h>
+#endif
+#ifdef HAVE_SYS_INT_TYPES_H
+#include <sys/int_types.h> /* this exists on Sun OS */
+#endif
+#ifdef HAVE_MACHINE_TYPES_H
+#include <machine/types.h>
+#endif
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/* Can we do 64 bit integers? */
+#if !defined(HAVE_UINT64_T)
+#if SIZEOF_UNSIGNED_LONG == 8
+typedef unsigned long uint64_t;
+#elif SIZEOF_UNSIGNED_LONG_LONG == 8
+typedef unsigned long long uint64_t;
+#else
+#define NO_64BIT_MATH 1
+#endif
+#endif
+
+/* Reasonable defaults for 32 bit machines - you may need to
+ * edit these definitions for your own machine. */
+#ifndef HAVE_UINT8_T
+typedef unsigned char uint8_t;
+#endif
+#ifndef HAVE_UINT16_T
+typedef unsigned short int uint16_t;
+#endif
+#ifndef HAVE_UINT32_T
+typedef unsigned int uint32_t;
+#endif
+#ifndef HAVE_INT32_T
+typedef int int32_t;
+#endif
+
+#if defined(NO_64BIT_MATH) && defined(HAVE_CONFIG_H)
+typedef double uint64_t;
+/* assert that sizeof(double) == 8 */
+extern uint64_t make64(uint32_t high, uint32_t low);
+extern uint32_t high32(uint64_t value);
+extern uint32_t low32(uint64_t value);
+#endif
+
+/* These macros are to load and store 32-bit values from un-aligned
+   addresses.  This is required for processors that do not allow unaligned
+   loads. */
+#ifdef ALIGNMENT_32BIT_REQUIRED
+/* Note that if it's in a variable, you can memcpy it */
+#ifdef WORDS_BIGENDIAN
+#define PUT_32(addr, value)                                                    \
+    {                                                                          \
+        ((unsigned char *)(addr))[0] = (value >> 24);                          \
+        ((unsigned char *)(addr))[1] = (value >> 16) & 0xff;                   \
+        ((unsigned char *)(addr))[2] = (value >> 8) & 0xff;                    \
+        ((unsigned char *)(addr))[3] = (value)&0xff;                           \
+    }
+#define GET_32(addr)                                                           \
+    ((((unsigned char *)(addr))[0] << 24) |                                    \
+     (((unsigned char *)(addr))[1] << 16) |                                    \
+     (((unsigned char *)(addr))[2] << 8) | (((unsigned char *)(addr))[3]))
+#else
+#define PUT_32(addr, value)                                                    \
+    {                                                                          \
+        ((unsigned char *)(addr))[3] = (value >> 24);                          \
+        ((unsigned char *)(addr))[2] = (value >> 16) & 0xff;                   \
+        ((unsigned char *)(addr))[1] = (value >> 8) & 0xff;                    \
+        ((unsigned char *)(addr))[0] = (value)&0xff;                           \
+    }
+#define GET_32(addr)                                                           \
+    ((((unsigned char *)(addr))[3] << 24) |                                    \
+     (((unsigned char *)(addr))[2] << 16) |                                    \
+     (((unsigned char *)(addr))[1] << 8) | (((unsigned char *)(addr))[0]))
+#endif // WORDS_BIGENDIAN
+#else
+#define PUT_32(addr, value) *(((uint32_t *) (addr)) = (value)
+#define GET_32(addr) (*(((uint32_t *) (addr)))
+#endif
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* INTEGERS_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/key.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/key.h
new file mode 100644
index 000000000..3498114b0
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/key.h
@@ -0,0 +1,88 @@
+/*
+ * key.h
+ *
+ * key usage limits enforcement
+ *
+ * David A. Mcgrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef KEY_H
+#define KEY_H
+
+#include "rdbx.h" /* for srtp_xtd_seq_num_t */
+#include "err.h"
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+typedef struct srtp_key_limit_ctx_t *srtp_key_limit_t;
+
+typedef enum {
+    srtp_key_event_normal,
+    srtp_key_event_soft_limit,
+    srtp_key_event_hard_limit
+} srtp_key_event_t;
+
+srtp_err_status_t srtp_key_limit_set(srtp_key_limit_t key,
+                                     const srtp_xtd_seq_num_t s);
+
+srtp_err_status_t srtp_key_limit_clone(srtp_key_limit_t original,
+                                       srtp_key_limit_t *new_key);
+
+srtp_err_status_t srtp_key_limit_check(const srtp_key_limit_t key);
+
+srtp_key_event_t srtp_key_limit_update(srtp_key_limit_t key);
+
+typedef enum {
+    srtp_key_state_normal,
+    srtp_key_state_past_soft_limit,
+    srtp_key_state_expired
+} srtp_key_state_t;
+
+typedef struct srtp_key_limit_ctx_t {
+    srtp_xtd_seq_num_t num_left;
+    srtp_key_state_t state;
+} srtp_key_limit_ctx_t;
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* KEY_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/null_auth.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/null_auth.h
new file mode 100644
index 000000000..490dd7bc0
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/null_auth.h
@@ -0,0 +1,73 @@
+/*
+ * null-auth.h
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ *
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef NULL_AUTH_H
+#define NULL_AUTH_H
+
+#include "auth.h"
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+typedef struct {
+    char foo;
+} srtp_null_auth_ctx_t;
+
+#if 0
+srtp_err_status_t srtp_null_auth_alloc(srtp_auth_t **a, int key_len, int out_len);
+
+srtp_err_status_t srtp_null_auth_dealloc(srtp_auth_t *a);
+
+srtp_err_status_t srtp_null_auth_init(srtp_null_auth_ctx_t *state, const uint8_t *key, int key_len);
+
+srtp_err_status_t srtp_null_auth_compute(srtp_null_auth_ctx_t *state, uint8_t *message, int msg_octets, int tag_len, uint8_t *result);
+
+#endif
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* NULL_AUTH_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/null_cipher.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/null_cipher.h
new file mode 100644
index 000000000..5e8c91c13
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/null_cipher.h
@@ -0,0 +1,57 @@
+/*
+ * null-cipher.h
+ *
+ * header file for the null cipher
+ *
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef NULL_CIPHER_H
+#define NULL_CIPHER_H
+
+#include "datatypes.h"
+#include "cipher.h"
+
+typedef struct {
+    char foo; /* empty, for now */
+} srtp_null_cipher_ctx_t;
+
+#endif /* NULL_CIPHER_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/rdb.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/rdb.h
new file mode 100644
index 000000000..98314c1f3
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/rdb.h
@@ -0,0 +1,125 @@
+/*
+ * replay-database.h
+ *
+ * interface for a replay database for packet security
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef REPLAY_DB_H
+#define REPLAY_DB_H
+
+#include "integers.h"  /* for uint32_t     */
+#include "datatypes.h" /* for v128_t       */
+#include "err.h"       /* for srtp_err_status_t */
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/*
+ * if the ith least significant bit is one, then the packet index
+ * window_end-i is in the database
+ */
+
+typedef struct {
+    uint32_t window_start; /* packet index of the first bit in bitmask */
+    v128_t bitmask;
+} srtp_rdb_t;
+
+#define rdb_bits_in_bitmask (8 * sizeof(v128_t))
+
+/*
+ * srtp_rdb_init
+ *
+ * initalizes rdb
+ *
+ * returns srtp_err_status_ok on success, srtp_err_status_t_fail otherwise
+ */
+srtp_err_status_t srtp_rdb_init(srtp_rdb_t *rdb);
+
+/*
+ * srtp_rdb_check
+ *
+ * checks to see if index appears in rdb
+ *
+ * returns srtp_err_status_fail if the index already appears in rdb,
+ * returns srtp_err_status_ok otherwise
+ */
+srtp_err_status_t srtp_rdb_check(const srtp_rdb_t *rdb, uint32_t rdb_index);
+
+/*
+ * srtp_rdb_add_index
+ *
+ * adds index to srtp_rdb_t (and does *not* check if index appears in db)
+ *
+ * returns srtp_err_status_ok on success, srtp_err_status_fail otherwise
+ *
+ */
+srtp_err_status_t srtp_rdb_add_index(srtp_rdb_t *rdb, uint32_t rdb_index);
+
+/*
+ * the functions srtp_rdb_increment() and srtp_rdb_get_value() are for use by
+ * senders, not receivers - DO NOT use these functions on the same
+ * srtp_rdb_t upon which srtp_rdb_add_index is used!
+ */
+
+/*
+ * srtp_rdb_increment(db) increments the sequence number in db, if it is
+ * not too high
+ *
+ * return values:
+ *
+ *    srtp_err_status_ok            no problem
+ *    srtp_err_status_key_expired   sequence number too high
+ *
+ */
+srtp_err_status_t srtp_rdb_increment(srtp_rdb_t *rdb);
+
+/*
+ * srtp_rdb_get_value(db) returns the current sequence number of db
+ */
+uint32_t srtp_rdb_get_value(const srtp_rdb_t *rdb);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* REPLAY_DB_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/rdbx.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/rdbx.h
new file mode 100644
index 000000000..2194178ee
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/rdbx.h
@@ -0,0 +1,209 @@
+/*
+ * rdbx.h
+ *
+ * replay database with extended packet indices, using a rollover counter
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ *
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef RDBX_H
+#define RDBX_H
+
+#include "datatypes.h"
+#include "err.h"
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/* #define ROC_TEST */
+
+#ifndef ROC_TEST
+
+typedef uint16_t srtp_sequence_number_t;  /* 16 bit sequence number  */
+typedef uint32_t srtp_rollover_counter_t; /* 32 bit rollover counter */
+
+#else /* use small seq_num and roc datatypes for testing purposes */
+
+typedef unsigned char srtp_sequence_number_t; /* 8 bit sequence number   */
+typedef uint16_t srtp_rollover_counter_t;     /* 16 bit rollover counter */
+
+#endif
+
+#define seq_num_median (1 << (8 * sizeof(srtp_sequence_number_t) - 1))
+#define seq_num_max (1 << (8 * sizeof(srtp_sequence_number_t)))
+
+/*
+ * An rtp_xtd_seq_num_t is a 64-bit unsigned integer used as an 'extended'
+ * sequence number.
+ */
+typedef uint64_t srtp_xtd_seq_num_t;
+
+/*
+ * An srtp_rdbx_t is a replay database with extended range; it uses an
+ * xtd_seq_num_t and a bitmask of recently received indices.
+ */
+typedef struct {
+    srtp_xtd_seq_num_t index;
+    bitvector_t bitmask;
+} srtp_rdbx_t;
+
+/*
+ * srtp_rdbx_init(rdbx_ptr, ws)
+ *
+ * initializes the rdbx pointed to by its argument with the window size ws,
+ * setting the rollover counter and sequence number to zero
+ */
+srtp_err_status_t srtp_rdbx_init(srtp_rdbx_t *rdbx, unsigned long ws);
+
+/*
+ * srtp_rdbx_dealloc(rdbx_ptr)
+ *
+ * frees memory associated with the rdbx
+ */
+srtp_err_status_t srtp_rdbx_dealloc(srtp_rdbx_t *rdbx);
+
+/*
+ * srtp_rdbx_estimate_index(rdbx, guess, s)
+ *
+ * given an rdbx and a sequence number s (from a newly arrived packet),
+ * sets the contents of *guess to contain the best guess of the packet
+ * index to which s corresponds, and returns the difference between
+ * *guess and the locally stored synch info
+ */
+int32_t srtp_rdbx_estimate_index(const srtp_rdbx_t *rdbx,
+                                 srtp_xtd_seq_num_t *guess,
+                                 srtp_sequence_number_t s);
+
+/*
+ * srtp_rdbx_check(rdbx, delta);
+ *
+ * srtp_rdbx_check(&r, delta) checks to see if the xtd_seq_num_t
+ * which is at rdbx->window_start + delta is in the rdb
+ *
+ */
+srtp_err_status_t srtp_rdbx_check(const srtp_rdbx_t *rdbx, int difference);
+
+/*
+ * srtp_replay_add_index(rdbx, delta)
+ *
+ * adds the srtp_xtd_seq_num_t at rdbx->window_start + delta to replay_db
+ * (and does *not* check if that xtd_seq_num_t appears in db)
+ *
+ * this function should be called *only* after replay_check has
+ * indicated that the index does not appear in the rdbx, and a mutex
+ * should protect the rdbx between these calls if necessary.
+ */
+srtp_err_status_t srtp_rdbx_add_index(srtp_rdbx_t *rdbx, int delta);
+
+/*
+ * srtp_rdbx_set_roc(rdbx, roc) initalizes the srtp_rdbx_t at the location rdbx
+ * to have the rollover counter value roc.  If that value is less than
+ * the current rollover counter value, then the function returns
+ * srtp_err_status_replay_old; otherwise, srtp_err_status_ok is returned.
+ *
+ */
+srtp_err_status_t srtp_rdbx_set_roc(srtp_rdbx_t *rdbx, uint32_t roc);
+
+/*
+ * srtp_rdbx_get_packet_index(rdbx) returns the value of the rollover counter
+ * for
+ * the srtp_rdbx_t pointed to by rdbx
+ *
+ */
+srtp_xtd_seq_num_t srtp_rdbx_get_packet_index(const srtp_rdbx_t *rdbx);
+
+/*
+ * srtp_xtd_seq_num_t functions - these are *internal* functions of rdbx, and
+ * shouldn't be used to manipulate rdbx internal values.  use the rdbx
+ * api instead!
+ */
+
+/*
+ * srtp_rdbx_get_ws(rdbx_ptr)
+ *
+ * gets the window size which was used to initialize the rdbx
+ */
+unsigned long srtp_rdbx_get_window_size(const srtp_rdbx_t *rdbx);
+
+/* index_init(&pi) initializes a packet index pi (sets it to zero) */
+void srtp_index_init(srtp_xtd_seq_num_t *pi);
+
+/* index_advance(&pi, s) advances a xtd_seq_num_t forward by s */
+void srtp_index_advance(srtp_xtd_seq_num_t *pi, srtp_sequence_number_t s);
+
+/*
+ * srtp_index_guess(local, guess, s)
+ *
+ * given a srtp_xtd_seq_num_t local (which represents the highest
+ * known-to-be-good index) and a sequence number s (from a newly
+ * arrived packet), sets the contents of *guess to contain the best
+ * guess of the packet index to which s corresponds, and returns the
+ * difference between *guess and *local
+ */
+int32_t srtp_index_guess(const srtp_xtd_seq_num_t *local,
+                         srtp_xtd_seq_num_t *guess,
+                         srtp_sequence_number_t s);
+
+/*
+ * srtp_rdbx_get_roc(rdbx)
+ *
+ * Get the current rollover counter
+ *
+ */
+uint32_t srtp_rdbx_get_roc(const srtp_rdbx_t *rdbx);
+
+/*
+ * srtp_rdbx_set_roc_seq(rdbx, roc, seq) initalizes the srtp_rdbx_t at the
+ * location rdbx to have the rollover counter value roc and packet sequence
+ * number seq.  If the new rollover counter value is less than the current
+ * rollover counter value, then the function returns
+ * srtp_err_status_replay_old, otherwise, srtp_err_status_ok is returned.
+ */
+srtp_err_status_t srtp_rdbx_set_roc_seq(srtp_rdbx_t *rdbx,
+                                        uint32_t roc,
+                                        uint16_t seq);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* RDBX_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/sha1.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/sha1.h
new file mode 100644
index 000000000..933c1466a
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/sha1.h
@@ -0,0 +1,184 @@
+/*
+ * sha1.h
+ *
+ * interface to the Secure Hash Algorithm v.1 (SHA-1), specified in
+ * FIPS 180-1
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef SHA1_H
+#define SHA1_H
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "err.h"
+#ifdef OPENSSL
+#include <openssl/evp.h>
+#include <stdint.h>
+#else
+#include "datatypes.h"
+#endif
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+#ifdef OPENSSL
+
+/*
+ * srtp_sha1_init(&ctx) initializes the SHA1 context ctx
+ *
+ * srtp_sha1_update(&ctx, msg, len) hashes the len octets starting at msg
+ * into the SHA1 context
+ *
+ * srtp_sha1_final(&ctx, output) performs the final processing of the SHA1
+ * context and writes the result to the 20 octets at output
+ *
+ * Return values are ignored on the EVP functions since all three
+ * of these functions return void.
+ *
+ */
+
+/* OpenSSL 1.1.0 made EVP_MD_CTX an opaque structure, which must be allocated
+   using EVP_MD_CTX_new. But this function doesn't exist in OpenSSL 1.0.x. */
+#if OPENSSL_VERSION_NUMBER < 0x10100000L || LIBRESSL_VERSION_NUMBER
+
+typedef EVP_MD_CTX srtp_sha1_ctx_t;
+
+static inline void srtp_sha1_init(srtp_sha1_ctx_t *ctx)
+{
+    EVP_MD_CTX_init(ctx);
+    EVP_DigestInit(ctx, EVP_sha1());
+}
+
+static inline void srtp_sha1_update(srtp_sha1_ctx_t *ctx,
+                                    const uint8_t *M,
+                                    int octets_in_msg)
+{
+    EVP_DigestUpdate(ctx, M, octets_in_msg);
+}
+
+static inline void srtp_sha1_final(srtp_sha1_ctx_t *ctx, uint32_t *output)
+{
+    unsigned int len = 0;
+
+    EVP_DigestFinal(ctx, (unsigned char *)output, &len);
+    EVP_MD_CTX_cleanup(ctx);
+}
+
+#else
+
+typedef EVP_MD_CTX *srtp_sha1_ctx_t;
+
+static inline void srtp_sha1_init(srtp_sha1_ctx_t *ctx)
+{
+    *ctx = EVP_MD_CTX_new();
+    EVP_DigestInit(*ctx, EVP_sha1());
+}
+
+static inline void srtp_sha1_update(srtp_sha1_ctx_t *ctx,
+                                    const uint8_t *M,
+                                    int octets_in_msg)
+{
+    EVP_DigestUpdate(*ctx, M, octets_in_msg);
+}
+
+static inline void srtp_sha1_final(srtp_sha1_ctx_t *ctx, uint32_t *output)
+{
+    unsigned int len = 0;
+
+    EVP_DigestFinal(*ctx, (unsigned char *)output, &len);
+    EVP_MD_CTX_free(*ctx);
+}
+#endif
+
+#else
+
+typedef struct {
+    uint32_t H[5];            /* state vector                    */
+    uint32_t M[16];           /* message buffer                  */
+    int octets_in_buffer;     /* octets of message in buffer     */
+    uint32_t num_bits_in_msg; /* total number of bits in message */
+} srtp_sha1_ctx_t;
+
+/*
+ * srtp_sha1_init(&ctx) initializes the SHA1 context ctx
+ *
+ * srtp_sha1_update(&ctx, msg, len) hashes the len octets starting at msg
+ * into the SHA1 context
+ *
+ * srtp_sha1_final(&ctx, output) performs the final processing of the SHA1
+ * context and writes the result to the 20 octets at output
+ *
+ */
+void srtp_sha1_init(srtp_sha1_ctx_t *ctx);
+
+void srtp_sha1_update(srtp_sha1_ctx_t *ctx,
+                      const uint8_t *M,
+                      int octets_in_msg);
+
+void srtp_sha1_final(srtp_sha1_ctx_t *ctx, uint32_t output[5]);
+
+/*
+ * The srtp_sha1_core function is INTERNAL to SHA-1, but it is declared
+ * here because it is also used by the cipher SEAL 3.0 in its key
+ * setup algorithm.
+ */
+
+/*
+ *  srtp_sha1_core(M, H) computes the core sha1 compression function, where M is
+ *  the next part of the message and H is the intermediate state {H0,
+ *  H1, ...}
+ *
+ *  this function does not do any of the padding required in the
+ *  complete sha1 function
+ */
+void srtp_sha1_core(const uint32_t M[16], uint32_t hash_value[5]);
+
+#endif /* else OPENSSL */
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* SHA1_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/include/stat.h b/trunk/3rdparty/libsrtp-2-fit/crypto/include/stat.h
new file mode 100644
index 000000000..1894e041a
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/include/stat.h
@@ -0,0 +1,66 @@
+/*
+ * stats.h
+ *
+ * interface to statistical test functions
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright(c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef STAT_H
+#define STAT_H
+
+#include "datatypes.h" /* for uint8_t                       */
+#include "err.h"       /* for srtp_err_status_t             */
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+srtp_err_status_t stat_test_monobit(uint8_t *data);
+
+srtp_err_status_t stat_test_poker(uint8_t *data);
+
+srtp_err_status_t stat_test_runs(uint8_t *data);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* STAT_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/kernel/alloc.c b/trunk/3rdparty/libsrtp-2-fit/crypto/kernel/alloc.c
new file mode 100644
index 000000000..3ebc31525
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/kernel/alloc.c
@@ -0,0 +1,101 @@
+/*
+ * alloc.c
+ *
+ * memory allocation and deallocation
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "alloc.h"
+#include "crypto_kernel.h"
+
+/* the debug module for memory allocation */
+
+srtp_debug_module_t srtp_mod_alloc = {
+    0,      /* debugging is off by default */
+    "alloc" /* printable name for module   */
+};
+
+/*
+ * Nota bene: the debugging statements for srtp_crypto_alloc() and
+ * srtp_crypto_free() have identical prefixes, which include the addresses
+ * of the memory locations on which they are operating.  This fact can
+ * be used to locate memory leaks, by turning on memory debugging,
+ * grepping for 'alloc', then matching alloc and free calls by
+ * address.
+ */
+
+#if defined(HAVE_STDLIB_H)
+
+void *srtp_crypto_alloc(size_t size)
+{
+    void *ptr;
+
+    if (!size) {
+        return NULL;
+    }
+
+    ptr = calloc(1, size);
+
+    if (ptr) {
+        debug_print(srtp_mod_alloc, "(location: %p) allocated", ptr);
+    } else {
+        debug_print(srtp_mod_alloc, "allocation failed (asked for %zu bytes)\n",
+                    size);
+    }
+
+    return ptr;
+}
+
+void srtp_crypto_free(void *ptr)
+{
+    debug_print(srtp_mod_alloc, "(location: %p) freed", ptr);
+
+    free(ptr);
+}
+
+#else /* we need to define our own memory allocation routines */
+
+#error no memory allocation defined yet
+
+#endif
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/kernel/crypto_kernel.c b/trunk/3rdparty/libsrtp-2-fit/crypto/kernel/crypto_kernel.c
new file mode 100644
index 000000000..df6af7da8
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/kernel/crypto_kernel.c
@@ -0,0 +1,561 @@
+/*
+ * crypto_kernel.c
+ *
+ * header for the cryptographic kernel
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright(c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "alloc.h"
+
+#include "crypto_kernel.h"
+#include "cipher_types.h"
+
+/* the debug module for the crypto_kernel */
+
+srtp_debug_module_t srtp_mod_crypto_kernel = {
+    0,              /* debugging is off by default */
+    "crypto kernel" /* printable name for module   */
+};
+
+/* crypto_kernel is a global variable, the only one of its datatype */
+
+srtp_crypto_kernel_t crypto_kernel = {
+    srtp_crypto_kernel_state_insecure, /* start off in insecure state */
+    NULL,                              /* no cipher types yet         */
+    NULL,                              /* no auth types yet           */
+    NULL                               /* no debug modules yet        */
+};
+
+#define MAX_RNG_TRIALS 25
+
+srtp_err_status_t srtp_crypto_kernel_init()
+{
+    srtp_err_status_t status;
+
+    /* check the security state */
+    if (crypto_kernel.state == srtp_crypto_kernel_state_secure) {
+        /*
+         * we're already in the secure state, but we've been asked to
+         * re-initialize, so we just re-run the self-tests and then return
+         */
+        return srtp_crypto_kernel_status();
+    }
+
+    /* initialize error reporting system */
+    status = srtp_err_reporting_init();
+    if (status) {
+        return status;
+    }
+
+    /* load debug modules */
+    status = srtp_crypto_kernel_load_debug_module(&srtp_mod_crypto_kernel);
+    if (status) {
+        return status;
+    }
+    status = srtp_crypto_kernel_load_debug_module(&srtp_mod_auth);
+    if (status) {
+        return status;
+    }
+    status = srtp_crypto_kernel_load_debug_module(&srtp_mod_cipher);
+    if (status) {
+        return status;
+    }
+    status = srtp_crypto_kernel_load_debug_module(&srtp_mod_stat);
+    if (status) {
+        return status;
+    }
+    status = srtp_crypto_kernel_load_debug_module(&srtp_mod_alloc);
+    if (status) {
+        return status;
+    }
+
+    /* load cipher types */
+    status = srtp_crypto_kernel_load_cipher_type(&srtp_null_cipher,
+                                                 SRTP_NULL_CIPHER);
+    if (status) {
+        return status;
+    }
+    status = srtp_crypto_kernel_load_cipher_type(&srtp_aes_icm_128,
+                                                 SRTP_AES_ICM_128);
+    if (status) {
+        return status;
+    }
+    status = srtp_crypto_kernel_load_cipher_type(&srtp_aes_icm_256,
+                                                 SRTP_AES_ICM_256);
+    if (status) {
+        return status;
+    }
+    status = srtp_crypto_kernel_load_debug_module(&srtp_mod_aes_icm);
+    if (status) {
+        return status;
+    }
+#ifdef GCM
+    status = srtp_crypto_kernel_load_cipher_type(&srtp_aes_icm_192,
+                                                 SRTP_AES_ICM_192);
+    if (status) {
+        return status;
+    }
+    status = srtp_crypto_kernel_load_cipher_type(&srtp_aes_gcm_128,
+                                                 SRTP_AES_GCM_128);
+    if (status) {
+        return status;
+    }
+    status = srtp_crypto_kernel_load_cipher_type(&srtp_aes_gcm_256,
+                                                 SRTP_AES_GCM_256);
+    if (status) {
+        return status;
+    }
+    status = srtp_crypto_kernel_load_debug_module(&srtp_mod_aes_gcm);
+    if (status) {
+        return status;
+    }
+#endif
+
+    /* load auth func types */
+    status = srtp_crypto_kernel_load_auth_type(&srtp_null_auth, SRTP_NULL_AUTH);
+    if (status) {
+        return status;
+    }
+    status = srtp_crypto_kernel_load_auth_type(&srtp_hmac, SRTP_HMAC_SHA1);
+    if (status) {
+        return status;
+    }
+    status = srtp_crypto_kernel_load_debug_module(&srtp_mod_hmac);
+    if (status) {
+        return status;
+    }
+
+    /* change state to secure */
+    crypto_kernel.state = srtp_crypto_kernel_state_secure;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_crypto_kernel_status()
+{
+    srtp_err_status_t status;
+    srtp_kernel_cipher_type_t *ctype = crypto_kernel.cipher_type_list;
+    srtp_kernel_auth_type_t *atype = crypto_kernel.auth_type_list;
+
+    /* for each cipher type, describe and test */
+    while (ctype != NULL) {
+        srtp_err_report(srtp_err_level_info, "cipher: %s\n",
+                        ctype->cipher_type->description);
+        srtp_err_report(srtp_err_level_info, "  self-test: ");
+        status = srtp_cipher_type_self_test(ctype->cipher_type);
+        if (status) {
+            srtp_err_report(srtp_err_level_error, "failed with error code %d\n",
+                            status);
+            exit(status);
+        }
+        srtp_err_report(srtp_err_level_info, "passed\n");
+        ctype = ctype->next;
+    }
+
+    /* for each auth type, describe and test */
+    while (atype != NULL) {
+        srtp_err_report(srtp_err_level_info, "auth func: %s\n",
+                        atype->auth_type->description);
+        srtp_err_report(srtp_err_level_info, "  self-test: ");
+        status = srtp_auth_type_self_test(atype->auth_type);
+        if (status) {
+            srtp_err_report(srtp_err_level_error, "failed with error code %d\n",
+                            status);
+            exit(status);
+        }
+        srtp_err_report(srtp_err_level_info, "passed\n");
+        atype = atype->next;
+    }
+
+    srtp_crypto_kernel_list_debug_modules();
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_crypto_kernel_list_debug_modules()
+{
+    srtp_kernel_debug_module_t *dm = crypto_kernel.debug_module_list;
+
+    /* describe each debug module */
+    srtp_err_report(srtp_err_level_info, "debug modules loaded:\n");
+    while (dm != NULL) {
+        srtp_err_report(srtp_err_level_info, "  %s ", dm->mod->name);
+        if (dm->mod->on) {
+            srtp_err_report(srtp_err_level_info, "(on)\n");
+        } else {
+            srtp_err_report(srtp_err_level_info, "(off)\n");
+        }
+        dm = dm->next;
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_crypto_kernel_shutdown()
+{
+    /*
+     * free dynamic memory used in crypto_kernel at present
+     */
+
+    /* walk down cipher type list, freeing memory */
+    while (crypto_kernel.cipher_type_list != NULL) {
+        srtp_kernel_cipher_type_t *ctype = crypto_kernel.cipher_type_list;
+        crypto_kernel.cipher_type_list = ctype->next;
+        debug_print(srtp_mod_crypto_kernel, "freeing memory for cipher %s",
+                    ctype->cipher_type->description);
+        srtp_crypto_free(ctype);
+    }
+
+    /* walk down authetication module list, freeing memory */
+    while (crypto_kernel.auth_type_list != NULL) {
+        srtp_kernel_auth_type_t *atype = crypto_kernel.auth_type_list;
+        crypto_kernel.auth_type_list = atype->next;
+        debug_print(srtp_mod_crypto_kernel,
+                    "freeing memory for authentication %s",
+                    atype->auth_type->description);
+        srtp_crypto_free(atype);
+    }
+
+    /* walk down debug module list, freeing memory */
+    while (crypto_kernel.debug_module_list != NULL) {
+        srtp_kernel_debug_module_t *kdm = crypto_kernel.debug_module_list;
+        crypto_kernel.debug_module_list = kdm->next;
+        debug_print(srtp_mod_crypto_kernel,
+                    "freeing memory for debug module %s", kdm->mod->name);
+        srtp_crypto_free(kdm);
+    }
+
+    /* return to insecure state */
+    crypto_kernel.state = srtp_crypto_kernel_state_insecure;
+
+    return srtp_err_status_ok;
+}
+
+static inline srtp_err_status_t srtp_crypto_kernel_do_load_cipher_type(
+    const srtp_cipher_type_t *new_ct,
+    srtp_cipher_type_id_t id,
+    int replace)
+{
+    srtp_kernel_cipher_type_t *ctype, *new_ctype;
+    srtp_err_status_t status;
+
+    /* defensive coding */
+    if (new_ct == NULL) {
+        return srtp_err_status_bad_param;
+    }
+
+    if (new_ct->id != id) {
+        return srtp_err_status_bad_param;
+    }
+
+    /* check cipher type by running self-test */
+    status = srtp_cipher_type_self_test(new_ct);
+    if (status) {
+        return status;
+    }
+
+    /* walk down list, checking if this type is in the list already  */
+    ctype = crypto_kernel.cipher_type_list;
+    while (ctype != NULL) {
+        if (id == ctype->id) {
+            if (!replace) {
+                return srtp_err_status_bad_param;
+            }
+            status =
+                srtp_cipher_type_test(new_ct, ctype->cipher_type->test_data);
+            if (status) {
+                return status;
+            }
+            new_ctype = ctype;
+            break;
+        } else if (new_ct == ctype->cipher_type) {
+            return srtp_err_status_bad_param;
+        }
+        ctype = ctype->next;
+    }
+
+    /* if not found, put new_ct at the head of the list */
+    if (ctype == NULL) {
+        /* allocate memory */
+        new_ctype = (srtp_kernel_cipher_type_t *)srtp_crypto_alloc(
+            sizeof(srtp_kernel_cipher_type_t));
+        if (new_ctype == NULL) {
+            return srtp_err_status_alloc_fail;
+        }
+        new_ctype->next = crypto_kernel.cipher_type_list;
+
+        /* set head of list to new cipher type */
+        crypto_kernel.cipher_type_list = new_ctype;
+    }
+
+    /* set fields */
+    new_ctype->cipher_type = new_ct;
+    new_ctype->id = id;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_crypto_kernel_load_cipher_type(
+    const srtp_cipher_type_t *new_ct,
+    srtp_cipher_type_id_t id)
+{
+    return srtp_crypto_kernel_do_load_cipher_type(new_ct, id, 0);
+}
+
+srtp_err_status_t srtp_replace_cipher_type(const srtp_cipher_type_t *new_ct,
+                                           srtp_cipher_type_id_t id)
+{
+    return srtp_crypto_kernel_do_load_cipher_type(new_ct, id, 1);
+}
+
+srtp_err_status_t srtp_crypto_kernel_do_load_auth_type(
+    const srtp_auth_type_t *new_at,
+    srtp_auth_type_id_t id,
+    int replace)
+{
+    srtp_kernel_auth_type_t *atype, *new_atype;
+    srtp_err_status_t status;
+
+    /* defensive coding */
+    if (new_at == NULL) {
+        return srtp_err_status_bad_param;
+    }
+
+    if (new_at->id != id) {
+        return srtp_err_status_bad_param;
+    }
+
+    /* check auth type by running self-test */
+    status = srtp_auth_type_self_test(new_at);
+    if (status) {
+        return status;
+    }
+
+    /* walk down list, checking if this type is in the list already  */
+    atype = crypto_kernel.auth_type_list;
+    while (atype != NULL) {
+        if (id == atype->id) {
+            if (!replace) {
+                return srtp_err_status_bad_param;
+            }
+            status = srtp_auth_type_test(new_at, atype->auth_type->test_data);
+            if (status) {
+                return status;
+            }
+            new_atype = atype;
+            break;
+        } else if (new_at == atype->auth_type) {
+            return srtp_err_status_bad_param;
+        }
+        atype = atype->next;
+    }
+
+    /* if not found, put new_at at the head of the list */
+    if (atype == NULL) {
+        /* allocate memory */
+        new_atype = (srtp_kernel_auth_type_t *)srtp_crypto_alloc(
+            sizeof(srtp_kernel_auth_type_t));
+        if (new_atype == NULL) {
+            return srtp_err_status_alloc_fail;
+        }
+
+        new_atype->next = crypto_kernel.auth_type_list;
+        /* set head of list to new auth type */
+        crypto_kernel.auth_type_list = new_atype;
+    }
+
+    /* set fields */
+    new_atype->auth_type = new_at;
+    new_atype->id = id;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_crypto_kernel_load_auth_type(
+    const srtp_auth_type_t *new_at,
+    srtp_auth_type_id_t id)
+{
+    return srtp_crypto_kernel_do_load_auth_type(new_at, id, 0);
+}
+
+srtp_err_status_t srtp_replace_auth_type(const srtp_auth_type_t *new_at,
+                                         srtp_auth_type_id_t id)
+{
+    return srtp_crypto_kernel_do_load_auth_type(new_at, id, 1);
+}
+
+const srtp_cipher_type_t *srtp_crypto_kernel_get_cipher_type(
+    srtp_cipher_type_id_t id)
+{
+    srtp_kernel_cipher_type_t *ctype;
+
+    /* walk down list, looking for id  */
+    ctype = crypto_kernel.cipher_type_list;
+    while (ctype != NULL) {
+        if (id == ctype->id) {
+            return ctype->cipher_type;
+        }
+        ctype = ctype->next;
+    }
+
+    /* haven't found the right one, indicate failure by returning NULL */
+    return NULL;
+}
+
+srtp_err_status_t srtp_crypto_kernel_alloc_cipher(srtp_cipher_type_id_t id,
+                                                  srtp_cipher_pointer_t *cp,
+                                                  int key_len,
+                                                  int tag_len)
+{
+    const srtp_cipher_type_t *ct;
+
+    /*
+     * if the crypto_kernel is not yet initialized, we refuse to allocate
+     * any ciphers - this is a bit extra-paranoid
+     */
+    if (crypto_kernel.state != srtp_crypto_kernel_state_secure) {
+        return srtp_err_status_init_fail;
+    }
+
+    ct = srtp_crypto_kernel_get_cipher_type(id);
+    if (!ct) {
+        return srtp_err_status_fail;
+    }
+
+    return ((ct)->alloc(cp, key_len, tag_len));
+}
+
+const srtp_auth_type_t *srtp_crypto_kernel_get_auth_type(srtp_auth_type_id_t id)
+{
+    srtp_kernel_auth_type_t *atype;
+
+    /* walk down list, looking for id  */
+    atype = crypto_kernel.auth_type_list;
+    while (atype != NULL) {
+        if (id == atype->id) {
+            return atype->auth_type;
+        }
+        atype = atype->next;
+    }
+
+    /* haven't found the right one, indicate failure by returning NULL */
+    return NULL;
+}
+
+srtp_err_status_t srtp_crypto_kernel_alloc_auth(srtp_auth_type_id_t id,
+                                                srtp_auth_pointer_t *ap,
+                                                int key_len,
+                                                int tag_len)
+{
+    const srtp_auth_type_t *at;
+
+    /*
+     * if the crypto_kernel is not yet initialized, we refuse to allocate
+     * any auth functions - this is a bit extra-paranoid
+     */
+    if (crypto_kernel.state != srtp_crypto_kernel_state_secure) {
+        return srtp_err_status_init_fail;
+    }
+
+    at = srtp_crypto_kernel_get_auth_type(id);
+    if (!at) {
+        return srtp_err_status_fail;
+    }
+
+    return ((at)->alloc(ap, key_len, tag_len));
+}
+
+srtp_err_status_t srtp_crypto_kernel_load_debug_module(
+    srtp_debug_module_t *new_dm)
+{
+    srtp_kernel_debug_module_t *kdm, *new;
+
+    /* defensive coding */
+    if (new_dm == NULL || new_dm->name == NULL) {
+        return srtp_err_status_bad_param;
+    }
+
+    /* walk down list, checking if this type is in the list already  */
+    kdm = crypto_kernel.debug_module_list;
+    while (kdm != NULL) {
+        if (strncmp(new_dm->name, kdm->mod->name, 64) == 0) {
+            return srtp_err_status_bad_param;
+        }
+        kdm = kdm->next;
+    }
+
+    /* put new_dm at the head of the list */
+    /* allocate memory */
+    new = (srtp_kernel_debug_module_t *)srtp_crypto_alloc(
+        sizeof(srtp_kernel_debug_module_t));
+    if (new == NULL) {
+        return srtp_err_status_alloc_fail;
+    }
+
+    /* set fields */
+    new->mod = new_dm;
+    new->next = crypto_kernel.debug_module_list;
+
+    /* set head of list to new cipher type */
+    crypto_kernel.debug_module_list = new;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_crypto_kernel_set_debug_module(const char *name, int on)
+{
+    srtp_kernel_debug_module_t *kdm;
+
+    /* walk down list, checking if this type is in the list already  */
+    kdm = crypto_kernel.debug_module_list;
+    while (kdm != NULL) {
+        if (strncmp(name, kdm->mod->name, 64) == 0) {
+            kdm->mod->on = on;
+            return srtp_err_status_ok;
+        }
+        kdm = kdm->next;
+    }
+
+    return srtp_err_status_fail;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/kernel/err.c b/trunk/3rdparty/libsrtp-2-fit/crypto/kernel/err.c
new file mode 100644
index 000000000..9db5bfb43
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/kernel/err.c
@@ -0,0 +1,108 @@
+/*
+ * err.c
+ *
+ * error status reporting functions
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright(c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "err.h"
+#include "datatypes.h"
+#include <string.h>
+
+/* srtp_err_file is the FILE to which errors are reported */
+
+static FILE *srtp_err_file = NULL;
+
+srtp_err_status_t srtp_err_reporting_init()
+{
+#ifdef ERR_REPORTING_STDOUT
+    srtp_err_file = stdout;
+#elif defined(ERR_REPORTING_FILE)
+    /* open file for error reporting */
+    srtp_err_file = fopen(ERR_REPORTING_FILE, "w");
+    if (srtp_err_file == NULL) {
+        return srtp_err_status_init_fail;
+    }
+#endif
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_report_handler_func_t *srtp_err_report_handler = NULL;
+
+srtp_err_status_t srtp_install_err_report_handler(
+    srtp_err_report_handler_func_t func)
+{
+    srtp_err_report_handler = func;
+    return srtp_err_status_ok;
+}
+
+void srtp_err_report(srtp_err_reporting_level_t level, const char *format, ...)
+{
+    char msg[512];
+    va_list args;
+    if (srtp_err_file != NULL) {
+        va_start(args, format);
+        vfprintf(srtp_err_file, format, args);
+        va_end(args);
+    }
+    if (srtp_err_report_handler != NULL) {
+        va_start(args, format);
+        if (vsnprintf(msg, sizeof(msg), format, args) > 0) {
+            /* strip trailing \n, callback should not have one */
+            size_t l = strlen(msg);
+            if (l && msg[l - 1] == '\n') {
+                msg[l - 1] = '\0';
+            }
+            srtp_err_report_handler(level, msg);
+            /*
+             * NOTE, need to be carefull, there is a potential that
+             * octet_string_set_to_zero() could
+             * call srtp_err_report() in the future, leading to recursion
+             */
+            octet_string_set_to_zero(msg, sizeof(msg));
+        }
+        va_end(args);
+    }
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/kernel/key.c b/trunk/3rdparty/libsrtp-2-fit/crypto/kernel/key.c
new file mode 100644
index 000000000..046619504
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/kernel/key.c
@@ -0,0 +1,122 @@
+/*
+ * key.c
+ *
+ * key usage limits enforcement
+ *
+ * David A. Mcgrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "key.h"
+
+#define soft_limit 0x10000
+
+srtp_err_status_t srtp_key_limit_set(srtp_key_limit_t key,
+                                     const srtp_xtd_seq_num_t s)
+{
+#ifdef NO_64BIT_MATH
+    if (high32(s) == 0 && low32(s) < soft_limit) {
+        return srtp_err_status_bad_param;
+    }
+#else
+    if (s < soft_limit) {
+        return srtp_err_status_bad_param;
+    }
+#endif
+    key->num_left = s;
+    key->state = srtp_key_state_normal;
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_key_limit_clone(srtp_key_limit_t original,
+                                       srtp_key_limit_t *new_key)
+{
+    if (original == NULL) {
+        return srtp_err_status_bad_param;
+    }
+    *new_key = original;
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_key_limit_check(const srtp_key_limit_t key)
+{
+    if (key->state == srtp_key_state_expired) {
+        return srtp_err_status_key_expired;
+    }
+    return srtp_err_status_ok;
+}
+
+srtp_key_event_t srtp_key_limit_update(srtp_key_limit_t key)
+{
+#ifdef NO_64BIT_MATH
+    if (low32(key->num_left) == 0) {
+        // carry
+        key->num_left =
+            make64(high32(key->num_left) - 1, low32(key->num_left) - 1);
+    } else {
+        // no carry
+        key->num_left = make64(high32(key->num_left), low32(key->num_left) - 1);
+    }
+    if (high32(key->num_left) != 0 || low32(key->num_left) >= soft_limit) {
+        return srtp_key_event_normal; /* we're above the soft limit */
+    }
+#else
+    key->num_left--;
+    if (key->num_left >= soft_limit) {
+        return srtp_key_event_normal; /* we're above the soft limit */
+    }
+#endif
+    if (key->state == srtp_key_state_normal) {
+        /* we just passed the soft limit, so change the state */
+        key->state = srtp_key_state_past_soft_limit;
+    }
+#ifdef NO_64BIT_MATH
+    if (low32(key->num_left) == 0 && high32(key->num_left == 0))
+#else
+    if (key->num_left < 1)
+#endif
+    { /* we just hit the hard limit */
+        key->state = srtp_key_state_expired;
+        return srtp_key_event_hard_limit;
+    }
+    return srtp_key_event_soft_limit;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/math/datatypes.c b/trunk/3rdparty/libsrtp-2-fit/crypto/math/datatypes.c
new file mode 100644
index 000000000..001584c1b
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/math/datatypes.c
@@ -0,0 +1,490 @@
+/*
+ * datatypes.c
+ *
+ * data types for finite fields and functions for input, output, and
+ * manipulation
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#ifdef OPENSSL
+#include <openssl/crypto.h>
+#endif
+
+#include "datatypes.h"
+
+static const int8_t octet_weight[256] = {
+    0, 1, 1, 2, 1, 2, 2, 3, 1, 2, 2, 3, 2, 3, 3, 4, 1, 2, 2, 3, 2, 3, 3, 4,
+    2, 3, 3, 4, 3, 4, 4, 5, 1, 2, 2, 3, 2, 3, 3, 4, 2, 3, 3, 4, 3, 4, 4, 5,
+    2, 3, 3, 4, 3, 4, 4, 5, 3, 4, 4, 5, 4, 5, 5, 6, 1, 2, 2, 3, 2, 3, 3, 4,
+    2, 3, 3, 4, 3, 4, 4, 5, 2, 3, 3, 4, 3, 4, 4, 5, 3, 4, 4, 5, 4, 5, 5, 6,
+    2, 3, 3, 4, 3, 4, 4, 5, 3, 4, 4, 5, 4, 5, 5, 6, 3, 4, 4, 5, 4, 5, 5, 6,
+    4, 5, 5, 6, 5, 6, 6, 7, 1, 2, 2, 3, 2, 3, 3, 4, 2, 3, 3, 4, 3, 4, 4, 5,
+    2, 3, 3, 4, 3, 4, 4, 5, 3, 4, 4, 5, 4, 5, 5, 6, 2, 3, 3, 4, 3, 4, 4, 5,
+    3, 4, 4, 5, 4, 5, 5, 6, 3, 4, 4, 5, 4, 5, 5, 6, 4, 5, 5, 6, 5, 6, 6, 7,
+    2, 3, 3, 4, 3, 4, 4, 5, 3, 4, 4, 5, 4, 5, 5, 6, 3, 4, 4, 5, 4, 5, 5, 6,
+    4, 5, 5, 6, 5, 6, 6, 7, 3, 4, 4, 5, 4, 5, 5, 6, 4, 5, 5, 6, 5, 6, 6, 7,
+    4, 5, 5, 6, 5, 6, 6, 7, 5, 6, 6, 7, 6, 7, 7, 8
+};
+
+int octet_get_weight(uint8_t octet)
+{
+    return (int)octet_weight[octet];
+}
+
+/*
+ * bit_string is a buffer that is used to hold output strings, e.g.
+ * for printing.
+ */
+
+/* the value MAX_PRINT_STRING_LEN is defined in datatypes.h */
+
+char bit_string[MAX_PRINT_STRING_LEN];
+
+uint8_t srtp_nibble_to_hex_char(uint8_t nibble)
+{
+    char buf[16] = { '0', '1', '2', '3', '4', '5', '6', '7',
+                     '8', '9', 'a', 'b', 'c', 'd', 'e', 'f' };
+    return buf[nibble & 0xF];
+}
+
+char *srtp_octet_string_hex_string(const void *s, int length)
+{
+    const uint8_t *str = (const uint8_t *)s;
+    int i;
+
+    /* double length, since one octet takes two hex characters */
+    length *= 2;
+
+    /* truncate string if it would be too long */
+    if (length > MAX_PRINT_STRING_LEN)
+        length = MAX_PRINT_STRING_LEN - 2;
+
+    for (i = 0; i < length; i += 2) {
+        bit_string[i] = srtp_nibble_to_hex_char(*str >> 4);
+        bit_string[i + 1] = srtp_nibble_to_hex_char(*str++ & 0xF);
+    }
+    bit_string[i] = 0; /* null terminate string */
+    return bit_string;
+}
+
+char *v128_hex_string(v128_t *x)
+{
+    int i, j;
+
+    for (i = j = 0; i < 16; i++) {
+        bit_string[j++] = srtp_nibble_to_hex_char(x->v8[i] >> 4);
+        bit_string[j++] = srtp_nibble_to_hex_char(x->v8[i] & 0xF);
+    }
+
+    bit_string[j] = 0; /* null terminate string */
+    return bit_string;
+}
+
+char *v128_bit_string(v128_t *x)
+{
+    int j, i;
+    uint32_t mask;
+
+    for (j = i = 0; j < 4; j++) {
+        for (mask = 0x80000000; mask > 0; mask >>= 1) {
+            if (x->v32[j] & mask)
+                bit_string[i] = '1';
+            else
+                bit_string[i] = '0';
+            ++i;
+        }
+    }
+    bit_string[128] = 0; /* null terminate string */
+
+    return bit_string;
+}
+
+void v128_copy_octet_string(v128_t *x, const uint8_t s[16])
+{
+#ifdef ALIGNMENT_32BIT_REQUIRED
+    if ((((uint32_t)&s[0]) & 0x3) != 0)
+#endif
+    {
+        x->v8[0] = s[0];
+        x->v8[1] = s[1];
+        x->v8[2] = s[2];
+        x->v8[3] = s[3];
+        x->v8[4] = s[4];
+        x->v8[5] = s[5];
+        x->v8[6] = s[6];
+        x->v8[7] = s[7];
+        x->v8[8] = s[8];
+        x->v8[9] = s[9];
+        x->v8[10] = s[10];
+        x->v8[11] = s[11];
+        x->v8[12] = s[12];
+        x->v8[13] = s[13];
+        x->v8[14] = s[14];
+        x->v8[15] = s[15];
+    }
+#ifdef ALIGNMENT_32BIT_REQUIRED
+    else {
+        v128_t *v = (v128_t *)&s[0];
+
+        v128_copy(x, v);
+    }
+#endif
+}
+
+#ifndef DATATYPES_USE_MACROS /* little functions are not macros */
+
+void v128_set_to_zero(v128_t *x)
+{
+    _v128_set_to_zero(x);
+}
+
+void v128_copy(v128_t *x, const v128_t *y)
+{
+    _v128_copy(x, y);
+}
+
+void v128_xor(v128_t *z, v128_t *x, v128_t *y)
+{
+    _v128_xor(z, x, y);
+}
+
+void v128_and(v128_t *z, v128_t *x, v128_t *y)
+{
+    _v128_and(z, x, y);
+}
+
+void v128_or(v128_t *z, v128_t *x, v128_t *y)
+{
+    _v128_or(z, x, y);
+}
+
+void v128_complement(v128_t *x)
+{
+    _v128_complement(x);
+}
+
+int v128_is_eq(const v128_t *x, const v128_t *y)
+{
+    return _v128_is_eq(x, y);
+}
+
+int v128_xor_eq(v128_t *x, const v128_t *y)
+{
+    return _v128_xor_eq(x, y);
+}
+
+int v128_get_bit(const v128_t *x, int i)
+{
+    return _v128_get_bit(x, i);
+}
+
+void v128_set_bit(v128_t *x, int i)
+{
+    _v128_set_bit(x, i);
+}
+
+void v128_clear_bit(v128_t *x, int i)
+{
+    _v128_clear_bit(x, i);
+}
+
+void v128_set_bit_to(v128_t *x, int i, int y)
+{
+    _v128_set_bit_to(x, i, y);
+}
+
+#endif /* DATATYPES_USE_MACROS */
+
+void v128_right_shift(v128_t *x, int shift)
+{
+    const int base_index = shift >> 5;
+    const int bit_index = shift & 31;
+    int i, from;
+    uint32_t b;
+
+    if (shift > 127) {
+        v128_set_to_zero(x);
+        return;
+    }
+
+    if (bit_index == 0) {
+        /* copy each word from left size to right side */
+        x->v32[4 - 1] = x->v32[4 - 1 - base_index];
+        for (i = 4 - 1; i > base_index; i--)
+            x->v32[i - 1] = x->v32[i - 1 - base_index];
+
+    } else {
+        /* set each word to the "or" of the two bit-shifted words */
+        for (i = 4; i > base_index; i--) {
+            from = i - 1 - base_index;
+            b = x->v32[from] << bit_index;
+            if (from > 0)
+                b |= x->v32[from - 1] >> (32 - bit_index);
+            x->v32[i - 1] = b;
+        }
+    }
+
+    /* now wrap up the final portion */
+    for (i = 0; i < base_index; i++)
+        x->v32[i] = 0;
+}
+
+void v128_left_shift(v128_t *x, int shift)
+{
+    int i;
+    const int base_index = shift >> 5;
+    const int bit_index = shift & 31;
+
+    if (shift > 127) {
+        v128_set_to_zero(x);
+        return;
+    }
+
+    if (bit_index == 0) {
+        for (i = 0; i < 4 - base_index; i++)
+            x->v32[i] = x->v32[i + base_index];
+    } else {
+        for (i = 0; i < 4 - base_index - 1; i++)
+            x->v32[i] = (x->v32[i + base_index] >> bit_index) ^
+                        (x->v32[i + base_index + 1] << (32 - bit_index));
+        x->v32[4 - base_index - 1] = x->v32[4 - 1] >> bit_index;
+    }
+
+    /* now wrap up the final portion */
+    for (i = 4 - base_index; i < 4; i++)
+        x->v32[i] = 0;
+}
+
+/* functions manipulating bitvector_t */
+
+#ifndef DATATYPES_USE_MACROS /* little functions are not macros */
+
+int bitvector_get_bit(const bitvector_t *v, int bit_index)
+{
+    return _bitvector_get_bit(v, bit_index);
+}
+
+void bitvector_set_bit(bitvector_t *v, int bit_index)
+{
+    _bitvector_set_bit(v, bit_index);
+}
+
+void bitvector_clear_bit(bitvector_t *v, int bit_index)
+{
+    _bitvector_clear_bit(v, bit_index);
+}
+
+#endif /* DATATYPES_USE_MACROS */
+
+int bitvector_alloc(bitvector_t *v, unsigned long length)
+{
+    unsigned long l;
+
+    /* Round length up to a multiple of bits_per_word */
+    length =
+        (length + bits_per_word - 1) & ~(unsigned long)((bits_per_word - 1));
+
+    l = length / bits_per_word * bytes_per_word;
+
+    /* allocate memory, then set parameters */
+    if (l == 0) {
+        v->word = NULL;
+        v->length = 0;
+        return -1;
+    } else {
+        v->word = (uint32_t *)srtp_crypto_alloc(l);
+        if (v->word == NULL) {
+            v->length = 0;
+            return -1;
+        }
+    }
+    v->length = length;
+
+    /* initialize bitvector to zero */
+    bitvector_set_to_zero(v);
+
+    return 0;
+}
+
+void bitvector_dealloc(bitvector_t *v)
+{
+    if (v->word != NULL)
+        srtp_crypto_free(v->word);
+    v->word = NULL;
+    v->length = 0;
+}
+
+void bitvector_set_to_zero(bitvector_t *x)
+{
+    /* C99 guarantees that memset(0) will set the value 0 for uint32_t */
+    memset(x->word, 0, x->length >> 3);
+}
+
+char *bitvector_bit_string(bitvector_t *x, char *buf, int len)
+{
+    int j, i;
+    uint32_t mask;
+
+    for (j = i = 0; j < (int)(x->length >> 5) && i < len - 1; j++) {
+        for (mask = 0x80000000; mask > 0; mask >>= 1) {
+            if (x->word[j] & mask)
+                buf[i] = '1';
+            else
+                buf[i] = '0';
+            ++i;
+            if (i >= len - 1)
+                break;
+        }
+    }
+    buf[i] = 0; /* null terminate string */
+
+    return buf;
+}
+
+void bitvector_left_shift(bitvector_t *x, int shift)
+{
+    int i;
+    const int base_index = shift >> 5;
+    const int bit_index = shift & 31;
+    const int word_length = x->length >> 5;
+
+    if (shift >= (int)x->length) {
+        bitvector_set_to_zero(x);
+        return;
+    }
+
+    if (bit_index == 0) {
+        for (i = 0; i < word_length - base_index; i++)
+            x->word[i] = x->word[i + base_index];
+    } else {
+        for (i = 0; i < word_length - base_index - 1; i++)
+            x->word[i] = (x->word[i + base_index] >> bit_index) ^
+                         (x->word[i + base_index + 1] << (32 - bit_index));
+        x->word[word_length - base_index - 1] =
+            x->word[word_length - 1] >> bit_index;
+    }
+
+    /* now wrap up the final portion */
+    for (i = word_length - base_index; i < word_length; i++)
+        x->word[i] = 0;
+}
+
+int srtp_octet_string_is_eq(uint8_t *a, uint8_t *b, int len)
+{
+    uint8_t *end = b + len;
+    uint8_t accumulator = 0;
+
+    /*
+     * We use this somewhat obscure implementation to try to ensure the running
+     * time only depends on len, even accounting for compiler optimizations.
+     * The accumulator ends up zero iff the strings are equal.
+     */
+    while (b < end)
+        accumulator |= (*a++ ^ *b++);
+
+    /* Return 1 if *not* equal. */
+    return accumulator != 0;
+}
+
+void srtp_cleanse(void *s, size_t len)
+{
+    volatile unsigned char *p = (volatile unsigned char *)s;
+    while (len--)
+        *p++ = 0;
+}
+
+void octet_string_set_to_zero(void *s, size_t len)
+{
+#if defined(OPENSSL) && !defined(OPENSSL_CLEANSE_BROKEN)
+    OPENSSL_cleanse(s, len);
+#else
+    srtp_cleanse(s, len);
+#endif
+}
+
+#ifdef TESTAPP_SOURCE
+
+static const char b64chars[] = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
+                               "abcdefghijklmnopqrstuvwxyz0123456789+/";
+
+static int base64_block_to_octet_triple(char *out, char *in)
+{
+    unsigned char sextets[4] = { 0 };
+    int j = 0;
+    int i;
+
+    for (i = 0; i < 4; i++) {
+        char *p = strchr(b64chars, in[i]);
+        if (p != NULL)
+            sextets[i] = p - b64chars;
+        else
+            j++;
+    }
+
+    out[0] = (sextets[0] << 2) | (sextets[1] >> 4);
+    if (j < 2)
+        out[1] = (sextets[1] << 4) | (sextets[2] >> 2);
+    if (j < 1)
+        out[2] = (sextets[2] << 6) | sextets[3];
+    return j;
+}
+
+int base64_string_to_octet_string(char *out, int *pad, char *in, int len)
+{
+    int k = 0;
+    int i = 0;
+    int j = 0;
+    if (len % 4 != 0)
+        return 0;
+
+    while (i < len && j == 0) {
+        j = base64_block_to_octet_triple(out + k, in + i);
+        k += 3;
+        i += 4;
+    }
+    *pad = j;
+    return i;
+}
+
+#endif
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/math/stat.c b/trunk/3rdparty/libsrtp-2-fit/crypto/math/stat.c
new file mode 100644
index 000000000..d30045357
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/math/stat.c
@@ -0,0 +1,213 @@
+/*
+ * stats.c
+ *
+ * statistical tests
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "stat.h"
+
+srtp_debug_module_t srtp_mod_stat = {
+    0,                  /* debugging is off by default */
+    (char *)"stat test" /* printable module name       */
+};
+
+/*
+ * each test assumes that 20,000 bits (2500 octets) of data is
+ * provided as input
+ */
+
+#define STAT_TEST_DATA_LEN 2500
+
+srtp_err_status_t stat_test_monobit(uint8_t *data)
+{
+    uint8_t *data_end = data + STAT_TEST_DATA_LEN;
+    uint16_t ones_count;
+
+    ones_count = 0;
+    while (data < data_end) {
+        ones_count += octet_get_weight(*data);
+        data++;
+    }
+
+    debug_print(srtp_mod_stat, "bit count: %d", ones_count);
+
+    if ((ones_count < 9725) || (ones_count > 10275))
+        return srtp_err_status_algo_fail;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t stat_test_poker(uint8_t *data)
+{
+    int i;
+    uint8_t *data_end = data + STAT_TEST_DATA_LEN;
+    double poker;
+    uint16_t f[16] = { 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 };
+
+    while (data < data_end) {
+        f[*data & 0x0f]++; /* increment freq. count for low nibble  */
+        f[(*data) >> 4]++; /* increment freq. count for high nibble */
+        data++;
+    }
+
+    poker = 0.0;
+    for (i = 0; i < 16; i++)
+        poker += (double)f[i] * f[i];
+
+    poker *= (16.0 / 5000.0);
+    poker -= 5000.0;
+
+    debug_print(srtp_mod_stat, "poker test: %f\n", poker);
+
+    if ((poker < 2.16) || (poker > 46.17))
+        return srtp_err_status_algo_fail;
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * runs[i] holds the number of runs of size (i-1)
+ */
+
+srtp_err_status_t stat_test_runs(uint8_t *data)
+{
+    uint8_t *data_end = data + STAT_TEST_DATA_LEN;
+    uint16_t runs[6] = { 0, 0, 0, 0, 0, 0 };
+    uint16_t gaps[6] = { 0, 0, 0, 0, 0, 0 };
+    uint16_t lo_value[6] = { 2315, 1114, 527, 240, 103, 103 };
+    uint16_t hi_value[6] = { 2685, 1386, 723, 384, 209, 209 };
+    int state = 0;
+    uint16_t mask;
+    int i;
+
+    /*
+     * the state variable holds the number of bits in the
+     * current run (or gap, if negative)
+     */
+
+    while (data < data_end) {
+        /* loop over the bits of this byte */
+        for (mask = 1; mask < 256; mask <<= 1) {
+            if (*data & mask) {
+                /* next bit is a one  */
+                if (state > 0) {
+                    /* prefix is a run, so increment the run-count  */
+                    state++;
+
+                    /* check for long runs */
+                    if (state > 25) {
+                        debug_print(srtp_mod_stat, ">25 runs: %d", state);
+                        return srtp_err_status_algo_fail;
+                    }
+
+                } else if (state < 0) {
+                    /* prefix is a gap  */
+                    if (state < -25) {
+                        debug_print(srtp_mod_stat, ">25 gaps: %d", state);
+                        return srtp_err_status_algo_fail; /* long-runs test
+                                                             failed   */
+                    }
+                    if (state < -6) {
+                        state = -6; /* group together gaps > 5 */
+                    }
+                    gaps[-1 - state]++; /* increment gap count      */
+                    state = 1;          /* set state at one set bit */
+                } else {
+                    /* state is zero; this happens only at initialization */
+                    state = 1;
+                }
+            } else {
+                /* next bit is a zero  */
+                if (state > 0) {
+                    /* prefix is a run */
+                    if (state > 25) {
+                        debug_print(srtp_mod_stat, ">25 runs (2): %d", state);
+                        return srtp_err_status_algo_fail; /* long-runs test
+                                                             failed   */
+                    }
+                    if (state > 6) {
+                        state = 6; /* group together runs > 5 */
+                    }
+                    runs[state - 1]++; /* increment run count       */
+                    state = -1;        /* set state at one zero bit */
+                } else if (state < 0) {
+                    /* prefix is a gap, so increment gap-count (decrement state)
+                     */
+                    state--;
+
+                    /* check for long gaps */
+                    if (state < -25) {
+                        debug_print(srtp_mod_stat, ">25 gaps (2): %d", state);
+                        return srtp_err_status_algo_fail;
+                    }
+
+                } else {
+                    /* state is zero; this happens only at initialization */
+                    state = -1;
+                }
+            }
+        }
+
+        /* move along to next octet */
+        data++;
+    }
+
+    if (srtp_mod_stat.on) {
+        debug_print0(srtp_mod_stat, "runs test");
+        for (i = 0; i < 6; i++)
+            debug_print(srtp_mod_stat, "  runs[]: %d", runs[i]);
+        for (i = 0; i < 6; i++)
+            debug_print(srtp_mod_stat, "  gaps[]: %d", gaps[i]);
+    }
+
+    /* check run and gap counts against the fixed limits */
+    for (i = 0; i < 6; i++)
+        if ((runs[i] < lo_value[i]) || (runs[i] > hi_value[i]) ||
+            (gaps[i] < lo_value[i]) || (gaps[i] > hi_value[i]))
+            return srtp_err_status_algo_fail;
+
+    return srtp_err_status_ok;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/replay/rdb.c b/trunk/3rdparty/libsrtp-2-fit/crypto/replay/rdb.c
new file mode 100644
index 000000000..ab1c7b55b
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/replay/rdb.c
@@ -0,0 +1,137 @@
+/*
+ * rdb.c
+ *
+ * Implements a replay database for packet security
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "rdb.h"
+
+/*
+ * this implementation of a replay database works as follows:
+ *
+ * window_start is the index of the first packet in the window
+ * bitmask      a bit-buffer, containing the most recently entered
+ *              index as the leftmost bit
+ *
+ */
+
+/* srtp_rdb_init initalizes rdb */
+srtp_err_status_t srtp_rdb_init(srtp_rdb_t *rdb)
+{
+    v128_set_to_zero(&rdb->bitmask);
+    rdb->window_start = 0;
+    return srtp_err_status_ok;
+}
+
+/*
+ * srtp_rdb_check checks to see if index appears in rdb
+ */
+srtp_err_status_t srtp_rdb_check(const srtp_rdb_t *rdb, uint32_t p_index)
+{
+    /* if the index appears after (or at very end of) the window, its good */
+    if (p_index >= rdb->window_start + rdb_bits_in_bitmask) {
+        return srtp_err_status_ok;
+    }
+
+    /* if the index appears before the window, its bad */
+    if (p_index < rdb->window_start) {
+        return srtp_err_status_replay_old;
+    }
+
+    /* otherwise, the index appears within the window, so check the bitmask */
+    if (v128_get_bit(&rdb->bitmask, (p_index - rdb->window_start)) == 1) {
+        return srtp_err_status_replay_fail;
+    }
+
+    /* otherwise, the index is okay */
+    return srtp_err_status_ok;
+}
+
+/*
+ * srtp_rdb_add_index adds index to srtp_rdb_t (and does *not* check if
+ * index appears in db)
+ *
+ * this function should be called only after srtp_rdb_check has
+ * indicated that the index does not appear in the rdb, e.g., a mutex
+ * should protect the rdb between these calls
+ */
+srtp_err_status_t srtp_rdb_add_index(srtp_rdb_t *rdb, uint32_t p_index)
+{
+    unsigned int delta;
+
+    if (p_index < rdb->window_start)
+        return srtp_err_status_replay_fail;
+
+    delta = (p_index - rdb->window_start);
+    if (delta < rdb_bits_in_bitmask) {
+        /* if the p_index is within the window, set the appropriate bit */
+        v128_set_bit(&rdb->bitmask, delta);
+
+    } else {
+        delta -= rdb_bits_in_bitmask - 1;
+
+        /* shift the window forward by delta bits*/
+        v128_left_shift(&rdb->bitmask, delta);
+        v128_set_bit(&rdb->bitmask, rdb_bits_in_bitmask - 1);
+        rdb->window_start += delta;
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_rdb_increment(srtp_rdb_t *rdb)
+{
+    if (rdb->window_start >= 0x7fffffff) {
+        return srtp_err_status_key_expired;
+    }
+    ++rdb->window_start;
+    return srtp_err_status_ok;
+}
+
+uint32_t srtp_rdb_get_value(const srtp_rdb_t *rdb)
+{
+    return rdb->window_start;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/replay/rdbx.c b/trunk/3rdparty/libsrtp-2-fit/crypto/replay/rdbx.c
new file mode 100644
index 000000000..40cba01a1
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/replay/rdbx.c
@@ -0,0 +1,386 @@
+/*
+ * rdbx.c
+ *
+ * a replay database with extended range, using a rollover counter
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "rdbx.h"
+
+/*
+ * from RFC 3711:
+ *
+ * A receiver reconstructs the index i of a packet with sequence
+ *  number SEQ using the estimate
+ *
+ * i = 2^16 * v + SEQ,
+ *
+ * where v is chosen from the set { ROC-1, ROC, ROC+1 } such that i is
+ * closest to the value 2^16 * ROC + s_l.  If the value r+1 is used,
+ * then the rollover counter r in the cryptographic context is
+ * incremented by one (if the packet containing s is authentic).
+ */
+
+/*
+ * rdbx implementation notes
+ *
+ * A srtp_xtd_seq_num_t is essentially a sequence number for which some of
+ * the data on the wire are implicit.  It logically consists of a
+ * rollover counter and a sequence number; the sequence number is the
+ * explicit part, and the rollover counter is the implicit part.
+ *
+ * Upon receiving a sequence_number (e.g. in a newly received SRTP
+ * packet), the complete srtp_xtd_seq_num_t can be estimated by using a
+ * local srtp_xtd_seq_num_t as a basis.  This is done using the function
+ * srtp_index_guess(&local, &guess, seq_from_packet).  This function
+ * returns the difference of the guess and the local value.  The local
+ * srtp_xtd_seq_num_t can be moved forward to the guess using the function
+ * srtp_index_advance(&guess, delta), where delta is the difference.
+ *
+ *
+ * A srtp_rdbx_t consists of a srtp_xtd_seq_num_t and a bitmask.  The index is
+ * highest sequence number that has been received, and the bitmask indicates
+ * which of the recent indicies have been received as well.  The
+ * highest bit in the bitmask corresponds to the index in the bitmask.
+ */
+
+void srtp_index_init(srtp_xtd_seq_num_t *pi)
+{
+#ifdef NO_64BIT_MATH
+    *pi = make64(0, 0);
+#else
+    *pi = 0;
+#endif
+}
+
+void srtp_index_advance(srtp_xtd_seq_num_t *pi, srtp_sequence_number_t s)
+{
+#ifdef NO_64BIT_MATH
+    /* a > ~b means a+b will generate a carry */
+    /* s is uint16 here */
+    *pi = make64(high32(*pi) + (s > ~low32(*pi) ? 1 : 0), low32(*pi) + s);
+#else
+    *pi += s;
+#endif
+}
+
+/*
+ * srtp_index_guess(local, guess, s)
+ *
+ * given a srtp_xtd_seq_num_t local (which represents the last
+ * known-to-be-good received srtp_xtd_seq_num_t) and a sequence number s
+ * (from a newly arrived packet), sets the contents of *guess to
+ * contain the best guess of the packet index to which s corresponds,
+ * and returns the difference between *guess and *local
+ *
+ * nota bene - the output is a signed integer, DON'T cast it to a
+ * unsigned integer!
+ */
+
+int32_t srtp_index_guess(const srtp_xtd_seq_num_t *local,
+                         srtp_xtd_seq_num_t *guess,
+                         srtp_sequence_number_t s)
+{
+#ifdef NO_64BIT_MATH
+    uint32_t local_roc = ((high32(*local) << 16) | (low32(*local) >> 16));
+    uint16_t local_seq = (uint16_t)(low32(*local));
+#else
+    uint32_t local_roc = (uint32_t)(*local >> 16);
+    uint16_t local_seq = (uint16_t)*local;
+#endif
+    uint32_t guess_roc;
+    uint16_t guess_seq;
+    int32_t difference;
+
+    if (local_seq < seq_num_median) {
+        if (s - local_seq > seq_num_median) {
+            guess_roc = local_roc - 1;
+            difference = s - local_seq - seq_num_max;
+        } else {
+            guess_roc = local_roc;
+            difference = s - local_seq;
+        }
+    } else {
+        if (local_seq - seq_num_median > s) {
+            guess_roc = local_roc + 1;
+            difference = s - local_seq + seq_num_max;
+        } else {
+            guess_roc = local_roc;
+            difference = s - local_seq;
+        }
+    }
+    guess_seq = s;
+
+/* Note: guess_roc is 32 bits, so this generates a 48-bit result! */
+#ifdef NO_64BIT_MATH
+    *guess = make64(guess_roc >> 16, (guess_roc << 16) | guess_seq);
+#else
+    *guess = (((uint64_t)guess_roc) << 16) | guess_seq;
+#endif
+
+    return difference;
+}
+
+/*
+ * rdbx
+ *
+ */
+
+/*
+ *  srtp_rdbx_init(&r, ws) initializes the srtp_rdbx_t pointed to by r with
+ * window size ws
+ */
+srtp_err_status_t srtp_rdbx_init(srtp_rdbx_t *rdbx, unsigned long ws)
+{
+    if (ws == 0) {
+        return srtp_err_status_bad_param;
+    }
+
+    if (bitvector_alloc(&rdbx->bitmask, ws) != 0) {
+        return srtp_err_status_alloc_fail;
+    }
+
+    srtp_index_init(&rdbx->index);
+
+    return srtp_err_status_ok;
+}
+
+/*
+ *  srtp_rdbx_dealloc(&r) frees memory for the srtp_rdbx_t pointed to by r
+ */
+srtp_err_status_t srtp_rdbx_dealloc(srtp_rdbx_t *rdbx)
+{
+    bitvector_dealloc(&rdbx->bitmask);
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * srtp_rdbx_set_roc(rdbx, roc) initalizes the srtp_rdbx_t at the location rdbx
+ * to have the rollover counter value roc.  If that value is less than
+ * the current rollover counter value, then the function returns
+ * srtp_err_status_replay_old; otherwise, srtp_err_status_ok is returned.
+ *
+ */
+srtp_err_status_t srtp_rdbx_set_roc(srtp_rdbx_t *rdbx, uint32_t roc)
+{
+    bitvector_set_to_zero(&rdbx->bitmask);
+
+#ifdef NO_64BIT_MATH
+#error not yet implemented
+#else
+
+    /* make sure that we're not moving backwards */
+    if (roc < (rdbx->index >> 16)) {
+        return srtp_err_status_replay_old;
+    }
+
+    rdbx->index &= 0xffff;                /* retain lowest 16 bits */
+    rdbx->index |= ((uint64_t)roc) << 16; /* set ROC */
+#endif
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * srtp_rdbx_get_packet_index(rdbx) returns the value of the packet index
+ * for the srtp_rdbx_t pointed to by rdbx
+ *
+ */
+srtp_xtd_seq_num_t srtp_rdbx_get_packet_index(const srtp_rdbx_t *rdbx)
+{
+    return rdbx->index;
+}
+
+/*
+ * srtp_rdbx_get_window_size(rdbx) returns the value of the window size
+ * for the srtp_rdbx_t pointed to by rdbx
+ *
+ */
+unsigned long srtp_rdbx_get_window_size(const srtp_rdbx_t *rdbx)
+{
+    return bitvector_get_length(&rdbx->bitmask);
+}
+
+/*
+ * srtp_rdbx_check(&r, delta) checks to see if the srtp_xtd_seq_num_t
+ * which is at rdbx->index + delta is in the rdb
+ */
+srtp_err_status_t srtp_rdbx_check(const srtp_rdbx_t *rdbx, int delta)
+{
+    if (delta > 0) { /* if delta is positive, it's good */
+        return srtp_err_status_ok;
+    } else if ((int)(bitvector_get_length(&rdbx->bitmask) - 1) + delta < 0) {
+        /* if delta is lower than the bitmask, it's bad */
+        return srtp_err_status_replay_old;
+    } else if (bitvector_get_bit(
+                   &rdbx->bitmask,
+                   (int)(bitvector_get_length(&rdbx->bitmask) - 1) + delta) ==
+               1) {
+        /* delta is within the window, so check the bitmask */
+        return srtp_err_status_replay_fail;
+    }
+    /* otherwise, the index is okay */
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * srtp_rdbx_add_index adds the srtp_xtd_seq_num_t at rdbx->window_start + d to
+ * replay_db (and does *not* check if that srtp_xtd_seq_num_t appears in db)
+ *
+ * this function should be called only after replay_check has
+ * indicated that the index does not appear in the rdbx, e.g., a mutex
+ * should protect the rdbx between these calls if need be
+ */
+srtp_err_status_t srtp_rdbx_add_index(srtp_rdbx_t *rdbx, int delta)
+{
+    if (delta > 0) {
+        /* shift forward by delta */
+        srtp_index_advance(&rdbx->index, delta);
+        bitvector_left_shift(&rdbx->bitmask, delta);
+        bitvector_set_bit(&rdbx->bitmask,
+                          bitvector_get_length(&rdbx->bitmask) - 1);
+    } else {
+        /* delta is in window */
+        bitvector_set_bit(&rdbx->bitmask,
+                          bitvector_get_length(&rdbx->bitmask) - 1 + delta);
+    }
+
+    /* note that we need not consider the case that delta == 0 */
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * srtp_rdbx_estimate_index(rdbx, guess, s)
+ *
+ * given an rdbx and a sequence number s (from a newly arrived packet),
+ * sets the contents of *guess to contain the best guess of the packet
+ * index to which s corresponds, and returns the difference between
+ * *guess and the locally stored synch info
+ */
+int32_t srtp_rdbx_estimate_index(const srtp_rdbx_t *rdbx,
+                                 srtp_xtd_seq_num_t *guess,
+                                 srtp_sequence_number_t s)
+{
+/*
+ * if the sequence number and rollover counter in the rdbx are
+ * non-zero, then use the srtp_index_guess(...) function, otherwise, just
+ * set the rollover counter to zero (since the srtp_index_guess(...)
+ * function might incorrectly guess that the rollover counter is
+ * 0xffffffff)
+ */
+
+#ifdef NO_64BIT_MATH
+    /* seq_num_median = 0x8000 */
+    if (high32(rdbx->index) > 0 || low32(rdbx->index) > seq_num_median)
+#else
+    if (rdbx->index > seq_num_median)
+#endif
+    {
+        return srtp_index_guess(&rdbx->index, guess, s);
+    }
+
+#ifdef NO_64BIT_MATH
+    *guess = make64(0, (uint32_t)s);
+#else
+    *guess = s;
+#endif
+
+#ifdef NO_64BIT_MATH
+    return s - (uint16_t)low32(rdbx->index);
+#else
+    return s - (uint16_t)rdbx->index;
+#endif
+}
+
+/*
+ * srtp_rdbx_get_roc(rdbx)
+ *
+ * Get the current rollover counter
+ *
+ */
+uint32_t srtp_rdbx_get_roc(const srtp_rdbx_t *rdbx)
+{
+    uint32_t roc;
+
+#ifdef NO_64BIT_MATH
+    roc = ((high32(rdbx->index) << 16) | (low32(rdbx->index) >> 16));
+#else
+    roc = (uint32_t)(rdbx->index >> 16);
+#endif
+
+    return roc;
+}
+
+/*
+ * srtp_rdbx_set_roc_seq(rdbx, roc, seq) initalizes the srtp_rdbx_t at the
+ * location rdbx to have the rollover counter value roc and packet sequence
+ * number seq.  If the new rollover counter value is less than the current
+ * rollover counter value, then the function returns
+ * srtp_err_status_replay_old, otherwise, srtp_err_status_ok is returned.
+ */
+srtp_err_status_t srtp_rdbx_set_roc_seq(srtp_rdbx_t *rdbx,
+                                        uint32_t roc,
+                                        uint16_t seq)
+{
+#ifdef NO_64BIT_MATH
+#error not yet implemented
+#else
+
+    /* make sure that we're not moving backwards */
+    if (roc < (rdbx->index >> 16)) {
+        return srtp_err_status_replay_old;
+    }
+
+    rdbx->index = seq;
+    rdbx->index |= ((uint64_t)roc) << 16; /* set ROC */
+#endif
+
+    bitvector_set_to_zero(&rdbx->bitmask);
+
+    return srtp_err_status_ok;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/replay/ut_sim.c b/trunk/3rdparty/libsrtp-2-fit/crypto/replay/ut_sim.c
new file mode 100644
index 000000000..2825b68df
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/replay/ut_sim.c
@@ -0,0 +1,107 @@
+/*
+ * ut_sim.c
+ *
+ * an unreliable transport simulator
+ * (for testing replay databases and suchlike)
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "ut_sim.h"
+#include "cipher_priv.h"
+
+int ut_compar(const void *a, const void *b)
+{
+    uint8_t r;
+    srtp_cipher_rand_for_tests(&r, sizeof(r));
+    return r > (UINT8_MAX / 2) ? -1 : 1;
+}
+
+void ut_init(ut_connection *utc)
+{
+    int i;
+    utc->index = 0;
+
+    for (i = 0; i < UT_BUF; i++)
+        utc->buffer[i] = i;
+
+    qsort(utc->buffer, UT_BUF, sizeof(uint32_t), ut_compar);
+
+    utc->index = UT_BUF - 1;
+}
+
+uint32_t ut_next_index(ut_connection *utc)
+{
+    uint32_t tmp;
+
+    tmp = utc->buffer[0];
+    utc->index++;
+    utc->buffer[0] = utc->index;
+
+    qsort(utc->buffer, UT_BUF, sizeof(uint32_t), ut_compar);
+
+    return tmp;
+}
+
+#ifdef UT_TEST
+
+#include <stdio.h>
+
+int main()
+{
+    uint32_t i, irecvd, idiff;
+    ut_connection utc;
+
+    ut_init(&utc);
+
+    for (i = 0; i < 1000; i++) {
+        irecvd = ut_next_index(&utc);
+        idiff = i - irecvd;
+        printf("%lu\t%lu\t%d\n", i, irecvd, idiff);
+    }
+
+    return 0;
+}
+
+#endif
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/test/aes_calc.c b/trunk/3rdparty/libsrtp-2-fit/crypto/test/aes_calc.c
new file mode 100644
index 000000000..b362fd57f
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/test/aes_calc.c
@@ -0,0 +1,157 @@
+/*
+ * aes_calc.c
+ *
+ * A simple AES calculator for generating AES encryption values
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+/*
+
+ Example usage (with first NIST FIPS 197 test case):
+
+ [sh]$ test/aes_calc 000102030405060708090a0b0c0d0e0f \
+       00112233445566778899aabbccddeeff -v
+
+ plaintext:      00112233445566778899aabbccddeeff
+ key:            000102030405060708090a0b0c0d0e0f
+ ciphertext:     69c4e0d86a7b0430d8cdb78070b4c55a
+
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "aes.h"
+#include <stdio.h>
+#include <string.h>
+#include "util.h"
+
+void usage(char *prog_name)
+{
+    printf("usage: %s <key> <plaintext> [-v]\n", prog_name);
+    exit(255);
+}
+
+#define AES_MAX_KEY_LEN 32
+
+int main(int argc, char *argv[])
+{
+    v128_t data;
+    uint8_t key[AES_MAX_KEY_LEN];
+    srtp_aes_expanded_key_t exp_key;
+    int key_len, len;
+    int verbose = 0;
+    srtp_err_status_t status;
+
+    if (argc == 3) {
+        /* we're not in verbose mode */
+        verbose = 0;
+    } else if (argc == 4) {
+        if (strncmp(argv[3], "-v", 2) == 0) {
+            /* we're in verbose mode */
+            verbose = 1;
+        } else {
+            /* unrecognized flag, complain and exit */
+            usage(argv[0]);
+        }
+    } else {
+        /* we've been fed the wrong number of arguments - compain and exit */
+        usage(argv[0]);
+    }
+
+    /* read in key, checking length */
+    if (strlen(argv[1]) > AES_MAX_KEY_LEN * 2) {
+        fprintf(stderr, "error: too many digits in key "
+                        "(should be at most %d hexadecimal digits, found %u)\n",
+                AES_MAX_KEY_LEN * 2, (unsigned)strlen(argv[1]));
+        exit(1);
+    }
+    len = hex_string_to_octet_string((char *)key, argv[1], AES_MAX_KEY_LEN * 2);
+    /* check that hex string is the right length */
+    if (len != 32 && len != 48 && len != 64) {
+        fprintf(stderr, "error: bad number of digits in key "
+                        "(should be 32/48/64 hexadecimal digits, found %d)\n",
+                len);
+        exit(1);
+    }
+    key_len = len / 2;
+
+    /* read in plaintext, checking length */
+    if (strlen(argv[2]) > 16 * 2) {
+        fprintf(stderr, "error: too many digits in plaintext "
+                        "(should be %d hexadecimal digits, found %u)\n",
+                16 * 2, (unsigned)strlen(argv[2]));
+        exit(1);
+    }
+    len = hex_string_to_octet_string((char *)(&data), argv[2], 16 * 2);
+    /* check that hex string is the right length */
+    if (len < 16 * 2) {
+        fprintf(stderr, "error: too few digits in plaintext "
+                        "(should be %d hexadecimal digits, found %d)\n",
+                16 * 2, len);
+        exit(1);
+    }
+
+    if (verbose) {
+        /* print out plaintext */
+        printf("plaintext:\t%s\n",
+               octet_string_hex_string((uint8_t *)&data, 16));
+    }
+
+    /* encrypt plaintext */
+    status = srtp_aes_expand_encryption_key(key, key_len, &exp_key);
+    if (status) {
+        fprintf(stderr, "error: AES key expansion failed.\n");
+        exit(1);
+    }
+
+    srtp_aes_encrypt(&data, &exp_key);
+
+    /* write ciphertext to output */
+    if (verbose) {
+        printf("key:\t\t%s\n", octet_string_hex_string(key, key_len));
+        printf("ciphertext:\t");
+    }
+    printf("%s\n", v128_hex_string(&data));
+
+    return 0;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/test/cipher_driver.c b/trunk/3rdparty/libsrtp-2-fit/crypto/test/cipher_driver.c
new file mode 100644
index 000000000..8219a0618
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/test/cipher_driver.c
@@ -0,0 +1,603 @@
+/*
+ * cipher_driver.c
+ *
+ * A driver for the generic cipher type
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include <stdio.h> /* for printf() */
+#include "getopt_s.h"
+#include "cipher.h"
+#include "cipher_priv.h"
+#ifdef GCM
+#include "aes_icm_ext.h"
+#include "aes_gcm.h"
+#else
+#include "aes_icm.h"
+#endif
+
+#define PRINT_DEBUG 0
+
+void cipher_driver_test_throughput(srtp_cipher_t *c);
+
+srtp_err_status_t cipher_driver_self_test(srtp_cipher_type_t *ct);
+
+/*
+ * cipher_driver_test_buffering(ct) tests the cipher's output
+ * buffering for correctness by checking the consistency of succesive
+ * calls
+ */
+
+srtp_err_status_t cipher_driver_test_buffering(srtp_cipher_t *c);
+
+/*
+ * functions for testing cipher cache thrash
+ */
+srtp_err_status_t cipher_driver_test_array_throughput(srtp_cipher_type_t *ct,
+                                                      int klen,
+                                                      int num_cipher);
+
+void cipher_array_test_throughput(srtp_cipher_t *ca[], int num_cipher);
+
+uint64_t cipher_array_bits_per_second(srtp_cipher_t *cipher_array[],
+                                      int num_cipher,
+                                      unsigned octets_in_buffer,
+                                      int num_trials);
+
+srtp_err_status_t cipher_array_delete(srtp_cipher_t *cipher_array[],
+                                      int num_cipher);
+
+srtp_err_status_t cipher_array_alloc_init(srtp_cipher_t ***cipher_array,
+                                          int num_ciphers,
+                                          srtp_cipher_type_t *ctype,
+                                          int klen);
+
+void usage(char *prog_name)
+{
+    printf("usage: %s [ -t | -v | -a ]\n", prog_name);
+    exit(255);
+}
+
+void check_status(srtp_err_status_t s)
+{
+    if (s) {
+        printf("error (code %d)\n", s);
+        exit(s);
+    }
+    return;
+}
+
+/*
+ * null_cipher and srtp_aes_icm are the cipher meta-objects
+ * defined in the files in crypto/cipher subdirectory.  these are
+ * declared external so that we can use these cipher types here
+ */
+
+extern srtp_cipher_type_t srtp_null_cipher;
+extern srtp_cipher_type_t srtp_aes_icm_128;
+extern srtp_cipher_type_t srtp_aes_icm_256;
+#ifdef GCM
+extern srtp_cipher_type_t srtp_aes_icm_192;
+extern srtp_cipher_type_t srtp_aes_gcm_128;
+extern srtp_cipher_type_t srtp_aes_gcm_256;
+#endif
+
+int main(int argc, char *argv[])
+{
+    srtp_cipher_t *c = NULL;
+    srtp_err_status_t status;
+    /* clang-format off */
+    unsigned char test_key[48] = {
+        0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+        0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
+        0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
+        0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
+        0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27,
+        0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f,
+    };
+    /* clang-format on */
+    int q;
+    unsigned do_timing_test = 0;
+    unsigned do_validation = 0;
+    unsigned do_array_timing_test = 0;
+
+    /* process input arguments */
+    while (1) {
+        q = getopt_s(argc, argv, "tva");
+        if (q == -1)
+            break;
+        switch (q) {
+        case 't':
+            do_timing_test = 1;
+            break;
+        case 'v':
+            do_validation = 1;
+            break;
+        case 'a':
+            do_array_timing_test = 1;
+            break;
+        default:
+            usage(argv[0]);
+        }
+    }
+
+    printf("cipher test driver\n"
+           "David A. McGrew\n"
+           "Cisco Systems, Inc.\n");
+
+    if (!do_validation && !do_timing_test && !do_array_timing_test)
+        usage(argv[0]);
+
+    /* arry timing (cache thrash) test */
+    if (do_array_timing_test) {
+        int max_num_cipher = 1 << 16; /* number of ciphers in cipher_array */
+        int num_cipher;
+
+        for (num_cipher = 1; num_cipher < max_num_cipher; num_cipher *= 8)
+            cipher_driver_test_array_throughput(&srtp_null_cipher, 0,
+                                                num_cipher);
+
+        for (num_cipher = 1; num_cipher < max_num_cipher; num_cipher *= 8)
+            cipher_driver_test_array_throughput(
+                &srtp_aes_icm_128, SRTP_AES_ICM_128_KEY_LEN_WSALT, num_cipher);
+
+        for (num_cipher = 1; num_cipher < max_num_cipher; num_cipher *= 8)
+            cipher_driver_test_array_throughput(
+                &srtp_aes_icm_256, SRTP_AES_ICM_256_KEY_LEN_WSALT, num_cipher);
+
+#ifdef GCM
+        for (num_cipher = 1; num_cipher < max_num_cipher; num_cipher *= 8)
+            cipher_driver_test_array_throughput(
+                &srtp_aes_icm_192, SRTP_AES_ICM_192_KEY_LEN_WSALT, num_cipher);
+
+        for (num_cipher = 1; num_cipher < max_num_cipher; num_cipher *= 8) {
+            cipher_driver_test_array_throughput(
+                &srtp_aes_gcm_128, SRTP_AES_GCM_128_KEY_LEN_WSALT, num_cipher);
+        }
+
+        for (num_cipher = 1; num_cipher < max_num_cipher; num_cipher *= 8) {
+            cipher_driver_test_array_throughput(
+                &srtp_aes_gcm_256, SRTP_AES_GCM_256_KEY_LEN_WSALT, num_cipher);
+        }
+#endif
+    }
+
+    if (do_validation) {
+        cipher_driver_self_test(&srtp_null_cipher);
+        cipher_driver_self_test(&srtp_aes_icm_128);
+        cipher_driver_self_test(&srtp_aes_icm_256);
+#ifdef GCM
+        cipher_driver_self_test(&srtp_aes_icm_192);
+        cipher_driver_self_test(&srtp_aes_gcm_128);
+        cipher_driver_self_test(&srtp_aes_gcm_256);
+#endif
+    }
+
+    /* do timing and/or buffer_test on srtp_null_cipher */
+    status = srtp_cipher_type_alloc(&srtp_null_cipher, &c, 0, 0);
+    check_status(status);
+
+    status = srtp_cipher_init(c, NULL);
+    check_status(status);
+
+    if (do_timing_test)
+        cipher_driver_test_throughput(c);
+    if (do_validation) {
+        status = cipher_driver_test_buffering(c);
+        check_status(status);
+    }
+    status = srtp_cipher_dealloc(c);
+    check_status(status);
+
+    /* run the throughput test on the aes_icm cipher (128-bit key) */
+    status = srtp_cipher_type_alloc(&srtp_aes_icm_128, &c,
+                                    SRTP_AES_ICM_128_KEY_LEN_WSALT, 0);
+    if (status) {
+        fprintf(stderr, "error: can't allocate cipher\n");
+        exit(status);
+    }
+
+    status = srtp_cipher_init(c, test_key);
+    check_status(status);
+
+    if (do_timing_test)
+        cipher_driver_test_throughput(c);
+
+    if (do_validation) {
+        status = cipher_driver_test_buffering(c);
+        check_status(status);
+    }
+
+    status = srtp_cipher_dealloc(c);
+    check_status(status);
+
+    /* repeat the tests with 256-bit keys */
+    status = srtp_cipher_type_alloc(&srtp_aes_icm_256, &c,
+                                    SRTP_AES_ICM_256_KEY_LEN_WSALT, 0);
+    if (status) {
+        fprintf(stderr, "error: can't allocate cipher\n");
+        exit(status);
+    }
+
+    status = srtp_cipher_init(c, test_key);
+    check_status(status);
+
+    if (do_timing_test)
+        cipher_driver_test_throughput(c);
+
+    if (do_validation) {
+        status = cipher_driver_test_buffering(c);
+        check_status(status);
+    }
+
+    status = srtp_cipher_dealloc(c);
+    check_status(status);
+
+#ifdef GCM
+    /* run the throughput test on the aes_gcm_128 cipher */
+    status = srtp_cipher_type_alloc(&srtp_aes_gcm_128, &c,
+                                    SRTP_AES_GCM_128_KEY_LEN_WSALT, 8);
+    if (status) {
+        fprintf(stderr, "error: can't allocate GCM 128 cipher\n");
+        exit(status);
+    }
+    status = srtp_cipher_init(c, test_key);
+    check_status(status);
+    if (do_timing_test) {
+        cipher_driver_test_throughput(c);
+    }
+
+    // GCM ciphers don't do buffering; they're "one shot"
+
+    status = srtp_cipher_dealloc(c);
+    check_status(status);
+
+    /* run the throughput test on the aes_gcm_256 cipher */
+    status = srtp_cipher_type_alloc(&srtp_aes_gcm_256, &c,
+                                    SRTP_AES_GCM_256_KEY_LEN_WSALT, 16);
+    if (status) {
+        fprintf(stderr, "error: can't allocate GCM 256 cipher\n");
+        exit(status);
+    }
+    status = srtp_cipher_init(c, test_key);
+    check_status(status);
+    if (do_timing_test) {
+        cipher_driver_test_throughput(c);
+    }
+
+    // GCM ciphers don't do buffering; they're "one shot"
+
+    status = srtp_cipher_dealloc(c);
+    check_status(status);
+#endif
+
+    return 0;
+}
+
+void cipher_driver_test_throughput(srtp_cipher_t *c)
+{
+    int i;
+    int min_enc_len = 32;
+    int max_enc_len = 2048; /* should be a power of two */
+    int num_trials = 1000000;
+
+    printf("timing %s throughput, key length %d:\n", c->type->description,
+           c->key_len);
+    fflush(stdout);
+    for (i = min_enc_len; i <= max_enc_len; i = i * 2)
+        printf("msg len: %d\tgigabits per second: %f\n", i,
+               srtp_cipher_bits_per_second(c, i, num_trials) / 1e9);
+}
+
+srtp_err_status_t cipher_driver_self_test(srtp_cipher_type_t *ct)
+{
+    srtp_err_status_t status;
+
+    printf("running cipher self-test for %s...", ct->description);
+    status = srtp_cipher_type_self_test(ct);
+    if (status) {
+        printf("failed with error code %d\n", status);
+        exit(status);
+    }
+    printf("passed\n");
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * cipher_driver_test_buffering(ct) tests the cipher's output
+ * buffering for correctness by checking the consistency of succesive
+ * calls
+ */
+
+#define INITIAL_BUFLEN 1024
+srtp_err_status_t cipher_driver_test_buffering(srtp_cipher_t *c)
+{
+    int i, j, num_trials = 1000;
+    unsigned len, buflen = INITIAL_BUFLEN;
+    uint8_t buffer0[INITIAL_BUFLEN], buffer1[INITIAL_BUFLEN], *current, *end;
+    uint8_t idx[16] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+                        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x12, 0x34 };
+    srtp_err_status_t status;
+
+    printf("testing output buffering for cipher %s...", c->type->description);
+
+    for (i = 0; i < num_trials; i++) {
+        /* set buffers to zero */
+        for (j = 0; j < (int)buflen; j++) {
+            buffer0[j] = buffer1[j] = 0;
+        }
+
+        /* initialize cipher  */
+        status = srtp_cipher_set_iv(c, (uint8_t *)idx, srtp_direction_encrypt);
+        if (status)
+            return status;
+
+        /* generate 'reference' value by encrypting all at once */
+        status = srtp_cipher_encrypt(c, buffer0, &buflen);
+        if (status)
+            return status;
+
+        /* re-initialize cipher */
+        status = srtp_cipher_set_iv(c, (uint8_t *)idx, srtp_direction_encrypt);
+        if (status)
+            return status;
+
+        /* now loop over short lengths until buffer1 is encrypted */
+        current = buffer1;
+        end = buffer1 + buflen;
+        while (current < end) {
+            /* choose a short length */
+            len = srtp_cipher_rand_u32_for_tests() & 0x01f;
+
+            /* make sure that len doesn't cause us to overreach the buffer */
+            if (current + len > end)
+                len = end - current;
+
+            status = srtp_cipher_encrypt(c, current, &len);
+            if (status)
+                return status;
+
+            /* advance pointer into buffer1 to reflect encryption */
+            current += len;
+
+            /* if buffer1 is all encrypted, break out of loop */
+            if (current == end)
+                break;
+        }
+
+        /* compare buffers */
+        for (j = 0; j < (int)buflen; j++) {
+            if (buffer0[j] != buffer1[j]) {
+#if PRINT_DEBUG
+                printf("test case %d failed at byte %d\n", i, j);
+                printf("computed: %s\n",
+                       octet_string_hex_string(buffer1, buflen));
+                printf("expected: %s\n",
+                       octet_string_hex_string(buffer0, buflen));
+#endif
+                return srtp_err_status_algo_fail;
+            }
+        }
+    }
+
+    printf("passed\n");
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * The function cipher_test_throughput_array() tests the effect of CPU
+ * cache thrash on cipher throughput.
+ *
+ * cipher_array_alloc_init(ctype, array, num_ciphers) creates an array
+ * of srtp_cipher_t of type ctype
+ */
+
+srtp_err_status_t cipher_array_alloc_init(srtp_cipher_t ***ca,
+                                          int num_ciphers,
+                                          srtp_cipher_type_t *ctype,
+                                          int klen)
+{
+    int i, j;
+    srtp_err_status_t status;
+    uint8_t *key;
+    srtp_cipher_t **cipher_array;
+    /* pad klen allocation, to handle aes_icm reading 16 bytes for the
+       14-byte salt */
+    int klen_pad = ((klen + 15) >> 4) << 4;
+
+    /* allocate array of pointers to ciphers */
+    cipher_array = (srtp_cipher_t **)srtp_crypto_alloc(sizeof(srtp_cipher_t *) *
+                                                       num_ciphers);
+    if (cipher_array == NULL)
+        return srtp_err_status_alloc_fail;
+
+    /* set ca to location of cipher_array */
+    *ca = cipher_array;
+
+    /* allocate key */
+    key = srtp_crypto_alloc(klen_pad);
+    if (key == NULL) {
+        srtp_crypto_free(cipher_array);
+        return srtp_err_status_alloc_fail;
+    }
+
+    /* allocate and initialize an array of ciphers */
+    for (i = 0; i < num_ciphers; i++) {
+        /* allocate cipher */
+        status = srtp_cipher_type_alloc(ctype, cipher_array, klen, 16);
+        if (status)
+            return status;
+
+        /* generate random key and initialize cipher */
+        srtp_cipher_rand_for_tests(key, klen);
+        for (j = klen; j < klen_pad; j++)
+            key[j] = 0;
+        status = srtp_cipher_init(*cipher_array, key);
+        if (status)
+            return status;
+
+        /*     printf("%dth cipher is at %p\n", i, *cipher_array); */
+        /*     printf("%dth cipher description: %s\n", i,  */
+        /* 	   (*cipher_array)->type->description); */
+
+        /* advance cipher array pointer */
+        cipher_array++;
+    }
+
+    srtp_crypto_free(key);
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t cipher_array_delete(srtp_cipher_t *cipher_array[],
+                                      int num_cipher)
+{
+    int i;
+
+    for (i = 0; i < num_cipher; i++) {
+        srtp_cipher_dealloc(cipher_array[i]);
+    }
+
+    srtp_crypto_free(cipher_array);
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * cipher_array_bits_per_second(c, l, t) computes (an estimate of) the
+ * number of bits that a cipher implementation can encrypt in a second
+ * when distinct keys are used to encrypt distinct messages
+ *
+ * c is a cipher (which MUST be allocated an initialized already), l
+ * is the length in octets of the test data to be encrypted, and t is
+ * the number of trials
+ *
+ * if an error is encountered, the value 0 is returned
+ */
+
+uint64_t cipher_array_bits_per_second(srtp_cipher_t *cipher_array[],
+                                      int num_cipher,
+                                      unsigned octets_in_buffer,
+                                      int num_trials)
+{
+    int i;
+    v128_t nonce;
+    clock_t timer;
+    unsigned char *enc_buf;
+    int cipher_index = srtp_cipher_rand_u32_for_tests() % num_cipher;
+
+    /* Over-alloc, for NIST CBC padding */
+    enc_buf = srtp_crypto_alloc(octets_in_buffer + 17);
+    if (enc_buf == NULL)
+        return 0; /* indicate bad parameters by returning null */
+
+    /* time repeated trials */
+    v128_set_to_zero(&nonce);
+    timer = clock();
+    for (i = 0; i < num_trials; i++, nonce.v32[3] = i) {
+        /* length parameter to srtp_cipher_encrypt is in/out -- out is total,
+         * padded
+         * length -- so reset it each time. */
+        unsigned octets_to_encrypt = octets_in_buffer;
+
+        /* encrypt buffer with cipher */
+        srtp_cipher_set_iv(cipher_array[cipher_index], (uint8_t *)&nonce,
+                           srtp_direction_encrypt);
+        srtp_cipher_encrypt(cipher_array[cipher_index], enc_buf,
+                            &octets_to_encrypt);
+
+        /* choose a cipher at random from the array*/
+        cipher_index = (*((uint32_t *)enc_buf)) % num_cipher;
+    }
+    timer = clock() - timer;
+
+    srtp_crypto_free(enc_buf);
+
+    if (timer == 0) {
+        /* Too fast! */
+        return 0;
+    }
+
+    return (uint64_t)CLOCKS_PER_SEC * num_trials * 8 * octets_in_buffer / timer;
+}
+
+void cipher_array_test_throughput(srtp_cipher_t *ca[], int num_cipher)
+{
+    int i;
+    int min_enc_len = 16;
+    int max_enc_len = 2048; /* should be a power of two */
+    int num_trials = 1000000;
+
+    printf("timing %s throughput with key length %d, array size %d:\n",
+           (ca[0])->type->description, (ca[0])->key_len, num_cipher);
+    fflush(stdout);
+    for (i = min_enc_len; i <= max_enc_len; i = i * 4)
+        printf("msg len: %d\tgigabits per second: %f\n", i,
+               cipher_array_bits_per_second(ca, num_cipher, i, num_trials) /
+                   1e9);
+}
+
+srtp_err_status_t cipher_driver_test_array_throughput(srtp_cipher_type_t *ct,
+                                                      int klen,
+                                                      int num_cipher)
+{
+    srtp_cipher_t **ca = NULL;
+    srtp_err_status_t status;
+
+    status = cipher_array_alloc_init(&ca, num_cipher, ct, klen);
+    if (status) {
+        printf("error: cipher_array_alloc_init() failed with error code %d\n",
+               status);
+        return status;
+    }
+
+    cipher_array_test_throughput(ca, num_cipher);
+
+    cipher_array_delete(ca, num_cipher);
+
+    return srtp_err_status_ok;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/test/datatypes_driver.c b/trunk/3rdparty/libsrtp-2-fit/crypto/test/datatypes_driver.c
new file mode 100644
index 000000000..96379befe
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/test/datatypes_driver.c
@@ -0,0 +1,256 @@
+/*
+ * datatypes_driver.c
+ *
+ * a test driver for crypto/math datatypes
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include <stdio.h>  /* for printf() */
+#include <string.h> /* for strlen() */
+#include "datatypes.h"
+#include "util.h"
+
+void byte_order(void);
+
+void test_hex_string_funcs(void);
+
+void print_string(char *s);
+
+void test_bswap(void);
+
+void test_set_to_zero(void);
+
+int main(void)
+{
+    /*
+     * this program includes various and sundry tests for fundamental
+     * datatypes.  it's a grab-bag of throwaway code, retained only in
+     * case of future problems
+     */
+
+    int i, j;
+    v128_t x;
+    char *r = "The Moving Finger writes; and, having writ,\n"
+              "Moves on: nor all thy Piety nor Wit\n"
+              "Shall lure it back to cancel half a Line,\n"
+              "Nor all thy Tears wash out a Word of it.";
+    char *s = "incomplet";
+
+    print_string(r);
+    print_string(s);
+
+    byte_order();
+    test_hex_string_funcs();
+
+    for (j = 0; j < 128; j++) {
+        v128_set_to_zero(&x);
+        /*      x.v32[0] = (1 << j); */
+        v128_set_bit(&x, j);
+        printf("%s\n", v128_bit_string(&x));
+        v128_clear_bit(&x, j);
+        printf("%s\n", v128_bit_string(&x));
+    }
+
+    printf("----------------------------------------------\n");
+    v128_set_to_zero(&x);
+    for (i = 0; i < 128; i++) {
+        v128_set_bit(&x, i);
+    }
+    printf("%s\n", v128_bit_string(&x));
+
+    printf("----------------------------------------------\n");
+    v128_set_to_zero(&x);
+    v128_set_bit(&x, 0);
+    for (i = 0; i < 128; i++) {
+        printf("%s\n", v128_bit_string(&x));
+        v128_right_shift(&x, 1);
+    }
+    printf("----------------------------------------------\n");
+    v128_set_to_zero(&x);
+    v128_set_bit(&x, 127);
+    for (i = 0; i < 128; i++) {
+        printf("%s\n", v128_bit_string(&x));
+        v128_left_shift(&x, 1);
+    }
+    printf("----------------------------------------------\n");
+    for (i = 0; i < 128; i++) {
+        v128_set_to_zero(&x);
+        v128_set_bit(&x, 127);
+        v128_left_shift(&x, i);
+        printf("%s\n", v128_bit_string(&x));
+    }
+    printf("----------------------------------------------\n");
+    v128_set_to_zero(&x);
+    for (i = 0; i < 128; i += 2) {
+        v128_set_bit(&x, i);
+    }
+    printf("bit_string: { %s }\n", v128_bit_string(&x));
+    printf("get_bit:    { ");
+    for (i = 0; i < 128; i++) {
+        if (v128_get_bit(&x, i) == 1)
+            printf("1");
+        else
+            printf("0");
+    }
+    printf(" } \n");
+
+    test_bswap();
+    test_set_to_zero();
+
+    return 0;
+}
+
+/* byte_order() prints out byte ordering of datatypes */
+
+void byte_order(void)
+{
+    int i;
+    v128_t e;
+#if 0
+  v16_t b;
+  v32_t c;
+  v64_t d;
+
+  for (i=0; i < sizeof(b); i++)
+    b.octet[i] = i;
+  for (i=0; i < sizeof(c); i++)
+    c.octet[i] = i;
+  for (i=0; i < sizeof(d); i++)
+    d.octet[i] = i;
+  
+  printf("v128_t:\t%s\n", v128_hex_string(&e));
+  printf("v64_t:\t%s\n", v64_hex_string(&d));
+  printf("v32_t:\t%s\n", v32_hex_string(c));
+  printf("v16_t:\t%s\n", v16_hex_string(b));
+
+  c.value = 0x01020304;
+  printf("v32_t:\t%s\n", v32_hex_string(c));
+  b.value = 0x0102;
+  printf("v16_t:\t%s\n", v16_hex_string(b));
+
+  printf("uint16_t ordering:\n");
+
+  c.value = 0x00010002;
+  printf("v32_t:\t%x%x\n", c.v16[0], c.v16[1]);
+#endif
+
+    printf("byte ordering of crypto/math datatypes:\n");
+    for (i = 0; i < sizeof(e); i++)
+        e.v8[i] = i;
+    printf("v128_t: %s\n", v128_hex_string(&e));
+}
+
+void test_hex_string_funcs(void)
+{
+    char hex1[] = "abadcafe";
+    char hex2[] = "0123456789abcdefqqqqq";
+    char raw[10];
+    int len;
+
+    len = hex_string_to_octet_string(raw, hex1, strlen(hex1));
+    printf("computed length: %d\tstring: %s\n", len,
+           octet_string_hex_string(raw, len / 2));
+    printf("expected length: %u\tstring: %s\n", (unsigned)strlen(hex1), hex1);
+
+    len = hex_string_to_octet_string(raw, hex2, strlen(hex2));
+    printf("computed length: %d\tstring: %s\n", len,
+           octet_string_hex_string(raw, len / 2));
+    printf("expected length: %d\tstring: %s\n", 16, "0123456789abcdef");
+}
+
+void print_string(char *s)
+{
+    size_t i;
+    printf("%s\n", s);
+    printf("strlen(s) = %u\n", (unsigned)strlen(s));
+    printf("{ ");
+    for (i = 0; i < strlen(s); i++) {
+        printf("0x%x, ", s[i]);
+        if (((i + 1) % 8) == 0)
+            printf("\n   ");
+    }
+    printf("}\n");
+}
+
+void test_bswap(void)
+{
+    uint32_t x = 0x11223344;
+    uint64_t y = 0x1122334455667788LL;
+
+    printf("before: %0x\nafter:  %0x\n", x, (unsigned int)be32_to_cpu(x));
+    printf("before: %0llx\nafter:  %0llx\n", (unsigned long long)y,
+           (unsigned long long)be64_to_cpu(y));
+
+    y = 1234;
+
+    printf("1234: %0llx\n", (unsigned long long)y);
+    printf("as octet string: %s\n", octet_string_hex_string((uint8_t *)&y, 8));
+    y = be64_to_cpu(y);
+    printf("bswapped octet string: %s\n",
+           octet_string_hex_string((uint8_t *)&y, 8));
+}
+
+void test_set_to_zero(void)
+{
+#define BUFFER_SIZE (16)
+    uint8_t buffer[BUFFER_SIZE];
+    size_t i;
+
+    for (i = 0; i < BUFFER_SIZE; i++) {
+        buffer[i] = i & 0xff;
+    }
+    printf("Buffer before: %s\n", octet_string_hex_string(buffer, BUFFER_SIZE));
+    octet_string_set_to_zero(buffer, BUFFER_SIZE);
+    printf("Buffer after: %s\n", octet_string_hex_string(buffer, BUFFER_SIZE));
+    for (i = 0; i < BUFFER_SIZE; i++) {
+        if (buffer[i]) {
+            fprintf(stderr,
+                    "Buffer contents not zero at position %zu (is %d)\n", i,
+                    buffer[i]);
+            abort();
+        }
+    }
+#undef BUFFER_SIZE
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/test/env.c b/trunk/3rdparty/libsrtp-2-fit/crypto/test/env.c
new file mode 100644
index 000000000..8c3f4edfa
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/test/env.c
@@ -0,0 +1,89 @@
+/*
+ * env.c
+ *
+ * prints out a brief report on the build environment
+ *
+ * David McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#include <stdio.h>
+#include <string.h> /* for srtcmp() */
+#include "config.h"
+
+int main(void)
+{
+    int err_count = 0;
+
+#ifdef WORDS_BIGENDIAN
+    printf("CPU set to big-endian\t\t\t(WORDS_BIGENDIAN == 1)\n");
+#else
+    printf("CPU set to little-endian\t\t(WORDS_BIGENDIAN == 0)\n");
+#endif
+
+#ifdef CPU_RISC
+    printf("CPU set to RISC\t\t\t\t(CPU_RISC == 1)\n");
+#elif defined(CPU_CISC)
+    printf("CPU set to CISC\t\t\t\t(CPU_CISC == 1)\n");
+#else
+    printf(
+        "CPU set to an unknown type, probably due to a configuration error\n");
+    err_count++;
+#endif
+
+#ifdef CPU_ALTIVEC
+    printf("CPU set to ALTIVEC\t\t\t\t(CPU_ALTIVEC == 0)\n");
+#endif
+
+#ifndef NO_64BIT_MATH
+    printf("using native 64-bit type\t\t(NO_64_BIT_MATH == 0)\n");
+#else
+    printf("using built-in 64-bit math\t\t(NO_64_BIT_MATH == 1)\n");
+#endif
+
+#ifdef ERR_REPORTING_STDOUT
+    printf("using stdout for error reporting\t(ERR_REPORTING_STDOUT == 1)\n");
+#endif
+
+    if (err_count)
+        printf("warning: configuration is probably in error "
+               "(found %d problems)\n",
+               err_count);
+
+    return err_count;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/test/kernel_driver.c b/trunk/3rdparty/libsrtp-2-fit/crypto/test/kernel_driver.c
new file mode 100644
index 000000000..d29405a97
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/test/kernel_driver.c
@@ -0,0 +1,127 @@
+/*
+ * kernel_driver.c
+ *
+ * a test driver for the crypto_kernel
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright(c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include <stdio.h> /* for printf() */
+#include "getopt_s.h"
+#include "crypto_kernel.h"
+
+void usage(char *prog_name)
+{
+    printf("usage: %s [ -v ][ -d debug_module ]*\n", prog_name);
+    exit(255);
+}
+
+int main(int argc, char *argv[])
+{
+    int q;
+    int do_validation = 0;
+    srtp_err_status_t status;
+
+    if (argc == 1)
+        usage(argv[0]);
+
+    /* initialize kernel - we need to do this before anything else */
+    status = srtp_crypto_kernel_init();
+    if (status) {
+        printf("error: srtp_crypto_kernel init failed\n");
+        exit(1);
+    }
+    printf("srtp_crypto_kernel successfully initalized\n");
+
+    /* process input arguments */
+    while (1) {
+        q = getopt_s(argc, argv, "vd:");
+        if (q == -1)
+            break;
+        switch (q) {
+        case 'v':
+            do_validation = 1;
+            break;
+        case 'd':
+            status = srtp_crypto_kernel_set_debug_module(optarg_s, 1);
+            if (status) {
+                printf("error: set debug module (%s) failed\n", optarg_s);
+                exit(1);
+            }
+            break;
+        default:
+            usage(argv[0]);
+        }
+    }
+
+    if (do_validation) {
+        printf("checking srtp_crypto_kernel status...\n");
+        status = srtp_crypto_kernel_status();
+        if (status) {
+            printf("failed\n");
+            exit(1);
+        }
+        printf("srtp_crypto_kernel passed self-tests\n");
+    }
+
+    status = srtp_crypto_kernel_shutdown();
+    if (status) {
+        printf("error: srtp_crypto_kernel shutdown failed\n");
+        exit(1);
+    }
+    printf("srtp_crypto_kernel successfully shut down\n");
+
+    return 0;
+}
+
+/*
+ * crypto_kernel_cipher_test() is a test of the cipher interface
+ * of the crypto_kernel
+ */
+
+srtp_err_status_t crypto_kernel_cipher_test(void)
+{
+    /* not implemented yet! */
+
+    return srtp_err_status_ok;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/test/sha1_driver.c b/trunk/3rdparty/libsrtp-2-fit/crypto/test/sha1_driver.c
new file mode 100644
index 000000000..c64b000f8
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/test/sha1_driver.c
@@ -0,0 +1,387 @@
+/*
+ * sha1_driver.c
+ *
+ * a test driver for SHA-1
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include <stdio.h>
+#include <string.h>
+#include "sha1.h"
+#include "util.h"
+
+#define SHA_PASS 0
+#define SHA_FAIL 1
+
+#define MAX_HASH_DATA_LEN 1024
+#define MAX_HASH_OUT_LEN 20
+
+typedef struct hash_test_case_t {
+    unsigned data_len;               /* number of octets in data        */
+    unsigned hash_len;               /* number of octets output by hash */
+    uint8_t data[MAX_HASH_DATA_LEN]; /* message data                    */
+    uint8_t hash[MAX_HASH_OUT_LEN];  /* expected hash output            */
+    struct hash_test_case_t *next_test_case;
+} hash_test_case_t;
+
+hash_test_case_t *sha1_test_case_list;
+
+srtp_err_status_t hash_test_case_add(hash_test_case_t **list_ptr,
+                                     char *hex_data,
+                                     unsigned data_len,
+                                     char *hex_hash,
+                                     unsigned hash_len)
+{
+    hash_test_case_t *list_head = *list_ptr;
+    hash_test_case_t *test_case;
+    unsigned tmp_len;
+
+    test_case = malloc(sizeof(hash_test_case_t));
+    if (test_case == NULL)
+        return srtp_err_status_alloc_fail;
+
+    tmp_len = hex_string_to_octet_string((char *)test_case->data, hex_data,
+                                         data_len * 2);
+    if (tmp_len != data_len * 2) {
+        free(test_case);
+        return srtp_err_status_parse_err;
+    }
+
+    tmp_len = hex_string_to_octet_string((char *)test_case->hash, hex_hash,
+                                         hash_len * 2);
+    if (tmp_len != hash_len * 2) {
+        free(test_case);
+        return srtp_err_status_parse_err;
+    }
+
+    test_case->data_len = data_len;
+    test_case->hash_len = hash_len;
+
+    /* add the new test case to the head of the list */
+    test_case->next_test_case = list_head;
+    *list_ptr = test_case;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t sha1_test_case_validate(const hash_test_case_t *test_case)
+{
+    srtp_sha1_ctx_t ctx;
+    uint32_t hash_value[5];
+
+    if (test_case == NULL)
+        return srtp_err_status_bad_param;
+
+    if (test_case->hash_len != 20)
+        return srtp_err_status_bad_param;
+    if (test_case->data_len > MAX_HASH_DATA_LEN)
+        return srtp_err_status_bad_param;
+
+    srtp_sha1_init(&ctx);
+    srtp_sha1_update(&ctx, test_case->data, test_case->data_len);
+    srtp_sha1_final(&ctx, hash_value);
+    if (0 == memcmp(test_case->hash, hash_value, 20)) {
+#if VERBOSE
+        printf("PASSED: reference value: %s\n",
+               octet_string_hex_string((const uint8_t *)test_case->hash, 20));
+        printf("PASSED: computed value:  %s\n",
+               octet_string_hex_string((const uint8_t *)hash_value, 20));
+#endif
+        return srtp_err_status_ok;
+    }
+
+    printf("reference value: %s\n",
+           octet_string_hex_string((const uint8_t *)test_case->hash, 20));
+    printf("computed value:  %s\n",
+           octet_string_hex_string((const uint8_t *)hash_value, 20));
+
+    return srtp_err_status_algo_fail;
+}
+
+struct hex_sha1_test_case_t {
+    unsigned bit_len;
+    char hex_data[MAX_HASH_DATA_LEN * 2];
+    char hex_hash[40];
+};
+
+srtp_err_status_t sha1_add_test_cases(void)
+{
+    int i;
+    srtp_err_status_t err;
+
+    /*
+     * these test cases are taken from the "SHA-1 Sample Vectors"
+     * provided by NIST at http://csrc.nist.gov/cryptval/shs.html
+     */
+
+    struct hex_sha1_test_case_t tc[] = {
+        { 0, "", "da39a3ee5e6b4b0d3255bfef95601890afd80709" },
+        { 8, "a8", "99f2aa95e36f95c2acb0eaf23998f030638f3f15" },
+        { 16, "3000", "f944dcd635f9801f7ac90a407fbc479964dec024" },
+        { 24, "42749e", "a444319e9b6cc1e8464c511ec0969c37d6bb2619" },
+        { 32, "9fc3fe08", "16a0ff84fcc156fd5d3ca3a744f20a232d172253" },
+        { 40, "b5c1c6f1af", "fec9deebfcdedaf66dda525e1be43597a73a1f93" },
+        { 48, "e47571e5022e", "8ce051181f0ed5e9d0c498f6bc4caf448d20deb5" },
+        { 56, "3e1b28839fb758", "67da53837d89e03bf652ef09c369a3415937cfd3" },
+        { 64, "a81350cbb224cb90", "305e4ff9888ad855a78573cddf4c5640cce7e946" },
+        { 72, "c243d167923dec3ce1",
+          "5902b77b3265f023f9bbc396ba1a93fa3509bde7" },
+        { 80, "50ac18c59d6a37a29bf4",
+          "fcade5f5d156bf6f9af97bdfa9c19bccfb4ff6ab" },
+        { 88, "98e2b611ad3b1cccf634f6",
+          "1d20fbe00533c10e3cbd6b27088a5de0c632c4b5" },
+        { 96, "73fe9afb68e1e8712e5d4eec",
+          "7e1b7e0f7a8f3455a9c03e9580fd63ae205a2d93" },
+        { 104, "9e701ed7d412a9226a2a130e66",
+          "706f0677146307b20bb0e8d6311e329966884d13" },
+        { 112, "6d3ee90413b0a7cbf69e5e6144ca",
+          "a7241a703aaf0d53fe142f86bf2e849251fa8dff" },
+        { 120, "fae24d56514efcb530fd4802f5e71f",
+          "400f53546916d33ad01a5e6df66822dfbdc4e9e6" },
+        { 128, "c5a22dd6eda3fe2bdc4ddb3ce6b35fd1",
+          "fac8ab93c1ae6c16f0311872b984f729dc928ccd" },
+        { 136, "d98cded2adabf08fda356445c781802d95",
+          "fba6d750c18da58f6e2aab10112b9a5ef3301b3b" },
+        { 144, "bcc6d7087a84f00103ccb32e5f5487a751a2",
+          "29d27c2d44c205c8107f0351b05753ac708226b6" },
+        { 152, "36ecacb1055434190dbbc556c48bafcb0feb0d",
+          "b971bfc1ebd6f359e8d74cb7ecfe7f898d0ba845" },
+        { 160, "5ff9edb69e8f6bbd498eb4537580b7fba7ad31d0",
+          "96d08c430094b9fcc164ad2fb6f72d0a24268f68" },
+        { 168, "c95b441d8270822a46a798fae5defcf7b26abace36",
+          "a287ea752a593d5209e287881a09c49fa3f0beb1" },
+        { 176, "83104c1d8a55b28f906f1b72cb53f68cbb097b44f860",
+          "a06c713779cbd88519ed4a585ac0cb8a5e9d612b" },
+        { 184, "755175528d55c39c56493d697b790f099a5ce741f7754b",
+          "bff7d52c13a3688132a1d407b1ab40f5b5ace298" },
+        { 192, "088fc38128bbdb9fd7d65228b3184b3faac6c8715f07272f",
+          "c7566b91d7b6f56bdfcaa9781a7b6841aacb17e9" },
+        { 200, "a4a586eb9245a6c87e3adf1009ac8a49f46c07e14185016895",
+          "ffa30c0b5c550ea4b1e34f8a60ec9295a1e06ac1" },
+        { 208, "8e7c555270c006092c2a3189e2a526b873e2e269f0fb28245256",
+          "29e66ed23e914351e872aa761df6e4f1a07f4b81" },
+        { 216, "a5f3bfa6bb0ba3b59f6b9cbdef8a558ec565e8aa3121f405e7f2f0",
+          "b28cf5e5b806a01491d41f69bd9248765c5dc292" },
+        { 224, "589054f0d2bd3c2c85b466bfd8ce18e6ec3e0b87d944cd093ba36469",
+          "60224fb72c46069652cd78bcd08029ef64da62f3" },
+        { 232, "a0abb12083b5bbc78128601bf1cbdbc0fdf4b862b24d899953d8da0ff3",
+          "b72c4a86f72608f24c05f3b9088ef92fba431df7" },
+        { 240, "82143f4cea6fadbf998e128a8811dc75301cf1db4f079501ea568da68eeb",
+          "73779ad5d6b71b9b8328ef7220ff12eb167076ac" },
+        { 248, "9f1231dd6df1ff7bc0b0d4f989d048672683ce35d956d2f57913046267e6f3",
+          "a09671d4452d7cf50015c914a1e31973d20cc1a0" },
+        { 256,
+          "041c512b5eed791f80d3282f3a28df263bb1df95e1239a7650e5670fc2187919",
+          "e88cdcd233d99184a6fd260b8fca1b7f7687aee0" },
+        { 264,
+          "17e81f6ae8c2e5579d69dafa6e070e7111461552d314b691e7a3e7a4feb3fae418",
+          "010def22850deb1168d525e8c84c28116cb8a269" },
+        { 272, "d15976b23a1d712ad28fad04d805f572026b54dd64961fda94d5355a0cc9862"
+               "0cf77",
+          "aeaa40ba1717ed5439b1e6ea901b294ba500f9ad" },
+        { 280, "09fce4d434f6bd32a44e04b848ff50ec9f642a8a85b37a264dc73f130f22838"
+               "443328f",
+          "c6433791238795e34f080a5f1f1723f065463ca0" },
+        { 288, "f17af27d776ec82a257d8d46d2b46b639462c56984cc1be9c1222eadb8b2659"
+               "4a25c709d",
+          "e21e22b89c1bb944a32932e6b2a2f20d491982c3" },
+        { 296, "b13ce635d6f8758143ffb114f2f601cb20b6276951416a2f94fbf4ad081779d"
+               "79f4f195b22",
+          "575323a9661f5d28387964d2ba6ab92c17d05a8a" },
+        { 304, "5498793f60916ff1c918dde572cdea76da8629ba4ead6d065de3dfb48de94d2"
+               "34cc1c5002910",
+          "feb44494af72f245bfe68e86c4d7986d57c11db7" },
+        { 312, "498a1e0b39fa49582ae688cd715c86fbaf8a81b8b11b4d1594c49c902d197c8"
+               "ba8a621fd6e3be5",
+          "cff2290b3648ba2831b98dde436a72f9ebf51eee" },
+        { 320, "3a36ae71521f9af628b3e34dcb0d4513f84c78ee49f10416a98857150b8b15c"
+               "b5c83afb4b570376e",
+          "9b4efe9d27b965905b0c3dab67b8d7c9ebacd56c" },
+        { 328, "dcc76b40ae0ea3ba253e92ac50fcde791662c5b6c948538cffc2d95e9de99ca"
+               "c34dfca38910db2678f",
+          "afedb0ff156205bcd831cbdbda43db8b0588c113" },
+        { 336, "5b5ec6ec4fd3ad9c4906f65c747fd4233c11a1736b6b228b92e90cddabb0c7c"
+               "2fcf9716d3fad261dff33",
+          "8deb1e858f88293a5e5e4d521a34b2a4efa70fc4" },
+        { 344, "df48a37b29b1d6de4e94717d60cdb4293fcf170bba388bddf7a9035a15d433f"
+               "20fd697c3e4c8b8c5f590ab",
+          "95cbdac0f74afa69cebd0e5c7defbc6faf0cbeaf" },
+        { 352, "1f179b3b82250a65e1b0aee949e218e2f45c7a8dbfd6ba08de05c55acfc226b"
+               "48c68d7f7057e5675cd96fcfc",
+          "f0307bcb92842e5ae0cd4f4f14f3df7f877fbef2" },
+        { 360, "ee3d72da3a44d971578972a8e6780ce64941267e0f7d0179b214fa97855e179"
+               "0e888e09fbe3a70412176cb3b54",
+          "7b13bb0dbf14964bd63b133ac85e22100542ef55" },
+        { 368, "d4d4c7843d312b30f610b3682254c8be96d5f6684503f8fbfbcd15774fc1b08"
+               "4d3741afb8d24aaa8ab9c104f7258",
+          "c314d2b6cf439be678d2a74e890d96cfac1c02ed" },
+        { 376, "32c094944f5936a190a0877fb9178a7bf60ceae36fd530671c5b38c5dbd5e6a"
+               "6c0d615c2ac8ad04b213cc589541cf6",
+          "4d0be361e410b47a9d67d8ce0bb6a8e01c53c078" },
+        { 384, "e5d3180c14bf27a5409fa12b104a8fd7e9639609bfde6ee82bbf9648be2546d"
+               "29688a65e2e3f3da47a45ac14343c9c02",
+          "e5353431ffae097f675cbf498869f6fbb6e1c9f2" },
+        { 392, "e7b6e4b69f724327e41e1188a37f4fe38b1dba19cbf5a7311d6e32f1038e97a"
+               "b506ee05aebebc1eed09fc0e357109818b9",
+          "b8720a7068a085c018ab18961de2765aa6cd9ac4" },
+        { 400, "bc880cb83b8ac68ef2fedc2da95e7677ce2aa18b0e2d8b322701f67af7d5e7a"
+               "0d96e9e33326ccb7747cfff0852b961bfd475",
+          "b0732181568543ba85f2b6da602b4b065d9931aa" },
+        { 408, "235ea9c2ba7af25400f2e98a47a291b0bccdaad63faa2475721fda5510cc7da"
+               "d814bce8dabb611790a6abe56030b798b75c944",
+          "9c22674cf3222c3ba921672694aafee4ce67b96b" },
+        { 416, "07e3e29fed63104b8410f323b975fd9fba53f636af8c4e68a53fb202ca35dd9"
+               "ee07cb169ec5186292e44c27e5696a967f5e67709",
+          "d128335f4cecca9066cdae08958ce656ff0b4cfc" },
+        { 424, "65d2a1dd60a517eb27bfbf530cf6a5458f9d5f4730058bd9814379547f34241"
+               "822bf67e6335a6d8b5ed06abf8841884c636a25733f",
+          "0b67c57ac578de88a2ae055caeaec8bb9b0085a0" },
+        { 432, "dcc86b3bd461615bab739d8daafac231c0f462e819ad29f9f14058f3ab5b759"
+               "41d4241ea2f17ebb8a458831b37a9b16dead4a76a9b0e",
+          "c766f912a89d4ccda88e0cce6a713ef5f178b596" },
+        { 440, "4627d54f0568dc126b62a8c35fb46a9ac5024400f2995e51635636e1afc4373"
+               "dbb848eb32df23914230560b82477e9c3572647a7f2bb92",
+          "9aa3925a9dcb177b15ccff9b78e70cf344858779" },
+        { 448, "ba531affd4381168ef24d8b275a84d9254c7f5cc55fded53aa8024b2c5c5c8a"
+               "a7146fe1d1b83d62b70467e9a2e2cb67b3361830adbab28d7",
+          "4811fa30042fc076acf37c8e2274d025307e5943" },
+        { 456, "8764dcbcf89dcf4282eb644e3d568bdccb4b13508bfa7bfe0ffc05efd1390be"
+               "22109969262992d377691eb4f77f3d59ea8466a74abf57b2ef4",
+          "6743018450c9730761ee2b130df9b91c1e118150" },
+        { 464, "497d9df9ddb554f3d17870b1a31986c1be277bc44feff713544217a9f579623"
+               "d18b5ffae306c25a45521d2759a72c0459b58957255ab592f3be4",
+          "71ad4a19d37d92a5e6ef3694ddbeb5aa61ada645" },
+        { 472, "72c3c2e065aefa8d9f7a65229e818176eef05da83f835107ba90ec2e95472e7"
+               "3e538f783b416c04654ba8909f26a12db6e5c4e376b7615e4a25819",
+          "a7d9dc68dacefb7d6116186048cb355cc548e11d" },
+        { 480, "7cc9894454d0055ab5069a33984e2f712bef7e3124960d33559f5f3b81906bb"
+               "66fe64da13c153ca7f5cabc89667314c32c01036d12ecaf5f9a78de98",
+          "142e429f0522ba5abf5131fa81df82d355b96909" },
+        { 488, "74e8404d5a453c5f4d306f2cfa338ca65501c840ddab3fb82117933483afd69"
+               "13c56aaf8a0a0a6b2a342fc3d9dc7599f4a850dfa15d06c61966d74ea59",
+          "ef72db70dcbcab991e9637976c6faf00d22caae9" },
+        { 496, "46fe5ed326c8fe376fcc92dc9e2714e2240d3253b105adfbb256ff7a19bc409"
+               "75c604ad7c0071c4fd78a7cb64786e1bece548fa4833c04065fe593f6fb10",
+          "f220a7457f4588d639dc21407c942e9843f8e26b" },
+        { 504, "836dfa2524d621cf07c3d2908835de859e549d35030433c796b81272fd8bc03"
+               "48e8ddbc7705a5ad1fdf2155b6bc48884ac0cd376925f069a37849c089c864"
+               "5",
+          "ddd2117b6e309c233ede85f962a0c2fc215e5c69" },
+        { 512, "7e3a4c325cb9c52b88387f93d01ae86d42098f5efa7f9457388b5e74b6d28b2"
+               "438d42d8b64703324d4aa25ab6aad153ae30cd2b2af4d5e5c00a8a2d0220c61"
+               "16",
+          "a3054427cdb13f164a610b348702724c808a0dcc" }
+    };
+
+    for (i = 0; i < 65; i++) {
+        err = hash_test_case_add(&sha1_test_case_list, tc[i].hex_data,
+                                 tc[i].bit_len / 8, tc[i].hex_hash, 20);
+        if (err) {
+            printf("error adding hash test case (code %d)\n", err);
+            return err;
+        }
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t sha1_dealloc_test_cases(void)
+{
+    hash_test_case_t *t, *next;
+
+    for (t = sha1_test_case_list; t != NULL; t = next) {
+        next = t->next_test_case;
+        free(t);
+    }
+
+    sha1_test_case_list = NULL;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t sha1_validate(void)
+{
+    hash_test_case_t *test_case;
+    srtp_err_status_t err;
+
+    err = sha1_add_test_cases();
+    if (err) {
+        printf("error adding SHA1 test cases (error code %d)\n", err);
+        return err;
+    }
+
+    if (sha1_test_case_list == NULL)
+        return srtp_err_status_cant_check;
+
+    test_case = sha1_test_case_list;
+    while (test_case != NULL) {
+        err = sha1_test_case_validate(test_case);
+        if (err) {
+            printf("error validating hash test case (error code %d)\n", err);
+            return err;
+        }
+        test_case = test_case->next_test_case;
+    }
+
+    sha1_dealloc_test_cases();
+
+    return srtp_err_status_ok;
+}
+
+int main(void)
+{
+    srtp_err_status_t err;
+
+    printf("sha1 test driver\n");
+
+    err = sha1_validate();
+    if (err) {
+        printf("SHA1 did not pass validation testing\n");
+        return 1;
+    }
+    printf("SHA1 passed validation tests\n");
+
+    return 0;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/crypto/test/stat_driver.c b/trunk/3rdparty/libsrtp-2-fit/crypto/test/stat_driver.c
new file mode 100644
index 000000000..9a3d918aa
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/crypto/test/stat_driver.c
@@ -0,0 +1,252 @@
+/*
+ * stat-driver.c
+ *
+ * test driver for the stat_test functions
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include <stdio.h> /* for printf() */
+
+#include "err.h"
+#include "stat.h"
+#include "srtp.h"
+
+#include "cipher.h"
+#include "cipher_priv.h"
+
+void err_check(srtp_err_status_t s)
+{
+    if (s) {
+        printf("error (code %d)\n", s);
+        exit(1);
+    }
+}
+
+int main(int argc, char *argv[])
+{
+    uint8_t buffer[2532];
+    unsigned int buf_len = 2500;
+    int i, j;
+    extern srtp_cipher_type_t srtp_aes_icm_128;
+    extern srtp_cipher_type_t srtp_aes_icm_256;
+#ifdef GCM
+    extern srtp_cipher_type_t srtp_aes_gcm_128;
+    extern srtp_cipher_type_t srtp_aes_gcm_256;
+#endif
+    srtp_cipher_t *c;
+    /* clang-format off */
+    uint8_t key[46] = {
+        0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+        0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+        0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+        0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+        0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+        0x00, 0x01, 0x02, 0x03, 0x04, 0x05
+    };
+    /* clang-format on */
+    v128_t nonce;
+    int num_trials = 500;
+    int num_fail;
+
+    printf("statistical tests driver\n");
+
+    v128_set_to_zero(&nonce);
+    for (i = 0; i < 2500; i++)
+        buffer[i] = 0;
+
+    /* run tests */
+    printf("running stat_tests on all-null buffer, expecting failure\n");
+    printf("monobit %d\n", stat_test_monobit(buffer));
+    printf("poker   %d\n", stat_test_poker(buffer));
+    printf("runs    %d\n", stat_test_runs(buffer));
+
+    srtp_cipher_rand_for_tests(buffer, 2500);
+    printf("running stat_tests on rand(), expecting success\n");
+    printf("monobit %d\n", stat_test_monobit(buffer));
+    printf("poker   %d\n", stat_test_poker(buffer));
+    printf("runs    %d\n", stat_test_runs(buffer));
+
+    printf("running stat_tests on AES-128-ICM, expecting success\n");
+    /* set buffer to cipher output */
+    for (i = 0; i < 2500; i++)
+        buffer[i] = 0;
+    err_check(srtp_cipher_type_alloc(&srtp_aes_icm_128, &c,
+                                     SRTP_AES_ICM_128_KEY_LEN_WSALT, 0));
+    err_check(srtp_cipher_init(c, key));
+    err_check(srtp_cipher_set_iv(c, (uint8_t *)&nonce, srtp_direction_encrypt));
+    err_check(srtp_cipher_encrypt(c, buffer, &buf_len));
+    /* run tests on cipher outout */
+    printf("monobit %d\n", stat_test_monobit(buffer));
+    printf("poker   %d\n", stat_test_poker(buffer));
+    printf("runs    %d\n", stat_test_runs(buffer));
+
+    printf("runs test (please be patient): ");
+    fflush(stdout);
+    num_fail = 0;
+    v128_set_to_zero(&nonce);
+    for (j = 0; j < num_trials; j++) {
+        for (i = 0; i < 2500; i++)
+            buffer[i] = 0;
+        nonce.v32[3] = i;
+        err_check(
+            srtp_cipher_set_iv(c, (uint8_t *)&nonce, srtp_direction_encrypt));
+        err_check(srtp_cipher_encrypt(c, buffer, &buf_len));
+        if (stat_test_runs(buffer)) {
+            num_fail++;
+        }
+    }
+
+    printf("%d failures in %d tests\n", num_fail, num_trials);
+    printf("(nota bene: a small fraction of stat_test failures does not \n"
+           "indicate that the random source is invalid)\n");
+
+    err_check(srtp_cipher_dealloc(c));
+
+    printf("running stat_tests on AES-256-ICM, expecting success\n");
+    /* set buffer to cipher output */
+    for (i = 0; i < 2500; i++)
+        buffer[i] = 0;
+    err_check(srtp_cipher_type_alloc(&srtp_aes_icm_256, &c,
+                                     SRTP_AES_ICM_256_KEY_LEN_WSALT, 0));
+    err_check(srtp_cipher_init(c, key));
+    err_check(srtp_cipher_set_iv(c, (uint8_t *)&nonce, srtp_direction_encrypt));
+    err_check(srtp_cipher_encrypt(c, buffer, &buf_len));
+    /* run tests on cipher outout */
+    printf("monobit %d\n", stat_test_monobit(buffer));
+    printf("poker   %d\n", stat_test_poker(buffer));
+    printf("runs    %d\n", stat_test_runs(buffer));
+
+    printf("runs test (please be patient): ");
+    fflush(stdout);
+    num_fail = 0;
+    v128_set_to_zero(&nonce);
+    for (j = 0; j < num_trials; j++) {
+        for (i = 0; i < 2500; i++)
+            buffer[i] = 0;
+        nonce.v32[3] = i;
+        err_check(
+            srtp_cipher_set_iv(c, (uint8_t *)&nonce, srtp_direction_encrypt));
+        err_check(srtp_cipher_encrypt(c, buffer, &buf_len));
+        if (stat_test_runs(buffer)) {
+            num_fail++;
+        }
+    }
+
+#ifdef GCM
+    {
+        printf("running stat_tests on AES-128-GCM, expecting success\n");
+        /* set buffer to cipher output */
+        for (i = 0; i < 2500; i++) {
+            buffer[i] = 0;
+        }
+        err_check(srtp_cipher_type_alloc(&srtp_aes_gcm_128, &c,
+                                         SRTP_AES_GCM_128_KEY_LEN_WSALT, 8));
+        err_check(srtp_cipher_init(c, key));
+        err_check(
+            srtp_cipher_set_iv(c, (uint8_t *)&nonce, srtp_direction_encrypt));
+        err_check(srtp_cipher_encrypt(c, buffer, &buf_len));
+        /* run tests on cipher outout */
+        printf("monobit %d\n", stat_test_monobit(buffer));
+        printf("poker   %d\n", stat_test_poker(buffer));
+        printf("runs    %d\n", stat_test_runs(buffer));
+        fflush(stdout);
+        num_fail = 0;
+        v128_set_to_zero(&nonce);
+        for (j = 0; j < num_trials; j++) {
+            for (i = 0; i < 2500; i++) {
+                buffer[i] = 0;
+            }
+            nonce.v32[3] = i;
+            err_check(srtp_cipher_set_iv(c, (uint8_t *)&nonce,
+                                         srtp_direction_encrypt));
+            err_check(srtp_cipher_encrypt(c, buffer, &buf_len));
+            buf_len = 2500;
+            if (stat_test_runs(buffer)) {
+                num_fail++;
+            }
+        }
+
+        printf("running stat_tests on AES-256-GCM, expecting success\n");
+        /* set buffer to cipher output */
+        for (i = 0; i < 2500; i++) {
+            buffer[i] = 0;
+        }
+        err_check(srtp_cipher_type_alloc(&srtp_aes_gcm_256, &c,
+                                         SRTP_AES_GCM_256_KEY_LEN_WSALT, 16));
+        err_check(srtp_cipher_init(c, key));
+        err_check(
+            srtp_cipher_set_iv(c, (uint8_t *)&nonce, srtp_direction_encrypt));
+        err_check(srtp_cipher_encrypt(c, buffer, &buf_len));
+        /* run tests on cipher outout */
+        printf("monobit %d\n", stat_test_monobit(buffer));
+        printf("poker   %d\n", stat_test_poker(buffer));
+        printf("runs    %d\n", stat_test_runs(buffer));
+        fflush(stdout);
+        num_fail = 0;
+        v128_set_to_zero(&nonce);
+        for (j = 0; j < num_trials; j++) {
+            for (i = 0; i < 2500; i++) {
+                buffer[i] = 0;
+            }
+            nonce.v32[3] = i;
+            err_check(srtp_cipher_set_iv(c, (uint8_t *)&nonce,
+                                         srtp_direction_encrypt));
+            err_check(srtp_cipher_encrypt(c, buffer, &buf_len));
+            buf_len = 2500;
+            if (stat_test_runs(buffer)) {
+                num_fail++;
+            }
+        }
+    }
+#endif
+
+    printf("%d failures in %d tests\n", num_fail, num_trials);
+    printf("(nota bene: a small fraction of stat_test failures does not \n"
+           "indicate that the random source is invalid)\n");
+
+    err_check(srtp_cipher_dealloc(c));
+
+    return 0;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/doc/Makefile.in b/trunk/3rdparty/libsrtp-2-fit/doc/Makefile.in
new file mode 100644
index 000000000..830ccbbbd
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/doc/Makefile.in
@@ -0,0 +1,32 @@
+# Makefile for libSRTP documentation
+#
+# David A. McGrew
+# Cisco Systems, Inc.
+#
+# This makefile does not use the autoconf system; we don't really need
+# it. We just run doxygen.
+# The most up to date documentation can be found at www.github.com/cisco/libsrtp
+
+srcdir = @srcdir@
+top_srcdir = @top_srcdir@
+top_builddir = @top_builddir@
+VPATH = @srcdir@
+
+# Determine the version of the library
+
+version = $(shell cat $(top_srcdir)/VERSION)
+
+.PHONY: libsrtpdoc clean
+libsrtpdoc:
+	@if test ! -e Doxyfile.in; then \
+		echo "*** Sorry, can't build doc outside source dir"; exit 1; \
+	fi
+	sed 's/LIBSRTPVERSIONNUMBER/$(version)/' Doxyfile.in > Doxyfile
+	doxygen
+
+clean:
+
+	rm -rf html/ Doxyfile
+	for a in * ; do							\
+			  if [ -f "$$a~" ] ; then rm -f $$a~; fi;	\
+		done;
diff --git a/trunk/3rdparty/libsrtp-2-fit/format.sh b/trunk/3rdparty/libsrtp-2-fit/format.sh
new file mode 100755
index 000000000..fdf23ef3c
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/format.sh
@@ -0,0 +1,35 @@
+#!/bin/sh
+#
+# format.sh
+#
+# run clang-format on each .c & .h file
+#
+# assumes git tree is clean when reporting status
+
+if [ -z "${CLANG_FORMAT}" ]; then
+    CLANG_FORMAT=clang-format
+fi
+
+a=`git ls-files '*.h' '*.c'`
+for x in $a; do
+    if [ $x != "config_in.h" ]; then
+        $CLANG_FORMAT -i -style=file $x
+    fi
+done
+
+m=`git ls-files -m`
+if [ -n "$m" ]; then
+    v=`$CLANG_FORMAT -version`
+    echo "Fromatting required when checking with $v"
+    echo
+    echo "The following files required formatting:"
+    for f in $m; do
+        echo $f
+    done
+    if [ "$1" = "-d" ]; then
+        echo
+        git diff
+    fi
+    exit 1
+fi
+exit 0
diff --git a/trunk/3rdparty/libsrtp-2-fit/fuzzer/Makefile.in b/trunk/3rdparty/libsrtp-2-fit/fuzzer/Makefile.in
new file mode 100644
index 000000000..cd107faa9
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/fuzzer/Makefile.in
@@ -0,0 +1,34 @@
+# Makefile for libSRTP fuzzer
+
+srcdir = @srcdir@
+top_srcdir = @top_srcdir@
+top_builddir = @top_builddir@
+VPATH = @srcdir@
+
+CC	= @CC@
+CXX	= @CXX@
+INCDIR	= -Iinclude -I$(srcdir)/include -I$(top_srcdir)/include -I$(top_srcdir)/crypto/include/
+DEFS	= @DEFS@
+CPPFLAGS= @CPPFLAGS@ -g
+CXXFLAGS= @CXXFLAGS@ -g
+CFLAGS	= @CFLAGS@ -g
+LIBS	= @LIBS@
+COMPILE = $(CC) $(DEFS) $(INCDIR) $(CPPFLAGS) $(CFLAGS)
+COMPILECXX = $(CXX) $(DEFS) $(INCDIR) $(CPPFLAGS) $(CXXFLAGS)
+CRYPTOLIB = -lsrtp2
+
+.PHONY: clean
+
+all : srtp-fuzzer
+
+mt19937.o: mt19937.cpp
+	$(COMPILECXX) -c -std=c++11 mt19937.cpp -o mt19937.o
+fuzzer.o: fuzzer.c fuzzer.h testmem.h
+	$(COMPILE) fuzzer.c -c -o fuzzer.o
+testmem.o: testmem.c
+	$(COMPILE) -O0 testmem.c -c -o testmem.o
+srtp-fuzzer: fuzzer.o mt19937.o testmem.o
+	$(COMPILECXX) -L. -L.. fuzzer.o mt19937.o testmem.o $(LIBFUZZER) $(CRYPTOLIB) $(LIBS) -o srtp-fuzzer
+
+clean:
+	rm -rf srtp-fuzzer *.o
diff --git a/trunk/3rdparty/libsrtp-2-fit/fuzzer/README.md b/trunk/3rdparty/libsrtp-2-fit/fuzzer/README.md
new file mode 100644
index 000000000..eee957976
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/fuzzer/README.md
@@ -0,0 +1,88 @@
+# libsrt fuzzer
+
+By Guido Vranken <guidovranken@gmail.com> -- https://guidovranken.wordpress.com/
+
+This is an advanced fuzzer for libSRTP (https://github.com/cisco/libsrtp). It implements several special techniques, described below, that are not often found in fuzzers or elsewhere. All are encouraged to transpose these ideas to their own fuzzers for the betterment of software security.
+
+Feel free to contact me for business enquiries.
+
+## Building
+
+From the repository's root directory:
+
+```sh
+CC=clang CXX=clang++ CXXFLAGS="-fsanitize=fuzzer-no-link,address,undefined -g -O3" CFLAGS="-fsanitize=fuzzer-no-link,address,undefined -g -O3" LDFLAGS="-fsanitize=fuzzer-no-link,address,undefined" ./configure
+LIBFUZZER="-fsanitize=fuzzer" make srtp-fuzzer
+```
+
+## Features
+
+### Portable PRNG
+
+```mt19937.c``` exports the C++11 Mersenne Twister implementaton. Hence, a modern C++ compiler is required to compile this file.
+
+This approach has the following advantages:
+
+- rand() is fickle -- its behavior eg. the sequence of numbers that it generates for a given seed, may differ across systems and libc's.
+- C++11 mt19937 is portable, meaning that its behavior will be consistent across platforms. This is important to keep the fuzzing corpus portable.
+- No need to implement a portable PRNG ourselves, or risk license incompatability by importing it from other projects.
+
+### Size 0 allocations
+
+To test whether allocations of size 0 eg. ```malloc(0)``` are ever dereferenced and written to, the custom allocater will return an intentionally invalid pointer pointer address for these requests.
+
+For more information, see the comments in ```fuzz_alloc()```.
+
+### Random allocation failures
+
+The custom allocator will periodically return ```NULL``` for heap requests. This tests the library's resilience and correct operation in the event of global memory shortages.
+
+The interval of ```NULL``` return values is deterministic as it relies on the PRNG, so for a given fuzzer input (that encodes the PRNG seed as well), behavior of that input with regards to allocator behaviour is consistent, allowing for reliable reproduction of bugs.
+
+### Detecting inadequate pointer arithmetic
+
+This feature is only available on 32 bit builds.
+
+Unless the ```--no_mmap``` flag is given, the fuzzer will use a special allocation technique for some of the allocation requests. It will use ```mmap()``` to reserve memory at the extremities of the virtual address space -- sometimes at 0x00010000 and sometimes at 0xFFFF0000. This approach can assist in detecting invalid or inadequate pointer arithmetic. For example, consider the following code:
+
+```c
+if ( start + n < end ) {
+    memset(start, 0, n);
+}
+```
+
+where ```start``` and ```end``` demarcate a memory region, and ```n``` is some positive integer.
+If ```n``` is a sufficiently large value, a pointer addition overflow will occur, leading to a page fault. By routinely placing allocations at the high virtual address ```0xFFFF0000```, the chances of detecting this bug are increased. So let's say ```start``` was previously allocated at ```0xFFFF0000```, and ```end``` is ```0xFFFF1000```, and ```n``` is 0xFFFFF. Then the expression effectively becomes:
+
+```c
+if ( 0xFFFF0000 + 0x000FFFFF < 0xFFFF1000 ) {
+    memset(0xFFFF0000, 0, 0x000FFFF);
+}
+```
+
+The addition ```0xFFFF0000 + 0x000FFFFF``` overflows so the result is ```0x000EFFFF```. Hence:
+
+```c
+if ( 0x000EFFFF < 0xFFFF1000 ) { // Expression resolves as true !
+```
+
+The subsequent ```memset``` is executed contrary to the programmer's intentions, and a segmentation fault will occur.
+
+While this is a corner case, it can not be ruled out that it might occur in a production environment. What's more, the analyst examining the crash can reason about how the value of ```n``` comes about in the first place, and concoct a crafted input that leads to a very high ```n``` value, making the "exploit" succeed even with average virtual addresses.
+
+Aside from using ```mmap``` to allocate at address ```0xFFFF0000```, the fuzzer will also place allocations at the low virtual address ```0x00010000``` to detect invalid pointer arithmetic involving subtraction:
+
+```c
+if ( end - n > start ) {
+```
+
+### Output memory testing
+
+```testmem.c``` exports ```fuzz_testmem```. All this function does is copy the input buffer to a newly allocated heap region, and then free that heap region. If AddressSanitizer is enabled, this ensures that the input buffer to ```fuzz_testmem``` is a legal memory region.
+If MemorySanitizer is enabled, then ``fuzz_testmem``` calls ```fuzz_testmem_msan````. The latter function writes the data at hand to ```/dev/null```. This is an nice trick to make MemorySanitizer evaluate this data, and crash if it contains uninitialized bytes.
+This function has been implemented in a separate file for a reason: from the perspective of an optimizing compiler, this is a meaningless operation, and as such it might be optimized away. Hence, this file must be compiled without optimizations (```-O0``` flag).
+
+## Contributing
+
+When extending the current fuzzer, use variable types whose width is consistent across systems where possible. This is necessary to retain corpus portability. For example, use ```uint64_t``` rather than ```unsigned long```.
+
diff --git a/trunk/3rdparty/libsrtp-2-fit/fuzzer/fuzzer.c b/trunk/3rdparty/libsrtp-2-fit/fuzzer/fuzzer.c
new file mode 100644
index 000000000..1863e3475
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/fuzzer/fuzzer.c
@@ -0,0 +1,936 @@
+/* By Guido Vranken <guidovranken@gmail.com> --
+ * https://guidovranken.wordpress.com/ */
+
+#include <stdio.h>
+#include <string.h>
+#include <stdlib.h>
+#include <stdbool.h>
+#include <limits.h>
+#include "srtp.h"
+#include "srtp_priv.h"
+#include "ekt.h"
+#include "fuzzer.h"
+#include "mt19937.h"
+#include "testmem.h"
+
+/* Global variables */
+static bool g_no_align = false; /* Can be enabled with --no_align */
+static bool g_post_init =
+    false; /* Set to true once past initialization phase */
+static bool g_write_input = false;
+
+#ifdef FUZZ_32BIT
+#include <sys/mman.h>
+static bool g_no_mmap = false; /* Can be enabled with --no_mmap */
+static void *g_mmap_allocation =
+    NULL; /* Keeps current mmap() allocation address */
+static size_t g_mmap_allocation_size =
+    0; /* Keeps current mmap() allocation size */
+#endif
+
+/* Custom allocator functions */
+
+static void *fuzz_alloc(const size_t size, const bool do_zero)
+{
+    void *ret = NULL;
+#ifdef FUZZ_32BIT
+    bool do_malloc = true;
+#endif
+    bool do_mmap, mmap_high = true;
+
+    if (size == 0) {
+        size_t ret;
+        /* Allocations of size 0 are not illegal, but are a bad practice, since
+         * writing just a single byte to this region constitutes undefined
+         * behavior per the C spec. glibc will return a small, valid memory
+         * region
+         * whereas OpenBSD will crash upon writing to it.
+         * Intentionally return a pointer to an invalid page to detect
+         * unsound code efficiently.
+         * fuzz_free is aware of this pointer range and will not attempt
+         * to free()/munmap() it.
+         */
+        ret = 0x01 + (fuzz_mt19937_get() % 1024);
+        return (void *)ret;
+    }
+
+    /* Don't do mmap()-based allocations during initialization */
+    if (g_post_init == true) {
+        /* Even extract these values if --no_mmap is specified.
+         * This keeps the PRNG output stream consistent across
+         * fuzzer configurations.
+         */
+        do_mmap = (fuzz_mt19937_get() % 64) == 0 ? true : false;
+        if (do_mmap == true) {
+            mmap_high = (fuzz_mt19937_get() % 2) == 0 ? true : false;
+        }
+    } else {
+        do_mmap = false;
+    }
+
+#ifdef FUZZ_32BIT
+    /* g_mmap_allocation must be NULL because we only support a single
+     * concurrent mmap allocation at a time
+     */
+    if (g_mmap_allocation == NULL && g_no_mmap == false && do_mmap == true) {
+        void *mmap_address;
+        if (mmap_high == true) {
+            mmap_address = (void *)0xFFFF0000;
+        } else {
+            mmap_address = (void *)0x00010000;
+        }
+        g_mmap_allocation_size = size;
+
+        ret = mmap(mmap_address, g_mmap_allocation_size, PROT_READ | PROT_WRITE,
+                   MAP_PRIVATE | MAP_ANONYMOUS, -1, 0);
+
+        if (ret == MAP_FAILED) {
+            /* That's okay -- just return NULL to the caller */
+
+            ret = NULL;
+
+            /* Reset this for the sake of cleanliness */
+            g_mmap_allocation_size = 0;
+        }
+        /* ret not being MAP_FAILED does not mean that ret is the requested
+         * address (mmap_address). That's okay. We're not going to perform
+         * a munmap() on it and call malloc() instead. It won't gain us
+         * anything.
+         */
+
+        g_mmap_allocation = ret;
+        do_malloc = false;
+    }
+
+    if (do_malloc == true)
+#endif
+    {
+        ret = malloc(size);
+    }
+
+    /* Mimic calloc() if so requested */
+    if (ret != NULL && do_zero) {
+        memset(ret, 0, size);
+    }
+
+    return ret;
+}
+
+/* Internal allocations by this fuzzer must on one hand (sometimes)
+ * receive memory from mmap(), but on the other hand these requests for
+ * memory may not fail. By calling this function, the allocation is
+ * guaranteed to succeed; it first tries with fuzz_alloc(), which may
+ * fail if it uses mmap(), and if that is the case, memory is allocated
+ * via the libc allocator (malloc, calloc) which should always succeed */
+static void *fuzz_alloc_succeed(const size_t size, const bool do_zero)
+{
+    void *ret = fuzz_alloc(size, do_zero);
+    if (ret == NULL) {
+        if (do_zero == false) {
+            ret = malloc(size);
+        } else {
+            ret = calloc(1, size);
+        }
+    }
+
+    return ret;
+}
+
+void *fuzz_calloc(const size_t nmemb, const size_t size)
+{
+    /* We must be past srtp_init() to prevent that that function fails */
+    if (g_post_init == true) {
+        /* Fail 1 in 64 allocations on average to test whether the library
+         * can deal with this properly.
+         */
+        if ((fuzz_mt19937_get() % 64) == 0) {
+            return NULL;
+        }
+    }
+
+    return fuzz_alloc(nmemb * size, true);
+}
+
+static bool fuzz_is_special_pointer(void *ptr)
+{
+    /* Special, invalid pointers introduced when code attempted
+     * to do size = 0 allocations.
+     */
+    if ((size_t)ptr >= 0x01 && (size_t)ptr < (0x01 + 1024)) {
+        return true;
+    } else {
+        return false;
+    }
+}
+
+void fuzz_free(void *ptr)
+{
+    if (fuzz_is_special_pointer(ptr) == true) {
+        return;
+    }
+
+#ifdef FUZZ_32BIT
+    if (g_post_init == true && ptr != NULL && ptr == g_mmap_allocation) {
+        if (munmap(g_mmap_allocation, g_mmap_allocation_size) == -1) {
+            /* Shouldn't happen */
+            abort();
+        }
+        g_mmap_allocation = NULL;
+    } else
+#endif
+    {
+        free(ptr);
+    }
+}
+
+static srtp_err_status_t fuzz_srtp_protect(srtp_t srtp_sender,
+                                           void *hdr,
+                                           int *len,
+                                           uint8_t use_mki,
+                                           unsigned int mki)
+{
+    return srtp_protect(srtp_sender, hdr, len);
+}
+
+static srtp_err_status_t fuzz_srtp_unprotect(srtp_t srtp_sender,
+                                             void *hdr,
+                                             int *len,
+                                             uint8_t use_mki,
+                                             unsigned int mki)
+{
+    return srtp_unprotect(srtp_sender, hdr, len);
+}
+
+static srtp_err_status_t fuzz_srtp_protect_rtcp(srtp_t srtp_sender,
+                                                void *hdr,
+                                                int *len,
+                                                uint8_t use_mki,
+                                                unsigned int mki)
+{
+    return srtp_protect_rtcp(srtp_sender, hdr, len);
+}
+
+static srtp_err_status_t fuzz_srtp_unprotect_rtcp(srtp_t srtp_sender,
+                                                  void *hdr,
+                                                  int *len,
+                                                  uint8_t use_mki,
+                                                  unsigned int mki)
+{
+    return srtp_unprotect_rtcp(srtp_sender, hdr, len);
+}
+
+static srtp_err_status_t fuzz_srtp_protect_mki(srtp_t srtp_sender,
+                                               void *hdr,
+                                               int *len,
+                                               uint8_t use_mki,
+                                               unsigned int mki)
+{
+    return srtp_protect_mki(srtp_sender, hdr, len, use_mki, mki);
+}
+
+static srtp_err_status_t fuzz_srtp_protect_rtcp_mki(srtp_t srtp_sender,
+                                                    void *hdr,
+                                                    int *len,
+                                                    uint8_t use_mki,
+                                                    unsigned int mki)
+{
+    return srtp_protect_rtcp_mki(srtp_sender, hdr, len, use_mki, mki);
+}
+
+static srtp_err_status_t fuzz_srtp_unprotect_mki(srtp_t srtp_sender,
+                                                 void *hdr,
+                                                 int *len,
+                                                 uint8_t use_mki,
+                                                 unsigned int mki)
+{
+    return srtp_unprotect_mki(srtp_sender, hdr, len, use_mki);
+}
+
+static srtp_err_status_t fuzz_srtp_unprotect_rtcp_mki(srtp_t srtp_sender,
+                                                      void *hdr,
+                                                      int *len,
+                                                      uint8_t use_mki,
+                                                      unsigned int mki)
+{
+    return srtp_unprotect_rtcp_mki(srtp_sender, hdr, len, use_mki);
+}
+
+/* Get protect length functions */
+
+static srtp_err_status_t fuzz_srtp_get_protect_length(const srtp_t srtp_ctx,
+                                                      uint8_t use_mki,
+                                                      unsigned int mki,
+                                                      uint32_t *length)
+{
+    return srtp_get_protect_trailer_length(srtp_ctx, 0, 0, length);
+}
+
+static srtp_err_status_t fuzz_srtp_get_protect_rtcp_length(
+    const srtp_t srtp_ctx,
+    uint8_t use_mki,
+    unsigned int mki,
+    uint32_t *length)
+{
+    return srtp_get_protect_rtcp_trailer_length(srtp_ctx, 0, 0, length);
+}
+
+static srtp_err_status_t fuzz_srtp_get_protect_mki_length(const srtp_t srtp_ctx,
+                                                          uint8_t use_mki,
+                                                          unsigned int mki,
+                                                          uint32_t *length)
+{
+    return srtp_get_protect_trailer_length(srtp_ctx, use_mki, mki, length);
+}
+
+static srtp_err_status_t fuzz_srtp_get_protect_rtcp_mki_length(
+    const srtp_t srtp_ctx,
+    uint8_t use_mki,
+    unsigned int mki,
+    uint32_t *length)
+{
+    return srtp_get_protect_rtcp_trailer_length(srtp_ctx, use_mki, mki, length);
+}
+
+static uint8_t *extract_key(const uint8_t **data,
+                            size_t *size,
+                            const size_t key_size)
+{
+    uint8_t *ret;
+    if (*size < key_size) {
+        return NULL;
+    }
+
+    ret = fuzz_alloc_succeed(key_size, false);
+    EXTRACT(ret, *data, *size, key_size);
+
+    return ret;
+}
+
+static srtp_master_key_t *extract_master_key(const uint8_t **data,
+                                             size_t *size,
+                                             const size_t key_size,
+                                             bool simulate,
+                                             bool *success)
+{
+    srtp_master_key_t *ret = NULL;
+    uint16_t mki_id_size;
+
+    if (simulate == true) {
+        *success = false;
+    }
+
+    EXTRACT_IF(&mki_id_size, *data, *size, sizeof(mki_id_size));
+
+    if (*size < key_size + mki_id_size) {
+        goto end;
+    }
+
+    if (simulate == true) {
+        *data += key_size + mki_id_size;
+        *size -= key_size + mki_id_size;
+        *success = true;
+        goto end;
+    }
+
+    ret = fuzz_alloc_succeed(sizeof(srtp_master_key_t), false);
+    ret->key = fuzz_alloc_succeed(key_size, false);
+
+    ret->mki_id = fuzz_alloc_succeed(mki_id_size, false);
+
+    EXTRACT(ret->key, *data, *size, key_size);
+    EXTRACT(ret->mki_id, *data, *size, mki_id_size);
+    ret->mki_size = mki_id_size;
+end:
+    return ret;
+}
+
+static srtp_master_key_t **extract_master_keys(const uint8_t **data,
+                                               size_t *size,
+                                               const size_t key_size,
+                                               unsigned long *num_master_keys)
+{
+    const uint8_t *data_orig = *data;
+    size_t size_orig = *size;
+    size_t i = 0;
+
+    srtp_master_key_t **ret = NULL;
+
+    *num_master_keys = 0;
+
+    /* First pass -- dry run, determine how many keys we want and can extract */
+    while (1) {
+        uint8_t do_extract_master_key;
+        bool success;
+        if (*size < sizeof(do_extract_master_key)) {
+            goto next;
+        }
+        EXTRACT(&do_extract_master_key, *data, *size,
+                sizeof(do_extract_master_key));
+
+        /* Decide whether to extract another key */
+        if ((do_extract_master_key % 2) == 0) {
+            break;
+        }
+
+        extract_master_key(data, size, key_size, true, &success);
+
+        if (success == false) {
+            break;
+        }
+
+        (*num_master_keys)++;
+    }
+
+next:
+    *data = data_orig;
+    *size = size_orig;
+
+    /* Allocate array of pointers */
+    ret = fuzz_alloc_succeed(*num_master_keys * sizeof(srtp_master_key_t *),
+                             false);
+
+    /* Second pass -- perform the actual extractions */
+    for (i = 0; i < *num_master_keys; i++) {
+        uint8_t do_extract_master_key;
+        EXTRACT_IF(&do_extract_master_key, *data, *size,
+                   sizeof(do_extract_master_key));
+
+        if ((do_extract_master_key % 2) == 0) {
+            break;
+        }
+
+        ret[i] = extract_master_key(data, size, key_size, false, NULL);
+
+        if (ret[i] == NULL) {
+            /* Shouldn't happen */
+            abort();
+        }
+    }
+
+end:
+    return ret;
+}
+
+static srtp_ekt_policy_t extract_ekt_policy(const uint8_t **data, size_t *size)
+{
+    srtp_ekt_policy_t ret = NULL;
+    struct {
+        srtp_ekt_spi_t spi;
+        uint8_t key[16];
+
+    } params;
+
+    EXTRACT_IF(&params, *data, *size, sizeof(params));
+
+    ret = fuzz_alloc_succeed(sizeof(struct srtp_ekt_policy_ctx_t), false);
+
+    ret->spi = params.spi;
+
+    /* The only supported cipher type */
+    ret->ekt_cipher_type = SRTP_EKT_CIPHER_AES_128_ECB;
+
+    ret->ekt_key = fuzz_alloc_succeed(sizeof(params.key), false);
+    memcpy(ret->ekt_key, params.key, sizeof(params.key));
+
+    ret->next_ekt_policy = NULL;
+
+end:
+    return ret;
+}
+
+static srtp_policy_t *extract_policy(const uint8_t **data, size_t *size)
+{
+    srtp_policy_t *policy = NULL;
+    struct {
+        uint8_t srtp_crypto_policy_func;
+        uint64_t window_size;
+        uint8_t allow_repeat_tx;
+        uint8_t ssrc_type;
+        uint32_t ssrc_value;
+        uint8_t num_xtn_hdr;
+        uint8_t with_ekt;
+        srtp_ekt_spi_t ekt_spi;
+        uint8_t do_extract_key;
+        uint8_t do_extract_master_keys;
+    } params;
+
+    EXTRACT_IF(&params, *data, *size, sizeof(params));
+
+    params.srtp_crypto_policy_func %= sizeof(fuzz_srtp_crypto_policies) /
+                                      sizeof(fuzz_srtp_crypto_policies[0]);
+    params.allow_repeat_tx %= 2;
+    params.ssrc_type %=
+        sizeof(fuzz_ssrc_type_map) / sizeof(fuzz_ssrc_type_map[0]);
+    params.with_ekt %= 2;
+
+    policy = fuzz_alloc_succeed(sizeof(*policy), true);
+
+    fuzz_srtp_crypto_policies[params.srtp_crypto_policy_func]
+        .crypto_policy_func(&policy->rtp);
+    fuzz_srtp_crypto_policies[params.srtp_crypto_policy_func]
+        .crypto_policy_func(&policy->rtcp);
+
+    if (policy->rtp.cipher_key_len > MAX_KEY_LEN) {
+        /* Shouldn't happen */
+        abort();
+    }
+
+    policy->ssrc.type = fuzz_ssrc_type_map[params.ssrc_type].srtp_ssrc_type;
+    policy->ssrc.value = params.ssrc_value;
+
+    if ((params.do_extract_key % 2) == 0) {
+        policy->key = extract_key(data, size, policy->rtp.cipher_key_len);
+
+        if (policy->key == NULL) {
+            fuzz_free(policy);
+            return NULL;
+        }
+    }
+
+    if (params.num_xtn_hdr != 0) {
+        const size_t xtn_hdr_size = params.num_xtn_hdr * sizeof(int);
+        if (*size < xtn_hdr_size) {
+            fuzz_free(policy->key);
+            fuzz_free(policy);
+            return NULL;
+        }
+        policy->enc_xtn_hdr = fuzz_alloc_succeed(xtn_hdr_size, false);
+        EXTRACT(policy->enc_xtn_hdr, *data, *size, xtn_hdr_size);
+        policy->enc_xtn_hdr_count = params.num_xtn_hdr;
+    }
+
+    if ((params.do_extract_master_keys % 2) == 0) {
+        policy->keys = extract_master_keys(
+            data, size, policy->rtp.cipher_key_len, &policy->num_master_keys);
+        if (policy->keys == NULL) {
+            fuzz_free(policy->key);
+            fuzz_free(policy->enc_xtn_hdr);
+            fuzz_free(policy);
+            return NULL;
+        }
+    }
+
+    if (params.with_ekt) {
+        policy->ekt = extract_ekt_policy(data, size);
+    }
+
+    policy->window_size = params.window_size;
+    policy->allow_repeat_tx = params.allow_repeat_tx;
+    policy->next = NULL;
+
+end:
+    return policy;
+}
+
+static srtp_policy_t *extract_policies(const uint8_t **data, size_t *size)
+{
+    srtp_policy_t *curpolicy = NULL, *policy_chain = NULL;
+
+    curpolicy = extract_policy(data, size);
+    if (curpolicy == NULL) {
+        return NULL;
+    }
+
+    policy_chain = curpolicy;
+
+    while (1) {
+        uint8_t do_extract_policy;
+        EXTRACT_IF(&do_extract_policy, *data, *size, sizeof(do_extract_policy));
+
+        /* Decide whether to extract another policy */
+        if ((do_extract_policy % 2) == 0) {
+            break;
+        }
+
+        curpolicy->next = extract_policy(data, size);
+        if (curpolicy->next == NULL) {
+            break;
+        }
+        curpolicy = curpolicy->next;
+    }
+
+end:
+    return policy_chain;
+}
+
+static uint32_t *extract_remove_stream_ssrc(const uint8_t **data,
+                                            size_t *size,
+                                            uint8_t *num_remove_stream)
+{
+    uint32_t *ret = NULL;
+    uint8_t _num_remove_stream;
+    size_t total_size;
+
+    *num_remove_stream = 0;
+
+    EXTRACT_IF(&_num_remove_stream, *data, *size, sizeof(_num_remove_stream));
+
+    if (_num_remove_stream == 0) {
+        goto end;
+    }
+
+    total_size = _num_remove_stream * sizeof(uint32_t);
+
+    if (*size < total_size) {
+        goto end;
+    }
+
+    ret = fuzz_alloc_succeed(total_size, false);
+    EXTRACT(ret, *data, *size, total_size);
+
+    *num_remove_stream = _num_remove_stream;
+
+end:
+    return ret;
+}
+
+static uint32_t *extract_set_roc(const uint8_t **data,
+                                 size_t *size,
+                                 uint8_t *num_set_roc)
+{
+    uint32_t *ret = NULL;
+    uint8_t _num_set_roc;
+    size_t total_size;
+
+    *num_set_roc = 0;
+    EXTRACT_IF(&_num_set_roc, *data, *size, sizeof(_num_set_roc));
+    if (_num_set_roc == 0) {
+        goto end;
+    }
+
+    /* Tuples of 2 uint32_t's */
+    total_size = _num_set_roc * sizeof(uint32_t) * 2;
+
+    if (*size < total_size) {
+        goto end;
+    }
+
+    ret = fuzz_alloc_succeed(total_size, false);
+    EXTRACT(ret, *data, *size, total_size);
+
+    *num_set_roc = _num_set_roc;
+
+end:
+    return ret;
+}
+
+static void free_policies(srtp_policy_t *curpolicy)
+{
+    size_t i;
+    while (curpolicy) {
+        srtp_policy_t *next = curpolicy->next;
+
+        fuzz_free(curpolicy->key);
+
+        for (i = 0; i < curpolicy->num_master_keys; i++) {
+            fuzz_free(curpolicy->keys[i]->key);
+            fuzz_free(curpolicy->keys[i]->mki_id);
+            fuzz_free(curpolicy->keys[i]);
+        }
+
+        fuzz_free(curpolicy->keys);
+        fuzz_free(curpolicy->enc_xtn_hdr);
+
+        if (curpolicy->ekt) {
+            fuzz_free(curpolicy->ekt->ekt_key);
+            fuzz_free(curpolicy->ekt);
+        }
+
+        fuzz_free(curpolicy);
+
+        curpolicy = next;
+    }
+}
+
+static uint8_t *run_srtp_func(const srtp_t srtp_ctx,
+                              const uint8_t **data,
+                              size_t *size)
+{
+    uint8_t *ret = NULL;
+    uint8_t *copy = NULL, *copy_2 = NULL;
+
+    struct {
+        uint16_t size;
+        uint8_t srtp_func;
+        uint8_t use_mki;
+        uint32_t mki;
+        uint8_t stretch;
+    } params_1;
+
+    struct {
+        uint8_t srtp_func;
+        uint8_t use_mki;
+        uint32_t mki;
+    } params_2;
+    int ret_size;
+
+    EXTRACT_IF(&params_1, *data, *size, sizeof(params_1));
+    params_1.srtp_func %= sizeof(srtp_funcs) / sizeof(srtp_funcs[0]);
+    params_1.use_mki %= 2;
+
+    if (*size < params_1.size) {
+        goto end;
+    }
+
+    /* Enforce 4 byte alignment */
+    if (g_no_align == false) {
+        params_1.size -= params_1.size % 4;
+    }
+
+    if (params_1.size == 0) {
+        goto end;
+    }
+
+    ret_size = params_1.size;
+    if (srtp_funcs[params_1.srtp_func].protect == true) {
+        /* Intentionally not initialized to trigger MemorySanitizer, if
+         * applicable */
+        uint32_t alloc_size;
+
+        if (srtp_funcs[params_1.srtp_func].get_length(
+                srtp_ctx, params_1.use_mki, params_1.mki, &alloc_size) !=
+            srtp_err_status_ok) {
+            goto end;
+        }
+
+        copy = fuzz_alloc_succeed(ret_size + alloc_size, false);
+    } else {
+        copy = fuzz_alloc_succeed(ret_size, false);
+    }
+
+    EXTRACT(copy, *data, *size, params_1.size);
+
+    if (srtp_funcs[params_1.srtp_func].srtp_func(
+            srtp_ctx, copy, &ret_size, params_1.use_mki, params_1.mki) !=
+        srtp_err_status_ok) {
+        fuzz_free(copy);
+        goto end;
+    }
+    // fuzz_free(copy);
+
+    fuzz_testmem(copy, ret_size);
+
+    ret = copy;
+
+    EXTRACT_IF(&params_2, *data, *size, sizeof(params_2));
+    params_2.srtp_func %= sizeof(srtp_funcs) / sizeof(srtp_funcs[0]);
+    params_2.use_mki %= 2;
+
+    if (ret_size == 0) {
+        goto end;
+    }
+
+    if (srtp_funcs[params_2.srtp_func].protect == true) {
+        /* Intentionally not initialized to trigger MemorySanitizer, if
+         * applicable */
+        uint32_t alloc_size;
+
+        if (srtp_funcs[params_2.srtp_func].get_length(
+                srtp_ctx, params_2.use_mki, params_2.mki, &alloc_size) !=
+            srtp_err_status_ok) {
+            goto end;
+        }
+
+        copy_2 = fuzz_alloc_succeed(ret_size + alloc_size, false);
+    } else {
+        copy_2 = fuzz_alloc_succeed(ret_size, false);
+    }
+
+    memcpy(copy_2, copy, ret_size);
+    fuzz_free(copy);
+    copy = copy_2;
+
+    if (srtp_funcs[params_2.srtp_func].srtp_func(
+            srtp_ctx, copy, &ret_size, params_2.use_mki, params_2.mki) !=
+        srtp_err_status_ok) {
+        fuzz_free(copy);
+        ret = NULL;
+        goto end;
+    }
+
+    fuzz_testmem(copy, ret_size);
+
+    ret = copy;
+
+end:
+    return ret;
+}
+
+void fuzz_srtp_event_handler(srtp_event_data_t *data)
+{
+    fuzz_testmem(data, sizeof(srtp_event_data_t));
+    if (data->session != NULL) {
+        fuzz_testmem(data->session, sizeof(*data->session));
+    }
+}
+
+static void fuzz_write_input(const uint8_t *data, size_t size)
+{
+    FILE *fp = fopen("input.bin", "wb");
+
+    if (fp == NULL) {
+        /* Shouldn't happen */
+        abort();
+    }
+
+    if (size != 0 && fwrite(data, size, 1, fp) != 1) {
+        printf("Cannot write\n");
+        /* Shouldn't happen */
+        abort();
+    }
+
+    fclose(fp);
+}
+
+int LLVMFuzzerInitialize(int *argc, char ***argv)
+{
+    char **_argv = *argv;
+    int i;
+    bool no_custom_event_handler = false;
+
+    if (srtp_init() != srtp_err_status_ok) {
+        /* Shouldn't happen */
+        abort();
+    }
+
+    for (i = 0; i < *argc; i++) {
+        if (strcmp("--no_align", _argv[i]) == 0) {
+            g_no_align = true;
+        } else if (strcmp("--no_custom_event_handler", _argv[i]) == 0) {
+            no_custom_event_handler = true;
+        } else if (strcmp("--write_input", _argv[i]) == 0) {
+            g_write_input = true;
+        }
+#ifdef FUZZ_32BIT
+        else if (strcmp("--no_mmap", _argv[i]) == 0) {
+            g_no_mmap = true;
+        }
+#endif
+        else if (strncmp("--", _argv[i], 2) == 0) {
+            printf("Invalid argument: %s\n", _argv[i]);
+            exit(0);
+        }
+    }
+
+    if (no_custom_event_handler == false) {
+        if (srtp_install_event_handler(fuzz_srtp_event_handler) !=
+            srtp_err_status_ok) {
+            /* Shouldn't happen */
+            abort();
+        }
+    }
+
+    /* Fully initialized -- past this point, simulated allocation failures
+     * are allowed to occur */
+    g_post_init = true;
+
+    return 0;
+}
+
+int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
+{
+    uint8_t num_remove_stream;
+    uint32_t *remove_stream_ssrc = NULL;
+    uint8_t num_set_roc;
+    uint32_t *set_roc = NULL;
+    srtp_t srtp_ctx = NULL;
+    srtp_policy_t *policy_chain = NULL, *policy_chain_2 = NULL;
+    uint32_t randseed;
+    static bool firstrun = true;
+
+    if (firstrun == true) {
+        /* TODO version check etc and send it to MSAN */
+    }
+
+#ifdef FUZZ_32BIT
+    /* Free the mmap allocation made during the previous iteration, if
+     * applicable */
+    fuzz_free(g_mmap_allocation);
+#endif
+
+    if (g_write_input == true) {
+        fuzz_write_input(data, size);
+    }
+
+    EXTRACT_IF(&randseed, data, size, sizeof(randseed));
+    fuzz_mt19937_init(randseed);
+    srand(randseed);
+
+    /* policy_chain is used to initialize the srtp context with */
+    if ((policy_chain = extract_policies(&data, &size)) == NULL) {
+        goto end;
+    }
+    /* policy_chain_2 is used as an argument to srtp_update later on */
+    if ((policy_chain_2 = extract_policies(&data, &size)) == NULL) {
+        goto end;
+    }
+
+    /* Create context */
+    if (srtp_create(&srtp_ctx, policy_chain) != srtp_err_status_ok) {
+        goto end;
+    }
+
+    // free_policies(policy_chain);
+    // policy_chain = NULL;
+
+    /* Don't check for NULL result -- no extractions is fine */
+    remove_stream_ssrc =
+        extract_remove_stream_ssrc(&data, &size, &num_remove_stream);
+
+    /* Don't check for NULL result -- no extractions is fine */
+    set_roc = extract_set_roc(&data, &size, &num_set_roc);
+
+    {
+        uint8_t *ret;
+        int i = 0, j = 0;
+
+        while ((ret = run_srtp_func(srtp_ctx, &data, &size)) != NULL) {
+            fuzz_free(ret);
+
+            /* Keep removing streams until the set of SSRCs extracted from the
+             * fuzzer input is exhausted */
+            if (i < num_remove_stream) {
+                if (srtp_remove_stream(srtp_ctx, remove_stream_ssrc[i]) !=
+                    srtp_err_status_ok) {
+                    goto end;
+                }
+                i++;
+            }
+
+            /* Keep setting and getting ROCs until the set of SSRC/ROC tuples
+             * extracted from the fuzzer input is exhausted */
+            if (j < num_set_roc * 2) {
+                uint32_t roc;
+                if (srtp_set_stream_roc(srtp_ctx, set_roc[j], set_roc[j + 1]) !=
+                    srtp_err_status_ok) {
+                    goto end;
+                }
+                if (srtp_get_stream_roc(srtp_ctx, set_roc[j + 1], &roc) !=
+                    srtp_err_status_ok) {
+                    goto end;
+                }
+                j += 2;
+            }
+
+            if (policy_chain_2 != NULL) {
+                /* TODO srtp_update(srtp_ctx, policy_chain_2); */
+
+                /* Discard after using once */
+                free_policies(policy_chain_2);
+                policy_chain_2 = NULL;
+            }
+        }
+    }
+
+end:
+    free_policies(policy_chain);
+    free_policies(policy_chain_2);
+    fuzz_free(remove_stream_ssrc);
+    fuzz_free(set_roc);
+    if (srtp_ctx != NULL) {
+        srtp_dealloc(srtp_ctx);
+    }
+    fuzz_mt19937_destroy();
+
+    return 0;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/fuzzer/fuzzer.h b/trunk/3rdparty/libsrtp-2-fit/fuzzer/fuzzer.h
new file mode 100644
index 000000000..ce1f8d689
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/fuzzer/fuzzer.h
@@ -0,0 +1,176 @@
+#define MAX_KEY_LEN 46
+#define EXTRACT(dest, src, srcsize, copysize)                                  \
+    {                                                                          \
+        memcpy((dest), (src), (copysize));                                     \
+        (src) += (copysize);                                                   \
+        (srcsize) -= (copysize);                                               \
+    }
+
+/* Extract data if src contains sufficient bytes, otherwise go to end */
+#define EXTRACT_IF(dest, src, srcsize, copysize)                               \
+    {                                                                          \
+        if ((srcsize) < (copysize)) {                                          \
+            goto end;                                                          \
+        } else {                                                               \
+            EXTRACT((dest), (src), (srcsize), (copysize));                     \
+        }                                                                      \
+    }
+#include <stdint.h>
+#if UINTPTR_MAX == 0xffffffff
+#define FUZZ_32BIT
+#elif UINTPTR_MAX == 0xffffffffffffffff
+#else
+#error "Cannot detect word size"
+#endif
+
+typedef srtp_err_status_t (
+    *fuzz_srtp_func)(srtp_t, void *, int *, uint8_t, unsigned int);
+typedef void (*fuzz_srtp_crypto_policy_func)(srtp_crypto_policy_t *);
+typedef srtp_err_status_t (*fuzz_srtp_get_length_func)(const srtp_t,
+                                                       uint8_t,
+                                                       unsigned int,
+                                                       uint32_t *);
+
+struct fuzz_srtp_params {
+    uint8_t srtp_func;
+    uint8_t srtp_crypto_policy_func;
+    uint16_t window_size;
+    uint8_t allow_repeat_tx;
+    uint8_t ssrc_type;
+    unsigned int ssrc_value;
+    uint8_t key[MAX_KEY_LEN];
+    uint8_t mki;
+};
+
+static srtp_err_status_t fuzz_srtp_protect(srtp_t srtp_sender,
+                                           void *hdr,
+                                           int *len,
+                                           uint8_t use_mki,
+                                           unsigned int mki);
+static srtp_err_status_t fuzz_srtp_unprotect(srtp_t srtp_sender,
+                                             void *hdr,
+                                             int *len,
+                                             uint8_t use_mki,
+                                             unsigned int mki);
+static srtp_err_status_t fuzz_srtp_protect_rtcp(srtp_t srtp_sender,
+                                                void *hdr,
+                                                int *len,
+                                                uint8_t use_mki,
+                                                unsigned int mki);
+static srtp_err_status_t fuzz_srtp_unprotect_rtcp(srtp_t srtp_sender,
+                                                  void *hdr,
+                                                  int *len,
+                                                  uint8_t use_mki,
+                                                  unsigned int mki);
+static srtp_err_status_t fuzz_srtp_protect_mki(srtp_t srtp_sender,
+                                               void *hdr,
+                                               int *len,
+                                               uint8_t use_mki,
+                                               unsigned int mki);
+static srtp_err_status_t fuzz_srtp_protect_rtcp_mki(srtp_t srtp_sender,
+                                                    void *hdr,
+                                                    int *len,
+                                                    uint8_t use_mki,
+                                                    unsigned int mki);
+static srtp_err_status_t fuzz_srtp_unprotect_mki(srtp_t srtp_sender,
+                                                 void *hdr,
+                                                 int *len,
+                                                 uint8_t use_mki,
+                                                 unsigned int mki);
+static srtp_err_status_t fuzz_srtp_unprotect_rtcp_mki(srtp_t srtp_sender,
+                                                      void *hdr,
+                                                      int *len,
+                                                      uint8_t use_mki,
+                                                      unsigned int mki);
+
+static srtp_err_status_t fuzz_srtp_get_protect_length(const srtp_t srtp_ctx,
+                                                      uint8_t use_mki,
+                                                      unsigned int mki,
+                                                      uint32_t *length);
+static srtp_err_status_t fuzz_srtp_get_protect_mki_length(const srtp_t srtp_ctx,
+                                                          uint8_t use_mki,
+                                                          unsigned int mki,
+                                                          uint32_t *length);
+static srtp_err_status_t fuzz_srtp_get_protect_rtcp_length(
+    const srtp_t srtp_ctx,
+    uint8_t use_mki,
+    unsigned int mki,
+    uint32_t *length);
+static srtp_err_status_t fuzz_srtp_get_protect_rtcp_mki_length(
+    const srtp_t srtp_ctx,
+    uint8_t use_mki,
+    unsigned int mki,
+    uint32_t *length);
+
+struct fuzz_srtp_func_ext {
+    fuzz_srtp_func srtp_func;
+    bool protect;
+    fuzz_srtp_get_length_func get_length;
+};
+
+const struct fuzz_srtp_func_ext srtp_funcs[] = {
+    { fuzz_srtp_protect, true, fuzz_srtp_get_protect_length },
+    { fuzz_srtp_unprotect, false, NULL },
+    { fuzz_srtp_protect_rtcp, true, fuzz_srtp_get_protect_rtcp_length },
+    { fuzz_srtp_unprotect_rtcp, false, NULL },
+    { fuzz_srtp_protect_mki, true, fuzz_srtp_get_protect_mki_length },
+    { fuzz_srtp_unprotect_mki, false, NULL },
+    { fuzz_srtp_protect_rtcp_mki, true, fuzz_srtp_get_protect_rtcp_mki_length },
+    { fuzz_srtp_unprotect_rtcp_mki, false, NULL }
+};
+
+struct fuzz_srtp_crypto_policy_func_ext {
+    fuzz_srtp_crypto_policy_func crypto_policy_func;
+    const char *name;
+};
+
+const struct fuzz_srtp_crypto_policy_func_ext fuzz_srtp_crypto_policies[] = {
+    { srtp_crypto_policy_set_rtp_default, "" },
+    { srtp_crypto_policy_set_rtcp_default, "" },
+    { srtp_crypto_policy_set_aes_cm_128_hmac_sha1_32,
+      "srtp_crypto_policy_set_aes_cm_128_hmac_sha1_32" },
+    { srtp_crypto_policy_set_aes_cm_128_null_auth,
+      "srtp_crypto_policy_set_aes_cm_128_null_auth" },
+    { srtp_crypto_policy_set_aes_cm_256_hmac_sha1_32,
+      "srtp_crypto_policy_set_aes_cm_256_hmac_sha1_32" },
+    { srtp_crypto_policy_set_aes_cm_256_hmac_sha1_80,
+      "srtp_crypto_policy_set_aes_cm_256_hmac_sha1_80" },
+    { srtp_crypto_policy_set_aes_cm_256_null_auth,
+      "srtp_crypto_policy_set_aes_cm_256_null_auth" },
+    { srtp_crypto_policy_set_null_cipher_hmac_null,
+      "srtp_crypto_policy_set_null_cipher_hmac_null" },
+    { srtp_crypto_policy_set_null_cipher_hmac_sha1_80,
+      "srtp_crypto_policy_set_null_cipher_hmac_sha1_80" },
+#ifdef OPENSSL
+    { srtp_crypto_policy_set_aes_cm_192_hmac_sha1_32,
+      "srtp_crypto_policy_set_aes_cm_192_hmac_sha1_32" },
+    { srtp_crypto_policy_set_aes_cm_192_hmac_sha1_80,
+      "srtp_crypto_policy_set_aes_cm_192_hmac_sha1_80" },
+    { srtp_crypto_policy_set_aes_cm_192_null_auth,
+      "srtp_crypto_policy_set_aes_cm_192_null_auth" },
+    { srtp_crypto_policy_set_aes_gcm_128_16_auth,
+      "srtp_crypto_policy_set_aes_gcm_128_16_auth" },
+    { srtp_crypto_policy_set_aes_gcm_128_8_auth,
+      "srtp_crypto_policy_set_aes_gcm_128_8_auth" },
+    { srtp_crypto_policy_set_aes_gcm_128_8_only_auth,
+      "srtp_crypto_policy_set_aes_gcm_128_8_only_auth" },
+    { srtp_crypto_policy_set_aes_gcm_256_16_auth,
+      "srtp_crypto_policy_set_aes_gcm_256_16_auth" },
+    { srtp_crypto_policy_set_aes_gcm_256_8_auth,
+      "srtp_crypto_policy_set_aes_gcm_256_8_auth" },
+    { srtp_crypto_policy_set_aes_gcm_256_8_only_auth,
+      "srtp_crypto_policy_set_aes_gcm_256_8_only_auth" },
+#endif
+};
+
+struct fuzz_srtp_ssrc_type_ext {
+    srtp_ssrc_type_t srtp_ssrc_type;
+    const char *name;
+};
+
+const struct fuzz_srtp_ssrc_type_ext fuzz_ssrc_type_map[] = {
+    { ssrc_undefined, "ssrc_undefined" },
+    { ssrc_specific, "ssrc_specific" },
+    { ssrc_any_inbound, "ssrc_any_inbound" },
+    { ssrc_any_outbound, "ssrc_any_outbound" },
+};
diff --git a/trunk/3rdparty/libsrtp-2-fit/fuzzer/mt19937.cpp b/trunk/3rdparty/libsrtp-2-fit/fuzzer/mt19937.cpp
new file mode 100644
index 000000000..984f1fb54
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/fuzzer/mt19937.cpp
@@ -0,0 +1,17 @@
+#include <random>
+#include <cstdint>
+
+std::mt19937* mt_rand = NULL;
+
+extern "C" void fuzz_mt19937_init(uint32_t seed) {
+    mt_rand = new std::mt19937(seed);
+}
+
+extern "C" uint32_t fuzz_mt19937_get(void) {
+    return (*mt_rand)();
+}
+
+extern "C" void fuzz_mt19937_destroy(void) {
+    delete mt_rand;
+    mt_rand = NULL;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/fuzzer/mt19937.h b/trunk/3rdparty/libsrtp-2-fit/fuzzer/mt19937.h
new file mode 100644
index 000000000..cda11819a
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/fuzzer/mt19937.h
@@ -0,0 +1,4 @@
+#include <stdint.h>
+void fuzz_mt19937_init(uint32_t seed);
+uint32_t fuzz_mt19937_get(void);
+void fuzz_mt19937_destroy(void);
diff --git a/trunk/3rdparty/libsrtp-2-fit/fuzzer/testmem.c b/trunk/3rdparty/libsrtp-2-fit/fuzzer/testmem.c
new file mode 100644
index 000000000..52370a423
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/fuzzer/testmem.c
@@ -0,0 +1,25 @@
+#include <stdint.h>
+#include <stddef.h>
+#include <stdlib.h>
+#include <string.h>
+
+#ifdef FUZZ_MSAN
+#include <stdio.h>
+static void fuzz_testmem_msan(void *data, size_t size)
+{
+    /* This is a trick to force MemorySanitizer to evaluate the data at hand */
+    FILE *fp = fopen("/dev/null", "wb");
+    fwrite(data, size, 1, fp);
+    fclose(fp);
+}
+#endif
+
+void fuzz_testmem(void *data, size_t size)
+{
+#ifdef FUZZ_MSAN
+    fuzz_testmem_msan(data, size);
+#endif
+    uint8_t *copy = malloc(size);
+    memcpy(copy, data, size);
+    free(copy);
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/fuzzer/testmem.h b/trunk/3rdparty/libsrtp-2-fit/fuzzer/testmem.h
new file mode 100644
index 000000000..b00f30952
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/fuzzer/testmem.h
@@ -0,0 +1,3 @@
+#include <stdint.h>
+#include <stddef.h>
+void fuzz_testmem(void *data, size_t size);
diff --git a/trunk/3rdparty/libsrtp-2-fit/include/ekt.h b/trunk/3rdparty/libsrtp-2-fit/include/ekt.h
new file mode 100644
index 000000000..a289a53da
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/include/ekt.h
@@ -0,0 +1,181 @@
+/*
+ * ekt.h
+ *
+ * interface to Encrypted Key Transport for SRTP
+ *
+ * David McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+/*
+ * EKT implementation strategy
+ *
+ * use stream_template approach
+ *
+ * in srtp_unprotect, when a new stream appears, check if template has
+ * EKT defined, and if it does, then apply EKT processing
+ *
+ * question: will we want to allow key-sharing templates in addition
+ * to EKT templates?  could define a new ssrc_type_t that's associated
+ * with an EKT, e.g.  ssrc_any_ekt.
+ *
+ *
+ */
+
+#ifndef SRTP_EKT_H
+#define SRTP_EKT_H
+
+// left in commented out as reminder to not include private headers
+//#include "srtp_priv.h"
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+#define SRTP_EKT_CIPHER_DEFAULT 1
+#define SRTP_EKT_CIPHER_AES_128_ECB 1
+#define SRTP_EKT_CIPHER_AES_192_KEY_WRAP 2
+#define SRTP_EKT_CIPHER_AES_256_KEY_WRAP 3
+
+typedef uint16_t srtp_ekt_spi_t;
+
+unsigned srtp_ekt_octets_after_base_tag(srtp_ekt_stream_t ekt);
+
+/*
+ * an srtp_policy_t structure can contain a pointer to an
+ * srtp_ekt_policy_t structure
+ *
+ * this structure holds all of the high level EKT information, and it
+ * is passed into libsrtp to indicate what policy should be in effect
+ */
+
+typedef struct srtp_ekt_policy_ctx_t {
+    srtp_ekt_spi_t spi; /* security parameter index */
+    uint8_t ekt_cipher_type;
+    uint8_t *ekt_key;
+    struct srtp_ekt_policy_ctx_t *next_ekt_policy;
+} srtp_ekt_policy_ctx_t;
+
+/*
+ * an srtp_ekt_data_t structure holds the data corresponding to an ekt key,
+ * spi, and so on
+ */
+
+typedef struct srtp_ekt_data_t {
+    srtp_ekt_spi_t spi;
+    uint8_t ekt_cipher_type;
+    srtp_aes_expanded_key_t ekt_enc_key;
+    srtp_aes_expanded_key_t ekt_dec_key;
+    struct ekt_data_t *next_ekt_data;
+} srtp_ekt_data_t;
+
+/*
+ * an srtp_stream_ctx_t can contain an srtp_ekt_stream_ctx_t
+ *
+ * an srtp_ekt_stream_ctx_t structure holds all of the EKT information for
+ * a specific SRTP stream
+ */
+
+typedef struct srtp_ekt_stream_ctx_t {
+    srtp_ekt_data_t *data;
+    uint16_t isn; /* initial sequence number  */
+    uint8_t encrypted_master_key[SRTP_MAX_KEY_LEN];
+} srtp_ekt_stream_ctx_t;
+
+srtp_err_status_t srtp_ekt_alloc(srtp_ekt_stream_t *stream_data,
+                                 srtp_ekt_policy_t policy);
+
+srtp_err_status_t srtp_ekt_stream_init(srtp_ekt_stream_t e,
+                                       srtp_ekt_spi_t spi,
+                                       void *ekt_key,
+                                       unsigned ekt_cipher_type);
+
+srtp_err_status_t srtp_ekt_stream_init_from_policy(srtp_ekt_stream_t e,
+                                                   srtp_ekt_policy_t p);
+
+srtp_err_status_t srtp_stream_init_from_ekt(srtp_stream_t stream,
+                                            const void *srtcp_hdr,
+                                            unsigned pkt_octet_len);
+
+void srtp_ekt_write_data(srtp_ekt_stream_t ekt,
+                         uint8_t *base_tag,
+                         unsigned base_tag_len,
+                         int *packet_len,
+                         srtp_xtd_seq_num_t pkt_index);
+
+/*
+ * We handle EKT by performing some additional steps before
+ * authentication (copying the auth tag into a temporary location,
+ * zeroizing the "base tag" field in the packet)
+ *
+ * With EKT, the tag_len parameter is actually the base tag
+ * length
+ */
+srtp_err_status_t srtp_ekt_tag_verification_preproces(uint8_t *pkt_tag,
+                                                      uint8_t *pkt_tag_copy,
+                                                      unsigned tag_len);
+
+srtp_err_status_t srtp_ekt_tag_verification_postproces(uint8_t *pkt_tag,
+                                                       uint8_t *pkt_tag_copy,
+                                                       unsigned tag_len);
+
+/*
+ * @brief EKT pre-processing for srtcp tag generation
+ *
+ * This function does the pre-processing of the SRTCP authentication
+ * tag format.  When EKT is used, it consists of writing the Encrypted
+ * Master Key, the SRTP ROC, the Initial Sequence Number, and SPI
+ * fields.  The Base Authentication Tag field is set to the all-zero
+ * value
+ *
+ * When EKT is not used, this function is a no-op.
+ *
+ */
+srtp_err_status_t srtp_stream_srtcp_auth_tag_generation_preprocess(
+    const srtp_stream_t *s,
+    uint8_t *pkt_tag,
+    unsigned pkt_octet_len);
+
+/* it's not clear that a tag_generation_postprocess function is needed */
+srtp_err_status_t srtcp_auth_tag_generation_postprocess(void);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* SRTP_EKT_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/include/getopt_s.h b/trunk/3rdparty/libsrtp-2-fit/include/getopt_s.h
new file mode 100644
index 000000000..53fb25ba7
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/include/getopt_s.h
@@ -0,0 +1,67 @@
+/*
+ * getopt.h
+ *
+ * interface to a minimal implementation of the getopt() function,
+ * written so that test applications that use that function can run on
+ * non-POSIX platforms
+ *
+ */
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef GETOPT_S_H
+#define GETOPT_S_H
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/*
+ * getopt_s(), optarg_s, and optind_s are small, locally defined
+ * versions of the POSIX standard getopt() interface.
+ */
+
+int getopt_s(int argc, char *const argv[], const char *optstring);
+
+extern char *optarg_s; /* defined in getopt.c */
+
+extern int optind_s; /* defined in getopt.c */
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* GETOPT_S_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/include/srtp.h b/trunk/3rdparty/libsrtp-2-fit/include/srtp.h
new file mode 100644
index 000000000..c86b9ee74
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/include/srtp.h
@@ -0,0 +1,1759 @@
+/*
+ * srtp.h
+ *
+ * interface to libsrtp
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef SRTP_SRTP_H
+#define SRTP_SRTP_H
+
+#include <stdint.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/**
+ * @defgroup SRTP Secure RTP
+ *
+ * @brief libSRTP provides functions for protecting RTP and RTCP.  See
+ * Section @ref Overview for an introduction to the use of the library.
+ *
+ * @{
+ */
+
+/*
+ * SRTP_MASTER_KEY_LEN is the nominal master key length supported by libSRTP
+ */
+
+#define SRTP_MASTER_KEY_LEN 30
+
+/*
+ * SRTP_MAX_KEY_LEN is the maximum key length supported by libSRTP
+ */
+#define SRTP_MAX_KEY_LEN 64
+
+/*
+ * SRTP_MAX_TAG_LEN is the maximum tag length supported by libSRTP
+ */
+
+#define SRTP_MAX_TAG_LEN 16
+
+/**
+ * SRTP_MAX_MKI_LEN is the maximum size the MKI could be which is
+ * 128 bytes
+ */
+#define SRTP_MAX_MKI_LEN 128
+
+/**
+ * SRTP_MAX_TRAILER_LEN is the maximum length of the SRTP trailer
+ * (authentication tag and MKI) supported by libSRTP.  This value is
+ * the maixmum number of octets that will be added to an RTP packet by
+ * srtp_protect().
+ *
+ * @brief the maximum number of octets added by srtp_protect().
+ */
+#define SRTP_MAX_TRAILER_LEN (SRTP_MAX_TAG_LEN + SRTP_MAX_MKI_LEN)
+
+/**
+ * SRTP_MAX_NUM_MASTER_KEYS is the maximum number of Master keys for
+ * MKI supported by libSRTP.
+ *
+ */
+#define SRTP_MAX_NUM_MASTER_KEYS 16
+
+#define SRTP_SALT_LEN 14
+
+/*
+ * SRTP_AEAD_SALT_LEN is the length of the SALT values used with
+ * GCM mode.  GCM mode requires an IV.  The SALT value is used
+ * as part of the IV formation logic applied to each RTP packet.
+ */
+#define SRTP_AEAD_SALT_LEN 12
+
+#define SRTP_AES_128_KEY_LEN 16
+#define SRTP_AES_192_KEY_LEN 24
+#define SRTP_AES_256_KEY_LEN 32
+
+#define SRTP_AES_ICM_128_KEY_LEN_WSALT (SRTP_SALT_LEN + SRTP_AES_128_KEY_LEN)
+#define SRTP_AES_ICM_192_KEY_LEN_WSALT (SRTP_SALT_LEN + SRTP_AES_192_KEY_LEN)
+#define SRTP_AES_ICM_256_KEY_LEN_WSALT (SRTP_SALT_LEN + SRTP_AES_256_KEY_LEN)
+
+#define SRTP_AES_GCM_128_KEY_LEN_WSALT                                         \
+    (SRTP_AEAD_SALT_LEN + SRTP_AES_128_KEY_LEN)
+#define SRTP_AES_GCM_192_KEY_LEN_WSALT                                         \
+    (SRTP_AEAD_SALT_LEN + SRTP_AES_192_KEY_LEN)
+#define SRTP_AES_GCM_256_KEY_LEN_WSALT                                         \
+    (SRTP_AEAD_SALT_LEN + SRTP_AES_256_KEY_LEN)
+
+/**
+ *  @brief A srtp_cipher_type_id_t is an identifier for a particular cipher
+ *  type.
+ *
+ *  A srtp_cipher_type_id_t is an integer that represents a particular
+ *  cipher type, e.g. the Advanced Encryption Standard (AES).  A
+ *  SRTP_NULL_CIPHER is avaliable; this cipher leaves the data unchanged,
+ *  and can be selected to indicate that no encryption is to take
+ *  place.
+ *
+ *  @ingroup Ciphers
+ */
+typedef uint32_t srtp_cipher_type_id_t;
+
+/**
+ *  @brief An srtp_auth_type_id_t is an identifier for a particular
+ * authentication
+ *   function.
+ *
+ *  An srtp_auth_type_id_t is an integer that represents a particular
+ *  authentication function type, e.g. HMAC-SHA1.  A SRTP_NULL_AUTH is
+ *  avaliable; this authentication function performs no computation,
+ *  and can be selected to indicate that no authentication is to take
+ *  place.
+ *
+ *  @ingroup Authentication
+ */
+typedef uint32_t srtp_auth_type_id_t;
+
+/**
+ * @brief srtp_err_status_t defines error codes.
+ *
+ * The enumeration srtp_err_status_t defines error codes.  Note that the
+ * value of srtp_err_status_ok is equal to zero, which can simplify error
+ * checking somewhat.
+ *
+ */
+typedef enum {
+    srtp_err_status_ok = 0,             /**< nothing to report               */
+    srtp_err_status_fail = 1,           /**< unspecified failure             */
+    srtp_err_status_bad_param = 2,      /**< unsupported parameter           */
+    srtp_err_status_alloc_fail = 3,     /**< couldn't allocate memory        */
+    srtp_err_status_dealloc_fail = 4,   /**< couldn't deallocate properly    */
+    srtp_err_status_init_fail = 5,      /**< couldn't initialize             */
+    srtp_err_status_terminus = 6,       /**< can't process as much data as   */
+                                        /**< requested                       */
+    srtp_err_status_auth_fail = 7,      /**< authentication failure          */
+    srtp_err_status_cipher_fail = 8,    /**< cipher failure                  */
+    srtp_err_status_replay_fail = 9,    /**< replay check failed (bad index) */
+    srtp_err_status_replay_old = 10,    /**< replay check failed (index too  */
+                                        /**< old)                            */
+    srtp_err_status_algo_fail = 11,     /**< algorithm failed test routine   */
+    srtp_err_status_no_such_op = 12,    /**< unsupported operation           */
+    srtp_err_status_no_ctx = 13,        /**< no appropriate context found    */
+    srtp_err_status_cant_check = 14,    /**< unable to perform desired       */
+                                        /**< validation                      */
+    srtp_err_status_key_expired = 15,   /**< can't use key any more          */
+    srtp_err_status_socket_err = 16,    /**< error in use of socket          */
+    srtp_err_status_signal_err = 17,    /**< error in use POSIX signals      */
+    srtp_err_status_nonce_bad = 18,     /**< nonce check failed              */
+    srtp_err_status_read_fail = 19,     /**< couldn't read data              */
+    srtp_err_status_write_fail = 20,    /**< couldn't write data             */
+    srtp_err_status_parse_err = 21,     /**< error parsing data              */
+    srtp_err_status_encode_err = 22,    /**< error encoding data             */
+    srtp_err_status_semaphore_err = 23, /**< error while using semaphores    */
+    srtp_err_status_pfkey_err = 24,     /**< error while using pfkey         */
+    srtp_err_status_bad_mki = 25,       /**< error MKI present in packet is  */
+                                        /**< invalid                         */
+    srtp_err_status_pkt_idx_old = 26,   /**< packet index is too old to      */
+                                        /**< consider                        */
+    srtp_err_status_pkt_idx_adv = 27    /**< packet index advanced, reset    */
+                                        /**< needed                          */
+} srtp_err_status_t;
+
+typedef struct srtp_ctx_t_ srtp_ctx_t;
+
+/**
+ * @brief srtp_sec_serv_t describes a set of security services.
+ *
+ * A srtp_sec_serv_t enumeration is used to describe the particular
+ * security services that will be applied by a particular crypto
+ * policy (or other mechanism).
+ */
+typedef enum {
+    sec_serv_none = 0,         /**< no services                        */
+    sec_serv_conf = 1,         /**< confidentiality                    */
+    sec_serv_auth = 2,         /**< authentication                     */
+    sec_serv_conf_and_auth = 3 /**< confidentiality and authentication */
+} srtp_sec_serv_t;
+
+/**
+ * @brief srtp_crypto_policy_t describes a particular crypto policy that
+ * can be applied to an SRTP stream.
+ *
+ * A srtp_crypto_policy_t describes a particular cryptographic policy that
+ * can be applied to an SRTP or SRTCP stream.  An SRTP session policy
+ * consists of a list of these policies, one for each SRTP stream
+ * in the session.
+ */
+typedef struct srtp_crypto_policy_t {
+    srtp_cipher_type_id_t cipher_type; /**< An integer representing          */
+                                       /**< the type of cipher.              */
+    int cipher_key_len;                /**< The length of the cipher key     */
+                                       /**< in octets.                       */
+    srtp_auth_type_id_t auth_type;     /**< An integer representing the      */
+                                       /**< authentication function.         */
+    int auth_key_len;                  /**< The length of the authentication */
+                                       /**< function key in octets.          */
+    int auth_tag_len;                  /**< The length of the authentication */
+                                       /**< tag in octets.                   */
+    srtp_sec_serv_t sec_serv;          /**< The flag indicating the security */
+                                       /**< services to be applied.          */
+} srtp_crypto_policy_t;
+
+/**
+ * @brief srtp_ssrc_type_t describes the type of an SSRC.
+ *
+ * An srtp_ssrc_type_t enumeration is used to indicate a type of SSRC.  See
+ * @ref srtp_policy_t for more informataion.
+ */
+typedef enum {
+    ssrc_undefined = 0,   /**< Indicates an undefined SSRC type.    */
+    ssrc_specific = 1,    /**< Indicates a specific SSRC value      */
+    ssrc_any_inbound = 2, /**< Indicates any inbound SSRC value     */
+                          /**< (i.e. a value that is used in the    */
+                          /**< function srtp_unprotect())           */
+    ssrc_any_outbound = 3 /**< Indicates any outbound SSRC value    */
+                          /**< (i.e. a value that is used in the    */
+                          /**< function srtp_protect())             */
+} srtp_ssrc_type_t;
+
+/**
+ * @brief An srtp_ssrc_t represents a particular SSRC value, or a `wildcard'
+ * SSRC.
+ *
+ * An srtp_ssrc_t represents a particular SSRC value (if its type is
+ * ssrc_specific), or a wildcard SSRC value that will match all
+ * outbound SSRCs (if its type is ssrc_any_outbound) or all inbound
+ * SSRCs (if its type is ssrc_any_inbound).
+ */
+typedef struct {
+    srtp_ssrc_type_t type; /**< The type of this particular SSRC */
+    unsigned int value;    /**< The value of this SSRC, if it is not a */
+                           /**< wildcard */
+} srtp_ssrc_t;
+
+/**
+ * @brief points to an EKT policy
+ */
+typedef struct srtp_ekt_policy_ctx_t *srtp_ekt_policy_t;
+
+/**
+ * @brief points to EKT stream data
+ */
+typedef struct srtp_ekt_stream_ctx_t *srtp_ekt_stream_t;
+
+/**
+ * @brief srtp_master_key_t represents a master key.  There will
+ * be a Master Key Index and the Master Key associated with the
+ * Master Key Index.  Need to also keep track of the Master Key
+ * Index Size to correctly read it from a packet.
+ */
+typedef struct srtp_master_key_t {
+    unsigned char *key;
+    unsigned char *mki_id;
+    unsigned int mki_size;
+} srtp_master_key_t;
+
+/**
+ * @brief represents the policy for an SRTP session.
+ *
+ * A single srtp_policy_t struct represents the policy for a single
+ * SRTP stream, and a linked list of these elements represents the
+ * policy for an entire SRTP session.  Each element contains the SRTP
+ * and SRTCP crypto policies for that stream, a pointer to the SRTP
+ * master key for that stream, the SSRC describing that stream, or a
+ * flag indicating a `wildcard' SSRC value, and a `next' field that
+ * holds a pointer to the next element in the list of policy elements,
+ * or NULL if it is the last element.
+ *
+ * The wildcard value SSRC_ANY_INBOUND matches any SSRC from an
+ * inbound stream that for which there is no explicit SSRC entry in
+ * another policy element.  Similarly, the value SSRC_ANY_OUTBOUND
+ * will matches any SSRC from an outbound stream that does not appear
+ * in another policy element.  Note that wildcard SSRCs &b cannot be
+ * used to match both inbound and outbound traffic.  This restriction
+ * is intentional, and it allows libSRTP to ensure that no security
+ * lapses result from accidental re-use of SSRC values during key
+ * sharing.
+ *
+ * @warning The final element of the list @b must have its `next' pointer
+ *          set to NULL.
+ */
+
+typedef struct srtp_policy_t {
+    srtp_ssrc_t ssrc;              /**< The SSRC value of stream, or the    */
+                                   /**< flags SSRC_ANY_INBOUND or           */
+                                   /**< SSRC_ANY_OUTBOUND if key sharing    */
+                                   /**< is used for this policy element.    */
+    srtp_crypto_policy_t rtp;      /**< SRTP crypto policy.                 */
+    srtp_crypto_policy_t rtcp;     /**< SRTCP crypto policy.                */
+    unsigned char *key;            /**< Pointer to the SRTP master key for  */
+                                   /**< this stream.                        */
+    srtp_master_key_t **keys;      /** Array of Master Key structures       */
+    unsigned long num_master_keys; /** Number of master keys                */
+    srtp_ekt_policy_t ekt;         /**< Pointer to the EKT policy structure */
+                                   /**< for this stream (if any)            */
+    unsigned long window_size;     /**< The window size to use for replay   */
+                                   /**< protection.                         */
+    int allow_repeat_tx;           /**< Whether retransmissions of          */
+                                   /**< packets with the same sequence      */
+                                   /**< number are allowed.                 */
+                                   /**< (Note that such repeated            */
+                                   /**< transmissions must have the same    */
+                                   /**< RTP payload, or a severe security   */
+                                   /**< weakness is introduced!)            */
+    int *enc_xtn_hdr;              /**< List of header ids to encrypt.      */
+    int enc_xtn_hdr_count;         /**< Number of entries in list of header */
+                                   /**<  ids.                               */
+    struct srtp_policy_t *next;    /**< Pointer to next stream policy.      */
+} srtp_policy_t;
+
+/**
+ * @brief An srtp_t points to an SRTP session structure.
+ *
+ * The typedef srtp_t is a pointer to a structure that represents
+ * an SRTP session.  This datatype is intentially opaque in
+ * order to separate the interface from the implementation.
+ *
+ * An SRTP session consists of all of the traffic sent to the RTP and
+ * RTCP destination transport addresses, using the RTP/SAVP (Secure
+ * Audio/Video Profile).  A session can be viewed as a set of SRTP
+ * streams, each of which originates with a different participant.
+ */
+typedef srtp_ctx_t *srtp_t;
+
+/**
+ * @brief srtp_init() initializes the srtp library.
+ *
+ * @warning This function @b must be called before any other srtp
+ * functions.
+ */
+srtp_err_status_t srtp_init(void);
+
+/**
+ * @brief srtp_shutdown() de-initializes the srtp library.
+ *
+ * @warning No srtp functions may be called after calling this function.
+ */
+srtp_err_status_t srtp_shutdown(void);
+
+/**
+ * @brief srtp_protect() is the Secure RTP sender-side packet processing
+ * function.
+ *
+ * The function call srtp_protect(ctx, rtp_hdr, len_ptr) applies SRTP
+ * protection to the RTP packet rtp_hdr (which has length *len_ptr) using
+ * the SRTP context ctx.  If srtp_err_status_ok is returned, then rtp_hdr
+ * points to the resulting SRTP packet and *len_ptr is the number of
+ * octets in that packet; otherwise, no assumptions should be made
+ * about the value of either data elements.
+ *
+ * The sequence numbers of the RTP packets presented to this function
+ * need not be consecutive, but they @b must be out of order by less
+ * than 2^15 = 32,768 packets.
+ *
+ * @warning This function assumes that it can write the authentication
+ * tag into the location in memory immediately following the RTP
+ * packet, and assumes that the RTP packet is aligned on a 32-bit
+ * boundary.
+ *
+ * @warning This function assumes that it can write SRTP_MAX_TRAILER_LEN
+ * into the location in memory immediately following the RTP packet.
+ * Callers MUST ensure that this much writable memory is available in
+ * the buffer that holds the RTP packet.
+ *
+ * @param ctx is the SRTP context to use in processing the packet.
+ *
+ * @param rtp_hdr is a pointer to the RTP packet (before the call); after
+ * the function returns, it points to the srtp packet.
+ *
+ * @param len_ptr is a pointer to the length in octets of the complete
+ * RTP packet (header and body) before the function call, and of the
+ * complete SRTP packet after the call, if srtp_err_status_ok was returned.
+ * Otherwise, the value of the data to which it points is undefined.
+ *
+ * @return
+ *    - srtp_err_status_ok            no problems
+ *    - srtp_err_status_replay_fail   rtp sequence number was non-increasing
+ *    - @e other                 failure in cryptographic mechanisms
+ */
+srtp_err_status_t srtp_protect(srtp_t ctx, void *rtp_hdr, int *len_ptr);
+
+/**
+ * @brief srtp_protect_mki() is the Secure RTP sender-side packet processing
+ * function that can utilize MKI.
+ *
+ * The function call srtp_protect(ctx, rtp_hdr, len_ptr) applies SRTP
+ * protection to the RTP packet rtp_hdr (which has length *len_ptr) using
+ * the SRTP context ctx.  If srtp_err_status_ok is returned, then rtp_hdr
+ * points to the resulting SRTP packet and *len_ptr is the number of
+ * octets in that packet; otherwise, no assumptions should be made
+ * about the value of either data elements.
+ *
+ * The sequence numbers of the RTP packets presented to this function
+ * need not be consecutive, but they @b must be out of order by less
+ * than 2^15 = 32,768 packets.
+ *
+ * @warning This function assumes that it can write the authentication
+ * tag into the location in memory immediately following the RTP
+ * packet, and assumes that the RTP packet is aligned on a 32-bit
+ * boundary.
+ *
+ * @warning This function assumes that it can write SRTP_MAX_TRAILER_LEN
+ * into the location in memory immediately following the RTP packet.
+ * Callers MUST ensure that this much writable memory is available in
+ * the buffer that holds the RTP packet.
+ *
+ * @param ctx is the SRTP context to use in processing the packet.
+ *
+ * @param rtp_hdr is a pointer to the RTP packet (before the call); after
+ * the function returns, it points to the srtp packet.
+ *
+ * @param pkt_octet_len is a pointer to the length in octets of the complete
+ * RTP packet (header and body) before the function call, and of the
+ * complete SRTP packet after the call, if srtp_err_status_ok was returned.
+ * Otherwise, the value of the data to which it points is undefined.
+ *
+ * @param use_mki is a boolean to tell the system if mki is being used.  If
+ * set to false then will use the first set of session keys.  If set to true
+ * will
+ * use the session keys identified by the mki_index
+ *
+ * @param mki_index integer value specifying which set of session keys should be
+ * used if use_mki is set to true.
+ *
+ * @return
+ *    - srtp_err_status_ok            no problems
+ *    - srtp_err_status_replay_fail   rtp sequence number was non-increasing
+ *    - @e other                 failure in cryptographic mechanisms
+ */
+srtp_err_status_t srtp_protect_mki(srtp_ctx_t *ctx,
+                                   void *rtp_hdr,
+                                   int *pkt_octet_len,
+                                   unsigned int use_mki,
+                                   unsigned int mki_index);
+
+/**
+ * @brief srtp_unprotect() is the Secure RTP receiver-side packet
+ * processing function.
+ *
+ * The function call srtp_unprotect(ctx, srtp_hdr, len_ptr) verifies
+ * the Secure RTP protection of the SRTP packet pointed to by srtp_hdr
+ * (which has length *len_ptr), using the SRTP context ctx.  If
+ * srtp_err_status_ok is returned, then srtp_hdr points to the resulting
+ * RTP packet and *len_ptr is the number of octets in that packet;
+ * otherwise, no assumptions should be made about the value of either
+ * data elements.
+ *
+ * The sequence numbers of the RTP packets presented to this function
+ * need not be consecutive, but they @b must be out of order by less
+ * than 2^15 = 32,768 packets.
+ *
+ * @warning This function assumes that the SRTP packet is aligned on a
+ * 32-bit boundary.
+ *
+ * @param ctx is the SRTP session which applies to the particular packet.
+ *
+ * @param srtp_hdr is a pointer to the header of the SRTP packet
+ * (before the call).  after the function returns, it points to the
+ * rtp packet if srtp_err_status_ok was returned; otherwise, the value of
+ * the data to which it points is undefined.
+ *
+ * @param len_ptr is a pointer to the length in octets of the complete
+ * srtp packet (header and body) before the function call, and of the
+ * complete rtp packet after the call, if srtp_err_status_ok was returned.
+ * Otherwise, the value of the data to which it points is undefined.
+ *
+ * @return
+ *    - srtp_err_status_ok          if the RTP packet is valid.
+ *    - srtp_err_status_auth_fail   if the SRTP packet failed the message
+ *                                  authentication check.
+ *    - srtp_err_status_replay_fail if the SRTP packet is a replay (e.g. packet
+ *                                  has already been processed and accepted).
+ *    - [other]  if there has been an error in the cryptographic mechanisms.
+ *
+ */
+srtp_err_status_t srtp_unprotect(srtp_t ctx, void *srtp_hdr, int *len_ptr);
+
+/**
+ * @brief srtp_unprotect_mki() is the Secure RTP receiver-side packet
+ * processing function that checks for MKI.
+ *
+ * The function call srtp_unprotect(ctx, srtp_hdr, len_ptr) verifies
+ * the Secure RTP protection of the SRTP packet pointed to by srtp_hdr
+ * (which has length *len_ptr), using the SRTP context ctx.  If
+ * srtp_err_status_ok is returned, then srtp_hdr points to the resulting
+ * RTP packet and *len_ptr is the number of octets in that packet;
+ * otherwise, no assumptions should be made about the value of either
+ * data elements.
+ *
+ * The sequence numbers of the RTP packets presented to this function
+ * need not be consecutive, but they @b must be out of order by less
+ * than 2^15 = 32,768 packets.
+ *
+ * @warning This function assumes that the SRTP packet is aligned on a
+ * 32-bit boundary.
+ *
+ * @param ctx is the SRTP session which applies to the particular packet.
+ *
+ * @param srtp_hdr is a pointer to the header of the SRTP packet
+ * (before the call).  after the function returns, it points to the
+ * rtp packet if srtp_err_status_ok was returned; otherwise, the value of
+ * the data to which it points is undefined.
+ *
+ * @param len_ptr is a pointer to the length in octets of the complete
+ * srtp packet (header and body) before the function call, and of the
+ * complete rtp packet after the call, if srtp_err_status_ok was returned.
+ * Otherwise, the value of the data to which it points is undefined.
+ *
+ * @param use_mki is a boolean to tell the system if mki is being used.  If
+ * set to false then will use the first set of session keys.  If set to true
+ * will
+ * use the session keys identified by the mki_index
+ *
+ * @return
+ *    - srtp_err_status_ok          if the RTP packet is valid.
+ *    - srtp_err_status_auth_fail   if the SRTP packet failed the message
+ *                                  authentication check.
+ *    - srtp_err_status_replay_fail if the SRTP packet is a replay (e.g. packet
+ *                                  has already been processed and accepted).
+ *    - srtp_err_status_bad_mki if the MKI in the packet is not a known MKI id
+ *    - [other]  if there has been an error in the cryptographic mechanisms.
+ *
+ */
+srtp_err_status_t srtp_unprotect_mki(srtp_t ctx,
+                                     void *srtp_hdr,
+                                     int *len_ptr,
+                                     unsigned int use_mki);
+
+/**
+ * @brief srtp_create() allocates and initializes an SRTP session.
+
+ * The function call srtp_create(session, policy) allocates and
+ * initializes an SRTP session context, applying the given policy.
+ *
+ * @param session is a pointer to the SRTP session to which the policy is
+ * to be added.
+ *
+ * @param policy is the srtp_policy_t struct that describes the policy
+ * for the session.  The struct may be a single element, or it may be
+ * the head of a list, in which case each element of the list is
+ * processed.  It may also be NULL, in which case streams should be added
+ * later using srtp_add_stream().  The final element of the list @b must
+ * have its `next' field set to NULL.
+ *
+ * @return
+ *    - srtp_err_status_ok           if creation succeded.
+ *    - srtp_err_status_alloc_fail   if allocation failed.
+ *    - srtp_err_status_init_fail    if initialization failed.
+ */
+srtp_err_status_t srtp_create(srtp_t *session, const srtp_policy_t *policy);
+
+/**
+ * @brief srtp_add_stream() allocates and initializes an SRTP stream
+ * within a given SRTP session.
+ *
+ * The function call srtp_add_stream(session, policy) allocates and
+ * initializes a new SRTP stream within a given, previously created
+ * session, applying the policy given as the other argument to that
+ * stream.
+ *
+ * @return values:
+ *    - srtp_err_status_ok           if stream creation succeded.
+ *    - srtp_err_status_alloc_fail   if stream allocation failed
+ *    - srtp_err_status_init_fail    if stream initialization failed.
+ */
+srtp_err_status_t srtp_add_stream(srtp_t session, const srtp_policy_t *policy);
+
+/**
+ * @brief srtp_remove_stream() deallocates an SRTP stream.
+ *
+ * The function call srtp_remove_stream(session, ssrc) removes
+ * the SRTP stream with the SSRC value ssrc from the SRTP session
+ * context given by the argument session.
+ *
+ * @param session is the SRTP session from which the stream
+ *        will be removed.
+ *
+ * @param ssrc is the SSRC value of the stream to be removed
+ *             in network byte order.
+ *
+ * @warning Wildcard SSRC values cannot be removed from a
+ *          session.
+ *
+ * @return
+ *    - srtp_err_status_ok     if the stream deallocation succeded.
+ *    - [other]           otherwise.
+ *
+ */
+srtp_err_status_t srtp_remove_stream(srtp_t session, unsigned int ssrc);
+
+/**
+ * @brief srtp_update() udpates all streams in the session.
+ *
+ * The function call srtp_update(session, policy) updates
+ * all the streams in the session applying the given policy
+ * and key. The exsisting ROC value of all streams will be
+ * preserved.
+ *
+ * @param session is the SRTP session that contains the streams
+ *        to be updated.
+ *
+ * @param policy is the srtp_policy_t struct that describes the policy
+ * for the session.  The struct may be a single element, or it may be
+ * the head of a list, in which case each element of the list is
+ * processed. The final element of the list @b must
+ * have its `next' field set to NULL.
+ *
+ * @return
+ *    - srtp_err_status_ok           if stream creation succeded.
+ *    - srtp_err_status_alloc_fail   if stream allocation failed
+ *    - srtp_err_status_init_fail    if stream initialization failed.
+ *    - [other]                 otherwise.
+ *
+ */
+srtp_err_status_t srtp_update(srtp_t session, const srtp_policy_t *policy);
+
+/**
+ * @brief srtp_update_stream() udpates a SRTP stream.
+ *
+ * The function call srtp_update_stream(session, policy) updates
+ * the stream(s) in the session that match applying the given
+ * policy and key. The exsisting ROC value of all stream(s) will
+ * be preserved.
+ *
+ * @param session is the SRTP session that contains the streams
+ *        to be updated.
+ *
+ * @param policy is the srtp_policy_t struct that describes the policy
+ * for the session.
+ *
+ * @return
+ *    - srtp_err_status_ok           if stream creation succeded.
+ *    - srtp_err_status_alloc_fail   if stream allocation failed
+ *    - srtp_err_status_init_fail    if stream initialization failed.
+ *    - [other]                      otherwise.
+ *
+ */
+srtp_err_status_t srtp_update_stream(srtp_t session,
+                                     const srtp_policy_t *policy);
+
+/**
+ * @brief srtp_crypto_policy_set_rtp_default() sets a crypto policy
+ * structure to the SRTP default policy for RTP protection.
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_rtp_default(&p) sets the
+ * srtp_crypto_policy_t at location p to the SRTP default policy for RTP
+ * protection, as defined in the specification.  This function is a
+ * convenience that helps to avoid dealing directly with the policy
+ * data structure.  You are encouraged to initialize policy elements
+ * with this function call.  Doing so may allow your code to be
+ * forward compatible with later versions of libSRTP that include more
+ * elements in the srtp_crypto_policy_t datatype.
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_rtp_default(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_rtcp_default() sets a crypto policy
+ * structure to the SRTP default policy for RTCP protection.
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_rtcp_default(&p) sets the
+ * srtp_crypto_policy_t at location p to the SRTP default policy for RTCP
+ * protection, as defined in the specification.  This function is a
+ * convenience that helps to avoid dealing directly with the policy
+ * data structure.  You are encouraged to initialize policy elements
+ * with this function call.  Doing so may allow your code to be
+ * forward compatible with later versions of libSRTP that include more
+ * elements in the srtp_crypto_policy_t datatype.
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_rtcp_default(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_aes_cm_128_hmac_sha1_80() sets a crypto
+ * policy structure to the SRTP default policy for RTP protection.
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function srtp_crypto_policy_set_aes_cm_128_hmac_sha1_80() is a
+ * synonym for srtp_crypto_policy_set_rtp_default().  It conforms to the
+ * naming convention used in RFC 4568 (SDP Security Descriptions for
+ * Media Streams).
+ *
+ * @return void.
+ *
+ */
+#define srtp_crypto_policy_set_aes_cm_128_hmac_sha1_80(p)                      \
+    srtp_crypto_policy_set_rtp_default(p)
+
+/**
+ * @brief srtp_crypto_policy_set_aes_cm_128_hmac_sha1_32() sets a crypto
+ * policy structure to a short-authentication tag policy
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_aes_cm_128_hmac_sha1_32(&p)
+ * sets the srtp_crypto_policy_t at location p to use policy
+ * AES_CM_128_HMAC_SHA1_32 as defined in RFC 4568.
+ * This policy uses AES-128
+ * Counter Mode encryption and HMAC-SHA1 authentication, with an
+ * authentication tag that is only 32 bits long.  This length is
+ * considered adequate only for protecting audio and video media that
+ * use a stateless playback function.  See Section 7.5 of RFC 3711
+ * (http://www.ietf.org/rfc/rfc3711.txt).
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @warning This crypto policy is intended for use in SRTP, but not in
+ * SRTCP.  It is recommended that a policy that uses longer
+ * authentication tags be used for SRTCP.  See Section 7.5 of RFC 3711
+ * (http://www.ietf.org/rfc/rfc3711.txt).
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_aes_cm_128_hmac_sha1_32(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_aes_cm_128_null_auth() sets a crypto
+ * policy structure to an encryption-only policy
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_aes_cm_128_null_auth(&p) sets
+ * the srtp_crypto_policy_t at location p to use the SRTP default cipher
+ * (AES-128 Counter Mode), but to use no authentication method.  This
+ * policy is NOT RECOMMENDED unless it is unavoidable; see Section 7.5
+ * of RFC 3711 (http://www.ietf.org/rfc/rfc3711.txt).
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @warning This policy is NOT RECOMMENDED for SRTP unless it is
+ * unavoidable, and it is NOT RECOMMENDED at all for SRTCP; see
+ * Section 7.5 of RFC 3711 (http://www.ietf.org/rfc/rfc3711.txt).
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_aes_cm_128_null_auth(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_null_cipher_hmac_sha1_80() sets a crypto
+ * policy structure to an authentication-only policy
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_null_cipher_hmac_sha1_80(&p)
+ * sets the srtp_crypto_policy_t at location p to use HMAC-SHA1 with an 80
+ * bit authentication tag to provide message authentication, but to
+ * use no encryption.  This policy is NOT RECOMMENDED for SRTP unless
+ * there is a requirement to forego encryption.
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @warning This policy is NOT RECOMMENDED for SRTP unless there is a
+ * requirement to forego encryption.
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_null_cipher_hmac_sha1_80(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_null_cipher_hmac_null() sets a crypto
+ * policy structure to use no encryption or authentication.
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_null_cipher_hmac_null(&p)
+ * sets the srtp_crypto_policy_t at location p to use no encryption and
+ * no authentication.  This policy should only be used for testing and
+ * troubleshootingl.
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @warning This policy is NOT RECOMMENDED for SRTP unless there is a
+ * requirement to forego encryption and authentication.
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_null_cipher_hmac_null(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_aes_cm_256_hmac_sha1_80() sets a crypto
+ * policy structure to a encryption and authentication policy using AES-256
+ * for RTP protection.
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_aes_cm_256_hmac_sha1_80(&p)
+ * sets the srtp_crypto_policy_t at location p to use policy
+ * AES_CM_256_HMAC_SHA1_80 as defined in RFC 6188.  This policy uses AES-256
+ * Counter Mode encryption and HMAC-SHA1 authentication, with an 80 bit
+ * authentication tag.
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_aes_cm_256_hmac_sha1_80(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_aes_cm_256_hmac_sha1_32() sets a crypto
+ * policy structure to a short-authentication tag policy using AES-256
+ * encryption.
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_aes_cm_256_hmac_sha1_32(&p)
+ * sets the srtp_crypto_policy_t at location p to use policy
+ * AES_CM_256_HMAC_SHA1_32 as defined in RFC 6188.  This policy uses AES-256
+ * Counter Mode encryption and HMAC-SHA1 authentication, with an
+ * authentication tag that is only 32 bits long.  This length is
+ * considered adequate only for protecting audio and video media that
+ * use a stateless playback function.  See Section 7.5 of RFC 3711
+ * (http://www.ietf.org/rfc/rfc3711.txt).
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @warning This crypto policy is intended for use in SRTP, but not in
+ * SRTCP.  It is recommended that a policy that uses longer
+ * authentication tags be used for SRTCP.  See Section 7.5 of RFC 3711
+ * (http://www.ietf.org/rfc/rfc3711.txt).
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_aes_cm_256_hmac_sha1_32(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_aes_cm_256_null_auth() sets a crypto
+ * policy structure to an encryption-only policy
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_aes_cm_256_null_auth(&p) sets
+ * the srtp_crypto_policy_t at location p to use the SRTP default cipher
+ * (AES-256 Counter Mode), but to use no authentication method.  This
+ * policy is NOT RECOMMENDED unless it is unavoidable; see Section 7.5
+ * of RFC 3711 (http://www.ietf.org/rfc/rfc3711.txt).
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @warning This policy is NOT RECOMMENDED for SRTP unless it is
+ * unavoidable, and it is NOT RECOMMENDED at all for SRTCP; see
+ * Section 7.5 of RFC 3711 (http://www.ietf.org/rfc/rfc3711.txt).
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_aes_cm_256_null_auth(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_aes_cm_192_hmac_sha1_80() sets a crypto
+ * policy structure to a encryption and authentication policy using AES-192
+ * for RTP protection.
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_aes_cm_192_hmac_sha1_80(&p)
+ * sets the srtp_crypto_policy_t at location p to use policy
+ * AES_CM_192_HMAC_SHA1_80 as defined in RFC 6188.  This policy uses AES-192
+ * Counter Mode encryption and HMAC-SHA1 authentication, with an 80 bit
+ * authentication tag.
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_aes_cm_192_hmac_sha1_80(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_aes_cm_192_hmac_sha1_32() sets a crypto
+ * policy structure to a short-authentication tag policy using AES-192
+ * encryption.
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_aes_cm_192_hmac_sha1_32(&p)
+ * sets the srtp_crypto_policy_t at location p to use policy
+ * AES_CM_192_HMAC_SHA1_32 as defined in RFC 6188.  This policy uses AES-192
+ * Counter Mode encryption and HMAC-SHA1 authentication, with an
+ * authentication tag that is only 32 bits long.  This length is
+ * considered adequate only for protecting audio and video media that
+ * use a stateless playback function.  See Section 7.5 of RFC 3711
+ * (http://www.ietf.org/rfc/rfc3711.txt).
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @warning This crypto policy is intended for use in SRTP, but not in
+ * SRTCP.  It is recommended that a policy that uses longer
+ * authentication tags be used for SRTCP.  See Section 7.5 of RFC 3711
+ * (http://www.ietf.org/rfc/rfc3711.txt).
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_aes_cm_192_hmac_sha1_32(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_aes_cm_192_null_auth() sets a crypto
+ * policy structure to an encryption-only policy
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_aes_cm_192_null_auth(&p) sets
+ * the srtp_crypto_policy_t at location p to use the SRTP default cipher
+ * (AES-192 Counter Mode), but to use no authentication method.  This
+ * policy is NOT RECOMMENDED unless it is unavoidable; see Section 7.5
+ * of RFC 3711 (http://www.ietf.org/rfc/rfc3711.txt).
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @warning This policy is NOT RECOMMENDED for SRTP unless it is
+ * unavoidable, and it is NOT RECOMMENDED at all for SRTCP; see
+ * Section 7.5 of RFC 3711 (http://www.ietf.org/rfc/rfc3711.txt).
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_aes_cm_192_null_auth(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_aes_gcm_128_8_auth() sets a crypto
+ * policy structure to an AEAD encryption policy.
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_aes_gcm_128_8_auth(&p) sets
+ * the srtp_crypto_policy_t at location p to use the SRTP default cipher
+ * (AES-128 Galois Counter Mode) with 8 octet auth tag.  This
+ * policy applies confidentiality and authentication to both the
+ * RTP and RTCP packets.
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_aes_gcm_128_8_auth(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_aes_gcm_256_8_auth() sets a crypto
+ * policy structure to an AEAD encryption policy
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_aes_gcm_256_8_auth(&p) sets
+ * the srtp_crypto_policy_t at location p to use the SRTP default cipher
+ * (AES-256 Galois Counter Mode) with 8 octet auth tag.  This
+ * policy applies confidentiality and authentication to both the
+ * RTP and RTCP packets.
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_aes_gcm_256_8_auth(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_aes_gcm_128_8_only_auth() sets a crypto
+ * policy structure to an AEAD authentication-only policy
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_aes_gcm_128_8_only_auth(&p) sets
+ * the srtp_crypto_policy_t at location p to use the SRTP default cipher
+ * (AES-128 Galois Counter Mode) with 8 octet auth tag.  This policy
+ * applies confidentiality and authentication to the RTP packets,
+ * but only authentication to the RTCP packets.
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_aes_gcm_128_8_only_auth(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_aes_gcm_256_8_only_auth() sets a crypto
+ * policy structure to an AEAD authentication-only policy
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_aes_gcm_256_8_only_auth(&p) sets
+ * the srtp_crypto_policy_t at location p to use the SRTP default cipher
+ * (AES-256 Galois Counter Mode) with 8 octet auth tag.  This policy
+ * applies confidentiality and authentication to the RTP packets,
+ * but only authentication to the RTCP packets.
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_aes_gcm_256_8_only_auth(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_aes_gcm_128_16_auth() sets a crypto
+ * policy structure to an AEAD encryption policy.
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_aes_gcm_128_16_auth(&p) sets
+ * the srtp_crypto_policy_t at location p to use the SRTP default cipher
+ * (AES-128 Galois Counter Mode) with 16 octet auth tag.  This
+ * policy applies confidentiality and authentication to both the
+ * RTP and RTCP packets.
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_aes_gcm_128_16_auth(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_crypto_policy_set_aes_gcm_256_16_auth() sets a crypto
+ * policy structure to an AEAD encryption policy
+ *
+ * @param p is a pointer to the policy structure to be set
+ *
+ * The function call srtp_crypto_policy_set_aes_gcm_256_16_auth(&p) sets
+ * the srtp_crypto_policy_t at location p to use the SRTP default cipher
+ * (AES-256 Galois Counter Mode) with 16 octet auth tag.  This
+ * policy applies confidentiality and authentication to both the
+ * RTP and RTCP packets.
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @return void.
+ *
+ */
+void srtp_crypto_policy_set_aes_gcm_256_16_auth(srtp_crypto_policy_t *p);
+
+/**
+ * @brief srtp_dealloc() deallocates storage for an SRTP session
+ * context.
+ *
+ * The function call srtp_dealloc(s) deallocates storage for the
+ * SRTP session context s.  This function should be called no more
+ * than one time for each of the contexts allocated by the function
+ * srtp_create().
+ *
+ * @param s is the srtp_t for the session to be deallocated.
+ *
+ * @return
+ *    - srtp_err_status_ok             if there no problems.
+ *    - srtp_err_status_dealloc_fail   a memory deallocation failure occured.
+ */
+srtp_err_status_t srtp_dealloc(srtp_t s);
+
+/*
+ * @brief identifies a particular SRTP profile
+ *
+ * An srtp_profile_t enumeration is used to identify a particular SRTP
+ * profile (that is, a set of algorithms and parameters). These profiles
+ * are defined for DTLS-SRTP:
+ * https://www.iana.org/assignments/srtp-protection/srtp-protection.xhtml
+ */
+typedef enum {
+    srtp_profile_reserved = 0,
+    srtp_profile_aes128_cm_sha1_80 = 1,
+    srtp_profile_aes128_cm_sha1_32 = 2,
+    srtp_profile_null_sha1_80 = 5,
+    srtp_profile_null_sha1_32 = 6,
+    srtp_profile_aead_aes_128_gcm = 7,
+    srtp_profile_aead_aes_256_gcm = 8,
+} srtp_profile_t;
+
+/**
+ * @brief srtp_crypto_policy_set_from_profile_for_rtp() sets a crypto policy
+ * structure to the appropriate value for RTP based on an srtp_profile_t
+ *
+ * @param policy is a pointer to the policy structure to be set
+ *
+ * @param profile is an enumeration for the policy to be set
+ *
+ * The function call srtp_crypto_policy_set_rtp_default(&policy, profile)
+ * sets the srtp_crypto_policy_t at location policy to the policy for RTP
+ * protection, as defined by the srtp_profile_t profile.
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @return values
+ *     - srtp_err_status_ok         no problems were encountered
+ *     - srtp_err_status_bad_param  the profile is not supported
+ *
+ */
+srtp_err_status_t srtp_crypto_policy_set_from_profile_for_rtp(
+    srtp_crypto_policy_t *policy,
+    srtp_profile_t profile);
+
+/**
+ * @brief srtp_crypto_policy_set_from_profile_for_rtcp() sets a crypto policy
+ * structure to the appropriate value for RTCP based on an srtp_profile_t
+ *
+ * @param policy is a pointer to the policy structure to be set
+ *
+ * @param profile is an enumeration for the policy to be set
+ *
+ * The function call srtp_crypto_policy_set_rtcp_default(&policy, profile)
+ * sets the srtp_crypto_policy_t at location policy to the policy for RTCP
+ * protection, as defined by the srtp_profile_t profile.
+ *
+ * This function is a convenience that helps to avoid dealing directly
+ * with the policy data structure.  You are encouraged to initialize
+ * policy elements with this function call.  Doing so may allow your
+ * code to be forward compatible with later versions of libSRTP that
+ * include more elements in the srtp_crypto_policy_t datatype.
+ *
+ * @return values
+ *     - srtp_err_status_ok         no problems were encountered
+ *     - srtp_err_status_bad_param  the profile is not supported
+ *
+ */
+srtp_err_status_t srtp_crypto_policy_set_from_profile_for_rtcp(
+    srtp_crypto_policy_t *policy,
+    srtp_profile_t profile);
+
+/**
+ * @brief returns the master key length for a given SRTP profile
+ */
+unsigned int srtp_profile_get_master_key_length(srtp_profile_t profile);
+
+/**
+ * @brief returns the master salt length for a given SRTP profile
+ */
+unsigned int srtp_profile_get_master_salt_length(srtp_profile_t profile);
+
+/**
+ * @brief appends the salt to the key
+ *
+ * The function call srtp_append_salt_to_key(k, klen, s, slen)
+ * copies the string s to the location at klen bytes following
+ * the location k.
+ *
+ * @warning There must be at least bytes_in_salt + bytes_in_key bytes
+ *          available at the location pointed to by key.
+ *
+ */
+void srtp_append_salt_to_key(unsigned char *key,
+                             unsigned int bytes_in_key,
+                             unsigned char *salt,
+                             unsigned int bytes_in_salt);
+
+/**
+ * @}
+ */
+
+/**
+ * @defgroup SRTCP Secure RTCP
+ * @ingroup  SRTP
+ *
+ * @brief Secure RTCP functions are used to protect RTCP traffic.
+ *
+ * RTCP is the control protocol for RTP.  libSRTP protects RTCP
+ * traffic in much the same way as it does RTP traffic.  The function
+ * srtp_protect_rtcp() applies cryptographic protections to outbound
+ * RTCP packets, and srtp_unprotect_rtcp() verifies the protections on
+ * inbound RTCP packets.
+ *
+ * A note on the naming convention: srtp_protect_rtcp() has an srtp_t
+ * as its first argument, and thus has `srtp_' as its prefix.  The
+ * trailing `_rtcp' indicates the protocol on which it acts.
+ *
+ * @{
+ */
+
+/**
+ * @brief srtp_protect_rtcp() is the Secure RTCP sender-side packet
+ * processing function.
+ *
+ * The function call srtp_protect_rtcp(ctx, rtp_hdr, len_ptr) applies
+ * SRTCP protection to the RTCP packet rtcp_hdr (which has length
+ * *len_ptr) using the SRTP session context ctx.  If srtp_err_status_ok is
+ * returned, then rtp_hdr points to the resulting SRTCP packet and
+ * *len_ptr is the number of octets in that packet; otherwise, no
+ * assumptions should be made about the value of either data elements.
+ *
+ * @warning This function assumes that it can write the authentication
+ * tag into the location in memory immediately following the RTCP
+ * packet, and assumes that the RTCP packet is aligned on a 32-bit
+ * boundary.
+ *
+ * @warning This function assumes that it can write SRTP_MAX_TRAILER_LEN+4
+ * into the location in memory immediately following the RTCP packet.
+ * Callers MUST ensure that this much writable memory is available in
+ * the buffer that holds the RTCP packet.
+ *
+ * @param ctx is the SRTP context to use in processing the packet.
+ *
+ * @param rtcp_hdr is a pointer to the RTCP packet (before the call); after
+ * the function returns, it points to the srtp packet.
+ *
+ * @param pkt_octet_len is a pointer to the length in octets of the
+ * complete RTCP packet (header and body) before the function call,
+ * and of the complete SRTCP packet after the call, if srtp_err_status_ok
+ * was returned.  Otherwise, the value of the data to which it points
+ * is undefined.
+ *
+ * @return
+ *    - srtp_err_status_ok            if there were no problems.
+ *    - [other]                  if there was a failure in
+ *                               the cryptographic mechanisms.
+ */
+srtp_err_status_t srtp_protect_rtcp(srtp_t ctx,
+                                    void *rtcp_hdr,
+                                    int *pkt_octet_len);
+
+/**
+ * @brief srtp_protect_rtcp_mki() is the Secure RTCP sender-side packet
+ * processing function that can utilize mki.
+ *
+ * The function call srtp_protect_rtcp(ctx, rtp_hdr, len_ptr) applies
+ * SRTCP protection to the RTCP packet rtcp_hdr (which has length
+ * *len_ptr) using the SRTP session context ctx.  If srtp_err_status_ok is
+ * returned, then rtp_hdr points to the resulting SRTCP packet and
+ * *len_ptr is the number of octets in that packet; otherwise, no
+ * assumptions should be made about the value of either data elements.
+ *
+ * @warning This function assumes that it can write the authentication
+ * tag into the location in memory immediately following the RTCP
+ * packet, and assumes that the RTCP packet is aligned on a 32-bit
+ * boundary.
+ *
+ * @warning This function assumes that it can write SRTP_MAX_TRAILER_LEN+4
+ * into the location in memory immediately following the RTCP packet.
+ * Callers MUST ensure that this much writable memory is available in
+ * the buffer that holds the RTCP packet.
+ *
+ * @param ctx is the SRTP context to use in processing the packet.
+ *
+ * @param rtcp_hdr is a pointer to the RTCP packet (before the call); after
+ * the function returns, it points to the srtp packet.
+ *
+ * @param pkt_octet_len is a pointer to the length in octets of the
+ * complete RTCP packet (header and body) before the function call,
+ * and of the complete SRTCP packet after the call, if srtp_err_status_ok
+ * was returned.  Otherwise, the value of the data to which it points
+ * is undefined.
+ *
+ * @param use_mki is a boolean to tell the system if mki is being used.  If
+ * set to false then will use the first set of session keys.  If set to true
+ * will
+ * use the session keys identified by the mki_index
+ *
+ * @param mki_index integer value specifying which set of session kesy should be
+ * used if use_mki is set to true.
+ *
+ * @return
+ *    - srtp_err_status_ok            if there were no problems.
+ *    - [other]                  if there was a failure in
+ *                               the cryptographic mechanisms.
+ */
+srtp_err_status_t srtp_protect_rtcp_mki(srtp_t ctx,
+                                        void *rtcp_hdr,
+                                        int *pkt_octet_len,
+                                        unsigned int use_mki,
+                                        unsigned int mki_index);
+
+/**
+ * @brief srtp_unprotect_rtcp() is the Secure RTCP receiver-side packet
+ * processing function.
+ *
+ * The function call srtp_unprotect_rtcp(ctx, srtp_hdr, len_ptr)
+ * verifies the Secure RTCP protection of the SRTCP packet pointed to
+ * by srtcp_hdr (which has length *len_ptr), using the SRTP session
+ * context ctx.  If srtp_err_status_ok is returned, then srtcp_hdr points
+ * to the resulting RTCP packet and *len_ptr is the number of octets
+ * in that packet; otherwise, no assumptions should be made about the
+ * value of either data elements.
+ *
+ * @warning This function assumes that the SRTCP packet is aligned on a
+ * 32-bit boundary.
+ *
+ * @param ctx is a pointer to the srtp_t which applies to the
+ * particular packet.
+ *
+ * @param srtcp_hdr is a pointer to the header of the SRTCP packet
+ * (before the call).  After the function returns, it points to the
+ * rtp packet if srtp_err_status_ok was returned; otherwise, the value of
+ * the data to which it points is undefined.
+ *
+ * @param pkt_octet_len is a pointer to the length in octets of the
+ * complete SRTCP packet (header and body) before the function call,
+ * and of the complete rtp packet after the call, if srtp_err_status_ok was
+ * returned.  Otherwise, the value of the data to which it points is
+ * undefined.
+ *
+ * @return
+ *    - srtp_err_status_ok          if the RTCP packet is valid.
+ *    - srtp_err_status_auth_fail   if the SRTCP packet failed the message
+ *                             authentication check.
+ *    - srtp_err_status_replay_fail if the SRTCP packet is a replay (e.g. has
+ *                             already been processed and accepted).
+ *    - [other]  if there has been an error in the cryptographic mechanisms.
+ *
+ */
+srtp_err_status_t srtp_unprotect_rtcp(srtp_t ctx,
+                                      void *srtcp_hdr,
+                                      int *pkt_octet_len);
+
+/**
+ * @brief srtp_unprotect_rtcp() is the Secure RTCP receiver-side packet
+ * processing function.
+ *
+ * The function call srtp_unprotect_rtcp(ctx, srtp_hdr, len_ptr)
+ * verifies the Secure RTCP protection of the SRTCP packet pointed to
+ * by srtcp_hdr (which has length *len_ptr), using the SRTP session
+ * context ctx.  If srtp_err_status_ok is returned, then srtcp_hdr points
+ * to the resulting RTCP packet and *len_ptr is the number of octets
+ * in that packet; otherwise, no assumptions should be made about the
+ * value of either data elements.
+ *
+ * @warning This function assumes that the SRTCP packet is aligned on a
+ * 32-bit boundary.
+ *
+ * @param ctx is a pointer to the srtp_t which applies to the
+ * particular packet.
+ *
+ * @param srtcp_hdr is a pointer to the header of the SRTCP packet
+ * (before the call).  After the function returns, it points to the
+ * rtp packet if srtp_err_status_ok was returned; otherwise, the value of
+ * the data to which it points is undefined.
+ *
+ * @param pkt_octet_len is a pointer to the length in octets of the
+ * complete SRTCP packet (header and body) before the function call,
+ * and of the complete rtp packet after the call, if srtp_err_status_ok was
+ * returned.  Otherwise, the value of the data to which it points is
+ * undefined.
+ *
+ * @param use_mki is a boolean to tell the system if mki is being used.  If
+ * set to false then will use the first set of session keys.  If set to true
+ * will use the session keys identified by the mki_index
+ *
+ * @return
+ *    - srtp_err_status_ok          if the RTCP packet is valid.
+ *    - srtp_err_status_auth_fail   if the SRTCP packet failed the message
+ *                                  authentication check.
+ *    - srtp_err_status_replay_fail if the SRTCP packet is a replay (e.g. has
+ *                                  already been processed and accepted).
+ *    - srtp_err_status_bad_mki     if the MKI in the packet is not a known MKI
+ *                                  id
+ *    - [other]                     if there has been an error in the
+ *                                  cryptographic mechanisms.
+ *
+ */
+srtp_err_status_t srtp_unprotect_rtcp_mki(srtp_t ctx,
+                                          void *srtcp_hdr,
+                                          int *pkt_octet_len,
+                                          unsigned int use_mki);
+
+/**
+ * @}
+ */
+
+/**
+ * @defgroup User data associated to a SRTP session.
+ * @ingroup  SRTP
+ *
+ * @brief Store custom user data within a SRTP session.
+ *
+ * @{
+ */
+
+/**
+ * @brief srtp_set_user_data() stores the given pointer into the SRTP
+ * session for later retrieval.
+ *
+ * @param ctx is the srtp_t context in which the given data pointer is
+ * stored.
+ *
+ * @param data is a pointer to the custom information (struct, function,
+ * etc) associated with the SRTP session.
+ *
+ * @return void.
+ *
+ */
+void srtp_set_user_data(srtp_t ctx, void *data);
+
+/**
+ * @brief srtp_get_user_data() retrieves the pointer to the custom data
+ * previously stored with srtp_set_user_data().
+ *
+ * This function is mostly useful for retrieving data associated to a
+ * SRTP session when an event fires. The user can then get such a custom
+ * data by calling this function with the session field of the
+ * srtp_event_data_t struct as argument.
+ *
+ * @param ctx is the srtp_t context in which the given data pointer was
+ * stored.
+ *
+ * @return void* pointer to the user data.
+ *
+ */
+void *srtp_get_user_data(srtp_t ctx);
+
+/**
+ * @}
+ */
+
+/**
+ * @defgroup SRTPevents SRTP events and callbacks
+ * @ingroup  SRTP
+ *
+ * @brief libSRTP can use a user-provided callback function to
+ * handle events.
+ *
+ *
+ * libSRTP allows a user to provide a callback function to handle
+ * events that need to be dealt with outside of the data plane (see
+ * the enum srtp_event_t for a description of these events).  Dealing
+ * with these events is not a strict necessity; they are not
+ * security-critical, but the application may suffer if they are not
+ * handled.  The function srtp_set_event_handler() is used to provide
+ * the callback function.
+ *
+ * A default event handler that merely reports on the events as they
+ * happen is included.  It is also possible to set the event handler
+ * function to NULL, in which case all events will just be silently
+ * ignored.
+ *
+ * @{
+ */
+
+/**
+ * @brief srtp_event_t defines events that need to be handled
+ *
+ * The enum srtp_event_t defines events that need to be handled
+ * outside the `data plane', such as SSRC collisions and
+ * key expirations.
+ *
+ * When a key expires or the maximum number of packets has been
+ * reached, an SRTP stream will enter an `expired' state in which no
+ * more packets can be protected or unprotected.  When this happens,
+ * it is likely that you will want to either deallocate the stream
+ * (using srtp_remove_stream()), and possibly allocate a new one.
+ *
+ * When an SRTP stream expires, the other streams in the same session
+ * are unaffected, unless key sharing is used by that stream.  In the
+ * latter case, all of the streams in the session will expire.
+ */
+typedef enum {
+    event_ssrc_collision,    /**< An SSRC collision occured.            */
+    event_key_soft_limit,    /**< An SRTP stream reached the soft key   */
+                             /**< usage limit and will expire soon.     */
+    event_key_hard_limit,    /**< An SRTP stream reached the hard       */
+                             /**< key usage limit and has expired.      */
+    event_packet_index_limit /**< An SRTP stream reached the hard       */
+                             /**< packet limit (2^48 packets).          */
+} srtp_event_t;
+
+/**
+ * @brief srtp_event_data_t is the structure passed as a callback to
+ * the event handler function
+ *
+ * The struct srtp_event_data_t holds the data passed to the event
+ * handler function.
+ */
+typedef struct srtp_event_data_t {
+    srtp_t session;     /**< The session in which the event happend.        */
+    uint32_t ssrc;      /**< The ssrc in host order of the stream in which  */
+                        /**< the event happend                              */
+    srtp_event_t event; /**< An enum indicating the type of event.          */
+} srtp_event_data_t;
+
+/**
+ * @brief srtp_event_handler_func_t is the function prototype for
+ * the event handler.
+ *
+ * The typedef srtp_event_handler_func_t is the prototype for the
+ * event handler function.  It has as its only argument an
+ * srtp_event_data_t which describes the event that needs to be handled.
+ * There can only be a single, global handler for all events in
+ * libSRTP.
+ */
+typedef void(srtp_event_handler_func_t)(srtp_event_data_t *data);
+
+/**
+ * @brief sets the event handler to the function supplied by the caller.
+ *
+ * The function call srtp_install_event_handler(func) sets the event
+ * handler function to the value func.  The value NULL is acceptable
+ * as an argument; in this case, events will be ignored rather than
+ * handled.
+ *
+ * @param func is a pointer to a fuction that takes an srtp_event_data_t
+ *             pointer as an argument and returns void.  This function
+ *             will be used by libSRTP to handle events.
+ */
+srtp_err_status_t srtp_install_event_handler(srtp_event_handler_func_t func);
+
+/**
+ * @brief Returns the version string of the library.
+ *
+ */
+const char *srtp_get_version_string(void);
+
+/**
+ * @brief Returns the numeric representation of the library version.
+ *
+ */
+unsigned int srtp_get_version(void);
+
+/**
+ * @brief srtp_set_debug_module(mod_name, v)
+ *
+ * sets dynamic debugging to the value v (0 for off, 1 for on) for the
+ * debug module with the name mod_name
+ *
+ * returns err_status_ok on success, err_status_fail otherwise
+ */
+srtp_err_status_t srtp_set_debug_module(const char *mod_name, int v);
+
+/**
+ * @brief srtp_list_debug_modules() outputs a list of debugging modules
+ *
+ */
+srtp_err_status_t srtp_list_debug_modules(void);
+
+/**
+ * @brief srtp_log_level_t defines log levels.
+ *
+ * The enumeration srtp_log_level_t defines log levels reported
+ * in the srtp_log_handler_func_t.
+ *
+ */
+typedef enum {
+    srtp_log_level_error,   /**< log level is reporting an error message  */
+    srtp_log_level_warning, /**< log level is reporting a warning message */
+    srtp_log_level_info,    /**< log level is reporting an info message   */
+    srtp_log_level_debug    /**< log level is reporting a debug message   */
+} srtp_log_level_t;
+
+/**
+ * @brief srtp_log_handler_func_t is the function prototype for
+ * the log handler.
+ *
+ * The typedef srtp_event_handler_func_t is the prototype for the
+ * event handler function.  It has as srtp_log_level_t, log
+ * message and data as arguments.
+ * There can only be a single, global handler for all log messages in
+ * libSRTP.
+ */
+typedef void(srtp_log_handler_func_t)(srtp_log_level_t level,
+                                      const char *msg,
+                                      void *data);
+
+/**
+ * @brief sets the log handler to the function supplied by the caller.
+ *
+ * The function call srtp_install_log_handler(func) sets the log
+ * handler function to the value func.  The value NULL is acceptable
+ * as an argument; in this case, log messages will be ignored.
+ * This function can be called before srtp_init() inorder to capture
+ * any logging during start up.
+ *
+ * @param func is a pointer to a fuction of type srtp_log_handler_func_t.
+ *             This function will be used by libSRTP to output log messages.
+ * @param data is a user pointer that will be returned as the data argument in
+ * func.
+ */
+srtp_err_status_t srtp_install_log_handler(srtp_log_handler_func_t func,
+                                           void *data);
+
+/**
+ * @brief srtp_get_protect_trailer_length(session, use_mki, mki_index, length)
+ *
+ * Determines the length of the amount of data Lib SRTP will add to the
+ * packet during the protect process. The length is returned in the length
+ * parameter
+ *
+ * returns err_status_ok on success, err_status_bad_mki if the MKI index is
+ * invalid
+ *
+ */
+srtp_err_status_t srtp_get_protect_trailer_length(srtp_t session,
+                                                  uint32_t use_mki,
+                                                  uint32_t mki_index,
+                                                  uint32_t *length);
+
+/**
+ * @brief srtp_get_protect_rtcp_trailer_length(session, use_mki, mki_index,
+ * length)
+ *
+ * Determines the length of the amount of data Lib SRTP will add to the
+ * packet during the protect process. The length is returned in the length
+ * parameter
+ *
+ * returns err_status_ok on success, err_status_bad_mki if the MKI index is
+ * invalid
+ *
+ */
+srtp_err_status_t srtp_get_protect_rtcp_trailer_length(srtp_t session,
+                                                       uint32_t use_mki,
+                                                       uint32_t mki_index,
+                                                       uint32_t *length);
+
+/**
+ * @brief srtp_set_stream_roc(session, ssrc, roc)
+ *
+ * Set the roll-over-counter on a session for a given SSRC
+ *
+ * returns err_status_ok on success, srtp_err_status_bad_param if there is no
+ * stream found
+ *
+ */
+srtp_err_status_t srtp_set_stream_roc(srtp_t session,
+                                      uint32_t ssrc,
+                                      uint32_t roc);
+
+/**
+ * @brief srtp_get_stream_roc(session, ssrc, roc)
+ *
+ * Get the roll-over-counter on a session for a given SSRC
+ *
+ * returns err_status_ok on success, srtp_err_status_bad_param if there is no
+ * stream found
+ *
+ */
+srtp_err_status_t srtp_get_stream_roc(srtp_t session,
+                                      uint32_t ssrc,
+                                      uint32_t *roc);
+
+/**
+ * @}
+ */
+
+/* in host order, so outside the #if */
+#define SRTCP_E_BIT 0x80000000
+
+/* for byte-access */
+#define SRTCP_E_BYTE_BIT 0x80
+#define SRTCP_INDEX_MASK 0x7fffffff
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* SRTP_SRTP_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/include/srtp_priv.h b/trunk/3rdparty/libsrtp-2-fit/include/srtp_priv.h
new file mode 100644
index 000000000..d449f2a4e
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/include/srtp_priv.h
@@ -0,0 +1,280 @@
+/*
+ * srtp_priv.h
+ *
+ * private internal data structures and functions for libSRTP
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef SRTP_PRIV_H
+#define SRTP_PRIV_H
+
+// Leave this as the top level import. Ensures the existence of defines
+#include "config.h"
+
+#include "srtp.h"
+#include "rdbx.h"
+#include "rdb.h"
+#include "integers.h"
+#include "cipher.h"
+#include "auth.h"
+#include "aes.h"
+#include "key.h"
+#include "crypto_kernel.h"
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+#define SRTP_VER_STRING PACKAGE_STRING
+#define SRTP_VERSION PACKAGE_VERSION
+
+typedef struct srtp_stream_ctx_t_ srtp_stream_ctx_t;
+typedef srtp_stream_ctx_t *srtp_stream_t;
+
+/*
+ * the following declarations are libSRTP internal functions
+ */
+
+/*
+ * srtp_get_stream(ssrc) returns a pointer to the stream corresponding
+ * to ssrc, or NULL if no stream exists for that ssrc
+ */
+srtp_stream_t srtp_get_stream(srtp_t srtp, uint32_t ssrc);
+
+/*
+ * srtp_stream_init_keys(s, k) (re)initializes the srtp_stream_t s by
+ * deriving all of the needed keys using the KDF and the key k.
+ */
+srtp_err_status_t srtp_stream_init_keys(srtp_stream_ctx_t *srtp,
+                                        srtp_master_key_t *master_key,
+                                        const unsigned int current_mki_index);
+
+/*
+ * srtp_stream_init_all_master_keys(s, k, m) (re)initializes the srtp_stream_t s
+ * by deriving all of the needed keys for all the master keys using the KDF and
+ * the keys from k.
+ */
+srtp_err_status_t srtp_steam_init_all_master_keys(
+    srtp_stream_ctx_t *srtp,
+    unsigned char *key,
+    srtp_master_key_t **keys,
+    const unsigned int max_master_keys);
+
+/*
+ * srtp_stream_init(s, p) initializes the srtp_stream_t s to
+ * use the policy at the location p
+ */
+srtp_err_status_t srtp_stream_init(srtp_stream_t srtp, const srtp_policy_t *p);
+
+/*
+ * libsrtp internal datatypes
+ */
+typedef enum direction_t {
+    dir_unknown = 0,
+    dir_srtp_sender = 1,
+    dir_srtp_receiver = 2
+} direction_t;
+
+/*
+ * srtp_session_keys_t will contain the encryption, hmac, salt keys
+ * for both SRTP and SRTCP.  The session keys will also contain the
+ * MKI ID which is used to identify the session keys.
+ */
+typedef struct srtp_session_keys_t {
+    srtp_cipher_t *rtp_cipher;
+    srtp_cipher_t *rtp_xtn_hdr_cipher;
+    srtp_auth_t *rtp_auth;
+    srtp_cipher_t *rtcp_cipher;
+    srtp_auth_t *rtcp_auth;
+    uint8_t salt[SRTP_AEAD_SALT_LEN];
+    uint8_t c_salt[SRTP_AEAD_SALT_LEN];
+    uint8_t *mki_id;
+    unsigned int mki_size;
+    srtp_key_limit_ctx_t *limit;
+} srtp_session_keys_t;
+
+/*
+ * an srtp_stream_t has its own SSRC, encryption key, authentication
+ * key, sequence number, and replay database
+ *
+ * note that the keys might not actually be unique, in which case the
+ * srtp_cipher_t and srtp_auth_t pointers will point to the same structures
+ */
+typedef struct srtp_stream_ctx_t_ {
+    uint32_t ssrc;
+    srtp_session_keys_t *session_keys;
+    unsigned int num_master_keys;
+    srtp_rdbx_t rtp_rdbx;
+    srtp_sec_serv_t rtp_services;
+    srtp_rdb_t rtcp_rdb;
+    srtp_sec_serv_t rtcp_services;
+    direction_t direction;
+    int allow_repeat_tx;
+    srtp_ekt_stream_t ekt;
+    int *enc_xtn_hdr;
+    int enc_xtn_hdr_count;
+    uint32_t pending_roc;
+    struct srtp_stream_ctx_t_ *next; /* linked list of streams */
+} strp_stream_ctx_t_;
+
+/*
+ * an srtp_ctx_t holds a stream list and a service description
+ */
+typedef struct srtp_ctx_t_ {
+    struct srtp_stream_ctx_t_ *stream_list;     /* linked list of streams     */
+    struct srtp_stream_ctx_t_ *stream_template; /* act as template for other  */
+                                                /* streams                    */
+    void *user_data;                            /* user custom data           */
+} srtp_ctx_t_;
+
+/*
+ * srtp_hdr_t represents an RTP or SRTP header.  The bit-fields in
+ * this structure should be declared "unsigned int" instead of
+ * "unsigned char", but doing so causes the MS compiler to not
+ * fully pack the bit fields.
+ *
+ * In this implementation, an srtp_hdr_t is assumed to be 32-bit aligned
+ *
+ * (note that this definition follows that of RFC 1889 Appendix A, but
+ * is not identical)
+ */
+
+#ifndef WORDS_BIGENDIAN
+
+typedef struct {
+    unsigned char cc : 4;      /* CSRC count             */
+    unsigned char x : 1;       /* header extension flag  */
+    unsigned char p : 1;       /* padding flag           */
+    unsigned char version : 2; /* protocol version       */
+    unsigned char pt : 7;      /* payload type           */
+    unsigned char m : 1;       /* marker bit             */
+    uint16_t seq;              /* sequence number        */
+    uint32_t ts;               /* timestamp              */
+    uint32_t ssrc;             /* synchronization source */
+} srtp_hdr_t;
+
+#else /*  BIG_ENDIAN */
+
+typedef struct {
+    unsigned char version : 2; /* protocol version       */
+    unsigned char p : 1;       /* padding flag           */
+    unsigned char x : 1;       /* header extension flag  */
+    unsigned char cc : 4;      /* CSRC count             */
+    unsigned char m : 1;       /* marker bit             */
+    unsigned char pt : 7;      /* payload type           */
+    uint16_t seq;              /* sequence number        */
+    uint32_t ts;               /* timestamp              */
+    uint32_t ssrc;             /* synchronization source */
+} srtp_hdr_t;
+
+#endif
+
+typedef struct {
+    uint16_t profile_specific; /* profile-specific info               */
+    uint16_t length;           /* number of 32-bit words in extension */
+} srtp_hdr_xtnd_t;
+
+/*
+ * srtcp_hdr_t represents a secure rtcp header
+ *
+ * in this implementation, an srtcp header is assumed to be 32-bit
+ * aligned
+ */
+
+#ifndef WORDS_BIGENDIAN
+
+typedef struct {
+    unsigned char rc : 5;      /* reception report count */
+    unsigned char p : 1;       /* padding flag           */
+    unsigned char version : 2; /* protocol version       */
+    unsigned char pt : 8;      /* payload type           */
+    uint16_t len;              /* length                 */
+    uint32_t ssrc;             /* synchronization source */
+} srtcp_hdr_t;
+
+typedef struct {
+    unsigned int index : 31; /* srtcp packet index in network order!  */
+    unsigned int e : 1;      /* encrypted? 1=yes                      */
+                             /* optional mikey/etc go here            */
+                             /* and then the variable-length auth tag */
+} srtcp_trailer_t;
+
+#else /*  BIG_ENDIAN */
+
+typedef struct {
+    unsigned char version : 2; /* protocol version       */
+    unsigned char p : 1;       /* padding flag           */
+    unsigned char rc : 5;      /* reception report count */
+    unsigned char pt : 8;      /* payload type           */
+    uint16_t len;              /* length                 */
+    uint32_t ssrc;             /* synchronization source */
+} srtcp_hdr_t;
+
+typedef struct {
+    unsigned int e : 1;      /* encrypted? 1=yes                      */
+    unsigned int index : 31; /* srtcp packet index                    */
+                             /* optional mikey/etc go here            */
+                             /* and then the variable-length auth tag */
+} srtcp_trailer_t;
+
+#endif
+
+/*
+ * srtp_handle_event(srtp, srtm, evnt) calls the event handling
+ * function, if there is one.
+ *
+ * This macro is not included in the documentation as it is
+ * an internal-only function.
+ */
+
+#define srtp_handle_event(srtp, strm, evnt)                                    \
+    if (srtp_event_handler) {                                                  \
+        srtp_event_data_t data;                                                \
+        data.session = srtp;                                                   \
+        data.ssrc = ntohl(strm->ssrc);                                         \
+        data.event = evnt;                                                     \
+        srtp_event_handler(&data);                                             \
+    }
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* SRTP_PRIV_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/include/ut_sim.h b/trunk/3rdparty/libsrtp-2-fit/include/ut_sim.h
new file mode 100644
index 000000000..e678b5fdf
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/include/ut_sim.h
@@ -0,0 +1,83 @@
+/*
+ * ut-sim.h
+ *
+ * an unreliable transport simulator
+ * (for testing replay databases and suchlike)
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef UT_SIM_H
+#define UT_SIM_H
+
+#include "integers.h" /* for uint32_t */
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+#define UT_BUF 160 /* maximum amount of packet reorder */
+
+typedef struct {
+    uint32_t index;
+    uint32_t buffer[UT_BUF];
+} ut_connection;
+
+/*
+ * ut_init(&u) initializes the ut_connection
+ *
+ * this function should always be the first one called on a new
+ * ut_connection
+ */
+
+void ut_init(ut_connection *utc);
+
+/*
+ * ut_next_index(&u) returns the next index from the simulated
+ * unreliable connection
+ */
+
+uint32_t ut_next_index(ut_connection *utc);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* UT_SIM_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/install-sh b/trunk/3rdparty/libsrtp-2-fit/install-sh
new file mode 100755
index 000000000..0b0fdcbba
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/install-sh
@@ -0,0 +1,501 @@
+#!/bin/sh
+# install - install a program, script, or datafile
+
+scriptversion=2013-12-25.23; # UTC
+
+# This originates from X11R5 (mit/util/scripts/install.sh), which was
+# later released in X11R6 (xc/config/util/install.sh) with the
+# following copyright and license.
+#
+# Copyright (C) 1994 X Consortium
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to
+# deal in the Software without restriction, including without limitation the
+# rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+# sell copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in
+# all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
+# X CONSORTIUM BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
+# AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNEC-
+# TION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+# Except as contained in this notice, the name of the X Consortium shall not
+# be used in advertising or otherwise to promote the sale, use or other deal-
+# ings in this Software without prior written authorization from the X Consor-
+# tium.
+#
+#
+# FSF changes to this file are in the public domain.
+#
+# Calling this script install-sh is preferred over install.sh, to prevent
+# 'make' implicit rules from creating a file called install from it
+# when there is no Makefile.
+#
+# This script is compatible with the BSD install script, but was written
+# from scratch.
+
+tab='	'
+nl='
+'
+IFS=" $tab$nl"
+
+# Set DOITPROG to "echo" to test this script.
+
+doit=${DOITPROG-}
+doit_exec=${doit:-exec}
+
+# Put in absolute file names if you don't have them in your path;
+# or use environment vars.
+
+chgrpprog=${CHGRPPROG-chgrp}
+chmodprog=${CHMODPROG-chmod}
+chownprog=${CHOWNPROG-chown}
+cmpprog=${CMPPROG-cmp}
+cpprog=${CPPROG-cp}
+mkdirprog=${MKDIRPROG-mkdir}
+mvprog=${MVPROG-mv}
+rmprog=${RMPROG-rm}
+stripprog=${STRIPPROG-strip}
+
+posix_mkdir=
+
+# Desired mode of installed file.
+mode=0755
+
+chgrpcmd=
+chmodcmd=$chmodprog
+chowncmd=
+mvcmd=$mvprog
+rmcmd="$rmprog -f"
+stripcmd=
+
+src=
+dst=
+dir_arg=
+dst_arg=
+
+copy_on_change=false
+is_target_a_directory=possibly
+
+usage="\
+Usage: $0 [OPTION]... [-T] SRCFILE DSTFILE
+   or: $0 [OPTION]... SRCFILES... DIRECTORY
+   or: $0 [OPTION]... -t DIRECTORY SRCFILES...
+   or: $0 [OPTION]... -d DIRECTORIES...
+
+In the 1st form, copy SRCFILE to DSTFILE.
+In the 2nd and 3rd, copy all SRCFILES to DIRECTORY.
+In the 4th, create DIRECTORIES.
+
+Options:
+     --help     display this help and exit.
+     --version  display version info and exit.
+
+  -c            (ignored)
+  -C            install only if different (preserve the last data modification time)
+  -d            create directories instead of installing files.
+  -g GROUP      $chgrpprog installed files to GROUP.
+  -m MODE       $chmodprog installed files to MODE.
+  -o USER       $chownprog installed files to USER.
+  -s            $stripprog installed files.
+  -t DIRECTORY  install into DIRECTORY.
+  -T            report an error if DSTFILE is a directory.
+
+Environment variables override the default commands:
+  CHGRPPROG CHMODPROG CHOWNPROG CMPPROG CPPROG MKDIRPROG MVPROG
+  RMPROG STRIPPROG
+"
+
+while test $# -ne 0; do
+  case $1 in
+    -c) ;;
+
+    -C) copy_on_change=true;;
+
+    -d) dir_arg=true;;
+
+    -g) chgrpcmd="$chgrpprog $2"
+        shift;;
+
+    --help) echo "$usage"; exit $?;;
+
+    -m) mode=$2
+        case $mode in
+          *' '* | *"$tab"* | *"$nl"* | *'*'* | *'?'* | *'['*)
+            echo "$0: invalid mode: $mode" >&2
+            exit 1;;
+        esac
+        shift;;
+
+    -o) chowncmd="$chownprog $2"
+        shift;;
+
+    -s) stripcmd=$stripprog;;
+
+    -t)
+        is_target_a_directory=always
+        dst_arg=$2
+        # Protect names problematic for 'test' and other utilities.
+        case $dst_arg in
+          -* | [=\(\)!]) dst_arg=./$dst_arg;;
+        esac
+        shift;;
+
+    -T) is_target_a_directory=never;;
+
+    --version) echo "$0 $scriptversion"; exit $?;;
+
+    --) shift
+        break;;
+
+    -*) echo "$0: invalid option: $1" >&2
+        exit 1;;
+
+    *)  break;;
+  esac
+  shift
+done
+
+# We allow the use of options -d and -T together, by making -d
+# take the precedence; this is for compatibility with GNU install.
+
+if test -n "$dir_arg"; then
+  if test -n "$dst_arg"; then
+    echo "$0: target directory not allowed when installing a directory." >&2
+    exit 1
+  fi
+fi
+
+if test $# -ne 0 && test -z "$dir_arg$dst_arg"; then
+  # When -d is used, all remaining arguments are directories to create.
+  # When -t is used, the destination is already specified.
+  # Otherwise, the last argument is the destination.  Remove it from $@.
+  for arg
+  do
+    if test -n "$dst_arg"; then
+      # $@ is not empty: it contains at least $arg.
+      set fnord "$@" "$dst_arg"
+      shift # fnord
+    fi
+    shift # arg
+    dst_arg=$arg
+    # Protect names problematic for 'test' and other utilities.
+    case $dst_arg in
+      -* | [=\(\)!]) dst_arg=./$dst_arg;;
+    esac
+  done
+fi
+
+if test $# -eq 0; then
+  if test -z "$dir_arg"; then
+    echo "$0: no input file specified." >&2
+    exit 1
+  fi
+  # It's OK to call 'install-sh -d' without argument.
+  # This can happen when creating conditional directories.
+  exit 0
+fi
+
+if test -z "$dir_arg"; then
+  if test $# -gt 1 || test "$is_target_a_directory" = always; then
+    if test ! -d "$dst_arg"; then
+      echo "$0: $dst_arg: Is not a directory." >&2
+      exit 1
+    fi
+  fi
+fi
+
+if test -z "$dir_arg"; then
+  do_exit='(exit $ret); exit $ret'
+  trap "ret=129; $do_exit" 1
+  trap "ret=130; $do_exit" 2
+  trap "ret=141; $do_exit" 13
+  trap "ret=143; $do_exit" 15
+
+  # Set umask so as not to create temps with too-generous modes.
+  # However, 'strip' requires both read and write access to temps.
+  case $mode in
+    # Optimize common cases.
+    *644) cp_umask=133;;
+    *755) cp_umask=22;;
+
+    *[0-7])
+      if test -z "$stripcmd"; then
+        u_plus_rw=
+      else
+        u_plus_rw='% 200'
+      fi
+      cp_umask=`expr '(' 777 - $mode % 1000 ')' $u_plus_rw`;;
+    *)
+      if test -z "$stripcmd"; then
+        u_plus_rw=
+      else
+        u_plus_rw=,u+rw
+      fi
+      cp_umask=$mode$u_plus_rw;;
+  esac
+fi
+
+for src
+do
+  # Protect names problematic for 'test' and other utilities.
+  case $src in
+    -* | [=\(\)!]) src=./$src;;
+  esac
+
+  if test -n "$dir_arg"; then
+    dst=$src
+    dstdir=$dst
+    test -d "$dstdir"
+    dstdir_status=$?
+  else
+
+    # Waiting for this to be detected by the "$cpprog $src $dsttmp" command
+    # might cause directories to be created, which would be especially bad
+    # if $src (and thus $dsttmp) contains '*'.
+    if test ! -f "$src" && test ! -d "$src"; then
+      echo "$0: $src does not exist." >&2
+      exit 1
+    fi
+
+    if test -z "$dst_arg"; then
+      echo "$0: no destination specified." >&2
+      exit 1
+    fi
+    dst=$dst_arg
+
+    # If destination is a directory, append the input filename; won't work
+    # if double slashes aren't ignored.
+    if test -d "$dst"; then
+      if test "$is_target_a_directory" = never; then
+        echo "$0: $dst_arg: Is a directory" >&2
+        exit 1
+      fi
+      dstdir=$dst
+      dst=$dstdir/`basename "$src"`
+      dstdir_status=0
+    else
+      dstdir=`dirname "$dst"`
+      test -d "$dstdir"
+      dstdir_status=$?
+    fi
+  fi
+
+  obsolete_mkdir_used=false
+
+  if test $dstdir_status != 0; then
+    case $posix_mkdir in
+      '')
+        # Create intermediate dirs using mode 755 as modified by the umask.
+        # This is like FreeBSD 'install' as of 1997-10-28.
+        umask=`umask`
+        case $stripcmd.$umask in
+          # Optimize common cases.
+          *[2367][2367]) mkdir_umask=$umask;;
+          .*0[02][02] | .[02][02] | .[02]) mkdir_umask=22;;
+
+          *[0-7])
+            mkdir_umask=`expr $umask + 22 \
+              - $umask % 100 % 40 + $umask % 20 \
+              - $umask % 10 % 4 + $umask % 2
+            `;;
+          *) mkdir_umask=$umask,go-w;;
+        esac
+
+        # With -d, create the new directory with the user-specified mode.
+        # Otherwise, rely on $mkdir_umask.
+        if test -n "$dir_arg"; then
+          mkdir_mode=-m$mode
+        else
+          mkdir_mode=
+        fi
+
+        posix_mkdir=false
+        case $umask in
+          *[123567][0-7][0-7])
+            # POSIX mkdir -p sets u+wx bits regardless of umask, which
+            # is incompatible with FreeBSD 'install' when (umask & 300) != 0.
+            ;;
+          *)
+            tmpdir=${TMPDIR-/tmp}/ins$RANDOM-$$
+            trap 'ret=$?; rmdir "$tmpdir/d" "$tmpdir" 2>/dev/null; exit $ret' 0
+
+            if (umask $mkdir_umask &&
+                exec $mkdirprog $mkdir_mode -p -- "$tmpdir/d") >/dev/null 2>&1
+            then
+              if test -z "$dir_arg" || {
+                   # Check for POSIX incompatibilities with -m.
+                   # HP-UX 11.23 and IRIX 6.5 mkdir -m -p sets group- or
+                   # other-writable bit of parent directory when it shouldn't.
+                   # FreeBSD 6.1 mkdir -m -p sets mode of existing directory.
+                   ls_ld_tmpdir=`ls -ld "$tmpdir"`
+                   case $ls_ld_tmpdir in
+                     d????-?r-*) different_mode=700;;
+                     d????-?--*) different_mode=755;;
+                     *) false;;
+                   esac &&
+                   $mkdirprog -m$different_mode -p -- "$tmpdir" && {
+                     ls_ld_tmpdir_1=`ls -ld "$tmpdir"`
+                     test "$ls_ld_tmpdir" = "$ls_ld_tmpdir_1"
+                   }
+                 }
+              then posix_mkdir=:
+              fi
+              rmdir "$tmpdir/d" "$tmpdir"
+            else
+              # Remove any dirs left behind by ancient mkdir implementations.
+              rmdir ./$mkdir_mode ./-p ./-- 2>/dev/null
+            fi
+            trap '' 0;;
+        esac;;
+    esac
+
+    if
+      $posix_mkdir && (
+        umask $mkdir_umask &&
+        $doit_exec $mkdirprog $mkdir_mode -p -- "$dstdir"
+      )
+    then :
+    else
+
+      # The umask is ridiculous, or mkdir does not conform to POSIX,
+      # or it failed possibly due to a race condition.  Create the
+      # directory the slow way, step by step, checking for races as we go.
+
+      case $dstdir in
+        /*) prefix='/';;
+        [-=\(\)!]*) prefix='./';;
+        *)  prefix='';;
+      esac
+
+      oIFS=$IFS
+      IFS=/
+      set -f
+      set fnord $dstdir
+      shift
+      set +f
+      IFS=$oIFS
+
+      prefixes=
+
+      for d
+      do
+        test X"$d" = X && continue
+
+        prefix=$prefix$d
+        if test -d "$prefix"; then
+          prefixes=
+        else
+          if $posix_mkdir; then
+            (umask=$mkdir_umask &&
+             $doit_exec $mkdirprog $mkdir_mode -p -- "$dstdir") && break
+            # Don't fail if two instances are running concurrently.
+            test -d "$prefix" || exit 1
+          else
+            case $prefix in
+              *\'*) qprefix=`echo "$prefix" | sed "s/'/'\\\\\\\\''/g"`;;
+              *) qprefix=$prefix;;
+            esac
+            prefixes="$prefixes '$qprefix'"
+          fi
+        fi
+        prefix=$prefix/
+      done
+
+      if test -n "$prefixes"; then
+        # Don't fail if two instances are running concurrently.
+        (umask $mkdir_umask &&
+         eval "\$doit_exec \$mkdirprog $prefixes") ||
+          test -d "$dstdir" || exit 1
+        obsolete_mkdir_used=true
+      fi
+    fi
+  fi
+
+  if test -n "$dir_arg"; then
+    { test -z "$chowncmd" || $doit $chowncmd "$dst"; } &&
+    { test -z "$chgrpcmd" || $doit $chgrpcmd "$dst"; } &&
+    { test "$obsolete_mkdir_used$chowncmd$chgrpcmd" = false ||
+      test -z "$chmodcmd" || $doit $chmodcmd $mode "$dst"; } || exit 1
+  else
+
+    # Make a couple of temp file names in the proper directory.
+    dsttmp=$dstdir/_inst.$$_
+    rmtmp=$dstdir/_rm.$$_
+
+    # Trap to clean up those temp files at exit.
+    trap 'ret=$?; rm -f "$dsttmp" "$rmtmp" && exit $ret' 0
+
+    # Copy the file name to the temp name.
+    (umask $cp_umask && $doit_exec $cpprog "$src" "$dsttmp") &&
+
+    # and set any options; do chmod last to preserve setuid bits.
+    #
+    # If any of these fail, we abort the whole thing.  If we want to
+    # ignore errors from any of these, just make sure not to ignore
+    # errors from the above "$doit $cpprog $src $dsttmp" command.
+    #
+    { test -z "$chowncmd" || $doit $chowncmd "$dsttmp"; } &&
+    { test -z "$chgrpcmd" || $doit $chgrpcmd "$dsttmp"; } &&
+    { test -z "$stripcmd" || $doit $stripcmd "$dsttmp"; } &&
+    { test -z "$chmodcmd" || $doit $chmodcmd $mode "$dsttmp"; } &&
+
+    # If -C, don't bother to copy if it wouldn't change the file.
+    if $copy_on_change &&
+       old=`LC_ALL=C ls -dlL "$dst"     2>/dev/null` &&
+       new=`LC_ALL=C ls -dlL "$dsttmp"  2>/dev/null` &&
+       set -f &&
+       set X $old && old=:$2:$4:$5:$6 &&
+       set X $new && new=:$2:$4:$5:$6 &&
+       set +f &&
+       test "$old" = "$new" &&
+       $cmpprog "$dst" "$dsttmp" >/dev/null 2>&1
+    then
+      rm -f "$dsttmp"
+    else
+      # Rename the file to the real destination.
+      $doit $mvcmd -f "$dsttmp" "$dst" 2>/dev/null ||
+
+      # The rename failed, perhaps because mv can't rename something else
+      # to itself, or perhaps because mv is so ancient that it does not
+      # support -f.
+      {
+        # Now remove or move aside any old file at destination location.
+        # We try this two ways since rm can't unlink itself on some
+        # systems and the destination file might be busy for other
+        # reasons.  In this case, the final cleanup might fail but the new
+        # file should still install successfully.
+        {
+          test ! -f "$dst" ||
+          $doit $rmcmd -f "$dst" 2>/dev/null ||
+          { $doit $mvcmd -f "$dst" "$rmtmp" 2>/dev/null &&
+            { $doit $rmcmd -f "$rmtmp" 2>/dev/null; :; }
+          } ||
+          { echo "$0: cannot unlink or rename $dst" >&2
+            (exit 1); exit 1
+          }
+        } &&
+
+        # Now rename the file to the real destination.
+        $doit $mvcmd "$dsttmp" "$dst"
+      }
+    fi || exit 1
+
+    trap '' 0
+  fi
+done
+
+# Local variables:
+# eval: (add-hook 'write-file-hooks 'time-stamp)
+# time-stamp-start: "scriptversion="
+# time-stamp-format: "%:y-%02m-%02d.%02H"
+# time-stamp-time-zone: "UTC"
+# time-stamp-end: "; # UTC"
+# End:
diff --git a/trunk/3rdparty/libsrtp-2-fit/install-win.bat b/trunk/3rdparty/libsrtp-2-fit/install-win.bat
new file mode 100644
index 000000000..a4fc0eb7a
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/install-win.bat
@@ -0,0 +1,35 @@
+:: Installs from srtp windows build directory to directory specified on
+:: command line
+
+
+@if "%1"=="" (
+	echo "Usage: %~nx0 destdir"
+	exit /b 1
+) else (
+	set destdir=%1
+)
+
+@if not exist %destdir% (
+   echo %destdir% not found
+   exit /b 1
+)
+
+@for %%d in (include\srtp.h crypto\include\cipher.h Debug\srtp2.lib Release\srtp2.lib x64\Debug\srtp2.lib x64\Release\srtp2.lib) do (
+	if not exist "%%d" (
+	   echo "%%d not found: are you in the right directory?"
+	   exit /b 1
+	)
+)
+
+mkdir %destdir%\include
+mkdir %destdir%\include\srtp2
+mkdir %destdir%\lib
+mkdir %destdir%\lib\x64
+
+@for %%d in (include\srtp.h include\ekt.h crypto\include\cipher.h crypto\include\auth.h crypto\include\crypto_types.h) do (
+	 copy %%d %destdir%\include\srtp2
+)
+copy Release\srtp2.lib %destdir%\lib\srtp2.lib
+copy Debug\srtp2.lib %destdir%\lib\srtp2d.lib
+copy x64\Release\srtp2.lib %destdir%\lib\x64\srtp2.lib
+copy x64\Debug\srtp2.lib %destdir%\lib\x64\srtp2d.lib
diff --git a/trunk/3rdparty/libsrtp-2-fit/libsrtp2.pc.in b/trunk/3rdparty/libsrtp-2-fit/libsrtp2.pc.in
new file mode 100644
index 000000000..fcb86528c
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/libsrtp2.pc.in
@@ -0,0 +1,11 @@
+prefix=@prefix@
+exec_prefix=@prefix@
+libdir=@libdir@
+includedir=@includedir@
+
+Name: @PACKAGE_NAME@
+Version: @PACKAGE_VERSION@
+Description: Library for SRTP (Secure Realtime Transport Protocol)
+
+Libs: -L${libdir} -lsrtp2 @LIBS@
+Cflags: -I${includedir}
diff --git a/trunk/3rdparty/libsrtp-2-fit/srtp/ekt.c b/trunk/3rdparty/libsrtp-2-fit/srtp/ekt.c
new file mode 100644
index 000000000..24af93bd9
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/srtp/ekt.c
@@ -0,0 +1,281 @@
+/*
+ * ekt.c
+ *
+ * Encrypted Key Transport for SRTP
+ *
+ * David McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#include "srtp_priv.h"
+#include "err.h"
+#include "ekt.h"
+
+extern srtp_debug_module_t mod_srtp;
+
+/*
+ *  The EKT Authentication Tag format.
+ *
+ *    0                   1                   2                   3
+ *    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+ *   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+ *   :                   Base Authentication Tag                     :
+ *   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+ *   :                     Encrypted Master Key                      :
+ *   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+ *   |                       Rollover Counter                        |
+ *   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+ *   |    Initial Sequence Number    |   Security Parameter Index    |
+ *   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+ *
+ */
+
+#define EKT_OCTETS_AFTER_BASE_TAG 24
+#define EKT_OCTETS_AFTER_EMK 8
+#define EKT_OCTETS_AFTER_ROC 4
+#define EKT_SPI_LEN 2
+
+unsigned srtp_ekt_octets_after_base_tag(srtp_ekt_stream_t ekt)
+{
+    /*
+     * if the pointer ekt is NULL, then EKT is not in effect, so we
+     * indicate this by returning zero
+     */
+    if (!ekt)
+        return 0;
+
+    switch (ekt->data->ekt_cipher_type) {
+    case SRTP_EKT_CIPHER_AES_128_ECB:
+        return 16 + EKT_OCTETS_AFTER_EMK;
+        break;
+    default:
+        break;
+    }
+    return 0;
+}
+
+static inline srtp_ekt_spi_t srtcp_packet_get_ekt_spi(
+    const uint8_t *packet_start,
+    unsigned pkt_octet_len)
+{
+    const uint8_t *spi_location;
+
+    spi_location = packet_start + (pkt_octet_len - EKT_SPI_LEN);
+
+    return *((const srtp_ekt_spi_t *)spi_location);
+}
+
+static inline uint32_t srtcp_packet_get_ekt_roc(const uint8_t *packet_start,
+                                                unsigned pkt_octet_len)
+{
+    const uint8_t *roc_location;
+
+    roc_location = packet_start + (pkt_octet_len - EKT_OCTETS_AFTER_ROC);
+
+    return *((const uint32_t *)roc_location);
+}
+
+static inline const uint8_t *srtcp_packet_get_emk_location(
+    const uint8_t *packet_start,
+    unsigned pkt_octet_len)
+{
+    const uint8_t *location;
+
+    location = packet_start + (pkt_octet_len - EKT_OCTETS_AFTER_BASE_TAG);
+
+    return location;
+}
+
+srtp_err_status_t srtp_ekt_alloc(srtp_ekt_stream_t *stream_data,
+                                 srtp_ekt_policy_t policy)
+{
+    /*
+     * if the policy pointer is NULL, then EKT is not in use
+     * so we just set the EKT stream data pointer to NULL
+     */
+    if (!policy) {
+        *stream_data = NULL;
+        return srtp_err_status_ok;
+    }
+
+    /* TODO */
+    *stream_data = NULL;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_ekt_stream_init_from_policy(
+    srtp_ekt_stream_t stream_data,
+    srtp_ekt_policy_t policy)
+{
+    if (!stream_data)
+        return srtp_err_status_ok;
+
+    return srtp_err_status_ok;
+}
+
+void aes_decrypt_with_raw_key(void *ciphertext, const void *key, int key_len)
+{
+#ifndef GCM
+    // FIXME: need to get this working through the crypto module interface
+    srtp_aes_expanded_key_t expanded_key;
+
+    srtp_aes_expand_decryption_key(key, key_len, &expanded_key);
+    srtp_aes_decrypt(ciphertext, &expanded_key);
+#endif
+}
+
+/*
+ * The function srtp_stream_init_from_ekt() initializes a stream using
+ * the EKT data from an SRTCP trailer.
+ */
+
+srtp_err_status_t srtp_stream_init_from_ekt(srtp_stream_t stream,
+                                            const void *srtcp_hdr,
+                                            unsigned pkt_octet_len)
+{
+    srtp_err_status_t err;
+    const uint8_t *master_key;
+    srtp_policy_t srtp_policy;
+    uint32_t roc;
+
+    /*
+     * NOTE: at present, we only support a single ekt_policy at a time.
+     */
+    if (stream->ekt->data->spi !=
+        srtcp_packet_get_ekt_spi(srtcp_hdr, pkt_octet_len))
+        return srtp_err_status_no_ctx;
+
+    if (stream->ekt->data->ekt_cipher_type != SRTP_EKT_CIPHER_AES_128_ECB)
+        return srtp_err_status_bad_param;
+
+    /* decrypt the Encrypted Master Key field */
+    master_key = srtcp_packet_get_emk_location(srtcp_hdr, pkt_octet_len);
+    /* FIX!? This decrypts the master key in-place, and never uses it */
+    /* FIX!? It's also passing to ekt_dec_key (which is an aes_expanded_key_t)
+     * to a function which expects a raw (unexpanded) key */
+    aes_decrypt_with_raw_key((void *)master_key,
+                             &stream->ekt->data->ekt_dec_key, 16);
+
+    /* set the SRTP ROC */
+    roc = srtcp_packet_get_ekt_roc(srtcp_hdr, pkt_octet_len);
+    err = srtp_rdbx_set_roc(&stream->rtp_rdbx, roc);
+    if (err)
+        return err;
+
+    err = srtp_stream_init(stream, &srtp_policy);
+    if (err)
+        return err;
+
+    return srtp_err_status_ok;
+}
+
+void srtp_ekt_write_data(srtp_ekt_stream_t ekt,
+                         uint8_t *base_tag,
+                         unsigned base_tag_len,
+                         int *packet_len,
+                         srtp_xtd_seq_num_t pkt_index)
+{
+    uint32_t roc;
+    uint16_t isn;
+    unsigned emk_len;
+    uint8_t *packet;
+
+    /* if the pointer ekt is NULL, then EKT is not in effect */
+    if (!ekt) {
+        debug_print0(mod_srtp, "EKT not in use");
+        return;
+    }
+
+    /* write zeros into the location of the base tag */
+    octet_string_set_to_zero(base_tag, base_tag_len);
+    packet = base_tag + base_tag_len;
+
+    /* copy encrypted master key into packet */
+    emk_len = srtp_ekt_octets_after_base_tag(ekt);
+    memcpy(packet, ekt->encrypted_master_key, emk_len);
+    debug_print(mod_srtp, "writing EKT EMK: %s,",
+                srtp_octet_string_hex_string(packet, emk_len));
+    packet += emk_len;
+
+    /* copy ROC into packet */
+    roc = (uint32_t)(pkt_index >> 16);
+    *((uint32_t *)packet) = be32_to_cpu(roc);
+    debug_print(mod_srtp, "writing EKT ROC: %s,",
+                srtp_octet_string_hex_string(packet, sizeof(roc)));
+    packet += sizeof(roc);
+
+    /* copy ISN into packet */
+    isn = (uint16_t)pkt_index;
+    *((uint16_t *)packet) = htons(isn);
+    debug_print(mod_srtp, "writing EKT ISN: %s,",
+                srtp_octet_string_hex_string(packet, sizeof(isn)));
+    packet += sizeof(isn);
+
+    /* copy SPI into packet */
+    *((uint16_t *)packet) = htons(ekt->data->spi);
+    debug_print(mod_srtp, "writing EKT SPI: %s,",
+                srtp_octet_string_hex_string(packet, sizeof(ekt->data->spi)));
+
+    /* increase packet length appropriately */
+    *packet_len += EKT_OCTETS_AFTER_EMK + emk_len;
+}
+
+/*
+ * The function call srtcp_ekt_trailer(ekt, auth_len, auth_tag   )
+ *
+ * If the pointer ekt is NULL, then the other inputs are unaffected.
+ *
+ * auth_tag is a pointer to the pointer to the location of the
+ * authentication tag in the packet.  If EKT is in effect, then the
+ * auth_tag pointer is set to the location
+ */
+
+void srtcp_ekt_trailer(srtp_ekt_stream_t ekt,
+                       unsigned *auth_len,
+                       void **auth_tag,
+                       void *tag_copy)
+{
+    /*
+     * if there is no EKT policy, then the other inputs are unaffected
+     */
+    if (!ekt)
+        return;
+
+    /* copy auth_tag into temporary location */
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/srtp/srtp.c b/trunk/3rdparty/libsrtp-2-fit/srtp/srtp.c
new file mode 100644
index 000000000..b45cee0fa
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/srtp/srtp.c
@@ -0,0 +1,4727 @@
+/*
+ * srtp.c
+ *
+ * the secure real-time transport protocol
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+// Leave this as the top level import. Ensures the existence of defines
+#include "config.h"
+
+#include "srtp_priv.h"
+#include "crypto_types.h"
+#include "err.h"
+#include "ekt.h"   /* for SRTP Encrypted Key Transport */
+#include "alloc.h" /* for srtp_crypto_alloc() */
+
+#ifdef GCM
+#include "aes_gcm.h" /* for AES GCM mode */
+#endif
+
+#ifdef OPENSSL_KDF
+#include <openssl/kdf.h>
+#include "aes_icm_ext.h"
+#endif
+
+#include <limits.h>
+#ifdef HAVE_NETINET_IN_H
+#include <netinet/in.h>
+#elif defined(HAVE_WINSOCK2_H)
+#include <winsock2.h>
+#endif
+
+/* the debug module for srtp */
+srtp_debug_module_t mod_srtp = {
+    0,     /* debugging is off by default */
+    "srtp" /* printable name for module */
+};
+
+#define octets_in_rtp_header 12
+#define uint32s_in_rtp_header 3
+#define octets_in_rtcp_header 8
+#define uint32s_in_rtcp_header 2
+#define octets_in_rtp_extn_hdr 4
+
+static srtp_err_status_t srtp_validate_rtp_header(void *rtp_hdr,
+                                                  int *pkt_octet_len)
+{
+    srtp_hdr_t *hdr = (srtp_hdr_t *)rtp_hdr;
+    int rtp_header_len;
+
+    if (*pkt_octet_len < octets_in_rtp_header)
+        return srtp_err_status_bad_param;
+
+    /* Check RTP header length */
+    rtp_header_len = octets_in_rtp_header + 4 * hdr->cc;
+    if (hdr->x == 1)
+        rtp_header_len += octets_in_rtp_extn_hdr;
+
+    if (*pkt_octet_len < rtp_header_len)
+        return srtp_err_status_bad_param;
+
+    /* Verifing profile length. */
+    if (hdr->x == 1) {
+        srtp_hdr_xtnd_t *xtn_hdr =
+            (srtp_hdr_xtnd_t *)((uint32_t *)hdr + uint32s_in_rtp_header +
+                                hdr->cc);
+        int profile_len = ntohs(xtn_hdr->length);
+        rtp_header_len += profile_len * 4;
+        /* profile length counts the number of 32-bit words */
+        if (*pkt_octet_len < rtp_header_len)
+            return srtp_err_status_bad_param;
+    }
+    return srtp_err_status_ok;
+}
+
+const char *srtp_get_version_string()
+{
+    /*
+     * Simply return the autotools generated string
+     */
+    return SRTP_VER_STRING;
+}
+
+unsigned int srtp_get_version()
+{
+    unsigned int major = 0, minor = 0, micro = 0;
+    unsigned int rv = 0;
+    int parse_rv;
+
+    /*
+     * Parse the autotools generated version
+     */
+    parse_rv = sscanf(SRTP_VERSION, "%u.%u.%u", &major, &minor, &micro);
+    if (parse_rv != 3) {
+        /*
+         * We're expected to parse all 3 version levels.
+         * If not, then this must not be an official release.
+         * Return all zeros on the version
+         */
+        return (0);
+    }
+
+    /*
+     * We allow 8 bits for the major and minor, while
+     * allowing 16 bits for the micro.  16 bits for the micro
+     * may be beneficial for a continuous delivery model
+     * in the future.
+     */
+    rv |= (major & 0xFF) << 24;
+    rv |= (minor & 0xFF) << 16;
+    rv |= micro & 0xFF;
+    return rv;
+}
+
+srtp_err_status_t srtp_stream_dealloc(srtp_stream_ctx_t *stream,
+                                      const srtp_stream_ctx_t *stream_template)
+{
+    srtp_err_status_t status;
+    unsigned int i = 0;
+    srtp_session_keys_t *session_keys = NULL;
+    srtp_session_keys_t *template_session_keys = NULL;
+
+    /*
+     * we use a conservative deallocation strategy - if any deallocation
+     * fails, then we report that fact without trying to deallocate
+     * anything else
+     */
+    if (stream->session_keys) {
+        for (i = 0; i < stream->num_master_keys; i++) {
+            session_keys = &stream->session_keys[i];
+
+            if (stream_template &&
+                stream->num_master_keys == stream_template->num_master_keys) {
+                template_session_keys = &stream_template->session_keys[i];
+            } else {
+                template_session_keys = NULL;
+            }
+
+            /*
+            * deallocate cipher, if it is not the same as that in template
+            */
+            if (template_session_keys &&
+                session_keys->rtp_cipher == template_session_keys->rtp_cipher) {
+                /* do nothing */
+            } else if (session_keys->rtp_cipher) {
+                status = srtp_cipher_dealloc(session_keys->rtp_cipher);
+                if (status)
+                    return status;
+            }
+
+            /*
+             * deallocate auth function, if it is not the same as that in
+             * template
+             */
+            if (template_session_keys &&
+                session_keys->rtp_auth == template_session_keys->rtp_auth) {
+                /* do nothing */
+            } else if (session_keys->rtp_auth) {
+                status = srtp_auth_dealloc(session_keys->rtp_auth);
+                if (status)
+                    return status;
+            }
+
+            if (template_session_keys &&
+                session_keys->rtp_xtn_hdr_cipher ==
+                    template_session_keys->rtp_xtn_hdr_cipher) {
+                /* do nothing */
+            } else if (session_keys->rtp_xtn_hdr_cipher) {
+                status = srtp_cipher_dealloc(session_keys->rtp_xtn_hdr_cipher);
+                if (status)
+                    return status;
+            }
+
+            /*
+             * deallocate rtcp cipher, if it is not the same as that in
+             * template
+             */
+            if (template_session_keys &&
+                session_keys->rtcp_cipher ==
+                    template_session_keys->rtcp_cipher) {
+                /* do nothing */
+            } else if (session_keys->rtcp_cipher) {
+                status = srtp_cipher_dealloc(session_keys->rtcp_cipher);
+                if (status)
+                    return status;
+            }
+
+            /*
+             * deallocate rtcp auth function, if it is not the same as that in
+             * template
+             */
+            if (template_session_keys &&
+                session_keys->rtcp_auth == template_session_keys->rtcp_auth) {
+                /* do nothing */
+            } else if (session_keys->rtcp_auth) {
+                status = srtp_auth_dealloc(session_keys->rtcp_auth);
+                if (status)
+                    return status;
+            }
+
+            /*
+             * zeroize the salt value
+             */
+            octet_string_set_to_zero(session_keys->salt, SRTP_AEAD_SALT_LEN);
+            octet_string_set_to_zero(session_keys->c_salt, SRTP_AEAD_SALT_LEN);
+
+            if (session_keys->mki_id) {
+                octet_string_set_to_zero(session_keys->mki_id,
+                                         session_keys->mki_size);
+                srtp_crypto_free(session_keys->mki_id);
+                session_keys->mki_id = NULL;
+            }
+
+            /*
+             * deallocate key usage limit, if it is not the same as that in
+             * template
+             */
+            if (template_session_keys &&
+                session_keys->limit == template_session_keys->limit) {
+                /* do nothing */
+            } else if (session_keys->limit) {
+                srtp_crypto_free(session_keys->limit);
+            }
+        }
+        srtp_crypto_free(stream->session_keys);
+    }
+
+    status = srtp_rdbx_dealloc(&stream->rtp_rdbx);
+    if (status)
+        return status;
+
+    /* DAM - need to deallocate EKT here */
+
+    if (stream_template &&
+        stream->enc_xtn_hdr == stream_template->enc_xtn_hdr) {
+        /* do nothing */
+    } else if (stream->enc_xtn_hdr) {
+        srtp_crypto_free(stream->enc_xtn_hdr);
+    }
+
+    /* deallocate srtp stream context */
+    srtp_crypto_free(stream);
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_stream_alloc(srtp_stream_ctx_t **str_ptr,
+                                    const srtp_policy_t *p)
+{
+    srtp_stream_ctx_t *str;
+    srtp_err_status_t stat;
+    unsigned int i = 0;
+    srtp_session_keys_t *session_keys = NULL;
+
+    /*
+     * This function allocates the stream context, rtp and rtcp ciphers
+     * and auth functions, and key limit structure.  If there is a
+     * failure during allocation, we free all previously allocated
+     * memory and return a failure code.  The code could probably
+     * be improved, but it works and should be clear.
+     */
+
+    /* allocate srtp stream and set str_ptr */
+    str = (srtp_stream_ctx_t *)srtp_crypto_alloc(sizeof(srtp_stream_ctx_t));
+    if (str == NULL)
+        return srtp_err_status_alloc_fail;
+
+    *str_ptr = str;
+
+    /*
+     *To keep backwards API compatible if someone is using multiple master
+     * keys then key should be set to NULL
+     */
+    if (p->key != NULL) {
+        str->num_master_keys = 1;
+    } else {
+        str->num_master_keys = p->num_master_keys;
+    }
+
+    str->session_keys = (srtp_session_keys_t *)srtp_crypto_alloc(
+        sizeof(srtp_session_keys_t) * str->num_master_keys);
+
+    if (str->session_keys == NULL) {
+        srtp_stream_dealloc(str, NULL);
+        return srtp_err_status_alloc_fail;
+    }
+
+    for (i = 0; i < str->num_master_keys; i++) {
+        session_keys = &str->session_keys[i];
+
+        /* allocate cipher */
+        stat = srtp_crypto_kernel_alloc_cipher(
+            p->rtp.cipher_type, &session_keys->rtp_cipher,
+            p->rtp.cipher_key_len, p->rtp.auth_tag_len);
+        if (stat) {
+            srtp_stream_dealloc(str, NULL);
+            return stat;
+        }
+
+        /* allocate auth function */
+        stat = srtp_crypto_kernel_alloc_auth(
+            p->rtp.auth_type, &session_keys->rtp_auth, p->rtp.auth_key_len,
+            p->rtp.auth_tag_len);
+        if (stat) {
+            srtp_stream_dealloc(str, NULL);
+            return stat;
+        }
+
+        /*
+         * ...and now the RTCP-specific initialization - first, allocate
+         * the cipher
+         */
+        stat = srtp_crypto_kernel_alloc_cipher(
+            p->rtcp.cipher_type, &session_keys->rtcp_cipher,
+            p->rtcp.cipher_key_len, p->rtcp.auth_tag_len);
+        if (stat) {
+            srtp_stream_dealloc(str, NULL);
+            return stat;
+        }
+
+        /* allocate auth function */
+        stat = srtp_crypto_kernel_alloc_auth(
+            p->rtcp.auth_type, &session_keys->rtcp_auth, p->rtcp.auth_key_len,
+            p->rtcp.auth_tag_len);
+        if (stat) {
+            srtp_stream_dealloc(str, NULL);
+            return stat;
+        }
+
+        session_keys->mki_id = NULL;
+
+        /* allocate key limit structure */
+        session_keys->limit = (srtp_key_limit_ctx_t *)srtp_crypto_alloc(
+            sizeof(srtp_key_limit_ctx_t));
+        if (session_keys->limit == NULL) {
+            srtp_stream_dealloc(str, NULL);
+            return srtp_err_status_alloc_fail;
+        }
+    }
+
+    /* allocate ekt data associated with stream */
+    stat = srtp_ekt_alloc(&str->ekt, p->ekt);
+    if (stat) {
+        srtp_stream_dealloc(str, NULL);
+        return stat;
+    }
+
+    if (p->enc_xtn_hdr && p->enc_xtn_hdr_count > 0) {
+        srtp_cipher_type_id_t enc_xtn_hdr_cipher_type;
+        int enc_xtn_hdr_cipher_key_len;
+
+        str->enc_xtn_hdr = (int *)srtp_crypto_alloc(p->enc_xtn_hdr_count *
+                                                    sizeof(p->enc_xtn_hdr[0]));
+        if (!str->enc_xtn_hdr) {
+            srtp_stream_dealloc(str, NULL);
+            return srtp_err_status_alloc_fail;
+        }
+        memcpy(str->enc_xtn_hdr, p->enc_xtn_hdr,
+               p->enc_xtn_hdr_count * sizeof(p->enc_xtn_hdr[0]));
+        str->enc_xtn_hdr_count = p->enc_xtn_hdr_count;
+
+        /*
+         * For GCM ciphers, the corresponding ICM cipher is used for header
+         * extensions encryption.
+         */
+        switch (p->rtp.cipher_type) {
+        case SRTP_AES_GCM_128:
+            enc_xtn_hdr_cipher_type = SRTP_AES_ICM_128;
+            enc_xtn_hdr_cipher_key_len = SRTP_AES_ICM_128_KEY_LEN_WSALT;
+            break;
+        case SRTP_AES_GCM_256:
+            enc_xtn_hdr_cipher_type = SRTP_AES_ICM_256;
+            enc_xtn_hdr_cipher_key_len = SRTP_AES_ICM_256_KEY_LEN_WSALT;
+            break;
+        default:
+            enc_xtn_hdr_cipher_type = p->rtp.cipher_type;
+            enc_xtn_hdr_cipher_key_len = p->rtp.cipher_key_len;
+            break;
+        }
+
+        for (i = 0; i < str->num_master_keys; i++) {
+            session_keys = &str->session_keys[i];
+
+            /* allocate cipher for extensions header encryption */
+            stat = srtp_crypto_kernel_alloc_cipher(
+                enc_xtn_hdr_cipher_type, &session_keys->rtp_xtn_hdr_cipher,
+                enc_xtn_hdr_cipher_key_len, 0);
+            if (stat) {
+                srtp_stream_dealloc(str, NULL);
+                return stat;
+            }
+        }
+    } else {
+        for (i = 0; i < str->num_master_keys; i++) {
+            session_keys = &str->session_keys[i];
+            session_keys->rtp_xtn_hdr_cipher = NULL;
+        }
+
+        str->enc_xtn_hdr = NULL;
+        str->enc_xtn_hdr_count = 0;
+    }
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * srtp_stream_clone(stream_template, new) allocates a new stream and
+ * initializes it using the cipher and auth of the stream_template
+ *
+ * the only unique data in a cloned stream is the replay database and
+ * the SSRC
+ */
+
+srtp_err_status_t srtp_stream_clone(const srtp_stream_ctx_t *stream_template,
+                                    uint32_t ssrc,
+                                    srtp_stream_ctx_t **str_ptr)
+{
+    srtp_err_status_t status;
+    srtp_stream_ctx_t *str;
+    unsigned int i = 0;
+    srtp_session_keys_t *session_keys = NULL;
+    const srtp_session_keys_t *template_session_keys = NULL;
+
+    debug_print(mod_srtp, "cloning stream (SSRC: 0x%08x)", ntohl(ssrc));
+
+    /* allocate srtp stream and set str_ptr */
+    str = (srtp_stream_ctx_t *)srtp_crypto_alloc(sizeof(srtp_stream_ctx_t));
+    if (str == NULL)
+        return srtp_err_status_alloc_fail;
+    *str_ptr = str;
+
+    str->num_master_keys = stream_template->num_master_keys;
+    str->session_keys = (srtp_session_keys_t *)srtp_crypto_alloc(
+        sizeof(srtp_session_keys_t) * str->num_master_keys);
+
+    if (str->session_keys == NULL) {
+        srtp_stream_dealloc(*str_ptr, stream_template);
+        *str_ptr = NULL;
+        return srtp_err_status_alloc_fail;
+    }
+
+    for (i = 0; i < stream_template->num_master_keys; i++) {
+        session_keys = &str->session_keys[i];
+        template_session_keys = &stream_template->session_keys[i];
+
+        /* set cipher and auth pointers to those of the template */
+        session_keys->rtp_cipher = template_session_keys->rtp_cipher;
+        session_keys->rtp_auth = template_session_keys->rtp_auth;
+        session_keys->rtp_xtn_hdr_cipher =
+            template_session_keys->rtp_xtn_hdr_cipher;
+        session_keys->rtcp_cipher = template_session_keys->rtcp_cipher;
+        session_keys->rtcp_auth = template_session_keys->rtcp_auth;
+        session_keys->mki_size = template_session_keys->mki_size;
+
+        if (template_session_keys->mki_size == 0) {
+            session_keys->mki_id = NULL;
+        } else {
+            session_keys->mki_id =
+                srtp_crypto_alloc(template_session_keys->mki_size);
+
+            if (session_keys->mki_id == NULL) {
+                srtp_stream_dealloc(*str_ptr, stream_template);
+                *str_ptr = NULL;
+                return srtp_err_status_init_fail;
+            }
+            memcpy(session_keys->mki_id, template_session_keys->mki_id,
+                   session_keys->mki_size);
+        }
+        /* Copy the salt values */
+        memcpy(session_keys->salt, template_session_keys->salt,
+               SRTP_AEAD_SALT_LEN);
+        memcpy(session_keys->c_salt, template_session_keys->c_salt,
+               SRTP_AEAD_SALT_LEN);
+
+        /* set key limit to point to that of the template */
+        status = srtp_key_limit_clone(template_session_keys->limit,
+                                      &session_keys->limit);
+        if (status) {
+            srtp_stream_dealloc(*str_ptr, stream_template);
+            *str_ptr = NULL;
+            return status;
+        }
+    }
+
+    /* initialize replay databases */
+    status = srtp_rdbx_init(
+        &str->rtp_rdbx, srtp_rdbx_get_window_size(&stream_template->rtp_rdbx));
+    if (status) {
+        srtp_stream_dealloc(*str_ptr, stream_template);
+        *str_ptr = NULL;
+        return status;
+    }
+    srtp_rdb_init(&str->rtcp_rdb);
+    str->allow_repeat_tx = stream_template->allow_repeat_tx;
+
+    /* set ssrc to that provided */
+    str->ssrc = ssrc;
+
+    /* reset pending ROC */
+    str->pending_roc = 0;
+
+    /* set direction and security services */
+    str->direction = stream_template->direction;
+    str->rtp_services = stream_template->rtp_services;
+    str->rtcp_services = stream_template->rtcp_services;
+
+    /* set pointer to EKT data associated with stream */
+    str->ekt = stream_template->ekt;
+
+    /* copy information about extensions header encryption */
+    str->enc_xtn_hdr = stream_template->enc_xtn_hdr;
+    str->enc_xtn_hdr_count = stream_template->enc_xtn_hdr_count;
+
+    /* defensive coding */
+    str->next = NULL;
+    return srtp_err_status_ok;
+}
+
+/*
+ * key derivation functions, internal to libSRTP
+ *
+ * srtp_kdf_t is a key derivation context
+ *
+ * srtp_kdf_init(&kdf, cipher_id, k, keylen) initializes kdf to use cipher
+ * described by cipher_id, with the master key k with length in octets keylen.
+ *
+ * srtp_kdf_generate(&kdf, l, kl, keylen) derives the key
+ * corresponding to label l and puts it into kl; the length
+ * of the key in octets is provided as keylen.  this function
+ * should be called once for each subkey that is derived.
+ *
+ * srtp_kdf_clear(&kdf) zeroizes and deallocates the kdf state
+ */
+
+typedef enum {
+    label_rtp_encryption = 0x00,
+    label_rtp_msg_auth = 0x01,
+    label_rtp_salt = 0x02,
+    label_rtcp_encryption = 0x03,
+    label_rtcp_msg_auth = 0x04,
+    label_rtcp_salt = 0x05,
+    label_rtp_header_encryption = 0x06,
+    label_rtp_header_salt = 0x07
+} srtp_prf_label;
+
+#define MAX_SRTP_KEY_LEN 256
+
+#if defined(OPENSSL) && defined(OPENSSL_KDF)
+#define MAX_SRTP_AESKEY_LEN 32
+#define MAX_SRTP_SALT_LEN 14
+
+/*
+ * srtp_kdf_t represents a key derivation function.  The SRTP
+ * default KDF is the only one implemented at present.
+ */
+typedef struct {
+    uint8_t master_key[MAX_SRTP_AESKEY_LEN];
+    uint8_t master_salt[MAX_SRTP_SALT_LEN];
+    const EVP_CIPHER *evp;
+} srtp_kdf_t;
+
+static srtp_err_status_t srtp_kdf_init(srtp_kdf_t *kdf,
+                                       const uint8_t *key,
+                                       int key_len,
+                                       int salt_len)
+{
+    memset(kdf, 0x0, sizeof(srtp_kdf_t));
+
+    /* The NULL cipher has zero key length */
+    if (key_len == 0)
+        return srtp_err_status_ok;
+
+    if ((key_len > MAX_SRTP_AESKEY_LEN) || (salt_len > MAX_SRTP_SALT_LEN)) {
+        return srtp_err_status_bad_param;
+    }
+    switch (key_len) {
+    case SRTP_AES_256_KEYSIZE:
+        kdf->evp = EVP_aes_256_ctr();
+        break;
+    case SRTP_AES_192_KEYSIZE:
+        kdf->evp = EVP_aes_192_ctr();
+        break;
+    case SRTP_AES_128_KEYSIZE:
+        kdf->evp = EVP_aes_128_ctr();
+        break;
+    default:
+        return srtp_err_status_bad_param;
+        break;
+    }
+    memcpy(kdf->master_key, key, key_len);
+    memcpy(kdf->master_salt, key + key_len, salt_len);
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_kdf_generate(srtp_kdf_t *kdf,
+                                           srtp_prf_label label,
+                                           uint8_t *key,
+                                           unsigned int length)
+{
+    int ret;
+
+    /* The NULL cipher will not have an EVP */
+    if (!kdf->evp)
+        return srtp_err_status_ok;
+    octet_string_set_to_zero(key, length);
+
+    /*
+     * Invoke the OpenSSL SRTP KDF function
+     * This is useful if OpenSSL is in FIPS mode and FIP
+     * compliance is required for SRTP.
+     */
+    ret = kdf_srtp(kdf->evp, (char *)&kdf->master_key,
+                   (char *)&kdf->master_salt, NULL, NULL, label, (char *)key);
+    if (ret == -1) {
+        return (srtp_err_status_algo_fail);
+    }
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_kdf_clear(srtp_kdf_t *kdf)
+{
+    octet_string_set_to_zero(kdf->master_key, MAX_SRTP_AESKEY_LEN);
+    octet_string_set_to_zero(kdf->master_salt, MAX_SRTP_SALT_LEN);
+    kdf->evp = NULL;
+
+    return srtp_err_status_ok;
+}
+
+#else  /* if OPENSSL_KDF */
+
+/*
+ * srtp_kdf_t represents a key derivation function.  The SRTP
+ * default KDF is the only one implemented at present.
+ */
+typedef struct {
+    srtp_cipher_t *cipher; /* cipher used for key derivation  */
+} srtp_kdf_t;
+
+static srtp_err_status_t srtp_kdf_init(srtp_kdf_t *kdf,
+                                       const uint8_t *key,
+                                       int key_len)
+{
+    srtp_cipher_type_id_t cipher_id;
+    srtp_err_status_t stat;
+
+    switch (key_len) {
+    case SRTP_AES_ICM_256_KEY_LEN_WSALT:
+        cipher_id = SRTP_AES_ICM_256;
+        break;
+    case SRTP_AES_ICM_192_KEY_LEN_WSALT:
+        cipher_id = SRTP_AES_ICM_192;
+        break;
+    case SRTP_AES_ICM_128_KEY_LEN_WSALT:
+        cipher_id = SRTP_AES_ICM_128;
+        break;
+    default:
+        return srtp_err_status_bad_param;
+        break;
+    }
+
+    stat = srtp_crypto_kernel_alloc_cipher(cipher_id, &kdf->cipher, key_len, 0);
+    if (stat)
+        return stat;
+
+    stat = srtp_cipher_init(kdf->cipher, key);
+    if (stat) {
+        srtp_cipher_dealloc(kdf->cipher);
+        return stat;
+    }
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_kdf_generate(srtp_kdf_t *kdf,
+                                           srtp_prf_label label,
+                                           uint8_t *key,
+                                           unsigned int length)
+{
+    srtp_err_status_t status;
+    v128_t nonce;
+
+    /* set eigth octet of nonce to <label>, set the rest of it to zero */
+    v128_set_to_zero(&nonce);
+    nonce.v8[7] = label;
+
+    status = srtp_cipher_set_iv(kdf->cipher, (uint8_t *)&nonce,
+                                srtp_direction_encrypt);
+    if (status)
+        return status;
+
+    /* generate keystream output */
+    octet_string_set_to_zero(key, length);
+    status = srtp_cipher_encrypt(kdf->cipher, key, &length);
+    if (status)
+        return status;
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_kdf_clear(srtp_kdf_t *kdf)
+{
+    srtp_err_status_t status;
+    status = srtp_cipher_dealloc(kdf->cipher);
+    if (status)
+        return status;
+    kdf->cipher = NULL;
+    return srtp_err_status_ok;
+}
+#endif /* else OPENSSL_KDF */
+
+/*
+ *  end of key derivation functions
+ */
+
+/* Get the base key length corresponding to a given combined key+salt
+ * length for the given cipher.
+ * TODO: key and salt lengths should be separate fields in the policy.  */
+static inline int base_key_length(const srtp_cipher_type_t *cipher,
+                                  int key_length)
+{
+    switch (cipher->id) {
+    case SRTP_AES_ICM_128:
+    case SRTP_AES_ICM_192:
+    case SRTP_AES_ICM_256:
+        /* The legacy modes are derived from
+         * the configured key length on the policy */
+        return key_length - SRTP_SALT_LEN;
+        break;
+    case SRTP_AES_GCM_128:
+        return key_length - SRTP_AEAD_SALT_LEN;
+        break;
+    case SRTP_AES_GCM_256:
+        return key_length - SRTP_AEAD_SALT_LEN;
+        break;
+    default:
+        return key_length;
+        break;
+    }
+}
+
+unsigned int srtp_validate_policy_master_keys(const srtp_policy_t *policy)
+{
+    unsigned long i = 0;
+
+    if (policy->key == NULL) {
+        if (policy->num_master_keys <= 0)
+            return 0;
+
+        if (policy->num_master_keys > SRTP_MAX_NUM_MASTER_KEYS)
+            return 0;
+
+        for (i = 0; i < policy->num_master_keys; i++) {
+            if (policy->keys[i]->key == NULL)
+                return 0;
+            if (policy->keys[i]->mki_size > SRTP_MAX_MKI_LEN)
+                return 0;
+        }
+    }
+
+    return 1;
+}
+
+srtp_session_keys_t *srtp_get_session_keys_with_mki_index(
+    srtp_stream_ctx_t *stream,
+    unsigned int use_mki,
+    unsigned int mki_index)
+{
+    if (use_mki) {
+        if (mki_index >= stream->num_master_keys) {
+            return NULL;
+        }
+        return &stream->session_keys[mki_index];
+    }
+
+    return &stream->session_keys[0];
+}
+
+unsigned int srtp_inject_mki(uint8_t *mki_tag_location,
+                             srtp_session_keys_t *session_keys,
+                             unsigned int use_mki)
+{
+    unsigned int mki_size = 0;
+
+    if (use_mki) {
+        mki_size = session_keys->mki_size;
+
+        if (mki_size != 0) {
+            // Write MKI into memory
+            memcpy(mki_tag_location, session_keys->mki_id, mki_size);
+        }
+    }
+
+    return mki_size;
+}
+
+srtp_err_status_t srtp_stream_init_all_master_keys(
+    srtp_stream_ctx_t *srtp,
+    unsigned char *key,
+    srtp_master_key_t **keys,
+    const unsigned int max_master_keys)
+{
+    unsigned int i = 0;
+    srtp_err_status_t status = srtp_err_status_ok;
+    srtp_master_key_t single_master_key;
+
+    if (key != NULL) {
+        srtp->num_master_keys = 1;
+        single_master_key.key = key;
+        single_master_key.mki_id = NULL;
+        single_master_key.mki_size = 0;
+        status = srtp_stream_init_keys(srtp, &single_master_key, 0);
+    } else {
+        srtp->num_master_keys = max_master_keys;
+
+        for (i = 0; i < srtp->num_master_keys && i < SRTP_MAX_NUM_MASTER_KEYS;
+             i++) {
+            status = srtp_stream_init_keys(srtp, keys[i], i);
+
+            if (status) {
+                return status;
+            }
+        }
+    }
+
+    return status;
+}
+
+srtp_err_status_t srtp_stream_init_keys(srtp_stream_ctx_t *srtp,
+                                        srtp_master_key_t *master_key,
+                                        const unsigned int current_mki_index)
+{
+    srtp_err_status_t stat;
+    srtp_kdf_t kdf;
+    uint8_t tmp_key[MAX_SRTP_KEY_LEN];
+    int kdf_keylen = 30, rtp_keylen, rtcp_keylen;
+    int rtp_base_key_len, rtp_salt_len;
+    int rtcp_base_key_len, rtcp_salt_len;
+    srtp_session_keys_t *session_keys = NULL;
+    unsigned char *key = master_key->key;
+
+    /* If RTP or RTCP have a key length > AES-128, assume matching kdf. */
+    /* TODO: kdf algorithm, master key length, and master salt length should
+     * be part of srtp_policy_t.
+    */
+    session_keys = &srtp->session_keys[current_mki_index];
+
+/* initialize key limit to maximum value */
+#ifdef NO_64BIT_MATH
+    {
+        uint64_t temp;
+        temp = make64(UINT_MAX, UINT_MAX);
+        srtp_key_limit_set(session_keys->limit, temp);
+    }
+#else
+    srtp_key_limit_set(session_keys->limit, 0xffffffffffffLL);
+#endif
+
+    if (master_key->mki_size != 0) {
+        session_keys->mki_id = srtp_crypto_alloc(master_key->mki_size);
+
+        if (session_keys->mki_id == NULL) {
+            return srtp_err_status_init_fail;
+        }
+        memcpy(session_keys->mki_id, master_key->mki_id, master_key->mki_size);
+    } else {
+        session_keys->mki_id = NULL;
+    }
+
+    session_keys->mki_size = master_key->mki_size;
+
+    rtp_keylen = srtp_cipher_get_key_length(session_keys->rtp_cipher);
+    rtcp_keylen = srtp_cipher_get_key_length(session_keys->rtcp_cipher);
+    rtp_base_key_len =
+        base_key_length(session_keys->rtp_cipher->type, rtp_keylen);
+    rtp_salt_len = rtp_keylen - rtp_base_key_len;
+
+    if (rtp_keylen > kdf_keylen) {
+        kdf_keylen = 46; /* AES-CTR mode is always used for KDF */
+    }
+
+    if (rtcp_keylen > kdf_keylen) {
+        kdf_keylen = 46; /* AES-CTR mode is always used for KDF */
+    }
+
+    debug_print(mod_srtp, "srtp key len: %d", rtp_keylen);
+    debug_print(mod_srtp, "srtcp key len: %d", rtcp_keylen);
+    debug_print(mod_srtp, "base key len: %d", rtp_base_key_len);
+    debug_print(mod_srtp, "kdf key len: %d", kdf_keylen);
+    debug_print(mod_srtp, "rtp salt len: %d", rtp_salt_len);
+
+    /*
+     * Make sure the key given to us is 'zero' appended.  GCM
+     * mode uses a shorter master SALT (96 bits), but still relies on
+     * the legacy CTR mode KDF, which uses a 112 bit master SALT.
+     */
+    memset(tmp_key, 0x0, MAX_SRTP_KEY_LEN);
+    memcpy(tmp_key, key, (rtp_base_key_len + rtp_salt_len));
+
+/* initialize KDF state     */
+#if defined(OPENSSL) && defined(OPENSSL_KDF)
+    stat = srtp_kdf_init(&kdf, (const uint8_t *)tmp_key, rtp_base_key_len,
+                         rtp_salt_len);
+#else
+    stat = srtp_kdf_init(&kdf, (const uint8_t *)tmp_key, kdf_keylen);
+#endif
+    if (stat) {
+        /* zeroize temp buffer */
+        octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+        return srtp_err_status_init_fail;
+    }
+
+    /* generate encryption key  */
+    stat = srtp_kdf_generate(&kdf, label_rtp_encryption, tmp_key,
+                             rtp_base_key_len);
+    if (stat) {
+        /* zeroize temp buffer */
+        octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+        return srtp_err_status_init_fail;
+    }
+    debug_print(mod_srtp, "cipher key: %s",
+                srtp_octet_string_hex_string(tmp_key, rtp_base_key_len));
+
+    /*
+     * if the cipher in the srtp context uses a salt, then we need
+     * to generate the salt value
+     */
+    if (rtp_salt_len > 0) {
+        debug_print0(mod_srtp, "found rtp_salt_len > 0, generating salt");
+
+        /* generate encryption salt, put after encryption key */
+        stat = srtp_kdf_generate(&kdf, label_rtp_salt,
+                                 tmp_key + rtp_base_key_len, rtp_salt_len);
+        if (stat) {
+            /* zeroize temp buffer */
+            octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+            return srtp_err_status_init_fail;
+        }
+        memcpy(session_keys->salt, tmp_key + rtp_base_key_len,
+               SRTP_AEAD_SALT_LEN);
+    }
+    if (rtp_salt_len > 0) {
+        debug_print(mod_srtp, "cipher salt: %s",
+                    srtp_octet_string_hex_string(tmp_key + rtp_base_key_len,
+                                                 rtp_salt_len));
+    }
+
+    /* initialize cipher */
+    stat = srtp_cipher_init(session_keys->rtp_cipher, tmp_key);
+    if (stat) {
+        /* zeroize temp buffer */
+        octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+        return srtp_err_status_init_fail;
+    }
+
+    if (session_keys->rtp_xtn_hdr_cipher) {
+        /* generate extensions header encryption key  */
+        int rtp_xtn_hdr_keylen;
+        int rtp_xtn_hdr_base_key_len;
+        int rtp_xtn_hdr_salt_len;
+        srtp_kdf_t tmp_kdf;
+        srtp_kdf_t *xtn_hdr_kdf;
+
+        if (session_keys->rtp_xtn_hdr_cipher->type !=
+            session_keys->rtp_cipher->type) {
+            /*
+             * With GCM ciphers, the header extensions are still encrypted using
+             * the corresponding ICM cipher.
+             * See https://tools.ietf.org/html/rfc7714#section-8.3
+             */
+            uint8_t tmp_xtn_hdr_key[MAX_SRTP_KEY_LEN];
+            rtp_xtn_hdr_keylen =
+                srtp_cipher_get_key_length(session_keys->rtp_xtn_hdr_cipher);
+            rtp_xtn_hdr_base_key_len = base_key_length(
+                session_keys->rtp_xtn_hdr_cipher->type, rtp_xtn_hdr_keylen);
+            rtp_xtn_hdr_salt_len =
+                rtp_xtn_hdr_keylen - rtp_xtn_hdr_base_key_len;
+            if (rtp_xtn_hdr_salt_len > rtp_salt_len) {
+                switch (session_keys->rtp_cipher->type->id) {
+                case SRTP_AES_GCM_128:
+                case SRTP_AES_GCM_256:
+                    /*
+                     * The shorter GCM salt is padded to the required ICM salt
+                     * length.
+                     */
+                    rtp_xtn_hdr_salt_len = rtp_salt_len;
+                    break;
+                default:
+                    /* zeroize temp buffer */
+                    octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+                    return srtp_err_status_bad_param;
+                }
+            }
+            memset(tmp_xtn_hdr_key, 0x0, MAX_SRTP_KEY_LEN);
+            memcpy(tmp_xtn_hdr_key, key,
+                   (rtp_xtn_hdr_base_key_len + rtp_xtn_hdr_salt_len));
+            xtn_hdr_kdf = &tmp_kdf;
+
+/* initialize KDF state */
+#if defined(OPENSSL) && defined(OPENSSL_KDF)
+            stat =
+                srtp_kdf_init(xtn_hdr_kdf, (const uint8_t *)tmp_xtn_hdr_key,
+                              rtp_xtn_hdr_base_key_len, rtp_xtn_hdr_salt_len);
+#else
+            stat = srtp_kdf_init(xtn_hdr_kdf, (const uint8_t *)tmp_xtn_hdr_key,
+                                 kdf_keylen);
+#endif
+            octet_string_set_to_zero(tmp_xtn_hdr_key, MAX_SRTP_KEY_LEN);
+            if (stat) {
+                /* zeroize temp buffer */
+                octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+                return srtp_err_status_init_fail;
+            }
+        } else {
+            /* Reuse main KDF. */
+            rtp_xtn_hdr_keylen = rtp_keylen;
+            rtp_xtn_hdr_base_key_len = rtp_base_key_len;
+            rtp_xtn_hdr_salt_len = rtp_salt_len;
+            xtn_hdr_kdf = &kdf;
+        }
+
+        stat = srtp_kdf_generate(xtn_hdr_kdf, label_rtp_header_encryption,
+                                 tmp_key, rtp_xtn_hdr_base_key_len);
+        if (stat) {
+            /* zeroize temp buffer */
+            octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+            return srtp_err_status_init_fail;
+        }
+        debug_print(
+            mod_srtp, "extensions cipher key: %s",
+            srtp_octet_string_hex_string(tmp_key, rtp_xtn_hdr_base_key_len));
+
+        /*
+         * if the cipher in the srtp context uses a salt, then we need
+         * to generate the salt value
+         */
+        if (rtp_xtn_hdr_salt_len > 0) {
+            debug_print0(mod_srtp,
+                         "found rtp_xtn_hdr_salt_len > 0, generating salt");
+
+            /* generate encryption salt, put after encryption key */
+            stat = srtp_kdf_generate(xtn_hdr_kdf, label_rtp_header_salt,
+                                     tmp_key + rtp_xtn_hdr_base_key_len,
+                                     rtp_xtn_hdr_salt_len);
+            if (stat) {
+                /* zeroize temp buffer */
+                octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+                return srtp_err_status_init_fail;
+            }
+        }
+        if (rtp_xtn_hdr_salt_len > 0) {
+            debug_print(
+                mod_srtp, "extensions cipher salt: %s",
+                srtp_octet_string_hex_string(tmp_key + rtp_xtn_hdr_base_key_len,
+                                             rtp_xtn_hdr_salt_len));
+        }
+
+        /* initialize extensions header cipher */
+        stat = srtp_cipher_init(session_keys->rtp_xtn_hdr_cipher, tmp_key);
+        if (stat) {
+            /* zeroize temp buffer */
+            octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+            return srtp_err_status_init_fail;
+        }
+
+        if (xtn_hdr_kdf != &kdf) {
+            /* release memory for custom header extension encryption kdf */
+            stat = srtp_kdf_clear(xtn_hdr_kdf);
+            if (stat) {
+                /* zeroize temp buffer */
+                octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+                return srtp_err_status_init_fail;
+            }
+        }
+    }
+
+    /* generate authentication key */
+    stat = srtp_kdf_generate(&kdf, label_rtp_msg_auth, tmp_key,
+                             srtp_auth_get_key_length(session_keys->rtp_auth));
+    if (stat) {
+        /* zeroize temp buffer */
+        octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+        return srtp_err_status_init_fail;
+    }
+    debug_print(mod_srtp, "auth key:   %s",
+                srtp_octet_string_hex_string(
+                    tmp_key, srtp_auth_get_key_length(session_keys->rtp_auth)));
+
+    /* initialize auth function */
+    stat = srtp_auth_init(session_keys->rtp_auth, tmp_key);
+    if (stat) {
+        /* zeroize temp buffer */
+        octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+        return srtp_err_status_init_fail;
+    }
+
+    /*
+     * ...now initialize SRTCP keys
+     */
+
+    rtcp_base_key_len =
+        base_key_length(session_keys->rtcp_cipher->type, rtcp_keylen);
+    rtcp_salt_len = rtcp_keylen - rtcp_base_key_len;
+    debug_print(mod_srtp, "rtcp salt len: %d", rtcp_salt_len);
+
+    /* generate encryption key  */
+    stat = srtp_kdf_generate(&kdf, label_rtcp_encryption, tmp_key,
+                             rtcp_base_key_len);
+    if (stat) {
+        /* zeroize temp buffer */
+        octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+        return srtp_err_status_init_fail;
+    }
+
+    /*
+     * if the cipher in the srtp context uses a salt, then we need
+     * to generate the salt value
+     */
+    if (rtcp_salt_len > 0) {
+        debug_print0(mod_srtp, "found rtcp_salt_len > 0, generating rtcp salt");
+
+        /* generate encryption salt, put after encryption key */
+        stat = srtp_kdf_generate(&kdf, label_rtcp_salt,
+                                 tmp_key + rtcp_base_key_len, rtcp_salt_len);
+        if (stat) {
+            /* zeroize temp buffer */
+            octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+            return srtp_err_status_init_fail;
+        }
+        memcpy(session_keys->c_salt, tmp_key + rtcp_base_key_len,
+               SRTP_AEAD_SALT_LEN);
+    }
+    debug_print(mod_srtp, "rtcp cipher key: %s",
+                srtp_octet_string_hex_string(tmp_key, rtcp_base_key_len));
+    if (rtcp_salt_len > 0) {
+        debug_print(mod_srtp, "rtcp cipher salt: %s",
+                    srtp_octet_string_hex_string(tmp_key + rtcp_base_key_len,
+                                                 rtcp_salt_len));
+    }
+
+    /* initialize cipher */
+    stat = srtp_cipher_init(session_keys->rtcp_cipher, tmp_key);
+    if (stat) {
+        /* zeroize temp buffer */
+        octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+        return srtp_err_status_init_fail;
+    }
+
+    /* generate authentication key */
+    stat = srtp_kdf_generate(&kdf, label_rtcp_msg_auth, tmp_key,
+                             srtp_auth_get_key_length(session_keys->rtcp_auth));
+    if (stat) {
+        /* zeroize temp buffer */
+        octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+        return srtp_err_status_init_fail;
+    }
+
+    debug_print(
+        mod_srtp, "rtcp auth key:   %s",
+        srtp_octet_string_hex_string(
+            tmp_key, srtp_auth_get_key_length(session_keys->rtcp_auth)));
+
+    /* initialize auth function */
+    stat = srtp_auth_init(session_keys->rtcp_auth, tmp_key);
+    if (stat) {
+        /* zeroize temp buffer */
+        octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+        return srtp_err_status_init_fail;
+    }
+
+    /* clear memory then return */
+    stat = srtp_kdf_clear(&kdf);
+    octet_string_set_to_zero(tmp_key, MAX_SRTP_KEY_LEN);
+    if (stat)
+        return srtp_err_status_init_fail;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_stream_init(srtp_stream_ctx_t *srtp,
+                                   const srtp_policy_t *p)
+{
+    srtp_err_status_t err;
+
+    debug_print(mod_srtp, "initializing stream (SSRC: 0x%08x)", p->ssrc.value);
+
+    /* initialize replay database */
+    /*
+     * window size MUST be at least 64.  MAY be larger.  Values more than
+     * 2^15 aren't meaningful due to how extended sequence numbers are
+     * calculated.
+     * Let a window size of 0 imply the default value.
+     */
+
+    if (p->window_size != 0 &&
+        (p->window_size < 64 || p->window_size >= 0x8000))
+        return srtp_err_status_bad_param;
+
+    if (p->window_size != 0)
+        err = srtp_rdbx_init(&srtp->rtp_rdbx, p->window_size);
+    else
+        err = srtp_rdbx_init(&srtp->rtp_rdbx, 128);
+    if (err)
+        return err;
+
+    /* set the SSRC value */
+    srtp->ssrc = htonl(p->ssrc.value);
+
+    /* reset pending ROC */
+    srtp->pending_roc = 0;
+
+    /* set the security service flags */
+    srtp->rtp_services = p->rtp.sec_serv;
+    srtp->rtcp_services = p->rtcp.sec_serv;
+
+    /*
+     * set direction to unknown - this flag gets checked in srtp_protect(),
+     * srtp_unprotect(), srtp_protect_rtcp(), and srtp_unprotect_rtcp(), and
+     * gets set appropriately if it is set to unknown.
+     */
+    srtp->direction = dir_unknown;
+
+    /* initialize SRTCP replay database */
+    srtp_rdb_init(&srtp->rtcp_rdb);
+
+    /* initialize allow_repeat_tx */
+    /* guard against uninitialized memory: allow only 0 or 1 here */
+    if (p->allow_repeat_tx != 0 && p->allow_repeat_tx != 1) {
+        srtp_rdbx_dealloc(&srtp->rtp_rdbx);
+        return srtp_err_status_bad_param;
+    }
+    srtp->allow_repeat_tx = p->allow_repeat_tx;
+
+    /* DAM - no RTCP key limit at present */
+
+    /* initialize keys */
+    err = srtp_stream_init_all_master_keys(srtp, p->key, p->keys,
+                                           p->num_master_keys);
+    if (err) {
+        srtp_rdbx_dealloc(&srtp->rtp_rdbx);
+        return err;
+    }
+
+    /*
+     * if EKT is in use, then initialize the EKT data associated with
+     * the stream
+     */
+    err = srtp_ekt_stream_init_from_policy(srtp->ekt, p->ekt);
+    if (err) {
+        srtp_rdbx_dealloc(&srtp->rtp_rdbx);
+        return err;
+    }
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * srtp_event_reporter is an event handler function that merely
+ * reports the events that are reported by the callbacks
+ */
+
+void srtp_event_reporter(srtp_event_data_t *data)
+{
+    srtp_err_report(srtp_err_level_warning, "srtp: in stream 0x%x: ",
+                    data->ssrc);
+
+    switch (data->event) {
+    case event_ssrc_collision:
+        srtp_err_report(srtp_err_level_warning, "\tSSRC collision\n");
+        break;
+    case event_key_soft_limit:
+        srtp_err_report(srtp_err_level_warning,
+                        "\tkey usage soft limit reached\n");
+        break;
+    case event_key_hard_limit:
+        srtp_err_report(srtp_err_level_warning,
+                        "\tkey usage hard limit reached\n");
+        break;
+    case event_packet_index_limit:
+        srtp_err_report(srtp_err_level_warning,
+                        "\tpacket index limit reached\n");
+        break;
+    default:
+        srtp_err_report(srtp_err_level_warning,
+                        "\tunknown event reported to handler\n");
+    }
+}
+
+/*
+ * srtp_event_handler is a global variable holding a pointer to the
+ * event handler function; this function is called for any unexpected
+ * event that needs to be handled out of the SRTP data path.  see
+ * srtp_event_t in srtp.h for more info
+ *
+ * it is okay to set srtp_event_handler to NULL, but we set
+ * it to the srtp_event_reporter.
+ */
+
+static srtp_event_handler_func_t *srtp_event_handler = srtp_event_reporter;
+
+srtp_err_status_t srtp_install_event_handler(srtp_event_handler_func_t func)
+{
+    /*
+     * note that we accept NULL arguments intentionally - calling this
+     * function with a NULL arguments removes an event handler that's
+     * been previously installed
+     */
+
+    /* set global event handling function */
+    srtp_event_handler = func;
+    return srtp_err_status_ok;
+}
+
+/*
+ * Check if the given extension header id is / should be encrypted.
+ * Returns 1 if yes, otherwise 0.
+ */
+static int srtp_protect_extension_header(srtp_stream_ctx_t *stream, int id)
+{
+    int *enc_xtn_hdr = stream->enc_xtn_hdr;
+    int count = stream->enc_xtn_hdr_count;
+
+    if (!enc_xtn_hdr || count <= 0) {
+        return 0;
+    }
+
+    while (count > 0) {
+        if (*enc_xtn_hdr == id) {
+            return 1;
+        }
+
+        enc_xtn_hdr++;
+        count--;
+    }
+    return 0;
+}
+
+/*
+ * extensions header encryption RFC 6904
+ */
+static srtp_err_status_t srtp_process_header_encryption(
+    srtp_stream_ctx_t *stream,
+    srtp_hdr_xtnd_t *xtn_hdr,
+    srtp_session_keys_t *session_keys)
+{
+    srtp_err_status_t status;
+    uint8_t keystream[257]; /* Maximum 2 bytes header + 255 bytes data. */
+    int keystream_pos;
+    uint8_t *xtn_hdr_data = ((uint8_t *)xtn_hdr) + octets_in_rtp_extn_hdr;
+    uint8_t *xtn_hdr_end =
+        xtn_hdr_data + (ntohs(xtn_hdr->length) * sizeof(uint32_t));
+
+    if (ntohs(xtn_hdr->profile_specific) == 0xbede) {
+        /* RFC 5285, section 4.2. One-Byte Header */
+        while (xtn_hdr_data < xtn_hdr_end) {
+            uint8_t xid = (*xtn_hdr_data & 0xf0) >> 4;
+            unsigned int xlen = (*xtn_hdr_data & 0x0f) + 1;
+            uint32_t xlen_with_header = 1 + xlen;
+            xtn_hdr_data++;
+
+            if (xtn_hdr_data + xlen > xtn_hdr_end)
+                return srtp_err_status_parse_err;
+
+            if (xid == 15) {
+                /* found header 15, stop further processing. */
+                break;
+            }
+
+            status = srtp_cipher_output(session_keys->rtp_xtn_hdr_cipher,
+                                        keystream, &xlen_with_header);
+            if (status)
+                return srtp_err_status_cipher_fail;
+
+            if (srtp_protect_extension_header(stream, xid)) {
+                keystream_pos = 1;
+                while (xlen > 0) {
+                    *xtn_hdr_data ^= keystream[keystream_pos++];
+                    xtn_hdr_data++;
+                    xlen--;
+                }
+            } else {
+                xtn_hdr_data += xlen;
+            }
+
+            /* skip padding bytes. */
+            while (xtn_hdr_data < xtn_hdr_end && *xtn_hdr_data == 0) {
+                xtn_hdr_data++;
+            }
+        }
+    } else if ((ntohs(xtn_hdr->profile_specific) & 0x1fff) == 0x100) {
+        /* RFC 5285, section 4.3. Two-Byte Header */
+        while (xtn_hdr_data + 1 < xtn_hdr_end) {
+            uint8_t xid = *xtn_hdr_data;
+            unsigned int xlen = *(xtn_hdr_data + 1);
+            uint32_t xlen_with_header = 2 + xlen;
+            xtn_hdr_data += 2;
+
+            if (xtn_hdr_data + xlen > xtn_hdr_end)
+                return srtp_err_status_parse_err;
+
+            status = srtp_cipher_output(session_keys->rtp_xtn_hdr_cipher,
+                                        keystream, &xlen_with_header);
+            if (status)
+                return srtp_err_status_cipher_fail;
+
+            if (xlen > 0 && srtp_protect_extension_header(stream, xid)) {
+                keystream_pos = 2;
+                while (xlen > 0) {
+                    *xtn_hdr_data ^= keystream[keystream_pos++];
+                    xtn_hdr_data++;
+                    xlen--;
+                }
+            } else {
+                xtn_hdr_data += xlen;
+            }
+
+            /* skip padding bytes. */
+            while (xtn_hdr_data < xtn_hdr_end && *xtn_hdr_data == 0) {
+                xtn_hdr_data++;
+            }
+        }
+    } else {
+        /* unsupported extension header format. */
+        return srtp_err_status_parse_err;
+    }
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * AEAD uses a new IV formation method.  This function implements
+ * section 8.1. (SRTP IV Formation for AES-GCM) of RFC7714.
+ * The calculation is defined as, where (+) is the xor operation:
+ *
+ *
+ *              0  0  0  0  0  0  0  0  0  0  1  1
+ *              0  1  2  3  4  5  6  7  8  9  0  1
+ *            +--+--+--+--+--+--+--+--+--+--+--+--+
+ *            |00|00|    SSRC   |     ROC   | SEQ |---+
+ *            +--+--+--+--+--+--+--+--+--+--+--+--+   |
+ *                                                    |
+ *            +--+--+--+--+--+--+--+--+--+--+--+--+   |
+ *            |         Encryption Salt           |->(+)
+ *            +--+--+--+--+--+--+--+--+--+--+--+--+   |
+ *                                                    |
+ *            +--+--+--+--+--+--+--+--+--+--+--+--+   |
+ *            |       Initialization Vector       |<--+
+ *            +--+--+--+--+--+--+--+--+--+--+--+--+*
+ *
+ * Input:  *session_keys - pointer to SRTP stream context session keys,
+ *                         used to retrieve the SALT
+ *         *iv     - Pointer to receive the calculated IV
+ *         *seq    - The ROC and SEQ value to use for the
+ *                   IV calculation.
+ *         *hdr    - The RTP header, used to get the SSRC value
+ *
+ */
+
+static void srtp_calc_aead_iv(srtp_session_keys_t *session_keys,
+                              v128_t *iv,
+                              srtp_xtd_seq_num_t *seq,
+                              srtp_hdr_t *hdr)
+{
+    v128_t in;
+    v128_t salt;
+
+#ifdef NO_64BIT_MATH
+    uint32_t local_roc = ((high32(*seq) << 16) | (low32(*seq) >> 16));
+    uint16_t local_seq = (uint16_t)(low32(*seq));
+#else
+    uint32_t local_roc = (uint32_t)(*seq >> 16);
+    uint16_t local_seq = (uint16_t)*seq;
+#endif
+
+    memset(&in, 0, sizeof(v128_t));
+    memset(&salt, 0, sizeof(v128_t));
+
+    in.v16[5] = htons(local_seq);
+    local_roc = htonl(local_roc);
+    memcpy(&in.v16[3], &local_roc, sizeof(local_roc));
+
+    /*
+     * Copy in the RTP SSRC value
+     */
+    memcpy(&in.v8[2], &hdr->ssrc, 4);
+    debug_print(mod_srtp, "Pre-salted RTP IV = %s\n", v128_hex_string(&in));
+
+    /*
+     * Get the SALT value from the context
+     */
+    memcpy(salt.v8, session_keys->salt, SRTP_AEAD_SALT_LEN);
+    debug_print(mod_srtp, "RTP SALT = %s\n", v128_hex_string(&salt));
+
+    /*
+     * Finally, apply tyhe SALT to the input
+     */
+    v128_xor(iv, &in, &salt);
+}
+
+srtp_session_keys_t *srtp_get_session_keys(srtp_stream_ctx_t *stream,
+                                           uint8_t *hdr,
+                                           const unsigned int *pkt_octet_len,
+                                           unsigned int *mki_size)
+{
+    unsigned int base_mki_start_location = *pkt_octet_len;
+    unsigned int mki_start_location = 0;
+    unsigned int tag_len = 0;
+    unsigned int i = 0;
+
+    // Determine the authentication tag size
+    if (stream->session_keys[0].rtp_cipher->algorithm == SRTP_AES_GCM_128 ||
+        stream->session_keys[0].rtp_cipher->algorithm == SRTP_AES_GCM_256) {
+        tag_len = 0;
+    } else {
+        tag_len = srtp_auth_get_tag_length(stream->session_keys[0].rtp_auth);
+    }
+
+    if (tag_len > base_mki_start_location) {
+        *mki_size = 0;
+        return NULL;
+    }
+
+    base_mki_start_location -= tag_len;
+
+    for (i = 0; i < stream->num_master_keys; i++) {
+        if (stream->session_keys[i].mki_size != 0 &&
+            stream->session_keys[i].mki_size <= base_mki_start_location) {
+            *mki_size = stream->session_keys[i].mki_size;
+            mki_start_location = base_mki_start_location - *mki_size;
+
+            if (memcmp(hdr + mki_start_location, stream->session_keys[i].mki_id,
+                       *mki_size) == 0) {
+                return &stream->session_keys[i];
+            }
+        }
+    }
+
+    *mki_size = 0;
+    return NULL;
+}
+
+static srtp_err_status_t srtp_estimate_index(srtp_rdbx_t *rdbx,
+                                             uint32_t roc,
+                                             srtp_xtd_seq_num_t *est,
+                                             srtp_sequence_number_t seq,
+                                             int *delta)
+{
+#ifdef NO_64BIT_MATH
+    uint32_t internal_pkt_idx_reduced;
+    uint32_t external_pkt_idx_reduced;
+    uint32_t internal_roc;
+    uint32_t roc_difference;
+#endif
+
+#ifdef NO_64BIT_MATH
+    *est = (srtp_xtd_seq_num_t)make64(roc >> 16, (roc << 16) | seq);
+    *delta = low32(est) - rdbx->index;
+#else
+    *est = (srtp_xtd_seq_num_t)(((uint64_t)roc) << 16) | seq;
+    *delta = (int)(*est - rdbx->index);
+#endif
+
+    if (*est > rdbx->index) {
+#ifdef NO_64BIT_MATH
+        internal_roc = (uint32_t)(rdbx->index >> 16);
+        roc_difference = roc - internal_roc;
+        if (roc_difference > 1) {
+            *delta = 0;
+            return srtp_err_status_pkt_idx_adv;
+        }
+
+        internal_pkt_idx_reduced = (uint32_t)(rdbx->index & 0xFFFF);
+        external_pkt_idx_reduced = (uint32_t)((roc_difference << 16) | seq);
+
+        if (external_pkt_idx_reduced - internal_pkt_idx_reduced >
+            seq_num_median) {
+            *delta = 0;
+            return srtp_err_status_pkt_idx_adv;
+        }
+#else
+        if (*est - rdbx->index > seq_num_median) {
+            *delta = 0;
+            return srtp_err_status_pkt_idx_adv;
+        }
+#endif
+    } else if (*est < rdbx->index) {
+#ifdef NO_64BIT_MATH
+
+        internal_roc = (uint32_t)(rdbx->index >> 16);
+        roc_difference = internal_roc - roc;
+        if (roc_difference > 1) {
+            *delta = 0;
+            return srtp_err_status_pkt_idx_adv;
+        }
+
+        internal_pkt_idx_reduced =
+            (uint32_t)((roc_difference << 16) | rdbx->index & 0xFFFF);
+        external_pkt_idx_reduced = (uint32_t)(seq);
+
+        if (internal_pkt_idx_reduced - external_pkt_idx_reduced >
+            seq_num_median) {
+            *delta = 0;
+            return srtp_err_status_pkt_idx_old;
+        }
+#else
+        if (rdbx->index - *est > seq_num_median) {
+            *delta = 0;
+            return srtp_err_status_pkt_idx_old;
+        }
+#endif
+    }
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t srtp_get_est_pkt_index(srtp_hdr_t *hdr,
+                                                srtp_stream_ctx_t *stream,
+                                                srtp_xtd_seq_num_t *est,
+                                                int *delta)
+{
+    srtp_err_status_t result = srtp_err_status_ok;
+
+    if (stream->pending_roc) {
+        result = srtp_estimate_index(&stream->rtp_rdbx, stream->pending_roc,
+                                     est, ntohs(hdr->seq), delta);
+    } else {
+        /* estimate packet index from seq. num. in header */
+        *delta =
+            srtp_rdbx_estimate_index(&stream->rtp_rdbx, est, ntohs(hdr->seq));
+    }
+
+#ifdef NO_64BIT_MATH
+    debug_print2(mod_srtp, "estimated u_packet index: %08x%08x", high32(*est),
+                 low32(*est));
+#else
+    debug_print(mod_srtp, "estimated u_packet index: %016" PRIx64, *est);
+#endif
+    return result;
+}
+
+/*
+ * This function handles outgoing SRTP packets while in AEAD mode,
+ * which currently supports AES-GCM encryption.  All packets are
+ * encrypted and authenticated.
+ */
+static srtp_err_status_t srtp_protect_aead(srtp_ctx_t *ctx,
+                                           srtp_stream_ctx_t *stream,
+                                           void *rtp_hdr,
+                                           unsigned int *pkt_octet_len,
+                                           srtp_session_keys_t *session_keys,
+                                           unsigned int use_mki)
+{
+    srtp_hdr_t *hdr = (srtp_hdr_t *)rtp_hdr;
+    uint32_t *enc_start;    /* pointer to start of encrypted portion  */
+    int enc_octet_len = 0;  /* number of octets in encrypted portion  */
+    srtp_xtd_seq_num_t est; /* estimated xtd_seq_num_t of *hdr        */
+    int delta;              /* delta of local pkt idx and that in hdr */
+    srtp_err_status_t status;
+    uint32_t tag_len;
+    v128_t iv;
+    unsigned int aad_len;
+    srtp_hdr_xtnd_t *xtn_hdr = NULL;
+    unsigned int mki_size = 0;
+    uint8_t *mki_location = NULL;
+
+    debug_print0(mod_srtp, "function srtp_protect_aead");
+
+    /*
+     * update the key usage limit, and check it to make sure that we
+     * didn't just hit either the soft limit or the hard limit, and call
+     * the event handler if we hit either.
+     */
+    switch (srtp_key_limit_update(session_keys->limit)) {
+    case srtp_key_event_normal:
+        break;
+    case srtp_key_event_hard_limit:
+        srtp_handle_event(ctx, stream, event_key_hard_limit);
+        return srtp_err_status_key_expired;
+    case srtp_key_event_soft_limit:
+    default:
+        srtp_handle_event(ctx, stream, event_key_soft_limit);
+        break;
+    }
+
+    /* get tag length from stream */
+    tag_len = srtp_auth_get_tag_length(session_keys->rtp_auth);
+
+    /*
+     * find starting point for encryption and length of data to be
+     * encrypted - the encrypted portion starts after the rtp header
+     * extension, if present; otherwise, it starts after the last csrc,
+     * if any are present
+     */
+    enc_start = (uint32_t *)hdr + uint32s_in_rtp_header + hdr->cc;
+    if (hdr->x == 1) {
+        xtn_hdr = (srtp_hdr_xtnd_t *)enc_start;
+        enc_start += (ntohs(xtn_hdr->length) + 1);
+    }
+    /* note: the passed size is without the auth tag */
+    if (!((uint8_t *)enc_start <= (uint8_t *)hdr + *pkt_octet_len))
+        return srtp_err_status_parse_err;
+    enc_octet_len =
+        (int)(*pkt_octet_len - ((uint8_t *)enc_start - (uint8_t *)hdr));
+    if (enc_octet_len < 0)
+        return srtp_err_status_parse_err;
+
+    /*
+     * estimate the packet index using the start of the replay window
+     * and the sequence number from the header
+     */
+    delta = srtp_rdbx_estimate_index(&stream->rtp_rdbx, &est, ntohs(hdr->seq));
+    status = srtp_rdbx_check(&stream->rtp_rdbx, delta);
+    if (status) {
+        if (status != srtp_err_status_replay_fail || !stream->allow_repeat_tx) {
+            return status; /* we've been asked to reuse an index */
+        }
+    } else {
+        srtp_rdbx_add_index(&stream->rtp_rdbx, delta);
+    }
+
+#ifdef NO_64BIT_MATH
+    debug_print2(mod_srtp, "estimated packet index: %08x%08x", high32(est),
+                 low32(est));
+#else
+    debug_print(mod_srtp, "estimated packet index: %016" PRIx64, est);
+#endif
+
+    /*
+     * AEAD uses a new IV formation method
+     */
+    srtp_calc_aead_iv(session_keys, &iv, &est, hdr);
+/* shift est, put into network byte order */
+#ifdef NO_64BIT_MATH
+    est = be64_to_cpu(
+        make64((high32(est) << 16) | (low32(est) >> 16), low32(est) << 16));
+#else
+    est = be64_to_cpu(est << 16);
+#endif
+
+    status = srtp_cipher_set_iv(session_keys->rtp_cipher, (uint8_t *)&iv,
+                                srtp_direction_encrypt);
+    if (!status && session_keys->rtp_xtn_hdr_cipher) {
+        iv.v32[0] = 0;
+        iv.v32[1] = hdr->ssrc;
+        iv.v64[1] = est;
+        status = srtp_cipher_set_iv(session_keys->rtp_xtn_hdr_cipher,
+                                    (uint8_t *)&iv, srtp_direction_encrypt);
+    }
+    if (status) {
+        return srtp_err_status_cipher_fail;
+    }
+
+    if (xtn_hdr && session_keys->rtp_xtn_hdr_cipher) {
+        /*
+         * extensions header encryption RFC 6904
+         */
+        status = srtp_process_header_encryption(stream, xtn_hdr, session_keys);
+        if (status) {
+            return status;
+        }
+    }
+
+    /*
+     * Set the AAD over the RTP header
+     */
+    aad_len = (uint8_t *)enc_start - (uint8_t *)hdr;
+    status =
+        srtp_cipher_set_aad(session_keys->rtp_cipher, (uint8_t *)hdr, aad_len);
+    if (status) {
+        return (srtp_err_status_cipher_fail);
+    }
+
+    /* Encrypt the payload  */
+    status = srtp_cipher_encrypt(session_keys->rtp_cipher, (uint8_t *)enc_start,
+                                 (unsigned int *)&enc_octet_len);
+    if (status) {
+        return srtp_err_status_cipher_fail;
+    }
+    /*
+     * If we're doing GCM, we need to get the tag
+     * and append that to the output
+     */
+    status =
+        srtp_cipher_get_tag(session_keys->rtp_cipher,
+                            (uint8_t *)enc_start + enc_octet_len, &tag_len);
+    if (status) {
+        return (srtp_err_status_cipher_fail);
+    }
+
+    mki_location = (uint8_t *)hdr + *pkt_octet_len + tag_len;
+    mki_size = srtp_inject_mki(mki_location, session_keys, use_mki);
+
+    /* increase the packet length by the length of the auth tag */
+    *pkt_octet_len += tag_len;
+
+    /* increase the packet length by the length of the mki_size */
+    *pkt_octet_len += mki_size;
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * This function handles incoming SRTP packets while in AEAD mode,
+ * which currently supports AES-GCM encryption.  All packets are
+ * encrypted and authenticated.  Note, the auth tag is at the end
+ * of the packet stream and is automatically checked by GCM
+ * when decrypting the payload.
+ */
+static srtp_err_status_t srtp_unprotect_aead(srtp_ctx_t *ctx,
+                                             srtp_stream_ctx_t *stream,
+                                             int delta,
+                                             srtp_xtd_seq_num_t est,
+                                             void *srtp_hdr,
+                                             unsigned int *pkt_octet_len,
+                                             srtp_session_keys_t *session_keys,
+                                             unsigned int mki_size)
+{
+    srtp_hdr_t *hdr = (srtp_hdr_t *)srtp_hdr;
+    uint32_t *enc_start;            /* pointer to start of encrypted portion  */
+    unsigned int enc_octet_len = 0; /* number of octets in encrypted portion */
+    v128_t iv;
+    srtp_err_status_t status;
+    int tag_len;
+    unsigned int aad_len;
+    srtp_hdr_xtnd_t *xtn_hdr = NULL;
+
+    debug_print0(mod_srtp, "function srtp_unprotect_aead");
+
+#ifdef NO_64BIT_MATH
+    debug_print2(mod_srtp, "estimated u_packet index: %08x%08x", high32(est),
+                 low32(est));
+#else
+    debug_print(mod_srtp, "estimated u_packet index: %016" PRIx64, est);
+#endif
+
+    /* get tag length from stream */
+    tag_len = srtp_auth_get_tag_length(session_keys->rtp_auth);
+
+    /*
+     * AEAD uses a new IV formation method
+     */
+    srtp_calc_aead_iv(session_keys, &iv, &est, hdr);
+    status = srtp_cipher_set_iv(session_keys->rtp_cipher, (uint8_t *)&iv,
+                                srtp_direction_decrypt);
+    if (!status && session_keys->rtp_xtn_hdr_cipher) {
+        iv.v32[0] = 0;
+        iv.v32[1] = hdr->ssrc;
+#ifdef NO_64BIT_MATH
+        iv.v64[1] = be64_to_cpu(
+            make64((high32(est) << 16) | (low32(est) >> 16), low32(est) << 16));
+#else
+        iv.v64[1] = be64_to_cpu(est << 16);
+#endif
+        status = srtp_cipher_set_iv(session_keys->rtp_xtn_hdr_cipher,
+                                    (uint8_t *)&iv, srtp_direction_encrypt);
+    }
+    if (status) {
+        return srtp_err_status_cipher_fail;
+    }
+
+    /*
+     * find starting point for decryption and length of data to be
+     * decrypted - the encrypted portion starts after the rtp header
+     * extension, if present; otherwise, it starts after the last csrc,
+     * if any are present
+     */
+    enc_start = (uint32_t *)hdr + uint32s_in_rtp_header + hdr->cc;
+    if (hdr->x == 1) {
+        xtn_hdr = (srtp_hdr_xtnd_t *)enc_start;
+        enc_start += (ntohs(xtn_hdr->length) + 1);
+    }
+    if (!((uint8_t *)enc_start <=
+          (uint8_t *)hdr + (*pkt_octet_len - tag_len - mki_size)))
+        return srtp_err_status_parse_err;
+    /*
+     * We pass the tag down to the cipher when doing GCM mode
+     */
+    enc_octet_len = (unsigned int)(*pkt_octet_len - mki_size -
+                                   ((uint8_t *)enc_start - (uint8_t *)hdr));
+
+    /*
+     * Sanity check the encrypted payload length against
+     * the tag size.  It must always be at least as large
+     * as the tag length.
+     */
+    if (enc_octet_len < (unsigned int)tag_len) {
+        return srtp_err_status_cipher_fail;
+    }
+
+    /*
+     * update the key usage limit, and check it to make sure that we
+     * didn't just hit either the soft limit or the hard limit, and call
+     * the event handler if we hit either.
+     */
+    switch (srtp_key_limit_update(session_keys->limit)) {
+    case srtp_key_event_normal:
+        break;
+    case srtp_key_event_soft_limit:
+        srtp_handle_event(ctx, stream, event_key_soft_limit);
+        break;
+    case srtp_key_event_hard_limit:
+        srtp_handle_event(ctx, stream, event_key_hard_limit);
+        return srtp_err_status_key_expired;
+    default:
+        break;
+    }
+
+    /*
+     * Set the AAD for AES-GCM, which is the RTP header
+     */
+    aad_len = (uint8_t *)enc_start - (uint8_t *)hdr;
+    status =
+        srtp_cipher_set_aad(session_keys->rtp_cipher, (uint8_t *)hdr, aad_len);
+    if (status) {
+        return (srtp_err_status_cipher_fail);
+    }
+
+    /* Decrypt the ciphertext.  This also checks the auth tag based
+     * on the AAD we just specified above */
+    status = srtp_cipher_decrypt(session_keys->rtp_cipher, (uint8_t *)enc_start,
+                                 &enc_octet_len);
+    if (status) {
+        return status;
+    }
+
+    if (xtn_hdr && session_keys->rtp_xtn_hdr_cipher) {
+        /*
+         * extensions header encryption RFC 6904
+         */
+        status = srtp_process_header_encryption(stream, xtn_hdr, session_keys);
+        if (status) {
+            return status;
+        }
+    }
+
+    /*
+     * verify that stream is for received traffic - this check will
+     * detect SSRC collisions, since a stream that appears in both
+     * srtp_protect() and srtp_unprotect() will fail this test in one of
+     * those functions.
+     *
+     * we do this check *after* the authentication check, so that the
+     * latter check will catch any attempts to fool us into thinking
+     * that we've got a collision
+     */
+    if (stream->direction != dir_srtp_receiver) {
+        if (stream->direction == dir_unknown) {
+            stream->direction = dir_srtp_receiver;
+        } else {
+            srtp_handle_event(ctx, stream, event_ssrc_collision);
+        }
+    }
+
+    /*
+     * if the stream is a 'provisional' one, in which the template context
+     * is used, then we need to allocate a new stream at this point, since
+     * the authentication passed
+     */
+    if (stream == ctx->stream_template) {
+        srtp_stream_ctx_t *new_stream;
+
+        /*
+         * allocate and initialize a new stream
+         *
+         * note that we indicate failure if we can't allocate the new
+         * stream, and some implementations will want to not return
+         * failure here
+         */
+        status =
+            srtp_stream_clone(ctx->stream_template, hdr->ssrc, &new_stream);
+        if (status) {
+            return status;
+        }
+
+        /* add new stream to the head of the stream_list */
+        new_stream->next = ctx->stream_list;
+        ctx->stream_list = new_stream;
+
+        /* set stream (the pointer used in this function) */
+        stream = new_stream;
+    }
+
+    /*
+     * the message authentication function passed, so add the packet
+     * index into the replay database
+     */
+    srtp_rdbx_add_index(&stream->rtp_rdbx, delta);
+
+    /* decrease the packet length by the length of the auth tag */
+    *pkt_octet_len -= tag_len;
+
+    /* decrease the packet length by the length of the mki_size */
+    *pkt_octet_len -= mki_size;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_protect(srtp_ctx_t *ctx,
+                               void *rtp_hdr,
+                               int *pkt_octet_len)
+{
+    return srtp_protect_mki(ctx, rtp_hdr, pkt_octet_len, 0, 0);
+}
+
+srtp_err_status_t srtp_protect_mki(srtp_ctx_t *ctx,
+                                   void *rtp_hdr,
+                                   int *pkt_octet_len,
+                                   unsigned int use_mki,
+                                   unsigned int mki_index)
+{
+    srtp_hdr_t *hdr = (srtp_hdr_t *)rtp_hdr;
+    uint32_t *enc_start;      /* pointer to start of encrypted portion  */
+    uint32_t *auth_start;     /* pointer to start of auth. portion      */
+    int enc_octet_len = 0;    /* number of octets in encrypted portion  */
+    srtp_xtd_seq_num_t est;   /* estimated xtd_seq_num_t of *hdr        */
+    int delta;                /* delta of local pkt idx and that in hdr */
+    uint8_t *auth_tag = NULL; /* location of auth_tag within packet     */
+    srtp_err_status_t status;
+    int tag_len;
+    srtp_stream_ctx_t *stream;
+    uint32_t prefix_len;
+    srtp_hdr_xtnd_t *xtn_hdr = NULL;
+    unsigned int mki_size = 0;
+    srtp_session_keys_t *session_keys = NULL;
+    uint8_t *mki_location = NULL;
+    int advance_packet_index = 0;
+
+    debug_print0(mod_srtp, "function srtp_protect");
+
+    /* we assume the hdr is 32-bit aligned to start */
+
+    /* Verify RTP header */
+    status = srtp_validate_rtp_header(rtp_hdr, pkt_octet_len);
+    if (status)
+        return status;
+
+    /* check the packet length - it must at least contain a full header */
+    if (*pkt_octet_len < octets_in_rtp_header)
+        return srtp_err_status_bad_param;
+
+    /*
+     * look up ssrc in srtp_stream list, and process the packet with
+     * the appropriate stream.  if we haven't seen this stream before,
+     * there's a template key for this srtp_session, and the cipher
+     * supports key-sharing, then we assume that a new stream using
+     * that key has just started up
+     */
+    stream = srtp_get_stream(ctx, hdr->ssrc);
+    if (stream == NULL) {
+        if (ctx->stream_template != NULL) {
+            srtp_stream_ctx_t *new_stream;
+
+            /* allocate and initialize a new stream */
+            status =
+                srtp_stream_clone(ctx->stream_template, hdr->ssrc, &new_stream);
+            if (status)
+                return status;
+
+            /* add new stream to the head of the stream_list */
+            new_stream->next = ctx->stream_list;
+            ctx->stream_list = new_stream;
+
+            /* set direction to outbound */
+            new_stream->direction = dir_srtp_sender;
+
+            /* set stream (the pointer used in this function) */
+            stream = new_stream;
+        } else {
+            /* no template stream, so we return an error */
+            return srtp_err_status_no_ctx;
+        }
+    }
+
+    /*
+     * verify that stream is for sending traffic - this check will
+     * detect SSRC collisions, since a stream that appears in both
+     * srtp_protect() and srtp_unprotect() will fail this test in one of
+     * those functions.
+     */
+
+    if (stream->direction != dir_srtp_sender) {
+        if (stream->direction == dir_unknown) {
+            stream->direction = dir_srtp_sender;
+        } else {
+            srtp_handle_event(ctx, stream, event_ssrc_collision);
+        }
+    }
+
+    session_keys =
+        srtp_get_session_keys_with_mki_index(stream, use_mki, mki_index);
+
+    if (session_keys == NULL)
+        return srtp_err_status_bad_mki;
+
+    /*
+     * Check if this is an AEAD stream (GCM mode).  If so, then dispatch
+     * the request to our AEAD handler.
+     */
+    if (session_keys->rtp_cipher->algorithm == SRTP_AES_GCM_128 ||
+        session_keys->rtp_cipher->algorithm == SRTP_AES_GCM_256) {
+        return srtp_protect_aead(ctx, stream, rtp_hdr,
+                                 (unsigned int *)pkt_octet_len, session_keys,
+                                 use_mki);
+    }
+
+    /*
+     * update the key usage limit, and check it to make sure that we
+     * didn't just hit either the soft limit or the hard limit, and call
+     * the event handler if we hit either.
+     */
+    switch (srtp_key_limit_update(session_keys->limit)) {
+    case srtp_key_event_normal:
+        break;
+    case srtp_key_event_soft_limit:
+        srtp_handle_event(ctx, stream, event_key_soft_limit);
+        break;
+    case srtp_key_event_hard_limit:
+        srtp_handle_event(ctx, stream, event_key_hard_limit);
+        return srtp_err_status_key_expired;
+    default:
+        break;
+    }
+
+    /* get tag length from stream */
+    tag_len = srtp_auth_get_tag_length(session_keys->rtp_auth);
+
+    /*
+     * find starting point for encryption and length of data to be
+     * encrypted - the encrypted portion starts after the rtp header
+     * extension, if present; otherwise, it starts after the last csrc,
+     * if any are present
+     *
+     * if we're not providing confidentiality, set enc_start to NULL
+     */
+    if (stream->rtp_services & sec_serv_conf) {
+        enc_start = (uint32_t *)hdr + uint32s_in_rtp_header + hdr->cc;
+        if (hdr->x == 1) {
+            xtn_hdr = (srtp_hdr_xtnd_t *)enc_start;
+            enc_start += (ntohs(xtn_hdr->length) + 1);
+        }
+        /* note: the passed size is without the auth tag */
+        if (!((uint8_t *)enc_start <= (uint8_t *)hdr + *pkt_octet_len))
+            return srtp_err_status_parse_err;
+        enc_octet_len =
+            (int)(*pkt_octet_len - ((uint8_t *)enc_start - (uint8_t *)hdr));
+        if (enc_octet_len < 0)
+            return srtp_err_status_parse_err;
+    } else {
+        enc_start = NULL;
+    }
+
+    mki_location = (uint8_t *)hdr + *pkt_octet_len;
+    mki_size = srtp_inject_mki(mki_location, session_keys, use_mki);
+
+    /*
+     * if we're providing authentication, set the auth_start and auth_tag
+     * pointers to the proper locations; otherwise, set auth_start to NULL
+     * to indicate that no authentication is needed
+     */
+    if (stream->rtp_services & sec_serv_auth) {
+        auth_start = (uint32_t *)hdr;
+        auth_tag = (uint8_t *)hdr + *pkt_octet_len + mki_size;
+    } else {
+        auth_start = NULL;
+        auth_tag = NULL;
+    }
+
+    /*
+     * estimate the packet index using the start of the replay window
+     * and the sequence number from the header
+     */
+    status = srtp_get_est_pkt_index(hdr, stream, &est, &delta);
+
+    if (status && (status != srtp_err_status_pkt_idx_adv))
+        return status;
+
+    if (status == srtp_err_status_pkt_idx_adv)
+        advance_packet_index = 1;
+
+    if (advance_packet_index) {
+        srtp_rdbx_set_roc_seq(&stream->rtp_rdbx, (uint32_t)(est >> 16),
+                              (uint16_t)(est & 0xFFFF));
+        stream->pending_roc = 0;
+        srtp_rdbx_add_index(&stream->rtp_rdbx, 0);
+    } else {
+        status = srtp_rdbx_check(&stream->rtp_rdbx, delta);
+        if (status) {
+            if (status != srtp_err_status_replay_fail ||
+                !stream->allow_repeat_tx)
+                return status; /* we've been asked to reuse an index */
+        }
+        srtp_rdbx_add_index(&stream->rtp_rdbx, delta);
+    }
+
+#ifdef NO_64BIT_MATH
+    debug_print2(mod_srtp, "estimated packet index: %08x%08x", high32(est),
+                 low32(est));
+#else
+    debug_print(mod_srtp, "estimated packet index: %016" PRIx64, est);
+#endif
+
+    /*
+     * if we're using rindael counter mode, set nonce and seq
+     */
+    if (session_keys->rtp_cipher->type->id == SRTP_AES_ICM_128 ||
+        session_keys->rtp_cipher->type->id == SRTP_AES_ICM_192 ||
+        session_keys->rtp_cipher->type->id == SRTP_AES_ICM_256) {
+        v128_t iv;
+
+        iv.v32[0] = 0;
+        iv.v32[1] = hdr->ssrc;
+#ifdef NO_64BIT_MATH
+        iv.v64[1] = be64_to_cpu(
+            make64((high32(est) << 16) | (low32(est) >> 16), low32(est) << 16));
+#else
+        iv.v64[1] = be64_to_cpu(est << 16);
+#endif
+        status = srtp_cipher_set_iv(session_keys->rtp_cipher, (uint8_t *)&iv,
+                                    srtp_direction_encrypt);
+        if (!status && session_keys->rtp_xtn_hdr_cipher) {
+            status = srtp_cipher_set_iv(session_keys->rtp_xtn_hdr_cipher,
+                                        (uint8_t *)&iv, srtp_direction_encrypt);
+        }
+    } else {
+        v128_t iv;
+
+/* otherwise, set the index to est */
+#ifdef NO_64BIT_MATH
+        iv.v32[0] = 0;
+        iv.v32[1] = 0;
+#else
+        iv.v64[0] = 0;
+#endif
+        iv.v64[1] = be64_to_cpu(est);
+        status = srtp_cipher_set_iv(session_keys->rtp_cipher, (uint8_t *)&iv,
+                                    srtp_direction_encrypt);
+        if (!status && session_keys->rtp_xtn_hdr_cipher) {
+            status = srtp_cipher_set_iv(session_keys->rtp_xtn_hdr_cipher,
+                                        (uint8_t *)&iv, srtp_direction_encrypt);
+        }
+    }
+    if (status)
+        return srtp_err_status_cipher_fail;
+
+/* shift est, put into network byte order */
+#ifdef NO_64BIT_MATH
+    est = be64_to_cpu(
+        make64((high32(est) << 16) | (low32(est) >> 16), low32(est) << 16));
+#else
+    est = be64_to_cpu(est << 16);
+#endif
+
+    /*
+     * if we're authenticating using a universal hash, put the keystream
+     * prefix into the authentication tag
+     */
+    if (auth_start) {
+        prefix_len = srtp_auth_get_prefix_length(session_keys->rtp_auth);
+        if (prefix_len) {
+            status = srtp_cipher_output(session_keys->rtp_cipher, auth_tag,
+                                        &prefix_len);
+            if (status)
+                return srtp_err_status_cipher_fail;
+            debug_print(mod_srtp, "keystream prefix: %s",
+                        srtp_octet_string_hex_string(auth_tag, prefix_len));
+        }
+    }
+
+    if (xtn_hdr && session_keys->rtp_xtn_hdr_cipher) {
+        /*
+         * extensions header encryption RFC 6904
+         */
+        status = srtp_process_header_encryption(stream, xtn_hdr, session_keys);
+        if (status) {
+            return status;
+        }
+    }
+
+    /* if we're encrypting, exor keystream into the message */
+    if (enc_start) {
+        status =
+            srtp_cipher_encrypt(session_keys->rtp_cipher, (uint8_t *)enc_start,
+                                (unsigned int *)&enc_octet_len);
+        if (status)
+            return srtp_err_status_cipher_fail;
+    }
+
+    /*
+     *  if we're authenticating, run authentication function and put result
+     *  into the auth_tag
+     */
+    if (auth_start) {
+        /* initialize auth func context */
+        status = srtp_auth_start(session_keys->rtp_auth);
+        if (status)
+            return status;
+
+        /* run auth func over packet */
+        status = srtp_auth_update(session_keys->rtp_auth, (uint8_t *)auth_start,
+                                  *pkt_octet_len);
+        if (status)
+            return status;
+
+        /* run auth func over ROC, put result into auth_tag */
+        debug_print(mod_srtp, "estimated packet index: %016" PRIx64, est);
+        status = srtp_auth_compute(session_keys->rtp_auth, (uint8_t *)&est, 4,
+                                   auth_tag);
+        debug_print(mod_srtp, "srtp auth tag:    %s",
+                    srtp_octet_string_hex_string(auth_tag, tag_len));
+        if (status)
+            return srtp_err_status_auth_fail;
+    }
+
+    if (auth_tag) {
+        /* increase the packet length by the length of the auth tag */
+        *pkt_octet_len += tag_len;
+    }
+
+    if (use_mki) {
+        /* increate the packet length by the mki size */
+        *pkt_octet_len += mki_size;
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_unprotect(srtp_ctx_t *ctx,
+                                 void *srtp_hdr,
+                                 int *pkt_octet_len)
+{
+    return srtp_unprotect_mki(ctx, srtp_hdr, pkt_octet_len, 0);
+}
+
+srtp_err_status_t srtp_unprotect_mki(srtp_ctx_t *ctx,
+                                     void *srtp_hdr,
+                                     int *pkt_octet_len,
+                                     unsigned int use_mki)
+{
+    srtp_hdr_t *hdr = (srtp_hdr_t *)srtp_hdr;
+    uint32_t *enc_start;            /* pointer to start of encrypted portion  */
+    uint32_t *auth_start;           /* pointer to start of auth. portion      */
+    unsigned int enc_octet_len = 0; /* number of octets in encrypted portion */
+    uint8_t *auth_tag = NULL;       /* location of auth_tag within packet     */
+    srtp_xtd_seq_num_t est;         /* estimated xtd_seq_num_t of *hdr        */
+    int delta;                      /* delta of local pkt idx and that in hdr */
+    v128_t iv;
+    srtp_err_status_t status;
+    srtp_stream_ctx_t *stream;
+    uint8_t tmp_tag[SRTP_MAX_TAG_LEN];
+    uint32_t tag_len, prefix_len;
+    srtp_hdr_xtnd_t *xtn_hdr = NULL;
+    unsigned int mki_size = 0;
+    srtp_session_keys_t *session_keys = NULL;
+    int advance_packet_index = 0;
+    uint32_t roc_to_set = 0;
+    uint16_t seq_to_set = 0;
+
+    debug_print0(mod_srtp, "function srtp_unprotect");
+
+    /* we assume the hdr is 32-bit aligned to start */
+
+    /* Verify RTP header */
+    status = srtp_validate_rtp_header(srtp_hdr, pkt_octet_len);
+    if (status)
+        return status;
+
+    /* check the packet length - it must at least contain a full header */
+    if (*pkt_octet_len < octets_in_rtp_header)
+        return srtp_err_status_bad_param;
+
+    /*
+     * look up ssrc in srtp_stream list, and process the packet with
+     * the appropriate stream.  if we haven't seen this stream before,
+     * there's only one key for this srtp_session, and the cipher
+     * supports key-sharing, then we assume that a new stream using
+     * that key has just started up
+     */
+    stream = srtp_get_stream(ctx, hdr->ssrc);
+    if (stream == NULL) {
+        if (ctx->stream_template != NULL) {
+            stream = ctx->stream_template;
+            debug_print(mod_srtp, "using provisional stream (SSRC: 0x%08x)",
+                        ntohl(hdr->ssrc));
+
+/*
+ * set estimated packet index to sequence number from header,
+ * and set delta equal to the same value
+ */
+#ifdef NO_64BIT_MATH
+            est = (srtp_xtd_seq_num_t)make64(0, ntohs(hdr->seq));
+            delta = low32(est);
+#else
+            est = (srtp_xtd_seq_num_t)ntohs(hdr->seq);
+            delta = (int)est;
+#endif
+        } else {
+            /*
+             * no stream corresponding to SSRC found, and we don't do
+             * key-sharing, so return an error
+             */
+            return srtp_err_status_no_ctx;
+        }
+    } else {
+        status = srtp_get_est_pkt_index(hdr, stream, &est, &delta);
+
+        if (status && (status != srtp_err_status_pkt_idx_adv))
+            return status;
+
+        if (status == srtp_err_status_pkt_idx_adv) {
+            advance_packet_index = 1;
+            roc_to_set = (uint32_t)(est >> 16);
+            seq_to_set = (uint16_t)(est & 0xFFFF);
+        }
+
+        /* check replay database */
+        if (!advance_packet_index) {
+            status = srtp_rdbx_check(&stream->rtp_rdbx, delta);
+            if (status)
+                return status;
+        }
+    }
+
+#ifdef NO_64BIT_MATH
+    debug_print2(mod_srtp, "estimated u_packet index: %08x%08x", high32(est),
+                 low32(est));
+#else
+    debug_print(mod_srtp, "estimated u_packet index: %016" PRIx64, est);
+#endif
+
+    /* Determine if MKI is being used and what session keys should be used */
+    if (use_mki) {
+        session_keys = srtp_get_session_keys(
+            stream, (uint8_t *)hdr, (const unsigned int *)pkt_octet_len,
+            &mki_size);
+
+        if (session_keys == NULL)
+            return srtp_err_status_bad_mki;
+    } else {
+        session_keys = &stream->session_keys[0];
+    }
+
+    /*
+     * Check if this is an AEAD stream (GCM mode).  If so, then dispatch
+     * the request to our AEAD handler.
+     */
+    if (session_keys->rtp_cipher->algorithm == SRTP_AES_GCM_128 ||
+        session_keys->rtp_cipher->algorithm == SRTP_AES_GCM_256) {
+        return srtp_unprotect_aead(ctx, stream, delta, est, srtp_hdr,
+                                   (unsigned int *)pkt_octet_len, session_keys,
+                                   mki_size);
+    }
+
+    /* get tag length from stream */
+    tag_len = srtp_auth_get_tag_length(session_keys->rtp_auth);
+
+    /*
+     * set the cipher's IV properly, depending on whatever cipher we
+     * happen to be using
+     */
+    if (session_keys->rtp_cipher->type->id == SRTP_AES_ICM_128 ||
+        session_keys->rtp_cipher->type->id == SRTP_AES_ICM_192 ||
+        session_keys->rtp_cipher->type->id == SRTP_AES_ICM_256) {
+        /* aes counter mode */
+        iv.v32[0] = 0;
+        iv.v32[1] = hdr->ssrc; /* still in network order */
+#ifdef NO_64BIT_MATH
+        iv.v64[1] = be64_to_cpu(
+            make64((high32(est) << 16) | (low32(est) >> 16), low32(est) << 16));
+#else
+        iv.v64[1] = be64_to_cpu(est << 16);
+#endif
+        status = srtp_cipher_set_iv(session_keys->rtp_cipher, (uint8_t *)&iv,
+                                    srtp_direction_decrypt);
+        if (!status && session_keys->rtp_xtn_hdr_cipher) {
+            status = srtp_cipher_set_iv(session_keys->rtp_xtn_hdr_cipher,
+                                        (uint8_t *)&iv, srtp_direction_decrypt);
+        }
+    } else {
+/* no particular format - set the iv to the pakcet index */
+#ifdef NO_64BIT_MATH
+        iv.v32[0] = 0;
+        iv.v32[1] = 0;
+#else
+        iv.v64[0] = 0;
+#endif
+        iv.v64[1] = be64_to_cpu(est);
+        status = srtp_cipher_set_iv(session_keys->rtp_cipher, (uint8_t *)&iv,
+                                    srtp_direction_decrypt);
+        if (!status && session_keys->rtp_xtn_hdr_cipher) {
+            status = srtp_cipher_set_iv(session_keys->rtp_xtn_hdr_cipher,
+                                        (uint8_t *)&iv, srtp_direction_decrypt);
+        }
+    }
+    if (status)
+        return srtp_err_status_cipher_fail;
+
+/* shift est, put into network byte order */
+#ifdef NO_64BIT_MATH
+    est = be64_to_cpu(
+        make64((high32(est) << 16) | (low32(est) >> 16), low32(est) << 16));
+#else
+    est = be64_to_cpu(est << 16);
+#endif
+
+    /*
+     * find starting point for decryption and length of data to be
+     * decrypted - the encrypted portion starts after the rtp header
+     * extension, if present; otherwise, it starts after the last csrc,
+     * if any are present
+     *
+     * if we're not providing confidentiality, set enc_start to NULL
+     */
+    if (stream->rtp_services & sec_serv_conf) {
+        enc_start = (uint32_t *)hdr + uint32s_in_rtp_header + hdr->cc;
+        if (hdr->x == 1) {
+            xtn_hdr = (srtp_hdr_xtnd_t *)enc_start;
+            enc_start += (ntohs(xtn_hdr->length) + 1);
+        }
+        if (!((uint8_t *)enc_start <=
+              (uint8_t *)hdr + (*pkt_octet_len - tag_len - mki_size)))
+            return srtp_err_status_parse_err;
+        enc_octet_len = (uint32_t)(*pkt_octet_len - tag_len - mki_size -
+                                   ((uint8_t *)enc_start - (uint8_t *)hdr));
+    } else {
+        enc_start = NULL;
+    }
+
+    /*
+     * if we're providing authentication, set the auth_start and auth_tag
+     * pointers to the proper locations; otherwise, set auth_start to NULL
+     * to indicate that no authentication is needed
+     */
+    if (stream->rtp_services & sec_serv_auth) {
+        auth_start = (uint32_t *)hdr;
+        auth_tag = (uint8_t *)hdr + *pkt_octet_len - tag_len;
+    } else {
+        auth_start = NULL;
+        auth_tag = NULL;
+    }
+
+    /*
+     * if we expect message authentication, run the authentication
+     * function and compare the result with the value of the auth_tag
+     */
+    if (auth_start) {
+        /*
+         * if we're using a universal hash, then we need to compute the
+         * keystream prefix for encrypting the universal hash output
+         *
+         * if the keystream prefix length is zero, then we know that
+         * the authenticator isn't using a universal hash function
+         */
+        if (session_keys->rtp_auth->prefix_len != 0) {
+            prefix_len = srtp_auth_get_prefix_length(session_keys->rtp_auth);
+            status = srtp_cipher_output(session_keys->rtp_cipher, tmp_tag,
+                                        &prefix_len);
+            debug_print(mod_srtp, "keystream prefix: %s",
+                        srtp_octet_string_hex_string(tmp_tag, prefix_len));
+            if (status)
+                return srtp_err_status_cipher_fail;
+        }
+
+        /* initialize auth func context */
+        status = srtp_auth_start(session_keys->rtp_auth);
+        if (status)
+            return status;
+
+        /* now compute auth function over packet */
+        status = srtp_auth_update(session_keys->rtp_auth, (uint8_t *)auth_start,
+                                  *pkt_octet_len - tag_len - mki_size);
+
+        /* run auth func over ROC, then write tmp tag */
+        status = srtp_auth_compute(session_keys->rtp_auth, (uint8_t *)&est, 4,
+                                   tmp_tag);
+
+        debug_print(mod_srtp, "computed auth tag:    %s",
+                    srtp_octet_string_hex_string(tmp_tag, tag_len));
+        debug_print(mod_srtp, "packet auth tag:      %s",
+                    srtp_octet_string_hex_string(auth_tag, tag_len));
+        if (status)
+            return srtp_err_status_auth_fail;
+
+        if (srtp_octet_string_is_eq(tmp_tag, auth_tag, tag_len))
+            return srtp_err_status_auth_fail;
+    }
+
+    /*
+     * update the key usage limit, and check it to make sure that we
+     * didn't just hit either the soft limit or the hard limit, and call
+     * the event handler if we hit either.
+     */
+    switch (srtp_key_limit_update(session_keys->limit)) {
+    case srtp_key_event_normal:
+        break;
+    case srtp_key_event_soft_limit:
+        srtp_handle_event(ctx, stream, event_key_soft_limit);
+        break;
+    case srtp_key_event_hard_limit:
+        srtp_handle_event(ctx, stream, event_key_hard_limit);
+        return srtp_err_status_key_expired;
+    default:
+        break;
+    }
+
+    if (xtn_hdr && session_keys->rtp_xtn_hdr_cipher) {
+        /* extensions header encryption RFC 6904 */
+        status = srtp_process_header_encryption(stream, xtn_hdr, session_keys);
+        if (status) {
+            return status;
+        }
+    }
+
+    /* if we're decrypting, add keystream into ciphertext */
+    if (enc_start) {
+        status = srtp_cipher_decrypt(session_keys->rtp_cipher,
+                                     (uint8_t *)enc_start, &enc_octet_len);
+        if (status)
+            return srtp_err_status_cipher_fail;
+    }
+
+    /*
+     * verify that stream is for received traffic - this check will
+     * detect SSRC collisions, since a stream that appears in both
+     * srtp_protect() and srtp_unprotect() will fail this test in one of
+     * those functions.
+     *
+     * we do this check *after* the authentication check, so that the
+     * latter check will catch any attempts to fool us into thinking
+     * that we've got a collision
+     */
+    if (stream->direction != dir_srtp_receiver) {
+        if (stream->direction == dir_unknown) {
+            stream->direction = dir_srtp_receiver;
+        } else {
+            srtp_handle_event(ctx, stream, event_ssrc_collision);
+        }
+    }
+
+    /*
+     * if the stream is a 'provisional' one, in which the template context
+     * is used, then we need to allocate a new stream at this point, since
+     * the authentication passed
+     */
+    if (stream == ctx->stream_template) {
+        srtp_stream_ctx_t *new_stream;
+
+        /*
+         * allocate and initialize a new stream
+         *
+         * note that we indicate failure if we can't allocate the new
+         * stream, and some implementations will want to not return
+         * failure here
+         */
+        status =
+            srtp_stream_clone(ctx->stream_template, hdr->ssrc, &new_stream);
+        if (status)
+            return status;
+
+        /* add new stream to the head of the stream_list */
+        new_stream->next = ctx->stream_list;
+        ctx->stream_list = new_stream;
+
+        /* set stream (the pointer used in this function) */
+        stream = new_stream;
+    }
+
+    /*
+     * the message authentication function passed, so add the packet
+     * index into the replay database
+     */
+    if (advance_packet_index) {
+        srtp_rdbx_set_roc_seq(&stream->rtp_rdbx, roc_to_set, seq_to_set);
+        stream->pending_roc = 0;
+        srtp_rdbx_add_index(&stream->rtp_rdbx, 0);
+    } else {
+        srtp_rdbx_add_index(&stream->rtp_rdbx, delta);
+    }
+
+    /* decrease the packet length by the length of the auth tag */
+    *pkt_octet_len -= tag_len;
+
+    /* decrease the packet length by the mki size */
+    *pkt_octet_len -= mki_size;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_init()
+{
+    srtp_err_status_t status;
+
+    /* initialize crypto kernel */
+    status = srtp_crypto_kernel_init();
+    if (status)
+        return status;
+
+    /* load srtp debug module into the kernel */
+    status = srtp_crypto_kernel_load_debug_module(&mod_srtp);
+    if (status)
+        return status;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_shutdown()
+{
+    srtp_err_status_t status;
+
+    /* shut down crypto kernel */
+    status = srtp_crypto_kernel_shutdown();
+    if (status)
+        return status;
+
+    /* shutting down crypto kernel frees the srtp debug module as well */
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * The following code is under consideration for removal.  See
+ * SRTP_MAX_TRAILER_LEN
+ */
+#if 0
+
+/*
+ * srtp_get_trailer_length(&a) returns the number of octets that will
+ * be added to an RTP packet by the SRTP processing.  This value
+ * is constant for a given srtp_stream_t (i.e. between initializations).
+ */
+
+int
+srtp_get_trailer_length(const srtp_stream_t s) {
+  return srtp_auth_get_tag_length(s->rtp_auth);
+}
+
+#endif
+
+/*
+ * srtp_get_stream(ssrc) returns a pointer to the stream corresponding
+ * to ssrc, or NULL if no stream exists for that ssrc
+ *
+ * this is an internal function
+ */
+
+srtp_stream_ctx_t *srtp_get_stream(srtp_t srtp, uint32_t ssrc)
+{
+    srtp_stream_ctx_t *stream;
+
+    /* walk down list until ssrc is found */
+    stream = srtp->stream_list;
+    while (stream != NULL) {
+        if (stream->ssrc == ssrc)
+            return stream;
+        stream = stream->next;
+    }
+
+    /* we haven't found our ssrc, so return a null */
+    return NULL;
+}
+
+srtp_err_status_t srtp_dealloc(srtp_t session)
+{
+    srtp_stream_ctx_t *stream;
+    srtp_err_status_t status;
+
+    /*
+     * we take a conservative deallocation strategy - if we encounter an
+     * error deallocating a stream, then we stop trying to deallocate
+     * memory and just return an error
+     */
+
+    /* walk list of streams, deallocating as we go */
+    stream = session->stream_list;
+    while (stream != NULL) {
+        srtp_stream_t next = stream->next;
+        status = srtp_stream_dealloc(stream, session->stream_template);
+        if (status)
+            return status;
+        stream = next;
+    }
+
+    /* deallocate stream template, if there is one */
+    if (session->stream_template != NULL) {
+        status = srtp_stream_dealloc(session->stream_template, NULL);
+        if (status)
+            return status;
+    }
+
+    /* deallocate session context */
+    srtp_crypto_free(session);
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_add_stream(srtp_t session, const srtp_policy_t *policy)
+{
+    srtp_err_status_t status;
+    srtp_stream_t tmp;
+
+    /* sanity check arguments */
+    if ((session == NULL) || (policy == NULL) ||
+        (!srtp_validate_policy_master_keys(policy)))
+        return srtp_err_status_bad_param;
+
+    /* allocate stream  */
+    status = srtp_stream_alloc(&tmp, policy);
+    if (status) {
+        return status;
+    }
+
+    /* initialize stream  */
+    status = srtp_stream_init(tmp, policy);
+    if (status) {
+        srtp_stream_dealloc(tmp, NULL);
+        return status;
+    }
+
+    /*
+     * set the head of the stream list or the template to point to the
+     * stream that we've just alloced and init'ed, depending on whether
+     * or not it has a wildcard SSRC value or not
+     *
+     * if the template stream has already been set, then the policy is
+     * inconsistent, so we return a bad_param error code
+     */
+    switch (policy->ssrc.type) {
+    case (ssrc_any_outbound):
+        if (session->stream_template) {
+            srtp_stream_dealloc(tmp, NULL);
+            return srtp_err_status_bad_param;
+        }
+        session->stream_template = tmp;
+        session->stream_template->direction = dir_srtp_sender;
+        break;
+    case (ssrc_any_inbound):
+        if (session->stream_template) {
+            srtp_stream_dealloc(tmp, NULL);
+            return srtp_err_status_bad_param;
+        }
+        session->stream_template = tmp;
+        session->stream_template->direction = dir_srtp_receiver;
+        break;
+    case (ssrc_specific):
+        tmp->next = session->stream_list;
+        session->stream_list = tmp;
+        break;
+    case (ssrc_undefined):
+    default:
+        srtp_stream_dealloc(tmp, NULL);
+        return srtp_err_status_bad_param;
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_create(srtp_t *session, /* handle for session     */
+                              const srtp_policy_t *policy)
+{ /* SRTP policy (list)     */
+    srtp_err_status_t stat;
+    srtp_ctx_t *ctx;
+
+    /* sanity check arguments */
+    if (session == NULL)
+        return srtp_err_status_bad_param;
+
+    /* allocate srtp context and set ctx_ptr */
+    ctx = (srtp_ctx_t *)srtp_crypto_alloc(sizeof(srtp_ctx_t));
+    if (ctx == NULL)
+        return srtp_err_status_alloc_fail;
+    *session = ctx;
+
+    /*
+     * loop over elements in the policy list, allocating and
+     * initializing a stream for each element
+     */
+    ctx->stream_template = NULL;
+    ctx->stream_list = NULL;
+    ctx->user_data = NULL;
+    while (policy != NULL) {
+        stat = srtp_add_stream(ctx, policy);
+        if (stat) {
+            /* clean up everything */
+            srtp_dealloc(*session);
+            *session = NULL;
+            return stat;
+        }
+
+        /* set policy to next item in list  */
+        policy = policy->next;
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_remove_stream(srtp_t session, uint32_t ssrc)
+{
+    srtp_stream_ctx_t *stream, *last_stream;
+    srtp_err_status_t status;
+
+    /* sanity check arguments */
+    if (session == NULL)
+        return srtp_err_status_bad_param;
+
+    /* find stream in list; complain if not found */
+    last_stream = stream = session->stream_list;
+    while ((stream != NULL) && (ssrc != stream->ssrc)) {
+        last_stream = stream;
+        stream = stream->next;
+    }
+    if (stream == NULL)
+        return srtp_err_status_no_ctx;
+
+    /* remove stream from the list */
+    if (last_stream == stream)
+        /* stream was first in list */
+        session->stream_list = stream->next;
+    else
+        last_stream->next = stream->next;
+
+    /* deallocate the stream */
+    status = srtp_stream_dealloc(stream, session->stream_template);
+    if (status)
+        return status;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_update(srtp_t session, const srtp_policy_t *policy)
+{
+    srtp_err_status_t stat;
+
+    /* sanity check arguments */
+    if ((session == NULL) || (policy == NULL) ||
+        (!srtp_validate_policy_master_keys(policy))) {
+        return srtp_err_status_bad_param;
+    }
+
+    while (policy != NULL) {
+        stat = srtp_update_stream(session, policy);
+        if (stat) {
+            return stat;
+        }
+
+        /* set policy to next item in list  */
+        policy = policy->next;
+    }
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t update_template_streams(srtp_t session,
+                                                 const srtp_policy_t *policy)
+{
+    srtp_err_status_t status;
+    srtp_stream_t new_stream_template;
+    srtp_stream_t new_stream_list = NULL;
+
+    if (session->stream_template == NULL) {
+        return srtp_err_status_bad_param;
+    }
+
+    /* allocate new template stream  */
+    status = srtp_stream_alloc(&new_stream_template, policy);
+    if (status) {
+        return status;
+    }
+
+    /* initialize new template stream  */
+    status = srtp_stream_init(new_stream_template, policy);
+    if (status) {
+        srtp_crypto_free(new_stream_template);
+        return status;
+    }
+
+    /* for all old templated streams */
+    for (;;) {
+        srtp_stream_t stream;
+        uint32_t ssrc;
+        srtp_xtd_seq_num_t old_index;
+        srtp_rdb_t old_rtcp_rdb;
+
+        stream = session->stream_list;
+        while ((stream != NULL) &&
+               (stream->session_keys[0].rtp_auth !=
+                session->stream_template->session_keys[0].rtp_auth)) {
+            stream = stream->next;
+        }
+        if (stream == NULL) {
+            /* no more templated streams */
+            break;
+        }
+
+        /* save old extendard seq */
+        ssrc = stream->ssrc;
+        old_index = stream->rtp_rdbx.index;
+        old_rtcp_rdb = stream->rtcp_rdb;
+
+        /* remove stream */
+        status = srtp_remove_stream(session, ssrc);
+        if (status) {
+            /* free new allocations */
+            while (new_stream_list != NULL) {
+                srtp_stream_t next = new_stream_list->next;
+                srtp_stream_dealloc(new_stream_list, new_stream_template);
+                new_stream_list = next;
+            }
+            srtp_stream_dealloc(new_stream_template, NULL);
+            return status;
+        }
+
+        /* allocate and initialize a new stream */
+        status = srtp_stream_clone(new_stream_template, ssrc, &stream);
+        if (status) {
+            /* free new allocations */
+            while (new_stream_list != NULL) {
+                srtp_stream_t next = new_stream_list->next;
+                srtp_stream_dealloc(new_stream_list, new_stream_template);
+                new_stream_list = next;
+            }
+            srtp_stream_dealloc(new_stream_template, NULL);
+            return status;
+        }
+
+        /* add new stream to the head of the new_stream_list */
+        stream->next = new_stream_list;
+        new_stream_list = stream;
+
+        /* restore old extended seq */
+        stream->rtp_rdbx.index = old_index;
+        stream->rtcp_rdb = old_rtcp_rdb;
+    }
+    /* dealloc old template */
+    srtp_stream_dealloc(session->stream_template, NULL);
+    /* set new template */
+    session->stream_template = new_stream_template;
+    /* add new list */
+    if (new_stream_list) {
+        srtp_stream_t tail = new_stream_list;
+        while (tail->next) {
+            tail = tail->next;
+        }
+        tail->next = session->stream_list;
+        session->stream_list = new_stream_list;
+    }
+    return status;
+}
+
+static srtp_err_status_t update_stream(srtp_t session,
+                                       const srtp_policy_t *policy)
+{
+    srtp_err_status_t status;
+    srtp_xtd_seq_num_t old_index;
+    srtp_rdb_t old_rtcp_rdb;
+    srtp_stream_t stream;
+
+    stream = srtp_get_stream(session, htonl(policy->ssrc.value));
+    if (stream == NULL) {
+        return srtp_err_status_bad_param;
+    }
+
+    /* save old extendard seq */
+    old_index = stream->rtp_rdbx.index;
+    old_rtcp_rdb = stream->rtcp_rdb;
+
+    status = srtp_remove_stream(session, htonl(policy->ssrc.value));
+    if (status) {
+        return status;
+    }
+
+    status = srtp_add_stream(session, policy);
+    if (status) {
+        return status;
+    }
+
+    stream = srtp_get_stream(session, htonl(policy->ssrc.value));
+    if (stream == NULL) {
+        return srtp_err_status_fail;
+    }
+
+    /* restore old extended seq */
+    stream->rtp_rdbx.index = old_index;
+    stream->rtcp_rdb = old_rtcp_rdb;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_update_stream(srtp_t session,
+                                     const srtp_policy_t *policy)
+{
+    srtp_err_status_t status;
+
+    /* sanity check arguments */
+    if ((session == NULL) || (policy == NULL) ||
+        (!srtp_validate_policy_master_keys(policy)))
+        return srtp_err_status_bad_param;
+
+    switch (policy->ssrc.type) {
+    case (ssrc_any_outbound):
+    case (ssrc_any_inbound):
+        status = update_template_streams(session, policy);
+        break;
+    case (ssrc_specific):
+        status = update_stream(session, policy);
+        break;
+    case (ssrc_undefined):
+    default:
+        return srtp_err_status_bad_param;
+    }
+
+    return status;
+}
+
+/*
+ * The default policy - provides a convenient way for callers to use
+ * the default security policy
+ *
+ * The default policy is defined in RFC 3711
+ * (Section 5. Default and mandatory-to-implement Transforms)
+ *
+ */
+
+/*
+ * NOTE: cipher_key_len is really key len (128 bits) plus salt len
+ *  (112 bits)
+ */
+/* There are hard-coded 16's for base_key_len in the key generation code */
+
+void srtp_crypto_policy_set_rtp_default(srtp_crypto_policy_t *p)
+{
+    p->cipher_type = SRTP_AES_ICM_128;
+    p->cipher_key_len =
+        SRTP_AES_ICM_128_KEY_LEN_WSALT; /* default 128 bits per RFC 3711 */
+    p->auth_type = SRTP_HMAC_SHA1;
+    p->auth_key_len = 20; /* default 160 bits per RFC 3711 */
+    p->auth_tag_len = 10; /* default 80 bits per RFC 3711 */
+    p->sec_serv = sec_serv_conf_and_auth;
+}
+
+void srtp_crypto_policy_set_rtcp_default(srtp_crypto_policy_t *p)
+{
+    p->cipher_type = SRTP_AES_ICM_128;
+    p->cipher_key_len =
+        SRTP_AES_ICM_128_KEY_LEN_WSALT; /* default 128 bits per RFC 3711 */
+    p->auth_type = SRTP_HMAC_SHA1;
+    p->auth_key_len = 20; /* default 160 bits per RFC 3711 */
+    p->auth_tag_len = 10; /* default 80 bits per RFC 3711 */
+    p->sec_serv = sec_serv_conf_and_auth;
+}
+
+void srtp_crypto_policy_set_aes_cm_128_hmac_sha1_32(srtp_crypto_policy_t *p)
+{
+    /*
+     * corresponds to RFC 4568
+     *
+     * note that this crypto policy is intended for SRTP, but not SRTCP
+     */
+
+    p->cipher_type = SRTP_AES_ICM_128;
+    p->cipher_key_len =
+        SRTP_AES_ICM_128_KEY_LEN_WSALT; /* 128 bit key, 112 bit salt */
+    p->auth_type = SRTP_HMAC_SHA1;
+    p->auth_key_len = 20; /* 160 bit key               */
+    p->auth_tag_len = 4;  /* 32 bit tag                */
+    p->sec_serv = sec_serv_conf_and_auth;
+}
+
+void srtp_crypto_policy_set_aes_cm_128_null_auth(srtp_crypto_policy_t *p)
+{
+    /*
+     * corresponds to RFC 4568
+     *
+     * note that this crypto policy is intended for SRTP, but not SRTCP
+     */
+
+    p->cipher_type = SRTP_AES_ICM_128;
+    p->cipher_key_len =
+        SRTP_AES_ICM_128_KEY_LEN_WSALT; /* 128 bit key, 112 bit salt */
+    p->auth_type = SRTP_NULL_AUTH;
+    p->auth_key_len = 0;
+    p->auth_tag_len = 0;
+    p->sec_serv = sec_serv_conf;
+}
+
+void srtp_crypto_policy_set_null_cipher_hmac_sha1_80(srtp_crypto_policy_t *p)
+{
+    /*
+     * corresponds to RFC 4568
+     */
+
+    p->cipher_type = SRTP_NULL_CIPHER;
+    p->cipher_key_len = 0;
+    p->auth_type = SRTP_HMAC_SHA1;
+    p->auth_key_len = 20;
+    p->auth_tag_len = 10;
+    p->sec_serv = sec_serv_auth;
+}
+
+void srtp_crypto_policy_set_null_cipher_hmac_null(srtp_crypto_policy_t *p)
+{
+    /*
+     * Should only be used for testing
+     */
+
+    p->cipher_type = SRTP_NULL_CIPHER;
+    p->cipher_key_len = 0;
+    p->auth_type = SRTP_NULL_AUTH;
+    p->auth_key_len = 0;
+    p->auth_tag_len = 0;
+    p->sec_serv = sec_serv_none;
+}
+
+void srtp_crypto_policy_set_aes_cm_256_hmac_sha1_80(srtp_crypto_policy_t *p)
+{
+    /*
+     * corresponds to RFC 6188
+     */
+
+    p->cipher_type = SRTP_AES_ICM_256;
+    p->cipher_key_len = SRTP_AES_ICM_256_KEY_LEN_WSALT;
+    p->auth_type = SRTP_HMAC_SHA1;
+    p->auth_key_len = 20; /* default 160 bits per RFC 3711 */
+    p->auth_tag_len = 10; /* default 80 bits per RFC 3711 */
+    p->sec_serv = sec_serv_conf_and_auth;
+}
+
+void srtp_crypto_policy_set_aes_cm_256_hmac_sha1_32(srtp_crypto_policy_t *p)
+{
+    /*
+     * corresponds to RFC 6188
+     *
+     * note that this crypto policy is intended for SRTP, but not SRTCP
+     */
+
+    p->cipher_type = SRTP_AES_ICM_256;
+    p->cipher_key_len = SRTP_AES_ICM_256_KEY_LEN_WSALT;
+    p->auth_type = SRTP_HMAC_SHA1;
+    p->auth_key_len = 20; /* default 160 bits per RFC 3711 */
+    p->auth_tag_len = 4;  /* default 80 bits per RFC 3711 */
+    p->sec_serv = sec_serv_conf_and_auth;
+}
+
+/*
+ * AES-256 with no authentication.
+ */
+void srtp_crypto_policy_set_aes_cm_256_null_auth(srtp_crypto_policy_t *p)
+{
+    p->cipher_type = SRTP_AES_ICM_256;
+    p->cipher_key_len = SRTP_AES_ICM_256_KEY_LEN_WSALT;
+    p->auth_type = SRTP_NULL_AUTH;
+    p->auth_key_len = 0;
+    p->auth_tag_len = 0;
+    p->sec_serv = sec_serv_conf;
+}
+
+void srtp_crypto_policy_set_aes_cm_192_hmac_sha1_80(srtp_crypto_policy_t *p)
+{
+    /*
+     * corresponds to RFC 6188
+     */
+
+    p->cipher_type = SRTP_AES_ICM_192;
+    p->cipher_key_len = SRTP_AES_ICM_192_KEY_LEN_WSALT;
+    p->auth_type = SRTP_HMAC_SHA1;
+    p->auth_key_len = 20; /* default 160 bits per RFC 3711 */
+    p->auth_tag_len = 10; /* default 80 bits per RFC 3711 */
+    p->sec_serv = sec_serv_conf_and_auth;
+}
+
+void srtp_crypto_policy_set_aes_cm_192_hmac_sha1_32(srtp_crypto_policy_t *p)
+{
+    /*
+     * corresponds to RFC 6188
+     *
+     * note that this crypto policy is intended for SRTP, but not SRTCP
+     */
+
+    p->cipher_type = SRTP_AES_ICM_192;
+    p->cipher_key_len = SRTP_AES_ICM_192_KEY_LEN_WSALT;
+    p->auth_type = SRTP_HMAC_SHA1;
+    p->auth_key_len = 20; /* default 160 bits per RFC 3711 */
+    p->auth_tag_len = 4;  /* default 80 bits per RFC 3711 */
+    p->sec_serv = sec_serv_conf_and_auth;
+}
+
+/*
+ * AES-192 with no authentication.
+ */
+void srtp_crypto_policy_set_aes_cm_192_null_auth(srtp_crypto_policy_t *p)
+{
+    p->cipher_type = SRTP_AES_ICM_192;
+    p->cipher_key_len = SRTP_AES_ICM_192_KEY_LEN_WSALT;
+    p->auth_type = SRTP_NULL_AUTH;
+    p->auth_key_len = 0;
+    p->auth_tag_len = 0;
+    p->sec_serv = sec_serv_conf;
+}
+
+/*
+ * AES-128 GCM mode with 8 octet auth tag.
+ */
+void srtp_crypto_policy_set_aes_gcm_128_8_auth(srtp_crypto_policy_t *p)
+{
+    p->cipher_type = SRTP_AES_GCM_128;
+    p->cipher_key_len = SRTP_AES_GCM_128_KEY_LEN_WSALT;
+    p->auth_type = SRTP_NULL_AUTH; /* GCM handles the auth for us */
+    p->auth_key_len = 0;
+    p->auth_tag_len = 8; /* 8 octet tag length */
+    p->sec_serv = sec_serv_conf_and_auth;
+}
+
+/*
+ * AES-256 GCM mode with 8 octet auth tag.
+ */
+void srtp_crypto_policy_set_aes_gcm_256_8_auth(srtp_crypto_policy_t *p)
+{
+    p->cipher_type = SRTP_AES_GCM_256;
+    p->cipher_key_len = SRTP_AES_GCM_256_KEY_LEN_WSALT;
+    p->auth_type = SRTP_NULL_AUTH; /* GCM handles the auth for us */
+    p->auth_key_len = 0;
+    p->auth_tag_len = 8; /* 8 octet tag length */
+    p->sec_serv = sec_serv_conf_and_auth;
+}
+
+/*
+ * AES-128 GCM mode with 8 octet auth tag, no RTCP encryption.
+ */
+void srtp_crypto_policy_set_aes_gcm_128_8_only_auth(srtp_crypto_policy_t *p)
+{
+    p->cipher_type = SRTP_AES_GCM_128;
+    p->cipher_key_len = SRTP_AES_GCM_128_KEY_LEN_WSALT;
+    p->auth_type = SRTP_NULL_AUTH; /* GCM handles the auth for us */
+    p->auth_key_len = 0;
+    p->auth_tag_len = 8;         /* 8 octet tag length */
+    p->sec_serv = sec_serv_auth; /* This only applies to RTCP */
+}
+
+/*
+ * AES-256 GCM mode with 8 octet auth tag, no RTCP encryption.
+ */
+void srtp_crypto_policy_set_aes_gcm_256_8_only_auth(srtp_crypto_policy_t *p)
+{
+    p->cipher_type = SRTP_AES_GCM_256;
+    p->cipher_key_len = SRTP_AES_GCM_256_KEY_LEN_WSALT;
+    p->auth_type = SRTP_NULL_AUTH; /* GCM handles the auth for us */
+    p->auth_key_len = 0;
+    p->auth_tag_len = 8;         /* 8 octet tag length */
+    p->sec_serv = sec_serv_auth; /* This only applies to RTCP */
+}
+
+/*
+ * AES-128 GCM mode with 16 octet auth tag.
+ */
+void srtp_crypto_policy_set_aes_gcm_128_16_auth(srtp_crypto_policy_t *p)
+{
+    p->cipher_type = SRTP_AES_GCM_128;
+    p->cipher_key_len = SRTP_AES_GCM_128_KEY_LEN_WSALT;
+    p->auth_type = SRTP_NULL_AUTH; /* GCM handles the auth for us */
+    p->auth_key_len = 0;
+    p->auth_tag_len = 16; /* 16 octet tag length */
+    p->sec_serv = sec_serv_conf_and_auth;
+}
+
+/*
+ * AES-256 GCM mode with 16 octet auth tag.
+ */
+void srtp_crypto_policy_set_aes_gcm_256_16_auth(srtp_crypto_policy_t *p)
+{
+    p->cipher_type = SRTP_AES_GCM_256;
+    p->cipher_key_len = SRTP_AES_GCM_256_KEY_LEN_WSALT;
+    p->auth_type = SRTP_NULL_AUTH; /* GCM handles the auth for us */
+    p->auth_key_len = 0;
+    p->auth_tag_len = 16; /* 16 octet tag length */
+    p->sec_serv = sec_serv_conf_and_auth;
+}
+
+/*
+ * secure rtcp functions
+ */
+
+/*
+ * AEAD uses a new IV formation method.  This function implements
+ * section 9.1 (SRTCP IV Formation for AES-GCM) from RFC7714.
+ * The calculation is defined as, where (+) is the xor operation:
+ *
+ *                0  1  2  3  4  5  6  7  8  9 10 11
+ *               +--+--+--+--+--+--+--+--+--+--+--+--+
+ *               |00|00|    SSRC   |00|00|0+SRTCP Idx|---+
+ *               +--+--+--+--+--+--+--+--+--+--+--+--+   |
+ *                                                       |
+ *               +--+--+--+--+--+--+--+--+--+--+--+--+   |
+ *               |         Encryption Salt           |->(+)
+ *               +--+--+--+--+--+--+--+--+--+--+--+--+   |
+ *                                                       |
+ *               +--+--+--+--+--+--+--+--+--+--+--+--+   |
+ *               |       Initialization Vector       |<--+
+ *               +--+--+--+--+--+--+--+--+--+--+--+--+*
+ *
+ * Input:  *session_keys - pointer to SRTP stream context session keys,
+ *                        used to retrieve the SALT
+ *         *iv           - Pointer to recieve the calculated IV
+ *         seq_num       - The SEQ value to use for the IV calculation.
+ *         *hdr          - The RTP header, used to get the SSRC value
+ *
+ * Returns: srtp_err_status_ok if no error or srtp_err_status_bad_param
+ *          if seq_num is invalid
+ *
+ */
+static srtp_err_status_t srtp_calc_aead_iv_srtcp(
+    srtp_session_keys_t *session_keys,
+    v128_t *iv,
+    uint32_t seq_num,
+    srtcp_hdr_t *hdr)
+{
+    v128_t in;
+    v128_t salt;
+
+    memset(&in, 0, sizeof(v128_t));
+    memset(&salt, 0, sizeof(v128_t));
+
+    in.v16[0] = 0;
+    memcpy(&in.v16[1], &hdr->ssrc, 4); /* still in network order! */
+    in.v16[3] = 0;
+
+    /*
+     *  The SRTCP index (seq_num) spans bits 0 through 30 inclusive.
+     *  The most significant bit should be zero.
+     */
+    if (seq_num & 0x80000000UL) {
+        return srtp_err_status_bad_param;
+    }
+    in.v32[2] = htonl(seq_num);
+
+    debug_print(mod_srtp, "Pre-salted RTCP IV = %s\n", v128_hex_string(&in));
+
+    /*
+     * Get the SALT value from the context
+     */
+    memcpy(salt.v8, session_keys->c_salt, 12);
+    debug_print(mod_srtp, "RTCP SALT = %s\n", v128_hex_string(&salt));
+
+    /*
+     * Finally, apply the SALT to the input
+     */
+    v128_xor(iv, &in, &salt);
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * This code handles AEAD ciphers for outgoing RTCP.  We currently support
+ * AES-GCM mode with 128 or 256 bit keys.
+ */
+static srtp_err_status_t srtp_protect_rtcp_aead(
+    srtp_t ctx,
+    srtp_stream_ctx_t *stream,
+    void *rtcp_hdr,
+    unsigned int *pkt_octet_len,
+    srtp_session_keys_t *session_keys,
+    unsigned int use_mki)
+{
+    srtcp_hdr_t *hdr = (srtcp_hdr_t *)rtcp_hdr;
+    uint32_t *enc_start;            /* pointer to start of encrypted portion  */
+    uint32_t *trailer_p;            /* pointer to start of trailer            */
+    uint32_t trailer;               /* trailer value                          */
+    unsigned int enc_octet_len = 0; /* number of octets in encrypted portion */
+    uint8_t *auth_tag = NULL;       /* location of auth_tag within packet     */
+    srtp_err_status_t status;
+    uint32_t tag_len;
+    uint32_t seq_num;
+    v128_t iv;
+    uint32_t tseq;
+    unsigned int mki_size = 0;
+
+    /* get tag length from stream context */
+    tag_len = srtp_auth_get_tag_length(session_keys->rtcp_auth);
+
+    /*
+     * set encryption start and encryption length - if we're not
+     * providing confidentiality, set enc_start to NULL
+     */
+    enc_start = (uint32_t *)hdr + uint32s_in_rtcp_header;
+    enc_octet_len = *pkt_octet_len - octets_in_rtcp_header;
+
+    /* NOTE: hdr->length is not usable - it refers to only the first
+     * RTCP report in the compound packet!
+     */
+    trailer_p = (uint32_t *)((char *)enc_start + enc_octet_len + tag_len);
+
+    if (stream->rtcp_services & sec_serv_conf) {
+        trailer = htonl(SRTCP_E_BIT); /* set encrypt bit */
+    } else {
+        enc_start = NULL;
+        enc_octet_len = 0;
+        /* 0 is network-order independant */
+        trailer = 0x00000000; /* set encrypt bit */
+    }
+
+    mki_size = srtp_inject_mki((uint8_t *)hdr + *pkt_octet_len + tag_len +
+                                   sizeof(srtcp_trailer_t),
+                               session_keys, use_mki);
+
+    /*
+     * set the auth_tag pointer to the proper location, which is after
+     * the payload, but before the trailer
+     * (note that srtpc *always* provides authentication, unlike srtp)
+     */
+    /* Note: This would need to change for optional mikey data */
+    auth_tag = (uint8_t *)hdr + *pkt_octet_len;
+
+    /*
+     * check sequence number for overruns, and copy it into the packet
+     * if its value isn't too big
+     */
+    status = srtp_rdb_increment(&stream->rtcp_rdb);
+    if (status) {
+        return status;
+    }
+    seq_num = srtp_rdb_get_value(&stream->rtcp_rdb);
+    trailer |= htonl(seq_num);
+    debug_print(mod_srtp, "srtcp index: %x", seq_num);
+
+    memcpy(trailer_p, &trailer, sizeof(trailer));
+
+    /*
+     * Calculate and set the IV
+     */
+    status = srtp_calc_aead_iv_srtcp(session_keys, &iv, seq_num, hdr);
+    if (status) {
+        return srtp_err_status_cipher_fail;
+    }
+    status = srtp_cipher_set_iv(session_keys->rtcp_cipher, (uint8_t *)&iv,
+                                srtp_direction_encrypt);
+    if (status) {
+        return srtp_err_status_cipher_fail;
+    }
+
+    /*
+     * Set the AAD for GCM mode
+     */
+    if (enc_start) {
+        /*
+         * If payload encryption is enabled, then the AAD consist of
+         * the RTCP header and the seq# at the end of the packet
+         */
+        status = srtp_cipher_set_aad(session_keys->rtcp_cipher, (uint8_t *)hdr,
+                                     octets_in_rtcp_header);
+        if (status) {
+            return (srtp_err_status_cipher_fail);
+        }
+    } else {
+        /*
+         * Since payload encryption is not enabled, we must authenticate
+         * the entire packet as described in RFC 7714 (Section 9.3. Data
+         * Types in Unencrypted SRTCP Compound Packets)
+         */
+        status = srtp_cipher_set_aad(session_keys->rtcp_cipher, (uint8_t *)hdr,
+                                     *pkt_octet_len);
+        if (status) {
+            return (srtp_err_status_cipher_fail);
+        }
+    }
+    /*
+     * Process the sequence# as AAD
+     */
+    tseq = trailer;
+    status = srtp_cipher_set_aad(session_keys->rtcp_cipher, (uint8_t *)&tseq,
+                                 sizeof(srtcp_trailer_t));
+    if (status) {
+        return (srtp_err_status_cipher_fail);
+    }
+
+    /* if we're encrypting, exor keystream into the message */
+    if (enc_start) {
+        status = srtp_cipher_encrypt(session_keys->rtcp_cipher,
+                                     (uint8_t *)enc_start, &enc_octet_len);
+        if (status) {
+            return srtp_err_status_cipher_fail;
+        }
+        /*
+         * Get the tag and append that to the output
+         */
+        status = srtp_cipher_get_tag(session_keys->rtcp_cipher,
+                                     (uint8_t *)auth_tag, &tag_len);
+        if (status) {
+            return (srtp_err_status_cipher_fail);
+        }
+        enc_octet_len += tag_len;
+    } else {
+        /*
+         * Even though we're not encrypting the payload, we need
+         * to run the cipher to get the auth tag.
+         */
+        unsigned int nolen = 0;
+        status = srtp_cipher_encrypt(session_keys->rtcp_cipher, NULL, &nolen);
+        if (status) {
+            return srtp_err_status_cipher_fail;
+        }
+        /*
+         * Get the tag and append that to the output
+         */
+        status = srtp_cipher_get_tag(session_keys->rtcp_cipher,
+                                     (uint8_t *)auth_tag, &tag_len);
+        if (status) {
+            return (srtp_err_status_cipher_fail);
+        }
+        enc_octet_len += tag_len;
+    }
+
+    /* increase the packet length by the length of the auth tag and seq_num*/
+    *pkt_octet_len += (tag_len + sizeof(srtcp_trailer_t));
+
+    /* increase the packet by the mki_size */
+    *pkt_octet_len += mki_size;
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * This function handles incoming SRTCP packets while in AEAD mode,
+ * which currently supports AES-GCM encryption.  Note, the auth tag is
+ * at the end of the packet stream and is automatically checked by GCM
+ * when decrypting the payload.
+ */
+static srtp_err_status_t srtp_unprotect_rtcp_aead(
+    srtp_t ctx,
+    srtp_stream_ctx_t *stream,
+    void *srtcp_hdr,
+    unsigned int *pkt_octet_len,
+    srtp_session_keys_t *session_keys,
+    unsigned int use_mki)
+{
+    srtcp_hdr_t *hdr = (srtcp_hdr_t *)srtcp_hdr;
+    uint32_t *enc_start;            /* pointer to start of encrypted portion  */
+    uint32_t *trailer_p;            /* pointer to start of trailer            */
+    uint32_t trailer;               /* trailer value                          */
+    unsigned int enc_octet_len = 0; /* number of octets in encrypted portion */
+    uint8_t *auth_tag = NULL;       /* location of auth_tag within packet     */
+    srtp_err_status_t status;
+    int tag_len;
+    unsigned int tmp_len;
+    uint32_t seq_num;
+    v128_t iv;
+    uint32_t tseq;
+    unsigned int mki_size = 0;
+
+    /* get tag length from stream context */
+    tag_len = srtp_auth_get_tag_length(session_keys->rtcp_auth);
+
+    if (use_mki) {
+        mki_size = session_keys->mki_size;
+    }
+
+    /*
+     * set encryption start, encryption length, and trailer
+     */
+    /* index & E (encryption) bit follow normal data. hdr->len is the number of
+     * words (32-bit) in the normal packet minus 1
+     */
+    /* This should point trailer to the word past the end of the normal data. */
+    /* This would need to be modified for optional mikey data */
+    trailer_p = (uint32_t *)((char *)hdr + *pkt_octet_len -
+                             sizeof(srtcp_trailer_t) - mki_size);
+    memcpy(&trailer, trailer_p, sizeof(trailer));
+
+    /*
+     * We pass the tag down to the cipher when doing GCM mode
+     */
+    enc_octet_len = *pkt_octet_len - (octets_in_rtcp_header +
+                                      sizeof(srtcp_trailer_t) + mki_size);
+    auth_tag = (uint8_t *)hdr + *pkt_octet_len - tag_len - mki_size -
+               sizeof(srtcp_trailer_t);
+
+    if (*((unsigned char *)trailer_p) & SRTCP_E_BYTE_BIT) {
+        enc_start = (uint32_t *)hdr + uint32s_in_rtcp_header;
+    } else {
+        enc_octet_len = 0;
+        enc_start = NULL; /* this indicates that there's no encryption */
+    }
+
+    /*
+     * check the sequence number for replays
+     */
+    /* this is easier than dealing with bitfield access */
+    seq_num = ntohl(trailer) & SRTCP_INDEX_MASK;
+    debug_print(mod_srtp, "srtcp index: %x", seq_num);
+    status = srtp_rdb_check(&stream->rtcp_rdb, seq_num);
+    if (status) {
+        return status;
+    }
+
+    /*
+     * Calculate and set the IV
+     */
+    status = srtp_calc_aead_iv_srtcp(session_keys, &iv, seq_num, hdr);
+    if (status) {
+        return srtp_err_status_cipher_fail;
+    }
+    status = srtp_cipher_set_iv(session_keys->rtcp_cipher, (uint8_t *)&iv,
+                                srtp_direction_decrypt);
+    if (status) {
+        return srtp_err_status_cipher_fail;
+    }
+
+    /*
+     * Set the AAD for GCM mode
+     */
+    if (enc_start) {
+        /*
+         * If payload encryption is enabled, then the AAD consist of
+         * the RTCP header and the seq# at the end of the packet
+         */
+        status = srtp_cipher_set_aad(session_keys->rtcp_cipher, (uint8_t *)hdr,
+                                     octets_in_rtcp_header);
+        if (status) {
+            return (srtp_err_status_cipher_fail);
+        }
+    } else {
+        /*
+         * Since payload encryption is not enabled, we must authenticate
+         * the entire packet as described in RFC 7714 (Section 9.3. Data
+         * Types in Unencrypted SRTCP Compound Packets)
+         */
+        status = srtp_cipher_set_aad(
+            session_keys->rtcp_cipher, (uint8_t *)hdr,
+            (*pkt_octet_len - tag_len - sizeof(srtcp_trailer_t) - mki_size));
+        if (status) {
+            return (srtp_err_status_cipher_fail);
+        }
+    }
+
+    /*
+     * Process the sequence# as AAD
+     */
+    tseq = trailer;
+    status = srtp_cipher_set_aad(session_keys->rtcp_cipher, (uint8_t *)&tseq,
+                                 sizeof(srtcp_trailer_t));
+    if (status) {
+        return (srtp_err_status_cipher_fail);
+    }
+
+    /* if we're decrypting, exor keystream into the message */
+    if (enc_start) {
+        status = srtp_cipher_decrypt(session_keys->rtcp_cipher,
+                                     (uint8_t *)enc_start, &enc_octet_len);
+        if (status) {
+            return status;
+        }
+    } else {
+        /*
+         * Still need to run the cipher to check the tag
+         */
+        tmp_len = tag_len;
+        status = srtp_cipher_decrypt(session_keys->rtcp_cipher,
+                                     (uint8_t *)auth_tag, &tmp_len);
+        if (status) {
+            return status;
+        }
+    }
+
+    /* decrease the packet length by the length of the auth tag and seq_num*/
+    *pkt_octet_len -= (tag_len + sizeof(srtcp_trailer_t) + mki_size);
+
+    /*
+     * verify that stream is for received traffic - this check will
+     * detect SSRC collisions, since a stream that appears in both
+     * srtp_protect() and srtp_unprotect() will fail this test in one of
+     * those functions.
+     *
+     * we do this check *after* the authentication check, so that the
+     * latter check will catch any attempts to fool us into thinking
+     * that we've got a collision
+     */
+    if (stream->direction != dir_srtp_receiver) {
+        if (stream->direction == dir_unknown) {
+            stream->direction = dir_srtp_receiver;
+        } else {
+            srtp_handle_event(ctx, stream, event_ssrc_collision);
+        }
+    }
+
+    /*
+     * if the stream is a 'provisional' one, in which the template context
+     * is used, then we need to allocate a new stream at this point, since
+     * the authentication passed
+     */
+    if (stream == ctx->stream_template) {
+        srtp_stream_ctx_t *new_stream;
+
+        /*
+         * allocate and initialize a new stream
+         *
+         * note that we indicate failure if we can't allocate the new
+         * stream, and some implementations will want to not return
+         * failure here
+         */
+        status =
+            srtp_stream_clone(ctx->stream_template, hdr->ssrc, &new_stream);
+        if (status) {
+            return status;
+        }
+
+        /* add new stream to the head of the stream_list */
+        new_stream->next = ctx->stream_list;
+        ctx->stream_list = new_stream;
+
+        /* set stream (the pointer used in this function) */
+        stream = new_stream;
+    }
+
+    /* we've passed the authentication check, so add seq_num to the rdb */
+    srtp_rdb_add_index(&stream->rtcp_rdb, seq_num);
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_protect_rtcp(srtp_t ctx,
+                                    void *rtcp_hdr,
+                                    int *pkt_octet_len)
+{
+    return srtp_protect_rtcp_mki(ctx, rtcp_hdr, pkt_octet_len, 0, 0);
+}
+
+srtp_err_status_t srtp_protect_rtcp_mki(srtp_t ctx,
+                                        void *rtcp_hdr,
+                                        int *pkt_octet_len,
+                                        unsigned int use_mki,
+                                        unsigned int mki_index)
+{
+    srtcp_hdr_t *hdr = (srtcp_hdr_t *)rtcp_hdr;
+    uint32_t *enc_start;            /* pointer to start of encrypted portion  */
+    uint32_t *auth_start;           /* pointer to start of auth. portion      */
+    uint32_t *trailer_p;            /* pointer to start of trailer            */
+    uint32_t trailer;               /* trailer value                          */
+    unsigned int enc_octet_len = 0; /* number of octets in encrypted portion */
+    uint8_t *auth_tag = NULL;       /* location of auth_tag within packet     */
+    srtp_err_status_t status;
+    int tag_len;
+    srtp_stream_ctx_t *stream;
+    uint32_t prefix_len;
+    uint32_t seq_num;
+    unsigned int mki_size = 0;
+    srtp_session_keys_t *session_keys = NULL;
+
+    /* we assume the hdr is 32-bit aligned to start */
+
+    /* check the packet length - it must at least contain a full header */
+    if (*pkt_octet_len < octets_in_rtcp_header)
+        return srtp_err_status_bad_param;
+
+    /*
+     * look up ssrc in srtp_stream list, and process the packet with
+     * the appropriate stream.  if we haven't seen this stream before,
+     * there's only one key for this srtp_session, and the cipher
+     * supports key-sharing, then we assume that a new stream using
+     * that key has just started up
+     */
+    stream = srtp_get_stream(ctx, hdr->ssrc);
+    if (stream == NULL) {
+        if (ctx->stream_template != NULL) {
+            srtp_stream_ctx_t *new_stream;
+
+            /* allocate and initialize a new stream */
+            status =
+                srtp_stream_clone(ctx->stream_template, hdr->ssrc, &new_stream);
+            if (status)
+                return status;
+
+            /* add new stream to the head of the stream_list */
+            new_stream->next = ctx->stream_list;
+            ctx->stream_list = new_stream;
+
+            /* set stream (the pointer used in this function) */
+            stream = new_stream;
+        } else {
+            /* no template stream, so we return an error */
+            return srtp_err_status_no_ctx;
+        }
+    }
+
+    /*
+     * verify that stream is for sending traffic - this check will
+     * detect SSRC collisions, since a stream that appears in both
+     * srtp_protect() and srtp_unprotect() will fail this test in one of
+     * those functions.
+     */
+    if (stream->direction != dir_srtp_sender) {
+        if (stream->direction == dir_unknown) {
+            stream->direction = dir_srtp_sender;
+        } else {
+            srtp_handle_event(ctx, stream, event_ssrc_collision);
+        }
+    }
+
+    session_keys =
+        srtp_get_session_keys_with_mki_index(stream, use_mki, mki_index);
+
+    if (session_keys == NULL)
+        return srtp_err_status_bad_mki;
+
+    /*
+     * Check if this is an AEAD stream (GCM mode).  If so, then dispatch
+     * the request to our AEAD handler.
+     */
+    if (session_keys->rtp_cipher->algorithm == SRTP_AES_GCM_128 ||
+        session_keys->rtp_cipher->algorithm == SRTP_AES_GCM_256) {
+        return srtp_protect_rtcp_aead(ctx, stream, rtcp_hdr,
+                                      (unsigned int *)pkt_octet_len,
+                                      session_keys, use_mki);
+    }
+
+    /* get tag length from stream context */
+    tag_len = srtp_auth_get_tag_length(session_keys->rtcp_auth);
+
+    /*
+     * set encryption start and encryption length - if we're not
+     * providing confidentiality, set enc_start to NULL
+     */
+    enc_start = (uint32_t *)hdr + uint32s_in_rtcp_header;
+    enc_octet_len = *pkt_octet_len - octets_in_rtcp_header;
+
+    /* all of the packet, except the header, gets encrypted */
+    /*
+     * NOTE: hdr->length is not usable - it refers to only the first RTCP report
+     * in the compound packet!
+     */
+    trailer_p = (uint32_t *)((char *)enc_start + enc_octet_len);
+
+    if (stream->rtcp_services & sec_serv_conf) {
+        trailer = htonl(SRTCP_E_BIT); /* set encrypt bit */
+    } else {
+        enc_start = NULL;
+        enc_octet_len = 0;
+        /* 0 is network-order independant */
+        trailer = 0x00000000; /* set encrypt bit */
+    }
+
+    mki_size = srtp_inject_mki((uint8_t *)hdr + *pkt_octet_len +
+                                   sizeof(srtcp_trailer_t),
+                               session_keys, use_mki);
+
+    /*
+     * set the auth_start and auth_tag pointers to the proper locations
+     * (note that srtpc *always* provides authentication, unlike srtp)
+     */
+    /* Note: This would need to change for optional mikey data */
+    auth_start = (uint32_t *)hdr;
+    auth_tag =
+        (uint8_t *)hdr + *pkt_octet_len + sizeof(srtcp_trailer_t) + mki_size;
+
+    /* perform EKT processing if needed */
+    srtp_ekt_write_data(stream->ekt, auth_tag, tag_len, pkt_octet_len,
+                        srtp_rdbx_get_packet_index(&stream->rtp_rdbx));
+
+    /*
+     * check sequence number for overruns, and copy it into the packet
+     * if its value isn't too big
+     */
+    status = srtp_rdb_increment(&stream->rtcp_rdb);
+    if (status)
+        return status;
+    seq_num = srtp_rdb_get_value(&stream->rtcp_rdb);
+    trailer |= htonl(seq_num);
+    debug_print(mod_srtp, "srtcp index: %x", seq_num);
+
+    memcpy(trailer_p, &trailer, sizeof(trailer));
+
+    /*
+     * if we're using rindael counter mode, set nonce and seq
+     */
+    if (session_keys->rtcp_cipher->type->id == SRTP_AES_ICM_128 ||
+        session_keys->rtcp_cipher->type->id == SRTP_AES_ICM_192 ||
+        session_keys->rtcp_cipher->type->id == SRTP_AES_ICM_256) {
+        v128_t iv;
+
+        iv.v32[0] = 0;
+        iv.v32[1] = hdr->ssrc; /* still in network order! */
+        iv.v32[2] = htonl(seq_num >> 16);
+        iv.v32[3] = htonl(seq_num << 16);
+        status = srtp_cipher_set_iv(session_keys->rtcp_cipher, (uint8_t *)&iv,
+                                    srtp_direction_encrypt);
+
+    } else {
+        v128_t iv;
+
+        /* otherwise, just set the index to seq_num */
+        iv.v32[0] = 0;
+        iv.v32[1] = 0;
+        iv.v32[2] = 0;
+        iv.v32[3] = htonl(seq_num);
+        status = srtp_cipher_set_iv(session_keys->rtcp_cipher, (uint8_t *)&iv,
+                                    srtp_direction_encrypt);
+    }
+    if (status)
+        return srtp_err_status_cipher_fail;
+
+    /*
+     * if we're authenticating using a universal hash, put the keystream
+     * prefix into the authentication tag
+     */
+
+    /* if auth_start is non-null, then put keystream into tag  */
+    if (auth_start) {
+        /* put keystream prefix into auth_tag */
+        prefix_len = srtp_auth_get_prefix_length(session_keys->rtcp_auth);
+        status = srtp_cipher_output(session_keys->rtcp_cipher, auth_tag,
+                                    &prefix_len);
+
+        debug_print(mod_srtp, "keystream prefix: %s",
+                    srtp_octet_string_hex_string(auth_tag, prefix_len));
+
+        if (status)
+            return srtp_err_status_cipher_fail;
+    }
+
+    /* if we're encrypting, exor keystream into the message */
+    if (enc_start) {
+        status = srtp_cipher_encrypt(session_keys->rtcp_cipher,
+                                     (uint8_t *)enc_start, &enc_octet_len);
+        if (status)
+            return srtp_err_status_cipher_fail;
+    }
+
+    /* initialize auth func context */
+    srtp_auth_start(session_keys->rtcp_auth);
+
+    /*
+     * run auth func over packet (including trailer), and write the
+     * result at auth_tag
+     */
+    status =
+        srtp_auth_compute(session_keys->rtcp_auth, (uint8_t *)auth_start,
+                          (*pkt_octet_len) + sizeof(srtcp_trailer_t), auth_tag);
+    debug_print(mod_srtp, "srtcp auth tag:    %s",
+                srtp_octet_string_hex_string(auth_tag, tag_len));
+    if (status)
+        return srtp_err_status_auth_fail;
+
+    /* increase the packet length by the length of the auth tag and seq_num*/
+    *pkt_octet_len += (tag_len + sizeof(srtcp_trailer_t));
+
+    /* increase the packet by the mki_size */
+    *pkt_octet_len += mki_size;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_unprotect_rtcp(srtp_t ctx,
+                                      void *srtcp_hdr,
+                                      int *pkt_octet_len)
+{
+    return srtp_unprotect_rtcp_mki(ctx, srtcp_hdr, pkt_octet_len, 0);
+}
+
+srtp_err_status_t srtp_unprotect_rtcp_mki(srtp_t ctx,
+                                          void *srtcp_hdr,
+                                          int *pkt_octet_len,
+                                          unsigned int use_mki)
+{
+    srtcp_hdr_t *hdr = (srtcp_hdr_t *)srtcp_hdr;
+    uint32_t *enc_start;            /* pointer to start of encrypted portion  */
+    uint32_t *auth_start;           /* pointer to start of auth. portion      */
+    uint32_t *trailer_p;            /* pointer to start of trailer            */
+    uint32_t trailer;               /* trailer value                          */
+    unsigned int enc_octet_len = 0; /* number of octets in encrypted portion */
+    uint8_t *auth_tag = NULL;       /* location of auth_tag within packet     */
+    uint8_t tmp_tag[SRTP_MAX_TAG_LEN];
+    uint8_t tag_copy[SRTP_MAX_TAG_LEN];
+    srtp_err_status_t status;
+    unsigned int auth_len;
+    int tag_len;
+    srtp_stream_ctx_t *stream;
+    uint32_t prefix_len;
+    uint32_t seq_num;
+    int e_bit_in_packet; /* whether the E-bit was found in the packet */
+    int sec_serv_confidentiality; /* whether confidentiality was requested */
+    unsigned int mki_size = 0;
+    srtp_session_keys_t *session_keys = NULL;
+
+    /* we assume the hdr is 32-bit aligned to start */
+
+    if (*pkt_octet_len < 0)
+        return srtp_err_status_bad_param;
+
+    /*
+     * check that the length value is sane; we'll check again once we
+     * know the tag length, but we at least want to know that it is
+     * a positive value
+     */
+    if ((unsigned int)(*pkt_octet_len) <
+        octets_in_rtcp_header + sizeof(srtcp_trailer_t))
+        return srtp_err_status_bad_param;
+
+    /*
+     * look up ssrc in srtp_stream list, and process the packet with
+     * the appropriate stream.  if we haven't seen this stream before,
+     * there's only one key for this srtp_session, and the cipher
+     * supports key-sharing, then we assume that a new stream using
+     * that key has just started up
+     */
+    stream = srtp_get_stream(ctx, hdr->ssrc);
+    if (stream == NULL) {
+        if (ctx->stream_template != NULL) {
+            stream = ctx->stream_template;
+
+            /*
+             * check to see if stream_template has an EKT data structure, in
+             * which case we initialize the template using the EKT policy
+             * referenced by that data (which consists of decrypting the
+             * master key from the EKT field)
+             *
+             * this function initializes a *provisional* stream, and this
+             * stream should not be accepted until and unless the packet
+             * passes its authentication check
+             */
+            if (stream->ekt != NULL) {
+                status = srtp_stream_init_from_ekt(stream, srtcp_hdr,
+                                                   *pkt_octet_len);
+                if (status)
+                    return status;
+            }
+
+            debug_print(mod_srtp,
+                        "srtcp using provisional stream (SSRC: 0x%08x)",
+                        ntohl(hdr->ssrc));
+        } else {
+            /* no template stream, so we return an error */
+            return srtp_err_status_no_ctx;
+        }
+    }
+
+    /*
+     * Determine if MKI is being used and what session keys should be used
+     */
+    if (use_mki) {
+        session_keys = srtp_get_session_keys(
+            stream, (uint8_t *)hdr, (const unsigned int *)pkt_octet_len,
+            &mki_size);
+
+        if (session_keys == NULL)
+            return srtp_err_status_bad_mki;
+    } else {
+        session_keys = &stream->session_keys[0];
+    }
+
+    /* get tag length from stream context */
+    tag_len = srtp_auth_get_tag_length(session_keys->rtcp_auth);
+
+    /* check the packet length - it must contain at least a full RTCP
+       header, an auth tag (if applicable), and the SRTCP encrypted flag
+       and 31-bit index value */
+    if (*pkt_octet_len < (int)(octets_in_rtcp_header + tag_len + mki_size +
+                               sizeof(srtcp_trailer_t))) {
+        return srtp_err_status_bad_param;
+    }
+
+    /*
+     * Check if this is an AEAD stream (GCM mode).  If so, then dispatch
+     * the request to our AEAD handler.
+     */
+    if (session_keys->rtp_cipher->algorithm == SRTP_AES_GCM_128 ||
+        session_keys->rtp_cipher->algorithm == SRTP_AES_GCM_256) {
+        return srtp_unprotect_rtcp_aead(ctx, stream, srtcp_hdr,
+                                        (unsigned int *)pkt_octet_len,
+                                        session_keys, mki_size);
+    }
+
+    sec_serv_confidentiality = stream->rtcp_services == sec_serv_conf ||
+                               stream->rtcp_services == sec_serv_conf_and_auth;
+
+    /*
+     * set encryption start, encryption length, and trailer
+     */
+    enc_octet_len = *pkt_octet_len - (octets_in_rtcp_header + tag_len +
+                                      mki_size + sizeof(srtcp_trailer_t));
+    /*
+     *index & E (encryption) bit follow normal data. hdr->len is the number of
+     * words (32-bit) in the normal packet minus 1
+     */
+    /* This should point trailer to the word past the end of the normal data. */
+    /* This would need to be modified for optional mikey data */
+    trailer_p = (uint32_t *)((char *)hdr + *pkt_octet_len -
+                             (tag_len + mki_size + sizeof(srtcp_trailer_t)));
+    memcpy(&trailer, trailer_p, sizeof(trailer));
+
+    e_bit_in_packet =
+        (*((unsigned char *)trailer_p) & SRTCP_E_BYTE_BIT) == SRTCP_E_BYTE_BIT;
+    if (e_bit_in_packet != sec_serv_confidentiality) {
+        return srtp_err_status_cant_check;
+    }
+    if (sec_serv_confidentiality) {
+        enc_start = (uint32_t *)hdr + uint32s_in_rtcp_header;
+    } else {
+        enc_octet_len = 0;
+        enc_start = NULL; /* this indicates that there's no encryption */
+    }
+
+    /*
+     * set the auth_start and auth_tag pointers to the proper locations
+     * (note that srtcp *always* uses authentication, unlike srtp)
+     */
+    auth_start = (uint32_t *)hdr;
+
+    /*
+     * The location of the auth tag in the packet needs to know MKI
+     * could be present.  The data needed to calculate the Auth tag
+     * must not include the MKI
+     */
+    auth_len = *pkt_octet_len - tag_len - mki_size;
+    auth_tag = (uint8_t *)hdr + auth_len + mki_size;
+
+    /*
+     * if EKT is in use, then we make a copy of the tag from the packet,
+     * and then zeroize the location of the base tag
+     *
+     * we first re-position the auth_tag pointer so that it points to
+     * the base tag
+     */
+    if (stream->ekt) {
+        auth_tag -= srtp_ekt_octets_after_base_tag(stream->ekt);
+        memcpy(tag_copy, auth_tag, tag_len);
+        octet_string_set_to_zero(auth_tag, tag_len);
+        auth_tag = tag_copy;
+        auth_len += tag_len;
+    }
+
+    /*
+     * check the sequence number for replays
+     */
+    /* this is easier than dealing with bitfield access */
+    seq_num = ntohl(trailer) & SRTCP_INDEX_MASK;
+    debug_print(mod_srtp, "srtcp index: %x", seq_num);
+    status = srtp_rdb_check(&stream->rtcp_rdb, seq_num);
+    if (status)
+        return status;
+
+    /*
+     * if we're using aes counter mode, set nonce and seq
+     */
+    if (session_keys->rtcp_cipher->type->id == SRTP_AES_ICM_128 ||
+        session_keys->rtcp_cipher->type->id == SRTP_AES_ICM_192 ||
+        session_keys->rtcp_cipher->type->id == SRTP_AES_ICM_256) {
+        v128_t iv;
+
+        iv.v32[0] = 0;
+        iv.v32[1] = hdr->ssrc; /* still in network order! */
+        iv.v32[2] = htonl(seq_num >> 16);
+        iv.v32[3] = htonl(seq_num << 16);
+        status = srtp_cipher_set_iv(session_keys->rtcp_cipher, (uint8_t *)&iv,
+                                    srtp_direction_decrypt);
+
+    } else {
+        v128_t iv;
+
+        /* otherwise, just set the index to seq_num */
+        iv.v32[0] = 0;
+        iv.v32[1] = 0;
+        iv.v32[2] = 0;
+        iv.v32[3] = htonl(seq_num);
+        status = srtp_cipher_set_iv(session_keys->rtcp_cipher, (uint8_t *)&iv,
+                                    srtp_direction_decrypt);
+    }
+    if (status)
+        return srtp_err_status_cipher_fail;
+
+    /* initialize auth func context */
+    srtp_auth_start(session_keys->rtcp_auth);
+
+    /* run auth func over packet, put result into tmp_tag */
+    status = srtp_auth_compute(session_keys->rtcp_auth, (uint8_t *)auth_start,
+                               auth_len, tmp_tag);
+    debug_print(mod_srtp, "srtcp computed tag:       %s",
+                srtp_octet_string_hex_string(tmp_tag, tag_len));
+    if (status)
+        return srtp_err_status_auth_fail;
+
+    /* compare the tag just computed with the one in the packet */
+    debug_print(mod_srtp, "srtcp tag from packet:    %s",
+                srtp_octet_string_hex_string(auth_tag, tag_len));
+    if (srtp_octet_string_is_eq(tmp_tag, auth_tag, tag_len))
+        return srtp_err_status_auth_fail;
+
+    /*
+     * if we're authenticating using a universal hash, put the keystream
+     * prefix into the authentication tag
+     */
+    prefix_len = srtp_auth_get_prefix_length(session_keys->rtcp_auth);
+    if (prefix_len) {
+        status = srtp_cipher_output(session_keys->rtcp_cipher, auth_tag,
+                                    &prefix_len);
+        debug_print(mod_srtp, "keystream prefix: %s",
+                    srtp_octet_string_hex_string(auth_tag, prefix_len));
+        if (status)
+            return srtp_err_status_cipher_fail;
+    }
+
+    /* if we're decrypting, exor keystream into the message */
+    if (enc_start) {
+        status = srtp_cipher_decrypt(session_keys->rtcp_cipher,
+                                     (uint8_t *)enc_start, &enc_octet_len);
+        if (status)
+            return srtp_err_status_cipher_fail;
+    }
+
+    /* decrease the packet length by the length of the auth tag and seq_num */
+    *pkt_octet_len -= (tag_len + sizeof(srtcp_trailer_t));
+
+    /* decrease the packet length by the length of the mki_size */
+    *pkt_octet_len -= mki_size;
+
+    /*
+     * if EKT is in effect, subtract the EKT data out of the packet
+     * length
+     */
+    *pkt_octet_len -= srtp_ekt_octets_after_base_tag(stream->ekt);
+
+    /*
+     * verify that stream is for received traffic - this check will
+     * detect SSRC collisions, since a stream that appears in both
+     * srtp_protect() and srtp_unprotect() will fail this test in one of
+     * those functions.
+     *
+     * we do this check *after* the authentication check, so that the
+     * latter check will catch any attempts to fool us into thinking
+     * that we've got a collision
+     */
+    if (stream->direction != dir_srtp_receiver) {
+        if (stream->direction == dir_unknown) {
+            stream->direction = dir_srtp_receiver;
+        } else {
+            srtp_handle_event(ctx, stream, event_ssrc_collision);
+        }
+    }
+
+    /*
+     * if the stream is a 'provisional' one, in which the template context
+     * is used, then we need to allocate a new stream at this point, since
+     * the authentication passed
+     */
+    if (stream == ctx->stream_template) {
+        srtp_stream_ctx_t *new_stream;
+
+        /*
+         * allocate and initialize a new stream
+         *
+         * note that we indicate failure if we can't allocate the new
+         * stream, and some implementations will want to not return
+         * failure here
+         */
+        status =
+            srtp_stream_clone(ctx->stream_template, hdr->ssrc, &new_stream);
+        if (status)
+            return status;
+
+        /* add new stream to the head of the stream_list */
+        new_stream->next = ctx->stream_list;
+        ctx->stream_list = new_stream;
+
+        /* set stream (the pointer used in this function) */
+        stream = new_stream;
+    }
+
+    /* we've passed the authentication check, so add seq_num to the rdb */
+    srtp_rdb_add_index(&stream->rtcp_rdb, seq_num);
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * user data within srtp_t context
+ */
+
+void srtp_set_user_data(srtp_t ctx, void *data)
+{
+    ctx->user_data = data;
+}
+
+void *srtp_get_user_data(srtp_t ctx)
+{
+    return ctx->user_data;
+}
+
+/*
+ * dtls keying for srtp
+ */
+
+srtp_err_status_t srtp_crypto_policy_set_from_profile_for_rtp(
+    srtp_crypto_policy_t *policy,
+    srtp_profile_t profile)
+{
+    /* set SRTP policy from the SRTP profile in the key set */
+    switch (profile) {
+    case srtp_profile_aes128_cm_sha1_80:
+        srtp_crypto_policy_set_aes_cm_128_hmac_sha1_80(policy);
+        break;
+    case srtp_profile_aes128_cm_sha1_32:
+        srtp_crypto_policy_set_aes_cm_128_hmac_sha1_32(policy);
+        break;
+    case srtp_profile_null_sha1_80:
+        srtp_crypto_policy_set_null_cipher_hmac_sha1_80(policy);
+        break;
+#ifdef GCM
+    case srtp_profile_aead_aes_128_gcm:
+        srtp_crypto_policy_set_aes_gcm_128_16_auth(policy);
+        break;
+    case srtp_profile_aead_aes_256_gcm:
+        srtp_crypto_policy_set_aes_gcm_256_16_auth(policy);
+        break;
+#endif
+    /* the following profiles are not (yet) supported */
+    case srtp_profile_null_sha1_32:
+    default:
+        return srtp_err_status_bad_param;
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_crypto_policy_set_from_profile_for_rtcp(
+    srtp_crypto_policy_t *policy,
+    srtp_profile_t profile)
+{
+    /* set SRTP policy from the SRTP profile in the key set */
+    switch (profile) {
+    case srtp_profile_aes128_cm_sha1_80:
+        srtp_crypto_policy_set_aes_cm_128_hmac_sha1_80(policy);
+        break;
+    case srtp_profile_aes128_cm_sha1_32:
+        /* We do not honor the 32-bit auth tag request since
+         * this is not compliant with RFC 3711 */
+        srtp_crypto_policy_set_aes_cm_128_hmac_sha1_80(policy);
+        break;
+    case srtp_profile_null_sha1_80:
+        srtp_crypto_policy_set_null_cipher_hmac_sha1_80(policy);
+        break;
+#ifdef GCM
+    case srtp_profile_aead_aes_128_gcm:
+        srtp_crypto_policy_set_aes_gcm_128_16_auth(policy);
+        break;
+    case srtp_profile_aead_aes_256_gcm:
+        srtp_crypto_policy_set_aes_gcm_256_16_auth(policy);
+        break;
+#endif
+    /* the following profiles are not (yet) supported */
+    case srtp_profile_null_sha1_32:
+    default:
+        return srtp_err_status_bad_param;
+    }
+
+    return srtp_err_status_ok;
+}
+
+void srtp_append_salt_to_key(uint8_t *key,
+                             unsigned int bytes_in_key,
+                             uint8_t *salt,
+                             unsigned int bytes_in_salt)
+{
+    memcpy(key + bytes_in_key, salt, bytes_in_salt);
+}
+
+unsigned int srtp_profile_get_master_key_length(srtp_profile_t profile)
+{
+    switch (profile) {
+    case srtp_profile_aes128_cm_sha1_80:
+        return SRTP_AES_128_KEY_LEN;
+        break;
+    case srtp_profile_aes128_cm_sha1_32:
+        return SRTP_AES_128_KEY_LEN;
+        break;
+    case srtp_profile_null_sha1_80:
+        return SRTP_AES_128_KEY_LEN;
+        break;
+    case srtp_profile_aead_aes_128_gcm:
+        return SRTP_AES_128_KEY_LEN;
+        break;
+    case srtp_profile_aead_aes_256_gcm:
+        return SRTP_AES_256_KEY_LEN;
+        break;
+    /* the following profiles are not (yet) supported */
+    case srtp_profile_null_sha1_32:
+    default:
+        return 0; /* indicate error by returning a zero */
+    }
+}
+
+unsigned int srtp_profile_get_master_salt_length(srtp_profile_t profile)
+{
+    switch (profile) {
+    case srtp_profile_aes128_cm_sha1_80:
+        return SRTP_SALT_LEN;
+        break;
+    case srtp_profile_aes128_cm_sha1_32:
+        return SRTP_SALT_LEN;
+        break;
+    case srtp_profile_null_sha1_80:
+        return SRTP_SALT_LEN;
+        break;
+    case srtp_profile_aead_aes_128_gcm:
+        return SRTP_AEAD_SALT_LEN;
+        break;
+    case srtp_profile_aead_aes_256_gcm:
+        return SRTP_AEAD_SALT_LEN;
+        break;
+    /* the following profiles are not (yet) supported */
+    case srtp_profile_null_sha1_32:
+    default:
+        return 0; /* indicate error by returning a zero */
+    }
+}
+
+srtp_err_status_t stream_get_protect_trailer_length(srtp_stream_ctx_t *stream,
+                                                    uint32_t is_rtp,
+                                                    uint32_t use_mki,
+                                                    uint32_t mki_index,
+                                                    uint32_t *length)
+{
+    srtp_session_keys_t *session_key;
+
+    *length = 0;
+
+    if (use_mki) {
+        if (mki_index >= stream->num_master_keys) {
+            return srtp_err_status_bad_mki;
+        }
+        session_key = &stream->session_keys[mki_index];
+
+        *length += session_key->mki_size;
+
+    } else {
+        session_key = &stream->session_keys[0];
+    }
+    if (is_rtp) {
+        *length += srtp_auth_get_tag_length(session_key->rtp_auth);
+    } else {
+        *length += srtp_auth_get_tag_length(session_key->rtcp_auth);
+        *length += sizeof(srtcp_trailer_t);
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t get_protect_trailer_length(srtp_t session,
+                                             uint32_t is_rtp,
+                                             uint32_t use_mki,
+                                             uint32_t mki_index,
+                                             uint32_t *length)
+{
+    srtp_stream_ctx_t *stream;
+
+    if (session == NULL) {
+        return srtp_err_status_bad_param;
+    }
+
+    if (session->stream_template == NULL && session->stream_list == NULL) {
+        return srtp_err_status_bad_param;
+    }
+
+    *length = 0;
+
+    stream = session->stream_template;
+
+    if (stream != NULL) {
+        stream_get_protect_trailer_length(stream, is_rtp, use_mki, mki_index,
+                                          length);
+    }
+
+    stream = session->stream_list;
+
+    while (stream != NULL) {
+        uint32_t temp_length;
+        if (stream_get_protect_trailer_length(stream, is_rtp, use_mki,
+                                              mki_index, &temp_length) ==
+            srtp_err_status_ok) {
+            if (temp_length > *length) {
+                *length = temp_length;
+            }
+        }
+        stream = stream->next;
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_get_protect_trailer_length(srtp_t session,
+                                                  uint32_t use_mki,
+                                                  uint32_t mki_index,
+                                                  uint32_t *length)
+{
+    return get_protect_trailer_length(session, 1, use_mki, mki_index, length);
+}
+
+srtp_err_status_t srtp_get_protect_rtcp_trailer_length(srtp_t session,
+                                                       uint32_t use_mki,
+                                                       uint32_t mki_index,
+                                                       uint32_t *length)
+{
+    return get_protect_trailer_length(session, 0, use_mki, mki_index, length);
+}
+
+/*
+ * SRTP debug interface
+ */
+srtp_err_status_t srtp_set_debug_module(const char *mod_name, int v)
+{
+    return srtp_crypto_kernel_set_debug_module(mod_name, v);
+}
+
+srtp_err_status_t srtp_list_debug_modules(void)
+{
+    return srtp_crypto_kernel_list_debug_modules();
+}
+
+/*
+ * srtp_log_handler is a global variable holding a pointer to the
+ * log handler function; this function is called for any log
+ * output.
+ */
+
+static srtp_log_handler_func_t *srtp_log_handler = NULL;
+static void *srtp_log_handler_data = NULL;
+
+void srtp_err_handler(srtp_err_reporting_level_t level, const char *msg)
+{
+    if (srtp_log_handler) {
+        srtp_log_level_t log_level = srtp_log_level_error;
+        switch (level) {
+        case srtp_err_level_error:
+            log_level = srtp_log_level_error;
+            break;
+        case srtp_err_level_warning:
+            log_level = srtp_log_level_warning;
+            break;
+        case srtp_err_level_info:
+            log_level = srtp_log_level_info;
+            break;
+        case srtp_err_level_debug:
+            log_level = srtp_log_level_debug;
+            break;
+        }
+
+        srtp_log_handler(log_level, msg, srtp_log_handler_data);
+    }
+}
+
+srtp_err_status_t srtp_install_log_handler(srtp_log_handler_func_t func,
+                                           void *data)
+{
+    /*
+     * note that we accept NULL arguments intentionally - calling this
+     * function with a NULL arguments removes a log handler that's
+     * been previously installed
+     */
+
+    if (srtp_log_handler) {
+        srtp_install_err_report_handler(NULL);
+    }
+    srtp_log_handler = func;
+    srtp_log_handler_data = data;
+    if (srtp_log_handler) {
+        srtp_install_err_report_handler(srtp_err_handler);
+    }
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_set_stream_roc(srtp_t session,
+                                      uint32_t ssrc,
+                                      uint32_t roc)
+{
+    srtp_stream_t stream;
+
+    stream = srtp_get_stream(session, htonl(ssrc));
+    if (stream == NULL)
+        return srtp_err_status_bad_param;
+
+    stream->pending_roc = roc;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_get_stream_roc(srtp_t session,
+                                      uint32_t ssrc,
+                                      uint32_t *roc)
+{
+    srtp_stream_t stream;
+
+    stream = srtp_get_stream(session, htonl(ssrc));
+    if (stream == NULL)
+        return srtp_err_status_bad_param;
+
+    *roc = srtp_rdbx_get_roc(&stream->rtp_rdbx);
+
+    return srtp_err_status_ok;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/cutest.h b/trunk/3rdparty/libsrtp-2-fit/test/cutest.h
new file mode 100644
index 000000000..f46626d39
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/cutest.h
@@ -0,0 +1,713 @@
+/*
+ * CUTest -- C/C++ Unit Test facility
+ * <http://github.com/mity/cutest>
+ *
+ * Copyright (c) 2013-2017 Martin Mitas
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a
+ * copy of this software and associated documentation files (the "Software"),
+ * to deal in the Software without restriction, including without limitation
+ * the rights to use, copy, modify, merge, publish, distribute, sublicense,
+ * and/or sell copies of the Software, and to permit persons to whom the
+ * Software is furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
+ * OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+ * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+ * IN THE SOFTWARE.
+ */
+
+#ifndef CUTEST_H__
+#define CUTEST_H__
+
+/************************
+ *** Public interface ***
+ ************************/
+
+/* By default, <cutest.h> provides the main program entry point (function
+ * main()). However, if the test suite is composed of multiple source files
+ * which include <cutest.h>, then this causes a problem of multiple main()
+ * definitions. To avoid this problem, #define macro TEST_NO_MAIN in all
+ * compilation units but one.
+ */
+
+/* Macro to specify list of unit tests in the suite.
+ * The unit test implementation MUST provide list of unit tests it implements
+ * with this macro:
+ *
+ *   TEST_LIST = {
+ *       { "test1_name", test1_func_ptr },
+ *       { "test2_name", test2_func_ptr },
+ *       ...
+ *       { 0 }
+ *   };
+ *
+ * The list specifies names of each test (must be unique) and pointer to
+ * a function implementing it. The function does not take any arguments
+ * and has no return values, i.e. every test function has tp be compatible
+ * with this prototype:
+ *
+ *   void test_func(void);
+ */
+#define TEST_LIST const struct test__ test_list__[]
+
+/* Macros for testing whether an unit test succeeds or fails. These macros
+ * can be used arbitrarily in functions implementing the unit tests.
+ *
+ * If any condition fails throughout execution of a test, the test fails.
+ *
+ * TEST_CHECK takes only one argument (the condition), TEST_CHECK_ allows
+ * also to specify an error message to print out if the condition fails.
+ * (It expects printf-like format string and its parameters). The macros
+ * return non-zero (condition passes) or 0 (condition fails).
+ *
+ * That can be useful when more conditions should be checked only if some
+ * preceding condition passes, as illustrated in this code snippet:
+ *
+ *   SomeStruct* ptr = allocate_some_struct();
+ *   if(TEST_CHECK(ptr != NULL)) {
+ *       TEST_CHECK(ptr->member1 < 100);
+ *       TEST_CHECK(ptr->member2 > 200);
+ *   }
+ */
+#define TEST_CHECK_(cond, ...)                                                 \
+    test_check__((cond), __FILE__, __LINE__, __VA_ARGS__)
+#define TEST_CHECK(cond) test_check__((cond), __FILE__, __LINE__, "%s", #cond)
+
+/**********************
+ *** Implementation ***
+ **********************/
+
+/* The unit test files should not rely on anything below. */
+
+#include <stdarg.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+#if defined(unix) || defined(__unix__) || defined(__unix) || defined(__APPLE__)
+#define CUTEST_UNIX__ 1
+#include <errno.h>
+#include <unistd.h>
+#include <sys/types.h>
+#include <sys/wait.h>
+#include <signal.h>
+#endif
+
+#if defined(_WIN32) || defined(__WIN32__) || defined(__WINDOWS__)
+#define CUTEST_WIN__ 1
+#include <windows.h>
+#include <io.h>
+#endif
+
+#ifdef __cplusplus
+#include <exception>
+#endif
+
+/* Note our global private identifiers end with '__' to mitigate risk of clash
+ * with the unit tests implementation. */
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+struct test__ {
+    const char *name;
+    void (*func)(void);
+};
+
+extern const struct test__ test_list__[];
+
+int test_check__(int cond, const char *file, int line, const char *fmt, ...);
+
+#ifndef TEST_NO_MAIN
+
+static char *test_argv0__ = NULL;
+static int test_count__ = 0;
+static int test_no_exec__ = 0;
+static int test_no_summary__ = 0;
+static int test_skip_mode__ = 0;
+
+static int test_stat_failed_units__ = 0;
+static int test_stat_run_units__ = 0;
+
+static const struct test__ *test_current_unit__ = NULL;
+static int test_current_already_logged__ = 0;
+static int test_verbose_level__ = 2;
+static int test_current_failures__ = 0;
+static int test_colorize__ = 0;
+
+#define CUTEST_COLOR_DEFAULT__ 0
+#define CUTEST_COLOR_GREEN__ 1
+#define CUTEST_COLOR_RED__ 2
+#define CUTEST_COLOR_DEFAULT_INTENSIVE__ 3
+#define CUTEST_COLOR_GREEN_INTENSIVE__ 4
+#define CUTEST_COLOR_RED_INTENSIVE__ 5
+
+static size_t test_print_in_color__(int color, const char *fmt, ...)
+{
+    va_list args;
+    char buffer[256];
+    size_t n;
+
+    va_start(args, fmt);
+    vsnprintf(buffer, sizeof(buffer), fmt, args);
+    va_end(args);
+    buffer[sizeof(buffer) - 1] = '\0';
+
+    if (!test_colorize__) {
+        return printf("%s", buffer);
+    }
+
+#if defined CUTEST_UNIX__
+    {
+        const char *col_str;
+        switch (color) {
+        case CUTEST_COLOR_GREEN__:
+            col_str = "\033[0;32m";
+            break;
+        case CUTEST_COLOR_RED__:
+            col_str = "\033[0;31m";
+            break;
+        case CUTEST_COLOR_GREEN_INTENSIVE__:
+            col_str = "\033[1;32m";
+            break;
+        case CUTEST_COLOR_RED_INTENSIVE__:
+            col_str = "\033[1;30m";
+            break;
+        case CUTEST_COLOR_DEFAULT_INTENSIVE__:
+            col_str = "\033[1m";
+            break;
+        default:
+            col_str = "\033[0m";
+            break;
+        }
+        printf("%s", col_str);
+        n = printf("%s", buffer);
+        printf("\033[0m");
+        return n;
+    }
+#elif defined CUTEST_WIN__
+    {
+        HANDLE h;
+        CONSOLE_SCREEN_BUFFER_INFO info;
+        WORD attr;
+
+        h = GetStdHandle(STD_OUTPUT_HANDLE);
+        GetConsoleScreenBufferInfo(h, &info);
+
+        switch (color) {
+        case CUTEST_COLOR_GREEN__:
+            attr = FOREGROUND_GREEN;
+            break;
+        case CUTEST_COLOR_RED__:
+            attr = FOREGROUND_RED;
+            break;
+        case CUTEST_COLOR_GREEN_INTENSIVE__:
+            attr = FOREGROUND_GREEN | FOREGROUND_INTENSITY;
+            break;
+        case CUTEST_COLOR_RED_INTENSIVE__:
+            attr = FOREGROUND_RED | FOREGROUND_INTENSITY;
+            break;
+        case CUTEST_COLOR_DEFAULT_INTENSIVE__:
+            attr = FOREGROUND_BLUE | FOREGROUND_GREEN | FOREGROUND_RED |
+                   FOREGROUND_INTENSITY;
+            break;
+        default:
+            attr = 0;
+            break;
+        }
+        if (attr != 0)
+            SetConsoleTextAttribute(h, attr);
+        n = printf("%s", buffer);
+        SetConsoleTextAttribute(h, info.wAttributes);
+        return n;
+    }
+#else
+    n = printf("%s", buffer);
+    return n;
+#endif
+}
+
+int test_check__(int cond, const char *file, int line, const char *fmt, ...)
+{
+    const char *result_str;
+    int result_color;
+    int verbose_level;
+
+    if (cond) {
+        result_str = "ok";
+        result_color = CUTEST_COLOR_GREEN__;
+        verbose_level = 3;
+    } else {
+        if (!test_current_already_logged__ && test_current_unit__ != NULL) {
+            printf("[ ");
+            test_print_in_color__(CUTEST_COLOR_RED_INTENSIVE__, "FAILED");
+            printf(" ]\n");
+        }
+        result_str = "failed";
+        result_color = CUTEST_COLOR_RED__;
+        verbose_level = 2;
+        test_current_failures__++;
+        test_current_already_logged__++;
+    }
+
+    if (test_verbose_level__ >= verbose_level) {
+        size_t n = 0;
+        va_list args;
+
+        printf("  ");
+
+        if (file != NULL)
+            n += printf("%s:%d: Check ", file, line);
+
+        va_start(args, fmt);
+        n += vprintf(fmt, args);
+        va_end(args);
+
+        printf("... ");
+        test_print_in_color__(result_color, result_str);
+        printf("\n");
+        test_current_already_logged__++;
+    }
+
+    return (cond != 0);
+}
+
+static void test_list_names__(void)
+{
+    const struct test__ *test;
+
+    printf("Unit tests:\n");
+    for (test = &test_list__[0]; test->func != NULL; test++)
+        printf("  %s\n", test->name);
+}
+
+static const struct test__ *test_by_name__(const char *name)
+{
+    const struct test__ *test;
+
+    for (test = &test_list__[0]; test->func != NULL; test++) {
+        if (strcmp(test->name, name) == 0)
+            return test;
+    }
+
+    return NULL;
+}
+
+/* Call directly the given test unit function. */
+static int test_do_run__(const struct test__ *test)
+{
+    test_current_unit__ = test;
+    test_current_failures__ = 0;
+    test_current_already_logged__ = 0;
+
+    if (test_verbose_level__ >= 3) {
+        test_print_in_color__(CUTEST_COLOR_DEFAULT_INTENSIVE__, "Test %s:\n",
+                              test->name);
+        test_current_already_logged__++;
+    } else if (test_verbose_level__ >= 1) {
+        size_t n;
+        char spaces[32];
+
+        n = test_print_in_color__(CUTEST_COLOR_DEFAULT_INTENSIVE__,
+                                  "Test %s... ", test->name);
+        memset(spaces, ' ', sizeof(spaces));
+        if (n < sizeof(spaces))
+            printf("%.*s", (int)(sizeof(spaces) - n), spaces);
+    } else {
+        test_current_already_logged__ = 1;
+    }
+
+#ifdef __cplusplus
+    try {
+#endif
+
+        /* This is good to do for case the test unit e.g. crashes. */
+        fflush(stdout);
+        fflush(stderr);
+
+        test->func();
+
+#ifdef __cplusplus
+    } catch (std::exception &e) {
+        const char *what = e.what();
+        if (what != NULL)
+            test_check__(0, NULL, 0, "Threw std::exception: %s", what);
+        else
+            test_check__(0, NULL, 0, "Threw std::exception");
+    } catch (...) {
+        test_check__(0, NULL, 0, "Threw an exception");
+    }
+#endif
+
+    if (test_verbose_level__ >= 3) {
+        switch (test_current_failures__) {
+        case 0:
+            test_print_in_color__(CUTEST_COLOR_GREEN_INTENSIVE__,
+                                  "  All conditions have passed.\n\n");
+            break;
+        case 1:
+            test_print_in_color__(CUTEST_COLOR_RED_INTENSIVE__,
+                                  "  One condition has FAILED.\n\n");
+            break;
+        default:
+            test_print_in_color__(CUTEST_COLOR_RED_INTENSIVE__,
+                                  "  %d conditions have FAILED.\n\n",
+                                  test_current_failures__);
+            break;
+        }
+    } else if (test_verbose_level__ >= 1 && test_current_failures__ == 0) {
+        printf("[   ");
+        test_print_in_color__(CUTEST_COLOR_GREEN_INTENSIVE__, "OK");
+        printf("   ]\n");
+    }
+
+    test_current_unit__ = NULL;
+    return (test_current_failures__ == 0) ? 0 : -1;
+}
+
+#if defined(CUTEST_UNIX__) || defined(CUTEST_WIN__)
+/* Called if anything goes bad in cutest, or if the unit test ends in other
+ * way then by normal returning from its function (e.g. exception or some
+ * abnormal child process termination). */
+static void test_error__(const char *fmt, ...)
+{
+    va_list args;
+
+    if (test_verbose_level__ == 0)
+        return;
+
+    if (test_verbose_level__ <= 2 && !test_current_already_logged__ &&
+        test_current_unit__ != NULL) {
+        printf("[ ");
+        test_print_in_color__(CUTEST_COLOR_RED_INTENSIVE__, "FAILED");
+        printf(" ]\n");
+    }
+
+    if (test_verbose_level__ >= 2) {
+        test_print_in_color__(CUTEST_COLOR_RED_INTENSIVE__, "  Error: ");
+        va_start(args, fmt);
+        vprintf(fmt, args);
+        va_end(args);
+        printf("\n");
+    }
+}
+#endif
+
+/* Trigger the unit test. If possible (and not suppressed) it starts a child
+ * process who calls test_do_run__(), otherwise it calls test_do_run__()
+ * directly. */
+static void test_run__(const struct test__ *test)
+{
+    int failed = 1;
+
+    test_current_unit__ = test;
+    test_current_already_logged__ = 0;
+
+    if (!test_no_exec__) {
+#if defined(CUTEST_UNIX__)
+
+        pid_t pid;
+        int exit_code;
+
+        pid = fork();
+        if (pid == (pid_t)-1) {
+            test_error__("Cannot fork. %s [%d]", strerror(errno), errno);
+            failed = 1;
+        } else if (pid == 0) {
+            /* Child: Do the test. */
+            failed = (test_do_run__(test) != 0);
+            exit(failed ? 1 : 0);
+        } else {
+            /* Parent: Wait until child terminates and analyze its exit code. */
+            waitpid(pid, &exit_code, 0);
+            if (WIFEXITED(exit_code)) {
+                switch (WEXITSTATUS(exit_code)) {
+                case 0:
+                    failed = 0;
+                    break; /* test has passed. */
+                case 1:    /* noop */
+                    break; /* "normal" failure. */
+                default:
+                    test_error__("Unexpected exit code [%d]",
+                                 WEXITSTATUS(exit_code));
+                }
+            } else if (WIFSIGNALED(exit_code)) {
+                char tmp[32];
+                const char *signame;
+                switch (WTERMSIG(exit_code)) {
+                case SIGINT:
+                    signame = "SIGINT";
+                    break;
+                case SIGHUP:
+                    signame = "SIGHUP";
+                    break;
+                case SIGQUIT:
+                    signame = "SIGQUIT";
+                    break;
+                case SIGABRT:
+                    signame = "SIGABRT";
+                    break;
+                case SIGKILL:
+                    signame = "SIGKILL";
+                    break;
+                case SIGSEGV:
+                    signame = "SIGSEGV";
+                    break;
+                case SIGILL:
+                    signame = "SIGILL";
+                    break;
+                case SIGTERM:
+                    signame = "SIGTERM";
+                    break;
+                default:
+                    sprintf(tmp, "signal %d", WTERMSIG(exit_code));
+                    signame = tmp;
+                    break;
+                }
+                test_error__("Test interrupted by %s", signame);
+            } else {
+                test_error__("Test ended in an unexpected way [%d]", exit_code);
+            }
+        }
+
+#elif defined(CUTEST_WIN__)
+
+        char buffer[512] = { 0 };
+        STARTUPINFOA startupInfo = { 0 };
+        PROCESS_INFORMATION processInfo;
+        DWORD exitCode;
+
+        /* Windows has no fork(). So we propagate all info into the child
+         * through a command line arguments. */
+        _snprintf(buffer, sizeof(buffer) - 1,
+                  "%s --no-exec --no-summary --verbose=%d --color=%s -- \"%s\"",
+                  test_argv0__, test_verbose_level__,
+                  test_colorize__ ? "always" : "never", test->name);
+        startupInfo.cb = sizeof(STARTUPINFO);
+        if (CreateProcessA(NULL, buffer, NULL, NULL, FALSE, 0, NULL, NULL,
+                           &startupInfo, &processInfo)) {
+            WaitForSingleObject(processInfo.hProcess, INFINITE);
+            GetExitCodeProcess(processInfo.hProcess, &exitCode);
+            CloseHandle(processInfo.hThread);
+            CloseHandle(processInfo.hProcess);
+            failed = (exitCode != 0);
+        } else {
+            test_error__("Cannot create unit test subprocess [%ld].",
+                         GetLastError());
+            failed = 1;
+        }
+
+#else
+
+        /* A platform where we don't know how to run child process. */
+        failed = (test_do_run__(test) != 0);
+
+#endif
+
+    } else {
+        /* Child processes suppressed through --no-exec. */
+        failed = (test_do_run__(test) != 0);
+    }
+
+    test_current_unit__ = NULL;
+
+    test_stat_run_units__++;
+    if (failed)
+        test_stat_failed_units__++;
+}
+
+#if defined(CUTEST_WIN__)
+/* Callback for SEH events. */
+static LONG CALLBACK test_exception_filter__(EXCEPTION_POINTERS *ptrs)
+{
+    test_error__("Unhandled SEH exception %08lx at %p.",
+                 ptrs->ExceptionRecord->ExceptionCode,
+                 ptrs->ExceptionRecord->ExceptionAddress);
+    fflush(stdout);
+    fflush(stderr);
+    return EXCEPTION_EXECUTE_HANDLER;
+}
+#endif
+
+static void test_help__(void)
+{
+    printf("Usage: %s [options] [test...]\n", test_argv0__);
+    printf("Run the specified unit tests; or if the option '--skip' is used, "
+           "run all\n");
+    printf("tests in the suite but those listed.  By default, if no tests are "
+           "specified\n");
+    printf("on the command line, all unit tests in the suite are run.\n");
+    printf("\n");
+    printf("Options:\n");
+    printf(
+        "  -s, --skip            Execute all unit tests but the listed ones\n");
+    printf("      --no-exec         Do not execute unit tests as child "
+           "processes\n");
+    printf(
+        "      --no-summary      Suppress printing of test results summary\n");
+    printf("  -l, --list            List unit tests in the suite and exit\n");
+    printf("  -v, --verbose         Enable more verbose output\n");
+    printf("      --verbose=LEVEL   Set verbose level to LEVEL:\n");
+    printf("                          0 ... Be silent\n");
+    printf("                          1 ... Output one line per test (and "
+           "summary)\n");
+    printf("                          2 ... As 1 and failed conditions (this "
+           "is default)\n");
+    printf("                          3 ... As 1 and all conditions (and "
+           "extended summary)\n");
+    printf("      --color=WHEN      Enable colorized output (WHEN is one of "
+           "'auto', 'always', 'never')\n");
+    printf("  -h, --help            Display this help and exit\n");
+    printf("\n");
+    test_list_names__();
+}
+
+int main(int argc, char **argv)
+{
+    const struct test__ **tests = NULL;
+    int i, j, n = 0;
+    int seen_double_dash = 0;
+
+    test_argv0__ = argv[0];
+
+#if defined CUTEST_UNIX__
+    test_colorize__ = isatty(STDOUT_FILENO);
+#elif defined CUTEST_WIN__
+    test_colorize__ = _isatty(_fileno(stdout));
+#else
+    test_colorize__ = 0;
+#endif
+
+    /* Parse options */
+    for (i = 1; i < argc; i++) {
+        if (seen_double_dash || argv[i][0] != '-') {
+            tests = (const struct test__ **)realloc(
+                (void *)tests, (n + 1) * sizeof(const struct test__ *));
+            if (tests == NULL) {
+                fprintf(stderr, "Out of memory.\n");
+                exit(2);
+            }
+            tests[n] = test_by_name__(argv[i]);
+            if (tests[n] == NULL) {
+                fprintf(stderr, "%s: Unrecognized unit test '%s'\n", argv[0],
+                        argv[i]);
+                fprintf(stderr, "Try '%s --list' for list of unit tests.\n",
+                        argv[0]);
+                exit(2);
+            }
+            n++;
+        } else if (strcmp(argv[i], "--") == 0) {
+            seen_double_dash = 1;
+        } else if (strcmp(argv[i], "--help") == 0 ||
+                   strcmp(argv[i], "-h") == 0) {
+            test_help__();
+            exit(0);
+        } else if (strcmp(argv[i], "--verbose") == 0 ||
+                   strcmp(argv[i], "-v") == 0) {
+            test_verbose_level__++;
+        } else if (strncmp(argv[i], "--verbose=", 10) == 0) {
+            test_verbose_level__ = atoi(argv[i] + 10);
+        } else if (strcmp(argv[i], "--color=auto") == 0) {
+            /* noop (set from above) */
+        } else if (strcmp(argv[i], "--color=always") == 0 ||
+                   strcmp(argv[i], "--color") == 0) {
+            test_colorize__ = 1;
+        } else if (strcmp(argv[i], "--color=never") == 0) {
+            test_colorize__ = 0;
+        } else if (strcmp(argv[i], "--skip") == 0 ||
+                   strcmp(argv[i], "-s") == 0) {
+            test_skip_mode__ = 1;
+        } else if (strcmp(argv[i], "--no-exec") == 0) {
+            test_no_exec__ = 1;
+        } else if (strcmp(argv[i], "--no-summary") == 0) {
+            test_no_summary__ = 1;
+        } else if (strcmp(argv[i], "--list") == 0 ||
+                   strcmp(argv[i], "-l") == 0) {
+            test_list_names__();
+            exit(0);
+        } else {
+            fprintf(stderr, "%s: Unrecognized option '%s'\n", argv[0], argv[i]);
+            fprintf(stderr, "Try '%s --help' for more information.\n", argv[0]);
+            exit(2);
+        }
+    }
+
+#if defined(CUTEST_WIN__)
+    SetUnhandledExceptionFilter(test_exception_filter__);
+#endif
+
+    /* Count all test units */
+    test_count__ = 0;
+    for (i = 0; test_list__[i].func != NULL; i++)
+        test_count__++;
+
+    /* Run the tests */
+    if (n == 0) {
+        /* Run all tests */
+        for (i = 0; test_list__[i].func != NULL; i++)
+            test_run__(&test_list__[i]);
+    } else if (!test_skip_mode__) {
+        /* Run the listed tests */
+        for (i = 0; i < n; i++)
+            test_run__(tests[i]);
+    } else {
+        /* Run all tests except those listed */
+        for (i = 0; test_list__[i].func != NULL; i++) {
+            int want_skip = 0;
+            for (j = 0; j < n; j++) {
+                if (tests[j] == &test_list__[i]) {
+                    want_skip = 1;
+                    break;
+                }
+            }
+            if (!want_skip)
+                test_run__(&test_list__[i]);
+        }
+    }
+
+    /* Write a summary */
+    if (!test_no_summary__ && test_verbose_level__ >= 1) {
+        test_print_in_color__(CUTEST_COLOR_DEFAULT_INTENSIVE__, "\nSummary:\n");
+
+        if (test_verbose_level__ >= 3) {
+            printf("  Count of all unit tests:     %4d\n", test_count__);
+            printf("  Count of run unit tests:     %4d\n",
+                   test_stat_run_units__);
+            printf("  Count of failed unit tests:  %4d\n",
+                   test_stat_failed_units__);
+            printf("  Count of skipped unit tests: %4d\n",
+                   test_count__ - test_stat_run_units__);
+        }
+
+        if (test_stat_failed_units__ == 0) {
+            test_print_in_color__(CUTEST_COLOR_GREEN_INTENSIVE__,
+                                  "  SUCCESS: All unit tests have passed.\n");
+        } else {
+            test_print_in_color__(
+                CUTEST_COLOR_RED_INTENSIVE__,
+                "  FAILED: %d of %d unit tests have failed.\n",
+                test_stat_failed_units__, test_stat_run_units__);
+        }
+    }
+
+    if (tests != NULL)
+        free((void *)tests);
+
+    return (test_stat_failed_units__ == 0) ? 0 : 1;
+}
+
+#endif /* #ifndef TEST_NO_MAIN */
+
+#ifdef __cplusplus
+} /* extern "C" */
+#endif
+
+#endif /* #ifndef CUTEST_H__ */
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/dtls_srtp_driver.c b/trunk/3rdparty/libsrtp-2-fit/test/dtls_srtp_driver.c
new file mode 100644
index 000000000..4f4d0a39b
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/dtls_srtp_driver.c
@@ -0,0 +1,261 @@
+/*
+ * dtls_srtp_driver.c
+ *
+ * test driver for DTLS-SRTP functions
+ *
+ * David McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#include <stdio.h>    /* for printf()          */
+#include "getopt_s.h" /* for local getopt()    */
+#include "srtp_priv.h"
+
+srtp_err_status_t test_dtls_srtp(void);
+
+srtp_hdr_t *srtp_create_test_packet(int pkt_octet_len, uint32_t ssrc);
+
+void usage(char *prog_name)
+{
+    printf("usage: %s [ -t ][ -c ][ -v ][-d <debug_module> ]* [ -l ]\n"
+           "  -d <mod>   turn on debugging module <mod>\n"
+           "  -l         list debugging modules\n",
+           prog_name);
+    exit(1);
+}
+
+int main(int argc, char *argv[])
+{
+    unsigned do_list_mods = 0;
+    int q;
+    srtp_err_status_t err;
+
+    printf("dtls_srtp_driver\n");
+
+    /* initialize srtp library */
+    err = srtp_init();
+    if (err) {
+        printf("error: srtp init failed with error code %d\n", err);
+        exit(1);
+    }
+
+    /* process input arguments */
+    while (1) {
+        q = getopt_s(argc, argv, "ld:");
+        if (q == -1)
+            break;
+        switch (q) {
+        case 'l':
+            do_list_mods = 1;
+            break;
+        case 'd':
+            err = srtp_crypto_kernel_set_debug_module(optarg_s, 1);
+            if (err) {
+                printf("error: set debug module (%s) failed\n", optarg_s);
+                exit(1);
+            }
+            break;
+        default:
+            usage(argv[0]);
+        }
+    }
+
+    if (do_list_mods) {
+        err = srtp_crypto_kernel_list_debug_modules();
+        if (err) {
+            printf("error: list of debug modules failed\n");
+            exit(1);
+        }
+    }
+
+    printf("testing dtls_srtp...");
+    err = test_dtls_srtp();
+    if (err) {
+        printf("\nerror (code %d)\n", err);
+        exit(1);
+    }
+    printf("passed\n");
+
+    /* shut down srtp library */
+    err = srtp_shutdown();
+    if (err) {
+        printf("error: srtp shutdown failed with error code %d\n", err);
+        exit(1);
+    }
+
+    return 0;
+}
+
+srtp_err_status_t test_dtls_srtp(void)
+{
+    srtp_hdr_t *test_packet;
+    int test_packet_len = 80;
+    srtp_t s;
+    srtp_policy_t policy;
+    uint8_t key[SRTP_MAX_KEY_LEN];
+    uint8_t salt[SRTP_MAX_KEY_LEN];
+    unsigned int key_len, salt_len;
+    srtp_profile_t profile;
+    srtp_err_status_t err;
+
+    memset(&policy, 0x0, sizeof(srtp_policy_t));
+
+    /* create a 'null' SRTP session */
+    err = srtp_create(&s, NULL);
+    if (err)
+        return err;
+
+    /*
+     * verify that packet-processing functions behave properly - we
+     * expect that these functions will return srtp_err_status_no_ctx
+     */
+    test_packet = srtp_create_test_packet(80, 0xa5a5a5a5);
+    if (test_packet == NULL)
+        return srtp_err_status_alloc_fail;
+
+    err = srtp_protect(s, test_packet, &test_packet_len);
+    if (err != srtp_err_status_no_ctx) {
+        printf("wrong return value from srtp_protect() (got code %d)\n", err);
+        return srtp_err_status_fail;
+    }
+
+    err = srtp_unprotect(s, test_packet, &test_packet_len);
+    if (err != srtp_err_status_no_ctx) {
+        printf("wrong return value from srtp_unprotect() (got code %d)\n", err);
+        return srtp_err_status_fail;
+    }
+
+    err = srtp_protect_rtcp(s, test_packet, &test_packet_len);
+    if (err != srtp_err_status_no_ctx) {
+        printf("wrong return value from srtp_protect_rtcp() (got code %d)\n",
+               err);
+        return srtp_err_status_fail;
+    }
+
+    err = srtp_unprotect_rtcp(s, test_packet, &test_packet_len);
+    if (err != srtp_err_status_no_ctx) {
+        printf("wrong return value from srtp_unprotect_rtcp() (got code %d)\n",
+               err);
+        return srtp_err_status_fail;
+    }
+
+    /*
+     * set keys to known values for testing
+     */
+    profile = srtp_profile_aes128_cm_sha1_80;
+    key_len = srtp_profile_get_master_key_length(profile);
+    salt_len = srtp_profile_get_master_salt_length(profile);
+    memset(key, 0xff, key_len);
+    memset(salt, 0xee, salt_len);
+    srtp_append_salt_to_key(key, key_len, salt, salt_len);
+    policy.key = key;
+
+    /* initialize SRTP policy from profile  */
+    err = srtp_crypto_policy_set_from_profile_for_rtp(&policy.rtp, profile);
+    if (err)
+        return err;
+    err = srtp_crypto_policy_set_from_profile_for_rtcp(&policy.rtcp, profile);
+    if (err)
+        return err;
+    policy.ssrc.type = ssrc_any_inbound;
+    policy.ekt = NULL;
+    policy.window_size = 128;
+    policy.allow_repeat_tx = 0;
+    policy.next = NULL;
+
+    err = srtp_add_stream(s, &policy);
+    if (err)
+        return err;
+
+    err = srtp_dealloc(s);
+    if (err)
+        return err;
+
+    free(test_packet);
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * srtp_create_test_packet(len, ssrc) returns a pointer to a
+ * (malloced) example RTP packet whose data field has the length given
+ * by pkt_octet_len and the SSRC value ssrc.  The total length of the
+ * packet is twelve octets longer, since the header is at the
+ * beginning.  There is room at the end of the packet for a trailer,
+ * and the four octets following the packet are filled with 0xff
+ * values to enable testing for overwrites.
+ *
+ * note that the location of the test packet can (and should) be
+ * deallocated with the free() call once it is no longer needed.
+ */
+
+srtp_hdr_t *srtp_create_test_packet(int pkt_octet_len, uint32_t ssrc)
+{
+    int i;
+    uint8_t *buffer;
+    srtp_hdr_t *hdr;
+    int bytes_in_hdr = 12;
+
+    /* allocate memory for test packet */
+    hdr = malloc(pkt_octet_len + bytes_in_hdr + SRTP_MAX_TRAILER_LEN + 4);
+    if (!hdr)
+        return NULL;
+
+    hdr->version = 2;            /* RTP version two     */
+    hdr->p = 0;                  /* no padding needed   */
+    hdr->x = 0;                  /* no header extension */
+    hdr->cc = 0;                 /* no CSRCs            */
+    hdr->m = 0;                  /* marker bit          */
+    hdr->pt = 0xf;               /* payload type        */
+    hdr->seq = htons(0x1234);    /* sequence number     */
+    hdr->ts = htonl(0xdecafbad); /* timestamp           */
+    hdr->ssrc = htonl(ssrc);     /* synch. source       */
+
+    buffer = (uint8_t *)hdr;
+    buffer += bytes_in_hdr;
+
+    /* set RTP data to 0xab */
+    for (i = 0; i < pkt_octet_len; i++)
+        *buffer++ = 0xab;
+
+    /* set post-data value to 0xffff to enable overrun checking */
+    for (i = 0; i < SRTP_MAX_TRAILER_LEN + 4; i++)
+        *buffer++ = 0xff;
+
+    return hdr;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/getopt_s.c b/trunk/3rdparty/libsrtp-2-fit/test/getopt_s.c
new file mode 100644
index 000000000..e0bd7f77e
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/getopt_s.c
@@ -0,0 +1,109 @@
+/*
+ * getopt.c
+ *
+ * a minimal implementation of the getopt() function, written so that
+ * test applications that use that function can run on non-POSIX
+ * platforms
+ *
+ */
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#include <stdlib.h> /* for NULL */
+
+int optind_s = 0;
+
+char *optarg_s;
+
+#define GETOPT_FOUND_WITHOUT_ARGUMENT 2
+#define GETOPT_FOUND_WITH_ARGUMENT 1
+#define GETOPT_NOT_FOUND 0
+
+static int getopt_check_character(char c, const char *string)
+{
+    unsigned int max_string_len = 128;
+
+    while (*string != 0) {
+        if (max_string_len == 0) {
+            return GETOPT_NOT_FOUND;
+        }
+        max_string_len--;
+        if (*string++ == c) {
+            if (*string == ':') {
+                return GETOPT_FOUND_WITH_ARGUMENT;
+            } else {
+                return GETOPT_FOUND_WITHOUT_ARGUMENT;
+            }
+        }
+    }
+    return GETOPT_NOT_FOUND;
+}
+
+int getopt_s(int argc, char *const argv[], const char *optstring)
+{
+    while (optind_s + 1 < argc) {
+        char *string;
+
+        /* move 'string' on to next argument */
+        optind_s++;
+        string = argv[optind_s];
+
+        if (string == NULL)
+            return '?'; /* NULL argument string */
+
+        if (string[0] != '-')
+            return -1; /* found an unexpected character */
+
+        switch (getopt_check_character(string[1], optstring)) {
+        case GETOPT_FOUND_WITH_ARGUMENT:
+            if (optind_s + 1 < argc) {
+                optind_s++;
+                optarg_s = argv[optind_s];
+                return string[1];
+            } else {
+                return '?'; /* argument missing */
+            }
+        case GETOPT_FOUND_WITHOUT_ARGUMENT:
+            return string[1];
+        case GETOPT_NOT_FOUND:
+        default:
+            return '?'; /* didn't find expected character */
+            break;
+        }
+    }
+
+    return -1;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/rdbx_driver.c b/trunk/3rdparty/libsrtp-2-fit/test/rdbx_driver.c
new file mode 100644
index 000000000..df434a022
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/rdbx_driver.c
@@ -0,0 +1,360 @@
+/*
+ * rdbx_driver.c
+ *
+ * driver for the rdbx implementation (replay database with extended range)
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include <stdio.h>    /* for printf()          */
+#include "getopt_s.h" /* for local getopt()    */
+
+#include "rdbx.h"
+#include "cipher_priv.h"
+
+#ifdef ROC_TEST
+#error "srtp_rdbx_t won't work with ROC_TEST - bitmask same size as seq_median"
+#endif
+
+#include "ut_sim.h"
+
+srtp_err_status_t test_replay_dbx(int num_trials, unsigned long ws);
+
+double rdbx_check_adds_per_second(int num_trials, unsigned long ws);
+
+void usage(char *prog_name)
+{
+    printf("usage: %s [ -t | -v ]\n", prog_name);
+    exit(255);
+}
+
+int main(int argc, char *argv[])
+{
+    double rate;
+    srtp_err_status_t status;
+    int q;
+    unsigned do_timing_test = 0;
+    unsigned do_validation = 0;
+
+    /* process input arguments */
+    while (1) {
+        q = getopt_s(argc, argv, "tv");
+        if (q == -1)
+            break;
+        switch (q) {
+        case 't':
+            do_timing_test = 1;
+            break;
+        case 'v':
+            do_validation = 1;
+            break;
+        default:
+            usage(argv[0]);
+        }
+    }
+
+    printf("rdbx (replay database w/ extended range) test driver\n"
+           "David A. McGrew\n"
+           "Cisco Systems, Inc.\n");
+
+    if (!do_validation && !do_timing_test)
+        usage(argv[0]);
+
+    if (do_validation) {
+        printf("testing srtp_rdbx_t (ws=128)...\n");
+
+        status = test_replay_dbx(1 << 12, 128);
+        if (status) {
+            printf("failed\n");
+            exit(1);
+        }
+        printf("passed\n");
+
+        printf("testing srtp_rdbx_t (ws=1024)...\n");
+
+        status = test_replay_dbx(1 << 12, 1024);
+        if (status) {
+            printf("failed\n");
+            exit(1);
+        }
+        printf("passed\n");
+    }
+
+    if (do_timing_test) {
+        rate = rdbx_check_adds_per_second(1 << 18, 128);
+        printf("rdbx_check/replay_adds per second (ws=128): %e\n", rate);
+        rate = rdbx_check_adds_per_second(1 << 18, 1024);
+        printf("rdbx_check/replay_adds per second (ws=1024): %e\n", rate);
+    }
+
+    return 0;
+}
+
+void print_rdbx(srtp_rdbx_t *rdbx)
+{
+    char buf[2048];
+    printf("rdbx: {%llu, %s}\n", (unsigned long long)(rdbx->index),
+           bitvector_bit_string(&rdbx->bitmask, buf, sizeof(buf)));
+}
+
+/*
+ * rdbx_check_add(rdbx, idx) checks a known-to-be-good idx against
+ * rdbx, then adds it.  if a failure is detected (i.e., the check
+ * indicates that the value is already in rdbx) then
+ * srtp_err_status_algo_fail is returned.
+ *
+ */
+
+srtp_err_status_t rdbx_check_add(srtp_rdbx_t *rdbx, uint32_t idx)
+{
+    int delta;
+    srtp_xtd_seq_num_t est;
+
+    delta = srtp_index_guess(&rdbx->index, &est, idx);
+
+    if (srtp_rdbx_check(rdbx, delta) != srtp_err_status_ok) {
+        printf("replay_check failed at index %u\n", idx);
+        return srtp_err_status_algo_fail;
+    }
+
+    /*
+     * in practice, we'd authenticate the packet containing idx, using
+     * the estimated value est, at this point
+     */
+
+    if (srtp_rdbx_add_index(rdbx, delta) != srtp_err_status_ok) {
+        printf("rdbx_add_index failed at index %u\n", idx);
+        return srtp_err_status_algo_fail;
+    }
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * rdbx_check_expect_failure(srtp_rdbx_t *rdbx, uint32_t idx)
+ *
+ * checks that a sequence number idx is in the replay database
+ * and thus will be rejected
+ */
+
+srtp_err_status_t rdbx_check_expect_failure(srtp_rdbx_t *rdbx, uint32_t idx)
+{
+    int delta;
+    srtp_xtd_seq_num_t est;
+    srtp_err_status_t status;
+
+    delta = srtp_index_guess(&rdbx->index, &est, idx);
+
+    status = srtp_rdbx_check(rdbx, delta);
+    if (status == srtp_err_status_ok) {
+        printf("delta: %d ", delta);
+        printf("replay_check failed at index %u (false positive)\n", idx);
+        return srtp_err_status_algo_fail;
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t rdbx_check_add_unordered(srtp_rdbx_t *rdbx, uint32_t idx)
+{
+    int delta;
+    srtp_xtd_seq_num_t est;
+    srtp_err_status_t rstat;
+
+    delta = srtp_index_guess(&rdbx->index, &est, idx);
+
+    rstat = srtp_rdbx_check(rdbx, delta);
+    if ((rstat != srtp_err_status_ok) &&
+        (rstat != srtp_err_status_replay_old)) {
+        printf("replay_check_add_unordered failed at index %u\n", idx);
+        return srtp_err_status_algo_fail;
+    }
+    if (rstat == srtp_err_status_replay_old) {
+        return srtp_err_status_ok;
+    }
+    if (srtp_rdbx_add_index(rdbx, delta) != srtp_err_status_ok) {
+        printf("rdbx_add_index failed at index %u\n", idx);
+        return srtp_err_status_algo_fail;
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t test_replay_dbx(int num_trials, unsigned long ws)
+{
+    srtp_rdbx_t rdbx;
+    uint32_t idx, ircvd;
+    ut_connection utc;
+    srtp_err_status_t status;
+    int num_fp_trials;
+
+    status = srtp_rdbx_init(&rdbx, ws);
+    if (status) {
+        printf("replay_init failed with error code %d\n", status);
+        exit(1);
+    }
+
+    /*
+     *  test sequential insertion
+     */
+    printf("\ttesting sequential insertion...");
+    for (idx = 0; (int)idx < num_trials; idx++) {
+        status = rdbx_check_add(&rdbx, idx);
+        if (status)
+            return status;
+    }
+    printf("passed\n");
+
+    /*
+     *  test for false positives by checking all of the index
+     *  values which we've just added
+     *
+     * note that we limit the number of trials here, since allowing the
+     * rollover counter to roll over would defeat this test
+     */
+    num_fp_trials = num_trials % 0x10000;
+    if (num_fp_trials == 0) {
+        printf("warning: no false positive tests performed\n");
+    }
+    printf("\ttesting for false positives...");
+    for (idx = 0; (int)idx < num_fp_trials; idx++) {
+        status = rdbx_check_expect_failure(&rdbx, idx);
+        if (status)
+            return status;
+    }
+    printf("passed\n");
+
+    /* re-initialize */
+    srtp_rdbx_dealloc(&rdbx);
+
+    if (srtp_rdbx_init(&rdbx, ws) != srtp_err_status_ok) {
+        printf("replay_init failed\n");
+        return srtp_err_status_init_fail;
+    }
+
+    /*
+     * test non-sequential insertion
+     *
+     * this test covers only fase negatives, since the values returned
+     * by ut_next_index(...) are distinct
+     */
+    ut_init(&utc);
+
+    printf("\ttesting non-sequential insertion...");
+    for (idx = 0; (int)idx < num_trials; idx++) {
+        ircvd = ut_next_index(&utc);
+        status = rdbx_check_add_unordered(&rdbx, ircvd);
+        if (status)
+            return status;
+        status = rdbx_check_expect_failure(&rdbx, ircvd);
+        if (status)
+            return status;
+    }
+    printf("passed\n");
+
+    /* re-initialize */
+    srtp_rdbx_dealloc(&rdbx);
+
+    if (srtp_rdbx_init(&rdbx, ws) != srtp_err_status_ok) {
+        printf("replay_init failed\n");
+        return srtp_err_status_init_fail;
+    }
+
+    /*
+     * test insertion with large gaps.
+     * check for false positives for each insertion.
+     */
+    printf("\ttesting insertion with large gaps...");
+    for (idx = 0, ircvd = 0; (int)idx < num_trials;
+         idx++, ircvd += (1 << (srtp_cipher_rand_u32_for_tests() % 12))) {
+        status = rdbx_check_add(&rdbx, ircvd);
+        if (status)
+            return status;
+        status = rdbx_check_expect_failure(&rdbx, ircvd);
+        if (status)
+            return status;
+    }
+    printf("passed\n");
+
+    srtp_rdbx_dealloc(&rdbx);
+
+    return srtp_err_status_ok;
+}
+
+#include <time.h> /* for clock()  */
+
+double rdbx_check_adds_per_second(int num_trials, unsigned long ws)
+{
+    uint32_t i;
+    int delta;
+    srtp_rdbx_t rdbx;
+    srtp_xtd_seq_num_t est;
+    clock_t timer;
+    int failures; /* count number of failures */
+
+    if (srtp_rdbx_init(&rdbx, ws) != srtp_err_status_ok) {
+        printf("replay_init failed\n");
+        exit(1);
+    }
+
+    failures = 0;
+    timer = clock();
+    for (i = 0; (int)i < num_trials; i++) {
+        delta = srtp_index_guess(&rdbx.index, &est, i);
+
+        if (srtp_rdbx_check(&rdbx, delta) != srtp_err_status_ok)
+            ++failures;
+        else if (srtp_rdbx_add_index(&rdbx, delta) != srtp_err_status_ok)
+            ++failures;
+    }
+    timer = clock() - timer;
+    if (timer < 1) {
+        timer = 1;
+    }
+
+    printf("number of failures: %d \n", failures);
+
+    srtp_rdbx_dealloc(&rdbx);
+
+    return (double)CLOCKS_PER_SEC * num_trials / timer;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/replay_driver.c b/trunk/3rdparty/libsrtp-2-fit/test/replay_driver.c
new file mode 100644
index 000000000..e0808b685
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/replay_driver.c
@@ -0,0 +1,285 @@
+/*
+ * replay_driver.c
+ *
+ * A driver for the replay_database implementation
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include <stdio.h>
+
+#include "rdb.h"
+#include "ut_sim.h"
+
+#include "cipher_priv.h"
+
+/*
+ * num_trials defines the number of trials that are used in the
+ * validation functions below
+ */
+
+unsigned num_trials = 1 << 16;
+
+srtp_err_status_t test_rdb_db(void);
+
+double rdb_check_adds_per_second(void);
+
+int main(void)
+{
+    srtp_err_status_t err;
+
+    printf("testing anti-replay database (srtp_rdb_t)...\n");
+    err = test_rdb_db();
+    if (err) {
+        printf("failed\n");
+        exit(1);
+    }
+    printf("done\n");
+
+    printf("rdb_check/rdb_adds per second: %e\n", rdb_check_adds_per_second());
+
+    return 0;
+}
+
+void print_rdb(srtp_rdb_t *rdb)
+{
+    printf("rdb: {%u, %s}\n", rdb->window_start,
+           v128_bit_string(&rdb->bitmask));
+}
+
+srtp_err_status_t rdb_check_add(srtp_rdb_t *rdb, uint32_t idx)
+{
+    if (srtp_rdb_check(rdb, idx) != srtp_err_status_ok) {
+        printf("rdb_check failed at index %u\n", idx);
+        return srtp_err_status_fail;
+    }
+    if (srtp_rdb_add_index(rdb, idx) != srtp_err_status_ok) {
+        printf("rdb_add_index failed at index %u\n", idx);
+        return srtp_err_status_fail;
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t rdb_check_expect_failure(srtp_rdb_t *rdb, uint32_t idx)
+{
+    srtp_err_status_t err;
+
+    err = srtp_rdb_check(rdb, idx);
+    if ((err != srtp_err_status_replay_old) &&
+        (err != srtp_err_status_replay_fail)) {
+        printf("rdb_check failed at index %u (false positive)\n", idx);
+        return srtp_err_status_fail;
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t rdb_check_add_unordered(srtp_rdb_t *rdb, uint32_t idx)
+{
+    srtp_err_status_t rstat;
+
+    /* printf("index: %u\n", idx); */
+    rstat = srtp_rdb_check(rdb, idx);
+    if ((rstat != srtp_err_status_ok) &&
+        (rstat != srtp_err_status_replay_old)) {
+        printf("rdb_check_add_unordered failed at index %u\n", idx);
+        return rstat;
+    }
+    if (rstat == srtp_err_status_replay_old) {
+        return srtp_err_status_ok;
+    }
+    if (srtp_rdb_add_index(rdb, idx) != srtp_err_status_ok) {
+        printf("rdb_add_index failed at index %u\n", idx);
+        return srtp_err_status_fail;
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t test_rdb_db()
+{
+    srtp_rdb_t rdb;
+    uint32_t idx, ircvd;
+    ut_connection utc;
+    srtp_err_status_t err;
+
+    if (srtp_rdb_init(&rdb) != srtp_err_status_ok) {
+        printf("rdb_init failed\n");
+        return srtp_err_status_init_fail;
+    }
+
+    /* test sequential insertion */
+    for (idx = 0; idx < num_trials; idx++) {
+        err = rdb_check_add(&rdb, idx);
+        if (err)
+            return err;
+    }
+
+    /* test for false positives */
+    for (idx = 0; idx < num_trials; idx++) {
+        err = rdb_check_expect_failure(&rdb, idx);
+        if (err)
+            return err;
+    }
+
+    /* re-initialize */
+    if (srtp_rdb_init(&rdb) != srtp_err_status_ok) {
+        printf("rdb_init failed\n");
+        return srtp_err_status_fail;
+    }
+
+    /* test non-sequential insertion */
+    ut_init(&utc);
+
+    for (idx = 0; idx < num_trials; idx++) {
+        ircvd = ut_next_index(&utc);
+        err = rdb_check_add_unordered(&rdb, ircvd);
+        if (err)
+            return err;
+        err = rdb_check_expect_failure(&rdb, ircvd);
+        if (err)
+            return err;
+    }
+
+    /* re-initialize */
+    if (srtp_rdb_init(&rdb) != srtp_err_status_ok) {
+        printf("rdb_init failed\n");
+        return srtp_err_status_fail;
+    }
+
+    /* test insertion with large gaps */
+    for (idx = 0, ircvd = 0; idx < num_trials;
+         idx++, ircvd += (1 << (srtp_cipher_rand_u32_for_tests() % 10))) {
+        err = rdb_check_add(&rdb, ircvd);
+        if (err)
+            return err;
+        err = rdb_check_expect_failure(&rdb, ircvd);
+        if (err)
+            return err;
+    }
+
+    /* re-initialize */
+    if (srtp_rdb_init(&rdb) != srtp_err_status_ok) {
+        printf("rdb_init failed\n");
+        return srtp_err_status_fail;
+    }
+
+    /* test loss of first 513 packets */
+    for (idx = 0; idx < num_trials; idx++) {
+        err = rdb_check_add(&rdb, idx + 513);
+        if (err)
+            return err;
+    }
+
+    /* test for false positives */
+    for (idx = 0; idx < num_trials + 513; idx++) {
+        err = rdb_check_expect_failure(&rdb, idx);
+        if (err)
+            return err;
+    }
+
+    /* test for key expired */
+    if (srtp_rdb_init(&rdb) != srtp_err_status_ok) {
+        printf("rdb_init failed\n");
+        return srtp_err_status_fail;
+    }
+    rdb.window_start = 0x7ffffffe;
+    if (srtp_rdb_increment(&rdb) != srtp_err_status_ok) {
+        printf("srtp_rdb_increment of 0x7ffffffe failed\n");
+        return srtp_err_status_fail;
+    }
+    if (srtp_rdb_get_value(&rdb) != 0x7fffffff) {
+        printf("rdb valiue was not 0x7fffffff\n");
+        return srtp_err_status_fail;
+    }
+    if (srtp_rdb_increment(&rdb) != srtp_err_status_key_expired) {
+        printf("srtp_rdb_increment of 0x7fffffff did not return "
+               "srtp_err_status_key_expired\n");
+        return srtp_err_status_fail;
+    }
+    if (srtp_rdb_get_value(&rdb) != 0x7fffffff) {
+        printf("rdb valiue was not 0x7fffffff\n");
+        return srtp_err_status_fail;
+    }
+
+    return srtp_err_status_ok;
+}
+
+#include <time.h>   /* for clock()  */
+#include <stdlib.h> /* for random() */
+
+#define REPLAY_NUM_TRIALS 10000000
+
+double rdb_check_adds_per_second(void)
+{
+    uint32_t i;
+    srtp_rdb_t rdb;
+    clock_t timer;
+    int failures = 0; /* count number of failures        */
+
+    if (srtp_rdb_init(&rdb) != srtp_err_status_ok) {
+        printf("rdb_init failed\n");
+        exit(1);
+    }
+
+    timer = clock();
+    for (i = 0; i < REPLAY_NUM_TRIALS; i += 3) {
+        if (srtp_rdb_check(&rdb, i + 2) != srtp_err_status_ok)
+            ++failures;
+        if (srtp_rdb_add_index(&rdb, i + 2) != srtp_err_status_ok)
+            ++failures;
+        if (srtp_rdb_check(&rdb, i + 1) != srtp_err_status_ok)
+            ++failures;
+        if (srtp_rdb_add_index(&rdb, i + 1) != srtp_err_status_ok)
+            ++failures;
+        if (srtp_rdb_check(&rdb, i) != srtp_err_status_ok)
+            ++failures;
+        if (srtp_rdb_add_index(&rdb, i) != srtp_err_status_ok)
+            ++failures;
+    }
+    timer = clock() - timer;
+
+    return (double)CLOCKS_PER_SEC * REPLAY_NUM_TRIALS / timer;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/roc_driver.c b/trunk/3rdparty/libsrtp-2-fit/test/roc_driver.c
new file mode 100644
index 000000000..439862039
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/roc_driver.c
@@ -0,0 +1,170 @@
+/*
+ * roc_driver.c
+ *
+ * test driver for rollover counter replay implementation
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include <stdio.h>
+
+/*
+ * defining ROC_TEST causes small datatypes to be used in
+ * srtp_xtd_seq_num_t - this allows the functions to be exhaustively tested.
+ */
+#if ROC_NEEDS_TO_BE_TESTED
+#define ROC_TEST
+#endif
+
+#include "rdbx.h"
+#include "ut_sim.h"
+
+srtp_err_status_t roc_test(int num_trials);
+
+int main(void)
+{
+    srtp_err_status_t status;
+
+    printf("rollover counter test driver\n"
+           "David A. McGrew\n"
+           "Cisco Systems, Inc.\n");
+
+    printf("testing index functions...");
+    status = roc_test(1 << 18);
+    if (status) {
+        printf("failed\n");
+        exit(status);
+    }
+    printf("passed\n");
+    return 0;
+}
+
+#define ROC_VERBOSE 0
+
+srtp_err_status_t roc_test(int num_trials)
+{
+    srtp_xtd_seq_num_t local, est, ref;
+    ut_connection utc;
+    int i, num_bad_est = 0;
+    int delta;
+    uint32_t ircvd;
+    double failure_rate;
+
+    srtp_index_init(&local);
+    srtp_index_init(&ref);
+    srtp_index_init(&est);
+
+    printf("\n\ttesting sequential insertion...");
+    for (i = 0; i < 2048; i++) {
+        srtp_index_guess(&local, &est, (uint16_t)ref);
+#if ROC_VERBOSE
+        printf("%lld, %lld, %d\n", ref, est, i);
+#endif
+        if (ref != est) {
+#if ROC_VERBOSE
+            printf(" *bad estimate*\n");
+#endif
+            ++num_bad_est;
+        }
+        srtp_index_advance(&ref, 1);
+    }
+    failure_rate = (double)num_bad_est / num_trials;
+    if (failure_rate > 0.01) {
+        printf("error: failure rate too high (%d bad estimates in %d trials)\n",
+               num_bad_est, num_trials);
+        return srtp_err_status_algo_fail;
+    }
+    printf("done\n");
+
+    printf("\ttesting non-sequential insertion...");
+    srtp_index_init(&local);
+    srtp_index_init(&ref);
+    srtp_index_init(&est);
+    ut_init(&utc);
+
+    for (i = 0; i < num_trials; i++) {
+        /* get next seq num from unreliable transport simulator */
+        ircvd = ut_next_index(&utc);
+
+        /* set ref to value of ircvd */
+        ref = ircvd;
+
+        /* estimate index based on low bits of ircvd */
+        delta = srtp_index_guess(&local, &est, (uint16_t)ref);
+#if ROC_VERBOSE
+        printf("ref: %lld, local: %lld, est: %lld, ircvd: %d, delta: %d\n", ref,
+               local, est, ircvd, delta);
+#endif
+
+        if (local + delta != est) {
+            printf(" *bad delta*: local %llu + delta %d != est %llu\n",
+                   (unsigned long long)local, delta, (unsigned long long)est);
+            return srtp_err_status_algo_fail;
+        }
+
+        /* now update local srtp_xtd_seq_num_t as necessary */
+        if (delta > 0)
+            srtp_index_advance(&local, delta);
+
+        if (ref != est) {
+#if ROC_VERBOSE
+            printf(" *bad estimate*\n");
+#endif
+            /* record failure event */
+            ++num_bad_est;
+
+            /* reset local value to correct value */
+            local = ref;
+        }
+    }
+    failure_rate = (double)num_bad_est / num_trials;
+    if (failure_rate > 0.01) {
+        printf("error: failure rate too high (%d bad estimates in %d trials)\n",
+               num_bad_est, num_trials);
+        return srtp_err_status_algo_fail;
+    }
+    printf("done\n");
+
+    return srtp_err_status_ok;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/rtp.c b/trunk/3rdparty/libsrtp-2-fit/test/rtp.c
new file mode 100644
index 000000000..70248ee2b
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/rtp.c
@@ -0,0 +1,229 @@
+/*
+ * rtp.c
+ *
+ * library functions for the real-time transport protocol
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#include "rtp.h"
+
+#include <stdio.h>
+#include <string.h>
+
+#include <sys/types.h>
+#ifdef HAVE_SYS_SOCKET_H
+#include <sys/socket.h>
+#endif
+
+#include "cipher_priv.h"
+
+#define PRINT_DEBUG 0   /* set to 1 to print out debugging data */
+#define VERBOSE_DEBUG 0 /* set to 1 to print out more data      */
+
+int rtp_sendto(rtp_sender_t sender, const void *msg, int len)
+{
+    int octets_sent;
+    srtp_err_status_t stat;
+    int pkt_len = len + RTP_HEADER_LEN;
+
+    /* marshal data */
+    strncpy(sender->message.body, msg, len);
+
+    /* update header */
+    sender->message.header.seq = ntohs(sender->message.header.seq) + 1;
+    sender->message.header.seq = htons(sender->message.header.seq);
+    sender->message.header.ts = ntohl(sender->message.header.ts) + 1;
+    sender->message.header.ts = htonl(sender->message.header.ts);
+
+    /* apply srtp */
+    stat = srtp_protect(sender->srtp_ctx, &sender->message.header, &pkt_len);
+    if (stat) {
+#if PRINT_DEBUG
+        fprintf(stderr, "error: srtp protection failed with code %d\n", stat);
+#endif
+        return -1;
+    }
+#if VERBOSE_DEBUG
+    srtp_print_packet(&sender->message.header, pkt_len);
+#endif
+    octets_sent =
+        sendto(sender->socket, (void *)&sender->message, pkt_len, 0,
+               (struct sockaddr *)&sender->addr, sizeof(struct sockaddr_in));
+
+    if (octets_sent != pkt_len) {
+#if PRINT_DEBUG
+        fprintf(stderr, "error: couldn't send message %s", (char *)msg);
+        perror("");
+#endif
+    }
+
+    return octets_sent;
+}
+
+int rtp_recvfrom(rtp_receiver_t receiver, void *msg, int *len)
+{
+    int octets_recvd;
+    srtp_err_status_t stat;
+
+    octets_recvd = recvfrom(receiver->socket, (void *)&receiver->message, *len,
+                            0, (struct sockaddr *)NULL, 0);
+
+    if (octets_recvd == -1) {
+        *len = 0;
+        return -1;
+    }
+
+    /* verify rtp header */
+    if (receiver->message.header.version != 2) {
+        *len = 0;
+        return -1;
+    }
+
+#if PRINT_DEBUG
+    fprintf(stderr, "%d octets received from SSRC %u\n", octets_recvd,
+            receiver->message.header.ssrc);
+#endif
+#if VERBOSE_DEBUG
+    srtp_print_packet(&receiver->message.header, octets_recvd);
+#endif
+
+    /* apply srtp */
+    stat = srtp_unprotect(receiver->srtp_ctx, &receiver->message.header,
+                          &octets_recvd);
+    if (stat) {
+        fprintf(stderr, "error: srtp unprotection failed with code %d%s\n",
+                stat,
+                stat == srtp_err_status_replay_fail
+                    ? " (replay check failed)"
+                    : stat == srtp_err_status_auth_fail ? " (auth check failed)"
+                                                        : "");
+        return -1;
+    }
+    strncpy(msg, receiver->message.body, octets_recvd);
+
+    return octets_recvd;
+}
+
+int rtp_sender_init(rtp_sender_t sender,
+                    int sock,
+                    struct sockaddr_in addr,
+                    unsigned int ssrc)
+{
+    /* set header values */
+    sender->message.header.ssrc = htonl(ssrc);
+    sender->message.header.ts = 0;
+    sender->message.header.seq = (uint16_t)srtp_cipher_rand_u32_for_tests();
+    sender->message.header.m = 0;
+    sender->message.header.pt = 0x1;
+    sender->message.header.version = 2;
+    sender->message.header.p = 0;
+    sender->message.header.x = 0;
+    sender->message.header.cc = 0;
+
+    /* set other stuff */
+    sender->socket = sock;
+    sender->addr = addr;
+
+    return 0;
+}
+
+int rtp_receiver_init(rtp_receiver_t rcvr,
+                      int sock,
+                      struct sockaddr_in addr,
+                      unsigned int ssrc)
+{
+    /* set header values */
+    rcvr->message.header.ssrc = htonl(ssrc);
+    rcvr->message.header.ts = 0;
+    rcvr->message.header.seq = 0;
+    rcvr->message.header.m = 0;
+    rcvr->message.header.pt = 0x1;
+    rcvr->message.header.version = 2;
+    rcvr->message.header.p = 0;
+    rcvr->message.header.x = 0;
+    rcvr->message.header.cc = 0;
+
+    /* set other stuff */
+    rcvr->socket = sock;
+    rcvr->addr = addr;
+
+    return 0;
+}
+
+int rtp_sender_init_srtp(rtp_sender_t sender, const srtp_policy_t *policy)
+{
+    return srtp_create(&sender->srtp_ctx, policy);
+}
+
+int rtp_sender_deinit_srtp(rtp_sender_t sender)
+{
+    return srtp_dealloc(sender->srtp_ctx);
+}
+
+int rtp_receiver_init_srtp(rtp_receiver_t sender, const srtp_policy_t *policy)
+{
+    return srtp_create(&sender->srtp_ctx, policy);
+}
+
+int rtp_receiver_deinit_srtp(rtp_receiver_t sender)
+{
+    return srtp_dealloc(sender->srtp_ctx);
+}
+
+rtp_sender_t rtp_sender_alloc(void)
+{
+    return (rtp_sender_t)malloc(sizeof(rtp_sender_ctx_t));
+}
+
+void rtp_sender_dealloc(rtp_sender_t rtp_ctx)
+{
+    free(rtp_ctx);
+}
+
+rtp_receiver_t rtp_receiver_alloc(void)
+{
+    return (rtp_receiver_t)malloc(sizeof(rtp_receiver_ctx_t));
+}
+
+void rtp_receiver_dealloc(rtp_receiver_t rtp_ctx)
+{
+    free(rtp_ctx);
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/rtp.h b/trunk/3rdparty/libsrtp-2-fit/test/rtp.h
new file mode 100644
index 000000000..37921a665
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/rtp.h
@@ -0,0 +1,155 @@
+/*
+ * rtp.h
+ *
+ * rtp interface for srtp reference implementation
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ *
+ * data types:
+ *
+ * rtp_msg_t       an rtp message (the data that goes on the wire)
+ * rtp_sender_t    sender side socket and rtp info
+ * rtp_receiver_t  receiver side socket and rtp info
+ *
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef SRTP_RTP_H
+#define SRTP_RTP_H
+
+#ifdef HAVE_NETINET_IN_H
+#include <netinet/in.h>
+#elif defined HAVE_WINSOCK2_H
+#include <winsock2.h>
+#endif
+
+#include "srtp_priv.h"
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/*
+ * RTP_HEADER_LEN indicates the size of an RTP header
+ */
+#define RTP_HEADER_LEN 12
+
+/*
+ * RTP_MAX_BUF_LEN defines the largest RTP packet in the rtp.c implementation
+ */
+#define RTP_MAX_BUF_LEN 16384
+
+typedef srtp_hdr_t rtp_hdr_t;
+
+typedef struct {
+    srtp_hdr_t header;
+    char body[RTP_MAX_BUF_LEN];
+} rtp_msg_t;
+
+typedef struct rtp_sender_ctx_t {
+    rtp_msg_t message;
+    int socket;
+    srtp_ctx_t *srtp_ctx;
+    struct sockaddr_in addr; /* reciever's address */
+} rtp_sender_ctx_t;
+
+typedef struct rtp_receiver_ctx_t {
+    rtp_msg_t message;
+    int socket;
+    srtp_ctx_t *srtp_ctx;
+    struct sockaddr_in addr; /* receiver's address */
+} rtp_receiver_ctx_t;
+
+typedef struct rtp_sender_ctx_t *rtp_sender_t;
+
+typedef struct rtp_receiver_ctx_t *rtp_receiver_t;
+
+int rtp_sendto(rtp_sender_t sender, const void *msg, int len);
+
+int rtp_recvfrom(rtp_receiver_t receiver, void *msg, int *len);
+
+int rtp_receiver_init(rtp_receiver_t rcvr,
+                      int sock,
+                      struct sockaddr_in addr,
+                      unsigned int ssrc);
+
+int rtp_sender_init(rtp_sender_t sender,
+                    int sock,
+                    struct sockaddr_in addr,
+                    unsigned int ssrc);
+
+/*
+ * srtp_sender_init(...) initializes an rtp_sender_t
+ */
+
+int srtp_sender_init(
+    rtp_sender_t rtp_ctx,              /* structure to be init'ed */
+    struct sockaddr_in name,           /* socket name             */
+    srtp_sec_serv_t security_services, /* sec. servs. to be used  */
+    unsigned char *input_key           /* master key/salt in hex  */
+    );
+
+int srtp_receiver_init(
+    rtp_receiver_t rtp_ctx,            /* structure to be init'ed */
+    struct sockaddr_in name,           /* socket name             */
+    srtp_sec_serv_t security_services, /* sec. servs. to be used  */
+    unsigned char *input_key           /* master key/salt in hex  */
+    );
+
+int rtp_sender_init_srtp(rtp_sender_t sender, const srtp_policy_t *policy);
+
+int rtp_sender_deinit_srtp(rtp_sender_t sender);
+
+int rtp_receiver_init_srtp(rtp_receiver_t sender, const srtp_policy_t *policy);
+
+int rtp_receiver_deinit_srtp(rtp_receiver_t sender);
+
+rtp_sender_t rtp_sender_alloc(void);
+
+void rtp_sender_dealloc(rtp_sender_t rtp_ctx);
+
+rtp_receiver_t rtp_receiver_alloc(void);
+
+void rtp_receiver_dealloc(rtp_receiver_t rtp_ctx);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* SRTP_RTP_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/rtp_decoder.c b/trunk/3rdparty/libsrtp-2-fit/test/rtp_decoder.c
new file mode 100644
index 000000000..8c89a2c10
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/rtp_decoder.c
@@ -0,0 +1,785 @@
+/*
+ * rtp_decoder.c
+ *
+ * decoder structures and functions for SRTP pcap decoder
+ *
+ * Example:
+ * $ wget --no-check-certificate \
+ *     https://raw.githubusercontent.com/gteissier/srtp-decrypt/master/marseillaise-srtp.pcap
+ * $ ./test/rtp_decoder -a -t 10 -e 128 -b \
+ *     aSBrbm93IGFsbCB5b3VyIGxpdHRsZSBzZWNyZXRz \
+ *         < ~/marseillaise-srtp.pcap \
+ *         | text2pcap -t "%M:%S." -u 10000,10000 - - \
+ *         > ./marseillaise-rtp.pcap
+ *
+ * There is also a different way of setting up key size and tag size
+ * based upon RFC 4568 crypto suite specification, i.e.:
+ *
+ * $ ./test/rtp_decoder -s AES_CM_128_HMAC_SHA1_80 -b \
+ *     aSBrbm93IGFsbCB5b3VyIGxpdHRsZSBzZWNyZXRz ...
+ *
+ * Audio can be extracted using extractaudio utility from the RTPproxy
+ * package:
+ *
+ * $ extractaudio -A ./marseillaise-rtp.pcap ./marseillaise-out.wav
+ *
+ * Bernardo Torres <bernardo@torresautomacao.com.br>
+ *
+ * Some structure and code from https://github.com/gteissier/srtp-decrypt
+ */
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+#include "getopt_s.h" /* for local getopt()  */
+#include <assert.h>   /* for assert()  */
+
+#include <pcap.h>
+#include "rtp_decoder.h"
+#include "util.h"
+
+#ifndef timersub
+#define timersub(a, b, result)                                                 \
+    do {                                                                       \
+        (result)->tv_sec = (a)->tv_sec - (b)->tv_sec;                          \
+        (result)->tv_usec = (a)->tv_usec - (b)->tv_usec;                       \
+        if ((result)->tv_usec < 0) {                                           \
+            --(result)->tv_sec;                                                \
+            (result)->tv_usec += 1000000;                                      \
+        }                                                                      \
+    } while (0)
+#endif
+
+#define MAX_KEY_LEN 96
+#define MAX_FILTER 256
+#define MAX_FILE 255
+
+struct srtp_crypto_suite {
+    const char *can_name;
+    int gcm_on;
+    int key_size;
+    int tag_size;
+};
+
+static struct srtp_crypto_suite srtp_crypto_suites[] = {
+#if 0
+  {.can_name = "F8_128_HMAC_SHA1_32", .gcm_on = 0, .key_size = 128, .tag_size = 4},
+#endif
+    {.can_name = "AES_CM_128_HMAC_SHA1_32",
+     .gcm_on = 0,
+     .key_size = 128,
+     .tag_size = 4 },
+    {.can_name = "AES_CM_128_HMAC_SHA1_80",
+     .gcm_on = 0,
+     .key_size = 128,
+     .tag_size = 10 },
+    {.can_name = "AES_192_CM_HMAC_SHA1_32",
+     .gcm_on = 0,
+     .key_size = 192,
+     .tag_size = 4 },
+    {.can_name = "AES_192_CM_HMAC_SHA1_80",
+     .gcm_on = 0,
+     .key_size = 192,
+     .tag_size = 10 },
+    {.can_name = "AES_256_CM_HMAC_SHA1_32",
+     .gcm_on = 0,
+     .key_size = 256,
+     .tag_size = 4 },
+    {.can_name = "AES_256_CM_HMAC_SHA1_80",
+     .gcm_on = 0,
+     .key_size = 256,
+     .tag_size = 10 },
+    {.can_name = "AEAD_AES_128_GCM",
+     .gcm_on = 1,
+     .key_size = 128,
+     .tag_size = 16 },
+    {.can_name = "AEAD_AES_256_GCM",
+     .gcm_on = 1,
+     .key_size = 256,
+     .tag_size = 16 },
+    {.can_name = NULL }
+};
+
+void rtp_decoder_srtp_log_handler(srtp_log_level_t level,
+                                  const char *msg,
+                                  void *data)
+{
+    char level_char = '?';
+    switch (level) {
+    case srtp_log_level_error:
+        level_char = 'e';
+        break;
+    case srtp_log_level_warning:
+        level_char = 'w';
+        break;
+    case srtp_log_level_info:
+        level_char = 'i';
+        break;
+    case srtp_log_level_debug:
+        level_char = 'd';
+        break;
+    }
+    fprintf(stderr, "SRTP-LOG [%c]: %s\n", level_char, msg);
+}
+
+int main(int argc, char *argv[])
+{
+    char errbuf[PCAP_ERRBUF_SIZE];
+    bpf_u_int32 pcap_net = 0;
+    pcap_t *pcap_handle;
+#if BEW
+    struct sockaddr_in local;
+#endif
+    srtp_sec_serv_t sec_servs = sec_serv_none;
+    int c;
+    struct srtp_crypto_suite scs, *i_scsp;
+    scs.key_size = 128;
+    scs.tag_size = 0;
+    int gcm_on = 0;
+    char *input_key = NULL;
+    int b64_input = 0;
+    char key[MAX_KEY_LEN];
+    struct bpf_program fp;
+    char filter_exp[MAX_FILTER] = "";
+    char pcap_file[MAX_FILE] = "-";
+    int rtp_packet_offset = DEFAULT_RTP_OFFSET;
+    rtp_decoder_t dec;
+    srtp_policy_t policy = { { 0 } };
+    rtp_decoder_mode_t mode = mode_rtp;
+    srtp_err_status_t status;
+    int len;
+    int expected_len;
+    int do_list_mods = 0;
+
+    fprintf(stderr, "Using %s [0x%x]\n", srtp_get_version_string(),
+            srtp_get_version());
+
+    /* initialize srtp library */
+    status = srtp_init();
+    if (status) {
+        fprintf(stderr,
+                "error: srtp initialization failed with error code %d\n",
+                status);
+        exit(1);
+    }
+
+    status = srtp_install_log_handler(rtp_decoder_srtp_log_handler, NULL);
+    if (status) {
+        fprintf(stderr, "error: install log handler failed\n");
+        exit(1);
+    }
+
+    /* check args */
+    while (1) {
+        c = getopt_s(argc, argv, "b:k:gt:ae:ld:f:s:m:p:o:");
+        if (c == -1) {
+            break;
+        }
+        switch (c) {
+        case 'b':
+            b64_input = 1;
+        /* fall thru */
+        case 'k':
+            input_key = optarg_s;
+            break;
+        case 'e':
+            scs.key_size = atoi(optarg_s);
+            if (scs.key_size != 128 && scs.key_size != 192 &&
+                scs.key_size != 256) {
+                fprintf(
+                    stderr,
+                    "error: encryption key size must be 128, 192 or 256 (%d)\n",
+                    scs.key_size);
+                exit(1);
+            }
+            input_key = malloc(scs.key_size);
+            sec_servs |= sec_serv_conf;
+            break;
+        case 't':
+            scs.tag_size = atoi(optarg_s);
+            break;
+        case 'a':
+            sec_servs |= sec_serv_auth;
+            break;
+        case 'g':
+            gcm_on = 1;
+            sec_servs |= sec_serv_auth;
+            break;
+        case 'd':
+            status = srtp_set_debug_module(optarg_s, 1);
+            if (status) {
+                fprintf(stderr, "error: set debug module (%s) failed\n",
+                        optarg_s);
+                exit(1);
+            }
+            break;
+        case 'f':
+            if (strlen(optarg_s) > MAX_FILTER) {
+                fprintf(stderr, "error: filter bigger than %d characters\n",
+                        MAX_FILTER);
+                exit(1);
+            }
+            fprintf(stderr, "Setting filter as %s\n", optarg_s);
+            strcpy(filter_exp, optarg_s);
+            break;
+        case 'l':
+            do_list_mods = 1;
+            break;
+        case 's':
+            for (i_scsp = &srtp_crypto_suites[0]; i_scsp->can_name != NULL;
+                 i_scsp++) {
+                if (strcasecmp(i_scsp->can_name, optarg_s) == 0) {
+                    break;
+                }
+            }
+            if (i_scsp->can_name == NULL) {
+                fprintf(stderr, "Unknown/unsupported crypto suite name %s\n",
+                        optarg_s);
+                exit(1);
+            }
+            scs = *i_scsp;
+            input_key = malloc(scs.key_size);
+            sec_servs |= sec_serv_conf | sec_serv_auth;
+            gcm_on = scs.gcm_on;
+            break;
+        case 'm':
+            if (strcasecmp("rtp", optarg_s) == 0) {
+                mode = mode_rtp;
+            } else if (strcasecmp("rtcp", optarg_s) == 0) {
+                mode = mode_rtcp;
+            } else if (strcasecmp("rtcp-mux", optarg_s) == 0) {
+                mode = mode_rtcp_mux;
+            } else {
+                fprintf(stderr, "Unknown/unsupported mode %s\n", optarg_s);
+                exit(1);
+            }
+            break;
+        case 'p':
+            if (strlen(optarg_s) > MAX_FILE) {
+                fprintf(stderr,
+                        "error: pcap file path bigger than %d characters\n",
+                        MAX_FILE);
+                exit(1);
+            }
+            strcpy(pcap_file, optarg_s);
+            break;
+        case 'o':
+            rtp_packet_offset = atoi(optarg_s);
+            break;
+        default:
+            usage(argv[0]);
+        }
+    }
+
+    if (scs.tag_size == 0) {
+        if (gcm_on) {
+            scs.tag_size = 16;
+        } else {
+            scs.tag_size = 10;
+        }
+    }
+
+    if (gcm_on && scs.tag_size != 8 && scs.tag_size != 16) {
+        fprintf(stderr, "error: GCM tag size must be 8 or 16 (%d)\n",
+                scs.tag_size);
+        exit(1);
+    }
+
+    if (!gcm_on && scs.tag_size != 4 && scs.tag_size != 10) {
+        fprintf(stderr, "error: non GCM tag size must be 4 or 10 (%d)\n",
+                scs.tag_size);
+        exit(1);
+    }
+
+    if (do_list_mods) {
+        status = srtp_list_debug_modules();
+        if (status) {
+            fprintf(stderr, "error: list of debug modules failed\n");
+            exit(1);
+        }
+        return 0;
+    }
+
+    if ((sec_servs && !input_key) || (!sec_servs && input_key)) {
+        /*
+         * a key must be provided if and only if security services have
+         * been requested
+         */
+        if (input_key == NULL) {
+            fprintf(stderr, "key not provided\n");
+        }
+        if (!sec_servs) {
+            fprintf(stderr, "no secservs\n");
+        }
+        fprintf(stderr, "provided\n");
+        usage(argv[0]);
+    }
+
+    /* report security services selected on the command line */
+    fprintf(stderr, "security services: ");
+    if (sec_servs & sec_serv_conf)
+        fprintf(stderr, "confidentiality ");
+    if (sec_servs & sec_serv_auth)
+        fprintf(stderr, "message authentication");
+    if (sec_servs == sec_serv_none)
+        fprintf(stderr, "none");
+    fprintf(stderr, "\n");
+
+    /* set up the srtp policy and master key */
+    if (sec_servs) {
+        /*
+         * create policy structure, using the default mechanisms but
+         * with only the security services requested on the command line,
+         * using the right SSRC value
+         */
+        switch (sec_servs) {
+        case sec_serv_conf_and_auth:
+            if (gcm_on) {
+#ifdef OPENSSL
+                switch (scs.key_size) {
+                case 128:
+                    if (scs.tag_size == 16) {
+                        srtp_crypto_policy_set_aes_gcm_128_16_auth(&policy.rtp);
+                        srtp_crypto_policy_set_aes_gcm_128_16_auth(
+                            &policy.rtcp);
+                    } else {
+                        srtp_crypto_policy_set_aes_gcm_128_8_auth(&policy.rtp);
+                        srtp_crypto_policy_set_aes_gcm_128_8_auth(&policy.rtcp);
+                    }
+                    break;
+                case 256:
+                    if (scs.tag_size == 16) {
+                        srtp_crypto_policy_set_aes_gcm_256_16_auth(&policy.rtp);
+                        srtp_crypto_policy_set_aes_gcm_256_16_auth(
+                            &policy.rtcp);
+                    } else {
+                        srtp_crypto_policy_set_aes_gcm_256_8_auth(&policy.rtp);
+                        srtp_crypto_policy_set_aes_gcm_256_8_auth(&policy.rtcp);
+                    }
+                    break;
+                }
+#else
+                fprintf(stderr, "error: GCM mode only supported when using the "
+                                "OpenSSL crypto engine.\n");
+                return 0;
+#endif
+            } else {
+                switch (scs.key_size) {
+                case 128:
+                    if (scs.tag_size == 4) {
+                        srtp_crypto_policy_set_aes_cm_128_hmac_sha1_32(
+                            &policy.rtp);
+                        srtp_crypto_policy_set_aes_cm_128_hmac_sha1_80(
+                            &policy.rtcp);
+                    } else {
+                        srtp_crypto_policy_set_aes_cm_128_hmac_sha1_80(
+                            &policy.rtp);
+                        srtp_crypto_policy_set_aes_cm_128_hmac_sha1_80(
+                            &policy.rtcp);
+                    }
+                    break;
+                case 192:
+#ifdef OPENSSL
+                    if (scs.tag_size == 4) {
+                        srtp_crypto_policy_set_aes_cm_192_hmac_sha1_32(
+                            &policy.rtp);
+                        srtp_crypto_policy_set_aes_cm_192_hmac_sha1_80(
+                            &policy.rtcp);
+                    } else {
+                        srtp_crypto_policy_set_aes_cm_192_hmac_sha1_80(
+                            &policy.rtp);
+                        srtp_crypto_policy_set_aes_cm_192_hmac_sha1_80(
+                            &policy.rtcp);
+                    }
+#else
+                    fprintf(stderr,
+                            "error: AES 192 mode only supported when using the "
+                            "OpenSSL crypto engine.\n");
+                    return 0;
+
+#endif
+                    break;
+                case 256:
+                    if (scs.tag_size == 4) {
+                        srtp_crypto_policy_set_aes_cm_256_hmac_sha1_32(
+                            &policy.rtp);
+                        srtp_crypto_policy_set_aes_cm_256_hmac_sha1_80(
+                            &policy.rtcp);
+                    } else {
+                        srtp_crypto_policy_set_aes_cm_256_hmac_sha1_80(
+                            &policy.rtp);
+                        srtp_crypto_policy_set_aes_cm_256_hmac_sha1_80(
+                            &policy.rtcp);
+                    }
+                    break;
+                }
+            }
+            break;
+        case sec_serv_conf:
+            if (gcm_on) {
+                fprintf(
+                    stderr,
+                    "error: GCM mode must always be used with auth enabled\n");
+                return -1;
+            } else {
+                switch (scs.key_size) {
+                case 128:
+                    srtp_crypto_policy_set_aes_cm_128_null_auth(&policy.rtp);
+                    srtp_crypto_policy_set_aes_cm_128_hmac_sha1_80(
+                        &policy.rtcp);
+                    break;
+                case 192:
+#ifdef OPENSSL
+                    srtp_crypto_policy_set_aes_cm_192_null_auth(&policy.rtp);
+                    srtp_crypto_policy_set_aes_cm_192_hmac_sha1_80(
+                        &policy.rtcp);
+#else
+                    fprintf(stderr,
+                            "error: AES 192 mode only supported when using the "
+                            "OpenSSL crypto engine.\n");
+                    return 0;
+
+#endif
+                    break;
+                case 256:
+                    srtp_crypto_policy_set_aes_cm_256_null_auth(&policy.rtp);
+                    srtp_crypto_policy_set_aes_cm_256_hmac_sha1_80(
+                        &policy.rtcp);
+                    break;
+                }
+            }
+            break;
+        case sec_serv_auth:
+            if (gcm_on) {
+#ifdef OPENSSL
+                switch (scs.key_size) {
+                case 128:
+                    srtp_crypto_policy_set_aes_gcm_128_8_only_auth(&policy.rtp);
+                    srtp_crypto_policy_set_aes_gcm_128_8_only_auth(
+                        &policy.rtcp);
+                    break;
+                case 256:
+                    srtp_crypto_policy_set_aes_gcm_256_8_only_auth(&policy.rtp);
+                    srtp_crypto_policy_set_aes_gcm_256_8_only_auth(
+                        &policy.rtcp);
+                    break;
+                }
+#else
+                printf("error: GCM mode only supported when using the OpenSSL "
+                       "crypto engine.\n");
+                return 0;
+#endif
+            } else {
+                srtp_crypto_policy_set_null_cipher_hmac_sha1_80(&policy.rtp);
+                srtp_crypto_policy_set_rtcp_default(&policy.rtcp);
+            }
+            break;
+        default:
+            fprintf(stderr, "error: unknown security service requested\n");
+            return -1;
+        }
+
+        policy.key = (uint8_t *)key;
+        policy.ekt = NULL;
+        policy.next = NULL;
+        policy.window_size = 128;
+        policy.allow_repeat_tx = 0;
+        policy.rtp.sec_serv = sec_servs;
+        policy.rtcp.sec_serv =
+            sec_servs; // sec_serv_none;  /* we don't do RTCP anyway */
+        fprintf(stderr, "setting tag len %d\n", scs.tag_size);
+        policy.rtp.auth_tag_len = scs.tag_size;
+
+        if (gcm_on && scs.tag_size != 8) {
+            fprintf(stderr, "set tag len %d\n", scs.tag_size);
+            policy.rtp.auth_tag_len = scs.tag_size;
+        }
+
+        /*
+         * read key from hexadecimal or base64 on command line into an octet
+         * string
+         */
+        if (b64_input) {
+            int pad;
+            expected_len = policy.rtp.cipher_key_len * 4 / 3;
+            len = base64_string_to_octet_string(key, &pad, input_key,
+                                                strlen(input_key));
+        } else {
+            expected_len = policy.rtp.cipher_key_len * 2;
+            len = hex_string_to_octet_string(key, input_key, expected_len);
+        }
+        /* check that hex string is the right length */
+        if (len < expected_len) {
+            fprintf(stderr, "error: too few digits in key/salt "
+                            "(should be %d digits, found %d)\n",
+                    expected_len, len);
+            exit(1);
+        }
+        if (strlen(input_key) > policy.rtp.cipher_key_len * 2) {
+            fprintf(stderr, "error: too many digits in key/salt "
+                            "(should be %d hexadecimal digits, found %u)\n",
+                    policy.rtp.cipher_key_len * 2, (unsigned)strlen(input_key));
+            exit(1);
+        }
+
+        int key_octets = (scs.key_size / 8);
+        int salt_octets = policy.rtp.cipher_key_len - key_octets;
+        fprintf(stderr, "set master key/salt to %s/",
+                octet_string_hex_string(key, key_octets));
+        fprintf(stderr, "%s\n",
+                octet_string_hex_string(key + key_octets, salt_octets));
+
+    } else {
+        fprintf(stderr,
+                "error: neither encryption or authentication were selected\n");
+        exit(1);
+    }
+
+    pcap_handle = pcap_open_offline(pcap_file, errbuf);
+
+    if (!pcap_handle) {
+        fprintf(stderr, "libpcap failed to open file '%s'\n", errbuf);
+        exit(1);
+    }
+    assert(pcap_handle != NULL);
+    if ((pcap_compile(pcap_handle, &fp, filter_exp, 1, pcap_net)) == -1) {
+        fprintf(stderr, "Couldn't parse filter %s: %s\n", filter_exp,
+                pcap_geterr(pcap_handle));
+        return (2);
+    }
+    if (pcap_setfilter(pcap_handle, &fp) == -1) {
+        fprintf(stderr, "couldn't install filter %s: %s\n", filter_exp,
+                pcap_geterr(pcap_handle));
+        return (2);
+    }
+    dec = rtp_decoder_alloc();
+    if (dec == NULL) {
+        fprintf(stderr, "error: malloc() failed\n");
+        exit(1);
+    }
+    fprintf(stderr, "Starting decoder\n");
+    if (rtp_decoder_init(dec, policy, mode, rtp_packet_offset)) {
+        fprintf(stderr, "error: init failed\n");
+        exit(1);
+    }
+
+    pcap_loop(pcap_handle, 0, rtp_decoder_handle_pkt, (u_char *)dec);
+
+    if (dec->mode == mode_rtp || dec->mode == mode_rtcp_mux) {
+        fprintf(stderr, "RTP packets decoded: %d\n", dec->rtp_cnt);
+    }
+    if (dec->mode == mode_rtcp || dec->mode == mode_rtcp_mux) {
+        fprintf(stderr, "RTCP packets decoded: %d\n", dec->rtcp_cnt);
+    }
+    fprintf(stderr, "Packet decode errors: %d\n", dec->error_cnt);
+
+    rtp_decoder_deinit(dec);
+    rtp_decoder_dealloc(dec);
+
+    status = srtp_shutdown();
+    if (status) {
+        fprintf(stderr, "error: srtp shutdown failed with error code %d\n",
+                status);
+        exit(1);
+    }
+
+    return 0;
+}
+
+void usage(char *string)
+{
+    fprintf(
+        stderr,
+        "usage: %s [-d <debug>]* [[-k][-b] <key>] [-a][-t][-e] [-s "
+        "<srtp-crypto-suite>] [-m <mode>]\n"
+        "or     %s -l\n"
+        "where  -a use message authentication\n"
+        "       -e <key size> use encryption (use 128 or 256 for key size)\n"
+        "       -g Use AES-GCM mode (must be used with -e)\n"
+        "       -t <tag size> Tag size to use (in GCM mode use 8 or 16)\n"
+        "       -k <key>  sets the srtp master key given in hexadecimal\n"
+        "       -b <key>  sets the srtp master key given in base64\n"
+        "       -l list debug modules\n"
+        "       -f \"<pcap filter>\" to filter only the desired SRTP packets\n"
+        "       -d <debug> turn on debugging for module <debug>\n"
+        "       -s \"<srtp-crypto-suite>\" to set both key and tag size based\n"
+        "          on RFC4568-style crypto suite specification\n"
+        "       -m <mode> set the mode to be one of [rtp]|rtcp|rtcp-mux\n"
+        "       -p <pcap file> path to pcap file (defaults to stdin)\n"
+        "       -o byte offset of RTP packet in capture (defaults to 42)\n",
+        string, string);
+    exit(1);
+}
+
+rtp_decoder_t rtp_decoder_alloc(void)
+{
+    return (rtp_decoder_t)malloc(sizeof(rtp_decoder_ctx_t));
+}
+
+void rtp_decoder_dealloc(rtp_decoder_t rtp_ctx)
+{
+    free(rtp_ctx);
+}
+
+int rtp_decoder_deinit(rtp_decoder_t decoder)
+{
+    if (decoder->srtp_ctx) {
+        return srtp_dealloc(decoder->srtp_ctx);
+    }
+    return 0;
+}
+
+int rtp_decoder_init(rtp_decoder_t dcdr,
+                     srtp_policy_t policy,
+                     rtp_decoder_mode_t mode,
+                     int rtp_packet_offset)
+{
+    dcdr->rtp_offset = rtp_packet_offset;
+    dcdr->srtp_ctx = NULL;
+    dcdr->start_tv.tv_usec = 0;
+    dcdr->start_tv.tv_sec = 0;
+    dcdr->frame_nr = -1;
+    dcdr->error_cnt = 0;
+    dcdr->rtp_cnt = 0;
+    dcdr->rtcp_cnt = 0;
+    dcdr->mode = mode;
+    dcdr->policy = policy;
+    dcdr->policy.ssrc.type = ssrc_any_inbound;
+
+    if (srtp_create(&dcdr->srtp_ctx, &dcdr->policy)) {
+        return 1;
+    }
+    return 0;
+}
+
+/*
+ * decodes key as base64
+ */
+
+void hexdump(const void *ptr, size_t size)
+{
+    int i, j;
+    const unsigned char *cptr = ptr;
+
+    for (i = 0; i < size; i += 16) {
+        fprintf(stdout, "%04x ", i);
+        for (j = 0; j < 16 && i + j < size; j++) {
+            fprintf(stdout, "%02x ", cptr[i + j]);
+        }
+        fprintf(stdout, "\n");
+    }
+}
+
+void rtp_decoder_handle_pkt(u_char *arg,
+                            const struct pcap_pkthdr *hdr,
+                            const u_char *bytes)
+{
+    rtp_decoder_t dcdr = (rtp_decoder_t)arg;
+    rtp_msg_t message;
+    int rtp;
+    int pktsize;
+    struct timeval delta;
+    int octets_recvd;
+    srtp_err_status_t status;
+    dcdr->frame_nr++;
+
+    if ((dcdr->start_tv.tv_sec == 0) && (dcdr->start_tv.tv_usec == 0)) {
+        dcdr->start_tv = hdr->ts;
+    }
+
+    if (hdr->caplen < dcdr->rtp_offset) {
+        return;
+    }
+    const void *rtp_packet = bytes + dcdr->rtp_offset;
+
+    memcpy((void *)&message, rtp_packet, hdr->caplen - dcdr->rtp_offset);
+    pktsize = hdr->caplen - dcdr->rtp_offset;
+    octets_recvd = pktsize;
+
+    if (octets_recvd == -1) {
+        return;
+    }
+
+    if (dcdr->mode == mode_rtp) {
+        rtp = 1;
+    } else if (dcdr->mode == mode_rtcp) {
+        rtp = 0;
+    } else {
+        rtp = 1;
+        if (octets_recvd >= 2) {
+            /* rfc5761 */
+            u_char payload_type = *(bytes + dcdr->rtp_offset + 1) & 0x7f;
+            rtp = payload_type < 64 || payload_type > 95;
+        }
+    }
+
+    if (rtp) {
+        /* verify rtp header */
+        if (message.header.version != 2) {
+            return;
+        }
+
+        status = srtp_unprotect(dcdr->srtp_ctx, &message, &octets_recvd);
+        if (status) {
+            dcdr->error_cnt++;
+            return;
+        }
+        dcdr->rtp_cnt++;
+    } else {
+        status = srtp_unprotect_rtcp(dcdr->srtp_ctx, &message, &octets_recvd);
+        if (status) {
+            dcdr->error_cnt++;
+            return;
+        }
+        dcdr->rtcp_cnt++;
+    }
+    timersub(&hdr->ts, &dcdr->start_tv, &delta);
+    fprintf(stdout, "%02ld:%02ld.%06ld\n", delta.tv_sec / 60, delta.tv_sec % 60,
+            (long)delta.tv_usec);
+    hexdump(&message, octets_recvd);
+}
+
+void rtp_print_error(srtp_err_status_t status, char *message)
+{
+    // clang-format off
+    fprintf(stderr,
+            "error: %s %d%s\n", message, status,
+            status == srtp_err_status_replay_fail ? " (replay check failed)" :
+            status == srtp_err_status_bad_param ? " (bad param)" :
+            status == srtp_err_status_no_ctx ? " (no context)" :
+            status == srtp_err_status_cipher_fail ? " (cipher failed)" :
+            status == srtp_err_status_key_expired ? " (key expired)" :
+            status == srtp_err_status_auth_fail ? " (auth check failed)" : "");
+    // clang-format on
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/rtp_decoder.h b/trunk/3rdparty/libsrtp-2-fit/test/rtp_decoder.h
new file mode 100644
index 000000000..27e8880f2
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/rtp_decoder.h
@@ -0,0 +1,122 @@
+/*
+ * rtp_decoder.h
+ *
+ * decoder structures and functions for SRTP pcap decoder
+ *
+ * Bernardo Torres <bernardo@torresautomacao.com.br>
+ *
+ * Some structure and code from https://github.com/gteissier/srtp-decrypt
+ *
+ */
+/*
+ *
+ * Copyright (c) 2001-2017 Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifndef RTP_DECODER_H
+#define RTP_DECODER_H
+
+#include "srtp_priv.h"
+#include "rtp.h"
+
+#define DEFAULT_RTP_OFFSET 42
+
+typedef enum {
+    mode_rtp = 0,
+    mode_rtcp,
+    mode_rtcp_mux,
+} rtp_decoder_mode_t;
+
+typedef struct rtp_decoder_ctx_t {
+    srtp_policy_t policy;
+    srtp_ctx_t *srtp_ctx;
+    rtp_decoder_mode_t mode;
+    int rtp_offset;
+    struct timeval start_tv;
+    int frame_nr;
+    int error_cnt;
+    int rtp_cnt;
+    int rtcp_cnt;
+} rtp_decoder_ctx_t;
+
+typedef struct rtp_decoder_ctx_t *rtp_decoder_t;
+
+/*
+ * error to string
+ */
+void rtp_print_error(srtp_err_status_t status, char *message);
+
+/*
+ * prints the output of a random buffer in hexadecimal
+ */
+void hexdump(const void *ptr, size_t size);
+
+/*
+ * the function usage() prints an error message describing how this
+ * program should be called, then calls exit()
+ */
+void usage(char *prog_name);
+
+/*
+ * transforms base64 key into octet
+ */
+char *decode_sdes(char *in, char *out);
+
+/*
+ * pcap handling
+ */
+void rtp_decoder_handle_pkt(u_char *arg,
+                            const struct pcap_pkthdr *hdr,
+                            const u_char *bytes);
+
+rtp_decoder_t rtp_decoder_alloc(void);
+
+void rtp_decoder_dealloc(rtp_decoder_t rtp_ctx);
+
+int rtp_decoder_init(rtp_decoder_t dcdr,
+                     srtp_policy_t policy,
+                     rtp_decoder_mode_t mode,
+                     int rtp_packet_offset);
+
+int rtp_decoder_deinit(rtp_decoder_t decoder);
+
+void rtp_decoder_srtp_log_handler(srtp_log_level_t level,
+                                  const char *msg,
+                                  void *data);
+
+void rtp_decoder_srtp_log_handler(srtp_log_level_t level,
+                                  const char *msg,
+                                  void *data);
+
+#endif /* RTP_DECODER_H */
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/rtpw.c b/trunk/3rdparty/libsrtp-2-fit/test/rtpw.c
new file mode 100644
index 000000000..901816e46
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/rtpw.c
@@ -0,0 +1,701 @@
+/*
+ * rtpw.c
+ *
+ * rtp word sender/receiver
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ *
+ * This app is a simple RTP application intended only for testing
+ * libsrtp.  It reads one word at a time from words.txt (or
+ * whatever file is specified as DICT_FILE or with -w), and sends one word out
+ * each USEC_RATE microseconds.  Secure RTP protections can be
+ * applied.  See the usage() function for more details.
+ *
+ */
+
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include "getopt_s.h" /* for local getopt()  */
+
+#include <stdio.h>  /* for printf, fprintf */
+#include <stdlib.h> /* for atoi()          */
+#include <errno.h>
+#include <signal.h> /* for signal()        */
+
+#include <string.h> /* for strncpy()       */
+#include <time.h>   /* for usleep()        */
+
+#ifdef HAVE_UNISTD_H
+#include <unistd.h> /* for close()         */
+#elif defined(_MSC_VER)
+#include <io.h> /* for _close()        */
+#define close _close
+#endif
+#ifdef HAVE_SYS_SOCKET_H
+#include <sys/socket.h>
+#endif
+#ifdef HAVE_NETINET_IN_H
+#include <netinet/in.h>
+#elif defined HAVE_WINSOCK2_H
+#include <winsock2.h>
+#include <ws2tcpip.h>
+#define RTPW_USE_WINSOCK2 1
+#endif
+#ifdef HAVE_ARPA_INET_H
+#include <arpa/inet.h>
+#endif
+
+#include "srtp.h"
+#include "rtp.h"
+#include "util.h"
+
+#define DICT_FILE "words.txt"
+#define USEC_RATE (5e5)
+#define MAX_WORD_LEN 128
+#define ADDR_IS_MULTICAST(a) IN_MULTICAST(htonl(a))
+#define MAX_KEY_LEN 96
+
+#ifndef HAVE_USLEEP
+#ifdef HAVE_WINDOWS_H
+#define usleep(us) Sleep((us) / 1000)
+#else
+#define usleep(us) sleep((us) / 1000000)
+#endif
+#endif
+
+/*
+ * the function usage() prints an error message describing how this
+ * program should be called, then calls exit()
+ */
+
+void usage(char *prog_name);
+
+/*
+ * leave_group(...) de-registers from a multicast group
+ */
+
+void leave_group(int sock, struct ip_mreq mreq, char *name);
+
+/*
+ * setup_signal_handler() sets up a signal handler to trigger
+ * cleanups after an interrupt
+ */
+int setup_signal_handler(char *name);
+
+/*
+ * handle_signal(...) handles interrupt signal to trigger cleanups
+ */
+
+volatile int interrupted = 0;
+
+/*
+ * program_type distinguishes the [s]rtp sender and receiver cases
+ */
+
+typedef enum { sender, receiver, unknown } program_type;
+
+int main(int argc, char *argv[])
+{
+    char *dictfile = DICT_FILE;
+    FILE *dict;
+    char word[MAX_WORD_LEN];
+    int sock, ret;
+    struct in_addr rcvr_addr;
+    struct sockaddr_in name;
+    struct ip_mreq mreq;
+#if BEW
+    struct sockaddr_in local;
+#endif
+    program_type prog_type = unknown;
+    srtp_sec_serv_t sec_servs = sec_serv_none;
+    unsigned char ttl = 5;
+    int c;
+    int key_size = 128;
+    int tag_size = 8;
+    int gcm_on = 0;
+    char *input_key = NULL;
+    int b64_input = 0;
+    char *address = NULL;
+    char key[MAX_KEY_LEN];
+    unsigned short port = 0;
+    rtp_sender_t snd;
+    srtp_policy_t policy;
+    srtp_err_status_t status;
+    int len;
+    int expected_len;
+    int do_list_mods = 0;
+    uint32_t ssrc = 0xdeadbeef; /* ssrc value hardcoded for now */
+#ifdef RTPW_USE_WINSOCK2
+    WORD wVersionRequested = MAKEWORD(2, 0);
+    WSADATA wsaData;
+
+    ret = WSAStartup(wVersionRequested, &wsaData);
+    if (ret != 0) {
+        fprintf(stderr, "error: WSAStartup() failed: %d\n", ret);
+        exit(1);
+    }
+#endif
+
+    memset(&policy, 0x0, sizeof(srtp_policy_t));
+
+    printf("Using %s [0x%x]\n", srtp_get_version_string(), srtp_get_version());
+
+    if (setup_signal_handler(argv[0]) != 0) {
+        exit(1);
+    }
+
+    /* initialize srtp library */
+    status = srtp_init();
+    if (status) {
+        printf("error: srtp initialization failed with error code %d\n",
+               status);
+        exit(1);
+    }
+
+    /* check args */
+    while (1) {
+        c = getopt_s(argc, argv, "b:k:rsgt:ae:ld:w:");
+        if (c == -1) {
+            break;
+        }
+        switch (c) {
+        case 'b':
+            b64_input = 1;
+        /* fall thru */
+        case 'k':
+            input_key = optarg_s;
+            break;
+        case 'e':
+            key_size = atoi(optarg_s);
+            if (key_size != 128 && key_size != 256) {
+                printf("error: encryption key size must be 128 or 256 (%d)\n",
+                       key_size);
+                exit(1);
+            }
+            sec_servs |= sec_serv_conf;
+            break;
+        case 't':
+            tag_size = atoi(optarg_s);
+            if (tag_size != 8 && tag_size != 16) {
+                printf("error: GCM tag size must be 8 or 16 (%d)\n", tag_size);
+                exit(1);
+            }
+            break;
+        case 'a':
+            sec_servs |= sec_serv_auth;
+            break;
+        case 'g':
+            gcm_on = 1;
+            sec_servs |= sec_serv_auth;
+            break;
+        case 'r':
+            prog_type = receiver;
+            break;
+        case 's':
+            prog_type = sender;
+            break;
+        case 'd':
+            status = srtp_set_debug_module(optarg_s, 1);
+            if (status) {
+                printf("error: set debug module (%s) failed\n", optarg_s);
+                exit(1);
+            }
+            break;
+        case 'l':
+            do_list_mods = 1;
+            break;
+        case 'w':
+            dictfile = optarg_s;
+            break;
+        default:
+            usage(argv[0]);
+        }
+    }
+
+    if (prog_type == unknown) {
+        if (do_list_mods) {
+            status = srtp_list_debug_modules();
+            if (status) {
+                printf("error: list of debug modules failed\n");
+                exit(1);
+            }
+            return 0;
+        } else {
+            printf("error: neither sender [-s] nor receiver [-r] specified\n");
+            usage(argv[0]);
+        }
+    }
+
+    if ((sec_servs && !input_key) || (!sec_servs && input_key)) {
+        /*
+         * a key must be provided if and only if security services have
+         * been requested
+         */
+        usage(argv[0]);
+    }
+
+    if (argc != optind_s + 2) {
+        /* wrong number of arguments */
+        usage(argv[0]);
+    }
+
+    /* get address from arg */
+    address = argv[optind_s++];
+
+    /* get port from arg */
+    port = atoi(argv[optind_s++]);
+
+/* set address */
+#ifdef HAVE_INET_ATON
+    if (0 == inet_aton(address, &rcvr_addr)) {
+        fprintf(stderr, "%s: cannot parse IP v4 address %s\n", argv[0],
+                address);
+        exit(1);
+    }
+    if (rcvr_addr.s_addr == INADDR_NONE) {
+        fprintf(stderr, "%s: address error", argv[0]);
+        exit(1);
+    }
+#else
+    rcvr_addr.s_addr = inet_addr(address);
+    if (0xffffffff == rcvr_addr.s_addr) {
+        fprintf(stderr, "%s: cannot parse IP v4 address %s\n", argv[0],
+                address);
+        exit(1);
+    }
+#endif
+
+    /* open socket */
+    sock = socket(PF_INET, SOCK_DGRAM, IPPROTO_UDP);
+    if (sock < 0) {
+        int err;
+#ifdef RTPW_USE_WINSOCK2
+        err = WSAGetLastError();
+#else
+        err = errno;
+#endif
+        fprintf(stderr, "%s: couldn't open socket: %d\n", argv[0], err);
+        exit(1);
+    }
+
+    memset(&name, 0, sizeof(struct sockaddr_in));
+    name.sin_addr = rcvr_addr;
+    name.sin_family = PF_INET;
+    name.sin_port = htons(port);
+
+    if (ADDR_IS_MULTICAST(rcvr_addr.s_addr)) {
+        if (prog_type == sender) {
+            ret = setsockopt(sock, IPPROTO_IP, IP_MULTICAST_TTL, &ttl,
+                             sizeof(ttl));
+            if (ret < 0) {
+                fprintf(stderr, "%s: Failed to set TTL for multicast group",
+                        argv[0]);
+                perror("");
+                exit(1);
+            }
+        }
+
+        mreq.imr_multiaddr.s_addr = rcvr_addr.s_addr;
+        mreq.imr_interface.s_addr = htonl(INADDR_ANY);
+        ret = setsockopt(sock, IPPROTO_IP, IP_ADD_MEMBERSHIP, (void *)&mreq,
+                         sizeof(mreq));
+        if (ret < 0) {
+            fprintf(stderr, "%s: Failed to join multicast group", argv[0]);
+            perror("");
+            exit(1);
+        }
+    }
+
+    /* report security services selected on the command line */
+    printf("security services: ");
+    if (sec_servs & sec_serv_conf)
+        printf("confidentiality ");
+    if (sec_servs & sec_serv_auth)
+        printf("message authentication");
+    if (sec_servs == sec_serv_none)
+        printf("none");
+    printf("\n");
+
+    /* set up the srtp policy and master key */
+    if (sec_servs) {
+        /*
+         * create policy structure, using the default mechanisms but
+         * with only the security services requested on the command line,
+         * using the right SSRC value
+         */
+        switch (sec_servs) {
+        case sec_serv_conf_and_auth:
+            if (gcm_on) {
+#ifdef GCM
+                switch (key_size) {
+                case 128:
+                    srtp_crypto_policy_set_aes_gcm_128_8_auth(&policy.rtp);
+                    srtp_crypto_policy_set_aes_gcm_128_8_auth(&policy.rtcp);
+                    break;
+                case 256:
+                    srtp_crypto_policy_set_aes_gcm_256_8_auth(&policy.rtp);
+                    srtp_crypto_policy_set_aes_gcm_256_8_auth(&policy.rtcp);
+                    break;
+                }
+#else
+                printf("error: GCM mode only supported when using the OpenSSL "
+                       "or NSS crypto engine.\n");
+                return 0;
+#endif
+            } else {
+                switch (key_size) {
+                case 128:
+                    srtp_crypto_policy_set_rtp_default(&policy.rtp);
+                    srtp_crypto_policy_set_rtcp_default(&policy.rtcp);
+                    break;
+                case 256:
+                    srtp_crypto_policy_set_aes_cm_256_hmac_sha1_80(&policy.rtp);
+                    srtp_crypto_policy_set_rtcp_default(&policy.rtcp);
+                    break;
+                }
+            }
+            break;
+        case sec_serv_conf:
+            if (gcm_on) {
+                printf(
+                    "error: GCM mode must always be used with auth enabled\n");
+                return -1;
+            } else {
+                switch (key_size) {
+                case 128:
+                    srtp_crypto_policy_set_aes_cm_128_null_auth(&policy.rtp);
+                    srtp_crypto_policy_set_rtcp_default(&policy.rtcp);
+                    break;
+                case 256:
+                    srtp_crypto_policy_set_aes_cm_256_null_auth(&policy.rtp);
+                    srtp_crypto_policy_set_rtcp_default(&policy.rtcp);
+                    break;
+                }
+            }
+            break;
+        case sec_serv_auth:
+            if (gcm_on) {
+#ifdef GCM
+                switch (key_size) {
+                case 128:
+                    srtp_crypto_policy_set_aes_gcm_128_8_only_auth(&policy.rtp);
+                    srtp_crypto_policy_set_aes_gcm_128_8_only_auth(
+                        &policy.rtcp);
+                    break;
+                case 256:
+                    srtp_crypto_policy_set_aes_gcm_256_8_only_auth(&policy.rtp);
+                    srtp_crypto_policy_set_aes_gcm_256_8_only_auth(
+                        &policy.rtcp);
+                    break;
+                }
+#else
+                printf("error: GCM mode only supported when using the OpenSSL "
+                       "crypto engine.\n");
+                return 0;
+#endif
+            } else {
+                srtp_crypto_policy_set_null_cipher_hmac_sha1_80(&policy.rtp);
+                srtp_crypto_policy_set_rtcp_default(&policy.rtcp);
+            }
+            break;
+        default:
+            printf("error: unknown security service requested\n");
+            return -1;
+        }
+        policy.ssrc.type = ssrc_specific;
+        policy.ssrc.value = ssrc;
+        policy.key = (uint8_t *)key;
+        policy.ekt = NULL;
+        policy.next = NULL;
+        policy.window_size = 128;
+        policy.allow_repeat_tx = 0;
+        policy.rtp.sec_serv = sec_servs;
+        policy.rtcp.sec_serv = sec_serv_none; /* we don't do RTCP anyway */
+
+        if (gcm_on && tag_size != 8) {
+            policy.rtp.auth_tag_len = tag_size;
+        }
+
+        /*
+         * read key from hexadecimal or base64 on command line into an octet
+         * string
+         */
+        if (b64_input) {
+            int pad;
+            expected_len = (policy.rtp.cipher_key_len * 4) / 3;
+            len = base64_string_to_octet_string(key, &pad, input_key,
+                                                expected_len);
+            if (pad != 0) {
+                fprintf(stderr, "error: padding in base64 unexpected\n");
+                exit(1);
+            }
+        } else {
+            expected_len = policy.rtp.cipher_key_len * 2;
+            len = hex_string_to_octet_string(key, input_key, expected_len);
+        }
+        /* check that hex string is the right length */
+        if (len < expected_len) {
+            fprintf(stderr, "error: too few digits in key/salt "
+                            "(should be %d digits, found %d)\n",
+                    expected_len, len);
+            exit(1);
+        }
+        if ((int)strlen(input_key) > policy.rtp.cipher_key_len * 2) {
+            fprintf(stderr, "error: too many digits in key/salt "
+                            "(should be %d hexadecimal digits, found %u)\n",
+                    policy.rtp.cipher_key_len * 2, (unsigned)strlen(input_key));
+            exit(1);
+        }
+
+        printf("set master key/salt to %s/", octet_string_hex_string(key, 16));
+        printf("%s\n", octet_string_hex_string(key + 16, 14));
+
+    } else {
+        /*
+         * we're not providing security services, so set the policy to the
+         * null policy
+         *
+         * Note that this policy does not conform to the SRTP
+         * specification, since RTCP authentication is required.  However,
+         * the effect of this policy is to turn off SRTP, so that this
+         * application is now a vanilla-flavored RTP application.
+         */
+        srtp_crypto_policy_set_null_cipher_hmac_null(&policy.rtp);
+        srtp_crypto_policy_set_null_cipher_hmac_null(&policy.rtcp);
+        policy.key = (uint8_t *)key;
+        policy.ssrc.type = ssrc_specific;
+        policy.ssrc.value = ssrc;
+        policy.window_size = 0;
+        policy.allow_repeat_tx = 0;
+        policy.ekt = NULL;
+        policy.next = NULL;
+    }
+
+    if (prog_type == sender) {
+#if BEW
+        /* bind to local socket (to match crypto policy, if need be) */
+        memset(&local, 0, sizeof(struct sockaddr_in));
+        local.sin_addr.s_addr = htonl(INADDR_ANY);
+        local.sin_port = htons(port);
+        ret = bind(sock, (struct sockaddr *)&local, sizeof(struct sockaddr_in));
+        if (ret < 0) {
+            fprintf(stderr, "%s: bind failed\n", argv[0]);
+            perror("");
+            exit(1);
+        }
+#endif /* BEW */
+
+        /* initialize sender's rtp and srtp contexts */
+        snd = rtp_sender_alloc();
+        if (snd == NULL) {
+            fprintf(stderr, "error: malloc() failed\n");
+            exit(1);
+        }
+        rtp_sender_init(snd, sock, name, ssrc);
+        status = rtp_sender_init_srtp(snd, &policy);
+        if (status) {
+            fprintf(stderr, "error: srtp_create() failed with code %d\n",
+                    status);
+            exit(1);
+        }
+
+        /* open dictionary */
+        dict = fopen(dictfile, "r");
+        if (dict == NULL) {
+            fprintf(stderr, "%s: couldn't open file %s\n", argv[0], dictfile);
+            if (ADDR_IS_MULTICAST(rcvr_addr.s_addr)) {
+                leave_group(sock, mreq, argv[0]);
+            }
+            exit(1);
+        }
+
+        /* read words from dictionary, then send them off */
+        while (!interrupted && fgets(word, MAX_WORD_LEN, dict) != NULL) {
+            len = strlen(word) + 1; /* plus one for null */
+
+            if (len > MAX_WORD_LEN)
+                printf("error: word %s too large to send\n", word);
+            else {
+                rtp_sendto(snd, word, len);
+                printf("sending word: %s", word);
+            }
+            usleep(USEC_RATE);
+        }
+
+        rtp_sender_deinit_srtp(snd);
+        rtp_sender_dealloc(snd);
+
+        fclose(dict);
+    } else { /* prog_type == receiver */
+        rtp_receiver_t rcvr;
+
+        if (bind(sock, (struct sockaddr *)&name, sizeof(name)) < 0) {
+            close(sock);
+            fprintf(stderr, "%s: socket bind error\n", argv[0]);
+            perror(NULL);
+            if (ADDR_IS_MULTICAST(rcvr_addr.s_addr)) {
+                leave_group(sock, mreq, argv[0]);
+            }
+            exit(1);
+        }
+
+        rcvr = rtp_receiver_alloc();
+        if (rcvr == NULL) {
+            fprintf(stderr, "error: malloc() failed\n");
+            exit(1);
+        }
+        rtp_receiver_init(rcvr, sock, name, ssrc);
+        status = rtp_receiver_init_srtp(rcvr, &policy);
+        if (status) {
+            fprintf(stderr, "error: srtp_create() failed with code %d\n",
+                    status);
+            exit(1);
+        }
+
+        /* get next word and loop */
+        while (!interrupted) {
+            len = MAX_WORD_LEN;
+            if (rtp_recvfrom(rcvr, word, &len) > -1)
+                printf("\tword: %s\n", word);
+        }
+
+        rtp_receiver_deinit_srtp(rcvr);
+        rtp_receiver_dealloc(rcvr);
+    }
+
+    if (ADDR_IS_MULTICAST(rcvr_addr.s_addr)) {
+        leave_group(sock, mreq, argv[0]);
+    }
+
+#ifdef RTPW_USE_WINSOCK2
+    ret = closesocket(sock);
+#else
+    ret = close(sock);
+#endif
+    if (ret < 0) {
+        fprintf(stderr, "%s: Failed to close socket", argv[0]);
+        perror("");
+    }
+
+    status = srtp_shutdown();
+    if (status) {
+        printf("error: srtp shutdown failed with error code %d\n", status);
+        exit(1);
+    }
+
+#ifdef RTPW_USE_WINSOCK2
+    WSACleanup();
+#endif
+
+    return 0;
+}
+
+void usage(char *string)
+{
+    printf("usage: %s [-d <debug>]* [-k <key> [-a][-e]] "
+           "[-s | -r] dest_ip dest_port\n"
+           "or     %s -l\n"
+           "where  -a use message authentication\n"
+           "       -e <key size> use encryption (use 128 or 256 for key size)\n"
+           "       -g Use AES-GCM mode (must be used with -e)\n"
+           "       -t <tag size> Tag size to use in GCM mode (use 8 or 16)\n"
+           "       -k <key>  sets the srtp master key given in hexadecimal\n"
+           "       -b <key>  sets the srtp master key given in base64\n"
+           "       -s act as rtp sender\n"
+           "       -r act as rtp receiver\n"
+           "       -l list debug modules\n"
+           "       -d <debug> turn on debugging for module <debug>\n"
+           "       -w <wordsfile> use <wordsfile> for input, rather than %s\n",
+           string, string, DICT_FILE);
+    exit(1);
+}
+
+void leave_group(int sock, struct ip_mreq mreq, char *name)
+{
+    int ret;
+
+    ret = setsockopt(sock, IPPROTO_IP, IP_DROP_MEMBERSHIP, (void *)&mreq,
+                     sizeof(mreq));
+    if (ret < 0) {
+        fprintf(stderr, "%s: Failed to leave multicast group", name);
+        perror("");
+    }
+}
+
+void handle_signal(int signum)
+{
+    interrupted = 1;
+    /* Reset handler explicitly, in case we don't have sigaction() (and signal()
+       has BSD semantics), or we don't have SA_RESETHAND */
+    signal(signum, SIG_DFL);
+}
+
+int setup_signal_handler(char *name)
+{
+#if HAVE_SIGACTION
+    struct sigaction act;
+    memset(&act, 0, sizeof(act));
+
+    act.sa_handler = handle_signal;
+    sigemptyset(&act.sa_mask);
+#if defined(SA_RESETHAND)
+    act.sa_flags = SA_RESETHAND;
+#else
+    act.sa_flags = 0;
+#endif
+    /* Note that we're not setting SA_RESTART; we want recvfrom to return
+     * EINTR when we signal the receiver. */
+
+    if (sigaction(SIGTERM, &act, NULL) != 0) {
+        fprintf(stderr, "%s: error setting up signal handler", name);
+        perror("");
+        return -1;
+    }
+#else
+    if (signal(SIGTERM, handle_signal) == SIG_ERR) {
+        fprintf(stderr, "%s: error setting up signal handler", name);
+        perror("");
+        return -1;
+    }
+#endif
+    return 0;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/rtpw_test.sh b/trunk/3rdparty/libsrtp-2-fit/test/rtpw_test.sh
new file mode 100755
index 000000000..158a39312
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/rtpw_test.sh
@@ -0,0 +1,176 @@
+#!/bin/sh
+# 
+# usage: rtpw_test <rtpw_commands>
+# 
+# tests the rtpw sender and receiver functions
+#
+# Copyright (c) 2001-2017, Cisco Systems, Inc.
+# All rights reserved.
+# 
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions
+# are met:
+# 
+#   Redistributions of source code must retain the above copyright
+#   notice, this list of conditions and the following disclaimer.
+# 
+#   Redistributions in binary form must reproduce the above
+#   copyright notice, this list of conditions and the following
+#   disclaimer in the documentation and/or other materials provided
+#   with the distribution.
+# 
+#   Neither the name of the Cisco Systems, Inc. nor the names of its
+#   contributors may be used to endorse or promote products derived
+#   from this software without specific prior written permission.
+# 
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+# FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+# COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+# INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+# (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+# STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+# OF THE POSSIBILITY OF SUCH DAMAGE.
+#
+
+case $(uname -s) in
+    *CYGWIN*|*MINGW*)
+        EXE=".exe"
+        ;;
+    *Linux*)
+        EXE=""
+        export LD_LIBRARY_PATH=$CRYPTO_LIBDIR
+        ;;
+    *Darwin*)
+        EXE=""
+        export DYLD_LIBRARY_PATH=$CRYPTO_LIBDIR
+        ;;
+esac
+
+RTPW=./rtpw$EXE
+DEST_PORT=9999
+DURATION=3
+
+key=Ky7cUDT2GnI0XKWYbXv9AYmqbcLsqzL9mvdN9t/G
+
+ARGS="-b $key -a -e 128"
+
+# First, we run "killall" to get rid of all existing rtpw processes.
+# This step also enables this script to clean up after itself; if this
+# script is interrupted after the rtpw processes are started but before
+# they are killed, those processes will linger.  Re-running the script
+# will get rid of them.
+
+killall rtpw 2>/dev/null
+
+if test -x $RTPW; then
+
+echo  $0 ": starting rtpw receiver process... "
+
+$RTPW $* $ARGS -r 0.0.0.0 $DEST_PORT  &
+
+receiver_pid=$!
+
+echo $0 ": receiver PID = $receiver_pid"
+
+sleep 1 
+
+# verify that the background job is running
+ps -e | grep -q $receiver_pid
+retval=$?
+echo $retval
+if [ $retval != 0 ]; then
+    echo $0 ": error"
+    exit 254
+fi
+
+echo  $0 ": starting rtpw sender process..."
+
+$RTPW $* $ARGS -s 127.0.0.1 $DEST_PORT  &
+
+sender_pid=$!
+
+echo $0 ": sender PID = $sender_pid"
+
+# verify that the background job is running
+ps -e | grep -q $sender_pid
+retval=$?
+echo $retval
+if [ $retval != 0 ]; then
+    echo $0 ": error"
+    exit 255
+fi
+
+sleep $DURATION
+
+kill $receiver_pid
+kill $sender_pid
+
+wait $receiver_pid 2>/dev/null
+wait $sender_pid 2>/dev/null
+
+
+key=033490ba9e82994fc21013395739038992b2edc5034f61a72345ca598d7bfd0189aa6dc2ecab32fd9af74df6dfc6
+
+ARGS="-k $key -a -e 256"
+
+echo  $0 ": starting rtpw receiver process... "
+
+$RTPW $* $ARGS -r 0.0.0.0 $DEST_PORT  &
+
+receiver_pid=$!
+
+echo $0 ": receiver PID = $receiver_pid"
+
+sleep 1 
+
+# verify that the background job is running
+ps -e | grep -q $receiver_pid
+retval=$?
+echo $retval
+if [ $retval != 0 ]; then
+    echo $0 ": error"
+    exit 254
+fi
+
+echo  $0 ": starting rtpw sender process..."
+
+$RTPW $* $ARGS -s 127.0.0.1 $DEST_PORT  &
+
+sender_pid=$!
+
+echo $0 ": sender PID = $sender_pid"
+
+# verify that the background job is running
+ps -e | grep -q $sender_pid
+retval=$?
+echo $retval
+if [ $retval != 0 ]; then
+    echo $0 ": error"
+    exit 255
+fi
+
+sleep $DURATION
+
+kill $receiver_pid
+kill $sender_pid
+
+wait $receiver_pid 2>/dev/null
+wait $sender_pid 2>/dev/null
+
+echo $0 ": done (test passed)"
+
+else 
+
+echo "error: can't find executable" $RTPW
+exit 1
+
+fi
+
+# EOF
+
+
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/rtpw_test_gcm.sh b/trunk/3rdparty/libsrtp-2-fit/test/rtpw_test_gcm.sh
new file mode 100755
index 000000000..644255e1a
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/rtpw_test_gcm.sh
@@ -0,0 +1,260 @@
+#!/bin/sh
+# 
+# usage: rtpw_test <rtpw_commands>
+# 
+# tests the rtpw sender and receiver functions
+#
+# Copyright (c) 2001-2017, Cisco Systems, Inc.
+# All rights reserved.
+# 
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions
+# are met:
+# 
+#   Redistributions of source code must retain the above copyright
+#   notice, this list of conditions and the following disclaimer.
+# 
+#   Redistributions in binary form must reproduce the above
+#   copyright notice, this list of conditions and the following
+#   disclaimer in the documentation and/or other materials provided
+#   with the distribution.
+# 
+#   Neither the name of the Cisco Systems, Inc. nor the names of its
+#   contributors may be used to endorse or promote products derived
+#   from this software without specific prior written permission.
+# 
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+# FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+# COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+# INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+# (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+# STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+# OF THE POSSIBILITY OF SUCH DAMAGE.
+#
+
+case $(uname -s) in
+    *CYGWIN*|*MINGW*)
+        EXE=".exe"
+        ;;
+    *Linux*)
+        EXE=""
+        export LD_LIBRARY_PATH=$CRYPTO_LIBDIR
+        ;;
+    *Darwin*)
+        EXE=""
+        export DYLD_LIBRARY_PATH=$CRYPTO_LIBDIR
+        ;;
+esac
+
+RTPW=./rtpw$EXE
+DEST_PORT=9999
+DURATION=3
+
+# First, we run "killall" to get rid of all existing rtpw processes.
+# This step also enables this script to clean up after itself; if this
+# script is interrupted after the rtpw processes are started but before
+# they are killed, those processes will linger.  Re-running the script
+# will get rid of them.
+
+killall rtpw 2>/dev/null
+
+if test -x $RTPW; then
+
+GCMARGS128="-k 01234567890123456789012345678901234567890123456789012345 -g -e 128"
+echo  $0 ": starting GCM mode 128-bit rtpw receiver process... "
+
+exec $RTPW $* $GCMARGS128 -r 127.0.0.1 $DEST_PORT &
+
+receiver_pid=$!
+
+echo $0 ": receiver PID = $receiver_pid"
+
+sleep 1 
+
+# verify that the background job is running
+ps -e | grep -q $receiver_pid
+retval=$?
+echo $retval
+if [ $retval != 0 ]; then
+    echo $0 ": error"
+    exit 254
+fi
+
+echo  $0 ": starting GCM 128-bit rtpw sender process..."
+
+exec $RTPW $* $GCMARGS128 -s 127.0.0.1 $DEST_PORT  &
+
+sender_pid=$!
+
+echo $0 ": sender PID = $sender_pid"
+
+# verify that the background job is running
+ps -e | grep -q $sender_pid
+retval=$?
+echo $retval
+if [ $retval != 0 ]; then
+    echo $0 ": error"
+    exit 255
+fi
+
+sleep $DURATION
+
+kill $receiver_pid
+kill $sender_pid
+
+wait $receiver_pid 2>/dev/null
+wait $sender_pid 2>/dev/null
+
+GCMARGS128="-k 01234567890123456789012345678901234567890123456789012345 -g -t 16 -e 128"
+echo  $0 ": starting GCM mode 128-bit (16 byte tag) rtpw receiver process... "
+
+exec $RTPW $* $GCMARGS128 -r 127.0.0.1 $DEST_PORT &
+
+receiver_pid=$!
+
+echo $0 ": receiver PID = $receiver_pid"
+
+sleep 1 
+
+# verify that the background job is running
+ps -e | grep -q $receiver_pid
+retval=$?
+echo $retval
+if [ $retval != 0 ]; then
+    echo $0 ": error"
+    exit 254
+fi
+
+echo  $0 ": starting GCM 128-bit (16 byte tag) rtpw sender process..."
+
+exec $RTPW $* $GCMARGS128 -s 127.0.0.1 $DEST_PORT  &
+
+sender_pid=$!
+
+echo $0 ": sender PID = $sender_pid"
+
+# verify that the background job is running
+ps -e | grep -q $sender_pid
+retval=$?
+echo $retval
+if [ $retval != 0 ]; then
+    echo $0 ": error"
+    exit 255
+fi
+
+sleep $DURATION
+
+kill $receiver_pid
+kill $sender_pid
+
+wait $receiver_pid 2>/dev/null
+wait $sender_pid 2>/dev/null
+
+
+GCMARGS256="-k 0123456789012345678901234567890123456789012345678901234567890123456789012345678901234567 -g -e 256"
+echo  $0 ": starting GCM mode 256-bit rtpw receiver process... "
+
+exec $RTPW $* $GCMARGS256 -r 127.0.0.1 $DEST_PORT &
+
+receiver_pid=$!
+
+echo $0 ": receiver PID = $receiver_pid"
+
+sleep 1 
+
+# verify that the background job is running
+ps -e | grep -q $receiver_pid
+retval=$?
+echo $retval
+if [ $retval != 0 ]; then
+    echo $0 ": error"
+    exit 254
+fi
+
+echo  $0 ": starting GCM 256-bit rtpw sender process..."
+
+exec $RTPW $* $GCMARGS256 -s 127.0.0.1 $DEST_PORT  &
+
+sender_pid=$!
+
+echo $0 ": sender PID = $sender_pid"
+
+# verify that the background job is running
+ps -e | grep -q $sender_pid
+retval=$?
+echo $retval
+if [ $retval != 0 ]; then
+    echo $0 ": error"
+    exit 255
+fi
+
+sleep $DURATION
+
+kill $receiver_pid
+kill $sender_pid
+
+wait $receiver_pid 2>/dev/null
+wait $sender_pid 2>/dev/null
+
+GCMARGS256="-k a123456789012345678901234567890123456789012345678901234567890123456789012345678901234567 -g -t 16 -e 256"
+echo  $0 ": starting GCM mode 256-bit (16 byte tag) rtpw receiver process... "
+
+exec $RTPW $* $GCMARGS256 -r 127.0.0.1 $DEST_PORT &
+
+receiver_pid=$!
+
+echo $0 ": receiver PID = $receiver_pid"
+
+sleep 1 
+
+# verify that the background job is running
+ps -e | grep -q $receiver_pid
+retval=$?
+echo $retval
+if [ $retval != 0 ]; then
+    echo $0 ": error"
+    exit 254
+fi
+
+echo  $0 ": starting GCM 256-bit (16 byte tag) rtpw sender process..."
+
+exec $RTPW $* $GCMARGS256 -s 127.0.0.1 $DEST_PORT  &
+
+sender_pid=$!
+
+echo $0 ": sender PID = $sender_pid"
+
+# verify that the background job is running
+ps -e | grep -q $sender_pid
+retval=$?
+echo $retval
+if [ $retval != 0 ]; then
+    echo $0 ": error"
+    exit 255
+fi
+
+sleep $DURATION
+
+kill $receiver_pid
+kill $sender_pid
+
+wait $receiver_pid 2>/dev/null
+wait $sender_pid 2>/dev/null
+
+echo $0 ": done (test passed)"
+
+else 
+
+echo "error: can't find executable" $RTPW
+exit 1
+
+fi
+
+# EOF
+
+
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/srtp_driver.c b/trunk/3rdparty/libsrtp-2-fit/test/srtp_driver.c
new file mode 100644
index 000000000..133554060
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/srtp_driver.c
@@ -0,0 +1,3837 @@
+/*
+ * srtp_driver.c
+ *
+ * a test driver for libSRTP
+ *
+ * David A. McGrew
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2001-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#include <string.h>   /* for memcpy()          */
+#include <time.h>     /* for clock()           */
+#include <stdlib.h>   /* for malloc(), free()  */
+#include <stdio.h>    /* for print(), fflush() */
+#include "getopt_s.h" /* for local getopt()    */
+
+#include "srtp_priv.h"
+#include "util.h"
+
+#ifdef HAVE_NETINET_IN_H
+#include <netinet/in.h>
+#elif defined HAVE_WINSOCK2_H
+#include <winsock2.h>
+#endif
+
+#define PRINT_REFERENCE_PACKET 1
+
+srtp_err_status_t srtp_validate(void);
+
+#ifdef GCM
+srtp_err_status_t srtp_validate_gcm(void);
+#endif
+
+srtp_err_status_t srtp_validate_encrypted_extensions_headers(void);
+
+#ifdef GCM
+srtp_err_status_t srtp_validate_encrypted_extensions_headers_gcm(void);
+#endif
+
+srtp_err_status_t srtp_validate_aes_256(void);
+
+srtp_err_status_t srtp_create_big_policy(srtp_policy_t **list);
+
+srtp_err_status_t srtp_dealloc_big_policy(srtp_policy_t *list);
+
+srtp_err_status_t srtp_test_empty_payload(void);
+
+#ifdef GCM
+srtp_err_status_t srtp_test_empty_payload_gcm(void);
+#endif
+
+srtp_err_status_t srtp_test_remove_stream(void);
+
+srtp_err_status_t srtp_test_update(void);
+
+srtp_err_status_t srtp_test_protect_trailer_length(void);
+
+srtp_err_status_t srtp_test_protect_rtcp_trailer_length(void);
+
+srtp_err_status_t srtp_test_get_roc(void);
+
+srtp_err_status_t srtp_test_set_receiver_roc(void);
+
+srtp_err_status_t srtp_test_set_sender_roc(void);
+
+double srtp_bits_per_second(int msg_len_octets, const srtp_policy_t *policy);
+
+double srtp_rejections_per_second(int msg_len_octets,
+                                  const srtp_policy_t *policy);
+
+void srtp_do_timing(const srtp_policy_t *policy);
+
+void srtp_do_rejection_timing(const srtp_policy_t *policy);
+
+srtp_err_status_t srtp_test(const srtp_policy_t *policy,
+                            int extension_header,
+                            int mki_index);
+
+srtp_err_status_t srtcp_test(const srtp_policy_t *policy, int mki_index);
+
+srtp_err_status_t srtp_session_print_policy(srtp_t srtp);
+
+srtp_err_status_t srtp_print_policy(const srtp_policy_t *policy);
+
+char *srtp_packet_to_string(srtp_hdr_t *hdr, int packet_len);
+
+double mips_estimate(int num_trials, int *ignore);
+
+#define TEST_MKI_ID_SIZE 4
+
+extern uint8_t test_key[46];
+extern uint8_t test_key_2[46];
+extern uint8_t test_mki_id[TEST_MKI_ID_SIZE];
+extern uint8_t test_mki_id_2[TEST_MKI_ID_SIZE];
+
+// clang-format off
+srtp_master_key_t master_key_1 = {
+    test_key,
+    test_mki_id,
+    TEST_MKI_ID_SIZE
+};
+
+srtp_master_key_t master_key_2 = {
+    test_key_2,
+    test_mki_id_2,
+    TEST_MKI_ID_SIZE
+};
+
+srtp_master_key_t *test_keys[2] = {
+    &master_key_1,
+    &master_key_2
+};
+// clang-format on
+
+void usage(char *prog_name)
+{
+    printf("usage: %s [ -t ][ -c ][ -v ][ -o ][-d <debug_module> ]* [ -l ]\n"
+           "  -t         run timing test\n"
+           "  -r         run rejection timing test\n"
+           "  -c         run codec timing test\n"
+           "  -v         run validation tests\n"
+           "  -o         output logging to stdout\n"
+           "  -d <mod>   turn on debugging module <mod>\n"
+           "  -l         list debugging modules\n",
+           prog_name);
+    exit(1);
+}
+
+void log_handler(srtp_log_level_t level, const char *msg, void *data)
+{
+    char level_char = '?';
+    switch (level) {
+    case srtp_log_level_error:
+        level_char = 'e';
+        break;
+    case srtp_log_level_warning:
+        level_char = 'w';
+        break;
+    case srtp_log_level_info:
+        level_char = 'i';
+        break;
+    case srtp_log_level_debug:
+        level_char = 'd';
+        break;
+    }
+    printf("SRTP-LOG [%c]: %s\n", level_char, msg);
+}
+
+/*
+ * The policy_array is a null-terminated array of policy structs. it
+ * is declared at the end of this file
+ */
+
+extern const srtp_policy_t *policy_array[];
+
+/* the wildcard_policy is declared below; it has a wildcard ssrc */
+
+extern const srtp_policy_t wildcard_policy;
+
+/*
+ * mod_driver debug module - debugging module for this test driver
+ *
+ * we use the crypto_kernel debugging system in this driver, which
+ * makes the interface uniform and increases portability
+ */
+
+srtp_debug_module_t mod_driver = {
+    0,       /* debugging is off by default */
+    "driver" /* printable name for module   */
+};
+
+int main(int argc, char *argv[])
+{
+    int q;
+    unsigned do_timing_test = 0;
+    unsigned do_rejection_test = 0;
+    unsigned do_codec_timing = 0;
+    unsigned do_validation = 0;
+    unsigned do_list_mods = 0;
+    unsigned do_log_stdout = 0;
+    srtp_err_status_t status;
+
+    /*
+     * verify that the compiler has interpreted the header data
+     * structure srtp_hdr_t correctly
+     */
+    if (sizeof(srtp_hdr_t) != 12) {
+        printf("error: srtp_hdr_t has incorrect size"
+               "(size is %ld bytes, expected 12)\n",
+               (long)sizeof(srtp_hdr_t));
+        exit(1);
+    }
+
+    /* initialize srtp library */
+    status = srtp_init();
+    if (status) {
+        printf("error: srtp init failed with error code %d\n", status);
+        exit(1);
+    }
+
+    /*  load srtp_driver debug module */
+    status = srtp_crypto_kernel_load_debug_module(&mod_driver);
+    if (status) {
+        printf("error: load of srtp_driver debug module failed "
+               "with error code %d\n",
+               status);
+        exit(1);
+    }
+
+    /* process input arguments */
+    while (1) {
+        q = getopt_s(argc, argv, "trcvold:");
+        if (q == -1) {
+            break;
+        }
+        switch (q) {
+        case 't':
+            do_timing_test = 1;
+            break;
+        case 'r':
+            do_rejection_test = 1;
+            break;
+        case 'c':
+            do_codec_timing = 1;
+            break;
+        case 'v':
+            do_validation = 1;
+            break;
+        case 'o':
+            do_log_stdout = 1;
+            break;
+        case 'l':
+            do_list_mods = 1;
+            break;
+        case 'd':
+            status = srtp_set_debug_module(optarg_s, 1);
+            if (status) {
+                printf("error: set debug module (%s) failed\n", optarg_s);
+                exit(1);
+            }
+            break;
+        default:
+            usage(argv[0]);
+        }
+    }
+
+    if (!do_validation && !do_timing_test && !do_codec_timing &&
+        !do_list_mods && !do_rejection_test) {
+        usage(argv[0]);
+    }
+
+    if (do_log_stdout) {
+        status = srtp_install_log_handler(log_handler, NULL);
+        if (status) {
+            printf("error: install log handler failed\n");
+            exit(1);
+        }
+    }
+
+    if (do_list_mods) {
+        status = srtp_list_debug_modules();
+        if (status) {
+            printf("error: list of debug modules failed\n");
+            exit(1);
+        }
+    }
+
+    if (do_validation) {
+        const srtp_policy_t **policy = policy_array;
+        srtp_policy_t *big_policy;
+
+        /* loop over policy array, testing srtp and srtcp for each policy */
+        while (*policy != NULL) {
+            printf("testing srtp_protect and srtp_unprotect\n");
+            if (srtp_test(*policy, 0, -1) == srtp_err_status_ok) {
+                printf("passed\n\n");
+            } else {
+                printf("failed\n");
+                exit(1);
+            }
+
+            printf("testing srtp_protect and srtp_unprotect with encrypted "
+                   "extensions headers\n");
+            if (srtp_test(*policy, 1, -1) == srtp_err_status_ok) {
+                printf("passed\n\n");
+            } else {
+                printf("failed\n");
+                exit(1);
+            }
+            printf("testing srtp_protect_rtcp and srtp_unprotect_rtcp\n");
+            if (srtcp_test(*policy, -1) == srtp_err_status_ok) {
+                printf("passed\n\n");
+            } else {
+                printf("failed\n");
+                exit(1);
+            }
+            printf("testing srtp_protect_rtp and srtp_unprotect_rtp with MKI "
+                   "index set to 0\n");
+            if (srtp_test(*policy, 0, 0) == srtp_err_status_ok) {
+                printf("passed\n\n");
+            } else {
+                printf("failed\n");
+                exit(1);
+            }
+            printf("testing srtp_protect_rtp and srtp_unprotect_rtp with MKI "
+                   "index set to 1\n");
+            if (srtp_test(*policy, 0, 1) == srtp_err_status_ok) {
+                printf("passed\n\n");
+            } else {
+                printf("failed\n");
+                exit(1);
+            }
+
+            printf("testing srtp_protect_rtcp and srtp_unprotect_rtcp with MKI "
+                   "index set to 0\n");
+            if (srtcp_test(*policy, 0) == srtp_err_status_ok) {
+                printf("passed\n\n");
+            } else {
+                printf("failed\n");
+                exit(1);
+            }
+            printf("testing srtp_protect_rtcp and srtp_unprotect_rtcp with MKI "
+                   "index set to 1\n");
+            if (srtcp_test(*policy, 1) == srtp_err_status_ok) {
+                printf("passed\n\n");
+            } else {
+                printf("failed\n");
+                exit(1);
+            }
+            policy++;
+        }
+
+        /* create a big policy list and run tests on it */
+        status = srtp_create_big_policy(&big_policy);
+        if (status) {
+            printf("unexpected failure with error code %d\n", status);
+            exit(1);
+        }
+        printf("testing srtp_protect and srtp_unprotect with big policy\n");
+        if (srtp_test(big_policy, 0, -1) == srtp_err_status_ok) {
+            printf("passed\n\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+        printf("testing srtp_protect and srtp_unprotect with big policy and "
+               "encrypted extensions headers\n");
+        if (srtp_test(big_policy, 1, -1) == srtp_err_status_ok) {
+            printf("passed\n\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+        status = srtp_dealloc_big_policy(big_policy);
+        if (status) {
+            printf("unexpected failure with error code %d\n", status);
+            exit(1);
+        }
+
+        /* run test on wildcard policy */
+        printf("testing srtp_protect and srtp_unprotect on "
+               "wildcard ssrc policy\n");
+        if (srtp_test(&wildcard_policy, 0, -1) == srtp_err_status_ok) {
+            printf("passed\n\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+        printf("testing srtp_protect and srtp_unprotect on "
+               "wildcard ssrc policy and encrypted extensions headers\n");
+        if (srtp_test(&wildcard_policy, 1, -1) == srtp_err_status_ok) {
+            printf("passed\n\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+
+        /*
+         * run validation test against the reference packets - note
+         * that this test only covers the default policy
+         */
+        printf("testing srtp_protect and srtp_unprotect against "
+               "reference packet\n");
+        if (srtp_validate() == srtp_err_status_ok) {
+            printf("passed\n\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+
+#ifdef GCM
+        printf("testing srtp_protect and srtp_unprotect against "
+               "reference packet using GCM\n");
+        if (srtp_validate_gcm() == srtp_err_status_ok) {
+            printf("passed\n\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+#endif
+
+        printf("testing srtp_protect and srtp_unprotect against "
+               "reference packet with encrypted extensions headers\n");
+        if (srtp_validate_encrypted_extensions_headers() == srtp_err_status_ok)
+            printf("passed\n\n");
+        else {
+            printf("failed\n");
+            exit(1);
+        }
+
+#ifdef GCM
+        printf("testing srtp_protect and srtp_unprotect against "
+               "reference packet with encrypted extension headers (GCM)\n");
+        if (srtp_validate_encrypted_extensions_headers_gcm() ==
+            srtp_err_status_ok) {
+            printf("passed\n\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+#endif
+
+        /*
+         * run validation test against the reference packets for
+         * AES-256
+         */
+        printf("testing srtp_protect and srtp_unprotect against "
+               "reference packet (AES-256)\n");
+        if (srtp_validate_aes_256() == srtp_err_status_ok) {
+            printf("passed\n\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+
+        /*
+         * test packets with empty payload
+         */
+        printf("testing srtp_protect and srtp_unprotect against "
+               "packet with empty payload\n");
+        if (srtp_test_empty_payload() == srtp_err_status_ok) {
+            printf("passed\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+#ifdef GCM
+        printf("testing srtp_protect and srtp_unprotect against "
+               "packet with empty payload (GCM)\n");
+        if (srtp_test_empty_payload_gcm() == srtp_err_status_ok) {
+            printf("passed\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+#endif
+
+        /*
+         * test the function srtp_remove_stream()
+         */
+        printf("testing srtp_remove_stream()...");
+        if (srtp_test_remove_stream() == srtp_err_status_ok) {
+            printf("passed\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+
+        /*
+         * test the function srtp_update()
+         */
+        printf("testing srtp_update()...");
+        if (srtp_test_update() == srtp_err_status_ok) {
+            printf("passed\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+
+        /*
+         * test the functions srtp_get_protect_trailer_length
+         * and srtp_get_protect_rtcp_trailer_length
+         */
+        printf("testing srtp_get_protect_trailer_length()...");
+        if (srtp_test_protect_trailer_length() == srtp_err_status_ok) {
+            printf("passed\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+
+        printf("testing srtp_get_protect_rtcp_trailer_length()...");
+        if (srtp_test_protect_rtcp_trailer_length() == srtp_err_status_ok) {
+            printf("passed\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+
+        printf("testing srtp_test_get_roc()...");
+        if (srtp_test_get_roc() == srtp_err_status_ok) {
+            printf("passed\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+
+        printf("testing srtp_test_set_receiver_roc()...");
+        if (srtp_test_set_receiver_roc() == srtp_err_status_ok) {
+            printf("passed\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+
+        printf("testing srtp_test_set_sender_roc()...");
+        if (srtp_test_set_sender_roc() == srtp_err_status_ok) {
+            printf("passed\n");
+        } else {
+            printf("failed\n");
+            exit(1);
+        }
+    }
+
+    if (do_timing_test) {
+        const srtp_policy_t **policy = policy_array;
+
+        /* loop over policies, run timing test for each */
+        while (*policy != NULL) {
+            srtp_print_policy(*policy);
+            srtp_do_timing(*policy);
+            policy++;
+        }
+    }
+
+    if (do_rejection_test) {
+        const srtp_policy_t **policy = policy_array;
+
+        /* loop over policies, run rejection timing test for each */
+        while (*policy != NULL) {
+            srtp_print_policy(*policy);
+            srtp_do_rejection_timing(*policy);
+            policy++;
+        }
+    }
+
+    if (do_codec_timing) {
+        srtp_policy_t policy;
+        int ignore;
+        double mips_value = mips_estimate(1000000000, &ignore);
+
+        memset(&policy, 0, sizeof(policy));
+        srtp_crypto_policy_set_rtp_default(&policy.rtp);
+        srtp_crypto_policy_set_rtcp_default(&policy.rtcp);
+        policy.ssrc.type = ssrc_specific;
+        policy.ssrc.value = 0xdecafbad;
+        policy.key = test_key;
+        policy.ekt = NULL;
+        policy.window_size = 128;
+        policy.allow_repeat_tx = 0;
+        policy.next = NULL;
+
+        printf("mips estimate: %e\n", mips_value);
+
+        printf("testing srtp processing time for voice codecs:\n");
+        printf("codec\t\tlength (octets)\t\tsrtp instructions/second\n");
+        printf("G.711\t\t%d\t\t\t%e\n", 80,
+               (double)mips_value * (80 * 8) /
+                   srtp_bits_per_second(80, &policy) / .01);
+        printf("G.711\t\t%d\t\t\t%e\n", 160,
+               (double)mips_value * (160 * 8) /
+                   srtp_bits_per_second(160, &policy) / .02);
+        printf("G.726-32\t%d\t\t\t%e\n", 40,
+               (double)mips_value * (40 * 8) /
+                   srtp_bits_per_second(40, &policy) / .01);
+        printf("G.726-32\t%d\t\t\t%e\n", 80,
+               (double)mips_value * (80 * 8) /
+                   srtp_bits_per_second(80, &policy) / .02);
+        printf("G.729\t\t%d\t\t\t%e\n", 10,
+               (double)mips_value * (10 * 8) /
+                   srtp_bits_per_second(10, &policy) / .01);
+        printf("G.729\t\t%d\t\t\t%e\n", 20,
+               (double)mips_value * (20 * 8) /
+                   srtp_bits_per_second(20, &policy) / .02);
+        printf("Wideband\t%d\t\t\t%e\n", 320,
+               (double)mips_value * (320 * 8) /
+                   srtp_bits_per_second(320, &policy) / .01);
+        printf("Wideband\t%d\t\t\t%e\n", 640,
+               (double)mips_value * (640 * 8) /
+                   srtp_bits_per_second(640, &policy) / .02);
+    }
+
+    status = srtp_shutdown();
+    if (status) {
+        printf("error: srtp shutdown failed with error code %d\n", status);
+        exit(1);
+    }
+
+    return 0;
+}
+
+/*
+ * srtp_create_test_packet(len, ssrc) returns a pointer to a
+ * (malloced) example RTP packet whose data field has the length given
+ * by pkt_octet_len and the SSRC value ssrc.  The total length of the
+ * packet is twelve octets longer, since the header is at the
+ * beginning.  There is room at the end of the packet for a trailer,
+ * and the four octets following the packet are filled with 0xff
+ * values to enable testing for overwrites.
+ *
+ * note that the location of the test packet can (and should) be
+ * deallocated with the free() call once it is no longer needed.
+ */
+
+srtp_hdr_t *srtp_create_test_packet(int pkt_octet_len,
+                                    uint32_t ssrc,
+                                    int *pkt_len)
+{
+    int i;
+    uint8_t *buffer;
+    srtp_hdr_t *hdr;
+    int bytes_in_hdr = 12;
+
+    /* allocate memory for test packet */
+    hdr = (srtp_hdr_t *)malloc(pkt_octet_len + bytes_in_hdr +
+                               SRTP_MAX_TRAILER_LEN + 4);
+    if (!hdr) {
+        return NULL;
+    }
+
+    hdr->version = 2;            /* RTP version two     */
+    hdr->p = 0;                  /* no padding needed   */
+    hdr->x = 0;                  /* no header extension */
+    hdr->cc = 0;                 /* no CSRCs            */
+    hdr->m = 0;                  /* marker bit          */
+    hdr->pt = 0xf;               /* payload type        */
+    hdr->seq = htons(0x1234);    /* sequence number     */
+    hdr->ts = htonl(0xdecafbad); /* timestamp           */
+    hdr->ssrc = htonl(ssrc);     /* synch. source       */
+
+    buffer = (uint8_t *)hdr;
+    buffer += bytes_in_hdr;
+
+    /* set RTP data to 0xab */
+    for (i = 0; i < pkt_octet_len; i++) {
+        *buffer++ = 0xab;
+    }
+
+    /* set post-data value to 0xffff to enable overrun checking */
+    for (i = 0; i < SRTP_MAX_TRAILER_LEN + 4; i++) {
+        *buffer++ = 0xff;
+    }
+
+    *pkt_len = bytes_in_hdr + pkt_octet_len;
+
+    return hdr;
+}
+
+static srtp_hdr_t *srtp_create_test_packet_extended(int pkt_octet_len,
+                                                    uint32_t ssrc,
+                                                    uint16_t seq,
+                                                    uint32_t ts,
+                                                    int *pkt_len)
+{
+    srtp_hdr_t *hdr;
+
+    hdr = srtp_create_test_packet(pkt_octet_len, ssrc, pkt_len);
+    if (hdr == NULL)
+        return hdr;
+
+    hdr->seq = htons(seq);
+    hdr->ts = htonl(ts);
+    return hdr;
+}
+
+srtp_hdr_t *srtp_create_test_packet_ext_hdr(int pkt_octet_len,
+                                            uint32_t ssrc,
+                                            int *pkt_len)
+{
+    int i;
+    uint8_t *buffer;
+    srtp_hdr_t *hdr;
+    int bytes_in_hdr = 12;
+    uint8_t extension_header[12] = { /* one-byte header */
+                                     0xbe, 0xde,
+                                     /* size */
+                                     0x00, 0x02,
+                                     /* id 1, length 1 (i.e. 2 bytes) */
+                                     0x11,
+                                     /* payload */
+                                     0xca, 0xfe,
+                                     /* padding */
+                                     0x00,
+                                     /* id 2, length 0 (i.e. 1 byte) */
+                                     0x20,
+                                     /* payload */
+                                     0xba,
+                                     /* padding */
+                                     0x00, 0x00
+    };
+
+    /* allocate memory for test packet */
+    hdr = (srtp_hdr_t *)malloc(pkt_octet_len + bytes_in_hdr +
+                               sizeof(extension_header) + SRTP_MAX_TRAILER_LEN +
+                               4);
+    if (!hdr)
+        return NULL;
+
+    hdr->version = 2;            /* RTP version two     */
+    hdr->p = 0;                  /* no padding needed   */
+    hdr->x = 1;                  /* no header extension */
+    hdr->cc = 0;                 /* no CSRCs            */
+    hdr->m = 0;                  /* marker bit          */
+    hdr->pt = 0xf;               /* payload type        */
+    hdr->seq = htons(0x1234);    /* sequence number     */
+    hdr->ts = htonl(0xdecafbad); /* timestamp           */
+    hdr->ssrc = htonl(ssrc);     /* synch. source       */
+
+    buffer = (uint8_t *)hdr;
+    buffer += bytes_in_hdr;
+
+    memcpy(buffer, extension_header, sizeof(extension_header));
+    buffer += sizeof(extension_header);
+
+    /* set RTP data to 0xab */
+    for (i = 0; i < pkt_octet_len; i++)
+        *buffer++ = 0xab;
+
+    /* set post-data value to 0xffff to enable overrun checking */
+    for (i = 0; i < SRTP_MAX_TRAILER_LEN + 4; i++)
+        *buffer++ = 0xff;
+
+    *pkt_len = bytes_in_hdr + sizeof(extension_header) + pkt_octet_len;
+
+    return hdr;
+}
+
+void srtp_do_timing(const srtp_policy_t *policy)
+{
+    int len;
+
+    /*
+     * note: the output of this function is formatted so that it
+     * can be used in gnuplot.  '#' indicates a comment, and "\r\n"
+     * terminates a record
+     */
+
+    printf("# testing srtp throughput:\r\n");
+    printf("# mesg length (octets)\tthroughput (megabits per second)\r\n");
+
+    for (len = 16; len <= 2048; len *= 2) {
+        printf("%d\t\t\t%f\r\n", len,
+               srtp_bits_per_second(len, policy) / 1.0E6);
+    }
+
+    /* these extra linefeeds let gnuplot know that a dataset is done */
+    printf("\r\n\r\n");
+}
+
+void srtp_do_rejection_timing(const srtp_policy_t *policy)
+{
+    int len;
+
+    /*
+     * note: the output of this function is formatted so that it
+     * can be used in gnuplot.  '#' indicates a comment, and "\r\n"
+     * terminates a record
+     */
+
+    printf("# testing srtp rejection throughput:\r\n");
+    printf("# mesg length (octets)\trejections per second\r\n");
+
+    for (len = 8; len <= 2048; len *= 2) {
+        printf("%d\t\t\t%e\r\n", len, srtp_rejections_per_second(len, policy));
+    }
+
+    /* these extra linefeeds let gnuplot know that a dataset is done */
+    printf("\r\n\r\n");
+}
+
+#define MAX_MSG_LEN 1024
+
+double srtp_bits_per_second(int msg_len_octets, const srtp_policy_t *policy)
+{
+    srtp_t srtp;
+    srtp_hdr_t *mesg;
+    int i;
+    clock_t timer;
+    int num_trials = 100000;
+    int input_len, len;
+    uint32_t ssrc;
+    srtp_err_status_t status;
+
+    /*
+     * allocate and initialize an srtp session
+     */
+    status = srtp_create(&srtp, policy);
+    if (status) {
+        printf("error: srtp_create() failed with error code %d\n", status);
+        exit(1);
+    }
+
+    /*
+     * if the ssrc is unspecified, use a predetermined one
+     */
+    if (policy->ssrc.type != ssrc_specific) {
+        ssrc = 0xdeadbeef;
+    } else {
+        ssrc = policy->ssrc.value;
+    }
+
+    /*
+     * create a test packet
+     */
+    mesg = srtp_create_test_packet(msg_len_octets, ssrc, &input_len);
+    if (mesg == NULL) {
+        return 0.0; /* indicate failure by returning zero */
+    }
+    timer = clock();
+    for (i = 0; i < num_trials; i++) {
+        len = input_len;
+        /* srtp protect message */
+        status = srtp_protect(srtp, mesg, &len);
+        if (status) {
+            printf("error: srtp_protect() failed with error code %d\n", status);
+            exit(1);
+        }
+
+        /* increment message number */
+        {
+            /* hack sequence to avoid problems with macros for htons/ntohs on
+             * some systems */
+            short new_seq = ntohs(mesg->seq) + 1;
+            mesg->seq = htons(new_seq);
+        }
+    }
+    timer = clock() - timer;
+
+    free(mesg);
+
+    status = srtp_dealloc(srtp);
+    if (status) {
+        printf("error: srtp_dealloc() failed with error code %d\n", status);
+        exit(1);
+    }
+
+    return (double)(msg_len_octets)*8 * num_trials * CLOCKS_PER_SEC / timer;
+}
+
+double srtp_rejections_per_second(int msg_len_octets,
+                                  const srtp_policy_t *policy)
+{
+    srtp_ctx_t *srtp;
+    srtp_hdr_t *mesg;
+    int i;
+    int len;
+    clock_t timer;
+    int num_trials = 1000000;
+    uint32_t ssrc = policy->ssrc.value;
+    srtp_err_status_t status;
+
+    /*
+     * allocate and initialize an srtp session
+     */
+    status = srtp_create(&srtp, policy);
+    if (status) {
+        printf("error: srtp_create() failed with error code %d\n", status);
+        exit(1);
+    }
+
+    mesg = srtp_create_test_packet(msg_len_octets, ssrc, &len);
+    if (mesg == NULL) {
+        return 0.0; /* indicate failure by returning zero */
+    }
+    srtp_protect(srtp, (srtp_hdr_t *)mesg, &len);
+
+    timer = clock();
+    for (i = 0; i < num_trials; i++) {
+        len = msg_len_octets;
+        srtp_unprotect(srtp, (srtp_hdr_t *)mesg, &len);
+    }
+    timer = clock() - timer;
+
+    free(mesg);
+
+    status = srtp_dealloc(srtp);
+    if (status) {
+        printf("error: srtp_dealloc() failed with error code %d\n", status);
+        exit(1);
+    }
+
+    return (double)num_trials * CLOCKS_PER_SEC / timer;
+}
+
+void err_check(srtp_err_status_t s)
+{
+    if (s == srtp_err_status_ok) {
+        return;
+    } else {
+        fprintf(stderr, "error: unexpected srtp failure (code %d)\n", s);
+    }
+    exit(1);
+}
+
+srtp_err_status_t srtp_test_call_protect(srtp_t srtp_sender,
+                                         srtp_hdr_t *hdr,
+                                         int *len,
+                                         int mki_index)
+{
+    if (mki_index == -1) {
+        return srtp_protect(srtp_sender, hdr, len);
+    } else {
+        return srtp_protect_mki(srtp_sender, hdr, len, 1, mki_index);
+    }
+}
+
+srtp_err_status_t srtp_test_call_protect_rtcp(srtp_t srtp_sender,
+                                              srtp_hdr_t *hdr,
+                                              int *len,
+                                              int mki_index)
+{
+    if (mki_index == -1) {
+        return srtp_protect_rtcp(srtp_sender, hdr, len);
+    } else {
+        return srtp_protect_rtcp_mki(srtp_sender, hdr, len, 1, mki_index);
+    }
+}
+
+srtp_err_status_t srtp_test_call_unprotect(srtp_t srtp_sender,
+                                           srtp_hdr_t *hdr,
+                                           int *len,
+                                           int use_mki)
+{
+    if (use_mki == -1) {
+        return srtp_unprotect(srtp_sender, hdr, len);
+    } else {
+        return srtp_unprotect_mki(srtp_sender, hdr, len, use_mki);
+    }
+}
+
+srtp_err_status_t srtp_test_call_unprotect_rtcp(srtp_t srtp_sender,
+                                                srtp_hdr_t *hdr,
+                                                int *len,
+                                                int use_mki)
+{
+    if (use_mki == -1) {
+        return srtp_unprotect_rtcp(srtp_sender, hdr, len);
+    } else {
+        return srtp_unprotect_rtcp_mki(srtp_sender, hdr, len, use_mki);
+    }
+}
+
+srtp_err_status_t srtp_test(const srtp_policy_t *policy,
+                            int extension_header,
+                            int mki_index)
+{
+    int i;
+    srtp_t srtp_sender;
+    srtp_t srtp_rcvr;
+    srtp_err_status_t status = srtp_err_status_ok;
+    srtp_hdr_t *hdr, *hdr2;
+    uint8_t hdr_enc[64];
+    uint8_t *pkt_end;
+    int msg_len_octets, msg_len_enc, msg_len;
+    int len, len2;
+    uint32_t tag_length;
+    uint32_t ssrc;
+    srtp_policy_t *rcvr_policy;
+    srtp_policy_t tmp_policy;
+    int header = 1;
+    int use_mki = 0;
+
+    if (mki_index >= 0)
+        use_mki = 1;
+
+    if (extension_header) {
+        memcpy(&tmp_policy, policy, sizeof(srtp_policy_t));
+        tmp_policy.enc_xtn_hdr = &header;
+        tmp_policy.enc_xtn_hdr_count = 1;
+        err_check(srtp_create(&srtp_sender, &tmp_policy));
+    } else {
+        err_check(srtp_create(&srtp_sender, policy));
+    }
+
+    /* print out policy */
+    err_check(srtp_session_print_policy(srtp_sender));
+
+    /*
+     * initialize data buffer, using the ssrc in the policy unless that
+     * value is a wildcard, in which case we'll just use an arbitrary
+     * one
+     */
+    if (policy->ssrc.type != ssrc_specific) {
+        ssrc = 0xdecafbad;
+    } else {
+        ssrc = policy->ssrc.value;
+    }
+    msg_len_octets = 28;
+    if (extension_header) {
+        hdr = srtp_create_test_packet_ext_hdr(msg_len_octets, ssrc, &len);
+        hdr2 = srtp_create_test_packet_ext_hdr(msg_len_octets, ssrc, &len2);
+    } else {
+        hdr = srtp_create_test_packet(msg_len_octets, ssrc, &len);
+        hdr2 = srtp_create_test_packet(msg_len_octets, ssrc, &len2);
+    }
+
+    /* save original msg len */
+    msg_len = len;
+
+    if (hdr == NULL) {
+        free(hdr2);
+        return srtp_err_status_alloc_fail;
+    }
+    if (hdr2 == NULL) {
+        free(hdr);
+        return srtp_err_status_alloc_fail;
+    }
+
+    debug_print(mod_driver, "before protection:\n%s",
+                srtp_packet_to_string(hdr, len));
+
+#if PRINT_REFERENCE_PACKET
+    debug_print(mod_driver, "reference packet before protection:\n%s",
+                octet_string_hex_string((uint8_t *)hdr, len));
+#endif
+    err_check(srtp_test_call_protect(srtp_sender, hdr, &len, mki_index));
+
+    debug_print(mod_driver, "after protection:\n%s",
+                srtp_packet_to_string(hdr, len));
+#if PRINT_REFERENCE_PACKET
+    debug_print(mod_driver, "after protection:\n%s",
+                octet_string_hex_string((uint8_t *)hdr, len));
+#endif
+
+    /* save protected message and length */
+    memcpy(hdr_enc, hdr, len);
+    msg_len_enc = len;
+
+    /*
+     * check for overrun of the srtp_protect() function
+     *
+     * The packet is followed by a value of 0xfffff; if the value of the
+     * data following the packet is different, then we know that the
+     * protect function is overwriting the end of the packet.
+     */
+    err_check(srtp_get_protect_trailer_length(srtp_sender, use_mki, mki_index,
+                                              &tag_length));
+    pkt_end = (uint8_t *)hdr + msg_len + tag_length;
+    for (i = 0; i < 4; i++) {
+        if (pkt_end[i] != 0xff) {
+            fprintf(stdout, "overwrite in srtp_protect() function "
+                            "(expected %x, found %x in trailing octet %d)\n",
+                    0xff, ((uint8_t *)hdr)[i], i);
+            free(hdr);
+            free(hdr2);
+            return srtp_err_status_algo_fail;
+        }
+    }
+
+    /*
+     * if the policy includes confidentiality, check that ciphertext is
+     * different than plaintext
+     *
+     * Note that this check will give false negatives, with some small
+     * probability, especially if the packets are short.  For that
+     * reason, we skip this check if the plaintext is less than four
+     * octets long.
+     */
+    if ((policy->rtp.sec_serv & sec_serv_conf) && (msg_len_octets >= 4)) {
+        printf("testing that ciphertext is distinct from plaintext...");
+        status = srtp_err_status_algo_fail;
+        for (i = 12; i < msg_len_octets + 12; i++) {
+            if (((uint8_t *)hdr)[i] != ((uint8_t *)hdr2)[i]) {
+                status = srtp_err_status_ok;
+            }
+        }
+        if (status) {
+            printf("failed\n");
+            free(hdr);
+            free(hdr2);
+            return status;
+        }
+        printf("passed\n");
+    }
+
+    /*
+     * if the policy uses a 'wildcard' ssrc, then we need to make a copy
+     * of the policy that changes the direction to inbound
+     *
+     * we always copy the policy into the rcvr_policy, since otherwise
+     * the compiler would fret about the constness of the policy
+     */
+    rcvr_policy = (srtp_policy_t *)malloc(sizeof(srtp_policy_t));
+    if (rcvr_policy == NULL) {
+        free(hdr);
+        free(hdr2);
+        return srtp_err_status_alloc_fail;
+    }
+    if (extension_header) {
+        memcpy(rcvr_policy, &tmp_policy, sizeof(srtp_policy_t));
+        if (tmp_policy.ssrc.type == ssrc_any_outbound) {
+            rcvr_policy->ssrc.type = ssrc_any_inbound;
+        }
+    } else {
+        memcpy(rcvr_policy, policy, sizeof(srtp_policy_t));
+        if (policy->ssrc.type == ssrc_any_outbound) {
+            rcvr_policy->ssrc.type = ssrc_any_inbound;
+        }
+    }
+
+    err_check(srtp_create(&srtp_rcvr, rcvr_policy));
+
+    err_check(srtp_test_call_unprotect(srtp_rcvr, hdr, &len, use_mki));
+
+    debug_print(mod_driver, "after unprotection:\n%s",
+                srtp_packet_to_string(hdr, len));
+
+    /* verify that the unprotected packet matches the origial one */
+    for (i = 0; i < len; i++) {
+        if (((uint8_t *)hdr)[i] != ((uint8_t *)hdr2)[i]) {
+            fprintf(stdout, "mismatch at octet %d\n", i);
+            status = srtp_err_status_algo_fail;
+        }
+    }
+    if (status) {
+        free(hdr);
+        free(hdr2);
+        free(rcvr_policy);
+        return status;
+    }
+
+    /*
+     * if the policy includes authentication, then test for false positives
+     */
+    if (policy->rtp.sec_serv & sec_serv_auth) {
+        char *data = ((char *)hdr) + (extension_header ? 24 : 12);
+
+        printf("testing for false positives in replay check...");
+
+        /* unprotect a second time - should fail with a replay error */
+        status =
+            srtp_test_call_unprotect(srtp_rcvr, hdr, &msg_len_enc, use_mki);
+        if (status != srtp_err_status_replay_fail) {
+            printf("failed with error code %d\n", status);
+            free(hdr);
+            free(hdr2);
+            free(rcvr_policy);
+            return status;
+        } else {
+            printf("passed\n");
+        }
+
+        printf("testing for false positives in auth check...");
+
+        /* increment sequence number in header */
+        hdr->seq++;
+
+        /* apply protection */
+        err_check(srtp_test_call_protect(srtp_sender, hdr, &len, mki_index));
+
+        /* flip bits in packet */
+        data[0] ^= 0xff;
+
+        /* unprotect, and check for authentication failure */
+        status = srtp_test_call_unprotect(srtp_rcvr, hdr, &len, use_mki);
+        if (status != srtp_err_status_auth_fail) {
+            printf("failed\n");
+            free(hdr);
+            free(hdr2);
+            free(rcvr_policy);
+            return status;
+        } else {
+            printf("passed\n");
+        }
+    }
+
+    err_check(srtp_dealloc(srtp_sender));
+    err_check(srtp_dealloc(srtp_rcvr));
+
+    free(hdr);
+    free(hdr2);
+    free(rcvr_policy);
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtcp_test(const srtp_policy_t *policy, int mki_index)
+{
+    int i;
+    srtp_t srtcp_sender;
+    srtp_t srtcp_rcvr;
+    srtp_err_status_t status = srtp_err_status_ok;
+    srtp_hdr_t *hdr, *hdr2;
+    uint8_t hdr_enc[64];
+    uint8_t *pkt_end;
+    int msg_len_octets, msg_len_enc, msg_len;
+    int len, len2;
+    uint32_t tag_length;
+    uint32_t ssrc;
+    srtp_policy_t *rcvr_policy;
+    int use_mki = 0;
+
+    if (mki_index >= 0)
+        use_mki = 1;
+
+    err_check(srtp_create(&srtcp_sender, policy));
+
+    /* print out policy */
+    err_check(srtp_session_print_policy(srtcp_sender));
+
+    /*
+     * initialize data buffer, using the ssrc in the policy unless that
+     * value is a wildcard, in which case we'll just use an arbitrary
+     * one
+     */
+    if (policy->ssrc.type != ssrc_specific) {
+        ssrc = 0xdecafbad;
+    } else {
+        ssrc = policy->ssrc.value;
+    }
+    msg_len_octets = 28;
+    hdr = srtp_create_test_packet(msg_len_octets, ssrc, &len);
+    /* save message len */
+    msg_len = len;
+
+    if (hdr == NULL) {
+        return srtp_err_status_alloc_fail;
+    }
+    hdr2 = srtp_create_test_packet(msg_len_octets, ssrc, &len2);
+    if (hdr2 == NULL) {
+        free(hdr);
+        return srtp_err_status_alloc_fail;
+    }
+
+    debug_print(mod_driver, "before protection:\n%s",
+                srtp_packet_to_string(hdr, len));
+
+#if PRINT_REFERENCE_PACKET
+    debug_print(mod_driver, "reference packet before protection:\n%s",
+                octet_string_hex_string((uint8_t *)hdr, len));
+#endif
+    err_check(srtp_test_call_protect_rtcp(srtcp_sender, hdr, &len, mki_index));
+
+    debug_print(mod_driver, "after protection:\n%s",
+                srtp_packet_to_string(hdr, len));
+#if PRINT_REFERENCE_PACKET
+    debug_print(mod_driver, "after protection:\n%s",
+                octet_string_hex_string((uint8_t *)hdr, len));
+#endif
+
+    /* save protected message and length */
+    memcpy(hdr_enc, hdr, len);
+    msg_len_enc = len;
+
+    /*
+     * check for overrun of the srtp_protect() function
+     *
+     * The packet is followed by a value of 0xfffff; if the value of the
+     * data following the packet is different, then we know that the
+     * protect function is overwriting the end of the packet.
+     */
+    srtp_get_protect_rtcp_trailer_length(srtcp_sender, use_mki, mki_index,
+                                         &tag_length);
+    pkt_end = (uint8_t *)hdr + msg_len + tag_length;
+    for (i = 0; i < 4; i++) {
+        if (pkt_end[i] != 0xff) {
+            fprintf(stdout, "overwrite in srtp_protect_rtcp() function "
+                            "(expected %x, found %x in trailing octet %d)\n",
+                    0xff, ((uint8_t *)hdr)[i], i);
+            free(hdr);
+            free(hdr2);
+            return srtp_err_status_algo_fail;
+        }
+    }
+
+    /*
+     * if the policy includes confidentiality, check that ciphertext is
+     * different than plaintext
+     *
+     * Note that this check will give false negatives, with some small
+     * probability, especially if the packets are short.  For that
+     * reason, we skip this check if the plaintext is less than four
+     * octets long.
+     */
+    if ((policy->rtcp.sec_serv & sec_serv_conf) && (msg_len_octets >= 4)) {
+        printf("testing that ciphertext is distinct from plaintext...");
+        status = srtp_err_status_algo_fail;
+        for (i = 12; i < msg_len_octets + 12; i++) {
+            if (((uint8_t *)hdr)[i] != ((uint8_t *)hdr2)[i]) {
+                status = srtp_err_status_ok;
+            }
+        }
+        if (status) {
+            printf("failed\n");
+            free(hdr);
+            free(hdr2);
+            return status;
+        }
+        printf("passed\n");
+    }
+
+    /*
+     * if the policy uses a 'wildcard' ssrc, then we need to make a copy
+     * of the policy that changes the direction to inbound
+     *
+     * we always copy the policy into the rcvr_policy, since otherwise
+     * the compiler would fret about the constness of the policy
+     */
+    rcvr_policy = (srtp_policy_t *)malloc(sizeof(srtp_policy_t));
+    if (rcvr_policy == NULL) {
+        free(hdr);
+        free(hdr2);
+        return srtp_err_status_alloc_fail;
+    }
+    memcpy(rcvr_policy, policy, sizeof(srtp_policy_t));
+    if (policy->ssrc.type == ssrc_any_outbound) {
+        rcvr_policy->ssrc.type = ssrc_any_inbound;
+    }
+
+    err_check(srtp_create(&srtcp_rcvr, rcvr_policy));
+
+    err_check(srtp_test_call_unprotect_rtcp(srtcp_rcvr, hdr, &len, use_mki));
+
+    debug_print(mod_driver, "after unprotection:\n%s",
+                srtp_packet_to_string(hdr, len));
+
+    /* verify that the unprotected packet matches the origial one */
+    for (i = 0; i < len; i++) {
+        if (((uint8_t *)hdr)[i] != ((uint8_t *)hdr2)[i]) {
+            fprintf(stdout, "mismatch at octet %d\n", i);
+            status = srtp_err_status_algo_fail;
+        }
+    }
+    if (status) {
+        free(hdr);
+        free(hdr2);
+        free(rcvr_policy);
+        return status;
+    }
+
+    /*
+     * if the policy includes authentication, then test for false positives
+     */
+    if (policy->rtp.sec_serv & sec_serv_auth) {
+        char *data = ((char *)hdr) + 12;
+
+        printf("testing for false positives in replay check...");
+
+        /* unprotect a second time - should fail with a replay error */
+        status = srtp_test_call_unprotect_rtcp(srtcp_rcvr, hdr, &msg_len_enc,
+                                               use_mki);
+        if (status != srtp_err_status_replay_fail) {
+            printf("failed with error code %d\n", status);
+            free(hdr);
+            free(hdr2);
+            free(rcvr_policy);
+            return status;
+        } else {
+            printf("passed\n");
+        }
+
+        printf("testing for false positives in auth check...");
+
+        /* increment sequence number in header */
+        hdr->seq++;
+
+        /* apply protection */
+        err_check(
+            srtp_test_call_protect_rtcp(srtcp_sender, hdr, &len, mki_index));
+
+        /* flip bits in packet */
+        data[0] ^= 0xff;
+
+        /* unprotect, and check for authentication failure */
+        status = srtp_test_call_unprotect_rtcp(srtcp_rcvr, hdr, &len, use_mki);
+        if (status != srtp_err_status_auth_fail) {
+            printf("failed\n");
+            free(hdr);
+            free(hdr2);
+            free(rcvr_policy);
+            return status;
+        } else {
+            printf("passed\n");
+        }
+    }
+
+    err_check(srtp_dealloc(srtcp_sender));
+    err_check(srtp_dealloc(srtcp_rcvr));
+
+    free(hdr);
+    free(hdr2);
+    free(rcvr_policy);
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_session_print_policy(srtp_t srtp)
+{
+    char *serv_descr[4] = { "none", "confidentiality", "authentication",
+                            "confidentiality and authentication" };
+    char *direction[3] = { "unknown", "outbound", "inbound" };
+    srtp_stream_t stream;
+    srtp_session_keys_t *session_keys = NULL;
+
+    /* sanity checking */
+    if (srtp == NULL) {
+        return srtp_err_status_fail;
+    }
+
+    /* if there's a template stream, print it out */
+    if (srtp->stream_template != NULL) {
+        stream = srtp->stream_template;
+        session_keys = &stream->session_keys[0];
+        printf("# SSRC:          any %s\r\n"
+               "# rtp cipher:    %s\r\n"
+               "# rtp auth:      %s\r\n"
+               "# rtp services:  %s\r\n"
+               "# rtcp cipher:   %s\r\n"
+               "# rtcp auth:     %s\r\n"
+               "# rtcp services: %s\r\n"
+               "# window size:   %lu\r\n"
+               "# tx rtx allowed:%s\r\n",
+               direction[stream->direction],
+               session_keys->rtp_cipher->type->description,
+               session_keys->rtp_auth->type->description,
+               serv_descr[stream->rtp_services],
+               session_keys->rtcp_cipher->type->description,
+               session_keys->rtcp_auth->type->description,
+               serv_descr[stream->rtcp_services],
+               srtp_rdbx_get_window_size(&stream->rtp_rdbx),
+               stream->allow_repeat_tx ? "true" : "false");
+
+        printf("# Encrypted extension headers: ");
+        if (stream->enc_xtn_hdr && stream->enc_xtn_hdr_count > 0) {
+            int *enc_xtn_hdr = stream->enc_xtn_hdr;
+            int count = stream->enc_xtn_hdr_count;
+            while (count > 0) {
+                printf("%d ", *enc_xtn_hdr);
+                enc_xtn_hdr++;
+                count--;
+            }
+            printf("\n");
+        } else {
+            printf("none\n");
+        }
+    }
+
+    /* loop over streams in session, printing the policy of each */
+    stream = srtp->stream_list;
+    while (stream != NULL) {
+        if (stream->rtp_services > sec_serv_conf_and_auth) {
+            return srtp_err_status_bad_param;
+        }
+        session_keys = &stream->session_keys[0];
+
+        printf("# SSRC:          0x%08x\r\n"
+               "# rtp cipher:    %s\r\n"
+               "# rtp auth:      %s\r\n"
+               "# rtp services:  %s\r\n"
+               "# rtcp cipher:   %s\r\n"
+               "# rtcp auth:     %s\r\n"
+               "# rtcp services: %s\r\n"
+               "# window size:   %lu\r\n"
+               "# tx rtx allowed:%s\r\n",
+               stream->ssrc, session_keys->rtp_cipher->type->description,
+               session_keys->rtp_auth->type->description,
+               serv_descr[stream->rtp_services],
+               session_keys->rtcp_cipher->type->description,
+               session_keys->rtcp_auth->type->description,
+               serv_descr[stream->rtcp_services],
+               srtp_rdbx_get_window_size(&stream->rtp_rdbx),
+               stream->allow_repeat_tx ? "true" : "false");
+
+        printf("# Encrypted extension headers: ");
+        if (stream->enc_xtn_hdr && stream->enc_xtn_hdr_count > 0) {
+            int *enc_xtn_hdr = stream->enc_xtn_hdr;
+            int count = stream->enc_xtn_hdr_count;
+            while (count > 0) {
+                printf("%d ", *enc_xtn_hdr);
+                enc_xtn_hdr++;
+                count--;
+            }
+            printf("\n");
+        } else {
+            printf("none\n");
+        }
+
+        /* advance to next stream in the list */
+        stream = stream->next;
+    }
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_print_policy(const srtp_policy_t *policy)
+{
+    srtp_err_status_t status;
+    srtp_t session;
+
+    status = srtp_create(&session, policy);
+    if (status) {
+        return status;
+    }
+    status = srtp_session_print_policy(session);
+    if (status) {
+        return status;
+    }
+    status = srtp_dealloc(session);
+    if (status) {
+        return status;
+    }
+    return srtp_err_status_ok;
+}
+
+/*
+ * srtp_print_packet(...) is for debugging only
+ * it prints an RTP packet to the stdout
+ *
+ * note that this function is *not* threadsafe
+ */
+
+#include <stdio.h>
+
+#define MTU 2048
+
+char packet_string[MTU];
+
+char *srtp_packet_to_string(srtp_hdr_t *hdr, int pkt_octet_len)
+{
+    int octets_in_rtp_header = 12;
+    uint8_t *data = ((uint8_t *)hdr) + octets_in_rtp_header;
+    int hex_len = pkt_octet_len - octets_in_rtp_header;
+
+    /* sanity checking */
+    if ((hdr == NULL) || (pkt_octet_len > MTU)) {
+        return NULL;
+    }
+
+    /* write packet into string */
+    sprintf(packet_string, "(s)rtp packet: {\n"
+                           "   version:\t%d\n"
+                           "   p:\t\t%d\n"
+                           "   x:\t\t%d\n"
+                           "   cc:\t\t%d\n"
+                           "   m:\t\t%d\n"
+                           "   pt:\t\t%x\n"
+                           "   seq:\t\t%x\n"
+                           "   ts:\t\t%x\n"
+                           "   ssrc:\t%x\n"
+                           "   data:\t%s\n"
+                           "} (%d octets in total)\n",
+            hdr->version, hdr->p, hdr->x, hdr->cc, hdr->m, hdr->pt, hdr->seq,
+            hdr->ts, hdr->ssrc, octet_string_hex_string(data, hex_len),
+            pkt_octet_len);
+
+    return packet_string;
+}
+
+/*
+ * mips_estimate() is a simple function to estimate the number of
+ * instructions per second that the host can perform.  note that this
+ * function can be grossly wrong; you may want to have a manual sanity
+ * check of its output!
+ *
+ * the 'ignore' pointer is there to convince the compiler to not just
+ * optimize away the function
+ */
+
+double mips_estimate(int num_trials, int *ignore)
+{
+    clock_t t;
+    volatile int i, sum;
+
+    sum = 0;
+    t = clock();
+    for (i = 0; i < num_trials; i++) {
+        sum += i;
+    }
+    t = clock() - t;
+    if (t < 1) {
+        t = 1;
+    }
+
+    /*   printf("%d\n", sum); */
+    *ignore = sum;
+
+    return (double)num_trials * CLOCKS_PER_SEC / t;
+}
+
+/*
+ * srtp_validate() verifies the correctness of libsrtp by comparing
+ * some computed packets against some pre-computed reference values.
+ * These packets were made with the default SRTP policy.
+ */
+
+srtp_err_status_t srtp_validate()
+{
+    // clang-format off
+    uint8_t srtp_plaintext_ref[28] = {
+        0x80, 0x0f, 0x12, 0x34, 0xde, 0xca, 0xfb, 0xad,
+        0xca, 0xfe, 0xba, 0xbe, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab
+    };
+    uint8_t srtp_plaintext[38] = {
+        0x80, 0x0f, 0x12, 0x34, 0xde, 0xca, 0xfb, 0xad,
+        0xca, 0xfe, 0xba, 0xbe, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00
+    };
+    uint8_t srtp_ciphertext[38] = {
+        0x80, 0x0f, 0x12, 0x34, 0xde, 0xca, 0xfb, 0xad,
+        0xca, 0xfe, 0xba, 0xbe, 0x4e, 0x55, 0xdc, 0x4c,
+        0xe7, 0x99, 0x78, 0xd8, 0x8c, 0xa4, 0xd2, 0x15,
+        0x94, 0x9d, 0x24, 0x02, 0xb7, 0x8d, 0x6a, 0xcc,
+        0x99, 0xea, 0x17, 0x9b, 0x8d, 0xbb
+    };
+    uint8_t rtcp_plaintext_ref[24] = {
+        0x81, 0xc8, 0x00, 0x0b, 0xca, 0xfe, 0xba, 0xbe,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+    };
+    uint8_t rtcp_plaintext[38] = {
+        0x81, 0xc8, 0x00, 0x0b, 0xca, 0xfe, 0xba, 0xbe,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00
+    };
+    uint8_t srtcp_ciphertext[38] = {
+        0x81, 0xc8, 0x00, 0x0b, 0xca, 0xfe, 0xba, 0xbe,
+        0x71, 0x28, 0x03, 0x5b, 0xe4, 0x87, 0xb9, 0xbd,
+        0xbe, 0xf8, 0x90, 0x41, 0xf9, 0x77, 0xa5, 0xa8,
+        0x80, 0x00, 0x00, 0x01, 0x99, 0x3e, 0x08, 0xcd,
+        0x54, 0xd6, 0xc1, 0x23, 0x07, 0x98
+    };
+    // clang-format on
+
+    srtp_t srtp_snd, srtp_recv;
+    srtp_err_status_t status;
+    int len;
+    srtp_policy_t policy;
+
+    /*
+     * create a session with a single stream using the default srtp
+     * policy and with the SSRC value 0xcafebabe
+     */
+    memset(&policy, 0, sizeof(policy));
+    srtp_crypto_policy_set_rtp_default(&policy.rtp);
+    srtp_crypto_policy_set_rtcp_default(&policy.rtcp);
+    policy.ssrc.type = ssrc_specific;
+    policy.ssrc.value = 0xcafebabe;
+    policy.key = test_key;
+    policy.ekt = NULL;
+    policy.window_size = 128;
+    policy.allow_repeat_tx = 0;
+    policy.next = NULL;
+
+    status = srtp_create(&srtp_snd, &policy);
+    if (status) {
+        return status;
+    }
+
+    /*
+     * protect plaintext, then compare with ciphertext
+     */
+    len = 28;
+    status = srtp_protect(srtp_snd, srtp_plaintext, &len);
+    if (status || (len != 38)) {
+        return srtp_err_status_fail;
+    }
+
+    debug_print(mod_driver, "ciphertext:\n  %s",
+                octet_string_hex_string(srtp_plaintext, len));
+    debug_print(mod_driver, "ciphertext reference:\n  %s",
+                octet_string_hex_string(srtp_ciphertext, len));
+
+    if (srtp_octet_string_is_eq(srtp_plaintext, srtp_ciphertext, len)) {
+        return srtp_err_status_fail;
+    }
+
+    /*
+     * protect plaintext rtcp, then compare with srtcp ciphertext
+     */
+    len = 24;
+    status = srtp_protect_rtcp(srtp_snd, rtcp_plaintext, &len);
+    if (status || (len != 38)) {
+        return srtp_err_status_fail;
+    }
+
+    debug_print(mod_driver, "srtcp ciphertext:\n  %s",
+                octet_string_hex_string(rtcp_plaintext, len));
+    debug_print(mod_driver, "srtcp ciphertext reference:\n  %s",
+                octet_string_hex_string(srtcp_ciphertext, len));
+
+    if (srtp_octet_string_is_eq(rtcp_plaintext, srtcp_ciphertext, len)) {
+        return srtp_err_status_fail;
+    }
+
+    /*
+     * create a receiver session context comparable to the one created
+     * above - we need to do this so that the replay checking doesn't
+     * complain
+     */
+    status = srtp_create(&srtp_recv, &policy);
+    if (status) {
+        return status;
+    }
+
+    /*
+     * unprotect ciphertext, then compare with plaintext
+     */
+    status = srtp_unprotect(srtp_recv, srtp_ciphertext, &len);
+    if (status || (len != 28)) {
+        return status;
+    }
+
+    if (srtp_octet_string_is_eq(srtp_ciphertext, srtp_plaintext_ref, len)) {
+        return srtp_err_status_fail;
+    }
+
+    /*
+     * unprotect srtcp ciphertext, then compare with rtcp plaintext
+     */
+    len = 38;
+    status = srtp_unprotect_rtcp(srtp_recv, srtcp_ciphertext, &len);
+    if (status || (len != 24)) {
+        return status;
+    }
+
+    if (srtp_octet_string_is_eq(srtcp_ciphertext, rtcp_plaintext_ref, len)) {
+        return srtp_err_status_fail;
+    }
+
+    status = srtp_dealloc(srtp_snd);
+    if (status) {
+        return status;
+    }
+
+    status = srtp_dealloc(srtp_recv);
+    if (status) {
+        return status;
+    }
+
+    return srtp_err_status_ok;
+}
+
+#ifdef GCM
+/*
+ * srtp_validate_gcm() verifies the correctness of libsrtp by comparing
+ * an computed packet against the known ciphertext for the plaintext.
+ */
+srtp_err_status_t srtp_validate_gcm()
+{
+    // clang-format off
+    unsigned char test_key_gcm[28] = {
+        0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+        0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
+        0xa0, 0xa1, 0xa2, 0xa3, 0xa4, 0xa5, 0xa6, 0xa7,
+        0xa8, 0xa9, 0xaa, 0xab
+    };
+    uint8_t rtp_plaintext_ref[28] = {
+        0x80, 0x0f, 0x12, 0x34, 0xde, 0xca, 0xfb, 0xad,
+        0xca, 0xfe, 0xba, 0xbe, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab
+    };
+    uint8_t rtp_plaintext[44] = {
+        0x80, 0x0f, 0x12, 0x34, 0xde, 0xca, 0xfb, 0xad,
+        0xca, 0xfe, 0xba, 0xbe, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00
+    };
+    uint8_t srtp_ciphertext[44] = {
+        0x80, 0x0f, 0x12, 0x34, 0xde, 0xca, 0xfb, 0xad,
+        0xca, 0xfe, 0xba, 0xbe, 0xc5, 0x00, 0x2e, 0xde,
+        0x04, 0xcf, 0xdd, 0x2e, 0xb9, 0x11, 0x59, 0xe0,
+        0x88, 0x0a, 0xa0, 0x6e, 0xd2, 0x97, 0x68, 0x26,
+        0xf7, 0x96, 0xb2, 0x01, 0xdf, 0x31, 0x31, 0xa1,
+        0x27, 0xe8, 0xa3, 0x92
+    };
+    uint8_t rtcp_plaintext_ref[24] = {
+        0x81, 0xc8, 0x00, 0x0b, 0xca, 0xfe, 0xba, 0xbe,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+    };
+    uint8_t rtcp_plaintext[44] = {
+        0x81, 0xc8, 0x00, 0x0b, 0xca, 0xfe, 0xba, 0xbe,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00
+    };
+    uint8_t srtcp_ciphertext[44] = {
+        0x81, 0xc8, 0x00, 0x0b, 0xca, 0xfe, 0xba, 0xbe,
+        0xc9, 0x8b, 0x8b, 0x5d, 0xf0, 0x39, 0x2a, 0x55,
+        0x85, 0x2b, 0x6c, 0x21, 0xac, 0x8e, 0x70, 0x25,
+        0xc5, 0x2c, 0x6f, 0xbe, 0xa2, 0xb3, 0xb4, 0x46,
+        0xea, 0x31, 0x12, 0x3b, 0xa8, 0x8c, 0xe6, 0x1e,
+        0x80, 0x00, 0x00, 0x01
+    };
+    // clang-format on
+
+    srtp_t srtp_snd, srtp_recv;
+    srtp_err_status_t status;
+    int len;
+    srtp_policy_t policy;
+
+    /*
+     * create a session with a single stream using the default srtp
+     * policy and with the SSRC value 0xcafebabe
+     */
+    memset(&policy, 0, sizeof(policy));
+    srtp_crypto_policy_set_aes_gcm_128_16_auth(&policy.rtp);
+    srtp_crypto_policy_set_aes_gcm_128_16_auth(&policy.rtcp);
+    policy.ssrc.type = ssrc_specific;
+    policy.ssrc.value = 0xcafebabe;
+    policy.key = test_key_gcm;
+    policy.ekt = NULL;
+    policy.window_size = 128;
+    policy.allow_repeat_tx = 0;
+    policy.next = NULL;
+
+    status = srtp_create(&srtp_snd, &policy);
+    if (status) {
+        return status;
+    }
+
+    /*
+     * protect plaintext rtp, then compare with srtp ciphertext
+     */
+    len = 28;
+    status = srtp_protect(srtp_snd, rtp_plaintext, &len);
+    if (status || (len != 44)) {
+        return srtp_err_status_fail;
+    }
+
+    debug_print(mod_driver, "srtp ciphertext:\n  %s",
+                octet_string_hex_string(rtp_plaintext, len));
+    debug_print(mod_driver, "srtp ciphertext reference:\n  %s",
+                octet_string_hex_string(srtp_ciphertext, len));
+
+    if (srtp_octet_string_is_eq(rtp_plaintext, srtp_ciphertext, len)) {
+        return srtp_err_status_fail;
+    }
+
+    /*
+     * protect plaintext rtcp, then compare with srtcp ciphertext
+     */
+    len = 24;
+    status = srtp_protect_rtcp(srtp_snd, rtcp_plaintext, &len);
+    if (status || (len != 44)) {
+        return srtp_err_status_fail;
+    }
+
+    debug_print(mod_driver, "srtcp ciphertext:\n  %s",
+                octet_string_hex_string(rtcp_plaintext, len));
+    debug_print(mod_driver, "srtcp ciphertext reference:\n  %s",
+                octet_string_hex_string(srtcp_ciphertext, len));
+
+    if (srtp_octet_string_is_eq(rtcp_plaintext, srtcp_ciphertext, len)) {
+        return srtp_err_status_fail;
+    }
+
+    /*
+     * create a receiver session context comparable to the one created
+     * above - we need to do this so that the replay checking doesn't
+     * complain
+     */
+    status = srtp_create(&srtp_recv, &policy);
+    if (status) {
+        return status;
+    }
+
+    /*
+     * unprotect srtp ciphertext, then compare with rtp plaintext
+     */
+    len = 44;
+    status = srtp_unprotect(srtp_recv, srtp_ciphertext, &len);
+    if (status || (len != 28)) {
+        return status;
+    }
+
+    if (srtp_octet_string_is_eq(srtp_ciphertext, rtp_plaintext_ref, len)) {
+        return srtp_err_status_fail;
+    }
+
+    /*
+     * unprotect srtcp ciphertext, then compare with rtcp plaintext
+     */
+    len = 44;
+    status = srtp_unprotect_rtcp(srtp_recv, srtcp_ciphertext, &len);
+    if (status || (len != 24)) {
+        return status;
+    }
+
+    if (srtp_octet_string_is_eq(srtcp_ciphertext, rtcp_plaintext_ref, len)) {
+        return srtp_err_status_fail;
+    }
+
+    status = srtp_dealloc(srtp_snd);
+    if (status) {
+        return status;
+    }
+
+    status = srtp_dealloc(srtp_recv);
+    if (status) {
+        return status;
+    }
+
+    return srtp_err_status_ok;
+}
+#endif
+
+/*
+ * Test vectors taken from RFC 6904, Appendix A
+ */
+srtp_err_status_t srtp_validate_encrypted_extensions_headers()
+{
+    // clang-format off
+    unsigned char test_key_ext_headers[30] = {
+        0xe1, 0xf9, 0x7a, 0x0d, 0x3e, 0x01, 0x8b, 0xe0,
+        0xd6, 0x4f, 0xa3, 0x2c, 0x06, 0xde, 0x41, 0x39,
+        0x0e, 0xc6, 0x75, 0xad, 0x49, 0x8a, 0xfe, 0xeb,
+        0xb6, 0x96, 0x0b, 0x3a, 0xab, 0xe6
+    };
+    uint8_t srtp_plaintext_ref[56] = {
+        0x90, 0x0f, 0x12, 0x34, 0xde, 0xca, 0xfb, 0xad,
+        0xca, 0xfe, 0xba, 0xbe, 0xBE, 0xDE, 0x00, 0x06,
+        0x17, 0x41, 0x42, 0x73, 0xA4, 0x75, 0x26, 0x27,
+        0x48, 0x22, 0x00, 0x00, 0xC8, 0x30, 0x8E, 0x46,
+        0x55, 0x99, 0x63, 0x86, 0xB3, 0x95, 0xFB, 0x00,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab
+    };
+    uint8_t srtp_plaintext[66] = {
+        0x90, 0x0f, 0x12, 0x34, 0xde, 0xca, 0xfb, 0xad,
+        0xca, 0xfe, 0xba, 0xbe, 0xBE, 0xDE, 0x00, 0x06,
+        0x17, 0x41, 0x42, 0x73, 0xA4, 0x75, 0x26, 0x27,
+        0x48, 0x22, 0x00, 0x00, 0xC8, 0x30, 0x8E, 0x46,
+        0x55, 0x99, 0x63, 0x86, 0xB3, 0x95, 0xFB, 0x00,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00
+    };
+    uint8_t srtp_ciphertext[66] = {
+        0x90, 0x0f, 0x12, 0x34, 0xde, 0xca, 0xfb, 0xad,
+        0xca, 0xfe, 0xba, 0xbe, 0xBE, 0xDE, 0x00, 0x06,
+        0x17, 0x58, 0x8A, 0x92, 0x70, 0xF4, 0xE1, 0x5E,
+        0x1C, 0x22, 0x00, 0x00, 0xC8, 0x30, 0x95, 0x46,
+        0xA9, 0x94, 0xF0, 0xBC, 0x54, 0x78, 0x97, 0x00,
+        0x4e, 0x55, 0xdc, 0x4c, 0xe7, 0x99, 0x78, 0xd8,
+        0x8c, 0xa4, 0xd2, 0x15, 0x94, 0x9d, 0x24, 0x02,
+        0x5a, 0x46, 0xb3, 0xca, 0x35, 0xc5, 0x35, 0xa8,
+        0x91, 0xc7
+    };
+    // clang-format on
+
+    srtp_t srtp_snd, srtp_recv;
+    srtp_err_status_t status;
+    int len;
+    srtp_policy_t policy;
+    int headers[3] = { 1, 3, 4 };
+
+    /*
+     * create a session with a single stream using the default srtp
+     * policy and with the SSRC value 0xcafebabe
+     */
+    memset(&policy, 0, sizeof(policy));
+    srtp_crypto_policy_set_rtp_default(&policy.rtp);
+    srtp_crypto_policy_set_rtcp_default(&policy.rtcp);
+    policy.ssrc.type = ssrc_specific;
+    policy.ssrc.value = 0xcafebabe;
+    policy.key = test_key_ext_headers;
+    policy.ekt = NULL;
+    policy.window_size = 128;
+    policy.allow_repeat_tx = 0;
+    policy.enc_xtn_hdr = headers;
+    policy.enc_xtn_hdr_count = sizeof(headers) / sizeof(headers[0]);
+    policy.next = NULL;
+
+    status = srtp_create(&srtp_snd, &policy);
+    if (status)
+        return status;
+
+    /*
+     * protect plaintext, then compare with ciphertext
+     */
+    len = sizeof(srtp_plaintext_ref);
+    status = srtp_protect(srtp_snd, srtp_plaintext, &len);
+    if (status || (len != sizeof(srtp_plaintext)))
+        return srtp_err_status_fail;
+
+    debug_print(mod_driver, "ciphertext:\n  %s",
+                srtp_octet_string_hex_string(srtp_plaintext, len));
+    debug_print(mod_driver, "ciphertext reference:\n  %s",
+                srtp_octet_string_hex_string(srtp_ciphertext, len));
+
+    if (srtp_octet_string_is_eq(srtp_plaintext, srtp_ciphertext, len))
+        return srtp_err_status_fail;
+
+    /*
+     * create a receiver session context comparable to the one created
+     * above - we need to do this so that the replay checking doesn't
+     * complain
+     */
+    status = srtp_create(&srtp_recv, &policy);
+    if (status)
+        return status;
+
+    /*
+     * unprotect ciphertext, then compare with plaintext
+     */
+    status = srtp_unprotect(srtp_recv, srtp_ciphertext, &len);
+    if (status) {
+        return status;
+    } else if (len != sizeof(srtp_plaintext_ref)) {
+        return srtp_err_status_fail;
+    }
+
+    if (srtp_octet_string_is_eq(srtp_ciphertext, srtp_plaintext_ref, len))
+        return srtp_err_status_fail;
+
+    status = srtp_dealloc(srtp_snd);
+    if (status)
+        return status;
+
+    status = srtp_dealloc(srtp_recv);
+    if (status)
+        return status;
+
+    return srtp_err_status_ok;
+}
+
+#ifdef GCM
+
+/*
+ * Headers of test vectors taken from RFC 6904, Appendix A
+ */
+srtp_err_status_t srtp_validate_encrypted_extensions_headers_gcm()
+{
+    // clang-format off
+    unsigned char test_key_ext_headers[30] = {
+        0xe1, 0xf9, 0x7a, 0x0d, 0x3e, 0x01, 0x8b, 0xe0,
+        0xd6, 0x4f, 0xa3, 0x2c, 0x06, 0xde, 0x41, 0x39,
+        0x0e, 0xc6, 0x75, 0xad, 0x49, 0x8a, 0xfe, 0xeb,
+        0xb6, 0x96, 0x0b, 0x3a, 0xab, 0xe6
+    };
+    uint8_t srtp_plaintext_ref[56] = {
+        0x90, 0x0f, 0x12, 0x34, 0xde, 0xca, 0xfb, 0xad,
+        0xca, 0xfe, 0xba, 0xbe, 0xBE, 0xDE, 0x00, 0x06,
+        0x17, 0x41, 0x42, 0x73, 0xA4, 0x75, 0x26, 0x27,
+        0x48, 0x22, 0x00, 0x00, 0xC8, 0x30, 0x8E, 0x46,
+        0x55, 0x99, 0x63, 0x86, 0xB3, 0x95, 0xFB, 0x00,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab
+    };
+    uint8_t srtp_plaintext[64] = {
+        0x90, 0x0f, 0x12, 0x34, 0xde, 0xca, 0xfb, 0xad,
+        0xca, 0xfe, 0xba, 0xbe, 0xBE, 0xDE, 0x00, 0x06,
+        0x17, 0x41, 0x42, 0x73, 0xA4, 0x75, 0x26, 0x27,
+        0x48, 0x22, 0x00, 0x00, 0xC8, 0x30, 0x8E, 0x46,
+        0x55, 0x99, 0x63, 0x86, 0xB3, 0x95, 0xFB, 0x00,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
+    };
+    uint8_t srtp_ciphertext[64] = {
+        0x90, 0x0f, 0x12, 0x34, 0xde, 0xca, 0xfb, 0xad,
+        0xca, 0xfe, 0xba, 0xbe, 0xBE, 0xDE, 0x00, 0x06,
+        0x17, 0x12, 0xe0, 0x20, 0x5b, 0xfa, 0x94, 0x9b,
+        0x1C, 0x22, 0x00, 0x00, 0xC8, 0x30, 0xbb, 0x46,
+        0x73, 0x27, 0x78, 0xd9, 0x92, 0x9a, 0xab, 0x00,
+        0x0e, 0xca, 0x0c, 0xf9, 0x5e, 0xe9, 0x55, 0xb2,
+        0x6c, 0xd3, 0xd2, 0x88, 0xb4, 0x9f, 0x6c, 0xa9,
+        0xf4, 0xb1, 0xb7, 0x59, 0x71, 0x9e, 0xb5, 0xbc
+    };
+    // clang-format on
+
+    srtp_t srtp_snd, srtp_recv;
+    srtp_err_status_t status;
+    int len;
+    srtp_policy_t policy;
+    int headers[3] = { 1, 3, 4 };
+
+    /*
+     * create a session with a single stream using the default srtp
+     * policy and with the SSRC value 0xcafebabe
+     */
+    memset(&policy, 0, sizeof(policy));
+    srtp_crypto_policy_set_aes_gcm_128_8_auth(&policy.rtp);
+    srtp_crypto_policy_set_aes_gcm_128_8_auth(&policy.rtcp);
+    policy.ssrc.type = ssrc_specific;
+    policy.ssrc.value = 0xcafebabe;
+    policy.key = test_key_ext_headers;
+    policy.ekt = NULL;
+    policy.window_size = 128;
+    policy.allow_repeat_tx = 0;
+    policy.enc_xtn_hdr = headers;
+    policy.enc_xtn_hdr_count = sizeof(headers) / sizeof(headers[0]);
+    policy.next = NULL;
+
+    status = srtp_create(&srtp_snd, &policy);
+    if (status)
+        return status;
+
+    /*
+     * protect plaintext, then compare with ciphertext
+     */
+    len = sizeof(srtp_plaintext_ref);
+    status = srtp_protect(srtp_snd, srtp_plaintext, &len);
+    if (status || (len != sizeof(srtp_plaintext)))
+        return srtp_err_status_fail;
+
+    debug_print(mod_driver, "ciphertext:\n  %s",
+                srtp_octet_string_hex_string(srtp_plaintext, len));
+    debug_print(mod_driver, "ciphertext reference:\n  %s",
+                srtp_octet_string_hex_string(srtp_ciphertext, len));
+
+    if (srtp_octet_string_is_eq(srtp_plaintext, srtp_ciphertext, len))
+        return srtp_err_status_fail;
+
+    /*
+     * create a receiver session context comparable to the one created
+     * above - we need to do this so that the replay checking doesn't
+     * complain
+     */
+    status = srtp_create(&srtp_recv, &policy);
+    if (status)
+        return status;
+
+    /*
+     * unprotect ciphertext, then compare with plaintext
+     */
+    status = srtp_unprotect(srtp_recv, srtp_ciphertext, &len);
+    if (status) {
+        return status;
+    } else if (len != sizeof(srtp_plaintext_ref)) {
+        return srtp_err_status_fail;
+    }
+
+    if (srtp_octet_string_is_eq(srtp_ciphertext, srtp_plaintext_ref, len))
+        return srtp_err_status_fail;
+
+    status = srtp_dealloc(srtp_snd);
+    if (status)
+        return status;
+
+    status = srtp_dealloc(srtp_recv);
+    if (status)
+        return status;
+
+    return srtp_err_status_ok;
+}
+#endif
+
+/*
+ * srtp_validate_aes_256() verifies the correctness of libsrtp by comparing
+ * some computed packets against some pre-computed reference values.
+ * These packets were made with the AES-CM-256/HMAC-SHA-1-80 policy.
+ */
+
+srtp_err_status_t srtp_validate_aes_256()
+{
+    // clang-format off
+    unsigned char aes_256_test_key[46] = {
+        0xf0, 0xf0, 0x49, 0x14, 0xb5, 0x13, 0xf2, 0x76,
+        0x3a, 0x1b, 0x1f, 0xa1, 0x30, 0xf1, 0x0e, 0x29,
+        0x98, 0xf6, 0xf6, 0xe4, 0x3e, 0x43, 0x09, 0xd1,
+        0xe6, 0x22, 0xa0, 0xe3, 0x32, 0xb9, 0xf1, 0xb6,
+
+        0x3b, 0x04, 0x80, 0x3d, 0xe5, 0x1e, 0xe7, 0xc9,
+        0x64, 0x23, 0xab, 0x5b, 0x78, 0xd2
+    };
+    uint8_t srtp_plaintext_ref[28] = {
+        0x80, 0x0f, 0x12, 0x34, 0xde, 0xca, 0xfb, 0xad,
+        0xca, 0xfe, 0xba, 0xbe, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab
+    };
+    uint8_t srtp_plaintext[38] = {
+        0x80, 0x0f, 0x12, 0x34, 0xde, 0xca, 0xfb, 0xad,
+        0xca, 0xfe, 0xba, 0xbe, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab, 0xab,
+        0xab, 0xab, 0xab, 0xab, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00
+    };
+    uint8_t srtp_ciphertext[38] = {
+        0x80, 0x0f, 0x12, 0x34, 0xde, 0xca, 0xfb, 0xad,
+        0xca, 0xfe, 0xba, 0xbe, 0xf1, 0xd9, 0xde, 0x17,
+        0xff, 0x25, 0x1f, 0xf1, 0xaa, 0x00, 0x77, 0x74,
+        0xb0, 0xb4, 0xb4, 0x0d, 0xa0, 0x8d, 0x9d, 0x9a,
+        0x5b, 0x3a, 0x55, 0xd8, 0x87, 0x3b
+    };
+    // clang-format on
+
+    srtp_t srtp_snd, srtp_recv;
+    srtp_err_status_t status;
+    int len;
+    srtp_policy_t policy;
+
+    /*
+     * create a session with a single stream using the default srtp
+     * policy and with the SSRC value 0xcafebabe
+     */
+    memset(&policy, 0, sizeof(policy));
+    srtp_crypto_policy_set_aes_cm_256_hmac_sha1_80(&policy.rtp);
+    srtp_crypto_policy_set_aes_cm_256_hmac_sha1_80(&policy.rtcp);
+    policy.ssrc.type = ssrc_specific;
+    policy.ssrc.value = 0xcafebabe;
+    policy.key = aes_256_test_key;
+    policy.ekt = NULL;
+    policy.window_size = 128;
+    policy.allow_repeat_tx = 0;
+    policy.next = NULL;
+
+    status = srtp_create(&srtp_snd, &policy);
+    if (status) {
+        return status;
+    }
+
+    /*
+     * protect plaintext, then compare with ciphertext
+     */
+    len = 28;
+    status = srtp_protect(srtp_snd, srtp_plaintext, &len);
+    if (status || (len != 38)) {
+        return srtp_err_status_fail;
+    }
+
+    debug_print(mod_driver, "ciphertext:\n  %s",
+                octet_string_hex_string(srtp_plaintext, len));
+    debug_print(mod_driver, "ciphertext reference:\n  %s",
+                octet_string_hex_string(srtp_ciphertext, len));
+
+    if (srtp_octet_string_is_eq(srtp_plaintext, srtp_ciphertext, len)) {
+        return srtp_err_status_fail;
+    }
+
+    /*
+     * create a receiver session context comparable to the one created
+     * above - we need to do this so that the replay checking doesn't
+     * complain
+     */
+    status = srtp_create(&srtp_recv, &policy);
+    if (status) {
+        return status;
+    }
+
+    /*
+     * unprotect ciphertext, then compare with plaintext
+     */
+    status = srtp_unprotect(srtp_recv, srtp_ciphertext, &len);
+    if (status || (len != 28)) {
+        return status;
+    }
+
+    if (srtp_octet_string_is_eq(srtp_ciphertext, srtp_plaintext_ref, len)) {
+        return srtp_err_status_fail;
+    }
+
+    status = srtp_dealloc(srtp_snd);
+    if (status) {
+        return status;
+    }
+
+    status = srtp_dealloc(srtp_recv);
+    if (status) {
+        return status;
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_create_big_policy(srtp_policy_t **list)
+{
+    extern const srtp_policy_t *policy_array[];
+    srtp_policy_t *p, *tmp;
+    int i = 0;
+    uint32_t ssrc = 0;
+
+    /* sanity checking */
+    if ((list == NULL) || (policy_array[0] == NULL)) {
+        return srtp_err_status_bad_param;
+    }
+
+    /*
+     * loop over policy list, mallocing a new list and copying values
+     * into it (and incrementing the SSRC value as we go along)
+     */
+    tmp = NULL;
+    while (policy_array[i] != NULL) {
+        p = (srtp_policy_t *)malloc(sizeof(srtp_policy_t));
+        if (p == NULL) {
+            return srtp_err_status_bad_param;
+        }
+        memcpy(p, policy_array[i], sizeof(srtp_policy_t));
+        p->ssrc.type = ssrc_specific;
+        p->ssrc.value = ssrc++;
+        p->next = tmp;
+        tmp = p;
+        i++;
+    }
+    *list = p;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_dealloc_big_policy(srtp_policy_t *list)
+{
+    srtp_policy_t *p, *next;
+
+    for (p = list; p != NULL; p = next) {
+        next = p->next;
+        free(p);
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_test_empty_payload()
+{
+    srtp_t srtp_snd, srtp_recv;
+    srtp_err_status_t status;
+    int len;
+    srtp_policy_t policy;
+    srtp_hdr_t *mesg;
+
+    /*
+     * create a session with a single stream using the default srtp
+     * policy and with the SSRC value 0xcafebabe
+     */
+    memset(&policy, 0, sizeof(policy));
+    srtp_crypto_policy_set_rtp_default(&policy.rtp);
+    srtp_crypto_policy_set_rtcp_default(&policy.rtcp);
+    policy.ssrc.type = ssrc_specific;
+    policy.ssrc.value = 0xcafebabe;
+    policy.key = test_key;
+    policy.ekt = NULL;
+    policy.window_size = 128;
+    policy.allow_repeat_tx = 0;
+    policy.next = NULL;
+
+    status = srtp_create(&srtp_snd, &policy);
+    if (status) {
+        return status;
+    }
+
+    mesg = srtp_create_test_packet(0, policy.ssrc.value, &len);
+    if (mesg == NULL) {
+        return srtp_err_status_fail;
+    }
+
+    status = srtp_protect(srtp_snd, mesg, &len);
+    if (status) {
+        return status;
+    } else if (len != 12 + 10) {
+        return srtp_err_status_fail;
+    }
+
+    /*
+     * create a receiver session context comparable to the one created
+     * above - we need to do this so that the replay checking doesn't
+     * complain
+     */
+    status = srtp_create(&srtp_recv, &policy);
+    if (status) {
+        return status;
+    }
+
+    /*
+     * unprotect ciphertext, then compare with plaintext
+     */
+    status = srtp_unprotect(srtp_recv, mesg, &len);
+    if (status) {
+        return status;
+    } else if (len != 12) {
+        return srtp_err_status_fail;
+    }
+
+    status = srtp_dealloc(srtp_snd);
+    if (status) {
+        return status;
+    }
+
+    status = srtp_dealloc(srtp_recv);
+    if (status) {
+        return status;
+    }
+
+    free(mesg);
+
+    return srtp_err_status_ok;
+}
+
+#ifdef GCM
+srtp_err_status_t srtp_test_empty_payload_gcm()
+{
+    srtp_t srtp_snd, srtp_recv;
+    srtp_err_status_t status;
+    int len;
+    srtp_policy_t policy;
+    srtp_hdr_t *mesg;
+
+    /*
+     * create a session with a single stream using the default srtp
+     * policy and with the SSRC value 0xcafebabe
+     */
+    memset(&policy, 0, sizeof(policy));
+    srtp_crypto_policy_set_aes_gcm_128_8_auth(&policy.rtp);
+    srtp_crypto_policy_set_aes_gcm_128_8_auth(&policy.rtcp);
+    policy.ssrc.type = ssrc_specific;
+    policy.ssrc.value = 0xcafebabe;
+    policy.key = test_key;
+    policy.ekt = NULL;
+    policy.window_size = 128;
+    policy.allow_repeat_tx = 0;
+    policy.next = NULL;
+
+    status = srtp_create(&srtp_snd, &policy);
+    if (status) {
+        return status;
+    }
+
+    mesg = srtp_create_test_packet(0, policy.ssrc.value, &len);
+    if (mesg == NULL) {
+        return srtp_err_status_fail;
+    }
+
+    status = srtp_protect(srtp_snd, mesg, &len);
+    if (status) {
+        return status;
+    } else if (len != 12 + 8) {
+        return srtp_err_status_fail;
+    }
+
+    /*
+     * create a receiver session context comparable to the one created
+     * above - we need to do this so that the replay checking doesn't
+     * complain
+     */
+    status = srtp_create(&srtp_recv, &policy);
+    if (status) {
+        return status;
+    }
+
+    /*
+     * unprotect ciphertext, then compare with plaintext
+     */
+    status = srtp_unprotect(srtp_recv, mesg, &len);
+    if (status) {
+        return status;
+    } else if (len != 12) {
+        return srtp_err_status_fail;
+    }
+
+    status = srtp_dealloc(srtp_snd);
+    if (status) {
+        return status;
+    }
+
+    status = srtp_dealloc(srtp_recv);
+    if (status) {
+        return status;
+    }
+
+    free(mesg);
+
+    return srtp_err_status_ok;
+}
+#endif // GCM
+
+srtp_err_status_t srtp_test_remove_stream()
+{
+    srtp_err_status_t status;
+    srtp_policy_t *policy_list, policy;
+    srtp_t session;
+    srtp_stream_t stream;
+
+    /*
+     * srtp_get_stream() is a libSRTP internal function that we declare
+     * here so that we can use it to verify the correct operation of the
+     * library
+     */
+    extern srtp_stream_t srtp_get_stream(srtp_t srtp, uint32_t ssrc);
+
+    status = srtp_create_big_policy(&policy_list);
+    if (status) {
+        return status;
+    }
+
+    status = srtp_create(&session, policy_list);
+    if (status) {
+        return status;
+    }
+
+    /*
+     * check for false positives by trying to remove a stream that's not
+     * in the session
+     */
+    status = srtp_remove_stream(session, htonl(0xaaaaaaaa));
+    if (status != srtp_err_status_no_ctx) {
+        return srtp_err_status_fail;
+    }
+
+    /*
+     * check for false negatives by removing stream 0x1, then
+     * searching for streams 0x0 and 0x2
+     */
+    status = srtp_remove_stream(session, htonl(0x1));
+    if (status != srtp_err_status_ok) {
+        return srtp_err_status_fail;
+    }
+    stream = srtp_get_stream(session, htonl(0x0));
+    if (stream == NULL) {
+        return srtp_err_status_fail;
+    }
+    stream = srtp_get_stream(session, htonl(0x2));
+    if (stream == NULL) {
+        return srtp_err_status_fail;
+    }
+
+    status = srtp_dealloc(session);
+    if (status != srtp_err_status_ok) {
+        return status;
+    }
+
+    status = srtp_dealloc_big_policy(policy_list);
+    if (status != srtp_err_status_ok) {
+        return status;
+    }
+
+    /* Now test adding and removing a single stream */
+    memset(&policy, 0, sizeof(policy));
+    srtp_crypto_policy_set_rtp_default(&policy.rtp);
+    srtp_crypto_policy_set_rtcp_default(&policy.rtcp);
+    policy.ssrc.type = ssrc_specific;
+    policy.ssrc.value = 0xcafebabe;
+    policy.key = test_key;
+    policy.ekt = NULL;
+    policy.window_size = 128;
+    policy.allow_repeat_tx = 0;
+    policy.next = NULL;
+
+    status = srtp_create(&session, NULL);
+    if (status != srtp_err_status_ok) {
+        return status;
+    }
+
+    status = srtp_add_stream(session, &policy);
+    if (status != srtp_err_status_ok) {
+        return status;
+    }
+
+    status = srtp_remove_stream(session, htonl(0xcafebabe));
+    if (status != srtp_err_status_ok) {
+        return status;
+    }
+
+    status = srtp_dealloc(session);
+    if (status != srtp_err_status_ok) {
+        return status;
+    }
+
+    return srtp_err_status_ok;
+}
+
+// clang-format off
+unsigned char test_alt_key[46] = {
+  0xe5, 0x19, 0x6f, 0x01, 0x5e, 0xf1, 0x9b, 0xe1,
+  0xd7, 0x47, 0xa7, 0x27, 0x07, 0xd7, 0x47, 0x33,
+  0x01, 0xc2, 0x35, 0x4d, 0x59, 0x6a, 0xf7, 0x84,
+  0x96, 0x98, 0xeb, 0xaa, 0xac, 0xf6, 0xa1, 0x45,
+  0xc7, 0x15, 0xe2, 0xea, 0xfe, 0x55, 0x67, 0x96,
+  0xb6, 0x96, 0x0b, 0x3a, 0xab, 0xe6
+};
+// clang-format on
+
+/*
+ * srtp_test_update() verifies updating/rekeying exsisting streams.
+ * As stated in https://tools.ietf.org/html/rfc3711#section-3.3.1
+ * the value of the ROC must not be reset after a rekey, this test
+ * atempts to prove that srtp_update does not reset the ROC.
+ */
+
+srtp_err_status_t srtp_test_update()
+{
+    srtp_err_status_t status;
+    uint32_t ssrc = 0x12121212;
+    int msg_len_octets = 32;
+    int protected_msg_len_octets;
+    srtp_hdr_t *msg;
+    srtp_t srtp_snd, srtp_recv;
+    srtp_policy_t policy;
+
+    memset(&policy, 0, sizeof(policy));
+    srtp_crypto_policy_set_rtp_default(&policy.rtp);
+    srtp_crypto_policy_set_rtcp_default(&policy.rtcp);
+    policy.ekt = NULL;
+    policy.window_size = 128;
+    policy.allow_repeat_tx = 0;
+    policy.next = NULL;
+    policy.ssrc.type = ssrc_any_outbound;
+    policy.key = test_key;
+
+    /* create a send and recive ctx with defualt profile and test_key */
+    status = srtp_create(&srtp_recv, &policy);
+    if (status)
+        return status;
+
+    policy.ssrc.type = ssrc_any_inbound;
+    status = srtp_create(&srtp_snd, &policy);
+    if (status)
+        return status;
+
+    /* protect and unprotect two msg's that will cause the ROC to be equal to 1
+     */
+    msg = srtp_create_test_packet(msg_len_octets, ssrc,
+                                  &protected_msg_len_octets);
+    if (msg == NULL)
+        return srtp_err_status_alloc_fail;
+    msg->seq = htons(65535);
+
+    status = srtp_protect(srtp_snd, msg, &protected_msg_len_octets);
+    if (status)
+        return srtp_err_status_fail;
+
+    status = srtp_unprotect(srtp_recv, msg, &protected_msg_len_octets);
+    if (status)
+        return status;
+
+    free(msg);
+
+    msg = srtp_create_test_packet(msg_len_octets, ssrc,
+                                  &protected_msg_len_octets);
+    if (msg == NULL)
+        return srtp_err_status_alloc_fail;
+    msg->seq = htons(1);
+
+    status = srtp_protect(srtp_snd, msg, &protected_msg_len_octets);
+    if (status)
+        return srtp_err_status_fail;
+
+    status = srtp_unprotect(srtp_recv, msg, &protected_msg_len_octets);
+    if (status)
+        return status;
+
+    free(msg);
+
+    /* update send ctx with same test_key t verify update works*/
+    policy.ssrc.type = ssrc_any_outbound;
+    policy.key = test_key;
+    status = srtp_update(srtp_snd, &policy);
+    if (status)
+        return status;
+
+    msg = srtp_create_test_packet(msg_len_octets, ssrc,
+                                  &protected_msg_len_octets);
+    if (msg == NULL)
+        return srtp_err_status_alloc_fail;
+    msg->seq = htons(2);
+
+    status = srtp_protect(srtp_snd, msg, &protected_msg_len_octets);
+    if (status)
+        return srtp_err_status_fail;
+
+    status = srtp_unprotect(srtp_recv, msg, &protected_msg_len_octets);
+    if (status)
+        return status;
+
+    free(msg);
+
+    /* update send ctx to use test_alt_key */
+    policy.ssrc.type = ssrc_any_outbound;
+    policy.key = test_alt_key;
+    status = srtp_update(srtp_snd, &policy);
+    if (status)
+        return status;
+
+    /* create and protect msg with new key and ROC still equal to 1 */
+    msg = srtp_create_test_packet(msg_len_octets, ssrc,
+                                  &protected_msg_len_octets);
+    if (msg == NULL)
+        return srtp_err_status_alloc_fail;
+    msg->seq = htons(3);
+
+    status = srtp_protect(srtp_snd, msg, &protected_msg_len_octets);
+    if (status)
+        return srtp_err_status_fail;
+
+    /* verify that recive ctx will fail to unprotect as it still uses test_key
+     */
+    status = srtp_unprotect(srtp_recv, msg, &protected_msg_len_octets);
+    if (status == srtp_err_status_ok)
+        return srtp_err_status_fail;
+
+    /* create a new recvieve ctx with test_alt_key but since it is new it will
+     * have ROC equal to 1
+     * and therefore should fail to unprotected */
+    {
+        srtp_t srtp_recv_roc_0;
+
+        policy.ssrc.type = ssrc_any_inbound;
+        policy.key = test_alt_key;
+        status = srtp_create(&srtp_recv_roc_0, &policy);
+        if (status)
+            return status;
+
+        status =
+            srtp_unprotect(srtp_recv_roc_0, msg, &protected_msg_len_octets);
+        if (status == srtp_err_status_ok)
+            return srtp_err_status_fail;
+
+        status = srtp_dealloc(srtp_recv_roc_0);
+        if (status)
+            return status;
+    }
+
+    /* update recive ctx to use test_alt_key */
+    policy.ssrc.type = ssrc_any_inbound;
+    policy.key = test_alt_key;
+    status = srtp_update(srtp_recv, &policy);
+    if (status)
+        return status;
+
+    /* verify that can still unprotect, therfore key is updated and ROC value is
+     * preserved */
+    status = srtp_unprotect(srtp_recv, msg, &protected_msg_len_octets);
+    if (status)
+        return status;
+
+    free(msg);
+
+    status = srtp_dealloc(srtp_snd);
+    if (status)
+        return status;
+
+    status = srtp_dealloc(srtp_recv);
+    if (status)
+        return status;
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_test_setup_protect_trailer_streams(
+    srtp_t *srtp_send,
+    srtp_t *srtp_send_mki,
+    srtp_t *srtp_send_aes_gcm,
+    srtp_t *srtp_send_aes_gcm_mki)
+{
+    srtp_err_status_t status;
+    srtp_policy_t policy;
+    srtp_policy_t policy_mki;
+
+#ifdef GCM
+    srtp_policy_t policy_aes_gcm;
+    srtp_policy_t policy_aes_gcm_mki;
+#endif // GCM
+
+    memset(&policy, 0, sizeof(policy));
+    srtp_crypto_policy_set_rtp_default(&policy.rtp);
+    srtp_crypto_policy_set_rtcp_default(&policy.rtcp);
+    policy.ekt = NULL;
+    policy.window_size = 128;
+    policy.allow_repeat_tx = 0;
+    policy.next = NULL;
+    policy.ssrc.type = ssrc_any_outbound;
+    policy.key = test_key;
+
+    memset(&policy_mki, 0, sizeof(policy_mki));
+    srtp_crypto_policy_set_rtp_default(&policy_mki.rtp);
+    srtp_crypto_policy_set_rtcp_default(&policy_mki.rtcp);
+    policy_mki.ekt = NULL;
+    policy_mki.window_size = 128;
+    policy_mki.allow_repeat_tx = 0;
+    policy_mki.next = NULL;
+    policy_mki.ssrc.type = ssrc_any_outbound;
+    policy_mki.key = NULL;
+    policy_mki.keys = test_keys;
+    policy_mki.num_master_keys = 2;
+
+#ifdef GCM
+    memset(&policy_aes_gcm, 0, sizeof(policy_aes_gcm));
+    srtp_crypto_policy_set_aes_gcm_128_16_auth(&policy_aes_gcm.rtp);
+    srtp_crypto_policy_set_aes_gcm_128_16_auth(&policy_aes_gcm.rtcp);
+    policy_aes_gcm.ekt = NULL;
+    policy_aes_gcm.window_size = 128;
+    policy_aes_gcm.allow_repeat_tx = 0;
+    policy_aes_gcm.next = NULL;
+    policy_aes_gcm.ssrc.type = ssrc_any_outbound;
+    policy_aes_gcm.key = test_key;
+
+    memset(&policy_aes_gcm_mki, 0, sizeof(policy_aes_gcm_mki));
+    srtp_crypto_policy_set_aes_gcm_128_16_auth(&policy_aes_gcm_mki.rtp);
+    srtp_crypto_policy_set_aes_gcm_128_16_auth(&policy_aes_gcm_mki.rtcp);
+    policy_aes_gcm_mki.ekt = NULL;
+    policy_aes_gcm_mki.window_size = 128;
+    policy_aes_gcm_mki.allow_repeat_tx = 0;
+    policy_aes_gcm_mki.next = NULL;
+    policy_aes_gcm_mki.ssrc.type = ssrc_any_outbound;
+    policy_aes_gcm_mki.key = NULL;
+    policy_aes_gcm_mki.keys = test_keys;
+    policy_aes_gcm_mki.num_master_keys = 2;
+#endif // GCM
+
+    /* create a send ctx with defualt profile and test_key */
+    status = srtp_create(srtp_send, &policy);
+    if (status)
+        return status;
+
+    status = srtp_create(srtp_send_mki, &policy_mki);
+    if (status)
+        return status;
+
+#ifdef GCM
+    status = srtp_create(srtp_send_aes_gcm, &policy_aes_gcm);
+    if (status)
+        return status;
+
+    status = srtp_create(srtp_send_aes_gcm_mki, &policy_aes_gcm_mki);
+    if (status)
+        return status;
+#endif // GCM
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_test_protect_trailer_length()
+{
+    srtp_t srtp_send;
+    srtp_t srtp_send_mki;
+    srtp_t srtp_send_aes_gcm;
+    srtp_t srtp_send_aes_gcm_mki;
+    uint32_t length = 0;
+    srtp_err_status_t status;
+
+    srtp_test_setup_protect_trailer_streams(
+        &srtp_send, &srtp_send_mki, &srtp_send_aes_gcm, &srtp_send_aes_gcm_mki);
+
+    status = srtp_get_protect_trailer_length(srtp_send, 0, 0, &length);
+    if (status)
+        return status;
+
+    /*  TAG Length: 10 bytes */
+    if (length != 10)
+        return srtp_err_status_fail;
+
+    status = srtp_get_protect_trailer_length(srtp_send_mki, 1, 1, &length);
+    if (status)
+        return status;
+
+    /*  TAG Length: 10 bytes + MKI length: 4 bytes*/
+    if (length != 14)
+        return srtp_err_status_fail;
+
+#ifdef GCM
+    status = srtp_get_protect_trailer_length(srtp_send_aes_gcm, 0, 0, &length);
+    if (status)
+        return status;
+
+    /*  TAG Length: 16 bytes */
+    if (length != 16)
+        return srtp_err_status_fail;
+
+    status =
+        srtp_get_protect_trailer_length(srtp_send_aes_gcm_mki, 1, 1, &length);
+    if (status)
+        return status;
+
+    /*  TAG Length: 16 bytes + MKI length: 4 bytes*/
+    if (length != 20)
+        return srtp_err_status_fail;
+#endif // GCM
+
+    srtp_dealloc(srtp_send);
+    srtp_dealloc(srtp_send_mki);
+#ifdef GCM
+    srtp_dealloc(srtp_send_aes_gcm);
+    srtp_dealloc(srtp_send_aes_gcm_mki);
+#endif
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_test_protect_rtcp_trailer_length()
+{
+    srtp_t srtp_send;
+    srtp_t srtp_send_mki;
+    srtp_t srtp_send_aes_gcm;
+    srtp_t srtp_send_aes_gcm_mki;
+    uint32_t length = 0;
+    srtp_err_status_t status;
+
+    srtp_test_setup_protect_trailer_streams(
+        &srtp_send, &srtp_send_mki, &srtp_send_aes_gcm, &srtp_send_aes_gcm_mki);
+
+    status = srtp_get_protect_rtcp_trailer_length(srtp_send, 0, 0, &length);
+    if (status)
+        return status;
+
+    /*  TAG Length: 10 bytes + SRTCP Trailer 4 bytes*/
+    if (length != 14)
+        return srtp_err_status_fail;
+
+    status = srtp_get_protect_rtcp_trailer_length(srtp_send_mki, 1, 1, &length);
+    if (status)
+        return status;
+
+    /*  TAG Length: 10 bytes + SRTCP Trailer 4 bytes + MKI 4 bytes*/
+    if (length != 18)
+        return srtp_err_status_fail;
+
+#ifdef GCM
+    status =
+        srtp_get_protect_rtcp_trailer_length(srtp_send_aes_gcm, 0, 0, &length);
+    if (status)
+        return status;
+
+    /*  TAG Length: 16 bytes + SRTCP Trailer 4 bytes*/
+    if (length != 20)
+        return srtp_err_status_fail;
+
+    status = srtp_get_protect_rtcp_trailer_length(srtp_send_aes_gcm_mki, 1, 1,
+                                                  &length);
+    if (status)
+        return status;
+
+    /*  TAG Length: 16 bytes + SRTCP Trailer 4 bytes + MKI 4 bytes*/
+    if (length != 24)
+        return srtp_err_status_fail;
+#endif // GCM
+
+    srtp_dealloc(srtp_send);
+    srtp_dealloc(srtp_send_mki);
+#ifdef GCM
+    srtp_dealloc(srtp_send_aes_gcm);
+    srtp_dealloc(srtp_send_aes_gcm_mki);
+#endif
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_test_get_roc()
+{
+    srtp_err_status_t status;
+    srtp_policy_t policy;
+    srtp_t session;
+    srtp_hdr_t *pkt;
+    uint32_t i;
+    uint32_t roc;
+    uint32_t ts;
+    uint16_t seq;
+
+    int msg_len_octets = 32;
+    int protected_msg_len_octets;
+
+    memset(&policy, 0, sizeof(policy));
+    srtp_crypto_policy_set_rtp_default(&policy.rtp);
+    srtp_crypto_policy_set_rtcp_default(&policy.rtcp);
+    policy.ssrc.type = ssrc_specific;
+    policy.ssrc.value = 0xcafebabe;
+    policy.key = test_key;
+    policy.window_size = 128;
+
+    /* Create a sender session */
+    status = srtp_create(&session, &policy);
+    if (status) {
+        return status;
+    }
+
+    /* Set start sequence so we roll over */
+    seq = 65535;
+    ts = 0;
+
+    for (i = 0; i < 2; i++) {
+        pkt = srtp_create_test_packet_extended(msg_len_octets,
+                                               policy.ssrc.value, seq, ts,
+                                               &protected_msg_len_octets);
+        status = srtp_protect(session, pkt, &protected_msg_len_octets);
+        free(pkt);
+        if (status) {
+            return status;
+        }
+
+        status = srtp_get_stream_roc(session, policy.ssrc.value, &roc);
+        if (status) {
+            return status;
+        }
+
+        if (roc != i) {
+            return srtp_err_status_fail;
+        }
+
+        seq++;
+        ts++;
+    }
+
+    /* Cleanup */
+    status = srtp_dealloc(session);
+    if (status) {
+        return status;
+    }
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t test_set_receiver_roc(uint32_t packets,
+                                               uint32_t roc_to_set)
+{
+    srtp_err_status_t status;
+
+    srtp_policy_t sender_policy;
+    srtp_t sender_session;
+
+    srtp_policy_t receiver_policy;
+    srtp_t receiver_session;
+
+    srtp_hdr_t *pkt_1;
+    unsigned char *recv_pkt_1;
+
+    srtp_hdr_t *pkt_2;
+    unsigned char *recv_pkt_2;
+
+    uint32_t i;
+    uint32_t ts;
+    uint16_t seq;
+
+    int msg_len_octets = 32;
+    int protected_msg_len_octets_1;
+    int protected_msg_len_octets_2;
+
+    /* Create sender */
+    memset(&sender_policy, 0, sizeof(sender_policy));
+    srtp_crypto_policy_set_rtp_default(&sender_policy.rtp);
+    srtp_crypto_policy_set_rtcp_default(&sender_policy.rtcp);
+    sender_policy.ssrc.type = ssrc_specific;
+    sender_policy.ssrc.value = 0xcafebabe;
+    sender_policy.key = test_key;
+    sender_policy.window_size = 128;
+
+    status = srtp_create(&sender_session, &sender_policy);
+    if (status) {
+        return status;
+    }
+
+    /* Create and protect packets */
+    seq = 0;
+    ts = 0;
+    for (i = 0; i < packets; i++) {
+        srtp_hdr_t *tmp_pkt;
+        int tmp_len;
+
+        tmp_pkt = srtp_create_test_packet_extended(
+            msg_len_octets, sender_policy.ssrc.value, seq, ts, &tmp_len);
+        status = srtp_protect(sender_session, tmp_pkt, &tmp_len);
+        free(tmp_pkt);
+        if (status) {
+            return status;
+        }
+
+        seq++;
+        ts++;
+    }
+
+    /* Create the first packet to decrypt and test for ROC change */
+    pkt_1 = srtp_create_test_packet_extended(msg_len_octets,
+                                             sender_policy.ssrc.value, seq, ts,
+                                             &protected_msg_len_octets_1);
+    status = srtp_protect(sender_session, pkt_1, &protected_msg_len_octets_1);
+    if (status) {
+        return status;
+    }
+
+    /* Create the second packet to decrypt and test for ROC change */
+    seq++;
+    ts++;
+    pkt_2 = srtp_create_test_packet_extended(msg_len_octets,
+                                             sender_policy.ssrc.value, seq, ts,
+                                             &protected_msg_len_octets_2);
+    status = srtp_protect(sender_session, pkt_2, &protected_msg_len_octets_2);
+    if (status) {
+        return status;
+    }
+
+    /* Create the receiver */
+    memset(&receiver_policy, 0, sizeof(receiver_policy));
+    srtp_crypto_policy_set_rtp_default(&receiver_policy.rtp);
+    srtp_crypto_policy_set_rtcp_default(&receiver_policy.rtcp);
+    receiver_policy.ssrc.type = ssrc_specific;
+    receiver_policy.ssrc.value = sender_policy.ssrc.value;
+    receiver_policy.key = test_key;
+    receiver_policy.window_size = 128;
+
+    status = srtp_create(&receiver_session, &receiver_policy);
+    if (status) {
+        return status;
+    }
+
+    /* Make a copy of the first sent protected packet */
+    recv_pkt_1 = malloc(protected_msg_len_octets_1);
+    if (recv_pkt_1 == NULL) {
+        return srtp_err_status_fail;
+    }
+    memcpy(recv_pkt_1, pkt_1, protected_msg_len_octets_1);
+
+    /* Make a copy of the second sent protected packet */
+    recv_pkt_2 = malloc(protected_msg_len_octets_2);
+    if (recv_pkt_2 == NULL) {
+        return srtp_err_status_fail;
+    }
+    memcpy(recv_pkt_2, pkt_2, protected_msg_len_octets_2);
+
+    /* Set the ROC to the wanted value */
+    status = srtp_set_stream_roc(receiver_session, receiver_policy.ssrc.value,
+                                 roc_to_set);
+    if (status) {
+        return status;
+    }
+
+    /* Unprotect the first packet */
+    status = srtp_unprotect(receiver_session, recv_pkt_1,
+                            &protected_msg_len_octets_1);
+    if (status) {
+        return status;
+    }
+
+    /* Unprotect the second packet */
+    status = srtp_unprotect(receiver_session, recv_pkt_2,
+                            &protected_msg_len_octets_2);
+    if (status) {
+        return status;
+    }
+
+    /* Cleanup */
+    status = srtp_dealloc(sender_session);
+    if (status) {
+        return status;
+    }
+
+    status = srtp_dealloc(receiver_session);
+    if (status) {
+        return status;
+    }
+
+    free(pkt_1);
+    free(recv_pkt_1);
+    free(pkt_2);
+    free(recv_pkt_2);
+
+    return srtp_err_status_ok;
+}
+
+static srtp_err_status_t test_set_sender_roc(uint16_t seq, uint32_t roc_to_set)
+{
+    srtp_err_status_t status;
+
+    srtp_policy_t sender_policy;
+    srtp_t sender_session;
+
+    srtp_policy_t receiver_policy;
+    srtp_t receiver_session;
+
+    srtp_hdr_t *pkt;
+    unsigned char *recv_pkt;
+
+    uint32_t ts;
+
+    int msg_len_octets = 32;
+    int protected_msg_len_octets;
+
+    /* Create sender */
+    memset(&sender_policy, 0, sizeof(sender_policy));
+    srtp_crypto_policy_set_rtp_default(&sender_policy.rtp);
+    srtp_crypto_policy_set_rtcp_default(&sender_policy.rtcp);
+    sender_policy.ssrc.type = ssrc_specific;
+    sender_policy.ssrc.value = 0xcafebabe;
+    sender_policy.key = test_key;
+    sender_policy.window_size = 128;
+
+    status = srtp_create(&sender_session, &sender_policy);
+    if (status) {
+        return status;
+    }
+
+    /* Set the ROC before encrypting the first packet */
+    status = srtp_set_stream_roc(sender_session, sender_policy.ssrc.value,
+                                 roc_to_set);
+    if (status != srtp_err_status_ok) {
+        return status;
+    }
+
+    /* Create the packet to decrypt */
+    ts = 0;
+    pkt = srtp_create_test_packet_extended(msg_len_octets,
+                                           sender_policy.ssrc.value, seq, ts,
+                                           &protected_msg_len_octets);
+    status = srtp_protect(sender_session, pkt, &protected_msg_len_octets);
+    if (status) {
+        return status;
+    }
+
+    /* Create the receiver */
+    memset(&receiver_policy, 0, sizeof(receiver_policy));
+    srtp_crypto_policy_set_rtp_default(&receiver_policy.rtp);
+    srtp_crypto_policy_set_rtcp_default(&receiver_policy.rtcp);
+    receiver_policy.ssrc.type = ssrc_specific;
+    receiver_policy.ssrc.value = sender_policy.ssrc.value;
+    receiver_policy.key = test_key;
+    receiver_policy.window_size = 128;
+
+    status = srtp_create(&receiver_session, &receiver_policy);
+    if (status) {
+        return status;
+    }
+
+    /* Make a copy of the sent protected packet */
+    recv_pkt = malloc(protected_msg_len_octets);
+    if (recv_pkt == NULL) {
+        return srtp_err_status_fail;
+    }
+    memcpy(recv_pkt, pkt, protected_msg_len_octets);
+
+    /* Set the ROC to the wanted value */
+    status = srtp_set_stream_roc(receiver_session, receiver_policy.ssrc.value,
+                                 roc_to_set);
+    if (status) {
+        return status;
+    }
+
+    status =
+        srtp_unprotect(receiver_session, recv_pkt, &protected_msg_len_octets);
+    if (status) {
+        return status;
+    }
+
+    /* Cleanup */
+    status = srtp_dealloc(sender_session);
+    if (status) {
+        return status;
+    }
+
+    status = srtp_dealloc(receiver_session);
+    if (status) {
+        return status;
+    }
+
+    free(pkt);
+    free(recv_pkt);
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_test_set_receiver_roc()
+{
+    int packets;
+    uint32_t roc;
+    srtp_err_status_t status;
+
+    /* First test does not rollover */
+    packets = 1;
+    roc = 0;
+
+    status = test_set_receiver_roc(packets - 1, roc);
+    if (status) {
+        return status;
+    }
+
+    status = test_set_receiver_roc(packets, roc);
+    if (status) {
+        return status;
+    }
+
+    status = test_set_receiver_roc(packets + 1, roc);
+    if (status) {
+        return status;
+    }
+
+    status = test_set_receiver_roc(packets + 60000, roc);
+    if (status) {
+        return status;
+    }
+
+    /* Second test should rollover */
+    packets = 65535;
+    roc = 0;
+
+    status = test_set_receiver_roc(packets - 1, roc);
+    if (status) {
+        return status;
+    }
+
+    status = test_set_receiver_roc(packets, roc);
+    if (status) {
+        return status;
+    }
+
+    /* Now the rollover counter should be 1 */
+    roc = 1;
+    status = test_set_receiver_roc(packets + 1, roc);
+    if (status) {
+        return status;
+    }
+
+    status = test_set_receiver_roc(packets + 60000, roc);
+    if (status) {
+        return status;
+    }
+
+    return srtp_err_status_ok;
+}
+
+srtp_err_status_t srtp_test_set_sender_roc()
+{
+    uint32_t roc;
+    uint16_t seq;
+    srtp_err_status_t status;
+
+    seq = 43210;
+    roc = 0;
+    status = test_set_sender_roc(seq, roc);
+    if (status) {
+        return status;
+    }
+
+    roc = 65535;
+    status = test_set_sender_roc(seq, roc);
+    if (status) {
+        return status;
+    }
+
+    roc = 0xffff;
+    status = test_set_sender_roc(seq, roc);
+    if (status) {
+        return status;
+    }
+
+    roc = 0xffff00;
+    status = test_set_sender_roc(seq, roc);
+    if (status) {
+        return status;
+    }
+
+    roc = 0xfffffff0;
+    status = test_set_sender_roc(seq, roc);
+    if (status) {
+        return status;
+    }
+
+    return srtp_err_status_ok;
+}
+
+/*
+ * srtp policy definitions - these definitions are used above
+ */
+
+// clang-format off
+unsigned char test_key[46] = {
+    0xe1, 0xf9, 0x7a, 0x0d, 0x3e, 0x01, 0x8b, 0xe0,
+    0xd6, 0x4f, 0xa3, 0x2c, 0x06, 0xde, 0x41, 0x39,
+    0x0e, 0xc6, 0x75, 0xad, 0x49, 0x8a, 0xfe, 0xeb,
+    0xb6, 0x96, 0x0b, 0x3a, 0xab, 0xe6, 0xc1, 0x73,
+    0xc3, 0x17, 0xf2, 0xda, 0xbe, 0x35, 0x77, 0x93,
+    0xb6, 0x96, 0x0b, 0x3a, 0xab, 0xe6
+};
+
+unsigned char test_key_2[46] = {
+    0xf0, 0xf0, 0x49, 0x14, 0xb5, 0x13, 0xf2, 0x76,
+    0x3a, 0x1b, 0x1f, 0xa1, 0x30, 0xf1, 0x0e, 0x29,
+    0x98, 0xf6, 0xf6, 0xe4, 0x3e, 0x43, 0x09, 0xd1,
+    0xe6, 0x22, 0xa0, 0xe3, 0x32, 0xb9, 0xf1, 0xb6,
+    0xc3, 0x17, 0xf2, 0xda, 0xbe, 0x35, 0x77, 0x93,
+    0xb6, 0x96, 0x0b, 0x3a, 0xab, 0xe6
+};
+
+unsigned char test_mki_id[TEST_MKI_ID_SIZE] = {
+    0xe1, 0xf9, 0x7a, 0x0d
+};
+
+unsigned char test_mki_id_2[TEST_MKI_ID_SIZE] = {
+    0xf3, 0xa1, 0x46, 0x71
+};
+// clang-format on
+
+const srtp_policy_t default_policy = {
+    { ssrc_any_outbound, 0 }, /* SSRC */
+    {
+        /* SRTP policy */
+        SRTP_AES_ICM_128,               /* cipher type                 */
+        SRTP_AES_ICM_128_KEY_LEN_WSALT, /* cipher key length in octets */
+        SRTP_HMAC_SHA1,                 /* authentication func type    */
+        16,                             /* auth key length in octets   */
+        10,                             /* auth tag length in octets   */
+        sec_serv_conf_and_auth          /* security services flag      */
+    },
+    {
+        /* SRTCP policy */
+        SRTP_AES_ICM_128,               /* cipher type                 */
+        SRTP_AES_ICM_128_KEY_LEN_WSALT, /* cipher key length in octets */
+        SRTP_HMAC_SHA1,                 /* authentication func type    */
+        16,                             /* auth key length in octets   */
+        10,                             /* auth tag length in octets   */
+        sec_serv_conf_and_auth          /* security services flag      */
+    },
+    NULL,
+    (srtp_master_key_t **)test_keys,
+    2,    /* indicates the number of Master keys          */
+    NULL, /* indicates that EKT is not in use             */
+    128,  /* replay window size                           */
+    0,    /* retransmission not allowed                   */
+    NULL, /* no encrypted extension headers               */
+    0,    /* list of encrypted extension headers is empty */
+    NULL
+};
+
+const srtp_policy_t aes_only_policy = {
+    { ssrc_any_outbound, 0 }, /* SSRC                        */
+    {
+        SRTP_AES_ICM_128,               /* cipher type                 */
+        SRTP_AES_ICM_128_KEY_LEN_WSALT, /* cipher key length in octets */
+        SRTP_NULL_AUTH,                 /* authentication func type    */
+        0,                              /* auth key length in octets   */
+        0,                              /* auth tag length in octets   */
+        sec_serv_conf                   /* security services flag      */
+    },
+    {
+        SRTP_AES_ICM_128,               /* cipher type                 */
+        SRTP_AES_ICM_128_KEY_LEN_WSALT, /* cipher key length in octets */
+        SRTP_NULL_AUTH,                 /* authentication func type    */
+        0,                              /* auth key length in octets   */
+        0,                              /* auth tag length in octets   */
+        sec_serv_conf                   /* security services flag      */
+    },
+    NULL,
+    (srtp_master_key_t **)test_keys,
+    2,    /* indicates the number of Master keys          */
+    NULL, /* indicates that EKT is not in use             */
+    128,  /* replay window size                           */
+    0,    /* retransmission not allowed                   */
+    NULL, /* no encrypted extension headers               */
+    0,    /* list of encrypted extension headers is empty */
+    NULL
+};
+
+const srtp_policy_t hmac_only_policy = {
+    { ssrc_any_outbound, 0 }, /* SSRC */
+    {
+        SRTP_NULL_CIPHER, /* cipher type                 */
+        0,                /* cipher key length in octets */
+        SRTP_HMAC_SHA1,   /* authentication func type    */
+        20,               /* auth key length in octets   */
+        4,                /* auth tag length in octets   */
+        sec_serv_auth     /* security services flag      */
+    },
+    {
+        SRTP_NULL_CIPHER, /* cipher type                 */
+        0,                /* cipher key length in octets */
+        SRTP_HMAC_SHA1,   /* authentication func type    */
+        20,               /* auth key length in octets   */
+        4,                /* auth tag length in octets   */
+        sec_serv_auth     /* security services flag      */
+    },
+    NULL,
+    (srtp_master_key_t **)test_keys,
+    2,    /* Number of Master keys associated with the policy */
+    NULL, /* indicates that EKT is not in use                 */
+    128,  /* replay window size                               */
+    0,    /* retransmission not allowed                       */
+    NULL, /* no encrypted extension headers                   */
+    0,    /* list of encrypted extension headers is empty     */
+    NULL
+};
+
+#ifdef GCM
+const srtp_policy_t aes128_gcm_8_policy = {
+    { ssrc_any_outbound, 0 }, /* SSRC */
+    {
+        /* SRTP policy */
+        SRTP_AES_GCM_128,               /* cipher type                 */
+        SRTP_AES_GCM_128_KEY_LEN_WSALT, /* cipher key length in octets */
+        SRTP_NULL_AUTH,                 /* authentication func type    */
+        0,                              /* auth key length in octets   */
+        8,                              /* auth tag length in octets   */
+        sec_serv_conf_and_auth          /* security services flag      */
+    },
+    {
+        /* SRTCP policy */
+        SRTP_AES_GCM_128,               /* cipher type                 */
+        SRTP_AES_GCM_128_KEY_LEN_WSALT, /* cipher key length in octets */
+        SRTP_NULL_AUTH,                 /* authentication func type    */
+        0,                              /* auth key length in octets   */
+        8,                              /* auth tag length in octets   */
+        sec_serv_conf_and_auth          /* security services flag      */
+    },
+    NULL,
+    (srtp_master_key_t **)test_keys,
+    2,    /* indicates the number of Master keys          */
+    NULL, /* indicates that EKT is not in use             */
+    128,  /* replay window size                           */
+    0,    /* retransmission not allowed                   */
+    NULL, /* no encrypted extension headers               */
+    0,    /* list of encrypted extension headers is empty */
+    NULL
+};
+
+const srtp_policy_t aes128_gcm_8_cauth_policy = {
+    { ssrc_any_outbound, 0 }, /* SSRC */
+    {
+        /* SRTP policy */
+        SRTP_AES_GCM_128,               /* cipher type                 */
+        SRTP_AES_GCM_128_KEY_LEN_WSALT, /* cipher key length in octets */
+        SRTP_NULL_AUTH,                 /* authentication func type    */
+        0,                              /* auth key length in octets   */
+        8,                              /* auth tag length in octets   */
+        sec_serv_conf_and_auth          /* security services flag      */
+    },
+    {
+        /* SRTCP policy */
+        SRTP_AES_GCM_128,               /* cipher type                 */
+        SRTP_AES_GCM_128_KEY_LEN_WSALT, /* cipher key length in octets */
+        SRTP_NULL_AUTH,                 /* authentication func type    */
+        0,                              /* auth key length in octets   */
+        8,                              /* auth tag length in octets   */
+        sec_serv_auth                   /* security services flag      */
+    },
+    NULL,
+    (srtp_master_key_t **)test_keys,
+    2,    /* indicates the number of Master keys          */
+    NULL, /* indicates that EKT is not in use             */
+    128,  /* replay window size                           */
+    0,    /* retransmission not allowed                   */
+    NULL, /* no encrypted extension headers               */
+    0,    /* list of encrypted extension headers is empty */
+    NULL
+};
+
+const srtp_policy_t aes256_gcm_8_policy = {
+    { ssrc_any_outbound, 0 }, /* SSRC */
+    {
+        /* SRTP policy */
+        SRTP_AES_GCM_256,               /* cipher type                 */
+        SRTP_AES_GCM_256_KEY_LEN_WSALT, /* cipher key length in octets */
+        SRTP_NULL_AUTH,                 /* authentication func type    */
+        0,                              /* auth key length in octets   */
+        8,                              /* auth tag length in octets   */
+        sec_serv_conf_and_auth          /* security services flag      */
+    },
+    {
+        /* SRTCP policy */
+        SRTP_AES_GCM_256,               /* cipher type                 */
+        SRTP_AES_GCM_256_KEY_LEN_WSALT, /* cipher key length in octets */
+        SRTP_NULL_AUTH,                 /* authentication func type    */
+        0,                              /* auth key length in octets   */
+        8,                              /* auth tag length in octets   */
+        sec_serv_conf_and_auth          /* security services flag      */
+    },
+    NULL,
+    (srtp_master_key_t **)test_keys,
+    2,    /* indicates the number of Master keys          */
+    NULL, /* indicates that EKT is not in use             */
+    128,  /* replay window size                           */
+    0,    /* retransmission not allowed                   */
+    NULL, /* no encrypted extension headers               */
+    0,    /* list of encrypted extension headers is empty */
+    NULL
+};
+
+const srtp_policy_t aes256_gcm_8_cauth_policy = {
+    { ssrc_any_outbound, 0 }, /* SSRC */
+    {
+        /* SRTP policy */
+        SRTP_AES_GCM_256,               /* cipher type                 */
+        SRTP_AES_GCM_256_KEY_LEN_WSALT, /* cipher key length in octets */
+        SRTP_NULL_AUTH,                 /* authentication func type    */
+        0,                              /* auth key length in octets   */
+        8,                              /* auth tag length in octets   */
+        sec_serv_conf_and_auth          /* security services flag      */
+    },
+    {
+        /* SRTCP policy */
+        SRTP_AES_GCM_256,               /* cipher type                 */
+        SRTP_AES_GCM_256_KEY_LEN_WSALT, /* cipher key length in octets */
+        SRTP_NULL_AUTH,                 /* authentication func type    */
+        0,                              /* auth key length in octets   */
+        8,                              /* auth tag length in octets   */
+        sec_serv_auth                   /* security services flag      */
+    },
+    NULL,
+    (srtp_master_key_t **)test_keys,
+    2,    /* indicates the number of Master keys          */
+    NULL, /* indicates that EKT is not in use             */
+    128,  /* replay window size                           */
+    0,    /* retransmission not allowed                   */
+    NULL, /* no encrypted extension headers               */
+    0,    /* list of encrypted extension headers is empty */
+    NULL
+};
+#endif
+
+const srtp_policy_t null_policy = {
+    { ssrc_any_outbound, 0 }, /* SSRC */
+    {
+        SRTP_NULL_CIPHER, /* cipher type                 */
+        0,                /* cipher key length in octets */
+        SRTP_NULL_AUTH,   /* authentication func type    */
+        0,                /* auth key length in octets   */
+        0,                /* auth tag length in octets   */
+        sec_serv_none     /* security services flag      */
+    },
+    {
+        SRTP_NULL_CIPHER, /* cipher type                 */
+        0,                /* cipher key length in octets */
+        SRTP_NULL_AUTH,   /* authentication func type    */
+        0,                /* auth key length in octets   */
+        0,                /* auth tag length in octets   */
+        sec_serv_none     /* security services flag      */
+    },
+    NULL,
+    (srtp_master_key_t **)test_keys,
+    2,    /* indicates the number of Master keys          */
+    NULL, /* indicates that EKT is not in use             */
+    128,  /* replay window size                           */
+    0,    /* retransmission not allowed                   */
+    NULL, /* no encrypted extension headers               */
+    0,    /* list of encrypted extension headers is empty */
+    NULL
+};
+
+// clang-format off
+unsigned char test_256_key[46] = {
+    0xf0, 0xf0, 0x49, 0x14, 0xb5, 0x13, 0xf2, 0x76,
+    0x3a, 0x1b, 0x1f, 0xa1, 0x30, 0xf1, 0x0e, 0x29,
+    0x98, 0xf6, 0xf6, 0xe4, 0x3e, 0x43, 0x09, 0xd1,
+    0xe6, 0x22, 0xa0, 0xe3, 0x32, 0xb9, 0xf1, 0xb6,
+
+    0x3b, 0x04, 0x80, 0x3d, 0xe5, 0x1e, 0xe7, 0xc9,
+    0x64, 0x23, 0xab, 0x5b, 0x78, 0xd2
+};
+
+unsigned char test_256_key_2[46] = {
+    0xe1, 0xf9, 0x7a, 0x0d, 0x3e, 0x01, 0x8b, 0xe0,
+    0xd6, 0x4f, 0xa3, 0x2c, 0x06, 0xde, 0x41, 0x39,
+    0x0e, 0xc6, 0x75, 0xad, 0x49, 0x8a, 0xfe, 0xeb,
+    0xb6, 0x96, 0x0b, 0x3a, 0xab, 0xe6, 0xc1, 0x73,
+    0x3b, 0x04, 0x80, 0x3d, 0xe5, 0x1e, 0xe7, 0xc9,
+    0x64, 0x23, 0xab, 0x5b, 0x78, 0xd2
+};
+
+srtp_master_key_t master_256_key_1 = {
+    test_256_key,
+    test_mki_id,
+    TEST_MKI_ID_SIZE
+};
+
+srtp_master_key_t master_256_key_2 = {
+    test_256_key_2,
+    test_mki_id_2,
+    TEST_MKI_ID_SIZE
+};
+
+srtp_master_key_t *test_256_keys[2] = {
+    &master_key_1,
+    &master_key_2
+};
+// clang-format on
+
+const srtp_policy_t aes_256_hmac_policy = {
+    { ssrc_any_outbound, 0 }, /* SSRC */
+    {
+        /* SRTP policy */
+        SRTP_AES_ICM_256,               /* cipher type                 */
+        SRTP_AES_ICM_256_KEY_LEN_WSALT, /* cipher key length in octets */
+        SRTP_HMAC_SHA1,                 /* authentication func type    */
+        20,                             /* auth key length in octets   */
+        10,                             /* auth tag length in octets   */
+        sec_serv_conf_and_auth          /* security services flag      */
+    },
+    {
+        /* SRTCP policy */
+        SRTP_AES_ICM_256,               /* cipher type                 */
+        SRTP_AES_ICM_256_KEY_LEN_WSALT, /* cipher key length in octets */
+        SRTP_HMAC_SHA1,                 /* authentication func type    */
+        20,                             /* auth key length in octets   */
+        10,                             /* auth tag length in octets   */
+        sec_serv_conf_and_auth          /* security services flag      */
+    },
+    NULL,
+    (srtp_master_key_t **)test_256_keys,
+    2,    /* indicates the number of Master keys          */
+    NULL, /* indicates that EKT is not in use             */
+    128,  /* replay window size                           */
+    0,    /* retransmission not allowed                   */
+    NULL, /* no encrypted extension headers               */
+    0,    /* list of encrypted extension headers is empty */
+    NULL
+};
+
+// clang-format off
+uint8_t ekt_test_key[16] = {
+    0x77, 0x26, 0x9d, 0xac, 0x16, 0xa3, 0x28, 0xca,
+    0x8e, 0xc9, 0x68, 0x4b, 0xcc, 0xc4, 0xd2, 0x1b
+};
+// clang-format on
+
+#include "ekt.h"
+
+// clang-format off
+srtp_ekt_policy_ctx_t ekt_test_policy = {
+    0xa5a5,                     /* SPI */
+    SRTP_EKT_CIPHER_AES_128_ECB,
+    ekt_test_key,
+    NULL
+};
+// clang-format on
+
+const srtp_policy_t hmac_only_with_ekt_policy = {
+    { ssrc_any_outbound, 0 }, /* SSRC */
+    {
+        SRTP_NULL_CIPHER, /* cipher type                 */
+        0,                /* cipher key length in octets */
+        SRTP_HMAC_SHA1,   /* authentication func type    */
+        20,               /* auth key length in octets   */
+        4,                /* auth tag length in octets   */
+        sec_serv_auth     /* security services flag      */
+    },
+    {
+        SRTP_NULL_CIPHER, /* cipher type                 */
+        0,                /* cipher key length in octets */
+        SRTP_HMAC_SHA1,   /* authentication func type    */
+        20,               /* auth key length in octets   */
+        4,                /* auth tag length in octets   */
+        sec_serv_auth     /* security services flag      */
+    },
+    NULL,
+    (srtp_master_key_t **)test_keys,
+    2,                /* indicates the number of Master keys          */
+    &ekt_test_policy, /* indicates that EKT is not in use             */
+    128,              /* replay window size                           */
+    0,                /* retransmission not allowed                   */
+    NULL,             /* no encrypted extension headers               */
+    0,                /* list of encrypted extension headers is empty */
+    NULL
+};
+
+/*
+ * an array of pointers to the policies listed above
+ *
+ * This array is used to test various aspects of libSRTP for
+ * different cryptographic policies.  The order of the elements
+ * matters - the timing test generates output that can be used
+ * in a plot (see the gnuplot script file 'timing').  If you
+ * add to this list, you should do it at the end.
+ */
+
+// clang-format off
+const srtp_policy_t *policy_array[] = {
+    &hmac_only_policy,
+    &aes_only_policy,
+    &default_policy,
+#ifdef GCM
+    &aes128_gcm_8_policy,
+    &aes128_gcm_8_cauth_policy,
+    &aes256_gcm_8_policy,
+    &aes256_gcm_8_cauth_policy,
+#endif
+    &null_policy,
+    &aes_256_hmac_policy,
+    &hmac_only_with_ekt_policy,
+    NULL
+};
+// clang-format on
+
+const srtp_policy_t wildcard_policy = {
+    { ssrc_any_outbound, 0 }, /* SSRC */
+    {
+        /* SRTP policy */
+        SRTP_AES_ICM_128,               /* cipher type                 */
+        SRTP_AES_ICM_128_KEY_LEN_WSALT, /* cipher key length in octets */
+        SRTP_HMAC_SHA1,                 /* authentication func type    */
+        16,                             /* auth key length in octets   */
+        10,                             /* auth tag length in octets   */
+        sec_serv_conf_and_auth          /* security services flag      */
+    },
+    {
+        /* SRTCP policy */
+        SRTP_AES_ICM_128,               /* cipher type                 */
+        SRTP_AES_ICM_128_KEY_LEN_WSALT, /* cipher key length in octets */
+        SRTP_HMAC_SHA1,                 /* authentication func type    */
+        16,                             /* auth key length in octets   */
+        10,                             /* auth tag length in octets   */
+        sec_serv_conf_and_auth          /* security services flag      */
+    },
+    test_key,
+    NULL,
+    0,
+    NULL,
+    128,  /* replay window size                           */
+    0,    /* retransmission not allowed                   */
+    NULL, /* no encrypted extension headers               */
+    0,    /* list of encrypted extension headers is empty */
+    NULL
+};
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/test_srtp.c b/trunk/3rdparty/libsrtp-2-fit/test/test_srtp.c
new file mode 100644
index 000000000..0cea1f3c3
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/test_srtp.c
@@ -0,0 +1,185 @@
+/*
+ * test_srtp.c
+ *
+ * Unit tests for internal srtp functions
+ *
+ * Cisco Systems, Inc.
+ *
+ */
+
+/*
+ *
+ * Copyright (c) 2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+/*
+ * libSRTP specific.
+ */
+#include "../srtp/srtp.c" // Get access to static functions
+
+/*
+ * Test specific.
+ */
+#include "cutest.h"
+
+/*
+ * Standard library.
+ */
+
+/*
+ * Forward declarations for all tests.
+ */
+
+void srtp_calc_aead_iv_srtcp_all_zero_input_yield_zero_output(void);
+void srtp_calc_aead_iv_srtcp_seq_num_over_0x7FFFFFFF_bad_param(void);
+void srtp_calc_aead_iv_srtcp_distinct_iv_per_sequence_number(void);
+
+/*
+ * NULL terminated array of tests.
+ * The first item in the array is a char[] which give some information about
+ * what is being tested and is displayed to the user during runtime, the second
+ * item is the test function.
+ */
+
+TEST_LIST = { { "srtp_calc_aead_iv_srtcp_all_zero_input_yield_zero_output()",
+                srtp_calc_aead_iv_srtcp_all_zero_input_yield_zero_output },
+              { "srtp_calc_aead_iv_srtcp_seq_num_over_0x7FFFFFFF_bad_param()",
+                srtp_calc_aead_iv_srtcp_seq_num_over_0x7FFFFFFF_bad_param },
+              { "srtp_calc_aead_iv_srtcp_distinct_iv_per_sequence_number()",
+                srtp_calc_aead_iv_srtcp_distinct_iv_per_sequence_number },
+              { NULL } /* End of tests */ };
+
+/*
+ * Implementation.
+ */
+
+void srtp_calc_aead_iv_srtcp_all_zero_input_yield_zero_output()
+{
+    // Preconditions
+    srtp_session_keys_t session_keys;
+    v128_t init_vector;
+    srtcp_hdr_t header;
+    uint32_t sequence_num;
+
+    // Postconditions
+    srtp_err_status_t status;
+    const v128_t zero_vector;
+    memset((v128_t *)&zero_vector, 0, sizeof(v128_t));
+
+    // Given
+    memset(&session_keys, 0, sizeof(srtp_session_keys_t));
+    memset(&init_vector, 0, sizeof(v128_t));
+    memset(&header, 0, sizeof(srtcp_hdr_t));
+    sequence_num = 0x0UL;
+
+    // When
+    status = srtp_calc_aead_iv_srtcp(&session_keys, &init_vector, sequence_num,
+                                     &header);
+
+    // Then
+    TEST_CHECK(status == srtp_err_status_ok);
+    TEST_CHECK(memcmp(&zero_vector, &init_vector, sizeof(v128_t)) == 0);
+}
+
+void srtp_calc_aead_iv_srtcp_seq_num_over_0x7FFFFFFF_bad_param()
+{
+    // Preconditions
+    srtp_session_keys_t session_keys;
+    v128_t init_vector;
+    srtcp_hdr_t header;
+    uint32_t sequence_num;
+
+    // Postconditions
+    srtp_err_status_t status;
+
+    // Given
+    memset(&session_keys, 0, sizeof(srtp_session_keys_t));
+    memset(&init_vector, 0, sizeof(v128_t));
+    memset(&header, 0, sizeof(srtcp_hdr_t));
+    sequence_num = 0x7FFFFFFFUL + 0x1UL;
+
+    // When
+    status = srtp_calc_aead_iv_srtcp(&session_keys, &init_vector, sequence_num,
+                                     &header);
+
+    // Then
+    TEST_CHECK(status == srtp_err_status_bad_param);
+}
+
+/*
+ * Regression test for issue #256:
+ * Srtcp IV calculation incorrectly masks high bit of sequence number for
+ * little-endian platforms.
+ * Ensure that for each valid sequence number where the most significant bit is
+ * high that we get an expected and unique IV.
+ */
+void srtp_calc_aead_iv_srtcp_distinct_iv_per_sequence_number()
+{
+#define SAMPLE_COUNT (3)
+    // Preconditions
+    // Test each significant bit high in each full byte.
+    srtp_session_keys_t session_keys;
+    srtcp_hdr_t header;
+    v128_t output_iv[SAMPLE_COUNT];
+    uint32_t sequence_num[SAMPLE_COUNT];
+    v128_t final_iv[SAMPLE_COUNT];
+    size_t i = 0;
+    memset(&output_iv, 0, SAMPLE_COUNT * sizeof(v128_t));
+    sequence_num[0] = 0xFF;
+    sequence_num[1] = 0xFF00;
+    sequence_num[2] = 0xFF0000;
+
+    // Postconditions
+    memset(&final_iv, 0, SAMPLE_COUNT * sizeof(v128_t));
+    final_iv[0].v8[11] = 0xFF;
+    final_iv[1].v8[10] = 0xFF;
+    final_iv[2].v8[9] = 0xFF;
+
+    // Given
+    memset(&session_keys, 0, sizeof(srtp_session_keys_t));
+    memset(&header, 0, sizeof(srtcp_hdr_t));
+
+    // When
+    for (i = 0; i < SAMPLE_COUNT; i++) {
+        TEST_CHECK(srtp_calc_aead_iv_srtcp(&session_keys, &output_iv[i],
+                                           sequence_num[i],
+                                           &header) == srtp_err_status_ok);
+    }
+
+    // Then all IVs are as expected
+    for (i = 0; i < SAMPLE_COUNT; i++) {
+        TEST_CHECK(memcmp(&final_iv[i], &output_iv[i], sizeof(v128_t)) == 0);
+    }
+#undef SAMPLE_COUNT
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/util.c b/trunk/3rdparty/libsrtp-2-fit/test/util.c
new file mode 100644
index 000000000..2abc28e7f
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/util.c
@@ -0,0 +1,212 @@
+/*
+ * util.c
+ *
+ * Utilities used by the test apps
+ *
+ * John A. Foley
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2014-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#include "config.h"
+#include "util.h"
+
+#include <string.h>
+#include <stdint.h>
+
+/* include space for null terminator */
+char bit_string[MAX_PRINT_STRING_LEN + 1];
+
+static inline int hex_char_to_nibble(uint8_t c)
+{
+    switch (c) {
+    case ('0'):
+        return 0x0;
+    case ('1'):
+        return 0x1;
+    case ('2'):
+        return 0x2;
+    case ('3'):
+        return 0x3;
+    case ('4'):
+        return 0x4;
+    case ('5'):
+        return 0x5;
+    case ('6'):
+        return 0x6;
+    case ('7'):
+        return 0x7;
+    case ('8'):
+        return 0x8;
+    case ('9'):
+        return 0x9;
+    case ('a'):
+        return 0xa;
+    case ('A'):
+        return 0xa;
+    case ('b'):
+        return 0xb;
+    case ('B'):
+        return 0xb;
+    case ('c'):
+        return 0xc;
+    case ('C'):
+        return 0xc;
+    case ('d'):
+        return 0xd;
+    case ('D'):
+        return 0xd;
+    case ('e'):
+        return 0xe;
+    case ('E'):
+        return 0xe;
+    case ('f'):
+        return 0xf;
+    case ('F'):
+        return 0xf;
+    default:
+        return -1; /* this flags an error */
+    }
+    /* NOTREACHED */
+    return -1; /* this keeps compilers from complaining */
+}
+
+uint8_t nibble_to_hex_char(uint8_t nibble)
+{
+    char buf[16] = { '0', '1', '2', '3', '4', '5', '6', '7',
+                     '8', '9', 'a', 'b', 'c', 'd', 'e', 'f' };
+
+    return buf[nibble & 0xF];
+}
+
+/*
+ * hex_string_to_octet_string converts a hexadecimal string
+ * of length 2 * len to a raw octet string of length len
+ */
+int hex_string_to_octet_string(char *raw, char *hex, int len)
+{
+    uint8_t x;
+    int tmp;
+    int hex_len;
+
+    hex_len = 0;
+    while (hex_len < len) {
+        tmp = hex_char_to_nibble(hex[0]);
+        if (tmp == -1) {
+            return hex_len;
+        }
+        x = (tmp << 4);
+        hex_len++;
+        tmp = hex_char_to_nibble(hex[1]);
+        if (tmp == -1) {
+            return hex_len;
+        }
+        x |= (tmp & 0xff);
+        hex_len++;
+        *raw++ = x;
+        hex += 2;
+    }
+    return hex_len;
+}
+
+char *octet_string_hex_string(const void *s, int length)
+{
+    const uint8_t *str = (const uint8_t *)s;
+    int i;
+
+    /* double length, since one octet takes two hex characters */
+    length *= 2;
+
+    /* truncate string if it would be too long */
+    if (length > MAX_PRINT_STRING_LEN) {
+        length = MAX_PRINT_STRING_LEN;
+    }
+
+    for (i = 0; i < length; i += 2) {
+        bit_string[i] = nibble_to_hex_char(*str >> 4);
+        bit_string[i + 1] = nibble_to_hex_char(*str++ & 0xF);
+    }
+    bit_string[i] = 0; /* null terminate string */
+    return bit_string;
+}
+
+static const char b64chars[] = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
+                               "abcdefghijklmnopqrstuvwxyz0123456789+/";
+
+static int base64_block_to_octet_triple(char *out, char *in)
+{
+    unsigned char sextets[4] = { 0 };
+    int j = 0;
+    int i;
+
+    for (i = 0; i < 4; i++) {
+        char *p = strchr(b64chars, in[i]);
+        if (p != NULL) {
+            sextets[i] = p - b64chars;
+        } else {
+            j++;
+        }
+    }
+
+    out[0] = (sextets[0] << 2) | (sextets[1] >> 4);
+    if (j < 2) {
+        out[1] = (sextets[1] << 4) | (sextets[2] >> 2);
+    }
+    if (j < 1) {
+        out[2] = (sextets[2] << 6) | sextets[3];
+    }
+    return j;
+}
+
+int base64_string_to_octet_string(char *out, int *pad, char *in, int len)
+{
+    int k = 0;
+    int i = 0;
+    int j = 0;
+
+    if (len % 4 != 0) {
+        return 0;
+    }
+
+    while (i < len && j == 0) {
+        j = base64_block_to_octet_triple(out + k, in + i);
+        k += 3;
+        i += 4;
+    }
+    *pad = j;
+    return i;
+}
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/util.h b/trunk/3rdparty/libsrtp-2-fit/test/util.h
new file mode 100644
index 000000000..d04b279b3
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/util.h
@@ -0,0 +1,53 @@
+/*
+ * util.h
+ *
+ * Utilities used by the test apps
+ *
+ * John A. Foley
+ * Cisco Systems, Inc.
+ */
+/*
+ *
+ * Copyright (c) 2014-2017, Cisco Systems, Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *   Redistributions of source code must retain the above copyright
+ *   notice, this list of conditions and the following disclaimer.
+ *
+ *   Redistributions in binary form must reproduce the above
+ *   copyright notice, this list of conditions and the following
+ *   disclaimer in the documentation and/or other materials provided
+ *   with the distribution.
+ *
+ *   Neither the name of the Cisco Systems, Inc. nor the names of its
+ *   contributors may be used to endorse or promote products derived
+ *   from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+ * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+#ifndef SRTP_TEST_UTIL_H
+#define SRTP_TEST_UTIL_H
+
+#define MAX_PRINT_STRING_LEN 1024
+
+int hex_string_to_octet_string(char *raw, char *hex, int len);
+char *octet_string_hex_string(const void *s, int length);
+int base64_string_to_octet_string(char *raw, int *pad, char *base64, int len);
+
+#endif
diff --git a/trunk/3rdparty/libsrtp-2-fit/test/words.txt b/trunk/3rdparty/libsrtp-2-fit/test/words.txt
new file mode 100644
index 000000000..fe99c2d46
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/test/words.txt
@@ -0,0 +1,250 @@
+abducing
+acidheads
+acidness
+actons
+admixtures
+affidavit
+agelastic
+alated
+alimentary
+alleviated
+allseed
+annexure
+arragonite
+atonements
+autacoid
+axe
+axon
+ayres
+beathing
+blazonry
+bottom
+braising
+brehon
+brindisi
+broadcasts
+buds
+bulnbulns
+bushcraft
+calamander
+calipee
+casing
+caveat
+chaffings
+citifies
+clappers
+claques
+clavate
+colonial
+colonials
+commonalty
+compares
+consequent
+consumed
+contango
+courtierly
+creamery
+cruddiest
+cue
+cultish
+cumin
+cyclus
+dahlias
+dentitions
+derailers
+devitrify
+dibs
+diphysite
+disjunes
+drolleries
+dubitated
+dupion
+earliness
+eductor
+elenctic
+empresses
+entames
+epaulettes
+epicanthic
+epochal
+estated
+eurhythmic
+exfoliated
+extremity
+fayence
+figgery
+flaming
+foes
+forelays
+forewings
+forfeits
+fratches
+gardened
+gentile
+glumpish
+glyph
+goatherd
+grow
+gulden
+gumming
+hackling
+hanapers
+hared
+hatters
+hectare
+hedger
+heel
+heterodox
+hidden
+histologic
+howe
+inglobe
+inliers
+inuredness
+iotacism
+japed
+jelled
+jiffy
+jollies
+judgeship
+karite
+kart
+kenophobia
+kittens
+lactarian
+lancets
+leasable
+leep
+leming
+licorice
+listing
+lividly
+lobectomy
+lysosome
+madders
+maderizing
+manacle
+mangels
+marshiest
+maulstick
+meliorates
+mercy
+mikados
+monarchise
+moultings
+mucro
+munnions
+mystic
+myxoedemic
+nointing
+nong
+nonsense
+ochidore
+octuor
+officering
+opaqued
+oragious
+outtell
+oxeye
+pads
+palamae
+pansophy
+parazoa
+pepsines
+perimetric
+pheasant
+phonotypy
+pitarah
+plaintful
+poinders
+poke
+politer
+poonces
+populism
+pouty
+praedial
+presence
+prompter
+pummelled
+punishing
+quippish
+radicality
+radiuses
+rebuffing
+recorded
+redips
+regulators
+replay
+retrocedes
+rigors
+risen
+rootstocks
+rotenone
+rudenesses
+ruggedest
+runabout
+ruthfully
+sagacious
+scapes
+sclera
+sclerotium
+scumbering
+secondi
+serial
+shampoo
+showed
+sights
+sirenised
+sized
+slave
+socle
+solidness
+some
+spetches
+spiels
+squiring
+staminode
+stay
+stewpot
+stunsails
+subhumid
+subprogram
+supawn
+surplusage
+swimming
+swineherd
+tabun
+talliths
+taroks
+tensed
+thinnings
+three
+tipper
+toko
+tomahawks
+tombolos
+torpefy
+torulae
+touns
+travails
+tsarist
+unbeseems
+unblamably
+unbooked
+unnailed
+updates
+valorise
+viability
+virtue
+vulturns
+vulvate
+warran
+weakness
+westernise
+whingeings
+wrenching
+written
+yak
+yate
+yaupon
+zendiks
diff --git a/trunk/3rdparty/libsrtp-2-fit/timing b/trunk/3rdparty/libsrtp-2-fit/timing
new file mode 100644
index 000000000..66b00c452
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/timing
@@ -0,0 +1 @@
+# timing.plt
# 
# gnuplot script file for plotting the output generated by srtp_driver -t
# 
# David A. McGrew
# Cisco Systems, Inc.
#
set xrange [0:2500]
set term pict "Times-Roman" 9
#
# plot authentication-only data
#
set title "Authentication Only"
set ylabel "Megabits per second"
set xlabel "Octets in packet"
set yrange [0:2000]
set output "plot-auth.pict"
plot "timing.dat" index 0 title "HMAC SHA1" with lines, "timing.dat" index 1 title "TMMH/AES" with lines, "timing.dat" index 2 title "TMMH/SEAL" with lines
#
# plot encryption-only data
#
set title "Encryption Only"
set ylabel "Megabits per second"
set xlabel "Octets in packet"
set output "plot-enc.pict"
set yrange [0:1200]
plot "timing.dat" index 3 title "SEAL" with lines, "timing.dat" index 4 title "AES ICM" with lines
#
# plot encryption and authentication data
#
set title "Encryption and Authentication"
set ylabel "Megabits per second"
set xlabel "Octets in packet"
set yrange [0:1000]
set output "plot-enc-auth.pict"
plot "timing.dat" index 5 title "TMMH/SEAL" with lines, "timing.dat" index 6 title "TMMH/AES" with lines, "timing.dat" index 7 title "HMAC/AES" with lines
\ No newline at end of file
diff --git a/trunk/3rdparty/libsrtp-2-fit/undos.sh b/trunk/3rdparty/libsrtp-2-fit/undos.sh
new file mode 100755
index 000000000..db1206496
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/undos.sh
@@ -0,0 +1,10 @@
+#!/bin/sh
+# 
+# usage: undos <file>
+# 
+# strips CRs from a file - useful when moving DOS-created files
+# onto UN*X machines
+
+cat $1 | tr -d "\r" > $1.tmp
+mv $1.tmp $1
+
diff --git a/trunk/3rdparty/libsrtp-2-fit/update.sh b/trunk/3rdparty/libsrtp-2-fit/update.sh
new file mode 100755
index 000000000..595b647f3
--- /dev/null
+++ b/trunk/3rdparty/libsrtp-2-fit/update.sh
@@ -0,0 +1,15 @@
+#!/bin/sh
+#
+# update.sh
+#
+# update copyright dates in files
+
+a=`find . -name "*.[ch]"`
+for x in $a; do 
+    sed 's/(c) 2001-2005/(c) 2001-2006/' $x > $x.tmp; 
+    mv $x.tmp $x; 
+done
+
+
+
+ 
diff --git a/trunk/3rdparty/libsrtp-2.0.0.zip b/trunk/3rdparty/libsrtp-2.0.0.zip
deleted file mode 100644
index e0f7c414dc96b67f0c362936ee76038a5fd86bee..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 359773
zcmZs>1F$H;uP1zL+rG!PZQHhO+cxg8ZQHhO+dk*JyKmqBtF5<F)l*Y5l};v|q?7zw
zUJ4il3gCZT8Tx|a|NG(p+~5Ep0jw<yogAI*X&7ngY3b=yltBRi51{K+<^K;6#Q!EL
zSBj$~0|WrD00IEO_#Z^HW){vCX0~>YCjTM#iRY06W`GHO{fZRV$s1G=zoIsw5)2Hu
zKXTgYoQoH(uf3-Ea!u@1wJeGxRQ+1>{jOiIOI0umEL-WNWLMgW(quzS(L8^>$&!EC
z;XHs5GT_?$Bkl?|<GL=`p9@UF$T@{tg<mx)>Zf5h5b^BVdN}&m;_qbYpmnATq0;==
zbFJBcLY@}qe1>GNLZo-}pMWG`nxJQ%N*WiV+MPXq6Xs{cKyr*fU)<0v5bW^-d#^2a
z+Gn+TXz>ZCB@~itNAFwa=1!1sYP3TQfCp&(2B7mJ0g6_MJc<=WU=2?wPV?CW??%V?
z<Q|T%jL7bbFGo~kz}(wXw3}aK3y%IlnsA)APVLu>b?mm20<}<5<>xajd1v|+3Vj=N
zSi${U{)-Qt%fG<?x0W%;R*S9vEluOUf%!kR?CfaZYT-odVPpLtHM>MHzzx#F0K0Vy
zDzTP!`W0408Ym~gOoBap<&DqfpA7-WMZZ5pV_QIwYh);s5CebiR7lSHr^oYM6b!)N
zxm7NoI3$b$_II~9WIgxWYSA=8(?Z`o{g~#ml8nsK{$cQ}Ah9z<{CIT-`fpMH%Zh3S
zj^G&oiTS?<>i-Z`NL)ZxOhoBFVhWiX*qWJG+nGT@{ckgaf+8T0u>EH=2G#_QCe|hf
zP9_9)wgmsa5&Zi}3tK3t|K|2z=I5|mdBXq<03ZwY|KcVsAtWNJB=R3_Da!qho2&>t
zY<l%cN{I&7O<{N&$ijk1rsRQu{8XF^Bq&CrB-|jzalbvC1SV82UT4wd0&Cl?x7|AD
zFO%SJ574~vpQCBx-|pde<)1LUe%~LPwQn!rN3_m(Pg3Eo5SZcho%znLoC1>Y^y~Vi
zWSga4p2^ob;Ypo*Vy9x}qj)p@f!Ks^k4x*$PPZejo&klq5HIV);CD(NPp9JKLATrU
zE;I(lbFyf7*UW7gHt=ytevUkN2SV8Q(?m1pN4eW?z?^(9v5`Re^4t1{x#+fc@UDPg
z_kxv=Jfyio!V>i&9UxmfpJY%pH&YmeaW##Yq-_9X!Nkd}BNBVFRdr@=mfQNJS-&NL
zG_}_4@&fhWnCIOM8Bux^-+ru2eb|50n_haj;9aAyO>A4)k>U~{Ls>V*n@jI5zF`u<
z(kyF}wI!;mq@I%*TY~;rI{&0K3*y>&SkTgjMy)u2y(;lj(%IWt6w9ZAbG^7*S$M^7
z>=lNrGiXoaaq#Js;W2P}p?op$E}Bwbg6+?{Hd(8mn?sXnHah6GA=IE|RL|udZ(L;@
z_@8Qyb1B>bse;2ej+yw#8#c1krI_@mfT^OoYhnITjY*J1o)Rmme=~}#zX161s%~2$
zKn>T?ff^bFi&PP{k9kq{SVt+?F!slgmk=T-UV{wE5H&4-{*;WjT60LTyQk8MP)rxH
zY)2~@a0O`?Nrka2i5|;Jq$tByk(v&8LKQsygUqG7MF4&U{S~VQ_LQ3P=UMs}=N5(d
zs99g#;b=njPi|-ajv#qXR`i5Ovo~SN83`i|(;UkzDDInEY(qMyF?7|*E|&BF0gCk~
zEBE-@(@sI|S3kpX%mJ5ST*;YfaSVOTeqBNX!9;LDdj~Sds-FObi(~CP_aJX*@k@B%
ziUG!Kr6@Ebq6K!1vJy67<!o?6idPflIAaxU;(mi<!#qPdT(FdHk%w{Ju49*)vAtsq
z&4@WOJ=<!=8tON*nqmGymZG(Lic_Q{&<6B0GJHvJ2@V6>F4NT($$Jycm<_KkjdSV=
zv>|L&n^1b7eyX=N6iq6wB;3iS3Bc1~-|BT(FW~>}Y)$n$Og{hi3x4ANR}_*lure{V
zur{H!u>Ft24P#k3ZL;4qzEic8bJaU0aCf)M&A5!#Br*3)4<eg&cCXvAGzf22m?%(5
zdR%R7+41=okxV3JH!aS1l%PTe5&$3(0Gyz9Kde|Iibm7AOM*T=CeJfVk$Z^f&MV#W
z!kmretNnZ?^8gs*K;<s3CylL%;w(yBae?$@q|s`Sf;p;Yj$$HXs_>mbQhw?t3g_RN
z5Q0O<0_m4B%?^^A_X7lz|ApQ=zKvZ)#N_u0F4FxF9+W|<hmC5a*Hs*1s0Y0bPf2Ug
zr|ZCHpu2HaY}tR6mgoH)_<|7@WE@?J0-nGVz|CNb!(c=XCXyQTh@Dbk(Gq8-@fXXs
zeotE(R-Ah%70U>w6e;x<>LxFUr90)Kf<zDg;^cC&D=}MbT>s-E6(;H?PAiH(vvuyy
zJe<&=)aU1M8*5iHOLkj1kHkzel%cz&{p&@brc&Vmy_~lL84wV#0VMeJQqFr0lhJ$d
z1dzvISv%+GG>9|GL4eEWBgwckI^Tm&N|o9nfVI=uw8{19ZmRH^^RorN=EFBrSQgu3
zYB5#NeTGB_dlENmM3_dGH~fuGP*3uZlQRn4Al^3ZV)X!~=s?!A`FKKf-+<aAd;xA?
zsUZnV|Jy&DN~}7v1qX?KCAZ<_1j7_vXrQ4dwyg7!WivqyHz3l!+}WB=nu9>y=X3K?
zBifsXH==xPVDNGV#~Py4{<<KKiGUf$WzRZ#NSL7=Cr8#g*GT61Ik*=0;18H*+=;3x
zMpkNe%0v>mONc2~dYV@F%9PicE;~|}3f33@HSx@H<oF=_au40T2-M%>4B)Og)!CjY
zOFP?F*3o^x7WnHx@kNPQr&2|<Ss`ND>ZX(z{X|qQDJa@Hf!~)|xJlTKt3wr>Z<()Z
z>Q*=@1#*6ZpaMx24wg5C;jP?asC*P9@+RI7j(HQY!8`>A>H<KD`)+4|a|eDr>JM?l
zC>t@r?#Er?gh&qW##D%J5(IpX(jm<bqAE<f2MnXF9W!z>-RU=7WJJL!#K@V|o^-Fm
zVf<o{xj~O3UrjjfexN#6Q7T%L#yk@F6YrfKdqXQNC@~=q2%u0+C?L{?x^@N^!AqIx
zyo`;+evDP2DZ~g~Oc8DwfD<}y<Do*|Y25wf(FKuasoGi!q4DjQC+Hw2=0^N4=#~$y
zs*0JS7j8Bxu><4J*qS9}S@n4qqN{!`U-!R&yMK!RM&<2CMp;8}CnxE!$C4tCg!9hO
zTV8t2|Il!@fW~#ha^1jDEv?s{o+ibuvh_jgL-+6yp_>o3-~iVg*Fi*q6iOz--u=j@
z2?xB07r5?&Ca!VMT6Y}|zB`of5k%tDinMnYfqtb$Sw*6`p9^8Enk?4YZI|ppwvavn
zhHb0^$F1>fMYU<|ZTi?pcvNW%^0Sm+JM_#Te?*`-gms6vUq4QRP3`D1(CJ$ofZmLF
zIS*nKl#3%5wXCzi-QPGNas$rz>Y$4Ct(Wt;yy%V3Q9ljB)WAC%pLHpdmjn`>XGeNL
z*e0yP;m@tc#-Yc*%-Dm!H+{-kIze$KtzN9y7`k|A4ys1PP*bVVgawF2A)q!xAc*U+
zLFMtm?E)3rxlA&=SGooOX)Lm6B8iSoAX6dKXaWO9Ca0NEkr>0F)LpzrILEu5Cj{7`
z7Gp4@0t^;Mo<qH;leG=I;_}RDBiiZ%5n{v8meoT6eFT8tzbgT)g4gylSf?#IX2T~h
z0{H(P5lAh5<VAvf0=TggR;=Qv@~Az-q?{YDFK(p?wm_6PtXx6Tckrl>7u4nfQfu@j
z3}pHRumG0Hf#e`IJFE%5-&K+uNKs4@HBW`SOdJV~Ed`MxI586T$*8+4m_}%VYcZOG
zh8ky8GbQ&BvBV2x4~-r};njD;xSQ`=;0s6}l%9NS&qAmvgqpx$Bx8$Ob{kW`giEq%
zt1q^&HCj%rlHRwQMs3`1?g#$JUZ>+Vy(IvDj6#O;G2ng4g3!uP8)`eY!c5Hn-3u0h
zh^#5*3F1Mf5n>9wT@n@o9m%$wQcIOo5F%|V0WL_|uZH2!9^wM>b*4C+KW<}$#60wp
zZtFpRp8!VVRn3Al1n@a8je1A(q1E|RmYbL4sx{(C8@5pZjOkvF1E^d=gkX5DjWV9c
zh1{JvlDU!a`e`K|q;@I;3wbH3{o@?$jN4L!aA;>Im1*1OjhD>y+~VRD;vST_Z0o>S
zrtb9Bpu_w~9Ub|SC}0d5i}R5p)53M1jb7UFI2*Ezg?^?Rk!1*nb?}?JUaKLM#RIEp
zQ$1tJL(RabX0b!3a`cF%c4~rsD)zWkx68>jau>H(w7munOIG)b;Ijy6=LQ!Py7-ne
z+5DL%(E0c-3(e<51>>rR&F3GG3T;yNIr0t&QxqT6CWY2otrPv-XQI>J{oK?1XTXiy
z5#s^HO-=*FI}8;Q>n@$c8H)jaVV61X+&}?*X}MRZf-*q4&YX|~X$H_3)>>&fS%w(&
zW0QcodIOLr{{9p2JHs>!WG>Y{VNqm)U<nA|8{X%x9JjwN7!|@XF^wf&(w!o{*YF3+
z$witYfG>wvA>N9{JZ^Lz*=LWU313j$%{psX-K<dr?T)*#ZVGnE#(-MQK0myYlj0h3
zs{GKK3B3MIF#nZ0V+pM4te*wR-~?KOClRj%o5oBA1CyjC-PbZdOkzl2^TGwRpKwJ<
z8Drh50;K^9CO1Homf&7{gkxrOI?$P9%ty4IE?%N2l`%mKa|IRDsN&|V)Sw{Ik-)Jm
zm5T(V6c!8h)f5&_y{|fX5vQ#VVuI<^yW5l+aE-qw3#T#+RVABQPkYaJ;LhK9NoYdh
zckF#z?>iu-fPw;SYnEX(k%76+&RiN?!C!%AU0QB-xloz`o}FQ#l@i(iUZDC6*8f6B
zgi%H$r%stA!DV@288tjsSx9jnR2O=dV<p+lO<nrtrQ)M#Sq<h&fR<7mmoGo2p?!ix
z?Xz5|!-%mYXP5Ie<g&ur&cL)nBof?s`m343@fU=(IwY9-y*W{VSWloL19gRQZo5;l
z@~Ql((a3Q@(Eau42l}Lv`_+R;WZ^63Zx{2tYDF+kkM2h(%ui|S)81Z)CbQIK3evtN
z;|^GruTjD_^M?r`K^&D7h#YiQ&udknn?^Gs+G*+1B;xtnIan@GPW@S}yu8zThdeA%
zaq_~uIppH7Dr9Mu*_J_f`$P#$C6g7Zmg>>Jw1`;DR~Z0;Mjf?A0e%aYN3gUC=Ml1P
zT(-1P2Z*xjI&bs&2O3F<rU4Dz-#mqEggcr`HkzdZ05mNxBw0spSc1$^km5TbDcBb*
zmu?*CCu}n;)yRhJIyG1ACOdwj*D6jAsk~R}WjWR#eJLiKE~?~KU`xTdZYm+lG^FY)
z3r42(3YbZylwn!}%*hRu4Sx0Z;~Q&;BfGs(`X<G6bCRj&U2FtJEjYP#rLS!gMV%Ke
zc~*_}Z$4@i5rht-Chsf4;{aZ=ADE$b)Wh9x5o@n|JjD!`7Yx%!$xSRSc&vMUSBRgU
zLcuMq&f>Js<`C&vhSw#s5oOI4xW9WKA@K9<ui#+0(mYf=T_fA+k>CHFydp668(_l#
z0N7#!0HFMjx>Qj_Kv?GgFBGRW-sP|*(0($0sB%o>4dcA^fiM`uRshMOSkvqqHdKP;
z+dHjS=T?<nfO8K0c5k~YY&YZ0nLB%_nE*S#FSbWtCzx<oRTq~>;g>S@-O_5F1huk9
zGie(cmosLlR5FO-XqU1j%o+1q@2x6t3!M%R0!^*d&ZnNw7~{Yd(CF^xcMX5c5zsYI
zMDW!{6v_{@nwOL}fTWv<Q<ByV<c0$)Qc5)B#VeciGNi@ut0#0c)*^Y=3MdbVU^8EW
zf0S%*np`NK$z+;IIqJ!+MYH7^<MNa|kSH8o#;v7$iq>i-E7UbrYNVxGH%>Tl5qz{Q
zN+}laC67l;=8!T;M6?@IISG@*s2`B*><bE@E74L0jpjjug&;D>MlRYYuQr@WR8vXu
zX~)~l!!Up17CGmI%qku0ka$9rEKgMb?br0E|MJuVxFHMd{@P-RVJn@n^gcKH{_OeJ
zf&Lc2DP`S32K~Yt6xk`IY1X;|*hNMS5Eee|E=!wd#QydwfAEXMia;b43-i)7b@c}N
zay){rwDwBni)If*kst%@Bk0B>4BwK1qtV!!@n3JL+Fc(a6(@{G(Dt>=h5~Y>*36!d
zM;g@BR6!%OWUK76Bd-cX3e%BUj&Wui5bz$#SeJ;mIw^FKOte>=&pc#j&|6=>;zdWb
z9a1sE;G~shjZk~{k0JIKBfj}ZPl_jAoXi`UX37i6p>@vFqd)nY4eDer2OekI>U#>B
z?s(QR?omU3Y-oJ7a35UM8Y+>{7XLon_IOf`1v+UbT%0V?&$|tttmkIaNM>`Tv6}53
zUR%GAq9AUWFe>FkWb+N#n#b~+NikEoSfg1<MzzsAheoVR=F&l4?~+F0mMhBq^4C;2
zYvgUI^_NZ-(RVr|!?e5mMSSQwQ4l2m-CTl<l@?c-!~2t~woUHYF4}}vAzQhlx+V{-
zn=foh<&G`a&x1JI+!S=SD<Z=H75v8ut&9W8iHa`E(SKF-VrJ1=IKV+e4Y6_%g%Fn@
zVBGsd9s*O%XF^82{&3MHZbg7un!Y`@L`{uNZ4v&qmRGmO%jfapVcNNKw@x$&6*@y`
z+*<}zSp6XJ1gbW8QCkcLSe--93Ept@6YW@uZ!xxVknnaf8IvV43+jUB;*;u_zhIuL
z>F^|s#J$qcldsTEp_KZjndY#EQi_(^M4_~>U!fH}yEe^T2G_~aa{*k0`qoEGOp^jz
zY4kp~r}B}PyRgb3EC|^)3csp{N#vRc5B|XQ{+*a+C%wxT!S$~`of-O<J)Ga%;CTc*
z$77si5qTU+SPomho+a|`z{<u)eRDmE%`pupQm3O`t)go=)hkeY<_o!O^Mn^O224Ta
z`O(3(GdzlSazx={uiQ>|&P<LoUyg`9L8;)=?D_K5!#CGoXjTPXGpBFih_mVA_or>^
zk6?|8v~=)@8hTiqElr+7TJXxx^7i9)<iay&wufS#XqkvE`@!z+yGTxt=@Rm5Tj{?M
z3^Xn!6{txcEq%9RM5PI_HG~3KRiRuf9)`X%f95nyC`Yts8<w~CY2BJil&kx9d-rH{
z45l16_dLLIuV8A?jnNt8BPe4Y&kru#hgC&oP_M2-)Q|wkhNJoON09K6f>{+bm}*79
z;HA(GxVh_Lx$`SR$V`CcTmxj39X{;`$@=*_yz-@#GgN@2xoKSH1khY2G=oF8V%W_z
zfPbVSP?v%jqe#oJ4zVi_GguejKooZJjlcl_BTOGc*P-zA2h~$T!P)6AAZsMB?1>lL
z=3${Xks4adoFc@^YP!QWAAawG9`Q1^-2r79-oln3Io6H1>xoihS5tLF3{}`$$j~yo
zaxL;Qn$5xC$w0sUqN{9H0iNAJdrg+wF#4IxK3ZLzg-M=X#m4&p2wB#&Df8<L!8%Bt
zJkd4t*U9I_*dZ`Laccs0;wTsfz30tSuLJp0Pi}7E*i<AMf#Ea9wP&{c5yjgh90Or}
z4Fu29c1Q8)04LCO@FX+83K_l)p>ZFAvoZ^dh^Wl>!>O~JvEf6EPPqpW`ds2xLzQq@
zif#O8>@=-{q_yKAN{QE}ehjNy5Ni6d!HD0578C{!c<*fFD(F)v@nLdT9-tKqT0xVb
zNWTtgeRAT<$2ZpgcK*iQ+5X`z#qWC{>r!3K{nXs)NAJDJy>s>OiGj!Ymi6(9VLh+F
zR{H4GrbDz$@e6k0GwGF$k(O1!ml*DuYnc@4v?~vioX1J9rH^jFItGe4Q~_KNK+fPw
zS+N&HSlbj&Ry0152UZ2DbRS)npg@gA1VQ691tN_e`s)^UT^`*qS94@Lt}jr+biKFN
zv$=WMMk_X)#qXmJ5CLNbTZqX00!jGPQVh?^%Q45j`?npoW*0!0H<yALn#v(H&Wm2m
ztFo}0$CvuNV*#ELFnTJU=YaOYdjI<DJWmPobes(we%D##!&|FEX-tM6=`8q%b}YN?
zO*Yp5rR`VhV4NeDD3Ndo-w__jGqraK5g>fxnSd^!Hb$~O$TinI*ciZ)A7{uJ=8AP&
zBf%@XM2~&2sBmx*FJ^`wj_~sCO;}V^emtwiJKB?MQRDadUCY`o-8h@{yeK=o+-Exl
z<*f2L32;t=%0Ng^?5&pC;N)DE9|j%@9w(}3Bpx}lg*&69!e-{q3OHh2S#D?UJ|Fk*
z?SP|!qyK6C=p5cSugc#vSQ4<ytIaXh?z@DVtHwJfH2_D9y%_qPB%;Do@bC8yOQ{r8
zqe}yNK?Y~a;V(6?ZuLC(rfyJc)!BDfBU8X=@|0bSpp#*u#BJ*EYv$p+H7~b5Gp<c<
zbef{$Q89VaY})UU5@PSB=?gbXBp74cYs1LT`}h1RD~aaBG<X7q*Vd;iww-hT<5zf#
zUyf`1`5%Vs+_|6h7deaH=oc~YH?{#jglK*Spm7N1LgbG_jVJJ+#J}=&j0Stw>_RK7
zP2d96JMS2+Jt;u!G}RN@cPOnS;Iq3w7;#Opxp88L!ZC89W}}bq=WkE$-kiK#@=^EX
zybB-J4xZj6VrE7z%$$mci%06yhxhaM<dM9c%V(au#OS*X#e1)I?PUroe}BM%-{WTP
zgcQ7jj@~%`tnlB&U3^f95PjHkX3T;Qy?Qfe=QIMMBQxwBPp<fnSKgm_yZ?LD9SEwV
zP9Ff8bbmg4e{|fg4p0IFW!6~fbmHnx&&z`y10S3Fm`MH|(|HM<$?aK-*X#E|5aSMS
zfRB6gG4>M?xAmJACu*iVgqm7qx<>+}-Zje#XNCK`dZyy+ewTLUp#QWA7tDXP)4ae%
z&9*?;i|kKe&uYzGcH454;-v2J_ZEIj<mA~9@V6#XxnMh56tAfZn+T{Y;<BqOjmpvg
z9;sB>*3`LS|FIZTzTBh@BhSm2zqmMrfyD?|L*QLdWC*}WJ2YF_nL6te*H$muW?oEY
zq0oQ)aA0F24xyiBP0$M0e!`8}Vm@#5Cd!@+=_LSm!K4Yr_I3?zQq^-gV?*fFQs)A@
zba5D#DTv90#qjCtC@J-xKmBcUKZY6nDS`Cb*hKG+wFtE@-M`V4DlKH;QUPG%2#bbJ
zn+&EaL@mxuGtp=aEXmHbPQP}B0lT?(8LgyRNxJzkP#}rlJFY8B?;6)EdT%l$c|2z6
zwssHaX)V0$@lL#l{EiULie<OgG2WtobrvqQaP-lzJ)%<^=D`HxWV52pOv@E#onK`I
zR1>-T09t~N*V6`Wvb1F!|GUq9rIQC^@of0!fw*fB05QTAO$MzhcU?5LcQY0GI_XfW
zx08BfxLV9MdsIAs>uW<-wk5M9q_TsTik0QV{1{qbld}6{MgH9fyfBuY;k4ud4oc78
z9pGnb+{I!eXLv9y;0aXE3<pACR0XPih5kJdt)icPtX|!&$0R->x(RrB76#Ezw2d42
zXra4-w^&1UuUHr+KGCIWPN!|=Sx>;+M5(a)ubpjaCXjj0ECh5l$%c`P5VFt@R8+DW
zF67MP;Lh98lh<r{gZDit2f*)<)U?}5peT0hhwmsf_r!qxW*g$J%NwJ`BF855IE)o&
zI}C5~b$x{C+63Tcq9Cg&UMLQw#+X8&%3IIKU3Y=Zhp!bv9OkV^Z;8Fm$#6Gw;~C%o
zT~*BIc2hR|!=Fn3;ZI2aqpDDr6PEi=FI-1i#*T;sq5F}Fva~P!#=L0RvMCJ}SUQk3
zfIMTHhp4qP^JU29b;FkT;qr8y6lMb$!g{sRvsQQcb=puUZX#^{%;{b0-GiBkvaH4N
zYz>67NwQ^$e5ILeKRr4Bd3AbwaCJI4xLl%zdbg}Twul9f-TJ6}iadLpiD&9Z!}fQF
z*LLOg92!D*S-K@(69iF~=TlJ@5@N@d9iE0O7}?_{1UVo<*Gbe_8|Uu;Vj_zr8#}Fn
zeBDw68xH5C524K}6-{76sJc676UwBf%Y<;(=dtH|L#CbC<m&QQL<REoS{<@xH&r7s
z3V?Sqd70vzNugEjQ%70&tbRcaMIAh^g5TjHYeASzTYLc(Y!wVn3zs)sm8%VgT$w{l
zCmKN#1dVS@2#3!29E|7(A6emi7pmzf?|AGNCF9eQl>y8u!=@6Fz;pOiT<DzQw4fE0
zktD!zx|^$Nx07My1~h&ZG8Y(#CN;MTjH<t&F-noc)S-ms#RHMy!4xTSL`KU5Iek<u
znk)OKSVrFrgiPaUN~r^_ZRU>Lc;}p*ml^OReQ^UdBDbf{`;T<XYzP*%x%UA*VEmHM
zv<tKTzlyn<vhDB*`~fv0Twjk_FOt@k_Vm5Y1F5dKu=h=vO6k!dIU58lVSA4+GZuL4
zc!@XbREQ2st5EJ-q^K-7)(6x3!Jga4_g&N`5!SP;W)-L12{tE3x$XHVtVBU^pE*=?
z(s?B;e4qIA{=|VH|8#WSvs-)a%b=x4uSb+{9K6)CK}g)Tb1}xPSeos(goEC@4aTbC
z<K%=?$4_ZgdGmhqwrs#jEkMwb1q5Z@p*&X&w);~!Y8~09W3qxnbbF=fwO--0X+1c;
z9Lu$n{BNr}&D=RaFUAF~CY&p62lOv7ko3@>`4NTL8r1GMem*b=0wyd&K7Ej3S94yv
z)W!h{oqkbeEHv|`wFF7>P|T7sWmVj+rqio-QE^eB0m7FfOHyqeT!B07vD*GqXJi8e
z+w&E5;`bNEd=4Qj`cmI?&AJ^*$U~`dpS*5+%9YTAT?K;ZBd4J%-qJ4??+j8?q--S_
z;CvZ!M;v@F*erh7AG<!HV_}CgN>^Um@W?`w8RteoutNP(I4Np-1z1En*FP?tA22&l
zO3on;gazRG<FZ3C844$?)kba_aST|^sF|--O4$z;?&<l6UV8-$>AumQ9zw;J=fyGO
z{N-F0p$hJ7XL<Bkn2N@2K?Br-afqOkyyP6_`)9w{l{nuZ|LyAk1#FLOTzLKSa)AFe
z{wJ`lDx#<)At(DEZ~ree`@d)SFR*%{viqZq8316t8UO(6e*_C7J6lr=Gg>nj6DOzt
zOf&8CDRkJ<a5sBYE8qAx^oV#SYBhAh#{bGz*5e2v@5;o&9w)4gy~T=)zoYZ_GaFOF
z_f(+sb*J_f56yU594khYsc`;m8or8=zABP!rrUsKca<!5);o(w+GW;=a#4A*1xAJ?
zgY9vTs&OfzhF@nS*4pd@3*IQ#1_xE+`g-$&^v8N`mgb{fhR^Nnl=ge8FxQR^Qm9+A
z+V)@;>$_@k7VLYgAb0c0Da`j~VV39P9nEj00!gZRWT&%Z#`9&&PgN(oyR~#h{uy?2
z!x&de$&q6>{Vb<e_HPi-3Z0tU#Ioo=M2>bebW}97oaqaF-W_O~H)~y~2*Bw%fB(IP
zA^k&s+N^@5YK=B)O~{Bj2#6mT_Ja0tl=IQW?SR2c*w352(-7ZT$}J#p`@D~t+11dz
z<M>?qIX&pljyirrKa4#=Usu2t)3*ODt=EDM{Ew;2dT?LsxHY=Hbs4Ygrb$bXzR1~S
zbVdcf;K0?m0awlUUIj9a2YVkO6SW|B3ogbq2EssmF6^Q)aJCGO4>JoJ<`M{XuL~_-
zj-F1#$~xJL*5yHgi|e}u{>6up*9FtJ#A$kTgb|iM#>i1cDqm0y@SVly!5J}s6C4*=
z_N3gL-%F2^$I8v~+UFzmisAOku*vD!MUhK?hZ_3!qpp@gRq177gTE1+jTkc*e_#Gh
zW$5`mgJ0nJQ=ZvLe9ST#Zi&ib4A~j_9S8m60|zipg@qP8vtSu^qJ1tVvFZ8`sh2CP
zK9ag%`8voMiIHuC&5_QsCv(6V4}QgG)zl6)ao_JwlZ{&v?nX}Bvz(THo@VWG#jz%E
z+LTJ|@aXbD$^}P<DSzBEx=d+#nom04Uzsardg#3HyH<Q^h$H#s=LA~IKB^&vOdCKQ
z8gq30{kVjCdKU}rsYPvI<1ygoGi0mAm8I7D71HXm2q>$Og{kv+G~{ZW{%<_-v^qLw
z2u+zK@&Vc5BSRB(Rpwl#H}Vc}DO~yNAZ<qKWo9#GT;4jurvhlJy}6gsIflK$n(|8j
zsl{r-=!Mmhj!{;7?T;uq5X_jm;)o0Mghal3g;bGcJ-n)N!%ld<LTU)n!iK_nOP({b
z7vQ`(n%!&>)vUbeiQ=kO<tfJ5bc_<Hpk`o7svT#5?Az#g#~tNGXP+~h1N>Mk^>CDO
zjQ#+o19$@#TSK{eH99b5Vz3&Z5+@YOSulnm{BL#WRhY;=aDC~am;#V7+G2zRKAg?5
zW-=Lntk0gsDrGzvz56Ay<%XqtBJ$9X*^j)384d)Yz(Aj8ef^D~9wQ*N>$pHV@tp7b
zy*;B&m%o!TPeEQf*qhY7y3>ud^ln0`D;oWq%91J5(*r)VY|l&J-vqxLZXvzQ>z*mw
zIc{`Zr)F;LTklJ5CEgegImgLZA`!3ezCH!$@{Aoy7^LFUTkVBW9|UhMwHZcL+&jj{
z59(~Vq`!q8d&2z>GQyUK2K7C0&kjtKi?%3B;Q9PK^eP0j*HnG5+Ok7?xd^&Qd<!|$
z4JAndH=+TK=p9CbM0nEp+=i;-SJ3I2<EM^5#0yA&#GOUgMm+0s(E@0t)U<B!&!M#C
z#=e1h2$v8Yp`AfAi!A>1A!EmacUFuP!{4BRSp)MY=Le8;t4pNS#fwL<bIp#&*y6u}
z^uQBs?XKVJQ^v=^J+w=?jjSuyX%lXpz(hq+ZtXmh19nzi5~j(KvLDyApS7PdOgL+H
zU)rg^_nWD-%!aborGzHhcY~Qbjwv$0eN+BW@7wWGoq*&<g<#MN;>8mV)_?m12tSbY
z@f7b3jWVOqkXk!S)5I#pHw`^X(5n`4+UX-V<K}<umE-~T4k%0D>|nI4_^{f$JTm~8
z4mY!1L9qe*L2S}ndxe4q3MTO1Zxk!XkrJ50TuQLS<Xd}mx5NUEH|F|Pfj8F=vP6&t
zk_PI%D$}qv8FV<-u}zMD?E9;{TF9Il#(cEEc2bbLSA5cE_xT<UYaYX%h=QH<)?Cy9
z(UJ3$T~xKicsn{TfzMpx>$=FsCPelzz|}=WVbj=bBc9jPF>Rt_5z<0zMJcf4O-uL(
z$Sc4u5QN}>f=aK3lW31G>7(|4!A4B*UhVtI!mf=u{D$ewyQ=6rD)Wl-2K1Bz+Q>%%
zu<i(BlqVim;GC6wOMj;Jvn15lz^T|sU#!Z9Z6~`j{#6WRl*jD@!YJ<pCYjx>i_5cE
zqrK@ou}<0+i%{4@*~{+xHW<6%%Xy{!6cYmt`3~&@!eXHO;Sbq^rc@U40hzQBr))Ue
zly~D_9deLw)LBQzUs**6treg%^)3^pm~_fhp3{S0A|pVwV9&XEWvPaj>fuYrI=Rd1
zJ7tS|tnA-$zVrCr=H0X>tKv4yUCqaoUHF(y$^TKVFDYrC-GXGE?iJ-jS&!p$oO$n}
zy+2k^4rl#AQ>@pt@|f|2-Q(ql*nCWzT)c5OJ;(zB*v$*~5h%dfvXdsOcpa<g>|Dzp
zCuRhvf)BXm;1}^~%l~~CHs^X(&r+3H7u*jvq#(zfNc4G$@%fgt0afXD=HTT!Zq5fb
zV7k0Cxkv2%^BGboQZ!7yfZ^@o<HJCZn3eiuS78-UW(g(g{|$;Euv$_hYejs7qPd#@
zMvMfQ3U<Tpy$rA!7Dai)qz+%;g_Mvi4O6Pmo-J((zSau$9mzy@@<GrmD-t;}MAz~)
zyexB1HODr}mVD;9p^a{3j2vlExV}Xl%825Up5}7~53RX2TRpEE^}Wpe0`R-|vcq_N
zt<_^w&7f_AeThXi_`6w-XCZ>d2u431$IhRaZ$;u#*c}vL@vg7c2Sp70D<Tp7E2;67
z7zax^3%4c(Vg*xd@>;AOTnse<7Be<hou9Y6MU9%|!#^<BisTdRhrBch)h0&2B!#5t
ze;oz~`{oBN4NTk5j|ba7g>>RS(ZN)g%rBYys=LNS8CiA!Rrp)y2BQMIl`}rucu%kT
z%jjEgE#px71B^oTVJ~T^)!w02V~6TcxUmOqF+>TK&UPkWaB?!s-|F&yuaE1;`Um2k
zu)IQDy7OQE{jzDB&j#1$>Tk0G`5eYX(op8_N6N63Y_-^=Zwttm$Y;^^g~;Bv$6bRd
zPS0z(+d407e>aFb1fAtbf9)nZPaU7&TdBwNWF`{cSR9uv@{_PL?Y^irx4JQw`WY#K
z5SZEqK(frjxkCM)m`6|;MR-$0SLliay<a5a`PLHZJs-GVG-e2B;o6?#Vo!C;oO9kg
ziN+;rRHr=7d%pEhmb*}W>LA8~AXEx&8tmC3^vYNx!Cr$^s=x`L6R^QzlTHXZ$}0Na
zFA8Ol!^o70;)dc+e?>O2;_0znO7+HK8Ib6u`K$Rd;TIWob)f1m9!_ZCIB_R|(zxR+
zrr=k8zPS<ageJKiF>H!@vx}b6ECSYYs}>Gn0<Syp)cCMqtL>sMC%w5Oz*ItP|LvgN
zJ{SUoWMG1M@KB34rVA3!ztr$c@Mq9j{xHfkgIV!{vs%LU@G&zM2$2zYL%4xoLR$ZD
zMmbt+p{&dbXt0b>oP0QIgO@-;#v|s@5HyTC?ZE&8f8D~&*^4Qm^S}vc1X8*+2Keeg
z#nSf^ft=qcuG2S-4F3sGEIB=wW(VF@w8KVUXlgwD@5nGg1D!sRHT?EprnIq?@>AL>
zF|Cj@nS0*W)baHtA~V&2iVkESe{QjC?mWIpAV^6ijdGOAq>B9*><&!T`w>&q6oDp5
z(U@!YL>nbJl}Kk2CvygX2J{vAvrFkWGJgk8?bj1q3hH=j;VmIszVuCovPDNw0=OQC
zK+r%qlbaV*twHmPAliZ|+1CZN!ur-nmxjjIx8(<{=h0gJf(12rcID5Hq8|S{^~HW`
z!^`n*7+!vSi=I!PGv!|RmOalcb&DX7XhsP8`Hc;=m%WQTiXV#oy!cyot1WKsR^}sz
zBpDy=7_cf;W-|V9JN)ckKX^gvWHON=|BAhXbqEnT1;}`vGk(OVd%Gt0_9VPx+0&Ek
zGBYpmE-<*&rzc~EF*b6+X?>a_z&B#3w9HGqDP#}&`XhCG4Ek_*Gc{B~7!Yuet@-Li
zF61G42<$pF?IbNFwA`2brA-o>fQtYfqx?SLsM#ffCZDF<XR>`oAex1eZ%`}ZtHK-2
zyf+CczJt&;<D3|2(s1Y`!wM`sz&w$X#Jg;)0VqX$)<1C`KT}7s^n;l_$@7FMN3CnV
z!b=B(WSNi!I4B5B@kM1{6W!tCxVKh&a#dTYpKg-n5C0bE26^cgb4);NyYlC_)V9-m
zgR|3fm$Rd*!(1=f&qnWWv)sh#_KV16gVT$Eb&X69I7Au;hU=L}V0m~#lqerqISdyM
z8nV1Alf+jUW?nN?5mHGXI>Ybo#HF6~?dAtM!-E|`ZlQ0IB64sj>dmo61NLx-eG8C@
zuurjIa>P7?l4Obv005pW64yHX_x(KFXF>>@aD<B*|9Yd0Q5&T!JQbY?l(7p=wTERJ
zWEWf&(&{{rGxDHLewYQf(`PG`;Ii|G<zv@t52?H(6E&D%R7q2@vI7sv)1f`^OLVV4
z?4%t1?ZqQ8mG{2x$@567K2LH>%EInI{WDE-iDo7kC2cu3E0>_j`RsH!=bk$)E$T)c
z80Q+*MUrJY370kWzQI@u*11aBjkB55TaGv(wyeU1dz1P6WONwW{y3>#I(ZL2Bq+2f
zP@sVE{SC}=hVtzk@&L}@{5u77l?+lYlkVQeVi<!*o;*!O!k5<wTp-#=w!U_6$OZW>
zK&Fa8e~WAfzLrn>OyN^fAt_X%c|)-CNA}-o?~e6T*y5*la-Hm!%H$QQTr1R40C@pB
zK@*A{U2>tv>r0vzg<2K2mdJN|-C~iH(vgRN#K7g0>s5fiIL*SqT&Q2|t%giX;x-Dz
zAB(Oyg6oL%)gk;`PI(<-kNr3@GX2*z5Utojg)0|Pqo{TkVXew~j5XQ9ToXI<`TkmS
z0{)v)1I@A^Tl<%Lv9=&v_mz7)Eg<TkKc1cL(RN04!f7Lhnj_^6m0hUx(3|V1*C2tB
zE;PeX&$!&3$6;oJ^j(1$I;9s8H0&Dpj=sYQ`9YvqJa(w`Y!VpIQw0Fhet<%KeTM+@
z)!>vHNpc+$c`U`TnSrAZcUn2js^`cGC)fOW&}lYy$<<6Eat2hryRNl#b~pSi{)W3I
zAuIdy4xis)aoK*qo{pZbJKwV+w+|N|tyyxvD*B)<d9cs(gKKYx^MBP_9!oFZ7yq3#
zT-R&k%X5rjHUBJe8XtS)o)bGG>w}fMLb*t?@wav>sWFh_k(aJ!wB}%SGb?CPeftro
zy?2oxeWwr)P#NyQWN$l$+ZeF;h2eU%1H+h@)&0Fv<mBLo7rjOo=CmEl+d$)9spr>X
z(#1&EF^c?AXh)OkhYua;IPIQ+CGP<4sqG^EPUsW?h!d>`a#%&3UPah;K62OtU#Zi%
z(*Sy&2Tzcd1$5AiQNSlQkMxuUUp(PrNE#Y6k(Y$onQm*~Pvl~pIdN@XCm-Q=ILU>b
ze88S?#c5+<z*|y$yr^<oJRLFp?SPaNDI3e1N2gR{y0xGx|JrI<;u3c9vfbT&>FP{b
zB0wdyrVF`rb~Njpc~fa4g-952*{NjSQ7y!X9<gn<h9NDQy!aYogM3yy{$PeW1cVEG
zzqByCJZEjGSf>6?(7fL>5^Mzi*KS$lqGYj}uxVE91)i%_Kf}r~?Gly@!gMAxL2aU}
zoT{Xr#{s3>w33`!+w!Q*;HR({r5a6mqP@7SXg(R0eZMGi+_)y9h6vml)<p%wrb;Cr
zjV)YB*7SfWA;6%%yL~b_V0Y*m(1}s@qJS(a&DQ<6-LYu(^HxqBZn9n$)A>DK2kdOw
zkk7$&VU}M?U}TVPnOD`BBiN;?dM-mB=S>2%_m62BZ=8|Pg6#f%|BQipwQ>4&--?S0
z1FX0Or?q9M?|L+Or=txKmHhx@tc)LyyYVMStfOMCI6;8;MY@wg`cBGHHy=gscH?3P
zoV!HVEaW0gDj+MdHaA`OT+aX=S!J)e@hoqTYJ%g%%-J7zw6L)UWn~A{H#y~<V<>MY
zl49w`#yhFKAB5cj*A}9i-dT!#G_VvnECBqJ0WGPbW4rcKyOA95jEP>&($vBi(b8XM
zMrOvUJaMxqK(PUGlW;j(E78r|W#s=pOpWQrt<%&}T6JBn%*t~h_nog6_8@<HakYPx
zKfiR20NAG)8YP`06J;IUUG3yN{0Ze|{X1H`nNJftx>P0*-cO4A?F3JXX~G>Zb^6nq
zUHt&SYwuTDDo*Bs(FD-lzbNdSnnV_b<Np04;bvC33oZ-VTreVis89+lR#jr3i`^t5
zxVP?#&tn<Y_0^z-mxkO*?IHL!2uM{F3j}>d>xmXYW-k0RfNcaKiRdhz4dd1V_32&j
z?CB#vz?CLUsG#azs3l~iOwQ<-S8IcVo9#yD1unH!)WF#;VdPG1=F+7m7#+g&*w706
z{P;x$MUJHS_m4@n-5ArZQ}LC!1fCO8@O*q0xA5?uC`WpK-dBT}i)gd4dhtE_y9DGR
z+}b0)iW|m=-UVI7iO~}lBV;Y|5En7kow=DmSuwoSR7N;Vej$}%8Xi8A8W7}oDx)1C
zTMxJa5p9k)xy!hgnr|08%_rWOZ-?5)#^%Js>KM~_k<`g<MWJS1KqIoeV(GuE<2t6V
z7zdu?NVsiR(NePT>o!SnWUVyyng-XsePI^Mr7(F1TznXYo-S2R9`sdqt!iu^t&MZA
z(cnt(T26J|r<$?;+hD*ZM6&DFw#v?Kg%x|)F63<oz66v4f`TGKQs5_KK=J^Vb)Y<H
z5iNrW$3fu&d~yWytu28Is0?KP)c^iGwmeYD?y4wadcI#w%ugd^?<;+P>5C%HqTo*K
z@G247Y4Oe{No-%1fjcftZbAu~GX_O{=)FH_ABYr&VR$ecliDL57&~D%cNC1iM?g@=
z|3n2JJu7$A2<JU42mDV=e(}}l4NzG=xQzdAbTBweDLE&4Ooi*b<0JW2#<7F?9N1IH
zF~dmm51P0zOi#oG&vdIc%R8jKN{)^GD*aya&rr$Eqr4_$t~tA($IfJ9K3w4v#YL_k
zv?zRFbP@##uq*f-ULYX_8Gtk|^lV8`kVTT<2>@F=jmH!|qS#&^20Jzd2n!iEt>WCH
zD!38!J(LKyX0*`+dC!#k$WwPTfD{aBm6~L$`Uk#6HM643-n_e)fkDx5-Cb@|*#1w%
zim^fyjYjG+ijP))c|B*a4B<*LbtLPb$%f1VyGnTm*&cV`^|C>wxMGr^3z=kW-m*-J
z4kKy_4R4)jF^oNpvLc%wDC;d%zL1J~Ud&iAS=6C<a3(t`3*&yBY;9d<TSmfCQjBsb
z=ljc*m?4EoA`eA9)e(i-mCETt<Q?er(hpVQFD;@a=|Mo7sLwP!?Pbigd~--s9H{kr
zwbE?cICgE6y*(SdfEa>U0zW+=_(M6q`j>aFm&WLqNzjVMlk_^7{@*-t?WuQ2;!Ycr
zFD9cDq-&9;$~e}uy`k1~<q~B;RJ=h4<v~O2x2y|Z^Q^N{Ck;qnzm9II2D)~(EqD0J
z2TS$*F_JZ380*|Vc|GuL%4kGWY@^M`PjSFVVA#k6=IcSj0>+#d-wVaD6&J)-Z(fL&
z1hStz{4It@I{0sx+-mOI6`SiCa_g%YOT?D%sUDECTDq3h0zb#rA5u^Gz7{Nz=u^bp
z0=?8`=znJeO^17lfP4$J2Wxj7`{>%6gFQ$FMF!gz@%@CwKcF=sZE=cGI``z^)E^#4
zY?{AbYM$D|6@cA8T<PxakUw|_@U})XfsPuGpo83rpNDb7d|qfML5YskyXIsAYIW+^
zGIf&mN~^PcwdW-3SrMNnl<5`pPVxk<+vl%xu2Pi9{TK7aoDlx*cjx|y$(LB9h<OIh
z^k;w;7`0TzRkHG%f1EXFhJtn*K=wC*bB)i-9AA{QW21I^H7z3+y)gQ$Px}Kc_`hvL
z4uUvO-}yq5*ICkHLFXZL3SDl{&&*~HhMi08?Q;JB;F{8c5_uGWL9$0X2v!dC6`oS)
z)+3P0y&im(ZC_^V;TXSN1S1>qD4<rQN3^u6RjRJz)@;4ASjrQ(qB+@Y8K(PP9teFl
z_^okR>3Cnb&CqV5-)f0n+tERQAC54bpPYphq5}rp?J};RThkm=K|peNlM^pIVfAk)
zyjnHA@K35MFKqS)K>Woq-t^*n)ROqHlY4!UoHp8Y?$bo%j%_4^=I7ScV>bLtf3(|x
z5fG1fD^5Enqh|u}2Nnpk&tF~5q&CYa7A>LRyM*tf26i%-mjqF-|MW6i_Y;Y-64Za)
zGQOw?Uq(357EU?FQq{>i$POXj7oAm<_pxnZUE+d|grgh0(Axi_F_HLy@I1nu?8mBw
zlkGOMwfQ4k(P|~im{<U@lFFqx^yFVl63ow^!o@-39M2%ZInsaqEPhopWZw~5Dzv2$
z{7|A4d7Fn7Oess2j6r<}0(|V?S48`-OnnSWk=|%0-4W;n&`Wt=cXM$!E{@<=JoK8z
z6UF}Kzg(B7*+L{uPo03<Iu0(~;2ca0KYLIq@7zUrAYAgbe?F`#5$00qq^h_*#}Ac7
zHh{*&L%;RXxdw8ZH21Xc1?$;n$15LCHP|)1s~REaXbM^pmU+QC#o30YAYi5o%FNQ{
z2_VxPuBYImEdVd8neGjEyN~bbvx)B+*QQWB*IXF8XrQW^Luq$&OiT{i;0<=K<C?pc
zKc(`^E&rZi2em1OTIHA*CRb-tUVgw|wSN^a2YR^U50RD&ljv`?+5#W;yXqGXjS3-6
zh*V&lU2BV*>#cv+7#jx6GDmEvZU){{P)gjLslpzb;ju2sU9^>7GaoQpep`6At`W*E
z*kH_ok`F#YQ$SQtu#Djo$b3;>$7ydf9h4KKKmAeAsZlfy5hXfKzu1>whoDKCs`g(*
zNR-^(U>GcEZG4nD8pmDV6rd)G?skWI$&zPPv`|G-Z|%%Te}39#hV)FJVkMd)K?4Ld
zWn;X9spDGCBelAdh?^n;xAPibCiAdNF*-o9wS5n|C_~`AG{&k*km=Y?wv>-f%Vv+V
zzf?Sbj&TX=qIEuK_Num6TW<7ogIWyArZW>k@VL%-+^+g&aHWynVHxe0PxmCJ(}TCy
zw}tNFwjWY(zDIACVa;|^;1rWLFY>u%$9v#VJ9f&KMXzzA9EL|}^~|>Z;0Py*grb+@
zmw%;~MH)e(<`JRK+z)@`eLAnRu@fHk_*B<&EcQ%I*ymR4a1oUgp;;U_3l{9%e|!h*
zd##hZgK(W~q;*rHB)Z@4KwLm(`*gysbdw0=h`B2>M91E{zt~pB<>YAgVgas81uQl2
zTM~*F;$`KXQAYYNm8Ud|_Y#xDe}g55)2sw^C^oxa;rs5aOZxf3@u5SV&wBK1?9v}-
zsa8_DTtvdy?*Z?h(tSOIvGe{A(cd=~dI!RvR1h%_MlB;QiM7p!JX?T1&(zY!ZaA<E
z<7bWlJSUk`s88MrnA7ARLchO4tH6A5V}G-wql&DO+aMv~f`znp`tK^LB#<w-Ap-#x
z)+2-?DhDqDO2+2gFxJBYK)6t5zO!$#U|K3z6YotIw7qxc!pchlETI7dOtPdclB^gN
zL9afS&Eota-=24kI5dQPw2bj=$V@2%>y|Gq$*oE)d#3pc!ufkd@olgJF{UvAUJqbJ
zpON7sp74`(bU#;&epaW>OE*MVJx%(EIW~-`V1-E7+x&%2&8a|$UmfjJ)QkxUh;{?h
zF6<BzdO&dUmfk4uba0U#JTPr{C9Nmv+$oR(NPS?K(nU$xU=?1ZnLaC=XR%by3EIgh
z2nAtC9@M0nLH;KPq46q!Kcd|a;m9bBQ78CyjM}Rp$X$NEbqU3sq~-bT*hR)j@=qqe
z_zKq>he(*FOgY=h-Z*f<uiMtakZw2w3D79|TftC@AmYuV3$0Xfp{el{j1JAw9mA}W
zr&oA;reW?W=)8DKV)iIf%^AsH^&H8sEEHnv4>3vBre$G=4$VEkY`OGLbyDV33}|c0
zmS$b8w*V06gJ1re9<f4**wa_e7YI{T`wl7gStcjyK>K14O|742Q{yYuqRwiIv)4ri
z(>Vt!oY-#m1B~1~F7Qe~AK?U0Sfy!ax~h<WX9u_-oF?9*R1!d#V<NcwANn~~6_g#n
z^IK_a13hus>bj6&AoJX3Pw5&{1MzE%+97$lr~IBKcnz*TL4<veVn1`CNCbxT3360W
zLtDin1aNa<7LOtBQqwljYG2#rbAf!~oaU4nw-aZILCOu->GJUG=GPn7*K3_8A<7xf
zK}+O3g<yv|OH%do>rS`g6N^?Ih9g1;$f;h-CTif>q4}hi@3sE@F{>zy@V)Q^5EIP9
zx^4xeX<ZN*(M1Xf#~@Jv!xD_%L5P)lh_&`8lQ<3UMgYwU89XI2FzCzDY!x`Ldh_Cw
zh<zm(QPH(7CDwZ*oSQOLOT6`!q@MwJEdK(mZ_HG~lsk-G)sx-DByVNC*a|!Z_$2Eo
zZeI%rkdqS23R}Hp<{C5yEc3kjA<e-*<Gn+CB;^iEYnnUgRmicG^(=n+G2N(j*TZ$!
z)1xhdtA;#UbM;Xxr3<AG7Oj|B_v=FxRyCZ!sSJ#=zDBEcyi`r2wQ9*(l7zsYHkDs`
zZeO93fq5Sy)jl)TBG|%JlIM@1{9o<iVtXNXDDalkl#jQ8Dkr-jl|%7W^evOR-s(S_
z7jA`{CWW|Sv~-E0TIt+Bg{+>d&F<JcO4nX6{x_Dm*{_tyWN7`s>D8s`zuCQ;L!YA0
zEt;KD+E9m;``@<qNhA+|p7%c&yZW-a^Bj%{(cJ$ZUFX!KSsOL!>auOyw)K>)F59+k
z+qP|2mu=g&t$7b7CgzKnIokIx$Q6-0^UC+rRR}WOHCvG8837R-3Xu@2*+!!L72Ite
z@DXG8CP?at*k3IV*6+c)9t$qoupd8|U*P0%SoqClRFk%3PMhD~{C+npHaTJZv@Z@w
z@vL8i+x7*2zu^!x4OEGHrKV$xPPVV9jii9snXie&E{WJs=52N4nAjY8(acD34e1tr
zu0mQ|r<Ulya|U0I>4|}-aT0qlyvMOGt_+YIWrs%V$l$C1E1F`B^*&Y_#vB83^6pn;
z{bLTfe-JxL{!a8hKjbgYkUf7k`pOV`U1m}lBiX&&*_AjX<$25qe6@hNn5x50#rT%5
zSbAqR%P0Hd1q-30HjO;|XCGlkFpp)0jc&GYJ+7V8T;?Q&QZf%(pQx+B9`PMl*n7jt
zZJErpjUnj~kU?Y>*Pr0vIH6|MT&yhBxq-9p%s!pXE*<f`YSx6y(DoG^v%7(Xo_r5&
zjI2K4MPj>yzg@F}<tp77nlMQ!gZBP2OFd*T!M%9yad!W-=L68A6WU=A@Xm=n%94J^
zr62GJl4;`f9+}}}Pm0~Nd$iRm_y3Z54QZwc=r+=*TT8jO;460jX!4=wV<x?xqC}?^
zPA)&7@ypiOCE69Z69zgyh{K?uki64K>vLiah>3s%j~_P@>1>a8yJv#`mSKEIP5)>8
z3QZMyrv%Ekn?La<g%e#&Z#sev-Eg10BYZsT%ci+lG!gqVd#X@@`7}mwnfwqOuwNBg
zz_LF0O*UIhvah?li8xLZ`mCJXw)LvroHYO!ASX<NZp_wb{#@4D|3*$jK;#uHWMjL}
zdcFT77@OzvUVtvvin{%JVI66|<KZ<V>lYsU^@Z?7st6NlEyz;`1DH@N!0-V*thjx8
z;>=ncp8qZ0Cl#SyTBn++Y9gU_iPKc4DMCIzidfpv(X8_6VQEuN;O=_lZfU|%-JmgH
z4|}&Ez6juZGvXXZT`?JD%T>{1FtR0wWkH%{Xkc_I;8Nk$st|pEukIae+N-=1Y)G2f
zpBKW{XcBvWoDUh8yqkTWcT5xy+VZ^AL!`}tDMURC@{s$v<1BG;*syDZ=b<UJ7*Z{a
zzy{o{{n@ZI3in(;;Jd(o{#d>3sxpa{c@YOH3yMm6l~98a<DPP7Yrm&-U_{MHr@%n#
zT3f1?DT2g@BlW<BNljhGcxwQ<s!*H_4Mu<o5Wi8zMubj#P7%>WjepBl`|L84KggV$
zoAc2IjJX8=MF+)@7`v69-YVmyye#K}JpIJG7oGlU20b}MgJHDDJUHJG$UTuPy77gu
z&F~NYgjc^yRPz_z`jCo!u#=<YCuBoDe|x(f-<kf-&+2f`7t6EN&3XE4fRSqC)J<0;
zk94$}%QAk^-ND3w!m`0PZSzQ<KQZW>9^|qCr#l#3f~)AA-Se*{wCm{w3L4zqrCc3`
z$qfQ4(^1Jii8&ij(?{H#My6BmjBdeoIlHi!Yo{@xr^Rm&d5@3H%bo(G1cp%+&Je}~
zyoTniy%h19o1(hWJkts3D-_xKiRaWW(GIay4F#Jkdv5@<N~q#5m#i$?T&Ic@;(4eh
zU$iczYkJLBy2ta>Q6nV7RnAnTy@YYbrv7KYnpO)ciD$v|z@j@r4wDB_plQ<2F;1k}
zli$U-wf+m@eHz&XfogR3wpV}PV@KHSD;D|1oKEV5uDDlvzy%#(mD`uV9C^(5*?w5M
zWrSA(#0uoN*iy&-E^H-EV*coBNu`vbB&yjOD?pYiPym>LP&I0)B0g|Rt7<KRZyg_2
zamYKvKDU?l?OGzbztPim2L1|Jgi-pvOdT?vD9HP!#qvIkcz)z5Z$C8M5G=S8XY|N*
zVW!FgI)NwS@g)vD$gbzda5mXJr0)#v@2cn1@$DZlO$#wd1nm>xMv97ArXKH^fZz2^
zbrj9_@Ji(<-xH0zLhX1Xo@BN_N5zDBwni}E-n@{`>b8#d{ABp@%C7Hhq)w{lQ1owt
zDXa?1y6xwrd_G`p9<tFZXJMpq^J2I2F5iYo#gG9HKLArip%VPDml;Sr{n@9Bkg;kZ
zhWa~}^g#FQIv-C!bF2WokVYt_!#$9`*-@sFEX&k&&a(1mRob)Ugb>(wXUA0vPO?S4
zo5zmM#CNV850?6z!zc>~{cvBE>E4|wxlXpmNk;s0<CK3!2*tTehAyqrO5azQ+xY_>
zWn779G@f$0g2g(W<$x-;uI~lQeP}Dk*M9~5o_LbIFvmtWVn|BfN*K@jH`s)kExE4C
zt$uPlm7Mi_{`7mCzl5XsNf?#Hbq;h)<_3}vSwsoG-jg+StY*WJ5dczIb)o2Ma-CpE
zuo*i_d)JgSS?{3%;eHWAxZksLdefD4#X!)Y1ei$<C6ei1-w7v(<3Z=3lA4|zrGzkq
zAwE`cZz%cDU;&=46W2!5bE|U+4i}7FRk@{YB$p8IX7`F=3(=<RJM3CQH>tjN7c5_t
z?*8EDzFndx>J335B`{_D{boj=0HscJML9IbV-tgRJ=Vwk`%sG$r>|B$@7zKutE1Iw
zUz;Jq-i0sSyQ2{#@p2_@{~h!@yz~}YNTa&Qrff)1`Tzcg+yxp_iav-Fg+}S(NRn*n
zq7l)!aMKuUd5B_YthVR{IR6N*T)jEd>%GQAZ>HwAhQYs}_<(w`+eUtYEsvG1M(3zR
zhDA55-1iDNcRh#}1{R?KUjtNt$pRbw=3&Gi%!%3?sGRP2O1X`4xfkw*M3)~+Q9QK~
zPN*di*Ncz*Fq>!=p%%Il%hY<LWqi><=Ytj=Y4Q8e-ytO7V7sE(9-HBgu*lsC)SSlv
zpZjl&W2#(-?_fgrY@z$opv(yc6RfK*-OTR-z$tRsV$+*ucj?ndRAJcTaI^bVVaTsv
zeX0rs)-?Eb##h%W=R=dIiV;j1AOy#{p>8h~%+%KVrb{3(cHv)my?Z>5)XFZ9&hont
zF++bt`R+h7Ww<2kx+6_%?;GsdHc*IPa8|J4L&UJWQD*f#zV;PH7{sR}u1nJ-4PGSY
zBVCOXx<_Cj)DD<RB_I+ffe^H$ri&(L;B3E2Y#Im|L9&?~1F9Z6_Lz-ZRF4Y+Zh~-q
zfHOj&>L>@HcF9`}VAg774Kb)O3^_wocm8ILnhZ76up*~1g@tlcA}Egn%6N#6hn}z5
zueU)*+HlkMLG^C0M7;&Ta${&SZ3_|IeF9;?oJ+rN@a|R6z?DM2yZdjITN|M{q%}%X
z+|SWxYw)PnHe)fKd~IyVq+-3E-TOxoA_BLsE$J2zqkp=^aa0Qsi9k!^hDI4<h$eLN
z!^(?AS~oX$*L5Q9^N5`gzag6-_ANBSp<3J3Q&VZvw5_WS!)W)7_xROXS=H89W1bnh
z)pm(}+ePW_v<lav*UZpaTY9Q1&W^&I^d{1ckLqu^?o=>lV(HzrTr7W^z2+~#z!IQT
zu^-DY@4xco9)B-HdTlG!Y^LrN^M1l&h7o8FS`C|FS8N}EKdfMdQTvuhy3;2SDQ4f(
z_q{r<h(6@1qnxr=Xq>~!fW}0~8$r6kagJv%@X5y0C}TA@Bjl-qc#cbT3NU&WHwRyI
z80-~9C8Z+}!#q!XaYr2;pf}N~X_g<56g!d!4mC1Rg8h4Dsss~(LSgBo7{9$IDW1n_
zlBO7W#eZX8C=1ILy`uU@o0S%9@^oBl<vNP#?yXhyBLF6@exR+Xn}5HVKHWD=^rHqt
zHR<BbYJtH%AW?M);G#J4Q9=6TF~G@raH-2C3N8XK-l9r#Dnl!9&r>;`lMzl=1;ks{
zs9KU_M~51z*>?4I?0wGp$Tz?9yDGVi37*aHHt-GwdiSbuQI>s{e88q6^U$!uNAmdK
zY^$-qJTC=b^X}o8RB*m4FlG~8VpGEW#==QG9EmMWUon0ec0}dXYUUaKbEcI+NnNEQ
zE>>X}6E*zs+Ot4sYPs1`5a^#i(_phLauMJ17V5IPkzEqOsiG<2rKeTNx{<M^1Siru
zpU#1#{r)rCnqKUB9Mf<38V{_kR7bd5)7%RWfS18geaXfdnDcK8X`&;4my*&D>80jh
zX#+z%qZkI0S`5!MNjHVpz$o)5><T@O>Mw|$h<YFqo&ldF9_3+B`**K|=UCPe?bTyA
z0*YbA|L`xesyF!x-Hwxkqw&t}e#fD>m-@-I*TB8SNzi`hWi~bEfb!<6+4UjRmq4+~
zVCzGn%932KajOab9y(CZFA&rX@rb1l{WvP`SiaPDUPn1*+w`Q-@vke3yQSUJ>96Mo
znSB0LcRkTx_drYC=2Can3o)^SPwiPX=tvJ6(ZNHoK(7yp`#ahc)>Pf3HxpM|-f(3L
zKrc-`^TwMnTJ~W#ZZy|rOVnlY{zKt@!1qN>;1S2SfK|GfENA_+i;7W_|EU!hTW#`>
zYoH0c`(z&JA-$J4LKxJ19E8-0HuE{OWDJ8}tZ}61*f<xynsygbUI=O=<Fo{UT8bZY
z;fwwd*qKxFADvsC(xZSGhpcyeRe;6G%gzqnVVrrnSs}WgprIW_-W&#ib&QCLO{p|6
zi=!KL7w|jjrzxFEN`PhBCEJPdhgJ8v+DF%Sm6u0gFi1Rso4oUmcANgQl5L5?WKw!N
zLuT)y1>^AHNo}uFJ#bP73&WhQb@|bTg6LENB_Hp6w$Vh(y)qM)gzIWq5v!mJfr-Xw
zZ$GTj><mRAmu1Usv`0!wT9<Sd*-Yx#gybT#@|k@O@o|AB4@2H6A7XRRjFmR8`!ZeE
zNXMx(Sx{%INCDH~2<M)6G3n+b88j|k)cqF>*=B?Uq`l}RBxt>#=Y<%S@B=i<I(kKv
zq>)~j2r1i9fn(ro?`;)vu@JOKDbFdMR#Nj1#PdYU8;>ub3_Wv;@m{wk6WA)R#SR_l
zJT-SORnKb<x<$1Pn&|OTvJ%p%+)i}z;EibloJU38`Rrsh$&n6Z`Ndm>A<mS%a=|;E
zQgT5*XL83IaZsM0b?qj88|+tidng8MyYH7ynNI((v?%WN#Lz_WMPH&t{NxI4l|?D^
z;Mszql#;gXEv<ywdc3dau4ASwVwAY<+@L15T2yWMM5Qw|<%k3+f_vV|s^mmA%S;^t
z$~k8XO804L{SN|=M>bsqQGb$1b+YWy=Np;6_X)QLNX~{s*ko2eH&%X4)Ug46B@P%F
z9`S4Fr5KJ`>)nU{Ri6Hr@LhLpyF)1O(lXm;Kl9H*m{dcbrNFN`#$82(ExEB9i)3QH
zpcv#4*S{@X6Gi23M*Ga~CzQ}%spGoUpV_~kSB-gIgN9U5=N?W|v&ocsAE-WJdhU!3
zGTTpN7+x=bu3rtiCB$fzcS;9eN3S%74;R1sa88QS?jN?UW@+?c&x#Y3ZSJiX1^?yq
zY!y=(<FOapGif(Lhx!;ilpI+hAIa_2Netn~?HMfGJ5Rd{a`z*NCCnLV7swyz;r|mS
z8V}cve%w*Dr9;T92=AUb4Js2rrc)|-qmV1`)pMb^rx41A%yW`OKi~l$Hit+;=q-iF
zoX0n@C0h~@nJ9IbO3<#MA>v!Kqko_JMLcJ;{K%PnnLl0@?b;2yWhOB>fGK(b-eB_7
z5Cz3P$b@4qSiqr1#l-VT08kk`o-JWEJze5DNJgE_;U-r2`WkA9IslYlzxB>QJ@3yU
z>dPJ(exM~AXR{jBL`5VQ^CH0cQmcwIWR4fBk|t*?F3CM9{B6`*a)t`K0=ZWk-jC=F
z6$Y%+J{M1GA|O+X7OUPl8Ak|lMtQ^EtDD_j`gEPvc*I^J^iz4}D!-@>j8L2pz}=8*
zqD$~*syn2qL&3u$;zmot{vlUR8AxMIXDmK$SDdgAg&P#D&mOnm!}!^Laf;sTd*L+0
zrO??N_*WJ{?ra#pUve|*^^C#8tD_OHYfj=f9ri9IeT#JOrs~%X*B4dyc6108?RAm^
zigy)#yE~>=PB?fl$e|Ktr4^ha+e<`EQ2a1pqBLIE??T0JmdaKsckGe%b8Rut&}WzM
z&U2T_-mLU0&P|17x(%3kTiWcZmUD*NwYM9a?m`?Xa9D9dn{=Mqn%^{|MSy3*4ngID
z==VI9i$S{IYQxMZ@5v&=s0%L&j~PO!_)Gg1KaO>iq+AUmd&#hV^wa4^*=09j0zZaP
zC<dHMiMKtOwKstmchwxZ@Er)@DO3Vuv%~BB&YwEZ$_E_lFNbL~cMWYGzKr(KK%j%%
zw0+7yI#pEvMoqmjdg07bq(zYp9<EPNCxF_yaWQu}<PP_gs6TK_!N-CWnQK?7Xp!w^
ztN!jvkd?6sL#z~%I%pc%l|0#Lf^K_T8`B7?wPXJn=}_)nE|bdzw^Q~JkjC1J(TmH=
zdu3X2{*bfWZ!bi^ZCUq8slUcR-Gy^Iu%GjfNU+J=SVC1t<C1ktxT~y9<tnXZxqG(&
z<SnWODL~LD50J_e2F-+JweXOw<OC-Ntf>66)5WQ!*?Sh~h;c*(-Y3i3cSio*veKkL
z465-yOSaIuRP(AU54#f7-)Ru2>~KLaCo$C5crr3x3+*!XXRZ-|>BZB29`^T-x?XaI
zSz!Ldv9#lcL_B><I_zJIm$^Z$&U9Jpj~6b5DIKR34wXGo(07~xK?2m1XvfY<SiRLg
zI8UPM9s%)K59|(zHe<GZjFG=NW2rN9r4yzTz?y>&3EbDF;Q7iQV=z_bDN6m<ujS_(
z`4|ckcQHNxP#`!dwAmZRG{<R&)^rNu73iQ8(&*#AA{>zJ&_;~%>I1$VD#k?EeV<6n
zv`^TQ#^iuLtOY+5HRxW}&n;w>m)3Wz2%CZA{+nsvH$<{_FAx}+N>1n)K!^N`uzyr`
zB?f!M#Rre{nG7n;`-TT5?LA=`&tKAs>7BWn?kz!H#B@&u!`$Nq8ebtV891`|hFe_c
zI;u^a03C43Z~-t#fF7tyjOtJz-VL(CD5i)ft=muaG#s=Y%2invEVyP<4De8zCa0ts
zH1LSV@Pe7G-M>6Wk}#saQ~#r;mXV5a5xuX6dVa;B!LRNM5#rqquD7IctoI)pMQ`~7
z)DIRVMes`y4%lX}uHzT{e-@oQ-oJn-!GM5hk%52+{(nU$b3Hc;TNY+lBaZ*mb}C8N
zvD;)v4Xr!XbMOap!ftj=0@tDM1dgoc7PcObKk~i`O(5GKr;ZAhU|aV6hNq%v!tE$+
zivmrc<oEXY=brw9wKX*EmMJ{&$ffm^%6JO4)x>)|3ye>GcYZJ!E%}Cbb0q*Y^N}+H
zl~v{pUuKNEaWn(9cbRAJ`+k4e_1_a{l4?uc4IYZtPH<p%hKGVxe!Y9~Jg+|=-^?jJ
zg;rYQ-`wS}epdlp6{kk!zVe3FQ{Ob%^v?5ACIwC{Uk38`@q3+xP!KwdVl8EOw7_6>
zBI*HYfw1+QNv&(qm}TmToM8v(ctQ9)EX~#uLh4*i9K;M>M&<SUp$#4<$$k~vq=FK>
zMan2m>fV(`hdQNAA#!4EtC|b%rRPz6fD<1cypCPD#UGtVVPHCFT}ZGLX>$G8wUH%4
z!T^^0Ajs1MyPL7~1SM!_tU9$3aUx~iiSJ-W?6<}8euYU}L0it&#6rzO@Ws&Rf<vwV
zE0jqn9j{gF(+M^-1_P{L1zu>q14F!52lba!Jp;+ZWOTdM(xOpla&!ki3Sy41iixTN
zE?t5^T>&vUcRN|wba^S#2(sBOMutZb=3EX#MUWOjnui`!k$;G2<uBZUA->7WnuEvh
zX2e}~sGYjOAoC6N@)%zFoc63&mI#-Xc+1XUGirnmV`yVh_!M&H2hjZuBIESN)~Z9I
zU}Xf2AIn`FYYAR>A1^gV`OeA&A7YN9sXjq7<fWOt)n}0ye`#EK{6}Wi5b(!ky}noz
zFypBynS9_YhRc@{&OJxd-Tcy5$=T+^O~6U^;`wRW&-_qWh!J{x=b|A+X0tLB$AGO2
zyGFC7fMAT=VVB}9!mICwEX8fJ9++_70VK+*zyNXNB6sm>DaA*3wI}X)nK>6hEGH9d
zu^3vT(gw8HM#1rRD5r~$>!BW#jx8@kncv9-#T!1B(kuW-?1|66t<k}R!{e4*VdX`m
z@+qv;*r0dLXKh+MvG+HX$moUVx``uJT&|fR(zd)y@X!2zUKm+ZUW3@d3Ml~?<SHrt
z7<B5(SA5z&BjD_V98~(ZGHOlL3o*O39Cw2`=ThR?rC_bAciqKc!!zE0LT=1MY-e25
zI!1WJy9G}fJTgic2YbzT%;hLjeXQUbjI!V_@mov^JTgrDW!b^_?d&%NbJ=#T<FjC|
zp7$Z>Ks{H2)zlu)iD&;R)S2=sZw`v>s2CW7d5Pc?!Q2`ZTzX+6S3DW|T@D*X?`qeF
zJXnl8ioWu7s_LmpMbw$5{3Ooe^dooras6<}B+lV^&iF@r+d-y5tpC~tc&1dPw&TKk
zyLrtTAj*b&cAO%Y4qWrlIc8RD))WhrxU+n(K=GPA!Ssb6AJ5`V;X||M?L6)4=W4cV
z)wi)UQ_*0r9gQ@ApGi)4GGOj#Xw?R3C6yKcqHTj+l<ysxuC56$Obut@q17?8b+YHF
zg&n6H+)qR!dow!e4`)=hB@_bsPG}>XD(p7#fK;^h#w<quDPuZiPd2GjXmd6IfAS@F
z;4g6ae*esPnm@g~`Z7X}w?wT@2UvOVK%ZOE(Ud$u;gQxS$#O+bb}aoa?+r`&sATB?
zKEL5q{dSD`kd#*Wg**Lue0*+JC{$^?Dw~IuZr6MxQiN?-BAR4?l5Uqpj0*xwI(-j^
zZfJ_p$tPMWBhs;?Bm=T)oeR$T#R#*kLV`&zt5Gjb_14*>`Br~5JS59L__`@~8WyY)
zFLGG3^3{Tti%U~f4v^R1A^xY@vg_?U5B{gNo2WoQ82?|jb^E_mR?BIF6V*R&ux^eN
zfpnWbnKfzr%9ZC3GsPV`{hrL?WtdIfpF+&gxFh-d*^6{@ePb<R?B9{0<Zj2=*%|Kh
zZUNY?9oXflbAmC_IRmE7NYzef*j%{606>VCb+_oh1Tz$D_ods%Z6t$`j8#%vwvBHF
zzH$fe6sT4bBQdYuE>~3A8E<;KseK&Y(>nue`^VjWp;IVvV>FeJ+Xx>#t`RrvR+7+Z
z^c<zGYw?-^Km6pWMz#o(P662=rAX;<ra21zisM`MlPaIFqEKQ~E~>k#{d5LFc}7s0
zg<J@FsYNRhrR*AfH4<n@6qw{9E?jz3G_YR(vakh_cW#Jb3@CuN7>SdNSl|GRDh(AH
z?%rol8gLE8eLa}$n<_6rM->v=r%^x6E+?oHS;z;+aSxpSXx)<NS@x+CFFUNx%Vs;u
ziFu&q$J$t0G+-WPjfD|zKjTi_VTe~|4t12tx8?v0F>5^<G~AD26^-CBp%jRmS_Sl5
zN^F=>ZmC$%zBBjIQ~8<l6=>3d0vI91#94mE+NW}*Wnrwh%18p}fIE`B(gH5;!itff
zsE#%f1GB<+K3FD5>c^GPY(rUCfUP2X_T-}INQkyWwBVkui^8@cj7r6S=+WSX`^_=v
zSUM4zieyzvs`l3x(aVjG4gOrIeAB#W4Pyjd3Odt#su1#FR@}yc-yWLaAc*bsby*B<
zH_umQfk2K+v9Uws?;OH*Wo9Kc4x=FHBo8^^Kk#w?@{J2DF9rn0)o87<_ZrI66h}rc
zuKx8gOm{;B>qq+V+lYrd{3LfDUPj?<$Pw4K<ir{H8)~hm3to2tD^vx%nu&jYmlivK
z#2<<Z)?ZLSSxgNHCtC-M27K_h4j6@4c($ryFa9siVE%|RVN>U*AX`S}7@u}@%vdLY
zV7q~D!R3rU#2q={MiHo;cU&9~jEW?VUiObiIvxPSfTZifTJi-}eslZ!ecxZJ6M&LE
zEVGFA&!p|6fUUvonj`MFwTi;3*XyfIhd<HXXIUz^pbatWmPPMZc+wn}OU%gWs{%|z
zjHS)gLU`=uc<Z9eDB4Vus5h#>dAkQc0|6bi8zIvHO2I>d!KM7cUzc6q#Nz$>1Y7D9
z^q&YMwP#}nh1XwG_BGm5d`#LFsG@Mdd7P`&0F*Nv&Cp-2oXQcQzm1#r_o%gm=qt3+
z`Cfs&kTokqEQ4Q`(fRaG;vN>!a`HIAbWNl}3TG%osc5bw)|N7NR=DPLa|i><YnF7T
zz6h+!SSk1aGMYp(q47dmOLO;|X}qF6=Xg8OmwLg*k|-E|#Ho;k?H5^f$G7D$bzF7_
zORLbSX*@N#lIUo(S3htz_4Xh;R?H*A`q#h@>vT<i1^#p-XN892!P!)~66=g+fjxM6
zc~OGgN7zdtuZO`rC>P7d*R5q7+)t)E$Ta1#sq?@@Zdd%uQYd2T3o!ffO<OF>?##j7
z)H4Nt)6G19#1-7znrl{FywSruf39@fQ*Ey95K%IyZ@?XxPiA;S0jZS)3K<IWjF7xx
zP0kR&Zr7_2Vo}{Q>jtZop9aAT=W~T6Jd*knn-A#INejDhZ)fbM-zthN$9oPa?B2%M
zJ%b<iyN24@TM6m$Hb;lj$6L1=GPr!hd!-3O;V~&BFc;vPWA2VgzUwZ{S^C1QO(&VD
z(F23CQdhm|<LDfDaXZ{jGrPAZigf9Fwf?PxYZ%k>oxq#XC@;NxY`BoBsVbRiy5TA)
zt>?80aNoCqdj34y>3)}muR;qrcMph?-3?f>fB^71)myl~X$-$Wy*sIZv9^>^n{P@^
zvp^?*JXasEbXMDPFTh*?GF$@%(a|U<L~ZWPCZqeGB{iH{WZ&IAlp-y%9DTr$q9z8;
zdNoRrUGSvlDIf}^BPbw{VT3G6)0F;w1h6ax8;bLoY2nwh6K#ZK3&ZA$J7CYCJd7@n
z_U{#HKQsK#1Mtt}Mhu7&2*@Mi|FyyJzqtZVE{6Z-0u1}S|A*yHI-8x>>vw6KZJ0=O
zQE$w)c3sID_fGQcpq9JXtRUq9D8>&V)e%u@WKIzLegFx^gW6Ddv|JX8;BLoM&7Y0D
z-|2NXd8B8LyPOuh^2(;}TV{QVrjzf?#0`M)9J}V0Z4%1_Qv~r&Me+-J0p;O6*tgJk
zkIu?>?;jtZq56$JdCB#neB><Lf_=}Ny*?yUMuP|SQ~ki7yNUD~eejj-LVe4fzXtl6
zJ$Xg+4hEDm<9hZU3A?YJH@4q9?SCiQqRf0%yfQ<5<j5h72&4OE^YMti?dWgdM91+6
z?hSG$?=b%tQQjRjI56=@2Q@&CKw*$L#H7xb=&4ex>-Ot@Ka)%m$zucqf}u(jbU$Bs
z>{&xtQI{1gVKhE=Z3%291APy1`+j+jf+izGeT!&&Ndf~xi6&lr?M@46lL&cAY`z=d
zjDnAeCS*1))r}`x2@CbOz+0dzNsJPujN;9<g8`!9m3X3^?%~u4o&=fmCoJbm0Pqts
z5XX_B!}6t{2#63n3OwxCoGN0v*9{1gD!KoAVunqyYPdU*07u%;JgT4&4xjDG86#_4
zm7pj%%ki{;XT=AI3br~iOe0={K6u^{_fj&|7@B!>PJClZ>!REDUlVq_WL9K`JZuLm
z9!-a|r5JX^#D@T_e4b7s^#1#P>+kY>%zB-zdcCdN@qW9e>O;5M^OnB?RUTl63}8&A
zdQCb2(trT2)9d#8q0!g=KAlu!5cmRrfA#fv-=B`Uw7O0EZw`Uxc6<2~fg#V&+vR!3
z>-GM-t8JAb-=+@C6ngVFwNppwQV@(@WIrt7i1`<Mnu^G59{A0aB3}ap>4s2`zuwxl
zy=&S(l%QlhQfjQbvhuD1gFazft|yBZl>E<*T{F4<s@GZtN59+|MHVFWcPG%@z@<lT
zuyp>fbaLr?#cN&#E#l8J8X{(N=%A1t=g7a``;W*;7qS9SW)vYvF7!`9g~dzWW{gu*
z7Pu*3QraK-uK%dBc^F%gY;}kLPz&JaOu^1I1RCUclbp6fR2V~>TT88CNEazS>KBAQ
zL!o9J$VDgAS7`xs6Wwyer7TLtq3y~MQT=!#ur@4_%Bz4WV5M8)eGtO%bg<-n$Q44E
zeD<FhrwwJH-v+7HZ&tl;9>--@e529Q#0a1Nq+i=m{<P7I7=j5{a@04VWI)pge!+}P
zw}eKXRMdBGq&ya4g%Ai!p(u#3kx+es6qfMJt{+OveVB;Ez@ukc!CP@#AB3R+hfS!V
zLQwAg-4X|&i}-kqOoNfhEJLZWCnF?`J)B1IfZG)wzn~X@8XAp02hC+7b5+p`0s&6N
zI*(Y<Bf9Q{LOhGfoKB?-nL;%Kw+KM;e>!4^3|4>Qse~yM(SaHf9|x@|55aCBKhj{D
zXO=&t@Nc1yyc%C$r>6Z_*nO8gsQawEXS@@en)RK?b%6gsyj${Pk6U=Z)c}?GaIP@Q
zXUeTTo%Qu`cy=;^Oj4My2%ZQr&5TOKN?7+s^jX`<Ah6EwB#rz-i4h*>oT6~~2gs1u
z?=^v1FxT^e5C*9!u7eUffP##P`;JEHRsBsey;?BW(Zx+j)eYzH7zT62c_Cd{|C3hM
zm@|&ktz&EfmlL*lfg4o8@|rqM0>5Y~T_R)}X3q;Zx<LL|lU{h<hZMHOe;cvf7NF$h
zZ3h+ToTZ#R5GE*YxMay$>2yxK*U%Y%=9Y|KFBRbATy$CL4{9jDlG6G3$ha-_;b@^w
zSR?36At-KzQ0WJn4W&PaT0(rBk0c)4zyjjN=db$tJ!p5U`=qPa^Zquu{D?rX+v~pT
z^?5V=S%tu``*rwwxmzpH?G8sJWCBttV|3&dQ4?*9>;UrI7R=NpzVP7M`1?Bi$-$u8
zQQlj;<C%2$2JC^+&t1~bQ(}<!x!kCUTt2GK`xzt{hYuIqU5DRjFYiA3(7emX!^ihi
zw770a;OF|(@rZ;c-z^SuySV8_p!?6~5sa(#^#g;J?x^VSJ`c|R`QmulrR?#G-5^C!
zJfOOJIv5&gSYnJqu(pl=*|Vo5oLT<YV*QWFuzlrVurd4q24tM3S=^Ewh`bU?B*8l&
zoy4uuUxmS4qJOF6s-E1G>myDHn-V#%OMZem8V=$;v;GcC=aiA^b!$e_NQZpB#!DwC
z<sAg`uNtejU;edv7w<V*Pu|EOvfpaZWKaPeAgS!-lm*oR5A?zpF|?wN7oB!HuFbKp
z$)s=<{^75D6ZlKajblwkGhttQK0k*@&b%k3hf0GmDEP?@Jh=0Fx2KFRMR0*NP@XAg
z{`w*rp(N8qVY+sI-9c`t!U21jS7SRxMDav7b&R`e$Jd2bcXH0Z3g6Ss4@ihbLXYRl
zq9RQ=d)L_R)Qu6M-=HWu%8{4g<j+S%+?j5|jQO;v7Nt+VDjLA?-E%6Lq1r*J?@L*y
z1G|{Uw@3YeTapW@VPNB|xC`M{Ffd`FzXe?}xWk0<$$<sRzO3HCU|h`c>FY!b`SG^N
zftcsm!uhCST&yxD(o2tmTADTM=0cn#+ZKe^YD#{r)uaZ<lq?p<x)K6sv`YG+@Eq>|
z%ZL65okY%JY!**cjG@ohUzUqxG9kx7l){Y~eGDpi?Rcjc`pr8kmhx>VOeTfK?R+VP
zvj+E&5hyr)%G|tOpKthUnxm7p)isAFOh>p-j>_^dlqD43VSdO7jqZ>Q>kINNF*0iB
zc#rfu|BYLJIev`ZG9@_jIU;vTu2i$%?{|mZ&-dcj_xrNn8=v!+v)9M*qNdp*7EIlC
zb~gT3k}=QQI^#HP*l)Y8+kib<K81K*I1H0MVpLJo84wg80QDQv9*e?Zy^TL1W+=T|
zxRhy-p*1~*4xYaXdj#cGeP)`V;H11Uc0eH!4U)e9u>*tpXT?yyN~|Yw>A|sR_c_`5
zj2bK)+Zs!X5RsE!X#Z_wOmBr}n0k*yAf`H*JqFi^pL3~0fDpe&9JTsRFE1dO0aYHP
zplSPadq+b)2??p0*`E)LPWDvN;eIe|hei=sI_h)@G+s)+P`$rjpT6Fyq?+76%EfrD
zN4ZeRp28m!%H|)^OL`~bpKwj%l^u6ZOm_~8e*pofd1JfKJu<nhtY;CMB?PGXjVEr$
zKugc4o$v`lm!QF?^xAt@{R_KdAtaMdNF^LT!(US`2%e5v&H(^9ZUn*df0GVZ02fAJ
z1#D)LyeT!6IEx)<5J{v3WR>w92!woBf~Wi`R`?+UG3(W&gF3o+(l!ZT%<r*`|A>j<
ze^iP5lvzpR-3Xrgv`gxv?)3#@8(e8cRNk_Mp<&^@XU8^=7R|kXL{ZiPchW{s(PrMW
z{6l0&P~p@Hj#R#3qoiuf_i_W@<{}vnYMe)s2-R3^Nln6<_;W9=;8Kk6(8mP!$f@%}
zi<pihpl)1rsYvw@YgoarGbURH^vt`q%KEz?U0hf4^MXNpB#L0$V-_`QNX+XX`Dhx0
z<F9y2vyq))4^fr?rB!HGjzT8eEG@E)U?{Q7hXn2GfxJ25KfAzKz#s5ms$LAR`jr)@
z^QwE%l4=1jfyPCL#u6Qn!V<aA9Z>g9B)}iR<G3mfT}eP!HV%b8934xN*Dq@sM|9<c
zSPwNS*|HtVf7}j^qCC(bfNg~|!!~;)LHRfgjgS2*i~9K1WpRQnnWLxjo7S5lQW3vQ
z|3Eh-ZVVN&-^95l5fr=W7P<WdJ^73ME_&QPMAagN<W4~U3sl*~TYT$xb~EWj=*e3=
zO0U+;Zkms@DK|?iFD_4x$J+XxXJ427#ZbCl(X@Rcd1{S<oBy;0o||>??c=)mRj?Ig
z+Tdvf>Bow;;8S20Vm<Y3ZB_bhxDpR5z8X9uViHo+*q@lZZeC6|BLhOVOW2XXl(W6Y
z0Eg8<1J0nEVAeQc7|8%m+>*Sv$oCRtYrA)D4PZi35fKFn$name@Iz;{t0ezgvqa~b
zNmF}zuLPdS6!|L;C^;y2-8o|`A3+h}nm1q3v^N*t3_3Lgy2ef+Y<^kfEXJ~GoIfQd
zBm<Seb4L=X!zn-KF52M5)Rh6}beA&)!M*?I`E%x2q|In=i0T6-6}6tWz>|@B^WOvm
zGd0ZDc-i?dM%38T7E3KQ5iF%-L7lL*r!EOb+-Psy2X`G;Y^*Q-<87J8lW4uNcjSrQ
zS_gp7%#inNC7~<ZZ<M5zLr?fJfrfJzkbEJC+l&eCir9+zNFnSWG8MY`o%<(sA2{sB
zgdcy-Y_$IptK1OZm*Q)hS<ff*TRvzX<G5c5Yqji1EDUgrlw<E50JLu{l_&j^Jil%p
z^v7@C7#TvefgY2yzH~3C3Za6n?*wE5<$=f7lx6v)q4yUC<mAmr1@|dmI8rZR-fq7R
z75uCY-|s}2Ye@UQD3HG~+>^a#X9QsFPra%=Hfmt0y0sk~DS{2;)89W2<78=#|9!&|
znw#)l_?zR`H-WI!ghpiJ$Mb;$cfiL?(27&16+Y&&Q@fBd)CwQD{VR+dIf!knpV)wo
zywCpj$i{yew%=d;VOMV;(DN)=6d@bz5065qZ8+KE+z!h$f__fHT4Lx*3Mr;8U~pjV
zIQj1iS~T~?T|huF;+-)3p&UNv#9>sHBY|ubWgnW_!+^>8mK30F(ty5@2*s1?C^wDC
zVlMQ~+-(BfjOu?TP^bX|l=KWKu+bc2PG;XRTw`Z?-%6r7kvm685Bk9TsTF)qaFL**
zk{_Z)jgbqd4n{#uXvNPb8?G|bW^!C-O1-Y5MGUgrv2~F*r=5px8l9)5Pvt=D))n6_
zQJpk{Y2EjEm|`OwWtQDS>6HE9#@aWzG;2GLT?tM2ejvZ`EJr1HilNqHux`aLW7lTw
zc{d;cQugwT!eK-qXv7KpfNxpk$J_P%3O*GGcg7kHNzWw8ZxEOjk$qqeK?=J3B=EB(
zIIbFyz+#Hn&|B`g+WoQMe3~F=FlemHv%2Nx0FIpR4{uIhoY>4vcdH0RHz|95)e`=o
zrDcB>LiikC#hrV3Y7`^vwF9WAAUrrvjzy@yFJf7(4Y=IRt%aIvGawPxjfP+a>UI{K
zo0ENUA}Bcd7iX~4Cvy5sc7Niw_7w5Hh~%sbGGD~ealJZbY5c7O?tc{GM<I(-Iz|Uk
zGI@DYO^LBkg|yKkh_hqR%Q!uvG2_H3ibVs5d+%aVYe*2%-GpFtIS)foPYuDOSZ3t+
zgIUYV5C-TUf2=<~QR%inWQ=Qant+7r`S3mMPW>YD1rKA;t;=!e?$A<F96`sOz3vdK
zBAh?cBCLGg9|__@^WyT-Oa9!cA^&>IIQf|J+wa3Ufa9Ale03cpeNwKt)L^UZ>$a(c
z#^5~9>$a65ZvIKCxF+Fi4dmrxIE*3IhHI3>G-($Wxg2EIW}`)b1+I5qHJWy#SFy&$
z!l<uzyzT@yOLHQu9OgzuGlI^MR$*|l=hDH5hCuzLdTV-f9JfV023OE1M9uyTGaj88
zBz|Rsy;wz!#AfFq1_+9HVOh>P@(T83=%-?U$icPPxgJq7<Oe*u>9JE%9imEIv_paO
zWdUMTZM*YhHf@)tV)8VTm+j8DP@_M%c<5UO!9nP9Kz<u(kl9?W#dLB66=XT!Em>nJ
zN^(dPBH@!Umx&H7&c7^*b3$V@K%MTaM>2$L^6<(N>S5TtT(O>a<AIK4MGG43vLkcU
z_c><D139uc_?JnV5A<RTb#{U0Cj8)F(R^_t;ryu)Ef&$^7iy~nBOj#!`S>xNeqg~d
z0pM%x@a+Fl&%xOk*`cxZ(_HGsRwQ>h7$-Q*fsWYXyP=F*!kCe<f&NlkQ?mN^v6l-c
zG|YhlF7v_1z=Pl-T?79Z7WIpa79b%pepq2-KyHYW|JkQuDR7>Jvnq_~+c&38SI{Sg
zpKj+h7NA^pH~v6fM;s}7YhWdX43L3x{jT8O5@$BmWyXZX)<Q4=-9Y=BM;+F{0!yuh
zy^%GzCg$IfZRtBHn={S^W^N_qHMdv4U1>z~2<RFIQp7)`tU{$rfOa_)wG!d_Td{`A
zl#Uf=F!E8q?X=lM!>6B~jL#@bJv7H(0eWRhc6YPjI%^YG*n1e7^qI$s#H=1ou{21q
z&alDOkd1PfjjhH-jb=bP1r$wP<!ZGl_Bn4#<jkxqwOa2yvB1@s-PKUApLIe}B<}TM
z31oB}mtzjn07L4=rHz#pemF+`Uw#yE&;lod@Mokj*E>i`HSdzwMAQbY#0j%HQXkGT
zQ|bk0y3X^$bGJa1g{fsiRjy@M30<nAw5E`}%kr{*hQ=mX*5GPL7SK%xy|mZ18ozyS
z&7BryY6}Q2$C3dmbL1(dN`uMO9r!PDSLmpU%7>N-HbL}FmJEiwNxEeg;H2c$hYIT=
ze$6DGELaX)H&`-QDzv>8he5r#DO%2S;#;2r4+>q^64onmYB&+9!_q~_1C_7cv7YHI
zI>*nN6!)QnlGDr&W~>06iCB2+&Y068`(@NU5>b#&7orww(=whfHs)MORIVF>t_-!}
zwA2f%GKsfb66nYSbxX`ev&!S2+v}>HYd&S4T{{@Gg_UhDit_d5avWk=w4w_+*%DqW
zdSQNsja^zfXH7g-Dl@|5vQHR*C9n!=jw0*@qSRc}2R*%xl$EYpbW-c6v|55*LVRNK
z-fAOS2nU93(4}_gB=C^b$3)Su8LEk=Y#s%ok}Vefr4Q1ofs#bqY6-S*Q-NJrwG8#F
z^;RdjwQ;IYQiGOdkMDNjMd;pVorCkag5Muxd-=7_k(AY{nB@!6ARRUoD7c|o2u6J~
zHjj%I{&x@Ye3^@;QVw)UqB*1#gR^uZuwX-fQQswo)sZmfMi{%Re#EVa3zQsmC*tJn
z7jZ3eM9cNZdHFl9ZJAG2oip(uA{tyX8%rdUZ6q$rg|d6YlUNg5d*iBERuha?7;{hI
z#+*!~L*f!y^yW5gA%hvPUrQbpJiw5krBLM#uLu!P1E%%X%o~}vLIgp=*1nD$F46KG
zkpDgOqwBMV8wmg_2SSYm2rtlri)ca3xAqd*$bc|#;sQs*a*GWHqET6nxL}jW8aeA>
z7bS|R?B(;ST18sE^r*eEY?)>I4-1GfdVNv405SfdW2-5;9x|&na8U(Y0l8EsAwJ|0
z8>`?GrmvQ3d2>oJfe(&|L6n|jfK)Ov`9x}=_SLy6s@{5MU-+2eP4R;1s;ch-T~wk$
z@6?fCid!t!!J~CC0A7;dbXp(UgOdHQfu!Dfj_Aqj;0cw_vhAzKR)jYjBD1U0yNmRt
z4soz|mrfAH2UjZX>;-Nw?AVI)FD)vu&uyyI8%)1lIOZ&huzg39rQ{Y<YWCu4tmvpw
zTAfq++lMF?P&XPh?(dqPIUV{}CifKY;<^lP)l?*tMt2mx^+e+c+m_a*n=cyr6|nXA
z)}NlVf=ba=BGILz<w+;bz2=cK&uan$sAj>b)-fV)r~XAA;kNo42nRio%$X&<5i2UN
z=9qD8XVo8&Gdnq5E@!}k-?~R*)gH+I!)hsCuS=7bWkJ_+&T;w*?9X70?Ak}CtyRF(
zG-n3>SnxVI`Rn<85RnF>Nw_4973_u3$fB))jr?~KY9AyU`RHyT;tr#UAq{$mljzHF
zDj@CfS75!68$Y%TqjD-G-fLyOdd0EH&bni&Z2R8Ri>T9JZFU4*kQ&d4JY}jrTPKy1
zzGAHps9Y&yfX~3Qm)}?WzYPJ*{essAPSvm=Cl|u=Gi;NAv+x)21Fl{xeo`4T^pgRS
zgn5GRp{hZiG+f*DEsbps%b~c`I+2^NA1~4EqZu1Z0f|Xsvc<D7=!w%P8AXG9VQe}8
zrf2iSpj^z-rsM+ny;EHW0CefCdg1VNi>ycSH-!dQmKs7^qTuQedR&%B<iMIVPb$&F
z*3f*cdP*^948o#w1uv-}py*Z|EtW|Vdvw!F7Ia-14!p?)_cI{^7F*!GU2<|yDgk>#
zk4$UJ0y$3HC~QOoEmj~F8qwn@bJ$?nLMuE5q|EW5I5%0NX**1C9hFi>mBY<S3A#G+
zC^OG;MgVgUnM?b`_iBPPuJ3r9C}hFrW)58M)#dFZ=*M^T-!+8#<6&)-ysZJ!&3>@w
z$YtFzDLl%TgX1%vrUi0f&azTF?{FNoPCR`YIL+(|J&Me1`*LPPKU<^o%;8EpZ~*MU
z-6u8j-ONFu+24bijC!nQ%Hte44k$+jI-Qj<E@L!9JP;6qKOu!%(!R{j5s?tE!9`5=
zvr`^Rlf&BP%JZqX7h5>K^kc+;)v0!R9h3Z*VSo=g4aac<*b{7y=%_6#{#K;K>5ct9
zNAjQH))?>_*1+u$5(`MszWl{_*^4v%tz$qioyjog>sb+6Wvv=sU|%FI((Zk6SdCXq
zrqN#%^DFG;#Fnfw_5HS*GJQSvyN|{9qbQs@1DAF8KKZc8il`8WUPS!m`7e?D5`}gG
zWRQ!Y1rhX$O~k>MQj^JEXGd&x60=wjqb*1w3JO_38J{*5S_8<+kcB?gMu2SgpBcM9
zGgW;S>{xf~k*rzpz-iVCk<Oj-MgY;I5jxy8KHi;aA--WDu(t5kBNysf9ql>ob3(xo
z5foN$QvXtOO)qxX_!?!F3TrLSn*UH<>B4^oMP-S-ce5dPjO(TFGNEN5)}z%m*|97K
zVuxXvi#Go9h*?=p5G-6ab^r)YbSOlTun9;1=~ZgMfFqbJ5`TeGY;U4+MzT|;#l9~)
zmM=5XTY^5<SjqNHi%NJ}gl3g<Jh7Anm?LOnU}F>zMB8OWwTuat2}y+u9LGHPHpH5{
z=Hm5sJ@C0GKs(e0I>t$vnTK^b9v2>~3qUjA+INdF7R-wIxTC<Rf!n3`U)Zbu9(`63
zT*RQ99+i5w!Kr1kw4A?|p@(LtSL$q{s2*;CeFqfhWMP*x{maM)Oc_g>yb%$39VB)i
zXO9L&$6XlrYjX<GOf(4ZQ46E0Ik0YUq=mzSrewVg6zU7iHIjJZE@s-R>@Fu);Q6yH
zv>o9Q_maFWKBi)4=W;lSd}?*G-`z@W*OK08JVT&XCAcjU*>E}^b!f(MCumtFD*WqU
zZJdT|dt0%okjG}1R^7OG=Y#F&Za!Sg{1Q`Ui4)lOeQd>o$BI->U(W5$-w7i)^~AH4
zr;DN;O>0iE@jlm1&%dL7(hcC@FtZO1*^8qWuZ?cIF-dY-<s$LQa!Ls?&wISad=3&s
zI2zyzDr$29IG6nkrw_66jj_~Ae`iC&4iUd5wA_z&^h4_BHl;f5bh(zSrKm*)*cbWj
z)9Yav1Kg9nT<sjWZwW@2m)kNpo7v$uDt284hK@vG!d6#2#KDa&>))7~b7u{gY`Iin
zQ8kWy_cu@_J)0u0St%H%{;=<`MvJd$N5=x~QU@NfJA`AHI0+VmrAmbns|FN%ADX5(
zfKAVD*)~5S+iaz7oTN67*jTW|S0~TpP&MGq<t}xwP*J4jq<RSz1gPq8^d%bL43xP9
zb}gv59my<`4(H&N+niSPj<rc1WS$v9DH`750wZyZwO!{XhH;{c-l)UYjpu&sj2K>J
z+N)ArYbMcXcXdT-xw_5oe3DPpP-sr`IcJXedY`9`I=hxov%Y~!^SB#%Q|7zirp$DO
zzu?gIQ+I_!FUcwx#?xOdkhrJ%o60~DInk<Z98!=aod1Co8~d~lrh-uFES{X-{14({
zU}daV9cO!E3dp60n>$YT4py*wnddg?eteBh5#)WXx0hAD(Z->#oa15Hx^ArgbZHCw
zt%dKvMF{OVewnS0&*WIrU*h*#Ww)i$yCgs5x!cGpgS$87cF2K9m-FO+5vSXoy0f<a
zWKHaBsy<A&-ken)O*VFEQg?x~luwJgqe><(<<4mgox-yPjX4h%Ic<24h9;OE!7=>j
zun#;cH^LvJ*ow=K&|vh5o$F(P!s?6}`gBIVvpc<gV_<y;-nIv)d0$_Fi=yOSJe`S4
zi?h_Jz0}>Ns2gjp*Bq|Ks^x}Pp{2#=(&iGr>XNo<hLXY>0gr}U=03{4?LjBMY@-K>
zQRXggooQo$dc_j89o9dEdZ)Aa50(?Jc}h(6&pdm_qG81LD8`*O@itny#r!`J2)3O%
z^@Yuj){m5d@GD`|FG!I(sw3}T6dg$%k-1Fo+2dJ;T%(c$RRn@K@O_KlLKD~ujsE|@
z2z*<xHQIArL}Bgacm$oZIpoK(<SEk9XY~b>fe=<h1`O`6|GbZE@gm?$Ir`taxqpDY
ztXu~Ub8AC@w@R#Svzr6Lf+B*Nxry{f{oS=CCT;Il5j^)Su@Ii-ku3pYlbTFVB1thz
z%PkY#&l|gtJLDp2&lvrg_<7-u`wZ}WpE^;Z$4}Y+)}Q>20wH{GvQo8EPT8BI8*k04
zv@th*iL~0<Al3Bm#ddksDZ71NVLzm}wDUpZ4xIy5JA7#*gP=r$I@rL^SyEbf&aaqX
zo|J)SvM#XIc3yb!I;GwHo+wkq-NWvF&c;3$`eA~rUiU6=dNNofcC_jY(!&_>%W?dS
zI&lf=JXG4^Xx}6#oI<~2!MCl-;0oxWne=jyTJq&;Mm_FQksk5o2<&XOPb_L@^zVge
zUaB+~n;kIH9A52u%<ihdKPOzb)h<mXW9KcFVcT=Jj!%!LlTuCMCi?Li_UcAn#5Zx^
z{(z5QWnj0RPW$_?xk_dTY|HriqZ#A1+o*8$tfc_!?M)JXfE(-c8Do(O2|me05TFr{
z^1!(bczxf01ic<i&+bfe?4+#nwFHY^bAd0{DvZ_QXHci1g@#DQ>@;vcf06N<h1|V+
z<XM5Rac!B&=v|TPw8&B(MFm=baCgjYDadV%n-V0Sxd`QyQFf!D_6l37kEbzxP7sjd
zfDfs1z~k0;vI}jEPK}d$lQ7r%E^us+d+$CNmI$)4xYFHJnIc#dMpkR9=msd1QFV><
zDBy1t0qA#n3z$PRDM896vB~ff%34^>U;hkWzvQb>W30nyo4Jn!Xj}cwx~~-rtR)kL
zpg&5@7%!|@q8p6u{$F&xV{|5A(={5~wrx&qTX#IMolI=op4d(%wr$(C?d0Tn-gCaQ
z-XGu3Ufru}Rb9LG)u`IFQ@rW;u3G*JpgMS5(rUO+b+z%*>T;%ti(jEQETS3`2@$kn
ztt_IUM;%MB9u2N&vO6wc!FCfBJ{GXm95A?jPNC3z#(f>uO7eJYkPM=mF3p*H#9Hbw
zJ6Jp+VgV<dp)I^uwDk*|sS!Kg+(^7%xYPq9;2LQd6(s`NYSEg(mx1rqaEhN-Nh6TI
z(iR}j;>^=J1P-5#Z+%mCgziu^l;m8(V!3&?UC~LPPr8@`f1;`fRk|?5zh2vb#BG!|
zQ)f_H1~UKI!mW%+r{<Mi?M;<=1_LXwd^@7q*K1S!s?rJ#yI874XVNxdS}#|1uAW1r
zSTeo>J$fleM96d=ELNqfGWy^eA$TNFd*%M&1wx5PP+QdueGLr&L1Y63kE$lbf)ohM
zeffhth66uGYm|eG*|sw3GnNCJPybg4vmx0S8{g8ohO1Pz^3%RwHlA?|#y?6bIH#QU
z9vuJAKn1>GFXMOE`cN5<I5mOSw=yPPvqe~vL1)Btvj8zC@p6+4rPy0oF)-)cn#a<-
zoq47PaC7Vv(2c6Wsuq+U;WT6qjk0?+LwSjgVES{*{FP~aht~5Mx5;3)Ckp!grL>g#
zoEqm@-C8R^Mzv)WQFgjr3G|5uV23{-{b<nCk8ib+<FG(;4kEdsiwSg-JXdR(|F#mg
zR8^jbzOtTZu3D*q{&yqq7fRF;frRtLDPK(qj;FN&?QVh0u&zhxsNjxiJxb4-M@TeY
zk{0EwbR{_zNM9dmH@b}kwp<euE~@TT_Tj3RdJtjI;pWC+BNAT+$ZT6<MrZL5f>Kah
zSrMb79|V=1Mj1IKnpO*DUA|3*{IEiM>7fJtp=>3dJNMj{O*zSUe&D+K=Jn0xx>pH9
zT3HyD#}2&nl2ncdL+jNJ7}#5c=D!E`b`RPnvG`<oRr$4NK}v=N&5$>P9)g(lDX4|+
ztZ>1Bm1qa^ex+&VxqUHU9UXaTpX!CXQGQNpR+IaD3k&iiJZ4XCuw;3)h(GLQ$NZ`@
z^TRM6i$>s$^`Mo6xLtI1Zznchw1!5vciZipi*^Au!%ncu!_G<GRBfp*LdMbHmJrK-
z-w-=}{eZLfX@7r&T@rR0DRfe+>K;Km^ayx!2;h&`k4fL~QJ5zcL2UuHe3c=#QQC~;
zTVHo#JX|pBU=Bz9#|~wc1?b>gH(}11W$tU1<a=I{J$rvmiz$mjdLhs!66jKjL6;zv
zQ6Px^)t;6Xb`wWTyW@%C_}Xn?CcZ3E?#6Cl0!(-=Xe@D9<ZUY#Q@X}FdVR1Qln_LI
zD3;?(BtMhHuAunP5o;1T1{L(rhI@1)5e^jbe8h(+UVFu>1z_Ut=w|e-o3_jy?`I)D
za5|@-VoF{b_goAe|N1!UP}r{D_BjlNKRQJqWG$x5Gij0jDD_gtU>Tdn*~|iAfKbG7
z;-k0kW1f*2K+qHHKQ>T#>|+6_%w9Lhk4SZ;DL>;_(aJVCgS#5UN!<@XIkW79c+)q3
z@?PETMn{C`4@)D59%7kXWz{jb%`Y!5JV~5ZY-{CHR4J*r%8Hmz4JK5tpzC6q9X$3A
zATHPhir=l%_MLqRv8pA*y32~_z?JN~gB)%EG<dU|7cV8n|HN~Z?>+tkCVjNXt`w+&
zF7+lvk7EvJry=UP4X!@kb-X#dRilp!@_BttA|UHlLiFB+-3|K(CY{3@y@{FR?4dC_
zn^`;Z`$DAJK{fs?9)XS<f5)<q;R<_L0;>%9xER`fHy|BR3@J?N)0m|j$!fsO#E<@3
z;)1)}YlSc!aBK>eo|+CwU3A75AwWf+GE$K-y}7v4O2NiTezP^S3sP#JJ@43D>sNhT
zaYAhxsANs-yc3mP=5NoPrZE4SU%ql#M0eNO*y!<bzSLgs!Y{JQ;&Cbs((%HW0Eiym
zv79i_&V#F|9WBThF(ijEUO>BPW7DR!jaiw=N}<`HZY#1wmRdi~4`|`OmtsV+@VE)Y
zolb@)e-40E(}9OiZ6vo%%d7oSobFi}m~*i<gHJE2ESBC<eNJgHJQ!<Wl;2F*?WkTT
zQgfMXx0!rfOckrp!Om`D(Q=mqzpQ83Km4~M&T$pMei4-$%%<Y$qrb?JCE;w5j9?&J
zKF?yUlxc3?p;-a-yJCOQdDN)llamWpnx2eMZ7JwQYLE`@*9W&}8_X-R8f;;I`2uU_
z%vzVCDLsyw!X4ktd@&pHogi|dK^llTi>PLwDwb{-I}#`Cck<Bztzw6{ZSGONe8^Qa
z+bx@vUU&%)x-72((iVvRzXa<2$!rbK1-huVl5xQqX+dzq+PZy<(Oi^j#57za-Q&_8
zvSc=Mny$>kj;gh>@PJ=XpSkL*yr$FH{<9EfxbV+70olTp`gc!cfv3w>GK`w3mnh>r
z8AX|aFlU$Zxz9E!hEfvvJdEQT`d0Om&D^MN*Nr=*?!_MKtE9#5E)SvPoZJY2O!ouI
z8A6ZhlUkF8a{Db&et#n1rUlgN+HQ@9C5yJ(7`s0kvYl|GLcnu84BKP;LKS^4Hyn)F
zZW2e~7iPl}s!%=+xPo7gqj}HOfl5&VkvK?bU_?-l;G8_)i2u8MP;4adOz5Y6JOC94
z2>bt1KdxtC%V7S0>IaMdZrWvVqxEdRt81KztXXg@x>OhQ0o3z@ip(tpy(*hM9q^gL
z*=yo$)J%LoWAZkIVFow7&C~VYkN58n9b4Q2S$bic2BW539fMMmRHWD@m59Y2IaegP
z&G2lV!q~Jfs7A|zTJ0F*<r%he!RfI|!qCm<Ygo*@B5|g=RLUg7r?8d*e_omjOytPR
zB`F45H9gmEGBHLRYEeUI5lgJTBQXc3VDyT<ESZNGf<(bueJ*g8rr>gBUtMCnR?2vD
z2y-`?22J<IOG`sZq}kEM%Fz(*_2rO9S$=S2>ol+klBBv=8AQ)H_M8cz6XDuqTd!J`
zxlArzBp%e}QMbPcc1>nT{qk6yBhi8_LrzwfG|BZCMxy~**Txa!yz3*9*2n)k_|bD#
z!Vy!VZp+#&nQJwF;3SsE5K4c*GF_L5Bi!ap+gP^m>7X2%)Ao!<e7ZN>?&Lz*%~E>Q
zWiyxP!X*$(6<s<233>E-W<1+CS)Kit#Yo_iKhyiQCUf)1wx}V+7v}-v;hgGrTZO8{
zbR8Y{*Sy!P)ZDE&ZD-o8%1a)lGSog~E)B1={Il%YS!U^)U!M=Rhny*{1LNuW9T^L*
z1Lw&h=+Oadu^F_IgNWS(a);bC4|9E`w<QaM6;KyV_9u4gi>6)Tc)Eu6do22@kL+*p
zkxA^|)WC*8%k)Cgr|2_+Do-}aDA4D6j;hgjLcX0?p`~SuK;EMUSlWsW&MS5|wkGyT
z6ERxi=R}Qbim)qdHzWs&GlmJV2Nu-5f6;utHv7WP;%C|XlY#d}rYGEa!L6$)4Wm23
z4M^`Y!*U-#;vE-!`*b{^twA3Mvm8YnBX>xiznXvus3rm+W6XyW?NR04^fN{6aW&ob
zBpN`qZl7Ry6^tr0!mkYz2QQ2UXLyX(b9pMX9ocIOC}P;>wP35~1p9;FSsw!p_D&`j
zqjbwpb2iE+Pa4y|MmsI-3BR!Wdq>V40-v2MJ(Wb95rFwkV5o+Pdu&*&3#6sbG3PXJ
zs(J0WJ9YV)vLi#KhT9*PBX^d@F8$2+t~$ZzL^t2fWL3Vuo^L@H9>{q|ksBZz){@?v
zFn;<y2WoM+OQ~b`(a*|L`#%F`wEIUE`lcflY`Re-q&REv`d{Kt#DU4C$(<Na3?#^d
zhs+|4*Y!(N7OzwiFK|}_>MuoAj?6)~sjeSk^7egPQWOPC#{ZdMt(2ONp$JWj#8Y`}
z5YMc&a@lIU!Sy*B<4D?5;OeFxL52ln5S9PRXB!Ue8dK{V2p139fF@cHHyFmj+bf)P
zK(@fD=1e~g%drd}C<J>d;Op`3&%<IS(1hvA>I5IQexDv{xSA==aL?x?8~Rdbd;v3n
z2OnG0-ch|Nt#i2eHvHb&DS~p=hyH_Tr1ID^+BdkIT@S?GP^mqdOG#)Ri-=KF8>)8|
zXBTLWyiZGrvl4t=i71v>n$qX=p|4W}E{f=Z#1g7d>{>OFtoQ~-Y>YMtlY;!OodX;^
zQM#Z$!Mor@yhlqZVJUfkCVZp0boX***Ar%i)lO_|csnpNKTvZ;GMcBBIiz+t-b}&+
z(kSV;l9Q{bD4)J)acWjH&|DlMd#U;REu~Pk>RG(zUDh6)-I_sA<@d=`a(rBJ+5-0T
zO!nmg=>p%7j?181h~Rm*&vct-+)0|0zG(BBYmRQcq)}j0QjxH1H#@99ILO5W526O=
zJNW5=vYZVI;mJ%GNiWm;FMKD)I(fpzKnJzdXck`u7S~Jz_Kz6MmSk=B_s4n0Dkn8=
zKyWxorGgL0|0dwp)y0&ppP6vw1fc)d1|H`>CjW<iFT5>`)`w<q%=Xo-&3~a`6C~^v
zMx${jo2)9)YI~4#IS|h038EA#CIW%Raa+E3cROA{`z;tyy6Ch<x2!lmrDvsOWwm}M
zn?LrICTDv*56-*C74J<D_E%#Kg-bHdYcg5D1y~@#2be=xNS!<n#a&2%&MJWTVuYD}
zW$0rG8>5~><rDd@_@C%RluYY|RlU+(4bLi8a&&+DTjGayvZcu_6Pu!c9dCvjhW4__
zo91&678znh5-OP0TeQtuM)$3rb}U~EC#ng^zB|ZZ*alm`DDoH1Df;ka>r(8VI8mrI
zRTy4|5-#E19KUlzd@pI}>1bmrBoHA<+}gWbQTn@~Oc(eI!0wkaxD<4iAHT54f(PKn
z9L3RIQtmoY5ZQ(msc3qrOvncYqYJYa+`tW)6GZn*g&8r!CqN6rg|D>p18HLhGG&n)
z*ddUH1#*Q$?%pT|u>u`-nWKH6K3^Nn)kB_A`{7Lq`{I3tYFUpJiWLFnO8_?j>GMY%
zOQ8WlB~qgWmpu@4udJ<aaj#ia+eGXH6bp%kzq1)kf4P(C`v-|I!_K9di{=A--hCwm
zTzyx$c-J<4zvOTxwo(U{^&*q?SqS&jB^4_646Kkc8}nb?=#~h5I>iGq!r>L55@GqX
zyI0oNeV$sPp`QnZP}m6AmIpQCcI=Bt2qL}%5fBX>2q;10<%f5zF~muMjWm7QpXACu
zp6A}%I0fL}O8}q>J9M{+GI-V})qhLAsLWw*Ib|IlL5MgDYTOKBG8Ca8<`l$?$Y|Pz
zq}v0!(Itbo25X?QuU&JlE(OjAI^CR{F2MKM{2ID)Aoh&G>%zo;2m74y=Y%n#JgXBa
z*x;1xid9MfjBg;S&XuffrM@o(gxv-#TzmG<-17=titoD&R=E8!rRwW9fFZ>J*NZZG
z=`8{i_#9ABFgU~?G+HSud#Ny=oDXt&L6d>Y&@h=1h+a>g%DJ!3*QOiqQSIhn$c3G|
z!-jy48pG9KWkRcY^0>E$6CvMYl?~I6o(>?p8xD{F^Vw6{Q?Tb7HK-5~t6?1EBFe$?
z{Y)CddFsOzkK)5J1@8WqQphmX`+$5JETFGv99trw4o8?|v_%=y@o*Og3KIu;S1aYu
zOcKSNTQD2dROtw|?=6>VC@=l{Vr#5SA`LSHRJ4Ah_(A@eYg!v14_Kfp1}tDG^@Cpi
zo3YG%_N1SP2?P78UUPCq>^CA$WkW0O)a7llRtMp%75#Ul>|Q0?9{f}TYV?cIG_D6@
z3Eq>jw^x%k9RB6fNiDrmz9hYBg{Dti^JTPDM|V9*FNk&wse~Eyt0I}~Z)3TuLL*q(
zMw4;2+%>_Hd&1;$r2_=~+Gw#QdVDwnV|f?ZRya0YzQ5v(BJ@?R5TBYry%EfN-t2NB
zIcpi52I5ZrZ`C@I&PtZ#7F8nQ0Z?urCj=hsnhXK{XGRsF<F3^Z`(OCh_}?3RYg{Yb
z8{At0NyGE%Hlm##=&kN251PH48U%g}9JdN4D!h56EMJ>wa9iS6#{F`iDG&qY2K(ad
z9iEgWRG?}msKZx$IS|i-SBa!A?^Z<lL_PI0*O1Q4_nx9cqP<)*YRCgUZ|M}kNV2_H
zQ#~ra5G|HSWcDCm-R`obbh3E_SkSppJ5fOsW|CXrf%X`bk{1K0B*;TPShLjgBD|89
z?73WI4{9!<`R&dN<bJ-JYwsnT!)tF}Zg9E8XQJl*5CKAvVL*{X_qRZ01l$3)Orcs6
z4hRP%2Zcl_prrw$PA;Pd=JjVn#_eR%MV^-a!l#tPPVab6H(WoV%f9h+_<(4SeZWTI
zED7_T0wsaUr6q{~2ExKVA^*kk=nsfS<wm1SWzy<z8g6$=ex|~otme*II!`Z!NrauV
z2wbFMd7KVl=u;07$OsU=;`MMd7nC>0qb&y5A&I~zt(Jr4PZ;!(ht=)rw@Zx&Ig)Wp
zRCJWHPy;!G3_bfP`ht=}I-t3=V(7F5rYsW$9imO^&-Vd=f`dDQ2x&v2px}gn)<ZhF
zg@ejCW>1isYi0JFZEg8JS)ae|!vH`($?~Ia38s-$VN}*(cd)=cR<miWAoY@*6>jia
zY7mL|KwBsQ;nku>BL&1VrzkLKD`mJOk_nuvKqDlZGV(vaBK$V<9$^Opwq^F26HZ2U
z!bWny$Zv1XorO(mikHdMJp3y*_F~MZg;M=32O-Rx-x}211%U#YtLstNB;>HbOF@4b
z?5`h{yWO5&Ig;s>*JKj*{!4V$2-cqo0|NdEFSAtgc$NnN^vSX32%A_)Tdx&S;e!`I
zTiY3;56tAmnvpa6I}t@-Lkh|yCnv*LqpswKVF4Azghd5BL1n<jWxxGv-TLi01Bk?K
zi?k5Ez2N;8+wq-la(O<9{k<E2pqO3|DgSDd7KtoA6h5dV(gsyVQY+jdJi@D*_YMfN
z&zkt_+Fx+!ZQro;FKPFLn^Vh9oj`d<sQnHeEZ1!MIYyKX5)bV$UT<^#%J%ZIu^HWc
za(ioQ>Ar-qDf>zTng!x~#V0Du$^%9B>o*9gS*{5P>&gCC+8!{56gOMgR3BLk#jilQ
z7e?uL$RZOoRsA#&OA`dj0Dwj&aZOndBt#F$z&tl`D^vRLJ=zlmUGWad$#j~kGEa-e
ztP!TYqKm<cKB|*{V(^5Qq%Keb*vg{(#+L7w@w3JA$#GUEpL{bEbF&vu1Uu|$F%z(G
zsn}KPIMAq{6Mru<HkkJX@9eqrPF?MEiC^}Mb;NWZ@Ik<BWB}KVbHw>!fj>C92FoHC
zPxL#*C8y!zheO0fFW2m~kMLg!jJzxwgT2!TeRLh5AK3t&^a*XCU0_A_snW9{@V?M>
zM(CZw3rN(>@Zu5|G3{!Y>Cc1;i9_u=p9^@3*b)eQ1w)fyh0^*pF?cG@7f*_5YJH7)
zm;DQ20+lp#Y|q_+@(#63el&Z8;CeLkV*?7vOPm<IAuB5;|9U>GD8_SM_?z$T;}+f9
zjp#jlAV>T@@t{}idCsozy?e<?*=fZ1`N7wRP}V+ikuVThkANLOdUo)-ItP|Ja`}Rl
zfIe@wW`9_B-T~7YiihU+6^~f<-Ks>!<wj^LS*bg`{3o(Bono#Z6{@{8qTzdxNk)Q8
zzpq`rr=iM}p{YnmvjPuh*M$EvX}H|7r1cuP49YyU^IhHFsS>0iC;Kbp%x+iye8Hiz
z#<_nZJB<e{S;D=t$E1>`(!A_aK<8Z05SJ*`C1idGqJ~8<<NCoE>Lnd&n_zEQ^YiY6
z>TqWE5tZq(EhEU+$E;OpvPk<&Db<kmoX)F_ZcsV`1YnnoaMtz-UFh8CCIKz|8@wHe
z8Sa1Mk+lFChk4Qg{wiBnQ!GFiUR*>M2#lZuQ^z2IEGSywHNf}qx@ShWAWu{b1MDm2
zs-4LTYvb&ZurP>pNnF538DM^s$`o11I>f~M=6iL@P6_3}O1<TIft>hA&N3Pg1XTl0
z2w=FGnl)&rxUW4_SN|GiGUP2+zi6&6`M2G>y2&I)|Bc(Z8beRp8hw&B)m}9SH5dhR
zZ&LTxXw(2sV5yu1p(K-x=a#b`s=L*GqnjG-js~m^a2QrO&QXUSs;bo`&QVuahOyJp
zm#b2BTumV{(4E2Kr@+{tNv%Sy3KEd{!uhnqDL1zLu~530-7Pw8`|}Hyfwa_r8Vo)-
z&Cigj5~8|yXU|2btsEXegXZ|EgBENIL)Gd;@z&321V0c`GH8PX)pPVL3R`6DH%{)w
zH-Snr+KY!S6WzTYgc?(~d+Q80tcC|HWup=$O1yN-DRKj3)`JWUDuc3DOczmOgxnuB
zj$y(ryP~~HKH8!Dgu;;J<%Bu{p>MUlZ`tJ<D+Qn0I*ANJ?%D_(JObNtxjt!-H8?&)
zA+y#dczZ?`S1Pd#GPd@~5gZYOZHSM__d%E;)}=7cBei2u4XztEfSaO9M#z!|9e0q*
z`i6E4*GY2EZ+y{ObdJC~zaCt`4|lsVCgXIVK}W_6k2_38bZ_lK5Lwu{zj4LcJRRyd
z&x<R)bs?tfb(JS6T<zGb*>;}F@lgj=$?R?=nR<wt+l!K<m``Ren@VDfzT)i3btPR(
zL3b;2;HcrBulXnD7_YsU%pgU7(8iRb&p#*FduJhmdy5<9-4@y9_gI2ZP7@@8Sy^tn
zF457v(jI7Q<T+u5`^-nvE07&aJh&{BqBrUh20s>Li=UZS5x3=wa`paof%#TcB68EE
z!H`wC?FbJz9tF*iNU$sB=dG7uD#9!|tYy5PyhswKNH{gx8MsI$!S8f{8VqZO8&8m7
zty9SPoccXwEh>QRwt$OFCx2vZ9(6<p=qUQ-?W;@|jL8g$u&zC59;kB$YP5om{QK}*
z#`tqdw-&xk`(8I38M~3jow<scl<kNQ3{@ndm$(kH0ont&fdJ&;=PlJ-UNW4F0MvAS
zYkhNTdtKmye^p>(%ObKQlm~M2Gtfu_Rl-I=nlOu39>XqvDy+crkEqD4F~K9UbIG`q
zTuY{LR?Dki6GG>2Q_)c-Jg4y7dUn3{4e7;x+Q#Myu%zV%yrPb#*DcbN*sgUoVuj``
zlJ#HrX7>O*d^`MZ&ar;|-akQ$UqPhPY3Fa8!X5}I`5=?!YJHUMXLsq(x(B!%K(m&b
za4-Xx`UueqZb#^xZaksK5Hkq&5%PnU(3p<l2k1iKg|xkcl@>CMWL|#{ais>^@qywF
zNnHGfu|S^=;Ag5fEijDH0_v|)^9H;JvflnoZVmgj?YPM~aEJl_ne+Kmrk@PY)G{dA
zjs)LjN=nmBj(R$fSV)j)1qzF0+-1JG15BAAn4qw!B_g|49DA?Qv9d}OvE5qiDwLb?
zCLav^iciet04->XF@)PAshymnR$T_rBJGI5e5P$9QHk8djdW}5rBfYaaTW7VPRZnj
zg9W?sfk~FS@ZYJ&(A-L;@DKs$?k#@*d}y!cSyYPzdC{v<rBxR_&N=}q%AlRGbT0pE
z<sM^#?o^(%(g3XoPliyedXR-S1}|Flm;r8EvRDfgV&D3ha(aiBu4m=&;`-qp>s!i%
zVYrjgXl2%II=EO-E~_0^u)2oUtuB8sakyORtUzmLDaYS`S8VE#YHq?~wb!|;%d#$X
zWy>uOyqrw7OQ*^?S=2%U${QpE0|T#d0vFE4+oW&Ax4OBm8KD=8OtkX(H~!(5BD9Pu
z5S3GqG5lr?4w~sAqf(l|*pjps3S<ML4-eD?+TzWd%7Xr&3dGmCXD!xmG9NC+e8YkA
zFp$zHLu@8wc|$k^kTyS&7;#H1FwiMqsD`j_3PB(UGk&sY5V{~T_<dKRp8jy-P_kR7
zASo{fuUr_@UEf?1G~V8psDu~1DG-2O;F+HRv}9*Wd(u+)2DBIa{KX%fCj;jX{%1&N
zz_vR2PBK#+S1H79s2P+tXIc!XH+$wBd`A+}t5bCZi7bNmyzchGa|>Ru@%h@DFfoSA
zb>?ko8X5}pxY1{ZOG#Ao={0Rii-jieh@NhuiQfgv6<h{73;_MX{rtwFew8lMrclUl
zEFv*Hw<8f~7)CpdH5RAd5(EGoC>!(`6)yj~?$nDnaSXQfiYLbNuEGC~_wj1L%uQ`K
z2N;!nP^@tNfU<yV3heAq_K13}#c+%bh3pA6*H6sdq)3Zg5h-WAUX?DeV{2hXP!n`A
z%iPGsM4!4stiC=sYC#5+L3y9Jhdp}7wbmsegQ>E=UJ)jbqS$R<YIpZ5&uuV4zqa|i
z;r-zDe2}x){LgcmDpgkQKs3V8-C6k3M=pdkS$78TY7X1rmEy>ey<e*oK$Cb94#gN~
zK5`FgFbIi(C^rvdN)NNp2S?Pq(6fbmGzl!BL*x<ehyxGCF557ieGf&-6>OwTH5$GQ
zJsd)5N(2qh5@U>c$$@RDLYao9zDje#tn7oRKw@;xW=GqpMTy2&+rtj}FfaQn!{w<x
zGkl~jO41!1*QHar=37@m*d1T<?GAKM`B1tYd-?Irs7}>&cIZo^r$0+bW>%uDpni{Z
zH9mFD?aYh5^B}n$=6k6|vL50<ydHW`68Z749MGU7T@%+D?OSOh<e>b5j{-*PaR@B6
zM1zJ}wv?5bM1!ucO@2(HVQN+3x7a1`XrPFeFNWVFUs=o^4b(Z&Z_dGBWj?M~VUcX8
zReWkxw{WEe{kVXa&>*J7wpTS3L3~z@&F$n&?BD7Ex|X2rcq0ARqIvgxHn9pfF04u$
zDO@si2D#VH4vA}`#Gb?^=Pi6&B5f^?Fj}z<I_sQr(}Ag9X3%Bu`q7^TJ1gYdhc#RD
z_TiZ<YjS#uk>Oh<Uh~-{Ce{@pb}hL|Vm;P1oA=ZGnecnV^U3Rb=Nq2@zx(BIIraNZ
zAWL;g%LRv;=W(Pm&>n3n_j9rF(T>pT`BU%vDX@HiP~twk+;F-q05-m5t@(;>90qya
zHFi)v_O<fdMeQ6SJ{jgQI;U-%RI??q$+jphqkj&(AgoXNX5tXOJvTpMkN-MS!e|4|
zQ;5hVeNXc{%@=0At?sG6*($n`@ast=xoEF9HzDEy<s>w+7zsDJe3-TgS*qxQ`qQS9
zru%5BDK4ujj4)bqS@$^MR8r1I!%B}sD*_uCuI}SvbQ_-XsWm2g-=a%+Lo~UL{V<uK
zMk@=-1?}vwx^~v%l$P11<=nsG*>E5dc`(4_OZVvIJ>7!><*lHXV;%xznuc=u{3<T?
z`HQ_feo0HkH8sLhtcxCuJ3J)iRI&F?%^uj)?p541mt<5Mz*HwRDw!;<%`1seEF2Ii
z0O1FbI&eN)rhrMMS=EhgH3?@Z`yf#|7zGwl1ou}3JP2K+&IS#(LR>yv(DcbTf{N@S
zv3Sy%{iU>O_?M_tJrI4*$b$kjcKBVz;<ED`fc%v{cN@(r;xrx}sV*_8T$6Z9ia;_h
zY%q?I>`;FJVu%*oL4NI&2?5n(Swgx^QqTb20pu^}BXt-9WCC3P|9NVNqH3IcppRs}
zE~k&;XTWu#qVexR9}cl_6Dd=2rAe}o!~p;mw9BYww093Em0z%UhO*mHZ^X*#mwR{n
zCdR}2?=J!wxjWQHf<xhQ{Mktb(sI@0hDb*M0|U<|%u#PfrcYIQdD%vVwe40rqX04m
z-tUF9J5SCVFFYb%%v4okGA8s=S&LHGCE;C{t-=!Dcigf^khRr-!7p#eOHp35Bag`D
z!ubxgMj^kR6#Oc-{D?NwJHKd4xYI-9RyyCCH2`>gD+gi`1PzXuUc^9+RZmcg4gdvr
zl^1DH7zx!R=Sx}4E7;>}ro8&a9n~0LB0qjjuz~^o@VJ2Ltglw$5NmP^Q;=)!o!Ljv
z-}1WtUL$G`TUNb|n6*lE(1$D={}Z<KTNlo4KWM#JTxuoM3YSz4ZY!VN<n^)K?IX4X
z5^_&s0n}G81K-}ngUkQ$gJLu3QI%{><n+QlK$567h_SqGGt8g|JZ<Sx<~I?Aq5)nY
z<!70>EF$f1^I1ugW5M}!Jx!HRS`h*F*+8oE5+17TNL+;h&by7~->c~cVpx5PazTZ(
zY7VBV+>tzKbef?pFz$K3iW&URcy08VwcGRSEs?WLdln%qn~1POQZfb^n-M}WhJ`mH
zUBn_LUZjf2DXlQWrcQK&$l?8cT6u3v+_;8f<&2a?hTFYzRhkXRN%$!PoKl?L=PlYr
z4=|C5Qhm!>MGy24ezV*$W}NEjel9gahb{Y_ewhHMH_=e4gzW+ovrThfj~M4q>wfXw
zFTCCg5L^?~t)Rztbbq}(mcPtS(2MyXPM~x$#!290W0p8X#I~NM#<oFC(Yzd1OaUtK
zKL5PfICe7Z-2!coH9z&4`zR%+O1Bt!-a<{~^<+xDu%S=2b1ibfm{Rj~r42GWHEgTW
zH!7$(6#)G@wiQ)PWzDbEc*jqJ_tHA*pps~Wu2i!9W`O%->M&1STH?HVH<G=G1<ge~
zIrYuxI^E=r>+WoMwku0&Y<@TYo)w7MVG~8hpdJbG%M~weN}2NXLcYHk-C9x^xwk&g
z;b93w${Y2!cNyJ>hTLAb?(VhHz1FvS&(T(JZJTb+z682TegdQ6{&G9FS4!w$u~Q#;
z@e3E==HKxCT1Y}ldyrtfIdb|&k{__rwa=(yM0j39_wczJkf7#a&<s{r@aGn>Q7n8r
zbw>Z!o@AP6HxmGm6K-F)y&9LiHR8q%a=3pW7KJAcd~rX=JQ?hcX&e6LUg0|Xl4Yy`
zY>hXtw`YR1hrPz<;2lNek<sYEsOxmi%--%_UQP38$Hsrx%S=EpK_qR52eJHy-XoK&
z)8hAmqYYZ4|0mw04a6#kCBloQ7f(g7R1c4{CxNbDl6}d$F7TmV+$hBqo+wkoj*FIA
zCDt!aWIUWMO^0*3c{~h$k1AeYH1GI<HD;25Em#H)uFJa}%wp^BjwXz)0%VU@$-EL^
z&jvIW<Y<4bVXM|?!B>8<lcUf+G3TZhm)O*d(2<j4W8+Hwj`3jS`i||}!MS#NMR>t0
zz`b_wqI=~Q7T4x5)@=qPoN3=8kfqYoANmG5(FdFsD!_yq+=0IlO7Q8=I=t?U0PAX3
z{qA<|CgY1|LwH4icRn51|5*~MJ>Ah?bv(n0*t72L9woSoxL2j=>WOPby0L%BceHKu
zT2Fs(jqh>uot6W%bvXwMegy=HEsr2VD=~qAcR%eoO6K;n-{HBB2m)P7yRqdehK0>!
z6hF8!4dnD{h6$9^k7D`y_eN54U+p7iV*N4YQi3c~-e`PC2JuCLn>aR!;7mWeHS2nl
z+jFDn?dgyD^CTRg^d*T4ZJ+R_6yZvtg93b4CP<mfOKhE)I-G@Vogp@+`Ej}9&RAeC
zd*M7-X}}*sgBFN5poxfZQXB?_(_t4`VEfH>QXn20K>*eRQx=Q7_7D19M?kXwYaj^>
zf(74mWTOI+cZ210lOr%MA|M)L+UyKAgg4q>7@&-m15rUZbPu@V^}N)O8Pl|E5#D^1
zs*tVLf&#omw{VYu7XOM0K&A<NU;sx9<~Hind}hN^Sbvk@e~L#Vi!lY887hEcBzFfm
z)>;6e-|TzM<JBXT&ITMnGW<n51jiy3(ig*};?%Dvr;{L}hPE&wHbSs}^8WiPeWyvr
zg}UzG_3Iv=F`|9qtbrM-XR?(rJ4=fGAiu?le`2r|wkvCiamQB|CReon*N35%MSynk
zWpB^p9vTV5!|Y_T4v|z+PfICOI=Qm)eucQ>=fC3+2v(CT2Rt|>K6og7K|Ek+Ui;t@
zr$mkP9g~7N_j-vU_9!DSgeb4Vx%mlRrKeNq2`8Kq-m^}i#~n~*{RY=Z@828|#$1R>
zt^Wj!<hZlzi@i2sHZLH{yeZ|@1gIA#5dY54b8Cs<EQ>LnbG!;qUOxv?*N&ss(fR!d
zjFq4xiMf$yr;CZ2!Yz;ppDV93j}FC}&PWMh7fzOoYF<jeRxJiT8%GP}HU2h~E`#_!
zWEm-ph-PF?{0D?=BW9o~Tg%c_t?_r60bE3JbjO?rn`%5Fa^@27cPt|K^^y!*+aVU(
z;zgA5PAMU{5qy@OEpIn>?-|`0<nYeOODszzN%~P3n!hiTihpCHlnu9k*kBe9Fp-xQ
z7^p&X=QK$!;uI`Nz~&-^1s9L-wS2Tp<LxefbB>B~m%xNlM_Qhuow#+E2ou>>TV3$W
zi!)-xDYey-d`an-*><aRCmXaxiS-)0SwHr9@hIdba3p<{OC}9*aPVc0VqO%9&OQ?j
z;bvUtTh(XVlBuTGp{Qk4bHzq69Zl58OvGS`i1=pAkg3eI#saYrd$2i06QjiJMpJfi
zEpIohpfx+xrxIF8VKEA5dOc6k5$Sp_#HJ6DsK*$Y?B6kMoRw8^hEfq4BHxNBjdA4#
zF-@^{(?v614FlALJeO#zl*2I(IQB}n8AnsfLXbNS(40I3v^cB+t;rxc#ZWel;(U;m
zlO&tC->{MNZ%$n!Zh`0q!9QmJf?s#B>*|gR<Nt7&j9oD#jJtMOL9-HjziRp@e(dFj
z%#ujl6|C$W+Ie(k(GGB>XNq7XLPD}9A!g+AXwgt2CUbjPy3kLhe&%@;+#R+X<|*h@
zzN~*bbv@vXK+#$Uyy}*@$WAZhX^;0MM2?DUzzY3Tv1Bs7_Y;sVYV~s7l0Jpdm3BFm
z#Hj_M{1hr1Bi)M?6pv9|&=uW<_ICTzB_-7tFW;m@k!Mv(os94l(SuZwuePzFKAklW
zamcCfX`;l`Y(X93d(SfM{W>J|wzL*mfj4ejALMCkN+#yOd-ARVryM7zwKzxjduv;?
zi9YZ<2^6k(_2S>@)*7XiavAq80}D-4`*&o-GCgJgzIyVTjET$CV>~T8rNgszES|P}
zK}-xJ*SUSQ^f$tq3)(rkSRqn%iL7Gqft~5Oy=kk}->wSH#T7z|N)eAv$D@EEc{Kdv
zDKKYA@B=#tK?ZVQ<F}gsZ>@;oX;a7h$3W>^i{4s#i<86@tMfkJY_)y1)|KU#2y1D1
zz-3@p5+LfyJKEqf^1JI#KdKZ+@DIIK3Ds7>vhIEWu$g7rKd?R-Abmxmt))0FoE=#^
zrG%e0df>yY_asqFkyt2V>AH?|bZh{I#(c!l{h^Y~<4jo93|_B~dPpAUH%Bos(H;-x
zabv=YN(EEEec|^pn4`isBK}7l!p%MGl&9<zr?LimY{o*Fwp4bkY6_%%XrX-e2S*|D
z^Z7XQDhs_zpZ&BHG{)cu)$Kk}c*;T`$bWn`auLd;SjAwEWMN=hBpIv&xc`g8qDr9v
zs$eAcc9-Mv|6t0TesVtTDz1`x8<$ikk0g>mi}78AV`%$7VB2|Gw+w5y4R^Q1R;)u#
zvwNOD6Bu3@{c(JeNE03-8WlR$IL&(HKas85JjyShri(9MUHtJn6#bVFC@<!e$W$NI
zSPuMI9Bkpl5R<f~+GKgpk5L%3v@#?V>TG}sjKF`)DbV?5<RTot<>AbDE8Wd%K?GTg
z9<6^iEMfiE8V>TJY;P%*KM^MFN1Z^WeQ|qR=|xov+tNlk>-JU2eGyM?B!i#csH@y+
zF!L%DYZCX=58N+)o>Q5AnyanY8nD_@ARCAn2u-FtVkS+;z1nl8Qdzrj;y$qICI7;h
z2L2~9slFQy@h0wqg@0R37cKvr$HeH0_;H8#aS|fM!V}jlYZTejIQ?Z}n{Xu<D%gYY
zWgv3w=srI<(3r;YK0|^aff(87(p*40n0>Y{pXm#mXx=1~;QF6n;LqKp(F(ze9)|>t
z(Z!C6n={E}zMuXVL{*~yll1LmI{NM=ZK?c?UL`PlcS=iY?6s@b{|Wl*n3@@R`p<Iu
ztr0T3yxJJvYOVg~=;M&kl?~rzbT{DcKVbY>1pp*Q9n)R@D!8XRfI&RA5<TtJMWDX3
z>3YEV+J?xf`(H#u@oLPp+2o)x>BI;Z$5W(4T=jL9G=|ur;U7T}<Da0@5eThj^8_eY
z<*ET`DjD}e8G7+sF;L*f;|r}G?IACWA;2%;HPVcenGicAU>4KSHWB$a#P_X;t-|g_
z)E^mcSYsuR?)hL;!>UJ;)$?!UP0AWFIGm0!Qg?Km^aYGZ&{H+ENE-P6T+d=wZ)nV*
z{fnd>mIa3oyxkvw){-FmUk)@i&5{|_Gz|_-SIznSFEO%R{Qd{D1n55w`k_eE9U1x?
zW!PNV|9B0WgwcP`bM)>_03j>cMvNZU{ZU|=q*_kJfV)79u8&oSk|H)<wDjrA|35jf
zj9<Jk3oD7Q<Cp)#dNA6Nzb?~cEy?DC+d%&5B4M_Zj5Qb!nv$|?Uzz=b__^Q*nyX@m
zcBX<lCx<O<YYL44J{V$a1(t)yKkn8cgR}n+eZsUSpMdd=+WNvAaRcrR!C4AIssBs}
z&ofe%uJ^A5sG-o)k3swo2ZanIKu9$X|Np)fj)K(2DE-|>f&EYV^-n;0{}}yQ;K_%D
z21-vWv=>Y4u>VOwU1~HVO6{LbhM3Q^`0%5pc8V!^<iEFN{BHSdR*gM`vQG-4`2K%4
zlgHkF-MN@%f3?r%m3zH@q7_!5X4$gTOQf2vI`p6DL4kI+xKc~gdx)q?r%G+mBW&&1
zronu;ZqSWOsORiYvV^yMt$3QGmm+qlPJw7Sl~f+Mnu^UX!(*bSyfV&^v}pr4l?Z)x
zunp|?4Nu8mg2~CcYLpIx+n|iW+E3<R>jWN7T?}j)ssBSK1e`~cLA<uI<98Ptc=12b
ztO9-R>uT-TX_vwOCFCrwIn8;u{+OS)?KJWyvTIWT7AvM!;D`Fo;$Vy+r`RgRr+7Ka
zO#H`x(3^R?$H@_SZ}Oi+Wec<r9EqjS7Ijt(?u0F*cnvwp#A;B#onZwXsDx3AE*+6*
zkP=*O9StH_W)k0Zv9t+P2t0v<$72vKd9%0m1rsfIK;SsjNUj3tm+Dsi@^OncQuBOF
zj#RhG_W);b#sP>7z^h8<Bia4Mdy*=&=P!@c=o!mXIXM`;8aLy?og3ri$C3_^@)`;;
zNs_a_rGIlC{&3IW?Y70|-}e4;3Z%0d*TQ0s_wdlE@sQF%O&fd2a3n}8+uJ|UDw##m
zU(ip`g6kUGL~>z;34niK(9ZoSkKc;CTkqJ5l%*nZWggYdWD_%fUex{y5yiCQz_DHs
zJ7g}=ZC;F{)OA^nBlKvPBF(AZsb{RH7_-lu_qqDb+H*6<;A32dutc>4c`}ppx^HFk
z1egPFEml?ikTqE?+$vT3Yj~av+y1yQ6f?8l>hF_R0`H8{)Z3hO;E?aT3YZRa3*D|q
zzd49aqM{y6DAG4L?{Mw#d`>d$9t<@dpu8gQbcPNa+_VxZL$6FSOPWer7);)iPJuBr
zDC;(SAU^Ok@xT;&3FPJySE=04iJc|g17?=-V!0ujW9B=v_Q3e+@B5>)paoI?Xmg&&
zXfjlpY{_z^9#<}<1KVmb0fF39bo0K4%<pDgJ^aA0%Hzh)T8Zq6ymA89B3t@a0)L66
z(Y=r$gG%Twj39Wa+KwXp!QP5du10L4GwPsgbd89G4HT0(!VvH`#i)Q-dri?kl}tMC
zxiFliIC#h;&@IB}uY!?<ks@}-AndU&N;fpgrMtdJW)gC9p7wUD7mY{6t7*!ime&RK
zBh0NuNl9$PzD73k2Z8%ezuK<4%;81<u?yGpN2`uYwh&|W(jPY?nlU%}#ygG4c3VsX
zan>VgiZ7Gc%=T!^WHX)swR#y#k!`+*(pb2MhxU_cp-p?O6tfHdTsd`)g5-_3CrfFQ
zln5ic!eK^>?4dd_(O9Bs$V=20BU%5m`Xetv7er!C@pX~QM285w-=g=T;vxvi3xu4(
zL8H=3S#{$tnVZxawCd?c=Xvy(nm>B+Y7(RKO;Y4=*07D%%{nx;z;nQx;AIaKA`MY2
ztf^L=2Nslj4}F~3l-^GdQKpTdLBOZjd#%&x2}-R7Ka$T6$l=ASnh~d&Gk8U^&62Ki
zV_AP2d`pJ><U&c!S@#o)r;gHBd46##GLffm1fhUnXnm{Odfy=c0mkIKfLcs2T7XB)
z+Vaz_xIt%h3{H<zj}d!N0%-5?AmqFUW45>yBEwT}p1Hco8yuo4i&h`-XwAT7;`t!9
zYJkJ_V9x5}qJ#2`ox%B%*)oa(IxRi*jyqE$l4ajjd07^}giDFt6JplLReLCH6->$!
zH#-sb$gx$JPk^3%p=te47p$|<uL%s8S3`P3p|!)DLJLNch0_dZ+@FEo0SZ7x9}zsM
z2$01AtNA8baQ3AZEM}^!;Nfvu!sQ+>&dgY#a#oY1mx|;PuHgnK3dYR5QG~;e#we<m
zSlFpg59rTf?IuQn=IAB^HHfp{INTa2_hoKNEk7!Mi1*jBAN;FFf_LJ&aKO<3D^>K$
z^lTLoZP{rPmH6!We=ar=TD4q5e<B{%^39d?HQEoGGr#%X+AIpj-O+{qHDMf4#5zgN
zmSfSHeP4vA9>W}1r2?=g$+MKhP7do)52s)fvc&SYon}ya%_vR1H!$B(8&E<E<DTeZ
z`3njk6mA8qd9LAcO^HcyjWV^p26GZhNVyAcuo4vG&=)u{9>#*@g3Q}J^PJ*mJZ@1m
zzS#AZ{#s{;6Z&4*+FV}<-0CyZcmkmt;Siz!%VMuwA$*y~4#d=f;VgqZu+zdBxANG6
z1%rfISG|qE*XR@%$*A^O<+e@?MEH2<*w<J!@}q`I<V@$h0veQ_!DBx+^u+xl9p_Rk
z*GiS(!JkAe?U`@<70d|(a`KD&xaW}*>cvkDq1IxgXjFhGCiK4c(rd<Z!aQMBZ2Sp+
zT~`SV9D#gI-W@gfmcvdP0WF@;oVme4OTD81l><tphdx!7Q<0@T6v`}tT)8^r1X-~-
zE<jXxRvqF`vfEZwUx)0UHL*kn4G#7g2KmAw>?$H!T9LDoTba!^|M6$xB8@$sc7f>a
zT2AWZh2SOB-sAG1?UEV_=vUfX&<SfX`h9@w5DSqYg2lnQ*OuAEY9JB`c~`=<H)M6~
zr;YWJ`_A+S?Pfy4+iJK<_vaj8l>j?QWskY;`IjT4apeP}kW*=h*51N!duaL0Op!LU
zsjQC)oc+jtvm*%T?b<zz4MH$*THzwiKgdv?9({|M2G-6(U!192u!VKMlyH-QT}q}}
z8-|nc;BVddc*Nmcvgq>r6MKnfy_G*g?L6un6I}XW1QxX7&RFQ{f0TnKaZbe#Y1FFR
z=+vC^C^LkemHq||S*{Gkzo_$4u2Z56x^=lIjj$4fgD|JVn(8Hrv8xrvBK<aGDV9Gb
zT@3Exl!M7+6Sx*wF9V`*2jTKC{*(L?MMkhJwP9&Q(r5FRLsaCzaZi*?7&eswyR6-q
zUiu?6RVgKU7toQQ60|?anvIcS3_yeguJIp4FKmN2my1&k2i(yz&_zl@MWF<%64(@R
ztgNzPui65|J4O@)+;KL>%vdK@4lJI>qs#39>#MkI)SEAJK0fY;UnJefi1nH*Hp9_y
zIz7ywO+*x4k5qNEGS@+d%4mB$sll($DVA*@mCL22$+StomD?AS{ac}m!71?3>!`a_
za=>pYf}ih5!@!#{^&uOb3j>KT9R#Ej!Zx>&-v^45BR)UJ=C$D9`B0oJNnE2tI{5z6
zvEULL6;5IAU9C+{SQ<)LDsrIxC(4g8Ho?fRqXhy=HclK~p8@gRO76~ixo3_h8*lwP
z)&uoiO%&0kUjM@G95`tSr>-g|cpOIRaaooa(5<6JMNdUqe45Xapu6~BB_W2#tVRM_
zg>o5xb2l5g**Od-<Fa>fw(3H(Jm#$ycO()fgYS(k@!b;OP9ci7uIa54N|33ypb8%g
z)0e=VR>Vd35OcP4i~MH=mlM}oTsz;e1e$1f9h7%ne!-M`pqS@I(jxjU9zM9KY?_7L
z<jwut58A!2nEGIa`kmVAiH)s_!q0FxL;HA2eAU^!b}4|nCNm=Y!uqG0U}N_DFBNrB
zQ7(%5hzAjp#hP-EtcAowE)DKyd8hNsL*vNeJxsn*!t)xi|B8tfEi*GEC0a~fFS-4y
zpe}Axx&n8*frV#7Z<EC3+*m8bzpBjwGwsiVKbEOUPZFy4YNOtgT-<A@8X)*CqBAav
ziVe3AO(-8fgG$OL1PBFyNzBm_t$5qv)_*N_l4r!=4Nf3C)ehDnV|3@&s#dhHg;-)z
zuI5AxOV<rfYH`PPfK`*v8OMjfEJisbv#_x0NneW>ao?L@)~7^nhUn6vl|dkeTfa4z
z3=Gz&EHJG-pyr|+{Y=E-()vZ|ND59z<6`T%zEf$#UJ`!CAAlX^I%$Fx^ND<gXhE8i
zFiRLDT@GvPD`s>pu|NkrLr6op?1XCy1==w=9k*a_T{1USOy0SKZcx!48w0RaL8t4a
zt~nU<r3fql!u}q?W~}XCF^xP_|CufZ>;*tyue!AB65_^=BN=PoleKg41>mYaQGvEz
z<<vFFcO_vy4F8KTs59*g0VYQgl`M(TS^WFknPS&3+`6Zb_>UQ?Id)a)+8xppe%Q(i
ztki=LZx%M!f%hYqAl6Jsny4$ivy{IfD77?+`i<gx>~aI(yQWMYHR($FI6#0)LdO3?
zDhIO(DI(fbx|(vX%U4HdKoDljh}Hsh99{DFq#-{BF-%u`QgA!}+lU`ud6wH_a(7!K
zJlc|$I17GtoA)J9+VNG@NQ8U+vcB|yrD%_uSjK_&vI^&tB`V8I_~f1@Mp*jOZqiSy
z)$sx>Z`Vl1nc<4M`BIFktC#TWhJ%&4$pQi7(7O}4_p^41l=}Sj*6d@ScP+W}q-nSV
z?V15wg^skU+~S=rHKcCW&-^OO=EpORHe}yr%U|2kzleo}bIW3_8)bu%q!)1!psjq-
ziZB}ISR(L+rBaF}HmBB7gk6(UqFvuFH_a>&<qI7*qQe3VNT2!~INLXFSoB-$sq4qM
zPFs;`H1zv?4&js9h0V*+OR7N+IMi%(NKGUJO;mK6>h_|k;bRv}?a^`dFR7eCT}t+v
z7=>IVOzWYjzI4DsKWo5DF@pEpOtb0D8};d6iCZn5HtNP9%S?bRs)=Y*wV6O+&VgG>
zq2m&w9XO(;!`u{JlVMQ)u^E#nf{W%5^3tWh5Uw>l(kEJ>O<r0FpTbX24aWZni<vmy
z>Cu=!5Mi);t&3y+`b*>gfRbEIwY0xKU6+5r)OeGnbk_g8bDbG(e-z<_3v(2a*?2EH
zYl1+K3cJFz)DNXurTkVIygQ#(xUs&sWUVIcs1q_x_BBqL?VtSutmD5l(+Jt|c=Rl=
zL*MtnLhPNBd|Cd#+8JVA4yAY@l|hD!f0`M5<_jVT=c66~czY&>egUQo67~$0W4OIZ
zMLi?`>0s!QQ>qr>u{{G-bWVDiPN)fW0}sbTanMNsw^_9~)s20)!Fcz^_-SCMyZt!k
zWVReTFe#el_aVG?1g0lT)fwcILd+lMmG@LmC0(M!4Dh4Pm0GLEWOc!v+RB{C%0s)!
zj~MRQMhpO^NkD6~{mqBjW~SSo<!QRVAqyHV+#88)h1+q6j$mK<?g>&%MxBn{mL9s0
zz{ayh9pCroILMd#g9W7B-!pOXdPip0iD!}wnL>5Bn7ea<+Bt<gjzPPXrzqhVg_0&X
ztSMB_7ZONP;MApi1~-KOj%cN*E+`n3Ekq_bYqrmdG}rpJQR|RH>AiUG0LA6dDoSbQ
zwH=+>0M+o%(F7cY2@&m6tPU?{)}4YNJ}y8d;Zjm>mj>sqat{dDR@el+U^2*Pfsc}+
zBhnfJdG@)XPBJ|>`m2)z;HcFwM0b6U1nCLF&aa-FB27?GP|+{wC{XI(*!vj=Gu7R=
z6|P3!d`K1PI?YylG&>_TspzU;4PynwWx1ab{p{DKs3cNizW5`gW~9DE?{?wM+Z|b7
z3LfmHo{Ju+94FO<&X26!GY6~(r8<iW{!UT2^jv^bb}>zgc}ryN3pYnCNVn3=h)|(e
zf>fj^3=#j~fU6E~U9_rP5sWDVbPisf>2T9slQ+chQAR5F-HrXmf*CIg5`QuD{{WFd
zZofhuZmSE3+7Cj3vQ`7EMS2oOL~0<h4xPc#zn<x@ZaDS-*41fo{3oMOz(+aCY&yL@
z`ZQv?k3f_`!+#oX#Ky7^e{s07u#<P>7-RK^rmb)RZ6;TD7Z|UID70IWY=0_E=3=8y
zL6%LYHcp|N$1Yz8WY|8z{zJttTZdxz`S#w6$2&($S;3|M5G$ciSB-3B?Qk?;EMg<n
z4(bJpj~qx%A4`kQ=po(L5Rp3ZOl4$sH2oG7LHGOpI6?8@_|jms!fyXD=<V%wcZj|O
zMln};o!68q+l@pilL6H}G1K=beF3aMs|fXRzr|%jehaOoZCA8H!!)RJakbJFA{Ye2
zw0SBTT6@((8geartr|LswX!$yDVtY*V7cZkuRl~`41lhP!7s_qmn=9Xe*6~iD@zJA
z9T~+X+d+8}xY(_L<I3$rEUyrK5~Qe({4Kvs5I2}C){xwgTP<}bi!qdp{+@+nAGF7v
zU0k$w7jEfE9Kmrg{sddPE=J)QJ+T#tp-Fx}6yeNz?Bwor;??qdT?0xuV)<sLQMhWm
zt0DQrsF~#(@$<(ApJIc^jShI7y;@3bIbI<+y+3(3AGq>5tSq1JqLvJwoy{4<&jTYu
zK6kSx^oq{BY|5tc!=?|yk++)W3>-yMUXX=G+RIKn5O--1&2BmCT)H1DpLCV$W6$}u
zCLD<W<&!PR+v2%aiSASv&2sp0Cs#JSWNxh-YHE+-pM?08OojANMM^%?!0bPH`c^!%
zHa7BgZY&`D*^&sF5`n?mh~f?TrvBO;)fZ>w^$o#(c=<Ysju{CMDscRp-=E7ATMg!`
z{E%cW<vy_P_09Jm&?%}bpj&j3!q|;hQaRJt>cX{aQUDX<4U>X%Q~RKqkw}4FH|D8`
zYeIij6(2Uv#8K<ZYGq{vT1|rA=OJ0Il-gH6T?^hD*7sq+rvWQ#>5D{1N%&guUR}k9
zk8g?!ad9L%r2{#ek6<>pc{U#fVq4B;r*!QhzFC$3m0NMe0(Qx5@bZ81Dp^0)q*syR
znhJJT+(Td4GMfn!RjF!KLQzX@T<~AZXf-I&-hTt#on>}AMHJH~q0T>CO0}4SmF!ra
zgT<!?if=vs*TK#QaIHB`mFiQXry)KILlZBgVkX~f=H*K?Sy0n;rAq|=|F}%a5!`$%
z5mOk=yon#myIO#9B@O=*#PC~QuU26*$ZL&NBs}mx^Zou7{MR21G(lbEJ^V2t&&>fz
z)INgr>`wYdd)vWSFbnfp(8Z_M5@qeYJoq3%8(rhchXeYNvz+b5ES#X^Ydohn_tX?A
z^Q%h<QhHE!I}4@dS>y$0Ixe-;x(rk;^rekMs7Lm5;1zZJ4-=?K-TRFBC~0uTy7;;;
z9@FDN?B9GU4SC@<t1H0y=|xPU#M4mpP+gDAcYORUj(0I(AFWUj{9Qju{7dm_4QgK(
zHSrbgd-1R>R;#Z!Jv+<lYq|yV<mPvi$VlRcBQ@03h}*09I|&EvRfsx2#mpPhn#do6
z_pUc6Kk`K(0QQN7<}_?e0HlJemcY<en~%@I6o}#*u_oV9jAL5Bc<*-a-aWN&NiQZA
zjd37!rL<%rkD3VCC`WON5CmKaf9*EcMWt3LXc^~FHT|I&S}O8>)LWrjt%6UsGhikf
zYid{<YoFELc=)OJ#yGyl-l(jYRa&W5pbKiH($*^6BbZlhlGE^G?U6rvf4H!HYU=8~
zcoarx2P+NmQ9s(eI1ga%@<$%8XzMxII9A3RsV^nD){ABps%a>+hO^s(G5<zI<Olrj
zC?No@vrh`ok`G-Jv|P2A9i~W%%YUj>Gs1>3sw!DZFepB$RI0YdiX~CeZ&5zZ^vVe(
z3tKp=7(nP&s=ye?c_^<VJuh<togR)N;MH}J`QkF>QYM`Z!nk?*(2W|0J&beL81#<p
zAJvAiR)+Z0S*(<Fm(Z?kU6jsC)lH^TSH2R`F|BNRO(p09jpc??_ejGXLiGl8<zxX1
zhPWpsUu#!NFLub(6J#0!6n_~H0GLn~es52YYA!!s*zWv;8=hwxhADo`ugRqiC*PRm
zi-L2c@9X%ioWzHHf1U!9(@8oJEs8n5kl}WKfG4YB)3HCp=SwLs6+OB`ej&dytm4C@
zVSkLSaq#Oa+Su3L!Kn6KsEUHj<im&dd~cG~6jA<G{OCp(XpUvnysRx;Ys#IR1WjE{
zO^haS)WrL-UXOnAs?6k*VCkOk1^y(D0Wueaq!=dE_x>#1GmBBo>a>!U|5Z<oKEk5_
zFW2aw{KBYUMvL`dzwEaGclxb==yM|rUD&NGlAl=ZG%ku)=qJ#V&A(kj;SQPbL=n#J
z!B%VcU|+24qLEK=fEQtdc>+sqEAq#eX_&UqTFOK|fvnmOV5u%PGN^Cc51#Jon=`Sp
zQ2)P5=T?YDbm!v%RYX=shiL0TU%^G#3yG!3Pzf9l;}i|d6a2nqc!1?}Y!Z7M4DmAh
z6lHw?*4A`74l1bz3l6_u12O@DSgjWf@d)8}O-doo?@JRHpZU869Gm=o&u|{~mGJb*
zi|5-?q3;&AJ5*X}AzoiS*eihNfBgRDBT)884F*HB(^p<61Go4ZJ&ODD7*+{QMFgie
zT6n_a?ninq4TT@VcIl6OG?EM5LL`JX9D@sg0^6c4em-ctcq!J_!om_GobyQ#578Y0
z>tqcy47&AhdEG<sq-is$c{an1N_o35U-O=r_=q@}e+Cv{I3JHMf%ZH{%r=Y3AX=S}
zB(T)La-$YIj=?zW&lo54(Jd@A3<S0^GKtv_k^u0A4L=&I@zXR&X7~lu*X<r1Ki=+k
z@$ESSHK?QY!#)%CR#ADE8Jq=VBMl#_lZ70*xRe+~($B#6-~{Q)z580{)>P=-rxjo&
zX}}-}>K#Ho^9bvaqqwik{h;0Ar`y}c{<0n?n*OsmBnKXJ)X_+w{U92nUO?Ocu_o-H
z12A@<k*Z?Tu^P0mi%no*v|up{*+4EW>=3VXl`{_0G+}I!&d|K652#hG3pEz~>3E*v
ze;%x5fLoNdORA^V1Y%E*0UWe5uq|yAUCOzU91ZS7#2su^lotgY86hrQa+yPOheI(w
z_b*dACwZa3o<I865t>>?w#U?gmIVN}&wX5ZXbNONRUmT&EutZ{nNK#txEfe5ax{Pm
zgF|o3z8}Jr{HCClUfp-Ks^nUS9f7P=CbEkg1<=HsKuiKX`!1)fd2Pu?UXSylL-J2~
z1<+wyFi#?Vp%;|6c<5S-@N_t8j^mLrM@|MVhSFFAdfiBA*D52?xNQdWK9ffpd$17P
z18zBDtRn4W)M+ilrnc<m4^1-JS%>;jd2I&4rswU>$d`ykgK6U)JgRKjqb@fO<h{bk
z2dwAa=u8=&lT;UyU;!1zqYe$Gm;dgmg-HHjzI$km4lH72vi<1A^Q~t)j;@l_T{@7W
zh@4FgGNOStEorN@#mS2PfDJWgrzBC;_3=S!Ol!ZNcrtxL1=U9;^E;MD%%e9^d>-jC
ziCreSUYXP`lU}dPnO)}WiZULVwC#maOBR??>0Im;)!2F27B|&m$GSD(zXD*e0Exq$
zf4VMA%Gaa+<-t<jpgJ3G?D{fEMb#G92Mh5mxM%_8k^=jJrgU|ExumOxO#y*RkgCeV
zr;-W)ES?5sY`I|kWYVG`Tnt~Fj)7nqivsv$()GrV7et8mgMtG1RMG+f^9x2}01vQH
z>YoMO-6u!wGW^*T6gt>C{<(X!bFg)|b-aJb{y9=*xQ|lVO&n#m>QM3k=J?aDw!ufi
zcGg)WR<t2hMs@L&tJGs*3#0q5zcXk)YcxnAt!+Fp5stLLG!P*&Q(pWt2&OE+?Q8!I
zHiAW`Do3*<oT9MTG3$>x=v!K_B5^L3ztpY@@C2GqvsFls28tRyN3J)j;F-aG8qqXv
zGC-P&NiDRii^e=stY`~4?ce9|j0sVo1XFd$5v4@lNr7(i8%WgwRfTjhlzT?rK+f4n
zCu`jRxh0)lz<D?YQhhL=0#y%vYiI&9oljAv9D7IdMSbjbvE_C?YPBG4jp8PA;LP8^
zaCcFF&?aV0xqczbp|G~r#5%7m8PEPo^`*4D;z5_P(yp;JAMfPskW*UnKkUqnOipUX
zC7<#!+4vn($>RiNb3-a1fB8oeTo9JC`OZwN4(gB!C|8JC0BW5|&2p0n{mWWngs76y
z3$C;(9r>?PX^l!JIR~(MtmMd2<eGBH2@C?VviZpa?zkeGGhSuaUEj2e3a>eZ%~gxJ
z0CyGu;ICOS57a&Qf&~JE-&1zII|o7x%`oE1WwO61+aU7!UUqfdBS*kA@(ic+<pB}f
z_(z#_<}Bt5{g`2tv}DZ5_Q%L)-_IjnXu~Nlt)VHJT~4+9I-#gD`V%BQQ<Q8D8|UyG
zT;MdGoi9txN@I{TKczex_^%+tTB&Bun<&+UyFu>hbwweLX<)AWl;MO@4!sVgkooG>
zQ?z*8MNNkT{drrka@(7VZOA2UzAq}Vwz$OFCOzvS|6au9Cv$q#L;{*{RvFYqe;oMH
zd<u(uGL4BxmJS8!p?{3L@Qf7-75&ZfP3g-LPZ;tps}2Fc<>%7T4k7ncdR<De66WnW
zBcN(niIWt88OQM(F(=jR`{soJiW@3`7x*Yq4}y?2o&r$>nEsSyxzeo@oP1NKyu8~a
zo?GV-<WYjyZ{J*U4(2TLAS;27jvk8#%~iBZ-1MkS1xL%d{D6ZH4K%}`#@5g%e^$nZ
zBgu_fL?W%&8}19YJzx1Edh{|hMZp6MMHV>1(IVPF<t~}pF+fgL;Y7mYl7tZGRB0&A
zlQ1KA1rG2O<{#g6%ORp^B;=LWy%lq=NmpklE3p2^$kCca?r?D7+@-DGIxDaI#(%aN
z|JQvj1FMZ6y5y_8SwnY&Q_OgxRkjwn?9Dm2RZhuk#C%8N_xk9`I<eK>%WLTCtX93n
zgP@E=T2*e?ay3#{J_x!|P3xQQ751<W#U(xL!uSKNDah|%G)7O>Ch^hM(a+tj!>7MM
zGKG)!UmR}lR9#QRP7xX`Cs|<|`JDx@2-yi?uMc}J5yq1hymgxb-P)$@j(;|VE^tyb
z)w)DS=vkM`4o)DXERdkUKSW!=FGY+t*`MWa9axna&-J)8vT+?)q#g3|*QvHTowYXC
zxK5Q#4SLt`Wnd|_e!EUHZM!Z#ddh=noXouHP4I+56#J~zaV4fGKoxmUhUvTqM<lv2
zqzrPiF59lf9;t~)gyG{GZ*rvVQi$X&+fa!1Ji2pPIw{&2*~$`{Gg&bPOA`JFNhlgz
zcWATjNx0*5D!Mj;uX?5@NBarV%~VM^oAbTj;s<u-^_-cD#j|1iT!RU@S3DQ@veR(y
zqs{=+NcXNe?)j0oS6!Hyg4DXDy4Kjsk+tu(ia6(jF?Mgz3LwKDc|ng85RM`oCRAav
z3`OVAJ`g*2_;Yq)mGp}9v)yHj-oT7XN#knOBnb&;Y#0%HP4|sM<#LUHA@Yyckt&;m
zz^jN=#ox+)Fo!GFz7=cV$%C5-C7q>RF?|JW&NMSsy;iY?f$3mVYSr`X+2dQNRO}zQ
z!eZb+MnJ*wEf^D7k9XkI!#lm;0@a9`-jXqZ`L#~ymYpDK_$bxMc^_{8)m4k*)x&n2
zNkW~6Rz+I6qpmciTb3?LtYE_J&ytqpT)&!QASm3LWXx?U`(@|wXm|g)Rhf*rO=U;N
zhd}9Ab#cUPs(SR|>EX`7{^7Azn~u9pg)a{Gtg7IvWDC*uf|-1aG-Ja?fCR_rhmJ1f
z=$dq<h-6A;OGzm3LP=DU*9zVi(?UckR5(NTd{hf8pP_V`<<Dm^vIu>;D%8oa8PX<i
zhZ(zYUTZ(!f4<{Ht#g!fPHpc$f3o|ud$fDJWBWH@MHKQTjWRi3prlgioa2_3ybIRN
zzHsrRuqrbaJCIjqCl(fL&6b^634vOCvRL_wazSNR*T(8^+IWBIqRc)J2=QLvI5=MH
ztrn$YOY*MQvbvecxvp~tv%Zth@<?t~>*ri&UZaJ4p=@JtzGw_9%i++=qeeAf%0#S}
zSjcF-4$x`jas~$|<8?+2r4g`y)y`DwdKGt*tW)^fOw>5`Nxy-1l{C_yX|R}Qx>mvO
zrI80$TP@oorA*k&rF7)kO+FK@-6ztD*uXhr@2AuAL1kl6KNe<2dk=obKf6@NLj_vs
z{^GuS=;vAat48TVg-wqjSuhBImmH@hb7wEU<NIq^Xza^dqYs>7!f2TZzR%hX(%A#~
zj_&#CDLbAeT?hb?o%vdeX@&eH0g0e!)B9Q@0^L@}cuT;lC4-oS4*sku#N&TFJvb1-
zWIpyuW`wuqfUc5Y1TpN4v$=TjTHu?dJ6zDOTP$2g_)as+7i?hxwNM$!nl!^175TJj
zX1bwR9>Sjm{~$l$(R>NXBB9m<Bev`7w&AtJjfP=)2_A=sRxJC?kj`U>nv<55`k_`n
zBa`rWl{Qd*+_`dcl=dc=%7fdVu<3{KJm7mCY6Qq+7Ja(6H5Nmq8Y2!@lC+AQipK-g
zm}HG@VBdr2tP4X$<=<n9l{X5`P2Oc0u~O#KiYlcJWUAG<i?eDjPl8)78*tPT!)PU<
zxGAb*)CEmeNGSws1q8scvNIJmH87fIG<C^*p*f<DP_44>LkDhlrZ<!<rH-PckJD+A
zC)03#U^lO*=$aj?YFa9DOU1N+96sy0pj<`@8Q!}u2H_Buq9f^%{T%%ZlVnX1j$?dB
zgQg7t<C7Psd#2{@dHaNVdm*g$PAH3PDw9RVLKeqWpRTW@sS#aX1N%X<cZzyU<eGHA
zikZ1_zv}e9d1W|@_ll>`yT_M(H|Ucz&bq;_XGwl<CQEr;)g%VNdBcu=+!kc-9occm
znrx4r1Yf)RBn6uU3FCJ7c2UHlK3$_20eS;C`tu}V52#clS16b35;(3bW;XpWG|UfD
zPzQMTU2q(l%O{r9*d$WPLjTAMz>h@&>BB+-pbiMSz*krIYSuF1L4`!FagCp^%Wkvq
zuD>MmSG%HQNsrx2UcTTETTD{Ur>HWE7l%Nt%KOJ4O3|M)J|LJUe*dy*2&fy}<cb^_
zMP#&ei<a5ndZ0f6J8|<yt(}b<*>>{FI`Wfg5>G;Q9?MQ1uYl~9H8S{Feh6QEc1}<^
zmE5qA#Il0d(=Eu*IY}lqeOY1S({$yFer+8N2+7O^cI~8;_!;U+_u>KFi!#%-%qtt|
zVELqu+$Il;{pqw_DWebGvT_bwVKpMs&Be5B(da`eI}X;l3SU=IQB=K_<>Df}=zLXW
z<xM$PXPG=6tD2R<aCa2V+mZ@(V?EE}6Hyh8+j6f#IIdl43=ehz$X|ig6OH``z<>o8
z=yN(eWB2LmjaLdO^C*eO<Hk6Sr)=s9Xm-erb4NRFenCol{0hZaE<LCI?9}roD!F~q
zce4ZQht6@o>?z4!PtD?ZETu{|@4j<^nt;p{4Z|eGr*O#tmvxC)2dmioQNLdz-kgoT
zqoGw}p^Ef(SziKhV$(yabugbyE=5s2^uQWhYM0k<VG^1iN68wldP60%WnWSeR4{A^
ze|LNPcF(C?+3I%57BZT;+mt4Z*m#}-q2ajGrn%-?KZS~_<a1Gpo>m)FS>fv!<7f>N
zaGS!;lzcBf{*d=II@46Q(o!Q|wraLfLUxRbmRs@dSMll?q9qiuv~?}sBXcui-8!Kc
zD&wNaHS_?&vIDTUaPDvZs03F>=Ah&#+m!x|tBvAptsJ8)fKt~SwC!}zUCc9_qcT0w
zT8cDoi6cHgl%P8O5fFo_st`Ts!L{<;p^C+*!i?8vg&)iwDS$P17-yElt)8LDrILS$
zrW5{H?2(ls$!6Q)!kRdoC!8e9v=9lkUCRX<nm|F(0!eN?v@T!0J|56&bL?b_8W30|
z%h32pQ7#Mdv5de63gh5v!`!#2knU@oF5$yR%hVE$j2<;d-mX!B!NfG)E`h!664$m+
zZz;uhQ=0E1k$j&WdcULiK0}J{b3*7}B*90$&r*GMSC%4&+u?${t-oaJQ(-Ep{KcRP
zp#K?!U<sj@ZQ`~l(L>UCzt@6A=$?GJ0ld_@uC_jl(8`&a>H0j7j{R=T=}yKdHtA|H
z48G{aqd3xcgZ}K4wkL@|QI?H56j1;xPmmFg8BVlyM!VPzl1{_n%v$H=`)qj6CLMmo
z3m!Df=j$86nK869OyUWPYU9y7MJ=_aEcbJKj)2q=cbxjEzJo_qkpOW=UA`rieIn(N
zo@`7t&gclhI}fNI+uJDl`}aKMji##Fr0x>_Ld_3Soxpg8MfEbjZL?GQcI}&rsJt)#
zy`=Hx7ko4<I~A@)S*n+<FeGICXWWDh;prCu%gIi+Qnd+gMS2!jb$15ck)OE@U%co(
zgVW#(#xpn)P9Jb>u=Q^_9Lq3KMig0$b7-wxiElmx!F+}o<xXDtd14xOygn}k^S>vw
z^h8mg3<_eM=R48nM;2}3(9`fcSe?w-eh#YiQ7qVzE4{Sdwip`PeOL*jp<AfZ(^H@L
z46$ME)xYwdYrH%*^If^dIbuO9)$o;J-kEqQ^`zLXya^_FY)RyZY8T8%HX5=5G}h7h
zMKpew-x4oo4O{DW%cdG=`HQo4y{Mlb!~8WpNLgF;J02eJ31&vEqS*j#A4-e+Y-)HQ
zAcv9oudV)mTWi@Q3dy;d&Kb<U=3=~=t!#;8KY}URymyBMW-5K>1uLC{jG|0rCXZa+
z*0WciZ1~e(w!Z8mu_?&3f5}+0*T%AhAsvJ?VS{==M2Xf>MJ)+NKG36FBl>ikvDkwQ
zfWT-CLVpyYtfiO4Z-U4eZe*h?=tB+>06|4|Tjn8|!@iHphgFQ4w;)Vye{mLK0kY#w
zx`a?&R?Hz>eO8Q8FWs_QqhwWHs*G0B77kfWt%p~?iPyDOt8#)^6>XGE;p7T&faNx!
znc5(`&pe5~<9LB4Onu1t^Se0wdL~WYT8R|Ik_lI(aHV>3S5}QMZK@Sz?Uy<=t-b}w
zu6faqheHa@1}Xgx=<jsU<8)k980hun&xn2}{*-><<ls^&U(A1d{}xrPNXur56wqv#
zls`0dC8IP<JCV_Vm6N2AMJ^1~oPBZV-RT^e6ZtNW$^Q^!XmM%xwGGt9dUNet!EPE;
z$yhOkE;R?WRTw}xCsAA>i+eHa<0BWVJxO9>UBtLE&smQ)Or?1x^<d*<=jG1M%VU5C
z@{)mQr~s|!(PKI?;*_3J3Gx7=twP)IsOQZoKeigwp&pXw`W9D+JT}yn%o_bL=>xK2
zXlPvcjj=LJD=jwybe<WM=E5Ba44w79wITU?en$50oqY-LiFc`YPj1s!e(yD5n<~Do
z(Gq<eD!B@+)1yw#?Rlizz`MejO@JuJlKmh-V?g6ek)Z9Urgx9n7=;X)HEh6Kvb?n?
z?HgEG@1@4SehsNK4>$|GvWenN?;bDGO`%?+IMd%g2`;9IJ?a~x^6Izd>sn`}(`?o{
zRlwNvii7&9Opxi-gI2$^VK5v6eB7Csg@MMli8a9rQh!J<2a#tnD`w(f((?2NJc{Xj
z2s{j~%Tb6X)M4qJG+=o{1<KT;dSyyQ1Aa-1%Z?tE&Uo!kV>DgvkI_lcWfM#9U~M>}
z<cdamnMb>1X#RLUoLz3%R~-J}%#UXN2=^kjt&D!-u}G%9+zG?!G7$zv7tRe%jdU(%
zroyxC6^Ep^Tq#oXv!1#V?)kW!cAg#kAm1UMoJaiYUq#8HX#kPoT9cHX*{JDl_`}<Z
zIxh28$S++F@3)glTK!b0$Re&tE_#Ky@)|Wb1mUd&NyX2K`_|)OCN<@@aJG(TY`!cY
z>TP9xgQti<%<>5tHi3AHTMoTMT1>sGHFd>c7naEiivPFVQGFWPZFeYoKxc^)o7v!J
zMmnlOo*z!6iOPytIS<BTAkTV09-ZOLRne*uxyW#<X|lJJFhU<7eR(mleK|T0qq;a5
z8_`0ASV%IVnY@u^j^Vgj37bK)F4*J@(tJ+s)w=YDOOBApGBeZ<m7FA#N{;L*W~L0=
zr0hI>=CqiwiKJVQGg91c@m)m+x5n<Dfs|7nTheoSA?DZ+RxX?uX-ezOZH_j}rAKC!
zxajzHHwlIiD!5Is6A24uT_!5Y5;H%U^T9edIQ?S?s|p;Jy5g%Po=H)}q&<^<sJG0k
z1YJ(6d2<{3aF<R+QhWU%L5+M~GLO)Q#}J9~x(GsKK%pw9JbFDN$yOb0`(i<xsQ(br
z721wT-1^8r-j%|u;)2=ZbdmeLuUu8FyHod%5g$trn{sF?%~l~+smK}l!p0lB@Fx>F
z?`?Yk?wW6tuRwhRx@2#(k<adF>-X7ul+Gs07e1%s5}%c8jz)8^Y10Gbb{WsbB#>S#
z9PCvm9mLK_qk;FQKt$cj2$#I4;S1E8pOU#r$c#!s`m(cf0as)n7k>(KgdV{9Qr3TM
z?#M2*NRNhHi+wW3ir2o)%1lpe1$+N4;`ijD{NfHD)vr&*^)2Fz+!?tkZ?yRdn4_v|
ziA8UQLS6`1pe7kRM@C5AMK57~zBFmzQeMi&Gg)TpqwrA8vOPbA?hbFuPjQtC_$iY}
zXmkJ3KP<k96A}B%WmD$#52xW-MQNrzbSm!Q`o#RA8Wx=bt{sif<ute-4kLDK3cWxl
zuj++M){W<NU3Dr3zsOss?~VacXXaYLNdf}!hMqff15h;V?Q*6e??V>0Th)REp3mg)
zds%=o?{c1QZ`;F!pHjmTOLwL5oAO%@(A^suYetPsmB_yzuxHTJ3@fswqH!I5*DbJA
zzqsG;j&8RZR5$zGb3&lq;n-(GUrvlCZxx+fk}t@>!EA@ID8wqYe<lfb!_8#FZmkm4
z0p(`kv+RMr^K&zppIGmnGcWf(&rTIj%ZFmJPhGxf2Q8ST55T5+%oZS0Cp{xGbMax;
z-k?H+E@HIox@TL+AYs$aQ`XnE6K#AU8vE;x?zW3cj4_7m)>vHK&3SkC-3MT2scSk@
z8p>k#XkTpq?T4$Lj4Ua76`Jq=?T1?<dbb*S%dF;--|T#BLAsxe$c24gxSr0Ed7s?6
z&B)99vzQfYXO3?(Y>*wYr?VJcSkfET!|fySUGuM%RHO+T;BTg~by;n1j%+q+hg={}
zD24Z8rIz$ll-^gxij}ig7Zy192_>tW9)5*=LH_7#fmoSBg0#`gakZ(m<Bctao8DW4
z_olDH*NFO@I)-9}0|3dWsy<|UbzNy46^W}<8%L$s%$W}h5(eo^ez1AOm9zSkT)-m(
zJR%q&4V_Lx3RYW{*>SE`&Z-t_P7yvF`~9OQ<SK6)5VHTf==V|hPwMdK-UnyJAEQoF
zW9#|RE_wu)iUW9uK-x4o2<QTxRy3@zSv<R(qEaqdaRly*m86i_s&p=X{<$JfgA1WO
z!r~gjtJ4{oK1J2hR5_uA%Fd94MulBs@8+nWKbxZmkMU)l?p#q*j+RJ>E-lBGV#c1%
z3E`%qa)B4L$IiM6Bfc9^)z+cjSvVFASfAK=e=uN`qY+vARvu}o|C4xtig(-d1nsy&
zbI_&L)yh|GXb1-C+`l9_Bh*gM2NLuYN}>otN`8{~mjLR20#suf2Y$-KSV1R!=#a)|
zMP+p77s#sH?Ntd2%?kQTBzg=leV`n<xr|ZGj4qzB54;(0RmSP?0q%Eh_Z3$t+UW1-
zC$T0rL}LxsDXxOuN6&!&`kr9j+I>mGP&n;8nc)oGIgWiC#);og(3NlE19SoV7K53g
zR~0ifLCi~`Xu=t1NcS#J_V-sVsyJf=`^C8by@vf2Ci+zb9S7P59`n*UutNK=4r^zQ
z>X#R^hk0YKiMN=zQX5t|n_u00Z<5#TWLcbZVD!`v6I6^zsi@wlb-{RLrB=NfozP!}
zSqOk+)Zg@ERq%1PnIWXqO`=$V6@(e;VwLU>G5l)vH95O*lGjW!4$MMA%(yd_5AGVj
zkNs#gJ{z|Iv%}F~Mffm}ye~T5y~Y-hYmF^mG#+<<K6vp`x*jY+<jX!rc6VML?>tAB
zLr2}N^lPGC*U5v1$OLpC%m?`GC_+5GWIZ>e%RI-?id&_$v5vZO?whj(*VFPTmFyTX
z!S}`1c6WPg`{$kRFI#(3q+8e&i48CKJh_E}UlfpDWRSDsn@K`Cg2ji>uUob@kI?Zp
z;N5&{nIzMiv}P}#yJu-b9D&=xQZ$rH30;{(K}G`5%mc#wB7m_nEEc|v^S@wYv|jEp
z>2*v<0NxshJyAl?MFWC3p?Bsa3aIw2!;kRnd+V_9!S~i-o6_zcc`ttCO=GlR(RrWC
zYi|Iu?7-|Toc^2ROk5xtB*{^KsyPX4@+xx@*=0V%*@M_?;h+Cu(-I#A$Ed27n3hm`
ziSylIovTbssPX!|kd4_{1ppVBmiRFAW7bQdX^B4x6&3X98m1*Mmup%Ar<69@oqdTS
z`x0tZ(Nfa(C14f2g%m$|@7)4t(rc}xe;T5>ycIYOs>nzO$<XgFd+)NWSOHF*;8yUH
zuFi97LF<>xDj<%_jZ>R_#eW3pF$zXd#?{qtXh~iA78ghpgpgEFVczleA5se%48QQo
zh6aK!`%sUCRGE00YCWk=X_1-|EM?VZr<Bu(GKqh-I<BkwX_adPzdQCL#j?2-7OImO
z?eT3q-{0GRx-T00FOE0#&?0?y#W;UyBYlIhE*xzbGM&L0@WR~kDYnieZKzs-jN}Su
z#MuYlN4nPhaxvcR?qYLul|POPv#^S<R4~ltK>EQ?P_hOmF3e+<_?>4V9^&zEhEq$7
zji$rt5a(kMStN0upr5ovdBvjQPj+8E+u6XY9JD@=#CUMV&=tOd*gE7~kLJp_E8olz
zriHH&`M-n$vxLRwsAd<bt0TPjAo~Vf$(9&H^+D2r{!9ca<*~Jc9@$DDC$Q{O{S7e`
zxa5I~U>mw&N;FoTD)RX~K0#nCF>v-a;|F#p)sh|Wlvm*RFCj$s9m;)?hLdpY6MPGb
zB2UUAF1H(wdQRm~+h7>r703jyGs*<Io?P39nb0KDAK?lr@gwAiKZa`nuIe*mc@MXq
z!#4g13@=wy$nJ7dTj#lBbr-X`daM>K#LtHBm4KFWuzO3F#m(`*S~MA)Z=ye)@2H|R
zKT}gEA-oFX+#bPvmiWXTf{!LfTY_7hA<yK$!!uWj)YQ0rZpg*mNDII&60UtXx^Y)f
zp^)v*LOlf{G}W{#MpM(caVJJA5~JDcNG~2+`O!fiE^hzgZ>;a!r`~xp_^&y&?%bzl
zQRtof)X#$8y>mzKxuFU(UY`|yFngo`)-Tc%!JUtRJNKz~?o;n5zB~7+|2+iXo%__!
zZ0p~-PgRNlckWZQ(!`zn)I0a7pIjDj=RWm+<qZ0tIc;(q{xg5?@<rkq90{inckWZ~
z<dt7Arg6vX^FlEHdqPX^&VA~g`_w!4sdw&E@7$+;YWJykmR0X8t6ueRrfAsjEUVsG
zR=u;V`dReg&a&#AWz{>&s&|%EuZ8IEEUVsGR`u>ItKL~wy|b)(XIb^mvTCl%JIktf
zmR0{3Evw>2Vrvp@g&XA6U#Scv7G3J8P^;N=KJeSz*s+{dUhiTCayLC5H`3G0<(z6z
zW>nEKe>Xj4q@k=_n0jDjOXjYP==voMH$PIt&1*NDp5n#Khc(J|2$`H~SlumVUk=IQ
z)}?W=%P}}?2f~bKU6@XiA6?x%S~238?vzXzrabdWF|O?p+%)$kEjK$&f<P!^SxnH+
zqe0xCPk>?rN(-q23zO76ww;3c&@@RTsj(jG0}K-XoUTfIpgL!$Ww$k-#kdauOCU)V
zG`Z<ZQYz^CsEn2dM6V$!2QW-hI(y)}4#$HaK~^H3C;b3v#{fwmsvSBP^k;E$iO$eT
z=Z@6bNHGER8sVr;0q%J^_s5310V<aE9o|rNM{}U*U~-Rs-r3s|_8iMAEXq(qWr+g<
zT@t>mKL>!Eq16{tUpntCs|}K`T^9`8lByu}s+w?upM<0aIf`SwqLcy$(00EDbd?Dd
zpAWR9QtVh60@WKNRh(ut1B7;X$kGqdoGDl4r`jlwAhSOHSsV^n%aA-i!$O7fz*!>K
zG7FJnlNV*_1|%F^roV_*Fzc%wTo<Ikn)bp-MPasiw131YR$fThJp>v!n;YrkRwil^
zj(n_Q+cb238um}saHOIa$Ftrz?!Q5OOfekC(<u<sVcJh+l@AyItKwcdP}L0LAjPpi
zkCQjF{E@8y3Tz}uR0K6Vksa`d>3M3`qN<pL=_%|d+<HhITmTyxFa?Sb9Q|@A0YK&6
zOi>`;1H75m3Y~TZqa>bBMF|QFhv?;d|ERT&Tj>&#Cn8f5>YVy?zk~N^<4a3>H4P@f
z41|5CqL~Fiss$kqivni2`pn-UOG1jaBot^`m>ReLAt~=>*JMgelk%yk5+^`e;O)9}
z?RrarkS`t`J#JXbQC5G2FlbS+LXY8u>35$W9dGUJDKu{jiTv5AI#g~cCHe&VL9m4T
z{TMiK8jooZ<5U2?6;ooMebV9(>DW)<G{FY3Jve;>JUw8#q#ZKW&%yNjD=ScOvnAfa
zAN<>T)!%;I!VB*XB+yRB4}%c&mrin{&DK(t{Iv0^(`mhq({=ilgHB=0B9r%zI9X1a
zP9`wama8e(sgh>Kjr3%VPQat>eX;-eSbW=DWy51Il`!ZroPW%a;)tmQBMU#)sM;VC
z-XkdJNdaS`Cb~gSB%wikn*g4Ybyz|kTZKz$`Hj@hN&7JdRb`t>)%bQwU-zz|^MxQ3
z>3rR@wB{A0ZN0<4{u(m~z*xal4ASW&9bHkac-R^QXRQbi{Pl-lubF0O!J>df4!e?q
zp)|=kj{1;F+C6b}1}hc1+2ryY_~XjWm%%$dpN@fY`4D&|`fH@qpdSvyzAzI=2k$&(
zeERc&Y^~AIC%y|b`c}tJWQh~ogLGu^-m`PdeKFFzRD=*J=6mQAvl6k~L#G-}oV-C)
zldmxxUNtJfhAjrMbTU03oV4tEOM2)<UTFj?0OXa6$GVmjQ$&?j$My2+{+p@Pf)ESS
zx0j9qaSyUAt0#WTpFpAC<G<Ptr_@-q0@?uJLOsTtEd-C+G8Z>R2NzzyXD^>%lQ9a_
zijr0d`*H{NCej&jSfGFs1=w{>yQJgz9GIIxuY1_Lj4kOb6uzwC%pcDK!eFvdqPvJC
zkZgkH4C+9fFoQva1wNWlD3r#UC|EJ|`)~XaplhS<!Y$%JU^!hMkifEh5=`PV;DwMO
z3;AM%;X)!A86ChfXZEuidw>jMdGlK?Eoo77MpnLJ#eXmL>t3XRKIqke5NZ7Y#@nVp
zdkIO5k!pAgOhf~^^d8BzT~xvgqc^FgE8ZU?%S9#dswtIYAWbd<tCP;c*_`oejymcd
z9PU3o+<HdjMkcOZDZiCb?<-zG*`w{l-GgJNC`Vmc^6}R3mQxNR>{6mJ5#K*}0ENG3
znbOTk=u_C6Xwh}fZ|RU-3;>tmok+Y)p=@b6hlmEcD#BHn*7+VKL;{M&oM|bG;csT%
zc^n*+4CWum7;`gzaL~@bnXq%@9v>YX+>Sn1Bp%&R{63FoxToZXqn-r8AeFL`;9}~d
z=tNU+m?7jhAEJR$dk%;O5ZQweH<CYYz)FOa);R37Fer}$Pai&Vc)RhNHi54sh9(7d
zl1Yz25`Cz=As>Xipm&R>fj>aiUX=ASKSuXubbU4I_vuB5l0x7VkI)!2mFMRmK+Oh#
zR!D2Qq4h$MK~C9%?*R)PejJCB5IBU>hd3fX`e_;@GyDosRqyEd@piY1=#;OY0M!z4
zOf^_ViQP>_aE3Amyn+q_yu2DPX~&JrcK3M=J`Y|V*YO?|#unCPD)o!$H3qQEqf<xW
z7&zvsp8#lVG#D9E`Jj^X!YsfdKDvx%{smuGmJnz-SI8c5-=86$t}G8XKaPUq{cy+%
zjXX*$Y2iD3Ju=>XT9j6j9$}^Mc#jDW8~8=qK-1|G^``sc5ea=ZV9SJKlB2-M5u(fq
zm_%R!)hlD`GN|YtD9m5t@WlPI&g%zjPJJX{U@Y-^@;RUv!Zlhg&z6AjN=~T`DXBoq
z%6%o&1myJ5CPWW%ziWYjgME_`wZ}4@_YqABQampnPd)wzIJYRvLQ~zSmO+w43mI&9
zES|o_3=m}rU`ad{55)=9RjCW;8l2iYaByz}xw*4<v;*6vKMwqew;x&$2i7Zn6HceW
zpqXttTmXe?8u7Bz4QrfqcU+3t#o}$m^OCBiPdB+h`9>GI6-`DbQTEXw$I%&ghoJ8e
z^c{k}L(pG7f;KM{KZECMF4uu~qkxn<CAk@3y@s<(UZuBr!1l!}Al&lCg`}f&J}L16
zI_?lyh&9d{%lvL#vxbEVxhQ~o3M>BupL-*(h}Aexy>;bXdjBX7a@^*7aXfWSDSYlt
zClnsM=x_vU#l8j5EN)d4dOY8Hw$s?#Jv#o7E1paiy1%%XjvnB>$cH}<*LMpzB_sT+
zZxe3!fL!sbYABbBN!2Tl;`;}yni8trY4m$vY}46;AmR%)J16VE24lL1B&#_gU2)Tt
zGCkrJcG}@<t&?oy=6NVe`A<-dtOjN2>L{}?+u5=O3u|L@)6-?~4z9iGF5lI)^=}`1
z_x)f0_Jep>GH5%(@j5?60&&CB0s=fnolKc8tA^P`$`&SP!i^Q#W}x2b!fK;&<}rT-
zdsh(;9~NZF4Q9aE%M}VXR^-L-1WC4PqauEEE3rEe&u1l=19R&F%R(vW2)f)Bnar80
z-1{20IIluKL2A0Jrbc`t)@b*rslq-3Rp8015bGrz=5CB;jI7L@PyCC<>U+m{7oO^<
zdQZ-f0FNa=WaC9+I3qRRHv#O%aU5IM)xBVbI=qS>x^meSY()g5ts(W~Z3Kg}wpv?R
z|7~rxN*Xn!5JEH$>?Bm%p@R}Ib_7Hi;y_Pdqqsd^Tg_QD$vwA4dnMM&6W06)d+Mx9
z5MFAzeWcqG-`d>bQVS57GaxgHjsn@z$MS?Q`^rO=elLF|%Fg<FGVf}#6H4ckvLJA4
zjZL%diuE<^bUJK>Sxrv*t?7jThw2K7fbuLo^LIYz&?lIE@lMd7A_H1k@!$2Tl`KN=
z<h`HBHr+0%qO`S)VAxqsJH<4`&i^J+5qxBNV&@|f6g$_aD0V)Kq}VB>DRyo|RP1EX
z`;JRi?0ngD#m=<|3ppm7yZj|l5IcVk2~oVriuT_ZLPhNSQDnr<&FF~W4<#gcTKQN~
zLiO7!Cgl3KgreASNs663O|kP~L<PN$+qOmK=@leKL5W2K2j}UgvqArp**bAv?~cP>
z?nQ6GD_^`7aN~yK*e6-&A7?JW8mz2Q6gTlBm_>0dk2uxm%muTK`Ge+#Py<6s-O>+h
ze~ix@Cc&guCn6w`FF<jXe00&YnHg)8Z6iz5X|As&_E0U};eul-qy*shPm={ohZ(aJ
z%f_Bts(Frkg=-Ay?$NebZ>~1ig<6yOA;o*3KV?YOrueWSMQ}gefRb)AzWk2FZW3NJ
z9>Cy!hfj{_$pAkA?&GU&e(a0SUdDJc!3u2+d?niSY{kBe5kAK{1MS(3KLkY)j5!RY
zu@=nCN<~z}*JAZz^~n=@P7I;-)hf{4@)h##(cb>AJBKU%s#vM`K*6;IhT&+&ANZ>L
zr($J4-hXj$AhTOVe-f3g3ea0C_|XthQB`bU4OM+Bmv67b_i-x=+6^l@3qAf_sr<Vr
zTawF`F6hN|x<MUy2cz_0)#?G8vr-SYU+y2`D`b2;y|NNeD_^Y)t5s_KD;a|k)eQF6
zrW2ScTM5}fSqNnF`gd>`hTnWsRmABEv;sL$i8H{g)w&uw{HS{Ops`szC(q#!fzLQ)
zr#PL-E_u+bU+>UCt+M4tcdj^DYE5~-BtcWJ=9(By;s|L%(d*Gq!Ho+(5m<T@^#XrV
zXr;#cFuKa>&jP|KlOu15YcZ~|DpQMxF0g;z*?PQlcqG=K!iQ#id-5IOe#8&5zH5G4
z$M;1oV_*Un5PdXH>AfJ99f$oH9&<|b;s3Yyt!-^1$-*Ds2mOkU@I;tk8<Wc<a6B`F
zkc2Y?I9z738xtdJVZ5;|k7aX7;J?3h>sCva4H$BE_B_e%V5!wzU45&rs;;UQP75ZT
zDGIsq89nszQEwt<gN6+b%>Z=@=I144RfoY$@O&3&VGDyUoH~t=*^vlCxW1=aD@SpQ
z6J3)th`Fc@f=mPGuhSz(&p+ZBb?y=FhX+FgpaC{@%15DqQB7Pq92ZB4b|xCCs(Vq*
zrAk&Q#;OYgX7g7_qU~WZB-&5_tCjCp|5(p%9c+b1s;rk94J`*EbZ&o!I}#=B_;L`a
zun#p+WRFN4x0*<v{O&D6tc@=`J^-P~a-TRn7MRMg`=uM6>nj%Ue3&j+@aRO?Cl?Yi
ztAUAziW>AbHPK47e&qi4Boe}Kb!TUDy|#u%CE_+fY*nImzeggY#zHb`n-Y4#Re}JK
zz*E@n73c2J&1P(URxd<*iWbyg@cZ>s@_&rj{iemNUyLEMCs=+!b~s2HbifsIGqFH$
z@5b(kWM&@~of#hkOw>;+^wjGIXYeE>h2of_aE!4H#-5F{SJOynZv<ueElJqo7^?JO
z>(`erVDVhMd{KMx3?6#DI{$s~EN_Np#0MM@CWWH#VJ4}<FBI%t*FB?j6ZIzpmpy%E
zGN-F_GJa;&h%Uq~CG>A)g&s-cF{8BQF!rG3`NZ)TIQ}|D-k?FTdq$VSbVx9cDke<*
zeIv4|)V^gk6flyNnbLO23dQ|{V&0(eK~#|K$X@?rf4#Q73)>m<$~s)^!%7|TM)r$d
zeTk2P*@(Q2Jn$nmCl+-!vcRI5)Qxww^{qD>t6MQ6X?@<@*xv^dAvxef63Up;iBe_)
z^F1}v<1AYwsmX&V2*|+%CBzk=6X&P|G+RJxVA=&DqJ?{imSltC!vskjH*zz#A2q9!
zfwheh#V$tT2NPHN5y3uiz}X}T7}2iSA0I%w@(>GKXvOsF+p;j#%e$7G`7lFj)`Xc0
zip}DJ+6&u$zZK=b%es$kJ14K}6sE8rm@hHLf7eA=`~ItNQa>^u^kad2w*|H)ec^LS
z9WTU5ax}NlA<e3N*6dLf6?9<6GmIW`%*@2G-#eg!4XF=E+5SLtDLTdAh!n{!s<&FT
zPUq91s?dJ-4Yegp&t5Iy@6Ruu<L`_0XV2*O)r&H}KYxn9Kfj`1j8Zu>lZM%9C1AdI
z^=u8xJb(6_VLgAbCa}4VS5n71)xj_k+As=g1W`id<<&O=D$~|9pmnI8#8qPi%bA($
z1YW^$z0s<t5qtUS4K-%{={o(seEy1lUp-$V#9qEyd&ciC%NdOops5~QTUw(YT>JUu
za{=~@fe{dRUthxC)tB^}Y%PP#Zf;y1wKr~3++aNX?{^8glQ3LK6A1xibt~i|Wujd-
zrcH>#cLxFiS?O>NXj0I9150b~axZhC#_D6+|9>2XvE0DpIyPJT`|V(zs=1*Km8>KY
zNH|%YJ3<R)W-<xeOhWpYrBGG4oXM<R2a{}(`nmN5qsYMGKlOXPpvz$?F>DA{6aAW5
zgBG=ClJW{G%<e@IA5NK_sk%uWnlb(WV3qHfY_|r3Hfl1gP3l*r-XisT@Ar>eQP_RF
zHwc1uz?Con5amMM8Q+ZPMkdfW_1h~Zjp9_+KVjg~@I=k&Ecrv7<ysB(<FMF<;V$b}
zy;zDF#i4`Bhq!Ja_pMh-wo-P?PC0fL9Ste|Z_(Ap({K9w6UJz~vKOL02{%fI)TT}G
za}X`)AW@o+>TLf6Ib;u6B;nH1YTK0+0it70qC!BDjQ${>r43$P69v@4*2W*}yL+pf
zwbut5n{P%n!%3(TJ7>hkK~}u1i7qOI&{rc02B;#=oHJ?;%3|yJ4%E}2-AkA_P_Q00
z<#1-z2m7v9bTPu|DefK7@VMwmh_yt3zxcZgWxLNZY<Zlq;rp<H8$!U@1{qV>HBeYQ
z9mflW)d{N9k-XzHr<8GOohg;B`R$e;RdUvgV=0oXWKv^epp}urM-#?_gYg~R0%rEe
z2pdX0f?ctqF2kYfptB%H-nm4Zr{wThoih<P8rKv?N7?ga;^aufARi@+-kO**_n=1v
zdkiHq-)M5!B#1i=4G#<OKMIJ2w@;;7roG@e5(;c3(D7lnRrlLUK-;cUVsOQMYu97q
z-Y3mfy@E#<c3mWpa`?Vt?y`DsSjm;;<qSwhNVj-VmKC|#7=zDsg3d8swroW+G10F9
zZK#d7n1}^lj%cTH^B58_xS;z0NGToS(!zi>(X!MT!t|dPE3mi`(v><367l&eUf*R3
z9mzQ81U#0ZYp<e`Diumi?+8e#5VdK7ci<Gi6}?Dj9c%go`R?ah1q&E~Sc^Axn<jou
z&Wq&1E`GjwNyc@^a=i0`j3Hz$#(NsxBlK|xx$<dbHPRs6V=*$|jJ0TYIX>TZB~o5q
zUesH%4(a)ScNtQZ6IY?+h!>$QqSv6jPg;UDC}=B33r87i-aZq`<e=7e4r*&?AT`1<
zWn`wq+K&Kpl!J3-=EqmCn_0n(v2jiJ1Ytj4zighjy7O1_9iRl~2!3Y$<9daz44!$v
zy|-W6*sJ}yvGr#A&pnn<SNMhvlht+ON=TO^IK}q$z)zi=v}mcfNL1ul=yZa3MDaq&
zJK6hT@cF~w^M}Fb4};Gi2A@9+K7SZ|{xJCbVet9)G58#{+mt13EG)BZB%zC&{h)2z
zNa}KK%J`DgYo}u@CEd{*VnzyrIGLnxHycS3vkk4^+<0AkpJ@m=((n<}(pxrMmrFOC
z)2C>7TyWZkA8c(v+i%-&w9Jgo{odW19+ylvUVoXQ`F7E1I{*!M_WoSmxosC{`{F4k
zJ(bIt^pHN?q?dyCnDiT4`?qfRWmFpCJ&|{Axh^=;^vkFQAEs%0TypBh|6{Lqu(5sH
z*2fm+cWr)LGTnatWr_~4i%#1EF!uZZ*jeAZ%LJIR53HhDlVI9jNR++LM7UEw0PB4U
zrKjzSRPl6w$mgm1WTgDG{qkXT?LFXpx4yxFMyhm=d14jMnk(k>l=CG~{yuXCN#~@#
z$?lvetbYm6J*68A0NenYOFl9^zl5*f)m<f{!|&{_^0)O?8R_lwR<{wJPcaEi!SwW#
z4^vD$tK_s(P86{AWK&sf#tF7GRimY3Myu(|bj>zJ@6qnP?X};R#!;Yny(ODUT9V{8
z{IWJMjl<71lXlByB?_e)<lKJOeOcSL+Ja4(jQTJO_u*8?5ATWn!4&92mE{*1T`!4u
z?0YUXedj~@yZ8Pm{=?}SFuZRI4yI`WRQhx&V+17ejw8UOrXK+)fA<j>#eX<m1BUl)
z!NIgmc=0T&36gr(CUCKPGywplo51&Tq7B*r_4LN#kV8ECeTqGU*K<<zE<C+`zoXW)
z;W%FWr~_8L-+8t4?D^BeVp+W|mdp76rKdkHzAC=ki7#TThkd-*qkXCRbS+>+YEV2i
z@bT7*NTD&QIwHgCr=LE}X*<PXH)=J}DFIK7^Lh14MJ*m4u6TUED7uRd$!ipl+uK#$
zAs#lXmoFAyEG<2K`r_F%Hwn_!@KCp@8vAC#`C?}Nai@#iuA0tU!@N`5SeR)DgEAb@
zdbQ`FW#l>9pZG1GH&ZkVFIOy2$4uA}-E7+WnCEX2V)76~{SAUg|NOHt9+Q4l*_|~_
z+-PM-2OQti6q-$pQ17Eh&K|`~h4Q$pe4o^9sLS5QKjF1@u(h}GZfpHbZF76;-6TX}
z^7DiA+=cW^MSt#0g#Nvh=r-i&JJF>7c*6AEsnd5SQFo<N4@9hPq*y7kHSMhcUO=J0
z#9c8zDj<Skzaux2rfmX8?<F2vaC~SC`uuORTS^-m#UU-~c%>=+=aAFPL3_||U8qj0
z7vUu^LYUcL3~!7?dWN?VHW_X*mIcL=3<jT;4p;cVHZp0d9>GffrWVB=jVjZ|K(Ifg
zE7RcFxrQLk%TKS~tJhcbxB2;AuP*Sm*4OCDZZd|+YJ!Fu4f@0SK=nez`WybaSWuTM
zgcruWY1NZixaO}xKg32XE-dO6;AOWTH(?Jf7Z=e6XE9kFFJN))C4-zcbOjo|N5kU*
z8e1y46BNLIoafrm4vt+j`G!nw-w3nL?{{zj&=uvR5L}?M25q<Jr+6JCr1kv1iTL3&
zTwmgUDl0#Ctr;IRj~DE^Y!KyQ)2NRj?Qs*$Hk#^J)hsmCvRceb!{6^5d{jR}dlNkz
zL_v{(KY3z?31f4h!39(_Kc81|y3{e3F~)f%qxy~J$=bGhT3kANcDpGlGh=YE62Ht3
zur-M!sS4-iBHDIvzC64vCvnQ7RRr5w4xT(As|;g@5#=q*2}PuvQ4Tu+4y|=_C(L#j
z_FfN$s?oj_Ga_>V6uQ%J(-Je4jY2Na`%`^edcL5_KVM55LcU!Z5IhNSUOv9~w0Owh
zo;)GfOdB7ld~XeAsY=$H=*>cb90hUmAj1A}c&5iQUg%c6t=^z7T>($37k3Q|f1>)y
z>m)gh7$Wx)ejUwFd@0u51-f`dEftr3URLGji!Ta`OV8EZUS4hYf<6YjB3F`Q^qlU5
zjn)a@gxV$pY|{o=)Da+s4fxlJ-5S65>FFWRZFMZO#N?ho#_ok=bzJ!6U-0}q(YS-n
z{oRd^g{MpEkEcM%=5~WK^(wE<(vwwBPE#e1TiKdUkH}dzJ)`9PQ9XhYCW9g*MMXgK
zd$`&Yepznz{NZ6-?5FqW%h;eTZ$9%i%MeFCL!WoU@isV|r!+rb%Cf(ij@4*&@%s&I
z1!o%1Lh$$dh1OyiG>Cj`@#UNk)@gaw<a@1V9woy2gND(Hc@CR<fT>>_tT?j&<`_3h
zls&nI>t!ylzL|LrJ(S3ol|e6&=@*3b8Q1gx@gY*4;CgO6!f6@D)HWw8(=U~*S(j0<
zX4jK$uQDZw`;g}=cKsyB192)HUq-QuEA}D~;fi=GU_qUfDkeF!|H7oBsf?MVSFfOu
z<2v-{>$5s#UE4lcSBzpuT2pM&?xH8wh0<DLT9~&GkhpxTL_kj7K7rE<`DEB7lVv{J
zR(OtG^9Lb@VrXNSc_<G2COWkz&bH6|jDu~2MJK=bF!4~EYE2zwb0K{m4HZl}uEx&~
zc~+gmc=V)N&M8L*i`vYc#}U`MVH_ZSI;wAmLKWH?^28lrw7|IC04*&!hx|;xEzmd;
zJoMGV3+gI#O`SuJuEs?1<#n#}5aKALZ=V6lY&C#k>t3pNYio)`pDs+2UOya!v>pec
z^3TE+-bcym8Iq{*B39zh_3hrcdvsdOQ@Ndrm{-{X2n>o$SOpeFXT||^FkRh(9n~73
zYO^`)V0^>4>T?SA9}SQ%_j|qeW$JFxnDR(K6nD+l)P|6gUYi4nDKkQf_5HTo8{R}X
zVW%3I6QfMrXqLOPb5+g7rmeI`MxW<W_8hy<&NkADF<V?_z64`vR)0p;X>BF2b=zyd
zuiFQEN~IQ)tR;zaaewl1jxSG_?m%CpM1sI5wFfO=R0TtgIp16vSM)%7sn|6owtX4(
zi(|a!P<gaKI*5l_G8WON#lrgKJI>0>w3nlDC5bv!7NB&a?qGMix?odERmCYU<TBLn
zvyi6~d~^gmbRQNr8%DGd91ok#*2I&O8%ieTtPX>#%M=Ph7iIqfWv3f<o2|2;TZ|Wd
z?i**RQI;oBFu2C$4!_m};Vi_b+PPQsc-o0NVvbdX{h9cQn7hdmI@h;WUvIA0-mJeq
zc=v8&>s_Yv$KB~=5{nd(On+o4;9ld5yYa@}ht+!j5<UGIlSJN0#cnsk&7d3fTlIn;
zM6G&f@=#0O8t1+Bm?w*+2S52$_R`Twkj!?A+3;?CYkhZPt+u+px3Tu&Vdp{`ne0h1
zn(F~(2Xt-F_nQIg?7Dk<n+nH!5Z-Q%j46D(nG!;oC~8lhB9iIWb3^i{Cxs;I*)a7$
z37l~wWPMJuG$R?3)9o(1PJ(&Biw`AMPYdKwJq(Q&9^!}n%Nux)n~Em}GGin$+Jqj*
z0$!7tJ(ieFHyxvij2TVLMq`=IzoM)c*smp{s|Pvp)ny4Bx>TZ?BcCL9e-}1$R^AdY
zm?}5d`_e4%Niehsk|GT+Psc85O+%5m>4l915X~&50M$8Gy9H|cQEs#m46}%h_6=j2
z%sfd}Z9oGk^LLa}8|@!5>fK~i8NabIs`dQ=WmGd4vgOnG^M9&rYFaQsE=}YaFOyo?
z?jeu9+02whVZmrQR7T;}t^RX$cMI6mWejZO4Ja0=0({dHBet%YSO6_-B;w<==PN)0
z2LV%}uQ#5v*qJ9$t*<r7`yHv)*B?adZbVBD-&m?;XLvxeWhO&5*@{2^r;;txf(c|R
zk!L*Fva;QSZ2dEnYJGiZqV@HTH0$ewkgWATc53Tg5@I&GEm6wdC=lIHauPA)9JN&G
z??~CW!XM=AZsaXJx?{;)R>lV;ciGb=oA!;#`=3e(vzs%4DvmEOo<xo-a}RpCw)>Br
z{q0PmDQj_ra{il5sU<+LCazjd^Gmt7h&G{&H1yUqM%4GF&VCTp%1bY6^+ErR)Ok$F
zTT*AM^bhL%H>A$?=uV{0>5SipI$O2eNS*Dx{|BhE)tuW==Tw1PQRhUNAJqBpMxC4W
z&Xm+SRq~G18A|`4&VOU-jH7!i>Z~(<U+N6C+?qN!%~|6A3F_R;IA**}fjd#>CLgT+
zpw16Qoiom*w|CaJ@X#*n!kN|ez1qgwhuZe*|At=U>Pz)j?=<L_aFAN{PAvoki=i6*
z*fbx>F6RA*)inkrSx^1wv~=3R$xgY5B<-!&1ffdVnQ}Lobin-ko43kuH^Y8waN3!$
zuiP3&%GOHVbX;Bd(m1)*k#!9+-u2iT%Zxd?#!veAdKx38jGAsZ#nxGL&x||F=6oXu
z+EX(U0InAG2faIR5LrcT!8+(-KX`_}8P8zGb1buv$no%8f(Ad4JusR6!}$W;j++?*
zJLip@K%Dsp3(%%b=eunDHH4hC`9m=su;3PaKo$!yvh%y?tv@bBNztia#zKVglx}&w
zy5FnG)iy-VG2sUKpIK(o20#U@Qr~e0z*>IL|GUwDdpyT(0qIN+xC^AGNA@-_lIuTp
zA4oT3!bXslb^J~+ntNm`*jZcM0a1bY#l(^^z79x%a5s>g<8Fn*&lz_}F)g~c0d+KJ
z;5`UPY?#dVgI?Gl+}dP*GK||9%u4x*!UyNMwcNqk(;^3_jy0X;&$lt4-`%b4uJ3H`
z?r&_p!=UQh2m23eIIU617G&bD4`fD9m*1c-de{!`Hy3V#bh{a$0Zg0{lIhlSLh`34
zg(Q!i74rQS(*l(Q$*J*nV{`ph_rGNntGaeyR^5l3UZzdi^UM0o6U?V*2Ef@#oZqOz
zv@?;WIVLe2)>kW@E=x9yd+k!-xAhB-M-yKMcpml}xFx%>t+BhHq7Zgsy3ChiZNNs{
z?E4+n^*aGy2nc(0RHPdU8^ccLQpKfLa6dz+cpu?(3|meh+`yyhY~$E6#JaZg`@7oO
z_SV~tclWzXvw+v)#K2;;L}p!;L|!$kHUsW-vX2invxO<NCv$CpOvY7^xt-Ph_qDzC
zoz>md{q0@$1dq^C963|^>QM9szKt=4;YbjI!dLEmDB)t{0e-A-+#>NS$Lj-;D?pH*
zr-W~i8wK$L$Q&50PXa|C1H=+aoT+DODd~~PS&(f-&X_*KMNZ#uIcZKPRN=%*X$B!k
z3b&w^9Fk(lJ6tLH8R<2-Ovpkkmx-@)<J7o2m9QsGib5nm**=F4?p~Pio44zIgdX$u
zKr){c_f**oFH;`6>M=pGC<WzK6y%qRy?QKYkAhnyY;FdJSCHeACWPj_5!TI%D{&aG
zBrSCim8x1vz#%264E*|h*{O=^{Z<bbE(%##Bob)``!S*$UkQz2A8$9q9*gL5@~|rr
zkNB2fpr%mlQqxnAY5PF~o(AVZ&`p5g3L}z-Oge&$fF=h)oaUh;2*!Cp#}G;^5P}#T
zbHfA&18Q?JY$G}xWQ_5_uu~f+MBu~j0ED2(v<QQi!K(1^^4N2~O94W^1VL|s@A39A
zh-U}LmqPxcfmVq?yJjJ?Y&jUhWeBKs+ps10m(Y*_P!7U#K%KzdC>?!5P?605IM{*k
zrBLVxMCEn+pj<zQuat+jbB#y5D1+`9MvU>)nct^qP?4I$Z3%smy6_-(*h9Aq)olbA
zNe$-jtZIjT12>a_9{UC9r+F$muj?TA8jK%Fhz`gJFiygDJ3L1y6od*kMWa~aIID4n
zbLc*pGUxr)fNRyg(P_by=r$1dZg7svmhR4FfOr)z#_Ku{)R%5}ju5&b1#6X1tu#Av
zvb8!rYy$Fo*bxgfi-MDrR=ovdfHPw+Tp&2ul(@fS79dW#ddw_A0;5yp?+9z0{viq-
zD16csC9Tvkt_b$<f^Ol5_9fztd7^-W#;Ma*^Hd$PC2MLX$kmGHx_9+t0UQC9Imc{M
zXJi?!j^=1&@xDm8LKtYU7nMF&=RWy`ud9WB)(+)ivGA&PIA6_Iiu0vvxzzKHWD8Rq
ztHkFhHPsx)lIc5%csG~>>YJUT<ar{i-S+jozFW`A*tar5R-8BU`Khdy>)djVZKi>n
zrRwWJx`jRS9Uv{OTq_g3$3*9u(83z@JYFAtrKnFZU{L(=_3GaH+UoARKj1Sx?`<FK
zuC3>}&jnm1QG_}x@p*+;uzpV?sFI<CIO2;^_SCQk6OlZc15i=VuLl)Rc`M3fJ<1wo
zleenOfCJruLS7u|@vmVxpxX{*)+4d^8x2m6mLcO1<tlnLFrwjcG-wTmOyGun7>p|X
zL)BRbPYbee8s?jPkx-L*##fygH!6804-0!<sk!3Jz(-gHunub2<a)p6x4Xm6A<f5h
zS{0TBWG&)Dsah>p0ML?G>WPlT8lI8%bMxYM!z2JA@Yk?KJKLq&+1}guNS)CLIZmbN
zlT;(z(&yXYTCveG<1Rytkp-PRz0iH)oU!yd-XcoJsQTpe0bPL2D_t#H&rCo*SBPF<
zzkK?3eF(ji&y}<UTrJyDFW&a~xTK+)3P#`{1n6EYUa2l!ONnJD;E8NWYZck9M(YHG
zu^hb<cjKy<VHtB*?utqaE9XfN7RP3Bc6J@a*%|0l9=Z;D4WG6)#x_wwHm#am;>F6f
zprEmSgo@B)@8BJ%)aKL7HqU4Ux%6NnkESLj3bP>>ai#>(L#^{X(6nEdVMV}N>zwIJ
zh#7nWdM*djR-7ySE!hm46w-RT2|6x=8H-Q@r)+*qgKj-^#4YN<7<O^Dr%mJ5BY7tP
zJg_Wh#rHV#8gTUV?Dc_dzaRzg*7nvqO0Jwl@|eV9t8tRU5;om#A6)c^@j(%gzZMNl
zD=`7sO0RgiZ~S!aInJAP5DyD)NHAfcr1qX95|CiR<9|gJdLEd!gNlyS*20OiOiE`w
z=|Zl<)@Qe<{$;EjH{@1#h$A+u%0;!yEH*MgM)2k>A$LHMcN=8c#wEZ9cDvmU8bww^
zu<%d;KB$^Is1{4b(h58l!(2%oj{gOZ9%pXZ@!$j@W~JzjVYx?y(^66G^n)Ir9dT>k
zZ0v#z@h1|WAr@hk&~Omq0Q^!Z7t4!rP6DBnVW5$23V&z90w6~Yf{yf+!n2GzodgAZ
zL_{qlg@fNCJmL{huBzs~ncA+YEzkkhp@^GRdN8TH>j8jv=&`0i(4u)Kr5tB-Kao5z
zAK>3IZWS_J_V!oz5B4g>QbI(!c5&hmQ(ZgpTWt_^akGNGsLL`f=_6S45GSVch$I{*
zs9d5__YV3uJWau+n}RTAwNJ?Yf={m#O(VHGnU&5d_wbzZia1Csf7zLRq;h-j*Ecs|
zUBAN^CH{cf3a%feliguAmfKiJl#@G>Er!6Ca7b^G8R@DCET(U<P~mXU8`2SDV_0Y4
zM!;Oqf-^-w(D8_jluJ2UB%;Nq?zk{Pwh1m;(Ex=&ju=GxMjExKCUR{eEdpG+14(kI
z$smfDse|tY?uly$=o$u4=6>P6lfaTAJzJg7wX+~%kN#7$v-s)5GZ6RCL#gGrTVJ`?
z<kPrP&@Hb6HaB=30=pVeFefMq)Zck?u)4VhxKw~w5&U(Mnx*dj@cSN!m`PpQw||1f
z@W=Y@-p2Npuv>VWde9k?$8U6+AIAyd-e+>b%hti>=Guohm1QDAK*S2qic9+b5>nv&
z6B^tISq&cb+N}XiYhcTB-^x$i+;8r+TxCKKS}ZO1eIQvd=b*hXRs3cE)bLF!q79EH
zCCo(9Q~=>=w}3Y;G?ix{dKC|UJz`e}VQ-+ewrlS;w_n%x4qor=$2S51CqkmGDugJf
zm^R1a%6u=3S{EQYEi)rbc@-rZmco2BQBg_9M?y};b38q>D8a#QYIUg>e7@j<BgVs;
z_aoGR?S*X+DI@i>Dh;E4>A2M`^{~WA(GfaPA%Wz7;h$$})FkSr-#ZsD1!?-60Oj!2
z7u1Q6f>7Hppl*rGA});81ontIIDz>j-DcD|uw}~G>p%`PzC^Slj-i`Tef2dujSt^Q
zhfk8Utc#qrMqD}d$3?;{#>XQ<Ko#(4&+Gw5bd>f{zq*Mz6(4BmL9{@4aeA#Af9cYv
zpp8Mz6BVDRpQ3wJivX(KtZMO#H*&ws$D=u#jl=qJiMA>rB=CP-XL9v0KGx^N*@V=0
z95ya19w{V7AiKFTD->KWQ3h~K=k;uMJOeh~*MOZ<c7a)RKWcG24cICo{J!6BR&r&n
z5D_IuznRoRxq>Fj6S^kIl&nkgfH;9LkJ9;y^PIt;c9c-VnCEfek*^%UBx)#)4VB;q
z#-zt;XSz>eJrwHJSsi8489YY|JxNdk$V{sgkR*usMm{>A!y|z9IqI+bXvmZ}15cjD
z$@cWfIs``(ltdodedaI?rU#JA75w9^sJE0v2Y4%r(OVwb*>F*RqYkkkEZ+&j)s+lU
z3N3F1`%X@LW>J|3fBy_rHwbVq^y|RpfDlKLM>ja9yBQX6et~#YZ$&}-l6B9pbq0Od
z0sm(h5-Dp%tjq5cUj~`akQKw@g0LU)ttZGLv_<FaA0r*4`U+4Ta%poLCkj}Y8X^4W
z>gMn29HG@o+F@w}Rga_|TtK#q?ZX<f1><Iphbd+|2j&iP(j%4wtb$H&aLF3>VxG<b
zUFEtndV)gfw`gm54r>^-(tX_FH^cCYR$c>xbBfgGJka`7)XK;5OceC+f-|&{LzeXt
zdh4VjvDX)QjndZqsah=^&a1qNbHR6sy{`Tp2g01AZyn|?>P#9z^C6C7KlU&+!FSN~
zYP1@pEns8TVIN?g1<?YqkP-3Y$1sMM*s(O`c=7}M(-F+>we1fdR=3`G00!@0ru*fn
zM|p(!Mw1XlOg<R4hN_sbCetk;5!~K@%n0C`Na>v7Ql>;oE~2l-u2=33qgL{#6*<Ua
zX&IVz9EEMXSByj$w5=dTJdrY((`BJb2c!g#k85bnod;U6N~_hUxyl`a#y}u@M8Gf?
zn?(%MKZ}d7@U*z74*uNOLiQyO)A{vqpkY{rpwox}St>3vSFK!-A{ZeT7uB#w7Yqdv
znToo5K@)8?NmNiAB42gjJG#dZ4S<@wxj7G(2`o`03_wzw#74;tgS`gwQ_qV_#qzVF
zp3HLEKpfBd)*lN0`>?vPNq=O9TfycpKxoQwF`~#gu-I$J7a><fcec?{0_Djo)22*<
zo5+lLmst_8vsbQoIoP^(_LeH%FZA%N;yr-}XxY~0p6U*P26gMG<=$MYt%5kWrrB$L
zcQ#kI-W{yITem()3dKWwgN-XXf-k>Lz>zZ${q`-BaghYqcXzjU)hCwn)#moQ+S@mW
zPPQzU^$)Ucvz+W6!K?_#{wKG1WF|RP;KrwdMLbxR>TphSmAE=-5{753M$lM*%{2<O
z1Wsx$LK>iO{sl#xcF?UO#b$6t+?~5TXngW2hx4?WxV<R1V~H~Hg|tk7bSxGV*7RiX
zORJqVF~~&e`(t#PDg=M2MWK3<t!%TKxo0VskrgTxTe;%qp1RlZH-rPyfBHR_O1O*t
ziwr`J0)pqBX+~(Qs{v<RGTJce%(&IgwMxt)YgR=VF`c`HyL$X2!eeG!Jip?2>T%K1
z4oW#_i|CAim0=NM>s;AFCeCF|b3}bSDrD-$Gesn|#56&U1j&o9T#)5^3U)Y{87@iB
zeBd$wNzTlh3yQl#_+geOf$2f30lBg!+zI3{B}SVU?H{YVqe!EG$tU-h%4E|haDw2V
zk4ek%32Axd+99<Yy;rP4rfN}r0#NvG^I(1K2*QU|&dcU$Y!pUiwB8m!(nVhAVgfr{
zi>SXaLUelxA+PrRFSt_u#+eVFnr!<Iy9N&l8hCU>%Ou;HkG2xZ@1V)*SG-^ozySqr
z_QP`+K9sTn9IB#8A;?XN7Dy8w_y(uJWv>OiqWWv-H~MtXkO07)3wcrG*8J8P;zmXj
zW(SLiQJACtb(#F5>PmK&%F>G2Ze(wOeWtvWCDF1j3gLK({-48>)Nir<L9YCyQqAF-
zyf#wp4F%9xp)6&9M^MQTjwhRs?x<>Y_g%4A%p7f;azP)jwp5h26JTFqEkoYVL*}3W
zL?ma@1Jv`yHc-N20ib3Z7`L|UnQb2W<iOLQN7|UGE50P8_aNeK{60{8(D%G)V;1Gt
z`(XsDY;G=}XTuhdH|^2lOK0FakpCy}A7rbjTMi9%l-1GPhzbJB0dt<u8l5p^M10Qu
z7N1N4Da8Gxd^9p(2!pNdsFV+Kvsaz-t9dVD$9FVy?tbJ-7U5qRi-4Ft2V)GyNVV~C
zQCK&vR)NeF{A0C%(pc>*w%2oJgD(_RDU;>UwI_12{RFF2O0He6&Q{S6R{iE%5(kk)
zj^K}};K-`lNG;IHQ5@~c1wuuBt*Z5xxMtcV`8>>Snv0ST2+uj`FQ}4|sK-lq!e2VX
z|K_Xt(tOTS)ho2fP#<-skJY(SshS`21qT_@i}w69wc+k9wTXoTnl+R@!$>D9u0qYF
zZ+KXYW(R2D#Ls`>&o%xjeg24L;6KFWwt4f=!iia<667eBR@7hK5t5u$TFnhQC8Q(Z
z9uSYUQy<OEf!p8pyG>+@eX{9jgD{S^?4EyIhYh58+WOa*cBdQm{_01A;o14c<yTL#
zZm#d|ukY?vyw%rhZ`R+wd%yADzi)on+TQt}-M#&TKmPpqkAIr10yUSYB$t3ASsSfp
zYXJ2xmY1GBd;a3*m#;JsGB?p6HWMJYkmIbcz2B~_RTTYh$?v{M_eWYscp*x9{O1(9
zWI<!)@GdT^b?=C8QJb%WurFY|8E<7}W>#L=u&>+1g9ZPX9POw>QC7dW%qu0xcmPam
z4S={|4O|b%Rxe+Ys0HJJ7j(WTmXFjg%FH=!b6{8Rh-z=eA+)8TUZLxmd)4A&`&>?b
zior#oA5o-@mDdfOOrh6hk=hXOL&+{G%Qc+`k~&{d(Ge%v>qo@)IcoVY7QAegGh}Ud
zRUxvG)=kRF&zwGReHD+&u?llmp##D(i!yyyMGVeE)eHwPT+y;*0!eebt3K@g1NhJ5
z5cZBEuAA+YTYZmqHB5|C@XW3#<(Km6&40h!*-`(6viUOwpi$)%U3Sp@Fj^6K9-qyk
zc&^U-$P)BbY^1M&ZFCt2oRAUOgr53mq^=XY3Vb}O_f(;`>v5rRJ(V5<L#-cKLx(fN
zs3A=!3VhO#^H|(@AlluOemxC2_E{eJm@q!coW-eGnV8)D&V+dwGhsAcYrQo8g`z$m
zSI3$-AIHq75Rt1zcOE3BJs(fABb>0^ppM#={-qWTqyo7^$uf5oeIOkM6j+%^TE3Ee
zG|Swm1sfJJs318LhE7)jX@=K<l&C^4=cm{;%f_sB3<`7}QS}&+zi5|F3aVT!o1hr0
zMs3-MhYo7ivy4SG6uUM0Od_6Wgr@7|B)6y0irhpV#>L_~?2fP)fH;|V@!~x0!?6FC
z=FO&@;sufgkRiZalXFZ0a5LXv;coK|7P`m`#0cMxhY$_|OWed8SlMq0_-^b5kKE{-
zwY1TqkB;-jD(@(s+%9h>_MEtm4GL4s!5<CDK)O?2#<A*OmjNOWs{u3_fECPj7JA7c
zOsJtbbHy`R4I)Mg(I^&6@EID;<OtuAFk&v((w$g7Tj=pPQJJ%k6#?4h8i@yEU28u9
zF|avogB*+`G1iw@@I`0A=%OCI?3x{-a6#`0ZAn}dp<%Y#Ma7fseBN*6sbmx*1r*DN
zKq<wAq~rI{tA{NaLNuoK@$?5+)-~8tan%#{e3xj&rP)F2=JKccBtQAnPLiYiX(jsU
z)90kM@=vv&nx1=COpK+zjZSo$!sf|Oz22lc9qbJC0>q(lRy(PG+Vls{u;^42Wc8Fq
z5vy7!SpsFi6cZ(*T8+(+@CJD@d_3)h4fW(AT^%mAdeUrZf~C`%wscArfzJ2Ej1uj$
z<WOQkyENfB9H}%y<cvFkkB5;b!!|2A1|ch&=tQ|b7?K|ds;k*42m44+!F92xf<e8Q
zQbV;+S0&l~6BL5jqbXA4?89o%dJS-^xK8YThAL|^`)sgPns${F+c#wXii={CgqfYD
zZ6Nn<>p-mz2O;t$koCnY^!4hVg>_$4be)dhWxW~|hNYQk2mGs;;h>~A$NTlwH!$Jt
z9Fi30+1%LrJq3l5;v8~{w`b+hNvONVVafgGI3arZoQBbWc4QddA#csyd~)NXby5E7
z$Z=!GtN6NV+er|n_q^-4z&fDH^kO6fo}jl*1}h`(i@A9t^`s$d2kZ&3B})c$?a^()
zA2-b>&GNS`b1Inh!o!)=fhthPR&*x2P`XYEsSG#sL=WF}HL|@U8Ov4Ns#87U>Flu;
zb9c}pnT1CRXDB=3CG0m9-)tQ@WI`|q(1d^loq9d&vm;+P!TM9F19meTh}&7@_+$&r
zixS1Q_~J6?y8TtsdSb+xeqf_X3r*ytqT?K3o0f6je%jvI-`L(dM0xNN6vqc#VTIEL
zAeyH^yC<?X+fR|DAf_&`T9S?mAom}bTWl2L+&Teh{c+Gwc!+ZEh=oIxgogjLi>Ot1
zqG+oAzp(zlhAp(MC=}R4Rci_Ce{y)t0Ljt~dspZz-m+R~AOOChQ%az}ptz9Y0ET2q
z$%CPB)&8IGj~ogDP5F+|`&1)Nh9<0@j*u`wdZWeDLjyvv6{KOGmiN~`>};;?uODW$
z!x~ziK8bE6qD)+phRe(0{*W0C!*<q2Dvg$%oV`TTd1O__xg^1Hc6r~T^L$tm|8+VT
z^rGcbso5Hw4v&kl36$!ss2-MNZz;8+2zIGoit!4+Gacgf&6rf&ly8Bto33Hp2rcEI
z!=@?$Pal;&RjaOBJ*wsoODOR@E;YR)S76G-2dYtZ%x0LRbhIZrrWQ68hfQ+w*0|vC
z4S{A~1|+IEyCIN(z23VdGcYx`2Aj`fc}czP2Z7oPPX^~m8s4I{i7cdzZoSBxc@jf8
ztj0|q%SKX`EiA@?bI>(9LhsmCr-iNP1^rITaFTUEYypj)fR{W*I})S`z)`hMF3~UB
zB|nwkd86X#@N!PnucNf<<@mvKHnw1FH#Z?go;=6cVOMjjfBsIQ5BygA^Dp-x|7={R
zl}l|jlIK8Pd{i%XcgCxd3GpQz7K&(5uc4)j_WOw{%ML3Zn7^Dw6TC$>d*V&H%&OHw
zVZQRKxG$nZ2n}^?<XF~nwRYDN@shJ9>>(v9WfZTzI5TbT71s5UDgx`hN3CPwjx;4#
zP8FqtL8~zRjR7#DVLA4SpFQ=~ta>lJsXj}UwShW7Lz%BEDjh$^kLF1~$S?nx23S53
z%evF_E_Y>~<45zPALN&R@b4cgKVm;&(-3!sPw1sG*%hz!qj}N~^2<NtU`x=PBxv6B
zuH;ES$S?ok--ZBXZxPcAwC7y$gZ%Q3!9fO>-t3WN3t&nXWm`OvlbCbrB#oPPwDr9F
zi1LHT5SpzcruyL4O}S*JPO=k%hO4|73(wVaBDuynTo3n&?3P#h(LCvge@ov?Y^fHQ
zrf4fSDlh7K-1ytA`oP2t5pEI*zU~<di+Gs)&N1wW;ZR2lS;knSWzX3Mt_z+P1&|do
zwADp>0OpuogAUZiy-d^bblg%P_CC21{=x#pOcI3TlYWq2{vo41cw)wr($bISNk7Oh
z|JVdZ9IR+%5q+b*S=3lMhNWo76FoQVBCpx(k{QZWohMZq*s<@S@M}05FgS**Pzk2S
z&kBJgbB!lAhdW5{Rsjb0A`YuUr|CJn3ygkI)I;|9-#92K-Yx!OhJ*vNPRla_j+)<+
zjlf`uV)RFG0)*AG=&4aYQVM6|*9{AznWbldKcp?dbf8kzc>eZ>U9v^D9q%eqdo?%D
z5y4dQv&Y}*_=*iV?a#WWfs6X>HoY`~cOp2?IZgmO8<I+uyplw_f4UNtilsuS3BR8~
z>MYI9Ds=jV$6QIx&X!hsD;M~m$9|Wuw?CpLZ&#WvZk3|7!;k634V9vv7QI2I9`5P6
zM<>ab7(=0=cD7EeD6)bdS!OnGm{Ee(pF1Xyo|{jRbiBJeN#k!5f=_Q6t{wg=pV${;
zz`RY`IZbgB(Q0y8lg$)Ng~z&~d^)!QlZdJ{8Ac*&nj*&3w$)`7xE|SMiHV&UB`+Dr
z+Ay<B3ekhb7A3^X01ev*ws9F5D~ou6A6gg@3llA2eSsZVx?=2j#@6VApnu}mDL@!{
zy%!Z3x>BsG!D&eKpa~;;A{5!#L03<Xlw@g#Gj?FfLLBjk;vMS<%48*pO5lFb3EG$F
zG1&U*_sJQa>^Sy@-R(W~tXM8SEow@i*f$Iv)m}^Xprj+1B*rhPau@+1(|rsGy*knw
z33g<7kLq~e()+|`X4olE<}B#8f^Hps25{1-I9L=qS~e7P2w8rk(dMP;E;hTMkY@@=
zeuSFBCPp|Kpj87Yir^{eOGGTR`)#nU2*=sDva|Gjrny@2R4NTRJu+8}LNt%;V9*<?
z6+Knj7)%XYhMqxm=`;p_L-m&5)<La||2Ssc3I{Sx4AQ=eIzAaFcN^h(?AelvkAT4w
za6TUg6uqV!G?wu|kIogaR&E9~9Su>AgA-y$Af2@4Xe)Azd}AEEEL2B1Xqs1aaw4l-
z@j+duS3!!3zxayg(H`=1#$5haNTvV>oNKv)aITSo`DP41B#H!lApHTES@h$y6?M%~
zH_%$z0`7Pq!|O^d<Lk1g%4$iKpQ`e6=Q_5X@G;sGZ0tcE@lMSrOre1+I;LeubHk1w
zeNl@)|BMK9zTjjebU8l5NBZZcoUO_BGCmW=7QkL;_gGQPL<+gx)vY(%A0Rnh6CTfU
z*}QXo^LcXiI)T|yOi)2bh6({YVtPO9v07AO31VL)Xfkw}4u`N6vi}fF2dyi^vK`UN
z^tEGE0zgrROFSi(Hj?Ysk$To8JnT^_+=bSLoqENjtG^A`1o$PkwqIcbwvX&S`cZk+
z#qx9S2z^qzs(#so1+&1uO1M0s(^Qqvz`&|UM+v<WMy7%)(K5Z+t@p73uSY`aNr*)D
z7T~rc8sb|B>yCW}eOBC~KT8OE0>!vOFF>DSp`cq6pwx;wY|aDxd;8e0e<`NJnfH^<
zXF3)gG`pIsg0R`Il7SL)$Nu>j>JU`ODev|AyNxYaY^->9{c8W%RoB4T+19Y}^tGH<
zZD?e%>vOE!{`GM(pslGAG4bp`_2vt=f=D|XGzwZC##rK6S;9DH<suZoGk?SX8SWM5
z{6O33VP4E?SV))GUCe`0)HJlZw>8Mc`O@P@xyKw5sNL$6JiC}cLeABy1*Qxcqm8UU
z8fjdF6i6r?+a$H@sJa?jiyn=`vDpuL=#=YyhIy-tRJ@-a)gH|%PcyG=ABqfkb+f!T
z?yokoDk@EI679KHi+FscQI#Vdoeg`~bZ#|Q`dI3@Dm7wpLqDP(Q_r_t3=a=`?Jlz{
z`Lx9jnE>Xj?nqkuP1`KnI#3UQYjAmFo>VPPe57zU({X}r8$s#rDb8uR0G}_UmIjDE
zDEr{rj#r5eYU!LhAkvlgKDl&I@(AX;dsrzsJ*SBuK7D?4IRB_ra+YBP+72GB!B153
z;x@Wo4!#c*y*SI=Hi4|p6|3LM&t6uqtN9|w#)Lem#VEtqPj0n}M=_5<qQr1^C9XXO
zNnQAa)pwm^u59_nLQ(<|)|C=QfXXssH5sF&iNF!`F=H_~;}|R$10bIxvzlWGVkf)q
zVF{_$77E;@Y8MJ#JKpFF$QbyM>4OI;)5y*+KPJzjcn)#A)VVJK(UiTs+N-r9bXNNW
zNr$i)@yy^Ynqav9&vl?F*fz2WfptnO80^+TyAdIWk6!e1?E6oN3(Eb?MI9T_I_RPb
zl|Z#z1^+e&r*o9?Q~5BjQE8zw&WdWO|I(o0<;j!07?dKW6$byQb*PgPAmN=AduZUD
zXpaV>*xCk)>`}TTO1lW#zBHt~fMD~=b)^hEBr;&tPc#ls)KeY*l3oo?R5lOa6U~0|
zq;;tC$9=@dG}m^pK>=1aH92VQ=;$+g#017hkNwp8Bj_+uWAmO}D#2`t9RO@+fTSBu
zqEt1<N3{YY!Aq2yZXC2|fG$q|rLvfSUy`YuNb24UcG%E(7-wK<<*<fDvyNXsh2H63
zCW(C<dHD}?i>83pA|v)G4l8q~D9X{!5ozvCOcLnoi`*O^j^<H1%zfjRYZ4EC<CotQ
zNbCKU77@8F>}C3jLY-U0OB5ha4+fcoOhb9{eupukXi8z5tWNaBNBubH-}xz`LDLq1
zGIWr2LzF#<2gL{(Y?Q`<5}*o{th>UYQb~@y0nG22fMUCmD4*a&8DnBai#7vz)`Rh>
zctHAQ)Zsj#Ku;C=3#1SUHV{FiugmyD={bI0u9_}fhLk2J>5eo>x-)gc=jC~VxIB;h
z)dlScTpyVS<96`Q5#mcbUq$1C`L8*M%iUK8`QwcdNN$#>wEFKJGL?XsMyk@9wJ}na
zK-R21^^IA8eE&&gSP<DgfRPkN-i~A5_q!2kuj=ttV-%7Y{WxK-6!V573#hjM)A2ZH
zG{~9?fMC-Ljj+yld&R-?xGf8;7BP{LCDeYeAEF0~m{DStaj^N*VynyZoMQOJ$&Rfd
zpzXbdY7()zrFx8|0R`;S*l^3pL^SXtR5hJiYG=~nNqF=-GxM5t$KD^r>~$#?T!gP?
z9Be+CZP&4!`+fLkJx?B(aYoxjQFg|2WI?@=<2S$G=YaSf^zGF{3>zVv>!9KaDR8^>
zB{*+E5AMW~%ee$b*y#iVvcDw1@}j~RZA|k}=#HREP6333Ifq61*D&DV929*s>^Ext
zpkhKzi@V=pI`(wTj9aYZ;{=Nh6byK8^tWH8zmbs6S^CS%0w0-vD&{*+oCY$$CrH(*
z%%mSj-FA|RMNq0b$F&K{u2;=h=jJ|rp35K3=c{?9l4O!n+JUlV5E0z!l3R7&=r>h;
z>Xv%rfY|`7B1>2VaQvQF@u@mV6+MTqq_``VSs(yw`t9B@W*q)oqJSsIp*~scFg-Id
zUjnyd#!X}mp`%*PNC|ByuT&kk)V!UTad(j-DI~nft2dK`glm+8ssozR^fSkk`fAvP
zhdiY{vBql-Q|1n@s=0hgS>i>N<qKP?@cT`WDHO>R<OJStg6N<sQ1Ps*nR}>&Y61}W
zeTlhyAOvMed5S5_UXK<L-ku>ZsHJ?mG{L(zh~bw7{JsR3%>fd#Sc1t;h0*~IG3pp7
zIzzf>LB$vHs`1FHf-37qn$9MmMuwS<DHyYYEevIfvC*K4K3({s?+$^^Vb4r$fJ>;j
zJS^^lV7ns~s5kOJMY?zaWU9Mn)h>whSko+b8}S_IF+fMH%9u_V7sLg=XYRtMi$?^A
zx!r>gvTAe_fZYF}-4*}{pv#zY@G5<GfB*^kyhUGFBl_6*MjUe-(g^BwkyfbWKDXAO
zXr#n=0#wkT1D@PiRut`NX&$;t`cCJUzJsBkFKItP=`o%p7;HuBU$5^ipH14Q6S9x?
zHW(xQWOK55b4Sl0_9H^e3RkJ+w@F72NO_-T3Fx@jVS@=_a0Y%eb(9V%e1N|E>FxW?
zwL>zj>VyprUkzVZOo(&a=hT$PtfO!a=a=X6lz({>L+&rHVZzvxV=T;P#_*JJQj9PU
z3wdclrLbIxljlvclwX!#U@&crQNL@4<8wH~-m=)MT<G3#bm+ah9ePijoj@vCrjy|&
zC#HKtx?z*>io#*Pj@e^`jfE2es*z)oIOED7oiG7RIpjjRwscU6`{JY$OXLF}Ew1sS
zg-)5}kcaxjnr!{}*1(ZdS#crI7WsrSAJ@(Rm^nF&;i!qsc<bnQd7>;q91V{$$zj-W
zpx$in6{5i<5*P%f4}G~c`pis1Fdi*~Bs60=8)7DM;hh=j1x&%{i#Z&AZG1Pw4UYk^
zj9L;v7!Zv6ERik+`9cz|%buoXbGApp0NIZWJ5yUZoMg<`gmGaC_t<>#ByG8Pa)S$X
z(mOg~m1fN)ZLxSF#)|rG9mO{pdXZek40ID6)##i)Qb&e9dz#MMzCClTVo+R=>%|z>
zFw)K)c_6|;*lP#zaU1M+Kw%@6r18cB9Z3QHmF8n<PbEXdC!|WgCYn0Xn2AvnD_&fP
zlsMiIj+@n)^YJ0m)#p#2mw|1+x>|{@mgRXtT{S&t=EzHgjxTz8_u)WMJSh5#m5V~+
zVwE&bCNrR&OMTS)&=e8<4F)&G^0zYTt5@V!ky*7B3<rG-3NKz#u#=czBoQ0O&}?XM
zuvId%=rcb-@;(dSa`}(kv65_|eFanXF_QfG>J|S~=ap8d5=9IeWEmvgW-ozsuPGgL
zLZ26YBL9*r%g@BV<tPJs8l-LbYc<B+zW~y5VVO{01~Qw}yD*uRh}}16KE)Ow9vF*C
zj94Hitou=p$PQ~zH}~cw;~MDn+XpsCmdK23Fq&l|h+D-rFb#0bu>Ri)ZXh8kSQu>e
z-IY`f0UBM}dO2z@d!?G}I0uV)nE|zEc!HPO5Q7u;OffvDt`rlg`u-cG!~P^8lu|p5
z6|Ms*WVJ}4jIXXdzB6W3xy7Q(0s^qBNgI}20<>ITGlJe|g;Kz(xAf^VMNqyf6^mC*
zAkQViAYPRzu)IWFH-E=2;m}H1U$bf{#mmt|KZb0;<Rr3I#4}5OOQ$E>?aayr0rfBE
ze!pQZ+Gv5udb#YR&`9E?FG>;@W_?tFeF2k2k+Gt_Zl@v6l|;RZn%5NHG4qa~B`vE5
zbT-{&D=RdNyGNp5<9%8t5H`*o%?ffLgk=4Kda`F$vXJ86ad=1%=#fR~w+)?nHm25$
zzRbkrrrt@Go!m(!3rTwhS-Fx0Q>cuSE8gPjo~31K34oMlN{Blkmk>TVIZyyodk>o2
zCUCj+Evxm3{M5AjxE6}tul5L!mHTAf#qs4E{=n~tA#A?=1${*rU0$o+ZhZW(zO2t)
z>R&)6(<~?-$~DlAD>zq|f#27m9F~eN7Wot)hFinZ74q=6Q==g0(lueoSm+NG&na1%
zSVe}U{V&wC{f3|LY^>D7m#}W0(Zj^Nw8OgJ4$Lb?cA#fZhoYkxH~O+jwi>XJsJe!=
z5XRr7fOPW~W;~c9?YRsh+$Id7^H=j4Pkhv9;&Y58z6p}F!QB0F)D*gSC$boCH@iAA
zX`x_YtG(iHye#!zke61jr}m0a>HeizM0W!{Hr@L;Cr^)?@`3vr(&<4b>wbTnlPCQl
z9)!m^^Q=G0m^{w$gCqlgocm@WcFjo0+vBEZ$WnYzXh{itZjCoBt0V1htSaiL=+RBY
zWM)}snq-Mjuw8b@*BTWn<j@0KiM2`_a$L_x-*Q8B2V{Se|Lwb%ex1sP9hV1H%j_4O
zgF88m$n-kC<pC_v^xed@#low@`QJ*9j-BZ0x0Iam+m&9fu`qJA0_}BR#O%%Xx5ruA
z@8glILVHu$CDmk?LwU-?&*oFS_3-ETJyDsRC4NspNoPx@nXJhc>bC@>WEMMRq{7jx
zcB;uPTNCG!7yg*bSg4NcnCMIvg{28obz^x;(^uF+$%t2Lr$$X-e$mOeYfUX3$~Bt$
z=s1mbIt^*M*xP<1x7cBPM(veSbO1J(7<tI)9<5kvXD%%!{@L*OXw(8p@5^|{uV)0~
z>>9pi)-dfhV&8?WuN(-h%f~q!SM|t3)pJ<2W%h?-yuMtHGVlPpjg|v^z8($xf#}90
z!>zZWe+y=~jX65#YD!^YvyyTxu0u*>q=kvG;%IaU5HwuE8d{%t)}nXBSqen_IToXC
zv=f`S9+=f!em}zc@=1rJ-bQby50K(fEX|K9v($VkR`Q^)3&k5BS^KsXjyFm!_{7Q5
z9vP3s`zw&NqEc?0wz7=WH7?HfofMMs%)yW*^;3)pJ$6Bi&8!uZmKkMwMoF?gsp6(s
z4Xrve_v^gmUCaL)^WjdTUPxn%_@WD@(G#LxU+&>#{Uu)usoky?HNWF0ubs^$-|3Lc
zag5D>D$rl1s|Dqu_{K<y#$G3z*wO3@SaDt;42k*`yGAd>CY5+ySSk)rF}5BP6FQO=
z(NQiuM};-3srbU>o{nXnsGvw!GC`LOhF$38_T>VeR=?Ta6Ydk5gki%Xs|W@0rUR2N
zL2sZ!fQvqzi5q95FooDT#mYLygE79~mb(lklEDgM3?SqR9f}c7E|HB^RQLN0c1|T$
znViQd$j}=sYZfw^Rs|;~*w{0?$*tZFBeqM8doseh$g}BKTjD{^xqgtxCh*BUIw4X=
z@i|S#0SsLeT@O2S5gW?araP(O=K)!0adFz51Y7?Mx{~jHKyOa_625L&<2g>$8D-I=
z^HMadqlp5Y%=*TQm@$$73C6Qk0vRZRBiAg9DP+gQv(j}~3nV<^t8YhFkT3!%X<-Z~
z79Ff6aQs#S*bV}Ko7h2w!4Vf|**|_vmWzC^1}<Q7Wu;hor({Y@1|6{aDrlh+Uuw%I
zZq)Vh`l97a$F^+rK~Bs*9sNdw{!px4l?gJz=vs8iTw#{5OoiNbWDSgo62$>w-CWS6
zD6SlEqed|yNXCX??uKTR@6PdMg!71am&riq1|IE>u#l^g_`9(MO@Ql#gkz&{g~d$1
zi`D@;P$P;1i`qW%#;><}r$Ik`B#_K=>PM%Ob9@Q<-Jm@=PsbnJ0EN!?E+^-~aUGMR
z5!T0i!H@@IK4roC|4>T<1PTBE00;n?U_wYH>1og02mk<082|tp00{tWX<~D7bZ{*)
zE-)@IFJo_RW@%@2a%C=QZdFtT00H6)u~x-dZBOG!68?;TMPDY;#t0_^J3?qVRtmv@
zmykqpSavT$-p1}E7LMC;+dxM9<FBf_<JgG_bElJTb~LeF?@w1(RrdyQL`Et1nGhsf
zgo4b%h>^E2TM(LO+~@I(WSk@^4|1OoO7KfK&r?Q(pN2`+Ho85}890;HGzy<Znk6Ss
zM`U`^{@VVE4~r~I#4nxB98~7dZJ#eYekgq2(cGO-h@6Qh(=Y<?<vte~*jO_1%w`;{
zfcDXNc;oeYMhLDjAY0!_quIOecW>OrIe5)tgAjt!S8PV}C?l^l${7K9qSy$C#yle;
zVSYFZS<praMZ0KNvysyy)+3D~Vhz6$YsTIa7K`weSv<+YW%!+DA&&)6@;K#DWJR1O
zqG8NJ<#lht{1+h&0#fsoE(PFnuRQOLjdc*??x62n8l{-lkIulIbo>31It+|FuQEn>
z8n6^Od)}pUV-K#J?!b`m-NA6+^tyfTcIZx&tS@C3Tx6b~<Rn`q?1%`Kk$}y@m<d7?
za4|_knz3kQ_*5{`EZ9Q{B_ZMA*(v#(yq}$Vr{9Qa9Dube``Q`Ut={Ot>p5=kh#Vgo
z2f#bMlA00Y=RAypFrG^!C_y%|r2YcQE!Lj5i4%iavkl8l^q-C9+wSkS_s7}kj%G-}
z9NYvFI2gf~fKVaW@;O>Tt_1AKJU=JK!67<Y(TKi|%f9Y$c3g25^yiR-BI0jq5vY%Q
zM0$R3er_;9{e$vqfx<W7f{f)cXnPFffWHZnL^K2a%XS%QF4jOF`m6a{7$5$9xCBq$
zAOeWP{=>d#vv+13;Iev->pePytKp-2v0_46m!cRgvNjrpN0=1u!=*cE0l@^OFM8Pt
zsPprTKEvh~`D_-xpR4T-e`Cf1Kon8<Ye`=i@gqj#pNyT<UN8!YC@X}J+y2(>UfE;M
zom|O8?%mqGJN?mZi7bFE-d>oyq&yCRT1!H##T!j(i69ilSv_ebI(f)zX&{5!Kzu0p
zF;(Zo9uAZT175))Q4`#MVOh&0GzMhTki~(hmsOnY1uR1bmNHNVFEmYP2VZM#zNzGD
zFQC5G5mDy}NMcbf=#xK3w%eM5uV-F%l<QykIX>0z@&SH-KG7eFhtqFf_Ed7jb^c`!
zuVEcUILF->@p%3TS@Ue?6v756DxgMXY3^sxSl}5^gC>wbrlnBPXiEKzrI0kCuQCt*
z8$!iYj}8>ofsM}?qqOc#b}T_MrZim<DB-@W=IxEc*AIgpEQeeQg0OougKeCPh_Qq~
z6jX|6_pbqdy~2gIb%&Yp9EdAexT0M(-ka3-{8tZoJtfy57w|pioBmb!0u4fYa-@xz
zihS?hC>CdM)0$#Pg~P;(-tgt;6IobYD5RhUT3Zu;8t|#~x?yf8#gp-$V0CcUni^li
z*pKpnk$-N|=vU+EXlm$;{(404uXzq1Wf|HDO%^F#*wN*&?LPD;E%<6G3GK?-$wm!x
z%uQ1^*X^+177Xx8u_NgGz~}?^oX_W>&cW{Z#<K_A%f8)`1hhKsy0Ag|BdAql37=&J
zp}=xzNgfF10Q$o;;Bpnqx>qq>hW^F|fnA%i<&!A^n8J+1VpQZw4vgO1EPb;~lZy`Y
z($KPLRmx*{yL`C00T*S<QXR6?27kaY>`(w*70`+w=3ZQ}(>m^b*H2f8?5^9O&RGn5
z(YGiQp}+h9U1iUz@~%-XMFE>To-?&W*H(9-)oMJY<^s}V7vd_<UaVn;vd0btWxG!A
z9+BQ)j7_l)g}ty=ZSTi7Vy`Tvb4G?RW4dmipoxrcqs(yv714fpHB$|)Rpo#qWC+^@
zRx6N*)`zA!Y5>=idZa7S<KhCK>1O^e{0qXA`58}FrWQm99-YbU8UWa*X|WM@fxwfB
zRbs^>N1yw0UMGB3*nw)6!F(^jYZ#<PE$V?N)FjjfXNLx8sSp~lq*%GG^ogOVpNQ3O
zmKgC&Lz=DRWp1fs60s~i=B$;Ojq~!kL!V)Y<y4fcOYoK=e-_bsMU_Tu(>A6-gz*Ov
zGT~DZCs_liR_3ug9<-)DOnK0;u$zIGAZtFEyE?z4qA&*Q8T(Iley>-lk`k5KzmGgS
zmhVm+X8ZJCcb)#j*shq+V31#r;kbFcPIfT-BX(i4ddDYco}Z=v7rS#Ti2r-Ly2cGh
z_5c$9!{Syg5c)s{1<`|w=nXG_gZxw^IIbs9x;p4K6gN1$h^WoUE^%HEWlO)k2WO-r
z&AOms(OJMmt+|lt!L>c@>BX@QKpkL86w|0HD*H<6-PJXr(VVBSpO@vzQZ0nN1yoc~
z)HXac2uO-Bv`DBlLw7hBgoskoF$~=uf*>IbE!{&%iVPtVQj$Xq-Gb5`0)nF7@vXJ~
z^?u*_S&Lc2y?dX%pJzY&%$?!Pxz$sTh39o&l;3B_aBF4jCh;Dyu_^8J=Mbpa9j+W-
zut_mypL}8cuB<5_={liYi~WTQh7!%cW?+)(*M4GGUclx^wC^iAMn=N=_Wr9Y^Zm)<
zMXd($hH)n@ZpCOKc{t}J_Id4Fr!4D(Jk%45+Q4$due`DTi-|fW3EibNgvY%nx;%qr
z-5zhScdw?$KiuGCwsR)7zU87mkp1E&?}KtdJl@{)`}cB_iGpm7RknmCe(Aa~+TT(A
zGT{8`MFk91I<j$JD*Z$*ITQnX{Zcpe5LS`VcVpvE8T`n+!Feln+`)FRbN>nY_I9b-
z{dvXc_}&^x^{ykrh0a0LN|!aWfhYer``rlrVz8|0oq<AREnUs@by!db*BMuc{nS;I
zeTjHc-t5flXJXS<<<SAkU))WJ&gQn}uT81*<!M}SIKbVgS{KK+>0tvMFr|3|xK63_
z!6lONvd3ELqqp;qw~rp{Q^}`!O{h(o{w`#bYpJ<oR<|7F?BMBxu4hRcV)Rif@9jEY
zk9e>AC)5XjEvZ_<qN70aPmiKn`{F`#BOUuK<LPnMt@m$}8t;pvSnJP!yzc+Yoc~>D
ziD3Vx(6%0_ci*OkC8Jqik$)L!KdXzNkp)4N@RQdM4&_dnhW|Pd9H0H!A7BbV>lL?U
ziPKlEczrc9fMVXo)fO365f%lg>3h)|XAk&9eLRkH)mPw)eo64(7e|o)xHtk=N&oY6
z<9}Zqx%;_#x(NNxb<uzO{^y0&Y18b_U_uBak_-aj_<#9oS~%Ds>>U3;msiDlFFd|U
z&<Ddmf1|J{RSNq+b`E2Grz(L>Xb-Q$$j-Cg8gzdmQoBP=CUmhUpQMT3w5#v~Z|A|~
zkDLlmsaN+teak(R_Eje2pNn`1A&aMr(oJ-A2TKpLox{mh394r{q7;|k2v{<-2Qu>p
zva)v>h=wIdSyo3aQxIpsI37|9n(CP$X5*5teO;WNA0k<OKYMuQo)<OajaS+r&+*;i
zS72ZmX3pTjda0m#*|Xt<x0iqBVmddx+!a2h-@7Y*JxV^yL?a?^<BjZ1H=TGRvo=wt
zzXcoi-Ln^B95+dxWHD~rQU~~pGi$?<fn|>KH-6vMw8v8Dk7>P46^ovcG_!5geHOy&
z5X{1D5tfj(B3{jRKO;O;>J=`H=3}~Oztw|OmXlS#Z#4L1zY{UAg1C5Daq4~{5yp?H
zHr@e$IaWoUY~6~~2r|n#e67JA-w|!nN-!=Rh*Jr{(rEcPLgWsOIk)LVx(zrUXL1ZJ
zLSsnMN6K2lNJ6uzl<S^$57cOIhbw4~z7p4oK;M(1INYTyC!2bZ3Xf%89l1b?<e;iI
zPNMPmG;ww-1;LC<GiiiMU+99r@a3cp*q6B@Xar4G_FRu7Qay*vlust*>qMHfO<(SX
zWmQkV$VUdHJTkeQ<Dziv;}W1vvbZGSdrKiOD*S^89ZhOYfec^$t1>Iov%BA<Q<kuT
zY^#Z+V`hD}v7ORO4iD11Yo&2l7Bj&hy04@Wp8n=Fb2RwK(7It|ESzVaTKf9gA0DDU
z$b;k-4?)wXJ7}(ZY!CO@_bpRAn$HuBo!v1a*9Pcko+y6ld~CJfxlgHMQ*+|3sPXA`
zVgo|_llAL7v2mCH#v(Ue6Jygb6gMj#z$4C@oKfAc86VCxPzyyRCnGSE_KmVR&W+RP
z2{%R$lVSOI;n()(2FY2@jheD?vvSJOO<JWfMOw-AMk&7)vzV(S3|BTvC0-z_CTp}R
zOD1dQ^m@0A<YSEDzVJ_fW4KKD@EgnfdfR=@RVMb9PU)<>oR<95?kTope7AncnJQ>t
zr#7Bx(BYlRwaETgT%=r_bfja1;m@W;PXs>KUXl@q$M7XM2+}=ebZwx>k6L}&_bcrB
z2eb1C3;LH&F6XX)l;sN`ESspfrrTe&u%)hRb7&<Oq4Iq){rlVWuQ{EOk|hnHUv~t*
zPD~D_eOLIXbfEkdY+#!pIlV1kcrG||&zS8n9-opE^}$$V?((Xm=)T=j>yfzLoom@I
zr5-DZpBgBx%f_WAXv0S%wTZci9OVrwR0xFYJ}V1^(6-g*iB`a_nO>G#Ow<#cvozb+
zMw#iP4EWuv<SS=q9sKcbxN*n#66UQJ_~_72p3m%uE7S6xu^Zdn>6T}rtVAk5x)yj}
zBPqpQ4k(_XAmv`C+(b8Sym@{7xp2AtDg6Q@oaF07fn}Lm-kU>Kt>-M<9B+-Jzl`3=
zUM-cql-&&$G>_32Abj)uJM)X+m*omK4n);f@w}z~M7?~Kn*~>N;F5iFm;BcCM#ftP
z+%#WuBYmEnpKK9bQ2qBL_P-}UmjBlzW@YD!v~mA`&4bO}i_6^35J-Ih9)$D%X9x=$
z4?(N{nNJs59g^94-SU6sd@hWq-{D?MoH&oMxgb<ip}ocTG$y9*8Y>i+X7AqFPBDxP
zq1_vO`4t;jEBG;r@ZG8Zo?T3j?1{IJNp0<M|G>cIR=mQy;Ad4UXS~h7RsRMZlz$5R
z^UcsV_{RQJ^WaX!_GRUM+qKEoU-9L8v!{QACW9}&Rk)teeO^gE-5ErGI#1q~{Po_s
zGw+8!yV=tI^d#EF`JnS;K4!aPvfAv=776?BAL_y5z0*Q%O-;X#E1I{vuF&OGJL|p2
zc}L&gFBmNboK@ByeASa&kyr?1jr;j0a^+)7Yje|rsgd1u1=`<_xqPr<`|NUUh;3JL
zer?kKMAOUk>!$8sPrvi$UO`rW|6Z=;D6Czay7`&z>wS;0ZzY?IaXtBcyf4Ty8I$Eu
zR`~n-e#PnV+_#qCv)xPWG<`EYuv*fsOmfjkbs%V@Yf;e`S3Z5sr^0Egc<w#b#s1*D
zY}x4I-QvlO>iN^@OI{b2TsN;EpQcFii_SHtQw_FK?f!%M%T^;kzl}eRt%13+TSG~G
z%rWq2?!<C7p<>T6;f3r+KmNR4!D~``tAF}&$xMMtU(m{ZUb|SedQC`j^5j%-!MJ+F
zS$FV+dPkzU@!iAf72B0D=V=$?su5NCg~q6qXIw8w{MU~6CG<|;*qVJ^c=WKXtResS
zcKxU7&PmSCly_yG)^1Gu6cl!-@l)M7p8il&`ui=<r&fi7KSh=+wR($fq|J{q7yQa@
z`JzR=U)L=zG2HO~y+aaTuAcYz_~_t3zQwHn^UGg{Ctu}%uKwYj6#B#Qvc)Xu_l3*f
z!^4jE!B-zIPdD;{-T$tjx0h`5`dkzPejj!S<;wl}y}}iQrP`NI%6e)3viW?Lz5LhT
zlSZloMgM0(e`@>>v%UsjD&_JD`T8DUda3pmlcp|qzia0O9xr3eOr9ObZevE+cT^RE
z4zoz&*RtXjKiBAg_Om^`5UTjP@bc%;`?c?_W^zA&bbMEwx%cv7`N;NICa6zn?d^H_
z*QJ1;KRbH06<W`0F87inKVSXET|L@4?+;UFf9ZeF;j;honC?zkOXH`%&A;;GtJ$tD
zmrC=tWi=gIbgcZW4Og~ro)=f12On((E%BUQt#)+%VpnV%oo5eRXRk{gOL{t{EmW@l
zx%KZ6!By|oUq7>QuY(nK!QUU^_y5N89&=w<o%XkWUHCN_RM8XZB7wWN$F=z5C^_={
zCAv5b?)PK$W;~ms@9)*4t8M+fmw%!e4D*gR|8xO{fBr$|J<kjN(`R(hkN$P@IJftF
z_w<<FPUZsh``1lvHu+I_ilt)P-@}#UuL{A37q;wMy1`c$2gMmhHRr4Q+LaxOf3f8P
z0%sRpiklww@|B8$<zN3^w*CH7AW>64C-0K3J{H2RDERq~%iFU+<7W+*yMNvTiYtEQ
z1qGV@y=+q0Jf~t?Y;<1;__>@Iyn!e5_e$RHgs!6PQA`TzB?Eqt#nlV>pEh0x$zS`e
z6mY#i&+qfG$-6SuGW`BIy@aPAVa;=~vgQ|#xjb$Cy7=<0*Tq_xnf%o$iRf`TyQ%5k
zi0K>WD|M#+jkPqzi|ssxp9K^PgSsxqpRbf`Tiyph`F(3)VN)o*pj>e_U6RtR(RoDe
zzFhVFW9AF9dw+KXHAdw3pWoS?9x-ca!Cc^itIlsqDkL)J^`W$loc)gnGz-1eID=W$
zDt^|ay~<sI(_00G+@;c0D&)zFuJvUIuADS{U*u7}--(IY_WA7hLnrXW`@-fo=3R;W
z!csZgFX6s>Z8WcMC#(8;Gb<dYJ(PA)y|^Wmrd4ohQWYt;KA3gd^m3<k%w79pW2DYN
zZtYm&<=&@DQRCOlxD}VFwP!<qK^~<eZEd)K_ht(w3ZH-LH^QuM@j3e+Ikt}X-#PvH
z*82k7(fnsWy7coCo!_e+ts@FQm-RLhOl~w{;X*?1_dlI&<#^7p&s+R1y!1PD;kkL5
zH*K-o<9w3~{pVys`&V7w$?HEBhCCN!9SYdqI?Z`$)1M~2vjbjpUmL6z;1^WvnMW-5
zN%y)&54sfiHCr6s$u{*EeVv>{8IN7*McHKc*lkpAAsfA!$C@+OC~QfSm&6--Z{KIy
zjj=Fp^xC0%(>y@eQ`6ggX<>HmrEprkmOkI)#OG{wFxZAAKh0cq>uoCWq1^DV?%2OJ
zUqdlCH3ym{@6xU$eBN-d{!3P88`};}Qm=h$Gd_4{H(=vKgM;khQq4f}NN|*oQz^Zb
zi)`yo_Ehj5$$nA;vQ**+Y^7m3ptZ<nuj)q^jM85plNSl|vNAL78WS*4w~BR;ZLrFN
zS{W3__qt6tUzW%=dld5QN%xD7l3z6qjw}>6pH&}Rx;4<A?bKW+IM}`v4qsXB3Y2gc
zI4UX5$}A(RT7r4?24Z*MnxCq-G85N#hY`pKiTYor=kA=os`pf+1b!Sz)tTITy)0yL
zaON!i&17$(Z!$x!YDiSjN)mT?$}#<@zKD6+#%bhPr+-q+rH|FPgwx{}Li5HWUaD@*
zTy+KVV<vly4K;g_UdOjsVW)DIifTsl(ORa%cIgobYjzcB{&tn(slq-U)1#`oU-$PE
zo_v>pIbghl{HJk_LsPTq3#(tOq`a;99`Hu>>GnHSP5VD6bbIvTVe;8jzj~wBycz~I
zBr?EQY<I@-a<gP2Vth()Pt<^{nflWxt7#`Z@~0Aa8u*YaG5bfg#b$(aJ#E|x?m;Ni
zlllf}#i#M|Q5l~~j})h>j9X9jJ#v3Fk*Edd6}Js_b9IV1b~O|qeeRcHw+S?C?FpK1
z%%Ek9`SF0UEG<@=38I??dzL^`FX%muI}Z@D%IzHqGk!5-QbGSMdpw_BUXT5>Vaudy
zGt_mz+9Be3u)n{d=YqF0XZ?yopVSt@0cDkR^pgJ`{ymki{q1PVfFO@#BdeP>qf{sM
zRXTZKg$uMji)<^0nYF<7fj~U+1@l=eMPyK+>HJ-7sTV@djl(+&wzHeoAH^$9kC~>N
z_lW04N!Y458?!Mj982|Vx1dh8bFTAgR?<d2f$x*#w3i|_IP{ZCiMI-ZV66?3qGGXh
z@-WIm?)zj<d$oE@#!L5)w;(tJ?F%x~WZlV0Wvkd;+`w)EvCZd$-e7ErAG6Nx>C!0U
zQxlxT-sU60U5l^DhY@h{79y~#l&FAiZ}VAeTHY-ChbT5W`Ruxt+oBUfn>*e)Q+CVM
zO*x&nU#VC{4e!L=xf9~W9-z}*q8e7$?&=r?Zx(-y@qE{1lm4lU{Nbv8#%=YoxH6Ps
zy>S?lMf2s^Ek4-howr}7pS^c;Tq~7K%zK5E+X*Q#kknD}inL6QOU{!S;j5r`&31A|
zrg13BUUA>GURuXZt}Oi+Gx2!J922`+Ggri7ltHN`DJo(8bHbA7N$1f_QKwzL=Zkl$
zK{JQ6&8p9SJs=C9nQ_kfIZBv#Q2%iIaOSeujDgP7h3RHw>t1o2LbXi~yP9Ot9~rfd
zh8VK<d{4Gg_gtfCyUY)8auu+-nf)!39sbra&zRPVw2POUfx}rUVDquDh%8bRMZ>fA
zdbiDG9Q9H~qz_JZlXEp9bJDqEpV(bbT)xeGES|ycup42jW;NqGjT@-w{3i1`b@uUg
z-bBG>yH5Dh>XXVw3uB*~ByUl1C5eKDVSJ6xgfdv+BGFhZ`K=bqH-|s(x83yr)Pf^(
zb>5yh4r4UfK{`o|BpdTu1=HUjzb;=WS1+m?!D-0s^mTV=Nv9L;c`o&HLCoojhbz3q
zt_b>Fw7B_`aHOB)Z2FmMu%40C?3d&1FzvS}BW4rm+epS2R}K08J~Rzho)~NTl|}nc
z#`NzuyDq)xAl!F__B+*>_ggjOyH<JLl14IWmYGHlhn`saG~Ib@C0Pn>O@4`7>nM2W
z6TLMVJLEhj8^yL?)Rq3(W`b(`jbq<C!y@QxtbGx_mDP8L^kV5OBFa%M(OEXu_!))_
zF_o;jnk-ei%&sDRtQ>9~PdcUF&2)XL*L}KAJF7^4-N^4Gv|leK^`;+smSHRL$++Ln
zZIv0Hhx2`!PgkcX3LD-|N5n}O8@){-UgJY?-e1sdy}bX-ExpRL)PN=oTS1zbxp@-e
zt69O=aBIP?C|gwT47w;AQ#C<h+G#YvH$b`dwsTrNxo7&r0Kb5{ONl0z-h}T*mbgNR
zxeUA-JJms9jmsLk`_tGdsAX%v_Tcx@hwHgk`5!gWq@%Z`7bJ21r`BWlB*L(}pvxoD
ze#iD%G```B`qcDuSxE6$MbuPF91=1oBP>ck+Oi4BBqt7$;58vHm}IOZMpplY!1To-
za|u7#LnMT$=3{rS5h;0eKt^k6$nwR>i4*WM=Pw{eQJ7Htxg=CDLEX|eQNDn43S<7M
zAUQG8BgqW{Hj9G5(%c|UX4#OG(PMs+g4e7bPsoP$;G}!2U#N{FzH-*>SxY=okzGs`
zQF#GxEJzux<-A@X@{O~uM?HcjGv1ffN#o$vDDn6xwUPGCP-MNwI~t=r7*n`}K`Tey
zyJ^&@j5?8Ooy^Em1ad}{BlDgO^^h{X+D>h~O={u2N2+z9DxpX;vrYt370Se6<bc78
zTK8v_JyUB@suMu@{=mdLsMa~ha+y*)6$~oZ3HEbFP0cw%3Q=<SYV$dc6u4AN32GIG
zB(K|1>%<IE3{|wMb&gc8keiCsLnh!$O0rr?b-VW<IIVk}QR{!msfT!lsGYPA@NuJp
z97Z=UOlXES?okVjyyKX&<04XH#yzb6I~oyzbjod|#JP@zAor#4aNd!gs&%nS98d}I
zsCDf1Le`l1i8n~5$4Yfw`}nx)J^_q{7ui&Wr-tvD3sH3uoJP%;;Z;%V%aB6x{t{xG
zw<AmymPe^nhr}`$3Or<gg>1HiP*;@+y+Nq>E7vu-dS)QMZ;GnzEPgSMS|^1RzTR~a
zQImCg_6o_{x=S#^IYjL=EHgmuB=72Zr?83pdSR0n1$wf~RCo?=jtRZz8~{aYDg-d2
zQDxx@TpY|jNYuP2vEBZ&P+U)JZx6C{i%+$#XO;o(@$(g~Hj5Zej$rLV-uq4tpJ$bf
z#eK3iYe$C7-V~neHxZuO-RHHcQ$W!(I@Qy5B0DH8tzeB==5^e%<gqv<H^w0o3gOIO
zz2<dyWRqfXaL*Kx%wONkVdtqG$l04DXp7HXNawfh$YE|_qcj0MtGfPm8%BXqNCXn4
zD;_IRoQRM1l4vupv+z8*&s3$IscD+_j6RBZ&aX=<nz0b&c{7S3iSZROj7%tMy^^qy
z$cKTku&OMCV{RbDGOFRS$Tn(SO9`;yY@}K@Tmq!TM6Ko#L#sBQgbYD0i$tX+Jg3=n
zmF=Y#xXlHQ`YY+v?EMI}j9upukD5Y+imJVEdh!an?@EkQsr9pADQRL+36tl9`Isvq
zxim=&Y|a_Or;PA8>&8pjxa#Dg1CNlZV-D0%1qafhCNdQd%h#iGo;Sn24R}?N`@`X*
zh`brp==!t(#1n}Apw=P0VVs<LF0+m^oS3y)AO;{2e+yG`cxnYfRy-$H^2n19@xFW@
zrZkuj$rqrE6C{H9Y~UjWG)eQF9xCG@ulEuoQO#GBqk(G>rNJ7a{FOAq(S-}*{0n>H
zkOrPvqEQK5afs1lI(#HKJETs6AOX)PeoR>D<TV>)Xb}aOdnO}BIBMX6HyX%FrsP3|
zJ~B+cMw-Wp6#p)E-q3E_{Odhxq}G;1VZN$)S?qkh(^l7*fLd;FN$-&29N%}HP4*C*
z_P$-LV8?}^?o3ljSFUS~Ecc6rg)hTZUWBdgSwA#4M<B#|=C6)fml*rU<=NZ_BHt<L
z{4MJRj^*VHT}t1nbswhO96aFa@tp+RNRdQtkPgpxU5l#=BV8SFCs*1&)Ru?>40A7}
z#CN^?hTM+s`Gd6VhuiI9SjI!Frt%?nBlys9sHAyi7XJ@p?u7;<SJTwE3nSl3E;sM0
z!k8=lH`JEgidxP=*CE8Vav;Q()r2rtn(3A8tQ}#l7oSlV27F@6mwVr8@{nH^*MTX+
z8>Jt)e*TC#_ks^^B=a`2K{O2FyY9~-=MePa%OQVrR|lpCPxA=d#K1gt%IllD!n(Gr
zm$YK|{nM92Y_F^@LsALR2>#B!2-|9&4l!Q7L&ry_qH-RLgd>Q9TV0r`Qr0d^i9vv_
zoP&f9<ls{hyp>{PA(0@r>Y+rtm>HFroX2NrUxu_M%8`bNh-JfO2=a|>TP;y;J?S-H
z3EmwNIp%aN%8>;`pv?_Rxxshf#C2eylgyOcWCiHcB0F?6#)EyqESiKx*k-+tgy!0K
zK;?GyA(}^(KB~iqj!}Th)SRK^Sseo4=-d}-yMIJ5A_@(&4I;@0l!GTZ%}bOcwHc7y
z6*c^kz)xpj;_1LRhBqT+fx-Qa;+5HNU&Q5JoFu(knH~L?;Jw$!p*I05j$q<Bj9nu?
z#4Z{y8>T@t4|lOEcoDYq*MXx`6q~R2&%1ytiTXgeD=7L&6SJJ`9YJ63A|0~a4-HPf
z3^xth#U!7!V^}Qkaw*je7;^>M=pB65yUBCc?y$?v<02z$E41SyY=>2r4ZU|mY`M<r
zRx;k3y|QhSA<osDwHK9RW(5UAND5Jm1d893ldUD_KCE;CgoybFh1kZN*RITFqiDM@
z!GyqUfq*dA$r%dGz47=(gsqekD1fV^T!rK(JULm>e#YDnfq1zWGPiu!V+bN_y&7UE
zM}&7;EPQ2r*F~t84NV8}Mh<OW*~VoqX9&rM+FE7ZX!yodBI3Kg!m^yv+Yn-_D}kaM
zA^m|jvM>uoHx+6-+YHGaV!R$<OLBlea;plOTeW4f%tRxyoFOLY%aHRf!giLOBKJcf
zQ1Q}Kgzf&UxLgG}AZlI@l+W?azb3eMwrsd!3X^lFaikd0%k!rgks~IQn-}}Uoco#y
zn8x5(B5ZMQ?R=-Kd#hIrKjZz=&ofBwg%OXh#AjzbDNu<fU0S&l4uL~Qtg}=XW(jY|
z(Xg9ZPPVLQ#V`j-AjixMqG5C30G7}zTc-MUu};x;v2(XjTefI|T!DWn2lF2C6L$m6
z#Q@Fu;^m?$Ll|?L2I=HH;z&kneQ4xfNc<C=8;z)3)}p4lFGFqo;Gv_s9WXkfm2=<%
zNvuJ54k^@$eb<A14;|z1h${rqHXwg1JVLpXdX__MG>aVbKkQr_*X3ej(jsj4RwP_T
zpVv_UK+F{t5w>itkX$EHPTvyKMHjrfeJ>?~5xAM+ZERu*Ww`Xy{6yhiLeU6Y2-J5y
zgg93^Kh!p0<%YG>ObJz1EbC~y7zymKQXpG5TzZb0h18>{fU1)v=o$}J<aFy{I=X)Z
zJe=RLh?{WW#)`D=+{WUTCTZ6<YagYfvux|XNUv*g599W?qdbc4^18**`)~}4XqK?L
z#Z6U!2L(FnjR(xm-O@ahqSPBm%W3M3O>aE6xE2TAVUZorZ!DTP;%_XA4dnu(IJ{R<
zy`Iw=+32@5oWr<Ce788c&O?3zs4p?d_&Rbq13XQ|qr8Vp!zadPEgN`{&-GH8)DzpM
zosYKr9Id2odozak#P0X)Q4wY`hBYN=e|%OZ73R>mYHnav!VwyW2q(d3%}~<9XALq1
zR+@SOp>aHsB%yI}WP~zfe)6GlOz+4%>yGN_HaB%yLgTKB63XzXD}(V*k3lpaO+uNc
z3t>vVv0j8Sq9U}LecuT}<6xTV`BwhZ5AwegVPc46=5Ctd!Tv94%Mtu1(^xz(S%EU(
z{U@M*6|n*Jg1`>{o$&xqMFHIZs+AYc>tVjtCkO6PoRJmh=ush(C+`ZxEL)@5gQ5Xs
z$xKquRT_YCt2$LlT{u*!H^y>#QZR*KBfb0Z_Arj#TQ!@@$%JlW6Z70DH1463C!vfH
z9xos!g*P-#L6defeKto)-61wqNuABbb3Kqa$3`J+cv<WatG`l!;koo8_0-5=A@%G=
z-WtW>UMs0L%943%;7`(QM!6~Hb8#<_c^28};j<>sr32<dYXK?gE@Yl+`EY#JaTD>C
zK)v_>occ*Ui<D)-p~G!5&+aE2qlrFFfbxiLX~a&XlzQ^dXeo7TAFg2>CEqueWI4@l
zX`^~?APfr5;Y574Zt0T57McxY(Ifx@mjc2l1oCMni}Gmcqx4u|5Oa$&75K(7ZUO}8
z{OLtDSJE`iMilY~kX@o#lm`rljPkIS*#r{peesP&w-rcEQ`M<kdMqMTN}cTk?MC`y
z48!_^E#_}5TdO%z>TjB<H`15H={ArjJ6hRXuSI1%04XXoI%?VISwDFYKls*gV(R;7
z4-M4|!18{1w8v`oTPgLr9<6LE`>qTrb-FHq$iIneIPsAdNS_w8faPntjlP-mXb-g{
z0=KxbG<A?gA@m!Iont49NhIz1&rH0KYl~zaMIn?Haj+GwbSwYon(185_+mC!TX5T9
z+hs#y*dYZ_2+My;>3{de|5apjYAIZA2}e>bd5JCJev*Lzc*LD7c3rQ9dy5=-I$8Ei
z?peh3JprLK#i-ZQi3SQ;F21RxbBO{!?(h-Of(~11XyAG{ah^1InlZX8MoOvRp%ONd
zJqoFdMM9ua#QD;Nc*uWmxEi_Uk|oayC{OQxpDW#WX1VMsh5BXwp8u|q>PBsRa2%3m
z=X3hxHD)Vv?a;i~i+SC{#A?Arpfj&4&f4@v^QJO8kwfof5Z(}MKfp-wz-J`__B{qq
z?sdU=YHDc9<x)Zu!!PT@A>w1b4-Ot2S({T{4(TdAWwQ;Fr_n#`NgWP?KOo+J`7xmI
z#|}BNNLhYX`D@X(=Q;mGu&39j_|CvZ1Etmc4rNAUm_Mc5HA%<uySgdAWc6`pPS>sM
z;tj!T$~22*l}6A)>g_J>iPjemPs2^F813Yh>Gfp4)DT?6?5w)&bP6|1u|_`g>&F|I
z=VL&qrW<g5Q!EWRc3YhPSjguw_$jh1UB#d2&hoE?fg01Cfu2uv1bm-z?vux?uGW|M
z(<;np6t3b~#NyBGI><}fdiK|4<(oj8!(x+ya~F7|sq84sT4-=mo!`a}J%`67ihSxt
z_ud%LCh@?XK1<JDPqwr&rZBqCA6e;8>U}+n>n-x8pXr;3lmZD~^KO|54@p+PgSULS
zQ$DTH)YsUhC7nfyqT9}H#xzaQ<M~@g?EUI@Mi(z$+8K_kINsAO5AezwjeDGTdg*r7
zI}m<1**bx&gEz#(v01?x&-lv(+X>H`FZ@JiCzUpJUi+*GUnNeA#{I^ryGKntHjik%
z%cdfxC^i`PPIb&NOvb8Ig-PL0PV7%a-#d+GsClUiWb$=>pl={oXg;%CC!(y6b(g~S
zj#@z|EtOAojqj(i-5ejJ<On@i-W#8ZxM~s*vlxyspnpNZOdarP2TiW&*yFmX5*Rqm
zxgd)c|8i?_{iEaDP}oclo1J%5Q`^Yw%r>u1)UN^l#tGZ6Jp$Jr)2%O+wy?yGMK4TI
ze`Hh;oo^ay+81?^RB$-8uqW9noA90YyXM2<+wsMm&7Q=<VqDzQ4S&B|YOgl0Sg}ay
z^qO$A=PsMRKTMRXd&YR{gaa+2&LV++Rwfa!MXxC?;B3HBXsZ%+mc;R`P$6`NLUeF<
zz4FN?haIbPYQw~*COu|o>9%V&Yw|ZcqjDlY5v|ON6KlVDZX9Dn-FUaZrFKm?Uvqu(
zixuOvRo?oL6^W!sS|g74zB21pD3%n%$B{^fd1KQ#D(cr#8P!XxA3AK6qMUkeFJLSC
zMqXT*VT0r9+oG)Jyp&9~mt|w_>v(hMeDML|JbhP`5FM|C`0gqd8n-wbuFyNU`!u6k
zde=l#{;_)V^U=pI_>;d|-Lt&Knz1b&?X~n?tl`H3>r>Wqc5(bnw<;^SqLnZ1LyyUh
z8%NXCa&ltVC7ewbBfZ&z6yw^fL#9%`3!TGDP~KhC3*B-r&^xtxX>D#UMzUuXTQSAm
zeu_SwkgR$-9n-}!?)4#0Dd8x*yBM{ly<2+Tn>W4lcW>b@?ndNq*68J~x0QcLb!%Rg
zkhAGwoH?8uj!bwRKsK-A`E&K-=d<}HHfc*!)1t?egj55tzCR3As|^QTTg;)>39<Hu
z)>cO3_hUcuT`%CZo#V`wp*Ja18}>x;eg9)jMe=L0BuK~PL8~59%NV0ziplt!cQ$BU
z#~m-*mxbxU>S6(bnDoRP#t#&`4@-utITr3?XK?7Pk+zJ;FY-Pp$aiSqsR4iZbNc6|
zajZQx6dhL>3ps5c*h5L@fE}m-#f)KH&~+Z_P*OV2h8Q@L_E&G7H~xl2<3EMp+}CS-
z7*t)VfeP9PzsK(i=T&a~u~XBV!))nOXL7wd$xh$1Nd5jB;X08z{K+THdoQs&DPbp<
z&mEioSbuq-#<|<(!9`I&6RS|#xFId5sY{s3R``I|0rh7_jWR%Ldvq|R*+1}vvmp=W
zoP-*6>ca6eKAD#r{Jq6Zf8pq}!7CCD6)89=d|?o|Y+ALl8D1wx{WRYsmNj0}N%iZ*
zn(6EMM8qO?7fOFkBA$^R?ciunrS7Emkk#q~+db%IIzy`L{iAA>EHUAn8uZ)Ku3Ojg
z$!9%pV1iG@tDI-jK7fA~u8^vX=B_GDn2c*nZ$8<*(k-E4Hp_{nEbwX+Sk-}YKN!zm
ztka&|qt_F0;A#1U|EFU4^N9bIuXpdtSuP_sNYTdHzB^Xh&|#}6hNva2Pqx!=pND0*
z&Gbv^AWv@j67gr<dxy0b%ju1#ne93?E~y0y!xToEi<M%{PvUF5M1wA%tAcM@&x<39
zmzY2BBs<1h@*XfZtCjdOH&4k6SmF*Wb1$0bEan_P&o?g5G6#%?i2eT1p5a1^5AH9Z
zp)d8Kw%FViKFaO7uG7<=@!p;(OJKH5T!Pv0Tj<d6$Cnzjjz`qjtuQRIlvz2BqQVj}
z<j5XG+X7ye%~v7Eh;d4ZlT&F`F%Rza%qJ4$(lR5<m58vk4;eyL?TCGkh@sjY5{a%L
z;;bfMN$%ELQ)~F);mi!S(GZ%|6h<X+Vgji#%tO&yi80Wbi}~1fAll-{vRM6AI%i^i
zEoLf@_;jo=BK!DHB<7D9n5@Liaz!Pwk~66#n0MYKO+c|Li#-UbhZbUACrGm{;-qKz
ze_5GhLO1QK#C!z05c~0=L+%ucj_{dJ1%`*uNoE|Q3Tg%r(!6A@dRBal*^@aV5d(<a
zZylqRGiCP3o=g$sdLT*W#W4FQe}J2^*e?4hR$Kt--DCdfK1Mv66WLP>L9Tyig?VU`
zB2yP%<<Gi*3^T*hHD)S_^%9TrzdsB`Aa9RiH=JkqpB5AtE(t+0bGljXWO%i$b@w@X
z6%h;_I}&9&?H<A;JS+)^7LxFWYKIAjW^j<q`=3J!GDb@C4IAW?F?;Q$RY-|mO6NC-
z>Pcmc<6p*%FJA8480uD!2t)w(brQoc{SYEqaTMz%f@C;9V9vBTBOcNUjE_J#<6a>&
zV`rYh2H6-!9X;vbIIM?v2tsQ&-|!3_iun1+T#Q6{6f5u&K(tgAle5e>jKvp*dHkY-
z4Kg2@i}k9jV$!#}MzK{Kqm>Uok^LfXCCY3Xxel8ztg1jZls;sJ5m?4z{qusA#e7IZ
z5w>S<88a;&g(2J?=M-c#Unya3Im8z*5wjxKHwiLPZmc>uewQ+WA-SF<aNBEP7|i1)
zDRPP-m-Ient9_>cxqcmQ6dOtg8!TZ$_K4ym*PQ|RQe{k;Ye9nfOpitKGi1+|#3b32
zF|mgEOgmBe8O^TB80${HOdBh9*u3V(tN(z!j}a3c{6pFoE1#K=k@Y+wLl*2|U+?<#
zPR47t$n?UDt~=K2rWAervNt%z%v{7oJ=9)d1O2E)Wn(^4af>bF0tXKcjQGBXp6H+m
zc>>e0Qy<pEJHe15RakUT=W%{UuO(wf4$ig=xgMctovJ^~DaI0%VCeaoIdf9PCn?Er
zSeGCp(FI@hgvFT{5$SRgj*Y8?#A0XGi8K5@Qdm!M$JZnnez5E6tF)4l5Is4Sn5Lk)
zdW&`MrnH6!5?ZfYDCK7a1aM$l&gn(DO6WyT9+325_2ntB$Cs4m42Msd(=T$}+p%fs
zco>#VNXBF=9RY?D?szx-qAjq!GU~dxFqa|3eEr1{o*2~^2-bZ{usxPq>3ePeIT9bi
zRz#XUL{^N4X`gZ?z<jitZs+eVHX*`T?v#bjnit}w`w26cuQ#<pFxjJI!sHe2v&qsa
z-Lz9)8LD;>AUtUK+GAl)LNeZaf}w&5(<v`Zh!J#d>~I9zbKpC1&wOfwG+?dvj`O&_
z@QHO~NQO%&AvV<!k1_p&!nO2^Kk^{)AUrY6H>U!~vz~pi_Sk0{AsM!o5UkwNb>Trf
zCWx2>jsVd{Pn3Q^OKq)}R)E|diM$t!?Rf`#i!DiaecYJKqXWSnD&iyd>j|+7(`4y3
zRCmlHq6iQQ*&G-tcS>w+Dg<kgijQ6JCB~+v&pqnk7rKNX+TM1wV}H>IpK#!}JN9Ly
zQ(%R6AQ%Z}q36OLCnUmyJY?n)^X(99AU^~l5;52AIB*m}jA*sBeEJ{fW8Bz?5wn#9
z*wNsS3<slj>?EOi>T_CiiA2}&c7CFUd+AkfS%ZZRwsz|hf?S5Tjn_G|Tr&>-Mhp&T
zM|FSPH6Mu&%@8u{uxa~2oK`h!Xl)FCMDx+{92MMSll(X>)bRQV1nc@6pz0JCWJceG
z2@g6yZwFuJZpZ51jUCh?dDzY$se_N;)p<5x^MXQHSU6_ZjRNcLtk_P`OK;AAdCHjH
zL`NY!SPeLxkO;{jIl)7)-6ct1n=lPw+6hg_5M!~{>!q)_hVZMW6t=P?#0EBq3dYbW
znCoeEUPF`~2t5%d7a@GoffWdDuO#i36yDKPBtTRr;fdujLNE#Yudw;#eU))p2lUwN
z%vwtcVJ<=<;gbsr;TWU2cK(B0Nx_poP+nykVGjxttb1jNTZWJX1mWBPexE}Se&v#a
zF*@Ig5uBgi(PIPa>4XQ%yz#_pb0CPSUltTtf0u^@7?wox^c4pZ?1IDf^!tAsLk(#}
zk?Z;kB8BGbIzu5Dyq)-1_wbwMJ(hQ^*9Qwj3>O+L%~R9NQG*MGB-r7PBWfL3)lfXl
z9o|x5VXn)Y!Y4$Kc5Ke?5W~15V(fL|)X>@80%l@FTN<12U?@C<DVP-KQ3p@#{5=FQ
zn?{gcziK5S>><V|?6CvX$Ycc(YZ(lgWe~&TOaFq60s_#cNVg!yM>uEVAw-Pk+xfGE
zLk#01m)fyGWFZ;JU_Ll;Rz{>F5@u<VIqznC`ON@F%u<A74|S9g`&41rg*1YUx4~T8
zm>!JLoeU?Dx1~vj3;9mgsXly4h)Q8qL|ZFF^yIl&AOHIss)!if)TG%}PBl0JZOb4c
zI{(x`36ZR6oRA@;ql9Q%#miWG5Zvcjml}zc>n0bSM=NUd^A~Mh7v=J#6g{CZ%Fl2q
zjlh<)xI0@ne7KtJ!-hTPz;N&P>x<r#@M6lKp`gsza~muwBlc-y&S3S+N_b_69dH1|
zzDvm1zz@f|Z@cyFntM(3VR2NVF<b4FL+)){qZE0!kPPS+ilGJlYne8Gxsk+iA&5AI
z{EVzUI3k0ZLoBtO6Z6s4*_t887mn}~VHOReRuU_v>BIJuhz_O@Wz?tJ!x8%d;n;-_
z#2HTa`HPa6`tvw2ch;yfOTRF&iSD?6ljjm!7)r=!4&fB@8B{^Mu9)bHEz(QKuyqc_
z$|<v2PuYsQSi|2?^<mNL9Afbg#XvP36PPZZp#~-5h4HYKa4!N(b_!HD3(u7R!w9!9
zm*`%5PK2?z)Pn_BePuHD_J^BxLhUx+*1)&xXs6QazQPUATdB!4a3ee3%EX8zQU{Gs
z#XOaXUzj_giIW*M@FF{oO0bbmC$wsaxD&dSn^*(4SEQawC*-4^B9)<=dQbok+iiu_
z^iV9+e-WQUf;ZYl;UpF)*e|$&l|5x4)TEbYYO^b@2Hx{a$-wHag|-3O4%`+A{^%q1
zR9_5%1*+edh13B?b3o?cnH63G&qUm+6!GA&Kw(S6#YJB+bV7sNxhqA=qQMY!N1-+F
zMnMol+^7>Oc7tvz%1haRi<Ozw!BZFH@a%nN4cy@Z;Ax}-MxTKZCMKi?p1hP=15fc%
zH$XF+hKnN(Or6|NJj@XYHoNPYdv0hv3)JifB?B%7D9Bqv2Ss5$$}hwng75_|@wRp|
zSjtDE{2Nn5LwzzZ+DYG)WI_v+r>XXTfoZMau1rL5l^=C(XoGOC5jv<8G@!7VVyKX7
z3$QmRXMtLeXC!kdn!Vl$^;=Rlu&Skl0!BYm3>i<Jsfj;T8FlO{_vWm`l~e$JFC925
z6HRkLDNf7D9J*C7@8Ac8(KT@EV9rXBhtE_E(2MnSQ=7>w7N|4M8%~_%G~BbaQ=9x?
z+=+39sr2=-uo}3Y3x9cHVJN~u?jjWM0xN|2ebX@DQnlu)6wxvQR=iX(_Ny@w2sa^r
zZ3C_^i=+<N(T4_H7zqm$>6b?aXzi77ah|Z@(b%FY@VaaXuJ33@EAP19H`t}ETA-bJ
z@El+X`o>!+!lXcFf#TWawLno^DH)(g<^aLupiH`-WGzt6^wd)ixFtKGx(<%v;zq3!
zKrCGVV_pcE1NMy80_CazjBe3PMNyoGi-R>>;o{#UffCCJJE4om0PhQ~aB=)`AOx0Z
zd+_gTjH5vaB3wHZp=*rgs>C^o0mf-m4Y)|P4AAoe;o@U{0v4z;Q;?Bf=j$3c)SS2S
zsIxcuwKyV!w-UD`4zg+0>x9z0PyQ#CoEmuG3!qw2M{w+pGpJ}13M8j%CvJgy#tm%U
zUUWi}iKWOK>Jn>#TAQ^%3;c71-L>t64uyd7sQH6uWvf8zrUCB+s&Pv<fD|Rl1gaBh
zy#b&jaoVZAH$)bwiNR6q%{XPuE)Bs@6cPSVkMARD3zVECfGB&L)S)|3%Ychg81VWM
zP*BqU8D#roMa$s({Q{_Qv?rkSoWcTCd6#-BN=p)UvaCJI-<+d_S-K>Ld4TQG7$g}0
zeTWUvcT#&~4y)A>fZ{JeK|V~Gl;JA0lYL5rLzeubAkEwaps7hv^4CVB4r(o+isQ`y
zJtZv<pydQ`#`b|`D*ZNygzTA9GvG3F1dXJu|If_36Y3NQ(i@u*vp_9O0yCI5XsJan
z+Nr4Yyl`>%X${a5D?mJNT{$ah+|q&MnL!ICE3g0tn`4LMrr0D-4*i$;51tVWlTPPG
z+k0XhK&zyJ-q)b5r<p=#I&u7$V-l#r@+{RUtZ}<kv3zQNK5Zn7?XTX&k&8cKu9*$h
z5T7Y#eM;&(#Pp5$5oxAaH*bf>L^kLBr7K;Jhy))q4zmY>`;!#lgwJ0g)H+4K$XE0l
z1(TdZlrxP_vJVwF!9^IM;}JohA;&Ys^or^^@#yWo4U`9RnA(T#wTVXr*iS*DTqS9@
z&qZr7;p6QXZNbK$*7W@Z9!poQ_QTZ2`z}?l($)E|scBx(d!P)46XX^y;T{n+QXjlB
z#cqG9)ds1F&VfL;557Ce3Xo+%BegstKAvcqPHN3=R7tD8S)>VDrwCnAK})L!hI>V>
zQ@C}#|0-_#V7OUvKT|B+tLF}KI3eBV<!Cl%8=JTf7^&jQZ7Q2{b&(wk2G?P*w7RZx
z*%pe#Wpie9sWC@6MUXW*17xg1mdCKdkna*ALrh6NG}zQn?NvBs5M0)vWTqNb(K=Wl
zt$K{_qVF)AFolT#ko65Kxb+_BY=Iaq`V<W|GXz-yAcSdGk9&mgGpw8aaDwHpzrZV9
z=2t#Q_sBy=+%`&^!D2F-Q~Dryd~OB#Q~J7Q{j%Tr>xgp+o{DY%A*QFh&1~Yfq<9~C
ztEE*J80W#EZ#?Jb(yFzIcfJV@<jUU|e+N$J@S*KeEVfq;KY4u~j8&)u(4)4$1JH4%
zg@@KDvaQjE<0C=C%|e@_56?xOG7K@%p6okhouECkKwbUL0|uEy{indXg>ND9TXS09
zU+gu4x~@6}iROmKA9-K_vC+;c4?QBf<%g?)2eWyaDX7yOuM7ZT<9OB{3~2e!Kj~!O
zB~>guA=IRG$W8nHO8}bjOX<)08?g$Y;Cf&;Iocb`p|gc1YrXnXS)kUdN?-i|0SQ5)
zf$Sm&ZIa0&KLE?CEx!cka>dm^K>nLy3S2T}5@2k3TZam1Rac$sAe|#AF?L@OAVt_n
zzk}8gQ?0*o1E{{POF5{%M)Oxt_T31!$;QU-KQe$gX}`|{qi+e5jX?AK#sLzXzW>st
z9p7iq6f24=efqCDTyP+x2hCrx-cp&8J%HD58MZk9ZGrX+KxKz+mEAD4*=&X_7|6L>
z0z|k)saYzmIzuS=uSuLzJ*Klcon7A)d-Sm+NV*PXiV?~Ny#NFWIe7!p+-B0qYLfMB
zc9z^DD%(``JtBTWJ85CIeKeAffQYaqLGS-XSNs74RFYW-1bf3`Je$+6H>oB)C1F{k
zEGpB3&AAQa5Z~<ra(F7W#yiBMGIizjFD#olItR5ryr2rmGd7J}qu`v=j)+Bio86)Q
zWnw*cVhwA}L8Zbb#y}ay_5-?vVV8y;5wW-c&_$whLZ$1VvALQ7ujVSJPp-v%99jZ7
zbrLiHl#>Kk07NeXE8rs9)};aDSGuT33}Vk+`GE}Emj3<mE!L|NoQd3(1PsUdIRTf_
zMKf=3;@;g>Ez|pRS5~0!iWbd${)2YVirrVCZ@Mi6T-`wZ89QtN`h}f)e^Xt0g0$*$
zP<qyspeI)s6&;3{M0+bafxVye3@C0K%O+xosdM{K*lsvMY`=R9WZ)`Tbngb!8}V!4
z1Tk^J&5P)Z9boiLX`Tq^CYe$Iy-vY-(58`j%XuFmgOC;P^m?~WkzpnY0kat>&CSIL
z(81??`+$LdyYn<7j|i4r@oo*nmzPD-s&bokvwO%omKWpyF=@qD0FRAOEVt#|kCHvK
zuJnHASr2s$ecf^Q!Tey>_OIj{_vr3WSQe~@i^lwm96a;vZEw(f&}>I7zY2ZVcz-<y
z-%wgpTe^DwHt@%a1|aTIt{Kd2*51xk0;0c=;UsHcaMF^1eQq8dP+#ei7o=Rf`(1|m
z099^y0iaSB3oQgw5W`2{)-6>AVi$S7^}h%nN7SQn#}O}v%DungEAk96jeQXd2Qp*h
za!?->N`5r+uMyXbG?{4W4yY>JJ%79)mW2xZBILIvCFFg@b8?ySYG<{#akO!JkL5Gh
z$)BwGF=CFPl*d#>I=_e>pr4W?r25~0t2VJH8BM@AxxFV0N<}}Q;o@Jq<DeuNw6fc`
z93Snz6QQ@URHxK?6U{2#Edq>2%Ts1_rvDBCBjuZPvi6>cN4rQGU6BvyDwUhSh>(NF
zdxEhkWd>(SZDrZJ7s&k{UER{#68Fh7=U8SN>N2qNPC3oSRGl(E#*fv@LTb%x;`MpT
zv<^YmKua9-7vqV{_BAhH<feNEc#fp`v5JS^UiX>+-xZ(!K!gkIl(neyoW71On6!YA
zTw_G>5aMcC2?{gLc9dZDW1&d76>#9bXlY#>^mgW$jJ=%lqn&phgf>R%DD_x7R<AFL
z#a<KX*(p;x-<b!2kq*tcjQu+UV3d+DCbOLsm@%b8plu1vpKI8$icj1E=6wnJV=~Sh
znGY=>xP{wzxCI6f<BS03N*{vkdji3|Ta{=@n$kf-t&G$uj~)QGO3q@hI>_{`Ds)eB
z4~X(H9i*~r1)>}ofmA3Ty#Yo%D|_Hkv`Ay;-G{d#Rp^M)5@7o3pQ)N5NFyv9jE7Rz
z0!9lWAdQ)6(JD0Y(7*AXz6C~4tigB%h=1cvp@7k-3@{?y1<<&R|3QN>18DS*fRRPx
zohmdu<t;E0lqm6<XirU<!hyBjlTj;R$e4yaQ_8}E6g_IxH*XH3PZb0>M?Mnjy+TIc
zqaWM;d?z53A$I3o;!{wPh`XgNaq>~ArNq=jyIaI+s`<p!C>h{(R$m8#^cVu>@l?<v
zu=Eyy>uBpvl@(Q?h(8JS&|8+M)E{1;RC7pWSYy8ujO{}R(odO64a4K83^S@C!YwQl
z;hxg%b7X4r(M7Gp>7pW#6dXn+hw=c|=vRO%tmY|TWS1Y{g4lxL6N5m={b&CepJ~GG
zAPZu1r**9E>H>KkX#?fhzXNH9E{K4%Z?3h(k;KBu)ENa%kG+e4*6ybq%NYH9F|fmE
zUWfG(p1bc1)>^Z|RiF3+lW9Ek2Sy@vlUfH7HbjapPR+A`1?W?uaS*y#IJ2{`QMo=j
z`U8>x-6T(j7E$446u`JGCd?$V5&(|iX~jVBHwr=U0s|0yANJ6Xm6sY-f<q39zDE-$
zerbtou)PITJvx;=?G}L(_3K1>Pg9^p0<{@YHyeeGGTZzahaSzeBV*r_!O?b5MuC7z
z3s?;q+{$%V7}`}5ihD{%#W)m{p*gVgPUmy(Od{zC=-w<yu)lZ$oGgHYa@HWU4%?%Y
z`B12&5`!1J&ThmZP#;KA^r4clNaUrEk`dwSVhzyWS)g^D9Uexrdfj{q`aQsS0JQdV
z7SP)HR^V@o;X5DDJ=|&0tl~W~|5|$!wDuWAIHQFep50b8%>%Jk9KPKTeexom1?Ypv
z&;YzK4GAp{O3utsm_ntJk*Q0Wtf(yQ5SUQr*28S#O7#is%0BCHP`Z#Oz=h(KpqgR?
zb`ROTl`=K|WnRF;f$|YoGCC8|_!rlq1SC_ONh@pr?97MTJ8*slsRZRBcyL0CXBRjV
zQU_aWtk=o3OQU>n@`1bvM^BKDx?ypf8QqPrnXacxSWmv0kh*ju1V+KZF=WdIe!<3t
zBXUZ>gW-Y44F1^19mv>NvmVC~ya&JNVuHL#8gBw_H=7bVCQMQQdo-hB7bsOw2fOCO
zhnj^v@_0*9+(b!KT%0JPY{x@RlG4++nGc(D4Ieu$r$|AJ`K#DHvni(>Ur-Aj8#9ql
zL2$F=!z2v~U~IUF2s^to=XRI_ib+FNiCLJEiM_q9rOk4xu)<v!RqkmHeYw?Mw;M?~
zj!k9ifboRPfhAUt^+)N)pOQH}c9&zJ)HtD`DgpQY)p(q`NL-SkmDvs>_9HK8;=ER3
zW8#pqK1GubZ}k>NJ*_l1g3AgI?U8rEw(DQnJ$Oc0vUVygJml|3FkYA|tl{BBSyJ5O
zhBt07i$A_lM>NhCKvh!g<7J+C>P}EHd(%u71RH$JeMpi?p@DuvnGWZc6c(7xy_b&A
z`%7HnrVklkC?OtCQmZo09O{xy@A+;kOc^cHQCBqWAUtIBop3y`lXyJgf>Pu0!FD_B
zkWu4gi(13uF`mYt^KD>Yg*PtvZ)vg@k*0`%?5B3vLYg@gx=c9Ew@*=0+zb^S>TxG2
zF`*|A$}x3HPn{NOhq0KLLr*h1U`AH&P~%B)b1Sf{HMkU|wDAh8v0=IH_6e3WSPGim
z^IdkZj+RP2Y&<DfaTyjhDm<iFd|k_m|G?GA9z~~x@z->PR^htr6gIl-woK%+5l&Ja
zb`+P8QXGsVJGH1Wa@^o^__*(H{L-VS>so{R6v*!N_rzN0aNcaV!>+3l)Jz~dA_h-O
zRl;5hWtzKEcRP|R8zIWRT!(C9EY(?H(;C#GmKxf=u?%A$jIi?zt1h@xx<*7HHB{92
zdVC=;bUeXSSb*8v9LzP0yoqcYR>lYBM&7os>`Dq{gi)mj=1_*m<Rvz*DN8bt6y{LT
zi7-3QY5bC6drkAq=oN|*ohmYo?<OSasTv~$8W`H^=Fl9LcG#Qd5W9ykZ(+(&qH#vP
z)?)OVNOY*3pC+D$n5qlWxNjh2oSKqP0JVDK5he@4hw6}3vI``AVg&7%O+kFO4j)U1
zWqahI%Jk^5rj)AP6eCFr{Kfeb=u=-6FsuaMkmnFyu}(7OqwihUidzwQKUa`Xp#P-(
z$srtc4;YY}7-K`zH7-h9+=ZhUd)h3il(`6l*hTFS79A}SJ$U?o2z%?Owz?&57^gVJ
z14W9v1$U=KOL4bCaCdi?7WW{fxVu|{qQR|bDee{=-aPld_j$knzO|B-oSc1T&u{FU
z>@~9|i3`EHl$R?0fl`9BNC?h)`5x(eFt-G$aZWJLFa{M{suTQ7<rXnjycUK8Y2tox
zBaaFn)kNGq+;`_ir0>%t7+=$dXaQkQPCQgt09as|TS5D70Ydp2!9nq1+YsaHkRhj@
z5n}MPQbjx`X=p|G^!_$LPSO9E;jzvStw^mGQO-4c5tps29A&yvOEgNZ#es_SL@dPW
z%u|3=GC{aNO*m?(Hba6(%#KPAg$EZ)0&%+Z46Tq02^E(Ok<<(;pEs|{;4DiH@><4L
z7i<NXlHh^El96t(qk_pn5|&{|MH+-ss8)(Bvt5lS1It^3<@r#N<_ZN{xv63m!V=e}
z;dpT4@tUbfDOLWV2ulSDwjwA;o@R9Tf2ZN+f~^|2-uyefT#1VGY~^3-T*t5*ZaCq;
z)Lk_Z3*T2EMy0`5sd}rRxm<gHqmoawrTOK|G>HQD&xBYfpl>D=Skhn36I`f=`qm=Y
zqK3R`Bzc&ZL;eTBoB+mCE`N~KvLPr6=03RbJ||S9#X6FWW+xN>mBS)>;d?b+*fdx&
zh%nq5i*E|mR<ZwOgHGgkhL17q<o`vT<$u8o!^@rDM*&ND+La@Zf`yNNF|QIz@cgue
zhn)`oCnE|LI&fj3<6n%^ODs_l<BtC-fl&jsa5~~2jQ^RuF}5)Ct5L|iD>*%4dsG-e
zET<4F0#B6xk@HZ)>_oDP_#e0;BiB7t3k@O``~MN(`Rjx{UHS#_Ul|X3QjsQF{b&9a
z<o20av7>Dv-1xfAP#BE}H#{`81P9)?JNtD8GJ=)^$&B(in|TsEDE@HMR$2c~&xyvc
zN15q=%!2AI%q(EhA_^8Q{sqBqfHiMxpusR+_hyz-@*l%7_nV+19X$CLwzGEEx9gSe
zrhhG~Xju!F&8GP>1-bCu1-{q7xm)2o(bY7@;Xi*viT<O8yzWpd9ac6NF#C_oEzvG+
z>C|colU_1{dCR{1|B<a+6FqLcCpncKycO#55+O`=LV`gsY5hOpOB_hTLdU<huzdk9
z6AR2INB9b3@gG&AoWT`dybt=HIHkFLaIq$Y{~cdc<%^5OB=Ro`ScH&)MTkOJgb;wK
zH^m8VdcXQD%q|uloiRt!WHF;%;yN@AKjq0ueTAj#g}n3kC6i3B9lt~QR~-+ORIvE)
z&x|2ps{)uCT?_(bw%=m?U;QQcy`ZQiaB->Q{Ch<Q4CIiG1k43}g#tsV<UPId{tEnb
zwU%r|n1XsW5=tf<P{HG#^p`jYGqb|~*YPl`iDZfrLH`;h!8zPCHT+VY5ZZtJx=5cN
zH{OF%vhh}gR9TfS?}>G8ir;6&rV+rvbs@Sq#jJ#T`9nbz%k_Ho(TC4X-0OQCd5J)W
zY&Apa!rEs$-u**Yy8G@tTfw2fk3LrWJnYW48f#GBg!~0_^T8)N8%x|!>#K+bM1{w7
zWem|ppOgAC?Zj!K9R;mwQ~hlFI0o-<P0aU;2g3lU5W~izxk@ot6occ#b7he|+Y;SX
z>(RCH+UW8vO%1u(A0E*T)u}P{?3`_`D(A15g>z|@xi?DdZPNWGjN9~i)ooS}5qy-{
zT@Y{e;yfc!j!OC^rW8dUNSf)XSwFVuf|HHQrN3x(lQ<gbf;!`3(MSnK^<xHvmne&w
zFXbKeyGqrA;Ce&gaM2qS*#A{KDV*X3#CNdLWVK`b6mTAL=g=I659XQPW3!;>Rr^}K
zv>arBe6Oz|DoTW$3+@9B)5hBSA_g|FYr@}_*}9H}hNx@qtUrB9xp9Ah6j)4BT@C=0
z8-q&^dYHWIx?1x5jB(zlrCs?S8p5_$(5rlHz7naksbom32_5KI71g7S>eA6I&ZxW&
zGs~=g^9i;M^pQE#U(}X|4i{@1ZzZQr8OKP(*TkukQ2R5{w`$7Y`?ga+8R<IvQb**R
z5j)EgLL6J66oIers_W<VxHK<GH|Wh8JnxtO;=1pe><#(u%89-<m0eZCi^{qgjda&A
zL@k&TH$=G=Bt&yIo;6cHcISb_DZh-)BuhmOxJr)3;?#?%ZMOqlU`%x1t}ZP)S!pHF
zS(@k|aR_bjeV5necn{iGlrDetxDs*XmYi^Cw{41;&<?y_I>wDj`8?6MXe+)|d-(go
z%}QubSG6pV?XjBzEclRBN+HimlF5z7$35#k4K*da7{5oqme@_sN#$O4yV?YHQAh@2
zay@n{1sZZaqsLb?EbXP58q1f^iEaf%z2J!^80v_F&2($F3HVVwLrIeIqGWKS((}gl
znmLrAgL<9$VEMAh{+P7$QrowG0%DhMJ-K8TI>}XWsuz3pt*onl|I+d4EL+OB82?ys
zQO0Bkl`UNYVl`bgms~d>9M~cSiq3c$y0jCE5^2|lkI1A#35s-NMG{hcq%~%B_KqKY
zrtE~x8jlJ(_BJ&NP{lpDg1-(8DTVjQ;Lth{L%MsS>A2f_WFWfY+i31SewVt(m9zNj
ziT<~C1x45Oj=;I(&EI_NdQh{^e1j_S1;)SgU?i(6_ct?Mt_<22u4eYRW@pZq)!n0B
z1k7vG3F;D960QUqFQ!;U6-C^ZNvDVTizvfbBbJHQ27M-dz)8W%)C~UmNC<fyd6)jd
zN(+XoTmrvv?QS!CicZ>#Czo$;R#(KlpwF`7zet*kOF*&BF5+EEjW=non^7TTyF<yG
z2bs<9g_dP+Abt1xs=6C7*N;95$1X^auPmWG?$U;dIP0DpR+W3cN6s4``Q(^VvS(t$
ze}!kre%F`jUsW&05x;V&qev26tnJQ|>~wQDIvRnTY&BO?(62QL+DSrqjEVUE9(<dY
zvUgaAnCbi^cO^~eCiGQ=7Lk`^W_XJdcVuq6EO&qKy;CV|I~qKP#P0cUx096S$^I1?
z*k9Kb{c5E24#M%Cgbu~qIVoa^h-|2P61cXH?FI-3b$P{o%{vo55lj!KxMKsd9o#OS
z&V?pf!&yHR-*y)Hm~}=OCP|BS`2GIaQzPGZR5wi=ZWE;|vv9z8nUkYjW%@RbLv4cF
z;voduMk!4$T02`9-NKz6|LpAb;4eDtSMiu(;b-`09`(LqOo#aX_GaqNp6az5bICn#
zEuMwc$x+4l%jx`#l}qh_3#MeHa`J%Xx-cH8?ewDVTxoJSf$359F)H2#@rl5lbvZ&V
z*K2^z7nFo85+7C<V=pD*rc$y_*0n~y8wy}7hm=iM4cmU^!kQRyZ{sMY^vkpI=|*}+
zV2?GF(<^`$9zIj*l3qj9@L6D_hvO?<?>@Y4Jn4jKj3oTyobqz|j{`YqXjnRT2c?vW
z^KhVN9M|g$?a*o6ge+rDlwBmMgZ_~2mD+pk1||2dNU8(CmVfTm8NZOVd-CuehA1}0
z%lhQnI>)J~Aml+OBF9iYvAV`TGGRQZ&{wpfIgf<$kJhg`%Au~25!;);hi#N=6NS32
zYtG9Rq5yTQeWvA5o%=I)?v+mipoK5wescc8cbLV3{h+cDzPs@Vbwn^%xZQas8REI_
zVII6#Lx<d590%Vy;Do;yWQ}`z4j2QS1N2HGAa_pvpyh28a3*#3CUEifJadf7Ppi~@
z5Xeux2?XzK0T+4Bb)mWQC{|vpn?Op8^GpcCxvtM5Ja}s@6k@R52Xf%;1$i^U!*&-9
zgM7_|C92~C#1s(&!XQe@O6QrO7=F7@Qol6fl1*S5)fVuyd<&=`&<k2#3V|F~Q;50h
zV~Z7$`P{LN3}J$G(TMNj5^^_TBl<vPSi*PXcXi>APapC9<U*^@btzOLKn|bD@(f!e
zLLvK?@M4NCOZ_0eP5rw#sc1lX&`_-B9V?l{IiQ?KOd2?M4mh*fY!Ja30Ab#(z{T^4
zYyq<@!y%Vn;J~JQeITQe6*#OLm^^gpVCa<A&jDSSdDA@7h~VM{olRgiCidNU{D-^o
z5*8S9TX5jaW_XC#lh*>QoSA2<VJ<?{Z^#VQZx^50Pp*spj<xG32%?0&w*ogYFXXq2
zg6o%dJ%j|#lwpIhp|=Tq{PfPikSu?>Qgi^sGk^`A#)PpS-_i#X=(R=UX@{{9b%F%m
zanFDeU<IRy6=7q+Ht*KDV-;4kLF8H3ht-q~S#JR&%!45HikM=E*IU3avtS6jA2yGe
zVl$6d#3|V(kTgFO(hB1PJx+@z&Qf?2h_ZkHo_+!Pr7@w14H$($T5UrixW$NKW6eB%
zLzP(Ii#vER*lrDXtom-}fMZ1PG%3(;C=y$2%mdjk0vX07DX*U#$Krn#E_r&MiI4BM
z+YIna(|)@N?5GHZtUA<SO|41=K`x~*{UT~e#9+^xcX4>l=ep(EIAGl_*ugO5JX8Pi
zT({je1fqi*1o6@if>_<Z6;t%gJ<l9@!UU_8z7><Ufti4^q^RHSq51`^RWJ&8I)cqF
zE&cZ<kn92I7omc44j3fgY&gCPgE;N=f(UGaA-JP3Mo;bUFiT+eUx45jq40aNVTPGv
zjm#H%o_T~d0Ayy`H}Oj|^gjn+d)>v|BZ_QSbM}KqT55Yi3&t?y>ArVyI5d7~JiTb(
z<;JOAkeeMAm}|-Aj<pG<ySjB0upvSDdkO<AFkPnc7BKl9O-%Z_7kD_Icdk1_hU#Yt
zYmx%l-+@`NNf0DS#{C~WC}6dIfLKwF%3UR=RAi1yC!d6?6O7p%I53^MRXD`X!)gn-
zQX2}fiifeUs04GxBADsD+XRZS{v)*@h|VhP<N%`B_Mos|nnG(Y$YT)=tX6|8R%ERL
zvoqUpNTm^(pPZ%-OwbAcT!IL$n?VCl+X?&09sR>uA)8->_{2G;a|Zt%rtE4j=%5-!
z4A}M72C)%?(rXChSGv`}(@lCeuGbv_V}n9$+mOu<Y7|*?(4KjjsWuJ=ZX1I6wm8fO
zCCL0Nsl|Fhe$Ek)eT{S0Wm*<5%Nn6xpbb|DXwD2)aEFQ~Qk2`*@QW=1l+ug{sSgVU
z#lfoU%0eginGN~WMaD4Hn=Sx~N}B+3?qJaVAhL+!nNS}v8`k+J&ZlY<z}651TCPTf
z)WT~0S^{D3kG&1Bg^IjPTGmZ~J$WzCXcabK0Rf`Zhy+=UfW2XZVJqg4sm9GrTeNdl
z8`=SwH{yF)o}q67&dU3M5eq1JbirADKwFr`i+Ex4q=EYyXvxUEEbZUq-jj&*0gXC?
zK_g4V>W25@v<gU{@5dRW&&Q{S_gOmv3V=DSQvhUx0wDM-zu{+#u$$$O2~MtBGLeup
zz5YHcRtkksLkEJ}E)>a)sEV|x;W#T~(#c8^B+?x`c~>h5`e<=Fm6=J);1=-<+_VLF
zXo#5nY+E^%iDj{Q+&`S#2cUGDujIHqJ1SqE!R*E<;S;$+qZGRONFp@Gh?v`_IF*_G
zG?lrH?3NbR5<VF>!M7jh+$srblna_na)!_Gek9FNBjgQCnLOs$X`7b=X*D7WNhiVf
z48~z|OJjDE0`XN_?#Ee@<O8+yrgWRr@`0=*`{PyU`{N*=eb)F2G@%AO6&PbDyiy=P
ztNey9CD>D$@fD;(MI-$CaS3__4afF1SdjB<X;7mJRxWJWB)8aS-ZG@%gnmEHR9G71
za3}?`Hes8}JdoUsOPJ9F76XSAv2u&QiA#ZgSfK334Xx(`A6O({W``^U^yiWSefWi)
zdr=TP`MJwue;mmvXp;JvBzKw=%Po!k?G!)-XCD?ZrT|sb|6GC(ldjD^=CV}*u)QF3
zvOW+XG{AzDJ3R(;lOuz|03j3rS%EM>bo=9MBrtsp!{uhK%}RhYio+*!Ofe_X2gWxs
z&Cvv0L-7S%X>bL`#F#fR19j}(BHT`T0q*aD8|FyJoh;+I5JA^RNI7aN_yUS_mBBz?
zZPc7;5>!|@K})YL^A<u*<~c<#z<v!LG-r!AIrCF!Q4YlV6At93Myq!a7hxRS@Es1p
z$r9ZJY0?Ud3n66^Hy!|^v>F6F`ukR3`=S<Lu1q{ZFqwp46%15|BX=4y6m^oLliy@r
zYeEF^b!u%M7fxYbtlDg{raGZaD)DJ;Vt%W!EdmNTB2CWZzY7K)?T`vczr)@f7bnTK
zNT;@o$j0F-GFDxRyXC9ZwfwfSiFq14v1%DPk%ME>KpTN-XE|?U3ZxM4w_N4zv&@A3
zh~ZXRn5n8SYPTDQoK087)o1Ckh>-mr3(+pZjki|UrXQaVxOHLzL}Ko>?6eJ;sP6#q
z4IpE}MljgPF*w%hW-$pbjVmk-Sc-H<PFTg0^1&8jO@R0V1$+YAu^4s{O4u+e-c#c@
zxOQ^3*R_CDI}?~#e3r(MY{Dk?YsmSw2avM67MHDl^3)sWWDGG?qYPLwW})#Z5{;u|
z8*=KzPmrLq*zKxI+B>DK((pQ2<_aNzs)514br{2FlqSGk-=(;9fC;cg*R<i7En=c_
zP;2S9A2qHolgzkQH*d=X=vP;pdE~r=d4FKiFel7lH>3fVtyYT2cl8mEZ|sF{3G+7s
zpQ|tmUy%h7ER!E<0-VKz=i9yj+C_X}gK<BA!YAF*YuV_Im3==IGI2=~HgTTVZ&@8?
z0u*zr)rFo8SXwqZ)&gd&5wivRNwSKgeNiTIuCXSpj^MHc1%oZEs}CiB9b?p_C0=&C
zR&wyDQ>?s0C|R&&*L=VYr36r$t*K6TNN{QVRLB(A{U)o8{v8YoG<*WidMU0v$Z}Oy
z#vI#+rtlkQ3Oua%PKIY_ZiU7!O@YJ&Xs}lcu<z=(6w~grT$Y5(*7cmP1<=`<0BHq#
zEe{N_>@4x4WO>*xmJVUY@R7o_;b(%VT|{B{gkL^MmfA;Z(%9kz0AE9zxCwCaS1ll<
zzSpuW9ketq6A(P{H6EF-XbiN(`Y}b8r#c`<)7}Z@V6~b4j0sf{6H5H{wV7nAwE%?H
ze#<hed;o;p1n9%lYw7U2&(b;#VZz{Kz|wEY1eh+j#L8p?t4=^&it9$J1vJc|WYg7E
znF1H0O<<2GArq^cVH2O_-D@)^x_Rw(SrM|G7g4f{J6P>Tn)*?)3x3Ki#dRRqrRfy~
zPuQ90$`m<T(iC!?riqz0@H~cCK2?QJtm=hLkWiD^rKPB&W}7<oTQ+XNXWt`XXBUrD
z2TwQ|^;)Jlg-qb~zU3QR=Uf^O^ADY1oI}W-&d0DzTjA`r^w7qD9njeAY9ZUDS>|K&
z4Qya!x4p;8hTT;86xn(PEWJ2Pfuz?#6JH0g`Nmk@)B@JuEX7Gx)dE77s7ce`m2<*@
zDv{wp*fhO>fnB)C&to;cnQOd=Aj}|qfudG;fiVY~&G9b*D3hh52syAdO#wyb6S&Fa
zYEpqBW<)2sK&)O}(o|t5lrQk0#wYBYi$7QbV*$vU<3GZY1-7dR1*BQ>dUccH;RPCA
zgo1%9PN<V4#)wX7ZgWUEnb&!}fV29jA>8z)poZfmgvor5%{X?_AfQ-dukH_z&2bHP
zjGX^Gr|4tlSVVL4Ny~Y{1_%WKDW>6I0ToeT;4NCt#T}u*HhZiUYbPs~n`Kp<6v*uu
zJGVdvWuJ8fc4w(H5_TIZ&B+I@zyfA9&nC=&5hwQxVDYD2Zj+V67!LHqhb^Cr0udH9
zMG6roKYOzEW@=WzPu~5(&Uya{-zjZ<9sxxEiS55pjzb9scog3$;)q;8dK70f&hzG<
zn2MI8iw4>pe-AHEbSAXPy3Gc2_f-T?r!DH_su?GrVokl5TyyqmJ^=dWB906G{!Mmq
zrc3CA(jWaLOw%P(;DcAh#FI{A#rEaXW+?b&KlD(3eoebTs0J+B@iMzJpFY3VE{f4I
zA8Fg_@6%!UdS5sbXlUer0;U+F@}3FQsN$D&+~sMaG!9Sq<UeY_Sr4dOdAgoNCj;MG
z{&}mOQmRO=@#nqh5e;*1R`JqS5!l)JkDLi<^fH+;cBW3uxdw_r0$k^3k3^6uPj>8i
z9`$yiXrcuLCWbLwLm;B6NZqfTsJJb*hWc+f(+$)s#?EF00NfMryP6LN!Ly4EWGlI>
zSH*n2EHW8lkL7T~8O2k2zaaVww_jbsI_&QrzWbirg(_{5@E%au0v1&CaJ1@PeHJ8a
zMdbp%y`NGTr$-G5dun~-OZG}nr}zz4N@w3x>0j5^z4wv&nCVMC8#k28;Mh^1Km>FB
zMe&f?Hj(>^VsueK36l+JPxt1S=^dTgm#K!c<%VTffwykEBgB=d-e%v>AYxY<0&vS0
ztezRv&{gW9+<7FL-qE2$^>HoGYjJK2i98FT=m0wL4Ybk~8i4RS7SmOWPmb(l7m#zJ
z0=?vxi&1jcLR~@%9azV2=w1GOr}FJ$Vl<Qt$raJ~2gtP{iH1&gmyZPp?~AI1DQb(4
za)RTi?st<05N@4yF{!nMYK>*FNh8tp5Iu1Kci!57#=({fRAus>-DCB)FPG)7$jQ~s
zgURFHbLGG6Ed#feTpuYa(zzTno3PB=eyLenn8?5L2eDCHCF%;EY*<utRiN41p8-U3
zW=03bBefWlB9=wJiWPyUPtp30C#>qJ@6$!m*rdUQk)n0!YpPQ5)Y0kwIH+H{7&xcz
zg{qs--Px0zbssms{y2ljgfv>Xn<p^V+bsLSn++jX%;dr9fs}RS=m*BG4&Q)oE*!xk
z{&$<x!y97$gVE>ln}IA5XHeaSyE`T>EsYf4^uZA9CdYi*+A|Upv0s@Amw(=53Px=e
z6ufnv<3HTGmJ6`3DUdc8d~Y`>aXtA<@-JrUgm7KVz+2NbfAgwmu`{f{SiTfan0D<^
z9~VTkKc*ZC;-CtVesfpTx%{+IKO67%$8L5f=W8)ZCu8yus(xq51oarM#Ps`JbEZ*2
zH6dnh=B&{lN6gIfC?YXF*2bDRr*hW>M^KfH$b&feH2(DA<k*uuE*zPZ25^e<+ND!J
zP%0y0J_9ZJ{QzwU_jnr{m!Mw>IdibkQcq@H=I-GtN@e`n;N~E%`3`g(kyW1iBtWlI
zH1++5k0J#fqR7RW<X1`*ego+U$34e37P)VhA@_|WWF*EZF=5B8AJitl`dX^VQFr}B
zpxDJ>n@ovw6n=dDMn0KVfc1?aufLvchc#s5gyJytfkT5y4wq}oJCK;3eTXKRxDG#q
zk;FYiU|H3JX!dOk7%hY~pxbAVar9K_I+>EtYKOLv5Qx@(`yCn0D&usydNS;zIJJB?
zHK+%oZvjh+fxkk=C!?8-hgg+%nwgmhn3~i%5GV3AlbYdu(dIO-$Oz*4$=Stq&9&Iz
z8Jwf*V3l87O6F`cmpA=wyZU)t;E}D<LUoXH$jjmn!1Y)%m_Fkux#rDs&o^5hqr8XM
z5dw2GiOY|8S4+h6?&yen*BM8z3=?K3X53BwkK;dBT%a?<&%cu-hY;s^0JNy(-!PJ{
z<~|_nQk48CqY_k&*Z8_kv>cC7us8Z{v3Owact3}po1A!JICUMrweo_V{irj3Y;+gr
z*YU6g`GU)PiVkp*9Qv<I5?*C^K%&|#!Pj?1aws2E)M((pc*kVX2gQ|?S|j{({7Ms9
z`t7AoM0z52Q)a|s$GVNA)F6|qtr8QJSPByU!MV5@s=_-h+IIXBJ+{6rzU;MGUyo&g
z$<IFbPCLtvjNLXg6Jx&DB1F{5B5g<No0BfN5c{M5a4O2;xWx@cn^FP_`{VOy>U}!K
z{LgTqKlSZR2Hsr>7(0U&p-afK4>p^l<Ky8WoAr;L?7pv~sfP{DnNO(fDO~9{k`t+d
z*%-1z;h(qaT^=Zt`VCqutI5+-Cs1os+xAB7CM_Tit(8^J!+Gvb#kX_zLX67lA}*gu
z0ThA^@kog~T-I5eTolPa&?s(6+%|JfZrt8O6p0M@_+T?Z$1Nb22ww&wVy%P6Ru%&*
z$H}yfBDT!hH|sC&5}UGncpkA@kG;nZhKtJDeh$hEr>?9ZXE4Er!{jXJYGI6+{#>;U
zW2?8mKG)#mSu5320}i`y2?lF2l{Qq>Nf+Fj#GmOjI7~2@`get}LlhEtyipx?{F27<
z$kUo}+-f)8idPr#yX`ZXmuZz4etJ{z>(X;|PCaGV*oyrhv#i~Es6cB{9Mpi`95r3k
zcdPzUxY}+h?tqm?Ti;>RMVHL0c=qms(pDWTQRz@^aIE{1{LE&sAogPJ&+BTc;Z$6=
ziMV*U9kaILzg=H%Z?G&sU~#gou<~-!54!EBXHMHp^Fqktk9>4#J$`ne`qG1)p4une
z|1iqnHk&FoP1goZsBONC{=HJPSO4M+KhjObK1&EppC1;US>IOR<ydmoT{gh2RDG7!
zQUM2XQ@Q9G%CnPUu)oooOl4WyHg0t3_`1^Y9J`Pw7Hk2=PhSJN>gqp+nZ81!+2dz(
z$MQ~MmcEqi)i+<De-S7A4}9UZ58U3ai0?;&#i#O4LM-Z!rEFe3kkkG3)rF46OIUAR
zopoRDRDBXv%@)KQtn~CdByD;;B`04v*?kjLeHOIE`hE+ipQNf!@<^MD?2KnmnI?|?
z<#e*30gsJt$1HdAyDmS!B#-XOB{Vg$*x9n2A$4q^>Owo5m#?0RJrXg(N3x08;{~-V
zwH#l$yqyP@*U#iY(0S*~<5pAivkP<>fbZGlCI(t4{9blXtx~mOH$xLIqU;qFuR6<q
z2z9ruYI*D1G2@5Z`1LnMuR6cIh6DBY|B!vvAT=IY_nnVn(j3tL%8>n6)7n^jkoGBU
zXf)YJa}w(Kw!x)*WY%8OMg8VSfjWXQA8tkeWj#nf&L_6iLcN}O@9FdTIs%FA*NT~y
z@))Kkwpow7ZUx<DM_EK}Z(i3u2Cu47HFLU{SzVcSDZ<@@Qs(9FKC>Sf88+-vy18jA
zrj=$4KLq@MluLlibBtk)whwC*a*evUaW@LdjR6xMvo&_y3<%?rb805%HBCEyci?Sm
z4JuLcYUc<VPhV<A<L#`b<TPgnHYE7T25X1&LW%5i8s%?dY}kf;J)lIDc_f|8n0QAK
zi~FsOFPE%_sXv@GmzEvt;4eF&qhXqa1h`#qk#`to%0~}=9lkv||7$P_H84BX#u_Zo
zSS$QRoaWT*QjUjT&JU<-R0Q5?7n}cJHYbi{qA{1%T=CXKSU>(b*&SmC(WE=xX;y4+
z;0(aW>`?$|a!+r_MP;s3xR6$@e<`1Vr1-OHx)5-Q%iJkaT-ou^?tLW`(UtdJ_lhqU
zsiyy|rkSClRkk0gm;ki{gM{0d<Knd~mrK*p6-M&f$|Z=@y=#`M=t3<vOf-A%SQg}t
zxAxU46vi5umBS8|yP2QGGqK8NaI4S@ePZXqqMn-851NkL{+BqKbhFxYtQz4KPeeyT
z-m#TfMNAgYgwJBu?+ea(<;1f^*@Y4-lcu+cHZ*nemVc`go@!TUH%`nT$UtW;U(Gb(
z(&mpeL)+XkzC;>m`q-8CH>EDH)eAG4f6`omYQm#C=g8cZqDKbLi_aKvwZ`0Fd%|lW
z53Ot$s?IAA<c>ODGUYP~)0EGUX%jA`Eqr|EUXB-8-fwK48i!p}ibnHu4-H=Qn`nXN
zmYDJp%W{00VW#GRV;TCedkz!>)zZU9E1ZAuG^RSGrIn+;qKw&3TWe&|q{S`j%cly3
zL_@7cZ$SqA%jGeH)O~%z?%Ji1@D1U|>x!8+Bf`AyM$EtKbLH1o8pSM4%zpkC)gc`X
z#y^;IEEYt+3C&!pL7BfKx@ekx(7byrv?A!<J`Sx?xGO`qQ65t{-6@Zm$FEShuGbHh
zqg?#$hhm*u!kjxYpIw1YH)1JOh0dRx%2~}I+wuMH=spK4N^$xW*Ur2}wKj2Ef|HR^
z_~BTCzmT{n$3VmOLF^G|!@y9y#{g{26|fbY;I|Eh_3S<!2z)MWNAu)xtae~~xu9R|
z_Vds-1VazBd!A~a_wI`hd&JX?jk>*{%1!?2&-Xn?z-r?#GSh*hirB-QszF7Y>+jtf
zc^6U?_|>P!XY<~!&z<d_uhWpfEJud!-o6DJ^B{w8@eQ?%!=sz!u}_Au#%NGSC`c-|
zMs#?T7N<7->3ccF74GTN;vux+DE;!1P2)&2PU}8;(6oDnvuuSjp!D^*qujbU;??oy
zRX4EnB$DH0TU={GeqQ`Fb@#dSA(A=pga(Ugo)b_uZP?nT2VT=7{^-A>?(XY)`{&?o
zbGosZe}I3dA5mD@iRa}(8S>&W1n3v&@9*uG-;)|5h7}l4XGE?#FduL=fnlFk@`~48
zCgw*cSMu=f>GV&H)^Ol)_=64w0NX!l-5}s)AMuSbg@NJA_zS?;r9tuS4e{sMv5GNa
z>#(svLiqLoZ}&}3ogMnJrhq-mngAo-0O|V>%GcTXu|3t3ANtP<CmZ*AEFH!@ce@8S
z0mP?y>+5S#U;XbqYu0UVpX*-!6wcJ+4QR|m;j(VSSKV*7j_e;Te?L))X;aeTJVlm2
zIJStl=93tQiw6!ria+dwn9`QA|1RI$#2!8zIc>91Z}h}hIU8+gP#WpQYNV&WiF<kN
zd4)Bb2z;bURie0fg8j=A`r+{1_SMbbb^px=oLGoYgCx`34zc*XPg>!K{^!OE{T}V-
zR-5Av<=a7G>W!6}jpxl>e~Q(>i@^?&27fRJ`wTjM>YulK2<*8kFszt(fQY}cY@81-
zw*){H0@qOhyj%CoMY7ixi(0?w$XUv7R|t&n8a_lEt=mrP6ux$McLsRtKObD4R<JgT
zD;NvZ7_Z;a%y?=}cS@5tq8bBGH`F%H%I&Wb>=(O-eX~8i93K<TPS&@(PJ}yK9{&*f
zUu8{NZ%7_=%3eLS(3ItkdCrNYJ6eHD#j1DsH=YQ?E5(1LjD5VYeEs$Nl7sSTXX3tu
zeCRAAu-bv6r!%Si*tm-SH4{|u;+Pe_emfZ<T+vgLbs_GB_o#2Y(z&6SeU>3OaI(gd
zyq*oTIs)#Ww@l>E{GlAZdQnmC1iyBci(jV3-(8*Y4Fo(6^t`e@o<N>ofF~{Dw~iV1
z=8694GYZ>xSc8PG59#N}d{3};WRIuH7e<DQ&%*9&zEMAY-Pc&CFVbJh>D3<t$G@Pb
z8wa@GQrZKXUM2a|A1S}UzO?*SA`y9baB{uUU<0SOd>d`>zU&F@*tjh6h|dy*^v~b6
zJwMwqW*$5l3e83js+Ep9-f-{R6W3fj6}Vlz*Q{yTyy-b7bi1@Yb9lU5<6b#i3%uU8
zw63T)>Nq3=+_!KTceZx7B?quqEwuDl>nE0QEM(u@w{+Ip8rK{f^IE?`M_+zFrroX4
zp1*lLpySlPa4f5S-Uc1S)-3G=PJHpS80xz0a-?i>v#&h){h%`#5$S)O=D@0OmmVVe
z)1=EhsZCHSE2(?Xt%}Pqmh@$ATz7owPHPr)xw*#?06jb-U>AE5zJHdz(IVFtxgAbr
z>}*+o!RCKS9qxhPpS=G(lW1hid-|%@)ct9(o-duZ2s3XlJ@Do3VR>v%dwy-g$DPF<
zDxz{H8yi6K(iutYdBL?(?^Q6rp8k2M1ax$=CjXLpH}P~g_WSViJ{Gj)-TGOy!C&30
zK@_n!`JvEf=GUv<J-FlK#6F8D$oKkpqOU`#*wd_b`lI%Ix6w)AoARUds6oZDG>q^p
zoeQqh%YaMsbt1(F4|&t~muf0T8!LDnw8*xZe}C3Izg$IvMSLD&QG427ml<$Q{nNVH
zjD5`gx-2LBT3WD*_B2DcK0Xf*KU0d&?Y+*5XAbS{VVJVTN8%N2&7bk_+`4<jY&^1T
zIF6k`F7M9n0*HGk6)#tAF$VU9$%?&O<h%!Lo;cPRPda!<$>>i459AKktJKzOTVC<`
zMsemJ?#1(U+HdVLp`!Xfydi02ua2KsUsK6;d|A?7N8>NM2*(1u<t}Pbo0^S*=5GQy
z4`(cH|5LlDD?>TF6m^&Nh0wY(IRan<cePH)*1b5h`8mtcGraBSJeI>Kyf|>dr)MB{
z;`gcD#?B<v-qYjE1#~;e^0Lt7z2^hn=*Szmt=_xqIuh*Cf<SYR1Ov}}*kQj;=!fs;
zGOzH|%s2Y(W$`%@7J1^Yojxw!RE1nSxRZB#B{toI#~1_l&@|-wg&{1|%4d}hYAmPb
zb7#WPfY_^jj+!sbpLT8}^}@S4eSUB$wUgN9v2fl=d*VEO=pkhHD^htX_Ahbk`f>xh
zt`M4fnf@8rctL4sq_tK9?(y;_jvB8QU#E|J9234*cYl2CF>s7pN9TuJ8N2UX@inJE
z&0yT4n2M)`h@^3gq%De{CiO$56x7A4U#)Im?!ccqsQDAK|7Z^!xfB~)#d7cjsB6DC
ze4yT`I)BK1;NNKU+xzEZt_xZSy&;}(?EU}?fIVgYSF*FV9EV1MYO~!t${RO@7i{*6
z-}wiPe-!L>K_QxWJ$H-Xt^ny|N2~SD0`IE`zKyAFZ|TQfthHC0GaC=mXw!3laA66d
zuS6E@v$TkOf)(=b>QW-LW;O)u&PSD9eqeL5mxzTdQ>06&=>4B1Fz{neGdc=0!Q<OA
zx36uA)hbL=?TWe|@^wk9_zqKvqIt+%6z3hSV;TwUt<cFXSL@?>FlZ)*ehu_XG)SIu
zK1Y;)XyCf6g*A7bBrn0WlF4~q7g-m>Ol-6a?o9aJ(IOHDg?K&=?4BPlJl_twoI5;n
zGht)$#9p-7wdoyqx95mBjGZ0TJnNjd3=4C)tl{V46{<6~)5@fO(y*3V5SCZ7%h-eJ
zX|6Fn{^9GQT(B=0^;9_i_@P3k2*@ZzBU6*VPdHB)O2zoD0@xn;I8pt3aA1tDF7}rf
zlZ_p3$~;zv6Y!S~%P7b0ClBn0V{9La(~jKkjVg6{A^?XhR!09*kV_bHiXm>{uTAJs
z^P9`XlheJ2Gg-oC`%YujyMdhp)t~Pt)-tU{LZTvDk>285qEUl?GIji+!g3NlcK%|3
zkN$pA;-|D-Sl@du_TVowk4oQA!=q{G!|ZYWV`NHqKZGcl=eh}hQd5nJyhA#Y|60L`
zoP;LG^OuN>fBnbNqTffHW2T~-)19A9Iu6xFQXK8-bEl)+(9ee~``I?uZMtgE4Ye^Q
zYfo8n{|Uz|IW=o`W_;<?tx_I|Vrz|vSmxM*&jQSdp8%wqL$bwYr9AC5Bu?ySk{O<C
znUgzbu2k!qq|~PdwB_9xC4$;-G$RV7a${xYJ-2xF&<j2@GS9Vr(C{Z#ajnK>UMsXw
zw5hA26F1D+{C!KTv!kG(nWm(frr5)mRc?p=%p9aJUHa$Rwy110=~|Ja{N{7&&JTAo
zWlcW1Dzc!_snS2zYjWzTbhAQf<w36AIA${(hX#g)V|9|(4(Z~{V;{WKDCD|W->9N)
z6`acT$I|=Et%aN`;ZhuW(so)6$v?Bd;RrqNb`!#9N1BhcyrNACEdQfU45s%>SUC7w
z%dsj*Was5@D9IjK*2(rT+%ma;o4R%0@v5s;E}x=keD$$HgMFT6^hXFrYOaqe;39K{
z7M&|PDFbPSe1KNYEJ?`(ZzofRhJG3^St7<FgEl!s22H6@G@0Zl>@41gBg|yR=#P!P
zv_F8}RBvRz5UX8B9aBf=krYG;Xc34~C#1@##(k1`#}Y&Fc37d1L5`6+fzZMX_MN*9
zzyomm847tYc-op3-ix>ssm>B4cfVB;v2MVVs{8M2`z`vW&fW1A{nlG_8%QwyH(c1U
zTO~?Xm^@>tC~B6B6l0M2bRDS`-uhpprag(|5A+Oo-|ffu-!97%h!&}=48_4FjwuAq
zef*s<P4h=b?K)1#nhb~^E1;DUt!h34Jq5dcx{B5|D&9@MF%(Je>Tt1t6!2cL53IU<
zJgJ8JI1Wwdnblw^ZBxH%^=BxI>wEsF08pS5Ob6zS0Va1aY0`l*i7)2!m{$3NqkuyB
z*E$yz)+w`j%nNj^?>X=ojaIzUjZ%nZmI8GW!jsr@Z8=*8lTPd)fpnlB5w>8w3(D#h
z$qwQ+0RyKZWkN4k<sp*gjkF$@bcQ3zJPzKZDIrdrW?nCAAW3Lwr>*8?%hL#~bk1=6
zdk>-8oKdmPdcl&*^z1;@qjU12^n`qYB9*OA`S2f)rgF#bF~I{>UqDOZqV1ON4dz+%
zrH2XS)muaFbVNRl1y=qrisHjq%;fL9iYv9>OIQy8iawJ`Mz!D5Sr016&eA4!g<tbj
zZ-Jc8v3gx@B=5#61AKhpS?5t&G1D%t-3aHkKb}OZoQ+(+UWZLbx)B2BjFhhlhz~qQ
zD%yE&XTNDTm?SHid?d}PGF>87Zyt)P;sV*SE|DrW4{?SZP24BSxmdF!@4r{Z`h--X
zjo1HpXM{!7!^0~P^p4Eq!#U;u`qlln=_XgvOg|PLtl_32931oif3rDbkh#6FqpPdk
z|EKHRiO9X{%C9W(-+{7;B}POfW;A|VUx4~ZW6d5>7YHi!*;${_%KFNG;jy6EK`QPy
zHay*qHqY;OHP`K)5Z`_dyj^3fSN~1GyY=g5UhASq3T<CAhUdBE?{`t^3{g)qZiTuT
zqdI<3B4v3mo^FIO&}M;X1n)?Gp@2VfW=`qfFNMl5Sln8?4<>haRg@*&3l9vBRjWU%
zIad@eb9x-v!pRE1L1I&uVZ{ePic4@~y04#T<DaKlZ;Cz%6fjsu69h0OSrK(4oyI*)
zMW6i?h<SSy4>pQs{1I5B8>3TA1EGAZ4iz};k1oy_y<1ULKZv$|H{p-NKEuKgj)UeE
zLe+jT5babnb@i6<{XG0?lhOv`!cPR(=%}GA7UD*RYS2e?gko%`Sg%|)o?&?fjyRgQ
z&l{=kI&h;naO7qq2T6VwKZ1Uc3A{ALwJf?I5MU@w=LD6mW44ZEm~O@ul>i6cxFm$(
z&Bv}TH({#F>)WGZ;`Jr#7zl3~b>q`!?gG#<<4rJ<{^I2+f_t51_YD;PV%BK45=4Eg
zp{cmDE|kRrcoH!5j^vVjyk_{yjK_VwSuL{&KUrO*fv!c;T8zpH;Vm)u8f8`}boL2#
zDDYFJRX->!f&ZS!PEwQ@er*5oGp?1FCDzY;PwuC=(`<xlj)$(qg*tE6^}vY8AN$wr
zVz*VZ4Fv*6?uipG5{;0=t<(Ej$F81t&<8}BhItCOb0Se&a3Ilc4Y9u~CvI1Ft(buu
zTQ4fo!^u^F1-69nUhe5moqK>DagcP*ZA8>}TmRaKT9>5?`~!;*)532l#{>2-yPG%k
z4Q=l-Kji5QxKc%aPzm~?Z_xNCUE#WHe>*s6@mk2wi9G6Qhb6SueA6egjzSSs%_*L>
zC(R{b>)G)k8E+`*XHY$3t(PN0&B?7{a#?Wau-3*g=FuC6+zJjxIx9SZlZC;}{$m|4
z(-)f%os*Znb}3=b*F8L<K56IGmnkvck8z{*F$xdxKzH`XUDUr6Dcr4o;v{+lV+Bkq
zzFp>D0Ckw-FY*=U*y}M4juI;!?=sx;fp+-by$I!@!%ojHE+z$d!6yaFXU0aDRqNh_
zbvZX;!C67ed=iw&{l0s&d{&i<uW?>#lwT6t@7yf=pT(Fn8W*%;06_@C1Ai3q(I4Is
zg%R%US}zLmLWJqXPTm))F7(oht@zsp*|O5VlwqZCeDu2}+KlJGz&2!fL_d;gOcY1R
zGM6b@2vx^q-I4y@H<`&TVI&i9J)HM0wgD<Xi=wMiss3n(Pp$g2AL+muy7~ad9Wf8A
z_rJN?O~h?|Aql>2uws^GbQE?GD@K0kBO($vChn=I3TH^3SEZV7+tGLM<5#8;?#doT
z0^2#zI}0_53T7$WmGU-7tbD~dr|@eabhuD?$_=xclf8E=p?~8Ma<DcW$4gWs+{*7^
zDH%iBr}?W0PDCG>^8@hf7x`cUr8IS#SNJ7LM@>nhfzN1tDdA`?crr8$xM-^wU(hpG
zaFXZH45@f_-^J9*HQf08ElGLKenfTiU%96;2t)@6F4Jd^=zlnRProD+J(>7XQIAY-
zENEIw&gYTmLq1rVd08cBp0oWe|JROzO%>XP1D+W5Y3hV{#J6o_VKb*nN%oSkI!Lyu
zT7Fta>gXRjjuHSld^emn$~0*X=baAi_D_tRpV%}~$sjYjthz6heR=_mYFr+VE?$;6
zze_xbL*QQGLYop#(r~LLRuxR1FIe5$><afJo5I>zq`Z>>k&2X+U&O=ukrSltzB(E2
z<dU0AJDWM79Pi+jDhEeW%e<H5*VoyBLL1MgUc2O2iZr+217xMQwXJ?h=rU>aY+^Th
zCRnI>D!f6TL;930aiMkb?W;qasFwMkAXG@M$&cP3d)Vd!+T1c;;$iFkXipo{9B<Fl
zxA7OOLe@gZcGI2hwr_Ro_i;x7cAwKqQ=a7KY#hiLzw0qP(S=tW(hr-VrDv~G;~IoG
zZmB0&q1TU^2`p;bz|q&K(<ZI{B+$6zcdV$6*52rbWAHLZ1C74n7sRo1>5WaC`Vn{b
zA$|ozVk6&wqbSJos%ILy4o~BFXb}8*XRbCKB;JW1`f}bM(FAL?)Yg*$MqPN#f|f{j
z2ouy8*&k{&qQ8-LM=LFNp?Z<D6$$OFVb$~c>%}KnGqXgQ4R9@^t|zcSHd?5v)90YV
zZqtgS8HZbZ>$Z@<hZ{ljomo`R+G4@r*Ig{O?#`Kk#2a(Ei@@~h*3R1U(xUOGy<CBw
zV-Ly!@vX+;1j;W6n+)eUzZyd>rdq=h8WR}VcFi<(3CVEIjr9x(LO$(&wj-F1GiM5J
zIQ$(yf%TcR+UHT~BU4tIjNu<uGGd9JJeSVb%8l^fN*2Xwc+r%0bc53&KUQ8;MuFku
zRQOT4rDQ^BjcW#|L$QychsyMP>I}m^3`SKP;GG*4&S;bURw+dG&!dY7NwDi(OS1=4
zW5D6_UxOI?H`M%gaOCUUy1NbEuaBMwrg#;TzP`C2D3*_kWC63SQ__L@XjS*;jYmLk
zLVhLqH0GS*MoZ*J2tKwQz^D148EtRbzkQTVz-rgqeU{2QbLEQ75wnIMcj0e5j$%bg
z%m#{OV_h|t{o*l!t$Mj4Hk#V9>Ul(;PNhEUfBH)HfgwkkrN$(4VH#!s)e|6J>Z7?=
z&xV}h9-1Xe)`Hs~jg?maet=4%m^<{`;VtFC38J;Bpg7k}J>@2%A(q=;jy}<aYT=y|
zK?}^)+8~rne+ysVjx2tq^662pz0{~LY5SHjWE@u7lFG&bv)MR$j$-B?zLPb`ix23>
zU{<pOKDo5EXg?71=70A`Gw8oEcOtn<`8(E(zrGVqbo(Ppd*AiONI7Wt2TGD>AWCSp
zLpULSNS675Nli5-aCk0a>9{adgV~MJ?@y|tsp47|AHds+E4fmIP8KI1zhgjItx<V1
zNX&%0k0{flG-!zIqUB3Po+<Oo+hpxak7(OU&Oaro_Z{V9XZ|yLQ7KQque6$A+d<67
z5xkrh7{nx_@<@dw|2-<!=(M=;vCr~Sp*D20QUbhmhJ+4u#+2oS{?vT@W0MlS|D!X$
z^!aLUuJ~vv<eq#p@2!%OuRVzc{9lN7(nttB1_OGdfp{VP-fRdz2yTgL?>&Qb4CQ{|
zU>0HCcS6WfzBcN^wk7K)G%V?trwK$Ogx#4Ri_hBcy|iyl!Wk#^@jn61qZMTMoX~1N
zmx&ebF(LH{xwU=~6>8eK+8t3a>QyJn44`t%XLgWGXx^#9P7$itDskw*ZvXR+oc@J2
ztnt7|(3!~lE8*z`DrtEA1@qzqhiMdlA-wLvTlTQQ@2kti`W#0z3H{W<@j+(<sW*R?
zWst-gFm};G!kRnG?gN1)qbv#S;;i&ZJlHNfQv;?wiiXF%?^YJ%GpLXHtrpZ0K+zX=
zqtNJ^3U32qSZ4T@$fYRsHjog%x0h*j-AnL>fk%3W!jn{<ou{e%#JVL>li#)Awhd1t
z^S2YfP_Yr*nP5W8H1v)DV?_q?kz8pDoyI=CaRORLv7eNQW1$Og_Sjv}Y(zCbK+csF
zKg=Cq86c08c${p)#PGaE@2A<huaS5!p2uMik3}WX30qYrcQk<paYN-tpLIQ@L4^-Y
zm?htk?u#R|h5AwynSXQ$$7=Abe43=AbX8M!6XB2xzob3cqUW0_a$wj<h#MlEKu7(_
zwkW|K*<0(+%sll=Dgon(;Gt1gt5p5EKreaCIh*5ic=l>OI(cB2{?BUs{@!y<%QsV0
zLG!-K*~5)Z`YYk#tcbc{pEiC@x{d0uD{$PYGJ)zZ?LWPw4`P*WtP}Aw*1Owen>o9?
z?~LC`6v8bDrRnibE(})0DJ>99X!8Ea`bx7+t0Gon$VNE_hyDQX|El)*DY=y3P737{
zGbPG*g5EMSW$I6K$P9)FGQ8(gu>CwAjP`2SMX34VVz6>?2`oFY(lNf(uq-ze8Pn+e
zUQc~0MR7yF<y^ImDPu*BYsl)T&egxUlkHlSqUI!I5^6<dOG7YEP5-8G{q5t`clfqr
z^iLaWy1l<C3Q9gXB}uFH8oDZ-CS=^X0&E%_K~a~<Z;uHiCMHRMDWCK63e`B>T{H$J
zL))>0I(zxqoTij6zeMuXZE3)T@$d3;_F`Gq386|}#jr%KD}IILQ5i%F^xvXW#kN;#
zFb}%n&x|omet8@edsc<+p*d6sHR2?&9FMdo%%fA}2!EE>|IBhBsrtun5FEeL@U>gX
z98JqO@k~wk#!XWTIXDeXZxo;V4E|MP<;TEk*ox{21)YaYr*1~F*Rs)O56DNu@3nY_
z#=~5Q$q8IMA<dyGI!2>Cf8R6!u*?L@$X3X8vP)>jvJHh=w_~>dea>Y$2rvZLT17-|
z->QiYvUceS676z<yEc9pfT1VonY#BZNMRir0M6{lx4h+L0UfL{&(VoA19NQ{)Wa<D
z_CGTB!m4A|u8s|x2N9pm-dvbSB=nrpzIozvHV0o$rf*PX+m)#sq5G)7+Z-(Xjyxwy
zFwxo$M`pROsSB{iX;V5puz_ok;|#z`71|li_=K!!>+m=5lhu^I$5Tiyj(cJZW%DIo
z+uzRO59Q5)zPgI-$0<lsn0yWkOIT#L{b%Cgk8FY3dmgNHl9Y)T>J(dhZyn%Po3YQY
zOen>1JTGRQj?i~|i$K^_G{1^O+g+o;9a!zEobhQ9)+E=tPW*SU4J4wZLQ8qEiA|!w
zDAU$)`}khHEdeQV6m#L?uVy^4f7-+1!YQV2q6j4x*$sVV&{2?)x2Fw}m#Me(WZ5aK
z)2%n}G(5ZC@q8_gV@UkDN{4)s6q5CbtmoSn^0#|;q=4|TlIp?jAVGSUWY#^|B;g&_
z0KNN%5$wL>22<-B_G!SZI!CB=(y_0D!;&F)z}SfQ?$N-H2rjRt3d{(R<2^8HRSqb>
z<^Xqt-JdVYGWl+~$Q|2RY(=|WjgyAPQ~F@XMfjN0O&;&>iz$jU1pC9Obp6%oG|&z$
z`A@o~xnKeTnJg%2G?QC9dHVswBuDLKoQ9<49uwY+C93n{JfCsc2$*OTN)9$mO7Z`2
z>fBm_`Q21*6u#cQXkgV{)P*duI<fv8wWq5(7iNdV?8H@=G-rK*smDksyKBFSlup($
zEz$ued!`_f|LvO@DnFY3E(jo2`pf$s^7`0B*V`3O7j)KCm-=x4R`ZxcUWG@Z%bgtj
z3!|$XcJXss5+1lLv@BPzyCEgF=wOkwZmNP5Yf5H}PS5w}#V<BmyrjHj<nO%51It;W
z39e#e3?nv;@P4*axm^Pf^{%PdlR&WEnVrh6(QP{2%{t>Rl@hOLp(Qq`@1XfUZxe^_
zqgzSyn`bW(F9gkAp!;gg)S=l#w_*66$wBTSVIW;wz1g`yK>d#UZV6`Bxav{a)8G3|
zSU2ObBeyuipqJ>UhH=%akq1~H*Z$>hEXKa#5ATBpx$JO#N4iuc9-(@}Oo$!-9zDKt
zN-fie>0Wm0QdBSP?}Ka6&iSTqW95@RKHEE%nuU@_ymZx=RMZEeB9YZfKh(40fr<9X
zhwcbdi^Z<$`#buGQU)cpA$}fNz(z@F&p3g_Q-`YB&;wHp;smFQYpr74GBm1sK*c%V
z+hxQ$;g_h~apOCa$hKhY5nSbx)sdDgZ>zd59ZB(0Nf)dhpYk*an$`?FBXh95(Tg4*
z0pttQ88?HR6RRV7IhAf7Qt;lX@69Wq<oS4MEvujVFuz-DP{o$bJMp5wh+E}~mlN!}
zK>FEtAm$yjLZc@l=xk<@p04!m41cX?JW|hYP0fKRZxD(;7%u(u+(=9o!1ALs_2z8Q
zzu-dk5F_5Pl7pxF|1fqA&b>wPc8_yo+qP}n&M&rY+qQ0O>&CWoW8K)c-L##~ytdQ6
zcm9BVX3v~Cd-htNwZ08h6E7og!uxgqeMd#6QndmcT3-iLXABs0&p#VODJvh4YJXcB
z)akH9Jw87A;IaDJysso!xw7GZ9i0Zms4aRu{$?YzEL(c)HLghySVVBT0#~t~2>7@=
z<Wn3buul<M`W^KwT*YQ8=-TGTkgxTJ@^CP~YMQy~>qAJM$UCKPah>LQpn?sXk%zWM
zZ3WQfp``_)ot$gE)VvM`osFOVZ4C^k>Z8(A-*)o52eOgwD)}=Sw9p~rgOBh_A8aUV
z1yT<kaU>5BvGTAW;05x3SC@FLyJEhPfPfZ6fPl#U3+j@kvF(2pmUyh~*W1$aD0+hy
z`Y%@_lV4Ib7Em2fTA31t0PB|aN-l6(g?L*NNkrqG8|z=se8&kXlmNSnCY}s%bplkt
zp64B}l$pD8uq`uvVS!625Bx{pc8yz}>xZVS=$L#k7jNhVvqR{Y&&YN0q!!P`yeC1F
zw~s3|35CJuC?)zrIY{4M_^z$Z)z!^K!Lt4frj+FMjMQxADvhdU+qO%Mvn8#ce2KLu
zK1oJIC^7PGj)OaEN3Me@YPb_?yy*_hRi_O;6uB=t`28%>gBhtWK7XSlBJr{})^;Od
zac@7bIPF4Ts`07Akdh%U>d!!+iWuYFMgV3&#tq{39i|<~jfb8C!zYw8$ad;4)WkO+
zJL)}+EVeXbdZYeThr<B$H5dG0LdB^-?V(ADemuW<Xl2e1!nC;ZJ|HY6gju4r6#DUW
zQ)mlr{B#whE80UaN-b%oA8F|dw@oHPsSirxoTUh{7?+8z5{L7?;>Os{%oc;3G=PEV
zw-Y1FcsJ!-m$2}HczqgaMTmwlGH2Y)t16-Si;jUZp*VM(nb=4o(vn77Fe8XO{+eVy
zU!W>5N)L=Zcow_^JDgE}%0M5juEFbH2kx*sX)z_nxa&FErkVx|a@;1?fE0@$qJJ56
z)pSv`fe^<z{O9i5aQrP^wh%Kb-B;m%0q-&0pI`**7fs%u6)T?p{07IH(SO|PX0$ZS
zZ=S4X&%3&@T)cfn?+d|y+<c*JEsZ?Q_q>&Ex89i!zUB6=o)aK`!dYuwIPOb+i{rD0
zy`yU9$DRQo$j&o(#Bs6XMwWoYV7pLB2I0ml9=EltoZP{g<@LW}<~Na&J?F5s0l37T
zkfhod9ZNVa^7iyvd~UuAomWrmu!lV74+;!gIg?Lo@Hap%fOnC1tG>76nrN6}sYGKT
zBSA};sjZg4mF4y5mO_ZTTvxBl1tIW$9*s9hX{anPc?Rlg|4shO9g+7uTg0lRchxzI
z_sj2&K%tw&oMw9M>vd9bOC>R^&py_it%rZ<V|<h){`V~cC$M%9wog6ld?IN`GQFGc
zvs|{%@oQqO3jaD!TYvIZv&44+;Hr>$yRVmWy}{C8Es&Rb*GFEnr+TSKlb+8c<xm;6
zzz<kdUEX3w!6O~r3K1BOLib9B1T*V5J>k&gHO);%Z~1)-fqcm2LHv+u^%s?&UxoKQ
zzOMg9>U2dP8W!wP2!7@Z#~X7;y^NwO_7L69X$5dRT41?^9;Lf(H7u_|3Oa{bJa{lh
z`AMuJTHZY9C<HvgjgkA0HPDP)bUhaEfdRH$w-9DH`tDZ==H0uvhL%@$#*Mkw+I|1r
zLUPvPf+7Y;>er+Ha$>Vt1fU_E-ZIEub^03ihA<xORK><p#+Zv}#2h6PnMAi!gzZef
z!27|mG4dFG6R}sKrFFY;VD-y03d+QA8MAwZxEu378>K)=5TU@{bk+9}Dhg)cdInK7
zQnyvW^z{&&Z$Kxiky%MloKcl#yc2#v8*<GfaWS`7v>@E-gLkj2dvy1Y(s^y@eItPQ
z{~3A&-9}ore`DX*$3p_mtM!;=$l)~Eh7B@Tk<g*O<Ntnp`h&Z1=xU&g6wXCYu3d7z
z{`7lZ{q?#a#9S{6fiJVS0)_(cBLBh}4dr>~HGYy3owqEqtLlTM2pJNju=Wf0-MRo?
z@4K2SYY!`GxdAm7N6C;gDcKfQbYo?E?uiK50Ix7(E)E9#tj5KzUm;u3AQrVEXm6Vs
zwq8p_v)`~UhDX0YPx@ba!H9zxfMjJmr4AUaIupn+=2zqF^q`o<VGsOs!-te$I|>An
zy4V-VvS?yOJu$3g{u;E(lqDzpynx`L%V;;((t=qG7EoOa8wQbTK>s2Jl34M)U$O@^
z#V!AU@SM`EddM!K{|pIApz8ykaufc9#l+m6W+Xqi6ND)d?B<3GH703dYypMOBk052
z9MB;gTGue>R8V}0K`|62Zahn3k*6#o7Jc>$aK)U&TV)c&@U1exu`2uBQ<)QdMD!*2
zoLVY_!*swo6z|uduM(4T3LDZCu!m4i(Qrk1yWh@2CL|fpG-lR>vFxAWmQ|upMh9w1
zvA{~5QRfV&>gnAz;4}kbI2=iIX5H>~V?js*@V_-cIO0jC3F5A;j&183;Z6h*BKLhS
zHb;C{^;f)LVK1aa@TDQ`Gm5cyLt_!dn?!;nN1%3~-jiroN|-)qtFpX7U|%NTIpAM;
zjGKNA2=w6H>%NT7I!(NNMghYfw76Erg>_EsA~ne$6`Y)=t1Yr248m7f1!^N{#_Dg~
zCRj+`ugr$;a6fGvpV%4ngV82`r^C0E)Se`L95cM<HW<#&Ko~4=jtz=E<1roGIroWH
z!d^EqAs5s`;m%kCTH<l`g()C9*}Hp@Y!-lPj`_-~{fs#gQd(1qU+s}%{(w#%?u&9o
z9Ea#`>gZJWbvx}arRN$FT=zMW?jd*BKLS%%nUbQ(RSrmt;lF}CXU?_!3Smy&<-nQd
zL<QkoD9WS3h6oZ{L&s!xh9a~<H|U0xtITCEF?xqXMj`Y^&Rn$4+Ch0@#%WhQ0g(u{
zQDoi~RY)2vn6tg=l^#-#Xybs&H|-X~d-e`KH>}zuSblyA&smsM1t%G+*N<1>jU7zA
zS&TcAxjhl~WaE7tEb-_uPl+%@WV3_7E^{kgw^t;3xE$gvsF`DBCL`eRV|)ir`0i21
z{vk~pxhUmh$jXw8D$-VVrqG7FxWYUV*ZT?ffA7eihXn5#K)j@RwH4_Sy6U|M%fqn5
zfuqV(F4J<}n-xHneYW;Rit!GGlKC@(tz!l`lL%I@LW&W<8w=tK@b2bE7XXhR(;)~T
zqHu%kXQ3?Oj=Z5erf4wJZ$gmEQdNtbPPR4u`J-a?0=5?fRCzWPE4t%ZjGRBKhEvQp
zyLilCrZ!P7zfzMJfSf8j|0eGW2AlEzN3m^QY1-P7wd_#j2nKS37hn2XX)rx=(zv!#
zPqZ+qKSVBpx!5W~I2Rx&Oa1B!Evij1j1E>?aK_JfZiDj6w3;V62fwKq*qP*)``}Qk
z!{%ZXoJpLz0n=gNr+n(KZy^>bYG_*w)N$I69k6C!TWwj7wv!wZ2Vv9UR(sm-yZRl|
zmaZ|R#!<UJS_|aw7g?lKy!|0lh2Zpr);w%%`ndH1!MB*=pA~v)`5{GTnExtoH%O|Y
zK!a_O1+7skLcLB}Ws`%{d9p+rFwD+cd1TRBI(xyC*jWBK!h}<X#TaKr>dmIqjO-76
zgKhxdM2x=&C>=;;QH5fLhH)>U>}x*ymJ}nq2A#s%_>%Hr38Y<ev+jbxR#_^P4(l<y
z;*@?ln8mluqHW@!YB#D!f|tJdBA;=^BJOw&uL=-bxLLT6i*83jerguB%$M3kwX&U3
zDd|x~v7VzNS<lx<%koam8Yy|8bdMhiEl9a28Hagcfo0*CI47P$iy&LoJKWZ&1yNT&
zW!D<CDd5;|Io4RDmC~GcCUJ+GeA7gBiySIpUJkpUQ%D10uL6P!eOV4d)HEiH)=0y$
zCwXW!4|K6WL#3g}waQ7+ASc!cK+en#@Yv$X@u&<}#*w2==06flAUw;W7&XFzI@FUX
zBu^W(#KzSxtqeo6v5;?vMh|nG$k7vLR@3ynqy&otk6)1xOFyWt)7IFPBrme~gPH#r
z_Pe>k-PpK=VV@)TOlLG6+W6NH9myqjy5okZm!Oj3pL!}Wq3ra5l>=R%@i*g|r%hK!
zfjJNGA?R+P{PIauRUwQY(pA&iK=8d%TeW2ztcF}le&9QW;Q+7_;jEDRVMubUfKs~M
zO&U*LcILPC9e_KXi&idM_&D0rRUOG?9x>MunaZviq=w0$QTPLCB9g!y1JchXa5R|J
zpNN@cOPObaUil5HsuJ=m3Cus2&PeaF>OTh>G~!WY20YB?!}(Ix;rlb~77Z(n9kN()
zF0Pyuct5bvNaVwa5G~f?gSG2YtPGE9mA*G#f;MND)zNPU2!VQILAPmk+nh?%<l2kL
zT54)wBL`=iyBSQi(Yw$g*?KhrSDo@UDW)eDpx8ZYxqVyg(g;|Z=DdVb6z^se6NH(>
zn5ySoRYjl4whq24cTlrVf^_mkaUAEn0WH*NdWHwi!&4{?{2}$zU4$78JMcY9H<8o_
zos>#SL&62V-JhVvEQ8F*gjPJi2yvNUVgZz;xRve!blqV`#nqyN0ngQLathPQMArSm
zxm`zoU~3pgWzLf#El`E3^X?f79D(d=rsw;5jr7Svd2E5nAse@QiWS>f`kT0bT!rXG
za=b7QAN7}hA19dM5io0*C83OEoJsg18ShW-Rv+C7r&ck3Y*U@8mhV@f&uh3U{+L}Y
zLnew55_-SdE+1l5Ex<k6r5Ekgi1PCMKd$3OifWVd)~*b0#SB(VJ7tsE@R7bLOEHvI
zm{Qyv!r+awMWq!oDHyd(R<JD<!COw6jF7QLXk0fPcF;p(^469+L!@bM>*&u`OL>-_
zctd5shTvkn+WUtVg+{P=mZ*7__;)%)2F@iyOc^H1at9Nt6UZeEc7#<_*?M(Hu~6aS
z1PJ`7L}d4l7R$2e37g%op~YF71FJ~=ilb^M+dNc8$B!Z|DVTpv=7Us{`vPDf7D~ve
z<t_=46XJZ4R+Z8h+4mPm4++!*xy4J;qFsKP`9>?|qjNDeC0X0F6DcmTh;%}KlnRx(
z*S`1jaesyLMol{<41n$K<#xzmjuct&qg5+y<B$J1v3?BNKxd@NPWhBM%B=J#4IGnw
zqTIp1iwH2GRK=DUs^V*Em|A*9R>RoP^>8dL&~WEx2u?CH-(YJ=%e?{xgc2t&$gV8e
zCfYm!y6f6DeAQrz+8Fsg^n%8^0Y@D`-sd0}bubR~^nJS>KoZsp8*eJzPdY2hxflQb
z{n6F-?y!FHVPNI=_@qptM6QxZRvTfUc6%&uoOtO{hAEUOMDTS;c8bC?OI}{qD#EP-
z$xxTkoGPHLU;bi3QN5{Vzv5-WT8}<zhYcsP&K9rkWv}5&^hLApZF<TtjD5nn2&E+<
zvo#WAS2O=!GO8jwf{vzFR36vSwqJMx&8mXV<$g<l!w8|sEVxW4Ya3G&?KRTaO39T;
zpH{b}@^4bgyY`sV{FQ7e;r#w+RhLA0#C}FXk<zq&gQWpj?B5Fl9bkxaZksyOhrlc6
zz&F}wsopDGKNf$K@mhQ>;2#*Ifdsj3=IglL@Aivum%rZR=DXHlg{8>26@qq_EUJ?5
za3AropYPtq%y3LKuyUdB*@xKt?LtAj?;E?)hq%mSi09lvGvSh9aWVgDSrb4ZR;G46
z)9kDLLe12?_ld>G9!&Fhc4|LKJyn3?Z0t;b<Xj)}Pml7vnnn#;5vq_Rj!DUeoNc|(
z)4}XLzAv9_2AWCmyNNZ)qih0wtoqk1X@=55A0>jKrZwE8jD<^TPsdXA<MO!CZ`LfD
zXo_k%uU?5SM^XMEiD>R|+<7V01|5k=Wo(%59z_SCmt~%nvjj<UJOBkCZ73lslmfDw
z8^4>y?8XG14`au2aV3?;v1I8*Dog`a0C1w;r(iWqbDIobH|u1G?iEO2yY0bUmE_+5
zo%be7Y-ULiNl4SAQ~Ir7iWgs_RA^~tbcvtY0e$Mq>?c&)pg_Nx&q2>eKw3M2paQA>
zcO!pxySnsm74oDKpCb=j)_hdaM)JmbfupO_Zlbgn)D&>Ld8`3^HfoR1Lwr`nIzHZ)
z9J1Esx43ZCr@t_b^2B_In`j!VGE`(PLh5FsEm!PfOJ5S3Y^=>Jkv0#fq{<x8+H$V6
zmdmk}Fb^@bPO1ZIt$Z7T>RQ=HZH4Ws2bAGv(R;sM7H8;h@*%!~;ha2qi)K-(>Cf+_
z5cPL4sG27Z8H?s#z|ZR{L!O*0p;Y@WQ~=YssJFqIUGt;xYE>5B2(d1XXj{9vT(t*L
z7lh4B9rFTsWNy0i#t#A*K;$Rw7z%zG%)yUDR|C6m+UP(t#^`Y^@e5``H!%puwSkpp
zy;=0FzskPS%su6RTtliHy53Uo`1?Vfd>Z@g=5_6lmQtElG7Drt7R@{}`<GZf`UNm>
z@<RtzOTf<)=oxc9-bIcdk}mH2f&O<X$*2ittM*4q@{<0qfl5D8(*Ff2Y1=yglSKZq
z`HlkE=U{ZLLVV!cD~r|Ro}&jNI5f5|rb$bZR7WLHN^zPoyl>Zanv2^L2JhF95)458
z%)rXM%DwXIF#mA_<XQ%0@v&;zn1U$po@m>GIkf);occ|T@|s*4Kxhzk!rRajeDk#3
z1FYk9A@K9|V_R?lz&KMy8488i30mGx7S6q%ZQIoxSqzvsTkS}{!Jek}FOsFwYxkXg
z4+H-e({aFp<(`5PM(#&eA<4UdJbA%4&a#~Wgew?i5QJY@pp#Vb!1vn5@ygA>@b}|!
zD9^JBW_O^LnXWVPXUUZbVOCMO<Cx2ty|L?Z#K$E%_&YoMOE6nNE_j~AT^p%4RKjB7
zElQ`D)6E#OvKkS^dw9&)l8NW7+mVX8f#w~FeCp<j_0u+SZeq3fVEt8MJa`+Ay~Z4i
z@DB#W=!Cq|qIfQ5U^%fL?heJy!7ebix!X2|V<jtP1J&%l8MCHe5-W+GBe<a8_a+oJ
z1UVqV;F6)OxiUu^DN?cvX&qR{1$q0BUJ`q}2wiA(iMN>J*Nf1fb`|UEQD!XM$+`~=
zb}LI6jKnCVkmgtNfu158f;ke;ErcS$Do19hF2Pr?g}gUZsM`{tlLk-_{m$4at34Hq
zJOoG4VlSMwNU~Zzq)*)cwVmyd0$Z2fhFYE&SES~+FIn-E>-t4hKE;LO_&^awbG7b}
zUUVK{l1z9ciwV0i50QACS`5#NMji!1@fBi6<QprdVpmWGToO%>Ss4F1uwF=6G<zdW
zP%m`t^isRDf~m9p;BEg1a~ag_hk(Gge6`tieQsYHc2T*~KKll`e5Tj8c~xK6+k^Lm
zL7Dtn3c6rfEi|vW@-F>!Tv&ksT|Q^|d@C&i70AfnK7)6)1zJ9B;c3P2dX|d?Mp(Xt
zOO%r6T@Gjb!Jy_Aqf@Hg$7`GY-l6?k^v>~oUvf*k7Q=Nj;4^gwQs~?k&JZ4-Y|EC+
zIa)t|ZwVTgZ-??*xNE&NyEQ;E_jSp7SGk7UI4qsHILJ$5!eE0=Ru5b>Lo~MNxwA6i
zoOl;JH$T;f9e8Pc3DWf^{fNmU5FA?CqcE2UaEn%t+bg8&flqnbm|zHNV&@%?;v{U;
z(c}|rkZBdZ>npWNUW^kvPmc!W2=?LF-V5it`D0_I`H$OYwzdv`xx0Y@*KYYs2DygO
zrI7Rn+#awib@o5Gb)+GDtIw~?X~k>Ts<Fe$XZR_wftG-`AlR+*q<;ntdf$9^V&1b}
zi>sY9a97WBeJ0ImtW!X+tN3OT1JwpIhT?$br7f2S4z1Rj-35GRuQCMIq@tx2NKSE#
z<X-Fksn%kCFPJfMdKP%yqDRv=GHcx~aCVF_@i@pb%#-=>v7k$ub|7YUAW=Uzyx%+*
zm5=Hyg6T4!v5w7=9#4PHwYOlM&g~J$<9N0@y_;WIz-rG46TQ%7+YvCkXRgaw1^HGd
zh+a0;k0R0jmN^;>-BZQiDIj9kj6&Mmi5v2=+3;t@!Ug_=H~{H_?1kl`@gDz@kY2Q=
z{a)KP6y+ItxH1}XTD5?G#&td#wm`xSoo6`+p0|f${vQOCBH5TxpmNa*(AxI#?+@Vl
zn)pbDBx1l7Dl(N+U2zI>Zqcr9(?`BQ7gGlxXg!|6my|3lA*V+49jP!S@n2J5U`}Fb
zYQTyj(I7wgt^`nl<eoxtLYpJ31%>j5edmj3XnODb;nl)7;qCF%-AkbT?UcP2J6laW
zF9etE7ookD;}|~;gg!6N9d(+c!l#d4E!eXdjtPGv6o0$VKW<<C>z>LFtxx`#n@|F(
zaGfc*+kUYlesBRM1-tYZ`4W#7yfpe@33xSyv1uqAp{TdEMTlO$6+E@ypk&;vgt>T1
zSiDZ7otV3&40%P@B1Z$2GQUVbF(z(#Ryu+?8-(M~3`r--dOa`=Y@?bsLV%fbshQIX
z3L8Dum}iEur-IOk8BuE_<KAvu6176=Oy4vw$cjtRgz-bMXY-7~F)O^72f(1yYM6+!
zi&=!;A<I#&<?O{bgRzSs`f7Bk#C|>6G2VKLVpTZ#NHVLTxS(LgY4MsvG%7~MP=cm1
zWu(7;pqyY2lTXMQ^-BhF?f3&B`zSCH3c(@3$g+U7GbxEHhI_F~qrQmx0y#K4NEhPc
z(<G~WFNbtCCRUm9aM=vx$Hf-xJs!>SxfP(M@daih0Dj4|ty**9OWLh4vUC~%7=ps)
zi6J8_B4=x3#ZjgO*GP!Ajf=%%s55pmv>;3>BDA#5gNBbX`U4z&C~_iii0=F&#ZIr@
zxKa>(EkbI-$!<c!3j%x1m5>}w3Jek+0c4PhHs+(1MDSE4!w4zO9aI6lqmxkt2@wV<
zxlv95h#kt+;8u;bKtv7G#Z+RDV98RpYrPjWSy^4wnT6Lo=HcC;X+xRGnJE|nhkezx
za!)9e-@<f{{MC2-w6&xdWTEHvQN&-TC4#<~_I)1v?w6l}-*skPI8EFlE#1>;@VwUa
zup3hcW#AwQgbIqOVn}}Z8o5HviaJe+mN*AH$E<hP(-f0>>MOkDr^-tvfO}WgkT>}f
zaQ59~pbk%!SLjl3%7Vq*6s=i2n98X_0*zsNr6%N2>4UFfPzr&1Ej|U<Xdk`CE8DU^
zVGl#|4zepMd;1)cxVLRVLaP1&xT@?W8Oam-6O92{M80+|>flD1XZ4Au`ytuECX8Oe
zv|+)2^Ge8vAA)jW1}a>^k=fzu$KXhs-6&_TXtHC1B`xuh2F+EPAEas(C`ra}fr6-U
z7n1;HLj;l07?A@;W(zowM8$+Uk+`W_J^TzYWZT~3E%!g46sUlkegUIJG%*L22)7p)
z+0^L#vT-EwaG#C>Qofc7(p-PFI(e$GQYNdyL8$&1yfsw3>N&K6?xOTAixcgyJO!bX
z%3sn$LViy8RY^NCsqo;CmzS|~%l5TRJ#+Y9hHX7K8ZA=z5fEt5WCiE}sD%CV(&I;&
zTI2e(DWahd;9>zLT?za(qdWLt*<~INDb;|qd$b;X;W%O!NRjy-vWI!Do3M)X<EflV
zvU|xaIL8}>=tea3@w>LunbK5S%-Us3P#>TwR~<iq4XJk<<%GDwFfY5q%rXJa4jlxk
zCTY2<S;CIIRPKwRn30a`jL}mU!yYJjDD^YlY|XLu`zs0FDd_y)0qy6fr%Kp5L6rnu
z7mmmSD>1ix=wV`bf{CnE2@>BImCHx!s_`$%y;*1_S<_q<6*y3{FV=$=>qxnr2@CPx
zceBWvv+@}Q=hI}qscU97rQi(~+{jEqYYA2|!dT68c`h;fi1>g7S_vybuZB62m7L2y
zA8HTf(UFisXtxXQ;?U4r;*H2}G6!7D$LKb-V6(7F6ARv)Oo^um&|zC#AVTrI9f+h_
ztNq!nqRjoBL``zDE2O|i{tmbT;?Tsc7MBP_$v7a$rqX*_s?^g94YQK*7IG)LQV-BS
z7sNF??f90+K)|{5p2at10ZJ!iHB|-?5XDy=LApS-D4O2Pp(Xh3xi~XbQeTS17n^y0
zV>2%lq-hfP!EJE3$^sfO#dy+Osr)nb%G`U7s94~rN~0{R2ExHEkc`Q=z7uhpZ)8RI
znZ_hp+BOGfCMv2W!p}rBwlKdJpiOKpxYr`^P!wz=fNdO{jo|xKP=qHe;C-|`_j69U
zq((oWkja%9c<AJwv4Kq6h|AENDO6^f4N6ShafgL0;tZES9Rr{ur}wV9r?{e2qiBq<
z18j01;9c6l=hyLVji-3y@mQr05`)2f$41S5i4+dyn6yJxfTkJP7uYv7h7R9N1o?hV
zO`LVWopQ-|nn=^ANzc8|y3|<I-M(PSi8d52!>I*B>DT*<X*Y+cJc;x;juN0}mk<xQ
z0I0OpY)6gd)0va(AR82G3g4?>>r-6efi=oyvl6Wit;WVvhiEvXz;2AVW@PnL=Tx-h
zdAm<kR)aEEyX$t;r+m>GNRk-ne*qyyz`)DDeiP;YUF|OGMh&eI9%BgLWpbxlC1X6^
zitZ*_heO+dB9y)CcYFC{1!ZhlO`CELF)B;CV^_sBCTJb3q-k7ZM@n>EUUv_QEN67M
zo?K4lB)681@2~glngq!p)%5lfaq=9hLnWmttsI;tjXBh{BY!W>LCe4=gunnj>?2ag
zRj>S(gwbM$fv3tWspgm(@}<&v2rSVFJw5GXB-5*Vq;wd+sQV1Lx7r&M31^<(L7>jC
zrd+$jt>j;|S=3Crw0afJ?+}kqS+g<R0M)K3{)J5TrMJaD0gAg}j`3JPyM0Sm`Bbl<
zJ=RFyE5)vLlkYhA&*GRGz6+9;y&S%*#&a*Gbr%_D7p^@KhDs_2ry}cNyj_xsQcm0t
z3=6bxtAj<P1@zwJ%FyXwqHqOl=(Fg$o<4)qVEI=_1YO6>CF;eH$~6&itEF}hJ<9E}
z1I*fQjMhC=7{y38qO=Le)3?&}`+d<Qf1@+~KhAXvfo{p}nNi`q016}rVHxd4cO*ao
zj~K#tz~MvM#^X$09*jadt9Hq&-Eels8h##z^ycU>8kWN_Z$=qG4&>yC#IX|lS2vsL
zW{H<R^Iq;B7&JrLsEY^+bLD#IHqtvX2FlI?#+IWgXNksiYFws6?X7HxvF$!w`$f17
zB+BjRPZnRUg95IBoCB1&?O2jG{t<iL+A4tzmu<WGM@PB&4AK4UV%9R&4!^MNwBYUV
z2VVm!>@s;)xHodYzrel(^Bj(jab)^pB06|`XBiK4W~I7*qaz&hDTeA<AroN;vHR6`
zuE<u?*9`gN&}~N(a(oLVA>X_Ck%fM2fL{FRg;?S{gAwWp%IpmMg!C-8vtY;r1$144
zxrGH$O?iF~*&cS}6;aCt3nYYaQ5J4hR$>sal@TFwX$zN}+<%W<&+OyI2$oG$yt!@o
z^PeP9KiV6SbCX5#MvH?{loJk_I2FSCUbMj?)R-JzLv)63+U6~-6qC#rEe#_eFUN)!
z`XcI@4{Z&P6(d#aZu~S;bk!?}Y|t9u22TDRVNj7?N2bZ$m1d}6&`6j83tE{L&9RK4
znM-Pfbhgh*iPDU|ht|iO%>XI^cB5Mzx&k^L5k2t+Hkt8d`Wuf!USTCvl9pT<g&mp^
zz<WALh7J8MQ4$mkKrw1r$XUqhBs`vPSq0``P!?Gzzajx<LE+*nP3T5FFDWt?5#pe!
zu&YQ8EiF%y*i;Q7>jz^&mvzSzwo+IwK-e<GSi(pXpdfh8<T)l8fa9rFlpC~Tx%Y|w
zx*tKQ0QMOOW>ic{pM8~0Dz=9t1|cvh3Zct!(nDqeW<r5vY#yZ!{D}VgiL}X8a>7MC
z!Ez5{*kVvdrl>88HxvGktfDf_{F$^|7rWL|^qpN%8#}vMwB8=H`LJIp`J#twvGQAt
zGF1Hp(2L$=^qrkml^MPq`mESEei%Wh0HnMiwJ^X0{sz3+0NzKwHp@F5(pmmegUTtU
z#$a$;ow>N5d0-H$tk`0qb5AL!Q3f>)Mb<o0AgcoP2|VpDzEYSg!1Gz^pu_s@4m&EQ
z<lpBQX(+w>64PZx+My2IIRH66QysiG(^o|%7yL0t+{;rCf%17q^}3b_r1Zv~T>Bhj
z#yHF$PiY5k@bk|?3J#yoQyW5DDe{7TFYG+ZG<u2f$Xv!4aO{_lcIZm5%S9NKnO}F_
z@vv<3LvYZ+&fdn3n+)FX4BWqfO7MB7=K6(fuNnExs`>Vf=7)HXao0`k_>?qD%=7#G
zp){1+r^V9`vEV`L`z0+zMl3GT9vhT|q_*@e?fYDqPJ&+FgqGRkqGXg8)Q7~{@olLt
z^ss$Ls?PGCnE2xdrR92aNUCx4KmO!E&O`m#=R^*Wy9Z+*jVavpvrJt33zOK)_iFBi
z@doPgF~HTjskUm;T#~;A9dv8A14stZ^jo8~d5S!8&sL9K_v1s(C>cAhfYH5#O)dYs
zkDd?u+rK*WqC0(J^!Md!KKk38X9=CJh{@DzXkG?-81O5NXqne-{*b)y|AQnd#xh1w
zLj(f4R0IMd{ZB|DV@n4MQ>Xt366tt5ud^e6^L(M=m}g11d_*M6@VF-9019p8O~)xF
zq*#8GT4ExYW>G6i={WC4_g-BfpQyzmx11pqIh=c7S~q`9S~m=!=N5JY7#n^pX8)Cu
z^8@q|+9o#$l@<8*V~8`|g)B$NvrY%IyqAkCd^QgQZ-WgmA{<DzSzT`p^sV*P)pg}Z
z?5%^5<Mcs9YBx0ar)T|(9f3M)$ae<4G{t~73$Q|YAbyw(0pqwrSly!=!Us=(>8Zd&
zZbmpv2MiGVvvpbCQ|FaCdxM=<(Z{TCksF`emEU2arWag3eYVjSi+y)kvKazLhGV!H
zFZj|?7`wC3w*+A>;w0Buo#_VNwSy$8qI^SV7{k~H88Ce~qB?82!KP(G5g?)HPBJbv
zJsd?E(1cQhkHU6;u+evbV-j$cr2e7ZnPv{KUnUNZt|pdb8$?qn63Z*9nn!I6PmN75
z{SZVXP^7ql$V;~ury1=9XpjH!-6AlcZT|=#Ia{L+jmZ!fu8VG_kVb~sj)=KZ?`j!~
zXV19?N*7>Cam~^2!V)X#O0D069vnct#XLZj+y%75^P3iPkFBl3U`h5V(&3qSqC0Z;
zwIUbx;e@Odqf4(4W-$I{g|l{27Rqy(O8tipMiuB))&VSj-1gkFwFFc*)0yM$rD8oW
z2kBEGROI|sP?eYcw9~X;Wu*&xc1g}}``qz1Cswz>7BOYE**EcfPq+IMxM_Q)Gs{r0
z4CZakQ%1sTRj_sI>NG3xqzR`cx^#=b0(d^atxQ5x>n(F@FsWN!j+IXzg?rTDCvaTm
zp)D}4?R6b&ai@9R+`vWb6eG91+qHFh8XK+N4RegKc^~)VH?J(lidWU<Sx)O70I!2z
z<}6<YI%?TBm&+M)9g&JBSqAP(is+q7(8;xg-LXH`E}txwcWkM1kdhHcX17=wWLv}K
z&^K+fp;m2uDyo>kT?$}m{?Zrz<EJh#7lN7U8NvKwz`;h}@ej)}J|7c9LR{fm_kor3
z)Fo?(S&6CXil@5(D}4406QmnPq{@(|yTby%g3#p!yDpv{Hb+pj#apY@+i`1w=aO29
z>#|ECBVmnu*$%po$Ciklc=^<iup=b=Bp$m<VClv)9SFUA35^i~Wc8#(#;7X7oPmtC
zsW~~#udo>hyZaKc;JKp!ivLV^GoQJ`=EE0Hy9aSExrNaFj=5x(ZLT+;K&1N>ew;Nj
zhB{u_@I*QsEGSlG33%M*E(QUYJz(LDXIc~x_lR=u0xE(3Q`63uRcQN(CUF;_e+9p7
z$2%A}38^a8y{@{j;lT1a)tecTi?t=Inc!<&K=<bs$;8iF+k{(44aJmtNy|mx2CGU{
zh!N*ycgRK4-^+53mj#ar<r0W*kVi$X!G6a-==&3UijAaFFUj=Sq#9zjx8EGpnj1Qj
zKUEpowzR4sROtO50aHSabQPt)=H-*3<A~2T>@1=}a0G*ttRNBiU<G!KcfYntAH4P2
zaecGt%Ix28hhe)ZB<Dl92#qB;Dl!7W!wS3seShGuHBTDs3Suw?2lnhYdeyt^N4n8$
z%^tQ|d}!#_z3p<BVfd;jXgy;FRn-L-D(qUL?sZcT9$Bg1$)kVo=+?G8WqxghS{|q(
zt$9{ujYw26PUzzQbq0X0$*6?9n|lQjra0s4s(?O|Lok)*N_I5T5Wl2Hpw-VF{2}f)
zN_>&EN*?qj-<b0k?{k78i|4|Mtooq<h-j~cT_DI82ION*FBKp`k0v1*5Kba_@P6mw
zH6m7cMu7p>7leJ}O+CNl&HE=elYkOgWgc*}r-PVRE0oYEkqkE>7|&m@VDnr^llE6L
zJqD&*7b4OhK?i3H(pWXsPpd%$5PK`!@D+c3hy-w6XoHJ7`fUg3B*kf`TZ06#O|^TT
z@z<2*XC&$~btI&nXZA1RXKk5)3!?QS3z9%-^e0?|m~zofv1(F-lWg&^Mnx^Xizp#Y
z6;K|;3?(BL+QRa>RKMlAyAH30d^B-t5Pt|{)!kKAd?d@jT1NX+rOXtxi8QI=aV1Cj
zKtrfn%$Z}-4w{&R5~m#34w9eT8acr6Lo8!PO=J(!3nCnYzs6AWs9Pk;Q0-~onTFz0
z+o=0l_K64QB!C;%)9~7ZfE29^dx^*injSeqw%}I(R)!mZQ)G7884o|CccvbQ9u;i-
z8LKHzDt$;uZJ&?4tr3a-xbc`!#G{Qw4Kd-E+X37wYBj)<0U%i$93y`6lJrkRy)}hM
zJ$~WNT9ZsZIb7hV*WXO|+aS!#u-~^AR7oi|Wou6&R}4O5_<e6cs4ZIR=5}(2z8|O5
z$3Ar7IiPbyVi%i(bp4*<R)NTpYK3MtRo15ew@|Z5!V~mkX5tC|adHe9kkxmey5GyM
zsz3-LxvL~Zni~;zn3KdG@R^eiDbW1|6{!bbwU|v?0{P!5g_2{gJ{^SZ!Dd$xEab(D
zi1RNvtLfef<gbSW(!CV(z(_PO+5qFvjaAQED}Q%)4J3w;2Pt?Zr14a@M0c@ZQ1)D@
zr2)oHSDPo+B6ECQ+}}Ck3g=iidppN%g715>R`_Vlstzgi4(i{VA9C*oEsR>R{&o5l
zyBq`vL>FjL5hnx1!0Kq}A?esktUY63MlZ&?TDal-N`=A(+99&p_6PLK$WkpC*h}Ib
zrOei$5WvO^)~L`3DP#F)eOIP=w@|S{Yowc#2V`yospq<#iyFS<UW##NhmQFM4pNw!
zH))s@4MPXm#)Y!$)Q6`KuEe!85`Znu(p<A)M2tIIR?Y+2mj+1=eza6xO?6dFcD6eF
zzc@uNRGT;0A4({AwuRQgKkBgv={+d1S=~VrDBJ2oS*;9;j7^;Bm5|jULcf_UsFMJ6
z)!eUD{=A5M(x(H{ak~2OsUBi6Ol=L=po*E|I2{&DEfxrLM|p_RK|{o<ve~ML5bV%2
znJ2W@eqcYj3f<>XM7NW9Q)cI=4)NqR85R(yDb&F3Rj{&-H#qnS^{UFLHxO?dZTe**
zD&{|)#Jgkn<U0kv;4w8SB-P@l>P#9@{q@G}{cL1$!<@s0OV1{ST!lqCPd}q^xvE`$
zYoSO%72DVmFD!Uw&L%|#5Nt-3<EYsdj0p=b#_hSp)HBZ5nwpkJu5t;63%^cgwo3CP
zw@!dY-K4{nV#$K$VT)4bFBr(=gAE<<itYkJ6e<;o4~$|dw2E(`UVgJh?iqG?=Es1(
z37|gKMih-HO$D|h6M~NuyC5K}K*&{>la6SKFMxF0Na8sr8?iB+uEB@4hW^>qC8cy8
zUJw@3Fo~nqS!LO|vBuueoT44nwDabf$!(neP%*i4CcTj(Dvoxgs{MjVrDIKJV$T#E
zPw-VwSIRA}-y7I=BCX^~9hnu0Db#E}BwmYID`?f}Rtthg<8^{;t)#+lyXQ)+ibAGB
zDE}1QE;YF<Ilgz`B#*Xt@jf=wWs!C1o=P6U8V)Zph5vfYnmB0Jt_FGQ9QGxc)L8!Z
z{H2d;(jn)joA!W?SxIsJXm+)vhrZSrSNx0Bx>6J@tDB+uBD&LgiC%ZM=Al!!2m>+v
z{TxEr=yO-HH}pnr(#DOoqT~(UIt{ZjyGEPWq$oQ-r`R%AW$5V=Vd9m@u`mn_Nwm)7
z(-5ho)u`S8XNY*=p0fE-3=*hf=;^l&X9B4AEv6K?2R607T_d$K>)oH!%UFsuh80{N
zbXkc3TN$xjt8IwTJf~}ki^$_m+<~jp->Dgtx2n$cFsD}8t>e$?>YYx2kn&lO-qM&>
z;nA=mne5-pM7O#HNokH+g!&KKSGtq*Fa5y8ec98bv~;uI!w1x&LBx_5Cej~-OVsoG
z;304Pe`+TnW^E(;wT+`1LWSi;jy{~iEsyLG2;cC^6)oCVTH`b??!kOpIwRG}UB25=
zp3wqO<Bm)VESebI5DF}iUogT8`PVb!#m57RnIX1i9kQ5r;<>qXC!^9s%CJEFj;X%A
z1G3;1msUMfdTyR?ZjeI5=S2Td^3t-gM@z^yiS11ehg%=4^mv`C;ntImuXYa6n9}-y
z?@n-Au8Pe`b7Q<`1gCn(N|VR4P-kwqt0q<J3#8?Pq4H^+$Xr$dj!4lQ9phnKp-7B)
z!jhYv*?#e2E&xasY|s!TOozxp#5>WDxs4R5X{2z_;3FlXVyqmd{cz{hA++g$)8`}|
zGPJMKeI-+qe1Rh!*4Gok$LPL;&UJ$YTo2vIoAE+BS+YGm^L{+lqBJi{`?Sg=?dY0*
zR>Wiwa8wsus))Z2jF=Akmt$j7P|@r(yg%XVh9FeR@B!&5bpNrnJ%nt!#!kZ<fSXx_
zJKI=`O4Mms0+!Wyl?4qr^aE3K`q6?96#pdJ*wmWHjEDu@5^JX2QUfQHHp>~!_8?D^
zq(4R4DMi};&b`%NqN0Cue<@yosYA6x+;$$T7W=dtIYgL~I1wvT39`SH3kA2-(%U?O
z3dY)hS2?98ejCUXA+0-KEq^Gx_nk}`2yqi#_NvZzT2vlPQ+CtDPa&9C;CIrOV8u!1
zDAK8PsOGL@;KbjsceB}uebe_Ei!rz8Fbwh6iEV7GlM0RfGBEn{>Q3y_&zch{DdJ*J
z`}K)OfRHOyBs%`A_HiwhB$h92u;3ogDTQ29Kr_i8eEBMreM?p^asM^K9eq+IU+j*J
zZh5!;#LPYLh*ndajHA|-fv?NAs^!(-o(vzRuK87=RKV%YUvy1b{}82`Eh-DbYShE1
z^LEFwDJ<VJPwSuc@%(CS%8Ox;HJs`fZ}S!9sYSx}P59?;2hrAOuma4yi#znK`b7Cc
zy2=Zgdrcyz3S*uuh4c4=oZH*CQN_KDuyF~kCvphCtdS15rM|VFk9_A9&tT<Ob&8-a
z2S>|I$eQ@tD+6~P3LZ$6_^519(t;``+`rxU2fEUPS5E2(qX#)Mr2yrK&MN%bsNZ@%
z(lqYXO&?%5c!bjOHWfv+;}ZQ-{0N}V#7C6UM+xA#yVa_(>f9jZv;Fym2Pr~gnU#04
z)95*;SChdGq9XLo!=w8z9?VAL=>;~01wjyw`0_32zIn3vDXMBTD<XCXyB7l|bCE@q
zW#<tt276h%pJV1}&MIPYk<bVxAllf3Hew|ni&Cp?G>cN?!|=`rSUlWntp!eJktPK%
zL8(S4t_)lxXo$e}(!TPf<yo9_kna!jZZOHCcVmuTpVTXBTpQ8w<|_Q^cv;7_SZj7(
z(xazj*0;Mh+$rR2{^EWJzWbBSYPp-@V09-BIKCY+{87nHPqPF0aHa(iPS=YK9JooI
z?2AJMm60q}mO<KTRB~@c+@8o4z<9}2e5_$3I>j-#^z-k&lZjHk<VkOzIBIc6H16Ek
z!`2}4rG{$AIXy8WA>>jQg%vVDX<r#5&Ve~biUDEB(1<i=hJI;M+@i8fY>{7A7l-|$
z=_wNjmYHd<D~+$ikp)Q!0HVw_O$TjKhzrqw^@#~GzW0(y(s_02s3#$=PhdJT_YOVK
z17()_gja1K);f{mqRn$>tbQz0&NbH9S|ZqJEN6HxSl=^Ma2H}R+jbxSM~_Z9@<h-H
z1Q1Z;PnQnWf1*#=x!Tz1|6d|SjfSoL-VdFUtFJV1A|Jq;IaTeVWoxJI)CZOJ%gi=e
zwuu`Mw<&1dC+?OkWybdXnR{l}2R62`0Z)M3d45?@R#~-v%}udbV8oV3k*V`n)HTg8
za7CwE+AQ_JhzkQosa$ouk&`6KyipJ4nAjJUts*o3kT*3HSs_ZdI?5&uT_rIOkk|d7
zbaaqA_jAfcGITAbx~eNb=+HEj<K0Eaq;BVAcb#h%*|q!B9=QC3*_uxWUtix_U+x)>
z2VdXy<1&(A4*r#vN-q|AZ5aI$qqkNY4@WZ>woF{8L??x*oK#DN>b@h4Zt^OX0yL~J
zC{LGHKYTltsA#9OXOGGL*;Ujca#o@%RwgbpRU?+;EeBMx(j+_aGxUxbNdo`}NwHQ>
z18y({et%|9z}vDW#<A7Zk7jk3prNQ7sy|B+4oRYEg+?Tls57A;q047+uU047Yya9~
zpc<K#uY)WJM1djU6jvt_F8P4F;QSQ02cL}gV?t_+ny5@q+BBaEuzQCGr9`dUCsHeo
zyXe_xaLBu?HQACR+lGk{HFH^`o(eNE`|-~zOBz>|RS~Oo%QrLjOjbf9nR_8_D2!E-
zDjjH|ZEy>=P^J=!VE$u<JQ!u0hbj&$?8q)>*g$VtDc6gN;eks_(yrgbr;%-4awREf
zyOux&*SO8W@d`Os!rXY{tCL87M)X>Q6Mru7-;A#yfc4VDOys#Rbj1w+I^={Oh}g{T
zK#Ealp2FKoezrvQQW6!C{F=7d86*G+xng|k{&fM{8SFSipvMD7zzS>R#(ZP{ftlsF
zb29s$hN?3ci{bX};mYtCNU(jLpy9_W%IW45`or99Fg|te2ja|I;Kl`wk^HSYme>qD
z-}dNcF%Z<bv+FjLRocdb<t)v`^~M@BWijk{2w3XI^&rQ-yL>HJiN#}o4u1;$1C}hv
z?Ldj`shda8rGP*0H0V9r5!)p&q8OCmbrtJ<dCIEwj(T|$%<MW^;68XFB+c3rV<dn-
zimwYP6i@UgeGJC_vlc^lmN0_Vdw<Lsk;2W@!vokAasSl`_f?kIU{nt?PNIPTcKxD+
zU?Y$`z}0YbAp}w+haD4U!24;^=fsQCW#zdZpSeGaZ3P)6u+MH|QB?H?izBI|z@6`=
zuG?_M*s?F~>SJtyb7MAMbCje1T1OQB{GnYtV49a5``_Fn*>}{&7Tw0fYV4APifGRz
z(X>IUJ&eIKgnTlGQ&Ke4<EA!)5WU8i>%2h!-y)92u_KzPWq)G|g@Xs1r}uFj8yzk~
z5*nUqm7kK&lJXg|ve?6;_I46UrfFuq0VXquQT61}U@qEAZ+d)n6@DdkXCZ95zY0pb
zf|ZNRbMr%zD5lFdW;wdq*^9g=EF_3(sW<PHdR6Qo6xe9Z4;{M7i>D^=Vbz5*dt8~(
z16`E7%?e-hr~uZTvKIN35rYFkTmvH(P+a3G#Ttxqyqeh$tdWFYd5K}@d_BO>E73+#
zqy7hFf3Z#0M}Rt)6A<RbBKN6u*Y7zY`|y6M?0&m4zqO5utaoY5$f#jgYBhgQPmI?Z
z;WVs;XDdd3`V{YaFj_3=|IT(0tXp2PMiuRpC9lZFf!u!3&#w)&azy%@_ZN>F-6@AY
z#S(Cb2Xh=N2f2LN+FN#S8M$ECB50?C8IL@Y>hg)?wk0N_kbIZ;)vn)C121A$^5dJs
zXqUm+Tr+U`*m!#`bdq^th4aSo8|-;UG9A*}5gsu+nRQ0kG9iufud&7>YWjtJtjDwZ
z(8IU-JaK5_0DRHZ#-Vnli5+#$t8JZ3OGBhzCX{4RO!D&cG`p9y0*mxfmMqP;86Jv}
zf9Lv@r2dwhByS`6wm~-~N-e2x&#s`DF7a}r4P@s#%g>&=asL@6)@ZM@d7!cN5<4=W
zzOsJy-u|ITtpoS^BF+4l9qQFW+>pM?wey1(vv3y88*X$f#OJb=+KP+L;dJO3oqOMq
z&9TKgTjY2b5SfLODDthyUE1{THt<u;JXPne`)%gi04I-~#^ZKiSiUS;iwvMe@XuJ>
z1Ku5iEUa)1$xHu~0STWXHg6MpgAtyl2l1N9j+cJnf~7Q>*6H@4a*zGt2=v+E1Y<96
zXD-31?{H*a{rhkrj=zWn64L)S>P1545p{i?eR=xp$&n|$AB(>H0P7i8-rd_EOdjP+
zAGOC!BgQg-<6di2r|s)Fv7^Gd%2P&a6$fH(mnY_ru|e6-U6*E?ZLi;XF(|b2jF)qs
zRbM;%TAB`A;uG*Hv-%yLh-DyQ8{@HJGC`rpy&2rIwvr=~V$1#%_m;@FVR^ktenH=|
z3~ASx^VDLh?d?nKEa>YQJ;(Q^|G%(KAfQYGVM(C>@L>PH&P@wLXA1^3Rd68SJ(vdd
z|FyvXEU;4=nnj2F1q39D@l#^=|6Rb))y3jJm;&9JwhH_I^Sm9kuty&0+sJj{rt6d>
zXBz5AaA*OImZzy|;E{qE{rd(U#&^4YUD1NV!vNOCg-2k9>)y@#sOqZGtN^d=B3U?Q
zJ_?-sB9S&lwn;HQ7@PuwreLW&BvhNkStONY1;9F{M*OJNt8Vh%QwlY~Ur=+%oS^Vq
zQUfF;yk{Re<zktP_A}|_HEB_Vrz&#*c+0G~CoAw=PDbnWznwz-zs$M{rOi+i(`G1B
zGi3=(J#;diOv)R1)t*DcDE1PfWRs$hG!h|{d)qY{B=fj%Ti%NAu!xwy1gM-^m=%QC
zDuh`ji<8iqbE<gLiRk9Ri1vu`B5}VZS0f7#A}gSiI8|l1o3?b01k`3NKy}2&O(Ll!
zg~!kVaRE-iO*R@E6!BfEi7NjhP#hTGewD`%XBg8o>*H;6Q@+3w7aTG3`JqAavP%Mp
zg~|<qU1%6f?x5#J`%@sSL{&qv$%U9C0FkE4@(BrGG*r`K^eSY9Hp4!aqGfXD?8Fr$
zxY8v{0Ah4XOTztQJhD(mE3O>0RP#y2{du<}Gr>FA=cIEeB{I@|M0>Jy_=M?X9c3xZ
z31+Z^QL=d`b(yF}lOzF0fNHb&nlOZp<*ces5Y>vNj=FXl8_3;Ti_F!@Kqnhs^o`GD
zjNL`<QqesRt=1x*?l#wx>2}eV#q1y4^eMw1a52|7FTOi*zcCYZA@nX#k0spQ<kRa?
zvsQ*A{G#eS5YF3SCqrbWMW>$S0)B+g+rtvkX4c`LAu;f$-zechJj|`TMyd#=qcPi#
zKw#S0+rZoX-(lz_+-_W~PG5=CO6mUE=53$LiPwcryiPP{Pwu4~WT~&|V_YDx-*`tu
z7=HUtFP=f(+u~{zCi!pRg?8}jqt`y_ZlbN+OHJJw16Oa&&mGEs(gb)|r@ETjX@uoE
z^a17^o+9RRt#4eBU(t&!byG4j;d5K17O@1y6+CX$G~x)#8@KJ}Yg?;-PMlcJm`qys
zwEo6!HgBk4$LLINtv18H+{#|!s|(_#-TLsm*^(pG^G!OAtmN`xyRAz5yTD`tEr+-%
zpzvd#)%UNCwHtR%h5ro~YW0P=#v|AKW2QdTMp%E&Mz)LQ;}vUQX`u^$A!EJT?BO~T
zW@o!H&nY|V1{k5w+0MG*UEXzW2GV|ArL+(^PQQR*_U2$*FlI^RjT&gK!k&k9dshRg
z><*N_ladqWD(LYvevLRB=y`ajyWo8*-Xo-TX!(lC;Z<7LUjv+@u-9hQD>u94zi(dz
z@F;s0j=dXA$mK^IXf4phQ#@sqybi25`B5Dkv)uE1+yS!v3jD2q>BIed3C5`5I$QwU
z2C@{qn|J+=Af8y`m9bRq=*3_3;v{#F+>%(z99gB#81iB$t5JtRCPQW4Q82v{7&8}0
zx<!5Zw?kxIJD7LUBwc>OCl<B;{NETmry$*;Ela0u+s-^`^Q3Ltwr!lWZQHhOp0sUS
zowus1`_}EKu6p}p$BrHGzkD&)nq$myQaR6V-E~o)5^)NCxm&qzXd5>k_V&b|&=lY7
zp#VqMG=C4o5vRU&h44Kx6{?bW#_b^LhXTqGMwxC?tVsi{NWiGhhI6Hme_`8s_J;_)
z@{=Mz-wI=Ag22Z*kw^AKri2`X<b_Zs+rS3%1aE-^GG!m$*bGR1wB~vV1(uYuxPhu{
zLlU@m)*EFnM-GoFnVkv@z1y@c`#LS<>-D7{-<fB^@wA3dMVWG8ab{LLVsb{43u2YO
zRtIRJjbGCehkl_CsNy8$)J-$pSC6ieS+;4*!vXs`eW%QeLKQl3YWo&$@#~xg&WBpK
ztv4~x@nmEOXRF6R_eP>k|B=k1=29gPZk{OGUC@Lv9mhO7nX9Kd6~7+1ps6iO*vAQN
zoJMRZAeb|Wj#li8t5A<D5M1V4i(70wTq!x}mc*Qles`B4J^(rTqk3Fcb$))Z{=yK5
z->-<Q5|`}uI5YZ%A^A`)KtUr^X%Mp5E|RaFQ4WuC)`Bhm4jOhOkiUep1gpc63E4k1
zZ$Lf~q=$yMkU|_Ss1HF%pUl=OYkYq}YS+qw{ZsMM>G07=cuqlg#BWZ$m|9ZvC1(1}
za8x!x%OE1BtDPrZ{wnN2C#d_$yFK1V9XOmG`De$VItHv&5#XXmS3#py2HR4OJuS1}
z^07UrS4U~{*VE7@hju|}(4EF$6i*Xwb~r;@gxKe;iXY9&R`{9r??xXAY8Nc3YmwJK
zQph0?M6J3b>>)=HK;q`TOOr2NOra${!_w5Z>NT*W`(0MmBU<jO5Slq}wg<L?Uc|3B
zBj15--X-|)&kI-k()YddmXXs3EoXIIIzZPHhddWnmyt5W<K8c6f4}(wuEmeOAe!&r
zw-8#>E0CbS&*ipguHgORw(Yn+@#rntyJP-l`Cpt6q;4suu?(9<IkZKw#k?QnnFMxt
zYo6-+qkMKQbC7g<t!`wsbLn%+_t>Xss*X%Z-*)v1F-w1h$<3W6Pj6LLVV%Ge*0saH
zpYfO8GZ+e8wv8VV!JBaBpN#6a07qC1EJ|9wpK`_2wLq$0LniUqOuacSt!+G6V6O-7
zy=$0N*|h?X3K+ee&skZ|PS9iBm2?Z~B0Z!~yjFEuGEbcjs^Cw)FglFOxu-MI1Nsbq
zJbLCicz>6U49)Rjp;@3ci`>^MtXlI7EF=27)>q~=0p28O{nU>LIg?f#6J}RVP^XP@
zeMCw6`fWO!8j=ZprS(V}fJF)qh9qyJHv!-`ESVnQK8H9*Q1`ss@M5D+YNLy1AGod5
z*z$8ufB#F$1V37%9u5isAO-)wQxj&^`iB3cCYIFyJzH|6%W$}O<VOMLf>UGLC7uLR
zFOLeALlW;?RG%0NmI^DDNP^R#`g*;*$rLXF#B~r4@9GsR%Jg~XB-;}?T%!SAIdmk+
z#}1_zL}$>ZaYGuz$cJn{xJUV`fq6{D&^K#pWYuJ7BrX5y?U~5v2(bgQ8u<&fgp&x?
z;K*h^l1?#jRo)I{p$1N;2}PD%#~O(t!!#;)OlIwJKjntqGbko40+jeHk(B#zj0Zj@
zk>JlCqA4T>bz~(zs8!BGDIuDuW$|8f6CxtM)mrn++(kN~j0X0+o?EOcy$N;{Ma0-P
zuzTcb6>jx#nteh|Qic`qK&va$n;invy3n3bv*7@CC{V^C3eeYN?ssW^Ll!$qPK7+E
zJp{95b1*Pt-dy3fFOu#N(nBmt;&3KJJ75T*aWn$BqC}6eZYqjdOd7AcgR!{+vEKzp
zi8zp{Sk-{qfFg|Oq22hAC~`yw<BRlge~tYB*Qr-xF;tM6ADFTseB;ovQv}S`Lsc6J
z8|`{Q>xhL9=s1W5Zlhy?m?SvYP~(c)%Hk4n$tej|YavJ6fGP}z3lK~=Lf{BAhcQj(
z^%0T@e|OKs$>=M$Q$&@lqQgL=TGD9W0uaNpgNEn@FrbZ@Nh(ee)R=Zm;_A5LON|)N
zcRPn%Usf*}r?}Rd)lJ_#P1n_U;+@03Yfspxah&vD^g3Ql#IZSPp*Whg_j-w09_>V{
z`)+V1pV#LNTx6_w!`}V&H-zI}cj)5^l<{3`0{_W_U|P{X$cb%t*YV^&gn*T89T^Q!
zyBKn0;dQ2`xNJXNi5(_g!v4mEY6D6l`w=xWSCMbU12&@5m$OY6Ys*cWGTV)|l~;&*
z09}(Fwy@ksPm@0Q&I(g2^%z2DU=5PcwdpC|KNa$x9nFT$+`y}s{vQ0)eF=Vzw)D?`
z&sNxLziNAF7TTB+)t29uAwu=yoTsqw*NB*~)@jRMz?;jM94fJe;AQMZQ>slpiDwL!
z2lUYi3s9CFw$^bcy7WHtB)72Jk^w!q6BYwe>~LuYUK|eAPK5j})uWl(A1{8qbqXE>
z@H=DxmO!p4IJ`Kqt2=dhj(;5H@Eh^L-e(*1w)nvlmZc6c&~a97og`+Vz8;tjS9{y9
z)|db08t$GUfO^+zN7$uCUlK+AO7f-WzYm=pF$1)6C<Sfgf1kLZHgVYwOr;H%e?UN~
zt}+PaUO6p;m20~_+u2D=4e=WHIP$cFY1Ud@-roW=!t*4{*Q*Ozd*d>?Q<{uEx`xZ<
z-wUT?ENc?9aJd(>9{%GYtT>x*6t|o32=m_W;eSY@zw(@`2dQ3%0MaCwk1g45Po_!I
z8C9m=ZTwB9WF5HVlN-!#s#Xj7H<vQQO3&u31|2h8v|Mo2<@jr2e;@#!3Vd;DOdyG4
zuvm}r;N8O>V79ilJY*`tDDwK8dE}46h!KOO8BbP|MmHcRr{PZzY3ELymw$aQ-4w7n
zw6EVCj((n0LlrVV<##~nGQkcGX^jEKElBNdqZ1b9e5u={92ek8A00)i^s+pGC10)q
zfDzb$ZoeS0=xXOn@nrk+gznJ{6{DjesvLLCPR&pN2R!dNf{p>x!JXU<D7MA}JiTw1
z#t<Y2!dpSkq+2{RKtF^GXYB;$LniFZV!(zugE6czyeGJkG%CkSAaXwzx6bxt7=E;>
z&mLXTr>^556qQ<iK!{?lblx|Oz=bJvb}<V(7Sy3XzDV8^qO8z_S~k-`$R1`M%m9IB
zZ|xY8S;2W>P(BctLTO$==@Lmb!D?l_T8J$%s_(tqT4|VNJ-U=`9N?Oge}D+u{C0g`
z>Gt-3%sgB6n}IwV^Pzfl^Y86D#Ma`@B^pM6W$a%)uXngdFta>0q)}QzU9IVYo96M;
zv9=rQ+@X&{+|64@>IHPwNW7@<7F|^W--vvJIdpK{SIT+<-4%l`?zn(6pHm4KRt9P+
zyOBa@)ZoMX!wn4C_xY<B+}t6*MDIi}VY}roR;Rb0hee_-(r<{&P_cM!?AmtOe3Mgz
zNElVX$21P01(jFx!~3_Cp`5NHGm)0Usa1SlZZ94dzU>JoPz?e$-y@nh%LDb51PyS0
z&m6!rh(J19GehGb>`P8x)$Am~c>^wleVmH6bwWAN$iebs_JX{3iJ_3`bk0^0%!JD_
zCfVJPTk>`Cc2Gc=T@&ED&UHaL5I3FqkLEoXx4DNj!cLa%R{c(*n32f=P#Y>bj0USq
zOGuvWUX_&}u)Rn@!6N&mT<<)MzgSBc#lf|-01b@SeMNu0tLG@Ct7TVQT8Kp}XTqFK
zUHB5vmIs;seySxhkkfdr3G}xD!L3CIqtcHQHbe_vB_kkOtU2u=pMTGo<JCMEpg3NX
z8j$Sm8$soCwQB;+%c$fla$>$o%9K%OzQ2@Q@K=ChWMos7!?)1|ssu~$<B2?Ty%9HV
zRFfVN+qJ@NgBH%9B>hJQZ+DEa8t2Pth}yd{o1hIG&Y#1+o)xZA$s7K7Hmpn^Z=m~=
zZU)q%7+YR#rDczy#52jIKy&v4RtGkJ_}qN{bH6X-mlfZ|CHN!}1z=;JA>huK1+1um
z_W@I79t@cFtMQl_6wEFOb~DUbInTLL5U+|hF8Xpn7Sy<&(qTp0_Xa~z%jnk5==p|X
z@#uW5zKfUxTpd~vzPytP<v&|N$R7Ql2)vxZ?dyZh_0_CHC5p(?MUr?5rlee78Qi}z
z6lQv@7af>)>6&c#Ga7YUR^}-7>g6v|Hn=j1&ahC&%02f@JK7yk<Uzn)G(KdM=Ru2r
zq?^T*)dsGPpNGWvY#)?98mnwYQ<GrQ$)MgGK!K$WzYLFwle{!X;KxX1QP-|4H1w^n
z3qmFb@S!Uen&Jw!8qoKwXM<*Dx7~Q5KN1_7J3rz`JJ(Lf-~0{?N$^`n+&;L>eW`2%
z@z#(HzmH{)@}Tptf5Y#d`EoDM<zyEWHu&z{7e>vnl`s<@Z|~eMBXbPTa$Z0lO}Y2O
z-@lh#%fY`ZJ8m7o2;+Z;&n%C;aF?X96}DDY@J-?NoqlF&As`r08cQ(Mi2rr}Et`EW
zCH_P?C(S-)V_UGyO9Z_bv!bwKSMQCl_R*_budf%c*hJ;4sa=X@3|6<C+PpG@ud1^Y
z&DB%mQpj?m(lFjQ)ZKFFCbgo<H7l`hDW!Sgwt64*^id5Ot{bEc<}5c|(F%$b{k`i^
zjt1h$SGEyQ$WNrQ;=^ZvVyW6blvMxGV>nj~FOIwwYO7s?)F4*&w%|6##Fza6N>1#~
z@Kt50t^%ST_;;xZ&CKR+bqH*fg!bX$>0+ad_%;CxW9EYS;#{*#aj~<+D$RM2gGxz(
zZ3!o)G*!8SrN&g2r()iE+CtUQeO6xyyXyxN!7)X9nuxkhG{o-2q;u!G{q^ug<Yu<J
zRNd3R%!cChakAEaL}e?{|7Q!{zuj^DLsb52YI###-Eo~A$tT(u^l#ai1k^t9vfGGw
zxmj3qE48Ffyu+S^u^I}b_=;R%_#eY5m9KXfU;@badg7S_^G||=-}t)tCt$q;TX?5&
zhvWB~?9v0k_&WB3T2+GW`SM4`G|^(*$IK+s^-br8tMgN=mS-j;njV;tr@y2-L8Zrx
zq>0z@#0kG6QxNCiN8NGeVc{Os&qfBf3Nf{duo#HH0Yc!P;XLCD@N3v0HE9~6w@K+@
zqIJ!mZxDE3AWNjg1r*aa=68NW)tU9q)95#38b0Uy9Z-_e5SeF^^Bxj2p}CKROzwje
z`53Oo4?=$9A7e_W|3sjfa@K1Q>GF)E6Hq4@v0|N(w(9}#T3=V=12X9&d+N;iKiHu#
z{!M7AFuzL+5X0J0dZ^^z?E{$IGXn=Q!q4Vw*`jUlB|1gKA`W5Rmw|!MkP?OpQYPux
z=;ETBJP5{AnK{_eA<dSu7ySk*2II)3?t?f&n%nP#07NAsl7=<lt6_v&fg>bfm?SYe
zG-lS<Nlng17jRo)uQ3oe-c4nkjz)=V$q$9eX(>cWm7lvUt)=-T6%};BE)Mwfk0_3i
z)liYKK<OnIoB>v;rYR8N0vllf?yUWt;2Qdc&ADf~^)*Jdh)>hsQq6nE=s}Su>%@#S
z)2YBX1Q*Dj4mMs(HNpIksVyC>;UWP!I{d{0AIMeNlHD1cM(r4}Fp{MoZUIC_qK&hq
zv%-uEQoT39j=XtGVr)ZiPsbUpGNfn>babMmV!@$kyf0EiV7D-zMHl=zx@RFq3HHMR
z1w@XDP63LT=338K$<s0uBnQsmca`~=M2j5<l(RFYF&6V;9p%ars5c!Zznls+4}R>k
z(pG`F-oOi2F;4gM7&ri6vyzdPh8GB)r7<F<3Cj`5Lj(#eshOC5%6!<E0@y2D^uG$O
z%{s@U4xu$5vq1`pqgGT!wg<uY697$4|3;Awtqu2-{02!d%GEtX2V*N(aFL(lLn!`Q
zWTZvpVIRuQUX4DL!VT1tA_ESJRInOoXMGRxmJmVC@U*qS#yYWgs>UnyJJ-X?o+)k)
zlL1+Y)>mJk9?6XCpfF~Cg|Gpt<+Ouu9UwQfVRf@I*v!>>0FU`2!V3qB(K6e&VcG5!
z2@7|@MMY``>dP5kXJn-nISFmJ!Di<Y5Wt(>+-HB1Y)%|SndrO7f1j8UvkJ5_SP(yp
z6+_1`6UN&L#sG{$d`d`ZrFew!tmjJsOt3t>yS1gr3V)Ib^JqB$syRIc?b-@X9m8!L
zhkqoex!os`-7wU5H?XCs)@l_k<zR!qzTW4ci+P)?v-D?cXm%@C5^sK;MPk(x3QJvR
z>_*|b<D1b&WO$`(k&nmy?#>K8J)J_@DVeS|<A4yYFG%k_h;c+HOYo$#!hutDmf!Hu
z@aE{Q`#t+3W!<4LZW!NeHxruX9)@~3bCQ*w_4$ro@K&seuKju5(_X3&@jU=D94>J~
zor0PKC{YcP(U)%%*h?+J_`XDZZ_hIujo|gjpDV&C@e}a$ksH>+Q>1%73VU9x^Y_p|
z%2hUf=oY_mOzm*7x~HrBIN#wQ2LwC+*f~bF8IcGzf{)9e2E<R5ZeXuM#OcFk7mMsA
zqs+eFH~42{KWo5+O#ydmTf)$8UL<R4P(z$#eJL6+i_Ylo(OA-g`AFn8Aa`|RUL?<a
zl?gk0RV0U!_pzHNPOf+Iyt<;1uMAJRb?S4)2>~F8R|NT4jb`UqnG=wSh*vV53V99$
znfyB#H*ersi8+KyF+bAKTP^8sRr)cvp<j^LQk$k5pgf?eXkludLztzpS5U;}arw~W
zBk8XORq9r@L*@3j3e$LN<NTho$Wdw2tZN~-7=b;trw_?9oY5jSt_v^Vv1Yhn?X~YR
zOPPo|Iv9gz_Y~ed8MC8BxK_p<+Z<zpr3Dq!QOzVDc;Nl1$2~XK?oJ;%uOi@Ecl@r@
z4Tr+S7b6-#7put1V1!Y&(NC*n(A1y1)nv~OIQ_#t$d6+NBipkjHL1{_+i^jQ2La>2
zOr4ZeU@MM!<f)RkdGKO-vah_i%izGAG)W)A9hS?Lqc|UP)3TZC#<L8bhQLYm5v|&~
z5NKc)X&9?(HYWVnU3uGl#JVVSU9*=kI)t&BhVsRpWhZD`JEpil1IZXdiB`b$$tSDg
zPqE%Hr?fVvM4{0IPWpia?_`>uxT_X>9<S@D>wdGynyC|!U^%DlJB_@XrvVAdwPa9;
z%No^9qDO+^yEz3>SF5;v7tarH$dLXOyHx<QO$iU`R)RvxBg6@(YQ7}<9gm;$CC1FD
z)Vn=ZMe)sBW8sh^e?^=Nu+&UZw5}hz^o(P537WIr{dM;}Ujlu(!f4Y)pYlhiHr{mz
z178nc{MtY(%!@pNHGs{)i*lulCDT<OJ_t5|YdHeSorS6P&;_IBG$_v1_>}zO)o}^x
z%H&Cy8Qkk73um*-!*fll$PIfFTUXk76&{g;`M#1~7P;9U6SkA36sV{Yee|z4fCX-z
zLK#Z!W<Vp*>wq?i#Y@yjd_QZP?2^TP{MOh=G`%EfMRJqH&@SLk>b7ZbbBD^FT>xE{
zjOFWuw2OCRS0uExB%O9R^II0Vl%!-g+;1hx7?EZ*`|{*9nF5#a{!pO~Ww1QA<F(oV
z@A8)1eBR3W;2R%}#8B{kw7xA>km{u}JQ$-g#kpnc7nS+Yq!+v2*wsfmTg7{(P0V~c
z{=0lmx7L#Z<2|tOOI^P@;Z4cx{b&M#p|NCIglX(vmLxGm!P~r8e0}Z@8+qAi{unve
z;H#B8rm3(4RR$>lfMS%lUhAW#w8V54+p);uFE5Tz>lbNBw(>p06b$R^FV_rVMv(X4
z)Cl!Vvzf-B|6L8a+&@jmLzlOwET@g4eMZ$qXl*98PtbzsD`4#bl}G#O(a{&^(h~$C
zvt6kpIerYeyLk&#91jQUq_*e!nlz{!f2pOB9MCY9K7lT3y@R+^(Gu3K3TCaAII_vx
zSTimMj-Gc<FE<h$JSTJ~oX&@ccJ{i9YqzW}d!V3FqjJQJFL)`9BiRzsuGC$#Xfe_s
z$~D`g&P(t6NLbqKuKJ^uUFAdDDwLrTP-7O{mgU)^mg)QJ`p5L|?=g}<rNcXY0`wWB
ziN76q`4ZP^iDKNjby4mSbwC^6Axe8yiG_M0>5S~|%Dmw6{W-?{p>u~={2R(MM^@>f
zMpkZq-FN4Dg81X7oi!%(mhI*JT=F*3y_wHwP<=k=3Vk_0Mh?Eub2Oo$rS$kk^~2ja
zvWML309Mq#(7;{WE%@#k`3gQ~A6?<d>i{*ydGB6V<7Tq$VmZ@Br0t@hnR5KJm3bF$
zKmuDs^hyNJnWarjc&1OFms<O=1kKMH$pU?wptNrb?E!&E3LLI11VYqRIH-||q%)+Z
zfe#MRXcP^9x7bKk==b`Ad|($T#5HycvJzuB7hh=wA}g!X*hH8X=x>2r=xagaVO<aL
z%V?TM<mTbwZ_E_`H~ah-cB1Z%6zm}HYRDdlrfx(#ljOVM{v1{2`@L0PJxwxRn9q}S
zAj*c;f#btRDzhtIbFZCQ6h`-jWunA=DoVb6=2JU4()f&Hv@9G|abZat`EdQD*qj6n
zCoiRVWxzA%9PU-D0<6QodjOR)&16MJn|Iz7MwFVx0vf?#pl<f2n$t-W=OsLgG45-h
z@c(&`+qCnyZ1cxKg@p3ospNn2PyNd@w@J;~cAXXB>q^&Ntginlk$L@(zS>`)@Tx%|
zoQZ^k!ajP4aG})=qq*49!qeIBZm#(Fq!sf8*84vydtE#;o3~<zQ?=lN6ldHqdm7cz
zNM1##-CGA%Q&8&uS`1=C`h*AJ=#m61q4z};ZCX`PZ|vQNlq;fkahWL>(a9p65+ESY
zNk-@6KrLd?jdvM3*Hg1AQG-X_2NOv_K8$`jF)_ZJgFgk$*|lI?GyJEja`oX!Ei^1T
zeWsK(Mq{=XW5R&;aRS;5JD^JWw8+IOHg1S1&#__gom+&!2t{wYi}9V6!sATYg9ifv
ztwy!_hv|}I3M+{~>U)7&LkdNt$nLaP6x3l93Nj+7?t~pI2|bu*HxOE&M3!=-M8ccx
z@nT}bp~)Y^Y<tN<WE^YYXny3A0-!ql(O08CCaJw=1e9T^yVM$W_XiTB$Q5ykK#;Ox
zmVC=TvwgI=<-j?(=Fna_X<-G$oFVC@Ej|9)B{@S}NtHYHnzczw@^Y*3<^iJ#yWv(w
z@+cx5CIOKdPYoz@t4Af})=I4M;HO{XP;narumwH>DnM#+dsGE~`Hd_IF;9Z@HH#r$
zoB7l8luAmG(mD&8>AS#|LP!_Q&Bn?=CC};vTs4)QA%c<F{Cc^dYpk{by|Ul8inv^c
z?L49cz(uw`)?8=E38gwuS8jo8O%1iOg1bH2A$a%**uY)<hQTFFW~%$#`JS@~0A|3S
z4S1dB@WE~_)lWD9O-xzSX@{>aHh>-gndnH!6`%WI<(VF6P(7BBI+<GSKITAlFBM(S
zLYAox(y*uLaX2^zVp%7x`J6-}$}R`Ic4xYJ0r%Kk0_PT8=rV5+4SHL5v^X0O0>XH*
z6r@;KTrdhIX!Y5h5h}bnot>BuxLmwVQ8bLMrYE862BnDR%Ru`!Fxwt>I$dLvFLgDC
zt#>}^ev_i~uXNYW;0hP?WaNXt_Ay4GbvyE(Fi`gGF+*(HA#&PXxf=#Z=>U!NIEl*G
z0V&eSt!jcq2ips128+_Aa-!_tpAy+ohCy&SdHFKHYumCC&>>$#Ed=RVH{w+Uc`^xO
zGabDyAEeyno$2>24fZ+bAXV0zWDJ6&_R6m;4VI?P)C!`ROusJjxSA0EDa7MwcK{aM
zt@UOjz*PnBsb{zom@Bd2w|c8vm`yIHYc<u2p_`jZ-N5j+3h!m%DP&|%PX)4)jaTKC
zR0l(TpAU<jNb|&#_GrD|L8XiD9A16nx;luYi&44usIl9>i;RrC(DS^hg5#WEfU62h
zzA0S8i*EdWv@hLKa8aZ??JadIuC0Y<ueoWZJS0=-7lS4)TfUKg<v4w$N_P#@F)_xR
z^VDVuw;mJ&^zYVChDHh*Sn1!T+{JgnKdhXkV^=sao_$xXW0Q;ZF!r)Ie}`R%bjYW%
zc(|i(+lKHmAPp!qo&q*iB7BDzQzMfcEoehAa*jLMjhqFTqq)8P^U!ON3n$Zkf}H&^
z=JwiaI<NvTB!J27^iUnlJ3DC&3SS@^CVc=d5kzBew(ORa3lxt%fVU;EZDhnQS1j({
z6DNRPsCyeDW%TLI3w}fFG{kugESP0FYb)3pylTLS>qm?Ec>^WKhP!AEjmkW3kZnnq
zqcM(}0DF+!PfzxcwKKr4sTlwK=XU1?w+ZO1Yik)=BQPLABG8qtrrN&@B0aUF+D@@P
z($`JHMgt`HXl(H@EHTtq#v>=YCq|*!mV9WtSv&o}*QlsBa>x0%1NW+Ow-l@pQCj4Q
zivkTXjY3eB;Mu3O>X3@&Q&*4eSsj>$O1%p<hS(-8nLQs~r&+jrAL&Ifv|tj}#6e3I
zv)T!GLS*^e)gg&Kb{JO+E{Pk5B3NUZBH+|91ngD{aa`zQ@o@Dw6`q@O<sRv~01y60
z=wrKvNVzOk7ATILM|MlJJ?&DP)xsSk%DFVw_cshal9xVItBz0ia(dL~tJ@iqlWPzD
z9%RyOz?^Znghcloeqg-5M0~43JNSC<Sp#Cv=HS#eP23bXtq&c|DRK!zfFUV8iYpmx
zxo}~#qzg6Y@NTI&uI3CCQ2y*|Nz5<K1TH=%)DsYo5T=KRQJ;~87QLUWTMzgG@jH5-
z&~xN<-_O&Ul4E@fIGv9@nwubnu0jn+9&b*0>ERQmcgJ7Jm3t1)^i~~jGd;B>i@(%1
z6HiDMeBb3#I6T;Uf6s8D=Uq;JJ)L32W%PARRxQc1l-%nW6Q7qah&QOFfM^RdO+BAs
zsjF(s4tK3-EGnxonblOsV=P%ChI9-zHxyNLx>CS^*W}<q4|~nHj@aeCH4|_DjVW<6
zhWN0<i<2>;>km6C|JNDi3y&K(8r+Z7nEt<;Q97FGGyKzx@)FD1c1`Ne(`Tr3i6<b4
z#0M}wu{a)(Tn*kIC$?C5NhDewsY1`OSv>u?ZOgVNZS%21aNY7+lej50>v?rGZI$6q
z2UjihZdVl^`-_mS75v7M$C%1w#Kq_%&kZ`lCQ~Y-DKb6A$}SJa1Q(xO!8<B9PN`f5
zT%>o?)=uZ&NqcnKjKK50G-nRbN3~T|();euo#{SyKj>p_y_m*DN5PRlr-~SL$}0d9
zj&OFbcBaR6sz{F?kBU26o1$`#XStN&?J?g?*fX*D4w5@Bgdj9VeZU#`Vk*e2t^*Wy
zwrm@W>lp)NMuiq9wm^SwlQfqb0?E~00PVennEK#fN_xUVC&qIM!r-1|fUTUy(?O}(
z!e`H%cM8H@5H{BlpV#|!X+K4mJAg-?k7yBtH|E4z4CbiIuuu}A$F3EqM{<a-$RcNR
zM@6i|YP`?+5X3k|Z*D$Doz;L5HxQCXqgx9d+PvM1<cb>_H&LPCvX?+eO)`-z1B$2F
zO11MN31pbx?2SPJm55`Dr@c)RhKb{G_d;GEAoYwzY3weIQ{8mvch`r_nUV|9qEjcv
zAO{*$Y2fa{V+EKLxVx!sP=<>=0$T8cO2?2l7{kdM$H9-L?33hAa!siD3<z*S^f^S6
z@C~HVAy8?dK7}8|^a%}r@k+rdw4($74yBUk|AJuxn*#fbQoP@=+Qh&Bm_tXt-}2Le
zDfr9-Bz+P^w=G+F-v<M>ufLrs)rawD@64Q`wpp?2#z@La7fFfKvqNwAfH&!yg6zl{
zd<#+;F_9PiA=f*IF-7ATzJ>W1qUvqwv;}YgSa2Je3R4Ab8Isyy9~eQa*#81UJ1K7K
zryEtx(r9wsHp*nlDquhObE%AFXD(%;a&2KIwR30Tz>%H)`{}XD+}2DD-Q*j<`FERM
zH;X7!FEcYvyi_)e1RC)~W#24|ylMd#b1-vbi>>tJR^%~*B}q?g(uw$@(~93|(Q3m<
zpO<OA`tX6bV0~8lcc%aeh`@F${j{`=NYzDtrmtOwhbr=YK%;1hR89Lr8cRodnjJ6R
zv$*jdBMZ50RW`?EuO0W{R!4d|Y$6j=tJ^_9wIDsOYfUj42jWt8TEf`U;Uref*`P6f
zw+LHaJ($9C+rS914XcM0x4W#@7`_)DmK_hhy|)0|kq%R#Vev`t7EMH$!dy;6WF0-@
z%%8t)9A{}DxX1;TmKF{?kzp*PIFb-Ota5j#Y&rR$&d4!oel|Cspyx1=Uz$b><g7^e
zfd&?17<+gZum@nH4gN_7MIEUPpfHgwN3d%SCRy7sE;k2#lFN?C*ppQ?w<L5M9f9v`
zTy(cP?a)N=wdkGPTRkhQkb!32Or|Xv9oRI08KfP3#1fV-mm#$~C|^gBNni)xaIXHy
zTk_-1lo2#LPms%KPbQdg$w9*TPfO?=jNEUjFE%MKK~izmgZS~@mvTixrw}r-`g?}q
zMzux}5F)Ad3`+##l8JjBYQ0Nq9h|?bp5SzPz)<nOVP8IuU{5T%vh$nj&8lG1T@r;C
zQ2P_i+7)Ey5UBYzDVk_iEFx9<FZ=Ol_fx;~Mt&B$2uu;U>>@wh=<)$Cmt#WmJ}go@
zELL!YPY0AIL_w|_*0{O&*49PFW_&C4>eQs+2HC&%b(0$@_1OSd`om5x+>AzS;+oj2
zy=~#DAj#v>-x3R_*6&L`1;$v*wr=TRZ3p>rYz?sQ2!oufQ<O)YV6c*iL!k6^^j$8q
zL^4m>u$8V;Qs`<7*SR=3ILspw-kAzHW1{#immtjfo<YtXi7U&jvA&a=EX&;&rpL#g
zp%!A1^YAKmZ0hu+kXsiQRzWFbB|Jqo|5bdy<TmFb<=HFb>X&sYe6cUztsAWNXU8KR
z*i?4=0}kEee=S4<Wvg`^QbWpkUB}hsUYmmbl=oQIO)O*Be={7`O@Q<jQ$hxB&%;*!
z=^yJ+0<c<n>{iNN38<wZ;|7UuIHM!+poA;5{)+WSM}?SAuPFiy=4?f}^6!tsEyMtB
z`4y_UR_Ro~?iOdxj@Mwne+Os*;&@0C`H3{330KG-Kd=sC%@xK1qaQB<?{kOgC?j+Y
z(Tex1^ASsqNWf?s6gN~G^vOH%w?MYYR|w!yo&TC&U|?WP=2BP8dfYDZvtp-r7|Wmw
zY*g=lFg(Qx<zI8_nd8JSpr@KB>`-h0nrs?v#)Am{0<z5V)qN)0`h(NVbT!9EU{Kx$
zatQTCbwR%=WD|hhoOERFD&p^1`{k3?f!Ngv;F4}dL|ZSWdj1i?v%SEzua_zW$z0$f
zMK!qyXbpRQI$CCE=w<xqq?lk9noq_KefL2b=yyba{t@E%+bGkhwcE&Pkf($wT(cM1
z5#Om+5Lk)<BdN$kxW$iltQyN#=U+O@_vap+Taz_xd`HSW9|2*6(K^)?xF9R)3pR*r
zEEXW6d&zO=AK0c{W!gLG+#$=QYM7P9dR0J`MS5L8l_fhSpsi^Eny5P}P&TT5>y$60
zKwgOfG1R>ylrM!qUh($O?NtZKmFtU8Zo{_aDu6TWGE3Aum@{QlKM$NODuA+IqVuu)
z1SZK(BV`@9_-=Dg>}aj`0;1p$6U{OLo`mL4?i7<6Mc2(V1Clph#K8h$>C9qU=9)>X
zsCYHQy!buqqn^a(E%q9InP&v3C^paGNot%n5R0$JH=ePsA&ak1zIXgGZ~E1k{vdzR
zu(B;0ud*#d?Vb1{6?O={cEqZ2S}<s8L8Cj{+&m|NPs+Q1^ok2)8$m7oMsb^#J$l@@
zz9*5uE8+E5>cDZ$+P+Bq=N(JZJC4id*7?F1q?{(?SD}jk{r;*vQO*L|9@X^Kd9N#d
z&3!s<ZPKO33jbgifBXStn#X`fkd#xE;3Xjr^-EieYD!B*CM)7api&TC%)-b@%17I;
z^O#Xq`PI%E0eN6RwShdzoE6gN6Xd0ng_1461m2AKav^!)lQNzPa-H%>&WpopLC;Yu
zS&9boj&~)|_yu$WPXXw5JLhu&rh)-f>4>joCHy>z`}OkDbtQS<EUHV}ihOHD;dke9
zZhWyYsy9~Uha9<J-vdr+Jd4q_6BPXq2>ppB@J*!15*@3KCpjC$VMXd@9nVsYpC9DS
zx@Ji*+W;Adz2~!Cg|iR~)({p$o(r_vF}1r<vdsEzPxGJD-3;9H<N~G>hLJ1pwqX4-
zoo;w6n(5V}t?~5Ay(|4`>n$VX9I0e_<RdLl8|t+<Qt0%`b4@DurCEV2pp$dQSc>Qp
z<ONrmAx~0Tjr(}_E)8n4g&ZKw8ltj4zSW5A!Tf~mn}QT*OkSJD>lbW`Zts@}P@m|8
z7WK_pZV??U(t`T^A>)R%N7&MKxD=a#+oT`>8xQjx6f>~!>apt%=jwG~i+B{>X7h|+
zo+a*}H}lS!^;&OVSRdd{*=t)Po+mgqDc$#J@bh#A-7(KsNLAAf?!ZvEiwA>k5k$jV
zOzRIvC~H$VRdQs{s0W*&PVs9u?_dncUb7Cal>MZz2}34rR*4+$W(Gpbnlz@=ePwo<
zVA!@pk+-TS9A^U?&z)iKt=gAlDzy@l=UF(EGfuQucBBsATI0jgACo1$FYt4`txg^k
z^-oWCojph0-sf(Gys~HAQ5_fiwD*^?SB|$i7!`N=roY$}t$QQVAtpFMuw%eXhi=6`
zg@Hv>2lTrLI{nB3x(M%u&|ax)jYq?8@3g7rQuo1^-iB$DnuBdMtJd~Chx8Y}t!*Pp
zIvYsM+;Ivg_kmI;d%_18vo}7Z8@Ggl88D92(qj@P5W-@rZf4sdoL{kJeWoE8JdE&6
zZ1cd$a3vlbdjmVDUsR?&TOW?&tr^YZa3l({P08t%9kH{cu+#b?Z)BA<rSg=Ve2LSt
zZ&QjNfMy%q+v^5W6GlSgaJk1o<5cG5b^-~pk=K~wz`y-W$dr0`Vktoz=U4G6JaFOi
zIKQ<NozTbt_IinOb;8NY2vGGLHo81rWtXVBW$adWst<lUz9zcwX5q$|L_*+ij<$`s
z;PE6XPuDRpEk3+e<hMIj<N_;KD5L?O-+;3cL4TFppp%TJ7#1luXS^l#zghQQ%wz?i
zt<9L{QIw&L&z$6aMdF3WFYlKy%a5l+81%J`cJvbCOD#6a(`94}%wZ)G;VzKJI5s_c
zQJ}+&ic8eFmX(FQaN~1D^ggQ+__Flhq)zA^Nh9+)Jt#sQ4aw&iH#F8Q?SwMoE1WkQ
zZQ*{pkv>c068o^<o`h5qa;(ZHD^CVL*WQt1;c+u=bs*?n1zyjci!EYF<{ac0$9dc8
z(_McA!q7XDJvuI>?Xfhj8P|j(>MKL1-!_yUtgE#o9jo#67`D-5U5QdMo1x`4=X6=l
zZ_mKc2GyeuL<IDUT$J!L_LTJ4v{#xWd!E)Ot6!B&c$ln8r6jC+Pk$Yo5@O!_y5S*3
zeECzi*h$Frn3@tRmwR7(9jKP8Fi@8%TzVdp_9!%6-hK?+Cw!|nH3E^`2X`&Fg~Y3?
zzIwDYR^LAAm}?)Of6jX()Qm78Q~I87`n4o&duzJ$s_wF=9P|kl<sd>o;U+hQb3qoj
zIJlr!*{5$wa`3nYPAoH*Q#r6Eb|y}fNULl1gVoTY4oQt3CDy0wclV$U7<?6=y&kEm
zG>-2nT!{OYs+7!HvmCp6zi8w8EdSYlB&>$VyuH1qJ$MPw%@{%<#3LD>BtYX!)R`u4
zp8%%0m7qIC*1U5oN_h;kcJG{*d>{PFt#f+lZQ%Lod3=ud-NgJUb1Eu&nYN6=#q|yP
zAGfgoZypEtzlzhC+Zb9o8yWvsk(|OOaSbsL000I^005%@?i>2Xj<ja~C)?AdqHVh_
zg5b4WqqaiV+&eDrhbH_f6lZ!05U%8&h?_?NlFlvsN35_Ho<m^ndux^0nA%>ekzyA8
z-K~X-i>XEH%!ECcu&5o+x_0MLq@=Cd%(^-Kud(oyNCGtqkIlpdld(z9oHG7d33x&R
zSH3!H*#okzd-1e{!btmE#~Pu!5wX=a3>e!0?-=#-$hg-Uvs04x!XMY`t#3a*J`UT$
z_>Rr^sG73*rfN7&{71REY3WU+qdIFTbvccL#lPuN{LZT?Y0X?Q#bOo2lKP9}3sw;2
zFTSg+k@eJ$4Xo<p7;r^N#a-1d#pX^j@8v;4H0jc7YSe!ZT{L;q_K=N@<FIAQtAa<@
zPmfZvvAhMViygcTl9D(K*4zDa$v`!SrST_#@gI+zFoaiArMMvIS*!s^DCnH4x@*Mq
zOq!*qWK;{-(sK9GD9OoU(_8eOrHUneOdhVsoB-$|OH<NQ)H@c06S8eC!O#`<3iGws
zPR0w@-&SAY26Zx~cogsQ=@*BK9fjhqn3?t;T{WN>b@nc*Qj2-Te{o*am-iir#iYMO
zmP^bFM{7@20h@Hx&n;qxG!LE|z>ybQX1bs)9k#pgHJ^A!opnvOF2tI*f>K}A<)1gV
z^CBlo6%nCslET~2K%BedY)b0BFzf8e#iCE8)MZK`r;GU083@~)7_vzjaOjZ8S7IFX
zD~om4n%cCI+}h(o7g2<ZPapY%;6V-Aq>AP3$ee&e>xLlz@#EJ|q!%MFW#l(P;%I(2
zmkPf!BQvlK7j>lpPNT6N<4Oyn7$I<_IGx{!LO%Tk#8&)Dlr1WOaDHEO2c$Y3#0Lbv
zNNP{lAGEj#3sn8H`<!~nj~iXe5U~1+9YLGr<k6U>b8y!Q^9jBZNhZL2CpH~g_D;YH
zCH8PwvgD8Q-ZE%_ome-QBYFRLtB3WR>eo(sr!bAlBwlgpkQynYI!OST`~j1(h&)ku
zO14}JiqLp_i(Ef{)?m}2KhU{d<fB_2Ne0APSm^!`cbvT26ve^`Agh06gw-|{Ua$%)
zPQ)JRem(vZFOEkl)WwKZt@G4nlsx^c<TSB7st=i|0VPVpZyBKzNZu%n6Miav_trWk
z9O8~Wcv>pDO0O$4yYpmI*vpl7Qg_j6UwDih{Wmw};COF%b?`28U%<}}f4Z?Eb@Vo!
z1t{I3B`3SECd!9X#1Y|UYX*I~I~3xh)??fCq1EPUs;yr1upUng2@DR<7#y%;H?Wb!
zz7A<$m>Y?O-OoQcs;P0tng=~y-?z`29T7rQYn$UX%PoO?W!34QP^r|P#xZrp_e-YU
zS}ZMr{yhA<%CHjFu(h@Zs_moY``IH{<l3uH7-FgQzo6`237@i#$0IwJgj;S!^s%z}
zbiax5+P?VQa3ntL+`_IJbsu@*pI>x#RJxgEbl<M+df-<lUTkAiQr}FZ%@V8IS_Qv=
z{sU_No)O$^fxCqI0n#-%008y>07$x~|4|<Cf60`j+-I}TiqQ2=4YoRAL$Gp*cB!w3
zl1sW~LMTZ~NqQ?TN5V-)6%iuFb&mG=jH}?VN7C^}2gxGj{-|q&fujwtk0o&)C1$C5
zc9?npmxz`f;e>`u?Hn!wm7Wf(1}4N~UK57SnMU-VEZ;M0Xd@V=&Cvwtpm8Ov!7;Tq
zCcxTetY#UJg!4R##dpOLycRTGm7JY>S-x+ik6bvh1;1^J+yoI9QS}^6M|EmLu1C9C
zi59tL7Mw_srGU9V)$zP{xoh=Y9HelM;;X-MDV}xlD+O0iHLR7CIU@naW%_koxQweR
z^|wz8%I)=AiiY@*?9)Z~%AOFZHvf*JVqO#dy)67>lnZ1#fH|2;Qx3lByV9e9swb^?
zZaoa-ZC~7xjG42jpu*e%WA5Q+|8qCLeC{a?<*6cF=2DOS9SiBwNq;yAQuG(x=m$x3
zKS=r>d-y?;UaZFXS#3hqubC3oKH$03Q$5u^x3YSMndxVOuNAM$;CS@lFs1H|OS6eA
zr^$^sF5+NDou^kt`M;S(%{<LlFpM01fll{9<;<ha!=+9Ifs-z45+|?&b%XffoY`qM
z^y`{N55v4|br>eFlR7Fk^R)_Xh!-1?O`naJj)WAN^ngTJ#;!q%y^rA~Ej0OvQp>4@
z2*njFruV{N5zNsP=)dD33dDz3nP(JeaVAj_)w~WJNz{S6bnU4?3UO8(P?-h?z%ofN
z3xGDo``KgE7~ugJ2*jDdks3%R>`arvx*y*q#7t`oxwUr4)9O==Ew>$p>p|8zVlkUZ
zYKgcF_3@D5Dl%&n`1?*HQXvfclbNxI!7rd6lF2YbLBkA}7j!YMQHT$U^imZLB#Id>
zJMy+d?XgV!sZGajc9rrIMw#J$SDKA(1Z*iL3cqk-=z)Gxk4UEmh0=^=dSK#jYd(zQ
za~IPeJDsi+P!i>YM;g0}=w}zl6<o-H9JbID?t$$oxjj4Z179Q{ZsW<%a!T!cq(dJ`
z39Vrsa_bt?Nb|lzb9M=4#M1Pgjbdk$>9BGp-!%<5`@Gyk?AY)#OlS3Nu`pr~&-T)H
zY=mjg&0Gl3kT~Hra7YWB)t3Rc8wPmb1u^YD)poz)_D#2?To;43Jx)aU!+pF0WdMfR
zAd)%I5BT6f^@U*G!G%QZ0%UK;&Ve_XTejI>D=@&PfF=(P89V?QmM7T`w02dc18=pe
zCavw0GHmH+4@#Ln*AVrbcUj$%W{wh*eZ9y4ZA+$LtS;zq;<*v-vH*NX-z>wA%=CPz
zsJ&=r+kCWGe2VHX^4*adOpN5mS>xxnR1g_aGdDprc$Qu)^Inyr@*L-@WL0it{aI=4
z#{66^nXzR<Lwy1p+T$r=rEl{w3}m~){?BZ&e7t8i{$UHvkJusmpRna09moHK6%}dQ
zAFS{!_ZY->T@;r$bWnunbIc(bBFB=dCMG<N#gcN8S%`;-ar|KAIxFu$ZI$E?Sm;zt
z8rwBbG{v@7%nlZ#@n2555w6Txui|<Emf9+8J*|M!N{_)d-4=EWJsot5jXz+k^60(8
z^fM(<9{HrY8J%G6j4DaP0~ej}-I!4}C-3Cw%J?!-J{#&UslEX<IefmapnN{}TjJo&
z+kp{mvlIpC1ymcHpXBAU!>k?)8rrI{%Ak!R{?)yU)(O-t^>fO9GsRH)c+ES27e%+7
zEg_34p}UscMKJJ;q5=XfB&@5bc4ik#k-=S3)Ia1x8@88a+dYChtD&UDhuy>6i|Tzd
z+xp-yU>4Vzs&Jx$>RHf8S7A<(?3&AB8kg1=^p%>H+V1FoW3Le7<Y_^1`O~TEPkH5>
zDzNN7m+6i9|1zbbXf})6V#=U>O`HEVT>#Xg;IC;ay>C`Znwma#2^3Y>mjN~osVZ*h
za)0Uuwg*3U0G9wmA}-SA4OUVw3&o1sHltp&4|6=uui~(*;=E~R5IY3H7XB4nZy~4b
zUlHC8UY69PJj)SM6&4f4n_XsO-*P{?sQE6GHP?cj8aQ6IO0TGh&bnx#ylgiNgIdHy
z$Up3Q3M|RK;}$pgOtb?irP4aq7lU3QBxOoDxktYf27(6Kid7VrO0&Qo2jVz%!;!3N
z6C+H$vyBFsg0u%R=!FP1H~<70q0mRVhWxtAh%mPZJm^Ou14)A77-wLF<yrkBc0#Z9
zrjdO^6j>4T#8j&fvc!mKL<wBg;`;(f%WhH#CH3m0(CQ9;zX1_`#)fgg503(#1N9us
zLpcoh$6B;k>?aun;Xs8zidI`8-Bn|q!3y<%E*3Z;J|ZiG$q+5f0=MmS=K_8Y%cDuE
z=)hCI=19WyOGB(=O1CB4-Zlx-ee@aLr9kE&dol~tk~5;7G9J=L?fX$6haZe}-L!QE
z(<e`N6&>LH6;Gp%p)kX>*>|f?4ESLSrEL5m5vu*e*yi#r@LG@&rV04;4ZB1ATphbQ
zBJJz$^g!Sr%#p_+7?<k0EsQX*w^Mqgiu|0@-!wvASmBg0KWms60C^zBaN(07#2NCb
zzj|x$=Er_U(>9xSv$NS;x(Kel0iHpS5XCVg#j*L<gvYsj=kPmsysx<}%6ZKX=^D_!
z-PuvRJ4&h+wE_If-L|*oUH#~rZmuk9qmO`e&>GmQ3;c*ETU0L;1AN3@0lP1U=hv1I
z%l@ACoBiv)Y|FJ3&%yR7;`q=bR@>#0F!i_qf7h$zpLn=|7EyJISG!|A5HC@8bfIjU
zMT`$U7HnE-N{RGZZ1f!KH;tb&?~rDhpK6PBLC)R*ZH<&G84##pN?Jfp206bW&R|h_
za;vRWovJEYRv%$1nl}hA6fCJ-S6!4&Ne}Bo{07HPdX_rSkO)5A2rW<`_y$sRaf!sx
zih~}ng{i;Z)Q_Lu*R~8gc0g-dynU7htCzok|1+_0in!SS{t&DD$CCa(QbYfzO6#Ao
zCGWV$ir{msdO-r;HSxOB|G?Q*ynty)oy%d^kt`nF?S`X?lO8ao7QlS@(BrDg>K|mp
zcnC;i{=9zu-k6M`^{@lvP{yQO`7Vhw>qd01z*<|1ZI=e1gZYX(qSG~00#@uy`L11>
zbFBnvgI_$<8u!e6NU6O@fY%sjd8y|z2MX`;GhCXgV1ti(>t?>Gc7q>~&7tMnTQ)U)
zIdwSc3;?*Y0A&>yByO^Dsoz)-Gb(E|U)=m#+8)qJrC&i>3gy&g4P|b6rIf@5PZA+_
zoum##Rk-b831O_AVv!e~Nslv%4T-&4nZ!^ZB&}GW;6*>Nv6CW{xm4b*y5vf6R<4v-
zSe235l6;gBjm1q|lBaW_j(S2;*|L^PkU*^2KXrYE`^y=w2}9Xhi4Ye?4od|>l;Tgj
z%C@3{T7%l5#jlL73aQ$?I7&}4ilz;s4pBzyJK}<G*<w(3`T!XVb@cV7N~!McCO{jp
zC~DYBM=O@3numh>U!j|<8J>j)x%7$S#fm~nHKYs$$LJbR#yEQy)f5HK3KeJ_Hq4Cf
zeq7?8LFE>)%3%%h8sKSFmc)51FzZO$SWW9p+B+7Oan<NY*=zadEVJ0^awYo3`Dj+9
zBjwHOjl4*SGOYlJ+9fSE{Qx=pB<;Jr_xj8u!eBZmGswKzh4f)SIix@vvm>kY(l2Jo
zB4GrnOz7JN_9n|4c5oM(ne>DN5`MD#e#CfaVjJ{_Qn_4t=#yS}(YU{1APN$H1MwbG
ziWJ8gO6HgdIKe6=yCLJW6XV@D*+}Z#GY>j|I7E?Zhi;M_Zqe8whnkAxK!O#{9QQ+O
z@f!Q!bLeU7vC&BJOKlM3razsq%SXnJ1n3XOR&YV7X~I6faqH`x$#KGW0G0`n$C>Z=
zg{F<1`g<EvOh_NefK#trGr{x=-)xp~nWzkRC`M$z1g;-UA+eG^nT4lD35_qPkL%$G
z^U9N<^u=ReG1!ChlT>;#_2E<|v^R6-=Q_7W&J?8W7!l3OsK-z4C5rBPdTNNam?6hI
zGpx6Sh~_0lMGKE*+Ks_?;KOamU`&%6{o}9}iD;Iaf+uRA{J_M61pTuR+-p+cM=1;a
zZqcHj7?5tw#n?jYajv_Y9RCNtF8AdHxm<kxbpy}02_j|bwYgb?ceMX;S`%*pjA;?S
z*7{YhKzkBD-pV#b*5!y(E`c|tC#PK5>^7Z^Y7r<Z=<Dv1`rfoPDsjH_`-=7R(3Xy7
zXHyJXDMCV+0Xi6hk+xnwF;@%c0Sp*p2{zl2y_ZS)><rv%q$NXo6C?lb_6~Z>!rGl1
z_y((^;aJtDrGLO+MxDewGgv+Z5@VZdBv9m+N6f@S9brH0ywnXJ2KT4dmm8KOuNIu|
zba(x00!%tSXx#G>P**0~$HxM;d#mOEo25yM&<l$Iezv(s!Z_sy!;E5UwQzREJJBiK
zKnsYk8!v;~l0WbYG#rjHXVHdrr~8Une)KYq4(*L>%#Ev2b|3Wk7ix#cUm*HcKjSW{
zrmp37f|bLHD(=CZ496fPIy8-RWC8&N)UD&!a%gur#~>jty&c(CJL8e^`ar3Q9%HTn
zo4v_>hHSL76raHU59g(KbSFbr_2+G-fwoDlN6ts3uUp*a>o?#3%t>QlOw<Kn0D!2U
zQ{#WRa{fQA!t|}IYz_Ze*D3co6tE-k)b!+2w~<i(&E6cqbCF@BXfCIBBaMrcr37-w
zrwY^}AU}M4yF_EZC1Lu*ff1qdeEyt`mAWal12(=nt-N5WHJ@eOb=quf+{<MqwcoxU
zEAMfxL9vcyagP_ev-D<a=h;r_+WPF~=23r%9O)+hYGA3SsHPk--Kjv)?0xtf*V8tg
z7idmJ5oU&riRy*esP(h1L3ReOy4>>R{eLm`j_sL1-Ii`r72CFLvtm1`*h$5DV%xTD
z+qP}nwv$eutIyT_?hn2DPpmcP7<1fXJh}U8V4T0Z1f*$QK>RwFx${&<8h7s@zNo45
z`eJ`K@;jHE0@=;^M4n6p&q_0Is`4DdNq!;F+xaG7u4T>oQUb7wxsv|#N2g;wWeSD1
z+)Nh^hYR3594AVbXlZIvo%zqJEn|FNhhlr^E&H!$nW|I`9SB`3#L>sn0VhXa1vZH~
zgGDU4YNkRUTf%b(5GOnj3G75y)R;6<TN$>UR+s9HGi%B!%UgQp>~hp%hHX=P@}&ds
zWFkdqSg7J+&A&CbrtijbY@Fs$+KF1Vo^N;H|LN-uTw^9RL1H!(;w@}2HVnb4^k({7
zvd>GO5&rloVZrUwUL{5)=EB0F$jZx5RLN*=>K3E1-{ITKh%<@B*_}~hZRdPb;;i{C
z8P6Dn{ot-NTcclCNO@s8v8KQC_N5i80|iRez4$B*=y}vQawgh^oM3MmC7fEurbLs1
z9p{m0QSPY&$xlr(&^ghf@@v(D3a9VG8)xh3t|V230zeux%7X6c{~l$cZ4q>@<Df-~
zr6u|UGXjtyC{=@uOy!CeJfBXC+3pJ)cL{B_q*Kgg&poW1!E7Rq(X<@Zn=C-Hi)Dg5
z7p$@$^nD-|9Hd01&XSJ({RHYY%nWNjI+x%U#6C<u2;oYHafH)a=Q<W_UBZqSH_Vj>
zh>c_~K*|&@G6ON6G!%gTip-}WW1od6fAIz-+a)8h97N+8X?e4ph5y=N91J|5Hi#}N
zF{o;o2|TJ9xexf6>-O$s2edo`SyX#F1#cnVP0`kfp)`WmTe8q4V?xC>?J2_>(OjKm
zD8@hVtOV;|%H#E1vOrf))acj)q`U&|Lw3AI8R<rMcCfG`6-@OirkQK0-%6(k1c%T|
z)oy5x8q$$xI^}t8^b{$^5QXmDgEGSjvVS&4*ztPbsJ>Uf7SN;(LTNz;Lq51bq<t7r
z@cly<p!wZ)=5%SYWT*9|f6%oX6^>s%N^!&R<D;ZQmKJ<LjGdKE;2!5X3#46+QSS3{
z+4N-b=)w3k*eBfG-X(4OTkXL&pY3Ot&i6jk)L+`(xc5`_O__|ULXTU{34qXR@b<vf
z$>5`b=l}9LOhkOXru@7NTxdW*#Q*Ky_dn57|9g5GRNJ=67f15i`amsAMdv0O-Quf|
zwJ;+!h{qUZ<m-tKZHNoZz09fY^&`WyaQuGvT-?O?u-N0wbZ`~VX+JBkE-Nn&+tAjX
zWfe*E==2;!?jCq`%QQ*&r-%|xfkt9aO2Cvl6f0fZTvC^UFPYC2vNacQq3ITe4}Ci&
z_1O?%57ktNaz01I9&S_X;q2(>Y?bi#`cJc9TvZ~oMXLMr?VR8G=G^%_f@-xKmGU(X
zN+E1dhNKy63|&HFj3`qzOecX<Iq?^re5xv_)=r{pn#f=hnrm;#b*V>ThrIW_B-0p|
z++3jDY+eaM1L7c8q9REHC7>k){1r>$1F1*7^6r^MlSofJZfRHE&4TcoVd2C_OX4-}
zAL=orQMqCtA*L_wzUci&WV5s_i)a$@Q=i`-jX5aWh`AM&ugiG9Nf*>Y3x$m=<6q&G
zISbM|=8Ctq%SH`%QM1$Wvp}%KOjTsAT9vVX6+F$IIbv|QK`V)kbg?SOv=3NAxY!EU
z?+R{hX%q{mkklK{CL*%s3Q#so4;D%b>MFD+S)6nd^y&&*cRVCt$U<m(%XSuk>mBJp
zPkjh!k>$P0Q|W5Tg_Mt=U#HCU0g+>oA)NC$sQ@Un48zo^raDVb6u3>FU)O{lO`gFw
zJhz?nS3Q_BpU`Z$XYTRn+nzW<EDxf;hv7%?;A^<xJfFR=+`M`ivM+$fvKO*=y$Fxb
z2b}$Uc(ON&M@K;MU|ya$95R7s|G)4aw^suM2FsHm7-p-SHN@yleZr}s%pKmz=<T~u
z$J+DN2&`_xC^$P#KaM|7Pk{{bI{fCBgV8%n>Kih>ZOA8fi-5OLyWG?c8jfCa2K^LA
zfu3o!sHKuhBylwGs#D4pu5IJBSX2|3H+a?cgHZV5X059}J)#5yt~!czM%Os}lq$IO
z>Q}h2-tS{wB?$d^u&4OX6AE^&VZya=_^49;$4v5n(K#UV?*tD0W+yZG$FM0(`5;l>
zgO}U_(V{vzdF-$_&`yGyso+q8!B#xma=(-PA=YyD-{&Px-1h16VLD9$AdRd{;gx$j
zYXR7Z_aEp(hb|@eH7BkodYi{U<t3|R48Xru;Me17!d!xAP0TKMqBg`#Hk@6S4RcJ`
zZBgLYoqs3UHQt(FCl!x*PNCV(M^^?kExg9P|9RSh)&qkvJcvc{wE&2V)bO)_>s^6y
zjUGG1k{Sp+vEWPvsb=41{LAwibV949QeKfWCS-4}&eouo2*|773;}qnqky8F>>OXE
z)%b>wJ+>X7s@Wv$8MMc~Rs>lj$Sa@HYN)ie*+Q!b*0ZEa90GOM{w`ss$SW}^AsR3;
ziDV#2PnM}_1K1S1R^(S&;1cu2cMc^X1#;ITA(lu|I5gM>7~oE~)bDfL&aVao9SrT|
z`gDa}T9Pt-`T>UMH>GF_)T!3Nwg51&%QS)i@(ksH@3SpoM4u|OjR+8F$>Cnb(!&`T
zJ}s#z=?*!o(V!Jl)CLsA{~VrC&=gLbGijXpTsG7I5L3<lg+K9aTSqXqpzZmrm@C4K
z=<FTl0pb55N9l{|G(=Ap%cAqKmwpqLYUW%8w?@j`mDQgLBjqQGY%BkX;q_<=Mz8vM
zm3oKCyqe6`=tOp;J*#2+W_{bdTI}MTYJk&3T(95ZuK_1!_hvHrP>?t81?lY1K|5{a
z;*Q2hVKG4BKnqW3$I#@@u@4h~Z4~>JBi%RP>pUSdfSt}sRG?Hkd7L+rL1dIOb<4?A
zi3C0OPT|%F%&ExSoXQWEgUOyYDXLm{bY&56TwfT|0>m?&RtlIxRu#rpliD{AtY8g9
zk{DwzEX|b9O#Q7rwmj8Z79ly}yr;IjasMsptkiRVjb65W$+z}TF#&)kM#>Hqk%k!c
z2mU}?_KRD($+!W<Ip=RP(Ic?GSps2~@vHlgLi#<rm;yw~epMrS700GtK^H0S1mL)U
zW9%$7MIWe#hoM)gZL30<dA^uuDPMXcM|y+iuO`)?d2ZmNQ58SODgdnPv85~e*L<d8
z3VfV4r#{J{mslizI}{80%gIR@<gQ1urO4&AcBb`|SJAl1^+x5NIWtHn1oKPYl|%mF
z&kGt2>?fcLh$PoLL@iN==whzcXqUQ~U}0c)Ag4GJdwegdtc-H}yMP&yTOJ_p-|zh(
zty2Tes}&CzOA)9UuN~z~Y3!I!+r@U$*t}_1UI|4S!X_uZF`{R+%a)D7_)PSbmzy^t
z9}8=y@H|F38tava0T1>T^_ZCAyiXd8k-7@paQ;!RoOE-rx(iJgr#<z4ZmJTc1BrS>
zM~i@_A+cx43oxC=6(lZ<=J|qVZw9J{%i5Ecl`qe<Tu%0{^2<{F(kJ=Hx~(g?lqwG*
z)mWG}fbFb5#$Ht&DtpgH;F1bc;VCgj6<*|*R}r)HyfIuXoIU~^Vr8TtY(099Kc9nq
z++yU8Hz?~m3T=LZVd)rucI}(<_!YlJo2sw~qE)K!{h`Ckh%&ekby+)lehxP6J&%I%
zw@V){M`zG+YyaSYYhQP?wh%3X2wLUWH=ox|mWXQi$H^5ddi3vGbt8$k9g<o6<%u2s
z|D6BhXlL};e>4(C!v9Mk>HnYq{};~rfB*55>J~QpEvTPax&jj(YU}cGtD6Q2ET4HR
zl0-eVN)lPCITSGJdAJ5fqvc{q&b8m2$8iay>UYGnH77vG>DB%A^z_&MU3gkGz|aFn
zfyJuyFLddnZkYqp1DtZnUOnnrCzPpKjCZ;sBNNn57#qbOk!?Xl&`3wt^%>R7{;PJj
zfmi3@=RYt*X|{Fc3LU@_^xH)-y{=csK(=l~cGt(tz3<{g1QFS?5zQf{oUW@&;Vuqd
z7>(Ru-U#T(o83rQgg?u891*D5nR>{IT(f0rLBJc?9ePs19Wy0BP@OziEv$ze#{ZSl
z1Uu_zox6{*ngdbXlls~_e(Co`78y+sQI%J~fzlAhialTA`A#nydKxjNQBSJyBN^Br
z8Yh&$@~7Q>3qME<YVbo5%{U<10V4~E5b+^SFxREjjYoNcA=0g|O8`&R8%|S{Btu}O
zImwY?GQW+Q9Ui6d2}7LE3zCqpaLsr>EY;rsgA`F<dD*`efN#t_NsZuY39yohlk9^;
z2XIb?e6o`Nd+6*hAP{Ah%L*H*S6oojCpQBl(`?!?k|SK@ixzqSFyS(2l5?6!>NAWZ
zB<M;NNkveh8jmu06W7l)4b{QIkNg-%F_1+@hP8D~H06*7yeo9}#m-yo^R*aV{G9XE
zPa{~h>n1Q7mK>gLP8aXs(Y(^b#Q&29g_-NT$N6+Qk<LZe>%pW=^F=Z|G0I%;<q4o!
zHdYE=jg~XSc3J6RB+s&HotZM?$cnre?d<jGB~yz2GxU^ysb9p-da!hvXz4bLM{Dxp
zQ{-w9ZFQ|~?P}tVZ26=0uFM(9{qQCGS63WX<|ka!+R%t!MVq*B(x38K+kSyxj8{}I
z4H#bebK=cs&Dl4QfEj7)Ia&CYyK*-zSjRXUaWBm<o3`@K!p0$`fy~$TZjf7;&ZD2J
zLK~z`)#vJKpW`!2_Yq*HMjv&O4xTisEX=@1nQ_=xh#9~aw$%Sz*mtIy)V`lO2q!=e
zHfB^m%>ZmxT+SpfC$+|V__8RQ!J(9c^*y>XTiGZP8-56r|KzfGGan!i_1|F4f2kvv
ziz)8ThoWF(rE^UONWH}z>(|)8qrKrO)-0rzqV5a&3RUwVw+m+L$f&W^UJXBWvSMnm
zaFOQNG+9XC6&bd(4F65{X0E-L4wGB@WqoEbnFH(EHPK~wbV98s3X*@^Pobr`9<#7>
zBY^MIg}sc9j-EZp1os*Tdr8ia%CF@iDmBn?)|0>y0@boAr=Dh0rNg)A_9Io8wC}3d
zbHk!vpXg6|FaHL_MaUmryK+pw*xa|MP21-w(jJ+u>1fgo5q!lhPpjFh$5^wwGSRQH
zBzL|k<nkmybpY110?e<WQB}rk<qLQSibE6%VL6PNZk1jxi0+hlqe*Yryf$6av?2UD
zI6ZV~|N6pD{B{|#mKI#?#gf*#rKU;Di}emBA*9z-jo6IkLVhvLlr8ZQBsf^l#cHLJ
zuE8XN69EYT@$aRTsvP0)6%njEP!Ia!=aY*BJBOeiWc2k88oyhNB4y8%v)#LW4&!e7
zQOz^C3T6idIqj}v%)M~-(|#=_RZvUyN>yRb>3bQ&UGw3hndKg@DrEoOMEVVU4sV=(
zDbztp8{n6Tw?)E~8=u=|t!&)gkinEe3>eHfN4PL)2d!LeO$+Z|yPJFK8*(N1N36(}
za-`wsmR+Q<59dB_$QKu;*G04E^OO&!7#Q(5LgzF@H2NO<!hWqveNTqE2G0)o5qMBA
zd))k^Xy5K)+%hj#2v#r>u<EZpxT9Svuv)wGM7_nlhJ8#E7rs;P#=TW|>apY!4__<;
zEs4l3>_eAtSg)5sT3>zs5$XF&5UEr5+*S+Y^@JHVI*wqU!M++7?qYS{udwvKfjeMW
zK1mqy41c2<2azH=7|(e*@;~6*IRirR|1FAME2;!%qwl&8$0B812a_rs_yNBX4KA^W
zMdU>|s1*hNRpH8%X%gh$mu6gzsm%7yJNGSIL&C;d>MA6uOi$gT+LLmjL;*ThurzQ~
z*of6c87FPMA(|S1suI{r5<oiO*yQZX4l>6!_OG=5a<)uY`$pD;b?hM<uoz9|E7;${
zw39C=Wis%5R{?&2iq0&+XN=q=6YE6bEX`EjTjW5YD3f0xoQGPEHH@EIC=|S*wIH5Q
zP%-rF4jC#-NXi}7Ed|+&+zZB6So>rAXdv|}a`{gyliDkDI@EulVJ#Cw89gtFt+)5^
zzGu2c)=f<gy~*>gTRs*4P+LdfXsSKOdO<KR;)TmGK2OQ=1CQK>vD93E)JyU#sjD}c
z;T;k+jzs;Bq!4^gi3YA@fP}L_XXr~+2pNVzA&b<W6i(kE(^}tEUSV2wxqc%vQ-8&U
zS>DKTlFpDTuW<}wR!%{c+vnIXG#q2EZ=;NAGc{wQ#-7$O-J`RAn+`|p##|LgF(GO#
z$v})Mt=A$g#4e6Iye(+9j^2IG%!KS-H<`(?WxwMFw$-OFB~3$gjZ4G^wq>}cUfgQn
zmq#0!&gYHzry2$MC7;~nyLG@@&w8Hi>hnT2gDk;UnXUBTtK!RL(Wei&l9W#OB%39&
z8vV~hp*ccMF`RkX=fE7U;E$2U%|Y{7R_N%=#i^9p!+q*5NRDs&(~kLGtML=E&r5{O
z7Ad!LeG=C>)WA0uf;Ceu-6eUki?1VlJ3D0Av6b5DOAM79#%9(^B+-=18FMjDQ>?cZ
z;J96U+2B`F%T|mJ)pP+P3{K}p<hU6cq{qP?3Kd7^Bs6(%TAlDi=JuL$sK3VE^Y@i)
zo`~%pEd}_w2~w1_tIu|flYvj0KMGw`QK?!1j@dA;nSxA#Hn<UT%lX~-bMbY3z@AhR
z#$5`hf5`CI-)k$+Zt_*){Lb47Asr(REJlbVy1b7)grZ-JLncF*2^Y{~36*#2mwVB5
z8j0suqxT;aRGcStUke-)8DdnF<!%rJj{?LQ<`%Z+T$OE<asZoC(N)e<-)(p6XN-Nx
zsegHiHAq9<=uD42EA2~2I6UM9y#9Rb$N3Y=8S=k*tM*EqMj|J7wjEgU(t?y_L_Wwp
z%*)a<s2SCC$nis1L%r?^qC*4ud6mbeGU4zM{y78fWT3<JJvnGr1~AVjs8>40G1(cL
zx8DtmC5E3Db~d9UcGL`~p2wDrC5Osy-JFqvUQ!%-wOsnwNr$LVC_V=`&F<<Pciklz
zhgC-XncvMFJ30*+TdtR^)B55lGz%;AAWf`pe?Y?omk`KJASgkKvnWihp=TjHbd61t
zGfYtVxJ&N5-(3FsYWxc?(}sq6+fkuXs*06aAXe-agexJE#ZbWei`4(9J-MtR>bm5&
zom5^t^r;W`!^~@uBaX!23S5O~tTfUh^xl4oMC|@woc;}7@(U;hu97oO0m28HmC(!v
z*Dp-XQ-{Op6-g6T{Pi+7Q(n&<@hw@+>E7k~X&yMcam4)b?4*;kum93|%8`B<GV%jA
zN5}a&F!=98CPRR$t%HrOg)zX|*z*5Sn<mvKmG(K%y6;sx&iGj5txs0_@scVlnL>e=
zgGem6Cv7DmH6@fe0Aq3bOq%!I*Y0sR>!I^K57vtSAWb(n{O)H;dsnYt$1zFkk#tAX
z9SJ<$YP(34RUG3kkl}eCoqJKH>UEQn1$t(<hcTTYFdxt@ayC+5l2X5O=YH)~&UsYw
zKp4CEjwh2RA74%6tXN9bYMstMz<k|ZuG8z@F6%~T{N|tTm8Yg?-8+Pyro+h(F%djf
z<WbQ;K}wm(QN#%VQBgJ?n;eUeso0349e7kZLCsNrXf9!~Q%6r#3rRqPhgTcb?;mfR
zNi(UTgl>Sxe+V=4{~2WO_f$qm3j!xVa1{pvrz%^&(v@JJ5|rd=%q!=Jgw`a@Sj3qZ
zl3wbH_X3-6SdxNi8pK<JK?DV&E<&V;msgfmpp1(+ku7v|aDJkEO@B&R1(fQc8rLZe
z;jdZVT9}dq@)0?d>WM0sw9NmyUn1cu?#Mz~6uDBWRXL4lk_}lMS&qjI^)aF!aVUs4
z9Ti~mJ_n$r&CXy}LsXh86&`9QK(Vg&As4#{mP73@^{dF{`lnSwPxk%_(hn^q(lM9$
z0oV{K4hnWFs<o*7Zrr65!OB8G@gp5fX_zfi9?v<Tiy+L}Ac6Nn0pgR(AAPpPfZ2UR
zWdDsJT@<b0;-1{IX~Y7Phw*WXpgJspqB9*Qfr6Ya=M@pmpUUg~0nuAMPZ466B8;#l
zCq{TD1RTpR+eaYkFyudLi4kSP`v;F9i)6qEWh)p`kqmh{gpUU@9=ioTuNSxLZF!eM
z8ZUArodGkS!vNq<<eBoOfCTrCnBVV|CQWt^XrxOY176h21s{f99y|fM_gOFFkH>Me
zD9QXn#P9G}<8{3jIC<4?HxxB9(`$wZKY_j3TiXkr5lLYrR$NyEIe!6h_}*&Zv_rAz
zEJJMY?=(V0>%N)pXPe)KL#KqoxE?by{^}?j@lOzvJnd2O45_5R8?t0Vim5FF0uQ`6
zAh)OyWVHe|XyABb5*|O-g9HvOk<-id93%(|mn0#1t1OV@`^<X)cGo{C^6L0<@UT1a
zwT#$^>B7+i$u|sNH#@s@J&z$kY$dO7DHy;wBvz6MVJ>8}hWa=gQGM%rJP@YNf)RLq
z91LzR3K+;Trh)t~6s|wzi>3mb7e5v_@4haCO%J}87@Ls6{s|++-ppW(fUWH@&JJMz
z?%?2{UTq|TUJrp+Hh%OYTYv>llswx`LcFUvY=CK!nx-XNv9=e>uJ&y~!!S|DQPrhY
zY>%s8%ev+4iszn|c4g@26wf|zF>;z!tuUdKBmGzX2j#IIo60;@4FgryUp1;O#l%3`
z<(2^B#KXPkwi+K|U=nkyw4YkBu(O1{*F9<g8|dX-fHGM|OU2U7HFAIcLb_{qQ6tz^
z^eD~jDE=_zg9@xT-2pRI<2eeL7XydWLcd>>@dCi1f~K;!Bj2T-2OTqyx{kU&JW=yh
z2usHOxDr+BGpNUY)LV%9i$m0QLpZGH8B;s~{OA%b8f#fzZQkix4AuhVF>TSnWuhd4
zUquQluI$6A9p-iesaeLNI{)hU#X<QHE?TFueMA0s3q=^jYRg!fnLGrkgnQ9xSY0Br
zGwU%1jWgqZTdnM#79}oQsmPp6iCurENnbW31u&+UiY`YJj2>hNbJ#`;ggME#sm^`b
ze-}x!*yNxkaD0qJTRnzEPSq~cwrcnfyYM3ANyMI9=;+{ydfWkhiNm+K{uyH4+Lo=h
z)zGzP;b1&3u5^FB-+|wj>pJNcZ(g=TL&kkvh1&Yf33wk4e>TyQSZlv_0dlgXq#;$u
zJxbAzkN14x#NRf*Or~Q@at&iM(VD^*&**AQ@AwcY)UITJ>MMXw4Ilx+lFvmJ#XO!2
z8kJDq*anoc)CpFNp+d=scMrAOW7n|g6mhq5BkiDKuEVqb?*OIwzO`&Ffx58-;Cy!d
zPx)Jn9c+?PjUiUay9P<nA!I{i*1BtWA<okv5D<13L5J}{kiP4Mw(dI)d-x>VIxUIs
zI3h(@S6}YTtx!poiCT?>n|fOvNv~4vg!eHu-e<WluU9R&v~#uC+O_4<c+M0>s9C@Q
zhfz^St0Q$omuA>m>de%kS``j(KT+Ac0Uj2#T5$JV!#Ux2%B;C2sL1suzZ+2`yf_Uj
zo@V1rdnmniY9&4$vjEHDQnk$NYu~DBqWI0005HS9xg!n5qc@r$>1On$>k%pSrn8s+
ztUc>ce6BHEjVAne<O94C;{~K!-;BS)8=#EK9hk5q^3IM*HP#mCB@x0l`SrQ>0CD=(
zc`e;r=S0uN`<^oLxi2={bFb_!CMK?U`+4VNb@?!&wKT$&a_j{G2BtTqxWx*gzRQU2
z93_a`6i*Mej>^^JkyMxI#(vm9rm1f*>mj92@Jb!Y^0*0n9N)HosBBIl6FN}Kj2{}Z
zFw|1%>&_I3pd9FyD)n15^-reGtO;6=`HgSeX81_9)9w05v)2243%mbwwt%N|yvy&G
z%!F^?3x4cVeDN};O^(Y>1_FwE%g=rgrq4OoZ{;1FSZf~h;rk3J9#hX%^XA53)3|1@
zUm5R{Y>h?sT-F^yJV35Ate$w)oPx3DRb~red|Tuf(KIL6L``XpT!Pjzd0T%n1((+1
z-KvQ5u^fn}qZn+(F6A_oUCFxj>JeAKGarWpV|Nb)Xh6EW5m%F+hb6)94Of>Z$7Os!
zlPPHWUKEAQby+mIqB{@G!?^ZMmpIleGWl;>EQ@~m?=nu;Cml~lu5fry-#d*kYbO{j
z2@lMh*FZ-`N11)Y&+7ZU*$f2PDSF4&2x)K=tY8D%@erY0%i<Tmn8;@TKnY6ETZpP#
zA=_Cm^;nDjtg0#LZQmvrZVYN~cF^A`rqAlEO`eYYRzD2;KGt*5+AMGmycUm-j|>hU
z+Xtn?s|9c2VFKPU3aJ04+0ep43f>3WeoPpXp*h%JdC-zdd;|ZdI#+x=L1Fvjzy161
z->Ci{M<Xl!|FGeH8epQ=L=nC`KEf34K&$A$Ny757utveV`jPa^)3s#Hj4<nQs4>&m
z#y4ZjzB`%E(U(?)B{WeX)vh~ue~3x7)pVM+kea%dZP;3~A~85lL`m)l*J^vvcw&?<
zvrvD#ZUk_gXeM37zL0f&w*t*<lWR=Yu<lqwdN~XHtdw9UC{FgCRL;Xd=t#smxJf?j
zh;wiq^k&W<y@#@$O-Kabg<>u!Nob5mku^s>-_|S#m11uWv;Ig%ye9xh6GT2s^c+mZ
ziFpBh95Z6pOk}-C@A$W%PrW+!Ebzp|SZ|QQPM(sWd;iu*88{%K8|*`W=$DYg?3>{6
z3L=P6)8z|kh+B^j(1WsZ2qX)3(CLBRLZv>J{z(pqww0*uj>ry45F?*Q9P|U176Qu>
z3^@}YpRIAI34^i%%bjkfIn4_8BTKA7k)K&z#M@0YW!goWi_RZK!66j5I;Vnr(nN#o
z9$7~%A`z7o3>-$f3O2)hmkyQANKoNX(8^$>I}9bgYmUg7ZOg5gi6+jTfJQglwMd|h
zjz`JG(Hku(n5o22Yv|J!UG$%6s@01TfswKgOv#2Su_*Y*D7oM0QZzO)4m*bnU9ut{
zr-VwT{7>Ppty!7dL6i(Q&iPX3vej=}-sZ~aqY;eW$=^t@7#jEB>mAtb3{7Oj{Z4<f
zBW<0J){Z9o8ZCntI_7XuyhzR7E`THC?AL8^YAhLw??Xf1W_&8AwdQRZc<OhJ7@16*
zv2x&2)afWwQ<UaKWS8d(PTNS-ni*Ixb}{H5vF#1o;O7o1Pp4*ZC|gD1xh5RfS%bqv
zt@}Onr)h_Q?re;>`a`W{BNfmYbF>-wu$a*^YWY%QWL7!N@$w}X^;;Mb%DtEwnJiAO
zM;an?%VS$O$LU9;B1nibO?M_Db0whn<9)49pZt@`9V52UMgoK}PL)2VVyqj^3Cjk+
z=UKE?h7x8B<ue8&_tUQWSa+uCL_ty;ID$TBaj>RXrD?=OZFVuR*6bY3@EY|_Vj|Ad
z0}T}s5SuJko(!(imMVlahL(7PAbZa!c;kSZ|IJxNq!{zZ=!6AN1cN;r{(iQCs)<O;
z0w3xHg40e!t~B7$9#l`kbVk0PN`ZyV(<nIEa)1dHYL*FhnV5L#j7mbE^DILfNTN;j
zTQc(M?Ev+BKwOLvmzjzd*-deU9fg1!cKy}1+G@XO-g$IxI=IB}<2bTgcMh>etJ#Gf
zP(VDd80pTYl15it9jTNzMk{_{>|WwneiS@D{M+GWKC`safV$ycmf=~j`=HR{Tn-0Y
z-ILcpjvZ+++&%QnmDhxzk?>i_!<PGW-im{cPE&taDUwpIWXcH{i&_1Pxz(wHS>vcL
zR3rnOOr?thLDm85PRa2M@%UNF)KFc+(yxGtwMzlx$bmv&K;R`epfiv>9+PP5=NDXz
z%B$!uDGXWWSP+Y}QC@>kp_Ih#4+Sm2W$gO=*SNJUVfZ(m2;@(?<{mvqC(6W6ni&si
z*9&_ze;ys{hVI;aWH7Wc@H5-!v|;S^&YxmgbWyWqV~*E%*x;<wrQJ5$ZJY_??f6-j
zg#y`8YYfRP>{U|KKk6U-xDBaYGDR$DPK*>kd>4)gqa<t|Q=v?r4XQ$fj=yQvQQL{T
zNCUsi^=r9`CSA-Y^%nZ;-C+w4ierw(O%27$PjeLAr=c)iGS;R$LR|@q3Zjf%DCgH$
z+)D{TCB$fg67*ZK89jiG{3NKMnc?!A?R?=Ohur&`*8RYReIZ(`h|eMsc81zNqE`eo
z814fSHha5PR-$zxedVf({zRx92>lQX@`k$O;{#Y~|301m1{o*p(XoE2n)JGwU^6f6
z3<WJ@U)ep^E2kv+oNboh!-w5}>M=0SeI}=Uw%<PKEv)dXndWiY{njv>D=5n^_n8)^
z(;nliub>`bSfN6TU&bzDC{!yXW;SEYGovhCuOAe80Pk4N_1~8mD*$UbG9<r7`>zCe
z=V;TIL1`OFI5E;KnWZYOP}31osT#%t?amS-HK+{iiAbf-54InlyxFf_cX;)iFyqr3
zy;x_{>pJ-2xy$Oix&xsGrgmpZIhfoEvb>7Zs5Rumlx1*s<(zK<cDP@CHvLR!9pHm<
zgxa|!Ch!#y+L*z>4+FoV=1(F^ok$C<Y4xnj-6~S;tBjg2B(sHp3tHkVSQgeXFnWtt
z7FJSFhQN1`g{&x{l1nDkI-@Qm(6Jd9kyW=YmfZoSs6xYSiY-G~ph0jZs1vD->Na4s
z^CC&&<yS3OX7U`N?50BnfjN~y4$wg^oy9_nEco~3dMxfL_IDV!ac@k$7{fLp=V<=U
z4y()>r%Wh;X5`wqNbw^oR0?x8?;2}1>esd*P}$4)n+2St0#IYk%*0UnQh3913jsDX
zRnWN6vSZdA6(pbW)Rz%T)MRySsDg7`HD9iN+9NBDw%M=3WuJGDbxnL1HrBl>Vm^T#
zd?TWjw*yU4w_M70Jrrm??~6})>O%Kb>IRdnx(mwJ@2tG&-VwY3(vZLBHvjp7@5)V+
z&4K~}HT<BA{@XL;|D|m>xZ3_lT(nVj-Fi<P!E?()#O#O^laoaMUmbV5T-50wDZTn8
zi6nBP3o<om>jP*+@9yF?FljpCNz)}oztbu%$1?{<NBhUq2tI|3Yqr9y#P&!kE~$tV
zflO56ghWtU2U)u|^|FizND*~G1r<6o1!FtjC632DtF)NST!oG4MP_(TGeiq0Cy~;n
zKoO>JZj3Ijc7x#Uh`_Cjy9YD%tYP$p&aST3fo{!mchCD*T$?&oY9>0+!!r5Tzdu-@
zZ;!+Rk<{Y*GHJ(uBYy+)Sn>r`T`ML=cqa2ahD#YQ?8A&=NWIU>j1n4U=R~l?BJ>p!
zsMkt7GLs4=P2(*JLX!cQi7&-I^%|$gEba!YaS54fNIy8A!)$l!2S05Ax7uRVbC4kw
z1)@TxU)o?%M{eUvk%FwEMdK`g(O~BM{`wdu80y9EP*M*>s4BGmbv^c^f>@0+mIECn
zLp{M=S(pNs<ew@6<50{aTNWN()G#*wLE2N(gwnNMEh&`Vv1p)zUs@p4+YU7+N>Gca
z77k_0{2*RZu)4by{*LUMnk<phhI>}2!&cq@Qg&id)lw9fiXTIYpsK=?*F0BLsKk(D
z20p&bI{Q`MC>p4fFs+3t)2dLbz=)2`qg2(GF-}tsT}82m8TcDherGc{x``g*+Hl)F
zhIcl<ostZcbIavy{EMK#m;C~gpJ4q`e*xChl^v3oUoQpT3FsL9-;`4^$rt835yZ&7
zMAVQFBoD}q6?+1a4^I_y#zVn+GX%zg8=*hUp?FXY4DWb=*QLZ3Z)CtV%*|p~ybz|W
z%!oT?8^kcdGlbdv%9GHkbWoGreklLbFM$kQIk2gjB;wg~pWl0NE(q4*y*+qvoJFU2
z)l6VU-1=?EJLcQ4BDk=xPX+WDGX~D5Y`Pp$6p%$i;eNHYB;6t2Aaiw}rHegad)JT=
z3=+KVM$dr~`yY+M<ZpVZ8KLx|6L@(b@$Cc&yCf(J&mDM5{}TSZz|SG}>asli%HJYE
zK-&vwf`msA4>s%AmiaYG<mW`;;mrhBc&x)P*5e)^O<>XAZUXYG70-rp|3SH5hxd<{
z#tjD|;+>{OVbVGPk{}1Ui53ynEvV9H6!kOr0(u#d=bUjSA0}W||D8z>TOHiH0nyc9
z?${i-`Ryn4lBBL1_iXfx2Q+V(GK43BI8qc8;Ww3|?j!5@q?MWJDUGh4hj#EXZ+9};
zcd7<b-@7UnQJCt+sg?Z)<u0k(Hj70J$0?H&bq2nsb#iv)qNmewCwM=V8xzhX3a8$I
z8r5o+X@-7gj185qj7B5Zuyi1=V664`wBvj!#$kv>n_(WDE^A-<m#PCq?+h)LhFyZ)
zdT4T+Jf>mJbHPb1N3OCbT;>g_OP@j2)9V8G!J<Hfsszh4Ya`y$2treBs`1}4at1qx
zz~&5551q_(OcMtIa<4|U$&6jUiDpC%mn9r{)}b^;826QwB(80RoIR*bL=bLe=guTJ
zhQ3%q_U2?X$L<|`tfS+r!YC<~xo-2}$u!ncBEHheR|LkP$>bqXdNfeJsa;jQSh_zJ
zDy8fL!0(v#HoWZDq4uuxpZnmTTy2X`A{72IRR;a*%J9YV*%}_dEo`?4p>o((oqiSb
zbUS*7k+**$Wo@@vW$DVQTzGYUVmb|7s@D9LPv2Ztwct57Y{IW(5$q&e@%F|~NxbTA
zMb9#CxweL!k6B;eyQH;S0o^W*`(o@~cOFj-d^uHi<^0-KUdR68mRgm3d`>RSYVi7E
z^ba?&-(=^vn2>s>;b=6=1}_R<i?_9PkZv#_*LtoaAAfi$@<ul=+^g&2x>|2OJ*wz~
z#sZ}aE)USxdA4)QkHv-xK7NY~04H8=9k@I#(zo$&wH@+LsA8ucWWRCS1yiW)$PnwG
zWAJ_Qh`J4+_ODSV_J`vBAab8;X{K9lP~qHGpQV|`eB6r!<qG2A$zHeQ-}{?M7a|{9
z9Lz@i`CsI3!+|f9_Mh(ol?e!l;=kMRjPxD!|LgzIiDhBG&URP-NZoX$CHaOT7N;Fe
zZap7MI&`#<<dKInY%jxt0;--NUmz(D$S8VVw?W^5_E`Cw&OJ>+^b;LuUD4iI)cO6S
z_fO2}p~k?&TcCOrA%rmnoKSibf^8zyFUJ3JTJP%3df+D5l{xC?EV`Nf3a0Jd_B12#
zA}h#^&iPjjp36W|2V~LDLG?|!=sv3c1w@SABSM>VI0TDWux$CFSLin`tA%auxhugA
zXFx=~ZU4Xb&>3PjdsmdUdB+2=E(C{3%oe^IJzOs72x;wYIDBzxBKK=i=s%#R>}q1d
z#+VZut>-Jk`H)T{dV_t1*dmr-<qUsFZwWP45Wj-SAb99ooIkm3e|aAvAz=#d(5gRh
z#lk|(*+CqIs>w14?XX767mkS9h1T%Gvaz71i_P8m|1j;4fwkc9;)tm*4Rdp-Q12Xg
z*0t+wyLC{EQkkWQps2Vt^Ib|=kT_Az+|5XQrAa~@GeM`^Mn6Vmmo8E1Bz%|&X)Z$o
zt1fRBp5j8(IDFIRNs9M;T7PB#@o*m%XK|~trCuQRM?T*Z<(XYf{uzyupMFbYwxX1w
z0^OT%jE%U<HyHbD`!`^;9l;oHk>pL;{ap(Izdy<1A$DTlp+1VKCoGcE!H7$Lo!jM@
zwqW67r>zOH8D`&%1%B~h#p+^y7sZ#gv77Vxv5cIIvNEH0JzQqlMbR9<J#la&#EwoM
zT{!AOCajkQ540JVaX0*Kzs!x)&|t*$bab>+#Nja`+Wc$H)J(GkuJ_t(;HJ`iSo9ch
zkYl0m=WvLB+T&0v##0zPpp%D6oTI8YmG1j+wxN=2CU1dO5o4Q2>Y!COe_lFmT?a8+
zN8UCp4X_w5&-pWLhe@gY?r0_gU4|`8e@3<A&2Z>FN<lFRLy}Zg3|ZKOMt3)TaqAMB
zZ5+%_yZD(&fe%5AJW_?Za56Pj(dh#4{Z3zVN3rI~lnUdIb1Yw5q_@rSt5m{;nK3fO
z3;*$jc09~v5?-vqHonH8qZc>Jo>kiw^4QQY<A|+P-hM9M@LbXgXDdvZ1LiBJCvi}j
z;Q1F1H>*@5VH9`E2+?I#Lwk;y(6QGWu*rZvC&YGo7(N_`##w{@S=w1r_mD@^zR6bK
zePX7X8Vz=~h(NH5$orTP)Jx7OO6cGF7kxa;V7&hSf`w0p8ej;;oQ*U<3?+})wGTXK
z7szb{Ru2rPa?=ewdp)2xzqm=}$(a~=xB`ub_(*70xTDeabgy_?vRS&EkG~=&^##eW
zw{<X=4mxgmqgwcsz!4XmJ6J_Gw3nk-aG~wi*8?xEQLntDEo~)IbclBZOpsW8MRpiq
z#M$}?w<8iF5vK&WIPdsxP5%WuzlXC23b5zY{^U+;6>!5Dc*bHmOC7g7O{BqwFwnht
z7{Lp$3u^en<;PDF&!J(CTJ1}LhbVnr4B;yDua~33f`C)Or;4M5`*L_~W`<xwGFPF|
zEdZ;RkwIuJJh_sH`1uLJy<`0+T~C=DTk}~a-1<F%b_VCFNdBV!b<lHGmr66=`M`Zs
z!|@P$_8-?%!SOByo&iGG>zeiPL)kUC%kjlE@X#xl`8Wa^V>kkCo^d;NsXO|<I|Agx
z`zP|d0@ZSNrud1eILWCvXel_jP+dl8Q+BZF5r}u3F$QQHgB#EjQTG0n?Lwnf_xV~-
z04zM3!6^=1cZ2ogE5Kna`wm?uCxmBNsAh%VyM&l~wLjR}+VK@`D>Yzt{bpY74|3ZF
z1~>k8_;p=Khr=gpHV9vM=+1X{&p2C0P}85pm9_CESrFj_1T%6F*@3)K+^=?%gkjTc
zN6C&QLP>G6o<1EqO2@eRoY(V16lO>mkQ6X`z3yr&cw``fF%!4A0f@RAbubd;0)@T!
z3g46&IVMNC_G@xg;)rA9uulK_QBbgcr*iuhQx0hE0gB;%Q`T4z<CYYfmE#wMei~5w
zY8ju?XFNF8(TE+!Z#oTx<dgtg_yvOAxT|08+2IVFV^A=RF$f92sOF4(WMbw>+5i9=
z)OADq0nL_sifB=$@ZQky*p43ggY@aXSgDGm9y{r<NZL42Dx0LH>#C(JX)Yyl86>*<
zR(*u;eY1^x1aZi`lH3ghDY9!|76qn3n4aFwUkvGR=o49poaqln%%1pqKWXgFadqa|
zyg%r}eR`hcO4}Fxl6|~w27f0wiTEYrY{}KCw4wtg@Fp3P2aS;9Ww{?_CAFe0>K&F*
zf{t2-6c}Fn`h2>O-`*>8d-uJ&^(X$EB->B~H1PFI&zS!NcD#`C?nwrGeJDnA(H{wy
z7iS#t9(Y!ipj1o?cnfSMu@V(yoKVHZfKQcuaVQ90{uVDD6D)MG<mRXf_>(7A%wRUq
zhs|*!dsMIq1kL_sSc4L6N6OFFb3loZB^~nhv&+%rF`)mT__}^_t8MJmv9zj2*IYjz
ztiO0{aQAd~_uO35(QR&8Uaq`+d{lqR(>rH0HzN_aZ$*o{NEE-%-ms|uRZ{t@k=mDw
zO1>EB<PWGK%77Nt3rU)<|L(!b%>vGT6bD~1pm(rr<Y^F&_^Fgb^~2YHh^<9v4TnKS
zjXTAFvFh03w;64++{*P}&PPKki;QF#Cgmz+Xu_UKF#5^rsfT8!jrWYBI*Vdj#fcJJ
z1qn81cb4JTMc{<%v)Ev#1<qUk-YhHMhl1T6R`X}cn^jwk8b08udq$B?XzXuCl2N=x
zEVwy!-6#`^rxgPZ_BL=tsntLGuA(WNH#LTI0R%<&$?o?k9!LSuiOz8KM10|eT;wQ>
zR;6fT&Xg1MFaXJoaigDWOg~5QR91nI%oQ4`kv;nW%u~*Noaj}oHZntef(N8|_8pD-
zXBSDRRW~J8AHS`lve7@kz6V0d_bAe|l*`lwr_ORhJA^4b@)+}JAd3jqloCi-VP?!k
zgw?$Vft?`B!&P{IIY&#2RTvhmuL<z}7d+xE4CYZG1o2ut^s+jHxske?fLVJG>CX9|
zGzM*GNk)ZPck-(feZdo9Nf^S>81XGm<%3LRHbM{)(2vq6=ye-TvmJ4MSec(72AJ0e
zffozs%`dn$uFr<YF`(&e!Y%fgCXE-#)$Tp^LefTeE#YIwS?XuX=+)h%FpuB7cq#{=
zRzD5FNc0d(RJBwxt6sCs32H-S7>~(mi(Z-jlV5nOr3k4`IHt3z;j!idg_K^zT3N6m
zPI)WQ)<OAQtek~c=Gzx=lC9@7$?abX#X@T}p-JWOxNq@uR|V4?zU`mK4#6+vJS5ZP
zi!9v-_IVDzNN^wu1z9oI2P5Gokw<pD@LX@BvQbXOeolo!ju~s5vX{dgjpvOkSJgB^
z)Z{|vjF=jZOdqQ;?<|fr2Up1snuq^@ola;rLP8VDh}^y$@hR6F5kb3(3w84H*#H!d
zXey+;I9@0;JTfXUy=B_MyEBybJ-L=DajhK!&XRBs7~kC;Enyj#bs3kH2bSNw+>K)&
znwqyZyi?!P9O%U0Gy}vA&E}ei@*1b5FrW=*$Uq?FJOUxeu@?jaF;ScC3-NDpmg<L2
zi|E=S$d&l4!+{>E;?kuQiJpmoaS@R+OS*)2I4VWsKy9k7a3~e!R29&Yu)pfoiBz?5
zgk$3Ia|vMy<GUMv9%IU`jutg8yh(MJWG<-O0N7>@8{0xJ70SSruzo-nYvwaYp|-3T
z5NH07%$q?r52g!+^UAo)BbFXu&<Ki`H2AOoAL|y>K6?xwD(^GzMNtWy93!-|({`$7
zqg5$+0{h>Ac5N%hX(B5dztDXTqiY1w7OD2t+%h2(_Ay&eob1;M;!`esN@ZY?%fb#`
zVLp9?dr!#e;AU}25g|&`P=jSAQQApu24^4zZZjly(=)m*Rwo}w{@JAA!4w{;$lqsW
z5ZQrBkks7j`;$#2x%c;K-dh5q1cL4~TnopyYhub~+ex$~WY<o&q_5Ao=qyXKl7it_
zQ|TXp_k=MKO?tb0WZ(cr5p0!udlgF<2Tm+dTdO#vY-d_udRkE4Zrp4Y=~t*>avjzu
z7dHKWG(o7jMjsf^K*~q7+jMJ^L^EC7G@%ZUpP$UV2}vd47wbdW8~tP<^#C)uZ^b%B
zkd6)*LZdbD?B7NJww5ayvb@E@lE<$X@ss-`*|egjdx@3E`9~^nk;f2Cx3P3|I_|f{
z!&*kxPsQKz*Vp&AvtAwK>mH?-P(O_MO6`hJCvQ0CT8F$l(`M4F2jo?Cg5$tRNMqEP
zg2vE-IUjlNX<&03E+8JeWngn_ZlDoSWIknjg$#_*M~Uw5juF%&lu`#T)OsO%rsHS%
zMe77nSq)ODcjUceB%<9XTL+3Z(mYSn$nM??nO_!6v-f`P4-_n}N?kvQ-$0xmk(j^q
zH+KqN4o^^Pb~1u_=W4FU((#31Yh+W@wK(6BjUHhNu+e_<gmMt%p)%o9u>osC`J*OC
z*387l;H?-G@|dnlsF!%#(w9{J4f`!TNbK&yq(AqV57NA>t|pAoY5_9ngqXvb(gB1_
zT5kA0*0dq*d0r&fV75kt(fWgh5=6AtHwy8xKq2P^FCs)Sll#QxUtC)VmK%`JB&F@5
zo&vSq;+P_uk6ycOwc{X;Y7~@@Ja$<%;RKM4g*iig4q|WW;#}&rwnXa@H3I;m&d`){
zRuvAdb<3bWJvPUbO^H}=;L}ZXL@N@*wXFMm_W((B89+FBQ%=F$<WRhk0WlZdtuc@~
zpBeWkJ{teR%lZlZHpHNa9Ayw{Cpqsju=J3<=byYB)%)Y=<8O@jHM}e;nNr{+$hdK@
zuOf;@?G}@9!Eho~G|o%qus=ux&&qXnpPGx2uKb=83Rw>YP=blnUj<Ui2xaQECN$=e
zZl$9Z%S5yW6s|Pobj)`i0~_ljBn<nR2hql!&4c3!?num?q(`7%+WCsDRIBwkT_v?G
z4eER4HKW@3R1kcIDkrQ-5_9IDEn_&X?Fv+uTFE3$A=ehh46WhXBEo)~{-<tL1$V1x
z>D_oz+mqh^#qBg#Id0(nDM#`8*@pjHq@FPV@PC|tb*gUL?1}!M8mcku%IJjYMmL4<
z={nC~EPIf87uZHcI-xK-f>e5?tb_u}-nZW;t6ot<*18hF4V;|2UXRjmCytKVM3+hK
zJ2;1h9xLpr##*${Sr$WS$|7Yu6d+q=+)|wEU;Cu2RHRu0*Ygs_`v~dN*=jwM+FPqE
z*W4N>7cF(>78?ZcZEW~ILaMVf*l9+!X+|>WDUt&x*qO}!%KJ(yD;$~E(Irk%Od)BY
z$0`5lfyYW_e}8CN_q2svCJX2)Q;@wkx}9{G#-+%KWo8o?aD%M{i4)0XG{%DETEv1p
z3HL1n$skh(xw^`1{s`)MD<O*vPEzV#WhJxJ0MJv1;V{&K!!`;;c}#!W{UPMe-AYNE
z@YqvDnL_{HWjUZb7>7H{1J06Ae8u5vw8mQ=@sK=tp>>9S^6{)Im!oR?y!qd<L%(n^
z6j06ciq8ut#$1vcu}Opt$%~D(#<T{*4XQgp8O@lR#A0!XaKw!#UWL)<NtySLp-BT7
z;EtvLDyv@zPSP|@K{Kq*2?KZusbrX>YN%QrdMrz&B>pla82=he$DK!M|C=XRd<dN^
zqGF+3agaa_n-nI+aEvu>*@!x*@JC@9n)2Z~pPU^b;8=f$-wk&*cZrz|wDEJ-e#g-r
z@$th;41}=NAMP)>!cL=TEPeotlCu!T@?;jb3)!tBMhF85Kf(1+kFgIpxG#4I529eE
zKs*1Li+`0+PmV7>qxiP_4N*pf$8ZZ@Gs$-rp76}oZt?ovo6du!)|UG$&=tl39-TH;
zo4`S%m?wMAE(OM0E<sfFe&A)-Id6z8GR{u&Kt6^r%F~8dwr5(E9U3D+^zWi1Al2qY
z^d;=QOBY{LF}QSh|1)qgNYdVhYk3Y7t7!ZIRo|M8oz+r3q1$ta;2H_s=iW;w<e|mZ
zA32mj=2C$GFNIeaQmm5UE>D4^<oq4CXo4aa0<W_P;=1HIShQ1t0_P=EYafpy25#NO
zI#MuN1msd2q}LR~^(&{Bg7+Je$+rUfJPL6GKcyx&1)qnR?p*(FcScE0k5|t((%hO<
z8UlEI_Ey3rFl$z!h6Q1>YZ=wQX-7NTH>*P)1J8OV&||26DqG71FZHHXqi2#254FMY
zPHKy{HB+p|0i%d3IuD|=>_-s2)JgO?+iWRaG{06(BV{6mV7gk|+Ep;FdkdVjY*Wkc
z{nAPZotu26FP5_7<5n+6cWpJFI%k!pxWDrR-lADPM}=g5x^R9sJqxY3Gi~E<mWL^c
zI36;xaEq9jIRUI6uS{daJ6OUFA6{8~->IT5NA)<rw{KLD1dkE~Fuz<dq5+7}4Iyt*
zCyF%Rq?@M-k#7Z$4hJ(S+u(z?_V$V}U(lUrW|$hD!rd2rS{e%Llyx`64~#z1G{`Kr
z;mc!Gk4ZgL-w(AXb*N4pRE^7ogA=I_3To7AUYV3~Bn}G6LMf8}z$l!SY}viwJbltp
zS|4f2g!<R|3`PEM?sCQYU2;v{zhLAiiYkP+O#UU*8cXw}G5Akv_pZnm==<&J7lpKv
z>#gSPw#lR1N~2AT66gV00R@@&meTs$c(s3SZe^RBJlacO!F@q7U`)-sX3RI{uC7Qu
z25*qnYMoWo)uxiY`wO{5uO=j(y4$mcOyZ8<=o?~ZDZ#pE9x@)WBeSCa0_mGexh)#I
z)WKyFb-9~vT+1OML?<g#C{;}F?3`QaFdEbm9iN%nn_t*;_iR8(#A7m{BNDZQHgozW
z+zx)Ko24r4jC+DgyXXg;sOgo*3r+ruH?DGEGv*zd1a!viYo}CHuM)J|y`>3hZ;+Lt
zXMUbuM8RdJTfFJzgY-m<!yLT!xs8{PEkw&I1(CQXuPPm+PvQPf*%*o!ag;Eajeb=V
z11i~Sn<u!E-e>i6?lE-QK&(_~hGw;R$Frn$a01N-i+!CJzJ8a+pMona<#lv8NjhX!
zeIY)@&H%i37+P#&|8om7+cV?|b}|!yWIMUIpA5^uI=<O-`J~g<wp4OZ`ObY2euT<A
z+pcr#*MCf-DS31XogZda#GiN`{!U(>q68442eO!}8YSPdEQ3mAns%K|xAuKi_Sm5G
zXi}Oyzf==$ejd)T%%|gi!TzUZXTL{=^YTN)_#ceDV|%7iy0sgp;-q5RPAayIif!Ar
zZ5vgwZQHhOqvHKk_gcHV*FN^U-unmKAFny*7~?v}3?O&&zwW&M?Xvy1W9Z-biKE7B
z^4Uh3G!aL_Qc*JeDOw4VOBB#T@h2?6nm<T5R~t^cT|*L(i&uFb3>35e0Xi!gk3`by
zF;P|7hpRg2W!-8xuVdQL4&z^b{V3!9Gdae0JvoLDF7aY!sb`p`I={p{t76qY=I?RU
zvFeNzR)qCDnp!v>nNQ>LcD&@X>Gnt7J4jAdb(wE>`uJpi@o{<<0nyL888L#>OvZFg
zOc7y(K*pMDdo47uxyrw;baw_b2{@apfg;ca&q}dry2gbzpI5ybke~K-CE%%XY}8&a
zBZ>Mpw$!uLz;)hPs=v*t6amvs$@7UZuxhiJXx$}vn6aktQ;b5XnfbHXAL~6-3)05h
zNVyfu5g}Vlpi8(ZNRzik3>psp5hMD(i3y2p1-=Qu3##@G>}vi6z+uo{PBrY~Gxf%h
z7vZGmExhuJ`I5||cQd?x8F~1riZX~-YCEr_52X$(whw^XW0>o!?t!g2taq|+2L>6!
zG?Gi|pqdPYIE<N%WfPh-d`^kyM=f{QQ7yTOmCD3kuED2s_Xp;?mz`QO$V9h?h(e}c
zX0gp+hZw389}W}Gvxs^|ayCE7{Xpxl5NKvYmBCWc!0JsgsW>gJJeLJKO_$HR)AXJu
zfz+Zm@*)48(_<7a0B_%=Cdrs>o_1*7_ZuXIv?bG=k}P=YH&GgMQOzHk0ktNuPh-MX
zg*Yk1dl4!`1Z?pX^Ip`p#6k1;Fe@xz1O60C5Q#x8vxx<F6pilcpm($*ts!PFBjkAK
zPFPyo;Hes1{|y5v2pF=)u*f6{H57+<YWQFDNK~@vY4=7^I5qS)Tsh|Q%qc|+%v!jA
zA&RAXX?6!=WR%wch@!AK-g(%V2rGA-q|^8GBBT=VSa8}u=rMI^TB4v8d)?@1K?33c
z(3yMO?QW-tEdX>D0W*3$fG6{FP}n>lW>P=n7z#iN8a&JnYi;xYA3O|wEjeh?5#e8z
ztx1D|k=$?M6!rg;hmrc<Jd7cG-Gts=7FLYHnI5%V69d%;#oVyqC^<#OL-h&DjDO={
zc>jxs@i?CNA3O}9zdVfozdVdpJ0N=9#MxGDwnp`StEs(3E2kLC^|XEBkW35D9_**6
zF3tVP)lu1I%4%~{VO{3Fo^dc;{Xd>Twsbf*Z_nq@)s5cjU$-x*e71cyf4~%W%kH)r
zBD%K`R)$`c!-#}HrqQ_-sQ~F6nPh6ozPHIw<Fm}vp4vO>2b^o1cD#>ywt{K<?Guw9
zK|6N_@-kiTF#kD02)^hI+5z|2J|rL@^8d}zF}HCtHZ^wmcRqBZily!P3epG8SHvmA
zN;0fSlX3sI3^9T5<vDO81yV}SO&7wMgJh8;B5j?qnAbnoJdTt<7uIB5_LumHc#pEu
zIb7M9#X=#S#3fY9xRg(>KwRGmRPIR>J>CMw9(k@b+y#O&`s2p3#)2gy#+WD*x#ut8
zR^agy(kke*Mf(ML?g|A83bWoD=@u1S#Z7*q$Hv0L$6(wJr5!w<6SZn4Ekvv>aPjiG
zhki|Q(d&&$Dl$D`F`6rLm#lCf`{qO-Yom=`Mt~MFM4JCbts~5?ju1~LZ<atqv&=XK
zpXVhz42Z-3Ix0_4PjSzhNTe`|fe!`*WRz(V>y#Kb(K!+ZL|VT|rGRjoXYi4&;)=MV
zsYWos?5C8y@3XSLDm!J|y|7kL#Oim<kt$FL1&t5vT7ULbv)(D;sOyl$pY;&TCI!T(
zyTr%@y#4GoO$r%RK;29g@*fYOS(lHq>JW5u{(;&8fBGz@h;$)XAX8<JSD8XZ-GAAN
zyDRR{L1~7WQYPM~w7jNDa<l{66fZ$6B1Q@^O{U(WgoCBar>HVwXlgn|O8LmTTtPJb
z^L^Y-ra3~2>Igx=m@x<7{0B8nNQopHP)uSl@>vOG?_2+lpE^DyRvjwZ5Z^8ji-a2q
zDzDjL8ZQf&Z%hBlkih$LC1Pjo9$?3FyFqOZlljW#MrpPqYs1Zf1OCHdxar2L4hLH<
zyC?C(e8+=#{$1|{=u2-)eF`o-mptdj+kqz`HL(^9AIB{PS$tOr&y*o&Z4T4r8_q!s
zaAMTqZ&*Fd7To<;%7hJ=Hk2*BAkA|6VWt*FI(nm>9^6E&p5G$K<1hz$oK4&r(w*Vw
zFnjM-rwBtS9Vjm7j6L+>)Vp8@u@$#z-Wf}`B!=>=$VFZJ6)L_oRJJ3_DLEKmxFJ%e
zj{WL_62hEUaePRiqv(64{tYzOMfLfQgSo{FeNuImQkE3bSe3=!FHZvvv7~wIM`wjl
zeAk{qF{METgq9mQj7)BWT}dJPzW5E7+0JCVXZ>?~n67$3PH(W5KT7G<g@bUvO=rr2
zoN{gi5%#kf3D%&^G$Cy`ORvdKJldqCJ~AB7=AXy+IL3mrmZ@Xwdwpa7mXUG;%@ZhE
zcM!I#1|Q6f_`YOZV0j9I9C|2`Yi)G+z7}v?Dv?_bUaOoM9dMO)PwFm^;th_KY0mmY
z0j+CeF+#zPVGW<BDT6nW7}z|@-7n3Q0s9lWezterB7+70c88HzAk~aXA89$UigB7V
zDNUvJ6AItr4<eblTPBqO-%X#a=u&dpi$70__Y-IWg?4_h?}Bj_S@Y)LabWWa{OJ2K
zP|zKi-!~ng9?q8ZZ@%~-p3Et_cMkj0IRdARysv0cg`U9B#r3o}xX}cK=4NLwZS)!@
zqMua6%WOnEfCW_u;)M&xi*W{xounMFVRDvl%pM1){Kuvk^2VJt@8*se520sK`ziL!
zA`r)>^?8%<M+f8G-<}OvoxM1mf_SjoOGf2#Pd<RT_IFg$Wv_sWe@tI(b*TH}|G5Lb
zq4M_M)%=0F%$uz8XVpse1hM|Uz6&-_lA!>ZwFGRP^r}?;IGvKquTL2|nlb&f!PIEQ
ztmqWC@;*6TDxFCvoDX}#r9Q)KvBDxSl;!Bmu*vwu#%ba#(Ew_DI-s~zB(kOi#lyC)
z48a}W)8P|GjsC7LD~Hf;5?~N|PBStr`Q3UzvTpNOTk6TJuzvg@zEp<v*a*g%61~je
znNp>>y{aJaE~!;YS@bDR^eyw+Dw|k4nowtW1gDlz=_feaUVKrv#Kxtq!Er9>8a$i-
zoB>-DE$&p2xkD_XevHDMnND8>AvoyCVu@)OX<X&1&HCkzk@+EI==_r+%T<dVqOv^L
zD7h0xk@yOj_k<y)R@Txh0F2jb73zBVON|tKAXk-I77TPNFpBjLMeXO$kxbkcETsz#
zSM1BVzC1fOpeb2TFK#>tO0w$7TCNUO%)X%Is@w@WEF$>}FT_qmXl_A3cd@ZkcZfvb
zpS4FT-=$+lBdPIHu1}+}Dvd0~;_p$PL-DiStljU+7MF{xxJ{!3YnR=4UxK+M#&HiX
z%#TxR_&(S-M)+<HF;u_y>F-}`2cDm9uYJkiogi&hhu&_!7NFroDiL=ot1WMDiKY0z
zibPS~e07Q08Np}<UB5rT0yq5837FSiv+hGTT)X)y5ti+47WSy7iBDWk9=ZL>7nar4
zB<fsF85y;dI&f1Y+E6+@IWaeVQMtuodTTPh4s$i=&O3)`aoOByX2fNEQnT^@SI@#f
zk>vPvMHbco2qy#pF!8?%I+n)n|9O*kC=^BPJg08!KwlR*kb&nIAO|zFr22*ev09!8
z-9J*G0un6Hq+I#|h!52S8(*3@#)q6<Em!M4PiSewpCojheb@zyG#6z{;ImXl%FJTS
z9oCgGcg`BmxBfX*j8EkHCGn(oZn|{`ov8flsc05^KaQrJu&EkCHB~!G)%w}_w#DLv
zyFG84*Z1=g{r&wjo8MvCvhFIx!rJNM*S&ry%6SKaj5ha0MgbKit>ew2Qj$>_ZrECO
zXo2)Ok3UBtFZyIe+1jTn7hNE$vJOoojWKNKoW{J$a!K<nhxIu$xWR1290VU0`?>R@
zR#I$|vaya`oIXm-`pHpj3>I!Yvl6YYy0J3+cDA{^d}09Yei6bVawey>MpT_egfy2O
z1#E`jw>+G?wb!jg!6~b3G;D2z?r|_o&w>snfzlWFi>;A{UfZZozI3#mp0GBBd#d$Y
z*x%LK?Sev7Y8Gq1qN^gEthbVE1+3Pstf~`)g7fLD*gca@MVXm(axo~A>~HF|dyTqN
zG@4eFt$U2*5CGRfWo3*Hoc0Vc$O%^E!ctUN!}P$rdFpx6ib~-k4c2LHw9Sh6)w3va
zxOnhby-8-3rg;<T>O3PF)Y22OR#!s-HM#v0+1I|}SsYOTogdl5cP?2o?9g6F)DA-U
z?fT!xXKBI>1{qAN1aHzCTX(YtQq5_S3Mj}p(jmUPi6ge_69orw{zYwKZgGOaLKg-J
zfN;b^aVL({mhy=zI0+#mc^Z1P5o3-R*(h#}kO*@^v<gV37TIKp+oH8F%9!5%PzY$@
z)up1hI~4vSWXG@b-IYjMJbII0C+lhMk31v68~D7q9{{x}oC!c}GNI}0*|os7BUF8t
z{6{MS^xswlB#QCqV_C@Z0bOSHUO+2?y=^e<{(GVD^@BiWhdK=zAlX*3Do)CjP8wiS
zIAS^$RUqs|&XZq78J47MTND(?9d0=f3O?5x^=MW^68Vo-gw-E_R)k)P{S!QZkP~UP
z4UHGvWJQ5C=s0A|W5tKlh7WTwOjDygc^UK*aYpJjX9SujQKuFqVx500Vg}g?(2Ah*
z&sKyB;`M`PI;Lr>7j8fhn9dXQa^*9jgK)VUG-{e5n=eFg)Fz}NV5`NF-<7orB2aFy
zZsIZF6Xkx;?FMSRU||zI%D8E3*N3P4J~Var3|8#!EP<Yr$+=#;<Ht+iNjLhTO}!b$
z6=L2w)@PtV{kFx>ut?zkX2>q3*58_F7J3}FhIK9cy&pBFxxnA?4IYuN+QF-GWZGP0
z)Bn_&)yih5nrAm3^)?$~A2(@I=;_;)Urp?RS{G*C8&19VaCx1lA0@FL?V0-3J1d{X
z&Y*6=b}(8Vui&pGzoxVK!2A5JuRi995qsa}_wc~sx@zLcNlrY}eHYtKOX1yYUTTn;
zM95fvJxR6xx$phQ#p*<EGPbBv?94mzk85RW4@W$j-n;MS^tzD9m7LpR1ZggUr^g@m
z|9O4?_~8gf0+?E*fSu(3HIVhMn(lv5asFKeAZ2WjSQGmBgIvSF3Z(8JLZOZqGeUS+
z*m@SR^q1(Y?=>tb`4ri@4SkdNREPVu{f{=hSUp&o=1m_;uIARYodlPHJN4zBDm@(;
z%|}7a{HA1J_ZrztE1-hXs@I+K*%J@$gJ2V1v&Z?NUJ+*~zU__o2XJ2>sIEjft9EdF
z+k9n}#_2LVc|yg;rmDr*?D-<VQ$N2R+6i>Y$@=&ERH4n-6OiTn_p?YBY=+7&wrt|0
z?9xXKRZ@L0`6lS6vQ6`2CAhbxJV`IR%(>lI!K}-rj*}xOs`-VC1e$#LE!oy>2#Xsy
z4j2=_OFtdUkn3DNjyj%pHzoEcJqE(jBWj3UyA%ktA(*xgX-reQ`kIHbLfu-bQ}J@q
zHC=BISusXh-eQxmU6slEj`}Yd7}CuUEO22>X;YS^ihFB~MJKE`5zXbdVkKSk)8Y%>
zfNthA&(FIehM#N2io%LlC;&3B9DoemG5Df6JB9a~m8Z#^mWiXMu)s%98A3^Mzp7wK
zz=Ufb<sn30b4mQ=WyC4ExKm`QViTruaK=*axvW68Us{HCMIn~OyII|nh$0sXim7uP
zUu_6D7hT<ho(QkkC_EIW&#87|z$vAlCYm@$LQf*7T_Pu3BEC4CB#oJj@ns^n)(GnT
zoM>M`FvCBM-oW2YjlfWXu0_~2fq{-FUK*4iR(vjt-+&RFL-fdeN6L31=mGwS8^*N7
z2pK8T>r`qhoVypm1r8;}q)|(WtO-+xh$Pbdl>mAg83b!ccEsH#2(O0zheysKju~xO
zX<jZGAp+@6i9wp(!8kGPc~Rb$gbD8m_;;j{+CSd<L%<{82;e+7)i}nrR+z9g312#T
zh<JhnM^<B<QIWA|o%fK{lr&7d<Nz!%4H*-<d%R;>kvRZwBXW146Qs2zm?e3wL+I}3
z>~J*x7k)YXhnw;j0dl;{RDFfo0g((HlyM4go{V^kzRLle95OvNu2engZUX)%FNj;3
z{l@f&-Zd6>RJ@s9TCV6{Dli`s3{>ur0bsd(-dvI&LC|43&{$9*>Liknp+d{;Wr232
z(wE!(q-UExj7x8pr%xD+dB9Lnobe&fl_3ib{pN|3WBI&D#Zo+iU8j~Px6-80abqUh
zqdC-Hrt#8lDd!Qts(y9^_bI}`K5VBP#y8q;>rG~LZ-J?~u)DX(rn?|^Gr~b7`OWdr
z##^QZ^F?T}i8`{ryq@~m+ATb>y6q;@=TeWG4m8UX{!>15QHA9Lq!^f%4(WxD(ee?>
z;zg*mZT4!9S%jeoCF_v=&MwAv<WzM{B;k7HQ$Bg@;wfA4OXs8!3|?E4x3p_winmhw
zFsc4yEm^KpqI&nw=yg+!Th{)!rSpA0tynqwOsswU|5OYZMZYO50yIZ&fadtW?)m*=
z<oth7Tz`koI{QDWTTXw&DYakfBV;1eGO_}z-z6w1<id&+Sb{W}i92<O)_!#{CuOlu
zKGmcK;r(Oi2+P`t*}+WOH@|7E_AfQ;(?U=*u^3xxtgK}FM_cyV%8Uf^R!<iU{PJpI
zsbQokQ@4~wiLh4XkUyTv^hWnLD`N~HFPuG4Kxyx9ZRBgh`&-+xo=UIFx1Y;bu$=_b
zKSbCaxa3si&HCu(mr&G{ZF@OCtGUd-x?pz!y8^-KYDJAqB-cc_&J0Dkkoc&{FY~aC
z%aebhZOzt11w|ZC$708Dx#eMN!QKE*y4Pnbg&(!jvN@G)bq`9lypR&XDVX2ZdFu<m
zu!HV^+cFufd}uMj<AMkN@_qHY&C5ZKxg|sKuvu1fayUb;ON|h_p!+5ELnmo4Pr0`F
zvs+fTaR6?$bSr~E=_Ar=XWVI|F2;v16HgB{F~+Z@D$XmJ{qgZqnHzqbtA-l-PICZ)
zS10RQpszM~jheI?8i3$+Pg`)X4a2PbGW;b!WU0fBdfpznP&Djf9V$I_V`P>ipA0&`
zfWh*EbHwVp!+(nbN9tYe;y(Bk!u7A@cuS5IslSxRl@>t;M@<{8C&j$<Fu&xi8t|Y+
zA^+0pW0U||mCEFc2qmZ2)+Ymy9JM4EGcD7O|0y|QOg5m*3mz*VO~5Itc_BZkHGzD3
zQ~pD8j5PkAk|WxGOOAs7k{t2Sw1yntM~jG1Jy12aV6yeOKw5`WU{j<mkkBa;YiJIb
zRB^<0iIlRKYIjC4IP`RP5V+^_j%Z{`O<P#DC`Cssdl?Q#l4TUPT!lKr<G7cQk|VAD
z2vE&R7-fj&rEsG)>}+$4891QA)kJ(L>wUKo>_f8}3XF=qruEoIz*E!`?;-$<A*v!t
z7;Q87dTzNerhE!IeBp^j++VHGfFOj}idg;3-`bXqp~nXKztsvEQtC8~BlU7YOw;(Y
zWF+G?oKPXh>T%IAhYlhw2V(58-|&uc_7h;?t7>~Of+2=pIg#57a$hBBjJ#4JFsBV<
z+c|)Fpa($_$bt)SX4!m=R$9N^nQO#pc6VT%P-M}EdFqXV_K|=wAMDFhFiyzZG2|dX
zGI(MCNr>WIkx|TqGZM+DGOQKmJbyU>4Y4xx2{&+1yo_<%-C7{sVm}T%9a_&Uzd5{Z
z$BZ^h^}CJeMZorn@v{lG4!6yBbY*A-ujl*Yh@vw%lpQw3H`Dl8Q}k@VDO5@Q^}M#N
zZ`twVB4ljKuAuCH`r|e}<OR2YWuh;*|BL68gOS0%J*R%F{*>DX_~SM{gGruH6g`{D
zWwOJG$n*mWVT$Yi`;-nBaO&|ZrLJ(PDj(M$Cf4L32a@HYAX%H~wp}kK-0fO9&L>gO
zt?Gm8_di%~xtHz?!bNmc)8hw;WJzf60`}Hou(;aW!V}5O#m9fqB&{w1ifAen9OzD1
zTPY7<=;4xN9iW@nMjEf;Q%TX)x-OhJQ!nlk8%NpJ1$pS;oD&sa-*5Me9p7IYpFvF>
zRH*Bour?ZKa*QpOU&!N1=ZfU-=SsK>*`-RsOq1iM#z8o4$Fz*?YY&Ano<!0~3CTY*
zQ$v0(xtF0)g<}?q*%O)*M>aBv76E{~M&Xe4QE)!B1m((~1$APQcQncuzc7P8mgc;y
zTV}CcGVVl#s7DnsQr8Gbkpt;KhwtChn=Ra_qG;Ht;(0JAWT<->$9QXGZdj-Xq*ZD)
z#`pGyl@RMlrG&soi%3r{SCpo>B)_s{z-x+yovX}qk}T8HTT0hSB@+yb^PHnXlx`)j
z8>;!Ob}MYD6ICJ%ODp&?jczrVSbTWr08*l@>3Knvjl(3>O~*_gfXI80BB;SJN;6n?
za0T4xY(t_Pk<X%N=VMbsSEFhE>ps|hcdBGP`azUz!|Fz9BN)6{U4<oU=`yMyA6?-@
zSL|7q;M;U!PxrmnuEG~^W&p(J0pX2J2ol^!Jas@^R&C^>J&N0h`2i$he-=AomfS@S
zvk$?o_4j}J<}OTkexX4A%rOApJm*&LhjZtxOst=PA)i59yz9A0P1Ji1ocD>uC(CAp
z9>ahtfD6@e(i_t8RKVEBIKm>x`NKY71Y256mOs&);Z{f>EB8D&Fn)g%`WXZVF?Apt
zLktBzdp68)ZPq@HkzgH4QP;109zUE4>(058AGQFm-E;pH#uVV2J1rF25kcVbh1r6b
zbMy*ThrkWmDq`p-Y8@}NBC$qa<qKCo2&6;I^KUSDhJBZP(?1ZI7oUl~ZkJB~DTuV;
z4vM5RJAzQ@F)#msNbX?emdDR&wcpAI$AgB{K#T-7FLCg)uPBQ7`Wy#kgzMI>V&`i$
zA7bEh)6-HBS}7KL6$)|=3}dD2XrV9ojXi8FB@CLUP^In%8XNJoXcT0Ct2ad3v!K2^
zyFYqev?_SFE26u_{ILyi^I7fU43DPnUDc@lHPAkjv~_IJx6ZcEihw|UZNJE~lV1Nj
z0opnxItoOJ)&7ag>5yy$HTiU}Mu>hI^<<1@a<4g_F+p7#xsn&HoK?`Ofi3!6)1fM0
zpX-6+yj2^c^>P=F&xaSO%ex^7G!ZWGbqRD6=KfD<(B_4kV=KDy!WJww?qe0EA-lyh
z#(Hu^6NV}{{k(&8-0nK8!pGhUf<af&o)MY*R7{A)R)ceswWUyZQrzPHIsFI&r`cTG
zqGrXs5TMRJEyi<~D3c;OrF=_Cuedblid>A$cnkHj#qud#<tY))-1PFPD)Dz*R*#}O
z^}v~r0Gx(bp`%C}a7T}|uzJv+=}hhIkxaMHPZ_&sB3UKI{`Du7b1%pP#M)%x3+#~a
z(2SY`7RuQI^kqwDH5%1sPS5GHn4eiX&hRH>Qt8}_3m5fAg~C#!hgHJSY}lCSO&Zt5
z`s%FN3a!=9n8oXC44uynf11NJ=CrdS+Zxpl*Vmh6NTE(@AZ$s(=AD)rN;)ZjmsYjb
zqj*lxZR5}39CG)|6fT{Y$j-ceCBNmZT#wdB?OD%$se`>WC8;ZH#%gRPq9oAsZz_74
zuUT_TGJD3T{yvB<X!E&GcIj$N*qa;zJHHiyO(*~E3jfVPw#s&zut`{WGbUY?nSa0R
zzKkkl4DLxMg-RVyB5@c}*UQI7cPEzAPhsXNv&vv}TPl5*C_VYy-TBloyCsf$03!^U
z!Ch8rgIZTP!RqPNvNLQteyoXCeJZu)MY76Q?~|mN`Ng{sT5IpbZ_N_^y5m-6OibsE
z?e1cH<n9O0*xHV62?z$HFoXJKyYK31<2+JBVRb$(7yb+uA_i!?^E>0l_J7_lDS-6(
z#{th-a`gWTPaAM@xc%GFk*#)ZyUzao!|Rj!sI6ydisQ7YodPX&5ICZe3<QUZeDv}t
zQ9!DJb^)!k0A<*-<?CZBE{XO_ysZ-?+Bm}N{%A6e`Jp`$O<O)*Hn$qhjY;>wgR&_p
zLP0t>rD1doeDql1s8rgVHle!i7mZxK@EM&l=lC&6iTwC)j|6bivN0)j_L?rYF@?LT
z6W&(ZgOE^<bXgP;P3<vMpaAaHy2R~9jq5-6wk9bWwvkp{6s6ftC;f7Ko!tYuv76{A
ziOpIG>D9Y_DT9g9lk8sz#u=w|BSp&TrCGu`0Zl;&zm%0p=AxwQwNNxON(1zx=gSy!
z%cwAof6rN^kOnZekw8mWs#nz287V`9^WDnR35WB2XP+_bUn7CmxFwpT=&&Ij_g&gJ
z3Ckv9DK{sj8a$9pwJSx*8}BiIPQM)+HDq*9Cc@E{9{E8FC^7ZyAL<oSsY$01X-XJe
z99Pn-Bb1T>pDIEH93(4)T$0<<Lm(HF@%Jps5{(J&lxHoSLgFY}C=K7m>!fKOWj$dG
zKunidxy@VHlhW0v6&-35q@#1Ef1$pwOf%b$N@~AlXxb^8$*;~SIY{=>imZ@hBxmvD
zH7WciDaTM?20t#&ID@sV6xEm<gEI}0Vw<x}x2w}P9#U7c%Q$4+ZLsk`*#<`vDU`cK
zr+<K&M%X=ZoOyn8x(`d`eH2BA)wlCRpWif_dF~JE(8n+AXNR>Jx}}K1IEqHszs0_v
z!sbo*dJ{SkLy8uJzQTt9zR@Fi2(jN0i!)upj(Y38X_D#zM5;^xm?->#G|bqxp@&mR
zEbjtOzKhM>a#v*7fIqWo?<fO8X@+rf45zb!=tBaw+&6+A7@-J-Bjiuj_`;q3=o@bz
z)OLQ_cYJUCX$4%i40@SIC+xQvaWbK&Ly)T1COevzH_iA#KJ-_2cX}sXHL3F7r6IK=
z@ZNQL5I(PYH}3j|s{*6nePbD+=u59RJ)67i3%#jk{dvDB+Ty%E1LQm5{Y(n@J^PFK
zOS1)le)s)l_c-rZZ21R<h-jz%fvZ0GQ<OX4Na+~5pJazt6P}6rV8G!U=rvo>Pimh<
z9|5bwQ+bZwDa^OWj)?9P188{C+-(nsQ^Rf}AlQrC<kDckp7xGp6@t?(yEJeg>jHM?
z2%fy%xQsKY1b1)<^sq!Z$ZGq#+-i8(&m5Y7G#2akHp@M!Uh=!wT;O?A3^sfTB*402
zR6r*ex}P`C3t?uy#U#bW_B(H@<%i!fP3og+$5f(mu+S5nYP&;w%B#g~5hG1x0Hl1X
zS+mPR=70|h{$6{pN~D0>ud%zkk71}Lho4pC8lOK$x#JT73@Bqp%IexL;MY%Lc(n=p
z>d`K;Asdj7_k4)5@r!|E^+2$^Tt1AveJU%7G13^~oIz!|YA{Js8YXl{6m+Wm>@Tl5
zMM~#U5d&>h%ioM63|xY(Q%4+AZAOF<=$nC!y3=ni7aKai>!)zPJqGxe(9|!{wM{jT
zLN7`mEcnQEe~4b{#&dAKDVC|faUa8L&%MbWqlj`dhj+t*ep?@oOGTD*r<<363z>p?
zjOG1w7`?jq6$I-5?<x(4q(yjYz3I?tTtbXmtuajH^Zr}qwr9h+Two|7N~gN$)}vfC
z%!{r%+}!~_EK46gd-nkeCp~#aw^b00NuX25W)d{Dtxb{JC~7XsL;TCUwywCsJ>IK}
z)fV`Z1Q|sGmP=^4@{84b^{oYe;;zCfv)EZZFMA$$IqnXo0WK_$wK4m6M#COR`Z33*
zb*xY(GjqytTP{ydVsU5y&rTaVY0e5c&@n5WX43u&^h-{if;f0L;@-HR_MWP99hB>7
z(oFlt)HRo03cTL#EbF{<077+i>TT^_opASFvI^yuBfn9SsaN)z`v83Vmr7x74cB<^
zG}6@q8Cjn7`Cvx^7VQ!piQ@s3t1BxS>+hK4`32U?ggh;qIGqB9=%n@-r!%{iGzZs^
zmGqR$J~hKb_XeASVgeKQg^yhDI!utV4!!!31aKPivYupv=ugy&Nq@@mvXMqhW>aQ$
zj50-an_oZL2h=OEwZB0uHi>&G`!#GG0ZrYdPl6q6jVJgw(w$1vWv#NHH`bXVkTIP)
z;N%+-CRWoilxn4bB%WMk;YWHvqyrO|rL>5tgCn#s_$|gFWXuIU-RZg@*lVDYe)JdI
zf}x{Imr*}kQktE1P{5A2#*Woa9}Q%N{ooOoI8SxNp|`f07JqM}MjXIo$dS)PCQ#Pm
zw<m9_X;be6ati9uk@|^2J7+F4xB+jXoRbC<H?*mjey1Hc4;Ai|e|Lx$Wa_oUKE5<0
zXqGzeWoWG<ZS8@ruyZiMN_4Z~449qCcdOq_C-=T9?h$O|X3%ZB^J_|Gc#qrPSw>6k
zFR~H0BJ@kyJ7KzKG_PEopnpf_<942y-C|$OjGJ=Z3Kf-bU9j&#+mp!Q>&+dg+tc3w
zqqJkJH}tAxDIV)X6LCCIVkf<0rj1bVOVy`d<juOmSbbSU9351kowxMd-Zav1kt-^#
zmLA+&+2-n^bgx`*JyUSas5nY5G}wykaJ2iTp}ZmCK?KA(rtzz2vA^J)sP5Reg$rJN
zrT_I2`EDdosD%>(izin`x650XA)g3+JaP!k#^Ox7b{p<xz0UnuH=J8jRqEnLJBtND
zd6X!K{rM(E-HI!w$*Drb!*%p_R}9YPNg@+(b@_&XkU`8E9OrPxY}YhL#bqe%Ks<|U
zk^Zb@*`4)>xb0gK{<8XUUgh^_d?@>cp4leKNiz~{&;@-mIV!12e~6XVGKlx{ke~6q
zP&gM>shQs#wpXuy#wph#iHxoOp2n>3pIZ0ojAAV`o|V3|&XoKzh;*bworJbn|8^H^
zIWn{n>=r*6pH-CRGr36CO|y8Yq%)N)S&5O|y+pT)kB7ijbZwm)g<Xt0|J*1A>#)Yi
zvi=*Ua9Ce=0i`8ARgBPa?km?jzFp)_d;XJC@5$)n+V?*%MY_P0D%*gVjt=7g#ihv6
zOrP=JE=8BB)_>pApHtNsxC$b1^gYUzWpgS_qk=S~E*4yNC1pg0wj*WX*&fSU=FVT8
z(-q4SepzK@y5pf-rl!Z~raCSzPZtkivJ&+5k)Pjn--VJzmm+CWji{KUB*G^$HRdSh
zrS4Q?l`AJ4WaK_zI3+|s-y(CwJcu0|<?H-d4YeTWgXp@re0_KMLst{2My}^cx=Rnq
zb+9P1Rg<_aiI>+3^CsTZc)2(^xtt{fE$+3-hkxfMc8K9mP1A4f=h}ACmjrA?T=>W|
zF4XxXh-?cC*2%9eoaHl?QBhLESTulX&M7PQtLnJR8>{fm7nET>B5(XEYx+`+)=zR)
z?iuGcgpFkaGbTQ7WP*sXJ%gs(>!)Eh+;1vTDL+f3!l$er6Rb@zL0Qt2y6-F$tsXHi
zL&GiapsHz}g@8|owZdfcEXh$j2$(lWO8(jUP$OWj0UYzw#ii1hUZU5eYivPd>4Toh
zf3P#p3DA5qYv=7`q;W`F=nH5LTwx?Sw)lBCsgXi<Ugr`Lq!hQ%FeP6^rFm+7poy5t
zTHby<I@K>vRX)WvW<{Hh>5ET6*#h9!*B3-xY0+w4lr8DqNh2hjm+lY~kAsvaNI_04
zCC4v7z#6Oj-6;+`0h?nJY12-S)4`}(Zn}@<m$raeR@K&3vQ|FhNQwyvN;qY2z0?wT
z0h~-$j0i&QO(6<1M49XT9h0Ov3M>SXtT=r5TC5^_I~J)zcKtM0ACN;=m7~yS5?)!u
zcoLLB6zQUUAU6iYH+`%yuvsWToQ>g|EjI{6@Xs-VeZB9$R?<atSUyw|3oJ9j+!*@g
zzNj!DPdi!Maeom`tWE(Z^2&U$!$H*7;?Fyw$rTDCzOlh3^sXR~8LU7;u8`VO_a)7Q
z3>h|=w+~^*0=Hf>XhYdORu2_4LimOX&_I+9p9!4!)TD-yq{Z+^78xMkg#Mw}Nx|Rt
zgl9$Ko34Qp#Ck>k5>;c9-3mDo@ro<zr9ndmRNj!(my^KFsZ*VhMT7ue+24`2Awc7`
z=GY~z9!$b-^vEA8-SY^X5cl6KQowM8XJkciri;uGgLy<TMO?ojkG#&{t@(-NJ7Xh7
z?s)<lZ&tkAoY=mr#d7qpT6Dok2LQp(ePja~Z;Cvp6ew(ldZWKV2K+_>-2@M>;eKZq
zcaxg|;LY{jO*a4XI-VS>^LR3Kp{qvmw?Irr7;N|=h@iCKR=>fE(g9yt?T~S(MApT@
zRK-TVoSa~6mnCh=q18JbY)5ctb;8@!L<C9<mrba`X<Q?)pTIn>=zcmmMLAZYRU8;y
z8)-kMUUMdyQT35vULWu&VXIqoawf`Q!_=UfDefd3HWJ@=#8=ST6yJ~9@rv^$R85*p
zvE6aA`A$s!Zby7xQZAhsRgHTJ<C_Ir%r%pLstU1e;u__H)ep5q=Grt-%(K_9j$L}4
zElj5IY#2DaBDl#c+YoP{wys;d(e}rN^W1cj@2q_og6_+z%tCsomofC%=(w0%bMe{g
z@n%dtF|FBIV<==&ItJNB+4#U=(>k9Va|#>{y^o>z(`eGP+-ZK6kW;4&DsxqFhO~(T
z*JeSFHjs%XlivJ{gmLrD@3xo5(!9Dp1!3)vjp`*owep3e^!;WMF%5MUO-iREN_K}N
zMYh9H%x7J4)3|4*GMcsxsn8=uBUDyTy(O&ETz}E@mtM!@gZ@1pB*wBspp(zAC2}nD
zc^?#&<1f!#!*Qb}v{-Pzq4CYHi4vJt^lyyG)qFQ{sti*eiWUb`vMEDLN3l*Z%(n?E
zjg@SXj&;f-sp{Tqmb2Wi5$9PPc;m?_p2HY)#$K>2_(zxi0~dbSnK+?<NJOfwPv@`B
z?s`RDl5h8k6O6Dk{(MTKFj1rQ=-XXDzz|0;**uaSW@s?(K!f@n(m&f@>iX@(fP>fb
zZy%aKy(SB-mhK@NC$~ur)5Zvd;<)*t#A!^^;E^zL5q^|>aV>OT%A1NoY7Fkm`v1Y>
zUj5qD>khW+zlDg`!JAwH&GO%RQjy#}%)#=wXfpgxrpXl*lopMM_@?$Cp8yf~0|qAC
zzT0M4f8v0`H{J9}-DEKBvfQQ2$E|60VlhPQSs3X0{F4KnZ28#sZuJQ5(jAoanSaw)
zdX74RJZ!8aRK9XIMk?#~6xW3V?PXf$BlxtyxE+WA+DsP=`xiEfo+|bx<8B5<Elh{m
z_Pix`MT<<s<X-h`D{iS-klVxC$Moj?Ko>;QEj5*0za})kpVw7|Rb9bOK*iy8beXm3
zfiq0chUy%<9Oo|~aMS%7>J)9uwQ;uG*49p8?WuLbFfMSmS(_ts)5^*c+-kSm{{gWQ
zlcP1;1GrP@00rTHO~g9_044u+Q2v)K#beuL5T}*E@7(68M$`0PW;kl;ufJwE+rV0Z
zfCALrb9Vm4kog)23u5Tr#9uF*W=ku#m*vk47@zwu(vNgrvu1M*xZa_(+unvrw16jI
zR-tVOL(kaKq-++sB2ZR;5iZBq^d^OUO_;ku$j*DHu&(T#r^(e-IOTUF#f#6ubo$uc
zy3T-ZUZ3}SP@j+N_g^S0E-;Lnf%7`;<eM@vPSl%(0;YHn1>iE<y*n&rK(>&fRA$G$
z57D0f(avCRR(-^3=wIuEh+|VOCV>EB%74gw#j=^1@C5#8sz6jLXqap#RTSWm^Jad+
zG&EgL%*LuU&+l#%v;B$5hHU4Uv#<^w1=TonGK-@FW<z)i7ld>bjoK>s;_L<6*N?Od
zx?2NeVaB07o7RUe8ZzIrpqsdB55>U;T|l!x;wRPKqvx*cF@bd`dj%{_*Y%6vW^kr2
zAz}v%270S{k$y}r`QH10g+roS$|Yrq(=>!XCe5*N$t;+C1l9`TR=eM7N#BT7etfgZ
z7NerS$us}O`O0(B)vqlxAGqMcYKDQ^KYI~(KOcVvQCKLpWz)wjGo-)KbL}kEACeqW
zG&7s_xZmUMTP8jk45q$S=BZ-e^H@i9Ej+}WR>d$vNSj(NIdKGiWSny=2|~@ZL90Ys
z)JR1w!Eh{XaO)mbYXJU!U$>_qsP3;u<LK|Ul4lV7U8{gcBx5<9!UT!{0_8VRoEA+`
zpR_Vr?c<vyg{^*Xxl>H66_rE2O6_5#JotZALyl6B&T*Qe(wtkUO9G<s$V`*zYByE^
z|A@ltP{cW=94|0;as2hA6#wZ<Ir6#)b*7iNm3^l|AKdj<Do7mpA;(YWPG#21=a@8D
zrtILC{N9a~$nXtQvj#JkiEdl-VF;hQsG;glz)B%yU5+HFQYHJu7!&bW5RtnxxdI)Z
zfX>*74y}8DH%jCs5_n}lLsfAj3ZOJsrK9ZZ_jhA^5x~CFKf598&D_+50o{=5mETg|
z!;a&7KC<?GL?FbLS9$@J-$iFX{u)zf!ZaveDUq1;3bL~aepkT<@sQ;~zi=2?yG>VG
zWBwXb>n+@vCnP!aVVZiYxP3-ojw8eQaeE9xv%O9}?0%zew>!=bF8ZwA#cU&h^v3%I
z$a2y0uo&#~rAtrqh5Pc3=8<vrZ3<WDt)rt%H4ny3)0-*o&M^MP9dtpqC#^5&p7u&L
zV@J`t!_9Ut(&95_gW7y_+t%t9Z<?L^F9#W`YTl1FGuyA_t7plLnYU+D^gp7^*a}Q*
zqE6i)|9z<j0!r5t6bJgZ59j|c`~FXQKfSUNI1un2Os&d)|Kgvi!S6)E+Li#D>nF_r
zVch)JFaFs`Yxw{EDOp9^wonwsyUKSkxo~lfdU^Fy2;XI0az*+g-pUS`9J@3jSU*fG
zvNyn9p?S>rx)t<uMW)Guc(7;UgZ+5oP^W6!`2=^+U5Bh6togk`dA*MFM`Z1+v4DNN
zLKz*Jh7_C60wsq~26>_+&+VMrvV_ELKC6W$f;ieJ;`nm5rOTgQjih#=-}tN{9um1e
z9$%mRv437(xN;5-IMnYmsFcgke*SjJ{sK)tTT}Ar<m=s7j&KriZms@qth&?|CO}S2
z4gdCQGGuH_XS}o4Yh1~+O`kQdMWI1)Q3bnDVNIEoVsFUGAP_&8J#JS59U&=6q-?dc
z39HYxd}5fG^%X)}#@Hn&If*jrxe=HY8I%q(X8DlVw(;x-W5nEvFq~eV<rq>-VHUDx
zfNr7S6iMu(igN$8kiZy>dW<|j>n7+Hl+3<Yz{A(<58$b|lEaLYQJ->XN2+Q|9EtGk
zh^E?~$uak@zr2wL@Uk8|^&A9d71v(tC6H`Uh4$Z6$Dp~VT%NQVN@KMm$=uWz{T%Wd
z_Yy!V6O`f&l<gmZ)|!4qU=7M=P%`l0<(sTn|0o-u;I=nzI23)9CDpRJS<nhbO;w*o
z(bCpsiYQ|GHPan_mBo*Eh3@Z5t-U*Uf|nUE^ts0ymuN1m=zA1FKr-xDdnV$KLrcu}
zjYE1FYImd2GsabJ@16)zU)+b^p({;dKq#Q+mWWbtWIx(eO4TC~m=MC<XF$NjfsR;B
z^s}eP=TzboZc>CHXKxmBG(GCddJG%WU3^%;CT=c27+Kh%BZ~u=Hl?=@0i2OfHDo`X
z__z-j1oSSU1yx6QcOiX}z4#J`9)tLRR38gU&smgt)(BKr6~X`qZbjSU60|-jfu9pw
zz6H^6lx?pbh?cwszd>K<_U*gq3dwRh7qY(jgO21wGB114Efb=nD8kRaLy9P)hA1!@
zuWjQI98#3tN}R|W<jMD$vS!#pAa|nSA~66H&w3*^CEo}MnCrVhjh67-^DB<=*|q?g
zpYzV8Mz8nu9Kg%6o3>X+@Wcac%Y?3g{F@y#4~8P#VQ*^?Ryo1cjw6+mHgO>8s0HkR
zf^Lq=tKrBJ2sOpa+;Kssr>5|#!ql)dql5F*982AW;5?)0Yr)U26;cSUF2yO^aa$wk
ztxRN}%N|RbmX4X7ZA759Y>bRrto4?QskVvV@vNQGyCpM!Fl@Xpwf1F}GrL$kw@vn}
zJJF{koYgQNo<){HC*Pxqs?6IiczpE;8RR;emg}U)MwL`e*ce-@MqiHA%#UTvRzI-q
zbmGrM@)_0YAZ&E7xE4k&K~@;w^0MJ%Xmo7ae#{8X2rj#?-_SHckkxMA7t1ocj8e-)
z$*PpZnu@aOM#ERMAT2MgJD3I6P<ndXOyTS~P?sn5O_2?C2nNzIpzPt8DHVMwaT~I6
zuFm{a=aQL2>2FtQ8gGhjO}?cdN<*(CcR_H;NjZsJp}`9gMtYv7k%c9-@71T{tdF*j
zDcPgv2S%FgqDmtpYW5^QYr4T_xOcJYIoQ@1vUP9ECpLs7#on@*iY3RM7rnzNH21C{
z?$&4FP9_29N=j?>&X}TC(lILYKE?NHdt9fR)UQjg^mHg)57yy7Qn(a%Z^G<EPOYY!
zKIEFlZUe1&tk`rG5H(jLPO`^r_&2wHZpS{DEc2mNO16W-+w}7!jxjEM@=S>|n$}L`
zd(u~R@AS=e_Np%Rmb86|`L~c~O-lpova^HNMdfIc>Y&Vrv&^5qo3dVbn#>Wl&sgTf
zosZq^u^mEHhgn$s<{;_|#YmPLq^5Ta=75WA<4{soCQwVN#%Kzafiy00v|{=K`p=<_
z<Cs7d2goH52>l;Gr~fsy|Fgs8U&H%SQ`2!x^1IKms&p2oXN^=-;ziDajasoJ@SqAR
z1bx84FN^XL0jwxA!k-CY2&Us--tDHMb0-jeWT~Ntgutc6?Zwr)u?OSzXdJ{YE!xAq
zPNRak?&z#qedREsxM&IPhzV}JB(vV)%P`Ai0V)blC#uVYui&kX)k05xsckk!kOOO?
zjG7`?jNWe`bh=G+(+3$gHCrK9A4E3m#Rrq+s@2oGxy@^ts?}c_^=T(LVt*3Cf@lnO
zRgbj9ZHSLre&V#%%UnS4=64CPA`w@~73d+aMd_xu^1?N@5FWhl48eeS_J0M+L}{t`
z?@wuG5+Ov-#Kp6~sM_E#hgS3hu|nzYfk(Fr9QhxEBUJgyUG%tWX`v9JYc(6(a+P9H
zQlQ7{<(L^m!q3<gV6dVn&Y-=_so$X5O1yo;^FeH9o%idB4uiailOjvKrmsdBY2Z1l
zQgi!R4kfM>m0$*<>CBp^T^6O5W#QDq6d+K96tC$F;#qItBaK|G9UuhKf}DUFt$w0F
zFG)+EX4ib%I3`<%3!gTgN*pYw3d_=ejY<f<K628cy1_2lbOy5}fZ<Q3$z+HjS5xlC
zu<c(CD+KvN6P%H_PY*FAj{a&{c%EYel`JB_{oPNW&@fuq(!}sruOzw<!vMy;NP|dx
zUH)w}05AK;{#_j(6Rc}HIwW@@XO<Yht4Ai#Db!V0^yqOiZ3Fg=$IuALdnT|v@OI>#
z0TV$Ct&U@sR?VyL`ZSP!;LnE*0BMIA6Xx!@%;t~(4de7L(oQd1pqcM9J<u{52!RPB
zCSGE@gJqbX1J6Rs$(<C_hopI^#1oY75y4~|$9I>AFJm7#Oo$9$;Fs*x0|03!`}!KT
zAtUN4G)~acon!9&*5+>cK*tXmClw_(q$gd0-MKB6-eH&I0!y<9mxusyQs#StEr@l|
zY#I}FrPhCV#Q)i&9Y88D-z8eXRcN_~zV8a!^gFi8ETPi)-4aCDF7e?(^J8si-7Hlm
zsUD%FlnWEHxr7H}FvF{6=*W$Ub>z`*MJPEw(m0AYUAzA*?sH~uDN`*3!eNLL9YL$d
z$qu{AH%*NU3uyrl8xXv+v4V#z9yv7mgE;{<c2?6i49AOeV;wjcQb<37e%bqxA3x0o
zp@pCC-@52zjsXL^f?J+MfO^59!YTzZ<h<R%3ZV^p4Ie*iI?vRC_d3!LH-ys1cTV8m
z*Bm<w(iUDV$#1#QJ@796utlynFT|RF7tqIK3~LYLV*3l!$VRJ4qcZhsL*LP%(3h#G
z2GFAT_)r91DyGxcb!nZ~@`<eAezm1bv(>C4c+}>oMRJ`jPa*d-xF_71avkh;eJ8zu
z&APr}7`ftBF@r+NvP=oR|Clr{3x0_*hg;oSZJzTU@t#WkCP^HO5OzRwRU6l?mU(2<
z6m03(c59FnsHC8}8YwrxSwbN%XPQIfTT-%+zSA}=EA^nKZnCH?Qqa7*Fzi82yGPQ<
zdHJVC;t3MPH1}eIdUGIBmRNFKJCKUYJf0?iwKg@Z{l{kEj`ZH;Yj`FyY|#k8?8>&A
z&hIhQh9nWiWgX`Pe%vig(DAc<IecHu!rM(JhOD!Y$5(t?EQd@GbMo+`5UH*Ar>6M2
z=aJ9J?c&~ym!AhLI-u|MED{A0<az{gFGJ0_yO0Mzp9DDuB%LBrQFrCVmBpzfuR8Ta
zdG3-yX8fXNTcG`~t#|RsfPw8P25{{r>bQoXz?4m$!6`)<GTVFxE@Zy#@l&^;3~_h&
zf{fz!K_&jcmwx?F2&Pzs;TsWqOBp=96vDKRO<p~~xI7}pJS>mwlTs;2jRT`gdsX@J
z=ETyH%LhO8j_i1m(Z~oUWLqPXd{1X9Id5k)&uv19JWjo#ClD_)qEG8Q&^Zcm*|*+W
zxXNm{hvVPqYAbUswp*oi>rA%h{eZsx>hS?jRiF=Yx5xx*J2Q(0niFR7`(TD(j}w)O
zVNs?d<Qm=tA#(W&Lj4H@GvW)T$A`cMrE2SgS5G0!*b<vKNcMoLl6vZDUv6WWS>nC6
z+Ynm{%#8XC1Iq(O8b$!aFf)R^Np=MW;(*FgQgXC&DP{6pID&sXlBJl*R|)(#_I;Zh
zuroB03MF?pvsSVt&Ske!^Kn0_XN;M2>oxUHrO0a{=F_ch84NMt>8J`V7Hcdu$;hN4
zm7M^xHy)*F^W_fEi}z?)g(bl~pi<zT=+f0r9xV@MjC*ceq%8`MzH0I_D)|xSWMI8Q
zia>^Ai7{@WNDvZ58Bo<~Uq4pp73!5Ei8T_tpE6xUCRQ1~l%I<A2=ryG#d1Sz+aqQo
zFW>lnpJZxway8mKEX!3(Jq5fzLvaT6$_0Eg&yw7!LueMa`b7i`E&x6*dtOV3me^$O
zH#FDoVC+*xV9FZ0t~zLF9t=H=Gw!8ygOJOtF-l%ocBFtoHJyd3fYN$U0#-O6#qPjt
zLB9ZB04yJVF_RshXclA^zK(}R2YYN?dy1}#qg9U73;D{iLppVd`$GEK>|1~&>-(uw
zJNDuU7|G-XOe0DVB!QvVBjJMbVHSf^EqW0!YsU7_foJk6#?zEmb4a1hAnbRA*Sa`e
z=&enOnq!|pNosBPYHLdwqDVr#(8^c>f|mHA0|s=zbtFTxKX?n?ypmEX7i5&o;vhET
zvy#B=j|vJ(a#sZ;Eap5Qe^2e`jAeI8RFi<*F#|2>A9ai$NE{2`UEkmUha#<%)^qwI
zWbu=>QE4!ALgth+8e-cVy1t61q1SSry>y7@_<(v>w{Vi~<K(Lu4vs0e8SGZkhd?Uz
zeYM|Uw=rl~8IZf(Fb|Us!^>|74u#c&gSN1$*D5304Bk^O(`Tv7Vl?#;9Su8N8lQDS
zp3y?3=KWy$Y?0dsu{%lafT^@H-L7)b=fPtC2D@V#dlQk<!!sC|#?`3pjgxn{k?SQ3
z9nw=pRQV|7q|jO9eyq|N6CjLEhdX8z)3-Kl@B+pq(HO{+A}0R!{=1+Glt6V=6}%R8
za(5+X@90j^bJ3&19GU(l^6FN#iUjYXSmAK<xXge>mzDZ>@rp{Sn`qptmaD1T;i&9!
zsjdn*X#+Hg^mt?pc3%0>{M}zsrSI2jRxrIFpgOc)=vGv_2TF3DGe}}b%pP+xaM=5a
zp^<P*@)^KfXpe#Dd!Z)4Yg9)iC@GuL=tJ+KzF(M1bPJtK$8UWXL5JL|$m)SHaXZn0
zJ;J)5>;baGnp2)i$1J~pt_p13<&-l?;pLY1+_jSGi@v^}zXoeu#!*&+R~Bq9&V@7z
z7G8j_BJ?%lMyJoQqur!%Kk2Fe;f@#&@c<0xvRx7338bj|TbtGPHt0a)yI!#8WM_gG
zo@4i!byZrshm&XkCGQzEEXQM_Vzg@+i_|?aFoF9XW{XiNf%rgXuu=&|4-7O*vsRI2
zpaAB=O(4eE^-$<t&DMYevv3zgXf+g>t@<sHV(xFKr$c_=uJ<Usa?`GP)XK%GN?y}q
z3!a0EwfHx3n4?EaS(tl2qSA^3_(BJBMVyTCiVO!-H0wC6GJPVnV$nm0U>z_V$7C_a
zC7mA4lF4+_pEDcAIf*&dR1xKHq`R|}-}S46lrI<f66b|!4G61+{-|lkU>^p=mO!H~
z`KNiy`8a6Jb<v@E_K4Qs;;0Y4oFd>k3J0C1MDYw`RK~8vB*JTb<uw(26+6SPzm(4(
zWsH}--&1_O0v#gjP>N5N=3pzxgUO&wU;PN?KlB%qa>GLcn%xH`@K6Fu%1Olo@-2&@
z4mSCJ2s_8_T)S;c$H|Iq+csBLY}>YN+qP}nw(YFgHY@L`Q?*Z3wSDRj%=WbB!<_f%
zee|pIp?@&vs668Un#_iLxt<gRni`*#51d>Bc-V_{f%oFZ0Tc;b68UC>h0HAFhOh$h
zJe=l|%~fhC*kJy_H4;MEEmN`$;jaLcQG3N4RB!=m1imtKDn`9Xl#YZ{a>ZMu08<&y
zQy}IboXryf<b2ow%o>QDZg{tHNR8#ulws#Z`TJp8L{e|IR8T>g{Y*U_(BL&|u`?!B
z(wyPW-<v@(3<vTJ$4MP~L=!_SlWBzZKy~kv<dlVGa|<pNTMhA!ow8zFY43U!@)Att
z8@zknDNZHYbQ5oDP_T<cq9|?GR6VhO>I9&ROwp@n;U}45$@Q2@=RNp<>qGoi4M)c1
zK}`njOnR>L+GT3#`BHBER82+>YV<>?{K()WpAkcoV3+fuDp?54gt{5psmX3*0Hh0i
z!1k!aYmL^dd$-y^i`s79TBw!vDAE~2?`=o~O9Qnl16V+F-u$gAmRx8d0G9bD;qMe?
zRw^gGU3MjCRlB@mNv-^lvr5_4!bG3YZim0I*^qvPH(~X=FzBxD$8l}(uns0TkNNz<
zKz#S^rcLJE=?3jy4X@ADWC<4|-}&5YXUWWjNBSX8)y(^mtOTeZV_>+<1H1uy1*wfa
zbygC4v#B?+pA1xv8?jww+ovyCN<A1&g$^!4fc42nMbl=1t7Rz)E|K}c<&L!7drdTh
zALL_7Qcdvg&drz`Qt8uV#v>6)v}_PRBOVZp$=FA}0truR;P9<1HvaRZ@#cd)u7h&c
zh5eyx+dfVqu=K(+-_G>>Av)bnZENiOlYek*0{3R^EV%c8WVOv-J~?NcL?wwsDVkZ5
z8!oAMT2<V1E3Sw)gY*B(F1NDHs+9kc<)VLNIfDO>viA?1?O$_Ul5(H*KI=cxl;Smk
ztlv(}9w&KgH250-fyEJ%X8jE)5LcR7N)3v5iLZLm^9)1672Tkg%S+5W=JvBbXgi#O
z2HcLn#9RO!;jP8Cn7(MKVZLavg|5XTTUW(ca9(~{<8~^2d=PD#Ers<ssDZR)%rZ1n
zC6}>Gpk_p5sRK((=bj<<`LcNu(u84r{BXKIvg0$5!?#^W)IvSBZH!rE?o5gI_&aXg
z$pX`>$4ER;nZrs$s6D@Vn>DST>$zP#!-VoIST3hg4GC!f`*E3mym;CvuOX2ETO3O$
zrhLuRKv6nID(a<{{(Nya21r_MS%z9jS*2~;Lhq7w{9{d_0Lh+aX((Gs`M9;i3I>Rg
zVwKU_UFZ6xG^Kc;)VzS{aM$0u3<SHN^QGywixf0RE$uAIT=<&NZ-hwhNfO??8?*yB
zZThA6<U8RMKpR~S&s^JNBdT1oeP*2mQGUNLPs&`eV4<Fee8+FKQEj6@RGSbwvH8fe
zK%6Z+?e-1)htQ^dwN`1ma3xU1dC_jxcaV04vVxRfE~docjFJMIYGqzfiUe)+ljgOa
zY3wy4lhZ&u3Y*BUVKK*38cqU}m?BxVjZ)HTYPyvBJtjGf9I`T2h4ri79U+Kq9tk(<
z+LqiDk@kv^Ba4I?%1cI&q0KL33qS0@H7!tXlHSA`dY{ST2+W1Jo0bq^1X-B)7)l2S
z4wjHjv@kSJn*KH=8@d=4Fu<Q)4_;^5$Uj5uM0Lf6hN82$EtHhW(`jTrWh~3djV9qA
zJR2shmU^okA(_NZlxbZgsvdRd{=FghtriE`HpD-4wkQb1aFgom2AK_}Z9(YKeP1)`
z-X)y({QF>69*i)tz1lYDH#%&RL=c6YJXZqJc(lEW->TM*#}Bo2FCJkM?8Gx!9SV8_
z=-o*tNxY&9h8STS4I$*W_Sj^MYNY<fdM6A<!eK&=L}Y~BgnW@z?h~r)HwmrFJhJ#W
z(RH|V2LDu55aye<i5jA3GL2Jr21(+d_pdkjhxox@g$K>y{8Ux2;=yiBgFF$Tu9hD?
z^$)_^#$)dUs+^=@gG%_NzS&dyhwU!J`dJ%MQ^T>vGwj4=-D{v_r?7ffquQP)i-2CP
ze#Cc@u5<uKj?jO4Aq!EzW7b1T8+!r0wb*f>d(H|~L#DT}=?AG+A3CyN?H<m7YZ)D)
zc0Dp_+vnj4pZ9>_-Pk(y34g9(z_mTD>H4|}F0vlk1!XCfIYT-KqZI9tO~K@E{0XQn
zsJ#>h=sC8=%%@Z31P>jEz35dwLjIf>8!j)Waxx0ThK1D9_jLlPCJD#rIyS3nc+4K6
z0$S#Ko~!Keyv00*0+rb5;oMuDx;HSVt8^-Yfg!-*^k|mGYXALRHTk-`(K|kIpTUR5
ztXw1vaFV$R$AE@ij;ExwoXXc^UZHboxWT%)`HqKZ`XE$3VO1auo>-Mtn%btc)4jGT
zyv^GJ@WVw*PChhkWOEba-R`GEgj%F9w?QGpHJ{ezM9F30P`^ew%UuNJbjqVjf|E<G
zSb?YBal<Qy38n@BGsNqikinmQi7WB13bv8^`C*(~J@u@)^xSpl_Kwm!?dZ3sMO;%D
zB_>0d&ayjjMW09+Z#xxz&waWo`)uoC!)B#a3sQtu**KijT;J59af;+KYbM|wjz%Kh
z>)eeh0Rr?M9&euNo7i&%#Hs;u2EmqBvLQPbcLrMCZWR%rl)H6|L+2YFf+O=>{g?M<
zeAlYkp9%zA?}g6exO2h714Oge*JERFrAoy<rvo|6LG~(FLS74aw!^>P;r>tU?clB8
zKJe#eF8<+W{{L>~e<%z8x|y3)v=lbjk-cVWS|v=Je;FXIUq0wjWZ7B9nGV-AeEHrb
zGBp2bWOrV+&z0Qx?tUJZ-UC5jwN44y6@AY3n4U{Ic!=S&1!>vKOW75;ho(Z=ffzmb
zqYNp?OEoS?EvU^x;Ot4JK<_~>Z7psmBao~p2G|!+KKKWt_r5S>;8Xg$bgVA?P=Lbb
z2nCx|%hkpH?g^cbmpcK%IN1+YMHZ4|oGb1LlUS!vUa6>4Td97OU|QjT>i1D@I11tt
z(F$YC1o-cxKzF(d4&<UQok~$K>TtzrLqw!tKsyRu3h_maFyv$-KcL&Z^br(qh{3V?
zJ?$g5SY$U!3NZx8LmI(H5doN|Q3`Tn3uUo5{R?p=^3w31@bd7=5RMef_9D8Q+?XIb
zIz9?5kTL#vbM<nI1f&J28Z}z}1<wQsRkNfT6Mxw$<eJs!;ux0jceW%<tr1AnVxy??
zqQI^D(pxJ&=yYOjD3#ney8_m+1$>t!XG@V`#Vm^aPj(rX4&*1hO!kvqw%mUx*EOjr
zI%08_qcpq&Sn+@RrG&EjMiC8Zj$_zNP6^ngx0*~L->t!v_1DrWj?#FEr%7nRA~%^Z
z?<c%0Mx!bpbLiAUv4n^m?F!)Mf~%d*3+$QwvJKjj1`|M)X{hU#K$Qb0LJ-M4V(bl2
zY_VU8_2vm5l#K^J>4%|v=a<d2MWvfV#tQ{><GH&ZHh=&J^-_#wkDAL>eJIH45(0(~
z)~YRv4~usXPb4riTZCug?*eOZq(Ssy4%<2~K&5q;8A6*(6zf23)<5_lU@a7VIzW6!
zrrqoNu*O}Boe-0@CGeA9UIld!fDkU;mzDA|<(7|(wd$kS9bLj^udEJsx4L4YVkXb(
zm_m~elO|Lc@zw38mWI1v5>PAlF=DO-d}r#%&ji`P&JZXz!scx@9l_HirMg>7{c&jd
znIZn*3KIn69j^(d$pRhe*hYYs?7I3n(?O>CIsH*c5kYQ*ExC1r2hIG+4iemdnj+fI
zTq2H-b_iy~R)(!Lvu-*xSvpSM*Zg?2v*&ufhoOI4Wxy;}CWli2U>f_KiIs);29i~6
z*Jl3;9H~bd^8mFU04{J#=71v)obRQODn~bZo}nHn^EG3x&z?hlU`xIO=~?=l?bT5L
zZ9l|1&tkGb&0a+P2>rs-@(clSZhgh2hna9C1+Z7#u0;358h_W`5M1sgw;zsjIBjhA
z$1zA)9Kan1rr>Nr_zh_vShLQcV5Pe|dHQ;!MUs~6DaY;0Z(`NUD6X_H`xZIv%R#oa
zJq%E^Qo*ta%fr6qi_l-6nRRF&@;6@FNw3`(;I6^BGoz<!N$E^%*+(3no?Sx9p-fC{
zfqK3mU1OJl@ie$QZj?%9@wV|R7(=}JSL`^ohK)Mem*RHjLL|ea2p*Ac8fzXvmGFEB
z!_rcfY{AYPxg<~hhnJO4{V1~gBG@bTv&&RBvz@zp^hx3?dxbnZQ9-rUUB`@uz5jrU
zw6&H1s>d`Do!i=PM`0g}aOcgiu$pTNd|{_K#BJ_DEi|`1Vb;(TTYVB;52X}Q3%x=5
zB`yfIkaYhEo9-N-`l^dvVkFU)vCc+g6Yaur#;o3^vSRt<CAL%JwFG;@azxk(hr3?s
zu!6fp-^RQ##K}Bm<()P5-->s;#VhaDwEK=+jra(fj<DIu4t{lf3ZLrMsyBA{^9^w|
zWOMkol(?M+QT)a5o9y;$tX|>i<;AfDk4^bw$B`9$AwnZBc>5HG63Ax`>y}aZZOf(v
zHk-6{`kuYV4Bhmg_(h@wmvC>YF0PwH+^2N^)Y-Kh?d)=Pi|fWkfLC9qDeA4g!jtwq
zhx5Kw(&f@i?C-SM?MFP~O*Qz;Nb_g^{vqD~y37Ax{~Yt*eP#bs@%r!Fb4?M<f$AS4
zW}OlMfaJeD;9p%r|9TL%)Xx<*L=nHSzfrm@we$^uz4=EG6i6%q+nHFY*2G$okK?T{
zK<W>Y3~|ToecqjB1TfbKYo;zkBskn39G@M(i%p74hNg`HS@q0EoIhG^^DlpOi$l^Q
zPWr<eS6>gqZe!bE`d!NCH9wHmVZC&2J)%vt0`)N(yBOk=IBd9}Nz9P)=Cv5?v?<Is
z|FyJ7<a`!1@0cS7IA;jYa#I8x$gw1HE2$L#qC*#{b%oxlI7bgpKwPX?T1VA>%8mn>
zy7#RUf#-}v+U8IYF8MBIaw=eV9FbrQcdL)YZp6#i#gN7p#^~tA;f*&aeA<qx0rV>5
z;vB_>D!!V`q92*vnDq-nn%-h}F0O?Dc0|D2v)~$r%13q8w!MB+q5t(!HX%zyL(Jx~
z*CVl^JJb&0pT=x~C>iI5F?1qtS<qIviVN<tNId(O^8??ROd1qp6M|b&M14LwEkLcJ
zb|%cE!+~tmdmH&e-cKmqe_A@lR9hbgO<MBJ+oIKfkr=*PI$+HH>ZOim#0orwxHlPo
zfZF-b%2PgwM|B_!cEUfcvKJh*31p}{*<6O0Jja13Z*g~Zc6R%sZ)XmN{OEZUG4#&l
zKee&|*goNkA^G4^8Q|<e?E2{G3XQMQ>6`<~(Q?R>dmiD?2-fg4nZH1>#M_aB2!hgP
zfN8@OW57y+L6yH<Z?u`5dXF6%zNb%4aM;^>g>lwD@1YjhIdFQ-dN$^ypc=Ko%ewr`
zuwlTx76@6e(u4Z3Dy7b~e82u~F491~k)oR%YXLv%ffp}hp|=O!Jgjf&jhtjD0yzDy
z;ln4<+Mh(nKhD+B)2fm9^Nl|3*x(gjvmQ6c0)|#OVPG&ja3wm%;9S<%W(*toR9lf|
z%ga3To(y}SGg7;*HO0QbwP6bU1og(%#RhP$c<x*#(`;Yq7D=fT@>f(uqp6^J+C#vH
zE4Zu$90ifheJ`j}ka%w18nn`(%W5{@i(jOL`97a;QT@$Ez_4HV#MERxY<iQtS|G6x
zJfw_=`H`s}m%lDpWVsg|8k{rp;T?xDtx>i8b=vfN8PM?^Rlvsd6y?Gsx9&;~>QBhj
zizjm<G!ViR?nyBRHy-+@c35NP(+-iOX=U&{4w!4t$foe%+Y#s~3HPe2;_hczv||E*
zaj6*)IuxKKoTBsv$}Kke^dA|%Q%o}Vnkog09ON!G>a4ZAv|u4_u<MVmU>>-%cVrq<
zEFVRn_WohCNP}6<Ygws~MF?+b$O(9cL3qoYaKP20_i5?8n+mQBPA2xH?Ng$M!&P>S
zEL7XGzM5*j+vL{H?x8YnhnnUZIH;bzNhcFx;&s+}nmhLbS=&!^$Ub7{y}2#{sI8H=
zt8J3TU8eF%<=kO!C$}LTU^|7KK@^`Ux)ySqz3`qbyd<}7AvYwIkIT=b&yUc_dz$f#
z*1hY;?*cv_B|bjFd(VhF((0EDI&PfWH4@SlCC0vRiNdQGdY{~2#0=AEVCxUwSwqc?
zh*B_e6?H;^;<zr|d!*lf$Em5SgGA%-^l1G!tHHPStOjm?q_(259j{KiQbOTSnK%u=
zChy@^y-dv`1r(x3uT+#K6a!h8G&t-FyphvVnlU1c&QH?9TAGuZ;=uGR!k?)}<Py*c
zIhq@J`WqwMC<i6Ki{XQA^$$As>y9J$bR93bBSnS$v2FHd?Y1V?Mlf}nwUu;~c9o)N
zo!XgC<_jliwVqDy-js@N_CR|pyxctm&@yNZ+9gjIiy{P4)~I^pB!zw5_qGNkN_nx7
zzWV#5be-=R_OcllUJVdd3?(tIfw);L2{)OSv-fp|R{G(Vsd+X92_A}D|Ii2-LWZ?J
z`0`<=o7ECKwAMokw$2;mA8~Q3<2Tzd%tc(=t!9CPr9?SO-r5@e7VR^JI-{O7EfwHK
z&?ALpj3*ZfeAf-*51`P)2H6D_HMv_=MdpNc5GWXICheOaH(D$IWkUWCZe8IHK--DJ
z_@ZgO#37su7UvOmP2)<djP4&2GE0q9DVA)Jq7z4*@_NJgx1`^EgyuIE0;NwFSz{`q
zst#ZzAkjWaoB~jhtxCmpMP1*vohM#vj-@Y^?SQbLuRW1o*(Cz;A-16P_~8T{|6Q$<
zYm3a$@xa~Go|<9(?&b%v?R+t}tu>`5(Cnb;Vx66}NQ*iAR--EV7QVJrXOV54@}9L4
z-c!ZL4j|IVi&QqOhHL^N_wd-OaMq^Bn5%dYS_Oe$#I#?mZRhBiUMVT`Vf_SN&hkFg
z)+ZQzj!>L3dNcu!Hq(S0q>+(PSD5K5ag30CnO^rs0k`*JDIP{ZT-Y%n_ix9+$PpjJ
zH^k0JUS+xD{Cqioo!Ps1NiIN^J<bWDlJNqlYjBD>(omKpRkXo&aZ3n&0TNcwx-vu;
zP&*Zpt6zKB;+{02HA;Kk_*WH!Z2m8#2A+@cSUFB*q@@@+=1%-m>`E38=ED{03bIVr
zOU|H4ANi%PZ>n<G{@9=#FD{LBqi77Ct@EO=;puw<htiU^4Dm7-n|~F29A&XIGtZYH
zWY`Lrs;r)9AeG=|?pxuC9+^2m-T|ei#n5X%g?~*$6d<ak$Vj7CPT$O74hT??HLet>
zA>u0W^y9f|F5SWhhK0+Z$Tl9H5jYzrr2kejdSAGf6S@eeR9bjmOJt#dn)Uq4p=dHL
zqGE=&D_=dHzG-^!p*>0XhCQhN3zNdXj3rDsFj~D^A}w}oPPmM@+U*>*-ik>i2^l|G
zDU)z6xyCs0Z`_?F=#1|rhjVI;Fh94R{Nur@zg$mo$PTWAg)jmW0||ZDF9{?@mwaOr
zf(onXd<&OmV=kidHVT9h=YvR1O)y+j3PM<MQfIh&NmJ$IV-jX_u_JXoq5jDyo}-Ms
zRjokn(j}b<DRvj3Trl2Q&oab4@#jXgJh0&~-&uKpXr8uVOV-Rg^`c{4ow)ZfL=A1r
zk(RQ7`=4!@z3!b&{RsEB<|INpw^(CTYp4x!87{@#{^zPH#Lz086I&+CEv2Xfc%5!O
z3DZ=lP`^FEbV=}rDE!S>79H^i1V0)uLfny1y7+Bdth$XOCf4!95dMWf>M+fUv~%3j
zG-T5fuJ5ckPGf=weGl03!T|U}-=m|5(CB}LguSTdWI0EN%rlE6p<~JHbZ-MZTH!81
zsnI$?V%p-tBk&DToR8d}4CCxF>;;@kh1_Mv42_F&f4`ndibWgqnT>z6VE_ghN>}}`
zl#M~Dr!G{POqId@z^vVkBaaTAr!enJT&i6TaX$vCV&dFf_eXHEaxUxP>yyj5{Oafx
zn%;_}s950KSm=uZ!I-L6!hdBrSd%UIJwQ7@N%6TII>wvs@Uwoq31^`8{kh<VZdF{i
zeG#30dR-kKH6zczrM;qr-@_So2rZ6rX#57#6}ep0UCz5@)Kdd&1f_Gnr_sDfo!fj2
zn!o~;?0uju7Z#Z$v$!`S9#J`%+BcswzW!@S3xIVpMf*bkN*Idw2|fx{nq9xcPkq*m
z#3=0!as?H~N~hl^JWX0+Xpd7P3}Y{kG0(!JNd%p5SXw+bnCbhplhfsh|3y?s3Mc1M
z3yQ1pSX$jj|B<Mh^w!AgJl4#b-)8j^ca&-JIBEFcrA<x$FkI}VwKphs|0)barX2~P
zntto=G8f_^NN+iDxaqM``NL@SUATIZZO+$lZxfF=WjuOrUx8D4M^@Cu0k)!iM3)k-
zClw&C)1AM>1#kF34@5}X7^QH-tQ|2LusKc`3i2IU9W$pvXsT)`|N9hHtNNbld!4|e
z2qnJ(bFLvmOOD6Ny()L1(;=k>UqWJRA2A4SYY@sC{$uQFFqKn5A!@X|MB<s;awjB}
zueCe|8%5ujs#;kncagsS)Zf3f)8#4kwqjztGi97{`)l<J_D`B!6lP--%yvPk4^6FJ
z;=-t$PnY5>;^uEpgp2mcXyoGajhsKFZIfb$1kfU4f+mEfE-WMFw{cRbiJTVFH{Y*?
z5>1y9r)UwtX+F0p*P^}I=OlC}5+0OC&Ph3uRkvO&SO$nQ7|F!O6`FihBJV&~YMsh=
z&B!=$trU2#gCcm^;9|V%t4R;Q)2>EKVwm&;xk#{A%d5h?TRI)BBWNS0(9KElFjfn+
zDQ0#%*d+m^N4iq4(nZu87#oYbQhYyg*m6<zAgP7lgDb|wEu&;+7H!zSEDle_6v@Hc
zS!SnaM3j9@n;-uW<nwu_hyEJp+r4Bt#q}cAWos;O7UARNVEMY8xl*g~`N}YZ3BKO;
zX?<A%quj0?L0WWoy4>D$ci>a~z!ko|yZZWjtI(uu!|d{`eceNGZHY~cGd5&c!-2WK
z?Ir<Xs|b%QS@cuy_3MQ0>!sklhS)d~d(LG&wS4NKsP2te0+S69vM#jDPI;>M8=HH3
z%)d5jV9ZH1@oV9?t|P^-Ny4?Uge$cN8gla><YVImJhm)D;aomEwV-x#l8O|Yon;9h
z;_Ie~0f8@)(Dr<*Ds6rJrbtzoq4aQ7oS`#}I!v?*lfg6cW|cRAZdTf)m(DmA9u9g!
z-h{X~9jS#lf}^P*9;p#>6R4gk=%BZFSj2C`Up@m4nD6R&lWC57VNsb+4;hnpQtsX8
zk`FD`My(|KH&@|xok8|cnEINhZ4`XDaWbX%!u%sfC!zE2|2H0JvaaQ${U@T4{{wlz
z|8FP1|Hx?kYv}7zwNltyMf`&9$)70O0)l~<3~h)oPzoe3`*TCezp`#22MB9x{-^&)
zXk_iN$HpZGgvkH=YO8%2I@m$Fhv(BVCpzR^Xf=e~dB2piZ{#8)QlG<)CsYVo<afnG
z&;IrV#fegDre@%tU-CL*`p+7OaGk0!X6jdA_(aIi9>FQ)O`Pr{`uHnh@O&Y3lzNqR
zUrcec0IK5*FfSfIIU&M!gc-|yFQS4YP2xUrvL9SEUl1`OzE`L}aVCT|hQtmGo*rso
z;S>Kb6vUq|9AXADH82H^ffvybFl%yMlK!Gd1BM_ablun&c)Cq=K9IB9&RzaDhg6U+
z#dujkbx~`Iy&R?;-GL4Wf3>4!;?%vr#NiBut3obfbzHDlW>i5Ur#HZY+NQ3*g?IBf
z=kF|2fjv)A)-zqJHN$J$H&B?<0!SP{1F}d@w%4&pI-O6iJqnPyJ3!1T7j)yPgYY`k
zwqY4a0IvdT9Ssn~S0a{IsYo)}lc$8@q3Y;}Cl(NPv>@%HvRh^$_g#5M+~VvKht8<}
z8Rn>B=urhJps4`<%GfEvd(1W&!9&T060nq<+<P6JLA#&`%h5;Rg<?=_;j4%Jii05`
zsiP-Oe+{>lON<#kO=n#Va5xrjf$lw~vaq#sj)cwJ+A9XU>|3fb(ssl-fpy0jsOP_S
zv2D6mJzAT^P-QJ!Td+dj-skD^ff}Y$N!Ht-ukG#ZJWDHugHd(gVSvH<d)neL5WUtj
z`!mV;?8e4tyP0vi&SRKbzBLg;Pye0&na@7TbJBPg+Kdv8ix)&33J<WQ&TNY`qStVr
z9HFX%mzR23efQ2&ojXc0QiMywd2_YstE0MsomH+MM@d_vRS*isJ$r49b8FtzW@MM?
zx1-H4tVD?H8gjhz$PvUI8cY1Vj2flf>Ae}~skhpf<eQpra|m$zrA|&#-h%q{614>$
zfbb+0JWMfC4tV_a;btsH9D}0)(E|8GG)ZZi^|Ugq27cZYT_$&djoI1gf(Exm|JlE+
zyg4vd3BLtfe*TeQm1vHW6fp@G+W`8!22ODo^c()10pUTgWtyKUjvWtk(-B6q1wvO?
zO2)4ap|?4KFH9Lhh767RAu1x<P48g?>=IUVF3Jq+BE&k4HH#tX_J>0a$Kk0D^;V4Q
z5V*|VqnjPD-6qU}BcG5hBEM=pP9R*nC50rb<bt?OhIe2|X*|1B6NNBrZ>=5KE=0}q
zg8vzoqU*uaC!am$=47Y-;hRKdLY#PYIaj2tb%7Eghh8JBz#x4@)Cq<t6RF=0C+rB&
z-FscyP~3Mk^Ov`FG84195SB6EmZ*Aab1-6zzjwpxZ*Z-Sv4*F^)!|^>N8NiA58!y^
z58wxUC`bJ?=~sUiwJPQ&xp=A8t<++vS(7?U2K!UC{5}L;fEe{&spOXB*)VOp(BAp`
zL{V|i9#qV(fJzY^{e3%=J@f_!!o4t$<Sz;dI|RMa-^6p|wDSX@*!;O405B<t(0`fs
znq;2FBbOqI5c;Fh>)F6HB%9>@+>uCtbOZ~;VqX}7VcTj-^MuLpP!aVg>za{9AE+AW
zrtv)GR3ndGzWHZ|l;mlfU&wiIv1jj*)a1vGJrnCEEowsmfzIDCyi>2tIDjj`zQ-^U
z#W_02ZWiqJOQC%}0ACLkN>?yPL=G9TM&5aU*>SJ=t~?&~nI4J91nk(6zpPX8c4eh2
z-6#caAO=w3YkU(6EZ`HQ*B_x_WPGaIY!|WgE7f1_V0k3^B9FH?aJ?sG1>xmARk3yq
zY!(Rx9%4gc65R}=^e8EHo8|*%^7f_}*lQ{gnTe?Zl$6|@YN?}+W=Tqw8wGGjLNYXt
zW0T~?f5=<-4YHp}eR$c*f+Z`8#AT8MnPTw7yQt<rR6JH%;>j##EMZ~;DHBo}cb9dI
zr#MzUf;lY7<payRJn7(#O-N9DG98s0kj<7ZXM{JJgZ7yzpO0K0QCWCq)R|F1A@SwM
zqWQ5!Eq)|XkC-BApkChkQuh!c7#3+ON1f5sCrtKi1g;7QovAnq)&Kdr*wpHBV)a>s
z5`L~u3B7RLH~16{aPRsO3n&<_1B;R&SE}(kh=KVVv<YwRP5L(`=QioI)sGO5uOMCc
zlI%;iU-2?9VKn_%ePceVyZP=jSCr*<+4gZHd6@?qnXUe3v*K-5!I3Kon^=GBIQZPa
zG#Vl!rrji(L+150C{x(^@svDW@#6_-ALPxUK-7t4l!#lW$w<s?J7U{1Id){-_Fix3
zl*rV@E67R%YCd~T6T-R*DwOFA+KxV>09u=bS9TUntnZ(FWOL8<*zHYMCvSxi27MTl
z4^1e76uYMUbO<USQ1f-$=5NDsGAM@EbZ2^OnpVmuI6vq6uUVFRk2=}aIY4PF5$bep
zE$W~p9r6z+7PQtnl<eQG4}@LKZuLmOlg_9nU#^EZyz;-S-d?JU8;ryGYUqWz@#j#b
zIn&r=YBbI3MTj#|M2gyYC`vtX!NwqU-fhEkSH$m7;`qj?j!|XHR8%*%nn8M6wIRw9
z(E!dp#6AsSmt5jOl!OSWEK<NpwegSQWz5ExIpo0^gm#3`8x=pPH<!d^3m&^f<_Ww!
z?Ob?XwYowE*6aFdV`in#oTj%c2niE>D#Eo9PPVW|PFp^F_Gf>*^I2FhtGu7UKrZ|a
zdu6%&&UkJLGGVDb^7?e%xHO{GKK!wHfZ%oId(?IamDvuJlu&bNeEhLu(fs<{RqL>J
zQ^)gjyw7A%RP%Gq3cN9~3cJu_+LnvNTSLwSz@Q%`vA53}gFPa>+Qm}ujCCu{Y-L(h
z>O)AEHYZ3ow&DT@%cD(5abkrFMeiy7bI-~CQ`+f1T^Vn*gB08z_otrS7H^!FgUXxS
z+q3E`4AgRh1ST?iebsa+L1yoOPLU-tk6ZTCO$KH_L)XIb9MmTzswv&0eT8Q8^H1~b
zUoARsA0DyqU;kb^|F_vQdm~#*J-2_Sp0AXM1ZVvx6XM@mssDMzKZM19eMBXx%vo=6
zB6>ZmK&$J<wT3S|0d+)3Dg3TWQuQ@(BjIRsV>AsD4;_ssm>2Ux`+VjR5Nk%_vZ}_z
zPCv-xaA0RLl<vSelTVuV_yxxOgf^i`YpBQktNefw%|bi~!6A>t$Vf;cj$2$nowPzc
z&B=fjUWSsSMPy}6i6qCZyv9*pzHwQYwo$-4?t$KG{WQ}VtH8TWQ|0WdZ&uD;Qispy
z%ih1nhtnoCKI7Q%*@Awd-aX!|#t+h{ys>Q2(@0S*mRw%lua;6YrGhff*|-`~u8IRv
z*h~4y4<7!TMkQDd)u@~?31Zk*R53oeUY*>)P<*0XFcdu%T<>Pc{J`z?XYo&boKVT~
z2d;RDI{#6U_Yd`fvLRVXzIe4`9t;ozusM?I=n#pHWp5E($V`zC$5J-k{s*qOToZLo
zLh&MLpNCq1)-?u#>mq2DhQH_t>WszMbQ?UkL#6<1i6Mt%u1-oN%{rI8P61muC@uu0
zXILay%{IP*|Fl|pDNVcqF(R+#uq_uFWN6II8!HcC&@q!8&e#sqR9ZJ79x#@E6o3Cq
zE{Qk-xglNwd=j-NP7x}&QIh|)%qU&2DOofn&F!es)IRD#o;1^}Rx#5b<yckDBx9Ki
za7chJpS(5FW^0xxl1$HbAFdNnYg2Eoz?;4e>a#*mazK~)rayG^7NB9D{eiC74qh1g
zzAsAmqp!McpX=@`Gf*2@4nE$82jjIjAYc|}q#KPt%g%=x=VhNN#Fu{`-#9kT=W=8f
z13cQP%SNn^M9V|ZCp70Oi0^Kn>-=s$X2f;`KgITReh|i>hYzQXK&tpJaVYoR3z+vJ
zUfWj_+le3WN4(2^ltFm#mFXa_)yirFdTa;aLJ)ZM)zD}~7s0k4p8Mx&9gOwn$1Zu^
z5BUK*oK$<~*zdU{q;~UW+Dw<|x<|pXpAcr#;(5G55BpN$;SV0Rf)A$q%0D=)g$VMe
zeY1->C3xsm#sWcY*Zt?NlSpBH!=()2Y+$}Ri>)7?y&lGXgxNtuXfBS29(&fHH$AU$
zqMj{O+VAC{$6iR>NUK#@YKUv}l*iiRzq6OK1D>Nm8cUnPsSrR<`&(H*Wi9(zx@H$z
zQ6E$`o6oK+y15#BcR%|t4@BGhE7LYwuG#B1KQOE++$-WngPD{M343rhUkrN5h94N#
zs}!sn==;DCK>B*G)ck8{y`nL*qfIA<f7?Ti@c^uN3~xE%n2Krjj_i0^`!$c}wWr`=
zd1O?26P)KQkLL-qio8}uc^ANWc3^d_4;*jG5>b1mHD;!@29LUyI`2#)LK1<lokL&Z
z$DDJXq>^d!6w3NT?|SIe@i=v$H}N~d$Gu_qIHMXzGr?c)-R^1Dh<VmC5axRpPDFL1
z4JT*bCJVXyQ6u9@3|%&$Y-ceQV~zlLrd%d6Bf;vgKYWAO*LCOh<?NIV^Gx^Sd#3jb
zvS>chT;C03HxGyBJtpeuX%r?tW98g$;HWa)Yz(+LYf{c<LFUH~ZEEqxN+=KOUazjp
zuWPug!%lbj2_p47=^l;A@VpkFs<cI=7e*mnSvw#~0yzA(T}&DyN3-H6M=>=oZJBDe
z(aZBe@st}JH_K(CwychUq%kT336(F6@`VGp(`#Iwx3gYq#gkLnn!+Mc;BVgEzl&wK
z*#c5AJB+JJ6(zp0UR__0Yt&{)wt?+q_B62#U#xO=xk?v>Sg7tFSV-OhT$R_m>9rO1
zsUCz5*;}>G3tAGa5H4>T%Uoj=2iGT<9h><xu_5+Sr)N$l-VMeA$9GVm-34AlqvvBk
zG}>tA8}lOLtN}QVTiV<Q;c6QN5nOH+&sooMp8-v3NLvlfHoohX;#Q|iZso@mykCh4
zXKtS;pdQjWb99s@0%l>D`LbPhMw{3qKqWC-td1K{NIaf-I-72vnD0Vhekvl_lH$V5
z*!)A>lIJnc(&N9hC~T74w+dm=?6;U;wC&muOfrxLUkO%-or0EKtDMhISP$KDIoq1*
z>p=fVyc@-5S=}{me_dA1ZxjD*HrLQ}YNa)#!Beae?_{=P*2J}1?mC$V7ay4Cuy%YA
zV+^_CqBd_PI}SM^oTW3NgE$9IO2cvffCJAS9IbH*7=*7$yDegAD7K07kioZs->l=E
z)t%8P<X4#Kp<UF`P7*WHK>@#>kOI57eR=rx>*;l*r~d6eTKR!|h3VCx>;~UdW9~Z5
zrd&@TdgCx*ROK$JqP8jp%q50>;Ol>T%>OfB4S(ry8}nlkD^mP79N~XGa<2d7l^asG
zuvr(!{L0p0C`oe1CunIt!_9hd6bj8y6~~7v<oT>0T?KaiAykY67V~WFbkA_1c|eoq
zEs0|(QA8eh?dTl4`ovr|P-FUVK;DLRgHZ2B5WDKi#e(nuwr>u<$Jp1g&lcv^SBsT)
zi=Z*els>H&MYNk?LJc=czn|1?gSgrcZHifya!tEM!Ew^ZfMj)z<;a;py<fP27#Z>K
z7<mUPB|?Q$<IXy)L||Q;NJv-^_;6oX2O3`&>tFQxl}$2p<>qK8`{;%|!5uL&!Hr4*
zH4lO9fLbCMZiH&@#2CGR@1ctnhoDSSJi7R;pN5p&7P=>f4Hj51<R94pI&)-~EdUoG
z`CHI))Pz4;2ix^$6RC^@*$f#eRuL0)GxN9yYk3vZAwDeZkP;c;iq;6$?+#!Saa$J}
zbU#imdN?ke8&)sG6ICJ^07sAFl=8J)($6>*<TlepM1uoRNQ5F8DHM~YPpdByjF$b)
z&Y0Ohp2%1*O0YHao*AxkDOwNSj|?LN{HB^+)G*I2N-#~Tk25|I(b=uC_f!~jlEY3o
z$3hcQKk+$HX-`vKP9aLe5HXXxmVwO2U(ug{+ID=*sdr8DAk!?UkA|q$(}p8!w@f(>
zIl)uNTF*0T3>0o`0RSTb%J{&b?1_~E$1hmr%NNG|Is|XSE9URLRnK!@&kgPBD;f8L
zYKhBx*|m-~%$m~mTmLznYKMp4!d2~c&JK*nCt#l2GA_VNn)~vVxBhlci`NgPv5WWK
z#=6F97ue6cgX^ISuyNs1b4TlCYXTJ*cKH(K*I1L!KAfGyss+XT&sxrN_D|X8G)i~#
z%%_FVi&&iJHCzY2i0F2JVa8VTyFibF%hpxHM#q<x%`QXybw8eC^~P6}iya8=?-Vz@
z&Z}6M>h+ZsK?S2Im@vP2l+-Mb-6k*ZOEdG>=l*MtEWL={&+6Ad@_!O`AKHh&TC_(>
z;I?yc2hE@PnxNPHo@2N)`vsimy3KUl#UqD{!zthV(l}kbu7g`c<iT8y1M>JfvD`1}
zS32;Me@*nB``mDC??!4pgNb{%0M~$W4m1<OQOn}s?%%&|^^%eJU*@e`?`*+-YPX1~
zR=eZnk<xE~Jp{?S)>I4z54(TL1g1RXUCim@)o^D%i}i_HSQVrKBCle!v+<+6VRQD^
zSG%}f>bP%3i^zBco)qxiAmd$j^W}1NlYZ5~jJt??-l5(U^Krs%$v+u=c`SFo05GEk
z4sV7iKzr^BhzDd*82}(*l@ibFiw%-plz;YN@h3lj9iEuO#f@Z-n59z3Y3vZjlifa;
zK3QLL0I_Am$GSa9F7>T7@F>JP_CD>ntXA}7Wv@SM3IBn1lO%z|i`}}D4B{k-Mn}1W
zilA@;u|x>WajU*hIQZ7SV_pnn(wZLe4JJyX6wlQ>Vklx4ATjo-P5I{b3W#~W@V#oD
zOhBo}7$KM!Wk*6(>pwt&rQ~=Y-Zcv;p?Q<}<YYJ6Nz)8w(kj&lKuo6xq()>xMEBbU
zAB)!r_XU#T5RXQ`C!4;99{rudm}8H?J?G}p1*Iz_4A&4ML|d#@n@Z3nhbu&;=jyx1
zBz=k-=J?SoIIc#t{1AC}!aI&nA%=LUD@H75nO^KtTTHl6=h`jms>Umu)Jk1R+Th9X
z7B51yst<w`846XZh1iWRhO5hHL28lz>rnp&1{hL_Gjg_^4XEero-&w+JPqlUJ<?%b
zeHxKL==itmn3!yaqR=nohV%9Ow^sho$<@Yj`AY7n+8erbY{#U-s{CPV{Fo@4>8$hS
z%uO2nz$cTfX*GKyf$AT@Q^at>x5yJzFY;c*@@EqZ5z?y6SVBW1_LnT6MI#OvMUvF{
z$@oEW1TlA*Z}ZtMP-<2lLKF!ySK(cl4+4h-22X+!X8hEzxIcM>cFbD+-BD<eP7z(Q
zIvT|Lq58&#sx78k#HKyTYLrq23~BgBqY%YzvZ0Vs7SlgEui{bRZjmyK1HX7+KptGE
zC9-*^OgM_*GhnNksvlwY0U&j*Lcp7GmG+&r<P`|;&?I?HyGa#bqD%C?C+_Hs@SlWJ
z;*31NKrxgMi|X>bDd;0Chiuen1^4nk(bm!t<vR2JsgpF_c}<<rx%ep{=6)2*101Ss
z;&hrny6A)#tl(;Y@<!>&dJl=rSga39Hyg?hwRHpS7NfZX#|nk{-y>Svo~M*^tZg2S
z9^3e^w;Ds*-*!3XU%6i<cRH;z8&}2dp_j<wHr?FqjiKhBrN)PMH$qz;wwhLlm|n>>
zMwl<U48Ac8IDeH&@Szi>=@qBnC7RGf;D+!A>j9k615mys+oc!ClG`xFP!h)f((ba1
zRhJdPj1SGdZV~Y@DY<YV&l}1VSj>Q_!v5$htUygTX9L<CY=OBhw!5dmCa!WZ!>Nb4
zv}E43r3B_QjQ`znf2>$JKcI;n{rXoiwDh4(Dsbuzc{)*oP0_FU7c!)hXn1E>IgQkv
zV7Igr{?)l+ER<4(6Urj5cy|?ExOmxOHgpRs=)|M5Qf1fxjhWTtJ&MqhciQTc6)cgg
zqC7ExE9j5KiLQn!p~OdE&n-m&tLZP}7Hr(K^63Q81DH`~PN(RsQ@rHSbAmq50^^|n
zQc_($ZTUVt?-Wz{=tGJ)ny1s%=*=)L2w`H4>|H6HadD~P{8l{nC6E8e2eUs1wztLQ
z@B32#S7HN6xEmL`x?qgbhzRv~vG!9S#IWd0SWFPU>aNZp-hmY^SHf3_4lGxLE@haZ
z&urSIPkF%+J_oB*k?O9GnJ){?9~+ZgXWv``M^-6U{zTId&3-J0T`2WbH4D0x7@BeS
z)FEQM5JM$tb}QiQuH1GsNOxx#)UPK-@FM@m%cQVPtMpQQtglN&BCot;fMrY!r9;f;
z26!ItW2bP3O3r*FeppMEqa#(=+vSA7t=nCU2AqT@@A*&jjl8zk=LSI&z3ATw;_smP
z!>6x59d2?y5`^RT8clYmoAtLE_1ZK;s9ptmK!;NnAmV^qm4I}6B7Nui3SoKISDVU_
z*GH45(q)I{oxhdT`eaUidU#)`RzN4M^w9{F4T#TRh9SEKhiaG+sT50VQs)cv^K@O4
zqlkkCi?9zZ1|=hmYOfZ)tLj}zfTCW-mk`f4smQ^$GR}vDx1Hqo@%snkK<}CMsX<{^
zU$aBnMuk(+gdqI*pKh|uM4E1TE`$XM(53v@%VgEg^=Uwz=D90U&2S1{E>b7vlm}@V
zq*%w;Eg6p;^4LaX(vHOx&<|LaYuo9Zlo|KTFGUI|!*bDxa;!}|sIE!9tn4@&o=ZG)
zQDKME#Kc+37Nhr#6A1rwXab^o33oUwJxuv8(qi_Lq_ZREx-(bV0~?44ZS0}gbNo3+
z<06U^G;uHM4kxi$Itf;ta}8&sjM<ntsp56Fj3afjR*k`TV0as6k~8R|p}6K)^-am6
zF@jrsTknF4kzB7AOF<+|n25CCsd=e+5!FTSF&o7#a481VT;~Yxmn#xnw*52sL?ttl
zQ=rfGrKw2=Kc++a!l5BEHuC<|1gDOBcF$la=T|$~ruvodsA;&*2$xev0VAGAf{PM0
zCD>^|EvbjWqj55shdf^y3BPV*aRlGQ<HZTbKGsuQv@<PkBv?8DD=aUfry;Z`q%SD6
zNAWAm{cayfIbu{9*BPZM68}%^jbr)@D{!gsk?runOnLEH6M_P`IRPPuiSc*4S+qTe
zfPs#--Ee^Yso}69w-=)sdB4V?)#<RtEyP^J$ztMmnYn2J*fA(D6u}(nCQ;4MYmI4{
zsXg26y&!a{>yi{9g1N7ELtR968Ji8NxT^-uqQ!-rVa1ZF(V=1LPZuU|4Hif7LEHFc
zYvn`oG!aqyC6tf!1!)t1iG@F!yaE?$i8Op!whEVTN8W~-Ys&z`U}ku72bTCPhb&fQ
zj;J3$a#~=3jJ<?zVxR5+J6wI{gZ?sG@S*7>W}{jdh<cb8a-LU#@2Vr9Qz;r0t|4W4
ze%+SE;Z=S5Sehy+LRI3a74ThzsM!RwoQ)o{k(4oNY6`9U#@WYTe^j|!p(Z&bCqj%m
z(HcPYRPmz;O%oRZ=QzE}U-x^)b>jVgi_~I>^oNZ%$1+EO^7~Fzg9{jakGvcaWNvl(
zBAm-;ICvEsWn6Ak#iRDqR0D*66FdvaEgR1_{0zNhuM#Jf8kK;$c^7qA6-u!Azg?)2
zZ?#WtqL-p;PwE@n#!?n1f<`|+g+zU%3ad@6&1}~h7}*RKx<%~M6RN0mw|-e}%<<Oc
zF4eH&Zp>XZ=Cahac!_ij_$S-4bFJ?kBDE&d<5U&n$(PTb3YN-JJyoz!dKBJ$9e6Lb
z`aiXQ<|nBxv>-a{|7<H*o@kW|#f3k_3Ij8pP?OLl)V_o5o}84b6%HnAKz=n9T6GT#
zTiIPof<?fi9AvV?;1TE{pp3axe|`M=Z8$<7f)gpTx~P87x=c7H0Pv~WIidlMn>AD3
z!GuZV&BeiCCxX_H>Qv$(9(hq?&sNb=X2G_M8b5s}0wZ`utmx39n&e#}Xm^NXNm7NX
z=Pvxq@VIMPY(nj7{0&E`tz#>Cg)z)i+1i`!ac{2%v@8;B$fErFf3vs#=Uhir*@}Yj
zlLL|esoNy}cLwl(&UH?XIu2%5|7EhvQqr>7U`6)I_8AfihjGqlmj=JcGvgXXwL+>T
zk--xSXo4^dGY=h$r;-zE$ouvRNz9~_danfx6N>vM3i21l&6zvbz<g1P#$_MG;1d&V
z5jknpsB;RmjFR@uOO4`>WWq>!rQ<9;6_tFxa{Y^F((3Uoa8X@&iye*m??OekF)P|{
zL?WE(@2nT;V#64-ENV)-niAuBX>mwga}wt!p-$1^R9-CTY376+Nzpc+(t{BVp#eid
zI<ka&g^v&8PyCb%ZZagD0A-qTuDED8XwSHDbtU@^ay8UoBL%2<&?O@UlKx3cBLo#V
z5HHLp?Q#wOA8j40NY2@ak|}Kvb0EJJu@P-anvz6*U4=wYKiAqI2oErmo9?<vLQJht
zo@{B@=-@KY-Dy{Nr?#SO61Fj(QOH(-N>rZV#C+FPWBasdIvcfsJV`Pz2tZ8%mObjO
zsTScS5yhO;joKw2^E(w%{K=9-_9vnT*d@Yhbw^b6JzWg?A|A$BWtPUwC0F`VYh$t+
zk4S}bsZT<Qar{{DOcT1sp0J@XpKt<ccIPCDa2;4&JhEd(b@GB~@+4ILmfK|7H&G6j
z1ilWrB_FF4PcA<Rx%C75r%K9QW@t2qoOS^($57UYIb&3KZf9zDE^wzq+_D@^Y=@%S
zG8Wpfb=p!vrgi)6#|BqpnS(HlwbO9`>tO00B_zyb<8XOD#8_C=VxNi^d&!yVB#<Lh
zFnbRS<6sCb%FAfc>>+irHEhEFJ6p!HOU-UK&)24dzy$EZ&ZJ`W?^QpcZtQswrs2>E
zx1iyPTJgiZ<lRxD@t0+oipRJLcPA^!F}I_fbikzCd~wv}&qQ2hnZp{_a|<M_o-+`z
zHhyGr6xj#p6sE<<R;X)MqugH1!I@0~W~f6ih0(gcfMQX>Uo+sv3PqDOy>%s25tyLc
zUQfPSi?IUy6wRM}siT2o+4~g=A1Gvh(ey*t7`|x}lKJRko%$({WAR8u6kNbR&_iZa
zcg-%Kut@ZMP4OJ|hf;U*v-`=61aanBjRS)&|0tSf$hKC5rXiEh1yZ9tE1CTg*O07!
zl~I->=vQsRtl0M-7Eu+S^zV9eOYwT!D_~eF7t^T#VAK8H#O3`nwPeYf&8oMc4knT{
z?wBXx;FCACUbrXd+o(PDavY3zPA$F~To){jMo%d(nU=?h^wGhmdvnNu*Y2b2>>59H
zjMg^Hn`8lKj1oe^67TU_zb7;4tdoH~Js$p`if!+DdPUiAB;bv-*nrdBoQ_M9Ia!Eo
zp}2W~kgJsfZYS8c#8eQ}+g5KSwXR1SM7-5(AbbX3vNvRu<8Kz6+6vm3h1&GCscl?O
zYe%2BaPpL>IC?X@FruF@!_YvL1s4m-g$`!AjYNs7vnP_d`2iYB?~D_o<eb7t(SoJU
zr`*YQr)kC(t{?}oEtp2%j*X3)vS4hGP6$4heE3oa1oX(T(7x!|tewTvY`*zKFk-Qi
zzn@QFvDBZ)y^k(>{wbKsUyz<9kcglhG^v8N<4bggAZyydvg8I_FX4H;QG6R4+kZD0
zBp3og&-|{MX<e|&B><I+nF0xo1=XvO(O#iUDzYY6AmQ3v8n7u8i!daK??9GeR$HFG
zeg{m?s<R^c$p3tue#(|1O>lOQ0zI>hdh6cM>JFPldF(a_SwC^cZIQ^U|2sG1cCX#U
zcly3J>OQ=@>*=OHQOHvCZu|xM@4cmeo6B%Ca&Y{2&Jt(s1N*>Fy&pN^e{(ti#{qgq
z4mt*UmInXja;{RfvRVJx(CPdLS8Klv3WX1eZ6U2X@I|VW@U_S&l*1x0z(cCgCF+Sa
zRQbGqPBY+QFI;n8szP@6oX#{c&c>L5zOYm>jj%+J!S=Xf#_`_cOVanL%Y>3=Nq8a8
z+7LsJ3+YLN5Huw7rcWp#w9Owe+6w`!x^Sb^-!uuW?z+>G&u~1|6x_>h;q<-;G~^u)
zQyqkv2QCS_%n~;WvH2hs>OV9%n7KkM=WsHo7{6lWg~hDdByr*;qrg)j)<>uc+@Q{+
z4?G_cJCIQ@%fe|*9QOb4-J_4fCU7bC))k4lKp)tCAH(Sr`QnpA5>^YWzJ86KLWij*
z;+H_6`5;E1r73`y){om<`^5`ldvt%3-DcO{`}itPO)=aRB)W~(JQwW55Tvb_jMNS<
zy$?c5!a8ZB>w#JQLS8~P0MS3_A_xrRE$Q%MH>uY--n1#ro=#f%5ab`77ymX2OYTQz
zKQE@g9!vizB@_GJOo!IBLOkql&r6^cj9nGlbcT<ICqtmQ5ESg@iOFf5`E9s+uoX{6
zf(G87@~lQ&i{>x2|L8Ig>0NnfsQE!m>j}enLm#d;P9z0dg1iZNi`%-2lF37Fg+S`h
zI2@Z!YpIP=?9M*L9xg!Fc04({5Vcoi%f4p2a7-P^KIKpScdzv#ZfQY^G30o;$=o#X
zaTHzqRI5tDgpGZ%lnHwa{Y_{lf4g>P2|8hsAFTs;Vs>VDd6pidxIDd8Gs)y^H@H!T
zNPtNS6SGh!`i=7@w^tTCxjHS^WcD<s<83#ezc;sURzJ4eyG$dtF&L)o?NACcd!fkK
z(cM*X=AqkqOEl@YoyC_Ej3Y!mNw{3^G|Nth#gv&<SU`d3siq<$tGisse2di5S9`v?
z(ND-&=JHvsgc^sA8_aM`k8?q{!hLy#(dwq90!w|w{Km;EmajHN7cuz>%P_hzdK&67
z0jx!Fzc_9nef@hFzMsHpN#gNOg7u=d{6i#OU>Or@qeL@qVd_59!hBU-(cF;js!;;Q
z&|)N2S3w%tB3^oYS6vxP?udMmd#*1hwt*Kbs}m`Lu|~RHq)0L^_98|RTPK**{~+ug
zyEB2Jtijl>m=)W$ZQHi3iYvBl+qP|0Y&%b!Nl&kt^>+7~o-gMooV)Kn8w_g0S2ZL)
z9C3C*_4$s2ZBt=U;z2du*w64}8Vx1KLutS3jFU<8(R{Q>%`NkEAD>`t=jLBr#spS7
z$|bo~gxNL4W|Q<Q=Xg@Com=`^Y&4}#L!;==PKw-Wffh~Ebnqn&&pi<&A-KDFfTpV+
z4nM(a!=DW%$x=q1WfWvrpk`wg(jYo43E#!YuJ8$zi0Y2k>dOlG)cHo;Tm8qnvkMp#
z0>z4&l6Z@&FR39X@|}ussau#-afeld_XQ2yTbDOBty=*AL<9uH*qE4DTW>B`+*P!J
z2Mcf2e9{S>xW8eCyyO1-9V+>?`;4iyb|2k%Xigub=l`_E`|B6cBfMP<2;`EV@zr9u
zd3gqwEjQP9TB)&&?R{p^@Sm2bZ39npFEA4ILT-BRK+SUs2(t@bJin?u0rmF~%`<=(
zB|kNA#p%v-uLBl29sZ<-;%X???{z&iQ?D5e>dHBHY9=|>lbIL`*k)(8Js6$RUIQo?
zqd1S|3RF*ddt)wec7n6V@Wt3iPjA<E(lRy+UjUf;a8T}&*89813q<B#3Bg#unNzu6
z#)o=m`eVGcceNC_Kr%S{KWsINb>>pRbXJX8z8$lYDmQKM#9$rndMv&W8venoS)9C9
zAAIp~r-5)1{1gk*fouVkdyhl3$U3&|ELa)L7m8;!qKr@rN&*Q_ArwWH@Oi97Ow9HD
zqJew-<u#+X+kj^#;c&N>Q@syJc!=usOl#n_U1(54^K^L99f>JV399~PSdMKGR8aH!
zDoL?tI~<iQy?}eQY|><*hN3sLX4BzLawlqaT_K4e364FQ+i#KBr{ib1J17jML#K@0
zxf<Zc$M{gn)+gM?hJeiV5JfAhIZfX9XcB<p-#rQm4CN`P(-)xlUlKB#N(TVc9u<JB
z8lD<5^rq=7vZ@^6p3l)9Y<_k=*!VkV>e|F_w|HFw_C}{lRiyJHdZ2A;6M-PA-a9+A
z3kI*)JK`Y@6dt3ubVH4CR%O=Iis3Z6V>)?iOl1thiY@Kb>!F}4qiv0~hYvl_LQNR@
zof22S*oIAd87l=^cq4ywsMel6LAef}1GfwEt{KY!R1o;&#40$M1P2tZaEbeq44<pk
z^MpFwnmar$IVL~S;`JqXnF$6cVl+tROfmLxGg!aT&iMlO8w!65f@FMz4Sw-w)O=m@
z2}G<N>#L?%H-ruU(N^t!oRuyiV*f)^5S@MJQrCpiuZJq{ig5mPZ`yS4PRQOkJ9(;J
z@%~wIoXuM;zh*z)UW-aS@6nLX9CA%qNwUwc<}R+!utU%NubsUa-~O$OGi8_XuIm)9
z;HK0U*s+bIt}!%Ucis*k$?cJb$&|C~s`T3Bh?q9jR2}BQr!GD-niGC38>`6<tbw+9
zCi071%r@f{lW33g)SG)TDpr&9X@**`15cV40IZ*FG5(jIXwKDa$YyX54h{Not?gt~
z#Svf1)L7Oby?p^o%$>W4LYGXU>$OdA!SBq{9{O>_aJmPDE^KfSOSq2&mD~<x$1LJW
z#ggE(Zk%-3c!>py-FzUw@Bem!+ZJp;`2`IG^nm(P%J%>DRr^mg;Ob(bZ{lR>X8M0d
zsuXM3I&Vn)0D?EP?rkX$gb@@r%>5^|@w~N)!QDg=T=j$k2+Lqq;P8atUpu;A@2-F-
zkTp3v_Y*2&#zp$s#Vuyu!Mz^f_unf=TPzca-s$YZxVwxBph)JNumW9jgG}QKLeg+U
zz9<1(!Iif}srnXWxu}K^U&4wLrt?7TKY~CX3(T;hJDf<9$}pbvon!^ri#aCQ3m|^3
zXoAzgZVjMGjJQdmV*t~>;~T&v3Dq=bY9$y}1iQZ@F0M$y<bo%Ohe=u~o*xOG>77)N
zZ0v8&dIt&hB#qQQ393mUFi~n<!YdP{G*&;=Y#d2Xl6%1rVz?W6<fU}N4B^xQMLEcT
zm$YV2d0juT3%H3RIQ0|}svZWZ5*7FW>7Y@{)?yMuY(u=6Dar%{3<)^R9Ioa%hgo1}
z*_?SB(m0Cpt1-o?6EzJQDhW<C^0qsR)GK$<H-0ozT>w~ybyCPhv5d6h(G`+%!k!F*
zwBiKMf3#LyCL_z?Uf40N7jPs%UnELUr6lCdzcZVL@US^$r54dp)s!>k9DxgY{z)%N
z5YoaLV;NACTn?H`(WDd<g_CAZXwqO=!ZcTnilCwERWLnu3Nj)Urea%?Df`J+Zd5_j
zQM6%(q0=S!xZB(vdB*JnSlfTh;BkO*^bSixz8zd>&vv)L?K<(`a^xUBTl^_3>~o$a
z?_YZupUSx^yvLtiFVuF}*7uIN8C(MeoO_)X@Ve}-7xuaOz|EHNXTklO7X_Vzh#CRL
z!s<}B`;*Y$)?brrHSj{K!>RX;(z|hTJqK^Mex%Kgna|C1kFLAnVCx;QnG0u&SVO-3
zwC4Wj1zx9@ziErwd`<-J6eG)hh63n&0Uu$U+#XLJvvAyYz~TD0+Plvwh5eZOu9qCY
zMO+8>g8pApF_d@&oLzlx-&DOU0K!5;_hu;D1-E~09+KQZUrz%)Zi%8dc0u-wLB`v!
z*><8wOjLiTYe+i=Xxui;SV*w+s+SnR%oX<+CEO^Vxcxpi{Nt~+OZ;ksQwQvwS@Irf
zL6Nn91JA^ZKD^j-lOrdeAVZ-#HY-Gq-2>#sk-yR1+6~foyFM(t#|!<Au^>~5jjjeh
za0dKqDI&F)vj&kgQCX4s-g{AR2-7j+bI}*vQG?Gqxh6VCA0uM3ze?nn1J{-=)CAc%
zdUt!ky>Ahw;l`p;Mhk9rb%k;Jzl!AqlwI*J$wvqzvFTRYqQ5kg6cbo)z6L@d!`}bZ
zI5-xY>QpA4#_STMQ%cglsP2lP@uBOKwhfDL2Rdt-RVqQ-kpRl**>0X&#1@{67^_30
z`H8T|%ZFTyu1i2qe4H4Iaf2)|@2Txv*2?dlhG7=(4M|JaOj0I0-&e{FclCm~FR{xt
z@No6fogaj6er5IZ!vj57k2Y<<`;4sAi_SjF+%_)%B8zpOGWHTv8yi%N#TRk`=au&o
zPr18F;$rqmK}6rR6BPk{H}YbBu2Y!J8@3_n|GkGeN{)luu*gLiiDyWKt8@!!a~;ST
zcvcJp*62p(rL`tIqa0T3>_;!qq&I>UN0uJJHpazg7PfRVpDHrF^PwPaaaph>poC31
zy_cv&YZRM}(j0`*o_ZU)Y?vLp9D2NL86ftWDY~S99d(SHci$(@IcpMDem}gcTQ-B`
zy(rr>@a%UY&qt$%#glf(i;d~zO%D4dwh3RIbH8pDrO09om;W~=>B!DBzw)KE6M3}I
z7QfNNx`btFMN+*!-7$EO12t=qLVFf{VV5eykUrChKOH@R%UL!V{c?x3?$rrR7K5p}
zFvT&KG`^m0NM~h$JARO_rSUZ>!zkOiGIbt5vMT@s+~-da$`?2!;P%Y8WA#t;0OiDF
zt)!-P^XALZX32ByC18>I+lXuEX`3mwGc-UgniS95Dp=ysIVuz6&kcZpkMai1At0G8
z11{{6P+ZT$N&|zVP|qT5iey<@g8rgO;+XRJiXt;*93_@$QOO7^H{jLdO^+r)0#C$a
zWmhzIN=S1~(z4ks%14jVLUdR2kWN#gOcRD82U|h;1}Osm&Z1Axvv)K=(0~!&eeV(u
zK_Ofm$gCYTciAQ2B<MCq{-;@^FKDFlei?`MJvh|$Z7D*jV@GX+5RipHCRv4HT3k>O
zuxQ}7u+}>d+2hOnqNobK1HFW|XZ&_bcgyH|ycU9{d~&PA;I{(~xF`MSnXI?t2@|)z
zp-^Y6{Bv}{Qk>{Oh;auT7RlCvA=<b;l%Tq4&72^bMozu5%DL+_z(5&Z{+CEc21dq~
zI$Em6sl)L-3VR3ymQ=}Hy-GK@U;G;bxfb8Hd;*3(H@n^*sB@0ZH*k#7f<E~`U*P4t
zU_Ja^3iZdb%30hlYu1wZ7ZYwP4NXR&v2Sm0_>qQpIhC~;qHD-+ZqUx{<5x<(SZFoQ
z_})3}Pk=-!o#p^{$g@817uK*Yk7R_>X|EV<oiw*nw%0EGkoIue;~ih(hcMDjcIIR4
zpLOUC1pMovW~C`$_Iu6@Z{%gppb>kDx27JP2uM2xWt9x7;*2tD_9hOiaZLa!%FBa|
zcV|hwFAu~L!QBA9(2un2DCxn3uIywE4?<<OKRgYH5g#rd;<kv{P`qN0P(x0>`f@Zr
zwulP!ZnAy_yN&iEHvgDwMEVt5-t1To2S>K1#6zwnj8B8?(>7O-ksf6>QkDD*c&8%&
z%4OdYJ*8nOs)xM+Nz<of@b^|myRqtU>Ldu@qGH{W7_)w(hSvjL?Xym`{C?gxSLF0Q
zYerrW(2k@HOc#TDv+H3we8FJbW@TtsH2yInrJJoe_+hAO=2gr`<Xqt%Wc#ZkvQn$!
z$Ehq2Es`JxU8}f}zry)?VspB{(#}F%^K$fLy(Pl_%ukZrqPW6ZsMT$Cn&~S*r>-g2
z>x=3!N#3$dud}xMG%Fxb85xu}5M7e%^fg{Vbe&vsTutq^DU&7Ljz**#*^7y@72Pg?
zgpUzrrQE5wxm1miHPF91XcJzF^J?L~`P+(zY5|XNSpMcq{!gEvYUhYQ*{6x$<g*#?
z%F=#?J^irn=>ok+XK^p$=U&@4yT8|!hw{$Z0e)fqt{2-E{Qtw({3jQ_hdmqA^h326
z{^XHU{;vSb*wVqm)aidhtSfG7=S7K@+`C$iL6tzftg!4preK954kE|udS_e6lu0Ez
zQL9l9&3g%_-<_G?ezTlgw9O`*ju2*T1Z=8Mn&*5se6f7hTh%Z&0SD8iMA)72?z9DX
zkOcFK=wpx!(8LlYAT=VtiDnfC3ER_QSs#abo^>p)`m|42Q1s6fHzTu=LfIXO%pCE!
z0vdy2-KmpxGw%L|1wUktb!Lz$xLVEq+qAYhIP&anUtQB@B+%+X<RK507$WLGr{gd6
z2i@~>MDa|G9D)U{1I0kE2crMOp(7HrOP;D{AkIGYE8z2-R9WEp^xGjGDM|Cx>(^{O
zv>4u{M4yfbGreRm>;r{}*d1B=2K1x}%A4QIGHgvBH0WxfB%@%yCv$w)Qj=gn2j)OH
z*(9_sZr9&mCY1H@Iv_Usp{tKl;SvKsjEl1f9;6533sg*=$=~#T9@W2#ceeJSUb?a{
z1uR1al7ePi;0dWp#N?$Uyjj@LzlotyYwb>H%!njxs#|qcB-7&Jr!T>5XPysKo>8Ev
zV@|NMFlnBHM;|OD3}(UN#Q>ycAwDJt8uWT7)_S1OJW)m@M-X)2>8K58flxX=RAXLo
zO`2&?aVWxzF5uO;qUT^cQdq-#B(G8_`BU)w?G9sW4khAhnDOc03%mPkhZZg?SOaz6
zW{*9rbwD?>ke}|^zb?RH_;;mYf6^}ygJ#awp=RE;epxdFtKER*K8pp-+zprUW1^&u
zRujtkP2Fg9BN}`j_!z*4%@GKkTzR$z-6HkpE#tUW5k{1*Uh8GKc$K;eV9s5{LP@kf
zv@j3E7y4x@($5Be;dofXZ<xO{y8b(J6C=Pp%A6?+JB1p<5m^s>STR_#)OXSTL4lZA
zfG~6<fAVa@&du|#W;wSwh#}Y&?n?H+J<ZBZ(yU9q6b`XCvOxzM!s_aS8q#{gUh?dK
zW&CAJuhLRKq*MyYq9*OIz4qnnx#%ZE*mWy-z9qD^{3m`44k-Nr$qU<yB_p<qNur5y
z$mOLTObz>RFVu<KeGiWFC^|9ptmk)f5hg(_tswX87FM2MJO8nTPE0M=A!aK^ui(If
z!Br1`AI8f#r1;BtR!p6&SgudK=)A0_ox-%ZHS`%i!vKKy6q{5P|BHZwBz{#aR~LWd
z?du<~DJ5&lemKQHSMi)E^#wfQ5RG$<a-G@Am8&hMwz)vvH*mBig{-G=mNMc*{yRcb
z7*l+junT1N@If_=e)$g&TI4rKQ_um52lEu6c&5TM{m<!2eKApdn96=nWHo7hnituu
zVtU&ya--&GI$pPx7#v?9TNl(i6Tfb(%-=fhscUrXg%Te-IUKu@^aY<=JBJMsS54z&
zDp&^+aBjR)+o7#|f@iEfSwPyUaCn6YND>BKM%9U+PsTa6)A`tPCi19r85=*HE7@_~
zq6u66j^;4qggIWGkS}IZKSbXe*Yha%C@l!$>iwR3oSPXTU%4Bmyi}!H%|B6ddL7_E
zc4U$(QEY3=n8A=_jY)XbfR{9wEXPx$`j8Qs=MW?B{W~fNEJpJI4LUJ90v9Am0w!#R
zpb+@s#F!3+;)Es+!W*%kKbbE-S4yAI9(8@Dp!VmNSiD1mz!0O(_8(@n84Rz{M8;r4
z8{`1z!FsPf4x(ohR2Q3_*y6LTQO$rprag)gvdF&pfW%*PS)-OAGA+0`;ldq6+&N79
z&9@thCOcJ2vQ%4KD)@T@nq(P2nqY7<J{JrcGb@&P%X2-!9`UE=QF+rp=r5<Qf?^F|
zZsCURJm$uEBu3C_jBZ#}CIJ|$AWv>+25|`4BEKc*74Bz`NwSpwS*9hBslN~*BNCg!
z*IDr82L*dd6Kzfa(+9>}44Jm0+?C{1(5tQzwbY6%r*9zJ7<xIemXMS}e2d+b`D_~F
z-=nY@y+Cb3e?Yd>o*506`a{HC#7%PzN$%q;{PTH+^Z#cRnWtKaSxv`?P(O4mn^$4S
zyu^Vd+dTn&8>(&W!+4;Wb{MPu5mtUj1cO<rL)Sk5NJiyYG?|)+cYMqC1ezGSy1Kn*
zu5q2YEV6fY{o=gy>DR3LwKbLKpgtXeky<1EMHpr0_D9U9BP@;-Y|4-rjIhTr5POY}
z%)No?B|_us4>cm^AVsQCA2%UhSQZrN#GyEZcNidARfm8sEL2jUH!NuWwQZH4waW0I
z^*Cd0gyT^mEQqy~C6`w}QX@h%`Z&^&0|Pj;sQKjghfPe3iiK1%R*I}DlOK17)A{c!
zyqj8nzXUdQoqh+f?npa;LhnQ-&CXosQYwRpo4fwd^k@)9F4CW-qi%a|Z`TgCmyN><
zK7GWOx2W3L*SFS=oQFXF?-BLP+EgFcm-BnoTi1dU7EJk|yZ<tXhZhZa;79(;h(?u9
zyko)ouS1zfc4X1yzmHZDU8S`fPR7nXjyp3<07p|^6d<Cu)^^9)G+*OhEu@&}FHEV<
z={Ro0qu!tT2%3<{nKU(G^dw~$5CvNcj3@4yrF0EdEwpuIJbd!iXXB&7vGTn>;<XV^
zwDe6~v4Jll{ZWk*PG#JJ04}z-AoB6VRI5vr&gel?3a5o;PD=9NWoH{_xpa$(l7hiH
z48H>N37`RK%bP@__Y}Iz)M$o+EnLAAPN<HD31SbOHC!cmX&6TzWn<lV4gc}R_IBuA
z)S_a1+B?<Cq<P(VOZJ!^U{1_~n0S@(F2xOyJ^GNUB?&j~#@^`0KADDK_1e6<4~6}H
z_0*R%HW8D<<6EO(w{U0}V7-Y{`Xn&5Mt1RNVPo7bDx^5?cGt&(lBHHTr8Z4Cjy9Q#
z_FxFAA73+?+Id~COl*uT*UG2L8$u4o*&>>nCD2!Rlah+KXOBioX;cY+B1_b@X~73F
z%ie(RBSRnzrIhYD655!&{HFb=e=8px_qTQQ4x;v!Vt~ab`PPxVN&i?H9Qx@QsHVi#
zK}&+?*py%?vYn`A@1d~@MZ0%bL)1n``qc)KCDsyxY@xnAHjJI^04(}ro@eNW43oVo
z*+D2*X!*30=I%rrCWJIvFdQ3G^{_&7l9@BF7CIywUJST*69VvkGX6I?u{EU$oxLO9
z(fZWK#MwlKQ+$hv#_$$ISbh!5a8g;PdsLI2RCr>uIi+_^oRahPF1!FGjn<eHb0L0H
zO<Q-tgj#VmRmSvlaaeIzTltxYA@5Z&VK_@`tqP=NLj{F0icoG*Lo0`4J;=ae3iW-e
zN<UveYC6znIGv%X9~t??InM#}laqT!AYI;dlBbkSKZ)9CGHE6Q2OVp481|^urxd8-
z%Sv4$cN!V<kF5$j(g`DRQ|A<}iFL@S(u4Eq6?8=~UQH`ZMhzcM4C0cgY^m^Tb^D8d
zQ=2evVeIKcg|I3B%Mjm4KpGkyYr$7?1-9^(ZewL*CBy-EFI7XcJ^K@rS=-PQ;`Ksv
z!}f?z+q<oK%iezHWCPzwTkQNnw<USf$GN4M=-rm*TX7@=>dRWkKiYBJqcB2boj4D^
zcawkRr_nItH?X|Dd;!fUk;6z&UUkc7NmV4(I=;elL%aK}(AC$_qQhRNi`G!6=ZmTx
z7^%K+b9d5((EQ3g{`a`Z^qP_~=a-mGRXSHO@E^=t2Ie&feW%%>bwAk)gZE}?Bl7#>
z`%4tQ;d<kB1R>Czmq-t(XB;||*I+88o3Y(HBpwe}6DBeFnA;t67E_U>q3L~Uq61Qt
zyV=8u&W3V-adCBl=bPK%;J=j$>NAxmF4{Iv`RU%Sjm(gpb4b1M4{e{o(+5?cbw-&x
zahzV|eW#r$m$q)oBvsKK=H_9C*@q(213FjPOmA5vw3_z_V#c{^IrKW|&*R5w=h5RU
zY3(i%Glwe%Ms}n14$TkcMbtn23%8N;3Z34Z-$&7|zCihl7jyZUcXz{?HOqs|3p_8^
zCEhJF7q{&_U6{_c;MbwV4DAyShqnS?k05(eKHdZm#C*%kkt6q!wB`XuFb=Zz`8dpm
zp4Y9h(I@{*63X>9Otl`~{zx_?H~A|l>ZY?|{CLxU%jT8&w|gyl31TQ5=bPB&WzFGt
z;tQj_yq_sAsEEF*<i`)Wd|c}j!MGar{pS1icNQw}?GI})gAY-_m_U*0V>(IY@&NyH
zN`keBBq65c-B&W3<Bg1H+(5m%>`Ya~W1Fh5=!&3Qe7vz!#gdVp91CiIS2k6Ewb08U
ztto~)Q2+}u>KzyZ7d==t9e7e}kPm^4R5`9AdASwLe1%CMX9DWFuw~@Xb3@jb7GpXW
z>_F{q*dDGBS4UI;hm=ZFl%phhPVEzdUKMFrqz-Zwx``Ry#43c{GgOY%!M=NiW0`qR
zLH~vgspJd`+}WW(40bfKz#E#YlT9M`c%rcJ+te4)ob-J-L}qCaPDEOR+-Qk01gsv?
zkUfcwIDTYulbM7>XvR<}+yUz^El-m9UtyaWpQ!J?Es1Zn(^C%jd)4=4BI-a`?k(Q7
ziOn;@P2hYeQC$|22ejB-v1;+yoNBO?%9O(5aTSBX(ZQG#CC%|vU3A(xhusuV^}|Up
z7pD^A;}-GTB_lV%jhxx6^D$@n2;mG^a%UKe)bkWo3)8<mlEq5^$-3L{7%D4&MjSm8
zi`GGg*_I@^LM(KDU$`uVLEgTW)$`<V<V4t?t06DV3D%l{AnzQPMK=drrVF^#d|8OH
z8NI9TrFqO}bjkYO+wwi9y-s(pM@!j@xy*^<)i1Wo<^PVGPO3;hgE|~A{AHP|KL$s7
zfh7zxE-~l+SBW`ai|f94#;W|6-pE-EHiw1DU))Q99x{d`;v*Ey3Q{Bxj&s<kPC3FF
z$L*=FgVHG{&!uj2OBK7u5K&34mAs*%wC%-k_)Sxhj;`Ydi0lE>?BZP8%)&XH2*2o)
zE+C`N;Ru$(k$yJ%$hGIhDj?!I<3N9~WvT-Ym}qlWk56m_tECD4xy%MjOZxX`3g4s3
zwX5@IKF}G~7i5R{VQemEIxFL-<h`Poo{`ZFCg-_kA^a+yb`@so?W1Iow-o8}1T*;<
zSukrsGxJ|lpwJcwnx?fXib$Z#xjZR$E*85%&Q=6sk!;1ekW>xH7nveLhc8O=#_*v^
z_Hm1{yBTL0di=-0a3!9cn<}-=XJ!bGgKYUrD2$qwmA{%zaby7GESA^eSVA1e<rr<#
z%4vvv`U`o53iGe5a-Ocws><!7hHTuKQeHH<HB86L-s&NVRqN<0pXH<tvi=)e_HAkO
zlw_1~<aLazgm%>SA|%1wW;n~@*!@U<Geo)3JR7WwO(RoWtf;8M6eWs|&Vt3vQy`W~
z<%`iu<rHf0^?oVI03e$A5B@p%0WM;O6Kc@d{xtA%|B45cr!;8yT&}|JaiU8<$N9h^
zuqt@U!Kpris1z-*o18*fF_EO1H+oD)G+J>t*RKD=SRb`;Nm3_`b_twR%hU!tzDQzn
zjIA&bXFZ`no9aPKY+OKQMqd0$3-n(&s-rFC)vqFEaQF9S#J%guzvrWCZ?Gvpkk2jH
zl7(+4{hcGDtRfqLIw5@X=FIMiJuA2NK&(OheN_A4z$ds@yQ5S-_NGnB*rp)~)`dYz
zUE(0<Ci~kWqe=*Hn!QBm|NPV7NpSDqNBP~QsjqAv-lIDNJ{j$u^nl?LHwPI$Del*5
zfrAQs@wvOy-@dP{)@*wib2~owQ-oxbxvX&#vUHJWwmE7mWyPUwIGWd&Ix<gWE|23c
zEo{YAOM;UZZL;0%z>8pzns#K6Y%~i-PMgYZ^&45Rl$V6`+?WJBE!GzmdM*+zAhAuQ
zGh<5EE{72poniT94AOQ%g<W%nCpARo6&$*|0+6SE{k2q_;Z_64Bmhtzdu*Kj2A?=o
z9vK^uo={<up<gTJviHuM<key_G%9TTEgRRqpbvv2K1}GZ6D3@KeHej#wmqNIW#Kti
zI^x<y(qNM-604ZZX@7^V6qz84;>?@Y0vP|t8;_#b9iXJuy#vhI9579a9_^>sQJp`i
zSD=jgG+a56_5iF<n{}?1jJ0O(bX=*h5@9V#<_+E%VB4+ZDlxyfcpzd0Q9>Cy9yNeu
zeZ=u9D$Qe!S^iRluhRTb(cJm@yc2fdY|VhLWt*I9?Hq=ol7q&A(3#P;N$@nj<ZDam
zdHy1AEuCK4HL0bvkm77hsk#NS%xRfgasM|)XVLL;!A<o|j<x#!1etngr;qE!7@kH3
zsXffq{n>EUIpCaoLzDk)vb*6%-z44r8-pSF$n9n!X22}oo#-NR8%byDV&U@v&A{5h
zoH<H0!TK-lvO<MSm-Fk9<tlIuO)6bX66|%)($jzM<TI;TFRb_p1S-Y^0;2g}Ik5jX
z3if}}V8a^z_8T%NU++iCQDqxJOQZrDEEpMyxDF`NU`{QT+hx^p^{I8d#?ITM(DunU
ze$1T^HhH!Mou_di&oi?p>+4wD@7|<qL361+I#X$wp_IMGmb87UC@;U$<MPxEvx<<4
zBGYA_OM9}arkSo{{6~cutR1kjN-uL#Hgv$C+h7UTRWJ=k1>sWx(#5_FFT&*{jiM9w
z<S0~vXc<pl2Y7yX*!=b2%n<@-uoCG8XLzv7T%VjYhe9PjEU7%<{jtJnun;^D@l%U`
z%9D{}KV1YZ#;$n9NuZ+q65C1W7fB9{@m~%Hf%r`sjL(v!$A!|0p#z6tIqyjQ7$1L$
zj`POa6H4sICB`fK%il^GKQOhci_iXJ(j`MJA*7N+yiA$MS0WwrspuqL5QTq5EJuQv
z7679o5PUs0$yEoUF$H4`5kFhnR?RODE_`gESrTY4$XU`lA%;_{<mJb<(a%LXRu?MC
zklUc~HtD-LN-L?50Fr_&-A)jW2G|JS;4sY;P6%2v)>%)Kx|GK%7F*?>fN`vPTIzA2
zOwlmD;*kU|Y50R&m>{G9UB@w`Dz+R{F8ga-fH|}ni;0U_v%)yZDn^7U1)zeZ*&dKq
z|0e>TmQ&SG$`t(~@E1|+SZAHC!@K!*^O?q<Rdu=V#;tlT2d^NZAI_^1XOyq^cDG>X
zN+Sl=tTw2UceY+0Qg6p`Tz1`MzOBl{>;|HWzZQ4WHUH+1ujg{}JOPBmRF1he-NK@^
zJ0xDGyB*NmAH5x7a^3fZXNAQJ9ID3_(#P4|1*Z)R59^!_-OWx#!daWzu)VQytWcJ{
z2^XGD-qQ>O9r&!u9&6yei#5AW>y1>k(ojwVojN{kUc`T}jhn@36|OdfVyT{e4pxRW
z$Cj%L^GNoiZdEPjaqU}^c2J~D;puMh4z*P+vKTA5=mSjIIK<8uTHm;NC@}fPdKo7v
zfr{%TWqpWt%HF#gsY$#E`v`Knv(FGY;3uDcVM=85HAg-zn<<-tb~~z<@H&%y9699!
zg&0K$!ydj|KXOpy#b=sPEFDj`UUgD>j8E$#=tS1}jzXv#0IH2i)y=;+{e9u9FyK`T
z^crrFI-}{SzmD;JEvc(RWn-nOpg*^*F6&(F?iSGnKF*F7UFjo3t`=#o76d<Aqr-r}
zpL1jT*`$sjj+K8uA86wP)|ShdY)P!>-i9VTCB!DiI>gfBVZW!6*YGGI&S1#vIyO-n
z^Sh6S;y@#0tp~1%^JQ)BElupJt?hm60yR&EkBrz)up^<o0$BU(R}QwP2a_>pjS8jQ
zHc+a4Bzih<1QEJDW|I110~_T@O1-UUlTwGYhXyt+2@V;hTP)0$y7oF(^xj@DFP!Vz
zo(Dc;L0Q4V)M2v0erX+f#51wu&8(VOnQq2H)jahr=sFcLgpsX$E47VzYdL=ijW)15
zUrTwr-K7zJ7ze{xvqBqV`JB2g&jQ~{95DC!&K%s_*6G$*@A4Lh?DeO&O$Ez$l+ClD
zz3je40Aq7vA4Y|H?1@uO1p;?OoijC|9gkNGsRL+F>+M_3JP)>%N1pYxAPjlldETXA
zQ11|QAoCquZ`yT>OcPWz@Gt#vi|H5a)MoheMS;Ju%YSe0=7r_Z9fs3&%95?=)H|+&
z50Od7Nuxe?^;t+j_z^UMw+k5uZisrC0eUl~qdr*-fS$fm<SbY|9b>FhMHTAWJ*Z&i
zkt>Ok#=qlEu=V*>bpXre=5~<~0k8IZC8^HIhzii97`2|<CGA^0KH&QZ4EvpPuJOO<
zG6<$jACbk9N7F&~We5RpJWJOI8T#it40}?be7=D<%jj1c{a!<)TG%AYftOXu`miM9
zb6#bQLji&nv>KgIL?&0g4uSfyKglfnTaA3D-5pdNcsdjioQz|saQAp{bc-hwr}d92
zK=dg9HM1x3KF{ava`LhKwA*@wg|)!%fimprSo#2Jql45xPeVo<TrvD1-Q2o4<2eZL
zM{YLchl$6`2y<LJ#xKCN;5=X0lMB~s-n=CY{6LLM-TSNFeWM&w;}5ok<Q$y+L~FmB
z6=yum;tg;bygXqcc>>9-*BhTGR$)2VPAuV`)S$hwdNeRPy4(ntWb$1VE?7<-nyQW)
zGm5wg1W?&n4V@2?n@=5K&#jJ-FvO%h=7uH(bn$yeCmndj)rz3MFr-J46;+i>^J1+e
zf2V&8SgPG#WzX6KcFEqdWHQ+QvRgl-Sec9Io$%?d6*oSDudF$tI{P)0#kGChJP2>Q
zPgWY;%6VlVoX#<A?v$pEulm#i+04zK!5pmQU&eku{U-SN*(e;tmc_##UHpveuR==$
zd+DKCA0l&sS<-`Sk$yIK0f`0!j~(`MTGwUeBP{-w-p%mb0^@b!UmD}yI#(s6(IcdB
zbxom;kJAj?O9{{A-|MZVej>>`k>7O}B9#0YPXO_iR!#7ru(H(PRp@#9HMlog*!x}x
zr0?)0o7-%3zT<DX)Z5%398rrG;rJnXpaZd{sd`nLgZ$|&Y-&KWqjp-N5&9U#S^Djn
z|Dq;`<oBXV*J&vR9uc)b5C_OM7Yh;0{xqBak+Ik3?Rxbbbuh((_YSWHSn&yGyFPhR
zWO^n|e-lsGuKsXM-igcYo*&EJ*;K?8yZJOJR>x|nDC2#F>(GqdiMonYy0YC@%#BO5
za6QYr0}qiF3|u++Ha+tSRVpu=VrY7U@z|kH(}pjsC8_z<`GB(7s{?sGLsf@!E~`tP
zvg-v4mP|;<8&v|5cx>Uwz|+C7!NFL9*qDwjp?7RXkqHOw^R>W_dJ{?nf7c)nq~*Vg
zX(pIc$H`$ts@97XRG5{UJgZ2gYo(`^9eIHpq?n9ST98^MyeUWu;iya{AqP96lqBb{
zx&w8JLA?}LF!d6|{<Sdn=n&U=_Y%-(zi5$!GFb`%FW;g~qYM83t&lhkL@W>C#|*Ro
zV}>F4U%`*5o!kE*wN6&swA&Oz@{Q>+%FFwcG?t1gh`(O~BwAApPNGCg$qfMlh1%YP
zQ7jRFfg?8Wf0It?T2ITr6p+1qJ(bREZszWCS1z6_aTI&Ph~BlG!c|L6m61WDm8w;&
zQemsOqH?IhPoc%mCA}t^D%zvyxy8vfUnpmRFE8~plxwRy3=Tf4TFtin*91S;_`Sfr
ze}y1QwBDEQ=~GxX$U~x6U(b(oFxURZBO%$;WQv-hLglp#rE#{mN6JMt)oW`Bo2QT`
zzeK6Xxgw$@DtTS=f`=-Xl2$6zci{;Xt@xE-ooS*(!lmNiFQXW0azsnTztaviXcx*j
z0`w<g6&%6^qR9yI>>XvD!*H|G2*ow~!t)z$yT=H;AzAmPeWCzI<z<PV4D(8dCOZ7r
zGUd|YvB)2ZFBqt<A_RvRCm0)ak4Z?HBl=l1)$C4bV4QfvW!dlbBH(V`%oR`hv+qVr
zV1%TyNmk1J&`gSr<tq?UN(ZF{vI^Dm!m17HoxrpKterxc7$uivwlA9mah%~L58s07
zxY7QZCDGMoy45al`Ux179Lwsq;yAT{<DcH)Hg5r2<)sL%;kgWG4*u)15)NC|iijq^
z{h8B^=!)uy_Vt$mM~swzW}cf4s;*gz9Ld1o+pZqguYq-XFWb>B!NLdJxG)Xf!`bxY
zi*Y5}Q^<Y-DHjH-@V=aSp*aK$GCMH4|Jcn_yv6rV1~C4^>+&C^^1Fn8?A!BEfe#(8
z))(ThO+@;Bufk%Pkex6Eo1R9?oVMm1>MrWMJfjj+*Jq92&IEU*<VQNdIYq~z)6(!K
zJv*7bHfg-U(jyJMax&GKr)0sN;Nl|vbXPeD!<4Mpj4)15-jNv#;FHT31J|s0kZo9u
zt;YA%4I+0+x4!pj3Q00#M^k7(Y2OQdph`^M--zMa{QlA!fC@X*aJD9r!47Ig>7Ii$
zZAk4&WA^@wLNh8z@k5AP?0X_8n<WXnurHwZqfK}9m9@eRK{*Od21CLW4Kl7AnEuuj
znL`M<p~uL7{6|<Q)2%%Q)_~rHN8EOj(UhNdvcpJsVR+71uvy;MGYf*VTqTzV1hTPL
zPg)=}drP6|G;BgfKF|!F>jmdR4QlA2(F3<8*3xfJE25Y2*#48<ql?e_IJT5}$f`L5
zZ-5(mb~%q4aOpKhVIkiMlGQ4FQn317_P}9%8}X&M98Nbw@a0n<V(AvkyPq2=|1qYh
zx^id6joI+N-4y$tW0m&o%?l@RZhMQ3h!2|$cb1Efd{f?_Gb|dkjM&k&KW7<u=W+2W
zSBKq564RuEnTeHw@b+vZnOyNYu5t0s%!9)<;lKQ0e>)NB_mM|GsPF0TvHV`vAe9|D
zek)~i4t0h)bA%6Rc9uhKphgkvi=8g7Wd*dA-eXj(%wu0ZqiRHBqX8#hxL!Md*=lif
zgn6`d=zlW&i)`otT^Pdtf=kPMHi=~dQ$f3`#HJMDTq%i`1~20A^+6K6N|VBVh?~eI
zj6TiX`vxkLx#ps}#}{wXfwgtu4B1Kf4tJ&><>6y<wXwNIRtjR1quNc6eox<Oao`qE
z^9E<!2s+^5;{ka(c?Qv!SbskZvWlhdf)<QWbDYW0Cd!lZQh=%3Y46V=RHh773bNl*
z#Ilwen0bf<Y0Lom51_8Pw46WJK~44KO|ZL8Q1nOgl>LF#Cfm@@xo<vy?Qb;Z3&L{J
zt0ABQV1L8^Uquya?U$(tKj~=y5gzluiz@!J>HUBHCacvA<qyP=K7C%%l;xJeQ9-g?
zK7qQW$QZ+mkxE-Y!)hp)o-?W(F0<V6GSmP&?`F1%U>rqi(bs|9+&@)-nRivrE^`H-
zUPz*33z|A($rK&PDITmOv`Hma$q8M*c`;DYE{bQ&lcjCf5!IQ<Dy38B^N?b@mJ+EZ
z#`URb(JOv1pliL)5|>e!`v{SK4Xh{s>Xk(<A3i}Y?*2t80Y^e|iAfb2nozhAsZrz1
zH!reuF|4P$Rk}H<8Dp|k+?2$TDKd1U6M18uhBG$YJH=C09P;<H^fW~zPfB={(8#HR
z29#EW5n(erBW)xu*1piJu&s&2J<BwKshhlF&Tv9@5;D9WY`#2>-D6aC0gt7Hs3+V3
z3O0sNSl(pco^H>6wN@4k@nmz92qc7(A`FMv`p;UuZV;NHfIk9x`d~y0{+CdkA82xb
z@|d%xG9#b##hVFZARK<KbHGD|L9}S7+)A88GAbt+sSqg?TJE*b1Hu@>+@qatQ_O+B
z@X{!WP6wuZaG|~d<7sm#qg$jVTcZh{g8`$m;zIr(YgLXYvYzTc)@r=9V6u_Lw8rhA
zlCo@_wq?=12)~p0(v_GMC6OJQht%~z;3iEawp{sDRABx=;*B2IYKr-<8uA?PqsJ@0
z>>Y!}k{s^#yR3eOynOES%^dlaw%BFIUCxumz9*m1^+q3#n{-}lAK~ZJaPxP*c6`p%
z#CT91u-huf-8H^LEP&Wz4>P_C6ef!sC<GQ~svOW{-&NWiJ@0sTp7iDgyrXqCH!*n|
zBO!g3LDbJ~4TwXRrJ;B5T8uxMH#wKp*&&;$y?N=5KhoLwq~rKax32!o@!Q`bS`2p)
zE(QY&)QQ`WtF?cbi(p-q<#5xTrxU|vZ3}CaJ?p0$a8WVrBYeyGW#G$*n0B)BY^kp2
z^Bq-et*FP<65b|J?7dio`z=qVyWCu#$@}lV{Oo5RbV-0L=;{@-so0(E&BWRI7gn^+
zP8s{t6~aDP3N#|BM3}8kuDoxUDA-lsbJrP(!@oPeLbxsK|9iu}i#fR4EQA`>xDU2f
zg_Vnk)r7IF@S?AknJo{zAk|^mXcJLA!nGt6*Yjd>f_ndJ^jtN~vmR}QN1Sx_X>qLB
zT}3C7mwo$3yQ`*a$Lcb=l$r(G@TUIfj9JDuw&XUuBP=Sg+fet9o$DoTvsN{LDO^-Y
z_+lc5Fdf#M0jK5ma^5>#)H3|_jXLK@WZV6uw|V<uJ{g*u)mv(mX%yX-PaN{NY%nPO
ztf+g|Fy|6*9Ws;ZRnqa$UA>%59N(%{sWVco6apx~n;r~AU?99U=P`div%jsJ2Skli
zepa1Q<JFv^?=Xgr>3Z@HI;xZe+97_8J##hP@dtIjD4+i*2yz`Bx|cyztoujBanw2f
zTo)p!Dmr$*d1;3ncH5gjiDu2J8B!fs-Db?1a~<odo*v1d4$Bx)rCNn*n$pc^U1lg`
z-km*|bFH&;sY_-EjJCdyz`#tvi35ZDcw*dPxr)T$v=pP~IBJjgv;Qpl@YFg+3QHHI
zRYHmn@yMvuF$KG!<}i9~LiGnzO;U|VH%JiD%jw^-{iA?3r81JRHn0+vpPB|#zjf``
zOi-Xmk(y@Iz^6zyhE_C)*RO$fPA;Gh;W|ZVLqo3N#zX(ao$SOJFREQtcvP8%J*(YW
z3dcTtj8qT|)T*Lg)*$T(H&;8<h&ZRQ<S9ZC@>lU?t+aGLiQUcU1*-7fCC+N2DG1HB
zY&OBa8SoB{do}DB+@POqJxoC9x^gXNZ+~IA$-AB@fI@e<Yai{+0#Yv-!3UU@;a^W|
zExTSOQQNMw@Kkfy6<9FlLD`S2c?}xQ-8wTNyp(AhSGOyU>}Kr(`RpgNM{Mr>3OQ5r
z_ghg(7Y^g}w^cz+o%|9Hx|STj(mnwv6@o9lIkY3h5H@kQh&SV=@pnZ+LdT^;*EjK+
zB&i<nnU2?KTbPVbv1xC#bsNXX6cHp*Q<=7nPnYiSa;X@Nbx#KdJa?LvRv^3Z>4!$?
zFn+g+am{o5SYxHAImRc5S&RSeby+;+m-WK|0xIPF|MNsRTNpC_&$p#G)7l<)wEI|J
zJhvb=(E0ZngOckOH5Y<_bd#t6dNYaX=q<L0ZndC@(r(nH2dF>bQx$RCGJ<)VB(slg
zeNi{{`>1{CM}6VRz=M@?bKs#?gU-KNS(*;}sfDZN+K#=V9_HrBn$@-Oz3B0IHu>^U
z0QW8*W`Dn`{*>x>Hf)qmAC{<}TItpE4+nw%UYU;H`*v5;e;;v?HkH7?TkGS|kCkU4
z7Ls!4h5XAD;Ksv!>HoqY1E3G9?5I-bUuDw0`Nmys(5R_FKU=hN^kf{0Wb)BkF?3|4
zq372<;?k9jjP!W2*7qfNP8~k~>=S$Qr{}MJqc}-5ok!<<W_%9yPz{THI`^s9T4wU;
z>M%+CsPiIF|EOe|2}4ZnrJ?h~zCRMxd<;ubuJX9<s`>J1Y}spErVX2PYpn9oY<vBc
z-(68T=JejjsQdMgzXM^`D=KnwnP`>QPJ<>45pGp{U53Z@_PQdC+5c~(^Fo_9r3@$R
z<h0V7&Fj#;oqD6+i<{*4o7D=aO$v+7O|#Ci{K=CMn*IHARFcm9__71O`jZthKaIU{
zFTRP?zsE}(@<!U8^2oDSze!P^T3^f06I#<@J~n`?r)E_OyLYz+qMv8831u%r`E!Di
zcB*hUg-&(1m&V5HQ3b-qU&V~#XZ&_OtAj<?sFYOOC+XU#3n!cu0_*GHk;F*75cTdU
zx)tzNof&tRxAR*Q4$imp$Ij1#pn%*Rd;(wZm;2qL+arLF2SXQ!*Zb$)-fFE}n7Vka
zK0a<P+`GM=)6?|X-CpXATx^W|8v`Oh-s5HOas4avCM>A8hnJ6o6DuYrY|wtYhtGtE
zjAPs1*~`O0$YZ<9<MaAxFS8Z^F@m{`oBb@PN8sn|F_B#=?!CAK$i<E6!S3PY@Vkr9
z2lVpz_<Fp3vK*<0mD;D(Al{=XUnANBV&xI_yS%&odAfYvKb}ty4Nl*^Jw5LCpT73k
zA?b4)Adc}6dU!pYH|~y~F8EHs@BnU8aS!l_`uKG#pY-|!Rp!RM^oX&DdRf;`qlh~?
z-wW=NB${Uz-Ft^u{gH!TgZ=u5Yb#%O0Poeo9Ndpu_kTlSgOi{3&%JzUEqAAWf3Jta
zSh_vjeQss-c?CH=0Y~F!duN@CL3<a4g{i*dzDbEe2lj~ixLG^|dIZ@r^WN@Gb)!6`
z?~9L7LZ>fjxxGH_PHRD94f2RFu{+(oygXhHZL#;~r`!WWMgY&ZBh=eM_QjU)wfQ@M
z??3!lN&@de_gaKDzki@SqPE{$4CG+9!)G6IW~4c#jnfGB2t9tjFHilM7?7Wfg?w}F
zVdRjDT+gwH@^8Fh7vsH~=Ev@f&)&^-El;tHf!mq)+_-+Mm%Se;hI-G2H8-UcatO87
z77@FV>Z{Nm9cDjNe{7_h6^`DOzqiAPUJuvD+vPH-mi^1YK9T<mSl1U~^*?leUf=Ij
zNdF>djB0+Dhjk}a^wdT1Mrn1Rm27K7ZgM`~ZwEK<rPsMyo)_XpdO9omxyIIa67hfS
zkIP?s7l!}-Jx_n>&+1*}c5z)`@p(_Lh!Z}2#zJpCo&hoQdDOi<8DDLh*yc^$^3m<&
zx{C2lI%>|U4f3zumqs4#m%<`d45{+GE70d4=6>I-C+_VpdV=5vbWC<tRE7h;fwH$E
zEv_ppihMsR>~4tX(SCCAy7MmW8y#sH<{pH3XMW$kdQr@|WBFIOt1*4=B$_|$m<>LM
z`@Qg3ESCAMy}2v6xpv299{IA-1YJd(Cq}*jmX9YMAbYnuPhNu{0R)+-OUF_t;@8@G
z)qFY2m6eU8HULY{mbZ^_jfukdAl|dsTwfjCD|p1O+prm#n}g-sL*LJL&DfRcW$*P~
ze{X{K?JIUHKc3~e&$H6?omGuc`q0f{o*l0X8iht^wG)C;7_YwJO>WFf9wPYr!lV7~
zrAasYomc{ZAiAvwi}!Kl-gM_`ErI-1wBDObNY^_}*<zkKEgj$E$$QepS$bWV!PcgE
z<z!>INv*&CqXk~kXsh$*8U4?_pup$X3b|8b!$to0LF8*`Z)-;^^7<ToRpFgIoo)80
zteCx0o3CY~{C7z47W~i?lYPL^H6A-NT;_O*poM^xS9R?<y)`5wDGKy5y_~8m?F<<_
zC-8{PZs*nLZR_xwx`TGK4+C{KBzLRFD?68mHi6$tE&nJYY>O6wAnv4Xox}TNhh+(H
zDdYY5jn7PPuD)<m!Ybx6<fn>11HT;X$La;w@Pabx><vG^G|*YfelFh0HbZOr*Q9UC
z8wPqS^yt1(z1O3DuyMuY^piY6>Fu-pGar4kHwKwQ$2*S<7QYUE5A?O|T_pbegICTh
zzaM__>!&xb8gG!qU*Nk(QWTdB(ufbEWqjUC8^7E8*~^aQO0NKdjGXs}+uX@--@7_u
zO7_{zC!595*qX?b(9#wbhuqKC73hZ}P7!c7y;;DG?8~bhH>DnR-X5S~ebWTf@1nd*
zbL~cC_uK!QJ@I3v=KGWP8v%C+kzdy?tpIee8SeClrwg71Q`4%lGjI?(!AWVWwa*zN
zxcSFAjz-(|vZ*G@Fb!*AcdW<v_Ufd#A~47nHf&2hMSyGfr<0%-C>l?hdv06c+KDS!
zW4L#IYqbOwo;!OFj{NT9AdJf=QfXkBPlw;%`(Hqsx3h;6mk3CsmhZ<yqq(PNa<1N=
zZh8NXk5|o}x2J=Mzx>)g`h32<T;I0_v_$3&R@yx3uVDoJSN<{~FR`w?2tjL|UweCl
zo4HadgcVw{&64DbNi1Z|8-evkkAg#LT@FMtumpbE{D9bt($6b~dHYbf{Bg{n@(CuH
z6h?AI<3uX3onRET*OCnjyHMQgD9(-U%qKn-p}*5@v=+Kf^%G6I!)rQIRr0W_N-K0=
zmD1B?pH~M`-B{|<rNX{#?MTflR&cB&nGYJ>EnJz7CT#}7YBg&~MR<eH`N{vHP_@*m
zVfb-;niQLkU5zb_wHZZ^$_f@cB$0~~OkI?)n|&Q<*@#IKM{PDSH)*I?!<4M8(!C<4
zH<SwEOJd5cOamk3hU>wbSpzogA!;|U*wu)OsxtR{YXT)+>ch2U;6+Vjv1tis>n*P$
zQHx9P##tUr8c5E%VQ4v-sWC1z>h8hT!>ClOR>n5K3|m!7@MRU~S{r;p-BOlM#Z5)X
zl$B0U&5{d)%R3ZVw@3G*!)I_xohYMOv}v7cY9MS|?FZtw!!)f_#V!I>RMID0|H0V@
z#*McZ6|u@nEDK3#f@khy23f_chNx6*ZVNYlU?V@AHbM`J9TmWppJ|pj(=4+nmk|{#
z3EA`)FBpv(OK`Rh;oHh=y6>5nBlJv|j54Apk4z=1otd#SN0T%cQw1wh#THa#odTVK
z-7yzO*d$MRB|dWh3elXw>+WMpd`hlyDy%9w)p{_a5?5`bvM>`6Ow5Q2sp$8ZKYi3F
zW>8G2E94Yoob)e~i)wBw5XTBiVw>QgQoOP;ms=yNaxQF<Y9kQ^$>d?4zmy6jT=CW&
z(OryglxqcFgA<CS3O{ASg2odSmo>H_i;_EM<jOa)DZt!kv|8tZPU@41GqagbU2&74
zFkhbk8%j5lp}3los2D8aO_*73mqi$eUVvrV1W#<OQva8+p$>%2gHl?W^aA@l#){ym
zN`a|AwOAuABzf}7gfjfR6&jVU5#NIGJq_dtrE;2Bk*sKY92JO<TzFjYEo(AHa=FSv
z>K1R(gocrI565}2Xv5@0yhS@OT{g3THl~JvmjZ-NwTwJEP^P%ACR52s#!6g1t`e*5
zcuHYFIlKd!5hj_Lc8goic|M(SVtVLOqJsu@y+ovuAfGUQDlOPiY<NmQ#b5)?gqfPe
z)H;+{+%O8_CXk{pjFHVcmna;)T4*Y>T-kxxfnP170r+mI7W7tUy1L^yh@PlEEc=5C
z5?7!;MdZj$LLS_rRuTtXAQG%r3{oV@6r#8veXlVzJxDHJIb*qALMw{~<5Wg^Qp1m$
zC2GZ;0-ns07oEQJx2SDlkP^|FfG&Fn3Q{E2D}y!hnJy_LlMv*v1TvL+7Xh(IJ}Bm<
zNQLFUdUJMa`dWeLsYm2uVqaJR5KIzp@p^|BVW7(Yi?DMF&NS-U^c&l@ZQHhOn;my-
z+qP}nww-irCmsC#)znN))mKxq&!3}xu%BA%zOO63sjbOJ!l(%+<rfg`(=H);Wa**o
zv?9ETP)us!Rs*1p1JQJPTwoEy#4ti$&~}2k3<h|&$hLqarq@ZlOlwo;*A;IZHMOF(
zYQB!pS1}X0+!#fwve_MvI^yxQWIreM$kKUnHYsq1BYhv$Y6f9-x*d285er35wvde5
z=qBpu;W!7a>V7fi+0-}~!u&ILsI<EzV}nwD1H{}aYB77moH|e?yRtf-<al|jmLR;>
zlei*>duFan6s@AjXg;kgaF>)uGcX-#P=pB@I{8jZBv$|X1?I3~gcc-CplB^JSS1XS
zS(1C@B(<I8UBOee8a59E&^TCeV7>UTdKu^b*alLyn4@BL?fJ1gohiL*k(FegB+6np
zb%vn8i*i-XT18!QL<N5%Cl`B6u9IA=mQQ0REK>UMMkgj4S79)1XAtCXiwLy|=5aik
zgsczNa$gW&^nHD^489%d#e1M|d;=gFHLwJ#@q1lS#p*R-b{4U);N_aO<kmrOYZ{DG
z6b_KR0`_39=EiG6EztYwOJnKyd<tU!!b`R&1}QsIRw@yHzFu|m@P#nMXzDwFwayIj
z(i)P_7zIpLKAc#bYd%ap7ompeN7{+oMyTA3msDy(G}|V+jP+Z_WFYYjC%QIB<%AvW
zIO74ZnodyzEyTTwh0hgtxTvnb+`fmTz7%>Oh~Wlgaqu{5?88oE{;@O2$oA|c%rt)>
zTrf!He7UY@=S%9fSGqP9<Wk`LDA;m*>td(%DG;!5O_46;P2eKCW8MTRt6eaKGc*(A
zv_u1m;IEiC>_LtRQ)+J7=oxpBb1Akrz0BrFTXb0>qaiotltS#*twvFrU?+8v6%t_P
zni6Tqeq<tsV}<}-q-Ois!HJd|?c|+h7LVZH4GkZ#87N@&=tZb@BWs1(;?4Vzpn@*g
z<hWHs2wmkydinLhf>~+>&}WkQi!Mtnfifk(>GJrP{i*A7p#7t+JASb&N(@7Um5yek
zxiFzZgCufnvj+}I0exT&qaPbekSYqkQynu^K%#d0Q|!=&uo(y6<HYWun~DNZ>|z4+
z6A)cVE8arzE@Wo;!u^-4=sS6U0RXR6wRzJ`4rvho5+AeTGr0@&5dGP5Z|bTrF;8z+
ztUQ&_KhPa1k+50t%lQCH4t8CJYCELLw*$S1tJXh6ZKLFRPVi6n%+f(xw3(IQnTcwe
z98iM9Y*fpt_aewBGErX5!BCkHh^9uR1(mo}$rHb9qybu@pGD7-lF9AP!Sk5i(_Mtt
zH%^P|&y05FSrQzs;g-qZC%r&w9lv2|a^S{akYpBt=hx?D2jc)hc8iA4qzTy-Q?*1?
za988udzVhGUmhZbZb%!J0F65_e)}4hOm7y%$k_v-0(MredMO4pUD9;Td6iZ`^!jvp
z1p4GG@c=43kWL&y>0d8FmJyO6PJsv^QfoQg06IVm0Va?${>Y?TH{GZiB9k3QH{<$f
zCFtG+Hx+93=#$j6h=X^t1b9P2AL^zg_88OoE;DvRTEiBY;pD$3jevhRzg*P<nuw#4
ziLv$?JM#^w*=J9?fK5tB4z9J<b<J}Y{IP32GC$Y|JG=UtI)a$K!=wgFt>^?75N9l;
zp1AMNdF-};VK<+=K?BQZj)frkKAY?^IJ#m_f{Y4vN}hn0I@TGSKUd9UzOBF8G75*3
zoE?BnXDkLMG`2`6X-ewwr5L{3)WerJBlNpy9%`SixPO}sv>IXyNG*k8EF{$F@g)Y%
zZ$4uJzzq&hk(%=xrh4PA4CVvd4f8a#fxAv*y>O|YD~)7N?IzOh8FCpOzxqp3C=x)0
z)#bvNRdU;vUNpGhu%#XxlK_{Fld5ZYaBF6^f*W5W4(uscT|5p)F}hl;#L8M2k7w?R
z6Ia!1iCGew0F53LwuFLOUkjvaq%pl1D=Q>gp42q%wIUzaUn}H{)xQ*&R~zFooK!C0
z12z*vb(;28RcwHbwTuTQBswk#yeUXaSzL=1RxE}`9&~w|%MBK;T}L+=Y2iggAkzQ2
z&>+FO(RB%zPZ_KM35*F@k7Z02sGnie0uq*fq{$7Ry#sXW#(a$Bs~g=+h`BqIucAJB
z7*Ov5LgAPNp9V>CqglPfstl&-7_KBl86t{(3Sx~VblwdR3`lB_K{-?w-9tC7a&<8J
z*L8yw+NU{AW`vHFPfF+h<RaxtQa5B;8T3W!S3inF({Mc6^?yl+86wZzIEZ#q%Ods%
zI=8XLZI_PE!sE$&5`1k|x2-=vrP_of1PGR~tS2tLJ&<<OLqkaH{UvsdZXk#;y#wmb
zCh##Qg~+%6bs4=wqGamQS=c`zYVVOwYq}$}Wqo6vGR^6n9_<X$AZ{%$I{{Vn*v^6p
z*x8IbUO)owfgl8ch03$99QK30xN=v&>V+cuq_C*>=bxQO1a<B=rQj`y5nD<3X|Ck}
zeHluT2V0<y+J(WWu@FS>j9EoQUj%LyEs$~`+YX}g<tAfR0UVUNB{MF}gq_@Z>y7~z
z2#jKNo?2)vm|8IMi3`c<T!^h$8%5dek&>mpK{h>$1%~n1CJ<AkIz*##|Lk|p>1?_q
zC#$u{QpM_vNFm&@y+>ejN@(c@ibj}i=7lQpgwv!(;D2l!nXm@r4R127ClM9Tt!45T
zb|?c0fO;|<24tb7cf6Rb8ZoJev#G{45>Ut!n*z0V11!BxT2x+o36ue-oWG|-L6-~s
zzwu(4X8-tFjvg0I0{2L5GX`Q!{3(aS_)WK}h&DKTl1=HXD=adK1@+5lG}4XbMsAR5
z9%AqgQi*btRT>wE)buA5Dgr4G+hn`tMh->VEWTdr#iU$(aiQKZ@U}uc&M^5GJ<`si
z0<G!KOQ8(V_CvU&8yR}D=H!Yyc!SAUd~Gg(n~|<S1=&n+Xga>5sBozR3AouH5-2J*
zM)*uHXrBvjGS)r&{;VShqqdS7#HsbG9qOGII&{R1dkLBn{jU*9%%=CMW$rhPw36^p
zX|iBKdo&8{+jj#EtJYs36Nz*G;d=Ngg~Q=$U1)h#s-<hIS;oW?UP^cF^qXezdx<_b
z+r8em_cfE^@;thKKf?PI$k1THAnby`AE>c#`FU>8f+0X6Yu%Q=J#?97Atix1(q&Uo
z=+Ml{e-R_FJQ8_T+~PnXXw7D$byDDjSptC$e1xN-j+$n}B@)Esf`YX*K)GuO@GuL)
zdcrUmB8Vf>jU20<l>x`wjWURIw}a6VxrKugZLxOs7m$kx2@03o77#E0T|LKq*?J~1
zhY<3|4;LfJeivJQA4qS3OG07V>r6AFsFK|;!a++OG8`tl;)Gvq5&=h-*g8o3*Z>j-
z=Nc~0m_BqhKC6_!s6Ye0wh_;UxUY_vBZskUv|p*OZG3Xjl?X;7DG;|pBusIlw8S1?
zNUr~=elr2Rfc4*vyVJ#}bMcf6*O53>k_@MTovOvN-E3WBp8`TxZ5zgOsBck4iUqs4
zg_Zsqq;~-}R}+e}r6N*#?~7~j<664Vod2rS%rN|2NhPXfc5{KL#N|a+@6IIkG!>nl
zUY7?49iyEMuar4R-v0%^D~!IBTI{jLQDaV`-g7z1{zshO$l}~g4xOS}@i>{6v0UY+
zb)jr^0&Qh5xU`j-+IEbTUASIou~Uc`TvtF-@=kzHS+-nsP#Gt)mQiws`zIFxQaPV*
zkr={jTBsFGTeUDgmhmLQ*%6b+jfv-Dejue^rG(U^)3^v)sn*hXyXIP5EAc$qvb;vA
zT-?S~4fd;gT-v_OoX3h7lewe-&I`NG7?_+I#!mPG8c5FMESC_6+_rXfbeG!1@ULl)
zADCJeu&kDxTu$E`@21|K%GtXW)KUd4%`uYAPcQ6u%-1;g{MfpsWQuRW`Mfdoo4a6J
zIq$rXlzN#WpqC30G2Z-O)zX7Xuot<46sFkT-w0HVcoP$1e_~Fd$T-dfV~UAn@g8`Y
zt({hJUMfR>>Iv7j&xFQzX}31-UvN4!5LIPc^e0mXtZv~F{!0aCn@Jk9nv$@b2nRIv
z4<t<70@l|Xsw+Ejv#~=lWFLf00uHx3R`_Opz0gbog_PRs1Iq#wsj4k35J*|kIT~l>
zHyvr}q)OFjzmw3FwM(DXQ>|)CznKyibWza7$fA@>m9TaqVG!<d?9D+w2LlfjO-UEY
zC`ki^iAmd=<;r@TzUr;ciiliHNGLojs*k%mYChhEsnM+E$!YMH4FzE#2Muu+y$E}!
zKSz3YG9{yDbXRWz;W*2_oyX{+Sgb=2I(9`O7zw=)skXL)!&v#Zm>zAp_=eQV$oCG<
zCK{6vpJ;X$V!4g3{n`#7)ou5sjmf!0Qrq+u(o~L$MNc5Z>U?$~@~Th)=ZUmC$cqq@
zljvA*UhmUVx_eR&dw9AJ;Wb&PC{f6OM(IAfAfFc~2a6INl{xcdcmOimru0um<F^lj
zVGfv;Fn3CF0#+z9m1PyVMCHG@S^(D4R~Ca8PBM!fwectN;1&dAdTnlwYwDtkLK;=T
zsB-1YInpC@<jo~k%6Aiwv+0RJ=WAVrR|?6#h`8T}FY9XH#h#Of!-2gE>mj77eE_9f
zRBWhNBL)=MfaLbz_jsh>+~Grf>=VE>+)oAXf;m=JJhFp98nQbpn5THW=lt{*R;YTv
zWD3mI{>x^5g2WmzmGBT5ECfzP_cqe+hrI`SOyG;*6Q8aZaV~7+P9TWw^R@5i@BMS^
z<;u!TRj<2&{!bkpL$3lu_K%VFJoQig+x>YC#@Z=?ZlBugw1dy_OU}SEP0|;i!s`7S
zI~0cll5;{!Q|32?<C4u!)@v+*oS*$`-k<v?eIvim_vfXxI!Jkkg&pvtJ>L{eDE6Mv
z-e<C2x;m8GnxDn}ce`VaVfQTpB-pC&NC!Wy_Mf+r`Mgdjp`VUEsIPaMrAxS$Ds6%q
z{Jq|d4zs5Nuj8NBR(Jc)mznduof~hnu02y-jg3|eVh4k#9JKz`r@Zb>g40_;er><b
zBIujdeuqo(vnAV@6@mL%w^$6`hu)LEolm;KE47yzKN4oxzHS5W^2fBHx<{Y3SGS(}
zUQed4yo<!k(^l8XTXE~(ecL;Gvukg+sr#ww?>lL34m9yTyqvdwOgvRBJ0mVlxBRD{
z3K<*gM{`xz?3sNU7AjULV&{HPJl@e$f9x0;7)qfaFTC!w+DD&v1#n6PdVDWEzds+`
ztkw`<eBZAJe*O<G^?%_vwp8-r+Wyf_xAFhKyF3>om;c`7UH=1~E{&sqXMaW(6^cnY
z?G;3wIg@cX;arwFt-5VqJ16|vOmZV^An613`bRwdo82I{O&%QhGDIvm=xRQD`Ah#K
z+MPYCS<33fLdS^slz0QazTYN8l7)KJ5|<)*2U6^`BE|_HEF-$8x%lSe7gl1goW+0@
zG5?*iM5&PMtX*b=Rb>Je*p}w56}x+SQGw*)h8=O81G6=l-R9oT&eq_O;$K*X^CT#$
zk7VS8NK<;@mf0UWq)AqpW3^eg1cH#{vOrT&t89t@MH&s}ha{bsuo2(*4Y&ceZ=6#s
znT*i_+^K#GEbRA){0zxb<|$FhCeqL(j|uxv*#o9niln!o=vu1qqJMpU%HE1`eYMsF
zkW1yru@o&K+(1r<(ui^I^r^tFDvwzmGTxAA%2`uFR>bjSa>OxZ^vIN;*P6gt!^0`6
z!4FTB{6=sYGw5u%U+J$CnSt*~QU(rkM21GlDZQai@d{$e?`r?yn_}`n$$iO^F6I^I
z)iVT__fzd=Qm|n_2vhr#M|@ToF1`7PX%EDK<wQnJFHWwNBjQs~$##^`3{Zi!86zu&
zs|{>`ER{NumkYvHU_sYrE-o{<!9*{5Wc%z-Q!d3UW<YXo^iy%cpvX6sOSZGt{62n>
z4a2=0?wPj>y5n!I`PF3Oa{h*#1@2mXP-2(+qI;qBRcpjkjL@lx*WT*M>rA(0#Dvoc
zast;<hCn~@W@3pGE0QXAvQh6KjE}nh(a#14aR<x&rL=~dZ4HXWTCa<~$T262kz89s
zwKA1$nlqna<nHxWL6GIM)T2tRAnOirr9B3vcE!GEwQ&>o*(p63$JdS(x-wXE;r7|#
zW$E0i2lATW<N&AV;_KP7$f<Ot^@L4u4Le`=ulaD=qii17tF^+x(=c)SrTA^g5I{<M
zZF3A86Fb2$N&vpScr8<ddWqQ=Cm1YuabfXMQLt@EC*p$eAG~Q}3`;A1K4+217~4*Q
z&3uKK>xOCSA?8cR22(c4g-)!n!!aiIQ+uZ}0+m1fmWKd77kLn5lipCPgveSmxLxXE
z6FmSWdSzfo&0h!P4?AMhl}zfCN4bZk%K}TiJxf0{TMy_ckUw6VJXB5pQVo|3$WgOH
zE_P7tKo>epCnKK7M!{C;5UY8?r*POwf^%LISSwmxOYo|y_XICd&u@4pJ#>{t5-QxL
zX`&FrG7WIUE>2I!T;7Bu#psH%JRE#)E+&N@eUuUj1yfX6=jOG4Ry`BX9-qg&6BN~2
zTo#p<H1mS!2C<dC968th0_q~$ZR<2{=?Az3(k%|07BGHPf@;!@Xbo$bfb0UIijgZf
z@^yU|`ev99n9^Aj+}tc$NnEyDN+Fc!GJPjOj}4`!31mLYmvnN4o@&p$QHeM>ZQ4>e
z>+dboi+yp>TOFC{<kl2zu2S`P>6ET3f^3Hhlk>FtuRco=kgtS7Bm%S5O%;KgO!pab
z&P)~lCT)+Q3U@q9)a^GYyF;Jv6FVZFu@f1~p2;zjgzgPLr~02%v129bI+7<9^U+cc
zq1WGXe;M4|J+m}Q#Bbm9yoZJSld}1!@}Drp-9pm56TFzy@zp8};bH=go(RS~@ML>>
zzS8u0QIs;}@hf6GUJP*Q+b4$$|LQhl;jR#RFxc<$3V6dXz|6Y~+}v1yZmZ1sJo75f
zonE{P^C7G}YQ*>&l8d>G8P0NP^ZJVhlp~W(mg%cUL)TTL3U>3qkR2}R7IUrvfkQ-l
zqOhHm{>hHgb)XS0Awo-cHM#vEj?hs^VNQA5#@2p#zCn`usF74poXc%V@iB{(iM^{u
z4lz$WR;mEcF*O29CBa|hhg(VKXZ(>R*HMb)YC|j`!eAmdl^ypzj-ag89nTn5@+M<J
zwNa`{;jG)XL`&R!O*g;)JuT5ZUCgfD*uR^s-f$-#b7aGKNWbb;ZU#mTriT~JiU6EY
zx(9@L$+rY&0khF+<~F<99!4w7ojQO2sr7_0h{-iXTJdmUgN#CV^L?*)>pWugPo$^C
z<`uc>+fSywU!SQbE{GXy`Rj7Lz4163O2^D(+ZF?@)TmG)xKqoE7&>uFt5sf6YA~_V
z*;5;z^cuQN>>219%+?8P>otMP%89^XhJ0|W1%x93%L~(9?pi~&c-(_`Vkrx~6sx^d
zy>eG0<P%1(<~jD)DW0>%g6usGmMXrw4T`N;q|!oR+bP6f2Y3&)RFz?Y6x6+J^gm}!
z*dL2qV7_y?XuR&$R}~|F(&{fJF3@B0s25aqY0PUvPkMMQ4}h;p;uAc?_)An&@#v#^
zomG7BHN9;rT!NYK4M{95*)2tk4<Q*@==mj4Rg9jkgc`Me`4O*RY8)?H4+|@y`rMu6
zhHRX6ooUS>_`Ou;@m)&XYRSA7{&nwtE}A&sWcJf7@Z(2jENLKyb+@V4*1AWibrO5#
zY2|s^58DhN*!7E%8T(wiqsQ&JwSIE;QB3t3`loxwUm)sjknmPXd;8!ocrdDXNvrbn
z`SR-kVO=HLiTrTbX2Y3!-g^r({>I`mfb=*zNJ|*~;Gg$c2gi0d6XI(;emDK`mF|6k
zI}w_AoQ+J}<N4Hj6tMZ0sPOzY@Ok(~qNk4-e;_?<-(~v&|KD*@03gFqSQ7Am9pwLt
z;F~&_{J&V~RY0b{;%ESX$^ro3zhUeD`B2os!_(Z#)=W(m3;=Wp)1ZFs^Y_=5c;emd
zCynFFDu$KF(uV14E&tm41!ZJvdx9jM)VtFq9lj{MShb)(kRYG(>zF~`2^g#ucSF+O
zN`4Ko1WCivuCg+NrJYA!?iqr-RH@2B0asrSrD;FQmRyM?HD&Rq1L2fM;tnM<)f!dR
z%1Y@*oi~y=d(~#T72;0M!aDSK?=E#MG!3a-u|FzW6>QPX{tFIj=y-g*ye`La^7`BO
z5>wsbhn6bGKZ=i)&$zkQrB<pHW7LspDT53eP92f4xdak`8Q!@`(*o#prci-ZP7PFx
zs57E~H9-0?`_zF>p#H(xWqTlo!2rak!zN#pzQn6jr`p2ancsE!()lMIz6VHsv6NPd
z60qTrsT2B$m6YUYR?H+i<8>?O^4CG{4%4pACyW$0Az)uE8z9AgkIPS^@y@Qd-=Brb
z-@jK00fzcvm8Eg_wa|37!BjmE#qf#%;8w|?K12=BB5&IY)S%ki|Cwaq$)N3D@pxME
zb>PNvWB99tws(j<ij;`henG^5zJSCeSmC=_X<J+9Ekytl(khnV5OK_iUXP)2l0HH8
z1fo7(X*$tOA-inV(yevfw^rZDk#zr53AFS4N6Jt3?jX}97yKpkAY~{Y37}K{w^+2(
zZ0k9Onmb{a>Q_%Ojo~=O$(3=h^bL>>@LlS-!NB-8djNz{v?*4~ySCVCW&S~eNhEKI
zTyU^RzU~#KbrhcM&g|=+&9V5}Qq|@8l?!8Nn8Xo6<|lTGbJ0nri$sVtQ0niH`e6>U
zTzeW<+2A;td|Ta`!Z0-3t{#swzV;1u(UbvXN(=E)Awyr{3hid2qzsN}5dg+){K+qT
zWbp&f7EsUd0Jh3@{|z2ap~_S>m!#1RydF-7TA_q`NodX5ZVzS^$a`$nh2g4%>p~vh
zuAAKFS0y;}o}JM)LKi@-8nZz_vm^<!JG~Zdhkq0sKI5@Sf-2g$P-0IoP9QYO!2TUu
zqv$9wtVBS^vmh&+^dL33>Z2VPs05}dimks1o8@2*<v`j!dkt>-R5?NyBbCNAWf%v{
zx>J^1Y%m+bfIi(a4enuaxS#wY>FlNwL+xR*uNGMbb;|pnk>+p=C}5njJEH`U{ip3Y
zYxtz>Q7k#P&YC-g<Tj~Mf}Q}jp}AR9Ll}o_H0hm|qDMP791PY`z)7*eH@1UuuG-Iw
zFj5xod0#+uzh$IT)M_OyQqqyz6A2|au5mgB!bPfh*JK7j!~gZgP3CA&^9Z*;A7XT?
zvDkpTvi-nd@sq#z=x4~Qp8-e6_8}jgldQ7nvJ1GFuiH>-)-l<LtH3X+4Z2qU=gVa~
zq-Lk5eLfmu5`FDk#LxH@@F1m|+HW!pO$ky3s!lVJxs8FLPIFYN@;dG_MLBiZh2f^|
zO+aDgoy5GSi#Ea6xWyYX;h#u(BQ0Dv?0#a4b2j%Zu0sYBKe@mz6Y#_t9kssVao5Uo
zy+ruYG||k1_k?J0$N_PrK1CKzF%eb-*mydVTO`V04~zxpl(-*mFGybi7iCvyD|a;&
z@f5w#41d!7OVrp720*6vx<i!m1L9;}py=<weD1_(+7)wW2Exo#L}Hu&+!v#7eXJy9
z0~~_9yaj^(%H$_vHS47lG$QH$6R;nt91j&%L^)?j%U6*LqOVth8O@7@<0%|>X?S%6
zjEORYnLGzk_O<bR=dzro_oAc(erNZ$5Q9_03JE?nY=iX%nkx@_+YShY)dD@Jod~2Z
z;zG%+gb|yGvf@IgOr8((2p`n2H)LUewq0QvMAjW-vA5y3jH3ISU;o@0j!kBLL|7_o
zZ$+w1vzZ`d`&N`H%Z(4Iv%lB0I!{D*QUyF&qd7?9t>X;Kvd_4!r2~*|CUv)&1{5LG
z$;y&Z@kyE+lC}z#ICJpLr`ICZiS3P~*Tsy-JVEZPSJ6}zQun>*unszu2k8Qm(aT=9
z*3a)Op!zX?Uhm11uYl^a-iA1W%Lj^R3B;`dM>l5fFGi3_+(@gJWmQWK!l0Xe2C-8B
zK*T-%q<v!G%p9w8=ETSoWl(o?i4#XcK~|}_Ir<fDlJf3wG4zj&iKVrNN9gJ|==ihv
z%gR-=0Mt1IfpQ$HDdys!C`Uht3=+v<aT5#0EDL;LNc4ur+2KQGq%(O=5ON+zMBJuQ
zM)d$WC1QPFppRqbTwFvwiip}9R4BrOfL5(w7<s7BJ=2ZBbJr3U-<K!rIx2LUlu5sf
zBV>OxVKC4{bsC~NrmVF&W>@M9-=HmI><P{G5r-jW7%J3aWkjJ#7p#Qc3@_X~ZPm=<
zGr3v{Fj82nJJ1WV6k;4LPfYI3NY_mmlq}yhJpD&mlT@FC|4PIpbh4t8B@D^@$8XgZ
z_)xM~b=pn)>Tx`gf$&Zq^v`k8dR5yN;dwSEOjrhRk!_~auX{u2I3hlg#sL<efp<TD
zCPjF1EdQism*&<BVRlI0IUp==Pzfrms_m7raN~dASz7vB@5eTj=lOeKqbv-wtov0z
z<gbH+WA>tc)J|h2p9GfPV>uf!iFQ-2_B!ZLq2hQ)qr_#X*OQM!W4D!@T$N}N)5!&3
zh*wy<cRCnk=See#daNM!=u%uLa8!)obnmlGb38hICxS-W{<nST9Z8QUaSH3YBOWOH
z#dKDvv&y{I%A5Q(CK#5VfVZQfq;n5PFluWTDTetXMn$@L5Sw&c|6lvJgPMg|?d4C4
zMD#h9fpK<>`9t{Jc7bBKRHnqAdAu`5fuad$at+FkN2fFeK;U%xhRNg8gwD|vSgNSx
zGE1KU0YmBj7!pj~co=QNTg}pfJ=~2kccX@!*KuKnoH%r_Jb2soPy0v^eocs)sDd$-
zWpLnnWaNLD1}Npl8-|}V+l!jTJN3yd)L?^HRUIvptaBCPyhN2aBlPyRErq=I`c*g-
zy@TDMmh{~hA+Xqj^N2!?M{BPsw11N@FUZeV%S{DUX#lcP+IQ8&8i%k+!hy#>H&I9{
zsg9=~;IIU*6k~-3dPmf}Cff`Xc6GE8Z7j|MK(RmurZfB}CV@tyPYYKHncm3ojFR6J
zCKOVjWoe8#qtq$9()=gB1*_wD!~pu+6u&ma!*fj7QLYWqu%F;?K$9L9JUVS;)|&kb
zKD~GhBBqIW<K~45_eFpTp=T0J5Fp@JGp`j$>2QuIHy%{YUgS!oKy09S@*=Xx-Rrjk
z$ixBbX1oqZ*iZ5X{i{PhXM~M9AxTzD=P|Wz&U%JzmiWs;z^b^h6jI0<WMEMqt9tE+
zqZ~1lTxTWDWpV~4%8BN0;&lB*HF_AIgozG+kCJX&9JzRI-4%lD--tB1OQAR|IRF>f
zqH`xwFuD>nO2>L5{ixAjiAR^n1vAm>f|$+eH&<*HIFwh%yYBhzzcJR%Py#j{VVp)B
z>8<nzV%%FB_F^>L9*aT5g=8RBk}!GR5PzBB_4fyUwft?3TD5=m;@&jNgg79_f>jqM
zQ^X)U1d_hD%u<uO@a`N3a&KH7F7Z%OSHOK^4)ZcwZ@l%u$IIGa4uAB*vT`G1dXJ+E
za31SC6rj$S<%NxE6mz;?Vi&TD(FHcC7?aENZ~M804PJHeHr)WNUa?l5En>LXo4SlT
z_owaNU0JbZbjl_`lA=%f#hk4xtU<U$?PBNelZYX@v)i`EOcKQ|evu%8jYo#JBBXiF
zkpDWB_7iM;@n<THz9u$dohVvU)f(koyi3kIQLtD}&^nVPRF*H@0fifH7pMk-OwRr@
zCX-^|FY<sOGL+sw(@hoK$i&R~u^eEqToCL5pl%A$VS_uTKWPeXzvSZLO4&6vFh#F{
zJdVWTsMc%6@(NYtX6+R5awEiui-aNP$B!CSQP3cA9&XV<0*jKU;B+E!VMq%kyj{mk
z=#wheTMCdTiKQkd+XxPko`)c3CpDP~m{H5>&1d6Z%vuP*oHy~4VKyD;`$wLHMx;%*
zmZ;8j;}USt6&T|Rig@kk5c*Rm0s@ibsibjb=`?>{eG+|C%AgaqW69$`JvKw#tE4uF
z^ji^K*tZ$fo9bdD;>{&uU7mn)W1Y}zq*72#S)xG-D&wYgylvBjSP7Zboi_IT9H5t;
zbZO=1#*VLNaIjDMnz@=U!5Y}9=<S95^xksg)R7j~gd`ZBB4esCD@l|f99Af=Il#LW
zA)gzapClNJ;k%EtR_<cIy~MFVDV4&1;09N4VH0KbYRZoFX(5oDsTi62hZQti(^&@j
z<TWc6XK%yV@?T1)f|^mVfbtcTfG&aW>hckHy2uP^@50Aw|L&(J)^|QW_c`p#2}3a>
zR$c<bUyCy<u)2~&v)5$8Yd&>#!O?|w&^e)rV`?)DmWXv-DW!e^L>c2Tt}yPYnv&Tt
z-*FhC-vRiPr7BL)kNHatvb>QS6KDk1lM@)boewfwH}4Dk&7rj|EHEz47yb#m(PuvI
zrEc^K|I_WmCSH@05&i`9&ZxbgkRT@wUVH*#O-PD1^`kW9DPeu1HGRVnq4xw$=Jo-F
zQFJGIuehi}I&r7af^x@T3Exi~7?8BNY!a=Fj{6LD_yId7`$l^CJO&s34wYN*bRP7u
zGIo`528b4jFHl>cUmA^V4HDQiqKvxSyWSfUO5ZvRvI5g6Pm~>@MRbpHi1KLq=Ns|i
z3ET=wTKEgtCyGI8kMj^Vk$+O0JipVfwh~h!QT=OKUFgg}rOtOI?=7)|kog?8g92r&
z08w;cil8z3D0|w^8dpo2s^2<L&2W<rBw)OY;U}-OAYX>!qslmrJlA=NvPRT()eB)`
z%7_Pm|ADH+oJkVbjBEb=nO@yy6Lt;x8_z?Q8GtQl-k5+q#G)ijwFWb^k#?1q=qcK{
z&VmN)P0gM#9se0k#DE{x{D-@YgesI}HhcV^c)$WqjqeFjFAWuPzTY>@aXzAeMdm!a
z4ih6JAckzI9v;Ix8Sv*eX(ZKh0CfKiD#_4dU9>64^tyyw1=VeW+V75>sxS_+>Td>G
zq0wczVw+P#emZ)<Oe!KY{gYE5um9wGS1Ny55R!z((f}DR<3B|vN6~%t+EXQT(&bsL
zvce*t?0i>hi+F2#!~*7AxX4)Zu;qZUIlYtoTzF}4<2oaCNJm^FIj#{45W=Q$CKzWf
zRPy<JV4~!yWSC9pdD$b|$-2>|3fq`!H6dIz`KB0+%M}6{+J}chsy3%_k|F!XFu8u9
zsF?_gD4w@#Scb#(8O6RiSM>gT9(uo3?w(fQ4KXs2!?m&;2{gH$f*|*Xq6VRVsVrsG
zkS040atkhkYmx?<M^xhn+?F0hM^16EVlwh*Q3WI$u0Qa+?`O39OY=B84dUXR>yx$k
zRN8ckFTVWv2?+uCGZ8&AyewV(x&3|h`Z2q2%JlV5JN{G9iAD<@VED?cS2uERTyg#D
zg05l4^IBBHb0UNHH5)4qL4_IDkPUa`(K8^)c9A7$>FtzT=C<?bz|aGIdDb<bjW4Tz
z$gm)IXATU12~zhB&e8R)rY|~f8r*?%ZU3WD0JP{~iNDUsSSZ4cLpnwg97jlNO4m9!
z!+1pknss@D{2txS!WI}x`qn;11LTZR9~0|3Zmj6uXp9@2AY#wq0s57d(p(MIqZFT=
zNro4$(6naKJA_8=BSgL%1~J=ZT|Bf*gfxd#Sc2=OYnEr2qWJS(SCTK$mPT}~NDU&k
zk7=7AlDCV@pie5O6h?H;U%c~5UIaaRx$*cfX1ke;-8d!v!-!k0rpkj*b8YtgGbQIL
zfudk*kw8A$D!K1B2-?2mddaeRm)z<a8;!z?D8XK#VFqS8>i5yBD7#Jgzd3~*^QJ!c
zSyA7h7F$Cw;;z1@cziFhpaE0-9Pfo*^sJ)x?Q1uresV>0%5;o3{63<CR^=u)UQ*2-
zE%!Xu8+nO=eAkpU(2!Lyt1TPEkxb+b2r5)oHzd8)NL?W}xCkT8OHF{<q~JqZ`$n-Y
zNky6rmpOYTgZ!jZm~NlzCn+2E>;X^6W?oH2ZVk(xZEgl-Ku$=WX9rzWni-Q{hcB|q
z4OTAazAr{o|M5#FL(*69yK44jl#|ggXMPUy6F4`TZK?ce3GVhl@JeaZpu)+>Qt9Lj
z#^))l3f<&B$hdr$L2w;0)}cIFhP0J21-%_^>7)S}x!d{SI{6sEnnIZB!Z+ymNH_9y
zIU{(UzUrhe)w(yBQbT&sSl|S8dKwZQQqNC#Re}2^0Z)~QHvwhzWtxmjz}g$wl3tVt
zOxlj0rA|6s`!tj0Kx3x4=~whUTT4DPdOFTe5kXuWF!bl=i_Y6SLi5JYx)k!K&>s1d
zo$wyHR^<Gl-%}92CKLG`j6hSr#e>+U^}8x`Fv{rH?z0E82TrnzX@zAbe>JLD0aF|A
z7;A7AHjehYD)n?IdfdRqK{*V8YNqd|zY+h2nZH)PJGSB1t4m|I!|Cnbb08dE&m<Pd
zInq>ZFK9mH7DzZ?riz*#g;D9)F8*1PSf-hRE5&(os8X0pDwFD=`ymlnmOW&LM%Axh
z^ClMk9;9g^OvZ7<&vvt@M0&xhn(l^P%7k|5!OAD8Yy$WB3UAd?bWQ7F{MHG4PI;uC
z{~{gVAu+yv(AW^@DeVCU3WjfrAprxme5oqjS`MukK3zNzu{MJSi`KYh=9FIU^&!&z
z^qrsG)rjR%d5JJLcM(bb=a@9U$w`&E1jLNMl{^wNdMr2)#3-jrm}W`z{0@xS;rkZ(
z40C)#=|d%mQxNwnn!yyrS6(jN`VyUNlwRp#xeI5(5FP2rYadPZ!{OGj7!c+Yq_q3H
z$#Iw3Yu@>Ohv79Pi_|jwV!-V6ipDm`G^V6Pt`-5D?W;!c-*jpqfRWZ*iqy!_9GiZp
z6<h#J_K<C;<cp-rCh>~DPX+!o^OLFTr3H}d8v-ZlEipHMgz#K`qT`GgcY^{T+$+C2
zdt2w>f7kGR+$;1ev9b*M)X|yDnMup8L`)rnf4FMxAUR(<Qw)d`gj~bJTu7ZC9Egzw
zcNAria6#ebVq}p9_m#pK!fwSQj{dg~5nnsnoz?AVy{#dHlz<BRTHhPJ&z^|w(RH>E
zvXMtv)Z`h%#U?B&eBRzT5&H%V?}Ji%=?d~;#qG*{v><{%*g%qWo%a@}x%#J3U?QRW
zA7H#b$mT{#B;f_Jvm@=BPf*%p{86XP<(@$9tln6jLM22oP+Y`#`Ip#hU)C-yo<>C|
z?=0Xx_=Um|7rvL?4&=M>hrKVma_TKxC@exc%e|<%_0QtEB5w!#8h<@!L>~vROesg_
zaC#<0RvtHLytD2$9N?UUX?g&<6e5zytSG0E*K}y#oDqsplesT+t)qW@Vt;8vm<sb?
z+}}nOSh?1!63JV%P!VfA>$_dx>RG{pf<Vwl&*i@UF-c0Lnwy!X7Nmf;k?eDst;;(z
ziIQsqpV`?5w}V%x-7Qeyy|X^+%O9C=lw>rm^%<W0{o>V)<WLav%iaP@5|V>!M%9LH
z`DiUsbtkIo@kYvzyFc@O;I8?Hzu2Bqt{*5`&{-biUJz?azDClSR6~G;>PVTwA{HWp
z+BPMKb(-c>wW=nrc@qikHZevlV_61@9?TG--3F-NPK$X<dnSPNQ8BuH_slqOrRphL
zq=Zk2H%p#zZt0pksg;cUp(@FqwP#Wen&(<loK=gFm?er6gyhb_@4}_`=jL{-MjeuH
z@RK39z1CvE6`uQ5E-B|@xIS^;T**_MYiPnm2Se$1i^p~+ID-7JIpu;|;v}%1;|gKZ
z1RZ8JoP-IZmQfqr3-T;m6&5~)uLBA9;v}?H2DbbXcc4bPQ4wS@M~8!p&jg+8{x^S~
zzJ9paTT5%R)Iebee_P-tE(=$Dr>EYN6XRsa-uS{>?TKKk8ZsOR^Y&4_0*Ax{+_(4~
z@t8)+szCk(OCq(DnmgQ&jato;gZGjq^Qa3vO$uJCHobZ7K`e>KnM!!mkMAadd~@qx
z(Q*RaLTH*v(k5&X@A8-Gd!gjbd=!u7W-6PyLU`HT8(Z}(Hwt==v0y!6C+?qSHt+Cq
zIk|j#_+)KH)?PMM$US)wBl^$x;4CPfgoj>8G`;v{f(=G)BVEqSiXA$90~4Y<Fg!Ey
zU#uU^c~?aB(~lQ6#QjHEW`=KWB#arpfV7Kl0(t3rNsox&e1el~9!VCH8HEnzN%AdA
zkjVL836&Qt@$Tsr7%S{a&FHeZNbcKc#4U$w05$EIO!giWJj@VA_+282%-nN*|F^xh
zlh8+2+0afVzUZk-wz`HMM&)@S++HHsjmug}s@a+T1Jf|h&W%7d?RRVgV`U&tky?KW
zzq!8{0mj+vB@NP%WK}|=1<&19sZt)3TGG|8r;31+_ft>p%|S-Y17;xxmN2#?y=?n>
zq6570KQU=6qUa${wvM@ETJFmkb*p2g0EHEf*;!lTAlLCho^W>4u^fZhZWG6sM)yc_
zJYr&$XlG}q3?zsM)B`D-D4COh7fLEgJud69=#=&$OOwzn+<D*$ppJAX(nPXNP<U2!
zXq)vfKm0iY+3?3l{FaE!PHAfnCfT(Ck{w_rl1L{&aRkv?gG#dl1_2jvE@ffSiuJBi
zT;z&c=rzk~*2P3x6dJz3AEgF1aL$Aw0x9KnT9AgB4sAO}m5#SBZQ~4x-=`q6KS*sQ
z{d|EdOm~sl(I5__v%8O-@*Bh6c8laGHY=;fgO}~1Y$ok7&Tl(>0sE|U4Ra$mri@py
z0@I~M`Y0Seh!DWhJie;guieEGl+#G!@u=8s70}%xBane5JF+#YAkwJ)uxz`iOToJa
zu3=@ccJ-{NZT}c|Vzk%RO8HWM5^8{xV$A&)p{E?R^I@Y53X+trf<vAK&~x<&^We$T
zt9rNWs>}9`N_o?bGfRpzGevC?M?3j*v46KKq0Z6UpL>Wk*uf6pDn5$NY7Oo7>i+&C
zh$Cnz@h)C;B0W&|5q>iMYA|z9;{dk+U2vN0wA)1`vQ<a&F?2b#v2`=z>c`xbNb3;z
zHdk=Xi1+%};h!f&=ow3Cj`k`w!#ZZexe1?4UFf}Z7@R>;gxQHpy8-OyWW26&mc`7y
zyGt*g0jlKJK1Y1GgCwhC0Ar;(HQ%UXmn7^`7%=$Y@+lPBP-~G2ZZY07xi@4hZTnJa
z?bc{ahYLzE!(-mRo373-sO(4HE<elT+4I?o1z)BURa1?Jkat7+3gHi1^P6t^H$NMX
zGTFKwZ0!_`s~UIkPhv!BEc_+EZ^0DJYepD$um7B?pAt_gB7Ed#6KscFm(@zepVXSm
z@ur&Q%1a6}Zz9oem36FC@~2^8Bc%CnLxorKttXtT0x{qH)z1DhSKM#Bf92R)-@La$
zF<!M>zbe2G*eB#L3_=W}ZhzdEV0b`S%dm^G(0Nr*5UgzU9@nJ*)T4)D`hdu6N)KzW
zLg4P7ifg=His63Jd5J31`3IvOu06ZvD1K05cR`Sj04s>&v>k%K#TxLTz3^>Qe8y%0
zro^~7nubA;UgXhIm+$nZz=q7s=Avx^i)Rm!nYB0T(3$US>&l~n=C;#7jzh&dTq?wP
zQSVu;a0td)wH+D^A&&3ia0J8&lf_gGMGz&wipmSq85FV#fA)c}n^kK&%LU2^YF|>-
z9E@#egDcW~>-`blxH=V#J`9a_swlr%EH?#$_SNjpZ-RgNz>H{5B90-qt3DDRbX*}e
z12#DZJRB)TthjGx{lNv?=05aqHew;0pCYv<p%3iSCJV;pCSlTVY7tjsJg=vFIgHz$
zEJ7ANpaoJ-aAcaFVGSBeDCgFccUF3+a|NveOHX`R>2|)6w}7WL?nBidHNcPSf15Hx
zfal-nlxFeRVcF|Ar~N@7><MUo!+1Rf&;OR1N)xBOZNcw)csX7<&)VR+8(KHV0>>pN
z%{MoyV}<x0&Gm1nWdRXBpMo$9o-xM4YcOh}>I>_O&1iq);<DCWu=<eJE_6WSPG~UM
zNdwD>A?`V$?2B$*u)_h9*391~ztScO=HfV>_k=Tc9|1+#lt)#lUMMLr4Dnt|`i8~d
zAzIkvB!5h$P{%`cEGrJ?<XdGtVgN#m%}d8;Z>7n6b8M?LX4fWbI}22<(0>lL*}4Pp
z`WNMRFrnnQl=VDLEm#qL)u=lL*^~CZ-XFoWQtF<<+<e!rglOubGn`N|fUQjlA;wM>
z@sv<<)vuc$%L0C6&gJ>@9E9+>hoh%>?1WW7F*I<@e2c=^T*YaBO$`2mrlR5p>3w4_
zK_qa>UD!y)?G=7YOg#!Hz4Z7vX=B!Ps@&<^#4tyv^~pW=CO$TxC<%{r_i&y1`NAm5
zWg3(Ka!PKXRI9v*h|^<)lwLr?t=)f=Ugon-FtkuzBOIj|q{ivxTE`w$^0m-uFHeQg
z8id#Gl@9{~9$owXvu)=ECFYAWG-WW{nG}WTr)_~$NE9Q+y7FNT)~XdC4PlxfjbS$C
zc#WZ<kYiAiw;MBBHvZ6!z!~fxkzC@j)7eE@)@);{-HF7u8`ca|A4_@rkggsYI;g&*
zj6r-&g(P-Rl@EU0(ms9!mdAQ;gqf2{Mq5ouCfmG<f*9K<nT@_*$lXgtLUKz?Pmrwt
zi?AD|m7)Tv@eVhaFkVRX`fa|G^5Jjr<8*Oue6Fnop-H$Uy`sFub)=Whg^wtXI$|q?
z*$E&(PGPy1Hmau--kyQFM!49?BNS)8fyycVYuJ&JXg{6gPXxkj8tOZQbv9dSAhF1g
zxb<n{-*eFRoCRb!+w*_RKgMdz{j4CgAgp)yWmv$FQ0BnER9Y#ce^ggqkWv+9D;0)z
zdSH!(e3MVnEb{5N-9fmNq7I@(`gCnCl^n<0EW#LUaT-@az}4q|Js5wB$Yv5H%o&4!
zh*paoGMTGy>2+oT)hi+9-hEb|a%Zu-U+~VYVOTNvpQ1#*tVNvpY^tR7#O3wTE^izd
zY;NV7M)vB`YYSDK&7fWBSVHqsnd?Vh21ciKu2aV|g`OljAe-*H-&*yzeqGzOuLH}q
zIfEeMu?~(Q9C@D(jF1f3wz2eA2XtgSTOj%zf7CxP3Xo%qQ3JDjWlZz@D-l7TAyXxV
zZ;KbH4PNmV>E!oYT;(^16KrmGa9I>;d&Z{Yc0GR@yEqgF&r*Nw^YEV<1`YaTXMzU3
zNuys8_mr`;1j_3?K<;MmSpj5Lot#<op(4OTKw{?t>ATC8mO%VN%6i$0AtkT(97?@h
zU&n7+C+F&|s!c{e#eai$Aq){TEg7Dk`23~-WyKRRf<UwlRHo<2sEnPVGs{~y;bGUT
zT5#@e9eZ)8Uwy>;UEMLDtNfXZ{0NPU25@MQ^J5`_t@)W+IJa=}hdBMA5mqI^e&YBu
zrI4%h)*6zZQo;2CM3pN`$w2MTykCr%(=NsGd-CJcs$echa_-l62o`#fm+5^sp5^Vr
zvN;DAC`ktXQ<t~(*YZlcK#ngYAr}5#i*A!?Y#X9e6c#<0aFk3j3zSj9Tov6Wd&qF-
zrG`p#?j_+Xh`t>3qY5+M$T-(=48D)NouNNXAySsf73NV0rJX#X2|Coy0MO0aoOtV%
zP$WZ0e>`~CHY9*=7Via#WH`PMh?SNga>de$>IQc<69lF8=_dI|l|8Wkj2L;z<xGl>
z(<JNTb{SbF3O_=#zN3<8@TjwGr@{1X%RiXRH)BiRzQFSujP3(8>H^1*aA<dX1+uQc
zND~BSv6*`>8C@n!o?q2KWab4vq0S>(>A3x015|ur4Y_tZ7A2tvJI?EC!jzHsudRYc
z0Yinu{dLcs;3=`Nqww{YTesq(yy9?SEyJ3)0%GmSM88=Z2fh>j8mVsa$pAEP#!b_p
zz1Mv=VcEjAy-5Lag~lbtjf%g+`x8!)bD+ufuBBQ&=wQ)@OlCYGWzJ2e_mZ;sL|f?`
zId&2g8)sT>I#OBXjQCI#f+Q+)Fr?5!sW)-3nYAHkv6z40!R1Qx)+F)ZScrAuY6M39
zK=F~{5fWxt83F9yGG`llq1Bw}Yz9Pl?f^SMynegI+t}ZyANcV>nM*dMG&MT3y!j3&
z1;Rd!Xb!5G0_)1Q_ND#rMRPe-8sU8n;?3Z4l80VNxSE<PXG;6Qfozy9QEH6I7pW0N
zHVz7XW@(L2s4xRN-Ks~I{aWrx{L9>q?XUIT`Uvpcg=zd$od{#nZTsuC!g8E%fDMPi
z1uy)YA)$iGR#KsHR<_kABRA>}GA*L$tRsex?%(5H5A@F5Ly_n!CHS)=vAL3R(?0jR
zYN>DAQ7S&=<E2;E-t-pRC)zFBRe$PJt{P2T(eWf}G_rewfJkafJnTr;7nD+En(9qd
z2oAk#{_gjza)mCovU`0|WTw`Bl#(LKw3ZU|icInd521w5T()YNBH8#={_c=~a96wX
zHF`F(Ct9UB%dh#Dr&l{I>DxzKYjm)#R%zp?U}<g%x=7Nd+8EiQ!qfH=&HfBuJJUm`
zxPFP2^xCJxuQ{D<@E?m<eDsDpL2GMI@Uok&MT=z~q?AwiOZ6@JG`bq?;(`3jh*J+=
z;<--J=jMlKOvq!RNVO-`I%oPZnSOD@`O;N|oSsEFuemJ7<#qc4Wj71=5<%Zqxf6)r
zU>x-W)c%|mIgwDVv3LVZ1o@hX*te$f*POifGqpY~b}I4c(0QyN#qBW-X4LrQ(oKe)
zwX?rV&{#8*g+82UeWCld;!x_f$JgXrB4HN8G|9>X-`fKSavo^T^P>@McfLzOl)SE9
zy6W+h=jk)EuOy@^1O1&TfI%O2^lNFkR=fvX=Z2z{J#>j6-`pb6Y$E^Sw;|3@YwntO
zX`&ZIcTQ}JZ*ZN(J1KthMjr&6n`%&aGadP(olu|*{Gm{I`%z;mo5wN{ESADqWrLWp
z8H@b!8fV6niqB3(j3Xnoa|_P%{y>sGKXd^#gU6pf&g>`$pI@}!Mope50C7AHhr}x~
z{*S+$QBmE6gMD>pl#3&`O-n+rw%a|Q&4=qK2`HnbfuUl^DnDe?M`OUb>|{LYcPIvW
zrtT=aS5Y4UP2^K_dhC;XZr#2t@~1C!&$~Jq9rMFlp@Z)1I8oraG!)g2yFOcaIkBZ5
zL=TWxY^BalPsr?Za=d*@uRF@*fY+1+5$VcfNiNLr3vl#WycDQJ;Nb<76Ddg)ux@KK
z5keO$$jS0eU{?0fHNM{KNW?-`wilpV=H7{rG>_x)T{(rUK|d26=T*qAmQol<&AjxJ
zuz<`>I&0h9!o_5os^^kS@16FW73K<|*q2y&74~K~Y*4ir@&j9;kL@|qxLXs(2r56Z
zFyeP)WBPzZh-W@(3(1hb$EWOi&LJ4h+Z1G_wBNS3FrgYZ$Pu<~Wj_{^u$?(YiabhG
zCr`VQweVwKPwaBV#bS9(Lx!ez{@1i^(`W1XL*57RAn{5|CG`HEHhvLu{t~sbP_k*6
zMwcE6a2zP4%L`#>m<FKEG+R;dK7YJ18So1F^kSL4kL_27yC4z>{h>}rQMZV^seRz;
zg6bsD1QeHX^mJVm#7z!+f8>rA+`*XJ=+5|m+3p8h!N6Z{ZY~)twV*S@Djco*lIL4Z
z7Q7)L=S*k0QceiNB%DS;VRX)Fs4qn(;;8XaMpIO<X&slmV4>*TiI1B6JX{1iQ{ina
z=<X}_*Xtp`w#bDCD%$>~?Z1Ej(sks7k!1XZfx?LsOv16d*!6tsJ6o}(CNph=P`0D9
z|4(%ZH;79;z!`R%qM$gTVCZzq^%AZ&l-$x{C7p(GBVI`F+S#V3e9_zj&TO<eudyt0
z;SGodARZ4fq`-$$xhiXu`TH;#@MWm$lolk(A(j0Fx-%!g%brJo>R00M1<J;9M|P!G
zUst*xqLcixK|gC+Y?(M#j;G#M_?@)VTI6SIUy=O8uGM<M*K!cxWu^ckF6ZW<eiUGM
z^vhKFwt|#IXScK)%gjMWl<P(t;l*hr3N$mY&N*J3_kZ|$$1u&JXgjxT+qP}nwyUeY
zvb${Cw!3VbUAAr8RysG&Npg~t`+x6WYd&kvz2_L?6&+JyMGDbVCl(9=QiMDR(%<t5
z*a$gG`r_s{6VLPwZnfOu(l_G=62;m*(g~+v&RXof-Xr#z!r97^oSO%qC=$A=minSF
zflrly*~}M@UO~@?mwuY#5R$af{C)kWR7~BbvAt)&U&89(F2Bd!Ekmv9=<<&(N4US6
zwmP^HE)lmfA{xQK%QClt`FO}W`F@;hr5+q2m&(2%oJ9P1Pr}65`6DUF&spccbTf*3
z4?hRj9=B3YH3ne{iq^{WAJujVp|tUs#AAU^92o@eRc84m`eAJ9TCB>`KgK}xaglE&
zm|LeEQup+$Om9W2^k^NDcvmIW+2||=dib089XQN4`j4H17qeSiAIypFbQ>1w{FNBt
zhC;J!cJS8xFSD#lox5PsmyFnsTvV6R(Ice}G@V25!L?|QrWa*`e1pqqZAh706Yu(v
zj_^dd8CLvh;eH3cR&x!%2;*af1Hc`jS#_CdV^F8|3WXLQL6A?k*ZP(%K9E^B2_WLm
z9MaDg!$)KQ{#}w(bgxAwUdh&|K2HD@=c>7-!SNt0q&|<V>Z<IC(LTsIqZM_=nT?Dc
z3Wm^?gD9Xt3NR_dlh~ygO%p9v5cXT!fh|Xrdgn526oy5yt2U=BJ1IT&B?_ItR<^i5
zceclWhyqk^>Ipr237iR;_<UCKIcuHng9=&fe4;sO(YM5(?#c1*SJTy(?AG176;0Oo
zGtw8Xd>q#q!z%DaqItYiRroca^Z3ATXN@54xcW7!5eS@t-zgLutO!?K8&98Q>1pIs
zPYLC(VlU<8_e?>u1IHDR`ShDZ8S!k~Nql6fV{f6)UK)&7R4~V-i{<2yA+Z}YPg^y1
z4fJxT^k_;C73|In+Im2HWzT<r|3e7;KiohzG&k8s|6&Bv!GM79|4SjTys<Ulzw3D!
zEbacMq&G&b-)@5mj$haCE)_xww+X>DW{!A^rwX{G#Uc`6kO!_po>RwmEdG$J=W;`m
z+jZfvDO)Pin{3C#JJ|j{#7P~=$waxVbZF~~o+W9S+>)`IMF%f}RBt?G+yVJO_kCzS
zlQb_`79Jz!L9Ih|(gmkA<3;vJ>A5U}7}A!{O7d1Vu&P@+W_oXZ9PA>#Sdt*sRGDp7
z4117@5OfFH&uT=m`M6mAL5|1Y0&RXF6!n-JN7W5Tww)w?9}G5$6+$;wp%tB2=AVhV
z3NYC7XlqO3!fWTyW;gY5eKTWg=T!WO)Ayd}T4N4c1pCK>K2GKjV_D_w84^f4J9+B1
z=EB%tZNs71J(XY6dDP2?CdAqDtN_Q@wdG7``-+{;)9H;KzNL!M?XIV9IlfJUO~Y<*
znD+!q-B9TuDB1>wXu$n4V6D0-2Fd3WZ_uQ*xNujUf1`7oGAV4vE$VIRDFTV4r@N#5
zn;HJenA!ll+?K{(r;@0A=-Ltnc?yk_jN%%98Y->If-BLqa<(X(L?#U)=*~Slq`rk4
zUahg=$}T`9eVsQ2x#cr}5{E25=H5LIELbmMR5>&u%R9#pZe(+c7n{IsBS%g`D{*pk
z*xO&7i`;uvoP*?C;R^k1Zb>nAKA&tOhk2b~PwXsOF@YXpEh;%Be0<6HvQ9?KvL%N6
z3cF$FL~C5O{D5Y{D>P`Tt2dGFO6!{P`ZR9sOK_8+H^jD}grtFd+GhLc`VK_^8AZk<
zI(R9(5DKzavi_!VThKApgb8oF7xYu4)a5jR6b$u{Cc@R_Q?o?u6ZAjV=qo;b4AZ|F
z<@}d#O!{BesELz@gR{Ni|A;nbaCUe8pOspj{Qp&I=#3`~0q>wx4XCSS{go0N?-ekd
zP60kigQ=8rq|It)T*E$vW#VAVyAf5il+Tai_(cWFv7@Ly;UL?<i8~g#chTt>zTYGA
z2)!<qut{!q&}@JW^yN^f-Mt3aD;U;O?=JY-0>molfZenKwrX{Zb}x7G2>sBBu`^q|
zSqcex<|OGy!xf0a!^Y@hKkDNl_4%8t0uXmJ*kQd(aw^vIr4~Z7N)b?L7g5j^9ys(Z
ziZ;tb=y)m@bwBI`M(7wc?V8716N@BI-Dv@NdLm3pwbSzkt95LHHI(C8#Inl#mf2uJ
z6<5eU0-vR??D@<=ZIYx?f8l()k+K>x1JOEYFmh2{4jx9`Quck|T&3kLKH{60LG%(S
z6DHQ|aC~bG{Lm_yi?>Wnx=Pzv2+ky=K(-_pO%^6QopM=4LsfrYj-=0_fMS0vLJaB8
z-h!^>Om4{B-Awe$xzlK>0n8!{?P#HslSczjFCwozzDTy$39-BEd*(*GgBH)r%JwE(
zSjzLBX<wmXDL=H_<&g;j?RoPoA(>_9zW5#AS=|aV)QInM7v)b)UqtcV7yO~mF1%V-
zFT~gR$=TG>M)^e({)7ChV22lI;f$>V4Vv2+dbL1I8V};q)LW*lpL$_Xif%r<3<`AE
z{Zk*@Cc*gB7w5wad0!#19E$=b%K1V(TA`=J%fc)eZRENXSBbvtn~3`pzIz&NZ^6Vz
zk9!WX0#a{5bVkqj|3NB%?y0g6`$sC!f&~I1{x2)f0$^+kaAI%<*gDu4JO3}!L-#*c
z0WK$!&rWSRW|2?<j6x>ZSx^8^Y!*+rwWt#+nn6*1Tcgf^o|CW>eL3up*Njq{R4nLY
zc_?wUS?F)>-)3!+i**%T(Ws13qys<ioJ+$jO9Dz(=~Wr>l$<MS9$T%Ki88~y?-6D+
zPU7xpMNh)+qmn0=TxDQSHX*+!(7{M`(icrl4&+$I6YbQ}xWw*VQV-e?&Ft`;XC&oi
zc24pW?b??tD}Qx0XYW?2;)it_AAfzBC_g9g;wk?o&~ce5(IJ4bK6<PuA1H7pP+P(J
z`rC44%d);fNl>MErUb^8^la-!rM_HJ8d`Gnx;0y3kgBi#A>iUe<E80ni>LW<+^X*l
zoun-6<%f^PdJ4KiN&V<uCJrp1b#Q&aDwALyl$3GhVd%oiMhgU+HyUkwILKCkBmT2v
zxp)lJ0Y8&JS`A?^Q5YSq@rdvjD{%$gt=t38ppU}85Z1X|y#{A|-K*Hx!<dGdi=g*>
zmNp))DH;pd^<hy=1=s}HTlPkgF-qk<8*vu88@m^xI;x1yW_2<P?2M6w)<<1j)v*$!
z4F2rym22WHV5>3mu+!d@#fY~TcTYJLB!ItDA;jH&IWY}4z-W)-glIjbIm4Am2n2|L
zbtF1kXOng@a<48!%Bb|g9++7$S$JM#IK8c?nr=P(%q%bk{p458187P(!zGgb>S^rw
z6V?9ZRq4ar;kn%mJ^!3x48@7t2eA@z$xoP6zUVetPJ<TKbP+>ZADZ`a1-mP|a}Jz?
z=>!h|pq$JKu{`LS#b*aTMwW#da!4F#_IYqC)0#NBF4Ty0QI9pg<CUyx<F;HH<#zw|
z=FQUG_8wG2z{Q7UV46><$J$n!!H{y1LN9yUX%p<NmDA!LY=n8GRcITy)DkBjDhA>U
zBAC8i38^}Fmd@}L<_`pr&hV#(ug(>{ujEkvV0QnO3d<d-ZM28@c;P1mjI}U*vMFrz
z>`xg)wkp$3P#(0piLSUqS}Y4Z*9D5{4wp6Q>!|nSRihi4{Lm#R51btia_gI<5^o9f
zbs^b022osJgDkkF_8NeI9PBmwf0#sliHPff1y%N;w|Or^+3p6cW$X$ssLO2*BkObV
z53dp>!-?E420W$*%aO!es*P^LGZU9MJ}Af9g5kxn7n==dHlg&YF7u~?vS6X=<80d4
zoRM;*M1(+01!g=s5f1lUcuT!G<va~XYK}9XI=#Qag(>QXh&or-;pgHF*XTfFIpj0V
zG;2Hkjd1Iyk~HL^SZ|d;u$xBymj#X1A+$7Z4CTCC8y;2U$KPkP{&;&yRp)+Ox;y>u
zfrp8zHmzYL0uAYiM(>T}7YvcDFStUF$R%1o^|E-MC_wvy_*q`{19H5Ok)rHZ6L>m@
zm{LqVboQ3aFwKxBF(+h{s;dF8VJt~2U33DV8Ltjhpwj-$rLfuBR|NLn^Kn74dwZ6D
zd&$yFzT0YYO#)HyHCDmMn1sh8!q?LmN#6k}GJJ7fc=UH^vJM6AWcZWsR*_fqjvQav
zFNhbMAosr5L@;yXBRKK_E3ex{P_53@hBGIog+`NsgvzXs<nt)U8Sf!nJz6%bcU=Rw
zwn>`k1wZ?j-LQEiq`c9JE(zQ<WDCRUE)(MrFgY59r<QeGYn)>F{?4)@dDh@;+zDuL
zV<2`KmQ7Ulxp#mq^kMxo_W~^3T<cEfHQ-j+<$ii}cNdj+dza}d+No<@bW(yrO{A+$
z$6QT^=&`})>-I8Qda;3R<?;Y5T5~8)Jf`)kGmF|*cb&`swUbS=2C4JB)BB&N0Q@4V
z9C;idAb<!E5bl3@7hBpnJK6uI?mwk#``@i+-<SWG2IXpzatX;ts|mJS1{sAGS<Rlj
ziIFRS$}S=%GUNatQ2)e??C%f$Eq+!YDelhp52v*XcJRqZ=a)xk!L0?Z*E`8SOIhkj
zr58rVk5u#zbnC%@>^~io&L}e!2WRNRa%qkQMRc20aysXuXvPFHa(fca&h2dPPPQui
zV;mk9kAH)+HZ8h}m_6d{m-uEhJdrSsODH!A*(wWz&<AsmmGc$ZhAE^v09`DenUI$C
z)AuTdN7@-7+VgY56%vDIy86k&IN%<|C)(2sGJ;%L7n=*=fh@B_6nf`Chw{IcC+N0Z
z)#@VlqesQx8DimlCCms)Ddroi33~BQ^9;J&VTP?#nxv*V>amL-g{mKH2q;6f`|M{U
z7D5mjoe?4}u_2}P?4+aEvakz|0^wJOHkgRWX}iqInN2MNM-TZd@NJUl!oz_pajM1w
zMbR&+fbvi)17e-BN6H<1o!zMtw?vOeH#5j|C#-cM${(dagAApd)XUqKegNysgbkmm
zU><4aS?pZ9Ijy=->NS>BuhJ;<Y*ZEK%qnK?yqv<&F6fUERli!OT{2Ue_jq)Zc7^vP
z8#7}H-RzxMSM2dq2EvIG12wT*h*<zYF-dgpEx+KOpQBNG8@-W>?{2W5(I*?p#;##8
zz&p`T#LEW(bqp~ZoK=6!gxx#+M`v-NvhX%a>p3p+k~6k4J{dS($U@mYB@@m>0plw4
zc-r`CbfPRtS!k4lcJ1VaADW~FM4ZseF^k?w4Xd$xR)r_9D4}(C^L5;S;&3FK?epc5
ze?J@bBN}Qqz+(?eqQ?+6G8GNetED7EI4UzDNSLEY2BqseS?kQoMw|LU9Cz6!-t8(l
z6^N%`7(jy})KZh6545{T@UhTMs+pjj>WJ>qhU4N`T4JcC>*sa_CY@|Pc!F4j`dMZb
z(Vzbwj-@JU_UNarksvNla4oh{D9WqY?nfeYpqpZ#Ii99ao7b=N)XRl8jKk>Q$Z8Rf
zfu}RA`p;l>0ZNRpuN`S_e_^BkCNd1B0QZvVcGU3Xz=30=5cR=0KsQ^+%^g@H2gXyb
zN#3w$S!$!&6X0yZf*m32#t)FDn45cvcamn^XOrVtWdJBT5-V^_8ky$e<UmwQ(rMZ)
zUyfA<#hG*vZ%C_S`FGp4%)wghWRm3BaU=kFHGs)Bh$-?b+mAB!nprle=b4)!m->CS
zjLAIYL#%mbjYN^_Nv<x><O=X#?*AC@T_1cn0Q04%(>kQffjz~@=lE#gR0_C|%qMAQ
zvv_em5V;YitsZ6nOmX}P<R1Ecp}6<DOSw#8I7Du_k_mC8t#oaHoy!yXR!p7Q#ByX!
zX$UuLyn}eo`X%CR<uLYL-2++)uP38Gsjr4VY4q+6Xf9$~<9<#qB;#EO98?<ul3hDw
zxGz~~)VpK}7_y3Vlv}l}eeFBXP3oP7G}FxHQnlg%o8<0u4PW9SJn}IDgXuEitGBDr
zsDed(kn_xgU{`z$NB*PD9_t1ynRFx@Vgs?$3Dd$=W-5Lu0jJ=K5S2*O9k^wstSsHn
z9Cwp0+TyJtlQ1>m)c|R2(4mzTe+j$rtDz&Cjusu476utCN{xfnM=<kr>}caG?AyKU
z?!(IaZQ|6~y+Tpo{OqHEK+nJjFK)X#@BAgrymatR?1fR`?(r87L5`jx;|S`LzF%O*
z&Rx{^kR<=-$dWr(#_2>oL5^Wgj1b)7$XC>v1y_I*1BCfXX;G9LK0L_#zEj1t#7Pl#
zs5~QY*XcK#&znXb;z-cTYoi|v53ao6y{En80&LZv?O*jhJ?C+yMg33OepR(KBbsTq
z4rI$`7A#yBanoU?{8h2&Pq%4%Lu!iKFEi5?!p)52r%NG=ln$vy-(zb^4=P9x&TIq-
zCHU+eb-hw7We9M&E{}&+Tv&5)dxD|yC4%3p^=y=bKOMtFU5lk(58s`8V$IJkg%>>i
zC2%z(gTH^_M5gQI$(0nHJvo={=o{psG+MFX{eYATa4(yup=zu=nXdN3EC?{dq0FKi
z9K4J@nTqLv4leAud;75C>l-vJeM}(E!n$9YoKsi6+y{z>L^6yJMo^vkH}A|5ZX@1#
z%i#dzpQN!-Eo_*o5eGe$cGWal&ZG7^8|OOrhK!`_86(ES=1f;LzV0kUKqVS3!vvPQ
z%o4_E`cgitGHk+HRpNk975#u?Q~{7C50s?VR8<ZAUX^xUU^ZIrK|AWBWhBLruBgHZ
zT=~}tDnBr0R*0;ffMxJ5DY&9;oMSaSL)~ak{`8Y_?9So%VbUSuMWyovzVtL(kUaEH
z>gfAN5h1(R1Q2Oasj3!-e=+ASey!{vGCcvJ#eAT!=p}Sxj-=wy%MQ#An84gwaC6>X
zbkiZmRx;CL18ih0+<M4ISmFjXy`!g$07YocOKf1?z|M5<EcK!FW6{_VB9hIq{f0vq
zj$l|*;CLTsbPA%=M2ZJ?HiVdm@O`XbQkO(j(=aKR2+^X3<M%D8@%;%YcofFmVXAt?
z4$}(~Fev~2Y$@g}v>0hH$+jd4Da_35+?YzO3%BvW70#`h0b8iij5|3siWEm><8p#*
zWa(BH$zM13Xe)CC@dRk*0*5X#Pan*;C$B^e%U(`EdZ>{X$>-7SNU;(?Vu{`GQBje;
zb*=^8je0LtKlH|}<MZw>+mP#x$#A#PS9$mksr}g9SE&|Z3|o7?Jpb{+5-QT~3j*6q
z0P!PMZU@4I7YUm&SUy9-`mGTLH#Uob`a8VJ3B}0os9RV_5BkTbX*DKXK1}Eh2Nh!Y
zF9QW~7So8{vg;%ehPEB@42nV;l0^g}td7|&(&+92PT8Qx7TF)zuWv`;HD2JK;07a-
zOVtppIsx&*hYbjCWUE|O5(<hg`#qCGylBD3l&tevG#A1_$t}_DztjyZz)GmCk3bs1
z=nq1dV{amrs^*1}^2x9M=;DFHJQ}FGki&mr<Bk4OFb-;EG(a+hI?O}<qP;vWk<%0J
zGhbrhcRbNr!h4_sk02v{vl5Ir9ivbnk(Mq-`A4y{isVxq*7Q(M-YQk=jQ<-rnXG63
zD{wsioJuKDBu}`3ZbEPr@)=BfP?BB_vBKllk^}G=8!G9aeZk?td}W+t)Vjla2Jd;a
z{{lH)CU@oX)1R7y*5EbZ#Ir@jJk9I-Hv$*<;2qs=A)<lTPUxU5v_5h{ayWryOKbnH
z@*g_QJ?49Ux*v~R06Aayo5}d~n!q!wmtBQgdi>+yX>uv<AwNbU#vn6!D;PO=@>8v&
z7#1=lckP<j>^mtPG~_RdZ%uAkgLEfGGachP<P~a<fNuR_bm>Sws0mNsaqiE0d<AU*
z^@uhzqKvC+C2qN>Xt84aSRCB9*~$isS5W2M&M0fa@JM1cKQD_iFZ9g;NNIdB4)H$+
zNn_<DX_=aTZpF2~>tjzmA>zua<?Ax$xD-%{=@f_(p;tLF$asMf{yKW5ZNZ4jp*xP%
z*BKFbB6|0&$>2DtkDoym6G1At`~?RE{hQ-*rqY-k@gaxKH@&N)fhhIM6LP6oQ6O;3
z;tdfrz1sepQlXQC%O^Q1o=CJlscOC1;ARo>(h!BmBOKm6uVd?v^fISBMAvVGx^A`D
z5+-=TjfW(o-%J_{F_Sip@oT0VraV2l$M+nuuvy7_8J_ot(8ChCSm-R=xjjU~unLTo
z;Bw=Sm=xkw@SOqF`wlJ#7{p;XBvK4={a7>%8o=tsuBAa%iQ3;(4r4ofLx<d6kWObt
zMuts=(S7_gF~2+m)BEGTy*u==Kh#Yl+8t?mS$V@Jw*q|LZn4M}Esz0s(>+K9Zl!6Y
z5XAm_t2m+C^b^0ul+y9w2wH3}?XNxPxs@p4R6ze;Oq1dU1~C>&c{dgwP@g;)>AltS
z-x)bSg5fVtEgiJNmAxozzh}U(tt7AG-g&tC(a~UJ&1&fCwHFe_hyo+kKb>qXZ?QLY
z&lnC5(vq2uHVXK8@QR4wY6@)p5){blJ_4<lbf?^cIo}tl6myL_Zfve^k3y^{hB-DM
zJ)fJS`fKj!JHS$g#T`VZd{}VyNVn&27CcD>5oDBlovm{+5V-=BSJ0Dv>Q}bR)5-aU
zQ_^d&APnmS$A8Ih@Ahca*=N5M>F4|Q8<SMz8<&v+8{HjtiDp@tz%@#Ko&IpHaeKyH
zkYmm(+zq2NtM<LjZFIk@0*d^xa7u-yLxiN)#?p3v1I@osmL~)K-^0pT2@{+wlmD0<
zMqL)4bARbk`}(tgQ3fQ1TM4x%_kipgi}*P~i<U(pQN3B<t1Utqmu<<7KpM~Tx%*#a
zdXyr>R#O&RSUKHb3HyTb^M59gxwnwbmXx3?IzQ)r=I?ZXNj=|<oy^!(E%plf-3|KH
zfjenp+e_mpIdhfotHJa>IL|HTi#WB9X@w0%FI>Znp$)KAYwSjwGjT-5Tt@>Z{$qW@
zc(8rw6bbpAV+^K-*Ya^~<X6^W?*>hd4y=O-HUS}>@FMif3Y>{TeO09(RWL3VS4A|0
z>)@IKPSVJHuh3(M8|p(BsJv)e>F?7vSYyNLK;YT89#XPdQ}rK^Y(%kgZs2c!z?_!)
zOGXia#>YWDPC<EM9sVM_h|lV)2KXl`l+#JA-<7u!TU1T|37^pgx0kEsLpk5psdc-w
z3&~$Cna~i4@$PaX0yYGlI~(;HFEKk5ppw#3P6<o@++8TOEAIV?yICXk`N`Ya`79GO
zcI4}~dd2kv=gjLkK8EOp`P%8o+EMz}^ZiDtP5I0pbP3YT>llM~=B={oOP?c&N$-*;
zXwSO9=vP{AZ$VeG+S=vUGsB{R4(xzUgx{iB3*qU|k(PCe@V<yVB&VA^?-l6YH>trV
zQ3p{!nuZF?zXtFoo7IdhDB;y<M?|q|?LPJX9%n!F0)e%WU)K{f5_Zvih*9l-9x7+o
z-)Ttc<6x$&ovL47%{t6oIazWG`S}Q#VFvv}V_XZ-4i>QpG%I$qI-hn-n|Q=z(EqA6
z)1f}7ZG|aAqQ6^p*I8=VYptt+Gm0uH2+#yK8u&TKSi{{(yxGieeJL9x@ZI>UR@Arz
zZT}YBej}gQ^l!`GUL2Ft310F8??bCPujkLG_PT$>5RMv)&tbKJtC+FG#mCaPc}NX@
z3IjFvhg04<nnLr5Qou^BGw_cb!z}kD9`>`MVrQeR<>fK5V<LTi_YegknlK0y=HGuH
zrt|c1LLa2}Pw>&#{w-=jg7-y*(~DAv2Vh>AGL|~c^E%yW8(Z}w0aU{vG@}GaT0hGl
zohwS7yvU<H_!QlztDWyLYZU9h8P_F9k9n@a0dBK9I~BLH>9?gtgGE$a?{BwDQEQh+
za}$`7jBy71@W+y2d%sN#rVM-B0SJcp;4_GMkdll=nEiBop5OaQQa-f+?0ux`2!$nj
zIG$NWuTQ}*m><g{YXRp@>@bKnt5)1YM^rU3ITt(tXI)Ux;GTm}cHVQwLlWwY$IsQ=
z-tO+3!|OS{7GdC%fYuFRH=oa(AU4xQ4H17vG^E(o+CouUEkayw&#QETUxDT!jlsqD
z^iKcv&Ie-R7o}s@i%oN<Qv5aIcu^-&uX;Cu4fwk6am({hhwV(}MylWMjmRIv4cAv0
zb7RZb%xwG)dg})c4X@Le>)IH^#l})UOFjy`?`CM|n<E8gW5h<yd>@;(+LC1}mwhkC
z)uOTPDtsTsC4-Dzo!`GUn$3!n#3S>2926r+o8{Hyd3~;T?ir};HZj33A;#2^y~9;E
zN{+IM>Aac5M>Hy-^>~#o`-gbe(AZV_uw@vUMjv>3Mi%<fIeX!4e(<_?J1^<(-1zYG
zK1s%4Sx?j5S$ZxRQalcC{X2p67yp*qD*Xm=Z8{^?4mDl}iOR%9Rqjo?EE3fW5hZw~
z*6}n+7{FCkO$9j@cbG`3R^6zlSNoAEt7_+%&|P|`c<O0SpI41CBGs-##-Rc}iGtC+
zA0n7MBgm~wzsNd(*7_wPQ+1Q>YdTUl%mg%CSsvA_-U`P3^stI8S}#8c$o+G7Bcf4}
zQXxLPQzLP5O;BHt?o23LjylLa{+gjrJHl){MW02*ZtvJ*%2_zr>UbR+6~+u5s7q4*
zXHL1Mb#AH|9sgYJ7wZ8POjmX?v$&D*&W-aRT6bV&6pOl&XsCLecvqZtaS6;-vg#WB
zQlzjGDyD3^nM?F&Ojzyj%_xS7YVvKZUq|Ul1mu<GfkHjX;Zsdw>&*?gwm<tKP)`nk
zmvWMSE#-_Np1&Vn#Sp4iwIi@wFAAB8{GqD49Ecu?dX&W$WOmI`UKg7NZ5X_{28p@@
z<DiFs&FYuN7~lq>5v&qdLRu?YRx1F5J@ikvnnt#>OqQ%3OO#zA9MUBMWujWEf-5!w
z(r-vyGh=%cH}$J=rJ7xh-k`LxeUnF$o`Xa6?C6Rr_1{6-mneIEb0goY!G&4_mjxkA
zGm+ywDWo@dZsEr97odPKwv^*F8sd6NgQSCa`R`G3TI<LShzWZ$0c&R~=hjA7?i$O;
z+i|5JODcu@j;b)p!U+dg#={TzE8PW!oM1ecwrLs<gehS9NS_puziZ>zNV*4`@_$i8
z#w%nfB73r>CPh<6U?ZSDC`nm@&7EnpNS$n)&Z&|C=_jF;iL^+h!-x5T^+e>Fl%P+t
zZ6cla^SiG$?87pL0>Ozk)6@tM1y&Hsswi1lhOK|kqBrb8@0{-;343^S+MIpbV&Px%
zJ8<t`pwvS~o-KHDpGj_0y0;jTn|(WNTj2BueHNirtao-x;E6Y_K3o@E!&rHEt;jVE
zlGa(!81%5N*tWSKs;22dYeM0<>XW)fJfSt4w+)Z2l017J^X{Lhbk%WL(pp-U^m%5m
z)KrVj)a+Iu9E8wFAl^eh)#QdlsD-N+02yOBPSs&uRAYfbg`)%ME|XKx0@|jY_!|;?
z&NB=tR>MrD!PItLB|a_Hh{Y}Trl0I<mqQ-iy!*(0y`&h>MC`3Pq#cC|q$eXZJsw!N
z1<NDUmii-+#X>{XB!Akl>`tebfl1Vh8gcsKP+|wF%FFu}y~fa=5*u;z9Zo*5Z1TF^
zjYMTp&Ffo@kp^5fg~9Jw@SmN=+p!tsFT;#ZM#&PTg;Lj(Us{$sS^L-xCpvQRp0|`0
ztMQ9_dWMMMqds2b<fVmPRaGlZa(t>Up_DHd?s{_867x6HMIp0=3f^RvNX|>Ne-mas
z8f<v<^ha#`9&^#WdA*N_%zH)!YUc&HBP!`UHw(6;o7$98DidO|KkLz!YHI2;F~8ud
zNl@pyG(RY4EhBmGl7#sy5SEPY=$Ino{rsn)OdaMBMWLFSdit{hwvI=_El|^L^(DMM
z^w6hr%Vfq>IYzJZjaB(yoE=mx=yifot(5Q-uP{UMpDB#)@p026@jbP!m+oL+G3Ae6
z6;<wqo?5?4KRHpB)DWPARhWLHv$q@Kw6Unu&F4R3h!5GF8iRl`*fWatI$t=8jof9V
zpp?e9qaZ#OEi}na>SlNn6J|m(O5Q%i#eDkwB$^lj{gPN~$?fGf|2P#Om4pYH_2}F~
zFw+iL*+gwYZC>1NBPot|wfE%`)p*w(yR@d3J_v$kE%&*&Q!GcHT2ZLBz}yXaPL<jR
zSIWX&a1)n3*O&+MHP&~D>d~t;8$hM1>K`^Cj3rPQZB*c6$HE62q*g|#hwX)v$w)fF
z_~wxl#NyeIEpO8S!V2J7(y=Rb;3YBs1`}vqhWT-JbYnUkCdMWFKi7DVOPuV-T~67<
zdIcZd2#b|7(5_HuC7&V~=ADQ--rbL@@pT*}1H#wV*?|-1&$&x>!b2JAbvZZe#jduq
zMan9&2L=(I>Sfx00=q<Y1>AlR8b((;eL0Jlc}y6|t=ZkI)r+5o)2zp1_TscqcH0M9
zLV{&c=Oz8WS<BCPY2<tq1MYH7PR#(x_N~dCA%&x&3Vf&?z(+k6I^B*6Z+PrZG6f=H
zzsLTu5G9h#L)I}|DZvAOkwSyd7c+`KI2!au8lx{}LZ3bK%AX0GG`VYNpV$+<dD|JA
z+Ci~TXg6RkCcnulFZv*<$V{rT%+w@-VN|W*Zm-KQe2>1y%9oDW?D=AnYr6ch>?&d0
z5A?3DuX%`}t(>1q83KC_$G5h7Tz9N)fy^<mA=;T>^gb5&dVD<Ani~uXT35c0NGTP)
z(YZR<vTpeL!DC*(r@4I3c_E0Zgn_r2iTZkT{OTVj;<M&u{uw%}E(vA}Gh3y!DgGz@
z`%-PUQXQ2whWX~M;g^R-{E|1+%ge!E87iG~rlf7PcVe-^YXpDj#E@`(R8+ipcL^@@
z#AMMqqG{bBCT!Gmf7S&Q%ph(b=%6FH0FHo--*<H>wOf3rT7wtmjTYKt7r~>}Ni#uL
z!cZ4^Y%T;ZT`b$++5~r_R&Pqp74v$#xLX)GEs+_i6#A3J=`$HZR4uGdE;Z2B?VLzU
zp99rEiP5Cg2i<0Te2NLF<WIkM7d`VRPkh$Vz6-+Cn}>aiNzST&l8pwAWgL$;#T<nU
z*@uDEQFPgQuLPis6usk2RUElE^>r2d7SLx7VA{NuC7QJ)mjJ<1=4sl+hl4ly=Yk70
zu}Uc^R)!HZjVjkwiPeFvdG;tB(~4RD9B4i}TYVFtB=3iDI*Qq~HogZ!bRKDura?Np
zXnaiusYmZm{rz8GK5_3PUPoKNQ<GEn-A(C)a<^V`fR(~aew7O1q?(lR;=QRK?RMWR
z(<Deo-jkjP7ed5t>NiqgyRA#`IB&5FK@&92g6SY#Qhj%ahT$}De16Tc213*vL--wj
zLgtI!fzZP!Y``DG>ZyH?u9ZPwpajN-`R6x}q=#<xZ?C%?9`NEr7T@vHfOy)k_3oVP
zjaIlB{Hr?$2M=F?F0P!#-UFoKkC+N6{ZfS9v3^X`Bg+*IE6OO$1Cdphv1})<uY-Vh
z!vDOE3XS&hs0IcCy7(tdA^I=ZQBD9efD^#Z1n~Pm?W6#STmM}<6>{^0*0t%sTHlC(
z>xv0Rdme=*o{bp~prJ654He_P+K6jdc)FPe8T&0j&>@hMC)9~iF^H^S!JN;ECA`GN
zf&d>1e;K)7s&W!b(zGoH$`i``nxSI}XV1C}xr<=D9Po+OADou(MSfaOT6B2`m*j?A
z5>6i<l$-g!WYEJd!6I7ocU=ycI3<x>$LXT)>>EhXH{}STrf~HS4flfLm5v#)8ofBe
zqTHAjG0XPUDHZWCkog{~uTwNI#LhmAqU;Mv+Gg5{zQHlMduLUXLyNGkf;Zwv)n~A)
zA^(#0Tjwa4!c3;;)+5yR(>zcnX2M8?z#w{-R5Zzh!zN)5LmO>W=M;)`h55cZh>2->
z$V3>FPT|{4zMW|2uNR#0uy@|TSdY)fErZ&X?0DPjK>%*m8cmAAPi&EgHs=&o-BdJu
zn%s3Fy7=@=S0OU&2-maeV`jFhy3b~5&|qtmRSJmfsM2pC{`k&5WZn6?8?SjM7^(-5
z?~Wr(X_&%_=cH(!o(SKcWO%m*F}%6>ZkJJRS_OT3$JO01#H?ZA6Fz%#yC=l|IP?EI
zH523iI&(`q6B`#(!2c^b(>XvOeijM{NF4pY+F$<1%K&R<28;itUeeN6Jdnchx&Dl#
zeK!VfH_lv&HVX^WPr|C>A=BQl#HrTMFxCuTioJ4437E9_{>aq@P$GbtY3PvkIc|02
zl}>l3EF1viCw<l^rn>K*RLwRRgo`CIjL{}~>RV>aW44!+VT4qS>ns#jQNtB#cbbzC
zG$z|6R_X}cofwxSCJr>uJN?1Ck2(aaRfH_1`|6iUUh0@8NX<k@BIWtm3!BNiJsIJ2
zP0Ttm{foY&GWM=qa?Jk&!7`Ox)A%7_4iGMsDpy8vjHk)MalFm?s6u+m{4#4+%rHO^
z+5G_&X-`zhHHxP~E$_vbk*hZt05VN#&r$C7gc(DI38DEt3<Ll}pyYrAvo7g+jP2IM
z_q1tF&%K;Nr@8i&Wa?ntKgfv~4r%C7ANL7q>z7*i;^mEEJV>KxM@l0)Eur%Mod*48
ziBUG>7fG%90b>R_Jeo*0>kd!6_Ls*ovOk@i8vV=URwnWj#oA*cQ8jj@RMHVCnHnHO
zlVUX-?X5C$dz0G+WZg)VEUX{e#YnVcHFpmLTEwx{+2yh&>X_EXDQV4twALMIaOKI0
z!E`EJDbWONEi}z!S<FJLAv19~m9SOoc;!w7d05!=n^Nj5#&yQ#!&Ft+W+C9&DqrD+
z)`G<jp4eL*0g~>y;0v|iqquWJ_!#^+3g&JBelGZPPtJVzf$^JTQ1+C{yM~iRmPiem
zpqzh?K^u=1u17yOV7r)#Erq_PY%WC!;lQrR?z@rBGT=rY5(L|wpm;1;VzkCqd+$i4
zBvePzeY=xN(wq;#2d%xG89(a@x3H7aeAxoHHJqT67^XIf?!zAHac6A^CQAw=@peWL
z!%S9s?<6R1fnCQw&gDs9YPasvZE=p>(V5krK}%o}dpa;pW^_cmNCj_069zZFq(1_R
z#3=U8Rtp@C;eC8>dpw{f;IFeaY)`*_BM{Tgk9IrO@}UmzU7%eZLIQB6L2p94B~=FA
z#IfGy`0h`wc<}2ds>mM$Yrkh<XDs>P<)4oWPWluMaUNy^7mcxJFdt@5$Of)PVFTaj
z?n{$Mm!0^##WQ!SqP9qrZqNP($3)8q@h(riF+Dk)KCcgc_@ml19JfS3C-fOFrUk1X
zvYvy>qTX0t8hRuZj8v*>IA4V2-VMTk#sj>qKbJ#}+M)C2Kz1%o5NBh{8Q;<lV|zrV
z!k3!vfy7T+u~@M23|hgt>g7+I{RtP8Mn6!LTPmE|0jPDLRENg$ThjZf{%I;zzZ`^8
zOj5)`if9vUPe|1-XzXCRmRaU3&}6e^g+sipI3Eb8tsJBplE>V}`xtXN{wU>emg|{@
z$l;5IVynWgD$r2KYiOyzt&jFAkvJX-uT`V|SQhU?`2y?apYaE<ixp&efGtq_q+KXl
zQCn@#YjdbEsL1wJ1@m$?*)RW0XD=UGUT9(_R3vHD(qdaLtbK!AYgEXw*f5ist!kiE
zO%QwBJBYZ(Q7tpa!7T%HqvF;I{asUIY9R@AMW0a_?{)Af)wij>@kh;>yoDhLLEmj}
zk*hN4wQ8j9A#CsZ&_Etv-5dC@Y!>fEksGHA1VJD76Wq?GN04p(1bV42JdHo!E>Bi*
z4L-TodUJ*hyE<Pv9L&YcZ^m=KUR4#JYlDEzQ%LQY<bA%O-`MYn%<C%}wDLeZ<O>=g
zjZ8b$D0HmQqrh2EcVI(0!ovoyrZKwts_}E&Rx#-<Dp_U{*>&gHGnIo}lZ;|?v1c#>
zE9T`~A*3P5aEEGJTeO<Ctc&cmkIR2yx$3(_c=$WLQT_G;gUu!FfQ}5XKgK*Q^QRSq
zfs~Phd$Gy*8dZ7<R-8tiQD25vkquh(V(lLr0y&u_shTKvIZgS9@Rfk-g+CRqxoaPv
zmhV?YZj!@k+F;kKn0sl?kWhJ>#28J!Fy9u*KI9ssfkQnG&%UW5c%V@r>GfI3IRN3h
z=@uaT>@mFezHP{-OMszwm9dgFf*_(R=wKh-i!^5}0j;6qohCEp!cW+cDNBT7?MfP6
zUd{z``u5zr8H-*cDvmt*4gQ<u=&-4<L5ic?Q<5%aEGqgrd%YyV@RDp!ri%yR%D7&A
zl^d%2@i|0iw72<lo7p|UC$}V~;wpP2dyXUiC92NEsT9qY!k<40B-BC|^*9ajlUsEN
z;zT>ZjL2yhAO24tmmyoFm%k6>iCNlZjr*Mpl^KEBo?+;r-KKr$((v}-4lnnO*H|C^
zYD&j&<ZR6O1HN0eDPjbEt0G=ZV_4KB=))%OxGp~4r9iIpGtpYX2#VX%H5hNx-X3P#
z_d|&Z!ISRHPhX6!yJYlZtLlpkzboOhrgIc!SV9bMdJGJTG&<u#2d3syb1GLF_@wVE
z6BgE4jHWkmLJ7)8XG|ma$B4e}`Pq#@y=NGAZY*trckA=|YMu)YXe6`JXuoK$@mA4q
z*WuhvU4r~bw$_s~->DU10o6&Hf28IbTnDTr9Ss<Ikc(qa8l2opXD^>p(Vi+Ci9=qS
zK~0G}qs}-cQDyCiYRtZ-sYvxtnhTbX<_+gQ;kz189a9#?PTETN%QEsP-Q2iIhriag
zFz-3wY{1if$Xd7&3e-0thd~B79PW^Sst4rO@#`$;XtDX}=&-CrHH{k0;%E6u%Tx3U
zms>>tuXWS%$Dctn-4nmfm5dxz=C5(ZZs_!0H5MR_BhUDdDskSq%uXgn(x?(CxfqY^
z7V<Uqc_$Vq8!oQ^Sk`$c6G*uj<LA^c$HDFK%^UpOg*PsMOqM;^tC4g3syF(ul^vY=
zecCStb32K)hc!iC*&bub9#qku7W6RIJa#NCYA$5sL2%H)EpW%bxjL7|P)WxyMz`4~
zd016dhsuXBmv&rV7Lh8g$Y(iK%p~=%<y9TESlhvdvOuZITnQyz8x=MMWeD`(SMv+?
zo-wg*T9$qCQME*uo{0ysfL>eF$N5W$*iJ`um3vKRd+<jMBwgDuxk!jIuNvB3`x~lb
z!56LH?Z!d>Cy4}#Zz+xMpYOo^-&FK}kI?@y5t##=?H!yAfB$b|QHn;t-2n#@|B4~=
zYBw2db>me**fE)Gw7gKNUV_3eH1T|?CQ%_0_ykuDza4Cu*lu~<{II`d=EqZ6BX_f$
zh7`BpuHzfsc|E(CE$i+}_LVvTtxCeBG1nCs&aL+9rO~xrEfAL&pHVm_wKc|GOzhYs
zf$mq$FXR4=r)nOz;~r(t9~vvf>+mCxrJ+OASm)zHenQToOv9PAl_Iy2tF0+J>pj0g
zN3zD?eLlq$BDQ*;JYV+rDtbZ<dwf3LXum(uQLe0D_oqCT+M(LYOAiTJ>A~C}yPYZo
zD=4xT49jt@yle9i1LOdiLdvSdVFcg>N#?c{-|!$=PzKF@z#CzTUbn&XYZCS&BBW)W
z;9g5^WKy6X+XOB_QNkE#4%QpXJywlD>zNXeE>I!+JV$=KjzPWkznwuztJgVBy@g`D
zj%bTz`<5E{6D`%u`<Rw5bi_~d@tdF|sZRbD^bu+sPj^&1m%g9%s`e*iHe{C>)lUVi
zpZ+z2@-2P*S%U*Imtk67UwwD5lZWf<r>(a*E2yl?a#`wdyMl~&a3p>%OpHSL{YR9q
zJ-tG;H1sE|Wq@bech8{7tyE_U$j&QFZF^T+S(g2ANu{J;ReURGk>>&(F4EYVWAx3v
zutWSJKcP|gM<$241-GrcqI``>MHMr4r*qa}T3>?<Q_r93`cPDlrSGYN?%HEqCEa#*
zl!#g*D{%%B1w%ZwK}9IL)ID<|ab~%J3cTMt5*)(spAu&W$V)Fp4vI=<cS3y_84)$v
zk%1ePN-@{;BKhP23JLUH1Vw5%O|P(&t}y=HgbdBC&J@tlXUlhhot71UA3K4!fINy{
z5^ap0mPmO)$6(yd;Hbrv|E|K2NOvros*nJB4DLGP1pN!y9Qz0^>EK^%iibASB$iW*
zIW}&CaW^%iHpyW8!CPAajk2_9rZ|xX-CmPX9Na|Yggn~-%<~6M&McH=SM&*8vg4C-
zA>m`cwahZPE{YeLc$N9TWnL=Wv3LRsKm@s}>jWCLH6ER$tQCW9fR6>?3>o~7C~J+m
zb-%P&F}=2Sjb<X|8+!p=BxEx5*f3TOM1K@ta!e%pQK*A-oC6^;A01Y18kvI<JwXUE
zl@SReKQrw)HDhE*_7tmtxyQh$4$>?rCf#kgEW>CR;uztt$u5K=)mEZbV~@F6<u=1z
zH>A=Rs3erh(>QtJ*HuyBep6<HzQ@N*If096%SDW1ISkr2vRsU$nYI-PeS*D8&=bgq
zF@1eW|EP)`{ynOE%Mf1MOiIk*)<N^enEYmT-=2Pd%$^0wrOpMo(tc(>r)g5LCC(Gc
zr!VSUh)kybpfNAkO`}|WeBm#ZC#a}};gF&OLO+QEJ0@cwdG5x}o*cPFH!*f|*<HV=
zAc(r21akT1J2zo`G@Kx+lk!od`#j-1$Kf-2k8E|aLBs#}qWd5Ar*bC0b=QBkl4GR*
zzmGB}XNUjo_Nmr1w%_MM`qJ|qD*LLVAD`RWwscv~Re;&WxFFg~oV9b|DPUtZq9>!`
zaBg4te#xpwg$iluoG+;0YB`z8IvI0sv*E~x4l!skW1}JzGSfjz;zDK`gH>Wv509V{
z3srTh&yETib*=*B7C>ve95l=I+x8Q+)Bi=4cPW-}g5s2k3UTr`m#*B*9_E4Q)`od1
z&lW~J2+53PUscS;CV(wa<3o3-F)wV&9KtDSSBf_mYE*1M!bA^7(WZfk`ZbboN+WbM
zhFO5jPCuA+m?BM#LcFqEhSO^n?3WfZOzxAHPW5n962FiU`fvzRv)%i1i~9X>+Jz+0
z_Q0L~1+zu1TqV9<QH&@?lfrO#5Sh%Ls|f=>6F*TQbY^+1Z01;B5JbF6S#IucF1GU~
zgE~&4cqB$~?2H!<3oNTlSG-IT0!TRE-s?M+dY8X{<MT^gLrdh7CC8=~A?^&B&7-lq
zjm9VFD=thqq+0p)hb^?&#1fIhcXFjkZQO*pL2p8gt4)|DofNO&5-$trMY~|elwcx+
zN{3NZIE`JKh6c-~L&Q^;W7%EyY-CN#AD^7cME=3F*@txW5+#moBn1S6xkrX2x3c;f
z<1b!zeYLm>>>TR+>Ov}=0aT&H0jXt(<K=V4?*tw7dNT|@Ml_YRzM}l(fjXzY7f^F>
z0HTWSp^m>goGR)Lo;R{g1*%>%PPuns9u@1jGiWm!G&!!0%=kdyJY6GnsTzM_*~q^g
zde-SSJl3u|)~j3BM8~XepEv}*-z(DXh5;CV?+!p1s%B+Kn-Rv{3++u<imB8te7MwX
z>WRSLhX8^Ot{>4KG1Mp4{glX|JG>F;=<Xj%Db1@Dfe6CgSB%I<U>Es1+Iyr;pb6{;
z0)p=J@pjJkK_HGGdIFcg<1|*tZuSqXC}+64`Jx*rR%~DaAxr*i2jAtRzJSpdhLccl
z-*q~s@apdmpL<K05#hg3+K5=|aP1ve0*%{D+YE?Wluo1BUPqwf5i%qTJ)nE>E?n@d
z=Ap*z{Xwb&p_enrb_3$49iT6%8BEiN<m(HNapkNqtNyD+RC{Ik5_~w~aCSbuvdPfo
zrv3Ogb+<V0z7~tPA(O&_3D%pWFfw5iTy}9H3M3>~;o$uiSdKfa<XtB_MRHQh;ukf@
zn=f*!W$A=`NDODj(}MvY1cPt>U>p_gf0&42RwK@N=V;Hdmjc1#ww~YUA9$iQd_X!*
zh*|kI{ll8VbWdIwJP9&xsdfLsTbEJRnNMIpAvUk^2b`fxHshp`?^(j419J>KfU2*2
z=DCtkyJ{$q#0DK}9YaMkBJLwFEUQnp>+45I)EIGo$2}VZ%N)~I_4EQnib8slwXL7M
z4&)|}!02SG;BVS7-*W_Oo~P<6=J?$JF?ILyw@#gWmCK4}*MtWX-F8z7xE~8_CfCBU
zN$u$a2LcsD$Pl%JbmD5s$)6)=j9v4Ngp*>?LqlTSm`BriyMyRkbxOjBn==Q`r^9qQ
zs8M`zQRRJw@^urdddmQQ3fD2?qK2CW1Xx0W@6QWHcZ9{1_+^S~Z5i8sS7&|QW$<O`
z*H+-C9FCTYhA`pp_{n_`f(Pe^71lVvgPP%1{hi<8`WNOXUoJK|SMS9Q?CU(F_Ny%^
z`V%hVlbIZq^%<?NP0R`joK_M$!NG+lh-Bc;LO017;*7-`t)M(3(Dt3>D^x#zaxt|g
zaxWfwoZA|$+Bbx~v~9<}AK@HW>P3NbZ*K;YR*(o=qv;J7dL^sn<>e;D=~0)3W^wt}
z9nLd(>}5-{%+Ir%>zs(dRWXyr0z%TuA&vaNkT{f-j51e!G^$QA;(xKqNZQ>oEVd?u
zo4gEsC&TFJ&)c&!DqVot26AC&qiFnSZ1gugWxx>SUa(Rvk8O4cWvC|{Lf{deCF2HO
zJ;J(>P{er#@^~0Z&FuYH(tWGHsjuh*Oyz8Qk*T$f2b-8@R>ObsnhSxoIJ5oHA%|b6
zPa)E+mb0`Rw`re0VEolcS|47|Ne6Vopw7q1?nu$2@w{|b-uhr_SipJ2ohhb~pVT@O
zaFcNI52hvVqp+O{5zRG{=q0yl;FWj9o-qSxC>S@Al-y2M>w<aN=k01N!=FV|S=AAs
zbOf?AT`kh|i@Y0Aa#BDKf1Z2s4R-xnosjs*<KFc11@0L3hV)G@4|QD|nzhX837mcw
z{Lg)h0FU%32lOAn?;ptT|2;bY>sy8nPL{6!Tk}d$?@!$SH#&#ao@RDmDsb105r-X;
z*#K9tw2+R~WtZ@^XsH2g#xdlkc1m?QShwY#<3Wj<I}CeY7Kfuou=zwz7!=c{w~r||
zmHjzFSb<lEGis=<xH1Y^@bPSIcUN7BTsV#;hNd+7j_c@Gay$x@EIt~*pVoPQUxOma
zbC2BqYRL~Y^p^1QxVn5v3Ys~>eEqsu+3_8!74%hsuBz!TeVNVJcIH%l<MJskx4Gf@
z@OEjj&9|Uwdxppm-7)B#e;sYKjl51tN4<=4p%g-X+%Ui|$le$yu+>JA01`Lf{ngRv
zGOczh5ryKorw}s8=#*cxfw|!w)?iB`E6!h_w6)eIc(b`{c<E^o=cWVDHNJ0lqZ&h(
zO7o98d6tkY;suph;L+U&v?W~?NN|aG*k6KwkHUDRx){%tWc_5rv}CV3l?MK*q@DLN
zVMXgze*dw7@OP78vZ`Lc_vDD7y?$xwqqV#%4q`<xG>_`=d+-Ii!#uI3l%YUDHSyv9
z!#1>r#IEx*qE!(4!so}h{Nz?W1+?wTui_D6E=n5Gpu;2|qAa=)v^ZVO%ET2~6oDAt
zy;V+d=X_gcA9o!>VS>kb%2-ltTr?70Qdh)m9U5@)QBKm045QXD??u7A%ae4bAjTJX
z1dPZXZ0Q>Rt9!0a`XF2uoGyYX(}Fs+UEvQ&I%G-RYkyw-A<(BTMY~G84AKT2MtB%J
znQYT8%$4*2SDaV_0uVEiG<(3`U$ksy=WMstf*K+nf%Iv65Un=UzX}k0j$}^3HjqbQ
zbXi8z7fB{fD2OKjsWb@1j3_kG8LRgev3PZixA=-|W$;lZ=Vw3M0#p*C<wjaghvTWt
zgdGLjQc?ux{^Q~-c2eX#5poAWYQv(!u-`F7bQFmFP?fJc+!TAnVm1@Yn-i~}bA^PT
z{njwQ$6Egq$Sc38SQh-AGR`SMR;EB3I#LMM`vP~Y=<;gc2Y#NLY?VZ7LWpzho=hP^
zO=vk*InKbaybn?0I3utXX@ILFwRg{SUpv*JK@67lef@wk>fOUiGp%!ri5aG1V_IC0
zyNvWbkI<5O<-xGd4bE0j1zCq3;zy(iDa2!D+hM)T_IhKZAGOs|fZ(}(f&B$ew@xf4
z#$+OZ5Q1_5=K(o5<qrI?*WH*tWtMkYUp|>&AfcFn)>%4riF$2oQbH_eJ^mi~(}MW*
zk#%j1GE4=|gi2`d75v}mI;ZYXq5#dtww)W>wr$(Cof|thwr$(CZQHgdqczjrGq3dn
zYSpRp?Y)N%3bQr8{uA~bS>6YnPXz$*wE_Tu^Z&hVaQcrQr&oWi)HX$%Pt6{vEaRJG
zdl&rrq7N7nyyioqx2U+iEy50*mU(aq$^=F%%fu9cc^d9_ZhV%6YJ3nr#le;xffOxP
zs>{Esb(&i6YkmV*GZACUsGlLe!V-w4L^JRzapmmoy(#zSy&cg&OIwO!-xt)KePSO9
z*Cm$p6Os0rZpwUjExUKm>#RPvVVZ>r8fZGYsFqth@*Q&7m)8Bh*>0M=DqHNTi@a(Y
zsiA8w7_&~FZdhOny2f+AwWE1q4~g7j4+!!K?krP3M&7nCB)W_;g>-_|jM7#`3(+6B
z5>P?R5&`B2Z+HXe#FSu5B-4XZ@_v4qdX!;^9uzfQz#m9JS)39!1;?^aW=O(MaxwDP
zEp}>M%S~m_4(%eMsN@{5S@(2w`oex-XT(~!INbxPG`x_wLXpEzTyumY`j1;s{yN+R
zfC+Vh9G^>(1Nse1G0=ABVvz!%K-l8eSuE`D)!ar-R+!%WLgPw-bGZ=%MR(7wW&;UD
z_k^-K@JBQc2ixOp|JnYzmTB=!0=!VfzcDgMb~uEVuU^0!eeBj;nkl8DPwL2E*`^%1
zj7sPP@ydRK_@sc`uyLLMO%9qt5oR#rOaPfREagP*6HbXG1^ZwWLZdQA3A18`fpkQL
z{V-$H1_2XJZo+1E@4zhVZ+DkEFO4O;FD)fxd@t~x;O9$T?rTaPWOh3_&w4!^N_Mhv
z@SY{WOFX=OB_n1fUuq|2WF^2L4=Qc|_`V`H?ISlTHz_S8U48snndRSe8w0$(fpD@N
zBW7RQ0L3TnKewN`zMt&{03n>b972CWzY4xF8@aj8<X4{Pmd0YvOWoRkz`ifL&+(sU
zwv|%&o@b)-xIpfSoYz$BI!esGz8(gy%RIe&-k*(UmDsxjzx97=H~7wRtpVX?YtFwm
zxp<WV*|r9RE)#^sYz6`5ace!7fVDen;Jh}m|Gnh;u5a*N?4EoXy#b3sGC`)|xi0S7
z*!9HpJo=pV)wY-1Z~?i_e)OEoLg<zUUMsw~#Dvu8=H$<R_A*}O<UB_sc%>%xy;byS
z{9JxkmgweW;`|whFq!50YU|m-zAPI^0G!%>%U$vJnQmX?;rA~KT)F+Ico4uRL!9Nk
z$jZ*{;kn4cvHO$AMs}m04zNb+{g)rv$5DD91e1&7Z;ZVIuQ?Cr`BnxVH{TFsvBt&t
zAdEiH%gko-EY;*m8k4%qrq|z9-z~1~o4pNWkjHAiQ$)P2g>Qh3$F>JIozu6>keEfF
z*1H-w0XOr%DnDXNJg=C&IDarK;Ds4Zp<(A>u6yD@R}F_6x|*AxU6>^U><ht4%<Mw#
zmb*iC3Wyhd_pQ9SaNZN#(+_%@ZqY!b^1Ii6B)_b#tn`n~gRYSHvICgEy>vlx&zq~i
zXRyer6z%u`f+nc5WFgA2g1%AMF?~><UIs+a1n_f_&$_}Yw4;i{XYTC>^YbD0>=33_
zp+pYP*1k7rKmjCr;RG$Kd`1CQ$5_l;$vgApx<H!fA~CE186k?$%GnWZXWhUQy`_vE
z>9TR>o4L`&wg3^PZcDa5_6VfeM~RWV&oBmkVUXYk4U2h$m{3E<NW@pYInxR;%ey1f
z@UVbsWE?;*7s!%ieaoKNpKS~7oI91(lCr6(-#xx7msd1iT$J>J-P-PJscW-N#$yBi
zdaPgJ_xECZCS)6%gb_zfM()!S)$PgbIVgr@3A7T>;CwCam=D519KxuKHlfS)6%u?M
zx~52vpw~Lj>YSq+#5DvvBKx<2a85u2scP~I31?>i5KsejHs6E@rd(ianK))|fCqvS
zU;M#Jp316Re@sTJ+ql4k0pA*6ax<hthO+ZubX*=aM)(u7@*!qE5KM3Mu10VA%@EbA
zJ9zivTioU>ppOm_1jAO#+*vvM_2^5Q5vE2VODCY_l^}r=4!irNHXXzY)5)AD#?`UZ
z61X>g9ZB#fLYe3EN6qdv`c_ef=}s-T9}K{ELkF+-x`ESg%Pxlwe)p_emoimK^QGbs
zc6}EFn1|x6<sP;RswdzamlvEhh{%Bi4whAo5+E>aCpWlN>@m9d%h~m@h%z}{G%d0&
z!F~?N6-`|~5p%1)xUp+Q69o)Fh5P$K_qxa3zFj$2T5f8OO0E*!>T)O@U@Q=aOeKch
zED&XZ>~>Zr9!yA${2cCM$B5_Q)BxHxkc7<UbRfEBAc1vsK0Vy*s_C|fSM4Z&ask#@
zAI?8u96N*nhs?g)o^(=<D9oa7wOjnyDP2DzLZRu-r<%@7DlEj+xl*-z<u|-oCc42n
zfXdZ75K#DOau{?ze3=7xQDvzp`w&bX(!C}_R!9dR458Ur$s|tY?w|X$?E;(Hez1~{
z*#TyX#E-xQ^|!<4Be=hP$OZC%WE@rMF!MEMk>TD9fC7O;2O$sd0Dr^(=v`k^e8Lec
zo|n}5Y~Ifmy1!*TGDRw-8sU6>`V0rGtxoXvs@s2`7lgWOc)&5ohyJX31y${(Sfu(%
zk;FHyzn{@I(mL8|`-LW=Z@cHG3n(3M&v*+G=a77>B$LkZX()$VL00)Xjk>_2Xk!HS
z0qBwcxgc10a+LCEY18q5R3l5^n%!5ta04fN6HLjh+9*a{h8S>+<`;!&5^E2|ePBFz
zkU1z59V1tvc|{~%Uhq011sKzWC!DvN|2LS|Fle%A7fGB8s9tx$Hl~wmTt9TzM4C~Q
z7;Uqi?<zhu#NSfr(Y&&bIv{vG_L;JCPidBiFKa%ekDz}7In>NBqXW8IfJSOVa)aJp
zLvo6ZhN)@f#4u6LC&NrtlboxwgLKmw4tje_2VtkjyEO+gF+mAN+a*jW-VZc-1x#+H
ze$}H)3eXos=SDpSgt5D3%?gP9$+tB9!Zcg-2-zuaaW<<F(d)4W2d$@5%rB~8o-V!_
zX{5EHi{^peE5N8={+iHs^G^i_xcKP<VV0`;>)hCt%<{V+KDFR=ommgskv1`0$l%JU
z3j%72cCw3K;2dbbGu0xZM%n_KwiShzHtJ%IaVttOI|Z_cs|I370knjD(uv00;@#r8
zj}o_JOcA;k$ElhUjTcqS>Pc!37)~zIY0E_CL@a^I8oGi0ACN-;(w$^4^$h!`kdMWo
zoDs9fDRMw?jz!5|#KA%cItub@73NY<8U0r;pe=>H<s&rMPHb&2{c(`;k%yQ@K5~8A
zPHOp!T?t#imIV@kLr%OLd_1^c-892!7=&Mq406i|rv_*E@7Byash5gdT{IT0)PVv+
zLg@zhIyd2g9_}kZg_)XQSauLxT2Tf$3>geYQ9Ta6(}*FQhp$l!m=9n@0mClmeMX|r
z3aW9x&;skl8e)_>&%H(*gsMuP1Av$d6p6BNf&=}%zCt6M<xF?;=&#e_)(%eR+4U|I
zXT=H+pBK?w@%np{e^wCYRrOwZ?ga;GfmP8_C4imI{CK)+MZ<b?;}Pc80%>t2B@1MO
zHN>(z!_*#8blM>lUccmiv`)1e<kts6<pw>nNW<cYBrX>L3>Ml*{=DbQ8F(hZEiu1%
zAM+>E<a~5{Tf`?-`UFnZhB>p*E5z6@cL9$BjS<Q=8w{CrvBn=HG0XaB;@hnz$4L%=
z|APw*t_FeljxNF{CZp^h&5y;&@5U^Tuy&~ifU1w(xSs;%xd$qg>ufj4?}nR8>L+<K
z(9fwG>F4Q?`Hr=7v!n#OIPxle4-1x`3#fR`j#IK`O_3{b>i4C~QvsL+hIc~%1U%Fb
z%+IiGLi+6WWCKeMI_PKe)7GDf*7}et?W9q90#+J|0LX^#(w0(jhY}WZ*p#B=j*6p}
zdUMPnqT7(_Q{t}*Dvk}v41~Hiso$eU2UA?Ba;%`lC7*k_nt_??yTJd((SYh7l2;A<
zRYy`+hce3yXa367t9Zq~#!NA<EbtNK;p~~l>D1mp#DC|3hN@-+TL<C5#FvGJaj!%F
zNsN13TRq_1&+o?N5-oUs_@wD53s|bRDG3em-dF$%B|7iF-j_}(xNZq=2Q8ntK&;;R
zuB!;+aSU<F6i7iyj-r?!?ALS;F;G_82^8o~Bwza-vUe4fPBd%BMSFL^i*5TG;*kbC
zp_3}{h#)27HIUAMmR|<lO&|ZpZP7v_$7t8J_V-x<dAu6S{fXQ!ep7@79mbVZ(I`bX
z&7=2GAzV;lhbn9oD)GHgE<|C~7pUi!pG<(LirxOJ2r3D?p2rFVsuCB<SOno*!d&v2
zd~cyTfKsVA`)r!$>L$g1cBNf9Re>MfHHI4drw_DLjtfq{7TRzVmGr4b>loT!R#f=g
z^mQiD5>S#RgZ`_kTK0Szm&Jca$nKw`fjZ1Z%rh3Bqm~p??fNJH$iX0R0wbgzP#00t
zxz6h!SSMnLIK3s<hk~4UT${fv*GlPEeLq8)rN>*wU1PdTe;#J>4I{8L{MvFv&<Vt-
zEc7A*k`)+~R*CQDh*1LTwLUgk=uB#mOfo|x!;+%Du^z`mYA+3RCn<eM-sLHPQVSgp
zXBOM12BGHYBJUYIJ&tq;t)wjz1x(q2;wQyv9$^J(_@uM25K4pNpv^~WJsAyOpbkA1
z$VRaK+|T3krz2B|jyht%_C*<l=@XWl{+nGW18CtkTydQV0o7jL3&yyoRE8*R*7dBj
z4<Gw91D{wc4FMm7pES`j5!5QHnSddNGOeW9Ah`*>&gdSiFfkS!cR-d0A(6Q!rz3Yi
zOiL6@71GzRL=E;3Be2Qilj*pbu1ySo4aIVOaQ!_9MKLKuXS2f-XM#*@HNmysbukRx
zA%3cl`}>B$f-ci@#Q(8@ln_b!OSy#zW%$p>QOvAq6P&>zFYOGLD<IBEcX(NQ+A@sH
zKCBnc{u@C;e>r3g33iq8MHidV#Tu+~Jw)4I7pn!5J6F>(J&1!R5akD#rvNUM>%w&y
z*T7adJgQf61_e4<K1{k1@vtbmN?s1PnhO4{MU-(z%PN@-gV!v={%xm7=kTQOtQ)fM
zY&G%2Br=<E4tIv1NS^d8Dt?PST)csZkv(m#buSE(T{kOB<AyxbNZ2slK34=r9l8Bf
z>IH?RAqoLBI(wXx0H$GPjNTPXf3;F4pqDhjQQt2VVEYY}i&1r<)%;JMBQW@IdgZNW
zBPhGaed1$twsf*>dtRP*db@=oV{N6_d2F62thd1R`gt{@WpSU5z0%aE#^P;N0R+v{
zrAkyOV{lV2J1#X>M1EyYKoat+E}Az}jA4o&ctMe|eX%B7U~;Lkkmn+9`;Mj;bQn5H
z68gyNUkk?vOZX?1^;|rF2n3k4@&~@8WWy2`vPW{FRGep2Q2oO=Q&p%JRkPCWlK?(u
zS23rwRMNg)c&>=s<u<kHLzOZ?<0K)(1m=7Yrg~aWzATLegARp}P<$vFg;68<n2MMa
z*8rX{3xB-zO<V2Xt+FT{+t`-ma3+Rw{MiMTxGC<OK5!R8D5?fU>m(rgjs>5X=#l{u
zDooWOaHYZ8HWY^eVU3@QH?RO|lM$LK!*!kmDLr}Xfrx~yqXCC6J;KCnlc58bQ{s4a
zh(H2*u+pkFhU~E86_I6VBIWx(mhuIFxf0{ni1jK71R5RpW*?dUjeYFt6sG4Jm58>#
zEZlWvX`qO)p6MoNPuvUN5V=7gw8<i;z!-(LrkTRVv;!QICSm8bUY|azd_FFYKHj|n
zVnLiyfzkQykQ-yvAwk_1hN72eAI|lp&}kwn?p%E?6c`}8u~Wq1b5g4;)G;7Sp3Kqw
z@`DZ0m#N9KTpWBvp9n#yv9Ru%24{xhygZT7W5mXGY?A8^bsN+q6j>ENt^75hfI0{&
zR#w47PoREG2|>_y_7seEAoY4?#=v$c8iyA;+|sN-P~z@#X%?jWHh~$NgCwV)^3i~n
zU3(^%+<u5&$kIC?qYJIEW4C`DX}d7+>?9!u=1r@CUa`#4vw#*A)$qP8l<~u}u<4{~
zVbjtRZ)+$PGVuWfKlTFP{d7E52+q*+-14lq%M$TnOnT*GjZfS)UC^bN>9I*<RfEW3
z#UhJ|Qgn1a1poQ&ZgtAO%{FgVi+Yb5lCv5Yk5@HG3^0Nw>7|utE)VzDyeHgFdPX*$
zl9+Y%>7;^B<Xm#pKBEI!jrMrJ47kkSLo9E!t5=OG-*cIdxr{S%-A(byn$OMEL4B`g
zEL1HWvXXdKRY5PHR(I>-$HAK;`6Ezd^u)9zaiKdvQQHIW^LAk#&+!e!-;B(l@`@eC
z&eXzhmoq5k!QbWPS8%2bp0=JKdk)pME*&p+RKyM{p#{8(J92D?`olpd#Va{_H8PAi
zMJ9nLE?~tVD(W4+RB2I!a<NBzzymLIZdRDsFThhOM?xL}hdX41u9U(^3*V7G@)GBs
z$T*>Scxy7hN)5e`D}YTe7-7H`yBfZ$P)H>npUEc{Oi#c#CMOABYpJNil@geUCY4^U
z8fWIu3l0E13Tt2RclgR6T`-JycX2Mo>!RmVHRQ4w>OeP4HBpR{+E7rNs`tq-)88lc
zL{qYco@7##9tMxbMMb2EQo=-OU5SL<-`{%kbKZS36ag<<XMk)<;O#ei_6-`r2TgFS
z)W%y|1w<w7B^myzKf>UUuF4V2Xz&jUaRdq0z`<}aEFB%8ATta<bP;;xo&F)*iw1kQ
z^PGNvs#ZPt^Yj~I37<XB<jN^MB|l_PIF02G_epbmfCCLU1w5}`9~OmXlY>Fhty)Vq
zoFXAY2S@Ut3Kt;S!yj+P{h-Kn7M7k%HWUy<3k50}daK=$rJsh3IWVkYU__RJ_t4_o
zI|Pni4F)F5NxOy><#s5>FzB@(8PH1b1~A!$-=5EBhrTLY=T8;@7~(ZJ4Mg6wuE;E0
z(3W0+vR<JWln=j$B-HKU<j;q4Mj@ZBI>hnlT3)j9Z-hejO=Z~!0Ww3K#ootFU|q&3
z6AXF|#}A!zMg>G^numzFu+Z>pk@|Tc*iMUdN4z_X-(2mfbLh~OdJz%->VGiTFi*WR
zVP&0eS?kEJ^w%0X#o72vGB_Z>vuG$a=p23hBSYpdP0#=tXx)H}XB8at^8)LR_6kQ?
ziH$R`_ZvxrsUAUq-?Xb565D{ni3QF_z;>01%rDuq6aX;*?jASh$9oCWO!YBb*auYJ
z4cYV}F@nanA!tW>1z@+Zqk=eOE1zg30C*`SyKB@&&Ag;z*%aV(Sx5tR*CHX219+g=
zz+h$mx%s=1sEZ+?a_(I7e;lv-(^iQOS&uh)*OnecArY^xUQo?pTv3GH26PD_vGNm%
zIOE<+Z~?G5alj!CI@J*$-Y(Lvi#1~W5qJGDJJEt^zIN^Q`WAfAH40~Bd$2%RYXbd2
z1Vu7qS!5$AC4w>-RaBtF9NI<BDn^SMG4Km#y_;;q6*dj}#o^;ILN`2u(G<*XHKc>h
zIl)avxoi!eO~jU4foHD2aKVdbjwq**x5V~<8tt8V*{R-k8ebFVLsI3T;=trQCKRM+
z1`+a+6O<M&K3PV5D0P1OF-j;5pp@emlN7RG{LO}<%?~UX;1OsbDnmLN1uk))jT#U}
z+p9+Y<#B9QeVy>8(#p!MS%pqSaBvMP_6TLh&x4cECJ~Zd5NiPq?h%NxFZYFjuQqV|
zBx&Q$W3%oBses8Qh!n6q<`GP6VV&4B<J_7>$W#%MjKju-1H0<C>l*z4{@db=4+HW?
zKv+#2d`)OWc+?!ROYC-E`H3-M6?$B9VFeQNAdNNfq#?_IAeW)?i#|_cC!+m~NiUBw
z5n{Y*BbG~~ybu=b$}Q)0b54h+7F&%i!+r6jI+xa(Eapbs+8~TAg)t&pmbzuflP#r2
z8}NA<D=du8f#IXarl8=kVjLYW9OfT>?tbua(=f&$Ok#Q+ypjdYq>(O|!Bt$=N-L<@
z85Ol!jVxz(B&e<(&7$Nc!BzhpenJ)2mc%V9Oe+*6MC=GLIKZ_QGN!PEI!L9J)_oF}
zTv<=Bf?av#oWfA56Ikc$RZ@D(H3T};6Jp^tesA`mO&rHqoyWwPjwKo2e4LXDU~hyh
zIA*`aIjPF;3-+Nc2#3q=yx3m&$|q#A3Zui5_;<EVN);@=%7_o;bsfEas=;hdb07qf
z?pDr-6FXb)?}NhzQ#=0YTA5e2#J)su<HHYy^o59A_Jo)J<Ya^9qANo`(p=}A58C7h
zp%q!*bXY1(s*WwGIBgeaVCxt&lSUvo*Yl?Ix4gCS`miLovWk5`v0JRi#ae)JYQ0zC
zn!~OUtg$VOKOlj48yeQ4mXYbP*8PQS+(R?l(Y{ufocfYbN!V^=0&}tv%YLDfI#Xs{
zb0Egnw54ZV)RSZ%1SuCbQxxZ&uW1tQjE^*6H$hTc&4e3>@^&NJ-a0!##2OcA2qf@w
zkR2HQ+eOI?>BFI!LmJvb<KRQ`kU0+%$S<gOfz8+%{1FXN+Ws`Eb(J(FdNf*dByGFP
zO(+aiE$1)tl+P+f`$DYFJl|L@M>+M;=*$e=a?hfo#%E_{GQ}`C5(9gZtD&?}h~R3u
zXX1vMyk}<FF6#B*eh6P0;ZZqx^-!QEn?uFOgW<qd#BYZg3777-qQE)Tw{s!^mAPvx
z!VVG1_>IT(=R;W6RYEPgo_$x|je|q8LUdctw~aac?DcVrLgvpRgsp`qGJxA3F1M}J
zM<4hjlRfq>IGVdPqv)ooAkatU5M%rPM}OEMx~c<J0=x`}K~p3j;}&e~a#NzHFZ$xN
zNX(H9<|g*Tok}yy@?g&T@gc{Q&r@Vf?y&Mb$yUqSqDly8X=i0rzh{N*B`0L3jMsd=
z1nPwNDW#()l3*KU!Rbm5COV9U(NByE-@G;@f(WRtWJTm~`E)nn;sigLEDL&rap8Pq
z8Z|x{db;7>SWBRooCiFl#-;?N;2qnw*_J=Gd_nq$`Y(Gl*FJMB`DAb^t*y`|b<u9u
z<GS(oW3Ch=*O2<5qN(@p-YToUybq^7S1BE-biM#v^TW#(j4h_cOO5hWzFH*4tDR@U
zi`vt+P3AaYE#CFncFJoRr#kh0R++Mc!`uy6B}QVS7ZAIIpGvpyJyc$s;bPb3wJe@r
zw(A6=6$HGn{c&tj4E#9@MLkE0LJXNM%V7uF6K=N6?i{JQB>AFzUFqoL&SCwHTc(+O
zu|KJ!^3K}T@ive_mdU>LgR#Ogqotgu=BG@engF97h!PfMgHaBvzg`oZFmkYI>_`Ld
zJrw+iy<CbR7F@<ts84*Ot@WbZ-5i<Ue+Pd#i?ju}t$3$8rT!95Y{Du^2(3ixakR@W
zK+VEE!ZzTLhAm*T0M}~w2dIj!zJbxm!npUxI$R|3JNofg%M|cejD;3Y>9={~#{4C~
za01FhL3f%ilRQ>f;x7tI@qySBN@xM`XDi<3&93aF{^oI-_%1O>F&S1eNgp25jB|R%
zS3g0nlYRIdSMTBfd}EA4KjiThW6#wLXY)<gbY|^ElBwuAQWw!lJXCU%%XGd`OC+qN
z-fD}&JLRI?VCPybU-D}0M-?H>v6L932d240zBkzA^vGWX0+;Fdmu-R@$H+)~K!G?0
zoiSVXKJN?@uFs~7)v&vxkVcAeu9<ISsh8)JbWA8lhwfcgu3DFl>mLq~p?29E08&iO
z$)2Qt4Jo>(cR0e;eD3fOuDW0CAk=&TucEG1P?$#EHJj<5ntJ%vK?2-v@g8ptP~+s`
zIN2HqlMQQAsjoF9^lNz|RT<1bwe2$lD!`WN<T6Epvo!+EW;C}!_)fz2S!Hwr*o{#M
ze%CA74-ItM^<Shr_E0!X3i~?5%YPeDV(L1Ecm<%l3v@dr_5Fd7@lU>K?p`_q&Gu<&
z2>i2L6JdDo==E`YY)S<cIj5SgV{1l)|6`C*wclKeqq1U5Rly*3fbp)S5yc^GusA$!
z`ENzQs-CO7j%6LDHr?8VMK!{E9wfz1e2(MXALlxLlWWkgLAVqLB<_g+{QePIw!QDe
z@=Zt+bEXS0I1LCgaY6f>I4fh`faov5IM4h7ZjxI@Vp_qk`)p*4Ihq1i-@+i1-OxAz
z<E;VOfD6I~JVSqG9;wwddsWJNMI<{p=q%)r=5FPQOJT&oAqk8SF>5TyqL0$Jr0Xl8
zpkSL}IV^*ec>Y!Vj+wxqpRMiK1WK454v|;9kxo9piS9vsCEH;o!#P98(TT8a&nsq{
zLJLylP@uk6L-emCpb3Y4wzH-rJ0f|T)fuf17(^)}m5(gJ5@%{hM#QouGL=l1yI`LQ
z_sF(>Wl{TT*4SRTrWf@{W0FdHm6n#Xlu{FfZg+O?LQ&VFF0bjnj_NL7SP7jH_nL|@
z`2>w|$DcGZG0n8Y7g1_Uzq`JA$HHM~=k4}E&ZU3NGk@gFh279ej{qfy<)%{0!~rE}
ziR#YRr$k1%41kJ9=PBel8)fetI-h#aeW6tCTDcx{+j7L;-7*jjGxeVaxik<Tz^w;p
z*tbsc`Nbp!2Xm~6Y=-i7jNG9NHf|Rq$&PMOhAx=wl&$mE+Rk*)GgeoQMV#9pM{RgL
zB8tsK%2P*Cd%w5hsA|I#s}WQi!tuECV`xIJFQpdEpASa;z5el}hyVmQ{L7~cc(`Gs
z*E#;Q)PH|)`WBje7s%!rtmJc=Y$x@*wz$FE^PxbzXlmmKmx9|n7^;}V`x+Rozz<qW
zIU)90+dB`oH6{Ak3RQ1UM0kx<307=b;jy2>wtd#H9v;Wwy{28aqLVd{C)pc3{0V^f
z$Vks}u_%OJrc;;(E+IDA76WjU$|}54sfKZnWyzUG)E+EGwd|xL6<O{fBmL6mK8M*m
z(1fFUDD~8z_vIsX8NKsip};zG+h3$JJ87}u*GsisG9txyBI%})Oo=+g1@fl_lkwF0
z0Pp?=zI915y-@@H2~X|d%%zi|;G=&5cB0E)`&iuMn)v~dt;HKWnP23Z!Qb2kH?3MY
z_-ncMVYoO`=FZ2PGp*Kc<Ndx1^@Gh=E)`34Og)OrorIlwPdN1Jv1cDa7DXqZX-|_F
znBMS5Z|-${V&qF&iGEy<JSs%vk54zMa%Q7S{-MdQQvzPyT$P}AavD(2y|Hto3r}i0
z_<*f&Gfu3oB`<$bg!o!@P`#NO)I;A<-rEE`(+1k|kqCY)sY$zi+&V0(NO~-qE{j<~
zqia2$pibAuBnUc~g^fh&gl|*C`31pi%_GVr&8@um4>(-(F;6Su;#akEtEEVP1t*)g
z`xDH-Xt)neE{*C0^j5ShP{(<|f5`k5IYfQzUD;QSCH{>OG4ebC9bdCQicn7X8>p;V
zGU>}J=lABvD-H%5p)-56Pc#`|rxTQ<<nib%{>$U3U@3?q2Nn;xy~;F&5Krg1NtG1!
zG)S2a@81}lH0u>{uXIbILgcS7IU^qM`Z^lN&U$j+J8}$mOgiUnDw6M349a$6hOJJA
zA+f+DAx7V!C7iG7_rBi<r2Gjh@AM|lzFtJW<I#KNy4T$b@~n>)oWd1?1)%NJA61@$
z{u98s&zSn=9Pm`5-yX#?NBEp_xPW#cNZy&Y&YE7HNwZVtOE+)uGl2yET@nlLbR+M9
zfB+A)zYQAX>jtTS2CvBEC+`{&EtyTdQsr8WhsGY%<JESeS=J-PpY9I}xEkwUHG`-L
z?J&-ByKw_c5!8%P!KkQy${vR#6chykMElGoMtK*yNk)y@sP{9gfN$6-hIx5`<Fh6|
z$&etvVnbCLTT4M>5QHEO_=yxGDZtWRv>Xo?k?M+%CACCAb1{!izAi{@DU%zbAc#@k
zv)&U2cM31_@MuKEAmI-y#^27OetRt}bbhE^(<CF-C2V_itd3p;hgR=VSXbs9A-~Z*
z<aV@y>|?Zf35>9oqQRLZ?xCmjH{|F8o<96BxlC4$E+KSbnW8i_UX@EXAFnmMT91bR
zG_AGkRKUza`bvo}stFc~s(h%xZyeULeV;J-F#TLBx-S0`cHCtAydYwWSSxFO4OX|U
zclp^5(k3o<?g^o?oCs;jq-{!mG6cyp0%SQ+WY*8644;M?mYZUaMx{r}pFwCrC$TKG
zQciEBTHAAt9i{Rqmj;QKDRBX`u7Dhvb#_IHX?kdhxdh&)=y>O}IRU2eon|IW+FMxi
zRqgx;Tc>{;6TQkHeO2*KwjO22!$40e%tj>fIpC?55UyfHiX@6uVHxuRQV~*H#oH4S
zNwji1dX0fwER-o*inK69Qh7M5q*j#d6kS$WZh8e-IY$xlZ{SFpmUTkah%&{{&``4r
zOG)Z#kS-Tz@0;-n;$;Jh>hEPhkni8;4oM`ePCf$}!Hp7)qYoO%)0qlMbG7q=WRgs8
z@{mC~bL}d{)9@+$vPoq@w>Lq#!Jy)0r83UEf$NDxPeQTrs^`LM#fxzA$CngxW`pyL
zWp$Senc-)x@|>$h9O^XZC_ZK}k|I6YfW|6lDB4o_Q+BE(#^7!(=rUnWo0c#&n=r88
zSHyBuPELjz3K0-_MiXsgEGslk!$vSB3CVJ;)ndjIWg2Vp%sS0BgN>@9&Gh9;@~L2~
z1kgvEqPE20!m}>6A`LD7h;2c3DO8ZkF_yfW;&#7Ear9)cOrjpECcr5G1YsqI-fR3S
z_T4Y@=suo`=u0>jAf3QR+lT?2-u4tue-gtUr96J<Jth?>>IbVf<z4&^QT+_Z$&{sN
z&LD+I{mc_h#Q+fLuhE3je`@oXT2HN_B$Wz(MqU>>#YfCzprn=HE1|6Yg(ByqgBXR$
zTQ~f6HGEGcxh5Zn8&|LwiW8Bg`9`Aru>t7iog2bj3+tC7ijV(Y#fTblk|+{pmfwf3
zvxJkRrH5Vnn_}smxO<I2V8+uK?Af(i8B`du$QUfNiIIh=W{+@w?H-^Jo!8fcFh&*Q
zh%cPhQeZ0-Ut-T7#pGL9XwAGtFW}txgccW2j5LD)uaBGmQHNw}9dZjsXIKxM%b-7@
zq!G?J<%m}S1|HfcQfo~R9N_0)1XR}~A6yG_oMW;wERBi)(~ueX{P#6aZ)1YmSVQ9H
zY<EaLUMLs?XTn`gn_@7_IK{1NrS2icEH#F#4T$AF9ZAqrfH2fH2u*h{(k~oJ=Met7
z3?po&L`&P~cNx&zdg~Qi0f?5`zKoW``pzu8?l}&c3!-(#C|rX{4ouv9=n(56UQ}V@
zsnGWbkWBuDR6P#{ni$l3npb8gvPK2xfl@DnxVo_gDp(C35V8(<vscBT<#yb)&6y9|
zIV$!!8cbp8wQ4ImXJX#FA7_`a6ErQqHe9^Ts#Wm*%6B@INrY0lEy?e$8X#%BTF(~q
zPs`-ehojFX(~bwbNn#~(nMERXvJ2?ni7(7LnlSL`3$qY#OjBhs^L`%YLAV!$HyQX9
zJlJtNY<W7Tgh4VrEpV7ZA04cSTPVM_qj`B<gio%sjL7D<+Ov!!y+6{L4d_hXV8&I1
z95QHzvj_It7!-T7MOJk(m;pKZ$WKMlh8-s%x)ZI~X~`dG4`{SC%$~ujoLg5Uhxb%u
zcVDskm2PluVjjE8Em5Q1rFZ{!-OlEmRmSID5E#y+`2_AEf-y$-2dV+M?ma7)%W?bC
zB-cO|XB1L&Q*c1sHfhX{2=YLCQh}MEgaqE>3z+>=;CLLFed;VmJT|<Y@RBc?1k2Kw
z<3i8Fb|upmMN_B1z+%C0rUY1uCY6Oj;(~5uo8##aX_^igZK@{CN(44HoRJ*XbR>9o
zZ1AnQmfsEOks6*2sikdK?4INt%WkG{1si=Olw#g#^&j9wOYLP!lKXtb>ZmqverD++
zA?h!7X6I!ADeTn48><*R1%&W<^od4uM{=p+&NuxHzhT&8Zd`v8oT!3+Khm)2M5sN6
z@7c^}8<`iVVz4gE00F9#f3WL;0A7pRJks{Hf-kGuZGR6aRX)Uu5ouQ~Pm{}hG5llP
zCv<AotK5}8uimeJxV`c;EDKzweW@h!O+V_5aYanIv>ZK1@ji6hD$+zIRt6h8ILeOl
zR<)k0t!uMLaNUSQ5Stn)rv**Nj^%Bsyc5ziPs0&eR})bAoY)JD*UuQ{hF{QX2rra1
z3-e5ec#Z_;SuWQBIbs`acS*fyQIV*|s|(?<_w^}qL#kS^mXk-g?fgv$L)qh8^P&`s
zqU6p+Dc2X#R-(Go$MisYKvbowOw$b#{GPo%E|O=M&k6gpx9(_Zm}XqtL<!yWQEYUV
z8x=D_i9mTxhDUw{Nw_YUCFr`=h{7GSSm@pssTlRB43g8Eo)?wYl`D64PG8RHT0@tT
z6B8jCk`BfR%j6$?T8(ZvB)P>0t%mr915uJAGSsDUvBZMzlwjn1{2TwMxuBMIU9r!&
z*2h;W+D3lUL^ecAN9#7VD2BxpwWigp%hK9TEtfR}KrC`Qfg=IbLvda3c~d0zCp}n^
z^Yp*H!Jril*~0@hIDO^5(>QZb+xx@$cDqG9S4-Uz*Wv=y%DDNmge;OaFHXI&#Qm;O
zdS_dutyY-g!&7rTWnR4dkqdVC2d@HP*ti%tAUtSssF^LzI9(Q5*_$KE#iVPkcNSSW
z1YK#m&;#bw;XTezyHvlkC5092bc(S4KuprS*9c9$_)M3wcg-q3f?+wag6Q=<y#!db
zh`E%Ak2-&dOX)M+V0o6kM53OuM9rx_Yv*lw@}<FxmE%L)Ww40}lhA(+Zd;5>>VMlF
zUEsb6Uhxwsijb8YOx4M_c;+QXC^YRY0V+}|km^^9w~8xJKE?v*FZ5N*F980+!qGJ@
zG|iJ&a$mygJ<X&JWp8%7_wzwOqk}Pxu=1qO57X`B+?~9d9NGN5=DtkamU6v9Zu_w9
z=QOeO0uH_ZW^4B?qJNfsv_7yBJ%Z@YesWtle&vVHZ~wW!MLH1`+Vwl)hd};+6=wc7
z1N+}czW-&(uWn<vFOKxx`G#7Ad4>|3GC3_#vLN!(2S`?z3}BXFT(FT~B8^;$kzvy!
z(Yo~g;#J-O3)X*$GjF>2^u4UI<h9h5ORJ(-b<i})+C>r#vnP}fViJs0FYcI5Mwur$
z#;MYTf=V)!iRKblUP(=<nHYa>jRrP12!%nMVJ&MLgE!Abv5m1fQ{Gr;uSHQ;{;LUT
z1ixJxLS_2Qr5JxwHKmghNwEm+_IbNsh<SZzVahx_=CHVr(2tMBW>~TRrbBpuIW}!b
zr&&B+M*R>{(U?#+AEl;3YBRaexYR061`&JRsaK^oQJMZ#gpg7X<OxG*Lbr`4A~^+>
z21UNgPYCbD_+@g_?bPoF&)27#aWYc}zo`m-71TvVS5}m2Gn*D2;S9PI?Z!*$(?ZLd
z9)&2da*B#7lvAU^LDWO_frA%bqFRB&R|QNn%he~vc0CmHn@~|lQP{ic4s>R*gm{?E
z|JX$#*0P0H);us)spZQ{B(zW!7J`V*L!nYM5ZAcYu?afwGuurhBu5g(S@@7r#3$)5
zynY1M2jF{gW~E50MAZZ%>W)JdTU(H}7VfG_<fj5twtDKXmk&-cAPQMb8$1*<xBym$
zE2z*eVylJFu$3<p9vL2VjHr;eO+qQzt1LZ}x4#HMjkL@qV7mw1NYMK{f^YlTX8S*u
z@?~>_e{cO2emU6dg%)%a1LhY~*xivXa6qU}m9vF7mcu%U&K~<PL2@?`Kk)ku9h(j1
zCWqKmIP@auXF7*30rqu1K`@>*$El0W``H!C{Wlz~`gdI7K+E$s;F~A<I*RYHz^v+i
zIYv}|M9?;Gz9<}9*vFUC88}@!aE$#i><jzV!1weWemfT&J2$0M%nn7t{RS?yQpqhE
zIfkJAihj$zcBu=~Qxy9X_tk$T2FLV8?73H$FuvCLRG$6ro!8gB$K8GcHXE0U_3@kK
z_tu!%9)FWduEW6tD?jk{kIa|FE>G<fgd}?xBoSY_DBf1o2rz3}QIPKK=}XsbddPvi
zm>rfU+@o-{Dm(=Q?(A!KS_m&VqN$iJf;3qiAD)Z)_}43>K|mdCD>&!wL7Xc#A~yI8
zb;?2B!`|#d7r1*b;Ie{~jlLjAEq)V49_rmc&FT5k4(xZg?a~_t*U5nF&)EgnR)2iP
zD7!?ywps3_Yp14O)`vApbFq_@Pc29A7z8GLhGaYu#P{Y9XONE<RzMymw`y8iUb9F;
zTC~9d@@$ZABX8e3OutG5aC!tZ3*CY(pZ+CXW4f-R610D2`vk(%W;bN9LI5!n=mZr)
z=IK>)K5zySRmoxq4uj8>&0>y+u2ti&sK^?J|2Q9^&!Rc>3Oev-E$p-2`H1MzoCUG+
z6-U3Z6rsE6iQe2jA)GDKR$ZfqO~Ai>#8z*BNs-k)j`l@LF}gH}D<;b0F|Jc>n~Vh-
zX`29S3o2*j^EM<WA6eiLn5g_rWkbC#%_A~$Xl5(19q*!-?Vb^MqSKVI^O~^p)w9<7
z&467?LvVe+u&|G(pN9N_RfScJp&(aPQ!p@UaN85}2k51XE_*OA)&qr-m^bQCc)-}B
zA)C>-{GbTj{q;RCNd6h0&IE33wSq+GdU?qOB_d>%wp(^`uv`urg_@z0-WLx_E`uU+
zz0}!VF1HK$9wWu~ZFVX!c<LN$w3Bpz9TjP$ntx@v`VJU3q*>neI<HhU=6+&$wdR*!
zX)+&;>})~^E7a6tiRVQk8~T6)0`IrG(~P(DZwL6!qmK~&6G%NTl@k3tl*a~E0AkVs
zdU)E8X|~2y$IU2Yk633cb5HxDiV-5P<8SaT>Qowwa+z`px$1q{JtoN9iqy08N2G1B
zA}uzW7Ov8m!xiD#BUw3L0~Sh`#}&Gawo;`bM<HMfcgc)3g)mS#w57VmB$<{%Mw-!0
z#h@Jx#>@q)|9Q`v&N_Gsw5U?9V`5@s={w0j6&#o^OtO622zB8G;`;hIuG@D705@G=
z>+25ZSqJsbkv68Ra?iNzwRONjjg8$hnoFBxK6MARH=|%vf2@jkIXfG}Eti#N$!aNH
zbpNw%`w@6Z+&a_DJuDSMQ4POZChGd!`(+AZI{u4fb6#Q4Dy~%hY74c-Qm>j_J7H>K
zC#py#zQXt7ZO`-i58Rdk3Vhd`Z?%8NdAf=E&A!_gxDO}fR?O2seq5Ze0AI7<ze>tG
z<Ley@LtExZzK7<}$R#E^rx00m1GWU)NiL)_5o)WmoyIT*L+wAi1Be&hR4gmohb9`w
zPT3Bwk`@-;SpW<aL+Yi9X;oLjd`?=LD~H(28$?uX%hx$>1y2iepH5}&gn4`9c?*G}
zf~Tgi(kH{*bD9o>Tz0Wim`*wE#qd6)Yw?PmOn1!lKN)=>9yjb_Ej%^J5C*h{bpj2Y
z%nLxiYUZUGf-bXT_nZG{WCYSTZ4sv;_HW;N(V+XaDyf6E@G16N)+i-R#vrcKUBA+E
zJaQeC%oH;|O|ibz(aam8+Ou_JuHamkp-J3ynS1mQ#WAc*3rU+Z>jMQ`uS?oW+g8#e
zg(hV7v`IC!r57rKd|V8N>tda#$+U~-)1arl=~5(6oa!ES`dqN0CVFZMr$ak?^0UL_
zg>x9@<J?hnE=YRI-thk;%~#T^ah&`s!oY+C0KohIl0GiK5)2EQ|C{AgRggPiNAT(X
zjzAPA<KL?9AiEm4OC&9BN+j)K_ZKNa{`J{b%4AZy`fZ<me@wB{G)`O(5Gdey9cSEp
za7%l7Fa$uKZh=>1j1g6zDPWz-lvvWJH36+i7_r%$02sY%wl^2#Hn?o~D=k|*0A#H%
zIzlHoJCan@Ln!!PO^j&zDxGkxiu0a91wc}dYm{VLP%SoF3s_evMd1Ro9f7pai4{nV
zzYc{qX4sVA<Kbo|o!q`1jL6~N9!$KFwIM9Byt+qLR-R`oAHAHhDJ3;mFH~%wExX5e
zspP`0Hs44dxv8#?+Cr1Z=;t(ffhbG*Zfqk;E~t7|Nl9QB#byOWonu{Pmg_Gxkt3mB
zD{y|whbgUGF{LRt7tbgDE&@|m$X`CPvAsv81v|DEC^w)2y)NYA6Mjj*qw>G`1z9}6
zAr@J*OBle7!B~3`M^&}x?vqef$xVw<=cIfk0VMF&Yf1ujDlw0`YcOLqiQjw~fV)vh
zmyN16Yi#4}Z9Oego$+XLoaTi}S;<X*pZ*8u=LDaKBQBlz{Dxv^To8s;<vXiddO$P1
z6Y1(&vjnqiV-`1#rW&CMWzv)@9o!Mo4qnDmrSyyWRcR2Ml<+LEWW(XDxn5<LF}YrW
zxfV!TvQ9282IDrRVPZ|M3yHjCLL;2H_+T5u*mq6NW8>996uY^P{*g{`!_1j-N-c31
zWCRpI+Ov%}^VU4HAcZ(4Mo9JEp9wgGTU{|34)S9L?p7bhxvS+zBjzvz`X&8Z!`vCM
zfercNk3o<gKxY^j<wm+6KcvNL4EpNrqhtCKN4R?)NNPN?^*MmrhT{RL1F268e)F=_
zk=AKYV1;!1g#UoM_2)o1^mX*vsK*2*1KEqyeVjX${>6p{7>vhS(MPSx!#;^}8yWBx
zJ7-_w{ZHDDA&dl?gJxANq(0!%wlfg*G6pE{79n3BaWXZ<;dwis$oDqApU?=}Fs3-n
zkkT<5og+{qT~s(t9%RDSeRL3Yu<Z64H6W@^7Vq^wEMR$$p}Hh^*O+jAS|b^CBC`Y%
z*5LQ%`j__uG!@&vWxlJQt7GmU(!L+q8NskUfq7wKT<t)+{D)|+pNcPPsPf3fhX4(k
zG2}fQA3J9u$={+)KSMOynv21U(gR!Txc9&87qhcQzCFD)1Yx!aq=czD+^oU79eDR}
zArD)i(jjc{-EyJ@N?oi;nnH0q(A}*$F|v0O*iX&=1jUtJI89{h>`%FzTprwjt)01L
z;5@e9&u`lvoq>lI4zM}h-XK4Lby41ZFUG+27G4Kr+oH)kD6o^w13z9lH_g~0*7nSM
z+<v~Iw;?rgClgD1)8%?KDlaGUmo*i0J+H&vBXdT|5=vK=FWrSYHjP{#O?=>*yXuR+
z2ZQ-*E{T90YW4V>7uzryXkxND{*^gL%k#t!4H|CDEeci?7g%K2u=?}^A0H6T_U~m&
zOXhNit*0V4;}1ghqFwTT#-9@Jj+Wg_bEU)rkw5NApLh5|>O5{?kG!C~c0@-=e56gC
zBb+pA&W@k6`2YNu^No`xc;&C(XZzQBi1Gh;wK+K(SX<LL{U7CFmb#T4b{pzf<s0h1
z%F1PbJckyG4h9$y9V54>eg}Q*EuhH4VpDS16{Z2eu{y%m?;D<%_y_yT!7(rh;s=N8
zt`pv}F0+ZG>SS8E=XjnxsuL51Fpn3Ri1qZSq$BCp#q;%<pgO_?-D;OS`y<8`*}`IF
z*~%)4AzwJSX}$0psjHNzl_ADW#|em5`?v1^lP}}*tfh?2$UuBwZiI@g+cu<<d5*N>
zD5Y&KhXAQ{HeJXDv=quIDy7t^=$js;=EZ3XB}h9E+R0qeu8i<`W6!7=X)e1bs1`Fp
z)iiskXLrSww5A=&3U>`J@W#nPnKDW`9>8jYf=btXTWgz4q}Bwgid>@7($4Wg)sIbP
z-AdG1fw`#Z+H<EfK+%xVq&9_01^RkM-4gX`D-xPh)Ir*2mM|ig({gppoR&ZEHTM*y
ziZ980{4O#&*cUEMZ;PcGbRmxw#$%P)w6bU^&_GC3BFv_h+O7qD`+mT_z~#28!Lm&|
zan5uuB3!#&L}`tHI09~u&BSe*MV?g)n10QwUNw~V#R86Y<AROliT7BU%A)EjT1T2+
zxC-mF_kIph&yGdV^I=19Tkqi?0Dt$#LbGy)=l5<H%8*r*@g<TAc9%_b%pL0*4=;6K
z)LtWPOeJs@ZQ>_&@Mf1ZH6k-^J5m4k&V-R)Zug@6(TVe4_yhJ2Y6HdQzED--9(O)^
zUaAm4KQzerkSU$MnS=ZhC4m@II}0eG8pMPyRMOFNxmO3ZkL0q@R~N^v)y8xns&>7J
z7YIRWu=&vf&s>`1QyaD8y1q<V9?hR5c!i`0+gr>bF8*LttF4j2VprGw_|ov4Gf3TF
zlThNc@_zsI^6-A^ZH-PCr+$031bjdCFQ=Dvd09y=YRw5yUxf1O#XdM=lp!t!pqQq(
z*fEzeFfQ#Q3;RPPG1EGJ6j@7E<=a;3(Mr?_j5>#s{1KoNhqF#(mIa|GZQS~wy23#9
zX7AJ3fKX?Jr76KpaVfAQHe=i|jxRPT3cEjKRU1n=+jo|l3zpIIOE#aLo~}60=4mZc
z&F3vMK3>=@b(0&|8w20(6CT3FCe{gD?N^Z#4+*tX6RXW89d173*v*5M9$6L}n71_t
z2@m?fG{`!5ko&PVN0Nkc3JTG~2R?T_^S0*xpP9*+^g!5i^R<hZG`inkOBLoMb|MM;
zZmP^aEheqliD<vgr>-`-zO_VI)9HuM<|@W9))M_M9d8^txZ(Y^xL5LR{QkP|-X0X!
zura{T^nb@^-KQ$>wAf@soX3t`&wEyul*ZNtaPY|5W6vT~6C0vD4(*%hF^mjv6G9w0
zpbQ}Mj;v<^ha3E?AoKA&XM$%N{F~jUUCd`d*T0(ZxyZkBps)&VLmcpIpK|hi>Fp$N
zG${)eWU;C*vF)keAhu7a_PzOyC*lI^QJ|rc>|uvuLI23dNx=;yP~pDuu7a_W4CTv8
zpYt7UqPo!L)4^CIBJjWO*eK;4E(NEyc9*R_OVn-pmfxk?>)8KElo}*S#)~Dwyw`0V
zsGI7=%#u2b97RpISdUW%`Ywt+<^>X`_WDDEa&BVG{jCRaUPfn3P>^m`VBDvAke04p
z%fV@~5H@{AlnVg1xZ*`mHU`=2^tb%XSlmP?D`KkKMRt-b?v%8Ei!?fLM<M{R7~KD>
z5mWY%w_^-I>5(W&f@%)YXJcgX4CTJ*uEHv0v}6Gn!y+Pj5upL(#Z?!dmW$|tE9{M5
zTsGX)|GXxY`Y$uJJ2n4NjB)?1%|Q2*%8>jX$x@hjue(K<Jp(g4*qpzwkfqqDPfb`+
ziv0~D!^ThaHgtPtR?r1ibTjXRYqC^AK2lI$F0=ARClK6t1V6+&ojVPJC5&dgePESw
z&c|)KB7S7f9QtK<l9@TSRWP4#fqquUh3UGfXfs@LPT7V&#?WVkNJ#&4#p2!~*M-%o
z%ZxEu&E}gaP7OZF=)<sGQ75d9P<agn0&GOIPkGoJ7;;wKQVI$ZUc{tYUd^<}SH0Vp
zA#Dn7%NmoHSK2fZlM;5a1QFJ$LgfpA*SML8r4?&nAUo`#yODd?13=k;*vrb8)<+b;
zY!<3O*#q|rCUMWt*`dnHKBNRC#2Dw6Taj^txW^%iy7i1ku$hlYHjN)3ssm<vQIj>8
z@9k~hoKvzG@^7E8U(DNK^G;_$TJK|q8?%94?1nZR2?OW-t+L52SC*!uW`kawFI)_O
zXf|&SDKqG_NZ}jnsT14b`_%o^16zj0=fQx}Cv19wHF6LcbMoA+7jxEgly5!RajJ%1
z#7n@(cPUqJ#??#5*cBjxXdb|bd*tO~=x|Wqk^3wP>DHq2&n3~>Q|svwJIXWN;;#BG
z8S`L7_p<`G&x_7{O0X+qt6qml=gRf{kkGY$Kq4@ml?*>{COwWf9N8sr)WS4)%t2#^
zUV)rBVa~$ulZb^TH09>1bV6J<QeIP=QuIVjt3nfhX=RH*H&cH$*d`oqRjMVv9I6H#
zm{GiG`Z|nA1C#uBS7vf4_4A4OgAc=d{Y(L*-PbUrz3jn?P_YdxJYAaKloKrcqd-&O
z8j3S$rO@wkjJE7g6LC;L=H>-c<NMSxtQHiyAUCRtMyNv2%t(AtXW5<UML7W?4%Vdt
zwbTSp#LJLz{fPb}6LdMmm-ajbF2dPd7-%x`)GM<A*nproj=g$h9Zj3vP6%${o7DDJ
zWDk+Yw@csRX9LJmEd4NaBP0IKyX+b^;W`^uAjsD+3Sl(e{S0x~Skoe?DBO45Xh?MJ
zl+1sl>m7qbi-L6R*tTukwr$(CZRf;JPHdgnwr$&X@@3}Mom=0XJ3n@<s`YPGt=--G
z?cUETct}ii)+I|AMeZqD$Kqo{6&#?tjD_vbgaI@?h!4v`(IF;0h4vm|-OAs&`Xj;m
z4Me>K(e&!93W^X6!t?oHdNd)hqoAHUe_9DWQ7Az0M%!?yM@reQAd*HMChI>JPSRt^
zd2W>4Qa*e>B>Xvk1@zoEMiMDS!ZX_?^Zj3R=>NqM`+_uGrv(H6sQe{@<NlAOj=QBD
zosr@HF{lqsV6-0~KnXdyrIwSBkPL6uq!qoIEw(PU)3ou3Q)JW#Nbxwcr(bp5B#Gj3
zdg(gYriSX=K#(>Dvbxa%!RN+lQoY7dcv`2RxRMk*0T+2WLFD?=zFf3RLk%Ud(p;>{
zu#RMWsk*XjG~v!YU2jJHCl>ez<|q&<!rt2}>@R{cp8T<-IFIUT1MDcsIB?*;%%uoZ
ziNpmF5-!nTEhQ3+!KD7b$)%bWtH;#WWF>BRLX>|)TH2Ogq92{l#=vLcbnRbNax+Ce
zic9!pqo+{#CS@=#Xlx2}>fNU!3-|}e&TTX_T~Nun46S@G5wLw1!pLbK-M5zaI=)R~
zR~xk=G~UyyH)qB}*vzVCGVOM~F}y{jH!$&=ONQSAweT))FPgc#l?U5@txWv?FL!nq
zsHf^i004lG-{-#rGHfi3{zEorqH{2&v$Xp!q_%EcJygE{g2=~L6fMoax_Xq5SS%6@
zV~Ihv=?O8o>CJlgAfoRMEa)MtFm`4Jy;jy0%r`yA*YWq=pM2Jl;n5gADFZHBdf1oC
z3&?y0^IW2oF{7NSdErDGr668uhMJGPkAD@7wt{ts`9rU(BW;{ff3Tb7>T29b;jEX@
z4XZTPET&_)6?Jdrh*J0eE=<P(=ruA7Ir6poU-LTH1dH$sjyHPB)>%|@by2VFe*1m|
zkpKV1g1XxxI)mRU2L0PL`0o(%|HOfqn4109d3{y-Qa1=-IzO!2H-ua8XPrOR@w^TU
z6KuDQ3<OP*{Cr94a4%cEC0PmqrGZa3^6+>3zrUA?BLp$b>%<7XK$-$B-4sL<AXrni
zqC-R`QN`20K-Hv%v<2vcTEw<QfKaOD7)EXGSStCXq$Px=_Rro#Wg1n8WbY+?{Ju5L
z8k&U6vgJ%jOJ&jt*tolWD!MEZmc3N_B<`E%h7y(T`-;Pu=?HC!c7foANOGDHR)q8j
zx$2f4c~eSa)_XdLW09P>5|&Adls<T()-G)J1b2(|vIeyS8d*Lbc1$|n2=!sK*!X3e
zhHG^Ja_z?8#GOWGaDO5XomCXBEFqUYL!WqJu-zqLMg70tA4B6tWA_2@(Wql$9fafC
zt@39um}(+aYaNi$Hb;H8WlQL;2oUB=u3*U!DJ1ec7j)}C>-vTZaPV6Z3>j8%eP8Eu
zsP*~@l4s)dXt%Qd5{%^B$WDOBkIe6;>ssw?Z8)oSV!vC209ed=tO&-y_=+^PdzH4&
zS7pH7vsxrHYzsz{E7ZbH3qDLnw)fDn2N72cO%5U#?`gHQH-zwHTb2BBs9BTWiEy7(
z=F$m^YjWAOU*OEL>#XSm(j{6pL!oC<ws+y!J<Z>@gYvnjiZV?uuQf~D*(<Bm_%`J%
zpn(ySFzfb5U1<kvxRO9RuPFV@AFF#1csJ_T+}z6;%b+Y8W?0IgjPU8^%}zbi`&n-@
zf~n(ErZZ}7v*vEo%lDD!&ycV)Cm%r&YBZv?Bx_c6*j8)IJ3G5jYYyHB$f+&<DE}ip
zCs{u=-CP`k#vl@S`M+WymW0}n`)>^V`c<?3hs)_~^M78(V&yHlU<QmXJo&lZsYx(P
za%YD<P<~PRMVddStk|aI<;e;fGRL`-(D-BObtcBh!;?7bQ!hCS3(o7cJ9+x!z&YkR
zw;bRzDky}&f_fs!!2yj#r96OqrX~<Rxm}@ugqalCXmN#({;u!CfdTZCVj=>?5a3WR
z#Ps~}+*VgFInbhWlbLdX(H0&J&O9S560{Ir5kg`WvwlL_1W+~ctbk*$?9MJ#Dx^`z
z__&2?i#s-+S&U)q&$N|EFeALo%-z$MA9kpw;)rY>p=ybl5h{6PvnJ4<ckYooyeBD%
zCW4+Y8t>;xT@$esBrB7Usy#{6tOvj|#;0d#!;<WrE9Y?a3Fk!=6B4w70`KCj9V>Up
zs7x)yw8nmqSJ64_G0Jhv^CGUan^;I4j76`0aVRNMRzN$eYdmC(*B!*#{-$=loo98o
zb#`dJ-L`aJJJ9QZ#Pi^B?W`P2G0y!%Q(AOXx;<y1&UYUn5oEsu-YV+5qTu&`g;Bi9
zPLQu(2Bs11uLAks^45O_6gOiBCwr^^iYZrG-uAx)%%3bjs1UVM-5ezXg?y<Fa)MdW
z6}L*ajcrMZQ4(N}i&f5%vwq(0583QntAbfr_my)hRs(Kke(&J}&vd*mmS>G;JQD#>
z{%O<~=r$S$@z!Mcc;{bdnSE^olqq25mxYn8LTs#%5Z&_G;(ej0+TF4)nfX_yyFCtc
zWs@xa@AQp{O&Le)k5HiJnaFUGKovi`VK=9(`gmvme_B^U<*POrSE;(p<KRQ7iuCHy
z!-n-sRcl9X#a;@p&~0>~3Wzeh$mVfR%rf1OXXmJClMtBT{MV*&bQp@jgk1pK4|vT<
zO%`57Q-{RopG0qS=!6<sOtU$kO0|@)0dT^SC{gIf^srOpbp`lvKiRTLZ#Y!^Dr_kf
z?FmT-n;kFeL7|AqaDE;yevst-ula9WI)RV9#Ug!3FIexzdmh%~chQK6gMxL`3axuy
zG)M%g>{cYyJ(hYB79q)P)!w^QUX_u|Y#?z(-SgZV$pOl@hRbuv*YOR&l%1M4+LQAr
zx#F$fQk+2C{dp!2J!bx|v?$|VFWm#iu|DaHL-uM2qmi{DX-?sxbS|Zj%J+nR+4_0s
zln>S>R$+lixoFn0BGhU)@I%_@BwMb?pH6O8$f9xqz*PF9Ycv-ab_M>R_qkjFZrr&x
zGak$J^6W^g@`_0KS8j1>Z!v$o9^H{9v?IVTYNQJR`?>19O4Y;wMdMiW<XP-VcNobt
zBk4nd1qq5^fyY_ln6})erAw9?wPP=kE8W*EHS*5ctMwipJUg7{KTw?W2)o2rNpq1m
zlMb@~7zS++0J_o%$3=%8Lu7M@&<xf7nNwa*BjEz8$26}=SW`6LeG**8#C3v)btl_%
z4Zs2;R}24ujDU7}zE72iGxLFZ=`~we%~t?TaSE=0CPY0`7Fz;oDWB<uMq8<f_Y4>B
z7Orfn#$I4<aRY}W7j~d0L@03Cos+9R@MZ%Zk4^Py@kv-g9MLKcu`j9;&&MwJt5=-;
zRk>Fnva3(m4@z#?qiKMe`n@gh3qSvO`;7bR0|6uTO26#35cd)NFeVRb^KIMXefyv8
z{V<yQeg9+jKTU(CU!qUj{=C0<p71hmWHY88V9v5{d&)Xl3aT2f*3Qm17h+CIHkR9f
zYfJK2YAf|xdUHQ3et%oZ@PFu7>e~dvZ-w5RV{^n#@A}g=W5K^Bxfcd=jE1nKHpou$
zK?jpMiA-k*fD}lSz5h3njX!VgiQcwvA3J}a3A=)|4VkNIO7GkNc`d?$kkb%)IFC+j
z4{i<+BrD~42c)t6W+$KsxIGj$pT7Ug*l6F@7^H(%Ur#vShuUx(=nR_1a54>RUC$iy
zAwIOZh2w#KFaw<Uy(PhussJ*zV?kfW1^VlYhe_9xdBO^a*Hk7zeB*_7#Oc<ar`f@s
zc8@7~pZUH=%l9u0lE)nLvd&8OH<}PQt+?eA&dE1LOV*N7lP*i<?+BD4ohtRO+*pob
z)@8E31l(xXyx~t9l57EaHwPYOv^4;#Sa`7M$KFs&w^{B>-rS$ggFk0KP(Jklxh#Sk
z$>#?)7D%f=-^<@GZ#0>6e1<d}!kl9{&XZ^Do!`0=?OhH)itmO?>dnXIR?n2+gwEj3
zAW5rcl}LmTY1o18z5b-p9;wzaY?Qf(9|)6c&J<^Mjs$@>iT%JQMQq+!-R_XVOz)98
zx!}l)T$~8QoN9@>iS-cz9)09=Tpr~qpaB4XT2kv85&PLyqnk?cpiKD?Klqu;n_XFd
z^0<)G1xj)5(Gd{U;}$q5JnWUV%a(pdjuf+-p~fYYO9#0`k%E9_dYI_)QK<Nj$gMHo
zKqP9XdQv*((&V1URBCD=#g0E`BeU=KcSYn1J%K!i7uYBc;n|aNz@%fvm7xl8L&Epj
z4_<i?SX6>}w+VeK{>k8dBSTR<mi~~D7O`}YSRNV&4V6QUgI?XVXPi_xczCI%AVqGQ
zRk1dG3hXAWN<)>&V7Ee7gJ!I&VKvK{U?4Uq)aZ(BDnPH8g0Dk52O{zeEOB$0az!Hl
z1T>PnnsUQG)?xn`+B=BTEs5HQ|GjQrgT>T6wr76)F(;NK{JT$d#q@WPgLc@#;MuBN
z(WOilTBt3Eu%xLx@UIR(?J&>f4Tz<<xvn~ar63x0!lFjH)+K;(HkQbV+Kw-lYhP{@
z_Jyujo?aA1<Lk96N#v5%H@R}++15^!i3k^(YsgW^{JD4cQ9}VKE;7F96J^UGLtU7Q
zf$vlJYruCM35YTDLXzO4;hT?zFY(JoLz>i5jrw_P)LacJl-L^OVvJUy7Q0okSfK^l
zg=>dGwmCig&@7f`(Ngin7bZ5(*gu!j)<I<U$LeKBWM3M(r`;;wWc|Bed-#`cu>W0+
z|949u<o{>#{Ga@Qw#uM{ub=<`bO`=m%J_ezUHbnp12X=vtlOn&?Y=I7^o8RmO3KL%
z4Ojp0OBuXkULy{+xc~vCj^yDx8~t0~1SUz`WW&t;cH>>CjRXru&OAovypQ-**6!M&
zM+^6?^-p|X>ss7n*PJ`@-jr-8c{`f)%`+WEGgCUVnA5X{|Csf&7JqwCnJZq-*>PgW
z+Yzz&kQSN}O*Ac=WPRjT@FJj?Pl<ZoCSxQ`{m;5$xL%jX-96`b=i0Bu^;`DheUOu4
z#HX0di}g`W`f%vvLA27arH~<0aRUMhxk`~K9we(1BDrC=$u7+^TdFz;_Un%&rRF$M
z&Tu0Kl%`l(zm5Xgy(rDvD~-G%KHi}!#htjov`_B#@EED6B~z@Ya-WjNj?m};7Pf6Z
zHAT)+-CvieAyY!bKQMr4pyB9eu=1*x7MPM$2NEvz1auZ~jx?sl8kntdP+Wzc81y3D
zJ=jnxSpOCk3@-nHbb`fhZwkC0So{k>C8@B<DN$@gh=jRt=I%`_N*}XClu8`g>$GTH
z5nAjk?+POgixftz{OTluL=P&sdq8Um!mV^Y*D=yuY$ntCWeNr~6hZgVfi@~3jiD3<
zb%D>Km7^4423yMozLkV=4OAVMNtoZK@)kO=Q!yddHyWBx>ZLbkk*@DW_5T~?cjmbl
zBmWkkXo8$Ec7N<U+wkT3j*-mrD!ema;pBZdvtc>is1aYTi=QjF;Tl2qKlGwGjyy7a
zKxQ?E<xl#uyj;%}Cr-<Lxa$q%p>U`!xLL(J#e4=!>SpG-LNb|kIBZM^biRJoIE!zW
zdiu&?;VN+6xXRh9biIVZ`Ds-0+<z4=GbSWgu$)_U@-1b@)S!zczxFs>8+?Akt!1yv
zcJAnbhnbar2KPQqayNqot5P<N^F|XcvSh&B=(WOyx2cAGe#Tw7e$(B)hN+~tAx#IF
z7fkD{-*SHK`!*S%nfThQ9`t(dA=3zvJl8&1F0Y=n*eSJ$#m7;$-(Nq8!7K7eGM;h&
zjI>`kvsg4Ar5S46f|r|lj<aC6NAX6UxfY7Ir+i8PI%kMIIfy)Ahzz*esNu%^n6_9o
zq%<##&xbUiy}YLG7Z)~V!@zFK)1-SSm@bsYpRtMQkf}48s))D~FqmOi7ovWBgf+Ib
z$b-vP_FirDbQ=uf<I1ge(5N}M!xE?du@HO^$(Y#&vU#6#IIZE*caj@D_YX+ti!NUt
zpyVmNCmb@ksp1Oo)y;;}s$O2;h&(2pKTRS^(+qHEU+eKQf{EtY!4PmA5Rl#^?8_Ir
zZ7y%6pa(_?aH0bmOCi|3D@?6X7vXCN`PwG06zP^QQ6(LPr&m3OF$INGl&3%aJ~>LQ
zSJxiaV`tJc`eyx-@h@b5boY|}c_lX18gD$=dCNm{ZUsGYi~wm3jj_!e_~FE2T2FpJ
zz~ock8vg;Dy4grcm`J$+<M6V~V93SI+wteYA{Ru3J2{Nhmrl%&fu9%(73+P-jgV5w
zB8?ruF^#Y198=l+GGM{UjmP695;;|w+!qOzXE=Xrz5!i^MAC4u@pRkOE`2;d*^0h=
zctKUQcc&Mss79-nz8{uj5b#=i?X+qdFN&Z?ZjFZWFA5=uElLnYnC_Ku0DOTn@mRAf
znX`^?2;2;y$9<QNj$j53tkrly*Tkv}9_A_7hbIpPWS5{g&t_)`Dv8{{W6X+_aGOJ#
ztu7<UcNBtw+@jW@X~U*@2<d3u5y`C(1%HK>y&9>?6R!|`1d@y@6EH^9ZDM@;++s=I
zdvJ&0iemmJ6sTh+WE{s~(`E~wo}0@o_6$d}0j<~Vg}vH!Agp{p!TxA-5r|W+icWBt
zi7)7(F@3c6ewvmFc_&?|>X3%sx5|k>6SYbMR{4rW=p8=Sl+gDJcT=`yF|weScKAS>
zc&<QANC_S|MrnKp2yT<0QeI(i$n>mWMjbGojv;&xm6>Dc>>^9b&4ODhCsBF6YNAfZ
z7Q1qlLCvA1Vdz|`bz93Tor7=0Z(zG(5AUA)o+{fA6)|4X8(D0K4T8<qPS?<32lB(f
z#a8iwhjqoeC=;kk*BA@$qrF1+oK`Z`1PLn*DMOx1WocCBb!2c?pJ;T!6PKR60B^R{
zrrK{KBj!zxbts+FR^|HZ{{UKt@E$fn%?f3N63e3#sIl#(rM0(5WAGQewDWURhBhmt
zNOfGHIsfP~{@-b}lNNl`+daWnN+$*@)9!_)=xHkOtJya-P|Q<KZN|GQv=+N1Pq6~Z
zsf?;I^6e1g=)lIV7R`p0o4mPuBww?3TMOPu6y3BM65ct02iA<jp*aiIhVTsbKR7tK
zZ26OCLQ)}pEBd8^0Y<xp&rIt0&hdqNCH*GUkYpEsnQ>?{!@=CbTV^@Ow7qw_l9>3)
zqB~XevZv4{T?j<e#D1N<t9kijw-n>dtEKK{%g^Kc($<0z=3_<oo6XLdaS|oO8j>w%
z;B4Ct;d;BA{T&fO!>bQd#jf5mV<FDM_Ft+6`oea)3Er@C;*B%Yp7j_U{AR^+cKMdw
zmw>BOXXY_{Y3qm7-O;JvwRRbtW}Zw_rK9x$wmh3Bj^^j+Bund6zo*b3U{8#+1H>qv
zC6m6AqS-kp;VZDcLz?R9?R$brCqfhjv9Cp?>Vnb>Jw?vrD|%Cmg}c9jL!;bSuwZ(T
zAjwU#DEFfMKlxt`w);%b6nzh6bk0T{M(Jo^y`WiF$E-eGo|U_DK<L}MmF>D{U!qcU
zkpG)Jh>*?-Bs3^r)!~s4AlLjMLI3KGx>Mv97L4?7zJ?V?EQa_uDkGEl+Gzh@1xR95
zao9O1+mC0exSG~Q0;y~Bh`48B8z}Yq@)m=FU3W`D!X3p9ne!anP{qB~3@lZ<&5J4v
zVXsxkPSklitSvcT7T2qT#$V()h3)Nk^`$!Rdhp-?;^Q{WXeqioAWNAnY=u|Jgw-ON
zo21RfB3yC5hi-DB<htwl>lnl~_z{nex5~676kbmTN=1cj545YgXK^<Rre+1+yk(BH
z(pEz`AnBc)oZxt^pi+Yb8N=~M*|g;aq=di!8`&;(>iHIyEEST7QY~Zqz`MoIBCqYi
zzG@TuyQ^ZVuu_Mg`eHFTjlq&S?-|t|ZsQ$e2hLDc`|h2$2MAE1HP+mDH7l|Nfx^LT
z?oe%4lJt=T6Rd`Sw`kW`t5UUOz|JDGh1HZOEAOXUo=8&c@}D3XYep!sA=j(u4*MAy
zOk<4*(PY{UEwMBe9JUG|W;N<LT;JNwai)jix3INg)5nBwC6_+e3q@th27}l#YDab6
z8Uz(9nXufi1}CCmBsriLj9JJ6U2pT!tybDD@6rdzJKND#@UtsiK8QZyG6BuC8sTqj
z8_)!PQ|mxCvK&g;tY<7`Yc}rf+wQ4|)^)SEUOD3i!%8UGg=Ol<?ZVjV9V=25|M-+D
z%kUJe5JOVBhnH%f)r6<-Lv7ojzc=-k!j`4=L}Cz-atJAa4qMWmqK2tQlmMYhla)@E
zCc0)O7uwC{)GsI4qp8cB{iaP7K{yYp3ma;x1T=~vs!HneN?p*`i~L5M`V(C|mHsc$
zNmYmYdC(*;3Z#Z#(zWl7O{r71p`L`S#rE>WPi_aHO-Mzq)_$|8K$fcDG48IcgRBt4
zPg<_9*ji7b`E(`N$yZdxuB;o{bLF)F-c9RX0gde5j8aIJ_6+)f0X(W>$+YdnuWWyB
zdaR3L?}zY-Bh<+MN~LS$zn$zPVdEvUJeU0d{qHLKf3;S+pYN)_)P7ql(}4ejL`DCf
zI@SLvmalw2+>yl_Zf8zwPwUJhO-zijg*0HY4+4^2X#i`kNV2lB<jrYfFWW}3s?82Z
zwr+d;pUzigW`r9gM(unWqG?^#dnzg~bm7^!tb|P;e41H9c5dT8dDJv{bS8~i;|s^k
za&-o&^28TxQm36+vr0X=WXR{=Rb4V-7Qa*9?OvyNy8Gkx$krHCN7yy-^i6zSIdJXz
zM&P;N>jrSG5~uBs$JRV++6Qvix3;&}LVmnAYfmel$&p2`nA4TeX6O$PedB((qr@ds
zXOb2~bBmNwWyP%$ho~|tXmlsT8GW5HWeVS7u}Ymmyi*QOsB#v1&WOY*(9b9^$p;_|
zA5}rD^M-y$5@rq%YcQ4}dJaz%<u;h*$dewaGIGlexo}BWDTOIkZ-}Pz&fCiSFPT!}
zp8kcML1580;G`ytGw6cg<dmenrr5v_q?dRy#eB>Xj4gun5~6T3(9Y(e#&BkfIM_W@
zpO^P0OgEpF_Zo>qr{`wCy0a;3`TfGN<s`?n#LpZY5#=8w@-~1u{-AVcR7O+8pGdNd
zO>Q$IaB-YpR1IqGXK@sKubN;1uJ<qAz5r<TaoKQlrIE}$YL&w9<d`$0V7p=wOZ7D<
zp~{QjTE?sbD|bjdXx#mRx#A3_)4VE-UsGQwq(|ORjl%M?#?9^!5@Ef_B0`--8Yzi&
zQroDx-kxtYaC^Sq4@bTVfkAtExV=6G_9}zb&nxqGCxD;suR8ML;CkMkMSMS=pDKe3
zjhlXsQGMQz4^M9^Z{)Y}aEa49K1OEW=zLp#j>%nb<K4x<M@G)C61hIFw=RSOz=3hD
zdN?_GIKr+xAMT%CYT<T#7SsWRyF9&v1oZIz+&zG3<+q<LPo3nSo~@s@`sOC=_h!Co
z;q>uyKShN7d_C^L!h{L*2NFKcx4!4b_9kxhZ}7|AcksKsy?yc>d~4z2^}DzEKd*O}
z&?W(gRl)gjIyn_bcCLH;VvUi`D5^08+M(6-aeH-Mdc1sl3;VqEaq)0FdCrVq2H5Yx
zYmnTK%--8;<92@c2KC{-9RViR`QOXw4dUUyFT5>4^efaqcCP%L1tv~YTShnVIZD!Y
z@Ns>@8^dKezrQOFk_M7)<lz?C?RUESDT$L0f(!BC^zm?R%2({;Enm9%`A!Eo$Uj(k
z1OlsrYxiDie|H9DLoD-faBzKpt`Bdovhal7p0DETWEs|cPrstrKCiH~*e+K$3iA-?
zuEBG}^}k-P0Db&Iuw^=$>9L(*uwU;7Z6OQ${c<^?Rqf%rJ$+xN`m)l%U$3-59uM~J
z0H=(9PH!<baPD{cuLnkV7VZ(X4eUNEgJ*rY^j%+@*8QJ=13W_wig*cz?h1Ahu68Hv
zj{urq_dI9MK1nm+$f5K9x}SY<^=QAE0K8nx|9EipWE`Cl^kfWW{K)d;q4Rm<4S<h-
zdDaCMDdFPhbSi@@2Z5^W-Q2};G0qUnO!h|vfWY}u00keDHx{UE<=X!Gz7={@ZFh5f
zIQx9AgJPNoH|`A)Of^Ibpe1}b0QY#l;qsX>4k+Ly^zG>T#^ym5nV-?*0wsXoh#yox
zpii^2h|Rmf<VTFPKA?Y($UUx+1fDPxkMhLYzxZ=tbaHY4^6+8ebYuEl$eCfCKz`l`
zG8N<9kzfMz;trS>(z$-#-A>(Yr1|gQ`fNCV^Z_Ro54?12MxOx0fbk>Uo$bSvwx<u8
zEkHV3yqsMC`ty#~Zv|lSsQ;W(G;OID;|ECROy9=J-p*lEE?{Sy|4W~pqaN<;DE148
zx}DFFJJju88y&R3=D+M)zVlM$nmoXPGvMmg%pF1Oq@J}hU-_p2P!--$Oa>oJ5Z2t6
z!~n8k)MA8m=gNnh9e;d|c!|rmDlBHu$^!i9oe1l+y*Od<CuaA_jcmC~CQx`YA71Q%
zFB{ip>C%@kpAjs{W4#b}rU*292rTYN$8{^->z?}(<?3|e!Q)kLPc?ZAIG@=7{uIRl
zh8q|MxEGZDx!Vgw1$@`88w2j8?n1-$Y{vTOvuz!49gH7T<0ZQH5p3=dA*e^-sR}?a
zfB4OakJk3ck_Bt>ucu2v+B+}<n(-i~0qZd2E)2b^^s-hugKbG;4nq^7T|VEy3GVQ?
zUAbuOhUs8Ff8Es=)Gw6Yy{big)}hDLsbOt_hj*r(>G&8rxBeg9P05D4Fz>#Zi|r;T
zuz7PjP@$;J#{NDE8IaG$z}D0PiMslkPx4(HjU$LHoM1V8&bZszN7r<?9Jq(rZb<ma
zoQ|zR5;Mj#Q!X(#yMP|5T<ylir!?BI@jzvk&LkN-7TeusuiLRDRMm|pPwWX|H^XL6
z;SQMj@+%7L?i2p*!`Cr(=D1NNsks3AnL?CvebQ~FuE<Z;ek^c>d!o!$?SN-g&vlCT
zB>fe-%R6G-Q1Bb+URB4S`>W{D{NumQAxjMgp;Xwyv)0NLPZ%9}{jIMHqv-FB4fPj`
z^H=)mtnW}s>wh3D4845bHF*0+t-#J5z{nqr-#F>_uUM^j*%{te6}y~j@Kb|iccwgJ
z&1EBd7{&M~zWbC9&m=5;<`hIC%038x2uEohc#=5Ajjr7W%|ji2=yOYN?QRt(5LS-`
zPvWvI+_jIt1?`KrvC|p)C2ALu5jJ<RVnl=X287$BpLfr3u4ArIEejk@91F1R7E_`8
zYrLahouR<VqzB9p$0WvF66q8!GXhqDjYyb4k(sp<?}wo^&}>4&JJZh9^RIbsysbXo
zFKWHd*O;5A(e?f1(@%YR9#+3{>yvu6o#{b|_Q3an;$ATv%CI#+v+d!e1E9re(1{G-
z>D6&`5ol9NVRxwgrd~VxJn%+zUxE$&Vo8v`jjW<Q!2E5xd)b5@zy?gf8p_1u-iUX3
z(vK?7|4POIV#|lO$HK>BO62O-8$v>LJvu<nu)=(HabRwdY<4_l+H4>Z7{Oem^~nM$
zTjcsbJ*K7mTHY5}K0{1Uy%Gqb1Zs)l4(9aH<h^jaUndL`B5UzVlaJkkWliEVmxZ`{
zzhk>wg!Vuz%oa#{1c_L6ro(BD5NXWNQw$Vk!CXq?=ZO;$d3Z#v<T0XrqPQ;!jK4pw
zc_;XsmLV(~NucWzrihTr#Nap$0t_oM3Ht6^2*MXk2CLYr3lJFyM{-Rc-<blD40Ywh
z>=JcL1oqE9hGb&pmq`R0%1?`yg30uUB)gUN+V4<+0kq)fu6uf6#=oDtBvKz^Y&UjO
zahLMVT0npp%Pm43fe`h0QPJ>?)+pAdqs5JkCc}O+=v4X}bp`aMk^Z2U9ynd-+0PKs
zHMrP!`+v2k8j^SbZ^Co=tkR@oJzpPC>+#2liTGGM59nmEGUJ^diE^?ztKIYE${$3^
z1Z=pOy975MniZ67sRtZIoJeg^Z!(-v_u%iMIaz+~ueh8%oW^Lh@|wC)-AhJ^w>@~y
zcoV#4jv`;wEDPVeMGw>I+S^?R-FT`<(hu9#tds-oRNH1qp`u~6wt<C)eqza#VD6L0
zu*J6OSlkpe2GVM5`O&gc*u(v)eP3Qi+n%Omkdio#lhf<oV4+$u$s~YI_{6u)VPE3N
zFc<iIoMwQyBv0R&vzcI8<+l;~F+}}_mqyRu++FAb8ffQcfYAvu+@jTZQQAX8LBsBu
zS)v#xMm5!h+N2!^G%-e?(%0g1L5Mj~?c4Fqrun?ce;WrEypI|gD))X#{uv7hF?bTP
z4adOTd=m_s?_3%3vm|X60OkZs+>62?RRTH1AOYy(v^#AX`FTFM()WrBc-BOX*6#47
zr36;y_d*VD%tA`qq_?rVyIF>&1WJvY3BHYqsp<v;1b-^;w|mOCFM9CIo|-KJo18Cr
z!@{I$5H5fqi^AC5+_w}9Ye{FFx8R=-QUe?1;ZYAH*Sxty7$W{t^8z0S&fOso#*kCm
zFn~${QhD#y3-eOp4Iw938otrKMwxy3(bWs$*5lE62vR4$0m<WqlOAAUpA}AHZ&WE5
zY$I!cr?yScr0=mg&3Tc;K4L4^u?4MK-`_1G`J=HsWUphR-t}rUVS6&)A<}Tfi!L<A
z{vI4f9>DR_kXFm1JR~Fb8no<ZX?N31IQ4Yi<3%|uktV1J_kFG|;rXhLr$0#+02{}m
z@#hU~E%*2?J+O@^n)SkRRv)M}N17!<V+?u)Mq$P-06YjdvV?tmMa^zPWXCo1n!seA
zh&{rQWinQjJ8y@ed|Vltc=_*vtY6&Do};HxifuUyb#gu;UOA4{qJ)U3wq){MM47^$
zuDYn3elp1M-oi2c*1up(IibgdO#pJVLzuJwEc1aH_WZKE)#mY0#7t|3h`xv}%9)HF
z0R1TJV@KkAJ8}OSRy>cWw*A}A`D-_fT_FHrAfLL5l&p)U>4Me>^5Doe6hT>xd$*__
zyMZ{1t@+ApD6MLq(MW~V7NrbbNmxm4Gg7N++&uIhAmv;RY<|Co(@~ge#pi^0@Yse;
zSaU=Mk8L3)iQG>1m$4Ic3BrE$&*Q<b%dN0v*aa!+K#E1AKhne8Sree|%#i-)F!CA8
zE|A9X@^A6j$ITVH7I%o#-?t-=LMi;VW!)5ymxi=D7Erc$t<}OpoV=b|2Q#HXfB*?5
z>*R_li&o!<RvAE|uo}dY*#GaQ2Mgz>hYz!p&qFvLdMZ5l9WHahv1LtlDoRK@<mL7q
zLxxv=<hz2;oK3RS@ebg_;aZ(nybW&;JnnC+@G`?3ci)QxFgoU)wAz%3%H@8&h7gh)
z#9;0G83<ml<^7E4<ajhl(;iDxA|9(DDnElw(rK7h&fjd(q`um?_;@|HDrOndn{jD3
z7?dU%DoTfBCOr^MHvDmOR<Q)L<>qmSdBw{_W`dv0n&-W<$_@_uP2;r$x|)~r_3rPB
z=cJ46ExxHLbtU&7LX}U_;x0v-J(p+*R%t`?eb2BE$kwMxj-huQMM3&n723wmljnRx
z6;t@nb!+`U^IEs`Z~!NcHNIJ2bWCII;g&ONqLl>VJph|R+dUMu>wGVojw-u^QG}QJ
z`X)9L(Csr{Ju2w}S<(YHxxr9sxz&diG?-NLVKo2XyzuJfSFC_<nVYrF*A%HA8QY{v
z3LmWkG-~k|`U~bOwe-%l)UC{q<b5Ubo?x^Rj0XXl3FGbs{cwe1g^-C&m~{c5j1u|>
zAy$8HIDe@bomuQ3Pac*6C=`ptLw2a*M-z*9K!DX$)RqaB+nTgM71u@=;Gdv$J5}{T
zx5jA1{h*D2Y&mFMF6t@a;NFqp7W$kml=SGyIyABP2^%3uIDeff>-6u;ISRp9eU*BA
z2H}|SfQ^tuWTYO4sHg-pR$T#j)sfvR&~}U~6<u-h1(~XOj1$p%QsMz3q+QB;sduR+
z)2IX<rB-12?K@}!pL8)~kw{6WC~b;FAsI~Z13*XuMZ~Z=+o55f(7l%KPMctpMfIDH
z)f^ph-D#-Iz1Fh#{b5|B$c8;0PEZ$~E=R+3gFn#}!Z^ckohR}`TL>7`ZV$<QGCE-y
zIc_FNm~sYM$lR=O5Qb_nd;_`NcK9z8T(RU<LW2g)qmkSpyfT2Zc&>+S2Kt^J4!Le-
zk+F$_oN{CptGu##&{J#g8~~cZ%V#d5aifkbA=>R6qP;ZWnHs6p`;H0zAl1#K#Q<&v
zb(5`C=y5=b<Yr{Ztdpl8c=G7zA~%*>m)zF&5LP<1EiE70FX(F-14g|s+}|%E#E0SC
zJFY$WUcj?2@X$Nlze_ySe=hp32hq}&j>#i^Y9P_wKMfCpJbuRqfKARmy*(R0BLQVI
zJMex&?S;RAHfH*1nNlzN-J5~~jZawoM-OxHyRSa%*`ejLiOkXJB=Oz^zq<hg6V05l
zeJ8c1MvVEcKat!1bKj6li-2$ql!M4+IAajwE7T%-hP>~XLok*avyIF`48k;u{IpcQ
z1y!>u4_NxclztJz{p)02s+e|y4V=FdyOYN!ynqq=?#M<y53U+du4MkEOW+q~wP8>p
zy89HuX0Uw;WG}OQSOSe~BJXiGjhc~80MPKN#{<&6(r6~K=}NMj`Nj_}70{BjrZGaF
z`$lJ+?G-0>h!te-l}<-5^t!0r^9{9`UG+Oezb$KhVR_<Mebu}kM0pTCm1+STQjUZF
z{nDq*3}u7F6Oo276KEdINV{s6KGQM$PsKQL^KHY9I(@Z<b#jaR%0Q^YDjhV~bmNOg
z;BIoC1>C#-6!gLxW~qHtK-(-Sf6F&`3M{EuJ$S3?PALPu*`?lRf2^okzttjlqJ5Cy
zlv+&h(oxShy5`SV2uktE9BG^Tz+3CeDYLK3lzYSg0@M8gxENMQq)Pz$Kj}u6K13#D
zzFJsUjxL#<#?-5;-%mr!lT~JtvS-Va=EJiwIG}?ekdx955|s0gr@anixQ+f5tnYc;
zaLR;z5+O5!zT0zuI)Ms|41t!Q6StUJ^jsjirb_nw+IF1x*$#D~;$8L_j@GsJpQBe7
z>(g@zH_O!%D`#>6v366{F-@sVq@Bd?=7`a3c|hnVADXsjbonA~5yqE__Q>mnixWu(
zydef1@2z(Mi%`_>(8azo;9DY~NbZkEJ@1)PN!ti9ak`34`2%R>bOM1P(vO>$iW&FS
zwsAz_itQJmrgEp{lACo-JC5Lc)A?lvyb64Wx?3OeabrjUomTMK9^dX-u~o<Iv+GVR
z!IfC~H`%fUL2B1Xc;?{`fO-_&gt?GGNG45@6GeqWHi{kILe9=pW#Z*A=W!4<TBJ0x
z!Ia*P_yOJ^q7TU)dtJV_w+a2-PZ0x!V;SjXQIKSv_mlOM8~`hs-FG$Y;-j<%&gv@T
zg^T5rfL9`|T$jXPluGr*`?X4);K}lkYzM&3Y1YQC*MB{D=2o;lN7~9AH$v~g+p@5O
zdBlZxqo;@vN&Yd1VuMxlR}`s-ly&FWf@Td=oI+xfU5Mq4hfHEu(?gWwWrH;P*x|%d
z<hUMWw3e>f&!iJ*=rl^?Mt@TY9%Ub+Vm1@=%ELES&lx%*5G+>*#T4>6H)(KB8O<%J
zH<TI0sx@y&eB^K2h!J)3``s>i{<dXz`aV5V!b&*UWKGUhnJ_YKIuH&^@?e^BfyEhn
zH76q*r^=91_!2|*^Dfdk1I#ovwcW&dg7V%W-T=(e(NZ{OO`(rP+%?h!;xzc1YHmXM
z5q_u0>ymjQ<%tT%y-ZM?#9BmCoJAf}uO+#1$xWmEGIQ}%&#$Ej^OxwPZTpv*-LUJ6
zhqYDTFA(~o=yLtbT|8U0Pxm1;iak-W{4Lym23}C%IiR@!{<Qs>$p${UyQ^l5z;dQg
zCVKV%6ybM#8=6#)ZS_Lz$37jB61pEPuA_g;m!~7X54Vfg@4y(x{g-U64LdOvX2-oO
zj2}n&JD|!KW*T8|v_A~(tNURguA!6fhIWf}LvdVgVB={}b6`=Gu$4#t_9nWcdT5mz
z@z?0h_(ks_<%$9lcA!^5YD(lXSY&t1z|9{@1cz2{x@o9Zsy=u+toeeM#^uEw)c~bj
z)NyqR9mmJ8)Rq7fbjsOXF{@Zn1_`)y2^!q-ap0t2zHr3bg~7vzUOrA^QH1yBkgDDB
zbNOh>5eRRS_g!K@<rN~KNx$x>{Qct8&T^xI8*YL(+_t@)zJ$4?<HvOi@!)HFI&A5Y
zxCg8aV7g9C`=D*h7riTd1SYuuUti#kSwr=%n}3|n<_T5iRDflK`0YPH)uV0~qIb%n
zlhk|9Iam=+HP@fvyJOzCfk~&uhRFj-BxM7i5gxqz@pR=d;^J91k0X%J>1nzkr@o6>
zSz>KyL7J$=8XUSP+J!$$XvH1wJ3EYxrg5^k^>HzHTILPO!`tZ7P{Xx$g4357XUobK
zivwSx*|pZaS?EaH@9lj&Hc27erj+$TxW(bK!<UxE?TExU$WZ$_oS#%CPSC4~95FD*
zif!V32G!tk#@arNz>hfbu9w!aG{#_%MCu<?WlknWcKBie-dS5iO`Jxp?3E9%T7Fk*
zwVe)2N%a?DWH8i-VprlPbwg|@0J^wG6(!FA)SrM)+WQ(1GPhbo6(eUsLUUhozPu=&
zZhh$Pn!cy$LPDd1%HnM-SSQ`Gcy}}ie9F-lFmei$1R1m8?O7THisd66+6H>uo77>W
zh{A-Wx{d#!z@y<Sb6R%spAA^TuWW;Nr#h~^YTN&{Gc{}}Mxka<HxlRJea${FGS@u*
zw6GUVYYrh9P=i|}s0mT{pD_O^K&!djjb!?VNHgt`XP@qPC+!_cl{${YQ1Su!FuXnV
zfw;vhg_wS{E0ye&p&BW>&p#5`LS*DTp=X3~!2vev$v2V9=ON&k(ENu3-@f>v5&YzB
z=&;WM?$8pMe<Oy@IRMjs9_la01`oEL&9%>4T1<*-mV7gw)@;q?367!$7)cCOj;Zz>
z8OBlp6=J@c9%POdKSRqd1*m38UFH;6@?)!TsXcDmX~L)y{RAVJ`<|b}IWO>XpS{Km
zuQNQ&c~#;F46m!mWwxe@L%?=srP>BOz1xgK!4=tT5aCli!Du=gk{-O+QCoNw!Bwu>
zSF2YdtxJ(OV|%%-!Ld09X1EfFeQAoc_GVjyz>Y_t&tDxON#Ruf<Z21L+QS^f*!X00
z>`TVV0#@JiDrHdRgHC)=x@}EAZ$7?OR@0V1?S{uGnJ%X;f*^?_1|M3DPlXpUwV%|<
z?{Ny5UEM=kC;;iXL96@ukhPZntK#yNEBOu|bR4~&FHsG@B<VAhoR)u+fE`ML*lqa<
z*nLUxe2PJ)X2<idGwGw=$SEYLTyIzvs^QTz^7K-l_3mQ;T1TYD!WGO8SGcdSj5^Sf
zVHNqx4m?xEG$Ew;)vTcFjjj5N;)?1~*3~9Wl+8~INzByr9G(gbA0;9I_WqSQB<dAk
z+xb?FB+Ke2wL}S_7t-MmlF(0bYRr=s$5oH%G8Pu<D5BcpDOV1xNUL==O!u@HxuEf{
zBGzSVH1Mj{z8GMW@B=}1RgHYMw{?=ZJfDkCeK|X#;@motlH65u^O=R@DckndRk+Jm
z))%(RdH2|HKR0LAuA^F4_f{&+uIMkzXc7CS7gv-`MB{D9TC$p(4yP9i=<q)n@B6F`
zTmu`oTm$l{YnH7TEoPqUciaO_j64JUU?T&X=}nu0GZ~L?`$fn}5dvx%1@}tP&Dr)R
zZkl^lJ)Wb)Rl0f(Gu$xWyQNJ)=CJdNM?<q5F`m$jF22#LAfAoZ%n%S^0@%~Q0)*D*
z9XIjvWn4h_eu!1acZIZ|<hRIvzw<5T7Nm;&4iW6x>`WAh;!QSXTR$xipqY9lc_#s|
zh-8nwyQy<QI+ZhqFi3)o&#ciuZ4q-Pnb5%rLt^<bg<}qZfb*xNfAvOsH9eGNMy#|Q
z3E}9l2LoaL-O?IXxmu}_4*`x(Zj@Qj`+dVKM<6<e#_Jobo+MpeUFDYTX{Y#?V`&%&
z^e8ld5$`HAhxN<63TfH;aAW)`3$4U*5bYR0Cc$oeZk_JT7CIs;V?+BvFN@{&Psdlk
zvo^JG@?bkxc|H?-uVn}RpAb`;0zMW3e}!fMhd*BL3a?+n?d#t7-`~-5RmrfN#ySKc
zLoGo6SOEtr4Eq^}S)AAV^1As&*e{`$Bs+erl)GGxgEWl&IOLWtNVe>=St1OvAXxE4
zPBX#dAVQHh1s|e@=04u#Zp_P{<R?*Xl<>6c!1GgrwtL9#1eZlJ;ejU(s01jEGP4f;
zkw)Pt0H&SCX?OMZg@xkRmAN|6<K9QU6~51Z&h*lUWWYiqN1w_^RbX!Ia}bq<VqWKF
z){awlW}mD%<E*hKfE8{X|Lc;Td*-d!ibj?tfvLq<A5jo(9&N#=G^d%Iz-Vpt5p!7Y
zO@*pQ;bevVW#TUL&L9mP1#BUN@;weVwMK2Hoa@=5GeKBQB*nj4O;@T!`J2h5oQjL3
zF6cvKR(ly_ouxrUcOb%zKz*ws_c2+k2sNnffDt*0RZH6m;3JRHA43kP1%c4VHZqv>
zt|~eyfCkAvoDfzu@y&4DS0d=1`(Ys3sE!HrAH1xErR!wFB_lV#Uy<M(dNYhTO<h@3
z9}9xqeOdZ^hBGybBjTV1ZpL5%clB_%C3Hzni8C)Y8?y(4lL_noELgnarRayysWg$Z
zgx5S^;(^>NywYFCx9zqvT^k%omOn1+Qe_hF5MKAoN4_%NfXFO7DIeX+K%ky>%6XeJ
z#Yj4crS+6%jP5D80LjB<!H1oh{K*&lDtC6VJ$~lr>=G*Z`H{IfS8fvAnYMVnHZ;`o
z`%J~Z>XPh_QaA*g`NiJySTR3yD)eu}$10>^dxKE~2RimL>(z4c4Jd#V4xRdSej^>6
zx~JR6w*id4-ODl!_~u7rw1&TrEB5C!N_t_*1}F!XqEIX5mLlJ)M{TmmIkZ4XypCVL
zd72{Bm?RZ67%0oglu=i38l0jPa{XzT%^3!A57`Uis)iM9MlQ$})!0DTeravZ)@j7k
zK2Z`vo`8`Z(Wr@8nXVFi$J=(qh@5vxaR=_+%XfAW=!q)NxSrBR_)DyvIqz{7M7Ilg
z9gVgJWy}X3C~~fVhV({!h-hH#%dmAWc!w`Le~Ha1D|v)H$5pt;kb9JU06;=t(Ve3>
zTtb;krYg2k1Z+CeOoB{t+)2r;q!PjazJ0_5r{IP2>I{3xGEB76JeWkIkPUa46kkeM
zb}lf0`KA>&JH}Va=KXYo)}w{<II1cl+BYo-w_HJKHf<8Z@zfjnz|0q*jjOyv53B~e
zyE&+tSDCI)D&X48Il3kC6$vHK*kwkeOU+sYpMY|ADqddrUI!BnWr|2m3O}Id*Iie^
zVwgPN9|}oC^WyWod2VW|ZENI1#TEgl6<R@}64aP5t|q?&`0pU2IOqB0=7Al=!&#ZS
z;_CGo!5UXHzT2-H@5lBd(Hjmm3X=mhA-$oYMalU1TOeoYxTs`3>#8d*_uKO&n%;l!
zwd6*`U>npAT-hq4y|P2!hY+8zdXdzi6b@w<PWKjjI4wHj!g=XRi=B&k<s${u7C3-G
z;k6C^x%)hfx_f<{l8ds+gND!#rTvtuu3bwxo(V-aZ@6$(QEorbum0l@8m8Rb>DI#9
zUAil0I7`28xXj+OQbeEf^i1|SqXQ{A(M!7qSx3)(;3C+SY$RZlUhnk&UuaO-iVX>@
z%Ld-T_w^;`fP$0GC8I!8Mdf)=mD>;3Z#yaBmTPpR<|fSMn^jwW(^T?6N@&zoG4@_;
zV5n(;r<>xHsJ>kOxGmT_uaudf*}2F?iVkkpVkCY}n%%_CLsW$41h#C9V5bFQTm2<U
zTiuDc-m;gPT|kVjU1y;yS6~9gps=$@ZTo2;>0d4d7N~TM(&M!!`P)w}_hK)w=g&92
zw_FR66~|65gACnM_e4)Ocm>tw&dK-?kF&-rUXQ$4Z&GZ8I?4P2j?=-DP*+IL@X5><
zF9iLN<3xSrWELdYc1zBk2ThT&xpzmP6VIj+xw@tHIN(Yv?$d3mjyOGAC*bwX<9b5m
zmK0MUc-zMu<xr_#=#y$;)w^}ubces*$&;SBGv%HVjTzB;s)qe^tu@(dOn!9*E96E*
zF2cGq81pm!cfJkZPBaI<ym<1#II@Q;S!E2986@W0#xmSdw}LDo&xXF;(F&*e^f^Zf
zWnwX@iLfZ97+2wTi+4|Hqor<eZ`Sl^ZP=qQ_Mfb!kF}aFd+={)*T5O~6tA*H;^J<F
z^LizHswa{1p1YP%x)*l#tRL#fH&<`$p8<VIMbNz26LI^umxJIRr5?M~k0vZ=!sOJY
z>(W*GrC<7c53a`C!RnYyv@M%{uj6+gy2mNH!WW<&z;5wB&*ptVD;2)%e&~A@%RMRE
z_Do781k=#JOUbu@-67EY^7|7Uozg}6{fEHUE7)VCUmfM!Yl6pj48tsIe~r*O7!$y1
z&C!06yp7m!L=0K9385NM6_gaD^$Ks316DcG{3n3p=NmxbE6uDd)V<Xjc<#ZxNH32Z
z!vw()A4g0KSdFR<*@9&qeE^{NF?-Gm0jvBObafPdUi0E$vKJ1$|H#G~Zc85G{^6fn
zvZ_UH1~6tGcs1ZU8v_u5M$(!|YJ3Rq(8Z}M&E-|*j`xlzQsv*0^fJv1o&}o<9T0fs
zj)(Q(nK;SDgyp~T<n5|!x*d$skmfZhb0ancpDC*vK)NASZgF9^&(7_!Gp;yH)~f$D
zZFg;Zcs-%_L&SDjW^F_exMo_FvgNB6E{NXa4Sc#qm+36oNDs8Fb)uP<o=&1qN#F6r
zkfy~;2J^aqpo<fR;aiFKBv~lGwe}3JrLh6qgv9}}TXue0x%4k_2d%_Cp~fI!kj$Bi
zkpR&*^qL|KMJ+9+pFtZ5IeU)Pt8Ts*IC`|yb~rrOB;M`q?2(f&-w=o9<f`2~WsN}M
z7IZqF$|e9No*S~3(-^MPZ5}oE&}hsoDEX!lO-&qS$P!@ML*Mg>OzUT%^#$qE)C!A!
z!{H!J&v5X-EWYZqux?SSUeA+(5x8Gpa|o((#l?1%GfA<A7R9Uoka!WvM|T4MSwz{O
zN#L6vA^lgKz~N;4%!iK8?}F|6Ag(23Aq6@oj?Me#IzvugL>dY@`M}G|bUQRXA-+?P
zGiV2GS9-{mvM~+%d%7|Y%6>zCipy$hFd6Gz5DA~`HP5-p-QdHZT+tpvn1Vby@FNGa
zLJuG%hYSg2Q>a&{4kT2?x=Jcc-G%y#`&fvD96i$-(Z)h0#!X*06(`ErP34$f-A83a
z5SBK-+$}174_`wm2#s;YzqL0;Z1Zq$%SDva;;r9=8)Sol<7OsA#&KXwQevmLFFnyT
z>L-xLgru=JYjstoYD_d*-sLd>hr+;2V(!LWfRgXORI~T;eAoWIAZ%3n3Wbw-=?y!s
zx-+vVqLo22W_mMudKP-jxT(Imsy5ZM+P2NJgrzo4g_y9;TtlYI^EDLN)8fs`>QXbp
z(8lhKS5c$yzsyOz$of<*!*TPcwNK2$EgF2}JNr(e%Rp{HBwR-0!76#u28vAx)H?)F
zvNC^V=D`v?)r0Fy%#!9RMcg3#$P)3AaoO`ATdV^tasX6oQQ!-Bt&J`YU@7}D@+;2}
z+J5b*qHqf7BLVJaH8F`UnOw1XJAYn68!#>+>W2}Mm~h4;3(h0?+Q@L*OEDY%6=~-)
zWAjS?*m`s4e9TbWQop3kp-1VR0%rN-IfYG82nPoGi0#R;FJ;aQS>x18(C1b8>t+$G
z#{FEjC9$Ws6yCmS^6FB<##T-HR<r})V_3jftydji=j82Xvwu-$sbC*s9mRfCm4JvT
z-dWOz`vI9|;rb(Fp$vDf%aMvb_b(~DCPqhhPo%y*+Vuk$Fd#SVYnIaSqPtm9sxyM(
z!Dl|A9w0O>(X1l`-mA2MBy8s(;9zkll)dWba6ilEc#LdG=<%Le&Q*M7fay9Ql1R{@
z-EB<s9o?M}q$a@&CU>m}@uPC)jV}+tZBd$Rv>L0U#)>U*|9^~~W3wnxv|W#F+qR8+
zY}>YN+cxg8ZQHhO+sq9rd3i~y@&o!)SNG~(d(1hGYOaK0tS@+eI(3~p4I;FS-7DrQ
z@qXP}^+rq(&GW5lYt>JNc6k#TsnUBK+j2&eAfrPeE<UNb$2J9T&wHOtcmq`rk}w3;
ziZ6#6V&8c%k^iYcyp?Ayu};;_zj({D1Mm@rq>g2cQlC!kcg~=4;X)fl)V_K<XL_3F
zfDt0<I;kH#_BgiiOL^n=a3wt~-yqqaUc2ZRJEMXFzOLFDUB=h>k=L4s`>&yswQY6y
zw!S?+(G#J+;N8SU@`i0*Cr9Jnq)-5l4qK$CGJQ4au7&*D&Xg>SKoX&=0?yQ0kLk|2
z5AJcFWl1NxDTlAi9Vq5q$xDYEA181%Ml+S6T0hm3F+c6c7o`lss*n^s)U=N9P5!#0
z`ii1<7v_@>3IO`A_^*(NP3HB771bTsZd;@=d4*r-;2md4KrQrQGiYn*5ip!<0wL;i
z+Nb3D=DE!pv20YefSP`q`Gg~FoTmHdC^PTsSI|Iyxh@a&own0}n_Zg-D6)uHcRrW<
znhy#`LgYR)aJ%kq;=79p^FT6VP!kFRok~$k<FLtqpg9n?9!P~#(=inFMPN@0mY!^R
zGaIS@1yhou=Y#agRJ2>j4nn^I%Nw+(6Wko5<fF_=Uq@PBb4(~5<AWIwQWk^khf`8C
z&*rn<p*W$0a-(@|jA5G<g`};WW!@-FR3WZ9zld6pn>4?i`#9g_58Rl|+Om1_tMOgC
zn7CNBQAXKZZu%yxV8zGAIo_a6e;Lk;w9$i4(+$-dE&Wx+%0+YZpQWXtgs6)7L|wSw
zwC_zZKWZGZAx%mh5bGXN;C24<fbj4Vw!fIA68mv(p6{4k;s=p(c+DEi3N=dl93xeM
zeSP1$f|=Unl^Oo*Iq6RDf$>O8&B>Yu?R~eb{MghHNzRC$$$z4VRBUwToN&Xesw%ni
z*#5AnN~w{&T|fyI(70df-$OJD@gRjze^a&^SD~wa2Iu4w07h6Ic~GJk&NS1Z4+7Nb
z0khHi5R6jt1D0W=4G#LYNYWB0QH3&EzGCk7(PV8;`l&f4h_(=X*5N=yl*B=5o1)74
zU{{6dfvPnP(JEAmcKr{PZb+_GJ&_7X2kSoqNo}xc%d!VQbB);LjZ7&$H_@)-icf1d
zz{c^Jfciid<9MG{1=1aPH1-}0Rv-aa7VINM03S`5IGuNg5o|Sn*Pn<at)-<7QA~X}
zoM3+X5L8kr+II~8u|^xjj%hfyplXM8KC2lALmK-8#8*tQX@HsMaXc~ygh_>!9Zf|l
zJ(Dk&Qm|~O?ClYRP4A3_HJoIFVdE~JE(5G0LIquG_h2Vei0#VWh9vM6{}<YxWDJm&
zy`MZ}$&tscqIAF-f8tfiTw*S6g@{oxqcp{0(o*wOV`bV9CjIMBg2bkIFEFix0`cm3
zbIg8!h?or3L=S&3gpP6u1tE%ka6`^uAMOPjD>+v!GAr%_XYL@eT{wOk4pi2M=qRHN
zl?}*sgx2*?bn`wY=Ob|}#<&f7+)50oR$1*hf||$xlE2N~>(6K{TFb$=<+BEp^J0)!
zs!o-Dby=#<_7DN7?LZ0dU}}0(X5zFk$sy&i(W%p2W`|HAz9^OkvrcMi7>dXwVTz#5
z-sh5kc35ncrORQ`MN9`F<#t4siNp<N1Qp?EaK^}(-v7Qe0`bxG?=b<H>A~Ju=|NrI
z52@=s%hO8tJdleI<eF!EQWh;th@vKvCb(bWlFvZe^SG%Qk~MuCMoDV;2oIRPP9L_*
za{!gJM*<#S8F5k45E7r+JJP&7OY{2KVG8xk%R$}j47aD>OAvJJ^#2z999i|JAiqgi
z2FubCS9Q;iEPk>#kx}$&>@qcq4^uDX^K+8$@inOd`_4>ZSp<b&@Q2D!Xi^QT@*bUc
zp^B%aQ6%*2qtZ7Rq=g>EyU5g*U%d(FkOfyBd|Y%TG>rhtGC-sqZXV-PfOhVbEWy&b
z?xIS$jHIqYU%pIHg~O*deRR*({_M_Vxt)A#^1P`!N-v~-M#{laXvhfb%u-KB#-mw4
z#`xN&!JoSXH<icjY?8RP&<m0}iz{d>1iZ}bJklf9wqmqrk%z={io!aMl>5V`P~E4A
zTum)N2YmS`{0C&e*ol1NoYvd%p(<WT;6RgmXH$veNw7gIDcLTu<aXJxgd!qurj`5&
zXBXNxMWo4IO-Y>g<Y*@8RA0)1R@7M{f|dEHyg*EN@9zi!#gGrQ37%i<R>pphJnLY;
z%vywL==^UP{W6^mjWQ&JQB81c*188vDU4XA8uMC^WANvbB&eIonkCLF&xG)caIoO!
zMAhLI<@dpS)r?^dcg(xWAlDj?MQQ|b(FzQ(FRCGbywEFFi|GwslhIlBsh7o!xFv-$
zqqwNU`A!mdzE;6$ClPrQ4DnJTyeERVQU=|F(u5=;9w)`EaXO8wZeS;pm&&+KiZO-b
zMDyyXajXR5x5+Q@L}ywDsxOuJ2#W|0v(SF;@Ko^f0lzIk#-3I2?<Vx`W#Turu%A*x
zo^I&L;fw7v(t#7TG!)(&?U9L6_(%_^Y-|NdQgozo=dyX_H5RY(cN}1Ca9eDmbto3h
zDQ|jVr9<lDcLp<tg00$B)$(F~?~Mjm7<ec|N%>qDA23IVUNg4oXHBOb&qz&im3%P)
zmLD)I@?HiJo2N-`AAOO7)#E^BG<3BL^c0H2%h-!*2w7I3LMFR9vT`Xa6Sxc{PizH7
znYoDibfA4{&Uqg*PWm%;$NHH=ed1uq!|lBdvE>S)d?VSRYq5>jpzm~UL>U@UH6AZ_
zpF&&`q9wZj^LRana5i^~nZ(o?gR_XF@q*^A5?9VMKmZmL5=%v8i>gcUl@uadmD=XA
z%2?e`7|h|j8|(pP_Yz%09ZOZ9MJ{FvE!HPhLyyFvZ3@N6tYcn|T?`xPVm6DUslSh=
zMZ8B^Jknn+`<>~&-e}b{r^*tMW?TX&s(u^S>D06cinJYkGoa$lrc)LJk#IXi+I=<s
zU*5M90G_;Jqj}>iRYY~k^F<vpuqZc&X+(8uFn!Rbt;>jhDx`p7qdFGU#vQ9kORq}p
zJJq-z!S%K0BN%SS8u|^YKfD;UfG-r0<k`zCxs6fmIxiNIiOb278D*JTmuT0U-u>@b
z+m`F8@bF9r{kCIa_*~v?hu}1AsCRkV8v%|sKS^#!rQ<e^8nxqbD7DRzlNY0|dq><A
z<Mk(AlBaOt+V065^$<HQZQqQP|GpQ#^H&XKT+fDDrrBTYE#Z`E&-rh^pyUKbiML&D
z+yskl@ypwd^GdY0F0^#~O0|Y{Cob^_2I!JNmeMU8gNxPa0vMyn%5?cos}V>8jLdcs
zHX~Ub(A?<;FEBf7FmZw~pMF=wl@ckg)ldbCLj{KQrH!II1csnVPM07`Gidh|aqI#0
ziX=5Uk5)C_lQUsca2Y^JZ&{S58<U(*&Nztu<|vEP9A6xPJ~p{ML36fJT^^t~DM7l|
zvJI25B3SKN3Wm~A7j7#0rER9zFL;PA&hArT!<$HzQ=mSC>F@zD=iXI}Qq*AEFGOFL
zy&0>Y^a+yIfwq+!hDlcAw<e_p!xXwwZ0mG;koDDT2F)WM&=7|Mp+HYj>WPfg`U|ca
z`0yfuyhEsA;ne1kF7A(5a*UdiF43QXVw{*sD0zAdTj@V%dLCo5w%I&rZHK+m)cB<7
z^{3_*a#R|%U&fFGY{)9p;eL#g>C|5q=W0`zCWm-vJTM`EbU+38h3=-NieE;>V!dpn
z>!25f^fF4+XQ=crvE4O}X%>&D4@0$7KPPC;DV44%8jG@|g@#TX0kf8GD5SUwSva<7
z&K;Gm9U6;zW6)zY(W5mlu?yWGFM9{@zN8iDSNwU`f58@+e+~>H^*wv{#1}{6Oxxd<
zch?g}bemLoELKj$8;kH|sM)cmNw+2<M5RNm><jAoSd>=~t2d=Q=C*bMO4j{E<4d|<
zrJEn6y>>B~b;~@0Ncs!14(WAO=GzY6hcMbpj35%x*49x;rtIw*>-|I3nV7XOs``*W
zO7oznq*qa*_L8%=S}WK96H{F}O*Xa`o9$aa_ltB@C2T@0_;cI9Tmg*{i8MSY2;&R0
zDLMY6Pd9%u$=KZ7a54loD&r_9x-#VhF-L!+Ob4V{CU5-UotRn7+l;I${1k^gO6Ow*
znC3>C^a}y7L5}`z4IJ(ks7+L&HQaPrd$LKJ3>I6gCUjLxzEsTwwzN1y36OqaIZ>XO
z>C^r&UvHW55#D0*%Z1)b5n?JpeE%Cr8yO|zT81uWkcZ`ktkYe9cg}b}1TTtHZoH9Z
z2cw~^koy)<3NuT9y9eb?vL3NTdqqA_m$GH+MGcW6B6`OZGd!JfkYrR=V}m8AD{Cib
zEZ|RKl@?h}=hcfh1y6F_=Oz-9lch;i#@Ci!exf&7#KO9T;9c>|Pp|`-2ptcw42vTt
zjuu~F1+PMnbjw<LSn^if_QrsVQjN#Q{Fh&rBt>9JlUy`(l^ELgktt+pC7WApyT!hC
zb{QikuoBuUhsUbNM=b_DT{%%&ca)Zn_F7SXTE$+QjypD!WHAn+dS)Bxt~Zv)Ec6kS
zTZ)XrjgOjMy{vMAQ13bKxf7QTTv}PP>ko8h)d`y}99A#vR=2jMarI5#sJ3Q+wT<u-
zq}Ejr`yVH$`wiCqRGXn8OdY8dEb_vS>PJuw(eXQwzb8a2v93GW=G>hqhc@G%W!C3(
zU{g`cLo!kFP3xX~lLr>3LC=d3Tu%4a7g*U{!2Z0y=(9@Pq%fld%8LL{otXuJD9a%G
z%^B0FH}E(YO38e6iDisqekZ6b$$l#ab$UB2^jMd5CcfKbuFUG|13d-UePO$U@)viD
zYG66j>DCAu>z0}Z3?^2V$5JX*-K3WkhdknMjJfSrk)1ILO0p;lb!`15e{iey*IC4s
z7_3#JNwRKY9zWOR+iThN6JZbhHdH{tY`8_wC4QOT!dq^3Dc{P#5I08gzr);V*S}_c
zB5CM2XxFQZCqHPKC1^@gCumgth6jBm9LMdl+%H!WTCJeEU`My1@V!5swXDQjmXj?j
zO~UONr&k;q2bu{7d>yL;Bdnhh_Tfp3w3NuIn~&!$#|l(9GBRN_Cp<u~6lpjF<tllg
zJL-R4TPPcCv*@Uksi?&pwMYWXW&!30-po=KsE_~a-l2f-Gl)B3d4Waw$h?pGNH<Tb
zwAWJ7*Tm<aIWk03Xs7a{N=+u$8#UJ3y|yD(NOz90QYrcStXOvc`mfxf#F$b9HcVRp
zjN+ZRVh+HJE6K0oP#o?gzPX8(JTEL~O3NWpHeeJ3Oo5jiG$ZYI;RSPq%9Vv{&lqEn
z%cRfnN%p<xxJ~n6)2`-~&_!;a|Dgv?<FB&EEpeXLy)hA-RSc*Sikfu)!8u0S7}PW3
zFfTpBK3I>M22k(VHOa^YQFk<%mL%?|^3~ACEABOZ4<CmhKL0XeROH5ri$-)3GJ`QB
zgn(v{6a4}gsIJmDev%%f;Tju7>x(%_?UC}jA>D_mqYt`ilL05!X-&;WEcGDkae}%8
zkqek~&}kJI`L0aM0WAhiub>#SQ{kJ*xdUnn+@43Nr3#BEV43~>O+JXtbM6NyuF%kt
z(wdk98ZkR{V^G2+?xj6tF1mae>eQEUKVIGk>iq&2?C|OxkMRL>SQjhHapr4{8aQll
zkAA4-;|K^wxU9v-8~d&Nu4mAL;gk(bXZizddnDQIyX%}%i$A+DQB4?TCp&1@m1G=|
z8o)x;yqU==*S9Kyv3`zu=y2Fp&tF%TQ-PP=Kcg`Tr4co>-e|Ffs9Ql1b7=43DM!mk
z)+or8#;&QnIM{BD33r%;Bx1A@!mH%DdILIb!i-99%xuU&IpMRmbL1&5uS(bch!K*x
zNp$PFMG`Aj*``5_JUIbduEcOwCC&Do=zjuE*oWQ{EXnq=Out+pr62_S^X@n_dKvf<
zr4cM5&jvnQaYo+Ib<^vKsFdr{Pri)VBas=RJ*`Ta;s~h=^0!q6ZLnhh*#tSefhmeK
z5ep1ui+##;^g$60^R^v5@VSmt7|ivSuldH`TrVJ>H0$70(qP-ifk+qehI6>xa4z`&
zTbzL&=XXU3c1jd6;vp)-0BXw<b^gmbU_sVYPK<u41LF6i^5UT_f0j)z&s5p3K6$j2
zibyUTHj(wNd^afMDaBea0r5jE9NDpc*}yUjoP@8%qYX*-Pg-CqBLnjMM>uO6O(tY>
z#-}5HJmbsMo>}{0cwLR*v0r;M#8ui->|n8XtfPECIQ>jaD;G@2f=yylqepPnf_eCa
z`GQ4+MbZWb7wNnKO5zb?Fyt3k$Nms<ooxOj4JZ;7X$IOrIPcU$`V*qAFRuxMs5#$5
ziYiUg0xlN({rjfiD4$rlO!hQE<_?VWMgNYH6jnvJ(Htjp^q6L6A(aH}9;!}n2OBNY
z$~%{PXN~bkm{w}7F*L1oq%w?&3Pb$7q%v>$u|~M-z!Vb;0u;reG1lXc2i7kdd#CL$
zpSjAIr5!L8{G8_C?Lepp#@AnPY(uz2;RNY+)NKUHT=mcBFKEKLroq;RsH_!ah!nYK
z4}EJI{ms+jw~nee-Mp!aT{GOCfTWD$gKc;}j5vx6lUZ&>1L8eK@ln~v-26w7{9zi%
zct%?5bWkcYwe%$!MSY2Jf1JidMkCtv{0OAIqq>yEgp$Mu=k_T&FBjoIz@WK=G5zXz
zmqf^O`yP6<OilB`C^-4O2&pQjmKv-Bj)S$Ba?q0-@v&PTLf6z6D|QNl5-?M*hM|^E
z@35M%)}buN<7C*W&j)rnylzN}?YFfKrcPfr2qwm?M>8HVvwG1bw7x#iXPM6mA362b
zcN48yPxua~kFC)pn`+o+faesF*ede)r=gZBqC67AlHywJVtlyB(PSi`0ymK>GgmR`
zi!_`m!lhoX=><wyv|?LqBAtSVO$e>Pj7~1t1x6|E^l$0YHp}PZRXe!(UdW3{XP7j{
z^fmsaSmaJ@@9mzSkz%!ND2I$U(WZZuYaJx;9M={sT|FrKA6q)sCd6GF94NL*KgjD&
zQa)u!N&>eOXO)%^4v=6^wi$#)Z$*JA>6E5j6sJy-rl}_+CoNg<#v2-3a9zbMTfivj
z2bvoaUXxw1l5s;IwpK=O8wAXcsU`KMnVj`CCMTCjBRt33<K4Tzq$Q<20EC<0Xz5Wb
zugH;8WJOI!KE@NRVq`kJybNNpKV9ABo^x%q#oHJV8}k<p`M6T-PTu2xwid0G2a(tA
zAh=v58Yq2LLyeD_jYuGb-P2TJZ9xrgC7dzaEh^|1JhYpe-;gT+AdS&-C3%n^;<54{
z02`?;++vkacNS*=rgpe?Ewipt8_#cKy=1zl>3KKy%XI$wEEbJIs=|Bd5MBUIEXdSD
z*_mk_sYjs{YxfdW5z#$4!Pl&b^{#}_eIxt>Ih|81a=3@WWGe##GdDUs<E2vf%N)8P
zW(2e8f^R<_-}pxESv`wTN>APcF+`i^BEu+aC6Ud&3L9}K6G`dn<+K8gfdNp@T?0(T
zp``@fk!fGAco|~_O+2(h?e%tuC+{kjolvi$obY-G6xYV?4$}&O4TmMhK>NtNjnPhv
zv%V*M<gZFA&t8F)9Nwh`#@M<{LO6WAVjDuS%Z@-R+G1s8X3~J-=&2kQcGyY$HA26u
zyvjDaM{ITuROxN6xw1Ib{a{vc&=FEMfWNC{OV4Js<xV#g+C{P4r1rmvwHtPYCG9+<
zxLTQ{mNQ*p8dN0*1R#4uJc=RORgLP3P>Wd&Aph+=4yaMA;x!xVC<$8}MrugX?pgZh
z(ksK2oDJ5ZLFVWh+8{`x!lF12poA_dUi6V$%^77I1XNOsm!IbBVh`hogK^UsY?gSi
zPPMMqpZYk4{soX7@00~eIH1T&>^C|2KG;!Yga10ax&AF%BmpmA%IYIDo)7*KMg;M0
zZ=BRaIs-p44TDrZ#i447c$rJs@c82F)X3kgz_qeGNS!$-f9b)NL`s4yv0W-5Ln=Mq
zFxUZIX<4*&0hYNll}t=tKY`XDGUVWW_QgVD&&gZWl|$a(--08@Jvv;#E@FVd0yf6;
zZEqZW#maMNO2gZX{<(JhqzC_(W4?Wh&*3xmzG~Fs4;tN!VU9m@3T#n=zLvmcz%{J?
z<b7p^0?@!n=#u?-ftM-e`09?kN9Gu1#Xq`rOjO8*4Mk6O{nyS2L~%Mlv$t<Mm~UCj
zec2*`f@t<}7Bwn&CS_{?{O<=MoHvA)R#;JN3Iqw0C#{D|=g4?GpjWqtm;#=Ui5KBZ
zAaF%Z5F<nT2d(LkeArm|uTl(OT;SScyjg6`4{Cg>NKQ*z&`#dcz1)yR2*=nv>`O2I
zdkgM?^=&zoG=m;1j!h+Uu~G7{mgAkV7i{T<JxUWHJ^ZeZm;KTS2Zh(N=B){CzU|gt
z%Th~I@0-BnG%ueVI)RVEg1V#ud0X6kCR^6FUE6psEu7q<MHh_9K(tq@n1Nv*d(uCG
zP&DoR#KN%!@{YX~|KEx9d#1!x;i#3^#lURojC+l9QzaAiwAiNvpYUIn)Zq2RXCug{
z+d8W(f9P!T@?`(W!aU7_q<uYQQYII5gB9=a5YysDD>0?+P*A}O;CssQpPB^RI!d42
z{}EtbS2?nB#?s!|A;-BfHI!&ouDs?&{<)JNc3Nv{OvGrNMx}hg{QBN2JskYy!}xOV
z`u!O43%$@~{iCx5;u<t<O+l;sBqGXLlu55X-S}!8cN?~&MILd3Wjnkv1AjYuJuBCM
zOz+~maC(@tOYUMmomLa447ZCyUO%~jj)*ztH@o?k^_L8n=(&_Y*KoRU-8ylI=66p5
zFrBpagjO!2_EJ;!eU`iPf->#)VdikNJC8f=mzVw@EjE`k>eyuJ#eYKVnZ-QhRUgXy
z<<_2f$<L7$>K|=v962aGH<%%#RXlC(J@i>CAC(wUxw;RZXo72_f$rd&8|&-}mc-w8
zbT@7c@!@RdWfi7#=aYd1GUJXsn+YQICvf_jUZIVo&X^lV6nW~l=JD7vOF#LUF%+p}
zw|mzp%Al&QiP-eActwtMQ()grs~or3^?zdl2)r-s7-X6om2RB<oEqPI9b5HUTkrY5
zQh+$8$v0mmu2jMbFZI}ibhKi^0f4Ek-;vKeqZIu9!2oN)o}*<aE*sW8{(~RvnpgR0
zD#G6YW4RXtw!M5>-}>wzF7Ty|B0tLK=EO~1n@a@7U}^Lu7`3xha#T!zXOrHT;BGNY
zGys80w`$pu$cVE3HNP0+!6U+K?jDm3K!owP@ea2`c^cwn{^Jo6<4s%v;!#K#72!{r
z>^zL51b9OAr5e{kb0nHtV!~I*{O+j>4a2`I`v{Z=Oyac-$1d$xsv-9hBR#Oy2lE!e
zQmPg?>9e2)VE(yUG~oyGZb=q-U*(#7!rhKUya8|ZUUiwSD{Z8~#rEU3WXY|TZR)hz
zP+6r)w9>fax;s$koH#lK&YqTM=zUyfC7fT%TGjrs!pusRA>91Vmj=@1cq4Q^&fmwY
zUxhd2k2n~;HP+BVVn(xrIz_X}3A9ng9WZ1yXeoLo7n^QxEPWM#fa#h)0Kh-2pMTGF
zI9bV8X=xVziP&D=V??orTt+02!A^?qne&+&j5y9#j+1&EMgzf9T>Z>i`84QdlE5l+
zDFmUUpD&Fgb18icv+S;_hPBu;HlFt2Y1sOMRz-$LVGQTs!bIVj+q2C_g7KV9gVxMQ
zb&kv^!MqNZ_UFIn+t&L?io$bEU!bD#>TUr5IR7x-nhad1aCtWPWh|)|a0j(2TiCJ4
zo~rvOQQMKP3M{A9-KxRRq6lAOv~C#WkyZRy7nb_bgJdRG6wv9QFN2a{mg2}Z1EsS#
zqgMwktBI*hrifKj$5*7%CTQMfYS9sBMxPsS9W2O}TV1$@sIDw`l}xD;I(;aDwuX|W
zsO>LE<|9qt7?%_UKjv58pDXjv1E^948oIKpuaT&)8ka$5U1h}5WhO7wbuJ6%^mt~i
zx6hPo2!_xoR#7A5$Qss|am9@ufQWAZkQkx}UhWtcq&;FN%yGOIqccOvnOZa5#$&4L
zg*cY4F1lk7_6o@JpZ=_$9@U`B)D&b*;eHr0jwfL*2=^I-C707>X!pDsYVq!DFj6u;
zhwsq2bq+q7-=HzJ>#ePR4qLzY;)WPF9b<7>adYw4l5oPnf$8Dqjse>y#8cEyb;R?s
zYYPth9wxy)qW0~cFp&=7SUZ-JKB<jpv!w^jg6z3FZTIY?{@vgVrAt=R=!u7_m5(l_
zfA>J9lql-AUzo*~mK;wNt)ZQKcXW^Kuvp!oOF)7NxI?V5=8&xk@g$8pC-IooVDQ`t
z5yk;EmwVsuCei~@A_K|YV?GH{B7&J0{)a2h3TNPf2<E9vwW&%)pwyqblpj#Rxj~}1
z2SC=hhfZ99)s~LmStvC~DiU@<Oi?@3$Mb;3(sDkkYC^zc<iM5rb47mJ+N!>2)<#@Z
zNQc^nK$*di%&|01Fv5WSd~}V)tlZl?J!Czkt79&@QeQnv(e{huqU%eRlQ<@uv{ffh
z%e$&pP=8>nk>)|f2^B9z>l-|dp(iG(qF7+Jl%bQa)-C6w<lZ{ACm!73Onz^Jvmrak
zHAe5?B_l2G0s^?nZ{c2QUGnAGryNlBP!p5Kpu!PkR5JX2;I=;re~{Mq(m}&^zN5=_
z#jL}~Ol9qT<7O}COkBqlC@lUUO=5a88pPec{WGntZ`*GF7_P$e;jVT%OIutIVu!@l
ztyfj5M@DLWpl0O^z@Lz@ItE8JTXV?Cu5a%sZ1N8Eo-&q-s%`2afvgMNck3<U*`i#Q
z))+jp=&V3|%uwpoL>%kczx&JMB@!7$R3(_sU)mW&k?shEi+Y-A2$^M11E*+Atkzph
z@5D4+mC*7mt1()NL%Wb{DetJTE6<X&0W$ru2iCMu1|r?3l9W}xoo6zRVwc<{uO{g;
zOPlC7K-@}bW4?b8cd5bRL0`{@gtT_a_DbdK!p+>Jw9lFKai|dHgQJTGE{SS%D#bF&
z=gKh1Eh+#^idjmwOe&q8pTu;EyGkTalU+nIYG)xsoQ*txU*w<PM?2eFLf2vx;v@Ga
zh7%bR5%3*aNY(7=(G$AkVhtmikB-Hg#7J+VgH}@0B^YR+6*=OC43aI<=VZe73GNRR
zlxR)CoKC$I|6}dFtH&k{xUbBJR5AcwB2JJ&D8juSKQJB6DF*or#z~Y5rz#aElxABQ
zf;62<rB{e0L%q=OY`M_DuVR6(lOk$i!AqOjiAFQ?VpphlnU-Qjv;GnI4J>uaF!Pbi
zMUX1W^&$@4kBW@4s!7a=Q`4hr)xJtXxx(5ed0Hs#qG7kR*g*|Q5(eG`xf6nGMkPGT
z6sr)gJP;WDP)DGSLK?*~k`u+g31qEzY>!3!E;SOtp}Ts9dzD%%G2Y@(8WTEw+IG2Q
zjrweP*>2HUfp3&L_dJM)u$V!VL_37RC3&%;S#7~i0W#2}#n@kAz*wy!WXpO&l^!eV
zSh&eL6!@x{`MkG)VR9%(Ugc0VM^0Dl3uj42{S-%9OnShzS{om!ltG!q7RN6JxmFCX
z;wie4+Af$^$#|$JtdWp-)_~c^N~$cxl&M&ODU8V!0T?=H5`>KbD>23*LDWnJ4ecw}
zfn5yC=lyuGhaYtN68GEFkQoU^WpQktV`8IGe~47k4&|b5{Q%IYc!jLw30eAFx^O91
zyh>j3RKPVhBj@H}xTBR+VU4Mi@yp^1HPOJ`x|rBLtjZsmTBYsG+V=2l-iMPoeF>{a
z<@h~+WvJ0=q$klQAmE-rsw_}zziHB$iGXJSd&yeb<;dD6sxx}R)B*Qtyw!4cjWw}T
zQ+;Qna;_Btrz7{i*^JU>Ll<z#yNYG9nbKc<qoM+(wwtN=S)qx$L;9kxznLO=2xc3#
zQ_i|Prel<{HNw>%a9CNMvU%S!tCpHlaopiG$ZU~>x@>Xl+HG^L-QMlkRhcqtf^m%0
zF+<1Xse0n1Q<HpSQ`YVTRJpu5{C9=b^}aNJriMFz`QqwfN3v$X5K`~ck+IkirnWS-
zjb3wMiPS}`G#4Ti$)GOOR)fkqKa1XqWD+hnSGMD<1apq^Qai{6%jB5bO!YD;ZHY|l
z&rmc+JQaXJBQ5lhcD7~lQzF$lSjdy($C;(gQ)0)Nq)bx*M`a*Y#{$BB&bBpPT$0sx
zX;s0^SwogRA{x3hEF$y7heTs7c871#v7ygQTo;Ol>d>tGW#lZ{ibTX-570SE#s*0}
z&7JQo706ykrxH!Yl7eF9886!I{zj=Tsg_O(gikb%hjgl-C3&d8kU=P%<Kqw-;F{t?
z_L*m~1`f0Y(%Ti*D*GStC{ensv4i}A^h5SKa2cu7;-v~O)06hz`U-*G=_{VhB%WeD
zA1C**gbrcvg!3z&FVfgZm#eZ=JY4eZE5j8=3iXtul(T4$0IY`&$&B(5$@CZ)Aohzj
za?1$s^M88KGRC$=`T8CD2S@U^I<7~ZYYCkL0UL#uot(J}Im_pu3#Vyq@_c#vLiHbc
z%X!T+SdlRIY}xiX<L0_F3EnYHjoX#Poy?=Ix@5C(qwc1mW)vZnjI84#O~`TD1$B<&
z<zgb9et7LF>7=tXXEGAxjDz(fgS>lXD<7{vj_{-YQi89d5^O?@%Zlfm7Yj^=6ZN(%
z0{a#-gIbo$lv(rz;~HGx6>>{e7=bmu-_3Pq(>kONoZ7h!M<#oA`Nzi{bhQoh)SeIP
zH0w4pW0jck-Nc<L&Lfufm@LnE2GXqRBjLtdL<~WHarI{7GN%l98cl2!PF+K-3yu*j
zMp|Rf+ZOqfjc5aKs;edg#Z4NS&<c$Q8!908&eo|ECqZmjK&(0Fv+)rK>GQ+}2MDnN
zoz8Ps9I#Lsv0@f4+UPUUOAKyR7%hn_AvWVT2CX2v88BS3>Y&X~i=jJLAvJeYLe9Gt
zL8~Z{$y^6fpf2`q$uslCkb+V$4JJMWnc@KRYW?*`m0_0j3B9+}RQ2dU>TA0);tj?<
z!0L|x=H+^1Oi%&X5mlNw&sc?1Sca3WlcSQGBgic%4BHgH#C@K|EbEC)si%R324aC2
z3Mq2?W@y8kNyS8Jn39mxMpMC6`VnBR8)G9R*z`z<Z&mo4=so+JqcH2Fp!Qu0hmQ+!
zzs4ZYy((nF--=_vUt46l-Sb`XUU}Z&C#!RL8>{(5v!jGmOy2Wp16)cdesoDOaX_SU
z1y9yOU|6A<j7XwvUgm$zTfY=M*!e8GX2UY0lulm|hK$nKfCZT~#r_n`>n8x_fI|M@
zj4cGR&#x)5x`kljOEExs%CK-)PTiVIRST6xaAw#V%1Z7xI%F42qa}G~O&WPgEhv?Y
z>ax43hF(EuYT>FxP&VtS+!td_2A)p*9PK-~z!bWoROeL_NDMy%=uF%!MExmzAnt#M
z*jfT{r7$DmcV8}$(elGos&qWIPtMEmdA|engpa8Vd5mY**s|+(6ay6I%>U#2VuBl$
zp(0y<@{*shBbaY_QUG-|5XGrs?gI3lcE2f26Wmg$m_a1Xf_;qEKRL_b6Y}*51pR?_
zI;2ZIgSG)WrY6$tOR6_?{Vbiit6`Jj7kNsceqF~oT~>WaW0?^?(64C6rRo#&JYF+i
ztv?I^l_AlbA*vXlreXO-5$In{rWICC_PMC}$gOF`Lhw`(V9Jji_O|`Q4@UmE3!{tQ
z^=>k210o()<=v(dv_GoFFC#U@i9bv<q<;t~US0;bZ-Ncd#uew}Xc(yF_NN1sYF~B(
zVqSJk^d6ac+Q(pL{^hFu4r&)sS>d$)Y(*m|Uvi5r#MQhWQmSg$>n*(C5PDUEJ4###
z`d}bM{Z_%nvTMu58N~EYAEgCznk!`dh=OcE)*H8&e>i5BdRje9chP%gsNwSb8b7R&
zpZH)p9{ti*n*_#R#nETH5K2cE%GiL(sFEUlLR47qUJRg#_}T<e;(PD6k3{&G{dyjL
z5;VzhsJtE#su>H6q8Z`gk?>tB8qP2wS5S^l&7{zI_~k|dx;?&OrxCCm4VbV34*y&W
zGwvhb25DwH=h_YXtxE4#yekufu^K57L@En8qe#v?H)Fsh3&C!*#RxxI8i)sqadCR&
z2MR`5{I?h3!T?8w{5=p_@JK1_z1%#!$+iz}91)u~en%I9%3=qw3KQh_t(<EXQ!JJO
zUX{&NzinT~?M`aL06#`wcBlQ(=9nheFa}+Ok8T7v2%T~vOf5l{W*!@KP-p3P9$_zm
z*~ES$b~*OY0vV$Fks&mAw=)%ERH?-vU?w<m{}cz+X`V+YP`8YaAG6F~AcK(}z`6FB
zYZ`wQ?Nq8ILN?XZ(~#hieAbm_HzWeL3z;ArAgLIi+7-#t^3q2q=<Myqfs;swDz_Dc
z9?#0XW$u9VWi8RF3ny)<Cd*ItWmPbdgV$SVI24D%5N$bdT?FeTrvNpm)geGDV7B)L
zFMP|JT8=TZS?XIe;C-Ax;r{;6+{|{swTsY)#1s|;zK+<r`8c~55YypwUd}~N>?AYl
zBoj~<N8x*}$&!>k?w%L?b*&BI?AjCqx`J265Tz;GrXFZQ>>71#B#h`gFr^9Ls&-ek
z>HxpLiIy@jfLphcIB)>)>>AQCr7z-J!2w*pB;)VIJSd-FUU^Zsw0D(QLa=Morz>RC
zMcIPtV9HPHGS7kCn1G~Nb*dF0(Jc#ei<$)q<Z|F`jDXE1lxW&QZaoyIKJN$&7cCIJ
zE6JYCeWxaaxoS|Jx{OEd{hnLpEt{eaFPj_I8bo$BwcmxARyM(|r~Dh*m$yQ&6>OVU
ztN++t7S4JbwJQnhP9xIC#E~K>p~PmG1pcT#Teg3NUBpIYij(S*#_7)(k-`U|kRn{4
zG*>gf4e_*%BtViH!zB*l>^hyQj{}Zztm?xYp++=7Q8&rPL2rLu?SODMZ6<H8B<jGB
z`D|m1@M@XGY7JM!^m}7e{*G;QM1M$$&9<^%v_cX5!cM(ih7+n0THPWM9%)`Zx81q(
zgth{|#Sc?9;h%_t%N#Hf7!baL3+%OLMk(YjC~nnwRoY>1{6vItV{jg&0$y7|nAt&@
z+F@oYz!>Wp*@xoy^z7V4A1F1%sy{c2RIm?~qsx|%iRyI5G>6N(F|{^9{aK88?rnvY
z?6vvhNrAzeZrj5tTtmoJ^Fe7ZE#oPt1{G_Ci?vF`AS-9woYxi^&*9^<f~?nL?cA=R
zS{m|-bm||XGV?BiEQWqvU1Ue!p|D1jMB!zC?vO+8!L~mtJ#+>ltyH9Y2M^k2G#L|H
zUli8I2%!-OZ!w$kMe#TO82?=}@)H<9o4WieOGSkwNxJ;c;z%DN48Rybri#jV(e7IF
zj1*llzGz?oAKOz_+aOe=f(B=(eu~={A^WNzl;sgKZLzUE)!<_dutL4V4mMLHGs<xo
zde9Zm1}4wCuVuNG$+ZVno(m$Z%U?QnL>4Yk8scK7LvwhyH2mv*+spYm)b{0uvV4Y&
z${Ofu*U4+57xhu|Yu9=FYDaXDPK+o}DeD&wYf&~VZ=w!%MhJ)l{=!3}i<ZA;9Fe2*
zhKc;uNm7$1JEY9IG!ANE)pVCR{I%txb>PX(E<@e}9$YCzi5q>T#nd)3^dyjmA*`+<
zB9kNnxj`(n#*3ehqeaKx;!z*)g<yY&44So<@T1SxI!d%7{3R6%LLlf`RQ&qzL#(e$
z*$Ea4?vr~LVB6zO+DMn<NHPgZsEcr4q2n?9cf-go2Cm#UgSU{mC(buk%{m6$P*XZl
z^AlmWJ-Vo_E#ULKXVb8FoSi`X2Deq{jZpn}G45Mmn|7h360h*wJc)N3W7SpzhAZdL
z!p?xcOvRthTEv%N@~|Q_VReIqCxOi~zwrSg)K7?X!<Ek?kB%II<=|9TD8d-cBNA9|
z(a+5pBZhOpQSTPdh)y8VrF5PLiq{_qy5mk4-4#QP2(@3RkV@ytDSo_o8|fB)P7r}{
zJ@S74lauS8Rq<2ppOY&D7ytnM|Ej29r~8jmuAF#1s{sa-;lH#`+`)XD45Z~;mxFj4
zC9%9PLlZAs{0dABMJ(mk9KD~4)m*3g7eW#@?d`ozo_{rTB}mb+x)@YSaY#Do(m^7Q
znoSk`ArG6t$r?Q6rm;24MW1wnt*tc2*)uO|8eay@afb8ZzwHtJL_-Gh^<xmB<e5jy
zxb4|wbKe2r%rqFY{pI4_E0atkc1uYMU0k|Uh&I|1<I8^2g#izKGB|@J#z4G^34H}5
zGwyP*u3Y3IKVf$0u#qsA5D^fWDYNX7EO*{yVy>r<9ksrsSYIJd)0mj<+%}2Zxg|_A
z>`!$`VH-x%o%flAae<h=C{AcKBc7rtEiVwYwCjW*e`0QBn{Ll|Px@<{W;3xJ>Hs{b
zJ8$j~{`x#2yxW<Hyb_I0*O9Ssvri&dxjn^Y`XTe-wt62{B3K{oP{Qv<`#f4xdk7+O
zPeM0{gR=SYKfNLUz0nv@q~>%46aZiZ2LJ%;|8Z0Pvvo_u#tw@U;U`=28-Bim>sk4}
z<qyHOJ!)NiK_YrcQ9Hc&*cFz2V^wPld&uQ;@9vrvK~^vTW9g?O680C<<CHs(FORh>
z-*id;KCfx^T%9RugU2O87~Zo4M~y}+$<sM}F6ElZ=Eu|MCOf$vWSqhra=qLcY2j`i
z`A!e#T=k_#u$3y2<J#9<e_(kn^qFK!d>ZhnIg}tE=1WZteRayixy)#_20wMRV5R(&
z8uN9<_C&IFYr4hSv1!RU+Lh#cnXdizp`PM3bnb87l$tD>4WwZ}5IA`nAQJIJiS~=C
z&iZ^yN??l8LVNO?L{ca*Q!FOZUZbdZ46nb#Jp<lvj(_=nl)7-eJ!H_bJliVLxHdUT
zx=g)XeBZ28(G*Dn%~=Md;TZ5Y9vbVU>Lf^S4JE9y)aPUK`W4$b3lX5HBb@?YTR2EY
zVlRsI^u*=7EJi#+>)~9|VYNoEU@lVGCtrdR#aXZ}!lzU%<Oyr#d;RU<=TG<opBa&(
z?<bzpewWv7p#V+upSM@zsqq&HAOPC9X<~si;0R&1&9GUK;6dHm&C<JRkN9!3xJFbW
zk*F3?$(~I7PUA6zEdEMGpR)Wk$8r0ivM|olsbONIijaOPTkcblP0Y6Hk?C?~bKUG$
zx(-?~mu5?=lYMbXKhb>rGUoXjH!oV=?LXP>Y7P*HBh!#CH*Zw_p6cA4TT?;UvHgVf
z>lDAtqI{;*)mlS>42#3B9Az3JycdRm_54(<;cZ3Id4!PR=|VH`z&xN?t7`1k#T3TM
z<jIuPEnU@Etd&KlE}={9PZX_uDTZ`sO^8W-YVA$B4N?Q0$^+F*qr-K~d~*>K8CtgR
zk*;X6KZHCO(=OmGw(A~1`GaYaJ;qLYGeCU@<s=-#gr*O7ypeHmJ0H(EE?YOD2-=Et
z%4M3b94J}Am^&h>p>Ejo)KeByJlTf+&j+pUYlBz0?(xyiY^(G6SxY}WmmT7HHpBf;
zM}PjDE>1&p2oYi#{ifzq3|MPHKf8mO0Y2zAen`-X)YB(@qJ|b7y@`0PGSMS>OP*jx
z(q9K1=$%+jH$bn*B%B*b%F5YFOl{6zd1RXE_2<1;V>}sBR7S8#FITzU8fYEqB!9M^
zH@A_~rAU!dY&om`oEE7$E%@~_$Au<pK0?JY1Wh86Z*LX$OzG<c2qKs519CqrtHY;=
zC#FY;Pd^ll-Q&RXHD(+hCJ24^5#C7`*v%k7g5Q^Wn?`KNi1&=P0lPI35EB9Vrfy72
z)-TW*XQp^^Dp9G%GChCID~!~j+q5dST)K9CTM5W70Q;yjqAVQY=@BuOYpnP5X+Mps
z&xsp%hq%j5*eR!=7JoEW7Bo<zg7XC#w5a+a%HYn>r-yLNHNeC2)aR`~$WlHjAjsQU
zkeHZ&Cl|4cd)A5>?YG@RvW4dvTp^oIVI0EEPOBQVAVu`$S>lu6Jn_U^3b9qm#E?ah
z-9fvCZQUh{;v4*U?y6w`+nL83!2fG|U>%X@i8dJEfB>U6u-QtP4VSy4%VGiy;fowT
zdY+*UA4kEo4hxj8+zq1k4uq<O*+pGCGVc+3OIJK&_A|G~OT%C`idTo>&`6raR`Uak
z=dQw?=#<zE0}}evZ);zI3J0D}yCv(EtNkl6{<-zcAK=C3NM`>kR{{sQe*w>HHuBxv
z`t5N4)}~!`!n}MKnnelwSS;PVVQCzD<=8n-wOK9NSwC#^_Xjn9%&uW``x`|-;V)+-
z37-&(%QW`Cw}2g3KIS5V@N#|$K}9EeyvTYZI*rHBOHgw5v(KOWK9&vY8^*x|)*Q?M
zcVqa9P>c&O)*yoXJ|l_=7=y$q?6FsfKNBVDPC~&d8g<~=-SQz+z0(AEE4!iM@}3yP
zQ?4QE7Xx+*%$F6KUd1jw;E#r{D0*iXhLckP>t`ClVIi_i*<D{8uxALMAH!o6PKjP8
zzi|xz%NhLtqmObnadQ5D>7yva=r%w9>7)8_0RTw<j{)-Et~7SGcGCN=z4&^@jux&a
zj{m_WHT-Xu9I_$(X#Yl9z->1pk4m(34;n7g?5%AGml>Usc(e+1BA7?ShKv<ZD>`_G
zeZ6K8QffHr*6=>b)32nCdH8T-V={?-(yoQ67c(WdYlb-FZasFP?^DQ7(4nR?rbpp~
z_K)#Db?;%Fh@h1V8!srrt@|JisyHV+vUbBGVg5VJR=h913d|DW#o@EWMSNz@6s%(N
zaO{+yi{-kzd3!rT=>53|B7a&$VQCM}mdf3IRF7NqiyMtl_F$qOBhlA@2|0>4CJ;#w
z(~g@;j6TM83>vCIZU%S?_Z7((pHLhc=ZU}=KLeWNta9&>PCj6)at!#{57J}^(Ze||
zDpx08rxhlON<xC3ZaumXvcSGlCl{EKY9vA=b_l>Y)n;T#18K}?E2WHzO-O)D5$=it
zi3mm+PDrjcyw+c&TEZ-*(KxW|v4*Os>Q~GRoEZVlRMRj@r%w85V-@XNA*t&bA)-p<
zQL55zCDuj?VCJOBIPe%y)G)9MJ_}jwVwJO`i}fgYk03FUk}a8kWHt!#wLX99AdyV%
zF%@kaBh73Gz$}dyYz4Wa`L_g^4=SMzInYNKoQvkPL9@ERF@qIVoLbH#8VtoALye<Y
zi)YTKn4+9wLbg|2;f12p!T%aB-ILmN0{C0oJ#OZ92DASKMvjXiU1P`ddcfpAIc|RD
z&i6Dbgo6v7>%|94mMdrY^1;V+d*1%@2A2J|mUr~k;2^-uh1XF5kLvE@u+POi*o+55
zChX>|0Ga}LB*{NGdh1^!z=Zz7a>ZZAfg@yX&Ye9Zz0cE|F<9HC2{~H^Q5TXU<ch07
zmtE+se&?mvJ<kgrIdAZ>-uz2=QJ>cd%$GT^CFmJ5GaP@vb^I9d(it2%9?=Asu>CCo
zt<O{9QF9@`u$ohtK)U))qfbFyqD1raGU%UXX8ZI0_jQ5Rj~$uS$mbkC*#ro3gSFlZ
zJ&ui-7o~8lw>>7<l3XW|6=I5?r!Dv`eJl=p#tfKo<HQ5*9W%GRw^D}8H>~dRTW1Bi
zxz!5=D8aDBH*daY9U#PMIGoumUGN*@Ekeq)Bzg#BtWB|-d@ygO6<cCM<lE3ABs@>v
zj=ST9eup@Km9l4A20kDTh>PSh)O#4qnSr%-jCS-H_r1BRU=SY%AF<8(SM9&%+J#?I
z_^fixpD48ESsqoO&T6&vZGZFlzoHF8Nk$fo<lkyy2xIp47U=%WqU02+UfM~Z6@!}2
z;}=IF&ue)P`GAXkc4+SJOe}S62V4ZvppNd)su>mwu4`ST;FO1}LzxcTv2r*^2$#Q(
zEm)qj=bq*deW{Ge3q)O*sH-f#bc-L%lox9caVB16rBR%w?+VKF8qVXY*)*Z5x>2Dd
z98gJfuH*rY_V|TqE1n=i5(QKXHfZg{qS1u;Nb|H37T3akb%GX;dSxB~dz0^@b12`T
z_7Z>l#O;PLeqlUnIA9wNQ!D-;_S_)rK<W8Szi6VWdjSYX3WHQoJ-{$XSj}ivFobR*
z@EAx}vg_cxwv#Y98(4i)IzEO8H_P4K*DnjQYf4pxW1*(*is~@H9X@{3>&3K+kR@%x
zBstOuE(rdJ7e2wnN{~4Gio(mSLg^vQ(HeL1B4Dk}gJ57ugoeZvkN38r1=CGCQe|S`
z{0WrLIU(t2c_GaZ!X}T-(IVv_d4Ly%Kpe~_rR2(s%FJcq?RTpm2_wn21Vm*6h+Clm
zp+88pe5;tlIG3b~QMd%106nS$`wAsXz29MTM@rOLlRAX=Qia5f2{yA2_jctp!zgnz
z)htMv2a=G?M;xSjWApj!Utmk!hmn>2JHbHXFsuknKfz8-I>4Q4#sf=w6W|%&GVk2P
zF|^>bKnZ%A_l2{tHKL1IeSK>@T2MnsH>}Ept-g4QnA=Zu;-p$s;XG(9ftxj|M|(=_
zlX5ANy0T9x<2&ysqXGV>#j0}2-gET00l%`7wv|rJmvzgV29`EN!F0jKxSiIsJ9nRz
z?AEwrHSlM3O4xNX)b+G^ZKt6+Jy|PCW@-{N)RSgq{qi$@Ed0Xlb~th0Zzpc8SIL)W
zW&F~@#Jz>V-0Pw^Uln%ZNCmqf(I2jdzvcmRCFH_`bb(}JFWw{1p#tyL;V9P5H=kL{
zefgL3YrGv&Z05}>=TC!j_a6mQ^#;)6^akOlrzVx$f4rLL#`NMPrCS6p2U-{V$Pyh6
zKTe_iRE^<|EyrRxQ(bvl-=2+X(Ye-~nf$m*<(Kh0tivblN#wmVizQfqE?=j1v4Gg8
zr#n8wE%{>%=Mm--yiI0tw|tJrJxiVbYsd9yEbn$7VO4uVAAVh<+A<?z<94c5&K%}S
z*^US~vOy7^X33%dM+bYiWfRP893;<++hgrRW52g4gZW!`W%fQJEfnR8T$Xr25Y)B>
zaUyHJj(a0=noIcpW+Qsn=61lPHbKQoiB~Gx7ET6M1@~MJDil_G;d6{cjw^G|p33>G
z(PAmlCv^7))$ihWL*SscNM)~mfAr7qZpF9B&$arUnfuxp?^1<+WQy~!eVPK}0-CrF
zL;Z2v1U%d9%8D+z{>bro=c_@}5Ym{epc1w9&Q9^LD}y#uxjUX_q*k-}rpC2E#;M*u
zjfAU)O{7?Va{kGqt%ZnBYPv<{qm9hDa&b_#Do<1l*fzRNbekyVh5<`RVHk-sNZ(&G
zE_WR+n0$?Gq)D@j@S8Df)`HmNGinTb9YLy-me}XJc4!xbicBSXc0X+)Wi`ZaKHSvY
znHb(?4Tr!WUBOhFyL2XG5wz8_H{29VDwO7amqY_O6h(s)+n?>v4IGtdm-I)}l_GiG
z<WpMitoyJIp6%}CE>lLj$^plgA|GoXEBD7D@!QDo_8JYFcP_0cx_ypXHQ`0Yt~%D?
z9E-gv*5@df)nNRb@oIvIoN-Bgr2Hr`KxsV$+U5uxY~G)~RO)C3T#pjET67?<pma*G
z$KX;%n)D^N1XJdI+FSu<B<4*PJJ5<rmEBh`Hi>f+FbI2P$l(RW@b(W9N>!^st`(l)
z6_LrLc*B81P8Yq5?mHcOv_(+bjv~n$%+W%x(DzY_aZZ_2px4-Ln9&%`okmTW<R*-=
z?2mKpT{;{3kf<)@-tL;3`UPIf5x3<qr5^%7Hrxwrbv7Z6NoJ^Xq_vKDTB@`c$8fsx
z_m_@bTh}MjMpmU?lR>Izbub$yIXdBl1JCKERko3ID%klIB@UN(P%Tb@bW*HkX>|(1
zLmoE2OpcF6I$!4$qKcxO=G)oG_v}-Zo+it?QXZZuwlXj`ZkcmjZPUR8ddZ;y?H_i4
z`G`4&3<6trq5neHIkjgNMaw$2ZQD*dwrzK;FSc!UY}>ZYj&0j^a(bVu&7ZI?)-!6>
zs8R229<jCt-#eb5OE^?l504`+x8&|E;u6Cb#u@HL(_duqy*&wC@vVj2{!SGO?^)Y*
z0rCKCSU%l#&sPVr+N5xU7bnp<|LI}okSMKuh>Jl#!{$to1)P}{34|#evD!ui`^<^=
z+Z30#jAio48^t5IgA45CWR@z#2R*Y6Y@<w7rcE2}yPF2-Z`^tYGy<vhQAEm{p3x&}
zEr*6(v}LXOto(P1$^^xRk};fz@F{aTaaR+yaTF0K)UC!IWg?BLV{Ruv-KNQ0fyTF5
zm64eKznX^Cnt>i;(oK2%EcU>9IEV8RDqZK$;iQ1kqIBl4!0zlU;&bTF)lGLUXM2Nz
zh3lFi&={7?rK6f))iCWksb1|*Jb~s-(KjkamT(N-j>0l8@fWAgqunsfn6#OTVwsQk
z)%X8qj=8&uibnkNVSM3$fbjo!8EtOrY-jKM+vz{a=VbK_+YK%xpV(fb7N5FAu2z0J
z42MowF*9qB*uy1qOGUI$k~wCj2o_Ol8^y;Rx6lsFc63e92-E4m>8$3VMe+y`_CPNM
ze_M|nqGuji17&H_#i+-uGb3foSZGXZh<=N-BgcGL5H2T2jx&YcgwV<43!a=JCkHFT
z=m|G%m9TKkt!w7Z7x-EP5yzsTp%>69wsUKD@c+mH{Re%(Bi^#iBO6Zs6!6E|wa16<
z@T(+PsSA-%USTHob|=?B2LEJN;9S|n6Ha${^w74L8p{nnWVXN^DMG7MK!Hp-HKeN&
zE>n^`w6Msif&|0tNWP-X9ZUqWGWiJNe!%-AxtwDXwcVBmUqlsZHIjr>31t=IElBpZ
ze^Cym=7DXhSH=a=p$5hBka@ybmtx`}1((;jv>Y71noD7}T{s?ANnA43zp(Q&KsJV(
zJ#<0_JBpcG5}tYhd4i#y`j(pZFLr7CUr~oo4s_YI#Ny(>VG1=mSL^fL*!drG70^p6
zAr(Nv=#ni5^Cg&0LSeB#9gP@qp{m>Z3Q>szMT>@1t*C?~ssaPegecElZ8Z9F{R68{
ze6cM+jon?}qUavVEl?b0azdyKOaojFQF-!SS+E)_)+{iKP`d)qw2X7+t>;@hZZQJ?
zs6NDIjYVw<li6(!A%Ed3)}QsU+nL%QbHv<tQhcKSK%F@-Opk-TdVRlq(C7i=<i>28
zgP6iPtVVhJDu&gTqrh}SM;Nq&oq4ng^3nB}b`x{~+^fyNwQmSA;|MbCoitjHxtGM#
z$V>#mWh+Po>pKkk2)9`;^~Hj+Dbr?@!#A3{4F3Cece$wRFd*m*>JUXmyRNCre`9ap
z-T>Rv-GC|Yy=1c$6QkE?!T8YMBS4Rp63EY%9wTWX3y+aTe9X7szCW(grQX1Wqsnc9
z&kWKS=0yG>s6v!H{>%vOJ7F!0VAVX-RBQXHE#PUbmzX;rxnwz+-MA!rP9`GfG{~kw
z<c}V*7uql)<EKBQVV}Wqhf0Ag75_s``_v~io$gK<=DT&Y2gqcR1X>cp)T=l0dzPr^
zI`Bi6J+}SI8f8+uR}c%a7Hnauxcv&VX`xY#n@n3#*x4wS?J?X6AIfT(8T-I1RUZB$
zA2aPa_G2V?*c68M2wrCV5_ul(HS6HueVYP*m%OjB;qh#e!b0HY`RKObA348(-+}Di
z;%U_VY~NgH{B~wzR2DOt5O}Sv<GbCe4%&Ov?@FmsG&ixFexO-+vknmQ;iMw+%6q`g
z^u^NZIQ;!*CQRX+O2Ck9Sm-abF|aqN^(oSQ(csrCntC1ita@9w2C?8(baogS;`=9q
z8#M}_w@%NS=;lSPVJEpNSa59kLCi=SLOueu`!V6Y)#27?2M$~;O$W^Q3ht-NVzbm`
z*Dre~KzYjA+qAqT|FZkORaOTy!;MF%Sw63@w8Ny%q$<FL6e!<<Qs?$S?V)oIZ8_Md
z1r;#hgMOi?jrWzXfL#PcYLacSM{5)89K`XK6`*eV{i28;aFXGLXHMcT3>PJQo_8;t
zwPr(>SJRThWSu{foOsYlZT*&_wrCOygQ>NA#<hr0bpSDiW7~U#Jve@xNA)aUP{982
z4s>_aE>B-w3*1>V%nd%dFBZh{NKrq<4#wAQ9fU<lO?k_5ZOM%bqib~@e8W#eZPLzV
zHiHJLu-6&&MCw8<8~<S89&1)%qf|FMtv7mK>LAScL9#@x@)nz$JC5D3JFBPhai**}
z)rb7Pe81$6Eosh+*=-E}<rDfQKp|KI>>rEbfHk0%VzEr}$qgn$r#q!iAh&kmX6E5d
zMbB;g_mG>4UfAw9s+y(8x2GR!dKqy~pRvQOr}=qZr?BV_MRzybX)9LijNgC71Qw@d
zh1^2{0cBtV{V$ln|L=)dn>qbwALL3Cpt3RckE#6?$)GHCnFlVw^oL84+#0xorKOfE
zOp#6o8UQC^Jx)7rz_{}B<vJ5>J)Q>ta$UX7m<huCC&xF7e}OgeY6izUbdM;u<$ZM^
z*G6umr1!?606EqixwlgxZ<bNGSe51{Fjo&Bhxa;c_wRmij1hiSUa#2wh&_}re`xqH
zou^3;R_X7|H(q%XUmhuUEPu>brU>j?pnZFkr*y3LqX5h)10?aH=LpIdB=LPaE-A@L
zs>e6~7ry!YAWUYgMvI}u;5Vk&0f}p4()JgWPo_myyif(+wjf`u*DQ?TqLAen&3p1E
zc=fI*V!R^TClSIBN{2vVa)J(-$nK5X_!2Z;WeFsTt{G>vU1m5Xd`m4H4B+E#;moi6
zQ3<+r&n<Me^Z;@f@SrEk)9nG=cK5w`znd7<I%jCrD&N)IXw5ix%k36sa^h)Grh60&
z2Rkgrx>RY={h@VPvUH@4=%^<$6n9eb8YM6IYNpuYtT9-HeYRym8pJ{@z4U&1QfWg?
z;<~<3CGkt46>-A>L6XqL$GMZy#U<cr>F9m?I9_B{v@IfnM*ets4M!tGQ8rkzy?rj+
zcrUYGyUy~Pu!9`H8+x4&Q&t&rTs=cls5sfz#WvYF?e@!->~b5xg<C^&EdZTSzE)$N
zBC|nz`@7II*7Z~a-<$Q41Hn;<i>{3ZMM9jqm=-`f!oY%Ulc!vzPX*|?zw0PDIsL_^
zqtg7<>A>S;^6akwrv=+A!xgR;?G!I+*&Iz<+^P5kR5nY&l{&r3IRG|?vzKe@L7Lzl
zJALUKOO;b&dkBA?9#e0+4Q3W=;Sxz^fpb?lmYNx8s4=P!d#p}LQ|KKB{f2cLH+}1R
zg@_VK!l|VUWGR4y&MIw34sNoJ(WQ8q`DaOlI4iis!8R*{Bziz5-0{^Q1BY*em+}S~
zt<>$ZEoH+=j_b-f<B-MDLG~kai7A`Ai91%X_9Tsa-2vW^pqa>-E9UAT#~3;Mv<0y4
z`tOD!+cmx^%Y^}n!g;xGNe<Y(lzu>bi2IrRjGR}L-?@#8)nSvuAKWSwWJCxE*H#^+
znk2`TLenC%l>T3mlT$Y1Dy{%_k~xGh)aDnNvD5)3g!XmBZ3O*krnMPVb<}5|3yAmw
zZiQt64*8!Vd%9ub0D}Wrasz-vPS=T$A6GxkJG;C$f$bI{eHe!~BJ8B~-~H+jc)845
zqH=Xxl-Usi+g2?@W+wW9#u8xJy;cz_*}YS!iOyk9UlTtU19O+W25!X>V7&fy{s@q)
zSE!>7j+Ik1u=`1KcN8*Y3<UQQi<WW=x~|Aoe044iy{q3VOP9KMrJND}BoXmTvo9Bp
z0*Y%;a!}YeO9`;?clFAT11myUBN3h<c`+3*tsO`fo)4O1k^LI3#~tDxD|-t;_g--S
z9=BeTDBe}MtQOs%6$V+*z=-lKtarGd9EY>vZVDx*YEw`r2sV|p_w8u_hydMEz@SFi
zqHBG9yVN#}V2ZYq%B?bLdq4&h3d%7kRT-Fh;A`4lizZqiEif8P`t?d}8t*Ho55KS_
zH`d}X3P<$XdNX5+nMMR+C`zz`{S7>-<6VT$z=FRZxJ&LXFhR~X5_ACMZ;rI8Vv+f;
zDqT%~dgVWYA0Pz!RkQ&c;T{4e<~4ISyp6C_V&sqA%H>8F_XjL4cWO_&IOI9aR$7oY
z=Kr8E?4NwI&07sMS9?1?cszZs?W)By1U~j{x;1lQ9q1Wb`D-}MR%|UYxqRo>b70go
zH!5zqDfkAh!tXTXm+BLy?~1Jr5`-Dm>T|gh2=w{=Ebaadvj)k><4Z7Wm5UX5Q_MZz
z-I(Q-vHMeM&5qgf-pdpo^7Jx62#G|;ZomXzO-`Y7Z8F!U2#%<ZCuLXYuhx<H&3`Q1
zkmwJ!se?hdbSp|9Yh}hs@sz7cC!PYqz$*xhW{{wzse>Mnp_?-^lNuF@6&R^LI_%#P
zSHo*z@>E23T@hz?gKMaO9aJZzDk^YN7l^FzGxq}p`%s=yQ#N^-JB0Q3I4ED8u&f+w
z;tuv3toX=LSmdrsf_?Hkv0egygJ3MMUqNo~2O`;p1_4KD&T4!>VcHTLPbHcu{v7HL
zlXU7g5t$4_*CBmHkmV5Ap;up`)i#z6sgM|W{V@kc#LB|mvFj+YamlFDsZ;|@V&`tj
zU)zep`zMs_5!yV#jSW&pekZIpoq@+OCzb-~*-WC;mD8Qx#Cu?~{tGMh|J(x#CLEw!
zC4FCHpL}SpZm53+nFcUUg7m^!DxIjLM3FW?Mb;jQdBzRckz`<IO;0Q~vlB!ikxL(j
zLe__cxI%n+g*Iy>ueliB<pw98r$kD&P7n=X?XyC=4Ir7UO`|=OSM5!BH4B@V)tG)b
zJ*h&Br*0ZUE~XPkIT>gBd*9DG-VJma14r?Cj%-g4Wthfb%DE&@DAt6yv3$1X;&w3&
zXLk}srYF$A90xcwqpi}R<_{l<zPlzqRVS2|GL*foy|QM&r2QBujs5h!SfK3zWQj6*
zIZg26hERxbH9om@I6@7%AiU>E&_hMoxJpK`K753iNK!nHW(0T+{I;;yco4UTNyQmI
zlS-v)=^|*V-hWJ4>1}x)WDQBz$H+(2q>uw_cWdV!?95ICqCWu5ni%54?0kbg4ru#l
z;oB264W_!~xT8((-R*Cjvx+$zr0=!8fu6xIDQAe2oNLZ&c%{5j+5J4Cmgn$A=Xd*j
z${7ToXHM2f!~RmfVL7#eRg1*4++~@=Tt0$xdQv)J9^ZHgt+ni(bW8A|?o}4pW?dDO
zt@#Ls0;8*J$_M8`e%;<MXGUS@3lD1c4Ua}n>WGdV-z3)QFQ~oK`Kg)lL>1C+6hwP+
znr3R>U`mRDyhuohFpFVuNVR+Kf^Gb|rO(In$GnaBxy7g^1oaUCs!{P`SE^4UTuh{p
zW@*qKt$FC-({vZ(fM4<b&@<`}h25yM8uzRVA)b2u%4zhdY_tqH)8{j|3k@8Mjk4k_
z@4h*SD~b2la%V_yiWDc7#L6MEi`hRw|5Y*V-Lrs%!vX=FkO2V^{qN7;e@qAW|G7Xq
z!Uj04OWrrWq2nt{5%s@1bZV4yZPUO-R%^rY2PgjfnN)>w>XwB`GLTnOAN+c+bCAPR
zjh`I}Yo?R^<KDln=lU;Dx<c8oHrs`8<i)gK?jW`n1Ps%P@@&C^1i5lVjp&Sy%9$ea
z6C$M!w?uZS?fzW=HY#rUx2cdIhys;k{t;b@19&Vj`HSN-d_AcCJymB-@&%dhRyCpn
z7>xSj+Yu&7Lk8E65{)17!%J|&(D<UqA|n2IzB{;Srf-`KCoyn`E{`M0j`Y7-_{o71
zE}yrLtH0I96AWbuV;&=u@#%MiFuW{&DPoT|^_c~F%r=QEi%ulM3+2bngV3ijAenb4
zL!;r9LRCd!T#PAQwHhRgOwhvm)2FacL`Ej13S~#P*s05*880u)@^|<?5h#GQT#@`J
zzfE)%mrTXe<Zq$nPy~#Rl8C>eaPVRHL?AP58y))nBPk<Z;ZAE*ARVmPxR{V>5ZrL4
zOkw;9$rVEkMI91!bdAuyc~qWA6R5LPpn@`%mvm7+=6L%RJF+X@0R|g&*(x&e0jlI>
z40we23hn^RlV)H2Z((vLJ!3guDe_21L{K5(5G!(jYJWFyF~mp?`6M74X1FOqMO$p8
zuvgU$NeU76!m)py9F8R3FdRd0)G#VAjhc{INn$bYm@T04FCsrGh33Hezn?k?uTqu*
z8)sf;1I=E}oo4uZPY1<Xw;DVV*tqGtHqKry8!voYPmt0b2Zat<1OU$bK~EcMGmdzt
z&wV{zRvVIt*pE2bJvP5Aa^xF*wi<X&*adNB&z>VBH+q^rpw@1d)1J5~oCW%dmjL>^
zGb8C+Eg!k*N06O6Law5Rpbgf2YK1GUnJZV~h&44{8hWE3^R=ctQ?7$OP1-I=z;A(1
zbLWr!?G{ZNLy0n@86%PnWlULGRDgpj8%x_VyUA;<Dc_jctJpUo?E-S8c~|%>+DglX
zkf+QLD|XLZKxmcm*8xtzEpZc0YK&9VQdw1|#W??I$+62!2ie&i)$~*PLhHwh5A1a3
z7Dj}uDqiKwoUQgWbW<mS&dqwg)mZ6{!LuZ|T-cwx_sjMA@o*~Fo%5%f+IQDh5izW(
zTj;6a0S=_jVTc=7O`9go)|d3t1in>5_E%@ay)OdnwCZK1P={InDPLri_5!{SaMOI_
z?A9x%%7vy=%Ty?z2K=Zai%07)1M8_z70_S58{g6BsWN-$z?@^gV4oo^n)pf5G2)qT
zvCv{|jKb+xyO<ElE~bON4n4TwhL9L=2<b6h-VAa(G0A25+zCc}lMFq4{*?2=Njzo#
zmY!jD8YCt@nkj-A03$>m=?7egr^VIds8=xki10f_-%FO66zFR8QlDTc?Rz1gLgFaM
zq!cRpiQTr>VPV<sIKERUWRUo3m00aN7OFGJ>}x!xZ=Xx2f)4VlTd_YM(o0rYv3ycu
zm{-y5SMrQhTn`_)d`)0W<HV-_VigLl8M4ZhGEq|&rqST^#BA44bO>*(uWY+sCW<oU
zimX2sgXTy|ugXc17D|98Q8Kdp!rj~H&_|NQgiWOdZ}z8DN~bVXoG9W%LH`+%*<;6;
zjh8WPgV~w&8-X^3@PK3_`$YJF`3C<`dA*m=t?38Z1KS(cE29||_=y%EkR~6Zk15Y?
zpws8R2js2oK0UrLW`r$+Nnn$Q4|VuFg7cBG{5~_Pk%?=g!80~@8V|RJ39I~5s*eWI
zQG2(5B7qfo1uGTfmQZi8`AsGU*V2-S1YUt>`3BTOV)h?O0fJgFs39Xo%MQ&33O$%7
z#7C6&%pbpKpmXUDIYhi)5YaEW+|YK7^Cce8&XTdYac=Y&HhL2J@>Xa_(yd97<U$Mc
z#xKNPtTn<@&{_g%@YDyk4t`&PDump=`*S4>(t;+)qhz7Q&8^wjJE>$o;bpIus;SA;
zTkAEdrFjZ)xMvhc+e2N<ffB8%wB6)%UOsMLo$3`#BmanhEjCv21pOZ`_RhMX16pmm
zgD0ODcwq#gih0l%lvy|u?Zc@<neNKReF}*mx38sJ;FLu_1&0*A(X5fath`i%N_`U2
zDJf4jb7RByi<*$)zl2MK;Mwjs^EFGrQYrS$%Pt2z4NLGnQ1`i=Sg^hahe>3NX#^2V
z{xu;#TNR(~tUOlBjWj#P!TSmDf1X{XCMF+xL+<E{Dya`vd<xPrkJ3!C=kQmc2X6h4
z4<&V1q9C=@mft$$x!z3_ukjJ6>041PtXmB=k95;xtKW8L)1M{OV2+}Tutebm15ZqG
zIz0GqaHS7_(5w-Le<>w^Jz{ksw}6&AqBOPdHcc(VsbvR^f=2einLoyjxQ7%J@F&+X
zoWs@pLIPKfXc67SI-Vp-@sCFChN3mFSNMo&p=2g0T6*3WD;y$^4KB_u!qnzlsd6by
zj_thWwr)Bt?8QH@;~3*yXazy0w%gvlR^6Q+>x0K(l9G2$V?q<B0j;0eR0@ruaYNdv
z=$9Fqh2V70nsZXp<UK$y(F`#!1^iPOl`iw5oP|LQVE!qlCATC8ebedFBA%6EC*%P}
z5UYk`;}1{M+^Ds2?&7{mm*TFwLl1T#`^|`?Ay$O<B8k%a`Vmk<N?JwTY)lB|0DGuB
zR7&V6e9!j{16=0}j?3TmGbjOsCd5hgP3UaxM@>4D+zw$;m5y>1-kdNG<jW?MCs7it
z01BhuvuRv;gFt_06_3q9XsdH)R9|_4H~!K^lV}gC+)<vKpeC3~M7WJ-UXdRBo-9+&
z&*o22r7Sk0E#ABNARbCvB?qCx9OwN7na?t0Nq|ZopFfaZ*#Q`vg6tk8z4i*3nc63V
z7p3vFhSqg6mDczPpv3-(h^?~NrEdnJoWBAZv5`VkC9JHNEcsAkSC_G4^HJqMv$;VY
zWeorNgZcOAcFSYjOf9lr?su0SMj&p8!k1-VYjTtg?Ffm)g-pq3sdXb+zr9iLs=7xV
zG7bJAdv~i{#;!&|jJ>1Rg&TzTNI&HkBM3)l|4IrY+?x!aPOV#q3KbekaSDkk`UxM0
z`Bzv5BOUIp!|yo&NcNKItZQi)r8kS>(a1y3ZVYP2!?9e=`X(7|<I3dlW_!y@+7|hr
zg!VZ?X`PoE(`2cMBV}4c`&u5V@>4@dHi>n-zYwXAC{hwoZPy3UtmwCt*~f)lixj|c
ziClXTkSc~0L<6Q$h;=2XsD?hLzCkX5|JaNR`rq=v#O%pQ2+wEu3ArZq1q;u?H^4ht
z<XUL6!2V<Ar1RF-Eyb%M7Yvt(jJvnjr$|5dnmPe|A%jb8nI6<rfE&d|^iF0C{nXPV
zaR<FkG;Z9>@1ij+lew25b5o4BJ%`}kk0gI81boDXX3R4@D957OH3oU6mg5ikMla$U
zOrFmaZK=9UN|$MWu85abN?-n%%(4Nfp}54jp*g;LiI-uc!}^c=+iXUQC@~q-{-%L_
z>?j^n9C+@o3C7#gEtGu*BMy}jZq47#XUn7(nVa0v?&PcOU=GQnMA|6}l6R6ZG|^HX
zNyx>eBWv3TbAZ!p^oZ-LF9C>a66N*>F@0_nrhAHpnt;F7-T8eBe0zpR`e0L}dbT{d
za`9%mk6Ur9_P57qkL9Z5!`+q2!v)^Xy4C#6)Ym9xJj>%-k^(69e?pfJK=tpg;$cPy
zx_ATMK1d12x8?zP`v6kUIkb=<yjA}MpG4+?d6W-O{i?b!3>72(3;J3CT9KpY<Z$%<
z+#=JA1r~<>w6)tXt2<uBGz!O8Jd=mDF~pgjebw^O=XRoFHF!XXKy;^UYHe@`o0eRH
znA-85(UpPsdv%LL?V;-l_1Al9p4f;-PP=3M*$HvwG>Hw4veG!lD|%F4%~q7llR3q)
zY8UedX3#(HZ`q}#dSWL+=oweG4;rK04W2c|?3Rvt(GigCSZQ%T|1DJ<+jogJ0|^A=
ziUR~h@_)#AQ+sPekN+v?m$YmYHYAb$BN6tCMp0SVUtJ?x`qwyFs3zuq)>R*Iw#lz&
z2z9RQtZoE*^q(&?*X$wUA~~I!jwq_t&WC$m*2c!pvu|9`ZNU)=saK>S?A(Sb>^-EI
zj66sKGL|?_YX*!7d#q!)SNDWEW*Jkec1f9PSFR)GG&!z6(=4tMBJ?>DAYEa)4G!Bt
zJTVzuU3OR>MR(E>;o~ABwRU8S1>9YHTwI%jzi)5>&i%3|iub<?CbT$A>v2l`7@|BF
zSo!IoFoG@N!1LvZF~u;L*;x)P)A*3sS-eJ%;E813X<?+)M@WuI38<~$p;#eMQ)1ea
z=t89^;>h^NG8HRkqeT<Kd2;kc$mY`$mF3kX?fxEyVRN_#GC(qC^hb(D4~Q|uC%_>y
zU?YSXNvoK;H^rz*64XP$+~T3INvLDQqW7Dsp0Y{{^N&2%gatCt8m0>gH8=#^9$Pfs
z<IS%W&Ou<r<sITgm8GSkmR}i5gH4+-A&^hHryV}50!V2bq+17ygzHD!<|*UZ@K^)I
zXJ(Sn?={EDyX@0v+Dg{j#vFt1fkec~Lz=+q*hZAZmx5+Tgjr^h2j`=)>GM#|q0C*P
z9hno{RIyFlh4>AT(Q&ODD+Zz`=$61!Pt?SHN1ywg<iBJVnt^gZYMcyPt2wfC_lm&j
zOZ|@4&G8Aj<y&pq3DUYbVxPTN__1GOFXGeb7etQe+0CD8`rZp~v~wV1VV^yE0fl_d
zyBT~tExd3FwM+O-SKC^kvk;GXxzWy7P8$+ZJC;-{l^MHP1MNpG+^<$St9l!~$_xrN
zy<yj5W7HjN`F0&WTR6^gnD3yiH|`iny)9SG9VI@t&6(lAUx6-$Pu{oOX00;(Y8RS@
z(G-=zdqcui$5Jcv+i`XquGJ|!L@u2gJxDUqWF%J{eHS|PnFLh=bVa5e8Zq-#=3o4R
z|9sLG58E8ANO2o>QJK4bwq}SL7x`0Ws_lQX(Z+9A$NrehCQw$Lce1-qC&dj+Z&YOt
z*Iga->$Sx3k2=#opLB*2bf$!e#CpeZOK7JxTR*$XIZFl(HIQAYvl`_35zQt#?La?X
zFEVUG0+fLVBeoOG0G+)NE;<a@`b|yhG4k$_)+FCN+vSS2a;3pynOG#X#he<i1mHzx
z3^+-p@FbvmSEUb^6Htfg$iIhurcS$pWm}+NE#}1tF;8VLB3V68g0?u%hI~m}@kVPz
zcK!=XE67m#tToI0FZl+@5tj<MdLm^wLhiNQ{<P{ENuHD_V#}N~{R=KfKho0RzS^}`
z0f)vi_LesC_zZ5zj8JqfcbZkY%A<-&JtAVwyJ+`Vv`%ZWR5_imLvW@r7(Ci>6cfod
z&*wB&r)H%rmho_brbZJRyNAT@8$9?T5gKpqh*C!f>u8-NMj$EDpbG)T8y?nNzUzQr
zY@`H-YBp=(JXo+n6n((khk$w*?fIk|S2~Zia9t>|iwa>s48A*wEWeA`Ql%PerE{3%
zn!%Lpt&odm;Hz9l4ST4&oH=!zd#0YfI0vI#KA<+}4aS}|--AgYPOPBGyC8Pu#Q+F9
zKdJ{I!=PRePVWD8<Kszky{IST^aHd}G{>ah|NgpoL2kI26-5^kM0zmC1P7Cl--Q$c
zqu?Io#})z;j(BU?Y0>BUEr~F`wO!jrKC&NclsOI|i@5WR0{2TD`<T1C=86g%4=e1A
zKEU0Z;Yg+}x4=R$0BE~=Sc6~(wS;BN=~uC~N`dr#=|OT<)JExB8g1Y-oPiH1x+~&F
zh>=8zbHzj&U$c~F<0Ji^5J~{c6Mfq81f&0?CM~ILZyJp2pN|gJ<;ZBCU$nWuEj;V1
zWY(;=W(PbNRFBs5$l8kBTz6rOz}mmr-$K`+K2QjJL}N>Ps4IVF1yx31d3*LeqHGku
zW`=(iQd(hu*c}I>w<F4^iQr>5-BOIt1_EeO=j+t-5^9@0G>^L-np0IVCu@ox-U{AK
zy5402zXt(Wm@}McEAu5yW!QS^ubHwM7cj`Cb8PB^EPeQ-rdG70t)~`W6TUcXIr}*+
zg|4wN#$w#J&Q7|6sV1o!_{%&F!_~L7AUFE%U44QFG1>tdOY$o}ILf^ITqGs8^^Pb?
zq@A6tnjI4KcH%rTlLZZ(m94+#8|LT@NoFQ}$bW1l6*BHy^Cwpc#89^Gdei?QlNMgB
zAyne8t7k~mi^W60fALIsi(#p`7!%FOPF$O|H=K;*$oUjgrW#U^;(~iFblF(n3S_s7
zRV=<>OQq?twjof`F6py;%l1e^ukwXvbdWAK#L3sz!G}RUy+go0rN{L+M}GTZON-X@
zpx`)c((RoLx-mf)>QMCd64EzIu99yElqp%6|2TGj?k{(?`O5H{xqmE&hT{bMK?$I&
z<VMOa&h#7zW8G6ug3*gsQujg6yV>8>{;Kgne}p&*xLG$_88pok$lQ)lGr-XK@@D<b
z4MUaoDvgKck`%^b;jA}$EASw+8&9R^cxT$LTl!f>_YIKA^9)%&Ark`vPIVBNXIDL_
z@UQb$-;WsV9KAW-7&@<RpiAFsz359RZtUba@NKfPa!B(=cA6YR_>HmVmaZfGT+r4t
zv3g)d-M3xUfeGj+Nmazx)+>F=#C)XZysg6cqWnA2v5{LYfb-vNz9m;2QO$q4z!L=s
zi17c=1$M^&QxqI&02B@+F}`@;(A_MjsDR!4*On|qIZ4xth*E^Jn(?uUQb>$7@|t3^
zn<v>UmVSI@svA%tPnTkw9xUUTT$g;Zysir)4+aVFm9@wwn^YAV@F-r7$?0k3Tw~P5
zpyTOiUrDLYbr0;QIki58t-8k#wU4=%E5>k-96pPb9mAZnb(8OD8DmtF(a?HSwQFd@
zx_GgT{=u|)%wh<mCF?z?mj(+<d|C2x73Adw_V1z|@bw%UqocjSnUd*pO{|vRIOEDI
zoXf8Pp<)g>%6d}DztqI^DCVm+D|s1ybMbO~sGUg&7k##tvFm7ImTQ*}1s^NwO0SPO
zRyU<k+f0B6?TZPF;2=Wt<egSd5cVnM(5P3e!dz4r^8@PVXr0l~D>2lSi;!yieW+dF
z+N`<$-2tpxoz`>Q3s;JABPpVrGL5Rc#>)ABl<l&P8#Rlk^df>Y@H90kB3WyLZezr#
zZ41BugBb_llUW(bMHOwQpjP6Ol7qWSYmb)kpqnqHcmamUrcYf-&VsoTCr%sx0a(dJ
z4qn_QU>q(FW%ZM4)-{~~T~xG!9{FD5<RNu12_BJZ<4d3x7s4_P(fMpD<8q6FdWI{G
zs_3*|$+U&koE01_dqzPe`!saze;sw~)s|wYGTeznzD=DkAOdgs5kGP5=ti6!!sLWV
z{d_UqH4?)qzMbg;<2Ki@DjTV888G4rgRPJI;Pbr=o;TO<BX&*#phWIL?`uv}5TAF6
z?9JmTg=blD<uHxyT#t~fXaD|L9b4>tCXp2HG1l!}BKt|G5o5~OUFg0o(RVi2)%To(
zyIvh5*X>|)3mU_vFR>MT5Mz1~5yIP9g_TfQ>BKl7X6j>%z-5l2%4%Dn{$MLSkQ-uJ
zgHK}stLwm2G3+MZuEz{lI;`v91n_f7GeH-rgblP~d3=)iVnR*AUuTV2Q+@aNBXL+>
z>UU}k1kd@&%n=AkE?6Lk1H=)P2ZqJ4JmyGHoR2<?L;tD^BX7EsBKsDU6XHB$<lFC3
zI>vZu0=uk^d<>I3riu2&iXzb+$DhnVSex$e1XB3B<nwU^f3Tu*U_Au!v`l)Zd2>1Q
zAZsF~84PA@AfX2KDJ>=kYusYH1Qw^aWq4{BaiDZvH0J9tqCte=x)V>jFTYj8&cLGb
zYrxj6t;h@UQ1l+^CGhkFq%&t)9x9>buPnwH+Ot`rFf~ykPA6_dHcKBxQe4MqlBCJp
zSp7Q7e>n}BNUR$1{)*PuFAv*0u<J&&&}%j-cCDQ+r*WUmkv-i>p78J{@tTwjMkZ%|
zC&2HDbpR@67GIi#*hvGul2r6YQdT>ky4Nb5l>T-~U%4nQ`P1@dOc0oiAMTQ~ifs9G
z^g#L-5FLFvj5qMC$a7o=7o3iCV2}Ma32V6PpN9xhxJi7N+nSG`boTXddzaU!d|_I=
z+_lVVVXDPI3#O_evvr^YOnO?02by!2dB*c^TpJd*9v_tdsFpbk{($t`!NvImaNQ|R
zK2`YL9^=fln|qHVdJ4?;S5AsFzE9VUAk-1fXM41av@3hi<hpGlgo)5vA<zA?G3F_r
z$vu12XoL;@P#+L)YV3?uqgYrbCYF(IE$F(h4l+djH>xm3-Sv*0@5^6e0F8;%O()=p
z?TG>dU$JLj0~3*C(|CcQpsBRa(VGR+PL@=C8b-pwzmBk?UK~11?q{&Gwxmo;j0>Y`
zd%xj2D`az&^`)ZT`9<0T!#k2DQOxV5s``yiM^KACP2w~ge%k@Be&G5uuhJ$mzF}@1
zqX;dxArW~S46)B-UE2u1S*>fFQ07X`nQvnMJkxH+#;$*+`y&~S9*EFaRs@{QDumYa
zk9xgNDkF{=S!Y&{&*{^DrkR$DOeH>8W7)M)4zIU7Xhz7ubUvm!ZJTS}q;F%FiWG&2
zq3^gN*r2;yBIDz`B$!v;WqP<8MK6?cDHIuQ<}cVpxHdwnzjKrabvtrhC+TdUd3pBE
zjo%(Vx`gF<M%`CE35qLYg7fWrN`4VKtX&V8)}(6!BG>K1DM}fT%>54QYD-e}-DI-(
z&}3XcJ5U!$Qd9c7*Von6^$!Vuj9tDEqc$E3^#o~KoB+MvJVS0#tGuy@XF^73W9C!%
z{SD6?S|`PSRsT+vPjc0Ah(SX)*EC{jsPX@j#djnmJp$^dpzFg=%1)HN_wgGpom0tL
zI&QE|#+B*v*!~NC-fU%KmO1W4_`n=qALNAaqi}j2lP*xmO6;)AR>C~*+o$|t#k31r
z3(>E&F;Ma;+vzM(j%+9Tg6pucC7u<V;qU76t^XT0eUSAc5P3;Q%sFU@eG+b*h=eIl
z<D3{WTPq;rXf!Xtf-T#Pe7)eqZX*=8bjma~Yw6!&*)pKVX?qA=npvplRbaSfq%Ra6
zg49Sb=H+EX8M7Dv({H3ml&V-Zl4VPt{4H4BZm)+&I-+A@6D|d01J(j&HArcT&RR~Z
z{Nees+3EDh>(E!D{T1?e=r{a-UBbOafQu0Pi!D)O0RdtCAJf^{{y)V}yESa=_9aoi
z@qESbD=&qoMOZ!z1!Nh#9Q&Y`k^inytVvQ5kJ<*ZkC<)Qn6)i^zEqw+(?W#4Ig-NH
zcUI<jo;Po-XyCU6s#-(v^Upe=^%U!O1es!dkjNS#Op<}u8^y6Oz7q|wgT{L@?~s-I
z%VmTQDHP~>9NG*5Jp%K-{h|I4mKluufac<1Sj_+!jC=#7*79Tn=G)>(#?4YgZ)kz}
zdJ%iKH@!do1$r$doQ3|7#NFfla!9e&B3e1?oeGSLV)LF1=XG}g!Zt@5=}V-0O4s#(
zH9j*+K)Fm+tOD{W>Xo8^GR+3tV|nBonC+9nw$|)G2r&R|kCxvL()199FiRIzx+jm`
z>HoKHOHv|5o7Z8zE8m6iy5u683{1%dqsnp!V1PzEL#ca7v9_c|{4)@aiu^7s5)fzH
zq6n%)GdSN*LECgDK|sNPk5?K<0WhR4%WD)0eU#>qZZCQ~utpOUgLeEKG&HkJhoS$k
zz+YA>kcYa8uYZ0v${pJaoCKB91(36-o7JFro+x=~xJAP5$*-t>DnU;9fC8icibH!#
zb|h&EX%{UGvnB063|zxfK~U5p4+e_POg9De%MP|eW>bxMe_Yu+e`0JB{x$SX)w&E@
z8NEc+te%Ez`huX{cma6S)Bd;f29S5o+H&JB7IFKZ$V>>h>a|K6{#ZRMoy2%Uo;(GK
zHf|T22j6S$77-@BEuo{D&4tohgHPs0_)*|VhzCm!W@JS8)%Qhqc*sFkeEDNir}r{o
zqrOE)XcHs;bOz~;6biXk_I^))%0YtIJGEX;%90NnIsUY3v?=5<(2PaHl8u^QSqjd$
zW={X|RuFN1qzl;c&JW{Q@NuB);0J4I9lOy_<H6Pwb947t#1{yI-2u8!9})Rg`MsnI
z9HBMh=f`Y*#Ei@dW6lKutgN9Fd{};1rzy6*R==u@KfPjw+n`Cmr2N>5aJyZ@asIv7
z;ZIubL@$}Cra!kG<lL@tZY{J(|AkIt4Fxhq2HQg-j>b->@I^#;Y8a+SVL}mF@7{c`
z)6hhVu5eoTa@$MTuTUpeJ^Pu6weXuISaz3HJ7SO<FEs{=-N(EwZdo|&w@QE}%g#Iu
z@Zff5t7Qt*qDyt0FiJ)ahP>HIM1oxDK|Go9Meb*97KpJ`u>Jmhm2QW^QsCyIadjSh
z`fnyeK|(&#zu^Xs9&|9He*u!>_FU7bOp26<Ig|n+^@OHeVx8_;^mXYiL29inpNI^B
zOxRVvc67yD2^Q5oZ3inxt%kbe44^H+_21TXSsLbhnuC7W*G8Lf&^R!>cLJ=$?DkZ_
zGGL<JOlE1EvhzkJn=^zCNPX~My1#+V11ZKN-h~>N5#;e8fW0QScaCPCgC%^?nbH=$
ztYbh<+5U3(1Ct^j3cw)Rx==CUokbLB@HRLHkV^7fu$|lc+a)sfk;e4`1l^INK5jK2
z4`udYDYz^nb#(W^2Irmo9c<0B@^1GyFt@!iU>8Gq2K;-2uBI`JMMgRFWTVe)N=f-N
zy{LbCD4j7CM6x||cIFg3?YU)*ZF-ppwUVt`Mq<U2u)>gR<go;yKPd8#t}du~flhym
za@R|$cY*(oc#OXs-MGoG0t>xBn}7!6B}9uk#q!_XF(zgXAEJ(?k=!;zy)qezq&j#y
zk}r;{arlc#9;^E}tO4)K4;O>$;aVJG56w4FDBK@gzTzDQV^1yP6v0v!HKF$@H?I&W
zXPXuKRg5X_-Y^lQw;j$9^fRO<=O`xP0YE0%PH12YMPw1&DVh@xLmQ@sXXGGoF~2Ee
zO=c{P&@NU<Qe8>9i{GjdQh1j3Bh<Li)h(N*jbm?{qY|aohxc#lChC)}W;^RH85#U(
zFj<?|40h;c#0?|SFMVz8oR1*<8<1<Fg!EHT0(3~wM?PBj@|i3_SAS%Z5nxMRws_%s
zk^e3pd>_mPG1O{xS@d^jp1drzm#GVP?v$E<{g>-*1s;z^*fByrSSh4JGB<T}d!_72
z%k#a2Wm$_Abypl&Y%xN~1N1hst@hj4)wZDn4W!^cQDWwXNOR>nYE0N9zE33kG1gwo
z82VQXz*(s1@W(T!+|{sYVxMIURP&HRu~lQVKFmH{Nx+pMLuh%IN^DxCw<4K!;}I)k
zxlX&^*RRjifqCCbOcCyv^b>TZzzw!dY$s^-QoP<~nnUpysmgUisuP2T#^sH6a_o*t
ze5(!;#3yQpDt;5tcjQ~H)2S~ef42A?OMQjmEC3eRB$cqN;5;~GYdtoLyG+LrAQ#b<
z-OFxA89ky)h45R6NrMfs4Dm?DOHi0ux-l*6h8aSeMiJkrgZrqO`lg{8)AV)N?S9_B
z11<EvNsZm-+yH{y?;%?zIN{v%Uy-{VY*i_mfVWp^-HJWJvv`v7Zv{Q#NZ`PS1GIH5
zj@}&dqYw6S8tikC+$igI>k?r(D=TB~vV#d~Z^}d;9Ued1X9awh*(7i^0ng8B8Y-8e
zBy#e}4^1UtJi5yL1ec<^vBfu27e&w7G6d2Tau;2*T7QIzriqihMg2QGaqhwO6;_jJ
zdfeho8k}Zt_3=fD*}#(Haz=6&XL6;}8~Yn+zH-O0`X%f{mQUVt+uWrq?iDUkA_Ge5
zrfRUiQ3XSGTYDd)JO#qF&BH(a!}IGsiS#%E=VqkJPn^Y~E8P$#q)lHg2=t6QPxM2h
zHl~4084=3b@C)G7mVk7YWx!n3+q$=aShF&>V9O@2WGlvFq`ePbPSK~pe-#(-sGml{
z|DOH-PKW-_gwKCmh?^SQnf#X%@opY~(*{>U?$z%Ai<yYSQ$zEHnyTzq`4mfu=Ex(|
zBNLW%v?vnd2xc)W==ncu<6qAgwm@W5O0kKXF{L9Z{@3EYv!}L1*;_U(lL^jeubWXm
zIZb?6eauhU5p3gKY%*;Iwug<D7#@~L5`l6D!E1$g<T{?$%0aXy7t?xlBEI3dKS5j5
z?i1S8RJI;Y*LtnIIYs?!x0^|g9vKY7hNX#Ztyfxc(~VLT?)$?^6NODz!%@?8M*&E{
z3fv&C*8RfcUo2O2y72?619D)91GDg8cEp0XYw;H?Jk*$$qj9m#y35jQ1OSJYpM7+I
zTpA#kEOA)C_bfLzLh9!5Ch_<7&dbbA%J)Y6>lFXnK`SEWOYax=d(c;`=-$b{GHLkA
z1_7;!n|aJf?3D7WE}qT$4ff@U)o+4NwlhvZzu#z|UPNR+H-qy);+WiLTFe2M%a3OP
z#5Zj*FsIBx$VEHzc^RKnEP4(;qq`w13%2xhiB#8EGClg2ziWW9d1nw<Yn%n6{x)U5
zbxuRaiUH&E^Rv$Fh5r-C-tgZZNEtfO#3$0)nB6TV6EFrW`-w!{>jkcFfqh?~OYlUv
z?(kR8phhAil4%qLM_y>bMXyIDGB4Oo7JH6QT=OwpouM9QqP#g12B?n1aS}<D>qb+Q
z9WZ`x$rD?cUcqNBxPuL%i~t%E0iqW%n()@$v;5<jYI{me-X-gJ6wGu<p`t}_*Z4Y~
z2s?XeONsgLeYRV7R3MOkVWKeA$PlSM7LB?RNclSdt=4pO&3VNrGw|RiRs+Tpagq}{
z9|6t;!G08#hWGkZdIN=ybz6KUDL7VWoj!4S5KgrAYjR{3ygi%*EE4@&|661-$9}s2
z_D|hCbs`C130G+4eA5`RJ1*qD3BF8wXKEx`Gv0f{q{0^<Kok~8>>^ehMR3rrc%$@2
zkTco7rDs%5{$@-B`OEAY5UU`g?CccDnSGrTT*Qdo2S;O=`2pfq{P6C>k;Q9|pH+54
z;vXi<`t95MgEGHw*T35ckfqCGW?NAzSlw8E-YGQ>_Qu3nnrq<4*fTEly-k*DQ%NUV
z*6fGgZx|qb@*rWOJ1`G=OoKcbJcBA1zK1;$f#F@5@krx^e)Rm{;tmWGQ}jno23en{
zah|pZR<5P|W(oa@$Y<UUU^NjUvicMBT-WepKDsM~+=dux#ZyH#jHq@jcdp?(zTB2A
zaozo0(x0|FuvkBA+?e{<sU54N;K<|x)*`^WTooWvbm0&AuKrYQw?&+O!9IZ(gUNxE
z22nIJR_hZAX!dFosk=SamyfM4`~3z+l5JSH?!0anGg@3xQ=LalD|cgW*d~6-L;E-%
zB6u0qFpkPb3@aUD5mN^|_UtrXl5$|J7j@HaSPgI=Fwi5a3c4`C=PJ}(^3x!%66h4p
zEgiK9bXgE3w+<raQ5dwqu9g<v?tw?Z<KV{fljto%t`&~+cQqS$2g6WQyCfS~D;n5Y
z3lCJ}&D0aqb=FNoemPwfnD1R8LHnF;VBF2&KiLGIO%4k<8y?Z35O#yRClbPk*(UgC
z{Y1Mc?0}}LkQMIsQ(yMn6VDsmRI>=`<j7=S^@7J^njwh-;^2oS7m=?#V#af)8B9?P
zFWZR|7oH$!4ZB^zv&byHeE(`<%g9r?g90O}0C8e)EM$31rTO=v?T<b0c=N-POmDmR
zxqMstI71LIeSIF}vAHc1`s=Ml^%7d!K`M20_o3z^<nGF*d&nJ6Z3SNqoMbBG;$H4-
z$j081rJF1$q;_8ygW5Vcx*V^5?NrT305NIFXa5C8>Fvsko`@i_^c;M)kL@Y7PW_%H
zeh&SFTFo6eegj&#Zwnhc((CNW1wt;D_74DpGJpyifW7|ZP5?^(rPPP>W{)O;w<03M
z`?Z&`!$a~K1WHsS>&fO~?#V`&=>ZEl4KdubD1=1cxCo5H<n6$YWwAQmFB5hwy$kd*
zKFdcfE*173u*xU137*N|6m5w#uy=6Vc~m;UlpA1C9m*6sE@biQT;x(8J=oV7CiF&3
z2#Na(M7~`%FXc4o_}5|lH`Ij#Vgvjr)`Kx5q9$YlDsgdO1a%gU5_feJnx<q%l`Hw}
z*begL!uHnm*2zwxwh9BB@6F~dm;xH)pGgaKyDEhxT=)XmX+lx^&`x3;;QU?ZT(UI6
zJ`RIOCpHEY!CB8Btn7x4tVCa}e&WyAL=h?0-y#GbDx6SzCdEP7eJ1)%2QtiLTcjkD
zHwNQA@AqoVvTFj@NW>mp*`VwYf|00*t4sa)44f#o#0Hj*?mk>Hh<d(Q?_mpr8QP#B
zz(t%@$qW85N%k+=(|*M}AgfQuNgdx_UXxD5gzg+3u4Vo35}N|+48l>cTGreOEaSBH
z65%Vq3eML0SnSWk3tb4vaAxMBuMSHb6j#dNW1@tQ1Qje6>Pr>Ue}Ora#<?|udx(zn
z;vlS%Sx?|nHoOBr0F$fl+~JxCbc;?)k4J_GPc|?LD%ETJ7GWUyn=2k3U~SW(Bx6}a
zPTFO?tc(CgLyVse`te73&f^B(DA`3MV~rE7@C+yN%$cLiOpb~ZvqGCxaeRu?$|QyK
zq~GPo5L`fVn$ewl81g<53ob*H7mS-4Y)Xn_P%$Nhcf~jHDiux<fei5sTatxjoJ?w#
zes|nnm`0!VR(wYX)k@o1N|!4jPWKfSZGE_X_LZaXo;N@lz)?6c6hqW8r*t6Pr2xhZ
zQ2eCm1i-HG%H2UJ(zb&j1X-c`({11P=;Jw{GXd72oNTJHBtFoo;^y15(yXFo+gSBW
zn@n$<3d8f!`sQ{iq->tUcq9DfG*DbfoohR0C^AnQmYj){xDXXLwUv5R`Bl%gP{tnv
z#govUj7|h+-4h@iAwC`y)cuq*=qcE9@#&s#%~RXaG+b84a1rYuQkERhwhzqnQibNA
zfU&}bnHg3$hlTa#)9k4zP`_)VVK4Q|_7Eb$uC2ke(**)x?QGP_V1)9PXVS->?$wlN
zhSo(%BIDISnCocaRrHJ3U5ZAQ=5lXMvx?9wka&wkVVcCAx-l6s%DRwLY`8sEFn*Id
zj#-J>s$kW6pR!eu_fyA_70^Li_y(bfufQi^=;k3{1rqVCWmgoun2{fC3nG=0y{{)N
zcd9Z#tXNB(7Z%BxH5~>u$Vl6EY#0t>P-PizRq}-+u2RLT-s>BoT1PuX;c&Cq)`5qO
zVSyVFuY$2q$qBh$&VEIdvKL}r>l;3mlql0t>S(p_o!8@X{&nw>qWUg-w3Q=^3?nDB
zH-Kj`bTFvv;MGKirlCQKhG(pX-5{{Gvz+j-N<8@!$A`cF%p{USLv?%W+-@I7=l`qL
zqW@jx*A@g=d!sMdl1dv*po~6Ih!-3q&~sszYC+BYJ$mGn;_X#+m~u6^I_x19iH?zI
zpAm>_l;Oo*f<&GV#aaNKD+K?XI&gXTX+y)3IsIVq9QO_r_M{(2INgPq<25=vAIMVW
zz?OBRowDc`?b8e<!|UDVmYe>+JP&gTYKokPx+SHWU0#KX>C(HicE?_|7vsG={V?n!
zBU396vx1B1t$I$^=T5q|B_^kKQi$Qw@+<a|bXRWc=kLLd!kC{_359430aW42TR;BT
zZ!V3@J5F)c=Hl-O!FTu_lG4Y(BfRqjiQp1KC|TSshhmd8G`ogV?nt}B=EK4<zQ|1%
z`oG?$8;=_G!E30CoKJA-o*_P~5EQBs6i~hL>2rI3M@fBC)nj%b;t6+Z9@QSSF3UE#
z<5)#Vj*Hwn#4=_M^y;_c#edYRfIM*XG)q-%-<03oqTIaaSTBtm=Gxq#-wyahEwjzk
zDE1o?h9O|kwmRS~oMqsA=hpDEgvU64#Z4GZ88obqdprq-gwyS+?T90^5R3*^I4B`=
ze}SbwP&=e(oP16{wPVt4B6W(OhGRi8GW*b@)Ai}Xc^We(v90pSp9&|Rx;Rol#2OQ0
zw){!0sok2pWB@G;g|eD4lnrU$O3nVw77Lc_UH)AUx)H-Q_hljoXeg~yY%Bw07B5L(
z;RA_&-SCz4gVyoCgXpWsY?;JUSYJ26`y?dyJy?KuQAHuDdn!JM6@ORI60en&ynqTS
zt;K^6P>BNpAl@Pk)em=F(l5n(hnfBeXnR@WHB$GQ`ZB>PcU(Xc@C<~YRHh6r5A#k7
z6E>FM{|?|-W1H^#P%Tv+%+O^^x74Wi`K&U|P7!>Xj`kh96RG&&zcWbO^!wv|9I6w~
zPCNb%6ebtG77t~H{DKP@;LA(6`ZQMSV~(_<2DyC0pX*1+*|V45i<*CVMtn>Fh`NB<
zv%Wukf#%&d<X3(te>GTYh@XdqIH3A-mJ}m^gM9~|_@u2<Gz)rfvRo57XzaIQHNa8k
z$TNQ~0qEm|^&R)=moT`OP(h`ZpwK@<`-Ao6%3&#HsZd4;sLf|whgjzo<UK0UB#4yO
zl~emDf)rE-FD37ZPl&V`14^KwkR3X#SsEuhcK+5H;KIA~Hbp!Tywee6%6Lx|cXsgX
zE4I4853HO1Kf2zrOO$8}wk+GWZQHha%C>FWwr$(CZQHI>>~qKa(C_x>n|~ok=GuEj
z#Eg}g+vp(?!^g$>!HVGGAE62H1B`?IUy=b<M5$=C=MI!CK@z3zO;3~}_@<6Y5^HsP
z=%-0lU04g``R>Nap_Rf;WlL-8$3w@foR?);3PQ!HEA2J?a5|v_Y2^@DN99DC=pz%&
zGOw9L8pm}_-7*X{9FLwIf6YPzp%0ui2ZpPfslO=}lsQ5=H~CQ>sY13G-}62-Vm}#K
zn}uxtbzAHX`~S@GwJ4fkq{pR|%#!h8&V4(N8&;MZ_<p-4d3-Ik{C<|Qd`)Wzv#|!N
zA$4EOy8b~XR{aD&0J_vF!U}T&`h(<I??UyRJ(U70wU!Qra%~=C!6qQRo@7#Mx$mwb
z!0c-0)9a`JZnRw~=vpp2r}SKCHLTsqJ*#aIW7gGosDzmn?6IJ%I0|pkRU)-1k@a=d
zk+ro8lR2R52si<`4idEp89ce+(`#z?!X8&josOD-8I5~ZbtcQD;|^b5u%fB~q;|g_
z+8~hSGQFs-Jy!bWAxgIt(LC_cqIzb|vS3_FZlO>TxIc^VS(o%3bq5pYT_t1qTUQQ{
zI$F0>xD!$su&5#Pp%2Y0XC-b7d-=FR*u|E9X?wW}klDKvFQt%YF1$i2tGl_@b)mGF
z@~e2w`(<QH7I3OaLL|A`;xlcrs)@nOHkJiOjoE=QmmuCM=K?F2?w|^OnMcqgG}$cF
zETo_B5SGdi)y5sgZiIr5^%}ZOo}iJ()Wy8~7HYk>1Hy=AT4NlL7m@j6s%5L1Z<Y+M
z{meNB8yPk+aV*)oJoLLS9J!2go=b9eIO{{X)icy&>Sv`9UHfv$_3R#5f^y|vsqBA+
zi)o#-GiiGC9Ixs3(Z%^CXj>cvgmM2usa^`t<GF=w?mUCUX`>p2=Fz6Q(1*(SFU;RE
ziH-#19c7WPR3)ie%p2>SH=qih*^<Qp!QaO}uq4>!=vS=*CuV{wKr1@H=H+J9F-9X3
z&nn6IzUl5VawGxe;1Z|MCr+a0H~I;@)z9@EqxA9k>1ukJd(wyFF}*>~Pe)xt+3RHc
z)@)CW6y)LmwFMFsuN3B$Evg0-IOUTWq7Rpo(t$E@%ySfsgI~o(!<Ig&2ZlZ;HxW>A
zqgei9QNPcwf%L%O!is?kHz?WecI0<OsI`He$Im}`_gbZcaqa)H$5SP%7~20HxTl<O
zhT0Ah6VPeg(A`PON_nyRfwbYQvbp6Ps^0{>GMQVKK$w8$9S}!;iB$KX0#rdGWa^rz
zkdz_QvYH{pmrU5Kf*pXk+6;CJXCqt^_}Ki{bp}Oi_j>o9Bz>2-soqBC3!G-zo?^P>
z*kWp<)ssZRZdk3nQLb$H<V(u=vTA|O&&0pn!|;y}+Jw8-goJOUO5d}FPqpIAG;&Zz
zot1|p8f_9sNTCZTY+QL`O<pFI-b`f`4;;HDQKRH{#p6MCsjD3qxB+;r?%Ww6#WVbc
zo0r)g!8FAM8Ayv07r56+K+YmSE{(_^@GI4XWMx#$aA))5p#tZ=UP`d@v582PqJO~`
z+q6hJxZ_jq-bz#_F_Z<Qz}BU#7J=k@lk;6}jqLj0;IBG5aFrq1Rhk$qZf}x~h^ry8
zQS<>3m|muj4_uPMbnTe?qVyj|$Uf=5Apc8FRHBK1J9MxvH3cu_TAAQ`0CnI!!O+ZY
zP<H34&PrXis)VyI`u|=;0cI9&*8C%_!2Khw{I96l|FwuRS5*N806c_lP)ku$v?~%r
z@U8V5p?EtK(e|#9d$X^oG}IWAfNS?pnnE6|Z&e4cZt3DUQ~SQl(Ijv<<Zkf^Z<?O<
zewt|;qDiVk)DB?!tUeB*>FC@o2(bQUHZR&7Y>u=V&q89eQN|#|hQ+QRh*%=Mj`HSj
ze;ZJ)&D2goQmUYMTywE|-_a1>#nL<zrK^M1)T>*u^U)@<`bk_MBhgr=&>Wgg@A=`$
zunyU1v5L&LhDHAaT}y^#<sL_}>|n=LKVdHP>r139e;X%d?FKeFLi+W1Ff@1faE9zI
zgpQP0#MZqE2O{erduyv2;Iig#+`)CfxOqW;S|Si?xRVHzYFNb?4%Td~x{#m?UHvM7
zgm{gN1f~-8GnINSNGsidC@O~mcdT)hTlEKHNP3;x1A&xonvVTF=wzxgQND1a5KES_
z`X^Y(ft5WE-1a^+2do3rTod<74Vz}-_#cAhsfA}=txhg%L4p|SHa}=yfe@#lo1_)A
z*EEDPiVB^zbuO+#e-c>}j7r0LgQ&-hP3NAu<ae$V*u4P6r>2BvGn1VRf7T{YoXA03
zFbBI<MEAn%h8w}lp6#_bF$qbS&YGu#g|n4Tsp!RR6Y9$Sq3Mh$8qd;(%f5m|iE}Vh
zS=vAo$z8cHMfr`O<qsBIj^TRdduPOuz)CNn8Zj;VX#`i19s9hOu0oSRaXy{OvZ?Hv
z{rh9KO7d(FNTPWvUpphPHvQ2#-+c!BlK8gqzUb5#M|(~gLmV1k6tcZAevJVZ_>wBt
z2;_ivJ0zIiIxo97$g2rv6G;F?=)P?S1Ohzrux&aRji85+UBhG0{VL$FKZ6vcG2%8T
zrDth^k#e565K9m@nwOKebJ+lq1isCrW_)ORtbl3yVn_*gSwP#Lc19ZY2PP>D1s~sd
zcWCx@qaRks{_g%;&2%9qH+1Mp3-U3|5eSbz3^JIGE@jZGCPSXz1g5%|3hoH6@G7KK
z5i;m-B+{p#&H8#6sVAdxa`0L8{A%aHS^HgXx3o<r(Q~ApCGdDjZIK(e4dRN4D=d;h
z&M8doF+_P3TL+VepZ!J?ur!6km2Fb#K^{tLrT+o3v^ntVkOD@8H!Gu!RheLk9FP`F
z7l9{3PIO}2Xblw2r^ZBzJ`f)y;=S_VxTiBWkCD`?&fJ7ZDhSZ?z6@8Fn|UhH1Yf%%
zZa2;wHDe>r3&%4|4aEcndk50}4T{Q8Z}q-JJ6@%g$J%T-gC2m<{>3x!4!rnopiIoa
zBdp42zk}cRY?l=)ax+{?_6BypFyVV5vJSK6^9&<fxMx>$wvDVD$?y_XR}Q_~J@9mM
zF#IV<ftf4k%j&2S%|!HM$s(l*iR+6NJ8eG`De0n?r@yae*kc0rivj2yZbTYEq}@3*
zt#`9kAIiKgyof(GE$V2<#qA#8^c<)5o=%yVHn88Nz%kV<I?n*I>JgR6w&U7+%v#tx
z>$d#?eyLJM7G3wkX;)$q`scJV@@3+ZP!ys!He$MBY9&2j67DQr316qhp>XX8tjgUh
z5p8vv6SLyZb<n@n@)|qNzfbJ1=(J_ey2aXfu;WBRcG2xA7B|{h{bY=F=+3Ubu(V4C
z{_{0K$@$aeT|20&`u(qY)#I447w7RzR?m12fxMgU-ZY=ul|1j-{qB5{mI@wg%u99A
zMe$g5M7op2p?)a{>_;~J;RJeyPQ45O(AXI<=YG(z<y$wvrS@-G+<glEMLg;FpuJH*
z=lQKUQ_Qs|&jQS5p?6v5V%h<mYV|CfHHTi;RMWRQvuzU`vAPyG7wab;A&%olN_!0d
z&?`a%A66~pUDd2d3OH-RNcv*Z9%f9U8{8SddJ+m_H}+7exx((+u8H7u@7p3`zlVBn
z$kg}=t!bNMzD@Hw+q<HGNVA%#yybIeq~Ab6zT3MjA)CMWv!&s}#TW2@|MSbO8l-v9
z0RVC&|0j^;AD-6j|FSmB@c21xwI=#$<pDX6R~%0!=B$}|x@KXD8d}SlOps4HFni#^
z$qFISqg05;r~26Re%{alAQh8rN#42Snr+U5yuKMWbOG$}n%4uTnpU}tg^|BNYmr;@
zgTw*nx+>p3-N%+$y6^9V0A9JQhxnyFvi4qv4a%oK5is?l*qDy_ip%EG2@Q0wL>}<V
z1W&0BZy0+<+!fBhH8MnKVwg!#>PzDA)@vp<Mn};^pM?`b*@4<G8%)n?O!f%$v(RBa
zGYMpdNY9#DG#c+{7w-@}H_^pHt;)okwd%TKg8yvLfE@ORYdG*{hX~9gTkF4--FkVM
zw`@*FmCS=hkjx=~zkPvrIac>_U&zw7!hEwJZp-V_*`M0;%a>?Zu}rkb8A6_VF?O9m
z$SpqlmpZ1>a!iG=pUt3UoiNUjHKal6L%N@aBq(5Avtj9cxy3zaSK}?(_l|2U*)^<*
zi;sof_p#sLg6a2A7_#X3pMuEW`Gb1L{mQx{MAE?8IT6Jbo&hZ*GbbEZ%w5dbV0ckx
zfGpGwSr7QjeyLxWWPs#LT8Pi%*Y_P>FikTl(3J!6fZ{PR06_9e7gA^j8DLt{k<cc1
z0@zM8A<tk}Ie@>WTeN<W_)l~Qm;s261h03=-r7r4h#!V0(L8%#lljjO3xsJ%4U*`m
zQ0M>iV!SJFZp=W%vn&^C0vZHupOLa7wd-G8btFJYrKTscN_=@w98E8|UIj`bVF3OD
zipvYrBZb`lgE!y|{6{T_b(gs3_}7BQ3261+JyIhO>xj2OIvt$KnmV4O0zeJF|9P%N
zpf;$lIG`1~3tUZW5W`TxXfGSih@gv7)f_J=PLyF{^$c@j>$&j(fLVxMdT!d_%t0s<
zQF_)ol>P8|;bLdV=-!(h&A$$8)xYZ#EEx4NmWEIMy74zTCob$CTB&~59KcR|DdPLq
zk}H=Z+_diu;GQq$MGQaV<@03N5r-|8;q%bZ9GH)Q;UcEA^~B#(?E7G)A1|i`b6>yc
z0VM(E2HFdXx$KB7VK><L=<Rwi^Lg%IZI|22T%I3k;_cNL<QQSXi(tbjt!HBSRu9$-
z+0}!!1BV+;_%B%N68`HowADNyo<Cg^pGFa-)2!DJ;bQT810iER3#jQG&3?<9t+}Kn
z!Cil@#<vCbz)ix(|4|8s*qrEUdSl>M@6f_mvb?RSn`2-0)EOYbHuBvTxSJ%RPfH`I
zJ^-0t>d00>9pR-MYIix6y*xny->iA?2&TeE8p!akdrz_(57r591odr!b1dS<fzcFj
zVTPW%sK>-efwq*bm^wPMH;)vd8?xi-1ZDfJ;q$?Z?;pa4!D3>_@e%1SgRU1$*Ur$o
z^YQ~Ft$0f?z){xoGMNLY&YdhFro>h^=J}e$e4xe0!p}EdX%36n8*sCYqz~74^Swn6
zi`oF}9vAG-**4NP?lkT00q0@<Wsl(H4%R2bB!a%3O#B`BExgfZf%uHhdf-!`2fN$m
zwx7VNd0%xfJ{92}UeGnBn(TKqyKTI|rP;Fy<FU5#o@g{pYR_q2GrlhH=3h}sd(jy=
zVYILjsTCt>AdvgVBk@7OrZ{I!ZP=3FA=Cl_VfsOo6?9XBB}9Hz^4&8>AszIHpw1f5
zZ3IccrBqyM11kQq)zid$uLuLG7sPQw_FrQ@IUzdqRwhxxI<Pk8TmZl*8crBNtPP-T
z`hrY^5%MgaDsluVa6ud4vFt#X-37X}!C14Nq^)mbaSf9pN(xy9zJerKoE05$9sSs?
zqF|bptm28Nll++FV$vA{#a2^RPgPjORr)iAb;p_QFr@m2Dj?l&;t>w4sWPn7Cu~~*
zG3iFFW%NO*Kei-7Ha1(Kuc`)E-nnCk^-P$|k>XJ&cRQcBB#hix1u3l<>g>lcQjA5T
z*Tajyiy`mo*Bp0BD6{VROgeCH__W4(3VmMZN@p}^^xIk<k9~%$L)A{(t;j!-|0q{s
z^qzm;>c)`+yFn~~`^D=0Mn6^@?CLW(*o^hGV-3=+IF-uQfhx|t`y>bk!rN6*_%-pN
zVQl#IBs@^kt%Wc*S4*=9T3{>8>3iSAn>5c``kWNDoXsQixyHrC#`@zZLv1o?s*qp(
zRbrg%WdcpR$e3Mo0g@MlUSbCm1b1?$vj?Go#BU^&p+=v`RKgkt)STmaNtF?hLIzDI
z5}b~9_m3bXVSbO&|KbY<pelONK>~x7oCXJO1RmZud|lyMi5A`NI=bbNeN=5)x@h))
zH<&y_;N>VbOjh!UFBgmd2l#bg6ansngd1egma>7dkI!weKcQ3pp%4AFVx9;rtsRHX
zJ)u?~RdfTyv=~;Nhv`P6(No+B6PAHB;Db<f;VVl-GK6_M^aiEM2J9-As0LqR(K8t)
zc4&?PdUWis%#1g(EL{%qCY7qr%t?$11g}YkNVKX(4R8hoLp)b^RZ&n1b#4kvnXVdG
z^q@c!fc!pAY9HYGlRBTgeZ_=jP19Z&+<(5pGn;k|&)TIUW7EX*gF}9m?o%-jOy*xR
ziZq4an4UK4V}s+~`{}%7=+~c0x3`~Iw)wWk#F9No5dwk5yW+&i;LU{o0SlKR2gr)v
zJKu}grHfEZ^Kz%;$uw%u*XtM{-kbnw+P+L#>pIR`*Cwna<xq)6bo{E?vZRz>rq@y$
z4r9I>a=AT{xF&j+5C>F>T4zM@;NXZ?#O?1O`9l+>zbOC5T#w)T6n<ajH!7Im@}ez+
zea$Y)&B^aV$eloa0Sw|uHMhebSU0XVRG9bebtaB3MzyTy9zisE;u&wB9~1DYbdYyA
ziN%QeD{qiA#UCz&Dm+Mtxrzkp8ywy2NcaJ7dmB|j?Gy;`T#y;-L4*I%i(*Khv3<0Q
zz@eegB~6lm<u4A{&jS`?#PV3$8{k`@)~s1sy8HYVH~l0h&HTSYX})}GkZ2003S4d?
zqw`GbZ$KgJ;RDED_1O^ZZ1kQz8XW6h+omEkCWo8ndK!JJ1K95AAeW)}5Cghsj*K)R
z4GY_R%O-Uw|9Jl+R>X5q2*Nbfr4CEvM`i`BtQ+Nfe#V8?_30o{^z8by0sbSOKit7_
z6Yst<ecqI8m|$9CNI*JIDb3L1_I@A+7+=(YLZv5vXcI*q>itOV(>y5G%ZfhJ-q=N=
zPlc&&cO?(BGsfApvV>(r;7+!&%qa_T1SJ?*6%q;rCyX(|G|xrb3F5(8Z<Vf-{5dlm
zDYOG5@XFYrZzdUIG^0vXq{^X|8?OjisXwtCw@O;$m70axMAs7K{RY10FqlJ(ZF>6m
zA(Bvl&ucr!Ehgt9sQ{?=a=rN^M|ij&-X&48uc@&pfC0WI;h=G%cS^TEX~z2Ie?jZ7
z=*wN+#EszH0AIgv-pD;W5usz{u}wnZFafVAEa*H;WPp6>0A}`qXn@OVId+Z(10R5<
z!_8HsEap=~MGGP&=_zg-)a%m!UcSiNNqMltj2ZF!Xe9K+a|0FHVv_KN!&HMoXgrzB
z6E#^(gMy<TrFa^P3H&aFpKCPTqVQ0Ium`@{4n#>3kVe?_a`?(zHvNFg)kaDW;$b&h
zI?GRW5=N*?H0r?W=F+-W8t4L`f2tf<@A=cw&Sz*f$mzKTM%3s#Hf=(pBs;1LK?c*X
z@3;NMY0Kj|3=!PAZZ}-AOx`f$>K}$cPD=0B77}-8+zhSa*|Ss}@cH-M?GiCud*c~j
zVF{W3azUjLo<zlNhN4A@NK8c>kxeN5RAN~KR){Zb7xeUGZaOn>spL?sfN8wCnnSt{
z^Te3+0@zhZQLk4iMySU9F<H)o8-aZ(jB5T^GVoN!yO9`_zktU}hRP~=8?y9M1X)4*
zC#0=<D`L`uw=i|ByN%`nm%B2oUxeso2LQm*0G$Uz=Yr;9gkXw@3SfQY*M)?cfgyn#
zOEN-~GGo8|3H_BdC}vB+Y1c7`22zJT>PNi>f8E@7%pr@X5@>ON#sbb7aORRhh$~3z
zBD)TkF)M8>mN`SJoK}aFOZqto%TfkTbzGv#mr|#MSrgR4Qp0eb8jk+}SkC>|6+}$>
zh4{hGW~MEG$&QLr>?9hnxS7%4gF^1Ek51lS5hjlMO4{|=kpHEm0HP3SarL&92$RBS
znTSgmMWR20r<i2Sf~OhxSP+qTm8Q~W7Pr2kZ=IB_1j55EYbq)K#{3eby(0JvhMK}j
zkHMk&kUn8sAccB>IfT?>soP7=-G+Jkd%JJF*kulUGBx4O<yr@pW`Y)>-<OO@rAlq#
z`Jq8OU>`~YKI_i*EMi(P%lK?Db4j_ZyjpTj3^mv*_vK?6shSKBVyoY~EX~V1qSQg`
zY%r5<kgMD>9Yx7(hbfl+N{O128Pwd0fY)VP7|}<BT2eJ*x)X|?jxAvllz`a2Ep99r
zvV(_!ruEyXnlEdtcjzQJks}vYPg1aGOU&+7{ZVv@i(#w!ieFq9-PNZ0aAzVLPm03m
zAI_sx=h{ORWnm`@UER^=6-SiCaH--vXmW|vdC62oecKEr_+6B7_Jkz#DyYhE9>YhK
zIk!X%(1E@>!fkb!eN;u(dJp%fuAF~ueTz9I{H__ziYr-&uVDOFa`0UdwlZf^p~zc#
z!6c!w|BpQ9-;>i<a(59M&~?HJzf<xlQrmRIR;v@!g2w>Zb>vpPQGdt0S~Rel&<y4I
z2Q`3Cywzm?OGuD(V0FZEI{H`wEDvBq>`Xl?-ZCmYZ{mVy?40)GEWKW$7zJD!Zh&Md
z8eZ!=rB;V|Rwn<z=hWljFdXE#T~f3SyD8<}P#b(L2xn1&(_HHbpYmVf29#^GNTnFT
zUBCgFQ1{Jxql^}7Mq@1_%87|7#8~EwDO&~7wFT6tP>Ez^_3JAj*v6#@L}ufdAOTBg
z481?ZW0-8OET@I1G*XV`GV)knm84>z)`g#R8W!%_?cr#p9sJ0GJ9QWTs<{&EfL~Cn
zD}hMp74Z1O(9>UQx~)NLo(h|yJrCnbZjnCej^T;)4mL+yVRDU=$?%56Af(I^p+}E6
z+l9nc!Av0at*gao?~_ZSV~o0r-_`y)%W}^FytED6vaKXxDBeh2MU{ZxcHPJB<i-8S
zMqe;lsVn}`6xdpu*<Jk^ZEO!Z5w*G#L}B-#;L2wYNa@*X{GpcW87kcV{%xvPqN1zf
zh%2;#KBzNS8T@t$`sMBB-8%L2svahIPzO3?d+)<z?aQg!x&M`Xc!K<oB097ZST+|S
zv4;@n+G$iXp}G{q_g-y=VG?NI>TbDk5+$RKLhQc0TyO}wWc5C>!VW3VUOItH$yvh`
zX@S;lci6BxM~6~LJKasC{C*aVY34fenZ9SXwOcpDA+g$GG-9|sWR*{MJQd&2vC+e)
zMm_q#6rnpk+EH3A``9*{SeDmF9Lz4&pbLvs9{-sZuf-=IQ+9M=X<gnn;FmhnpNOjs
zMmHPI!It`>tpi$ata9e>o|e_9ehEqY-h=M1nyMSz^QfgUZs$9U)2IaD|A^d87%x!a
zZ<b8ClSJyh6S#FqGGhH=$gF<?YI@YlGbS>G<yijW{{ROD?`!Syt2j7uk;v~-emZDL
z5c^DsEg%#EeY|N>SFclGUQJn9Cy07_komRYG7ixM3<Kwmta(Wp$Li>$D#1vtYNNQe
zdL%51+tu>WSqoLaUF7Mm4Xo!JK?HwtUdf@a(mJyBVUhx%;3Po{qf89mr?PNcZG&C8
zl;4t03Yqo53O(qNzR+U3-$2b%?(-VeG4q%^J0&1%)1;XgBwpEs!@G7|I3t5?g}vW|
znOA-X!_%tp2f!Rl=d3L*WB)2R_~hxHRVh=tfy_ZS;T;if3xRTFC3rQ|K8~VPktg-U
z*EG2^(Fp>GUKAbP7{<;?T0A+{?MqB~v0WwX5wRRUb`M}bj#ej7eN_^(YxV0hnb|T}
zDF|Q3r3lTInb1q|e4z4plv_Nia4xQ^4ok7_c^txSyy}ijAC}^rAOH%x!f-GaA78?G
zIzxt@wRm@HnH)1-^j#bDRjLjs4ehqXKx(ffo80P4th9U{kv4CpzvyHPfE2l%B!K3&
zZNgftS#mK@E2i)<A}&7)7Z2sH1BU4C0nOtr5`oSyM!B*L01va(0J@e^svQXZBbw7)
z-M5NTfG3&0F%DRNlTzH~R}Q2w=gs*-v%waQlnUGNMsC}6cI)?j!!<1STPH>DUMS-W
z$_c5%%B`I#Ms9tl!bDB)2T(oZ8AigNP4wp*454|`(UtTVD<jXHrRBn`A7kLw>{__e
z${MFqt!9cy%h}ZkBi(XN@5G+7He*STQNiaY?s~4;N^EC+h<eF{?G?J4_=jHfXHWtk
z=rH(qO?Y=92O$c>ZYz^*I^ndZtWX&iVb4io#|m7_ihgSFQB}<7ngIf7^>BX`Egjk6
zq&PNOELs<bew`pkMLNhzw4Mp?o78?~?&?U!b#>a{cpro(sl?DqZQ0Fa1?-U7*n2}V
zk>Nuy)FO6*+33)$k3Zz+OssZ96Pogueoyt0x8bYu4=gE@2GdP(aj(-|Ba3p6L=HPa
zeb=oWUkjB5je@>=k|Dwsq%I*?urcz|o4LuS%cyner#8A2W~NTL5oCr|>a}gs4Htu1
zi-nf{RoUt#ED-C4{PjkfQZ<FzzMN8T7!G#o%b3j0VHmq=<t^)CR{p)bK9m%GQ3C4P
zxmF{KS>d(^!j&<lIXu$ER?-!fEn*oeBgsws*~t0IV-=`%w-f02U?{E?^rQajXsK{%
zryw1(Cj>FG$8O}s7fVcQKss*l8Yb$Lx9$`^M7rN_Z2JEorK62--YhbGN)JL{7M-HI
zm12eyc!4OM8=c|Hx?+r(({CE#WNsg&CC_W<Nz1tU>Vypn2Vx*;Nk2Y>-T5+tI2ATg
zhgpK%K;%8LK)+@q4!BkKo6shTk5(?%h9nc03F#`0)JM^nq*P%CO6YDFfGJ?dj((z~
z_gdZIe@2u2Og(efio#rzWrxzCu^=(1H`9q>^`eD!w%#r4d}EdUJdTkmb5a%@Ro%pv
z3u)=bl949~S7>(<gLxgO==dX(lG)HaS&@m=%XQSXk1>rO9@e&fR~hzv@BTJiJ<HY6
z^ZQw(dRnBXJpuSWF_UOAE0^jq$s)_0Q+*ip`xama*xAADx6NInmnZHHCb>Ob#P4k@
zd>Z^N73ljhb$6iKCv+T0{X|i+hX*q!Ci9>u;E7$XU_r63lf&_TM1gL_9j>UfkmEQK
z$uIoS3Sy=uWp$KmON{Pl$=j~nPj8^g+-lAmEOgslcKMz_t{;Hmyr=b|e5K01yy)AL
zy|AN8S-%VEpw|*Fa3$-hp}GM@M*%o#q`iM9ZwyrscKGliZD>~yK%WkXT}}`Q+TONc
zR&WY~M{Q<H>|)huW7f!0eu=+e8FG5XdPIF0VLFSe%PRR$UZmK((0lYXAV|sow94<A
zM;tnTz*IhLQ*#GRygycOb7Ql+_CC%cLpGn(#(wbF*5Re~N{BA=r4y_68}(YVCRdM+
z**SMEj_~6K>d=0(;`fc6%BG7hU!{~qj}!pyT8c*FkzUj{uvOHm<Y`asm;u&4&SLsw
zrQy};Em$t;VOH$hd)^K^R$p-XmebooN|7Y)usK~byWQhCRnf<o`7p2NC&|6wHu<bx
z9p!<UC+ihhlrCf`+VA-J>&@H(e^vJ81(e0!vrt;&r+4zE&^(<`dCj}qbJ6f@#zoh)
z$!cnm9%>%XIAAk|P4U*UP4FOGXMPVix<G30i$_82HM3{r7A~&gakk6Q&9@wj`L}ZE
zr}AdX9Rr?ZqT?$WhUwNk#j?ciZbD53g_f-z12Lg2=E>0De-}c1Yu!3zE_kbcCN@9c
z&D6BHQfTZZt9lpQp~$GxtPD=0?@VOM{D|EqH%!~S{eLt6SG78t@L&J{<8c2w^Z#%6
zuJ<1-I-S%1E4SXL{R<b0A^hCxF^VgAsRJI6+8s}-!tM57hRfO{fvB!btX~;p8zJ9i
z23PX;Hd%p>@3bhXz6h5{6E*JUc${XKjWOeNb86o|D{Nzf`}>7J+^%yTJH9+iG7%n#
z_rNrrFi8+U6f`T510C}&g%W6BHQ>wxIHEE2j)t{M2v0PrV1S=9Osi#O@9jvtWA_Hx
zcI{Xkj!6QCY6oMwV-s#DvG|u7K+nvO0NT(YDAaq;6slovm>{Avoka-+T*Zgz_bVf4
zCWOh{=?e+=25?NFo+78c#h-lmsY!rnnj*$|U{HjEfp7+)PNiu}p$$;Yt?~?pbi)_R
zG0rBEcpYBg25VwHP*L8r8b5X)gXS?J$B)n_57G!N0gX&&z{FPy!J=*a!By=v4`)f@
zF^1(i140r}Cg{rNYFmqDFir>Yo_Ji<d+2xf^6b9vXDI^eu&FTLqy1M@Ci;1IE|6lH
z95Rwv!sOmjE8HCcBk!mImUzM=F|6hkQ&1<}bz9OfGi$2NO&!Fd!6YhO)2Ae!J~S)0
z2cA|a#Y~&fq)iY5OOswnG))0aW3p{hsUN?}lmsJHQ;*g#-q0$Y$%vPF8BUWbUx`%-
z1l(X)P)YB6TzTuLs%fEVBy`>QFt!Xl*YRv8lLk;*R_i27YdA210}lz4bFp1g)BtZ}
zW{9{3ywqyH_NwE__=LMAoSb=4U?+>8@rpBkvrPIQ2GFx5R{=!Wd#%N1vU_<nZ}v2e
zWgM12f<8B&q0Bkz%fh@H7T0}R?7sFOszaEOHw*oF@P`xbL*fUUm~gZ-jQQZQvkzCc
ztPFZ7v)iRRh>9cHODJ-ZE@D*(3<FiXmEq@p%*=#Hhzjpvlr^FQzh*nZ_;Po8JQD_)
zm0}vqH<+h#*PkjFMUi4o3x9S};YzgQRDHQpZabB7yuTiyV(t*B9wxEjlLt3xm)(nC
z^yVB+6DftUf$mMvb7eo%<P45D(uiURaqVl)65VeM4m`Bm)5NgRhgn=4f%%s1(N|F!
z;wiooo8-0JSs%*{dxYcb9fBe86%n(kshbThlN6~(v#8aJLVF^>wxb|#Iwdt~(=?(F
z3S9+#cHxYQQhxNx|B?O0hw+eHE-A9HFA+xuoh!;@%rQSkhufKRIxCTk)#%<P+Y9K?
z&Pmf(SqnA7l`@PN-J7X!X?N|lCFAab4BCI5P3O5(fJf@X&-^lp<^=KmV609vrP2lG
z81U9j?;V`5W@-Akr7S*Qk7m3bx^A<cPL7DO!^if>zfZUtKOgOlF-o}~!CFp%F3-Vd
z05V~?cA7E^pi<9-4&D0+)ru9o_9c->BxP9xxI=jp#VgJB(dx~tMJsnMEy8XHjD;8q
zbdB`f04CJTDOBDd&>)djjUb$Q6QSs3G~$H<#2Qq36roaw?*hg)5e%r5Yd2Z{9FIuN
z6fSylo3;hKTq81#ry#a6UhA!IsX~iy#qg<a)JweF$<*`Ck#CRr=I$O0D>M~Gbd*uC
zqLvs3Fl<`NgYam#DtsyxCd$4I84Rz6StO8z7BDI9p=Hh~sH6YY?I;c%82p6E-woaL
zkaVv)e2o$ssadfE)Qx%#{a5Ovt`0tfvq}3e_F$t3;BAIM|C6W2gSEV;QZOl@bxql#
z5Afon6-|f~`nCe73erAxG-JC?A9#O2HwT4d*JlFlLYN{jD%Fo~AC`oi8COS`5Ty-1
zk^iGCTIj7-`1SY*U<WoIsz<G3@7s^3*L_b@m(n$-E%f$29{zW)Lfz+R)8Y;F0z~bj
z0<G?;!@cBlt+>jc`oPt-#gBLu?vy|NQbSsG*W&wM%CO~QgEd9V%Q(6WfKV4ZMe9?n
z^Q76Ur^wd}@p(hDZI3^4$hK_f;^kwktjD*@ZS~F#T?Z{>>}FTddl6EutEcFQf#Wt$
zv@D9l(rxxb&>ks72MsJrmp%4F(AyJbgj^9P*LrJt$T#Z}FK@ZGM_^Ak|MwTV8J%}h
z3C!-LTmzINzR<056d6Y`MN{^PJB&f1FAc#-C6u?RKHjo+b@IT_{18|8i4WjV`%wCW
z{J#ZVJoQ?Y?|&wqEK~ph;{O>{|35=T&&<f?zXr>{)cO`1!cVQ9gG)3muJu`o%}1-V
zf;Ac9zD6zyJ8Wn{Jn7~Em2|Ge8R&Z4o>Q_Rw@oLT)hDe*ywdSQ#~I%4Lvf6_mQjk`
zg_Bv(eb@YhN^jxfH2ofS1?;zFm?UG?h)3m~iduK!M7Fe*#Glg&8b~meNs&ru9vL(b
zLzM(8Ghpn_k*`jbB`4vm38T%O-Cc{LIo+sEDRR(|waxJi+k`Z7-1II@u~ltgg{eoO
z(ws>r0_76ficx5=Hahe_iIbA(QA`Q0V1Oehtg?}bjPxm-WrfYZ=+MCNnhBK=Qih@C
zirP|{Q;wz436wKahe9P7=}+tH2;`!vsA*JrN=nBSl|hYLri<N`?hE46ET~D?Qj!US
z&VY>47KREY%kJ9R_ewQUA>+_RNE?Hli^+g7f@*R$)@_&rCW#}KWK*+e?)`h2c<ej~
zrkwz7q^MnPl4n0E*FUJZl|wR7#*9fF5q7aw(Bz8xCB>T7#ubPE?rUurukF{XEexp(
zu*Hp88w7D?i53s<u{=UB)ZAWpljmI1-9mIyuvlv>soA38<pjk{rljOB<}*;l6^l?E
z;Uwa=>MZ0M)yoSb!`hB)%aCH8bjY*x)+*U<q-JWmC+VwI=7mP|#q<2paytSDqeK0E
zS1%%QaI^Ik<yY`?KzHXHg+_gQ$bu5L`C%J^DDL1z<M2ZHEZYcP*sc?}*$M9KFd`U<
z`0;K`*Ixd>zWZ=Q^1%wG^EYvxyZhy${`mp;fJJvX?uanNeI~emoe5vUT!?~i7;(1&
zYj1_jR}b@1VE16r!W_;P=U@qIxGy{Yp+)-VVSya&x#+H+wQfY7xD5X4NOmIxh4<?>
zZyTh0h<PH=!!P<50{#_V^XMteAX`sB3o(DzZ(uJO#UT&{oAwIrDLV1shq(jNxA&`6
zi$V|I5TolQc;AM3k#L4i%PzMU!N8YsK@Wo~gyZd<5yW&^B0+Hf`o=*5lb{S})lm<w
zEx!p<Z&RSqx<_bV;SeamPGR6j3&p(vUr2xqm}7YS>@y0)ek)Uel+v-iRWJYahr%>`
z?MEAELVF?6a`B?2!)s_&rE5hX33b^v+d|~UGyRE520JXj!;KJBzptF*DAT1#5BZ0X
z$#PG*QbzX`XLFuKVyFtWve<3}m)<4p=xGzU04!k>XA0KM;Zp0qb)e<F9B>FUckkTW
zI1D{}7QyJj4?O#k{^ICS+;3#~l*f@{QMC-R!ksZoP(BKpY~+~2((YD{=#nkbzDg(Z
z2%!$HliVs%7>!u|V@cOHu2!4yuRo#o!#!J42i;kzvcsU8B*{Sz8bcOl&q8d<`Z05P
z7z?PBP1Sp5uuyxtBTQv=>b2e3+AEaJVM46k*Zyu_?z9TMb<H)UD1maXD<sv5o1QVw
zizDx_^o+YVX59%crbmSaz^G<br2nw`h@(XWHEV}mtD<{-5?%9@0|(OW?<*?nUjW^w
z)NO~@PI6m&l-ujxb-QN%`PbRoq_Vl!+&*`YKE#%?<y4ULP~xPg!14~+81)peX*}O{
zY^|hMjf}{{N7BOBzNHI=A&27>8LG_XuaHdY*kwAv`|hR~Kkj91Q~2*=4t9;ZGpZds
zK1V7%)R>aIg0&(a%i68MyjhY*qcDyOhAOhPs<c3dZ142c5g?oUI>Tv51^jU4wP$$Q
z1%rz3Hya6iMs$bPy{{TFMcyaEFNY_AxL1p;pXxb4pU~BJqJhXp#Ti|}>K!xroCrt0
ze<V=VtG4Ep(qGz&UM;27W}!~$g-!9Av&q^ATC7@qU;n_l>cAC6c00PvN@G5*9!txZ
zX}20AVQ#Ot>J-^)480@Jk>RB=_>?DMsx!D4{L6E%wS~q+*Ss4aWl|ptl{ez{ze+I!
z$9}KG*WTroa}r+CD|L0m)EC0IJ{_@qR7LONsSC10o#Ko>Rzsc?HS}q#?5x#cLZ6dD
zTEcQs+KZ*%k(p!fYSQ>k-I%?*mQA5A-;s$NzZ>%+gqCW42JcBtinxJBk~bWwOJI<{
z2y#E5|2;<d$R?Zs836zYWdZ+}7xe$XxBABC(`|{P?fmYWnq?X&F|k$hBfp=)ECnh5
zDkya;Im3=_XvPtz?1iv_xpismFWm3v4*W#wS7Z`ODZ@lHWCg9wzvm{cwYcVmwSjJs
zAoCe4!0Q4ei;bt>EHylv0qIKx=35|o+xPAHy2tx>vC|p+P+z&bNe_G$m5<9=cnf_e
zi@|Z!Kp4m4m5gWi&(@zb7r5^U+5KESkwVio(XI_^oBlQ3qWn@0j2Ms<c+ve}Ir|G3
zHqvrsv;9!T{nxUDE3d&vFheY^!55KpdEl)Aa-X%PKx`4b0^N><5P#qOz8@AL3M0RL
zIGrsa3|Iru*mRD8^%x>E0<r*j-eCNN5Y&M*V0$s*-^rKRkQ*;xbm|Zhs&aPM!ZIY*
z1R*+<9|Z%GPhbje&_OUcW58C3wad@6cPXSW19#u!O*vqwcEWf(OMv8Joy)uklxB-K
z8aJ3Ajc~~3azs%BARSy8z%C5TS{x%5ekK@#0g3TiIBzd5*Y0tpqE=Ag!=WsJ=$dgz
zZ7Y<~WHSO5YZdh?$;Ba~v64%T!KP6-!_Yn_4XDn9<RV3fA_bQfqjg^dATsvCI|6>e
zI`0E_VE0RcD*#g?en${wn03ef{jd0RxC7cGis!He)W(owRzx`*Y))9q&hbFN$Mmsn
zw9r3cv%5GhqHo758+YJkxPX0odAVP%&y7z?-S5D<uEPftpZs!hx_z9;c5=JD*V(Qk
z0}s;fp5CsW&xb=B6Bg(L+uY|uCtlCD`|t1zf8Rcr<l3m^<VF^{-t6K4@L23U?Y&)>
zFMwQP;rD#qJ)FNf2?0Vm_&9|L?BaHDa|9=vlE7GVYAEG&BiwS9hS=}V2BM1E#LfH^
zlImh-V+%Mz9-%UM5bogR=3?Ra{~>Bo@A$KO`7c~SUhhs6-|lY)7P@AqWcvX(QFHdV
z#>@&oPxo)MtdokxO2+_{?&{qa0JY(DyKn5R=J(RX%W{UAz|{D;QvLMl0}}l&wnEQ)
z?{M%A;%57}=WBwN__2_z+n)UXQBK_{b@95n-FFIXmm5i#&Vh%V-w&Ff;2OXSo%y@Z
zb8&NgIIhCi$jRvuO@bG1vVUBi*Dv^x?c_T}df<2DfHyh0^G^Yx;^B0M?$Gf&#U(@p
zKC7KPKMuY(7A72U3%WV~;*Nui;|biPiQFd{U9u@$A3wtfM?L31n1}D}Iq(0aL`pAr
zC4gK41;Wd{AT3bMKg(FvblCRzem!?Nd#?|&lSi1p6W@V5aIp7W9$^ySe!l~se+0ke
zbA;X><!24GoqvxkQa{{3u>&|I4NN!*pzIV+3=0novpWVD?`UXgZGCOJ+9;wNpVw1B
zb3e;M?;9N6`a=%N>N@&*T&jlt0DeirN`xSy%~xv>=l$8FJ5Y@%2CU#|ij5}0(WPeB
zZ|#OtomqSE(TJ!CY}$>k7;<2ar7M8iGuq=s{z$G!zunzlW+?!?Dsc}jHd_t|WDiop
zYPd}d3J0q*c{UWljA94pd-WX4ZPqVp_V3WWo7Ivh8eM)SLig2o;^}|0IX63w8_0k?
z*aWEl^?ly%<@jFLstIfC1wmrvL>m7qY#w_B_ykn;D#u;NRW?rF^9COFdzl@vx`|bA
z1|mogGQbb(g~;F0EOrY}?0d852L58kJoSPz2WLx`pY1iv8ZMulWpFpxAOID{h_LaQ
z^p<mE`*x$m;C1$@F`(L$13Kq8sO#lsr<Ql!Kd|WY*3JGPUhAWL#8|x7BT-#flt~N7
zU>}YwO)w4Mf2uQwDPNeiJKTx+cU4~w$rNx}kiHU!!-#=x9~QxgC(2O8h>H=!bYK3H
zIBf4tFyl?2;8h5mHVJE*ixF<li+Jqnuj{dhK4?F5y^fOep`L|(z|&r=?CMOS0HQjl
zu`j$af<(<GkE)>vl^PwPp5{tufA5HsfLwr(|EqO4>3A?4CNFPd4A>`Abz-Gh3TDj~
zx*9-b(4N+-8TqBCZyYN)yBi}!J=E9GcUp<QJF727S5iHAj?01wDcXJMk*>%nmAaPO
z+(4^yJ)9E5{V)pN9kBV~zjrV*meV6|X<Sy|a_bK*vK~O`u`3+Z-20lxn*6dnU~q$%
z;z@NIc389?K1}}Jdhv<W%MNy!7O<3;`_><l5u2?yQszR#j+FQFd|P7yb(7n_d5J7D
z07uS7H0?MECbp6O*L1lt=Fj=bI<uuV7Hjc)acI7Gx-y_AjF0FHmTW-3LL!8HtPKNV
zyMWw^;urc~x(m<sKf)xy57C$0Yqly@1NeHY>p`ey`&<%iO@RQ}Aob6*`ymVF#6rTm
zP4jlg>igREih$RlwS#0F*bu{_Wq{p<08x#4kco*sXzuLJ;&5ABi3w5~*$waE-k=yr
z<<xF0^)>ngQ&=@Gxc4);fLMovLc^+>h@k<zRTC)tW|3q9f|#88jg<xK<FT{x-Sqtu
z&@>WtXOZ2smw*;V_@y%YoW!sa61g~^3G39AaB|-vR(c3Tt7i8X2tYFU<QRYU=j3?P
zwzZw*2Z8}<fdj!uNyGmcQXPx1OPiO=CaeR0EWbVJ+zr{ViCzE;$ssz=72!mG!EPw5
zxFQkQ90-Ow%$AEZZ3CPQ%2H&c$&fX@^!)o3^lhRUfsi=W>}`W;2{Qou==pt>fPnXY
z{y9ZJH+*8rw5u&8q>if23NvVnF3@OFwL;07g4IC8vwA~p4wi*KLI-J*5}pG606^2#
zc(T?&=jU;ENe(c!@a6SeL562p&Xf8haAHO3Kal*BOD>;8vIEs?BYd~ufd~f9#ZnIm
zfsNYHI)9Jeg=J-zN95;3t8~(?{qaew0Dbt~D~C+7Nt^@fVJbwt1!W2Lw($q9y8{T#
z{g*QYK+i!~f(<EkD%c)-o;=amDVt#iLj1fHRY0t_Az0AZB3>A>(e()=Tr(ozhJ*wf
z>}3N94Cl8nb;`(w=K}>X?bkzf9p|rp{EMqWSdg^>UW@V4Sw^Jk7DLa^69g;gE;oaW
zmFAXM2SJ40MaReS%)s3xvHZmv2NZxB<w{8aD4fwMXM@gzMhkL7KlB8kPZU=*jPvWw
z!@U&s^<u%~?<{5v?+ON;8VvgT<?)SA&WexI-qrsV#L(yG>JEW*P~nNe=V37@F+rTp
zHZ`(gNW_CCA}XowuWNFI5>$bmFhPqVyR7I(H!>h8YQPQ?fEGsI2s7xx)`IH-pq&R;
zTdd5qK6dE&EFy15$o$KfhFMO346jt?s1Uz1zH9mPCckJ^Dl}~wBd$sOW#wO4+NL~%
zb-g5a%EseC;4ev6<XhAv0wdoe4I;r$_byMOfoFup#ZA|(QSmeY^}!kXV|jWSr~Suu
zLZgSz(SXUaf^Z^QIkXYX02VRctW=5{)w3MC8uDG`fh3vGh2K{IF4o(R$Qz{#2`|7R
z9#^uI@Di{2VVs^+YqCK=Vq#HA`%pYmCItQb=?LC#4{bpq4Bod4zkn+3M#fWFo^Nt7
zA(Z@|_zm8rDQ=L}>h?8f(qv~CLI|hYnm|8@86xK}Qz$r#dv08hP7=8MMwOllf+S=S
z8Im%w{Gm9$Ozb+n7@3QnIK+1Gpo191;QK6rPVgaenor)I%doU^O#&IhQaBIt@pHb}
zmB44S6v%|j<rDvvD=i_{v%Wo=D}NHGgPKH}Mg+-<mdOjLI*rJ1Cb_tFiByu!{Mc@Y
zChpzStDJBdSe(wGdNR&V8apw`Dfq=bH2E>C>V#Zoio-Tpx#l5`mw&=3>#1S+>g^s6
zCHqa#RLEqLnn|yDxKp87^q{Zg%u8=bQ|&Y*ii{G(AHeJkL=ZuI^tWKW9|cW3jBrST
z3g^PB2s{0syy}RcIC7s(^JiqFL&qQ;cNL}=R2YpueYb@11ME0`t$iAy+WVwEJkx0&
ziBePG%VV9l<^IDhQB6^8Sr@;zie6an4{EP8PE~5@N|H$kG)Fd<e~_G8QBT)fjY(+v
zM5q~Ds+3~8w2=}6hKNs+D&v8`cyLgi%+X<}w6i5unV}$&A8hOI=3q&>c8O3iLEJGM
zVy%iULX^_u)$&n^V+McWS?h9@lV#=M>8UB>ijv74%*ZKmip*t3kXWS{rGrYrR^jC1
zhYoQpOsOT~MMzOaXHhCtN@sg<`s81U!y+eeu_j24D@=7(x-?_%6ZA=FG!sY_9Oph4
ztdrADZ(&Olq@L7*tlmb0YEF!2r3Kd)G-XJR6iKbf0uqXVe{mQ!X7tJxmAp{*_+x>J
zN+UBIu6^UtSP$Xx6sry98mkYi@L~A0Mh+>V-t@qx2}na`>P-(;o1RMV$k}I8XJ!Wm
zYQW#~3g_>yLVXEYTp9g#Ff6U1Ue@vC&+BahhLrCVk2~+t5Sio5=_=|q?00qEN!Whx
zpl=z-XiOczE*Tu^OVKq+st~nNU~V2;LSh*Uh7}4v)HmEnn1dxxISZp4Q97xmFME^I
z$&$Ot9$MG;<>X)}u%0jG4`wXRUCwlH*4f<ZBjOD1{=b;#oYoGlCVa(fS#esl)vkX2
zd-wGJ7Bkai(hPU26<t?_t$V?D-<|7H=+m+UJL08kg735q8`cq=^A<NVqu`U%K?s2?
zjFxA_%e!0awq^{Q88P#-+V9sYqzZg|dVc+p<4+`Z-Bd7Z-bJbzTps7mW<^W6&^fN5
z93JOiw{Y2f7~h!Qt<(g~y!c{Un8}WmD&dQ|prN~2aYb)TG`Px=mFmpC__{L02&=na
z6-t$-HpSAQa3;fSl&Y$vrkBzt#i8rmRRLc%@rhMap6O6r50rjzZe5zqTM=y?96?+x
z<}u{?zw&dt(&9MN`1sWZGBwD;YnZSU8?ZB;lv{H<(qqC5KK20o;@K2&oGTA}1GaC^
z3iVi|F;o<7Y>&iN#s2qfe8EIoBN8_$%$?34Rd4|r_US-Sof5Y?$&!BQsn`{pK4;r6
zJlj+vF(AqI=<h!qNj_CXl*NlQh@c!yfHo;ouk3QbE8dL{N>!0wKcTl2cnha5_Td2K
zb%b|h#ntj9$_=#5q7LHu$dx+&7}at}xDNaX8zo4xv=l_vQ^>53i}YU?5TjM{J*m*r
z$?-UL`N`a=*6yU<#Tn8nFW!<;2b{D1ZR?fQ8X5R~YW=d=nU>KGK}vgVTj^sF+NGow
zozpE;tiC<`xNtfC_@#{xc_S$l^o?hp?}^t19P}#XbcHz=PpN7_Y>S3xk$)PGJ#}sm
znKGUd7S#Ue7W2h{+=krtaKF3VT|e)i+nhDOwK~DXxv?nTBlj<W24t5<Y><;PplrRP
zrr~i^Rew)gLw80t$)kqXdV6L&+a0Yz{s?h11f8QfA}bg(2)G_0%Bl9|Dr(AAk+4*&
zx86KXhB2%Ne>doQXs<r5L-7eW5fnX9%M;al^UA1?ZA)Uh8#eK2aXSADPNE~GXSJNV
zRQ13Dmr)H(QHH4XT(sYTWK1ejsGKO$J^%p#lpX}B!Weq-P@Xf>?o>>&h@yO~KgO8p
zSy%2HI+#?>EP-lj&gQ>(@+cp7iO<2}$(2Hx-Vwql%!5%bcej2(QD?KUriBfl_N6aj
z;_-SGKh<Zq#Ni=c)btLFH<m=;i(xOLOu1XyL*UB-6wVj*5TVC@V`?@5WEEPl0XG~l
z$crM$_NpY=v?m6bm_~635uw?09@2`pqlUK@dwP<uj;VbrccTKHUwh4h0Vy;oC)RoF
zxM3Y<upJ@_$}{=K)N*;Z9j)C8G-F9!wfeti&6b)oJH8a_R-vvbI8pnWX~F)rIyW!T
zI6kMfvS~eH%W9lKYpGz}utj6vXftIG?%N+j&jeF_5shs{aH@<Fr<zRIkY$&)8I}?@
z+guOR6OyGVAaO=r$dnhQDIiEyfS0BSBUKqfiZsA%iC2UoT7@Fz61+`5LyC#6wm@OB
z-vQB9k(p^XY#B2A@o1PVz>HUAvuevXo^E|2J1)u*B2j3lHbIe^CDT*v<W^;lYM8p{
zkvj+AAuZa;6Knq@-o-Chlhgj=hNtDMCVSr0=C1{V3Ge}W34^?be75V%^hkUkfcNu-
zfCqCwj}5NFzlDEPn+W!o<Lw9L@FuBUo0y%|umgbSSb(mbDoTX2l|QRueL-|zevTgC
zrVK>>&#<ILI`|n8GK5TJ!0$!2)_L|3BxPXEQ)ggGIwVD?AjJ)@u>K)BLc~mt&yNxA
z&-l~8|I^u7hgG$F5C705Al)F{-6cp!x1gYa2#4-Q5T!c=>5`Ui0SN`91nKThk&>==
zd%gE}??J%t^B$ig`Ujs`vu4%I>^(D&-x&VsHRcxy3|oDejKjztQM0nq(GK%b4-A-L
z{3Y?H0k7Bj#cyZM<UrSa!ML3wd=ZGyk!FHXY9<JJQOFhBh{GN%m}FS`!?ZypX0qHN
zp&6fbbgii5F-GMEYomE+i@9kO@1`?UQfoc4RdcrUTPnBV7r@h}d81SG!Up#`U)=FD
zkkHA@d|7%f5~_*`3Ri&<$c5t_n72`FA2*=AD+{d^_}s8m;9PHHUCT@TeNu}C<t9Za
zuZmW3@WQqxJbNDIR-*Ub7|bap=@dT<aA?7q<Nm|ku4-Zxig_45@LGEmt5MHel2P0l
z=$1Q53dT5m?JIP1-6YRYd}DguWtr0nP{PfZ-`W_U9*3r%mjA%4VKM^IO6vARI$L=d
z_7c78n|P^%kEg)Np77L$w%XA#^<lFPZ$h_oBy-RQKBStLltFK+j>%}Z^i5jw-hb|T
z6)hC7qFIQZ$mY_r4o)?oK>rSV7_qQ@OPZK6K^8?DS;WU1o7of`hUxY;&t6n=7XFrI
zam#7&8xwy7Hv`{XWf!k_C~M25F1D%`!cw#HO)_=G309M8vq?^NZ&|!gSOGa<DmDXk
z(&XXZ`f;;d@4tPbt!S%njK({{D|e;-(HbgLd}m;sTvg`~%Aa{T*U!Dh?p~CCUE8iG
z9(x5fmph&yb*ZDGr3{)}04g<STqPS~@SP~jj>*@e`hu0gs!>*w((Q4X8uqGK<)Iw{
z&$MaZWFZeV&yGhny>xKhY)Ia8L~GEA<T_NHeUq|S9#5h@pTPehAvHI5z1lF;lJRxy
zg@KO~FZgBhx1p9V*kwz{J}h=0<4I)}M?TZP<zzqZ1*@pbG?5Z@@gs{$2gcd4IeslR
zDg$22$C@;hokFE1X+-3D(Q`YHbZm+({!^fcSp=E`jW@gX@v0O-ek4}2Y+aWpWpgQ`
zXFM;6VuT1k$aBZ#sV@AYr~E=Mi<3jiy=e<OeoS4j4;NLHyYv-`0loB}7%*B)TvE?{
z*Z46>F8rAoJhC2Aq(bE=m=S9KSQxj}rA}pupqQddc|jIJ+w$04SL>zyghZ$1=$3t>
z9EaH99jGi=7h+;AtwFV;2!RCA*HaD|8hoVIf@QM%<}cSW(T@FTRhZNDs5)N#konX+
zWj9vv4m!IHDtpxjBVu5v6}xk;X`{;Hxp2BIH?tgu0#0m_FT=-I!d!PHG~eIdyYDP;
z>-Yp2O-fAr%$_yT+f5dijK+3Rh&bf)%lU@xg&CJd<WG66>94TgJa*Xm0oz{wDSmYx
zgEqeYt6eGwg;5FH?nM4z9p)sfM|q4_gkFPcZFEyMc9_8&7QCjb?*Kc`+X`B4U9IAs
z_uvOq$I3Dz8yqu1pER&;&ue}Ok|Wl1(=@N|oWs=mq83zSqwltZOg5R2NC?MJvH416
zkxrLD^zK=I4Vhv0Y6J)Wixnz*GOma<w@%ZB)apgPj7s-_FVfqDDD%+eRT{<w1aR!0
zw$msY@&SC4w}YE$)L*<6csK@Q=09p!dGE8N$s-&uA3EIKJO_d>WPIH~hu$KN(TApw
zO+2MlY2KF`>VjgH;kHKWAG8}(El}Gv_if`4bjR#H*ej#*`l=ph;rwhNL^;n46#8)3
zxBEd4oBO>u$6Nl9(7PP-Y-k&30XCGi(x9x#sC3DE?mG;(Gg<GxBj$(Wj;yFOdB<c@
zni&a>$UOQ?k)Pdis=^Z={m5$2AkcI&obfQpv8_~-DZ{M#Sn2?aL6gc=z&}g#_-QCe
zu$A819_IdetdY~V-en!;eYEeoyll<AO}Yl=Pm!rq6X{Zge4fzxQ&)MzSFHEIu!*Q{
ze;}58D`J_QjK>gQr`wN#6c8jfu_pT9ZoAND>#iOW5NFyX&Lr0YHib_4WV;WRM3qk?
zs{WA1L=aeroj@~|)0HGMtFI*b1Cm>Zasxh*iWbwMj`1z$u4>?dwKWY)H2i1r0XzuD
zJK=r4)@?1GmAp1q3mS5ryqW%US+|Q;+y+16f1X#|*20Q4oHcSvn@@lH?(WPjwU!Ji
z&B7Aq*oCop&RYZ(S*{$ZFz?@DJqbh*JNriddfnMw>kAvk$GdofdqQ|R1>eA}9^Wrs
z%?2GNhu|L!kbV-=W%JVqZjYX|O$@8H`7v-SL@;I6A+cbopXY9uV6I74t0_mtk(r})
zow3rKr=3y@QdumvMSLPVQZ{+P_T2|}zlfKrVHLbWlE!yv<$PiC)j8sj2L8?x=FF&_
z%l_sk)B&wxbi2B+MkeliQ1#p&N-f1a&A#}yEi<17cop<@tcJ!j@&-q}v4P&eS<;~-
zpsW=!%I(VDYiw)M1mCgfq$tSbTbHjMu!*;g`xsLD6qIA&G98$yOYZjccAr0WXCV1g
z7%lrdHi9W~mHj)G&qYlLXMb?@#19H<6l58M0Qa_@n7W+BW~1;+yQ!ZJ@8mmBws{m2
zJx3|2NX`ZOx`OMfEl%;j*cM{SMRsEJu-n%b1#NT!r@zoXB0ThPMKe`1K0-G^VOr!^
ziql6yIS!8EaTFIruS}+k4188(LS#Zpy-&@}3_NI(26}5Gpl<;7%0kQ?)5M>VV3gA?
zz0YxXO7rVd&u4UP4nGdu7A6>&RHB5&RX6(`F>C)VB~tF8#b(#XcHyZ}b_m~siQdO&
zq+)o{p-RuR-jY?eepHlCl0$A6>MXV4JJBI-^ZY$JvkzjCE_Puj-dD|i29)6y`skQB
zF3WJ|f{8D&W+m>5Fd5#|C?gS%%Dz?kPVAB_Euk#bh!sk!qV<h77RJa9w}#0Iv@o9q
zaXft9U>WVMahnUBTN1I8G*150y!1ll)af%QawKOyXeaMJL6192hRmlkKh9!XbWZV}
zG9(8s(QaRq3r*k~b{;2c#llL+Lt(SJe--vyN)#zC=5*a>vPge9P9I_QbOohijG{F^
z!r!5jFvl{x=5fzg=yaSqx+gEcYFC#tGHFM%sE$eIz1cU7D>aU@_0=|AE&%R-vTAqW
zb*<QPtU<9tVSd_7!tlr~zT@nP8_u^vW|gQD<-9?fuT^g;UzlbUKPuoa7)m@RFjJg%
zU-e%eH$5}1a4**q(JCOb@q4%~by2&QUd^;Ci6@Wym?_RK)nI7{NSVj}mNA7IG8%bQ
zdFm0H;3z7mrNSZEb8<84=VwPT0=bfuREG>Gq|=sq>GFC7(Y&RUh0IzbgTuVvK3aHC
zieMLpw$MH@ec{CoMUSK`?zm+`%WrT?<UptxnM;2`=gY>RZrtf3)qq1j_4xJ+d2t4w
zW*}%-$3Mq!WY<z|Nj;a3cZWC5Leq{BMd3IU7o_gqxn1|;wf&lw2Y>K<Z4X=C`6n0r
zK6*I)9)g)QPBhf&w%Hv4sa(C=E|_3-#^p8_77AL|tow~??Iv{2$m{(E?ystuzWa^6
zW@<-3*1s4{$zoW9v$3XL*zs(0DctZ@>OdKLKF*0uW6@0)Tdw^i99^Hb+b5n>AxQTA
zFlaBHM@g68D;v|GC0MB{9>I8i_^>_u8^1&;q6_`NMTl;1gNH1i<|Gn95V#^7KWdE%
zQ?#g1`hjnJ9lqs$MB8ZQNbk<h+n1Aq2v#zJDrB`n1+I_Mbo}*?W6v%c<p#35gts3|
zP;#~wgCk4^>FecDObxl1c(bhDxNV6p2u0UWylh@aRqLf<)xuj+>_|NB?sM=SGt?Z3
z)s&oiuHx^j=yL)CWw`MHo;|Z_JH2kOs7#s6)L1{AE;*Bzx7C69T~FVKl#fw~ir*3R
z8pC^OxO3n1ZwtVfX}mOkf)T+Qu$}hU@&TqQZU@Gqfc{GV?RS>m_g&vgb9RxqBbTdA
z6aJvlc*VfFdTQR>Q(Heh@ll5!zHX*~5uSSryZs5hXB5RFdg#3)$G}gBNViy+U5>G|
zvnZP@<l)lHI#3@zZg-Or&re5a=^&|w7U}viotrHB#<fl9lt=Xg(?MqxA3o`N&1m+)
zLW^+O+uhx=!&!?@VJ|kpqS5G)jupP&;An|0EG>r?G2)2VM6%Vbtn9rO8*<Y7$Z1}f
z92mC^QlPmlPn?DeytE^kn*D$g+;gYg7frW+t1Os2NEZ~kZl!aYo3!Y>@1dCU<S}K8
z77OXtmj)^4qt!S!O7we5MJy{)r)|L!yf5%SB-6LQ<`y!J&22Uc%}~XUY%41<xI?-K
zEnSMmj^iutvLrJ>1h>afwP(mPc5z-LO|o;w*jJp~#2+U}{FbCEO}U!33ZJh1-8V7%
z=fO5?6<u{&kEC|}f`o7`WX7=%W?s599;ki5pj|#&$f;GPTb^`i7aV7C;b(E-4LDqM
znCj>`%3H9&j#h_zykgQTXF%abV5sAc!L2N4i%Po4J;fNQAlw_K*6qUC?&6rV+xgy(
zG;|kqpC8>rfL|${t;o2AgGm-!ypL<ZUS^bgY2k%oq7|4ei)O1+4%lE?Cj4N}s?3zS
zHDICX{W<>D{E7WVh<i<fW1D5^eV183w>Z?=&tAT~lCszoZ>pGGCbnE={AO3+X_C<o
z1BqTTwBVkaxKKS|Wy9(6l$shKl%X%ir7iU6_l0t~yLCuQ?~W1W=k|KG=}?1;ci|IB
zBWynF{E6?}o@+VAsegnkMxaOoXWVvME#rDi)z%yEdm)dWJB(xkv58DAX^z@Dx$hb)
z)~rQwg=5a!0()@Nd-TM;)o?n!b=xam^<pkJlE0PeR!2LH;Sv(+*&rwlU{e&%;x1UN
zI+qW)JBt2bkUeylB)4VTQUNM&Js%25Ys+!b_WcF|zOq^X7G<SU$@n=cYK%|50vj6`
zIYmAayv<fW5j&*_ZA8iPI-_AnThUn#bBWD&Ont45Qol#IJxXo|T2{b7NBe7=kg~x}
zj%7eRp?xNgret0@^_G+`+4zZ}aji>T_ps}&?V7=s%?%P4GDO`04@UVHr|;oW3zFT$
zGmn2HY+{rg^G|ElO&p*M>EpU;^sR=Ci#+fnYJb7BRH?ywP`9rwT~2khL8NTqSMTJ6
z<g1`$UYER!pCatyIURP8gZ*MtO*3emMo6pXc^&PKrFPKAalxG>Li4DZjs9KX#wMPz
z`Do(j{d4b6WJ2m2Ovg$evHpPHhT7QA+^_G+=GgCvt&b}?pkB@}U48d%0dB&ULls4A
z3=NxF{C1TmxwhC7=^${3V-6|WK+o#q7j_~tgD1|Jw0zUrwLVc_HfIZ*5v<P7YI0-l
z$4%5Yp?sfY{%Gek^rFVcX#<zcuY-91sY;PRvn&HQ4Q@Dxoj-TdfOx<iwpb5g;60={
ztojQ6RPJ<Y6ypHs6;bkul;og|Goeb8B>@w?v?qN**)M^RpQJx8LFf{fs!~!XvBx@M
z3;jiYP`r@<N1F}d;>*(nbp2HBm0(0@`sJ$f0dg?LNacXh(w+L;h$ie<(zd+^_nDS*
zb)L~gN81W+@mr@BBBt6uVivyTGxo_zY*WwH$zLREif}@c!%LZCdJ0>1r^6o8$Vf#%
zR|Ng*k0CuVE>1VjY(>GBYX+_=EuznZG&^i;Xc+FM5x_NjHmN{k2UOh|U?{2O>@2DE
zCf|jzCd=<;gDw}I`7xL};@SrrIscTSfkb0??$xaW0z*MVblaYfcnD|W1h0|JkT>at
zL|RX{=#I0va8hW#NQzkU_VXn4Q;Y{$(3P6U8+<j7+!)NLJTX}0^M&Idp>z#47dA^^
zqA&dr?;6ltDPB>Tf*(yg?)hMCyRaOtgh{WsNYgV^Z*@PX1?$)n^X|CDvrPflvafDC
z7LEsfu+Fv}_t%5a+&_LZUiy)&6NV~9^A)Y)Ahyk^I5Ip#VbWY=XniBxWZW`4WKaBg
zy~4+XoI#RwVV;yx`^og^eWYWQ<1_E6`sc45Ff7NZHG6o+AES<t5Ei?*NzV&r>)?>>
z76zZQoJ1jTL3hGD*vF}uB%d1Dz~4hN3cDMY$$yN%_5E9FeVQsOVjqhg(V+VdpWNUR
zT}|x6wh!IO%Zx$LWSYyWa&w_?CKQc7DpYJtE>wcc54?@RBIjB4r3|=v_vRQr!QP%e
zD&5Jv(9zYZRIabrwJ_vZ;7PDEc|{DTNnB*gmEvaZ&e84=^xgHf%JX&0nvy6*-UMuz
z$@hXO<4^07H*5+oifhf3tS|0fxI6CZHn*n$6XILT^>eT_l!|9eyixs;#crca=_Yml
zdG+?rPto=hc$t(1!tMNEWK+M6i0zgM!bUMDPC13vOja_mZ23mPS=60JlY3583+wnG
zY3O-w4y@;6(u`=Lj!Y61OE$qqi9tIVWNf-izs=eED5Dy)c)-%3aIUbihdS&Y_65y9
zjE|~V$>Ik;m8ks^M>KiaiG)6yg!SzPOIl{s)dNzwA7@b~7dR6yJIEELVPdK(l}^ZV
zrJ!Wj3!g#dJ^I9eTO0_N0k`ni&-`alizOh32vfxfcKXTv?^8*NJa<>@dC{gVK=F^Q
zrbvh_?Wc*&%X#(_cBx783QdvP?&FKqf2S9mnOAIqA&Xe;m?nldetmC@R;{ce2|q3j
zbvF(M#LS`inAqQ#8vY>My)0*fr*o9n;0M}4gq7dee0VEb#W0l+JToPu11tM3vuRUm
z>3E|4F_lRLy7QX9?HUVrV@~-v_O5l6mw82Gk`<Bvca@NR$2pIUeXQ=MJ%#wYk1}7p
z941k8jheO^<5dc6h=jf0;U9Y|Cv)GDBemKWO#Q+|es^IzbT*}rX#d$!f_|)!41YiZ
zUTw;w`x%l!lwaT+_s?=dHq^%s(&`zi66khWTX6Zp@ig)(rxUyNm=U)2>W0dPw7@<^
zrHvmyWLJGb{>a%i$H3?og`;D_U-d~aqO$YHq}?uG^TM4_2O&&}YWb>SBImS)&!NdU
zutQ&4m0WN?A7_vcrEgQQb5BUr;p4Gx>$lftB9QcWP%p_K2#{6<GwEvJUkuz+ja!W*
zPNfd;Dd2@okqV8~yhB)ccpFDxU?62;Mt|QC2U|d_Aw&W-=rcky!-;g6E0eunb2Ted
zt<hV{PRTpzspE^Y-1nD{^4EUQKfx*)dA%06P`xavLCb)paTc+ht2E%j#J*IvnVPgf
z9AX)-_M9H9I7@b{Cxmsk4;~MMtxvNsNLrPPIbYx9=10xYS?}3So9#aOt)Eu6%V4hG
zd4<`+T`FT$lm{Qo|Ko6%pJXpREauy;gh-Fy+ZmgJFQx@ln#jlZ;d3~XC3x8mc`2s}
z2ZG(*HU@c~Qz|(V2+kgb%~!H5yIIk{7fIIld;)IdVKFn~DIMt3ni~rutL;ETooezV
z!~_;ucJBwLHya)C`+v4*-g|5z1pZjfG58Tr?aUG30->@{hLxguEehM6;i$AUbb+fq
zD!CR__y}epE&t7u$UT$qMfOXwM(6VmG)DBFj4i2Malia9oC)^OTg=2u<7t&Ci3`V(
zvf<ED5me!E*RXH(ofBoS?_!sAE<(d0u6`lF5P~+foB!Ie_Kspc<Aa2K#6z`)RJ)^r
zTCZVejypO<8+}NxwiS$RvV6B_6+huE#a6b7b&RP`?0DLQ&SeU`X?#+4m(b7}&9BT_
z$E@L2CPzShWn&y%_908Z=v3Xu)sEz2(Y065E~2hWf?Tg+cdflieVrB4psB)Cqot$$
z@x6S^Y_eG>dgQsEC@d)n6Nz+JSGVoDI@;G|Fvz^VQy+#SBRWEXVbGc|%p6_7zA32j
zRQDZG*#I@n*L4~K_pj^wa~a0!=^hs@UFVz>V-@f%x1{xZxk_eCQ8X!cE5_?996K^z
zG;H?`u0ByITER>+KWFLR!qwq(YkoYD-|$Locj}JbZ23uPVCN(ftvLH#oBd&Zi5dUS
zCyX5TtcnH+C=^i#IU)*6!3Q`?$H9B8iNYyEbV<epMua=b9AEP1l9Fn)ba2UBR+Yc#
z?>_%jGqp0Fw#l<8k!E$avCjh>99+xkkB&H+nwY0;8D-aac&Ce`u%U*ZpQL}4Hckh3
z(<H4jv9G$UgWEi}+clhc$}3|r-Ue-$lq|TkmD}(;(b-O?^ei=|BJFCr=PFX$`vTxm
zx3qk_Lh%^Z(l-oorIzSogc3%gc&hh%soXwP;2fRPP1q+HSFIu}KgR2IF2}jGvC&#E
z)J;CUR8dk_T{o&~BwLp8`hYJbnK*D8n~EiwU{dNKMp4m1!mD0EI5)y?$`s!b8yn3g
z(r$lcuzt_7STgd>U8TFNj>`F#JP)Osd&h)VEXT#YeWqPx4wUZU0-g&$EB4^%59g=V
zBcZy@ytfbfhOOgMxxFz&7=u?A{Z@x^8M5F8`ov`EA3l6z5@;*@I-6SdN3y%gdkwbq
z!J)QWJ&iHWf|LYMJhA1_!C*9aQQqu3f!1_>RlcEMY;2xeOM$u>YWroY$C<+YEc?l{
zn7lQE1ymkruCd;-X^dpmyLxm<3Qk<mPFP6_+&OyB8|@v>8|Rm1oq}>WSV9)!`cqSh
zr3hO48=b*lnreecOnaN5t5ne57(N;wpPZapoDu64!X7=bVU#$eYg2<QeKS@4-YKj7
zbfj;tfF`|@9S_I$=)~_`1!3~sY{TPl&9ASm#R6dagA9`m$+pcq5JN`$wyL3M<TP_A
zVs6vPRzdH`#^0F^f7C2N_ZeC@?KTt^ENsUl7RAP<m$=86%|LgcJT<(1=J?!emk6^(
z@mshYgC3cUs!6~*_4CRLRcPubxOpZ9MCMZt_9Paae!v5(2a{RGbdMq*HAe*oeZPOt
zQ4Swf<&jZAsLCMu)G&t5VSn!(Ic_$;0D)1sN1t=>K$JPPpL4a`THYj@Xj`Y39Rzhv
z8N_n7Av^n|77C2Web10D&K*-*^`L2dkU)eIpk}d!`z9;skxvd%DAY@Sm%(C{a_&3l
zlHN~NzwvuLYAF?jXQf$Tfr|-Dx**-t(91F9X=9L6D@%P)cdiI#=#jKz(Oob1FhD1n
zCn%(X)<<<7d{ftZs#Xwekr9;mtfCD`BPdaaTM+u*?VP06@!ZflW~Wx9iam$78|m{a
z$eZ4-rP>uFf%f@}i?MQH52!mBO3!J{kfEryGw+oJVk!iRaQrw)nZrb+tX_Tx3-4ZR
zu=%z>bKrG)lM^b|?IJl84g6+hYa{EsG?*Y{P;Bz@TOw_xNu-$jFivs@AFR-{Lb$Ly
zjT;i}5@K%IaC5ZCc=e4jiorlFQ0hU`eM5lq&)+2g?QHsFDL{n^qgp=}bqo4o4Lf5m
z>u&OZXsjusL>qNOn^cP$e8g%GN61cC$SX?0$5GgOG)zDcbazTmM#BRZE`3xwJm!db
zOn4+WaY&Z|4=x%nR9ms)Uhxitx%$-SmR%n;H!E9rqViS{s~&3(qITLXu{w3kw=O$a
z{bOwFIUhht<RVd9`5aQwNfdTnx2YsHXPQP6?juV#BdK;xl`XdxD5BS$6MI_i7c=qF
zRkBfaptjjIl}tR%hgE;FJOqcck$nLl5y-c*wQ`owwJH{|#<;e#hLx^O#lol<k~ALi
z;DJuw$Ks4HMA3`zi@3f9)liz2e9=U~Q5k{jOw>85H3G;?Ob<$`oSwc!<5ickF?l%%
zdLKJ~JodxV-XDinkMPN+Zj#6csf)_~lRDR}{d^n2p+t`nRYz@jRiA(lx)^<ph2dzc
z8WY+iGoJ37ft>ZaU3AzRLC6Pdb1&SXKF0cAn7Z3h3|bI-M49V;ory9}L9%QnusczJ
z&xkU=z%3;~?>PaE1p0h|yIcrc8DBH~@qw;Q%fVLy#vFGd)ic-kBM&(bPm&uLN0aY=
zlbQ*RYCg9xsQK`LLg}+>fA304vCv@?6^FC)TCm2&i8kpe6edA=!y{(&7Ki9kaXZXc
zDmjLcua-Yb8NL=Yz^xWBOs&z!t>(>YOkxMim~SVcOpDWOsSHWyu@pEW?{a-K`C#lG
z+D`mzT`?nQ>N(Apsc|z2ftL0}p}m?0Z+p#~#BLSaCe4l>*;)lJR{teA|3l}Xq2%}5
z-ri*v^yKxM(y5`)NmCo)w<~k9zQ(XsXxg=76Lym-AcR&S#G30&sQK}^X(R}2-DV`|
ze)9@J!m(h|%?~Ym>x6R9A)c76vrjqrVWxl|E52(IHfp5SB7Hy=rApJGpW|JP>Hw#%
zqeqK0UsjLrP*X)??&pxI-%8I|>%>uJUt_tg#lFUxNxT3r-GOC)0^b;SX#W8G4lS4(
zdHzUjB>es6Yu2sLoGdvs-(^sbwjK$%ZuB8Pd5LVbU0f<XNiECsqX)fs=Mzca3$@oX
zYQ|kKX123qHeLzPtcW=7uV{aK@$yZ?n2g1Ic2<Iekz6jPCh<Ks)a3K~ZW8pc&#;O2
z2$ix_N{iliC-4p*=HHi-zt8rdqGuLMsjH4&7;)oMl7wfMw@ceAvLUFX^wg^DY>8s1
z1MHJ-BmYK}ib^+8r`k3(I})qn_8JMhqAtxyk;O^=lKU><U0yN4DPygaDe*OwM634d
z>YPa_V{I<!MX^+y{p$-ZR-N%2?o!R=&PhWdZ)k_54+JyK8R^!3J<w_GT0c8%d+Xr|
zVl&A$sm5c8mm{fPksjf$pC55w%sqd}U+^)b>*50PJ&Gth3(I}rUiSj5YtL78us1RP
z&-tna4=wEGfS2&Pibk^f1);f+ygMej+rQ$oH87XtSVYKi610p^(6RGWNa{TQ`f{_-
z+$(B<V?+MvDU<M+R85`~qf4cR2Vp)ex|5q*dJ8_$6YJ<k1~8O7*}YBz#AxKL=ngKj
zJu{&&(QyxV;!>%#m7RgG1{Zm_#~G+>6fY5KoEU2=Cenyl$*|mo@s#%}Q!9qedF%CI
zweUTO<HZ_PqbEw9(i)X$eo}kAMSn~zH6saCjU?pBr9*u;Qdo`DrJb^K&im13b*y+|
z+l4c=KNthSt>r}+AK?u3t!O4qYjU<3;2yJWknZORERKCmV&84yu)>D0^jDD>nfJz+
zV-KmFP?Py%#Do}YcjiH@g=~IESftP8YNxpBDe1c9S}>YDPx3uroRP`<Fggr%2vXLt
zyH@>3b&Cy_Ym#SzGc&N0pT28Au6ryPNl+wwyxC;{OB8koo!kFx&{MLJQNscckLo^^
zhY#(e#yU1_qq~%^J7_HAUYk>J5yUKUQS9Ib3#A`Cr1H@-Z)sPbrC=5d;rPxc(;F!j
zTPnX#0gnqe(jhIdGD?AatJFJ{3C8}YaLeA;I693hIlwhSvXEOkrjs@^m6{fbCZmK-
z?QwiGv@L=!Oz5CfH}_)%H?q;8xZZx(o@!BLze4U0#UYU%C@^Lt{T2vZWqx&8W<*IP
zW}|4m<|b%_Rx<LOtfChJr4B!DiJiCS;tEHnE#~g$wnr$_cl4W2)=TCB@qa3RLP0>7
z?Hfd?okyPSZi1virsz;3_$h0M-PhNZJo_6_VL(5I3|aQT(~Qx=UJ`U}qWk);2K)lb
zZo*BgXx#G;HaFg)^RccNeOUG6?C}+kSHlg)!=ME7KV4Z_$r~bA8wIYm?k?Ud9KU1N
z)JcR*ZHOsM!t;q>RohGFN0ESU<|tlB;!y8PviUo(so6=Uv>$GzA9F~`x?9J6(0?pK
zy~$4BRW)DbE9mIJSCUU!EzcBcnL?mF$?u)I*!C@iq|RfvDn5}^lg$Bf-qq+E{u>GV
z@j(k$AzRdr37TjRhfotSBkuC=?cR^GZV_=Bj^cfmI|^U#eYNWmdd5Tj$WWmJYyK&8
zjin1!SKyJoT!Uv$%B>Kr$!}}kS`zk_d>?*@m!bN#;EygW6Ltwj&qiwXRDP?VTJe3N
z%Xa*BuPZ!DitET3+ed$aFoNJ4+74XXL5pSP4rSP>wGZ_Vf7yHXb(|MzKj4HgWv8Qo
z<31lp1&SPC=D&Crp{bK>s!K~rWG9#^6iXYKYN<n_!9YJqL$<EoMk$~K+d10goli@V
zEa4`AO7P$zqFX%TRwd&!uxw4<ob<hW@pZJrA!&5*+DYBP_($aeU22SP!rw@uOR_w<
zaq=^tGQ*8OEPerJ#`x%Q!(F-&1UNzEVi>rScTdT1zD0VzP%Z98-q&mpg4@NGcZEq{
z7<tejVD+@#^9Xt91q=!{lXCGC5xyE**3)C65%~r~<e`_SC?lPZeV(D7P6&BVYB}Ee
zDz+JqX7p6XGaK#uol@rrC1Nk`&Y_C$ATw#Sx<;Fh5sv0vo00|crY03q+kwws!f9p*
z@psi3ntj`N5G|sfjhpkx`QixDjECoqf_G<-LuZL*bWA{&$Zq8;B}!pD!gqV-Uy+hc
z^JZ)Zks)KucK_H~VbAna3VTHwOj>rZ<t<o?O{b7zwdxexcNZ5FEUBZu_`cf|P7>?H
z6Q{z<62*zBVSYMYMdy{#Nh1omcsp(pE_qPl_FP{hZhfC{qu1ve1erJJ%ppx8nsb4k
zyGe0*9A?~9rUpp)vopR-YHi9H@1+mLX)wf^pH-Xm!14)oOHMU%w{`TNC8~um9*0pm
z=nSp+J>fe9Yf=Su)a7k7?MdJD$|Zgg9M7QkX6WgLeD6iMyXz;DjI&;ha=G$qnL78w
zO*hl?qPu5Ff|7x8U#A>{G;(#Mx=G*YDU0~lW{E`YRV5$LixitG>zudWCwK>2>x@zr
z<N~U&XNDT+d+yZ^<%4T#EVcUJx!L&YeH@`-nD3`|bb6E94hh5OYyuB-h0r<okT-ER
zyXWpkmxQO2?(5sMbx0Sk#@{NP!ER@0WM$ScPU+tx`aZ9Y-(&IkGrPBqhEgE-i%b0{
zGd~BH)g6!4A~f%mRLupg^Vw|l2h{_DTk=!J3Y+Cj;HkbB9=dubhf&8GQE_KGk}Afd
zx7T`VkL&5bhz})il#&hvWM;=U8vBra_N*sJQ>7Rjt1EfK@TG`zG}nmw;H|>ND)qLd
zNs^_~X3DK#-Iqkk@k1+4<2J2E%et)RBhTx4EZrYZ4Yc+zKku@#Y?8!gy^vQe`B3xH
z`P8gvbj<1{-{Ik^-3zBYw;W8i=CW^Zh2wlnUe?fCt!x1+X*ADIpD}zPn#Qi6TO7u4
zkC3?oMmLVpdA~TiU9PhIH7hhq^33h)_~FB%m|=m0uw2Bf?iAWV3YGFoYn<e$aOzX*
zTT9M-ZaQMf-3uR>Rovi|a^gWKYWt`&@Me<rbJaZT_DreeDk!ApdPm}#=XI;%!cnkN
z-zPr3X3(ZEWsvxqmmeA(pcU~h)41rZ+1+e2dV6LWCsBLJ;qyU8?v49v#pOS&$SiC(
zOzbUI;fQc*`R3oboR}938Wwuna(kq_Rak%j5Urp}g`S&21ZH;!v^j+_$tfN`!_5D1
zwc{gN<$~b(ZiJ_0&cL@AY{?Brepl?fJJZC`cI{x63n<8{A;$5na|{LqssSnof~#NR
z|Ep^F_e_|m2Vbq`_^?0jJ`_@5We!~Fd^gtA)lLOpi;QF@n3<?7Enfo59;i@rdT{a$
z_KUew#w6Cc^X9>#6saE!K5*>XnXw<^M|$h@Bn@0ejlp7muW@?oF9LL7QsWQL^c+#c
zG2}aSlFshsTYyCq3)B#Zpv-bHNJY>{{a#3!hc0V;{7yXa5Pj=xy)t_RPeF9w6)_W6
z3#@*UwWbo*s9sQDwg=Ch0RJUxpW`0y)2}%N5BNq`vdp`SxeKIT3|k^(p?+Li5c<+E
z@H{WCPhUd$J#uKSu<>%wRtdM&hZdjlC>H1G__L|n^(7pJ{(&*xBYd&xd)3pfCR^w>
zxSjiHxg6X>$!tv;)tH0NCv5enPSsQ7{Ce@T8FBPH-WN;ph3zyDot`lv^XI+DLC+;Q
zQ$^yK^0rm+)L6&LtqEL>FA6;W7>hO|j`2goOf3m5*Jg2XkaYXrt*LTrx+GJF>dN5-
z!SF5f)Pt6Gzb5(Bp6`tDJ8x?_KAy+C79%2am{l(?!^>0fv(O5X?J8E891(=c&Dnl%
z)O!z%Fpq8TG5ctU?r0;;KB!V#V#s{5hAhZ^=o6{>A}y+51zE#T_oIG=gbH5Yg<z!H
zM-nVZ*{{~&x>Gd8u<(nvBE%9|H4+t!Fb!Sem04aHASD|{l-ZEmu?ThIQ4}A^RZ)&2
zuXK2-k>6SVv=sD)oD|bKLgqePR%Elu>tb_4sAr<la_AAI{E?67cj=U0e)o2Rw)-+q
zVA&p<DPIV^=-qy6Rj3V?9*GGthKWVBQBP${l7-IsB@&j6>_{RF<-n_2(G(M!d!5qp
z&%3r74j1srtx%g{(=<2~O<H~3v06-+D5twh-RHHRMZDt*5oI#&JoT(sE|)xHSkr?$
zEBi!I>+Rjy{sx}tAcgXnp3E()YR3Nipgvt1K1#a*IlcU@&~}7y;M>!<<_D**xbVp9
z#Ci~2sE~g6d-l$97q<F5y({sCnSQxhtW?N#i>}NqfIan*=cEjxP`9UrJkv5`*!nKw
zCPstp{q4k)SK_7_==Yz#Dyc1y(CAc~iuDOrRO89ils~ih?h!5D^VZ9n#tn77Ee19&
z=;^c)is^bZFARy#0UQrhgb=0toZj(sV&sNn0%W9?vU8~8i<bErMXLlY3q5V==t3he
z!HJdo+6Tj4{4ScTeDIa~G-ay-l0#OyA4O2%KiCwjy(~DZ%y7{bEaQn%E1aHwSX1hw
z_qblFhq;6Ydb<4K*QT(0PKcGl>*!Ukr=c^g+h11*efP%>)*MIHcoX_^r<2cNs#!@%
zJB}&R&1%&-s+!Ovr_j#fAtQrN(x(IuC=lp5EC_`Cdt@-NFtIfHzk7KKBDCe2*zkQ`
zHk>z+*Ep0V=&oqTH6h_PJg245Jl68EAdGMVZrAJ|%^|U4K&+GPMp7bGB+Hkx*hyus
z8kRb=Ei0C6-uhzF;XD90TViXB#!uCt<ZasE*wEG<9w|?-#9ga@63%}nhUT?jYIl^z
z`B|K5t+CgPFV47#A)~^G;f$0egmC{@SSdI&l7@Cd(r7-N?t^X;do`v8qi@w9^-+U@
zx-6wNp}-jq<^lzXU`V#Ku=6d4WQcsJxfS^9EEL7}3~LhAXL}!677~&Dy>0o2zv;o$
z)2hdP6D~G~84jdB9fH@$HJW>Wjzm(B`j|hhfr!hwX$dZ^vJt0X^A%kqn1C6hfZRw%
z=$=536m(I1in6hILvQpKW9@2%h*5VTg_q{Rf+6;Vx-Sac)~M2-SUBY*x>KDi=}T#f
z8izQbhP8yuZZeVPAMs4TS8ttdWy_*xp>0><xTEl%y<*Zd-p$GWqPDVkzYcC;+Wfom
zGVyx`Aj~f*)}y(WZC@HYmAcILfglhl8~Eb>Hg*n{23B_eJ&lDqNEoG&4d46VG_cG8
z^O+6KYFe2m1z*)?H!cqvdY8x#hw~w1*4C|dP8(^iRXwl4%(=(`_pDSr1HF@M(!ali
zTU?-NJeOyqe~#!TyLH@?73{1<GBf|J@m14mBe;*kY)@O|tTmjnuyqhsM|xe%M?Nrk
z5uSAcwy<YH&8t4bVIOOES43U^8!Ds;s=&wV1pr;B1-^K{cf;C1&mR2Wey9gEAOrpI
z+PqNv?7)UI)a9Y$TknsUXJ&*_$h`jMXy0)K%unS;u1923sVE^HjIVRAU1k?2b$6C?
z%rCC^skg(*hME+Gi>2#2HlHjlLWp^HQBpOSdC&cGEtB1-sLSn$G!4465l6uRbqBgg
zl85$~a61Gs25y96yEUkrBH7YWJBn(UD=5lxP{2D0$bi@&P~1~7>A(K*_g`p0M}B>7
z|NYb4<k`;?4wyMu*jU(D|IerXg&_U~$x#bqpamS#1VH2e4FUcOe7J!xB!tDt#NNcn
z(#jTmEe@Y{IMWRH#WLXgGxPua{K6#wKQ7_yZS@>Y>{whZ%&*}6>SJN!0vZRv`1!?w
z;N1rVhUAG$-&2&5RJ(%ptE)ECdEeQAszebuvksC~{u@hPMqE-+P4Ze+dC3&#3t%Wj
zDKGbv9H2wWrJ!d9HZ(B@vzS<3%e&3dphpDUTV_f0D=z-4w<%yiA$h8j_aqdq7p*s?
zj-eFjW;P%QCWOkkNG_uuC`l+?A=5A2w~Vd10u0d4FQmT6$S;F5BvsX9loTOYcrZV0
z^_TAZ^6HM?ae+Xi1t1XNe}vlb(EE+0Z)Is{V#H$P0JgJ(0RA%mUqF|mQxF|+P81X7
zufqrbRhX>CW#Rq?8tXclSaNbW>hoSp<<XtmYXYd_*uP@KztpP7*HN7yX#eeWJ^1^5
z5FH5Q0)(6Y`qqX=wca%}JBMcwxc_!pvdwGl9w40O-)nLI3U>%J0BIw?x~ywr$?|WF
z{nPdTD_-^JVDuC)9=W72e+9yScpDxrVOR4UZt#4XRg>-sL=Z@U0CI#upeSLeE2RTy
zSG&aT;q4#u1A%^qx6=E+0c~BZ?X9kla(mUIhwebh;Ri&dpH~C^(^U}Y`*p0Fz4mtz
ziT}p_60uC~8WHtPtc}68*GpRCI5|UY2?ABPLV?I3B;Ef5QV(qRpJmv~ah^TBuMrjS
zl{<1E5Ca5P|HI9q0^FYmt?63X+5LB&_i_V5X0^c=7$8u;I0!@y(Lh7zpBpgIx41$0
zXXPkUg#i1x>}BC^P5)2qKM9{fppUK&nAV0e2t)-TJj(XX4g4C<8)Scn`NeYu2%)8b
z^64Sac|bb9<h8%d_-`ArbTBv9y@CI`4gM2Zf7#$X;x&9@Jv-y;El}li4=w`W$P&P{
zYLLD{g>(~8&%xgK20f64YL%h^2_c5;GS(L3CakfAp8gHk*LuWBV*s{_;<DMb68#DL
zC#$HK8OoXbnMHwY0BO=2G&iyT8n{2G<51Wc0T(zpx0LO&I&fKTV%r((v0tf<->re<
zZ)^Ky4R%7;U`;Ib%^eKD*BeB}zKoVM5Ios|xJdzF!Ighv{)|bG3FyBGZL$(=0~r8s
z0?R~<5Mb$he-IWTC|%!z+1@S}7-)eB5S<31g$&96p@pAO>3TSErXb%C0M7-?4^n&$
z+5Zjx%K)!$0SrTc(+`w#A%KD)!;-twpIR_Cx6;2s_|D+7qgVhdfcxv5&3`juqS~L(
zKOOygp(B`kp7H`JVFwC3NUw2!{0H*i!R~rCU&4le8xWiDh=DPM7*8m}Ke7Lct-5Al
zTT8I{4dQ1nchXq{iZKKf1DPm^t^T(rEc9;F&#Y26O)pT!l>^=nX*QFN|62q0F4i~t
zmHy{*>>7ZM1I(J}AhZN}@rM?G$*<m@@TTg^<-$N%bO)M%j0ecUf53xnZEsM$-5d?^
zAz<!3fck%){ray>hDZDX{8yH^-fr$(us*8+L~aC%2wDhoU-TcyCYJVKBe3mFag2;5
z%hUo01n_{>Ln>rE=?`=>u*(e!IpeZ}r2@b?fXPD+<m<FQfd9=w*K39SKBDR%pzjxe
zz9CH=Hv50U|IuA7-D%Ud0aL#~y{s69ygxKxYw+v_#n6HDL^}Yb&;m6Iq@@^?{2A<g
z16db}USk@t6dj-%ge1Fs_yhT`)O@|RrIeVB=KyWv0dhl<(;EIn2AuLrnSW3EkkgQ^
z=4;5m!r=8eACp2t+YA^v6_m@uVzk_h)cY&(=wCaFCAN!T2nX!pj`-#9*V1t_Ssx;T
zU*Cd-byB`6AbThvJLDAV-RR9N{0vXma~F=&cfA2_77+I!xnk2dbANjIRovf)53+(s
zTfBz*GsRp#cu%AVn+gFHk1<@%z)Cj){|)|E3Hxi^rL&~+^aEhQX}`@5WOi>7*6ybX
zUxoc$2aqN#dwLDl7Hn;<=W@LkhO?!B`{;jpGURZD`~mqh_FN_EFAdz@u-gs;wEKYm
za!|8{fw_7@_qV73*ZBr8WquV724G*RKpKIp_GB?`20Pg6+L>HEf&N{+kS3Oedky;M
ztsU1ZSD^R@UlWiv=zv)*q^!#~0)N)+`g-O!&FH4?RWD-!$$uA^bwTFpJz$~g$_evd
zvi_WK=^EIYID&6-;#tCOuW~?WJs|u*PRBKXdnB)?|H^fL<{K7{rso3wk%@n~Le&zy
ziT{7T_va>Jq3^#%1MFlDuoE(fV&<X5O-+C;9dEEcjp}bPXn?!?G;K)5<jLGb{gp}n
zEOq~ih=Mz?x}7e3d03H@Z{q*Vs(+@BtGz|71nhBw^fG<W>_$2emTsc|?mqu4ssEZ)
zkJ(+O8(8UI?>2c*26kbLz?3od@**jg{Z$|dD`%IVTL;%>Q*(yR#HYaSMJ!My{xjc)
z`m1oBPq_+s^Qz{r0Cz~j9Kr@Lc>!yHEL8l`u3|#wWqW7)Yo$f1&o`C;EcelGnHehc
zDzY(H&j9ddd$0u%>g})B0!cdX`U4>d1Qr8<h#)*7B=;&VP}AF5vD_r7Z}1D30zi@L
zfF2+h!HAo$BHDrt!M0#aePCX8HTHKy`niSr>jRXUpxdpNv432bvG=$e-UEahN#Lps
z$X+X43j>>7T}b{Kc|@VX7$LxtoB=9iuXTH_6VC{2Z)FYSpDXLrU)UVBmt&5AF)aZd
zg%osd;5sa@b$J7kl$dfa38<xM0hfmqG=BUBqOLWN9&W$}<u<^i0q%J=3<CXAg#bnX
zeB7t6!~Wc4y#Yzn5#m<|NQnq++CWwz`Y5oM^36XZ{@2O$e-JhMljc%1FjNG95s^Ze
zyfM~w+`r2N$SKNycZ6u{v=H)vv7Z7g3Ub3r9RGJHP|}&3GymseughBkXGq{NW<Y<y
zT<=nFVj;f{2W-)?Jkz^AgxDkR75v;>J^{XvLzF^snfZ4%=U}nczj~wTmw6U%Ww88=
zp(wyG{o|CsMm>u1GV-s{HUJx58{!D1HJY7(-#!Dz1`@_Wb0y5q{Q6yC(!5&OGr)14
zF<;(gUZTAc=BRINYh`+caKDEiEQs(!$$Ay<`b0MQ4q1Eys6U?EfwUA5Nc(Ei&%kqi
zO<ljgU2q2M+vasaU3zRFK;TNj{u+ntc@7N&Cl7&9@cB94hVYJ-*H`g)S#BBzD9OU*
z79ef40IQDwRL{Q*<Z<NHwEypMcougVcyk?2@5eHJ0*pfgu(c1l*qV4X$-v&+PWP_>
z^T$%z*-1ho0O+<m@La;B+9KmhDgQ4OTt6_Gv57uAK!k}0c8MXM4=K*Ql4)*ecVjuf
z!vXCNR1?comlMHU*_FJXbFiBVzF#3B^wT%&ZXg^u0!0PnieAabtFeDgM*j>RbR?8`
z1c09dQxM47y}k8nu$BIwsfPh@;-r99>48bdf8#a?WYm2%706lF4-zWY=`%4vz;oWq
zO8q>19ZuH(tZ((RSi2qz6`wIy0N4{6U{8=qTVd^wSjeRH-(944W+ie$z-mO2%w?0h
zw{;!X>5`cLO@f!NwFD9k=%=@Dc+?@lUCP*hIVVs6{C>&h<%caU-)r_S6%&}tLC!lN
zsh4j#yPRb&Uv={j83fYAzLNaEdH>}%zy8IhN?wV*^d8t{F)u$8{x5G>;d<Wn!+!Zm
z(tml|D!=g{pDVpQHkTi4{0Ft+QJ{7i_1j~Pzrij&UidG}{=sjs-ySwpmV*QGJqY9k
z{8^v{fdtjzfR%rC4zL~v55K`PPB0gkU(b+NAIxn4=H}os1hesSvU3>f@qpPlxu5+%
DD#8JG

diff --git a/trunk/auto/depends.sh b/trunk/auto/depends.sh
index 0f1ded99a..63a7765b6 100755
--- a/trunk/auto/depends.sh
+++ b/trunk/auto/depends.sh
@@ -575,16 +575,16 @@ else
     echo "Building srtp2.";
     (
         rm -rf ${SRS_OBJS}/srtp2 && cd ${SRS_OBJS}/${SRS_PLATFORM} &&
-        rm -rf libsrtp-2.0.0 && unzip -q ../../3rdparty/libsrtp-2.0.0.zip && cd libsrtp-2.0.0 &&
+        rm -rf libsrtp-2-fit && cp -R ../../3rdparty/libsrtp-2-fit . && cd libsrtp-2-fit &&
         ${SRTP_CONFIG} && ./configure ${SRTP_OPTIONS} --prefix=`pwd`/_release &&
         make ${SRS_JOBS} && make install &&
-        cd .. && rm -rf srtp2 && ln -sf libsrtp-2.0.0/_release srtp2
+        cd .. && rm -rf srtp2 && ln -sf libsrtp-2-fit/_release srtp2
     )
 fi
 # check status
 ret=$?; if [[ $ret -ne 0 ]]; then echo "Build srtp2 failed, ret=$ret"; exit $ret; fi
 # Always update the links.
-(cd ${SRS_OBJS} && rm -rf srtp2 && ln -sf ${SRS_PLATFORM}/libsrtp-2.0.0/_release srtp2)
+(cd ${SRS_OBJS} && rm -rf srtp2 && ln -sf ${SRS_PLATFORM}/libsrtp-2-fit/_release srtp2)
 if [ ! -f ${SRS_OBJS}/srtp2/lib/libsrtp2.a ]; then echo "Build srtp2 static lib failed."; exit -1; fi
 
 #####################################################################################
diff --git a/trunk/src/core/srs_core_version4.hpp b/trunk/src/core/srs_core_version4.hpp
index 78e48d470..6b893b0e7 100644
--- a/trunk/src/core/srs_core_version4.hpp
+++ b/trunk/src/core/srs_core_version4.hpp
@@ -24,6 +24,6 @@
 #ifndef SRS_CORE_VERSION4_HPP
 #define SRS_CORE_VERSION4_HPP
 
-#define SRS_VERSION4_REVISION 78
+#define SRS_VERSION4_REVISION 79
 
 #endif

From b19074721c03a1ee6e7603b2765ed8cb254e6888 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Tue, 2 Mar 2021 16:21:11 +0800
Subject: [PATCH 089/102] Refine build script

---
 trunk/auto/depends.sh | 18 ++++++++++++------
 1 file changed, 12 insertions(+), 6 deletions(-)

diff --git a/trunk/auto/depends.sh b/trunk/auto/depends.sh
index 63a7765b6..793a1b59d 100755
--- a/trunk/auto/depends.sh
+++ b/trunk/auto/depends.sh
@@ -359,7 +359,7 @@ if [[ $SRS_EXTRA_FLAGS != '' ]]; then
     _ST_EXTRA_CFLAGS="$_ST_EXTRA_CFLAGS $SRS_EXTRA_FLAGS"
 fi
 # Patched ST from https://github.com/ossrs/state-threads/tree/srs
-if [[ -f ${SRS_OBJS}/${SRS_PLATFORM}/st/libst.a ]]; then
+if [[ -f ${SRS_OBJS}/${SRS_PLATFORM}/st-srs/${_ST_OBJ}/libst.a ]]; then
     echo "The state-threads is ok.";
 else
     echo "Building state-threads.";
@@ -388,6 +388,7 @@ fi
 # check status
 ret=$?; if [[ $ret -ne 0 ]]; then echo "Build state-threads failed, ret=$ret"; exit $ret; fi
 # Always update the links.
+(cd ${SRS_OBJS}/${SRS_PLATFORM} && rm -rf st && ln -sf st-srs/${_ST_OBJ} st)
 (cd ${SRS_OBJS} && rm -rf st && ln -sf ${SRS_PLATFORM}/st-srs/${_ST_OBJ} st)
 if [ ! -f ${SRS_OBJS}/st/libst.a ]; then echo "Build state-threads static lib failed."; exit -1; fi
 
@@ -524,7 +525,7 @@ if [[ $SRS_SSL == YES && $SRS_USE_SYS_SSL != YES ]]; then
     #OPENSSL_OPTIONS="$OPENSSL_OPTIONS -no-ssl2 -no-comp -no-idea -no-hw -no-engine -no-dso -no-err -no-nextprotoneg -no-psk -no-srp -no-ec2m -no-weak-ssl-ciphers"
     #
     # cross build not specified, if exists flag, need to rebuild for no-arm platform.
-    if [[ -f ${SRS_OBJS}/${SRS_PLATFORM}/openssl/lib/libssl.a ]]; then
+    if [[ -f ${SRS_OBJS}/${SRS_PLATFORM}/$OPENSSL_CANDIDATE/_release/lib/libssl.a ]]; then
         echo "The $OPENSSL_CANDIDATE is ok.";
     else
         echo "Building $OPENSSL_CANDIDATE.";
@@ -543,6 +544,7 @@ if [[ $SRS_SSL == YES && $SRS_USE_SYS_SSL != YES ]]; then
     # check status
     ret=$?; if [[ $ret -ne 0 ]]; then echo "Build $OPENSSL_CANDIDATE failed, ret=$ret"; exit $ret; fi
     # Always update the links.
+    (cd ${SRS_OBJS}/${SRS_PLATFORM} && rm -rf openssl && ln -sf $OPENSSL_CANDIDATE/_release openssl)
     (cd ${SRS_OBJS} && rm -rf openssl && ln -sf ${SRS_PLATFORM}/${OPENSSL_LIB} openssl)
     if [ ! -f ${SRS_OBJS}/openssl/lib/libssl.a ]; then echo "Build $OPENSSL_CANDIDATE failed."; exit -1; fi
 fi
@@ -569,7 +571,7 @@ if [[ $SRS_SRTP_ASM == YES ]]; then
     SRTP_CONFIG="export PKG_CONFIG_PATH=../openssl/lib/pkgconfig" && SRTP_OPTIONS="--enable-openssl"
 fi
 # Patched ST from https://github.com/ossrs/state-threads/tree/srs
-if [[ -f ${SRS_OBJS}/${SRS_PLATFORM}/srtp2/lib/libsrtp2.a ]]; then
+if [[ -f ${SRS_OBJS}/${SRS_PLATFORM}/libsrtp-2-fit/_release/lib/libsrtp2.a ]]; then
     echo "The srtp2 is ok.";
 else
     echo "Building srtp2.";
@@ -584,6 +586,7 @@ fi
 # check status
 ret=$?; if [[ $ret -ne 0 ]]; then echo "Build srtp2 failed, ret=$ret"; exit $ret; fi
 # Always update the links.
+(cd ${SRS_OBJS}/${SRS_PLATFORM} && rm -rf srtp2 && ln -sf libsrtp-2-fit/_release srtp2)
 (cd ${SRS_OBJS} && rm -rf srtp2 && ln -sf ${SRS_PLATFORM}/libsrtp-2-fit/_release srtp2)
 if [ ! -f ${SRS_OBJS}/srtp2/lib/libsrtp2.a ]; then echo "Build srtp2 static lib failed."; exit -1; fi
 
@@ -591,7 +594,7 @@ if [ ! -f ${SRS_OBJS}/srtp2/lib/libsrtp2.a ]; then echo "Build srtp2 static lib
 # libopus, for WebRTC to transcode AAC with Opus.
 #####################################################################################
 if [[ $SRS_RTC == YES ]]; then
-    if [[ -f ${SRS_OBJS}/${SRS_PLATFORM}/opus/lib/libopus.a ]]; then
+    if [[ -f ${SRS_OBJS}/${SRS_PLATFORM}/opus-1.3.1/_release/lib/libopus.a ]]; then
         echo "The opus-1.3.1 is ok.";
     else
         echo "Building opus-1.3.1.";
@@ -605,6 +608,7 @@ if [[ $SRS_RTC == YES ]]; then
     # check status
     ret=$?; if [[ $ret -ne 0 ]]; then echo "Build opus-1.3.1 failed, ret=$ret"; exit $ret; fi
     # Always update the links.
+    (cd ${SRS_OBJS}/${SRS_PLATFORM} && rm -rf opus && ln -sf opus-1.3.1/_release opus)
     (cd ${SRS_OBJS} && rm -rf opus && ln -sf ${SRS_PLATFORM}/opus-1.3.1/_release opus)
     if [ ! -f ${SRS_OBJS}/opus/lib/libopus.a ]; then echo "Build opus-1.3.1 failed."; exit -1; fi
 fi
@@ -624,7 +628,7 @@ if [[ $SRS_FFMPEG_FIT == YES ]]; then
         FFMPEG_OPTIONS="--disable-x86asm"
     fi
 
-    if [[ -f ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg/lib/libavcodec.a ]]; then
+    if [[ -f ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg-4.2-fit/_release/lib/libavcodec.a ]]; then
         echo "The ffmpeg-4.2-fit is ok.";
     else
         echo "Building ffmpeg-4.2-fit.";
@@ -653,6 +657,7 @@ if [[ $SRS_FFMPEG_FIT == YES ]]; then
     # check status
     ret=$?; if [[ $ret -ne 0 ]]; then echo "Build ffmpeg-4.2-fit failed, ret=$ret"; exit $ret; fi
     # Always update the links.
+    (cd ${SRS_OBJS}/${SRS_PLATFORM} && rm -rf ffmpeg && ln -sf ffmpeg-4.2-fit/_release ffmpeg)
     (cd ${SRS_OBJS} && rm -rf ffmpeg && ln -sf ${SRS_PLATFORM}/ffmpeg-4.2-fit/_release ffmpeg)
     if [ ! -f ${SRS_OBJS}/ffmpeg/lib/libavcodec.a ]; then echo "Build ffmpeg-4.2-fit failed."; exit -1; fi
 fi
@@ -702,7 +707,7 @@ fi
 # build utest code
 #####################################################################################
 if [ $SRS_UTEST = YES ]; then
-    if [[ -f ${SRS_OBJS}/${SRS_PLATFORM}/gtest/include/gtest/gtest.h ]]; then
+    if [[ -f ${SRS_OBJS}/${SRS_PLATFORM}/gtest-1.6.0/include/gtest/gtest.h ]]; then
         echo "The gtest-1.6.0 is ok.";
     else
         echo "Build gtest-1.6.0";
@@ -715,6 +720,7 @@ if [ $SRS_UTEST = YES ]; then
     # check status
     ret=$?; if [[ $ret -ne 0 ]]; then echo "Build gtest-1.6.0 failed, ret=$ret"; exit $ret; fi
     # Always update the links.
+    (cd ${SRS_OBJS}/${SRS_PLATFORM} && rm -rf gtest && ln -sf gtest-1.6.0 gtest)
     (cd ${SRS_OBJS} && rm -rf gtest && ln -sf ${SRS_PLATFORM}/gtest-1.6.0 gtest)
     if [ ! -f ${SRS_OBJS}/gtest/include/gtest/gtest.h ]; then echo "Build gtest-1.6.0 failed."; exit -1; fi
 fi

From 27712fdda761167fcc2120c1f8d0597266f33ccf Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Tue, 2 Mar 2021 17:48:40 +0800
Subject: [PATCH 090/102] Rename ffmpeg-4.2-fit to ffmpeg-4-fit

---
 .../.gitignore                                |  0
 .../{ffmpeg-4.2-fit => ffmpeg-4-fit}/.version |  0
 .../{ffmpeg-4.2-fit => ffmpeg-4-fit}/Makefile |  0
 .../compat/atomics/gcc/stdatomic.h            |  0
 .../compat/va_copy.h                          |  0
 .../configure                                 |  0
 .../ffbuild/arch.mak                          |  0
 .../ffbuild/common.mak                        |  0
 .../ffbuild/library.mak                       |  0
 .../ffbuild/libversion.sh                     |  0
 .../ffbuild/pkgconfig_generate.sh             |  0
 .../ffbuild/version.sh                        |  0
 .../libavcodec/Makefile                       |  0
 .../libavcodec/aac.h                          |  0
 .../libavcodec/aac_ac3_parser.c               |  0
 .../libavcodec/aac_ac3_parser.h               |  0
 .../libavcodec/aac_adtstoasc_bsf.c            |  0
 .../libavcodec/aac_defines.h                  |  0
 .../libavcodec/aac_parser.c                   |  0
 .../libavcodec/aaccoder.c                     |  0
 .../libavcodec/aaccoder_trellis.h             |  0
 .../libavcodec/aaccoder_twoloop.h             |  0
 .../libavcodec/aacdec.c                       |  0
 .../libavcodec/aacdec_fixed.c                 |  0
 .../libavcodec/aacdec_template.c              |  0
 .../libavcodec/aacdectab.h                    |  0
 .../libavcodec/aacenc.c                       |  0
 .../libavcodec/aacenc.h                       |  0
 .../libavcodec/aacenc_is.c                    |  0
 .../libavcodec/aacenc_is.h                    |  0
 .../libavcodec/aacenc_ltp.c                   |  0
 .../libavcodec/aacenc_ltp.h                   |  0
 .../libavcodec/aacenc_pred.c                  |  0
 .../libavcodec/aacenc_pred.h                  |  0
 .../libavcodec/aacenc_quantization.h          |  0
 .../libavcodec/aacenc_quantization_misc.h     |  0
 .../libavcodec/aacenc_tns.c                   |  0
 .../libavcodec/aacenc_tns.h                   |  0
 .../libavcodec/aacenc_utils.h                 |  0
 .../libavcodec/aacencdsp.asm                  |  0
 .../libavcodec/aacencdsp_init.c               |  0
 .../libavcodec/aacenctab.c                    |  0
 .../libavcodec/aacenctab.h                    |  0
 .../libavcodec/aacps.c                        |  0
 .../libavcodec/aacps.h                        |  0
 .../libavcodec/aacps_fixed.c                  |  0
 .../libavcodec/aacps_fixed_tablegen.c         |  0
 .../libavcodec/aacps_fixed_tablegen.h         |  0
 .../libavcodec/aacps_float.c                  |  0
 .../libavcodec/aacps_tablegen.c               |  0
 .../libavcodec/aacps_tablegen.h               |  0
 .../libavcodec/aacps_tablegen_template.c      |  0
 .../libavcodec/aacpsdata.c                    |  0
 .../libavcodec/aacpsdsp.asm                   |  0
 .../libavcodec/aacpsdsp.h                     |  0
 .../libavcodec/aacpsdsp_fixed.c               |  0
 .../libavcodec/aacpsdsp_float.c               |  0
 .../libavcodec/aacpsdsp_init.c                |  0
 .../libavcodec/aacpsdsp_template.c            |  0
 .../libavcodec/aacpsy.c                       |  0
 .../libavcodec/aacsbr.c                       |  0
 .../libavcodec/aacsbr.h                       |  0
 .../libavcodec/aacsbr_fixed.c                 |  0
 .../libavcodec/aacsbr_fixed_tablegen.h        |  0
 .../libavcodec/aacsbr_tablegen.h              |  0
 .../libavcodec/aacsbr_tablegen_common.h       |  0
 .../libavcodec/aacsbr_template.c              |  0
 .../libavcodec/aacsbrdata.h                   |  0
 .../libavcodec/aactab.c                       |  0
 .../libavcodec/aactab.h                       |  0
 .../libavcodec/aarch64/Makefile               |  0
 .../aarch64/aacpsdsp_init_aarch64.c           |  0
 .../libavcodec/aarch64/asm-offsets.h          |  0
 .../libavcodec/aarch64/cabac.h                |  0
 .../libavcodec/aarch64/fft_init_aarch64.c     |  0
 .../libavcodec/aarch64/fmtconvert_init.c      |  0
 .../aarch64/h264chroma_init_aarch64.c         |  0
 .../libavcodec/aarch64/h264dsp_init_aarch64.c |  0
 .../libavcodec/aarch64/h264pred_init.c        |  0
 .../aarch64/h264qpel_init_aarch64.c           |  0
 .../libavcodec/aarch64/hpeldsp_init_aarch64.c |  0
 .../libavcodec/aarch64/idct.h                 |  0
 .../libavcodec/aarch64/idctdsp_init_aarch64.c |  0
 .../libavcodec/aarch64/mpegaudiodsp_init.c    |  0
 .../libavcodec/aarch64/opusdsp_init.c         |  0
 .../libavcodec/aarch64/rv40dsp_init_aarch64.c |  0
 .../libavcodec/aarch64/sbrdsp_init_aarch64.c  |  0
 .../libavcodec/aarch64/synth_filter_init.c    |  0
 .../libavcodec/aarch64/vc1dsp_init_aarch64.c  |  0
 .../libavcodec/aarch64/videodsp_init.c        |  0
 .../libavcodec/aarch64/vorbisdsp_init.c       |  0
 .../libavcodec/aarch64/vp8dsp.h               |  0
 .../libavcodec/aarch64/vp8dsp_init_aarch64.c  |  0
 .../libavcodec/aarch64/vp9dsp_init.h          |  0
 .../aarch64/vp9dsp_init_10bpp_aarch64.c       |  0
 .../aarch64/vp9dsp_init_12bpp_aarch64.c       |  0
 .../vp9dsp_init_16bpp_aarch64_template.c      |  0
 .../libavcodec/aarch64/vp9dsp_init_aarch64.c  |  0
 .../libavcodec/ac3.c                          |  0
 .../libavcodec/ac3.h                          |  0
 .../libavcodec/ac3_parser.c                   |  0
 .../libavcodec/ac3_parser.h                   |  0
 .../libavcodec/ac3_parser_internal.h          |  0
 .../libavcodec/ac3dec.c                       |  0
 .../libavcodec/ac3dec.h                       |  0
 .../libavcodec/ac3dec_data.c                  |  0
 .../libavcodec/ac3dec_data.h                  |  0
 .../libavcodec/ac3dec_fixed.c                 |  0
 .../libavcodec/ac3dec_float.c                 |  0
 .../libavcodec/ac3dsp.c                       |  0
 .../libavcodec/ac3dsp.h                       |  0
 .../libavcodec/ac3enc.c                       |  0
 .../libavcodec/ac3enc.h                       |  0
 .../libavcodec/ac3enc_fixed.c                 |  0
 .../libavcodec/ac3enc_float.c                 |  0
 .../libavcodec/ac3enc_opts_template.c         |  0
 .../libavcodec/ac3enc_template.c              |  0
 .../libavcodec/ac3tab.c                       |  0
 .../libavcodec/ac3tab.h                       |  0
 .../libavcodec/adts_header.c                  |  0
 .../libavcodec/adts_header.h                  |  0
 .../libavcodec/adts_parser.c                  |  0
 .../libavcodec/adts_parser.h                  |  0
 .../libavcodec/allcodecs.c                    |  0
 .../libavcodec/audio_frame_queue.c            |  0
 .../libavcodec/audio_frame_queue.h            |  0
 .../libavcodec/avcodec.h                      |  0
 .../libavcodec/avdct.c                        |  0
 .../libavcodec/avdct.h                        |  0
 .../libavcodec/avfft.c                        |  0
 .../libavcodec/avfft.h                        |  0
 .../libavcodec/avpacket.c                     |  0
 .../libavcodec/avpicture.c                    |  0
 .../libavcodec/bitstream.c                    |  0
 .../libavcodec/bitstream_filter.c             |  0
 .../libavcodec/bitstream_filters.c            |  0
 .../libavcodec/blockdsp.c                     |  0
 .../libavcodec/blockdsp.h                     |  0
 .../libavcodec/bsf.c                          |  0
 .../libavcodec/bsf.h                          |  0
 .../libavcodec/bsf_list.c                     |  0
 .../libavcodec/bytestream.h                   |  0
 .../libavcodec/cbrt_data.c                    |  0
 .../libavcodec/cbrt_data.h                    |  0
 .../libavcodec/cbrt_data_fixed.c              |  0
 .../libavcodec/cbrt_tablegen.c                |  0
 .../libavcodec/cbrt_tablegen.h                |  0
 .../libavcodec/codec_desc.c                   |  0
 .../libavcodec/codec_list.c                   |  0
 .../libavcodec/d3d11va.c                      |  0
 .../libavcodec/d3d11va.h                      |  0
 .../libavcodec/dct.h                          |  0
 .../libavcodec/decode.c                       |  0
 .../libavcodec/decode.h                       |  0
 .../libavcodec/dirac.c                        |  0
 .../libavcodec/dirac.h                        |  0
 .../libavcodec/dirac_arith.h                  |  0
 .../libavcodec/dirac_dwt.h                    |  0
 .../libavcodec/dirac_vlc.h                    |  0
 .../libavcodec/diracdsp.h                     |  0
 .../libavcodec/diractab.h                     |  0
 .../libavcodec/dv_profile.c                   |  0
 .../libavcodec/dv_profile.h                   |  0
 .../libavcodec/dv_profile_internal.h          |  0
 .../libavcodec/dxva2.h                        |  0
 .../libavcodec/encode.c                       |  0
 .../libavcodec/error_resilience.c             |  0
 .../libavcodec/error_resilience.h             |  0
 .../libavcodec/fdctdsp.h                      |  0
 .../libavcodec/fft-internal.h                 |  0
 .../libavcodec/fft.h                          |  0
 .../libavcodec/fft_fixed.c                    |  0
 .../libavcodec/fft_fixed_32.c                 |  0
 .../libavcodec/fft_float.c                    |  0
 .../libavcodec/fft_init.c                     |  0
 .../libavcodec/fft_init_table.c               |  0
 .../libavcodec/fft_table.h                    |  0
 .../libavcodec/fft_template.c                 |  0
 .../libavcodec/frame_thread_encoder.c         |  0
 .../libavcodec/frame_thread_encoder.h         |  0
 .../libavcodec/get_bits.h                     |  0
 .../libavcodec/golomb.c                       |  0
 .../libavcodec/golomb.h                       |  0
 .../libavcodec/h263dsp.c                      |  0
 .../libavcodec/h263dsp.h                      |  0
 .../libavcodec/h264chroma.c                   |  0
 .../libavcodec/h264chroma.h                   |  0
 .../libavcodec/hpeldsp.c                      |  0
 .../libavcodec/hpeldsp.h                      |  0
 .../libavcodec/hwaccel.h                      |  0
 .../libavcodec/hwaccels.h                     |  0
 .../libavcodec/idctdsp.h                      |  0
 .../libavcodec/iirfilter.c                    |  0
 .../libavcodec/iirfilter.h                    |  0
 .../libavcodec/imgconvert.c                   |  0
 .../libavcodec/internal.h                     |  0
 .../libavcodec/jni.c                          |  0
 .../libavcodec/jni.h                          |  0
 .../libavcodec/kbdwin.c                       |  0
 .../libavcodec/kbdwin.h                       |  0
 .../libavcodec/latm_parser.c                  |  0
 .../libavcodec/libopus.c                      |  0
 .../libavcodec/libopus.h                      |  0
 .../libavcodec/libopusdec.c                   |  0
 .../libavcodec/libopusenc.c                   |  0
 .../libavcodec/lpc.c                          |  0
 .../libavcodec/lpc.h                          |  0
 .../libavcodec/mathops.h                      |  0
 .../libavcodec/mathtables.c                   |  0
 .../libavcodec/mdct15.asm                     |  0
 .../libavcodec/mdct15.c                       |  0
 .../libavcodec/mdct15.h                       |  0
 .../libavcodec/mdct15_init.c                  |  0
 .../libavcodec/mdct_fixed.c                   |  0
 .../libavcodec/mdct_fixed_32.c                |  0
 .../libavcodec/mdct_float.c                   |  0
 .../libavcodec/mdct_template.c                |  0
 .../libavcodec/me_cmp.c                       |  0
 .../libavcodec/me_cmp.h                       |  0
 .../libavcodec/mediacodec.c                   |  0
 .../libavcodec/mediacodec.h                   |  0
 .../libavcodec/mediacodec_surface.h           |  0
 .../libavcodec/mediacodec_sw_buffer.h         |  0
 .../libavcodec/mediacodec_wrapper.h           |  0
 .../libavcodec/mediacodecdec_common.h         |  0
 .../libavcodec/mjpegenc.h                     |  0
 .../libavcodec/mjpegenc_common.h              |  0
 .../libavcodec/mjpegenc_huffman.c             |  0
 .../libavcodec/mjpegenc_huffman.h             |  0
 .../libavcodec/motion_est.c                   |  0
 .../libavcodec/motion_est.h                   |  0
 .../libavcodec/mpeg12.c                       |  0
 .../libavcodec/mpeg12.h                       |  0
 .../libavcodec/mpeg12data.c                   |  0
 .../libavcodec/mpeg12data.h                   |  0
 .../libavcodec/mpeg12framerate.c              |  0
 .../libavcodec/mpeg12vlc.h                    |  0
 .../libavcodec/mpeg4audio.c                   |  0
 .../libavcodec/mpeg4audio.h                   |  0
 .../libavcodec/mpegpicture.c                  |  0
 .../libavcodec/mpegpicture.h                  |  0
 .../libavcodec/mpegutils.c                    |  0
 .../libavcodec/mpegutils.h                    |  0
 .../libavcodec/mpegvideo.c                    |  0
 .../libavcodec/mpegvideo.h                    |  0
 .../libavcodec/mpegvideodata.c                |  0
 .../libavcodec/mpegvideodata.h                |  0
 .../libavcodec/mpegvideodsp.c                 |  0
 .../libavcodec/mpegvideodsp.h                 |  0
 .../libavcodec/mpegvideoencdsp.c              |  0
 .../libavcodec/mpegvideoencdsp.h              |  0
 .../libavcodec/null_bsf.c                     |  0
 .../libavcodec/options.c                      |  0
 .../libavcodec/options_table.h                |  0
 .../libavcodec/opus.c                         |  0
 .../libavcodec/opus.h                         |  0
 .../libavcodec/opus_celt.c                    |  0
 .../libavcodec/opus_celt.h                    |  0
 .../libavcodec/opus_pvq.c                     |  0
 .../libavcodec/opus_pvq.h                     |  0
 .../libavcodec/opus_rc.c                      |  0
 .../libavcodec/opus_rc.h                      |  0
 .../libavcodec/opusdsp.c                      |  0
 .../libavcodec/opusdsp.h                      |  0
 .../libavcodec/opusenc.c                      |  0
 .../libavcodec/opusenc.h                      |  0
 .../libavcodec/opusenc_psy.c                  |  0
 .../libavcodec/opusenc_psy.h                  |  0
 .../libavcodec/opusenc_utils.h                |  0
 .../libavcodec/opustab.c                      |  0
 .../libavcodec/opustab.h                      |  0
 .../libavcodec/parser.c                       |  0
 .../libavcodec/parser.h                       |  0
 .../libavcodec/parser_list.c                  |  0
 .../libavcodec/parsers.c                      |  0
 .../libavcodec/pixblockdsp.h                  |  0
 .../libavcodec/profiles.c                     |  0
 .../libavcodec/profiles.h                     |  0
 .../libavcodec/psymodel.c                     |  0
 .../libavcodec/psymodel.h                     |  0
 .../libavcodec/pthread.c                      |  0
 .../libavcodec/pthread_frame.c                |  0
 .../libavcodec/pthread_internal.h             |  0
 .../libavcodec/pthread_slice.c                |  0
 .../libavcodec/put_bits.h                     |  0
 .../libavcodec/qpeldsp.c                      |  0
 .../libavcodec/qpeldsp.h                      |  0
 .../libavcodec/qsv.h                          |  0
 .../libavcodec/qsv_api.c                      |  0
 .../libavcodec/ratecontrol.c                  |  0
 .../libavcodec/ratecontrol.h                  |  0
 .../libavcodec/raw.c                          |  0
 .../libavcodec/raw.h                          |  0
 .../libavcodec/rdft.h                         |  0
 .../libavcodec/rl.c                           |  0
 .../libavcodec/rl.h                           |  0
 .../libavcodec/rle.h                          |  0
 .../libavcodec/sbr.h                          |  0
 .../libavcodec/sbrdsp.asm                     |  0
 .../libavcodec/sbrdsp.c                       |  0
 .../libavcodec/sbrdsp.h                       |  0
 .../libavcodec/sbrdsp_fixed.c                 |  0
 .../libavcodec/sbrdsp_init.c                  |  0
 .../libavcodec/sbrdsp_template.c              |  0
 .../libavcodec/sinewin.c                      |  0
 .../libavcodec/sinewin.h                      |  0
 .../libavcodec/sinewin_fixed.c                |  0
 .../libavcodec/sinewin_tablegen.c             |  0
 .../libavcodec/sinewin_tablegen.h             |  0
 .../libavcodec/thread.h                       |  0
 .../libavcodec/utils.c                        |  0
 .../libavcodec/v4l2_buffers.c                 |  0
 .../libavcodec/v4l2_buffers.h                 |  0
 .../libavcodec/v4l2_context.c                 |  0
 .../libavcodec/v4l2_context.h                 |  0
 .../libavcodec/v4l2_fmt.c                     |  0
 .../libavcodec/v4l2_fmt.h                     |  0
 .../libavcodec/v4l2_m2m.c                     |  0
 .../libavcodec/v4l2_m2m.h                     |  0
 .../libavcodec/vaapi.h                        |  0
 .../libavcodec/vdpau.h                        |  0
 .../libavcodec/version.h                      |  0
 .../libavcodec/videodsp.c                     |  0
 .../libavcodec/videodsp.h                     |  0
 .../libavcodec/videotoolbox.h                 |  0
 .../libavcodec/vlc.h                          |  0
 .../libavcodec/vorbis.c                       |  0
 .../libavcodec/vorbis.h                       |  0
 .../libavcodec/vorbis_data.c                  |  0
 .../libavcodec/vorbis_enc_data.h              |  0
 .../libavcodec/vorbis_parser.c                |  0
 .../libavcodec/vorbis_parser.h                |  0
 .../libavcodec/vorbis_parser_internal.h       |  0
 .../libavcodec/vorbisdsp.h                    |  0
 .../libavcodec/x86/Makefile                   |  0
 .../libavcodec/x86/aacencdsp.asm              |  0
 .../libavcodec/x86/aacencdsp_init.c           |  0
 .../libavcodec/x86/aacpsdsp.asm               |  0
 .../libavcodec/x86/aacpsdsp_init.c            |  0
 .../libavcodec/x86/ac3dsp_init.c              |  0
 .../libavcodec/x86/alacdsp_init.c             |  0
 .../libavcodec/x86/audiodsp_init.c            |  0
 .../libavcodec/x86/blockdsp_init.c            |  0
 .../libavcodec/x86/bswapdsp_init.c            |  0
 .../libavcodec/x86/cabac.h                    |  0
 .../libavcodec/x86/cavsdsp.c                  |  0
 .../libavcodec/x86/celt_pvq_init.c            |  0
 .../libavcodec/x86/celt_pvq_search.asm        |  0
 .../libavcodec/x86/constants.c                |  0
 .../libavcodec/x86/constants.h                |  0
 .../libavcodec/x86/dcadsp_init.c              |  0
 .../libavcodec/x86/dct_init.c                 |  0
 .../libavcodec/x86/dirac_dwt_init.c           |  0
 .../libavcodec/x86/diracdsp_init.c            |  0
 .../libavcodec/x86/dnxhdenc_init.c            |  0
 .../libavcodec/x86/exrdsp_init.c              |  0
 .../libavcodec/x86/fdct.c                     |  0
 .../libavcodec/x86/fdct.h                     |  0
 .../libavcodec/x86/fdctdsp_init.c             |  0
 .../libavcodec/x86/fft.asm                    |  0
 .../libavcodec/x86/fft.h                      |  0
 .../libavcodec/x86/fft_init.c                 |  0
 .../libavcodec/x86/flacdsp_init.c             |  0
 .../libavcodec/x86/fmtconvert_init.c          |  0
 .../libavcodec/x86/fpel.h                     |  0
 .../libavcodec/x86/g722dsp_init.c             |  0
 .../libavcodec/x86/h263dsp_init.c             |  0
 .../libavcodec/x86/h264_cabac.c               |  0
 .../libavcodec/x86/h264_intrapred_init.c      |  0
 .../libavcodec/x86/h264_qpel.c                |  0
 .../libavcodec/x86/h264chroma_init.c          |  0
 .../libavcodec/x86/h264dsp_init.c             |  0
 .../libavcodec/x86/hevcdsp.h                  |  0
 .../libavcodec/x86/hevcdsp_init.c             |  0
 .../libavcodec/x86/hpeldsp.h                  |  0
 .../libavcodec/x86/hpeldsp_init.c             |  0
 .../libavcodec/x86/hpeldsp_rnd_template.c     |  0
 .../libavcodec/x86/hpeldsp_vp3_init.c         |  0
 .../libavcodec/x86/huffyuvdsp_init.c          |  0
 .../libavcodec/x86/huffyuvencdsp_init.c       |  0
 .../libavcodec/x86/idctdsp.h                  |  0
 .../libavcodec/x86/idctdsp_init.c             |  0
 .../libavcodec/x86/inline_asm.h               |  0
 .../libavcodec/x86/jpeg2000dsp_init.c         |  0
 .../libavcodec/x86/lossless_audiodsp_init.c   |  0
 .../libavcodec/x86/lossless_videodsp_init.c   |  0
 .../x86/lossless_videoencdsp_init.c           |  0
 .../libavcodec/x86/lpc.c                      |  0
 .../libavcodec/x86/mathops.h                  |  0
 .../libavcodec/x86/mdct15.asm                 |  0
 .../libavcodec/x86/mdct15_init.c              |  0
 .../libavcodec/x86/me_cmp_init.c              |  0
 .../libavcodec/x86/mlpdsp_init.c              |  0
 .../libavcodec/x86/mpegaudiodsp.c             |  0
 .../libavcodec/x86/mpegvideo.c                |  0
 .../libavcodec/x86/mpegvideodsp.c             |  0
 .../libavcodec/x86/mpegvideoenc.c             |  0
 .../x86/mpegvideoenc_qns_template.c           |  0
 .../libavcodec/x86/mpegvideoenc_template.c    |  0
 .../libavcodec/x86/mpegvideoencdsp_init.c     |  0
 .../libavcodec/x86/opusdsp_init.c             |  0
 .../libavcodec/x86/pixblockdsp_init.c         |  0
 .../libavcodec/x86/pngdsp_init.c              |  0
 .../libavcodec/x86/proresdsp_init.c           |  0
 .../libavcodec/x86/qpeldsp_init.c             |  0
 .../libavcodec/x86/rnd_template.c             |  0
 .../libavcodec/x86/rv34dsp_init.c             |  0
 .../libavcodec/x86/rv40dsp_init.c             |  0
 .../libavcodec/x86/sbcdsp_init.c              |  0
 .../libavcodec/x86/sbrdsp.asm                 |  0
 .../libavcodec/x86/sbrdsp_init.c              |  0
 .../libavcodec/x86/simple_idct.h              |  0
 .../libavcodec/x86/snowdsp.c                  |  0
 .../libavcodec/x86/svq1enc_init.c             |  0
 .../libavcodec/x86/synth_filter_init.c        |  0
 .../libavcodec/x86/takdsp_init.c              |  0
 .../libavcodec/x86/ttadsp_init.c              |  0
 .../libavcodec/x86/ttaencdsp_init.c           |  0
 .../libavcodec/x86/utvideodsp_init.c          |  0
 .../libavcodec/x86/v210-init.c                |  0
 .../libavcodec/x86/v210enc_init.c             |  0
 .../libavcodec/x86/vc1dsp.h                   |  0
 .../libavcodec/x86/vc1dsp_init.c              |  0
 .../libavcodec/x86/vc1dsp_mmx.c               |  0
 .../libavcodec/x86/videodsp_init.c            |  0
 .../libavcodec/x86/vorbisdsp_init.c           |  0
 .../libavcodec/x86/vp3dsp_init.c              |  0
 .../libavcodec/x86/vp56_arith.h               |  0
 .../libavcodec/x86/vp6dsp_init.c              |  0
 .../libavcodec/x86/vp8dsp_init.c              |  0
 .../libavcodec/x86/vp9dsp_init.c              |  0
 .../libavcodec/x86/vp9dsp_init.h              |  0
 .../libavcodec/x86/vp9dsp_init_10bpp.c        |  0
 .../libavcodec/x86/vp9dsp_init_12bpp.c        |  0
 .../libavcodec/x86/vp9dsp_init_16bpp.c        |  0
 .../x86/vp9dsp_init_16bpp_template.c          |  0
 .../libavcodec/x86/xvididct.h                 |  0
 .../libavcodec/x86/xvididct_init.c            |  0
 .../libavcodec/xiph.c                         |  0
 .../libavcodec/xiph.h                         |  0
 .../libavcodec/xvmc.h                         |  0
 .../libavdevice/alldevices.c                  |  0
 .../libavdevice/indev_list.c                  |  0
 .../libavdevice/outdev_list.c                 |  0
 .../libavfilter/allfilters.c                  |  0
 .../libavfilter/avfilter.h                    |  0
 .../libavfilter/bufferqueue.h                 |  0
 .../libavfilter/filter_list.c                 |  0
 .../libavfilter/version.h                     |  0
 .../libavfilter/window_func.h                 |  0
 .../libavformat/allformats.c                  |  0
 .../libavformat/demuxer_list.c                |  0
 .../libavformat/muxer_list.c                  |  0
 .../libavformat/protocol_list.c               |  0
 .../libavformat/protocols.c                   |  0
 .../libavutil/Makefile                        |  0
 .../libavutil/aarch64/Makefile                |  0
 .../libavutil/aarch64/bswap.h                 |  0
 .../libavutil/aarch64/cpu.c                   |  0
 .../libavutil/aarch64/cpu.h                   |  0
 .../libavutil/aarch64/float_dsp_init.c        |  0
 .../libavutil/aarch64/neontest.h              |  0
 .../libavutil/aarch64/timer.h                 |  0
 .../libavutil/adler32.c                       |  0
 .../libavutil/adler32.h                       |  0
 .../libavutil/aes.c                           |  0
 .../libavutil/aes.h                           |  0
 .../libavutil/aes_ctr.c                       |  0
 .../libavutil/aes_ctr.h                       |  0
 .../libavutil/aes_internal.h                  |  0
 .../libavutil/arm/Makefile                    |  0
 .../libavutil/arm/bswap.h                     |  0
 .../libavutil/arm/cpu.c                       |  0
 .../libavutil/arm/cpu.h                       |  0
 .../libavutil/arm/float_dsp_arm.h             |  0
 .../libavutil/arm/float_dsp_init_arm.c        |  0
 .../libavutil/arm/float_dsp_init_neon.c       |  0
 .../libavutil/arm/float_dsp_init_vfp.c        |  0
 .../libavutil/arm/intmath.h                   |  0
 .../libavutil/arm/intreadwrite.h              |  0
 .../libavutil/arm/neontest.h                  |  0
 .../libavutil/arm/timer.h                     |  0
 .../libavutil/attributes.h                    |  0
 .../libavutil/audio_fifo.c                    |  0
 .../libavutil/audio_fifo.h                    |  0
 .../libavutil/avassert.h                      |  0
 .../libavutil/avsscanf.c                      |  0
 .../libavutil/avstring.c                      |  0
 .../libavutil/avstring.h                      |  0
 .../libavutil/avutil.h                        |  0
 .../libavutil/avutilres.rc                    |  0
 .../libavutil/base64.c                        |  0
 .../libavutil/base64.h                        |  0
 .../libavutil/blowfish.c                      |  0
 .../libavutil/blowfish.h                      |  0
 .../libavutil/bprint.c                        |  0
 .../libavutil/bprint.h                        |  0
 .../libavutil/bswap.h                         |  0
 .../libavutil/buffer.c                        |  0
 .../libavutil/buffer.h                        |  0
 .../libavutil/buffer_internal.h               |  0
 .../libavutil/camellia.c                      |  0
 .../libavutil/camellia.h                      |  0
 .../libavutil/cast5.c                         |  0
 .../libavutil/cast5.h                         |  0
 .../libavutil/channel_layout.c                |  0
 .../libavutil/channel_layout.h                |  0
 .../libavutil/color_utils.c                   |  0
 .../libavutil/color_utils.h                   |  0
 .../libavutil/colorspace.h                    |  0
 .../libavutil/common.h                        |  0
 .../libavutil/cpu.c                           |  0
 .../libavutil/cpu.h                           |  0
 .../libavutil/cpu_internal.h                  |  0
 .../libavutil/crc.c                           |  0
 .../libavutil/crc.h                           |  0
 .../libavutil/des.c                           |  0
 .../libavutil/des.h                           |  0
 .../libavutil/dict.c                          |  0
 .../libavutil/dict.h                          |  0
 .../libavutil/display.c                       |  0
 .../libavutil/display.h                       |  0
 .../libavutil/downmix_info.c                  |  0
 .../libavutil/downmix_info.h                  |  0
 .../libavutil/dynarray.h                      |  0
 .../libavutil/encryption_info.c               |  0
 .../libavutil/encryption_info.h               |  0
 .../libavutil/error.c                         |  0
 .../libavutil/error.h                         |  0
 .../libavutil/eval.c                          |  0
 .../libavutil/eval.h                          |  0
 .../libavutil/ffmath.h                        |  0
 .../libavutil/fifo.c                          |  0
 .../libavutil/fifo.h                          |  0
 .../libavutil/file.c                          |  0
 .../libavutil/file.h                          |  0
 .../libavutil/file_open.c                     |  0
 .../libavutil/fixed_dsp.c                     |  0
 .../libavutil/fixed_dsp.h                     |  0
 .../libavutil/float_dsp.c                     |  0
 .../libavutil/float_dsp.h                     |  0
 .../libavutil/frame.c                         |  0
 .../libavutil/frame.h                         |  0
 .../libavutil/hash.c                          |  0
 .../libavutil/hash.h                          |  0
 .../libavutil/hdr_dynamic_metadata.c          |  0
 .../libavutil/hdr_dynamic_metadata.h          |  0
 .../libavutil/hmac.c                          |  0
 .../libavutil/hmac.h                          |  0
 .../libavutil/hwcontext.c                     |  0
 .../libavutil/hwcontext.h                     |  0
 .../libavutil/hwcontext_cuda.c                |  0
 .../libavutil/hwcontext_cuda.h                |  0
 .../libavutil/hwcontext_cuda_internal.h       |  0
 .../libavutil/hwcontext_d3d11va.c             |  0
 .../libavutil/hwcontext_d3d11va.h             |  0
 .../libavutil/hwcontext_drm.c                 |  0
 .../libavutil/hwcontext_drm.h                 |  0
 .../libavutil/hwcontext_dxva2.c               |  0
 .../libavutil/hwcontext_dxva2.h               |  0
 .../libavutil/hwcontext_internal.h            |  0
 .../libavutil/hwcontext_mediacodec.c          |  0
 .../libavutil/hwcontext_mediacodec.h          |  0
 .../libavutil/hwcontext_opencl.c              |  0
 .../libavutil/hwcontext_opencl.h              |  0
 .../libavutil/hwcontext_qsv.c                 |  0
 .../libavutil/hwcontext_qsv.h                 |  0
 .../libavutil/hwcontext_vaapi.c               |  0
 .../libavutil/hwcontext_vaapi.h               |  0
 .../libavutil/hwcontext_vdpau.c               |  0
 .../libavutil/hwcontext_vdpau.h               |  0
 .../libavutil/hwcontext_videotoolbox.c        |  0
 .../libavutil/hwcontext_videotoolbox.h        |  0
 .../libavutil/imgutils.c                      |  0
 .../libavutil/imgutils.h                      |  0
 .../libavutil/imgutils_internal.h             |  0
 .../libavutil/integer.c                       |  0
 .../libavutil/integer.h                       |  0
 .../libavutil/internal.h                      |  0
 .../libavutil/intfloat.h                      |  0
 .../libavutil/intmath.c                       |  0
 .../libavutil/intmath.h                       |  0
 .../libavutil/intreadwrite.h                  |  0
 .../libavutil/lfg.c                           |  0
 .../libavutil/lfg.h                           |  0
 .../libavutil/libm.h                          |  0
 .../libavutil/lls.c                           |  0
 .../libavutil/lls.h                           |  0
 .../libavutil/log.c                           |  0
 .../libavutil/log.h                           |  0
 .../libavutil/log2_tab.c                      |  0
 .../libavutil/macros.h                        |  0
 .../libavutil/mastering_display_metadata.c    |  0
 .../libavutil/mastering_display_metadata.h    |  0
 .../libavutil/mathematics.c                   |  0
 .../libavutil/mathematics.h                   |  0
 .../libavutil/md5.c                           |  0
 .../libavutil/md5.h                           |  0
 .../libavutil/mem.c                           |  0
 .../libavutil/mem.h                           |  0
 .../libavutil/mem_internal.h                  |  0
 .../libavutil/motion_vector.h                 |  0
 .../libavutil/murmur3.c                       |  0
 .../libavutil/murmur3.h                       |  0
 .../libavutil/opt.c                           |  0
 .../libavutil/opt.h                           |  0
 .../libavutil/parseutils.c                    |  0
 .../libavutil/parseutils.h                    |  0
 .../libavutil/pixdesc.c                       |  0
 .../libavutil/pixdesc.h                       |  0
 .../libavutil/pixelutils.c                    |  0
 .../libavutil/pixelutils.h                    |  0
 .../libavutil/pixfmt.h                        |  0
 .../libavutil/qsort.h                         |  0
 .../libavutil/random_seed.c                   |  0
 .../libavutil/random_seed.h                   |  0
 .../libavutil/rational.c                      |  0
 .../libavutil/rational.h                      |  0
 .../libavutil/rc4.c                           |  0
 .../libavutil/rc4.h                           |  0
 .../libavutil/replaygain.h                    |  0
 .../libavutil/reverse.c                       |  0
 .../libavutil/reverse.h                       |  0
 .../libavutil/ripemd.c                        |  0
 .../libavutil/ripemd.h                        |  0
 .../libavutil/samplefmt.c                     |  0
 .../libavutil/samplefmt.h                     |  0
 .../libavutil/sha.c                           |  0
 .../libavutil/sha.h                           |  0
 .../libavutil/sha512.c                        |  0
 .../libavutil/sha512.h                        |  0
 .../libavutil/slicethread.c                   |  0
 .../libavutil/slicethread.h                   |  0
 .../libavutil/softfloat.h                     |  0
 .../libavutil/softfloat_ieee754.h             |  0
 .../libavutil/softfloat_tables.h              |  0
 .../libavutil/spherical.c                     |  0
 .../libavutil/spherical.h                     |  0
 .../libavutil/stereo3d.c                      |  0
 .../libavutil/stereo3d.h                      |  0
 .../libavutil/tea.c                           |  0
 .../libavutil/tea.h                           |  0
 .../libavutil/thread.h                        |  0
 .../libavutil/threadmessage.c                 |  0
 .../libavutil/threadmessage.h                 |  0
 .../libavutil/time.c                          |  0
 .../libavutil/time.h                          |  0
 .../libavutil/time_internal.h                 |  0
 .../libavutil/timecode.c                      |  0
 .../libavutil/timecode.h                      |  0
 .../libavutil/timer.h                         |  0
 .../libavutil/timestamp.h                     |  0
 .../libavutil/tree.c                          |  0
 .../libavutil/tree.h                          |  0
 .../libavutil/twofish.c                       |  0
 .../libavutil/twofish.h                       |  0
 .../libavutil/tx.c                            |  0
 .../libavutil/tx.h                            |  0
 .../libavutil/utils.c                         |  0
 .../libavutil/version.h                       |  0
 .../libavutil/x86/Makefile                    |  0
 .../libavutil/x86/asm.h                       |  0
 .../libavutil/x86/bswap.h                     |  0
 .../libavutil/x86/cpu.c                       |  0
 .../libavutil/x86/cpu.h                       |  0
 .../libavutil/x86/cpuid.asm                   |  0
 .../libavutil/x86/emms.h                      |  0
 .../libavutil/x86/fixed_dsp.asm               |  0
 .../libavutil/x86/fixed_dsp_init.c            |  0
 .../libavutil/x86/float_dsp.asm               |  0
 .../libavutil/x86/float_dsp_init.c            |  0
 .../libavutil/x86/imgutils.asm                |  0
 .../libavutil/x86/imgutils_init.c             |  0
 .../libavutil/x86/intmath.h                   |  0
 .../libavutil/x86/intreadwrite.h              |  0
 .../libavutil/x86/lls.asm                     |  0
 .../libavutil/x86/lls_init.c                  |  0
 .../libavutil/x86/pixelutils.h                |  0
 .../libavutil/x86/pixelutils_init.c           |  0
 .../libavutil/x86/timer.h                     |  0
 .../libavutil/x86/w64xmmtest.h                |  0
 .../libavutil/x86/x86inc.asm                  |  0
 .../libavutil/x86/x86util.asm                 |  0
 .../libavutil/xga_font_data.c                 |  0
 .../libavutil/xga_font_data.h                 |  0
 .../libavutil/xtea.c                          |  0
 .../libavutil/xtea.h                          |  0
 .../libswresample/Makefile                    |  0
 .../libswresample/aarch64/Makefile            |  0
 .../aarch64/audio_convert_init.c              |  0
 .../libswresample/aarch64/resample_init.c     |  0
 .../libswresample/arm/Makefile                |  0
 .../libswresample/arm/audio_convert_init.c    |  0
 .../libswresample/arm/resample_init.c         |  0
 .../libswresample/audioconvert.c              |  0
 .../libswresample/audioconvert.h              |  0
 .../libswresample/dither.c                    |  0
 .../libswresample/dither_template.c           |  0
 .../libswresample/noise_shaping_data.c        |  0
 .../libswresample/options.c                   |  0
 .../libswresample/rematrix.c                  |  0
 .../libswresample/rematrix_template.c         |  0
 .../libswresample/resample.c                  |  0
 .../libswresample/resample.h                  |  0
 .../libswresample/resample_dsp.c              |  0
 .../libswresample/resample_template.c         |  0
 .../libswresample/swresample.c                |  0
 .../libswresample/swresample.h                |  0
 .../libswresample/swresample_frame.c          |  0
 .../libswresample/swresample_internal.h       |  0
 .../libswresample/swresampleres.rc            |  0
 .../libswresample/version.h                   |  0
 .../libswresample/x86/Makefile                |  0
 .../libswresample/x86/audio_convert.asm       |  0
 .../libswresample/x86/audio_convert_init.c    |  0
 .../libswresample/x86/rematrix.asm            |  0
 .../libswresample/x86/rematrix_init.c         |  0
 .../libswresample/x86/resample.asm            |  0
 .../libswresample/x86/resample_init.c         |  0
 trunk/auto/depends.sh                         | 28 +++++++++----------
 720 files changed, 14 insertions(+), 14 deletions(-)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/.gitignore (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/.version (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/Makefile (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/compat/atomics/gcc/stdatomic.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/compat/va_copy.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/configure (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/ffbuild/arch.mak (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/ffbuild/common.mak (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/ffbuild/library.mak (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/ffbuild/libversion.sh (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/ffbuild/pkgconfig_generate.sh (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/ffbuild/version.sh (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/Makefile (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aac.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aac_ac3_parser.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aac_ac3_parser.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aac_adtstoasc_bsf.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aac_defines.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aac_parser.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aaccoder.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aaccoder_trellis.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aaccoder_twoloop.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacdec.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacdec_fixed.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacdec_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacdectab.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacenc.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacenc.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacenc_is.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacenc_is.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacenc_ltp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacenc_ltp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacenc_pred.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacenc_pred.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacenc_quantization.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacenc_quantization_misc.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacenc_tns.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacenc_tns.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacenc_utils.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacencdsp.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacencdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacenctab.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacenctab.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacps.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacps.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacps_fixed.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacps_fixed_tablegen.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacps_fixed_tablegen.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacps_float.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacps_tablegen.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacps_tablegen.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacps_tablegen_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacpsdata.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacpsdsp.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacpsdsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacpsdsp_fixed.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacpsdsp_float.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacpsdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacpsdsp_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacpsy.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacsbr.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacsbr.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacsbr_fixed.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacsbr_fixed_tablegen.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacsbr_tablegen.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacsbr_tablegen_common.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacsbr_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aacsbrdata.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aactab.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aactab.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/Makefile (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/aacpsdsp_init_aarch64.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/asm-offsets.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/cabac.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/fft_init_aarch64.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/fmtconvert_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/h264chroma_init_aarch64.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/h264dsp_init_aarch64.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/h264pred_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/h264qpel_init_aarch64.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/hpeldsp_init_aarch64.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/idct.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/idctdsp_init_aarch64.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/mpegaudiodsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/opusdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/rv40dsp_init_aarch64.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/sbrdsp_init_aarch64.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/synth_filter_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/vc1dsp_init_aarch64.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/videodsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/vorbisdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/vp8dsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/vp8dsp_init_aarch64.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/vp9dsp_init.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/vp9dsp_init_10bpp_aarch64.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/vp9dsp_init_12bpp_aarch64.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/vp9dsp_init_16bpp_aarch64_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/aarch64/vp9dsp_init_aarch64.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3_parser.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3_parser.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3_parser_internal.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3dec.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3dec.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3dec_data.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3dec_data.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3dec_fixed.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3dec_float.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3dsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3dsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3enc.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3enc.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3enc_fixed.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3enc_float.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3enc_opts_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3enc_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3tab.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ac3tab.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/adts_header.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/adts_header.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/adts_parser.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/adts_parser.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/allcodecs.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/audio_frame_queue.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/audio_frame_queue.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/avcodec.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/avdct.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/avdct.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/avfft.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/avfft.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/avpacket.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/avpicture.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/bitstream.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/bitstream_filter.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/bitstream_filters.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/blockdsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/blockdsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/bsf.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/bsf.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/bsf_list.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/bytestream.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/cbrt_data.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/cbrt_data.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/cbrt_data_fixed.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/cbrt_tablegen.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/cbrt_tablegen.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/codec_desc.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/codec_list.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/d3d11va.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/d3d11va.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/dct.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/decode.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/decode.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/dirac.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/dirac.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/dirac_arith.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/dirac_dwt.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/dirac_vlc.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/diracdsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/diractab.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/dv_profile.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/dv_profile.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/dv_profile_internal.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/dxva2.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/encode.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/error_resilience.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/error_resilience.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/fdctdsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/fft-internal.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/fft.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/fft_fixed.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/fft_fixed_32.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/fft_float.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/fft_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/fft_init_table.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/fft_table.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/fft_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/frame_thread_encoder.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/frame_thread_encoder.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/get_bits.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/golomb.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/golomb.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/h263dsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/h263dsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/h264chroma.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/h264chroma.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/hpeldsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/hpeldsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/hwaccel.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/hwaccels.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/idctdsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/iirfilter.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/iirfilter.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/imgconvert.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/internal.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/jni.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/jni.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/kbdwin.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/kbdwin.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/latm_parser.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/libopus.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/libopus.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/libopusdec.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/libopusenc.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/lpc.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/lpc.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mathops.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mathtables.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mdct15.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mdct15.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mdct15.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mdct15_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mdct_fixed.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mdct_fixed_32.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mdct_float.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mdct_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/me_cmp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/me_cmp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mediacodec.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mediacodec.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mediacodec_surface.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mediacodec_sw_buffer.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mediacodec_wrapper.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mediacodecdec_common.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mjpegenc.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mjpegenc_common.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mjpegenc_huffman.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mjpegenc_huffman.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/motion_est.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/motion_est.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpeg12.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpeg12.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpeg12data.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpeg12data.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpeg12framerate.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpeg12vlc.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpeg4audio.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpeg4audio.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpegpicture.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpegpicture.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpegutils.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpegutils.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpegvideo.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpegvideo.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpegvideodata.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpegvideodata.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpegvideodsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpegvideodsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpegvideoencdsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/mpegvideoencdsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/null_bsf.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/options.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/options_table.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opus.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opus.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opus_celt.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opus_celt.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opus_pvq.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opus_pvq.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opus_rc.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opus_rc.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opusdsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opusdsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opusenc.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opusenc.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opusenc_psy.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opusenc_psy.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opusenc_utils.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opustab.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/opustab.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/parser.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/parser.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/parser_list.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/parsers.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/pixblockdsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/profiles.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/profiles.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/psymodel.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/psymodel.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/pthread.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/pthread_frame.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/pthread_internal.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/pthread_slice.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/put_bits.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/qpeldsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/qpeldsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/qsv.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/qsv_api.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ratecontrol.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/ratecontrol.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/raw.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/raw.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/rdft.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/rl.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/rl.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/rle.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/sbr.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/sbrdsp.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/sbrdsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/sbrdsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/sbrdsp_fixed.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/sbrdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/sbrdsp_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/sinewin.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/sinewin.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/sinewin_fixed.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/sinewin_tablegen.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/sinewin_tablegen.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/thread.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/utils.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/v4l2_buffers.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/v4l2_buffers.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/v4l2_context.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/v4l2_context.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/v4l2_fmt.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/v4l2_fmt.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/v4l2_m2m.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/v4l2_m2m.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/vaapi.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/vdpau.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/version.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/videodsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/videodsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/videotoolbox.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/vlc.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/vorbis.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/vorbis.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/vorbis_data.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/vorbis_enc_data.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/vorbis_parser.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/vorbis_parser.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/vorbis_parser_internal.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/vorbisdsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/Makefile (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/aacencdsp.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/aacencdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/aacpsdsp.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/aacpsdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/ac3dsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/alacdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/audiodsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/blockdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/bswapdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/cabac.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/cavsdsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/celt_pvq_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/celt_pvq_search.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/constants.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/constants.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/dcadsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/dct_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/dirac_dwt_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/diracdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/dnxhdenc_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/exrdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/fdct.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/fdct.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/fdctdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/fft.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/fft.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/fft_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/flacdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/fmtconvert_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/fpel.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/g722dsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/h263dsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/h264_cabac.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/h264_intrapred_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/h264_qpel.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/h264chroma_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/h264dsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/hevcdsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/hevcdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/hpeldsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/hpeldsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/hpeldsp_rnd_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/hpeldsp_vp3_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/huffyuvdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/huffyuvencdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/idctdsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/idctdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/inline_asm.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/jpeg2000dsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/lossless_audiodsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/lossless_videodsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/lossless_videoencdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/lpc.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/mathops.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/mdct15.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/mdct15_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/me_cmp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/mlpdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/mpegaudiodsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/mpegvideo.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/mpegvideodsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/mpegvideoenc.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/mpegvideoenc_qns_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/mpegvideoenc_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/mpegvideoencdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/opusdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/pixblockdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/pngdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/proresdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/qpeldsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/rnd_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/rv34dsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/rv40dsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/sbcdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/sbrdsp.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/sbrdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/simple_idct.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/snowdsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/svq1enc_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/synth_filter_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/takdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/ttadsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/ttaencdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/utvideodsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/v210-init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/v210enc_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/vc1dsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/vc1dsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/vc1dsp_mmx.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/videodsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/vorbisdsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/vp3dsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/vp56_arith.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/vp6dsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/vp8dsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/vp9dsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/vp9dsp_init.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/vp9dsp_init_10bpp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/vp9dsp_init_12bpp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/vp9dsp_init_16bpp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/vp9dsp_init_16bpp_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/xvididct.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/x86/xvididct_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/xiph.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/xiph.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavcodec/xvmc.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavdevice/alldevices.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavdevice/indev_list.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavdevice/outdev_list.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavfilter/allfilters.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavfilter/avfilter.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavfilter/bufferqueue.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavfilter/filter_list.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavfilter/version.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavfilter/window_func.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavformat/allformats.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavformat/demuxer_list.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavformat/muxer_list.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavformat/protocol_list.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavformat/protocols.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/Makefile (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/aarch64/Makefile (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/aarch64/bswap.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/aarch64/cpu.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/aarch64/cpu.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/aarch64/float_dsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/aarch64/neontest.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/aarch64/timer.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/adler32.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/adler32.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/aes.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/aes.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/aes_ctr.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/aes_ctr.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/aes_internal.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/arm/Makefile (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/arm/bswap.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/arm/cpu.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/arm/cpu.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/arm/float_dsp_arm.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/arm/float_dsp_init_arm.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/arm/float_dsp_init_neon.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/arm/float_dsp_init_vfp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/arm/intmath.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/arm/intreadwrite.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/arm/neontest.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/arm/timer.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/attributes.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/audio_fifo.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/audio_fifo.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/avassert.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/avsscanf.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/avstring.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/avstring.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/avutil.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/avutilres.rc (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/base64.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/base64.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/blowfish.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/blowfish.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/bprint.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/bprint.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/bswap.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/buffer.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/buffer.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/buffer_internal.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/camellia.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/camellia.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/cast5.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/cast5.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/channel_layout.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/channel_layout.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/color_utils.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/color_utils.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/colorspace.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/common.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/cpu.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/cpu.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/cpu_internal.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/crc.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/crc.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/des.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/des.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/dict.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/dict.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/display.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/display.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/downmix_info.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/downmix_info.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/dynarray.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/encryption_info.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/encryption_info.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/error.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/error.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/eval.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/eval.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/ffmath.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/fifo.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/fifo.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/file.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/file.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/file_open.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/fixed_dsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/fixed_dsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/float_dsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/float_dsp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/frame.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/frame.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hash.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hash.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hdr_dynamic_metadata.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hdr_dynamic_metadata.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hmac.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hmac.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_cuda.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_cuda.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_cuda_internal.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_d3d11va.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_d3d11va.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_drm.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_drm.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_dxva2.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_dxva2.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_internal.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_mediacodec.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_mediacodec.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_opencl.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_opencl.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_qsv.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_qsv.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_vaapi.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_vaapi.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_vdpau.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_vdpau.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_videotoolbox.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/hwcontext_videotoolbox.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/imgutils.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/imgutils.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/imgutils_internal.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/integer.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/integer.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/internal.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/intfloat.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/intmath.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/intmath.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/intreadwrite.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/lfg.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/lfg.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/libm.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/lls.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/lls.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/log.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/log.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/log2_tab.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/macros.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/mastering_display_metadata.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/mastering_display_metadata.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/mathematics.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/mathematics.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/md5.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/md5.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/mem.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/mem.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/mem_internal.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/motion_vector.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/murmur3.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/murmur3.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/opt.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/opt.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/parseutils.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/parseutils.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/pixdesc.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/pixdesc.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/pixelutils.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/pixelutils.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/pixfmt.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/qsort.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/random_seed.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/random_seed.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/rational.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/rational.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/rc4.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/rc4.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/replaygain.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/reverse.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/reverse.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/ripemd.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/ripemd.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/samplefmt.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/samplefmt.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/sha.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/sha.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/sha512.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/sha512.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/slicethread.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/slicethread.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/softfloat.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/softfloat_ieee754.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/softfloat_tables.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/spherical.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/spherical.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/stereo3d.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/stereo3d.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/tea.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/tea.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/thread.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/threadmessage.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/threadmessage.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/time.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/time.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/time_internal.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/timecode.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/timecode.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/timer.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/timestamp.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/tree.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/tree.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/twofish.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/twofish.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/tx.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/tx.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/utils.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/version.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/Makefile (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/asm.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/bswap.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/cpu.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/cpu.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/cpuid.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/emms.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/fixed_dsp.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/fixed_dsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/float_dsp.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/float_dsp_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/imgutils.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/imgutils_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/intmath.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/intreadwrite.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/lls.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/lls_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/pixelutils.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/pixelutils_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/timer.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/w64xmmtest.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/x86inc.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/x86/x86util.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/xga_font_data.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/xga_font_data.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/xtea.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libavutil/xtea.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/Makefile (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/aarch64/Makefile (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/aarch64/audio_convert_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/aarch64/resample_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/arm/Makefile (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/arm/audio_convert_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/arm/resample_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/audioconvert.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/audioconvert.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/dither.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/dither_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/noise_shaping_data.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/options.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/rematrix.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/rematrix_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/resample.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/resample.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/resample_dsp.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/resample_template.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/swresample.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/swresample.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/swresample_frame.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/swresample_internal.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/swresampleres.rc (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/version.h (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/x86/Makefile (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/x86/audio_convert.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/x86/audio_convert_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/x86/rematrix.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/x86/rematrix_init.c (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/x86/resample.asm (100%)
 rename trunk/3rdparty/{ffmpeg-4.2-fit => ffmpeg-4-fit}/libswresample/x86/resample_init.c (100%)

diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/.gitignore b/trunk/3rdparty/ffmpeg-4-fit/.gitignore
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/.gitignore
rename to trunk/3rdparty/ffmpeg-4-fit/.gitignore
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/.version b/trunk/3rdparty/ffmpeg-4-fit/.version
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/.version
rename to trunk/3rdparty/ffmpeg-4-fit/.version
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/Makefile b/trunk/3rdparty/ffmpeg-4-fit/Makefile
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/Makefile
rename to trunk/3rdparty/ffmpeg-4-fit/Makefile
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/compat/atomics/gcc/stdatomic.h b/trunk/3rdparty/ffmpeg-4-fit/compat/atomics/gcc/stdatomic.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/compat/atomics/gcc/stdatomic.h
rename to trunk/3rdparty/ffmpeg-4-fit/compat/atomics/gcc/stdatomic.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/compat/va_copy.h b/trunk/3rdparty/ffmpeg-4-fit/compat/va_copy.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/compat/va_copy.h
rename to trunk/3rdparty/ffmpeg-4-fit/compat/va_copy.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/configure b/trunk/3rdparty/ffmpeg-4-fit/configure
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/configure
rename to trunk/3rdparty/ffmpeg-4-fit/configure
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/ffbuild/arch.mak b/trunk/3rdparty/ffmpeg-4-fit/ffbuild/arch.mak
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/ffbuild/arch.mak
rename to trunk/3rdparty/ffmpeg-4-fit/ffbuild/arch.mak
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/ffbuild/common.mak b/trunk/3rdparty/ffmpeg-4-fit/ffbuild/common.mak
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/ffbuild/common.mak
rename to trunk/3rdparty/ffmpeg-4-fit/ffbuild/common.mak
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/ffbuild/library.mak b/trunk/3rdparty/ffmpeg-4-fit/ffbuild/library.mak
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/ffbuild/library.mak
rename to trunk/3rdparty/ffmpeg-4-fit/ffbuild/library.mak
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/ffbuild/libversion.sh b/trunk/3rdparty/ffmpeg-4-fit/ffbuild/libversion.sh
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/ffbuild/libversion.sh
rename to trunk/3rdparty/ffmpeg-4-fit/ffbuild/libversion.sh
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/ffbuild/pkgconfig_generate.sh b/trunk/3rdparty/ffmpeg-4-fit/ffbuild/pkgconfig_generate.sh
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/ffbuild/pkgconfig_generate.sh
rename to trunk/3rdparty/ffmpeg-4-fit/ffbuild/pkgconfig_generate.sh
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/ffbuild/version.sh b/trunk/3rdparty/ffmpeg-4-fit/ffbuild/version.sh
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/ffbuild/version.sh
rename to trunk/3rdparty/ffmpeg-4-fit/ffbuild/version.sh
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/Makefile b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/Makefile
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/Makefile
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/Makefile
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aac.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aac.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aac.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aac.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aac_ac3_parser.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aac_ac3_parser.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aac_ac3_parser.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aac_ac3_parser.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aac_ac3_parser.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aac_ac3_parser.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aac_ac3_parser.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aac_ac3_parser.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aac_adtstoasc_bsf.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aac_adtstoasc_bsf.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aac_adtstoasc_bsf.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aac_adtstoasc_bsf.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aac_defines.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aac_defines.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aac_defines.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aac_defines.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aac_parser.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aac_parser.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aac_parser.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aac_parser.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aaccoder.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aaccoder.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aaccoder.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aaccoder.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aaccoder_trellis.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aaccoder_trellis.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aaccoder_trellis.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aaccoder_trellis.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aaccoder_twoloop.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aaccoder_twoloop.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aaccoder_twoloop.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aaccoder_twoloop.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacdec.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacdec.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacdec.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacdec.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacdec_fixed.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacdec_fixed.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacdec_fixed.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacdec_fixed.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacdec_template.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacdec_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacdec_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacdec_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacdectab.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacdectab.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacdectab.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacdectab.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_is.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_is.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_is.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_is.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_is.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_is.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_is.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_is.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_ltp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_ltp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_ltp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_ltp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_ltp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_ltp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_ltp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_ltp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_pred.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_pred.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_pred.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_pred.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_pred.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_pred.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_pred.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_pred.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_quantization.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_quantization.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_quantization.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_quantization.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_quantization_misc.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_quantization_misc.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_quantization_misc.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_quantization_misc.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_tns.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_tns.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_tns.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_tns.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_tns.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_tns.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_tns.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_tns.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_utils.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_utils.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenc_utils.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenc_utils.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacencdsp.asm b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacencdsp.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacencdsp.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacencdsp.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacencdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacencdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacencdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacencdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenctab.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenctab.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenctab.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenctab.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenctab.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenctab.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacenctab.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacenctab.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps_fixed.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps_fixed.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps_fixed.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps_fixed.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps_fixed_tablegen.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps_fixed_tablegen.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps_fixed_tablegen.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps_fixed_tablegen.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps_fixed_tablegen.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps_fixed_tablegen.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps_fixed_tablegen.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps_fixed_tablegen.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps_float.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps_float.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps_float.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps_float.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps_tablegen.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps_tablegen.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps_tablegen.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps_tablegen.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps_tablegen.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps_tablegen.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps_tablegen.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps_tablegen.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps_tablegen_template.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps_tablegen_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacps_tablegen_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacps_tablegen_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacpsdata.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacpsdata.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacpsdata.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacpsdata.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacpsdsp.asm b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacpsdsp.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacpsdsp.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacpsdsp.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacpsdsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacpsdsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacpsdsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacpsdsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacpsdsp_fixed.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacpsdsp_fixed.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacpsdsp_fixed.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacpsdsp_fixed.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacpsdsp_float.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacpsdsp_float.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacpsdsp_float.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacpsdsp_float.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacpsdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacpsdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacpsdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacpsdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacpsdsp_template.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacpsdsp_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacpsdsp_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacpsdsp_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacpsy.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacpsy.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacpsy.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacpsy.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacsbr.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacsbr.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacsbr.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacsbr.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacsbr.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacsbr.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacsbr.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacsbr.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacsbr_fixed.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacsbr_fixed.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacsbr_fixed.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacsbr_fixed.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacsbr_fixed_tablegen.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacsbr_fixed_tablegen.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacsbr_fixed_tablegen.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacsbr_fixed_tablegen.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacsbr_tablegen.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacsbr_tablegen.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacsbr_tablegen.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacsbr_tablegen.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacsbr_tablegen_common.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacsbr_tablegen_common.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacsbr_tablegen_common.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacsbr_tablegen_common.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacsbr_template.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacsbr_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacsbr_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacsbr_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacsbrdata.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacsbrdata.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aacsbrdata.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aacsbrdata.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aactab.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aactab.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aactab.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aactab.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aactab.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aactab.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aactab.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aactab.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/Makefile b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/Makefile
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/Makefile
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/Makefile
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/aacpsdsp_init_aarch64.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/aacpsdsp_init_aarch64.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/aacpsdsp_init_aarch64.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/aacpsdsp_init_aarch64.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/asm-offsets.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/asm-offsets.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/asm-offsets.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/asm-offsets.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/cabac.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/cabac.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/cabac.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/cabac.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/fft_init_aarch64.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/fft_init_aarch64.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/fft_init_aarch64.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/fft_init_aarch64.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/fmtconvert_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/fmtconvert_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/fmtconvert_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/fmtconvert_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/h264chroma_init_aarch64.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/h264chroma_init_aarch64.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/h264chroma_init_aarch64.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/h264chroma_init_aarch64.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/h264dsp_init_aarch64.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/h264dsp_init_aarch64.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/h264dsp_init_aarch64.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/h264dsp_init_aarch64.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/h264pred_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/h264pred_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/h264pred_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/h264pred_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/h264qpel_init_aarch64.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/h264qpel_init_aarch64.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/h264qpel_init_aarch64.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/h264qpel_init_aarch64.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/hpeldsp_init_aarch64.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/hpeldsp_init_aarch64.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/hpeldsp_init_aarch64.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/hpeldsp_init_aarch64.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/idct.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/idct.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/idct.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/idct.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/idctdsp_init_aarch64.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/idctdsp_init_aarch64.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/idctdsp_init_aarch64.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/idctdsp_init_aarch64.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/mpegaudiodsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/mpegaudiodsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/mpegaudiodsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/mpegaudiodsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/opusdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/opusdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/opusdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/opusdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/rv40dsp_init_aarch64.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/rv40dsp_init_aarch64.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/rv40dsp_init_aarch64.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/rv40dsp_init_aarch64.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/sbrdsp_init_aarch64.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/sbrdsp_init_aarch64.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/sbrdsp_init_aarch64.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/sbrdsp_init_aarch64.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/synth_filter_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/synth_filter_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/synth_filter_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/synth_filter_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vc1dsp_init_aarch64.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vc1dsp_init_aarch64.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vc1dsp_init_aarch64.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vc1dsp_init_aarch64.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/videodsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/videodsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/videodsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/videodsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vorbisdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vorbisdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vorbisdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vorbisdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vp8dsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vp8dsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vp8dsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vp8dsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vp8dsp_init_aarch64.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vp8dsp_init_aarch64.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vp8dsp_init_aarch64.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vp8dsp_init_aarch64.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vp9dsp_init.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vp9dsp_init.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vp9dsp_init.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vp9dsp_init.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vp9dsp_init_10bpp_aarch64.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vp9dsp_init_10bpp_aarch64.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vp9dsp_init_10bpp_aarch64.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vp9dsp_init_10bpp_aarch64.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vp9dsp_init_12bpp_aarch64.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vp9dsp_init_12bpp_aarch64.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vp9dsp_init_12bpp_aarch64.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vp9dsp_init_12bpp_aarch64.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vp9dsp_init_16bpp_aarch64_template.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vp9dsp_init_16bpp_aarch64_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vp9dsp_init_16bpp_aarch64_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vp9dsp_init_16bpp_aarch64_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vp9dsp_init_aarch64.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vp9dsp_init_aarch64.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/aarch64/vp9dsp_init_aarch64.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/aarch64/vp9dsp_init_aarch64.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3_parser.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3_parser.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3_parser.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3_parser.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3_parser.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3_parser.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3_parser.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3_parser.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3_parser_internal.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3_parser_internal.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3_parser_internal.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3_parser_internal.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3dec.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3dec.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3dec.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3dec.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3dec.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3dec.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3dec.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3dec.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3dec_data.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3dec_data.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3dec_data.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3dec_data.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3dec_data.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3dec_data.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3dec_data.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3dec_data.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3dec_fixed.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3dec_fixed.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3dec_fixed.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3dec_fixed.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3dec_float.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3dec_float.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3dec_float.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3dec_float.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3dsp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3dsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3dsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3dsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3dsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3dsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3dsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3dsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3enc.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3enc.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3enc.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3enc.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3enc.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3enc.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3enc.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3enc.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3enc_fixed.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3enc_fixed.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3enc_fixed.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3enc_fixed.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3enc_float.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3enc_float.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3enc_float.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3enc_float.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3enc_opts_template.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3enc_opts_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3enc_opts_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3enc_opts_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3enc_template.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3enc_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3enc_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3enc_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3tab.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3tab.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3tab.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3tab.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3tab.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3tab.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ac3tab.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ac3tab.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/adts_header.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/adts_header.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/adts_header.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/adts_header.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/adts_header.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/adts_header.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/adts_header.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/adts_header.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/adts_parser.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/adts_parser.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/adts_parser.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/adts_parser.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/adts_parser.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/adts_parser.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/adts_parser.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/adts_parser.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/allcodecs.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/allcodecs.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/allcodecs.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/allcodecs.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/audio_frame_queue.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/audio_frame_queue.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/audio_frame_queue.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/audio_frame_queue.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/audio_frame_queue.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/audio_frame_queue.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/audio_frame_queue.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/audio_frame_queue.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/avcodec.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/avcodec.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/avcodec.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/avcodec.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/avdct.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/avdct.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/avdct.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/avdct.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/avdct.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/avdct.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/avdct.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/avdct.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/avfft.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/avfft.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/avfft.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/avfft.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/avfft.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/avfft.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/avfft.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/avfft.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/avpacket.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/avpacket.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/avpacket.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/avpacket.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/avpicture.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/avpicture.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/avpicture.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/avpicture.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/bitstream.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/bitstream.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/bitstream.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/bitstream.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/bitstream_filter.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/bitstream_filter.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/bitstream_filter.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/bitstream_filter.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/bitstream_filters.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/bitstream_filters.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/bitstream_filters.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/bitstream_filters.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/blockdsp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/blockdsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/blockdsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/blockdsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/blockdsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/blockdsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/blockdsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/blockdsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/bsf.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/bsf.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/bsf.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/bsf.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/bsf.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/bsf.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/bsf.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/bsf.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/bsf_list.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/bsf_list.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/bsf_list.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/bsf_list.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/bytestream.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/bytestream.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/bytestream.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/bytestream.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/cbrt_data.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/cbrt_data.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/cbrt_data.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/cbrt_data.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/cbrt_data.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/cbrt_data.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/cbrt_data.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/cbrt_data.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/cbrt_data_fixed.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/cbrt_data_fixed.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/cbrt_data_fixed.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/cbrt_data_fixed.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/cbrt_tablegen.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/cbrt_tablegen.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/cbrt_tablegen.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/cbrt_tablegen.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/cbrt_tablegen.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/cbrt_tablegen.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/cbrt_tablegen.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/cbrt_tablegen.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/codec_desc.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/codec_desc.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/codec_desc.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/codec_desc.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/codec_list.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/codec_list.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/codec_list.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/codec_list.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/d3d11va.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/d3d11va.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/d3d11va.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/d3d11va.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/d3d11va.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/d3d11va.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/d3d11va.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/d3d11va.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dct.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/dct.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dct.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/dct.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/decode.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/decode.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/decode.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/decode.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/decode.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/decode.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/decode.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/decode.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dirac.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/dirac.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dirac.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/dirac.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dirac.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/dirac.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dirac.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/dirac.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dirac_arith.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/dirac_arith.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dirac_arith.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/dirac_arith.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dirac_dwt.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/dirac_dwt.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dirac_dwt.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/dirac_dwt.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dirac_vlc.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/dirac_vlc.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dirac_vlc.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/dirac_vlc.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/diracdsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/diracdsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/diracdsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/diracdsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/diractab.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/diractab.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/diractab.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/diractab.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dv_profile.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/dv_profile.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dv_profile.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/dv_profile.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dv_profile.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/dv_profile.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dv_profile.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/dv_profile.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dv_profile_internal.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/dv_profile_internal.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dv_profile_internal.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/dv_profile_internal.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dxva2.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/dxva2.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/dxva2.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/dxva2.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/encode.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/encode.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/encode.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/encode.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/error_resilience.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/error_resilience.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/error_resilience.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/error_resilience.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/error_resilience.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/error_resilience.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/error_resilience.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/error_resilience.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fdctdsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/fdctdsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fdctdsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/fdctdsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft-internal.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft-internal.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft-internal.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft-internal.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft_fixed.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft_fixed.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft_fixed.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft_fixed.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft_fixed_32.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft_fixed_32.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft_fixed_32.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft_fixed_32.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft_float.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft_float.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft_float.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft_float.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft_init_table.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft_init_table.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft_init_table.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft_init_table.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft_table.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft_table.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft_table.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft_table.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft_template.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/fft_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/fft_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/frame_thread_encoder.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/frame_thread_encoder.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/frame_thread_encoder.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/frame_thread_encoder.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/frame_thread_encoder.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/frame_thread_encoder.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/frame_thread_encoder.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/frame_thread_encoder.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/get_bits.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/get_bits.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/get_bits.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/get_bits.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/golomb.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/golomb.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/golomb.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/golomb.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/golomb.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/golomb.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/golomb.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/golomb.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/h263dsp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/h263dsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/h263dsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/h263dsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/h263dsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/h263dsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/h263dsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/h263dsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/h264chroma.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/h264chroma.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/h264chroma.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/h264chroma.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/h264chroma.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/h264chroma.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/h264chroma.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/h264chroma.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/hpeldsp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/hpeldsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/hpeldsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/hpeldsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/hpeldsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/hpeldsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/hpeldsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/hpeldsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/hwaccel.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/hwaccel.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/hwaccel.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/hwaccel.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/hwaccels.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/hwaccels.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/hwaccels.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/hwaccels.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/idctdsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/idctdsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/idctdsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/idctdsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/iirfilter.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/iirfilter.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/iirfilter.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/iirfilter.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/iirfilter.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/iirfilter.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/iirfilter.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/iirfilter.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/imgconvert.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/imgconvert.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/imgconvert.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/imgconvert.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/internal.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/internal.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/internal.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/internal.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/jni.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/jni.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/jni.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/jni.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/jni.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/jni.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/jni.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/jni.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/kbdwin.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/kbdwin.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/kbdwin.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/kbdwin.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/kbdwin.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/kbdwin.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/kbdwin.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/kbdwin.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/latm_parser.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/latm_parser.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/latm_parser.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/latm_parser.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/libopus.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/libopus.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/libopus.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/libopus.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/libopus.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/libopus.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/libopus.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/libopus.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/libopusdec.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/libopusdec.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/libopusdec.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/libopusdec.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/libopusenc.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/libopusenc.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/libopusenc.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/libopusenc.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/lpc.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/lpc.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/lpc.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/lpc.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/lpc.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/lpc.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/lpc.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/lpc.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mathops.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mathops.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mathops.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mathops.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mathtables.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mathtables.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mathtables.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mathtables.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mdct15.asm b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mdct15.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mdct15.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mdct15.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mdct15.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mdct15.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mdct15.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mdct15.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mdct15.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mdct15.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mdct15.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mdct15.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mdct15_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mdct15_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mdct15_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mdct15_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mdct_fixed.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mdct_fixed.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mdct_fixed.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mdct_fixed.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mdct_fixed_32.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mdct_fixed_32.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mdct_fixed_32.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mdct_fixed_32.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mdct_float.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mdct_float.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mdct_float.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mdct_float.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mdct_template.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mdct_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mdct_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mdct_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/me_cmp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/me_cmp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/me_cmp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/me_cmp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/me_cmp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/me_cmp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/me_cmp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/me_cmp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mediacodec.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mediacodec.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mediacodec.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mediacodec.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mediacodec.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mediacodec.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mediacodec.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mediacodec.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mediacodec_surface.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mediacodec_surface.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mediacodec_surface.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mediacodec_surface.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mediacodec_sw_buffer.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mediacodec_sw_buffer.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mediacodec_sw_buffer.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mediacodec_sw_buffer.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mediacodec_wrapper.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mediacodec_wrapper.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mediacodec_wrapper.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mediacodec_wrapper.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mediacodecdec_common.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mediacodecdec_common.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mediacodecdec_common.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mediacodecdec_common.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mjpegenc.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mjpegenc.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mjpegenc.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mjpegenc.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mjpegenc_common.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mjpegenc_common.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mjpegenc_common.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mjpegenc_common.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mjpegenc_huffman.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mjpegenc_huffman.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mjpegenc_huffman.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mjpegenc_huffman.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mjpegenc_huffman.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mjpegenc_huffman.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mjpegenc_huffman.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mjpegenc_huffman.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/motion_est.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/motion_est.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/motion_est.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/motion_est.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/motion_est.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/motion_est.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/motion_est.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/motion_est.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpeg12.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpeg12.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpeg12.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpeg12.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpeg12.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpeg12.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpeg12.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpeg12.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpeg12data.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpeg12data.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpeg12data.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpeg12data.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpeg12data.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpeg12data.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpeg12data.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpeg12data.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpeg12framerate.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpeg12framerate.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpeg12framerate.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpeg12framerate.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpeg12vlc.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpeg12vlc.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpeg12vlc.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpeg12vlc.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpeg4audio.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpeg4audio.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpeg4audio.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpeg4audio.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpeg4audio.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpeg4audio.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpeg4audio.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpeg4audio.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegpicture.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegpicture.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegpicture.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegpicture.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegpicture.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegpicture.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegpicture.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegpicture.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegutils.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegutils.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegutils.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegutils.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegutils.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegutils.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegutils.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegutils.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegvideo.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegvideo.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegvideo.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegvideo.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegvideo.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegvideo.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegvideo.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegvideo.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegvideodata.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegvideodata.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegvideodata.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegvideodata.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegvideodata.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegvideodata.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegvideodata.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegvideodata.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegvideodsp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegvideodsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegvideodsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegvideodsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegvideodsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegvideodsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegvideodsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegvideodsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegvideoencdsp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegvideoencdsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegvideoencdsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegvideoencdsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegvideoencdsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegvideoencdsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/mpegvideoencdsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/mpegvideoencdsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/null_bsf.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/null_bsf.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/null_bsf.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/null_bsf.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/options.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/options.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/options.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/options.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/options_table.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/options_table.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/options_table.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/options_table.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opus.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opus.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opus.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opus.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opus.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opus.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opus.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opus.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opus_celt.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opus_celt.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opus_celt.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opus_celt.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opus_celt.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opus_celt.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opus_celt.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opus_celt.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opus_pvq.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opus_pvq.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opus_pvq.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opus_pvq.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opus_pvq.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opus_pvq.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opus_pvq.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opus_pvq.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opus_rc.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opus_rc.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opus_rc.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opus_rc.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opus_rc.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opus_rc.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opus_rc.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opus_rc.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opusdsp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opusdsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opusdsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opusdsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opusdsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opusdsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opusdsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opusdsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opusenc.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opusenc.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opusenc.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opusenc.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opusenc.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opusenc.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opusenc.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opusenc.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opusenc_psy.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opusenc_psy.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opusenc_psy.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opusenc_psy.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opusenc_psy.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opusenc_psy.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opusenc_psy.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opusenc_psy.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opusenc_utils.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opusenc_utils.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opusenc_utils.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opusenc_utils.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opustab.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opustab.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opustab.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opustab.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opustab.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/opustab.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/opustab.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/opustab.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/parser.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/parser.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/parser.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/parser.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/parser.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/parser.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/parser.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/parser.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/parser_list.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/parser_list.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/parser_list.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/parser_list.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/parsers.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/parsers.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/parsers.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/parsers.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/pixblockdsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/pixblockdsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/pixblockdsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/pixblockdsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/profiles.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/profiles.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/profiles.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/profiles.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/profiles.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/profiles.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/profiles.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/profiles.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/psymodel.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/psymodel.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/psymodel.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/psymodel.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/psymodel.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/psymodel.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/psymodel.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/psymodel.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/pthread.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/pthread.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/pthread.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/pthread.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/pthread_frame.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/pthread_frame.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/pthread_frame.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/pthread_frame.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/pthread_internal.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/pthread_internal.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/pthread_internal.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/pthread_internal.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/pthread_slice.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/pthread_slice.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/pthread_slice.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/pthread_slice.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/put_bits.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/put_bits.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/put_bits.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/put_bits.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/qpeldsp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/qpeldsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/qpeldsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/qpeldsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/qpeldsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/qpeldsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/qpeldsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/qpeldsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/qsv.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/qsv.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/qsv.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/qsv.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/qsv_api.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/qsv_api.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/qsv_api.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/qsv_api.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ratecontrol.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ratecontrol.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ratecontrol.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ratecontrol.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ratecontrol.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/ratecontrol.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/ratecontrol.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/ratecontrol.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/raw.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/raw.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/raw.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/raw.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/raw.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/raw.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/raw.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/raw.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/rdft.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/rdft.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/rdft.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/rdft.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/rl.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/rl.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/rl.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/rl.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/rl.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/rl.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/rl.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/rl.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/rle.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/rle.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/rle.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/rle.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sbr.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/sbr.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sbr.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/sbr.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sbrdsp.asm b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/sbrdsp.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sbrdsp.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/sbrdsp.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sbrdsp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/sbrdsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sbrdsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/sbrdsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sbrdsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/sbrdsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sbrdsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/sbrdsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sbrdsp_fixed.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/sbrdsp_fixed.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sbrdsp_fixed.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/sbrdsp_fixed.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sbrdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/sbrdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sbrdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/sbrdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sbrdsp_template.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/sbrdsp_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sbrdsp_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/sbrdsp_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sinewin.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/sinewin.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sinewin.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/sinewin.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sinewin.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/sinewin.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sinewin.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/sinewin.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sinewin_fixed.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/sinewin_fixed.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sinewin_fixed.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/sinewin_fixed.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sinewin_tablegen.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/sinewin_tablegen.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sinewin_tablegen.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/sinewin_tablegen.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sinewin_tablegen.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/sinewin_tablegen.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/sinewin_tablegen.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/sinewin_tablegen.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/thread.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/thread.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/thread.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/thread.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/utils.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/utils.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/utils.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/utils.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/v4l2_buffers.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/v4l2_buffers.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/v4l2_buffers.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/v4l2_buffers.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/v4l2_buffers.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/v4l2_buffers.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/v4l2_buffers.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/v4l2_buffers.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/v4l2_context.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/v4l2_context.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/v4l2_context.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/v4l2_context.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/v4l2_context.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/v4l2_context.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/v4l2_context.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/v4l2_context.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/v4l2_fmt.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/v4l2_fmt.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/v4l2_fmt.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/v4l2_fmt.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/v4l2_fmt.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/v4l2_fmt.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/v4l2_fmt.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/v4l2_fmt.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/v4l2_m2m.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/v4l2_m2m.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/v4l2_m2m.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/v4l2_m2m.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/v4l2_m2m.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/v4l2_m2m.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/v4l2_m2m.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/v4l2_m2m.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vaapi.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/vaapi.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vaapi.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/vaapi.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vdpau.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/vdpau.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vdpau.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/vdpau.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/version.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/version.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/version.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/version.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/videodsp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/videodsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/videodsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/videodsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/videodsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/videodsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/videodsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/videodsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/videotoolbox.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/videotoolbox.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/videotoolbox.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/videotoolbox.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vlc.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/vlc.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vlc.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/vlc.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vorbis.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/vorbis.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vorbis.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/vorbis.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vorbis.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/vorbis.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vorbis.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/vorbis.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vorbis_data.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/vorbis_data.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vorbis_data.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/vorbis_data.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vorbis_enc_data.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/vorbis_enc_data.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vorbis_enc_data.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/vorbis_enc_data.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vorbis_parser.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/vorbis_parser.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vorbis_parser.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/vorbis_parser.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vorbis_parser.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/vorbis_parser.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vorbis_parser.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/vorbis_parser.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vorbis_parser_internal.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/vorbis_parser_internal.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vorbis_parser_internal.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/vorbis_parser_internal.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vorbisdsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/vorbisdsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/vorbisdsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/vorbisdsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/Makefile b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/Makefile
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/Makefile
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/Makefile
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/aacencdsp.asm b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/aacencdsp.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/aacencdsp.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/aacencdsp.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/aacencdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/aacencdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/aacencdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/aacencdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/aacpsdsp.asm b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/aacpsdsp.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/aacpsdsp.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/aacpsdsp.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/aacpsdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/aacpsdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/aacpsdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/aacpsdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/ac3dsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/ac3dsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/ac3dsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/ac3dsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/alacdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/alacdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/alacdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/alacdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/audiodsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/audiodsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/audiodsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/audiodsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/blockdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/blockdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/blockdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/blockdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/bswapdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/bswapdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/bswapdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/bswapdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/cabac.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/cabac.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/cabac.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/cabac.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/cavsdsp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/cavsdsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/cavsdsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/cavsdsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/celt_pvq_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/celt_pvq_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/celt_pvq_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/celt_pvq_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/celt_pvq_search.asm b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/celt_pvq_search.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/celt_pvq_search.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/celt_pvq_search.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/constants.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/constants.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/constants.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/constants.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/constants.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/constants.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/constants.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/constants.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/dcadsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/dcadsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/dcadsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/dcadsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/dct_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/dct_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/dct_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/dct_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/dirac_dwt_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/dirac_dwt_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/dirac_dwt_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/dirac_dwt_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/diracdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/diracdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/diracdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/diracdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/dnxhdenc_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/dnxhdenc_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/dnxhdenc_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/dnxhdenc_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/exrdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/exrdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/exrdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/exrdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/fdct.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/fdct.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/fdct.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/fdct.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/fdct.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/fdct.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/fdct.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/fdct.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/fdctdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/fdctdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/fdctdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/fdctdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/fft.asm b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/fft.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/fft.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/fft.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/fft.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/fft.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/fft.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/fft.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/fft_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/fft_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/fft_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/fft_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/flacdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/flacdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/flacdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/flacdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/fmtconvert_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/fmtconvert_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/fmtconvert_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/fmtconvert_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/fpel.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/fpel.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/fpel.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/fpel.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/g722dsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/g722dsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/g722dsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/g722dsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/h263dsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/h263dsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/h263dsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/h263dsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/h264_cabac.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/h264_cabac.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/h264_cabac.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/h264_cabac.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/h264_intrapred_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/h264_intrapred_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/h264_intrapred_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/h264_intrapred_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/h264_qpel.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/h264_qpel.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/h264_qpel.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/h264_qpel.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/h264chroma_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/h264chroma_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/h264chroma_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/h264chroma_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/h264dsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/h264dsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/h264dsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/h264dsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/hevcdsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/hevcdsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/hevcdsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/hevcdsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/hevcdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/hevcdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/hevcdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/hevcdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/hpeldsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/hpeldsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/hpeldsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/hpeldsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/hpeldsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/hpeldsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/hpeldsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/hpeldsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/hpeldsp_rnd_template.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/hpeldsp_rnd_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/hpeldsp_rnd_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/hpeldsp_rnd_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/hpeldsp_vp3_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/hpeldsp_vp3_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/hpeldsp_vp3_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/hpeldsp_vp3_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/huffyuvdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/huffyuvdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/huffyuvdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/huffyuvdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/huffyuvencdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/huffyuvencdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/huffyuvencdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/huffyuvencdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/idctdsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/idctdsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/idctdsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/idctdsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/idctdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/idctdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/idctdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/idctdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/inline_asm.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/inline_asm.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/inline_asm.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/inline_asm.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/jpeg2000dsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/jpeg2000dsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/jpeg2000dsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/jpeg2000dsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/lossless_audiodsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/lossless_audiodsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/lossless_audiodsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/lossless_audiodsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/lossless_videodsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/lossless_videodsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/lossless_videodsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/lossless_videodsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/lossless_videoencdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/lossless_videoencdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/lossless_videoencdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/lossless_videoencdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/lpc.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/lpc.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/lpc.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/lpc.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mathops.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mathops.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mathops.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mathops.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mdct15.asm b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mdct15.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mdct15.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mdct15.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mdct15_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mdct15_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mdct15_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mdct15_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/me_cmp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/me_cmp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/me_cmp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/me_cmp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mlpdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mlpdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mlpdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mlpdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mpegaudiodsp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mpegaudiodsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mpegaudiodsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mpegaudiodsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mpegvideo.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mpegvideo.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mpegvideo.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mpegvideo.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mpegvideodsp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mpegvideodsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mpegvideodsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mpegvideodsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mpegvideoenc.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mpegvideoenc.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mpegvideoenc.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mpegvideoenc.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mpegvideoenc_qns_template.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mpegvideoenc_qns_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mpegvideoenc_qns_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mpegvideoenc_qns_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mpegvideoenc_template.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mpegvideoenc_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mpegvideoenc_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mpegvideoenc_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mpegvideoencdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mpegvideoencdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/mpegvideoencdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/mpegvideoencdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/opusdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/opusdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/opusdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/opusdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/pixblockdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/pixblockdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/pixblockdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/pixblockdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/pngdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/pngdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/pngdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/pngdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/proresdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/proresdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/proresdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/proresdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/qpeldsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/qpeldsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/qpeldsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/qpeldsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/rnd_template.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/rnd_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/rnd_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/rnd_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/rv34dsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/rv34dsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/rv34dsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/rv34dsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/rv40dsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/rv40dsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/rv40dsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/rv40dsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/sbcdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/sbcdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/sbcdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/sbcdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/sbrdsp.asm b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/sbrdsp.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/sbrdsp.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/sbrdsp.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/sbrdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/sbrdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/sbrdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/sbrdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/simple_idct.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/simple_idct.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/simple_idct.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/simple_idct.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/snowdsp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/snowdsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/snowdsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/snowdsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/svq1enc_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/svq1enc_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/svq1enc_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/svq1enc_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/synth_filter_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/synth_filter_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/synth_filter_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/synth_filter_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/takdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/takdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/takdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/takdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/ttadsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/ttadsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/ttadsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/ttadsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/ttaencdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/ttaencdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/ttaencdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/ttaencdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/utvideodsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/utvideodsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/utvideodsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/utvideodsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/v210-init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/v210-init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/v210-init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/v210-init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/v210enc_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/v210enc_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/v210enc_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/v210enc_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vc1dsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vc1dsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vc1dsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vc1dsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vc1dsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vc1dsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vc1dsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vc1dsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vc1dsp_mmx.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vc1dsp_mmx.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vc1dsp_mmx.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vc1dsp_mmx.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/videodsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/videodsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/videodsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/videodsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vorbisdsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vorbisdsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vorbisdsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vorbisdsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp3dsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp3dsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp3dsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp3dsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp56_arith.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp56_arith.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp56_arith.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp56_arith.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp6dsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp6dsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp6dsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp6dsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp8dsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp8dsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp8dsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp8dsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp9dsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp9dsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp9dsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp9dsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp9dsp_init.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp9dsp_init.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp9dsp_init.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp9dsp_init.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp9dsp_init_10bpp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp9dsp_init_10bpp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp9dsp_init_10bpp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp9dsp_init_10bpp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp9dsp_init_12bpp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp9dsp_init_12bpp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp9dsp_init_12bpp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp9dsp_init_12bpp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp9dsp_init_16bpp.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp9dsp_init_16bpp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp9dsp_init_16bpp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp9dsp_init_16bpp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp9dsp_init_16bpp_template.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp9dsp_init_16bpp_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/vp9dsp_init_16bpp_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/vp9dsp_init_16bpp_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/xvididct.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/xvididct.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/xvididct.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/xvididct.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/xvididct_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/xvididct_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/x86/xvididct_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/x86/xvididct_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/xiph.c b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/xiph.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/xiph.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/xiph.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/xiph.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/xiph.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/xiph.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/xiph.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/xvmc.h b/trunk/3rdparty/ffmpeg-4-fit/libavcodec/xvmc.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavcodec/xvmc.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavcodec/xvmc.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavdevice/alldevices.c b/trunk/3rdparty/ffmpeg-4-fit/libavdevice/alldevices.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavdevice/alldevices.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavdevice/alldevices.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavdevice/indev_list.c b/trunk/3rdparty/ffmpeg-4-fit/libavdevice/indev_list.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavdevice/indev_list.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavdevice/indev_list.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavdevice/outdev_list.c b/trunk/3rdparty/ffmpeg-4-fit/libavdevice/outdev_list.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavdevice/outdev_list.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavdevice/outdev_list.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavfilter/allfilters.c b/trunk/3rdparty/ffmpeg-4-fit/libavfilter/allfilters.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavfilter/allfilters.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavfilter/allfilters.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavfilter/avfilter.h b/trunk/3rdparty/ffmpeg-4-fit/libavfilter/avfilter.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavfilter/avfilter.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavfilter/avfilter.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavfilter/bufferqueue.h b/trunk/3rdparty/ffmpeg-4-fit/libavfilter/bufferqueue.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavfilter/bufferqueue.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavfilter/bufferqueue.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavfilter/filter_list.c b/trunk/3rdparty/ffmpeg-4-fit/libavfilter/filter_list.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavfilter/filter_list.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavfilter/filter_list.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavfilter/version.h b/trunk/3rdparty/ffmpeg-4-fit/libavfilter/version.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavfilter/version.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavfilter/version.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavfilter/window_func.h b/trunk/3rdparty/ffmpeg-4-fit/libavfilter/window_func.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavfilter/window_func.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavfilter/window_func.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavformat/allformats.c b/trunk/3rdparty/ffmpeg-4-fit/libavformat/allformats.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavformat/allformats.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavformat/allformats.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavformat/demuxer_list.c b/trunk/3rdparty/ffmpeg-4-fit/libavformat/demuxer_list.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavformat/demuxer_list.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavformat/demuxer_list.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavformat/muxer_list.c b/trunk/3rdparty/ffmpeg-4-fit/libavformat/muxer_list.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavformat/muxer_list.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavformat/muxer_list.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavformat/protocol_list.c b/trunk/3rdparty/ffmpeg-4-fit/libavformat/protocol_list.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavformat/protocol_list.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavformat/protocol_list.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavformat/protocols.c b/trunk/3rdparty/ffmpeg-4-fit/libavformat/protocols.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavformat/protocols.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavformat/protocols.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/Makefile b/trunk/3rdparty/ffmpeg-4-fit/libavutil/Makefile
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/Makefile
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/Makefile
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aarch64/Makefile b/trunk/3rdparty/ffmpeg-4-fit/libavutil/aarch64/Makefile
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aarch64/Makefile
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/aarch64/Makefile
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aarch64/bswap.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/aarch64/bswap.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aarch64/bswap.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/aarch64/bswap.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aarch64/cpu.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/aarch64/cpu.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aarch64/cpu.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/aarch64/cpu.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aarch64/cpu.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/aarch64/cpu.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aarch64/cpu.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/aarch64/cpu.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aarch64/float_dsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/aarch64/float_dsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aarch64/float_dsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/aarch64/float_dsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aarch64/neontest.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/aarch64/neontest.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aarch64/neontest.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/aarch64/neontest.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aarch64/timer.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/aarch64/timer.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aarch64/timer.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/aarch64/timer.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/adler32.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/adler32.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/adler32.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/adler32.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/adler32.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/adler32.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/adler32.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/adler32.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aes.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/aes.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aes.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/aes.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aes.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/aes.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aes.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/aes.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aes_ctr.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/aes_ctr.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aes_ctr.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/aes_ctr.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aes_ctr.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/aes_ctr.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aes_ctr.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/aes_ctr.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aes_internal.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/aes_internal.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/aes_internal.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/aes_internal.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/Makefile b/trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/Makefile
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/Makefile
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/Makefile
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/bswap.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/bswap.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/bswap.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/bswap.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/cpu.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/cpu.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/cpu.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/cpu.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/cpu.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/cpu.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/cpu.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/cpu.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/float_dsp_arm.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/float_dsp_arm.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/float_dsp_arm.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/float_dsp_arm.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/float_dsp_init_arm.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/float_dsp_init_arm.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/float_dsp_init_arm.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/float_dsp_init_arm.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/float_dsp_init_neon.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/float_dsp_init_neon.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/float_dsp_init_neon.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/float_dsp_init_neon.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/float_dsp_init_vfp.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/float_dsp_init_vfp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/float_dsp_init_vfp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/float_dsp_init_vfp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/intmath.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/intmath.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/intmath.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/intmath.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/intreadwrite.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/intreadwrite.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/intreadwrite.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/intreadwrite.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/neontest.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/neontest.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/neontest.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/neontest.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/timer.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/timer.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/arm/timer.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/arm/timer.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/attributes.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/attributes.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/attributes.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/attributes.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/audio_fifo.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/audio_fifo.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/audio_fifo.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/audio_fifo.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/audio_fifo.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/audio_fifo.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/audio_fifo.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/audio_fifo.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/avassert.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/avassert.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/avassert.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/avassert.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/avsscanf.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/avsscanf.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/avsscanf.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/avsscanf.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/avstring.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/avstring.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/avstring.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/avstring.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/avstring.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/avstring.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/avstring.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/avstring.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/avutil.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/avutil.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/avutil.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/avutil.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/avutilres.rc b/trunk/3rdparty/ffmpeg-4-fit/libavutil/avutilres.rc
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/avutilres.rc
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/avutilres.rc
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/base64.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/base64.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/base64.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/base64.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/base64.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/base64.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/base64.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/base64.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/blowfish.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/blowfish.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/blowfish.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/blowfish.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/blowfish.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/blowfish.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/blowfish.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/blowfish.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/bprint.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/bprint.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/bprint.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/bprint.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/bprint.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/bprint.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/bprint.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/bprint.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/bswap.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/bswap.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/bswap.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/bswap.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/buffer.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/buffer.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/buffer.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/buffer.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/buffer.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/buffer.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/buffer.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/buffer.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/buffer_internal.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/buffer_internal.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/buffer_internal.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/buffer_internal.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/camellia.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/camellia.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/camellia.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/camellia.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/camellia.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/camellia.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/camellia.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/camellia.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/cast5.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/cast5.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/cast5.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/cast5.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/cast5.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/cast5.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/cast5.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/cast5.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/channel_layout.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/channel_layout.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/channel_layout.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/channel_layout.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/channel_layout.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/channel_layout.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/channel_layout.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/channel_layout.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/color_utils.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/color_utils.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/color_utils.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/color_utils.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/color_utils.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/color_utils.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/color_utils.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/color_utils.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/colorspace.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/colorspace.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/colorspace.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/colorspace.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/common.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/common.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/common.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/common.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/cpu.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/cpu.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/cpu.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/cpu.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/cpu.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/cpu.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/cpu.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/cpu.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/cpu_internal.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/cpu_internal.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/cpu_internal.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/cpu_internal.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/crc.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/crc.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/crc.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/crc.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/crc.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/crc.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/crc.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/crc.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/des.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/des.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/des.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/des.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/des.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/des.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/des.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/des.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/dict.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/dict.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/dict.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/dict.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/dict.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/dict.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/dict.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/dict.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/display.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/display.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/display.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/display.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/display.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/display.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/display.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/display.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/downmix_info.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/downmix_info.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/downmix_info.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/downmix_info.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/downmix_info.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/downmix_info.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/downmix_info.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/downmix_info.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/dynarray.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/dynarray.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/dynarray.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/dynarray.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/encryption_info.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/encryption_info.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/encryption_info.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/encryption_info.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/encryption_info.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/encryption_info.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/encryption_info.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/encryption_info.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/error.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/error.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/error.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/error.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/error.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/error.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/error.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/error.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/eval.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/eval.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/eval.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/eval.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/eval.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/eval.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/eval.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/eval.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/ffmath.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/ffmath.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/ffmath.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/ffmath.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/fifo.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/fifo.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/fifo.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/fifo.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/fifo.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/fifo.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/fifo.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/fifo.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/file.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/file.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/file.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/file.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/file.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/file.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/file.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/file.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/file_open.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/file_open.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/file_open.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/file_open.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/fixed_dsp.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/fixed_dsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/fixed_dsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/fixed_dsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/fixed_dsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/fixed_dsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/fixed_dsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/fixed_dsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/float_dsp.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/float_dsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/float_dsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/float_dsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/float_dsp.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/float_dsp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/float_dsp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/float_dsp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/frame.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/frame.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/frame.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/frame.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/frame.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/frame.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/frame.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/frame.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hash.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hash.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hash.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hash.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hash.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hash.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hash.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hash.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hdr_dynamic_metadata.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hdr_dynamic_metadata.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hdr_dynamic_metadata.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hdr_dynamic_metadata.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hdr_dynamic_metadata.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hdr_dynamic_metadata.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hdr_dynamic_metadata.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hdr_dynamic_metadata.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hmac.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hmac.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hmac.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hmac.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hmac.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hmac.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hmac.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hmac.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_cuda.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_cuda.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_cuda.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_cuda.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_cuda.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_cuda.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_cuda.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_cuda.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_cuda_internal.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_cuda_internal.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_cuda_internal.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_cuda_internal.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_d3d11va.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_d3d11va.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_d3d11va.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_d3d11va.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_d3d11va.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_d3d11va.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_d3d11va.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_d3d11va.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_drm.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_drm.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_drm.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_drm.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_drm.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_drm.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_drm.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_drm.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_dxva2.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_dxva2.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_dxva2.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_dxva2.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_dxva2.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_dxva2.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_dxva2.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_dxva2.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_internal.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_internal.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_internal.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_internal.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_mediacodec.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_mediacodec.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_mediacodec.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_mediacodec.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_mediacodec.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_mediacodec.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_mediacodec.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_mediacodec.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_opencl.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_opencl.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_opencl.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_opencl.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_opencl.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_opencl.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_opencl.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_opencl.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_qsv.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_qsv.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_qsv.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_qsv.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_qsv.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_qsv.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_qsv.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_qsv.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_vaapi.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_vaapi.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_vaapi.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_vaapi.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_vaapi.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_vaapi.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_vaapi.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_vaapi.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_vdpau.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_vdpau.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_vdpau.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_vdpau.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_vdpau.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_vdpau.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_vdpau.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_vdpau.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_videotoolbox.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_videotoolbox.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_videotoolbox.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_videotoolbox.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_videotoolbox.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_videotoolbox.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/hwcontext_videotoolbox.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/hwcontext_videotoolbox.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/imgutils.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/imgutils.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/imgutils.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/imgutils.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/imgutils.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/imgutils.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/imgutils.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/imgutils.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/imgutils_internal.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/imgutils_internal.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/imgutils_internal.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/imgutils_internal.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/integer.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/integer.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/integer.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/integer.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/integer.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/integer.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/integer.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/integer.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/internal.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/internal.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/internal.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/internal.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/intfloat.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/intfloat.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/intfloat.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/intfloat.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/intmath.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/intmath.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/intmath.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/intmath.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/intmath.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/intmath.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/intmath.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/intmath.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/intreadwrite.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/intreadwrite.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/intreadwrite.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/intreadwrite.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/lfg.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/lfg.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/lfg.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/lfg.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/lfg.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/lfg.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/lfg.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/lfg.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/libm.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/libm.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/libm.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/libm.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/lls.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/lls.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/lls.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/lls.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/lls.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/lls.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/lls.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/lls.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/log.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/log.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/log.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/log.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/log.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/log.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/log.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/log.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/log2_tab.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/log2_tab.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/log2_tab.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/log2_tab.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/macros.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/macros.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/macros.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/macros.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/mastering_display_metadata.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/mastering_display_metadata.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/mastering_display_metadata.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/mastering_display_metadata.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/mastering_display_metadata.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/mastering_display_metadata.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/mastering_display_metadata.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/mastering_display_metadata.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/mathematics.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/mathematics.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/mathematics.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/mathematics.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/mathematics.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/mathematics.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/mathematics.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/mathematics.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/md5.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/md5.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/md5.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/md5.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/md5.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/md5.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/md5.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/md5.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/mem.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/mem.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/mem.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/mem.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/mem.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/mem.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/mem.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/mem.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/mem_internal.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/mem_internal.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/mem_internal.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/mem_internal.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/motion_vector.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/motion_vector.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/motion_vector.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/motion_vector.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/murmur3.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/murmur3.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/murmur3.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/murmur3.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/murmur3.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/murmur3.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/murmur3.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/murmur3.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/opt.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/opt.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/opt.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/opt.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/opt.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/opt.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/opt.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/opt.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/parseutils.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/parseutils.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/parseutils.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/parseutils.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/parseutils.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/parseutils.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/parseutils.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/parseutils.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/pixdesc.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/pixdesc.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/pixdesc.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/pixdesc.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/pixdesc.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/pixdesc.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/pixdesc.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/pixdesc.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/pixelutils.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/pixelutils.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/pixelutils.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/pixelutils.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/pixelutils.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/pixelutils.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/pixelutils.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/pixelutils.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/pixfmt.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/pixfmt.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/pixfmt.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/pixfmt.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/qsort.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/qsort.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/qsort.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/qsort.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/random_seed.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/random_seed.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/random_seed.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/random_seed.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/random_seed.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/random_seed.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/random_seed.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/random_seed.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/rational.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/rational.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/rational.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/rational.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/rational.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/rational.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/rational.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/rational.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/rc4.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/rc4.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/rc4.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/rc4.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/rc4.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/rc4.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/rc4.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/rc4.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/replaygain.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/replaygain.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/replaygain.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/replaygain.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/reverse.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/reverse.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/reverse.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/reverse.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/reverse.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/reverse.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/reverse.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/reverse.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/ripemd.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/ripemd.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/ripemd.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/ripemd.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/ripemd.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/ripemd.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/ripemd.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/ripemd.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/samplefmt.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/samplefmt.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/samplefmt.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/samplefmt.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/samplefmt.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/samplefmt.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/samplefmt.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/samplefmt.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/sha.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/sha.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/sha.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/sha.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/sha.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/sha.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/sha.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/sha.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/sha512.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/sha512.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/sha512.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/sha512.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/sha512.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/sha512.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/sha512.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/sha512.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/slicethread.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/slicethread.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/slicethread.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/slicethread.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/slicethread.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/slicethread.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/slicethread.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/slicethread.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/softfloat.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/softfloat.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/softfloat.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/softfloat.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/softfloat_ieee754.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/softfloat_ieee754.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/softfloat_ieee754.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/softfloat_ieee754.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/softfloat_tables.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/softfloat_tables.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/softfloat_tables.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/softfloat_tables.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/spherical.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/spherical.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/spherical.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/spherical.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/spherical.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/spherical.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/spherical.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/spherical.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/stereo3d.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/stereo3d.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/stereo3d.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/stereo3d.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/stereo3d.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/stereo3d.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/stereo3d.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/stereo3d.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/tea.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/tea.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/tea.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/tea.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/tea.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/tea.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/tea.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/tea.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/thread.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/thread.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/thread.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/thread.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/threadmessage.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/threadmessage.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/threadmessage.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/threadmessage.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/threadmessage.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/threadmessage.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/threadmessage.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/threadmessage.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/time.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/time.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/time.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/time.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/time.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/time.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/time.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/time.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/time_internal.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/time_internal.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/time_internal.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/time_internal.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/timecode.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/timecode.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/timecode.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/timecode.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/timecode.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/timecode.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/timecode.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/timecode.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/timer.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/timer.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/timer.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/timer.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/timestamp.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/timestamp.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/timestamp.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/timestamp.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/tree.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/tree.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/tree.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/tree.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/tree.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/tree.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/tree.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/tree.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/twofish.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/twofish.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/twofish.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/twofish.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/twofish.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/twofish.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/twofish.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/twofish.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/tx.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/tx.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/tx.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/tx.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/tx.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/tx.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/tx.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/tx.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/utils.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/utils.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/utils.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/utils.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/version.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/version.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/version.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/version.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/Makefile b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/Makefile
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/Makefile
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/Makefile
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/asm.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/asm.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/asm.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/asm.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/bswap.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/bswap.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/bswap.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/bswap.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/cpu.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/cpu.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/cpu.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/cpu.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/cpu.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/cpu.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/cpu.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/cpu.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/cpuid.asm b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/cpuid.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/cpuid.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/cpuid.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/emms.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/emms.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/emms.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/emms.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/fixed_dsp.asm b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/fixed_dsp.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/fixed_dsp.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/fixed_dsp.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/fixed_dsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/fixed_dsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/fixed_dsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/fixed_dsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/float_dsp.asm b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/float_dsp.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/float_dsp.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/float_dsp.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/float_dsp_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/float_dsp_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/float_dsp_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/float_dsp_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/imgutils.asm b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/imgutils.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/imgutils.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/imgutils.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/imgutils_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/imgutils_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/imgutils_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/imgutils_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/intmath.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/intmath.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/intmath.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/intmath.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/intreadwrite.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/intreadwrite.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/intreadwrite.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/intreadwrite.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/lls.asm b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/lls.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/lls.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/lls.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/lls_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/lls_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/lls_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/lls_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/pixelutils.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/pixelutils.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/pixelutils.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/pixelutils.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/pixelutils_init.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/pixelutils_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/pixelutils_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/pixelutils_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/timer.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/timer.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/timer.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/timer.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/w64xmmtest.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/w64xmmtest.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/w64xmmtest.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/w64xmmtest.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/x86inc.asm b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/x86inc.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/x86inc.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/x86inc.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/x86util.asm b/trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/x86util.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/x86/x86util.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/x86/x86util.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/xga_font_data.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/xga_font_data.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/xga_font_data.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/xga_font_data.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/xga_font_data.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/xga_font_data.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/xga_font_data.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/xga_font_data.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/xtea.c b/trunk/3rdparty/ffmpeg-4-fit/libavutil/xtea.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/xtea.c
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/xtea.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libavutil/xtea.h b/trunk/3rdparty/ffmpeg-4-fit/libavutil/xtea.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libavutil/xtea.h
rename to trunk/3rdparty/ffmpeg-4-fit/libavutil/xtea.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/Makefile b/trunk/3rdparty/ffmpeg-4-fit/libswresample/Makefile
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/Makefile
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/Makefile
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/aarch64/Makefile b/trunk/3rdparty/ffmpeg-4-fit/libswresample/aarch64/Makefile
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/aarch64/Makefile
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/aarch64/Makefile
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/aarch64/audio_convert_init.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/aarch64/audio_convert_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/aarch64/audio_convert_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/aarch64/audio_convert_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/aarch64/resample_init.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/aarch64/resample_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/aarch64/resample_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/aarch64/resample_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/arm/Makefile b/trunk/3rdparty/ffmpeg-4-fit/libswresample/arm/Makefile
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/arm/Makefile
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/arm/Makefile
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/arm/audio_convert_init.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/arm/audio_convert_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/arm/audio_convert_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/arm/audio_convert_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/arm/resample_init.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/arm/resample_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/arm/resample_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/arm/resample_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/audioconvert.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/audioconvert.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/audioconvert.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/audioconvert.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/audioconvert.h b/trunk/3rdparty/ffmpeg-4-fit/libswresample/audioconvert.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/audioconvert.h
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/audioconvert.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/dither.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/dither.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/dither.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/dither.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/dither_template.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/dither_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/dither_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/dither_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/noise_shaping_data.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/noise_shaping_data.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/noise_shaping_data.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/noise_shaping_data.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/options.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/options.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/options.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/options.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/rematrix.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/rematrix.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/rematrix.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/rematrix.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/rematrix_template.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/rematrix_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/rematrix_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/rematrix_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/resample.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/resample.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/resample.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/resample.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/resample.h b/trunk/3rdparty/ffmpeg-4-fit/libswresample/resample.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/resample.h
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/resample.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/resample_dsp.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/resample_dsp.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/resample_dsp.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/resample_dsp.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/resample_template.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/resample_template.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/resample_template.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/resample_template.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/swresample.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/swresample.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/swresample.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/swresample.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/swresample.h b/trunk/3rdparty/ffmpeg-4-fit/libswresample/swresample.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/swresample.h
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/swresample.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/swresample_frame.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/swresample_frame.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/swresample_frame.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/swresample_frame.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/swresample_internal.h b/trunk/3rdparty/ffmpeg-4-fit/libswresample/swresample_internal.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/swresample_internal.h
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/swresample_internal.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/swresampleres.rc b/trunk/3rdparty/ffmpeg-4-fit/libswresample/swresampleres.rc
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/swresampleres.rc
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/swresampleres.rc
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/version.h b/trunk/3rdparty/ffmpeg-4-fit/libswresample/version.h
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/version.h
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/version.h
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/x86/Makefile b/trunk/3rdparty/ffmpeg-4-fit/libswresample/x86/Makefile
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/x86/Makefile
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/x86/Makefile
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/x86/audio_convert.asm b/trunk/3rdparty/ffmpeg-4-fit/libswresample/x86/audio_convert.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/x86/audio_convert.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/x86/audio_convert.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/x86/audio_convert_init.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/x86/audio_convert_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/x86/audio_convert_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/x86/audio_convert_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/x86/rematrix.asm b/trunk/3rdparty/ffmpeg-4-fit/libswresample/x86/rematrix.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/x86/rematrix.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/x86/rematrix.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/x86/rematrix_init.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/x86/rematrix_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/x86/rematrix_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/x86/rematrix_init.c
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/x86/resample.asm b/trunk/3rdparty/ffmpeg-4-fit/libswresample/x86/resample.asm
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/x86/resample.asm
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/x86/resample.asm
diff --git a/trunk/3rdparty/ffmpeg-4.2-fit/libswresample/x86/resample_init.c b/trunk/3rdparty/ffmpeg-4-fit/libswresample/x86/resample_init.c
similarity index 100%
rename from trunk/3rdparty/ffmpeg-4.2-fit/libswresample/x86/resample_init.c
rename to trunk/3rdparty/ffmpeg-4-fit/libswresample/x86/resample_init.c
diff --git a/trunk/auto/depends.sh b/trunk/auto/depends.sh
index 793a1b59d..23ec86081 100755
--- a/trunk/auto/depends.sh
+++ b/trunk/auto/depends.sh
@@ -572,9 +572,9 @@ if [[ $SRS_SRTP_ASM == YES ]]; then
 fi
 # Patched ST from https://github.com/ossrs/state-threads/tree/srs
 if [[ -f ${SRS_OBJS}/${SRS_PLATFORM}/libsrtp-2-fit/_release/lib/libsrtp2.a ]]; then
-    echo "The srtp2 is ok.";
+    echo "The libsrtp-2-fit is ok.";
 else
-    echo "Building srtp2.";
+    echo "Building libsrtp-2-fit.";
     (
         rm -rf ${SRS_OBJS}/srtp2 && cd ${SRS_OBJS}/${SRS_PLATFORM} &&
         rm -rf libsrtp-2-fit && cp -R ../../3rdparty/libsrtp-2-fit . && cd libsrtp-2-fit &&
@@ -584,11 +584,11 @@ else
     )
 fi
 # check status
-ret=$?; if [[ $ret -ne 0 ]]; then echo "Build srtp2 failed, ret=$ret"; exit $ret; fi
+ret=$?; if [[ $ret -ne 0 ]]; then echo "Build libsrtp-2-fit failed, ret=$ret"; exit $ret; fi
 # Always update the links.
 (cd ${SRS_OBJS}/${SRS_PLATFORM} && rm -rf srtp2 && ln -sf libsrtp-2-fit/_release srtp2)
 (cd ${SRS_OBJS} && rm -rf srtp2 && ln -sf ${SRS_PLATFORM}/libsrtp-2-fit/_release srtp2)
-if [ ! -f ${SRS_OBJS}/srtp2/lib/libsrtp2.a ]; then echo "Build srtp2 static lib failed."; exit -1; fi
+if [ ! -f ${SRS_OBJS}/srtp2/lib/libsrtp2.a ]; then echo "Build libsrtp-2-fit static lib failed."; exit -1; fi
 
 #####################################################################################
 # libopus, for WebRTC to transcode AAC with Opus.
@@ -628,14 +628,14 @@ if [[ $SRS_FFMPEG_FIT == YES ]]; then
         FFMPEG_OPTIONS="--disable-x86asm"
     fi
 
-    if [[ -f ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg-4.2-fit/_release/lib/libavcodec.a ]]; then
-        echo "The ffmpeg-4.2-fit is ok.";
+    if [[ -f ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg-4-fit/_release/lib/libavcodec.a ]]; then
+        echo "The ffmpeg-4-fit is ok.";
     else
-        echo "Building ffmpeg-4.2-fit.";
+        echo "Building ffmpeg-4-fit.";
         (
-            rm -rf ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg-4.2-fit && mkdir -p ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg-4.2-fit &&
+            rm -rf ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg-4-fit && mkdir -p ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg-4-fit &&
             # Create a hidden directory .src
-            cd ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg-4.2-fit && cp -R ../../../3rdparty/ffmpeg-4.2-fit/* . &&
+            cd ${SRS_OBJS}/${SRS_PLATFORM}/ffmpeg-4-fit && cp -R ../../../3rdparty/ffmpeg-4-fit/* . &&
             # For libopus and other codecs.
             ABS_OBJS=$(cd .. && pwd) &&
             # Build source code.
@@ -651,15 +651,15 @@ if [[ $SRS_FFMPEG_FIT == YES ]]; then
               --disable-lzma --disable-sdl2 --disable-everything --enable-decoder=aac --enable-decoder=aac_fixed --enable-decoder=aac_latm \
               --enable-decoder=libopus --enable-encoder=aac --enable-encoder=opus --enable-encoder=libopus --enable-libopus &&
             make ${SRS_JOBS} && make install &&
-            cd .. && rm -rf ffmpeg && ln -sf ffmpeg-4.2-fit/_release ffmpeg
+            cd .. && rm -rf ffmpeg && ln -sf ffmpeg-4-fit/_release ffmpeg
         )
     fi
     # check status
-    ret=$?; if [[ $ret -ne 0 ]]; then echo "Build ffmpeg-4.2-fit failed, ret=$ret"; exit $ret; fi
+    ret=$?; if [[ $ret -ne 0 ]]; then echo "Build ffmpeg-4-fit failed, ret=$ret"; exit $ret; fi
     # Always update the links.
-    (cd ${SRS_OBJS}/${SRS_PLATFORM} && rm -rf ffmpeg && ln -sf ffmpeg-4.2-fit/_release ffmpeg)
-    (cd ${SRS_OBJS} && rm -rf ffmpeg && ln -sf ${SRS_PLATFORM}/ffmpeg-4.2-fit/_release ffmpeg)
-    if [ ! -f ${SRS_OBJS}/ffmpeg/lib/libavcodec.a ]; then echo "Build ffmpeg-4.2-fit failed."; exit -1; fi
+    (cd ${SRS_OBJS}/${SRS_PLATFORM} && rm -rf ffmpeg && ln -sf ffmpeg-4-fit/_release ffmpeg)
+    (cd ${SRS_OBJS} && rm -rf ffmpeg && ln -sf ${SRS_PLATFORM}/ffmpeg-4-fit/_release ffmpeg)
+    if [ ! -f ${SRS_OBJS}/ffmpeg/lib/libavcodec.a ]; then echo "Build ffmpeg-4-fit failed."; exit -1; fi
 fi
 
 #####################################################################################

From 0bc3bdc7b89eb8b984c2a5243f09b008f203c36b Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Wed, 3 Mar 2021 10:36:24 +0800
Subject: [PATCH 091/102] Refine gcov files

---
 trunk/auto/coverage.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/trunk/auto/coverage.sh b/trunk/auto/coverage.sh
index 55cb7ce46..c211243ea 100644
--- a/trunk/auto/coverage.sh
+++ b/trunk/auto/coverage.sh
@@ -39,7 +39,9 @@ ret=$?; if [[ $ret -ne 0 ]]; then echo "Cook gcov files failed, ret=$ret"; exit
 #       https://codecov.io/gh/ossrs/srs/src/20fbb4466fdc8ba5d810b8570df6004063212838/trunk/src/protocol/srs_rtmp_stack.cpp
 # Remark: It takes a few minutes to sync with github, so it might not available when CircleCI is done.
 #       https://circleci.com/gh/ossrs/srs/tree/3.0release
+#
+# Note: Use '-X gcov' to avoid generate the gcov files again.
 cd $workdir &&
 export CODECOV_TOKEN="493bba46-c468-4e73-8b45-8cdd8ff62d96" &&
-bash <(curl -s https://codecov.io/bash) &&
+bash <(curl -s https://codecov.io/bash) -X gcov &&
 echo "Done" && exit 0

From e2b77956648ff422c5ca68239a4376181a9bd72b Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Wed, 3 Mar 2021 17:50:51 +0800
Subject: [PATCH 092/102] Update README

---
 README.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.md b/README.md
index a9f7c23b0..3e59c6c0e 100755
--- a/README.md
+++ b/README.md
@@ -1477,6 +1477,10 @@ Winlin
 [v3_EN_NgExec]:https://github.com/ossrs/srs/wiki/v3_EN_NgExec
 [v3_CN_ReusePort]:https://github.com/ossrs/srs/wiki/v3_CN_ReusePort
 [v3_EN_ReusePort]:https://github.com/ossrs/srs/wiki/v3_EN_ReusePort
+[v4_CN_SampleSRT]:https://github.com/ossrs/srs/wiki/v4_CN_SampleSRT
+[v4_EN_SampleSRT]:https://github.com/ossrs/srs/wiki/v4_EN_SampleSRT
+[v3_CN_SampleDASH]:https://github.com/ossrs/srs/wiki/v3_CN_SampleDASH
+[v3_EN_SampleDASH]:https://github.com/ossrs/srs/wiki/v3_EN_SampleDASH
 
 [bug #213]: https://github.com/ossrs/srs/issues/213
 [bug #194]: https://github.com/ossrs/srs/issues/194

From eaeacab9206e74b790e1dc83497d197a7f0e6538 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Wed, 3 Mar 2021 17:57:44 +0800
Subject: [PATCH 093/102] Update README

---
 README.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/README.md b/README.md
index 3e59c6c0e..e03c528af 100755
--- a/README.md
+++ b/README.md
@@ -58,6 +58,7 @@ docker run -p 1935:1935 -p 1985:1985 -p 8080:8080 \
 * Usage: How to delivery HLS?([CN][v3_CN_SampleHLS], [EN][v3_EN_SampleHLS])
 * Usage: How to publish GB28181 to SRS? [#1500](https://github.com/ossrs/srs/issues/1500#issuecomment-606695679)
 * Usage: How to play WebRTC from SRS? [#307](https://github.com/ossrs/srs/issues/307)
+* Usage: How to publish WebRTC to SRS? [#307](https://github.com/ossrs/srs/issues/307)
 * Usage: How to publish SRT(Experimental) to SRS?([CN][v4_CN_SampleSRT], [EN][v4_EN_SampleSRT])
 * Usage: How to transode stream by FFMPEG?([CN][v2_CN_SampleFFMPEG], [EN][v2_EN_SampleFFMPEG])
 * Usage: How to forward stream to other servers?([CN][v3_CN_SampleForward], [EN][v3_EN_SampleForward])

From dd8f7ff09aedae0a3db9b8539befe547b944bafe Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Wed, 3 Mar 2021 18:14:06 +0800
Subject: [PATCH 094/102] Enable HTTP-FLV for conf/rtc.conf

---
 trunk/conf/rtc.conf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/trunk/conf/rtc.conf b/trunk/conf/rtc.conf
index 02b97079b..b5a70eb07 100644
--- a/trunk/conf/rtc.conf
+++ b/trunk/conf/rtc.conf
@@ -34,5 +34,9 @@ vhost __defaultVhost__ {
         enabled     on;
         bframe      discard;
     }
+    http_remux {
+        enabled     on;
+        mount       [vhost]/[app]/[stream].flv;
+    }
 }
 

From 4ba485002c5799cd68992edc9bb9b048a6623b23 Mon Sep 17 00:00:00 2001
From: Pieere Pi <pihuibin@hotmail.com>
Date: Wed, 3 Mar 2021 20:40:51 +0800
Subject: [PATCH 095/102] Fix #2106, #2011, RTMP/AAC transcode to Opus bug.
 4.0.81

---
 README.md                            | 4 ++++
 trunk/src/app/srs_app_rtc_codec.cpp  | 9 +++++----
 trunk/src/core/srs_core_version4.hpp | 2 +-
 3 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index e03c528af..58ded9b82 100755
--- a/README.md
+++ b/README.md
@@ -157,6 +157,8 @@ For previous versions, please read:
 
 ## V4 changes
 
+* v4.0, 2021-03-03, Fix [#2106][bug #2106], [#2011][bug #2011], RTMP/AAC transcode to Opus bug. 4.0.81
+* v4.0, 2021-03-02, Refine build script for FFmpeg and SRTP. 4.0.80
 * v4.0, 2021-03-02, Upgrade libsrtp from 2.0.0 to 2.3.0, with source code. 4.0.79
 * v4.0, 2021-03-01, Upgrade openssl from 1.1.0e to 1.1.1b, with source code. 4.0.78
 * v4.0, 2021-03-01, Enable Object Cache and Zero Copy Nack by default. 4.0.77
@@ -1823,6 +1825,8 @@ Winlin
 [bug #1657-2]: https://github.com/ossrs/srs/issues/1657#issuecomment-722904004
 [bug #1657-3]: https://github.com/ossrs/srs/issues/1657#issuecomment-722971676
 [bug #1998]: https://github.com/ossrs/srs/issues/1998
+[bug #2106]: https://github.com/ossrs/srs/issues/2106
+[bug #2011]: https://github.com/ossrs/srs/issues/2011
 [bug #zzzzzzzzzzzzz]: https://github.com/ossrs/srs/issues/zzzzzzzzzzzzz
 
 [exo #828]: https://github.com/google/ExoPlayer/pull/828
diff --git a/trunk/src/app/srs_app_rtc_codec.cpp b/trunk/src/app/srs_app_rtc_codec.cpp
index b3db983ef..7194f9605 100644
--- a/trunk/src/app/srs_app_rtc_codec.cpp
+++ b/trunk/src/app/srs_app_rtc_codec.cpp
@@ -130,10 +130,11 @@ srs_error_t SrsAudioDecoder::decode(SrsSample *pkt, char *buf, int &size)
             return srs_error_new(ERROR_RTC_RTP_MUXER, "Failed to calculate data size");
         }
 
-        for (int i = 0; i < frame_->nb_samples; i++) {
-            if (size + pcm_size * codec_ctx_->channels <= max) {
-                memcpy(buf + size,frame_->data[0] + pcm_size*codec_ctx_->channels * i, pcm_size * codec_ctx_->channels);
-                size += pcm_size * codec_ctx_->channels;
+        // @see https://github.com/ossrs/srs/pull/2011/files
+        for (int i = 0; i < codec_ctx_->channels; i++) {
+            if (size + pcm_size * frame_->nb_samples <= max) {
+                memcpy(buf + size,frame_->data[i],pcm_size * frame_->nb_samples);
+                size += pcm_size * frame_->nb_samples;
             }
         }
     }
diff --git a/trunk/src/core/srs_core_version4.hpp b/trunk/src/core/srs_core_version4.hpp
index 6b893b0e7..63540429b 100644
--- a/trunk/src/core/srs_core_version4.hpp
+++ b/trunk/src/core/srs_core_version4.hpp
@@ -24,6 +24,6 @@
 #ifndef SRS_CORE_VERSION4_HPP
 #define SRS_CORE_VERSION4_HPP
 
-#define SRS_VERSION4_REVISION 79
+#define SRS_VERSION4_REVISION 81
 
 #endif

From 868899165f7c1d50156605d0729b64896fc07a2f Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Thu, 4 Mar 2021 08:45:01 +0800
Subject: [PATCH 096/102] CI: Add centos8 and ubuntu20 to CI

---
 .circleci/config.yml | 40 +++++++++++++++++++++++++++++++++++-----
 1 file changed, 35 insertions(+), 5 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 3a5dbe4cc..e286e6387 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -1,14 +1,40 @@
 version: 2
 jobs:
-  build-centos7:
+  build-centos7-baseline:
     docker:
       - image: ossrs/srs:dev
     steps:
       - checkout
       - run: |
-          cd trunk && ./configure && make &&
-          ./configure --nasm=off --srtp-nasm=off && make clean && make &&
-          ./configure --gb28181=on && make clean && make
+          cd trunk && ./configure && make
+  build-centos7-noasm:
+    docker:
+      - image: ossrs/srs:dev
+    steps:
+      - checkout
+      - run: |
+          cd trunk && ./configure --nasm=off --srtp-nasm=off && make
+  build-centos7-gb28181:
+    docker:
+      - image: ossrs/srs:dev
+    steps:
+      - checkout
+      - run: |
+          cd trunk && ./configure --gb28181=on && make
+  build-centos8-baseline:
+    docker:
+      - image: ossrs/srs:dev8
+    steps:
+      - checkout
+      - run: |
+          cd trunk && ./configure && make
+  build-ubuntu20-baseline:
+    docker:
+      - image: ossrs/srs:dev8
+    steps:
+      - checkout
+      - run: |
+          cd trunk && ./configure && make
   test:
     docker:
       - image: ossrs/srs:dev
@@ -22,5 +48,9 @@ workflows:
   version: 2
   build_and_test:
     jobs:
-      - build-centos7
+      - build-centos7-baseline
       - test
+      - build-centos7-noasm
+      - build-centos7-gb28181
+      - build-centos8-baseline
+      - build-ubuntu20-baseline

From 212ff6fc2dfa8758656c30a802efa46d68d32c6d Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Thu, 4 Mar 2021 09:56:43 +0800
Subject: [PATCH 097/102] Never force to openssl-1.0 for asm and srtp-asm,
 because openssl-1.1+libsrtp-2.3 is ok now

---
 trunk/auto/options.sh | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/trunk/auto/options.sh b/trunk/auto/options.sh
index 284965715..800b1e424 100755
--- a/trunk/auto/options.sh
+++ b/trunk/auto/options.sh
@@ -513,12 +513,6 @@ function apply_detail_options() {
         echo "Disable SRTP-ASM, because NASM is disabled."
         SRS_SRTP_ASM=NO
     fi
-
-    # Which openssl we choose, openssl-1.0.* for SRTP with ASM, others we use openssl-1.1.*
-    if [[ $SRS_SRTP_ASM == YES && $SRS_SSL_1_0 == NO ]]; then
-        echo "Use openssl-1.0 for SRTP-ASM."
-        SRS_SSL_1_0=YES
-    fi
 }
 apply_detail_options
 

From 5a66d15e853a80191b7785c4e9767b9512c8149e Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Thu, 4 Mar 2021 10:41:23 +0800
Subject: [PATCH 098/102] Support regression test in CI.

---
 .circleci/config.yml            | 26 +++++++++++++---
 trunk/conf/regression-test.conf | 54 +++++++++++++++++++++++++++++++++
 trunk/configure                 |  4 +--
 3 files changed, 78 insertions(+), 6 deletions(-)
 create mode 100644 trunk/conf/regression-test.conf

diff --git a/.circleci/config.yml b/.circleci/config.yml
index e286e6387..7c9ec8a18 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -6,6 +6,7 @@ jobs:
     steps:
       - checkout
       - run: |
+          echo "Build and run SRS baseline" &&
           cd trunk && ./configure && make
   build-centos7-noasm:
     docker:
@@ -13,6 +14,7 @@ jobs:
     steps:
       - checkout
       - run: |
+          echo "Build and run SRS without NASM or SRTP-NASM" &&
           cd trunk && ./configure --nasm=off --srtp-nasm=off && make
   build-centos7-gb28181:
     docker:
@@ -20,6 +22,7 @@ jobs:
     steps:
       - checkout
       - run: |
+          echo "Build and run SRS with GB28181" &&
           cd trunk && ./configure --gb28181=on && make
   build-centos8-baseline:
     docker:
@@ -27,6 +30,7 @@ jobs:
     steps:
       - checkout
       - run: |
+          echo "Build and run SRS for CentOS8" &&
           cd trunk && ./configure && make
   build-ubuntu20-baseline:
     docker:
@@ -34,22 +38,36 @@ jobs:
     steps:
       - checkout
       - run: |
+          echo "Build and run SRS for Ubuntu20" &&
           cd trunk && ./configure && make
-  test:
+  run-utest:
     docker:
       - image: ossrs/srs:dev
     steps:
       - checkout
       - run: |
-          cd trunk &&
-          ./configure --gb28181=on --utest=on --gcov=on && make &&
+          echo "Build and run utest for SRS" &&
+          cd trunk && ./configure --gb28181=on --utest=on --gcov=on && make &&
           ./objs/srs_utest && bash auto/coverage.sh
+  run-regression-test:
+    docker:
+      - image: ossrs/srs:dev
+    steps:
+      - checkout
+      - run: |
+          echo "Build and run SRS with regression config" &&
+          cd trunk && ./configure && make && ./objs/srs -c conf/regression-test.conf &&
+          echo "Clone srs-bench for regression test" &&
+          cd 3rdparty && git clone -b feature/srs --depth=1 https://github.com/ossrs/srs-bench &&
+          echo "Run srs-bench regression test" &&
+          cd srs-bench && make && ./objs/srs_test -test.v
 workflows:
   version: 2
   build_and_test:
     jobs:
       - build-centos7-baseline
-      - test
+      - run-utest
+      - run-regression-test
       - build-centos7-noasm
       - build-centos7-gb28181
       - build-centos8-baseline
diff --git a/trunk/conf/regression-test.conf b/trunk/conf/regression-test.conf
new file mode 100644
index 000000000..fcb348f12
--- /dev/null
+++ b/trunk/conf/regression-test.conf
@@ -0,0 +1,54 @@
+
+listen              1935;
+max_connections     1000;
+daemon              on;
+srs_log_tank        file;
+
+http_server {
+    enabled         on;
+    listen          8080;
+    dir             ./objs/nginx/html;
+}
+
+http_api {
+    enabled         on;
+    listen          1985;
+}
+stats {
+    network         0;
+}
+rtc_server {
+    enabled         on;
+    # Listen at udp://8000
+    listen          8000;
+    #
+    # The $CANDIDATE means fetch from env, if not configed, use * as default.
+    #
+    # The * means retrieving server IP automatically, from all network interfaces,
+    # @see https://github.com/ossrs/srs/issues/307#issuecomment-599028124
+    candidate       $CANDIDATE;
+}
+
+vhost __defaultVhost__ {
+    rtc {
+        enabled     on;
+        bframe      discard;
+    }
+    http_remux {
+        enabled     on;
+        mount       [vhost]/[app]/[stream].flv;
+    }
+    ingest livestream {
+        enabled on;
+        input {
+            type    file;
+            url     ./doc/source.200kbps.768x320.flv;
+        }
+        ffmpeg      ./objs/ffmpeg/bin/ffmpeg;
+        engine {
+            enabled          off;
+            output          rtmp://127.0.0.1:[port]/live/livestream;
+        }
+    }
+}
+
diff --git a/trunk/configure b/trunk/configure
index e5bb595ba..70a8319f9 100755
--- a/trunk/configure
+++ b/trunk/configure
@@ -192,8 +192,8 @@ if [[ $SRS_GCOV == YES ]]; then
     SrsLinkOptions="${SrsLinkOptions} ${SrsGcov}";
 fi
 
-# For FFMPEG/RTC.
-if [[ $SRS_RTC == YES && $SRS_FFMPEG_FIT == YES ]]; then
+# For FFMPEG/RTC on Linux.
+if [[ $SRS_OSX != YES && $SRS_RTC == YES && $SRS_FFMPEG_FIT == YES ]]; then
     SrsLinkOptions="${SrsLinkOptions} -lrt";
 fi
 

From de87dd427d1117e48d8baaa25e9a8eaa7fdff2d0 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Thu, 4 Mar 2021 13:12:44 +0800
Subject: [PATCH 099/102] Fix utest fail

---
 trunk/src/utest/srs_utest_rtc.cpp | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/trunk/src/utest/srs_utest_rtc.cpp b/trunk/src/utest/srs_utest_rtc.cpp
index d3d5e00a2..845f03b53 100644
--- a/trunk/src/utest/srs_utest_rtc.cpp
+++ b/trunk/src/utest/srs_utest_rtc.cpp
@@ -1143,8 +1143,8 @@ VOID TEST(KernelRTCTest, DTLSServerARQTest)
 
         EXPECT_EQ(1, cio.nn_client_hello);
         EXPECT_EQ(1, sio.nn_server_hello);
-        EXPECT_EQ(1, cio.nn_certificate);
-        EXPECT_EQ(1, sio.nn_new_session);
+        EXPECT_TRUE(1 <= cio.nn_certificate);
+        EXPECT_TRUE(1 <= sio.nn_new_session);
         EXPECT_EQ(0, sio.nn_change_cipher);
     }
 

From 876210f6c990fea61675b51cd644ff2b27916b9d Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Thu, 4 Mar 2021 13:23:01 +0800
Subject: [PATCH 100/102] For regression test, add srs-bench to 3rdparty

---
 .circleci/config.yml                          |    4 +-
 trunk/3rdparty/srs-bench/.gitignore           |    8 +
 trunk/3rdparty/srs-bench/Makefile             |   25 +
 trunk/3rdparty/srs-bench/README.md            |  149 +
 trunk/3rdparty/srs-bench/avatar.ogg           |  Bin 0 -> 207227 bytes
 trunk/3rdparty/srs-bench/go.mod               |   12 +
 trunk/3rdparty/srs-bench/go.sum               |  124 +
 trunk/3rdparty/srs-bench/main.go              |  263 +
 .../3rdparty/srs-bench/rtc/pion_constants.go  |    5 +
 .../srs-bench/rtc/pion_mediaengine.go         |   27 +
 trunk/3rdparty/srs-bench/rtc/pion_rtpcodec.go |   27 +
 .../srs-bench/rtc/pion_track_local_static.go  |  246 +
 trunk/3rdparty/srs-bench/rtc/pion_util.go     |   10 +
 .../vendor/github.com/google/uuid/.travis.yml |    9 +
 .../github.com/google/uuid/CONTRIBUTING.md    |   10 +
 .../github.com/google/uuid/CONTRIBUTORS       |    9 +
 .../vendor/github.com/google/uuid/LICENSE     |   27 +
 .../vendor/github.com/google/uuid/README.md   |   19 +
 .../vendor/github.com/google/uuid/dce.go      |   80 +
 .../vendor/github.com/google/uuid/doc.go      |   12 +
 .../vendor/github.com/google/uuid/go.mod      |    1 +
 .../vendor/github.com/google/uuid/hash.go     |   53 +
 .../vendor/github.com/google/uuid/marshal.go  |   38 +
 .../vendor/github.com/google/uuid/node.go     |   90 +
 .../vendor/github.com/google/uuid/node_js.go  |   12 +
 .../vendor/github.com/google/uuid/node_net.go |   33 +
 .../vendor/github.com/google/uuid/sql.go      |   59 +
 .../vendor/github.com/google/uuid/time.go     |  123 +
 .../vendor/github.com/google/uuid/util.go     |   43 +
 .../vendor/github.com/google/uuid/uuid.go     |  245 +
 .../vendor/github.com/google/uuid/version1.go |   44 +
 .../vendor/github.com/google/uuid/version4.go |   43 +
 .../github.com/ossrs/go-oryx-lib/LICENSE      |   21 +
 .../ossrs/go-oryx-lib/errors/LICENSE          |   23 +
 .../ossrs/go-oryx-lib/errors/README.md        |   52 +
 .../ossrs/go-oryx-lib/errors/errors.go        |  270 +
 .../ossrs/go-oryx-lib/errors/stack.go         |  187 +
 .../ossrs/go-oryx-lib/logger/go17.go          |   86 +
 .../ossrs/go-oryx-lib/logger/logger.go        |  239 +
 .../ossrs/go-oryx-lib/logger/pre_go17.go      |   34 +
 .../github.com/pion/datachannel/.gitignore    |    2 +
 .../github.com/pion/datachannel/.golangci.yml |    8 +
 .../github.com/pion/datachannel/DESIGN.md     |   20 +
 .../github.com/pion/datachannel/LICENSE       |   21 +
 .../github.com/pion/datachannel/README.md     |   45 +
 .../github.com/pion/datachannel/codecov.yml   |   20 +
 .../pion/datachannel/datachannel.go           |  378 +
 .../vendor/github.com/pion/datachannel/go.mod |   11 +
 .../vendor/github.com/pion/datachannel/go.sum |   38 +
 .../github.com/pion/datachannel/message.go    |   94 +
 .../pion/datachannel/message_channel_ack.go   |   22 +
 .../pion/datachannel/message_channel_open.go  |  123 +
 .../github.com/pion/datachannel/renovate.json |   15 +
 .../github.com/pion/dtls/v2/.editorconfig     |   21 +
 .../vendor/github.com/pion/dtls/v2/.gitignore |    2 +
 .../github.com/pion/dtls/v2/.golangci.yml     |   89 +
 .../vendor/github.com/pion/dtls/v2/LICENSE    |   21 +
 .../vendor/github.com/pion/dtls/v2/Makefile   |    6 +
 .../vendor/github.com/pion/dtls/v2/README.md  |  151 +
 .../vendor/github.com/pion/dtls/v2/alert.go   |  145 +
 .../pion/dtls/v2/application_data.go          |   23 +
 .../github.com/pion/dtls/v2/certificate.go    |   67 +
 .../pion/dtls/v2/change_cipher_spec.go        |   25 +
 .../github.com/pion/dtls/v2/cipher_suite.go   |  206 +
 .../pion/dtls/v2/cipher_suite_aes_128_ccm.go  |   93 +
 .../pion/dtls/v2/cipher_suite_go114.go        |   36 +
 ..._suite_tls_ecdhe_ecdsa_with_aes_128_ccm.go |    5 +
 ...suite_tls_ecdhe_ecdsa_with_aes_128_ccm8.go |    5 +
 ...tls_ecdhe_ecdsa_with_aes_128_gcm_sha256.go |   77 +
 ...te_tls_ecdhe_ecdsa_with_aes_256_cbc_sha.go |   83 +
 ...e_tls_ecdhe_rsa_with_aes_128_gcm_sha256.go |   17 +
 ...uite_tls_ecdhe_rsa_with_aes_256_cbc_sha.go |   17 +
 .../cipher_suite_tls_psk_with_aes_128_ccm.go  |    5 +
 .../cipher_suite_tls_psk_with_aes_128_ccm8.go |    5 +
 ...r_suite_tls_psk_with_aes_128_gcm_sha256.go |   21 +
 .../pion/dtls/v2/client_certificate_type.go   |   16 +
 .../github.com/pion/dtls/v2/codecov.yml       |   20 +
 .../pion/dtls/v2/compression_method.go        |   49 +
 .../vendor/github.com/pion/dtls/v2/config.go  |  179 +
 .../vendor/github.com/pion/dtls/v2/conn.go    |  978 +++
 .../vendor/github.com/pion/dtls/v2/content.go |   17 +
 .../vendor/github.com/pion/dtls/v2/crypto.go  |  232 +
 .../github.com/pion/dtls/v2/crypto_cbc.go     |  133 +
 .../github.com/pion/dtls/v2/crypto_ccm.go     |  100 +
 .../github.com/pion/dtls/v2/crypto_gcm.go     |   94 +
 .../github.com/pion/dtls/v2/curve_type.go     |   14 +
 .../vendor/github.com/pion/dtls/v2/dtls.go    |    2 +
 .../vendor/github.com/pion/dtls/v2/errors.go  |  229 +
 .../github.com/pion/dtls/v2/errors_errno.go   |   25 +
 .../github.com/pion/dtls/v2/errors_noerrno.go |   14 +
 .../github.com/pion/dtls/v2/extension.go      |   88 +
 .../dtls/v2/extension_renegotiation_info.go   |   37 +
 .../pion/dtls/v2/extension_server_name.go     |   70 +
 .../v2/extension_supported_elliptic_curves.go |   54 +
 .../v2/extension_supported_point_formats.go   |   56 +
 ...xtension_supported_signature_algorithms.go |   60 +
 .../dtls/v2/extension_use_master_secret.go    |   40 +
 .../pion/dtls/v2/extension_use_srtp.go        |   53 +
 .../vendor/github.com/pion/dtls/v2/flight.go  |   75 +
 .../github.com/pion/dtls/v2/flight0handler.go |   89 +
 .../github.com/pion/dtls/v2/flight1handler.go |  105 +
 .../github.com/pion/dtls/v2/flight2handler.go |   56 +
 .../github.com/pion/dtls/v2/flight3handler.go |  177 +
 .../github.com/pion/dtls/v2/flight4handler.go |  303 +
 .../github.com/pion/dtls/v2/flight5handler.go |  313 +
 .../github.com/pion/dtls/v2/flight6handler.go |   76 +
 .../github.com/pion/dtls/v2/flighthandler.go  |   55 +
 .../pion/dtls/v2/fragment_buffer.go           |  105 +
 .../vendor/github.com/pion/dtls/v2/fuzz.go    |   38 +
 .../vendor/github.com/pion/dtls/v2/go.mod     |   12 +
 .../vendor/github.com/pion/dtls/v2/go.sum     |   45 +
 .../github.com/pion/dtls/v2/handshake.go      |  136 +
 .../pion/dtls/v2/handshake_cache.go           |  168 +
 .../pion/dtls/v2/handshake_header.go          |   41 +
 .../dtls/v2/handshake_message_certificate.go  |   55 +
 .../handshake_message_certificate_request.go  |   91 +
 .../handshake_message_certificate_verify.go   |   51 +
 .../dtls/v2/handshake_message_client_hello.go |  119 +
 .../handshake_message_client_key_exchange.go  |   46 +
 .../dtls/v2/handshake_message_finished.go     |   18 +
 .../handshake_message_hello_verify_request.go |   57 +
 .../dtls/v2/handshake_message_server_hello.go |  102 +
 .../v2/handshake_message_server_hello_done.go |   16 +
 .../handshake_message_server_key_exchange.go  |  104 +
 .../pion/dtls/v2/handshake_random.go          |   44 +
 .../github.com/pion/dtls/v2/handshaker.go     |  318 +
 .../github.com/pion/dtls/v2/hash_algorithm.go |  116 +
 .../pion/dtls/v2/internal/closer/closer.go    |   45 +
 .../dtls/v2/internal/net/connctx/connctx.go   |  156 +
 .../github.com/pion/dtls/v2/listener.go       |   78 +
 .../github.com/pion/dtls/v2/named_curve.go    |   62 +
 .../vendor/github.com/pion/dtls/v2/packet.go  |    7 +
 .../pion/dtls/v2/pkg/crypto/ccm/ccm.go        |  251 +
 .../v2/pkg/crypto/fingerprint/fingerprint.go  |   50 +
 .../dtls/v2/pkg/crypto/fingerprint/hash.go    |   37 +
 .../vendor/github.com/pion/dtls/v2/prf.go     |  230 +
 .../github.com/pion/dtls/v2/record_layer.go   |   93 +
 .../pion/dtls/v2/record_layer_header.go       |   76 +
 .../github.com/pion/dtls/v2/renovate.json     |   15 +
 .../vendor/github.com/pion/dtls/v2/resume.go  |   19 +
 .../pion/dtls/v2/signature_algorithm.go       |   18 +
 .../pion/dtls/v2/signature_hash_algorithm.go  |   88 +
 .../pion/dtls/v2/srtp_protection_profile.go   |   21 +
 .../vendor/github.com/pion/dtls/v2/state.go   |  187 +
 .../vendor/github.com/pion/dtls/v2/util.go    |  114 +
 .../vendor/github.com/pion/ice/v2/.gitignore  |   24 +
 .../github.com/pion/ice/v2/.golangci.yml      |   89 +
 .../vendor/github.com/pion/ice/v2/LICENSE     |   21 +
 .../vendor/github.com/pion/ice/v2/README.md   |   66 +
 .../vendor/github.com/pion/ice/v2/agent.go    | 1233 +++
 .../github.com/pion/ice/v2/agent_config.go    |  252 +
 .../github.com/pion/ice/v2/agent_stats.go     |  113 +
 .../github.com/pion/ice/v2/candidate.go       |   68 +
 .../github.com/pion/ice/v2/candidate_base.go  |  496 ++
 .../github.com/pion/ice/v2/candidate_host.go  |   76 +
 .../pion/ice/v2/candidate_peer_reflexive.go   |   60 +
 .../github.com/pion/ice/v2/candidate_relay.go |   73 +
 .../pion/ice/v2/candidate_server_reflexive.go |   59 +
 .../github.com/pion/ice/v2/candidatepair.go   |   94 +
 .../pion/ice/v2/candidatepair_state.go        |   37 +
 .../pion/ice/v2/candidaterelatedaddress.go    |   30 +
 .../github.com/pion/ice/v2/candidatetype.go   |   62 +
 .../vendor/github.com/pion/ice/v2/codecov.yml |   20 +
 .../vendor/github.com/pion/ice/v2/context.go  |   37 +
 .../vendor/github.com/pion/ice/v2/errors.go   |  132 +
 .../pion/ice/v2/external_ip_mapper.go         |  143 +
 .../vendor/github.com/pion/ice/v2/gather.go   |  497 ++
 .../vendor/github.com/pion/ice/v2/go.mod      |   16 +
 .../vendor/github.com/pion/ice/v2/go.sum      |   60 +
 .../vendor/github.com/pion/ice/v2/ice.go      |   76 +
 .../github.com/pion/ice/v2/icecontrol.go      |   87 +
 .../vendor/github.com/pion/ice/v2/mdns.go     |   63 +
 .../github.com/pion/ice/v2/networktype.go     |  130 +
 .../vendor/github.com/pion/ice/v2/priority.go |   33 +
 .../vendor/github.com/pion/ice/v2/rand.go     |   53 +
 .../github.com/pion/ice/v2/renovate.json      |   15 +
 .../vendor/github.com/pion/ice/v2/role.go     |   43 +
 .../github.com/pion/ice/v2/selection.go       |  287 +
 .../vendor/github.com/pion/ice/v2/stats.go    |  177 +
 .../vendor/github.com/pion/ice/v2/stun.go     |   24 +
 .../vendor/github.com/pion/ice/v2/tcp_mux.go  |  295 +
 .../github.com/pion/ice/v2/tcp_packet_conn.go |  240 +
 .../vendor/github.com/pion/ice/v2/tcptype.go  |   48 +
 .../github.com/pion/ice/v2/transport.go       |  145 +
 .../vendor/github.com/pion/ice/v2/url.go      |  225 +
 .../github.com/pion/ice/v2/usecandidate.go    |   23 +
 .../vendor/github.com/pion/ice/v2/util.go     |  233 +
 .../github.com/pion/interceptor/.gitignore    |   24 +
 .../github.com/pion/interceptor/.golangci.yml |   89 +
 .../github.com/pion/interceptor/LICENSE       |   21 +
 .../github.com/pion/interceptor/README.md     |   81 +
 .../github.com/pion/interceptor/chain.go      |   75 +
 .../github.com/pion/interceptor/codecov.yml   |   20 +
 .../github.com/pion/interceptor/errors.go     |   51 +
 .../vendor/github.com/pion/interceptor/go.mod |   10 +
 .../vendor/github.com/pion/interceptor/go.sum |   19 +
 .../pion/interceptor/interceptor.go           |  108 +
 .../github.com/pion/interceptor/noop.go       |   40 +
 .../pion/interceptor/pkg/nack/errors.go       |    6 +
 .../pkg/nack/generator_interceptor.go         |  162 +
 .../interceptor/pkg/nack/generator_option.go  |   44 +
 .../pion/interceptor/pkg/nack/nack.go         |   14 +
 .../pion/interceptor/pkg/nack/receive_log.go  |  134 +
 .../pkg/nack/responder_interceptor.go         |  119 +
 .../interceptor/pkg/nack/responder_option.go  |   23 +
 .../pion/interceptor/pkg/nack/send_buffer.go  |   74 +
 .../github.com/pion/interceptor/registry.go   |   20 +
 .../github.com/pion/interceptor/renovate.json |   15 +
 .../github.com/pion/interceptor/streaminfo.go |   34 +
 .../github.com/pion/logging/.golangci.yml     |   13 +
 .../github.com/pion/logging/.travis.yml       |   19 +
 .../vendor/github.com/pion/logging/LICENSE    |   21 +
 .../vendor/github.com/pion/logging/README.md  |   41 +
 .../vendor/github.com/pion/logging/go.mod     |    3 +
 .../vendor/github.com/pion/logging/go.sum     |    0
 .../vendor/github.com/pion/logging/logger.go  |  228 +
 .../vendor/github.com/pion/logging/scoped.go  |   72 +
 .../vendor/github.com/pion/mdns/.golangci.yml |   13 +
 .../vendor/github.com/pion/mdns/.travis.yml   |   19 +
 .../vendor/github.com/pion/mdns/LICENSE       |   21 +
 .../vendor/github.com/pion/mdns/README.md     |   63 +
 .../vendor/github.com/pion/mdns/config.go     |   27 +
 .../vendor/github.com/pion/mdns/conn.go       |  316 +
 .../vendor/github.com/pion/mdns/errors.go     |   10 +
 .../vendor/github.com/pion/mdns/go.mod        |    9 +
 .../vendor/github.com/pion/mdns/go.sum        |   16 +
 .../vendor/github.com/pion/mdns/renovate.json |   15 +
 .../github.com/pion/randutil/.travis.yml      |  142 +
 .../vendor/github.com/pion/randutil/LICENSE   |   21 +
 .../vendor/github.com/pion/randutil/README.md |   14 +
 .../github.com/pion/randutil/codecov.yml      |   20 +
 .../vendor/github.com/pion/randutil/crypto.go |   30 +
 .../vendor/github.com/pion/randutil/go.mod    |    3 +
 .../vendor/github.com/pion/randutil/math.go   |   72 +
 .../github.com/pion/randutil/renovate.json    |   15 +
 .../vendor/github.com/pion/rtcp/.gitignore    |   24 +
 .../vendor/github.com/pion/rtcp/.golangci.yml |   89 +
 .../vendor/github.com/pion/rtcp/LICENSE       |   21 +
 .../vendor/github.com/pion/rtcp/README.md     |   49 +
 .../vendor/github.com/pion/rtcp/codecov.yml   |   20 +
 .../github.com/pion/rtcp/compound_packet.go   |  136 +
 .../vendor/github.com/pion/rtcp/doc.go        |   39 +
 .../vendor/github.com/pion/rtcp/errors.go     |   30 +
 .../pion/rtcp/full_intra_request.go           |  107 +
 .../vendor/github.com/pion/rtcp/fuzz.go       |   51 +
 .../vendor/github.com/pion/rtcp/go.mod        |    5 +
 .../vendor/github.com/pion/rtcp/go.sum        |   11 +
 .../vendor/github.com/pion/rtcp/goodbye.go    |  146 +
 .../vendor/github.com/pion/rtcp/header.go     |  140 +
 .../vendor/github.com/pion/rtcp/packet.go     |  115 +
 .../pion/rtcp/picture_loss_indication.go      |   91 +
 .../rtcp/rapid_resynchronization_request.go   |   88 +
 .../vendor/github.com/pion/rtcp/raw_packet.go |   44 +
 .../receiver_estimated_maximum_bitrate.go     |  284 +
 .../github.com/pion/rtcp/receiver_report.go   |  193 +
 .../github.com/pion/rtcp/reception_report.go  |  130 +
 .../vendor/github.com/pion/rtcp/renovate.json |   15 +
 .../github.com/pion/rtcp/sender_report.go     |  260 +
 .../pion/rtcp/slice_loss_indication.go        |  115 +
 .../pion/rtcp/source_description.go           |  352 +
 .../pion/rtcp/transport_layer_cc.go           |  560 ++
 .../pion/rtcp/transport_layer_nack.go         |  174 +
 .../vendor/github.com/pion/rtcp/util.go       |   38 +
 .../vendor/github.com/pion/rtp/.gitignore     |   24 +
 .../vendor/github.com/pion/rtp/.golangci.yml  |   89 +
 .../vendor/github.com/pion/rtp/LICENSE        |   21 +
 .../vendor/github.com/pion/rtp/README.md      |   53 +
 .../pion/rtp/abssendtimeextension.go          |   78 +
 .../pion/rtp/audiolevelextension.go           |   60 +
 .../vendor/github.com/pion/rtp/codecov.yml    |   20 +
 .../github.com/pion/rtp/codecs/codecs.go      |    2 +
 .../github.com/pion/rtp/codecs/common.go      |    8 +
 .../github.com/pion/rtp/codecs/error.go       |   11 +
 .../github.com/pion/rtp/codecs/g711_packet.go |   22 +
 .../github.com/pion/rtp/codecs/g722_packet.go |   22 +
 .../github.com/pion/rtp/codecs/h264_packet.go |  205 +
 .../github.com/pion/rtp/codecs/opus_packet.go |   44 +
 .../github.com/pion/rtp/codecs/vp8_packet.go  |  143 +
 .../github.com/pion/rtp/codecs/vp9_packet.go  |  385 +
 .../github.com/pion/rtp/depacketizer.go       |    6 +
 .../vendor/github.com/pion/rtp/error.go       |   21 +
 .../vendor/github.com/pion/rtp/go.mod         |    5 +
 .../vendor/github.com/pion/rtp/go.sum         |    2 +
 .../vendor/github.com/pion/rtp/packet.go      |  490 ++
 .../vendor/github.com/pion/rtp/packetizer.go  |   91 +
 .../pion/rtp/partitionheadchecker.go          |    6 +
 .../vendor/github.com/pion/rtp/rand.go        |    8 +
 .../vendor/github.com/pion/rtp/renovate.json  |   15 +
 .../vendor/github.com/pion/rtp/rtp.go         |    2 +
 .../vendor/github.com/pion/rtp/sequencer.go   |   57 +
 .../pion/rtp/transportccextension.go          |   39 +
 .../vendor/github.com/pion/sctp/.gitignore    |    1 +
 .../vendor/github.com/pion/sctp/.golangci.yml |   82 +
 .../vendor/github.com/pion/sctp/DESIGN.md     |   20 +
 .../vendor/github.com/pion/sctp/LICENSE       |   21 +
 .../vendor/github.com/pion/sctp/README.md     |   54 +
 .../vendor/github.com/pion/sctp/ack_timer.go  |  105 +
 .../github.com/pion/sctp/association.go       | 2241 ++++++
 .../github.com/pion/sctp/association_stats.go |   61 +
 .../vendor/github.com/pion/sctp/chunk.go      |    9 +
 .../github.com/pion/sctp/chunk_abort.go       |   88 +
 .../github.com/pion/sctp/chunk_cookie_ack.go  |   44 +
 .../github.com/pion/sctp/chunk_cookie_echo.go |   46 +
 .../github.com/pion/sctp/chunk_error.go       |   95 +
 .../github.com/pion/sctp/chunk_forward_tsn.go |  145 +
 .../github.com/pion/sctp/chunk_heartbeat.go   |   75 +
 .../pion/sctp/chunk_heartbeat_ack.go          |   86 +
 .../vendor/github.com/pion/sctp/chunk_init.go |  123 +
 .../github.com/pion/sctp/chunk_init_ack.go    |  126 +
 .../github.com/pion/sctp/chunk_init_common.go |  155 +
 .../pion/sctp/chunk_payload_data.go           |  195 +
 .../github.com/pion/sctp/chunk_reconfig.go    |   99 +
 .../pion/sctp/chunk_selective_ack.go          |  142 +
 .../github.com/pion/sctp/chunkheader.go       |   90 +
 .../vendor/github.com/pion/sctp/chunktype.go  |   67 +
 .../vendor/github.com/pion/sctp/codecov.yml   |   20 +
 .../github.com/pion/sctp/control_queue.go     |   29 +
 .../github.com/pion/sctp/error_cause.go       |   91 +
 .../pion/sctp/error_cause_header.go           |   47 +
 ...error_cause_invalid_mandatory_parameter.go |   19 +
 .../sctp/error_cause_protocol_violation.go    |   50 +
 .../error_cause_unrecognized_chunk_type.go    |   28 +
 .../vendor/github.com/pion/sctp/go.mod        |   14 +
 .../vendor/github.com/pion/sctp/go.sum        |   36 +
 .../vendor/github.com/pion/sctp/packet.go     |  178 +
 .../vendor/github.com/pion/sctp/param.go      |   35 +
 .../github.com/pion/sctp/param_chunk_list.go  |   28 +
 .../pion/sctp/param_forward_tsn_supported.go  |   28 +
 .../pion/sctp/param_heartbeat_info.go         |   21 +
 .../pion/sctp/param_outgoing_reset_request.go |   88 +
 .../github.com/pion/sctp/param_random.go      |   21 +
 .../pion/sctp/param_reconfig_response.go      |   92 +
 .../sctp/param_requested_hmac_algorithm.go    |   73 +
 .../pion/sctp/param_state_cookie.go           |   46 +
 .../pion/sctp/param_supported_extensions.go   |   29 +
 .../github.com/pion/sctp/paramheader.go       |   63 +
 .../vendor/github.com/pion/sctp/paramtype.go  |  106 +
 .../github.com/pion/sctp/payload_queue.go     |  179 +
 .../github.com/pion/sctp/pending_queue.go     |  138 +
 .../github.com/pion/sctp/reassembly_queue.go  |  353 +
 .../vendor/github.com/pion/sctp/renovate.json |   15 +
 .../vendor/github.com/pion/sctp/rtx_timer.go  |  219 +
 .../vendor/github.com/pion/sctp/sctp.go       |    2 +
 .../vendor/github.com/pion/sctp/stream.go     |  357 +
 .../vendor/github.com/pion/sctp/util.go       |   58 +
 .../vendor/github.com/pion/sdp/v3/.gitignore  |   24 +
 .../github.com/pion/sdp/v3/.golangci.yml      |   89 +
 .../vendor/github.com/pion/sdp/v3/LICENSE     |   21 +
 .../vendor/github.com/pion/sdp/v3/README.md   |   59 +
 .../github.com/pion/sdp/v3/base_lexer.go      |  231 +
 .../vendor/github.com/pion/sdp/v3/codecov.yml |   20 +
 .../pion/sdp/v3/common_description.go         |  110 +
 .../github.com/pion/sdp/v3/direction.go       |   59 +
 .../vendor/github.com/pion/sdp/v3/extmap.go   |  108 +
 .../vendor/github.com/pion/sdp/v3/fuzz.go     |   31 +
 .../vendor/github.com/pion/sdp/v3/go.mod      |    8 +
 .../vendor/github.com/pion/sdp/v3/go.sum      |   13 +
 .../vendor/github.com/pion/sdp/v3/jsep.go     |  205 +
 .../vendor/github.com/pion/sdp/v3/marshal.go  |  136 +
 .../pion/sdp/v3/media_description.go          |   80 +
 .../github.com/pion/sdp/v3/renovate.json      |   15 +
 .../vendor/github.com/pion/sdp/v3/sdp.go      |    2 +
 .../pion/sdp/v3/session_description.go        |  146 +
 .../pion/sdp/v3/time_description.go           |   51 +
 .../github.com/pion/sdp/v3/unmarshal.go       |  907 +++
 .../vendor/github.com/pion/sdp/v3/util.go     |  318 +
 .../vendor/github.com/pion/srtp/v2/.gitignore |   24 +
 .../github.com/pion/srtp/v2/.golangci.yml     |   89 +
 .../vendor/github.com/pion/srtp/v2/DESIGN.md  |   20 +
 .../vendor/github.com/pion/srtp/v2/LICENSE    |   21 +
 .../vendor/github.com/pion/srtp/v2/README.md  |   54 +
 .../github.com/pion/srtp/v2/codecov.yml       |   20 +
 .../vendor/github.com/pion/srtp/v2/context.go |  196 +
 .../vendor/github.com/pion/srtp/v2/errors.go  |   40 +
 .../vendor/github.com/pion/srtp/v2/go.mod     |   11 +
 .../vendor/github.com/pion/srtp/v2/go.sum     |   32 +
 .../github.com/pion/srtp/v2/key_derivation.go |   63 +
 .../vendor/github.com/pion/srtp/v2/keying.go  |   54 +
 .../vendor/github.com/pion/srtp/v2/option.go  |   54 +
 .../pion/srtp/v2/protection_profile.go        |   56 +
 .../github.com/pion/srtp/v2/renovate.json     |   15 +
 .../vendor/github.com/pion/srtp/v2/session.go |  150 +
 .../github.com/pion/srtp/v2/session_srtcp.go  |  180 +
 .../github.com/pion/srtp/v2/session_srtp.go   |  171 +
 .../vendor/github.com/pion/srtp/v2/srtcp.go   |   77 +
 .../vendor/github.com/pion/srtp/v2/srtp.go    |   68 +
 .../github.com/pion/srtp/v2/srtp_cipher.go    |   16 +
 .../pion/srtp/v2/srtp_cipher_aead_aes_gcm.go  |  172 +
 .../srtp/v2/srtp_cipher_aes_cm_hmac_sha1.go   |  224 +
 .../vendor/github.com/pion/srtp/v2/stream.go  |    8 +
 .../github.com/pion/srtp/v2/stream_srtcp.go   |  152 +
 .../github.com/pion/srtp/v2/stream_srtp.go    |  149 +
 .../vendor/github.com/pion/srtp/v2/util.go    |   33 +
 .../vendor/github.com/pion/stun/.codecov.yml  |    9 +
 .../vendor/github.com/pion/stun/.gitignore    |   17 +
 .../vendor/github.com/pion/stun/.golangci.yml |   93 +
 .../github.com/pion/stun/.goreleaser.yml      |   39 +
 .../vendor/github.com/pion/stun/.travis.yml   |  135 +
 .../vendor/github.com/pion/stun/AUTHORS       |   10 +
 .../vendor/github.com/pion/stun/Dockerfile    |    5 +
 .../vendor/github.com/pion/stun/LICENSE.md    |    7 +
 .../vendor/github.com/pion/stun/Makefile      |   61 +
 .../vendor/github.com/pion/stun/README.md     |  184 +
 .../vendor/github.com/pion/stun/addr.go       |  134 +
 .../vendor/github.com/pion/stun/agent.go      |  228 +
 .../vendor/github.com/pion/stun/appveyor.yml  |   22 +
 .../vendor/github.com/pion/stun/attributes.go |  226 +
 .../github.com/pion/stun/attributes_debug.go  |   33 +
 .../vendor/github.com/pion/stun/checks.go     |   45 +
 .../github.com/pion/stun/checks_debug.go      |   61 +
 .../vendor/github.com/pion/stun/client.go     |  631 ++
 .../vendor/github.com/pion/stun/errorcode.go  |  158 +
 .../vendor/github.com/pion/stun/errors.go     |   62 +
 .../github.com/pion/stun/fingerprint.go       |   67 +
 .../github.com/pion/stun/fingerprint_debug.go |   18 +
 .../vendor/github.com/pion/stun/fuzz.go       |  140 +
 .../vendor/github.com/pion/stun/go.mod        |    3 +
 .../vendor/github.com/pion/stun/go.sum        |    0
 .../vendor/github.com/pion/stun/go.test.sh    |   24 +
 .../vendor/github.com/pion/stun/helpers.go    |  105 +
 .../vendor/github.com/pion/stun/integrity.go  |  124 +
 .../github.com/pion/stun/integrity_debug.go   |   18 +
 .../pion/stun/internal/hmac/hmac.go           |  101 +
 .../pion/stun/internal/hmac/pool.go           |   92 +
 .../pion/stun/internal/hmac/vendor.sh         |    4 +
 .../vendor/github.com/pion/stun/message.go    |  588 ++
 .../vendor/github.com/pion/stun/renovate.json |   15 +
 .../vendor/github.com/pion/stun/stun.go       |   51 +
 .../vendor/github.com/pion/stun/textattrs.go  |  129 +
 .../vendor/github.com/pion/stun/uattrs.go     |   63 +
 .../vendor/github.com/pion/stun/xor.go        |   62 +
 .../vendor/github.com/pion/stun/xoraddr.go    |  145 +
 .../vendor/github.com/pion/transport/LICENSE  |   21 +
 .../pion/transport/deadline/deadline.go       |  110 +
 .../pion/transport/packetio/buffer.go         |  347 +
 .../pion/transport/packetio/errors.go         |   27 +
 .../pion/transport/packetio/hardlimit.go      |    5 +
 .../pion/transport/packetio/no_hardlimit.go   |    5 +
 .../pion/transport/replaydetector/fixedbig.go |   78 +
 .../replaydetector/replaydetector.go          |  116 +
 .../github.com/pion/transport/vnet/.gitignore |    1 +
 .../github.com/pion/transport/vnet/README.md  |  239 +
 .../github.com/pion/transport/vnet/chunk.go   |  283 +
 .../pion/transport/vnet/chunk_queue.go        |   52 +
 .../github.com/pion/transport/vnet/conn.go    |  246 +
 .../pion/transport/vnet/conn_map.go           |  136 +
 .../github.com/pion/transport/vnet/errors.go  |   19 +
 .../pion/transport/vnet/interface.go          |   40 +
 .../github.com/pion/transport/vnet/nat.go     |  338 +
 .../github.com/pion/transport/vnet/net.go     |  677 ++
 .../pion/transport/vnet/resolver.go           |   89 +
 .../github.com/pion/transport/vnet/router.go  |  605 ++
 .../github.com/pion/transport/vnet/vnet.go    |    2 +
 .../vendor/github.com/pion/turn/v2/.gitignore |    9 +
 .../github.com/pion/turn/v2/.golangci.yml     |   88 +
 .../github.com/pion/turn/v2/.goreleaser.yml   |  109 +
 .../vendor/github.com/pion/turn/v2/DESIGN.md  |   31 +
 .../vendor/github.com/pion/turn/v2/LICENSE.md |    7 +
 .../vendor/github.com/pion/turn/v2/README.md  |   96 +
 .../vendor/github.com/pion/turn/v2/client.go  |  569 ++
 .../github.com/pion/turn/v2/codecov.yml       |   20 +
 .../vendor/github.com/pion/turn/v2/errors.go  |   28 +
 .../vendor/github.com/pion/turn/v2/go.mod     |   11 +
 .../vendor/github.com/pion/turn/v2/go.sum     |   28 +
 .../turn/v2/internal/allocation/allocation.go |  259 +
 .../internal/allocation/allocation_manager.go |  186 +
 .../v2/internal/allocation/channel_bind.go    |   43 +
 .../turn/v2/internal/allocation/errors.go     |   17 +
 .../turn/v2/internal/allocation/five_tuple.go |   36 +
 .../turn/v2/internal/allocation/permission.go |   40 +
 .../pion/turn/v2/internal/client/binding.go   |  151 +
 .../pion/turn/v2/internal/client/conn.go      |  613 ++
 .../pion/turn/v2/internal/client/errors.go    |   37 +
 .../turn/v2/internal/client/periodic_timer.go |   82 +
 .../turn/v2/internal/client/permission.go     |   90 +
 .../turn/v2/internal/client/transaction.go    |  185 +
 .../pion/turn/v2/internal/client/trylock.go   |   24 +
 .../pion/turn/v2/internal/ipnet/util.go       |   40 +
 .../pion/turn/v2/internal/proto/addr.go       |   65 +
 .../pion/turn/v2/internal/proto/chandata.go   |  140 +
 .../pion/turn/v2/internal/proto/chann.go      |   67 +
 .../pion/turn/v2/internal/proto/data.go       |   30 +
 .../pion/turn/v2/internal/proto/dontfrag.go   |   18 +
 .../pion/turn/v2/internal/proto/evenport.go   |   55 +
 .../pion/turn/v2/internal/proto/fuzz.go       |  111 +
 .../pion/turn/v2/internal/proto/lifetime.go   |   52 +
 .../pion/turn/v2/internal/proto/peeraddr.go   |   42 +
 .../pion/turn/v2/internal/proto/proto.go      |   30 +
 .../turn/v2/internal/proto/relayedaddr.go     |   40 +
 .../pion/turn/v2/internal/proto/reqfamily.go  |   61 +
 .../pion/turn/v2/internal/proto/reqtrans.go   |   65 +
 .../pion/turn/v2/internal/proto/rsrvtoken.go  |   39 +
 .../pion/turn/v2/internal/server/errors.go    |   26 +
 .../pion/turn/v2/internal/server/server.go    |  109 +
 .../pion/turn/v2/internal/server/stun.go      |   22 +
 .../pion/turn/v2/internal/server/turn.go      |  352 +
 .../pion/turn/v2/internal/server/util.go      |  133 +
 .../vendor/github.com/pion/turn/v2/lt_cred.go |   56 +
 .../turn/v2/relay_address_generator_none.go   |   45 +
 .../turn/v2/relay_address_generator_range.go  |   92 +
 .../turn/v2/relay_address_generator_static.go |   55 +
 .../github.com/pion/turn/v2/renovate.json     |   15 +
 .../vendor/github.com/pion/turn/v2/server.go  |  161 +
 .../github.com/pion/turn/v2/server_config.go  |  116 +
 .../github.com/pion/turn/v2/stun_conn.go      |  121 +
 .../vendor/github.com/pion/udp/.gitignore     |   15 +
 .../vendor/github.com/pion/udp/.golangci.yml  |   12 +
 .../vendor/github.com/pion/udp/LICENSE        |   21 +
 .../vendor/github.com/pion/udp/README.md      |   39 +
 .../vendor/github.com/pion/udp/conn.go        |  296 +
 .../vendor/github.com/pion/udp/go.mod         |    5 +
 .../vendor/github.com/pion/udp/go.sum         |   19 +
 .../github.com/pion/webrtc/v3/.codacy.yaml    |    3 +
 .../github.com/pion/webrtc/v3/.eslintrc.json  |    3 +
 .../github.com/pion/webrtc/v3/.gitignore      |   24 +
 .../github.com/pion/webrtc/v3/.golangci.yml   |   89 +
 .../github.com/pion/webrtc/v3/DESIGN.md       |   43 +
 .../vendor/github.com/pion/webrtc/v3/LICENSE  |   21 +
 .../github.com/pion/webrtc/v3/README.md       |  264 +
 .../vendor/github.com/pion/webrtc/v3/api.go   |   73 +
 .../github.com/pion/webrtc/v3/api_js.go       |   31 +
 .../github.com/pion/webrtc/v3/atomicbool.go   |   20 +
 .../github.com/pion/webrtc/v3/bundlepolicy.go |   78 +
 .../github.com/pion/webrtc/v3/certificate.go  |  185 +
 .../github.com/pion/webrtc/v3/codecov.yml     |   20 +
 .../pion/webrtc/v3/configuration.go           |   51 +
 .../pion/webrtc/v3/configuration_common.go    |   24 +
 .../pion/webrtc/v3/configuration_js.go        |   35 +
 .../github.com/pion/webrtc/v3/constants.go    |   25 +
 .../github.com/pion/webrtc/v3/datachannel.go  |  597 ++
 .../pion/webrtc/v3/datachannel_js.go          |  319 +
 .../pion/webrtc/v3/datachannel_js_detach.go   |   71 +
 .../pion/webrtc/v3/datachannelinit.go         |   33 +
 .../pion/webrtc/v3/datachannelmessage.go      |   10 +
 .../pion/webrtc/v3/datachannelparameters.go   |   12 +
 .../pion/webrtc/v3/datachannelstate.go        |   61 +
 .../pion/webrtc/v3/dtlsfingerprint.go         |   14 +
 .../pion/webrtc/v3/dtlsparameters.go          |    7 +
 .../github.com/pion/webrtc/v3/dtlsrole.go     |   92 +
 .../pion/webrtc/v3/dtlstransport.go           |  419 +
 .../pion/webrtc/v3/dtlstransportstate.go      |   71 +
 .../github.com/pion/webrtc/v3/errors.go       |  220 +
 .../webrtc/v3/gathering_complete_promise.go   |   24 +
 .../vendor/github.com/pion/webrtc/v3/go.mod   |   23 +
 .../vendor/github.com/pion/webrtc/v3/go.sum   |  138 +
 .../github.com/pion/webrtc/v3/ice_go.go       |   10 +
 .../github.com/pion/webrtc/v3/icecandidate.go |  169 +
 .../pion/webrtc/v3/icecandidateinit.go        |    9 +
 .../pion/webrtc/v3/icecandidatepair.go        |   29 +
 .../pion/webrtc/v3/icecandidatetype.go        |   94 +
 .../github.com/pion/webrtc/v3/icecomponent.go |   47 +
 .../pion/webrtc/v3/iceconnectionstate.go      |   94 +
 .../pion/webrtc/v3/icecredentialtype.go       |   43 +
 .../github.com/pion/webrtc/v3/icegatherer.go  |  367 +
 .../pion/webrtc/v3/icegathererstate.go        |   48 +
 .../pion/webrtc/v3/icegatheringstate.go       |   53 +
 .../pion/webrtc/v3/icegatheroptions.go        |    7 +
 .../pion/webrtc/v3/iceparameters.go           |    9 +
 .../github.com/pion/webrtc/v3/iceprotocol.go  |   47 +
 .../github.com/pion/webrtc/v3/icerole.go      |   45 +
 .../github.com/pion/webrtc/v3/iceserver.go    |   68 +
 .../github.com/pion/webrtc/v3/iceserver_js.go |   42 +
 .../github.com/pion/webrtc/v3/icetcp.go       |   18 +
 .../github.com/pion/webrtc/v3/icetransport.go |  368 +
 .../pion/webrtc/v3/icetransportpolicy.go      |   65 +
 .../pion/webrtc/v3/icetransportstate.go       |  107 +
 .../github.com/pion/webrtc/v3/interceptor.go  |   85 +
 .../pion/webrtc/v3/internal/mux/endpoint.go   |   75 +
 .../pion/webrtc/v3/internal/mux/mux.go        |  145 +
 .../pion/webrtc/v3/internal/mux/muxfunc.go    |  101 +
 .../pion/webrtc/v3/internal/util/util.go      |   72 +
 .../github.com/pion/webrtc/v3/js_compare.go   |   13 +
 .../pion/webrtc/v3/js_compare_legacy.go       |   13 +
 .../github.com/pion/webrtc/v3/js_utils.go     |  168 +
 .../github.com/pion/webrtc/v3/mediaengine.go  |  512 ++
 .../github.com/pion/webrtc/v3/networktype.go  |  104 +
 .../pion/webrtc/v3/oauthcredential.go         |   15 +
 .../pion/webrtc/v3/offeransweroptions.go      |   26 +
 .../github.com/pion/webrtc/v3/operations.go   |   87 +
 .../github.com/pion/webrtc/v3/package.json    |   11 +
 .../pion/webrtc/v3/peerconnection.go          | 2294 ++++++
 .../pion/webrtc/v3/peerconnection_js.go       |  676 ++
 .../pion/webrtc/v3/peerconnectionstate.go     |   94 +
 .../v3/pkg/media/h264reader/h264reader.go     |  191 +
 .../v3/pkg/media/h264reader/nalunittype.go    |   68 +
 .../v3/pkg/media/h264writer/h264writer.go     |   90 +
 .../v3/pkg/media/ivfwriter/ivfwriter.go       |  147 +
 .../pion/webrtc/v3/pkg/media/media.go         |   25 +
 .../v3/pkg/media/oggreader/oggreader.go       |  215 +
 .../v3/pkg/media/oggwriter/oggwriter.go       |  261 +
 .../pion/webrtc/v3/pkg/rtcerr/errors.go       |  160 +
 .../github.com/pion/webrtc/v3/renovate.json   |   15 +
 .../github.com/pion/webrtc/v3/rtcpfeedback.go |   31 +
 .../pion/webrtc/v3/rtcpmuxpolicy.go           |   66 +
 .../pion/webrtc/v3/rtpcapabilities.go         |    9 +
 .../github.com/pion/webrtc/v3/rtpcodec.go     |  107 +
 .../pion/webrtc/v3/rtpcodingparameters.go     |   10 +
 .../pion/webrtc/v3/rtpdecodingparameters.go   |    8 +
 .../pion/webrtc/v3/rtpencodingparameters.go   |    8 +
 .../pion/webrtc/v3/rtpreceiveparameters.go    |    6 +
 .../github.com/pion/webrtc/v3/rtpreceiver.go  |  361 +
 .../github.com/pion/webrtc/v3/rtpsender.go    |  254 +
 .../pion/webrtc/v3/rtpsendparameters.go       |    7 +
 .../pion/webrtc/v3/rtptransceiver.go          |  187 +
 .../pion/webrtc/v3/rtptransceiverdirection.go |   85 +
 .../pion/webrtc/v3/rtptransceiverinit.go      |   12 +
 .../pion/webrtc/v3/sctpcapabilities.go        |    6 +
 .../pion/webrtc/v3/sctptransport.go           |  379 +
 .../pion/webrtc/v3/sctptransportstate.go      |   54 +
 .../vendor/github.com/pion/webrtc/v3/sdp.go   |  643 ++
 .../github.com/pion/webrtc/v3/sdpsemantics.go |   74 +
 .../github.com/pion/webrtc/v3/sdptype.go      |  100 +
 .../pion/webrtc/v3/sessiondescription.go      |   25 +
 .../pion/webrtc/v3/settingengine.go           |  257 +
 .../pion/webrtc/v3/settingengine_js.go        |   19 +
 .../pion/webrtc/v3/signalingstate.go          |  188 +
 .../pion/webrtc/v3/srtp_writer_future.go      |  105 +
 .../vendor/github.com/pion/webrtc/v3/stats.go | 1452 ++++
 .../github.com/pion/webrtc/v3/stats_go.go     |   93 +
 .../github.com/pion/webrtc/v3/track_local.go  |   75 +
 .../pion/webrtc/v3/track_local_static.go      |  242 +
 .../github.com/pion/webrtc/v3/track_remote.go |  183 +
 .../github.com/pion/webrtc/v3/webrtc.go       |   17 +
 .../github.com/pion/webrtc/v3/yarn.lock       |  795 ++
 .../vendor/github.com/pkg/errors/.gitignore   |   24 +
 .../vendor/github.com/pkg/errors/.travis.yml  |   10 +
 .../vendor/github.com/pkg/errors/LICENSE      |   23 +
 .../vendor/github.com/pkg/errors/Makefile     |   44 +
 .../vendor/github.com/pkg/errors/README.md    |   59 +
 .../vendor/github.com/pkg/errors/appveyor.yml |   32 +
 .../vendor/github.com/pkg/errors/errors.go    |  288 +
 .../vendor/github.com/pkg/errors/go113.go     |   38 +
 .../vendor/github.com/pkg/errors/stack.go     |  177 +
 .../vendor/golang.org/x/crypto/AUTHORS        |    3 +
 .../vendor/golang.org/x/crypto/CONTRIBUTORS   |    3 +
 .../vendor/golang.org/x/crypto/LICENSE        |   27 +
 .../vendor/golang.org/x/crypto/PATENTS        |   22 +
 .../golang.org/x/crypto/cryptobyte/asn1.go    |  752 ++
 .../x/crypto/cryptobyte/asn1/asn1.go          |   46 +
 .../golang.org/x/crypto/cryptobyte/builder.go |  337 +
 .../golang.org/x/crypto/cryptobyte/string.go  |  161 +
 .../x/crypto/curve25519/curve25519.go         |   95 +
 .../x/crypto/curve25519/curve25519_amd64.go   |  240 +
 .../x/crypto/curve25519/curve25519_amd64.s    | 1793 +++++
 .../x/crypto/curve25519/curve25519_generic.go |  828 ++
 .../x/crypto/curve25519/curve25519_noasm.go   |   11 +
 .../srs-bench/vendor/golang.org/x/net/AUTHORS |    3 +
 .../vendor/golang.org/x/net/CONTRIBUTORS      |    3 +
 .../srs-bench/vendor/golang.org/x/net/LICENSE |   27 +
 .../srs-bench/vendor/golang.org/x/net/PATENTS |   22 +
 .../vendor/golang.org/x/net/bpf/asm.go        |   41 +
 .../vendor/golang.org/x/net/bpf/constants.go  |  222 +
 .../vendor/golang.org/x/net/bpf/doc.go        |   82 +
 .../golang.org/x/net/bpf/instructions.go      |  726 ++
 .../vendor/golang.org/x/net/bpf/setter.go     |   10 +
 .../vendor/golang.org/x/net/bpf/vm.go         |  150 +
 .../golang.org/x/net/bpf/vm_instructions.go   |  182 +
 .../x/net/dns/dnsmessage/message.go           | 2587 +++++++
 .../golang.org/x/net/internal/iana/const.go   |  223 +
 .../x/net/internal/socket/cmsghdr.go          |   11 +
 .../x/net/internal/socket/cmsghdr_bsd.go      |   13 +
 .../internal/socket/cmsghdr_linux_32bit.go    |   14 +
 .../internal/socket/cmsghdr_linux_64bit.go    |   14 +
 .../internal/socket/cmsghdr_solaris_64bit.go  |   14 +
 .../x/net/internal/socket/cmsghdr_stub.go     |   27 +
 .../x/net/internal/socket/cmsghdr_unix.go     |   21 +
 .../net/internal/socket/cmsghdr_zos_s390x.go  |   25 +
 .../golang.org/x/net/internal/socket/empty.s  |    7 +
 .../x/net/internal/socket/error_unix.go       |   31 +
 .../x/net/internal/socket/error_windows.go    |   26 +
 .../x/net/internal/socket/iovec_32bit.go      |   19 +
 .../x/net/internal/socket/iovec_64bit.go      |   19 +
 .../internal/socket/iovec_solaris_64bit.go    |   19 +
 .../x/net/internal/socket/iovec_stub.go       |   11 +
 .../x/net/internal/socket/mmsghdr_stub.go     |   21 +
 .../x/net/internal/socket/mmsghdr_unix.go     |   42 +
 .../x/net/internal/socket/msghdr_bsd.go       |   39 +
 .../x/net/internal/socket/msghdr_bsdvar.go    |   16 +
 .../x/net/internal/socket/msghdr_linux.go     |   36 +
 .../net/internal/socket/msghdr_linux_32bit.go |   24 +
 .../net/internal/socket/msghdr_linux_64bit.go |   24 +
 .../x/net/internal/socket/msghdr_openbsd.go   |   14 +
 .../internal/socket/msghdr_solaris_64bit.go   |   36 +
 .../x/net/internal/socket/msghdr_stub.go      |   14 +
 .../x/net/internal/socket/msghdr_zos_s390x.go |   36 +
 .../x/net/internal/socket/norace.go           |   12 +
 .../golang.org/x/net/internal/socket/race.go  |   37 +
 .../x/net/internal/socket/rawconn.go          |   64 +
 .../x/net/internal/socket/rawconn_mmsg.go     |   79 +
 .../x/net/internal/socket/rawconn_msg.go      |   79 +
 .../x/net/internal/socket/rawconn_nommsg.go   |   15 +
 .../x/net/internal/socket/rawconn_nomsg.go    |   15 +
 .../x/net/internal/socket/socket.go           |  280 +
 .../golang.org/x/net/internal/socket/sys.go   |   23 +
 .../x/net/internal/socket/sys_bsd.go          |   15 +
 .../x/net/internal/socket/sys_const_unix.go   |   17 +
 .../x/net/internal/socket/sys_const_zos.go    |   17 +
 .../x/net/internal/socket/sys_linkname.go     |   42 +
 .../x/net/internal/socket/sys_linux.go        |   22 +
 .../x/net/internal/socket/sys_linux_386.go    |   53 +
 .../x/net/internal/socket/sys_linux_386.s     |   11 +
 .../x/net/internal/socket/sys_linux_amd64.go  |   10 +
 .../x/net/internal/socket/sys_linux_arm.go    |   10 +
 .../x/net/internal/socket/sys_linux_arm64.go  |   10 +
 .../x/net/internal/socket/sys_linux_mips.go   |   10 +
 .../x/net/internal/socket/sys_linux_mips64.go |   10 +
 .../net/internal/socket/sys_linux_mips64le.go |   10 +
 .../x/net/internal/socket/sys_linux_mipsle.go |   10 +
 .../x/net/internal/socket/sys_linux_ppc64.go  |   10 +
 .../net/internal/socket/sys_linux_ppc64le.go  |   10 +
 .../net/internal/socket/sys_linux_riscv64.go  |   12 +
 .../x/net/internal/socket/sys_linux_s390x.go  |   53 +
 .../x/net/internal/socket/sys_linux_s390x.s   |   11 +
 .../x/net/internal/socket/sys_netbsd.go       |   25 +
 .../x/net/internal/socket/sys_posix.go        |  183 +
 .../x/net/internal/socket/sys_solaris.go      |   59 +
 .../x/net/internal/socket/sys_solaris_amd64.s |   11 +
 .../x/net/internal/socket/sys_stub.go         |   49 +
 .../x/net/internal/socket/sys_unix.go         |   33 +
 .../x/net/internal/socket/sys_windows.go      |   71 +
 .../x/net/internal/socket/sys_zos_s390x.go    |   38 +
 .../x/net/internal/socket/sys_zos_s390x.s     |   11 +
 .../x/net/internal/socket/zsys_aix_ppc64.go   |   59 +
 .../x/net/internal/socket/zsys_darwin_386.go  |   50 +
 .../net/internal/socket/zsys_darwin_amd64.go  |   52 +
 .../x/net/internal/socket/zsys_darwin_arm.go  |   50 +
 .../net/internal/socket/zsys_darwin_arm64.go  |   52 +
 .../internal/socket/zsys_dragonfly_amd64.go   |   52 +
 .../x/net/internal/socket/zsys_freebsd_386.go |   50 +
 .../net/internal/socket/zsys_freebsd_amd64.go |   52 +
 .../x/net/internal/socket/zsys_freebsd_arm.go |   50 +
 .../net/internal/socket/zsys_freebsd_arm64.go |   52 +
 .../x/net/internal/socket/zsys_linux_386.go   |   53 +
 .../x/net/internal/socket/zsys_linux_amd64.go |   56 +
 .../x/net/internal/socket/zsys_linux_arm.go   |   53 +
 .../x/net/internal/socket/zsys_linux_arm64.go |   56 +
 .../x/net/internal/socket/zsys_linux_mips.go  |   53 +
 .../net/internal/socket/zsys_linux_mips64.go  |   56 +
 .../internal/socket/zsys_linux_mips64le.go    |   56 +
 .../net/internal/socket/zsys_linux_mipsle.go  |   53 +
 .../x/net/internal/socket/zsys_linux_ppc64.go |   56 +
 .../net/internal/socket/zsys_linux_ppc64le.go |   56 +
 .../net/internal/socket/zsys_linux_riscv64.go |   57 +
 .../x/net/internal/socket/zsys_linux_s390x.go |   56 +
 .../x/net/internal/socket/zsys_netbsd_386.go  |   55 +
 .../net/internal/socket/zsys_netbsd_amd64.go  |   58 +
 .../x/net/internal/socket/zsys_netbsd_arm.go  |   55 +
 .../net/internal/socket/zsys_netbsd_arm64.go  |   58 +
 .../x/net/internal/socket/zsys_openbsd_386.go |   50 +
 .../net/internal/socket/zsys_openbsd_amd64.go |   52 +
 .../x/net/internal/socket/zsys_openbsd_arm.go |   50 +
 .../net/internal/socket/zsys_openbsd_arm64.go |   52 +
 .../net/internal/socket/zsys_solaris_amd64.go |   51 +
 .../x/net/internal/socket/zsys_zos_s390x.go   |   32 +
 .../golang.org/x/net/internal/socks/client.go |  168 +
 .../golang.org/x/net/internal/socks/socks.go  |  317 +
 .../vendor/golang.org/x/net/ipv4/batch.go     |  194 +
 .../vendor/golang.org/x/net/ipv4/control.go   |  144 +
 .../golang.org/x/net/ipv4/control_bsd.go      |   41 +
 .../golang.org/x/net/ipv4/control_pktinfo.go  |   39 +
 .../golang.org/x/net/ipv4/control_stub.go     |   13 +
 .../golang.org/x/net/ipv4/control_unix.go     |   73 +
 .../golang.org/x/net/ipv4/control_windows.go  |   12 +
 .../golang.org/x/net/ipv4/control_zos.go      |   86 +
 .../vendor/golang.org/x/net/ipv4/dgramopt.go  |  264 +
 .../vendor/golang.org/x/net/ipv4/doc.go       |  244 +
 .../vendor/golang.org/x/net/ipv4/endpoint.go  |  186 +
 .../golang.org/x/net/ipv4/genericopt.go       |   55 +
 .../vendor/golang.org/x/net/ipv4/header.go    |  172 +
 .../vendor/golang.org/x/net/ipv4/helper.go    |   77 +
 .../vendor/golang.org/x/net/ipv4/iana.go      |   38 +
 .../vendor/golang.org/x/net/ipv4/icmp.go      |   57 +
 .../golang.org/x/net/ipv4/icmp_linux.go       |   25 +
 .../vendor/golang.org/x/net/ipv4/icmp_stub.go |   25 +
 .../vendor/golang.org/x/net/ipv4/packet.go    |  117 +
 .../vendor/golang.org/x/net/ipv4/payload.go   |   23 +
 .../golang.org/x/net/ipv4/payload_cmsg.go     |   84 +
 .../golang.org/x/net/ipv4/payload_nocmsg.go   |   39 +
 .../vendor/golang.org/x/net/ipv4/sockopt.go   |   44 +
 .../golang.org/x/net/ipv4/sockopt_posix.go    |   71 +
 .../golang.org/x/net/ipv4/sockopt_stub.go     |   42 +
 .../vendor/golang.org/x/net/ipv4/sys_aix.go   |   38 +
 .../golang.org/x/net/ipv4/sys_asmreq.go       |  122 +
 .../golang.org/x/net/ipv4/sys_asmreq_stub.go  |   25 +
 .../golang.org/x/net/ipv4/sys_asmreqn.go      |   42 +
 .../golang.org/x/net/ipv4/sys_asmreqn_stub.go |   21 +
 .../vendor/golang.org/x/net/ipv4/sys_bpf.go   |   24 +
 .../golang.org/x/net/ipv4/sys_bpf_stub.go     |   16 +
 .../vendor/golang.org/x/net/ipv4/sys_bsd.go   |   37 +
 .../golang.org/x/net/ipv4/sys_darwin.go       |   65 +
 .../golang.org/x/net/ipv4/sys_dragonfly.go    |   35 +
 .../golang.org/x/net/ipv4/sys_freebsd.go      |   76 +
 .../vendor/golang.org/x/net/ipv4/sys_linux.go |   60 +
 .../golang.org/x/net/ipv4/sys_solaris.go      |   57 +
 .../golang.org/x/net/ipv4/sys_ssmreq.go       |   52 +
 .../golang.org/x/net/ipv4/sys_ssmreq_stub.go  |   21 +
 .../vendor/golang.org/x/net/ipv4/sys_stub.go  |   13 +
 .../golang.org/x/net/ipv4/sys_windows.go      |   67 +
 .../vendor/golang.org/x/net/ipv4/sys_zos.go   |   55 +
 .../golang.org/x/net/ipv4/zsys_aix_ppc64.go   |   33 +
 .../golang.org/x/net/ipv4/zsys_darwin.go      |   99 +
 .../golang.org/x/net/ipv4/zsys_dragonfly.go   |   31 +
 .../golang.org/x/net/ipv4/zsys_freebsd_386.go |   93 +
 .../x/net/ipv4/zsys_freebsd_amd64.go          |   95 +
 .../golang.org/x/net/ipv4/zsys_freebsd_arm.go |   95 +
 .../x/net/ipv4/zsys_freebsd_arm64.go          |   93 +
 .../golang.org/x/net/ipv4/zsys_linux_386.go   |  130 +
 .../golang.org/x/net/ipv4/zsys_linux_amd64.go |  132 +
 .../golang.org/x/net/ipv4/zsys_linux_arm.go   |  130 +
 .../golang.org/x/net/ipv4/zsys_linux_arm64.go |  132 +
 .../golang.org/x/net/ipv4/zsys_linux_mips.go  |  130 +
 .../x/net/ipv4/zsys_linux_mips64.go           |  132 +
 .../x/net/ipv4/zsys_linux_mips64le.go         |  132 +
 .../x/net/ipv4/zsys_linux_mipsle.go           |  130 +
 .../golang.org/x/net/ipv4/zsys_linux_ppc.go   |  130 +
 .../golang.org/x/net/ipv4/zsys_linux_ppc64.go |  132 +
 .../x/net/ipv4/zsys_linux_ppc64le.go          |  132 +
 .../x/net/ipv4/zsys_linux_riscv64.go          |  134 +
 .../golang.org/x/net/ipv4/zsys_linux_s390x.go |  132 +
 .../golang.org/x/net/ipv4/zsys_netbsd.go      |   30 +
 .../golang.org/x/net/ipv4/zsys_openbsd.go     |   30 +
 .../golang.org/x/net/ipv4/zsys_solaris.go     |  100 +
 .../golang.org/x/net/ipv4/zsys_zos_s390x.go   |   80 +
 .../vendor/golang.org/x/net/proxy/dial.go     |   54 +
 .../vendor/golang.org/x/net/proxy/direct.go   |   31 +
 .../vendor/golang.org/x/net/proxy/per_host.go |  155 +
 .../vendor/golang.org/x/net/proxy/proxy.go    |  149 +
 .../vendor/golang.org/x/net/proxy/socks5.go   |   42 +
 .../srs-bench/vendor/golang.org/x/sys/AUTHORS |    3 +
 .../vendor/golang.org/x/sys/CONTRIBUTORS      |    3 +
 .../srs-bench/vendor/golang.org/x/sys/LICENSE |   27 +
 .../srs-bench/vendor/golang.org/x/sys/PATENTS |   22 +
 .../sys/internal/unsafeheader/unsafeheader.go |   30 +
 .../vendor/golang.org/x/sys/unix/.gitignore   |    2 +
 .../vendor/golang.org/x/sys/unix/README.md    |  184 +
 .../golang.org/x/sys/unix/affinity_linux.go   |   86 +
 .../vendor/golang.org/x/sys/unix/aliases.go   |   14 +
 .../golang.org/x/sys/unix/asm_aix_ppc64.s     |   17 +
 .../golang.org/x/sys/unix/asm_darwin_386.s    |   29 +
 .../golang.org/x/sys/unix/asm_darwin_amd64.s  |   29 +
 .../golang.org/x/sys/unix/asm_darwin_arm.s    |   30 +
 .../golang.org/x/sys/unix/asm_darwin_arm64.s  |   30 +
 .../x/sys/unix/asm_dragonfly_amd64.s          |   29 +
 .../golang.org/x/sys/unix/asm_freebsd_386.s   |   29 +
 .../golang.org/x/sys/unix/asm_freebsd_amd64.s |   29 +
 .../golang.org/x/sys/unix/asm_freebsd_arm.s   |   29 +
 .../golang.org/x/sys/unix/asm_freebsd_arm64.s |   29 +
 .../golang.org/x/sys/unix/asm_linux_386.s     |   65 +
 .../golang.org/x/sys/unix/asm_linux_amd64.s   |   57 +
 .../golang.org/x/sys/unix/asm_linux_arm.s     |   56 +
 .../golang.org/x/sys/unix/asm_linux_arm64.s   |   52 +
 .../golang.org/x/sys/unix/asm_linux_mips64x.s |   56 +
 .../golang.org/x/sys/unix/asm_linux_mipsx.s   |   54 +
 .../golang.org/x/sys/unix/asm_linux_ppc64x.s  |   44 +
 .../golang.org/x/sys/unix/asm_linux_riscv64.s |   47 +
 .../golang.org/x/sys/unix/asm_linux_s390x.s   |   56 +
 .../golang.org/x/sys/unix/asm_netbsd_386.s    |   29 +
 .../golang.org/x/sys/unix/asm_netbsd_amd64.s  |   29 +
 .../golang.org/x/sys/unix/asm_netbsd_arm.s    |   29 +
 .../golang.org/x/sys/unix/asm_netbsd_arm64.s  |   29 +
 .../golang.org/x/sys/unix/asm_openbsd_386.s   |   29 +
 .../golang.org/x/sys/unix/asm_openbsd_amd64.s |   29 +
 .../golang.org/x/sys/unix/asm_openbsd_arm.s   |   29 +
 .../golang.org/x/sys/unix/asm_openbsd_arm64.s |   29 +
 .../x/sys/unix/asm_openbsd_mips64.s           |   29 +
 .../golang.org/x/sys/unix/asm_solaris_amd64.s |   17 +
 .../golang.org/x/sys/unix/bluetooth_linux.go  |   36 +
 .../golang.org/x/sys/unix/cap_freebsd.go      |  195 +
 .../vendor/golang.org/x/sys/unix/constants.go |   13 +
 .../golang.org/x/sys/unix/dev_aix_ppc.go      |   27 +
 .../golang.org/x/sys/unix/dev_aix_ppc64.go    |   29 +
 .../golang.org/x/sys/unix/dev_darwin.go       |   24 +
 .../golang.org/x/sys/unix/dev_dragonfly.go    |   30 +
 .../golang.org/x/sys/unix/dev_freebsd.go      |   30 +
 .../vendor/golang.org/x/sys/unix/dev_linux.go |   42 +
 .../golang.org/x/sys/unix/dev_netbsd.go       |   29 +
 .../golang.org/x/sys/unix/dev_openbsd.go      |   29 +
 .../vendor/golang.org/x/sys/unix/dirent.go    |  102 +
 .../golang.org/x/sys/unix/endian_big.go       |    9 +
 .../golang.org/x/sys/unix/endian_little.go    |    9 +
 .../vendor/golang.org/x/sys/unix/env_unix.go  |   31 +
 .../x/sys/unix/errors_freebsd_386.go          |  233 +
 .../x/sys/unix/errors_freebsd_amd64.go        |  233 +
 .../x/sys/unix/errors_freebsd_arm.go          |  226 +
 .../x/sys/unix/errors_freebsd_arm64.go        |   17 +
 .../vendor/golang.org/x/sys/unix/fcntl.go     |   36 +
 .../golang.org/x/sys/unix/fcntl_darwin.go     |   24 +
 .../x/sys/unix/fcntl_linux_32bit.go           |   13 +
 .../vendor/golang.org/x/sys/unix/fdset.go     |   29 +
 .../vendor/golang.org/x/sys/unix/gccgo.go     |   60 +
 .../vendor/golang.org/x/sys/unix/gccgo_c.c    |   45 +
 .../x/sys/unix/gccgo_linux_amd64.go           |   20 +
 .../vendor/golang.org/x/sys/unix/ioctl.go     |   74 +
 .../vendor/golang.org/x/sys/unix/mkall.sh     |  243 +
 .../vendor/golang.org/x/sys/unix/mkerrors.sh  |  714 ++
 .../golang.org/x/sys/unix/pagesize_unix.go    |   15 +
 .../golang.org/x/sys/unix/pledge_openbsd.go   |  163 +
 .../vendor/golang.org/x/sys/unix/race.go      |   30 +
 .../vendor/golang.org/x/sys/unix/race0.go     |   25 +
 .../x/sys/unix/readdirent_getdents.go         |   12 +
 .../x/sys/unix/readdirent_getdirentries.go    |   19 +
 .../x/sys/unix/sockcmsg_dragonfly.go          |   16 +
 .../golang.org/x/sys/unix/sockcmsg_linux.go   |   36 +
 .../golang.org/x/sys/unix/sockcmsg_unix.go    |   92 +
 .../x/sys/unix/sockcmsg_unix_other.go         |   42 +
 .../vendor/golang.org/x/sys/unix/str.go       |   26 +
 .../vendor/golang.org/x/sys/unix/syscall.go   |   53 +
 .../golang.org/x/sys/unix/syscall_aix.go      |  536 ++
 .../golang.org/x/sys/unix/syscall_aix_ppc.go  |   54 +
 .../x/sys/unix/syscall_aix_ppc64.go           |   85 +
 .../golang.org/x/sys/unix/syscall_bsd.go      |  663 ++
 .../x/sys/unix/syscall_darwin.1_12.go         |   31 +
 .../x/sys/unix/syscall_darwin.1_13.go         |  108 +
 .../golang.org/x/sys/unix/syscall_darwin.go   |  605 ++
 .../x/sys/unix/syscall_darwin_386.go          |   53 +
 .../x/sys/unix/syscall_darwin_amd64.go        |   53 +
 .../x/sys/unix/syscall_darwin_arm.go          |   53 +
 .../x/sys/unix/syscall_darwin_arm64.go        |   55 +
 .../x/sys/unix/syscall_darwin_libSystem.go    |   33 +
 .../x/sys/unix/syscall_dragonfly.go           |  524 ++
 .../x/sys/unix/syscall_dragonfly_amd64.go     |   56 +
 .../golang.org/x/sys/unix/syscall_freebsd.go  |  859 +++
 .../x/sys/unix/syscall_freebsd_386.go         |   66 +
 .../x/sys/unix/syscall_freebsd_amd64.go       |   66 +
 .../x/sys/unix/syscall_freebsd_arm.go         |   62 +
 .../x/sys/unix/syscall_freebsd_arm64.go       |   62 +
 .../golang.org/x/sys/unix/syscall_illumos.go  |   90 +
 .../golang.org/x/sys/unix/syscall_linux.go    | 2328 ++++++
 .../x/sys/unix/syscall_linux_386.go           |  390 +
 .../x/sys/unix/syscall_linux_amd64.go         |  194 +
 .../x/sys/unix/syscall_linux_amd64_gc.go      |   13 +
 .../x/sys/unix/syscall_linux_arm.go           |  286 +
 .../x/sys/unix/syscall_linux_arm64.go         |  245 +
 .../golang.org/x/sys/unix/syscall_linux_gc.go |   14 +
 .../x/sys/unix/syscall_linux_gc_386.go        |   16 +
 .../x/sys/unix/syscall_linux_gc_arm.go        |   13 +
 .../x/sys/unix/syscall_linux_gccgo_386.go     |   30 +
 .../x/sys/unix/syscall_linux_gccgo_arm.go     |   20 +
 .../x/sys/unix/syscall_linux_mips64x.go       |  230 +
 .../x/sys/unix/syscall_linux_mipsx.go         |  238 +
 .../x/sys/unix/syscall_linux_ppc64x.go        |  156 +
 .../x/sys/unix/syscall_linux_riscv64.go       |  230 +
 .../x/sys/unix/syscall_linux_s390x.go         |  342 +
 .../x/sys/unix/syscall_linux_sparc64.go       |  151 +
 .../golang.org/x/sys/unix/syscall_netbsd.go   |  599 ++
 .../x/sys/unix/syscall_netbsd_386.go          |   37 +
 .../x/sys/unix/syscall_netbsd_amd64.go        |   37 +
 .../x/sys/unix/syscall_netbsd_arm.go          |   37 +
 .../x/sys/unix/syscall_netbsd_arm64.go        |   37 +
 .../golang.org/x/sys/unix/syscall_openbsd.go  |  386 +
 .../x/sys/unix/syscall_openbsd_386.go         |   41 +
 .../x/sys/unix/syscall_openbsd_amd64.go       |   41 +
 .../x/sys/unix/syscall_openbsd_arm.go         |   41 +
 .../x/sys/unix/syscall_openbsd_arm64.go       |   41 +
 .../x/sys/unix/syscall_openbsd_mips64.go      |   35 +
 .../golang.org/x/sys/unix/syscall_solaris.go  |  724 ++
 .../x/sys/unix/syscall_solaris_amd64.go       |   27 +
 .../golang.org/x/sys/unix/syscall_unix.go     |  430 ++
 .../golang.org/x/sys/unix/syscall_unix_gc.go  |   15 +
 .../x/sys/unix/syscall_unix_gc_ppc64x.go      |   24 +
 .../golang.org/x/sys/unix/timestruct.go       |   82 +
 .../golang.org/x/sys/unix/unveil_openbsd.go   |   42 +
 .../vendor/golang.org/x/sys/unix/xattr_bsd.go |  240 +
 .../golang.org/x/sys/unix/zerrors_aix_ppc.go  | 1384 ++++
 .../x/sys/unix/zerrors_aix_ppc64.go           | 1385 ++++
 .../x/sys/unix/zerrors_darwin_386.go          | 1786 +++++
 .../x/sys/unix/zerrors_darwin_amd64.go        | 1786 +++++
 .../x/sys/unix/zerrors_darwin_arm.go          | 1786 +++++
 .../x/sys/unix/zerrors_darwin_arm64.go        | 1786 +++++
 .../x/sys/unix/zerrors_dragonfly_amd64.go     | 1651 ++++
 .../x/sys/unix/zerrors_freebsd_386.go         | 1936 +++++
 .../x/sys/unix/zerrors_freebsd_amd64.go       | 1935 +++++
 .../x/sys/unix/zerrors_freebsd_arm.go         | 1825 +++++
 .../x/sys/unix/zerrors_freebsd_arm64.go       | 1936 +++++
 .../golang.org/x/sys/unix/zerrors_linux.go    | 2536 ++++++
 .../x/sys/unix/zerrors_linux_386.go           |  790 ++
 .../x/sys/unix/zerrors_linux_amd64.go         |  790 ++
 .../x/sys/unix/zerrors_linux_arm.go           |  796 ++
 .../x/sys/unix/zerrors_linux_arm64.go         |  784 ++
 .../x/sys/unix/zerrors_linux_mips.go          |  797 ++
 .../x/sys/unix/zerrors_linux_mips64.go        |  797 ++
 .../x/sys/unix/zerrors_linux_mips64le.go      |  797 ++
 .../x/sys/unix/zerrors_linux_mipsle.go        |  797 ++
 .../x/sys/unix/zerrors_linux_ppc64.go         |  853 ++
 .../x/sys/unix/zerrors_linux_ppc64le.go       |  853 ++
 .../x/sys/unix/zerrors_linux_riscv64.go       |  777 ++
 .../x/sys/unix/zerrors_linux_s390x.go         |  850 ++
 .../x/sys/unix/zerrors_linux_sparc64.go       |  847 ++
 .../x/sys/unix/zerrors_netbsd_386.go          | 1779 +++++
 .../x/sys/unix/zerrors_netbsd_amd64.go        | 1769 +++++
 .../x/sys/unix/zerrors_netbsd_arm.go          | 1758 +++++
 .../x/sys/unix/zerrors_netbsd_arm64.go        | 1769 +++++
 .../x/sys/unix/zerrors_openbsd_386.go         | 1664 ++++
 .../x/sys/unix/zerrors_openbsd_amd64.go       | 1774 +++++
 .../x/sys/unix/zerrors_openbsd_arm.go         | 1666 ++++
 .../x/sys/unix/zerrors_openbsd_arm64.go       | 1797 +++++
 .../x/sys/unix/zerrors_openbsd_mips64.go      | 1862 +++++
 .../x/sys/unix/zerrors_solaris_amd64.go       | 1533 ++++
 .../x/sys/unix/zptrace_armnn_linux.go         |   41 +
 .../x/sys/unix/zptrace_linux_arm64.go         |   17 +
 .../x/sys/unix/zptrace_mipsnn_linux.go        |   50 +
 .../x/sys/unix/zptrace_mipsnnle_linux.go      |   50 +
 .../x/sys/unix/zptrace_x86_linux.go           |   80 +
 .../golang.org/x/sys/unix/zsyscall_aix_ppc.go | 1484 ++++
 .../x/sys/unix/zsyscall_aix_ppc64.go          | 1442 ++++
 .../x/sys/unix/zsyscall_aix_ppc64_gc.go       | 1192 +++
 .../x/sys/unix/zsyscall_aix_ppc64_gccgo.go    | 1070 +++
 .../x/sys/unix/zsyscall_darwin_386.1_13.go    |   41 +
 .../x/sys/unix/zsyscall_darwin_386.1_13.s     |   12 +
 .../x/sys/unix/zsyscall_darwin_386.go         | 2574 +++++++
 .../x/sys/unix/zsyscall_darwin_386.s          |  290 +
 .../x/sys/unix/zsyscall_darwin_amd64.1_13.go  |   41 +
 .../x/sys/unix/zsyscall_darwin_amd64.1_13.s   |   12 +
 .../x/sys/unix/zsyscall_darwin_amd64.go       | 2574 +++++++
 .../x/sys/unix/zsyscall_darwin_amd64.s        |  290 +
 .../x/sys/unix/zsyscall_darwin_arm.1_13.go    |   41 +
 .../x/sys/unix/zsyscall_darwin_arm.1_13.s     |   12 +
 .../x/sys/unix/zsyscall_darwin_arm.go         | 2559 ++++++
 .../x/sys/unix/zsyscall_darwin_arm.s          |  288 +
 .../x/sys/unix/zsyscall_darwin_arm64.1_13.go  |   41 +
 .../x/sys/unix/zsyscall_darwin_arm64.1_13.s   |   12 +
 .../x/sys/unix/zsyscall_darwin_arm64.go       | 2559 ++++++
 .../x/sys/unix/zsyscall_darwin_arm64.s        |  288 +
 .../x/sys/unix/zsyscall_dragonfly_amd64.go    | 1666 ++++
 .../x/sys/unix/zsyscall_freebsd_386.go        | 2015 +++++
 .../x/sys/unix/zsyscall_freebsd_amd64.go      | 2015 +++++
 .../x/sys/unix/zsyscall_freebsd_arm.go        | 2015 +++++
 .../x/sys/unix/zsyscall_freebsd_arm64.go      | 2015 +++++
 .../x/sys/unix/zsyscall_illumos_amd64.go      |  114 +
 .../golang.org/x/sys/unix/zsyscall_linux.go   | 1933 +++++
 .../x/sys/unix/zsyscall_linux_386.go          |  578 ++
 .../x/sys/unix/zsyscall_linux_amd64.go        |  745 ++
 .../x/sys/unix/zsyscall_linux_arm.go          |  715 ++
 .../x/sys/unix/zsyscall_linux_arm64.go        |  602 ++
 .../x/sys/unix/zsyscall_linux_mips.go         |  758 ++
 .../x/sys/unix/zsyscall_linux_mips64.go       |  729 ++
 .../x/sys/unix/zsyscall_linux_mips64le.go     |  729 ++
 .../x/sys/unix/zsyscall_linux_mipsle.go       |  758 ++
 .../x/sys/unix/zsyscall_linux_ppc64.go        |  807 ++
 .../x/sys/unix/zsyscall_linux_ppc64le.go      |  807 ++
 .../x/sys/unix/zsyscall_linux_riscv64.go      |  582 ++
 .../x/sys/unix/zsyscall_linux_s390x.go        |  577 ++
 .../x/sys/unix/zsyscall_linux_sparc64.go      |  740 ++
 .../x/sys/unix/zsyscall_netbsd_386.go         | 1851 +++++
 .../x/sys/unix/zsyscall_netbsd_amd64.go       | 1851 +++++
 .../x/sys/unix/zsyscall_netbsd_arm.go         | 1851 +++++
 .../x/sys/unix/zsyscall_netbsd_arm64.go       | 1851 +++++
 .../x/sys/unix/zsyscall_openbsd_386.go        | 1692 ++++
 .../x/sys/unix/zsyscall_openbsd_amd64.go      | 1692 ++++
 .../x/sys/unix/zsyscall_openbsd_arm.go        | 1692 ++++
 .../x/sys/unix/zsyscall_openbsd_arm64.go      | 1692 ++++
 .../x/sys/unix/zsyscall_openbsd_mips64.go     | 1692 ++++
 .../x/sys/unix/zsyscall_solaris_amd64.go      | 1954 +++++
 .../x/sys/unix/zsysctl_openbsd_386.go         |  273 +
 .../x/sys/unix/zsysctl_openbsd_amd64.go       |  271 +
 .../x/sys/unix/zsysctl_openbsd_arm.go         |  273 +
 .../x/sys/unix/zsysctl_openbsd_arm64.go       |  275 +
 .../x/sys/unix/zsysctl_openbsd_mips64.go      |  279 +
 .../x/sys/unix/zsysnum_dragonfly_amd64.go     |  315 +
 .../x/sys/unix/zsysnum_freebsd_386.go         |  396 +
 .../x/sys/unix/zsysnum_freebsd_amd64.go       |  396 +
 .../x/sys/unix/zsysnum_freebsd_arm.go         |  396 +
 .../x/sys/unix/zsysnum_freebsd_arm64.go       |  396 +
 .../x/sys/unix/zsysnum_linux_386.go           |  437 ++
 .../x/sys/unix/zsysnum_linux_amd64.go         |  359 +
 .../x/sys/unix/zsysnum_linux_arm.go           |  401 +
 .../x/sys/unix/zsysnum_linux_arm64.go         |  304 +
 .../x/sys/unix/zsysnum_linux_mips.go          |  422 +
 .../x/sys/unix/zsysnum_linux_mips64.go        |  352 +
 .../x/sys/unix/zsysnum_linux_mips64le.go      |  352 +
 .../x/sys/unix/zsysnum_linux_mipsle.go        |  422 +
 .../x/sys/unix/zsysnum_linux_ppc64.go         |  401 +
 .../x/sys/unix/zsysnum_linux_ppc64le.go       |  401 +
 .../x/sys/unix/zsysnum_linux_riscv64.go       |  303 +
 .../x/sys/unix/zsysnum_linux_s390x.go         |  366 +
 .../x/sys/unix/zsysnum_linux_sparc64.go       |  380 +
 .../x/sys/unix/zsysnum_netbsd_386.go          |  274 +
 .../x/sys/unix/zsysnum_netbsd_amd64.go        |  274 +
 .../x/sys/unix/zsysnum_netbsd_arm.go          |  274 +
 .../x/sys/unix/zsysnum_netbsd_arm64.go        |  274 +
 .../x/sys/unix/zsysnum_openbsd_386.go         |  218 +
 .../x/sys/unix/zsysnum_openbsd_amd64.go       |  218 +
 .../x/sys/unix/zsysnum_openbsd_arm.go         |  218 +
 .../x/sys/unix/zsysnum_openbsd_arm64.go       |  217 +
 .../x/sys/unix/zsysnum_openbsd_mips64.go      |  220 +
 .../golang.org/x/sys/unix/ztypes_aix_ppc.go   |  352 +
 .../golang.org/x/sys/unix/ztypes_aix_ppc64.go |  356 +
 .../x/sys/unix/ztypes_darwin_386.go           |  503 ++
 .../x/sys/unix/ztypes_darwin_amd64.go         |  513 ++
 .../x/sys/unix/ztypes_darwin_arm.go           |  504 ++
 .../x/sys/unix/ztypes_darwin_arm64.go         |  513 ++
 .../x/sys/unix/ztypes_dragonfly_amd64.go      |  479 ++
 .../x/sys/unix/ztypes_freebsd_386.go          |  709 ++
 .../x/sys/unix/ztypes_freebsd_amd64.go        |  712 ++
 .../x/sys/unix/ztypes_freebsd_arm.go          |  693 ++
 .../x/sys/unix/ztypes_freebsd_arm64.go        |  690 ++
 .../golang.org/x/sys/unix/ztypes_linux.go     | 2569 ++++++
 .../golang.org/x/sys/unix/ztypes_linux_386.go |  604 ++
 .../x/sys/unix/ztypes_linux_amd64.go          |  621 ++
 .../golang.org/x/sys/unix/ztypes_linux_arm.go |  598 ++
 .../x/sys/unix/ztypes_linux_arm64.go          |  600 ++
 .../x/sys/unix/ztypes_linux_mips.go           |  604 ++
 .../x/sys/unix/ztypes_linux_mips64.go         |  603 ++
 .../x/sys/unix/ztypes_linux_mips64le.go       |  603 ++
 .../x/sys/unix/ztypes_linux_mipsle.go         |  604 ++
 .../x/sys/unix/ztypes_linux_ppc64.go          |  610 ++
 .../x/sys/unix/ztypes_linux_ppc64le.go        |  610 ++
 .../x/sys/unix/ztypes_linux_riscv64.go        |  628 ++
 .../x/sys/unix/ztypes_linux_s390x.go          |  624 ++
 .../x/sys/unix/ztypes_linux_sparc64.go        |  605 ++
 .../x/sys/unix/ztypes_netbsd_386.go           |  498 ++
 .../x/sys/unix/ztypes_netbsd_amd64.go         |  506 ++
 .../x/sys/unix/ztypes_netbsd_arm.go           |  503 ++
 .../x/sys/unix/ztypes_netbsd_arm64.go         |  506 ++
 .../x/sys/unix/ztypes_openbsd_386.go          |  571 ++
 .../x/sys/unix/ztypes_openbsd_amd64.go        |  571 ++
 .../x/sys/unix/ztypes_openbsd_arm.go          |  572 ++
 .../x/sys/unix/ztypes_openbsd_arm64.go        |  565 ++
 .../x/sys/unix/ztypes_openbsd_mips64.go       |  565 ++
 .../x/sys/unix/ztypes_solaris_amd64.go        |  449 ++
 .../golang.org/x/sys/windows/aliases.go       |   13 +
 .../golang.org/x/sys/windows/dll_windows.go   |  415 +
 .../vendor/golang.org/x/sys/windows/empty.s   |    8 +
 .../golang.org/x/sys/windows/env_windows.go   |   54 +
 .../golang.org/x/sys/windows/eventlog.go      |   20 +
 .../golang.org/x/sys/windows/exec_windows.go  |   97 +
 .../x/sys/windows/memory_windows.go           |   31 +
 .../golang.org/x/sys/windows/mkerrors.bash    |   63 +
 .../x/sys/windows/mkknownfolderids.bash       |   27 +
 .../golang.org/x/sys/windows/mksyscall.go     |    9 +
 .../vendor/golang.org/x/sys/windows/race.go   |   30 +
 .../vendor/golang.org/x/sys/windows/race0.go  |   25 +
 .../x/sys/windows/security_windows.go         | 1406 ++++
 .../golang.org/x/sys/windows/service.go       |  231 +
 .../vendor/golang.org/x/sys/windows/str.go    |   22 +
 .../golang.org/x/sys/windows/syscall.go       |   74 +
 .../x/sys/windows/syscall_windows.go          | 1490 ++++
 .../golang.org/x/sys/windows/types_windows.go | 1774 +++++
 .../x/sys/windows/types_windows_386.go        |   35 +
 .../x/sys/windows/types_windows_amd64.go      |   34 +
 .../x/sys/windows/types_windows_arm.go        |   35 +
 .../x/sys/windows/zerrors_windows.go          | 6853 +++++++++++++++++
 .../x/sys/windows/zknownfolderids_windows.go  |  149 +
 .../x/sys/windows/zsyscall_windows.go         | 4083 ++++++++++
 .../vendor/golang.org/x/xerrors/LICENSE       |   27 +
 .../vendor/golang.org/x/xerrors/PATENTS       |   22 +
 .../vendor/golang.org/x/xerrors/README        |    2 +
 .../vendor/golang.org/x/xerrors/adaptor.go    |  193 +
 .../golang.org/x/xerrors/codereview.cfg       |    1 +
 .../vendor/golang.org/x/xerrors/doc.go        |   22 +
 .../vendor/golang.org/x/xerrors/errors.go     |   33 +
 .../vendor/golang.org/x/xerrors/fmt.go        |  187 +
 .../vendor/golang.org/x/xerrors/format.go     |   34 +
 .../vendor/golang.org/x/xerrors/frame.go      |   56 +
 .../vendor/golang.org/x/xerrors/go.mod        |    3 +
 .../golang.org/x/xerrors/internal/internal.go |    8 +
 .../vendor/golang.org/x/xerrors/wrap.go       |  106 +
 trunk/3rdparty/srs-bench/vendor/modules.txt   |   90 +
 1158 files changed, 256967 insertions(+), 3 deletions(-)
 create mode 100644 trunk/3rdparty/srs-bench/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/Makefile
 create mode 100644 trunk/3rdparty/srs-bench/README.md
 create mode 100644 trunk/3rdparty/srs-bench/avatar.ogg
 create mode 100644 trunk/3rdparty/srs-bench/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/go.sum
 create mode 100644 trunk/3rdparty/srs-bench/main.go
 create mode 100644 trunk/3rdparty/srs-bench/rtc/pion_constants.go
 create mode 100644 trunk/3rdparty/srs-bench/rtc/pion_mediaengine.go
 create mode 100644 trunk/3rdparty/srs-bench/rtc/pion_rtpcodec.go
 create mode 100644 trunk/3rdparty/srs-bench/rtc/pion_track_local_static.go
 create mode 100644 trunk/3rdparty/srs-bench/rtc/pion_util.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/.travis.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/CONTRIBUTING.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/CONTRIBUTORS
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/dce.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/doc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/hash.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/marshal.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/node.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/node_js.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/node_net.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/sql.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/time.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/util.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/uuid.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/version1.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/version4.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/errors/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/errors/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/errors/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/errors/stack.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/logger/go17.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/logger/logger.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/logger/pre_go17.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/.golangci.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/DESIGN.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/codecov.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/datachannel.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/go.sum
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/message.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/message_channel_ack.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/message_channel_open.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/renovate.json
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/.editorconfig
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/.golangci.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/Makefile
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/alert.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/application_data.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/certificate.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/change_cipher_spec.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_aes_128_ccm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_go114.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_ecdsa_with_aes_128_ccm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_ecdsa_with_aes_128_ccm8.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_ecdsa_with_aes_128_gcm_sha256.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_ecdsa_with_aes_256_cbc_sha.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_rsa_with_aes_128_gcm_sha256.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_rsa_with_aes_256_cbc_sha.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_psk_with_aes_128_ccm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_psk_with_aes_128_ccm8.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_psk_with_aes_128_gcm_sha256.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/client_certificate_type.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/codecov.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/compression_method.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/config.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/conn.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/content.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/crypto.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/crypto_cbc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/crypto_ccm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/crypto_gcm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/curve_type.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/dtls.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/errors_errno.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/errors_noerrno.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_renegotiation_info.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_server_name.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_supported_elliptic_curves.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_supported_point_formats.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_supported_signature_algorithms.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_use_master_secret.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_use_srtp.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight0handler.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight1handler.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight2handler.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight3handler.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight4handler.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight5handler.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight6handler.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flighthandler.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/fragment_buffer.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/fuzz.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/go.sum
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_cache.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_header.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_certificate.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_certificate_request.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_certificate_verify.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_client_hello.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_client_key_exchange.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_finished.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_hello_verify_request.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_server_hello.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_server_hello_done.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_server_key_exchange.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_random.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshaker.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/hash_algorithm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/internal/closer/closer.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/internal/net/connctx/connctx.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/listener.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/named_curve.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/packet.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/pkg/crypto/ccm/ccm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/pkg/crypto/fingerprint/fingerprint.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/pkg/crypto/fingerprint/hash.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/prf.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/record_layer.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/record_layer_header.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/renovate.json
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/resume.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/signature_algorithm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/signature_hash_algorithm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/srtp_protection_profile.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/state.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/util.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/.golangci.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/agent.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/agent_config.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/agent_stats.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_base.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_host.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_peer_reflexive.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_relay.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_server_reflexive.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidatepair.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidatepair_state.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidaterelatedaddress.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidatetype.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/codecov.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/context.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/external_ip_mapper.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/gather.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/go.sum
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/ice.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/icecontrol.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/mdns.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/networktype.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/priority.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/rand.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/renovate.json
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/role.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/selection.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/stats.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/stun.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/tcp_mux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/tcp_packet_conn.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/tcptype.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/transport.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/url.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/usecandidate.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/util.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/.golangci.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/chain.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/codecov.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/go.sum
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/interceptor.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/noop.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/generator_interceptor.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/generator_option.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/nack.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/receive_log.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/responder_interceptor.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/responder_option.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/send_buffer.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/registry.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/renovate.json
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/streaminfo.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/.golangci.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/.travis.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/go.sum
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/logger.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/scoped.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/.golangci.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/.travis.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/config.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/conn.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/go.sum
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/renovate.json
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/.travis.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/codecov.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/crypto.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/math.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/renovate.json
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/.golangci.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/codecov.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/compound_packet.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/doc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/full_intra_request.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/fuzz.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/go.sum
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/goodbye.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/header.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/packet.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/picture_loss_indication.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/rapid_resynchronization_request.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/raw_packet.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/receiver_estimated_maximum_bitrate.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/receiver_report.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/reception_report.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/renovate.json
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/sender_report.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/slice_loss_indication.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/source_description.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/transport_layer_cc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/transport_layer_nack.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/util.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/.golangci.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/abssendtimeextension.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/audiolevelextension.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecov.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/codecs.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/common.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/error.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/g711_packet.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/g722_packet.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/h264_packet.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/opus_packet.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/vp8_packet.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/vp9_packet.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/depacketizer.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/error.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/go.sum
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/packet.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/packetizer.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/partitionheadchecker.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/rand.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/renovate.json
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/rtp.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/sequencer.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/transportccextension.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/.golangci.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/DESIGN.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/ack_timer.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/association.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/association_stats.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_abort.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_cookie_ack.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_cookie_echo.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_error.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_forward_tsn.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_heartbeat.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_heartbeat_ack.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_init.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_init_ack.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_init_common.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_payload_data.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_reconfig.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_selective_ack.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunkheader.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunktype.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/codecov.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/control_queue.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause_header.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause_invalid_mandatory_parameter.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause_protocol_violation.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause_unrecognized_chunk_type.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/go.sum
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/packet.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_chunk_list.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_forward_tsn_supported.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_heartbeat_info.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_outgoing_reset_request.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_random.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_reconfig_response.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_requested_hmac_algorithm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_state_cookie.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_supported_extensions.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/paramheader.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/paramtype.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/payload_queue.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/pending_queue.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/reassembly_queue.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/renovate.json
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/rtx_timer.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/sctp.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/stream.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/util.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/.golangci.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/base_lexer.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/codecov.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/common_description.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/direction.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/extmap.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/fuzz.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/go.sum
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/jsep.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/marshal.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/media_description.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/renovate.json
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/sdp.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/session_description.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/time_description.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/unmarshal.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/util.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/.golangci.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/DESIGN.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/codecov.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/context.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/go.sum
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/key_derivation.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/keying.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/option.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/protection_profile.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/renovate.json
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/session.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/session_srtcp.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/session_srtp.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtcp.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtp.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtp_cipher.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtp_cipher_aead_aes_gcm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtp_cipher_aes_cm_hmac_sha1.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/stream.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/stream_srtcp.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/stream_srtp.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/util.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.codecov.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.golangci.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.goreleaser.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.travis.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/AUTHORS
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/Dockerfile
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/LICENSE.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/Makefile
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/addr.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/agent.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/appveyor.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/attributes.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/attributes_debug.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/checks.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/checks_debug.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/client.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/errorcode.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/fingerprint.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/fingerprint_debug.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/fuzz.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/go.sum
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/go.test.sh
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/helpers.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/integrity.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/integrity_debug.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/internal/hmac/hmac.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/internal/hmac/pool.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/internal/hmac/vendor.sh
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/message.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/renovate.json
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/stun.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/textattrs.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/uattrs.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/xor.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/xoraddr.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/deadline/deadline.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/packetio/buffer.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/packetio/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/packetio/hardlimit.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/packetio/no_hardlimit.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/replaydetector/fixedbig.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/replaydetector/replaydetector.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/chunk.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/chunk_queue.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/conn.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/conn_map.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/interface.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/nat.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/net.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/resolver.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/router.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/vnet.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/.golangci.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/.goreleaser.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/DESIGN.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/LICENSE.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/client.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/codecov.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/go.sum
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/allocation.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/allocation_manager.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/channel_bind.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/five_tuple.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/permission.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/binding.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/conn.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/periodic_timer.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/permission.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/transaction.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/trylock.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/ipnet/util.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/addr.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/chandata.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/chann.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/data.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/dontfrag.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/evenport.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/fuzz.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/lifetime.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/peeraddr.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/proto.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/relayedaddr.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/reqfamily.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/reqtrans.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/rsrvtoken.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/server.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/stun.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/turn.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/util.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/lt_cred.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/relay_address_generator_none.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/relay_address_generator_range.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/relay_address_generator_static.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/renovate.json
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/server.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/server_config.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/stun_conn.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/.golangci.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/conn.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/go.sum
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/.codacy.yaml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/.eslintrc.json
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/.golangci.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/DESIGN.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/api.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/api_js.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/atomicbool.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/bundlepolicy.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/certificate.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/codecov.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/configuration.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/configuration_common.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/configuration_js.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/constants.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannel.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannel_js.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannel_js_detach.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannelinit.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannelmessage.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannelparameters.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannelstate.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlsfingerprint.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlsparameters.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlsrole.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlstransport.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlstransportstate.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/gathering_complete_promise.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/go.sum
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/ice_go.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecandidate.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecandidateinit.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecandidatepair.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecandidatetype.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecomponent.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceconnectionstate.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecredentialtype.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icegatherer.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icegathererstate.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icegatheringstate.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icegatheroptions.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceparameters.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceprotocol.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icerole.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceserver.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceserver_js.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icetcp.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icetransport.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icetransportpolicy.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icetransportstate.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/interceptor.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/internal/mux/endpoint.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/internal/mux/mux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/internal/mux/muxfunc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/internal/util/util.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/js_compare.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/js_compare_legacy.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/js_utils.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/mediaengine.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/networktype.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/oauthcredential.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/offeransweroptions.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/operations.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/package.json
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/peerconnection.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/peerconnection_js.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/peerconnectionstate.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/h264reader/h264reader.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/h264reader/nalunittype.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/h264writer/h264writer.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/ivfwriter/ivfwriter.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/media.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/oggreader/oggreader.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/oggwriter/oggwriter.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/rtcerr/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/renovate.json
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtcpfeedback.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtcpmuxpolicy.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpcapabilities.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpcodec.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpcodingparameters.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpdecodingparameters.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpencodingparameters.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpreceiveparameters.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpreceiver.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpsender.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpsendparameters.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtptransceiver.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtptransceiverdirection.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtptransceiverinit.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sctpcapabilities.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sctptransport.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sctptransportstate.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sdp.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sdpsemantics.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sdptype.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sessiondescription.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/settingengine.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/settingengine_js.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/signalingstate.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/srtp_writer_future.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/stats.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/stats_go.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/track_local.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/track_local_static.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/track_remote.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/webrtc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/yarn.lock
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/.travis.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/Makefile
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/appveyor.yml
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/go113.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/stack.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/AUTHORS
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/CONTRIBUTORS
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/PATENTS
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/cryptobyte/asn1.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/cryptobyte/asn1/asn1.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/cryptobyte/builder.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/cryptobyte/string.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519_amd64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519_generic.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519_noasm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/AUTHORS
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/CONTRIBUTORS
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/PATENTS
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/asm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/constants.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/doc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/instructions.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/setter.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/vm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/vm_instructions.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/dns/dnsmessage/message.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/iana/const.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_bsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_linux_32bit.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_linux_64bit.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_solaris_64bit.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_stub.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_unix.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_zos_s390x.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/empty.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/error_unix.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/error_windows.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/iovec_32bit.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/iovec_64bit.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/iovec_solaris_64bit.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/iovec_stub.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/mmsghdr_stub.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/mmsghdr_unix.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_bsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_bsdvar.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_linux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_linux_32bit.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_linux_64bit.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_openbsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_solaris_64bit.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_stub.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_zos_s390x.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/norace.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/race.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn_mmsg.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn_msg.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn_nommsg.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn_nomsg.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/socket.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_bsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_const_unix.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_const_zos.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linkname.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_386.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_mips.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_mips64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_mips64le.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_mipsle.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_ppc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_ppc64le.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_riscv64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_s390x.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_s390x.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_netbsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_posix.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_solaris.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_solaris_amd64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_stub.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_unix.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_windows.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_zos_s390x.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_zos_s390x.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_aix_ppc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_darwin_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_darwin_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_darwin_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_darwin_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_dragonfly_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_freebsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_freebsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_freebsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_freebsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_mips.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_mips64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_mips64le.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_mipsle.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_ppc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_ppc64le.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_riscv64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_s390x.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_netbsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_netbsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_netbsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_netbsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_openbsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_openbsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_openbsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_openbsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_solaris_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_zos_s390x.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socks/client.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socks/socks.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/batch.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_bsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_pktinfo.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_stub.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_unix.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_windows.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_zos.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/dgramopt.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/doc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/endpoint.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/genericopt.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/header.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/helper.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/iana.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/icmp.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/icmp_linux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/icmp_stub.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/packet.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/payload.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/payload_cmsg.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/payload_nocmsg.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sockopt.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sockopt_posix.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sockopt_stub.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_aix.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_asmreq.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_asmreq_stub.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_asmreqn.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_asmreqn_stub.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_bpf.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_bpf_stub.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_bsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_darwin.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_dragonfly.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_freebsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_linux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_solaris.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_ssmreq.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_ssmreq_stub.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_stub.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_windows.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_zos.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_aix_ppc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_darwin.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_dragonfly.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_freebsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_freebsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_freebsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_freebsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_mips.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_mips64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_mips64le.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_mipsle.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_ppc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_ppc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_ppc64le.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_riscv64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_s390x.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_netbsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_openbsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_solaris.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_zos_s390x.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/dial.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/direct.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/per_host.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/proxy.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/socks5.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/AUTHORS
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/CONTRIBUTORS
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/PATENTS
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/internal/unsafeheader/unsafeheader.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/.gitignore
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/README.md
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/affinity_linux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/aliases.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_aix_ppc64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_darwin_386.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_darwin_amd64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_darwin_arm.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_darwin_arm64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_dragonfly_amd64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_freebsd_386.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_freebsd_amd64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_freebsd_arm.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_freebsd_arm64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_386.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_amd64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_arm.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_arm64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_mips64x.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_mipsx.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_ppc64x.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_riscv64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_s390x.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_netbsd_386.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_netbsd_amd64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_netbsd_arm.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_netbsd_arm64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_386.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_amd64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_arm.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_arm64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_mips64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_solaris_amd64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/bluetooth_linux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/cap_freebsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/constants.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_aix_ppc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_aix_ppc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_darwin.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_dragonfly.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_freebsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_linux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_netbsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_openbsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dirent.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/endian_big.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/endian_little.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/env_unix.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/errors_freebsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/errors_freebsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/errors_freebsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/errors_freebsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/fcntl.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/fcntl_darwin.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/fcntl_linux_32bit.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/fdset.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/gccgo.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/gccgo_c.c
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/gccgo_linux_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ioctl.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/mkall.sh
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/mkerrors.sh
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/pagesize_unix.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/pledge_openbsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/race.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/race0.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/readdirent_getdents.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/readdirent_getdirentries.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/sockcmsg_dragonfly.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/sockcmsg_linux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/sockcmsg_unix.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/sockcmsg_unix_other.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/str.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_aix.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_aix_ppc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_aix_ppc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_bsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin.1_12.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin.1_13.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_libSystem.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_dragonfly.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_dragonfly_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_illumos.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_amd64_gc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gc_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gc_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gccgo_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gccgo_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_mips64x.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_mipsx.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_ppc64x.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_riscv64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_s390x.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_sparc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_mips64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_solaris.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_solaris_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_unix.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_unix_gc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_unix_gc_ppc64x.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/timestruct.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/unveil_openbsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/xattr_bsd.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_aix_ppc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_aix_ppc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_darwin_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_darwin_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_darwin_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_darwin_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_dragonfly_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_freebsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_freebsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_freebsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_freebsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_mips.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_mips64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_mips64le.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_mipsle.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64le.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_riscv64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_s390x.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_sparc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_netbsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_netbsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_netbsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_netbsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_mips64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_solaris_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_armnn_linux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_linux_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_mipsnn_linux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_mipsnnle_linux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_x86_linux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_aix_ppc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_aix_ppc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_aix_ppc64_gc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_aix_ppc64_gccgo.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_386.1_13.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_386.1_13.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_386.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_amd64.1_13.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_amd64.1_13.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_amd64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm.1_13.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm.1_13.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm64.1_13.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm64.1_13.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm64.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_dragonfly_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_freebsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_freebsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_freebsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_freebsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_illumos_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_mips.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_mips64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_mips64le.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_mipsle.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_ppc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_ppc64le.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_riscv64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_s390x.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_sparc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_netbsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_netbsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_netbsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_netbsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_mips64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_solaris_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_mips64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_dragonfly_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_freebsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_freebsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_freebsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_freebsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_mips.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_mips64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_mips64le.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_mipsle.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_ppc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_ppc64le.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_riscv64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_s390x.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_sparc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_netbsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_netbsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_netbsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_netbsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_mips64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_aix_ppc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_aix_ppc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_darwin_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_darwin_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_darwin_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_darwin_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_dragonfly_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_freebsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_freebsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_freebsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_freebsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_mips.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_mips64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_mips64le.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_mipsle.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64le.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_riscv64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_s390x.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_sparc64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_netbsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_netbsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_netbsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_netbsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_arm64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_mips64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_solaris_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/aliases.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/dll_windows.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/empty.s
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/env_windows.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/eventlog.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/exec_windows.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/memory_windows.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/mkerrors.bash
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/mksyscall.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/race.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/race0.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/security_windows.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/service.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/str.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/syscall.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/syscall_windows.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/types_windows.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/types_windows_386.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/types_windows_amd64.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/types_windows_arm.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/zerrors_windows.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/zknownfolderids_windows.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/zsyscall_windows.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/LICENSE
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/PATENTS
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/README
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/adaptor.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/codereview.cfg
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/doc.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/errors.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/fmt.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/format.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/frame.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/go.mod
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/internal/internal.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/wrap.go
 create mode 100644 trunk/3rdparty/srs-bench/vendor/modules.txt

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 7c9ec8a18..97faf3127 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -57,10 +57,8 @@ jobs:
       - run: |
           echo "Build and run SRS with regression config" &&
           cd trunk && ./configure && make && ./objs/srs -c conf/regression-test.conf &&
-          echo "Clone srs-bench for regression test" &&
-          cd 3rdparty && git clone -b feature/srs --depth=1 https://github.com/ossrs/srs-bench &&
           echo "Run srs-bench regression test" &&
-          cd srs-bench && make && ./objs/srs_test -test.v
+          cd 3rdparty/srs-bench && make && ./objs/srs_test -test.v
 workflows:
   version: 2
   build_and_test:
diff --git a/trunk/3rdparty/srs-bench/.gitignore b/trunk/3rdparty/srs-bench/.gitignore
new file mode 100644
index 000000000..589c6ab3a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/.gitignore
@@ -0,0 +1,8 @@
+.idea
+objs
+*.ogg
+*.ivf
+*.h264
+.DS_Store
+
+.format.txt
diff --git a/trunk/3rdparty/srs-bench/Makefile b/trunk/3rdparty/srs-bench/Makefile
new file mode 100644
index 000000000..ea7341c84
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/Makefile
@@ -0,0 +1,25 @@
+.PHONY: help default clean bench test
+
+default: bench test
+
+clean:
+	rm -f ./objs/srs_bench ./objs/srs_test
+
+.format.txt: *.go rtc/*.go srs/*.go
+	gofmt -w .
+	echo "done" > .format.txt
+
+bench: ./objs/srs_bench
+
+./objs/srs_bench: .format.txt *.go rtc/*.go srs/*.go Makefile
+	go build -mod=vendor -o objs/srs_bench .
+
+test: ./objs/srs_test
+
+./objs/srs_test: .format.txt *.go rtc/*.go srs/*.go Makefile
+	go test ./srs -c -o ./objs/srs_test
+
+help:
+	@echo "Usage: make [bench|test]"
+	@echo "     bench       Make the bench to ./objs/srs_bench"
+	@echo "     test        Make the test tool to ./objs/srs_test"
diff --git a/trunk/3rdparty/srs-bench/README.md b/trunk/3rdparty/srs-bench/README.md
new file mode 100644
index 000000000..c8ccb3cb1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/README.md
@@ -0,0 +1,149 @@
+# srs-bench
+
+WebRTC benchmark on [pion/webrtc](https://github.com/pion/webrtc) for [SRS](https://github.com/ossrs/srs).
+
+## Usage
+
+编译和使用：
+
+```bash
+git clone https://github.com/ossrs/srs-bench.git && git checkout feature/rtc && 
+make && ./objs/srs_bench -h
+```
+
+## Player for Live
+
+直播播放压测，一个流，很多个播放。
+
+首先，推流到SRS：
+
+```bash
+ffmpeg -re -i doc/source.200kbps.768x320.flv -c copy -f flv -y rtmp://localhost/live/livestream
+```
+
+然后，启动压测，比如100个：
+
+```bash
+./objs/srs_bench -sr webrtc://localhost/live/livestream -nn 100
+```
+
+## Publisher for Live or RTC
+
+直播或会议场景推流压测，一般会推多个流。
+
+首先，推流依赖于录制的文件，请参考[DVR](#dvr)。
+
+然后，启动推流压测，比如100个流：
+
+```bash
+./objs/srs_bench -pr webrtc://localhost/live/livestream_%d -sn 100 -sa a.ogg -sv v.h264 -fps 25
+```
+
+> 注意：帧率是原始视频的帧率，由于264中没有这个信息所以需要传递。
+
+## Multipel Player or Publisher for RTC
+
+会议场景的播放压测，会多个客户端播放多个流，比如3人会议，那么就有3个推流，每个流有2个播放。
+
+首先，启动推流压测，比如3个流：
+
+```bash
+./objs/srs_bench -pr webrtc://localhost/live/livestream_%d -sn 3 -sa a.ogg -sv v.h264 -fps 25
+```
+
+然后，每个流都启动播放压测，比如每个流2个播放：
+
+```bash
+./objs/srs_bench -sr webrtc://localhost/live/livestream_%d -sn 3 -nn 2
+```
+
+> 备注：压测都是基于流，可以任意设计推流和播放的流路数，实现不同的场景。
+
+> 备注：URL的变量格式参考Go的`fmt.Sprintf`，比如可以用`webrtc://localhost/live/livestream_%03d`。
+
+## DVR
+
+录制场景，主要是把内容录制下来后，可分析，也可以用于推流。
+
+首先，推流到SRS，参考[live](#player-for-live)。
+
+```bash
+ffmpeg -re -i doc/source.200kbps.768x320.flv -c copy -f flv -y rtmp://localhost/live/livestream
+```
+
+然后，启动录制：
+
+```bash
+./objs/srs_bench -sr webrtc://localhost/live/livestream -da a.ogg -dv v.h264
+```
+
+> 备注：录制下来的`a.ogg`和`v.h264`可以用做推流。
+
+## RTC Plaintext
+
+压测RTC明文播放：
+
+首先，推流到SRS：
+
+```bash
+ffmpeg -re -i doc/source.200kbps.768x320.flv -c copy -f flv -y rtmp://localhost/live/livestream
+```
+
+然后，启动压测，指定是明文（非加密），比如100个：
+
+```bash
+./objs/srs_bench -sr webrtc://localhost/live/livestream?encrypt=false -nn 100
+```
+
+> Note: 可以传递更多参数，详细参考SRS支持的参数。
+
+## Regression Test
+
+回归测试需要先启动[SRS](https://github.com/ossrs/srs/issues/307)，支持WebRTC推拉流：
+
+```bash
+eip=$(ifconfig en0 inet| grep 'inet '|awk '{print $2}')
+if [[ ! -z $eip ]]; then 
+  docker run -p 1935:1935 -p 8080:8080 -p 1985:1985 -p 8000:8000/udp \
+      --rm --env CANDIDATE=$(ifconfig en0 inet| grep 'inet '|awk '{print $2}')\
+      registry.cn-hangzhou.aliyuncs.com/ossrs/srs:v4.0.76 objs/srs -c conf/rtc.conf
+fi
+```
+
+然后运行回归测试用例，如果只跑一次，可以直接运行：
+
+```bash
+go test ./srs -v
+```
+
+也可以用make编译出重复使用的二进制：
+
+```bash
+make test && ./objs/srs_test -test.v
+```
+
+可以给回归测试传参数，这样可以测试不同的序列，比如：
+
+```bash
+go test ./srs -v -srs-server=127.0.0.1
+# Or
+make test && ./objs/srs_test -test.v -srs-server=127.0.0.1
+```
+
+支持的参数如下：
+
+* `-srs-server`，RTC服务器地址。默认值：`127.0.0.1`
+* `-srs-stream`，RTC流地址。默认值：`/rtc/regression`
+* `-srs-log`，是否开启详细日志。默认值：`false`
+* `-srs-timeout`，每个Case的超时时间，毫秒。默认值：`3000`，即3秒。
+* `-srs-play-pli`，播放时，PLI的间隔，毫秒。默认值：`5000`，即5秒。
+* `-srs-play-ok-packets`，播放时，收到多少个包认为是测试通过，默认值：`10`
+* `-srs-publish-audio`，推流时，使用的音频文件。默认值：`avatar.ogg`
+* `-srs-publish-video`，推流时，使用的视频文件。默认值：`avatar.h264`
+* `-srs-publish-video-fps`，推流时，视频文件的FPS。默认值：`25`
+
+其他不常用参数：
+
+* `-srs-https`，是否连接HTTPS-API。默认值：`false`，即连接HTTP-API。
+
+2021.01, Winlin
diff --git a/trunk/3rdparty/srs-bench/avatar.ogg b/trunk/3rdparty/srs-bench/avatar.ogg
new file mode 100644
index 0000000000000000000000000000000000000000..cd9b711df1e2e093d46bda1916de17c7c9acaaaa
GIT binary patch
literal 207227
zcmYJ5cRbbKAICq}j%!o)PWImOl8|oMD`bz5y+;`rmu|MK$O=UW8QDV09+j1BlD$Xr
z`_TRV?)~dkkK3c?=X~DhectO_O?!J?01H5Wq~aXXE@U3AMI(e#)6Lsc-PY0uf(4L<
zG+cf~^Wy9O|6F_>0{$t4tKR`aeercYOM6dT@Ne86y1HC`?cYDR_|nDa;vZc6XEgg=
zq7eT-P8F;fzgKDY-xX{>EDB;IlvI-9q`50zQLBzCR^qQ+_!h4NA777zZ<RmaO|d#s
zUiH(!{zgb-o#pf5ZEqg)cWj3b<dwOS!z45B(XP!<Y=4uFAgZ?(%<u~kIp(46kx|rX
zk+H$gV*#%A=Ts}1tM?+{2xxCF<R4TU_9fFL)P?koTj7QH{dw3=b>Q^%Kz?5^BLMOp
zceDH;QH_?|rkW$_IbVOE!uu4jNE41NJCZ4lX`*gegloNWo9)rCTE5lleYuG~l0l-t
zXgyerp~-vc^z0;eLBiTGohS*Bqf9+(>-g;7CpXxdiEQxO;sMHUIn_eADmXBl)({*N
z`9G#md<+u~D65-RwjjPB6XjRgl=wt>Q4Tt(%vgz6q$|c#2qm%`RA#84ALJyAbj;Lb
z*K;?7V`=-vxV>GcIMx{!2lNA{GIa8iijDYgOW(Np9X9=Agg?6~L6CxeOwX88<T!tC
zemRxt=!2k0%VQgS2n-;u%c<VsgyDpAqu?qi*gqsCA`H^St1V<86u3m9vOQFsqhk>p
za+xC~yE3Wc;2P^9wYY2i-ExT5;C&0BX^RqU;8b$8Gfdno4VR#~%zEo)y1m(iqCon|
z))FFS>wdKsOUA|*LXy7hig$v-zsI!PgL~3m?MU*vHYG%HF%3Q7r~t6u`IBl40c2#@
z08|ARZBC>ZBs@^&myq&9yf5CI?V+YLAK^7BNr8ha^=zX>?k3!^6cXB*Pd)FHbCS2<
z5M5t=7uEjUCu!-L0oJ6A``ewcA9-ZDJ%dQAwLJ3YBNSqXT1Sxq>WD@mb4%@?hXMiP
zE58>uo2KL3$}`g;<4AzYEvLGK0M?4rO8^I2-O;8*fdRUBgJMnU+vwNEMNfVoAiMF1
zcSY5VGCU}g&fNE-ac?O!>37>GmwXlXi_SR5>{IDyr_wL88wznhZB;DFk0m2H4=p;|
z!zTB9jZb{+?j~eMLIhn5$MmYYM2@)H^2?L|o`2x;Xzt;_pMn7l(41=Q>)=~MAW<lo
z721-nVvq<xsiJH-1PQ*hB<>F`>gTOT8*WDhz=XR?&3ZxxmEm?h)v1SQMwe5Rz5L`K
zcWg@DpB>q<{*DBso%JNg6nD5EKIV^|BV4K$>e`N&J;|1_)6EkdUvXDuqbeFR5Q`K!
zYOl{Pik~(1B|>VPbH+0+06?;F>89WhVG63&RsaWy22-NLfL#G474jen5)S$THXF$P
z!y{i&%_9pzm!?zKT$j~VQ!EQ>wJaR3NRb7kMY&y{y1jHtQDaSvK;~mF#=nle$%@b~
zgAeD9i#|__-g}=_aKHSo&-EL^gb&7UXHQ{kBP(NFCd1TGW@3)RBkWI-l<wyfZS>$g
z<G}k%2Cy3CRQC_T5up_100EA>3fi`qFnENZ3`&$&f`nY)S#SG(-9fF9i5-!^$|UVQ
zxSq+)E(ntq4Jr23e)INM*t)S13^2r}M7{Ck+l_XXDd=8Var<Bl%TiS8JjMSU$T9q*
zHDz!edqMb+BQ^WSZ~}6U)n#(9g{EiW7ip}3KCVY2{~qs7=@C<4E6^|(Hk=jB%8tb*
z3}Gijpv{aG!*;PN*Ser9kkEf@em(@UzqJsF+hwmtpFaZVj8@8`osAMCTXI;1K39As
zis;BxTdPh-NsugNy?%9|82@YRw4B_AQE)LLG@-&g&-Ce!p^1<5OQR=mCjxEmsIqe<
zG`RXetp#6-AISJWp-$bZOslvj1GA+Eu<=ib?#@&r5ilGS0znpnHn{5;I4CH8(1#2|
z5SQ-M%o2y{t<g?Wqw*(Bvxg1&`Uf90;Vj>HTuZROe$ssw7P%jzV#z_*9&deT*?r*E
zm#3&@+2C|VQ{%Mqvkrn3hKgeWFV#BwJ6k1%Nq-H4vnN!^kxw06CfCB)977i${220Q
zqW-&8t5RWk73MM<E#vP<bmt*QNGmL)yA>{c>mQ#IH-?WGl)CrkB*6^<o<ZmC-sfVt
zyXE#(K4)fMYFgB%39v_EHd4x&?R1)_XU+uwwq={E<*uAV8~$X`7|Pn-J7n>?W>*}^
z<0WgtYWU#xynzF|Z;sSAgFrtHRko*(8eB#qtOZlwmx)V@Q5RKI)>S;RIATs~1+FEA
z4S&<7#1erBVFQr=ERG)oMgq!JkD~wke8XI2LU!vtXJuQU;IKAK_4HfP&GenrC`#M6
zyB1PW#1;3j-Q<2a-#LNxM~i=y-<R`HdtmWHjiree=;aB${$~3H@qqDWGsX6+rU*A-
zYr**MOCrY*>e&yR9?ew+_=+sRb&8zoA5j1SoB+|?jnqaPnh*x*!q?tX@9P1N#*6cM
z4RGQNxHh|~F<lg-^(~~IY&c;~O+}lXF<SE&?`1Hz!M$5?{q6!etIv`gD&7;eULmym
z4Wkw3W6DjWqjLLBaqZBZ6FG1E%Zy^@##w}4thFE_s9E?}mO5I7qrLev2fi8$KpB!#
zZ4-jiico>8^uqo-8pSY7WS}f;c`XGAymV;tFZK^wd3{qT(@fXDhEFY41*;T1{|Sjn
z{?OlWFl(DAkr;F{OP>8lySVJS`*h7~k$5$sklp+w+$B8~X|Z`(;%i^1HfQT&$+Lfj
z3NjlvxP%i~3uZp?k@gp)jtdZ-YpyTA&&UB7a-3xUe1>&*gmfTba7wgUNnx<aLD|#&
zs|IaWLGvHuv!7brW_g)q`q7K$<E$uh42u?z_033LbMkzNtVX3Z+h`)x;JM=K6;$S}
zXF^da{X>;GyIp#24&hW+bqnAHw?9VaMdwpy|DeNZg4L{l$e%?u`w`dmFEko_YyZL4
zEWLnd1p_4JoMcshz>u)s?%wWhvVUL@ISkmv@l+y7@Cfv?7vT-!)F5L0!ym3+pIa%D
z`hp*$#v-h{(;s!1G3iDglbrt8`lRn)Uk~N(w$6>Yf<3Wg=J|T5UM{`9w3^~qpKfy;
z)18XvJ1Pi2n|uL)xv1tg!b+sqq-I@A^x9ooeJZJ;g<eB~_I`?%&A8A9^bqYN?$R~N
zZET1LK!)ldutuAhA_k8Vl=@#LCm|7+zHG~;Ua9P-gWrj|@a8lG&g+v?w{4W$R?PG`
zVhex#ymHOEI=-quSod}cvsx4dvg<wD1kv?pMkj(6ag<Mv*ZAewg1qdR1M=ClCFj%M
zPc7Gk;8?NVr?2_*?Blh&<X>N{EG$$TQnYvIwB4hHG`Vmrh!^wY_E2I83kegz0JpY(
zfT1@rfK;F)x)w_ed3?EkPF36jS9l|>Xc!e+aD$Ev`h>S5B2Qaq6dQQjCxvO-uiA%4
zw4Zm*UB9Nz0a;a+kz-bw{j+wH$WO_p25x@kb3Wx{)8F=EzI|``2*+$ywjZ8jhR5GT
zj;pff?GqqIibN2?bMtt{WEhZpR=QqGO-6}>=um;d(YsSg4MRo^N^9(<Ctx&v8Mwap
ztT^m`k+%BqH}1#Dm{n$ryO}p{N>SPL)8tJM=pYwYqKa0i?@{tA<Y2S^u}r87GRdNU
z>13rHk1Zcms$4k|BwAlIgL2RAVHH%nGiEr-DRM-HU_VUGo(*8%Y1XvCXC4F?DRZg^
z_SE47$nM_WZXvX}-N8UzgdQc|609#{GRm*q#b4UW_7AV6-d>?@>^@twz3&LUn!RA~
zOHkfxsL@_%k>xSLZ7!&Kuj`Py@Iku{xyKzU5nYzA7RqrEN2JR>Y80xo*$KjeR*GYW
z&z3}v#yPD|<EPhUgz{P_Iq*VZfEa&Hb&bAyYb$~PM?FLbZD98>K-WOIJo5VdU)*}&
zSia#n^^O6KI=gAIdNA|S<6vxZ=iPyggpV!V)d0gIw;LPB@gXfHnu||Zh&oib2KOuP
zE}qL3UrFs9p|@u1+2g&%+%>+&OR=xt6k!Isu(;2$3dbbW$N&L~mSYZl`WygjD5sjx
z42B?pcX!~ZQ=m;s2ZKZdO4iVG;PU)t&6qjlerQX2e;B0~Z}+M+lZxdXeN~0{reBCe
zHP4#cs*O-+mN)U=7p7Or;KoJQuP)!qc<B>sz}w+v#3wt<wvnCoH#Pz)PRxQp%2qT7
z+L)`d&m1?nxR_fDM&7^@Ii{lizE$(5LU|fy7Y$&)rz5%@=ml+s6SP9%tiV4wB?Al`
zEhq(y5@aCAOP~Mqk=D1U=4dkhn@8fNg{)D+GIS3VRjv#Q1TuG@8Y-K$&Ps?jLa*-I
z8oNpiqDZx=O{K~-v5F^8(#^EkbnHk)GL=JW<@Xg|494Y6%2=4W%uJ5y8y8qf1x?m0
z@`qo`TYLH=JVD7coM^QNH){cZWF@I~HmBO!7!HrXCWjN?2%&Qk$bAgsMHqPmrN{=I
z#)ajZ#Q)xJ{L*0FnB^&H!XbEIyAom+`%K{&pI-Ocx1W<le|#lyiT9mj9j|and`ZaO
zD$o2bG=Hs+kK)8x7YVTle^u>Qjud$pbj9j=oEY=#_4(vmG%=s>)<1-g(+K|!K=gG<
z`%<r0RE}2IZNQvaqGdERh%{2fx;s=_dlB8RPPEaPVF2ktIq^jW`7e63ft2C3lMo2M
zAo1gT9u9L7x1S_2-W+|WEO*o9gHQZmdG0JVDp~SAUM|+A-<lSEzeHsGIJ23Hj*;^o
z2Og&%rDEpu?t=H<SmXNNCI&tsQ)N@iYH+now-$VMeNI?fi@Ia0rlP|AD$KJGz!r5R
zQq4d>QQfTo62}dl?}l1p*cd=5_NbBTl8rUvXV?+x$1!oz^yMRgZeF_~r_uU|B>WGz
z!qXJ#{K93H)BWCE`@7%Cnf|wxM3X<~>ceTb`G*s|18O^!6Lq&YEt;tgIOLwaEE$k|
zPZwxypvn$AYjEW)01r{ketG{p)JGK`;w$uaU|!z<NauYbHGy~>pcUQ`f@1wIIJ3pD
zF@jQd#$p~42EJIzuUzzHO8mcZbEXVE<~V~SEK&##mR?0htQhJfd$baKxETh?ut0ft
zR6EqG78<%%y<WSnaV0zCn~J8X1H7j8kRCTdoa8)(z74n`)RTVWjM~2PE=>&nxuv0+
zQO{h3a4d<=DQe{`<}53odA1eMjt37itq!D+C?G@*;QxE8kcSw$i}YZ}?dUzYH7@An
zE4S5NZvkfRd~Vuv(Ebu~bH~UT#y7VT`4_WWJzy)fu=2Xo=S~lgr;7#3#|vBLr4AK7
zeJf+osvzUE@2(E`*<z&;WGyY`@(oK#{~i@fY1-x_S#X3eE5(6Ea0IrZwczuaFqwLy
zjca*Uyt9wXu?hg1Hrx-%`s#2MYY{SGGNBH%<vC**nL!yrlZSiBNM$=7P5gq~134GT
zu35Ri_zwRYo2<;Mptzg7c!;NqQMofsQ%CL<71Li=ev7iNr-f=QEbFd#NOBcK-bx@t
zF)^?DeC&GVMfUbaE8~26fFI|_MVYBv{J|02zbSSN&mze1tp&qVAIlxz-<Z#9=RF-R
zhr9rAAK=!bzN*8ZZj_YdfUw#>#!xp5BMT_=mBRAC6ambw;?D*<tJPjw#Tu9&MLl~p
ze}L^C*feDiq!zu()>qs~>?<eon?|rca*e63vdPtbw0R>@f&%}f)>%BGQKz}?T~SKr
z9DgVep~cEHJv%w|RHO7mSo(%0#cq64g!BGXeZA|UbLoS%4+>Z<9gaIhFbF>G!i|qQ
z!lDcW5Megq|6HIKhVLTPy2)x|1bO%8iRHV;jA~AJ&YvlyNi3JL4mxfxe!5b@Egjci
z!-u?=#8hxNN7BFEhD}B&h4qVIrv4|i?Py!PWv-p*ijRo~6+5a+!;ta`Pj`o8>}R(A
zI?4w^SJk0&BUWc!3BP{R>;KL&Gc-4i0A2)|FV2x0|7@2@PM(fKZdB;4&S~^jhKqYH
zN(iTB4l6+)#LDYPJv<-MmOE~Fv$A-zG$2y{bcq;RorVjLh0rJqiDHS;bfJyb5A!f=
zpp<`Ux&!gK@RhdTxkNs(B){>J_WFVy#XUO9xo0F_3-xZ>j?PXOnQQOVF_{0ZzkF_f
zB9&ouZn4L{N1a`)|C{&b{i-U_JsuiY;V4)k-_<~KoW{@PmiHg0^~~IUAJ?xM*tk+s
z%s>cpxC;RD#r%YeSgb5;!mtjM1=>UdF+}X3Y+Bp+aY+Ogw@g&>L*+uRW^rZz9X^55
z)tyL|$Uvqx0@O?gHyp|l)e_2k9F{~p`2J5B;F}y+)ytuD#8jz|g=1LO=$w?l43t#r
zb{_=LAQ}^yEpN(83b>mdZ7hCoRzQZ7f4%}~rvdO`In}|`Faj7932%j>W8}~$7$Oc(
z4k<CJfI-VeP8j^wQN23Q*x&W4vptD3lwwS@xYR#mT=bibYkXa$X0x2iud=I@EUctA
zN2O2A5+1*zd|kRX%<vS8U5Lq*oWA>WXGP`s`Z>iO*;$00-&FmnGJD|jzlSosVJ%)9
zctb3J-CWp+#<2<tjM&xHdoBMhky1DY=pvtn8vb&=1Y(Q-D=hl@`Lqb{Qx-xExVX#9
z)biqnRom8Fv;9)P{jGa08Gg*Z&U2$lUyV+C>l1j=#OI?Po-tGUis{@<5<4ISQfjwG
zmjbSLG~Rn@sf>Fl;BA~Xzo=WM5DP6&GKN$;16X%*ssoc@>LEBt^^k6KwFVM}0pbKD
zegjSGWvmH?b<tff<a!svb|d#i=!KhOk(Ql&Uct`me|M5Q$IeSRbna1Wny%nkhOd2I
zr^LTvgSFM>Vjbdk#jE*V!AMk$nN(tPutDa%#q8X7g62+R+T&mZ+&DbHn^JZdASKdb
zWrNQW570E`RC9<xTXEokdPj&T+K^%}P&YuyeeG5Qc#>WC<9qcVe1;m>a=xxQXv)iy
zzT|H=^<%K#W>vF#HTu>_!Q)ls512l4q~n7z^Kd@)8<I5!Rv-29v<mUEn2dWOjkv`d
zSp!u+(_jnK6cp8Di&@Ez(%0--tz_gdlh8@j+fcV}wIo;QF2U?Z00>_U(M`XO4kQi~
zj?>MGjsQYqF>G9*d>SNb4~e`qDNizrn~p{h(j29;?H=u{cc&WeGrW$)b=P(Z@f|`H
zfR{f<XAbmcS;fvCbnv%qic(!KO^`kk_c=~0T{LtszqOVTTfOe9bJw$cHXs2HC*ekI
zCBjPJac0c{adAeDtzd~q=S?yL&-P8_Hig@erX7x7x-0yI_9LR?D!pKI4MWEPN{JZ4
zi<$_-wQU-Z@M86NCf;=+ve>-e%<9#^GP^{bH(l^r1YAjlbXe@>G&%Kade}ySlok2i
z8`?CIQdAtgUhC#>D=IM#etT2BculT$cb{j;rJLO9*Zqc7_cp!!<(j)4R$?h8H8Z#B
zGIFrA8r=I$Q9f}*<30FE3;1P!aPLfJ5ZzwJfx@h?$=I;}@4B922zfv`rE$s(iT<~S
zOM9tw(YW@?WkOh%%g<45??+O22p`7EXnfjRptWiY_SNwvEl-hxB<OEQ3;sn0+;cfp
zi*#eMn2TbZzkh_^fGCT6WR#T?+(ZAptK#gVkz=4ABe^PDYG{Lt+;a3A+*hu?jCy*V
zekDnWr}$3`@UQUUDy78`sS<eg;s|52ijYx-qKz;e1IY_Yyta}hbWp%Ed8|I_MTz}K
zyx%)#B1-O)4ohb;j^+~oU)%-dUZw*l#gbw7ogDS07_W~UCq^$s<5&q`uSbI+Ukp_q
z931*RvuJDQ4&bozY{1Jr^sv7_))WzJr^*h;ZE(Go8vO>x)}}T<&j<GrZ{o*0xVQ`W
zgHT+Rn_$T2*8w8{TP;G^H2)pASr|q>P=33|S^6*GIQL`@IU!Qj|F!&8#Z<9Qp+u{E
zBK6>!p3XXiOZRZ`S%(!*b~hPG;|t(5<EFTwv1GrFdZ46dHD_?1AHQrc>(%Ku+nW=C
zv#-gQsEo6xJBE<O9xjt}*Vr6G%s+K+E)p1^+6U&^IQ$`HD*(3t3O_pu1%ymR9RY;=
zS7}ws#lT&Zz|P5MM<7rBMFYbeMkg)5s9e1>)x1I<63|TKl?Hq@!n-5%O-tf=T0V!Y
z0$h)v4NvMj>l5O4WroKx+U0y+3w?KKnKIn$G!o=)EVBu4@B;?@hr_hS*>eekLcU{$
zk!C#^<%Vt=ZA1k>^ICFT2^%>q0H!@B*+42BOEOV5Xm2Zei$Gps&;&ra7`a{v3A#Kx
z50&lZ`5|-aJ$HQydb?bXy<X(c3O+7(mB{vaJ7+3;jn!{}`P88K4cF%=b?E)4Y-Tq*
z*ot*SGp0yKAeF<;xV{9rhi*i^4WYOL_O*J#f@+gvT5fN9GQXI3%S;RR#m4A_6295m
zY6Wsx{Yiw#g@wt5Vd_8>+UANeT!NsSPBCo(-{-~Fl{G9ljYi!m({lE<{ZvHpCjwij
zy!q%QKb!kjtO)f6?dP!T_R5>ORZUsbgCB$yV_9W~Bj#McmzV@(ooAo?A$T$2lfH<6
z+i~lR9{yV2GNy@s<+I)(B8+OL<{(&F7&JI;Uz%%kyA2r_1fV-B{B&%?WWBv1a8$1w
zx{euIih;YRAEu@Qx54*$8E|OqTRy__j)w*`&poNHcr|;Yb0PO!&6mcg(LY(($4cLG
ztz9T;4a??>%eEC33BOR-t9D#S&QW~08GX6(2LWfEx7*}Wrk{YA$iM(IRd&L@2AAWf
zVCfLLA?i;^{dudlqC$J{hzhKRV3map8KhuQvSPD~iVA;1AFCA@G+|JZFFOF}1B3fn
z{#{1fv1B{NMa|mGN1Abb8Tj&nfxBU)H>n*$j!(Sga1yUcz5M%Wf{*KE@Aa{&X?YR-
zQiZo9_^km*x))`#ZSR)kzL-zK#H6^_SIB8%A*$<*rq58#!Ez2Ki(G~g?I(F{Dz_nR
zdH|7w1OF8QGAKbSG6V;Q75g6>q#DB}0?HXP!e!9eUF5W8raV!mA93@mzoi<pj|h?J
z*)J@YC4{m{^yFtYI0A9(bGL0Cs*G1G{~2q~{j@{|{iW%pLzUf9oaPpk<+vvJz$fqH
zk;f~zl~*}56u2Mk%1IIEOsdK*;ojiViOs}Bn{r;Owa{UJY(EQY!`DMbCypiMPvun0
zRp79bQ<8PSJG52NhF6P$6b0pDdTO`J$elIgg#76eiX#j0F+g%LSYz3d=;?Pg37j{d
zPOtdg>Y!mSO0cj9c=lbz!@GavGrKcZEyehun3|oDjmlKPLD3V&q3gn?gMbe!VmRkM
zn~vg`PX2-w*K7Kk`7jQPPb(v5wN49ChOX@$9&J3wki*9uGc8>FY^WhJ@>X~+3WrSj
zA7ALd_Vi^h_o7Zrdq~5IcE%PyU;U7ZYckyuxF+8|@`y3-BmHUnj{6!vJF#L3r7ZqP
zAqduMy_%wO|I0|~Kux>h{l+q<Ty@6VktEEHgsCqT;U2`eJb5p(Bd=V|GTEC&WlydT
zA%~M)Cfk}oZ|BJwJfx5BZf;2Qxd(S$hYkOe5H*W+M*q<D1Ss5s4Pa#_LvLQC7R(xo
zgYx0n<mu)9xCo{CG}p@SibVv!UwKjd32=^hm}<Ey-iTd8X6>XjD`cz5^6c+d|BO?j
z(4nD-Ft*tA$;CTl-ktZJ{%mv6iZCu`;CUf74r7zlzP(=KO%qFPxBg-1J*wH$)97%a
z*wDNECsrFOX~wJtz(Vj4-EyXC1w@5}MOcN=%Ln<0L6ZPwEMvb9y0)$v%W=eRKGR0v
zRMJ%O)fjm00erQu8Du1}7CS*CEay^)K4-h*PDruXAsR&-oU8M!Npz-z^?Bf7v;E-H
zchZ`EbIdDmCC!Gi8(0Og2FCPs!NzlMruD{)%ud(GNWJoY739<O5P+E^r~1t%ytfsK
zKmY_HXsheOU`c|~^p#u@Sc0{uX^EQuCdk%S_z>6lhg6JD?onL(Qh<ZRTTz|ilBL{4
zKesBmw-Ygj0~Y0c-jVoLi_5#DBvGN<>x05j1E#`aoGZ~1T4sc^l+d)&qT1e2L5jdJ
z?du03$3AWIMbjk>ZU$H@uL+Nh;~C;ZfcrIJ!}6Wv@K$(8t2)kq_VxuscF_P}zdri(
zvJgf26|^_lIlQuGL~lZf+f*{FgN;QiU8~evR7klRf9n8Vbl;O-SmE(*3S~;3riyL4
zR!e2FNvt706#Mupul=*tFK?vjiLR4X^qB>?&aK|4Wu~$c3(2h6@J!3dk!m&cXufsJ
zuay59ADOvD*%=N6$Lt*ke#&1T*#HCq3IS94FUaf107`>$Q}yTJ{{aVHzEL}y_?kyD
z@s7B|eeP!*Bw#SWw?eFYrT;N)1>O59!YjU3qFjq%R1zt~b;BAmygpj)u@kHsSu;et
zzkJ%ny(av-erJ#>XvdR|X^T-=aVSjIY*kucyGu1xE_JxLVtCsAiLI@Z0~ys44`6xb
zRR665o8`g)K`ZJ%K*%r#PzIEy*QOiMadKk!igK=3+sW?_M5%43u1fSlZkn!vVT|U5
zntI(~*YjVAZEu?elBF*e4W0wm1y7dh7KGt`!?yyApqmn(uZPkkj*or_lD7XfBK1*(
z#J(oI+KS(8vSxXC{@Pti8nV8h$70mK-0I*Jw)J5RUn7u7nPBF#PXTMaB}|6Xp<>aB
zw!W_zLRnCr$Ek|{>+EFA{1yDFosV5J9CS}h=>9RFEqt_E8@8{StQD7ldXlH^^82ef
z@1pN;TgJ;mBI5OlgNQ0e_PU^ljmKi+-EKdq%exF5W=6*c5!%`H9abEwlQpZ^g(62n
z1oH#Wm5fS=%wo>i6!6cs0LnrqS&k_%Fu?%`)I)^P&Tbq7cG2Vsy4q%l?o2q2TE)M5
zA$NB>Y#K7V7IQ{E9xi%tC#CD;bv&+_D1CRXLdsbW)g5j2MPdp>SZyDNkevL_aEi`5
zlu0e|h0)$!dKoauA7Aum%E$Dn$OWO9W4fEz;Hv3)7cVUWhQ=$e2>%qsGh2lKBHzM>
zj*HoZC?GT;-B5H>N9hNKOdgb!*oDv0a}eBxzO>#f>|^s}u^#jRbWeV7&UPQ-wT89R
zSl?(8P;DBpg0Z{*VHAJbSjMDJqsS`{Nk?SH7l&O>8$(txvb-oAtz$8ZwJ#&M(>ZWJ
zT`G-gW-1sPU3}8O^c1IjmK*ZI3!oCuseT`?4sAss0T_zy-(o>#F-QuaRGQ%31Vbi!
zn&#S*a#LCzU|o3IJGZ&VDKxlrY5E#*NWO0E3}30X*2Flzx%f9C=OP#`pBQm?kN@^l
zxZ`zR`>SsrXVIlPUBS`UO{lh%BztZ_`8-8<L0`f6*MTbg{ikDw<%J^0ThrDfDfi|+
zh=jG&z1j5#fRQbe$Py|90Sg;8fCWLv=WXDS#Kq@gF6yEmR<HCz7!vg_WKt*P!nV9E
z6_7-j_WUbtzw&2UJ#1&cH<kAQw;LWZ?C+b5sNVlYy@dQC<l9s+XzH-owd*KFCM~}I
z>>h!=xSoB4U1}#>i*HUF;ylT&`jhmWef9Klpyv?9c2QG=p7~V$ikqZO+2id1@tu|d
zp52=;An(<JKsOn=D1g&OAtdw>ZEP!-gqMggP?F*rr=shMV`)3j^h;ZYuu}!Y9Pq-6
zoVCJsPsooC-^Iw}-5iNG{6JWw!C+XbMl&a<_{QZbhu|ZYc&xpY94BdYU7UeI!`<wL
zk5*Bk2qWKaTw<SiLHMyw6;?k};FD;Iy{@x}2T@b?-|G&6(y|R1fy9=5o^4tf#GQJ9
zP(qiIjiI-XU6ic-AEVM5hEWNWd7soAF2iCf+p))Q235NfzS^2Xul{tSebeC(QQjNv
z$JWtXJ+FUCYtVKx*@YozR+nR!VP6C>y(i)%_vo~zE;(BgyV7gCobc||bFyc9oyCFu
zIk78T&Vqf}$x4DunPYldO+D$K6-1o!oA1SFgc>^Tj<o_qxBa1B$p~mWIV(H_`Crds
z3j?PN%8Aw(rGL4^fzzkaa!JX<Q{o|s7OEQ-j*nQC5w`5~>8=uW4{-vL>(7kEmVePt
z$45Ui5g-aIqDhd?r}{n46RrE;(@~L-Npi>Y`=<U3U#pYSf0Ixga%9$=C(vZ%+<B6x
zST9c9DI=NJ%v^w9=myAu<8L+MFa!#zqS6XObG7YaxNd^dB@syjp7|Gt>j(OWzi-o*
zlZ2}k-*i&@hAm!T{fG2h)!v_aqQtl{yiCH)ZO4(=F5oH3B7yiPjs+`iXxjRtiLD*t
zuek%aGX#@Ea{ip<{Tx#s%I;PYBy=6qVvH0yeywj^o;W=#BUsstZ-a*$0?0#hs*{Ug
zI2|}(ZKuN%ZEuGdEEQ0SE8n(4_Yrv;YT4VRrc(MLRvXw6*Y9xS2L0YG;~+;YIcA<y
ze&kop6M~Q%P&@r#DvavG!%}W7(>_1v#BzJN^N5Uer1kj2nlzJYKnkK!JkHYSx}<>p
z+h;?+vFn>r)1g*zp&M=hAe>WOL=J;@_o`Epk)h`fluj`~w?L_<s3-~XxXiia%H_St
zPPtvf1~TrlB7T<G$&Og&MfzYJv`kfcO$rSd88f}R-|d^q`6w!@VEhxCDq;$m=Y<^G
z(c3`A3LQm3KObjz<O<T=9MkJ)>Uo(tEcE+l9ZBq5sPyW#LI}{WL8PX&Pf5W>4(rCj
zLc6nb42>!%1%;=lAnup$Y#uN6VOd=Jw#6&9bZb~t)X3Wxe$bB9cPjDl)-9uD>*}#T
z0ZpZaWH?wcLT9O2YBC4nJX7UuAIvmlyAjNZ!&m5A=F-=QDYoC2CCHuiylf|tb8>CA
zj2Kkh_k+CsT_(sXgJ@Mp0^lrH$Um4iEXXCzh5J$iRn<JHD7wV_tI8**N-kyCr+n-%
z(1?&asy(RexnBz`A^O2Rru0%s*1g%4PiC70!CYoU;+6|Bi_s~N<j=I&A%{^B8a-{Y
z8m`3D4aYBySJx;G>zg9@6sPLH2(W*vI{m)#y_lN+fruMmAns4RtAtG<j0M2qcxdav
z!w{*1L@T6We2@U}Wl>AYht><(dAbG9laGH-)HR&tN}f&3<bebXWiRbX%;08LxR*K^
zQjwXd(sr<yo-_}x3?D9c{M;}s0kVg&`*)U;aew5A=sV*x5Y+_usWetGTi#}^6|fyi
zTPVM`aw0E-8(-364B!&c^|u=gLD<<@RNzo__M}9Jp}GxHxl{EwUZ$VmyrS{Alz4f+
z0&*kq{nuE5R3nwZvZ$&A9|nt^N?;CW{54#P0M|$1*4R_S+IPtV8dslAFB36rbj>}E
zxL&eo716$SpwE>`MFA`YI1M3(xLqdKImUXHZTnGde>h<<)joTo*Mvup;~C$;0L%2!
zjU8<)Ru(c!00pq44T=QArUA0)zVE##fnSsqxTEpxb2gOwofF)DuHEU2YSLz>*Nd<W
zlrwvl@1#u-<`O<SFf>3xWcbWc=Tm0w4QfG{|I$ri^7m7Fj9x7pN2w?!-0XukL9K={
zt$tOJ<6!H2%H-HH83mD+&H}t`E#PWvPW25{&?UiJRa6Mj`>l-}19UM{@NG)uHaZtE
zk1k+dd){LvuugYP<J0D3*uJ+p-o9Ejh2=Y|Pg6xP%5}HdfNtK`SZc7ws)FPX9B%AJ
zOZ0~LQO#W+WsUk43b6#ggwfl+W6d6z71VYb)4~Qz&LrOKYN@Qoq(t^#&e`J`&R{^2
zQt9SbIIAc@YX~?{pp3RGY77<}#QHMtb9iZ4lwZvk%kl(_Q?b-Z+-h~Dt*&<ubU-2b
ziEHqXM;mlM76b25l}a>z|NZj!sL02_s2-jZ*c#;cs7P*w`8Xr5{e<7v`smk2UA+_S
zuLFv`#-@nCTCi)MAR&6JN_~DJm)GoQgFgoV{31EkNNs3H2m-DGN1%rslxQ(jVAlmm
zL5iP(G3v$JGynOVqT<PPp_6DL_uogT<1Y#3{!V?T&?q9Va>a6|{?}r&s$PHg%x-xK
zJmKnh{-mkRBukCM(fwyBN#-f)x}U38`%sAx!5EjZeZ|zBPg5?F{hTyCi;JzXk4-ym
zAH;=}C*vTa3F85t2`5=nJQX++s;+|gZ@D0h7_fUFnC0_Yn#&j!OpyG-J8^OE*3a^^
zzlmi*1qF+lOCwF!sBdZ5$~8xcjr)IergxDfzAZiE=fHI2*5S!)p=_iayY7WA`ni2U
zJL4zb7;^tTen-Ub=Ych~0#3zU>n(i`QOzXZ{Z1BW49r*hHBO$!(-(&T<J6^_L%1Rk
zDg@B09)gZh+gLDUnjo1!iM7YS=-G}a2K!S6;(Z;-cv$djVONK9m&7BQ=XgE2R}rFN
zjRbwD)nDFxuI;{qQPV$57ULV5?Dv6X>*4$=zdLhoP9z9}x2>FTMee*o<6oSr>_oR4
zT(3)jJ#e2g5ouNG@~x(j^7=x;&1`ZQU<I1k(+F~K<cN$7z(JFRa$v}`K(c3%D1pmJ
zf%5C!${&l)hqgCxxW&Hbj%9OeXb7}LQSXw7YrgA96Bj-<XtMk{lL-u_NdJ=7T<obf
z!<k5T{L8rg+YUQ)h`3J9qbML}UVh+vVW3O`67j=jvX#-OXCdA;mg#1v>y!XH@7CH8
z1Nfezu7-^mc0#aN*|EXu06I!l;=*uggIsF|Mv>r-yy%j7Hc4?q+!#A=I;uFYiUcz1
zu+6xKY*?f|bEEar57ghTzjswzL(yuFv=a{{7czcBmz_j8Yz4VBF4_FcuWK^RZjhy-
zjz_xLzNCo;WpA+FC=Nk2U%5&!wfM)7ynQyYx!eXXaRy+LbCUH_QNiiOL8-$!{+l@B
z!(i!vSb@ny-_Ted)(c(yFixYHMEP;;B-O~BxqFdz0#>6hk^^~wKSJ`OZ`C#onC|l?
z*)f+8><T*@Q(Jw0_at3Lc>Z<eww>s^yTH}Blvssm{p>|;L8gcX*H-XaK{(C>p?U@C
z;txU|&1MDo^=<%#lauVmMfazpH3Y7rg+3GoF<81F*1}gN63|gxtd@suPTT_=0}`vu
zNwrf3Ax4uy_1h&AZnB6QM|}`kqt!8ZKG~;T+)uL}43%n`(0*$@cUnJ=h<gz#Pqi~R
zM!u9-pO!&>@i_+C$x|G3G(|w|K&k-=vEy6Rt0x>3&2u*R32uNwc}{ifGaRsu2Xr8j
zXh#t$ilNd2seF4LT7!MO3#y>`)*BICLIgJ>e@;8)z0p?b|6H8lQbW)ixBEIj+AnZJ
zLSTmey9+M;p%rbZ8sEG`_iGN`iS5xZO~UZayMraw$Ue$zSWAH}#1#7j@)3gIJV1i)
zb7^T^>d6zfofcmke7F{%5bh*vYO8{5RUtqipy)(aNfHC44?@l6wF!aV%lTYf%}`X*
zQNOP59l~ueJ{+6iMQBFFFYU05M(H-h(38gQwBM}8n^~<kbb@sX_!2mFbSIpC7C{}k
zk2Du@In7H=C8K^geCs<&`}`d*kR<_GCE+relMW7Ai(8;vv~F28^3CyX)*X?<U;xhT
z(lvi$A%LJe1gefe_k|&{7_f`6sC)~Z;>+Pg*7K;&RVy#l-AC8O+P|3C<{P{weMMK#
zl<iosTJYU_?@lL;1KaJJe`W<gm?b4g^^evZ;<bIhVw%>?`97<Y#q`=6<{Fb?<_&|#
zwhJuRq{0Q3Yim2KMENpnmdm*^a#VJIdx*nA49DBIhucQ4K;q{(W)_S2X|0smg;WrT
z)^6?pf_DWBpdkooTR-*WUxzGX=7^0GIwO>E#Wr~s*WtP4w=(rS;Pbp~Y4SPKTYnze
z$erFBy*PmrV(r3EJVqAFkMz?wNI0zpq*7mhi(s8;Y#q@oIxD~NkYe!5EBm+0G$fSv
zH8=IF<OC;c)^)}*awLm<%j&-pzcZdEYUsh?w!y#Ci+h(|qN-{l2iYr(MJ7Z^gC188
zRmMOXfsjEjeceERc4>1*A7nJFpz1s+G$LzxY}ltVz7L4TTLpLm!$&t=i~YVqgT=^B
z-jbR>pZZB!@JlS}Z#oUdK-RP68@R8|kcNxm(hUX7b5Q3e=_?5od#sZ+r>Wo_n~5&=
zp43^Ba3ZFdv%m2S;E>Y}_;z=Z5Ee2N4AtAK{cndVsbaW{K`yG{wjckvG6`Jy!rn0X
z*gfVS2?)Ad60+B<V9K2fq$Haj>O!tJWpc)v%&&8)U^@?SH!^#j?@QYLM9%*fomAzc
zkR~-_v%~3$$ep6IK6yi)9Th5gXMRkV739)7W`B~>W}2C&$GaQ@d&1eOr@NR_ozFo4
zjyNM#;OeaCP)q~Ebus96lYR<;p1R&(cH%a;Uioe9u8;SFNurEt;%c4~u3Mx#2889K
z-M9>CJ4NdsiVMtixy`j$6eQS01+F~t&)&4!YBOBPvd`3YL?q&vlBI9tQXG_@MOYD9
z3qGw;P^@>RKK;OI)l9{Kmr((TDdbdZk*fnRI2ew#TB5z#T?~^6$YdT8T>8(OWkMX)
zSg7=VTsI`pDx}M%phf84D6;BNmwvu<*2+QmmncvNbdCw91G&Ucy5DQ(6h3empSSlx
z#VW7%JNR<$8I<)}c<&4b7Y6vNG+Jz0YImjeELY5OIvi_KC!cUsHh*5g&jSYzzT{M2
zyG;N^qB;=0>S!Mus*RyC1*u}^&8#k`62PllRf508S+zcQ89sP1`oeejq*N`zxTbQ=
zq#{6BK4jWHnM{GRo%AU83I#+{tKyKyqq8$u!hjyHtj1|RYz4b<Vn=(oq0VP~^C!h_
zP;dklH#jsO)Gy?3OZ`ShA+foe124A%5Kzpi=G*|!ql?*%5OgH1q>q6z1EEZ#+*U7(
zIbdJCgSyi!p)w6V2aTuicxpZPh2sh<>_j;bUr$Id=DntMx!)7KPV$(TyMsO{=T0Ie
zNJlYys%YvE#V2)|#79{XmCnhqW$6*e;$3**_{8tc?C~*e<Z+_Q<bbA?V@N&0bi<zo
zJwvzl_R6-0S0GVK9E)DX{9F%o*a7f{hI$8UE84=0F^CU9#Lp(zZ6WcO;UZ7To83FF
z9E@il#W%(CPEJo-$Ui=pT91s~Zhh^(UopWa@jl>I$ILZ`hl<-KFKterKMQUB!^GUt
z*YH3iir~k%zE&Gsy!725p5yBIU$dRrYlw;H8d9FXptf6JC=^@xwELGsMh@A_D&JSq
zFTp<G!hW>Hd$J??10iaj<ca<cl6VG$g@`CX21KGQ&lJOI4zk*D_H08c{ya$t<RhU>
z=kDDdslZFVnaIf69JH8HX}H%nSo<w2Dbe|rycEfU>3dI~)I6kC|MK0S+OTt}EF&>4
zr7s)GEK}h937|}+H~jt4fCkIz8Dr$Csn>!6YSSW+(EhDr>wC!e*^?hxPjR6fu=s^j
z)hNeY9QckRAGR=uqxgFI!57>N*W__;I@jAcY1bX*368G)2~|0D{F`6h@|JYP))_Bn
z@LN*6wlIn%oJ<IdodD<GvxHh;p2Y%umQmaGKuF%DCv>mqw(}1{8Cdm0KR)^4j+^7X
zS<wfHDNDN<->keKC1}foh(cOFE|-wFp4*JXlSpZLvh1s{M*#ctC#%jgT-TiJ>a9`g
z8sX8v-@zWGO#_KP_n=H3(P267MrYjCZghQs4UK=-hsnm>@mLl(e4V#YD@`MO3bjtO
z5!b#Y+~1SvzZgb@J#$;3RnKg+c2$kM6AsRhu|lv#XaIDYuVjOvw*={f%q`g<$sj#A
zwl^RDq%2Tg#r(69O}BBdr<$i_Pq4y3(D3apld_g;*mre1^x%vy8q=GTPM`b@Q`~3g
znXX?ob247uzRA|m!}f<2LdH@u;cUfVjZi6Rf==|9v+pG1-2243ay7Vq!HR!&vS#y#
zQAQ5abtm8cn`P%^<%(<NwqYSxAk&{9TA9M78x~pW2$(RK)w2ILnE`RY@LGYqt93{D
zkTTH9scaAQG_$_@Cw6lv^}6AGz5^7~(f`RkZrpw4K+!Ba_wa^;j<_njRP%2=Tqyku
zSEj<$u;fLQ(eS5dxH0`6WcKvgoe=5*D6XozxA~df`lhzRA9gm;K<Ta2KXQW$m90+c
zwnk=;oW<T2S4Zf)O(k@1`#aV%bABgeJJ>M;ZYHLb^e8&<i^n$6t18Jq3&dsy#%yfK
zPa(R>20vfdu9CA8D3MVLQIM;!{x{U=gn1Hc@JU|1=z9yvx!kXOboLD=eeGNV1GbwC
zaB}L(lGPopP%C^I_2wMv80A~ORXYvvUq5A{De)W+jJW*^A!Gzsr{o!zW=K;=pEtVf
z<ryHxAd*7jlEw^ADCizIXltuf(Qe;&Yvx_EZb~LY@nCn(CGSnuhpRd|)Q_pFLZ5_}
z+q<iUM^g#UIwcjH4&3b13|&2hXw7VwZm6W_vf{L}V}sLvEa;wls4Iru=E7<+3T{K<
zE^IzyjeDqxn36_{*karAQ_WzKx1vUiwnCi@+lml8=Ei9kK;9%^h<BShyvG%u>AfS&
zzAwBjXp(<Wky6W%=)%8QxD74wHlTgYPCSPj9oGEvAW(CPi<ByR;=VSrW!q&kc4^Kr
zgp`l*qrW0`YPsTStZi6jI;7bZq8;B>x``Nv_jW6@u!v%l0spqAk|ze$7DUBLj;Dp7
zF1M%W8h1#W-N0RWabcNPpKN{phLw(fDqKrq?uykhTFO?hz1qd>1{sl2&!vCnDCsDe
zuOq)F|4v(5{C76>>C3T*nn_oI2<<fa=C#*%XWAa*G`&p=x5}QlLXLdy>N43W1fF@N
zAwROTiKxfinnfG;1Pow4V$sqjF+|E_!z}6@!q@->!T)cH`C>TjKu+;<Cp>gg&Bc7J
zSibe|X+%fFThGN_iAPvIl6;%%oJ&PBzx%kgx__tz+Y5NzVqJmuqnu~|CI`uvcw>h(
z?$bx6xV&7{NcPh)n<zPOe?1|7e|&R+;s9Y%vte=|a#T%YO`0-mY(iB1<vcQ;*(n5Y
z_*J@&6k?^IA;3Wq;8>xZbpVFU9wbZWc6p1gL-00zzZqmqT6$gF!GtgOt2e8O{=+0j
zqq5t~v1KQ!!kO87={(4xaX$KMe)0Y7^zY#XKX`L#4vAlmtCKOjEk~9A>GLwzU2b|3
za|Il%xHHXsKo$B6)yz#iwzP0$NU+iubCeKI1GaW-*1?>*PLzTGsRBS-(buy=A7j8A
zKroRVYXDtMk~MlF&BfZB5)klh=XnfMNx+vxV2gv)p*8)?aIr}^?%|cmd#R83N$Ol&
z=_caVSxG+CZ?PFrSC(RxEe;)65s5`No34#04BIzH(4Ynl)<0BqqMG$d(pDBM3}f3D
zc3Mnq@MJ3h>KG?kk~4K2u(gdup#IBz!Z27D!{u6M`Ge>r(X$>a1o}`h=5GdV?|Xu)
z1N3B_&jZpKBEF8dGyOb&+4y!Sn!R>MZye>-P|5BYKaOkJ8P9%hmlRIuam{_yK*Q_J
ztm@MP{p<-hMB|w1di^snqn5fQwY0!zsM$VG(IUfvpEn4wPCLo2PpRM#^a5b8r}XbF
zLLxC#jv&>i$F$AhVqLZb1aUR5X9BVJzkhbSk+#X9$csat{H6ONv)u~=qqnsAN<l~U
zCy&>tv9PK~M$BcG4xh~Qa`Dh*dF)P<R^RMvlJrFo#6|E8WpD3UU6-G%IodW5IeHf`
zUzMnBDoR8~c*>=K-ws}if8ZoL?5cu<t8~Lu5dX!X(HJZz5UX}=_ReMbl-jr0sOhVk
zg|Fv}iY-Mpi1^XuEUeok=6%K;!9eEW1{^OvA}ImNM1?L<#~ZQf-)NXEUgUJ^d?tv4
zI?U|XkqwNMOirlZemmp#Cf0!`&<nivY9`;{O7R%1zv&*x9N(k<==OfA!m;#-A_NAo
zmxYb!@3WE%vtqHcv!F}6q0caE&LG<}9&yTlBkk5(?zbdUBOtuC;;U6Ww`9J0dCEUL
zY-IPvO6BqS^;Nh$6*6nM@4(pbFe>~$UQHOCaLW}pb2`WexR3P9$M$m;G6KwbYJV13
zc$jbKKLtzRdaCR;8lOam$9eTp&5$XsfkhR=vG$4fHig%aI6i=QiHje1P8%S{B2ZUR
zS3;L9l@c&~k3ha*&H9U>tbf;;>jg@xQtO2Py}8dc3%yabV@m#!9@wIF5r&dwQMOou
zj880z8Pi){(8cT6nY_N|M);^9#}WI=2NEt`_}k4a>xX9+icMO&?!opgXEaZR=rRQQ
zpBeQmM=``Im_%5?1^0RXb{|nRzyLM((#^_Wl)_ZtZ5g101#N997&I3U&BKc-=W=U;
zmw962ox5xJ+<bmo+xZrbzx-J<tvuiTdi!T_^}Tyi2-tp*)fFA9jfX;o-=>&Ce(*bd
z66{fXuNzxVm`P=IV7+4zDPi>YKu6(Oc2k?6zkY+OGmEuga%H8QzYcYwjC5s7unoSV
z1pwK1lBM8ML3Q+kVKU&3c4e18Y4NWo>k4A+XUM4iE7l)4)tKq11qhsQ7H3twuBZ`u
zKOm<gM$Eo@^yZZ*`7Xg>3$i5dJ_Xl&*Pq>J<I+2E-m0*>F3QW3LyMN{>kGF%C3IXF
z#^a?X-)Ogx1lrtJWzzt!@U#qA3#Q1`NJx894^`9`l()^#7-|Dpyc0w!+kiUC4I7&b
zn*|*YgucKm8Q87@r0hel{u{A7FxyC0$SXAw*u|+K$9V*hP3Iq+tDj;`$-*D*IlUpF
zdrrEgE9BRII=?3Q+UI3a&(hq(T!y-N+0R+NpZuBgDL$^=ijYZer2I~>X1qD8%7)KV
z_%y59N8~s{+FCcs-RuTYipIH2JpD`vuzOs(NwUU5!2oUTK((TiSEU>bnmdR#CYX8*
zreqhsqc%xA+#!3S#M-YxbV2T{JDGmWokl<Ck0O`R$LLk2XbECFPl*}9Hmzqf5PwT6
z*;gaZrz(%*3>HS++>tHc$bUF7K8i9cF<$GV*cNGuFf|4j%<;aWG>ke#hL^4R%>usT
zAV5~;B%6N&-T_rX5I}Lzo&!>Vf${*MP$jq@{+nJeeAKP*B|aNAv*4!UO50XtlIu%C
z@xm!t(}5h$c7$L3c5SE4A}uUokpYn=DiHGLWtBHO)@H-;!RB1}cSa_j>P`3(`#9~d
zHi|>4rU)N;&}Y1#kUnOiE|pOjZdTyHYp(!UICH9JAA<9nVEzh)p>F}U6=9$}K`4o7
zUH1QuB*R>V^s*nja?zb{O!hNdB^S$z<KSVz1I->W{G8XX7+)=_$!O^1?8=pUJT;GZ
z9+wuu;@vaIwC{HWQ4=R9CM-9_=NnNr-%Iugbe5*rPHu|ef=<<sx=IF=KiK%dD$>09
zW@{h>sJ!h@%t=WpLP-IZ3DLP>XbA?(3&eULv7H9m)<rSy!CsT4%kY`JA7cx}J8n;+
zJlnlMF~{jsWX{?87sZUNlXGS=k8$?;d)};{uZaWv)8p1sqa@SU7M?7)7JOjfc&m#l
z_;Pr!%48VjogJ-W#sAEtX12UW<jA?g`up=xlN&@TUrz2S;FDSav?ETk)(Yx4ApjhT
zK%y(XO63?dZxHRR|BC{2A<4rh&dtszxgj=RW@qeH(N8<wnVj=jHJ@bnYupo=(M{%4
zJPeU<-hMM@NF`9ck*3;#&9P~+9Hi7W*o(i}{>J=IaMfJXZ+<EBgFw@cCiSKDMqz4H
zGoVb+x_~hBYX9lc{Llt(cm}`$OTA8Q>M-!K9|{Ub7gZru7%m@>%ZFmj{NE{_vGz^Z
zCoF3vdr-7;QtWd<Zj?>@T&2*FOR6QVx08@=gxCUE{J3H%y+NJzv)`?|eV&O_9fR21
z_=S1(Lag<ENVafVgHGjfyucrbri#M#rhR`@vxPHP+oH2!c>71J=C3w*u`_@uwUcbp
z790h|QHOV+(0;Y821DfwQi-ex^?_a4%L26ZoDa~o?-SsgjFb&4bk9+wEFpNDX6U3_
zZ9}N$oaIEy3ixEqjF-H8(B$hi<*Y8kaV!F8QQ#8a^^c6*Q4f$f%c9+gpx6R`PQcyD
zS};n`O8nT2di#UyaLaiCewPJsH8iK1SYI8{-K|1^gRuDLQbRvrh%Rm=Ek616@joJ;
zxPV9PV!P8!MMyF?j@U%A2d;0EN=`$%>f-wPrPp<B+$1YdN9F?f&Clr0ZN`zmokvOI
zmB@dxQqGDomu$+~GCZ5LFA}=*-SmK}D;U+R@RX)+L9<yPR<1mq7BaC1;PT~EH$6}Z
z=~V$hZ}s1?*o+|phjV~r$M9K*=j9p&9aTlW8vR}Tk?fXUZA`E$P9t7sk>(O>vi9M5
zc3D~yZRb62T-Z5|dym{({~H3DMWk!9QBtOyp$6Wbwi^<k1y8<T@U-?GP_4f7SSmm~
zYu1)+S$SSeu>%VNC*4%J_^BL*C@4gQ33~s#(G6+G-~@m;kN719K%C1aY~iDXygmua
z_w<pa3fFyHJawuG<|@?+mmS~r%Zz1vpU;>x-N~1+dr_Z0E=}`Y+7ZigwYwiUBA1AB
z@nlXKf7-+uV29KAe$(=HxUYa$cX!XCQ`6(8Tjg`(kQz8Zvy)RDPDG#%2Y);U2ZpX>
zwRK`}0zsTrFZUL3jO$<F){W{)+Yc2BSK0t%@x)fxUTvyokhDbRD;Bl}o|@)#NUnuZ
zP&?Nqt`xaicHW=0UkpF*-MwFFn9+JlF!4kY4}U4X%h<lm?N0B?0aY+KUVbxt<<FvS
z(_>^~d5JOP3kN`SoKu~$0gei`;-I?WFtiDM#vlcONVK2pV<2AO@zS(hMkhPZ#8f86
z_=>Q{pwj-nH(pU-;e!KS-PNx;^6bHNK}A<Ot4X$z*mUpm=*&kTG4_S<D^;pn7NI@&
z7^(eu3(}<RbNBA_1%o`49!oDR;uJI*N>>uUoE65?^1&d%GDK?M7FD`YPz2D8K=<mD
z`Y=4fAkUG3#)E%99tHj?QkwLwmrPm|lG86X9;Zm_7Wq8ePf=v}A5rHSNag#+@pCvv
zR`w>2y*XA0$KGUQWUs93>^(EHXGk_bp@?h;l@KyAv-c*M#s8^J|8rh+Ui9YUIoEUF
z_jO(0>w81;c!WQcwjT{B?|w>k^{S|Nn^77y^W+@b+)b57Y;tk+psdj=kG<AA$J~6A
zqQ<UyRc+$rlr#^>Dmap25NlcQ2olt5Ux|UYBSD0ezh5&DXb`UtI|1}>xBG%(3I>?w
zr9!)bB<%Ok=2_>P&DVX!gVBvhEBn4MzT+P!L>D|NXss$r)B5bEK_jn$s4d<Ly5nC$
z;5)Z%ISNVhH9i<F(%w!t%Krs*8*eX7f3TeAL4w{wC9hrZ9L#5k1q^I?!_K4niqYy?
z^EZF=Uw{4YeIy7Cogx{G%})pxBql^-03(l7<0!BY01W&k-saC33N!_)mKH;`b8qw@
z&5Ex`P$AY&U3%Mi5~C_KSD(&AB#{5f-t(<F$0bGuA@rvKvo4x%8dh0FU!5feF3WG*
z^K7xym_Av5j7CgpgI?`bFh8Lk6L;-0`(x8^VDV1lGkUZ40qQ(2xhZC)FbGCK{3XUe
z1awRI83oWt_|b@vvh1)a6kI3(=U}+|>)+<$#omJ*<lZG+?L|h{_AyiX)fXX?;I*LD
z4ndseC82Lrcws)I;p<U(xz&XWB9f7sV~_C6#{*0V@y@g;y#0R;?;`j=ka+|$*i~du
zCddJs%T8EA2cu3!&uXASa`!c?6I6ngR0k3ibCP(bt==0d4_AhO{zcdviYpA@^7Gap
z0FwPbFX2jeB*%YZ26S(j@ZLsV>eUo{c8wUdzmrnwgOKtV|B}eK+4#x=r#<)Fc9E%S
z2h;BGGVNPs65kCS83Xv_XN26bpq5YOSx2HQYk(V3%rY~e8abjISaIr3>d;fL4&)K!
zI;=RSEdhb(Osn@lN5Y__>Rpk2*vJD6co9Vw4v?Yi;0z;si9xlx%Y-J~`vM?K!ffm-
ziKS;LnOYBiV&-&e*P>tlvVGg{+coDN#%EeY<yF(kh4)0YHM?pAmh*P{d@JxfUIN^9
zg~g@T)2=BC%!j@(r3V5;*&)Fz8|eh6mrStEwGymKI7pJsNdk`;8x%9BJUAGG%%~A7
zD5wYkih9iD4RX!$@M3Sb@ZdxDf^zw4^Sj`awP0zz827(edx#ljrVjxPu20o3V*kR9
zc;IPX5ohg5wbrKnx++3;ERIYrdwI*RU2E~1cf>?NClQ~9?$rHvdjq+0-qL;{`%jCi
z3gx%JRooy_P+^0u1!ypo7z&R8$spIP4HQx&fON%FA&A^$Jf3Xfr2vby;dyS8Vc&W;
z>6rk3-Y8Sz0uKH7Fw2_`V+Z;y7jckh0kP!MgQiMxVUQc%Zs|`UnrH5eXV`?79g-B&
zJ3GWDH9=9XR&&jH@jl>J&(>Oa9zqEI>*WSvuG;h9D})g<G7u{df{;xUnH>~P6o8|h
z+-89szkNt}F<Sop(RRtt7PZ-1{j}!FUTaHW9@B)`g=B;|9>p=6fnpweH!hzYR`p@2
z)mM&8ao3V4XcCsWN0iN~zk>2%oYRXFyZUUkZ!)K3?phw}s^rgt@3+=$#@kaZ!+l<Y
zAjcIvP`NMYP$)V!T-oFA0|FnQh@t_a%5NFXNbS+RS2#M2y=to)_EM&$XD<(1>Mc8}
za(cTz1-U;S!SSF^P04P2{d!$qi>MWIjZ-ArE1m~Nsc>93&4TxB;`LGn@%O9Q5B?wJ
z+v^W3)eEKumMIGpT;Q#7n?LL+9>P5uK^TuWd6>1(z+e~@I{^<3xlkRWfSv+Cz2muk
zC?LxKy6>1NWDL$ybj~x>5AmU+*Ezm^_ktx>9rzu430n$s3aQdM2`r&76FOO@wj>)`
zpHM&cnwQuDVmzhmF($X{T1nMDeLE%HHTKx(e3n3OCUL%bsCwa^O#c=R*5t&6Bbeo}
zW4e@q`Uf(q!%k5^F#wP(7YF~JZ3Y<lD$lY(`y8gJfGa@h*g92KV(4b3ne1J5G@v;g
zVb_^ND=QL`hPZkXJSAy-P7T6oGuQF1Vg)~u=JZP2r+EWz4!ix5Va%?BS#AF7DQPTY
zLWjY{yZPF#7R(kl*-pPzEPe}+FK74&)q6ZVIG`6(hCu&5B$-PTQ!KzlHlBP86n6j2
zd9j_C&`OV!ZdObT5!>H#&}X>$Qs#Y6(f%9#8UIJSE2mfshA=vHmoA|OUbQH0k5!AG
z`<)(Eq%)7saFhq%wo3iT9ce3kaw&P>36@5jNX9zMx6^Wzi10lsm~YgM2_<luZDax}
z3^3w^dATURdpwrhcS4e>fm$eQYWPSzz7D7h0#}ag`hP*|8ig7MpqibrX8f700>o`C
zEvXsO;QM!od}#Ywjb7g3aRZciK^S*Q+Fxv|<PbmNJh{Spq~~X_C4tKYu^llRC1d#*
zM*qnrJPKFazaC+}u^}U&Ake<x8x$X&cq|^>7XS-z)l_7n2P#NQX0cUR#q>?E)m{Uu
z?wL0T&0F9?81trd1rPV7I!GP@j2U3xk3a?;;IH}n^IJt34}8li=HL1|TXhqxe5JvR
zZkJ;E`q@i(N?`V6QBE!ODI3jy_}?MHly$<jH@AZmBEIz8(!Hcpw<Ea&iJC11TXKW;
zin7uMKJnEZ^_O*`+3mdO6Bn*>#ALH;T2HqU!KZ0loz8@vTO2p319O@c-9K~?i_>6)
zCiDISb{;&51c*G~B`7a%iS*_O!$9#R0DQ*^Vvmtx2=}TmVqD)Zh@^z0xB{!z(^|g4
zy4<(^7i}}*1rnlON-jggF~>Jb%OmHn{r*dNxx{>FAv+qdDY+G6cz>%C)4cigXP;N=
z`@#H&FSU6YOnE--MLJW)CY<hdt{WwEh>a<4tezOiba%rL!m;3D3lIdh$%Dt&tFGP)
z3RQ>yn_iN+g#t_j0N+bKIRYf=e|E|Z*M?wR0rlqY^<#N9A%i!GOL_MR48<6e=EZM+
zNFbZBid}tj+a~b*o>Cgmr(buR{Y5@f$@X%YK4oKqdIh!|QL)D`iNZK+MIi8VYD2<A
zSWUqcu69g1aLRbqpFOZDbo|XHeaWa6S6vMwXBDdvJFN|~u)#r-2&5d^h1aEQf$V02
z@llM=0LDIxSr(-A1u)oOs^W`h`>n=^d_HRE`!c6Xq}JCT(g?3)bxttxJ2J1<yqEk{
zY}B`3_g+MEMeBEsoNeeheURP$T!NPxaqy~Eij6VSwKI|q^EPenZl`n+fnAl2+APy4
z8D5CTy64Hahiw5hn=ks$*Z=$M4nkL-8Tve#9*T$E_nDZG@n5%<5XF}S@GYm&JOBNW
zfmGHycsI5ATttH?ef3o?JN=!L5O@j^`g<3sB)%frSKF<;x!Y-%UwEMj26tOkvuY@~
ze5e*T8SN-sE7p2n(#CQtk6wZG>Y|Q{mqx&M#dG$`=_r#XqW9W<0;OqVvWg?1j!)cu
zfrdcb0@uPpxLxc#G<ot}3G!X=$WR8%zi&wxDGD$d06a`8FhRa0LA83D!Na=BIbK}L
z_TOKQ5<S?bjV_C>j%pTx%|H99vMiQ;8%>4x+xa%96MX=rGA*VyPlcaov(&lK#wkPR
zBR^&q)a2SPB0np~i-IGxU`{I~=2XRHw$ux-7o5Ayo?U|&6#WiD_$~1FdmvEUCJ*Ud
zbfVDSE<E``cMx(_q(t$h0DRHWd1rs@)<`C}+PNzO{kwmTRDcc&Qq`Q)oom?p+;!K;
zsAy;@$d&1cW6@)+(tEvpnF$YwWJd3lEMbN4m^i~h;=@627qg%p5;hH5Vc8vRK4D|l
z;mZNGREkW|w_07gSgiSCsJ(^#$jC<A+8F9o_u;N_AoQPcxH7XgpsqeZ?jQPp3maM#
zUMhem)T!+L$6)8Ti)*6gmh41z#$Aw0&wzW?d^=<co8hs`W6xF{12*SGD%cz0_LG9i
z17*mMdd-!(tyDMtTcY8cXE*QFTh7Lw<0L10ogS;dQvPC77m=HMi>>i9g3s7<>OO@C
z?3_8sdN^f&w}oT0^NHipk5JHUmeqSt0fQYKMi|iB`WJn7P;_YkUC^Y_4U%punAx06
zHp_Lj;G>kCo{eas_}trX_4gl*aPeq{Jaf|0k<aT~a)M@X2QI>kl=9~%)}vl@tJhqI
zjbaSSNv)KGIEGl9-ZBupzSx%Q3E(8LE%+pFC2rduB~m=sd`4F6lTx$gFA42T=KO97
z2ftBRWf;|q5rCpY1qJ#4g&q@%E*+pVR~h`P%LJTM*nYTnqznmf6?Yr?oDXZeDA#Bs
zp1qpITU(`hhw&KJE=k@W(CNioUxZ#JzKVY}m_$$_x6?jYP0d^${orYqY&RADt(|Rk
zY&wCgf@y6?8ylackwO!%)s*swwL7iX@ik%ERo|;aLAsWHpf(~w5)vk0>*z*?92<%&
z1K=|Kei-&ALjcmMx2i9X5eXHy{Cg9g#}d8p!B0Bt&ZW%e5|pmKQPO`(B6}rhN-Bp#
zFY|WKQnm6_HU!MNZ{)rUrKyAj%9oumf11&ltA**^9%E~w9=8(Lnr-}*whp_vV_=<?
za%41&>wxpiRtoE5AxKEVNy2g!*wfTw61w2X8akK@MV1MW8G+<J05x==>j04Leq(}@
z#-x(g-DCBr7I*{^BA><}h^Km3WV&-_?uS-(bdgkN^2b#cgpm6>tmmQ0`Pl3(JKrGZ
zTiGjl)3YEaPneL?7h%t>qVgtqi4`aAY~$(TBiOm_B~xqGYhzqo^ZqMwDXeF3U?(;H
z!I^bL1cDJ0@)Hsvw=)DUiY*IZ^T2qK@-N>5PUSB!F4&`uC+#7@_G4Td>Yb)^QRJrh
zek2kTbKfgX>|yP--4$GfQ$*@VeTLMmKL$pI+q1d$g?WBucO^V7q<^);<G1;^VD=!g
zJxpY;6^A9ELrD$$<J!5tbN8NAr_w6s9vsB%?IfY~QXPaHGdPF`B1A55Fceodz_pKW
zw)&@qN@}|~FQ=#aQma*0^hm>D0<<)=9B_lMOF=h&yPPz{L7B36@BA0@X#?H*MT`ah
ztk9L=htvd9#Uow%TP0A9sh-{^x1EzrlV>$EA;AS50lsX+M>CR9c4%|WJ3LMJH7?iw
zOvD{8IS*$;LE9{TIGaR(2nP)$--}F;WkgV5IRMz*k7Zx~3Z{YZKe=BKKh2b|1ueMG
zzO0-rr;7^?((U=F^OjPem(gPw%TV$0=Mxw|dBn`(4NIdDTBhyokt${3TLXE4?zJZV
z>sOAr4TDz+`uNy}8wFG8kapG(OO4tlUTc}pBmXhAUnj|i@l_o$go4^H{IJ#1_+k8D
zP!|Z}?;`_?qsVdrGS-`kFrfbW`y{%R^R(wQcB#N$^)rdMJ;qI0-{Je-SjcE`n%XTq
z%_j769pgLEwi{~ZZ-w7wcIhzfF%W(Cv(Ou1U_pPF!c>&@s-SF2s(V@)6r<=L*4uvI
zYN<5e#OuvuI<}+MITVu_w#a$p2M0CV`Vl-DB?c2SD)(VW{-r`lqNtt&R3E*zKK$)#
z*`9IH8bH;VcQJ(*Q>Ox8WZAFjlS8N;wbp}qWUtRwba@_SU!Hc3zup}0^Ey7coJv>X
zQXflN=)zI&@Jf36QCEv5!24IKbEn;ZQIyZ}Soc~GK(YGqT+GL{clyw7#Bpaq36{AV
z&=zu%P-Rt?2PVD-A^((oVKOMJJOFDKrql=2_x}u2H?U=e=9VX!U4PObH1};~BX`gu
z>DztE?h!3tbw5m%CR|5s6HBn3Z{f+*Z2t<gQ*3UzcuCkjIG^AH1~+Nz`l+q;MT9s(
zi_}J=BB>Rx1Wn_q10ZJ&iHMVI4k5cdtP8AjA%{D5gU}rPapgV>4Mt)^V&Gk1<N_<B
zfI`dvjm9h}g*>KfCHgiz+*#N(8op-Ca!XXrPQi&YCjGKl%0g>a2*_=5#)JdBqQLk0
zzJQ}<<z{Kl#h7mYr}}-f(fv9L)OY;lyY!YlAw>oky@u(ww|rXqG^D&~qr^&b^LgW@
zX-sb6V<!psxAGu^?(X+c#B2GOIFmLEO@j6M4sv-&j3o?&E<oFZ3^o-MWB~yAFmm`c
zAQAzB?KGh2N@?AQq?@&;r|ePaR-(^zjcsC8{STIpc`Lg;#5qKwO6UqR8U3uRc#>Do
zTzhgt?{SThJh+R|FlhE-bSG{f{Mh`QnWj;QCG7T-8;t&_ED6;g1>fqw#B}xpV;B8J
zj-j6_f6Zs0yBj&-n%IVaaR46xsf!0y^=<&SGPbe+8b2Wnf_y0u>L|_^0H>#)fEqXj
z_?^3C1}1(U<hNwYFEhsfJlApJ<DUKYpOtc=$%8lb$7)ZQ<a_+ePO3kc{LD5V_N8BA
zH<PZ4O5tSsY+bnO8Cu+!@L2tmysPE8J)ON8XKg{rj&HFW3GbAno&HgI)8i5=j@IXm
zyWM@cg*X8ePZVSqKPDe`s2Vc7lESpQhXGjs)z^1@VFW~eglIrL>EG6R9|c<oz&2Et
z*#NM=3*Qz`=yKGZfl-(Z4S$X)PG*87$ADS3Z=^Sx`mb_LB?9ykm+K|e<rZ#}RC<?v
zRie-G94c@a?5x?(mZ^}by!1TMsUGx_;uY2!4?UNQQ3QSS2`QK7XoIc?I0FtMyp^r4
zw6|ib&|SLEy!50Ld?eCZSRw|eJB}G?G1QVo>RS;COxS%4#9&5rys*C!AftzZeF?yh
zE=w?hQ~yMOzi9pdH#Sp3rH);yV3<3DQRk$VJ}Y8O(h%Qolj{vS-%)9vzeFnJ#q<BH
z@)2f;8sYfE326t?9Z0QhyAD~+8ZVi}awrxbr>bztQAS0v=M~LIBiHq{G^+p?EJf(d
z*RuG%P9R*(dv1HbSKv4BZ)WZ{6c3TY!cM?Y(8R276jEToj&Ua@Vk9DzN5-omina)#
zT~y8-2N(Q#w6^uWZqx|en4tV*;Y}s^t4Dm)`6+2><^PfDZ<h~+KNFa-gopOiHV9C|
zZZWiRTLxXfmf^ztsF#j)5tr}15x5cLidN<5bK|}|A(1y;(?uAV+Wb_c)7SN`{;nd2
zqN?BCbcn~s*@Ms{-wJ#{pSt7YC&g`aUteI1CM}9390s2gyQ{9xPe#>}JG3M^L4wz1
z2_go8|D9D4#whY)fLye<>J2#S54m~3d0FzV$1wV4srA_}FT2O$?t*kqisna2_z~iZ
zPoxOBLTrCA)RAYzQaVZtzJI(BFl@(BfDQVTex3dNP5-8|K7Gt)eG+`&rdN3M9qysK
zi|(eI0Y*FN4tdaafCr@_lkEoMCQ*weAUR}tIQC@X?l7L)*VWhyi)rk0qJ%>-0#fRs
z-cm9FQh5Pj(FYTL`1`QK%u&cC0P^m{IXgJ_FLK~!yysn|hu(QJngxC8D<q+bA4L02
z*6-hba`9_`=k~)z7YdCczF)&%NvP<vU#fiyTdfWcy*BG7B(i_5$Q?pmgs&L&^Ik_k
z<AfTI?-;i+Cwau-b)`k(x#`Fh+w;ctnf!qqVb!wu%@|<#*G-x4$z()!lEB44S}9Ao
zyWpb7_bxrPRVRsdKD|&+e)Y&+VB!c_d62P2QI`VLm*{wT;Iuyh9Y7NTzMyYN7%BQF
zu{tMqNqH@L38D^8diJqdWrCL>zpOjgQ_XRVweM*&R)e;;T@R+`T|qpLD2mcn$x@E^
zq)t{Q|E#4Q+{pJyBK%q)XDR8TdL6vsfH(AEgkx2T&}PlD_<|f@oIoLv!pjz3VSwJu
z?PADoC51^choNGGS>M6&fC)R)oe>IR03mxoU^^6U8G!p_X0_-KE@1oiZh+oWubADK
zV5{_5^Hu%I{?D7kQnasKIr;Jk@@dmYOz)DZ%G#k~+08qcX8RMt+ZIeM+;@{=*4N7P
zl3ql#gSn}S`}^ALI2cB~%AbC?#NWM2;-}izbt!M!%#O5@8ZvG?>p0IX)W}csTvN){
zr*DS6`HhQ#$Bm&erC8r|#>fQflOsWAV4_5dH4u&{+;RYynys@OiEAFP_E7*9%(<Ve
zm>%2sx%`JT%avvwp$)+{^E$x*rA5+zGJUUN6#_9v2&B{Qu@{IWFWL;0@bSRq*;2JR
z8+pZ9B_u$5csCwHT_jZx6C)7=X8{Q67o$Yet**E!icI~)W$_UdcY%SD2fChXvJ3|0
z%?zrBoO!_09mG)i?`wTaG7Aj5O9!1FMgmeqhOi3?w*tTo>YpYB$Nvcif3c6&JDt*q
zRV5RX-s`7TI>y5oHxv8DBAbHq&l=So#$B3QZVxSG5i&0Bxf&|7l}N=yA_Um!G%XIw
z&GFXWONg;5n5M<q%BJWRcFN`TBPvrA1D+f!GBsJYx*RdbR)L@L`rOmgR`6Emew>N>
zoEbBE4nra1Lw#pi1_Q0UC6gerAl|=WG!GPJC4l*jG`;&zY5~~zKeMM!7KT8>B{Q_n
zgvxbx7c`AUr!OB)OJk|5YY93}!G1|QF!~<)$`fow4aY|>dt6f6lf33I8iOYs{b$aY
zP-=%OyfP;7h$GjoaZboeun>5=LVzUptz;ASS`1+2)QyH1%>fUpGH;1*@<@Ci0h*M3
z@_l`lvdAUZ8^u-yux*6fV*ES#@f1W!LC9%STcnlWk2=2;>2-P_F1fCsue-r1EV6o|
z!93$3^_?SaUFRy}%A9S_{%!*oR<5AN0AEU$hz@nutU5hEC!Z+4zW-okyTXUP_S*`8
zAb{!a;o2Nvwlc2MA<c}%$pFHcaFT#^!3P2H9Hh4oS!PH0p|Jh~u*|)Ew}B$^?~~sM
z|Ih1SZ@|(;63m-t_sTGsk7_M*fRH^y51zyoCDZ>TkmyPNxAfUJlqrWGN%;=94&`#W
z`SID6PrV;|Yrk{tGQ9bYA#1cHNBq6ySCkzvED@TsEpib|R_1@Vs55yLbEgo*4cwR_
ziK`w8iG%<jWDhAU2*p$lFum0jA4dvCIbs<v>Y>)YFVsFYV`$KBF0tuXV?4ps%C}iJ
zl?hR6j1_$T2-tMUZlovPg_sw%daQG$d$zTlDka`xvAH=FYa?7vFLE2>ymjgy`6Xr=
z&t>)o4`=|m3nq0u#PHwcd&sp#dQK$(0zm-b@;wzILP7{0p8P*^6`3#;*ed`mv25nI
z2J&|?F<3b#NpR<ZZk}I=NhsB4K7yO8hs0&~^W3zF9~ItAA3cm3@RR49x7;lB>?CeQ
zr;2r5K(|m(#)SdK%6PL=QJZcVC*4L?K?MmAE0Nc;jVB;rC_0bc8Y>xWT8~>EcWxpD
z2?hkC2Tl@$6z~M)(B6bWb!77f9EHNF0kGtAh<<0SzYj|6G|Vg4gPdf-(#$*<R3J94
z=XWI*SJJrczCMm9aUj4CLEx9JD)-soLd(PqX1g(|z6UaPi(ozNd8*6f!yOS7m^!HY
z<|Nra;0Z9Pp+wf|B1;Dhtq#WtUr3T2)-@#8IpV-wRYB;E+qkl}>5&P2F@V#$4026I
z#Gtrp0j|w!)^Oke2RyFa^UcY1(aV!6ijntE$Q}5oX%zxg?a7Ry4H-FrIaTtvy039~
z=G+8Tm4j9eWbYZ+)Zl*~StRn+QM1CkdS@{bymP|xu=+I{e~6TI*!R#0(d3R~p`|6>
zvH(kJMd-umviLD8;6$W7qN5e7tH+%XQnR|uVR0jWPA$t%CRUz1G+6V66q|_%Od|0A
zD@qbjuyp|JZD(3{V3+<2d(2}J^`7w!&D4+m#vT0^SWjxN<oZ6Yjfi2zek94NlOq%t
z+K;yj=ahT7wvsRYEi8xDDawKJ^l=;^lLw}~FM3N^&C3Nmt#>5vOqY(YVH3Z;)OBLG
zDPHzaCwOuO1gD`XGEt?L#eb)>&n=`-!mTljKaw1y{n5Q+WRco;PS(RuhW<Tw=)g-J
zu1komJjlRA_-~g^Mp3^8s9!ODM}V{cF3k5&rG5??%)1InQ*7VlOQsDtl`x%dq`%|r
ze*{Z4nO~*}#yEG0tQ5CTUP$+^h&p&mY^_Awm8U!S14~omK+(Lz<Sv0n`mlH9<bcRH
zf5XP788oz#@i$7@Y9XeI4?r7E%vPcavyCgv*tvybQoLGur>p!QVTbLfhIjpwsgi&P
zJ)S!>*PR~84~ilYK!*|j%gobJ%x?f@{H+4cKZ8c3r~aa=vnRaG_d~u8qt{KhnZ@x@
zShv^t+&1{qk5~yxR@pxlpr&(cx0WIDP`zmR!1D7>aTIw7S#jYazgT8Zdz?yJ6H_aL
zNV{3pln_jm>N=T%^DU3MMdjXULk?w39p+wpH7{!g0aw6Ixq?E4!A1A7ip47{xN~lo
zo?%L1!^u4`UN0Jyi2)4{>+h<K$U?E!1FQzIbO`XXKd+W~Y@K4g^ULr{iF+H2RyJii
zErIr$dS6`3@7=yYe8`qs_CG4b#Xr!0efufxH*u?sgPDw!hhtq@B|kQ)D$cj5uWif0
zapLNFp=`z2#2#6P3{*I2fa7QoG+B`eyw&RB<qTvXIL)H`dh{56b9|ba_+vI$&+sth
zA{*=9Kr$E!@pOpz(ZG;@QibOz(guLkZ7oFn@0>#J`M4Gtc&csnp>HP`znk{;rNaAZ
zf7P9uxB%zMWrsO0VxfNAdjlUhNZVZr(s~x`Q^PExCL#+0l@)2sr#f53#HAM-{<}Z;
z*4=Y9U3b)XtHwWr2-u?o6`Ax{T3s@Wfj!zx&wuZE3gg4CtK~Wfl~3SO60mkfe)WMF
z573H1hr!SY|36Rh0>$|j;1o{|+(+i~7JgkU3?e7eCNr2JZ`VJLZ6>a{f-}#<iG1|@
zZm?dHFHPmVP-~&7c(pJ3^66ZFk*kYfs8y(!_~mCXaeh8;Gwjhwawr$2YbEDKTkdTS
zA6>Gc082terlXgwE-SBq?I-3%jdun}`=Kswb3A0u29wl2t<0;i!MU9uPaRvnFQ$tK
zc{~FbqaYgr$jyTL`hN|`au>pk+V35Ba}Bp+;7;;3fA=vWu6aj`*8T(I*kU_^-g1Gb
zN#MdExcACsQ!GXPczmZJ|FL8C_NKo9uj2z}G8-U0s#v75(jfCbb^ns$4$j$|lcbFI
zZQN@o+-I%8i|zf!mmFr6hWmN|OQi&p<ZfD&PGN&fr~n~c9k`<o?)GnOEkhAD0fb~^
ziePZupTM;69t*txdHL+?BZ|{YDwR%!1Tx~UX3^!_(*CXG;uspXFN0(*8xo~*u3teL
z`Ee80ZYGPj<w5*KysI@GHYc?iwwnASoVT3Qy?h1wUx}_t!R4g_yl@nmM0r|Wo_|ur
z3nm!G@&r`ewkF)mnK(`*nBv)KomYhosZRV1jG@?(z3N2B*C(tBMfnb(RC*QZ4o>{D
zs9sXazi=wir&U<qGbXJ1kA%Ct${>?er62Dqn41{9i@%v9_gwn;8AWaPRW;}04~lMj
z%#u;1`Z4(-F$_o6wi|L;x;^2&b-JfD7_^zR3F^j;tn&en@D!nUzJ3%ONzA+deoXOw
z&U3d6dAPn)_x6@W^*-F?tV^%m3Q%Lj3lM|)l-*&1c<6uMbD0_xXfpshgUvDrtVzFj
z_SDta(+(RhJfATA(0>(hFRyxJMq_YnHD(NpZt}dqr|D#L)GsJ*yK<Wybry5TaVX88
z2EEb%F@E9OPmY39FJ+&K&l_sE@aTP7(V$m>9?Ek?hOAV@7cBfo6q76MGMl&u41Ya<
z=84kkVJcYX@oi<|X^cYe@Yj*CSk4SB6sO1Ng0Kex={*El+6TWuv9<uLqR|Xwz+wD1
z>(j4<S4Oyp{&qFBiL+HBm$)~z3M(_UHIHLgYbVo%*W7*gJ#Ong`C3Ao*z&@+-+aUa
zVI;hT|2&lsGcVjq(cASa2Cl^&zaIz1!go~x+u9YJZL+ukcfbR=NTJpB3I|w`t}M?C
z^?Wd#^LRSBX|s~4VyrZYM#H~+#O@Ph!0rMigbK(Zm(I5+%vJzXuF9+#X}opD6Q(}+
zIsHLj5$>AnJDO>WMwO6lQ1s})gEaT^$k*y@@q>jtn8Smknvu6RU39{!;u9mLaGs{u
zh8MUTJW`@E@*+yq;;Q6oB4Kcv(&GhO@<6kVi=<_+3wA9g(Tvxo61a4@ShK5`@MI7;
zs<45N9uAD4LGT9gh~EE&3u{KfwE=M6qt96X$l-vo#V@@%SLXGT8v?|(-_9AvvXl%i
z4^o*Fs}Cc>uV@$+mLn>eLj^i&^u=Z~1u7;2Fw<&3PNF4+>r6a?`BRl1PQTA@s0z<j
z5@+?F*N)jrcA1^<n;KZ6rb;A$zYj^^9p~Brozt@c7hSGZ@A1k5H%Y(&0mYyNG7#HQ
zVC?|dTQ!n@I=#SEneSG1><aLQcr7CS`8H%kJz*EtG+6e;VITMD!<DR0)kY3=2)?Iy
zDYA15QzzmyS#I)kD1B38*Tr~NsKH8k=iJQ(Je{T%?QfJ4Q=;QCoBkNkOPmBJ5a_>m
zZR2U=T1h`AOb5#8M%B9r0U{ziP-G}X8T1znj6i{P0ALOKnwQA&VD(@ppA07lGdi3*
zakdulpI`{Aa&Cn2v!__+<F;b^Yd@u~Nky*Lb@^5|yaEEvBNBf3+(OCo4412qx_HQ~
zRi@0q_-!y)nS8mttgz}6xA(dZ_I^q68%;YxR$M#V_U{DV1A({F-(;ZYpdO^UdN^&7
z3qPk2sw0zbemK-ENX7{2B7(t~1R=<D714`g?F3j=^1}Q66p2Vr{qFRhQ(hML2pwET
zYeOLhCbbbqwFH>AjC+z!StlM(vW$85MsRCXTivJh5KQ7;md<RBeA26GbWJr%Z)-Zc
z>UYG$7LeQ&#=#b^tx9OWHh5?tQJO<S&x}?VEE(llGuJ$d!D-)8QV7gMf}+jcOJ(gp
zj_#{f3qOI$EqaM}>B)*aNhDtb<raZ1pwkce*RBZbLm>nI0b<uSp8R7)*!gtzV!(sn
z`gyqNeWOF)f)SVClUI}zPy=b_I);hxs%bnTT1m4XotE9yg!KMkp`&l!V)*Uw{y`N7
zbXx{bs?)bq?fpsu)6T95uG*_?O}9_1#0rfY4{^T2&i4`4Oj(Q%*>F46ASX7MRiPlT
z5nz+(sqR529}4g4vP4#5Wd>1j2mr1`@Qyt4x-gT_?d<EMS9>z`6WDFqOeyiK)^zSv
zZsnfC0Uz!!8J^EZHJ)FFF8N_nJ&s}v^w{A3Y|)Kbv*^p1axAw~q3wLqlZ%F)9-mcH
zWb>NNEWjpJkx5Og)m3g0I8@Y3o|&v->)+{~3P)UXfWPlEZ`|MHAsEmF#Xtt}LPIT(
z5>oI83a=Z$i{!a91vDPNbJ*3U+g?c~FCH8yH(I}Y?rvmL<20V28ae3WXy1n`!0WIx
z?OZN>=+!B$*`S6e)1cd5jaDzcgLhWTHyXibxr|tTnf*ZOa{{|mD?3|3_C=fEt-WMn
z%4d%pb9u!DmmR}&X7ES-WCix`@q}dF4g_w3o5PUpIIVxjE{`FI&Hx3W{VM_@#!!qs
z0Asv@(RZXoAx8F7Mo~24E%CA}_T+a52ef+q14h?$F-7{*`d~NtQ_Y#ugTxT-c?;KD
zQX<RTkr-*9MA>Y=iR+g=j=5y8^rkwohb6G9&xvRWd5^Eln;eC#I7y8gSD`>jipNXZ
z!%L=Gf1!IJ6(L;-j@xHGsJG`~6Cs2W4$8;CvHwl~hfSjRdI3ILzwj;K#Pd6c)O`1P
zIi>c^l|VY<D%O%Udj@)272%?D1NTeX8~9J*tCE)nn&>&PMG$>*ObxD_n+a#^3xdje
zgH_6R0>`sgO4VlPOx5&EJH<Wovgg{lK)&PhOc4tC(&~b?9$SSbW#MD7T4<2dJy?XG
zjs;g=GH*<>^H9e2K=~oqG1#Gu$kv(6EQ;_wKv=wJHvE6Wr3aXLfzUYYlmI79^OlCk
ziv|(0giQ_>OJzHLcZkLmbm0kQPr7ZIpPL6;jlB1@F|jh}_$j*vl|PYj?JJTbPs}Hn
zA%DHd9xtIZu36qRP6%kBHfS0bsevp~X@SP`heDzL^X^kL1c?!NOO|<;aFa&}FM?PA
z0*X-v{rio<3n;=50AVS9w$C3z($j~|`kGFK8t8&A<2hX@g13@A_D58hhugP)edB$0
zKdDRc1v~hOaDr9TOjF#|SiJRy`LQ|Snsyql#1*>b$%YmARMcYvdzA<Nrk+b$1vz`~
z_9&BPKJ2v~SFu*$I>yeKbYe5Kp0IWgqag}n!G+z-yOQ=iV5}5=5}@i2>2pWE$cSYW
z;YWZ_9~bi9-#+rGsoqFp5aT2*uJFPn<+4TH7^GxQ&R=~vAFFaS?<|_l3kIz!l{7WZ
z-|ZzDHg2?iC+A{VtmX27Y-KE%<n;^d`E1EI7-kWb9sy3qz%XKatE<R5V8Sl>NKnk0
zY^tuAvQ9Y@?rR1Dm(SoTYXXlAPZ{X*{eSseM}hSLV5k0}R7fo&*Fe9AcA-Ysc-XM%
zo&E9;95S>^&!<}gaExo)c%8f+N9&&G2$f|Pd!}vOqUfu1|5o%aTBZ7By!y}43fMO>
zUE}H0FDa=(1=nCc&O1~3sfw_3tQ#id<o!#3f#c4{HdsJ)TTCCg1DXW8HvuxJ-q&S~
z+={nROrHRzsy;JzK=AqdoCT<cdt63R{Wx^Ws4l-OZChM1UiajD=6A>JF?V>Xpdx}c
zar{By`adEagJyG<n*0?uVr_d+t7k^pR_LmBJRhFR`E0&jt-adlz$xj^S&wz9-ETUL
z65lto?5Stqjw&F?eS01Z+i)U50Rj0z5b|sQ-bVrT13=4ZuO1;MK_r52nOGExgx*`;
z%+q?F=7ulV&^p19nX{R>qAbAs)A-rFA1XSHll#U|a;%gOt9lPN-6Qa7v`pi6e)(2l
z{JJ<W1iX;nsZHvgl2wp+Y&=i>#`#uabu-eQ<{{kE1cdPw5X7>iK?O<Bl<^?Q@oB^n
z3TFVo8F)YY92mR!-C>^!KH0UWdl28Ur%Cdqro3Vyus}?t%QUwT=Ic9By+SK~%Iinp
z{gZfPDQ@h{Ts=VxVo=%1shQcpGWcbunEe^ifCAN~Iq_k?WR&91x#p?jmH$#)Zd#<?
zbS$l6xhI44=EJ|-T)+X}9_8MIUgUu@><5Zx5a3b&B3trD!wg7qn7-^~sH?C?VxKg)
zKMxe=sqFd*EqIlua(?+b&6!7!Q!MDNY2cDT&vv`%Q@)QJLp<-ZhK@drb3|V`<cl=R
zX|NSs%M`2}@!5|}>1#*BE_g3iR<a28T7<1S%~mlJ_(4p7Unx4bd{@_?d_osCl1SzP
zMf4dUGO5<k`)yP5roLvXHT|`R<K>!~IJ@TPhbyv97N6G%g>K72%}Fl2xvkY4_nU*y
zJyxy7$UUae?ro-%`cKjo$1I!>4WwBt9+eyE=gd0GtEPyisb_r%&l#&}cD9e3Ckw9}
z>7~ehrs1OceUG0JO+Z&{_pw;qp{j|Wzz}ih_Ugk|Z=%MH*F>b*AJJ;MDHX)*>WEL=
z;1Y=mb=Jt)%3)<jKL8a-nO0w*Q_28-QVH^q2<(67zh9`oWeE6N3ixoCk&Bztr0KW0
zUe64!hq{wL7Fd&HTQ=t0X7S5IOIkRSR3{sJo>G!US?7(Ic#>cxhor3%n?1N6G;M#J
zq(?Qw6L*5|fu8ywH@W19&*|y4*k~(`UE>z16|BOzaam^7;^X4w+m)V70l-p9I3A<k
z1}pYmT69QZ!x0p?D0i?=eh}}z!r%850YV43{%U21f$xJ~Gvj{^lTS@8_Ags{o%n^g
zyCD++&x&n73+imQ=M@)&zGIq>c+r^g<6uWLyuutxFCP{zd132^qhCc*;_@<6bGRE)
zpNg}YpP@T)z?(`_aW~$dmY*8^Kenda1}m<D=Z!y`SONQ5Q|q%#ZF4@{el<w54c0Mm
z52k8iLu3&YOaurOLzM|X{zVLfpb$p@#O&j|yU4kXp!b^T;u(tSGBa=68(@}kFD_Dk
zb!KA(Oj0kAi(lna8(5M|1t3Owo`%y`Y6mXo9Hy|W2CzQ!gWs-J#atjw&~|M30)0g?
zWfT6Opj^mG{1?!l7$Aq8<9HX#WeJ#4;NHRcIW2{WSOnp_I7xJTg+m76k;=V&jL5|f
z8%6d7AiMaS(~49+dA>WaPQbtCS67F#d3c#HsdkddXb<v<rzdSIH=)LiYb9Y$Nq%`L
z5%*RH8i}tOlp|>6OS%0>QXVhiS>oZ)RW==B#-I&q)@HPwMtpii)41geSZhXnv%Zs+
z^6&*NP|0&jrp@dEwOLm0UEF0Nq8$VQMt=X!c6cbRQGhEEKZOR^v4F|b>8S&Qtzn4j
zvO;SKbkRxAW=8mRAC0Iub<$etRruxO2i^p4{e{ppIlVJvFA9>;CgBdLUqjF8gzs4v
zv12K#=`}zei`|pZD3B{}(v#scx-+HsSs!*TDP4@42{w-?THyM13ir+gp`}paWhXGj
z0JRN50pOo5WVGEzfsFxRqAU+ok^P)Wrepq^E1a}VQU@1`d^ef++6q46+78jqkvW+#
za=+(9j9npmc%r*uI>QT`2h=}<0-CEKMO_a`U`1zdR!(|5r6dL$q6FcHoC8wgBblHm
z(KukL*$pb)OhmTQBKoG2nHlRpLJ*;clf?WYP;P+$HJ5~c7Re+itZ@J<{68YZpRrSD
z3c6QVU8S$O@BQuw=R!K0`1s6Xtm`tsMRB#8fF?lF%qFyGXM+__Yec~vPwn(9xIifN
zyIzTAkek=zOMS&5Di>_iay{mPZ%@C(3|RwWd%^61B?9}T4n>ThK|W`$i>Y&Z1vu!(
zdia<x3z(mY2%UjM-~%$cC{R=r098@WP7OHk&*@Sk%_Nu%i=pUhiNvLzH3dBstV#Ui
zRsse0*M7y-RVd4Tr~A*35&qwK$YS%%QlOz5la^Wq4u{!XXx9~u5IR!MSs&j?O+Lrt
zrUEhRE3)&Vg|o-#@2U^lv!a{k!<4Nq{3sKN${Rm7SV@1TY21|q4#gb(Y#sy#3Xb>q
z=D11sq_En$Ktw%2R)#6l3qqp}#qNz%NB_$Wra^Ik1-Ny!-!T01V7I6}Hky5C#(-rL
z0K4U%xjPh#x3>Ew=r#=Ps)x(-?$Psg(276WY9P3wQz}}oh%p&sv?!Mlzc2RXO6+>j
zlOL*vuMSy*($Ld;#2p8=ZpJb^+B9<Z>J*_D(o?!0c?R-dL<=>uA7B-!ab4uXoen?{
zFh%l*x4JMA7&;?5_}|s#2znIaB!I|z@r@UGJ0@^_P1)X0l2p+lPZI6o^-6jg$r1}9
z-Me{Y&d*F4%L27tC&}|9DIb@(>JIPe`N}fy<xo!$K9Er-6OWP=X-u7{aGm>nYchGS
zcf<B{Yi}rsGEQB8uU!qWm@wC&yjhJgIO$%5B0N>V5xpRS_Z2*B`GbRf>X6>hL6Fkl
z2N(u8+W-Fio?n;(zAe+sr;%QSOK994OB*KH-8}S_l`s2jrJkqSUXfjHJQ6ji5b#LC
zB*D8^D*)&YhfV~Cv0vVoIm;!{+ddn8J5{zK7{2*6<&pXmef);fGaC_V|F238HbXgC
zr=<77C=>3n?!BwLX00Gvn*7$8qHQROtA&fj3hdI^X>|jI4OpdugbXpE@*s6^1Ts2V
zQIOLBq*^GY-{0b2?j`Oudul?I%`*lGYBfmFE}G#df7U`v!TLNx6EOV6rQO%(U#b~B
zy`F7FaTL#<30!uwf}7Ch@7|BE7<~QfYvao>Bjz%(<b#A1t2g}?HC?ZSG&7b8HOd>K
z(yh4hE$*4meg-=6BGzL*YjAboTC5*b7Eh^NJI;2%I`j{!_lHfD`_u)10y+a80vVB<
zDApN(^>Tol?N3D&YJF%;-|lVph2SX*<At%HYo>{zKvbN9VZ>px|0;=Y%tK#i*CKfx
zY5!#ZR!f<M=~Fy4Bc*V`a|!HWXqO0VGsC?;n;yXqP6%p!#hPYeNz1N&_{c9j!0(YF
zbR)6Vb+t6M3IuIyven~@@}J|W%_R6wE9`AK_<kW-^=@~&x;$K#p9HY}L4qQ9P@uB_
zsG>n6_Md(P)Oy`E=F!HCRmPf=u=!Q#%5CN|j8^Nc@+@r@FFQtq``)cwy(A>VZJc}4
zKfEcf)YZj)hL1#uMe_;2FxA|SVD$M_svmDRAalk-Lc?chks7YCiA6lh)+BCY#jIo8
zxcd-zqK4Pcy*lnE_)_4il!n)FfLr;%x~|jJ2dZN5UN{pP0}P!K`HF`DO7q{J-w`?o
zd~-i>y7i}!4oLUjRamSLjQhw)&JV#Ng$Ys>IVn2XDU^Sx9VTToh+^QXHE_)K6D+WG
zc|7QOEK184)_-<m_uQizt9aAtE#1C(wiSDuc(irrln{b|dUi!nQ$=j=*(b^vgT}o!
z%MKuOd!;=$p}kM`ysl~9P;fb!9^;UV%8H!_cHP&TAV`dk4ukwleuYt#-vCOZiTqc<
zLiD>kx$t=KmI`a`V1YChm8$*YN8Ce22AE7-%e@aP|MPAsVdE%+Cq1tY-nlF)xovAY
z?km~46~c}&se@Jet8Zs0+}<#FWJ(Hgul0vyRRtF*l)c|??~IW$Ryum`oqTCRhj)5A
zVgl>PC>}ShG<@U}xXGV+YqEj|QU?dzDI*hl<=v1aRj?QeaUMW~ym_#VoV0QG6q6Y~
zdv5LYfP5t@JX)i;akiWF1DTHIrnr){KGZL_j7@z0V6B$>qZ^w3v~nI%o4d8Yiio9Z
zThOQeAC!=d&rn0K9IpRfd2rRU(o=&2#Ux;mAl>Tj*z?BgcHl4p={fTT#+A0Zm%9-Q
zD&W>e=B<5u9v13Qh&nI|st&gd`}_7F?x7eL07jVaeRALs`$v2JAlm!|ll+l}iq~>P
z(0p9h8~LB)iWOk{Yc{UtuYB-(KR)+S6c10l5V4Bx?)Ryq@hIbWFIOo!c>3n+-Qq_X
z!@UhVFlTW=54h-pxwS+JmR)1t>Yso-iU(Tx4iZh;tA++X-DBN|XBXht#LT<>6+C2$
zp?$r*%F607?#PrO42~jP1PG_De>DK%_&e!zFF3nxh(+vr#lPx6U-+$J_(W4H$2OE#
z=j$?VocbGJtg`2@_mQy)lUslzuS)pqNj&B##)t1M(i*0^RCCq~+V7l)a*#Tr*FklX
zCA4+)9EijMRoEI$Y^-=^j2nND0f})cW0M}RtS5GVB}OQ3fd|8x*P%eg4I0|39vL|(
zuP%e^kIBfRD3<_Aem;MW|Nqt<Ek>1Fm#Uq1UD8{9gQL9DI1M(}Z2><$b#CFGH%$do
z`BZcAd~p!99Rc!$*Edn2BAF0}1Opoz@Yd?jY)l!_+}JMq1{d+4vs6(VQ+k&HE?`Bd
z$d6VRDnFnMEKnk9t#|9aUo~G<=It*wn1*v0n$wQBvSj=MgkT~NIx#k~)&W*VF)jm)
z<Z%>%e|t|ip7_&l3L_Ric`t2R91*=wYCI)0T1M}svp;>K=-JjSUwZ518)uvfr&bcy
z>dCY{yXsHRYFL)x8IC{Np4%UjUv^#>E(?e{h5F`?D=m;8hZ1y2NRq0V8=y_^b<3*_
z`nt?csQ~6}PPPfp9%49a#xvA5RD$0@Kv=05?+P#=5Pm2lu>ixrjwnJ61-b%&W_`@p
zM}oS0vhwj9MsRp5#e`+<$x`mFb@bncC@SFxmfXJ8Ax!-=k2CNcxk`_JjtQ5E$%}x_
zjP0~Ry2?*9%V*8Fo_MvyopN*_o&W|x4d#p<t=-I%j<*JBp$R5o(|g$#YQ6j}v;8`N
z*SG&TFxwsFNgv-=yY2_R_63n$U^KsdARi$hD2UDk<Cj5h=2|GwRREM}*#zfrZ00UR
zeBDnlJz&*0Rserv>d{Hyh0F+EkDOs<M6)qzm*ZNIZoi%;=SYDwYGwv{c`C#_{`%x@
zmzR~M81d|vI6}h?>4v^qIYhcULakX7wuq@u*}c(dCvU|ITpo4ydMdZj^BUc4LjIk8
zQupw*MeRP^Ca6nKA_W*PVZIMzB!=-52||!>kc=*hat)xYMA+kkGyZthnCk~FN<J}}
zN_}FdsZ4|A&b~%l#IWHT&uU1RkEd8bh>tdvJVU5zn6<^5!@yElJH~$Zx*=9W=hwuH
zic^+cRP<}1%Dmv1YQNOvdvUg$U3wJ6{Pe3AdUp-{(>EH|O02}TtL$4SJAkU@5Ur1=
z9uA(@@#?mNMb*hUH7`FIP0qui^MD5=gm5Mz5Ca1(GH(SNpn%r_;8*kP14v+fcR|@t
zF#MG_M;H_bJ+J2MIibDq{6620Wk<yH9}XN6_#wA~uAz1ihVAUy49R9=j0J0o$bR&s
znCvl|BSF4zv1Uw4C+00v1tJ>1!b%scb3C83@)MCSPl}(~H5LGJ{4+=UR_p>`B2~=g
zj7864Ft}#*zfTr1hUYZoZe;YUxkJCAA3*WoBv2;6YcL$SiataEZvepOGd1i$dj-hJ
zs#{BJ-Xqe-t)DJskL0F$=M+SH(7N=ik$Ig@><z1~Ny{xAk<dKt8GioFa(D_47Kvv#
zUG})WQ!KcTIQD(rV1&Q)`v(T0_buq|k1bSstC`LO@&z+ph$x}$sLQO)2Lw^gHUFe`
zv~Lgi0U-O^i_+=QCImFDmgZOhmfd%V0oiaE^-$00I3s1GAQ6!OI(82-bj?u6n*j0)
zw1_%DZ~1%woYx(?L@&%ZgOt#zV?CHJciGdeW9nX!p=*yiRjrHuBpSrJ)5+4Q;1=^5
zJ0N`O(d{55QYXhCof!^ty}mD{oY6Yt`m^uJA{Ho?@<nEElJA$8)+EkLV43$*?e)7;
zCK0IS@?k6jrjsmqbR!dFJ@jnNl2wKh!ctgX2^g}Qr}Z5gED!`Ej2KNofD-L5u8b85
zck6cyGh;pe>yLT!bm)m}1>GXkom;rFB9j6z2_t&^8%$HT)j)!E?r{}XxTe8%?1Ni7
z%`de=?p$%o!lYhb2b(V`*`j~Gyid4@_GoFI`?%6eyHTpUj`7DU7FEQEj?%c2UDJ54
z6?Ya*<8>&IAt_xNJo%wi@zMRTp4d>xSqjtN1Ver*v%aaf7oD)niir@$NcvAI@d$;w
z4WQByXhs33zpbHck0mqmU-a;DsY+bR4_8yuP?~{{g@w3wy{UK_-l`nj0u4^9UG(_M
z`Nq4Q#MNQ&K||O<w(qZgX~dJJJ2HDYK;BLaclMc_s=WH@IV~7eq+jt(W<|ZciRX!x
zAau5IDY61k9#!&rV#tCFNSY-y4WTVkm^qIz)R#o+-&sF^kw#iT!C*8H7#X(?DAXMQ
zRp+kh>R&w?up=z4ykwT?R0vM_SbSC;XG}+qn_9>V5lUb!cfV;EzfVK-bPd+8Vov5_
zjgxR>t=Z@;u+%j(+&5%25<7<-I6q<so9tNmnOhXCY)X<o&&o`H7zKvqzPbBBw_wii
zOUx`cFf&RFSdUB{CI&0LciQFQ;yUPu`@4d`isHEP<Uf>q89>U|fUgZwm>K4bg53pR
z+1Icxkm9+W9WUX}fi&Dk-QDw-ML&leT$n`0)e>h(K0SLWh?Yc)?x|$gMd62igQMm;
zKbX`wHn_{Xv_u{P%euw3`PD|2tE8L%CoQXhq6ikZ{vn3IR{Vz^i+9=<QM@lO*_sUG
zt?s7LH2#>!gq_!LGX<o{m}%iMtKPtpY4^K8bHFS;6^}L{&^qc0l~+e9Hf7vVuzLV3
zN8iUV0QPqfm^qGz)k>gaMbq-;?e3H6g=^jQ+r5z#nPi$bb988}T8@kErAwaqd|Ub;
zF;07WG;*-B0V^=$My-b>m&A%IO@%XUb0UCKNA$GK4`<#lN9$$#H<=Ofj#smGjT9$V
z;@QCT;RO%}B(xGfr3%~zvE6;m7DuCS%ST;$Q;vlVUN6wV*xG_XBZTx{CDRK9yAQxh
zeIC+A>L)zHQ(Qqf=2g4IMcO`tAtF<UUWTyuYemlM^<zb2U;XEuZ@irXQ`+R>n(jGN
zfJJ{r66++=?Y(SLFCgPAxRe=KIwl<&ql@V`M>wuKe)uZoXW_-j*0d;O#aKwwcqRaF
z`eXR`(3>Q97~{^XVd$@7zPN{>UZjdEi~SOf1O{aw5+wbXK>4CD4**R28?<kL^z8RD
zHK67UvjJaczw(b4lhewqi`Z_#uiwjCPFlIb==Bs$qpBG}vy3%sEtN9CzE;utseLsc
z&HzpLG1E!$d9W1SX$gm9*=mA&=o%VSnE*{c$~SY0YLN`S*sCk0OiaSuYZ>BXt)OPQ
z^KDPNlq`cENKSa~B-1@|BjfO=9-5$#$5YlOBotr*A*Ib>fhf{LfRyVrj}e%C`Lnp{
z+?ynU&>P;JS65tbi(~DmZOjnYA7jVxqz=1TiQ=4ye{m;R<3=+l-qhG}gXQt8r5u?;
z$$*ZIWH(&^oSB8EGoD%Tta$R!(lR=C`{u1Px2T9y=%ejfMe+cjE=8zPY^#e;1aK@Q
z2tVW1^TY6c%#)sp-^`3@nt-7qL|)&T;zb0JcOw!YVZ?iiTw6m?v_}A~hL?d7^0*Z<
z`YDC~jSfx7kW=6%-ErsW!K6~GSqa~wE#gCt#2$eUdF(Q(_*f+^=;_lpEu>Mxr9Pi)
zpN;GCMQvukynDmLJOQVvdAgPCBzHZOF(SXZ?d>S{l?Jn5;U*;}am{5m|2@<(bh3)4
z%g;byM4eZfn`APXTEdMC-xX*l&i2XxYZaIn{ojSo;7Anc@$Ue@_N4@JzTewy!_WME
z!h15Md2Op%9yH=CIXA}fL<;q29ju!5FT(%pC+`-@&9?Wjs1Isn_A&l>oNgHqtKtjM
zSyO!c!Mb$xAsf@Q_@O-$`lrhRZ%X=gYJI^eow9T*=0M}dy~mGW7ptF}gjUb>wYyh6
z5L>sv8?wyXsuetx_<fKr$RIXIo<9`1qCQ0-eg_a;;%>kBo0i@HIbZY<er02x1WOY3
zw*^K{4odHe96}~jVQZOlSZEpjQt0;zbpx@T=bg?{md|WFHaK%APtbA9<Yg7|l3$gC
zDn=eDjf9X#E7W}$$q<~tOlE6z1xoJmK>heBkgD*Mi;Aw{8Dw-19V0jZ1Lrd46(B98
zv6ly7hxS4eAph!PVeu%$69BQz_R&wE0`+%k8eA&<W*oI5aRjxr!(&^RV_neMJpue^
zuYE!sf62ZJ7Y>VA8SD*MD4dHN4KrW(x@}F@+sXS{6O;Ln?z`%gY^u|vy)tWF^C-zT
z0n#Vts;UKZpTER}CArML@hNf)g$`=WlYzlzfJ=xPgq|6TfIaPbabd$dTQGw_q<SQ%
z%L4fZ$t0m5e*lm|noL!|yZ$G=cN4yIdJtN;not5Uq!!O~{U1?h!O&#ehT)ACkZ$Rg
z93d@ibV)ZTB_Um+fFP-(OF|T+;gy!|?(Qz>5>#5^d(`=jUvRMJuB*<IE>*CbqAMk5
z^dUJ|$}?{IC-K9;aPN2S0bj0-q!czwDeqg?$;FiF<*bOag{Jca5aHi-VB}hSj2bwo
zTUaXQJsF~#JjAhDdvG2~5wVtd&_wkpqRFB#a!Hp8X4;I?se+!lj<H!2U*M2laim8G
zA?N_fwt)UgEr8>Zq^G}s&Jw3wAO`reD1SMEb932z=N>C*yYRoE*J?T>Wz&0*{pHsx
zPvxXs-dox=hHxdmch5-g(r3a9eui}m^u!PP-<-drP3$Jn`evLCv$JR;oRhfAtao?E
zMQ2Ur>&$xE+_@(F2G~2znt;JnSk7W|{HQ4^4hjys8Z$<2etcOCU`&CJ3h1H__($|W
z|0U-Wk(6fu<!(X13!vNLH)Ty+I!o+5$BcBYYaSn&{Yru~MFK${lZhxZXvw3a<<qO@
zOB4BZL}7PS1)E7O3HorDcJ5-7Yfd_7*ZnGz$Z|0>{{@~^+clP~=>BoYo?Lry<VX>@
zEq~B3`(H$pdDFvoFAdVHqw1DY6E~>4N~q|n7!LGMHX;}e%Rg8Z*7kSb1f(GO&H=vn
zU612{Jj5Tqq<C@LJ<Clg*ig;c$M~0qD6KMyZ32OoIhy6nJ@hW@&0)!_TKy0c3|O~-
zTyBKXS($Gl^H?YhKm9tjZX7qA^gf*!n|_+>tvL6%2YE}{9N-3VitaQY5RhpXfMGY-
z2WX=XA2phk`cOd~s6)kdNSn3nr8F2p!Du}LSQ>~2Gb{~BcmWV<d4C81BK*JK*@od3
z)swrJ%j9<PKQH5f;C&}anEjK5b{l(Ax{ps*Z>US(z7J8Y-9z(+cF-hYZMICt1!M}F
ze|1ja@w~r<9Wd_Kh1ukid(a|MwB}rrc<12bV~Pmns)O1?Pu6@;%YTc88XrhQA*F?-
z?$*%P3!!3iR?XUeJ-|z@1u!xO@yY)E6~UQE#!G;aV5U?RAwJ_L{+X~c1)tVqh+3L_
zN@7WJq=7vwubMTP>EYBDGHgH}v+hva<MyreC0Sh@5en?4l~00Rg&{Iqid6OVEd+<x
z@ok25?e5&AxvLs8@6oTcWk*eTD$uQ&ng(?J2#*2slSHIfE~WXU=H5^<(@^nwWgO@*
zn!mrlA}&-`6OsLH%|QbG0st52yeJW$xl;YPH$4$|J>F}#G8Lbc&zZ`hM|W71jnsBR
zR9gobdcN|EUbvf=bhB&SZKQ>3Eo3LA#q8Okg<*H_SeB=2vn!6x;taAqu$a_Xob&hA
z#PhNBk!Q-<sCUAB8TuK`w&aXkhY#KMBd-S+u}lm_Nv4{*x${J_ga**%3~vFc!q5;4
z@joQt6+mdL;I@DW=~vF~Ym3k=G#ke&Q&&KU=`Ly_F<s%P(wJWYk{<}8oI9m<ru(R9
zKYEcnY8t`tI)%FU$F4ief$enQ(}hkn29BGW^40}Ij)oB1$0ShVCt|;9+mu*+?0V%H
zB>`pQT2}xw)8hptkZw9@YyZ;9Z3vG3#=OnO&Q0p9%>eR`2v$|3NBoYkA|&NCKpE-#
z^5)Nn{;d&s_J#b5fbjML9TkD%!$r1V%){U9Hn((&?-7LuX<3ytjh@C7AG4Q{L{hh6
zsl2)-2*372Q(slDb2q@*RnL;Ipj1rP*uX$Hy5~YGijkC8eW+u>TmX1#Cs*;GzZyFO
zucPVLwe_~Oo`{0?QJ7aCw%i<){!H|M&JY@0^Is5Dh6KC;0Ewx2*MK6-@7+=<-#dK4
z{qV(8{=x82d}yb)s*o;utH>RC&M)`%-^i1@G)I&~P;F^nVq50mi*(8Rnd?xXmtv!a
zN5_qLC9!Sbn;Fpfe0<ZGJ8|DH(Z|e6p6T6Uy;Ged&|4FqDdhzv-GEfDm%5yv-_!61
z)rmS!OxehGD58Ra`Wp!G;BBoy(%k}ddepwk|CXWrWMOE|NW15)(#s+o0uh5drVrah
zO;sJ}gaSAE7z=P$y;QAt;{{AC(8t8B!La6K8hgUVS7-XTLv^op$KHP8JdyXh?}sUJ
zi~k_QgIcd7Z8kC%K0Xa>l$zxJjrbqYv`TW%8n`I9D12k6TL7bMLg$I`rQjAIdH`xg
z8i==UKn;=*nDqromU|8S$;$$*HZPtpRa(m#$=w@1QB#V#&uyC${2cQech4<1%I@==
zN0<k9rjwrwMUHn*MV;A)^?JCp@?D-CeI}UC!QW?9#>IO3M0Cs*huFW<lZIC`_%p}A
zR#n|7FURzZE*UHTxo1-re+3@aVE3gYe-r2K_k9p}`T085l!h!;3%sLE0D{;kum&U{
z7$9s6XD>wDC>2-5OBO->mZ;_w8}DBo&)qc~LZQnqv<^ZErFqHq1j~o?1HZMJ-1hj&
zG1Up4O1?L|Sv-t{fJCNLm_YcBSUEZRBd4r>E%k+p>v=xXY%w1*m^|amV7;^UHBk1&
zP~*E$CjIJC=1}U%2zBxVDiq2%kDeUKqP57X`uj8d3u;=Bd?)~4DHE;o9~sTxqmKd(
z6D&C<KYqX&8D>TK@vA8W>pzN|*cSho2#6>;^#0VRp4ZC2CWA>%y%Q|*ne&J=YDeao
zfi6x-{rjT<N2Q3QFGd+M4+pdBx&AxYZl#D+@;qozxf9VOTd26a9s}g$t}<J-+E*T5
zgHUGcaMad1&{T=ROazdBRlwGEBpfOL*DTXa4{VR$No{!lM;q^-3$P=m2W`t5-^64*
z)aQ#0)yiUHza0iUe$H?iSMgUec}Rz&O<kDt?X$rANma-flj1mWF%z%g>Q#F`yJ7iF
zB8RXU@{qf|R6d?Z@{DA$_0GLEmb?-E9746Mq=!deOiKM|p+2)9)X#l5sx-$P{=nYt
zPz52bk$`R_9U4G4JH3RCpbKT*7oAXY#Mc{8wr87D?yO-;{D3JNOn&%bhoksE5-@Xh
z<`!p&H-qOAX#N2^TLl}#S2@<TbMEu$gfWFS{>mhVz6__a<3%;w>VS=zwAm<4c+H&C
zd>Ibl{L(=X<)qqaYr+%Hx$S>WsNDjpp9>tlX=DWRL4b57=wI(`Kavg|pqq2^@cq*`
z$~Zb9Q@*=mYsm7SJB@#2CAICvp|j8A>=bz}V<4MJUa*es#6mhJ1wMLXpTrWio!Bn|
zrzYL1t%JpmvAtJN^cPx2Hb)<9q&oewp7(>yTbpD~y<0jOi$0m_-2w6xu&xNaC%+Q6
zEA#2>i`(VKp&*^l5|1ZsO0nQQfVyU|c@W|f9!B#0HrVBLj&DM2-M7^%WW3WFUHi}8
z(qKI0U{<;k4|$<P61^oY${c@y>(nx^>LGU#;H)E$#*IQDS0XncP8uVNA0zcR4UN?*
zd&D>^v#3T`U{N2OO(rGrwyh>@26$b!jyui2zX#;g7<GzzFBnPlOY3Y)Wvrp@m7yYP
zb2u<E7k^L(C^$kEhDZpvjv)y#0m6+h8B>41FW`rV4ZAd^KDIJKZ?K@ZFl=wkD_oz;
z!oi%b7MJW<E|EoL|Mf7#Nu}ExK6`e3uWo{yw0woJC*v#MYZl>hCKbW>B>cp$1ijXH
zd&>)X)v<yW{1e7ix0>uJ>C9njQh@hjj!R8xsm3YP0uuzzuET-eLBj=g^kBhp|4qXM
zOd;v80J`H;{iy%XEQ^gB%~dvy77(j-DTqitZIC_)l+-((t@f>M$v!HNIozG-U42`{
zr|~_C%T|bKz@1KDT7duSkEcEZ?GxS@@$z@}uov&1a1#psbWJO-un?&<uG(|~np}1!
z)|%t_Op|bI`!2d9(Xb#O>SlZKC$AK7Td;u5i}p_ybPmaO2ViT%`^^8xAObj+t();O
zLByT<O+s`${HBiiM5}w4QB9zpX(Hjm_8J$VPIJ=Sz#*I{CpE(_{9l-pN)AQ)V{!zI
z|I-x}lrto}O_Y~Mr7me<H(R*=5uBd3^sS>YlFr=Zu$sp&o4dpQu;C`MEuh8jdlnQ_
z$l`T(p%sM?6-5!+f{IvnOGvce4$8@=WO{!FIDVrgPus{%9I~8CMrqy=Ux|>5Jqg4X
zptv&ichT6R)F6u;wr{$=?Uo8ene+MP)EYVO9+TEA+PjnB7c?f{mN`0@<-dGWO8Yv+
z$90qF^kTkh8#j^vqNF9OAc5~OK2DeN#Scl$rWO$Ub9?c7xuAjI0bF3B8WGC1t|Gy3
z0I+Iup5y=jX6+R+F_~=xWW+QD#)CNqM$4~~uJ^+qnG6>7#cZLj*O`AWdqzNHBVK#2
z6|n1Yj`KdZjaO`fH=pu7YfTf98~h;i`KKI3Zg(_Et~ar41L2#4dJ-Ud)6;-oY^><9
zwH>!Lo3CSbX@Kqx*o!Y#D`EjHe2R)a0*J@n1`-VyKudK#q5h}5RdSr`jYn5kuk~~a
z$QuFSAR8%ck+1>GFt!>q*pkqxapOG(>P^Wq7n3t}oY2zf1_uU(OFz0DV)d2>Z%!Gs
z4A;QRR*r?*`En)<I1CTQiGI9k4B_|!sL&}!NpSvbUV_(@v{5zOF$3vU7Vf`FCuBrH
z;Uhx*r?d>)L9*Qi*uG5sltHpt-Wy~w?x|YPeVRW(9!+~>RG@gBR;UimtybdMDJ-zE
zd!M)RqU&U(zt)C`{&g@X<AsUra!U}U$aZV#WlY(vgw&`(`+|o7tTyEMSz2-|?=#^U
zt@T9ybJku<w{r3P?bNVe?FD_7Ak^mRm}@h7Mq&a&Mlb`S?gc(Tvi)|%UcN($IO0;y
z#}7m>Rq<Umjx;F9N({o<`bI}nzqm(yaI+N0%59}8hFHC+aPu|V+PQlAK{TLMw2Se9
zg$ArL7<Xs+mu<FnWpVl?)V4_^q^j!ue_7c*b7}K4vGDx^r};n(AXk(aE;6(cq0iK|
zn%U~=1@1Wl;VI;E3rdbd=v5T~2|xOON8AyT5Fa3<=M0kgn}NGcSTTLZn`8F!R8F^d
zB{hCHnz4-P%;%clYHl1atJ>J23kQX!8vT`Wt-=Sj!|8Zo<()nvX?eTc?GFNkD%BIT
z(UZ8Idj~r;!n5sNXtqzP#>oA3F{+m9{d}z5<r$gha>Ii$4FC_egSXG+qz&}{Yil<&
z3z#pWTI!N7C8YpHtve$C1tM1n3IhSbzu~K6BrO3zOVTD)1Qfh}&l*^*PQ*G<I1DD!
zka;(~a<VAzhGiw)VmK7gi*)-WzPL}}jOY0wwaQdQSK5vr4d;8j_Y1KI>3~h~+b)}q
zBjUA}kMq72W_lV<-p_fGZ@jhai1DFR`vOX9yuI@V<M?!^D?(0h&vSu)k67pKx$L*n
z{7#A;46@pO3=!JXb<Gx?j&6JLTW%~gS70bh)n5?t^TN)Nz=QzslOU@GAWHfz?-WM3
zj~=>yHMLy$j=Jjt`Wklx8zj`rKR|WyiCXW|sobzLrEA<zBc|F;`~tt_k02kVI$=}A
zeVP?&cN<qab{al|#gnI3L|=qpOjRMc#~Drnjbv#{A2s1iEKc)<J{EQXO8vfbq<2<<
zB>bof=I~RD9}VcTai`_YdMmgJL@4wO44`1dk$8oqBmyYyo=Zyoxru?+Ah%54PcE3}
zS#Wg08~%o?dgjv9qTVDthpyouux)v%T?KJyySi>8m*?kr0s`z6cS5g&zOPCz52G*2
zLqVAv3FJneOV5^AZy_ib$)Z^w>e80PW8pv5o#taiXZkk-_7{y4z{cG;wJMmZPcexM
z;v0q2EATL7{pn@>0U>S|l)r?nw@5-_fN-5e_4n`iC(Y$}pG8S>=VRAr6I&KI3Z9cE
zQ)n9YqoLK0K8l+CU2G|<Ha6P_z+qT6)&d#G>xv_yo{&KOs1P(=ne&G0b3yd-PTy8t
z`;?CsuDS_L#^hQyx0uf>C3!~u(R%0oDxg|8UMI|~Ln>!8z*EIVArM150U@QCm>XK%
z(PqTe<c9#7^#6hpR5Tz+`r8pi0#GKELkSU^$<>`H($bU}Yl7tJ3&-)zE0!kC&6${A
zwjFV8lVddApEk6!hQAp4z3Cb%6-j@8T$8m>(!*XjsuFj{a_%wc?DZS;WJOK!O0}U4
zsdhi3d;TY$CQ)bDi85$9Dcx(`tUeZii_K|ci2S)F?|Uak;aUvRb8l{<=DBrD`xTI{
z4%s(>1O|RAFoXdWMBo1RH-%v$X@A?$H)D90A?EVf&c%d4x!Ihq1XmG1<x#-xHPI6_
zzE9=&mSWzN5qp1KninNvN)U9tlp@3t@|x|c>JuY=F13r6<zs+-AO2mJu&3g>;XFan
z%x~nq>%})Z1EMsoVRh7Q7KNl4Dxc?bL}$Bz&oquDZ`ACU2Y_E}w>LzqY2qnHlNsoR
z2-%*IE<H)G3nPS{5b_4GLUE9+WWQIa7Pt;EW$PAjX_X97=707^D#6@+TO%NHHW{Q>
z`s0y;f@t6~<xsJAA*cas)}p@@U58udQqnzO<_{jpCv8+~N>~3lz^c`@*w{74vF3L<
zr(Ior^~r)tG28#eRpvVPZBnds+JXmKLz}ueOp>C1GcYWQR;SZvDRiPF>lwHUuq7En
zuQyA84)|*_@<E6Q5Fvdl9+H(DV3kS2L^K87x&=}uNo#6;Nn|@1!t5B)+8*~UC})_+
zdERb^okaD}Y*#^1;8Z;X|7bt`#%c71u$aI->~+XXkZQCc468_gdFZGoc8dJHW1n(y
zRsGRZgGbBvN$HIhyziDd@jbDr8U^#-L7mZh3`D0d7nz6?V2|CiLO3_=puV{v6lkl{
zXs9+ngcuCiu!H`sSRy1V1;Dx$HeHEWv2HIEn22~R%rQQ=yMJIi$9eMx56cLP?Nckf
zybtF8;dAkZ|Ljfcgn>fSy_wd=eD*L&XFZ#@dYsq`)g)S^=UCAyUr!U0*Wli<pyqhI
zd(TX#ubJYZ;WG9r3HBO1vuUen7J}T@Ay^9wwLe}n;m3pONiVqqn;xxW#A<*H&&gI$
z5}1gwr1|Ml`2P)s!^n`dlmKl%Xi4-Rt!L@|qr~|wpM&(xe!dbAj6|xwIQi6_PuFzj
zm68!2xWRL{x0cfBQD<bk9_6lt0vv0Yb%R-m$kX!Kh+G+i&x{)Tw2#HKASeN6tw`na
zs^fv-e(TU)M>#I_C$#%p)vsN7-SuZQj;#65Qz_TnV`zWX@x(Q~vOD5!0ehqy$BXH}
zG0<d~h*0_el{mmuNLng@HuT!30ikGq#uJ+u0vQ%Q%G%W)xhivnYdkl%L<?HL)|D37
ziM#MKv&-04<oA(vnyJd&e<GerbzsDua9C3E&~Flj<Bq{<-rh;k1)BFS@rMIkH&5jU
z7cGl*p(S}=EJj04<-K>%8XL$Cnk0X^ZDnXi4@uVtZhr~8^_4^?go2)>dSO%OGVwFC
z47AAhxFABsRvIMgJph$sL{|t=*o60|P-fK!vpzGSLd|}>)O8qX`ZhKt<StKvNuHNo
zFlO_H6)sISoxZ!r8SzP=yCv~s<8#yihI6-k{FH@YiSq}|0r+Dh6v2%_m`q+csYf<^
z6y_(xmxM(Z2Ng#ubN5b3?kTu!t@%aMs*5LXM}=L57YsZEp?oHfIbYQ#L<OGigeYJ{
z(I|iciAfD$4xQHx{k;W%RE5aL<ok7J4bXwx{1>`fvIFlNKa`pOtoUU5LinJWiXAPN
ztl@rKjNeb$pVSK*0`D&r=O(D4eTKo+{O?WzzSXFQQ<yZCd3oZCRf{n_{Y<a=VgF?6
zuKyY3o*&WawQmSl_d>0IvanzA&9xY7T=V+wkuMY!@_e1+jwS=7B?3lB4?&a=U@S;V
z8h{dSJ!1&*V*<B8xDHn_uNi82+WN1c8WODNgbj1wtbk`8iV$N97d=7aAC~Tyaa+k9
z{?BRApRc@?pjt0|&Y8rJ`CSrH)5Gsh&ZBQcdVig?I@rg{7;W3XY<xW2sB;d}Cd)--
z0q>NgX4!4iux1gZ$|r1lsP8hep#K1bkv1KpNGU4|OytNC5%B%%a=VYjqy;bo&_`$x
z!R@j`Z|RToIka+B{a$MOTf$eN8qYo4Pgvqr>TG#gt{|~Xg?_k7V3vEa81cMb6!3&@
zcK;RYZ#SM_k1`ZK66XFqA%Rqv1e_>P(k`XgR7Xr$u;Ln5U82KN(qDB-O4O2&W|meg
zl)}WI9zf1>h66{nkQv?qLc>x;gP<cWd@dv%9Y8nEItKYOBtbm+s5GrckO_N$hc2<{
zvAY)w`Q+e8@1=%v)L=~Mi@}>a>};7cj#x4S9jKrWfs&gogh_SZKj-hxnlFkI2jjri
z7r{#X<KC5#dOl1Y4VI?|b#*}fh5j9UYC}VxqpjPbiIW*qH3mfL3<N@UK!asOM}(}b
z<zK7-2oj4Pz+y9DulX}10VpWcG-aT8LsP5Cvq_-T{b@xEuOS(El;{{a9liB&n;G6-
z`OJ>{7Dl02&a)J?x|Gv2ZltDfF)h<P#NqLbZyq^or4E7eG}sB#5(9W8@6G6hWALA&
z;W6dC!`rB1<Zu269E|iJ!QJ!<Z31YEDij`!7J=yafC(b07yznrl(5mi6D6mQwco90
zVCl(ZvYlWD2jRe^^uFnECt(;raMSV_SjR6egCwiW^q-1u&)gUGcEN3n^-8YtY}r?k
zq94U(rkHm3`%KfoToju*W0T>pGEaF*G6HDBn*8_jdY!X23Jxk+J%+y}83EnJPp?>#
zl<mOvhs$>Se+EJXiNy$D3F@?XB1SVG^`&&w8kZlX!j^Br!b@RGqP-do+s=1(?F8y+
zZQi`YC2kx4URk{Ds9+Bg>prSDKS&2rD(>Bmbr!+9J=HNOQ!KD71t-&bMtL0zW^{Ui
zNh*va%jtxh!^;P5O+(ojy)Gd7mh=kqEHr3O3mQmK5%B?A#gR-*08@8{W)DK~%FN?l
zhbL*VKBM^vAMqL|F6H9Ss4o8`z0JYB&mrHtR*JrxmJ^11W;=JdUaONS{IIe-Ka!C-
z{5omxi<jG4cntL#u8o_2(J;t8d+>zlIHWOzC&rRDrISj)%bN7in<cIp?<vL<J%~Hk
zUYt=K1RZE;0c2VJHSI_txtIYiM`&y#Fev{!(U~xG^V&;pfC_vonwZfsX>Ocw#^1<c
z<|g;j?zqWp3qM)W=HewbGyj=Lp#YcQAdL~-ff4J~Xl6KdH&^pB-KqJFB>YTTRH9D?
zbf&&(GsJ}OUzbkvHF`7s8<GhTk|rV6s=TP2r><OLE>344)YnEhGCYD2Al!%+P{+TQ
zEldW9#{%H#VOK2xxkMn2vBu=;YhYk_U$2=uN;zCK1yW0+A8Ni#E7R4d(^^>)aqg&;
z_x0V*YKeL;_esue!p+pPpEzPgGvJq@uc~(?sg9!fRo0oaunT|O<U(uOT%{&Fz1wL%
z7$dp=>uqlI%@a9u3GSf7hdUf*#XmLoLAZ_i+&q9f78n&(fQiI45b-`#K=QEyd@U&d
zZ2)zi-+>`lLgYvlMtmK|A>?{u+U&o5drLDyEww1l@u!m&s*Uof)@}U+W%|U1i<_(;
ze;7So-7W8YZq|HpScVeF%!c6~L%lX~WJ)ePtWj=7v9+5v!!QaD<Zzl#yEf?GRHs?A
zi7k8l8poi1SXt^RW=wv3LVJ2e+C$X=3<3yX#^%zEIM0-kfNTI@Xre~TpC1qa<TZO^
zR)am1jx9<K>ow$(#&(Pe=I3HC+8U!FLe=E|ZY_T{c%}Ys{<f0HVm<gZ4Tm;4)qucr
zj`yC&To324E)6dUww<F0?<}eg_)YSfn}`s?djy^4r}vWk*X+<D@Jx$u<sj7#rC##T
z=V2f)Zy$~tAl)|5fz^Wr(m*`01Jsaw>;T_{U{5BZ9|LZc;1)^O6>&dpe^M?h{%sDs
zHp<V4&nzDL{qgA%g7i<iq1rc4(uSny2WpYY%zotph5_qV7Cj)+D|+s1%D6%c?GH~%
zQwYOE)cS|zQn3Q_s#QoVc<+6vTEzi620i3a-AJXg_0ig9QCd4g!IeDBhlA|gg67(c
z3{W_hq9Oqz283xL5$^+tQZ}hLK>N)fp@H6B3#j%kE=uJic)fr11BU_%1)I!-ldp=u
zv}4h#<kaGX2Xp7Y?2tJ0g|ZYa>ko@}zR5nZCi_p6HzH&-_x<duGJ3r1_sdl~BTZ1J
z^$oG#p!V+l{|?^XrHFFVJ7}2lW6j4J%w9Ct_|7+D!p)wD-^GkU&xNi~0BCedg3#c6
zC`^p>|Fn|9fcw+GFp%Rns3SHfqFWGd+@}3C_50`aFP~|BP@Ebgbesc|YbX7Ro)elB
zhNxZ=J~+JhVQ=;0K>#5^NN;$oZ{16!D!e5Ry6NpQRZwZzaCWk?z<aEqqMY2Hj>)4r
z&%b|iEau~A^6?;*XY5}B^o!i-iCFU~a`YDnHFo%R`{U=V0*Q%NoWHc_SPR&Tb6#Ls
zGW5to1Rz*Y#KJU0!g2zza_fVRf1*H=Q-_kk1fM5RS-Wes4hHm_y@6nvP%rnpL=iiD
zU)!i~363X(Dn9QzVRe^iOM6_Xe-j-%eq!=f-FE1Li`Z-6N09&87j$-Sjms}Po%QKP
zW&;1k!<rR0(VwtYrM<IY;RI%wuFz{z(joQg&q?JJ0jcrP9kVwv=Tz1Z(mQ)8Lvtul
zz=EC_%!o>WiMV|qBU!lsRuyW7v40I%#`&0{(xHulgr`AA5LP))Q71nc4~T=W(pi(I
zZkl=$o>I1MTc%*~+h*3*wFs>w>5k|$ZZi&JR5^xyCgJt8cj2!lhxFxCIJZ~~ZU&yR
zR9#NJWK3J2A%w@%In95)0m=pm64(8@1Pn%T>r)o3L&PhZuoj&S;Fa*pN|BIS21G~?
z{wLNBGe?4Q1E45j=PwXlxbSPtLaTcr$(IcRCn-|_P##xl(#M5p!k|{__W`i<dQ8x)
z+eztxRLV`4%^es1=xr8^vZpUC7qoAlmhRA2Or-uyPkB_V@^Y`%@m1I<4(14Xj7N0J
zW5a{AN{Y}sxd$~wz*@aC2i?n*lf&&6J*p8hcqkG>1&5Fdch3#Y_Qdj|p%4l1(~}@F
zRA4J4Di46_Qqne$c&)~z#}Y10KYK>^-d{|9#+Au;t0-2{u{$t$YM4<4rLHo(_N_s+
z)$P83WP5H<Q}R8JNivQ8JEiMiXOlbJi5+81f8@~;=}BW)J`?5(u=#{fVfHr8$G%UV
z$sf>o_-+kkR;X=Xpy+U+n>p}|b5V<!6<?{}Fn{IU<`xMFWB>tnK@qZML5O8)i^Svw
zFwq|By92M)-<#jmb@1wL6Yi5FXrxS>idfU_k#d>aDN_z5B}JJY^TbKN2fEVe=98{B
znsxEg1^NV?O6|(^OaWmVwt2>_+LXPRo159tRa*#kpS0az+Oo?iJQGMyRipswo|t42
zOU9iJS3DA2G<1saAO{c%X&;V?oQEPXo85wo^{<o_;DDq9tOP(;SuY6wPG_f_eS5J;
zMH&*tGl=~@!);?wFU^#noYn7>rR{vMP~WJM23fI7`8)SljE<4Z`QKNBt$YuU3^Y!~
zHH*+!iywV3cqY-mFUE*__$5&!ZI+^=p}6ayK^Jhi;a*W(Sl7^VXuCvdhOJ|stbiT>
z26lb-fYNS@ES4e^k%5M}Aj$XuG7K237I=gGepkE&$2nr+{vr*LkC%Qv8#&f`1I4*2
zcCx$kOA$3mld2-~`8Khc<-VGazezC%Z-_II_Ug577BvrNPbm1qiKOY->(tN>4u`XQ
zm_*0*z9CXThyDEJ8fW~_S8uVe&Fk41oq#7}QF?{@tRmI`7PJTcfB$3;BojZt6!0d8
z_0PKykZ}}ka}jo+)k|j|k>+`rPS)G`mD{;rL-l$8g~O?S4MV-vGt`fv?ZkM|Z*zug
z>mDqU%--|3Q(OC_gYeD@49;%37U?w}ecvWaLS^vfDd{M8L=zKCac;x1K{718WTzM0
zH~=C%Pp>d$RYdC;P{l$6A^MP8Um%$Telu}b>HRf*I5nbsF$Rw!HCJ;ffzhziOe;OO
z{jbZc`@bgTDsFu_y#)@fGG*g&^#eXyUl}#)#=3?4DcVG<Zgb~cr?j^Zw_Zg%kHL@b
zei?Ybtx0s|_ArEf#FF<TQLbpMJ!!W0{jbea%ouzvAOhd?iV8Md#Q|V~J$L|&IPiRs
zRDuANov*{`AJr9L)rZjVqQKCP2;IHw65MKwCb}6NPnO<oI*_&E6S|J-ucy^eQ;*+4
ziI~vD@R-*S^LcIm^4-D__IW3|<vSd;io_euJ%)s>_^toa)?9g=7wetH>MVKFUW-Y2
zF_Dgx)@ziMKWn-@0X#c^YojY#wPgSpuJ^}942#2FBf%a3U=8F!-9XXhcV63Dk;760
zvxTx&@WrV|xLnAO!XT7D=dS}p*e}S#hhLh>@+wUKx0n;g?|aq{ozV4sD8YK0_dX2A
zGUdY(ZjP#@{OhE<iR;N23Ox5((iSCS;fEbg^L4WZ{i|6ofV#Kbb5-sE&SS1~5@1N(
z2Rm@&<pUzZ-^QD$^oWKFa1fGB2w<DhxzF{tp&{k$i0>pI_X2mPC?(_J>vXKIfiWPL
zgkKrKprnE7Bx5&@<=0nr1t$yhXX8aDot*;5c<F&?(u3e)P4`7TTW_)_b0@y%EEtyc
z-fMUBs*)=#SOtu$4n@iMFSKPXwUZ$A`7X8orEcC(du$NczYa$oRYwsG8iCdVw00rR
zu{TIKVE_)DoIe%OGLW#MhU2S}qkXK#xYIK>^mFNHnfv^%RBBP}V@=+dxDVom3F>8y
zRV2U87LCt;w~5hWp&j~xAM5Hk<Y=PekYZD+J61e;TwYm%i+`22l!n%zrFT%1RR%O$
z$Q!I~c<4{HO)@rdO`5`gl-vV>3ceQ}GI)Ui?K4IOf`9!!0bxiw5rA%O;Su&<56%zh
z5t9QkD+9d33?!wSk~8s+PuS;_f*rrbmKh3s&haCQe@&$F10<ou9Tkc<cxN*?aTYBt
z%uvRs$(R*S&}%ly5i^DVI^FA_R!3!w^pv!q6&M9~+CBxEK&aXlGn?JlF?d%%sA2Zv
z(~o3(fV!w67Kq{RPX>!ZLWu%Uqg8Haf3_x&3g}DOJY4vMb#58NRM}Qm^+M&kR$tUP
zpylyl?OeYj_I=C`60H1}#V^ZKJ@?`g^Ew0rR@iWpK5+QRl@PyJd#XF0@fL4Ue4Qq(
zjgR+*`;3-A7vM%TWSNz~bA8D^))dB!$pZxmyQNp~;VT9QgA_Zk{>deP<B(Kh097Kl
z$tR#%`zInI-?!%OxD^!+CL8AzM=|WX*<{CS>B4gp*4&B|MGx61CQ`Wy=7D6nyUS6f
z;#fO%-TS_vg$?MLyrZi!3S+N%{{B28)z|hQO@#7LljvvzsJ(Xr5pKp&*4sFqeMp%`
z$$zx<c<Y295R?N)**Y6A$ORJ-qEi2haTAbe;sBa#o4eN^e|i$DQ#QXq-?CV=`iHUi
zBrE;+OY`HRJ6DrCY-V!BJ)-B{o9G#=H<U@&1v-4&wtX)7-w%b549!K<4|re!W52~5
z?N92ftT$WMjz4$OKDzS4)Ms>v8~amjo=9@~)E9>-2gus}6m9`soUGrsRP_fD606Go
zKhyjk2_*qQ-G*nrN7%c%7BIb<Ip|GVl6Prhyu9So4_h{6gSz{#n$F26?+7ceD8N0j
zY4!6&8F-blDEfs&M%-y<%G>W#z#$tuaZ?tU$IXN;L+g|W-9$g4u0wEofzq*RpXdc2
zX`dJ;WAjxuh949}@IJjF;I8TbV73hJKtmW|!cvh?4*@8jyBO4eKjNuzQC5&j@g2F;
zyrhYp(Wg`}TSE+|hMI4d3Z0Qb%r$C^RanPY1n%tk9d*2)b3BU^o~rK2K-Vp$(%&7)
zU%45IW^@xBeS72<xS~HXyOTro<JE_%^-v(CQ$3NT9T#A*g;S1wc^pGQ-U1TbDLmYG
zj0yrK_7zn@2#q9g1`<sYK)au|=MB#LbHV~So!w6Ng{`%6Xf+QwbaQk8)FA}OL|J+T
zNyG^84x%?in=s=%gG_Qe<Lc{4d7bHrY%rNw+eG^>Gk%O5!D4^1d_<@^iCr`o;}EQ5
zcpb>T&{S}-9=Z}rQ;Vzpln)0QQ!HcbpE>tH)0WD6tNJ+D0`h&Qv+bM}cmzkzM$V9e
zM~%jDB&`BX?t@!pLFm?VLsK8#NrPqS;cpmGnMe?qL~AzkUyuU+g*rDL-oFh#fEKP+
zn1Id@SwRR>@%hIz{lsK#(4I*~R$RI)|MrJ#t-G&?<-nuMb|8{am||3_$JIk%G>tgD
zReQhYPK*zPDv}9%c7yMDiy}wiRIRTEXde8k34ib7|J~P{8Hjq5Fcx1Y@ENJ&d<@6%
ze2T%q9v@4UUO{6Zt4N@V+oIY7`<GD8M-oB-!ooP-Y(Q$@_ci8IL-=Ssp1!JM?v|~3
zH0boSSJz-^o0aPa<(&*0lp=dMcM=(;<~(8@ycHV{G_4A$EKH&|=w!TarQUAuOi$-C
z=$7Q(2@(mV;q)}DJWb$<M(07bsd5jt5NCIAf5<#zZDHrXzf99JNg8X&gcI10k;07m
zZ9BdRuqlV5L1p=R&_Jp!|1W$LA~|6Ir-GebI}n}!;Vg4b4s*S*gXXe*x_vG7v$wfG
zRq*8qyRoj<BC%9g)_b*l6mibx#G^&M`AUoRw#f1F`s(nX1@u(H+6i5(;1?lNbiWRD
zd3z;DKg(V6`)AA^Ode1~gvcK>JyT=N$Jbt3bdMi3bjPt&K{I`d3F?XW2Y$+VD#Zu}
zRn-V67NqO%DGe?~B1!{@OW;sqL~ItfuE>cdi<?amUt>t=8@DTNODIa^?H$EZ!7ny@
zenq(^)KS>Z$I{vr(!(H0XT~=(P^SJ)`lGsajZTluya{&go+lh?kt@z4?`@P@JxuQG
zDkG(#=VP@a&%{1k@5Ja~$(u?`>=9)k=PkjN%0;fSCttBB0go^8NUvD41QH0qV;vd{
z`xi-+BSB>V&}13!M~EBvZIz4~gJzyK(`Uan3nmoZZ?KcB6N`_~DqVCc7TuHX1Y)L;
z2hWHIa$tlJv?UsfsANO_?~(%~ZWn&e1g6_GQPy+e@m<%5FKe+Eyh`+OW0Gfl<yG&T
zBnA{ZkDbJ76-duYYgJ3~;#b_lKq!0|<@Juo19G@nAT$sb;<5{<M$*Xwbk5GEiHH}U
zdPrGZ8JB-XB1fR>7o(1!<0h@>HD%;0{jskI4@3r_7oANnYW~v}`ko*k>vBD`v;(q#
zX!0Z6C_O;0>PgYpq4%%FyEz=TSe^@|%|^&JZV4SU>WxM;G5S)BZK&!iwat$;JzU3B
zg@EXP*^8S>p|t?@_l}+(gpnMq9tkD~fZZXHF!-0u?I~Q?a4fL`xnDmxx+Rs|ktS7C
zc-T1dCbY9!g@w|Y1(SW;knjDrYZM*Rv!T~{656mH{1TkIwY(@SrelNQS+x$UYnG8|
zOXj=;Z)fzbfIC<-C+ls@($_j6x8|Uyn3L%s?#JmBaxf?qO&0F2*n^5#bInL5d4LHe
zpuhglMF+eL0H(E2*NsJLG2C|ChsI9W6l>y(T6~AICW}AxD_WA7owltdfB7~nY4A%h
zkb8&A%E~@HGJd9~vHWRlXwfEq^0+}n`@`&RAJNa*harYWmb{;Ciuo?sNPl=UGB!7^
zV}5~v*h<qYPIP30J6d|6vi}b5);1)R0su95_&^e{3<vfqaQhwxx4j?h52mDb|BeFs
zQYcn<B3wqP+_6W3M{}>t3VMVteGm!A2N3lMq=fp=7BOJndEyjfr0}gym_xxFZi~nH
zj7iAHsiWcZt+`h48ILP{&CUjSLvaLGNy<Ao9BALVpBOlj>nMxn4@lf$;UeymfG#AG
zB7lTJxGn*9`-`Odte`{g33?|C&$3-2;&3Q5^njT^)|$?j|KsD5RE{0b6JzePayA1}
za}5fZlmA({<$)HqnLz#&%h^%INdmiB*<!BE=k^$FXLGsA7d-A!H9aLmzuq`OhZEN7
zL1<FE3@6O~!0=ZL9PM97+J~f30%#IK<z*2x(~7vm<HA@sw6BJGCJi|;Orcut{N`h^
z6waRB53EaDtQw713>Y2})oF2P6;BrK-(TTG%@QXf=tf_h?Z@X-LWwlo*CjemZ48mg
z1N3xrtHp}_egbmJXsI!DuoiGj9gZws2OkqeK(?pH1+j*PkTl8wjco!`64>>R1ni(b
z)!ljK>sSMd11yHt)YES(s1dXJM3`dS?94KuwY@Q(rs<26tsACY<>+#iW|-zrlgLkd
z*aIf{Oe3X-sarXol*)U*M{DHc%yvI>+q8Wi#j$v}V$Oj{q91|=qIGHr!qkL-h?!&u
zR1u*|>nIXN1%QE#d!+r*Y5eV{I{!e(Agb#pT?gva>yeA+ajK<LX{qqH=lHioR(EcU
zd2>>=db*};l;~f`#_j9|3U|Is2_w`!I4*&XSHkdr-Q%_?cTwp?J0;ByciW`-w6I%N
z-@e_(PAdj=VF#g6+j7&M1oD9(jA%XoEM5X8kvOWqe;bu(euTF>yT*Nyr^YrSk4^n`
zv+v&jRXgvgjR$+uRS@|$l?7_)wY{;^jMqE(e0cF&KL>eGLagG--mwD;<p?%Pq|e%|
z#cBhj05av%8{F8&Yi>aCg2xG#-?GlxJQPV$(htb!xPT}d(<|r<&{{yaJ*v2HCPXYS
zizIpk5YZ(5cnK&+{xO}w$5V*^0)1dWMH0&;CpK;G^f@DoD%FT8{!PP6>-S$YgE@7;
zVec;_<&8xrgOwF=JM))mU42w`>^5Jx%n2&^RlzE3nxCq)`JR$~1dPTEdKNeue_d>c
zuoLJ(y<0&b13*}FF%E*l&j3ZkMeu+ZkvwVu&(V$w-Ji7#Sb;~FLm<#Yc~s)2cjq0v
zD$Q7GWl4i9%-eUZEjF}e`cexHy+ioZKEoJ~;s{dV=o>VBv%cFc-nEyqL;o#szz;}U
z)Asmyq2n`}A(8!Q%V9#CrZs8drvZ(hf6_p~`#_mSYaI+BAO@mx#LjA6LDHxLG&`S^
zKOkg2f$uelhsBp@mr!bFj)KC<Wszmhb*ha~@Rn35OX0yX<q`Atv+1ArnY{-k)b!e;
zvLH+mIm)tM*_qi0VlqC|UEtf<R4J<Td_N`Kz;xTXbGVRMU0<`^vrU=;H4g)!7v^(|
zq{IM6Fp(^-EdAe)6|j!P(ExDB1HO6x@x2FDGb}vBIY)}U^Uc>%m*dGW0U~;oQ3&&G
zX92gX->-AW`l!dVvJ%4II=Dpct$9z+)sOYiaT%J79pW8dh3ZYL$*m8^l6mjRHmWt7
zYv&vEZ_HswMH$vdZBMZiMnTOyK&b8c+;mrjL<01LXagOLh}E-=1kwb6wnUPZ5J&S)
z2wU;lXZxLB+9-ozJzb-m<@jh_cI9jd1;bRlzO0mzmmD*j=y)SUF#2k_?RdtPC2;D(
zoCTMYi!!DkmdOSvyVUFKv9<RKT4Nor`IB_O#Ct_0l2*>=Y`cn`NDS(81;Q8rDpwCc
zU?u?&peV0}IDYn#NLm0=?8!Y+V2c5|LNPa@xp_5sHa~u(raBLA<)O~hTeM31_=hI(
z>>o*$U2m4?{mjG;VjX}n2ADJD#PR#Sg5SG~n`q$0IQ;!}!V#-acIcPDy!Tx`HfRlB
zKA9`+2=iFHQamV*`iWtjt|!*;Jsl+U+zZ>9kcfalKvwntZODg6B5i=k)Ztk;LcI3X
zrEP8{q;J{#o_&SG54mizxi5L^emtwZRz<Wj-PX2s)MD+jdmO&shBk0=m;&5A)E~00
zU?`;M`}$hC=D1v(?ypX!&1v%TC(UT=z2UzY+p-joTiUK;%xrqjjPcY3#0Xfayp2)C
z9q0i8C0j&lF5o8;NCyB4=ZIfNsKrhzpKkP(o0ymeehQ;pIhztcX5Z+Q(|?@Y=iOds
zHN*MS>@;hu9rrBsB&-UOYha)a|8#Tw{Ylo)Pgxng!dJ<Jnkk9iwH*yMz$ar*?%&+#
zifB@=kKCThC-Q@u8-p-q0cZG%F?v8B6ie~{GBIaJ9$kQ^qc7nt@X2f_8n=APM}PS1
z*?w?}YfK}W#IAPKTeR<t_@q{ZSA21Dt)qiUJQwvuVjs=xX`6W<JImfVA1cSY8TFH4
z4)-M8H^t^l3BF?{hCC)Vxp0+Xlsf6mY96ayitb{+i%VuZbW{E0V?cwmAvl*10s*|s
z;2=bC5&R2Dqz4c^17#2XO{iM!z#G;YDX;d5)hp$mQ)B7n;5=%Q$-1RdpXdHy`*>E3
zdiUD2-f<H`T|3!$y!%pgXp)HO78NH^)BK~u@vsW&SoZ~Ln_Fp$YuZs6FJAYI_TWK(
z8fuaU$JICY%${_Y$(JMkp!|e&p?PQz78Vo@t*8C(!fw4mGU)?M=&646h`lz=78=iy
z(KWx5LoOa--~6yp&MU%k@Dm@OAGI83Ch7Utug6RMc`wT-$$kamstxT7$omGQ`Guxn
z&-ySiv>kd)IydSbTi7&_s4P*QlFnzjZTcof4k`H@Z7*Zr-i@J^ZUMQ3;i%;T${4ax
z*@0j<7;zq<p#Q%vX8<4>h90aSkba*>9*PD)Po8~ifez8_TUNQo5rrRlnjcp`6Q!NF
zG-XWa^}o~DoQxKKij&lfzqsTW_<ggQ@5#s@US9Fwvu4hKu}VRka%Pn&{ZmrNWJHs4
z=FG@Oe^XSbNy%0%_}T-60;HXfDineEQ#L{oig>}oFpx-w01}QXqdY=+cx%|*Wvq_S
zD&Y-AZ~mI};R8$l;sEy>tLF3`j~gkwDdmAu5-_#^?`6KaIe0wJ9+h}Ih0IR3eLz1b
zDa4nD7loPd)U?Z+M7E(V+T1i+n8%u|rhT2R`6i;Uq+Ar-APXXOPp{A-0{u>Gp~((N
zBMu~NB#{w7^ffIX{ZF=yR9G|q!L8jhwnW>Ylh>WSB@Z|-`S03?I#^qe!j+yS!5+lZ
zmAw--!|R}Qf>cuke^Mh4<+d{?$c?(8?F%{*qJCa9`M&OD{yeo!HkL~J&r_0)fQTlW
zFUh+bx3y7G4JG*%@BlV55ZY3D1%-%WgyQeNV8k)mdKXD$3{dIw2kreS|NN!`dN$nf
z1L6(XlVV)EUC!D~Men_$`Ng8K8NHdp#>>R7AhmPHip7*USTgyWiWCRy$i0jg^f-`D
zg!ts$U&f0L)<xe_m@<;pJ}G8UciZc<sf<x+OFkv_02Y>Y{NibYc-(d)_62%D2QCQw
zW;zCZUr`1GTq=A-|L;p9MADf6bT4?==l>d(oZ6SO(a+g%&ZW~Ob8<o;OKgQcvf0u%
zo<4-mw=;RHeQI!j4^J&HHmP4kUxmvxKJlp323elfut@T{=Dv1xP3}7ysqX)>WfqtB
zcY%&MSBl8jLI=$S3=vKD8G3FvM)b=8gXUI|9q{H12sMeFn;bMs$ft@Mj0^hL;SVE4
z!aWAyT7Hh*L3AG6k6c@f!6nGVdA0Oxkhm+oH;<RSwTj**-n=|oF^YR45qF<1P_WmE
zFaknY{!XmoJT2nPEaD;QCkpmqPC^ReY?{ln*Tz)B*$@U6sx{is1Hig0Y69q}`t?1c
zN#h>H*Nqmvm9{SFrfd8FekkbfFI#TVJxwB90X}}9sSh!t3#LT!JpuTxsHoKbloE(1
z#b1Y0RB4b)iI?!EOzh+;xYxYIp*Xp;fyhneTv2K?PZeF_6}yau&Aom#E=yg>b>aUX
zCM<B!me{>6)vu+zhI$IVs$#)1Lc~T-Jo~Lko{`~ky%Xs&5Xvdg3VI3Qe4fThSH3EX
zp-qB<KEetQBM1ovfF3zOwEz)~w^Ae7OaZp%u&I^5`9Z5$_?Lc&><ag5DP{X${opVG
zH$QZ|q`t48H!dtv3R(`;LS_3z8-&EOxKD*&9a6JL&pnXXw01PzE#5Hv^zzqk-)Bnc
zN~{kV+S=4UwK#r0R=Gq!rF}ylK^AJ?nOUmDFRfqlhG7yG3_62A@1C!-oT;k1F+rec
zs)&x40D2^v8GzP0+h_qUyn1b3mNJJsrqmW}V`{~N53AJ}y~m@qc55gZyI>?UWS(ZU
zvT<K=dUZqL?1i{?vM)oKrN+_<IdNIc#BH@A?%WKoFNS~nQPPq=H=0<mP@YD%&tnVv
zm}d&Ng49*#hUc|+4VCjT+H%*4;LyYF#~GGJ%kUrgmQGKn9Wur(FCGQ-dmqPWR3t}h
zM1x*Wzf)f<*&{Bv?7qQ$X+uA<Y)YU7X>nC;K?4*$5$6qz8To&h1OJEruU5vtrSg<Z
zT$DQW$KN^5vsQ!xj8&pKq{?F&eZ5P`T$eI3t{Ppi9sL(|-_K%FXQjhDmu_a6oWw}?
zGP-RY(CVi7J9nA>qbM0AdGn(vmR4tu<_!Uc>B?wy&fLuNorBs+im<5DgZk_`Aj3sy
zwkWEhMj8%j&NSeRkD*-nsy0m<ILc-VJY=zeYy%o02yryBBT+2?)Xq%DPl$$j^*1d_
z;u|t(A7neY%dh>EJ}Q5@HIk85NWL~V`SKqBf$-rP9!Ft!mSM9+CCYbZo|c31(zys|
zHchzb5y$04|57YiU-%)FM5Fds{12!zb?uUo?4HgiHkeygejOI#sUNBiQf5-pAIIOi
z<;Yy=KWS?bH9PZzIuo?$JgQHxpmY&{kT4Pu5E1{=3vcB_vRVSHuTY3?|711+XGb~;
zW|~E;z60J5a-%TnNefqSL8q_13qzvj59N57#Me6BFx0gsYV@TENp;LFT|pPaf@L|@
za<<~rx<dE-v+ej!(o0?<XADv?mC{`o5d&w6cymkaw6wY4j)pw>gU0T`h$acXo>rir
z(qsE9?Aj%UlFA<>Q)*n^qtgK*aUo>lBVa)Ec?R$zIiCWY>JBc1K-%zkK(`iOZg97H
zGkl6Besi&uTnd#+YUox^rHhTh>e$_*=G~n~MLl%UM)Ep=))?d$fr9vbZa(!tZ#bBA
zJuGdt-%DIl;`RTW+slQuD)ZvwRjPB^HQI|;yjE&5N?Tw=YjApP4wazjU!m@dzLDwl
zcoM;05~&0(hl1#Q(CckTp>2#1CILWJ2j%a_hY27-tpL!l&rjJA?sM$-Soqx(+{->5
za0`ugRs?+_TaTd2U>+=Z`^JJsMEwVzq-22XBEgg}VONh;;hE!m!?>nU=O+^8jFfs}
z?!`RsSa-ehX#|(ll#UhURDF|i!3C!JD!Y_BV)9I?!ZSLU*Zm*dX(em54yQ8#n^7XD
z9Tf;1KpvCssL2GTCqN-)BKRi=D2#-(1|ZM+f3yG@_upL-k9s1zglIOyqXt?T-u^c)
za!>`8#TeFndZ{x`ADo?cL^;TsxUc6WKf-f=v4(PcGQqO(`fmDGBMyDcc`E6D6nlQp
zyxbNY@`Ltot*JGJOI^QV@_QW=7pip9osziRx^0?^N2M8xXKv48Uyc+Ej(|`#rej7A
zG{E$PD1hrE;lB)r7?RKiAk;WYHvZdZma;$dNEys||E`#z`+Wlp?gZ?d6e2FxPHhRc
z!3~R0*1^`8LJb|;6x8?ht3qT<p|{CDs*Y}izN=}6*xK)>yfIn#Jja?-$xm|v4-w30
zX1wAvC+e)UDHElLUcxt*X0GP(98;Xy;B06Lt0)Pg1lJaVP%)lJlXR*={rQPenNaCl
z{(k8INhG2zfM_-HF$U;}`Mo47i@t7F7}KI_@v(keYRp^F6s7Ek7fmppKJU%0#9E_P
zcx77^&F1{6I$=1yKAe7^Gk=6@sv#XB*^}SONI3cJH5JFhNDFjK0x<VyTW{mHc{0EJ
z7O`nO7SnnKEgnof454$j<PH2#C3&In?KbNk=Z$m;_y|NDg<i-10HlZuVqjz>03#m#
zFli*_GXQh<>eD%Z`TJY5--EEq#Ja%R*KptuBH0`G>L&HDBnsu5S_f%K%I^I<9?|r@
zw?sreqWhLQ;yT72v-nMrKdkrJ_48!Y?v9~aJtZ9pCDC!Ydr$bpLI!ZfnM62Jz1R{>
zZL0EDd8v74G}wSCh!S}w`xu5NC7HdP>w!?W6A*X<>~zGfL4ZO)M9)Xh(1AEK<&l_n
z0A>p|$?_k}-zlxtFKA;k6V^(CcDuu@iRx9K`oBbiYum8njyjVZDztL(JHNe|AXp+S
zPl-5U*Q<6zZLZ)Z^7e%sw=o3qs`#qQ_#SpOMl`rRm6f`P=>8;U&z2?RXZ<*BDJr<(
z;?`V_hN6E<{zp`kX8p(QcVXvL1q0zAOv(VKhR2#jsKh9Q#EcAx?cJ(`#Iy%6UDG))
z!0-N~NN4g^UB&$i?dr03gB6zd6TTPKoY~d59ad3^y<5nBX)dxxoQCC~5zPD+L%_`Q
z#s;eC)7~k>ei1x2hqGG1h2Bj5j+BS2o?1Su|G+os3FfJedlB2dT#A%sX*iWmE7w-F
z?7GGM@Wzl=K)Z0nBOxg-R?@yp;moG2Y|OVH5Va23;m{;8mKKDO5rWDWgjl4Hkh~56
zuZ-%$sK1pft21uz@(S}Jg)(pnmy^HQfq5VG-TOLK@3j&pc=jIcX}-}H6>E)shxsc1
z&9KdXf;!RxG4HGrC6W&Ng@}!L*=|a&(!_U^*p``VPDXB{UlDKWfvC(~c(szg`Zzu!
zI-+_QV%uQJ8}c<y$V=c*I1|cwF;zmc4Z^ubujwVlf`TCQ0;nkezuq;GoQ?pegVG4!
z-^!KMv?893+vZ*VYxR)mm!T2&S6Jf9(~IfDYks6epRrZseSO;wfeV-3N|s16&%<g8
zAAHMid-VFcL-S_KVN2ZE;MD93Sw;n_AQgmS`Uf#Ry#1=4$6hXNnXsdQSlwJ!Q<%r)
z_23leaNQH2_2&w^ftnt~R_TR5M<NS~=s`!N=L<xvP+cUV6M)E!{qfu1UKSutmBCs6
zAfqBsSJS_&;Zw<4R%*HjM)CYr7Du+asGT5nau2rX+;rn|v`%TI^UJPg3Bz7tSFRzO
z40Cf@fi22+Rbc`q;<L?B^jFe%-!?JUrZtuEQq<4rJb%=m!nGv07hgLRIu}sA`?C`S
zww_!U{DC4s%p?E|ULy|lRs$rPGr&eZ{#gzv2mQ`9yx24$5;RL(e)2}rzGkMoBX2|#
z<CToYc08_oCdLa$IQ@cq2TxdM#`A&M8r0)Pl}C5wUW*<6lHmvoUbbR-JpIjQ_i|U<
z@6mhz%^OEToAP9pzV1_!ZDY5spgR$l%ip@Q#?u|B8fr^HeDA$beNa)s3}D;=S;T$`
zFhPR30ANd=Pr1Przn`CZMdj3cv0)Um;j`^Gq;C3;z@mmbkIJaKSWMRcN7Pv`MAbH7
zc$Zd?Zb4GIyTnC8O1eY38wp8imhSG74k_twkP;LmM7lerzN0UGyT9O?vvZy^&%`}8
z6)%Z)TgKXYy)a`0Zt1@jXMd?66%hU4xr4(l9WR2ihq5g%$n)z5s*v+jd7G?vsxQ2%
z-qvF5GLVs^ai)lwk=&?0ZmM|PU=X@}z7#7Wb}?MC>7^`w=oA!?P(#Poi7n<O(7+Zk
z@3~5g*j=0*dwgtfWFEO(W>BgH=XR`OAG>l;<)(1c{tCB`&<_(j67D1R@LdwohuPx*
z*i%qZ{_JmThv%9>(g|Psohx7%=@xz;<9)mGIz~8(;WhYkzEccI^ja@_-19I#M82S!
z+PG-06R(+lZ&asI15x4X5-o>4p*=gRq`OKT#d1=}!6_S3e23tVo2ut6V((;1Hnj^s
zHyIo9PXXH{2zfZJz8dAl#ZTzUpelr3l|>VB`+#3Dpo&azqxAxlx;{PsUnUMVhOs&V
ztj~qhCjm)Xi_t%<XWnWC87m29ZqHwt3RS)hlO4z;eJ%m{#yaZSOP}Vkw2t_dZ3o+z
z6~*ze#X-wY)3cPE!#2=q#kfE8S7fvNC+6kCijDwsEByBYrRT?L`J|W)_GfL0niDsa
ztOimZSkSG<wsUJgfWS#bERsb*+@OWIjq!v5Vp#?PPn4jFPdbaiW0HVC;bQ+5#B`d$
zaNhyAn~W_=;Jkmh6zuG4o<xHs^?5rdr2=rRPA+;mq>_?Exa6gyOf``x$VI;kFx(%R
zr0l%5(;qxJN-O(pg2u>Dt(>5Sxd?xN?|YVFCHy_IIP8hrI}}-^nqLF>=GKbO1gvW(
z%o(R5k46;T=&;8r8`LxBX8;KhYoM1m21w2tZZFU)MB?q*w?nF2g&_uwAox~^nnt=a
zLNQEC19nPasP|tM+X{y71mKs-!_oh3JI8ZPFPb8?X?%Y)7&i8ZD_fxVXF}3<wE4L=
z({C1Te$mmoFI9>0q24sea}g;q+ZqW&c73C)YHGi*iewp!2HE?r_+sFE`pV%rxo=%O
z`*oZ@_w$)5y@+w+Ug;CUkO`!{b}?Y(G^uLJ0=r@zUbTI_b(KjX#04%yz!B*B$yoxS
z83f3J0y_SMRw8yVP-g(N=;T7@!G-e$Kik?b#k}3peP&$e2?sx5v{5F?)p2j&FteR`
zEYEkP=<{qEo*nHsSE&9;sF?2Mk(yJ$D;lU;o#E&&AD({W_Xth9-K{N02B)8SOi=45
zS8_eJ-;-2)Udfy}pMV~{15^j5fW8ass0C)lM7#~QYM&}y7RY<$5dJ}8R55-`iU9`%
zAK8up(7!YH9gNilVAarP=YM#p2^x>ZgDm4^2=Hga4ULnmy^2XVDHXn)&`+}-eDygM
zAxt^HgL?7v`zM*q^Vx5nQ9sTOaCG-p@J-3Q3VmzQ&Gnmde>>>_BRN$M-<><KUx}6^
zQJr8ab1?vzJEydr3%LbGdB3ZL%PERm2{G?6k(x#m&BEtni(~sucnpk)iGT*sPy+s`
zBXzpKKwSY)p=BlmAnZ3I>=3C}2no>NZ{HUV!gh|(o>Sjv$BP?_cYR8MKZrRq+K{$J
zht%?pvoT>GV+M6;eteSk@P*|>ys}42?;cC6ZwmbE-74mDX|MI%vU0erBl7x_^PCI(
znDWd8ELIzW8KtN=f;WVlPX|WJpX~$LUnIrS(YOv3w}ZE$)oWl72Npa6q~l*O;0}X)
z4?ucMEUf>{KjBQ%p1I~?j>{N*O~|q;T5`LRdXda%yMZHK*E#Ha!e?&tv6JbDt^fmR
zOui%-bUE_Xz@rE)0Xx$FizcTmB3*D4yzcK5BL{;l!HRCIw<-Hk5|otSW;^3MBi5MI
zSoSMKynXvN>dIWBrPur*kX(IDt+5m2H6{vFOj7nC>nh?6gL4Dml<$}89@_WlKiZ_V
z9DfV4z_^U(E=80)kt#ew5Y!F*++n=$hESBr)xIGLnXO8Uv63+Tfq#-hbpD-`gK67{
zU`4M_$H)3DKKK_7e8l5S_RJ~~R+{D+#WFycBV3ybIXd&uox!nvGao6}9`r~qyOzO7
zEF5S-77K?yl*+(<Fe-O|%9$uP7$}t)an9}Fg!`p&HC@v2r~1VGux?Tsm}?(Xp+Jbu
z%j^E#7an>GA8Y;LDn#Ubtj>4gB?>)lEmw&8%A#vD=NE+z!-O7^QYx)Fo_dd_o|Xm1
zd|aULYj_hSJ%0c)c1I*qkJkqw&bRo_;DE3>sAQpN|Hd5yVK^QDPOo027*KQpaNbj7
zHyCG^ef}y)w<(9R`Hu0aq2d;jrw*2-iP%JE`jf=j)l#sqZZ1W<_*B;0Ma9n7-WWc=
ze10b4w%G1N`mD~-DtHX8HFvqO&)i-FGL+9Z7T4yr)rO9)b`m413L}kHfv_GQqc+J7
zKp+DY*#9JCeM4YCo&ZqUMkdMMq6<*i41p48;~g<D2XpwSlsZx->>voNz7IJqJ))To
zT|}@fc?mE6E)zjjA&K9}BDmV{B0rxMCvABy^hnE(?1tYrD|Me}mm2#b<3%7Q&U|BA
z)rx4m@QMIcY@6&V616?ZRnG6LE1v8h9SulNIM#nbnn(nU#|z*Ib8cG)C;t72q&M=h
zSku!y{?Lr(S9`v^EZ!>-KYU7S^P&Etxh~5L5Th+2l!zs!`NETuOI0m1Tt%;(GLY2c
zD8v?}${p4-bYWF$THa<**lu>5ztBVXO0u8^eqGzSZ6S-&|HHSo{f&CBRl}DGY4x{1
zX*e!vZ>Xq}*ma+x%6-xGVSqRuf#B@6QAJS-WJTEE0Zk1s<iYR3F)(6pfEeR8v;FVp
zD&V_OgWkDEs`0M1TFQ}c+v1+xPM__!s{f&XBIb^TLT&I40hXB#6b1E;X?QV}ie{fj
z0L7wzkmZgkjXQJ4_tQ<mrlt_vhm>87kjP-&9G!$tTdqjunimnrr^wdFyQr1fDYhPN
zoAZsW$lK;kkHmn5xUYLI6jffMISs9rDyus+2qQ=Xp7-dyrs@eIqze$#0S2u}Uj6r^
zJL6&89{}#i5Hfdg>faM@*x)XlmuQn5P36PTj?#)2<Fb@)qfAqxrJ6fYeT-H~%A2&j
zgccrwb>!%SRKpgf4<#Ryr>FQxy<GE;FqyG&9m(9hsNA3__-QLaZDgs;ot3DHoT^kZ
zLZ@#B+3N~D-u9W*V;~p`tESao6#|Oa68DVGh@vQJCtbb8`XQzedm{8`J*&i;#{EDz
z+yGgKEN~-!h~IpZVbneVb(G_%7dZFtrG1@0ox%<y_v0)}bRQpPJr_-bD7U3}HN*3b
zIiZd4DmSw-56;VSB{PG1k6#r``;4BC+!U@-!Q6J276i{vn5zi;rb{p-81@sMjai$w
zJ5z)8{TN>f7LB!#QsFZ-yu0D0x_0K+_$YvuIgd91y^tu*y`TI>Q$!+hu+S)HRzvc$
zk;O%W@>&=P>jv@l=C_(EiZzH2B_#(OHpM?(8<BJvy)QtIpO&W%&iYG#rOiTn4w)!(
z6*qUQp!~G|G$OX8y?6ZeV}mWqJm?2GqONLJBL5A6Djn6BppJ|0`Hp$@ohRzn+!C!H
zSMOit4(gq%BrIXuH0Il>o4D|QJ*-otY(Mcw`|^BLH-<MJ$WBeY&3t55&mM2c;=^Fx
zPEHt7g6J4^;jZE$>t?xHRIL9Adihk{9*;~kb+oTt5scXZN5M`BhxYGFo()6y1JKvh
zqbb1|f6;%l@`^L#8b-g?5}&f0ffOzw5=*@tx_%~gOw)Edi-qSpe5GIl67awEes8qA
z^7e#6gd7wSzWpkS)><ysUNsdhQ{>ViH$jkeY)G8TxZmxPA+|&roz!m+PK80z)!b%9
zZ*VWzfiR>qHI;?CQdXDC5hsOLS_LBO3AdOlo%lFc-uHDdSo!dI*}mSEB0H3Pzy}Ia
z_$S`inFj;+2fz(a`g$Lp`MTJq$|Rf?T=DVgHRi{H_@eB(gkIz=SqYQ&;wv8z2|S$U
zP2nyMZNBwlH!TBN?NmZbnfoJ-8?1sY2UZ^Kr`2A1X;Bk~xXF7lKd^G%H!(0#9QVYG
z@v)t&gnwjZ)mZ!5CrrjR<YAKplq9r1hHY1L6XceBwqKLb@0X~M^G-w|9`lve1}pA@
z%l2qnmDr)|VrUdpScCx&m;XW-dH{gVJ=W$1&i|9FIM>OdI4}|1lyOU6lY711_C_%_
zU4|=N)PjOUVp`BzYA}3{-;IxBdzf&hGG}pa8X@jmsaix%L<ULoCF3G<NIQ;xi<9Ly
zV|{%bq))#vRtdX@orH+O?GjXoPE!fH;^M`TN@{SZt*Dt83(P*}8yh}<1FQiF&$uH-
zSSfTo6IbXLW|1CGM2W-j{d^Brh;=L5n+Q~3gW8LQgTUk@J`aa^DU3f5;Q#hI0{^ei
zbchW7O!tuYcoT(V(vu;&;>v3sLiZTOS?2yc=f!8*XcL4HN~e5(f^gzvnK4rHLFC0`
zx%1@lM?*JWkA4$lyePl8LrA#2f9xr_DO&iw5^k{RIAb6=nXO%iht$onL}8p{@1Q&v
z06#V4jRxjV2R2i)xt{dNL$y@Y1Fg!K7ZV=^Q6pjRB0{S1YwDqhU`$Cv5SW7#Q{q2x
za3u^p2mq(b%<B1@CBkzpdhbd6o>|ExEQq7tr_1G@afqJil}0@W<zZo9)VRhc+B0Ii
zt)TZdZLHFyEs4=TrFssZU53wJcL#d*`37SNEtL6dSm@&%cT47k9mFmgziTfb>=8In
zpx@TsNnBwptOw;Aa_7(09|r@|Ca*`S!lEhkno(P25Lt|obuQ!lfnHZ8ZZOHn$Uw&k
zMB(A(?5u|I1_QkA-XwVsV>*@tZzAWqyBS7)VZNv$30x+dO#2<&@2@yDi*b-?>4k`@
zO3?^vG4!}REAmfGX624b4XZoT`tsFq>OQb4_hQ;me6~!FezfXQf21-d(M}ci*)L$>
zj>9*Os|s?ei#UU~MySrA*W}Tp+&&=Fg0fxwCGs9nIIw@c2lC*=^)NOlz_zEW1OjH}
z{y4Fg?loa4E_$_YB9ckdYc4b&YdLY|#S>>JcTayf(`M0$p-=6XtnnIj&p}5ABMX|Q
zXr|67`k@@BN7t;Y_F4%y6|5Ic1Jk`z8ML2&v$N8bH{0@E1Hwqler#^?co#N1rnzky
z)W~>MplAG6f{nQ-C;<b|4j+i}gL^i?$U*=z`mP-Df3sk^dKo3!1f|$p9YZ)Ic-4vv
z1t)NCJkY55LbsoH(s6IL&DfMo8S>9CO}p<bQhaCYXunvn+~o)BNl>r9DoXIp>?ELg
z_d9cbs;9Lfaj&To7=ytr)aY4lQDf;kR%$CZMp{+?VZFB!9C3$?jEMP2_MquM_+A@~
zDiok%Fbzn0cwTOZ*b!t%qD2NL#xuyTK!SeX`*FCvF1Ez&p7#mzQD?E)&lKuRg!zTe
z_b2=;Upq)rPPsu`6252qu^fFI(0?PJH6}g0d!?RVkh!2210CkKotx7EZb{Y0kwA9c
zzKltO@qFYGpA1;nHCVRS5rIR6CMFp^;`0zocXq<a!T>UEqcsbl>hLFFzRqU-e0NeR
z^MGy1W2KYzn3mBntSokL_LTUwCx+hI;RraIW5t&vKtMP0Qc$YXYc<9AajLA2%ac+&
z36xi<Pfv}!cVsFfjq4;oN#ZLyex6Y-aWZ6Oep>$vNisEC+6=?#Of+2`qwD;*)AkWK
z<Qet;jyW?DV;m+}5+sY_^H1x<w--hj4iJ*;`BwZV#bb)hW{b0(O1P$s&U>^lPN5j2
zvjwMaaAxtex%iVX`w6|ZRwI3MYB%~EynO9%hlA`!f8jmjU<q`2dRj1XaB1e7XC@W<
zsuz4;wTTgOI{BP1#K)B$+0OZQ#z0Ts7UwP}j?xr?&xIBqDcs?Wu*jpcx1XYPFL|VP
zsF3Db2@*NUa<BvX^H4-k$Aj|?!cZds)VB;6Vt<o6fYO4b<!6Zobp<zr$C^i7bLL+D
zMorPQE~gmeuS7ZegR{&n`aWP!*x$~PEV}E5|LPjtO!|fwIH-6&Q$0j-q)qj-!mx_^
z8TfV9tDUA~=R&c#pqGmfl=brLfy~*biqPXK+qw1nTuYyGPu(wg_!F9ys8Zo}XQXc-
z?>IYDh_|f-<GB^U0T7_q83pohqZ9ZG3^x+My=1scdr;(Kq7(8Q{;q#EUlq0pGTnWu
z#$C&`;GN!!8{-uqG0SAfq0(EIs%Z19@@dT(hXmRO<kks>Uj-0kNVEi<F@H6de<^9A
z9oXCz^+=+~nxuzbLTdf^m9e<SQP+p=9NPL^1Vd&AAahm&jF9UM=Dk}JjaJWV<iGrx
zNVJN4ZH@TKAE~DGmpB$2dqBsC4-)P}Sl&4f1C9cKX%~O1fs6iJBzR>Cx4&CCpjdtL
z!h26QUK#7A<0e?L*e&VQ%DBNj)}EQ^)Vyf#*pyJ7eNbUaD_kwyA}u}4z-dyr@v9TF
zDueO8?)y%-IR#T0$7?K_^3M1oKNclcT7SW0Op(Nk&iToTGHHp-%))@s4^P~gbw9)l
zc(@u%P<CxK+g)lKvHJdUb$F)GYvajkz`J@3za-xdg3B<iY3xbB?Ew=SV&Y(9$~rzA
zol`Iyq5&J$k}>VT*?*2slS|rzg3*c)gVHmc0;w2yYiW&r1*dM*o$7i`%E0<(wIR@E
z)Kd3^do1{z=mE_o8P)1(2wC&{C>wVCHb-`hP3EEsUh>qTqL&O6cOX@fa$>z5k$39d
z8J~F%y9s%d3coIa9Ozf1%icBaC4~@%^a2Ctp5ozc_D64ixKZOZvo#S`nW9}1n*+0|
z)qWFa2Cu;gewaN#7cYeK!M|r<>@fg4b;DpkIOi|>6*7{n`Sgv?7cc#W7cCKs{C0f{
z`HZT^i!nbJiJmdh%VDy7ZL=ouOnmOw(rr5VdcJL)BELwvX&Ot@{cGSem7kgDrdOPy
z9AyCmom!=zWwEZW=>ncH^Q|g2EQQ%v!sCowE}*#Ml^T9X^l%13FRAHfyR%>;*3iop
zM|7QDFA}C7OvFOM2>$vYx@0RstyhZBARH6~F|iJWe`oMK3_ccsmyph}250_-|Iy$#
zKz?D6OpVR%|C!{)#NkV1M228N?~+fEhj|&yptFV$w81u|9n-K4%4bq0tjXDN4ayk&
zx~C^>n{om?j=#g&z{H7Vy;AoqzON!(L2V3ubVxec1(8pwX_^u-&LT;#wXzG>J#2O)
zD7O)t?M`ZeHkNm<IH#7p@nWm$NUGcrF7eTPK)1jBCYdS3IB~miAt+)2Xq5jw_RgO$
z@;HEekdD$6NHCZYwta4P4k@^*wKvW-rCGLz^EZp$YXggO*~_suX;OBfxdptIi2Hq|
zE!Fn<l}Eeni^jeBfhV<~5Q~o==^P5b#Wo_CcWte&#d4X|bw~4%8NA)UV6nHqTqs{I
zB-+-XDO6AB0X@NL0p<~~09kLb5wVAPA>S1kP&@#nc~$!PZ|55xuTUbtW`E@w|Ki6V
zNKdkhpPfofPSjP|qWxg39jPxpM8#8iSy0N_V8$kRbYaksaJ-l&^%y&~apNmeHhJcb
z?Ko)GS^Q=0ddmI|_DR5P;Ir=e#-ceR$Cl>#&F)Q1@wY@BAek7q$5KE~GA1C2*74A>
zD6#<~N&tw+?VXwcb+JE>sIh9VsaT|?6ZxlcOLPVgt%Tkuwp>$jJx-ebUr+Vj@In22
zmeH$_)y^jt+IV|c)56RQ`|M}~tg547k7jKcMOW%%2R9bHAOkW{EBkXp%?|loYl=h!
z8};*@tZJ`k)Y>IDu0FZ0z{hp!pyqNjZn;1_ErA4Xr!C$m1rR0`J2oZ<*1r&R2S%9)
zP-Y#XV*FQl3HS8Hu1Myh<Zn{qc5Nf&aplpblcQ7d$)D}w)l{L?n@V&GKsVzUzI24{
zIIvcEHGlm~rS0jGI8aWRVp&X0{-)t1P}y31>->gBTHn;$zFWgTL@<q)DaK9uf+N#(
z5|j1@;V_SC{2smJ4W{WBC%fA-=k9pReczSNMlMZnw7H0QS2DejPKQ%6>XvF?>cD8U
z^fklccveON+4kkNlC6pmQw$P$Kc){#IIu(c;V#p;53?r;um?d)BjLYd2JZ_OYo_bR
zH<e@7EmJmI1q0(+{j8&c?`xXoeU_Ami$$CVMl^{BZ>7CT;v#d24Bm);68MQihXna_
znWG!_Sj++5S~y2}{mjd_#Xroc;wj};c-xla>vp&N)vyWgG~RU&@d;=@);XTsh2w^r
zLBv}nkHXEy$G7OE{jnf~t)e5BOG8x(kTMlECnelJT{7Qe7;Z9vJIaig_qUu4xUHRp
zm!@vK{TsLB=(C|<+_s6A_x>-`Slqg@iu6JE?wREB(znm8lz&OpCZqH8F4Z!nv1}>0
z$mKA>*BOj6+*yTX3rTO%)=}h+p9-SVWr>&88+%b$$L8!wcu)kia6}pC^zpLTg1>Y!
znzhP>OZyr#9PasmqCUAjIl~mA!iEDQg!}kBoU-RI%oG4qr|5?CZ?_7r$wsOdzDnV%
z$Pz-#(uwK1&iP<ODTNR9U%uy2iZdmSFHrMrJ@3JMM#MyJ0(NRq4P;u!5z80O!M)b#
z4JG6u-IiWv*@%m8A9MSC{!&w<_()zvJ8r=iBAl|9fqkLh8mRSrzHxxtRi`p@%bjMj
zt-j<KSR3*r#qF^;CK?3?CkILo6!ae?_%{qP6@YyEcFyo`REEbZ-Ay8v<zvn9#f9{A
z7mMl<oDAc2A?2_vsa`tsBg6V|pJc8)A&yMs)OYD_sBK*s-`t(G5)GoOR5YY<)9rWE
zWqi?M$6kC;Fol2|l5(DuF7M66P3RkT6bnFR^k=t$!MqI488zjI;jA+jUN_r))La9`
zJDN%i1Q6O5VsrPjWFQ+GCM7%;xcA}syoI5r0jNS7Cpy62{zrdy_gg=rZlHLyM_9j*
zSsCIpYfbl%1w;dHG3>5sALr9wn!&LY3wf{TFjo{eou$s`?oG8uTn{Xs;%^`S=31!H
z6l}?>!SqX&&r!?ksMrg*OF4lG`>;+4MP|+z_O#Mx8Hnl<4zCU#M|sOPcLH+Lmsh2u
z$snW(5nD@UMNSH!gMotT->wN?FcRp`@6Sr=bO6)g<1ev?o)A4Reyf2jC+WL4#K(MJ
zoEJ&5(D_DdXrwo@>evQ=HZA6sID}St@m2*wAADanbzbw#Y{5~26_OPq_QQb5n(?cg
zRT>t_h@5JKk6B4t(|R4xnP|Rd{@hlC{@k{m>!z6*-f#_DcqFGr@fIGnZWzJU7%4b8
zE;}c?mM4*llP!EeY@~yt^T9h2VVD^JrZ%nko4-u~IMZ@d;$`g0EMFKR#>}m6B5x~p
zoR?`_Xm@Xvhkg;A_HnLpAyV246)-I*`*FOsE^5iQ@(5Hiv_VipA2d?`%-(x%5?OI!
zhL3qvwU!h(SrM~e_<5I4#qdRYTK(@s;FN8-;<a4US2yh1#O`FZ01u5)ukO(?qxJ&F
zJ&G8xnML8D@D6?iL(Bva+o_KwfGtLU#ipj#LkV~}J+fwntqEisd0eaYKGF*>H9zaa
zmd%qfY}Z5n>fW0rZzGyem}<hDL*+@Fj^nCdR+3CE8@$X>N~MwiM2r)^GdnW`!HY73
z13fH#b}#;jFuZ$xuh9!g93qE~EZoQW>foT#3?rlDBbz|u{NuB0dC$ar6am3FK$I=$
z!70&Tj9CC9MbP-}!(){7cJ}=qG;K0(E#dVnlU(Vk;o!yH?CeM|mzxyhSGjz~*Vppq
zshHrltY5K5ayTlUmW3IMp;t%Cc8j{S3(mI!CR*5Ee=&LFD*9<`h-9KzEqiz_OHi_X
zX|@dt2ZVcqsEue7u=EO1Cs2{OR*`VnK!kwoS)2?gKw%(23<YZN(BJNh2}8^V5KH>e
z@*WW145isfa;>MS?m8pUe12jxx9f|~5DU2@z`uyyu8-SkjFNw2eeFRh_$#DuliIj&
zj?tlwNLGzoeQqlja-bt`%h?Cf)YgLg64?R4A|8BK-tq}4^xR_?3);zdj;9;!xIy(R
z99^mT$7WmTZ;#S`e-K<OK{WG%5*wNbJSI6O_yJJ_7lxPvAU+Czbo9{v@tuxiOu3%G
z3-VJGT;X;I&s*R<`tz}}{jL4v;d(tXt_)7)uxG_%dN|GS1YL6VbZSTBxRN-zpBpQq
zXy2^QIo(`*bmM~Sbbt0`9j5is<0)qTz+!b6o>5@58BQsP<u1)@9*xNKHQYYI27$<K
z-QaWJ09kHM1fTGS7X?fRW6K5Dcv}XA{u6dI*-H7Hw`j^M<Z9vZNnJu^&IYCX=6<fo
zicXGmcDqlmrzW9fade!XGNT!;cj1X`x!9SH<6X5+ICyf|BHx1`;>nhA&9sFYZr_{7
zy=HBgGNT?qL;khn#(TT))RTkPc|WpWOSiPxgIprq5c;s$fdzvQ$?$(Af~PR7JOJw_
zHxA^lh~l5G%M5uMPS5NOmF*C@U@`GG_F<=vdvHX`PyeLXH|1*EfV6u07N1VU7K%c!
zKF#Bu3n)cVORJ^<wz^nQh8ILt!-{Ly%xt%eg?n?-teQ@yJLeqtr>o<7SYVXp)j?ja
zUbe$_3xPf8^%FPLT4gL8a%@OX2jssO!j}xjl@D+UOz!kQbjx&#TgT>+Q^z}AXXN}u
z4CipfEo2$MZeqegBW++4YkSE&{VPm2W6JS{M&vD_8+6Zio@7qu#0MNJ`$nkXpkgY!
z{#G*6PQ_t6L>n1V)htI+rtiZ!Zf2?Dx;9hf_Q3vFZf3TNRtxVqNJZ5R4x)gK1IGr)
zzC2tyMW|q41prufoyenyp$Z|pFYn~XqN~GQmNPm!ZPC!R3y5kLZIr&{&Z!$!kYyV+
zLWT`-Fr{17pQ8(7IWTsl?-wDYP?`WcSeWqR^lC#nvl&nj>Bm9jf2Jv0SY8^ahVinz
zJAD6B#o{_)GqZ?*`>jzG2(!)&NllRhhm8V3cA(?G#|5T^QGEocTyB<BfU%*!%|!(P
zp6c=I_2gb}$qUWl!?p{SrsLOwtqKCu&bq>X&|d9OY+N2qak0>&vs9&TUF>&s;PSF(
zzA(m(evD5(I!1}v?uTVP@{8<I=A<tx<;xjmxz^#dAvtbF+O|(gbc8OI_}QSR3oZT&
ziWI<SRxF_7;oR+HfH4&UOiW?F*#AF$7HwX9VfTqQ4*Bf*yWfqVSBFFT65kNhS2#vm
z%Coma<XFcY@6po(vc3j&j5Fvtbz@9t^1Q|E2r}9zc<&s<w}@kfmARnE%Gf-k<PDVa
zj=J*R)(P%!#+c(|LOkt(V6KQ69jIYov*U=Ng+Bx-zAP}HA^<3t+DqkOLgxYkdiSmT
z+-<`kO0olwleF0tk{Tw0a{3&|j^b)besdncdf)Vc6>I-hu<FPKYIG%%3!P2N^7P@O
zlLK{>?km$5M7l#nJ2Tj4*j|CES@VrqSu3y7lLXf{_lxj}A$Ecw5QL7IENc=Q4ijE>
zKvMtV>&XElDh7y#Y&kdo&BICR+X!Q|`a}-iK-$lh2E4pizPFZ<Cf_QJ=aO@wvymhz
zNHJGdV;$e=`;ufFE2w@gG<Oo#So09!Ul$!4?^v5sTlYW=XmS2vAS3me#kdt^=BdfY
z{mNYOY(0S%OLCBlEdKgYPe+d=6rLRG;jIJnz<5dk9u@OfD!^X`WK`mPR@X)vDDFgW
z$@Yle=4%i7LP9g^f`#zotj>5oN4P1gzxcS2`gzGz#xK4(B&tOM)Ef-uLymFhxOdFU
zmgeI8JQw8t%?;l791o=KxV|wS`Px7H^MPJoezt9B3q&8po|pM53$MddG63Zf<_Pp(
zu*MGqDg}VVHQ8mrc7Jc_Gv24?hA4R<e(2qW$)B*+vCb;hju_?XzT}gOt{rek-ou+L
zA15-rqim;?dduAQSn{O{>x9VaxC1?!yJ=uE(Iyo8grzl5*m=G&!rjP3(d-~9&nf$L
zXv;t}=mk0cjwvVr1p?u~#(a3id|$v&$^aCBNpK6;{?D`Fec`J)GDvc15yU^Jh@hEl
zdf{Cg7nCq*OSWT=?aL%pMV^U|RjENfr;#hW8Sj6Y?oH0ZcNi}nTuQZo)BwF7ZZRv$
zmg%23$3p;G4ET*BO7;)l<*{bl5w}d~gGA@?f9c>N_#i;Zsjvbc{6+-EQVy`};bvuk
zn{GbDc<`Wx*Uytm8(@9YCKe!6w%A$LHh*Hdf%n7|QSP?9HP2XP4D;~0YN`#VigYKM
zN^`ef#X8>+ySf0r#HIEx%-q#C)q|!fTrZss{Z-%8M^aT-$H_|ZG#;a5OrV_wRT4+{
z-WreCl6<StpCX;{`(C=85k6Ig@CuDsW4^);jF|E5{AG<TO|x~5nV!84^SeqZgyOb=
z<-D@eCwfQaia(C;a%&_kAX_oy4hRaJC_Y#~?*t{-_u&u|hgnte$NT2al>fH8<ME1B
z6rboOV{0W9c!!sd^03MEDuf=<Tq7$So-lnO-TWSzjGeg5>rowOpSUChpZUUMXRe(>
zG#XH~N1To^_Ic(IV1YEQ*W@%xt*lq<g8i%_dUh)n`$X<GP`@9@8nK_hRCIhC)#e>_
zT6yxgMaKt3s7Ma3A6SB*fuK+W5ZgnecBdqauo572Jn@@*7$VvVENDr&b`p6qIv_+=
zSuGs6CCN%Xl^sdH>dNQJ(0^=8^}2C?==!wY-sqk-KK}chJMK^=TG)_D`1+*0@cXR@
z`heTf?;@6}sYztSW|g}#JuZNrIvkL3-uw}He1jg<;2q)Z8)A8+1Ps;$x}g;+fUqez
z(PW_yr>(Cn46O=4QzgwM1Oznxd;yY^gXO&srs7VyGs$i>zTb6^NAoo0tjN|Yq5r^~
zED{ZU>0RyR6p3hAa!KqgK28~sHtJhvH&dJbEFzJ?OaX55&B&x73!egW%3dt?QO=7%
z>rp^JorcP?zPV$w!o*)BwMA<jgr4JupdLp_iH!+@N+Lb@sR9h@696TQ6*>LTFvQU7
zW({sjnmbH8tU*v(_?@*J`(au!QevJm`F%Z?p~NrYmCg`fuiY8){b9)i-OhG%<X{d8
z#qS}Jax)me_0m;7eGj{_$@`SDS%!Tv+#2{H#)vhJ$eqm%0nb-Jz_I<yDsqWEh<+lw
zR;mROE(u5vAb{W={7eN#RSi(B_ICLH{TBfNUt;k!{}wu&qW%{q7|lw$W-1lvZx>=i
zdO_V=Z?@&@e$>idd7kWNHCFvb9$M0FB<8Wnjn+tgugYxqghqlP{oAWn9ZKgnZRCOV
z9v@I8sNzzZZLt9nD}Re7PJVH`PPV4(DhUpV%RC6KAr)2Zq84pL5&<#-Quue?sl(7}
z05ry*>3x5f%mCM^%%Ue9x(*@JjJG+`+bqn!;S`Qbg(B(I3Ew?jKQ@zJr&yG8t#u~P
z@HN@u7tm!>T&WpX-5k=HqW@r0GW465l4=;&a?5s0TMV?3Q{{pua2{pwu<w_k618cz
zQ+Xaz0%sz{tFFQ?Zk`sqI*f#3jMU_b_!=F*<}-1v1duj?CkOw3*S9u|vKFAMb2T&v
zmjk}m9^CK+jW)A<^@RVXLZ<k>qN`u;rKOS+!H?-+%9lBW9k2Z??B!5+Sm&jjoCYOI
z{9AV)@#<7rt+<3pT7LR?w3*UnD`lk7;lc)=zDK0aem>`iWx}%JSeoC_HXL-C*!(JF
z;|Z$FT6Ngf&p}^Cks`l{xQxEmK&l=IN)PU4+X~=9gY;ti0!Kv$(N2~bClS5W7#S)V
z7YRr)p-L%skV`5;fbzAh;=@ZLq6agi4ltxb$4CJ@{xEqr3w0UzbTOCUeNcFpEZ>Fa
zVe|tYYc61Y(dghkiBV}Lv+dfV<UtsE&f3n0x8Mt@x?X~q21M?>mnt@FhPOYJLQSDg
zK#%A?b7Xe^?B#Y^gd@8FgI7=`-Q*zO=rv7CTk;pMqeYI4L3|{??jzz`G*uQ&f)`z&
ztFM0ijqnnmYDHZ+F>@)cllq);P{q9rK0oSoz+#xAV}LgB4seJ{kjU9-5mI$iZD-xq
z;VcRMzV^HOh~`fkM|b7$GeG1O0wpd5JRCeFNc6$$jbOIc1GX}Eyz+Wb{drNH`I#_b
zyJqclwo+rDZhSFQ{#enn0Ws$s>QFXxdO+&!wHIee?!Dj}(p`WsS7sh&6qzzsBIYgS
zS-p>!@l5J#Or#D0_PINTSWC;jfzG=N7OOnI`?Zr6^a#(&{6TOc2?)_SyLOoX0+B=*
zkOV;;{$uJig)w~wnD(TY@qpI7zlT;qDY<u11>L~>2^?;9Z)_O9!q*Hdfz@oZs9wii
zD7SCcyNg^`&J1EKIM+4xqj?i$sGqp^6}bfTcwqfyS<iD`x7N&a2UaAY(CGAKIJqd1
z$Le)kMfkR_LdnTnAFwO1t2aZ1jS?P=CMj$5AC9jj45tCW$-t5E|0^H^oS_BPbhkfT
zhd$Nb;77C&f0b3zAScMn_^Mx{`Mzf#-nPj<{I^soUGZ<US5KNq1i$HgOF4VjrXkSE
zYr=?&Qv8!M&8(<arf(9^+}Ls4NcM;r`h9={Tr?zyS}g2APucMIPR3CJ&^oc%*&k8@
zBDOG?MgT^J^kn?+%?yuM7$G+f0bMZ$n!T3A<=*A}foi~-42yYKZB{fny|=NyT)&@z
zY&}#Urbs?&j;h!Fip?>5vL%XI`-qVQ<?JO>=88#>dz^N>ky+)bOxM6U?hARx^+%*p
zJvzAu`%m*WxLsIh!O8I;#I5YwSX{{f1T-i@zzD^IA34IfngA|f^d}O$a`S=YD0PN1
zf(ovk1c#P{v2^U5^KvN30PBPEn!HR&jl~BcZb`W9RmSel%1H;25{>%wV*j&4{5N>f
zoN|p?Jl-F)$C1gzpod>^ee`A2A|fF*QXezYysmIbpjW7L1+13(8(-Qx;%r&NlBL!_
zC6}#VZ;c)u<+~<Qc<83c*TK65Zr5XonTL33NR<=bH+3@QJaUTberz{nFVL5_<F1`W
z)|Or%sd)cs#9qh5WssHi$@tPw$|(g62mYM{LaI*5J@xwlv5f@9j>)?+-IW6n9hcyz
zXm&A>0utdshmTLkzv_!K%>3p*K2l|S^0$k)J@_Q(lZsJ0*tpj4*mksk;-gSuW#R0~
z4`Z-vb;Iyyv{ZVIf)6}(mEjfS^oSnap6`Li@kzvIUY|whh6ugl1iWif9OV<#wp!w`
z{k!FFXnH#)(dA>^i)MFQC8!jXXOwVThf|97U-Cl^sPb4C?>QhQG$6RU@6qzDisU$O
zz+fK7za2}yZZOCe0CHVaKk7jY&#ES=_Ixg(`FoF|se2Wq-U(|*@3ip;N^Ed)rMBSo
zuhV*|oRtFP35vX##u}D3wS)}n%!D~HV()FyCWL7Yt)bggac!baOr7G;u;(}5G*X^K
zdJBk}MQy2O`Xd-}xV{K{T0Gwvps_*_GrHkUd)y{xdCUL;ADOIj3ag;t5Q<Q+QNjIF
zk`(cRakc`S0*F=0;F3S#{dvH(`*}XULXMu6cqdjj;&iVZ=G;&k!^eJ>w3CkF6};~`
zSL>TOL4t_<^)ZEh%Yr)B>MZevGhM#Qs7dgbHwhVBYtbIjxr+3bcr1LFRJNh`71^>Z
zh~JP9UZyac)q5`ZcH>rdLCtNH7dvMf(TO}VXJ22ixE7gX5ajp&0KzV8nT0cjdc1tL
z7Do;Kr_oO{DCG>1{3dD76hJ)`P+)pn(%>P=0sF$NXalT>+F}&=uatOhHCU`u)h<$}
zVNiD1sF5VcZ?d4(@R&pmvKlpmr-~+S;cS?%GrVn?{2q7s4rSWsYC*S|eb6F)-dVLy
zwn~-c%NoOwQl+(eKl(0wDC%RkI^q#<;GEad?rG8#Eq3%ZA?6IvIqsVX!U!-U$(Y!z
zH(_cv>Rgu7nb@itLDvw!{+%4eYZU~SP=fl}&O}mzO$>|+fdqgbk{O)=F!FYQJcxQG
z7l?%Ze8|5rO;s{e*~R@BtZq#c8Or&ZFupBMU5vz7O<VM=^se;-j@H4%#_L~sx$7nG
z>A$y`aZycRavjodVQz<0RL}~Z6CiV*FCBK0<h%P%YS+7y2eeLxrm}w0ykId3)99}7
z-W1@GM&K^(8V7;t*H$qfK@c1%v4E;)@WWXQg`sr-Xs&NIZT_m~;htMoQ8bF=cA#J1
z@R3ib`-z&AO7sbC*VcUK?t_1JIZ(=Sb{D1M6l%@8@0dKZiHN(iwDQKY0fRh9xK5}X
z^LE$RDkLdKFz5}whj)qurFq52u+?H0j?2EbmF6T0opw|+>FXt7gakGa*vU%pd9tLW
zkIz5=F!lT&m`FGbtP=n;%3_mxXx<6r9g%YsGfn%=96?2GspSyEToo}At?P|iNXg_e
zS5O|#qEJ9j7OjiR!ALeqPV%IX63t=~IrVLu8tH)orNF08j7RSz#Q58U6f<j_428uR
z%p2vsj98Nx&R<+T!@E1IC9lkTx8%SCEC7(U68upv1_|$hqWSdv6CjF)k#zxNt*l<N
z{~p<tF$LnXRT+N;<@8A0W30Q!KX8t*kPO8LGcFv{tbgb@Pu!Q6GHB{PXQE_?Ysz+u
z>E)RU>_b<tCB@CO(ac1fU}CM<DbcSQp4}?KKI?i~zxC;y<0>4Gv5isGR7b6nzUhi4
zTLXc*Bg%F^Xi#AxAdHO2LLY?LI^$qq-2fQ2?{oS;*HvJ`tU_(0d)mlmMGh_YMkA7B
zkA`nK?LF4DBzT?IjS0+&x)<Xy$ZQDrs_(Id+_Vm69OAUz^QQU>4^fMt=k&@n>H9N1
z2TF1^Q$Oy%?>?K~6dz5OR+zwc*5px^wND?2{D4@ZKYY1)yBx6{rQoNn&m=Wme`9ig
zK9Saosx^!$S3$NgM<<)mrfg_xWYDwD6^t#|#ix2NJt2^nfcB(VVGKVfK|U-hDGv?|
zCZt5bq5yM{|LZ#SO@dj~16XByL)-$CJO9j+3@v$g$2PgVx}IEmr>Ygpcg)8>@YYFW
zM!?R)PDcP|`3<;*=uJF%nMv?wfmO!#iA#BQK+gFF`|P3H_(dMR3~}$KUY!<8%CC!k
zs&N!a4X9zp_~RDO7{l(hS3aEIGk;X|w7vz@<LNTO+t4-!MpqHk6gQ(EU-LzifqlTA
zI<#~1#Uv>}BJ30#SRjc9zfFVT_5!%7+JP>>#<f3ZtvhW&?Z^UG^0!LwuPJvfQGw5u
zO9(Q=DlUyt`QPtaZM>dASSdKIUq86&s7J6Y3@<wwW#j4&GrKr!3S$Qm_`yTnCSH}f
zNTGNCXi5@93bF`P<eF784L|qraFC!h0+ugEjsTSgcPKCMMF~_Auf)Fnu?9I^^s^Ov
zyhrI;qx0AZlGqd|pl~=a2>Bt($b!-K0kks6p>z+T2eQ8K=r}oB791(GOv75AX?|?i
z?GU}WT^81y*XA1Nl~`Mg>pw>pS5!u-5I3thT}4e1WC_?h;-6z^wd8Kd!9o@fd3EHS
zl&s7c5$D2_Q1qr&{3n%8+>H9vlp#I%Y5fs=AIGIKoRMH+jK(`uuVG}>eB_18xB@^r
zn*I$K9&qgrv;f72X7$co7-v7gnbjF8{a4!;7}Ku{N5pibh4W1tzWyHW`RuE+>Ubd$
zan#s*TGz2YZ=#gK<J!+-QMl;Xs5P5UZH>}{GJPC8<lBgTE2wsGSb^ExtK~^DVl3B{
zjjoCoRGWMk9u*5q?zy?aaVFJc$F6-3K~5?+TKJ-z`f2^Ghn0;4rJ`@M-5R$MYY?%S
z%Q?n)IVKeErmBjs%DCf_XuAW{`KIgupIeL#m^LG)Lg)#9=#ljO2s2>-FrjW$$q-!p
z?-Jx@=Ro<2pjmL8eoiTb`U&mtzHYS*zI0pp6(;Y?XA+u&dUIRfKD<~PQ~Df5ZjSV8
zH6+;5$a-(uDp_JLhuER7L7cv2V7w%0Ud}DDRgY$~7DJ|5+ehN#b@t$kmmK?4TXR2G
zs;y<!#$pqMmGzmU=jce~?vxFVcU!3m@_6#*sao`oxp6*P{VvqHD@gPwyC~w~YBffK
z`Y4P*AS03n5B?%j0yAO|Fe2z=^A2bM|Kr_OH5nH7w6bwCk4loyrxDDO$n(`*o>vOt
z1aktij{%ge%$kO{hoEF<xKR6~1(b4Aol}9a?ZC}MQ#0AJ+Di?U1MXNTVu;n<mRrdh
zpLS@{Dtoli39Hf8cWu`otEo`_ilX4%L;|<WxxoqO*@^Akw!Oyi5{mx93q@VLx~k8I
zRWkJu6B`iNMWUv;3l~$?2#t+{lLDLMp=t%LfT0fo=vx8KL%?ksNaitN`7g9)_j$#;
zJa5Io=}hz|8qk^__$j18XOT1aikBslGV$0lQ`q=?RbSAok}NSS8P3UW!e{JTwxV7-
z?%Scc<VY7zFX2WLt=`wqTsLX^L#IV&WnKqsqJ|_`T8Ph(2mQ(r&eWQ_i&ex#B2=-G
ztmTWdwI8<5sc4xpA5WP}J&lHlk3`i*jenRIle1#o`C#=s#1_q?o_u^zb6gZW;sBKd
zGGqo1`Mb_fFhhm`Lzem#{J||Z-c6WHW4Kk%v*@ILBRvMCq|-9`eI)6e@>tkayx{OA
z)d|Y?GG-t!y4rhLV$oDdlQ-t#Or$eH50X(NB~PvQ`}*7_Ig0^v>+@CQrjAYB#L~Us
zj|siQ89b9@O|l!I4%-sVT3#=yf_JP)F>&G)N!M=Cq~p(>3Hd3Vku4Y}zh`ramd2LU
z4`I*dr6Aewg=<fWfa|gOI9^8F2PyK8w--HS-O14(!!TUG<l;i$Vn^v^55yt~hmNrQ
z>(Q@+*);;#mDIgE|EEuf<fw-c$84WQQ@Z3gX2zGcpGFc5enSYTJLJegCuED;W08|<
z?bAYy*fvpYR-YX|<{x!rCuzxr^bj*L_4x~Be`T0MS}Xa~*=ZjZY2LpSin5$;t&;(_
zIx-=Tio~A>$RfF)c|g$fMr%2`^T4cI$(ZW?k+`PGPA!5@W0Y;-Zs$ER<(?d)d^kUi
z7EL3J5{vRL_568ycUQyKUP+$a&zkxKBZ~-)gAJk(5FUUci}jGj6lsLn^98Wy7e$pn
zxb^P~|7{@%eCF{)4c~}JYk)9TiLBs=B$@U4^BmuY-({Xl^T8qQ6Bl2jA)6W3-p@m@
zcgyWY{6F}x-gH=ZKkK%j5SJZuh8C~q5R0Hrox9zQXam_ZTYJWjqLeCqQKWU$GLKJt
zq+*dj?taSC|1e6L!L1RoX&J1!Q*@@hD4I$nMARYBptxb3^F-t7O$<YCFir-4o%s@U
zh2Rcb>|$SqL;AUB_<oR@vzqW*x+4@tG#~>@#ZG~Z@DR>|TVaNc0){<~43z#GngKc*
z&*1bIu3DaM8Z&FJ3Hh(HrHU~*e>uF&Y-DDk7$eJuQV*<VC23Q&%f8?!58}Tu{3JO&
zMcEoL@7AbZbpL+zKG(MT^9w)`XA6;#{r46{YAWkC|A;P^ZMSmXaAM?*J55(RlQEJn
zCg>fH-^7bR5SSAlP|!noxHNZmz{th`GRBu^Umv7t$Jx<btxGY_^(DG$pL;f(m(@k5
z82Y_y^?efa_8#eXo#+|T_o#7w9u<=01Yzv9k#6%$Sun~wrY1sSM6SUu5_z-yQ<(wP
zbG&6i$Bq40;cJi&t&x$AzR24rMG%n3CpUEASa=R>4%q>;f1z~`3}zgFkr&WI1o!;;
z|Gh~=ld5AvFFL%)UJ>yWXp%`zA{Op9geQw~gsC^1{CH`*O}sP_2|48$4xqM43m*)~
z{O%u0LVoXE?&a8Tqe`f4tvf642yx?L&e5S(XU&|c`W)NA>VdmWYS@I+zQ=a0^C93|
zT_|~wbb`8Z`zBeF#)P(TArD)#bx8H={Q(QVTDeM&xV;W(#ULwVM%U6$>hOtV2mVCV
z9jXNAuGxK$*io#?OH<bE1qLFOZ%{5St5p#YiV+DLHVy?lN%upfGXS%10<h2NiGMe^
z>p%NmU5vZ#(w;v;8tH^G?Ud)pKmXAg)%A^mMLmbSnMQb7-)0!Pelq=Ku{Qaxi_S^^
zJ@J|uj(tSsSO5Fr?<zmWJicHzo(m2uBe^8o<l$~aRK+T^KN06(yl$VOFy~jNW5BI4
zwI?=ecO5*QoK9pDT4mbxwmiw|qv`YykW5<G{)EPs6+g34;4*|Dt`|Rx1zmrMeS(aU
zw@Y=Jb;ysi%CE4jlYpM)PNb<}e&u8zPk}%#izSO@Pl-kH@3uJtvu+ZwZk)T00=P5(
z{r5yQlE{a>SlGYWh1EIZ-8WwM^n64g+PP?b6mjGb{!*}eA4gX>VFr#}nD~grSTT~F
zh2lMa&Wy{)!^8mj<K+{bmTy!f*@X$#it5Gjr)|;O)hfeA`<l}TEo--2Pn?H~+!2Ir
z2WP26Ge4@Nh~U?y^ZXJg?LXF8`bqxVZIG48<~nLf*s@mfK6sjRc}-NFAgbEYXsr_w
zvj-DJ0&M_IG5}5CzyGLn3}(ewz>1r<evbeF$A`=xEsD`Tl{<6Z*YZYsr!DP6^8Qrj
z!ySjCuz5u>*@nAP$Nkke-p_x>?&S#FY&+=DEe*IOP>LvcPv{1}3MFga#$l{uIpT5W
z=ZAAT$7O(bTt||RAf7siHzU%oU3g2)1|nNOM*1K-08fsC0+AH^56Sl{3~35Lf>spJ
zf@}UuY`vptuJ-;|C1y&k23mvuOb-lIq6(Z*&6A<;q5k<g{b(mHMmD3`R`HfGtw|@_
zk5Uk^?UN_Ox9iEcxUp&MJ?Z<g2nFs8T3eNx@!!usebEl|IaoR?m(q_(P12>$;2u}m
zF{S_U&Ok`VNHY-Few353Vj~bTtr##D6FW!u%m)aF+GJa)apW~u%BWU<p55a7K>hs@
z|E}OLC*dT=Uv!O86m5hZK_A$!%z@kU@D_ZBnKKQTBf33p39O;~?+MqG>(N&!cV)e6
zH9C?$Q$NE_O64KxYaEG<n)4<i3y2SZuxajGwxiabs`K%F^Y`PY(Q`g^S>jH+`Ep0J
z{iXF09*L#!xo&qJ)wxL%;hkAtk<1slb6h`v$91fXNNSyM__n(y9(P2|(g8~lLM}mc
z#`pl*0AvJ^UiJSE4?G9M`v%~7eOc`U`rH1r=uT=LBihUjdKoN*I$hl3c`i!iySPfb
z3ONW?7O%HI&eUpA6`E-z`@$8VmttQc_}E##saRp3w3Bh+O(!9ma`VlGOmV9px{e^l
zP3dtHp63@`CHBBYmT&IF6VT?4b6ljG-mkCARqBPan!%CRzd79zYfAg?LGYO0qpf;+
zP-KDXpXC30S{GrM-vP|TNFM(OwMub({L(L;<_?ibJ0!Q{3B%en8n|Q=Ny5S6cZdF<
z@10M?d)MC7divk^l3*A2@};XY*m5eA^I`nB4fz%-z4>vkMv5PcNywv^hm+QXWsGrS
zc5@5+jQloG#dyAPqR|M!rX{Rx6uR%5#Bc=H0a`~~<&UJqfyaiIMUd@$aM@)T-3&m7
z!z=`S5L^^0w?It}#jWY)2=YfPGsC)5c8rz|YTa);Nf8s{L95a9v|?_q0Xg1waQ*!B
zTmoI&O1#-RlA(d^i2nV{qMezaQZ+?-vy#85r0<<L*N8n#im{J}S_8E|&NptWu8`Z5
z{%mRsUH3IBInIE9dJ)|a52CTzD8Z0$=tDFpvJPXL1=uX^_^82Ee_p3=X?GQwJ6Uh@
ztwZYzxM-+({iPMrv9EDIW-?e4o@TsGKvjQBGX7M4Zah;^`*qf6^BynjMKuL)FLBkX
z=yYb-M1974_C;1w_syfH1iB2F5lE&IU#ph+?t^@~?sS?>^~H^*H)oDqniZ`Sf-jzP
zH4>8BR1*j^X#JXZYh#U{;VNd8Lcm@b*e?)e>MG|JyMKJw6xd$*EW7_~@d+BF2LXhL
z`3i)Ci8A2u5CMX>VYd7LZ1E*XkOqzhAhIRD6%M-@LU}2*FUu)eWJ2%N$nO1`fsGf^
zFlj3Ftj|mi7tKEzB@^<U$q0G3Tls~GWuTTwzM8H;T;EW`PdkO9P@7#Ti-hMb6c9P5
z#a1<|l|&Yd+HZ9yi>rgoc%emU71^!P*l=<v{Cvsn%A9%E>ocxv#7}wz8sM+3vrX%!
z%qO%xw@;%rnye#*qTYX44Ui)>5rs&ryqq*QQGA!THcqJk5z{AOXQ#s9Abbb_JNIDb
z%mL=G*LcGL3Cllezj1cdQNM)hGum~d1-ZcTZBy3OCwGGvr#;IT^LWo9a?Lbnf||;T
z{Ykk>gTMTGpRt6(n2Z`dUH<HL$gKK)II%LDCS=j&^Y+VYixA!(nG49r-;5;I7+;I$
zmLtTY$~IV6+6r8h=LCq^3A{@JyF*NY1wZGBJTZ<KhKSblOm0kA_R&w9As|i{zX|Yy
z7&Z#jfdVRvBKy#;=6eJqp9jb@(A%JY+rs_`x-Ezw7qrl&LYb3%p#?3aMFu}sNC@9d
zrwrjYQ5$YsY@uaF`j8PWXfSf=^)3ao&IXp1I4H926=5C_q|}o+X1cRxBK5H;9P{sW
z70JvLoa5$&gtv(^3>>WHtBGtDJifDxep=B13M?o)cm@a`l5`-9p!qz2iJZZ}7634s
zq95qMY5PZn;t8$=F8}U3jW4PL!&g<Ia%%oE?+)Q&eN8pI&+iI}6-2U%uARd`=0v(L
zjvLgW<Y>C&mJKO|G^00Kb)Bove-RNRJJ}RPxJeskSG!cr?iymBzDldV=m%P04^s2O
z+aCwxEgjZ~Ro1(Kp+CV&{9a{yHG3c`6a-Mm$biwqX?q33TLkc08Axn_)~7!o1CI@P
zsYJ3Jea`pf!=M2p=dLZYL-bowEqXz*dyheuIVvhO74B6(j`s=*gEFk<z$OL|xCrAL
zh{XHI^IMvvr!g>wFNg6ZWj6}@w8|?GXJNk4pD53^^}20y)EvL~E!rVS!PyN&j>E>r
z1_v7Od1$BUynzw@1c(f%W;21-fWN6{t<$5G`d67H=&6Wvkg*;m&!&J=HB6lClQO$f
zC3PX699tBf>KwNHY3XD_xA`%&kPzl!czU#^sfDR#mv9_Adh-7fbsmmXzI_-!$KHEq
z@3PJ@viIhg+1WdUBr>y;y|Y3_c8F}pOjab>GkX)VBJY#m={^2}kNe!uJ-+w#y)G&_
z;r4W)oX}uCYK|%GXB7PBm)$HoDRDPqyhm^rR!ndLh!zMXD8qqa;SF`bV154#%0Za_
zS6wdwRNk)VHh}%g-*NJOcPBz)Mi5mmwqkTW5kf)psYPqfZB|(L=lz7;&{A-_thc?O
zIt(Rka>BPnmaU)7`+U@nKWtiKRl?FHY|?=3gdt1__Qcz&xO*=2U_58KhL7TSN+)A}
zFpD17BgM3)?|>`cHxG8%Doh08dtff7na~5J>ItTj8TxmwMMJ{<0N_*_r}u!p=ypec
z2VN?+;LE;O$h<rL0qkqyo&Pz$jfHHFys%6@H~2X8&)OJv?)V=3m{K~mOH<r3V|e7*
z53!CA=T$WNYZ=?g8c$4e^suEOWor@2u985}y;z9)w8|;jbKp|JEf;6vezh-LfWh_C
zsp_sC2z}jLRspT24=7?VLzqwzQw$49w+zs&JY;1A1g^JjNkP}2)Lb2+xh-EGW80_P
zX~8cuYx%O7WjZLFSSW`-O!)Dqbi7MPC9ccvL*ublmf<WKyXX5OADQB|-yB3Hw$B-G
zgfdefJow6%voOl{Xk|)A1aK{kUbP`imAdqmAb}UyVr~+FSffI|F`1I^1D5<CynpeA
zow!J>6#(n^=m7XOScc3VC9c}ql(*|c9rIi&b5vGD+!Cw$Z}MFXjMz?mo{}jO@7$Cw
zACHaZIhXL|*U~q2xxyqpi^{kpfMM9<<aD1qdv9%(%Sw~>9cnz)2c}NRICnhO3&1h5
z^^f=Wnjv>B->{kcCV(KNKA>1_W(eT&6B84H*tZFhP^$pcL*cgi+s_f`Px`23l`6;=
z6Zogdm~T9=+L7YXpQ9^V-hPuJ@#-e7Nv~7t2daw-$3;JiiY16%5pD@!ZGL>N-j#}9
zf^)pN2G11pWJ-EBy|uVXl{}?$%rlry#VeLWP<{g+O>-o}HWz?^yyK2&<*~4aU@=%d
zK?vcAEGd#`4Im0IC^5f1kHZ_5m(HD2pKo<doTrZWEV9~Q-|N@!*SkacCR0lO$2baq
zi3eYRaC`h<9P!W0?O$4&Y??G3Av4;GguWk5`gu#D^DS<|;JL;-+9ZemZQ<&gb4@jx
zD-_v!e(yKmY%+++ICg^2);W2wk3&fTk%`JsBqL%%Q6iDn0VMvmgx|NCR(Qh-F1>po
zZkJ#ZW7d=&{rV!2Nne8;zBlMkh3YXC>Z!qsFLrXoccFI?dF{(@x(N8G8VH}Qv-3Ii
zkGrZ?6}cHTDyY=m&rdg^-V-A^yLq4R_{(6<<f#Zff%-ALCee|2+8mSs(zidtDpJ7e
zfyt7gsUVj5P8uZB2Ea6*X<d7JkB2wZH=XHpU#?2HlD(TffI(O+ew^}4$>lFSa0=6M
z*EsF@+_zMgG2TE{h2MdfNNl?|zCZq|!=KZU4L+BYz(g3kl(7><a<<VHZf!l+RO?c}
zq|>t>TA-JwaoGyV13hr0Sl;W2REg|_pfVwTvtW88%q9RcnPZa<C=zeG+{Ov-in6r~
z3>_A+wp8uv%j*tX6Q5|rcl~msT<ZO~VRD}+ha?GG(L(p;QYrO&QLvL4rP&`$+V^<x
zHq6Ps6i@H}AvrRY4A;n?YdQfH@aSkAyvSF{Q&Vew>kcB6pg1r9qSvrq5%d2uZINY0
zvTOk?6-h6#0HNmJwJGfcOopm|cjNI|4#f4k$3kPjmsC-I_1<Znxcf<q%Vd4#AD>Dh
zO22f$FzSV4H%cM33#)<$YNi~!ChKp@&{!Nwd(>xjPRX%XJl3~x<HQCI4)WRZp3byB
zBLe)iDYo)JL6I>kBm$s+B35=J$~J&9V^rCQFkm7+$mRa_R>zr<`=GZ(IEBUvhE^mi
zJDeFL=fQu_r#Nzl$c%1pr~EZbi_ZkJ!`c$}2i0#MPl-l{;?cW&ZzQH(w1E}`r?<yQ
zeiliFYrULn%3dhY*QPm0&KJp3nrR&Z0>bMk_F}bFdcstRNSP3|>CU@IpdA3nK=MxO
zt;!c@j*=SNBTib^OOo-#V9Vj(H5a0{Jr8>HQiMO(cU!!fql_K4-J7=TsC@nI74$RO
zdjbk8Ip&bJ+^anw@z(NN*Y(KTa*jLsIBuqNnf`7hykdzS1uabk(Kx~W+eiH!p#F}B
z?K(uHU{W+NG4VeoD-V)q7vMP%636~e<twblznXK(@Vlvo@c4D|tf;fscxEm`(PUf;
zHV-Ae0PFmQtXRWDL9uneE8!<+bG$IiBWlogG7CpuTcyzlyBFFD`HIE|)+9&cZQ(*f
zb4^2hHrnlAzJnJ9WO;IGt(Zh0QJlq62^yJ>z94kKp$c&ql!YRJ_5h&6@N|UiSXiwN
zC)b$g5c`Q&oyPlAg;ZH4Iy@O|F593mjjn4jN_>#X1SNrs_VWqbGFrILy*trLMlz56
zX4UzsvNr{Py5(4!74`aF_p~avTj}TmsVUCqXT{imel;`QL;saPZy*C&b`C5whbe@q
zMD`K!|9j&F3n78_0U%lIGXh|JzSa5$S#l?fbdil}VB0I_(_f0Trp-S4Mho1@L1-uG
ziST|6Et}kr9nWG@;@NdIUM&Xsysk~I<l7-y;x02V)zZd$oSv;}v!s}_WW~pyxkZr*
zOd^bx?H0dos-xf!<UgW7;DXHIu{WKlP)1T%<p1NOM36)W01@OWoe@C<v>l}4SP9eF
zg_F`4y2NmQcM^P!#cDKThPQ6n?(be+3nhA%ZD2)@&;B?+?2Wy_$fb5);TY|`we`>s
z3ik$-WM^O7y71(jcLHg?Q-)gjgIQJU;-!6OaNhWD!FWzThh@M@L=Qi@k)i-EUjnGa
zh|@^01d`|wAhIQWbqLI&+tufztdEwVyTzQddnAoUP|9}+H4Ap1gQ|2-I`&??1*Nj^
zrQFow=z|q9dS(@&`WL1_vsmGSgmsECFmN8#YV#erH~o?hWeVzZdZ*+}RUYdygYoy=
zTlT98mhxnyS`(K*&Vm$6OF>~lXz0X5Ov?Z57qT))pq~KHpc<Cx?ejMv&<=X~oJ(D<
zA?O}WtSav7Cu2?XMuIDmc4yY}4>F#7*WTrMdpfAx>xOrYd*n17;~&D)Pf*cT02$AZ
z7_}2=BX=<Mj2MGSg{ERcbKchQNfb;OFs@pDUapa4c}2;5N4Vu@(kAtuIZ%)G)I7q{
zz*B%lhJ%Lw_1J(FkYGmu81BGxJVeWgI%D!+=-`3hOqy0~k6$+B9WKQS3aXn&VdvI4
z6m!K!M#gk+%P<1%$@*$x!G~ib-_O>V&Ra|T*+%PhjXwSM%GrY~7}smNFF6z(s!v~>
zlEsz-%~Ap}<Z@420%J{#*u=`a+5trh&G4_tAVy|lCbSM2`TvHiQyEEh3{cI3GpcV7
zMt_IPBWyx!;HTNT7AND2xk|dL76Q=@)8|G*Zi0&g%fW}C1f4EE<!9hK2@{N;gC9?V
z1a*3*bI-i9f7~1QXg<+CVw?Xa{>wG(Z=m?E8Od;;RiJ7>#6qmIw@;csny2T~N&o_>
ziu!;Gw3(sI%y=;|U5JB`IuhyxfQm&Kr@Xxt0KM&TXoRB&&hL4?m=isDeVnPs=9FL=
zs2!Iut=55yKKQ5q^G{pTr)odleO(4X;t_A&J_T!$3V3H4!vzjtkMGY*x;Il;QsF3+
z_4)xZK~4u&3e0D`wh*K3JCAdK1-v{@BeT^o0i;FlgJJd!0^vu2VX6FkI@dx{{Q{^A
zUS@>?xf?*TQzB|#U;cGZ-*&?Q`r^}XvK^Et*-zV^foo}=b(5ar4ZDb|#J-bDXf%Y+
z4=r$Q7O%ZTzbD$RX9^ZIOT(PP6eX&+hdkG;ln{}mjc6qCds?ByVk+9=%CKa^_p+Lu
zUvfMBP54uPJ_4a<Qm9J~RUj~WCazk5tx8x2Xb3ClUuy#R0g~?&;H#Z0fCDlffN%7x
zz3}B+;I@ga<24H8^OZHx9M5mMp&Ie5x;DkEjb{P=#W~v}Z$I1EdppHOIaN<wXi0WE
zD;^jH-LFf%BS237^V&N4$;7ea%pix5NzS}YPwUc%m7(v{;Ii*&+)V$zd_fM^?u3l(
zTM*_Cli?25R1~1YT>wG^4MNN^10>oRfM$8a1VSk0H-?tD6l#1j(e~OWaRTq9Dz=T%
z^Sxy;OvRyo76$|fne!26^q!D}O=XDZ_FGfp5lq+!`H_5>{>@x=_}T8aN>;MgR0G|Q
z=|3<MzbAuAEQ5dmSl!TuFX6tXM3WWydi4j|su|Ly7xo|&)B#)>{qHg?B&5Vpr0=!~
z673v7^PBR40<T54N0!k__LH9`gEaFRb@Fp%AIm2ETGB@jM)K&U7&tZ>f276k&TwR~
z&>JX-yy95EWc?*!Ud=caD$(<yL;&t~U#rOenSsg9_bV$3hekW9c;$$_b`;SVxYxVB
z;bKWE^DJCGoImgcDghZ#(%XtXPc|qB4fs73BAF2@nK_c|0w9Y*T{-zr$YZyiF{dk`
z8_WJ{@#&XWS!K#+PBaC-mYUWZ@q5+T>iRyv>o)E6v<?Z`ToZHnT$^uiJMn-vtXD6t
zY;gs8*!*KN*Z)qk|4kTy!X<?-c2BE~{a&->+ZZ?(E9c?rR|C<mt)q5gKr)>N;!<@M
zH-N&hu=>Jacv$}u7OjzBmjGDEO*GGcmnplgm#<xO7js5Zf0cQLca`8iB*eeOiFiBN
z3VZ2VLCbmRq#gJW+ekdOR!#VLEX;R3i~4ZBr)RUm7JR*;{Ux`W^O?v6vr?t;o(aj3
zACS@+3)qtST=M(ilSf^$<hR2LF$3K}(CfT9$ssJ*(2$BuP#8aAirFEdegjZiKQ4`K
zmsc{o>0$`ng{vDc{&>ZEeBwi@i4(ugZ-ZFbNZY&9*{WELZ;X8So~K7q@IhdSax%4@
zZin=y^?CUEmzRgHI48G~iZ!Qn@O6al#pa}g`S8!C^aB8C$d|qX@kII?F-B|nuq`HS
zHHiOVUfpjsK)!+())D#drV#uHNp%HK)eTZ9BZ9mpRkT6T7&_lI^WUEsDq;+9LeVdX
zO<rsF>W<ZY*Q;Yt7k<Im1O9n6tw&vsfv5kOtcD`5iPpE&cmD|;c{til#X^mu^YqMw
zZ#i0<E}@l1gfOq$kmKAcM-xH(RMjjsc$XDKppsYj?2m#>5YSu@G{l0KSC5fQ*8tN%
zFxE7p*>k!EWKsTNOZBc*!9$jv?{4OTUHk^B!j${J-RJ5vb~5E+cApXP*~v1H4z0+4
z2*Hp4l#vTAR7$RvjqCP*-O2XhA%)`Sn>Uzk(_7voCu!H=S~oU)nVnHmkNQ!Y-bYOs
zNpUC8OoKq~1|eV5U06s#5E5cY4AFmF;3r6~KLA&-_S1lWzu+sXX8(}6vqPmg;~XFN
z&v#7a*Gc{2mMJ(I^P_GE2TK*-v2U0fcNep0XZQ_$HAWS=yw|%x_tq?_zW=OGaSB(U
zgGIsSO>xG-4as3mK)9fp4PR_*(tXhf<XO#p%kZOBj1x=HJ!WTd26rqN8dewx6!!0~
z=ZU1c0jRi5atndcx-GX9RrC_vKg8ftFx&8}+u2A-tQ1__fe4vSiEkST_}Y~YH8#kx
z;8$_JUsn89RzYJ&RF0FN@G=|kEdKtwYrHP~MBOLe(qaX0POlZ8(&Ch!IgkirSyeAO
zcz8f?(9Ff(E?$VKkN^TaQ|dhCWQJloWblTtp8hvl!OxLgAQZp}j-+7|@hi@>G<;th
zz5FAzDXFc}T}g^hwv!2&^;n{Z73~<<M(6b{e&}+9Z=hyRW?G4`biUfjFVt-t*%8EP
z$0`nUX?@7^?FZjb%<j#%cYctbHl2yRwo|~>%=Yv7@hYQXK-WQjJK$=Ty#x|{=Pdr`
zoeWwZa0CPTR}izyAISv<xUMw}@eo|wNxGKBsXQE?ci~Kf7~9J{pG@f%8Xp7)csy_<
zsoEV(Gc$SOy`({~9^5_(dz$s0hxZuD7Kr(YtgUYKjsbM^y%xi0EsAT8mtRL%tGTq5
z`h%&#wO3T}->w*5wn)Vv8SyeEFkEziq}M}6H7cMW7A64!&_C01a1fFU1>l-{B=;V%
zXl>;9=@|_e>FW6pQoZ}I`*OY2F6wBaf|lpKWjL6Ad6)C%X7dk!B3edQnn~N+*>=9B
z4>r-)Pwi{mwy|)&Zbol6+$fu`-ZyusAX6U!p5RsOV&E9Kk)5mE?fdaARgD+m2^A2i
zIIj*wjs;SIMaJOuAPSA0p-3oH07?*#433yw0j=1KG`bQEW0s>w=uEH8`1mpJTNYL8
zHE;<ZXi%cyef{M2lb??ZeOf5fr$Huj|1k@UoBNo#pzNx(g3>E=xdN*l6RswF!k0sR
zz(#VybR7<RVZ)c&J;5)^LS87wM$%4Xi<#d6x&xS&v4vvcVPW;efY2a_$@LP+g$8gP
zi^a?R|5GGI)ljaD0zD{nvSeNQ{bjm~pYrobl&QSrgvIWa+QF&c5sT&rqwG2o2MXcm
zeJ^TXgj3flvO%TV{9KOk95_uU$S$syF?^*I+K80)T2<O&;P>A&p0D*7GIy<awO_Jg
z=H-Fdi=D;c?*M(53@lRN|5Ga(Nretj701$YAT~sxvHvsS$|u(kZ{WW>EAFG4N#soX
zf*iL5-R!Pkt5?id{t$*~F{cDvYjpqe2u!r>mNcV(a8=n(P$E~h@cCYG!s2rWND`E(
z!FV6gDh|Z9xaO+>ON7O~bm`!^0dUFWZ#QJc=mrv^<($RSAE@-e`amij|Bu*<M}lDh
zVBKis+PBYxq~nqwekzVFVW*HXqY{l9FP`E`bzF`Hlkq(srNmP;;@FIzey+)Dx*ovN
zr8o55^J;{Ed4?`i;v((I_wLZQ7NMYXA4b_kN-_Kze>qfLKdWa-%&SZ-t`|Fi1@JKJ
zOnNQSAf;>UTPOM!I2ng^d7P6+Y(|C%_#jneuq+YnO`S<dI!u7h==X9q@F)R@;_OcE
z*`hpJGyb^08bgeKUny1k)$vK{4}uKol_-U4D&Ei0jwOO546b!C-M(YTFAhT&FsNTI
zylo4N_?X-v%DTNb>g7G%XL)J9e1$!3u#ht^tP`0W1DJ;_Fgpd4<h&Vbk|(dOt~09E
zKa#P&d?jjqiL1nY5{cI_)Dsl;1R>W6PDA2h0eH=$)m{H}DcEBu3|~F;+9r#>lHu;{
zkEHed)_ZXm>*bUJTfx-MSF0nL4G*)2CiYTasUHn!eF@sg#H>3EoGA;Sg2d%XQ|)ZF
zfxv3MUCq6L?;r3*`G1?&JHQ6Q+qIOKB?4Mp)1rVbu_(N=CweG~-Y$H<xycrRn0bZW
zD|GeR-r6P_#y*%X7|cXOhKg9&GLf9v0Ow$wvjxI|=S)*wP1%A`Tbg0+=rx6f0Y%hh
z6?OFnYf{S4e4FK<5Z<oBteNRdooKa%vzqm}oA}t>J=B9F)wyXemh3=6dJ3cbC3=lR
z`4>^xVAz~lhZE_mz3;|UQMnO&@L*l`5(0YAoSn8ZbPSLCG!3tH6(bpju2I}uTkl8K
zBf|_O1)<U+ZcgAFBqR<1nXYNp4!m3dwl+6UVno@VO`nO@pO&9ZZkBD#3dp)^m8SQx
z_g1!iWAl;d^;c>7E&UYxw6ydIJPFGp<NGGWw!rOJn>*76WwJ|7S}uC+d72E=6{7q0
z?%wPgRm`#1UfW4&3|tWEc(LXQe7+q?o!1xO&zvB<;1V9e&@NKqpbiBEm49(-oo|tF
zxB#3(1((cipTXbe)QBUtsHc9hby%}u?@|0I)PH9zpp^eM;o=(peM9t_<BQ3lx)9Vt
z@>D3kL>$fa>r)e#<1K}YCxgL!ObWWFLEZsBP}1m1nNuTtl@lYUZCq!A2Ga-E`pe_s
z^62i_yfs2ztu{;AXCRcF-r7b1PgsvU6JWH1h7h6z7a`H`05mz_Z>;~$+KG`q+;WSY
z;TpPv5_F=3&2G4NcZ%M>E7Vf+o4@1|6dDXa8dsq($ZI2Vw%|3JyMb|&9q7Wn3H0&m
zFPI6-Lhqt|EJ(2nTFqH39gRHHb)9Yc1>{w<tH$RTqd$i6t#X~aoKvp^f%-cu_IJ`D
zXhABG3Rtjz+i58h3?BdslcoRxZ~K3bAC+e<sxQBje);M2f-Q7N(#w6(OUj^+uV8>~
zY)|Wk&E;jH0-G+IX?;?N1(l%)5#yV@#Wa@kckvZfQ#QsCv75DTMNfzFyq|@>6!6*0
zgHpvkOWSJ-2RyZKH;l&C91Tpm7LwX|M}nDGLFlZTJmk_kR5CKm{4B&EMCBP=iDV-H
z*x*!^=YUn@-^aUUy|1koAKpI=swOkC;4|28JyN(Zle}xj5V78l*(ylUqex0PU!r=4
z(ZB6eF15q!>$;G9k39ZKi)?}ssnyuhpmVvz)jQgTMP7UIH_G?+a~`9p7VYTf6Dm?f
zoW<r$gAyZyzq`&3`B*yz?>1M?TnIsLVz`CVuug0-Cg;%Q2;S8;C)F?$p?N?-#Eevk
z+E8aT5||JG_WptQ9UONn5B5=TRV3M})O&(c`^XcU{;Ms^Y@WaPFB)bW%aU5@J?U?q
zyj3+pP?7-jY}9r3bTf3J**;@@)A|*EUAaj+V+{5bIERjPZoI#b(L4Ed0ok(apGq)V
zC5QSC->n7OAJ+eFJ<rT@cC+!4QjPJvgUhRqLB)!3x{IzL`mVOU@+UKGm<$Oq3)8>m
z<ls6aDG@;G`HF@JF|_L{uZKK7;mARc?7OWZ*m<cpmxOAW*>q$}1KQV*g%Zfb>$-VK
zGHZO3MJnudO?1VLK1BC>+CU!>v!TQL-#CK@<1qTm3X^MeXCGG*i9D7TZ9l5MDpJ{P
zpvTeJXc!~2mS~%;|BVjx5P7~?^jd($_|)Rw=RKV^u*LLsL03FludPqg=f~=^0zB*>
zWC+=mY$Fnw7yy3Qwk>`O+_uq|>A4ZH6HHQPPM4HkaC2eCC3`|A_tL!^svUljlzoM}
zhbwRq|1wc+XxNvA_J{T3tGz?!M$@QR>|E6O$wg($x~lR6i%3z-moBH>Ubsf~tX=l-
zMb#z8n>fdIhk7jqYYEne^(P9AnR)y{4xXQsJq>r8#HEY`tferpuFy5X5w$f>ib$zI
zmLw2B>Gf}=Y()Z-0Kj}*4Wo#h!gYnd2Nd)zZ}EISU|I}RxO7j(Wc1h_3mY*O&OG`k
zGfJU#AzUa&^t#ip_bYab*%j)YKhr+4Izw_F!o+;rVmjxU_P#&8BmuLqbs9xYIhusF
zxl2}O?9~ZT#jAMjwM+G~m!SC0&(G^9kZ-wH+Z#zUNMVfoqbqW<*M4MFWFd<r<tIXc
zkcIxY?{u~!K}iA7<kHW5x2=Y48($3{uA)p&(bSmSEj_oA&`Me;J;0rC`E>J=d(hcS
z8C=jnV`69S)>zGR<<Dbn)FvJ2@lEA>(1Fpw8U<@kZ#r%R{;~XMT(+9DhgwY8T(owa
zp96;y^SD)uo8jfFGE_fw@5gI}1|3a2Xw?tQLR!w)8<UedfYjqAX1pO8tVqxhG2+V#
z?nXkA0g!j``pa&0TmYo*o?I))Ydcc8U>2oF>QTDd>4Ont2I<~jn!-f(SdQYp*8VS3
zU8C#GDX-q?gtN?@_t0aniYInzcd^{-brT)E|6<$Pomxy9Q<U06l<jC*xYeP4Fw9z9
z^<n)1jXnQGqm3}&B4+5-P?{QzhC|X_Oj<*g9D9~mw<He*@~vXf@Km7xN_d}<nB;%Q
zGW%)Jts`Xn%gcy@uldUI?n9i<PO(CxpM6l5YZTvq<<+H?Go%_eXtkVk@488_>~iY4
zd~4_?2v36l!sh<>RDRkaC%8vLaLP4H_vNvUPmh-l$Hn_1TYu@Lo2|V=JF4jG^}WXT
zvN3QlbnjEsQ}P%{^HlY-yCE${%ACpdRe%lH2Phd9tOwSEr;Vt|f(Mb56aZy8xoE_#
z=^L3n#?*}I!%5oZvGfWOUby5}eq7syT<zwK;EptR?lpVbYFgB)#7tX#FTr^WLki-+
z-XD}%{@USShzE(h{Rfm;lq!s>i-9b-Dp@F4NR27@y1rv-qXCEt5KWt{-(ri*%yR;@
zyRXUj8K`tEEO(A$!+*uMqHBTg;VKx{g250dF$oH72V!ClBQYrf%sQBc2jHFlcllpe
z=o-*CZ<>6B%R8eO)R16NQjxgRocNX@Z->mU5C?@v6+`vg)H^zI-9DUt{cSz2JE$HK
zlrpq0(MaC-2)pH~PI#vVK8zs1@2M$v*BrA+SCvk-zJ^h;R@{hkG*sGJvqs&i-zWlb
zT{RwfhRZ<=VNFcyMuHhqXdZLuDg;Wk)%m|5L^0NY77av%j=0o(L-JAqyhHQG!iY8X
z;_EI%JgE;&-DJJHpRTBks25imBcUW_E@Gcc_+p_x5>2|m$unhKAxlIt-i%P9I^@Vc
zf@o6V+Q%+)?SxPJ_s_B4ex~LpxqfED(Mo*yv-<T^FZII)k5I0OwQ}arMkB*9U1w*!
z^PPe{$j!P^F@lXyaRb;wW)vcW&i&D4!s}}rjL1>Y`uK@iSXihK2Y1;CBrr7qTq_(R
z3Qh#JE7EaGPo^>fxjvucsDZ^&YwMqlwalkt9nhEid>=nrUND0Cs~6Uz^V)uF+fImm
z9cZ~r!6uK5KMrRge<m{$d}ZDCg_B0Zv;zy2ByYbpfBI7Ou8rHJBw5_sjRtE^YrzLu
z_2+oN;J#3M_^e22)iAm1hp6SrlaQ8XHW<2=?P+bBvp$q6>?tEZ3Mm=lpaPyj!qNb+
zeSCg$2w01??D>-nf!8T5aHVb?<GW;9l8^TXRQ-QEn#`2k#>13?`?P<#DQEB2e4Y#9
zTuKVCVbSzZ6Hi7<LR(+fw;x_%>n<Vu))!}W_WaS;;a4uAeYI2ygFzy1au)X!BU=qz
zXQPsJLK$MCyym8L;>bTkn(~dH#VV1|nhw1sxU+bnI0_XOi2xA`DHTGM*g21cy#v6`
zYr60vVC{Y^pZ~_rH%KIZ8xPhB`F!H%fl}MTZN*!>`?Aw^u3pIT38Y`Q=OQKcoM4LC
zGE#GeXO1Qk#=3Jv?-r|<^f{3{8-F)M<%6mS=U#x|t6HK5T2_`Vg_qhnbKepp!`WSD
z2k4odg7m*U?oGu`G+M!B!^Qj*m|6a$phNGaQC^+X3lJ@u4itqHsH-C8?GGd@Eda|y
zR|`U1kZ|K<e{oA1x=;s7n;U2FCR$UyWjGP(wEf}DX!fk2j%^l8YDLNC@o5Z!3r9Uy
zQS}CX7D0(iPbs72iqG(AwC1F6&bId_)6K!iFw&=AMDF`kcE<Va)r?ZbNwM#>mVIC^
zp~=plGt+h?uZJ|9R|oEev|JxLCWoEp)kVk)FoI$_u=;}jS!&9zAvx&)&Njk#)&DMX
z+IfNO3n4<?usObW(c+1l;n<!$OGfL$MapvyCAHO%2NB&5D@}-!AsZR3=bQ^(nB1Q7
ztZk3ZM10`s-?y{5WaCCd9J!yJB&vM37A3T^!>))z{j}y!tHf+w)Z%(@0YseCr+ee-
zxuHLi;A2R`VK2n!$4bs0&#N>1#0UlTV4;Qe{oinR3&}|jaE|RRh9jB^Ej>*OFYknj
z1rNJx2EYh1cIe2z(kesR-;Xm&&<L>@PRQ_O;l7Y$PpVrxrkx{@T#o#+O_;I&HB_3_
z(o~e=SzC2l^`F5RO63)ZJ5e2@&nKvx-+Eg(!w)5vUD+1bT_J$ep8bqM4@WUjf-fcw
zhierxTP68pT3+2`AtRt&Km&#0F(I~r&RrxY1Hg$F<u`L%Ndt1!1NCI%#mCYJay2$|
zA1RF-z?I&ilX@_NkFK!@8I&%!vbc;bhAi~=&w3Bew-ZWgIxRU0#T<kB&*eAxd`3~`
z_hijA9#=?}d-=|xwNBaZ!9hAPaFQLW;ngbxtIb55bMyqd-$9_g*ouS7X%G_@;G2Us
z^iLgkh~#1fxGFl^LlAeR^Ly7~7=P>>D#ux|Xm8f`tZ8M?#uivvS`VCJ@a|E+&}g1{
zL6T0Uox)bQv?7E1$_CyyL68Qxsb|`x=`5A12Gyp{2!B<UJx1~KEg(5+mJB!Dv*AnU
zRO0usB42Bk-m*;3k#X+;-rm@2+tXQlWJsX=V2F&>e;<nM2@;G60IOfVU_qp&Nq!BT
zfjq5tm$1fNh`s;OY4-U_TvtDJ_*3rDcLWJ<mkb{r8rV%$;U_V8Qo0(@WjyjpVen2s
z7y4;K4yRg}*!Q@r&1m%Uv7ghuxsh;(rgZf=1=rbkVd;ZEoRVVy$b@^C$8)v*detT4
zBnm=3kEm^~B#V(jWdbu35B;ldpCjRz0l3-8_@vt^3{WHbIFgJaZia0nGVk|$@@__E
zRp|PC$5Y-<&n47rUwoT$4{j7&ma>}ordL~t^1IT0|H6c@Zd>&rg@=HLWV(NiZv+>M
zc*nyuI~}KylWW+|=MBkmvSc_D@OYAzpvm919Xjv#Wiuk`3NL|%paU%VY?VKb3~xvl
z!~z9C{u{f_-$*>bnE}+S!90rS6Y$%(Pyb|161V&ys@eE^gwId1aN;7AXL;z7Bl$1i
ztqmWD-wlp_sMuZ8spG~~`>RtzJS2IbLgZ1c$Io-6*;PULQ+FGE3w{X}Qln+ZC9CZy
z6nnqWur{1{E4^HAUT1f@9%sr{*Qk`LXqr~qJP?%4T$VWzib}*RpwbtExLyR`An{lM
zyrre?`?scG!0XPlWRwT=B@VV(Spo%JL_(A)ITdh$)%^EugwgNT>U;}YS4W&xQfEB-
zW48^hF0T0R^*c-)rzA>{Mi1wG`9zX;N6^;yeHltXw@N>?nVG7R><IN<zNLEquT!!w
z;21bjW6Ac~Nb~zB&Z@BO*4K<6Pb`Wpt3*aJ6>A~^782rr7a&xu|7%9s073#|5yji1
z<=^5)Kw#Fm|Ie}UbAIdJ1O?bB0z(5**;eUt_v%I_7|X3!GqK=*G*jFttS7{U!Y`WV
zSo}fK7Et%2P3jFYRxL>{M*Boz7(2v?#rbMpEbJL3q(tnL+!YAh<!L)5_jC4G&#;Z>
zRr`Is`GfcLG@=lL?JI~u(Fdb+oRJv<iwwd-|9_r1CX$l<?>L&e{Y~rsD``<@j8mYQ
za}!q=xbP%;s}}mF^M@+fj#p)C=VikFu%2mQ5pf{Ro3=o)ZAD-G9USW<PmGj?)a>Ec
zIdU>h8U(t92iXm_9CMoZ+#=(_cCiMomUL$JK6|M!^^xgQve$rps|f1c`<j*p!1DO2
zsr=Ik2y>h=LFI`KF(WN3oP-}7gqVpqNJI_*u@zO|5csM8DoWOtE-V^H_DRe`6Mfm}
zpV;>>T8~U=fCtP7KHOwH5i^h$qO)^pC6AdDoe)zmsU<6&xwi~;#(A}uGe;BLD|ba>
z-}t+R7*y8mSkzqpo!~disa}pK^+7AinN?f3@?XJS_L))z{cbb6N4r+pPt*?3_D>)5
z)9)Ri4gnSw6};a62!jcbgq#2&*=4pd;)!FDBa){xT~=s@ms_5RLRrdW>?ZUz>nNFv
zexw$hP<-kIMUVyQ8|8?jU$p`U%83w^s<bjqx?dwDjD13bh80%Aov*qQ!b$ZLj5$-k
z<Wz$BydO;IC*lvj$#;_GDsS44qYq9h`&lXjqGelUh+`pU1PS0N^vELCKN2L@U4Sc-
z1lRTUvGK2#!_tk|C~cRIHqW2LUR6^2gULOQ0u51|`tb$U_H;J2;!`1G+)Da$2N6gA
z!|^`cWrd;d?DmhqL{e{$n;zIEIiVaEXpN&DIkYLLkHb&N;h`QI81k`YUHbz0hk1@_
ztuGHj3PnEHT;EWMp-_dPp3eW6z!XTPdjQk)e4yj4Um_V`csr$S^N9I%@@_IpMq)6F
z(CJ+4ye%1VdZ1g63ComiZ@Gu@l$&Z<ngvg18qNwOX+gu-uMxJ7V%iaej{*||K6>{%
z6g^G2lWV1ND$MJ$GSyKPco^|OriXlu5QJjR$M_yC2n!U}Artm*jiW}gZ~-iYa7h@T
zZv9&b-^zH|y|zEQ%KMCpsR+e)dsi9|8M3K1F6xw|Q!Yl4UwysH@9FPOaX%fz^Xty1
zbu@);a59CPyQRaQimLbij3-hbx6f+%jJJ76j=uzi>-Ekxy<=Kgs1fhpe6to(jngX7
z0n#V;!G54Cz|YLAfYyOP3Z_FMaRW$2$5KJJB~d`#%34+Q+S(EAvT{bt6s%Pll&{=S
za%JY~SU;TfS<D+%u`U)BU7|6r(qHYT{-lo!dXd+M+_a(I={fP-BlRnwVu|n1Fqb<+
z;Sl+`-@valF|uLnl&mi{1}>(G^?9|W1s>&C^{cscqXR_toMKB*9|R_XLYV}Zx)HMp
zuwwZ8_t$!y2SA%D(sBeUk2V4`UiE1;te5`7g7axa0(B)hZ+rz}lS_&ujkxu>KSVd>
zGs{~DW7on?@=q-11;@scYPt8x7qQ&mm2qBQ{(1ds4VQw|GB&eq-~pqi@}s?+Evh(y
ziM_^#fEYNhApYEiI(hG5gGBY?UKu-~S7KkHaMjrh0sTRY3SQ(t=Swgfl8qN&lRpS>
z1D3JBRndTt`D;!$(t3r8?;eHKBzQUy%pPT<2E!jgB}L-ikE33CD%`<{lAin4!l*S(
zxe%lJKGS&phfB)q_cM$e#+Zh?U~`g6&2p2MxFL+2DeDKSd#_8WVjB(ini&^>@ZNj0
zbHB7V$%i4;F^f6Js~BIflC$>m>K^*TKrf+CC>RZds4sPLA`$rjL_f7BZxLmifR6<-
z&(u?#V+n+Ey%wY|9R7Go1%D|0sdSQ~+W$0zqmd$yh>i9pqJja#Odd;VHeu6HZpxzY
zTZ!z`AzWW}7S$j1KeLs7P+N$Lk>}o_PTRJLacE$yv*vWps^8Kz%FF|EdV9qgz&t~7
zq3Y<5Y%xo((6!R+YpYkoWFm=BP{I6Eh}u#xHxd$P%K%w^G2}*+Z361=b)E+O-b`BQ
z?Ql4G{+zoqWarch_ATO7#T1tqs$&aEmI-Z`@Yj=fAKxfCrJ}~65$nC4A|nLFa4?v(
z7TYGu+TGo%%Qxp8h^4O;!ol6n_{LGss%OoXx$W4*><<`$uuFT>>XF6-6yq+eh4epN
z@~Z66%ZhduA7hq5!6GIh1u>FEAf_S&iTU@)LX_B!b{j4X?EW7nl;ZD|W0%0!Du1`g
zOFk^XPwAF%d#v@4$QxtVv~hdrsYi~(_^8ks?^aq`YVPSVHAru2Utq0*2TLic^zt%v
zRVWib&fQ9Q;nRM<zD_{H&b1In!$_Dle`Z$w5eiTRHOa_*QY5N~Zcn>opwCSlkU&LS
zO%AQ48D9Jvf&#JxLs3xiIuNU!AQF@x0Cg7o7=bth1hng57zvFiJM*|S8W!<fUhV1<
z#=T*-^1zR6#lqZwnpK`>>UZri`!S2=F_>Kgb3MFJ&Ie*CB$oB*n%Kw1?)xhnnW&N~
zQr<*w|KuOj&6t*V$8+Y|MkC(<Zyk|umYsr*o_+aF4u1R48}}v}&AbrPBt1C;u$kA>
zgLTNjWMV*APY_3yPGKaa06-~x$A{?lbr(1U;PLU9hDDOG4^>t;{28+xHg5kCqtr%*
z4kMOL{lsHR<LOLi*Rl}wJ1bUyj&3*S$GoBzl|!!&nC(@5j&b%8Q3%7ZodU}@AXu2>
zunka0(*vDddpW{BI^?0vP!IUqLX4;m5L-WRDfa@wU_mlrVIZCV#x7VKNhJtSP0e5q
z-)dXQ>?ZHVbiH?(KZ@<pn<st=uktIW#52kEpgc=L2{N~REK4#->xFy&O$(KNLbI+#
zNMnb^mEyE97JHQ_i#bH})47Z0qNsemudzZa{DqaVw>R(8PgnzM3{CK;o~pxXaI8NF
z=RscGS&T{~mJF;TrcVYj?WB=JLIBa=dsFAz)&rmo=)Iw>&$5EgkJ6m6q72jd6c?+f
z&ALt@kA-jE9Vc>05#DS)_+y_p&cgQEH$+AqtDv}q{(jeIp?J!LnLbrq?Lgh%oLN$S
zR_!E5!~x-V*ML!?P7@Uckry|!=(ZECVy5JQn0lPW74y&(uwpuZuz18n6<8k0bRS^)
zBcx*nWUv1%x_$K1cMaZ!jCxrIR{v3Kc}s$x;TIgR)RbkTsau9l$#m!54}LP>3Pr5=
zUP5(flXZYermt$*lNhhOm0mDE$yoZvD-T6u;gPz=)RB{6q-+b8Z73>b4V5?e*%}VU
zkiDmkRi2-$4rK^fmd4MyUx{V0rp4{)-z#n5@R{5y$Pm&sNo`qcF5_tnLZRxdg`3$@
z^`KB$LZOV{|7X!EA@PL){EBp)eQ?pgrhM->z!b8tI<d^tDQjBOtVb>*04MlGoTA8|
zSF10W3Q{t@k`)sLlYf%m_605LoXsn?2{ig@8$R;hLYrhQ;JTJ8-k0pXm{j1n)7XT^
zPpbB~$Y?tgW`KpsK29}@ujJ;4Dk4svPqYf}m`&I8rjHe0yRQ=C{7u$wf<T;E>RZM9
zi*4u2I<-F^7*}?e9R(#{f5q!z#_H%$=|HnYoM(aoh1b7bQ3Uu0Afy*>Zk3FGlestO
zH~7c}-MmU-S(}0f%*lAomgC#-;!yuYDLsuk@hNlPCZZLy*NK>I<DS%fPv)?tf?tIe
zd9hjlfz@(fO`74WzO_WhPlz$$Mm-9dwfL{B`rQQs{&UWAn~}sCqfp#_oXa{X%&*lT
zI&x=mVG$KzX24*eAV$P=)kLC+0%+SW<s=Yd62E%LbG`PBIiK&D9@Y8zR3~3Hf}iKC
ztw)U!Cx?g*#F(`GvcNRxif1F&S2WFx2u7!Y1bpn_ilwz?ly1i0jY<pr__T1lyW%3e
zA;K(Y{RyA>%PD=pYBKYz9<tNW!utv*n5FDz1qd{v>VrS`4F!sd3R8jodnVLHa)|+4
z9yT+-|FcR1lzE@5NOK(`cx*DD7=2T|Qz(1|p6!0)c&2mYrc~*Y`ddTp(uNNucLgZy
z8mEUNaj__wSt={+JYJ1@=@r!6ttcF-;lW?m66)nEd9)Wiq&^Ku#Wy5l;3yU%gKLwG
z3(<2`6_>3NAkd2%A8dbpW+E^PKNAFsI52nWBgw=8GHSss4FuVlbh=o>XE7&zMT1<f
z^gL(O$K0@#gG&Fd;exN4`_It)iQi9sB)(f`lfK^#;-F07y%OKQE7<LJMoFEXDUy_5
zX;;>4Bde6&&k%&k(IC~y$G|Z4fc!rHdH(&C2dS=yVr<Lpnzopa4nZnyKA8OaK&=4v
zuUsh@u^1X7$s_<W8tLfgh@6N?bt{1v$|JGu4V=jm3p1<taK|e0QajLUP6@$&SnXa3
zs)yas_C>-f1@W{_NIc#8TSEL@j0UDjdg4FFZ^bTurt4CiF!tWO2nx>Ge#=LDGi6B0
zGnjEmlrB_}vnj?QhFMWQxC|H&v8|GE;)SWG$iRRrBw~u0A+aO@EHf>tCy1Rx4Juz9
zP5Oj;M2AV+ILirR0h^7IxpaPPGW$-Byj~K_LjMhF#CK*npO8C??opT+Y_OnrcW5G`
zil#w}@RG4({h>gdh@i(QD|l&si)gK@?N%CG!n^@Y&!^u9o{QbPhaq0xHwHqHCSPT9
zhshJ6LV;r0zdME%l1d7oYWH$$Kzx&TOR=Qzj<>vtpJ5K!>^&ssj@x_eII&Lg)+;^Z
z<-lI1rz1t!MJJpm`7AnQr}GQDQu6D_Hgm!HDsB5L$oa=02uVuR;9+sisVg_T-)>@L
z9F^;Ad$!TwYQ>{CUgJ-XTX`e7j<nAi@_>kE{EFQ-z{JN3>g#|7{S$cEBGIG)w6Kc+
zn%fpXU<+BhF|+xU3<nG4#FRZX5TS-Y&b_&LERc+T*Z|LYArLORb7w&LWI?DYT#@os
zZvyGEJkXqWurryyYgw7(TAX;z&hrZ<?$GG2{$1vj+)dqMeXKryyZ^wsU^LG!vlS3D
zx*7Z6mv!(1Ze=jE$Z*8Wazqlz07Tn=I>v!Eq`yaJ?<GM<IIQ^D`Y+z!?QNV?yXW$E
za%oAut1QCw57Fe;y~E6MPRL@c+&ZK$PI5Mbt!>|4n#%0&;631ezb585+*bOBp`X~{
zU6}gfRkN~41Fxl@(R$^=FEQa}OnbwqArMMjYxtvY{9qDBAk4D|F{NCPJhA`}AG+V*
z?UeePOV6l%P+$Gzc#S|X@BF<VroBFf`Uulq$0p7_IdI`0><o^F)Yt*<u)qw@;>*{B
zQ;P(_0S&w2^`IY5h{N^svpR%@!$1-ke(^o6c&B@9oA@zsoP@sawJXECu9Kto>Q#&!
zcMu7Rvv_Enf(on;@TKTL2;ji(NGdsiiv7MVCXn_1*VV6MCiI&bZ#*a4cd`aGhPy=x
zk2F(qrIZ4lpMGAy_7Y@lJz)wN#V6$b!+XH469~1O-wfi^H4=E=Aik8S={#Y7j(;hr
zFJPtJT*45l{iCeZx{T;?>#6H&wX)thO<wPd{tAu;i#LP0By25i)E7|C(Vbe<`CuI}
z=*1P^Gj4Lv1ghQcLb?_6kTLpKI*=h~WQ+nHnk?FXquKcs$t@3Xd!4!a0x3s-xjPfH
zX1mfMyJ1_5kr^F7KWIp+@MLTreHY8}=`Z;-Oo!{7>PIm}(QHtDf9WA7gM^f5N?)tc
zk@612s2WDnCB%c8R>#6}3e#%+bQfJfIxiCQE=RpPnKdNfPW`!U1pkGGkj+lQ6Eknz
z^+C+5Rm}19<fxgvI&B&V2?Q1v*#~1nJi-QhBN-I{MyGFd^+5goc5HV{;yz@Fk3Ci(
zSrRoZI;gETBpV4RZIe8f#^57X8nRc8u-tSVaJ5G1V(NVQ+g(jLSWP>tYq5E{J7hNk
zO^TwH!XS7Zu$gAJk1!!2C;je57@+g2xV|0mq(#k>Fh3hg<3CT)ULj0=Yg&aXsE%&L
ziovx6B8KPHDaA7ZUJoh?3JS#kp5OeCoQeSFJKXT^h_US0F>eeou`q-|P|v4!-RpVx
z5;^o~qG+Q!erbR2SuI=>RMfDhRvGQek)eLPkuSEjmN@X$Zk@ZtRe9m-RVYZL$&poV
zm<`ffA^W^PErg+IFA<$8QoDqZGKDOPy##fKH3rD(wUgj+<fc+fpjtV5^kwg&goo#O
zG86DXAQPm(ggBytUmzKk0LB5apz2%YA>faiI2YyWjUz@m=cq01&FC&yEfB)SDHG>?
zE>e`ts%LDGR0zd{HdcR3Ck1Cg+COXCjV<$%&l+Cv-eebV>WWf~i={ZXzxcIXNY2^b
zzt_z~74^_yuceYW1}>GLa<N8baM88K-+5LFUTp<|8cTS@{D}pa@Kk_uiwt7B=nO&9
zDFbxozHZjH&EUXc)%R=S4ql%_x%<a1(*fPmV^+z@@Cc<wIi1|^d>q(Yk%LBmnl;90
z&fA;mBxT@f;p`J@^7LBczi?IAM;n$GxL46Bito2x<V-Cnw9QfMHL1?Wz(u7>u2vNc
z?Yic>;2o@(^p+s-TW9gp53sN>ycnRj!UnMfMj)|N0IUybo{6`0GScyTpM+;J`GSaJ
zcJ`*9V`8~sKBr43eoe$bTq^z0wI$)JPT~C2x83`#Tw{a}5APM=2&zxE-nVA4HCHZS
z*^P9TlG}=Y+m@I!Gs>r-+Ttob0aW0_XGEHW$d@k#j@qXSF%R-Uta;Aj4P6Qfkw6?Y
zOa*Zik&Qw!sRB&VCbD~oJq(uN+45eOS5NeczVi7Wjr(;<P99j^9xp&&rP^^;H6_oM
z3eBujd~zGShi$M}j(!RgJWEj#Fl85O|2*~O1#Lo@YZwN#hm7Y+q(cJ`WzD5}r+$A!
zBr^|n(L=CFk$lI!I=$L)TgI6UIKDaI%HV^5e#0IWJQb^db1V*trUsxb7g}ciS9`a|
zeYJ-5PHN_h@BJ#3T79WkdLw;Bv`xwcZ1Jr{zEEK}Zgj-41yw}z-Ct8VQ1<(zHtX$e
z**({1&*g*dG|9=@C$2H}6Fw4oD|v7f8uN?g%)d{JJiTz8y)rf$+z4}yf3L0Rg2&Cu
zO(Lfs$P#s61wwHt!&Uf078BD0<RuJ2!H88a5lN^H5SBgeAHQ8u0P#^4tw+!U2K;?v
zVKcNdq7;KcPzauZUApKH#fL^S;S~tzOC<T9sV7`S4~m{d(u-#JK4woZNX>S7s|jJM
zFpf=XLJ$95sAqS!CF}6RK5&*&(Ri<hoGN+~kS-T&vzJi$8qSR^ly8_Cd~D)dtya+p
zY56MlJh}7;5O#FPbSMJFP`o~E#OfTJisXa=oaI0Gvj1_GkU^QmsJ&7uygIGYSqwch
z2h}RF--vqM_!2B7D7QT4z897?)R6J<hKLE|FY8i+E#XHNjv8Cg`pAcwp;APoR#B&f
z<=s=&-Pm&u-lnnoWX0kJIYDdbpnHz(hl7Bar|0GB`B0HUhe2uAz=J^R(FBGJ2suSf
z=I}0R5-B7mNCvQ4MijVZGmxAb0OvtrknFA07092cZ`P;9nc$tUYc1{?N!Dn!b$tfU
zy6QjjtMGKse4RK~XP_8O{K$hN{m$bu9hc@88Cd2yE%q;`9m!eHvKkfWs>1SaLi&>l
zVHQ!}$d}V`y+8Q5(kijM`tvUOhG;W04<u{hP5{I6QpP2UMq9SU$c#Z(4^FFX@K=z*
zgFpm`0I}<TKRWmg5>gX@w1PUT-#Xcnj>8@%2cnHga-6r#tAbU#``*;CH(2qQICRr3
zyL!j<Wq%c;%eiYEyyKqwH9zHroJtq041I8x+59ur^W>IIo`DbdmdtIrBMh%3tLn1j
za5M<-)^IgO-ErCe<7ZW(#De;(#T8cistnYoZ+r3cnKH=WW7j^mWty6dqj-nj_Cj7A
z`y7;?OcqMS%t8c0Owl|ftrkEl9GMvRUnreDM!MKd^6Pvtt?tFH74i=cxXh$N_Gy^n
z*Wa2oDEuIh<gsUu;0RrJJqlc8{!HR_)6Y|Iu2RksvhVaW1HYVC3rEe|*uAG;Pz(G!
z#Lq8GiMg}0#WionhA*sH>V6X$c{QZ|q*^~;#zz(ern|(|%3s9->^ea*D#VCoI=B$Y
zrVX%RhFo*pzMGQSoyo?%hO+$NwyNR7&w`8m@NI(mmu=<LZ6)CA)W+2)=%nrkm7(gy
z5%@U!G32~BZww3F?z=#J6h{{rT_c29@ZrkAvI8SZOBqYrH!5yR)6ct~<czZ|obUZy
z)7iF7OET}_rEq?``MtwMAZna^RkEIJ2#*O!K7{_Oqso>b;dB7Ft!pvw+ZQXKETj$^
zA5rRJQj*j8xJizmlP30ZI*Eib^W;v}pUn|_ef#gsy8>F6qeZ3k_)m=I*+d8*9#8tv
zOTi;h>IpG4Dm)h(VBh9!*!%YNn#S%=%%QU%o<-67`2tZgR{`PbICD*3A2mFvklONv
zeuHCf{}k>3h5TA&qy)Z}Fa;Qx5sav(fh&-Rx&Y$9(bh4r3I7#c2ee5gVxa}5N-W^v
zu5y+UHJRScI3CsHqBs{N&=hIP35KkQN+gGr^(UzYx%d?ZjbNUIt{qOgi?xfoi|~+M
zKJfYBJ*>>%;7U(Ba9m|TVq}&x4(0RZn|g56Hkc{zBvL-xY#tA)s-S6YJOr^|o6EdV
z1o4wX`LXb15X*OG6_V}&K<E7u{|IP&xjpc&KcqwbvK7e6mQ;?0iu%3o(>=1;WJyD^
zvSGN~o44L^1F7Rj<#^uhZG1-bBmw7SD}?CM^PyuOqw%p-?9QH#z6cN1cKW?*$CmRQ
z%qPS(rB7})nBlJ}w$sq&8XXcG?DSI)FcHD`!7L>O%x<B0AhdtCkXj^^9st#p88i)?
z`u{%iHG`R6a1hYp8ttyo+YHoNv}ScxTW02dnu8NHN#$y^ZL9<o_Y0k7HLqEr9HU)z
zwX6<?_qKf|$%BTCs`a}D_;Bfv(78Q6axQOjsOwQ5JOeCQUVE%h3dc8p+PBI7kf(vu
zs%;6f2=>A54Ps^?hN8v%v&58bKvL-gR8-Q>`~Vwgz=KyIctMTZzj&*@qKtKoll3F-
z6cZo0<#qU<ll#HDa?TL+9MbpD&%S2YCvc)GI=kg;-aNTU7)m4N9Fdl?fKkeQMxG})
z-EV64R)^BLYBubje(5z4ARr?PAx-{y0Hw~r`?(^srK*HYb9sL{Iy$*LSNF~5JlKUs
zg1pyBg4u>md|o`xi@}B~qV{rIw`~*==%?#Y`CwO>p3hWPu#O?TA>x0s))wTyU;z9J
z4qtZa08!p;13>gT?_lH$-Oq{F!W|}H?Y;a|R5Jz%FPZda`Whk)ubhp9;7=l7BCbEh
z^Ilm_(SDM$Q{6G#6C!wB@I_5|K8*X3?J-^3*OhjIk^$Q{_0L~@^>Df;*T%1$p;ugA
z++)p;UFO)>@e9~$vR-+M>v0Tuy<2_RZ~4*koZ|H%IalAz@P0`mDG1Gqlo$dfLY#X#
z;YeOXfEP<Vg!DEt7&ySz#03A6#IVv2B}*-Yp|Xd_Nv^k#4x+aCbP5;LM*BZGD8^Ep
zhq@0ww-tjAGEIrF{eV2eL-`bu3h^bx!ZD~odFWff;Qs7p<8zai>2KX9us6Rt_!XOT
z78eVq2G@cgy3XdQ7!9r;#mtGneqzCaOFxKSSBQ~pl-yX9SNHiTBM}5E1}m}y@)B`u
z>_Va%0jL>|*Zw-a|CQs3`&Q7c(7$eM!n7!VX@tu0>5S)qo%r1`ODHOA7@zS?cP>S)
z#K;*6=Qrs;cPGz9EsrxPUE)c8WD3VjwVZ)M-X6|eZS1ah71eH6eSOqe8Vki#d;L(S
zcCh~i!Mh_rD{Up_eYzIcdURk>-v|`*u_aHaZdIt(!jSO+e7MxMaWxb4RX#(=RAPpD
z@Z|r)mF-318Uwh_O~cthaqI6)2vo_4%DR_lr0IoSbDbn8mDGw^7|`#{L$chg_K1|b
z9)ntMOd`cxcU8g71`SLUc}6?Jau+XkV+bT|V?vSs`liG7om*7(C?<Z9@c|{taa30Q
zp$kx`3{xtIPu6)Djk^@}J3fIS5UBNGSL|!Sm`Krjf<QemM#RoNfFv^k$Znisg%N&*
zoSF-7@Ls)eYS{YZv{sstNJd>m=D`}Dy+Ae>G5Xap{Qk_Iyn~SuE}pU7H$soi(SG{u
z#s%wBF18Ad%}OObQb+e%X`jyUVguRgMk<FAfAs;}()=~vYoN!BvTtTB$Y5~uVBlIH
zfg02S;x((-H<|_>Z&U!0@c#=o|0C)w9GZH&IKI&_kW`S6mhKQx7%-5MkPhikI;CYG
zsdR~ylys?djz&NvBqRi+yHn!5@|*Aef_?7Yx#v00iSPM_Vlx2PSRaK=gFpXGP^U~(
zJpN#@rYbKPhCA^IVJY-t*~X<3GqT`g#}MmcjGBOz;CWGlv-PF#2jSmMcH1*;%%b`}
zp^vjD30kRrmoTxkKOYa*wLd>xFpnaz5$P->^zVLE<wNH|y&oAeY<gF!oKWI~BJ~h~
zWhEh;9`=gYz{J_kv`2%m?AgyLR%(VT4GVZ&6BC&VPfj;u(ua#+(q4n}UVY6+&8(Jk
zV<v+Gse^nNbPy>%2B4;cg*4eA)YBLOPh+5NtO8ECsd%3<cD>wp0axEA3T77RSmsN(
z9|P;V&a;iiC+T3}9Ui_s$~8%Tu^KAKCaL-*pFkMwylBMY+%Q_6vu`Lia!01b<t?pw
zj%`M@#LlN&_D`g*zHZP@$%@LSh>T!0^`?yG*Wd}7u|a@h-{xbWL_lm`L!>F!uulCp
z&c`xvmUK>m8KFr@VJkizrK!vhF$WV7k^EbOEH#Rveg;q<xS3twgr7kF^BhrWlgQ)u
z_YzmmxmfOeO}f~-r}?#Zk+Cq$!6g^o!YK~l-hrvVe>fX`q+0$nT^{#`%$4pZGRB^B
z@N`^8XLiH<$#7SL!tu)3PO?h<Hq3JccWbYdBFg&ZR>NsFFlsgYY-S-w3RrpFsf2~j
zgeAfnU->1ovR96Qo*pU>f+2{JuNM3h1!)98R$x%M-gFU?S)Se%o|o9y!jRY*JkBaK
z{hs}lx^kh4*>J_Yz^cWJE-;zLEvMCXbu|ZDY1Vs=*(0ejTH`tTzR%L!tIikBvJ;$D
zOHVOrd-tg`G^bk8+kQ6dI@x6W^7o4k%Sv&Wn%V`Xhj4pl7-OBm_j)$DNjYg1V(tks
zsOS_04wH8%W5}X0pkpZiUygkm#c2$1dQBCv{`WF1Pbth<9N(JMo;WydJN@30=_@Vv
za<tg&TkC$Fl2mD<vUV@{YXMLG>D-yU{(|99?iGnzGEvu7R?PdX1Th0I8N}_ArmEi;
zG`E8uvPSvIsk`N_TdFO}{V-!8H>kdPEzEyryTI5I`$@kW|CbUby9M_CAc&SDvy#1!
zgq}DI2Nu-Bi#)Xg=1`C(0Hj-ezSX~%`RCUAn1%QgT!cX_BHq_HIXaZX>9v`z2F;+x
zo8k1W7k8R{oPr7{19vvagJl93S*6jP^sCU)Bbc#_=$~s4$qPF9^}%&IWoF6wuXebE
zwx4TwigXcbK5UR<L;#x-j%t9ZSdnX&C}^i;8aD+eRZa}$`EM1KfxzK2Kos~f2qqta
zfFe1i7Ezq00H;!Yiz>1ZeRA5)6ilf}9d>IGqBb0H#zOA3wyq}oqgeyubm=4b9HuyR
zIqyzLBkD|E{;WYNVxfdZh%N7n-QKD1T8of!ORT%^?KbPz-|FT}I#glyb?b;|5p_Fq
z(7Ju4nMl1s^==X%IuJXsu#(W%!U5sj;v|-jp<suC*s=o$)7|9ZP!O;Orl0O#NV<vw
zH3L9b-{XxUK~L`rDhlF5uqh227J9`~L@uKXiUu|lZx6SczBF;~BVfK%<ceE>q9uuf
zIC2p&nJ;P!d?;C7J-cU@eu(#?+MT$*+nb}!hr1Wg3HI>tB)s#8GuI5gbHQ#zj$xR%
z!7(&4ya*%KT|{+Bap%GZzx*wR5EE7-MSS2+W@YvP8ZmuO5C$TGuKPa^)w+QKH3vY2
zJo<xyB-`Ip%9ZfkvmOtj4&i03*Klv5ZE5;Kx8@`#@K!X2Nl4jD1~l0y?TG6`Ywb2n
zOVBxA{Na$2_oG`{<Zj_t>j1k8VeBipP}0g@!h#&+$?DYai@R7hCbYQ@&G?n4sxSQI
z_)lGRa!8Z1o`vGiC}ID$z{aPDFZr5TS?os2K-3cf>gh2-M$iE}C`Jo_kv7PDAKAKj
z|5U1#I^E^LvAu{Po%IiU7PU6V`=0$5n^6cYckj<k1Zu;ayPtmjm|(ia(E4M#afeJH
zZ**bE%sRz8#dX6r=}W%Qiv+#xD<)p&Ok((+=V_06SRa+cRNEijzWG%3NC$mPA3M%r
zj<t(Z(r`G4NxfwI?I8&RHM~O}qaTDk=nqhMmH^%aXX#hqIK2t^B1|#@zP&Zv;jtzq
zj$WOcrqsB4@B7&G)DoKwE<x)yXgSo$Lv+0xfmLq#AeW=naMJ136bnyGY&-ophrLYv
zbo&?yhuytFOS+cJU>Z?527KoRNA?SIp0w%^v9+#;I<##^fh|85vA>vruq|xG7u9g!
zP&ft%BLA=J^#sLc1+W<&Z2q0A{LAKIp-~+5FhMyjOe$2UjcRnSBZo%OcAhWjSZ*{J
z_soy9%7Ckh=Lzd<xbUj`qd&s57gfI7G7mMgV}gr8_iA`k{s_J8O7tUoFKH@Oj?r||
zwbd-g7SYV0c6zbcp|jUEBHjF!3F}D=NU+pa+)Du#76uE#3F|<{Ag$*pFlzuzRbsCG
zCf^1OML*%C9xqYw1Qm<iRjP!P?(}<};+RV$zv1%?xC2VPCG;@uOupu5z<hwwk^t-b
zkEhrLw4cB$);eQ>U!UywUv7;xnR@;j`oNj2Q<w3T$&3z<s`~0n9{=gwJ;qy!u?DvI
zP{p&)F;u|_5TSa>=C&6d14Tzi1dhBD^3c9Qp*{a=ZqOz0zvEBVSDz-3!6#rg`bz!1
zTKP_poG})Aul*;o9&;x}_u%5amePU8nn%M!l8m9MFL;=nEj-314JRX~J5ten!ejV#
zE@eb*8`bD6Pi6=zeI~7QihP_4&3U4T!W$eOI|C_=Y~mWs#USm6ZG*$D!V2IcE2jA>
zRxYvxbp~P_V3G<%AA~eIG~EB!!CwH7F=`k=$fO|Fd#TF~>x;>aSW>@Ar_cQ`p^}yl
z9Ol<^SKVXwEa!EKhYi^Dauv;VZ@;t}*FQ3zo(k2gXSx*=e3t|JH8FM`iAnNp|BkA)
z&YD8psKGDbuUo|g6w!phK!QyjAVa}ku)kEGUEMYk*a~L~3$oh<k%BWT^_E~TQ)L(g
z0a8a^F~L|ULK}eax{xO8rX1c9I)6%9-zPBN8lunIZNALgu;#wdI;vbe@1Hw1{=TG$
zZz?1_eUaHDk*WmR+CP~x{&0<^f*T%j{#;1OURv3{RL}09PlugT;lZSj`3T98j$g3J
zxj9e3qhsMZKJsuey5VN%BDRwn2<t~?<tDXq4-AIDfn$&&JsvKK%NF3ewHg!npCpVG
zmaLJ8n&wI_W^b6t2>P-N?ya0#KgKa@LHj@C6L|~$<>=;Y3J%ua{~moNHP00^a>>2D
z`Le~lROV!BNrC-)-J)-kaFD%qO^i|>%`w>$kg1o2oNg`c)Nh9;mnQ{<1xfIN(5*8o
zod<E0dm`XH%Fur;{RAi`JAet~Kt_xd$2cZ<@ZD`uhE%wNH17+YG^xVJ$C3xXa_Qm@
zG(IwrkC1p^xBABI60_unroE$+O&Aj1s%YR>v)>z<;y7O;TkFzKg4kQ!jg!hK-s53*
zoY2sG$$uu(WlkC=aS15;G}BpNrB{H+oH8r>K0qOe2q;ERhbhv;h*41X08}Hvh~tf5
zB9QqpY50}`-kG{Mw1~IA<jGv1zilf!dK*iu=>Y#;@AP;%>wUkpFVtr=hVJ9z!E(<D
z&|2LE@}7tk_VTs=>iuLwv-}y$`zokO-Plwo9=HpB2#ok8+pxP@xq6Qu`idC%tyL~`
zWny|p26R9-hyFhvFgc3H0pJOq55z}aTa*I^2`BAxaA)|eU{f(cHADkf4R~1fFH~}A
zL&S_uzN*|?u;|I8XP)4C3hDlM+kPvESoImMfWbgmkDjiA>2t;Lu*^X1Yo4j>SlpLB
zYQ$j;lMYiOACvoj2d6|17|2@p^Wbu<ES}zRM}Rb|O17IT7{O%9%CIn)8PcdIP;8C>
zTa*03-J6lYzoTMo=IV#ny6Y|=mOA1z8me=sCAXQQ-2)Aya=D6RAxcyJQeg|+Crz1{
z+7I1KN`F;QS2-C3rLH~%%~ovvT+r8M+$fuV_4N^3P@h1;x`h_zkBN-Q^P#YabBC#{
zN?@ezPk?<d*@_7Hahakz=WUl5+8rly9BEcAM)EdNGIM?q;5rchVFpm6Fr5HQtnZh%
zZ^9A)^W~43+g;uv#4KFWv$2xhQW`T)nzORtMCYIKTjInZAM%Sp3*40N>I-wU-E{qR
zmp-v<OHvb-o3Gy{98>IPUMIydoiE9+L4U#ek#(bBSBq=^bg02$T2qc;mNxJ0Hwj>#
zjojYRRaUM8NY{>rn^Z)cl7FfoCuL0;SXo4)hdd=^q-VqlK-wN13e*_@^@itc{oTd{
zEJvZIeiiFsW$+**)GLu9cyZR}x#P-ONJxNn@`J?=fx%0i(T=h&>9G>z{0jPmEQC}f
z6|cJsDjuQR5r}iE;$Xe3uuvm1pB_xJKFGb?$zjxA)uF(pbx?RRX(^Yix6E=GW2*<6
zkzvep;fEh%mv7r&U?r?CHQ9fD-6FCiOtRWHEF~SND3LAs?b?o59IvG?qkJQMl2UU8
zN03j34gwM&Ga&}HfKvbSf=s9faRDAAN<M4v=F0|DM^z2KI$_TVSZPE*e5%PL@^+%a
z7Mq_0az}5an68ePS3RqgX}`Q1d!bk6qOD`hK)z!du}%gxY&#5B#i?3I=;y2$4sMQ0
ztb$s%WGekAJtn6Waam!15Z&9cU7YhH^F@854G1J&<psJ$f=0(c0({<Zq_y5hLAe4@
z4oYK!$i}+(SSmm5dVg1WE0VEap_Ec8JjJ{l_!2~T^#RhInsM*Zf1+!Ka+G3A7biQ1
zaJby{APV$l?tDF2s?Oq^W6OmxA?Ti3s$#cqV_hGnGzG{plNY-zR}4gXukM^=FK0ep
zZv-+COt@ZX60iB_i3LFNVIfG<<UldG0ZjNaS_l7{`sE27w39Qw=D*h+gCr?gq-@MT
zee+IP=C*eKO2JxfbnLg6+s3Y`+pn!&TvG;CpYW&2v+>ufCgj{--M!uEJ%!%UdS^4q
zEGP-*WH2(Ln~%p#bwa1`vM=qqk;F!H^L99Qz{L9gPXtJ($_qRO43*G<A#nIVOXNXu
zxdU9R+lSZS-2Xb}9+QXMdTVs_<m;P`wV0j~qhFGddUvEo$sV#xGZ&b`TqI)DzQXvI
zL)zudB_7}#vDOgd5`Dy@Ydm{zx43CcH^`8emjhltl#4Tom^?qC#;x9xb8z8&pBAZM
zAHARRp|n%)+r=)sLWGVPx`Xx4Y41v&gr6KxM+J<_>#*IPy_D+U>lnv%jK1^mNr=ZN
z-C(Z-5kFCnGYCUj8S;OT2muuTOMt&lsY>{!RU6Q9^zV67LLJeLBQ7gIOpDe%u#q5Y
zY6%j<CNGhldACVGnZi@@Y1}f{*fY5tI!*9fv5)PexHXz<%-N<Y+eT>D=h~ky5Ycb6
zK5DYzcQr=dr?=<!ulKPgBH8nQ6m0SpkdEtQmlS;r2!`@;T<({%;DE@fG3zOU<)H|4
z24E`i-)65?VHBbVfGAB)`yA<&9(_LkrrqhTw5mikcvrb~zFZGmw9io;qi&6;ic0PF
zq+@4B(Dj6;{j>&&cR|8PNOsF<OY$4%oC!toJe6-2e%_H6iRw@2`E72GcI~hV79mLK
zy$-8>(P#L)IG(P1*XI{3S_Z84e8ev%sze@M&u-Qdl8ZeL2SEgHFS{nvW8g3fFoO8_
zkdc0X7z)%A0QE`Cthmvy05)4uUEY6saah&E#GEr=DD=#)`mjJG`S!57=MepJCBv8^
z{Pynct-K%xJy6YK7+r-ynVTw6c;X&)|Gm1)I4*7ao_YLXmN%6YzwTK!Hc=nEe&-;6
z*CR8(nkL9h^aEA(Tmx%Lrsa<>E>#Z_WSyxwr;-StEMg1b#MfVBRti=#2++$zB0wF^
zNJlRvfg<$+NCjv^*MYR|-!|2yAv69lAK#@43j($`u5U;(BQ_kB2C}PkkNd{&eE7xi
zKu@Qr1}#n0#XYEKy1g_grZI5n`d}jvqKxep%ppEgFSD~Q5co?0@huS{@MOw~T*xYA
zO=t&tOcoYP5g{VH)nH`BQa~E`ZaP+tk9?-0QCpWGAcm@vmz=b^fD7$GPzMa1fftR0
z2pP$OrBSHf0P0f?cTeEo|63pF;i{5sC8KiFiuw@yFj)76)wi-4pyKg(Y(celdPW21
zdacRwR<kQfzKo51hWwwq;qbmsSHsynFT2#>MvAolB+q45A6GD{_}X?tP0@)7xMkaQ
zy}dGKq2M9xrgFKh`am(30z4+tnUTa#x}o?}O4uJPu=AeBe__n5B=6>91jBpa7#PHX
zNUtf20`&nvqZ#XCk<I#LG|$ed?IYuw?Bs@c7M`r7mroE&P@HIC(FoK0Y;)!wKqI?I
zap>a2o0Qql5-a24nC1!k6sGQqw?(U{nXI<7@({bz@OzV<qX!ZG(?hZ5ydgBXy9F~-
zzkIy6NRE>Hf>{!QF--G3G0{6aI@yXGdr{@Qhah}g%sPf(C`J%efRvv9-`5nNfWq_z
zFln2QWRV3sK!{PYG)OpQ>rKtwq<czNRyG&v50->;@&z__!&V4tPZDI{)eTAd-CylQ
z+c!<MXZQCW{~Gi2ghjX7cPfl|Dtifav2g@5av8Yn)IPIjU}}n5D6=j#rHEp4G&Otx
zv<p6(xL$hPpc1`XzI+BQBLdwfG?E?}g+}y9lcJFl|5E~xdV)gq0}!dhY5Z>L@PDgM
zA{~D5w672AiD#Rm#VE3#Cqt<ZdQSTJ3JOcnelAedEbjTDon^HWAJC2d5y9Dcx%@1E
zCs0jE-s<5qoUawk9phIt*`Mc&nKxQ@N59jI!CXG*I!qLU@7Gun^QetX=xm&(Wcm$A
zh=|_bd7PcYaZp`O3kQLhjbuodlwlo=XkcD`BIH*DR!4EZ0yymp{mB8v0$^G%A;9<X
z@)k`0+0TpX<ZF|R{Yhqpps{b_k3{&3nHfyUl^YMo6IteS)VZ+_y*03l4u{{3(Y;Jv
zw5yfWQ?AQy61E#0%wfrM-zh!5dL}RHFLh555t!fY1g{@p<eS;5A;0TmK}oWk4+y~+
z00Db!NY1VJ=DG7n!!0@%*lh@qhW2bBH<}h29T6$8ZHgC+1a8$t0s8~Me&py@Hzg8s
z5!u_MU28wtR6CyP)s~Uz5Z`Sk(^sg+ccBl3B;6zAdwLadSR%86vu^<+*9pU*Da-%!
zLt`lc3wuBfnqQIGqxnp^l`A3ix6tG<q>Vp5mrwGu<D0kV*>i4)d`1%M8diE9R)Gl}
zM=bu+bWO(V*jLBrB2-Nc)VSc#N)U}%PUkQ5M`{>7YOsiYXg4n=^32yo;lcsj)$n@b
zn^hVuOWcvrBMrCj%cXp_Y?v1H<P!;5#HD98e-=*ST?XspRf&ln6V&C5&*apTa@@Lo
zfcJ#ojI5v2kK@ZX(U~@fcKW(ZTI+Tn;nKOot67R?lmX&9RT&{eJfa*E>en-UX=>FE
zHsTw9y?q)GS+qwE2cgR@Vl(j53jq2w{W!?bP0A2O7XZ+CVBh_M9CAwj_`8qR1a>%q
zS@OF6`*#jc1rF}{m|`0TOfbF}h;yu67HdD7G89cXKKnz!hxcqJ-y8efx#3uj`>e6d
z&oO1`44kFpJY=~wBYoUeq!-w0<cWB!n;MmV)*O=wms0Tkk$&)C-SYuc#*()vJI0&h
z?+YLdh4C2J9EN-ZOaZ3@=U)$o2?`OIg#lS(STG@HH36aKC+2a~$1#Iv+dpq%HP+j(
zFuw90JrSrRlgxt8)kDyjR|SK?b(ufbtc9Fx^mbx#Wlwj^hcp~)v_i3&=+SsPeN?`a
zi{3d+r&@OjM_)U#3VZ2218Y)~G?fPChW)PO+o>Ffc2;sa{%ST`JAu$zjHDhOp`!@^
z3hp?NR;1H3M-jdT2!ryA18<u6fK?4i{A8tv=5Tty##cKL6$kGmr`u=<Ulzuux984c
zmXgJ=T48Y=xq6Le9bQ}&@wx~m8e9hGoSqE0z^4WpK8Qci!*b?%^vO*6d5b-LJr&QR
zwrLv&AxG=N38jJ2V=`($gFAmKa_MnRLs@i4fXe!wI~2rJ=mqZj0qHjbp+R~Ook%mZ
zMll8fj2k?p^?<PS-xDb55Zz1?M;blh*7u*=<?%7!Ft7EmtYJJ^lYPg`sc|YH94c0X
z>yN&_7)Z)ISth4Y8!ppLSra~}Z-2CS@!_*jj|QJfo>h1SqSNEm@q>#DG?UM=*7>zc
z;~U51kAbQ<5l$4jOlmV>1Z{u<`+fiv%q6sl|CEnNfF2D4^iRZA$`-{J4DeN{<jEr2
z<k#L`P}1n$ezc5m2H_lCh>yf=hb3DY7!RpVnu74$o;>e({soqy{5Gbp$>dn)B&O<5
zoOzEt1EyLMMP>bFw!8?rFW=s|lmxmit>Qb|ql|@5JonKjv|cy$y|=Lu-q2~;j=UXE
zUbIh&0MQbA;SUXwpfRAyBXE!b5!ew$76OpPHIoh?Qv@sZN%z$VVyVd<HKa82HsTGy
zu@vmcb6;2xlX5XVeZD<1TXyW(eq^Xhu9G@>zj!U6Kyujqf`sUBudKJh#A5SEd#NdC
zlEqsVqiNV6*8<&TMf`T8;>kA5N*^OsCj$Y(Bxnq&S0m;p<p%~6p-5|ULGgqFJcbB$
zX0Xf6Kj|^gN1Nl<3O6dUs1?q+XRhn$w7{V72!X!&Z7l#=dwt}K8>%|h-?_{~)+%W2
zwy2FMJ!4&@V?V<7vJl<!i)9_RvR<AK7}f-$%4M5%S^4c6l`^y=Xz>P{NGGHgg!#KM
z_$Lt~9Vr?t41tZbtCuL6Fn}g)pq?5z@4AxW)Ae19>d;PItXAPy1oZBN-6|Q~%TxN2
z44wrXL~NPnv$reoG&?Sa5t+j1^ixYawq5p()I84DPUbq%zkeq_+jIMav)pD~s;tzi
zcubZn>9Rsx6KONO)1G}d(|xkh+yv-G@xp+k@$!?R%ftHr6{WpVNZ|m|alLOjxc25Y
zL$@gNE(meA@T1>-Nl|?|Cai5JSOAN^k~XrplZ(x+PEhPbNiDdxJtIA%Cy^;cEgs&Q
zk<dPzZ#||@Io{vwVMrI0SuDu&;(=Y1t6+SfAA3*g+hoW_-t}A|NfNj2*65PSh7Q<Z
z2>z|WWWdD-_Gi(;_bb6~ju-n-{MWw06OB`>o_kjs)&$PL&gtBI^JK==dsk0Lca_fL
z9Ih%UvJ&gXUdyC10?pR+6lz3(J^{7Vf3F$*3iV8HfM>eBLg)g{zUd24E<7$U6M+AE
zwTxH~r3!u_P1(9U&-O@oF0GJ3#s|9*q$vTS6{W4Zla(*9$Q1n}QkW;j&`nJ@W5kNr
zZbF;!)gUaI1}@!}d7skOMp66vxSvHguZ16Kq<f+Gxlk)SOXninX-=h3nqxxkLxLHv
zQfl=vTTe<RB@dO8tPDt-wylrNq<sKt3bcN00=kFxM?}i}6w;)8#B?~sNRtgf(Z2=g
z)2ENIZ#r>WLci%B5u|*48f1k?c4wGT$8Ri?%vTE|pwx06Xhx6q;Bt!~ivR8F+S8mi
zSSlx#y)}7VhWGiIQ^f-8>$o7AX^wBu^B=YSMekl@?1FiiT_-f%S@_Qew9OyKI_!Bf
zer^V|`l5D01TKMtwz~{yIB-Z1=wEYRKro6b0-*X+7Yj!wNztOp^$QwGEqf@)5RPGt
zYEkmsiKE<7FZtQU7z-UvmKX}wRz)qNFbE*IQs&qAg|ab)3aUCk7d1t(%vE&X>wKAp
zKa=$+5Z|lH2+QJOsF~0*eb$%$#75F~s{T`G0nv;Rm=5%a*$V>^&ky2d1e^{0zc(cn
zj$(=gm{j`69)VqfkGr|%(DIB*tb<#lnjoU8?2(M^?=7(jLw!ogmZx@!Y@1KXbEW<7
z*_%Zd1-&mZmpItV6MuY``L?FDDuSvmg@=~+qvH<luVOpvYQ`AIcT<%D5$+fG6W3)D
z%Uzhz>cmA65N2OF9hy@_4+I7e>-l$YiA3Q<0XXJ)Y6Um1=x?k=#slx9@yYk1!8jg=
zF#h>Pv<Y5#$K%6BpTvt^uWE4{(jPff6+bHYVc?R;Vk&@EDXZ{vjbi}bm8;2DG#F|6
z$UO~T)B8z2nH`Pn{-)}-9^5XQ$+Ma`e~KxibVbs2k{*JH!W#o_q4Uv!NHK6=$ogn&
z42mflU^?TWt-a|r15R6;Z|+d}@4uS(t+na5-oV<=4L5uq;?Gk@5{m^`z2R#3ZaMz+
zG;`H?U|g&`iPM-r`AvQdHQNkP{L^S7M%Ia#!mK<l-*ACDS{ePOJWSUU>QG=^(@z%x
zj(1H_(Z2#t*bmI%pi!+w;T?!_H!%^=((%s?CZM2V0I2tL5}h~47Z62zx!Qz05snYm
zktRJb7~g08u}M0?&3tSef9OmlqZ58jw7I96$-B!Z%QI#q_No3;u{>wlXObt;jWf~<
zV0D}1p}E0^aJ{XMeD2NfH*U!>*jP`fAI<coAFm5}!L~=TF*){a%GohM6hI&P?M+Q|
zetI-wej;MzaUqqAB8vscrWQlvZ_3`lAZ`FgZm^UVnPv>7qr=e!_CDttt^$ETldyda
z!^B%C?2dcXSWNJ@MVlerQ^_l|0)s!iw$Fvk<nh%mv>V2<>W9L}Bp2j_g2xhY?`f*#
zhv+e{)Uauq@qaIR-l9_ks0V8o){tt%)M^{marky!k4-RP85&|j4LjgiQx2_+^oR%u
zMkoXg>EY5)oN)l>+{1MyKrZXA<*%@6zy4;o&@bzyL}gA*`{Eb>gr7{5wN^p95M~g2
z!w=HtWkzPUp(h)>HqVTRSJzI#Bhb)By%|R1IN@CIpgVR$4u|vda1d_p!qc~v0go31
z&onz;Wc#>HoAbo!+|GL&%ORhV`Aky8HSsY~w+FX;B45jTa{Qd<Ere!<pRM>?MGSKy
z1QZIvCPFr5w0=Or#sjc|9d4&UU+~{(syw_X&NbfgbM5bqB>bbY&dym@hUc6E>I$+A
zszU^Xm*`#BTx)L$9mU!(+;<ls^(HB_&u#T$El!J*oL&Xn)A)Qhar*d&Ops!CqD#h6
zbh(lI;riElqm%(3UmI-LJ&5O2_3k&o{k}4%a+kgk<J4AdYky(#D;w&ZgwWJ{ky+Uj
z#!CVYf-9?||I^(G$U)I20JJh3t3gQJOutOl&Q;)q2Iqv>5DNJ`kmn2;-y2d8X!%f`
zU=rX__gYmWx%!LiURa6N*kiSK8=eh4-c1rd3gfd5N_&F@GFe;}TiyQjHFS2=G6Hj&
zPUyjd7g}$HF7889GG-wb>S1j_r~Pt=nN5JgIZZ1qq2PoLLE8l5EA6xxD%@RiFvZ=0
zwMa5$kQ{Ko3&Ns6cEL&Iqkt0u;ECHL)4&z)@9PDChpQ)(Wark&;dU|FSwzNi>o}KI
zSfyoDkJ|ETH=C~Fc_<4$WUG2=zV&y_{fYgPhB4%7kz=2#CXLPt<JPGCQL&P=9h6c#
z;@$p%UgO^Rklf_yYevDsttEDvh-Pi@@m3x9oTcE-i0BM~iXETf0sfoFvlSMoWiCQ9
zhcvS?z@DC%UOot;=k@;uZ;Da4NdRtpJV89t8vHUho*a6%e)uC{tyAY5@J(2Aff=$O
z3)8~PT;kAlvP|n_zU_`4)Ai}4VKY%R*#GA*>dK%d;>|m4Ve%$^nWG0`qd&_b$3<vo
zBSBA-ThZ#Bs{6$74CHz<W}}*bzCzz<hbaWhZ<~N0K}|!WXsyq7@Z%%TNP3~xRtQac
zsmw}dVFr3)c~}HAgscmB7?+`F-vPAohQe0J53LdJL}qfGJUw*>=B%64v_ZX@Qi!W?
z6xLZF)o%0q?uXfhO|7OL>UwGkv0u1dbh82ye4>RkHX!{EctIw6frSOWy3_mV-)tRx
z^X>X-c?xXbG5-9(=vzd&mHHKEf3n(Y=)(ghkAz>(@Fc!%32Njz-F6p$*BL`oWu}sW
z7C7>|1EJi;4`vh~GetW4fX^t{WB~ShFd1|sqDN+V1~Fe?Dmla?$l%+`%@5jD0CDl>
zmyvqcJed1q)%}~f)<EaY?UGWu*=|}lB_7Tp3}_Cm>|9D@diHSoHgiBs<mXO0?42vC
zBBpvsq*8X>md0p*pQ$ZR@wty_yd0xmaD#)~65zyY@jOg4?PXp1InzXzbrirIGGGlU
zv%rz$+Aw7z`3`vm;{V-{)hO8a0PLjPodl!^`nZw;z2Pu^vDIB`&?Y-S*2Br&@2Sdf
z2h>h*{A5JxMKPpJou$r|S9YB<Ybr5D=?Y&87jnI97dISkxOedVi3qb;Pz5)E$MNy3
zYR6>cPGPrqT}Jpk&&$UXTA{#Ez%9YYA=zXUrCh$m-nc*qlJqo!rb*GE6A=*soyW+y
z7+jCSO9Ai*<eI<V;QiHQ>g|q8RXd`f$goz}P>UEav&%6ql4qz=aref4@otH%O)-zY
z3C-8?^_IQ#90^?%+}v6D9HL->xO^$M+tzO}`aA1HtmOkPT@%L#`~Hn=!w~P^utwuq
zQ+2u%Zu<vKBO9R&8Ig<SyOWLQYCz|`k&L%HFFhj>gFFn>j<m}r6kaNT_lMYx4=8>9
zJpk$|E>%=dFncfJ>rd)n4`CjI(qy9)liCjo84v#$WrWvzE(Vx;JzbS9H%M5T8=#TR
z8>EyCHf796OBmVdxFrf_TK@>u@74;6%X|uVo$HLv2>irD>_4HY64{sbg8$J*Lkn$K
zMu3scz7iDl*>aI}6->+sLc;-d$o<C_(28P91K5%hgI0mt^Iu6TS;_!CvKb-ip0GS_
zHvw3>=kc2##uAn)5{b1ejro&@*!_qLe}AH}=n^f3TNMJ13A{0iVSU$C0bF@{r&c&^
z1&}-Bu_?tdp;E!R_^FMea#RbV8P~)-j^Yzf@zeV<rtri#iW?=u8b>FetnW1-z$#0N
zgy$f1Fp&U6J`DMpNOhw4(g8l_Qr^*<cLxmI&a>;kc<q}QmnE2f?_27*Lx+G$p!(#L
zm7Smp)+$|v=Iiu@=n~zAv)V|d+^|srwLEK+(Te_cZGHb94M(prL>-ZMByL6ayPu{d
z%w+Sy)!s+2MhqTPLtv+sm+8b{+4f02k0Mrbao=5F=St_I5E-ukFPH%Yg8w_%zoOVO
z0JZ{ak8d~rrfH?b9}{uOr5Mezzd9gc@Fxeiyi;(?)M@aJJgZ0M2R%o&Biob4oYj+2
z=biJWg+?ixfS+IQU49H4o!~j8Gb0X84m_v5PT{AGX8HE&XPNKD#DS&5{LkCCog;Hi
z!FTqi>*_UAtG79Trnaq5jBjI1pBdmk#=E`~LoJQ~X9IfzdY9zEbT~LcVaiZsvZ=Kn
z1^WSjoigJ3b)z?X1KS%)d95IEe+IoIajN=mem+t3#rtinfT#671AF+`5_W-M1V;TC
z$Cq|-<BfY4kCsVyq^`u0(gts<<ekUle{ph*nT>ax_OFC${iGpV>b5px!Qp#mQ{Wrr
zXI+y)=O*>Ozq7&d?Qe6Q_rWT{XYS-1yDf_q7AjC5K#$#H9sfz2JFJTzf&uhjM`$1o
za}dRw3GlKED|i0qa;&iOt{xn0gT!ovRhkW=EP3)iD7+aJs4J6T{fVBCXO>@-btwA^
zv)T}iKc!FL{qw*fGvcKWQ(DAQhEFnz$iphkncv9q$&_0~XZL6&L&Ce9XnJ3ID+V>m
ztD5RJig5dO$WN9;t)BC+V^<fq$$_xb-^JK2!h3=kKz|nj{f8&@1BI6b;1yrwZQn=?
zkc+6tO<<LHXZ!WLh$r0nSm)w@@uHObb4=;ZuYp7f`bYYNrQiIV&Q#!}VYDve*;`YF
z@fAPoAQ}PF8fk<XRi6!6B+sHq-$p~8V)@8*G|k;IHM9eoEI!snsK6RNufFL$3yZmj
zjR2)8298Y55Tjw>M1+L}A-kWz6DX`~01Hiu#O7bYTB63v1@E465=ORFVif(TMnk~*
ze2}EmW7&-qw$n~~*LO!nWsP62<O5tW4ON}3uGlWiq?HfKyVFufG&w&G*6(dK(P*q;
zc`IWyO6{1+bkuNrEJU_*_|!^7<CIUZfg3hKx9;b3PJR$qhQRtUff^Aq=xLooLFE8Y
z<6$|6H+d#NSuOG)BYwv47VD)lM_F3#{)R1GJe%j%j@z-6)JK6U{-^xaXz0J;yPtda
zoo3oAhMqXRulYe1R>(H@Et5?1dPI}I1~=gFYsRz`kE_`lrIs8+(z=iqnD95&Q|SKa
zym(D^VB_mIQVfhhqk6wQvM3xdi{i-zc(mP>r;s~etCNJ(p-m1yx4fYD3)$3D!$%$H
z+{d`y7cgaRJhb4Eo?B5V<h%Nlp@e-FB-S@JHRg$iTfucVGBvTWC4Xl5pu>s|+xp|7
z(x7oY?2md_%fra?bylg67#>+qyV6z8a(Xl}I0h6a2Dm67?PvkT@)2M;&=`mQw?{O=
z=Yf^>KwIslcpgJo)K|5nwS9>dzXunXOl}VZ;T)MEW<gBG#X=rM2P8Cf>o4AQ`Q2f%
z!swY%oE#U~dZh&V^SWVAi43?F%PX~)*UKgV^&S4O#q#aN5Q9uTEl&y%Xpy|-srk4x
zF+V>)B&Y|OP6e-^fbsw!ri58XaN*w^Q-rU-q`=yUneln`$~^Wu&vP`seH|lhj)MLJ
zl@4r0r;k_#gwrW&e_R&a`6xf#p~c|0|MereZ7=U3jUOZR-Wk2|_cl#``MpU~i_3nu
z;NaU%&$pr1jd77-RQEFZri6A%8*3K@rgT<D;f@KrLKEwA1oodpts0huUGS%drPzd6
z9=SaDczvxd;onl;SH6zPPHEtEDkvPD00BKE1KN%RK>x<xTGvqzkq<nCgmO_hve@TS
zi9Ppa(R%m6^@FF(Tt>%nhUw0>qVcrZFCgS-_;24_$;j6wDT~FlSWVrjsttZhQ;N-u
zSW{}l?n&TFcK1(@T5J16*!b<JXS3?qfHOQwnQ3mHHsFb)sT`vPW`hHcr#Vl;Hzf~Q
z**TpzZ3wj1SxWHw8>VFrRxWJYpnf<;5THl|4Mh65Z4_n!fLTcUTLT#bp5pcttUkQ=
z@yjFS%i5GJg7?qL#oK1ysQoEUOK@XV_EyhIQCs*n_r?8icVIIvuZwRYF+t+g?dQtV
zhhp?u8D-W9W47fZ<KZ4(?2a+UJ{v2GaW_#axa8MV?gg2#>#;wtyNU$V5#&-<H_EP*
z`~7zCxt3mso`D<u!5Y#+CEIcc7y`z}$O~d1`{(iYQLu#oEYA;JesIH$VFZA<eD$C4
z^if4~&jitz{}h+(D!PxAFe7UjpL*_l`qD51^2FC%X^^x~iLln`z)8q$YI2%ei1==T
zW#Ma#KNSJf$76Q!tt(wz3m!d57o>cql!i+y2PrCdI2dq=?0z@H-8_!%mgHIfG|G}5
z_YV}U-m{~GaFaH+#VakjzY?o6inq(;*gbm^v5a*XBP%Q(g%dUJzmcmd$1D@CDDlkL
zAw<V6gMhFl4Z;gIr<MVsGxCuk0}Svn>amJ|$CB>eGz0P*e{1bEPOQt`=r2XZ$0WQu
z(;eI*eeFi?gC#Kfl-VRha1F~IlKX33&sT*l4}^y5oe^TVkLI)He&}+t-l;m|7S2rc
zQu|5*HZ~tv&}Q+`?r1y)7KC`dk7$<n%eKggHPyGq=X`T97DL$%2jy&)Y?&$0319#s
zT0Q;$PV6%jSusE+D@@^a6Z-t^0ubaF=evLLU{_oYRuj*3A>~s!W-6sFeuu2H&Ag9f
z#Im8$YrUSnL>7p>`O_yoOIa<}BzddLhAQ{aU`fzKHmh0Nl8QCEK)f>RN&}bWSs{n1
zYdwm--zoVK+fYmw2#+$yJm)F#b2v!+Tgi^V1S1g{0u+IRU_@H(C5o*CVB4*{9tUUL
zjK-XB`Aqx*b*>*K2z}HszMp=^@N0MHUN!kMDoLWWTdr4u24tavu~WW10u{ZT4l_)5
zv`BFmLpicjX}l*-IMcZ!bD#eDWE)#aS0>8OE;5(-#hlI4M&1bG??*>p1e1k1ERIM;
zGT&(q&B&P58wzV0c9`0gN$y)9do?Yj9!kFD)U;Zmz7O@u1)*CAfB9^NNe1VGnA0=z
zqhlab&Qf4Jph@#TZN^dn9<$Of1u12}5MND89pPqaFiFceu^c-&HJ&$EZ)GLub@<&h
zvNPiJHRX3b5<|B2@4-7yDxW`eIo;TxQ8~u*(tgY*+V04W6Q;u1sp6bAn)25FUEY_T
zugtDdIU8T-REYnC%7YxH0tRBk5OWSw^+Nt3aGUHC^F`inSKdl?T_Jc3<*i+E+y-FG
zPxD6v1{fA(LJWo=4+$_P3b+ga#(VWb8W=>n=?59kIl}EK-iebO%zCFXAF6<WerC<&
zJW2QS;rsBxQodv(d)rWBS&7X<?F6Gbh0d;-lOv{X+0;NWdC|S#sWY!D^#ozu=gQR3
zu7)j<x8Wemme-Zsv4+|TcMhBhpy->L=NXfZv0<sd9j0QYBc2HwSGeTV#PJz%;2+{+
zuH|CCs{oOTWmZ1x)CBe@nWIxE<NVth*NTIpE(fTKn<Mj(jX|m*7FavOy?qnO8+?k;
z+WCNBsF+=J%zDhg^l{_ryQ#j93?h064kba}O6iXrDq3FNccU;H;<w8$KWoRl@viyG
z0q?k#;S2UMUu}Ev!Hsy9mV@pAgGPR}u$vh@u0i#A%S1}1c44Snvvj8oHP<jFm0b+w
zZ8MdWfxtnUjtFHaGz`#a_;)`GfS^Dt0MJjLAM)Safq+)o$H}_hdh2H3)>qRKV&Cdu
z*zZ}}v$9XHb)+<nwge&My>|EIf-<<YM<3(7mA;tIdTf<{`=ryr<1Ejd@V-Ff)VCU|
zGjR+>x>l--HWg+L63R7Gk^?|P;?J-!|0!l>&PGD4!G|0_j#UY$+Z_;CV);wcw;w^o
zFnM`pXpajrMj%4*eFFF>CmZ;0M1F3RSJ#7bxxmuC1JqK6e*{fe{rHY&vtQHT_I8nD
zL~>wZ{!AC#bBS-m$k6zp6VNO~Ce(;^kJLZI{LMJ~vI7jKXENumePw1c1zSdV77xAS
z#8ci!eHl;cg*UJpn<K>nU`2aTfY6-mB0~UF8l4wSxd-wuP#{B5eFmuPxGeU;oqxxD
zh4J5bh2M|D*lG?jNDykhE$i7H?`Z+Y-RTSNYv*3^EN<Xx45;HSQt<o4`t))|N`#43
z%it4temw&ujb+t}*CRIIrGTVEh{thVKtZFE{lkvu3!8|EA?>+yzU>mZMcgP4+l<$&
zvz?l}`;2YM{>rWag7-$|)EmF^T-iXqIq&Xg3Uo;ET#pn7)e85Lnh+A~D{)+glBQX`
zG83h}er0?bh~340RWp|-8&O^9r^I^Z-RmZW4u(2M;3&h<sgb91>mAesegPg(ahtIO
z{NbiD#TJ398N|%y=$E9k8`vf0=A<{E3*>_C)ze=N$&)tw2j0e%@N*Gj{6Q9a>so@<
zSZ-z$#^-zpoxy~9vmfletbU8x7D<!;aC*1E#@VdpeM?s>vH#tJH@M*ssMba3(?8$o
zyX8DjdcVdY!AxY?<e~8dh$1D^RPvU`5v*V5s%`eG$x0s7-alM)2@hY&K9IhH9^L`%
zhk-+o?wJaOUJ0PDyFM`mr{1888`K-m=xgGBd3I+b0DU{IO6V5s<yKs&Wl9F2F(p>7
zE=$_{496Xtx48K6>~-fCS-LA2?&(Gr8r@}s5j2)kk|73jMOF7$LohPp^+^2W6VqOc
z3{Afad+?E5`G{h;eB{oklE8#oX@VJlyg~IE=1cz5s8$bL&4;oc)7%4`Bz7@WL)j|x
zZGnUO$wB<|5g-HvDuqBA`aKkO6@cBs(nb&HMgbDT$3eTo_^~=sd4Enp?B{G&+^?Wa
zG?1xO=jNrYXDcx@dCo%*{b%D^_9gtQ1Rgj(>|}f?nLn{-hd1Ty=1LN0&W5JgzmK7)
zWcb2w|M400l<qQKe*!Ure~Xwoire3~;20KU+Tf5ChYh1;$lr8*gq`37<RBSeM-$3o
zn)Y)aa+3Z8egpx^(heMf8^U?%0AV*M#02~wH<%H{T@7%5^|&Pov`PG(ZRY3{Q1T!J
zG+GdMyT+5*n|~0!;rUZF9VQUTctx*4e!Z;!=Xg2kHwH7ot3S|}#wodSx-n8+$GgW$
z+&oIVImr<zm!hZd(9BwzhN85tv_f?gr^|)-_q2VKgPK<9Tyij`TvoW^qEmkDq-OVJ
z+Ilz6XM%t!esGaI0u3X=3>d&}{g1Jg1;tncFcR<;J0tfFOuS<5qh#ta$o-zaRD*fc
z0-qnmjUqph*}Icmfpc}T8<@zr?VxKgpeJ_tE|IKLS4K)__jI@IT<=`PFxaE?L?>(S
z5x+%`pE90XgY#C#3_Xu~`-INeR$nsFXYpdyM%pN}0Dty9KR9T<b5U3n8X-eZ3c=_>
zX2$~9QDC(Im_qBiGtfHxcgV@FlqQ77yjQr}AT#)#6>(mj)HPk=K1R;-hRp)`hz+wa
zrjl6}CKKA2X3!S~XU9Jg#fu{H0UNIS6s|+&7BzbfT*HyKWg>p1;rn`o`1E%)sopYG
zojT!mF4sLPAzbu+q>p`AJdh4TdwR6UuMGvYqw(Y5ApS)O+$gR(fXns!q9t-*fh`XW
zW)zb=aQJ|ui$vRujGAJKsr_Dco}NHvSpxryukUm#vRl<-2q_BQ!FH=4n!Q3tSF*&H
zt)fY-clN>kh;BQl-{;PRcy}^FnA$U@x?xR=-%a%tC;H|-#Ybo8V4C{^d+qjyq0X!z
zP)PNc$`w$LECmSB9|lE+UtoR|TRp(`Dlq=te}Cq&ZTAc<;W6e9FD=WHa9JK!IR)+#
z<4w^VN4`W>Z$j8McLg))3ldM=#bPm)koA$x`B<|eLo`D@W-oo_vw=_$eELf;dGqYu
zB01}PQHnPQfM^v7F0kDqrC?+!OotIzm)WwBi_HNC5wO^bW8^BsK)~`-NCYw^)+&So
zYXHFb@N>Cu>fs2fS_4lFPUAO!NL43Wzh}8?awQM6-MtWHOy{&;9#6k?=Lq4RuVB()
zOm&Iw*E42zYrWg~8J1V^`05Nglb2Vxfm25RV`FyerO#MU)7s0eI_t!UW{UCEKTDcA
z@V0}`E%%tP1u8)3qPF6Oe1E$t<%2*${|0nKQB;ipmFyI&z)fKl&~-z%arSfaC|uDW
zP<!6u-S@Pqrn0>tmBMT22i~3L1RL^u0w((CWZ;TILDv@y`^hIC2e2mG-i^p}f5y<!
zQR}yo+d6lrjm*mU=**)?HKFbUtkjwYGfKWQI`rnqZppR4hVFvU12QY0GeDF<aAgGK
zU-y^PBNS8<040R)vW9FOsIhZpGmh0J?%H|j7GW&;${S7{4hA!HKseqBCq=$Shjx>;
zvKiQnQ4HOkrxA=KgJz6<Uwr)HF(xlx&9_l)i{#_3uAQ)K?xBoQdLHM{3AGGhes13{
z2m9T?VZCTu^A!`eM+NW)W>$`L1AkseL>NYo3DT8Gp{SYxs*^uzXgA$dfOOwxO$Y|A
zg(_K}qBEULfiEujCxHkVnY9Rn1S56$_mKJ_zVX%jMCvAJ>_-)jNvq=zozKR>y8RYX
zB2JB>LqkgEMt-ePVAWZEkc*)3sdcr-p&9EzYV~hXK>qIWC-c6z00RyDA9&~E64=@o
zm{QtfU#fR2f)HegppFjZr${#jL-Dl$d_`AJIFL&SpBYk9={(9T7YuJ2>QBQm@_Re2
zhe-x=d=p&K^h|F!|K|mNV&8e5f3Z$_*!41d9213$6U30^I4SzRk~hPzv)|aBu$oDQ
zboxUKgSV6}1R%1JFa!5Hz*46mGrBJUy-|&T?3dmCcc+gqh<0@yKUsy=In+EFp}7Mr
zpfSu)4g+_<czJnoy8j~$kVlas08;IPGFBjHx2<3>-}9)m^z+2XKF}RNh&4a$`Z_i!
zcTcc!gl&vHa&?)3$J~PH<GVyQ_XhsHoh@pU$gQ_khHI(ibs={@{q9a0XHemHXi|2N
z^{at;;->agabRH_=UKAoi+=!nW%uIMp899ZD8z=1(!%$A($#>NU6U}S25WJm`^@Q!
zx2_~KhK8G$T)cI1VDmr|kgo?;g`hFuAdfOBWfXNQK<%p-rUcFet{RAhR6&UOj2;Il
zD>$_ua?eQT7QJ7}UC|Tqar9d?^nADm;$GX_W*8R4E;GeW`zDv6`q=uN5dE<L<$EVS
zK{IgzggVWh^zWVnTEdSIoXo|SPCBf+VT$D@UV;xn)5fmsOm$+aY%jKsv?wCwJa65Z
zoeg0rz*4K*Xq1KNYL~VBSTpIr3w=H{lm8GGSe?yAL`sJs!hrW9dQ2W8ZC4G&-UhJS
z99=vDXZ&RcoR8x(srw4TU0YP3rssi1q;blOq$N1^;K<xDa+>sHyt)7-j`uJ5Cd3rf
z7@~a2Z}(QHDkS8`)Nuz(<=?{F-PZAsa0;+w4E!LkCAgm&{Ra0>UF}96uCk0hRp$X9
z-%<l7EgrM3aUnC~%r&T9O?;k`$wMdOas+kK;R8l~Ov?75rs;$+Y92-SGBI(WesCCY
z)yE)4#?q}CDDrlI++On_3Y_#`5~30DP#^lKD)}kZf#+L4SVdiq2e$Wd#Ol0wyQG$U
z7!h_|euHqSo8RY-<(80J65rC$_4krUUn;U}zfg@NaRu+0I9WzbhYIH!yx2|{q-rrR
zFVqpitM87@B~D!pu<|h%1J*!UHaMEf1FG@{m*(g(&ia!0v~Mw;zX#L>fiPDKxJWFu
z7%9-HBOo39Fyx&iKnF$K0T3tI=E43;T^-wg^{d|M<El2N5Yvr#7rz#J_=(l-H%-%u
z_q$?TH+#I#=sws~?Jouj**PCM4PZQeSnM3QGe!Q;i+ihm5xi(*@2|K1L`oQvD)*v_
ziaAm=N;PTV^at@#@fJF9hr(7@kkW+zF*!?cM6);%&hny@PX6lon{(<I3VRS(17T45
zK(k*BWI{(z3=FCKXBbijDA-N_w&+Ua88{h;&&WLr9$dUylRl`E%y-P#$RBHUAxgl_
zzOH;KpJg*tubS*Mevy=+I!kL^cIj0V1x_qR$m1wIvtg2~;~Uiv%@d@nz?o83{`rd=
zGDaGiOnt6wsQ%mbMeN~zPvNavrgpT~`LBGexaAo9zzq)fp92%Zn0YmXi@Lyo^>JHk
zgUp=TGEhtv{!(iJlkX&=2F4Y7AV_AgF^ahhVD1s|;R3(EF^Tg)JNCJX%ecFezRjNz
zPIuaqBQ^Esb+rU*96tEHA^bfUG-ooL82K?gO)BDj70FzAa^;hnW(VWi5~r<$LaUg!
z@5@2H_3F)xDZ{uPA)Be`_^}^F*}vOh&=PBY?xtV8eG$HBCYBELy13W?dPI8eBFdVi
z{eHuXy$U92cBf=$PUN@r?+$dGjRGS!q$CU=Mhv9SYc)ebcLUHE{=0cMgDXud-359}
zV{|GbYhk<UT&tTcUe83|Yw2n~)1B#E5bqLGbwls1VW^0{$SQ94)#gij>A##mw4ENc
zxm{}@x?s+t_4-T7vt!|A@BMqkb?`&+a{<x-Yb)8pt>4m-6wyj7TMZ8ZcR_)XIqj}y
zO}^k%Jy;<f8`!W|#~R-PNGE(!pyQ_l!J+a9lVGHKwnCxy0I0>RzLLN}@;9gQTeBn5
zZPQh=B1z=HhsiYxv{>>EvN~f~^)~0hf%IxxW3A~!-kcUfC8;SGrMjw9tC{wA`4K~H
zY))%ILxHfD?AdG%YY{(=w)lNueY)1beWHs$W6AxYnbK7C#9=$34pRvd6Mf4Z9W(iH
zdqxNNCHUB+x!Bgv<C|V*R*KG(0I4ZB2odCjjkI1H6zNxh)H^cw4syh%yWpG4-n}Q}
zdatuTEtbq~b?0JI7^hYD(&gSIjeg~O>TNN>BP$5ZBP~e{CJaDkgw-*lPUv}lj0||Z
z<8l%^3ezi2!ka!Yu?u>M?(i~2;gP%Ybd@9BL!$r}K{G*hK<e^&68{-h=mK_3tC2sx
z;af~fCagS)_~e<)N*@wHhol22F~Zf6kv!M|1=<UMPCU$eeNztw_JaoA<@Pn@sZF}C
z+!5R{`%+i95Ullsh`e<}-7M)3pG1<>6VnJozG5?z$hAt(!1+7Qp>Y^`(TNY_?8&R0
z=_y7(Lg7>mnH0>h`L>mMBQeKPgb@d+sAQ43B6{Z^-5HW&cHpwPF~)z|!)_iQ_eswY
z-x=@hUCdo(5IBk*U$&uBz735U76hzv;Q#NfwmPF=`vBNx{ANpJ-gn^(JB4BNhzQfS
zgPqS35tWZhe~wCg?)ss2p7`Y3?Yot&piFd%ajb>AEM<I0216R|ri6eLK7rg)dmK6$
zYuRH}iMMg>mo~e`mDgR~Fj$j<+*X4UusH^rUc0>*rmeO55${|hhO!q5s*Nq#Hf#cx
zYy$sx2b3OZneHgEet@iAQKj;xBm@WwO3rfe-QKiCXvq>EO2w~9CXux&H>YKCpVyFn
zws<^$3L?)cH%=dvKVn%C!k;H5eZS`YRKe=SLFeGF{htg(+)Q>6<aO31wMu>D$7JKG
zF3ZCdQR^eys@afC<MT!eUJwn97g!{o4vmf<76ykR4bTe(^bG(S7rGDt>UV#emOSRv
z9=;J1|COvKQEA=2gXguD=JU8oO{8|^HRY4YnY-TS;jbdv%Q!W)->=53pSgxT{Xx{<
z8@j4};jUimFh_{ENNlT@$~gGMqj4~yHeA}5vGD2<$KzV!*aD(XBdSc0<4-TFHWHwI
z#|x1MA$h=lD4qd;r&opS7IFaAV;S<Y+_NI6?l?Ws$7tcvi9~jB=bgeOW*_C-oo!G=
zl>;_Uuc>2VWuX2!jSRCWnGY6ThS)TBkAJw=xpBipFK@EE>$l6GX6vF7r4i|4GV={!
zQxiN&Y<(L&+bHuzZzCVz)n>fV+v558&_T)&<p88P!BI@#0j7S}XQV*6`sN+w6619`
zQP$aWLCol@rO$tJLZ8}s7Q`k*tC!%tudg#=s8>0tUIAJB_!PXpj~H|#b?CN~zgyTn
zw~0o5e?>p7E!D-wJID69**!9w5qbKQ{OXJ>9w5D;y#~zdbh|9vNf?;>A5mxF*Hqia
z@eKxykRDP>N;fJY$mm8|q)R|L1O$xHqe~G%V1$5l3DVsSQqm0~rPASh^qKGefqlN`
z>^k>-<?j-|8{gDpjVp=*k*)cVtirId$%ProS(yGgqd^$FVE}LZhceq=En(m<%$j98
zyAEdf5Xe@_otTwBRQJ9|$bz<R`~Hg#(%TBd_)@2iK~Jr}H`~#2i^4d^L4y{@*7x5z
zJgsh*?{5)$<EMgi-N8;zkzD+ypWh<+5rt$hyUA=#w|n)i;`uXQ$?~SK{2xnjP&AVd
zSUCYq!6FP)tmV;`g~VWu09c0IFCGA59e>_hH&0wYjOOMZn_P@4Y1gM&SNH^fLUXg%
z++xTbbCZPlq{25|S)t3Y+57&R>Cb`%990uO>X(9e1X;yPen|j>a5S%6?v^lfbBlb>
zND9m}zvs14jd*G)co!vMCdsl1jAL3HyJ~0?xh@cL65=6OaXY#bKBu87-%LV57HaTz
zh!PkL368`-jslP@OiAAWml()O+2E!%y+|_fVZPU+lDa55SN2oupvduevLQ5>)Gm<E
zB86e@JNE34WG<8WJHst0g?vrLo7}kK3}zOjCvB@5{*jut2pXu?V-Xv-D48)bt+xYS
z3fNeBO#<z&IX-hHBcn1W3D{T%{j9ZSYeH@c-Sn3W>I%z;OdMAe=}HDW((?}|Ui&%9
z%<h({@xd@)Op8fd5DAA6bqB#2ThL}1gJB;7*tsUOP5&yfH-)a0Y5JU$rsKShH4(V#
z_#Cq4=r<p_G%6l5(ICL3u4hR8Vo)^^_7dCtmu78Ipr)zNZv!9cBd5%K67il-rA7*H
zO{GsLJFpFuU7g~C;TVp{!RiicEh8IQbw7SM7GBz-WU!#jY)$&)H@muPzZHmH$+ele
z<H$63A&NEn?sz`_xoDf-tgBG%aIfh~H^`FILl{iK1d;uZ+dl!r{RQA=j6LNAHl6%u
z82PZfuv}mV%PTkkqg%Jm$8Az1wMT0WT9L}z)y&TKPt6mFF3$%latzeV<R9-Uer_fh
zFsH?OqfL9VrLj==O5sU%ekOJ5Tp8pYi3=Alo|*dhnkwYc#;uJH=09^QYOKo>p0V5>
zh7~+@>Dd_;qmC3eAh|wI=gyV~>0X<Q)7pWx?^i=g)#BkUz-kPnenpL>CuNW{H6sf%
z8Por3Om8s{Fb+I`7!lh|^jL%Xx(I^g<<=SPeh1NXm3qs(-(3Z`@}xE%&zjyFcZ-4g
zKsK29LwgEp-q7T^Ez;V}=AHYr)YolWU%xF^6TP`YDu<mGg1ouywBwFHzrca7-o>In
zY|uOAt+Dh(a$|Rs)G_~S&!z7#VA;Z%EE%%-F`$eTLl4NF3EiJv)BFZo-mlCqRcVF$
zZUKUkHWg+3k0~R`p>AYY<U$a16bMei&`$vL10af6Ad&)N*El@=H?or6cLQ^X^LH8V
zEM?Y+UlkK-tZ<f2{eGV#;Nbr%_F`=_sb%9ZpX|17r<b-bEC1W})p%7z!76?61h3y+
zo-}TTtnYTOJYzM8<0tKYHcU69;etONItiEgm<D&TyE&(sa@XvXf1r-|4upZB=N*77
zk^N;`%@bIPYlA_liQEY#S2JjjrtrH+kGv2xgpx=uD2NE%0Mn9&A)f@u8~ekE!KMF=
z$Si5_cop4cqa~R5KH-e2PZBJ2k^A)h&d(-$Ke3b0-R$!I+@>UU0_GvH0Olz>AL(0C
z`y@;2w{ft4!Eepvt6RSRy;`v8#^-hb;jD;$lClP~Hb_Zd79z}iG#k9|u`8=<;FtRt
z{F){2`1M`0kd7Ip5RX=kV(`!mhh+_*KbY6pz)ChPo)yS4o_<<HF+q2hpQ(HADDScH
zhWYTiz_3=N7Bv`<RRDqH&>ul2=2@nIXDQy=;zg@0ZKb>nS|Ta(BmN4hF7fErEktk{
z+-pk4-|5FjU0#mQNPWSxTk#!@!xMA23%*5Slc1_-lXI}CL2kd(hj+K8;4Q9=!9wF_
zEysrsdTI?P$kJw)`0tEO>B(RAr8e>j7RWZ;1Qcj<xqd+5posBRif7Ceq+l#Lwf;`@
z!JUIan+DK6&;{iE?K1*OX6&(jOD&=f(JF@Ki_7zMEIjyJC$Q!%)8@<osHOpYy@ovh
zhfrJX`%T6(EtfZUKG7eYkc}1H|E$gAw-ix4nn4jN48Ph)=k@p_#WR<6L}@$ez8<z6
zWB6llGK(6ed{+Mn1)}Qk!RCo&5d<+of{^Hf4LBbI^%a1c(Bo-FuL~)r>El~peW6|a
zNeQ3xY;!w{^V1#?KhxXliz7dGlgg*@K4ss!Br9kS3iNoWRK4G}FSMx3I7SzTP7{%L
zIMZ@_eF`oJbYHQpd9B*BdjwO(c3;<Qi4q^)<<EMFlJTuiCIvB#_z+Hz2?+==D>Vlx
zppV}o4ABfg6twxO>hD%AU_D2UQ(UI-;?PYWh#xV(=T;%p5V;;gqib=;Hm>29ZC5%I
zd|YhKyH#9h=zV70tfL7}eQFS$CVfki!0enYckFkD2KUElL0bIYBvX3)>%g9)vn=d{
z;wy2^<;LS|yfVN|SwK}reo|`gheG9){y!R2h9Q~-h%DAf{Qf$Z6yuLB`AlqXF2|6;
zZtDnHQj5kMvDe-IJy*pmcyk27yqh~RhHYWw;q1n1;@Cb#0Lz||2jBFItKL)2^SnQl
zmgg#JdK%c$s^G^f*Py>(p>uJ}=dy!bD@yyOAcb-WuV(-RyFU03(#Eq0VuOj0-7;uP
z`h)?R1Ath$ptHbS(BIlgT{ZhfHFEuIOng^t`WdrfrY;wg6=wl1!`0Pi*LhPFWyxch
zbg;n6l!NO9L8B%cnO&7!a_4aL-Ip>w1(W`$Q2DfXWc&mhQ+gyOeM#RGJ?z)^9%Qm}
zFNwn+cY&}~H+gAZ$&fR$kV26E)<A)4FgWu7PUAPO9N_)@xp+#G=a_0feQiG-eX;43
z7LpXs0#UtUwZ6jQP4%UkV-;(N!n@UK^7Sr`h4%a249)yn5`>#b@=Ax{P@h}jHKqKb
z@Zf5vP?|kP@&gOWVBC(`n!_(y8l~q0G|~PN_WLiI!5Mc}?|hJx!D1EybtBNFyq0<l
z&;kIo-u+r04fKLP`FTFKby%eB)<GlHOK~Zu%^Kq3!nVThp6n_=N|$1i@88x*txT!r
zjqkka`c23ABWus~6AvNaiwfSJyp`Oe)KhEANtU)1$N$uJN*Al4FIAXJykMbrDI$;3
z$5hM}<azajVL*;lkXZm2T}J1s{F^aAivUms_Yue6L9T`kpCdUHKHRMqrd)r-Vfz7}
zLc%G_7%x?mF&jMHx2&WmM=Pj8Xq<7@j<DQyf~2i~@6M7Ki&5m@$f{*+^0azf=V_<k
z1f(8c%0iiPs&9qNI;PRsuW&PGlU^L|=?$!!$m69Fk;M`cVp2nZ(0!uP?HHUT0LN~p
zNf6!4xB7}*>HKl>(~6<%<u0doUHOKyAJ`s(4#N{u1GJOdJkrBwmq4GtL6gKv5+P6E
z2Jf?7DdbK)bPL>3glTQ1O-oq|wk52pliank0>^yT#T;G5gUh)1a1?A!34}Gy&uEQ+
zf+E}D-9i6`%DOQu%K*z00djYAqod0GFcL0VF%Hi+;k2}#xeW6=6d|4BucQOCdmnXH
zT{RW44M|gv(nTyy&!s&~1wSs$(5P4mQ%%{mX&-v};()E3p5v}>i(I{QlZEzM>b|vv
z@o1oXwsJGoj^+sNDi6Ym+~nnIrVu2hAXSP)SfY=gJ`B$a!1K@%u7ZvvCsny?=<i)X
z$s%~FC*D3u+V-^&W?DxsxXr3rrdk^RR=g||o#@{_?4@)OeEOpQL;eG>#Mk$R+F7)U
z9g@9IGp-un%Qdju=Ig4qzCNOiO>o}`@Qe962b_mWD0A_8PjiqEP=)M@Wn^L`gUW%>
z<stte4A3e7BrF^90hp=%(+R)oSH^pc=M#)Do_6}`g$?uEAsDM5Gx0F8NDM}jo!#`i
z^HJ@1e-b1WKNQZ~x|8>OPN+0Wn(p<H59?5C_Uo>ls@k}CGhW`b6bpWJohcn{U<kTh
zTw<FW&{B8yx61#y*$f&SUll;YEd>RI)gptM(dW+?25AjIqGxunM@L49!%w?VEZ^yU
z1;w{4>lr_5d4AXa(1)a(3Z|TW@uX5z@sa_|vy44P`<XZQ*bB9wJ6<sMi5RtX-typ_
z<=zvKGd-xo=U<H?G>xY_F%Z>>2S>2P2=@)8`nk@=^YhIhg3HN*Zc7m82hJ*mI$VZD
zkVQ@DUt|QH#9*xhSX5J$xaiN`J9}VJl_md?&r7v%`-2tNYR}Wj*Uprb&#k+N&rI(G
zuJ$*WUcXJr?CyL<o$lmDn?}00yxdi<^6Gg1akje0NlzA{OzqOP*j#ml@raVs%6-Fr
zFgko_S0}3y<xE>|fdaf$A1J*R1qGN<t-Tq2PPcr;0Brz3@t>3<|JKle2r{3M>Q=EP
z=QOv{`O8oF@6&T2Cp4`Ie328p+I~U!9S!RJ_V}qOqIegcNXMbVtT3`@7bM<J_!VD~
zh^PIDY(r~rTD451VA_TSzeB;4_9H+uBj=q}ZfxV;8E0l=$||l3P_2qYRhn_g0WL^T
zWPd-p8stBZf!YM1cxQN{{z3r@fZ6@_1LEgw47C^Iu7wDY8g5HdxRx-IxQ>09mqSG2
zb;%*XhM_bMbF-$J3+?^byTGQB8Qh7THPS`izu4buyt9+m`1yKCEDf>5Px^35%N>Av
zV8~LEn06-4E7Lfbjcd*bqE1Iu_T<AM?Li14gpwQDqLwjGTL6?5qq-b=aC{p1BM~G!
zZ0)I~u){Q&W)$krZr*R;)R?bTCz~m{q&&~0{FYPkcAYT^eM>IkCg1y+bBTf&oEOS5
z1Rl6-*s&2-Gn80wY%^9>d#;WsYk^gLAYJP3t7c7&kwhiiTi|dG5R?g3DP9WgR#R(M
zQ~Lj;|2hWg8-OH<`)&2Vf#Anmp-+XMgNZg5ei}9Bd=nu1eeWznF@$vP=fPWbb%S^g
z-p5IKtxew?@h4?;f9Z}(Em`y@KXd+Bkm|(A_MM6hJO5h+;iQ6}^BDO)TSKtVBS2%l
z-(Jke1@_^LwY8DS8drH3gg4`G@6ic7NU6Oa(cO=ZF<Q1TOxpkx3d!{3ZwEc#LUQrH
zEc-a+U)9=`&82az?2%{+zFaFQ!#PO|J9Bu5=TymOZkFknqNx+Zn`93Uyh8V;8La$U
znS@N}=VY2IJyVm5h91<ksUG>cCX*kpO9tDx{gHmh74f+SYxWf&Z){n`yS5Kx-5l;A
z=iqWdAfP4epPl>fV6eUeSj+~?is%n7aoAcC5)0L(%#PY}hfDSrSneTqjX&XkOAN7-
zR<@scw6*swZp^z*%*Ej;0q#r@mB`*|XzvG^4_n)%-v%l|ic;Qtrd74@Kb4x&^T`o9
zwPUmjO)%Z{<#cZv&Bjex1WDMVDvJ`}N)R{*+Wv3flJo%vXa@j#F3qp`FWZ%$Y4#o7
zOFEzW?zoQvCY;4jR%fS>8*MzSVp*_X!l5qdm?3)0%PnU)!r66Pg)>RwmyVy-$XpcP
zVZ4}akt^w&DzfZ8n$1k|{cg!%2}a;0`HJ5=y$_qJ<!fzPW5u-vB&T^%m74=<2qlOd
z5i;ms|G^=KX%}FU!{^gQ+tYMzJOPDqN4}8J7aeyQVd4046g=NdG%AQ<!2ck_U6#L*
z*KGBt!!~vH`Pt+Xg=b}K?PIof{H#CdoRqDm6XQ;b0?Pxn!t#1;OJ`NP){bDo4DRbx
z@Mzl2z2BL2sAtLbuu_m2%;%cLC<QZ!5!C<B##>G>OnU%RuT#ny+Mc#TJ<{WJrN^%e
zS@nIQ#s9V-=@KVT)RBM}WC0r(%zy@Q_`1I^YkN!V`K`tI*Rz7w^QKdYu|k*FiFlz!
z8c=}aoIvNPir?wZ5Ql14H_$07M%}ks<sGFVFYh72&&_=qbV5CW0M%U<?iPuW!r|SJ
zW(d*0LfHidYahTOy}acHl=l9tO`lYi39_xJj{GR2ofFy3nL2snS4vDd{Rj&s`Nv{D
z)$xyCNPjwgrcgU{6t}r9yAdo}t=|`5HKNfuRjWTmy`9ZNy6h8-?e+5shsw<En{Fj=
zlT}^##b%M?R!@B39h#jQC+diT@MOMc+L`tU=P%bLVYFoi_XwFj1T1cWYfC}6<+Ot*
zKgXF!g9WjH*+hEup(+g`1S$~!wZ|R+#Qhc0Oh6F_Xvj%EX`_tuU~#1HG-!HDxm2ff
zsQI(R>+479+bZ7C?a$(dxT%;#aB()jDmyDDVUgoo(04+Yvzi+lvVNMBmx2qV$6af_
zI5O<LJjeg_xjwhiJX+jEcQi^pZI&_)If`<gd2<6G{o0y3r3Z2|xW8I>YTl4^La77n
zzxZxA*so67E<{ZRXeNRF2~C0_7}OsCs`}1&AvhL;Di;F&+PNW=qvReR++rHX6>jwy
zvU3CU!~$2LS?_3IRjq9`?S^t+<w=cdUMo*Pwbu*(T#i-3>pX|NHzYSh$=_BzEu1jD
zN_BRziE%Z=g&Svt``HyJFek9(L`1Owv&w8QkG*kZhaY~ex$kQr?tC9-_BoCQ9?-au
z_d$RfsYQk@OhFAnJ7ahl)}H|D8CC)*dbddYopkL^onvRVb`{SxsYk>C!_P|~RVI>*
z>^rG9GJbpIH0ygV9bmsn!@i>roqZN?9o+egU{mU1>Riv$bj7BM+~T-vYdC5C^w-bL
z-Ql5W`nntyo=}Y(S)sJAlOxDPd*_)rVqj8Pg2QP+kA%roWwrT{c^q7XSZUji9!Gkn
zv!W{Iu>ffhFnT9IMveU+uRkG%_ZPscrWf50l%4*X!Gy*QhxN3(U?QyO=h}GL(J}^*
z@!u7pyBDX$EJNW2ux*aR0j6h(MTtB&%V5&e6LFbI($C-Lo(X`h`dEr-d~PznrAK91
z<*2Gp;?$1@-CSc);?Pju8M&m6Qcm2d-3E5W)0RT!F11`?;{u<m3`AeY(p8tjB#$?F
zMTMG!fWARMGL7<Id4dE3dI*4;!YBUgGp0Q9D|g?v^O&x)hTI!Eg#BJ#UM>A_ghi1Y
z`R<O6^RnEuho(k@c9(f+)+^~5A$Ow#uMs~Q2(81ll5lV1Bz;6xte-#SZl!L?Pt-s@
z!!ru}rQ7|N$m%CMXGPR8z3V$oT}NzrgdfP~u4#tD>IEt?4TQF0Z$1!!;V5nL-VW&R
z1_5h(SV*C0?-xvg0X+ghoq}3Yfe#Bf3XY6ozd5{rRL_x2NBS~}z-KH5+qgF_GOG8g
zH2x;O5JEw5yWnNK_kDlQ_Utp?b<2U5+j#ft^W3%1-(87HwBBnxM&&3M<mD*bjzvOu
z=n{0xmUoZyJ;mSY4qEh3M^fnTG_e=6<$;^CW=*sNVTphGKt#P_8RCG%@!bHRCfnT%
z%+y1X{aXLLJt_?9F@Sn(&ZG#eV*eABvmXed2t`hPC!AHtAL+Cyc3Dgq<l9;J1P(XZ
zyze&_G<w@XuncQ3=O#Q%yg}+X^JvKv$$GiBVcv3zE!y)gwb#J(yhG5ZAcK*fci40C
zIG9Pz5*tujpLqjmI0W|AdQ<l;UbIG<DhInYh6|KLe*{OMKny83wZ!9a1hxPv2+Sz(
zFBGN4P@VvkjqxG1e-$7o#wAnLcY5D*J?3>6ZgQy2^r7Gy*GcuRHd6oibmDI4_qM`I
zi|pv62)Ufjv!o|%eHQOL+U%~&E5}ycyD6Fd#O}3U=ljK4t6*xC_*HlZYtOta!?BP@
zLisw)PAWom+R1t5&=%nIor&a=?XcgC&@G900=__jU>|VmJUifuLc#(<z{iBHzDVE1
zaGnC3E;pdTf14%#tiATFk@;Ajwzpq>d{_J1-970fI--2S_flRGk7`g)#kt+@K9GY6
zMMaW-VxPN&JM;X0rrp!FI?r74z}}3)LQ!ideKUNzAGPp<aRe5A%X=b;>A?Y3NUrCt
zYmYXn&)Y3Upfgo#27vSW;l5Shn-Mc^!UC1km$3|k&7hKrfKfRoZGmpNW(2U43!Qog
zGh<-S{=h!6-$u{;7s?<x6;=jVpjU56M7G0(lXAmlo2oysZ1M%Yq%tea70JDZSgsbT
zGop$OSpH?ESlVXbd0qNj=(8!2u6?@JrPqtB;DUqaIp*9G`m%oUpC3DAy$7mb5|uY<
zV_n#*gr8d8F`ucrIskfx**~tR#)D0)2=`P@v}5TgfC2f@fYGV}9nzp~rEWwJL>PUl
z-ontH1GE(5OVa3?bG0j@b~(`oUfzn^$yi+nNub<R;Q85?UTzZmw|BQI>wBbbzPnL%
z=@T>>hFikv!f<-+xOZkI;V`nM?Rm=e?81npTO-Ei8i6|FJw)ce1!1!A_nY0m+T^@L
z7h@aMRdSXrQFK*j0Y^e7tkW!eZ_CUo2ou6jX=CYU;2?*PfYFo@9mXICQ0xk7XF?yT
zoEX>(0QM#^JO%vrKVN`lTy?%mIZ{mQhU3N$QWb0M>f+Z{ky(`#SV)(fOpp_K7aBXN
z;H}CZhtV^?;@9L(Y6IS?tUC#>&(lw4SQKJa7cdrjCyB`$DxISQ<(nQ<1d#X(%EP;j
z`v^-#?)cgJy%1AZU^y17b5=%K@u&W(k`z;eCAc<yF4a|lKi2}Zje$K#={RZ~EKs8U
zAY}W$^a?Kq`4T{0K1l2Od&4rvUUs}~sQ><oO>{8q7;!VCF7D{#rTmRU?`tgfpy%?g
zmE0YkPwf_7kB=_PS0`!8MBEFg?`vXw5}!K4`QwyPr?<q$jzJG(@PtBx?i#+#@xkX*
zxy6~4=|#)u(zey-m6kmCfF4sXP||nNVd0JwG^r*OA-MP*%K*$Iwc7*?Kf{+6=<be`
zlY>Jv|9ib)K@95^z?#$l3Fn`yWdXVRjT@G44(?vr?@Saoj4ayaG3+FWI(`zCe>YQq
zQCCsGH$3Ux6%pb-uE?zk+t=*@OwCy-hcfndEuw+nHs#YLwBIkvo26}TBdU0syJwjc
z!e(!pOi%4-%N8d$d8aLi#vunDI?tT<8uTqD;6@co<9OBcHuF%n#8P{}LB-kuBi%2^
z1)xE4{Xrl(3bgg!#t{Doh&K#%ul~K=uBXqv@?|UaS*+|zx}Ktntlej6{MF7~jmS4C
zs2X{0|GXSD+qfL;y7RNk-fy)UX{EgMw0PwGQ-?cr9!yFKLZ5g)wd%mcMZZ)^661wB
z>IcYoHk!vhe)1-my&C$(QZj|E>f)J#&}pYR%kk?n!=Hq&dw(Cs()<EC0*?ZQ+ghXr
znwyboN)RG*wDF2!SV6#Tq3Jaz3!Dpot_04o`higXA02EfTZ*XhAkpgg`r3AmegcoR
zuB@N?#wX-_*N+->QZgo+G?4q4Wc;LQZ+RTP-_KrH`qF|>LvgrlY_f@iD4{f<LZLn$
z>-Es8kG8?IL)7^(;pmsWw7Ktq*b3lvhmKJLQ(oTDjnX(ij(pZUG~Z(xnh>B?+JND0
zd`-dbASE>j6lwJzt+WJ&77Wl<P{^hH75}6>@?k(cx&N;J$8o6Q`n4GwR#ihBw^w~_
zjWeU8<?vnw^Shro&6+vBVPhS3VDp(-38=@2G_e?|)2b}`8RL*Eht$m6_~IH$V(_#C
zAG#-M-li7&zU}j||G=$zpr@jY-+d$G;A7^|4O6x}nEKdki`FB-)071E0TU5m3rX)j
zj1HPSI9#EJ4TW0?vM`ZDaM8vK#{gpiz<Sar?&!1O<m@XfwygcZgVH5=v1^OQf*k|g
zL(|{%4UAFy?Asp)*X~%i3i4UPqbggrRD=fB$;g_hOYPnh-zRQv7c5)4M_<+_t?iQ(
zql0ybNXy|(u~G-cxWya2Ke-|LF+gl*;*dI8-yYc8JIid3h}yX9hCzScw5<`+-gCUr
zJ)s-jhuysXb?^(T77I00mI8~EoEq)Vw8&zRu>s^`5xX5U@^twZvpS(olk&}HaosOz
zCoFt8)uNM9<CFD&I`&?4>UHE(5$rpKZg~_6)N76sy^f<&`pVoOE_XY6P*8MI8>Ba6
zA<j@M_JP)TEIyCMjEkj0X5Kfi^ulg^5{o}=dVK`hD&#!#CDqa%(KRLcMUSe?$ZgU6
z4Ox$Q=9d$C3IQ0W2<_mUxg5k5tVYz{O-72Yhx;pHkRbqaOd<0$a9#WvHgH2#P<#w<
z+!lN}VxjCC&nETbH0M>-kXDz6B^JRCKQURF!M+e@?O*yM3M2GUHK#RPg8pGQ)121k
z93F-SP8EgldTj*iaE{tj!+Bj<)ul|u<DuqS8|O!9(>Yp5R0J?T=b~nE`>8{oh=(p$
zurocMc_P6kE8ZkMjyz3BMUB@d3JNF_Gr0iMzdjdfRSYZ+0IQ=38v{;<KcVCF`-h=Y
zvhg>k!>;m=85INRZYLZSA%q=z1ln@mv-5loj8b{0Di={mnbW1e2)*6?9UJe%w*az1
z8A7Ab{I$WT;dQLklhvmI3uRAnh{&kDR;sTBaEz2`y$EI|S77lOuXA3u1jd7@$#2gJ
zYKg#-OUuL!Bz0ryY)fI(8JoOP=TJF_AS0MXi2h%b!~+Z~F2MTOw50s6ivu(*S-P}O
z+)c%;<wf0svU^v6)bHliW0`mSswk!xkExp#-ejH^)F;0O^$3!Z_uSRZ149}#m@9-t
z2&M@NO6w25Ky3@Zw7wO-eU+;0o_h0pyD>||sZ@+gZgrnDt0fN|u#ad7=;ydKKjZmH
z4z5p8|GPe%hc+OVo_8N6#=FT2(T?oyH)o-s!2UPz*P@Mq#RFiq$u1Vq{ut+Uv+r>^
z1EW~3BK-D<@(ab4y8T~0$)eXi!)q3sz6?*xx@(>7mpijVdkYD9C3_z*;lvKn6rQr{
ztRgZ6sx!kwI1;kgq$0gEC-er5_WEszcu8lTPhJL7KT%+g0hD(Z*a77o7`X_xu9m!&
zlyzxbB%;)m0B$kbtlM6Ns%*Q($ViF^f)imw&~MgX9|H>oU@flIe)umA`|Vb8A|wB~
zd*V*W`m6e6cjF^@{x{FH)HdxXOF<8>E3FC3HSORV-B3*)zGdu|(bAI&0jb~U861ae
zwhwi=+%2c*Ba8WRz`HwO5TD<$El5mq_snl{mUE{OpE^9`?#|~X1-3l0wuae_csGNe
z;$yE=aqF#dXQ2u8g{Vr8dL|08{^oY2pnnS6(uNpNd;m0J#a0461;rtnH@%rG<b|lD
zPZX;Dz^pjK(#lmZJ;=lIT%tna_+>lQnr+BBS9PY)O|u4{5VEe?EEBrdosN`|`pcJi
zaLxjmwS8Mvpl5)d*%Cxq%Hi4cai>L+I^t2)PU993gJEmr&q*c5nUxS)t3r&e@d)w~
zvawN>_&I<OE)>xGLrSBAaIh(ckpN(X=6zHFmi7Mm{@oD=CBMOJ=5-MvybkS!CbTR9
zR2h~UdJjjKKI*%RCwtm#O<wK(Cg;)laoT7TJ!AhtS3IIqqiFInhx>Zi(Cmwfz^<EQ
zuhXG}L?x#?NIhz#(FCBF!4%mj;bt(f%JcAD>)~?Cj1Rbwigoc`9xt7R4mp_;Q4q49
z5gl>2SYY4?0k{CJ>#P4HPqK!E;>y_#oc9Uea%Ak<t@Lz^J*=+;3`(r2zCYab(@Xf|
zT9s;YA=R%Pw;T5*>J@)vzh}FWntzihb$d6y-3auW8FK7q{U|p+cna}kC!&EmoH22y
zzNaU$5yGmpu?o`HY#qsL8KD7ZeFtH)=JE1O53>luLC8oD7+uWve~iH+0`Oktj7j}H
zjwr^><~9gBE%p*kZi~I<+kvYgKC^V%YDSs7btry8u2+1?@{}7PQzNjY1v17lq{@g&
zm$>7Da2c7LG8))JGTN!v&VAS;6d!Nmr^lOmEpnSR?ej$m>r!>v*H>i7{AS=bwHgKf
z<jJ5}JuPL}M`tyxL_)r+<a}skvo6lO!@XpXoEFHOiG_&*ioQ*ypI}(80jv_flSh9;
zZGd$Rg;e+9*mH4~clXOHVi=5`EWQ@wRa3b0IC7+>C^%9r4v+FyNb^>WaB1cv_xlLw
zjW^(^B)d0vklP{QFXlyw4ReCkp{}1Z8+i3<I)ip%t5-O+J81pvR}@%&x8_7#<m4rz
za2}X>;3$Cf#cS?wmii)2DAY<}V20$uv;71XB9H(hAYY}3zWALmsKfy3^Ss&$Kt}t&
ztiZOn#8brk8H<~RBXVOQyc54=?^%7cop{4->gihgGVa)RYj6#RlToOKYO(RX=hLj$
z7q~bX;cwc4ofkW9!*54&GbktC=)bR1-glk7I-b&!uOE;Nx(^IT8+xVP79)U#mex6z
z`sBcEb;86Q4GE?5+U0;OJy6nQM8C)uR}38qK==KAOCEX!+4GfA@&0<d`jI}fBQvON
z!l%2vdFk;&MZGg;GsA(B_Qu3topcXnZ?*uPRKQI3?{v{Ok(8{o2q8_sGRhHp{s+f2
z60vx6mHKH@8*#|Ucg`~bdw}ok;TSV0BX7^cufhF2=!D!20kY%@7-^Ij24Ry4G7A1*
zDE}!2j1&Od`Vc$-1_Y_fD~cz7rhguiR5Fe?%;#oL{GzDU<~|eSOPt&C``im>b2iYr
za>KdrVI0>GLe&40TIZM09hBi-cJUCYT0w<%n(WyF6EAyKCe6V6ROQd7rEbk`QDi_O
zSP2rd`*U$)IMm5>vTs;eTDZTjzXsBzkWXZJv3m_1`gMu2`Y<#B+oN>DFv4~M=li#n
z+H2*Z)7RJTat0QRO1n&ki)-KeS_pYH0aG;f(Y(xA*)gHMEqKjUpaW{r1yLh{$RW_K
zw)8X1vylPMhJW2A2<@e~Tm2+I(BdVHE3)F<S*6Z^P!s=9y(KVNQt?wVoRo*+o)?y)
z=HyY&2s1lx4Bc))m&sYHX#bnskXme0L6qVb2C+}-X_F*jCQchX7I~xzK@T;r>AZMS
z)o@`sm^Kf@Fc*Z*GZjHeeH(GjQE8eT783j*?%zjn_c0K5Xg;CZ?KLHNEP7~=5(18n
zVZhHZu;c*jtWw|-IRDQaI1g#h9<|ejwz{<Wm8xW~)AzpcOpts}73=gi2`@Jv5(O$6
zeSXb0<TZmwv8Rgj7YR`ALiC+1Uv+Ig-i;Y&-abnM3J?i3zVZom(XNAs6-%==&QlGD
zov=WrXsFF2F7>J6A(8inxwrvbns+<!#rR-%m+-54iAL~nI@}3<#hT5w$1KK_y_$V^
z70^_`Q1Y!pRIqs}P&VX_7E-HIKna2X_5a(**76GT6o8`uqO5_l{XH;X-l+p!gAGCI
z(^GWI_Z|iDmHce9t`Yil{8?5{3TvhVAxvd<pI}Ax=*ACj&N9yo8oqcJ_Om?tg&~=%
z#|Zi(=*J|#EiR`+RTC~=B3DNx-{rVa#+7CY!us_L*=uR<URyGw8iGyifDIAg@Ow2p
zuwS);0gZv#xLBGXZ&Iq2S1@b{k`#-PQJ7I09f$>DP$~bQ8hMxf^<H4!Y0yTsujEcU
zcT<+QU7h-zu7HNngT9vzt4$`ZYpGcm!dnV;K2ogY=^vHt^h&*(@yPSbHXs77FxxAr
zJQ3|U<wu=S4$al?oTQ2)>u)tgd``<f+OYPrz9Qngj(i)mklPMNlqUIXc{gJNql*>m
znm2#<o||l!?tb0}kw{Q2*}cK0AnOM86SZrit9;U-7+4qp%Q*UJ9Y`epoyjuhARy`T
z-lUO3l|lHMoR5>Nne`^O4*TjFZmfM@;NimOXca!;?NdC!FG{?8B$XCH_Y_10IkL&L
zYCLtHS=tOp@mi~p`WjgaiLQ_}eVo_8m0KMcA7shPK2vq_<gU=E%xkOkgfi1W!dry6
zCfRt5i(7d1zfhGePnnp&-S8j;Qm_+!21j5hsQ}8}laHc*r7D2TZ1fIEQ=VwSey8Cz
zp9-Saa!z>(97h)VnaP3v?-!}bGD5r*Mgv|-`>sj-?3T2g_1E($JKvUEYDzt+zeqr)
z&aFiV|GeX5pG#vFpf3*J#{N~TeD|ahe`jNkI{XdpPJ<J$mX9y2VSF6I1ZZ4N5#rWn
z<KD_kh(@3)YicR51m%d@k=<nIOkztk2J|`r8YNQL2G0A_-k3anAimZe|CKKg3Q`;|
z+n#UYT9VN5D%(qAs^Rb-CRsTa;nx^@4(D$3A9u-_j@^|-Atjg@RzBjb-RSm7jnTd3
zAcdFtbdLH5&!>pcR6OlAx6DFi&5UQbD>bEW+D>8v>GIPjOVokMwzTsTjb~9cB6H=T
z_+c%sT53RFBZuZnDoYK+x%_Vn{%@9kX9ahO{DK&V`*mWqNGSx7a)5H$KZ#lYc+4|U
z1J6LS>h&8)B>eHgJU;IknsMeDiW?F$xD>l+wT9R*-@on}tuk0T(=7HA&y!f>$7sr}
zRtLq`)9Oic?E&P`7J-k{pjU<>kWQGmy?BZd%40d1=-0&7q>@+9yQr)$kma;9HzphQ
zx%xbypD=@;1MtDc#DTBvdWcYs0qmVXqeRKKEpQ<#h%5}JrtJ-=6~shJMuzn-Vw6tA
z(9!_3DOK7GfRxmqAZ$_<bT>(5$eYSFIyuu21*)=knImVcFZ_TQ*(-w*O6~lRw^JgX
zK5e_TNjX~YS4|l>7&A;Cp0jr3f4lc7|L-0uz1U-$D=RE_2T*qULdb$_;Rbli@MYRU
zLwm!Wqn-MRbocdW-KZ<Gj#n>{7bQEV;3)`*v<0VD^H50%p)CXw79>R*1~?gmNef^`
zaL7x8Q~$oy_^zb0<hL<OWmOOPlt9IM*twzx#Y$zgN8AG^tIs!&APZ5fGeWMvHEOeZ
zsII+R;Cp8K^q_|KYl{eCp^7(mCqhM8IItvKLdgiJpBTpB*4BNpvv4r_ow9Q6cEhdb
zLB}DRB@My1MiiKVN>#+RH4uwAJ{IxzRJ_pdYMl!+zjTK?egk2T_!7z|tjRH{nZt>I
z!3hvLB5z5>fYSlsvS+`r{=VNoo?1=3%BGH?5s2%CQ8G!^a~hvvq1y^Ig1;+qh>y<}
z`jm24ZM@w5`w4$8@YhzdKoDmpJq{Q9cb?EUNmtqLw+rzH-%ur)pTEn%w&3MeJ+aHL
zKKE|t%MI$N5SyL)7juz~I<qIgR^RKdw|2<1e7cQ9t|=w>X97`}pfDpD{LgF?2oHVe
zW?(Ss0ZfpP@7&+Dq7>si%z-DhiSp`^8!ZYO6J;nuat~UGlsaYpymX^vgZ+1D4kp5l
zNR}n7R(dumhx<FV!4xU!OK=3`(+4NA!RO)1H9GZe+!sfg8FqFnevBpUAz6=h&Vi}6
zPZK+}Z7q?FZY9Xs)!Pp}TfdDxd=?o?e~tj9E(eUfNNNu16d=VWhcboy2Pypl19=00
zY~K(U{{JHApL@o4<JqEzT;6F2?rM#<Cprm`#}JC?!JWN~E4R0~)_&Y$c=+RM->Y2X
z<6Lsxeg^HUmNkONZ*;TO;G9~dDM@Lr^u%%;hfGw4*=HDs#)%Bqo3ylfjS*xQpoF|6
zG}X6Q@iKD$5sv+P{;xcAlCd|RBS0C+0V8j-yCERCZaKh7Z$lrqA2FOa0nYujiV@&H
z|I=hyhQD550!sSQY$o!Y+fd{}?RPI{ts}_$Ma60!wMp?>#*CBo^AFT#WHlR=<`tj#
zXu4Vwe0`~YXvriLble+B@pQ@eQeg}}Quj2}&HECvNI!N{Qrj(Uo^J$MV(UC}ft}R1
zD3Lxl^mfTWkr0r!d;$#UQzyh3p(@Saz$4*+01Prn5a&P4mO>0B1AzJV){Qi@F3>6d
zQ3*344TGBdkUI^uk=1*1FwDQL#%a#ppdq2&<8m603Tg*G{`FP`C+tOZoe%`4LvFNQ
z+lJ~{<eM`Gg}EOktQBqCv9elD$|empJFknVk*NwhpP_M)jn5mqo7YOI=9^t>jK{w^
zX5)(FCFGl-Dv1}NL~2l|k`SddI$rcI#qco#d~tW*enKl$aJ5soYCbi;@%_S(;sek9
zo_T+Asw$@&*^S|<L<Ki2vUl5Qlwt3@8n%0q%D5*(sk8}<?~CQB<5B32(e&S!bX^a$
z)V6UAQW((rb-Gh9LLCvWzf)Tabm9{_L$_BoAMUn}k+%%vgMs`j-eex{eVSnk0R%)z
zEz$yAK$Nb;urUE_pij@;{u`Qke8i4W;Pa-<T>)>aC>4);T3Bewb6ca%UQVmXew<Zr
zjS9-NE$-)!pLl2N{dMxm4pwb`_c?Pxz~P>1I{bcAhq*F^iF~!53+tv!9!(z|+<4mG
zZd3D1HZprHQif*rVGT<ZcC<WoVQy7&r6n_<XL|A)sMNEc(Rq7HD?My#-3c=vAA~!l
zfUu;zDr)@nNZZYufwCftFw_!lo}V%7zzS1P?Bay&e{uNZBd&m2>&{k38Y6<<ZD4(w
z0(*>U4;Po<ZT@m|O&{W06r>s!)gQioW?K}yKJx4R3f<AeTzubS(sj@5p0PV3$(h8=
zk6bU=n=?gCw>igF?)j&@vMoWVetCKXdsX4So(74`pWOYK<&APvspo@(z#XRWTerZ#
zMoM829P#hOti#~30C?NHKPb_=7LU~L$2?<V-Pu{mEj4_s`sRs7-C7WbMg`4)G{2xj
z$fJdDE@CYz#NK>Wj`N)))Qjlow+Lor<5rYgbtEy<B(z$I%p#U9=$gutGF8sBcNYA-
zgj4#iz@~tD88Pk$bys20{>=9KK=W<g_$u8mEOJ3oCMZ(wU!tlB!^H}4jfCqkqx;^b
z0=RwIo>X_;sn-cO|9DMeW_mdmf8#R4$BvUz_g<jhF>w-3Itm$1Z!_7ROh=U{+H=R5
z!dWhi<E_QIX7#AQBkoC2Y_QwKx*u;)gY^RoeaUJ*CqC$9;oy1a4U|Q1eW*Ez=D>&8
zJOM-|giWLrDUCi5+b~GC03_@3E~mdbDZu{DiUWeo;7qK_(u649ch+D+gi?#MHp?W7
zY%FYLe8>1mqSda<a8w4h#+hV{TYjfYfz%bo$j!{uaL4f-Ll50jFkKOLRQLs9cp2sS
zf{pJ1r2d1Hg{g!$pT(NedGXbuf(1(BTm3i+<N)&_frA*ySO9@rI09{AT^KMn0PMvj
zZqr}!kA{smuhKP71NaBX1zSXiw<g|g@V0-!+wvw0%n$YWm9>W}8}`K!Z;tP&kh}V4
zh>`A!`w%bmF>zWb@=<$j>PX6(rO91Q)`tZhk2bYzYgkpkG#tSie!6eG9E<tdxhtF*
zh>{_wpI-zyocdf7OCT2pKF<DsQyne67%Fyv>LSXQ0LYI0De*`YhS>`USxFdU@8TRk
z)9F!-qgn|3`6_r<r#a`5qGb^+)u~9sck5*zLVq&HnY(i8owrIlHs)RHA<wK5)WU))
ze^VZ)7jX}id`(^JfA;>JzMtP9`H{|Lu=?BCn)chr`i0S3XHo>XsRf-ifC{SKDvgI4
z8CX~tFfZ_bugrfC1IGcty`*(CLtk!_tmVbLC((w=#)QR*w&2fx3%~P{#x3#|D$Ysv
zG?A^7QrS_p>n`LfIp@1+>AF-VVo8rciYIA_VQzKb8jxe{-`+Jd9pYxtG&;v8(sC`m
z<XN4E1jqi`sLmeYH*%_TF@{?4Cqv@z*I2^}YwwpgCRpR9z(GF!RO<|JLX<>W0w53>
zX*=5HMlqb60A~U*1L$u)2WU!o|0}3Ws4?cnBf&fSR^7OG<yvtki_G6$Z^XXY(&fD6
z@D{gdy0Uq&&C2D6w61cle3D_9cdr9JcBIF!VNFm?-3lKS%u?mBI(JC$<ytWt?^;?A
zm|sG5N^1(}-8UI?74O|m$kIi<JgZ;P1l@$1%GPMHfCU(_)!-0xvkZ6wL&pWsF)e6O
zqVEhf)1TH@4FkM_Irh7LUm(nxFF*HYn|*n;D!VwzXP2}0J`&}RKOK~heX&KT*jHt3
z-~g9hif2k3+MJhx;Z<ZvhZ#Yxn*^<AY-Xm-?UNw~gq>$roB;)YEzspc%>&rfei>t_
zg$&$RCrs>SKB4;I?Z|d01jr<S(H}+2G=_~EVB1zgeEx6V>By*jf7eW{;xuUUK~h-@
z*zjvr-(%G5$}RVRVh^pk8+?KT#(rLO$g|4Xr!~;%)Cgy#y=xAsr(jkyh>q;*=;Y5m
z-NeR~mfbSZY12X@$gjX`+`!aS-%?m-46&NLi>hzhMd?FrxP1`_Y+Oqy|NB>eWIwP}
z9wIG=HoiFw8V`WBC|vLcoi~p6a;4z5;e0pKSF40-oowRUL3s^mfZme#63((fikBx0
z<A%<#+&7Ti-*c&y<>X`N_PDSa<&>1=cmvr9CVdiE4y${}pq@r>nOEd~o-PW^EO+Xh
z-B+ym(|??aiqXT0T`O5jJp$n7TOcrXIN^iC%19z$2`f_R|BFzTFmSv8oFEa+DX>TG
zPe6r~JNQ1S|GcD##aT{h_@myX<CvbTip%{?8@~VoAoV3P{!>9Ks(&uJDkx9wio~(L
zzE&xuAHQcmRO=_Jb*El;%JG52qa{CE7SWGunR!3crpx1it=qtA23Md{?=8-Y!EuO%
zK>^`L1dcf?-fU7r`3$O3e+MoAmg`r8!llvQE_e+?$OjN=y$Ja6*L$XXd~*Gmd_`<j
zbo`QSdGr~7amXi0s|PI!sVaSiHM+5;7RuRtUk)GSXlwAnbKnUVB~;nz<xiN4t@KR-
zhoNzw_1n*!cRW_~tVb6)_Hn{OPjc^VR1;BJ3UAX@ZSj3hM%`JcbCZ|u)<14t9BpC7
zZ~Qefiz6SISW%&44N?Qj17s}pXcxa_69dT)KoT>F5&kX4192%4@{!y&Wy|=eqQ={d
zkxnT>x+?tr5z7;;Ja$vQ+sDuEuIG+h^giz7IHr9XE9}34TCGb)k!WQ|7(>OyYN``I
z<!fV8JZ$rm79IFLl()?gj(r@EuBo0|1;1^1&y>rq!Q3b;ABVK^SVEVf<B3r`^@l)-
zti{JN&AL4I9PXXqD3L(`ITH$IB6PyS|2u|N0APJ{z4!p|p#KbL5<S9ixUn=ETw$k3
z7-pIov>!aUXes-S(n6wJK1^D)7Pq9g(eeDgcGC6k{DtdyYeY|VbZ|orZ6~8?{XHtJ
z=`Kf(O}*g_Pg$qx-ILheGzT6+i~SzsD=_2UsB<|J56j1W_5RpSm%iU`kI<PA53+vV
z2HA%Zw|yOKSJNQ^VS&g5$cg^lzxx<WU|b#)xh(b(uuLF$w!xKuswANJwf>1U=OYOR
zLst}*pQKsnzG?CN+L$35`9*;q=W(sw%lCI}iMbn>aBADanLFbVSoPgJ)xqmRGKz2e
z7ujNy2*B^?zJ%rTrot!uticM*y)|_%yg(mw9E*`xqkgcj8s7pBd4Up=TqW$@Hjv-m
z2<iu>MS-Ff{9oqh7lu#>Ak<w9a0M>nKjHmWN<PV~IqJ)a(MKC|a%nQXYsBAO@6eAv
zO0~hm3ih|K<|DROYxriZ(G$2M-l*m($Av9W!*qD#LFBcI;d?w#{6fcpIhD+$QT;^U
zPDsPtkc9$?2%nc~QcrR8>KV^Bh)Y5D2?*=m<5ku|H3~98AxQr}!Pk~!43#iIwS8+r
z9-#X3ML%Daq4s<QIcKQ}-ahbDFD*C6wk==}z3dmQt55RE#+#iA2H%Oyz5%-1&qpj$
zTgg+`Rqy^|j{X`W_sHi5LQH!Ba#K>tFHHShvB{6VNCuOiTJa+c74G>s!_vfgTAS{#
z;w=e)_|F{f3G>N;B9Yz5cBlvX5Io0F-3F+l5AW&&4&LA5nOE#DA)ept<z>RL#S>D&
z6BB`7jjbrDBHrxKJ=r?Q4wVcHj(uEY*V;z4?4?{A@oILqYg0uDKOsAA;>ngYWWc2A
zizN}wmJIo!PD8N3<Jp=osw;}G=U04rG8-dT@yts>RDkBl#3a012?)xG5TxkK_BRIU
z&Yu^>O&#<1%J|cif(Mo0_j9gVeelt7>Rymyh+@3jc*$bzn!)WTY_gir)l}d&$ZO_v
zUM!EJE+;xmRs;*XWUSx!L|y+}9Xc2!O2NBtYArx(E7cHeKS6$6WmL7w0JNsPD6ndZ
z^*6gtxTA6@5KAKm2RX+T?!m*zm_eXF^*pq|2pF3P2z&l(qrMBE9YII={+2^2j~ptl
zb6pDq@%pH2Cp_FV%@%#eS{!CKZ2FZym#1UepVIMFs#?gcknD(Db@+oG?4#7U0pezP
zQ-NUhm+bo&bMN%8({)uT1b_c&A)x<2>K(-^7-*9RSl=A6zEgAD3uI^8mZF`F<zKw#
zd&ENuk7e-5)bJAz7}Nev7Sv7}sidZ6{;z`r7sDt5FwPFjd<3$yz(1P&eL`nly*(~i
zDAiTM)MlOXrFec`RqvSafdkj!#DI#y0qsSO!?(5h5$d@KYs06G`9{fM!Y}H72JzyM
zJs~8g#}XBsUeb7<67=vsYf03!&*o3WfsfQRGUNoHe;ie{Y>$wgZfMiPSu#x_G$O>!
zX2nx9NO+Hhs_e9YGciGf+L2H<1+?7}U?@ca%A%z9Wwb~2=TA1)Sk9SmecE+-#G7ud
zi5o)nZExqf%WW|cl5i0UDRV@|?&?CLukKjrV$1Vh$HZ!gEA{J@IVA$4rnjH+Np>lu
zZ?AIgI^B8I#82gW8SE9Pz~W#wrFH$X?;TZ$NR9m-NmeBHkwVG+ND%CisqA5;oSGF2
zBNp~Qc?fA@44oK2$8+_`7_CTWpQIEn;_~Q*$9{N`d84Idl*kvGx3&@jZEdMGhRQaK
zJDRWUc#N&32=*mky%fwGyPXP`;JAW$GOS}SaZU!Oj7Pbxw>o~J<kjH$>T(0AtvfKC
zwPH7-w3Ifd6^9H0UgS9#sMO4RM>{_ZwxH)x<USgNzxoCQwzY&xCD}@?r1V7aAUO#7
z-v*OoNW}qCFiqV#(1HG^(ioH=^H$NIsp#|SCTWcGIA<Cx+II1%Pm*ne3()0|SETIr
z6uHSqSGOZmlEoE~e^8g<{rd8ZB3Dk}x<3s(iI;`nb+A3$5;|=E9P&^o^Fd?576f1B
zFhcCt6W&`o8`VbHmOSv3sy#J*q0?!TEZH|;6B5FBLYz1fe+gX>iGm$3@i2^$-k(}c
z4bqGx|L=cqfnj*>0laom0@{Gr@W(p0zrox&ZoYhd&cvw7)r;4q#F|FJBk)dHtICN$
zuNa$FIdl6Hqez5}qD+Y+SqY5|&0`$j969SxzO&B8sgH~IQh29yNgjz-9O~jkno6%D
zlvWB(cS_z-hcD*r)Y4S3<q^N2n00x*^vH;inGkn38&|eFA$1c~Y2Od@y$~T0K}!E}
zS^hK_NC^P4QVp9Lofzb5Tj8VqB2&?wx?`tnZ;Kd8sv_`QZ=lD&kJU9V^iXi)_v6n|
zbd3BY1%&Dly>CV{VHOg#A)u9w45g$)9JYI@(K9s0TdmjRPP|#~-&;<c+`N%CT{VI%
zj&q*L83g+IH-lcZ!N^;HOxAZoNMAPIm1shYEvnK<5z?#)YDNIUy68-n^bHK8BmfyW
z67uG6CW~U6D<{-U3ct+bb*H6i#&K@0Yg0WZ)lv*f2Iq7eubqO>h5!~~xnb>H;^m|q
z-9Pn4yjCg=<n&S?_Ao|gC>4k6bxD-4=_{v@4<GKYagxxbP3MjvGiU*+bGM|vC9kD9
zh6J#Y2;poWp1w7%Tv9@UFRHRyK+RpS85E?}4?@RGU?vRTeSlB*4)1MrySbFGr9I`H
z1{%gb4n8_mzSR07_I8(>cQzuk^oy)ia)+sYKYy|PC0AZSsWg;>m_+$Ovd(jyruKu@
zIzH_FAiB=^n0ACVp|cZDgiK3V`%6FHnw=(IY9!Cm&galhwmiJ8@3Sm#{2#Fp!W!c@
zLLKyCX}&IN#LoweBu9~fWXS}X$tX3^lr5|nN-2P{=qO$kIMM&u<F3BOQnL{pnydU<
zAe2Jiprj%62DOp*;9_85*j3w0tIf{{X}rkJEVjleCtev>#!mz$-md%)?X<mE9}tI7
zK2v0ZeIsKJ<~=$c8lve~rSJ9g!&hK|Ue>t`dH||%f~Vfhs}~PLTfeKahM$>O<83@k
z$WBF7I;1N>JD3DO*!2H4w)t~l7~ufp^SloSfAu?o)as2|+?nDjwP4rd!=}w=PGIl&
zUmAt!FYjaq#F6KuWEhQDpK{##IJCGjE^+EC8Mqj3y}Z(egBZQ^?an$J8<I;jR`XK5
zJ}fu#Bi5x~$j@n9ftiG?&e@U2ia)kJ^L`C6EJmOnG(Jr|<X>wJ!qv><r7as}0h(+O
zk!}A9SkgQgK52kYMf30$5J>$={l3)Z)PL=o?`B+8xb0!nBbeS?AJ|dz2G=*@l}mXa
z84AZ$>$cMMg46O3>h%`{>7(M#@ppd>E>op(yGV|Eno``9`zc0>m3C)|bHu~8Hdb{k
z$9d+5BCtB=kSDrWt;5@xcd=Y4W0f54-~z%D4ykAgz70nRl3@co@6dI3umA>527n_d
zXWv5SKX^DM84S`ow?Sf5T5{8zADDt9T*fnH!Px2iJqmZ(7IRmViW>R!<_wEwE+Wn*
zOQk11x62y^l!Q2CtcTxdgKkMREh=RFNdMsq5wguCRh`Ljo;m5E?pr)siH_C?_Kf6B
zD_25&nTNkB1e(~rDylkzKu|4Vpq%<onV>}&11Af>S=9b~2F$wt(G%U@`!#sYeyvZH
zlZ4VHxX*Jc^z7GH&{f=TTnXy6@S!8!qqGSDji#KG+j`EStY!<DX?9*4X&wkUHl_4)
zMtLHiYoR#K>AxRsc9S1<UIyQrvf>XJ!<F)3f?bLW#y17A;z=%oNLNvn#vr+VIcR?*
zu$dTrHH%=N<N&CFmLl7~IX~cF$#v~GI15Rg@J_$Fi#(u>rZy{LjDa6cdg$q>8oq?3
ziw0KQvQqu5tL&!bb9E{)f5mW<QE+%|%dJA>QNst&?hmjHo><zZ7C)iil%5`-t4j@I
zF-p`}JQKBSoMpws9tKGrqAE@AEA>Mn;ee7odf-m_9tKGsK$_0FdGvQSkz!mUD{#^x
zg{&lE;ab3QOP+VYrT?4iuz@M^3Dl0VrHhYNrVV-f3nL<%I{aQ0{qi_75L2O!j~LFI
zS_k|2*o`2jEf40D7e#4-OZ-pXPHA%B3Z1TItPs9--l-KVZ?ay+`y>DoAV5|AW`+al
zgYN!j_`jQ13d5uTFsZO{7XfbSAF;vO45I`|{LREG<$G?2#k&Sueeo-y5Sr;kt37GL
zNV%COuI*og4rpXwZnlaw1UiZLxAidE4zj(g(x~iz^FN}_!l9|Q4dWY(?ie5?-5n}D
zU~~wQf+8s?sdVSS(TH?PONw-dQX-)Og3>9i((xUA=eNIrA7{^b&K=i%-J8oC0YJB{
zb1`Ur&LL+$I}s6A0j$GVpc!807eZbcL<Eiqii<xzp;++V0bz`65vZ9__Jt!MAP6R@
z3hE=PfJRdR(2ld5?t-KKTx!=I`)VU)45pp!S~VQtL*pCELFFvJCm-m|53y7392CXg
z_V^NZhWl7%_P+2w#@Ye(;{u8%O-_czgWEeFO?jjFg=_Q<j=Az^l~v@i_X?F;Y#XB~
zE$`H3HXNt{i8-UqN7p!AtU$b;^AA1Ua}wYhY_<iDQhw=c3Q-|KSf6IFYd`9cDWefp
z0mR|=sZ6LAq4v;{h2b{{*ZrTX$P4Une6NGX4<H#}c&X>q_D2dt>?ICTld3uAEi;}C
zr$2uPPZ)Mmj1Obsee*|{qDt|KA4QrxE>kSH%Vj6*89;pm#}WPoUd4Xq5z4G_;;k;H
z5`ZP@CFL>u%2T7yqi?auyQfaU!Ln=%4yF9KEac=&U7F#VfEC1lnDXjqOtn7;kNxXY
z)HIUz(5V5Z%fhBWUW+{&cK8hmhtec@*E$pXG=(ae?@Ln9-xo7%Kfh<vy|@p~DJ}bM
z-mkQrI7qJdWwyJS`Msxzn9vHT^sVy{(4L|RGbKjSfk@cH=AC_Rns__IoemN}rb#Vm
z^DQVv*UXcY*FA&)C&(HbV<5R0ct7xxVFMvd<V?WI>Yo2N!P;m}b$~O*U+XszvHUrV
zEA0%varRW4BQ>YQm9fu4xIB!$Z9h~QV%knDx+N{TqyzXI%<=F1GFlawiQ|0GIC6gL
zPy`r^?ag~In?&D;P}>0umZ&j};9otPrLKf|v*m)-{mkW+Szy4IET0irjbxD|E1?5D
zfAT|`rQ4YsoJz&ErM1D2>!`~r6by$2BP>ucf443gQUieenk>TkUrj6Hc&6G^NSgV8
zDJXL|HZ~?WjVCpRvyr9E)mhoKd%gT}<;BNzthd47Pg#A9VTQ^`z(3SCo+fT7M_P(0
z&?a~lPmyFsX!MMp=z+J1kowKHj+_meKzPbe*KlGE80zgfc{!{i3<rCTCb~BU!O662
zE8BMbGA=M?5CjB6bTLJtPNe~wQ1j2veOzD;L<4^w<MOx73gj<gy!#X%aHp|5v-78H
zvpLA>{gm!zu|0_*_(?%Avwy$Gsd-a$zgF%e2U0C;+1|*-6!$yXl8Ez1TS0o$+&2VK
z1y7%|YJ$W^YGj!+fu*Rrh=Xe9*`pkwf$3j@lvTyDJ?+^~1|*w!;Mr0TaUd5zr<yLa
zkSa)XAlw|)l99iUX4C>0E4wYCP??j~*X61b9M((zmZU|4Ph3I279-hs+PpX#=4_sb
za?MEeGPw^^f2pt|C-}}m;b_>mNcH4rrBAzi64^NK&J#w<UZb9n6&_(a3*`0>{u`0L
zM`VZ?G3VL2M`^>$M0@eFN?6Zc3zG3JrJX>7yFe?0uXjV?q7=A5bdMYWp$_6hG@Uj;
zr+bUs3oxhqQ+qkN;R*I=eLgpTg@^rg*c2LKE7(SG`n~g>O6HU1XV!$7-$D?pKLf>%
zC-Hd3Z^O4%S=Rdk^NbM`;W3S%TB^t7wd0cD>ov35?}*OF9KtHa%zR`zQ!X^hmv_$R
zj{?BySR*-edb(jZTT14ES-x%-hY%~tC!bz`b<Ly*zGz@8uwj251A!SFrJe=oBVB1&
zNJ&AMxEB9$cblWR?*iNpW}^T<=L@H6ag|43dx$^SU+ZoD^1jjamLI3zn@%>Agz-u$
zUe29zdBJ5w7yHsz?t6D6KDeCnDTbY;cbqcy<+5#dm^`rw>u^?0nHBGp`O~q`SS`VA
z#Xh{YqESC5V6~W;M5~L|22dib;X2k^K^o@v{AB5lp8?kwvn`c#@zV^4vM`NkY6e3r
zP|r5R8qKH!FbcR=AyIcG&u-X8ln%=a32tW1CD&(<D<ZCcHwW7;$Yn0Pa84cjg3FeZ
z;{lo#8~JX@WccHSn<zf3s2+t`9os30mSsIJ0N3nWTGTHn^HFrKR+2cijt`V%%sYK2
z)Pg2Dz;maQn4F^&%OLw3b*jaED*`DEoN_iCajxWASYEw>ucjtx_z0{I5EcLTDCO<Y
zn7RPwdx)LaUvJyasPT1D$;m4d+)KZ_ve8O<_N$9aoi`Rx>Ute}M0lievsd1A8lIE+
zn72e4f`uuT#N}g;k(a%<PKh4L_8`BX{(T$&8)vgqRj=-RP!jm&N*?tnpSx^l-^Gn4
zM*HzjYj_c|Lzl61d1b{gqUT~?z4TV~b8GCJ8juiYUVW)O3=+yj3MM1f`6pR$LWAA|
zKp%aT(*-W~zmkRQXNYz8MArRB3tx$sYO`nSS2j(a%ShZSZ6nTjua{IZcv~n`;p$7m
zUXa9`I=N3sVJ{5hG5Dy>-}*I)?M2<PvHrux)T|kN5b^0t7tXRhksGvuN0fAKGzbSE
z8|@NDb|`6<4z36pE%dAqusvrZV#Agl1Gd`d)z4wU3B$-mS(qUpRHoPMg67l%I6-%_
zW`GC!_iSGC)Mt|hzukB$J4n!9ud>4E17$pHjH)b3zl+Tz+h;CGJ*_uE@v&K#S@<N;
zE^g7TlvQ1VWyBWm8;2fSCf{VT22O8Y2`3f43@vQHT3KChY;P5CMi~jW6uD>Guq+OY
z>T$X^-d}xc1n)Wc!S?(s0UM6io#bS|9$&8%NJdF9$tXboS222^LG=Mpn~)E0{-&hB
z0?i2ltsaQ+@R{E`3j3%h3<^QvY$>-=>XI!NLM8{M7`of7+h?lPiG(xxW(#_r;#6&s
z$Nf~L=pHv(Dwll|*yc94FP_}vlU#tvP`_i_fX^)Gtkmkl{M1VDdF+*l&pl}HnM5XA
zjA=`Jh>|Oa*wR|WD*bS*50|h@6VeYtUGMT<Xg&jgFN)Y<;jf(p5ZU$uio<A+yyzVg
zEtS%#=c@!$iuvoz?-ql1scO`x&Y|wI=}QKOn~#O#J*z!bz?Q<GFrgWXnHP`Te6*kK
z!|_?acy)QkWNxJI<&htT0y8(7R)S#|InvEw=;oOaONX#Ejx7@iKOd+!?83WXU0q!x
zAZFB^>4(NL{DYM?=JD5yw=?Q(kjO`DQ(b-`<K*Tt4C<`KJI6!IG_^cD`!`8S8)n2o
zpXFP=lKVa~{o;w$-XPeNpC^HIZQq?>{xGDuI7%kJvQu+^ub2FI;W9$`Xs-EutI+Xf
z&gPl4LdUo@j!^<g$Qc+H=7IywC&2X?_OC`0h~_Z@c=|K&n}KNiPfomj)1!lJs)O|~
z?8vS{WOTS^0O8Ale{XN~{M}K*!f8fRgiLdke|b<U{l#~Rau$rirC%(GRNm6*&mO}J
zTfVapnh3h`ltuc=^tE-6SSUX55^#_=K3O>tSi3?Zs$=oM%k-cdi+S~?Suhwbs7n+1
ze~-IRG?OvFG^8K8{nv(z;<J?T9Tt+t_E(V6^IE#(xmXy1Lu6D?f7*gZJ0YT-_2YbZ
zw=(=LX$r9@_iV}9?>0g0u3g5fG;2<Go++Wd_~SPpxl?^PA#M7(7ABI@!%M$*V@L1#
zt!-45(yzhX07K0qVBV;S41_6)q1n~<uSgw<=D82>kTe$3{I!(njQV&mlOA#~>RwFu
z#QD|vWCJ<QT?4}2(PTVt5(#NR<?M~8#^)D;&66ZD*Bsy2)5{#m_|`Mpx12H!p#w`H
zf;4aONrsgDa^Y?CxfUA7#{!RMHU?Jan+0NDS0AT?%lkky1bOwYp9s4kgk2->k$;ly
z7&MRx05sX>{T-DeX$H1qSHoJ?pZ^4hG~R6G8(w;E&?U0>S$r+r+4kZED^Bcu54?_B
z58uj$2pnQoL={bZndOH=t*v$Y$hK;|ONc-0>(O`iobho%g~Dmwty>}|#e-IUNoLo+
zLZO}eE7)ZTAU2!4`Wh@aY(R4Wi40djeN<!7Or`+SkG4;L9E$&3Tt*pGC7iok@QU-M
z$F2c6mS5+jI2j2##l~VMn_DGC3_|EEeJh@4-JTg-*9GrdyBX69>E~E{FgiNuxV8Q<
z{9VHf-__u?TVHa%VTZSCf7xj(eTM81^-P;su`}%JSqkk8Siza90nw;AN)-!3fQ=I2
z;gJ8EaVMg&9spSH&jhXhWs{9xa@0C*>I|i%E>Y(@O|&!jPK3Mo(nl;s>uv4E2XlAa
z)(@FhBI}Sb&%UQzL#f`^Q6>efii*vj{av0L*G+WVjU+nqbN)ttXnYxAb_ZCF{L?|s
z2MUcm<Lv1qSixRe0PzFezu##P5K<Kc0UU`@AI%qNriTENrEjnPU)L+Zx?V1be8p}g
ztnJ}t&)M`W@v6Z&M3BSn?PU}g!yMM{Y&;lsM8dqKRR#?&5?u~&p_T56qW?&{R;X+5
zX|2^oBg_Z=F1h<Q=bgNukwmNWwZ4^L)SWX42_|Ue8Ph~3?Fx3Q4hUT2D7E(n)`dF)
z>jDk@Yj>ohq09g%CwU@MKx*?R96p^U<1~+dc3lhcldP0B9V56lX1C*UXloZ*Wb=4u
zDNP*lyi>t}#)#;=CE5?E5KZ-i)FAn&;%y9e>B&s-x*T%ZFE4JP2<sa-=k+Vg+p2U8
zzk*UlPJg^)<$W>!;5NZ_%(;auRtXHm$Koi}LkmM{0xCX25G(3nWud_y0bn}{8x=qd
z{O5)`>Gd-Z5GWZ~_bo}xcWBb6{N>2!CB;Ev!KW72M67`Sp6+ht_LN-BF>&w%rLwkd
zUBTDggt0iSWE;c&67GfY<TmoI1oN!BS$f*s_sVvv*lA+yi+9=tA0j*KS1Kn?1)#t8
zTl;D}Jz<WS(NcX51nSF_!6S%Z!tenh#sBC+^3ZhV03CjopBXp;m5f1=hj>cG9`at7
zYl`Hei%>>EqTVOhpWf18#8tbF*#4aK)!O!?FF$tCvLw7X4fU{cFAiqyrxTQ3r8S$n
zr|#3`-X+$3RpER=7u&Rx^W7^EQT@hw_E;EbzA$ge41LC_eQ3CXxYsS$3=T5|>zKQT
zP6&I8h=7^E!k~Y`V)<8SKnnoSy8Au<U#%vPEq;NQBfnL?EY|AV*q$=qxY@+>;fXg<
zPXv@a{i(}X-3rE!44WVAp4(YFfg%PKndcq%Ps?)zl-##p24l?1-OU}yEt0z>*gn>j
zS80d`Cm=Ylz}txtr$Jh%X9&^>0x@}rlT4ohbs-~e&(AXRkKQK?2SQL@zKqe$R#H+p
z1u*u*L?8Cwa|D;7F)abi2k|mks4~1(&21Ixog#_a-k=MIShf<j+iyBW6U`lVf{rNo
zEJo!_mHH)=K7GY)za1p2>Bi6czL3T_@7*f@DaA+crxN9-#C>uj@jC4Lx+JpVHX{rr
z<ZgI7)w(o@lgOQRJ7<nkyhmPh_B#2{6=w~1KAQLhx&~J$)GcH5otGXMq{xCH%tDVU
zWOP@cA*}#NdQvn0zg>IgjQJ4K6P@*5ri7umj2grnw?}hF;gW%Q6!b9+vo4L_<Dyug
z@4!++5xU{Y<hl*Ian>6l<MU7Ti=2F-;@(y)jfe{trn-rSU3odcZm0aNiEw|d!jd!n
zdmNEO;yfD;FK`G+D1I^t#Sdeo?|Cm_zL^8FqwUhC5OtIqFW0o72Qje#J~g4JGg*zs
zv<5JfG={PM`P9U1Gq`SW>sh@FWD>1XiJGm{+0GsIr`zl@A|&L|ywh9^*CTKoxuneQ
zlkhr{I%A*DB7V*CqBvg;YYtP3Ms-3kBW-rw`&*kp@K2rC*1~FgQpO3A%AK5fgK<O(
zE}+Ue2l^Ux;{4+VV8xp&Jtv#yFUw)(+FklME{;<E5pWS2av@<b2I&2NsPb>ns5Ss<
zQ@QwKRGDBKL`Bx;JkhH0N;uRR$u<u5@>c{p+l@H+rSDG^MU96G>&`34pwez+1cY9-
z%^4akDl`}hZOx~vw=CPqQb&^(6KSn!Wn7>1M&~9;2B$R~rIhWAwrTVz96`GP=RLe9
z8^f!!9lHqc>iF_D*#!`%Kh=i60R}`<R|JGXDin-5n2l({#{gkoPVLx#qa`-SyaF@v
zdK*S=N_HIs)krfx2^y(l&$j5&p1qb$i-6sSd<v5*ndi3{p-SFS&$oCIrsA~B%!V43
z`96OAy|P+6Y25PQzHE|Zrf=k(B#DYdRhqT#D#`7u`BP=z24MfwcK~z~+2QiFbbaM^
z+i1L9_0KYJB_Zf09IL4S3I|b;k+L$g{2SlxZb5_E0-&-EWzqoXpF&`uO8$b*$7e6*
zo+Sj_(+pm8e3YuJMTCeJ7T`)7%jJK4Yc?$-em8ef*n2hW>b1~sS*@04(xy~5HKHD)
zcV*8KgKCpSGgjsYZ`lVmFvd>#zK;6L3m0t|*;#MssTG7}w>k$cS_!^TsuGj%g?81n
zHdP-*gZtS)82MPOZ`tAfAXX6yARCiM9nTIls2u<r=+tKlq+)+S-EB^#yKJTNUYOIe
zvTl<FZFP~|T*Npb{Oy&!m>%WM%g&XnD6_y7S?pm8iV=S5TC_5+%~Gr*Cb*$cqd2Xo
zmAxn&A7L+l`^wC*SWnkl8=r&fODQ*_Q_h@hc$-%7PLteQWC!I#-0qbXqtKrBhaFn4
zuouTb4zH=U2VRg-5{i&fV1hv*sI%FF=ClVmRmi`7K^bO9*XUOy*gc03MhDdn$6fhO
z7JQWlo79;{k_6dT)_FQp%OAksky!H-hu21Ty5`h8k(Jn+qi!0wauSf;A_-Uc;0=3!
z?y5xhFsq4<qMzxGn&ZCnoJ^?UTy)SA&(}HMp?z(G*gLIym&gvbq3N!bQbU%WgTu}+
zVCyauhzvosoMONV8NnbU1A~}Qi6i(On$`iJZPFz9@R#<Fqxbb~7<e)<<yfiLlv93Y
zd1&rANbdT?qr5^x-0iDtEo0E$9V>>oAyHhP5|cb`qUg;erI#+sjD-Zhg6Xrz!P&Pr
zbmT}!`Ca`_4mx~QcS7GvVz7jbJcR6r>6A3ch*|O^(KY;FjubgDvMBU=0X9`3(7``%
zPoPZ<1{Z%N&@N+F4FQ}}kbU8}!v8(n?m;xIBR~rg9$NT214n5yT`sIk5<P4=b#^Zf
z(B94pzo;viQgdfF&5vOpXpB~Pj+m#l;FRNz(ILsdh2{SHlZLb)I~F586dAp@H`J~>
z>SpM=NAA^mpyW&<(J;oR9sDf=ENs#1GNvG{>}U0meE$_)!!^cZk&}ugt2Zf$4=@Q>
z@K0$H7@r1%`5Xw~+2X1g6p$_;Cs9SghI~N7IsvfP5-iz(Lg4R#^?c*Rs8rXjS3igs
z6F8^c43T_~=wM(ArR!RrYy2$1g8g)vB<9uP5NC}s*1bWWDXP*`GvcESwf+x;0XOhz
z7>614bK+tt?Oj%*oo>@sZ{2lFQ3U%uZ=BQ0IbpLDk86(zpt2GSq0*L?fI{Pag;_dy
z*>JumfEdlGcA-#KLYNS_5UVH{6^+P`qe-6tq(S+Ve5k6C*1+q>7EKMwB$q{s`3`$S
z^_FQN>J9e{^6{KYZWJ<vw_+iF><4^;7p2dJQW3>j35;Ej6Pa-R;`E};H?zO4eDZ5?
z(`unO!ynpbaq;awXPxiQRSNL%YkWW33i98p?GZ$ER)W#@@WmzAc1a3TdABTK-i3hW
zbGP#iEFETG5xp=_#QrDR`i#bO1~7*;q#XYZ%IC~DJ=|Hp-C$qpMICG5bghWIDnETH
zr@nSA_nWPUtZF1=C|1{-`?V9%NCf1NJwRB{RXX1!uaO{OQDSP0{a7I>082CKQ)q9}
z*)FZ$vs`5sCE->V7fWTrK!0v*p=N*R!G4o|jWr|8hYtkelq68OlcGAHNr()Gk^O6_
zOr!B!{@_i4u7TA;D5sn`S|wNn(ff1Dg7z32l4CbJS5qsSKxdmJLECh3sMbSqcCB>g
z*D&Fna{o>5uNT^MHre;q9tx#@PLK3N-sJR9tjU$3U#pnb=}EC<Z=-8i`n)D`I{3Jd
z?j`u45kb_@WuGiWB^X5d%28_MJsb!&M_|F4La3{A4o&6?klE5>AO2Ol0hzH;=fy;s
z??K^K#)~0q0ShkPcjn4(1k-Pk75h7_^lWj__6&u~NVf-zaW39?@cWjAfP?U7yY!`<
zz;vSDA9!(jaMJd+T-2-J>zs`Ti-K5T(|Q$`!@1QtA{95=a$-kA!gvmVKOR`-L-c7(
zgcL*u0sUKbCcl8Das#NcoQOJ6IhJ%KevVwQu)^~OYR>)&b)Pq3DT2WnSMv#e4okr=
z`3vsOK6|A(J8&eYAxld^wLigcp8!|%cET~9JSGDB>tc&ir+AOzF?X-qRzNgn7>}Ui
z74GZo#YmH{yXyt3f9#Hz^FTtMeZWBptfWj}z$)fnZF&XG<PI?1ad3AAa`r#Jp-G49
z*<s;~Ek|!a_Bbv9$F5TZ68jT%T+zGC;*n&Jb;}>=uBP~HE!(xz_ROvEPQ7wqn5qK?
z8Lzq@?rOK{C$0E7j<x9fKW51HH3K4G^K;E1G^|v$QrSQifi~NWZy$uA<U_os2gYCq
zX=)OpUd`@xG>``X#ArbcL3LWWO9$T+-h?ZXGs5;7Xg=we9@x(;V~;!*<LDE=J3Jrv
z;+YKdlAi1_=B=9n3l}9HjTc<B?w303P=01vP(KPuh#W~ZluzGmCO^~(h<F$Tq<lgm
zk`g%3f)>`g4svUp!UPcISYEyTeGnX>3d|sdqf)+*A84ef08)KgyY62k!1G0(bX+ct
zzUGknNeF0u!_l^<dY%Y@FARPl<>1X`^-=9`U(KLEY@l78?WrDR7tra9S+V}%_`Q}{
zHg!v5vDuCBiQuVCUHXqF<cG<Z5vpNx%^w7<qIHt?S_{ha++y11^FX$nK12jb<X~Y6
zzz_}<VaxBKk)8oa%S$@+e}$94;*x6myFV5T&$B`I=G7h#E9~Fa&b|A!7Ss3O6X#lV
zL4~K<3_kUsE76D0E0M^$>b5=J$17l#y~5Ch?F5DAFM8j;-w>@IyD4ygtB?F>T_!>h
zm<h;MR}en6hptIVVRYcX!v4Gu;=h?!|2|qZ7}&TF41=H?p}{}VRGt7;N&Tz)e-9Jz
zpm?3*Or9>u1xtxBN$k!R{TfAtUf|<Up5Xo*Ms6K5K@@Do4W^9oLj&9$CZzpcO12rx
zkJm4x50P8OB{D8F(S3z29DZq#_Ktar`%{1ztbHO@R#&QjV~dNr1LlSU!eZs(=jNLb
z5dqxAVeo&&mLoKf7XY-tf0_kU5dNHQsi0IFl~4>rr7BxyznUgJ{zqk?*&i_wn%H2E
z?Bq06H;<Yc{grnk4GG!?1_zY-Ue$9g`(@jrqGLVfqN+s!O$_BU@d5rlH+DS8e<jOA
z`0dO!BSx3c6FZJ1#g;moUSZ?xgB+<s#~&pKha(4&z(QP9RVw5R4do3$ZEhyqL|p??
zfp`zj+fE^(@##C_k$rOq&0`;#GMa+2B#yi_U>glIt5E_UF>7^Op7XrJ*unH!BViEy
znkdtT!Gs5!t<gz>CGfCbG^hWNC;#>FGQ!3a(ALuxi!@V16Iui&I#O4#5ker`?Y#PF
zNeECoz*X%V5JkmsS7;_5fJq^MgYU2C0*Ey|6G3B%qNGNOvG!3)r7Cmd6q)J5uD&)-
zdM0&s6l_`D%|a1|3+Xt|bS>K?7Kk7Dk(GsOHJWNGmAQb)EtF}KlbP}*9_Az*2s+<y
zbs_u>%p@PC3Q4#_&(C<1I_|u}uGk0Ry>XN>b0<Uu17%<sg!w-xFb2{8m8HG_)M3}#
zKM(3pJmG(4xmfpHk!t97ZrWW)IhG18Yt`pCXSYI6ulCZf+8LGMvuDVLv=g_a+{y50
znXz@=lzBDLGou&e9z_dK;iTN~W|cYWnH_ubeKx>0Tf#~(CZI>!M+urM$;#46$A*0Y
zBnEf#>Qx7D;lT(H98QSx-s{FfGx-5b3=r8c;4b*X6n7k2{iDsY&Uz7i@#tspfO?>3
zTdbf1y8(1S-xTi+!D5+7-@P~K9DCm}ENHvufL1F`l=be8!md#NZ-TGdpKl6>$bC3g
z1FrCGjjtO=lu7U1*G<*pXm@rW6|U#$47CxFf}9e4NMe)7LF5#$z7ZJeV~2-E@&}L_
z&MKl&=ZU*?s6X3gvr?L!t<=+5tn#t*uu$-*OUaQ=%T(}pA0C^efnPrCwC@ttMO3Sq
zp0$Te@@Ul8L^d=l+U;?D5&ud)8#H!P#Lw28{7~#N;-)Kbo;=HMpDIA#o$+9F`dMQW
zkAbjz9i_+{RQupSZCW*)1$CZ?&`bdU6QQ(A%im?^!2MKpIPmk)g&U|)Pm|Iv0`f^&
zRKA-@Lq~aLM~p`$Q6M;MU2Swc@V0)O0Ap2rCh4O)tgm~ns<v<qAD<7`$_Y@ot1!21
zj5SYAiZ$<Sf70mnJc4e|yRX66zD3rZr*Fi^oWH8*Uj$*uJX^V)s7lT(N(uwPx==@o
z49yh?aNQ{VW&ngNe||o<=kwinw3o|T0!yD9UaRSl-H1^?x$+@26YhLWqCNc+6B06O
zN}y&PIR45xFFcMiw)T^mSEVgaHT*NvtG1&KktnXUQU25#wIe^v5@pt0AlsYh25Oz~
zGie_-XnsuxqB{G{f_E?o(=vkq-nRl8P!t0CM9difk#$p|$$|hf3@8OHDwuk-nnj}g
zp!&kJVkRVaCgQ2B>*IGSU~6jsa66?+U*G!jM5>phmk*ky#g1`5UMTj1Yie8F)a1X8
zwuL51DT`6mEkuw$v6$J!%=xBFhA6w?JiGH}2fJq=@=8<5mQTQ*k7`8~ae4s4Fl-@E
zCxdJDAx0n|To5+ue9@rEf&nu8jL*CO6&A0PN}3B?#211#XvT?|B8n8p)S%7vX<=`Z
z8QI09@2bvtHqg9XwzumHtPRZn_&Ft?NiD7F!%kTrkDn~Lowrp1@~TQnLoCh}3%fve
zI%m!u-ey$1(_zAm>`+%v8(eKOyy_W_`#IL+vEXM5%>5d^X-ZvzA$2fWn3;l6p`JWF
znl1#OE2^M)1vIJu{Gy1<)EM`!tpNU|GP!gim#4<bAJxxU>*Zry)ASjuNE@DJvW}`A
z(79y{;!EwueC%=Umkj9t-Kb5)gro`FOuREwUW7f})aAmiZ)LNWSFL0umNPd$ju?t`
zp8b|l;1EoNzcIN=YJ|~qR?yuSj)<w%0YTjJ>Z?Tw;lSb_L^#Y9j5>8pXvR>0@g=Rb
z>wndo>mc6wfzlwq`1d6%Zmp}+MV{>68rt<}$M@z&!N!O5M#or5+fR2l%$Dzw<iDfo
z4ZIGOV)1C;v7CnnmEcq4Jah~q^Ir3tRjV03o9{1`*a`hW^L+D<V>9p!No`6OR`Lv|
zd#3W#OGR!(#fSLS01lBG{5R+HM3^+Y;F^&_sQ03q6-^ih5E^ydJpj~Ee?FAj%|RlE
zPd*(<{E~AI>J)mB;M+*AIIJ*tQwD?g7gHJL6<smNEkEh(o2{jmBGm<7)breN-@N8_
zx+=?`oa<BhZSWweG2FNNF_+(6Ca1d_($^aW*(}+lG8?w-0Rt)Lm<kVBIMQc|V0Rd2
z-x`}_8%skTm{(4OjPzpwdtNYc|LIUT(TL#y;_*pT2&!)5@nc7jjKW?wLckq2TdbVp
z@aIM|*8v$k?4Ca;;C$v;lMm-x?1<atuB$|Rldt?S$&2iLXFa3VaS_a{Bpvc&{^8Ym
zr;|H(A8Fr>RH3f;(c|6Mtk{t=tuc=1CIiZfzQB+D$SQX51?J*?P6B75Q?(<Q)n%8y
z{#0H)ZY690_^2XOm1si#`?ckH(V!6k=+dCdIqF$z2HJ;65F(>Y(?4&;E6;k~FXSe;
z%Y{L}U$J8pF#S}`dEh?mUSi<>5i8p(d2vA6<ujH|dsX^^Fa$oqf7n2GZ{_@!$~{eX
zJ`pTJnfPy$x7BvuZ_+$pez(&GzmM#|Dfuu8#p*WgC9oRCCbh;^xRczmnOC0{0}lq_
z2E!3Z`AF1(6htFN0*H16n4|wCmPbxOye3vc>!+}vor>}OG^(IC4h%k5#*$gW`B!EP
zD>QCI+VW2_j!Q7Dpm?Rn1R+&k%*#4Y#l24BhEtg`3f&~4bky(rm0unRa5L)N^Yb24
zX0;w~bqV@2_x19g6-6@h13!X(4Qw%M>@M%*29vz{tW!-l5OM^VRbqzxhu1BF#)|^*
z+{Vuf{tj;fBPCzh+pVUKss!2|z16(0ZuT8pyJ{nXt=sJh_?rxyXc4{UM{;7eEW?NC
z%Pf{Wy=K#GwJBtb@7qT6DF|7r3#*9fMrRCnZN-c3EC*ow1}7qdr<`XaS80Zqa7vMk
zy8R9h1g&{b#!e`ncY((4zut>tW@hdRhXZPTvj5mZZlT!_0NW79r^dhie99w->h<DM
zt{0Z!YsblzS#(-rZCQN&u>@E#HV*`Y9*LBM;?Sqq^l)9PlyL@6`cv)cJUDPMjl$XT
zF>AwAz15PCRCE!>r$_STGvsB+wh!}qgTyaOnFYZ1v4u+HbgsQHDwX+uG65F>wlv_T
znFnGV&8ruD0)okRfp9hZbpBO}CDDA*0H6F76~o^;EX8Nda_k36w#wfnX&e#P;mjDO
zf@j6|@P{>jXztcPgmr9W80Kye4!0?=ZK%<0<DcRWe6BYV<P)BF^!9zF5+arnivuFa
zi+dT<*mzIQ{ukHht)!JKzE#eK<vvTHkERW4E#4V<mfoUn{dZcG9Qg!V`ED*JFx(J=
z3N)CEe&I>Lz-7T8V_~I7fr4expfLdGvgdndKr8z9Q;ZZsUOIF;YE!OqECkC)*fM?|
zWr^O_aqUeU#EF9Ql2BYCV+>0d9NpqxEE_xvh=M<JG~ZyaGU42csp<7QC8o<cW>QFS
zic!1HnK4L2eB^bWMbu6YFRy-z>rlnAe<0w^`@{Q$92jS|S_+-4=BEIr=`qOv?>yBl
zk4AeApkWLyv!FB)Ty)jydkm`249L=UoBS=-zHJYK$MP@xJg#=EW}e1Lh+uj2V08&j
zAn6+MgNr=ktf=fH6s`^|qs>^uLvyX0o;W9YCw{;+Tk|VSL>velL4U6zJBVVvcUK`s
z`8{J8ouaR>OF<yPQAa7STsScQIs#Hv{ntZNLSrETECbg(S5!8`MaN<A6F0U_PuVd?
z|7~0xUUE;0b-r9BSDakU_T!sw3*NP4^hT{6&2*kK4{2N<F|T!gP*7NOEYaXltL*S<
zm$}@c@H+GKyBXegTY0CQqzu_1BCzoj_yXtl%!GC<v*Fmff*|IOQrDX>!tihq0zrrp
zM#!t7p<)3j^UH*^ztJa9Pi37T9pmB<(p$lq6!*?eCrMtcbeQNO8-IX<Y@*6PWc#_O
zm@MSLwktV;B_d~LrJL198C(N;`Xes*v!wvW{Bj?Eahq^XB(vb1_EzV`IV-`;DoZ(F
z!ur5huBS8m6}A!+NSMe`O6>yh#_s9^=KE0td|)j!Qyjo#C5~6{_d)#`b_@(}ZPg>0
zRDPc7rhlRm$n=n8ZuNs)O*;)^PQvTktL>$UFO<p$ObwVYt0KuujzZanjIzm|MW#MF
z+-f1~tW>_+a5~n^Yw+0bEWEwvriJD+F9FZjJ0p&>?Zm)jDMk6uk1$Z~r4JEJBCx*=
zjH{{{fx6Um&`|LJl(bGVFUnys(Co;zOgBu3al60OjEMeIb?ct=@92ul&fr@D9ai^d
z6TEC$sJ|V(^nAv6mwI+Eh!oq8`UI06ACN1hjB=_|)y`JhwamV!(Hipe;3Gdgx{Tle
zsv99jhkwSZ$M;)AjCpJl=-gl+B=q%eel|!{l$;67MEEa%&_{zM0AP<pj%NRR5i`E)
zeiDrk5RuF#WruQJ&|T`p7<&@U(9`WR;S7iktc?d{&v82@b?WBe`<TeTt$sZ@n#gwj
z!t?#AjETW+MbV<gApzzO>xGxT9Kia?D`0FD7_HU3wi1k6<B)3>gof0#FI10vEO=9Z
zFq<R^v;yITBj&<jCT39Zf6q+b7>$+)pfT2fwg2imp<Y>Uwxh9?F`rjDSI#{7GHs{s
z%$a>a&;ALtHi?mubaJF@vS6rV68U>|6LBk(Oe@uQPD|c~8ayn0`dIsv&tbXVxMheT
zd(=h9*T(ns{?5J+P5cbd==298J7hdJW>;PrHTHbM=zf_Fu1Nq9{IuieV4VP_y<tFI
z2!?te!4J@MNdO(qf(^<y=g5~e*E-2uE@yO_YKVQ0o2`UZ^ses3#%C(zLyZ=?Ej~4l
zowaXBe0+D({#(dQ4NBr|bCBxv;+*q4hZ`0FcO}(c6Ot&DLM6QiU46z$bfR}oifCfq
zz1wMOPy((CE4$g10Ymei*~4zWLGaQE2usn9U$|n7g0Kq&$0Z~Kp-$W*G+#2nw{3l$
z3WS}1=HMQLP!WZDt&_U5>hII4>vC|$cGBQet;v~8@QM##muf;L38fS%DbmaBYxEVC
z{0(S$t7!8EGTt&xr2c?EiFon~R*-&adRz0(F9L@UzXUI}og5(W6b59G<t-eg7&?^S
z$aGksv-@w;Y8*OXu13*PD&+*)=hh<-&5;oV=-<42h!vVJ1t6@z@BZ?a5C}V)@a=q6
z3*}(GztRU>bYz2s%4xl+VsT!HJo$FJFJ1MM{`xKA?i3;JA8%Zk<Q;|`(;Y_+KF6s&
zA&sz5#FmP59}an}No$V7uv*I!D&CqiKSG8$(=97FOqJv)C6ToL_FKmex-4+lnvc#>
z7CUAeOVjJ<O~(f|7&)d0D=RR0i#ma}Xu=l&;X;dK65#LiM-Mr`?B~Jo!tYsol(xr1
z%6;t%eY&YwMNNp=jf_=g%k9Cz?Kq5CWlv*d4|ZL5As?2%YmyRsoydE5OC={i19O|l
zDx1z(K&l08fRx)w*m2VYp~r<vHgSYDZ`n(38}d6$c(Zyu@kygTJ5%E{2ojE+7Aygd
zQhciPZ<DDOrpp8x!;s>&^U+^0P|@b=?IJ8CW?<`5pQ>ipz`yh9h-Oa(*vW84dI7Jr
zzfzU4fygA~*?WOU1q@^E<6l|s7j?f4nh!YSXHXs0@U1_YG2!@7G<)t+(w6&FXS&rT
z&^7)Ob;x!jF8sNLMR@@jc1W25*nb~%zYO5e-j}V13Gc=|rM6Am>KbXYpKLXW?h+ma
z;q8Ry(>!1LvePtK2l(3Za?C+>j-aDLwOut2cwiPP(Gpp{1b2VjBMml(^x+1B$WWnv
zw=)|2B><lF<ip_q+cU4aN2Z&fLSEv1G7C5CA+j=%JWB5(XSI5I%0<OXeAX3{)8f?I
z#-98^Pw#<&at+&eZsa~kDv@N}!MB<WuItEt=45_{#gBTsb#AViM;#p^a)W{;jqNFx
zx3EncF4}<RoSs)<Z%V#ND?tbWRyP~Y&oK}#;7jG6sp^3{Fc1tv{PTPaaYtjO0hk2u
zEzbVB?ofQ@x=CFTIC{a*C{9=GclPphvB@a0i=>4Ks#L>(EiRXw(${tFu^QyMF;z6W
z=dRs)yQ$u&_CeV(S0{1OKK*H%%tk)~^xNqUE<?^+G0R)7nGNTk4Mk2m9hW;(7avp;
z#K&Bp%i@eIfNpm=N_Ahuaf4w<IFNRt4y`8|EFAzlZ#A9!E5vJGuRQve`K;i(O2DEA
z_@zg+PD~9w%@=`W@0z`uz-6uZ?T?fBH%|p=>qxL0kCq<z(dt{@`%PN#aOq}C8eiF|
z6|T?c2*pxo+cJNR;j$y>UaR~1B~x5Eu=b`PDeqxR8*l;LT=c;=?g4}rqVT@|FAViX
z17!d}f&uT3z>|OM9FajDFX#D96he0LhwFoCCXF68t~8{}xEMy^Gmj}gku8+6Vt!%c
zH)yUc5qpc9u1Ug`*J<kc=@6DFn0>W#Aug_*Rc)ue!-9vHOKZ~KHt7w!#eHq=<^H<^
zY<7fR!z;{h);&D<j>L+kuEtXE<uW)V^P$)jX$PCOshWD$O5Z;Xy1&(~`57cx$D&DT
zb8C5AhB=|7b1!9PV=P*b7ei!Wo(*&Nu^jo>O&qI6)|&ZCC5j2Uvsa^6Rd<*7cBjRJ
zOG$+>Ant^gqLksm;qIu5Hvs+bW&-~%M3pr6@4|q;D<p<q=^oWy6Jmz$)?bS5Wi#n{
z+!B|o3$uPrNvfz7pUB1&dmQ~UX2AgSP6Ff3*R%Rj3I-$w>+If0&Wq}FJ&oR9VPLl6
z!1gN-(PWXmN0*yUktK#Z1a)_$7%1kabqzmRioGtk>#Vf^60SuFFEf2_ENg$hcd3M<
zD>ye)ldIH$j7yOc$Qj_s5luMgpB5$rjhqD_zg4&&hDur=t#NWzkUZLiUrdP_Na5)a
zHW5|l8sE-1<JYf}p~iXCp3s%y_O$R<%~XbbUsz`{&-&H5owEV8&t75;0RdIb+KRAJ
zba?aCkeG|?51GoPg*ZR+Q)O0#x2-PXcdZ0-5UCQ)cF+jdR>~T<EbK`V2y=%A=r$&S
z5azhyxVR8zRGcCofkw;*5GSEYsX(RYKjq!)3(54$31+RRAbJe@ph^39Na{#j*0*P#
z+|-n|7kSO$qh=eg0utw|Fbrw5Yra3z5m6?Isj2+&MYtq6XqR&C$Gz*MySd84L+0bG
zB{3Ga{Cs?rS*D6wU6v1lZGp0To>j_Nu6zP<e3ZuKRa-eNY<r}@BHH&z2$HZ5GypRH
zmsm%m8FK)}+t%GOsLVlYrY~~pRq~o9w#e%$S?{t(_rEd>$}wm6#y+Y{5Nn-b{3MSt
zep1n{?e*jh$*ZHPG}GSq6n>?}>v!#R%nfhOM<ypy+*f2XvTgW46W#xKr#&kI*+FA+
zXLV)6NUdjise|hk_Rs=|%hFLw=m{>Q4-O&3#YH8pfB^IVmGoQyYjIMZ9ObhS&8gh`
zetv{$>(i1ovA5ns1z7yhQgE)}#hu5uzIU*H&EqyQ*ds^2-IJ)Feb#gLw}*Vl8n@81
zgi=_69%1fpy}@&#xrHJ#+vW?6X)ov5zO}UBRqf8WIHi8KD`Z=BPdy^;DF}4S>W}6W
zHUcNag{bzSUXzdnG*uozMWo>iLiHYbhfD5QD0B8NFP|v2VpN9>_~*s{_C`n~P*2l9
z$%<g-u$j8*bQQmYBEu_IJgl&v<oufLMn1!e)z@1R?X_)$bUM5<I|Jm$RP7N8x^vBI
z8HG|Wt_~!nSvtwtaQK2jo(-X6g#o}&8zHg}j*v&)n<;3Zd;rLkPHz$T_5Pf&Mt94h
z)L7^qQ(J1=jS-qph)#$7M-#;>V8Si_PT6mV=kH!}=9_V*XF-}6F6!5RUQJmqDY0|i
z)Gl3l%*hPucdEfrd^j@0;cSr;FE2=Zds=7mmdNSF#xg--$3~0Xz0PAc>^Hzm3A~+q
z-I|aQ!Y*9Za8z>!oQB3K0I<G$o(7-_{9HHhii(L;ft0@<=ef4ez+!w)`R+9yE*eMw
zbkcvmR!3HU<7>dm)viUdI3~WuGr3OhOtQY?n#dcR;&?hY%fFIhevP&1kIrfC7PPoI
zZ6F3rdh!<+{zw`9eI^~+k-LH|?+Oyb&Z|GN1bUBvI+u_TRd(&pL^BlvOiyZ$asPJM
zDUVF#H?u+Ru>pI}jOeP4%ZCF}2F!fhoaQ@^+Jlkv1;ZULF6{A`uX35j?^dy$WFEVw
zrzh&2k0w8qx)Q-KdJ}W*^3L$;wpv-vS7yO`pIcpiaajq*-Y6Dt=76TOaAS1Pvf+>e
zGfR4oQkut_Be=l)Kl0zyKu9i{>J>nRB@DQ3{ZS-P0(C9p=i9{@3vaYi^QU;0BDM8i
z>buz5EsEFc?0__?z1n3T5Ut+hTWQ5j!?qKjLWVl)=Prd77|6H=xO|;4M1Ed+QOKju
zTH~PLle4XF$t6YCuxbWOf=GHUS0|4@N+#gOKQ))dIb#B`(K<@y4r^+v28ScMG<8u&
zs}N0A1dth?9l!oZmiUw7>A1kPrq}yOLy0Xl{%mRgJI~L)bfwrEC%YXSvn?-k-(<}Q
zr{3^9-^1k|uhcO-mCpx{*5VOm$X51~LQQS`%=lI`-3l3Urr9iIMKT*!O{qjq^k@F~
zw*Yfq&($vmWg)wyAOU<wDW)|zFwNQ32N^N{j|^ObCMyQWX0cYOP-G@@3D=f%2DZl6
z^MV|Y;`_M_XJSrS11r8fbYV@p(|`Qb01;M@t=CJk?ob?EO($4@$=t8uka?L1+1h#_
z4OyD##7C-b^GiG!wQV$AvAn&K*>E8XkTIUJ1|`ayQ4{p4Um3{a$k%{q0kXV7K)`{-
z9RTFksLyCQnydsMi<aKQ1<HVbJhg`=_XJPt*>j}XfA7m(B{7kjMXz=3U3Bc5W!+tO
zl)G8|(v=Xy!98z+Uy1ACv1H7NqS&wj!ypOOhz^A82ER12A%>X{<|FgHrGLHgjlQK6
z%WT7bj9o_FjnWt~i2!I(O>2FP*DaW{4+tCw_$mDk2SMP$U9fN+lr$%#3e8puu#tag
zI{jNg1?+t1U!IScWb9aX+l~u~&1^L(-om9No`^C$quruwH+fEe1vmyan9(fbB-j4r
zjO2FqA)@O&=;c#tq#pn7PFQ4GbLLuOW=7({*k7%9<!8sK%tC6@>TFv9G)^_I#C@!x
zu}`*Q>pGPlpRXLlKpIJ*<7C_z%uFI6u#m6{>bTXR@yY<afZFBme|XWK<Vr1hHFn&G
zjwM)e?GHtWog%oI^Ft)WF?1~@4OEjx89WPA+{*F7HI8T93%G~Ob6Q`$7;z`!DPpVK
zPghjE`91Dk6Bbd$icfdW*Xcw=H_%bayart6w&r7VU|8nc0+M|6bmmptH9{alCoX<j
zQ4j_Vu)-`HA@om#*MP<=2k<gWHk<wyQ7Jx~i)`oC-U%bAwthXVy598gw*;*KhW-Pd
z)z2c|7(*~aeLqMy4>My;SqYeZ{2q1Y3f+V<EV1~r;!`OZelw(Kmd<kDott@p<yh8j
zj0kPX`8Jk_h#CPLWE6~t7wLb;2R^`h?8NWN2W?YDWIhF944Dw9`LPl9g@b~Drq{m$
zbTgW-0^pPLAi72guW$tR7haVp_eDzD82B02X$jf<eBK1R>NyD6Ge2;|eh|Zcctig=
zcu>pyby(?|)R+4AmlMu(V!?v$A+s;L&eCjb5}#Kwx~nMUbR2Iy<!r<TmH}p)HXM01
zh@2$T7gD5JJfI^`Q@_f}+;g`8fxk%-sNLzq?b2l;1*Bo9(rHLL8t*lLr+J!t1C7Ug
zBMc1VktM~8!K*WtQ7|<g4^G&+H$Zz%rR=JlNI={q;vFaHsE=(`K#pzv(ul;T6oWH>
zQCXaz9^zcaap&kQ*uN)`Iqz+fpXaqQizs)iGkbxR;LA%YVIKwP1pkjJR->R;^QvVv
zYY?Q|j-Oz&OH>3bf{6(-??D~DZZuxypI`UuWhJ2X2X5iV1Ws8D9f#31ZOlpxcB71=
zX|r8m*EcGA{vARh?4xUBf$t$atZ|ak>CEui$srw`K4LLRsQg{5+v$&+ykScd3vGvk
z<_g7@s{t6yT%U?_=6{SMrZ1gm%R7vRSIppZQ%SWCW(nFfutI2fTkqFIOWkfEkl)eA
zRSoV#^mUQ_ON{%`fK>pXt^14rjFteqwwdfY0mtz&hgo5wAItm?f?kbx-pp8B4s|w9
zH=rW+6s64QciB7D7{2|WwY4W+D}jmXm$gDx+K)af45gbkG#{3K2wjy7z4A?)+MAcy
zc@a$$qoTaiOm=|mU?dM1^SK3`*l#(hv7?2#`9w=?#t>*;TjOd%g5iCt%$TTaZvahK
z4bVN)erEqS6sLTQBQR2>fAWJQPa5l9qu4~jwBRr748$vq)XgKm0h5J*DXM<5UApI6
z0*?qU?053=4vZ!&_f?+U!Yd>D)rr3y@hRgvjAk!vScy!`<U`?E&`a)}t3etBJ5aZo
z@dQ@9Mz4IEPhn*=>G_G#owf;X6=7Sa*x;AmBqId@3;hrvG8AIS2pX{lKy>+@A@$$J
zuE#jSYR$6MGff*A?7vPUhqZr=n@lV>cJnGeba`qr&AZ$(M4IFDaPX=2daOlfQkbg3
zE81UcO{)j{4>N<fSMJV#Z>jqQHH@*u6KWwSl#2=xE;mk?`Lf=C|H+ci9k`_7fbF{P
zyO_I~L;B8y?s^0%TBnw$p{-^6^jM0S%5Q3!`hbrcptk|xqTXfsF*Iu}z)Gx|dHA=6
z2>jUdPX?RsW$4qqa}uiz#2B9zC@+6}F>h8cDbqD7PyI;yk*5k);hDgrz`Nxd@Y2*2
z&nXS&Z*uB#JugVp2)XhlVJ|gX!!=pSYQlTy75w~PE3@K5TU~62fHB9Ms@tc2(763J
zNR3lD%tZr)dBsDZ7!-~mgmfVh2(o`S;U_d*9YEKudASaRoPP`sadz)i=(H`1U2APg
zC${_0@xHdRqMj2f>z(o9osXD15l!M@<f@^}<vn`A`NQrP?LH+DynboQBGr2@PQuXq
z{3PprFjG#Awx_QVq`f|Jr!7Vvn6RBqn+KL4CG<>Tbat%Zd|?8KO9HbI+(1w;0!Id`
z{*$>(p|RcoSd|X+J18aB5obL31~F@D)oIs<N6G3)hbsem8H9J%tD&RR4r}WtoaGAI
zYx^TLJ2YQO=)Xh+ZYU1_xG+yyywkg*>^u@_Q&Zva%Qo+mM&IuvXn_T?gX%S6b;Yzj
zE~c;g#SQRE9tgKRuU^Rqt~t_$gbct?CH;_DG*CSN^lp4e1f{{7dCs?H^Yx3v%w2fX
zE$_|DM+q#4l$!>dgN+q86y15B9SoYb$%rn#3W)1TUs>PL0OMuS7I=^@6}~0QVC#R|
z^et$jPV_RTMOP40YTC%XSmflz)G~E4<CdhfWyjJhY-wOtIsot>VgN3Y0U!qWCk2w9
zM<cxjkjkl6>i>>k0&DA@8$3Lv$LRWEp;oXOU}4~&Q6^#;V@IkdY@lo>hwlSFlNpct
z%CQ-s;Q%<GC>P^>-Fj5psTZM>HVxOQ^H_J8ld^3~(3o&Jf-(bH-kovWZ>vGAyGY~e
z-E?rsFA!ByUj2PTO$4G3frS4He!<IVo(6ztAjT->Z%7W9K+DaoA3ItXISq{YUU)0f
z_1x2!kK`LK^uM4p!2b*`Ribwpp!g+hlT2K=aqDp{Zl!<&!^oTH1uD381YYeZ#E69W
zqx9pQ#@>RbhJHW#+BZ8b?%R3^*vueCs{&83_41zaw9T7?nD6`G{hnZ9#iSq{fp?*9
zvo$nTBS7UDr^gQV{PQuenJMYFRqbrK<$fkHqruUlSW3{Zl$^~%Uea*JiJvzzF`SvS
zVQhNqnb4NL^$c6Q9h)yEmqoc;#=S1Hv~v36pZW3|Pgt6TX14gq_suRNxWIGG)kmy`
zO@473#deGqW|lf25MY)K*2TnNVu5J>`?!Z}p^2IRqR+A9!C+?~tZZNRdi5g(-s{F(
ziSd)WE^^=DK0J=KN3#3sm$3c9{Fmd1!)!s*;Qoj#^*8jL_emQ@t~ql<NcnkcQpNQR
z{BrwqHoFCH8ciFtJsHk$U=(pw=`f4e4l&s}tnC7e;S(rVW08TGF>&Et6sQm7E}Enn
zAdy;gfPmfqKAS1^BVP@9H&QPq>-k7Xa6g;r<N_7X=UoxW-QwfH+aCUuW^=y08;yw(
zY#F89zpuR9hLwwO3kszfi^deGH$Qi`=LE|O3c5@ikpns1xFl;!%lU^5Bo`SA%w+?p
z1=#URD3A$*St($u|2OYBMANhYG{`f%h`;arf9Gd`+S05hskHYe^L6)PnmDzWQ8nf%
zuH0*0xk?8~uBQ8^D^U+6+eEJYt6s{Q;!4&}E90#$Gy9s_TF>Or^*0t_`vyYVdt5Bw
zImW}Q29~j-My>T5S#~t!FwZ0qMj)_kF>Z_rEW`{~h5Rd{{YC?|0zgJiBXp?8vzeJb
z_;vMxM>Jsw|99L%1KLHEqIPcHOn1xACOEIX!(Aq3no2cZ1*^dyvV8V<>L1d*<(p>s
zFiUwnj^IkQIB!%Tcj(BEq8Tgf2+A7ez9zIC@B3-j&hjhvTccQG5Is&?q|z7|Lj+S3
z^#3;5DVnAYpb=jte~WtEr_)cubeK0LWy#Yc9wy?1S~&zwS+M!gH_2jWPsOh|dcH$g
zY=2I-9ML5qzZS<;EgTn!&Qgas!${`pG*dlO$G=249&y;#k7@J}9YJ@D+}De!<H~>U
zI$7dlml>tZfv_I7g;0P*Sja^nxC1D`nEWN0rybzQC+NNVR~`9hWAUJ6Ov_=h#Ep<q
zeq!VP%C~jIlS(kqW}euKjdbrxdd26gzL67-?QVs6-K22~%~K3Q4B0AqI}i9(S*>5Q
z2Bx*8<w(!${3QSF+8#kKWhI!J?kjyt1Wj)dE$AGy##w-YNCD3s`zqDoU<4s92#Lzr
zz+mG4*O@v1rY(Q!_kU%7e`KW3M`xS0K3n{jcd_T9-Wl6Z+3N9>QD2Gd{&<m<M$4$_
z%GXx&_CDc<cfTNs`vg>laD1}bFjgyxw4U{pPaY(_oU*A;PPR%K0#+=U=1d!we1O^5
z%S<cVMBzt91e!x<60$fx2_TL~j#4#onh+Rl09c^Sin@d#Xs%9x>nL%f?(ZrApdgFH
zgGF~DWGYXE<rs#@8(7`Cj*8yBziDE9%W@rJ(2Tb}!DaHX&_ehce<g833YX*AYa&Zl
zrFSFi>l(}mj{(y_jB0Idwz-00U!ZwjlDgAzzJu(bhSF@UrWld-{BZAhxq?0G3X;um
zl**!pcZDNx2l|kx3m^m+&D8~P(TfYa0J--c4TS$1n>)b|2evf>BGOE^zL?shQ$=$T
zH4KFVa?#DHp*)43n9k6X%)3hT(9aaAyy18HFGFnus!7OP3Px&4s<mFGwv1jpPLH)K
z_QlpkOc@OLLTZZoksW4laOYS1jMRIM3OW+4vD0)wyu*%CVYD#BpU`9k$%ML^2+?HS
z0NKKK%oJ2_L&_*0dE<sF=5uc>)hvhC<Q5%8w{vfU)m@=BQX5vKuCiidq-9P5)lajG
z>dpOLGnmq1-iOS?Rq+^dlI~N1E;Hi8e;41oY=7hS-OuGK`7fdcX|tJ!z%4bbTbR??
zI=2yxf1*?|5D&t+FiO}dBV_?GgPA}=D04zEDH^N?084Z@utueh+(-*=>fOxKIEqNs
zh@YIRt%9E=4g&)nF1&;@Ro1hX!Wa(vYMoNoo_ilYlw$WC8s0Nb$i6tN(Z%Em5Qjdv
zL-ZQTEA~<UJllYp(H8UTNf!_uXKBnXlof0dLXjPcj3+ZIrfqT2S=EhOZJsqCV4dgM
z?-!)PtmMGbRWei!v6}+T*9-9J-J$&-QD?yrRo4XIU07i0M!LJZ!KJ%XL`oV3L6njX
zL0UpW0RfTjZjh4h?hvGvMv(8S`+oZmo;i2!In$#LPr8OAPFTjqs+VtrkC>z(R4kfb
ze@~7<Epw`nQn*&UDW|GX(fWT~rXRUN)O=`u$T>;?3of0iYK3@S^U1~-hG&aXeK=ry
z`b@rl?f~t8fH`9+CO&+fq+;-NdLcQY5K@+RL9#V#$lSRl+c9(nZYF2^=AO?*_;Er2
z)CC)ChgyXE`?P`g5QJR-;ZomN_uu(lz<AU|{SO+!1+SP2EuS_Z7sx0Tj{cx>zQPfL
z4ORU1<k$$eA==EVbrPo}_nbOEnY8?tCeMdHo^jk{2_YE?Jdhm#^|zVaG`y{}i0)$1
zi0-%0b6BYTj*)A{?YdBVX3h$XDZgZRsQ?Qw^lA`#Qf@JMNrqA9F!H=2ZMZ*G8xO1w
zQjQA2?}n=&1%k61;FQ~IaRMj&F^wM|TZckeGBnHHh=<O*ONm$zJ~OUqDs&hM!+QEl
z&(N#xw@p{gOEIh%tM#{Q9o<7^JB1~JnL8{UBM#?zx3U7J-%Hbf%liKOAo;jUu4dni
zJXRQ0G=_$WOFUzle@rKQSOPdyyK+AugYr;T#8zKO!Lym?Q!+-MHQMYTilT0ERe5_T
zJwFj2J_9`g6!Z@lOoPDf0dRGfjzj<XMCT9V_L99^G3d@8f$Wa&6(r}Ba>Yz3eUqRR
z6TRdfwbFXhD5b!8Ojs1SBaNF=yCY(Nj{EiFeaM1h&gQCDP3eQ{z0d+Z3gOxGx9>cj
zdOxAW79LzaLh~L3F2m28Ry?f>wMSv$X<4>{$ZjaI&kT_}zj|4eXu^E&x9e-WXI0Oy
zG9W=MdHI1|oQnTgJLnOty#T8dU+OV@LatAJF2y8w_A#<7yFwQ|*LJ`T*z3EqOGQFR
zNEsOKWm2F<hGVjQgw2=bgOi`Bug5(S9fKy~Q=7-VE{#alNf=dsMNNDD02Sjd3~uI7
z*l6YFcJcX}zwe&X70+1E7z>Xe0XCcu0zL0N8Y*=zxI&73hBBSM<}7Z+VUD%!`b<>7
zSixLcJ_zW~5=;<0trEzL;Ozr=>rlis{<T4#d+UUerr+hFPz)FC2B4LUebP0VjPJFh
z`q^C|bp7`6GLhBQ(YcyVQ0Ao&moCja?J&ye=$S`>K}m{B;D*5(sa;j02z7qZcdc9+
z;L1g1&|Yl%Y5!4kR>8sa6=|%0@<9v5A#*;~x@`JO_4UnHMwy*AWEMp)Vb5qHL}gVm
zRcv+mK$g(1u7EB}xN|JSj)46Nz@k6bRRZ+(Pc5zaH*P<)*bAfms`aQIzTSWp!4=4G
z@v$yJq(LJI$BAfJ4aBuzU@ZG%?aJQ4-Si=5N|oLiv?5QOGM)3wyFN11kicbJ)7u&J
z@MNmsQlfl;c8?w{wOY3tPw3pi&+nwM5R!v>d&cew1$Wdh9>WGvKKC%mJ_QvQfN%W4
zdQ_>!`y4~+?J@#{cu0gq|6Qou2;6=E7X!pm0sizCSKaU0jaMpX?lPOdE!<pL&OlK*
zs6Zk$oIgJzLo!Zy!o-+|!b<_g`s25ll?ndGIHbxi<F9)1P{@5IZCw@*C}NT=4ci~q
z|4#AurIZvwdVa#^zUr=hx21g)9TKb|+8ts4YULZvFic!eCPL+4w1G5Ih&+uu3JWN=
zol*JFopev;VG$<Fr{LHJ;7>asR5g1pipToTpm<myPyhs~qX1WCK7;@RfB>-^%M;-8
zzq<lwkVu>f2=nfryq>r<PQd(v;x_b%juCS@cytsaL3^k9FkqgScoGei$DGn6J|ZHh
z`fWs^=FrYBcFFjwj63;Bo3E^OEGu`h@s0B`-4yg|jY3evemSWh|6%!uxk~;m!K5d9
zobNXw7AVEb9mIlq@xOJJ$0f}A+Pmt6H`JGUho+yI;`yoYaG6XAlWsUJ^w*8DjH4)7
zP)o0jCE-jY^7ZjT<l8~Y&?vYpfkFsb1_4<n&R^pIy7MOkHN>$3p`)%ohf)%M^E&N*
z*kOT&C-<`OsR_y#<@l#TjjRJr#*;?^r9}i_q(J`68A_Knyr~Z2`oZ`llU`mXXA()G
zd_i@~owN6ET$3UftYWB+XC;>-of$vkd1gM!Sbj4WUd0LQM17Ppu(sSABdy%+XUhGG
zlX^6c${#TIfCXo+5iq`RXcRCQN%_CxKQRRE5P(~lXDJD9PyQZC{Pb9tYfn|=*W>Rt
ze*BCJ6vA@7o%ri%YjP(nqzx^3P4{!%Phag^K6#aI_tS_{=L*Mq%1&ubZ_UZ&I2oz`
z=CF`2V)mD0upCFtz_&QHC-f+kC-(G>g*mQ3YKT+5MF`mIOv@M5>We))yj5*T*?HdC
z=DLYi0<5?i4;sbZlEqUGkRJs4Qs6NSuoMDz7=S%?NaX%^K?B`sl*StPmn`h`-Vzli
zqDUh5+Ff!{x1N41{_;FAusEFerLJo9yzhsD3O?DPZCYBlObo{=kLMFM7fzKgbcDU~
z*beAKK?xLmE?h;pA>RIE{)vGcFJ2UDc1sESxcwwJGX!S2SOJ-j^F4;xgbL#oOmo$1
zpEwE#5ZzP7gq0CP0tA2&=0FGQe^vwx!8!u4Cak?6`!{UeW;@NdME8Sr^>><a1;|q4
ziyzBa;!cvgTb*nz)1Jou_h;nGl)aKa?Ure!IloY{5?Ry{S}rU2{5|SZ#r7P3-in;K
z8Y8R0gVv*%<azP9FKWzM7gGJy>0}yKpX-XjJWm>$oEaB@zLg+x2`?|=RdG(Mw#`j6
z`~Z-xB+15mVmzX7T{=Q~g8yoD0_72;qX6kzbfGGI?!$~Sj$PQTHgkfi{Jz6et9h9&
z<Iu2ssYDyLNj9YqEX1yL_mXvdACUi8{?+hHm`L7s>wY=MF4%x#CD19qlDsCpe-#^J
zzbHmDcrldX)jr0OK+S#A^#~H&6I352o$wZ)b0TDos8*ix{QfPY=EDf}viJw!zEu!1
z1f~AI0$|W0^AZx$^TEv?8D#|M7y$Zen)*-c&%a-*!5o{;&(~^ClW_)BI;|L;&FtnK
zvF?+v*bGt_5WYC%`50^F=}k9u$cAMY4KoY=X>(${4pH^Rf^P0_l7Lqn!@j}##JO%+
z`(7r8cFh)QUmeehR1)02c@ji79vrIWkY+i1H_O041TW2GF+cI~<Ky$H%d5j*W3W1c
zY#bodD?T9lTQmSP`KSC?<jf$Yp11a2fzq5H|2WmZw(`a`k6onqMPo4|U?h6XUK(Rz
z<E&IDkK5)b{PpeNEhNnhYU}k0#On6;+t5Hcp_{p$-g&mTLB>ct4;AvP0pZX<X5_S_
zQ(NP5Bz2(f?vFwk*ePjKpp6fij+Pz^Itb4)bZ8;4CIBo8PD~xZX|f}2t=lY>9xrZM
zS(<xa7PxCUUwf+JiMkfeW3%yyP2mR(5wF?RH$#(DhuIcRG^JN`iM`F<#OWW37e9K(
zGyNI^8{fRSRM9QTd+gq50`iZstL9Ye1)USADY<<UT8wq<J&Mh?%km*_Rsn$?X?TI+
z2<d6*2(ZHC1ODCjfqDq8Nq{RltknXDbN!9qe0r+!HW6mWkA6GNX7i0?-6qiZ64h~x
zv7wEw^5&Ypk&6(Q__&r{MS<{{lx5ym&#T8czP7X44_^lDd|Gr5L%*zB)iG3`P^I?q
zk|H>kk_zPxUu@W{se4h@dLu5D-6~#q{1XNe)A7QglL0mrGbo2B!xMrsMhL1YfNBt<
zKJ9NB6>u?|-KDKBA>Q*vWNvXc+X0KKdJ4nzuNoDV<7zb%ry1l~49Ekyv5A#)57sX4
zxyaSpabyvpnFZ8DosOXvWH6(xn>_Q_CCtZfI2e#3jT{Evc%v;q?>juNHc5>hcYY!0
zASPUWun9t<euJr|A>T_#Ku?Pd?EZxtrVkNh(*T)Oy(%p{0FL=Yo2kTVH0tpSqI>v`
zw`gw11KeociYYFY1Vc9kFQ4N{EvzC@S{b$u#^wd~`UxYoG#PtG>X(ED6OH3?^CJh+
zYa1x$mfKBKpweZ`120INv-3iaeagV*64KH|{14L!%pU`2VJRF9Xwwm5$KIHV8>8U?
zgP@SXE^r|H^)^G$%>Z;U>>yUapZk;Kt?T(fFS1p`9h_Az?t>FKWmMfPS|TiLtrDIY
zC6!Sf%$oJ7hi}FD_912mZx>`{W2ACU^krwYfe4{`Xf0cbs+O`;-gDoqn9Hlqw5<9^
z8FRX0;Wa+a3twP>fl)p8Xz|LHxSY2MQvPTjX0sk4c7TDY;2_`kCk@!A{wx@-ZB_`r
zS%A-8_l_0r&w0_34d6V*vW8$hV^fmYj(pD;adGW4dOy+nW}WH6g#&trGa9QGzaOer
z+&}1QFul!ytQl&MKoH`uc{tsbEg0B?^isM&(TA8pWLLTy-DlRwV$+KGVS4S_7t*vW
zN#~W9DDs0wr=2tW9lYq^J7>ndetRx<Vm*2yC@_Yh{lAf&GPVf9Ie_pch4k|8NGKwp
z4B7q5H45*6cg3I<%D2QyG`t{h`L*iLd%km&(e4SnM*#+kLUz-?f7HloWUUn(1kt|%
zefCZ$J8Oo`-{uo@26v;}S}cd!#ItCg<)j*NybSs6<3*=P|0TZ3rJ)E|kyLqmfxKnk
zJ5gRPZOkbWM>AATOg=n6JoA!}00hEA1~cHne-E%D0&*UJY;D5(vn2+Ibfm33B@^%8
z2Tjv|@5`JWs4@zVPVK;v<Qa`0O2C&i9}W$BCisei!`G1z+NLAaaYmuuGS^*!Y@QWF
z^ppGUE%t+*jS*Zwb|&o5^nv+cW6SUl<{1kD@!{W)oEJXK1CB;Yi`2{%b;rYC%%B0(
zZAP>X(S%ZapessU9%2~|9fXAIz&*H*rwGOcfKkeOAo~BawFH<=u3je*HG24;ObgCb
zmZ7nTlj0}@1-~I&LF$zS(?-9WGG_ifa|on2{5swjJ{-JcB8&29665E?u*EFm<yLs*
zjr2Yk!||0UV;a($Si!+i1ZhlAe;UsW4KTE7!jWp)06p*#^=1>9MW*#7A@MP>_-Wek
z<^BW+D$9Tb=EM50P|p<sxd=c`>#sflr~Nh8B_6FSCk>^Br@uAl0Ua?uOJRQ*d3n(N
zA^E$j6TKgA-*LC1p!P<$Ha7MW%HZtr0RzPJc*tK@Gl(pOy4nqf{9%i}#iiVpGxd(~
zY^S4Ll!yWeqwO_>Vpxplaq;ERCV5s=`gWaLmldDq!`h>4Vg5_@Y!Qwv3q!5WcDIg;
zs#T9W5Li90s+qD{J{U04v4CQZ|ALh-5Y$TmwK%BV1>F9}M)#wVi^I=&Vf%)rCr$*%
z&t@Lj1BnuhRZa6ng4oE64LRxSv%d2kD(y!K_8Xlo#Bu3$k_?2X`(}{ClML65vZMO9
z^s(0%c9tBZpWgEGYLmq%=(&tsKiDRg81<H|p;U=`bjs%BW$b69;GsB$%HZ6{6mmLQ
zc0?LeOEPJrbiT<Q61#anEQEG<tK**QFS_4)k2y437)csyANMnC?S7s4eXIX`xvf-8
z^cVOWHV(K2%J&5lgavI62lc^Ad%#`@*_Hv>(uRcP{&uSYadSSo@_z2?YKPH&(H*Bk
z`eTAfsv~3_H@wi8pq6yc(vO(IG<r&tc-!jNCD*W}q4Vj<j5fRY_kua;Fek4U*TI)y
zToVx>RW$e3^i(s<V=kl6l82*eR@ZH4AU)Ycut=|!J2E3M&+%9b26AWGBx6Ft$0Njp
zDM!I$C>^g5Y%2g8r!kOl5BwKk+!(iO`ewBxJ>U7X78|nOh~X9@T{_XXNlqM)!L}qR
zzgEIu6kMYP!(;UgeNT)1VF<fO@P|v#NP~zfKWaP;9y?A3`-8_%H9qH_rcmxKon@R<
z@CcR7>Y<bjq}nn(Q@uPS%&y2%^KKU91rZXO!P+gs^t24Lkbtgs_|+PKfLjINN{6V3
z;h{VUqmIKj>~mhJONyr`>rX+;M`eD4gDt{m)yBB86Q94PNu^E<IYIL#$&p6xB+AVW
z2if-79%t=Lw6qG->h?!A&pshnZmNI6#Udf{OtEk7AV`BWmZ<ii=>kZ^iynE7Y>gU)
zcV4)4Y&d|2&KY;}?YW3P$MNEYw6}*3{x{!7CIrE^2JmS`tK9$la01gKQc!ggC1*MI
zPIxF2xd;x;iW=p}Vg}HjusPz8G$P$Y3-7-~v(05soUVGw*ErZ^`@My7oxsrK#Udwz
zRay&$0tW1ci;C~ozU;s<CPX>5-mZ94ZNd7SsC>k2yTT+oM*G+9&MC(2&!WL)5X$yU
zoHdFzF9R41VnF);aG-Dm-8w)Q=>~cMkI=G3pk9$d1Kr-pwJqQ@Q0Y`;kUX{EdWhBT
zwT4Y>5Cnaaw|-A_*@>}}*weBF^1?MvIMJQzC1Gf38LMA?nd*pK?|hd2o_64E#;hQI
z`1q*vLg(@9z_;SGC~DPE`$3-f9Cy5z6bm2_FMrSk3NaW^IX-%NFueAtBN73&0f0H-
zE`I(m31Hi5nQnS@GH40DXgiWI_@#|(C%N>-=&gv<z{6KrNa|-JFm<%{yE9la#w*cf
zA?wgl(M(*67Y%Bqm?So*OP*||g)$exZ((+oHKY-5fI(%hfCC^c2pt8cMz3{Fjko6K
zq8jspIO~BT*mY1J6b9*2hFQSXEf&GG32;42So`v?0V{3w{KkTdd2=kUPG@@}S_PW2
zPHunoC10qL$6+H9EYDy26AjGl*#G3nWkuuzPEg(NH&0g~rH>K{u#~s)G=-m3tfg3M
zgGWrC&t)9ATM156)b5m{@?Q=FY_!GU8@pfzy}4GCMo|KRh-jQ7NULDs$^lVP@&WMb
zT$uy}*cJd5x5z^H&;AECs1Y5;Ot8M<5V%CvKC8XY9VuIMM<yb}9zlp*W8V<NMfb_-
zw%3=%)Fn$z?Fsb*K1ne=PkvPq(INU1td_wisK4s(YIIy>Gv<XunqjC1^;H#7tuGGk
zd$;zD8ams9T0<GprePpT11E|8e3*QA9~KN6Zu#%L!0!-P-vBIU)@$PbuxdQ7SRG8j
zO;3)#*%@}+iM;|XJeAP<tgZ2!jd!}B7)&_2Lckx`Uw`^Q6L}Z^Bz^b}w+t!U-)LZ5
zPw=!x#rahW<J0?Hmfk*&Rs<)LzM;gmzyuBhRjDgU;y`cy%C<yCw0K$&EwK8>O9a%V
z90CHhL*do19cc)xZ2)Vzjo9N~b04tXORSDunUrxqX%HiZrOq1^_>;zW?O@00i0XdG
zqW_s?;)Sr@?SXOM@7Dbe-Mu+kc^h)Of+$r&Vl^zCP{txD?03D%2PEFE@-4Ns2hHWt
zQLTD6DSew=hL)WRm2IxpXrp)_Q6Q1Sk^lqRse#IGEVzvwn1O)W0id{_=>&qCZv5kY
zIB|VR>$}7;eabXWjWEBQuYPBH-mricaI;D;t1Z6s*`bkjR^V<e?_;{mQ4RE(^XjON
zvo>P>=@O?$i&q?T?>#HoEt<)axG3|^xxn<FZ%kkP{Ae6Kc1E#&Ci|P1IWL;0R3_C_
zj<0BdzNO~W56$;QsqZEWUN1x->V=Wb{aeSuq=A@Hyr&*C52!j^mArtr?bSw3PYhDY
zd;jh!rG204zHYL{*Lg}gqjVt3XAnYqLJ-6MNBd<X#QF}1rP<<y0q*!CmM~^EV+`K{
zQhgJ<HLgYY9Hvb=2w&jWBdEELaDT|@SRR9Bf2_&N6jCW%G`uMucdC-dybA{$>bnjV
zEqk|a#W%t<i=9$4=AE=sn`8m*F`2s|?fGRS8@jJ$z@iyLHMbU;?C&YXwvp6(WF?Fa
zTl&|I2x1?7(7h-|#xvT)a0*>gPfj>yvMARWYG_)j3|Zmoa4qR=VI-o@Vz`U(E|K=1
z4^>i%yzXZst1Qn`$mjw_$K!zo@WBjx;4g6f&O->d3kc`GnrZkqDF}3lzV^8C`(P7`
z&;Ptw#d6kL`E2^eNWZ|4TN>p7KEvE9PgA0;L&bgGfmM>U!=cy~v60>)F*PKIFTNao
z$k}?CwNom)JWT619+W7GsNTn2Exl!yW-}t(&iuybWy8nfLKvuWMPI!@$mrdhWYo&|
z_;`Oh3t|7bItmb6djJ<w-rFE}_fGPO6nj;~t6uI1qZibz_gTfCn$@B7vP1G*!UuOD
zNMAXSSbp)IVz&QO{6ynNDG)4!A?F8#r}uGlim8N10@TJnp!`sHc$?7)=23h;s~dJO
zkV!Ky<#gA?_s*Ww(hR8`#Pq-mXH6TK7EA|GhM>SN&JqOBJ^&QwsjT?7{+w7u(&as&
z$-BE6Z@$B^<u6m5ng09MFp?9sY-U5Tp10;Z3`$gnUuL{YlkT^N%=GPnq;w?Su76j3
z^P_R=mCkV7qh3{~QimR_<qNwOQ?()Qb7D$hh4-pjwD`|Mr<{!}qyFY>ZP0@;FX*`*
z0|OobOuoJ2ACpW4g6RNYqWxaO3jcW9gZ2}#%7zK3sBFeESs%K)bAAu(p1%)AI~l_?
z;}Q!=^??1XUwm;FsZvsA*W~7K;C~T~;f<8paubMNs;4~uKrPI;)rdyZ5k1I*?C6r<
z)U74dsB5tyUd}_R*lg!oXdc2-H2eXCbZ=`@6jvP#CZvPN%fk&Wa1Da%5a7B4|0@3H
zF4}Bo^l*ck+i`x(G}26;RVU0b(~I0dbe=?Q`g<&nqqT`fgNeHc!qO+COCvT;9!YH(
zcMi0kkexZSD_bAyXNq^I2yaclZ|jSA)WR#x3^`^0?r_CY$BEB_voWh(!_0r_(ERvy
zg5Pc<JwdDF?vJ_vFlP5A2v5I*j*g#}pO6=Big(l_2#)|l<nRnJ_-3+%E#>3lYbGC~
zUz`<u?i0RqPBG7UF;_s_**Hj3oB^=$8_k$?$!26eE00|H0zv96uCtv-zw^$e=deQM
zgGwBlsEpp*ZYUXuXFe1eX(Z|RdT_h1HhpnUWW49Lts}lDUjHk3C*;j9x}q;7Afywf
zO@<{H9T0T_HWIvst6DPx?ihe`=cU#ByO|6q*4uQ;w`Myv^=evtRkFZcuPEg||Ja+>
zPvn8j5&y3G9@Jyxh|)d=!&I~l1m03Wk2aUAp@F({LYC=^WRLNBo}6Msm_J|G%W0E~
ze?KVwLHed1SR+~sbh@J#JZf*SA<ivtr7c%Egt=8lNOY=VDmw`R9p&<UA?o=5>0CPk
z?gs$(EqCe!UR2FVYO|VvRc>^f%k1;u-d0?&CtC-4a%Pj`yA+Wl((bmzNLAcvL9L#X
zFF|`_o;OJfgsP8+zIMzMD93#1m471K_+e-6xz&?jb4x+mtLMZ72BeX|0Qc6Sv#3@&
z!=+9!W#SRu`X^K4w412;<siZ8tZG&x`S5Oj;65X@fWJZDE(G3B0PiFXgZ^LHt<B~2
z(qs{P;OZymAsfJ>alyZBjm=GC?zm1I(-XTTt)t7j%i7CmIhI>gK~8j_u;`pAODGsA
z^+>mOw9WNP=hA(vg@@r8=y<Nua_W|Mov|1+79LUon1zf$B&E3MX*;kmKIK{Y<w{Z-
zBPvuhq5MHswf?SppDZ379TKS}Je1PWivT<U0N2DXUI8(HKc!$-NEC@&mS58oavS`o
z({hVPjnb6LJZfz4Uy~w*3bCnb=RHgkKy{9PLd(cIJjF!pJ#b8v6#a|4XNu`tD&dS)
zs@?AWf$O0c+6n7ZZzc`W3l8?qbVws<dk&i31KSUA?Piw9bVi69xHZi=sU+jbGLMP*
zqU^aie8x$!^pFMk_=x1-3OImZJOvm#$T2d37{H%;Oeidm{(Fcz?!^A@s<QjK&Ac|b
zI!Yr{MYAhG4-2EJTGQTK*KfGBafp(cuoK}@rgJZoq{iLk-Rt%xWf<r(&3&}e_B+-Q
zmnk)3Dz`Vggr4c!cAbK}6{`SXExrL#<L1Meu1Si`hQ*!7Cw}(Iapa7=#MF5v!@sP8
z8GsCaR980<+;Nf_K|r1XkglbVME`zipl!O=I3OWHgN5lyf8pAT2T?Qmpvaa2vb1~L
zGI`l2g4{dw<}V%4r^?DyYFlHR9hV2>U28rxytJ3v{&>o*C!Aqtm$_RSOXCyAwTW9$
z9>I3-&Wkh}DeR!W6<EH7|AT1hgN{D&+Ox{Za+OY)TVRC5XKzf6t;xOs<q#-D9whVc
z6u}b+z;gi5Q|P4${7+Fgcg+m5CGexduGjKDwcxTw_ocAhK{2~J+7{{Z39C@7Y%Kr+
zRR+Iax#-#x-STIyYCO_8G$Dbq_0lbmi!@NP3E=P;iYu*@%q{u~%o-JRS#g*@tUW~s
zW~AKUU!ZOh0mj-Te@Cnrc*B<Qu+yH4m|2gW7YH9iLuldW*D;O2y8!UUt#ls3W3}pj
z7j(vvii7)cxoMAlQJ#B$@Thw!MU`rw)H_o|q*}?spBA{*Ir`IWc*9jdp|Pg>Z0(sr
zLrg)O%+-4~_OAx|6axKKi?;W&NaP>vXcC+~NUvSh&f~utDcYcjvouY><ixlEmML4q
zKy+Ni`_Egz1fV{w0A+c8xcbc_$Swi0S1ZRx|FwEi;4HqX4W%7?!bGO#{|mCyQiY^S
z`+@Wa4X6dvY|?B{8cTL{c!r6yFkGkoSYI3~$Ncrh&ru=oqI*P%K`TVaZw}s3bB1Qj
z>F}6{%o=p`@LxI3=RA&Y{oN>x)b?T%jT;Xb!<SVpDxeHZD;(@oR_FW2B(scQx&oM7
z$QtGWgZoeDZf{rBl}ql<9p80pHITC25^adc5?LbV(-g!DqUL4AdrU?8WPj?3^^C!w
zJITQ~Fgts2Xb_s#{#n|?Y3T5y+>sWs;wZaoM*0|!3d^j4ZW#X+X!&dUvU1a}ovQw8
z@;K7WcF^Ozps^7sFAS?aq&)zJ2iLH51k^PERq<Y}6DTYF1GNwCoT|vi{%$1gWcxDG
zaB#8>N5)U9K+;Y1P@XI>8z{2{w|S|ua)zVX7*^#-VjX#b&oEF|=I6C&Qe^$=u%qrm
zkHhVX>eU8boD*{zxqW--9mQ?t)3cL}ahDNCwhIFhd1ER83+1Dfqq_RKp#OEmZ6Sz$
z0Yu%#nQCCyzkxZnJe=|l%ZNKQOYfd?>eB<Jicbd{9&UG9I)$=!iqDy&JM{_il;>K+
zYKCjVu!!`vXh*rv+oZ{#_65FVdVCvMlJO0nN8;D4&KE$*QB-mcE1Gh5l3DTHU`}cv
zRQnw+){QtmFd-f!9AX96qwffq8vy1F$E^VP+25;nMis?SK<NEz4S}05p_>olRxKr%
z6zfqQy4d1Qn!HtdnP|wj#N@tXI@2~i2{Lgnj#~R_iqT>uwKWoPHXfoC8+tQ_G@FfB
zs?T|F`{GlLI?*(@#)btN7oHdgfYpF0)<RtZ_#l4eL1lOur_2F@<rZMcc_+RLuK1gu
zpG_Y^5|`OE**wp0R;qm8hWWnhw-CDhxo?MqE?M7i+sv+%dr^E}3%^@si%0fk2F88W
z2SdDcYM)13B>!GymrY~ixE%LlZ@v9RYD<!rP=2HQabGj^ykj|KBUhq&j!R|8{8$`P
zF+}L_3x}aUc9-<Dx~9G`T~LbI2X7%Z!h@!RuEX^-nz6Z-kam$_zldRXE+C`RfF?CQ
zZSsNktTYnfN68ZaL+%M_|I5|=KnU|25N2eK2^C!O$0LHF(USbQYLy~J;`BIKn-Y^+
z7@N%Dc}7L2@tBoW$@%gtM!;MMPXF`kn$Qwx$q$VTVD2#Z7aRWPur^J#`yD@B`(hNd
zdASAdqDv#VN(^_rZbD4#`Y|v$8#3_nOL~qM#jBUuI=YtEi}F1VlZ~f0-$wQ5Ia4-0
z$&!d)U16>gI8s5`4hY|d9?n+|-8q%*sdHR6VPJWhS&UBeYV-32@P?~*^|kZ<=VhEC
z1i1qQu_@#f2j~1%SFLw~hAcquMwTsxP?69e_<d!C)r!kx+EvljG5>PvHnoglFlWAJ
zG=J4u$j#xVl(R2RyxPlG!c?}G)7itwhx<QBLdNxwv)MQ~TQ&V%LUhhBa7RrmIUj`4
zJNZPr>f3T(ADv(2N!;t%cyLfjMH*YuhkLJu=L6tvca*d@JS3hut~V{$Hoc_Lfq@QE
ziw~tD<mj-_pzW}(sF45O=}QDY2uPz3%(i5J8~-ZR^y->@!OeySjk0zH`L_71N=~Jq
zGxOBhGYI=>H4%!tL<61lwpy8&@!?qlvb|~2xSJIrM)YEOfi^?-Lw>*F@H4g}rr~On
zIo-aDUb(HIvWIl<oC#(4#n1QM3M=PjRX8dt{SC1<J3j|B`J(W8v*OlOMzhjCsHhF_
zs2E|~UG4F$4Cb2H5`LhoHZCIqQj}U3*SMpImp*RGAKH@Rrw%g+7{<nZ(gM{EkRjDW
zq6gzs%EGVO8-!F~Kq@ulibQbX-!M7tj;dt++>d13`#V7gAD-8D7s@fPS14rrR~MK(
z3)}C8G?h!zwpp+TGjn<~o)9iuvwtx~&BG_+Pa%a!n<BsOnkZ1Np>JnttbeufAh$i<
zG<7ho-*BJ%-RAL=N@5HD9gbE@S-RbQoCgYbld-9M_ugMF1Q&bITo8A-PSi6tH@o)V
zAD3<{7WMB{P>Nf)UfPRo;m_IHAB_uPAeAAcrA5NSg7<2GLAd{~0!9L)*k;`x0Jq%u
zQ~pSsrAKl%pos52^jW>`yFedTH2IVpPyPedF!j@|UXeAqbj!G*<T1%jR+lWs>KNXl
z#-|Ca;^o&H9L*Q*R7bu=HIvtS;xoCnC*y*sI)i#U)x&hN)N}lNR4Y6pG4~<d4|(`%
z9C0+B-WwVc+#Sb1@Lml5ZZXjH)5BcmSMt2g{a%Kmn5&ol=n_1MbB(P$Dv+ZL(X;Sx
zMmPTQtF8KCm`rlPBw_k3dD3QuV5kg)9wf)hOYr|vsSad>V90=AUen-g@aMm`>IE0S
zMNnbU(*jhVo1Vn5PO0YW!54?9(yU-Q$$HU-YFzP<B*#x(=6I>76@20<g!J1~f%@VO
zECnmiYv1}vtua&4DQFy5`(&rgR%TaQzO+I*;{C4qE;vyTUvh${OGK;sm&N%TtrD_T
zqZ3;Xe7m~rQ!8Qe^x9h=z;b*gZTGxeQQ647bF0DPbQ$IiL>AnVs~V}gNnrv+{9plI
zFcv&|7Knxr0Ro87tTjIYZ|s@jC}k`DW|!2%a-&7?$XI(T=l95LJpr_@L=$TpS^m@9
z;wNu<8%^&X+|P#KxZjk?Ga@LgmRC>bQ4hdRda|I>!9y&UcBM3K-}r#hAar$Z+g=+{
z7&nJJ*(6!E{mqL3ARk(i?~YySQ7|Y29$ye#<uMUJC;$)>3k52Ci5XCuO=6F&)hjH~
zYyO>NB-Pwwa<LzJl;?$cHo=mN_WG;AN{roIwn;{~tm>;nH9qdXoo9}BYP3mnm(5jb
z>VY{L=AY*Fn+Sf^_=b{BFE&)PGxU@<)$A<UQ#-=!jX@AhRxa#)Svr1RUSI$@J>0Os
zMev{kJlT|^q5u!z0L0z))af_L;k|XFaGON`?x)IfVc^Htqp~CE2zfa8&diV~&fF!%
z7i@j?;{98-yRqeGj`%EI2LnHTw0*UpQ1c+7KzW6o(e27(<1?$L{0(@?uO4SK`~2F8
zVI}K_*}VWk!tA-|b-=(jMggcY^w~e24gv%Z8o&cBbshn_RUC$iMWiUtQKRjw+Rz4Z
zJj{(?kRpNQ1<B2E{`3XZ(SQk+Qk3^+(7197g2r>kqtb6r!u&RdZS<;hU4%QIi(d9M
zRcR8~Rp6;j1ve@>=!B1_MPDzoR>a^5Z+WeA?fxvIjXVtq0Q`<FDBNleBteis0TNv5
z250cozx5!e)Mkv<>7e5tm(f(BAx8ID68)H(0lTX4rpLFu@!Kjdo3lP&R&@@ui$9}q
z?`QN0eq`CGJ~`ebjdQ2}j3Bc8(5~>6+O%dP%sM{2pFY;Rk992*kDJ&_;9ysThYmWa
z3~WgTg>=D-<YdSZAm{){Q#x|)U*m>2(GRL5I(LsQnR;gw%yeWIf8;C{=GN+V6#EXv
zia9TDo1-ZB^6rJXcBhKjV-5{wa_q(Nn*zHnAu~w+Q>kCfpOP@_>b2suopROf+_upQ
zqtgc1$1>tLw>%lSzPse|Tb=C4%fmv#^&t@WI|QaiuwVcz1K@XKfYtY>NaiFhoqLT_
z?wtOl2=EQ6lene3*v6ko)2*iVU%IHL&-kHm-A>o{Ln(-`Pq9<Be}8&kFNw2Ygw@C2
zwr>(cs3AzKlkxfxrY;rw7+H~l#XkNBiGwH$l^vF2u<2V@)Ylxa9mvZ^NGAxAhro4(
z4grG+!1PsUnEi!m+Y<CvQDM!&7G)G|DRtJRIh#8rIp?OuSs7AMiiD(|e`3EQTXObc
zj11k`*>cLmmGHEP3-e?*3r@)SUEe-7s$1qEPcwJ8NANSyId0wBisK$bVbvR`tvpVW
z83m>{iYlh!=x6{|ICL^VIqV-yAQJ)x3xK%>7mC9bSIeviYWxJ^baK2&d!he~tbj#L
zEB3fqtZkIpXO8x1-7ra4M`9Wu`R6Dbb@#ILC3I!?w{xMKLz<X(66>l<Bn;$sA4S!^
z95l+djD=S$#F|{P(na72DR_aO?m>9y)&!y9>hgF%OZPt#88!q7HbAoF4fz5n?w@{S
z@Rj(Cf<)Rbc^>%Lf|{5ir^JnFL`f|EN#$qbhM+^bN_S1m-+`{)%zk~uoms(Cks=QR
z4q&!hU-c)p+^+B=Z0z#v;>61=HPP|I!|9?OPuck5@Mwj+><@NjTxflXpdj^t$-xk~
z;)1ylAUFUBCGA`a@O}OS7chBwuY_F%-bCBI4oebt=#qztO)66~5A#i`eb(Z(uVo{Y
z>JaSN$0v8m@kI4^B>T!}s-scHuMD-<yxwoCF|I^<=^fJ5;+~%CzeXCx(f6a2zN|s$
z04dHWG-$b;%w@8t{TS%g37-t_`%hVT5iqy_jF-&we4xAP4-B^dQBIkbpi!+tF1^aR
zJC3G{lePcr80!*2C$J}S8R3`o@=kqhuY!%8_3v{s)A{{A+-<9S@0B|irSNu+&}+wA
zj=hkT)mF3`74>w&BMM?1J6Vf)CSfB<n>`?;s;M^J6D@pvpx6wFmo^lxErJLdygxLu
zzxRQo`E$+58!#-EB`7?PL5lWt+$r6SD*?I7>8dTytV}D+Z<C|19BaJ80xKndZHABq
z_12^4?>;SV1Mw+kzEhq~du-0CF`wgZ_vuot)4WlMeJngMDR%yX%`z}fFx0d6U}xB#
zi|J=PsXA6ympn)wt}vnq7+`+~;L7DN{5zVlQL~Y;vCh=a4tr|;V5JK-6R`*Zvjq?0
zWI=YdL9{Wh$e&qLM6z$zI^zpD*yTnTAqllJiXmOa)0WA;C;86$p5K{+wL0vYUdK5N
z<nsO?jk)OCFV)Q=jX)|liX>nD=*KP~_7<r35YT17L;ptumPF7H05m;Fa+d#Iq(3y{
zL~W}d569J)FlT7N!Xhn9USpP6U0*+)875=IN$+$pzrNo#8|{lU7>}M<)prq;0U2>Z
zzS?pgHC<$mE6sCd@ekhKkh04*OFkH<3y)Ilc=Ez+-taL-mbc@v(!wN&A(Bs<j)0d?
zmjEB<A5X`91P>v=QyN^0_uuJo&_G(A6j3DcMrtV~z6x*YKu@WZS|qG~yL)UPL^{~x
zf-<IYqLYi(AJzSH`MsW)C(h(pi!iKNIn=CrL}YLUrki@Cv`Hy9tLtoS#e<n+)%NDn
zS|8()nG=V%ebdvYVh=6^p}?@SQBVl{TLsD?Xovussjt0hV3)r?HxjZzLvJ3#v-OOx
zylJ4_k9*iKH?k|vdYpOFT0?TJIc!36oC#0mpCW{32`JGqpA{3u#Cw?xtm6r;Fz_l+
zm#Z=B>?-8qe0VHXX7Iy@uA^0F*(?J_=?%PGOLo0@=s=_DQCRYmkpFxV86^Y?F@U1B
z!;uGm{_pq3B1<KFzICxkouTAh02Z6Ym|DtM*}V<g$Hq<O{JL0?DM$BV=+TF&F`f5x
zc%6N@UvzRc71Kj%4yIi&&S>b4D0HIfGUmp3gsr|q^%NP9=Xt&K*oxkU;&Ht23T+4F
z6=KR_gam-pft8-}$Z)+;L*S4AI9G}8L;rrML?1^By9<9)s^`NIC`>P51?#2@KyiPJ
zQ1NCJ;oR&qO1>8X)JDE`j)Agyc^y9NS||f^b=E_dXU6nG=`qoXDWGzujLr-g>20XF
zsv^BF^Zg?0kEpb;uBmk`5ZVwUzg71`5DbFVC*R%$|Gzsl5is`vm=`sYG{Bn;+%{vQ
z9K^=1_&%2tB85-3GH02Jin}Ccc0hbXS*_1%G$Z>ZxC%8!@MEr&n$%{w-$nFrS?N%g
zV?K3&p{CU8sp^OHyV>Pt#;N<{dQrH2Lm!Ft9$^g(9TgDr%6+;ck<0&BOCJbM!sLMn
z>X&~96R3+|Aq7~RY%QaKm+9{{jK+eseNbo75y&TM;9cRxN_r)GFWyBU!b0VRN1D!J
z%>1u(CuOLO*@R|&UMmDOWVH!48zd&V^SVyT_4DU1H=pbZ)z$j^8fET}g;%P@dhf8u
zzaPE7<yC&LmwH6^$Qqc52h$(K3j9YRV~8Lj14s;y2crHeFR_T0S@q3~u#NP-&9edF
zWAoVeL}s_Xg@PXnxQx+ov4Z#Qzgl8-SNC-<u{=akdsr9PUrEBBsn8M<Mj!DJ=~L&~
zN45rHq%O75<wh8Fe0U>W%<cmF*gI{GBrlYMJr)<*TwdkyF04ry^uLg;2?B*2K*`0y
z9RrjXxPV*kY9F;s4oXrmClVE&$(CihJ$#KlIgVq#uKCgn{c~OuOe6LdLO)V|&&K_^
z<66BY^vjF382j$Xd}JPR{k6B>9b0k<75!e@<-U#+EXq~-L>eA7J5|R2np6h4%_y^Q
zxxk8Dpk9ZMfsarIj{p^Z$vi^f{3(-v^Lc$6uDrq8a_Uk_qIUCEwXK^@sl#fPt?6%`
z85xxbR)am>7+`4AI_M;yevKW{Ck`+(-svMlYB##_c~s&c(z=E8=rB*Ex?9nErUBG)
zP6W0gjeVuOT0;Ms%mC?uQ98kL(t*olMav}6kr7T51?_+<j3okw5`e+XRZsmJY@|Od
z{Ni_$Voeoq?BGDL)!nz4>?$c0v5NgQ7Zt;tox7`OtAEC#JzXXFv-MSIS^6vrQdC2&
z`yH}`JH+5QqYD_UZsxD_(xJ1%E+<@Ve78|<RD}CQK*~x<>(4N7mNAnjFATImn*Rd^
zfrLc03*aHa|7{r?1Q8WL<Pk*_2Dov5e<$Ypn^zsL6cs@+IwcYQ1ji{Saf~_xJFeg9
zJL2>yFbYaPrc(cwBw&ibv3(@#GgUNU|8<z>`AwK_)PoQ8>{tVH)`E9QcJ)ze?RJfd
z@parbrmUT1&bO!}S<i?)<paQ@i2-P$LAprz0KNSG)yDw=L=6Ca52kAW8&W40Q4r1k
z^%iy9?C$64x$l}<5;8hjQIY^H0W0aR#ZX0)5i&9%`l$m4RwG4WlrEK=;g)U<&qEy*
zxsO&y8eb(A!<Vd^Mm}oC*|jlcd=2E0E1ET8MdiOTf#pafE^jun1u)Q`TVutMCBi`U
z%s~^@Sb$Lh<^zMFx^PW;f*_*-$cUcX4E&oRETUKEo_>Gq`L}f+I?iYzPZLR@fTZ8G
zChR0j4l3`LnN=nDO2`%$<1M}~bqz&{VZXfU2;qMYS?^$SWmUW$O6Z5#?>K5OT<z4>
zOMXfAo)`<iUIc1R!+}Xi*D6umstW#CT)Z3y4xHkzB7{NUuIZ|Z&%9V&+IY0|c>lR~
zfzJ?hv;dt<U_>eq@c&z6?^A936N9{fK#b~Aun;}VRGfr8t)kv%Z<=fVWtVlaA9;9_
zd#QOV3e~}A{g6h`{l$bg73Lh>!+FtfHtwSoZZ~<^XMe)a_y*>YRGT%zt>wRJiOhK%
zhjV@{O3-%C8r7^F#0#tkSiOTPcZEYj!n@${8yR;56Hqn*+RHe51$TjecLl!gw{h96
zLTZd@CuyKiZ1&x39ELo9-Alz$Ud&+K)nrMynDOO!qd;Sd1B=Sat!-Ki3H_9p9^F9I
zW_+qQhC{<HKTB=i^qd%^=JxHO(2{L~MDflq)hmHGYU}`zjE~=^&q$E)s6hpOKD^+6
zUl8nx;GqY2rr9Vi{yp(FJ7dAqtT-+=Js&qJy`;~7fQKxXdorFhy7o5IhqiLhjVx`0
zl5rEWiH1Qfgn=O}G^h66Z>t;%DffDL%3MtJquI%hvI%}lJI6&!4P@y5<|~S99!rdq
zVDd`l`X1s!YYI{h3F!l2$^UmP`5;gj02JX0PzvyL{P|o>_fY842iZ7Zxz{%f82Ft=
z-Qbphds#%)d#FFrX*-xZqw{*O*)%-~#e5oOLP^$uM(zNXS8qqVM(Wgl_&V{y1bRk&
zD{Q?bRJ&G@9=a^Z@w(+>;;68Jr*Fx3+cH|;QOF<!D*&qt4Spy2BS;tll41%_9&ji?
zJIfYBKx=Z{JQyX4UnfDzXuklL;=;`TGwaTSH~Fr+Z{^lJv7@JKi5Ru)$2?mw`ga1%
zOkWtuKE92?&~ZR%zhOh+-6Y#*Cphgdjbpa9;^fN7sC&a}83Oe+qvi0<c>~O&Iv!My
z>VkAd!96{hU<3*ifZ`&Jc?;hA8?~etU+_s_oK<BY?5ASFRcd&mtMFAzj5h4W?xQjS
zrn9LB66LEA)|8G)${*@jE0S15O$*K+6*lT$@JUoR$98gVgxYI8&s}OToBp|?Rj_V=
zc7wX-mDOtRkF-)h(l^rA7O|?e$;a(u=1v#IN?_y#74krqibOh1dn=^bWxuTSxcnIV
ztwE}?46;+`eSwG06p1PJRWG1kYTQ}0*wU*LsUCD7a;AF*rbcoSjxLy6!moyl#%0X%
zCxTz4c091`+Fs5OmavjsyQ^Bc!qz!s(pgO+YgkRfX#&ZFL0vmYp;&!T<^Sxh*N9_a
z29806nbQCmxBRE?Q=2M(oc-6#+<+9nThWiLW-g&~UXHwU%jXT4H3Ft_fhEgf+}X`%
zr&L2Gg{}+eFOZ_I6%B-ldo0VLA~#N%smX@~-AB~A<>5$W=AIOjJ7Fv*F=0#5@4xh^
zhzXqdwRTbKDrU@z0W+|a9yl*7CJa6jv__^C@z|0#a_#J_>`?P+J*@zNIMAFV^h)rR
z!T5Z9cpyjsyfLoh4Fa4607ogSyM;Fp_|#kUwTrtY@^ebdy=~j_Nh@47n{GG~G`qg4
zQLYoRE*>45CHKMp98Um|8sd?apKBTj86{%360uv56zqX0(a)!-4@xAl=0F8s^`X6k
z&6P}KEG*!Mw?B1WxT(Ysrm13ZT*`d=@lg&YdL(3N6IC!jq2gUuwH+osK3zxvEJRrc
zp05auK|rzskfTSnKmS%)6HaMGJGdN<o^sQjNeC%Z590aZ#ec_Bvi08oUM4=m#;b;5
z=Uw!+_L<v9*SEQGtB)^hI)?S1Wmzkoh<`r>VHfBwpR94)f;z@!XTvk*ZFIsju$&i`
zr&9*L$;Zc->7#fr@?3M0a4CnYR)Rne(=fF@09(o+fFIosgB!OpZxL*402}AWLLI<%
z`qPn=<W(c1lU%r3H{-;T`;N8ppbKw(28KIZ_>}q<H+PpJFuo=dvZ$mO?;C2B_G#RV
zXhy({%JZRYH|8&+CDqq*;rzEBknKK$)E504VG|<UPCruC%lv+M^B1DF7)6bOh?JXO
zrx4I1fe4}PQSbs>a54gi9l&9b|GM&bZVIu8+GE!-S>n^q#fcX84QIl&&d9x{pq_CZ
zr%q!uwC9Cn_G-Ymo5s;z?g#ptZ_Y^ZTaJ47pZam8E8yLyiFX)|NQp7cMD>O=phlk)
zS&z7V!_J6q>^`Kl_C_f+dMgPcPiYR^45Z^FM8cAnhg;hnsR$YlfW}rnjU65bl0qMW
zQm7I>I0#%i?r`?@IY^`OHx;h9rI^~!A-w+m&ZRi2Ch)w+HxcaKAkyIc!@$C@(j*DV
zFy->|wPc`0u0~BpSB4B$ODOTIBE9w-zM{G&osdyJAy52+@7_FgFIU5XQCs>jW%xT1
z_yIw}36N+y*f0FcOO*M2(Fi`j$B}NkM&NYi&}_<8k$fUll&M=+`+dnI*f*O4y}FEn
zTQ||Ql<ef~0`|n7Z+Lyuuy$>Y(QXolAMp;X!A77mjaLZoi>5_pHs!j^YO=lDF)xt{
zdhx{v^w5|zs0V||M@8c&f(IeECG*&ClhLxySHiuK><e#_(+8H~@w#zJv0pB*T7Hq%
zd%T9x!iYEKuo2FXxZCyaH-^5CR}!{XhV+(VupBdr5-A_Z0<R0O2(cdjdkbVfA_U_C
z1jE9#n*%cRfAr7mGQ(G`4gE1r;#Ci6UqE;OE9*k3Z*cT9N>zTpwMN&v(}OIs3c-7{
zAiM*I0fAYOb(|9?D5(@)>azm3m#4F+=-KXCDDG`a1{v)?cu1RO_0F&dGCnPf7nwKX
zMEC{vJD%`@z>?jYBz6qI26%obR=6De)&7Kl;s&5_d!GjXE9E*jp~BI8K`^HlE;q8~
zy}QJsja6vJG!2WBJP<k%xG&G~u|yF+t!eFGHbv8)N`kQkQ?ttW)0PS|2e-kypy$=w
z+#xwd94d0+^>1)CT77&Q73mw9np_TjAM=Ejyb-!WCT`@dh$?qggjw!_kVdXCl}vLX
zP~{M;5C|_kB-oLUfa3w+B06vS;mx2|y~Q{i)Pd{l4Ik<r9yKW1o#ZCvL>gNo$9AI>
zHu))2Q%dEVPE_s9R=*;BSQ*`Qq##;DKB`%ax?}-7j;uR2hDtiHmLrRA&wgZlXS8A<
z0m^&mfMW32%p9J#@g{eeco;Y2(tx)NB9L{Gpv(Y;w1@OzK?D9v&=e!ccmcAJxQb|?
z>iSQc>P8|Dqbdt3^$5$8{m=j(wt%pS?h7feqx-%D7-@C6{ehEF3I-NMk1EoJdg7N1
zU)M9QQG4b-Brh=xLzWiZzdqd?6WE`5lwy}7LmGqCbI_Uq6wkB#upiheH{|Qw>}(ax
zMYX~MQ7AY`ED%A|<(0$bmF3}S5t(uX7BHLv)DNty2kg|x0t<UMI<%j~Ttj@2-}jc0
ztzIG<VKuv4&(Do9m@MkmCE~m3Sw9rZDam?QK<D0itiTOSFGnYLsfuduy!{&gBMMT^
z$34@-tBs!#3g%I-n>7gi#(%kd_Sh(id!vzdy>%6sx$z9d(VtZ<d<Gf>44{y9W%yBn
zs}W560F$(K{~(+RJM{s5s+h<*$pIQ(0p;|0?D^)$cMhg!WJT#QgKyGX9j`>+V}#Ld
zBti0V-n~hOfJmuf)9EgHHnuIcN@UdSL#{f@5;7U39Xv|Ad66sPKy@YLdSfGz`pjE+
zycI7O4WbR=*2=2BS;bNY3?bz~c{o!?9fC;!U|QGzru?@q73djxbiX9)s)w86tf4%~
zuWiPn^`~Z!zw%shv6*ju?nn0DXE|Ot`ZPweiOwYVtIWmpRgA)ZX)k22I%N>%=xMZZ
z<}~!wdn%aglX&|=nnzI&8WMn%IWK14udN%ysLqS=R!3`8pgIMt?Ic0i1O-6`Ltx4w
zv~Y8=3Be@@a50f)dVw?kUJ-rixR9x-`=QCW?sA>mlxLr#vs6T*n|g}}u4w&=7*rhl
zQsaef;~tYbMP9saZ*3QtVm8)f{$d+oZs<IkKrgU|6Q~9&i0?Z7bz+;Jx?r<PbWfNS
z3wG7YoH%Cr$`h!bC0k!?XoXrxns*k<TlDV9#D7gok`wIJ>(8vS3D)Co!ci<~*Y9tx
z+tpSVlvl#<;iV(s$FhXKA2MwSav^}6B2wN0NV)>q<Sq`%O72sn<`gG09osj7hiXgF
zGwxlvrc^2Z*Vp+C&YTYz-eRrAhOwLu+K88ZSs+sW;EE(mIxV@b4C3UWNmJ$9k9zCG
zU(XeM`m+|#ej)E8nne{?;1(rITVJ()7Uz#iQq4`IJ%(O3!SC^zDZ6WiO0Gw_t$L6B
zky{w?-Mt^DF(lAjg72n|_OceP`(I+Y1!j$Y#~ziT?V|(sy($Ob!DE!*F9;EY0TF^5
z7CC{5JAdxy3KGxR?yC)uWrZ!xWGNl1iTJi^kJ7r_!_0hPp`TF)Zatg{xt7+nX7$j-
zk`#f=qFj7?F)m;Ir?Di?579V2wcXVgFbK7bkTTM+x)!Ea;uOC(|2TIL@sTuqRrsI@
z38>n`IJ>tPs&hl!QC{C;ERy$kCD*;id@cbg`G6=e9UUPpRPmpZbo3xNMF7sH#afy0
zWhcHhRc>XUmgOCBy77AOqLzWGG3ke?PpDj_l(PoVXyh=x%|tFGe1ktoRf%7{uCe7{
z_WP9dlE{0|nL#*@gW{N?O6<cuWB=Ulyzg;KZ$E0Y6F#hjFv>)v3Z44pXUXGn1^n>B
zdvw9=PP>D9@7E16Dc{xfk=0`_?JmB}x1ak5S{iPiuNv93>q{Th?LOWjmWSa53h)Eo
zybjzm3+zX*ivsKpV<t2}U*w-NE{k*--;<(nD`@VUNG!GCOXqYb@^|@C@uqKp>nGXI
z(y-szC(CCjFBoafdU9xg2Kp9gK6Pw;XzwK!gwpoL60M}0AH~1n*nQL+MUS2!-lMb?
z*94U_{bUn6NJeJK-%{b|g4-zzBaK_>2C!&zD0G+~5o00Kpfw1c8`HN-qgY0vXsX#(
z)e8y9htR#or$^$awEVB&V;Dg#22d+zaism5^=fkk{vLRMVKBMOcDI(HKG2)J0o~S~
zCEKpW3XNg#Hjp(7BVc^{Wkuu3twWY+mhsD(F0&cDjzw3h#9^KrCbBXVyr)=0Z7(f+
zE*K9dJ2#zNKi6S0T5%1f*PcH==f5hFxPWXD87+67%66O)g$Lv3Cw%0|s(#^5$cL{C
zi|XsL`0pJbM<9v=h?n5r?0;3ewy5%J4`&ov!Ul4|__Z$h>L9_G*9`0VbJfO9xW~D+
zs?S2PxLTMp=p<E^i`MWUybIs+DuTr?BLwPWBYrpbzmJ?4AB<a<ovKnL7hR#b2v+vU
zn13L`Z5Jhc(BR$@)#}-5Ke7oiEa<!(?;s-zk4=0ALZ!&6_7$Nc<ZV}$hYkKWkG5k9
z!6*SRnqA8B1LHFO{$RvKUr?aZlYUb)32WVG@6=7{m{IbRf1dr1sIzcrvg-o)Mt6gw
z1V)I`Eh*jI2-2;R(ukzgNGVZ}ZV&|N8q$q`($YOZP*UN0^qt@K7yNdgbI(0}yjm@~
zo9&@Cz!0uuEpxG)gvy3{yQcQUy%WB2c{z24-_P`%e#NhgO{HRIV41V<Y?qPh%N9*8
zD=VIiY2Rsp<~)-b0Y$gCyxUYH2!g%I_Z~Iqv2EpH=Y+5)LU^E>`D~$|`8nm~ff4k;
zQYM{$>55qtsRTfJHqcxHRL1@ZAY5`}eUmmto20$GAvZ-&5W<qWd|X!Z@qUXcUG^!)
zp>x1>zaaz8AQleOoOX>}+uGCC>v(U=Cq8OdadGXBdw6U(-bFm>Z^udwQ$*-BMI*{J
zAW_DKh&CBaSUb88<TLQKNxPOlz%g;b6X75{EJrS0EjTks9e7bONdI{<izqxv0PmGI
zVIMLaRc}4v#9JM&EBiz<oeun12Tc=a6zAR^kK6grhNnFk)dwWXgBHU}71G|%Ov1O9
z&v}g|)_U3HR+urLK?o^78{f$~y+^u==#O^jfT?{`JEi#C;;|V}8b7#rFrO!x<9ykA
zHxcA2>4%^CnGaonR9SgA7->kZpqQiprVNPy#=q8W#|D=h0*!EYk!O;|n2g<_Qt|Vv
zC*|dN7Rg4xxx}sQXz{yb^r&z9>3Bxsze&RAEiv^U6(#cNL44xw6MGO^>Xcy{_>NWQ
zV#`I$+rJ{bbs@p(q0$+*AIAN&iqTVl34g4#^05mLh5*gz)>;x7Iw`X{C>R;@fUl#V
z9sp27T=&SpU;e~AV9(c|ru0gjTUp|~q>{}TCfpnT7G8Y;k0-_t%IRHHb@5r5y5#RH
zk7E}!X1{R#Dsoumb0Dg?u>k!{1-ZVP8t;&ShyOaRTGhTgqu=_cfHjAHPVp+P87c1+
z$GIWKGsYL~uU_9mGtig(=0LHcn?J!|O2WHw|H$dhtHO&oQ+1;!I*HHsYQy%O8HNQ0
zn&yZavp^E6cSFcli`(Gt3w|uE9ou^w!q}Xfbec9^llc+MdlomWH<qcl$9VSk3hWD=
z_4z$IKj8qISJA-&j8Mifqy@2!`p441Kc1^Iu>z+8lH0KX`6`;9t8C4F^ngi1FXX~o
zjl>Lha23Z>kT1aLrSnR&O>kY%u>ZDt>0L5~n9w|t@A;v5K~7svTiSBJn|Mpw?BLgC
zmA*QQ=}Jo_#tFS5?e;*3sFicMwG(`{#>Ira%&5gjjnD(8QT~qbc3)_^v|(<q4k&>r
zhO|?zyaH+$ft9whDeffwSY%)VjBunIEVGXSmH~jT!$rUU1@3&TDaff@x4$|`_8c#(
z`zAT7tZdH3W6ne#BjJr=%iBz`4ws8m+KJoov4p>)W}xG>zsBId`P|WNf*;B~rI#~j
zC-fPI3Ov5Zy!Mm{j1lX4CNL|Lp1E#Kvu@+@uIG5|(1G~aWKWyyIRAHq;n6}<`UjiL
z`hb@0ux)ZDbDk^z*pD50uD4Tkc|n+DOzPnnJxD=6LIKMHz)SSLhDczIEd6}9ry}=4
z*SV>t4SWla0<^~QavZW1(FWs|-HhS`UOJ94{|XYC6Ofy~l+zwL9^)-ep1JFuU})eJ
zy-r~usYjI}b`B9t1vAyvp;vXqPpK73kr|y!nGou$SbqB1i{9u^y{$Gyb4pQM>#<e6
zm!OI`q_7;sgd0UGgV5h44nzsi>!a~?%Ys3`O2b~Hy>Nm8mIHw0U39+#)2aZcpavLk
z)hi-N&7w@dRW&i^!QwBM)m#7uGX^?5y>;@Qcb2tdDZuHRsMgMj^_3bX4V3Ks(dCP_
zjD~*6z`1X2w}+C6CQhSObl%R8IZ$YcN67dZz}3{$>06s_^)8VRmRHVGHf6&mc*tyK
zbP^<oGNXc|9-Fqc$0dgtrY^r}$obkDF{O_Vl9v?#t9N%J?`+5!3RfP$eKIMq0Zcmk
zgWD_hmH%!^kVUgqiT3Rn%~*P~f$>M6Zrdg7+f~WWKX!))VX$1P3yTve)b_|(KOMPp
zHOVk-NNQ9GE4uSN8{t_b<^YF$HI~0`U?Ff<Mtq%<<yMG+`O^N}9rOwL@nr(R`q8-O
zSxyY!6fx+WXeb078k#7q`B&f6pRBL}xeQ60+LR=Vclo;<-=XjC&4ADXza}zNN|Rt<
z5=0G$tHaR$J8zjQ)E`g){=j8)h4bH8DQ#O7WK3~ZwYhDA*x`y7U7xYzeh<97<lGa#
zDbN{?xjDbfQ#JMZZ1O>7s57tC^D~g!Y;H&?MOnz2K^td*b35(f<NFeWPxp4p5Z-Z;
z+)0X6?%2ik95Ou4<TLuoSwnB!vjs%)4(0L{IWF*|U9>>po?D5&T)MnWBur!i|F7i(
z-=O#u0X{WYvLdia@{jM@@D%hZx`v~w%~Ot`Gk%UIi#b?mJ)-3YyW~Wv@aTAyowoPm
zFAG0$s<Cw(f1Z9j!jjUCf(G>9StxKBL)ByDH6+q46w7fmdChxFBeXFbYR%M!?wnF)
z$a!orHOAljb}*I?&T)F!3IV22x0p-QPVu5K@}ptMM<L%`I2y_SYf_Z}v?=T!)4#*9
z0l&;x*bc9FpZXVG?x=vdO?VN3v+@(drC%l_%neD8`1pvwpnpA6DTX~`(7}Tq-4Zt?
z#-OJ-u<8CqO-SC+t?DyA{<Bs1OXrsWitbi&EJTMQE-)+924@=>v!2k^-PQ4`0NYU-
z#E|q@JW*7=GaS?ptZ1}E>QpQgl`=r({K)w|kem85{05$stGtp{H^sJJ;AlHP=kURC
zEr_*fBXopSm*slqKCcVjjK%UuW<DXC=Iq)Ygy4%cF$Nj?L=z+XqZ+uKS6htDVQ6H;
zI*q!WVL#4Y#Bv)1Ru1%k+js$0)<ZbQ8;(YDU43M5YHD!7TM)5W3715>95V?9Fke`j
z@t*?4L(!=KbkeMQXh6vI&*%L3f?595X;y_?IbA)k^RblZ%8w6pR`m9)O#99qO6O#i
z@pCJj<7k&?N^aJ5$#OY0hih?{?h-a(^GPl~3*2b_V-Pfp({6$_CWY+zDV?Z_HJABN
zRiK$Hsix$7y~5~I*NO*RQ3bp|3<4HpbKSKLC5ci80ht&Xr0M|^q1aRbHkw}b7szE`
zmoILI!TS;CMnluPRF)rO?W6RF`$l+3m14H<sBXX1_DE2P7;a=yKji0d7gXBLW`Y@e
zue%RM8Yk*@cb_%OJSIo?60Iz^+3_SXEDc*riAJmmL15J}nLM;V0YZHtt}aTFSM-Wq
zJJFUuA?FZ^YD)f@hoe1x!34v=gNX)2Vv*_*Sex+YcR#@~Lk(c8IaVqG;_ATpMS&Um
zCAJLCDV9#29ClSg6fOm~ZSE;n3_82*qK6PW`$+SWm0aP(fC8x=+U*9=@S-m!1mB@q
zYWu9@$G#6q>adg)8ogC^Zvy|Mrx{zv);D`5i!|z_yEN~n2WWSrlbBkJ(5|NJ<W}cN
zBQ6u0sEmA34Aup<iXtGa=wxId0X}pP7E%N$QIP5Y<luXXDxjC_&quzPc!V*QB(?9?
zZK!OUQ<~xk|E;YYZ+L3B9Qk<jBu?U3RM7az?p>`n8LpYvFFX}a`{iZF4hr^aa0fN*
zT1ack=j0!AdiOZz8jQbN84L=r>{Wy&1Qo^3v(9AZ(A4VrxX7w|YT?^#gnozy{|*4_
z9miE5B-qjU(FB;#ppbw5KQ#(a0|1;})ph%8G5-Z5zoEIQ$rK&XmO_u5j(tgk=E^Y?
zd1?^zTfy;eZR0Yb=J|1uMQ;K|Ys>4Q^+^kJXKCL`RuWu^RvmgWT7e)vn+t`vcty9}
zxOlf3jGtLE!vXhb1Sd1ccK`6%w1ToxL|2~&yhjBL8v^U9z$^9{teDWy{(jYe)+s#-
zPZPj9iF*?bcyNCLV~p6NFDhyMqk|XBm$^4>p{*UcQz4i_HH0!LVMTC3XX73|1|i3f
zmX!E8!{&6={pRc=wcJ*@pSb9skTg5gKPIIk<u>V_A*0$m8}86g^@=TS7#6e^Z>O!l
zIlrHoL-G5akC&3AQF_-vD12lGyh6sZs>{v=DbvLPf)4})QU9i=!WmJBS^y%k##tD+
z_isJ^+%I;q$kw0qbHWZgL>xweDb>t^2XXd9>vjQ->SCV1l@!-3N<82E_Bm-)jvfY5
z%2y_oFDhe(9}8RS4ABv_-<61Pta!AP;T{|I?A)sC{ccg_oxbl+5z}XUUIO6{g{rBz
zji5ebh0Sj_eQ)h#kg#pchOG;)X>pQYE)ezVH*zY!o91m}#!KWsDNmsB9=tuokTNTn
z3M^b4JwIRj%{=0~u=Q(4-zP31T~uc6U~yYe2rY$4jzk;iE5IQD{To#g!h-sT+Q2{5
zLF42AEGHX*Iq#3P8#$RN1(h&t`yBPIh4(nWg7UnJ486~E;H<2}oxYWmD!&Jq?mfdZ
zJS3kUPBW``F#Os_bKaHh*h%b$Pm}FH<ncA@+4`@0mzG}xqcFBirDOQ?;)#Zff(Vzs
zeuq&be(OMDer+P!AFROI-O6!JfJNT0u5NyKqzQOW0)#(Z0;~y4MJG{&z`BEB1Wd@6
zoE-(M0{~-hAozg6nRaZF5mody7t@t*hSwV<>ut21jGD(jI4MYJjlD9=vwPz(8=S@0
zH>>iEtuf7UsV?oF?+9gx`HN0^(D<-HS|f7{;<xOB)y(rn+<D^<(4ZXgncO&a_)rMf
z{s*_jIyN@E{mcMA2}S0}{29Y8uA!`-K5m1(hYtC>ITjCFlM_L=(2ntw_4}>)(8)l`
zQAo=l%!z{41z>TE`^><v|D5jGb2-)#3Bl(+dzP~|WS{y>iy~Fyh=k%U(=Jj&FwMr_
z5(zb}yE-kbQ(M*Q_%87`!q0jz!jy=k4%7o)9b`Rhog^83I47Z^CHGVjL-g6=tB*!i
zHXLemk5#K)B}&$#QIYiHEm(Jbjd7@!R{J)5N?|AjYX|eN?^OmJi#>40ay5#V1`%Vl
zMl|WW@eN~=@hW$RV<MF=4+>fjfJXnp&4m<+bWcsuT+KdRkNY1SYxeS7Zc;S&ImC%<
z8@+UG9*A7ns08|a)D@2{@TH!g{1{2yl4jt8BU8D=sM3}7VLb$bCiwUaFF1{;M^g5u
zwOY>z4*C7@-QS0%@*#04*lWq($V22SKRZ;hs0|Ui%ug~yhE^Xj$I%QOw&cg=_!#)6
zJ>AYYWO`#j0h2@H2Lo9gq;VG_fCAPBfR$1Nll}ufbFFSQyn9<PVT*uur0cCCUi~+-
zM_>yx;s<gIliZpN*PrEA!Us%Rf6KTD6|0)wW5l<e=63tE>;ImF^b2pSrAVDdyl6g_
zCb>7Ws>R2j(5rQ2Vpqv=AxUBVHPW8s)FXqRT7}tNGCZEeGy0$(mVFn23d~YX0lAR)
z5FdkORuFcDD^rgb3E&U%2@r%UD<EZ91O;pW0G|gP9s?oeKj!pj%9~49_sd(2&HUWU
z&SIe1$&$}@Diar<TP7rnNcb~m6H;{s#Z6r;c=4@iCb4*19N!ZP{AO`}k#2PExycD%
zZ|hx(oEvmXFF_ncdfT&{GgHNprFkSoGvEr&s$AX_8uS^l=B0~l`GATWehXSlW=KXT
zbuKi$1jh9wYhE-nCAYgde-{r1GxV&paO+6Rgoh6UGyVFJjsRF3MQ#X?-v_NmA!CJA
z)Gc5h+5wd`Qkd&GPY8Lml2{w9m~7eumvNf%FIq{D6;?cp^NY0JEK7;C*s1(r6D~{r
z?C@zTOv2n`tdv7re}NREz-kF3m24;P2w(CXpJ05N-juGoiA%<t7MUER^noRNo{lss
z4;ZRcL7oJJ3pZXZzE4UrQNpJh!gd)8G2R9dqp@>A?@?Itsbc_b%dn__sRbz%wGlua
zwl-XVT$ZgdFhXhIUibKm`Hz7m=9ePEQ%^ZPV+XOJVP>P|=Pl0{)r_eeat$*hy}U;-
z*%;>?(qT_WxxG!YnKY#wtiz5Z4(dEIqtX{j6u$m0j#Rt6zg0hwV$Jq`zJ5ibm;an=
z>WpaPzEOPFMJOEi0vzwmvIlqMVv&%>!3YlyRu5)GKGh+zC_-a^uy&YV4*66!xRL(C
zCZfC_I>sY9z?qW@t6oe8dMh$pspLi0O)JjmU(S%u;0Sz_@J~4EhR;e7jYu`taX8%(
zrsMfZw47ZZzh6Z3<@1r>^(i{z4mD!J9TJyYgy^W7fbiWcGL6hM5mCnRHY`;8@Jl<j
zN8i^j!`I+00QE}`596p?N+ShU5rt<0;5q)5FF+0s^*cC!c_M#TS>yFJUe>qKjMQkv
z)RcVKjJ4&7VDWCq8ZM#n$LuOF2;=zxL)Et+?=BX1Alk%2?8EdPkxFs1GoNQWT;oH&
zt$r7g=B74Yeo7H|<*`K|k<k9AC2zYz^}@S+XcmMfV3a5_Ex?b)2;wJU?E8-jtcs#~
z2v7}rx>f!4OepNO+w;1ytro}DS|vIi$r-xuR4Zm{U@Hbfg$yEcYL+7$jc%CFzCXWx
zsA+$T^ZVdh)eJ_`hs&p44m0^>Y`8y;6;G}28c^B2T?uE+PFmp+?3gjkB^=6>a1nY;
z+g25&8PZX91hi$nEc63!qBD_#NaZp5!ASL~fub@6sN59UuaNtew%aWqlF(h2?2r&H
z9qCOYhA9V6ywVG5e*HF*eLJTgRUCf<QAXtKuc|DJU#Hv<+^^}<di?eJ-hu2UTX@i}
zUNElU>xj^`T!#*z=f~)jazw;qv+fEe2587U;vAi_)}12|u9F|`I}k9-j*kGR8(E<m
zqJu&*1CVa6eRlw)KcUmcBo$t&1jNwo!8Z)n!kMu`5dL|euy+f&*uNRS>(gX)gB;%{
zmEU0rfOju|Ta#njW4GiEy#zBIMPJn7mI~24V^%7sTUG0Dc+aUe(0)oW_Qqo?j4IB5
z{os9GbIyy)R%O7g9Pz_8A!9-Z@yUnxBMU=i3{Xgq0Hm^??G?yVnltNi*Z9)-89x($
zQL1+oZy3Ufu*#HvI*OfdzB5Z1{i!Th*yw?Ik>1!Lhx{#4G)j|wIb2rfyaD|H_}N_e
zog3VWK9%p;9l1Pi0W*eXY5W(FzRXvt+^5YV$?X;e*q0!X;A&1Ck*PA!st*GVcOoqd
zun7vu96-`!Qf&t!xPKZc)NB_0u3#+UeBlv<<9hf7oqm$P&Zo|78f$G-X0OL#@iGI(
z4J*4*xTa383|g+*hJH+T<<}W?$<N#y;zU%Dv=qcN^y|$(C3h&9Q5*F;rJVKj*b1hJ
z$J;-Q&F9MT-)$x71U(n>BVw0@3ZMyKz&gW`!eoYGvH+MGCe*HxA`T2V{)&fILMA|;
zH4tE59S+*Nx0m83P4~2_$;-LQM!u29>OPKP7r8~2`-H`MY-f0Kf>y4*W5EL-D(P$x
z*-c04q#DL5Bg5=&FWHa6=Mhjd8=m;@tAc*~lsRJJAKEk5vBA8+deNM^DlHs!!1Y$|
z|5vgaVu_-%1gI24+=KrcBxX1Bn(0k3_wnE(vs&LeQm(2*9Zhw=?Tt5*AaCCwVGTMH
zu)!m4{^#+sG-tpr>&A-*3Qp=o!7k6p79V97DHXBgyqfl;36Flgr$+Xj{CNbnunkYb
zhQHVaJ7u02%WB7-Ep~_{h(<oAj?@zas7g={CV>6ZQMM>3D*!6~SycbOqbi}wAJd9H
znQNI<cVH$lCe-(>jg3_FBjnn;QOS+dNV^Ts?9NuydZcrV8MxH4#MJxZbC>B5D7W#E
zNx4P!m*{Izbvc7ptN_XGHi#mkb;1PJj-T(lvXN+br)z`1J$4;yq8fx}_*neF6sUOY
z4h{zmTO)OpBZ|rzpkfNHDEnL83rwgE`aoR%r6Xg9FPmoh22a5(yXc;;Q{h*J(GM*m
zm3K&q7?NgMRwEmI?^otp+*W2%tGHeE4AbXwewlzcet1y~%)RY57g{|mx*0&H6SZLB
zGT%7^WYI!tHejO~3eI$#iX101=eNc>LF`Ethk8*=e2`#u&@c=+d=vf{MP>t#VPxX`
z`m57BB1gv^huvQInlEytUcHo)slPdp)~_q(`Gk4X8rl7tB<yGQ0lYQyP0397R3i-<
zcZ{mzq8CnZj<xU_9_OxX3uk8sk%=++&+t$`M76D2&yQ0|_ZJ?Ut=WsZ?N?LVZ&j~c
z$~((I=xZO>sqsNF{LEw^X#&uH=N00LqOt|3oC8-?k<+Qpn}WQ*V}QN1OhC~h*~8{b
zOz_H=VX5Wi^Ox$9-EVXAzKkhLeA;&05O{WXh&;w0lz7a?iU#+lyc=V(tjoEfH+ZL9
zY<h(zz~xGj`Mzk2YyASSZBW}#)Q^X9*R7_c+H6(Y;VlS#br4_Ea2eJO!x&aq=lhr5
z@kDXi0bCA(OghLSI*yhGmLsVE5dlROMI1M46*&%!I??x{`uxqC(=SM_(kIlel(Q%$
zVxJ&BuKsGdsIEe=NZfPYiGe>zOAZi>sGmQlaW}QvSj;u?2yky#WUkj}ahc2n&^GT0
zUWiZ*9Mv0FYfD0zeg*<h9FTnWBm;qhqq;GIr9+W2=7VCh2iVqhEPIeL_LccFQ8h`t
z)>NWtZs-#tt@-fh)z2~Acc0Enrq=I2(6_r{JqdlsK2U_em@ISey;`57^2Io%m8ydf
zv~~5)Guk#0ak$PNA^EL44P8JA)WNj==MWHr&{0bh6}6ze=4~0Se$FQCjtxQ|0Loj%
z<U#$N1R!~k74p>J{wOjBfXpu}yaG72Km8)uAHRo^9GT>tyBcKs#5fI^HJzM}8C|%2
zNvtv$FzbI>w^QZ*Xl^2#G!}C)hD{{1SGbo&&oSr2Pa-+-OL%@-)4W>durU+oD7^hH
zBF736eX@yYGui<Hh&0c~F9a#~tJ}4!)$pXB??vC2yTn&4qL9adN%w<b|3=w_1fkd*
z0XB;Pus#rS1?Hdt8@H<2KYgrQnm)(x`p{-H^~ymVK9=v{csGS3=<9A_yV#vo#m-Z{
zWc?di7f-spiQ4gE2!&K8n`YRY;E?Y~VsDW!p;X<6%MfZrivlFR7AP3<-()LcXlGeS
z)mEcysBY=5R=zFm$Qms^0jx-NtNXKU0Rsf%Lpn4vp(r#b0Ih)8{2LN2@VqYipzqTY
z<$Qj>;ExkKef5~3vaYwG_Y`#be?SPN#+a*jW^Wc%nX#MRa_nJS6hI8$DRmaFJ}V0*
zFJ>&$r^)nok0ImzV9#G%-?DDaYerjt>Z_cYLxh1Q*@RA6c~p~F{R~ao`y^Uy6c1lB
zye^mk6pj<s?T$1hz%Nl~&VSGd97~b+0GOTne7(CVi@K9R{)5VGk7v)42o-8h!?Ei(
z_^)Z(;1nOFU9Zt1NvVZlLB8Jl=@_Y%Nm1=e?xt4)#Afg7_=)QnRuvBU67EktR6+c3
zhro{O5zQfzuy%QdnYE1{MowK@U2xDWc+8q*2WOj$)AJJ(Z#NELrZV;*AIoSI+hc$&
zPq_CB@*bRV6o?Z}8c}(l?Ziaq?4`DezA`Yi`%2C+7-BLYysMY8Clb^$#aVv%Ih@fN
z{h@oy$9fkrHBRZKXg&80#qw~GdjT)l&OVrYKnw7-RAg>S1+Hj`4G+xVQtZNxa*DTZ
z;r*1rvTqj%>@<h3z@Hd3%m)%6Cj}vk6++@rWKRIHWV$TuzZHGJi2LZ)fr~FLbA-dE
zChk7tIC5UFWfkd}h%Z+OHdxdnuxNi=9!dn!SwrFbHbM)>^lA%ef9}&TIV|iKQ?X|n
z;i0ge#c!G1<@^P@7l^G92rSVM(TtwVRzmrHYvHMmDP<>bb#S#Fx3nX9w7B%(pW$rM
z>gwSzb!F+u|Bg*22?h5QfU_yrvq8?px^s%(0%>G^E6}$pls&O$AQj-XD!7Z?pe!oO
z9-!c(0!7rSSG&G_J>{&i;Ap0|pD|==Rl+&KhSoqWOZ@d~UJGXng2Ir6vc%AcCLc32
z;OU4WGg@wo>*+*v8QPCC5l(#&?8R4nHr7y1YH*hbSVx$&Vt=(7jgN_s44ABfJUwtK
z3eW`rq_%B6M$W`yr>(-cW&xu;a8;xrDwjQbb6onqD2=o{Y*gryzFLE1n^*BHQK7S`
zE1L3gLZnV@g;QRvPHi#gN2uA$Z=(fRUrCGdV#-VhVZOWDgr$hn9!PAKFrowA#a2R?
zsJ4i!ElQbFU0qkLdo3N9AALW35MSd(H7sgaT3I>R9gGya3>2O#fEUC5vH^%={!t{6
z-S5uGAQd=~o%)MPg{N-U(&!>l1j<6{;s-MaDZ8&D)ijGJ(UaaJD`R8IJ&KYbuGoKU
z@uTtSl6sJ+u=KhrEeq5A&8{YMc<074{+pL0#r3S~)_k>Pj?Lk2(Ph{#M|?Q-$s-)_
zld09P-HAhzh{4)iH5L2W8YF0BXk>g$AY>dW<Sh!(4M6<(@o5t{_77s_x6pH3%2v}1
zw<{X|wz}gIJcFzq!f)$xq}89YID|{x9SLr@>V&7J`@Loa(;yz2g@v8f-o+#G+pl)H
z*ZK!}sUo9l=u=2l+xg~(kCb%C;p3Pwrvc9m6q#>*Y;iFe21eZ@Mns<J2Six@;$coB
zqG!PpHpA5HzlX1^WesA6LZM`QB>zmf92BNIfa#AL?EqAJ{lVOyMb8y~LT7B_)JFsX
z9f5rDIXP_h?{;}VktIe%V~ra%Zslb;^Ja@CjkmLW)eFI9qhi>Dm)O3}r20n2JGsrp
zR_8iNHQ&!$NfxYUUC;QwXB|J%DSOUHCn|9s*sGPZ>Kr^X9XIKxN14m5QNVdyE0J2_
zh!UT;gbO;S9Mvz)48+#ykop;1fa3H3I8!&-@{r^1wO+R1f8t!U-EgqwH!-I_-}SYQ
zdm`Csb^$*d3=BcP?iN@^VDxtF3s3XJDNgqU3##U4tlv|QBvwl_J`SZDIv9u)M>tMs
z{Z9G$R+PV<^M#SULxXdjHMccw{R$qi+<;`{n<tU^u)7a_wHj7+0T$yvrrfq-ZF|-U
zh*5wE45TQKp&EEG3eppR6w}>>f)oCVrMo9{a{ErcMpJjn#*CX|_DP1uT6M6I{jXFs
z$3#!-H*<uB#&u15UoM*h343acw8TG7@AbUO3K8-qfzn7wf%PACV?^jn8YwExc9LoN
z>FX24E2rd=<OMtidRns!TU_r`0bBLHd=>H2SHbjF=blN!{h}4Z)dJSm2JUwXpK_!C
zIU|&egaR243n@pTJ_ArEdZ(}d?$ra-W3vnC;t@+Zzel>`cL`w%=*QUB3(V@??%m|Z
zr)p3lmV>mH>gO&-nwOLV@GPvcFCDZeC&~r#<1_E+v5sow*L}YxX>vUnEO73f;XH(U
z$0k1u(JyXT7PMxJq^&>E>Cenzr3mxFlx8$SbRE97gy%`y>vrlF?>rX2->C~l2j+$g
zkYFH>ROUU3(+l7{W3?Ltj`UBT3Oj@A=>^dv=AXfgC8RYR-+O!oS@Ddyl9(=gdl&KE
z;l`5Oziw>XCoG1TAinC|<b4;B8&9ave-S0r`7Imvi&eovzAN`dnG@T?Vc&6K#xzzs
z^$=So#enCJ6qzx5i(*$Eo@eGL?kV|r$!!~AH8Hju3)o6we+<M_s_3n4bNI<j7c9$5
z2IhtQE1axFp?U+T<_<elKuq+nQmU6zc{~$5jje~!rG}$-Dw0?CNCpU;iU{g#%3?72
zVTQSkl9xr<mpsQz!{&Q(zNKPI7iNm3<uUW)_dfO#&)vO){w%Hl|Iw-252o$SR%}Ab
z;%C(iZ}}V0&s&#p_#xm3NK`&hWGhPuYsY@k)-7sC8GO{bT&+oRPU8gvy^Ih2OlYM;
z+8KqRuHG$=G%VotC}1A|_{pPBIsX9zYc7=Y^>)9qMT_!075;9b)7=tyNE~HiK~tj~
zog*C2MtW*Q2;%595sknrQN(j-zpu-7!uxB-Jy6|Bewl3emSpw#5Aa95M^h{B%B;>h
z6}bDShS&9zRy}0<tpohd7n<gKogLe+_kg8^Kj;9BDhTsfTF>9HTnRiUq35NP%$gfT
zz$pbtaIDD4NuiLC|I~g+GYZ%j0PZI3z5>=a{ne>Yh9;g8Y#!E_G_sVvRKHVZ7F2ue
zn$nETV!Sj_`rg^^<#$0D@=jmF^h<(Z`q&9_`$X~)A4pi;S)7?AmaPqS>Ap&}O7oTp
zB)}{CxzC8&llm{2S+j`R5lHkR7NSM2nXLp@Fmb^(we~h%*I=pTG?}zJu(EL2{;{}3
z4H-WPvjCW%90&P)%Cw_E{QyvJKzfjhAhOZlImq_|{;<UhnxK*40hj6|7OC~|`pUck
zi7TASN+SiJ%x^Q5n78y7vqhli>)YB&nQjI08iM=|-@~OJydVDzObD$Dyr`y4thf}L
zd$c*RQ2+DnjzhzczBO;`eEn~VZD8m8&o^E|(t$>jO~O!Pwm~VZNdioz8R6Owa!CT9
zaA1rr36Smm?@Ym6C{%v{b<eR62%7$SawDW<1W6rAlf5?<N-g;tZ?=X5ZCE0BrKx#Y
z#@ymvRsCFXw+n=~=d#I-w%~rUa&QC9?SSRT2FK)r0vY|&3-|cw&#-5|EX=Oh)ckU_
zuJnZha_8itEFWcmlS_*FXjhtdxee6&(x*LG{HRk$IeDPfl17+G9Ad%%*50PBIBbTi
zN0O5>383*p{)uZ3iZlQq4PKJG1*D<=+^^)mk{_*?jIY@{9^tBG#zk!Yez1-~;b0|m
z$~WQgx-?P6Y&7C&Mo-umnx_fBtrQ57FkQCLdrV=)L!xny$I|C)b5FGoHF<DeR9weC
zxNP3zF01}J<QyE8KNw&ys>s|Q*W!|{1ib#y-y4+lIeP5qcxck_;<Z9H?tpdm+bRz3
z=%@#y2|%Gt0-!FWs1BfD0|D5f{*HL$-8$b%;p>yn);5!$6e&bd)hm>mKwD*?XgNRT
zxdfRmzOHG+R+R6sNRoV!><Ga#5^dc(;gX8Rza>FKP8`%s5t39quR^)l81_LXthRKN
zLt;aNA(J=knBqCP;B~-@vW2D<J7>qX7GNPLI!C^bv_6NrN9cOSh2?JIISHv7<vp6r
z(RpG@5J^8eKd=hnUw}zw1O@yY08YJ|T?@|md$;!X22Z<RnQLZX#rqfLdWaZ=JQGws
zL&FF>R`C*#RfH0>h!s6Dh~gO9)(999NiN!W^%;|_ZHVDfVCw+^IE>ZJS*nYD-;|cA
zrj^G1-BwLO`JuRND%xer+Zo72(Zc|jo`t60S-XzSD*Mr8;PhsISrO*Xy<Q_~c}Q_i
zmS0VYD@ZdsLNZMP3Fig#ftcz3rA8)D%s~J%kJ8-UKLzHdYCau#H)!v0*42x@ETu3z
z;9#<T_eZCWO3<6T$=l*{M6v@Ht0GoJ;Zd1opE^nkhOzDX%t>oKb_G7=<L3xt_bSwS
z5O;iqzFAPkSHMYYp#T0T^>xE7qA%hO^%m>aOgqkwjW~XQ0_$Q2jB0mv|El#7QOmlV
zbFvRdl)M6SqjNtg$#LY#$^Nu=Bdr+t6bkqS0DKQ&iS~C(EYpp<r>Jy!EzvCvH_ne9
zPrml|JlKzXoOWdErxSX{hzI&gl6^RZE}K0WDD#Px^jG3p4x4riJI^pUx$!f5QIYPc
z$U~jg35!NWswtKL?E(F{2$=ah8mgjo*>{zB3oo+gT1lgts9oki2OAHqzO00e%Jw|{
z#rctwJR^}>E*Lc26*{pNr^86l9o(<piDQKn;u#cfFo1ib+J!*AXn|XJZ8c*uGp4E~
zIH6fClF25Nwh^of`|ree%_AaN_cSk4dX`C^t_msA-_5jQCq0dK?=hZrl-mStH}E*f
z7F5V_lXj^dMN))G*>Nq`;j^(wnsrtA))9J6icO+Bo(4DtDl*?TXmR~b4um6(dPSNf
z08hCAquQ=W+6QQqa`VTR6UCH<lY}ex_se(N{0A(vfC3HyfF;O2nS;~+st9+_4vh5D
zjjvq#<oz{!$0ct0m6hz&4=H0e({VqfA`XX}3%~6<zc0CdsG>WU(8rUs?6p_RRIovn
zK2O=5-}9~J;!TQFu9>G~c=h1tmAUbiDNVH6i-H=kyPf|70#7xn09#o_=>3Zpm$e8$
zQwUcxKS<6s7RT4c$HX8G(fk3zzst@gaAZIZQKEx^q`Ut=lWQ4;910+ZK~<)JGybE0
z%}>LBJZ!xx`vG@JqbpdbC_8<(H85^ZuB<6$s`juWn#T_^{Z(S5_4QBEP?_G%qR}qM
z0#ShHh<1WU_@E^f&h(C9!#gRe^PAH-UFAi?y_n~u)^e=fZ%y{*w(12Ihu-4o7RA2A
z2C6fJ1zX%Hm45a8s#1>@^1={UHfitFcgJ}wE@`L_a)*G)8PS;kc?|G16mS>-{JAS(
z`JbZL7Q(Q@y!K_?7KIMcR%bmab{DU9CopeHsDCEXZBwS+T3+!Dgdj)z(9V1%2ywOy
z2^+wVE60jxw6t}y`M#k&YQbx`85E!q)$;lBh5qp)(!S+ysTcf8<kic~H#2(KaYNaJ
zhDEW<g~pjVcC~8He#&(AWmKt433*>JFPqnO>Tdw;U|qHP@}v|VB&1|y7|7zVkS!E*
zIKb>c3(ERWE;9GF1?SCVi1SP`=aTn+Y~WY#$m32ZSWkt-D*a~NQ?GY1DSG+YE4AUx
z$*oR}C;_9>*A4=MUM6<5>}zwm3$x(f0o+@(RjEWNmnG*6m7^q8x?+`loN)VJgaWY|
z`-yL>0(_ekp~V_4t_niYWuT(lBBtw(hAdrcpW)E8WzR4Wn!R^z$3z4U8WYe2h0`4c
zMT+ts3ONEmPB}Eh02;La*gAkd_Si_LTRC99!U!VbV_-Y8TNUG{b~g}N=f$Ic5@k{=
zqDkh`a4&HpFB47}zdbS*va%H}E1Uk4ZagUWQJX}idB1L4L0#CU$jg(e>m9e+?apug
zQEoWpchCAyF+NbjPAO`AJT~tRmF8_%jzIW+od^7$q$IGpJ=DZ=K0R-y71A#N)?0U~
zI3#t~C6$)J>Fg&MmiecY4^iMR0q{<Y0}7x3<F7%%S#c&qa9_}7eDi&(>YztieA8Mg
z{S>#nN5WR=*LZB|N6%EV%+*v~zsg(l7{z`iA&l4GxzBg5D39qLly034;t^8WPCK3d
znDZ2mVrC<IGiSfiwev(5V@)J~>mb2OSGs}Q)q*CIC-OUxtnR#EUl7$^;kz__H9`33
z%knwJ@DU}Af9B|>s{tA$T$YRs4GrU8(&rcj9SJ~h9Zu)~Np=7ltZwjbLrpdJ3`1r7
zhkfjpeDiMU%~P)ypV<`5syUnIhorZ8+a}RQ2bavO5aK~^tywxaX9|iQUhvikakc$`
zNvup7l=MY-(W>jwzr4-hY5%k!BT&Rb<@?^8316%bkCn#TGj5msvP_<0hKVqS3UyUB
zUrOpphK44_B4eQsQrPb#Fcr$}Yd=V*g0M(mGBbmL(hFp)H{=vW9R*O^Nfd1Wy5s3K
zOFfhSU?+@VTF%%thR%vBbc|H;K)xoS#ye4^l>W!BlVcg`I;W7#c;ENE!3mU!krL?H
zd*V*e+GA>Te*GP23iAYW>2NkJ8(~Ad$}p~F6hlWJx<+QZ-wLN<>2zkm<BEl*H>1Fs
z*nalR9MkBQXLd5-MrmEA7nWmC=_f28biRlVy(R`YBL*lcd{}yz2?HtAmnh(909f~W
zUkoW5hHhiEEGg}wync=BYy0B#^+dXaRSI7MYTw?9woScM+EJmwO{avup&IQml?p}U
z_BQ^>P?G$;=vHT4TxEZplz%Xbtj8DH5^-vQS?`cV&6iUJU)$?gbvZ(}U&zqsWzWQk
za6j?H%jEGm0gicz8*|Z0M})8QO>!OKqh|!?bhSs6x3nIP{#2o0A{pj~3h<MGLjQvX
zU!$O70BE#LS{$Hs<iAs<^tp3OB__$9mprFnSUB&z!|;JX%_8gZ!WQp~zW3UtyY^e6
zO<}L7uc(z7!>WnbJ#MCRB0hx4=~gcAe9v39d}XNh<D?>UI59ea`|uOlkNNqOM#)PO
zzwXj--_5L=gX{&|Gj6LvpkM1jIUv)mCpQZ+I=*~+rmyfv9#QL`Qz*JoKG-TwEZ()(
z)0YRfse#GS`To5va4_lL>c2lVov{G<Myu&AU~c@mijSW`NLlh256&Jv)W1VP{IZN;
zYiYppJdF4X<5-SD$MjI8RE5-KKq{#@)u4*kYuJF+#yG8XryuJhF`KDQM)3)hLCC_i
zCWf}ZYa~wgNrU=MmhH3)N8(Fjhx$*?tl3O<9XqhqfRKc6b^}D;3g(`?9xiJ6@%)_L
z)s2!~=Hck<$7z0&a8iCKKMCZYIAfx4VE`_*)|)ZF!2fg5%*V?5CZ91q^<<bE3m!+v
zS?CQms2azTgk!2T$&9YYtz3}XbmYthr@qnUOPXJD+~B<uBOZZGy|xP&BM)!1Df}g&
z#6J47v9Di+<EJg|bykB#$~GB3`JD#*aBFUvUB?!|FMuicJL*hG{}Dmp;Cg<OWp>~>
z!vHU(#O&PYck5|B3TbNrV7@K{Y2eG?qG00ySZN;JDPTeK-*?;j1iGD%7Akcn@4Ok2
zFUa)K{W_iNbjzIljUMIpp7s;R_qQ_Mm8HAh@1vyUK^GsK802`}%_zHHSR=pe$9t$T
zbVr_VfY9L{IhlO-d5KSgiL}D|o#}pm4A!tp2&|?T(a5ICRsy*zwJ?<S>UKugk)LIM
zuXK=Kr+(Li$Kt(By1=qCCSFDoIxM6F6QWq-0akDkq!sX+{~Rm}6ixjOq~nVC`y+*c
z2gQ4lcb`|9ObIRX$#lI$b0T;)So*tqs=$A#!)qg($!nZb{zS<)<g(p-ulmy9&RY}o
z6ItS%r=izn5g`>@1;8dbQ>e4RXena9S_T5E6GpUl-(xGeRrzkwPA8kPkGEadm{BH?
zhU$ottc9J6?65yPgp3g^AVAmoA1Isz1)2bW-tOzV503foP#wel4f71$h<v|@Ri9UK
z8ogWXEszYoQQ3ELbkcLPE)T>TrM1hrJATki|7k?3>&Y7>X^bD9%2AL&-l|%*$yt$f
zUe6XUZu(A>T!UNYy|1vW&a>yC6H#CKT;_{Yfm-QLo08oI^zO!<_*X!aC<|6c#;dI5
zoVwOnMkp@~Xfl*{$NY~ngaSpG2vANcWPJjT^Y04>F)V~12uWYdFU^VX_d&N?zQTTe
zSqsYi^2?3$onJ5R{DbD(o5k<7FF#4DA)cApwvc%}YK51t7s42zhcL|I<Tj?Ih_z78
zMfrCh?twE`-PKf?o<}^_Rb(!lZgC|Y0UV^I$;<r#9dgR(qYi#!@$N+W@M=ny3U)3k
z7WH754in&of{>sx5EN(<0QyQ+vkbUUe_l1m(nF;_l3Nk-5@-dlhef$R-OGMS#DZSU
zd*2uq8O#68aAh>|;<hBVwiNs!eoUJc{qH<M0--`GhSx7{jm-pNtfl9JMJlwEbi`Wd
z^G=mvIQg@Z)0Waj2tUM893-}*7tvH<&sG9jm;l;&S1Cu2KExY~3rk^g0qvzEr?oXf
zg&-1jIYveSemdma0H#C1CIhhQQJym3<o~{X2+_-#T^TE{CyJxPX5wL72I@w4&+9Me
zDQrS7PJC$ZpFcVHqQgv2_lD@Jld_mOkvGoO4{ZP0i+eWDDz*tJ^$Yy>Tkr;42ND%|
z^k2Q`&iJ%i`onyHyf-H_z>;1O>ap13(&-C?%@b!u0`x%&UQf8`(g;GwLP9#g+St!4
z4n-BD!_mpmn8?u~aHOO%plDwKwCyIMM@Shke~k8|(K|69YsHyhK-OfpbBu+={rj;o
zwi4QR2YbdUVLdXpx*?U;u#ASKPT^<S?c|&Ev1JdGRfB63f7P+{TUy$}cuL$jgEBsc
z+}z+CyNQy9camf;(oRIRpS#SDbV8kjO*iQWQVB!M%JKU)LWA{|ALDoG&+<POZ>G~j
zM<?SG0P$m>A%&G01)2hYeyXV?0<P2_J93{K(?bJW&bYsDq0s)Fpy6wS)F||&v;opr
zBMrCH+m_a#AgUcl&e#S_CoJwI+X**{Z6-k{<=@+E7qp<)+U}amA+IM5Q)}5pzv19T
z+<Fl{U3ss#0j6)w^MSU0zY>U^Duv&9X8sW7MvPCThVhvNtLzu1N_H8(8gC9G2q@2l
zqG2E%W0^ZB%2a^z9`~RHkS+PEO&u4X_u<@6l_RqynN$eEQ`45aZM(3HkDmukz&|#E
zK`F96pqKeKG2J9#speCZH*wj$2D(#m4HIR(s2S$24^=UKcB#pePT=P#3k{JJ7UC&Q
zmjyfr+)Fm07MI-x;Ej@)YJlqFDLh}`sYt_<w#9zgim9qkgD?F%9|)0vnVI=1{>dl@
z3NsDBB<X~>|Ce{l+(*lpIT<re7yU-+_Wbx+q3W=x=7*zp_bu<3QSL{o)3lRV9lPf~
zpv_>}TyFY`oJC*;!LMs)XKDGi*8_J)tOi&3i|kZtgQ=c;8ge3ia3IfG+`yY+&6hG?
z|HB^Gq(Se|;I?rDOh_6@hM$UpFM3%JA4|BXZ`6l_yOourl>g<O;M^$0bO7;(#l+YD
zb{D?^Z%|knv9ab>Qu9&cpAU9p`@oJ^0%i}WDi@-iE&|GNP4KrRYTlb<tfhG7q_EZ8
z{C0~azoNdudws>ekOa1P$yhEFqG&lq2-S7x2}_y~U_%RV5LAR3mbSRQVF#REn)!x+
zjTyriUF)lGuM2SACd;n4BNu66zjRbLs9U~Y8;q1meiUN{z&MFLVGbm7{(CzWLX?b+
zjk#QKCHPxDtXJwkoFh6VNWolEe9I1=@FykTl)E0D;WKj{53cYDKB(<E$|*5P+W%sk
z?N|}_iuL&CLDktr{58*l{)sSj`5UB&=T5`qlr>xReEoiwH~;y4Wf5<^*lMHmt^p6Y
zMk%<0ie-JZgp1r!T|Ek@(vJ$({+FW_MnS#?APprPlYoQ#YmI!bd`pE>r25%haK-Kp
z?YwMx&6D+a(A+|gZq{29!E@hmLsM!n>NcLV`LAsrsF8ngYJ9<=sSDS9UqljayJH{Z
z-G12|di9W-Qx@AT;vFvx)1h9cz?!Lmw*H7SDl_MPHnH2ZY$wo5KBNl=`+>U@S+=X#
zx%j1kK}GWYK$qRWJSbQU#h3{&dK?jG{&$cSbyu0SuLdTu1Zl)4zUY4;x+e#zjc_o0
z?a9%sOZid#8GK%IU2cm}IU=Q<(X7LjpA_xIyBLS;tZAaGY>cE3&B&F&l#+F|p9wUJ
z-F%4i52PG}(TJ-gNSuy6qB*Sx)~-!3@+p-HY(b3gg^#Udi}hvuRoTy+IwK7bBjd1g
zzx*)MKUFD-f_wu&4hdS0B9pbxZ(;3j34yff6}5;mf*R}>aJk}(m>lLLekIRXmL4*!
zH;Aj2B^%>178p)nu#3KoykFZ~LlUa=<f%tH#YH_eyfOGyRvtzbDDec1_{f#?Qe>-P
ztJ|6zleYe9#h(8{siZ+|J<)Kr>yrl@O%xoT$+GMMEYDq#j#4M+msZD+L4NBH85H7M
z0I?>a;0{v#Jl3HNZ`6V$FxucbW_3=hKh?N&fA(mhFfl@usc1+nOI7UtqT2I0f{fyH
z+2YY?X9A+A3oGXl_bgJnaUH*7DOdY1&)78I%l8kB_fdb^E_Rej5xCP}rEe|PJ72#O
z4+QIt@_4)o<)eVjX^VcApW>x$1*1hv0RQRpwR(R)fxPlCjwRBLlTkonW&xN|@7{$1
zNjpF!UF-cfvcK^T*2iK0kkC22hb8VQP|ByE8U8xn|Gnpsy@}fT?q1Fa_oRUcp9_E0
zR%0TcyUT-Hkqn>~e6y!VdWJ78r7GXCwPa206oxq91=q7FfZrQa1^8VmGKa{txLg(h
zv5Rzh5lnqQOs_zm;WUCHTkNzzOwHO%e05wsCN#j{1d)@-{&&B@Dk#oufYX~EW&o5o
z{INUqPlLbhDxH1sP5Yv{8?lFP?5O;`yt1<^4J3JRWY;SyFg{N#7`X8j(m&PKk1l*_
zn7*(<!FUu==qnf7)SK9Z=)iEZu8Q2-mI&FnEV>))P@ipU&FB6GFb3@T&mG4^%r`2G
z7Q6b<;N`EuhoLNo<v{KC6@fGXj`VO82Cu?@fN*sb;5z`&s`^d`Ad-I+kP&t1b^K2y
z3Q|6F>$xf7mGW+P?L}~#A-xZF=YZXe!PhCVsHJdkXIAgQ=`mUfRle0K?zrarcW_=Y
z6TKpz8f@zE9S?fyJl8;Z^P}j!R4~I?aXp`)HPp<sem$Rx|2)#jCLx*c;XHnKEY=YV
z_PI6)RFqSfn@+~dtBw(+3<E17b)+^5F$X~OFmtB>3h4iP5ffgmid$+5X8e$6)e0)t
zE70|n8Aw%b?29gKq{Hgm@1cuf>a`a$DuncqT$^Ha*YW}j$CYgp3nB|Z`H#?bB4(gx
zMZqsPn!QL)gjCbwPATn0A+b*k5v@w@uy$Q>$j-W((R9}m8T^JC{F4BL{bQSpn{QaU
zAJ*C5-!0SqAEAssiZB--B%|}G0}c_XAoX;xqSB6Idzek_Gf3p3jc=6Z<5(Zm`;31U
z9^teiKApIWzaDOnu}6Ridh;%%P{Ai8{5-!}Y%M<l=<*1;L~9tq@_JY&955`(J}%$w
zhxkGYiM~EXG;=?NwNoq84_y#Y4!SipR{JYTKP!k9H!<kYJ#SQ21|}y*g=0vEAO+DF
zg_s8*X0Z^^Bfqn`<6__)_4Rk@ieaPFy6m}qviE35M_(lMv8hPw1R&U=f+yP<<Gtgv
zfcbClh9=yxbQQ6Rs&>=FSC}yzhO+w{$%1U%YR`8L5{u=>n;Z#4aS?Hqkc3(`M5AOj
z;GEG_Et;mlO}^om#$saFV&nV1iowmP(?|gFgu|UMWqFcbq$rxA5c2`V%8QnSe~6*@
z`Ugc5chXX~b9!*ML?y@0dMl249=2)*A)>(AOf;TUv}ra^@ZQ$uK5%Txj2>4h?YD40
zHz(A-dm!{O3a>e2uWKqmL;=!?tH7IC|1z;Yz@=3YO8mUVRSgfw4moOx1g*0e1$JG_
z!X^E{zdo>RZnJY?`~aFHy45?oaTx#k<rXN!0sxU4UvVBVA^&{nJD1n9v7jL7(R&30
zP9?7++UuQLTz}BXmOJsE9I3A?9mZlStbGc$z!708+A30PDqx2FjtqXz?3vJgpApiR
zFKs=auW&ya$G8H2&}LNiXLaH|KSUN6Bw=?G(L^i8RsybKULe&WrF_lX?rePTV<NRc
zp62t*(23Q+PG*u|0s<JwT^cElHYmzMfRdd|)bT&xv7+u**7x#AG7Gp4yK$@9q)||j
z#>R`$=3n=gvN#hBSupl^#yTIclfw)Uh~rM<$B6t;&FE&6M??9s;1s((d3p{kk@hVY
zw<OIz=fldpMADyBP!&XKAtc7s9?`U=18XOmcr*bl<(xliF{^$mChZX#E&6i*b-cc(
zF*6e*fqHj1?BBj|umg&+2%ywIr)~f5b60#sANWEq`tft)M!m3VF~wfnyLjbQbr-P*
zv3E~jU)Vub_>;e1fBI}5*|fe(dO+L+pY7(AGs%2d7R3iWFXWRYwt-rvB~;Xob<Ry!
z+<V{?kUi@}8kHRCGXG`}GPI873FB7p@fhX`;-m`)cGX#HZe7Z;32ei81waIy!=3%w
z|0L2Gg;)$AnzLTq0xIYJ<XMA6J?Bqg3zG!{f%EF46WMWrFZm+$J)fYx2uUIgy=ke!
zs5v5gi>ozO81X8J%H_pPIL%3!>c$?Kce?72PhV*DKOHfYWQvCwfaD{b5Y;A-7>goA
z%Pb|V-SL&=)CH6>wz?Tqt*k2TR}?J@ious=5R3{A?+gx?|5rH|;(~%J0pJSiz2bqX
z0)OD1kJE1m_(R5NrGrBsVYiL6_Xn5s>wWy797u2;M19{(TjN!@j3f@{duU$RR2Dj@
znjP1}sA{aE^5MYkAC+%}H*j+Km*ufVRUyyaneTtI(%009+B<NW&y%-y4&FcFnrwnn
zCR8_2RBMDv`!Pq0y~M+pCmvVt1X?9=lzIPIjUFhzQh<+oT@?$dwk<HTefd<&U)42c
zn|unLNLSg*dYf1k2VPpD-s^T}t2f}xC>b&>BoCM6FA;;zdj<H%Xq?@Bj3c~Bz!<2<
zNfZ}>HpT~!*fF3B)a)LR_&TG<USJLNqOISfbOfTXJ3L-eI+!j`xD+|*@)N1Ep_&Uq
zu2ZX57|K9jQFs*4wu#h<-YCK{fH2YG=uhq3U$uR#Y~a(#{e_w%8a>Hy_`OZ2jIPn=
zw05JKal&T#%OwKvVCh1b?O}?n=aEflR~QAYN}=uNK#vK-W7XRRW(s`euUIzJFhRR}
zt8{(?Z_RH85UCN6m|1T`lM5Tr>0Ly($dN2}8>j1d6;3Y-F8Bo2cFzv|th^{d&dUd8
zWF+_(2J%B8mIH{XZE&G~Z(k_Bkn2@OElz%&=>3tEZ+V38C`SuhqxJe;<1T%#YLT;j
zBDY=lVm>3Uke#3tN`xbjte1|p?sobEs*`rm0%4HwavItAshP;n^vfY3W<Pt5NGIww
zzsvl90@OJ~TxFzZ`u2*+?s|s@{NWCGj~1*eGa5QUI?IeEfKCEz8%H{VA<t2S6#(I_
zJxmB7hJRn@5Ui#u>gt%^A||(YE61YNa8;8NSz~0l2?U`^U<H}IyU7~IP^o6Z+dpdr
zgo}^V4jPjxOs_~f=#}2N^7L4^U8B23k^NK=5*Oe1$q+@%jzD6Hy%DYEmuw|u=s^pw
z()4btbafxYKimZmw}5q&lS3!vNYNS5`1zSY|3axUAt=5|fRAnLN#cJeSW)-;R^>Ny
zBD>5rbAtuO!-4<}e@iro>Ff)wML`mFO#f)5!NY;Dn7TAdcZ%m<!RgT)S?qrCG@iGm
zv0E`StzGl2b`O^epK|=>4#(Bv7DWsKJ6AP(5p7?A3K`Nukpz!l0?I}LUDHr_-~jmB
z0n5g9+HZAoL1_>gn4f7liV11ofFn?ZRRCet@)jX5P2%qf`r3EsjWD21EMBj~3Tdg=
zoYfQWYrNC+WrNy!z$_Y7odZAHm0stxSLM{d7JpL^pBZTJ<iJ{}DmF4c&RN&m@Xk=-
zljNiXwP=pE1S^HtI#F!}F7wOdz%}LwR-WBhFvRG(@_^e@gWq(52%Xru9w^G7^Ad!s
zOLvnXzb`xrMfV<{`(IJ#;YjuS#qoQ&RuryH%Ff<p=h|eCC^U?aWS4AL<k};Zy%S|+
z@6|OzRyHA7;gXDOzo&24@7}-Qb<gKK&vTyhobx^^@dl!R?(a6^8hA0K?@NB)h{&J5
zU&!I2wkNjNic~x~niHk2^EXg;H^;aw{z&HKa)i>nVnw!j3<~y>9T3b=Tb3p{a0b!`
z|C~8M<mDcU^tme}&3a<mcj%*wfY!xS3%F9*rK0!EY1W*}f=c}1h==N-GBKdGxfG2+
zM4({mT4#p{G6F|e0_gN(x_*J`TwuF`>Rmnexm)KxJfuhcSdaNutQ6q_DfU}X-@o7H
zYLn8gL1!Y?34df_N62_DOFP?prdCAZg%*_+`So=L|4Ut!2_#aHwkrMZ<g0YOhP;WG
zNFI6=!D~#zACShyuhxn5yFp-YE_jQdiY|s3Ij6(5?=+MvDNGg-q~6mUppQL36k>3A
z9|2z0DSkT^uR@jfc}ZJ&djb=u<(ij8-mejf7$*hJKP-sr9M0VS$&1sO6?qII702P4
zR}-zXR6|P?BCcyzK4I3~E05$?YLz2BO+B6>)``zs{20K1`E#B=G7yxkZ-9sk;<ymi
zdr!qJMF7H2^C5;_Yfi^3*lFn3b<o<S4nYuiLOZY<U_1`56yU*?*#4?<{Pny?nqINP
z+7kR1=@N`d^gi!Nw>#($nTx%rjYeJ+V15M`dv!Z?&Utlbq&D<x3ftvkHOH|y)P-m*
zp-$grxp@B*Jp$!4N&C~;t|0T~(fsSsou8QaJM<{iN=(BYM-UW>$W77c-=q2dtAeG(
zAB?{13YB8rX)@HyR{+<OPBJt?j}RLbzQHk;0Y=3KGQ-&QTfOOjpYSmasp3}7mRO3>
zYBv8{&)xa{8Xg9B2}k!xX{L=9)h`wd#%XI6HxbEqmAqcA!-7TAXcC_l<|yhM=hJq~
zlfg}Q;y&w{QoMz&8mFX<Ne-Y!<3RhjP?kNCtP9gy1EDz;{+Lqo%mCri8Y<(=ORAbz
z5)q(G){H{yW8XiJ$vDDtKv=(OIDt()RBtA>IZ9HuJ=ealoUjhPrhmjE?#);AvZ%7X
zY2byn>#zI|nRsq;d~qAnUrC;hE#!qnbX_-`WuaGJmsE1HtNY-OAJ*ulL7tSUMrW|?
zUA=q5+l^Y4Z5vdB%)mhcJbqKc&&W^3BZA+JpFuB%d2LR|B%RAD)ddnj58@aYae##y
zHYQBRK~@0BT8%%>|1P2h)thfrt8P8zk7qklkl6GUy_AYKoV?<phF79<v-6E$Cuv#m
zMen!S#56`X%<$K}E_0oup)%;P>rh2$TnShcHKNvx;wvXoRqra=Ar?>2zyyDz2YOtX
z>d{`VJW{`*sbIZ*5VV5Ppc*;|YspZVLzO1O7m<db?Wz-~^izDo`eHT?uo3`1jivks
zdOQBE<O<cP7^Tp=nSL97o^JIXG7K2*3#A(9uEnqY@3)V;C)NfibLF%5?U;TyzY>g%
z+niKCM+Nhu>UzfihDQZYB{O+?it|k>Z`i^#p$2A2PqSOnadPw|p?g*_GP=k_<*6)x
zF5gkk9^GvOq-We|=(($rvbqvPgiVa{Y!A%Eu~h-KR75)0*)rB8y6O*?)E?cstGq@a
z^I@ua`cWQA;<5R(M%{M0lbWT-H@T~0?QErY415oX%e;~4P1&`JBr&&AzgDtz!-B%T
z7nr>r7TM9euvTsA?ebWay%AhWayzVq()^Po_rWWfaHUU)GaTXd27+JJ{rIu;HgX%Z
zZ+9YKWE9vtJn}sbuNvTq-0A#^HC;7oEc{^g>+(?*d2poch4LFw&OMrT>S~IOpHE-8
zClJ1K2z&XRr*9)|r>g~O(sMbBoPR-DD*K(Cn-agvg8PrM#5$A0HNsG)0R~K38-1iG
z2w>uXe64ve@xlVyM7(uXvBgpYx?Re#rZg{Vd5eo$838JKV2Jx|SidX6vDE-J6)vhP
zP~U$WbV#dMweM4p<R=~6CZ{sT=U{ZA*9!KYS8{}RE0~l|5QP}$#k(ko5z3XUo$v6Q
z^hyf~XBZaby<2N_>7=qpuI9+}v-Jy^)wi_X*|DhXY{$uf*o5vM?q8z>m4Yq!`J?!j
zJNIaM10XbC3fA9+vIO;Lfi_Z<3)bICabUFoERe+LH|W>-yZ70jdOc~oVaHjuT_Aeu
z`h`1(_{OmXM#W1c@l?ILmCh+{h|>glE?iN3nL2pZxuY@hvjOqTp6lIsgNKV(_#Z{g
zmmR(3iQ#FXy^uD!t&jT7?l>72G1k2h(h@ywqT*lA@5DEsw?|JD07)(i9Q=Krm4yPz
zLc#X`luQMVtPYUf9<Nb5`<!tp?GI8MXqI0K9-hy?=4UFkXLfA0d(uWyChrsf^LBwh
za+>T)Wy+pfL0Vx5O4Y9RE!D;QGmUl33=e9b)LdMlAeJ_F|0Sv3mYp`vFn}szbewD_
z8S7rU!WGebOU1@qD4uV{0ki~yiegWvp$`(EIZPieDvT$LU8Tqx99unL%M@VbJY#$F
zCO%bbs5RtPv(vIOMV({98YSLO%N7fib|Pk=QdTh1tg`<t@8ai!qmKj}cu#zG*OZUY
zX0Az(%fjR5WA~XV3_c(S7aR=OLei$o22h`6z-#0tkl~QQkB%}>u{`3J;HP>OL;oU6
zr^~`=C_L5(9Ylr#nd&nc1BC`0TLWOzg!60vV^h0}To<Z<ZN%sl8fRXXJss-%`sK4R
z6$3LO@%ORET*blI+D!Y^fcItm*LGOmQoL6QvG)^>KmIn(ldi&@bY5m-JNB`FgYoIb
zt+mS&-ky4@>~de~obcE|n`F_tyr(uzo^!oXiP;FklLrE!G$mE#j7RmLf=~zu0=q<^
zEjYGDz!uv|{sA=A{kOa6Z1HCNsJ>a^{OtOWi(vW9)8_~IewR-yR>}w|qz=i_H>uRQ
z4~^&`5o0aUH?@^Ue5nw4+L1F?oZF&R*NHm9M!yw(yF4#!$OJ+t2Ks2aTue0$CZf@T
znSL55g!i|0iMCuDhZZG3U<Jzp<hSFXlw`y`2rbs<{}w_E8i&>d&@6b~efYN!3Mz<~
zK1wARye1e~fBhK356LwjrD}l|^`+mqoqMYFt5O)Fue7{nLoma*-cupBo!&^%=}G=v
zuHRUPY@GP&h1Z;SgD#U)rfFT1_I?nr%ASv@b2N#u5{e5w5#HCK`7K;)Ug80~EeQg-
za4vArOp1j9A3`Mtfd>8~Lw4fGngLl+h_*Ip$Ng)x@<Urz(KOy8I_Ia7>^*TSDlM4B
zDO>e{4&D35xy)+0L6)o#LN&$k_C|g#8kTLdB-4RermQ#(0;UrobPAnwK&vEtbkvh-
z9Fqdm9GTmtZs&|>eEf8IcY(shqIDjxQMV6iT@4}R!5q9QTYy0EAaG#{DE2r|=)rNd
z04@XR76z=vszVl74u;JX?^G)~_4&NDHzDy|X%{1V57%2y=aPE&=l&M=(>_5niS(KY
z<x{pXGl7-Nbwu6;9vQeaW=&f2_FmarUxV~i|D*3|GdAe@o8%TI#ADry4rGyz`fW~)
zQ3b_iB+yD92;m5rYHD*zO@^j|z}dvkwhm}Nj;s}sy=jPU`ac<Zs>3ks@QL`XBc9U9
zXYYc4;7!;B6Z>l#Uka>u(7GM%KyfEh>b;xaPk9$KiPn_=xaSKzRMG^k!Xuu?lYf#o
z7mDT9!{ZL!Y(GZQgHlCIjXns}?^)9C&M%u>Ydv6V`eaQM?hLu6Vzwi%ev^uVm4ZS9
zUjz^9WnXb*pZ?lR*2xUJ0IEZl71ZxaHix;Kwp9{L3Xm4Xc{Y#@v>(>q2^P5aam(@X
zj!B_;<GR!4ekbEy#rG>4O|uSoPfZ)!Y3WtjGkWd>YCRRBE#ISzD@~hvfvzWtw$L>N
z+pUshgpOYDquy|z;*NZ15crw_;D|C)q);b@vr|w}2xHNZqc}9s2n+d20#Q9P8mfh5
zXv-p<D>{1M1@g7CQ6Z5o%lT#&9kJ)ThTcJtVDnEKlk%VK8Tp4%+pk1cJo78Oh;nJS
z7(#v6><SF0Thn|8Tgo3@R?|-#+gGk%dyT1g2TFd9;>!c`$|jYq&7zIm^F&j>AOebJ
zJ7T5+coZUdc<hvCyRE_`j;sxkeRkC!JUcv5qoU95mY~WwGMPQglb?T>TrvI8-N$)h
z(9bQ<Vckz>$2<C7rDnJ$qK`{`Gd4g)yF^y{-p@<IlyT>h(!Lx+{5`6+O(cA(2)*23
z4UDfbjp`tK$Ck}~vXEzTr*-sq)6zUq)+~hDp=!mQxTFUH5oKd#g<v1DpffnIb^r#C
zP@lrCOz<_y(K$zqc}7i)nU4-A79oiUYbLW!RvX8HiNpl~r7p_s$E4znV&XFO738hw
z&rxPNUo`SQ$3wK(T3>Mc#XJ*@nFs?*tM>y9_%G(<%3ps7Mfbu$S@X-xdmE%8VS7hF
znY#qSc-w48@Lej%Lr}p*@u6p4HizTt09?>aGK#ZLx#@rRpdy#bP7U8yq?kP)uebOe
zY0RU9lRGht^)B?3^hB@MxZjlbTpj5wxTEF#=VM+#e_)1O*4HPaTxpKoh^|cw!SAF&
zW~^%@X%otp+(@R%1*=@qeS9Q4Qw;0fCQ`$5`_9*ir1~Ljl#gWe9&1JPbV48jFzh^N
z<RXr&6Ohq7m3jZ~Q-W~g{{A|$RKcWPUI3Lwd0T~nC5UvkuQRD{Ia9O6IPo!E=If){
zu;c9OGNB5HA1UPb*~58nFon{QpVYnd^5#e@gAD&3t$X}+?55k0B`;74$BZtD?wt$G
zmU&HS`Uy;!JleWWAc=tRzIr6nmQIH5(P{>HZPtGaQ(*-M_8EX>B!p)G;gP?aY;_3w
z_qR+@nNp<}G(2zW!1JdMT}@j5B_{*7OA$Am-_P^OcQn8nI7aSVRr$6@9{lQDS&D1R
zra8x!xcaQwCW&dkg?W-C(l$R{^GotB^-d^|22XzWYu>PS8kJWZ@DQ4G5kdybC|BE8
z4hRb9A@1zN8VkCPW9kA-E<274|7U8rCRB-e>Y3B%%1u1Ckm%znkysx#`p&VSdRb1;
zz)vn!v5Q~hgYL>x1%0x6PttUzVPc$jMzZ{^7|9b#t|;uKvps+6wF_%d0`ox&61wN?
ziX!it9(FGy&+Wy;Fi$i?&+U^X41SPf5v3Brhr(Huup8JWj;R|k{csz-4rE7woyNz8
zXGeP9Nb-nxMD6e|I>$6T@*IB4%{My`&XnG0iK)B84j(dL$XP4Mnx#cD1?Ud@;0M?%
zlkfjnG<q-)Aog*6w~yJqnPFoVzWq@y_>te=c_=H=Qo`$2S@C=rQ-rS*1W*4nSwesy
zgD_Zy6l|i<R_qD6gM;b;P$wN|ZeXat$(i_tlr7Sk7214Jrzm0JL*~42zn8iwOj;m>
zTF5FhY&ALeTV|qb{jxRDF^^!sW+rt;#<46T>3K@+j0Q(Yl7j}a?ulBi7dx!sa+8Is
z<*n`?60}i`>cKvjBDsq<J)xz)Ab9%%2kCu@!mM~=?7|}d&-?D<n7#m}9k|dOmdTe`
zp2Uv9_~(;4A^Ka}M$w7E`7=EC+tngq%d>OC7v4#AQdfpsJA|vf{x06p4gFvf%!<zT
z2<y1}tkOd`u-J!S$RU?OdnavYK*&sNOs^djF-#C-*S(Bd@e<8y%FQ9%_yxI|lTnV*
z)q){VJv|UD(SLS=9^;sL0h8keCjPVi3f0`CJZt-~f-#OZe7%jl2oZ6s=T7LGCPVx5
z*+01{!bb&R9jOcbgm%nBADx!J7A~5FRm0L`4Wl}Q`3c#tGcCnDy6IJmc;WRds9}m0
zQ!Ni-FHiEk&IM<agVw&eCNNVHR3S>wR;~Eq4QT~g3IDYfHk@vO067it`&*XU2e@uL
zo#g{g1-@U>+SbKBuXbjS&;buUzPhQb594ez95IEzC7$S_oG2Gio*gsG7-9U$)#>`_
zFv%ZCN9(Bej8>wc7lT#!cshk1Jua*FqX|34mmk6ZkjVv0?pO(>B(KW@;f!c6QOhPt
zYoeZC5bF7i^7u7GfI0;9LZYd#P6fk3^#drbPgh=nu~`3wT}PTuBGvn1Z&V0%t2$}U
z>!X7dFZO>~E(u#HqKV3TPHXhVC-qZl)gc+zgyEImBx0+UImO7n^2~t=#v^w4(p-l3
z`0@kzpN!*R`r@gYbm*V+#f|&5+>As-AA0m4u<M{P#0&{%6Q+a&^kAi86o_#+0|4iZ
z2R#uGYXUfGcb};$yo@~gad=WY@@Yhu-zUHQ4h_9vRTXh2UB7jG(0Gq{3&-PZLV|MD
z7b4}mn%y=A)-UUZ=?;r7N3*LirskEIEz~91*8b9LsobT3db=*l(MO)B*2OP3g`K9y
zT+9xD4BjAB<TnDfCP6@BR~dqJCo&w;AV5+tc(m~ksi0Ar_+~S`=xa)&KN}s}Q8HGI
zR`<gb8ENj&eNjQEr2UeW7(zcFDdvRjw~K(0j&CAW)a@@kM#Dz<h~^8*YaA`atpxq)
z3B7b-^_2H4G%CRTCoL;FP3JIi`StR}8;ED75ZKVNfN%*O6&{`_nHCxL&98+Vhx8R7
zZ6(Z#|2OND_0;D_tJxO2B3aSvPrKj5MouRQq~(yDzpVv__Iwd-^*I$>7iKz6_{lC1
z$0>OS3ubvVSZOGR*)@Jo*bMIb%|&bpOJ|BpT(^e*IhG5)=rdI_t@%Ugb<rO$*14vp
z974Sk$i0)muXa4dp!f>N-a)V%CXxzAGz5r%YQSYM>-4W1{Wa3deYI!vRLyzOq0W&^
zgP-?rkw_;ivDp;mv3Lz#Gr2Ey@zVNXsUHe%19QKke>rC?>@|M<!|=&h&AhP-JVi@;
zI<{r%njI9oG#Xc27mdQd<(9~lE?09?8z4MoAVjb71ZW8$BH&_8j3C3FDhhNspkV+M
z?z=JyO!OD1I;t~3upymOT=v}fRHu0F&rhgP2g?n8rC|<yifM0CAFsi(?>0ge_Jgye
zYO6QPL+!`)@=fI2sLP$EKKXBb(zAz7>-*SN8EJMK?$WG-32URRkwrQ(q08^N84M7%
z6%fMf%L0;ytyIFSq7Zd;VXPl9;fO{6(MGw5?ms^oA1l{N6&;J@>vzbZ{!y(wA#4B2
zb~r%g#VpnOcrX3xgFJRj=wc_yu=K@H)QRFiQgBkWEJsJ6PEv8!>*+r~LPw}hmpOjg
zHV$d_YwuD^*}5+Iod1?oQuldz>)d`;40A>R#DU2#hvcbp01Sm-g|nVLI9<XajRK^F
zYe(pR$6P_9YN)Eoxo)8Xxh^+HbaItd1ccJ#&lVHjyFs2gPYE@WvQ^{VXa$0usYY+@
zA2e=ADu$+^y<mG}3d~wJA%#kEWW;LBNQ2t8&PWr@xl4@(9opw^N{%hy*EFKWijP8}
zBg7C&-i-3}6Ll?+r~&F|SUVxva8P3a3SpdS4Ai3jb0yVK2FJvhAbs)RSNPj7Iy{-%
zaUV&DbX;E==k_v-DNEJCCB-G%taS?(<*(nga#p$FCZ4tT@n#k?rjXHUcu?Z4Y1g+@
z24~x<1kKU-U7Ckr>IQR@UHiO$jbnIx@%MdbT|9)O8FLUT8&AnjMZpfoXTk0Q3S2m<
zaX>}8OG9<$Pa#X>j_r5bqoaaIWp`FTu%FK*3eY?FqU!fN{LAk$9ck;ZNnHZzCm&wV
z=JuceEoE`t#gSQDD<?F~h-tQBM&7J$Phn%kyF|HO^PYviwuhkauRGnVN;QrVX-Iqf
zEk6Y0=cL~|qsuT9I^r{g1)_lUCte)U1R&x&d9L?=qK0eYQ~SI#W~*Ie=$Dzo@;iMp
z>o#~gtnmWeGrc{TDm$wmm)DPIH;YO$N63fzC@-1sOtc$hv4y;7Y(;mE;z=C!+jxsB
zH)P+lP)PO=^k87_<MXc(j4DM&uKXT@K(BlIy}Q;9Lw80X#h|Qb0l5H<Xc7>uweoae
z&ywo)?B&f>)cEq&r6HXL_rPw<tL_O(tqA4nAuipHmW$KjLyNr6BE_@95{FxMTb`W|
z^9nq@Ie4L_z-LBDQjH@jtH`$KndYZ=pk`;rby0#KqV{;>a#ml4ZdW}d1|t4?Cg0p6
z9u)wCvWT&q#Y-YMoGE~l0vBxoBNqS0OHqIPp|YyoE%oi+cO2i`OLXp#9PjXv;6S5i
zI+zxi!*}h~1!kX>XspkMEUR3lnV!m9x!fTE`NjCa7xtBOwGDIru5ERSX4l{@wXB-!
zqPb+0boY8ymTHD>SiKAjgyb3R#w-MgK%EDJo3QWC3RiJ7-vG@7MfNs!`A=x*J~+n_
z@?P%&Z$$OOxw^EPiMKGugNUH_^|9n_*ZuoczLXJ({@ff)mnLDGrA9<p_dsKx8RM(Z
z@e)<P-L;wNlpORD_&Y=R_7W&V73fZZ6iL_kuRqV4$S|*ghLAzX?q#=)IX(kzcIxNx
zSw*l0f=c0#rUBBFd5<nO@@`a#m&zZ2<8?U}RDRZ5+V?8q_efD*SF_JXan;vm`Fze=
zWGNf1DXuDdERz%cKtMFiKR~IkSIr=eA=KnX|8-S1(;mW$x6?i#g=i$kjElc?rw_YI
z?qAz5$)@MqG)6c(Lx>^^4^l}#;){vkQBY8@U@x03vN)z0z@!saad;NIg|r5^Kf9~G
zn4`zT=|`zBI=djIerkMjkMpa3l;*dpwmr|Ox4kNnj<!dtl0=)r1B%(+mv>p@lLyyF
zFw`X&xjm{HFXnm~^QYb-K@A0c7J7c*Mo@M+Qpa4yuQ&33@em1gnhbJb5Oa{S!2qG6
z0<MI2)(wS3;J9W1S53A{#J^o>e5{sHQc93co?j^Lvb$a^5#heR*L}4E$e@nOHAxAD
z0)$HDWHNIjtinPu?#@GxTpQ7{@sNl5lUG#mEn)SET@(%NL3R;$ZM^iA8#LrCR7G!f
z&yk5n6zRzXFE51c_rx&71wg5J$P(65)<hr_>>{jGXJ1f38AtUUP^~1#!q2R=uX@hz
zW!9$0g)R;v>Noz0A*zdwWqFpFH^U$CtPE^hOT2nk`Y~hq$IU|K`m0?YN1|4<dz2M<
zIvDAvx1NuLIx?j=6MOiqBaFQYlpBu0V<;F_+(`RAVRGKcm}mJ-*GWqZ<9ajXQcJ<Q
z^>;BiML+;7KnokjLDg|wbAYSRrbZqcGnF5S)z2G6rf+{F+*8`C7(QLDf6m>{;4S~$
z{4@O6z|_}%4RrKw-%?)-A6F??vf&IEj%UgyvZKA1^cF&JYhU4hoH(<#ZKa*&2=gv=
z22lHxAB}3fci6T(eD2UVhJG0V?EuA@1{~@z1Tl&jt&9x_S~PJ;KLAo|B+=OhUV;BA
zsaSgw8OU{1xm=HyAOE15Y!o^&^}L7MM)U5qxHj#I+ME|pRvm`R>`X!&H4~&m*%9%3
zsiU(k^0BJd4@DzQ3rhEG^UO6r$?ekE;kzyd?)()XJYJ5^gDWE3)F9BTJOLtyKrt|h
zgE$C=H4;)6M>G$J@NIl8v8QkK&Z6N<x_ZmYx;I#Iiyx=t&=vid5@HI9&Q|Jk=`yCg
zy$J+Vt%m#JBdR2a0uaBNK?!QI3$uK@`&;tK!;4FNmQ84OnlVh;b4npU|1m?UO3{5H
zek+Mszu#Vbznko=2_OA}$dqT4>n0I5tHXM<)U{mxohk~3IH&~xMJm}e^Dn8QW^(H4
zO8=VQZe2nB+CxkxLC}-eUVq9Ce7~h-*5)yP`_xOM>{vNMb1yco-cX$n`nnSqOWR7&
zOqBD&s`slsxg;zBUzU70p^s}+)tinI70l!~*?noOdw%FvRHHe;V;`XuzVAkRmzfX{
z^Vov*_b@RyHJHQE+{uDH?@VxHi-4>Oh(%#T%nFr1HvL>?=7Ceb>gWxkphL+Y!^Wt?
z8venYjB5fD*QG=JX!aPszL$Vz9zW2f+~;(9A4P22U|ikQ^^zbv=f|3bz%#w^RY~}t
zT)ANDuBn<-)oi?4@7d+1W$H$Rl{^GL#ZG|M42~}>%Bmiqd=`b9;((R_(7a825!T78
zzdY%F@bCLw$hya9r-}YuGl!h+E6(GYtPj(n+5NJP?5FG0{v(a}5h_$KMclJaR^cYD
z$vaCgUUP%v=35NsRO*AYQhgy;-Lacmpng_?+=?mw<goUdVv{^*D9M0ak<BQ7KS+kw
zf`N2hC-&<h@8Xb_0aBwIbtyI`XjCR*c=|GFk6z}QuHH^X6Fp7NTiyICQLU!N57zYm
zjJ&WS3#yk8(tOor?1J|M6Tef)%I8#}6QC$-meEf`ds{j#kXp{Ru37VQ$1e4HW<(<m
z@!sLQOzqv!`^6^@p<OwU3xOHsc1T!2P!AcXIkv$1lO>MmCm;&weXa%_JMu3rD;i%b
zlrHiQ8w%ifz)8IO@-_T+8&l<ob%f=iJY0mUYv>D|%jT1V=kLq<?x%L8#|Y-}+c~NE
zKj>pvvVXRQ$~8mK$N5JQr397)((E2fq+O*}|Gs7f3)v=%>ZhF7(Y>D9#2I5b@Xo2n
z_~1c#yQi#_=~buatq5uEYjwdPd+mJA?;5-*=r!^$x|?a=*ne0&?Q0nlrVOEC+1E~(
z_KEwwN&7`Ll1ThK7<BMi_dV(~`S__nhC@fxX;tU&AXg~5J|&}n*K<G>1|ft1QEfKX
zi;7rJwZZ-874V<i2T|o`iODbDWmzm|n};N9ybUCm3C^Ku3@m;So1~#Hkcg9_h$_lQ
zeJ%Gcf0L7r$r9(VIGsJHW_{-_7oOp)@$Q&v{rB+(=Z?GPBDso8;?Dt9cKq-${X(#|
z#Zl~aaRcV$*))6y69~U9aBgA_5?MYfim>2`!C6Fwk^jhA9^%MW0okNb`qDqun}Q1e
z-qdz|0=rX$tp}?|zL2sp+pot$5@9i#ntpcARj$Zxj^wWryru6VOKIUancLldVZZIE
z#W$9?PmxDtSMjv=U|#3yM<(hyFJ4a<`{`$2JtQrED)M0BT<D{QDlv6Sf}mE#lV|FQ
zj*o(A2k9#3bGjO6KNu(ie_XI}c%&YIhO)4UL5R<Sx5qfrH9$IX<*5a>SLWXR=m(!1
z9?w$HxtTv*`I^Zg?;0kN=An1`_#4UQrzq2l7-ByknbkN1<7`&ve4%z=YbG=(ul0o?
ze@Et4{?#42z#{^kO4LNdxp6)R)SJL4d%v`Al>?{`?;R(%)IgV6Qq=MID}s-AsYq|W
zecn?84PNA!m$DOpvqmU`%n2d_{r^jW3l0(kAdxiXg#hwzMrYPCkFr{(<5p>Yc}0<_
z*yl#%Ly|A_1+BU>tUilt`ckMTmt<e$P;S*LZS5c!SvPgRq%>*-XBEVyy;PzfERe{o
zH??_^<=_?Y=__<d!OrFIQf1n7tUl_^oa1Cl?wmc+{py`BHD)xiMVdnVl({kVJI*xx
zu66=6w#_hNJxZvs=tXQX2=oaKaveb44Hl&YH8uZ1YLf9d|CV_FWIo=CGb)v6pD-=4
zM7>P)JInc>W5@aMteWR6Ec>nbBnC4IUMFw2dtse4U7OKT@m3Yqrqf$<_eUsRlDsqE
zGkvYwqw8O4{oA&3q1;j$4+zL9T@&3?F_2(i$S@{u{f5`FGY;Le<XC^lEx=jU6QHgP
zWb?ILu$4(I&v1krfKcFM^Zmba6*ZISq+W?zC*6q37V;6*Q_?G}<L@4QZ<ZyqIP|(;
zNUpAVs=^-0VcXQb5@zT6P}bUYfpzrWC8IV6L*b*=m$$|<w}op9i57JjqT?I-<-fDq
zR+*Js%GZOYgr#=TeYk-K#e9UZUF%R*3tcF*K9FN}c3FS}gVKVjll3&K>tmM<(gz3l
z3ji9M8V~;~2~jgiirV7Uz0CI_rB-Y6<2h?Qx(Fm~e)~T6yYJo^Uo_53uah-*4GTVN
zDxGV*lg8U##)Eok9uV_PDI_B&y>y?m+Y9dY*dv8b^6QUYMN@CfURAb>g>_DiKR{m@
z^)(5$1#T0S)-Q@Jg5%Jw7aWTQ%K}UU;I&P?N1a$%0lVKQ1mN&C0iMRh`wv*W2TxKp
z4O&yegx6HF4`(2z3F5wUF+!r{MQ}N<#LFUSRlnq)EkVlJ(;!xDnJfWa7hcqK@b&QL
zw#ByGalKE)^RTBWjE;7P&u;mt|2x~tkaA0jsmaQdch8bCl*G53Zz{|hx3-Qdwrt*p
zz5;k9%K}tORMc8QT4bo8vqmUr5DxD*z<X)HVv8+#G<FdqQ@noXr<-K^+*8LA0aqg%
z_R}NhKDEFO#=PE#r@>zFoOub!uU$L`?pT(;$x`fBGm?6@LF`W9ADPVho6RrQ=qgz<
z|Id`TM@Gjrn8smxl;<L*);SoAc_Aqr@ie6w6b71_4yp+I)KF<1Q&Qy{?h#}#6!^gU
z3fL_%1V^_8=&}@bTh0mz?B;~uc5R=;ro!CgLKEzl{Fseqqd3VC1cZe;qK`b1lpnAN
zP~)XiYnP3$S$r7g3}y4KxoqT3OmU)pl!V%j86bbdCeN^MbMCWk6(zML8zoca@poW4
z5#}zL8U~s&=hC1OZ$gCk`B15MyrjyXf;uCD5X$Og`T_sgkl{GCZNMhKx$Ojv|1T9%
zp=r{=R(653GU6^8|JWxI^N4$3D^-bxu~&pM&a7rC^F?s(gY=6DGRm(zOH$pKG0|oj
zZu<xFP8yQTlOf%^&>~}MTON(vNRp<P-+!dm?82494GohR99OMXRlVH{RoT;q>m2b3
zLBE7=#2+A*5d5TG=m|e9%XNY`vk*C(suczIt6GHM@-K{!cc%WO5RK#A0lfFGn43X!
z|J}IvI67xil;4HP)vxR@1`Ew8FZJ{>hdJAzH50EG=+efNeR8ZS?T@#Hey|lEFBm}W
z{#oQ&9x}aGl@mO`82Hj-X00Lks1qG4-%arV9oC{{QqA{NH*!W6et9%WJ8^#Rwt7^Q
zMw`9&*TIo%gzvK=L5^q0Qs5Jik+xkF-QP9-(fx+<E?@Q~zRj>=4m${$@SB*TZ>p>v
zti<R52wF=Sdvw3V{exZb5A0v6J^m-Pcj{Z{RDBU6b-q{gYS(6G7}8NYv!vWFp@!+;
zQKgaE7#*!Ighcvu!@{W=@l4X4u*q#k;}$;+4ezR6Up`)#*b2HhR<fbxC%V(hJ8!tI
z#mNZfOJZ-^3For1Exbb?_EXp5b`E&R9=a4Yt<&awJyNzfH53||0U<&Y)RuCptNm4B
zprWD(!Mg2h9Oxeax>fV5^WV{P>T_Tx??1-<)nBq;Y!P)&T%z|H#L;~sQ18@8lZcVf
z)ziO`LF@PssXL@0q&X4W6xYqJ$V-yNbT>8XyP@(nB|aRT^V{*@bm?>D=K=cLk`Chd
z58D$lrAT^If{=y!TM)8OhDQ4tw>e#pUMrpjv0pU=GD1+xJd8lY@&48}QM|zVZxRl2
z4?r&X>NosXPRtgIhv`&kuXQ@#8B(#rc!#?(yDyMW?-7->y!nrxB9}O4BQ9$`)f{~_
zkeu*yqH1dCzFFwjaNbolK?tQ%N7rqi#N$-bLU+%Ber8im_fWqC2b!B{uaH8v9b-4)
z-?|f_2Uq!)n%2WOihtawCuoMi3-2mM(}=?HD8vu}TIhdt3TZgHeL(lKFlp)U(DGPs
z{tLV*#$1cjy<CYBcdBDvi$s>Rbyra~crWoosq21~qL@rSIFt6YWFGE6^j}<Itz@fd
zJbxSBlv60ju{r!(S$Cxh1ejTOQ&>F~ZVFP4WnXF%)TWLR?MRNeApGiukc-niM%0Ay
zc`|;8r0;jxFEzbOE`K)s4DZ`rY~Y|BYs(G=L(6vyPi2Kxg%1z5yvTg@So*)##v@<~
zu)l?r>LO>=<XO1CZ~*>--MZ&haR2|C;)?qW9Z<L|PQFE=-7%ai6`Enc%(Y?>Z*nma
z{&dT{f_gQ4KjqVn;G2)Wy4@-z{l0o<H7ZWS<h38PIF+iyH!s&z?EEgq<-J)<+Bd17
z27-1>ZJS6$BPZ4J(tL(-N9*^}#-kh}Fc#&?^G7oB7z8?~84}RhjE(wR-r~3p0oMrP
zAqlvv{pAX2v(QmrHumE#T98|r)_K0<rE2%cYCve}?yCJAyEmvdzuEeM{g~~Hq1s3L
z{0o|{52!-AR0yIvOM4;}=2)*u@pxQKi$)6B*pBJDjerL6T=u1ywC}Ytt&N#EM2esw
z@_j~m-=-Fs7I^p$QZ~SPVm=P&2mrB&O@F`wg<g>^Z@25bVK6D_@|5u_=>y(Rg?FL?
zvJQEHo=uM_LK`i!!IZMs7j)6#Tz>6_?eWqtpK`-rB2NPE?O#1Y_D^fWEMIsVD%YC{
zS={yqxzd8pf%!Mp>k-pPcr?-l0Xa9BQSQw^9MJ>$48^B#!#ZCf4(J#Fy?AKN4t4y`
zLcWE1NOxq6iIeFy-A~G)&+E237Qg9BI#aNB6*e0%HJ{MmyxON3QJGiHq-q-LEx&$T
zm!iOMGe2PGb_2d&hi!R`=2w|r>Y-1ri*HLJ52n`5vZONH!|MBlAp))hbs`j0a4LN8
ze1k38gnq=4oB)#JcUdw2k$^?I__6w@@8W})*~?mbR3Qy(K2dag2VI_hT=&-I21^X|
zBTDVx-luV>SmHp|Nq&n8i(hY{xk?)H2i@MYXvS_^57C@?vrA2B>$;d)8X^5{Lq0n&
zLoKX6Hv_`?kf6?B8_39tX+>zAJ&=~;NKOICOPyC<(8s_ge@O~m&xZxX3S3&SC)F$X
zGoo=t&e(b|<$h}Al+KMcbbXs(z0C_4*U33i^0F{NIK^riN4PqEozz<nvDhHnvQEwR
zl3g0nRoBIC{z$J=V3NWN_pbWI5{O(0?Zz({A^_IHPI*=(hpfhdKnQ?KMbT{j2f}(9
zEy-`aaHL1-aLQ|Tv44PigOq~zt6(x0VnW|;mu~I~@yr9OUP?FKn3z>fHRagwuiE-4
z3pZ%@Ur;oOZ06ZENNS>6cBw1KU6-u5qU>A2>>A4qopbfCN+A3w+VAZ!b#RLSwNz)X
z4)r(?C;*u{QKp2Z|Fg(+yzKkOE@H%9h+<CTFS3Il6FQ{SyOq;rf*U4NXL~Gzk|H`6
zUTt|T3a&>t;4eSA5ABZmX*fgbY%27|-nA)|B0H%6y}=N-)9X+2_MB<b?dCeLoC6X!
zi12eltJ=tjC5wPmr6_M}B2_jNw9cu69teee{O)06bhGWTgHSg=-CPX4LNkcgorYq#
zX{Zrk=x}oYC<ex&Lz{8vcmVwpNAL-F4EXyoNtswzhvJ+C(HIe3oBQ-nG&ld4T$$D>
z6*EBH;ZBkBK$GNnmqYm^!b#Mk;6}(BM<*7?>fF~t9yvhof6+CR2)>Q5Z9LK(G}@(k
z+2p!p;t@5`w|)f}($cFw&>3QMZYKXh5!j4^+8`9d|8QU}pKv(%0Oxe)avSjShrM7r
zO8(sk2YM69G>JlK<J9NSd^tI%;;Jpr^7!<#j1%NsET`if4oD=jJ`R4^FIN11+EtVF
zTgm0_6eBB|N9awt?Z;)!=^MM$C?VISxGNF%(;H@4#2Je3>oMT1c$s$A7NHJNMu|~C
GJN^f7y^&S`

literal 0
HcmV?d00001

diff --git a/trunk/3rdparty/srs-bench/go.mod b/trunk/3rdparty/srs-bench/go.mod
new file mode 100644
index 000000000..e7322eaac
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/go.mod
@@ -0,0 +1,12 @@
+module github.com/ossrs/srs-bench
+
+go 1.15
+
+require (
+	github.com/ossrs/go-oryx-lib v0.0.8
+	github.com/pion/interceptor v0.0.9
+	github.com/pion/rtcp v1.2.6
+	github.com/pion/rtp v1.6.2
+	github.com/pion/sdp/v3 v3.0.4
+	github.com/pion/webrtc/v3 v3.0.4
+)
diff --git a/trunk/3rdparty/srs-bench/go.sum b/trunk/3rdparty/srs-bench/go.sum
new file mode 100644
index 000000000..98e9df028
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/go.sum
@@ -0,0 +1,124 @@
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
+github.com/fsnotify/fsnotify v1.4.9/go.mod h1:znqG4EE+3YCdAaPaxE2ZRY/06pZUdp0tY4IgpuI1SZQ=
+github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
+github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8=
+github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA=
+github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs=
+github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:WU3c8KckQ9AFe+yFwt9sWVRKCVIyN9cPHBJSNnbL67w=
+github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0=
+github.com/golang/protobuf v1.4.2/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
+github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
+github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
+github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/uuid v1.1.2 h1:EVhdT+1Kseyi1/pUmXKaFxYsDNy9RQYkMWRH68J/W7Y=
+github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU=
+github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
+github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
+github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
+github.com/nxadm/tail v1.4.4/go.mod h1:kenIhsEOeOJmVchQTgglprH7qJGnHDVpk1VPCcaMI8A=
+github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
+github.com/onsi/ginkgo v1.12.1/go.mod h1:zj2OWP4+oCPe1qIXoGWkgMRwljMUYCdkwsT2108oapk=
+github.com/onsi/ginkgo v1.14.2/go.mod h1:iSB4RoI2tjJc9BBv4NKIKWKya62Rps+oPG/Lv9klQyY=
+github.com/onsi/gomega v1.7.1/go.mod h1:XdKZgCCFLUoM/7CFJVPcG8C1xQ1AJ0vpAezJrB7JYyY=
+github.com/onsi/gomega v1.10.1/go.mod h1:iN09h71vgCQne3DLsj+A5owkum+a2tYe+TOCB1ybHNo=
+github.com/onsi/gomega v1.10.3/go.mod h1:V9xEwhxec5O8UDM77eCW8vLymOMltsqPVYWrpDsH8xc=
+github.com/ossrs/go-oryx-lib v0.0.8 h1:k8ml3ZLsjIMoQEdZdWuy8zkU0w/fbJSyHvT/s9NyeCc=
+github.com/ossrs/go-oryx-lib v0.0.8/go.mod h1:i2tH4TZBzAw5h+HwGrNOKvP/nmZgSQz0OEnLLdzcT/8=
+github.com/pion/datachannel v1.4.21 h1:3ZvhNyfmxsAqltQrApLPQMhSFNA+aT87RqyCq4OXmf0=
+github.com/pion/datachannel v1.4.21/go.mod h1:oiNyP4gHx2DIwRzX/MFyH0Rz/Gz05OgBlayAI2hAWjg=
+github.com/pion/dtls/v2 v2.0.4 h1:WuUcqi6oYMu/noNTz92QrF1DaFj4eXbhQ6dzaaAwOiI=
+github.com/pion/dtls/v2 v2.0.4/go.mod h1:qAkFscX0ZHoI1E07RfYPoRw3manThveu+mlTDdOxoGI=
+github.com/pion/ice/v2 v2.0.14 h1:FxXxauyykf89SWAtkQCfnHkno6G8+bhRkNguSh9zU+4=
+github.com/pion/ice/v2 v2.0.14/go.mod h1:wqaUbOq5ObDNU5ox1hRsEst0rWfsKuH1zXjQFEWiZwM=
+github.com/pion/interceptor v0.0.9 h1:fk5hTdyLO3KURQsf/+RjMpEm4NE3yeTY9Kh97b5BvwA=
+github.com/pion/interceptor v0.0.9/go.mod h1:dHgEP5dtxOTf21MObuBAjJeAayPxLUAZjerGH8Xr07c=
+github.com/pion/logging v0.2.2 h1:M9+AIj/+pxNsDfAT64+MAVgJO0rsyLnoJKCqf//DoeY=
+github.com/pion/logging v0.2.2/go.mod h1:k0/tDVsRCX2Mb2ZEmTqNa7CWsQPc+YYCB7Q+5pahoms=
+github.com/pion/mdns v0.0.4 h1:O4vvVqr4DGX63vzmO6Fw9vpy3lfztVWHGCQfyw0ZLSY=
+github.com/pion/mdns v0.0.4/go.mod h1:R1sL0p50l42S5lJs91oNdUL58nm0QHrhxnSegr++qC0=
+github.com/pion/randutil v0.1.0 h1:CFG1UdESneORglEsnimhUjf33Rwjubwj6xfiOXBa3mA=
+github.com/pion/randutil v0.1.0/go.mod h1:XcJrSMMbbMRhASFVOlj/5hQial/Y8oH/HVo7TBZq+j8=
+github.com/pion/rtcp v1.2.6 h1:1zvwBbyd0TeEuuWftrd/4d++m+/kZSeiguxU61LFWpo=
+github.com/pion/rtcp v1.2.6/go.mod h1:52rMNPWFsjr39z9B9MhnkqhPLoeHTv1aN63o/42bWE0=
+github.com/pion/rtp v1.6.2 h1:iGBerLX6JiDjB9NXuaPzHyxHFG9JsIEdgwTC0lp5n/U=
+github.com/pion/rtp v1.6.2/go.mod h1:bDb5n+BFZxXx0Ea7E5qe+klMuqiBrP+w8XSjiWtCUko=
+github.com/pion/sctp v1.7.10/go.mod h1:EhpTUQu1/lcK3xI+eriS6/96fWetHGCvBi9MSsnaBN0=
+github.com/pion/sctp v1.7.11 h1:UCnj7MsobLKLuP/Hh+JMiI/6W5Bs/VF45lWKgHFjSIE=
+github.com/pion/sctp v1.7.11/go.mod h1:EhpTUQu1/lcK3xI+eriS6/96fWetHGCvBi9MSsnaBN0=
+github.com/pion/sdp/v3 v3.0.4 h1:2Kf+dgrzJflNCSw3TV5v2VLeI0s/qkzy2r5jlR0wzf8=
+github.com/pion/sdp/v3 v3.0.4/go.mod h1:bNiSknmJE0HYBprTHXKPQ3+JjacTv5uap92ueJZKsRk=
+github.com/pion/srtp/v2 v2.0.1 h1:kgfh65ob3EcnFYA4kUBvU/menCp9u7qaJLXwWgpobzs=
+github.com/pion/srtp/v2 v2.0.1/go.mod h1:c8NWHhhkFf/drmHTAblkdu8++lsISEBBdAuiyxgqIsE=
+github.com/pion/stun v0.3.5 h1:uLUCBCkQby4S1cf6CGuR9QrVOKcvUwFeemaC865QHDg=
+github.com/pion/stun v0.3.5/go.mod h1:gDMim+47EeEtfWogA37n6qXZS88L5V6LqFcf+DZA2UA=
+github.com/pion/transport v0.8.10/go.mod h1:tBmha/UCjpum5hqTWhfAEs3CO4/tHSg0MYRhSzR+CZ8=
+github.com/pion/transport v0.10.0/go.mod h1:BnHnUipd0rZQyTVB2SBGojFHT9CBt5C5TcsJSQGkvSE=
+github.com/pion/transport v0.10.1/go.mod h1:PBis1stIILMiis0PewDw91WJeLJkyIMcEk+DwKOzf4A=
+github.com/pion/transport v0.12.0/go.mod h1:N3+vZQD9HlDP5GWkZ85LohxNsDcNgofQmyL6ojX5d8Q=
+github.com/pion/transport v0.12.2 h1:WYEjhloRHt1R86LhUKjC5y+P52Y11/QqEUalvtzVoys=
+github.com/pion/transport v0.12.2/go.mod h1:N3+vZQD9HlDP5GWkZ85LohxNsDcNgofQmyL6ojX5d8Q=
+github.com/pion/turn/v2 v2.0.5 h1:iwMHqDfPEDEOFzwWKT56eFmh6DYC6o/+xnLAEzgISbA=
+github.com/pion/turn/v2 v2.0.5/go.mod h1:APg43CFyt/14Uy7heYUOGWdkem/Wu4PhCO/bjyrTqMw=
+github.com/pion/udp v0.1.0 h1:uGxQsNyrqG3GLINv36Ff60covYmfrLoxzwnCsIYspXI=
+github.com/pion/udp v0.1.0/go.mod h1:BPELIjbwE9PRbd/zxI/KYBnbo7B6+oA6YuEaNE8lths=
+github.com/pion/webrtc v1.2.0 h1:3LGGPQEMacwG2hcDfhdvwQPz315gvjZXOfY4vaF4+I4=
+github.com/pion/webrtc/v3 v3.0.4 h1:Tiw3H9fpfcwkvaxonB+Gv1DG9tmgYBQaM1vBagDHP40=
+github.com/pion/webrtc/v3 v3.0.4/go.mod h1:1TmFSLpPYFTFXFHPtoq9eGP1ASTa9LC6FBh7sUY8cd4=
+github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
+github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/sclevine/agouti v3.0.0+incompatible/go.mod h1:b4WX9W9L1sfQKXeJf1mUTLZKJ48R1S7H23Ji7oFO5Bw=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
+github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
+github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/crypto v0.0.0-20201016220609-9e8e0b390897 h1:pLI5jrR7OSLijeIDcmRxNmw2api+jEfxLoykJVice/E=
+golang.org/x/crypto v0.0.0-20201016220609-9e8e0b390897/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20191126235420-ef20fe5d7933/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200520004742-59133d7f0dd7/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
+golang.org/x/net v0.0.0-20200625001655-4c5254603344/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
+golang.org/x/net v0.0.0-20201006153459-a7d1128ccaa0/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/net v0.0.0-20201031054903-ff519b6c9102/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/net v0.0.0-20201201195509-5d6afe98e0b7 h1:3uJsdck53FDIpWwLeAXlia9p4C8j0BO2xZrqzKpL0D8=
+golang.org/x/net v0.0.0-20201201195509-5d6afe98e0b7/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20190904154756-749cb33beabd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20191005200804-aed5e4c7ecf9/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20191120155948-bd437916bb0e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200519105757-fe76b779f299/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f h1:+Nyd8tzPX9R7BWHguqsrbFdRx3WQ/1ib8I44HXV5yTA=
+golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
+golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1 h1:go1bK/D/BFZV2I8cIQd1NKEZ+0owSTG1fDTci4IqFcE=
+golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
+google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
+google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=
+google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE=
+google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo=
+google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys=
+gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw=
+gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.2.4/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/trunk/3rdparty/srs-bench/main.go b/trunk/3rdparty/srs-bench/main.go
new file mode 100644
index 000000000..a2384a524
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/main.go
@@ -0,0 +1,263 @@
+package main
+
+import (
+	"context"
+	"flag"
+	"fmt"
+	"github.com/ossrs/go-oryx-lib/errors"
+	"github.com/ossrs/go-oryx-lib/logger"
+	"github.com/ossrs/srs-bench/srs"
+	"net"
+	"net/http"
+	"os"
+	"os/signal"
+	"strings"
+	"sync"
+	"syscall"
+	"time"
+)
+
+func main() {
+	var sr, dumpAudio, dumpVideo string
+	var pli int
+	flag.StringVar(&sr, "sr", "", "")
+	flag.StringVar(&dumpAudio, "da", "", "")
+	flag.StringVar(&dumpVideo, "dv", "", "")
+	flag.IntVar(&pli, "pli", 10, "")
+
+	var pr, sourceAudio, sourceVideo string
+	var fps int
+	flag.StringVar(&pr, "pr", "", "")
+	flag.StringVar(&sourceAudio, "sa", "", "")
+	flag.StringVar(&sourceVideo, "sv", "", "")
+	flag.IntVar(&fps, "fps", 0, "")
+
+	var audioLevel, videoTWCC bool
+	flag.BoolVar(&audioLevel, "al", true, "")
+	flag.BoolVar(&videoTWCC, "twcc", true, "")
+
+	var clients, streams, delay int
+	flag.IntVar(&clients, "nn", 1, "")
+	flag.IntVar(&streams, "sn", 1, "")
+	flag.IntVar(&delay, "delay", 50, "")
+
+	var statListen string
+	flag.StringVar(&statListen, "stat", ":18000", "")
+
+	flag.Usage = func() {
+		fmt.Println(fmt.Sprintf("Usage: %v [Options]", os.Args[0]))
+		fmt.Println(fmt.Sprintf("Options:"))
+		fmt.Println(fmt.Sprintf("   -nn     The number of clients to simulate. Default: 1"))
+		fmt.Println(fmt.Sprintf("   -sn     The number of streams to simulate. Variable: %%d. Default: 1"))
+		fmt.Println(fmt.Sprintf("   -delay  The start delay in ms for each client or stream to simulate. Default: 50"))
+		fmt.Println(fmt.Sprintf("   -al     [Optional] Whether enable audio-level. Default: true"))
+		fmt.Println(fmt.Sprintf("   -twcc   [Optional] Whether enable vdieo-twcc. Default: true"))
+		fmt.Println(fmt.Sprintf("   -stat   [Optional] The stat server API listen port. Default: :18000"))
+		fmt.Println(fmt.Sprintf("Player or Subscriber:"))
+		fmt.Println(fmt.Sprintf("   -sr     The url to play/subscribe. If sn exceed 1, auto append variable %%d."))
+		fmt.Println(fmt.Sprintf("   -da     [Optional] The file path to dump audio, ignore if empty."))
+		fmt.Println(fmt.Sprintf("   -dv     [Optional] The file path to dump video, ignore if empty."))
+		fmt.Println(fmt.Sprintf("   -pli    [Optional] PLI request interval in seconds. Default: 10"))
+		fmt.Println(fmt.Sprintf("Publisher:"))
+		fmt.Println(fmt.Sprintf("   -pr     The url to publish. If sn exceed 1, auto append variable %%d."))
+		fmt.Println(fmt.Sprintf("   -fps    The fps of .h264 source file."))
+		fmt.Println(fmt.Sprintf("   -sa     [Optional] The file path to read audio, ignore if empty."))
+		fmt.Println(fmt.Sprintf("   -sv     [Optional] The file path to read video, ignore if empty."))
+		fmt.Println(fmt.Sprintf("\n例如，1个播放，1个推流:"))
+		fmt.Println(fmt.Sprintf("   %v -sr webrtc://localhost/live/livestream", os.Args[0]))
+		fmt.Println(fmt.Sprintf("   %v -pr webrtc://localhost/live/livestream -sa a.ogg -sv v.h264 -fps 25", os.Args[0]))
+		fmt.Println(fmt.Sprintf("\n例如，1个流，3个播放，共3个客户端："))
+		fmt.Println(fmt.Sprintf("   %v -sr webrtc://localhost/live/livestream -nn 3", os.Args[0]))
+		fmt.Println(fmt.Sprintf("   %v -pr webrtc://localhost/live/livestream -sa a.ogg -sv v.h264 -fps 25", os.Args[0]))
+		fmt.Println(fmt.Sprintf("\n例如，2个流，每个流3个播放，共6个客户端："))
+		fmt.Println(fmt.Sprintf("   %v -sr webrtc://localhost/live/livestream_%%d -sn 2 -nn 3", os.Args[0]))
+		fmt.Println(fmt.Sprintf("   %v -pr webrtc://localhost/live/livestream_%%d -sn 2 -sa a.ogg -sv v.h264 -fps 25", os.Args[0]))
+		fmt.Println(fmt.Sprintf("\n例如，2个推流："))
+		fmt.Println(fmt.Sprintf("   %v -pr webrtc://localhost/live/livestream_%%d -sn 2 -sa a.ogg -sv v.h264 -fps 25", os.Args[0]))
+		fmt.Println(fmt.Sprintf("\n例如，1个录制："))
+		fmt.Println(fmt.Sprintf("   %v -sr webrtc://localhost/live/livestream -da a.ogg -dv v.h264", os.Args[0]))
+		fmt.Println(fmt.Sprintf("\n例如，1个明文播放："))
+		fmt.Println(fmt.Sprintf("   %v -sr webrtc://localhost/live/livestream?encrypt=false", os.Args[0]))
+		fmt.Println()
+	}
+	flag.Parse()
+
+	showHelp := (clients <= 0 || streams <= 0)
+	if sr == "" && pr == "" {
+		showHelp = true
+	}
+	if pr != "" && (sourceAudio == "" && sourceVideo == "") {
+		showHelp = true
+	}
+	if showHelp {
+		flag.Usage()
+		os.Exit(-1)
+	}
+
+	if statListen != "" && !strings.Contains(statListen, ":") {
+		statListen = ":" + statListen
+	}
+
+	ctx := context.Background()
+	summaryDesc := fmt.Sprintf("clients=%v, delay=%v, al=%v, twcc=%v, stat=%v", clients, delay, audioLevel, videoTWCC, statListen)
+	if sr != "" {
+		summaryDesc = fmt.Sprintf("%v, play(url=%v, da=%v, dv=%v, pli=%v)", summaryDesc, sr, dumpAudio, dumpVideo, pli)
+	}
+	if pr != "" {
+		summaryDesc = fmt.Sprintf("%v, publish(url=%v, sa=%v, sv=%v, fps=%v)",
+			summaryDesc, pr, sourceAudio, sourceVideo, fps)
+	}
+	logger.Tf(ctx, "Start benchmark with %v", summaryDesc)
+
+	checkFlag := func() error {
+		if dumpVideo != "" && !strings.HasSuffix(dumpVideo, ".h264") && !strings.HasSuffix(dumpVideo, ".ivf") {
+			return errors.Errorf("Should be .ivf or .264, actual %v", dumpVideo)
+		}
+
+		if sourceVideo != "" && !strings.HasSuffix(sourceVideo, ".h264") {
+			return errors.Errorf("Should be .264, actual %v", sourceVideo)
+		}
+
+		if sourceVideo != "" && strings.HasSuffix(sourceVideo, ".h264") && fps <= 0 {
+			return errors.Errorf("Video fps should >0, actual %v", fps)
+		}
+		return nil
+	}
+	if err := checkFlag(); err != nil {
+		logger.Ef(ctx, "Check faile err %+v", err)
+		os.Exit(-1)
+	}
+
+	ctx, cancel := context.WithCancel(ctx)
+
+	// Process all signals.
+	go func() {
+		sigs := make(chan os.Signal, 1)
+		signal.Notify(sigs, syscall.SIGTERM, syscall.SIGINT)
+		for sig := range sigs {
+			logger.Wf(ctx, "Quit for signal %v", sig)
+			cancel()
+		}
+	}()
+
+	// Run tasks.
+	var wg sync.WaitGroup
+
+	// Start STAT API server.
+	wg.Add(1)
+	go func() {
+		defer wg.Done()
+
+		if statListen == "" {
+			return
+		}
+
+		var lc net.ListenConfig
+		ln, err := lc.Listen(ctx, "tcp", statListen)
+		if err != nil {
+			logger.Ef(ctx, "stat listen err+%v", err)
+			cancel()
+			return
+		}
+
+		mux := http.NewServeMux()
+		srs.HandleStat(ctx, mux, statListen)
+
+		srv := &http.Server{
+			Handler: mux,
+			BaseContext: func(listener net.Listener) context.Context {
+				return ctx
+			},
+		}
+
+		go func() {
+			<-ctx.Done()
+			srv.Shutdown(ctx)
+		}()
+
+		logger.Tf(ctx, "Stat listen at %v", statListen)
+		if err := srv.Serve(ln); err != nil {
+			if ctx.Err() == nil {
+				logger.Ef(ctx, "stat serve err+%v", err)
+				cancel()
+			}
+			return
+		}
+	}()
+
+	// Start all subscribers or players.
+	for i := 0; sr != "" && i < streams && ctx.Err() == nil; i++ {
+		r_auto := sr
+		if streams > 1 && !strings.Contains(r_auto, "%") {
+			r_auto += "%d"
+		}
+
+		r2 := r_auto
+		if strings.Contains(r2, "%") {
+			r2 = fmt.Sprintf(r2, i)
+		}
+
+		for j := 0; sr != "" && j < clients && ctx.Err() == nil; j++ {
+			// Dump audio or video only for the first client.
+			da, dv := dumpAudio, dumpVideo
+			if i > 0 {
+				da, dv = "", ""
+			}
+
+			srs.StatRTC.Subscribers.Expect++
+			srs.StatRTC.Subscribers.Alive++
+
+			wg.Add(1)
+			go func(sr, da, dv string) {
+				defer wg.Done()
+				defer func() {
+					srs.StatRTC.Subscribers.Alive--
+				}()
+
+				if err := srs.StartPlay(ctx, sr, da, dv, audioLevel, videoTWCC, pli); err != nil {
+					if errors.Cause(err) != context.Canceled {
+						logger.Wf(ctx, "Run err %+v", err)
+					}
+				}
+			}(r2, da, dv)
+
+			time.Sleep(time.Duration(delay) * time.Millisecond)
+		}
+	}
+
+	// Start all publishers.
+	for i := 0; pr != "" && i < streams && ctx.Err() == nil; i++ {
+		r_auto := pr
+		if streams > 1 && !strings.Contains(r_auto, "%") {
+			r_auto += "%d"
+		}
+
+		r2 := r_auto
+		if strings.Contains(r2, "%") {
+			r2 = fmt.Sprintf(r2, i)
+		}
+
+		srs.StatRTC.Publishers.Expect++
+		srs.StatRTC.Publishers.Alive++
+
+		wg.Add(1)
+		go func(pr string) {
+			defer wg.Done()
+			defer func() {
+				srs.StatRTC.Publishers.Alive--
+			}()
+
+			if err := srs.StartPublish(ctx, pr, sourceAudio, sourceVideo, fps, audioLevel, videoTWCC); err != nil {
+				if errors.Cause(err) != context.Canceled {
+					logger.Wf(ctx, "Run err %+v", err)
+				}
+			}
+		}(r2)
+
+		time.Sleep(time.Duration(delay) * time.Millisecond)
+	}
+
+	wg.Wait()
+
+	logger.Tf(ctx, "Done")
+}
diff --git a/trunk/3rdparty/srs-bench/rtc/pion_constants.go b/trunk/3rdparty/srs-bench/rtc/pion_constants.go
new file mode 100644
index 000000000..4b44a7064
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/rtc/pion_constants.go
@@ -0,0 +1,5 @@
+package rtc
+
+const (
+	rtpOutboundMTU = 1200
+)
diff --git a/trunk/3rdparty/srs-bench/rtc/pion_mediaengine.go b/trunk/3rdparty/srs-bench/rtc/pion_mediaengine.go
new file mode 100644
index 000000000..a86e71f24
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/rtc/pion_mediaengine.go
@@ -0,0 +1,27 @@
+package rtc
+
+import (
+	"github.com/pion/rtp"
+	"github.com/pion/rtp/codecs"
+	"github.com/pion/webrtc/v3"
+	"strings"
+)
+
+func payloaderForCodec(codec webrtc.RTPCodecCapability) (rtp.Payloader, error) {
+	switch strings.ToLower(codec.MimeType) {
+	case strings.ToLower(webrtc.MimeTypeH264):
+		return &codecs.H264Payloader{}, nil
+	case strings.ToLower(webrtc.MimeTypeOpus):
+		return &codecs.OpusPayloader{}, nil
+	case strings.ToLower(webrtc.MimeTypeVP8):
+		return &codecs.VP8Payloader{}, nil
+	case strings.ToLower(webrtc.MimeTypeVP9):
+		return &codecs.VP9Payloader{}, nil
+	case strings.ToLower(webrtc.MimeTypeG722):
+		return &codecs.G722Payloader{}, nil
+	case strings.ToLower(webrtc.MimeTypePCMU), strings.ToLower(webrtc.MimeTypePCMA):
+		return &codecs.G711Payloader{}, nil
+	default:
+		return nil, webrtc.ErrNoPayloaderForCodec
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/rtc/pion_rtpcodec.go b/trunk/3rdparty/srs-bench/rtc/pion_rtpcodec.go
new file mode 100644
index 000000000..c7f85828b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/rtc/pion_rtpcodec.go
@@ -0,0 +1,27 @@
+package rtc
+
+import (
+	"github.com/pion/webrtc/v3"
+	"strings"
+)
+
+// Do a fuzzy find for a codec in the list of codecs
+// Used for lookup up a codec in an existing list to find a match
+func codecParametersFuzzySearch(needle webrtc.RTPCodecParameters, haystack []webrtc.RTPCodecParameters) (webrtc.RTPCodecParameters, error) {
+	// First attempt to match on MimeType + SDPFmtpLine
+	for _, c := range haystack {
+		if strings.EqualFold(c.RTPCodecCapability.MimeType, needle.RTPCodecCapability.MimeType) &&
+			c.RTPCodecCapability.SDPFmtpLine == needle.RTPCodecCapability.SDPFmtpLine {
+			return c, nil
+		}
+	}
+
+	// Fallback to just MimeType
+	for _, c := range haystack {
+		if strings.EqualFold(c.RTPCodecCapability.MimeType, needle.RTPCodecCapability.MimeType) {
+			return c, nil
+		}
+	}
+
+	return webrtc.RTPCodecParameters{}, webrtc.ErrCodecNotFound
+}
diff --git a/trunk/3rdparty/srs-bench/rtc/pion_track_local_static.go b/trunk/3rdparty/srs-bench/rtc/pion_track_local_static.go
new file mode 100644
index 000000000..4bf40cdb9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/rtc/pion_track_local_static.go
@@ -0,0 +1,246 @@
+package rtc
+
+import (
+	"github.com/pion/rtp"
+	"github.com/pion/webrtc/v3"
+	"github.com/pion/webrtc/v3/pkg/media"
+	"strings"
+	"sync"
+)
+
+// trackBinding is a single bind for a Track
+// Bind can be called multiple times, this stores the
+// result for a single bind call so that it can be used when writing
+type trackBinding struct {
+	id          string
+	ssrc        webrtc.SSRC
+	payloadType webrtc.PayloadType
+	writeStream webrtc.TrackLocalWriter
+}
+
+// TrackLocalStaticRTP  is a TrackLocal that has a pre-set codec and accepts RTP Packets.
+// If you wish to send a media.Sample use TrackLocalStaticSample
+type TrackLocalStaticRTP struct {
+	mu           sync.RWMutex
+	bindings     []trackBinding
+	codec        webrtc.RTPCodecCapability
+	id, streamID string
+}
+
+// NewTrackLocalStaticRTP returns a TrackLocalStaticRTP.
+func NewTrackLocalStaticRTP(c webrtc.RTPCodecCapability, id, streamID string) (*TrackLocalStaticRTP, error) {
+	return &TrackLocalStaticRTP{
+		codec:    c,
+		bindings: []trackBinding{},
+		id:       id,
+		streamID: streamID,
+	}, nil
+}
+
+// Bind is called by the PeerConnection after negotiation is complete
+// This asserts that the code requested is supported by the remote peer.
+// If so it setups all the state (SSRC and PayloadType) to have a call
+func (s *TrackLocalStaticRTP) Bind(t webrtc.TrackLocalContext) (webrtc.RTPCodecParameters, error) {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+
+	parameters := webrtc.RTPCodecParameters{RTPCodecCapability: s.codec}
+	if codec, err := codecParametersFuzzySearch(parameters, t.CodecParameters()); err == nil {
+		s.bindings = append(s.bindings, trackBinding{
+			ssrc:        t.SSRC(),
+			payloadType: codec.PayloadType,
+			writeStream: t.WriteStream(),
+			id:          t.ID(),
+		})
+		return codec, nil
+	}
+
+	return webrtc.RTPCodecParameters{}, webrtc.ErrUnsupportedCodec
+}
+
+// Unbind implements the teardown logic when the track is no longer needed. This happens
+// because a track has been stopped.
+func (s *TrackLocalStaticRTP) Unbind(t webrtc.TrackLocalContext) error {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+
+	for i := range s.bindings {
+		if s.bindings[i].id == t.ID() {
+			s.bindings[i] = s.bindings[len(s.bindings)-1]
+			s.bindings = s.bindings[:len(s.bindings)-1]
+			return nil
+		}
+	}
+
+	return webrtc.ErrUnbindFailed
+}
+
+// ID is the unique identifier for this Track. This should be unique for the
+// stream, but doesn't have to globally unique. A common example would be 'audio' or 'video'
+// and StreamID would be 'desktop' or 'webcam'
+func (s *TrackLocalStaticRTP) ID() string { return s.id }
+
+// StreamID is the group this track belongs too. This must be unique
+func (s *TrackLocalStaticRTP) StreamID() string { return s.streamID }
+
+// Kind controls if this TrackLocal is audio or video
+func (s *TrackLocalStaticRTP) Kind() webrtc.RTPCodecType {
+	switch {
+	case strings.HasPrefix(s.codec.MimeType, "audio/"):
+		return webrtc.RTPCodecTypeAudio
+	case strings.HasPrefix(s.codec.MimeType, "video/"):
+		return webrtc.RTPCodecTypeVideo
+	default:
+		return webrtc.RTPCodecType(0)
+	}
+}
+
+// Codec gets the Codec of the track
+func (s *TrackLocalStaticRTP) Codec() webrtc.RTPCodecCapability {
+	return s.codec
+}
+
+// WriteRTP writes a RTP Packet to the TrackLocalStaticRTP
+// If one PeerConnection fails the packets will still be sent to
+// all PeerConnections. The error message will contain the ID of the failed
+// PeerConnections so you can remove them
+func (s *TrackLocalStaticRTP) WriteRTP(p *rtp.Packet) error {
+	s.mu.RLock()
+	defer s.mu.RUnlock()
+
+	writeErrs := []error{}
+	outboundPacket := *p
+
+	for _, b := range s.bindings {
+		outboundPacket.Header.SSRC = uint32(b.ssrc)
+		outboundPacket.Header.PayloadType = uint8(b.payloadType)
+		if _, err := b.writeStream.WriteRTP(&outboundPacket.Header, outboundPacket.Payload); err != nil {
+			writeErrs = append(writeErrs, err)
+		}
+	}
+
+	return FlattenErrs(writeErrs)
+}
+
+// Write writes a RTP Packet as a buffer to the TrackLocalStaticRTP
+// If one PeerConnection fails the packets will still be sent to
+// all PeerConnections. The error message will contain the ID of the failed
+// PeerConnections so you can remove them
+func (s *TrackLocalStaticRTP) Write(b []byte) (n int, err error) {
+	packet := &rtp.Packet{}
+	if err = packet.Unmarshal(b); err != nil {
+		return 0, err
+	}
+
+	return len(b), s.WriteRTP(packet)
+}
+
+// TrackLocalStaticSample is a TrackLocal that has a pre-set codec and accepts Samples.
+// If you wish to send a RTP Packet use TrackLocalStaticRTP
+type TrackLocalStaticSample struct {
+	packetizer rtp.Packetizer
+	rtpTrack   *TrackLocalStaticRTP
+	clockRate  float64
+
+	// Set the callback before write RTP packet.
+	OnBeforeWritePacket func(rtp *rtp.Packet)
+}
+
+// NewTrackLocalStaticSample returns a TrackLocalStaticSample
+func NewTrackLocalStaticSample(c webrtc.RTPCodecCapability, id, streamID string) (*TrackLocalStaticSample, error) {
+	rtpTrack, err := NewTrackLocalStaticRTP(c, id, streamID)
+	if err != nil {
+		return nil, err
+	}
+
+	return &TrackLocalStaticSample{
+		rtpTrack: rtpTrack,
+	}, nil
+}
+
+// ID is the unique identifier for this Track. This should be unique for the
+// stream, but doesn't have to globally unique. A common example would be 'audio' or 'video'
+// and StreamID would be 'desktop' or 'webcam'
+func (s *TrackLocalStaticSample) ID() string { return s.rtpTrack.ID() }
+
+// StreamID is the group this track belongs too. This must be unique
+func (s *TrackLocalStaticSample) StreamID() string { return s.rtpTrack.StreamID() }
+
+// Kind controls if this TrackLocal is audio or video
+func (s *TrackLocalStaticSample) Kind() webrtc.RTPCodecType { return s.rtpTrack.Kind() }
+
+// Codec gets the Codec of the track
+func (s *TrackLocalStaticSample) Codec() webrtc.RTPCodecCapability {
+	return s.rtpTrack.Codec()
+}
+
+// Bind is called by the PeerConnection after negotiation is complete
+// This asserts that the code requested is supported by the remote peer.
+// If so it setups all the state (SSRC and PayloadType) to have a call
+func (s *TrackLocalStaticSample) Bind(t webrtc.TrackLocalContext) (webrtc.RTPCodecParameters, error) {
+	codec, err := s.rtpTrack.Bind(t)
+	if err != nil {
+		return codec, err
+	}
+
+	s.rtpTrack.mu.Lock()
+	defer s.rtpTrack.mu.Unlock()
+
+	// We only need one packetizer
+	if s.packetizer != nil {
+		return codec, nil
+	}
+
+	payloader, err := payloaderForCodec(codec.RTPCodecCapability)
+	if err != nil {
+		return codec, err
+	}
+
+	s.packetizer = rtp.NewPacketizer(
+		rtpOutboundMTU,
+		0, // Value is handled when writing
+		0, // Value is handled when writing
+		payloader,
+		rtp.NewRandomSequencer(),
+		codec.ClockRate,
+	)
+	s.clockRate = float64(codec.RTPCodecCapability.ClockRate)
+	return codec, nil
+}
+
+// Unbind implements the teardown logic when the track is no longer needed. This happens
+// because a track has been stopped.
+func (s *TrackLocalStaticSample) Unbind(t webrtc.TrackLocalContext) error {
+	return s.rtpTrack.Unbind(t)
+}
+
+// WriteSample writes a Sample to the TrackLocalStaticSample
+// If one PeerConnection fails the packets will still be sent to
+// all PeerConnections. The error message will contain the ID of the failed
+// PeerConnections so you can remove them
+func (s *TrackLocalStaticSample) WriteSample(sample media.Sample) error {
+	s.rtpTrack.mu.RLock()
+	p := s.packetizer
+	clockRate := s.clockRate
+	s.rtpTrack.mu.RUnlock()
+
+	if p == nil {
+		return nil
+	}
+
+	samples := sample.Duration.Seconds() * clockRate
+	packets := p.(rtp.Packetizer).Packetize(sample.Data, uint32(samples))
+
+	writeErrs := []error{}
+	for _, p := range packets {
+		if s.OnBeforeWritePacket != nil {
+			s.OnBeforeWritePacket(p)
+		}
+
+		if err := s.rtpTrack.WriteRTP(p); err != nil {
+			writeErrs = append(writeErrs, err)
+		}
+	}
+
+	return FlattenErrs(writeErrs)
+}
diff --git a/trunk/3rdparty/srs-bench/rtc/pion_util.go b/trunk/3rdparty/srs-bench/rtc/pion_util.go
new file mode 100644
index 000000000..75ffe4601
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/rtc/pion_util.go
@@ -0,0 +1,10 @@
+package rtc
+
+import "fmt"
+
+func FlattenErrs(errors []error) error {
+	if len(errors) == 0 {
+		return nil
+	}
+	return fmt.Errorf("%v", errors)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/.travis.yml b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/.travis.yml
new file mode 100644
index 000000000..d8156a60b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/.travis.yml
@@ -0,0 +1,9 @@
+language: go
+
+go:
+  - 1.4.3
+  - 1.5.3
+  - tip
+
+script:
+  - go test -v ./...
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/CONTRIBUTING.md b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/CONTRIBUTING.md
new file mode 100644
index 000000000..04fdf09f1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/CONTRIBUTING.md
@@ -0,0 +1,10 @@
+# How to contribute
+
+We definitely welcome patches and contribution to this project!
+
+### Legal requirements
+
+In order to protect both you and ourselves, you will need to sign the
+[Contributor License Agreement](https://cla.developers.google.com/clas).
+
+You may have already signed it for other Google projects.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/CONTRIBUTORS b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/CONTRIBUTORS
new file mode 100644
index 000000000..b4bb97f6b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/CONTRIBUTORS
@@ -0,0 +1,9 @@
+Paul Borman <borman@google.com>
+bmatsuo
+shawnps
+theory
+jboverfelt
+dsymonds
+cd1
+wallclockbuilder
+dansouza
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/LICENSE
new file mode 100644
index 000000000..5dc68268d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/LICENSE
@@ -0,0 +1,27 @@
+Copyright (c) 2009,2014 Google Inc. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/README.md
new file mode 100644
index 000000000..f765a46f9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/README.md
@@ -0,0 +1,19 @@
+# uuid ![build status](https://travis-ci.org/google/uuid.svg?branch=master)
+The uuid package generates and inspects UUIDs based on
+[RFC 4122](http://tools.ietf.org/html/rfc4122)
+and DCE 1.1: Authentication and Security Services. 
+
+This package is based on the github.com/pborman/uuid package (previously named
+code.google.com/p/go-uuid).  It differs from these earlier packages in that
+a UUID is a 16 byte array rather than a byte slice.  One loss due to this
+change is the ability to represent an invalid UUID (vs a NIL UUID).
+
+###### Install
+`go get github.com/google/uuid`
+
+###### Documentation 
+[![GoDoc](https://godoc.org/github.com/google/uuid?status.svg)](http://godoc.org/github.com/google/uuid)
+
+Full `go doc` style documentation for the package can be viewed online without
+installing this package by using the GoDoc site here: 
+http://pkg.go.dev/github.com/google/uuid
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/dce.go b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/dce.go
new file mode 100644
index 000000000..fa820b9d3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/dce.go
@@ -0,0 +1,80 @@
+// Copyright 2016 Google Inc.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package uuid
+
+import (
+	"encoding/binary"
+	"fmt"
+	"os"
+)
+
+// A Domain represents a Version 2 domain
+type Domain byte
+
+// Domain constants for DCE Security (Version 2) UUIDs.
+const (
+	Person = Domain(0)
+	Group  = Domain(1)
+	Org    = Domain(2)
+)
+
+// NewDCESecurity returns a DCE Security (Version 2) UUID.
+//
+// The domain should be one of Person, Group or Org.
+// On a POSIX system the id should be the users UID for the Person
+// domain and the users GID for the Group.  The meaning of id for
+// the domain Org or on non-POSIX systems is site defined.
+//
+// For a given domain/id pair the same token may be returned for up to
+// 7 minutes and 10 seconds.
+func NewDCESecurity(domain Domain, id uint32) (UUID, error) {
+	uuid, err := NewUUID()
+	if err == nil {
+		uuid[6] = (uuid[6] & 0x0f) | 0x20 // Version 2
+		uuid[9] = byte(domain)
+		binary.BigEndian.PutUint32(uuid[0:], id)
+	}
+	return uuid, err
+}
+
+// NewDCEPerson returns a DCE Security (Version 2) UUID in the person
+// domain with the id returned by os.Getuid.
+//
+//  NewDCESecurity(Person, uint32(os.Getuid()))
+func NewDCEPerson() (UUID, error) {
+	return NewDCESecurity(Person, uint32(os.Getuid()))
+}
+
+// NewDCEGroup returns a DCE Security (Version 2) UUID in the group
+// domain with the id returned by os.Getgid.
+//
+//  NewDCESecurity(Group, uint32(os.Getgid()))
+func NewDCEGroup() (UUID, error) {
+	return NewDCESecurity(Group, uint32(os.Getgid()))
+}
+
+// Domain returns the domain for a Version 2 UUID.  Domains are only defined
+// for Version 2 UUIDs.
+func (uuid UUID) Domain() Domain {
+	return Domain(uuid[9])
+}
+
+// ID returns the id for a Version 2 UUID. IDs are only defined for Version 2
+// UUIDs.
+func (uuid UUID) ID() uint32 {
+	return binary.BigEndian.Uint32(uuid[0:4])
+}
+
+func (d Domain) String() string {
+	switch d {
+	case Person:
+		return "Person"
+	case Group:
+		return "Group"
+	case Org:
+		return "Org"
+	}
+	return fmt.Sprintf("Domain%d", int(d))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/doc.go b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/doc.go
new file mode 100644
index 000000000..5b8a4b9af
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/doc.go
@@ -0,0 +1,12 @@
+// Copyright 2016 Google Inc.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Package uuid generates and inspects UUIDs.
+//
+// UUIDs are based on RFC 4122 and DCE 1.1: Authentication and Security
+// Services.
+//
+// A UUID is a 16 byte (128 bit) array.  UUIDs may be used as keys to
+// maps or compared directly.
+package uuid
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/go.mod
new file mode 100644
index 000000000..fc84cd79d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/go.mod
@@ -0,0 +1 @@
+module github.com/google/uuid
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/hash.go b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/hash.go
new file mode 100644
index 000000000..b17461631
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/hash.go
@@ -0,0 +1,53 @@
+// Copyright 2016 Google Inc.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package uuid
+
+import (
+	"crypto/md5"
+	"crypto/sha1"
+	"hash"
+)
+
+// Well known namespace IDs and UUIDs
+var (
+	NameSpaceDNS  = Must(Parse("6ba7b810-9dad-11d1-80b4-00c04fd430c8"))
+	NameSpaceURL  = Must(Parse("6ba7b811-9dad-11d1-80b4-00c04fd430c8"))
+	NameSpaceOID  = Must(Parse("6ba7b812-9dad-11d1-80b4-00c04fd430c8"))
+	NameSpaceX500 = Must(Parse("6ba7b814-9dad-11d1-80b4-00c04fd430c8"))
+	Nil           UUID // empty UUID, all zeros
+)
+
+// NewHash returns a new UUID derived from the hash of space concatenated with
+// data generated by h.  The hash should be at least 16 byte in length.  The
+// first 16 bytes of the hash are used to form the UUID.  The version of the
+// UUID will be the lower 4 bits of version.  NewHash is used to implement
+// NewMD5 and NewSHA1.
+func NewHash(h hash.Hash, space UUID, data []byte, version int) UUID {
+	h.Reset()
+	h.Write(space[:])
+	h.Write(data)
+	s := h.Sum(nil)
+	var uuid UUID
+	copy(uuid[:], s)
+	uuid[6] = (uuid[6] & 0x0f) | uint8((version&0xf)<<4)
+	uuid[8] = (uuid[8] & 0x3f) | 0x80 // RFC 4122 variant
+	return uuid
+}
+
+// NewMD5 returns a new MD5 (Version 3) UUID based on the
+// supplied name space and data.  It is the same as calling:
+//
+//  NewHash(md5.New(), space, data, 3)
+func NewMD5(space UUID, data []byte) UUID {
+	return NewHash(md5.New(), space, data, 3)
+}
+
+// NewSHA1 returns a new SHA1 (Version 5) UUID based on the
+// supplied name space and data.  It is the same as calling:
+//
+//  NewHash(sha1.New(), space, data, 5)
+func NewSHA1(space UUID, data []byte) UUID {
+	return NewHash(sha1.New(), space, data, 5)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/marshal.go b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/marshal.go
new file mode 100644
index 000000000..14bd34072
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/marshal.go
@@ -0,0 +1,38 @@
+// Copyright 2016 Google Inc.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package uuid
+
+import "fmt"
+
+// MarshalText implements encoding.TextMarshaler.
+func (uuid UUID) MarshalText() ([]byte, error) {
+	var js [36]byte
+	encodeHex(js[:], uuid)
+	return js[:], nil
+}
+
+// UnmarshalText implements encoding.TextUnmarshaler.
+func (uuid *UUID) UnmarshalText(data []byte) error {
+	id, err := ParseBytes(data)
+	if err != nil {
+		return err
+	}
+	*uuid = id
+	return nil
+}
+
+// MarshalBinary implements encoding.BinaryMarshaler.
+func (uuid UUID) MarshalBinary() ([]byte, error) {
+	return uuid[:], nil
+}
+
+// UnmarshalBinary implements encoding.BinaryUnmarshaler.
+func (uuid *UUID) UnmarshalBinary(data []byte) error {
+	if len(data) != 16 {
+		return fmt.Errorf("invalid UUID (got %d bytes)", len(data))
+	}
+	copy(uuid[:], data)
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/node.go b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/node.go
new file mode 100644
index 000000000..d651a2b06
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/node.go
@@ -0,0 +1,90 @@
+// Copyright 2016 Google Inc.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package uuid
+
+import (
+	"sync"
+)
+
+var (
+	nodeMu sync.Mutex
+	ifname string  // name of interface being used
+	nodeID [6]byte // hardware for version 1 UUIDs
+	zeroID [6]byte // nodeID with only 0's
+)
+
+// NodeInterface returns the name of the interface from which the NodeID was
+// derived.  The interface "user" is returned if the NodeID was set by
+// SetNodeID.
+func NodeInterface() string {
+	defer nodeMu.Unlock()
+	nodeMu.Lock()
+	return ifname
+}
+
+// SetNodeInterface selects the hardware address to be used for Version 1 UUIDs.
+// If name is "" then the first usable interface found will be used or a random
+// Node ID will be generated.  If a named interface cannot be found then false
+// is returned.
+//
+// SetNodeInterface never fails when name is "".
+func SetNodeInterface(name string) bool {
+	defer nodeMu.Unlock()
+	nodeMu.Lock()
+	return setNodeInterface(name)
+}
+
+func setNodeInterface(name string) bool {
+	iname, addr := getHardwareInterface(name) // null implementation for js
+	if iname != "" && addr != nil {
+		ifname = iname
+		copy(nodeID[:], addr)
+		return true
+	}
+
+	// We found no interfaces with a valid hardware address.  If name
+	// does not specify a specific interface generate a random Node ID
+	// (section 4.1.6)
+	if name == "" {
+		ifname = "random"
+		randomBits(nodeID[:])
+		return true
+	}
+	return false
+}
+
+// NodeID returns a slice of a copy of the current Node ID, setting the Node ID
+// if not already set.
+func NodeID() []byte {
+	defer nodeMu.Unlock()
+	nodeMu.Lock()
+	if nodeID == zeroID {
+		setNodeInterface("")
+	}
+	nid := nodeID
+	return nid[:]
+}
+
+// SetNodeID sets the Node ID to be used for Version 1 UUIDs.  The first 6 bytes
+// of id are used.  If id is less than 6 bytes then false is returned and the
+// Node ID is not set.
+func SetNodeID(id []byte) bool {
+	if len(id) < 6 {
+		return false
+	}
+	defer nodeMu.Unlock()
+	nodeMu.Lock()
+	copy(nodeID[:], id)
+	ifname = "user"
+	return true
+}
+
+// NodeID returns the 6 byte node id encoded in uuid.  It returns nil if uuid is
+// not valid.  The NodeID is only well defined for version 1 and 2 UUIDs.
+func (uuid UUID) NodeID() []byte {
+	var node [6]byte
+	copy(node[:], uuid[10:])
+	return node[:]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/node_js.go b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/node_js.go
new file mode 100644
index 000000000..24b78edc9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/node_js.go
@@ -0,0 +1,12 @@
+// Copyright 2017 Google Inc.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build js
+
+package uuid
+
+// getHardwareInterface returns nil values for the JS version of the code.
+// This remvoves the "net" dependency, because it is not used in the browser.
+// Using the "net" library inflates the size of the transpiled JS code by 673k bytes.
+func getHardwareInterface(name string) (string, []byte) { return "", nil }
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/node_net.go b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/node_net.go
new file mode 100644
index 000000000..0cbbcddbd
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/node_net.go
@@ -0,0 +1,33 @@
+// Copyright 2017 Google Inc.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !js
+
+package uuid
+
+import "net"
+
+var interfaces []net.Interface // cached list of interfaces
+
+// getHardwareInterface returns the name and hardware address of interface name.
+// If name is "" then the name and hardware address of one of the system's
+// interfaces is returned.  If no interfaces are found (name does not exist or
+// there are no interfaces) then "", nil is returned.
+//
+// Only addresses of at least 6 bytes are returned.
+func getHardwareInterface(name string) (string, []byte) {
+	if interfaces == nil {
+		var err error
+		interfaces, err = net.Interfaces()
+		if err != nil {
+			return "", nil
+		}
+	}
+	for _, ifs := range interfaces {
+		if len(ifs.HardwareAddr) >= 6 && (name == "" || name == ifs.Name) {
+			return ifs.Name, ifs.HardwareAddr
+		}
+	}
+	return "", nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/sql.go b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/sql.go
new file mode 100644
index 000000000..f326b54db
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/sql.go
@@ -0,0 +1,59 @@
+// Copyright 2016 Google Inc.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package uuid
+
+import (
+	"database/sql/driver"
+	"fmt"
+)
+
+// Scan implements sql.Scanner so UUIDs can be read from databases transparently
+// Currently, database types that map to string and []byte are supported. Please
+// consult database-specific driver documentation for matching types.
+func (uuid *UUID) Scan(src interface{}) error {
+	switch src := src.(type) {
+	case nil:
+		return nil
+
+	case string:
+		// if an empty UUID comes from a table, we return a null UUID
+		if src == "" {
+			return nil
+		}
+
+		// see Parse for required string format
+		u, err := Parse(src)
+		if err != nil {
+			return fmt.Errorf("Scan: %v", err)
+		}
+
+		*uuid = u
+
+	case []byte:
+		// if an empty UUID comes from a table, we return a null UUID
+		if len(src) == 0 {
+			return nil
+		}
+
+		// assumes a simple slice of bytes if 16 bytes
+		// otherwise attempts to parse
+		if len(src) != 16 {
+			return uuid.Scan(string(src))
+		}
+		copy((*uuid)[:], src)
+
+	default:
+		return fmt.Errorf("Scan: unable to scan type %T into UUID", src)
+	}
+
+	return nil
+}
+
+// Value implements sql.Valuer so that UUIDs can be written to databases
+// transparently. Currently, UUIDs map to strings. Please consult
+// database-specific driver documentation for matching types.
+func (uuid UUID) Value() (driver.Value, error) {
+	return uuid.String(), nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/time.go b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/time.go
new file mode 100644
index 000000000..e6ef06cdc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/time.go
@@ -0,0 +1,123 @@
+// Copyright 2016 Google Inc.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package uuid
+
+import (
+	"encoding/binary"
+	"sync"
+	"time"
+)
+
+// A Time represents a time as the number of 100's of nanoseconds since 15 Oct
+// 1582.
+type Time int64
+
+const (
+	lillian    = 2299160          // Julian day of 15 Oct 1582
+	unix       = 2440587          // Julian day of 1 Jan 1970
+	epoch      = unix - lillian   // Days between epochs
+	g1582      = epoch * 86400    // seconds between epochs
+	g1582ns100 = g1582 * 10000000 // 100s of a nanoseconds between epochs
+)
+
+var (
+	timeMu   sync.Mutex
+	lasttime uint64 // last time we returned
+	clockSeq uint16 // clock sequence for this run
+
+	timeNow = time.Now // for testing
+)
+
+// UnixTime converts t the number of seconds and nanoseconds using the Unix
+// epoch of 1 Jan 1970.
+func (t Time) UnixTime() (sec, nsec int64) {
+	sec = int64(t - g1582ns100)
+	nsec = (sec % 10000000) * 100
+	sec /= 10000000
+	return sec, nsec
+}
+
+// GetTime returns the current Time (100s of nanoseconds since 15 Oct 1582) and
+// clock sequence as well as adjusting the clock sequence as needed.  An error
+// is returned if the current time cannot be determined.
+func GetTime() (Time, uint16, error) {
+	defer timeMu.Unlock()
+	timeMu.Lock()
+	return getTime()
+}
+
+func getTime() (Time, uint16, error) {
+	t := timeNow()
+
+	// If we don't have a clock sequence already, set one.
+	if clockSeq == 0 {
+		setClockSequence(-1)
+	}
+	now := uint64(t.UnixNano()/100) + g1582ns100
+
+	// If time has gone backwards with this clock sequence then we
+	// increment the clock sequence
+	if now <= lasttime {
+		clockSeq = ((clockSeq + 1) & 0x3fff) | 0x8000
+	}
+	lasttime = now
+	return Time(now), clockSeq, nil
+}
+
+// ClockSequence returns the current clock sequence, generating one if not
+// already set.  The clock sequence is only used for Version 1 UUIDs.
+//
+// The uuid package does not use global static storage for the clock sequence or
+// the last time a UUID was generated.  Unless SetClockSequence is used, a new
+// random clock sequence is generated the first time a clock sequence is
+// requested by ClockSequence, GetTime, or NewUUID.  (section 4.2.1.1)
+func ClockSequence() int {
+	defer timeMu.Unlock()
+	timeMu.Lock()
+	return clockSequence()
+}
+
+func clockSequence() int {
+	if clockSeq == 0 {
+		setClockSequence(-1)
+	}
+	return int(clockSeq & 0x3fff)
+}
+
+// SetClockSequence sets the clock sequence to the lower 14 bits of seq.  Setting to
+// -1 causes a new sequence to be generated.
+func SetClockSequence(seq int) {
+	defer timeMu.Unlock()
+	timeMu.Lock()
+	setClockSequence(seq)
+}
+
+func setClockSequence(seq int) {
+	if seq == -1 {
+		var b [2]byte
+		randomBits(b[:]) // clock sequence
+		seq = int(b[0])<<8 | int(b[1])
+	}
+	oldSeq := clockSeq
+	clockSeq = uint16(seq&0x3fff) | 0x8000 // Set our variant
+	if oldSeq != clockSeq {
+		lasttime = 0
+	}
+}
+
+// Time returns the time in 100s of nanoseconds since 15 Oct 1582 encoded in
+// uuid.  The time is only defined for version 1 and 2 UUIDs.
+func (uuid UUID) Time() Time {
+	time := int64(binary.BigEndian.Uint32(uuid[0:4]))
+	time |= int64(binary.BigEndian.Uint16(uuid[4:6])) << 32
+	time |= int64(binary.BigEndian.Uint16(uuid[6:8])&0xfff) << 48
+	return Time(time)
+}
+
+// ClockSequence returns the clock sequence encoded in uuid.
+// The clock sequence is only well defined for version 1 and 2 UUIDs.
+func (uuid UUID) ClockSequence() int {
+	return int(binary.BigEndian.Uint16(uuid[8:10])) & 0x3fff
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/util.go b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/util.go
new file mode 100644
index 000000000..5ea6c7378
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/util.go
@@ -0,0 +1,43 @@
+// Copyright 2016 Google Inc.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package uuid
+
+import (
+	"io"
+)
+
+// randomBits completely fills slice b with random data.
+func randomBits(b []byte) {
+	if _, err := io.ReadFull(rander, b); err != nil {
+		panic(err.Error()) // rand should never fail
+	}
+}
+
+// xvalues returns the value of a byte as a hexadecimal digit or 255.
+var xvalues = [256]byte{
+	255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
+	255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
+	255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
+	0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 255, 255, 255, 255, 255, 255,
+	255, 10, 11, 12, 13, 14, 15, 255, 255, 255, 255, 255, 255, 255, 255, 255,
+	255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
+	255, 10, 11, 12, 13, 14, 15, 255, 255, 255, 255, 255, 255, 255, 255, 255,
+	255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
+	255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
+	255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
+	255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
+	255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
+	255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
+	255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
+	255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
+	255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
+}
+
+// xtob converts hex characters x1 and x2 into a byte.
+func xtob(x1, x2 byte) (byte, bool) {
+	b1 := xvalues[x1]
+	b2 := xvalues[x2]
+	return (b1 << 4) | b2, b1 != 255 && b2 != 255
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/uuid.go b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/uuid.go
new file mode 100644
index 000000000..524404cc5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/uuid.go
@@ -0,0 +1,245 @@
+// Copyright 2018 Google Inc.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package uuid
+
+import (
+	"bytes"
+	"crypto/rand"
+	"encoding/hex"
+	"errors"
+	"fmt"
+	"io"
+	"strings"
+)
+
+// A UUID is a 128 bit (16 byte) Universal Unique IDentifier as defined in RFC
+// 4122.
+type UUID [16]byte
+
+// A Version represents a UUID's version.
+type Version byte
+
+// A Variant represents a UUID's variant.
+type Variant byte
+
+// Constants returned by Variant.
+const (
+	Invalid   = Variant(iota) // Invalid UUID
+	RFC4122                   // The variant specified in RFC4122
+	Reserved                  // Reserved, NCS backward compatibility.
+	Microsoft                 // Reserved, Microsoft Corporation backward compatibility.
+	Future                    // Reserved for future definition.
+)
+
+var rander = rand.Reader // random function
+
+// Parse decodes s into a UUID or returns an error.  Both the standard UUID
+// forms of xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx and
+// urn:uuid:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx are decoded as well as the
+// Microsoft encoding {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx} and the raw hex
+// encoding: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.
+func Parse(s string) (UUID, error) {
+	var uuid UUID
+	switch len(s) {
+	// xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+	case 36:
+
+	// urn:uuid:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+	case 36 + 9:
+		if strings.ToLower(s[:9]) != "urn:uuid:" {
+			return uuid, fmt.Errorf("invalid urn prefix: %q", s[:9])
+		}
+		s = s[9:]
+
+	// {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}
+	case 36 + 2:
+		s = s[1:]
+
+	// xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+	case 32:
+		var ok bool
+		for i := range uuid {
+			uuid[i], ok = xtob(s[i*2], s[i*2+1])
+			if !ok {
+				return uuid, errors.New("invalid UUID format")
+			}
+		}
+		return uuid, nil
+	default:
+		return uuid, fmt.Errorf("invalid UUID length: %d", len(s))
+	}
+	// s is now at least 36 bytes long
+	// it must be of the form  xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+	if s[8] != '-' || s[13] != '-' || s[18] != '-' || s[23] != '-' {
+		return uuid, errors.New("invalid UUID format")
+	}
+	for i, x := range [16]int{
+		0, 2, 4, 6,
+		9, 11,
+		14, 16,
+		19, 21,
+		24, 26, 28, 30, 32, 34} {
+		v, ok := xtob(s[x], s[x+1])
+		if !ok {
+			return uuid, errors.New("invalid UUID format")
+		}
+		uuid[i] = v
+	}
+	return uuid, nil
+}
+
+// ParseBytes is like Parse, except it parses a byte slice instead of a string.
+func ParseBytes(b []byte) (UUID, error) {
+	var uuid UUID
+	switch len(b) {
+	case 36: // xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+	case 36 + 9: // urn:uuid:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+		if !bytes.Equal(bytes.ToLower(b[:9]), []byte("urn:uuid:")) {
+			return uuid, fmt.Errorf("invalid urn prefix: %q", b[:9])
+		}
+		b = b[9:]
+	case 36 + 2: // {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}
+		b = b[1:]
+	case 32: // xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+		var ok bool
+		for i := 0; i < 32; i += 2 {
+			uuid[i/2], ok = xtob(b[i], b[i+1])
+			if !ok {
+				return uuid, errors.New("invalid UUID format")
+			}
+		}
+		return uuid, nil
+	default:
+		return uuid, fmt.Errorf("invalid UUID length: %d", len(b))
+	}
+	// s is now at least 36 bytes long
+	// it must be of the form  xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+	if b[8] != '-' || b[13] != '-' || b[18] != '-' || b[23] != '-' {
+		return uuid, errors.New("invalid UUID format")
+	}
+	for i, x := range [16]int{
+		0, 2, 4, 6,
+		9, 11,
+		14, 16,
+		19, 21,
+		24, 26, 28, 30, 32, 34} {
+		v, ok := xtob(b[x], b[x+1])
+		if !ok {
+			return uuid, errors.New("invalid UUID format")
+		}
+		uuid[i] = v
+	}
+	return uuid, nil
+}
+
+// MustParse is like Parse but panics if the string cannot be parsed.
+// It simplifies safe initialization of global variables holding compiled UUIDs.
+func MustParse(s string) UUID {
+	uuid, err := Parse(s)
+	if err != nil {
+		panic(`uuid: Parse(` + s + `): ` + err.Error())
+	}
+	return uuid
+}
+
+// FromBytes creates a new UUID from a byte slice. Returns an error if the slice
+// does not have a length of 16. The bytes are copied from the slice.
+func FromBytes(b []byte) (uuid UUID, err error) {
+	err = uuid.UnmarshalBinary(b)
+	return uuid, err
+}
+
+// Must returns uuid if err is nil and panics otherwise.
+func Must(uuid UUID, err error) UUID {
+	if err != nil {
+		panic(err)
+	}
+	return uuid
+}
+
+// String returns the string form of uuid, xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+// , or "" if uuid is invalid.
+func (uuid UUID) String() string {
+	var buf [36]byte
+	encodeHex(buf[:], uuid)
+	return string(buf[:])
+}
+
+// URN returns the RFC 2141 URN form of uuid,
+// urn:uuid:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx,  or "" if uuid is invalid.
+func (uuid UUID) URN() string {
+	var buf [36 + 9]byte
+	copy(buf[:], "urn:uuid:")
+	encodeHex(buf[9:], uuid)
+	return string(buf[:])
+}
+
+func encodeHex(dst []byte, uuid UUID) {
+	hex.Encode(dst, uuid[:4])
+	dst[8] = '-'
+	hex.Encode(dst[9:13], uuid[4:6])
+	dst[13] = '-'
+	hex.Encode(dst[14:18], uuid[6:8])
+	dst[18] = '-'
+	hex.Encode(dst[19:23], uuid[8:10])
+	dst[23] = '-'
+	hex.Encode(dst[24:], uuid[10:])
+}
+
+// Variant returns the variant encoded in uuid.
+func (uuid UUID) Variant() Variant {
+	switch {
+	case (uuid[8] & 0xc0) == 0x80:
+		return RFC4122
+	case (uuid[8] & 0xe0) == 0xc0:
+		return Microsoft
+	case (uuid[8] & 0xe0) == 0xe0:
+		return Future
+	default:
+		return Reserved
+	}
+}
+
+// Version returns the version of uuid.
+func (uuid UUID) Version() Version {
+	return Version(uuid[6] >> 4)
+}
+
+func (v Version) String() string {
+	if v > 15 {
+		return fmt.Sprintf("BAD_VERSION_%d", v)
+	}
+	return fmt.Sprintf("VERSION_%d", v)
+}
+
+func (v Variant) String() string {
+	switch v {
+	case RFC4122:
+		return "RFC4122"
+	case Reserved:
+		return "Reserved"
+	case Microsoft:
+		return "Microsoft"
+	case Future:
+		return "Future"
+	case Invalid:
+		return "Invalid"
+	}
+	return fmt.Sprintf("BadVariant%d", int(v))
+}
+
+// SetRand sets the random number generator to r, which implements io.Reader.
+// If r.Read returns an error when the package requests random data then
+// a panic will be issued.
+//
+// Calling SetRand with nil sets the random number generator to the default
+// generator.
+func SetRand(r io.Reader) {
+	if r == nil {
+		rander = rand.Reader
+		return
+	}
+	rander = r
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/version1.go b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/version1.go
new file mode 100644
index 000000000..463109629
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/version1.go
@@ -0,0 +1,44 @@
+// Copyright 2016 Google Inc.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package uuid
+
+import (
+	"encoding/binary"
+)
+
+// NewUUID returns a Version 1 UUID based on the current NodeID and clock
+// sequence, and the current time.  If the NodeID has not been set by SetNodeID
+// or SetNodeInterface then it will be set automatically.  If the NodeID cannot
+// be set NewUUID returns nil.  If clock sequence has not been set by
+// SetClockSequence then it will be set automatically.  If GetTime fails to
+// return the current NewUUID returns nil and an error.
+//
+// In most cases, New should be used.
+func NewUUID() (UUID, error) {
+	var uuid UUID
+	now, seq, err := GetTime()
+	if err != nil {
+		return uuid, err
+	}
+
+	timeLow := uint32(now & 0xffffffff)
+	timeMid := uint16((now >> 32) & 0xffff)
+	timeHi := uint16((now >> 48) & 0x0fff)
+	timeHi |= 0x1000 // Version 1
+
+	binary.BigEndian.PutUint32(uuid[0:], timeLow)
+	binary.BigEndian.PutUint16(uuid[4:], timeMid)
+	binary.BigEndian.PutUint16(uuid[6:], timeHi)
+	binary.BigEndian.PutUint16(uuid[8:], seq)
+
+	nodeMu.Lock()
+	if nodeID == zeroID {
+		setNodeInterface("")
+	}
+	copy(uuid[10:], nodeID[:])
+	nodeMu.Unlock()
+
+	return uuid, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/version4.go b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/version4.go
new file mode 100644
index 000000000..c110465db
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/google/uuid/version4.go
@@ -0,0 +1,43 @@
+// Copyright 2016 Google Inc.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package uuid
+
+import "io"
+
+// New creates a new random UUID or panics.  New is equivalent to
+// the expression
+//
+//    uuid.Must(uuid.NewRandom())
+func New() UUID {
+	return Must(NewRandom())
+}
+
+// NewRandom returns a Random (Version 4) UUID.
+//
+// The strength of the UUIDs is based on the strength of the crypto/rand
+// package.
+//
+// A note about uniqueness derived from the UUID Wikipedia entry:
+//
+//  Randomly generated UUIDs have 122 random bits.  One's annual risk of being
+//  hit by a meteorite is estimated to be one chance in 17 billion, that
+//  means the probability is about 0.00000000006 (6 × 10−11),
+//  equivalent to the odds of creating a few tens of trillions of UUIDs in a
+//  year and having one duplicate.
+func NewRandom() (UUID, error) {
+	return NewRandomFromReader(rander)
+}
+
+// NewRandomFromReader returns a UUID based on bytes read from a given io.Reader.
+func NewRandomFromReader(r io.Reader) (UUID, error) {
+	var uuid UUID
+	_, err := io.ReadFull(r, uuid[:])
+	if err != nil {
+		return Nil, err
+	}
+	uuid[6] = (uuid[6] & 0x0f) | 0x40 // Version 4
+	uuid[8] = (uuid[8] & 0x3f) | 0x80 // Variant is 10
+	return uuid, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/LICENSE
new file mode 100644
index 000000000..6615e30a2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/LICENSE
@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2013-2017 winlin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/errors/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/errors/LICENSE
new file mode 100644
index 000000000..835ba3e75
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/errors/LICENSE
@@ -0,0 +1,23 @@
+Copyright (c) 2015, Dave Cheney <dave@cheney.net>
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/errors/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/errors/README.md
new file mode 100644
index 000000000..273db3c98
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/errors/README.md
@@ -0,0 +1,52 @@
+# errors [![Travis-CI](https://travis-ci.org/pkg/errors.svg)](https://travis-ci.org/pkg/errors) [![AppVeyor](https://ci.appveyor.com/api/projects/status/b98mptawhudj53ep/branch/master?svg=true)](https://ci.appveyor.com/project/davecheney/errors/branch/master) [![GoDoc](https://godoc.org/github.com/pkg/errors?status.svg)](http://godoc.org/github.com/pkg/errors) [![Report card](https://goreportcard.com/badge/github.com/pkg/errors)](https://goreportcard.com/report/github.com/pkg/errors)
+
+Package errors provides simple error handling primitives.
+
+`go get github.com/pkg/errors`
+
+The traditional error handling idiom in Go is roughly akin to
+```go
+if err != nil {
+        return err
+}
+```
+which applied recursively up the call stack results in error reports without context or debugging information. The errors package allows programmers to add context to the failure path in their code in a way that does not destroy the original value of the error.
+
+## Adding context to an error
+
+The errors.Wrap function returns a new error that adds context to the original error. For example
+```go
+_, err := ioutil.ReadAll(r)
+if err != nil {
+        return errors.Wrap(err, "read failed")
+}
+```
+## Retrieving the cause of an error
+
+Using `errors.Wrap` constructs a stack of errors, adding context to the preceding error. Depending on the nature of the error it may be necessary to reverse the operation of errors.Wrap to retrieve the original error for inspection. Any error value which implements this interface can be inspected by `errors.Cause`.
+```go
+type causer interface {
+        Cause() error
+}
+```
+`errors.Cause` will recursively retrieve the topmost error which does not implement `causer`, which is assumed to be the original cause. For example:
+```go
+switch err := errors.Cause(err).(type) {
+case *MyError:
+        // handle specifically
+default:
+        // unknown error
+}
+```
+
+[Read the package documentation for more information](https://godoc.org/github.com/pkg/errors).
+
+## Contributing
+
+We welcome pull requests, bug fixes and issue reports. With that said, the bar for adding new symbols to this package is intentionally set high.
+
+Before proposing a change, please discuss your change by raising an issue.
+
+## Licence
+
+BSD-2-Clause
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/errors/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/errors/errors.go
new file mode 100644
index 000000000..257bc3ccd
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/errors/errors.go
@@ -0,0 +1,270 @@
+// Package errors provides simple error handling primitives.
+//
+// The traditional error handling idiom in Go is roughly akin to
+//
+//     if err != nil {
+//             return err
+//     }
+//
+// which applied recursively up the call stack results in error reports
+// without context or debugging information. The errors package allows
+// programmers to add context to the failure path in their code in a way
+// that does not destroy the original value of the error.
+//
+// Adding context to an error
+//
+// The errors.Wrap function returns a new error that adds context to the
+// original error by recording a stack trace at the point Wrap is called,
+// and the supplied message. For example
+//
+//     _, err := ioutil.ReadAll(r)
+//     if err != nil {
+//             return errors.Wrap(err, "read failed")
+//     }
+//
+// If additional control is required the errors.WithStack and errors.WithMessage
+// functions destructure errors.Wrap into its component operations of annotating
+// an error with a stack trace and an a message, respectively.
+//
+// Retrieving the cause of an error
+//
+// Using errors.Wrap constructs a stack of errors, adding context to the
+// preceding error. Depending on the nature of the error it may be necessary
+// to reverse the operation of errors.Wrap to retrieve the original error
+// for inspection. Any error value which implements this interface
+//
+//     type causer interface {
+//             Cause() error
+//     }
+//
+// can be inspected by errors.Cause. errors.Cause will recursively retrieve
+// the topmost error which does not implement causer, which is assumed to be
+// the original cause. For example:
+//
+//     switch err := errors.Cause(err).(type) {
+//     case *MyError:
+//             // handle specifically
+//     default:
+//             // unknown error
+//     }
+//
+// causer interface is not exported by this package, but is considered a part
+// of stable public API.
+//
+// Formatted printing of errors
+//
+// All error values returned from this package implement fmt.Formatter and can
+// be formatted by the fmt package. The following verbs are supported
+//
+//     %s    print the error. If the error has a Cause it will be
+//           printed recursively
+//     %v    see %s
+//     %+v   extended format. Each Frame of the error's StackTrace will
+//           be printed in detail.
+//
+// Retrieving the stack trace of an error or wrapper
+//
+// New, Errorf, Wrap, and Wrapf record a stack trace at the point they are
+// invoked. This information can be retrieved with the following interface.
+//
+//     type stackTracer interface {
+//             StackTrace() errors.StackTrace
+//     }
+//
+// Where errors.StackTrace is defined as
+//
+//     type StackTrace []Frame
+//
+// The Frame type represents a call site in the stack trace. Frame supports
+// the fmt.Formatter interface that can be used for printing information about
+// the stack trace of this error. For example:
+//
+//     if err, ok := err.(stackTracer); ok {
+//             for _, f := range err.StackTrace() {
+//                     fmt.Printf("%+s:%d", f)
+//             }
+//     }
+//
+// stackTracer interface is not exported by this package, but is considered a part
+// of stable public API.
+//
+// See the documentation for Frame.Format for more details.
+// Fork from https://github.com/pkg/errors
+package errors
+
+import (
+	"fmt"
+	"io"
+)
+
+// New returns an error with the supplied message.
+// New also records the stack trace at the point it was called.
+func New(message string) error {
+	return &fundamental{
+		msg:   message,
+		stack: callers(),
+	}
+}
+
+// Errorf formats according to a format specifier and returns the string
+// as a value that satisfies error.
+// Errorf also records the stack trace at the point it was called.
+func Errorf(format string, args ...interface{}) error {
+	return &fundamental{
+		msg:   fmt.Sprintf(format, args...),
+		stack: callers(),
+	}
+}
+
+// fundamental is an error that has a message and a stack, but no caller.
+type fundamental struct {
+	msg string
+	*stack
+}
+
+func (f *fundamental) Error() string { return f.msg }
+
+func (f *fundamental) Format(s fmt.State, verb rune) {
+	switch verb {
+	case 'v':
+		if s.Flag('+') {
+			io.WriteString(s, f.msg)
+			f.stack.Format(s, verb)
+			return
+		}
+		fallthrough
+	case 's':
+		io.WriteString(s, f.msg)
+	case 'q':
+		fmt.Fprintf(s, "%q", f.msg)
+	}
+}
+
+// WithStack annotates err with a stack trace at the point WithStack was called.
+// If err is nil, WithStack returns nil.
+func WithStack(err error) error {
+	if err == nil {
+		return nil
+	}
+	return &withStack{
+		err,
+		callers(),
+	}
+}
+
+type withStack struct {
+	error
+	*stack
+}
+
+func (w *withStack) Cause() error { return w.error }
+
+func (w *withStack) Format(s fmt.State, verb rune) {
+	switch verb {
+	case 'v':
+		if s.Flag('+') {
+			fmt.Fprintf(s, "%+v", w.Cause())
+			w.stack.Format(s, verb)
+			return
+		}
+		fallthrough
+	case 's':
+		io.WriteString(s, w.Error())
+	case 'q':
+		fmt.Fprintf(s, "%q", w.Error())
+	}
+}
+
+// Wrap returns an error annotating err with a stack trace
+// at the point Wrap is called, and the supplied message.
+// If err is nil, Wrap returns nil.
+func Wrap(err error, message string) error {
+	if err == nil {
+		return nil
+	}
+	err = &withMessage{
+		cause: err,
+		msg:   message,
+	}
+	return &withStack{
+		err,
+		callers(),
+	}
+}
+
+// Wrapf returns an error annotating err with a stack trace
+// at the point Wrapf is call, and the format specifier.
+// If err is nil, Wrapf returns nil.
+func Wrapf(err error, format string, args ...interface{}) error {
+	if err == nil {
+		return nil
+	}
+	err = &withMessage{
+		cause: err,
+		msg:   fmt.Sprintf(format, args...),
+	}
+	return &withStack{
+		err,
+		callers(),
+	}
+}
+
+// WithMessage annotates err with a new message.
+// If err is nil, WithMessage returns nil.
+func WithMessage(err error, message string) error {
+	if err == nil {
+		return nil
+	}
+	return &withMessage{
+		cause: err,
+		msg:   message,
+	}
+}
+
+type withMessage struct {
+	cause error
+	msg   string
+}
+
+func (w *withMessage) Error() string { return w.msg + ": " + w.cause.Error() }
+func (w *withMessage) Cause() error  { return w.cause }
+
+func (w *withMessage) Format(s fmt.State, verb rune) {
+	switch verb {
+	case 'v':
+		if s.Flag('+') {
+			fmt.Fprintf(s, "%+v\n", w.Cause())
+			io.WriteString(s, w.msg)
+			return
+		}
+		fallthrough
+	case 's', 'q':
+		io.WriteString(s, w.Error())
+	}
+}
+
+// Cause returns the underlying cause of the error, if possible.
+// An error value has a cause if it implements the following
+// interface:
+//
+//     type causer interface {
+//            Cause() error
+//     }
+//
+// If the error does not implement Cause, the original error will
+// be returned. If the error is nil, nil will be returned without further
+// investigation.
+func Cause(err error) error {
+	type causer interface {
+		Cause() error
+	}
+
+	for err != nil {
+		cause, ok := err.(causer)
+		if !ok {
+			break
+		}
+		err = cause.Cause()
+	}
+	return err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/errors/stack.go b/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/errors/stack.go
new file mode 100644
index 000000000..6c42db5a8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/errors/stack.go
@@ -0,0 +1,187 @@
+// Fork from https://github.com/pkg/errors
+package errors
+
+import (
+	"fmt"
+	"io"
+	"path"
+	"runtime"
+	"strings"
+)
+
+// Frame represents a program counter inside a stack frame.
+type Frame uintptr
+
+// pc returns the program counter for this frame;
+// multiple frames may have the same PC value.
+func (f Frame) pc() uintptr { return uintptr(f) - 1 }
+
+// file returns the full path to the file that contains the
+// function for this Frame's pc.
+func (f Frame) file() string {
+	fn := runtime.FuncForPC(f.pc())
+	if fn == nil {
+		return "unknown"
+	}
+	file, _ := fn.FileLine(f.pc())
+	return file
+}
+
+// line returns the line number of source code of the
+// function for this Frame's pc.
+func (f Frame) line() int {
+	fn := runtime.FuncForPC(f.pc())
+	if fn == nil {
+		return 0
+	}
+	_, line := fn.FileLine(f.pc())
+	return line
+}
+
+// Format formats the frame according to the fmt.Formatter interface.
+//
+//    %s    source file
+//    %d    source line
+//    %n    function name
+//    %v    equivalent to %s:%d
+//
+// Format accepts flags that alter the printing of some verbs, as follows:
+//
+//    %+s   path of source file relative to the compile time GOPATH
+//    %+v   equivalent to %+s:%d
+func (f Frame) Format(s fmt.State, verb rune) {
+	switch verb {
+	case 's':
+		switch {
+		case s.Flag('+'):
+			pc := f.pc()
+			fn := runtime.FuncForPC(pc)
+			if fn == nil {
+				io.WriteString(s, "unknown")
+			} else {
+				file, _ := fn.FileLine(pc)
+				fmt.Fprintf(s, "%s\n\t%s", fn.Name(), file)
+			}
+		default:
+			io.WriteString(s, path.Base(f.file()))
+		}
+	case 'd':
+		fmt.Fprintf(s, "%d", f.line())
+	case 'n':
+		name := runtime.FuncForPC(f.pc()).Name()
+		io.WriteString(s, funcname(name))
+	case 'v':
+		f.Format(s, 's')
+		io.WriteString(s, ":")
+		f.Format(s, 'd')
+	}
+}
+
+// StackTrace is stack of Frames from innermost (newest) to outermost (oldest).
+type StackTrace []Frame
+
+// Format formats the stack of Frames according to the fmt.Formatter interface.
+//
+//    %s	lists source files for each Frame in the stack
+//    %v	lists the source file and line number for each Frame in the stack
+//
+// Format accepts flags that alter the printing of some verbs, as follows:
+//
+//    %+v   Prints filename, function, and line number for each Frame in the stack.
+func (st StackTrace) Format(s fmt.State, verb rune) {
+	switch verb {
+	case 'v':
+		switch {
+		case s.Flag('+'):
+			for _, f := range st {
+				fmt.Fprintf(s, "\n%+v", f)
+			}
+		case s.Flag('#'):
+			fmt.Fprintf(s, "%#v", []Frame(st))
+		default:
+			fmt.Fprintf(s, "%v", []Frame(st))
+		}
+	case 's':
+		fmt.Fprintf(s, "%s", []Frame(st))
+	}
+}
+
+// stack represents a stack of program counters.
+type stack []uintptr
+
+func (s *stack) Format(st fmt.State, verb rune) {
+	switch verb {
+	case 'v':
+		switch {
+		case st.Flag('+'):
+			for _, pc := range *s {
+				f := Frame(pc)
+				fmt.Fprintf(st, "\n%+v", f)
+			}
+		}
+	}
+}
+
+func (s *stack) StackTrace() StackTrace {
+	f := make([]Frame, len(*s))
+	for i := 0; i < len(f); i++ {
+		f[i] = Frame((*s)[i])
+	}
+	return f
+}
+
+func callers() *stack {
+	const depth = 32
+	var pcs [depth]uintptr
+	n := runtime.Callers(3, pcs[:])
+	var st stack = pcs[0:n]
+	return &st
+}
+
+// funcname removes the path prefix component of a function's name reported by func.Name().
+func funcname(name string) string {
+	i := strings.LastIndex(name, "/")
+	name = name[i+1:]
+	i = strings.Index(name, ".")
+	return name[i+1:]
+}
+
+func trimGOPATH(name, file string) string {
+	// Here we want to get the source file path relative to the compile time
+	// GOPATH. As of Go 1.6.x there is no direct way to know the compiled
+	// GOPATH at runtime, but we can infer the number of path segments in the
+	// GOPATH. We note that fn.Name() returns the function name qualified by
+	// the import path, which does not include the GOPATH. Thus we can trim
+	// segments from the beginning of the file path until the number of path
+	// separators remaining is one more than the number of path separators in
+	// the function name. For example, given:
+	//
+	//    GOPATH     /home/user
+	//    file       /home/user/src/pkg/sub/file.go
+	//    fn.Name()  pkg/sub.Type.Method
+	//
+	// We want to produce:
+	//
+	//    pkg/sub/file.go
+	//
+	// From this we can easily see that fn.Name() has one less path separator
+	// than our desired output. We count separators from the end of the file
+	// path until it finds two more than in the function name and then move
+	// one character forward to preserve the initial path segment without a
+	// leading separator.
+	const sep = "/"
+	goal := strings.Count(name, sep) + 2
+	i := len(file)
+	for n := 0; n < goal; n++ {
+		i = strings.LastIndex(file[:i], sep)
+		if i == -1 {
+			// not enough separators found, set i so that the slice expression
+			// below leaves file unmodified
+			i = -len(sep)
+			break
+		}
+	}
+	// get back to 0 or trim the leading separator
+	file = file[i+len(sep):]
+	return file
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/logger/go17.go b/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/logger/go17.go
new file mode 100644
index 000000000..65bdeb76f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/logger/go17.go
@@ -0,0 +1,86 @@
+// The MIT License (MIT)
+//
+// Copyright (c) 2013-2017 Oryx(ossrs)
+//
+// Permission is hereby granted, free of charge, to any person obtaining a copy of
+// this software and associated documentation files (the "Software"), to deal in
+// the Software without restriction, including without limitation the rights to
+// use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+// the Software, and to permit persons to whom the Software is furnished to do so,
+// subject to the following conditions:
+//
+// The above copyright notice and this permission notice shall be included in all
+// copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+// FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+// COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+// IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+// CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+// +build go1.7
+
+package logger
+
+import (
+	"context"
+	"fmt"
+	"os"
+)
+
+func (v *loggerPlus) Println(ctx Context, a ...interface{}) {
+	args := v.contextFormat(ctx, a...)
+	v.doPrintln(args...)
+}
+
+func (v *loggerPlus) Printf(ctx Context, format string, a ...interface{}) {
+	format, args := v.contextFormatf(ctx, format, a...)
+	v.doPrintf(format, args...)
+}
+
+func (v *loggerPlus) contextFormat(ctx Context, a ...interface{}) []interface{} {
+	if ctx, ok := ctx.(context.Context); ok {
+		if cid, ok := ctx.Value(cidKey).(int); ok {
+			return append([]interface{}{fmt.Sprintf("[%v][%v]", os.Getpid(), cid)}, a...)
+		}
+	} else {
+		return v.format(ctx, a...)
+	}
+	return a
+}
+
+func (v *loggerPlus) contextFormatf(ctx Context, format string, a ...interface{}) (string, []interface{}) {
+	if ctx, ok := ctx.(context.Context); ok {
+		if cid, ok := ctx.Value(cidKey).(int); ok {
+			return "[%v][%v] " + format, append([]interface{}{os.Getpid(), cid}, a...)
+		}
+	} else {
+		return v.formatf(ctx, format, a...)
+	}
+	return format, a
+}
+
+// User should use context with value to pass the cid.
+type key string
+
+var cidKey key = "cid.logger.ossrs.org"
+
+var gCid int = 999
+
+// Create context with value.
+func WithContext(ctx context.Context) context.Context {
+	gCid += 1
+	return context.WithValue(ctx, cidKey, gCid)
+}
+
+// Create context with value from parent, copy the cid from source context.
+// @remark Create new cid if source has no cid represent.
+func AliasContext(parent context.Context, source context.Context) context.Context {
+	if source != nil {
+		if cid, ok := source.Value(cidKey).(int); ok {
+			return context.WithValue(parent, cidKey, cid)
+		}
+	}
+	return WithContext(parent)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/logger/logger.go b/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/logger/logger.go
new file mode 100644
index 000000000..61cea362f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/logger/logger.go
@@ -0,0 +1,239 @@
+// The MIT License (MIT)
+//
+// Copyright (c) 2013-2017 Oryx(ossrs)
+//
+// Permission is hereby granted, free of charge, to any person obtaining a copy of
+// this software and associated documentation files (the "Software"), to deal in
+// the Software without restriction, including without limitation the rights to
+// use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+// the Software, and to permit persons to whom the Software is furnished to do so,
+// subject to the following conditions:
+//
+// The above copyright notice and this permission notice shall be included in all
+// copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+// FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+// COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+// IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+// CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+// The oryx logger package provides connection-oriented log service.
+//		logger.I(ctx, ...)
+//		logger.T(ctx, ...)
+//		logger.W(ctx, ...)
+//		logger.E(ctx, ...)
+// Or use format:
+//		logger.If(ctx, format, ...)
+//		logger.Tf(ctx, format, ...)
+//		logger.Wf(ctx, format, ...)
+//		logger.Ef(ctx, format, ...)
+// @remark the Context is optional thus can be nil.
+// @remark From 1.7+, the ctx could be context.Context, wrap by logger.WithContext,
+// 	please read ExampleLogger_ContextGO17().
+package logger
+
+import (
+	"fmt"
+	"io"
+	"io/ioutil"
+	"log"
+	"os"
+)
+
+// default level for logger.
+const (
+	logInfoLabel  = "[info] "
+	logTraceLabel = "[trace] "
+	logWarnLabel  = "[warn] "
+	logErrorLabel = "[error] "
+)
+
+// The context for current goroutine.
+// It maybe a cidContext or context.Context from GO1.7.
+// @remark Use logger.WithContext(ctx) to wrap the context.
+type Context interface{}
+
+// The context to get current coroutine cid.
+type cidContext interface {
+	Cid() int
+}
+
+// the LOG+ which provides connection-based log.
+type loggerPlus struct {
+	logger *log.Logger
+}
+
+func NewLoggerPlus(l *log.Logger) Logger {
+	return &loggerPlus{logger: l}
+}
+
+func (v *loggerPlus) format(ctx Context, a ...interface{}) []interface{} {
+	if ctx == nil {
+		return append([]interface{}{fmt.Sprintf("[%v] ", os.Getpid())}, a...)
+	} else if ctx, ok := ctx.(cidContext); ok {
+		return append([]interface{}{fmt.Sprintf("[%v][%v] ", os.Getpid(), ctx.Cid())}, a...)
+	}
+	return a
+}
+
+func (v *loggerPlus) formatf(ctx Context, format string, a ...interface{}) (string, []interface{}) {
+	if ctx == nil {
+		return "[%v] " + format, append([]interface{}{os.Getpid()}, a...)
+	} else if ctx, ok := ctx.(cidContext); ok {
+		return "[%v][%v] " + format, append([]interface{}{os.Getpid(), ctx.Cid()}, a...)
+	}
+	return format, a
+}
+
+var colorYellow = "\033[33m"
+var colorRed = "\033[31m"
+var colorBlack = "\033[0m"
+
+func (v *loggerPlus) doPrintln(args ...interface{}) {
+	if previousCloser == nil {
+		if v == Error {
+			fmt.Fprintf(os.Stdout, colorRed)
+			v.logger.Println(args...)
+			fmt.Fprintf(os.Stdout, colorBlack)
+		} else if v == Warn {
+			fmt.Fprintf(os.Stdout, colorYellow)
+			v.logger.Println(args...)
+			fmt.Fprintf(os.Stdout, colorBlack)
+		} else {
+			v.logger.Println(args...)
+		}
+	} else {
+		v.logger.Println(args...)
+	}
+}
+
+func (v *loggerPlus) doPrintf(format string, args ...interface{}) {
+	if previousCloser == nil {
+		if v == Error {
+			fmt.Fprintf(os.Stdout, colorRed)
+			v.logger.Printf(format, args...)
+			fmt.Fprintf(os.Stdout, colorBlack)
+		} else if v == Warn {
+			fmt.Fprintf(os.Stdout, colorYellow)
+			v.logger.Printf(format, args...)
+			fmt.Fprintf(os.Stdout, colorBlack)
+		} else {
+			v.logger.Printf(format, args...)
+		}
+	} else {
+		v.logger.Printf(format, args...)
+	}
+}
+
+// Info, the verbose info level, very detail log, the lowest level, to discard.
+var Info Logger
+
+// Alias for Info level println.
+func I(ctx Context, a ...interface{}) {
+	Info.Println(ctx, a...)
+}
+
+// Printf for Info level log.
+func If(ctx Context, format string, a ...interface{}) {
+	Info.Printf(ctx, format, a...)
+}
+
+// Trace, the trace level, something important, the default log level, to stdout.
+var Trace Logger
+
+// Alias for Trace level println.
+func T(ctx Context, a ...interface{}) {
+	Trace.Println(ctx, a...)
+}
+
+// Printf for Trace level log.
+func Tf(ctx Context, format string, a ...interface{}) {
+	Trace.Printf(ctx, format, a...)
+}
+
+// Warn, the warning level, dangerous information, to Stdout.
+var Warn Logger
+
+// Alias for Warn level println.
+func W(ctx Context, a ...interface{}) {
+	Warn.Println(ctx, a...)
+}
+
+// Printf for Warn level log.
+func Wf(ctx Context, format string, a ...interface{}) {
+	Warn.Printf(ctx, format, a...)
+}
+
+// Error, the error level, fatal error things, ot Stdout.
+var Error Logger
+
+// Alias for Error level println.
+func E(ctx Context, a ...interface{}) {
+	Error.Println(ctx, a...)
+}
+
+// Printf for Error level log.
+func Ef(ctx Context, format string, a ...interface{}) {
+	Error.Printf(ctx, format, a...)
+}
+
+// The logger for oryx.
+type Logger interface {
+	// Println for logger plus,
+	// @param ctx the connection-oriented context,
+	// 	or context.Context from GO1.7, or nil to ignore.
+	Println(ctx Context, a ...interface{})
+	Printf(ctx Context, format string, a ...interface{})
+}
+
+func init() {
+	Info = NewLoggerPlus(log.New(ioutil.Discard, logInfoLabel, log.Ldate|log.Ltime|log.Lmicroseconds))
+	Trace = NewLoggerPlus(log.New(os.Stdout, logTraceLabel, log.Ldate|log.Ltime|log.Lmicroseconds))
+	Warn = NewLoggerPlus(log.New(os.Stderr, logWarnLabel, log.Ldate|log.Ltime|log.Lmicroseconds))
+	Error = NewLoggerPlus(log.New(os.Stderr, logErrorLabel, log.Ldate|log.Ltime|log.Lmicroseconds))
+
+	// init writer and closer.
+	previousWriter = os.Stdout
+	previousCloser = nil
+}
+
+// Switch the underlayer io.
+// @remark user must close previous io for logger never close it.
+func Switch(w io.Writer) io.Writer {
+	// TODO: support level, default to trace here.
+	Info = NewLoggerPlus(log.New(ioutil.Discard, logInfoLabel, log.Ldate|log.Ltime|log.Lmicroseconds))
+	Trace = NewLoggerPlus(log.New(w, logTraceLabel, log.Ldate|log.Ltime|log.Lmicroseconds))
+	Warn = NewLoggerPlus(log.New(w, logWarnLabel, log.Ldate|log.Ltime|log.Lmicroseconds))
+	Error = NewLoggerPlus(log.New(w, logErrorLabel, log.Ldate|log.Ltime|log.Lmicroseconds))
+
+	ow := previousWriter
+	previousWriter = w
+
+	if c, ok := w.(io.Closer); ok {
+		previousCloser = c
+	}
+
+	return ow
+}
+
+// The previous underlayer io for logger.
+var previousCloser io.Closer
+var previousWriter io.Writer
+
+// The interface io.Closer
+// Cleanup the logger, discard any log util switch to fresh writer.
+func Close() (err error) {
+	Info = NewLoggerPlus(log.New(ioutil.Discard, logInfoLabel, log.Ldate|log.Ltime|log.Lmicroseconds))
+	Trace = NewLoggerPlus(log.New(ioutil.Discard, logTraceLabel, log.Ldate|log.Ltime|log.Lmicroseconds))
+	Warn = NewLoggerPlus(log.New(ioutil.Discard, logWarnLabel, log.Ldate|log.Ltime|log.Lmicroseconds))
+	Error = NewLoggerPlus(log.New(ioutil.Discard, logErrorLabel, log.Ldate|log.Ltime|log.Lmicroseconds))
+
+	if previousCloser != nil {
+		err = previousCloser.Close()
+		previousCloser = nil
+	}
+
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/logger/pre_go17.go b/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/logger/pre_go17.go
new file mode 100644
index 000000000..24041dc88
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/ossrs/go-oryx-lib/logger/pre_go17.go
@@ -0,0 +1,34 @@
+// The MIT License (MIT)
+//
+// Copyright (c) 2013-2017 Oryx(ossrs)
+//
+// Permission is hereby granted, free of charge, to any person obtaining a copy of
+// this software and associated documentation files (the "Software"), to deal in
+// the Software without restriction, including without limitation the rights to
+// use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+// the Software, and to permit persons to whom the Software is furnished to do so,
+// subject to the following conditions:
+//
+// The above copyright notice and this permission notice shall be included in all
+// copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+// FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+// COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+// IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+// CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+// +build !go1.7
+
+package logger
+
+func (v *loggerPlus) Println(ctx Context, a ...interface{}) {
+	args := v.format(ctx, a...)
+	v.doPrintln(args...)
+}
+
+func (v *loggerPlus) Printf(ctx Context, format string, a ...interface{}) {
+	format, args := v.formatf(ctx, format, a...)
+	v.doPrintf(format, args...)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/.gitignore b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/.gitignore
new file mode 100644
index 000000000..23501a3c4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/.gitignore
@@ -0,0 +1,2 @@
+# vim temporary files
+*.sw[poe]
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/.golangci.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/.golangci.yml
new file mode 100644
index 000000000..570f17b06
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/.golangci.yml
@@ -0,0 +1,8 @@
+linters-settings:
+  govet:
+    check-shadowing: true
+  misspell:
+    locale: US
+
+run:
+  skip-dirs-use-default: false
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/DESIGN.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/DESIGN.md
new file mode 100644
index 000000000..55d6c8fff
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/DESIGN.md
@@ -0,0 +1,20 @@
+<h1 align="center">
+  Design
+</h1>
+
+### Portable
+Pion Data Channels is written in Go and extremely portable. Anywhere Golang runs, Pion Data Channels should work as well! Instead of dealing with complicated
+cross-compiling of multiple libraries, you now can run anywhere with one `go build`
+
+### Simple API
+The API is based on an io.ReadWriteCloser.
+
+### Readable
+If code comes from an RFC we try to make sure everything is commented with a link to the spec.
+This makes learning and debugging easier, this library was written to also serve as a guide for others.
+
+### Tested
+Every commit is tested via travis-ci Go provides fantastic facilities for testing, and more will be added as time goes on.
+
+### Shared libraries
+Every pion product is built using shared libraries, allowing others to review and reuse our libraries.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/LICENSE
new file mode 100644
index 000000000..ab602974d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/README.md
new file mode 100644
index 000000000..1132f62ff
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/README.md
@@ -0,0 +1,45 @@
+<h1 align="center">
+  <br>
+  Pion Data Channels
+  <br>
+</h1>
+<h4 align="center">A Go implementation of WebRTC Data Channels</h4>
+<p align="center">
+  <a href="https://pion.ly"><img src="https://img.shields.io/badge/pion-datachannel-gray.svg?longCache=true&colorB=brightgreen" alt="Pion Data Channels"></a>
+  <!--<a href="https://sourcegraph.com/github.com/pion/webrtc?badge"><img src="https://sourcegraph.com/github.com/pion/webrtc/-/badge.svg" alt="Sourcegraph Widget"></a>-->
+  <a href="https://pion.ly/slack"><img src="https://img.shields.io/badge/join-us%20on%20slack-gray.svg?longCache=true&logo=slack&colorB=brightgreen" alt="Slack Widget"></a>
+  <br>
+  <a href="https://travis-ci.org/pion/datachannel"><img src="https://travis-ci.org/pion/datachannel.svg?branch=master" alt="Build Status"></a>
+  <a href="https://pkg.go.dev/github.com/pion/datachannel"><img src="https://godoc.org/github.com/pion/datachannel?status.svg" alt="GoDoc"></a>
+  <a href="https://codecov.io/gh/pion/datachannel"><img src="https://codecov.io/gh/pion/datachannel/branch/master/graph/badge.svg" alt="Coverage Status"></a>
+  <a href="https://goreportcard.com/report/github.com/pion/datachannel"><img src="https://goreportcard.com/badge/github.com/pion/datachannel" alt="Go Report Card"></a>
+  <!--<a href="https://www.codacy.com/app/Sean-Der/webrtc"><img src="https://api.codacy.com/project/badge/Grade/18f4aec384894e6aac0b94effe51961d" alt="Codacy Badge"></a>-->
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+</p>
+<br>
+
+See [DESIGN.md](DESIGN.md) for an overview of features and future goals.
+
+### Roadmap
+The library is used as a part of our WebRTC implementation. Please refer to that [roadmap](https://github.com/pion/webrtc/issues/9) to track our major milestones.
+
+### Community
+Pion has an active community on the [Golang Slack](https://invite.slack.golangbridge.org/). Sign up and join the **#pion** channel for discussions and support. You can also use [Pion mailing list](https://groups.google.com/forum/#!forum/pion).
+
+We are always looking to support **your projects**. Please reach out if you have something to build!
+
+If you need commercial support or don't want to use public methods you can contact us at [team@pion.ly](mailto:team@pion.ly)
+
+### Contributing
+Check out the **[contributing wiki](https://github.com/pion/webrtc/wiki/Contributing)** to join the group of amazing people making this project possible:
+
+* [John Bradley](https://github.com/kc5nra) - *Original Author*
+* [Sean DuBois](https://github.com/Sean-Der) - *Original Author*
+* [Michiel De Backker](https://github.com/backkem) - *Public API*
+* [Yutaka Takeda](https://github.com/enobufs) - *PR-SCTP*
+* [Hugo Arregui](https://github.com/hugoArregui)
+* [Atsushi Watanabe](https://github.com/at-wat)
+* [Norman Rasmussen](https://github.com/normanr) - *Fix Empty DataChannel messages*
+
+### License
+MIT License - see [LICENSE](LICENSE) for full text
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/codecov.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/codecov.yml
new file mode 100644
index 000000000..085200a48
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/codecov.yml
@@ -0,0 +1,20 @@
+#
+# DO NOT EDIT THIS FILE
+#
+# It is automatically copied from https://github.com/pion/.goassets repository.
+#
+
+coverage:
+  status:
+    project:
+      default:
+        # Allow decreasing 2% of total coverage to avoid noise.
+        threshold: 2%
+    patch:
+      default:
+        target: 70%
+        only_pulls: true
+
+ignore:
+  - "examples/*"
+  - "examples/**/*"
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/datachannel.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/datachannel.go
new file mode 100644
index 000000000..237ad7280
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/datachannel.go
@@ -0,0 +1,378 @@
+// Package datachannel implements WebRTC Data Channels
+package datachannel
+
+import (
+	"fmt"
+	"io"
+	"sync/atomic"
+
+	"github.com/pion/logging"
+	"github.com/pion/sctp"
+	"github.com/pkg/errors"
+)
+
+const receiveMTU = 8192
+
+// Reader is an extended io.Reader
+// that also returns if the message is text.
+type Reader interface {
+	ReadDataChannel([]byte) (int, bool, error)
+}
+
+// Writer is an extended io.Writer
+// that also allows indicating if a message is text.
+type Writer interface {
+	WriteDataChannel([]byte, bool) (int, error)
+}
+
+// ReadWriteCloser is an extended io.ReadWriteCloser
+// that also implements our Reader and Writer.
+type ReadWriteCloser interface {
+	io.Reader
+	io.Writer
+	Reader
+	Writer
+	io.Closer
+}
+
+// DataChannel represents a data channel
+type DataChannel struct {
+	Config
+
+	// stats
+	messagesSent     uint32
+	messagesReceived uint32
+	bytesSent        uint64
+	bytesReceived    uint64
+
+	stream *sctp.Stream
+	log    logging.LeveledLogger
+}
+
+// Config is used to configure the data channel.
+type Config struct {
+	ChannelType          ChannelType
+	Negotiated           bool
+	Priority             uint16
+	ReliabilityParameter uint32
+	Label                string
+	Protocol             string
+	LoggerFactory        logging.LoggerFactory
+}
+
+func newDataChannel(stream *sctp.Stream, config *Config) (*DataChannel, error) {
+	return &DataChannel{
+		Config: *config,
+		stream: stream,
+		log:    config.LoggerFactory.NewLogger("datachannel"),
+	}, nil
+}
+
+// Dial opens a data channels over SCTP
+func Dial(a *sctp.Association, id uint16, config *Config) (*DataChannel, error) {
+	stream, err := a.OpenStream(id, sctp.PayloadTypeWebRTCBinary)
+	if err != nil {
+		return nil, err
+	}
+
+	dc, err := Client(stream, config)
+	if err != nil {
+		return nil, err
+	}
+
+	return dc, nil
+}
+
+// Client opens a data channel over an SCTP stream
+func Client(stream *sctp.Stream, config *Config) (*DataChannel, error) {
+	msg := &channelOpen{
+		ChannelType:          config.ChannelType,
+		Priority:             config.Priority,
+		ReliabilityParameter: config.ReliabilityParameter,
+
+		Label:    []byte(config.Label),
+		Protocol: []byte(config.Protocol),
+	}
+
+	if !config.Negotiated {
+		rawMsg, err := msg.Marshal()
+		if err != nil {
+			return nil, fmt.Errorf("failed to marshal ChannelOpen %v", err)
+		}
+
+		if _, err = stream.WriteSCTP(rawMsg, sctp.PayloadTypeWebRTCDCEP); err != nil {
+			return nil, fmt.Errorf("failed to send ChannelOpen %v", err)
+		}
+	}
+	return newDataChannel(stream, config)
+}
+
+// Accept is used to accept incoming data channels over SCTP
+func Accept(a *sctp.Association, config *Config) (*DataChannel, error) {
+	stream, err := a.AcceptStream()
+	if err != nil {
+		return nil, err
+	}
+
+	stream.SetDefaultPayloadType(sctp.PayloadTypeWebRTCBinary)
+
+	dc, err := Server(stream, config)
+	if err != nil {
+		return nil, err
+	}
+
+	return dc, nil
+}
+
+// Server accepts a data channel over an SCTP stream
+func Server(stream *sctp.Stream, config *Config) (*DataChannel, error) {
+	buffer := make([]byte, receiveMTU) // TODO: Can probably be smaller
+	n, ppi, err := stream.ReadSCTP(buffer)
+	if err != nil {
+		return nil, err
+	}
+
+	if ppi != sctp.PayloadTypeWebRTCDCEP {
+		return nil, fmt.Errorf("unexpected packet type: %s", ppi)
+	}
+
+	openMsg, err := parseExpectDataChannelOpen(buffer[:n])
+	if err != nil {
+		return nil, errors.Wrap(err, "failed to parse DataChannelOpen packet")
+	}
+
+	config.ChannelType = openMsg.ChannelType
+	config.Priority = openMsg.Priority
+	config.ReliabilityParameter = openMsg.ReliabilityParameter
+	config.Label = string(openMsg.Label)
+	config.Protocol = string(openMsg.Protocol)
+
+	dataChannel, err := newDataChannel(stream, config)
+	if err != nil {
+		return nil, err
+	}
+
+	err = dataChannel.writeDataChannelAck()
+	if err != nil {
+		return nil, err
+	}
+
+	err = dataChannel.commitReliabilityParams()
+	if err != nil {
+		return nil, err
+	}
+	return dataChannel, nil
+}
+
+// Read reads a packet of len(p) bytes as binary data
+func (c *DataChannel) Read(p []byte) (int, error) {
+	n, _, err := c.ReadDataChannel(p)
+	return n, err
+}
+
+// ReadDataChannel reads a packet of len(p) bytes
+func (c *DataChannel) ReadDataChannel(p []byte) (int, bool, error) {
+	for {
+		n, ppi, err := c.stream.ReadSCTP(p)
+		if err == io.EOF {
+			// When the peer sees that an incoming stream was
+			// reset, it also resets its corresponding outgoing stream.
+			closeErr := c.stream.Close()
+			if closeErr != nil {
+				return 0, false, closeErr
+			}
+		}
+		if err != nil {
+			return 0, false, err
+		}
+
+		var isString bool
+		switch ppi {
+		case sctp.PayloadTypeWebRTCDCEP:
+			err = c.handleDCEP(p[:n])
+			if err != nil {
+				c.log.Errorf("Failed to handle DCEP: %s", err.Error())
+				continue
+			}
+			continue
+		case sctp.PayloadTypeWebRTCString, sctp.PayloadTypeWebRTCStringEmpty:
+			isString = true
+		}
+		switch ppi {
+		case sctp.PayloadTypeWebRTCBinaryEmpty, sctp.PayloadTypeWebRTCStringEmpty:
+			n = 0
+		}
+
+		atomic.AddUint32(&c.messagesReceived, 1)
+		atomic.AddUint64(&c.bytesReceived, uint64(n))
+
+		return n, isString, err
+	}
+}
+
+// MessagesSent returns the number of messages sent
+func (c *DataChannel) MessagesSent() uint32 {
+	return atomic.LoadUint32(&c.messagesSent)
+}
+
+// MessagesReceived returns the number of messages received
+func (c *DataChannel) MessagesReceived() uint32 {
+	return atomic.LoadUint32(&c.messagesReceived)
+}
+
+// BytesSent returns the number of bytes sent
+func (c *DataChannel) BytesSent() uint64 {
+	return atomic.LoadUint64(&c.bytesSent)
+}
+
+// BytesReceived returns the number of bytes received
+func (c *DataChannel) BytesReceived() uint64 {
+	return atomic.LoadUint64(&c.bytesReceived)
+}
+
+// StreamIdentifier returns the Stream identifier associated to the stream.
+func (c *DataChannel) StreamIdentifier() uint16 {
+	return c.stream.StreamIdentifier()
+}
+
+func (c *DataChannel) handleDCEP(data []byte) error {
+	msg, err := parse(data)
+	if err != nil {
+		return errors.Wrap(err, "Failed to parse DataChannel packet")
+	}
+
+	switch msg := msg.(type) {
+	case *channelOpen:
+		c.log.Debug("Received DATA_CHANNEL_OPEN")
+		err = c.writeDataChannelAck()
+		if err != nil {
+			return fmt.Errorf("failed to ACK channel open: %v", err)
+		}
+		// Note: DATA_CHANNEL_OPEN message is handled inside Server() method.
+		// Therefore, the message will not reach here.
+
+	case *channelAck:
+		c.log.Debug("Received DATA_CHANNEL_ACK")
+		err = c.commitReliabilityParams()
+		if err != nil {
+			return err
+		}
+		// TODO: handle ChannelAck (https://tools.ietf.org/html/draft-ietf-rtcweb-data-protocol-09#section-5.2)
+
+	default:
+		return fmt.Errorf("unhandled DataChannel message %v", msg)
+	}
+
+	return nil
+}
+
+// Write writes len(p) bytes from p as binary data
+func (c *DataChannel) Write(p []byte) (n int, err error) {
+	return c.WriteDataChannel(p, false)
+}
+
+// WriteDataChannel writes len(p) bytes from p
+func (c *DataChannel) WriteDataChannel(p []byte, isString bool) (n int, err error) {
+	// https://tools.ietf.org/html/draft-ietf-rtcweb-data-channel-12#section-6.6
+	// SCTP does not support the sending of empty user messages.  Therefore,
+	// if an empty message has to be sent, the appropriate PPID (WebRTC
+	// String Empty or WebRTC Binary Empty) is used and the SCTP user
+	// message of one zero byte is sent.  When receiving an SCTP user
+	// message with one of these PPIDs, the receiver MUST ignore the SCTP
+	// user message and process it as an empty message.
+	var ppi sctp.PayloadProtocolIdentifier
+	switch {
+	case !isString && len(p) > 0:
+		ppi = sctp.PayloadTypeWebRTCBinary
+	case !isString && len(p) == 0:
+		ppi = sctp.PayloadTypeWebRTCBinaryEmpty
+	case isString && len(p) > 0:
+		ppi = sctp.PayloadTypeWebRTCString
+	case isString && len(p) == 0:
+		ppi = sctp.PayloadTypeWebRTCStringEmpty
+	}
+
+	atomic.AddUint32(&c.messagesSent, 1)
+	atomic.AddUint64(&c.bytesSent, uint64(len(p)))
+
+	if len(p) == 0 {
+		_, err := c.stream.WriteSCTP([]byte{0}, ppi)
+		return 0, err
+	}
+	return c.stream.WriteSCTP(p, ppi)
+}
+
+func (c *DataChannel) writeDataChannelAck() error {
+	ack := channelAck{}
+	ackMsg, err := ack.Marshal()
+	if err != nil {
+		return fmt.Errorf("failed to marshal ChannelOpen ACK: %v", err)
+	}
+
+	_, err = c.stream.WriteSCTP(ackMsg, sctp.PayloadTypeWebRTCDCEP)
+	if err != nil {
+		return fmt.Errorf("failed to send ChannelOpen ACK: %v", err)
+	}
+
+	return err
+}
+
+// Close closes the DataChannel and the underlying SCTP stream.
+func (c *DataChannel) Close() error {
+	// https://tools.ietf.org/html/draft-ietf-rtcweb-data-channel-13#section-6.7
+	// Closing of a data channel MUST be signaled by resetting the
+	// corresponding outgoing streams [RFC6525].  This means that if one
+	// side decides to close the data channel, it resets the corresponding
+	// outgoing stream.  When the peer sees that an incoming stream was
+	// reset, it also resets its corresponding outgoing stream.  Once this
+	// is completed, the data channel is closed.  Resetting a stream sets
+	// the Stream Sequence Numbers (SSNs) of the stream back to 'zero' with
+	// a corresponding notification to the application layer that the reset
+	// has been performed.  Streams are available for reuse after a reset
+	// has been performed.
+	return c.stream.Close()
+}
+
+// BufferedAmount returns the number of bytes of data currently queued to be
+// sent over this stream.
+func (c *DataChannel) BufferedAmount() uint64 {
+	return c.stream.BufferedAmount()
+}
+
+// BufferedAmountLowThreshold returns the number of bytes of buffered outgoing
+// data that is considered "low." Defaults to 0.
+func (c *DataChannel) BufferedAmountLowThreshold() uint64 {
+	return c.stream.BufferedAmountLowThreshold()
+}
+
+// SetBufferedAmountLowThreshold is used to update the threshold.
+// See BufferedAmountLowThreshold().
+func (c *DataChannel) SetBufferedAmountLowThreshold(th uint64) {
+	c.stream.SetBufferedAmountLowThreshold(th)
+}
+
+// OnBufferedAmountLow sets the callback handler which would be called when the
+// number of bytes of outgoing data buffered is lower than the threshold.
+func (c *DataChannel) OnBufferedAmountLow(f func()) {
+	c.stream.OnBufferedAmountLow(f)
+}
+
+func (c *DataChannel) commitReliabilityParams() error {
+	switch c.Config.ChannelType {
+	case ChannelTypeReliable:
+		c.stream.SetReliabilityParams(false, sctp.ReliabilityTypeReliable, c.Config.ReliabilityParameter)
+	case ChannelTypeReliableUnordered:
+		c.stream.SetReliabilityParams(true, sctp.ReliabilityTypeReliable, c.Config.ReliabilityParameter)
+	case ChannelTypePartialReliableRexmit:
+		c.stream.SetReliabilityParams(false, sctp.ReliabilityTypeRexmit, c.Config.ReliabilityParameter)
+	case ChannelTypePartialReliableRexmitUnordered:
+		c.stream.SetReliabilityParams(true, sctp.ReliabilityTypeRexmit, c.Config.ReliabilityParameter)
+	case ChannelTypePartialReliableTimed:
+		c.stream.SetReliabilityParams(false, sctp.ReliabilityTypeTimed, c.Config.ReliabilityParameter)
+	case ChannelTypePartialReliableTimedUnordered:
+		c.stream.SetReliabilityParams(true, sctp.ReliabilityTypeTimed, c.Config.ReliabilityParameter)
+	default:
+		return fmt.Errorf("invalid ChannelType: %v ", c.Config.ChannelType)
+	}
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/go.mod
new file mode 100644
index 000000000..e635596eb
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/go.mod
@@ -0,0 +1,11 @@
+module github.com/pion/datachannel
+
+require (
+	github.com/pion/logging v0.2.2
+	github.com/pion/sctp v1.7.10
+	github.com/pion/transport v0.10.1
+	github.com/pkg/errors v0.9.1
+	github.com/stretchr/testify v1.6.1
+)
+
+go 1.13
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/go.sum b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/go.sum
new file mode 100644
index 000000000..f9ede0831
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/go.sum
@@ -0,0 +1,38 @@
+github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/kr/pretty v0.1.0 h1:L/CwN0zerZDmRFUapSPitk6f+Q3+0za1rQkzVuMiMFI=
+github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
+github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
+github.com/kr/text v0.1.0 h1:45sCR5RtlFHMR4UwH9sdQ5TC8v0qDQCHnXt+kaKSTVE=
+github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
+github.com/pion/logging v0.2.2 h1:M9+AIj/+pxNsDfAT64+MAVgJO0rsyLnoJKCqf//DoeY=
+github.com/pion/logging v0.2.2/go.mod h1:k0/tDVsRCX2Mb2ZEmTqNa7CWsQPc+YYCB7Q+5pahoms=
+github.com/pion/randutil v0.1.0 h1:CFG1UdESneORglEsnimhUjf33Rwjubwj6xfiOXBa3mA=
+github.com/pion/randutil v0.1.0/go.mod h1:XcJrSMMbbMRhASFVOlj/5hQial/Y8oH/HVo7TBZq+j8=
+github.com/pion/sctp v1.7.10 h1:o3p3/hZB5Cx12RMGyWmItevJtZ6o2cpuxaw6GOS4x+8=
+github.com/pion/sctp v1.7.10/go.mod h1:EhpTUQu1/lcK3xI+eriS6/96fWetHGCvBi9MSsnaBN0=
+github.com/pion/transport v0.10.1 h1:2W+yJT+0mOQ160ThZYUx5Zp2skzshiNgxrNE9GUfhJM=
+github.com/pion/transport v0.10.1/go.mod h1:PBis1stIILMiis0PewDw91WJeLJkyIMcEk+DwKOzf4A=
+github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
+github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.6.1 h1:hDPOHmpOpP40lSULcqw7IrRb/u7w6RpDC9399XyoNd0=
+github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20200625001655-4c5254603344 h1:vGXIOMxbNfDTk/aXCmfdLgkrSV+Z2tcbze+pEc3v5W4=
+golang.org/x/net v0.0.0-20200625001655-4c5254603344/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 h1:YR8cESwS4TdDjEe65xsg0ogRM/Nc3DYOhEAlW+xobZo=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c h1:dUUwHk2QECo/6vqA44rthZ8ie2QXMNeKRTHCNY2nXvo=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/message.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/message.go
new file mode 100644
index 000000000..84665cbb3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/message.go
@@ -0,0 +1,94 @@
+package datachannel
+
+import (
+	"fmt"
+
+	"github.com/pkg/errors"
+)
+
+// message is a parsed DataChannel message
+type message interface {
+	Marshal() ([]byte, error)
+	Unmarshal([]byte) error
+}
+
+// messageType is the first byte in a DataChannel message that specifies type
+type messageType byte
+
+// DataChannel Message Types
+const (
+	dataChannelAck  messageType = 0x02
+	dataChannelOpen messageType = 0x03
+)
+
+func (t messageType) String() string {
+	switch t {
+	case dataChannelAck:
+		return "DataChannelAck"
+	case dataChannelOpen:
+		return "DataChannelOpen"
+	default:
+		return fmt.Sprintf("Unknown MessageType: %d", t)
+	}
+}
+
+// parse accepts raw input and returns a DataChannel message
+func parse(raw []byte) (message, error) {
+	if len(raw) == 0 {
+		return nil, errors.Errorf("DataChannel message is not long enough to determine type ")
+	}
+
+	var msg message
+	switch messageType(raw[0]) {
+	case dataChannelOpen:
+		msg = &channelOpen{}
+	case dataChannelAck:
+		msg = &channelAck{}
+	default:
+		return nil, errors.Errorf("Unknown MessageType %v", messageType(raw[0]))
+	}
+
+	if err := msg.Unmarshal(raw); err != nil {
+		return nil, err
+	}
+
+	return msg, nil
+}
+
+// parseExpectDataChannelOpen parses a DataChannelOpen message
+// or throws an error
+func parseExpectDataChannelOpen(raw []byte) (*channelOpen, error) {
+	if len(raw) == 0 {
+		return nil, errors.Errorf("the DataChannel message is not long enough to determine type")
+	}
+
+	if actualTyp := messageType(raw[0]); actualTyp != dataChannelOpen {
+		return nil, errors.Errorf("expected DataChannelOpen but got %s", actualTyp)
+	}
+
+	msg := &channelOpen{}
+	if err := msg.Unmarshal(raw); err != nil {
+		return nil, err
+	}
+
+	return msg, nil
+}
+
+// parseExpectDataChannelAck parses a DataChannelAck message
+// or throws an error
+// func parseExpectDataChannelAck(raw []byte) (*channelAck, error) {
+// 	if len(raw) == 0 {
+// 		return nil, errors.Errorf("the DataChannel message is not long enough to determine type")
+// 	}
+//
+// 	if actualTyp := messageType(raw[0]); actualTyp != dataChannelAck {
+// 		return nil, errors.Errorf("expected DataChannelAck but got %s", actualTyp)
+// 	}
+//
+// 	msg := &channelAck{}
+// 	if err := msg.Unmarshal(raw); err != nil {
+// 		return nil, err
+// 	}
+//
+// 	return msg, nil
+// }
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/message_channel_ack.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/message_channel_ack.go
new file mode 100644
index 000000000..fd2075790
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/message_channel_ack.go
@@ -0,0 +1,22 @@
+package datachannel
+
+// channelAck is used to ACK a DataChannel open
+type channelAck struct{}
+
+const (
+	channelOpenAckLength = 4
+)
+
+// Marshal returns raw bytes for the given message
+func (c *channelAck) Marshal() ([]byte, error) {
+	raw := make([]byte, channelOpenAckLength)
+	raw[0] = uint8(dataChannelAck)
+
+	return raw, nil
+}
+
+// Unmarshal populates the struct with the given raw data
+func (c *channelAck) Unmarshal(raw []byte) error {
+	// Message type already checked in Parse and there is no further data
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/message_channel_open.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/message_channel_open.go
new file mode 100644
index 000000000..9dce03645
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/message_channel_open.go
@@ -0,0 +1,123 @@
+package datachannel
+
+import (
+	"encoding/binary"
+
+	"github.com/pkg/errors"
+)
+
+/*
+channelOpen represents a DATA_CHANNEL_OPEN Message
+
+ 0                   1                   2                   3
+ 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|  Message Type |  Channel Type |            Priority           |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                    Reliability Parameter                      |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|         Label Length          |       Protocol Length         |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                                                               |
+|                             Label                             |
+|                                                               |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                                                               |
+|                            Protocol                           |
+|                                                               |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+*/
+type channelOpen struct {
+	ChannelType          ChannelType
+	Priority             uint16
+	ReliabilityParameter uint32
+
+	Label    []byte
+	Protocol []byte
+}
+
+const (
+	channelOpenHeaderLength = 12
+)
+
+// ChannelType determines the reliability of the WebRTC DataChannel
+type ChannelType byte
+
+// ChannelType enums
+const (
+	// ChannelTypeReliable determines the Data Channel provides a
+	// reliable in-order bi-directional communication.
+	ChannelTypeReliable ChannelType = 0x00
+	// ChannelTypeReliableUnordered determines the Data Channel
+	// provides a reliable unordered bi-directional communication.
+	ChannelTypeReliableUnordered ChannelType = 0x80
+	// ChannelTypePartialReliableRexmit determines the Data Channel
+	// provides a partially-reliable in-order bi-directional communication.
+	// User messages will not be retransmitted more times than specified in the Reliability Parameter.
+	ChannelTypePartialReliableRexmit ChannelType = 0x01
+	// ChannelTypePartialReliableRexmitUnordered determines
+	//  the Data Channel provides a partial reliable unordered bi-directional communication.
+	// User messages will not be retransmitted more times than specified in the Reliability Parameter.
+	ChannelTypePartialReliableRexmitUnordered ChannelType = 0x81
+	// ChannelTypePartialReliableTimed determines the Data Channel
+	// provides a partial reliable in-order bi-directional communication.
+	// User messages might not be transmitted or retransmitted after
+	// a specified life-time given in milli- seconds in the Reliability Parameter.
+	// This life-time starts when providing the user message to the protocol stack.
+	ChannelTypePartialReliableTimed ChannelType = 0x02
+	// The Data Channel provides a partial reliable unordered bi-directional
+	// communication.  User messages might not be transmitted or retransmitted
+	// after a specified life-time given in milli- seconds in the Reliability Parameter.
+	// This life-time starts when providing the user message to the protocol stack.
+	ChannelTypePartialReliableTimedUnordered ChannelType = 0x82
+)
+
+// ChannelPriority enums
+const (
+	ChannelPriorityBelowNormal uint16 = 128
+	ChannelPriorityNormal      uint16 = 256
+	ChannelPriorityHigh        uint16 = 512
+	ChannelPriorityExtraHigh   uint16 = 1024
+)
+
+// Marshal returns raw bytes for the given message
+func (c *channelOpen) Marshal() ([]byte, error) {
+	labelLength := len(c.Label)
+	protocolLength := len(c.Protocol)
+
+	totalLen := channelOpenHeaderLength + labelLength + protocolLength
+	raw := make([]byte, totalLen)
+
+	raw[0] = uint8(dataChannelOpen)
+	raw[1] = byte(c.ChannelType)
+	binary.BigEndian.PutUint16(raw[2:], c.Priority)
+	binary.BigEndian.PutUint32(raw[4:], c.ReliabilityParameter)
+	binary.BigEndian.PutUint16(raw[8:], uint16(labelLength))
+	binary.BigEndian.PutUint16(raw[10:], uint16(protocolLength))
+	endLabel := channelOpenHeaderLength + labelLength
+	copy(raw[channelOpenHeaderLength:endLabel], c.Label)
+	copy(raw[endLabel:endLabel+protocolLength], c.Protocol)
+
+	return raw, nil
+}
+
+// Unmarshal populates the struct with the given raw data
+func (c *channelOpen) Unmarshal(raw []byte) error {
+	if len(raw) < channelOpenHeaderLength {
+		return errors.Errorf("Length of input is not long enough to satisfy header %d", len(raw))
+	}
+	c.ChannelType = ChannelType(raw[1])
+	c.Priority = binary.BigEndian.Uint16(raw[2:])
+	c.ReliabilityParameter = binary.BigEndian.Uint32(raw[4:])
+
+	labelLength := binary.BigEndian.Uint16(raw[8:])
+	protocolLength := binary.BigEndian.Uint16(raw[10:])
+
+	if len(raw) != int(channelOpenHeaderLength+labelLength+protocolLength) {
+		return errors.Errorf("Label + Protocol length don't match full packet length")
+	}
+
+	c.Label = raw[channelOpenHeaderLength : channelOpenHeaderLength+labelLength]
+	c.Protocol = raw[channelOpenHeaderLength+labelLength : channelOpenHeaderLength+labelLength+protocolLength]
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/renovate.json b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/renovate.json
new file mode 100644
index 000000000..4400fd9b2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/datachannel/renovate.json
@@ -0,0 +1,15 @@
+{
+  "extends": [
+    "config:base"
+  ],
+  "postUpdateOptions": [
+    "gomodTidy"
+  ],
+  "commitBody": "Generated by renovateBot",
+  "packageRules": [
+    {
+      "packagePatterns": ["^golang.org/x/"],
+      "schedule": ["on the first day of the month"]
+    }
+  ]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/.editorconfig b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/.editorconfig
new file mode 100644
index 000000000..d2b32061a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/.editorconfig
@@ -0,0 +1,21 @@
+# http://editorconfig.org/
+
+root = true
+
+[*]
+charset = utf-8
+insert_final_newline = true
+trim_trailing_whitespace = true
+end_of_line = lf
+
+[*.go]
+indent_style = tab
+indent_size = 4
+
+[{*.yml,*.yaml}]
+indent_style = space
+indent_size = 2
+
+# Makefiles always use tabs for indentation
+[Makefile]
+indent_style = tab
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/.gitignore b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/.gitignore
new file mode 100644
index 000000000..0e52f2f36
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/.gitignore
@@ -0,0 +1,2 @@
+vendor
+*-fuzz.zip
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/.golangci.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/.golangci.yml
new file mode 100644
index 000000000..d6162c970
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/.golangci.yml
@@ -0,0 +1,89 @@
+linters-settings:
+  govet:
+    check-shadowing: true
+  misspell:
+    locale: US
+  exhaustive:
+    default-signifies-exhaustive: true
+  gomodguard:
+    blocked:
+      modules:
+        - github.com/pkg/errors:
+            recommendations:
+            - errors
+
+linters:
+  enable:
+    - asciicheck       # Simple linter to check that your code does not contain non-ASCII identifiers
+    - bodyclose        # checks whether HTTP response body is closed successfully
+    - deadcode         # Finds unused code
+    - depguard         # Go linter that checks if package imports are in a list of acceptable packages
+    - dogsled          # Checks assignments with too many blank identifiers (e.g. x, _, _, _, := f())
+    - dupl             # Tool for code clone detection
+    - errcheck         # Errcheck is a program for checking for unchecked errors in go programs. These unchecked errors can be critical bugs in some cases
+    - exhaustive       # check exhaustiveness of enum switch statements
+    - exportloopref    # checks for pointers to enclosing loop variables
+    - gci              # Gci control golang package import order and make it always deterministic.
+    - gochecknoglobals # Checks that no globals are present in Go code
+    - gochecknoinits   # Checks that no init functions are present in Go code
+    - gocognit         # Computes and checks the cognitive complexity of functions
+    - goconst          # Finds repeated strings that could be replaced by a constant
+    - gocritic         # The most opinionated Go source code linter
+    - godox            # Tool for detection of FIXME, TODO and other comment keywords
+    - goerr113         # Golang linter to check the errors handling expressions
+    - gofmt            # Gofmt checks whether code was gofmt-ed. By default this tool runs with -s option to check for code simplification
+    - gofumpt          # Gofumpt checks whether code was gofumpt-ed.
+    - goheader         # Checks is file header matches to pattern
+    - goimports        # Goimports does everything that gofmt does. Additionally it checks unused imports
+    - golint           # Golint differs from gofmt. Gofmt reformats Go source code, whereas golint prints out style mistakes
+    - gomodguard       # Allow and block list linter for direct Go module dependencies. This is different from depguard where there are different block types for example version constraints and module recommendations.
+    - goprintffuncname # Checks that printf-like functions are named with `f` at the end
+    - gosec            # Inspects source code for security problems
+    - gosimple         # Linter for Go source code that specializes in simplifying a code
+    - govet            # Vet examines Go source code and reports suspicious constructs, such as Printf calls whose arguments do not align with the format string
+    - ineffassign      # Detects when assignments to existing variables are not used
+    - misspell         # Finds commonly misspelled English words in comments
+    - nakedret         # Finds naked returns in functions greater than a specified function length
+    - noctx            # noctx finds sending http request without context.Context
+    - scopelint        # Scopelint checks for unpinned variables in go programs
+    - staticcheck      # Staticcheck is a go vet on steroids, applying a ton of static analysis checks
+    - structcheck      # Finds unused struct fields
+    - stylecheck       # Stylecheck is a replacement for golint
+    - typecheck        # Like the front-end of a Go compiler, parses and type-checks Go code
+    - unconvert        # Remove unnecessary type conversions
+    - unparam          # Reports unused function parameters
+    - unused           # Checks Go code for unused constants, variables, functions and types
+    - varcheck         # Finds unused global variables and constants
+    - whitespace       # Tool for detection of leading and trailing whitespace
+  disable:
+    - funlen           # Tool for detection of long functions
+    - gocyclo          # Computes and checks the cyclomatic complexity of functions
+    - godot            # Check if comments end in a period
+    - gomnd            # An analyzer to detect magic numbers.
+    - lll              # Reports long lines
+    - maligned         # Tool to detect Go structs that would take less memory if their fields were sorted
+    - nestif           # Reports deeply nested if statements
+    - nlreturn         # nlreturn checks for a new line before return and branch statements to increase code clarity
+    - nolintlint       # Reports ill-formed or insufficient nolint directives
+    - prealloc         # Finds slice declarations that could potentially be preallocated
+    - rowserrcheck     # checks whether Err of rows is checked successfully
+    - sqlclosecheck    # Checks that sql.Rows and sql.Stmt are closed.
+    - testpackage      # linter that makes you use a separate _test package
+    - wsl              # Whitespace Linter - Forces you to use empty lines!
+
+issues:
+  exclude-use-default: false
+  exclude-rules:
+    # Allow complex tests, better to be self contained
+    - path: _test\.go
+      linters:
+        - gocognit
+
+    # Allow complex main function in examples
+    - path: examples
+      text: "of func `main` is high"
+      linters:
+        - gocognit
+
+run:
+  skip-dirs-use-default: false
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/LICENSE
new file mode 100644
index 000000000..ab602974d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/Makefile b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/Makefile
new file mode 100644
index 000000000..1df38b223
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/Makefile
@@ -0,0 +1,6 @@
+fuzz-build-record-layer: fuzz-prepare
+	go-fuzz-build -tags gofuzz -func FuzzRecordLayer
+fuzz-run-record-layer:
+	go-fuzz -bin dtls-fuzz.zip -workdir fuzz
+fuzz-prepare:
+	@GO111MODULE=on go mod vendor
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/README.md
new file mode 100644
index 000000000..3e4073013
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/README.md
@@ -0,0 +1,151 @@
+<h1 align="center">
+  <br>
+  Pion DTLS
+  <br>
+</h1>
+<h4 align="center">A Go implementation of DTLS</h4>
+<p align="center">
+  <a href="https://pion.ly"><img src="https://img.shields.io/badge/pion-dtls-gray.svg?longCache=true&colorB=brightgreen" alt="Pion DTLS"></a>
+  <a href="https://sourcegraph.com/github.com/pion/dtls"><img src="https://sourcegraph.com/github.com/pion/dtls/-/badge.svg" alt="Sourcegraph Widget"></a>
+  <a href="https://pion.ly/slack"><img src="https://img.shields.io/badge/join-us%20on%20slack-gray.svg?longCache=true&logo=slack&colorB=brightgreen" alt="Slack Widget"></a>
+  <br>
+  <a href="https://travis-ci.org/pion/dtls"><img src="https://travis-ci.org/pion/dtls.svg?branch=master" alt="Build Status"></a>
+  <a href="https://pkg.go.dev/github.com/pion/dtls"><img src="https://godoc.org/github.com/pion/dtls?status.svg" alt="GoDoc"></a>
+  <a href="https://codecov.io/gh/pion/dtls"><img src="https://codecov.io/gh/pion/dtls/branch/master/graph/badge.svg" alt="Coverage Status"></a>
+  <a href="https://goreportcard.com/report/github.com/pion/dtls"><img src="https://goreportcard.com/badge/github.com/pion/dtls" alt="Go Report Card"></a>
+  <a href="https://www.codacy.com/app/Sean-Der/dtls"><img src="https://api.codacy.com/project/badge/Grade/18f4aec384894e6aac0b94effe51961d" alt="Codacy Badge"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+</p>
+<br>
+
+Native [DTLS 1.2][rfc6347] implementation in the Go programming language.
+
+A long term goal is a professional security review, and maye inclusion in stdlib.
+
+[rfc6347]: https://tools.ietf.org/html/rfc6347
+
+### Goals/Progress
+This will only be targeting DTLS 1.2, and the most modern/common cipher suites.
+We would love contributes that fall under the 'Planned Features' and fixing any bugs!
+
+#### Current features
+* DTLS 1.2 Client/Server
+* Key Exchange via ECDHE(curve25519, nistp256, nistp384) and PSK
+* Packet loss and re-ordering is handled during handshaking
+* Key export ([RFC 5705][rfc5705])
+* Serialization and Resumption of sessions
+* Extended Master Secret extension ([RFC 7627][rfc7627])
+
+[rfc5705]: https://tools.ietf.org/html/rfc5705
+[rfc7627]: https://tools.ietf.org/html/rfc7627
+
+#### Supported ciphers
+
+##### ECDHE
+* TLS_ECDHE_ECDSA_WITH_AES_128_CCM ([RFC 6655][rfc6655])
+* TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8 ([RFC 6655][rfc6655])
+* TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 ([RFC 5289][rfc5289])
+* TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ([RFC 5289][rfc5289])
+* TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA ([RFC 8422][rfc8422])
+* TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA ([RFC 8422][rfc8422])
+
+##### PSK
+* TLS_PSK_WITH_AES_128_CCM ([RFC 6655][rfc6655])
+* TLS_PSK_WITH_AES_128_CCM_8 ([RFC 6655][rfc6655])
+* TLS_PSK_WITH_AES_128_GCM_SHA256 ([RFC 5487][rfc5487])
+
+[rfc5289]: https://tools.ietf.org/html/rfc5289
+[rfc8422]: https://tools.ietf.org/html/rfc8422
+[rfc6655]: https://tools.ietf.org/html/rfc6655
+[rfc5487]: https://tools.ietf.org/html/rfc5487
+
+#### Planned Features
+* Chacha20Poly1305
+
+#### Excluded Features
+* DTLS 1.0
+* Renegotiation
+* Compression
+
+### Using
+
+This library needs at least Go 1.13, and you should have [Go modules
+enabled](https://github.com/golang/go/wiki/Modules).
+
+#### Pion DTLS
+For a DTLS 1.2 Server that listens on 127.0.0.1:4444
+```sh
+go run examples/listen/selfsign/main.go
+```
+
+For a DTLS 1.2 Client that connects to 127.0.0.1:4444
+```sh
+go run examples/dial/selfsign/main.go
+```
+
+#### OpenSSL
+Pion DTLS can connect to itself and OpenSSL.
+```
+  // Generate a certificate
+  openssl ecparam -out key.pem -name prime256v1 -genkey
+  openssl req -new -sha256 -key key.pem -out server.csr
+  openssl x509 -req -sha256 -days 365 -in server.csr -signkey key.pem -out cert.pem
+
+  // Use with examples/dial/selfsign/main.go
+  openssl s_server -dtls1_2 -cert cert.pem -key key.pem -accept 4444
+
+  // Use with examples/listen/selfsign/main.go
+  openssl s_client -dtls1_2 -connect 127.0.0.1:4444 -debug -cert cert.pem -key key.pem
+```
+
+### Using with PSK
+Pion DTLS also comes with examples that do key exchange via PSK
+
+
+#### Pion DTLS
+```sh
+go run examples/listen/psk/main.go
+```
+
+```sh
+go run examples/dial/psk/main.go
+```
+
+#### OpenSSL
+```
+  // Use with examples/dial/psk/main.go
+  openssl s_server -dtls1_2 -accept 4444 -nocert -psk abc123 -cipher PSK-AES128-CCM8
+
+  // Use with examples/listen/psk/main.go
+  openssl s_client -dtls1_2 -connect 127.0.0.1:4444 -psk abc123 -cipher PSK-AES128-CCM8
+```
+
+### Contributing
+Check out the **[contributing wiki](https://github.com/pion/webrtc/wiki/Contributing)** to join the group of amazing people making this project possible:
+
+* [Sean DuBois](https://github.com/Sean-Der) - *Original Author*
+* [Michiel De Backker](https://github.com/backkem) - *Public API*
+* [Chris Hiszpanski](https://github.com/thinkski) - *Support Signature Algorithms Extension*
+* [Iñigo Garcia Olaizola](https://github.com/igolaizola) - *Serialization & resumption, cert verification, E2E*
+* [Daniele Sluijters](https://github.com/daenney) - *AES-CCM support*
+* [Jin Lei](https://github.com/jinleileiking) - *Logging*
+* [Hugo Arregui](https://github.com/hugoArregui)
+* [Lander Noterman](https://github.com/LanderN)
+* [Aleksandr Razumov](https://github.com/ernado) - *Fuzzing*
+* [Ryan Gordon](https://github.com/ryangordon)
+* [Stefan Tatschner](https://rumpelsepp.org/contact.html)
+* [Hayden James](https://github.com/hjames9)
+* [Jozef Kralik](https://github.com/jkralik)
+* [Robert Eperjesi](https://github.com/epes)
+* [Atsushi Watanabe](https://github.com/at-wat)
+* [Julien Salleyron](https://github.com/juliens) - *Server Name Indication*
+* [Jeroen de Bruijn](https://github.com/vidavidorra)
+* [bjdgyc](https://github.com/bjdgyc)
+* [Jeffrey Stoke (Jeff Ctor)](https://github.com/jeffreystoke) - *Fragmentbuffer Fix*
+* [Frank Olbricht](https://github.com/folbricht)
+* [ZHENK](https://github.com/scorpionknifes)
+* [Carson Hoffman](https://github.com/CarsonHoffman)
+* [Vadim Filimonov](https://github.com/fffilimonov)
+
+### License
+MIT License - see [LICENSE](LICENSE) for full text
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/alert.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/alert.go
new file mode 100644
index 000000000..b747016b5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/alert.go
@@ -0,0 +1,145 @@
+package dtls
+
+import "fmt"
+
+type alertLevel byte
+
+const (
+	alertLevelWarning alertLevel = 1
+	alertLevelFatal   alertLevel = 2
+)
+
+func (a alertLevel) String() string {
+	switch a {
+	case alertLevelWarning:
+		return "LevelWarning"
+	case alertLevelFatal:
+		return "LevelFatal"
+	default:
+		return "Invalid alert level"
+	}
+}
+
+type alertDescription byte
+
+const (
+	alertCloseNotify            alertDescription = 0
+	alertUnexpectedMessage      alertDescription = 10
+	alertBadRecordMac           alertDescription = 20
+	alertDecryptionFailed       alertDescription = 21
+	alertRecordOverflow         alertDescription = 22
+	alertDecompressionFailure   alertDescription = 30
+	alertHandshakeFailure       alertDescription = 40
+	alertNoCertificate          alertDescription = 41
+	alertBadCertificate         alertDescription = 42
+	alertUnsupportedCertificate alertDescription = 43
+	alertCertificateRevoked     alertDescription = 44
+	alertCertificateExpired     alertDescription = 45
+	alertCertificateUnknown     alertDescription = 46
+	alertIllegalParameter       alertDescription = 47
+	alertUnknownCA              alertDescription = 48
+	alertAccessDenied           alertDescription = 49
+	alertDecodeError            alertDescription = 50
+	alertDecryptError           alertDescription = 51
+	alertExportRestriction      alertDescription = 60
+	alertProtocolVersion        alertDescription = 70
+	alertInsufficientSecurity   alertDescription = 71
+	alertInternalError          alertDescription = 80
+	alertUserCanceled           alertDescription = 90
+	alertNoRenegotiation        alertDescription = 100
+	alertUnsupportedExtension   alertDescription = 110
+)
+
+func (a alertDescription) String() string {
+	switch a {
+	case alertCloseNotify:
+		return "CloseNotify"
+	case alertUnexpectedMessage:
+		return "UnexpectedMessage"
+	case alertBadRecordMac:
+		return "BadRecordMac"
+	case alertDecryptionFailed:
+		return "DecryptionFailed"
+	case alertRecordOverflow:
+		return "RecordOverflow"
+	case alertDecompressionFailure:
+		return "DecompressionFailure"
+	case alertHandshakeFailure:
+		return "HandshakeFailure"
+	case alertNoCertificate:
+		return "NoCertificate"
+	case alertBadCertificate:
+		return "BadCertificate"
+	case alertUnsupportedCertificate:
+		return "UnsupportedCertificate"
+	case alertCertificateRevoked:
+		return "CertificateRevoked"
+	case alertCertificateExpired:
+		return "CertificateExpired"
+	case alertCertificateUnknown:
+		return "CertificateUnknown"
+	case alertIllegalParameter:
+		return "IllegalParameter"
+	case alertUnknownCA:
+		return "UnknownCA"
+	case alertAccessDenied:
+		return "AccessDenied"
+	case alertDecodeError:
+		return "DecodeError"
+	case alertDecryptError:
+		return "DecryptError"
+	case alertExportRestriction:
+		return "ExportRestriction"
+	case alertProtocolVersion:
+		return "ProtocolVersion"
+	case alertInsufficientSecurity:
+		return "InsufficientSecurity"
+	case alertInternalError:
+		return "InternalError"
+	case alertUserCanceled:
+		return "UserCanceled"
+	case alertNoRenegotiation:
+		return "NoRenegotiation"
+	case alertUnsupportedExtension:
+		return "UnsupportedExtension"
+	default:
+		return "Invalid alert description"
+	}
+}
+
+// One of the content types supported by the TLS record layer is the
+// alert type.  Alert messages convey the severity of the message
+// (warning or fatal) and a description of the alert.  Alert messages
+// with a level of fatal result in the immediate termination of the
+// connection.  In this case, other connections corresponding to the
+// session may continue, but the session identifier MUST be invalidated,
+// preventing the failed session from being used to establish new
+// connections.  Like other messages, alert messages are encrypted and
+// compressed, as specified by the current connection state.
+// https://tools.ietf.org/html/rfc5246#section-7.2
+type alert struct {
+	alertLevel       alertLevel
+	alertDescription alertDescription
+}
+
+func (a alert) contentType() contentType {
+	return contentTypeAlert
+}
+
+func (a *alert) Marshal() ([]byte, error) {
+	return []byte{byte(a.alertLevel), byte(a.alertDescription)}, nil
+}
+
+func (a *alert) Unmarshal(data []byte) error {
+	if len(data) != 2 {
+		return errBufferTooSmall
+	}
+
+	a.alertLevel = alertLevel(data[0])
+	a.alertDescription = alertDescription(data[1])
+	return nil
+}
+
+func (a *alert) String() string {
+	return fmt.Sprintf("Alert %s: %s", a.alertLevel, a.alertDescription)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/application_data.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/application_data.go
new file mode 100644
index 000000000..679a10393
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/application_data.go
@@ -0,0 +1,23 @@
+package dtls
+
+// Application data messages are carried by the record layer and are
+// fragmented, compressed, and encrypted based on the current connection
+// state.  The messages are treated as transparent data to the record
+// layer.
+// https://tools.ietf.org/html/rfc5246#section-10
+type applicationData struct {
+	data []byte
+}
+
+func (a applicationData) contentType() contentType {
+	return contentTypeApplicationData
+}
+
+func (a *applicationData) Marshal() ([]byte, error) {
+	return append([]byte{}, a.data...), nil
+}
+
+func (a *applicationData) Unmarshal(data []byte) error {
+	a.data = append([]byte{}, data...)
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/certificate.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/certificate.go
new file mode 100644
index 000000000..c99e1c93d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/certificate.go
@@ -0,0 +1,67 @@
+package dtls
+
+import (
+	"crypto/tls"
+	"crypto/x509"
+	"strings"
+)
+
+func (c *handshakeConfig) getCertificate(serverName string) (*tls.Certificate, error) {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+
+	if c.nameToCertificate == nil {
+		nameToCertificate := make(map[string]*tls.Certificate)
+		for i := range c.localCertificates {
+			cert := &c.localCertificates[i]
+			x509Cert := cert.Leaf
+			if x509Cert == nil {
+				var parseErr error
+				x509Cert, parseErr = x509.ParseCertificate(cert.Certificate[0])
+				if parseErr != nil {
+					continue
+				}
+			}
+			if len(x509Cert.Subject.CommonName) > 0 {
+				nameToCertificate[strings.ToLower(x509Cert.Subject.CommonName)] = cert
+			}
+			for _, san := range x509Cert.DNSNames {
+				nameToCertificate[strings.ToLower(san)] = cert
+			}
+		}
+		c.nameToCertificate = nameToCertificate
+	}
+
+	if len(c.localCertificates) == 0 {
+		return nil, errNoCertificates
+	}
+
+	if len(c.localCertificates) == 1 {
+		// There's only one choice, so no point doing any work.
+		return &c.localCertificates[0], nil
+	}
+
+	if len(serverName) == 0 {
+		return &c.localCertificates[0], nil
+	}
+
+	name := strings.TrimRight(strings.ToLower(serverName), ".")
+
+	if cert, ok := c.nameToCertificate[name]; ok {
+		return cert, nil
+	}
+
+	// try replacing labels in the name with wildcards until we get a
+	// match.
+	labels := strings.Split(name, ".")
+	for i := range labels {
+		labels[i] = "*"
+		candidate := strings.Join(labels, ".")
+		if cert, ok := c.nameToCertificate[candidate]; ok {
+			return cert, nil
+		}
+	}
+
+	// If nothing matches, return the first certificate.
+	return &c.localCertificates[0], nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/change_cipher_spec.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/change_cipher_spec.go
new file mode 100644
index 000000000..f072d7f9e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/change_cipher_spec.go
@@ -0,0 +1,25 @@
+package dtls
+
+// The change cipher spec protocol exists to signal transitions in
+// ciphering strategies.  The protocol consists of a single message,
+// which is encrypted and compressed under the current (not the pending)
+// connection state.  The message consists of a single byte of value 1.
+// https://tools.ietf.org/html/rfc5246#section-7.1
+type changeCipherSpec struct {
+}
+
+func (c changeCipherSpec) contentType() contentType {
+	return contentTypeChangeCipherSpec
+}
+
+func (c *changeCipherSpec) Marshal() ([]byte, error) {
+	return []byte{0x01}, nil
+}
+
+func (c *changeCipherSpec) Unmarshal(data []byte) error {
+	if len(data) == 1 && data[0] == 0x01 {
+		return nil
+	}
+
+	return errInvalidCipherSpec
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite.go
new file mode 100644
index 000000000..073d2ba64
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite.go
@@ -0,0 +1,206 @@
+package dtls
+
+import (
+	"encoding/binary"
+	"fmt"
+	"hash"
+)
+
+// CipherSuiteID is an ID for our supported CipherSuites
+type CipherSuiteID uint16
+
+// Supported Cipher Suites
+const (
+	// AES-128-CCM
+	TLS_ECDHE_ECDSA_WITH_AES_128_CCM   CipherSuiteID = 0xc0ac //nolint:golint,stylecheck
+	TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8 CipherSuiteID = 0xc0ae //nolint:golint,stylecheck
+
+	// AES-128-GCM-SHA256
+	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 CipherSuiteID = 0xc02b //nolint:golint,stylecheck
+	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256   CipherSuiteID = 0xc02f //nolint:golint,stylecheck
+
+	// AES-256-CBC-SHA
+	TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA CipherSuiteID = 0xc00a //nolint:golint,stylecheck
+	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA   CipherSuiteID = 0xc014 //nolint:golint,stylecheck
+
+	TLS_PSK_WITH_AES_128_CCM        CipherSuiteID = 0xc0a4 //nolint:golint,stylecheck
+	TLS_PSK_WITH_AES_128_CCM_8      CipherSuiteID = 0xc0a8 //nolint:golint,stylecheck
+	TLS_PSK_WITH_AES_128_GCM_SHA256 CipherSuiteID = 0x00a8 //nolint:golint,stylecheck
+)
+
+var _ = allCipherSuites() // Necessary until this function isn't only used by Go 1.14
+
+func (c CipherSuiteID) String() string {
+	switch c {
+	case TLS_ECDHE_ECDSA_WITH_AES_128_CCM:
+		return "TLS_ECDHE_ECDSA_WITH_AES_128_CCM"
+	case TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8:
+		return "TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8"
+	case TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:
+		return "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
+	case TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256:
+		return "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
+	case TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA:
+		return "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"
+	case TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA:
+		return "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
+	case TLS_PSK_WITH_AES_128_CCM:
+		return "TLS_PSK_WITH_AES_128_CCM"
+	case TLS_PSK_WITH_AES_128_CCM_8:
+		return "TLS_PSK_WITH_AES_128_CCM_8"
+	case TLS_PSK_WITH_AES_128_GCM_SHA256:
+		return "TLS_PSK_WITH_AES_128_GCM_SHA256"
+	default:
+		return fmt.Sprintf("unknown(%v)", uint16(c))
+	}
+}
+
+type cipherSuite interface {
+	String() string
+	ID() CipherSuiteID
+	certificateType() clientCertificateType
+	hashFunc() func() hash.Hash
+	isPSK() bool
+	isInitialized() bool
+
+	// Generate the internal encryption state
+	init(masterSecret, clientRandom, serverRandom []byte, isClient bool) error
+
+	encrypt(pkt *recordLayer, raw []byte) ([]byte, error)
+	decrypt(in []byte) ([]byte, error)
+}
+
+// CipherSuiteName provides the same functionality as tls.CipherSuiteName
+// that appeared first in Go 1.14.
+//
+// Our implementation differs slightly in that it takes in a CiperSuiteID,
+// like the rest of our library, instead of a uint16 like crypto/tls.
+func CipherSuiteName(id CipherSuiteID) string {
+	suite := cipherSuiteForID(id)
+	if suite != nil {
+		return suite.String()
+	}
+	return fmt.Sprintf("0x%04X", uint16(id))
+}
+
+// Taken from https://www.iana.org/assignments/tls-parameters/tls-parameters.xml
+// A cipherSuite is a specific combination of key agreement, cipher and MAC
+// function.
+func cipherSuiteForID(id CipherSuiteID) cipherSuite {
+	switch id {
+	case TLS_ECDHE_ECDSA_WITH_AES_128_CCM:
+		return newCipherSuiteTLSEcdheEcdsaWithAes128Ccm()
+	case TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8:
+		return newCipherSuiteTLSEcdheEcdsaWithAes128Ccm8()
+	case TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:
+		return &cipherSuiteTLSEcdheEcdsaWithAes128GcmSha256{}
+	case TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256:
+		return &cipherSuiteTLSEcdheRsaWithAes128GcmSha256{}
+	case TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA:
+		return &cipherSuiteTLSEcdheEcdsaWithAes256CbcSha{}
+	case TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA:
+		return &cipherSuiteTLSEcdheRsaWithAes256CbcSha{}
+	case TLS_PSK_WITH_AES_128_CCM:
+		return newCipherSuiteTLSPskWithAes128Ccm()
+	case TLS_PSK_WITH_AES_128_CCM_8:
+		return newCipherSuiteTLSPskWithAes128Ccm8()
+	case TLS_PSK_WITH_AES_128_GCM_SHA256:
+		return &cipherSuiteTLSPskWithAes128GcmSha256{}
+	}
+	return nil
+}
+
+// CipherSuites we support in order of preference
+func defaultCipherSuites() []cipherSuite {
+	return []cipherSuite{
+		&cipherSuiteTLSEcdheEcdsaWithAes128GcmSha256{},
+		&cipherSuiteTLSEcdheRsaWithAes128GcmSha256{},
+		&cipherSuiteTLSEcdheEcdsaWithAes256CbcSha{},
+		&cipherSuiteTLSEcdheRsaWithAes256CbcSha{},
+	}
+}
+
+func allCipherSuites() []cipherSuite {
+	return []cipherSuite{
+		newCipherSuiteTLSEcdheEcdsaWithAes128Ccm(),
+		newCipherSuiteTLSEcdheEcdsaWithAes128Ccm8(),
+		&cipherSuiteTLSEcdheEcdsaWithAes128GcmSha256{},
+		&cipherSuiteTLSEcdheRsaWithAes128GcmSha256{},
+		&cipherSuiteTLSEcdheEcdsaWithAes256CbcSha{},
+		&cipherSuiteTLSEcdheRsaWithAes256CbcSha{},
+		newCipherSuiteTLSPskWithAes128Ccm(),
+		newCipherSuiteTLSPskWithAes128Ccm8(),
+		&cipherSuiteTLSPskWithAes128GcmSha256{},
+	}
+}
+
+func decodeCipherSuites(buf []byte) ([]cipherSuite, error) {
+	if len(buf) < 2 {
+		return nil, errDTLSPacketInvalidLength
+	}
+	cipherSuitesCount := int(binary.BigEndian.Uint16(buf[0:])) / 2
+	rtrn := []cipherSuite{}
+	for i := 0; i < cipherSuitesCount; i++ {
+		if len(buf) < (i*2 + 4) {
+			return nil, errBufferTooSmall
+		}
+		id := CipherSuiteID(binary.BigEndian.Uint16(buf[(i*2)+2:]))
+		if c := cipherSuiteForID(id); c != nil {
+			rtrn = append(rtrn, c)
+		}
+	}
+	return rtrn, nil
+}
+
+func encodeCipherSuites(cipherSuites []cipherSuite) []byte {
+	out := []byte{0x00, 0x00}
+	binary.BigEndian.PutUint16(out[len(out)-2:], uint16(len(cipherSuites)*2))
+	for _, c := range cipherSuites {
+		out = append(out, []byte{0x00, 0x00}...)
+		binary.BigEndian.PutUint16(out[len(out)-2:], uint16(c.ID()))
+	}
+	return out
+}
+
+func parseCipherSuites(userSelectedSuites []CipherSuiteID, excludePSK, excludeNonPSK bool) ([]cipherSuite, error) {
+	cipherSuitesForIDs := func(ids []CipherSuiteID) ([]cipherSuite, error) {
+		cipherSuites := []cipherSuite{}
+		for _, id := range ids {
+			c := cipherSuiteForID(id)
+			if c == nil {
+				return nil, &invalidCipherSuite{id}
+			}
+			cipherSuites = append(cipherSuites, c)
+		}
+		return cipherSuites, nil
+	}
+
+	var (
+		cipherSuites []cipherSuite
+		err          error
+		i            int
+	)
+	if len(userSelectedSuites) != 0 {
+		cipherSuites, err = cipherSuitesForIDs(userSelectedSuites)
+		if err != nil {
+			return nil, err
+		}
+	} else {
+		cipherSuites = defaultCipherSuites()
+	}
+
+	for _, c := range cipherSuites {
+		if excludePSK && c.isPSK() || excludeNonPSK && !c.isPSK() {
+			continue
+		}
+		cipherSuites[i] = c
+		i++
+	}
+
+	cipherSuites = cipherSuites[:i]
+	if len(cipherSuites) == 0 {
+		return nil, errNoAvailableCipherSuites
+	}
+
+	return cipherSuites, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_aes_128_ccm.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_aes_128_ccm.go
new file mode 100644
index 000000000..4f7c8cead
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_aes_128_ccm.go
@@ -0,0 +1,93 @@
+package dtls
+
+import (
+	"crypto/sha256"
+	"errors"
+	"fmt"
+	"hash"
+	"sync/atomic"
+)
+
+type cipherSuiteAes128Ccm struct {
+	ccm                   atomic.Value // *cryptoCCM
+	clientCertificateType clientCertificateType
+	id                    CipherSuiteID
+	psk                   bool
+	cryptoCCMTagLen       cryptoCCMTagLen
+}
+
+func newCipherSuiteAes128Ccm(clientCertificateType clientCertificateType, id CipherSuiteID, psk bool, cryptoCCMTagLen cryptoCCMTagLen) *cipherSuiteAes128Ccm {
+	return &cipherSuiteAes128Ccm{
+		clientCertificateType: clientCertificateType,
+		id:                    id,
+		psk:                   psk,
+		cryptoCCMTagLen:       cryptoCCMTagLen,
+	}
+}
+
+func (c *cipherSuiteAes128Ccm) certificateType() clientCertificateType {
+	return c.clientCertificateType
+}
+
+func (c *cipherSuiteAes128Ccm) ID() CipherSuiteID {
+	return c.id
+}
+
+func (c *cipherSuiteAes128Ccm) String() string {
+	return c.id.String()
+}
+
+func (c *cipherSuiteAes128Ccm) hashFunc() func() hash.Hash {
+	return sha256.New
+}
+
+func (c *cipherSuiteAes128Ccm) isPSK() bool {
+	return c.psk
+}
+
+func (c *cipherSuiteAes128Ccm) isInitialized() bool {
+	return c.ccm.Load() != nil
+}
+
+func (c *cipherSuiteAes128Ccm) init(masterSecret, clientRandom, serverRandom []byte, isClient bool) error {
+	const (
+		prfMacLen = 0
+		prfKeyLen = 16
+		prfIvLen  = 4
+	)
+
+	keys, err := prfEncryptionKeys(masterSecret, clientRandom, serverRandom, prfMacLen, prfKeyLen, prfIvLen, c.hashFunc())
+	if err != nil {
+		return err
+	}
+
+	var ccm *cryptoCCM
+	if isClient {
+		ccm, err = newCryptoCCM(c.cryptoCCMTagLen, keys.clientWriteKey, keys.clientWriteIV, keys.serverWriteKey, keys.serverWriteIV)
+	} else {
+		ccm, err = newCryptoCCM(c.cryptoCCMTagLen, keys.serverWriteKey, keys.serverWriteIV, keys.clientWriteKey, keys.clientWriteIV)
+	}
+	c.ccm.Store(ccm)
+
+	return err
+}
+
+var errCipherSuiteNotInit = errors.New("CipherSuite has not been initialized")
+
+func (c *cipherSuiteAes128Ccm) encrypt(pkt *recordLayer, raw []byte) ([]byte, error) {
+	ccm := c.ccm.Load()
+	if ccm == nil { // !c.isInitialized()
+		return nil, fmt.Errorf("%w, unable to encrypt", errCipherSuiteNotInit)
+	}
+
+	return ccm.(*cryptoCCM).encrypt(pkt, raw)
+}
+
+func (c *cipherSuiteAes128Ccm) decrypt(raw []byte) ([]byte, error) {
+	ccm := c.ccm.Load()
+	if ccm == nil { // !c.isInitialized()
+		return nil, fmt.Errorf("%w, unable to decrypt", errCipherSuiteNotInit)
+	}
+
+	return ccm.(*cryptoCCM).decrypt(raw)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_go114.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_go114.go
new file mode 100644
index 000000000..54824db01
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_go114.go
@@ -0,0 +1,36 @@
+// +build go1.14
+
+package dtls
+
+import (
+	"crypto/tls"
+)
+
+// Convert from our cipherSuite interface to a tls.CipherSuite struct
+func toTLSCipherSuite(c cipherSuite) *tls.CipherSuite {
+	return &tls.CipherSuite{
+		ID:                uint16(c.ID()),
+		Name:              c.String(),
+		SupportedVersions: []uint16{VersionDTLS12},
+		Insecure:          false,
+	}
+}
+
+// CipherSuites returns a list of cipher suites currently implemented by this
+// package, excluding those with security issues, which are returned by
+// InsecureCipherSuites.
+func CipherSuites() []*tls.CipherSuite {
+	suites := allCipherSuites()
+	res := make([]*tls.CipherSuite, len(suites))
+	for i, c := range suites {
+		res[i] = toTLSCipherSuite(c)
+	}
+	return res
+}
+
+// InsecureCipherSuites returns a list of cipher suites currently implemented by
+// this package and which have security issues.
+func InsecureCipherSuites() []*tls.CipherSuite {
+	var res []*tls.CipherSuite
+	return res
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_ecdsa_with_aes_128_ccm.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_ecdsa_with_aes_128_ccm.go
new file mode 100644
index 000000000..4aa8f3bc7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_ecdsa_with_aes_128_ccm.go
@@ -0,0 +1,5 @@
+package dtls
+
+func newCipherSuiteTLSEcdheEcdsaWithAes128Ccm() *cipherSuiteAes128Ccm {
+	return newCipherSuiteAes128Ccm(clientCertificateTypeECDSASign, TLS_ECDHE_ECDSA_WITH_AES_128_CCM, false, cryptoCCMTagLength)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_ecdsa_with_aes_128_ccm8.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_ecdsa_with_aes_128_ccm8.go
new file mode 100644
index 000000000..58bbe137f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_ecdsa_with_aes_128_ccm8.go
@@ -0,0 +1,5 @@
+package dtls
+
+func newCipherSuiteTLSEcdheEcdsaWithAes128Ccm8() *cipherSuiteAes128Ccm {
+	return newCipherSuiteAes128Ccm(clientCertificateTypeECDSASign, TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8, false, cryptoCCM8TagLength)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_ecdsa_with_aes_128_gcm_sha256.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_ecdsa_with_aes_128_gcm_sha256.go
new file mode 100644
index 000000000..d974f14c3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_ecdsa_with_aes_128_gcm_sha256.go
@@ -0,0 +1,77 @@
+package dtls
+
+import (
+	"crypto/sha256"
+	"fmt"
+	"hash"
+	"sync/atomic"
+)
+
+type cipherSuiteTLSEcdheEcdsaWithAes128GcmSha256 struct {
+	gcm atomic.Value // *cryptoGCM
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes128GcmSha256) certificateType() clientCertificateType {
+	return clientCertificateTypeECDSASign
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes128GcmSha256) ID() CipherSuiteID {
+	return TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes128GcmSha256) String() string {
+	return "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes128GcmSha256) hashFunc() func() hash.Hash {
+	return sha256.New
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes128GcmSha256) isPSK() bool {
+	return false
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes128GcmSha256) isInitialized() bool {
+	return c.gcm.Load() != nil
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes128GcmSha256) init(masterSecret, clientRandom, serverRandom []byte, isClient bool) error {
+	const (
+		prfMacLen = 0
+		prfKeyLen = 16
+		prfIvLen  = 4
+	)
+
+	keys, err := prfEncryptionKeys(masterSecret, clientRandom, serverRandom, prfMacLen, prfKeyLen, prfIvLen, c.hashFunc())
+	if err != nil {
+		return err
+	}
+
+	var gcm *cryptoGCM
+	if isClient {
+		gcm, err = newCryptoGCM(keys.clientWriteKey, keys.clientWriteIV, keys.serverWriteKey, keys.serverWriteIV)
+	} else {
+		gcm, err = newCryptoGCM(keys.serverWriteKey, keys.serverWriteIV, keys.clientWriteKey, keys.clientWriteIV)
+	}
+	c.gcm.Store(gcm)
+
+	return err
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes128GcmSha256) encrypt(pkt *recordLayer, raw []byte) ([]byte, error) {
+	gcm := c.gcm.Load()
+	if gcm == nil { // !c.isInitialized()
+		return nil, fmt.Errorf("%w, unable to encrypt", errCipherSuiteNotInit)
+	}
+
+	return gcm.(*cryptoGCM).encrypt(pkt, raw)
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes128GcmSha256) decrypt(raw []byte) ([]byte, error) {
+	gcm := c.gcm.Load()
+	if gcm == nil { // !c.isInitialized()
+		return nil, fmt.Errorf("%w, unable to decrypt", errCipherSuiteNotInit)
+	}
+
+	return gcm.(*cryptoGCM).decrypt(raw)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_ecdsa_with_aes_256_cbc_sha.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_ecdsa_with_aes_256_cbc_sha.go
new file mode 100644
index 000000000..56543a542
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_ecdsa_with_aes_256_cbc_sha.go
@@ -0,0 +1,83 @@
+package dtls
+
+import (
+	"crypto/sha256"
+	"fmt"
+	"hash"
+	"sync/atomic"
+)
+
+type cipherSuiteTLSEcdheEcdsaWithAes256CbcSha struct {
+	cbc atomic.Value // *cryptoCBC
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes256CbcSha) certificateType() clientCertificateType {
+	return clientCertificateTypeECDSASign
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes256CbcSha) ID() CipherSuiteID {
+	return TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes256CbcSha) String() string {
+	return "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes256CbcSha) hashFunc() func() hash.Hash {
+	return sha256.New
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes256CbcSha) isPSK() bool {
+	return false
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes256CbcSha) isInitialized() bool {
+	return c.cbc.Load() != nil
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes256CbcSha) init(masterSecret, clientRandom, serverRandom []byte, isClient bool) error {
+	const (
+		prfMacLen = 20
+		prfKeyLen = 32
+		prfIvLen  = 16
+	)
+
+	keys, err := prfEncryptionKeys(masterSecret, clientRandom, serverRandom, prfMacLen, prfKeyLen, prfIvLen, c.hashFunc())
+	if err != nil {
+		return err
+	}
+
+	var cbc *cryptoCBC
+	if isClient {
+		cbc, err = newCryptoCBC(
+			keys.clientWriteKey, keys.clientWriteIV, keys.clientMACKey,
+			keys.serverWriteKey, keys.serverWriteIV, keys.serverMACKey,
+		)
+	} else {
+		cbc, err = newCryptoCBC(
+			keys.serverWriteKey, keys.serverWriteIV, keys.serverMACKey,
+			keys.clientWriteKey, keys.clientWriteIV, keys.clientMACKey,
+		)
+	}
+	c.cbc.Store(cbc)
+
+	return err
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes256CbcSha) encrypt(pkt *recordLayer, raw []byte) ([]byte, error) {
+	cbc := c.cbc.Load()
+	if cbc == nil { // !c.isInitialized()
+		return nil, fmt.Errorf("%w, unable to encrypt", errCipherSuiteNotInit)
+	}
+
+	return cbc.(*cryptoCBC).encrypt(pkt, raw)
+}
+
+func (c *cipherSuiteTLSEcdheEcdsaWithAes256CbcSha) decrypt(raw []byte) ([]byte, error) {
+	cbc := c.cbc.Load()
+	if cbc == nil { // !c.isInitialized()
+		return nil, fmt.Errorf("%w, unable to decrypt", errCipherSuiteNotInit)
+	}
+
+	return cbc.(*cryptoCBC).decrypt(raw)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_rsa_with_aes_128_gcm_sha256.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_rsa_with_aes_128_gcm_sha256.go
new file mode 100644
index 000000000..63402de54
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_rsa_with_aes_128_gcm_sha256.go
@@ -0,0 +1,17 @@
+package dtls
+
+type cipherSuiteTLSEcdheRsaWithAes128GcmSha256 struct {
+	cipherSuiteTLSEcdheEcdsaWithAes128GcmSha256
+}
+
+func (c *cipherSuiteTLSEcdheRsaWithAes128GcmSha256) certificateType() clientCertificateType {
+	return clientCertificateTypeRSASign
+}
+
+func (c *cipherSuiteTLSEcdheRsaWithAes128GcmSha256) ID() CipherSuiteID {
+	return TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+}
+
+func (c *cipherSuiteTLSEcdheRsaWithAes128GcmSha256) String() string {
+	return "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_rsa_with_aes_256_cbc_sha.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_rsa_with_aes_256_cbc_sha.go
new file mode 100644
index 000000000..80a231f1c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_ecdhe_rsa_with_aes_256_cbc_sha.go
@@ -0,0 +1,17 @@
+package dtls
+
+type cipherSuiteTLSEcdheRsaWithAes256CbcSha struct {
+	cipherSuiteTLSEcdheEcdsaWithAes256CbcSha
+}
+
+func (c *cipherSuiteTLSEcdheRsaWithAes256CbcSha) certificateType() clientCertificateType {
+	return clientCertificateTypeRSASign
+}
+
+func (c *cipherSuiteTLSEcdheRsaWithAes256CbcSha) ID() CipherSuiteID {
+	return TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
+}
+
+func (c *cipherSuiteTLSEcdheRsaWithAes256CbcSha) String() string {
+	return "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_psk_with_aes_128_ccm.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_psk_with_aes_128_ccm.go
new file mode 100644
index 000000000..7e720360c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_psk_with_aes_128_ccm.go
@@ -0,0 +1,5 @@
+package dtls
+
+func newCipherSuiteTLSPskWithAes128Ccm() *cipherSuiteAes128Ccm {
+	return newCipherSuiteAes128Ccm(clientCertificateType(0), TLS_PSK_WITH_AES_128_CCM, true, cryptoCCMTagLength)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_psk_with_aes_128_ccm8.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_psk_with_aes_128_ccm8.go
new file mode 100644
index 000000000..a7fd07e88
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_psk_with_aes_128_ccm8.go
@@ -0,0 +1,5 @@
+package dtls
+
+func newCipherSuiteTLSPskWithAes128Ccm8() *cipherSuiteAes128Ccm {
+	return newCipherSuiteAes128Ccm(clientCertificateType(0), TLS_PSK_WITH_AES_128_CCM_8, true, cryptoCCM8TagLength)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_psk_with_aes_128_gcm_sha256.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_psk_with_aes_128_gcm_sha256.go
new file mode 100644
index 000000000..98663bd63
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/cipher_suite_tls_psk_with_aes_128_gcm_sha256.go
@@ -0,0 +1,21 @@
+package dtls
+
+type cipherSuiteTLSPskWithAes128GcmSha256 struct {
+	cipherSuiteTLSEcdheEcdsaWithAes128GcmSha256
+}
+
+func (c *cipherSuiteTLSPskWithAes128GcmSha256) certificateType() clientCertificateType {
+	return clientCertificateType(0)
+}
+
+func (c *cipherSuiteTLSPskWithAes128GcmSha256) ID() CipherSuiteID {
+	return TLS_PSK_WITH_AES_128_GCM_SHA256
+}
+
+func (c *cipherSuiteTLSPskWithAes128GcmSha256) String() string {
+	return "TLS_PSK_WITH_AES_128_GCM_SHA256"
+}
+
+func (c *cipherSuiteTLSPskWithAes128GcmSha256) isPSK() bool {
+	return true
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/client_certificate_type.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/client_certificate_type.go
new file mode 100644
index 000000000..78f6968f9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/client_certificate_type.go
@@ -0,0 +1,16 @@
+package dtls
+
+// https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-10
+type clientCertificateType byte
+
+const (
+	clientCertificateTypeRSASign   clientCertificateType = 1
+	clientCertificateTypeECDSASign clientCertificateType = 64
+)
+
+func clientCertificateTypes() map[clientCertificateType]bool {
+	return map[clientCertificateType]bool{
+		clientCertificateTypeRSASign:   true,
+		clientCertificateTypeECDSASign: true,
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/codecov.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/codecov.yml
new file mode 100644
index 000000000..085200a48
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/codecov.yml
@@ -0,0 +1,20 @@
+#
+# DO NOT EDIT THIS FILE
+#
+# It is automatically copied from https://github.com/pion/.goassets repository.
+#
+
+coverage:
+  status:
+    project:
+      default:
+        # Allow decreasing 2% of total coverage to avoid noise.
+        threshold: 2%
+    patch:
+      default:
+        target: 70%
+        only_pulls: true
+
+ignore:
+  - "examples/*"
+  - "examples/**/*"
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/compression_method.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/compression_method.go
new file mode 100644
index 000000000..47273868c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/compression_method.go
@@ -0,0 +1,49 @@
+package dtls
+
+type compressionMethodID byte
+
+const (
+	compressionMethodNull compressionMethodID = 0
+)
+
+type compressionMethod struct {
+	id compressionMethodID
+}
+
+func compressionMethods() map[compressionMethodID]*compressionMethod {
+	return map[compressionMethodID]*compressionMethod{
+		compressionMethodNull: {id: compressionMethodNull},
+	}
+}
+
+func defaultCompressionMethods() []*compressionMethod {
+	return []*compressionMethod{
+		compressionMethods()[compressionMethodNull],
+	}
+}
+
+func decodeCompressionMethods(buf []byte) ([]*compressionMethod, error) {
+	if len(buf) < 1 {
+		return nil, errDTLSPacketInvalidLength
+	}
+	compressionMethodsCount := int(buf[0])
+	c := []*compressionMethod{}
+	for i := 0; i < compressionMethodsCount; i++ {
+		if len(buf) <= i+1 {
+			return nil, errBufferTooSmall
+		}
+		id := compressionMethodID(buf[i+1])
+		if compressionMethod, ok := compressionMethods()[id]; ok {
+			c = append(c, compressionMethod)
+		}
+	}
+	return c, nil
+}
+
+func encodeCompressionMethods(c []*compressionMethod) []byte {
+	out := []byte{byte(len(c))}
+	for i := len(c); i > 0; i-- {
+		out = append(out, byte(c[i-1].id))
+	}
+	return out
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/config.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/config.go
new file mode 100644
index 000000000..26eb62a32
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/config.go
@@ -0,0 +1,179 @@
+package dtls
+
+import (
+	"context"
+	"crypto/ecdsa"
+	"crypto/ed25519"
+	"crypto/tls"
+	"crypto/x509"
+	"time"
+
+	"github.com/pion/logging"
+)
+
+// Config is used to configure a DTLS client or server.
+// After a Config is passed to a DTLS function it must not be modified.
+type Config struct {
+	// Certificates contains certificate chain to present to the other side of the connection.
+	// Server MUST set this if PSK is non-nil
+	// client SHOULD sets this so CertificateRequests can be handled if PSK is non-nil
+	Certificates []tls.Certificate
+
+	// CipherSuites is a list of supported cipher suites.
+	// If CipherSuites is nil, a default list is used
+	CipherSuites []CipherSuiteID
+
+	// SignatureSchemes contains the signature and hash schemes that the peer requests to verify.
+	SignatureSchemes []tls.SignatureScheme
+
+	// SRTPProtectionProfiles are the supported protection profiles
+	// Clients will send this via use_srtp and assert that the server properly responds
+	// Servers will assert that clients send one of these profiles and will respond as needed
+	SRTPProtectionProfiles []SRTPProtectionProfile
+
+	// ClientAuth determines the server's policy for
+	// TLS Client Authentication. The default is NoClientCert.
+	ClientAuth ClientAuthType
+
+	// RequireExtendedMasterSecret determines if the "Extended Master Secret" extension
+	// should be disabled, requested, or required (default requested).
+	ExtendedMasterSecret ExtendedMasterSecretType
+
+	// FlightInterval controls how often we send outbound handshake messages
+	// defaults to time.Second
+	FlightInterval time.Duration
+
+	// PSK sets the pre-shared key used by this DTLS connection
+	// If PSK is non-nil only PSK CipherSuites will be used
+	PSK             PSKCallback
+	PSKIdentityHint []byte
+
+	// InsecureSkipVerify controls whether a client verifies the
+	// server's certificate chain and host name.
+	// If InsecureSkipVerify is true, TLS accepts any certificate
+	// presented by the server and any host name in that certificate.
+	// In this mode, TLS is susceptible to man-in-the-middle attacks.
+	// This should be used only for testing.
+	InsecureSkipVerify bool
+
+	// InsecureHashes allows the use of hashing algorithms that are known
+	// to be vulnerable.
+	InsecureHashes bool
+
+	// VerifyPeerCertificate, if not nil, is called after normal
+	// certificate verification by either a client or server. It
+	// receives the certificate provided by the peer and also a flag
+	// that tells if normal verification has succeedded. If it returns a
+	// non-nil error, the handshake is aborted and that error results.
+	//
+	// If normal verification fails then the handshake will abort before
+	// considering this callback. If normal verification is disabled by
+	// setting InsecureSkipVerify, or (for a server) when ClientAuth is
+	// RequestClientCert or RequireAnyClientCert, then this callback will
+	// be considered but the verifiedChains will always be nil.
+	VerifyPeerCertificate func(rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error
+
+	// RootCAs defines the set of root certificate authorities
+	// that one peer uses when verifying the other peer's certificates.
+	// If RootCAs is nil, TLS uses the host's root CA set.
+	RootCAs *x509.CertPool
+
+	// ClientCAs defines the set of root certificate authorities
+	// that servers use if required to verify a client certificate
+	// by the policy in ClientAuth.
+	ClientCAs *x509.CertPool
+
+	// ServerName is used to verify the hostname on the returned
+	// certificates unless InsecureSkipVerify is given.
+	ServerName string
+
+	LoggerFactory logging.LoggerFactory
+
+	// ConnectContextMaker is a function to make a context used in Dial(),
+	// Client(), Server(), and Accept(). If nil, the default ConnectContextMaker
+	// is used. It can be implemented as following.
+	//
+	// 	func ConnectContextMaker() (context.Context, func()) {
+	// 		return context.WithTimeout(context.Background(), 30*time.Second)
+	// 	}
+	ConnectContextMaker func() (context.Context, func())
+
+	// MTU is the length at which handshake messages will be fragmented to
+	// fit within the maximum transmission unit (default is 1200 bytes)
+	MTU int
+
+	// ReplayProtectionWindow is the size of the replay attack protection window.
+	// Duplication of the sequence number is checked in this window size.
+	// Packet with sequence number older than this value compared to the latest
+	// accepted packet will be discarded. (default is 64)
+	ReplayProtectionWindow int
+}
+
+func defaultConnectContextMaker() (context.Context, func()) {
+	return context.WithTimeout(context.Background(), 30*time.Second)
+}
+
+func (c *Config) connectContextMaker() (context.Context, func()) {
+	if c.ConnectContextMaker == nil {
+		return defaultConnectContextMaker()
+	}
+	return c.ConnectContextMaker()
+}
+
+const defaultMTU = 1200 // bytes
+
+// PSKCallback is called once we have the remote's PSKIdentityHint.
+// If the remote provided none it will be nil
+type PSKCallback func([]byte) ([]byte, error)
+
+// ClientAuthType declares the policy the server will follow for
+// TLS Client Authentication.
+type ClientAuthType int
+
+// ClientAuthType enums
+const (
+	NoClientCert ClientAuthType = iota
+	RequestClientCert
+	RequireAnyClientCert
+	VerifyClientCertIfGiven
+	RequireAndVerifyClientCert
+)
+
+// ExtendedMasterSecretType declares the policy the client and server
+// will follow for the Extended Master Secret extension
+type ExtendedMasterSecretType int
+
+// ExtendedMasterSecretType enums
+const (
+	RequestExtendedMasterSecret ExtendedMasterSecretType = iota
+	RequireExtendedMasterSecret
+	DisableExtendedMasterSecret
+)
+
+func validateConfig(config *Config) error {
+	switch {
+	case config == nil:
+		return errNoConfigProvided
+	case len(config.Certificates) > 0 && config.PSK != nil:
+		return errPSKAndCertificate
+	case config.PSKIdentityHint != nil && config.PSK == nil:
+		return errIdentityNoPSK
+	}
+
+	for _, cert := range config.Certificates {
+		if cert.Certificate == nil {
+			return errInvalidCertificate
+		}
+		if cert.PrivateKey != nil {
+			switch cert.PrivateKey.(type) {
+			case ed25519.PrivateKey:
+			case *ecdsa.PrivateKey:
+			default:
+				return errInvalidPrivateKey
+			}
+		}
+	}
+
+	_, err := parseCipherSuites(config.CipherSuites, config.PSK == nil, config.PSK != nil)
+	return err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/conn.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/conn.go
new file mode 100644
index 000000000..3205bbde3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/conn.go
@@ -0,0 +1,978 @@
+package dtls
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"io"
+	"net"
+	"sync"
+	"sync/atomic"
+	"time"
+
+	"github.com/pion/dtls/v2/internal/closer"
+	"github.com/pion/dtls/v2/internal/net/connctx"
+	"github.com/pion/logging"
+	"github.com/pion/transport/deadline"
+	"github.com/pion/transport/replaydetector"
+)
+
+const (
+	initialTickerInterval = time.Second
+	cookieLength          = 20
+	defaultNamedCurve     = namedCurveX25519
+	inboundBufferSize     = 8192
+	// Default replay protection window is specified by RFC 6347 Section 4.1.2.6
+	defaultReplayProtectionWindow = 64
+)
+
+var (
+	errApplicationDataEpochZero = errors.New("ApplicationData with epoch of 0")
+	errUnhandledContextType     = errors.New("unhandled contentType")
+)
+
+func invalidKeyingLabels() map[string]bool {
+	return map[string]bool{
+		"client finished": true,
+		"server finished": true,
+		"master secret":   true,
+		"key expansion":   true,
+	}
+}
+
+// Conn represents a DTLS connection
+type Conn struct {
+	lock           sync.RWMutex     // Internal lock (must not be public)
+	nextConn       connctx.ConnCtx  // Embedded Conn, typically a udpconn we read/write from
+	fragmentBuffer *fragmentBuffer  // out-of-order and missing fragment handling
+	handshakeCache *handshakeCache  // caching of handshake messages for verifyData generation
+	decrypted      chan interface{} // Decrypted Application Data or error, pull by calling `Read`
+
+	state State // Internal state
+
+	maximumTransmissionUnit int
+
+	handshakeCompletedSuccessfully atomic.Value
+
+	encryptedPackets [][]byte
+
+	connectionClosedByUser bool
+	closeLock              sync.Mutex
+	closed                 *closer.Closer
+	handshakeLoopsFinished sync.WaitGroup
+
+	readDeadline  *deadline.Deadline
+	writeDeadline *deadline.Deadline
+
+	log logging.LeveledLogger
+
+	reading               chan struct{}
+	handshakeRecv         chan chan struct{}
+	cancelHandshaker      func()
+	cancelHandshakeReader func()
+
+	fsm *handshakeFSM
+
+	replayProtectionWindow uint
+}
+
+func createConn(ctx context.Context, nextConn net.Conn, config *Config, isClient bool, initialState *State) (*Conn, error) {
+	err := validateConfig(config)
+	if err != nil {
+		return nil, err
+	}
+
+	if nextConn == nil {
+		return nil, errNilNextConn
+	}
+
+	cipherSuites, err := parseCipherSuites(config.CipherSuites, config.PSK == nil, config.PSK != nil)
+	if err != nil {
+		return nil, err
+	}
+
+	signatureSchemes, err := parseSignatureSchemes(config.SignatureSchemes, config.InsecureHashes)
+	if err != nil {
+		return nil, err
+	}
+
+	workerInterval := initialTickerInterval
+	if config.FlightInterval != 0 {
+		workerInterval = config.FlightInterval
+	}
+
+	loggerFactory := config.LoggerFactory
+	if loggerFactory == nil {
+		loggerFactory = logging.NewDefaultLoggerFactory()
+	}
+
+	logger := loggerFactory.NewLogger("dtls")
+
+	mtu := config.MTU
+	if mtu <= 0 {
+		mtu = defaultMTU
+	}
+
+	replayProtectionWindow := config.ReplayProtectionWindow
+	if replayProtectionWindow <= 0 {
+		replayProtectionWindow = defaultReplayProtectionWindow
+	}
+
+	c := &Conn{
+		nextConn:                connctx.New(nextConn),
+		fragmentBuffer:          newFragmentBuffer(),
+		handshakeCache:          newHandshakeCache(),
+		maximumTransmissionUnit: mtu,
+
+		decrypted: make(chan interface{}, 1),
+		log:       logger,
+
+		readDeadline:  deadline.New(),
+		writeDeadline: deadline.New(),
+
+		reading:          make(chan struct{}, 1),
+		handshakeRecv:    make(chan chan struct{}),
+		closed:           closer.NewCloser(),
+		cancelHandshaker: func() {},
+
+		replayProtectionWindow: uint(replayProtectionWindow),
+
+		state: State{
+			isClient: isClient,
+		},
+	}
+
+	c.setRemoteEpoch(0)
+	c.setLocalEpoch(0)
+
+	serverName := config.ServerName
+	// Use host from conn address when serverName is not provided
+	if isClient && serverName == "" && nextConn.RemoteAddr() != nil {
+		remoteAddr := nextConn.RemoteAddr().String()
+		var host string
+		host, _, err = net.SplitHostPort(remoteAddr)
+		if err != nil {
+			serverName = remoteAddr
+		} else {
+			serverName = host
+		}
+	}
+
+	hsCfg := &handshakeConfig{
+		localPSKCallback:            config.PSK,
+		localPSKIdentityHint:        config.PSKIdentityHint,
+		localCipherSuites:           cipherSuites,
+		localSignatureSchemes:       signatureSchemes,
+		extendedMasterSecret:        config.ExtendedMasterSecret,
+		localSRTPProtectionProfiles: config.SRTPProtectionProfiles,
+		serverName:                  serverName,
+		clientAuth:                  config.ClientAuth,
+		localCertificates:           config.Certificates,
+		insecureSkipVerify:          config.InsecureSkipVerify,
+		verifyPeerCertificate:       config.VerifyPeerCertificate,
+		rootCAs:                     config.RootCAs,
+		clientCAs:                   config.ClientCAs,
+		retransmitInterval:          workerInterval,
+		log:                         logger,
+		initialEpoch:                0,
+	}
+
+	var initialFlight flightVal
+	var initialFSMState handshakeState
+
+	if initialState != nil {
+		if c.state.isClient {
+			initialFlight = flight5
+		} else {
+			initialFlight = flight6
+		}
+		initialFSMState = handshakeFinished
+
+		c.state = *initialState
+	} else {
+		if c.state.isClient {
+			initialFlight = flight1
+		} else {
+			initialFlight = flight0
+		}
+		initialFSMState = handshakePreparing
+	}
+	// Do handshake
+	if err := c.handshake(ctx, hsCfg, initialFlight, initialFSMState); err != nil {
+		return nil, err
+	}
+
+	c.log.Trace("Handshake Completed")
+
+	return c, nil
+}
+
+// Dial connects to the given network address and establishes a DTLS connection on top.
+// Connection handshake will timeout using ConnectContextMaker in the Config.
+// If you want to specify the timeout duration, use DialWithContext() instead.
+func Dial(network string, raddr *net.UDPAddr, config *Config) (*Conn, error) {
+	ctx, cancel := config.connectContextMaker()
+	defer cancel()
+
+	return DialWithContext(ctx, network, raddr, config)
+}
+
+// Client establishes a DTLS connection over an existing connection.
+// Connection handshake will timeout using ConnectContextMaker in the Config.
+// If you want to specify the timeout duration, use ClientWithContext() instead.
+func Client(conn net.Conn, config *Config) (*Conn, error) {
+	ctx, cancel := config.connectContextMaker()
+	defer cancel()
+
+	return ClientWithContext(ctx, conn, config)
+}
+
+// Server listens for incoming DTLS connections.
+// Connection handshake will timeout using ConnectContextMaker in the Config.
+// If you want to specify the timeout duration, use ServerWithContext() instead.
+func Server(conn net.Conn, config *Config) (*Conn, error) {
+	ctx, cancel := config.connectContextMaker()
+	defer cancel()
+
+	return ServerWithContext(ctx, conn, config)
+}
+
+// DialWithContext connects to the given network address and establishes a DTLS connection on top.
+func DialWithContext(ctx context.Context, network string, raddr *net.UDPAddr, config *Config) (*Conn, error) {
+	pConn, err := net.DialUDP(network, nil, raddr)
+	if err != nil {
+		return nil, err
+	}
+	return ClientWithContext(ctx, pConn, config)
+}
+
+// ClientWithContext establishes a DTLS connection over an existing connection.
+func ClientWithContext(ctx context.Context, conn net.Conn, config *Config) (*Conn, error) {
+	switch {
+	case config == nil:
+		return nil, errNoConfigProvided
+	case config.PSK != nil && config.PSKIdentityHint == nil:
+		return nil, errPSKAndIdentityMustBeSetForClient
+	}
+
+	return createConn(ctx, conn, config, true, nil)
+}
+
+// ServerWithContext listens for incoming DTLS connections.
+func ServerWithContext(ctx context.Context, conn net.Conn, config *Config) (*Conn, error) {
+	switch {
+	case config == nil:
+		return nil, errNoConfigProvided
+	case config.PSK == nil && len(config.Certificates) == 0:
+		return nil, errServerMustHaveCertificate
+	}
+
+	return createConn(ctx, conn, config, false, nil)
+}
+
+// Read reads data from the connection.
+func (c *Conn) Read(p []byte) (n int, err error) {
+	if !c.isHandshakeCompletedSuccessfully() {
+		return 0, errHandshakeInProgress
+	}
+
+	select {
+	case <-c.readDeadline.Done():
+		return 0, errDeadlineExceeded
+	default:
+	}
+
+	for {
+		select {
+		case <-c.readDeadline.Done():
+			return 0, errDeadlineExceeded
+		case out, ok := <-c.decrypted:
+			if !ok {
+				return 0, io.EOF
+			}
+			switch val := out.(type) {
+			case ([]byte):
+				if len(p) < len(val) {
+					return 0, errBufferTooSmall
+				}
+				copy(p, val)
+				return len(val), nil
+			case (error):
+				return 0, val
+			}
+		}
+	}
+}
+
+// Write writes len(p) bytes from p to the DTLS connection
+func (c *Conn) Write(p []byte) (int, error) {
+	if c.isConnectionClosed() {
+		return 0, ErrConnClosed
+	}
+
+	select {
+	case <-c.writeDeadline.Done():
+		return 0, errDeadlineExceeded
+	default:
+	}
+
+	if !c.isHandshakeCompletedSuccessfully() {
+		return 0, errHandshakeInProgress
+	}
+
+	return len(p), c.writePackets(c.writeDeadline, []*packet{
+		{
+			record: &recordLayer{
+				recordLayerHeader: recordLayerHeader{
+					epoch:           c.getLocalEpoch(),
+					protocolVersion: protocolVersion1_2,
+				},
+				content: &applicationData{
+					data: p,
+				},
+			},
+			shouldEncrypt: true,
+		},
+	})
+}
+
+// Close closes the connection.
+func (c *Conn) Close() error {
+	err := c.close(true)
+	c.handshakeLoopsFinished.Wait()
+	return err
+}
+
+// ConnectionState returns basic DTLS details about the connection.
+// Note that this replaced the `Export` function of v1.
+func (c *Conn) ConnectionState() State {
+	c.lock.RLock()
+	defer c.lock.RUnlock()
+	return *c.state.clone()
+}
+
+// SelectedSRTPProtectionProfile returns the selected SRTPProtectionProfile
+func (c *Conn) SelectedSRTPProtectionProfile() (SRTPProtectionProfile, bool) {
+	c.lock.RLock()
+	defer c.lock.RUnlock()
+
+	if c.state.srtpProtectionProfile == 0 {
+		return 0, false
+	}
+
+	return c.state.srtpProtectionProfile, true
+}
+
+func (c *Conn) writePackets(ctx context.Context, pkts []*packet) error {
+	c.lock.Lock()
+	defer c.lock.Unlock()
+
+	var rawPackets [][]byte
+
+	for _, p := range pkts {
+		if h, ok := p.record.content.(*handshake); ok {
+			handshakeRaw, err := p.record.Marshal()
+			if err != nil {
+				return err
+			}
+
+			c.log.Tracef("[handshake:%v] -> %s (epoch: %d, seq: %d)",
+				srvCliStr(c.state.isClient), h.handshakeHeader.handshakeType.String(),
+				p.record.recordLayerHeader.epoch, h.handshakeHeader.messageSequence)
+			c.handshakeCache.push(handshakeRaw[recordLayerHeaderSize:], p.record.recordLayerHeader.epoch, h.handshakeHeader.messageSequence, h.handshakeHeader.handshakeType, c.state.isClient)
+
+			rawHandshakePackets, err := c.processHandshakePacket(p, h)
+			if err != nil {
+				return err
+			}
+			rawPackets = append(rawPackets, rawHandshakePackets...)
+		} else {
+			rawPacket, err := c.processPacket(p)
+			if err != nil {
+				return err
+			}
+			rawPackets = append(rawPackets, rawPacket)
+		}
+	}
+	if len(rawPackets) == 0 {
+		return nil
+	}
+	compactedRawPackets := c.compactRawPackets(rawPackets)
+
+	for _, compactedRawPackets := range compactedRawPackets {
+		if _, err := c.nextConn.Write(ctx, compactedRawPackets); err != nil {
+			return netError(err)
+		}
+	}
+
+	return nil
+}
+
+func (c *Conn) compactRawPackets(rawPackets [][]byte) [][]byte {
+	combinedRawPackets := make([][]byte, 0)
+	currentCombinedRawPacket := make([]byte, 0)
+
+	for _, rawPacket := range rawPackets {
+		if len(currentCombinedRawPacket) > 0 && len(currentCombinedRawPacket)+len(rawPacket) >= c.maximumTransmissionUnit {
+			combinedRawPackets = append(combinedRawPackets, currentCombinedRawPacket)
+			currentCombinedRawPacket = []byte{}
+		}
+		currentCombinedRawPacket = append(currentCombinedRawPacket, rawPacket...)
+	}
+
+	combinedRawPackets = append(combinedRawPackets, currentCombinedRawPacket)
+
+	return combinedRawPackets
+}
+
+func (c *Conn) processPacket(p *packet) ([]byte, error) {
+	epoch := p.record.recordLayerHeader.epoch
+	for len(c.state.localSequenceNumber) <= int(epoch) {
+		c.state.localSequenceNumber = append(c.state.localSequenceNumber, uint64(0))
+	}
+	seq := atomic.AddUint64(&c.state.localSequenceNumber[epoch], 1) - 1
+	if seq > maxSequenceNumber {
+		// RFC 6347 Section 4.1.0
+		// The implementation must either abandon an association or rehandshake
+		// prior to allowing the sequence number to wrap.
+		return nil, errSequenceNumberOverflow
+	}
+	p.record.recordLayerHeader.sequenceNumber = seq
+
+	rawPacket, err := p.record.Marshal()
+	if err != nil {
+		return nil, err
+	}
+
+	if p.shouldEncrypt {
+		var err error
+		rawPacket, err = c.state.cipherSuite.encrypt(p.record, rawPacket)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	return rawPacket, nil
+}
+
+func (c *Conn) processHandshakePacket(p *packet, h *handshake) ([][]byte, error) {
+	rawPackets := make([][]byte, 0)
+
+	handshakeFragments, err := c.fragmentHandshake(h)
+	if err != nil {
+		return nil, err
+	}
+	epoch := p.record.recordLayerHeader.epoch
+	for len(c.state.localSequenceNumber) <= int(epoch) {
+		c.state.localSequenceNumber = append(c.state.localSequenceNumber, uint64(0))
+	}
+
+	for _, handshakeFragment := range handshakeFragments {
+		seq := atomic.AddUint64(&c.state.localSequenceNumber[epoch], 1) - 1
+		if seq > maxSequenceNumber {
+			return nil, errSequenceNumberOverflow
+		}
+
+		recordLayerHeader := &recordLayerHeader{
+			protocolVersion: p.record.recordLayerHeader.protocolVersion,
+			contentType:     p.record.recordLayerHeader.contentType,
+			contentLen:      uint16(len(handshakeFragment)),
+			epoch:           p.record.recordLayerHeader.epoch,
+			sequenceNumber:  seq,
+		}
+
+		recordLayerHeaderBytes, err := recordLayerHeader.Marshal()
+		if err != nil {
+			return nil, err
+		}
+
+		p.record.recordLayerHeader = *recordLayerHeader
+
+		rawPacket := append(recordLayerHeaderBytes, handshakeFragment...)
+		if p.shouldEncrypt {
+			var err error
+			rawPacket, err = c.state.cipherSuite.encrypt(p.record, rawPacket)
+			if err != nil {
+				return nil, err
+			}
+		}
+
+		rawPackets = append(rawPackets, rawPacket)
+	}
+
+	return rawPackets, nil
+}
+
+func (c *Conn) fragmentHandshake(h *handshake) ([][]byte, error) {
+	content, err := h.handshakeMessage.Marshal()
+	if err != nil {
+		return nil, err
+	}
+
+	fragmentedHandshakes := make([][]byte, 0)
+
+	contentFragments := splitBytes(content, c.maximumTransmissionUnit)
+	if len(contentFragments) == 0 {
+		contentFragments = [][]byte{
+			{},
+		}
+	}
+
+	offset := 0
+	for _, contentFragment := range contentFragments {
+		contentFragmentLen := len(contentFragment)
+
+		handshakeHeaderFragment := &handshakeHeader{
+			handshakeType:   h.handshakeHeader.handshakeType,
+			length:          h.handshakeHeader.length,
+			messageSequence: h.handshakeHeader.messageSequence,
+			fragmentOffset:  uint32(offset),
+			fragmentLength:  uint32(contentFragmentLen),
+		}
+
+		offset += contentFragmentLen
+
+		handshakeHeaderFragmentRaw, err := handshakeHeaderFragment.Marshal()
+		if err != nil {
+			return nil, err
+		}
+
+		fragmentedHandshake := append(handshakeHeaderFragmentRaw, contentFragment...)
+		fragmentedHandshakes = append(fragmentedHandshakes, fragmentedHandshake)
+	}
+
+	return fragmentedHandshakes, nil
+}
+
+var poolReadBuffer = sync.Pool{ //nolint:gochecknoglobals
+	New: func() interface{} {
+		b := make([]byte, inboundBufferSize)
+		return &b
+	},
+}
+
+func (c *Conn) readAndBuffer(ctx context.Context) error {
+	bufptr := poolReadBuffer.Get().(*[]byte)
+	defer poolReadBuffer.Put(bufptr)
+
+	b := *bufptr
+	i, err := c.nextConn.Read(ctx, b)
+	if err != nil {
+		return netError(err)
+	}
+
+	pkts, err := unpackDatagram(b[:i])
+	if err != nil {
+		return err
+	}
+
+	var hasHandshake bool
+	for _, p := range pkts {
+		hs, alert, err := c.handleIncomingPacket(p, true)
+		if alert != nil {
+			if alertErr := c.notify(ctx, alert.alertLevel, alert.alertDescription); alertErr != nil {
+				if err == nil {
+					err = alertErr
+				}
+			}
+		}
+		if hs {
+			hasHandshake = true
+		}
+		switch e := err.(type) {
+		case nil:
+		case *errAlert:
+			if e.IsFatalOrCloseNotify() {
+				return e
+			}
+		default:
+			return e
+		}
+	}
+	if hasHandshake {
+		done := make(chan struct{})
+		select {
+		case c.handshakeRecv <- done:
+			// If the other party may retransmit the flight,
+			// we should respond even if it not a new message.
+			<-done
+		case <-c.fsm.Done():
+		}
+	}
+	return nil
+}
+
+func (c *Conn) handleQueuedPackets(ctx context.Context) error {
+	pkts := c.encryptedPackets
+	c.encryptedPackets = nil
+
+	for _, p := range pkts {
+		_, alert, err := c.handleIncomingPacket(p, false) // don't re-enqueue
+		if alert != nil {
+			if alertErr := c.notify(ctx, alert.alertLevel, alert.alertDescription); alertErr != nil {
+				if err == nil {
+					err = alertErr
+				}
+			}
+		}
+		switch e := err.(type) {
+		case nil:
+		case *errAlert:
+			if e.IsFatalOrCloseNotify() {
+				return e
+			}
+		default:
+			return e
+		}
+	}
+	return nil
+}
+
+func (c *Conn) handleIncomingPacket(buf []byte, enqueue bool) (bool, *alert, error) { //nolint:gocognit
+	h := &recordLayerHeader{}
+	if err := h.Unmarshal(buf); err != nil {
+		// Decode error must be silently discarded
+		// [RFC6347 Section-4.1.2.7]
+		c.log.Debugf("discarded broken packet: %v", err)
+		return false, nil, nil
+	}
+
+	// Validate epoch
+	remoteEpoch := c.getRemoteEpoch()
+	if h.epoch > remoteEpoch {
+		if h.epoch > remoteEpoch+1 {
+			c.log.Debugf("discarded future packet (epoch: %d, seq: %d)",
+				h.epoch, h.sequenceNumber,
+			)
+			return false, nil, nil
+		}
+		if enqueue {
+			c.log.Debug("received packet of next epoch, queuing packet")
+			c.encryptedPackets = append(c.encryptedPackets, buf)
+		}
+		return false, nil, nil
+	}
+
+	// Anti-replay protection
+	for len(c.state.replayDetector) <= int(h.epoch) {
+		c.state.replayDetector = append(c.state.replayDetector,
+			replaydetector.New(c.replayProtectionWindow, maxSequenceNumber),
+		)
+	}
+	markPacketAsValid, ok := c.state.replayDetector[int(h.epoch)].Check(h.sequenceNumber)
+	if !ok {
+		c.log.Debugf("discarded duplicated packet (epoch: %d, seq: %d)",
+			h.epoch, h.sequenceNumber,
+		)
+		return false, nil, nil
+	}
+
+	// Decrypt
+	if h.epoch != 0 {
+		if c.state.cipherSuite == nil || !c.state.cipherSuite.isInitialized() {
+			if enqueue {
+				c.encryptedPackets = append(c.encryptedPackets, buf)
+				c.log.Debug("handshake not finished, queuing packet")
+			}
+			return false, nil, nil
+		}
+
+		var err error
+		buf, err = c.state.cipherSuite.decrypt(buf)
+		if err != nil {
+			c.log.Debugf("%s: decrypt failed: %s", srvCliStr(c.state.isClient), err)
+			return false, nil, nil
+		}
+	}
+
+	isHandshake, err := c.fragmentBuffer.push(append([]byte{}, buf...))
+	if err != nil {
+		// Decode error must be silently discarded
+		// [RFC6347 Section-4.1.2.7]
+		c.log.Debugf("defragment failed: %s", err)
+		return false, nil, nil
+	} else if isHandshake {
+		markPacketAsValid()
+		for out, epoch := c.fragmentBuffer.pop(); out != nil; out, epoch = c.fragmentBuffer.pop() {
+			rawHandshake := &handshake{}
+			if err := rawHandshake.Unmarshal(out); err != nil {
+				c.log.Debugf("%s: handshake parse failed: %s", srvCliStr(c.state.isClient), err)
+				continue
+			}
+
+			_ = c.handshakeCache.push(out, epoch, rawHandshake.handshakeHeader.messageSequence, rawHandshake.handshakeHeader.handshakeType, !c.state.isClient)
+		}
+
+		return true, nil, nil
+	}
+
+	r := &recordLayer{}
+	if err := r.Unmarshal(buf); err != nil {
+		return false, &alert{alertLevelFatal, alertDecodeError}, err
+	}
+
+	switch content := r.content.(type) {
+	case *alert:
+		c.log.Tracef("%s: <- %s", srvCliStr(c.state.isClient), content.String())
+		var a *alert
+		if content.alertDescription == alertCloseNotify {
+			// Respond with a close_notify [RFC5246 Section 7.2.1]
+			a = &alert{alertLevelWarning, alertCloseNotify}
+		}
+		markPacketAsValid()
+		return false, a, &errAlert{content}
+	case *changeCipherSpec:
+		if c.state.cipherSuite == nil || !c.state.cipherSuite.isInitialized() {
+			if enqueue {
+				c.encryptedPackets = append(c.encryptedPackets, buf)
+				c.log.Debugf("CipherSuite not initialized, queuing packet")
+			}
+			return false, nil, nil
+		}
+
+		newRemoteEpoch := h.epoch + 1
+		c.log.Tracef("%s: <- ChangeCipherSpec (epoch: %d)", srvCliStr(c.state.isClient), newRemoteEpoch)
+
+		if c.getRemoteEpoch()+1 == newRemoteEpoch {
+			c.setRemoteEpoch(newRemoteEpoch)
+			markPacketAsValid()
+		}
+	case *applicationData:
+		if h.epoch == 0 {
+			return false, &alert{alertLevelFatal, alertUnexpectedMessage}, errApplicationDataEpochZero
+		}
+
+		markPacketAsValid()
+
+		select {
+		case c.decrypted <- content.data:
+		case <-c.closed.Done():
+		}
+
+	default:
+		return false, &alert{alertLevelFatal, alertUnexpectedMessage}, fmt.Errorf("%w: %d", errUnhandledContextType, content.contentType())
+	}
+	return false, nil, nil
+}
+
+func (c *Conn) recvHandshake() <-chan chan struct{} {
+	return c.handshakeRecv
+}
+
+func (c *Conn) notify(ctx context.Context, level alertLevel, desc alertDescription) error {
+	return c.writePackets(ctx, []*packet{
+		{
+			record: &recordLayer{
+				recordLayerHeader: recordLayerHeader{
+					epoch:           c.getLocalEpoch(),
+					protocolVersion: protocolVersion1_2,
+				},
+				content: &alert{
+					alertLevel:       level,
+					alertDescription: desc,
+				},
+			},
+			shouldEncrypt: c.isHandshakeCompletedSuccessfully(),
+		},
+	})
+}
+
+func (c *Conn) setHandshakeCompletedSuccessfully() {
+	c.handshakeCompletedSuccessfully.Store(struct{ bool }{true})
+}
+
+func (c *Conn) isHandshakeCompletedSuccessfully() bool {
+	boolean, _ := c.handshakeCompletedSuccessfully.Load().(struct{ bool })
+	return boolean.bool
+}
+
+func (c *Conn) handshake(ctx context.Context, cfg *handshakeConfig, initialFlight flightVal, initialState handshakeState) error { //nolint:gocognit
+	c.fsm = newHandshakeFSM(&c.state, c.handshakeCache, cfg, initialFlight)
+
+	done := make(chan struct{})
+	ctxRead, cancelRead := context.WithCancel(context.Background())
+	c.cancelHandshakeReader = cancelRead
+	cfg.onFlightState = func(f flightVal, s handshakeState) {
+		if s == handshakeFinished && !c.isHandshakeCompletedSuccessfully() {
+			c.setHandshakeCompletedSuccessfully()
+			close(done)
+		}
+	}
+
+	ctxHs, cancel := context.WithCancel(context.Background())
+	c.cancelHandshaker = cancel
+
+	firstErr := make(chan error, 1)
+
+	c.handshakeLoopsFinished.Add(2)
+
+	// Handshake routine should be live until close.
+	// The other party may request retransmission of the last flight to cope with packet drop.
+	go func() {
+		defer c.handshakeLoopsFinished.Done()
+		err := c.fsm.Run(ctxHs, c, initialState)
+		if !errors.Is(err, context.Canceled) {
+			select {
+			case firstErr <- err:
+			default:
+			}
+		}
+	}()
+	go func() {
+		defer func() {
+			// Escaping read loop.
+			// It's safe to close decrypted channnel now.
+			close(c.decrypted)
+
+			// Force stop handshaker when the underlying connection is closed.
+			cancel()
+		}()
+		defer c.handshakeLoopsFinished.Done()
+		for {
+			if err := c.readAndBuffer(ctxRead); err != nil {
+				switch e := err.(type) {
+				case *errAlert:
+					if !e.IsFatalOrCloseNotify() {
+						if c.isHandshakeCompletedSuccessfully() {
+							// Pass the error to Read()
+							select {
+							case c.decrypted <- err:
+							case <-c.closed.Done():
+							}
+						}
+						continue // non-fatal alert must not stop read loop
+					}
+				case error:
+					switch err {
+					case context.DeadlineExceeded, context.Canceled, io.EOF:
+					default:
+						if c.isHandshakeCompletedSuccessfully() {
+							// Keep read loop and pass the read error to Read()
+							select {
+							case c.decrypted <- err:
+							case <-c.closed.Done():
+							}
+							continue // non-fatal alert must not stop read loop
+						}
+					}
+				}
+				select {
+				case firstErr <- err:
+				default:
+				}
+
+				if e, ok := err.(*errAlert); ok {
+					if e.IsFatalOrCloseNotify() {
+						_ = c.close(false)
+					}
+				}
+				return
+			}
+		}
+	}()
+
+	select {
+	case err := <-firstErr:
+		cancelRead()
+		cancel()
+		return c.translateHandshakeCtxError(err)
+	case <-ctx.Done():
+		cancelRead()
+		cancel()
+		return c.translateHandshakeCtxError(ctx.Err())
+	case <-done:
+		return nil
+	}
+}
+
+func (c *Conn) translateHandshakeCtxError(err error) error {
+	if err == nil {
+		return nil
+	}
+	if errors.Is(err, context.Canceled) && c.isHandshakeCompletedSuccessfully() {
+		return nil
+	}
+	return &HandshakeError{err}
+}
+
+func (c *Conn) close(byUser bool) error {
+	c.cancelHandshaker()
+	c.cancelHandshakeReader()
+
+	if c.isHandshakeCompletedSuccessfully() && byUser {
+		// Discard error from notify() to return non-error on the first user call of Close()
+		// even if the underlying connection is already closed.
+		_ = c.notify(context.Background(), alertLevelWarning, alertCloseNotify)
+	}
+
+	c.closeLock.Lock()
+	// Don't return ErrConnClosed at the first time of the call from user.
+	closedByUser := c.connectionClosedByUser
+	if byUser {
+		c.connectionClosedByUser = true
+	}
+	c.closed.Close()
+	c.closeLock.Unlock()
+
+	if closedByUser {
+		return ErrConnClosed
+	}
+
+	return c.nextConn.Close()
+}
+
+func (c *Conn) isConnectionClosed() bool {
+	select {
+	case <-c.closed.Done():
+		return true
+	default:
+		return false
+	}
+}
+
+func (c *Conn) setLocalEpoch(epoch uint16) {
+	c.state.localEpoch.Store(epoch)
+}
+
+func (c *Conn) getLocalEpoch() uint16 {
+	return c.state.localEpoch.Load().(uint16)
+}
+
+func (c *Conn) setRemoteEpoch(epoch uint16) {
+	c.state.remoteEpoch.Store(epoch)
+}
+
+func (c *Conn) getRemoteEpoch() uint16 {
+	return c.state.remoteEpoch.Load().(uint16)
+}
+
+// LocalAddr implements net.Conn.LocalAddr
+func (c *Conn) LocalAddr() net.Addr {
+	return c.nextConn.LocalAddr()
+}
+
+// RemoteAddr implements net.Conn.RemoteAddr
+func (c *Conn) RemoteAddr() net.Addr {
+	return c.nextConn.RemoteAddr()
+}
+
+// SetDeadline implements net.Conn.SetDeadline
+func (c *Conn) SetDeadline(t time.Time) error {
+	c.readDeadline.Set(t)
+	return c.SetWriteDeadline(t)
+}
+
+// SetReadDeadline implements net.Conn.SetReadDeadline
+func (c *Conn) SetReadDeadline(t time.Time) error {
+	c.readDeadline.Set(t)
+	// Read deadline is fully managed by this layer.
+	// Don't set read deadline to underlying connection.
+	return nil
+}
+
+// SetWriteDeadline implements net.Conn.SetWriteDeadline
+func (c *Conn) SetWriteDeadline(t time.Time) error {
+	c.writeDeadline.Set(t)
+	// Write deadline is also fully managed by this layer.
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/content.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/content.go
new file mode 100644
index 000000000..c938cb739
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/content.go
@@ -0,0 +1,17 @@
+package dtls
+
+// https://tools.ietf.org/html/rfc4346#section-6.2.1
+type contentType uint8
+
+const (
+	contentTypeChangeCipherSpec contentType = 20
+	contentTypeAlert            contentType = 21
+	contentTypeHandshake        contentType = 22
+	contentTypeApplicationData  contentType = 23
+)
+
+type content interface {
+	contentType() contentType
+	Marshal() ([]byte, error)
+	Unmarshal(data []byte) error
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/crypto.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/crypto.go
new file mode 100644
index 000000000..c9124eb7f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/crypto.go
@@ -0,0 +1,232 @@
+package dtls
+
+import (
+	"crypto"
+	"crypto/ecdsa"
+	"crypto/ed25519"
+	"crypto/rand"
+	"crypto/rsa"
+	"crypto/sha256"
+	"crypto/x509"
+	"encoding/asn1"
+	"encoding/binary"
+	"math/big"
+	"time"
+)
+
+type ecdsaSignature struct {
+	R, S *big.Int
+}
+
+func valueKeyMessage(clientRandom, serverRandom, publicKey []byte, namedCurve namedCurve) []byte {
+	serverECDHParams := make([]byte, 4)
+	serverECDHParams[0] = 3 // named curve
+	binary.BigEndian.PutUint16(serverECDHParams[1:], uint16(namedCurve))
+	serverECDHParams[3] = byte(len(publicKey))
+
+	plaintext := []byte{}
+	plaintext = append(plaintext, clientRandom...)
+	plaintext = append(plaintext, serverRandom...)
+	plaintext = append(plaintext, serverECDHParams...)
+	plaintext = append(plaintext, publicKey...)
+
+	return plaintext
+}
+
+// If the client provided a "signature_algorithms" extension, then all
+// certificates provided by the server MUST be signed by a
+// hash/signature algorithm pair that appears in that extension
+//
+// https://tools.ietf.org/html/rfc5246#section-7.4.2
+func generateKeySignature(clientRandom, serverRandom, publicKey []byte, namedCurve namedCurve, privateKey crypto.PrivateKey, hashAlgorithm hashAlgorithm) ([]byte, error) {
+	msg := valueKeyMessage(clientRandom, serverRandom, publicKey, namedCurve)
+	switch p := privateKey.(type) {
+	case ed25519.PrivateKey:
+		// https://crypto.stackexchange.com/a/55483
+		return p.Sign(rand.Reader, msg, crypto.Hash(0))
+	case *ecdsa.PrivateKey:
+		hashed := hashAlgorithm.digest(msg)
+		return p.Sign(rand.Reader, hashed, hashAlgorithm.cryptoHash())
+	case *rsa.PrivateKey:
+		hashed := hashAlgorithm.digest(msg)
+		return p.Sign(rand.Reader, hashed, hashAlgorithm.cryptoHash())
+	}
+
+	return nil, errKeySignatureGenerateUnimplemented
+}
+
+func verifyKeySignature(message, remoteKeySignature []byte, hashAlgorithm hashAlgorithm, rawCertificates [][]byte) error { //nolint:dupl
+	if len(rawCertificates) == 0 {
+		return errLengthMismatch
+	}
+	certificate, err := x509.ParseCertificate(rawCertificates[0])
+	if err != nil {
+		return err
+	}
+
+	switch p := certificate.PublicKey.(type) {
+	case ed25519.PublicKey:
+		if ok := ed25519.Verify(p, message, remoteKeySignature); !ok {
+			return errKeySignatureMismatch
+		}
+		return nil
+	case *ecdsa.PublicKey:
+		ecdsaSig := &ecdsaSignature{}
+		if _, err := asn1.Unmarshal(remoteKeySignature, ecdsaSig); err != nil {
+			return err
+		}
+		if ecdsaSig.R.Sign() <= 0 || ecdsaSig.S.Sign() <= 0 {
+			return errInvalidECDSASignature
+		}
+		hashed := hashAlgorithm.digest(message)
+		if !ecdsa.Verify(p, hashed, ecdsaSig.R, ecdsaSig.S) {
+			return errKeySignatureMismatch
+		}
+		return nil
+	case *rsa.PublicKey:
+		switch certificate.SignatureAlgorithm {
+		case x509.SHA1WithRSA, x509.SHA256WithRSA, x509.SHA384WithRSA, x509.SHA512WithRSA:
+			hashed := hashAlgorithm.digest(message)
+			return rsa.VerifyPKCS1v15(p, hashAlgorithm.cryptoHash(), hashed, remoteKeySignature)
+		default:
+			return errKeySignatureVerifyUnimplemented
+		}
+	}
+
+	return errKeySignatureVerifyUnimplemented
+}
+
+// If the server has sent a CertificateRequest message, the client MUST send the Certificate
+// message.  The ClientKeyExchange message is now sent, and the content
+// of that message will depend on the public key algorithm selected
+// between the ClientHello and the ServerHello.  If the client has sent
+// a certificate with signing ability, a digitally-signed
+// CertificateVerify message is sent to explicitly verify possession of
+// the private key in the certificate.
+// https://tools.ietf.org/html/rfc5246#section-7.3
+func generateCertificateVerify(handshakeBodies []byte, privateKey crypto.PrivateKey, hashAlgorithm hashAlgorithm) ([]byte, error) {
+	h := sha256.New()
+	if _, err := h.Write(handshakeBodies); err != nil {
+		return nil, err
+	}
+	hashed := h.Sum(nil)
+
+	switch p := privateKey.(type) {
+	case ed25519.PrivateKey:
+		// https://crypto.stackexchange.com/a/55483
+		return p.Sign(rand.Reader, hashed, crypto.Hash(0))
+	case *ecdsa.PrivateKey:
+		return p.Sign(rand.Reader, hashed, hashAlgorithm.cryptoHash())
+	case *rsa.PrivateKey:
+		return p.Sign(rand.Reader, hashed, hashAlgorithm.cryptoHash())
+	}
+
+	return nil, errInvalidSignatureAlgorithm
+}
+
+func verifyCertificateVerify(handshakeBodies []byte, hashAlgorithm hashAlgorithm, remoteKeySignature []byte, rawCertificates [][]byte) error { //nolint:dupl
+	if len(rawCertificates) == 0 {
+		return errLengthMismatch
+	}
+	certificate, err := x509.ParseCertificate(rawCertificates[0])
+	if err != nil {
+		return err
+	}
+
+	switch p := certificate.PublicKey.(type) {
+	case ed25519.PublicKey:
+		if ok := ed25519.Verify(p, handshakeBodies, remoteKeySignature); !ok {
+			return errKeySignatureMismatch
+		}
+		return nil
+	case *ecdsa.PublicKey:
+		ecdsaSig := &ecdsaSignature{}
+		if _, err := asn1.Unmarshal(remoteKeySignature, ecdsaSig); err != nil {
+			return err
+		}
+		if ecdsaSig.R.Sign() <= 0 || ecdsaSig.S.Sign() <= 0 {
+			return errInvalidECDSASignature
+		}
+		hash := hashAlgorithm.digest(handshakeBodies)
+		if !ecdsa.Verify(p, hash, ecdsaSig.R, ecdsaSig.S) {
+			return errKeySignatureMismatch
+		}
+		return nil
+	case *rsa.PublicKey:
+		switch certificate.SignatureAlgorithm {
+		case x509.SHA1WithRSA, x509.SHA256WithRSA, x509.SHA384WithRSA, x509.SHA512WithRSA:
+			hash := hashAlgorithm.digest(handshakeBodies)
+			return rsa.VerifyPKCS1v15(p, hashAlgorithm.cryptoHash(), hash, remoteKeySignature)
+		default:
+			return errKeySignatureVerifyUnimplemented
+		}
+	}
+
+	return errKeySignatureVerifyUnimplemented
+}
+
+func loadCerts(rawCertificates [][]byte) ([]*x509.Certificate, error) {
+	if len(rawCertificates) == 0 {
+		return nil, errLengthMismatch
+	}
+
+	certs := make([]*x509.Certificate, 0, len(rawCertificates))
+	for _, rawCert := range rawCertificates {
+		cert, err := x509.ParseCertificate(rawCert)
+		if err != nil {
+			return nil, err
+		}
+		certs = append(certs, cert)
+	}
+	return certs, nil
+}
+
+func verifyClientCert(rawCertificates [][]byte, roots *x509.CertPool) (chains [][]*x509.Certificate, err error) {
+	certificate, err := loadCerts(rawCertificates)
+	if err != nil {
+		return nil, err
+	}
+	intermediateCAPool := x509.NewCertPool()
+	for _, cert := range certificate[1:] {
+		intermediateCAPool.AddCert(cert)
+	}
+	opts := x509.VerifyOptions{
+		Roots:         roots,
+		CurrentTime:   time.Now(),
+		Intermediates: intermediateCAPool,
+		KeyUsages:     []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
+	}
+	return certificate[0].Verify(opts)
+}
+
+func verifyServerCert(rawCertificates [][]byte, roots *x509.CertPool, serverName string) (chains [][]*x509.Certificate, err error) {
+	certificate, err := loadCerts(rawCertificates)
+	if err != nil {
+		return nil, err
+	}
+	intermediateCAPool := x509.NewCertPool()
+	for _, cert := range certificate[1:] {
+		intermediateCAPool.AddCert(cert)
+	}
+	opts := x509.VerifyOptions{
+		Roots:         roots,
+		CurrentTime:   time.Now(),
+		DNSName:       serverName,
+		Intermediates: intermediateCAPool,
+	}
+	return certificate[0].Verify(opts)
+}
+
+func generateAEADAdditionalData(h *recordLayerHeader, payloadLen int) []byte {
+	var additionalData [13]byte
+	// SequenceNumber MUST be set first
+	// we only want uint48, clobbering an extra 2 (using uint64, Golang doesn't have uint48)
+	binary.BigEndian.PutUint64(additionalData[:], h.sequenceNumber)
+	binary.BigEndian.PutUint16(additionalData[:], h.epoch)
+	additionalData[8] = byte(h.contentType)
+	additionalData[9] = h.protocolVersion.major
+	additionalData[10] = h.protocolVersion.minor
+	binary.BigEndian.PutUint16(additionalData[len(additionalData)-2:], uint16(payloadLen))
+
+	return additionalData[:]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/crypto_cbc.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/crypto_cbc.go
new file mode 100644
index 000000000..6a4e7f49d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/crypto_cbc.go
@@ -0,0 +1,133 @@
+package dtls
+
+import ( //nolint:gci
+	"crypto/aes"
+	"crypto/cipher"
+	"crypto/hmac"
+	"crypto/rand"
+	"crypto/sha1" //nolint:gosec
+	"encoding/binary"
+)
+
+// block ciphers using cipher block chaining.
+type cbcMode interface {
+	cipher.BlockMode
+	SetIV([]byte)
+}
+
+// State needed to handle encrypted input/output
+type cryptoCBC struct {
+	writeCBC, readCBC cbcMode
+	writeMac, readMac []byte
+}
+
+// Currently hardcoded to be SHA1 only
+var cryptoCBCMacFunc = sha1.New //nolint:gochecknoglobals
+
+func newCryptoCBC(localKey, localWriteIV, localMac, remoteKey, remoteWriteIV, remoteMac []byte) (*cryptoCBC, error) {
+	writeBlock, err := aes.NewCipher(localKey)
+	if err != nil {
+		return nil, err
+	}
+
+	readBlock, err := aes.NewCipher(remoteKey)
+	if err != nil {
+		return nil, err
+	}
+
+	return &cryptoCBC{
+		writeCBC: cipher.NewCBCEncrypter(writeBlock, localWriteIV).(cbcMode),
+		writeMac: localMac,
+
+		readCBC: cipher.NewCBCDecrypter(readBlock, remoteWriteIV).(cbcMode),
+		readMac: remoteMac,
+	}, nil
+}
+
+func (c *cryptoCBC) encrypt(pkt *recordLayer, raw []byte) ([]byte, error) {
+	payload := raw[recordLayerHeaderSize:]
+	raw = raw[:recordLayerHeaderSize]
+	blockSize := c.writeCBC.BlockSize()
+
+	// Generate + Append MAC
+	h := pkt.recordLayerHeader
+
+	MAC, err := prfMac(h.epoch, h.sequenceNumber, h.contentType, h.protocolVersion, payload, c.writeMac)
+	if err != nil {
+		return nil, err
+	}
+	payload = append(payload, MAC...)
+
+	// Generate + Append padding
+	padding := make([]byte, blockSize-len(payload)%blockSize)
+	paddingLen := len(padding)
+	for i := 0; i < paddingLen; i++ {
+		padding[i] = byte(paddingLen - 1)
+	}
+	payload = append(payload, padding...)
+
+	// Generate IV
+	iv := make([]byte, blockSize)
+	if _, err := rand.Read(iv); err != nil {
+		return nil, err
+	}
+
+	// Set IV + Encrypt + Prepend IV
+	c.writeCBC.SetIV(iv)
+	c.writeCBC.CryptBlocks(payload, payload)
+	payload = append(iv, payload...)
+
+	// Prepend unencrypte header with encrypted payload
+	raw = append(raw, payload...)
+
+	// Update recordLayer size to include IV+MAC+Padding
+	binary.BigEndian.PutUint16(raw[recordLayerHeaderSize-2:], uint16(len(raw)-recordLayerHeaderSize))
+
+	return raw, nil
+}
+
+func (c *cryptoCBC) decrypt(in []byte) ([]byte, error) {
+	body := in[recordLayerHeaderSize:]
+	blockSize := c.readCBC.BlockSize()
+	mac := cryptoCBCMacFunc()
+
+	var h recordLayerHeader
+	err := h.Unmarshal(in)
+	switch {
+	case err != nil:
+		return nil, err
+	case h.contentType == contentTypeChangeCipherSpec:
+		// Nothing to encrypt with ChangeCipherSpec
+		return in, nil
+	case len(body)%blockSize != 0 || len(body) < blockSize+max(mac.Size()+1, blockSize):
+		return nil, errNotEnoughRoomForNonce
+	}
+
+	// Set + remove per record IV
+	c.readCBC.SetIV(body[:blockSize])
+	body = body[blockSize:]
+
+	// Decrypt
+	c.readCBC.CryptBlocks(body, body)
+
+	// Padding+MAC needs to be checked in constant time
+	// Otherwise we reveal information about the level of correctness
+	paddingLen, paddingGood := examinePadding(body)
+
+	macSize := mac.Size()
+	if len(body) < macSize {
+		return nil, errInvalidMAC
+	}
+
+	dataEnd := len(body) - macSize - paddingLen
+
+	expectedMAC := body[dataEnd : dataEnd+macSize]
+	actualMAC, err := prfMac(h.epoch, h.sequenceNumber, h.contentType, h.protocolVersion, body[:dataEnd], c.readMac)
+
+	// Compute Local MAC and compare
+	if paddingGood != 255 || err != nil || !hmac.Equal(actualMAC, expectedMAC) {
+		return nil, errInvalidMAC
+	}
+
+	return append(in[:recordLayerHeaderSize], body[:dataEnd]...), nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/crypto_ccm.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/crypto_ccm.go
new file mode 100644
index 000000000..e933f00a4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/crypto_ccm.go
@@ -0,0 +1,100 @@
+package dtls
+
+import (
+	"crypto/aes"
+	"crypto/rand"
+	"encoding/binary"
+	"errors"
+	"fmt"
+
+	"github.com/pion/dtls/v2/pkg/crypto/ccm"
+)
+
+var errDecryptPacket = errors.New("decryptPacket")
+
+type cryptoCCMTagLen int
+
+const (
+	cryptoCCM8TagLength  cryptoCCMTagLen = 8
+	cryptoCCMTagLength   cryptoCCMTagLen = 16
+	cryptoCCMNonceLength                 = 12
+)
+
+// State needed to handle encrypted input/output
+type cryptoCCM struct {
+	localCCM, remoteCCM         ccm.CCM
+	localWriteIV, remoteWriteIV []byte
+	tagLen                      cryptoCCMTagLen
+}
+
+func newCryptoCCM(tagLen cryptoCCMTagLen, localKey, localWriteIV, remoteKey, remoteWriteIV []byte) (*cryptoCCM, error) {
+	localBlock, err := aes.NewCipher(localKey)
+	if err != nil {
+		return nil, err
+	}
+	localCCM, err := ccm.NewCCM(localBlock, int(tagLen), cryptoCCMNonceLength)
+	if err != nil {
+		return nil, err
+	}
+
+	remoteBlock, err := aes.NewCipher(remoteKey)
+	if err != nil {
+		return nil, err
+	}
+	remoteCCM, err := ccm.NewCCM(remoteBlock, int(tagLen), cryptoCCMNonceLength)
+	if err != nil {
+		return nil, err
+	}
+
+	return &cryptoCCM{
+		localCCM:      localCCM,
+		localWriteIV:  localWriteIV,
+		remoteCCM:     remoteCCM,
+		remoteWriteIV: remoteWriteIV,
+		tagLen:        tagLen,
+	}, nil
+}
+
+func (c *cryptoCCM) encrypt(pkt *recordLayer, raw []byte) ([]byte, error) {
+	payload := raw[recordLayerHeaderSize:]
+	raw = raw[:recordLayerHeaderSize]
+
+	nonce := append(append([]byte{}, c.localWriteIV[:4]...), make([]byte, 8)...)
+	if _, err := rand.Read(nonce[4:]); err != nil {
+		return nil, err
+	}
+
+	additionalData := generateAEADAdditionalData(&pkt.recordLayerHeader, len(payload))
+	encryptedPayload := c.localCCM.Seal(nil, nonce, payload, additionalData)
+
+	encryptedPayload = append(nonce[4:], encryptedPayload...)
+	raw = append(raw, encryptedPayload...)
+
+	// Update recordLayer size to include explicit nonce
+	binary.BigEndian.PutUint16(raw[recordLayerHeaderSize-2:], uint16(len(raw)-recordLayerHeaderSize))
+	return raw, nil
+}
+
+func (c *cryptoCCM) decrypt(in []byte) ([]byte, error) {
+	var h recordLayerHeader
+	err := h.Unmarshal(in)
+	switch {
+	case err != nil:
+		return nil, err
+	case h.contentType == contentTypeChangeCipherSpec:
+		// Nothing to encrypt with ChangeCipherSpec
+		return in, nil
+	case len(in) <= (8 + recordLayerHeaderSize):
+		return nil, errNotEnoughRoomForNonce
+	}
+
+	nonce := append(append([]byte{}, c.remoteWriteIV[:4]...), in[recordLayerHeaderSize:recordLayerHeaderSize+8]...)
+	out := in[recordLayerHeaderSize+8:]
+
+	additionalData := generateAEADAdditionalData(&h, len(out)-int(c.tagLen))
+	out, err = c.remoteCCM.Open(out[:0], nonce, out, additionalData)
+	if err != nil {
+		return nil, fmt.Errorf("%w: %v", errDecryptPacket, err)
+	}
+	return append(in[:recordLayerHeaderSize], out...), nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/crypto_gcm.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/crypto_gcm.go
new file mode 100644
index 000000000..433326dbc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/crypto_gcm.go
@@ -0,0 +1,94 @@
+package dtls
+
+import (
+	"crypto/aes"
+	"crypto/cipher"
+	"crypto/rand"
+	"encoding/binary"
+	"fmt"
+)
+
+const (
+	cryptoGCMTagLength   = 16
+	cryptoGCMNonceLength = 12
+)
+
+// State needed to handle encrypted input/output
+type cryptoGCM struct {
+	localGCM, remoteGCM         cipher.AEAD
+	localWriteIV, remoteWriteIV []byte
+}
+
+func newCryptoGCM(localKey, localWriteIV, remoteKey, remoteWriteIV []byte) (*cryptoGCM, error) {
+	localBlock, err := aes.NewCipher(localKey)
+	if err != nil {
+		return nil, err
+	}
+	localGCM, err := cipher.NewGCM(localBlock)
+	if err != nil {
+		return nil, err
+	}
+
+	remoteBlock, err := aes.NewCipher(remoteKey)
+	if err != nil {
+		return nil, err
+	}
+	remoteGCM, err := cipher.NewGCM(remoteBlock)
+	if err != nil {
+		return nil, err
+	}
+
+	return &cryptoGCM{
+		localGCM:      localGCM,
+		localWriteIV:  localWriteIV,
+		remoteGCM:     remoteGCM,
+		remoteWriteIV: remoteWriteIV,
+	}, nil
+}
+
+func (c *cryptoGCM) encrypt(pkt *recordLayer, raw []byte) ([]byte, error) {
+	payload := raw[recordLayerHeaderSize:]
+	raw = raw[:recordLayerHeaderSize]
+
+	nonce := make([]byte, cryptoGCMNonceLength)
+	copy(nonce, c.localWriteIV[:4])
+	if _, err := rand.Read(nonce[4:]); err != nil {
+		return nil, err
+	}
+
+	additionalData := generateAEADAdditionalData(&pkt.recordLayerHeader, len(payload))
+	encryptedPayload := c.localGCM.Seal(nil, nonce, payload, additionalData)
+	r := make([]byte, len(raw)+len(nonce[4:])+len(encryptedPayload))
+	copy(r, raw)
+	copy(r[len(raw):], nonce[4:])
+	copy(r[len(raw)+len(nonce[4:]):], encryptedPayload)
+
+	// Update recordLayer size to include explicit nonce
+	binary.BigEndian.PutUint16(r[recordLayerHeaderSize-2:], uint16(len(r)-recordLayerHeaderSize))
+	return r, nil
+}
+
+func (c *cryptoGCM) decrypt(in []byte) ([]byte, error) {
+	var h recordLayerHeader
+	err := h.Unmarshal(in)
+	switch {
+	case err != nil:
+		return nil, err
+	case h.contentType == contentTypeChangeCipherSpec:
+		// Nothing to encrypt with ChangeCipherSpec
+		return in, nil
+	case len(in) <= (8 + recordLayerHeaderSize):
+		return nil, errNotEnoughRoomForNonce
+	}
+
+	nonce := make([]byte, 0, cryptoGCMNonceLength)
+	nonce = append(append(nonce, c.remoteWriteIV[:4]...), in[recordLayerHeaderSize:recordLayerHeaderSize+8]...)
+	out := in[recordLayerHeaderSize+8:]
+
+	additionalData := generateAEADAdditionalData(&h, len(out)-cryptoGCMTagLength)
+	out, err = c.remoteGCM.Open(out[:0], nonce, out, additionalData)
+	if err != nil {
+		return nil, fmt.Errorf("%w: %v", errDecryptPacket, err)
+	}
+	return append(in[:recordLayerHeaderSize], out...), nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/curve_type.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/curve_type.go
new file mode 100644
index 000000000..9ea103b44
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/curve_type.go
@@ -0,0 +1,14 @@
+package dtls
+
+// https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-10
+type ellipticCurveType byte
+
+const (
+	ellipticCurveTypeNamedCurve ellipticCurveType = 0x03
+)
+
+func ellipticCurveTypes() map[ellipticCurveType]bool {
+	return map[ellipticCurveType]bool{
+		ellipticCurveTypeNamedCurve: true,
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/dtls.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/dtls.go
new file mode 100644
index 000000000..125b904e5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/dtls.go
@@ -0,0 +1,2 @@
+// Package dtls implements Datagram Transport Layer Security (DTLS) 1.2
+package dtls
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/errors.go
new file mode 100644
index 000000000..e551fd601
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/errors.go
@@ -0,0 +1,229 @@
+package dtls
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"io"
+	"net"
+	"os"
+
+	"golang.org/x/xerrors"
+)
+
+// Typed errors
+var (
+	ErrConnClosed = &FatalError{errors.New("conn is closed")} //nolint:goerr113
+
+	errDeadlineExceeded = &TimeoutError{xerrors.Errorf("read/write timeout: %w", context.DeadlineExceeded)}
+
+	errBufferTooSmall               = &TemporaryError{errors.New("buffer is too small")}                                        //nolint:goerr113
+	errContextUnsupported           = &TemporaryError{errors.New("context is not supported for ExportKeyingMaterial")}          //nolint:goerr113
+	errDTLSPacketInvalidLength      = &TemporaryError{errors.New("packet is too short")}                                        //nolint:goerr113
+	errHandshakeInProgress          = &TemporaryError{errors.New("handshake is in progress")}                                   //nolint:goerr113
+	errInvalidContentType           = &TemporaryError{errors.New("invalid content type")}                                       //nolint:goerr113
+	errInvalidMAC                   = &TemporaryError{errors.New("invalid mac")}                                                //nolint:goerr113
+	errInvalidPacketLength          = &TemporaryError{errors.New("packet length and declared length do not match")}             //nolint:goerr113
+	errReservedExportKeyingMaterial = &TemporaryError{errors.New("ExportKeyingMaterial can not be used with a reserved label")} //nolint:goerr113
+
+	errCertificateVerifyNoCertificate   = &FatalError{errors.New("client sent certificate verify but we have no certificate to verify")}                      //nolint:goerr113
+	errCipherSuiteNoIntersection        = &FatalError{errors.New("client+server do not support any shared cipher suites")}                                    //nolint:goerr113
+	errCipherSuiteUnset                 = &FatalError{errors.New("server hello can not be created without a cipher suite")}                                   //nolint:goerr113
+	errClientCertificateNotVerified     = &FatalError{errors.New("client sent certificate but did not verify it")}                                            //nolint:goerr113
+	errClientCertificateRequired        = &FatalError{errors.New("server required client verification, but got none")}                                        //nolint:goerr113
+	errClientNoMatchingSRTPProfile      = &FatalError{errors.New("server responded with SRTP Profile we do not support")}                                     //nolint:goerr113
+	errClientRequiredButNoServerEMS     = &FatalError{errors.New("client required Extended Master Secret extension, but server does not support it")}         //nolint:goerr113
+	errCompressionMethodUnset           = &FatalError{errors.New("server hello can not be created without a compression method")}                             //nolint:goerr113
+	errCookieMismatch                   = &FatalError{errors.New("client+server cookie does not match")}                                                      //nolint:goerr113
+	errCookieTooLong                    = &FatalError{errors.New("cookie must not be longer then 255 bytes")}                                                 //nolint:goerr113
+	errIdentityNoPSK                    = &FatalError{errors.New("PSK Identity Hint provided but PSK is nil")}                                                //nolint:goerr113
+	errInvalidCertificate               = &FatalError{errors.New("no certificate provided")}                                                                  //nolint:goerr113
+	errInvalidCipherSpec                = &FatalError{errors.New("cipher spec invalid")}                                                                      //nolint:goerr113
+	errInvalidCipherSuite               = &FatalError{errors.New("invalid or unknown cipher suite")}                                                          //nolint:goerr113
+	errInvalidClientKeyExchange         = &FatalError{errors.New("unable to determine if ClientKeyExchange is a public key or PSK Identity")}                 //nolint:goerr113
+	errInvalidCompressionMethod         = &FatalError{errors.New("invalid or unknown compression method")}                                                    //nolint:goerr113
+	errInvalidECDSASignature            = &FatalError{errors.New("ECDSA signature contained zero or negative values")}                                        //nolint:goerr113
+	errInvalidEllipticCurveType         = &FatalError{errors.New("invalid or unknown elliptic curve type")}                                                   //nolint:goerr113
+	errInvalidExtensionType             = &FatalError{errors.New("invalid extension type")}                                                                   //nolint:goerr113
+	errInvalidHashAlgorithm             = &FatalError{errors.New("invalid hash algorithm")}                                                                   //nolint:goerr113
+	errInvalidNamedCurve                = &FatalError{errors.New("invalid named curve")}                                                                      //nolint:goerr113
+	errInvalidPrivateKey                = &FatalError{errors.New("invalid private key type")}                                                                 //nolint:goerr113
+	errInvalidSNIFormat                 = &FatalError{errors.New("invalid server name format")}                                                               //nolint:goerr113
+	errInvalidSignatureAlgorithm        = &FatalError{errors.New("invalid signature algorithm")}                                                              //nolint:goerr113
+	errKeySignatureMismatch             = &FatalError{errors.New("expected and actual key signature do not match")}                                           //nolint:goerr113
+	errNilNextConn                      = &FatalError{errors.New("Conn can not be created with a nil nextConn")}                                              //nolint:goerr113
+	errNoAvailableCipherSuites          = &FatalError{errors.New("connection can not be created, no CipherSuites satisfy this Config")}                       //nolint:goerr113
+	errNoAvailableSignatureSchemes      = &FatalError{errors.New("connection can not be created, no SignatureScheme satisfy this Config")}                    //nolint:goerr113
+	errNoCertificates                   = &FatalError{errors.New("no certificates configured")}                                                               //nolint:goerr113
+	errNoConfigProvided                 = &FatalError{errors.New("no config provided")}                                                                       //nolint:goerr113
+	errNoSupportedEllipticCurves        = &FatalError{errors.New("client requested zero or more elliptic curves that are not supported by the server")}       //nolint:goerr113
+	errUnsupportedProtocolVersion       = &FatalError{errors.New("unsupported protocol version")}                                                             //nolint:goerr113
+	errPSKAndCertificate                = &FatalError{errors.New("Certificate and PSK provided")}                                                             //nolint:stylecheck
+	errPSKAndIdentityMustBeSetForClient = &FatalError{errors.New("PSK and PSK Identity Hint must both be set for client")}                                    //nolint:goerr113
+	errRequestedButNoSRTPExtension      = &FatalError{errors.New("SRTP support was requested but server did not respond with use_srtp extension")}            //nolint:goerr113
+	errServerMustHaveCertificate        = &FatalError{errors.New("Certificate is mandatory for server")}                                                      //nolint:stylecheck
+	errServerNoMatchingSRTPProfile      = &FatalError{errors.New("client requested SRTP but we have no matching profiles")}                                   //nolint:goerr113
+	errServerRequiredButNoClientEMS     = &FatalError{errors.New("server requires the Extended Master Secret extension, but the client does not support it")} //nolint:goerr113
+	errVerifyDataMismatch               = &FatalError{errors.New("expected and actual verify data does not match")}                                           //nolint:goerr113
+
+	errHandshakeMessageUnset             = &InternalError{errors.New("handshake message unset, unable to marshal")}      //nolint:goerr113
+	errInvalidFlight                     = &InternalError{errors.New("invalid flight number")}                           //nolint:goerr113
+	errKeySignatureGenerateUnimplemented = &InternalError{errors.New("unable to generate key signature, unimplemented")} //nolint:goerr113
+	errKeySignatureVerifyUnimplemented   = &InternalError{errors.New("unable to verify key signature, unimplemented")}   //nolint:goerr113
+	errLengthMismatch                    = &InternalError{errors.New("data length and declared length do not match")}    //nolint:goerr113
+	errNotEnoughRoomForNonce             = &InternalError{errors.New("buffer not long enough to contain nonce")}         //nolint:goerr113
+	errNotImplemented                    = &InternalError{errors.New("feature has not been implemented yet")}            //nolint:goerr113
+	errSequenceNumberOverflow            = &InternalError{errors.New("sequence number overflow")}                        //nolint:goerr113
+	errUnableToMarshalFragmented         = &InternalError{errors.New("unable to marshal fragmented handshakes")}         //nolint:goerr113
+)
+
+// FatalError indicates that the DTLS connection is no longer available.
+// It is mainly caused by wrong configuration of server or client.
+type FatalError struct {
+	Err error
+}
+
+// InternalError indicates and internal error caused by the implementation, and the DTLS connection is no longer available.
+// It is mainly caused by bugs or tried to use unimplemented features.
+type InternalError struct {
+	Err error
+}
+
+// TemporaryError indicates that the DTLS connection is still available, but the request was failed temporary.
+type TemporaryError struct {
+	Err error
+}
+
+// TimeoutError indicates that the request was timed out.
+type TimeoutError struct {
+	Err error
+}
+
+// HandshakeError indicates that the handshake failed.
+type HandshakeError struct {
+	Err error
+}
+
+// invalidCipherSuite indicates an attempt at using an unsupported cipher suite.
+type invalidCipherSuite struct {
+	id CipherSuiteID
+}
+
+func (e *invalidCipherSuite) Error() string {
+	return fmt.Sprintf("CipherSuite with id(%d) is not valid", e.id)
+}
+
+func (e *invalidCipherSuite) Is(err error) bool {
+	if other, ok := err.(*invalidCipherSuite); ok {
+		return e.id == other.id
+	}
+	return false
+}
+
+// Timeout implements net.Error.Timeout()
+func (*FatalError) Timeout() bool { return false }
+
+// Temporary implements net.Error.Temporary()
+func (*FatalError) Temporary() bool { return false }
+
+// Unwrap implements Go1.13 error unwrapper.
+func (e *FatalError) Unwrap() error { return e.Err }
+
+func (e *FatalError) Error() string { return fmt.Sprintf("dtls fatal: %v", e.Err) }
+
+// Timeout implements net.Error.Timeout()
+func (*InternalError) Timeout() bool { return false }
+
+// Temporary implements net.Error.Temporary()
+func (*InternalError) Temporary() bool { return false }
+
+// Unwrap implements Go1.13 error unwrapper.
+func (e *InternalError) Unwrap() error { return e.Err }
+
+func (e *InternalError) Error() string { return fmt.Sprintf("dtls internal: %v", e.Err) }
+
+// Timeout implements net.Error.Timeout()
+func (*TemporaryError) Timeout() bool { return false }
+
+// Temporary implements net.Error.Temporary()
+func (*TemporaryError) Temporary() bool { return true }
+
+// Unwrap implements Go1.13 error unwrapper.
+func (e *TemporaryError) Unwrap() error { return e.Err }
+
+func (e *TemporaryError) Error() string { return fmt.Sprintf("dtls temporary: %v", e.Err) }
+
+// Timeout implements net.Error.Timeout()
+func (*TimeoutError) Timeout() bool { return true }
+
+// Temporary implements net.Error.Temporary()
+func (*TimeoutError) Temporary() bool { return true }
+
+// Unwrap implements Go1.13 error unwrapper.
+func (e *TimeoutError) Unwrap() error { return e.Err }
+
+func (e *TimeoutError) Error() string { return fmt.Sprintf("dtls timeout: %v", e.Err) }
+
+// Timeout implements net.Error.Timeout()
+func (e *HandshakeError) Timeout() bool {
+	if netErr, ok := e.Err.(net.Error); ok {
+		return netErr.Timeout()
+	}
+	return false
+}
+
+// Temporary implements net.Error.Temporary()
+func (e *HandshakeError) Temporary() bool {
+	if netErr, ok := e.Err.(net.Error); ok {
+		return netErr.Temporary()
+	}
+	return false
+}
+
+// Unwrap implements Go1.13 error unwrapper.
+func (e *HandshakeError) Unwrap() error { return e.Err }
+
+func (e *HandshakeError) Error() string { return fmt.Sprintf("handshake error: %v", e.Err) }
+
+// errAlert wraps DTLS alert notification as an error
+type errAlert struct {
+	*alert
+}
+
+func (e *errAlert) Error() string {
+	return fmt.Sprintf("alert: %s", e.alert.String())
+}
+
+func (e *errAlert) IsFatalOrCloseNotify() bool {
+	return e.alertLevel == alertLevelFatal || e.alertDescription == alertCloseNotify
+}
+
+func (e *errAlert) Is(err error) bool {
+	if other, ok := err.(*errAlert); ok {
+		return e.alertLevel == other.alertLevel && e.alertDescription == other.alertDescription
+	}
+	return false
+}
+
+// netError translates an error from underlying Conn to corresponding net.Error.
+func netError(err error) error {
+	switch err {
+	case io.EOF, context.Canceled, context.DeadlineExceeded:
+		// Return io.EOF and context errors as is.
+		return err
+	}
+	switch e := err.(type) {
+	case (*net.OpError):
+		if se, ok := e.Err.(*os.SyscallError); ok {
+			if se.Timeout() {
+				return &TimeoutError{err}
+			}
+			if isOpErrorTemporary(se) {
+				return &TemporaryError{err}
+			}
+		}
+	case (net.Error):
+		return err
+	}
+	return &FatalError{err}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/errors_errno.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/errors_errno.go
new file mode 100644
index 000000000..a9a439b0a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/errors_errno.go
@@ -0,0 +1,25 @@
+// +build aix darwin dragonfly freebsd linux nacl nacljs netbsd openbsd solaris windows
+
+// For systems having syscall.Errno.
+// Update build targets by following command:
+// $ grep -R ECONN $(go env GOROOT)/src/syscall/zerrors_*.go \
+//     | tr "." "_" | cut -d"_" -f"2" | sort | uniq
+
+package dtls
+
+import (
+	"os"
+	"syscall"
+)
+
+func isOpErrorTemporary(err *os.SyscallError) bool {
+	if ne, ok := err.Err.(syscall.Errno); ok {
+		switch ne {
+		case syscall.ECONNREFUSED:
+			return true
+		default:
+			return false
+		}
+	}
+	return false
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/errors_noerrno.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/errors_noerrno.go
new file mode 100644
index 000000000..fcc37cea1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/errors_noerrno.go
@@ -0,0 +1,14 @@
+// +build !aix,!darwin,!dragonfly,!freebsd,!linux,!nacl,!nacljs,!netbsd,!openbsd,!solaris,!windows
+
+// For systems without syscall.Errno.
+// Build targets must be inverse of errors_errno.go
+
+package dtls
+
+import (
+	"os"
+)
+
+func isOpErrorTemporary(err *os.SyscallError) bool {
+	return false
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension.go
new file mode 100644
index 000000000..1a4b0f7fc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension.go
@@ -0,0 +1,88 @@
+package dtls
+
+import (
+	"encoding/binary"
+)
+
+// https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml
+type extensionValue uint16
+
+const (
+	extensionServerNameValue                   extensionValue = 0
+	extensionSupportedEllipticCurvesValue      extensionValue = 10
+	extensionSupportedPointFormatsValue        extensionValue = 11
+	extensionSupportedSignatureAlgorithmsValue extensionValue = 13
+	extensionUseSRTPValue                      extensionValue = 14
+	extensionUseExtendedMasterSecretValue      extensionValue = 23
+	extensionRenegotiationInfoValue            extensionValue = 65281
+)
+
+type extension interface {
+	Marshal() ([]byte, error)
+	Unmarshal(data []byte) error
+
+	extensionValue() extensionValue
+}
+
+func decodeExtensions(buf []byte) ([]extension, error) {
+	if len(buf) < 2 {
+		return nil, errBufferTooSmall
+	}
+	declaredLen := binary.BigEndian.Uint16(buf)
+	if len(buf)-2 != int(declaredLen) {
+		return nil, errLengthMismatch
+	}
+
+	extensions := []extension{}
+	unmarshalAndAppend := func(data []byte, e extension) error {
+		err := e.Unmarshal(data)
+		if err != nil {
+			return err
+		}
+		extensions = append(extensions, e)
+		return nil
+	}
+
+	for offset := 2; offset < len(buf); {
+		if len(buf) < (offset + 2) {
+			return nil, errBufferTooSmall
+		}
+		var err error
+		switch extensionValue(binary.BigEndian.Uint16(buf[offset:])) {
+		case extensionServerNameValue:
+			err = unmarshalAndAppend(buf[offset:], &extensionServerName{})
+		case extensionSupportedEllipticCurvesValue:
+			err = unmarshalAndAppend(buf[offset:], &extensionSupportedEllipticCurves{})
+		case extensionUseSRTPValue:
+			err = unmarshalAndAppend(buf[offset:], &extensionUseSRTP{})
+		case extensionUseExtendedMasterSecretValue:
+			err = unmarshalAndAppend(buf[offset:], &extensionUseExtendedMasterSecret{})
+		case extensionRenegotiationInfoValue:
+			err = unmarshalAndAppend(buf[offset:], &extensionRenegotiationInfo{})
+		default:
+		}
+		if err != nil {
+			return nil, err
+		}
+		if len(buf) < (offset + 4) {
+			return nil, errBufferTooSmall
+		}
+		extensionLength := binary.BigEndian.Uint16(buf[offset+2:])
+		offset += (4 + int(extensionLength))
+	}
+	return extensions, nil
+}
+
+func encodeExtensions(e []extension) ([]byte, error) {
+	extensions := []byte{}
+	for _, e := range e {
+		raw, err := e.Marshal()
+		if err != nil {
+			return nil, err
+		}
+		extensions = append(extensions, raw...)
+	}
+	out := []byte{0x00, 0x00}
+	binary.BigEndian.PutUint16(out, uint16(len(extensions)))
+	return append(out, extensions...), nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_renegotiation_info.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_renegotiation_info.go
new file mode 100644
index 000000000..6e5a5e014
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_renegotiation_info.go
@@ -0,0 +1,37 @@
+package dtls
+
+import "encoding/binary"
+
+const (
+	extensionRenegotiationInfoHeaderSize = 5
+)
+
+// https://tools.ietf.org/html/rfc5746
+type extensionRenegotiationInfo struct {
+	renegotiatedConnection uint8
+}
+
+func (e extensionRenegotiationInfo) extensionValue() extensionValue {
+	return extensionRenegotiationInfoValue
+}
+
+func (e *extensionRenegotiationInfo) Marshal() ([]byte, error) {
+	out := make([]byte, extensionRenegotiationInfoHeaderSize)
+
+	binary.BigEndian.PutUint16(out, uint16(e.extensionValue()))
+	binary.BigEndian.PutUint16(out[2:], uint16(1)) // length
+	out[4] = e.renegotiatedConnection
+	return out, nil
+}
+
+func (e *extensionRenegotiationInfo) Unmarshal(data []byte) error {
+	if len(data) < extensionRenegotiationInfoHeaderSize {
+		return errBufferTooSmall
+	} else if extensionValue(binary.BigEndian.Uint16(data)) != e.extensionValue() {
+		return errInvalidExtensionType
+	}
+
+	e.renegotiatedConnection = data[4]
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_server_name.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_server_name.go
new file mode 100644
index 000000000..07eddc219
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_server_name.go
@@ -0,0 +1,70 @@
+package dtls
+
+import (
+	"strings"
+
+	"golang.org/x/crypto/cryptobyte"
+)
+
+const extensionServerNameTypeDNSHostName = 0
+
+type extensionServerName struct {
+	serverName string
+}
+
+func (e extensionServerName) extensionValue() extensionValue {
+	return extensionServerNameValue
+}
+
+func (e *extensionServerName) Marshal() ([]byte, error) {
+	var b cryptobyte.Builder
+	b.AddUint16(uint16(e.extensionValue()))
+	b.AddUint16LengthPrefixed(func(b *cryptobyte.Builder) {
+		b.AddUint16LengthPrefixed(func(b *cryptobyte.Builder) {
+			b.AddUint8(extensionServerNameTypeDNSHostName)
+			b.AddUint16LengthPrefixed(func(b *cryptobyte.Builder) {
+				b.AddBytes([]byte(e.serverName))
+			})
+		})
+	})
+	return b.Bytes()
+}
+
+func (e *extensionServerName) Unmarshal(data []byte) error {
+	s := cryptobyte.String(data)
+	var extension uint16
+	s.ReadUint16(&extension)
+	if extensionValue(extension) != e.extensionValue() {
+		return errInvalidExtensionType
+	}
+
+	var extData cryptobyte.String
+	s.ReadUint16LengthPrefixed(&extData)
+
+	var nameList cryptobyte.String
+	if !extData.ReadUint16LengthPrefixed(&nameList) || nameList.Empty() {
+		return errInvalidSNIFormat
+	}
+	for !nameList.Empty() {
+		var nameType uint8
+		var serverName cryptobyte.String
+		if !nameList.ReadUint8(&nameType) ||
+			!nameList.ReadUint16LengthPrefixed(&serverName) ||
+			serverName.Empty() {
+			return errInvalidSNIFormat
+		}
+		if nameType != extensionServerNameTypeDNSHostName {
+			continue
+		}
+		if len(e.serverName) != 0 {
+			// Multiple names of the same name_type are prohibited.
+			return errInvalidSNIFormat
+		}
+		e.serverName = string(serverName)
+		// An SNI value may not include a trailing dot.
+		if strings.HasSuffix(e.serverName, ".") {
+			return errInvalidSNIFormat
+		}
+	}
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_supported_elliptic_curves.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_supported_elliptic_curves.go
new file mode 100644
index 000000000..47e531e07
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_supported_elliptic_curves.go
@@ -0,0 +1,54 @@
+package dtls
+
+import (
+	"encoding/binary"
+)
+
+const (
+	extensionSupportedGroupsHeaderSize = 6
+)
+
+// https://tools.ietf.org/html/rfc8422#section-5.1.1
+type extensionSupportedEllipticCurves struct {
+	ellipticCurves []namedCurve
+}
+
+func (e extensionSupportedEllipticCurves) extensionValue() extensionValue {
+	return extensionSupportedEllipticCurvesValue
+}
+
+func (e *extensionSupportedEllipticCurves) Marshal() ([]byte, error) {
+	out := make([]byte, extensionSupportedGroupsHeaderSize)
+
+	binary.BigEndian.PutUint16(out, uint16(e.extensionValue()))
+	binary.BigEndian.PutUint16(out[2:], uint16(2+(len(e.ellipticCurves)*2)))
+	binary.BigEndian.PutUint16(out[4:], uint16(len(e.ellipticCurves)*2))
+
+	for _, v := range e.ellipticCurves {
+		out = append(out, []byte{0x00, 0x00}...)
+		binary.BigEndian.PutUint16(out[len(out)-2:], uint16(v))
+	}
+
+	return out, nil
+}
+
+func (e *extensionSupportedEllipticCurves) Unmarshal(data []byte) error {
+	if len(data) <= extensionSupportedGroupsHeaderSize {
+		return errBufferTooSmall
+	} else if extensionValue(binary.BigEndian.Uint16(data)) != e.extensionValue() {
+		return errInvalidExtensionType
+	}
+
+	groupCount := int(binary.BigEndian.Uint16(data[4:]) / 2)
+	if extensionSupportedGroupsHeaderSize+(groupCount*2) > len(data) {
+		return errLengthMismatch
+	}
+
+	for i := 0; i < groupCount; i++ {
+		supportedGroupID := namedCurve(binary.BigEndian.Uint16(data[(extensionSupportedGroupsHeaderSize + (i * 2)):]))
+		if _, ok := namedCurves()[supportedGroupID]; ok {
+			e.ellipticCurves = append(e.ellipticCurves, supportedGroupID)
+		}
+	}
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_supported_point_formats.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_supported_point_formats.go
new file mode 100644
index 000000000..5f2d96877
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_supported_point_formats.go
@@ -0,0 +1,56 @@
+package dtls
+
+import "encoding/binary"
+
+const (
+	extensionSupportedPointFormatsSize = 5
+)
+
+type ellipticCurvePointFormat byte
+
+const ellipticCurvePointFormatUncompressed ellipticCurvePointFormat = 0
+
+// https://tools.ietf.org/html/rfc4492#section-5.1.2
+type extensionSupportedPointFormats struct {
+	pointFormats []ellipticCurvePointFormat
+}
+
+func (e extensionSupportedPointFormats) extensionValue() extensionValue {
+	return extensionSupportedPointFormatsValue
+}
+
+func (e *extensionSupportedPointFormats) Marshal() ([]byte, error) {
+	out := make([]byte, extensionSupportedPointFormatsSize)
+
+	binary.BigEndian.PutUint16(out, uint16(e.extensionValue()))
+	binary.BigEndian.PutUint16(out[2:], uint16(1+(len(e.pointFormats))))
+	out[4] = byte(len(e.pointFormats))
+
+	for _, v := range e.pointFormats {
+		out = append(out, byte(v))
+	}
+	return out, nil
+}
+
+func (e *extensionSupportedPointFormats) Unmarshal(data []byte) error {
+	if len(data) <= extensionSupportedPointFormatsSize {
+		return errBufferTooSmall
+	} else if extensionValue(binary.BigEndian.Uint16(data)) != e.extensionValue() {
+		return errInvalidExtensionType
+	}
+
+	pointFormatCount := int(binary.BigEndian.Uint16(data[4:]))
+	if extensionSupportedGroupsHeaderSize+(pointFormatCount) > len(data) {
+		return errLengthMismatch
+	}
+
+	for i := 0; i < pointFormatCount; i++ {
+		p := ellipticCurvePointFormat(data[extensionSupportedPointFormatsSize+i])
+		switch p {
+		case ellipticCurvePointFormatUncompressed:
+			e.pointFormats = append(e.pointFormats, p)
+		default:
+		}
+	}
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_supported_signature_algorithms.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_supported_signature_algorithms.go
new file mode 100644
index 000000000..5f831928f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_supported_signature_algorithms.go
@@ -0,0 +1,60 @@
+package dtls
+
+import (
+	"encoding/binary"
+)
+
+const (
+	extensionSupportedSignatureAlgorithmsHeaderSize = 6
+)
+
+// https://tools.ietf.org/html/rfc5246#section-7.4.1.4.1
+type extensionSupportedSignatureAlgorithms struct {
+	signatureHashAlgorithms []signatureHashAlgorithm
+}
+
+func (e extensionSupportedSignatureAlgorithms) extensionValue() extensionValue {
+	return extensionSupportedSignatureAlgorithmsValue
+}
+
+func (e *extensionSupportedSignatureAlgorithms) Marshal() ([]byte, error) {
+	out := make([]byte, extensionSupportedSignatureAlgorithmsHeaderSize)
+
+	binary.BigEndian.PutUint16(out, uint16(e.extensionValue()))
+	binary.BigEndian.PutUint16(out[2:], uint16(2+(len(e.signatureHashAlgorithms)*2)))
+	binary.BigEndian.PutUint16(out[4:], uint16(len(e.signatureHashAlgorithms)*2))
+	for _, v := range e.signatureHashAlgorithms {
+		out = append(out, []byte{0x00, 0x00}...)
+		out[len(out)-2] = byte(v.hash)
+		out[len(out)-1] = byte(v.signature)
+	}
+
+	return out, nil
+}
+
+func (e *extensionSupportedSignatureAlgorithms) Unmarshal(data []byte) error {
+	if len(data) <= extensionSupportedSignatureAlgorithmsHeaderSize {
+		return errBufferTooSmall
+	} else if extensionValue(binary.BigEndian.Uint16(data)) != e.extensionValue() {
+		return errInvalidExtensionType
+	}
+
+	algorithmCount := int(binary.BigEndian.Uint16(data[4:]) / 2)
+	if extensionSupportedSignatureAlgorithmsHeaderSize+(algorithmCount*2) > len(data) {
+		return errLengthMismatch
+	}
+	for i := 0; i < algorithmCount; i++ {
+		supportedHashAlgorithm := hashAlgorithm(data[extensionSupportedSignatureAlgorithmsHeaderSize+(i*2)])
+		supportedSignatureAlgorithm := signatureAlgorithm(data[extensionSupportedSignatureAlgorithmsHeaderSize+(i*2)+1])
+		if _, ok := hashAlgorithms()[supportedHashAlgorithm]; ok {
+			if _, ok := signatureAlgorithms()[supportedSignatureAlgorithm]; ok {
+				e.signatureHashAlgorithms = append(e.signatureHashAlgorithms, signatureHashAlgorithm{
+					supportedHashAlgorithm,
+					supportedSignatureAlgorithm,
+				})
+			}
+		}
+	}
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_use_master_secret.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_use_master_secret.go
new file mode 100644
index 000000000..50d5413c0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_use_master_secret.go
@@ -0,0 +1,40 @@
+package dtls
+
+import "encoding/binary"
+
+const (
+	extensionUseExtendedMasterSecretHeaderSize = 4
+)
+
+// https://tools.ietf.org/html/rfc8422
+type extensionUseExtendedMasterSecret struct {
+	supported bool
+}
+
+func (e extensionUseExtendedMasterSecret) extensionValue() extensionValue {
+	return extensionUseExtendedMasterSecretValue
+}
+
+func (e *extensionUseExtendedMasterSecret) Marshal() ([]byte, error) {
+	if !e.supported {
+		return []byte{}, nil
+	}
+
+	out := make([]byte, extensionUseExtendedMasterSecretHeaderSize)
+
+	binary.BigEndian.PutUint16(out, uint16(e.extensionValue()))
+	binary.BigEndian.PutUint16(out[2:], uint16(0)) // length
+	return out, nil
+}
+
+func (e *extensionUseExtendedMasterSecret) Unmarshal(data []byte) error {
+	if len(data) < extensionUseExtendedMasterSecretHeaderSize {
+		return errBufferTooSmall
+	} else if extensionValue(binary.BigEndian.Uint16(data)) != e.extensionValue() {
+		return errInvalidExtensionType
+	}
+
+	e.supported = true
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_use_srtp.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_use_srtp.go
new file mode 100644
index 000000000..0805f49b7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/extension_use_srtp.go
@@ -0,0 +1,53 @@
+package dtls
+
+import "encoding/binary"
+
+const (
+	extensionUseSRTPHeaderSize = 6
+)
+
+// https://tools.ietf.org/html/rfc8422
+type extensionUseSRTP struct {
+	protectionProfiles []SRTPProtectionProfile
+}
+
+func (e extensionUseSRTP) extensionValue() extensionValue {
+	return extensionUseSRTPValue
+}
+
+func (e *extensionUseSRTP) Marshal() ([]byte, error) {
+	out := make([]byte, extensionUseSRTPHeaderSize)
+
+	binary.BigEndian.PutUint16(out, uint16(e.extensionValue()))
+	binary.BigEndian.PutUint16(out[2:], uint16(2+(len(e.protectionProfiles)*2)+ /* MKI Length */ 1))
+	binary.BigEndian.PutUint16(out[4:], uint16(len(e.protectionProfiles)*2))
+
+	for _, v := range e.protectionProfiles {
+		out = append(out, []byte{0x00, 0x00}...)
+		binary.BigEndian.PutUint16(out[len(out)-2:], uint16(v))
+	}
+
+	out = append(out, 0x00) /* MKI Length */
+	return out, nil
+}
+
+func (e *extensionUseSRTP) Unmarshal(data []byte) error {
+	if len(data) <= extensionUseSRTPHeaderSize {
+		return errBufferTooSmall
+	} else if extensionValue(binary.BigEndian.Uint16(data)) != e.extensionValue() {
+		return errInvalidExtensionType
+	}
+
+	profileCount := int(binary.BigEndian.Uint16(data[4:]) / 2)
+	if extensionSupportedGroupsHeaderSize+(profileCount*2) > len(data) {
+		return errLengthMismatch
+	}
+
+	for i := 0; i < profileCount; i++ {
+		supportedProfile := SRTPProtectionProfile(binary.BigEndian.Uint16(data[(extensionUseSRTPHeaderSize + (i * 2)):]))
+		if _, ok := srtpProtectionProfiles()[supportedProfile]; ok {
+			e.protectionProfiles = append(e.protectionProfiles, supportedProfile)
+		}
+	}
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight.go
new file mode 100644
index 000000000..580ee48d2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight.go
@@ -0,0 +1,75 @@
+package dtls
+
+/*
+  DTLS messages are grouped into a series of message flights, according
+  to the diagrams below.  Although each flight of messages may consist
+  of a number of messages, they should be viewed as monolithic for the
+  purpose of timeout and retransmission.
+  https://tools.ietf.org/html/rfc4347#section-4.2.4
+  Client                                          Server
+  ------                                          ------
+                                      Waiting                 Flight 0
+
+  ClientHello             -------->                           Flight 1
+
+                          <-------    HelloVerifyRequest      Flight 2
+
+  ClientHello              -------->                           Flight 3
+
+                                             ServerHello    \
+                                            Certificate*     \
+                                      ServerKeyExchange*      Flight 4
+                                     CertificateRequest*     /
+                          <--------      ServerHelloDone    /
+
+  Certificate*                                              \
+  ClientKeyExchange                                          \
+  CertificateVerify*                                          Flight 5
+  [ChangeCipherSpec]                                         /
+  Finished                -------->                         /
+
+                                      [ChangeCipherSpec]    \ Flight 6
+                          <--------             Finished    /
+
+*/
+
+type flightVal uint8
+
+const (
+	flight0 flightVal = iota + 1
+	flight1
+	flight2
+	flight3
+	flight4
+	flight5
+	flight6
+)
+
+func (f flightVal) String() string {
+	switch f {
+	case flight0:
+		return "Flight 0"
+	case flight1:
+		return "Flight 1"
+	case flight2:
+		return "Flight 2"
+	case flight3:
+		return "Flight 3"
+	case flight4:
+		return "Flight 4"
+	case flight5:
+		return "Flight 5"
+	case flight6:
+		return "Flight 6"
+	default:
+		return "Invalid Flight"
+	}
+}
+
+func (f flightVal) isLastSendFlight() bool {
+	return f == flight6
+}
+
+func (f flightVal) isLastRecvFlight() bool {
+	return f == flight5
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight0handler.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight0handler.go
new file mode 100644
index 000000000..fd469554d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight0handler.go
@@ -0,0 +1,89 @@
+package dtls
+
+import (
+	"context"
+	"crypto/rand"
+)
+
+func flight0Parse(ctx context.Context, c flightConn, state *State, cache *handshakeCache, cfg *handshakeConfig) (flightVal, *alert, error) {
+	seq, msgs, ok := cache.fullPullMap(0,
+		handshakeCachePullRule{handshakeTypeClientHello, cfg.initialEpoch, true, false},
+	)
+	if !ok {
+		// No valid message received. Keep reading
+		return 0, nil, nil
+	}
+	state.handshakeRecvSequence = seq
+
+	var clientHello *handshakeMessageClientHello
+
+	// Validate type
+	if clientHello, ok = msgs[handshakeTypeClientHello].(*handshakeMessageClientHello); !ok {
+		return 0, &alert{alertLevelFatal, alertInternalError}, nil
+	}
+
+	if !clientHello.version.Equal(protocolVersion1_2) {
+		return 0, &alert{alertLevelFatal, alertProtocolVersion}, errUnsupportedProtocolVersion
+	}
+
+	state.remoteRandom = clientHello.random
+
+	if state.cipherSuite, ok = findMatchingCipherSuite(clientHello.cipherSuites, cfg.localCipherSuites); !ok {
+		return 0, &alert{alertLevelFatal, alertInsufficientSecurity}, errCipherSuiteNoIntersection
+	}
+
+	for _, extension := range clientHello.extensions {
+		switch e := extension.(type) {
+		case *extensionSupportedEllipticCurves:
+			if len(e.ellipticCurves) == 0 {
+				return 0, &alert{alertLevelFatal, alertInsufficientSecurity}, errNoSupportedEllipticCurves
+			}
+			state.namedCurve = e.ellipticCurves[0]
+		case *extensionUseSRTP:
+			profile, ok := findMatchingSRTPProfile(e.protectionProfiles, cfg.localSRTPProtectionProfiles)
+			if !ok {
+				return 0, &alert{alertLevelFatal, alertInsufficientSecurity}, errServerNoMatchingSRTPProfile
+			}
+			state.srtpProtectionProfile = profile
+		case *extensionUseExtendedMasterSecret:
+			if cfg.extendedMasterSecret != DisableExtendedMasterSecret {
+				state.extendedMasterSecret = true
+			}
+		case *extensionServerName:
+			state.serverName = e.serverName // remote server name
+		}
+	}
+
+	if cfg.extendedMasterSecret == RequireExtendedMasterSecret && !state.extendedMasterSecret {
+		return 0, &alert{alertLevelFatal, alertInsufficientSecurity}, errServerRequiredButNoClientEMS
+	}
+
+	if state.localKeypair == nil {
+		var err error
+		state.localKeypair, err = generateKeypair(state.namedCurve)
+		if err != nil {
+			return 0, &alert{alertLevelFatal, alertIllegalParameter}, err
+		}
+	}
+
+	return flight2, nil, nil
+}
+
+func flight0Generate(c flightConn, state *State, cache *handshakeCache, cfg *handshakeConfig) ([]*packet, *alert, error) {
+	// Initialize
+	state.cookie = make([]byte, cookieLength)
+	if _, err := rand.Read(state.cookie); err != nil {
+		return nil, nil, err
+	}
+
+	var zeroEpoch uint16
+	state.localEpoch.Store(zeroEpoch)
+	state.remoteEpoch.Store(zeroEpoch)
+	state.namedCurve = defaultNamedCurve
+
+	if err := state.localRandom.populate(); err != nil {
+		return nil, nil, err
+	}
+
+	return nil, nil, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight1handler.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight1handler.go
new file mode 100644
index 000000000..d4e23dc6b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight1handler.go
@@ -0,0 +1,105 @@
+package dtls
+
+import (
+	"context"
+)
+
+func flight1Parse(ctx context.Context, c flightConn, state *State, cache *handshakeCache, cfg *handshakeConfig) (flightVal, *alert, error) {
+	// HelloVerifyRequest can be skipped by the server,
+	// so allow ServerHello during flight1 also
+	seq, msgs, ok := cache.fullPullMap(state.handshakeRecvSequence,
+		handshakeCachePullRule{handshakeTypeHelloVerifyRequest, cfg.initialEpoch, false, true},
+		handshakeCachePullRule{handshakeTypeServerHello, cfg.initialEpoch, false, true},
+	)
+	if !ok {
+		// No valid message received. Keep reading
+		return 0, nil, nil
+	}
+
+	if _, ok := msgs[handshakeTypeServerHello]; ok {
+		// Flight1 and flight2 were skipped.
+		// Parse as flight3.
+		return flight3Parse(ctx, c, state, cache, cfg)
+	}
+
+	if h, ok := msgs[handshakeTypeHelloVerifyRequest].(*handshakeMessageHelloVerifyRequest); ok {
+		// DTLS 1.2 clients must not assume that the server will use the protocol version
+		// specified in HelloVerifyRequest message. RFC 6347 Section 4.2.1
+		if !h.version.Equal(protocolVersion1_0) && !h.version.Equal(protocolVersion1_2) {
+			return 0, &alert{alertLevelFatal, alertProtocolVersion}, errUnsupportedProtocolVersion
+		}
+		state.cookie = append([]byte{}, h.cookie...)
+		state.handshakeRecvSequence = seq
+		return flight3, nil, nil
+	}
+
+	return 0, &alert{alertLevelFatal, alertInternalError}, nil
+}
+
+func flight1Generate(c flightConn, state *State, cache *handshakeCache, cfg *handshakeConfig) ([]*packet, *alert, error) {
+	var zeroEpoch uint16
+	state.localEpoch.Store(zeroEpoch)
+	state.remoteEpoch.Store(zeroEpoch)
+	state.namedCurve = defaultNamedCurve
+	state.cookie = nil
+
+	if err := state.localRandom.populate(); err != nil {
+		return nil, nil, err
+	}
+
+	extensions := []extension{
+		&extensionSupportedSignatureAlgorithms{
+			signatureHashAlgorithms: cfg.localSignatureSchemes,
+		},
+		&extensionRenegotiationInfo{
+			renegotiatedConnection: 0,
+		},
+	}
+	if cfg.localPSKCallback == nil {
+		extensions = append(extensions, []extension{
+			&extensionSupportedEllipticCurves{
+				ellipticCurves: []namedCurve{namedCurveX25519, namedCurveP256, namedCurveP384},
+			},
+			&extensionSupportedPointFormats{
+				pointFormats: []ellipticCurvePointFormat{ellipticCurvePointFormatUncompressed},
+			},
+		}...)
+	}
+
+	if len(cfg.localSRTPProtectionProfiles) > 0 {
+		extensions = append(extensions, &extensionUseSRTP{
+			protectionProfiles: cfg.localSRTPProtectionProfiles,
+		})
+	}
+
+	if cfg.extendedMasterSecret == RequestExtendedMasterSecret ||
+		cfg.extendedMasterSecret == RequireExtendedMasterSecret {
+		extensions = append(extensions, &extensionUseExtendedMasterSecret{
+			supported: true,
+		})
+	}
+
+	if len(cfg.serverName) > 0 {
+		extensions = append(extensions, &extensionServerName{serverName: cfg.serverName})
+	}
+
+	return []*packet{
+		{
+			record: &recordLayer{
+				recordLayerHeader: recordLayerHeader{
+					protocolVersion: protocolVersion1_2,
+				},
+				content: &handshake{
+					handshakeMessage: &handshakeMessageClientHello{
+						version:            protocolVersion1_2,
+						cookie:             state.cookie,
+						random:             state.localRandom,
+						cipherSuites:       cfg.localCipherSuites,
+						compressionMethods: defaultCompressionMethods(),
+						extensions:         extensions,
+					},
+				},
+			},
+		},
+	}, nil, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight2handler.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight2handler.go
new file mode 100644
index 000000000..4d18f237d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight2handler.go
@@ -0,0 +1,56 @@
+package dtls
+
+import (
+	"bytes"
+	"context"
+)
+
+func flight2Parse(ctx context.Context, c flightConn, state *State, cache *handshakeCache, cfg *handshakeConfig) (flightVal, *alert, error) {
+	seq, msgs, ok := cache.fullPullMap(state.handshakeRecvSequence,
+		handshakeCachePullRule{handshakeTypeClientHello, cfg.initialEpoch, true, false},
+	)
+	if !ok {
+		// Client may retransmit the first ClientHello when HelloVerifyRequest is dropped.
+		// Parse as flight 0 in this case.
+		return flight0Parse(ctx, c, state, cache, cfg)
+	}
+	state.handshakeRecvSequence = seq
+
+	var clientHello *handshakeMessageClientHello
+
+	// Validate type
+	if clientHello, ok = msgs[handshakeTypeClientHello].(*handshakeMessageClientHello); !ok {
+		return 0, &alert{alertLevelFatal, alertInternalError}, nil
+	}
+
+	if !clientHello.version.Equal(protocolVersion1_2) {
+		return 0, &alert{alertLevelFatal, alertProtocolVersion}, errUnsupportedProtocolVersion
+	}
+
+	if len(clientHello.cookie) == 0 {
+		return 0, nil, nil
+	}
+	if !bytes.Equal(state.cookie, clientHello.cookie) {
+		return 0, &alert{alertLevelFatal, alertAccessDenied}, errCookieMismatch
+	}
+	return flight4, nil, nil
+}
+
+func flight2Generate(c flightConn, state *State, cache *handshakeCache, cfg *handshakeConfig) ([]*packet, *alert, error) {
+	state.handshakeSendSequence = 0
+	return []*packet{
+		{
+			record: &recordLayer{
+				recordLayerHeader: recordLayerHeader{
+					protocolVersion: protocolVersion1_2,
+				},
+				content: &handshake{
+					handshakeMessage: &handshakeMessageHelloVerifyRequest{
+						version: protocolVersion1_2,
+						cookie:  state.cookie,
+					},
+				},
+			},
+		},
+	}, nil, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight3handler.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight3handler.go
new file mode 100644
index 000000000..309a8871e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight3handler.go
@@ -0,0 +1,177 @@
+package dtls
+
+import (
+	"context"
+)
+
+func flight3Parse(ctx context.Context, c flightConn, state *State, cache *handshakeCache, cfg *handshakeConfig) (flightVal, *alert, error) { //nolint:gocognit
+	// Clients may receive multiple HelloVerifyRequest messages with different cookies.
+	// Clients SHOULD handle this by sending a new ClientHello with a cookie in response
+	// to the new HelloVerifyRequest. RFC 6347 Section 4.2.1
+	seq, msgs, ok := cache.fullPullMap(state.handshakeRecvSequence,
+		handshakeCachePullRule{handshakeTypeHelloVerifyRequest, cfg.initialEpoch, false, true},
+	)
+	if ok {
+		if h, msgOk := msgs[handshakeTypeHelloVerifyRequest].(*handshakeMessageHelloVerifyRequest); msgOk {
+			// DTLS 1.2 clients must not assume that the server will use the protocol version
+			// specified in HelloVerifyRequest message. RFC 6347 Section 4.2.1
+			if !h.version.Equal(protocolVersion1_0) && !h.version.Equal(protocolVersion1_2) {
+				return 0, &alert{alertLevelFatal, alertProtocolVersion}, errUnsupportedProtocolVersion
+			}
+			state.cookie = append([]byte{}, h.cookie...)
+			state.handshakeRecvSequence = seq
+			return flight3, nil, nil
+		}
+	}
+
+	if cfg.localPSKCallback != nil {
+		seq, msgs, ok = cache.fullPullMap(state.handshakeRecvSequence,
+			handshakeCachePullRule{handshakeTypeServerHello, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeServerKeyExchange, cfg.initialEpoch, false, true},
+			handshakeCachePullRule{handshakeTypeServerHelloDone, cfg.initialEpoch, false, false},
+		)
+	} else {
+		seq, msgs, ok = cache.fullPullMap(state.handshakeRecvSequence,
+			handshakeCachePullRule{handshakeTypeServerHello, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeCertificate, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeServerKeyExchange, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeCertificateRequest, cfg.initialEpoch, false, true},
+			handshakeCachePullRule{handshakeTypeServerHelloDone, cfg.initialEpoch, false, false},
+		)
+	}
+	if !ok {
+		// Don't have enough messages. Keep reading
+		return 0, nil, nil
+	}
+	state.handshakeRecvSequence = seq
+
+	if h, ok := msgs[handshakeTypeServerHello].(*handshakeMessageServerHello); ok {
+		if !h.version.Equal(protocolVersion1_2) {
+			return 0, &alert{alertLevelFatal, alertProtocolVersion}, errUnsupportedProtocolVersion
+		}
+		for _, extension := range h.extensions {
+			switch e := extension.(type) {
+			case *extensionUseSRTP:
+				profile, ok := findMatchingSRTPProfile(e.protectionProfiles, cfg.localSRTPProtectionProfiles)
+				if !ok {
+					return 0, &alert{alertLevelFatal, alertIllegalParameter}, errClientNoMatchingSRTPProfile
+				}
+				state.srtpProtectionProfile = profile
+			case *extensionUseExtendedMasterSecret:
+				if cfg.extendedMasterSecret != DisableExtendedMasterSecret {
+					state.extendedMasterSecret = true
+				}
+			}
+		}
+		if cfg.extendedMasterSecret == RequireExtendedMasterSecret && !state.extendedMasterSecret {
+			return 0, &alert{alertLevelFatal, alertInsufficientSecurity}, errClientRequiredButNoServerEMS
+		}
+		if len(cfg.localSRTPProtectionProfiles) > 0 && state.srtpProtectionProfile == 0 {
+			return 0, &alert{alertLevelFatal, alertInsufficientSecurity}, errRequestedButNoSRTPExtension
+		}
+		if _, ok := findMatchingCipherSuite([]cipherSuite{h.cipherSuite}, cfg.localCipherSuites); !ok {
+			return 0, &alert{alertLevelFatal, alertInsufficientSecurity}, errCipherSuiteNoIntersection
+		}
+
+		state.cipherSuite = h.cipherSuite
+		state.remoteRandom = h.random
+		cfg.log.Tracef("[handshake] use cipher suite: %s", h.cipherSuite.String())
+	}
+
+	if h, ok := msgs[handshakeTypeCertificate].(*handshakeMessageCertificate); ok {
+		state.PeerCertificates = h.certificate
+	}
+
+	if h, ok := msgs[handshakeTypeServerKeyExchange].(*handshakeMessageServerKeyExchange); ok {
+		alertPtr, err := handleServerKeyExchange(c, state, cfg, h)
+		if err != nil {
+			return 0, alertPtr, err
+		}
+	}
+
+	if _, ok := msgs[handshakeTypeCertificateRequest].(*handshakeMessageCertificateRequest); ok {
+		state.remoteRequestedCertificate = true
+	}
+
+	return flight5, nil, nil
+}
+
+func handleServerKeyExchange(_ flightConn, state *State, cfg *handshakeConfig, h *handshakeMessageServerKeyExchange) (*alert, error) {
+	var err error
+	if cfg.localPSKCallback != nil {
+		var psk []byte
+		if psk, err = cfg.localPSKCallback(h.identityHint); err != nil {
+			return &alert{alertLevelFatal, alertInternalError}, err
+		}
+
+		state.preMasterSecret = prfPSKPreMasterSecret(psk)
+	} else {
+		if state.localKeypair, err = generateKeypair(h.namedCurve); err != nil {
+			return &alert{alertLevelFatal, alertInternalError}, err
+		}
+
+		if state.preMasterSecret, err = prfPreMasterSecret(h.publicKey, state.localKeypair.privateKey, state.localKeypair.curve); err != nil {
+			return &alert{alertLevelFatal, alertInternalError}, err
+		}
+	}
+
+	return nil, nil
+}
+
+func flight3Generate(c flightConn, state *State, cache *handshakeCache, cfg *handshakeConfig) ([]*packet, *alert, error) {
+	extensions := []extension{
+		&extensionSupportedSignatureAlgorithms{
+			signatureHashAlgorithms: cfg.localSignatureSchemes,
+		},
+		&extensionRenegotiationInfo{
+			renegotiatedConnection: 0,
+		},
+	}
+	if cfg.localPSKCallback == nil {
+		extensions = append(extensions, []extension{
+			&extensionSupportedEllipticCurves{
+				ellipticCurves: []namedCurve{namedCurveX25519, namedCurveP256, namedCurveP384},
+			},
+			&extensionSupportedPointFormats{
+				pointFormats: []ellipticCurvePointFormat{ellipticCurvePointFormatUncompressed},
+			},
+		}...)
+	}
+
+	if len(cfg.localSRTPProtectionProfiles) > 0 {
+		extensions = append(extensions, &extensionUseSRTP{
+			protectionProfiles: cfg.localSRTPProtectionProfiles,
+		})
+	}
+
+	if cfg.extendedMasterSecret == RequestExtendedMasterSecret ||
+		cfg.extendedMasterSecret == RequireExtendedMasterSecret {
+		extensions = append(extensions, &extensionUseExtendedMasterSecret{
+			supported: true,
+		})
+	}
+
+	if len(cfg.serverName) > 0 {
+		extensions = append(extensions, &extensionServerName{serverName: cfg.serverName})
+	}
+
+	return []*packet{
+		{
+			record: &recordLayer{
+				recordLayerHeader: recordLayerHeader{
+					protocolVersion: protocolVersion1_2,
+				},
+				content: &handshake{
+					handshakeMessage: &handshakeMessageClientHello{
+						version:            protocolVersion1_2,
+						cookie:             state.cookie,
+						random:             state.localRandom,
+						cipherSuites:       cfg.localCipherSuites,
+						compressionMethods: defaultCompressionMethods(),
+						extensions:         extensions,
+					},
+				},
+			},
+		},
+	}, nil, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight4handler.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight4handler.go
new file mode 100644
index 000000000..e23cce4f0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight4handler.go
@@ -0,0 +1,303 @@
+package dtls
+
+import (
+	"context"
+	"crypto/x509"
+)
+
+func flight4Parse(ctx context.Context, c flightConn, state *State, cache *handshakeCache, cfg *handshakeConfig) (flightVal, *alert, error) { //nolint:gocognit
+	seq, msgs, ok := cache.fullPullMap(state.handshakeRecvSequence,
+		handshakeCachePullRule{handshakeTypeCertificate, cfg.initialEpoch, true, true},
+		handshakeCachePullRule{handshakeTypeClientKeyExchange, cfg.initialEpoch, true, false},
+		handshakeCachePullRule{handshakeTypeCertificateVerify, cfg.initialEpoch, true, true},
+	)
+	if !ok {
+		// No valid message received. Keep reading
+		return 0, nil, nil
+	}
+
+	// Validate type
+	var clientKeyExchange *handshakeMessageClientKeyExchange
+	if clientKeyExchange, ok = msgs[handshakeTypeClientKeyExchange].(*handshakeMessageClientKeyExchange); !ok {
+		return 0, &alert{alertLevelFatal, alertInternalError}, nil
+	}
+
+	if h, hasCert := msgs[handshakeTypeCertificate].(*handshakeMessageCertificate); hasCert {
+		state.PeerCertificates = h.certificate
+	}
+
+	if h, hasCertVerify := msgs[handshakeTypeCertificateVerify].(*handshakeMessageCertificateVerify); hasCertVerify {
+		if state.PeerCertificates == nil {
+			return 0, &alert{alertLevelFatal, alertNoCertificate}, errCertificateVerifyNoCertificate
+		}
+
+		plainText := cache.pullAndMerge(
+			handshakeCachePullRule{handshakeTypeClientHello, cfg.initialEpoch, true, false},
+			handshakeCachePullRule{handshakeTypeServerHello, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeCertificate, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeServerKeyExchange, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeCertificateRequest, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeServerHelloDone, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeCertificate, cfg.initialEpoch, true, false},
+			handshakeCachePullRule{handshakeTypeClientKeyExchange, cfg.initialEpoch, true, false},
+		)
+
+		// Verify that the pair of hash algorithm and signiture is listed.
+		var validSignatureScheme bool
+		for _, ss := range cfg.localSignatureSchemes {
+			if ss.hash == h.hashAlgorithm && ss.signature == h.signatureAlgorithm {
+				validSignatureScheme = true
+				break
+			}
+		}
+		if !validSignatureScheme {
+			return 0, &alert{alertLevelFatal, alertInsufficientSecurity}, errNoAvailableSignatureSchemes
+		}
+
+		if err := verifyCertificateVerify(plainText, h.hashAlgorithm, h.signature, state.PeerCertificates); err != nil {
+			return 0, &alert{alertLevelFatal, alertBadCertificate}, err
+		}
+		var chains [][]*x509.Certificate
+		var err error
+		var verified bool
+		if cfg.clientAuth >= VerifyClientCertIfGiven {
+			if chains, err = verifyClientCert(state.PeerCertificates, cfg.clientCAs); err != nil {
+				return 0, &alert{alertLevelFatal, alertBadCertificate}, err
+			}
+			verified = true
+		}
+		if cfg.verifyPeerCertificate != nil {
+			if err := cfg.verifyPeerCertificate(state.PeerCertificates, chains); err != nil {
+				return 0, &alert{alertLevelFatal, alertBadCertificate}, err
+			}
+		}
+		state.peerCertificatesVerified = verified
+	}
+
+	if !state.cipherSuite.isInitialized() {
+		serverRandom := state.localRandom.marshalFixed()
+		clientRandom := state.remoteRandom.marshalFixed()
+
+		var err error
+		var preMasterSecret []byte
+		if cfg.localPSKCallback != nil {
+			var psk []byte
+			if psk, err = cfg.localPSKCallback(clientKeyExchange.identityHint); err != nil {
+				return 0, &alert{alertLevelFatal, alertInternalError}, err
+			}
+
+			preMasterSecret = prfPSKPreMasterSecret(psk)
+		} else {
+			preMasterSecret, err = prfPreMasterSecret(clientKeyExchange.publicKey, state.localKeypair.privateKey, state.localKeypair.curve)
+			if err != nil {
+				return 0, &alert{alertLevelFatal, alertIllegalParameter}, err
+			}
+		}
+
+		if state.extendedMasterSecret {
+			var sessionHash []byte
+			sessionHash, err = cache.sessionHash(state.cipherSuite.hashFunc(), cfg.initialEpoch)
+			if err != nil {
+				return 0, &alert{alertLevelFatal, alertInternalError}, err
+			}
+
+			state.masterSecret, err = prfExtendedMasterSecret(preMasterSecret, sessionHash, state.cipherSuite.hashFunc())
+			if err != nil {
+				return 0, &alert{alertLevelFatal, alertInternalError}, err
+			}
+		} else {
+			state.masterSecret, err = prfMasterSecret(preMasterSecret, clientRandom[:], serverRandom[:], state.cipherSuite.hashFunc())
+			if err != nil {
+				return 0, &alert{alertLevelFatal, alertInternalError}, err
+			}
+		}
+
+		if err := state.cipherSuite.init(state.masterSecret, clientRandom[:], serverRandom[:], false); err != nil {
+			return 0, &alert{alertLevelFatal, alertInternalError}, err
+		}
+	}
+
+	// Now, encrypted packets can be handled
+	if err := c.handleQueuedPackets(ctx); err != nil {
+		return 0, &alert{alertLevelFatal, alertInternalError}, err
+	}
+
+	seq, msgs, ok = cache.fullPullMap(seq,
+		handshakeCachePullRule{handshakeTypeFinished, cfg.initialEpoch + 1, true, false},
+	)
+	if !ok {
+		// No valid message received. Keep reading
+		return 0, nil, nil
+	}
+	state.handshakeRecvSequence = seq
+
+	if _, ok = msgs[handshakeTypeFinished].(*handshakeMessageFinished); !ok {
+		return 0, &alert{alertLevelFatal, alertInternalError}, nil
+	}
+
+	switch cfg.clientAuth {
+	case RequireAnyClientCert:
+		if state.PeerCertificates == nil {
+			return 0, &alert{alertLevelFatal, alertNoCertificate}, errClientCertificateRequired
+		}
+	case VerifyClientCertIfGiven:
+		if state.PeerCertificates != nil && !state.peerCertificatesVerified {
+			return 0, &alert{alertLevelFatal, alertBadCertificate}, errClientCertificateNotVerified
+		}
+	case RequireAndVerifyClientCert:
+		if state.PeerCertificates == nil {
+			return 0, &alert{alertLevelFatal, alertNoCertificate}, errClientCertificateRequired
+		}
+		if !state.peerCertificatesVerified {
+			return 0, &alert{alertLevelFatal, alertBadCertificate}, errClientCertificateNotVerified
+		}
+	case NoClientCert, RequestClientCert:
+		return flight6, nil, nil
+	}
+
+	return flight6, nil, nil
+}
+
+func flight4Generate(c flightConn, state *State, cache *handshakeCache, cfg *handshakeConfig) ([]*packet, *alert, error) {
+	extensions := []extension{}
+	if (cfg.extendedMasterSecret == RequestExtendedMasterSecret ||
+		cfg.extendedMasterSecret == RequireExtendedMasterSecret) && state.extendedMasterSecret {
+		extensions = append(extensions, &extensionUseExtendedMasterSecret{
+			supported: true,
+		})
+	}
+	if state.srtpProtectionProfile != 0 {
+		extensions = append(extensions, &extensionUseSRTP{
+			protectionProfiles: []SRTPProtectionProfile{state.srtpProtectionProfile},
+		})
+	}
+	if cfg.localPSKCallback == nil {
+		extensions = append(extensions, []extension{
+			&extensionSupportedEllipticCurves{
+				ellipticCurves: []namedCurve{namedCurveX25519, namedCurveP256, namedCurveP384},
+			},
+			&extensionSupportedPointFormats{
+				pointFormats: []ellipticCurvePointFormat{ellipticCurvePointFormatUncompressed},
+			},
+		}...)
+	}
+
+	var pkts []*packet
+
+	pkts = append(pkts, &packet{
+		record: &recordLayer{
+			recordLayerHeader: recordLayerHeader{
+				protocolVersion: protocolVersion1_2,
+			},
+			content: &handshake{
+				handshakeMessage: &handshakeMessageServerHello{
+					version:           protocolVersion1_2,
+					random:            state.localRandom,
+					cipherSuite:       state.cipherSuite,
+					compressionMethod: defaultCompressionMethods()[0],
+					extensions:        extensions,
+				},
+			},
+		},
+	})
+
+	if cfg.localPSKCallback == nil {
+		certificate, err := cfg.getCertificate(cfg.serverName)
+		if err != nil {
+			return nil, &alert{alertLevelFatal, alertHandshakeFailure}, err
+		}
+
+		pkts = append(pkts, &packet{
+			record: &recordLayer{
+				recordLayerHeader: recordLayerHeader{
+					protocolVersion: protocolVersion1_2,
+				},
+				content: &handshake{
+					handshakeMessage: &handshakeMessageCertificate{
+						certificate: certificate.Certificate,
+					},
+				},
+			},
+		})
+
+		serverRandom := state.localRandom.marshalFixed()
+		clientRandom := state.remoteRandom.marshalFixed()
+
+		// Find compatible signature scheme
+		signatureHashAlgo, err := selectSignatureScheme(cfg.localSignatureSchemes, certificate.PrivateKey)
+		if err != nil {
+			return nil, &alert{alertLevelFatal, alertInsufficientSecurity}, err
+		}
+
+		signature, err := generateKeySignature(clientRandom[:], serverRandom[:], state.localKeypair.publicKey, state.namedCurve, certificate.PrivateKey, signatureHashAlgo.hash)
+		if err != nil {
+			return nil, &alert{alertLevelFatal, alertInternalError}, err
+		}
+		state.localKeySignature = signature
+
+		pkts = append(pkts, &packet{
+			record: &recordLayer{
+				recordLayerHeader: recordLayerHeader{
+					protocolVersion: protocolVersion1_2,
+				},
+				content: &handshake{
+					handshakeMessage: &handshakeMessageServerKeyExchange{
+						ellipticCurveType:  ellipticCurveTypeNamedCurve,
+						namedCurve:         state.namedCurve,
+						publicKey:          state.localKeypair.publicKey,
+						hashAlgorithm:      signatureHashAlgo.hash,
+						signatureAlgorithm: signatureHashAlgo.signature,
+						signature:          state.localKeySignature,
+					},
+				},
+			},
+		})
+
+		if cfg.clientAuth > NoClientCert {
+			pkts = append(pkts, &packet{
+				record: &recordLayer{
+					recordLayerHeader: recordLayerHeader{
+						protocolVersion: protocolVersion1_2,
+					},
+					content: &handshake{
+						handshakeMessage: &handshakeMessageCertificateRequest{
+							certificateTypes:        []clientCertificateType{clientCertificateTypeRSASign, clientCertificateTypeECDSASign},
+							signatureHashAlgorithms: cfg.localSignatureSchemes,
+						},
+					},
+				},
+			})
+		}
+	} else if cfg.localPSKIdentityHint != nil {
+		// To help the client in selecting which identity to use, the server
+		// can provide a "PSK identity hint" in the ServerKeyExchange message.
+		// If no hint is provided, the ServerKeyExchange message is omitted.
+		//
+		// https://tools.ietf.org/html/rfc4279#section-2
+		pkts = append(pkts, &packet{
+			record: &recordLayer{
+				recordLayerHeader: recordLayerHeader{
+					protocolVersion: protocolVersion1_2,
+				},
+				content: &handshake{
+					handshakeMessage: &handshakeMessageServerKeyExchange{
+						identityHint: cfg.localPSKIdentityHint,
+					},
+				},
+			},
+		})
+	}
+
+	pkts = append(pkts, &packet{
+		record: &recordLayer{
+			recordLayerHeader: recordLayerHeader{
+				protocolVersion: protocolVersion1_2,
+			},
+			content: &handshake{
+				handshakeMessage: &handshakeMessageServerHelloDone{},
+			},
+		},
+	})
+
+	return pkts, nil, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight5handler.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight5handler.go
new file mode 100644
index 000000000..bb7c31b33
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight5handler.go
@@ -0,0 +1,313 @@
+package dtls
+
+import (
+	"bytes"
+	"context"
+	"crypto"
+	"crypto/x509"
+)
+
+func flight5Parse(ctx context.Context, c flightConn, state *State, cache *handshakeCache, cfg *handshakeConfig) (flightVal, *alert, error) {
+	_, msgs, ok := cache.fullPullMap(state.handshakeRecvSequence,
+		handshakeCachePullRule{handshakeTypeFinished, cfg.initialEpoch + 1, false, false},
+	)
+	if !ok {
+		// No valid message received. Keep reading
+		return 0, nil, nil
+	}
+
+	var finished *handshakeMessageFinished
+	if finished, ok = msgs[handshakeTypeFinished].(*handshakeMessageFinished); !ok {
+		return 0, &alert{alertLevelFatal, alertInternalError}, nil
+	}
+	plainText := cache.pullAndMerge(
+		handshakeCachePullRule{handshakeTypeClientHello, cfg.initialEpoch, true, false},
+		handshakeCachePullRule{handshakeTypeServerHello, cfg.initialEpoch, false, false},
+		handshakeCachePullRule{handshakeTypeCertificate, cfg.initialEpoch, false, false},
+		handshakeCachePullRule{handshakeTypeServerKeyExchange, cfg.initialEpoch, false, false},
+		handshakeCachePullRule{handshakeTypeCertificateRequest, cfg.initialEpoch, false, false},
+		handshakeCachePullRule{handshakeTypeServerHelloDone, cfg.initialEpoch, false, false},
+		handshakeCachePullRule{handshakeTypeCertificate, cfg.initialEpoch, true, false},
+		handshakeCachePullRule{handshakeTypeClientKeyExchange, cfg.initialEpoch, true, false},
+		handshakeCachePullRule{handshakeTypeCertificateVerify, cfg.initialEpoch, true, false},
+		handshakeCachePullRule{handshakeTypeFinished, cfg.initialEpoch + 1, true, false},
+	)
+
+	expectedVerifyData, err := prfVerifyDataServer(state.masterSecret, plainText, state.cipherSuite.hashFunc())
+	if err != nil {
+		return 0, &alert{alertLevelFatal, alertInternalError}, err
+	}
+	if !bytes.Equal(expectedVerifyData, finished.verifyData) {
+		return 0, &alert{alertLevelFatal, alertHandshakeFailure}, errVerifyDataMismatch
+	}
+
+	return flight5, nil, nil
+}
+
+func flight5Generate(c flightConn, state *State, cache *handshakeCache, cfg *handshakeConfig) ([]*packet, *alert, error) { //nolint:gocognit
+	var certBytes [][]byte
+	var privateKey crypto.PrivateKey
+	if len(cfg.localCertificates) > 0 {
+		certificate, err := cfg.getCertificate(cfg.serverName)
+		if err != nil {
+			return nil, &alert{alertLevelFatal, alertHandshakeFailure}, err
+		}
+		certBytes = certificate.Certificate
+		privateKey = certificate.PrivateKey
+	}
+
+	var pkts []*packet
+
+	if state.remoteRequestedCertificate {
+		pkts = append(pkts,
+			&packet{
+				record: &recordLayer{
+					recordLayerHeader: recordLayerHeader{
+						protocolVersion: protocolVersion1_2,
+					},
+					content: &handshake{
+						handshakeMessage: &handshakeMessageCertificate{
+							certificate: certBytes,
+						},
+					},
+				},
+			})
+	}
+
+	clientKeyExchange := &handshakeMessageClientKeyExchange{}
+	if cfg.localPSKCallback == nil {
+		clientKeyExchange.publicKey = state.localKeypair.publicKey
+	} else {
+		clientKeyExchange.identityHint = cfg.localPSKIdentityHint
+	}
+
+	pkts = append(pkts,
+		&packet{
+			record: &recordLayer{
+				recordLayerHeader: recordLayerHeader{
+					protocolVersion: protocolVersion1_2,
+				},
+				content: &handshake{
+					handshakeMessage: clientKeyExchange,
+				},
+			},
+		})
+
+	serverKeyExchangeData := cache.pullAndMerge(
+		handshakeCachePullRule{handshakeTypeServerKeyExchange, cfg.initialEpoch, false, false},
+	)
+
+	serverKeyExchange := &handshakeMessageServerKeyExchange{}
+
+	// handshakeMessageServerKeyExchange is optional for PSK
+	if len(serverKeyExchangeData) == 0 {
+		alertPtr, err := handleServerKeyExchange(c, state, cfg, &handshakeMessageServerKeyExchange{})
+		if err != nil {
+			return nil, alertPtr, err
+		}
+	} else {
+		rawHandshake := &handshake{}
+		err := rawHandshake.Unmarshal(serverKeyExchangeData)
+		if err != nil {
+			return nil, &alert{alertLevelFatal, alertUnexpectedMessage}, err
+		}
+
+		switch h := rawHandshake.handshakeMessage.(type) {
+		case *handshakeMessageServerKeyExchange:
+			serverKeyExchange = h
+		default:
+			return nil, &alert{alertLevelFatal, alertUnexpectedMessage}, errInvalidContentType
+		}
+	}
+
+	// Append not-yet-sent packets
+	merged := []byte{}
+	seqPred := uint16(state.handshakeSendSequence)
+	for _, p := range pkts {
+		h, ok := p.record.content.(*handshake)
+		if !ok {
+			return nil, &alert{alertLevelFatal, alertInternalError}, errInvalidContentType
+		}
+		h.handshakeHeader.messageSequence = seqPred
+		seqPred++
+		raw, err := h.Marshal()
+		if err != nil {
+			return nil, &alert{alertLevelFatal, alertInternalError}, err
+		}
+		merged = append(merged, raw...)
+	}
+
+	if alertPtr, err := initalizeCipherSuite(state, cache, cfg, serverKeyExchange, merged); err != nil {
+		return nil, alertPtr, err
+	}
+
+	// If the client has sent a certificate with signing ability, a digitally-signed
+	// CertificateVerify message is sent to explicitly verify possession of the
+	// private key in the certificate.
+	if state.remoteRequestedCertificate && len(cfg.localCertificates) > 0 {
+		plainText := append(cache.pullAndMerge(
+			handshakeCachePullRule{handshakeTypeClientHello, cfg.initialEpoch, true, false},
+			handshakeCachePullRule{handshakeTypeServerHello, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeCertificate, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeServerKeyExchange, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeCertificateRequest, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeServerHelloDone, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeCertificate, cfg.initialEpoch, true, false},
+			handshakeCachePullRule{handshakeTypeClientKeyExchange, cfg.initialEpoch, true, false},
+		), merged...)
+
+		// Find compatible signature scheme
+		signatureHashAlgo, err := selectSignatureScheme(cfg.localSignatureSchemes, privateKey)
+		if err != nil {
+			return nil, &alert{alertLevelFatal, alertInsufficientSecurity}, err
+		}
+
+		certVerify, err := generateCertificateVerify(plainText, privateKey, signatureHashAlgo.hash)
+		if err != nil {
+			return nil, &alert{alertLevelFatal, alertInternalError}, err
+		}
+		state.localCertificatesVerify = certVerify
+
+		p := &packet{
+			record: &recordLayer{
+				recordLayerHeader: recordLayerHeader{
+					protocolVersion: protocolVersion1_2,
+				},
+				content: &handshake{
+					handshakeMessage: &handshakeMessageCertificateVerify{
+						hashAlgorithm:      signatureHashAlgo.hash,
+						signatureAlgorithm: signatureHashAlgo.signature,
+						signature:          state.localCertificatesVerify,
+					},
+				},
+			},
+		}
+		pkts = append(pkts, p)
+
+		h, ok := p.record.content.(*handshake)
+		if !ok {
+			return nil, &alert{alertLevelFatal, alertInternalError}, errInvalidContentType
+		}
+		h.handshakeHeader.messageSequence = seqPred
+		// seqPred++ // this is the last use of seqPred
+		raw, err := h.Marshal()
+		if err != nil {
+			return nil, &alert{alertLevelFatal, alertInternalError}, err
+		}
+		merged = append(merged, raw...)
+	}
+
+	pkts = append(pkts,
+		&packet{
+			record: &recordLayer{
+				recordLayerHeader: recordLayerHeader{
+					protocolVersion: protocolVersion1_2,
+				},
+				content: &changeCipherSpec{},
+			},
+		})
+
+	if len(state.localVerifyData) == 0 {
+		plainText := cache.pullAndMerge(
+			handshakeCachePullRule{handshakeTypeClientHello, cfg.initialEpoch, true, false},
+			handshakeCachePullRule{handshakeTypeServerHello, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeCertificate, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeServerKeyExchange, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeCertificateRequest, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeServerHelloDone, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeCertificate, cfg.initialEpoch, true, false},
+			handshakeCachePullRule{handshakeTypeClientKeyExchange, cfg.initialEpoch, true, false},
+			handshakeCachePullRule{handshakeTypeCertificateVerify, cfg.initialEpoch, true, false},
+			handshakeCachePullRule{handshakeTypeFinished, cfg.initialEpoch + 1, true, false},
+		)
+
+		var err error
+		state.localVerifyData, err = prfVerifyDataClient(state.masterSecret, append(plainText, merged...), state.cipherSuite.hashFunc())
+		if err != nil {
+			return nil, &alert{alertLevelFatal, alertInternalError}, err
+		}
+	}
+
+	pkts = append(pkts,
+		&packet{
+			record: &recordLayer{
+				recordLayerHeader: recordLayerHeader{
+					protocolVersion: protocolVersion1_2,
+					epoch:           1,
+				},
+				content: &handshake{
+					handshakeMessage: &handshakeMessageFinished{
+						verifyData: state.localVerifyData,
+					},
+				},
+			},
+			shouldEncrypt:            true,
+			resetLocalSequenceNumber: true,
+		})
+
+	return pkts, nil, nil
+}
+
+func initalizeCipherSuite(state *State, cache *handshakeCache, cfg *handshakeConfig, h *handshakeMessageServerKeyExchange, sendingPlainText []byte) (*alert, error) { //nolint:gocognit
+	if state.cipherSuite.isInitialized() {
+		return nil, nil
+	}
+
+	clientRandom := state.localRandom.marshalFixed()
+	serverRandom := state.remoteRandom.marshalFixed()
+
+	var err error
+
+	if state.extendedMasterSecret {
+		var sessionHash []byte
+		sessionHash, err = cache.sessionHash(state.cipherSuite.hashFunc(), cfg.initialEpoch, sendingPlainText)
+		if err != nil {
+			return &alert{alertLevelFatal, alertInternalError}, err
+		}
+
+		state.masterSecret, err = prfExtendedMasterSecret(state.preMasterSecret, sessionHash, state.cipherSuite.hashFunc())
+		if err != nil {
+			return &alert{alertLevelFatal, alertIllegalParameter}, err
+		}
+	} else {
+		state.masterSecret, err = prfMasterSecret(state.preMasterSecret, clientRandom[:], serverRandom[:], state.cipherSuite.hashFunc())
+		if err != nil {
+			return &alert{alertLevelFatal, alertInternalError}, err
+		}
+	}
+
+	if cfg.localPSKCallback == nil {
+		// Verify that the pair of hash algorithm and signiture is listed.
+		var validSignatureScheme bool
+		for _, ss := range cfg.localSignatureSchemes {
+			if ss.hash == h.hashAlgorithm && ss.signature == h.signatureAlgorithm {
+				validSignatureScheme = true
+				break
+			}
+		}
+		if !validSignatureScheme {
+			return &alert{alertLevelFatal, alertInsufficientSecurity}, errNoAvailableSignatureSchemes
+		}
+
+		expectedMsg := valueKeyMessage(clientRandom[:], serverRandom[:], h.publicKey, h.namedCurve)
+		if err = verifyKeySignature(expectedMsg, h.signature, h.hashAlgorithm, state.PeerCertificates); err != nil {
+			return &alert{alertLevelFatal, alertBadCertificate}, err
+		}
+		var chains [][]*x509.Certificate
+		if !cfg.insecureSkipVerify {
+			if chains, err = verifyServerCert(state.PeerCertificates, cfg.rootCAs, cfg.serverName); err != nil {
+				return &alert{alertLevelFatal, alertBadCertificate}, err
+			}
+		}
+		if cfg.verifyPeerCertificate != nil {
+			if err = cfg.verifyPeerCertificate(state.PeerCertificates, chains); err != nil {
+				return &alert{alertLevelFatal, alertBadCertificate}, err
+			}
+		}
+	}
+
+	if err = state.cipherSuite.init(state.masterSecret, clientRandom[:], serverRandom[:], true); err != nil {
+		return &alert{alertLevelFatal, alertInternalError}, err
+	}
+	return nil, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight6handler.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight6handler.go
new file mode 100644
index 000000000..3884d7804
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flight6handler.go
@@ -0,0 +1,76 @@
+package dtls
+
+import (
+	"context"
+)
+
+func flight6Parse(ctx context.Context, c flightConn, state *State, cache *handshakeCache, cfg *handshakeConfig) (flightVal, *alert, error) {
+	_, msgs, ok := cache.fullPullMap(state.handshakeRecvSequence-1,
+		handshakeCachePullRule{handshakeTypeFinished, cfg.initialEpoch + 1, true, false},
+	)
+	if !ok {
+		// No valid message received. Keep reading
+		return 0, nil, nil
+	}
+
+	if _, ok = msgs[handshakeTypeFinished].(*handshakeMessageFinished); !ok {
+		return 0, &alert{alertLevelFatal, alertInternalError}, nil
+	}
+
+	// Other party retransmitted the last flight.
+	return flight6, nil, nil
+}
+
+func flight6Generate(c flightConn, state *State, cache *handshakeCache, cfg *handshakeConfig) ([]*packet, *alert, error) {
+	var pkts []*packet
+
+	pkts = append(pkts,
+		&packet{
+			record: &recordLayer{
+				recordLayerHeader: recordLayerHeader{
+					protocolVersion: protocolVersion1_2,
+				},
+				content: &changeCipherSpec{},
+			},
+		})
+
+	if len(state.localVerifyData) == 0 {
+		plainText := cache.pullAndMerge(
+			handshakeCachePullRule{handshakeTypeClientHello, cfg.initialEpoch, true, false},
+			handshakeCachePullRule{handshakeTypeServerHello, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeCertificate, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeServerKeyExchange, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeCertificateRequest, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeServerHelloDone, cfg.initialEpoch, false, false},
+			handshakeCachePullRule{handshakeTypeCertificate, cfg.initialEpoch, true, false},
+			handshakeCachePullRule{handshakeTypeClientKeyExchange, cfg.initialEpoch, true, false},
+			handshakeCachePullRule{handshakeTypeCertificateVerify, cfg.initialEpoch, true, false},
+			handshakeCachePullRule{handshakeTypeFinished, cfg.initialEpoch + 1, true, false},
+		)
+
+		var err error
+		state.localVerifyData, err = prfVerifyDataServer(state.masterSecret, plainText, state.cipherSuite.hashFunc())
+		if err != nil {
+			return nil, &alert{alertLevelFatal, alertInternalError}, err
+		}
+	}
+
+	pkts = append(pkts,
+		&packet{
+			record: &recordLayer{
+				recordLayerHeader: recordLayerHeader{
+					protocolVersion: protocolVersion1_2,
+					epoch:           1,
+				},
+				content: &handshake{
+					handshakeMessage: &handshakeMessageFinished{
+						verifyData: state.localVerifyData,
+					},
+				},
+			},
+			shouldEncrypt:            true,
+			resetLocalSequenceNumber: true,
+		},
+	)
+	return pkts, nil, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flighthandler.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flighthandler.go
new file mode 100644
index 000000000..2b905ab38
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/flighthandler.go
@@ -0,0 +1,55 @@
+package dtls
+
+import (
+	"context"
+)
+
+// Parse received handshakes and return next flightVal
+type flightParser func(context.Context, flightConn, *State, *handshakeCache, *handshakeConfig) (flightVal, *alert, error)
+
+// Generate flights
+type flightGenerator func(flightConn, *State, *handshakeCache, *handshakeConfig) ([]*packet, *alert, error)
+
+func (f flightVal) getFlightParser() (flightParser, error) {
+	switch f {
+	case flight0:
+		return flight0Parse, nil
+	case flight1:
+		return flight1Parse, nil
+	case flight2:
+		return flight2Parse, nil
+	case flight3:
+		return flight3Parse, nil
+	case flight4:
+		return flight4Parse, nil
+	case flight5:
+		return flight5Parse, nil
+	case flight6:
+		return flight6Parse, nil
+	default:
+		return nil, errInvalidFlight
+	}
+}
+
+func (f flightVal) getFlightGenerator() (gen flightGenerator, retransmit bool, err error) {
+	switch f {
+	case flight0:
+		return flight0Generate, true, nil
+	case flight1:
+		return flight1Generate, true, nil
+	case flight2:
+		// https://tools.ietf.org/html/rfc6347#section-3.2.1
+		// HelloVerifyRequests must not be retransmitted.
+		return flight2Generate, false, nil
+	case flight3:
+		return flight3Generate, true, nil
+	case flight4:
+		return flight4Generate, true, nil
+	case flight5:
+		return flight5Generate, true, nil
+	case flight6:
+		return flight6Generate, true, nil
+	default:
+		return nil, false, errInvalidFlight
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/fragment_buffer.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/fragment_buffer.go
new file mode 100644
index 000000000..41e3fc76e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/fragment_buffer.go
@@ -0,0 +1,105 @@
+package dtls
+
+type fragment struct {
+	recordLayerHeader recordLayerHeader
+	handshakeHeader   handshakeHeader
+	data              []byte
+}
+
+type fragmentBuffer struct {
+	// map of MessageSequenceNumbers that hold slices of fragments
+	cache map[uint16][]*fragment
+
+	currentMessageSequenceNumber uint16
+}
+
+func newFragmentBuffer() *fragmentBuffer {
+	return &fragmentBuffer{cache: map[uint16][]*fragment{}}
+}
+
+// Attempts to push a DTLS packet to the fragmentBuffer
+// when it returns true it means the fragmentBuffer has inserted and the buffer shouldn't be handled
+// when an error returns it is fatal, and the DTLS connection should be stopped
+func (f *fragmentBuffer) push(buf []byte) (bool, error) {
+	frag := new(fragment)
+	if err := frag.recordLayerHeader.Unmarshal(buf); err != nil {
+		return false, err
+	}
+
+	// fragment isn't a handshake, we don't need to handle it
+	if frag.recordLayerHeader.contentType != contentTypeHandshake {
+		return false, nil
+	}
+
+	for buf = buf[recordLayerHeaderSize:]; len(buf) != 0; frag = new(fragment) {
+		if err := frag.handshakeHeader.Unmarshal(buf); err != nil {
+			return false, err
+		}
+
+		if _, ok := f.cache[frag.handshakeHeader.messageSequence]; !ok {
+			f.cache[frag.handshakeHeader.messageSequence] = []*fragment{}
+		}
+
+		// end index should be the length of handshake header but if the handshake
+		// was fragmented, we should keep them all
+		end := int(handshakeHeaderLength + frag.handshakeHeader.length)
+		if size := len(buf); end > size {
+			end = size
+		}
+
+		// Discard all headers, when rebuilding the packet we will re-build
+		frag.data = append([]byte{}, buf[handshakeHeaderLength:end]...)
+		f.cache[frag.handshakeHeader.messageSequence] = append(f.cache[frag.handshakeHeader.messageSequence], frag)
+		buf = buf[end:]
+	}
+
+	return true, nil
+}
+
+func (f *fragmentBuffer) pop() (content []byte, epoch uint16) {
+	frags, ok := f.cache[f.currentMessageSequenceNumber]
+	if !ok {
+		return nil, 0
+	}
+
+	// Go doesn't support recursive lambdas
+	var appendMessage func(targetOffset uint32) bool
+
+	rawMessage := []byte{}
+	appendMessage = func(targetOffset uint32) bool {
+		for _, f := range frags {
+			if f.handshakeHeader.fragmentOffset == targetOffset {
+				fragmentEnd := (f.handshakeHeader.fragmentOffset + f.handshakeHeader.fragmentLength)
+				if fragmentEnd != f.handshakeHeader.length {
+					if !appendMessage(fragmentEnd) {
+						return false
+					}
+				}
+
+				rawMessage = append(f.data, rawMessage...)
+				return true
+			}
+		}
+		return false
+	}
+
+	// Recursively collect up
+	if !appendMessage(0) {
+		return nil, 0
+	}
+
+	firstHeader := frags[0].handshakeHeader
+	firstHeader.fragmentOffset = 0
+	firstHeader.fragmentLength = firstHeader.length
+
+	rawHeader, err := firstHeader.Marshal()
+	if err != nil {
+		return nil, 0
+	}
+
+	messageEpoch := frags[0].recordLayerHeader.epoch
+
+	delete(f.cache, f.currentMessageSequenceNumber)
+	f.currentMessageSequenceNumber++
+	return append(rawHeader, rawMessage...), messageEpoch
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/fuzz.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/fuzz.go
new file mode 100644
index 000000000..8dfa9d5b5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/fuzz.go
@@ -0,0 +1,38 @@
+// +build gofuzz
+
+package dtls
+
+import "fmt"
+
+func partialHeaderMismatch(a, b recordLayerHeader) bool {
+	// Ignoring content length for now.
+	a.contentLen = b.contentLen
+	return a != b
+}
+
+func FuzzRecordLayer(data []byte) int {
+	var r recordLayer
+	if err := r.Unmarshal(data); err != nil {
+		return 0
+	}
+	buf, err := r.Marshal()
+	if err != nil {
+		return 1
+	}
+	if len(buf) == 0 {
+		panic("zero buff") // nolint
+	}
+	var nr recordLayer
+	if err = nr.Unmarshal(data); err != nil {
+		panic(err) // nolint
+	}
+	if partialHeaderMismatch(nr.recordLayerHeader, r.recordLayerHeader) {
+		panic( // nolint
+			fmt.Sprintf("header mismatch: %+v != %+v",
+				nr.recordLayerHeader, r.recordLayerHeader,
+			),
+		)
+	}
+
+	return 1
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/go.mod
new file mode 100644
index 000000000..eaee6ca16
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/go.mod
@@ -0,0 +1,12 @@
+module github.com/pion/dtls/v2
+
+require (
+	github.com/pion/logging v0.2.2
+	github.com/pion/transport v0.10.1
+	github.com/pion/udp v0.1.0
+	golang.org/x/crypto v0.0.0-20201016220609-9e8e0b390897
+	golang.org/x/net v0.0.0-20201031054903-ff519b6c9102
+	golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1
+)
+
+go 1.13
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/go.sum b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/go.sum
new file mode 100644
index 000000000..35b47381b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/go.sum
@@ -0,0 +1,45 @@
+github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/pion/logging v0.2.2 h1:M9+AIj/+pxNsDfAT64+MAVgJO0rsyLnoJKCqf//DoeY=
+github.com/pion/logging v0.2.2/go.mod h1:k0/tDVsRCX2Mb2ZEmTqNa7CWsQPc+YYCB7Q+5pahoms=
+github.com/pion/transport v0.10.0 h1:9M12BSneJm6ggGhJyWpDveFOstJsTiQjkLf4M44rm80=
+github.com/pion/transport v0.10.0/go.mod h1:BnHnUipd0rZQyTVB2SBGojFHT9CBt5C5TcsJSQGkvSE=
+github.com/pion/transport v0.10.1 h1:2W+yJT+0mOQ160ThZYUx5Zp2skzshiNgxrNE9GUfhJM=
+github.com/pion/transport v0.10.1/go.mod h1:PBis1stIILMiis0PewDw91WJeLJkyIMcEk+DwKOzf4A=
+github.com/pion/udp v0.1.0 h1:uGxQsNyrqG3GLINv36Ff60covYmfrLoxzwnCsIYspXI=
+github.com/pion/udp v0.1.0/go.mod h1:BPELIjbwE9PRbd/zxI/KYBnbo7B6+oA6YuEaNE8lths=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.5.1 h1:nOGnQDM7FYENwehXlg/kFVnos3rEvtKTjRvOWSzb6H4=
+github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
+github.com/stretchr/testify v1.6.1 h1:hDPOHmpOpP40lSULcqw7IrRb/u7w6RpDC9399XyoNd0=
+github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9 h1:psW17arqaxU48Z5kZ0CQnkZWQJsqcURM6tKiBApRjXI=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/crypto v0.0.0-20201016220609-9e8e0b390897 h1:pLI5jrR7OSLijeIDcmRxNmw2api+jEfxLoykJVice/E=
+golang.org/x/crypto v0.0.0-20201016220609-9e8e0b390897/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3 h1:0GoQqolDA55aaLxZyTzK/Y2ePZzZTUrRacwib7cNsYQ=
+golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200625001655-4c5254603344 h1:vGXIOMxbNfDTk/aXCmfdLgkrSV+Z2tcbze+pEc3v5W4=
+golang.org/x/net v0.0.0-20200625001655-4c5254603344/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
+golang.org/x/net v0.0.0-20201031054903-ff519b6c9102 h1:42cLlJJdEh+ySyeUUbEQ5bsTiq8voBeTuweGVkY6Puw=
+golang.org/x/net v0.0.0-20201031054903-ff519b6c9102/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190412213103-97732733099d h1:+R4KGOnez64A81RvjARKc4UT5/tI9ujCIVX+P5KiHuI=
+golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1 h1:go1bK/D/BFZV2I8cIQd1NKEZ+0owSTG1fDTci4IqFcE=
+golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v2 v2.2.2 h1:ZCJp+EgiOT7lHqUV2J862kp8Qj64Jo6az82+3Td9dZw=
+gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c h1:dUUwHk2QECo/6vqA44rthZ8ie2QXMNeKRTHCNY2nXvo=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake.go
new file mode 100644
index 000000000..5a95da722
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake.go
@@ -0,0 +1,136 @@
+package dtls
+
+// https://tools.ietf.org/html/rfc5246#section-7.4
+type handshakeType uint8
+
+const (
+	handshakeTypeHelloRequest       handshakeType = 0
+	handshakeTypeClientHello        handshakeType = 1
+	handshakeTypeServerHello        handshakeType = 2
+	handshakeTypeHelloVerifyRequest handshakeType = 3
+	handshakeTypeCertificate        handshakeType = 11
+	handshakeTypeServerKeyExchange  handshakeType = 12
+	handshakeTypeCertificateRequest handshakeType = 13
+	handshakeTypeServerHelloDone    handshakeType = 14
+	handshakeTypeCertificateVerify  handshakeType = 15
+	handshakeTypeClientKeyExchange  handshakeType = 16
+	handshakeTypeFinished           handshakeType = 20
+
+	// msg_len for Handshake messages assumes an extra 12 bytes for
+	// sequence, fragment and version information
+	handshakeMessageHeaderLength = 12
+)
+
+type handshakeMessage interface {
+	Marshal() ([]byte, error)
+	Unmarshal(data []byte) error
+
+	handshakeType() handshakeType
+}
+
+func (h handshakeType) String() string {
+	switch h {
+	case handshakeTypeHelloRequest:
+		return "HelloRequest"
+	case handshakeTypeClientHello:
+		return "ClientHello"
+	case handshakeTypeServerHello:
+		return "ServerHello"
+	case handshakeTypeHelloVerifyRequest:
+		return "HelloVerifyRequest"
+	case handshakeTypeCertificate:
+		return "TypeCertificate"
+	case handshakeTypeServerKeyExchange:
+		return "ServerKeyExchange"
+	case handshakeTypeCertificateRequest:
+		return "CertificateRequest"
+	case handshakeTypeServerHelloDone:
+		return "ServerHelloDone"
+	case handshakeTypeCertificateVerify:
+		return "CertificateVerify"
+	case handshakeTypeClientKeyExchange:
+		return "ClientKeyExchange"
+	case handshakeTypeFinished:
+		return "Finished"
+	}
+	return ""
+}
+
+// The handshake protocol is responsible for selecting a cipher spec and
+// generating a master secret, which together comprise the primary
+// cryptographic parameters associated with a secure session.  The
+// handshake protocol can also optionally authenticate parties who have
+// certificates signed by a trusted certificate authority.
+// https://tools.ietf.org/html/rfc5246#section-7.3
+type handshake struct {
+	handshakeHeader  handshakeHeader
+	handshakeMessage handshakeMessage
+}
+
+func (h handshake) contentType() contentType {
+	return contentTypeHandshake
+}
+
+func (h *handshake) Marshal() ([]byte, error) {
+	if h.handshakeMessage == nil {
+		return nil, errHandshakeMessageUnset
+	} else if h.handshakeHeader.fragmentOffset != 0 {
+		return nil, errUnableToMarshalFragmented
+	}
+
+	msg, err := h.handshakeMessage.Marshal()
+	if err != nil {
+		return nil, err
+	}
+
+	h.handshakeHeader.length = uint32(len(msg))
+	h.handshakeHeader.fragmentLength = h.handshakeHeader.length
+	h.handshakeHeader.handshakeType = h.handshakeMessage.handshakeType()
+	header, err := h.handshakeHeader.Marshal()
+	if err != nil {
+		return nil, err
+	}
+
+	return append(header, msg...), nil
+}
+
+func (h *handshake) Unmarshal(data []byte) error {
+	if err := h.handshakeHeader.Unmarshal(data); err != nil {
+		return err
+	}
+
+	reportedLen := bigEndianUint24(data[1:])
+	if uint32(len(data)-handshakeMessageHeaderLength) != reportedLen {
+		return errLengthMismatch
+	} else if reportedLen != h.handshakeHeader.fragmentLength {
+		return errLengthMismatch
+	}
+
+	switch handshakeType(data[0]) {
+	case handshakeTypeHelloRequest:
+		return errNotImplemented
+	case handshakeTypeClientHello:
+		h.handshakeMessage = &handshakeMessageClientHello{}
+	case handshakeTypeHelloVerifyRequest:
+		h.handshakeMessage = &handshakeMessageHelloVerifyRequest{}
+	case handshakeTypeServerHello:
+		h.handshakeMessage = &handshakeMessageServerHello{}
+	case handshakeTypeCertificate:
+		h.handshakeMessage = &handshakeMessageCertificate{}
+	case handshakeTypeServerKeyExchange:
+		h.handshakeMessage = &handshakeMessageServerKeyExchange{}
+	case handshakeTypeCertificateRequest:
+		h.handshakeMessage = &handshakeMessageCertificateRequest{}
+	case handshakeTypeServerHelloDone:
+		h.handshakeMessage = &handshakeMessageServerHelloDone{}
+	case handshakeTypeClientKeyExchange:
+		h.handshakeMessage = &handshakeMessageClientKeyExchange{}
+	case handshakeTypeFinished:
+		h.handshakeMessage = &handshakeMessageFinished{}
+	case handshakeTypeCertificateVerify:
+		h.handshakeMessage = &handshakeMessageCertificateVerify{}
+	default:
+		return errNotImplemented
+	}
+	return h.handshakeMessage.Unmarshal(data[handshakeMessageHeaderLength:])
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_cache.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_cache.go
new file mode 100644
index 000000000..3ca54953c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_cache.go
@@ -0,0 +1,168 @@
+package dtls
+
+import (
+	"sync"
+)
+
+type handshakeCacheItem struct {
+	typ             handshakeType
+	isClient        bool
+	epoch           uint16
+	messageSequence uint16
+	data            []byte
+}
+
+type handshakeCachePullRule struct {
+	typ      handshakeType
+	epoch    uint16
+	isClient bool
+	optional bool
+}
+
+type handshakeCache struct {
+	cache []*handshakeCacheItem
+	mu    sync.Mutex
+}
+
+func newHandshakeCache() *handshakeCache {
+	return &handshakeCache{}
+}
+
+func (h *handshakeCache) push(data []byte, epoch, messageSequence uint16, typ handshakeType, isClient bool) bool { //nolint
+	h.mu.Lock()
+	defer h.mu.Unlock()
+
+	for _, i := range h.cache {
+		if i.messageSequence == messageSequence &&
+			i.isClient == isClient {
+			return false
+		}
+	}
+
+	h.cache = append(h.cache, &handshakeCacheItem{
+		data:            append([]byte{}, data...),
+		epoch:           epoch,
+		messageSequence: messageSequence,
+		typ:             typ,
+		isClient:        isClient,
+	})
+	return true
+}
+
+// returns a list handshakes that match the requested rules
+// the list will contain null entries for rules that can't be satisfied
+// multiple entries may match a rule, but only the last match is returned (ie ClientHello with cookies)
+func (h *handshakeCache) pull(rules ...handshakeCachePullRule) []*handshakeCacheItem {
+	h.mu.Lock()
+	defer h.mu.Unlock()
+
+	out := make([]*handshakeCacheItem, len(rules))
+	for i, r := range rules {
+		for _, c := range h.cache {
+			if c.typ == r.typ && c.isClient == r.isClient && c.epoch == r.epoch {
+				switch {
+				case out[i] == nil:
+					out[i] = c
+				case out[i].messageSequence < c.messageSequence:
+					out[i] = c
+				}
+			}
+		}
+	}
+
+	return out
+}
+
+// fullPullMap pulls all handshakes between rules[0] to rules[len(rules)-1] as map.
+func (h *handshakeCache) fullPullMap(startSeq int, rules ...handshakeCachePullRule) (int, map[handshakeType]handshakeMessage, bool) {
+	h.mu.Lock()
+	defer h.mu.Unlock()
+
+	ci := make(map[handshakeType]*handshakeCacheItem)
+	for _, r := range rules {
+		var item *handshakeCacheItem
+		for _, c := range h.cache {
+			if c.typ == r.typ && c.isClient == r.isClient && c.epoch == r.epoch {
+				switch {
+				case item == nil:
+					item = c
+				case item.messageSequence < c.messageSequence:
+					item = c
+				}
+			}
+		}
+		if !r.optional && item == nil {
+			// Missing mandatory message.
+			return startSeq, nil, false
+		}
+		ci[r.typ] = item
+	}
+	out := make(map[handshakeType]handshakeMessage)
+	seq := startSeq
+	for _, r := range rules {
+		t := r.typ
+		i := ci[t]
+		if i == nil {
+			continue
+		}
+		rawHandshake := &handshake{}
+		if err := rawHandshake.Unmarshal(i.data); err != nil {
+			return startSeq, nil, false
+		}
+		if uint16(seq) != rawHandshake.handshakeHeader.messageSequence {
+			// There is a gap. Some messages are not arrived.
+			return startSeq, nil, false
+		}
+		seq++
+		out[t] = rawHandshake.handshakeMessage
+	}
+	return seq, out, true
+}
+
+// pullAndMerge calls pull and then merges the results, ignoring any null entries
+func (h *handshakeCache) pullAndMerge(rules ...handshakeCachePullRule) []byte {
+	merged := []byte{}
+
+	for _, p := range h.pull(rules...) {
+		if p != nil {
+			merged = append(merged, p.data...)
+		}
+	}
+	return merged
+}
+
+// sessionHash returns the session hash for Extended Master Secret support
+// https://tools.ietf.org/html/draft-ietf-tls-session-hash-06#section-4
+func (h *handshakeCache) sessionHash(hf hashFunc, epoch uint16, additional ...[]byte) ([]byte, error) {
+	merged := []byte{}
+
+	// Order defined by https://tools.ietf.org/html/rfc5246#section-7.3
+	handshakeBuffer := h.pull(
+		handshakeCachePullRule{handshakeTypeClientHello, epoch, true, false},
+		handshakeCachePullRule{handshakeTypeServerHello, epoch, false, false},
+		handshakeCachePullRule{handshakeTypeCertificate, epoch, false, false},
+		handshakeCachePullRule{handshakeTypeServerKeyExchange, epoch, false, false},
+		handshakeCachePullRule{handshakeTypeCertificateRequest, epoch, false, false},
+		handshakeCachePullRule{handshakeTypeServerHelloDone, epoch, false, false},
+		handshakeCachePullRule{handshakeTypeCertificate, epoch, true, false},
+		handshakeCachePullRule{handshakeTypeClientKeyExchange, epoch, true, false},
+	)
+
+	for _, p := range handshakeBuffer {
+		if p == nil {
+			continue
+		}
+
+		merged = append(merged, p.data...)
+	}
+	for _, a := range additional {
+		merged = append(merged, a...)
+	}
+
+	hash := hf()
+	if _, err := hash.Write(merged); err != nil {
+		return []byte{}, err
+	}
+
+	return hash.Sum(nil), nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_header.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_header.go
new file mode 100644
index 000000000..819829471
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_header.go
@@ -0,0 +1,41 @@
+package dtls
+
+import (
+	"encoding/binary"
+)
+
+// msg_len for Handshake messages assumes an extra 12 bytes for
+// sequence, fragment and version information
+const handshakeHeaderLength = 12
+
+type handshakeHeader struct {
+	handshakeType   handshakeType
+	length          uint32 // uint24 in spec
+	messageSequence uint16
+	fragmentOffset  uint32 // uint24 in spec
+	fragmentLength  uint32 // uint24 in spec
+}
+
+func (h *handshakeHeader) Marshal() ([]byte, error) {
+	out := make([]byte, handshakeMessageHeaderLength)
+
+	out[0] = byte(h.handshakeType)
+	putBigEndianUint24(out[1:], h.length)
+	binary.BigEndian.PutUint16(out[4:], h.messageSequence)
+	putBigEndianUint24(out[6:], h.fragmentOffset)
+	putBigEndianUint24(out[9:], h.fragmentLength)
+	return out, nil
+}
+
+func (h *handshakeHeader) Unmarshal(data []byte) error {
+	if len(data) < handshakeHeaderLength {
+		return errBufferTooSmall
+	}
+
+	h.handshakeType = handshakeType(data[0])
+	h.length = bigEndianUint24(data[1:])
+	h.messageSequence = binary.BigEndian.Uint16(data[4:])
+	h.fragmentOffset = bigEndianUint24(data[6:])
+	h.fragmentLength = bigEndianUint24(data[9:])
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_certificate.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_certificate.go
new file mode 100644
index 000000000..c968cfe2d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_certificate.go
@@ -0,0 +1,55 @@
+package dtls
+
+type handshakeMessageCertificate struct {
+	certificate [][]byte
+}
+
+func (h handshakeMessageCertificate) handshakeType() handshakeType {
+	return handshakeTypeCertificate
+}
+
+const (
+	handshakeMessageCertificateLengthFieldSize = 3
+)
+
+func (h *handshakeMessageCertificate) Marshal() ([]byte, error) {
+	out := make([]byte, handshakeMessageCertificateLengthFieldSize)
+
+	for _, r := range h.certificate {
+		// Certificate Length
+		out = append(out, make([]byte, handshakeMessageCertificateLengthFieldSize)...)
+		putBigEndianUint24(out[len(out)-handshakeMessageCertificateLengthFieldSize:], uint32(len(r)))
+
+		// Certificate body
+		out = append(out, append([]byte{}, r...)...)
+	}
+
+	// Total Payload Size
+	putBigEndianUint24(out[0:], uint32(len(out[handshakeMessageCertificateLengthFieldSize:])))
+	return out, nil
+}
+
+func (h *handshakeMessageCertificate) Unmarshal(data []byte) error {
+	if len(data) < handshakeMessageCertificateLengthFieldSize {
+		return errBufferTooSmall
+	}
+
+	if certificateBodyLen := int(bigEndianUint24(data)); certificateBodyLen+handshakeMessageCertificateLengthFieldSize != len(data) {
+		return errLengthMismatch
+	}
+
+	offset := handshakeMessageCertificateLengthFieldSize
+	for offset < len(data) {
+		certificateLen := int(bigEndianUint24(data[offset:]))
+		offset += handshakeMessageCertificateLengthFieldSize
+
+		if offset+certificateLen > len(data) {
+			return errLengthMismatch
+		}
+
+		h.certificate = append(h.certificate, append([]byte{}, data[offset:offset+certificateLen]...))
+		offset += certificateLen
+	}
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_certificate_request.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_certificate_request.go
new file mode 100644
index 000000000..d23a7f1ab
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_certificate_request.go
@@ -0,0 +1,91 @@
+package dtls
+
+import (
+	"encoding/binary"
+)
+
+/*
+A non-anonymous server can optionally request a certificate from
+the client, if appropriate for the selected cipher suite.  This
+message, if sent, will immediately follow the ServerKeyExchange
+message (if it is sent; otherwise, this message follows the
+server's Certificate message).
+*/
+
+type handshakeMessageCertificateRequest struct {
+	certificateTypes        []clientCertificateType
+	signatureHashAlgorithms []signatureHashAlgorithm
+}
+
+const (
+	handshakeMessageCertificateRequestMinLength = 5
+)
+
+func (h handshakeMessageCertificateRequest) handshakeType() handshakeType {
+	return handshakeTypeCertificateRequest
+}
+
+func (h *handshakeMessageCertificateRequest) Marshal() ([]byte, error) {
+	out := []byte{byte(len(h.certificateTypes))}
+	for _, v := range h.certificateTypes {
+		out = append(out, byte(v))
+	}
+
+	out = append(out, []byte{0x00, 0x00}...)
+	binary.BigEndian.PutUint16(out[len(out)-2:], uint16(len(h.signatureHashAlgorithms)*2))
+	for _, v := range h.signatureHashAlgorithms {
+		out = append(out, byte(v.hash))
+		out = append(out, byte(v.signature))
+	}
+
+	out = append(out, []byte{0x00, 0x00}...) // Distinguished Names Length
+	return out, nil
+}
+
+func (h *handshakeMessageCertificateRequest) Unmarshal(data []byte) error {
+	if len(data) < handshakeMessageCertificateRequestMinLength {
+		return errBufferTooSmall
+	}
+
+	offset := 0
+	certificateTypesLength := int(data[0])
+	offset++
+
+	if (offset + certificateTypesLength) > len(data) {
+		return errBufferTooSmall
+	}
+
+	for i := 0; i < certificateTypesLength; i++ {
+		certType := clientCertificateType(data[offset+i])
+		if _, ok := clientCertificateTypes()[certType]; ok {
+			h.certificateTypes = append(h.certificateTypes, certType)
+		}
+	}
+	offset += certificateTypesLength
+	if len(data) < offset+2 {
+		return errBufferTooSmall
+	}
+	signatureHashAlgorithmsLength := int(binary.BigEndian.Uint16(data[offset:]))
+	offset += 2
+
+	if (offset + signatureHashAlgorithmsLength) > len(data) {
+		return errBufferTooSmall
+	}
+
+	for i := 0; i < signatureHashAlgorithmsLength; i += 2 {
+		if len(data) < (offset + i + 2) {
+			return errBufferTooSmall
+		}
+		hash := hashAlgorithm(data[offset+i])
+		signature := signatureAlgorithm(data[offset+i+1])
+
+		if _, ok := hashAlgorithms()[hash]; !ok {
+			continue
+		} else if _, ok := signatureAlgorithms()[signature]; !ok {
+			continue
+		}
+		h.signatureHashAlgorithms = append(h.signatureHashAlgorithms, signatureHashAlgorithm{signature: signature, hash: hash})
+	}
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_certificate_verify.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_certificate_verify.go
new file mode 100644
index 000000000..128c9b852
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_certificate_verify.go
@@ -0,0 +1,51 @@
+package dtls
+
+import (
+	"encoding/binary"
+)
+
+type handshakeMessageCertificateVerify struct {
+	hashAlgorithm      hashAlgorithm
+	signatureAlgorithm signatureAlgorithm
+	signature          []byte
+}
+
+const handshakeMessageCertificateVerifyMinLength = 4
+
+func (h handshakeMessageCertificateVerify) handshakeType() handshakeType {
+	return handshakeTypeCertificateVerify
+}
+
+func (h *handshakeMessageCertificateVerify) Marshal() ([]byte, error) {
+	out := make([]byte, 1+1+2+len(h.signature))
+
+	out[0] = byte(h.hashAlgorithm)
+	out[1] = byte(h.signatureAlgorithm)
+	binary.BigEndian.PutUint16(out[2:], uint16(len(h.signature)))
+	copy(out[4:], h.signature)
+	return out, nil
+}
+
+func (h *handshakeMessageCertificateVerify) Unmarshal(data []byte) error {
+	if len(data) < handshakeMessageCertificateVerifyMinLength {
+		return errBufferTooSmall
+	}
+
+	h.hashAlgorithm = hashAlgorithm(data[0])
+	if _, ok := hashAlgorithms()[h.hashAlgorithm]; !ok {
+		return errInvalidHashAlgorithm
+	}
+
+	h.signatureAlgorithm = signatureAlgorithm(data[1])
+	if _, ok := signatureAlgorithms()[h.signatureAlgorithm]; !ok {
+		return errInvalidSignatureAlgorithm
+	}
+
+	signatureLength := int(binary.BigEndian.Uint16(data[2:]))
+	if (signatureLength + 4) != len(data) {
+		return errBufferTooSmall
+	}
+
+	h.signature = append([]byte{}, data[4:]...)
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_client_hello.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_client_hello.go
new file mode 100644
index 000000000..f61adb998
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_client_hello.go
@@ -0,0 +1,119 @@
+package dtls
+
+import (
+	"encoding/binary"
+)
+
+/*
+When a client first connects to a server it is required to send
+the client hello as its first message.  The client can also send a
+client hello in response to a hello request or on its own
+initiative in order to renegotiate the security parameters in an
+existing connection.
+*/
+type handshakeMessageClientHello struct {
+	version protocolVersion
+	random  handshakeRandom
+	cookie  []byte
+
+	cipherSuites       []cipherSuite
+	compressionMethods []*compressionMethod
+	extensions         []extension
+}
+
+const handshakeMessageClientHelloVariableWidthStart = 34
+
+func (h handshakeMessageClientHello) handshakeType() handshakeType {
+	return handshakeTypeClientHello
+}
+
+func (h *handshakeMessageClientHello) Marshal() ([]byte, error) {
+	if len(h.cookie) > 255 {
+		return nil, errCookieTooLong
+	}
+
+	out := make([]byte, handshakeMessageClientHelloVariableWidthStart)
+	out[0] = h.version.major
+	out[1] = h.version.minor
+
+	rand := h.random.marshalFixed()
+	copy(out[2:], rand[:])
+
+	out = append(out, 0x00) // SessionID
+
+	out = append(out, byte(len(h.cookie)))
+	out = append(out, h.cookie...)
+	out = append(out, encodeCipherSuites(h.cipherSuites)...)
+	out = append(out, encodeCompressionMethods(h.compressionMethods)...)
+
+	extensions, err := encodeExtensions(h.extensions)
+	if err != nil {
+		return nil, err
+	}
+
+	return append(out, extensions...), nil
+}
+
+func (h *handshakeMessageClientHello) Unmarshal(data []byte) error {
+	if len(data) < 2+handshakeRandomLength {
+		return errBufferTooSmall
+	}
+
+	h.version.major = data[0]
+	h.version.minor = data[1]
+
+	var random [handshakeRandomLength]byte
+	copy(random[:], data[2:])
+	h.random.unmarshalFixed(random)
+
+	// rest of packet has variable width sections
+	currOffset := handshakeMessageClientHelloVariableWidthStart
+	currOffset += int(data[currOffset]) + 1 // SessionID
+
+	currOffset++
+	if len(data) <= currOffset {
+		return errBufferTooSmall
+	}
+	n := int(data[currOffset-1])
+	if len(data) <= currOffset+n {
+		return errBufferTooSmall
+	}
+	h.cookie = append([]byte{}, data[currOffset:currOffset+n]...)
+	currOffset += len(h.cookie)
+
+	// Cipher Suites
+	if len(data) < currOffset {
+		return errBufferTooSmall
+	}
+	cipherSuites, err := decodeCipherSuites(data[currOffset:])
+	if err != nil {
+		return err
+	}
+	h.cipherSuites = cipherSuites
+	if len(data) < currOffset+2 {
+		return errBufferTooSmall
+	}
+	currOffset += int(binary.BigEndian.Uint16(data[currOffset:])) + 2
+
+	// Compression Methods
+	if len(data) < currOffset {
+		return errBufferTooSmall
+	}
+	compressionMethods, err := decodeCompressionMethods(data[currOffset:])
+	if err != nil {
+		return err
+	}
+	h.compressionMethods = compressionMethods
+	if len(data) < currOffset {
+		return errBufferTooSmall
+	}
+	currOffset += int(data[currOffset]) + 1
+
+	// Extensions
+	extensions, err := decodeExtensions(data[currOffset:])
+	if err != nil {
+		return err
+	}
+	h.extensions = extensions
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_client_key_exchange.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_client_key_exchange.go
new file mode 100644
index 000000000..b2ab20998
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_client_key_exchange.go
@@ -0,0 +1,46 @@
+package dtls
+
+import (
+	"encoding/binary"
+)
+
+type handshakeMessageClientKeyExchange struct {
+	identityHint []byte
+	publicKey    []byte
+}
+
+func (h handshakeMessageClientKeyExchange) handshakeType() handshakeType {
+	return handshakeTypeClientKeyExchange
+}
+
+func (h *handshakeMessageClientKeyExchange) Marshal() ([]byte, error) {
+	switch {
+	case (h.identityHint != nil && h.publicKey != nil) || (h.identityHint == nil && h.publicKey == nil):
+		return nil, errInvalidClientKeyExchange
+	case h.publicKey != nil:
+		return append([]byte{byte(len(h.publicKey))}, h.publicKey...), nil
+	default:
+		out := append([]byte{0x00, 0x00}, h.identityHint...)
+		binary.BigEndian.PutUint16(out, uint16(len(out)-2))
+		return out, nil
+	}
+}
+
+func (h *handshakeMessageClientKeyExchange) Unmarshal(data []byte) error {
+	if len(data) < 2 {
+		return errBufferTooSmall
+	}
+
+	// If parsed as PSK return early and only populate PSK Identity Hint
+	if pskLength := binary.BigEndian.Uint16(data); len(data) == int(pskLength+2) {
+		h.identityHint = append([]byte{}, data[2:]...)
+		return nil
+	}
+
+	if publicKeyLength := int(data[0]); len(data) != publicKeyLength+1 {
+		return errBufferTooSmall
+	}
+
+	h.publicKey = append([]byte{}, data[1:]...)
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_finished.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_finished.go
new file mode 100644
index 000000000..9149150c1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_finished.go
@@ -0,0 +1,18 @@
+package dtls
+
+type handshakeMessageFinished struct {
+	verifyData []byte
+}
+
+func (h handshakeMessageFinished) handshakeType() handshakeType {
+	return handshakeTypeFinished
+}
+
+func (h *handshakeMessageFinished) Marshal() ([]byte, error) {
+	return append([]byte{}, h.verifyData...), nil
+}
+
+func (h *handshakeMessageFinished) Unmarshal(data []byte) error {
+	h.verifyData = append([]byte{}, data...)
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_hello_verify_request.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_hello_verify_request.go
new file mode 100644
index 000000000..453947f5e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_hello_verify_request.go
@@ -0,0 +1,57 @@
+package dtls
+
+/*
+   The definition of HelloVerifyRequest is as follows:
+
+   struct {
+     ProtocolVersion server_version;
+     opaque cookie<0..2^8-1>;
+   } HelloVerifyRequest;
+
+   The HelloVerifyRequest message type is hello_verify_request(3).
+
+   When the client sends its ClientHello message to the server, the server
+   MAY respond with a HelloVerifyRequest message.  This message contains
+   a stateless cookie generated using the technique of [PHOTURIS].  The
+   client MUST retransmit the ClientHello with the cookie added.
+
+   https://tools.ietf.org/html/rfc6347#section-4.2.1
+*/
+type handshakeMessageHelloVerifyRequest struct {
+	version protocolVersion
+	cookie  []byte
+}
+
+func (h handshakeMessageHelloVerifyRequest) handshakeType() handshakeType {
+	return handshakeTypeHelloVerifyRequest
+}
+
+func (h *handshakeMessageHelloVerifyRequest) Marshal() ([]byte, error) {
+	if len(h.cookie) > 255 {
+		return nil, errCookieTooLong
+	}
+
+	out := make([]byte, 3+len(h.cookie))
+	out[0] = h.version.major
+	out[1] = h.version.minor
+	out[2] = byte(len(h.cookie))
+	copy(out[3:], h.cookie)
+
+	return out, nil
+}
+
+func (h *handshakeMessageHelloVerifyRequest) Unmarshal(data []byte) error {
+	if len(data) < 3 {
+		return errBufferTooSmall
+	}
+	h.version.major = data[0]
+	h.version.minor = data[1]
+	cookieLength := data[2]
+	if len(data) < (int(cookieLength) + 3) {
+		return errBufferTooSmall
+	}
+	h.cookie = make([]byte, cookieLength)
+
+	copy(h.cookie, data[3:3+cookieLength])
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_server_hello.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_server_hello.go
new file mode 100644
index 000000000..3251c509c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_server_hello.go
@@ -0,0 +1,102 @@
+package dtls
+
+import (
+	"encoding/binary"
+)
+
+/*
+The server will send this message in response to a ClientHello
+message when it was able to find an acceptable set of algorithms.
+If it cannot find such a match, it will respond with a handshake
+failure alert.
+https://tools.ietf.org/html/rfc5246#section-7.4.1.3
+*/
+type handshakeMessageServerHello struct {
+	version protocolVersion
+	random  handshakeRandom
+
+	cipherSuite       cipherSuite
+	compressionMethod *compressionMethod
+	extensions        []extension
+}
+
+const handshakeMessageServerHelloVariableWidthStart = 2 + handshakeRandomLength
+
+func (h handshakeMessageServerHello) handshakeType() handshakeType {
+	return handshakeTypeServerHello
+}
+
+func (h *handshakeMessageServerHello) Marshal() ([]byte, error) {
+	if h.cipherSuite == nil {
+		return nil, errCipherSuiteUnset
+	} else if h.compressionMethod == nil {
+		return nil, errCompressionMethodUnset
+	}
+
+	out := make([]byte, handshakeMessageServerHelloVariableWidthStart)
+	out[0] = h.version.major
+	out[1] = h.version.minor
+
+	rand := h.random.marshalFixed()
+	copy(out[2:], rand[:])
+
+	out = append(out, 0x00) // SessionID
+
+	out = append(out, []byte{0x00, 0x00}...)
+	binary.BigEndian.PutUint16(out[len(out)-2:], uint16(h.cipherSuite.ID()))
+
+	out = append(out, byte(h.compressionMethod.id))
+
+	extensions, err := encodeExtensions(h.extensions)
+	if err != nil {
+		return nil, err
+	}
+
+	return append(out, extensions...), nil
+}
+
+func (h *handshakeMessageServerHello) Unmarshal(data []byte) error {
+	if len(data) < 2+handshakeRandomLength {
+		return errBufferTooSmall
+	}
+
+	h.version.major = data[0]
+	h.version.minor = data[1]
+
+	var random [handshakeRandomLength]byte
+	copy(random[:], data[2:])
+	h.random.unmarshalFixed(random)
+
+	currOffset := handshakeMessageServerHelloVariableWidthStart
+	currOffset += int(data[currOffset]) + 1 // SessionID
+	if len(data) < (currOffset + 2) {
+		return errBufferTooSmall
+	}
+	if c := cipherSuiteForID(CipherSuiteID(binary.BigEndian.Uint16(data[currOffset:]))); c != nil {
+		h.cipherSuite = c
+		currOffset += 2
+	} else {
+		return errInvalidCipherSuite
+	}
+	if len(data) < currOffset {
+		return errBufferTooSmall
+	}
+	if compressionMethod, ok := compressionMethods()[compressionMethodID(data[currOffset])]; ok {
+		h.compressionMethod = compressionMethod
+		currOffset++
+	} else {
+		return errInvalidCompressionMethod
+	}
+
+	if len(data) <= currOffset {
+		h.extensions = []extension{}
+		return nil
+	}
+
+	extensions, err := decodeExtensions(data[currOffset:])
+	if err != nil {
+		return err
+	}
+	h.extensions = extensions
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_server_hello_done.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_server_hello_done.go
new file mode 100644
index 000000000..0d591d6df
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_server_hello_done.go
@@ -0,0 +1,16 @@
+package dtls
+
+type handshakeMessageServerHelloDone struct {
+}
+
+func (h handshakeMessageServerHelloDone) handshakeType() handshakeType {
+	return handshakeTypeServerHelloDone
+}
+
+func (h *handshakeMessageServerHelloDone) Marshal() ([]byte, error) {
+	return []byte{}, nil
+}
+
+func (h *handshakeMessageServerHelloDone) Unmarshal(data []byte) error {
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_server_key_exchange.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_server_key_exchange.go
new file mode 100644
index 000000000..f9a117015
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_message_server_key_exchange.go
@@ -0,0 +1,104 @@
+package dtls
+
+import (
+	"encoding/binary"
+)
+
+// Structure supports ECDH and PSK
+type handshakeMessageServerKeyExchange struct {
+	identityHint []byte
+
+	ellipticCurveType  ellipticCurveType
+	namedCurve         namedCurve
+	publicKey          []byte
+	hashAlgorithm      hashAlgorithm
+	signatureAlgorithm signatureAlgorithm
+	signature          []byte
+}
+
+func (h handshakeMessageServerKeyExchange) handshakeType() handshakeType {
+	return handshakeTypeServerKeyExchange
+}
+
+func (h *handshakeMessageServerKeyExchange) Marshal() ([]byte, error) {
+	if h.identityHint != nil {
+		out := append([]byte{0x00, 0x00}, h.identityHint...)
+		binary.BigEndian.PutUint16(out, uint16(len(out)-2))
+		return out, nil
+	}
+
+	out := []byte{byte(h.ellipticCurveType), 0x00, 0x00}
+	binary.BigEndian.PutUint16(out[1:], uint16(h.namedCurve))
+
+	out = append(out, byte(len(h.publicKey)))
+	out = append(out, h.publicKey...)
+
+	out = append(out, []byte{byte(h.hashAlgorithm), byte(h.signatureAlgorithm), 0x00, 0x00}...)
+
+	binary.BigEndian.PutUint16(out[len(out)-2:], uint16(len(h.signature)))
+	out = append(out, h.signature...)
+
+	return out, nil
+}
+
+func (h *handshakeMessageServerKeyExchange) Unmarshal(data []byte) error {
+	if len(data) < 2 {
+		return errBufferTooSmall
+	}
+
+	// If parsed as PSK return early and only populate PSK Identity Hint
+	if pskLength := binary.BigEndian.Uint16(data); len(data) == int(pskLength+2) {
+		h.identityHint = append([]byte{}, data[2:]...)
+		return nil
+	}
+
+	if _, ok := ellipticCurveTypes()[ellipticCurveType(data[0])]; ok {
+		h.ellipticCurveType = ellipticCurveType(data[0])
+	} else {
+		return errInvalidEllipticCurveType
+	}
+
+	if len(data[1:]) < 2 {
+		return errBufferTooSmall
+	}
+	h.namedCurve = namedCurve(binary.BigEndian.Uint16(data[1:3]))
+	if _, ok := namedCurves()[h.namedCurve]; !ok {
+		return errInvalidNamedCurve
+	}
+	if len(data) < 4 {
+		return errBufferTooSmall
+	}
+
+	publicKeyLength := int(data[3])
+	offset := 4 + publicKeyLength
+	if len(data) < offset {
+		return errBufferTooSmall
+	}
+	h.publicKey = append([]byte{}, data[4:offset]...)
+	if len(data) <= offset {
+		return errBufferTooSmall
+	}
+	h.hashAlgorithm = hashAlgorithm(data[offset])
+	if _, ok := hashAlgorithms()[h.hashAlgorithm]; !ok {
+		return errInvalidHashAlgorithm
+	}
+	offset++
+	if len(data) <= offset {
+		return errBufferTooSmall
+	}
+	h.signatureAlgorithm = signatureAlgorithm(data[offset])
+	if _, ok := signatureAlgorithms()[h.signatureAlgorithm]; !ok {
+		return errInvalidSignatureAlgorithm
+	}
+	offset++
+	if len(data) < offset+2 {
+		return errBufferTooSmall
+	}
+	signatureLength := int(binary.BigEndian.Uint16(data[offset:]))
+	offset += 2
+	if len(data) < offset+signatureLength {
+		return errBufferTooSmall
+	}
+	h.signature = append([]byte{}, data[offset:offset+signatureLength]...)
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_random.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_random.go
new file mode 100644
index 000000000..f0ad28f66
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshake_random.go
@@ -0,0 +1,44 @@
+package dtls
+
+import (
+	"crypto/rand"
+	"encoding/binary"
+	"time"
+)
+
+const (
+	randomBytesLength     = 28
+	handshakeRandomLength = randomBytesLength + 4
+)
+
+// https://tools.ietf.org/html/rfc4346#section-7.4.1.2
+type handshakeRandom struct {
+	gmtUnixTime time.Time
+	randomBytes [randomBytesLength]byte
+}
+
+func (h *handshakeRandom) marshalFixed() [handshakeRandomLength]byte {
+	var out [handshakeRandomLength]byte
+
+	binary.BigEndian.PutUint32(out[0:], uint32(h.gmtUnixTime.Unix()))
+	copy(out[4:], h.randomBytes[:])
+
+	return out
+}
+
+func (h *handshakeRandom) unmarshalFixed(data [handshakeRandomLength]byte) {
+	h.gmtUnixTime = time.Unix(int64(binary.BigEndian.Uint32(data[0:])), 0)
+	copy(h.randomBytes[:], data[4:])
+}
+
+// populate fills the handshakeRandom with random values
+// may be called multiple times
+func (h *handshakeRandom) populate() error {
+	h.gmtUnixTime = time.Now()
+
+	tmp := make([]byte, randomBytesLength)
+	_, err := rand.Read(tmp)
+	copy(h.randomBytes[:], tmp)
+
+	return err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshaker.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshaker.go
new file mode 100644
index 000000000..6c6c5413c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/handshaker.go
@@ -0,0 +1,318 @@
+package dtls
+
+import (
+	"context"
+	"crypto/tls"
+	"crypto/x509"
+	"errors"
+	"sync"
+	"time"
+
+	"github.com/pion/logging"
+)
+
+// [RFC6347 Section-4.2.4]
+//                      +-----------+
+//                +---> | PREPARING | <--------------------+
+//                |     +-----------+                      |
+//                |           |                            |
+//                |           | Buffer next flight         |
+//                |           |                            |
+//                |          \|/                           |
+//                |     +-----------+                      |
+//                |     |  SENDING  |<------------------+  | Send
+//                |     +-----------+                   |  | HelloRequest
+//        Receive |           |                         |  |
+//           next |           | Send flight             |  | or
+//         flight |  +--------+                         |  |
+//                |  |        | Set retransmit timer    |  | Receive
+//                |  |       \|/                        |  | HelloRequest
+//                |  |  +-----------+                   |  | Send
+//                +--)--|  WAITING  |-------------------+  | ClientHello
+//                |  |  +-----------+   Timer expires   |  |
+//                |  |         |                        |  |
+//                |  |         +------------------------+  |
+//        Receive |  | Send           Read retransmit      |
+//           last |  | last                                |
+//         flight |  | flight                              |
+//                |  |                                     |
+//               \|/\|/                                    |
+//            +-----------+                                |
+//            | FINISHED  | -------------------------------+
+//            +-----------+
+//                 |  /|\
+//                 |   |
+//                 +---+
+//              Read retransmit
+//           Retransmit last flight
+
+var errInvalidFSMTransition = errors.New("invalid state machine transition")
+
+type handshakeState uint8
+
+const (
+	handshakeErrored handshakeState = iota
+	handshakePreparing
+	handshakeSending
+	handshakeWaiting
+	handshakeFinished
+)
+
+func (s handshakeState) String() string {
+	switch s {
+	case handshakeErrored:
+		return "Errored"
+	case handshakePreparing:
+		return "Preparing"
+	case handshakeSending:
+		return "Sending"
+	case handshakeWaiting:
+		return "Waiting"
+	case handshakeFinished:
+		return "Finished"
+	default:
+		return "Unknown"
+	}
+}
+
+type handshakeFSM struct {
+	currentFlight flightVal
+	flights       []*packet
+	retransmit    bool
+	state         *State
+	cache         *handshakeCache
+	cfg           *handshakeConfig
+	closed        chan struct{}
+}
+
+type handshakeConfig struct {
+	localPSKCallback            PSKCallback
+	localPSKIdentityHint        []byte
+	localCipherSuites           []cipherSuite            // Available CipherSuites
+	localSignatureSchemes       []signatureHashAlgorithm // Available signature schemes
+	extendedMasterSecret        ExtendedMasterSecretType // Policy for the Extended Master Support extension
+	localSRTPProtectionProfiles []SRTPProtectionProfile  // Available SRTPProtectionProfiles, if empty no SRTP support
+	serverName                  string
+	clientAuth                  ClientAuthType // If we are a client should we request a client certificate
+	localCertificates           []tls.Certificate
+	nameToCertificate           map[string]*tls.Certificate
+	insecureSkipVerify          bool
+	verifyPeerCertificate       func(rawCerts [][]byte, verifiedChains [][]*x509.Certificate) error
+	rootCAs                     *x509.CertPool
+	clientCAs                   *x509.CertPool
+	retransmitInterval          time.Duration
+
+	onFlightState func(flightVal, handshakeState)
+	log           logging.LeveledLogger
+
+	initialEpoch uint16
+
+	mu sync.Mutex
+}
+
+type flightConn interface {
+	notify(ctx context.Context, level alertLevel, desc alertDescription) error
+	writePackets(context.Context, []*packet) error
+	recvHandshake() <-chan chan struct{}
+	setLocalEpoch(epoch uint16)
+	handleQueuedPackets(context.Context) error
+}
+
+func srvCliStr(isClient bool) string {
+	if isClient {
+		return "client"
+	}
+	return "server"
+}
+
+func newHandshakeFSM(
+	s *State, cache *handshakeCache, cfg *handshakeConfig,
+	initialFlight flightVal,
+) *handshakeFSM {
+	return &handshakeFSM{
+		currentFlight: initialFlight,
+		state:         s,
+		cache:         cache,
+		cfg:           cfg,
+		closed:        make(chan struct{}),
+	}
+}
+
+func (s *handshakeFSM) Run(ctx context.Context, c flightConn, initialState handshakeState) error {
+	state := initialState
+	defer func() {
+		close(s.closed)
+	}()
+	for {
+		s.cfg.log.Tracef("[handshake:%s] %s: %s", srvCliStr(s.state.isClient), s.currentFlight.String(), state.String())
+		if s.cfg.onFlightState != nil {
+			s.cfg.onFlightState(s.currentFlight, state)
+		}
+		var err error
+		switch state {
+		case handshakePreparing:
+			state, err = s.prepare(ctx, c)
+		case handshakeSending:
+			state, err = s.send(ctx, c)
+		case handshakeWaiting:
+			state, err = s.wait(ctx, c)
+		case handshakeFinished:
+			state, err = s.finish(ctx, c)
+		default:
+			return errInvalidFSMTransition
+		}
+		if err != nil {
+			return err
+		}
+	}
+}
+
+func (s *handshakeFSM) Done() <-chan struct{} {
+	return s.closed
+}
+
+func (s *handshakeFSM) prepare(ctx context.Context, c flightConn) (handshakeState, error) {
+	s.flights = nil
+	// Prepare flights
+	var (
+		a    *alert
+		err  error
+		pkts []*packet
+	)
+	gen, retransmit, errFlight := s.currentFlight.getFlightGenerator()
+	if errFlight != nil {
+		err = errFlight
+		a = &alert{alertLevelFatal, alertInternalError}
+	} else {
+		pkts, a, err = gen(c, s.state, s.cache, s.cfg)
+		s.retransmit = retransmit
+	}
+	if a != nil {
+		if alertErr := c.notify(ctx, a.alertLevel, a.alertDescription); alertErr != nil {
+			if err != nil {
+				err = alertErr
+			}
+		}
+	}
+	if err != nil {
+		return handshakeErrored, err
+	}
+
+	s.flights = pkts
+	epoch := s.cfg.initialEpoch
+	nextEpoch := epoch
+	for _, p := range s.flights {
+		p.record.recordLayerHeader.epoch += epoch
+		if p.record.recordLayerHeader.epoch > nextEpoch {
+			nextEpoch = p.record.recordLayerHeader.epoch
+		}
+		if h, ok := p.record.content.(*handshake); ok {
+			h.handshakeHeader.messageSequence = uint16(s.state.handshakeSendSequence)
+			s.state.handshakeSendSequence++
+		}
+	}
+	if epoch != nextEpoch {
+		s.cfg.log.Tracef("[handshake:%s] -> changeCipherSpec (epoch: %d)", srvCliStr(s.state.isClient), nextEpoch)
+		c.setLocalEpoch(nextEpoch)
+	}
+	return handshakeSending, nil
+}
+
+func (s *handshakeFSM) send(ctx context.Context, c flightConn) (handshakeState, error) {
+	// Send flights
+	if err := c.writePackets(ctx, s.flights); err != nil {
+		return handshakeErrored, err
+	}
+
+	if s.currentFlight.isLastSendFlight() {
+		return handshakeFinished, nil
+	}
+	return handshakeWaiting, nil
+}
+
+func (s *handshakeFSM) wait(ctx context.Context, c flightConn) (handshakeState, error) { //nolint:gocognit
+	parse, errFlight := s.currentFlight.getFlightParser()
+	if errFlight != nil {
+		if alertErr := c.notify(ctx, alertLevelFatal, alertInternalError); alertErr != nil {
+			if errFlight != nil {
+				return handshakeErrored, alertErr
+			}
+		}
+		return handshakeErrored, errFlight
+	}
+
+	retransmitTimer := time.NewTimer(s.cfg.retransmitInterval)
+	for {
+		select {
+		case done := <-c.recvHandshake():
+			nextFlight, alert, err := parse(ctx, c, s.state, s.cache, s.cfg)
+			close(done)
+			if alert != nil {
+				if alertErr := c.notify(ctx, alert.alertLevel, alert.alertDescription); alertErr != nil {
+					if err != nil {
+						err = alertErr
+					}
+				}
+			}
+			if err != nil {
+				return handshakeErrored, err
+			}
+			if nextFlight == 0 {
+				break
+			}
+			s.cfg.log.Tracef("[handshake:%s] %s -> %s", srvCliStr(s.state.isClient), s.currentFlight.String(), nextFlight.String())
+			if nextFlight.isLastRecvFlight() && s.currentFlight == nextFlight {
+				return handshakeFinished, nil
+			}
+			s.currentFlight = nextFlight
+			return handshakePreparing, nil
+
+		case <-retransmitTimer.C:
+			if !s.retransmit {
+				return handshakeWaiting, nil
+			}
+			return handshakeSending, nil
+		case <-ctx.Done():
+			return handshakeErrored, ctx.Err()
+		}
+	}
+}
+
+func (s *handshakeFSM) finish(ctx context.Context, c flightConn) (handshakeState, error) {
+	parse, errFlight := s.currentFlight.getFlightParser()
+	if errFlight != nil {
+		if alertErr := c.notify(ctx, alertLevelFatal, alertInternalError); alertErr != nil {
+			if errFlight != nil {
+				return handshakeErrored, alertErr
+			}
+		}
+		return handshakeErrored, errFlight
+	}
+
+	retransmitTimer := time.NewTimer(s.cfg.retransmitInterval)
+	select {
+	case done := <-c.recvHandshake():
+		nextFlight, alert, err := parse(ctx, c, s.state, s.cache, s.cfg)
+		close(done)
+		if alert != nil {
+			if alertErr := c.notify(ctx, alert.alertLevel, alert.alertDescription); alertErr != nil {
+				if err != nil {
+					err = alertErr
+				}
+			}
+		}
+		if err != nil {
+			return handshakeErrored, err
+		}
+		if nextFlight == 0 {
+			break
+		}
+		<-retransmitTimer.C
+		// Retransmit last flight
+		return handshakeSending, nil
+
+	case <-ctx.Done():
+		return handshakeErrored, ctx.Err()
+	}
+	return handshakeFinished, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/hash_algorithm.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/hash_algorithm.go
new file mode 100644
index 000000000..b659b3695
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/hash_algorithm.go
@@ -0,0 +1,116 @@
+package dtls
+
+import ( //nolint:gci
+	"crypto"
+	"crypto/md5"  //nolint:gosec
+	"crypto/sha1" //nolint:gosec
+	"crypto/sha256"
+	"crypto/sha512"
+)
+
+// hashAlgorithm is used to indicate the hash algorithm used
+// https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-18
+type hashAlgorithm uint16
+
+// Supported hash hash algorithms
+const (
+	hashAlgorithmMD2     hashAlgorithm = 0 // Blacklisted
+	hashAlgorithmMD5     hashAlgorithm = 1 // Blacklisted
+	hashAlgorithmSHA1    hashAlgorithm = 2 // Blacklisted
+	hashAlgorithmSHA224  hashAlgorithm = 3
+	hashAlgorithmSHA256  hashAlgorithm = 4
+	hashAlgorithmSHA384  hashAlgorithm = 5
+	hashAlgorithmSHA512  hashAlgorithm = 6
+	hashAlgorithmEd25519 hashAlgorithm = 8
+)
+
+// String makes hashAlgorithm printable
+func (h hashAlgorithm) String() string {
+	switch h {
+	case hashAlgorithmMD2:
+		return "md2"
+	case hashAlgorithmMD5:
+		return "md5" // [RFC3279]
+	case hashAlgorithmSHA1:
+		return "sha-1" // [RFC3279]
+	case hashAlgorithmSHA224:
+		return "sha-224" // [RFC4055]
+	case hashAlgorithmSHA256:
+		return "sha-256" // [RFC4055]
+	case hashAlgorithmSHA384:
+		return "sha-384" // [RFC4055]
+	case hashAlgorithmSHA512:
+		return "sha-512" // [RFC4055]
+	case hashAlgorithmEd25519:
+		return "null"
+	default:
+		return "unknown or unsupported hash algorithm"
+	}
+}
+
+func (h hashAlgorithm) digest(b []byte) []byte {
+	switch h {
+	case hashAlgorithmMD5:
+		hash := md5.Sum(b) // #nosec
+		return hash[:]
+	case hashAlgorithmSHA1:
+		hash := sha1.Sum(b) // #nosec
+		return hash[:]
+	case hashAlgorithmSHA224:
+		hash := sha256.Sum224(b)
+		return hash[:]
+	case hashAlgorithmSHA256:
+		hash := sha256.Sum256(b)
+		return hash[:]
+	case hashAlgorithmSHA384:
+		hash := sha512.Sum384(b)
+		return hash[:]
+	case hashAlgorithmSHA512:
+		hash := sha512.Sum512(b)
+		return hash[:]
+	default:
+		return nil
+	}
+}
+
+func (h hashAlgorithm) insecure() bool {
+	switch h {
+	case hashAlgorithmMD2, hashAlgorithmMD5, hashAlgorithmSHA1:
+		return true
+	default:
+		return false
+	}
+}
+
+func (h hashAlgorithm) cryptoHash() crypto.Hash {
+	switch h {
+	case hashAlgorithmMD5:
+		return crypto.MD5
+	case hashAlgorithmSHA1:
+		return crypto.SHA1
+	case hashAlgorithmSHA224:
+		return crypto.SHA224
+	case hashAlgorithmSHA256:
+		return crypto.SHA256
+	case hashAlgorithmSHA384:
+		return crypto.SHA384
+	case hashAlgorithmSHA512:
+		return crypto.SHA512
+	case hashAlgorithmEd25519:
+		return crypto.Hash(0)
+	default:
+		return crypto.Hash(0)
+	}
+}
+
+func hashAlgorithms() map[hashAlgorithm]struct{} {
+	return map[hashAlgorithm]struct{}{
+		hashAlgorithmMD5:     {},
+		hashAlgorithmSHA1:    {},
+		hashAlgorithmSHA224:  {},
+		hashAlgorithmSHA256:  {},
+		hashAlgorithmSHA384:  {},
+		hashAlgorithmSHA512:  {},
+		hashAlgorithmEd25519: {},
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/internal/closer/closer.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/internal/closer/closer.go
new file mode 100644
index 000000000..b99e13e44
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/internal/closer/closer.go
@@ -0,0 +1,45 @@
+// Package closer provides signaling channel for shutdown
+package closer
+
+import (
+	"context"
+)
+
+// Closer allows for each signaling a channel for shutdown
+type Closer struct {
+	ctx       context.Context
+	closeFunc func()
+}
+
+// NewCloser creates a new instance of Closer
+func NewCloser() *Closer {
+	ctx, closeFunc := context.WithCancel(context.Background())
+	return &Closer{
+		ctx:       ctx,
+		closeFunc: closeFunc,
+	}
+}
+
+// NewCloserWithParent creates a new instance of Closer with a parent context
+func NewCloserWithParent(ctx context.Context) *Closer {
+	ctx, closeFunc := context.WithCancel(ctx)
+	return &Closer{
+		ctx:       ctx,
+		closeFunc: closeFunc,
+	}
+}
+
+// Done returns a channel signaling when it is done
+func (c *Closer) Done() <-chan struct{} {
+	return c.ctx.Done()
+}
+
+// Err returns an error of the context
+func (c *Closer) Err() error {
+	return c.ctx.Err()
+}
+
+// Close sends a signal to trigger the ctx done channel
+func (c *Closer) Close() {
+	c.closeFunc()
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/internal/net/connctx/connctx.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/internal/net/connctx/connctx.go
new file mode 100644
index 000000000..788451087
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/internal/net/connctx/connctx.go
@@ -0,0 +1,156 @@
+// Package connctx wraps net.Conn using context.Context.
+package connctx
+
+import (
+	"context"
+	"errors"
+	"io"
+	"net"
+	"sync"
+	"sync/atomic"
+	"time"
+)
+
+// ErrClosing is returned on Write to closed connection.
+var ErrClosing = errors.New("use of closed network connection")
+
+// ConnCtx is a wrapper of net.Conn using context.Context.
+type ConnCtx interface {
+	Read(context.Context, []byte) (int, error)
+	Write(context.Context, []byte) (int, error)
+	Close() error
+	LocalAddr() net.Addr
+	RemoteAddr() net.Addr
+	Conn() net.Conn
+}
+
+type connCtx struct {
+	nextConn  net.Conn
+	closed    chan struct{}
+	closeOnce sync.Once
+	readMu    sync.Mutex
+	writeMu   sync.Mutex
+}
+
+var veryOld = time.Unix(0, 1) //nolint:gochecknoglobals
+
+// New creates a new ConnCtx wrapping given net.Conn.
+func New(conn net.Conn) ConnCtx {
+	c := &connCtx{
+		nextConn: conn,
+		closed:   make(chan struct{}),
+	}
+	return c
+}
+
+func (c *connCtx) Read(ctx context.Context, b []byte) (int, error) {
+	c.readMu.Lock()
+	defer c.readMu.Unlock()
+
+	select {
+	case <-c.closed:
+		return 0, io.EOF
+	default:
+	}
+
+	done := make(chan struct{})
+	var wg sync.WaitGroup
+	var errSetDeadline atomic.Value
+	wg.Add(1)
+	go func() {
+		defer wg.Done()
+		select {
+		case <-ctx.Done():
+			// context canceled
+			if err := c.nextConn.SetReadDeadline(veryOld); err != nil {
+				errSetDeadline.Store(err)
+				return
+			}
+			<-done
+			if err := c.nextConn.SetReadDeadline(time.Time{}); err != nil {
+				errSetDeadline.Store(err)
+			}
+		case <-done:
+		}
+	}()
+
+	n, err := c.nextConn.Read(b)
+
+	close(done)
+	wg.Wait()
+	if e := ctx.Err(); e != nil && n == 0 {
+		err = e
+	}
+	if err2 := errSetDeadline.Load(); err == nil && err2 != nil {
+		err = err2.(error)
+	}
+	return n, err
+}
+
+func (c *connCtx) Write(ctx context.Context, b []byte) (int, error) {
+	c.writeMu.Lock()
+	defer c.writeMu.Unlock()
+
+	select {
+	case <-c.closed:
+		return 0, ErrClosing
+	default:
+	}
+
+	done := make(chan struct{})
+	var wg sync.WaitGroup
+	var errSetDeadline atomic.Value
+	wg.Add(1)
+	go func() {
+		select {
+		case <-ctx.Done():
+			// context canceled
+			if err := c.nextConn.SetWriteDeadline(veryOld); err != nil {
+				errSetDeadline.Store(err)
+				return
+			}
+			<-done
+			if err := c.nextConn.SetWriteDeadline(time.Time{}); err != nil {
+				errSetDeadline.Store(err)
+			}
+		case <-done:
+		}
+		wg.Done()
+	}()
+
+	n, err := c.nextConn.Write(b)
+
+	close(done)
+	wg.Wait()
+	if e := ctx.Err(); e != nil && n == 0 {
+		err = e
+	}
+	if err2 := errSetDeadline.Load(); err == nil && err2 != nil {
+		err = err2.(error)
+	}
+	return n, err
+}
+
+func (c *connCtx) Close() error {
+	err := c.nextConn.Close()
+	c.closeOnce.Do(func() {
+		c.writeMu.Lock()
+		c.readMu.Lock()
+		close(c.closed)
+		c.readMu.Unlock()
+		c.writeMu.Unlock()
+	})
+	return err
+}
+
+func (c *connCtx) LocalAddr() net.Addr {
+	return c.nextConn.LocalAddr()
+}
+
+func (c *connCtx) RemoteAddr() net.Addr {
+	return c.nextConn.RemoteAddr()
+}
+
+func (c *connCtx) Conn() net.Conn {
+	return c.nextConn
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/listener.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/listener.go
new file mode 100644
index 000000000..dd27b2c83
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/listener.go
@@ -0,0 +1,78 @@
+package dtls
+
+import (
+	"net"
+
+	"github.com/pion/udp"
+)
+
+// Listen creates a DTLS listener
+func Listen(network string, laddr *net.UDPAddr, config *Config) (net.Listener, error) {
+	if err := validateConfig(config); err != nil {
+		return nil, err
+	}
+
+	lc := udp.ListenConfig{
+		AcceptFilter: func(packet []byte) bool {
+			pkts, err := unpackDatagram(packet)
+			if err != nil || len(pkts) < 1 {
+				return false
+			}
+			h := &recordLayerHeader{}
+			if err := h.Unmarshal(pkts[0]); err != nil {
+				return false
+			}
+			return h.contentType == contentTypeHandshake
+		},
+	}
+	parent, err := lc.Listen(network, laddr)
+	if err != nil {
+		return nil, err
+	}
+	return &listener{
+		config: config,
+		parent: parent,
+	}, nil
+}
+
+// NewListener creates a DTLS listener which accepts connections from an inner Listener.
+func NewListener(inner net.Listener, config *Config) (net.Listener, error) {
+	if err := validateConfig(config); err != nil {
+		return nil, err
+	}
+
+	return &listener{
+		config: config,
+		parent: inner,
+	}, nil
+}
+
+// listener represents a DTLS listener
+type listener struct {
+	config *Config
+	parent net.Listener
+}
+
+// Accept waits for and returns the next connection to the listener.
+// You have to either close or read on all connection that are created.
+// Connection handshake will timeout using ConnectContextMaker in the Config.
+// If you want to specify the timeout duration, set ConnectContextMaker.
+func (l *listener) Accept() (net.Conn, error) {
+	c, err := l.parent.Accept()
+	if err != nil {
+		return nil, err
+	}
+	return Server(c, l.config)
+}
+
+// Close closes the listener.
+// Any blocked Accept operations will be unblocked and return errors.
+// Already Accepted connections are not closed.
+func (l *listener) Close() error {
+	return l.parent.Close()
+}
+
+// Addr returns the listener's network address.
+func (l *listener) Addr() net.Addr {
+	return l.parent.Addr()
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/named_curve.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/named_curve.go
new file mode 100644
index 000000000..7775bcf2f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/named_curve.go
@@ -0,0 +1,62 @@
+package dtls
+
+import (
+	"crypto/elliptic"
+	"crypto/rand"
+
+	"golang.org/x/crypto/curve25519"
+)
+
+// https://www.iana.org/assignments/tls-parameters/tls-parameters.xml#tls-parameters-8
+type namedCurve uint16
+
+type namedCurveKeypair struct {
+	curve      namedCurve
+	publicKey  []byte
+	privateKey []byte
+}
+
+const (
+	namedCurveP256   namedCurve = 0x0017
+	namedCurveP384   namedCurve = 0x0018
+	namedCurveX25519 namedCurve = 0x001d
+)
+
+func namedCurves() map[namedCurve]bool {
+	return map[namedCurve]bool{
+		namedCurveX25519: true,
+		namedCurveP256:   true,
+		namedCurveP384:   true,
+	}
+}
+
+func generateKeypair(c namedCurve) (*namedCurveKeypair, error) {
+	switch c { //nolint:golint
+	case namedCurveX25519:
+		tmp := make([]byte, 32)
+		if _, err := rand.Read(tmp); err != nil {
+			return nil, err
+		}
+
+		var public, private [32]byte
+		copy(private[:], tmp)
+
+		curve25519.ScalarBaseMult(&public, &private)
+		return &namedCurveKeypair{namedCurveX25519, public[:], private[:]}, nil
+	case namedCurveP256:
+		return ellipticCurveKeypair(namedCurveP256, elliptic.P256(), elliptic.P256())
+	case namedCurveP384:
+		return ellipticCurveKeypair(namedCurveP384, elliptic.P384(), elliptic.P384())
+	default:
+		return nil, errInvalidNamedCurve
+	}
+}
+
+func ellipticCurveKeypair(nc namedCurve, c1, c2 elliptic.Curve) (*namedCurveKeypair, error) {
+	privateKey, x, y, err := elliptic.GenerateKey(c1, rand.Reader)
+	if err != nil {
+		return nil, err
+	}
+
+	return &namedCurveKeypair{nc, elliptic.Marshal(c2, x, y), privateKey}, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/packet.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/packet.go
new file mode 100644
index 000000000..685f2e095
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/packet.go
@@ -0,0 +1,7 @@
+package dtls
+
+type packet struct {
+	record                   *recordLayer
+	shouldEncrypt            bool
+	resetLocalSequenceNumber bool
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/pkg/crypto/ccm/ccm.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/pkg/crypto/ccm/ccm.go
new file mode 100644
index 000000000..20e3436e2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/pkg/crypto/ccm/ccm.go
@@ -0,0 +1,251 @@
+// Package ccm implements a CCM, Counter with CBC-MAC
+// as per RFC 3610.
+//
+// See https://tools.ietf.org/html/rfc3610
+//
+// This code was lifted from https://github.com/bocajim/dtls/blob/a3300364a283fcb490d28a93d7fcfa7ba437fbbe/ccm/ccm.go
+// and as such was not written by the Pions authors. Like Pions this
+// code is licensed under MIT.
+//
+// A request for including CCM into the Go standard library
+// can be found as issue #27484 on the https://github.com/golang/go/
+// repository.
+package ccm
+
+import (
+	"crypto/cipher"
+	"crypto/subtle"
+	"encoding/binary"
+	"errors"
+	"math"
+)
+
+// ccm represents a Counter with CBC-MAC with a specific key.
+type ccm struct {
+	b cipher.Block
+	M uint8
+	L uint8
+}
+
+const ccmBlockSize = 16
+
+// CCM is a block cipher in Counter with CBC-MAC mode.
+// Providing authenticated encryption with associated data via the cipher.AEAD interface.
+type CCM interface {
+	cipher.AEAD
+	// MaxLength returns the maxium length of plaintext in calls to Seal.
+	// The maximum length of ciphertext in calls to Open is MaxLength()+Overhead().
+	// The maximum length is related to CCM's `L` parameter (15-noncesize) and
+	// is 1<<(8*L) - 1 (but also limited by the maxium size of an int).
+	MaxLength() int
+}
+
+var (
+	errInvalidBlockSize = errors.New("ccm: NewCCM requires 128-bit block cipher")
+	errInvalidTagSize   = errors.New("ccm: tagsize must be 4, 6, 8, 10, 12, 14, or 16")
+	errInvalidNonceSize = errors.New("ccm: invalid nonce size")
+)
+
+// NewCCM returns the given 128-bit block cipher wrapped in CCM.
+// The tagsize must be an even integer between 4 and 16 inclusive
+// and is used as CCM's `M` parameter.
+// The noncesize must be an integer between 7 and 13 inclusive,
+// 15-noncesize is used as CCM's `L` parameter.
+func NewCCM(b cipher.Block, tagsize, noncesize int) (CCM, error) {
+	if b.BlockSize() != ccmBlockSize {
+		return nil, errInvalidBlockSize
+	}
+	if tagsize < 4 || tagsize > 16 || tagsize&1 != 0 {
+		return nil, errInvalidTagSize
+	}
+	lensize := 15 - noncesize
+	if lensize < 2 || lensize > 8 {
+		return nil, errInvalidNonceSize
+	}
+	c := &ccm{b: b, M: uint8(tagsize), L: uint8(lensize)}
+	return c, nil
+}
+
+func (c *ccm) NonceSize() int { return 15 - int(c.L) }
+func (c *ccm) Overhead() int  { return int(c.M) }
+func (c *ccm) MaxLength() int { return maxlen(c.L, c.Overhead()) }
+
+func maxlen(l uint8, tagsize int) int {
+	max := (uint64(1) << (8 * l)) - 1
+	if m64 := uint64(math.MaxInt64) - uint64(tagsize); l > 8 || max > m64 {
+		max = m64 // The maximum lentgh on a 64bit arch
+	}
+	if max != uint64(int(max)) {
+		return math.MaxInt32 - tagsize // We have only 32bit int's
+	}
+	return int(max)
+}
+
+// MaxNonceLength returns the maximum nonce length for a given plaintext length.
+// A return value <= 0 indicates that plaintext length is too large for
+// any nonce length.
+func MaxNonceLength(pdatalen int) int {
+	const tagsize = 16
+	for L := 2; L <= 8; L++ {
+		if maxlen(uint8(L), tagsize) >= pdatalen {
+			return 15 - L
+		}
+	}
+	return 0
+}
+
+func (c *ccm) cbcRound(mac, data []byte) {
+	for i := 0; i < ccmBlockSize; i++ {
+		mac[i] ^= data[i]
+	}
+	c.b.Encrypt(mac, mac)
+}
+
+func (c *ccm) cbcData(mac, data []byte) {
+	for len(data) >= ccmBlockSize {
+		c.cbcRound(mac, data[:ccmBlockSize])
+		data = data[ccmBlockSize:]
+	}
+	if len(data) > 0 {
+		var block [ccmBlockSize]byte
+		copy(block[:], data)
+		c.cbcRound(mac, block[:])
+	}
+}
+
+var errPlaintextTooLong = errors.New("ccm: plaintext too large")
+
+func (c *ccm) tag(nonce, plaintext, adata []byte) ([]byte, error) {
+	var mac [ccmBlockSize]byte
+
+	if len(adata) > 0 {
+		mac[0] |= 1 << 6
+	}
+	mac[0] |= (c.M - 2) << 2
+	mac[0] |= c.L - 1
+	if len(nonce) != c.NonceSize() {
+		return nil, errInvalidNonceSize
+	}
+	if len(plaintext) > c.MaxLength() {
+		return nil, errPlaintextTooLong
+	}
+	binary.BigEndian.PutUint64(mac[ccmBlockSize-8:], uint64(len(plaintext)))
+	copy(mac[1:ccmBlockSize-c.L], nonce)
+	c.b.Encrypt(mac[:], mac[:])
+
+	var block [ccmBlockSize]byte
+	if n := uint64(len(adata)); n > 0 {
+		// First adata block includes adata length
+		i := 2
+		if n <= 0xfeff {
+			binary.BigEndian.PutUint16(block[:i], uint16(n))
+		} else {
+			block[0] = 0xfe
+			block[1] = 0xff
+			if n < uint64(1<<32) {
+				i = 2 + 4
+				binary.BigEndian.PutUint32(block[2:i], uint32(n))
+			} else {
+				i = 2 + 8
+				binary.BigEndian.PutUint64(block[2:i], n)
+			}
+		}
+		i = copy(block[i:], adata)
+		c.cbcRound(mac[:], block[:])
+		c.cbcData(mac[:], adata[i:])
+	}
+
+	if len(plaintext) > 0 {
+		c.cbcData(mac[:], plaintext)
+	}
+
+	return mac[:c.M], nil
+}
+
+// sliceForAppend takes a slice and a requested number of bytes. It returns a
+// slice with the contents of the given slice followed by that many bytes and a
+// second slice that aliases into it and contains only the extra bytes. If the
+// original slice has sufficient capacity then no allocation is performed.
+// From crypto/cipher/gcm.go
+func sliceForAppend(in []byte, n int) (head, tail []byte) {
+	if total := len(in) + n; cap(in) >= total {
+		head = in[:total]
+	} else {
+		head = make([]byte, total)
+		copy(head, in)
+	}
+	tail = head[len(in):]
+	return
+}
+
+// Seal encrypts and authenticates plaintext, authenticates the
+// additional data and appends the result to dst, returning the updated
+// slice. The nonce must be NonceSize() bytes long and unique for all
+// time, for a given key.
+// The plaintext must be no longer than MaxLength() bytes long.
+//
+// The plaintext and dst may alias exactly or not at all.
+func (c *ccm) Seal(dst, nonce, plaintext, adata []byte) []byte {
+	tag, err := c.tag(nonce, plaintext, adata)
+	if err != nil {
+		// The cipher.AEAD interface doesn't allow for an error return.
+		panic(err) // nolint
+	}
+
+	var iv, s0 [ccmBlockSize]byte
+	iv[0] = c.L - 1
+	copy(iv[1:ccmBlockSize-c.L], nonce)
+	c.b.Encrypt(s0[:], iv[:])
+	for i := 0; i < int(c.M); i++ {
+		tag[i] ^= s0[i]
+	}
+	iv[len(iv)-1] |= 1
+	stream := cipher.NewCTR(c.b, iv[:])
+	ret, out := sliceForAppend(dst, len(plaintext)+int(c.M))
+	stream.XORKeyStream(out, plaintext)
+	copy(out[len(plaintext):], tag)
+	return ret
+}
+
+var (
+	errOpen               = errors.New("ccm: message authentication failed")
+	errCiphertextTooShort = errors.New("ccm: ciphertext too short")
+	errCiphertextTooLong  = errors.New("ccm: ciphertext too long")
+)
+
+func (c *ccm) Open(dst, nonce, ciphertext, adata []byte) ([]byte, error) {
+	if len(ciphertext) < int(c.M) {
+		return nil, errCiphertextTooShort
+	}
+	if len(ciphertext) > c.MaxLength()+c.Overhead() {
+		return nil, errCiphertextTooLong
+	}
+
+	tag := make([]byte, int(c.M))
+	copy(tag, ciphertext[len(ciphertext)-int(c.M):])
+	ciphertextWithoutTag := ciphertext[:len(ciphertext)-int(c.M)]
+
+	var iv, s0 [ccmBlockSize]byte
+	iv[0] = c.L - 1
+	copy(iv[1:ccmBlockSize-c.L], nonce)
+	c.b.Encrypt(s0[:], iv[:])
+	for i := 0; i < int(c.M); i++ {
+		tag[i] ^= s0[i]
+	}
+	iv[len(iv)-1] |= 1
+	stream := cipher.NewCTR(c.b, iv[:])
+
+	// Cannot decrypt directly to dst since we're not supposed to
+	// reveal the plaintext to the caller if authentication fails.
+	plaintext := make([]byte, len(ciphertextWithoutTag))
+	stream.XORKeyStream(plaintext, ciphertextWithoutTag)
+	expectedTag, err := c.tag(nonce, plaintext, adata)
+	if err != nil {
+		return nil, err
+	}
+
+	if subtle.ConstantTimeCompare(tag, expectedTag) != 1 {
+		return nil, errOpen
+	}
+	return append(dst, plaintext...), nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/pkg/crypto/fingerprint/fingerprint.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/pkg/crypto/fingerprint/fingerprint.go
new file mode 100644
index 000000000..215b44ec7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/pkg/crypto/fingerprint/fingerprint.go
@@ -0,0 +1,50 @@
+// Package fingerprint provides a helper to create fingerprint string from certificate
+package fingerprint
+
+import (
+	"crypto"
+	"crypto/x509"
+	"errors"
+	"fmt"
+)
+
+var (
+	errHashUnavailable          = errors.New("fingerprint: hash algorithm is not linked into the binary")
+	errInvalidFingerprintLength = errors.New("fingerprint: invalid fingerprint length")
+)
+
+// Fingerprint creates a fingerprint for a certificate using the specified hash algorithm
+func Fingerprint(cert *x509.Certificate, algo crypto.Hash) (string, error) {
+	if !algo.Available() {
+		return "", errHashUnavailable
+	}
+	h := algo.New()
+	for i := 0; i < len(cert.Raw); {
+		n, _ := h.Write(cert.Raw[i:])
+		// Hash.Writer is specified to be never returning an error.
+		// https://golang.org/pkg/hash/#Hash
+		i += n
+	}
+	digest := []byte(fmt.Sprintf("%x", h.Sum(nil)))
+
+	digestlen := len(digest)
+	if digestlen == 0 {
+		return "", nil
+	}
+	if digestlen%2 != 0 {
+		return "", errInvalidFingerprintLength
+	}
+	res := make([]byte, digestlen>>1+digestlen-1)
+
+	pos := 0
+	for i, c := range digest {
+		res[pos] = c
+		pos++
+		if (i)%2 != 0 && i < digestlen-1 {
+			res[pos] = byte(':')
+			pos++
+		}
+	}
+
+	return string(res), nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/pkg/crypto/fingerprint/hash.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/pkg/crypto/fingerprint/hash.go
new file mode 100644
index 000000000..09107db92
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/pkg/crypto/fingerprint/hash.go
@@ -0,0 +1,37 @@
+package fingerprint
+
+import (
+	"crypto"
+	"errors"
+)
+
+var errInvalidHashAlgorithm = errors.New("fingerprint: invalid hash algorithm")
+
+func nameToHash() map[string]crypto.Hash {
+	return map[string]crypto.Hash{
+		"md5":     crypto.MD5,    // [RFC3279]
+		"sha-1":   crypto.SHA1,   // [RFC3279]
+		"sha-224": crypto.SHA224, // [RFC4055]
+		"sha-256": crypto.SHA256, // [RFC4055]
+		"sha-384": crypto.SHA384, // [RFC4055]
+		"sha-512": crypto.SHA512, // [RFC4055]
+	}
+}
+
+// HashFromString allows looking up a hash algorithm by it's string representation
+func HashFromString(s string) (crypto.Hash, error) {
+	if h, ok := nameToHash()[s]; ok {
+		return h, nil
+	}
+	return 0, errInvalidHashAlgorithm
+}
+
+// StringFromHash allows looking up a string representation of the crypto.Hash.
+func StringFromHash(hash crypto.Hash) (string, error) {
+	for s, h := range nameToHash() {
+		if h == hash {
+			return s, nil
+		}
+	}
+	return "", errInvalidHashAlgorithm
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/prf.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/prf.go
new file mode 100644
index 000000000..2d649a187
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/prf.go
@@ -0,0 +1,230 @@
+package dtls
+
+import ( //nolint:gci
+	"crypto/elliptic"
+	"crypto/hmac"
+	"crypto/sha1" //nolint:gosec
+	"encoding/binary"
+	"fmt"
+	"hash"
+	"math"
+
+	"golang.org/x/crypto/curve25519"
+)
+
+const (
+	prfMasterSecretLabel         = "master secret"
+	prfExtendedMasterSecretLabel = "extended master secret"
+	prfKeyExpansionLabel         = "key expansion"
+	prfVerifyDataClientLabel     = "client finished"
+	prfVerifyDataServerLabel     = "server finished"
+)
+
+type hashFunc func() hash.Hash
+
+type encryptionKeys struct {
+	masterSecret   []byte
+	clientMACKey   []byte
+	serverMACKey   []byte
+	clientWriteKey []byte
+	serverWriteKey []byte
+	clientWriteIV  []byte
+	serverWriteIV  []byte
+}
+
+func (e *encryptionKeys) String() string {
+	return fmt.Sprintf(`encryptionKeys:
+- masterSecret: %#v
+- clientMACKey: %#v
+- serverMACKey: %#v
+- clientWriteKey: %#v
+- serverWriteKey: %#v
+- clientWriteIV: %#v
+- serverWriteIV: %#v
+`,
+		e.masterSecret,
+		e.clientMACKey,
+		e.serverMACKey,
+		e.clientWriteKey,
+		e.serverWriteKey,
+		e.clientWriteIV,
+		e.serverWriteIV)
+}
+
+// The premaster secret is formed as follows: if the PSK is N octets
+// long, concatenate a uint16 with the value N, N zero octets, a second
+// uint16 with the value N, and the PSK itself.
+//
+// https://tools.ietf.org/html/rfc4279#section-2
+func prfPSKPreMasterSecret(psk []byte) []byte {
+	pskLen := uint16(len(psk))
+
+	out := append(make([]byte, 2+pskLen+2), psk...)
+	binary.BigEndian.PutUint16(out, pskLen)
+	binary.BigEndian.PutUint16(out[2+pskLen:], pskLen)
+
+	return out
+}
+
+func prfPreMasterSecret(publicKey, privateKey []byte, curve namedCurve) ([]byte, error) {
+	switch curve {
+	case namedCurveX25519:
+		return curve25519.X25519(privateKey, publicKey)
+	case namedCurveP256:
+		return ellipticCurvePreMasterSecret(publicKey, privateKey, elliptic.P256(), elliptic.P256())
+	case namedCurveP384:
+		return ellipticCurvePreMasterSecret(publicKey, privateKey, elliptic.P384(), elliptic.P384())
+	default:
+		return nil, errInvalidNamedCurve
+	}
+}
+
+func ellipticCurvePreMasterSecret(publicKey, privateKey []byte, c1, c2 elliptic.Curve) ([]byte, error) {
+	x, y := elliptic.Unmarshal(c1, publicKey)
+	if x == nil || y == nil {
+		return nil, errInvalidNamedCurve
+	}
+
+	result, _ := c2.ScalarMult(x, y, privateKey)
+	preMasterSecret := make([]byte, (c2.Params().BitSize+7)>>3)
+	resultBytes := result.Bytes()
+	copy(preMasterSecret[len(preMasterSecret)-len(resultBytes):], resultBytes)
+	return preMasterSecret, nil
+}
+
+//  This PRF with the SHA-256 hash function is used for all cipher suites
+//  defined in this document and in TLS documents published prior to this
+//  document when TLS 1.2 is negotiated.  New cipher suites MUST explicitly
+//  specify a PRF and, in general, SHOULD use the TLS PRF with SHA-256 or a
+//  stronger standard hash function.
+//
+//     P_hash(secret, seed) = HMAC_hash(secret, A(1) + seed) +
+//                            HMAC_hash(secret, A(2) + seed) +
+//                            HMAC_hash(secret, A(3) + seed) + ...
+//
+//  A() is defined as:
+//
+//     A(0) = seed
+//     A(i) = HMAC_hash(secret, A(i-1))
+//
+//  P_hash can be iterated as many times as necessary to produce the
+//  required quantity of data.  For example, if P_SHA256 is being used to
+//  create 80 bytes of data, it will have to be iterated three times
+//  (through A(3)), creating 96 bytes of output data; the last 16 bytes
+//  of the final iteration will then be discarded, leaving 80 bytes of
+//  output data.
+//
+// https://tools.ietf.org/html/rfc4346w
+func prfPHash(secret, seed []byte, requestedLength int, h hashFunc) ([]byte, error) {
+	hmacSHA256 := func(key, data []byte) ([]byte, error) {
+		mac := hmac.New(h, key)
+		if _, err := mac.Write(data); err != nil {
+			return nil, err
+		}
+		return mac.Sum(nil), nil
+	}
+
+	var err error
+	lastRound := seed
+	out := []byte{}
+
+	iterations := int(math.Ceil(float64(requestedLength) / float64(h().Size())))
+	for i := 0; i < iterations; i++ {
+		lastRound, err = hmacSHA256(secret, lastRound)
+		if err != nil {
+			return nil, err
+		}
+		withSecret, err := hmacSHA256(secret, append(lastRound, seed...))
+		if err != nil {
+			return nil, err
+		}
+		out = append(out, withSecret...)
+	}
+
+	return out[:requestedLength], nil
+}
+
+func prfExtendedMasterSecret(preMasterSecret, sessionHash []byte, h hashFunc) ([]byte, error) {
+	seed := append([]byte(prfExtendedMasterSecretLabel), sessionHash...)
+	return prfPHash(preMasterSecret, seed, 48, h)
+}
+
+func prfMasterSecret(preMasterSecret, clientRandom, serverRandom []byte, h hashFunc) ([]byte, error) {
+	seed := append(append([]byte(prfMasterSecretLabel), clientRandom...), serverRandom...)
+	return prfPHash(preMasterSecret, seed, 48, h)
+}
+
+func prfEncryptionKeys(masterSecret, clientRandom, serverRandom []byte, prfMacLen, prfKeyLen, prfIvLen int, h hashFunc) (*encryptionKeys, error) {
+	seed := append(append([]byte(prfKeyExpansionLabel), serverRandom...), clientRandom...)
+	keyMaterial, err := prfPHash(masterSecret, seed, (2*prfMacLen)+(2*prfKeyLen)+(2*prfIvLen), h)
+	if err != nil {
+		return nil, err
+	}
+
+	clientMACKey := keyMaterial[:prfMacLen]
+	keyMaterial = keyMaterial[prfMacLen:]
+
+	serverMACKey := keyMaterial[:prfMacLen]
+	keyMaterial = keyMaterial[prfMacLen:]
+
+	clientWriteKey := keyMaterial[:prfKeyLen]
+	keyMaterial = keyMaterial[prfKeyLen:]
+
+	serverWriteKey := keyMaterial[:prfKeyLen]
+	keyMaterial = keyMaterial[prfKeyLen:]
+
+	clientWriteIV := keyMaterial[:prfIvLen]
+	keyMaterial = keyMaterial[prfIvLen:]
+
+	serverWriteIV := keyMaterial[:prfIvLen]
+
+	return &encryptionKeys{
+		masterSecret:   masterSecret,
+		clientMACKey:   clientMACKey,
+		serverMACKey:   serverMACKey,
+		clientWriteKey: clientWriteKey,
+		serverWriteKey: serverWriteKey,
+		clientWriteIV:  clientWriteIV,
+		serverWriteIV:  serverWriteIV,
+	}, nil
+}
+
+func prfVerifyData(masterSecret, handshakeBodies []byte, label string, hashFunc hashFunc) ([]byte, error) {
+	h := hashFunc()
+	if _, err := h.Write(handshakeBodies); err != nil {
+		return nil, err
+	}
+
+	seed := append([]byte(label), h.Sum(nil)...)
+	return prfPHash(masterSecret, seed, 12, hashFunc)
+}
+
+func prfVerifyDataClient(masterSecret, handshakeBodies []byte, h hashFunc) ([]byte, error) {
+	return prfVerifyData(masterSecret, handshakeBodies, prfVerifyDataClientLabel, h)
+}
+
+func prfVerifyDataServer(masterSecret, handshakeBodies []byte, h hashFunc) ([]byte, error) {
+	return prfVerifyData(masterSecret, handshakeBodies, prfVerifyDataServerLabel, h)
+}
+
+// compute the MAC using HMAC-SHA1
+func prfMac(epoch uint16, sequenceNumber uint64, contentType contentType, protocolVersion protocolVersion, payload []byte, key []byte) ([]byte, error) {
+	h := hmac.New(sha1.New, key)
+
+	msg := make([]byte, 13)
+
+	binary.BigEndian.PutUint16(msg, epoch)
+	putBigEndianUint48(msg[2:], sequenceNumber)
+	msg[8] = byte(contentType)
+	msg[9] = protocolVersion.major
+	msg[10] = protocolVersion.minor
+	binary.BigEndian.PutUint16(msg[11:], uint16(len(payload)))
+
+	if _, err := h.Write(msg); err != nil {
+		return nil, err
+	} else if _, err := h.Write(payload); err != nil {
+		return nil, err
+	}
+
+	return h.Sum(nil), nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/record_layer.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/record_layer.go
new file mode 100644
index 000000000..11f32dad6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/record_layer.go
@@ -0,0 +1,93 @@
+package dtls
+
+import (
+	"encoding/binary"
+)
+
+/*
+ The TLS Record Layer which handles all data transport.
+ The record layer is assumed to sit directly on top of some
+ reliable transport such as TCP. The record layer can carry four types of content:
+
+ 1. Handshake messages—used for algorithm negotiation and key establishment.
+ 2. ChangeCipherSpec messages—really part of the handshake but technically a separate kind of message.
+ 3. Alert messages—used to signal that errors have occurred
+ 4. Application layer data
+
+ The DTLS record layer is extremely similar to that of TLS 1.1.  The
+ only change is the inclusion of an explicit sequence number in the
+ record.  This sequence number allows the recipient to correctly
+ verify the TLS MAC.
+ https://tools.ietf.org/html/rfc4347#section-4.1
+*/
+type recordLayer struct {
+	recordLayerHeader recordLayerHeader
+	content           content
+}
+
+func (r *recordLayer) Marshal() ([]byte, error) {
+	contentRaw, err := r.content.Marshal()
+	if err != nil {
+		return nil, err
+	}
+
+	r.recordLayerHeader.contentLen = uint16(len(contentRaw))
+	r.recordLayerHeader.contentType = r.content.contentType()
+
+	headerRaw, err := r.recordLayerHeader.Marshal()
+	if err != nil {
+		return nil, err
+	}
+
+	return append(headerRaw, contentRaw...), nil
+}
+
+func (r *recordLayer) Unmarshal(data []byte) error {
+	if len(data) < recordLayerHeaderSize {
+		return errBufferTooSmall
+	}
+	if err := r.recordLayerHeader.Unmarshal(data); err != nil {
+		return err
+	}
+
+	switch contentType(data[0]) {
+	case contentTypeChangeCipherSpec:
+		r.content = &changeCipherSpec{}
+	case contentTypeAlert:
+		r.content = &alert{}
+	case contentTypeHandshake:
+		r.content = &handshake{}
+	case contentTypeApplicationData:
+		r.content = &applicationData{}
+	default:
+		return errInvalidContentType
+	}
+
+	return r.content.Unmarshal(data[recordLayerHeaderSize:])
+}
+
+// Note that as with TLS, multiple handshake messages may be placed in
+// the same DTLS record, provided that there is room and that they are
+// part of the same flight.  Thus, there are two acceptable ways to pack
+// two DTLS messages into the same datagram: in the same record or in
+// separate records.
+// https://tools.ietf.org/html/rfc6347#section-4.2.3
+func unpackDatagram(buf []byte) ([][]byte, error) {
+	out := [][]byte{}
+
+	for offset := 0; len(buf) != offset; {
+		if len(buf)-offset <= recordLayerHeaderSize {
+			return nil, errInvalidPacketLength
+		}
+
+		pktLen := (recordLayerHeaderSize + int(binary.BigEndian.Uint16(buf[offset+11:])))
+		if offset+pktLen > len(buf) {
+			return nil, errInvalidPacketLength
+		}
+
+		out = append(out, buf[offset:offset+pktLen])
+		offset += pktLen
+	}
+
+	return out, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/record_layer_header.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/record_layer_header.go
new file mode 100644
index 000000000..69d1925b5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/record_layer_header.go
@@ -0,0 +1,76 @@
+package dtls
+
+import "encoding/binary"
+
+type recordLayerHeader struct {
+	contentType     contentType
+	contentLen      uint16
+	protocolVersion protocolVersion
+	epoch           uint16
+	sequenceNumber  uint64 // uint48 in spec
+}
+
+const (
+	recordLayerHeaderSize = 13
+	maxSequenceNumber     = 0x0000FFFFFFFFFFFF
+
+	dtls1_2Major = 0xfe
+	dtls1_2Minor = 0xfd
+
+	dtls1_0Major = 0xfe
+	dtls1_0Minor = 0xff
+
+	// VersionDTLS12 is the DTLS version in the same style as
+	// VersionTLSXX from crypto/tls
+	VersionDTLS12 = 0xfefd
+)
+
+var (
+	protocolVersion1_0 = protocolVersion{dtls1_0Major, dtls1_0Minor} //nolint:gochecknoglobals
+	protocolVersion1_2 = protocolVersion{dtls1_2Major, dtls1_2Minor} //nolint:gochecknoglobals
+)
+
+// https://tools.ietf.org/html/rfc4346#section-6.2.1
+type protocolVersion struct {
+	major, minor uint8
+}
+
+func (v protocolVersion) Equal(x protocolVersion) bool {
+	return v.major == x.major && v.minor == x.minor
+}
+
+func (r *recordLayerHeader) Marshal() ([]byte, error) {
+	if r.sequenceNumber > maxSequenceNumber {
+		return nil, errSequenceNumberOverflow
+	}
+
+	out := make([]byte, recordLayerHeaderSize)
+	out[0] = byte(r.contentType)
+	out[1] = r.protocolVersion.major
+	out[2] = r.protocolVersion.minor
+	binary.BigEndian.PutUint16(out[3:], r.epoch)
+	putBigEndianUint48(out[5:], r.sequenceNumber)
+	binary.BigEndian.PutUint16(out[recordLayerHeaderSize-2:], r.contentLen)
+	return out, nil
+}
+
+func (r *recordLayerHeader) Unmarshal(data []byte) error {
+	if len(data) < recordLayerHeaderSize {
+		return errBufferTooSmall
+	}
+	r.contentType = contentType(data[0])
+	r.protocolVersion.major = data[1]
+	r.protocolVersion.minor = data[2]
+	r.epoch = binary.BigEndian.Uint16(data[3:])
+
+	// SequenceNumber is stored as uint48, make into uint64
+	seqCopy := make([]byte, 8)
+	copy(seqCopy[2:], data[5:11])
+	r.sequenceNumber = binary.BigEndian.Uint64(seqCopy)
+
+	if !r.protocolVersion.Equal(protocolVersion1_0) && !r.protocolVersion.Equal(protocolVersion1_2) {
+		return errUnsupportedProtocolVersion
+	}
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/renovate.json b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/renovate.json
new file mode 100644
index 000000000..4400fd9b2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/renovate.json
@@ -0,0 +1,15 @@
+{
+  "extends": [
+    "config:base"
+  ],
+  "postUpdateOptions": [
+    "gomodTidy"
+  ],
+  "commitBody": "Generated by renovateBot",
+  "packageRules": [
+    {
+      "packagePatterns": ["^golang.org/x/"],
+      "schedule": ["on the first day of the month"]
+    }
+  ]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/resume.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/resume.go
new file mode 100644
index 000000000..40e55e449
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/resume.go
@@ -0,0 +1,19 @@
+package dtls
+
+import (
+	"context"
+	"net"
+)
+
+// Resume imports an already established dtls connection using a specific dtls state
+func Resume(state *State, conn net.Conn, config *Config) (*Conn, error) {
+	if err := state.initCipherSuite(); err != nil {
+		return nil, err
+	}
+	c, err := createConn(context.Background(), conn, config, state.isClient, state)
+	if err != nil {
+		return nil, err
+	}
+
+	return c, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/signature_algorithm.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/signature_algorithm.go
new file mode 100644
index 000000000..65191de4b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/signature_algorithm.go
@@ -0,0 +1,18 @@
+package dtls
+
+// https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-16
+type signatureAlgorithm uint16
+
+const (
+	signatureAlgorithmRSA     signatureAlgorithm = 1
+	signatureAlgorithmECDSA   signatureAlgorithm = 3
+	signatureAlgorithmEd25519 signatureAlgorithm = 7
+)
+
+func signatureAlgorithms() map[signatureAlgorithm]bool {
+	return map[signatureAlgorithm]bool{
+		signatureAlgorithmRSA:     true,
+		signatureAlgorithmECDSA:   true,
+		signatureAlgorithmEd25519: true,
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/signature_hash_algorithm.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/signature_hash_algorithm.go
new file mode 100644
index 000000000..97e53efb1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/signature_hash_algorithm.go
@@ -0,0 +1,88 @@
+package dtls
+
+import (
+	"crypto"
+	"crypto/ecdsa"
+	"crypto/ed25519"
+	"crypto/rsa"
+	"crypto/tls"
+
+	"golang.org/x/xerrors"
+)
+
+type signatureHashAlgorithm struct {
+	hash      hashAlgorithm
+	signature signatureAlgorithm
+}
+
+func defaultSignatureSchemes() []signatureHashAlgorithm {
+	return []signatureHashAlgorithm{
+		{hashAlgorithmSHA256, signatureAlgorithmECDSA},
+		{hashAlgorithmSHA384, signatureAlgorithmECDSA},
+		{hashAlgorithmSHA512, signatureAlgorithmECDSA},
+		{hashAlgorithmSHA256, signatureAlgorithmRSA},
+		{hashAlgorithmSHA384, signatureAlgorithmRSA},
+		{hashAlgorithmSHA512, signatureAlgorithmRSA},
+		{hashAlgorithmEd25519, signatureAlgorithmEd25519},
+	}
+}
+
+// select Signature Scheme returns most preferred and compatible scheme.
+func selectSignatureScheme(sigs []signatureHashAlgorithm, privateKey crypto.PrivateKey) (signatureHashAlgorithm, error) {
+	for _, ss := range sigs {
+		if ss.isCompatible(privateKey) {
+			return ss, nil
+		}
+	}
+	return signatureHashAlgorithm{}, errNoAvailableSignatureSchemes
+}
+
+// isCompatible checks that given private key is compatible with the signature scheme.
+func (s *signatureHashAlgorithm) isCompatible(privateKey crypto.PrivateKey) bool {
+	switch privateKey.(type) {
+	case ed25519.PrivateKey:
+		return s.signature == signatureAlgorithmEd25519
+	case *ecdsa.PrivateKey:
+		return s.signature == signatureAlgorithmECDSA
+	case *rsa.PrivateKey:
+		return s.signature == signatureAlgorithmRSA
+	default:
+		return false
+	}
+}
+
+// parseSignatureSchemes translates []tls.SignatureScheme to []signatureHashAlgorithm.
+// It returns default signature scheme list if no SignatureScheme is passed.
+func parseSignatureSchemes(sigs []tls.SignatureScheme, insecureHashes bool) ([]signatureHashAlgorithm, error) {
+	if len(sigs) == 0 {
+		return defaultSignatureSchemes(), nil
+	}
+	out := []signatureHashAlgorithm{}
+	for _, ss := range sigs {
+		sig := signatureAlgorithm(ss & 0xFF)
+		if _, ok := signatureAlgorithms()[sig]; !ok {
+			return nil, &FatalError{
+				xerrors.Errorf("SignatureScheme %04x: %w", ss, errInvalidSignatureAlgorithm),
+			}
+		}
+		h := hashAlgorithm(ss >> 8)
+		if _, ok := hashAlgorithms()[h]; !ok {
+			return nil, &FatalError{
+				xerrors.Errorf("SignatureScheme %04x: %w", ss, errInvalidHashAlgorithm),
+			}
+		}
+		if h.insecure() && !insecureHashes {
+			continue
+		}
+		out = append(out, signatureHashAlgorithm{
+			hash:      h,
+			signature: sig,
+		})
+	}
+
+	if len(out) == 0 {
+		return nil, errNoAvailableSignatureSchemes
+	}
+
+	return out, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/srtp_protection_profile.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/srtp_protection_profile.go
new file mode 100644
index 000000000..1d4faa5c2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/srtp_protection_profile.go
@@ -0,0 +1,21 @@
+package dtls
+
+// SRTPProtectionProfile defines the parameters and options that are in effect for the SRTP processing
+// https://tools.ietf.org/html/rfc5764#section-4.1.2
+type SRTPProtectionProfile uint16
+
+const (
+	SRTP_AES128_CM_HMAC_SHA1_80 SRTPProtectionProfile = 0x0001 // nolint
+	SRTP_AES128_CM_HMAC_SHA1_32 SRTPProtectionProfile = 0x0002 // nolint
+	SRTP_AEAD_AES_128_GCM       SRTPProtectionProfile = 0x0007 // nolint
+	SRTP_AEAD_AES_256_GCM       SRTPProtectionProfile = 0x0008 // nolint
+)
+
+func srtpProtectionProfiles() map[SRTPProtectionProfile]bool {
+	return map[SRTPProtectionProfile]bool{
+		SRTP_AES128_CM_HMAC_SHA1_80: true,
+		SRTP_AES128_CM_HMAC_SHA1_32: true,
+		SRTP_AEAD_AES_128_GCM:       true,
+		SRTP_AEAD_AES_256_GCM:       true,
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/state.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/state.go
new file mode 100644
index 000000000..33d210540
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/state.go
@@ -0,0 +1,187 @@
+package dtls
+
+import (
+	"bytes"
+	"encoding/gob"
+	"sync/atomic"
+
+	"github.com/pion/transport/replaydetector"
+)
+
+// State holds the dtls connection state and implements both encoding.BinaryMarshaler and encoding.BinaryUnmarshaler
+type State struct {
+	localEpoch, remoteEpoch   atomic.Value
+	localSequenceNumber       []uint64 // uint48
+	localRandom, remoteRandom handshakeRandom
+	masterSecret              []byte
+	cipherSuite               cipherSuite // nil if a cipherSuite hasn't been chosen
+
+	srtpProtectionProfile SRTPProtectionProfile // Negotiated SRTPProtectionProfile
+	PeerCertificates      [][]byte
+
+	isClient bool
+
+	preMasterSecret      []byte
+	extendedMasterSecret bool
+
+	namedCurve                 namedCurve
+	localKeypair               *namedCurveKeypair
+	cookie                     []byte
+	handshakeSendSequence      int
+	handshakeRecvSequence      int
+	serverName                 string
+	remoteRequestedCertificate bool   // Did we get a CertificateRequest
+	localCertificatesVerify    []byte // cache CertificateVerify
+	localVerifyData            []byte // cached VerifyData
+	localKeySignature          []byte // cached keySignature
+	peerCertificatesVerified   bool
+
+	replayDetector []replaydetector.ReplayDetector
+}
+
+type serializedState struct {
+	LocalEpoch            uint16
+	RemoteEpoch           uint16
+	LocalRandom           [handshakeRandomLength]byte
+	RemoteRandom          [handshakeRandomLength]byte
+	CipherSuiteID         uint16
+	MasterSecret          []byte
+	SequenceNumber        uint64
+	SRTPProtectionProfile uint16
+	PeerCertificates      [][]byte
+	IsClient              bool
+}
+
+func (s *State) clone() *State {
+	serialized := s.serialize()
+	state := &State{}
+	state.deserialize(*serialized)
+
+	return state
+}
+
+func (s *State) serialize() *serializedState {
+	// Marshal random values
+	localRnd := s.localRandom.marshalFixed()
+	remoteRnd := s.remoteRandom.marshalFixed()
+
+	epoch := s.localEpoch.Load().(uint16)
+	return &serializedState{
+		LocalEpoch:            epoch,
+		RemoteEpoch:           s.remoteEpoch.Load().(uint16),
+		CipherSuiteID:         uint16(s.cipherSuite.ID()),
+		MasterSecret:          s.masterSecret,
+		SequenceNumber:        atomic.LoadUint64(&s.localSequenceNumber[epoch]),
+		LocalRandom:           localRnd,
+		RemoteRandom:          remoteRnd,
+		SRTPProtectionProfile: uint16(s.srtpProtectionProfile),
+		PeerCertificates:      s.PeerCertificates,
+		IsClient:              s.isClient,
+	}
+}
+
+func (s *State) deserialize(serialized serializedState) {
+	// Set epoch values
+	epoch := serialized.LocalEpoch
+	s.localEpoch.Store(serialized.LocalEpoch)
+	s.remoteEpoch.Store(serialized.RemoteEpoch)
+
+	for len(s.localSequenceNumber) <= int(epoch) {
+		s.localSequenceNumber = append(s.localSequenceNumber, uint64(0))
+	}
+
+	// Set random values
+	localRandom := &handshakeRandom{}
+	localRandom.unmarshalFixed(serialized.LocalRandom)
+	s.localRandom = *localRandom
+
+	remoteRandom := &handshakeRandom{}
+	remoteRandom.unmarshalFixed(serialized.RemoteRandom)
+	s.remoteRandom = *remoteRandom
+
+	s.isClient = serialized.IsClient
+
+	// Set master secret
+	s.masterSecret = serialized.MasterSecret
+
+	// Set cipher suite
+	s.cipherSuite = cipherSuiteForID(CipherSuiteID(serialized.CipherSuiteID))
+
+	atomic.StoreUint64(&s.localSequenceNumber[epoch], serialized.SequenceNumber)
+	s.srtpProtectionProfile = SRTPProtectionProfile(serialized.SRTPProtectionProfile)
+
+	// Set remote certificate
+	s.PeerCertificates = serialized.PeerCertificates
+}
+
+func (s *State) initCipherSuite() error {
+	if s.cipherSuite.isInitialized() {
+		return nil
+	}
+
+	localRandom := s.localRandom.marshalFixed()
+	remoteRandom := s.remoteRandom.marshalFixed()
+
+	var err error
+	if s.isClient {
+		err = s.cipherSuite.init(s.masterSecret, localRandom[:], remoteRandom[:], true)
+	} else {
+		err = s.cipherSuite.init(s.masterSecret, remoteRandom[:], localRandom[:], false)
+	}
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+// MarshalBinary is a binary.BinaryMarshaler.MarshalBinary implementation
+func (s *State) MarshalBinary() ([]byte, error) {
+	serialized := s.serialize()
+
+	var buf bytes.Buffer
+	enc := gob.NewEncoder(&buf)
+	if err := enc.Encode(*serialized); err != nil {
+		return nil, err
+	}
+	return buf.Bytes(), nil
+}
+
+// UnmarshalBinary is a binary.BinaryUnmarshaler.UnmarshalBinary implementation
+func (s *State) UnmarshalBinary(data []byte) error {
+	enc := gob.NewDecoder(bytes.NewBuffer(data))
+	var serialized serializedState
+	if err := enc.Decode(&serialized); err != nil {
+		return err
+	}
+
+	s.deserialize(serialized)
+	if err := s.initCipherSuite(); err != nil {
+		return err
+	}
+	return nil
+}
+
+// ExportKeyingMaterial returns length bytes of exported key material in a new
+// slice as defined in RFC 5705.
+// This allows protocols to use DTLS for key establishment, but
+// then use some of the keying material for their own purposes
+func (s *State) ExportKeyingMaterial(label string, context []byte, length int) ([]byte, error) {
+	if s.localEpoch.Load().(uint16) == 0 {
+		return nil, errHandshakeInProgress
+	} else if len(context) != 0 {
+		return nil, errContextUnsupported
+	} else if _, ok := invalidKeyingLabels()[label]; ok {
+		return nil, errReservedExportKeyingMaterial
+	}
+
+	localRandom := s.localRandom.marshalFixed()
+	remoteRandom := s.remoteRandom.marshalFixed()
+
+	seed := []byte(label)
+	if s.isClient {
+		seed = append(append(seed, localRandom[:]...), remoteRandom[:]...)
+	} else {
+		seed = append(append(seed, remoteRandom[:]...), localRandom[:]...)
+	}
+	return prfPHash(s.masterSecret, seed, length, s.cipherSuite.hashFunc())
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/util.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/util.go
new file mode 100644
index 000000000..b59f6b604
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/dtls/v2/util.go
@@ -0,0 +1,114 @@
+package dtls
+
+import (
+	"encoding/binary"
+)
+
+// Parse a big endian uint24
+func bigEndianUint24(raw []byte) uint32 {
+	if len(raw) < 3 {
+		return 0
+	}
+
+	rawCopy := make([]byte, 4)
+	copy(rawCopy[1:], raw)
+	return binary.BigEndian.Uint32(rawCopy)
+}
+
+func putBigEndianUint24(out []byte, in uint32) {
+	tmp := make([]byte, 4)
+	binary.BigEndian.PutUint32(tmp, in)
+	copy(out, tmp[1:])
+}
+
+func putBigEndianUint48(out []byte, in uint64) {
+	tmp := make([]byte, 8)
+	binary.BigEndian.PutUint64(tmp, in)
+	copy(out, tmp[2:])
+}
+
+func max(a, b int) int {
+	if a > b {
+		return a
+	}
+	return b
+}
+
+// examinePadding returns, in constant time, the length of the padding to remove
+// from the end of payload. It also returns a byte which is equal to 255 if the
+// padding was valid and 0 otherwise. See RFC 2246, Section 6.2.3.2.
+//
+// https://github.com/golang/go/blob/039c2081d1178f90a8fa2f4e6958693129f8de33/src/crypto/tls/conn.go#L245
+func examinePadding(payload []byte) (toRemove int, good byte) {
+	if len(payload) < 1 {
+		return 0, 0
+	}
+
+	paddingLen := payload[len(payload)-1]
+	t := uint(len(payload)-1) - uint(paddingLen)
+	// if len(payload) >= (paddingLen - 1) then the MSB of t is zero
+	good = byte(int32(^t) >> 31)
+
+	// The maximum possible padding length plus the actual length field
+	toCheck := 256
+	// The length of the padded data is public, so we can use an if here
+	if toCheck > len(payload) {
+		toCheck = len(payload)
+	}
+
+	for i := 0; i < toCheck; i++ {
+		t := uint(paddingLen) - uint(i)
+		// if i <= paddingLen then the MSB of t is zero
+		mask := byte(int32(^t) >> 31)
+		b := payload[len(payload)-1-i]
+		good &^= mask&paddingLen ^ mask&b
+	}
+
+	// We AND together the bits of good and replicate the result across
+	// all the bits.
+	good &= good << 4
+	good &= good << 2
+	good &= good << 1
+	good = uint8(int8(good) >> 7)
+
+	toRemove = int(paddingLen) + 1
+
+	return toRemove, good
+}
+
+func findMatchingSRTPProfile(a, b []SRTPProtectionProfile) (SRTPProtectionProfile, bool) {
+	for _, aProfile := range a {
+		for _, bProfile := range b {
+			if aProfile == bProfile {
+				return aProfile, true
+			}
+		}
+	}
+	return 0, false
+}
+
+func findMatchingCipherSuite(a, b []cipherSuite) (cipherSuite, bool) { //nolint
+	for _, aSuite := range a {
+		for _, bSuite := range b {
+			if aSuite.ID() == bSuite.ID() {
+				return aSuite, true
+			}
+		}
+	}
+	return nil, false
+}
+
+func splitBytes(bytes []byte, splitLen int) [][]byte {
+	splitBytes := make([][]byte, 0)
+	numBytes := len(bytes)
+	for i := 0; i < numBytes; i += splitLen {
+		j := i + splitLen
+		if j > numBytes {
+			j = numBytes
+		}
+
+		splitBytes = append(splitBytes, bytes[i:j])
+	}
+
+	return splitBytes
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/.gitignore b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/.gitignore
new file mode 100644
index 000000000..83db74ba5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/.gitignore
@@ -0,0 +1,24 @@
+### JetBrains IDE ###
+#####################
+.idea/
+
+### Emacs Temporary Files ###
+#############################
+*~
+
+### Folders ###
+###############
+bin/
+vendor/
+node_modules/
+
+### Files ###
+#############
+*.ivf
+*.ogg
+tags
+cover.out
+*.sw[poe]
+*.wasm
+examples/sfu-ws/cert.pem
+examples/sfu-ws/key.pem
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/.golangci.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/.golangci.yml
new file mode 100644
index 000000000..d6162c970
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/.golangci.yml
@@ -0,0 +1,89 @@
+linters-settings:
+  govet:
+    check-shadowing: true
+  misspell:
+    locale: US
+  exhaustive:
+    default-signifies-exhaustive: true
+  gomodguard:
+    blocked:
+      modules:
+        - github.com/pkg/errors:
+            recommendations:
+            - errors
+
+linters:
+  enable:
+    - asciicheck       # Simple linter to check that your code does not contain non-ASCII identifiers
+    - bodyclose        # checks whether HTTP response body is closed successfully
+    - deadcode         # Finds unused code
+    - depguard         # Go linter that checks if package imports are in a list of acceptable packages
+    - dogsled          # Checks assignments with too many blank identifiers (e.g. x, _, _, _, := f())
+    - dupl             # Tool for code clone detection
+    - errcheck         # Errcheck is a program for checking for unchecked errors in go programs. These unchecked errors can be critical bugs in some cases
+    - exhaustive       # check exhaustiveness of enum switch statements
+    - exportloopref    # checks for pointers to enclosing loop variables
+    - gci              # Gci control golang package import order and make it always deterministic.
+    - gochecknoglobals # Checks that no globals are present in Go code
+    - gochecknoinits   # Checks that no init functions are present in Go code
+    - gocognit         # Computes and checks the cognitive complexity of functions
+    - goconst          # Finds repeated strings that could be replaced by a constant
+    - gocritic         # The most opinionated Go source code linter
+    - godox            # Tool for detection of FIXME, TODO and other comment keywords
+    - goerr113         # Golang linter to check the errors handling expressions
+    - gofmt            # Gofmt checks whether code was gofmt-ed. By default this tool runs with -s option to check for code simplification
+    - gofumpt          # Gofumpt checks whether code was gofumpt-ed.
+    - goheader         # Checks is file header matches to pattern
+    - goimports        # Goimports does everything that gofmt does. Additionally it checks unused imports
+    - golint           # Golint differs from gofmt. Gofmt reformats Go source code, whereas golint prints out style mistakes
+    - gomodguard       # Allow and block list linter for direct Go module dependencies. This is different from depguard where there are different block types for example version constraints and module recommendations.
+    - goprintffuncname # Checks that printf-like functions are named with `f` at the end
+    - gosec            # Inspects source code for security problems
+    - gosimple         # Linter for Go source code that specializes in simplifying a code
+    - govet            # Vet examines Go source code and reports suspicious constructs, such as Printf calls whose arguments do not align with the format string
+    - ineffassign      # Detects when assignments to existing variables are not used
+    - misspell         # Finds commonly misspelled English words in comments
+    - nakedret         # Finds naked returns in functions greater than a specified function length
+    - noctx            # noctx finds sending http request without context.Context
+    - scopelint        # Scopelint checks for unpinned variables in go programs
+    - staticcheck      # Staticcheck is a go vet on steroids, applying a ton of static analysis checks
+    - structcheck      # Finds unused struct fields
+    - stylecheck       # Stylecheck is a replacement for golint
+    - typecheck        # Like the front-end of a Go compiler, parses and type-checks Go code
+    - unconvert        # Remove unnecessary type conversions
+    - unparam          # Reports unused function parameters
+    - unused           # Checks Go code for unused constants, variables, functions and types
+    - varcheck         # Finds unused global variables and constants
+    - whitespace       # Tool for detection of leading and trailing whitespace
+  disable:
+    - funlen           # Tool for detection of long functions
+    - gocyclo          # Computes and checks the cyclomatic complexity of functions
+    - godot            # Check if comments end in a period
+    - gomnd            # An analyzer to detect magic numbers.
+    - lll              # Reports long lines
+    - maligned         # Tool to detect Go structs that would take less memory if their fields were sorted
+    - nestif           # Reports deeply nested if statements
+    - nlreturn         # nlreturn checks for a new line before return and branch statements to increase code clarity
+    - nolintlint       # Reports ill-formed or insufficient nolint directives
+    - prealloc         # Finds slice declarations that could potentially be preallocated
+    - rowserrcheck     # checks whether Err of rows is checked successfully
+    - sqlclosecheck    # Checks that sql.Rows and sql.Stmt are closed.
+    - testpackage      # linter that makes you use a separate _test package
+    - wsl              # Whitespace Linter - Forces you to use empty lines!
+
+issues:
+  exclude-use-default: false
+  exclude-rules:
+    # Allow complex tests, better to be self contained
+    - path: _test\.go
+      linters:
+        - gocognit
+
+    # Allow complex main function in examples
+    - path: examples
+      text: "of func `main` is high"
+      linters:
+        - gocognit
+
+run:
+  skip-dirs-use-default: false
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/LICENSE
new file mode 100644
index 000000000..ab602974d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/README.md
new file mode 100644
index 000000000..788a29204
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/README.md
@@ -0,0 +1,66 @@
+<h1 align="center">
+  <br>
+  Pion ICE
+  <br>
+</h1>
+<h4 align="center">A Go implementation of ICE</h4>
+<p align="center">
+  <a href="https://pion.ly"><img src="https://img.shields.io/badge/pion-ice-gray.svg?longCache=true&colorB=brightgreen" alt="Pion transport"></a>
+  <a href="http://gophers.slack.com/messages/pion"><img src="https://img.shields.io/badge/join-us%20on%20slack-gray.svg?longCache=true&logo=slack&colorB=brightgreen" alt="Slack Widget"></a>
+  <br>
+  <a href="https://travis-ci.org/pion/ice"><img src="https://travis-ci.org/pion/ice.svg?branch=master" alt="Build Status"></a>
+  <a href="https://pkg.go.dev/github.com/pion/ice"><img src="https://godoc.org/github.com/pion/ice?status.svg" alt="GoDoc"></a>
+  <a href="https://codecov.io/gh/pion/ice"><img src="https://codecov.io/gh/pion/ice/branch/master/graph/badge.svg" alt="Coverage Status"></a>
+  <a href="https://goreportcard.com/report/github.com/pion/ice"><img src="https://goreportcard.com/badge/github.com/pion/ice" alt="Go Report Card"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+</p>
+<br>
+
+### Roadmap
+The library is used as a part of our WebRTC implementation. Please refer to that [roadmap](https://github.com/pion/webrtc/issues/9) to track our major milestones.
+
+### Community
+Pion has an active community on the [Golang Slack](https://invite.slack.golangbridge.org/). Sign up and join the **#pion** channel for discussions and support. You can also use [Pion mailing list](https://groups.google.com/forum/#!forum/pion).
+
+We are always looking to support **your projects**. Please reach out if you have something to build!
+
+If you need commercial support or don't want to use public methods you can contact us at [team@pion.ly](mailto:team@pion.ly)
+
+### Contributing
+Check out the **[contributing wiki](https://github.com/pion/webrtc/wiki/Contributing)** to join the group of amazing people making this project possible:
+
+* [John Bradley](https://github.com/kc5nra) - *Original Author*
+* [Sean DuBois](https://github.com/Sean-Der) - *Original Author*
+* [Michael MacDonald](https://github.com/mjmac) - *Original Author*
+* [Michiel De Backker](https://github.com/backkem) - *Original Author*
+* [Konstantin Itskov](https://github.com/trivigy) - *Original Author*
+* [Luke Curley](https://github.com/kixelated)
+* [Hugo Arregui](https://github.com/hugoArregui)
+* [Adam Kiss](https://github.com/masterada)
+* [Aleksandr Razumov](https://github.com/ernado)
+* [Yutaka Takeda](https://github.com/enobufs)
+* [Atsushi Watanabe](https://github.com/at-wat)
+* [Robert Eperjesi](https://github.com/epes)
+* [Sebastian Waisbrot](https://github.com/seppo0010)
+* [Zizheng Tai](https://github.com/ZizhengTai)
+* [Aaron France](https://github.com/AeroNotix)
+* [Chao Yuan](https://github.com/yuanchao0310)
+* [Jason Maldonis](https://github.com/jjmaldonis)
+* [Nevio Vesic](https://github.com/0x19)
+* [David Hamilton](https://github.com/dihamilton)
+* [adwpc](https://github.com/adwpc)
+* [Ori Bernstein](https://eigenstate.org)
+* [Sam Lancia](https://github.com/nerd2)
+* [Lander Noterman](https://github.com/LanderN)
+* [BUPTCZQ](https://github.com/buptczq)
+* [Henry](https://github.com/cryptix)
+* [Jerko Steiner](https://github.com/jeremija)
+* [Sidney San Martín](https://github.com/s4y)
+* [JooYoung Lim](https://github.com/DevRockstarZ)
+* [Kory Miller](https://github.com/korymiller1489)
+* [ZHENK](https://github.com/scorpionknifes)
+* [Assad Obaid](https://github.com/assadobaid)
+* [Antoine Baché](https://github.com/Antonito)
+
+### License
+MIT License - see [LICENSE](LICENSE) for full text
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/agent.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/agent.go
new file mode 100644
index 000000000..9f1ac6ae8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/agent.go
@@ -0,0 +1,1233 @@
+// Package ice implements the Interactive Connectivity Establishment (ICE)
+// protocol defined in rfc5245.
+package ice
+
+import (
+	"context"
+	"net"
+	"strings"
+	"sync"
+	"sync/atomic"
+	"time"
+
+	"github.com/pion/logging"
+	"github.com/pion/mdns"
+	"github.com/pion/stun"
+	"github.com/pion/transport/packetio"
+	"github.com/pion/transport/vnet"
+	"golang.org/x/net/proxy"
+)
+
+type bindingRequest struct {
+	timestamp      time.Time
+	transactionID  [stun.TransactionIDSize]byte
+	destination    net.Addr
+	isUseCandidate bool
+}
+
+// Agent represents the ICE agent
+type Agent struct {
+	chanTask   chan task
+	afterRunFn []func(ctx context.Context)
+	muAfterRun sync.Mutex
+
+	onConnectionStateChangeHdlr       atomic.Value // func(ConnectionState)
+	onSelectedCandidatePairChangeHdlr atomic.Value // func(Candidate, Candidate)
+	onCandidateHdlr                   atomic.Value // func(Candidate)
+
+	// State owned by the taskLoop
+	onConnected     chan struct{}
+	onConnectedOnce sync.Once
+
+	// force candidate to be contacted immediately (instead of waiting for task ticker)
+	forceCandidateContact chan bool
+
+	tieBreaker uint64
+	lite       bool
+
+	connectionState ConnectionState
+	gatheringState  GatheringState
+
+	mDNSMode MulticastDNSMode
+	mDNSName string
+	mDNSConn *mdns.Conn
+
+	muHaveStarted sync.Mutex
+	startedCh     <-chan struct{}
+	startedFn     func()
+	isControlling bool
+
+	maxBindingRequests uint16
+
+	hostAcceptanceMinWait  time.Duration
+	srflxAcceptanceMinWait time.Duration
+	prflxAcceptanceMinWait time.Duration
+	relayAcceptanceMinWait time.Duration
+
+	portmin uint16
+	portmax uint16
+
+	candidateTypes []CandidateType
+
+	// How long connectivity checks can fail before the ICE Agent
+	// goes to disconnected
+	disconnectedTimeout time.Duration
+
+	// How long connectivity checks can fail before the ICE Agent
+	// goes to failed
+	failedTimeout time.Duration
+
+	// How often should we send keepalive packets?
+	// 0 means never
+	keepaliveInterval time.Duration
+
+	// How often should we run our internal taskLoop to check for state changes when connecting
+	checkInterval time.Duration
+
+	localUfrag      string
+	localPwd        string
+	localCandidates map[NetworkType][]Candidate
+
+	remoteUfrag      string
+	remotePwd        string
+	remoteCandidates map[NetworkType][]Candidate
+
+	checklist []*candidatePair
+	selector  pairCandidateSelector
+
+	selectedPair atomic.Value // *candidatePair
+
+	urls         []*URL
+	networkTypes []NetworkType
+
+	buffer *packetio.Buffer
+
+	// LRU of outbound Binding request Transaction IDs
+	pendingBindingRequests []bindingRequest
+
+	// 1:1 D-NAT IP address mapping
+	extIPMapper *externalIPMapper
+
+	// State for closing
+	done chan struct{}
+	err  atomicError
+
+	gatherCandidateCancel func()
+
+	chanCandidate     chan Candidate
+	chanCandidatePair chan *candidatePair
+	chanState         chan ConnectionState
+
+	loggerFactory logging.LoggerFactory
+	log           logging.LeveledLogger
+
+	net    *vnet.Net
+	tcpMux TCPMux
+
+	interfaceFilter func(string) bool
+
+	insecureSkipVerify bool
+
+	proxyDialer proxy.Dialer
+}
+
+type task struct {
+	fn   func(context.Context, *Agent)
+	done chan struct{}
+}
+
+// afterRun registers function to be run after the task.
+func (a *Agent) afterRun(f func(context.Context)) {
+	a.muAfterRun.Lock()
+	a.afterRunFn = append(a.afterRunFn, f)
+	a.muAfterRun.Unlock()
+}
+
+func (a *Agent) getAfterRunFn() []func(context.Context) {
+	a.muAfterRun.Lock()
+	defer a.muAfterRun.Unlock()
+	fns := a.afterRunFn
+	a.afterRunFn = nil
+	return fns
+}
+
+func (a *Agent) ok() error {
+	select {
+	case <-a.done:
+		return a.getErr()
+	default:
+	}
+	return nil
+}
+
+func (a *Agent) getErr() error {
+	if err := a.err.Load(); err != nil {
+		return err
+	}
+	return ErrClosed
+}
+
+// Run task in serial. Blocking tasks must be cancelable by context.
+func (a *Agent) run(ctx context.Context, t func(context.Context, *Agent)) error {
+	if err := a.ok(); err != nil {
+		return err
+	}
+	done := make(chan struct{})
+	select {
+	case <-ctx.Done():
+		return ctx.Err()
+	case a.chanTask <- task{t, done}:
+		<-done
+		return nil
+	}
+}
+
+// taskLoop handles registered tasks and agent close.
+func (a *Agent) taskLoop() {
+	after := func() {
+		for {
+			// Get and run func registered by afterRun().
+			fns := a.getAfterRunFn()
+			if len(fns) == 0 {
+				break
+			}
+			for _, fn := range fns {
+				fn(a.context())
+			}
+		}
+	}
+	defer func() {
+		a.deleteAllCandidates()
+		a.startedFn()
+
+		if err := a.buffer.Close(); err != nil {
+			a.log.Warnf("failed to close buffer: %v", err)
+		}
+
+		a.closeMulticastConn()
+		a.updateConnectionState(ConnectionStateClosed)
+
+		after()
+
+		close(a.chanState)
+		close(a.chanCandidate)
+		close(a.chanCandidatePair)
+	}()
+
+	for {
+		select {
+		case <-a.done:
+			return
+		case t := <-a.chanTask:
+			t.fn(a.context(), a)
+			close(t.done)
+			after()
+		}
+	}
+}
+
+// NewAgent creates a new Agent
+func NewAgent(config *AgentConfig) (*Agent, error) { //nolint:gocognit
+	var err error
+	if config.PortMax < config.PortMin {
+		return nil, ErrPort
+	}
+
+	mDNSName := config.MulticastDNSHostName
+	if mDNSName == "" {
+		if mDNSName, err = generateMulticastDNSName(); err != nil {
+			return nil, err
+		}
+	}
+
+	if !strings.HasSuffix(mDNSName, ".local") || len(strings.Split(mDNSName, ".")) != 2 {
+		return nil, ErrInvalidMulticastDNSHostName
+	}
+
+	mDNSMode := config.MulticastDNSMode
+	if mDNSMode == 0 {
+		mDNSMode = MulticastDNSModeQueryOnly
+	}
+
+	loggerFactory := config.LoggerFactory
+	if loggerFactory == nil {
+		loggerFactory = logging.NewDefaultLoggerFactory()
+	}
+	log := loggerFactory.NewLogger("ice")
+
+	var mDNSConn *mdns.Conn
+	mDNSConn, mDNSMode, err = createMulticastDNS(mDNSMode, mDNSName, log)
+	// Opportunistic mDNS: If we can't open the connection, that's ok: we
+	// can continue without it.
+	if err != nil {
+		log.Warnf("Failed to initialize mDNS %s: %v", mDNSName, err)
+	}
+	closeMDNSConn := func() {
+		if mDNSConn != nil {
+			if mdnsCloseErr := mDNSConn.Close(); mdnsCloseErr != nil {
+				log.Warnf("Failed to close mDNS: %v", mdnsCloseErr)
+			}
+		}
+	}
+
+	startedCtx, startedFn := context.WithCancel(context.Background())
+
+	a := &Agent{
+		chanTask:          make(chan task),
+		chanState:         make(chan ConnectionState),
+		chanCandidate:     make(chan Candidate),
+		chanCandidatePair: make(chan *candidatePair),
+		tieBreaker:        globalMathRandomGenerator.Uint64(),
+		lite:              config.Lite,
+		gatheringState:    GatheringStateNew,
+		connectionState:   ConnectionStateNew,
+		localCandidates:   make(map[NetworkType][]Candidate),
+		remoteCandidates:  make(map[NetworkType][]Candidate),
+		urls:              config.Urls,
+		networkTypes:      config.NetworkTypes,
+		onConnected:       make(chan struct{}),
+		buffer:            packetio.NewBuffer(),
+		done:              make(chan struct{}),
+		startedCh:         startedCtx.Done(),
+		startedFn:         startedFn,
+		portmin:           config.PortMin,
+		portmax:           config.PortMax,
+		loggerFactory:     loggerFactory,
+		log:               log,
+		net:               config.Net,
+		proxyDialer:       config.ProxyDialer,
+
+		mDNSMode: mDNSMode,
+		mDNSName: mDNSName,
+		mDNSConn: mDNSConn,
+
+		gatherCandidateCancel: func() {},
+
+		forceCandidateContact: make(chan bool, 1),
+
+		interfaceFilter: config.InterfaceFilter,
+
+		insecureSkipVerify: config.InsecureSkipVerify,
+	}
+
+	a.tcpMux = config.TCPMux
+	if a.tcpMux == nil {
+		a.tcpMux = newInvalidTCPMux()
+	}
+
+	if a.net == nil {
+		a.net = vnet.NewNet(nil)
+	} else if a.net.IsVirtual() {
+		a.log.Warn("vnet is enabled")
+		if a.mDNSMode != MulticastDNSModeDisabled {
+			a.log.Warn("vnet does not support mDNS yet")
+		}
+	}
+
+	config.initWithDefaults(a)
+
+	// Make sure the buffer doesn't grow indefinitely.
+	// NOTE: We actually won't get anywhere close to this limit.
+	// SRTP will constantly read from the endpoint and drop packets if it's full.
+	a.buffer.SetLimitSize(maxBufferSize)
+
+	if a.lite && (len(a.candidateTypes) != 1 || a.candidateTypes[0] != CandidateTypeHost) {
+		closeMDNSConn()
+		return nil, ErrLiteUsingNonHostCandidates
+	}
+
+	if config.Urls != nil && len(config.Urls) > 0 && !containsCandidateType(CandidateTypeServerReflexive, a.candidateTypes) && !containsCandidateType(CandidateTypeRelay, a.candidateTypes) {
+		closeMDNSConn()
+		return nil, ErrUselessUrlsProvided
+	}
+
+	if err = config.initExtIPMapping(a); err != nil {
+		closeMDNSConn()
+		return nil, err
+	}
+
+	go a.taskLoop()
+	a.startOnConnectionStateChangeRoutine()
+
+	// Restart is also used to initialize the agent for the first time
+	if err := a.Restart(config.LocalUfrag, config.LocalPwd); err != nil {
+		closeMDNSConn()
+		_ = a.Close()
+		return nil, err
+	}
+
+	return a, nil
+}
+
+// OnConnectionStateChange sets a handler that is fired when the connection state changes
+func (a *Agent) OnConnectionStateChange(f func(ConnectionState)) error {
+	a.onConnectionStateChangeHdlr.Store(f)
+	return nil
+}
+
+// OnSelectedCandidatePairChange sets a handler that is fired when the final candidate
+// pair is selected
+func (a *Agent) OnSelectedCandidatePairChange(f func(Candidate, Candidate)) error {
+	a.onSelectedCandidatePairChangeHdlr.Store(f)
+	return nil
+}
+
+// OnCandidate sets a handler that is fired when new candidates gathered. When
+// the gathering process complete the last candidate is nil.
+func (a *Agent) OnCandidate(f func(Candidate)) error {
+	a.onCandidateHdlr.Store(f)
+	return nil
+}
+
+func (a *Agent) onSelectedCandidatePairChange(p *candidatePair) {
+	if h, ok := a.onSelectedCandidatePairChangeHdlr.Load().(func(Candidate, Candidate)); ok {
+		h(p.local, p.remote)
+	}
+}
+
+func (a *Agent) onCandidate(c Candidate) {
+	if onCandidateHdlr, ok := a.onCandidateHdlr.Load().(func(Candidate)); ok {
+		onCandidateHdlr(c)
+	}
+}
+
+func (a *Agent) onConnectionStateChange(s ConnectionState) {
+	if hdlr, ok := a.onConnectionStateChangeHdlr.Load().(func(ConnectionState)); ok {
+		hdlr(s)
+	}
+}
+
+func (a *Agent) startOnConnectionStateChangeRoutine() {
+	go func() {
+		for {
+			// CandidatePair and ConnectionState are usually changed at once.
+			// Blocking one by the other one causes deadlock.
+			p, isOpen := <-a.chanCandidatePair
+			if !isOpen {
+				return
+			}
+			a.onSelectedCandidatePairChange(p)
+		}
+	}()
+	go func() {
+		for {
+			select {
+			case s, isOpen := <-a.chanState:
+				if !isOpen {
+					for c := range a.chanCandidate {
+						a.onCandidate(c)
+					}
+					return
+				}
+				a.onConnectionStateChange(s)
+
+			case c, isOpen := <-a.chanCandidate:
+				if !isOpen {
+					for s := range a.chanState {
+						a.onConnectionStateChange(s)
+					}
+					return
+				}
+				a.onCandidate(c)
+			}
+		}
+	}()
+}
+
+func (a *Agent) startConnectivityChecks(isControlling bool, remoteUfrag, remotePwd string) error {
+	a.muHaveStarted.Lock()
+	defer a.muHaveStarted.Unlock()
+	select {
+	case <-a.startedCh:
+		return ErrMultipleStart
+	default:
+	}
+	if err := a.SetRemoteCredentials(remoteUfrag, remotePwd); err != nil {
+		return err
+	}
+
+	a.log.Debugf("Started agent: isControlling? %t, remoteUfrag: %q, remotePwd: %q", isControlling, remoteUfrag, remotePwd)
+
+	return a.run(a.context(), func(ctx context.Context, agent *Agent) {
+		agent.isControlling = isControlling
+		agent.remoteUfrag = remoteUfrag
+		agent.remotePwd = remotePwd
+
+		if isControlling {
+			a.selector = &controllingSelector{agent: a, log: a.log}
+		} else {
+			a.selector = &controlledSelector{agent: a, log: a.log}
+		}
+
+		if a.lite {
+			a.selector = &liteSelector{pairCandidateSelector: a.selector}
+		}
+
+		a.selector.Start()
+		a.startedFn()
+
+		agent.updateConnectionState(ConnectionStateChecking)
+
+		a.requestConnectivityCheck()
+		go a.connectivityChecks()
+	})
+}
+
+func (a *Agent) connectivityChecks() {
+	lastConnectionState := ConnectionState(0)
+	checkingDuration := time.Time{}
+
+	contact := func() {
+		if err := a.run(a.context(), func(ctx context.Context, a *Agent) {
+			defer func() {
+				lastConnectionState = a.connectionState
+			}()
+
+			switch a.connectionState {
+			case ConnectionStateFailed:
+				// The connection is currently failed so don't send any checks
+				// In the future it may be restarted though
+				return
+			case ConnectionStateChecking:
+				// We have just entered checking for the first time so update our checking timer
+				if lastConnectionState != a.connectionState {
+					checkingDuration = time.Now()
+				}
+
+				// We have been in checking longer then Disconnect+Failed timeout, set the connection to Failed
+				if time.Since(checkingDuration) > a.disconnectedTimeout+a.failedTimeout {
+					a.updateConnectionState(ConnectionStateFailed)
+					return
+				}
+			}
+
+			a.selector.ContactCandidates()
+		}); err != nil {
+			a.log.Warnf("taskLoop failed: %v", err)
+		}
+	}
+
+	for {
+		interval := defaultKeepaliveInterval
+
+		updateInterval := func(x time.Duration) {
+			if x != 0 && (interval == 0 || interval > x) {
+				interval = x
+			}
+		}
+
+		switch lastConnectionState {
+		case ConnectionStateNew, ConnectionStateChecking: // While connecting, check candidates more frequently
+			updateInterval(a.checkInterval)
+		case ConnectionStateConnected, ConnectionStateDisconnected:
+			updateInterval(a.keepaliveInterval)
+		default:
+		}
+		// Ensure we run our task loop as quickly as the minimum of our various configured timeouts
+		updateInterval(a.disconnectedTimeout)
+		updateInterval(a.failedTimeout)
+
+		t := time.NewTimer(interval)
+		select {
+		case <-a.forceCandidateContact:
+			t.Stop()
+			contact()
+		case <-t.C:
+			contact()
+		case <-a.done:
+			t.Stop()
+			return
+		}
+	}
+}
+
+func (a *Agent) updateConnectionState(newState ConnectionState) {
+	if a.connectionState != newState {
+		// Connection has gone to failed, release all gathered candidates
+		if newState == ConnectionStateFailed {
+			a.deleteAllCandidates()
+		}
+
+		a.log.Infof("Setting new connection state: %s", newState)
+		a.connectionState = newState
+
+		// Call handler after finishing current task since we may be holding the agent lock
+		// and the handler may also require it
+		a.afterRun(func(ctx context.Context) {
+			a.chanState <- newState
+		})
+	}
+}
+
+func (a *Agent) setSelectedPair(p *candidatePair) {
+	a.log.Tracef("Set selected candidate pair: %s", p)
+
+	if p == nil {
+		var nilPair *candidatePair
+		a.selectedPair.Store(nilPair)
+		return
+	}
+
+	p.nominated = true
+	a.selectedPair.Store(p)
+
+	a.updateConnectionState(ConnectionStateConnected)
+
+	// Notify when the selected pair changes
+	if p != nil {
+		a.afterRun(func(ctx context.Context) {
+			select {
+			case a.chanCandidatePair <- p:
+			case <-ctx.Done():
+			}
+		})
+	}
+
+	// Signal connected
+	a.onConnectedOnce.Do(func() { close(a.onConnected) })
+}
+
+func (a *Agent) pingAllCandidates() {
+	a.log.Trace("pinging all candidates")
+
+	if len(a.checklist) == 0 {
+		a.log.Warn("pingAllCandidates called with no candidate pairs. Connection is not possible yet.")
+	}
+
+	for _, p := range a.checklist {
+		if p.state == CandidatePairStateWaiting {
+			p.state = CandidatePairStateInProgress
+		} else if p.state != CandidatePairStateInProgress {
+			continue
+		}
+
+		if p.bindingRequestCount > a.maxBindingRequests {
+			a.log.Tracef("max requests reached for pair %s, marking it as failed\n", p)
+			p.state = CandidatePairStateFailed
+		} else {
+			a.selector.PingCandidate(p.local, p.remote)
+			p.bindingRequestCount++
+		}
+	}
+}
+
+func (a *Agent) getBestAvailableCandidatePair() *candidatePair {
+	var best *candidatePair
+	for _, p := range a.checklist {
+		if p.state == CandidatePairStateFailed {
+			continue
+		}
+
+		if best == nil {
+			best = p
+		} else if best.Priority() < p.Priority() {
+			best = p
+		}
+	}
+	return best
+}
+
+func (a *Agent) getBestValidCandidatePair() *candidatePair {
+	var best *candidatePair
+	for _, p := range a.checklist {
+		if p.state != CandidatePairStateSucceeded {
+			continue
+		}
+
+		if best == nil {
+			best = p
+		} else if best.Priority() < p.Priority() {
+			best = p
+		}
+	}
+	return best
+}
+
+func (a *Agent) addPair(local, remote Candidate) *candidatePair {
+	p := newCandidatePair(local, remote, a.isControlling)
+	a.checklist = append(a.checklist, p)
+	return p
+}
+
+func (a *Agent) findPair(local, remote Candidate) *candidatePair {
+	for _, p := range a.checklist {
+		if p.local.Equal(local) && p.remote.Equal(remote) {
+			return p
+		}
+	}
+	return nil
+}
+
+// validateSelectedPair checks if the selected pair is (still) valid
+// Note: the caller should hold the agent lock.
+func (a *Agent) validateSelectedPair() bool {
+	selectedPair := a.getSelectedPair()
+	if selectedPair == nil {
+		return false
+	}
+
+	disconnectedTime := time.Since(selectedPair.remote.LastReceived())
+
+	// Only allow transitions to failed if a.failedTimeout is non-zero
+	totalTimeToFailure := a.failedTimeout
+	if totalTimeToFailure != 0 {
+		totalTimeToFailure += a.disconnectedTimeout
+	}
+
+	switch {
+	case totalTimeToFailure != 0 && disconnectedTime > totalTimeToFailure:
+		a.updateConnectionState(ConnectionStateFailed)
+	case a.disconnectedTimeout != 0 && disconnectedTime > a.disconnectedTimeout:
+		a.updateConnectionState(ConnectionStateDisconnected)
+	default:
+		a.updateConnectionState(ConnectionStateConnected)
+	}
+
+	return true
+}
+
+// checkKeepalive sends STUN Binding Indications to the selected pair
+// if no packet has been sent on that pair in the last keepaliveInterval
+// Note: the caller should hold the agent lock.
+func (a *Agent) checkKeepalive() {
+	selectedPair := a.getSelectedPair()
+	if selectedPair == nil {
+		return
+	}
+
+	if (a.keepaliveInterval != 0) &&
+		((time.Since(selectedPair.local.LastSent()) > a.keepaliveInterval) ||
+			(time.Since(selectedPair.remote.LastReceived()) > a.keepaliveInterval)) {
+		// we use binding request instead of indication to support refresh consent schemas
+		// see https://tools.ietf.org/html/rfc7675
+		a.selector.PingCandidate(selectedPair.local, selectedPair.remote)
+	}
+}
+
+// AddRemoteCandidate adds a new remote candidate
+func (a *Agent) AddRemoteCandidate(c Candidate) error {
+	if c == nil {
+		return nil
+	}
+
+	// cannot check for network yet because it might not be applied
+	// when mDNS hostame is used.
+	if c.TCPType() == TCPTypeActive {
+		// TCP Candidates with tcptype active will probe server passive ones, so
+		// no need to do anything with them.
+		a.log.Infof("Ignoring remote candidate with tcpType active: %s", c)
+		return nil
+	}
+
+	// If we have a mDNS Candidate lets fully resolve it before adding it locally
+	if c.Type() == CandidateTypeHost && strings.HasSuffix(c.Address(), ".local") {
+		if a.mDNSMode == MulticastDNSModeDisabled {
+			a.log.Warnf("remote mDNS candidate added, but mDNS is disabled: (%s)", c.Address())
+			return nil
+		}
+
+		hostCandidate, ok := c.(*CandidateHost)
+		if !ok {
+			return ErrAddressParseFailed
+		}
+
+		go a.resolveAndAddMulticastCandidate(hostCandidate)
+		return nil
+	}
+
+	go func() {
+		if err := a.run(a.context(), func(ctx context.Context, agent *Agent) {
+			agent.addRemoteCandidate(c)
+		}); err != nil {
+			a.log.Warnf("Failed to add remote candidate %s: %v", c.Address(), err)
+			return
+		}
+	}()
+	return nil
+}
+
+func (a *Agent) resolveAndAddMulticastCandidate(c *CandidateHost) {
+	if a.mDNSConn == nil {
+		return
+	}
+	_, src, err := a.mDNSConn.Query(c.context(), c.Address())
+	if err != nil {
+		a.log.Warnf("Failed to discover mDNS candidate %s: %v", c.Address(), err)
+		return
+	}
+
+	ip, _, _, _ := parseAddr(src) //nolint:dogsled
+	if ip == nil {
+		a.log.Warnf("Failed to discover mDNS candidate %s: failed to parse IP", c.Address())
+		return
+	}
+
+	if err = c.setIP(ip); err != nil {
+		a.log.Warnf("Failed to discover mDNS candidate %s: %v", c.Address(), err)
+		return
+	}
+
+	if err = a.run(a.context(), func(ctx context.Context, agent *Agent) {
+		agent.addRemoteCandidate(c)
+	}); err != nil {
+		a.log.Warnf("Failed to add mDNS candidate %s: %v", c.Address(), err)
+		return
+	}
+}
+
+func (a *Agent) requestConnectivityCheck() {
+	select {
+	case a.forceCandidateContact <- true:
+	default:
+	}
+}
+
+// addRemoteCandidate assumes you are holding the lock (must be execute using a.run)
+func (a *Agent) addRemoteCandidate(c Candidate) {
+	set := a.remoteCandidates[c.NetworkType()]
+
+	for _, candidate := range set {
+		if candidate.Equal(c) {
+			return
+		}
+	}
+
+	set = append(set, c)
+	a.remoteCandidates[c.NetworkType()] = set
+
+	if localCandidates, ok := a.localCandidates[c.NetworkType()]; ok {
+		for _, localCandidate := range localCandidates {
+			a.addPair(localCandidate, c)
+		}
+	}
+
+	a.requestConnectivityCheck()
+}
+
+func (a *Agent) addCandidate(ctx context.Context, c Candidate, candidateConn net.PacketConn) error {
+	return a.run(ctx, func(ctx context.Context, agent *Agent) {
+		c.start(a, candidateConn, a.startedCh)
+
+		set := a.localCandidates[c.NetworkType()]
+		for _, candidate := range set {
+			if candidate.Equal(c) {
+				if err := c.close(); err != nil {
+					a.log.Warnf("Failed to close duplicate candidate: %v", err)
+				}
+				return
+			}
+		}
+
+		set = append(set, c)
+		a.localCandidates[c.NetworkType()] = set
+
+		if remoteCandidates, ok := a.remoteCandidates[c.NetworkType()]; ok {
+			for _, remoteCandidate := range remoteCandidates {
+				a.addPair(c, remoteCandidate)
+			}
+		}
+
+		a.requestConnectivityCheck()
+
+		a.chanCandidate <- c
+	})
+}
+
+// GetLocalCandidates returns the local candidates
+func (a *Agent) GetLocalCandidates() ([]Candidate, error) {
+	var res []Candidate
+
+	err := a.run(a.context(), func(ctx context.Context, agent *Agent) {
+		var candidates []Candidate
+		for _, set := range agent.localCandidates {
+			candidates = append(candidates, set...)
+		}
+		res = candidates
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	return res, nil
+}
+
+// GetLocalUserCredentials returns the local user credentials
+func (a *Agent) GetLocalUserCredentials() (frag string, pwd string, err error) {
+	valSet := make(chan struct{})
+	err = a.run(a.context(), func(ctx context.Context, agent *Agent) {
+		frag = agent.localUfrag
+		pwd = agent.localPwd
+		close(valSet)
+	})
+
+	if err == nil {
+		<-valSet
+	}
+	return
+}
+
+// GetRemoteUserCredentials returns the remote user credentials
+func (a *Agent) GetRemoteUserCredentials() (frag string, pwd string, err error) {
+	valSet := make(chan struct{})
+	err = a.run(a.context(), func(ctx context.Context, agent *Agent) {
+		frag = agent.remoteUfrag
+		pwd = agent.remotePwd
+		close(valSet)
+	})
+
+	if err == nil {
+		<-valSet
+	}
+	return
+}
+
+// Close cleans up the Agent
+func (a *Agent) Close() error {
+	if err := a.ok(); err != nil {
+		return err
+	}
+
+	done := make(chan struct{})
+
+	a.afterRun(func(context.Context) {
+		close(done)
+	})
+
+	a.gatherCandidateCancel()
+	a.err.Store(ErrClosed)
+
+	a.tcpMux.RemoveConnByUfrag(a.localUfrag)
+
+	close(a.done)
+
+	<-done
+	return nil
+}
+
+// Remove all candidates. This closes any listening sockets
+// and removes both the local and remote candidate lists.
+//
+// This is used for restarts, failures and on close
+func (a *Agent) deleteAllCandidates() {
+	for net, cs := range a.localCandidates {
+		for _, c := range cs {
+			if err := c.close(); err != nil {
+				a.log.Warnf("Failed to close candidate %s: %v", c, err)
+			}
+		}
+		delete(a.localCandidates, net)
+	}
+	for net, cs := range a.remoteCandidates {
+		for _, c := range cs {
+			if err := c.close(); err != nil {
+				a.log.Warnf("Failed to close candidate %s: %v", c, err)
+			}
+		}
+		delete(a.remoteCandidates, net)
+	}
+}
+
+func (a *Agent) findRemoteCandidate(networkType NetworkType, addr net.Addr) Candidate {
+	ip, port, _, ok := parseAddr(addr)
+	if !ok {
+		a.log.Warnf("Error parsing addr: %s", addr)
+		return nil
+	}
+
+	set := a.remoteCandidates[networkType]
+	for _, c := range set {
+		if c.Address() == ip.String() && c.Port() == port {
+			return c
+		}
+	}
+	return nil
+}
+
+func (a *Agent) sendBindingRequest(m *stun.Message, local, remote Candidate) {
+	a.log.Tracef("ping STUN from %s to %s\n", local.String(), remote.String())
+
+	a.invalidatePendingBindingRequests(time.Now())
+	a.pendingBindingRequests = append(a.pendingBindingRequests, bindingRequest{
+		timestamp:      time.Now(),
+		transactionID:  m.TransactionID,
+		destination:    remote.addr(),
+		isUseCandidate: m.Contains(stun.AttrUseCandidate),
+	})
+
+	a.sendSTUN(m, local, remote)
+}
+
+func (a *Agent) sendBindingSuccess(m *stun.Message, local, remote Candidate) {
+	base := remote
+
+	ip, port, _, ok := parseAddr(base.addr())
+	if !ok {
+		a.log.Warnf("Error parsing addr: %s", base.addr())
+		return
+	}
+
+	if out, err := stun.Build(m, stun.BindingSuccess,
+		&stun.XORMappedAddress{
+			IP:   ip,
+			Port: port,
+		},
+		stun.NewShortTermIntegrity(a.localPwd),
+		stun.Fingerprint,
+	); err != nil {
+		a.log.Warnf("Failed to handle inbound ICE from: %s to: %s error: %s", local, remote, err)
+	} else {
+		a.sendSTUN(out, local, remote)
+	}
+}
+
+/* Removes pending binding requests that are over maxBindingRequestTimeout old
+
+   Let HTO be the transaction timeout, which SHOULD be 2*RTT if
+   RTT is known or 500 ms otherwise.
+   https://tools.ietf.org/html/rfc8445#appendix-B.1
+*/
+func (a *Agent) invalidatePendingBindingRequests(filterTime time.Time) {
+	initialSize := len(a.pendingBindingRequests)
+
+	temp := a.pendingBindingRequests[:0]
+	for _, bindingRequest := range a.pendingBindingRequests {
+		if filterTime.Sub(bindingRequest.timestamp) < maxBindingRequestTimeout {
+			temp = append(temp, bindingRequest)
+		}
+	}
+
+	a.pendingBindingRequests = temp
+	if bindRequestsRemoved := initialSize - len(a.pendingBindingRequests); bindRequestsRemoved > 0 {
+		a.log.Tracef("Discarded %d binding requests because they expired", bindRequestsRemoved)
+	}
+}
+
+// Assert that the passed TransactionID is in our pendingBindingRequests and returns the destination
+// If the bindingRequest was valid remove it from our pending cache
+func (a *Agent) handleInboundBindingSuccess(id [stun.TransactionIDSize]byte) (bool, *bindingRequest) {
+	a.invalidatePendingBindingRequests(time.Now())
+	for i := range a.pendingBindingRequests {
+		if a.pendingBindingRequests[i].transactionID == id {
+			validBindingRequest := a.pendingBindingRequests[i]
+			a.pendingBindingRequests = append(a.pendingBindingRequests[:i], a.pendingBindingRequests[i+1:]...)
+			return true, &validBindingRequest
+		}
+	}
+	return false, nil
+}
+
+// handleInbound processes STUN traffic from a remote candidate
+func (a *Agent) handleInbound(m *stun.Message, local Candidate, remote net.Addr) { //nolint:gocognit
+	var err error
+	if m == nil || local == nil {
+		return
+	}
+
+	if m.Type.Method != stun.MethodBinding ||
+		!(m.Type.Class == stun.ClassSuccessResponse ||
+			m.Type.Class == stun.ClassRequest ||
+			m.Type.Class == stun.ClassIndication) {
+		a.log.Tracef("unhandled STUN from %s to %s class(%s) method(%s)", remote, local, m.Type.Class, m.Type.Method)
+		return
+	}
+
+	if a.isControlling {
+		if m.Contains(stun.AttrICEControlling) {
+			a.log.Debug("inbound isControlling && a.isControlling == true")
+			return
+		} else if m.Contains(stun.AttrUseCandidate) {
+			a.log.Debug("useCandidate && a.isControlling == true")
+			return
+		}
+	} else {
+		if m.Contains(stun.AttrICEControlled) {
+			a.log.Debug("inbound isControlled && a.isControlling == false")
+			return
+		}
+	}
+
+	remoteCandidate := a.findRemoteCandidate(local.NetworkType(), remote)
+	if m.Type.Class == stun.ClassSuccessResponse {
+		if err = assertInboundMessageIntegrity(m, []byte(a.remotePwd)); err != nil {
+			a.log.Warnf("discard message from (%s), %v", remote, err)
+			return
+		}
+
+		if remoteCandidate == nil {
+			a.log.Warnf("discard success message from (%s), no such remote", remote)
+			return
+		}
+
+		a.selector.HandleSuccessResponse(m, local, remoteCandidate, remote)
+	} else if m.Type.Class == stun.ClassRequest {
+		if err = assertInboundUsername(m, a.localUfrag+":"+a.remoteUfrag); err != nil {
+			a.log.Warnf("discard message from (%s), %v", remote, err)
+			return
+		} else if err = assertInboundMessageIntegrity(m, []byte(a.localPwd)); err != nil {
+			a.log.Warnf("discard message from (%s), %v", remote, err)
+			return
+		}
+
+		if remoteCandidate == nil {
+			ip, port, networkType, ok := parseAddr(remote)
+			if !ok {
+				a.log.Errorf("Failed to create parse remote net.Addr when creating remote prflx candidate")
+				return
+			}
+
+			prflxCandidateConfig := CandidatePeerReflexiveConfig{
+				Network:   networkType.String(),
+				Address:   ip.String(),
+				Port:      port,
+				Component: local.Component(),
+				RelAddr:   "",
+				RelPort:   0,
+			}
+
+			prflxCandidate, err := NewCandidatePeerReflexive(&prflxCandidateConfig)
+			if err != nil {
+				a.log.Errorf("Failed to create new remote prflx candidate (%s)", err)
+				return
+			}
+			remoteCandidate = prflxCandidate
+
+			a.log.Debugf("adding a new peer-reflexive candidate: %s ", remote)
+			a.addRemoteCandidate(remoteCandidate)
+		}
+
+		a.log.Tracef("inbound STUN (Request) from %s to %s", remote.String(), local.String())
+
+		a.selector.HandleBindingRequest(m, local, remoteCandidate)
+	}
+
+	if remoteCandidate != nil {
+		remoteCandidate.seen(false)
+	}
+}
+
+// validateNonSTUNTraffic processes non STUN traffic from a remote candidate,
+// and returns true if it is an actual remote candidate
+func (a *Agent) validateNonSTUNTraffic(local Candidate, remote net.Addr) bool {
+	var isValidCandidate uint64
+	if err := a.run(local.context(), func(ctx context.Context, agent *Agent) {
+		remoteCandidate := a.findRemoteCandidate(local.NetworkType(), remote)
+		if remoteCandidate != nil {
+			remoteCandidate.seen(false)
+			atomic.AddUint64(&isValidCandidate, 1)
+		}
+	}); err != nil {
+		a.log.Warnf("failed to validate remote candidate: %v", err)
+	}
+
+	return atomic.LoadUint64(&isValidCandidate) == 1
+}
+
+func (a *Agent) getSelectedPair() *candidatePair {
+	selectedPair := a.selectedPair.Load()
+
+	if selectedPair == nil {
+		return nil
+	}
+
+	return selectedPair.(*candidatePair)
+}
+
+func (a *Agent) closeMulticastConn() {
+	if a.mDNSConn != nil {
+		if err := a.mDNSConn.Close(); err != nil {
+			a.log.Warnf("failed to close mDNS Conn: %v", err)
+		}
+	}
+}
+
+// SetRemoteCredentials sets the credentials of the remote agent
+func (a *Agent) SetRemoteCredentials(remoteUfrag, remotePwd string) error {
+	switch {
+	case remoteUfrag == "":
+		return ErrRemoteUfragEmpty
+	case remotePwd == "":
+		return ErrRemotePwdEmpty
+	}
+
+	return a.run(a.context(), func(ctx context.Context, agent *Agent) {
+		agent.remoteUfrag = remoteUfrag
+		agent.remotePwd = remotePwd
+	})
+}
+
+// Restart restarts the ICE Agent with the provided ufrag/pwd
+// If no ufrag/pwd is provided the Agent will generate one itself
+//
+// Restart must only be called when GatheringState is GatheringStateComplete
+// a user must then call GatherCandidates explicitly to start generating new ones
+func (a *Agent) Restart(ufrag, pwd string) error {
+	if ufrag == "" {
+		var err error
+		ufrag, err = generateUFrag()
+		if err != nil {
+			return err
+		}
+	}
+	if pwd == "" {
+		var err error
+		pwd, err = generatePwd()
+		if err != nil {
+			return err
+		}
+	}
+
+	if len([]rune(ufrag))*8 < 24 {
+		return ErrLocalUfragInsufficientBits
+	}
+	if len([]rune(pwd))*8 < 128 {
+		return ErrLocalPwdInsufficientBits
+	}
+
+	var err error
+	if runErr := a.run(a.context(), func(ctx context.Context, agent *Agent) {
+		if agent.gatheringState == GatheringStateGathering {
+			err = ErrRestartWhenGathering
+			return
+		}
+
+		// Clear all agent needed to take back to fresh state
+		agent.localUfrag = ufrag
+		agent.localPwd = pwd
+		agent.remoteUfrag = ""
+		agent.remotePwd = ""
+		a.gatheringState = GatheringStateNew
+		a.checklist = make([]*candidatePair, 0)
+		a.pendingBindingRequests = make([]bindingRequest, 0)
+		a.setSelectedPair(nil)
+		a.deleteAllCandidates()
+		if a.selector != nil {
+			a.selector.Start()
+		}
+
+		// Restart is used by NewAgent. Accept/Connect should be used to move to checking
+		// for new Agents
+		if a.connectionState != ConnectionStateNew {
+			a.updateConnectionState(ConnectionStateChecking)
+		}
+	}); runErr != nil {
+		return runErr
+	}
+	return err
+}
+
+func (a *Agent) setGatheringState(newState GatheringState) error {
+	done := make(chan struct{})
+	if err := a.run(a.context(), func(ctx context.Context, agent *Agent) {
+		if a.gatheringState != newState && newState == GatheringStateComplete {
+			a.chanCandidate <- nil
+		}
+
+		a.gatheringState = newState
+		close(done)
+	}); err != nil {
+		return err
+	}
+
+	<-done
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/agent_config.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/agent_config.go
new file mode 100644
index 000000000..e09ad76ff
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/agent_config.go
@@ -0,0 +1,252 @@
+package ice
+
+import (
+	"time"
+
+	"github.com/pion/logging"
+	"github.com/pion/transport/vnet"
+	"golang.org/x/net/proxy"
+)
+
+const (
+	// defaultCheckInterval is the interval at which the agent performs candidate checks in the connecting phase
+	defaultCheckInterval = 200 * time.Millisecond
+
+	// keepaliveInterval used to keep candidates alive
+	defaultKeepaliveInterval = 2 * time.Second
+
+	// defaultDisconnectedTimeout is the default time till an Agent transitions disconnected
+	defaultDisconnectedTimeout = 5 * time.Second
+
+	// defaultFailedTimeout is the default time till an Agent transitions to failed after disconnected
+	defaultFailedTimeout = 25 * time.Second
+
+	// wait time before nominating a host candidate
+	defaultHostAcceptanceMinWait = 0
+
+	// wait time before nominating a srflx candidate
+	defaultSrflxAcceptanceMinWait = 500 * time.Millisecond
+
+	// wait time before nominating a prflx candidate
+	defaultPrflxAcceptanceMinWait = 1000 * time.Millisecond
+
+	// wait time before nominating a relay candidate
+	defaultRelayAcceptanceMinWait = 2000 * time.Millisecond
+
+	// max binding request before considering a pair failed
+	defaultMaxBindingRequests = 7
+
+	// the number of bytes that can be buffered before we start to error
+	maxBufferSize = 1000 * 1000 // 1MB
+
+	// wait time before binding requests can be deleted
+	maxBindingRequestTimeout = 4000 * time.Millisecond
+)
+
+func defaultCandidateTypes() []CandidateType {
+	return []CandidateType{CandidateTypeHost, CandidateTypeServerReflexive, CandidateTypeRelay}
+}
+
+// AgentConfig collects the arguments to ice.Agent construction into
+// a single structure, for future-proofness of the interface
+type AgentConfig struct {
+	Urls []*URL
+
+	// PortMin and PortMax are optional. Leave them 0 for the default UDP port allocation strategy.
+	PortMin uint16
+	PortMax uint16
+
+	// LocalUfrag and LocalPwd values used to perform connectivity
+	// checks.  The values MUST be unguessable, with at least 128 bits of
+	// random number generator output used to generate the password, and
+	// at least 24 bits of output to generate the username fragment.
+	LocalUfrag string
+	LocalPwd   string
+
+	// MulticastDNSMode controls mDNS behavior for the ICE agent
+	MulticastDNSMode MulticastDNSMode
+
+	// MulticastDNSHostName controls the hostname for this agent. If none is specified a random one will be generated
+	MulticastDNSHostName string
+
+	// DisconnectedTimeout defaults to 5 seconds when this property is nil.
+	// If the duration is 0, the ICE Agent will never go to disconnected
+	DisconnectedTimeout *time.Duration
+
+	// FailedTimeout defaults to 25 seconds when this property is nil.
+	// If the duration is 0, we will never go to failed.
+	FailedTimeout *time.Duration
+
+	// KeepaliveInterval determines how often should we send ICE
+	// keepalives (should be less then connectiontimeout above)
+	// when this is nil, it defaults to 10 seconds.
+	// A keepalive interval of 0 means we never send keepalive packets
+	KeepaliveInterval *time.Duration
+
+	// NetworkTypes is an optional configuration for disabling or enabling
+	// support for specific network types.
+	NetworkTypes []NetworkType
+
+	// CandidateTypes is an optional configuration for disabling or enabling
+	// support for specific candidate types.
+	CandidateTypes []CandidateType
+
+	LoggerFactory logging.LoggerFactory
+
+	// checkInterval controls how often our internal task loop runs when
+	// in the connecting state. Only useful for testing.
+	checkInterval time.Duration
+
+	// MaxBindingRequests is the max amount of binding requests the agent will send
+	// over a candidate pair for validation or nomination, if after MaxBindingRequests
+	// the candidate is yet to answer a binding request or a nomination we set the pair as failed
+	MaxBindingRequests *uint16
+
+	// Lite agents do not perform connectivity check and only provide host candidates.
+	Lite bool
+
+	// NAT1To1IPCandidateType is used along with NAT1To1IPs to specify which candidate type
+	// the 1:1 NAT IP addresses should be mapped to.
+	// If unspecified or CandidateTypeHost, NAT1To1IPs are used to replace host candidate IPs.
+	// If CandidateTypeServerReflexive, it will insert a srflx candidate (as if it was dervied
+	// from a STUN server) with its port number being the one for the actual host candidate.
+	// Other values will result in an error.
+	NAT1To1IPCandidateType CandidateType
+
+	// NAT1To1IPs contains a list of public IP addresses that are to be used as a host
+	// candidate or srflx candidate. This is used typically for servers that are behind
+	// 1:1 D-NAT (e.g. AWS EC2 instances) and to eliminate the need of server reflexisive
+	// candidate gathering.
+	NAT1To1IPs []string
+
+	// HostAcceptanceMinWait specify a minimum wait time before selecting host candidates
+	HostAcceptanceMinWait *time.Duration
+	// HostAcceptanceMinWait specify a minimum wait time before selecting srflx candidates
+	SrflxAcceptanceMinWait *time.Duration
+	// HostAcceptanceMinWait specify a minimum wait time before selecting prflx candidates
+	PrflxAcceptanceMinWait *time.Duration
+	// HostAcceptanceMinWait specify a minimum wait time before selecting relay candidates
+	RelayAcceptanceMinWait *time.Duration
+
+	// Net is the our abstracted network interface for internal development purpose only
+	// (see github.com/pion/transport/vnet)
+	Net *vnet.Net
+
+	// InterfaceFilter is a function that you can use in order to  whitelist or blacklist
+	// the interfaces which are used to gather ICE candidates.
+	InterfaceFilter func(string) bool
+
+	// InsecureSkipVerify controls if self-signed certificates are accepted when connecting
+	// to TURN servers via TLS or DTLS
+	InsecureSkipVerify bool
+
+	// TCPMux will be used for multiplexing incoming TCP connections for ICE TCP.
+	// Currently only passive candidates are supported. This functionality is
+	// experimental and the API might change in the future.
+	TCPMux TCPMux
+
+	// Proxy Dialer is a dialer that should be implemented by the user based on golang.org/x/net/proxy
+	// dial interface in order to support corporate proxies
+	ProxyDialer proxy.Dialer
+}
+
+// initWithDefaults populates an agent and falls back to defaults if fields are unset
+func (config *AgentConfig) initWithDefaults(a *Agent) {
+	if config.MaxBindingRequests == nil {
+		a.maxBindingRequests = defaultMaxBindingRequests
+	} else {
+		a.maxBindingRequests = *config.MaxBindingRequests
+	}
+
+	if config.HostAcceptanceMinWait == nil {
+		a.hostAcceptanceMinWait = defaultHostAcceptanceMinWait
+	} else {
+		a.hostAcceptanceMinWait = *config.HostAcceptanceMinWait
+	}
+
+	if config.SrflxAcceptanceMinWait == nil {
+		a.srflxAcceptanceMinWait = defaultSrflxAcceptanceMinWait
+	} else {
+		a.srflxAcceptanceMinWait = *config.SrflxAcceptanceMinWait
+	}
+
+	if config.PrflxAcceptanceMinWait == nil {
+		a.prflxAcceptanceMinWait = defaultPrflxAcceptanceMinWait
+	} else {
+		a.prflxAcceptanceMinWait = *config.PrflxAcceptanceMinWait
+	}
+
+	if config.RelayAcceptanceMinWait == nil {
+		a.relayAcceptanceMinWait = defaultRelayAcceptanceMinWait
+	} else {
+		a.relayAcceptanceMinWait = *config.RelayAcceptanceMinWait
+	}
+
+	if config.DisconnectedTimeout == nil {
+		a.disconnectedTimeout = defaultDisconnectedTimeout
+	} else {
+		a.disconnectedTimeout = *config.DisconnectedTimeout
+	}
+
+	if config.FailedTimeout == nil {
+		a.failedTimeout = defaultFailedTimeout
+	} else {
+		a.failedTimeout = *config.FailedTimeout
+	}
+
+	if config.KeepaliveInterval == nil {
+		a.keepaliveInterval = defaultKeepaliveInterval
+	} else {
+		a.keepaliveInterval = *config.KeepaliveInterval
+	}
+
+	if config.checkInterval == 0 {
+		a.checkInterval = defaultCheckInterval
+	} else {
+		a.checkInterval = config.checkInterval
+	}
+
+	if config.CandidateTypes == nil || len(config.CandidateTypes) == 0 {
+		a.candidateTypes = defaultCandidateTypes()
+	} else {
+		a.candidateTypes = config.CandidateTypes
+	}
+}
+
+func (config *AgentConfig) initExtIPMapping(a *Agent) error {
+	var err error
+	a.extIPMapper, err = newExternalIPMapper(config.NAT1To1IPCandidateType, config.NAT1To1IPs)
+	if err != nil {
+		return err
+	}
+	if a.extIPMapper == nil {
+		return nil // this may happen when config.NAT1To1IPs is an empty array
+	}
+	if a.extIPMapper.candidateType == CandidateTypeHost {
+		if a.mDNSMode == MulticastDNSModeQueryAndGather {
+			return ErrMulticastDNSWithNAT1To1IPMapping
+		}
+		candiHostEnabled := false
+		for _, candiType := range a.candidateTypes {
+			if candiType == CandidateTypeHost {
+				candiHostEnabled = true
+				break
+			}
+		}
+		if !candiHostEnabled {
+			return ErrIneffectiveNAT1To1IPMappingHost
+		}
+	} else if a.extIPMapper.candidateType == CandidateTypeServerReflexive {
+		candiSrflxEnabled := false
+		for _, candiType := range a.candidateTypes {
+			if candiType == CandidateTypeServerReflexive {
+				candiSrflxEnabled = true
+				break
+			}
+		}
+		if !candiSrflxEnabled {
+			return ErrIneffectiveNAT1To1IPMappingSrflx
+		}
+	}
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/agent_stats.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/agent_stats.go
new file mode 100644
index 000000000..18d9ed81f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/agent_stats.go
@@ -0,0 +1,113 @@
+package ice
+
+import (
+	"context"
+	"time"
+)
+
+// GetCandidatePairsStats returns a list of candidate pair stats
+func (a *Agent) GetCandidatePairsStats() []CandidatePairStats {
+	var res []CandidatePairStats
+	err := a.run(a.context(), func(ctx context.Context, agent *Agent) {
+		result := make([]CandidatePairStats, 0, len(agent.checklist))
+		for _, cp := range agent.checklist {
+			stat := CandidatePairStats{
+				Timestamp:         time.Now(),
+				LocalCandidateID:  cp.local.ID(),
+				RemoteCandidateID: cp.remote.ID(),
+				State:             cp.state,
+				Nominated:         cp.nominated,
+				// PacketsSent uint32
+				// PacketsReceived uint32
+				// BytesSent uint64
+				// BytesReceived uint64
+				// LastPacketSentTimestamp time.Time
+				// LastPacketReceivedTimestamp time.Time
+				// FirstRequestTimestamp time.Time
+				// LastRequestTimestamp time.Time
+				// LastResponseTimestamp time.Time
+				// TotalRoundTripTime float64
+				// CurrentRoundTripTime float64
+				// AvailableOutgoingBitrate float64
+				// AvailableIncomingBitrate float64
+				// CircuitBreakerTriggerCount uint32
+				// RequestsReceived uint64
+				// RequestsSent uint64
+				// ResponsesReceived uint64
+				// ResponsesSent uint64
+				// RetransmissionsReceived uint64
+				// RetransmissionsSent uint64
+				// ConsentRequestsSent uint64
+				// ConsentExpiredTimestamp time.Time
+			}
+			result = append(result, stat)
+		}
+		res = result
+	})
+	if err != nil {
+		a.log.Errorf("error getting candidate pairs stats %v", err)
+		return []CandidatePairStats{}
+	}
+	return res
+}
+
+// GetLocalCandidatesStats returns a list of local candidates stats
+func (a *Agent) GetLocalCandidatesStats() []CandidateStats {
+	var res []CandidateStats
+	err := a.run(a.context(), func(ctx context.Context, agent *Agent) {
+		result := make([]CandidateStats, 0, len(agent.localCandidates))
+		for networkType, localCandidates := range agent.localCandidates {
+			for _, c := range localCandidates {
+				stat := CandidateStats{
+					Timestamp:     time.Now(),
+					ID:            c.ID(),
+					NetworkType:   networkType,
+					IP:            c.Address(),
+					Port:          c.Port(),
+					CandidateType: c.Type(),
+					Priority:      c.Priority(),
+					// URL string
+					RelayProtocol: "udp",
+					// Deleted bool
+				}
+				result = append(result, stat)
+			}
+		}
+		res = result
+	})
+	if err != nil {
+		a.log.Errorf("error getting candidate pairs stats %v", err)
+		return []CandidateStats{}
+	}
+	return res
+}
+
+// GetRemoteCandidatesStats returns a list of remote candidates stats
+func (a *Agent) GetRemoteCandidatesStats() []CandidateStats {
+	var res []CandidateStats
+	err := a.run(a.context(), func(ctx context.Context, agent *Agent) {
+		result := make([]CandidateStats, 0, len(agent.remoteCandidates))
+		for networkType, localCandidates := range agent.remoteCandidates {
+			for _, c := range localCandidates {
+				stat := CandidateStats{
+					Timestamp:     time.Now(),
+					ID:            c.ID(),
+					NetworkType:   networkType,
+					IP:            c.Address(),
+					Port:          c.Port(),
+					CandidateType: c.Type(),
+					Priority:      c.Priority(),
+					// URL string
+					RelayProtocol: "udp",
+				}
+				result = append(result, stat)
+			}
+		}
+		res = result
+	})
+	if err != nil {
+		a.log.Errorf("error getting candidate pairs stats %v", err)
+		return []CandidateStats{}
+	}
+	return res
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate.go
new file mode 100644
index 000000000..701f8f83c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate.go
@@ -0,0 +1,68 @@
+package ice
+
+import (
+	"context"
+	"net"
+	"time"
+)
+
+const (
+	receiveMTU             = 8192
+	defaultLocalPreference = 65535
+
+	// ComponentRTP indicates that the candidate is used for RTP
+	ComponentRTP uint16 = 1
+	// ComponentRTCP indicates that the candidate is used for RTCP
+	ComponentRTCP
+)
+
+// Candidate represents an ICE candidate
+type Candidate interface {
+	// An arbitrary string used in the freezing algorithm to
+	// group similar candidates.  It is the same for two candidates that
+	// have the same type, base IP address, protocol (UDP, TCP, etc.),
+	// and STUN or TURN server.
+	Foundation() string
+
+	// ID is a unique identifier for just this candidate
+	// Unlike the foundation this is different for each candidate
+	ID() string
+
+	// A component is a piece of a data stream.
+	// An example is one for RTP, and one for RTCP
+	Component() uint16
+	SetComponent(uint16)
+
+	// The last time this candidate received traffic
+	LastReceived() time.Time
+
+	// The last time this candidate sent traffic
+	LastSent() time.Time
+
+	NetworkType() NetworkType
+	Address() string
+	Port() int
+
+	Priority() uint32
+
+	// A transport address related to a
+	//  candidate, which is useful for diagnostics and other purposes
+	RelatedAddress() *CandidateRelatedAddress
+
+	String() string
+	Type() CandidateType
+	TCPType() TCPType
+
+	Equal(other Candidate) bool
+
+	Marshal() string
+
+	addr() net.Addr
+	agent() *Agent
+	context() context.Context
+
+	close() error
+	seen(outbound bool)
+	start(a *Agent, conn net.PacketConn, initializedCh <-chan struct{})
+	writeTo(raw []byte, dst Candidate) (int, error)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_base.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_base.go
new file mode 100644
index 000000000..2f16a8a84
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_base.go
@@ -0,0 +1,496 @@
+package ice
+
+import (
+	"context"
+	"fmt"
+	"hash/crc32"
+	"net"
+	"strconv"
+	"strings"
+	"sync/atomic"
+	"time"
+
+	"github.com/pion/logging"
+	"github.com/pion/stun"
+)
+
+type candidateBase struct {
+	id            string
+	networkType   NetworkType
+	candidateType CandidateType
+
+	component      uint16
+	address        string
+	port           int
+	relatedAddress *CandidateRelatedAddress
+	tcpType        TCPType
+
+	resolvedAddr net.Addr
+
+	lastSent     atomic.Value
+	lastReceived atomic.Value
+	conn         net.PacketConn
+
+	currAgent *Agent
+	closeCh   chan struct{}
+	closedCh  chan struct{}
+
+	foundationOverride string
+	priorityOverride   uint32
+}
+
+// Done implements context.Context
+func (c *candidateBase) Done() <-chan struct{} {
+	return c.closeCh
+}
+
+// Err implements context.Context
+func (c *candidateBase) Err() error {
+	select {
+	case <-c.closedCh:
+		return ErrRunCanceled
+	default:
+		return nil
+	}
+}
+
+// Deadline implements context.Context
+func (c *candidateBase) Deadline() (deadline time.Time, ok bool) {
+	return time.Time{}, false
+}
+
+// Value implements context.Context
+func (c *candidateBase) Value(key interface{}) interface{} {
+	return nil
+}
+
+// ID returns Candidate ID
+func (c *candidateBase) ID() string {
+	return c.id
+}
+
+func (c *candidateBase) Foundation() string {
+	if c.foundationOverride != "" {
+		return c.foundationOverride
+	}
+
+	return fmt.Sprintf("%d", crc32.ChecksumIEEE([]byte(c.Type().String()+c.address+c.networkType.String())))
+}
+
+// Address returns Candidate Address
+func (c *candidateBase) Address() string {
+	return c.address
+}
+
+// Port returns Candidate Port
+func (c *candidateBase) Port() int {
+	return c.port
+}
+
+// Type returns candidate type
+func (c *candidateBase) Type() CandidateType {
+	return c.candidateType
+}
+
+// NetworkType returns candidate NetworkType
+func (c *candidateBase) NetworkType() NetworkType {
+	return c.networkType
+}
+
+// Component returns candidate component
+func (c *candidateBase) Component() uint16 {
+	return c.component
+}
+
+func (c *candidateBase) SetComponent(component uint16) {
+	c.component = component
+}
+
+// LocalPreference returns the local preference for this candidate
+func (c *candidateBase) LocalPreference() uint16 {
+	if c.NetworkType().IsTCP() {
+		// RFC 6544, section 4.2
+		//
+		// In Section 4.1.2.1 of [RFC5245], a recommended formula for UDP ICE
+		// candidate prioritization is defined.  For TCP candidates, the same
+		// formula and candidate type preferences SHOULD be used, and the
+		// RECOMMENDED type preferences for the new candidate types defined in
+		// this document (see Section 5) are 105 for NAT-assisted candidates and
+		// 75 for UDP-tunneled candidates.
+		//
+		// (...)
+		//
+		// With TCP candidates, the local preference part of the recommended
+		// priority formula is updated to also include the directionality
+		// (active, passive, or simultaneous-open) of the TCP connection.  The
+		// RECOMMENDED local preference is then defined as:
+		//
+		//     local preference = (2^13) * direction-pref + other-pref
+		//
+		// The direction-pref MUST be between 0 and 7 (both inclusive), with 7
+		// being the most preferred.  The other-pref MUST be between 0 and 8191
+		// (both inclusive), with 8191 being the most preferred.  It is
+		// RECOMMENDED that the host, UDP-tunneled, and relayed TCP candidates
+		// have the direction-pref assigned as follows: 6 for active, 4 for
+		// passive, and 2 for S-O.  For the NAT-assisted and server reflexive
+		// candidates, the RECOMMENDED values are: 6 for S-O, 4 for active, and
+		// 2 for passive.
+		//
+		// (...)
+		//
+		// If any two candidates have the same type-preference and direction-
+		// pref, they MUST have a unique other-pref.  With this specification,
+		// this usually only happens with multi-homed hosts, in which case
+		// other-pref is the preference for the particular IP address from which
+		// the candidate was obtained.  When there is only a single IP address,
+		// this value SHOULD be set to the maximum allowed value (8191).
+		var otherPref uint16 = 8191
+
+		directionPref := func() uint16 {
+			switch c.Type() {
+			case CandidateTypeHost, CandidateTypeRelay:
+				switch c.tcpType {
+				case TCPTypeActive:
+					return 6
+				case TCPTypePassive:
+					return 4
+				case TCPTypeSimultaneousOpen:
+					return 2
+				case TCPTypeUnspecified:
+					return 0
+				}
+			case CandidateTypePeerReflexive, CandidateTypeServerReflexive:
+				switch c.tcpType {
+				case TCPTypeSimultaneousOpen:
+					return 6
+				case TCPTypeActive:
+					return 4
+				case TCPTypePassive:
+					return 2
+				case TCPTypeUnspecified:
+					return 0
+				}
+			case CandidateTypeUnspecified:
+				return 0
+			}
+			return 0
+		}()
+
+		return (1<<13)*directionPref + otherPref
+	}
+
+	return defaultLocalPreference
+}
+
+// RelatedAddress returns *CandidateRelatedAddress
+func (c *candidateBase) RelatedAddress() *CandidateRelatedAddress {
+	return c.relatedAddress
+}
+
+func (c *candidateBase) TCPType() TCPType {
+	return c.tcpType
+}
+
+// start runs the candidate using the provided connection
+func (c *candidateBase) start(a *Agent, conn net.PacketConn, initializedCh <-chan struct{}) {
+	if c.conn != nil {
+		c.agent().log.Warn("Can't start already started candidateBase")
+		return
+	}
+	c.currAgent = a
+	c.conn = conn
+	c.closeCh = make(chan struct{})
+	c.closedCh = make(chan struct{})
+
+	go c.recvLoop(initializedCh)
+}
+
+func (c *candidateBase) recvLoop(initializedCh <-chan struct{}) {
+	defer func() {
+		close(c.closedCh)
+	}()
+
+	select {
+	case <-initializedCh:
+	case <-c.closeCh:
+		return
+	}
+
+	log := c.agent().log
+	buffer := make([]byte, receiveMTU)
+	for {
+		n, srcAddr, err := c.conn.ReadFrom(buffer)
+		if err != nil {
+			return
+		}
+
+		handleInboundCandidateMsg(c, c, buffer[:n], srcAddr, log)
+	}
+}
+
+func handleInboundCandidateMsg(ctx context.Context, c Candidate, buffer []byte, srcAddr net.Addr, log logging.LeveledLogger) {
+	if stun.IsMessage(buffer) {
+		m := &stun.Message{
+			Raw: make([]byte, len(buffer)),
+		}
+		// Explicitly copy raw buffer so Message can own the memory.
+		copy(m.Raw, buffer)
+		if err := m.Decode(); err != nil {
+			log.Warnf("Failed to handle decode ICE from %s to %s: %v", c.addr(), srcAddr, err)
+			return
+		}
+		err := c.agent().run(ctx, func(ctx context.Context, agent *Agent) {
+			agent.handleInbound(m, c, srcAddr)
+		})
+		if err != nil {
+			log.Warnf("Failed to handle message: %v", err)
+		}
+
+		return
+	}
+
+	if !c.agent().validateNonSTUNTraffic(c, srcAddr) {
+		log.Warnf("Discarded message from %s, not a valid remote candidate", c.addr())
+		return
+	}
+
+	// NOTE This will return packetio.ErrFull if the buffer ever manages to fill up.
+	if _, err := c.agent().buffer.Write(buffer); err != nil {
+		log.Warnf("failed to write packet")
+	}
+}
+
+// close stops the recvLoop
+func (c *candidateBase) close() error {
+	// If conn has never been started will be nil
+	if c.Done() == nil {
+		return nil
+	}
+
+	// Assert that conn has not already been closed
+	select {
+	case <-c.Done():
+		return nil
+	default:
+	}
+
+	var firstErr error
+
+	// Unblock recvLoop
+	close(c.closeCh)
+	if err := c.conn.SetDeadline(time.Now()); err != nil {
+		firstErr = err
+	}
+
+	// Close the conn
+	if err := c.conn.Close(); err != nil && firstErr == nil {
+		firstErr = err
+	}
+
+	if firstErr != nil {
+		return firstErr
+	}
+
+	// Wait until the recvLoop is closed
+	<-c.closedCh
+
+	return nil
+}
+
+func (c *candidateBase) writeTo(raw []byte, dst Candidate) (int, error) {
+	n, err := c.conn.WriteTo(raw, dst.addr())
+	if err != nil {
+		c.agent().log.Warnf("%s: %v", errSendPacket, err)
+		return n, nil
+	}
+	c.seen(true)
+	return n, nil
+}
+
+// Priority computes the priority for this ICE Candidate
+func (c *candidateBase) Priority() uint32 {
+	if c.priorityOverride != 0 {
+		return c.priorityOverride
+	}
+
+	// The local preference MUST be an integer from 0 (lowest preference) to
+	// 65535 (highest preference) inclusive.  When there is only a single IP
+	// address, this value SHOULD be set to 65535.  If there are multiple
+	// candidates for a particular component for a particular data stream
+	// that have the same type, the local preference MUST be unique for each
+	// one.
+	return (1<<24)*uint32(c.Type().Preference()) +
+		(1<<8)*uint32(c.LocalPreference()) +
+		uint32(256-c.Component())
+}
+
+// Equal is used to compare two candidateBases
+func (c *candidateBase) Equal(other Candidate) bool {
+	return c.NetworkType() == other.NetworkType() &&
+		c.Type() == other.Type() &&
+		c.Address() == other.Address() &&
+		c.Port() == other.Port() &&
+		c.TCPType() == other.TCPType() &&
+		c.RelatedAddress().Equal(other.RelatedAddress())
+}
+
+// String makes the candidateBase printable
+func (c *candidateBase) String() string {
+	return fmt.Sprintf("%s %s %s:%d%s", c.NetworkType(), c.Type(), c.Address(), c.Port(), c.relatedAddress)
+}
+
+// LastReceived returns a time.Time indicating the last time
+// this candidate was received
+func (c *candidateBase) LastReceived() time.Time {
+	lastReceived := c.lastReceived.Load()
+	if lastReceived == nil {
+		return time.Time{}
+	}
+	return lastReceived.(time.Time)
+}
+
+func (c *candidateBase) setLastReceived(t time.Time) {
+	c.lastReceived.Store(t)
+}
+
+// LastSent returns a time.Time indicating the last time
+// this candidate was sent
+func (c *candidateBase) LastSent() time.Time {
+	lastSent := c.lastSent.Load()
+	if lastSent == nil {
+		return time.Time{}
+	}
+	return lastSent.(time.Time)
+}
+
+func (c *candidateBase) setLastSent(t time.Time) {
+	c.lastSent.Store(t)
+}
+
+func (c *candidateBase) seen(outbound bool) {
+	if outbound {
+		c.setLastSent(time.Now())
+	} else {
+		c.setLastReceived(time.Now())
+	}
+}
+
+func (c *candidateBase) addr() net.Addr {
+	return c.resolvedAddr
+}
+
+func (c *candidateBase) agent() *Agent {
+	return c.currAgent
+}
+
+func (c *candidateBase) context() context.Context {
+	return c
+}
+
+// Marshal returns the string representation of the ICECandidate
+func (c *candidateBase) Marshal() string {
+	val := fmt.Sprintf("%s %d %s %d %s %d typ %s",
+		c.Foundation(),
+		c.Component(),
+		c.NetworkType().NetworkShort(),
+		c.Priority(),
+		c.Address(),
+		c.Port(),
+		c.Type())
+
+	if c.tcpType != TCPTypeUnspecified {
+		val += fmt.Sprintf(" tcptype %s", c.tcpType.String())
+	}
+
+	if c.RelatedAddress() != nil {
+		val = fmt.Sprintf("%s raddr %s rport %d",
+			val,
+			c.RelatedAddress().Address,
+			c.RelatedAddress().Port)
+	}
+
+	return val
+}
+
+// UnmarshalCandidate creates a Candidate from its string representation
+func UnmarshalCandidate(raw string) (Candidate, error) {
+	split := strings.Fields(raw)
+	if len(split) < 8 {
+		return nil, fmt.Errorf("%w (%d)", errAttributeTooShortICECandidate, len(split))
+	}
+
+	// Foundation
+	foundation := split[0]
+
+	// Component
+	rawComponent, err := strconv.ParseUint(split[1], 10, 16)
+	if err != nil {
+		return nil, fmt.Errorf("%w: %v", errParseComponent, err)
+	}
+	component := uint16(rawComponent)
+
+	// Protocol
+	protocol := split[2]
+
+	// Priority
+	priorityRaw, err := strconv.ParseUint(split[3], 10, 32)
+	if err != nil {
+		return nil, fmt.Errorf("%w: %v", errParsePriority, err)
+	}
+	priority := uint32(priorityRaw)
+
+	// Address
+	address := split[4]
+
+	// Port
+	rawPort, err := strconv.ParseUint(split[5], 10, 16)
+	if err != nil {
+		return nil, fmt.Errorf("%w: %v", errParsePort, err)
+	}
+	port := int(rawPort)
+	typ := split[7]
+
+	relatedAddress := ""
+	relatedPort := 0
+	tcpType := TCPTypeUnspecified
+
+	if len(split) > 8 {
+		split = split[8:]
+
+		if split[0] == "raddr" {
+			if len(split) < 4 {
+				return nil, fmt.Errorf("%w: incorrect length", errParseRelatedAddr)
+			}
+
+			// RelatedAddress
+			relatedAddress = split[1]
+
+			// RelatedPort
+			rawRelatedPort, parseErr := strconv.ParseUint(split[3], 10, 16)
+			if parseErr != nil {
+				return nil, fmt.Errorf("%w: %v", errParsePort, parseErr)
+			}
+			relatedPort = int(rawRelatedPort)
+		} else if split[0] == "tcptype" {
+			if len(split) < 2 {
+				return nil, fmt.Errorf("%w: incorrect length", errParseTypType)
+			}
+
+			tcpType = NewTCPType(split[1])
+		}
+	}
+
+	switch typ {
+	case "host":
+		return NewCandidateHost(&CandidateHostConfig{"", protocol, address, port, component, priority, foundation, tcpType})
+	case "srflx":
+		return NewCandidateServerReflexive(&CandidateServerReflexiveConfig{"", protocol, address, port, component, priority, foundation, relatedAddress, relatedPort})
+	case "prflx":
+		return NewCandidatePeerReflexive(&CandidatePeerReflexiveConfig{"", protocol, address, port, component, priority, foundation, relatedAddress, relatedPort})
+	case "relay":
+		return NewCandidateRelay(&CandidateRelayConfig{"", protocol, address, port, component, priority, foundation, relatedAddress, relatedPort, nil})
+	default:
+	}
+
+	return nil, fmt.Errorf("%w (%s)", errUnknownCandidateTyp, typ)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_host.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_host.go
new file mode 100644
index 000000000..b03dbdb51
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_host.go
@@ -0,0 +1,76 @@
+package ice
+
+import (
+	"net"
+	"strings"
+)
+
+// CandidateHost is a candidate of type host
+type CandidateHost struct {
+	candidateBase
+
+	network string
+}
+
+// CandidateHostConfig is the config required to create a new CandidateHost
+type CandidateHostConfig struct {
+	CandidateID string
+	Network     string
+	Address     string
+	Port        int
+	Component   uint16
+	Priority    uint32
+	Foundation  string
+	TCPType     TCPType
+}
+
+// NewCandidateHost creates a new host candidate
+func NewCandidateHost(config *CandidateHostConfig) (*CandidateHost, error) {
+	candidateID := config.CandidateID
+
+	if candidateID == "" {
+		candidateID = globalCandidateIDGenerator.Generate()
+	}
+
+	c := &CandidateHost{
+		candidateBase: candidateBase{
+			id:                 candidateID,
+			address:            config.Address,
+			candidateType:      CandidateTypeHost,
+			component:          config.Component,
+			port:               config.Port,
+			tcpType:            config.TCPType,
+			foundationOverride: config.Foundation,
+			priorityOverride:   config.Priority,
+		},
+		network: config.Network,
+	}
+
+	if !strings.HasSuffix(config.Address, ".local") {
+		ip := net.ParseIP(config.Address)
+		if ip == nil {
+			return nil, ErrAddressParseFailed
+		}
+
+		if err := c.setIP(ip); err != nil {
+			return nil, err
+		}
+	} else {
+		// Until mDNS candidate is resolved assume it is UDPv4
+		c.candidateBase.networkType = NetworkTypeUDP4
+	}
+
+	return c, nil
+}
+
+func (c *CandidateHost) setIP(ip net.IP) error {
+	networkType, err := determineNetworkType(c.network, ip)
+	if err != nil {
+		return err
+	}
+
+	c.candidateBase.networkType = networkType
+	c.candidateBase.resolvedAddr = createAddr(networkType, ip, c.port)
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_peer_reflexive.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_peer_reflexive.go
new file mode 100644
index 000000000..0b330d1c9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_peer_reflexive.go
@@ -0,0 +1,60 @@
+// Package ice ...
+//nolint:dupl
+package ice
+
+import "net"
+
+// CandidatePeerReflexive ...
+type CandidatePeerReflexive struct {
+	candidateBase
+}
+
+// CandidatePeerReflexiveConfig is the config required to create a new CandidatePeerReflexive
+type CandidatePeerReflexiveConfig struct {
+	CandidateID string
+	Network     string
+	Address     string
+	Port        int
+	Component   uint16
+	Priority    uint32
+	Foundation  string
+	RelAddr     string
+	RelPort     int
+}
+
+// NewCandidatePeerReflexive creates a new peer reflective candidate
+func NewCandidatePeerReflexive(config *CandidatePeerReflexiveConfig) (*CandidatePeerReflexive, error) {
+	ip := net.ParseIP(config.Address)
+	if ip == nil {
+		return nil, ErrAddressParseFailed
+	}
+
+	networkType, err := determineNetworkType(config.Network, ip)
+	if err != nil {
+		return nil, err
+	}
+
+	candidateID := config.CandidateID
+	candidateIDGenerator := newCandidateIDGenerator()
+	if candidateID == "" {
+		candidateID = candidateIDGenerator.Generate()
+	}
+
+	return &CandidatePeerReflexive{
+		candidateBase: candidateBase{
+			id:                 candidateID,
+			networkType:        networkType,
+			candidateType:      CandidateTypePeerReflexive,
+			address:            config.Address,
+			port:               config.Port,
+			resolvedAddr:       createAddr(networkType, ip, config.Port),
+			component:          config.Component,
+			foundationOverride: config.Foundation,
+			priorityOverride:   config.Priority,
+			relatedAddress: &CandidateRelatedAddress{
+				Address: config.RelAddr,
+				Port:    config.RelPort,
+			},
+		},
+	}, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_relay.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_relay.go
new file mode 100644
index 000000000..44762f714
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_relay.go
@@ -0,0 +1,73 @@
+package ice
+
+import (
+	"net"
+)
+
+// CandidateRelay ...
+type CandidateRelay struct {
+	candidateBase
+
+	onClose func() error
+}
+
+// CandidateRelayConfig is the config required to create a new CandidateRelay
+type CandidateRelayConfig struct {
+	CandidateID string
+	Network     string
+	Address     string
+	Port        int
+	Component   uint16
+	Priority    uint32
+	Foundation  string
+	RelAddr     string
+	RelPort     int
+	OnClose     func() error
+}
+
+// NewCandidateRelay creates a new relay candidate
+func NewCandidateRelay(config *CandidateRelayConfig) (*CandidateRelay, error) {
+	candidateID := config.CandidateID
+
+	if candidateID == "" {
+		candidateID = globalCandidateIDGenerator.Generate()
+	}
+
+	ip := net.ParseIP(config.Address)
+	if ip == nil {
+		return nil, ErrAddressParseFailed
+	}
+
+	networkType, err := determineNetworkType(config.Network, ip)
+	if err != nil {
+		return nil, err
+	}
+
+	return &CandidateRelay{
+		candidateBase: candidateBase{
+			id:                 candidateID,
+			networkType:        networkType,
+			candidateType:      CandidateTypeRelay,
+			address:            config.Address,
+			port:               config.Port,
+			resolvedAddr:       &net.UDPAddr{IP: ip, Port: config.Port},
+			component:          config.Component,
+			foundationOverride: config.Foundation,
+			priorityOverride:   config.Priority,
+			relatedAddress: &CandidateRelatedAddress{
+				Address: config.RelAddr,
+				Port:    config.RelPort,
+			},
+		},
+		onClose: config.OnClose,
+	}, nil
+}
+
+func (c *CandidateRelay) close() error {
+	err := c.candidateBase.close()
+	if c.onClose != nil {
+		err = c.onClose()
+		c.onClose = nil
+	}
+	return err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_server_reflexive.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_server_reflexive.go
new file mode 100644
index 000000000..125a53782
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidate_server_reflexive.go
@@ -0,0 +1,59 @@
+// Package ice ...
+//nolint:dupl
+package ice
+
+import "net"
+
+// CandidateServerReflexive ...
+type CandidateServerReflexive struct {
+	candidateBase
+}
+
+// CandidateServerReflexiveConfig is the config required to create a new CandidateServerReflexive
+type CandidateServerReflexiveConfig struct {
+	CandidateID string
+	Network     string
+	Address     string
+	Port        int
+	Component   uint16
+	Priority    uint32
+	Foundation  string
+	RelAddr     string
+	RelPort     int
+}
+
+// NewCandidateServerReflexive creates a new server reflective candidate
+func NewCandidateServerReflexive(config *CandidateServerReflexiveConfig) (*CandidateServerReflexive, error) {
+	ip := net.ParseIP(config.Address)
+	if ip == nil {
+		return nil, ErrAddressParseFailed
+	}
+
+	networkType, err := determineNetworkType(config.Network, ip)
+	if err != nil {
+		return nil, err
+	}
+
+	candidateID := config.CandidateID
+	if candidateID == "" {
+		candidateID = globalCandidateIDGenerator.Generate()
+	}
+
+	return &CandidateServerReflexive{
+		candidateBase: candidateBase{
+			id:                 candidateID,
+			networkType:        networkType,
+			candidateType:      CandidateTypeServerReflexive,
+			address:            config.Address,
+			port:               config.Port,
+			resolvedAddr:       &net.UDPAddr{IP: ip, Port: config.Port},
+			component:          config.Component,
+			foundationOverride: config.Foundation,
+			priorityOverride:   config.Priority,
+			relatedAddress: &CandidateRelatedAddress{
+				Address: config.RelAddr,
+				Port:    config.RelPort,
+			},
+		},
+	}, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidatepair.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidatepair.go
new file mode 100644
index 000000000..00f904eb1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidatepair.go
@@ -0,0 +1,94 @@
+package ice
+
+import (
+	"fmt"
+
+	"github.com/pion/stun"
+)
+
+func newCandidatePair(local, remote Candidate, controlling bool) *candidatePair {
+	return &candidatePair{
+		iceRoleControlling: controlling,
+		remote:             remote,
+		local:              local,
+		state:              CandidatePairStateWaiting,
+	}
+}
+
+// candidatePair represents a combination of a local and remote candidate
+type candidatePair struct {
+	iceRoleControlling  bool
+	remote              Candidate
+	local               Candidate
+	bindingRequestCount uint16
+	state               CandidatePairState
+	nominated           bool
+}
+
+func (p *candidatePair) String() string {
+	return fmt.Sprintf("prio %d (local, prio %d) %s <-> %s (remote, prio %d)",
+		p.Priority(), p.local.Priority(), p.local, p.remote, p.remote.Priority())
+}
+
+func (p *candidatePair) Equal(other *candidatePair) bool {
+	if p == nil && other == nil {
+		return true
+	}
+	if p == nil || other == nil {
+		return false
+	}
+	return p.local.Equal(other.local) && p.remote.Equal(other.remote)
+}
+
+// RFC 5245 - 5.7.2.  Computing Pair Priority and Ordering Pairs
+// Let G be the priority for the candidate provided by the controlling
+// agent.  Let D be the priority for the candidate provided by the
+// controlled agent.
+// pair priority = 2^32*MIN(G,D) + 2*MAX(G,D) + (G>D?1:0)
+func (p *candidatePair) Priority() uint64 {
+	var g uint32
+	var d uint32
+	if p.iceRoleControlling {
+		g = p.local.Priority()
+		d = p.remote.Priority()
+	} else {
+		g = p.remote.Priority()
+		d = p.local.Priority()
+	}
+
+	// Just implement these here rather
+	// than fooling around with the math package
+	min := func(x, y uint32) uint64 {
+		if x < y {
+			return uint64(x)
+		}
+		return uint64(y)
+	}
+	max := func(x, y uint32) uint64 {
+		if x > y {
+			return uint64(x)
+		}
+		return uint64(y)
+	}
+	cmp := func(x, y uint32) uint64 {
+		if x > y {
+			return uint64(1)
+		}
+		return uint64(0)
+	}
+
+	// 1<<32 overflows uint32; and if both g && d are
+	// maxUint32, this result would overflow uint64
+	return (1<<32-1)*min(g, d) + 2*max(g, d) + cmp(g, d)
+}
+
+func (p *candidatePair) Write(b []byte) (int, error) {
+	return p.local.writeTo(b, p.remote)
+}
+
+func (a *Agent) sendSTUN(msg *stun.Message, local, remote Candidate) {
+	_, err := local.writeTo(msg.Raw, remote)
+	if err != nil {
+		a.log.Tracef("failed to send STUN message: %s", err)
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidatepair_state.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidatepair_state.go
new file mode 100644
index 000000000..28c7187eb
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidatepair_state.go
@@ -0,0 +1,37 @@
+package ice
+
+// CandidatePairState represent the ICE candidate pair state
+type CandidatePairState int
+
+const (
+	// CandidatePairStateWaiting means a check has not been performed for
+	// this pair
+	CandidatePairStateWaiting = iota + 1
+
+	// CandidatePairStateInProgress means a check has been sent for this pair,
+	// but the transaction is in progress.
+	CandidatePairStateInProgress
+
+	// CandidatePairStateFailed means a check for this pair was already done
+	// and failed, either never producing any response or producing an unrecoverable
+	// failure response.
+	CandidatePairStateFailed
+
+	// CandidatePairStateSucceeded means a check for this pair was already
+	// done and produced a successful result.
+	CandidatePairStateSucceeded
+)
+
+func (c CandidatePairState) String() string {
+	switch c {
+	case CandidatePairStateWaiting:
+		return "waiting"
+	case CandidatePairStateInProgress:
+		return "in-progress"
+	case CandidatePairStateFailed:
+		return "failed"
+	case CandidatePairStateSucceeded:
+		return "succeeded"
+	}
+	return "Unknown candidate pair state"
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidaterelatedaddress.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidaterelatedaddress.go
new file mode 100644
index 000000000..18cf31831
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidaterelatedaddress.go
@@ -0,0 +1,30 @@
+package ice
+
+import "fmt"
+
+// CandidateRelatedAddress convey transport addresses related to the
+// candidate, useful for diagnostics and other purposes.
+type CandidateRelatedAddress struct {
+	Address string
+	Port    int
+}
+
+// String makes CandidateRelatedAddress printable
+func (c *CandidateRelatedAddress) String() string {
+	if c == nil {
+		return ""
+	}
+
+	return fmt.Sprintf(" related %s:%d", c.Address, c.Port)
+}
+
+// Equal allows comparing two CandidateRelatedAddresses.
+// The CandidateRelatedAddress are allowed to be nil.
+func (c *CandidateRelatedAddress) Equal(other *CandidateRelatedAddress) bool {
+	if c == nil && other == nil {
+		return true
+	}
+	return c != nil && other != nil &&
+		c.Address == other.Address &&
+		c.Port == other.Port
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidatetype.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidatetype.go
new file mode 100644
index 000000000..376c4089f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/candidatetype.go
@@ -0,0 +1,62 @@
+package ice
+
+// CandidateType represents the type of candidate
+type CandidateType byte
+
+// CandidateType enum
+const (
+	CandidateTypeUnspecified CandidateType = iota
+	CandidateTypeHost
+	CandidateTypeServerReflexive
+	CandidateTypePeerReflexive
+	CandidateTypeRelay
+)
+
+// String makes CandidateType printable
+func (c CandidateType) String() string {
+	switch c {
+	case CandidateTypeHost:
+		return "host"
+	case CandidateTypeServerReflexive:
+		return "srflx"
+	case CandidateTypePeerReflexive:
+		return "prflx"
+	case CandidateTypeRelay:
+		return "relay"
+	case CandidateTypeUnspecified:
+		return "Unknown candidate type"
+	}
+	return "Unknown candidate type"
+}
+
+// Preference returns the preference weight of a CandidateType
+//
+// 4.1.2.2.  Guidelines for Choosing Type and Local Preferences
+// The RECOMMENDED values are 126 for host candidates, 100
+// for server reflexive candidates, 110 for peer reflexive candidates,
+// and 0 for relayed candidates.
+func (c CandidateType) Preference() uint16 {
+	switch c {
+	case CandidateTypeHost:
+		return 126
+	case CandidateTypePeerReflexive:
+		return 110
+	case CandidateTypeServerReflexive:
+		return 100
+	case CandidateTypeRelay, CandidateTypeUnspecified:
+		return 0
+	}
+	return 0
+}
+
+func containsCandidateType(candidateType CandidateType, candidateTypeList []CandidateType) bool {
+	if candidateTypeList == nil {
+		return false
+	}
+	for _, ct := range candidateTypeList {
+		if ct == candidateType {
+			return true
+		}
+	}
+	return false
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/codecov.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/codecov.yml
new file mode 100644
index 000000000..085200a48
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/codecov.yml
@@ -0,0 +1,20 @@
+#
+# DO NOT EDIT THIS FILE
+#
+# It is automatically copied from https://github.com/pion/.goassets repository.
+#
+
+coverage:
+  status:
+    project:
+      default:
+        # Allow decreasing 2% of total coverage to avoid noise.
+        threshold: 2%
+    patch:
+      default:
+        target: 70%
+        only_pulls: true
+
+ignore:
+  - "examples/*"
+  - "examples/**/*"
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/context.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/context.go
new file mode 100644
index 000000000..627d81ef4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/context.go
@@ -0,0 +1,37 @@
+package ice
+
+import (
+	"context"
+	"time"
+)
+
+func (a *Agent) context() context.Context {
+	return agentContext(a.done)
+}
+
+type agentContext chan struct{}
+
+// Done implements context.Context
+func (a agentContext) Done() <-chan struct{} {
+	return (chan struct{})(a)
+}
+
+// Err implements context.Context
+func (a agentContext) Err() error {
+	select {
+	case <-(chan struct{})(a):
+		return ErrRunCanceled
+	default:
+		return nil
+	}
+}
+
+// Deadline implements context.Context
+func (a agentContext) Deadline() (deadline time.Time, ok bool) {
+	return time.Time{}, false
+}
+
+// Value implements context.Context
+func (a agentContext) Value(key interface{}) interface{} {
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/errors.go
new file mode 100644
index 000000000..e7dd625d4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/errors.go
@@ -0,0 +1,132 @@
+package ice
+
+import "errors"
+
+var (
+	// ErrUnknownType indicates an error with Unknown info.
+	ErrUnknownType = errors.New("Unknown")
+
+	// ErrSchemeType indicates the scheme type could not be parsed.
+	ErrSchemeType = errors.New("unknown scheme type")
+
+	// ErrSTUNQuery indicates query arguments are provided in a STUN URL.
+	ErrSTUNQuery = errors.New("queries not supported in stun address")
+
+	// ErrInvalidQuery indicates an malformed query is provided.
+	ErrInvalidQuery = errors.New("invalid query")
+
+	// ErrHost indicates malformed hostname is provided.
+	ErrHost = errors.New("invalid hostname")
+
+	// ErrPort indicates malformed port is provided.
+	ErrPort = errors.New("invalid port")
+
+	// ErrLocalUfragInsufficientBits indicates local username fragment insufficient bits are provided.
+	// Have to be at least 24 bits long
+	ErrLocalUfragInsufficientBits = errors.New("local username fragment is less than 24 bits long")
+
+	// ErrLocalPwdInsufficientBits indicates local passoword insufficient bits are provided.
+	// Have to be at least 128 bits long
+	ErrLocalPwdInsufficientBits = errors.New("local password is less than 128 bits long")
+
+	// ErrProtoType indicates an unsupported transport type was provided.
+	ErrProtoType = errors.New("invalid transport protocol type")
+
+	// ErrClosed indicates the agent is closed
+	ErrClosed = errors.New("the agent is closed")
+
+	// ErrNoCandidatePairs indicates agent does not have a valid candidate pair
+	ErrNoCandidatePairs = errors.New("no candidate pairs available")
+
+	// ErrCanceledByCaller indicates agent connection was canceled by the caller
+	ErrCanceledByCaller = errors.New("connecting canceled by caller")
+
+	// ErrMultipleStart indicates agent was started twice
+	ErrMultipleStart = errors.New("attempted to start agent twice")
+
+	// ErrRemoteUfragEmpty indicates agent was started with an empty remote ufrag
+	ErrRemoteUfragEmpty = errors.New("remote ufrag is empty")
+
+	// ErrRemotePwdEmpty indicates agent was started with an empty remote pwd
+	ErrRemotePwdEmpty = errors.New("remote pwd is empty")
+
+	// ErrNoOnCandidateHandler indicates agent was started without OnCandidate
+	ErrNoOnCandidateHandler = errors.New("no OnCandidate provided")
+
+	// ErrMultipleGatherAttempted indicates GatherCandidates has been called multiple times
+	ErrMultipleGatherAttempted = errors.New("attempting to gather candidates during gathering state")
+
+	// ErrUsernameEmpty indicates agent was give TURN URL with an empty Username
+	ErrUsernameEmpty = errors.New("username is empty")
+
+	// ErrPasswordEmpty indicates agent was give TURN URL with an empty Password
+	ErrPasswordEmpty = errors.New("password is empty")
+
+	// ErrAddressParseFailed indicates we were unable to parse a candidate address
+	ErrAddressParseFailed = errors.New("failed to parse address")
+
+	// ErrLiteUsingNonHostCandidates indicates non host candidates were selected for a lite agent
+	ErrLiteUsingNonHostCandidates = errors.New("lite agents must only use host candidates")
+
+	// ErrUselessUrlsProvided indicates that one or more URL was provided to the agent but no host
+	// candidate required them
+	ErrUselessUrlsProvided = errors.New("agent does not need URL with selected candidate types")
+
+	// ErrUnsupportedNAT1To1IPCandidateType indicates that the specified NAT1To1IPCandidateType is
+	// unsupported
+	ErrUnsupportedNAT1To1IPCandidateType = errors.New("unsupported 1:1 NAT IP candidate type")
+
+	// ErrInvalidNAT1To1IPMapping indicates that the given 1:1 NAT IP mapping is invalid
+	ErrInvalidNAT1To1IPMapping = errors.New("invalid 1:1 NAT IP mapping")
+
+	// ErrExternalMappedIPNotFound in NAT1To1IPMapping
+	ErrExternalMappedIPNotFound = errors.New("external mapped IP not found")
+
+	// ErrMulticastDNSWithNAT1To1IPMapping indicates that the mDNS gathering cannot be used along
+	// with 1:1 NAT IP mapping for host candidate.
+	ErrMulticastDNSWithNAT1To1IPMapping = errors.New("mDNS gathering cannot be used with 1:1 NAT IP mapping for host candidate")
+
+	// ErrIneffectiveNAT1To1IPMappingHost indicates that 1:1 NAT IP mapping for host candidate is
+	// requested, but the host candidate type is disabled.
+	ErrIneffectiveNAT1To1IPMappingHost = errors.New("1:1 NAT IP mapping for host candidate ineffective")
+
+	// ErrIneffectiveNAT1To1IPMappingSrflx indicates that 1:1 NAT IP mapping for srflx candidate is
+	// requested, but the srflx candidate type is disabled.
+	ErrIneffectiveNAT1To1IPMappingSrflx = errors.New("1:1 NAT IP mapping for srflx candidate ineffective")
+
+	// ErrInvalidMulticastDNSHostName indicates an invalid MulticastDNSHostName
+	ErrInvalidMulticastDNSHostName = errors.New("invalid mDNS HostName, must end with .local and can only contain a single '.'")
+
+	// ErrRestartWhenGathering indicates Restart was called when Agent is in GatheringStateGathering
+	ErrRestartWhenGathering = errors.New("ICE Agent can not be restarted when gathering")
+
+	// ErrRunCanceled indicates a run operation was canceled by its individual done
+	ErrRunCanceled = errors.New("run was canceled by done")
+
+	// ErrTCPMuxNotInitialized indicates TCPMux is not initialized and that invalidTCPMux is used.
+	ErrTCPMuxNotInitialized = errors.New("TCPMux is not initialized")
+
+	// ErrTCPRemoteAddrAlreadyExists indicates we already have the connection with same remote addr.
+	ErrTCPRemoteAddrAlreadyExists = errors.New("conn with same remote addr already exists")
+
+	errSendPacket                    = errors.New("failed to send packet")
+	errAttributeTooShortICECandidate = errors.New("attribute not long enough to be ICE candidate")
+	errParseComponent                = errors.New("could not parse component")
+	errParsePriority                 = errors.New("could not parse priority")
+	errParsePort                     = errors.New("could not parse port")
+	errParseRelatedAddr              = errors.New("could not parse related addresses")
+	errParseTypType                  = errors.New("could not parse typtype")
+	errUnknownCandidateTyp           = errors.New("unknown candidate typ")
+	errGetXorMappedAddrResponse      = errors.New("failed to get XOR-MAPPED-ADDRESS response")
+	errConnectionAddrAlreadyExist    = errors.New("connection with same remote address already exists")
+	errReadingStreamingPacket        = errors.New("error reading streaming packet")
+	errWriting                       = errors.New("error writing to")
+	errClosingConnection             = errors.New("error closing connection")
+	errDetermineNetworkType          = errors.New("unable to determine networkType")
+	errMissingProtocolScheme         = errors.New("missing protocol scheme")
+	errTooManyColonsAddr             = errors.New("too many colons in address")
+	errRead                          = errors.New("unexpected error trying to read")
+	errUnknownRole                   = errors.New("unknown role")
+	errMismatchUsername              = errors.New("username mismatch")
+	errICEWriteSTUNMessage           = errors.New("the ICE conn can't write STUN messages")
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/external_ip_mapper.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/external_ip_mapper.go
new file mode 100644
index 000000000..5310cc0ae
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/external_ip_mapper.go
@@ -0,0 +1,143 @@
+package ice
+
+import (
+	"net"
+	"strings"
+)
+
+func validateIPString(ipStr string) (net.IP, bool, error) {
+	ip := net.ParseIP(ipStr)
+	if ip == nil {
+		return nil, false, ErrInvalidNAT1To1IPMapping
+	}
+	return ip, (ip.To4() != nil), nil
+}
+
+// ipMapping holds the mapping of local and external IP address for a particular IP family
+type ipMapping struct {
+	ipSole net.IP            // when non-nil, this is the sole external IP for one local IP assumed
+	ipMap  map[string]net.IP // local-to-external IP mapping (k: local, v: external)
+}
+
+func (m *ipMapping) setSoleIP(ip net.IP) error {
+	if m.ipSole != nil || len(m.ipMap) > 0 {
+		return ErrInvalidNAT1To1IPMapping
+	}
+
+	m.ipSole = ip
+
+	return nil
+}
+
+func (m *ipMapping) addIPMapping(locIP, extIP net.IP) error {
+	if m.ipSole != nil {
+		return ErrInvalidNAT1To1IPMapping
+	}
+
+	locIPStr := locIP.String()
+
+	// check if dup of local IP
+	if _, ok := m.ipMap[locIPStr]; ok {
+		return ErrInvalidNAT1To1IPMapping
+	}
+
+	m.ipMap[locIPStr] = extIP
+
+	return nil
+}
+
+func (m *ipMapping) findExternalIP(locIP net.IP) (net.IP, error) {
+	if m.ipSole != nil {
+		return m.ipSole, nil
+	}
+
+	extIP, ok := m.ipMap[locIP.String()]
+	if !ok {
+		return nil, ErrExternalMappedIPNotFound
+	}
+
+	return extIP, nil
+}
+
+type externalIPMapper struct {
+	ipv4Mapping   ipMapping
+	ipv6Mapping   ipMapping
+	candidateType CandidateType
+}
+
+func newExternalIPMapper(candidateType CandidateType, ips []string) (*externalIPMapper, error) { //nolint:gocognit
+	if len(ips) == 0 {
+		return nil, nil
+	}
+	if candidateType == CandidateTypeUnspecified {
+		candidateType = CandidateTypeHost // defaults to host
+	} else if candidateType != CandidateTypeHost && candidateType != CandidateTypeServerReflexive {
+		return nil, ErrUnsupportedNAT1To1IPCandidateType
+	}
+
+	m := &externalIPMapper{
+		ipv4Mapping:   ipMapping{ipMap: map[string]net.IP{}},
+		ipv6Mapping:   ipMapping{ipMap: map[string]net.IP{}},
+		candidateType: candidateType,
+	}
+
+	for _, extIPStr := range ips {
+		ipPair := strings.Split(extIPStr, "/")
+		if len(ipPair) == 0 || len(ipPair) > 2 {
+			return nil, ErrInvalidNAT1To1IPMapping
+		}
+
+		extIP, isExtIPv4, err := validateIPString(ipPair[0])
+		if err != nil {
+			return nil, err
+		}
+		if len(ipPair) == 1 {
+			if isExtIPv4 {
+				if err := m.ipv4Mapping.setSoleIP(extIP); err != nil {
+					return nil, err
+				}
+			} else {
+				if err := m.ipv6Mapping.setSoleIP(extIP); err != nil {
+					return nil, err
+				}
+			}
+		} else {
+			locIP, isLocIPv4, err := validateIPString(ipPair[1])
+			if err != nil {
+				return nil, err
+			}
+			if isExtIPv4 {
+				if !isLocIPv4 {
+					return nil, ErrInvalidNAT1To1IPMapping
+				}
+
+				if err := m.ipv4Mapping.addIPMapping(locIP, extIP); err != nil {
+					return nil, err
+				}
+			} else {
+				if isLocIPv4 {
+					return nil, ErrInvalidNAT1To1IPMapping
+				}
+
+				if err := m.ipv6Mapping.addIPMapping(locIP, extIP); err != nil {
+					return nil, err
+				}
+			}
+		}
+	}
+
+	return m, nil
+}
+
+func (m *externalIPMapper) findExternalIP(localIPStr string) (net.IP, error) {
+	locIP, isLocIPv4, err := validateIPString(localIPStr)
+	if err != nil {
+		return nil, err
+	}
+
+	if isLocIPv4 {
+		return m.ipv4Mapping.findExternalIP(locIP)
+	}
+
+	return m.ipv6Mapping.findExternalIP(locIP)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/gather.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/gather.go
new file mode 100644
index 000000000..3bc3d7729
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/gather.go
@@ -0,0 +1,497 @@
+package ice
+
+import (
+	"context"
+	"crypto/tls"
+	"errors"
+	"fmt"
+	"net"
+	"reflect"
+	"sync"
+	"time"
+
+	"github.com/pion/dtls/v2"
+	"github.com/pion/logging"
+	"github.com/pion/turn/v2"
+)
+
+const (
+	stunGatherTimeout = time.Second * 5
+)
+
+type closeable interface {
+	Close() error
+}
+
+// Close a net.Conn and log if we have a failure
+func closeConnAndLog(c closeable, log logging.LeveledLogger, msg string) {
+	if c == nil || (reflect.ValueOf(c).Kind() == reflect.Ptr && reflect.ValueOf(c).IsNil()) {
+		log.Warnf("Conn is not allocated (%s)", msg)
+		return
+	}
+
+	log.Warnf(msg)
+	if err := c.Close(); err != nil {
+		log.Warnf("Failed to close conn: %v", err)
+	}
+}
+
+// fakePacketConn wraps a net.Conn and emulates net.PacketConn
+type fakePacketConn struct {
+	nextConn net.Conn
+}
+
+func (f *fakePacketConn) ReadFrom(p []byte) (n int, addr net.Addr, err error) {
+	n, err = f.nextConn.Read(p)
+	addr = f.nextConn.RemoteAddr()
+	return
+}
+func (f *fakePacketConn) Close() error                       { return f.nextConn.Close() }
+func (f *fakePacketConn) LocalAddr() net.Addr                { return f.nextConn.LocalAddr() }
+func (f *fakePacketConn) SetDeadline(t time.Time) error      { return f.nextConn.SetDeadline(t) }
+func (f *fakePacketConn) SetReadDeadline(t time.Time) error  { return f.nextConn.SetReadDeadline(t) }
+func (f *fakePacketConn) SetWriteDeadline(t time.Time) error { return f.nextConn.SetWriteDeadline(t) }
+func (f *fakePacketConn) WriteTo(p []byte, addr net.Addr) (n int, err error) {
+	return f.nextConn.Write(p)
+}
+
+// GatherCandidates initiates the trickle based gathering process.
+func (a *Agent) GatherCandidates() error {
+	var gatherErr error
+
+	if runErr := a.run(a.context(), func(ctx context.Context, agent *Agent) {
+		if a.gatheringState != GatheringStateNew {
+			gatherErr = ErrMultipleGatherAttempted
+			return
+		} else if a.onCandidateHdlr.Load() == nil {
+			gatherErr = ErrNoOnCandidateHandler
+			return
+		}
+
+		a.gatherCandidateCancel() // Cancel previous gathering routine
+		ctx, cancel := context.WithCancel(ctx)
+		a.gatherCandidateCancel = cancel
+
+		go a.gatherCandidates(ctx)
+	}); runErr != nil {
+		return runErr
+	}
+	return gatherErr
+}
+
+func (a *Agent) gatherCandidates(ctx context.Context) {
+	if err := a.setGatheringState(GatheringStateGathering); err != nil {
+		a.log.Warnf("failed to set gatheringState to GatheringStateGathering: %v", err)
+		return
+	}
+
+	var wg sync.WaitGroup
+	for _, t := range a.candidateTypes {
+		switch t {
+		case CandidateTypeHost:
+			wg.Add(1)
+			go func() {
+				a.gatherCandidatesLocal(ctx, a.networkTypes)
+				wg.Done()
+			}()
+		case CandidateTypeServerReflexive:
+			wg.Add(1)
+			go func() {
+				a.gatherCandidatesSrflx(ctx, a.urls, a.networkTypes)
+				wg.Done()
+			}()
+			if a.extIPMapper != nil && a.extIPMapper.candidateType == CandidateTypeServerReflexive {
+				wg.Add(1)
+				go func() {
+					a.gatherCandidatesSrflxMapped(ctx, a.networkTypes)
+					wg.Done()
+				}()
+			}
+		case CandidateTypeRelay:
+			wg.Add(1)
+			go func() {
+				a.gatherCandidatesRelay(ctx, a.urls)
+				wg.Done()
+			}()
+		case CandidateTypePeerReflexive, CandidateTypeUnspecified:
+		}
+	}
+	// Block until all STUN and TURN URLs have been gathered (or timed out)
+	wg.Wait()
+
+	if err := a.setGatheringState(GatheringStateComplete); err != nil {
+		a.log.Warnf("failed to set gatheringState to GatheringStateComplete: %v", err)
+	}
+}
+
+func (a *Agent) gatherCandidatesLocal(ctx context.Context, networkTypes []NetworkType) { //nolint:gocognit
+	networks := map[string]struct{}{}
+	for _, networkType := range networkTypes {
+		if networkType.IsTCP() {
+			networks[tcp] = struct{}{}
+		} else {
+			networks[udp] = struct{}{}
+		}
+	}
+
+	localIPs, err := localInterfaces(a.net, a.interfaceFilter, networkTypes)
+	if err != nil {
+		a.log.Warnf("failed to iterate local interfaces, host candidates will not be gathered %s", err)
+		return
+	}
+
+	for _, ip := range localIPs {
+		mappedIP := ip
+		if a.mDNSMode != MulticastDNSModeQueryAndGather && a.extIPMapper != nil && a.extIPMapper.candidateType == CandidateTypeHost {
+			if _mappedIP, err := a.extIPMapper.findExternalIP(ip.String()); err == nil {
+				mappedIP = _mappedIP
+			} else {
+				a.log.Warnf("1:1 NAT mapping is enabled but no external IP is found for %s\n", ip.String())
+			}
+		}
+
+		address := mappedIP.String()
+		if a.mDNSMode == MulticastDNSModeQueryAndGather {
+			address = a.mDNSName
+		}
+
+		for network := range networks {
+			var port int
+			var conn net.PacketConn
+			var err error
+
+			var tcpType TCPType
+			switch network {
+			case tcp:
+				// Handle ICE TCP passive mode
+
+				a.log.Debugf("GetConn by ufrag: %s\n", a.localUfrag)
+				conn, err = a.tcpMux.GetConnByUfrag(a.localUfrag)
+				if err != nil {
+					if !errors.Is(err, ErrTCPMuxNotInitialized) {
+						a.log.Warnf("error getting tcp conn by ufrag: %s %s %s\n", network, ip, a.localUfrag)
+					}
+					continue
+				}
+				port = conn.LocalAddr().(*net.TCPAddr).Port
+				tcpType = TCPTypePassive
+				// is there a way to verify that the listen address is even
+				// accessible from the current interface.
+			case udp:
+				conn, err = listenUDPInPortRange(a.net, a.log, int(a.portmax), int(a.portmin), network, &net.UDPAddr{IP: ip, Port: 0})
+				if err != nil {
+					a.log.Warnf("could not listen %s %s\n", network, ip)
+					continue
+				}
+
+				port = conn.LocalAddr().(*net.UDPAddr).Port
+			}
+			hostConfig := CandidateHostConfig{
+				Network:   network,
+				Address:   address,
+				Port:      port,
+				Component: ComponentRTP,
+				TCPType:   tcpType,
+			}
+
+			c, err := NewCandidateHost(&hostConfig)
+			if err != nil {
+				closeConnAndLog(conn, a.log, fmt.Sprintf("Failed to create host candidate: %s %s %d: %v\n", network, mappedIP, port, err))
+				continue
+			}
+
+			if a.mDNSMode == MulticastDNSModeQueryAndGather {
+				if err = c.setIP(ip); err != nil {
+					closeConnAndLog(conn, a.log, fmt.Sprintf("Failed to create host candidate: %s %s %d: %v\n", network, mappedIP, port, err))
+					continue
+				}
+			}
+
+			if err := a.addCandidate(ctx, c, conn); err != nil {
+				if closeErr := c.close(); closeErr != nil {
+					a.log.Warnf("Failed to close candidate: %v", closeErr)
+				}
+				a.log.Warnf("Failed to append to localCandidates and run onCandidateHdlr: %v\n", err)
+			}
+		}
+	}
+}
+
+func (a *Agent) gatherCandidatesSrflxMapped(ctx context.Context, networkTypes []NetworkType) {
+	var wg sync.WaitGroup
+	defer wg.Wait()
+
+	for _, networkType := range networkTypes {
+		if networkType.IsTCP() {
+			continue
+		}
+
+		network := networkType.String()
+		wg.Add(1)
+		go func() {
+			defer wg.Done()
+			conn, err := listenUDPInPortRange(a.net, a.log, int(a.portmax), int(a.portmin), network, &net.UDPAddr{IP: nil, Port: 0})
+			if err != nil {
+				a.log.Warnf("Failed to listen %s: %v\n", network, err)
+				return
+			}
+
+			laddr := conn.LocalAddr().(*net.UDPAddr)
+			mappedIP, err := a.extIPMapper.findExternalIP(laddr.IP.String())
+			if err != nil {
+				closeConnAndLog(conn, a.log, fmt.Sprintf("1:1 NAT mapping is enabled but no external IP is found for %s\n", laddr.IP.String()))
+				return
+			}
+
+			srflxConfig := CandidateServerReflexiveConfig{
+				Network:   network,
+				Address:   mappedIP.String(),
+				Port:      laddr.Port,
+				Component: ComponentRTP,
+				RelAddr:   laddr.IP.String(),
+				RelPort:   laddr.Port,
+			}
+			c, err := NewCandidateServerReflexive(&srflxConfig)
+			if err != nil {
+				closeConnAndLog(conn, a.log, fmt.Sprintf("Failed to create server reflexive candidate: %s %s %d: %v\n",
+					network,
+					mappedIP.String(),
+					laddr.Port,
+					err))
+				return
+			}
+
+			if err := a.addCandidate(ctx, c, conn); err != nil {
+				if closeErr := c.close(); closeErr != nil {
+					a.log.Warnf("Failed to close candidate: %v", closeErr)
+				}
+				a.log.Warnf("Failed to append to localCandidates and run onCandidateHdlr: %v\n", err)
+			}
+		}()
+	}
+}
+
+func (a *Agent) gatherCandidatesSrflx(ctx context.Context, urls []*URL, networkTypes []NetworkType) {
+	var wg sync.WaitGroup
+	defer wg.Wait()
+
+	for _, networkType := range networkTypes {
+		if networkType.IsTCP() {
+			continue
+		}
+
+		for i := range urls {
+			wg.Add(1)
+			go func(url URL, network string) {
+				defer wg.Done()
+				hostPort := fmt.Sprintf("%s:%d", url.Host, url.Port)
+				serverAddr, err := a.net.ResolveUDPAddr(network, hostPort)
+				if err != nil {
+					a.log.Warnf("failed to resolve stun host: %s: %v", hostPort, err)
+					return
+				}
+
+				conn, err := listenUDPInPortRange(a.net, a.log, int(a.portmax), int(a.portmin), network, &net.UDPAddr{IP: nil, Port: 0})
+				if err != nil {
+					closeConnAndLog(conn, a.log, fmt.Sprintf("Failed to listen for %s: %v\n", serverAddr.String(), err))
+					return
+				}
+
+				xoraddr, err := getXORMappedAddr(conn, serverAddr, stunGatherTimeout)
+				if err != nil {
+					closeConnAndLog(conn, a.log, fmt.Sprintf("could not get server reflexive address %s %s: %v\n", network, url, err))
+					return
+				}
+
+				ip := xoraddr.IP
+				port := xoraddr.Port
+
+				laddr := conn.LocalAddr().(*net.UDPAddr)
+				srflxConfig := CandidateServerReflexiveConfig{
+					Network:   network,
+					Address:   ip.String(),
+					Port:      port,
+					Component: ComponentRTP,
+					RelAddr:   laddr.IP.String(),
+					RelPort:   laddr.Port,
+				}
+				c, err := NewCandidateServerReflexive(&srflxConfig)
+				if err != nil {
+					closeConnAndLog(conn, a.log, fmt.Sprintf("Failed to create server reflexive candidate: %s %s %d: %v\n", network, ip, port, err))
+					return
+				}
+
+				if err := a.addCandidate(ctx, c, conn); err != nil {
+					if closeErr := c.close(); closeErr != nil {
+						a.log.Warnf("Failed to close candidate: %v", closeErr)
+					}
+					a.log.Warnf("Failed to append to localCandidates and run onCandidateHdlr: %v\n", err)
+				}
+			}(*urls[i], networkType.String())
+		}
+	}
+}
+
+func (a *Agent) gatherCandidatesRelay(ctx context.Context, urls []*URL) { //nolint:gocognit
+	var wg sync.WaitGroup
+	defer wg.Wait()
+
+	network := NetworkTypeUDP4.String()
+	for i := range urls {
+		switch {
+		case urls[i].Scheme != SchemeTypeTURN && urls[i].Scheme != SchemeTypeTURNS:
+			continue
+		case urls[i].Username == "":
+			a.log.Errorf("Failed to gather relay candidates: %v", ErrUsernameEmpty)
+			return
+		case urls[i].Password == "":
+			a.log.Errorf("Failed to gather relay candidates: %v", ErrPasswordEmpty)
+			return
+		}
+
+		wg.Add(1)
+		go func(url URL) {
+			defer wg.Done()
+			TURNServerAddr := fmt.Sprintf("%s:%d", url.Host, url.Port)
+			var (
+				locConn net.PacketConn
+				err     error
+				RelAddr string
+				RelPort int
+			)
+
+			switch {
+			case url.Proto == ProtoTypeUDP && url.Scheme == SchemeTypeTURN:
+				if locConn, err = a.net.ListenPacket(network, "0.0.0.0:0"); err != nil {
+					a.log.Warnf("Failed to listen %s: %v\n", network, err)
+					return
+				}
+
+				RelAddr = locConn.LocalAddr().(*net.UDPAddr).IP.String()
+				RelPort = locConn.LocalAddr().(*net.UDPAddr).Port
+			case a.proxyDialer != nil && url.Proto == ProtoTypeTCP &&
+				(url.Scheme == SchemeTypeTURN || url.Scheme == SchemeTypeTURNS):
+				conn, connectErr := a.proxyDialer.Dial(NetworkTypeTCP4.String(), TURNServerAddr)
+				if connectErr != nil {
+					a.log.Warnf("Failed to Dial TCP Addr %s via proxy dialer: %v\n", TURNServerAddr, connectErr)
+					return
+				}
+
+				RelAddr = conn.LocalAddr().(*net.TCPAddr).IP.String()
+				RelPort = conn.LocalAddr().(*net.TCPAddr).Port
+				locConn = turn.NewSTUNConn(conn)
+
+			case url.Proto == ProtoTypeTCP && url.Scheme == SchemeTypeTURN:
+				tcpAddr, connectErr := net.ResolveTCPAddr(NetworkTypeTCP4.String(), TURNServerAddr)
+				if connectErr != nil {
+					a.log.Warnf("Failed to resolve TCP Addr %s: %v\n", TURNServerAddr, connectErr)
+					return
+				}
+
+				conn, connectErr := net.DialTCP(NetworkTypeTCP4.String(), nil, tcpAddr)
+				if connectErr != nil {
+					a.log.Warnf("Failed to Dial TCP Addr %s: %v\n", TURNServerAddr, connectErr)
+					return
+				}
+
+				RelAddr = conn.LocalAddr().(*net.TCPAddr).IP.String()
+				RelPort = conn.LocalAddr().(*net.TCPAddr).Port
+				locConn = turn.NewSTUNConn(conn)
+			case url.Proto == ProtoTypeUDP && url.Scheme == SchemeTypeTURNS:
+				udpAddr, connectErr := net.ResolveUDPAddr(network, TURNServerAddr)
+				if connectErr != nil {
+					a.log.Warnf("Failed to resolve UDP Addr %s: %v\n", TURNServerAddr, connectErr)
+					return
+				}
+
+				conn, connectErr := dtls.Dial(network, udpAddr, &dtls.Config{
+					InsecureSkipVerify: a.insecureSkipVerify, //nolint:gosec
+				})
+				if connectErr != nil {
+					a.log.Warnf("Failed to Dial DTLS Addr %s: %v\n", TURNServerAddr, connectErr)
+					return
+				}
+
+				RelAddr = conn.LocalAddr().(*net.UDPAddr).IP.String()
+				RelPort = conn.LocalAddr().(*net.UDPAddr).Port
+				locConn = &fakePacketConn{conn}
+			case url.Proto == ProtoTypeTCP && url.Scheme == SchemeTypeTURNS:
+				conn, connectErr := tls.Dial(NetworkTypeTCP4.String(), TURNServerAddr, &tls.Config{
+					InsecureSkipVerify: a.insecureSkipVerify, //nolint:gosec
+				})
+				if connectErr != nil {
+					a.log.Warnf("Failed to Dial TLS Addr %s: %v\n", TURNServerAddr, connectErr)
+					return
+				}
+				RelAddr = conn.LocalAddr().(*net.TCPAddr).IP.String()
+				RelPort = conn.LocalAddr().(*net.TCPAddr).Port
+				locConn = turn.NewSTUNConn(conn)
+			default:
+				a.log.Warnf("Unable to handle URL in gatherCandidatesRelay %v\n", url)
+				return
+			}
+
+			client, err := turn.NewClient(&turn.ClientConfig{
+				TURNServerAddr: TURNServerAddr,
+				Conn:           locConn,
+				Username:       url.Username,
+				Password:       url.Password,
+				LoggerFactory:  a.loggerFactory,
+				Net:            a.net,
+			})
+			if err != nil {
+				closeConnAndLog(locConn, a.log, fmt.Sprintf("Failed to build new turn.Client %s %s\n", TURNServerAddr, err))
+				return
+			}
+
+			if err = client.Listen(); err != nil {
+				client.Close()
+				closeConnAndLog(locConn, a.log, fmt.Sprintf("Failed to listen on turn.Client %s %s\n", TURNServerAddr, err))
+				return
+			}
+
+			relayConn, err := client.Allocate()
+			if err != nil {
+				client.Close()
+				closeConnAndLog(locConn, a.log, fmt.Sprintf("Failed to allocate on turn.Client %s %s\n", TURNServerAddr, err))
+				return
+			}
+
+			raddr := relayConn.LocalAddr().(*net.UDPAddr)
+			relayConfig := CandidateRelayConfig{
+				Network:   network,
+				Component: ComponentRTP,
+				Address:   raddr.IP.String(),
+				Port:      raddr.Port,
+				RelAddr:   RelAddr,
+				RelPort:   RelPort,
+				OnClose: func() error {
+					client.Close()
+					return locConn.Close()
+				},
+			}
+			relayConnClose := func() {
+				if relayConErr := relayConn.Close(); relayConErr != nil {
+					a.log.Warnf("Failed to close relay %v", relayConErr)
+				}
+			}
+			candidate, err := NewCandidateRelay(&relayConfig)
+			if err != nil {
+				relayConnClose()
+
+				client.Close()
+				closeConnAndLog(locConn, a.log, fmt.Sprintf("Failed to create relay candidate: %s %s: %v\n", network, raddr.String(), err))
+				return
+			}
+
+			if err := a.addCandidate(ctx, candidate, relayConn); err != nil {
+				relayConnClose()
+
+				if closeErr := candidate.close(); closeErr != nil {
+					a.log.Warnf("Failed to close candidate: %v", closeErr)
+				}
+				a.log.Warnf("Failed to append to localCandidates and run onCandidateHdlr: %v\n", err)
+			}
+		}(*urls[i])
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/go.mod
new file mode 100644
index 000000000..b7d109fc5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/go.mod
@@ -0,0 +1,16 @@
+module github.com/pion/ice/v2
+
+go 1.13
+
+require (
+	github.com/google/uuid v1.1.2
+	github.com/pion/dtls/v2 v2.0.4
+	github.com/pion/logging v0.2.2
+	github.com/pion/mdns v0.0.4
+	github.com/pion/randutil v0.1.0
+	github.com/pion/stun v0.3.5
+	github.com/pion/transport v0.12.0
+	github.com/pion/turn/v2 v2.0.5
+	github.com/stretchr/testify v1.6.1
+	golang.org/x/net v0.0.0-20201201195509-5d6afe98e0b7
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/go.sum b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/go.sum
new file mode 100644
index 000000000..b13825e92
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/go.sum
@@ -0,0 +1,60 @@
+github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/google/uuid v1.1.2 h1:EVhdT+1Kseyi1/pUmXKaFxYsDNy9RQYkMWRH68J/W7Y=
+github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/pion/dtls/v2 v2.0.4 h1:WuUcqi6oYMu/noNTz92QrF1DaFj4eXbhQ6dzaaAwOiI=
+github.com/pion/dtls/v2 v2.0.4/go.mod h1:qAkFscX0ZHoI1E07RfYPoRw3manThveu+mlTDdOxoGI=
+github.com/pion/logging v0.2.2 h1:M9+AIj/+pxNsDfAT64+MAVgJO0rsyLnoJKCqf//DoeY=
+github.com/pion/logging v0.2.2/go.mod h1:k0/tDVsRCX2Mb2ZEmTqNa7CWsQPc+YYCB7Q+5pahoms=
+github.com/pion/mdns v0.0.4 h1:O4vvVqr4DGX63vzmO6Fw9vpy3lfztVWHGCQfyw0ZLSY=
+github.com/pion/mdns v0.0.4/go.mod h1:R1sL0p50l42S5lJs91oNdUL58nm0QHrhxnSegr++qC0=
+github.com/pion/randutil v0.1.0 h1:CFG1UdESneORglEsnimhUjf33Rwjubwj6xfiOXBa3mA=
+github.com/pion/randutil v0.1.0/go.mod h1:XcJrSMMbbMRhASFVOlj/5hQial/Y8oH/HVo7TBZq+j8=
+github.com/pion/stun v0.3.5 h1:uLUCBCkQby4S1cf6CGuR9QrVOKcvUwFeemaC865QHDg=
+github.com/pion/stun v0.3.5/go.mod h1:gDMim+47EeEtfWogA37n6qXZS88L5V6LqFcf+DZA2UA=
+github.com/pion/transport v0.8.10/go.mod h1:tBmha/UCjpum5hqTWhfAEs3CO4/tHSg0MYRhSzR+CZ8=
+github.com/pion/transport v0.10.0/go.mod h1:BnHnUipd0rZQyTVB2SBGojFHT9CBt5C5TcsJSQGkvSE=
+github.com/pion/transport v0.10.1 h1:2W+yJT+0mOQ160ThZYUx5Zp2skzshiNgxrNE9GUfhJM=
+github.com/pion/transport v0.10.1/go.mod h1:PBis1stIILMiis0PewDw91WJeLJkyIMcEk+DwKOzf4A=
+github.com/pion/transport v0.12.0 h1:UFmOBBZkTZ3LgvLRf/NGrfWdZEubcU6zkLU3PsA9YvU=
+github.com/pion/transport v0.12.0/go.mod h1:N3+vZQD9HlDP5GWkZ85LohxNsDcNgofQmyL6ojX5d8Q=
+github.com/pion/turn/v2 v2.0.5 h1:iwMHqDfPEDEOFzwWKT56eFmh6DYC6o/+xnLAEzgISbA=
+github.com/pion/turn/v2 v2.0.5/go.mod h1:APg43CFyt/14Uy7heYUOGWdkem/Wu4PhCO/bjyrTqMw=
+github.com/pion/udp v0.1.0 h1:uGxQsNyrqG3GLINv36Ff60covYmfrLoxzwnCsIYspXI=
+github.com/pion/udp v0.1.0/go.mod h1:BPELIjbwE9PRbd/zxI/KYBnbo7B6+oA6YuEaNE8lths=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
+github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
+github.com/stretchr/testify v1.6.1 h1:hDPOHmpOpP40lSULcqw7IrRb/u7w6RpDC9399XyoNd0=
+github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9 h1:psW17arqaxU48Z5kZ0CQnkZWQJsqcURM6tKiBApRjXI=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/crypto v0.0.0-20201016220609-9e8e0b390897 h1:pLI5jrR7OSLijeIDcmRxNmw2api+jEfxLoykJVice/E=
+golang.org/x/crypto v0.0.0-20201016220609-9e8e0b390897/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20191126235420-ef20fe5d7933/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200625001655-4c5254603344/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
+golang.org/x/net v0.0.0-20201031054903-ff519b6c9102 h1:42cLlJJdEh+ySyeUUbEQ5bsTiq8voBeTuweGVkY6Puw=
+golang.org/x/net v0.0.0-20201031054903-ff519b6c9102/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/net v0.0.0-20201201195509-5d6afe98e0b7 h1:3uJsdck53FDIpWwLeAXlia9p4C8j0BO2xZrqzKpL0D8=
+golang.org/x/net v0.0.0-20201201195509-5d6afe98e0b7/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd h1:xhmwyvizuTgC2qz7ZlMluP20uW+C3Rm0FD/WLDX8884=
+golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f h1:+Nyd8tzPX9R7BWHguqsrbFdRx3WQ/1ib8I44HXV5yTA=
+golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1 h1:go1bK/D/BFZV2I8cIQd1NKEZ+0owSTG1fDTci4IqFcE=
+golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c h1:dUUwHk2QECo/6vqA44rthZ8ie2QXMNeKRTHCNY2nXvo=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/ice.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/ice.go
new file mode 100644
index 000000000..d7094f6db
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/ice.go
@@ -0,0 +1,76 @@
+package ice
+
+// ConnectionState is an enum showing the state of a ICE Connection
+type ConnectionState int
+
+// List of supported States
+const (
+	// ConnectionStateNew ICE agent is gathering addresses
+	ConnectionStateNew = iota + 1
+
+	// ConnectionStateChecking ICE agent has been given local and remote candidates, and is attempting to find a match
+	ConnectionStateChecking
+
+	// ConnectionStateConnected ICE agent has a pairing, but is still checking other pairs
+	ConnectionStateConnected
+
+	// ConnectionStateCompleted ICE agent has finished
+	ConnectionStateCompleted
+
+	// ConnectionStateFailed ICE agent never could successfully connect
+	ConnectionStateFailed
+
+	// ConnectionStateDisconnected ICE agent connected successfully, but has entered a failed state
+	ConnectionStateDisconnected
+
+	// ConnectionStateClosed ICE agent has finished and is no longer handling requests
+	ConnectionStateClosed
+)
+
+func (c ConnectionState) String() string {
+	switch c {
+	case ConnectionStateNew:
+		return "New"
+	case ConnectionStateChecking:
+		return "Checking"
+	case ConnectionStateConnected:
+		return "Connected"
+	case ConnectionStateCompleted:
+		return "Completed"
+	case ConnectionStateFailed:
+		return "Failed"
+	case ConnectionStateDisconnected:
+		return "Disconnected"
+	case ConnectionStateClosed:
+		return "Closed"
+	default:
+		return "Invalid"
+	}
+}
+
+// GatheringState describes the state of the candidate gathering process
+type GatheringState int
+
+const (
+	// GatheringStateNew indicates candidate gatering is not yet started
+	GatheringStateNew GatheringState = iota + 1
+
+	// GatheringStateGathering indicates candidate gatering is ongoing
+	GatheringStateGathering
+
+	// GatheringStateComplete indicates candidate gatering has been completed
+	GatheringStateComplete
+)
+
+func (t GatheringState) String() string {
+	switch t {
+	case GatheringStateNew:
+		return "new"
+	case GatheringStateGathering:
+		return "gathering"
+	case GatheringStateComplete:
+		return "complete"
+	default:
+		return ErrUnknownType.Error()
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/icecontrol.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/icecontrol.go
new file mode 100644
index 000000000..ede2e09cb
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/icecontrol.go
@@ -0,0 +1,87 @@
+package ice
+
+import (
+	"encoding/binary"
+
+	"github.com/pion/stun"
+)
+
+// tiebreaker is common helper for ICE-{CONTROLLED,CONTROLLING}
+// and represents the so-called tiebreaker number.
+type tiebreaker uint64
+
+const tiebreakerSize = 8 // 64 bit
+
+// AddToAs adds tiebreaker value to m as t attribute.
+func (a tiebreaker) AddToAs(m *stun.Message, t stun.AttrType) error {
+	v := make([]byte, tiebreakerSize)
+	binary.BigEndian.PutUint64(v, uint64(a))
+	m.Add(t, v)
+	return nil
+}
+
+// GetFromAs decodes tiebreaker value in message getting it as for t type.
+func (a *tiebreaker) GetFromAs(m *stun.Message, t stun.AttrType) error {
+	v, err := m.Get(t)
+	if err != nil {
+		return err
+	}
+	if err = stun.CheckSize(t, len(v), tiebreakerSize); err != nil {
+		return err
+	}
+	*a = tiebreaker(binary.BigEndian.Uint64(v))
+	return nil
+}
+
+// AttrControlled represents ICE-CONTROLLED attribute.
+type AttrControlled uint64
+
+// AddTo adds ICE-CONTROLLED to message.
+func (c AttrControlled) AddTo(m *stun.Message) error {
+	return tiebreaker(c).AddToAs(m, stun.AttrICEControlled)
+}
+
+// GetFrom decodes ICE-CONTROLLED from message.
+func (c *AttrControlled) GetFrom(m *stun.Message) error {
+	return (*tiebreaker)(c).GetFromAs(m, stun.AttrICEControlled)
+}
+
+// AttrControlling represents ICE-CONTROLLING attribute.
+type AttrControlling uint64
+
+// AddTo adds ICE-CONTROLLING to message.
+func (c AttrControlling) AddTo(m *stun.Message) error {
+	return tiebreaker(c).AddToAs(m, stun.AttrICEControlling)
+}
+
+// GetFrom decodes ICE-CONTROLLING from message.
+func (c *AttrControlling) GetFrom(m *stun.Message) error {
+	return (*tiebreaker)(c).GetFromAs(m, stun.AttrICEControlling)
+}
+
+// AttrControl is helper that wraps ICE-{CONTROLLED,CONTROLLING}.
+type AttrControl struct {
+	Role       Role
+	Tiebreaker uint64
+}
+
+// AddTo adds ICE-CONTROLLED or ICE-CONTROLLING attribute depending on Role.
+func (c AttrControl) AddTo(m *stun.Message) error {
+	if c.Role == Controlling {
+		return tiebreaker(c.Tiebreaker).AddToAs(m, stun.AttrICEControlling)
+	}
+	return tiebreaker(c.Tiebreaker).AddToAs(m, stun.AttrICEControlled)
+}
+
+// GetFrom decodes Role and Tiebreaker value from message.
+func (c *AttrControl) GetFrom(m *stun.Message) error {
+	if m.Contains(stun.AttrICEControlling) {
+		c.Role = Controlling
+		return (*tiebreaker)(&c.Tiebreaker).GetFromAs(m, stun.AttrICEControlling)
+	}
+	if m.Contains(stun.AttrICEControlled) {
+		c.Role = Controlled
+		return (*tiebreaker)(&c.Tiebreaker).GetFromAs(m, stun.AttrICEControlled)
+	}
+	return stun.ErrAttributeNotFound
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/mdns.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/mdns.go
new file mode 100644
index 000000000..5a431d152
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/mdns.go
@@ -0,0 +1,63 @@
+package ice
+
+import (
+	"net"
+
+	"github.com/google/uuid"
+	"github.com/pion/logging"
+	"github.com/pion/mdns"
+	"golang.org/x/net/ipv4"
+)
+
+// MulticastDNSMode represents the different Multicast modes ICE can run in
+type MulticastDNSMode byte
+
+// MulticastDNSMode enum
+const (
+	// MulticastDNSModeDisabled means remote mDNS candidates will be discarded, and local host candidates will use IPs
+	MulticastDNSModeDisabled MulticastDNSMode = iota + 1
+
+	// MulticastDNSModeQueryOnly means remote mDNS candidates will be accepted, and local host candidates will use IPs
+	MulticastDNSModeQueryOnly
+
+	// MulticastDNSModeQueryAndGather means remote mDNS candidates will be accepted, and local host candidates will use mDNS
+	MulticastDNSModeQueryAndGather
+)
+
+func generateMulticastDNSName() (string, error) {
+	// https://tools.ietf.org/id/draft-ietf-rtcweb-mdns-ice-candidates-02.html#gathering
+	// The unique name MUST consist of a version 4 UUID as defined in [RFC4122], followed by “.local”.
+	u, err := uuid.NewRandom()
+	return u.String() + ".local", err
+}
+
+func createMulticastDNS(mDNSMode MulticastDNSMode, mDNSName string, log logging.LeveledLogger) (*mdns.Conn, MulticastDNSMode, error) {
+	if mDNSMode == MulticastDNSModeDisabled {
+		return nil, mDNSMode, nil
+	}
+
+	addr, mdnsErr := net.ResolveUDPAddr("udp4", mdns.DefaultAddress)
+	if mdnsErr != nil {
+		return nil, mDNSMode, mdnsErr
+	}
+
+	l, mdnsErr := net.ListenUDP("udp4", addr)
+	if mdnsErr != nil {
+		// If ICE fails to start MulticastDNS server just warn the user and continue
+		log.Errorf("Failed to enable mDNS, continuing in mDNS disabled mode: (%s)", mdnsErr)
+		return nil, MulticastDNSModeDisabled, nil
+	}
+
+	switch mDNSMode {
+	case MulticastDNSModeQueryOnly:
+		conn, err := mdns.Server(ipv4.NewPacketConn(l), &mdns.Config{})
+		return conn, mDNSMode, err
+	case MulticastDNSModeQueryAndGather:
+		conn, err := mdns.Server(ipv4.NewPacketConn(l), &mdns.Config{
+			LocalNames: []string{mDNSName},
+		})
+		return conn, mDNSMode, err
+	default:
+		return nil, mDNSMode, nil
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/networktype.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/networktype.go
new file mode 100644
index 000000000..462ff2dea
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/networktype.go
@@ -0,0 +1,130 @@
+package ice
+
+import (
+	"fmt"
+	"net"
+	"strings"
+)
+
+const (
+	udp = "udp"
+	tcp = "tcp"
+)
+
+func supportedNetworkTypes() []NetworkType {
+	return []NetworkType{
+		NetworkTypeUDP4,
+		NetworkTypeUDP6,
+		NetworkTypeTCP4,
+		NetworkTypeTCP6,
+	}
+}
+
+// NetworkType represents the type of network
+type NetworkType int
+
+const (
+	// NetworkTypeUDP4 indicates UDP over IPv4.
+	NetworkTypeUDP4 NetworkType = iota + 1
+
+	// NetworkTypeUDP6 indicates UDP over IPv6.
+	NetworkTypeUDP6
+
+	// NetworkTypeTCP4 indicates TCP over IPv4.
+	NetworkTypeTCP4
+
+	// NetworkTypeTCP6 indicates TCP over IPv6.
+	NetworkTypeTCP6
+)
+
+func (t NetworkType) String() string {
+	switch t {
+	case NetworkTypeUDP4:
+		return "udp4"
+	case NetworkTypeUDP6:
+		return "udp6"
+	case NetworkTypeTCP4:
+		return "tcp4"
+	case NetworkTypeTCP6:
+		return "tcp6"
+	default:
+		return ErrUnknownType.Error()
+	}
+}
+
+// IsUDP returns true when network is UDP4 or UDP6.
+func (t NetworkType) IsUDP() bool {
+	return t == NetworkTypeUDP4 || t == NetworkTypeUDP6
+}
+
+// IsTCP returns true when network is TCP4 or TCP6.
+func (t NetworkType) IsTCP() bool {
+	return t == NetworkTypeTCP4 || t == NetworkTypeTCP6
+}
+
+// NetworkShort returns the short network description
+func (t NetworkType) NetworkShort() string {
+	switch t {
+	case NetworkTypeUDP4, NetworkTypeUDP6:
+		return udp
+	case NetworkTypeTCP4, NetworkTypeTCP6:
+		return tcp
+	default:
+		return ErrUnknownType.Error()
+	}
+}
+
+// IsReliable returns true if the network is reliable
+func (t NetworkType) IsReliable() bool {
+	switch t {
+	case NetworkTypeUDP4, NetworkTypeUDP6:
+		return false
+	case NetworkTypeTCP4, NetworkTypeTCP6:
+		return true
+	}
+	return false
+}
+
+// IsIPv4 returns whether the network type is IPv4 or not.
+func (t NetworkType) IsIPv4() bool {
+	switch t {
+	case NetworkTypeUDP4, NetworkTypeTCP4:
+		return true
+	case NetworkTypeUDP6, NetworkTypeTCP6:
+		return false
+	}
+	return false
+}
+
+// IsIPv6 returns whether the network type is IPv6 or not.
+func (t NetworkType) IsIPv6() bool {
+	switch t {
+	case NetworkTypeUDP4, NetworkTypeTCP4:
+		return false
+	case NetworkTypeUDP6, NetworkTypeTCP6:
+		return true
+	}
+	return false
+}
+
+// determineNetworkType determines the type of network based on
+// the short network string and an IP address.
+func determineNetworkType(network string, ip net.IP) (NetworkType, error) {
+	ipv4 := ip.To4() != nil
+
+	switch {
+	case strings.HasPrefix(strings.ToLower(network), udp):
+		if ipv4 {
+			return NetworkTypeUDP4, nil
+		}
+		return NetworkTypeUDP6, nil
+
+	case strings.HasPrefix(strings.ToLower(network), tcp):
+		if ipv4 {
+			return NetworkTypeTCP4, nil
+		}
+		return NetworkTypeTCP6, nil
+	}
+
+	return NetworkType(0), fmt.Errorf("%w from %s %s", errDetermineNetworkType, network, ip)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/priority.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/priority.go
new file mode 100644
index 000000000..421829938
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/priority.go
@@ -0,0 +1,33 @@
+package ice
+
+import (
+	"encoding/binary"
+
+	"github.com/pion/stun"
+)
+
+// PriorityAttr represents PRIORITY attribute.
+type PriorityAttr uint32
+
+const prioritySize = 4 // 32 bit
+
+// AddTo adds PRIORITY attribute to message.
+func (p PriorityAttr) AddTo(m *stun.Message) error {
+	v := make([]byte, prioritySize)
+	binary.BigEndian.PutUint32(v, uint32(p))
+	m.Add(stun.AttrPriority, v)
+	return nil
+}
+
+// GetFrom decodes PRIORITY attribute from message.
+func (p *PriorityAttr) GetFrom(m *stun.Message) error {
+	v, err := m.Get(stun.AttrPriority)
+	if err != nil {
+		return err
+	}
+	if err = stun.CheckSize(stun.AttrPriority, len(v), prioritySize); err != nil {
+		return err
+	}
+	*p = PriorityAttr(binary.BigEndian.Uint32(v))
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/rand.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/rand.go
new file mode 100644
index 000000000..918783e02
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/rand.go
@@ -0,0 +1,53 @@
+package ice
+
+import "github.com/pion/randutil"
+
+const (
+	runesAlpha                 = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"
+	runesDigit                 = "0123456789"
+	runesCandidateIDFoundation = runesAlpha + runesDigit + "+/"
+
+	lenUFrag = 16
+	lenPwd   = 32
+)
+
+// Seeding random generator each time limits number of generated sequence to 31-bits,
+// and causes collision on low time accuracy environments.
+// Use global random generator seeded by crypto grade random.
+var (
+	globalMathRandomGenerator  = randutil.NewMathRandomGenerator()               //nolint:gochecknoglobals
+	globalCandidateIDGenerator = candidateIDGenerator{globalMathRandomGenerator} //nolint:gochecknoglobals
+)
+
+// candidateIDGenerator is a random candidate ID generator.
+// Candidate ID is used in SDP and always shared to the other peer.
+// It doesn't require cryptographic random.
+type candidateIDGenerator struct {
+	randutil.MathRandomGenerator
+}
+
+func newCandidateIDGenerator() *candidateIDGenerator {
+	return &candidateIDGenerator{
+		randutil.NewMathRandomGenerator(),
+	}
+}
+
+func (g *candidateIDGenerator) Generate() string {
+	// https://tools.ietf.org/html/rfc5245#section-15.1
+	// candidate-id = "candidate" ":" foundation
+	// foundation   = 1*32ice-char
+	// ice-char     = ALPHA / DIGIT / "+" / "/"
+	return "candidate:" + g.MathRandomGenerator.GenerateString(32, runesCandidateIDFoundation)
+}
+
+// generatePwd generates ICE pwd.
+// This internally uses generateCryptoRandomString.
+func generatePwd() (string, error) {
+	return randutil.GenerateCryptoRandomString(lenPwd, runesAlpha)
+}
+
+// generateUFrag generates ICE user fragment.
+// This internally uses generateCryptoRandomString.
+func generateUFrag() (string, error) {
+	return randutil.GenerateCryptoRandomString(lenUFrag, runesAlpha)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/renovate.json b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/renovate.json
new file mode 100644
index 000000000..4400fd9b2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/renovate.json
@@ -0,0 +1,15 @@
+{
+  "extends": [
+    "config:base"
+  ],
+  "postUpdateOptions": [
+    "gomodTidy"
+  ],
+  "commitBody": "Generated by renovateBot",
+  "packageRules": [
+    {
+      "packagePatterns": ["^golang.org/x/"],
+      "schedule": ["on the first day of the month"]
+    }
+  ]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/role.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/role.go
new file mode 100644
index 000000000..7a8bc064a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/role.go
@@ -0,0 +1,43 @@
+package ice
+
+import (
+	"fmt"
+)
+
+// Role represents ICE agent role, which can be controlling or controlled.
+type Role byte
+
+// Possible ICE agent roles.
+const (
+	Controlling Role = iota
+	Controlled
+)
+
+// UnmarshalText implements TextUnmarshaler.
+func (r *Role) UnmarshalText(text []byte) error {
+	switch string(text) {
+	case "controlling":
+		*r = Controlling
+	case "controlled":
+		*r = Controlled
+	default:
+		return fmt.Errorf("%w %q", errUnknownRole, text)
+	}
+	return nil
+}
+
+// MarshalText implements TextMarshaler.
+func (r Role) MarshalText() (text []byte, err error) {
+	return []byte(r.String()), nil
+}
+
+func (r Role) String() string {
+	switch r {
+	case Controlling:
+		return "controlling"
+	case Controlled:
+		return "controlled"
+	default:
+		return "unknown"
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/selection.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/selection.go
new file mode 100644
index 000000000..e0cfb1034
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/selection.go
@@ -0,0 +1,287 @@
+package ice
+
+import (
+	"net"
+	"time"
+
+	"github.com/pion/logging"
+	"github.com/pion/stun"
+)
+
+type pairCandidateSelector interface {
+	Start()
+	ContactCandidates()
+	PingCandidate(local, remote Candidate)
+	HandleSuccessResponse(m *stun.Message, local, remote Candidate, remoteAddr net.Addr)
+	HandleBindingRequest(m *stun.Message, local, remote Candidate)
+}
+
+type controllingSelector struct {
+	startTime     time.Time
+	agent         *Agent
+	nominatedPair *candidatePair
+	log           logging.LeveledLogger
+}
+
+func (s *controllingSelector) Start() {
+	s.startTime = time.Now()
+	s.nominatedPair = nil
+}
+
+func (s *controllingSelector) isNominatable(c Candidate) bool {
+	switch {
+	case c.Type() == CandidateTypeHost:
+		return time.Since(s.startTime).Nanoseconds() > s.agent.hostAcceptanceMinWait.Nanoseconds()
+	case c.Type() == CandidateTypeServerReflexive:
+		return time.Since(s.startTime).Nanoseconds() > s.agent.srflxAcceptanceMinWait.Nanoseconds()
+	case c.Type() == CandidateTypePeerReflexive:
+		return time.Since(s.startTime).Nanoseconds() > s.agent.prflxAcceptanceMinWait.Nanoseconds()
+	case c.Type() == CandidateTypeRelay:
+		return time.Since(s.startTime).Nanoseconds() > s.agent.relayAcceptanceMinWait.Nanoseconds()
+	}
+
+	s.log.Errorf("isNominatable invalid candidate type %s", c.Type().String())
+	return false
+}
+
+func (s *controllingSelector) ContactCandidates() {
+	switch {
+	case s.agent.getSelectedPair() != nil:
+		if s.agent.validateSelectedPair() {
+			s.log.Trace("checking keepalive")
+			s.agent.checkKeepalive()
+		}
+	case s.nominatedPair != nil:
+		s.nominatePair(s.nominatedPair)
+	default:
+		p := s.agent.getBestValidCandidatePair()
+		if p != nil && s.isNominatable(p.local) && s.isNominatable(p.remote) {
+			s.log.Tracef("Nominatable pair found, nominating (%s, %s)", p.local.String(), p.remote.String())
+			p.nominated = true
+			s.nominatedPair = p
+			s.nominatePair(p)
+			return
+		}
+		s.agent.pingAllCandidates()
+	}
+}
+
+func (s *controllingSelector) nominatePair(pair *candidatePair) {
+	// The controlling agent MUST include the USE-CANDIDATE attribute in
+	// order to nominate a candidate pair (Section 8.1.1).  The controlled
+	// agent MUST NOT include the USE-CANDIDATE attribute in a Binding
+	// request.
+	msg, err := stun.Build(stun.BindingRequest, stun.TransactionID,
+		stun.NewUsername(s.agent.remoteUfrag+":"+s.agent.localUfrag),
+		UseCandidate(),
+		AttrControlling(s.agent.tieBreaker),
+		PriorityAttr(pair.local.Priority()),
+		stun.NewShortTermIntegrity(s.agent.remotePwd),
+		stun.Fingerprint,
+	)
+	if err != nil {
+		s.log.Error(err.Error())
+		return
+	}
+
+	s.log.Tracef("ping STUN (nominate candidate pair) from %s to %s\n", pair.local.String(), pair.remote.String())
+	s.agent.sendBindingRequest(msg, pair.local, pair.remote)
+}
+
+func (s *controllingSelector) HandleBindingRequest(m *stun.Message, local, remote Candidate) {
+	s.agent.sendBindingSuccess(m, local, remote)
+
+	p := s.agent.findPair(local, remote)
+
+	if p == nil {
+		s.agent.addPair(local, remote)
+		return
+	}
+
+	if p.state == CandidatePairStateSucceeded && s.nominatedPair == nil && s.agent.getSelectedPair() == nil {
+		bestPair := s.agent.getBestAvailableCandidatePair()
+		if bestPair == nil {
+			s.log.Tracef("No best pair available\n")
+		} else if bestPair.Equal(p) && s.isNominatable(p.local) && s.isNominatable(p.remote) {
+			s.log.Tracef("The candidate (%s, %s) is the best candidate available, marking it as nominated\n",
+				p.local.String(), p.remote.String())
+			s.nominatedPair = p
+			s.nominatePair(p)
+		}
+	}
+}
+
+func (s *controllingSelector) HandleSuccessResponse(m *stun.Message, local, remote Candidate, remoteAddr net.Addr) {
+	ok, pendingRequest := s.agent.handleInboundBindingSuccess(m.TransactionID)
+	if !ok {
+		s.log.Warnf("discard message from (%s), unknown TransactionID 0x%x", remote, m.TransactionID)
+		return
+	}
+
+	transactionAddr := pendingRequest.destination
+
+	// Assert that NAT is not symmetric
+	// https://tools.ietf.org/html/rfc8445#section-7.2.5.2.1
+	if !addrEqual(transactionAddr, remoteAddr) {
+		s.log.Debugf("discard message: transaction source and destination does not match expected(%s), actual(%s)", transactionAddr, remote)
+		return
+	}
+
+	s.log.Tracef("inbound STUN (SuccessResponse) from %s to %s", remote.String(), local.String())
+	p := s.agent.findPair(local, remote)
+
+	if p == nil {
+		// This shouldn't happen
+		s.log.Error("Success response from invalid candidate pair")
+		return
+	}
+
+	p.state = CandidatePairStateSucceeded
+	s.log.Tracef("Found valid candidate pair: %s", p)
+	if pendingRequest.isUseCandidate && s.agent.getSelectedPair() == nil {
+		s.agent.setSelectedPair(p)
+	}
+}
+
+func (s *controllingSelector) PingCandidate(local, remote Candidate) {
+	msg, err := stun.Build(stun.BindingRequest, stun.TransactionID,
+		stun.NewUsername(s.agent.remoteUfrag+":"+s.agent.localUfrag),
+		AttrControlling(s.agent.tieBreaker),
+		PriorityAttr(local.Priority()),
+		stun.NewShortTermIntegrity(s.agent.remotePwd),
+		stun.Fingerprint,
+	)
+	if err != nil {
+		s.log.Error(err.Error())
+		return
+	}
+
+	s.agent.sendBindingRequest(msg, local, remote)
+}
+
+type controlledSelector struct {
+	agent *Agent
+	log   logging.LeveledLogger
+}
+
+func (s *controlledSelector) Start() {
+}
+
+func (s *controlledSelector) ContactCandidates() {
+	if s.agent.getSelectedPair() != nil {
+		if s.agent.validateSelectedPair() {
+			s.log.Trace("checking keepalive")
+			s.agent.checkKeepalive()
+		}
+	} else {
+		s.agent.pingAllCandidates()
+	}
+}
+
+func (s *controlledSelector) PingCandidate(local, remote Candidate) {
+	msg, err := stun.Build(stun.BindingRequest, stun.TransactionID,
+		stun.NewUsername(s.agent.remoteUfrag+":"+s.agent.localUfrag),
+		AttrControlled(s.agent.tieBreaker),
+		PriorityAttr(local.Priority()),
+		stun.NewShortTermIntegrity(s.agent.remotePwd),
+		stun.Fingerprint,
+	)
+	if err != nil {
+		s.log.Error(err.Error())
+		return
+	}
+
+	s.agent.sendBindingRequest(msg, local, remote)
+}
+
+func (s *controlledSelector) HandleSuccessResponse(m *stun.Message, local, remote Candidate, remoteAddr net.Addr) {
+	// nolint:godox
+	// TODO according to the standard we should specifically answer a failed nomination:
+	// https://tools.ietf.org/html/rfc8445#section-7.3.1.5
+	// If the controlled agent does not accept the request from the
+	// controlling agent, the controlled agent MUST reject the nomination
+	// request with an appropriate error code response (e.g., 400)
+	// [RFC5389].
+
+	ok, pendingRequest := s.agent.handleInboundBindingSuccess(m.TransactionID)
+	if !ok {
+		s.log.Warnf("discard message from (%s), unknown TransactionID 0x%x", remote, m.TransactionID)
+		return
+	}
+
+	transactionAddr := pendingRequest.destination
+
+	// Assert that NAT is not symmetric
+	// https://tools.ietf.org/html/rfc8445#section-7.2.5.2.1
+	if !addrEqual(transactionAddr, remoteAddr) {
+		s.log.Debugf("discard message: transaction source and destination does not match expected(%s), actual(%s)", transactionAddr, remote)
+		return
+	}
+
+	s.log.Tracef("inbound STUN (SuccessResponse) from %s to %s", remote.String(), local.String())
+
+	p := s.agent.findPair(local, remote)
+	if p == nil {
+		// This shouldn't happen
+		s.log.Error("Success response from invalid candidate pair")
+		return
+	}
+
+	p.state = CandidatePairStateSucceeded
+	s.log.Tracef("Found valid candidate pair: %s", p)
+}
+
+func (s *controlledSelector) HandleBindingRequest(m *stun.Message, local, remote Candidate) {
+	useCandidate := m.Contains(stun.AttrUseCandidate)
+
+	p := s.agent.findPair(local, remote)
+
+	if p == nil {
+		p = s.agent.addPair(local, remote)
+	}
+
+	if useCandidate {
+		// https://tools.ietf.org/html/rfc8445#section-7.3.1.5
+
+		if p.state == CandidatePairStateSucceeded {
+			// If the state of this pair is Succeeded, it means that the check
+			// previously sent by this pair produced a successful response and
+			// generated a valid pair (Section 7.2.5.3.2).  The agent sets the
+			// nominated flag value of the valid pair to true.
+			if selectedPair := s.agent.getSelectedPair(); selectedPair == nil {
+				s.agent.setSelectedPair(p)
+			}
+			s.agent.sendBindingSuccess(m, local, remote)
+		} else {
+			// If the received Binding request triggered a new check to be
+			// enqueued in the triggered-check queue (Section 7.3.1.4), once the
+			// check is sent and if it generates a successful response, and
+			// generates a valid pair, the agent sets the nominated flag of the
+			// pair to true.  If the request fails (Section 7.2.5.2), the agent
+			// MUST remove the candidate pair from the valid list, set the
+			// candidate pair state to Failed, and set the checklist state to
+			// Failed.
+			s.PingCandidate(local, remote)
+		}
+	} else {
+		s.agent.sendBindingSuccess(m, local, remote)
+		s.PingCandidate(local, remote)
+	}
+}
+
+type liteSelector struct {
+	pairCandidateSelector
+}
+
+// A lite selector should not contact candidates
+func (s *liteSelector) ContactCandidates() {
+	if _, ok := s.pairCandidateSelector.(*controllingSelector); ok {
+		// nolint:godox
+		// pion/ice#96
+		// TODO: implement lite controlling agent. For now falling back to full agent.
+		// This only happens if both peers are lite. See RFC 8445 S6.1.1 and S6.2
+		s.pairCandidateSelector.ContactCandidates()
+	} else if v, ok := s.pairCandidateSelector.(*controlledSelector); ok {
+		v.agent.validateSelectedPair()
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/stats.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/stats.go
new file mode 100644
index 000000000..f59d89ff9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/stats.go
@@ -0,0 +1,177 @@
+package ice
+
+import (
+	"time"
+)
+
+// CandidatePairStats contains ICE candidate pair statistics
+type CandidatePairStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp time.Time
+
+	// LocalCandidateID is the ID of the local candidate
+	LocalCandidateID string
+
+	// RemoteCandidateID is the ID of the remote candidate
+	RemoteCandidateID string
+
+	// State represents the state of the checklist for the local and remote
+	// candidates in a pair.
+	State CandidatePairState
+
+	// Nominated is true when this valid pair that should be used for media
+	// if it is the highest-priority one amongst those whose nominated flag is set
+	Nominated bool
+
+	// PacketsSent represents the total number of packets sent on this candidate pair.
+	PacketsSent uint32
+
+	// PacketsReceived represents the total number of packets received on this candidate pair.
+	PacketsReceived uint32
+
+	// BytesSent represents the total number of payload bytes sent on this candidate pair
+	// not including headers or padding.
+	BytesSent uint64
+
+	// BytesReceived represents the total number of payload bytes received on this candidate pair
+	// not including headers or padding.
+	BytesReceived uint64
+
+	// LastPacketSentTimestamp represents the timestamp at which the last packet was
+	// sent on this particular candidate pair, excluding STUN packets.
+	LastPacketSentTimestamp time.Time
+
+	// LastPacketReceivedTimestamp represents the timestamp at which the last packet
+	// was received on this particular candidate pair, excluding STUN packets.
+	LastPacketReceivedTimestamp time.Time
+
+	// FirstRequestTimestamp represents the timestamp at which the first STUN request
+	// was sent on this particular candidate pair.
+	FirstRequestTimestamp time.Time
+
+	// LastRequestTimestamp represents the timestamp at which the last STUN request
+	// was sent on this particular candidate pair. The average interval between two
+	// consecutive connectivity checks sent can be calculated with
+	// (LastRequestTimestamp - FirstRequestTimestamp) / RequestsSent.
+	LastRequestTimestamp time.Time
+
+	// LastResponseTimestamp represents the timestamp at which the last STUN response
+	// was received on this particular candidate pair.
+	LastResponseTimestamp time.Time
+
+	// TotalRoundTripTime represents the sum of all round trip time measurements
+	// in seconds since the beginning of the session, based on STUN connectivity
+	// check responses (ResponsesReceived), including those that reply to requests
+	// that are sent in order to verify consent. The average round trip time can
+	// be computed from TotalRoundTripTime by dividing it by ResponsesReceived.
+	TotalRoundTripTime float64
+
+	// CurrentRoundTripTime represents the latest round trip time measured in seconds,
+	// computed from both STUN connectivity checks, including those that are sent
+	// for consent verification.
+	CurrentRoundTripTime float64
+
+	// AvailableOutgoingBitrate is calculated by the underlying congestion control
+	// by combining the available bitrate for all the outgoing RTP streams using
+	// this candidate pair. The bitrate measurement does not count the size of the
+	// IP or other transport layers like TCP or UDP. It is similar to the TIAS defined
+	// in RFC 3890, i.e., it is measured in bits per second and the bitrate is calculated
+	// over a 1 second window.
+	AvailableOutgoingBitrate float64
+
+	// AvailableIncomingBitrate is calculated by the underlying congestion control
+	// by combining the available bitrate for all the incoming RTP streams using
+	// this candidate pair. The bitrate measurement does not count the size of the
+	// IP or other transport layers like TCP or UDP. It is similar to the TIAS defined
+	// in  RFC 3890, i.e., it is measured in bits per second and the bitrate is
+	// calculated over a 1 second window.
+	AvailableIncomingBitrate float64
+
+	// CircuitBreakerTriggerCount represents the number of times the circuit breaker
+	// is triggered for this particular 5-tuple, ceasing transmission.
+	CircuitBreakerTriggerCount uint32
+
+	// RequestsReceived represents the total number of connectivity check requests
+	// received (including retransmissions). It is impossible for the receiver to
+	// tell whether the request was sent in order to check connectivity or check
+	// consent, so all connectivity checks requests are counted here.
+	RequestsReceived uint64
+
+	// RequestsSent represents the total number of connectivity check requests
+	// sent (not including retransmissions).
+	RequestsSent uint64
+
+	// ResponsesReceived represents the total number of connectivity check responses received.
+	ResponsesReceived uint64
+
+	// ResponsesSent epresents the total number of connectivity check responses sent.
+	// Since we cannot distinguish connectivity check requests and consent requests,
+	// all responses are counted.
+	ResponsesSent uint64
+
+	// RetransmissionsReceived represents the total number of connectivity check
+	// request retransmissions received.
+	RetransmissionsReceived uint64
+
+	// RetransmissionsSent represents the total number of connectivity check
+	// request retransmissions sent.
+	RetransmissionsSent uint64
+
+	// ConsentRequestsSent represents the total number of consent requests sent.
+	ConsentRequestsSent uint64
+
+	// ConsentExpiredTimestamp represents the timestamp at which the latest valid
+	// STUN binding response expired.
+	ConsentExpiredTimestamp time.Time
+}
+
+// CandidateStats contains ICE candidate statistics related to the ICETransport objects.
+type CandidateStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp time.Time
+
+	// ID is the candidate ID
+	ID string
+
+	// NetworkType represents the type of network interface used by the base of a
+	// local candidate (the address the ICE agent sends from). Only present for
+	// local candidates; it's not possible to know what type of network interface
+	// a remote candidate is using.
+	//
+	// Note:
+	// This stat only tells you about the network interface used by the first "hop";
+	// it's possible that a connection will be bottlenecked by another type of network.
+	// For example, when using Wi-Fi tethering, the networkType of the relevant candidate
+	// would be "wifi", even when the next hop is over a cellular connection.
+	NetworkType NetworkType
+
+	// IP is the IP address of the candidate, allowing for IPv4 addresses and
+	// IPv6 addresses, but fully qualified domain names (FQDNs) are not allowed.
+	IP string
+
+	// Port is the port number of the candidate.
+	Port int
+
+	// CandidateType is the "Type" field of the ICECandidate.
+	CandidateType CandidateType
+
+	// Priority is the "Priority" field of the ICECandidate.
+	Priority uint32
+
+	// URL is the URL of the TURN or STUN server indicated in the that translated
+	// this IP address. It is the URL address surfaced in an PeerConnectionICEEvent.
+	URL string
+
+	// RelayProtocol is the protocol used by the endpoint to communicate with the
+	// TURN server. This is only present for local candidates. Valid values for
+	// the TURN URL protocol is one of udp, tcp, or tls.
+	RelayProtocol string
+
+	// Deleted is true if the candidate has been deleted/freed. For host candidates,
+	// this means that any network resources (typically a socket) associated with the
+	// candidate have been released. For TURN candidates, this means the TURN allocation
+	// is no longer active.
+	//
+	// Only defined for local candidates. For remote candidates, this property is not applicable.
+	Deleted bool
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/stun.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/stun.go
new file mode 100644
index 000000000..bef7c87e5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/stun.go
@@ -0,0 +1,24 @@
+package ice
+
+import (
+	"fmt"
+
+	"github.com/pion/stun"
+)
+
+func assertInboundUsername(m *stun.Message, expectedUsername string) error {
+	var username stun.Username
+	if err := username.GetFrom(m); err != nil {
+		return err
+	}
+	if string(username) != expectedUsername {
+		return fmt.Errorf("%w expected(%x) actual(%x)", errMismatchUsername, expectedUsername, string(username))
+	}
+
+	return nil
+}
+
+func assertInboundMessageIntegrity(m *stun.Message, key []byte) error {
+	messageIntegrityAttr := stun.MessageIntegrity(key)
+	return messageIntegrityAttr.Check(m)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/tcp_mux.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/tcp_mux.go
new file mode 100644
index 000000000..1a9a797a5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/tcp_mux.go
@@ -0,0 +1,295 @@
+package ice
+
+import (
+	"encoding/binary"
+	"io"
+	"net"
+	"strings"
+	"sync"
+
+	"github.com/pion/logging"
+	"github.com/pion/stun"
+)
+
+// TCPMux is allows grouping multiple TCP net.Conns and using them like UDP
+// net.PacketConns. The main implementation of this is TCPMuxDefault, and this
+// interface exists to:
+// 1. prevent SEGV panics when TCPMuxDefault is not initialized by using the
+//    invalidTCPMux implementation, and
+// 2. allow mocking in tests.
+type TCPMux interface {
+	io.Closer
+	GetConnByUfrag(ufrag string) (net.PacketConn, error)
+	RemoveConnByUfrag(ufrag string)
+}
+
+// invalidTCPMux is an implementation of TCPMux that always returns ErroTCPMuxNotInitialized.
+type invalidTCPMux struct {
+}
+
+func newInvalidTCPMux() *invalidTCPMux {
+	return &invalidTCPMux{}
+}
+
+// Close implements TCPMux interface.
+func (m *invalidTCPMux) Close() error {
+	return ErrTCPMuxNotInitialized
+}
+
+// GetConnByUfrag implements TCPMux interface.
+func (m *invalidTCPMux) GetConnByUfrag(ufrag string) (net.PacketConn, error) {
+	return nil, ErrTCPMuxNotInitialized
+}
+
+// RemoveConnByUfrag implements TCPMux interface.
+func (m *invalidTCPMux) RemoveConnByUfrag(ufrag string) {}
+
+// TCPMuxDefault muxes TCP net.Conns into net.PacketConns and groups them by
+// Ufrag. It is a default implementation of TCPMux interface.
+type TCPMuxDefault struct {
+	params *TCPMuxParams
+	closed bool
+
+	// conns is a map of all tcpPacketConns indexed by ufrag
+	conns map[string]*tcpPacketConn
+
+	mu sync.Mutex
+	wg sync.WaitGroup
+}
+
+// TCPMuxParams are parameters for TCPMux.
+type TCPMuxParams struct {
+	Listener       net.Listener
+	Logger         logging.LeveledLogger
+	ReadBufferSize int
+}
+
+// NewTCPMuxDefault creates a new instance of TCPMuxDefault.
+func NewTCPMuxDefault(params TCPMuxParams) *TCPMuxDefault {
+	if params.Logger == nil {
+		params.Logger = logging.NewDefaultLoggerFactory().NewLogger("ice")
+	}
+
+	m := &TCPMuxDefault{
+		params: &params,
+
+		conns: map[string]*tcpPacketConn{},
+	}
+
+	m.wg.Add(1)
+	go func() {
+		defer m.wg.Done()
+		m.start()
+	}()
+
+	return m
+}
+
+func (m *TCPMuxDefault) start() {
+	m.params.Logger.Infof("Listening TCP on %s\n", m.params.Listener.Addr())
+	for {
+		conn, err := m.params.Listener.Accept()
+		if err != nil {
+			m.params.Logger.Infof("Error accepting connection: %s\n", err)
+			return
+		}
+
+		m.params.Logger.Debugf("Accepted connection from: %s to %s", conn.RemoteAddr(), conn.LocalAddr())
+
+		m.wg.Add(1)
+		go func() {
+			defer m.wg.Done()
+			m.handleConn(conn)
+		}()
+	}
+}
+
+// LocalAddr returns the listening address of this TCPMuxDefault.
+func (m *TCPMuxDefault) LocalAddr() net.Addr {
+	return m.params.Listener.Addr()
+}
+
+// GetConnByUfrag retrieves an existing or creates a new net.PacketConn.
+func (m *TCPMuxDefault) GetConnByUfrag(ufrag string) (net.PacketConn, error) {
+	m.mu.Lock()
+	defer m.mu.Unlock()
+
+	if m.closed {
+		return nil, io.ErrClosedPipe
+	}
+
+	conn, ok := m.conns[ufrag]
+
+	if ok {
+		return conn, nil
+		// return nil, fmt.Errorf("duplicate ufrag %v", ufrag)
+	}
+
+	conn = m.createConn(ufrag, m.LocalAddr())
+
+	return conn, nil
+}
+
+func (m *TCPMuxDefault) createConn(ufrag string, localAddr net.Addr) *tcpPacketConn {
+	conn := newTCPPacketConn(tcpPacketParams{
+		ReadBuffer: m.params.ReadBufferSize,
+		LocalAddr:  localAddr,
+		Logger:     m.params.Logger,
+	})
+	m.conns[ufrag] = conn
+
+	m.wg.Add(1)
+	go func() {
+		defer m.wg.Done()
+		<-conn.CloseChannel()
+		m.RemoveConnByUfrag(ufrag)
+	}()
+
+	return conn
+}
+
+func (m *TCPMuxDefault) closeAndLogError(closer io.Closer) {
+	err := closer.Close()
+	if err != nil {
+		m.params.Logger.Warnf("Error closing connection: %s", err)
+	}
+}
+
+func (m *TCPMuxDefault) handleConn(conn net.Conn) {
+	buf := make([]byte, receiveMTU)
+
+	n, err := readStreamingPacket(conn, buf)
+	if err != nil {
+		m.params.Logger.Warnf("Error reading first packet: %s", err)
+		return
+	}
+
+	buf = buf[:n]
+
+	msg := &stun.Message{
+		Raw: make([]byte, len(buf)),
+	}
+	// Explicitly copy raw buffer so Message can own the memory.
+	copy(msg.Raw, buf)
+	if err = msg.Decode(); err != nil {
+		m.closeAndLogError(conn)
+		m.params.Logger.Warnf("Failed to handle decode ICE from %s to %s: %v\n", conn.RemoteAddr(), conn.LocalAddr(), err)
+		return
+	}
+
+	if m == nil || msg.Type.Method != stun.MethodBinding { // not a stun
+		m.closeAndLogError(conn)
+		m.params.Logger.Warnf("Not a STUN message from %s to %s\n", conn.RemoteAddr(), conn.LocalAddr())
+		return
+	}
+
+	for _, attr := range msg.Attributes {
+		m.params.Logger.Debugf("msg attr: %s\n", attr.String())
+	}
+
+	attr, err := msg.Get(stun.AttrUsername)
+	if err != nil {
+		m.closeAndLogError(conn)
+		m.params.Logger.Warnf("No Username attribute in STUN message from %s to %s\n", conn.RemoteAddr(), conn.LocalAddr())
+		return
+	}
+
+	ufrag := strings.Split(string(attr), ":")[0]
+	m.params.Logger.Debugf("Ufrag: %s\n", ufrag)
+
+	m.mu.Lock()
+	defer m.mu.Unlock()
+
+	packetConn, ok := m.conns[ufrag]
+	if !ok {
+		packetConn = m.createConn(ufrag, conn.LocalAddr())
+	}
+
+	if err := packetConn.AddConn(conn, buf); err != nil {
+		m.closeAndLogError(conn)
+		m.params.Logger.Warnf("Error adding conn to tcpPacketConn from %s to %s: %s\n", conn.RemoteAddr(), conn.LocalAddr(), err)
+		return
+	}
+}
+
+// Close closes the listener and waits for all goroutines to exit.
+func (m *TCPMuxDefault) Close() error {
+	m.mu.Lock()
+	m.closed = true
+
+	for _, conn := range m.conns {
+		m.closeAndLogError(conn)
+	}
+	m.conns = map[string]*tcpPacketConn{}
+
+	err := m.params.Listener.Close()
+
+	m.mu.Unlock()
+
+	m.wg.Wait()
+
+	return err
+}
+
+// RemoveConnByUfrag closes and removes a net.PacketConn by Ufrag.
+func (m *TCPMuxDefault) RemoveConnByUfrag(ufrag string) {
+	m.mu.Lock()
+	defer m.mu.Unlock()
+
+	if conn, ok := m.conns[ufrag]; ok {
+		m.closeAndLogError(conn)
+		delete(m.conns, ufrag)
+	}
+}
+
+const streamingPacketHeaderLen = 2
+
+// readStreamingPacket reads 1 packet from stream
+// read packet  bytes https://tools.ietf.org/html/rfc4571#section-2
+// 2-byte length header prepends each packet:
+//     0                   1                   2                   3
+//     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+//    -----------------------------------------------------------------
+//    |             LENGTH            |  RTP or RTCP packet ...       |
+//    -----------------------------------------------------------------
+func readStreamingPacket(conn net.Conn, buf []byte) (int, error) {
+	header := make([]byte, streamingPacketHeaderLen)
+	var bytesRead, n int
+	var err error
+
+	for bytesRead < streamingPacketHeaderLen {
+		if n, err = conn.Read(header[bytesRead:streamingPacketHeaderLen]); err != nil {
+			return 0, err
+		}
+		bytesRead += n
+	}
+
+	length := int(binary.BigEndian.Uint16(header))
+
+	if length > cap(buf) {
+		return length, io.ErrShortBuffer
+	}
+
+	bytesRead = 0
+	for bytesRead < length {
+		if n, err = conn.Read(buf[bytesRead:length]); err != nil {
+			return 0, err
+		}
+		bytesRead += n
+	}
+
+	return bytesRead, nil
+}
+
+func writeStreamingPacket(conn net.Conn, buf []byte) (int, error) {
+	bufferCopy := make([]byte, streamingPacketHeaderLen+len(buf))
+	binary.BigEndian.PutUint16(bufferCopy, uint16(len(buf)))
+	copy(bufferCopy[2:], buf)
+
+	n, err := conn.Write(bufferCopy)
+	if err != nil {
+		return 0, err
+	}
+
+	return n - streamingPacketHeaderLen, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/tcp_packet_conn.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/tcp_packet_conn.go
new file mode 100644
index 000000000..dc4eaf04f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/tcp_packet_conn.go
@@ -0,0 +1,240 @@
+package ice
+
+import (
+	"fmt"
+	"io"
+	"net"
+	"sync"
+	"time"
+
+	"github.com/pion/logging"
+)
+
+type tcpPacketConn struct {
+	params *tcpPacketParams
+
+	// conns is a map of net.Conns indexed by remote net.Addr.String()
+	conns map[string]net.Conn
+
+	recvChan chan streamingPacket
+
+	mu         sync.Mutex
+	wg         sync.WaitGroup
+	closedChan chan struct{}
+	closeOnce  sync.Once
+}
+
+type streamingPacket struct {
+	Data  []byte
+	RAddr net.Addr
+	Err   error
+}
+
+type tcpPacketParams struct {
+	ReadBuffer int
+	LocalAddr  net.Addr
+	Logger     logging.LeveledLogger
+}
+
+func newTCPPacketConn(params tcpPacketParams) *tcpPacketConn {
+	p := &tcpPacketConn{
+		params: &params,
+
+		conns: map[string]net.Conn{},
+
+		recvChan:   make(chan streamingPacket, params.ReadBuffer),
+		closedChan: make(chan struct{}),
+	}
+
+	return p
+}
+
+func (t *tcpPacketConn) AddConn(conn net.Conn, firstPacketData []byte) error {
+	t.params.Logger.Infof("AddConn: %s %s", conn.RemoteAddr().Network(), conn.RemoteAddr())
+
+	t.mu.Lock()
+	defer t.mu.Unlock()
+
+	select {
+	case <-t.closedChan:
+		return io.ErrClosedPipe
+	default:
+	}
+
+	if _, ok := t.conns[conn.RemoteAddr().String()]; ok {
+		return fmt.Errorf("%w: %s", errConnectionAddrAlreadyExist, conn.RemoteAddr().String())
+	}
+
+	t.conns[conn.RemoteAddr().String()] = conn
+
+	t.wg.Add(1)
+	go func() {
+		if firstPacketData != nil {
+			t.recvChan <- streamingPacket{firstPacketData, conn.RemoteAddr(), nil}
+		}
+		defer t.wg.Done()
+		t.startReading(conn)
+	}()
+
+	return nil
+}
+
+func (t *tcpPacketConn) startReading(conn net.Conn) {
+	buf := make([]byte, receiveMTU)
+
+	for {
+		n, err := readStreamingPacket(conn, buf)
+		// t.params.Logger.Infof("readStreamingPacket read %d bytes", n)
+		if err != nil {
+			t.params.Logger.Infof("%w: %s\n", errReadingStreamingPacket, err)
+			t.handleRecv(streamingPacket{nil, conn.RemoteAddr(), err})
+			t.removeConn(conn)
+			return
+		}
+
+		data := make([]byte, n)
+		copy(data, buf[:n])
+
+		// t.params.Logger.Infof("Writing read streaming packet to recvChan: %d bytes", len(data))
+		t.handleRecv(streamingPacket{data, conn.RemoteAddr(), nil})
+	}
+}
+
+func (t *tcpPacketConn) handleRecv(pkt streamingPacket) {
+	t.mu.Lock()
+
+	recvChan := t.recvChan
+	if t.isClosed() {
+		recvChan = nil
+	}
+
+	t.mu.Unlock()
+
+	select {
+	case recvChan <- pkt:
+	case <-t.closedChan:
+	}
+}
+
+func (t *tcpPacketConn) isClosed() bool {
+	select {
+	case <-t.closedChan:
+		return true
+	default:
+		return false
+	}
+}
+
+// WriteTo is for passive and s-o candidates.
+func (t *tcpPacketConn) ReadFrom(b []byte) (n int, raddr net.Addr, err error) {
+	pkt, ok := <-t.recvChan
+
+	if !ok {
+		return 0, nil, io.ErrClosedPipe
+	}
+
+	if pkt.Err != nil {
+		return 0, pkt.RAddr, pkt.Err
+	}
+
+	if cap(b) < len(pkt.Data) {
+		return 0, pkt.RAddr, io.ErrShortBuffer
+	}
+
+	n = len(pkt.Data)
+	copy(b, pkt.Data[:n])
+	return n, pkt.RAddr, err
+}
+
+// WriteTo is for active and s-o candidates.
+func (t *tcpPacketConn) WriteTo(buf []byte, raddr net.Addr) (n int, err error) {
+	t.mu.Lock()
+	defer t.mu.Unlock()
+
+	conn, ok := t.conns[raddr.String()]
+	if !ok {
+		return 0, io.ErrClosedPipe
+		// conn, err := net.DialTCP(tcp, nil, raddr.(*net.TCPAddr))
+
+		// if err != nil {
+		// 	t.params.Logger.Tracef("DialTCP error: %s", err)
+		// 	return 0, err
+		// }
+
+		// go t.startReading(conn)
+		// t.conns[raddr.String()] = conn
+	}
+
+	n, err = writeStreamingPacket(conn, buf)
+	if err != nil {
+		t.params.Logger.Tracef("%w %s\n", errWriting, raddr)
+		return n, err
+	}
+
+	return n, err
+}
+
+func (t *tcpPacketConn) closeAndLogError(closer io.Closer) {
+	err := closer.Close()
+	if err != nil {
+		t.params.Logger.Warnf("%w: %s", errClosingConnection, err)
+	}
+}
+
+func (t *tcpPacketConn) removeConn(conn net.Conn) {
+	t.mu.Lock()
+	defer t.mu.Unlock()
+
+	t.closeAndLogError(conn)
+
+	delete(t.conns, conn.RemoteAddr().String())
+}
+
+func (t *tcpPacketConn) Close() error {
+	t.mu.Lock()
+
+	var shouldCloseRecvChan bool
+	t.closeOnce.Do(func() {
+		close(t.closedChan)
+		shouldCloseRecvChan = true
+	})
+
+	for _, conn := range t.conns {
+		t.closeAndLogError(conn)
+		delete(t.conns, conn.RemoteAddr().String())
+	}
+
+	t.mu.Unlock()
+
+	t.wg.Wait()
+
+	if shouldCloseRecvChan {
+		close(t.recvChan)
+	}
+
+	return nil
+}
+
+func (t *tcpPacketConn) LocalAddr() net.Addr {
+	return t.params.LocalAddr
+}
+
+func (t *tcpPacketConn) SetDeadline(tm time.Time) error {
+	return nil
+}
+
+func (t *tcpPacketConn) SetReadDeadline(tm time.Time) error {
+	return nil
+}
+
+func (t *tcpPacketConn) SetWriteDeadline(tm time.Time) error {
+	return nil
+}
+
+func (t *tcpPacketConn) CloseChannel() <-chan struct{} {
+	return t.closedChan
+}
+
+func (t *tcpPacketConn) String() string {
+	return fmt.Sprintf("tcpPacketConn{LocalAddr: %s}", t.params.LocalAddr)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/tcptype.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/tcptype.go
new file mode 100644
index 000000000..6700fe5ff
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/tcptype.go
@@ -0,0 +1,48 @@
+package ice
+
+import "strings"
+
+// TCPType is the type of ICE TCP candidate as described in
+// ttps://tools.ietf.org/html/rfc6544#section-4.5
+type TCPType int
+
+const (
+	// TCPTypeUnspecified is the default value. For example UDP candidates do not
+	// need this field.
+	TCPTypeUnspecified TCPType = iota
+	// TCPTypeActive is active TCP candidate, which initiates TCP connections.
+	TCPTypeActive
+	// TCPTypePassive is passive TCP candidate, only accepts TCP connections.
+	TCPTypePassive
+	// TCPTypeSimultaneousOpen is like active and passive at the same time.
+	TCPTypeSimultaneousOpen
+)
+
+// NewTCPType creates a new TCPType from string.
+func NewTCPType(value string) TCPType {
+	switch strings.ToLower(value) {
+	case "active":
+		return TCPTypeActive
+	case "passive":
+		return TCPTypePassive
+	case "so":
+		return TCPTypeSimultaneousOpen
+	default:
+		return TCPTypeUnspecified
+	}
+}
+
+func (t TCPType) String() string {
+	switch t {
+	case TCPTypeUnspecified:
+		return ""
+	case TCPTypeActive:
+		return "active"
+	case TCPTypePassive:
+		return "passive"
+	case TCPTypeSimultaneousOpen:
+		return "so"
+	default:
+		return ErrUnknownType.Error()
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/transport.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/transport.go
new file mode 100644
index 000000000..d1c82ffff
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/transport.go
@@ -0,0 +1,145 @@
+package ice
+
+import (
+	"context"
+	"net"
+	"sync/atomic"
+	"time"
+
+	"github.com/pion/stun"
+)
+
+// Dial connects to the remote agent, acting as the controlling ice agent.
+// Dial blocks until at least one ice candidate pair has successfully connected.
+func (a *Agent) Dial(ctx context.Context, remoteUfrag, remotePwd string) (*Conn, error) {
+	return a.connect(ctx, true, remoteUfrag, remotePwd)
+}
+
+// Accept connects to the remote agent, acting as the controlled ice agent.
+// Accept blocks until at least one ice candidate pair has successfully connected.
+func (a *Agent) Accept(ctx context.Context, remoteUfrag, remotePwd string) (*Conn, error) {
+	return a.connect(ctx, false, remoteUfrag, remotePwd)
+}
+
+// Conn represents the ICE connection.
+// At the moment the lifetime of the Conn is equal to the Agent.
+type Conn struct {
+	bytesReceived uint64
+	bytesSent     uint64
+	agent         *Agent
+}
+
+// BytesSent returns the number of bytes sent
+func (c *Conn) BytesSent() uint64 {
+	return atomic.LoadUint64(&c.bytesSent)
+}
+
+// BytesReceived returns the number of bytes received
+func (c *Conn) BytesReceived() uint64 {
+	return atomic.LoadUint64(&c.bytesReceived)
+}
+
+func (a *Agent) connect(ctx context.Context, isControlling bool, remoteUfrag, remotePwd string) (*Conn, error) {
+	err := a.ok()
+	if err != nil {
+		return nil, err
+	}
+	err = a.startConnectivityChecks(isControlling, remoteUfrag, remotePwd)
+	if err != nil {
+		return nil, err
+	}
+
+	// block until pair selected
+	select {
+	case <-a.done:
+		return nil, a.getErr()
+	case <-ctx.Done():
+		return nil, ErrCanceledByCaller
+	case <-a.onConnected:
+	}
+
+	return &Conn{
+		agent: a,
+	}, nil
+}
+
+// Read implements the Conn Read method.
+func (c *Conn) Read(p []byte) (int, error) {
+	err := c.agent.ok()
+	if err != nil {
+		return 0, err
+	}
+
+	n, err := c.agent.buffer.Read(p)
+	atomic.AddUint64(&c.bytesReceived, uint64(n))
+	return n, err
+}
+
+// Write implements the Conn Write method.
+func (c *Conn) Write(p []byte) (int, error) {
+	err := c.agent.ok()
+	if err != nil {
+		return 0, err
+	}
+
+	if stun.IsMessage(p) {
+		return 0, errICEWriteSTUNMessage
+	}
+
+	pair := c.agent.getSelectedPair()
+	if pair == nil {
+		if err = c.agent.run(c.agent.context(), func(ctx context.Context, a *Agent) {
+			pair = a.getBestValidCandidatePair()
+		}); err != nil {
+			return 0, err
+		}
+
+		if pair == nil {
+			return 0, err
+		}
+	}
+
+	atomic.AddUint64(&c.bytesSent, uint64(len(p)))
+	return pair.Write(p)
+}
+
+// Close implements the Conn Close method. It is used to close
+// the connection. Any calls to Read and Write will be unblocked and return an error.
+func (c *Conn) Close() error {
+	return c.agent.Close()
+}
+
+// LocalAddr returns the local address of the current selected pair or nil if there is none.
+func (c *Conn) LocalAddr() net.Addr {
+	pair := c.agent.getSelectedPair()
+	if pair == nil {
+		return nil
+	}
+
+	return pair.local.addr()
+}
+
+// RemoteAddr returns the remote address of the current selected pair or nil if there is none.
+func (c *Conn) RemoteAddr() net.Addr {
+	pair := c.agent.getSelectedPair()
+	if pair == nil {
+		return nil
+	}
+
+	return pair.remote.addr()
+}
+
+// SetDeadline is a stub
+func (c *Conn) SetDeadline(t time.Time) error {
+	return nil
+}
+
+// SetReadDeadline is a stub
+func (c *Conn) SetReadDeadline(t time.Time) error {
+	return nil
+}
+
+// SetWriteDeadline is a stub
+func (c *Conn) SetWriteDeadline(t time.Time) error {
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/url.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/url.go
new file mode 100644
index 000000000..390591e3d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/url.go
@@ -0,0 +1,225 @@
+package ice
+
+import (
+	"net"
+	"net/url"
+	"strconv"
+)
+
+// SchemeType indicates the type of server used in the ice.URL structure.
+type SchemeType int
+
+// Unknown defines default public constant to use for "enum" like struct
+// comparisons when no value was defined.
+const Unknown = iota
+
+const (
+	// SchemeTypeSTUN indicates the URL represents a STUN server.
+	SchemeTypeSTUN SchemeType = iota + 1
+
+	// SchemeTypeSTUNS indicates the URL represents a STUNS (secure) server.
+	SchemeTypeSTUNS
+
+	// SchemeTypeTURN indicates the URL represents a TURN server.
+	SchemeTypeTURN
+
+	// SchemeTypeTURNS indicates the URL represents a TURNS (secure) server.
+	SchemeTypeTURNS
+)
+
+// NewSchemeType defines a procedure for creating a new SchemeType from a raw
+// string naming the scheme type.
+func NewSchemeType(raw string) SchemeType {
+	switch raw {
+	case "stun":
+		return SchemeTypeSTUN
+	case "stuns":
+		return SchemeTypeSTUNS
+	case "turn":
+		return SchemeTypeTURN
+	case "turns":
+		return SchemeTypeTURNS
+	default:
+		return SchemeType(Unknown)
+	}
+}
+
+func (t SchemeType) String() string {
+	switch t {
+	case SchemeTypeSTUN:
+		return "stun"
+	case SchemeTypeSTUNS:
+		return "stuns"
+	case SchemeTypeTURN:
+		return "turn"
+	case SchemeTypeTURNS:
+		return "turns"
+	default:
+		return ErrUnknownType.Error()
+	}
+}
+
+// ProtoType indicates the transport protocol type that is used in the ice.URL
+// structure.
+type ProtoType int
+
+const (
+	// ProtoTypeUDP indicates the URL uses a UDP transport.
+	ProtoTypeUDP ProtoType = iota + 1
+
+	// ProtoTypeTCP indicates the URL uses a TCP transport.
+	ProtoTypeTCP
+)
+
+// NewProtoType defines a procedure for creating a new ProtoType from a raw
+// string naming the transport protocol type.
+func NewProtoType(raw string) ProtoType {
+	switch raw {
+	case "udp":
+		return ProtoTypeUDP
+	case "tcp":
+		return ProtoTypeTCP
+	default:
+		return ProtoType(Unknown)
+	}
+}
+
+func (t ProtoType) String() string {
+	switch t {
+	case ProtoTypeUDP:
+		return "udp"
+	case ProtoTypeTCP:
+		return "tcp"
+	default:
+		return ErrUnknownType.Error()
+	}
+}
+
+// URL represents a STUN (rfc7064) or TURN (rfc7065) URL
+type URL struct {
+	Scheme   SchemeType
+	Host     string
+	Port     int
+	Username string
+	Password string
+	Proto    ProtoType
+}
+
+// ParseURL parses a STUN or TURN urls following the ABNF syntax described in
+// https://tools.ietf.org/html/rfc7064 and https://tools.ietf.org/html/rfc7065
+// respectively.
+func ParseURL(raw string) (*URL, error) { //nolint:gocognit
+	rawParts, err := url.Parse(raw)
+	if err != nil {
+		return nil, err
+	}
+
+	var u URL
+	u.Scheme = NewSchemeType(rawParts.Scheme)
+	if u.Scheme == SchemeType(Unknown) {
+		return nil, ErrSchemeType
+	}
+
+	var rawPort string
+	if u.Host, rawPort, err = net.SplitHostPort(rawParts.Opaque); err != nil {
+		if e, ok := err.(*net.AddrError); ok {
+			if e.Err == "missing port in address" {
+				nextRawURL := u.Scheme.String() + ":" + rawParts.Opaque
+				switch {
+				case u.Scheme == SchemeTypeSTUN || u.Scheme == SchemeTypeTURN:
+					nextRawURL += ":3478"
+					if rawParts.RawQuery != "" {
+						nextRawURL += "?" + rawParts.RawQuery
+					}
+					return ParseURL(nextRawURL)
+				case u.Scheme == SchemeTypeSTUNS || u.Scheme == SchemeTypeTURNS:
+					nextRawURL += ":5349"
+					if rawParts.RawQuery != "" {
+						nextRawURL += "?" + rawParts.RawQuery
+					}
+					return ParseURL(nextRawURL)
+				}
+			}
+		}
+		return nil, err
+	}
+
+	if u.Host == "" {
+		return nil, ErrHost
+	}
+
+	if u.Port, err = strconv.Atoi(rawPort); err != nil {
+		return nil, ErrPort
+	}
+
+	switch u.Scheme {
+	case SchemeTypeSTUN:
+		qArgs, err := url.ParseQuery(rawParts.RawQuery)
+		if err != nil || len(qArgs) > 0 {
+			return nil, ErrSTUNQuery
+		}
+		u.Proto = ProtoTypeUDP
+	case SchemeTypeSTUNS:
+		qArgs, err := url.ParseQuery(rawParts.RawQuery)
+		if err != nil || len(qArgs) > 0 {
+			return nil, ErrSTUNQuery
+		}
+		u.Proto = ProtoTypeTCP
+	case SchemeTypeTURN:
+		proto, err := parseProto(rawParts.RawQuery)
+		if err != nil {
+			return nil, err
+		}
+
+		u.Proto = proto
+		if u.Proto == ProtoType(Unknown) {
+			u.Proto = ProtoTypeUDP
+		}
+	case SchemeTypeTURNS:
+		proto, err := parseProto(rawParts.RawQuery)
+		if err != nil {
+			return nil, err
+		}
+
+		u.Proto = proto
+		if u.Proto == ProtoType(Unknown) {
+			u.Proto = ProtoTypeTCP
+		}
+	}
+
+	return &u, nil
+}
+
+func parseProto(raw string) (ProtoType, error) {
+	qArgs, err := url.ParseQuery(raw)
+	if err != nil || len(qArgs) > 1 {
+		return ProtoType(Unknown), ErrInvalidQuery
+	}
+
+	var proto ProtoType
+	if rawProto := qArgs.Get("transport"); rawProto != "" {
+		if proto = NewProtoType(rawProto); proto == ProtoType(0) {
+			return ProtoType(Unknown), ErrProtoType
+		}
+		return proto, nil
+	}
+
+	if len(qArgs) > 0 {
+		return ProtoType(Unknown), ErrInvalidQuery
+	}
+
+	return proto, nil
+}
+
+func (u URL) String() string {
+	rawURL := u.Scheme.String() + ":" + net.JoinHostPort(u.Host, strconv.Itoa(u.Port))
+	if u.Scheme == SchemeTypeTURN || u.Scheme == SchemeTypeTURNS {
+		rawURL += "?transport=" + u.Proto.String()
+	}
+	return rawURL
+}
+
+// IsSecure returns whether the this URL's scheme describes secure scheme or not.
+func (u URL) IsSecure() bool {
+	return u.Scheme == SchemeTypeSTUNS || u.Scheme == SchemeTypeTURNS
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/usecandidate.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/usecandidate.go
new file mode 100644
index 000000000..f168c08eb
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/usecandidate.go
@@ -0,0 +1,23 @@
+package ice
+
+import "github.com/pion/stun"
+
+// UseCandidateAttr represents USE-CANDIDATE attribute.
+type UseCandidateAttr struct{}
+
+// AddTo adds USE-CANDIDATE attribute to message.
+func (UseCandidateAttr) AddTo(m *stun.Message) error {
+	m.Add(stun.AttrUseCandidate, nil)
+	return nil
+}
+
+// IsSet returns true if USE-CANDIDATE attribute is set.
+func (UseCandidateAttr) IsSet(m *stun.Message) bool {
+	_, err := m.Get(stun.AttrUseCandidate)
+	return err == nil
+}
+
+// UseCandidate is shorthand for UseCandidateAttr.
+func UseCandidate() UseCandidateAttr {
+	return UseCandidateAttr{}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/util.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/util.go
new file mode 100644
index 000000000..7eb13c803
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/ice/v2/util.go
@@ -0,0 +1,233 @@
+package ice
+
+import (
+	"fmt"
+	"net"
+	"sync/atomic"
+	"time"
+
+	"github.com/pion/logging"
+	"github.com/pion/stun"
+	"github.com/pion/transport/vnet"
+)
+
+type atomicError struct{ v atomic.Value }
+
+func (a *atomicError) Store(err error) {
+	a.v.Store(struct{ error }{err})
+}
+
+func (a *atomicError) Load() error {
+	err, _ := a.v.Load().(struct{ error })
+	return err.error
+}
+
+// The conditions of invalidation written below are defined in
+// https://tools.ietf.org/html/rfc8445#section-5.1.1.1
+func isSupportedIPv6(ip net.IP) bool {
+	if len(ip) != net.IPv6len ||
+		isZeros(ip[0:12]) || // !(IPv4-compatible IPv6)
+		ip[0] == 0xfe && ip[1]&0xc0 == 0xc0 || // !(IPv6 site-local unicast)
+		ip.IsLinkLocalUnicast() ||
+		ip.IsLinkLocalMulticast() {
+		return false
+	}
+	return true
+}
+
+func isZeros(ip net.IP) bool {
+	for i := 0; i < len(ip); i++ {
+		if ip[i] != 0 {
+			return false
+		}
+	}
+	return true
+}
+
+func parseAddr(in net.Addr) (net.IP, int, NetworkType, bool) {
+	switch addr := in.(type) {
+	case *net.UDPAddr:
+		return addr.IP, addr.Port, NetworkTypeUDP4, true
+	case *net.TCPAddr:
+		return addr.IP, addr.Port, NetworkTypeTCP4, true
+	}
+	return nil, 0, 0, false
+}
+
+func createAddr(network NetworkType, ip net.IP, port int) net.Addr {
+	switch {
+	case network.IsTCP():
+		return &net.TCPAddr{IP: ip, Port: port}
+	default:
+		return &net.UDPAddr{IP: ip, Port: port}
+	}
+}
+
+func addrEqual(a, b net.Addr) bool {
+	aIP, aPort, aType, aOk := parseAddr(a)
+	if !aOk {
+		return false
+	}
+
+	bIP, bPort, bType, bOk := parseAddr(b)
+	if !bOk {
+		return false
+	}
+
+	return aType == bType && aIP.Equal(bIP) && aPort == bPort
+}
+
+// getXORMappedAddr initiates a stun requests to serverAddr using conn, reads the response and returns
+// the XORMappedAddress returned by the stun server.
+//
+// Adapted from stun v0.2.
+func getXORMappedAddr(conn net.PacketConn, serverAddr net.Addr, deadline time.Duration) (*stun.XORMappedAddress, error) {
+	if deadline > 0 {
+		if err := conn.SetReadDeadline(time.Now().Add(deadline)); err != nil {
+			return nil, err
+		}
+	}
+	defer func() {
+		if deadline > 0 {
+			_ = conn.SetReadDeadline(time.Time{})
+		}
+	}()
+	resp, err := stunRequest(
+		func(p []byte) (int, error) {
+			n, _, errr := conn.ReadFrom(p)
+			return n, errr
+		},
+		func(b []byte) (int, error) {
+			return conn.WriteTo(b, serverAddr)
+		},
+	)
+	if err != nil {
+		return nil, err
+	}
+	var addr stun.XORMappedAddress
+	if err = addr.GetFrom(resp); err != nil {
+		return nil, fmt.Errorf("%w: %v", errGetXorMappedAddrResponse, err)
+	}
+	return &addr, nil
+}
+
+func stunRequest(read func([]byte) (int, error), write func([]byte) (int, error)) (*stun.Message, error) {
+	req, err := stun.Build(stun.BindingRequest, stun.TransactionID)
+	if err != nil {
+		return nil, err
+	}
+	if _, err = write(req.Raw); err != nil {
+		return nil, err
+	}
+	const maxMessageSize = 1280
+	bs := make([]byte, maxMessageSize)
+	n, err := read(bs)
+	if err != nil {
+		return nil, err
+	}
+	res := &stun.Message{Raw: bs[:n]}
+	if err := res.Decode(); err != nil {
+		return nil, err
+	}
+	return res, nil
+}
+
+func localInterfaces(vnet *vnet.Net, interfaceFilter func(string) bool, networkTypes []NetworkType) ([]net.IP, error) { //nolint:gocognit
+	ips := []net.IP{}
+	ifaces, err := vnet.Interfaces()
+	if err != nil {
+		return ips, err
+	}
+
+	var IPv4Requested, IPv6Requested bool
+	for _, typ := range networkTypes {
+		if typ.IsIPv4() {
+			IPv4Requested = true
+		}
+
+		if typ.IsIPv6() {
+			IPv6Requested = true
+		}
+	}
+
+	for _, iface := range ifaces {
+		if iface.Flags&net.FlagUp == 0 {
+			continue // interface down
+		}
+		if iface.Flags&net.FlagLoopback != 0 {
+			continue // loopback interface
+		}
+
+		if interfaceFilter != nil && !interfaceFilter(iface.Name) {
+			continue
+		}
+
+		addrs, err := iface.Addrs()
+		if err != nil {
+			continue
+		}
+
+		for _, addr := range addrs {
+			var ip net.IP
+			switch addr := addr.(type) {
+			case *net.IPNet:
+				ip = addr.IP
+			case *net.IPAddr:
+				ip = addr.IP
+			}
+			if ip == nil || ip.IsLoopback() {
+				continue
+			}
+
+			if ipv4 := ip.To4(); ipv4 == nil {
+				if !IPv6Requested {
+					continue
+				} else if !isSupportedIPv6(ip) {
+					continue
+				}
+			} else if !IPv4Requested {
+				continue
+			}
+
+			ips = append(ips, ip)
+		}
+	}
+	return ips, nil
+}
+
+func listenUDPInPortRange(vnet *vnet.Net, log logging.LeveledLogger, portMax, portMin int, network string, laddr *net.UDPAddr) (vnet.UDPPacketConn, error) {
+	if (laddr.Port != 0) || ((portMin == 0) && (portMax == 0)) {
+		return vnet.ListenUDP(network, laddr)
+	}
+	var i, j int
+	i = portMin
+	if i == 0 {
+		i = 1
+	}
+	j = portMax
+	if j == 0 {
+		j = 0xFFFF
+	}
+	if i > j {
+		return nil, ErrPort
+	}
+
+	portStart := globalMathRandomGenerator.Intn(j-i+1) + i
+	portCurrent := portStart
+	for {
+		laddr = &net.UDPAddr{IP: laddr.IP, Port: portCurrent}
+		c, e := vnet.ListenUDP(network, laddr)
+		if e == nil {
+			return c, e
+		}
+		log.Debugf("failed to listen %s: %v", laddr.String(), e)
+		portCurrent++
+		if portCurrent > j {
+			portCurrent = i
+		}
+		if portCurrent == portStart {
+			break
+		}
+	}
+	return nil, ErrPort
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/.gitignore b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/.gitignore
new file mode 100644
index 000000000..83db74ba5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/.gitignore
@@ -0,0 +1,24 @@
+### JetBrains IDE ###
+#####################
+.idea/
+
+### Emacs Temporary Files ###
+#############################
+*~
+
+### Folders ###
+###############
+bin/
+vendor/
+node_modules/
+
+### Files ###
+#############
+*.ivf
+*.ogg
+tags
+cover.out
+*.sw[poe]
+*.wasm
+examples/sfu-ws/cert.pem
+examples/sfu-ws/key.pem
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/.golangci.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/.golangci.yml
new file mode 100644
index 000000000..d6162c970
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/.golangci.yml
@@ -0,0 +1,89 @@
+linters-settings:
+  govet:
+    check-shadowing: true
+  misspell:
+    locale: US
+  exhaustive:
+    default-signifies-exhaustive: true
+  gomodguard:
+    blocked:
+      modules:
+        - github.com/pkg/errors:
+            recommendations:
+            - errors
+
+linters:
+  enable:
+    - asciicheck       # Simple linter to check that your code does not contain non-ASCII identifiers
+    - bodyclose        # checks whether HTTP response body is closed successfully
+    - deadcode         # Finds unused code
+    - depguard         # Go linter that checks if package imports are in a list of acceptable packages
+    - dogsled          # Checks assignments with too many blank identifiers (e.g. x, _, _, _, := f())
+    - dupl             # Tool for code clone detection
+    - errcheck         # Errcheck is a program for checking for unchecked errors in go programs. These unchecked errors can be critical bugs in some cases
+    - exhaustive       # check exhaustiveness of enum switch statements
+    - exportloopref    # checks for pointers to enclosing loop variables
+    - gci              # Gci control golang package import order and make it always deterministic.
+    - gochecknoglobals # Checks that no globals are present in Go code
+    - gochecknoinits   # Checks that no init functions are present in Go code
+    - gocognit         # Computes and checks the cognitive complexity of functions
+    - goconst          # Finds repeated strings that could be replaced by a constant
+    - gocritic         # The most opinionated Go source code linter
+    - godox            # Tool for detection of FIXME, TODO and other comment keywords
+    - goerr113         # Golang linter to check the errors handling expressions
+    - gofmt            # Gofmt checks whether code was gofmt-ed. By default this tool runs with -s option to check for code simplification
+    - gofumpt          # Gofumpt checks whether code was gofumpt-ed.
+    - goheader         # Checks is file header matches to pattern
+    - goimports        # Goimports does everything that gofmt does. Additionally it checks unused imports
+    - golint           # Golint differs from gofmt. Gofmt reformats Go source code, whereas golint prints out style mistakes
+    - gomodguard       # Allow and block list linter for direct Go module dependencies. This is different from depguard where there are different block types for example version constraints and module recommendations.
+    - goprintffuncname # Checks that printf-like functions are named with `f` at the end
+    - gosec            # Inspects source code for security problems
+    - gosimple         # Linter for Go source code that specializes in simplifying a code
+    - govet            # Vet examines Go source code and reports suspicious constructs, such as Printf calls whose arguments do not align with the format string
+    - ineffassign      # Detects when assignments to existing variables are not used
+    - misspell         # Finds commonly misspelled English words in comments
+    - nakedret         # Finds naked returns in functions greater than a specified function length
+    - noctx            # noctx finds sending http request without context.Context
+    - scopelint        # Scopelint checks for unpinned variables in go programs
+    - staticcheck      # Staticcheck is a go vet on steroids, applying a ton of static analysis checks
+    - structcheck      # Finds unused struct fields
+    - stylecheck       # Stylecheck is a replacement for golint
+    - typecheck        # Like the front-end of a Go compiler, parses and type-checks Go code
+    - unconvert        # Remove unnecessary type conversions
+    - unparam          # Reports unused function parameters
+    - unused           # Checks Go code for unused constants, variables, functions and types
+    - varcheck         # Finds unused global variables and constants
+    - whitespace       # Tool for detection of leading and trailing whitespace
+  disable:
+    - funlen           # Tool for detection of long functions
+    - gocyclo          # Computes and checks the cyclomatic complexity of functions
+    - godot            # Check if comments end in a period
+    - gomnd            # An analyzer to detect magic numbers.
+    - lll              # Reports long lines
+    - maligned         # Tool to detect Go structs that would take less memory if their fields were sorted
+    - nestif           # Reports deeply nested if statements
+    - nlreturn         # nlreturn checks for a new line before return and branch statements to increase code clarity
+    - nolintlint       # Reports ill-formed or insufficient nolint directives
+    - prealloc         # Finds slice declarations that could potentially be preallocated
+    - rowserrcheck     # checks whether Err of rows is checked successfully
+    - sqlclosecheck    # Checks that sql.Rows and sql.Stmt are closed.
+    - testpackage      # linter that makes you use a separate _test package
+    - wsl              # Whitespace Linter - Forces you to use empty lines!
+
+issues:
+  exclude-use-default: false
+  exclude-rules:
+    # Allow complex tests, better to be self contained
+    - path: _test\.go
+      linters:
+        - gocognit
+
+    # Allow complex main function in examples
+    - path: examples
+      text: "of func `main` is high"
+      linters:
+        - gocognit
+
+run:
+  skip-dirs-use-default: false
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/LICENSE
new file mode 100644
index 000000000..ab602974d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/README.md
new file mode 100644
index 000000000..007c340d1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/README.md
@@ -0,0 +1,81 @@
+<h1 align="center">
+  <br>
+  Pion Interceptor
+  <br>
+</h1>
+<h4 align="center">RTCP and RTCP processors for building real time communications</h4>
+<p align="center">
+  <a href="https://pion.ly"><img src="https://img.shields.io/badge/pion-interceptor-gray.svg?longCache=true&colorB=brightgreen" alt="Pion Interceptor"></a>
+  <a href="https://pion.ly/slack"><img src="https://img.shields.io/badge/join-us%20on%20slack-gray.svg?longCache=true&logo=slack&colorB=brightgreen" alt="Slack Widget"></a>
+  <br>
+  <a href="https://pkg.go.dev/github.com/pion/interceptor"><img src="https://godoc.org/github.com/pion/interceptor?status.svg" alt="GoDoc"></a>
+  <a href="https://codecov.io/gh/pion/interceptor"><img src="https://codecov.io/gh/pion/interceptor/branch/master/graph/badge.svg" alt="Coverage Status"></a>
+  <a href="https://goreportcard.com/report/github.com/pion/interceptor"><img src="https://goreportcard.com/badge/github.com/pion/interceptor" alt="Go Report Card"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+</p>
+<br>
+
+Interceptor is a framework for building RTP/RTCP communication software. This framework defines
+a interface that each interceptor must satisfy. These interceptors are then run sequentially. We
+also then provide common interceptors that will be useful for building RTC software.
+
+This package was built for [pion/webrtc](https://github.com/pion/webrtc), but we designed it to be consumable
+by anyone. With the following tenets in mind.
+
+* Useful defaults. Each interceptor will be configured to give you a good default experience.
+* Unblock unique use cases. New use cases are what is driving WebRTC, we want to empower them.
+* Encourage modification. Add your own interceptors without forking. Mixing with the ones we provide.
+* Empower learning. This code base should be useful to read and learn even if you aren't using Pion.
+
+#### Current Interceptors
+* NACK Generator/Responder
+
+#### Planned Interceptors
+* [Sender and Receiver Reports](https://tools.ietf.org/html/rfc3550#section-6.4)
+  - Bandwidth Estimation from Receiver Reports
+* [Transport Wide Congestion Control Feedback](https://tools.ietf.org/html/draft-holmer-rmcat-transport-wide-cc-extensions-01)
+  - [NADA](https://tools.ietf.org/html/rfc8698)
+  - [Google Congestion Control](https://tools.ietf.org/html/draft-ietf-rmcat-gcc-02)
+* JitterBuffer, re-order packets and wait for arrival
+* [FlexFec](https://tools.ietf.org/html/draft-ietf-payload-flexible-fec-scheme-20)
+* [webrtc-stats](https://www.w3.org/TR/webrtc-stats/) compliant statistics generation
+
+### Interceptor Public API
+The public interface is defined in [interceptor.go](https://github.com/pion/interceptor/blob/master/interceptor.go).
+The methods you need to satisy are broken up into 4 groups.
+
+* `BindRTCPWriter` and `BindRTCPReader` allow you to inspect/modify RTCP traffic.
+* `BindLocalStream` and `BindRemoteStream` notify you of a new SSRC stream and allow you to inspect/modify.
+* `UnbindLocalStream` and `UnbindRemoteStream` notify you when a SSRC stream has been removed
+* `Close` called when the interceptor is closed.
+
+Interceptors also pass Attributes between each other. These are a collection of key/value pairs and are useful for storing metadata
+or caching.
+
+[noop.go](https://github.com/pion/interceptor/blob/master/noop.go) is an interceptor that satisfies this interface, but does nothing.
+You can embed this interceptor as a starting point so you only need to define exactly what you need.
+
+[chain.go]( https://github.com/pion/interceptor/blob/master/chain.go) is used to combine multiple interceptors into one. They are called
+sequentially as the packet moves through them.
+
+### Examples
+The [examples](https://github.com/pion/interceptor/blob/master/examples) directory provides some basic examples. If you need more please file an issue!
+You should also look in [pion/webrtc](https://github.com/pion/webrtc) for real world examples.
+
+### Community
+Pion has an active community on the [Golang Slack](https://invite.slack.golangbridge.org/). Sign up and join the **#pion** channel for discussions and support. You can also use [Pion mailing list](https://groups.google.com/forum/#!forum/pion).
+
+We are always looking to support **your projects**. Please reach out if you have something to build!
+
+If you need commercial support or don't want to use public methods you can contact us at [team@pion.ly](mailto:team@pion.ly)
+
+### Contributing
+Check out the **[contributing wiki](https://github.com/pion/webrtc/wiki/Contributing)** to join the group of amazing people making this project possible:
+
+* [Adam Kiss](https://github.com/masterada) - *Original Author*
+* [Sean DuBois](https://github.com/sean-der) - *Original Author*
+* [Atsushi Watanabe](https://github.com/at-wat)
+* [Alessandro Ros](https://github.com/aler9)
+
+### License
+MIT License - see [LICENSE](LICENSE) for full text
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/chain.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/chain.go
new file mode 100644
index 000000000..d53c30714
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/chain.go
@@ -0,0 +1,75 @@
+package interceptor
+
+// Chain is an interceptor that runs all child interceptors in order.
+type Chain struct {
+	interceptors []Interceptor
+}
+
+// NewChain returns a new Chain interceptor.
+func NewChain(interceptors []Interceptor) *Chain {
+	return &Chain{interceptors: interceptors}
+}
+
+// BindRTCPReader lets you modify any incoming RTCP packets. It is called once per sender/receiver, however this might
+// change in the future. The returned method will be called once per packet batch.
+func (i *Chain) BindRTCPReader(reader RTCPReader) RTCPReader {
+	for _, interceptor := range i.interceptors {
+		reader = interceptor.BindRTCPReader(reader)
+	}
+
+	return reader
+}
+
+// BindRTCPWriter lets you modify any outgoing RTCP packets. It is called once per PeerConnection. The returned method
+// will be called once per packet batch.
+func (i *Chain) BindRTCPWriter(writer RTCPWriter) RTCPWriter {
+	for _, interceptor := range i.interceptors {
+		writer = interceptor.BindRTCPWriter(writer)
+	}
+
+	return writer
+}
+
+// BindLocalStream lets you modify any outgoing RTP packets. It is called once for per LocalStream. The returned method
+// will be called once per rtp packet.
+func (i *Chain) BindLocalStream(ctx *StreamInfo, writer RTPWriter) RTPWriter {
+	for _, interceptor := range i.interceptors {
+		writer = interceptor.BindLocalStream(ctx, writer)
+	}
+
+	return writer
+}
+
+// UnbindLocalStream is called when the Stream is removed. It can be used to clean up any data related to that track.
+func (i *Chain) UnbindLocalStream(ctx *StreamInfo) {
+	for _, interceptor := range i.interceptors {
+		interceptor.UnbindLocalStream(ctx)
+	}
+}
+
+// BindRemoteStream lets you modify any incoming RTP packets. It is called once for per RemoteStream. The returned method
+// will be called once per rtp packet.
+func (i *Chain) BindRemoteStream(ctx *StreamInfo, reader RTPReader) RTPReader {
+	for _, interceptor := range i.interceptors {
+		reader = interceptor.BindRemoteStream(ctx, reader)
+	}
+
+	return reader
+}
+
+// UnbindRemoteStream is called when the Stream is removed. It can be used to clean up any data related to that track.
+func (i *Chain) UnbindRemoteStream(ctx *StreamInfo) {
+	for _, interceptor := range i.interceptors {
+		interceptor.UnbindRemoteStream(ctx)
+	}
+}
+
+// Close closes the Interceptor, cleaning up any data if necessary.
+func (i *Chain) Close() error {
+	var errs []error
+	for _, interceptor := range i.interceptors {
+		errs = append(errs, interceptor.Close())
+	}
+
+	return flattenErrs(errs)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/codecov.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/codecov.yml
new file mode 100644
index 000000000..085200a48
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/codecov.yml
@@ -0,0 +1,20 @@
+#
+# DO NOT EDIT THIS FILE
+#
+# It is automatically copied from https://github.com/pion/.goassets repository.
+#
+
+coverage:
+  status:
+    project:
+      default:
+        # Allow decreasing 2% of total coverage to avoid noise.
+        threshold: 2%
+    patch:
+      default:
+        target: 70%
+        only_pulls: true
+
+ignore:
+  - "examples/*"
+  - "examples/**/*"
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/errors.go
new file mode 100644
index 000000000..45e1252c9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/errors.go
@@ -0,0 +1,51 @@
+package interceptor
+
+import (
+	"errors"
+	"strings"
+)
+
+func flattenErrs(errs []error) error {
+	errs2 := []error{}
+	for _, e := range errs {
+		if e != nil {
+			errs2 = append(errs2, e)
+		}
+	}
+	if len(errs2) == 0 {
+		return nil
+	}
+	return multiError(errs2)
+}
+
+type multiError []error
+
+func (me multiError) Error() string {
+	var errstrings []string
+
+	for _, err := range me {
+		if err != nil {
+			errstrings = append(errstrings, err.Error())
+		}
+	}
+
+	if len(errstrings) == 0 {
+		return "multiError must contain multiple error but is empty"
+	}
+
+	return strings.Join(errstrings, "\n")
+}
+
+func (me multiError) Is(err error) bool {
+	for _, e := range me {
+		if errors.Is(e, err) {
+			return true
+		}
+		if me2, ok := e.(multiError); ok {
+			if me2.Is(err) {
+				return true
+			}
+		}
+	}
+	return false
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/go.mod
new file mode 100644
index 000000000..067c0d436
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/go.mod
@@ -0,0 +1,10 @@
+module github.com/pion/interceptor
+
+go 1.15
+
+require (
+	github.com/pion/logging v0.2.2
+	github.com/pion/rtcp v1.2.6
+	github.com/pion/rtp v1.6.2
+	github.com/stretchr/testify v1.6.1
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/go.sum b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/go.sum
new file mode 100644
index 000000000..d927bde07
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/go.sum
@@ -0,0 +1,19 @@
+github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/pion/logging v0.2.2 h1:M9+AIj/+pxNsDfAT64+MAVgJO0rsyLnoJKCqf//DoeY=
+github.com/pion/logging v0.2.2/go.mod h1:k0/tDVsRCX2Mb2ZEmTqNa7CWsQPc+YYCB7Q+5pahoms=
+github.com/pion/randutil v0.1.0 h1:CFG1UdESneORglEsnimhUjf33Rwjubwj6xfiOXBa3mA=
+github.com/pion/randutil v0.1.0/go.mod h1:XcJrSMMbbMRhASFVOlj/5hQial/Y8oH/HVo7TBZq+j8=
+github.com/pion/rtcp v1.2.6 h1:1zvwBbyd0TeEuuWftrd/4d++m+/kZSeiguxU61LFWpo=
+github.com/pion/rtcp v1.2.6/go.mod h1:52rMNPWFsjr39z9B9MhnkqhPLoeHTv1aN63o/42bWE0=
+github.com/pion/rtp v1.6.2 h1:iGBerLX6JiDjB9NXuaPzHyxHFG9JsIEdgwTC0lp5n/U=
+github.com/pion/rtp v1.6.2/go.mod h1:bDb5n+BFZxXx0Ea7E5qe+klMuqiBrP+w8XSjiWtCUko=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.6.1 h1:hDPOHmpOpP40lSULcqw7IrRb/u7w6RpDC9399XyoNd0=
+github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c h1:dUUwHk2QECo/6vqA44rthZ8ie2QXMNeKRTHCNY2nXvo=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/interceptor.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/interceptor.go
new file mode 100644
index 000000000..2d1b97e2f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/interceptor.go
@@ -0,0 +1,108 @@
+// Package interceptor contains the Interceptor interface, with some useful interceptors that should be safe to use
+// in most cases.
+package interceptor
+
+import (
+	"io"
+
+	"github.com/pion/rtcp"
+	"github.com/pion/rtp"
+)
+
+// Interceptor can be used to add functionality to you PeerConnections by modifying any incoming/outgoing rtp/rtcp
+// packets, or sending your own packets as needed.
+type Interceptor interface {
+
+	// BindRTCPReader lets you modify any incoming RTCP packets. It is called once per sender/receiver, however this might
+	// change in the future. The returned method will be called once per packet batch.
+	BindRTCPReader(reader RTCPReader) RTCPReader
+
+	// BindRTCPWriter lets you modify any outgoing RTCP packets. It is called once per PeerConnection. The returned method
+	// will be called once per packet batch.
+	BindRTCPWriter(writer RTCPWriter) RTCPWriter
+
+	// BindLocalStream lets you modify any outgoing RTP packets. It is called once for per LocalStream. The returned method
+	// will be called once per rtp packet.
+	BindLocalStream(info *StreamInfo, writer RTPWriter) RTPWriter
+
+	// UnbindLocalStream is called when the Stream is removed. It can be used to clean up any data related to that track.
+	UnbindLocalStream(info *StreamInfo)
+
+	// BindRemoteStream lets you modify any incoming RTP packets. It is called once for per RemoteStream. The returned method
+	// will be called once per rtp packet.
+	BindRemoteStream(info *StreamInfo, reader RTPReader) RTPReader
+
+	// UnbindRemoteStream is called when the Stream is removed. It can be used to clean up any data related to that track.
+	UnbindRemoteStream(info *StreamInfo)
+
+	io.Closer
+}
+
+// RTPWriter is used by Interceptor.BindLocalStream.
+type RTPWriter interface {
+	// Write a rtp packet
+	Write(header *rtp.Header, payload []byte, attributes Attributes) (int, error)
+}
+
+// RTPReader is used by Interceptor.BindRemoteStream.
+type RTPReader interface {
+	// Read a rtp packet
+	Read([]byte, Attributes) (int, Attributes, error)
+}
+
+// RTCPWriter is used by Interceptor.BindRTCPWriter.
+type RTCPWriter interface {
+	// Write a batch of rtcp packets
+	Write(pkts []rtcp.Packet, attributes Attributes) (int, error)
+}
+
+// RTCPReader is used by Interceptor.BindRTCPReader.
+type RTCPReader interface {
+	// Read a batch of rtcp packets
+	Read([]byte, Attributes) (int, Attributes, error)
+}
+
+// Attributes are a generic key/value store used by interceptors
+type Attributes map[interface{}]interface{}
+
+// RTPWriterFunc is an adapter for RTPWrite interface
+type RTPWriterFunc func(header *rtp.Header, payload []byte, attributes Attributes) (int, error)
+
+// RTPReaderFunc is an adapter for RTPReader interface
+type RTPReaderFunc func([]byte, Attributes) (int, Attributes, error)
+
+// RTCPWriterFunc is an adapter for RTCPWriter interface
+type RTCPWriterFunc func(pkts []rtcp.Packet, attributes Attributes) (int, error)
+
+// RTCPReaderFunc is an adapter for RTCPReader interface
+type RTCPReaderFunc func([]byte, Attributes) (int, Attributes, error)
+
+// Write a rtp packet
+func (f RTPWriterFunc) Write(header *rtp.Header, payload []byte, attributes Attributes) (int, error) {
+	return f(header, payload, attributes)
+}
+
+// Read a rtp packet
+func (f RTPReaderFunc) Read(b []byte, a Attributes) (int, Attributes, error) {
+	return f(b, a)
+}
+
+// Write a batch of rtcp packets
+func (f RTCPWriterFunc) Write(pkts []rtcp.Packet, attributes Attributes) (int, error) {
+	return f(pkts, attributes)
+}
+
+// Read a batch of rtcp packets
+func (f RTCPReaderFunc) Read(b []byte, a Attributes) (int, Attributes, error) {
+	return f(b, a)
+}
+
+// Get returns the attribute associated with key.
+func (a Attributes) Get(key interface{}) interface{} {
+	return a[key]
+}
+
+// Set sets the attribute associated with key to the given value.
+func (a Attributes) Set(key interface{}, val interface{}) {
+	a[key] = val
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/noop.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/noop.go
new file mode 100644
index 000000000..2dc4e8e2e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/noop.go
@@ -0,0 +1,40 @@
+package interceptor
+
+// NoOp is an Interceptor that does not modify any packets. It can embedded in other interceptors, so it's
+// possible to implement only a subset of the methods.
+type NoOp struct{}
+
+// BindRTCPReader lets you modify any incoming RTCP packets. It is called once per sender/receiver, however this might
+// change in the future. The returned method will be called once per packet batch.
+func (i *NoOp) BindRTCPReader(reader RTCPReader) RTCPReader {
+	return reader
+}
+
+// BindRTCPWriter lets you modify any outgoing RTCP packets. It is called once per PeerConnection. The returned method
+// will be called once per packet batch.
+func (i *NoOp) BindRTCPWriter(writer RTCPWriter) RTCPWriter {
+	return writer
+}
+
+// BindLocalStream lets you modify any outgoing RTP packets. It is called once for per LocalStream. The returned method
+// will be called once per rtp packet.
+func (i *NoOp) BindLocalStream(_ *StreamInfo, writer RTPWriter) RTPWriter {
+	return writer
+}
+
+// UnbindLocalStream is called when the Stream is removed. It can be used to clean up any data related to that track.
+func (i *NoOp) UnbindLocalStream(_ *StreamInfo) {}
+
+// BindRemoteStream lets you modify any incoming RTP packets. It is called once for per RemoteStream. The returned method
+// will be called once per rtp packet.
+func (i *NoOp) BindRemoteStream(_ *StreamInfo, reader RTPReader) RTPReader {
+	return reader
+}
+
+// UnbindRemoteStream is called when the Stream is removed. It can be used to clean up any data related to that track.
+func (i *NoOp) UnbindRemoteStream(_ *StreamInfo) {}
+
+// Close closes the Interceptor, cleaning up any data if necessary.
+func (i *NoOp) Close() error {
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/errors.go
new file mode 100644
index 000000000..bbfc77361
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/errors.go
@@ -0,0 +1,6 @@
+package nack
+
+import "errors"
+
+// ErrInvalidSize is returned by newReceiveLog/newSendBuffer, when an incorrect buffer size is supplied.
+var ErrInvalidSize = errors.New("invalid buffer size")
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/generator_interceptor.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/generator_interceptor.go
new file mode 100644
index 000000000..447a9490a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/generator_interceptor.go
@@ -0,0 +1,162 @@
+package nack
+
+import (
+	"math/rand"
+	"sync"
+	"time"
+
+	"github.com/pion/interceptor"
+	"github.com/pion/logging"
+	"github.com/pion/rtcp"
+	"github.com/pion/rtp"
+)
+
+// GeneratorInterceptor interceptor generates nack feedback messages.
+type GeneratorInterceptor struct {
+	interceptor.NoOp
+	size      uint16
+	skipLastN uint16
+	interval  time.Duration
+	m         sync.Mutex
+	wg        sync.WaitGroup
+	close     chan struct{}
+	log       logging.LeveledLogger
+
+	receiveLogs   map[uint32]*receiveLog
+	receiveLogsMu sync.Mutex
+}
+
+// NewGeneratorInterceptor returns a new GeneratorInterceptor interceptor
+func NewGeneratorInterceptor(opts ...GeneratorOption) (*GeneratorInterceptor, error) {
+	r := &GeneratorInterceptor{
+		size:        8192,
+		skipLastN:   0,
+		interval:    time.Millisecond * 100,
+		receiveLogs: map[uint32]*receiveLog{},
+		close:       make(chan struct{}),
+		log:         logging.NewDefaultLoggerFactory().NewLogger("nack_generator"),
+	}
+
+	for _, opt := range opts {
+		if err := opt(r); err != nil {
+			return nil, err
+		}
+	}
+
+	if _, err := newReceiveLog(r.size); err != nil {
+		return nil, err
+	}
+
+	return r, nil
+}
+
+// BindRTCPWriter lets you modify any outgoing RTCP packets. It is called once per PeerConnection. The returned method
+// will be called once per packet batch.
+func (n *GeneratorInterceptor) BindRTCPWriter(writer interceptor.RTCPWriter) interceptor.RTCPWriter {
+	n.m.Lock()
+	defer n.m.Unlock()
+
+	if n.isClosed() {
+		return writer
+	}
+
+	n.wg.Add(1)
+
+	go n.loop(writer)
+
+	return writer
+}
+
+// BindRemoteStream lets you modify any incoming RTP packets. It is called once for per RemoteStream. The returned method
+// will be called once per rtp packet.
+func (n *GeneratorInterceptor) BindRemoteStream(info *interceptor.StreamInfo, reader interceptor.RTPReader) interceptor.RTPReader {
+	if !streamSupportNack(info) {
+		return reader
+	}
+
+	// error is already checked in NewGeneratorInterceptor
+	receiveLog, _ := newReceiveLog(n.size)
+	n.receiveLogsMu.Lock()
+	n.receiveLogs[info.SSRC] = receiveLog
+	n.receiveLogsMu.Unlock()
+
+	return interceptor.RTPReaderFunc(func(b []byte, a interceptor.Attributes) (int, interceptor.Attributes, error) {
+		i, attr, err := reader.Read(b, a)
+		if err != nil {
+			return 0, nil, err
+		}
+
+		pkt := rtp.Packet{}
+		if err = pkt.Unmarshal(b[:i]); err != nil {
+			return 0, nil, err
+		}
+		receiveLog.add(pkt.Header.SequenceNumber)
+
+		return i, attr, nil
+	})
+}
+
+// UnbindLocalStream is called when the Stream is removed. It can be used to clean up any data related to that track.
+func (n *GeneratorInterceptor) UnbindLocalStream(info *interceptor.StreamInfo) {
+	n.receiveLogsMu.Lock()
+	delete(n.receiveLogs, info.SSRC)
+	n.receiveLogsMu.Unlock()
+}
+
+// Close closes the interceptor
+func (n *GeneratorInterceptor) Close() error {
+	defer n.wg.Wait()
+	n.m.Lock()
+	defer n.m.Unlock()
+
+	if !n.isClosed() {
+		close(n.close)
+	}
+
+	return nil
+}
+
+func (n *GeneratorInterceptor) loop(rtcpWriter interceptor.RTCPWriter) {
+	defer n.wg.Done()
+
+	senderSSRC := rand.Uint32() // #nosec
+
+	ticker := time.NewTicker(n.interval)
+	for {
+		select {
+		case <-ticker.C:
+			func() {
+				n.receiveLogsMu.Lock()
+				defer n.receiveLogsMu.Unlock()
+
+				for ssrc, receiveLog := range n.receiveLogs {
+					missing := receiveLog.missingSeqNumbers(n.skipLastN)
+					if len(missing) == 0 {
+						continue
+					}
+
+					nack := &rtcp.TransportLayerNack{
+						SenderSSRC: senderSSRC,
+						MediaSSRC:  ssrc,
+						Nacks:      rtcp.NackPairsFromSequenceNumbers(missing),
+					}
+
+					if _, err := rtcpWriter.Write([]rtcp.Packet{nack}, interceptor.Attributes{}); err != nil {
+						n.log.Warnf("failed sending nack: %+v", err)
+					}
+				}
+			}()
+		case <-n.close:
+			return
+		}
+	}
+}
+
+func (n *GeneratorInterceptor) isClosed() bool {
+	select {
+	case <-n.close:
+		return true
+	default:
+		return false
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/generator_option.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/generator_option.go
new file mode 100644
index 000000000..092f5db92
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/generator_option.go
@@ -0,0 +1,44 @@
+package nack
+
+import (
+	"time"
+
+	"github.com/pion/logging"
+)
+
+// GeneratorOption can be used to configure GeneratorInterceptor
+type GeneratorOption func(r *GeneratorInterceptor) error
+
+// GeneratorSize sets the size of the interceptor.
+// Size must be one of: 64, 128, 256, 512, 1024, 2048, 4096, 8192, 16384, 32768
+func GeneratorSize(size uint16) GeneratorOption {
+	return func(r *GeneratorInterceptor) error {
+		r.size = size
+		return nil
+	}
+}
+
+// GeneratorSkipLastN sets the number of packets (n-1 packets before the last received packets) to ignore when generating
+// nack requests.
+func GeneratorSkipLastN(skipLastN uint16) GeneratorOption {
+	return func(r *GeneratorInterceptor) error {
+		r.skipLastN = skipLastN
+		return nil
+	}
+}
+
+// GeneratorLog sets a logger for the interceptor
+func GeneratorLog(log logging.LeveledLogger) GeneratorOption {
+	return func(r *GeneratorInterceptor) error {
+		r.log = log
+		return nil
+	}
+}
+
+// GeneratorInterval sets the nack send interval for the interceptor
+func GeneratorInterval(interval time.Duration) GeneratorOption {
+	return func(r *GeneratorInterceptor) error {
+		r.interval = interval
+		return nil
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/nack.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/nack.go
new file mode 100644
index 000000000..a658e7f39
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/nack.go
@@ -0,0 +1,14 @@
+// Package nack provides interceptors to implement sending and receiving negative acknowledgements
+package nack
+
+import "github.com/pion/interceptor"
+
+func streamSupportNack(info *interceptor.StreamInfo) bool {
+	for _, fb := range info.RTCPFeedback {
+		if fb.Type == "nack" && fb.Parameter == "" {
+			return true
+		}
+	}
+
+	return false
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/receive_log.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/receive_log.go
new file mode 100644
index 000000000..8107f59a2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/receive_log.go
@@ -0,0 +1,134 @@
+package nack
+
+import (
+	"fmt"
+	"sync"
+)
+
+type receiveLog struct {
+	packets         []uint64
+	size            uint16
+	end             uint16
+	started         bool
+	lastConsecutive uint16
+	m               sync.RWMutex
+}
+
+func newReceiveLog(size uint16) (*receiveLog, error) {
+	allowedSizes := make([]uint16, 0)
+	correctSize := false
+	for i := 6; i < 16; i++ {
+		if size == 1<<i {
+			correctSize = true
+			break
+		}
+		allowedSizes = append(allowedSizes, 1<<i)
+	}
+
+	if !correctSize {
+		return nil, fmt.Errorf("%w: %d is not a valid size, allowed sizes: %v", ErrInvalidSize, size, allowedSizes)
+	}
+
+	return &receiveLog{
+		packets: make([]uint64, size/64),
+		size:    size,
+	}, nil
+}
+
+func (s *receiveLog) add(seq uint16) {
+	s.m.Lock()
+	defer s.m.Unlock()
+
+	if !s.started {
+		s.setReceived(seq)
+		s.end = seq
+		s.started = true
+		s.lastConsecutive = seq
+		return
+	}
+
+	diff := seq - s.end
+	switch {
+	case diff == 0:
+		return
+	case diff < uint16SizeHalf:
+		// this means a positive diff, in other words seq > end (with counting for rollovers)
+		for i := s.end + 1; i != seq; i++ {
+			// clear packets between end and seq (these may contain packets from a "size" ago)
+			s.delReceived(i)
+		}
+		s.end = seq
+
+		if s.lastConsecutive+1 == seq {
+			s.lastConsecutive = seq
+		} else if seq-s.lastConsecutive > s.size {
+			s.lastConsecutive = seq - s.size
+			s.fixLastConsecutive() // there might be valid packets at the beginning of the buffer now
+		}
+	case s.lastConsecutive+1 == seq:
+		// negative diff, seq < end (with counting for rollovers)
+		s.lastConsecutive = seq
+		s.fixLastConsecutive() // there might be other valid packets after seq
+	}
+
+	s.setReceived(seq)
+}
+
+func (s *receiveLog) get(seq uint16) bool {
+	s.m.RLock()
+	defer s.m.RUnlock()
+
+	diff := s.end - seq
+	if diff >= uint16SizeHalf {
+		return false
+	}
+
+	if diff >= s.size {
+		return false
+	}
+
+	return s.getReceived(seq)
+}
+
+func (s *receiveLog) missingSeqNumbers(skipLastN uint16) []uint16 {
+	s.m.RLock()
+	defer s.m.RUnlock()
+
+	until := s.end - skipLastN
+	if until-s.lastConsecutive >= uint16SizeHalf {
+		// until < s.lastConsecutive (counting for rollover)
+		return nil
+	}
+
+	missingPacketSeqNums := make([]uint16, 0)
+	for i := s.lastConsecutive + 1; i != until+1; i++ {
+		if !s.getReceived(i) {
+			missingPacketSeqNums = append(missingPacketSeqNums, i)
+		}
+	}
+
+	return missingPacketSeqNums
+}
+
+func (s *receiveLog) setReceived(seq uint16) {
+	pos := seq % s.size
+	s.packets[pos/64] |= 1 << (pos % 64)
+}
+
+func (s *receiveLog) delReceived(seq uint16) {
+	pos := seq % s.size
+	s.packets[pos/64] &^= 1 << (pos % 64)
+}
+
+func (s *receiveLog) getReceived(seq uint16) bool {
+	pos := seq % s.size
+	return (s.packets[pos/64] & (1 << (pos % 64))) != 0
+}
+
+func (s *receiveLog) fixLastConsecutive() {
+	i := s.lastConsecutive + 1
+	for ; i != s.end+1 && s.getReceived(i); i++ {
+		// find all consecutive packets
+	}
+	s.lastConsecutive = i - 1
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/responder_interceptor.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/responder_interceptor.go
new file mode 100644
index 000000000..121657e4d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/responder_interceptor.go
@@ -0,0 +1,119 @@
+package nack
+
+import (
+	"sync"
+
+	"github.com/pion/interceptor"
+	"github.com/pion/logging"
+	"github.com/pion/rtcp"
+	"github.com/pion/rtp"
+)
+
+// ResponderInterceptor responds to nack feedback messages
+type ResponderInterceptor struct {
+	interceptor.NoOp
+	size uint16
+	log  logging.LeveledLogger
+
+	streams   map[uint32]*localStream
+	streamsMu sync.Mutex
+}
+
+type localStream struct {
+	sendBuffer *sendBuffer
+	rtpWriter  interceptor.RTPWriter
+}
+
+// NewResponderInterceptor returns a new GeneratorInterceptor interceptor
+func NewResponderInterceptor(opts ...ResponderOption) (*ResponderInterceptor, error) {
+	r := &ResponderInterceptor{
+		size:    8192,
+		log:     logging.NewDefaultLoggerFactory().NewLogger("nack_responder"),
+		streams: map[uint32]*localStream{},
+	}
+
+	for _, opt := range opts {
+		if err := opt(r); err != nil {
+			return nil, err
+		}
+	}
+
+	if _, err := newSendBuffer(r.size); err != nil {
+		return nil, err
+	}
+
+	return r, nil
+}
+
+// BindRTCPReader lets you modify any incoming RTCP packets. It is called once per sender/receiver, however this might
+// change in the future. The returned method will be called once per packet batch.
+func (n *ResponderInterceptor) BindRTCPReader(reader interceptor.RTCPReader) interceptor.RTCPReader {
+	return interceptor.RTCPReaderFunc(func(b []byte, a interceptor.Attributes) (int, interceptor.Attributes, error) {
+		i, attr, err := reader.Read(b, a)
+		if err != nil {
+			return 0, nil, err
+		}
+
+		pkts, err := rtcp.Unmarshal(b[:i])
+		if err != nil {
+			return 0, nil, err
+		}
+		for _, rtcpPacket := range pkts {
+			nack, ok := rtcpPacket.(*rtcp.TransportLayerNack)
+			if !ok {
+				continue
+			}
+
+			go n.resendPackets(nack)
+		}
+
+		return i, attr, err
+	})
+}
+
+// BindLocalStream lets you modify any outgoing RTP packets. It is called once for per LocalStream. The returned method
+// will be called once per rtp packet.
+func (n *ResponderInterceptor) BindLocalStream(info *interceptor.StreamInfo, writer interceptor.RTPWriter) interceptor.RTPWriter {
+	if !streamSupportNack(info) {
+		return writer
+	}
+
+	// error is already checked in NewGeneratorInterceptor
+	sendBuffer, _ := newSendBuffer(n.size)
+	n.streamsMu.Lock()
+	n.streams[info.SSRC] = &localStream{sendBuffer: sendBuffer, rtpWriter: writer}
+	n.streamsMu.Unlock()
+
+	return interceptor.RTPWriterFunc(func(header *rtp.Header, payload []byte, attributes interceptor.Attributes) (int, error) {
+		sendBuffer.add(&rtp.Packet{Header: *header, Payload: payload})
+		return writer.Write(header, payload, attributes)
+	})
+}
+
+// UnbindLocalStream is called when the Stream is removed. It can be used to clean up any data related to that track.
+func (n *ResponderInterceptor) UnbindLocalStream(info *interceptor.StreamInfo) {
+	n.streamsMu.Lock()
+	delete(n.streams, info.SSRC)
+	n.streamsMu.Unlock()
+}
+
+func (n *ResponderInterceptor) resendPackets(nack *rtcp.TransportLayerNack) {
+	n.streamsMu.Lock()
+	stream, ok := n.streams[nack.MediaSSRC]
+	n.streamsMu.Unlock()
+	if !ok {
+		return
+	}
+
+	for i := range nack.Nacks {
+		nack.Nacks[i].Range(func(seq uint16) bool {
+			if p := stream.sendBuffer.get(seq); p != nil {
+				if _, err := stream.rtpWriter.Write(&p.Header, p.Payload, interceptor.Attributes{}); err != nil {
+					n.log.Warnf("failed resending nacked packet: %+v", err)
+				}
+			}
+
+			return true
+		})
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/responder_option.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/responder_option.go
new file mode 100644
index 000000000..7ad52c8ad
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/responder_option.go
@@ -0,0 +1,23 @@
+package nack
+
+import "github.com/pion/logging"
+
+// ResponderOption can be used to configure ResponderInterceptor
+type ResponderOption func(s *ResponderInterceptor) error
+
+// ResponderSize sets the size of the interceptor.
+// Size must be one of: 1, 2, 4, 8, 16, 32, 64, 128, 256, 512, 1024, 2048, 4096, 8192, 16384, 32768
+func ResponderSize(size uint16) ResponderOption {
+	return func(r *ResponderInterceptor) error {
+		r.size = size
+		return nil
+	}
+}
+
+// ResponderLog sets a logger for the interceptor
+func ResponderLog(log logging.LeveledLogger) ResponderOption {
+	return func(r *ResponderInterceptor) error {
+		r.log = log
+		return nil
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/send_buffer.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/send_buffer.go
new file mode 100644
index 000000000..cf3f020ef
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/pkg/nack/send_buffer.go
@@ -0,0 +1,74 @@
+package nack
+
+import (
+	"fmt"
+
+	"github.com/pion/rtp"
+)
+
+const (
+	uint16SizeHalf = 1 << 15
+)
+
+type sendBuffer struct {
+	packets   []*rtp.Packet
+	size      uint16
+	lastAdded uint16
+	started   bool
+}
+
+func newSendBuffer(size uint16) (*sendBuffer, error) {
+	allowedSizes := make([]uint16, 0)
+	correctSize := false
+	for i := 0; i < 16; i++ {
+		if size == 1<<i {
+			correctSize = true
+			break
+		}
+		allowedSizes = append(allowedSizes, 1<<i)
+	}
+
+	if !correctSize {
+		return nil, fmt.Errorf("%w: %d is not a valid size, allowed sizes: %v", ErrInvalidSize, size, allowedSizes)
+	}
+
+	return &sendBuffer{
+		packets: make([]*rtp.Packet, size),
+		size:    size,
+	}, nil
+}
+
+func (s *sendBuffer) add(packet *rtp.Packet) {
+	seq := packet.SequenceNumber
+	if !s.started {
+		s.packets[seq%s.size] = packet
+		s.lastAdded = seq
+		s.started = true
+		return
+	}
+
+	diff := seq - s.lastAdded
+	if diff == 0 {
+		return
+	} else if diff < uint16SizeHalf {
+		for i := s.lastAdded + 1; i != seq; i++ {
+			s.packets[i%s.size] = nil
+		}
+	}
+
+	s.packets[seq%s.size] = packet
+	s.lastAdded = seq
+}
+
+func (s *sendBuffer) get(seq uint16) *rtp.Packet {
+	diff := s.lastAdded - seq
+	if diff >= uint16SizeHalf {
+		return nil
+	}
+
+	if diff >= s.size {
+		return nil
+	}
+
+	return s.packets[seq%s.size]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/registry.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/registry.go
new file mode 100644
index 000000000..d3eed3bf2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/registry.go
@@ -0,0 +1,20 @@
+package interceptor
+
+// Registry is a collector for interceptors.
+type Registry struct {
+	interceptors []Interceptor
+}
+
+// Add adds a new Interceptor to the registry.
+func (i *Registry) Add(icpr Interceptor) {
+	i.interceptors = append(i.interceptors, icpr)
+}
+
+// Build constructs a single Interceptor from a InterceptorRegistry
+func (i *Registry) Build() Interceptor {
+	if len(i.interceptors) == 0 {
+		return &NoOp{}
+	}
+
+	return NewChain(i.interceptors)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/renovate.json b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/renovate.json
new file mode 100644
index 000000000..4400fd9b2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/renovate.json
@@ -0,0 +1,15 @@
+{
+  "extends": [
+    "config:base"
+  ],
+  "postUpdateOptions": [
+    "gomodTidy"
+  ],
+  "commitBody": "Generated by renovateBot",
+  "packageRules": [
+    {
+      "packagePatterns": ["^golang.org/x/"],
+      "schedule": ["on the first day of the month"]
+    }
+  ]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/streaminfo.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/streaminfo.go
new file mode 100644
index 000000000..956fa5306
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/interceptor/streaminfo.go
@@ -0,0 +1,34 @@
+package interceptor
+
+// RTPHeaderExtension represents a negotiated RFC5285 RTP header extension.
+type RTPHeaderExtension struct {
+	URI string
+	ID  int
+}
+
+// StreamInfo is the Context passed when a StreamLocal or StreamRemote has been Binded or Unbinded
+type StreamInfo struct {
+	ID                  string
+	Attributes          Attributes
+	SSRC                uint32
+	PayloadType         uint8
+	RTPHeaderExtensions []RTPHeaderExtension
+	MimeType            string
+	ClockRate           uint32
+	Channels            uint16
+	SDPFmtpLine         string
+	RTCPFeedback        []RTCPFeedback
+}
+
+// RTCPFeedback signals the connection to use additional RTCP packet types.
+// https://draft.ortc.org/#dom-rtcrtcpfeedback
+type RTCPFeedback struct {
+	// Type is the type of feedback.
+	// see: https://draft.ortc.org/#dom-rtcrtcpfeedback
+	// valid: ack, ccm, nack, goog-remb, transport-cc
+	Type string
+
+	// The parameter value depends on the type.
+	// For example, type="nack" parameter="pli" will send Picture Loss Indicator packets.
+	Parameter string
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/.golangci.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/.golangci.yml
new file mode 100644
index 000000000..ffb0058e6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/.golangci.yml
@@ -0,0 +1,13 @@
+linters-settings:
+  govet:
+    check-shadowing: true
+  misspell:
+    locale: US
+
+linters:
+  enable-all: true
+
+issues:
+  exclude-use-default: false
+  max-per-linter: 0
+  max-same-issues: 50
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/.travis.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/.travis.yml
new file mode 100644
index 000000000..b96a1edb9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/.travis.yml
@@ -0,0 +1,19 @@
+language: go
+
+go:
+  - "1.x" # use the latest Go release
+
+env:
+  - GO111MODULE=on
+
+before_script:
+  - curl -sfL https://install.goreleaser.com/github.com/golangci/golangci-lint.sh | bash -s -- -b $GOPATH/bin v1.15.0
+
+script:
+  - golangci-lint run ./...
+#  - rm -rf examples # Remove examples, no test coverage for them
+  - go test -coverpkg=$(go list ./... | tr '\n' ',') -coverprofile=cover.out -v -race -covermode=atomic ./...
+  - bash <(curl -s https://codecov.io/bash)
+  - bash .github/assert-contributors.sh
+  - bash .github/lint-disallowed-functions-in-library.sh
+  - bash .github/lint-commit-message.sh
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/LICENSE
new file mode 100644
index 000000000..ab602974d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/README.md
new file mode 100644
index 000000000..c15471d61
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/README.md
@@ -0,0 +1,41 @@
+<h1 align="center">
+  <br>
+  Pion Logging
+  <br>
+</h1>
+<h4 align="center">The Pion logging library</h4>
+<p align="center">
+  <a href="https://pion.ly"><img src="https://img.shields.io/badge/pion-logging-gray.svg?longCache=true&colorB=brightgreen" alt="Pion transport"></a>
+  <a href="http://gophers.slack.com/messages/pion"><img src="https://img.shields.io/badge/join-us%20on%20slack-gray.svg?longCache=true&logo=slack&colorB=brightgreen" alt="Slack Widget"></a>
+  <br>
+  <a href="https://travis-ci.org/pion/logging"><img src="https://travis-ci.org/pion/logging.svg?branch=master" alt="Build Status"></a>
+  <a href="https://godoc.org/github.com/pion/logging"><img src="https://godoc.org/github.com/pion/logging?status.svg" alt="GoDoc"></a>
+  <a href="https://codecov.io/gh/pion/logging"><img src="https://codecov.io/gh/pion/logging/branch/master/graph/badge.svg" alt="Coverage Status"></a>
+  <a href="https://goreportcard.com/report/github.com/pion/logging"><img src="https://goreportcard.com/badge/github.com/pion/logging" alt="Go Report Card"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+</p>
+<br>
+
+### Roadmap
+The library is used as a part of our WebRTC implementation. Please refer to that [roadmap](https://github.com/pion/webrtc/issues/9) to track our major milestones.
+
+### Community
+Pion has an active community on the [Golang Slack](https://invite.slack.golangbridge.org/). Sign up and join the **#pion** channel for discussions and support. You can also use [Pion mailing list](https://groups.google.com/forum/#!forum/pion).
+
+We are always looking to support **your projects**. Please reach out if you have something to build!
+
+If you need commercial support or don't want to use public methods you can contact us at [team@pion.ly](mailto:team@pion.ly)
+
+### Contributing
+Check out the **[contributing wiki](https://github.com/pion/webrtc/wiki/Contributing)** to join the group of amazing people making this project possible:
+
+* [John Bradley](https://github.com/kc5nra) - *Original Author*
+* [Sean DuBois](https://github.com/Sean-Der) - *Original Author*
+* [Michael MacDonald](https://github.com/mjmac) - *Original Author*
+* [Woodrow Douglass](https://github.com/wdouglass) - *Test coverage*
+* [Michiel De Backker](https://github.com/backkem) - *Docs*
+* [Hugo Arregui](https://github.com/hugoArregui) - *Custom Logs*
+* [Justin Okamoto](https://github.com/justinokamoto) - *Disabled Logs Update*
+
+### License
+MIT License - see [LICENSE](LICENSE) for full text
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/go.mod
new file mode 100644
index 000000000..a1b849bff
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/go.mod
@@ -0,0 +1,3 @@
+module github.com/pion/logging
+
+go 1.12
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/go.sum b/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/go.sum
new file mode 100644
index 000000000..e69de29bb
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/logger.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/logger.go
new file mode 100644
index 000000000..35f650581
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/logger.go
@@ -0,0 +1,228 @@
+package logging
+
+import (
+	"fmt"
+	"io"
+	"log"
+	"os"
+	"strings"
+	"sync"
+)
+
+// Use this abstraction to ensure thread-safe access to the logger's io.Writer
+// (which could change at runtime)
+type loggerWriter struct {
+	sync.RWMutex
+	output io.Writer
+}
+
+func (lw *loggerWriter) SetOutput(output io.Writer) {
+	lw.Lock()
+	defer lw.Unlock()
+	lw.output = output
+}
+
+func (lw *loggerWriter) Write(data []byte) (int, error) {
+	lw.RLock()
+	defer lw.RUnlock()
+	return lw.output.Write(data)
+}
+
+// DefaultLeveledLogger encapsulates functionality for providing logging at
+// user-defined levels
+type DefaultLeveledLogger struct {
+	level  LogLevel
+	writer *loggerWriter
+	trace  *log.Logger
+	debug  *log.Logger
+	info   *log.Logger
+	warn   *log.Logger
+	err    *log.Logger
+}
+
+// WithTraceLogger is a chainable configuration function which sets the
+// Trace-level logger
+func (ll *DefaultLeveledLogger) WithTraceLogger(log *log.Logger) *DefaultLeveledLogger {
+	ll.trace = log
+	return ll
+}
+
+// WithDebugLogger is a chainable configuration function which sets the
+// Debug-level logger
+func (ll *DefaultLeveledLogger) WithDebugLogger(log *log.Logger) *DefaultLeveledLogger {
+	ll.debug = log
+	return ll
+}
+
+// WithInfoLogger is a chainable configuration function which sets the
+// Info-level logger
+func (ll *DefaultLeveledLogger) WithInfoLogger(log *log.Logger) *DefaultLeveledLogger {
+	ll.info = log
+	return ll
+}
+
+// WithWarnLogger is a chainable configuration function which sets the
+// Warn-level logger
+func (ll *DefaultLeveledLogger) WithWarnLogger(log *log.Logger) *DefaultLeveledLogger {
+	ll.warn = log
+	return ll
+}
+
+// WithErrorLogger is a chainable configuration function which sets the
+// Error-level logger
+func (ll *DefaultLeveledLogger) WithErrorLogger(log *log.Logger) *DefaultLeveledLogger {
+	ll.err = log
+	return ll
+}
+
+// WithOutput is a chainable configuration function which sets the logger's
+// logging output to the supplied io.Writer
+func (ll *DefaultLeveledLogger) WithOutput(output io.Writer) *DefaultLeveledLogger {
+	ll.writer.SetOutput(output)
+	return ll
+}
+
+func (ll *DefaultLeveledLogger) logf(logger *log.Logger, level LogLevel, format string, args ...interface{}) {
+	if ll.level.Get() < level {
+		return
+	}
+
+	callDepth := 3 // this frame + wrapper func + caller
+	msg := fmt.Sprintf(format, args...)
+	if err := logger.Output(callDepth, msg); err != nil {
+		fmt.Fprintf(os.Stderr, "Unable to log: %s", err)
+	}
+}
+
+// SetLevel sets the logger's logging level
+func (ll *DefaultLeveledLogger) SetLevel(newLevel LogLevel) {
+	ll.level.Set(newLevel)
+}
+
+// Trace emits the preformatted message if the logger is at or below LogLevelTrace
+func (ll *DefaultLeveledLogger) Trace(msg string) {
+	ll.logf(ll.trace, LogLevelTrace, msg)
+}
+
+// Tracef formats and emits a message if the logger is at or below LogLevelTrace
+func (ll *DefaultLeveledLogger) Tracef(format string, args ...interface{}) {
+	ll.logf(ll.trace, LogLevelTrace, format, args...)
+}
+
+// Debug emits the preformatted message if the logger is at or below LogLevelDebug
+func (ll *DefaultLeveledLogger) Debug(msg string) {
+	ll.logf(ll.debug, LogLevelDebug, msg)
+}
+
+// Debugf formats and emits a message if the logger is at or below LogLevelDebug
+func (ll *DefaultLeveledLogger) Debugf(format string, args ...interface{}) {
+	ll.logf(ll.debug, LogLevelDebug, format, args...)
+}
+
+// Info emits the preformatted message if the logger is at or below LogLevelInfo
+func (ll *DefaultLeveledLogger) Info(msg string) {
+	ll.logf(ll.info, LogLevelInfo, msg)
+}
+
+// Infof formats and emits a message if the logger is at or below LogLevelInfo
+func (ll *DefaultLeveledLogger) Infof(format string, args ...interface{}) {
+	ll.logf(ll.info, LogLevelInfo, format, args...)
+}
+
+// Warn emits the preformatted message if the logger is at or below LogLevelWarn
+func (ll *DefaultLeveledLogger) Warn(msg string) {
+	ll.logf(ll.warn, LogLevelWarn, msg)
+}
+
+// Warnf formats and emits a message if the logger is at or below LogLevelWarn
+func (ll *DefaultLeveledLogger) Warnf(format string, args ...interface{}) {
+	ll.logf(ll.warn, LogLevelWarn, format, args...)
+}
+
+// Error emits the preformatted message if the logger is at or below LogLevelError
+func (ll *DefaultLeveledLogger) Error(msg string) {
+	ll.logf(ll.err, LogLevelError, msg)
+}
+
+// Errorf formats and emits a message if the logger is at or below LogLevelError
+func (ll *DefaultLeveledLogger) Errorf(format string, args ...interface{}) {
+	ll.logf(ll.err, LogLevelError, format, args...)
+}
+
+// NewDefaultLeveledLoggerForScope returns a configured LeveledLogger
+func NewDefaultLeveledLoggerForScope(scope string, level LogLevel, writer io.Writer) *DefaultLeveledLogger {
+	if writer == nil {
+		writer = os.Stdout
+	}
+	logger := &DefaultLeveledLogger{
+		writer: &loggerWriter{output: writer},
+		level:  level,
+	}
+	return logger.
+		WithTraceLogger(log.New(logger.writer, fmt.Sprintf("%s TRACE: ", scope), log.Lmicroseconds|log.Lshortfile)).
+		WithDebugLogger(log.New(logger.writer, fmt.Sprintf("%s DEBUG: ", scope), log.Lmicroseconds|log.Lshortfile)).
+		WithInfoLogger(log.New(logger.writer, fmt.Sprintf("%s INFO: ", scope), log.LstdFlags)).
+		WithWarnLogger(log.New(logger.writer, fmt.Sprintf("%s WARNING: ", scope), log.LstdFlags)).
+		WithErrorLogger(log.New(logger.writer, fmt.Sprintf("%s ERROR: ", scope), log.LstdFlags))
+}
+
+// DefaultLoggerFactory define levels by scopes and creates new DefaultLeveledLogger
+type DefaultLoggerFactory struct {
+	Writer          io.Writer
+	DefaultLogLevel LogLevel
+	ScopeLevels     map[string]LogLevel
+}
+
+// NewDefaultLoggerFactory creates a new DefaultLoggerFactory
+func NewDefaultLoggerFactory() *DefaultLoggerFactory {
+	factory := DefaultLoggerFactory{}
+	factory.DefaultLogLevel = LogLevelError
+	factory.ScopeLevels = make(map[string]LogLevel)
+	factory.Writer = os.Stdout
+
+	logLevels := map[string]LogLevel{
+		"DISABLE": LogLevelDisabled,
+		"ERROR":   LogLevelError,
+		"WARN":    LogLevelWarn,
+		"INFO":    LogLevelInfo,
+		"DEBUG":   LogLevelDebug,
+		"TRACE":   LogLevelTrace,
+	}
+
+	for name, level := range logLevels {
+		env := os.Getenv(fmt.Sprintf("PION_LOG_%s", name))
+
+		if env == "" {
+			env = os.Getenv(fmt.Sprintf("PIONS_LOG_%s", name))
+		}
+
+		if env == "" {
+			continue
+		}
+
+		if strings.ToLower(env) == "all" {
+			factory.DefaultLogLevel = level
+			continue
+		}
+
+		scopes := strings.Split(strings.ToLower(env), ",")
+		for _, scope := range scopes {
+			factory.ScopeLevels[scope] = level
+		}
+	}
+
+	return &factory
+}
+
+// NewLogger returns a configured LeveledLogger for the given , argsscope
+func (f *DefaultLoggerFactory) NewLogger(scope string) LeveledLogger {
+	logLevel := f.DefaultLogLevel
+	if f.ScopeLevels != nil {
+		scopeLevel, found := f.ScopeLevels[scope]
+
+		if found {
+			logLevel = scopeLevel
+		}
+	}
+	return NewDefaultLeveledLoggerForScope(scope, logLevel, f.Writer)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/scoped.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/scoped.go
new file mode 100644
index 000000000..678bab426
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/logging/scoped.go
@@ -0,0 +1,72 @@
+package logging
+
+import (
+	"sync/atomic"
+)
+
+// LogLevel represents the level at which the logger will emit log messages
+type LogLevel int32
+
+// Set updates the LogLevel to the supplied value
+func (ll *LogLevel) Set(newLevel LogLevel) {
+	atomic.StoreInt32((*int32)(ll), int32(newLevel))
+}
+
+// Get retrieves the current LogLevel value
+func (ll *LogLevel) Get() LogLevel {
+	return LogLevel(atomic.LoadInt32((*int32)(ll)))
+}
+
+func (ll LogLevel) String() string {
+	switch ll {
+	case LogLevelDisabled:
+		return "Disabled"
+	case LogLevelError:
+		return "Error"
+	case LogLevelWarn:
+		return "Warn"
+	case LogLevelInfo:
+		return "Info"
+	case LogLevelDebug:
+		return "Debug"
+	case LogLevelTrace:
+		return "Trace"
+	default:
+		return "UNKNOWN"
+	}
+}
+
+const (
+	// LogLevelDisabled completely disables logging of any events
+	LogLevelDisabled LogLevel = iota
+	// LogLevelError is for fatal errors which should be handled by user code,
+	// but are logged to ensure that they are seen
+	LogLevelError
+	// LogLevelWarn is for logging abnormal, but non-fatal library operation
+	LogLevelWarn
+	// LogLevelInfo is for logging normal library operation (e.g. state transitions, etc.)
+	LogLevelInfo
+	// LogLevelDebug is for logging low-level library information (e.g. internal operations)
+	LogLevelDebug
+	// LogLevelTrace is for logging very low-level library information (e.g. network traces)
+	LogLevelTrace
+)
+
+// LeveledLogger is the basic pion Logger interface
+type LeveledLogger interface {
+	Trace(msg string)
+	Tracef(format string, args ...interface{})
+	Debug(msg string)
+	Debugf(format string, args ...interface{})
+	Info(msg string)
+	Infof(format string, args ...interface{})
+	Warn(msg string)
+	Warnf(format string, args ...interface{})
+	Error(msg string)
+	Errorf(format string, args ...interface{})
+}
+
+// LoggerFactory is the basic pion LoggerFactory interface
+type LoggerFactory interface {
+	NewLogger(scope string) LeveledLogger
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/.golangci.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/.golangci.yml
new file mode 100644
index 000000000..fb2ff86d7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/.golangci.yml
@@ -0,0 +1,13 @@
+linters-settings:
+  govet:
+    check-shadowing: true
+  misspell:
+    locale: US
+
+linters:
+  enable-all: true
+  disable:
+    - funlen
+
+issues:
+  exclude-use-default: false
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/.travis.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/.travis.yml
new file mode 100644
index 000000000..5efedaf8b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/.travis.yml
@@ -0,0 +1,19 @@
+language: go
+
+go:
+  - "1.x" # use the latest Go release
+
+env:
+  - GO111MODULE=on
+
+before_script:
+  - curl -sfL https://install.goreleaser.com/github.com/golangci/golangci-lint.sh | bash -s -- -b $GOPATH/bin v1.18.0
+
+script:
+  - golangci-lint run ./...
+  - rm -rf examples # Remove examples, no test coverage for them
+  - go test -coverpkg=$(go list ./... | tr '\n' ',') -coverprofile=cover.out -v -race -covermode=atomic ./...
+  - bash <(curl -s https://codecov.io/bash)
+  - bash .github/assert-contributors.sh
+  - bash .github/lint-disallowed-functions-in-library.sh
+  - bash .github/lint-commit-message.sh
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/LICENSE
new file mode 100644
index 000000000..ab602974d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/README.md
new file mode 100644
index 000000000..0be76a7ff
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/README.md
@@ -0,0 +1,63 @@
+<h1 align="center">
+  <br>
+  Pion mDNS
+  <br>
+</h1>
+<h4 align="center">A Go implementation of mDNS</h4>
+<p align="center">
+  <a href="https://pion.ly"><img src="https://img.shields.io/badge/pion-mdns-gray.svg?longCache=true&colorB=brightgreen" alt="Pion mDNS"></a>
+  <a href="https://pion.ly/slack"><img src="https://img.shields.io/badge/join-us%20on%20slack-gray.svg?longCache=true&logo=slack&colorB=brightgreen" alt="Slack Widget"></a>
+  <br>
+  <a href="https://travis-ci.org/pion/mdns"><img src="https://travis-ci.org/pion/mdns.svg?branch=master" alt="Build Status"></a>
+  <a href="https://godoc.org/github.com/pion/mdns"><img src="https://godoc.org/github.com/pion/mdns?status.svg" alt="GoDoc"></a>
+  <a href="https://codecov.io/gh/pion/mdns"><img src="https://codecov.io/gh/pion/mdns/branch/master/graph/badge.svg" alt="Coverage Status"></a>
+  <a href="https://goreportcard.com/report/github.com/pion/mdns"><img src="https://goreportcard.com/badge/github.com/pion/mdns" alt="Go Report Card"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+</p>
+<br>
+
+Go mDNS implementation. The original user is Pion WebRTC, but we would love to see it work for everyone.
+
+### Running Server
+For a mDNS server that responds to queries for `pion-test.local`
+```sh
+go run examples/listen/main.go
+```
+
+
+### Running Client
+To query using Pion you can run the `query` example
+```sh
+go run examples/query/main.go
+```
+
+You can use the macOS client
+```
+dns-sd -q pion-test.local
+```
+
+Or the avahi client
+```
+avahi-resolve -a pion-test.local
+```
+
+### References
+https://tools.ietf.org/html/rfc6762
+https://tools.ietf.org/id/draft-ietf-rtcweb-mdns-ice-candidates-02.html
+
+### Community
+Pion has an active community on the [Golang Slack](https://invite.slack.golangbridge.org/). Sign up and join the **#pion** channel for discussions and support. You can also use [Pion mailing list](https://groups.google.com/forum/#!forum/pion).
+
+We are always looking to support **your projects**. Please reach out if you have something to build!
+
+If you need commercial support or don't want to use public methods you can contact us at [team@pion.ly](mailto:team@pion.ly)
+
+### Contributing
+Check out the **[contributing wiki](https://github.com/pion/webrtc/wiki/Contributing)** to join the group of amazing people making this project possible:
+
+* [Sean DuBois](https://github.com/Sean-Der) - *Original Author*
+* [Konstantin Itskov](https://github.com/trivigy) - Contributor
+* [Hugo Arregui](https://github.com/hugoArregui)
+
+### License
+MIT License - see [LICENSE](LICENSE) for full text
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/config.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/config.go
new file mode 100644
index 000000000..ebfa4e5cd
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/config.go
@@ -0,0 +1,27 @@
+package mdns
+
+import (
+	"time"
+
+	"github.com/pion/logging"
+)
+
+const (
+	// DefaultAddress is the default used by mDNS
+	// and in most cases should be the address that the
+	// net.Conn passed to Server is bound to
+	DefaultAddress = "224.0.0.0:5353"
+)
+
+// Config is used to configure a mDNS client or server.
+type Config struct {
+	// QueryInterval controls how ofter we sends Queries until we
+	// get a response for the requested name
+	QueryInterval time.Duration
+
+	// LocalNames are the names that we will generate answers for
+	// when we get questions
+	LocalNames []string
+
+	LoggerFactory logging.LoggerFactory
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/conn.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/conn.go
new file mode 100644
index 000000000..a8aafb2a0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/conn.go
@@ -0,0 +1,316 @@
+package mdns
+
+import (
+	"context"
+	"math/big"
+	"net"
+	"sync"
+	"time"
+
+	"github.com/pion/logging"
+	"golang.org/x/net/dns/dnsmessage"
+	"golang.org/x/net/ipv4"
+)
+
+// Conn represents a mDNS Server
+type Conn struct {
+	mu  sync.RWMutex
+	log logging.LeveledLogger
+
+	socket  *ipv4.PacketConn
+	dstAddr *net.UDPAddr
+
+	queryInterval time.Duration
+	localNames    []string
+	queries       []query
+
+	closed chan interface{}
+}
+
+type query struct {
+	nameWithSuffix  string
+	queryResultChan chan queryResult
+}
+
+type queryResult struct {
+	answer dnsmessage.ResourceHeader
+	addr   net.Addr
+}
+
+const (
+	inboundBufferSize    = 512
+	defaultQueryInterval = time.Second
+	destinationAddress   = "224.0.0.251:5353"
+	maxMessageRecords    = 3
+	responseTTL          = 120
+)
+
+// Server establishes a mDNS connection over an existing conn
+func Server(conn *ipv4.PacketConn, config *Config) (*Conn, error) {
+	if config == nil {
+		return nil, errNilConfig
+	}
+
+	ifaces, err := net.Interfaces()
+	if err != nil {
+		return nil, err
+	}
+
+	joinErrCount := 0
+	for i := range ifaces {
+		if err = conn.JoinGroup(&ifaces[i], &net.UDPAddr{IP: net.IPv4(224, 0, 0, 251)}); err != nil {
+			joinErrCount++
+		}
+	}
+	if joinErrCount >= len(ifaces) {
+		return nil, errJoiningMulticastGroup
+	}
+
+	dstAddr, err := net.ResolveUDPAddr("udp", destinationAddress)
+	if err != nil {
+		return nil, err
+
+	}
+
+	loggerFactory := config.LoggerFactory
+	if loggerFactory == nil {
+		loggerFactory = logging.NewDefaultLoggerFactory()
+	}
+
+	localNames := []string{}
+	for _, l := range config.LocalNames {
+		localNames = append(localNames, l+".")
+	}
+
+	c := &Conn{
+		queryInterval: defaultQueryInterval,
+		queries:       []query{},
+		socket:        conn,
+		dstAddr:       dstAddr,
+		localNames:    localNames,
+		log:           loggerFactory.NewLogger("mdns"),
+		closed:        make(chan interface{}),
+	}
+	if config.QueryInterval != 0 {
+		c.queryInterval = config.QueryInterval
+	}
+
+	go c.start()
+	return c, nil
+}
+
+// Close closes the mDNS Conn
+func (c *Conn) Close() error {
+	select {
+	case <-c.closed:
+		return nil
+	default:
+	}
+
+	if err := c.socket.Close(); err != nil {
+		return err
+	}
+
+	<-c.closed
+	return nil
+}
+
+// Query sends mDNS Queries for the following name until
+// either the Context is canceled/expires or we get a result
+func (c *Conn) Query(ctx context.Context, name string) (dnsmessage.ResourceHeader, net.Addr, error) {
+	select {
+	case <-c.closed:
+		return dnsmessage.ResourceHeader{}, nil, errConnectionClosed
+	default:
+	}
+
+	nameWithSuffix := name + "."
+
+	queryChan := make(chan queryResult, 1)
+	c.mu.Lock()
+	c.queries = append(c.queries, query{nameWithSuffix, queryChan})
+	ticker := time.NewTicker(c.queryInterval)
+	c.mu.Unlock()
+
+	c.sendQuestion(nameWithSuffix)
+	for {
+		select {
+		case <-ticker.C:
+			c.sendQuestion(nameWithSuffix)
+		case <-c.closed:
+			return dnsmessage.ResourceHeader{}, nil, errConnectionClosed
+		case res := <-queryChan:
+			return res.answer, res.addr, nil
+		case <-ctx.Done():
+			return dnsmessage.ResourceHeader{}, nil, errContextElapsed
+		}
+	}
+}
+
+func ipToBytes(ip net.IP) (out [4]byte) {
+	rawIP := ip.To4()
+	if rawIP == nil {
+		return
+	}
+
+	ipInt := big.NewInt(0)
+	ipInt.SetBytes(rawIP)
+	copy(out[:], ipInt.Bytes())
+	return
+}
+
+func interfaceForRemote(remote string) (net.IP, error) {
+	conn, err := net.Dial("udp", remote)
+	if err != nil {
+		return nil, err
+	}
+
+	localAddr := conn.LocalAddr().(*net.UDPAddr)
+	if err := conn.Close(); err != nil {
+		return nil, err
+	}
+
+	return localAddr.IP, nil
+}
+
+func (c *Conn) sendQuestion(name string) {
+	packedName, err := dnsmessage.NewName(name)
+	if err != nil {
+		c.log.Warnf("Failed to construct mDNS packet %v", err)
+		return
+	}
+
+	msg := dnsmessage.Message{
+		Header: dnsmessage.Header{},
+		Questions: []dnsmessage.Question{
+			{
+				Type:  dnsmessage.TypeA,
+				Class: dnsmessage.ClassINET,
+				Name:  packedName,
+			},
+		},
+	}
+
+	rawQuery, err := msg.Pack()
+	if err != nil {
+		c.log.Warnf("Failed to construct mDNS packet %v", err)
+		return
+	}
+
+	if _, err := c.socket.WriteTo(rawQuery, nil, c.dstAddr); err != nil {
+		c.log.Warnf("Failed to send mDNS packet %v", err)
+		return
+	}
+}
+
+func (c *Conn) sendAnswer(name string, dst net.IP) {
+	packedName, err := dnsmessage.NewName(name)
+	if err != nil {
+		c.log.Warnf("Failed to construct mDNS packet %v", err)
+		return
+	}
+
+	msg := dnsmessage.Message{
+		Header: dnsmessage.Header{
+			Response:      true,
+			Authoritative: true,
+		},
+		Answers: []dnsmessage.Resource{
+			{
+				Header: dnsmessage.ResourceHeader{
+					Type:  dnsmessage.TypeA,
+					Class: dnsmessage.ClassINET,
+					Name:  packedName,
+					TTL:   responseTTL,
+				},
+				Body: &dnsmessage.AResource{
+					A: ipToBytes(dst),
+				},
+			},
+		},
+	}
+
+	rawAnswer, err := msg.Pack()
+	if err != nil {
+		c.log.Warnf("Failed to construct mDNS packet %v", err)
+		return
+	}
+
+	if _, err := c.socket.WriteTo(rawAnswer, nil, c.dstAddr); err != nil {
+		c.log.Warnf("Failed to send mDNS packet %v", err)
+		return
+	}
+}
+
+func (c *Conn) start() {
+	defer func() {
+		c.mu.Lock()
+		defer c.mu.Unlock()
+		close(c.closed)
+	}()
+
+	b := make([]byte, inboundBufferSize)
+	p := dnsmessage.Parser{}
+
+	for {
+		n, _, src, err := c.socket.ReadFrom(b)
+		if err != nil {
+			return
+		}
+
+		func() {
+			c.mu.RLock()
+			defer c.mu.RUnlock()
+
+			if _, err := p.Start(b[:n]); err != nil {
+				c.log.Warnf("Failed to parse mDNS packet %v", err)
+				return
+			}
+
+			for i := 0; i <= maxMessageRecords; i++ {
+				q, err := p.Question()
+				if err == dnsmessage.ErrSectionDone {
+					break
+				} else if err != nil {
+					c.log.Warnf("Failed to parse mDNS packet %v", err)
+					return
+				}
+
+				for _, localName := range c.localNames {
+					if localName == q.Name.String() {
+
+						localAddress, err := interfaceForRemote(src.String())
+						if err != nil {
+							c.log.Warnf("Failed to get local interface to communicate with %s: %v", src.String(), err)
+							continue
+						}
+
+						c.sendAnswer(q.Name.String(), localAddress)
+					}
+				}
+			}
+
+			for i := 0; i <= maxMessageRecords; i++ {
+				a, err := p.AnswerHeader()
+				if err == dnsmessage.ErrSectionDone {
+					return
+				}
+				if err != nil {
+					c.log.Warnf("Failed to parse mDNS packet %v", err)
+					return
+				}
+
+				if a.Type != dnsmessage.TypeA && a.Type != dnsmessage.TypeAAAA {
+					continue
+				}
+
+				for i := len(c.queries) - 1; i >= 0; i-- {
+					if c.queries[i].nameWithSuffix == a.Name.String() {
+						c.queries[i].queryResultChan <- queryResult{a, src}
+						c.queries = append(c.queries[:i], c.queries[i+1:]...)
+					}
+				}
+			}
+		}()
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/errors.go
new file mode 100644
index 000000000..2f8dc928b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/errors.go
@@ -0,0 +1,10 @@
+package mdns
+
+import "errors"
+
+var (
+	errJoiningMulticastGroup = errors.New("mDNS: failed to join multicast group")
+	errConnectionClosed      = errors.New("mDNS: connection is closed")
+	errContextElapsed        = errors.New("mDNS: context has elapsed")
+	errNilConfig             = errors.New("mDNS: config must not be nil")
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/go.mod
new file mode 100644
index 000000000..8359ed9c8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/go.mod
@@ -0,0 +1,9 @@
+module github.com/pion/mdns
+
+go 1.12
+
+require (
+	github.com/pion/logging v0.2.2
+	github.com/pion/transport v0.8.10
+	golang.org/x/net v0.0.0-20191126235420-ef20fe5d7933
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/go.sum b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/go.sum
new file mode 100644
index 000000000..047fa8bdd
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/go.sum
@@ -0,0 +1,16 @@
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/pion/logging v0.2.2 h1:M9+AIj/+pxNsDfAT64+MAVgJO0rsyLnoJKCqf//DoeY=
+github.com/pion/logging v0.2.2/go.mod h1:k0/tDVsRCX2Mb2ZEmTqNa7CWsQPc+YYCB7Q+5pahoms=
+github.com/pion/transport v0.8.10 h1:lTiobMEw2PG6BH/mgIVqTV2mBp/mPT+IJLaN8ZxgdHk=
+github.com/pion/transport v0.8.10/go.mod h1:tBmha/UCjpum5hqTWhfAEs3CO4/tHSg0MYRhSzR+CZ8=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/net v0.0.0-20191126235420-ef20fe5d7933 h1:e6HwijUxhDe+hPNjZQQn9bA5PW3vNmnN64U2ZW759Lk=
+golang.org/x/net v0.0.0-20191126235420-ef20fe5d7933/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a h1:1BGLXjeY4akVXGgbC9HugT3Jv3hCI0z56oJR5vAMgBU=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/renovate.json b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/renovate.json
new file mode 100644
index 000000000..4400fd9b2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/mdns/renovate.json
@@ -0,0 +1,15 @@
+{
+  "extends": [
+    "config:base"
+  ],
+  "postUpdateOptions": [
+    "gomodTidy"
+  ],
+  "commitBody": "Generated by renovateBot",
+  "packageRules": [
+    {
+      "packagePatterns": ["^golang.org/x/"],
+      "schedule": ["on the first day of the month"]
+    }
+  ]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/.travis.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/.travis.yml
new file mode 100644
index 000000000..f04a89667
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/.travis.yml
@@ -0,0 +1,142 @@
+#
+# DO NOT EDIT THIS FILE
+#
+# It is automatically copied from https://github.com/pion/.goassets repository.
+# If this repository should have package specific CI config,
+# remove the repository name from .goassets/.github/workflows/assets-sync.yml.
+#
+# If you want to update the shared CI config, send a PR to
+# https://github.com/pion/.goassets instead of this repository.
+#
+
+dist: bionic
+language: go
+
+
+branches:
+  only:
+  - master
+
+env:
+  global:
+    - GO111MODULE=on
+    - GOLANGCI_LINT_VERSION=1.19.1
+
+cache:
+  directories:
+    - ${HOME}/.cache/go-build
+    - ${GOPATH}/pkg/mod
+  npm: true
+  yarn: true
+
+_lint_job: &lint_job
+  env: CACHE_NAME=lint
+  before_install:
+    - if [ -f .github/.ci.conf ]; then . .github/.ci.conf; fi
+  install: skip
+  before_script:
+    - |
+      curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh \
+        | bash -s - -b $GOPATH/bin v${GOLANGCI_LINT_VERSION}
+  script:
+    - bash .github/assert-contributors.sh
+    - bash .github/lint-disallowed-functions-in-library.sh
+    - bash .github/lint-commit-message.sh
+    - bash .github/lint-filename.sh
+    - golangci-lint run ./...
+_test_job: &test_job
+  env: CACHE_NAME=test
+  before_install:
+    - if [ -f .github/.ci.conf ]; then . .github/.ci.conf; fi
+    - go mod download
+  install:
+    - go build ./...
+  script:
+    # If you want to specify repository specific test packages rule,
+    # add `TEST_PACKAGES=$(command to list test target packages)` to .github/.ci.conf
+    - testpkgs=${TEST_PACKAGES:-$(go list ./... | grep -v examples)}
+    - coverpkgs=$(echo "${testpkgs}" | paste -s -d ',')
+    - |
+      go test \
+        -coverpkg=${coverpkgs} -coverprofile=cover.out -covermode=atomic \
+        ${TEST_EXTRA_ARGS:-} \
+        -v -race ${testpkgs}
+    - if [ -n "${TEST_HOOK}" ]; then ${TEST_HOOK}; fi
+  after_success:
+    - travis_retry bash <(curl -s https://codecov.io/bash) -c -F go
+_test_i386_job: &test_i386_job
+  env: CACHE_NAME=test386
+  services: docker
+  before_install:
+    - if [ -f .github/.ci.conf ]; then . .github/.ci.conf; fi
+  script:
+    - testpkgs=${TEST_PACKAGES:-$(go list ./... | grep -v examples)}
+    - |
+      docker run \
+        -u $(id -u):$(id -g) \
+        -e "GO111MODULE=on" \
+        -e "CGO_ENABLED=0" \
+        -v ${PWD}:/go/src/github.com/pion/$(basename ${PWD}) \
+        -v ${HOME}/gopath/pkg/mod:/go/pkg/mod \
+        -v ${HOME}/.cache/go-build:/.cache/go-build \
+        -w /go/src/github.com/pion/$(basename ${PWD}) \
+        -it i386/golang:${GO_VERSION}-alpine \
+        /usr/local/go/bin/go test \
+          ${TEST_EXTRA_ARGS:-} \
+          -v ${testpkgs}
+_test_wasm_job: &test_wasm_job
+  env: CACHE_NAME=wasm
+  language: node_js
+  node_js: 12
+  before_install:
+    - if [ -f .github/.ci.conf ]; then . .github/.ci.conf; fi
+    - if ${SKIP_WASM_TEST:-false}; then exit 0; fi
+  install:
+    # Manually download and install Go instead of using gimme.
+    # It looks like gimme Go causes some errors on go-test for Wasm.
+    - curl -sSfL https://dl.google.com/go/go${GO_VERSION}.linux-amd64.tar.gz | tar -C ~ -xzf -
+    - export GOROOT=${HOME}/go
+    - export PATH=${GOROOT}/bin:${PATH}
+    - yarn install
+    - export GO_JS_WASM_EXEC=${GO_JS_WASM_EXEC:-${GOROOT}/misc/wasm/go_js_wasm_exec}
+  script:
+    - testpkgs=${TEST_PACKAGES:-$(go list ./... | grep -v examples)}
+    - coverpkgs=$(echo "${testpkgs}" | paste -s -d ',')
+    - |
+      GOOS=js GOARCH=wasm go test \
+        -coverpkg=${coverpkgs} -coverprofile=cover.out -covermode=atomic \
+        -exec="${GO_JS_WASM_EXEC}" \
+        -v ${testpkgs}
+  after_success:
+    - travis_retry bash <(curl -s https://codecov.io/bash) -c -F wasm
+
+jobs:
+  include:
+    - <<: *lint_job
+      name: Lint 1.14
+      go: 1.14
+    - <<: *test_job
+      name: Test 1.13
+      go: 1.13
+    - <<: *test_job
+      name: Test 1.14
+      go: 1.14
+    - <<: *test_i386_job
+      name: Test i386 1.13
+      env: GO_VERSION=1.13
+      go: 1.14  # Go version for host environment only for `go list`.
+                # All tests are done on the version specified by GO_VERSION.
+    - <<: *test_i386_job
+      name: Test i386 1.14
+      env: GO_VERSION=1.14
+      go: 1.14  # Go version for host environment only for `go list`.
+                # All tests are done on the version specified by GO_VERSION.
+    - <<: *test_wasm_job
+      name: Test WASM 1.13
+      env: GO_VERSION=1.13
+    - <<: *test_wasm_job
+      name: Test WASM 1.14
+      env: GO_VERSION=1.14
+
+notifications:
+  email: false
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/LICENSE
new file mode 100644
index 000000000..5b5a39425
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2020 Pion
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/README.md
new file mode 100644
index 000000000..94baf7781
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/README.md
@@ -0,0 +1,14 @@
+# randutil
+Helper library for cryptographic and mathmatical randoms
+
+### Community
+Pion has an active community on the [Golang Slack](https://invite.slack.golangbridge.org/). Sign up and join the **#pion** channel for discussions and support. You can also use [Pion mailing list](https://groups.google.com/forum/#!forum/pion).
+
+We are always looking to support **your projects**. Please reach out if you have something to build!
+
+If you need commercial support or don't want to use public methods you can contact us at [team@pion.ly](mailto:team@pion.ly)
+
+### Contributing
+Check out the **[contributing wiki](https://github.com/pion/webrtc/wiki/Contributing)** to join the group of amazing people making this project possible:
+
+* [Atsushi Watanabe](https://github.com/at-wat) - *Original Author*
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/codecov.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/codecov.yml
new file mode 100644
index 000000000..085200a48
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/codecov.yml
@@ -0,0 +1,20 @@
+#
+# DO NOT EDIT THIS FILE
+#
+# It is automatically copied from https://github.com/pion/.goassets repository.
+#
+
+coverage:
+  status:
+    project:
+      default:
+        # Allow decreasing 2% of total coverage to avoid noise.
+        threshold: 2%
+    patch:
+      default:
+        target: 70%
+        only_pulls: true
+
+ignore:
+  - "examples/*"
+  - "examples/**/*"
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/crypto.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/crypto.go
new file mode 100644
index 000000000..d10df98d0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/crypto.go
@@ -0,0 +1,30 @@
+package randutil
+
+import (
+	crand "crypto/rand"
+	"encoding/binary"
+	"math/big"
+)
+
+// GenerateCryptoRandomString generates a random string for cryptographic usage.
+func GenerateCryptoRandomString(n int, runes string) (string, error) {
+	letters := []rune(runes)
+	b := make([]rune, n)
+	for i := range b {
+		v, err := crand.Int(crand.Reader, big.NewInt(int64(len(letters))))
+		if err != nil {
+			return "", err
+		}
+		b[i] = letters[v.Int64()]
+	}
+	return string(b), nil
+}
+
+// CryptoUint64 returns cryptographic random uint64.
+func CryptoUint64() (uint64, error) {
+	var v uint64
+	if err := binary.Read(crand.Reader, binary.LittleEndian, &v); err != nil {
+		return 0, err
+	}
+	return v, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/go.mod
new file mode 100644
index 000000000..2a824e048
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/go.mod
@@ -0,0 +1,3 @@
+module github.com/pion/randutil
+
+go 1.14
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/math.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/math.go
new file mode 100644
index 000000000..fbbf46023
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/math.go
@@ -0,0 +1,72 @@
+package randutil
+
+import (
+	mrand "math/rand" // used for non-crypto unique ID and random port selection
+	"sync"
+	"time"
+)
+
+// MathRandomGenerator is a random generator for non-crypto usage.
+type MathRandomGenerator interface {
+	// Intn returns random integer within [0:n).
+	Intn(n int) int
+
+	// Uint32 returns random 32-bit unsigned integer.
+	Uint32() uint32
+
+	// Uint64 returns random 64-bit unsigned integer.
+	Uint64() uint64
+
+	// GenerateString returns ranom string using given set of runes.
+	// It can be used for generating unique ID to avoid name collision.
+	//
+	// Caution: DO NOT use this for cryptographic usage.
+	GenerateString(n int, runes string) string
+}
+
+type mathRandomGenerator struct {
+	r  *mrand.Rand
+	mu sync.Mutex
+}
+
+// NewMathRandomGenerator creates new mathmatical random generator.
+// Random generator is seeded by crypto random.
+func NewMathRandomGenerator() MathRandomGenerator {
+	seed, err := CryptoUint64()
+	if err != nil {
+		// crypto/rand is unavailable. Fallback to seed by time.
+		seed = uint64(time.Now().UnixNano())
+	}
+
+	return &mathRandomGenerator{r: mrand.New(mrand.NewSource(int64(seed)))}
+}
+
+func (g *mathRandomGenerator) Intn(n int) int {
+	g.mu.Lock()
+	v := g.r.Intn(n)
+	g.mu.Unlock()
+	return v
+}
+
+func (g *mathRandomGenerator) Uint32() uint32 {
+	g.mu.Lock()
+	v := g.r.Uint32()
+	g.mu.Unlock()
+	return v
+}
+
+func (g *mathRandomGenerator) Uint64() uint64 {
+	g.mu.Lock()
+	v := g.r.Uint64()
+	g.mu.Unlock()
+	return v
+}
+
+func (g *mathRandomGenerator) GenerateString(n int, runes string) string {
+	letters := []rune(runes)
+	b := make([]rune, n)
+	for i := range b {
+		b[i] = letters[g.Intn(len(letters))]
+	}
+	return string(b)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/renovate.json b/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/renovate.json
new file mode 100644
index 000000000..4400fd9b2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/randutil/renovate.json
@@ -0,0 +1,15 @@
+{
+  "extends": [
+    "config:base"
+  ],
+  "postUpdateOptions": [
+    "gomodTidy"
+  ],
+  "commitBody": "Generated by renovateBot",
+  "packageRules": [
+    {
+      "packagePatterns": ["^golang.org/x/"],
+      "schedule": ["on the first day of the month"]
+    }
+  ]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/.gitignore b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/.gitignore
new file mode 100644
index 000000000..83db74ba5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/.gitignore
@@ -0,0 +1,24 @@
+### JetBrains IDE ###
+#####################
+.idea/
+
+### Emacs Temporary Files ###
+#############################
+*~
+
+### Folders ###
+###############
+bin/
+vendor/
+node_modules/
+
+### Files ###
+#############
+*.ivf
+*.ogg
+tags
+cover.out
+*.sw[poe]
+*.wasm
+examples/sfu-ws/cert.pem
+examples/sfu-ws/key.pem
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/.golangci.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/.golangci.yml
new file mode 100644
index 000000000..d6162c970
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/.golangci.yml
@@ -0,0 +1,89 @@
+linters-settings:
+  govet:
+    check-shadowing: true
+  misspell:
+    locale: US
+  exhaustive:
+    default-signifies-exhaustive: true
+  gomodguard:
+    blocked:
+      modules:
+        - github.com/pkg/errors:
+            recommendations:
+            - errors
+
+linters:
+  enable:
+    - asciicheck       # Simple linter to check that your code does not contain non-ASCII identifiers
+    - bodyclose        # checks whether HTTP response body is closed successfully
+    - deadcode         # Finds unused code
+    - depguard         # Go linter that checks if package imports are in a list of acceptable packages
+    - dogsled          # Checks assignments with too many blank identifiers (e.g. x, _, _, _, := f())
+    - dupl             # Tool for code clone detection
+    - errcheck         # Errcheck is a program for checking for unchecked errors in go programs. These unchecked errors can be critical bugs in some cases
+    - exhaustive       # check exhaustiveness of enum switch statements
+    - exportloopref    # checks for pointers to enclosing loop variables
+    - gci              # Gci control golang package import order and make it always deterministic.
+    - gochecknoglobals # Checks that no globals are present in Go code
+    - gochecknoinits   # Checks that no init functions are present in Go code
+    - gocognit         # Computes and checks the cognitive complexity of functions
+    - goconst          # Finds repeated strings that could be replaced by a constant
+    - gocritic         # The most opinionated Go source code linter
+    - godox            # Tool for detection of FIXME, TODO and other comment keywords
+    - goerr113         # Golang linter to check the errors handling expressions
+    - gofmt            # Gofmt checks whether code was gofmt-ed. By default this tool runs with -s option to check for code simplification
+    - gofumpt          # Gofumpt checks whether code was gofumpt-ed.
+    - goheader         # Checks is file header matches to pattern
+    - goimports        # Goimports does everything that gofmt does. Additionally it checks unused imports
+    - golint           # Golint differs from gofmt. Gofmt reformats Go source code, whereas golint prints out style mistakes
+    - gomodguard       # Allow and block list linter for direct Go module dependencies. This is different from depguard where there are different block types for example version constraints and module recommendations.
+    - goprintffuncname # Checks that printf-like functions are named with `f` at the end
+    - gosec            # Inspects source code for security problems
+    - gosimple         # Linter for Go source code that specializes in simplifying a code
+    - govet            # Vet examines Go source code and reports suspicious constructs, such as Printf calls whose arguments do not align with the format string
+    - ineffassign      # Detects when assignments to existing variables are not used
+    - misspell         # Finds commonly misspelled English words in comments
+    - nakedret         # Finds naked returns in functions greater than a specified function length
+    - noctx            # noctx finds sending http request without context.Context
+    - scopelint        # Scopelint checks for unpinned variables in go programs
+    - staticcheck      # Staticcheck is a go vet on steroids, applying a ton of static analysis checks
+    - structcheck      # Finds unused struct fields
+    - stylecheck       # Stylecheck is a replacement for golint
+    - typecheck        # Like the front-end of a Go compiler, parses and type-checks Go code
+    - unconvert        # Remove unnecessary type conversions
+    - unparam          # Reports unused function parameters
+    - unused           # Checks Go code for unused constants, variables, functions and types
+    - varcheck         # Finds unused global variables and constants
+    - whitespace       # Tool for detection of leading and trailing whitespace
+  disable:
+    - funlen           # Tool for detection of long functions
+    - gocyclo          # Computes and checks the cyclomatic complexity of functions
+    - godot            # Check if comments end in a period
+    - gomnd            # An analyzer to detect magic numbers.
+    - lll              # Reports long lines
+    - maligned         # Tool to detect Go structs that would take less memory if their fields were sorted
+    - nestif           # Reports deeply nested if statements
+    - nlreturn         # nlreturn checks for a new line before return and branch statements to increase code clarity
+    - nolintlint       # Reports ill-formed or insufficient nolint directives
+    - prealloc         # Finds slice declarations that could potentially be preallocated
+    - rowserrcheck     # checks whether Err of rows is checked successfully
+    - sqlclosecheck    # Checks that sql.Rows and sql.Stmt are closed.
+    - testpackage      # linter that makes you use a separate _test package
+    - wsl              # Whitespace Linter - Forces you to use empty lines!
+
+issues:
+  exclude-use-default: false
+  exclude-rules:
+    # Allow complex tests, better to be self contained
+    - path: _test\.go
+      linters:
+        - gocognit
+
+    # Allow complex main function in examples
+    - path: examples
+      text: "of func `main` is high"
+      linters:
+        - gocognit
+
+run:
+  skip-dirs-use-default: false
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/LICENSE
new file mode 100644
index 000000000..ab602974d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/README.md
new file mode 100644
index 000000000..a054dae4a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/README.md
@@ -0,0 +1,49 @@
+<h1 align="center">
+  <br>
+  Pion RTCP
+  <br>
+</h1>
+<h4 align="center">A Go implementation of RTCP</h4>
+<p align="center">
+  <a href="https://pion.ly"><img src="https://img.shields.io/badge/pion-rtcp-gray.svg?longCache=true&colorB=brightgreen" alt="Pion RTCP"></a>
+  <a href="https://sourcegraph.com/github.com/pion/rtcp?badge"><img src="https://sourcegraph.com/github.com/pion/rtcp/-/badge.svg" alt="Sourcegraph Widget"></a>
+  <a href="https://pion.ly/slack"><img src="https://img.shields.io/badge/join-us%20on%20slack-gray.svg?longCache=true&logo=slack&colorB=brightgreen" alt="Slack Widget"></a>
+  <br>
+  <a href="https://travis-ci.org/pion/rtcp"><img src="https://travis-ci.org/pion/rtcp.svg?branch=master" alt="Build Status"></a>
+  <a href="https://pkg.go.dev/github.com/pion/rtcp"><img src="https://godoc.org/github.com/pion/rtcp?status.svg" alt="GoDoc"></a>
+  <a href="https://codecov.io/gh/pion/rtcp"><img src="https://codecov.io/gh/pion/rtcp/branch/master/graph/badge.svg" alt="Coverage Status"></a>
+  <a href="https://goreportcard.com/report/github.com/pion/rtcp"><img src="https://goreportcard.com/badge/github.com/pion/rtcp" alt="Go Report Card"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+</p>
+<br>
+
+See [DESIGN.md](DESIGN.md) for an overview of features and future goals.
+
+### Roadmap
+The library is used as a part of our WebRTC implementation. Please refer to that [roadmap](https://github.com/pion/webrtc/issues/9) to track our major milestones.
+
+### Community
+Pion has an active community on the [Golang Slack](https://invite.slack.golangbridge.org/). Sign up and join the **#pion** channel for discussions and support. You can also use [Pion mailing list](https://groups.google.com/forum/#!forum/pion).
+
+We are always looking to support **your projects**. Please reach out if you have something to build!
+
+If you need commercial support or don't want to use public methods you can contact us at [team@pion.ly](mailto:team@pion.ly)
+
+### Contributing
+Check out the **[contributing wiki](https://github.com/pion/webrtc/wiki/Contributing)** to join the group of amazing people making this project possible:
+
+* [Max Hawkins](https://github.com/maxhawkins) - *Original Author*
+* [Woodrow Douglass](https://github.com/wdouglass) *RTCP, RTP improvements, G.722 support, Bugfixes*
+* [Sean DuBois](https://github.com/Sean-Der) - *Linter fixes*
+* [adwpc](https://github.com/adwpc)
+* [Luke Curley](https://github.com/kixelated)
+* [Hugo Arregui](https://github.com/hugoArregui)
+* [Atsushi Watanabe](https://github.com/at-wat)
+* [Juliusz Chroboczek](https://github.com/jech)
+* [Gabor Pongracz](https://github.com/pongraczgabor87)
+* [Simone Gotti](https://github.com/sgotti)
+* [lllf](https://github.com/LittleLightLittleFire)
+* [cnderrauber](https://github.com/cnderrauber)
+
+### License
+MIT License - see [LICENSE](LICENSE) for full text
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/codecov.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/codecov.yml
new file mode 100644
index 000000000..085200a48
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/codecov.yml
@@ -0,0 +1,20 @@
+#
+# DO NOT EDIT THIS FILE
+#
+# It is automatically copied from https://github.com/pion/.goassets repository.
+#
+
+coverage:
+  status:
+    project:
+      default:
+        # Allow decreasing 2% of total coverage to avoid noise.
+        threshold: 2%
+    patch:
+      default:
+        target: 70%
+        only_pulls: true
+
+ignore:
+  - "examples/*"
+  - "examples/**/*"
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/compound_packet.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/compound_packet.go
new file mode 100644
index 000000000..2c74279b3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/compound_packet.go
@@ -0,0 +1,136 @@
+package rtcp
+
+// A CompoundPacket is a collection of RTCP packets transmitted as a single packet with
+// the underlying protocol (for example UDP).
+//
+// To maximize the resolution of receiption statistics, the first Packet in a CompoundPacket
+// must always be either a SenderReport or a ReceiverReport.  This is true even if no data
+// has been sent or received, in which case an empty ReceiverReport must be sent, and even
+// if the only other RTCP packet in the compound packet is a Goodbye.
+//
+// Next, a SourceDescription containing a CNAME item must be included in each CompoundPacket
+// to identify the source and to begin associating media for purposes such as lip-sync.
+//
+// Other RTCP packet types may follow in any order. Packet types may appear more than once.
+type CompoundPacket []Packet
+
+var _ Packet = (*CompoundPacket)(nil) // assert is a Packet
+
+// Validate returns an error if this is not an RFC-compliant CompoundPacket.
+func (c CompoundPacket) Validate() error {
+	if len(c) == 0 {
+		return errEmptyCompound
+	}
+
+	// SenderReport and ReceiverReport are the only types that
+	// are allowed to be the first packet in a compound datagram
+	switch c[0].(type) {
+	case *SenderReport, *ReceiverReport:
+		// ok
+	default:
+		return errBadFirstPacket
+	}
+
+	for _, pkt := range c[1:] {
+		switch p := pkt.(type) {
+		// If the number of RecetpionReports exceeds 31 additional ReceiverReports
+		// can be included here.
+		case *ReceiverReport:
+			continue
+
+		// A SourceDescription containing a CNAME must be included in every
+		// CompoundPacket.
+		case *SourceDescription:
+			var hasCNAME bool
+			for _, c := range p.Chunks {
+				for _, it := range c.Items {
+					if it.Type == SDESCNAME {
+						hasCNAME = true
+					}
+				}
+			}
+
+			if !hasCNAME {
+				return errMissingCNAME
+			}
+
+			return nil
+
+		// Other packets are not permitted before the CNAME
+		default:
+			return errPacketBeforeCNAME
+		}
+	}
+
+	// CNAME never reached
+	return errMissingCNAME
+}
+
+// CNAME returns the CNAME that *must* be present in every CompoundPacket
+func (c CompoundPacket) CNAME() (string, error) {
+	var err error
+
+	if len(c) < 1 {
+		return "", errEmptyCompound
+	}
+
+	for _, pkt := range c[1:] {
+		sdes, ok := pkt.(*SourceDescription)
+		if ok {
+			for _, c := range sdes.Chunks {
+				for _, it := range c.Items {
+					if it.Type == SDESCNAME {
+						return it.Text, err
+					}
+				}
+			}
+		} else {
+			_, ok := pkt.(*ReceiverReport)
+			if !ok {
+				err = errPacketBeforeCNAME
+			}
+		}
+	}
+	return "", errMissingCNAME
+}
+
+// Marshal encodes the CompoundPacket as binary.
+func (c CompoundPacket) Marshal() ([]byte, error) {
+	if err := c.Validate(); err != nil {
+		return nil, err
+	}
+
+	p := []Packet(c)
+	return Marshal(p)
+}
+
+// Unmarshal decodes a CompoundPacket from binary.
+func (c *CompoundPacket) Unmarshal(rawData []byte) error {
+	out := make(CompoundPacket, 0)
+	for len(rawData) != 0 {
+		p, processed, err := unmarshal(rawData)
+		if err != nil {
+			return err
+		}
+
+		out = append(out, p)
+		rawData = rawData[processed:]
+	}
+	*c = out
+
+	if err := c.Validate(); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// DestinationSSRC returns the synchronization sources associated with this
+// CompoundPacket's reception report.
+func (c CompoundPacket) DestinationSSRC() []uint32 {
+	if len(c) == 0 {
+		return nil
+	}
+
+	return c[0].DestinationSSRC()
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/doc.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/doc.go
new file mode 100644
index 000000000..fa948df1e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/doc.go
@@ -0,0 +1,39 @@
+/*
+Package rtcp implements encoding and decoding of RTCP packets according to RFCs 3550 and 5506.
+
+RTCP is a sister protocol of the Real-time Transport Protocol (RTP). Its basic functionality
+and packet structure is defined in RFC 3550. RTCP provides out-of-band statistics and control
+information for an RTP session. It partners with RTP in the delivery and packaging of multimedia data,
+but does not transport any media data itself.
+
+The primary function of RTCP is to provide feedback on the quality of service (QoS)
+in media distribution by periodically sending statistics information such as transmitted octet
+and packet counts, packet loss, packet delay variation, and round-trip delay time to participants
+in a streaming multimedia session. An application may use this information to control quality of
+service parameters, perhaps by limiting flow, or using a different codec.
+
+Decoding RTCP packets:
+
+	pkt, err := rtcp.Unmarshal(rtcpData)
+	// ...
+
+	switch p := pkt.(type) {
+	case *rtcp.CompoundPacket:
+		...
+	case *rtcp.PictureLossIndication:
+		...
+	default:
+		...
+	}
+
+Encoding RTCP packets:
+
+	pkt := &rtcp.PictureLossIndication{
+		SenderSSRC: senderSSRC,
+		MediaSSRC: mediaSSRC
+	}
+	pliData, err := pkt.Marshal()
+	// ...
+
+*/
+package rtcp
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/errors.go
new file mode 100644
index 000000000..d1b00c5c9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/errors.go
@@ -0,0 +1,30 @@
+package rtcp
+
+import "errors"
+
+var (
+	errWrongMarshalSize         = errors.New("rtcp: wrong marshal size")
+	errInvalidTotalLost         = errors.New("rtcp: invalid total lost count")
+	errInvalidHeader            = errors.New("rtcp: invalid header")
+	errEmptyCompound            = errors.New("rtcp: empty compound packet")
+	errBadFirstPacket           = errors.New("rtcp: first packet in compound must be SR or RR")
+	errMissingCNAME             = errors.New("rtcp: compound missing SourceDescription with CNAME")
+	errPacketBeforeCNAME        = errors.New("rtcp: feedback packet seen before CNAME")
+	errTooManyReports           = errors.New("rtcp: too many reports")
+	errTooManyChunks            = errors.New("rtcp: too many chunks")
+	errTooManySources           = errors.New("rtcp: too many sources")
+	errPacketTooShort           = errors.New("rtcp: packet too short")
+	errWrongType                = errors.New("rtcp: wrong packet type")
+	errSDESTextTooLong          = errors.New("rtcp: sdes must be < 255 octets long")
+	errSDESMissingType          = errors.New("rtcp: sdes item missing type")
+	errReasonTooLong            = errors.New("rtcp: reason must be < 255 octets long")
+	errBadVersion               = errors.New("rtcp: invalid packet version")
+	errWrongPadding             = errors.New("rtcp: invalid padding value")
+	errWrongFeedbackType        = errors.New("rtcp: wrong feedback message type")
+	errWrongPayloadType         = errors.New("rtcp: wrong payload type")
+	errHeaderTooSmall           = errors.New("rtcp: header length is too small")
+	errSSRCMustBeZero           = errors.New("rtcp: media SSRC must be 0")
+	errMissingREMBidentifier    = errors.New("missing REMB identifier")
+	errSSRCNumAndLengthMismatch = errors.New("SSRC num and length do not match")
+	errInvalidSizeOrStartIndex  = errors.New("invalid size or startIndex")
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/full_intra_request.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/full_intra_request.go
new file mode 100644
index 000000000..74ca928d6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/full_intra_request.go
@@ -0,0 +1,107 @@
+package rtcp
+
+import (
+	"encoding/binary"
+	"fmt"
+)
+
+// A FIREntry is a (SSRC, seqno) pair, as carried by FullIntraRequest.
+type FIREntry struct {
+	SSRC           uint32
+	SequenceNumber uint8
+}
+
+// The FullIntraRequest packet is used to reliably request an Intra frame
+// in a video stream.  See RFC 5104 Section 3.5.1.  This is not for loss
+// recovery, which should use PictureLossIndication (PLI) instead.
+type FullIntraRequest struct {
+	SenderSSRC uint32
+	MediaSSRC  uint32
+
+	FIR []FIREntry
+}
+
+const (
+	firOffset = 8
+)
+
+var _ Packet = (*FullIntraRequest)(nil)
+
+// Marshal encodes the FullIntraRequest
+func (p FullIntraRequest) Marshal() ([]byte, error) {
+	rawPacket := make([]byte, firOffset+(len(p.FIR)*8))
+	binary.BigEndian.PutUint32(rawPacket, p.SenderSSRC)
+	binary.BigEndian.PutUint32(rawPacket[4:], p.MediaSSRC)
+	for i, fir := range p.FIR {
+		binary.BigEndian.PutUint32(rawPacket[firOffset+8*i:], fir.SSRC)
+		rawPacket[firOffset+8*i+4] = fir.SequenceNumber
+	}
+	h := p.Header()
+	hData, err := h.Marshal()
+	if err != nil {
+		return nil, err
+	}
+
+	return append(hData, rawPacket...), nil
+}
+
+// Unmarshal decodes the TransportLayerNack
+func (p *FullIntraRequest) Unmarshal(rawPacket []byte) error {
+	if len(rawPacket) < (headerLength + ssrcLength) {
+		return errPacketTooShort
+	}
+
+	var h Header
+	if err := h.Unmarshal(rawPacket); err != nil {
+		return err
+	}
+
+	if len(rawPacket) < (headerLength + int(4*h.Length)) {
+		return errPacketTooShort
+	}
+
+	if h.Type != TypePayloadSpecificFeedback || h.Count != FormatFIR {
+		return errWrongType
+	}
+
+	p.SenderSSRC = binary.BigEndian.Uint32(rawPacket[headerLength:])
+	p.MediaSSRC = binary.BigEndian.Uint32(rawPacket[headerLength+ssrcLength:])
+	for i := headerLength + firOffset; i < (headerLength + int(h.Length*4)); i += 8 {
+		p.FIR = append(p.FIR, FIREntry{
+			binary.BigEndian.Uint32(rawPacket[i:]),
+			rawPacket[i+4],
+		})
+	}
+	return nil
+}
+
+// Header returns the Header associated with this packet.
+func (p *FullIntraRequest) Header() Header {
+	return Header{
+		Count:  FormatFIR,
+		Type:   TypePayloadSpecificFeedback,
+		Length: uint16((p.len() / 4) - 1),
+	}
+}
+
+func (p *FullIntraRequest) len() int {
+	return headerLength + firOffset + len(p.FIR)*8
+}
+
+func (p *FullIntraRequest) String() string {
+	out := fmt.Sprintf("FullIntraRequest %x %x",
+		p.SenderSSRC, p.MediaSSRC)
+	for _, e := range p.FIR {
+		out += fmt.Sprintf(" (%x %v)", e.SSRC, e.SequenceNumber)
+	}
+	return out
+}
+
+// DestinationSSRC returns an array of SSRC values that this packet refers to.
+func (p *FullIntraRequest) DestinationSSRC() []uint32 {
+	ssrcs := make([]uint32, 0, len(p.FIR))
+	for _, entry := range p.FIR {
+		ssrcs = append(ssrcs, entry.SSRC)
+	}
+	return ssrcs
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/fuzz.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/fuzz.go
new file mode 100644
index 000000000..2ea4fb1fc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/fuzz.go
@@ -0,0 +1,51 @@
+// +build gofuzz
+
+package rtcp
+
+import (
+	"bytes"
+	"io"
+)
+
+// Fuzz implements a randomized fuzz test of the rtcp
+// parser using go-fuzz.
+//
+// To run the fuzzer, first download go-fuzz:
+// `go get github.com/dvyukov/go-fuzz/...`
+//
+// Then build the testing package:
+// `go-fuzz-build github.com/pion/webrtc`
+//
+// And run the fuzzer on the corpus:
+// ```
+// mkdir workdir
+//
+// # optionally add a starter corpus of valid rtcp packets.
+// # the corpus should be as compact and diverse as possible.
+// cp -r ~/my-rtcp-packets workdir/corpus
+//
+// go-fuzz -bin=ase-fuzz.zip -workdir=workdir
+// ````
+func Fuzz(data []byte) int {
+	r := NewReader(bytes.NewReader(data))
+	for {
+		_, data, err := r.ReadPacket()
+		if err == io.EOF {
+			break
+		}
+		if err != nil {
+			return 0
+		}
+
+		packet, err := Unmarshal(data)
+		if err != nil {
+			return 0
+		}
+
+		if _, err := packet.Marshal(); err != nil {
+			return 0
+		}
+	}
+
+	return 1
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/go.mod
new file mode 100644
index 000000000..28b6e9ddf
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/go.mod
@@ -0,0 +1,5 @@
+module github.com/pion/rtcp
+
+go 1.13
+
+require github.com/stretchr/testify v1.6.1
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/go.sum b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/go.sum
new file mode 100644
index 000000000..afe7890c9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/go.sum
@@ -0,0 +1,11 @@
+github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.6.1 h1:hDPOHmpOpP40lSULcqw7IrRb/u7w6RpDC9399XyoNd0=
+github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c h1:dUUwHk2QECo/6vqA44rthZ8ie2QXMNeKRTHCNY2nXvo=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/goodbye.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/goodbye.go
new file mode 100644
index 000000000..b8718b357
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/goodbye.go
@@ -0,0 +1,146 @@
+package rtcp
+
+import (
+	"encoding/binary"
+)
+
+// The Goodbye packet indicates that one or more sources are no longer active.
+type Goodbye struct {
+	// The SSRC/CSRC identifiers that are no longer active
+	Sources []uint32
+	// Optional text indicating the reason for leaving, e.g., "camera malfunction" or "RTP loop detected"
+	Reason string
+}
+
+var _ Packet = (*Goodbye)(nil) // assert is a Packet
+
+// Marshal encodes the Goodbye packet in binary
+func (g Goodbye) Marshal() ([]byte, error) {
+	/*
+	 *        0                   1                   2                   3
+	 *        0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 *       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *       |V=2|P|    SC   |   PT=BYE=203  |             length            |
+	 *       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *       |                           SSRC/CSRC                           |
+	 *       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *       :                              ...                              :
+	 *       +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * (opt) |     length    |               reason for leaving            ...
+	 *       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 */
+
+	rawPacket := make([]byte, g.len())
+	packetBody := rawPacket[headerLength:]
+
+	if len(g.Sources) > countMax {
+		return nil, errTooManySources
+	}
+
+	for i, s := range g.Sources {
+		binary.BigEndian.PutUint32(packetBody[i*ssrcLength:], s)
+	}
+
+	if g.Reason != "" {
+		reason := []byte(g.Reason)
+
+		if len(reason) > sdesMaxOctetCount {
+			return nil, errReasonTooLong
+		}
+
+		reasonOffset := len(g.Sources) * ssrcLength
+		packetBody[reasonOffset] = uint8(len(reason))
+		copy(packetBody[reasonOffset+1:], reason)
+	}
+
+	hData, err := g.Header().Marshal()
+	if err != nil {
+		return nil, err
+	}
+	copy(rawPacket, hData)
+
+	return rawPacket, nil
+}
+
+// Unmarshal decodes the Goodbye packet from binary
+func (g *Goodbye) Unmarshal(rawPacket []byte) error {
+	/*
+	 *        0                   1                   2                   3
+	 *        0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 *       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *       |V=2|P|    SC   |   PT=BYE=203  |             length            |
+	 *       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *       |                           SSRC/CSRC                           |
+	 *       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *       :                              ...                              :
+	 *       +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * (opt) |     length    |               reason for leaving            ...
+	 *       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 */
+
+	var header Header
+	if err := header.Unmarshal(rawPacket); err != nil {
+		return err
+	}
+
+	if header.Type != TypeGoodbye {
+		return errWrongType
+	}
+
+	if getPadding(len(rawPacket)) != 0 {
+		return errPacketTooShort
+	}
+
+	g.Sources = make([]uint32, header.Count)
+
+	reasonOffset := int(headerLength + header.Count*ssrcLength)
+	if reasonOffset > len(rawPacket) {
+		return errPacketTooShort
+	}
+
+	for i := 0; i < int(header.Count); i++ {
+		offset := headerLength + i*ssrcLength
+
+		g.Sources[i] = binary.BigEndian.Uint32(rawPacket[offset:])
+	}
+
+	if reasonOffset < len(rawPacket) {
+		reasonLen := int(rawPacket[reasonOffset])
+		reasonEnd := reasonOffset + 1 + reasonLen
+
+		if reasonEnd > len(rawPacket) {
+			return errPacketTooShort
+		}
+
+		g.Reason = string(rawPacket[reasonOffset+1 : reasonEnd])
+	}
+
+	return nil
+}
+
+// Header returns the Header associated with this packet.
+func (g *Goodbye) Header() Header {
+	return Header{
+		Padding: false,
+		Count:   uint8(len(g.Sources)),
+		Type:    TypeGoodbye,
+		Length:  uint16((g.len() / 4) - 1),
+	}
+}
+
+func (g *Goodbye) len() int {
+	srcsLength := len(g.Sources) * ssrcLength
+	reasonLength := len(g.Reason) + 1
+
+	l := headerLength + srcsLength + reasonLength
+
+	// align to 32-bit boundary
+	return l + getPadding(l)
+}
+
+// DestinationSSRC returns an array of SSRC values that this packet refers to.
+func (g *Goodbye) DestinationSSRC() []uint32 {
+	out := make([]uint32, len(g.Sources))
+	copy(out, g.Sources)
+	return out
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/header.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/header.go
new file mode 100644
index 000000000..055ca18bf
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/header.go
@@ -0,0 +1,140 @@
+package rtcp
+
+import (
+	"encoding/binary"
+)
+
+// PacketType specifies the type of an RTCP packet
+type PacketType uint8
+
+// RTCP packet types registered with IANA. See: https://www.iana.org/assignments/rtp-parameters/rtp-parameters.xhtml#rtp-parameters-4
+const (
+	TypeSenderReport              PacketType = 200 // RFC 3550, 6.4.1
+	TypeReceiverReport            PacketType = 201 // RFC 3550, 6.4.2
+	TypeSourceDescription         PacketType = 202 // RFC 3550, 6.5
+	TypeGoodbye                   PacketType = 203 // RFC 3550, 6.6
+	TypeApplicationDefined        PacketType = 204 // RFC 3550, 6.7 (unimplemented)
+	TypeTransportSpecificFeedback PacketType = 205 // RFC 4585, 6051
+	TypePayloadSpecificFeedback   PacketType = 206 // RFC 4585, 6.3
+
+)
+
+// Transport and Payload specific feedback messages overload the count field to act as a message type. those are listed here
+const (
+	FormatSLI  uint8 = 2
+	FormatPLI  uint8 = 1
+	FormatFIR  uint8 = 4
+	FormatTLN  uint8 = 1
+	FormatRRR  uint8 = 5
+	FormatREMB uint8 = 15
+
+	//https://tools.ietf.org/html/draft-holmer-rmcat-transport-wide-cc-extensions-01#page-5
+	FormatTCC uint8 = 15
+)
+
+func (p PacketType) String() string {
+	switch p {
+	case TypeSenderReport:
+		return "SR"
+	case TypeReceiverReport:
+		return "RR"
+	case TypeSourceDescription:
+		return "SDES"
+	case TypeGoodbye:
+		return "BYE"
+	case TypeApplicationDefined:
+		return "APP"
+	case TypeTransportSpecificFeedback:
+		return "TSFB"
+	case TypePayloadSpecificFeedback:
+		return "PSFB"
+	default:
+		return string(p)
+	}
+}
+
+const rtpVersion = 2
+
+// A Header is the common header shared by all RTCP packets
+type Header struct {
+	// If the padding bit is set, this individual RTCP packet contains
+	// some additional padding octets at the end which are not part of
+	// the control information but are included in the length field.
+	Padding bool
+	// The number of reception reports, sources contained or FMT in this packet (depending on the Type)
+	Count uint8
+	// The RTCP packet type for this packet
+	Type PacketType
+	// The length of this RTCP packet in 32-bit words minus one,
+	// including the header and any padding.
+	Length uint16
+}
+
+const (
+	headerLength = 4
+	versionShift = 6
+	versionMask  = 0x3
+	paddingShift = 5
+	paddingMask  = 0x1
+	countShift   = 0
+	countMask    = 0x1f
+	countMax     = (1 << 5) - 1
+)
+
+// Marshal encodes the Header in binary
+func (h Header) Marshal() ([]byte, error) {
+	/*
+	 *  0                   1                   2                   3
+	 *  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * |V=2|P|    RC   |   PT=SR=200   |             length            |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 */
+	rawPacket := make([]byte, headerLength)
+
+	rawPacket[0] |= rtpVersion << versionShift
+
+	if h.Padding {
+		rawPacket[0] |= 1 << paddingShift
+	}
+
+	if h.Count > 31 {
+		return nil, errInvalidHeader
+	}
+	rawPacket[0] |= h.Count << countShift
+
+	rawPacket[1] = uint8(h.Type)
+
+	binary.BigEndian.PutUint16(rawPacket[2:], h.Length)
+
+	return rawPacket, nil
+}
+
+// Unmarshal decodes the Header from binary
+func (h *Header) Unmarshal(rawPacket []byte) error {
+	if len(rawPacket) < headerLength {
+		return errPacketTooShort
+	}
+
+	/*
+	 *  0                   1                   2                   3
+	 *  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * |V=2|P|    RC   |      PT       |             length            |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 */
+
+	version := rawPacket[0] >> versionShift & versionMask
+	if version != rtpVersion {
+		return errBadVersion
+	}
+
+	h.Padding = (rawPacket[0] >> paddingShift & paddingMask) > 0
+	h.Count = rawPacket[0] >> countShift & countMask
+
+	h.Type = PacketType(rawPacket[1])
+
+	h.Length = binary.BigEndian.Uint16(rawPacket[2:])
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/packet.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/packet.go
new file mode 100644
index 000000000..de0800381
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/packet.go
@@ -0,0 +1,115 @@
+package rtcp
+
+// Packet represents an RTCP packet, a protocol used for out-of-band statistics and control information for an RTP session
+type Packet interface {
+	// DestinationSSRC returns an array of SSRC values that this packet refers to.
+	DestinationSSRC() []uint32
+
+	Marshal() ([]byte, error)
+	Unmarshal(rawPacket []byte) error
+}
+
+// Unmarshal takes an entire udp datagram (which may consist of multiple RTCP packets) and
+// returns the unmarshaled packets it contains.
+//
+// If this is a reduced-size RTCP packet a feedback packet (Goodbye, SliceLossIndication, etc)
+// will be returned. Otherwise, the underlying type of the returned packet will be
+// CompoundPacket.
+func Unmarshal(rawData []byte) ([]Packet, error) {
+	var packets []Packet
+	for len(rawData) != 0 {
+		p, processed, err := unmarshal(rawData)
+		if err != nil {
+			return nil, err
+		}
+
+		packets = append(packets, p)
+		rawData = rawData[processed:]
+	}
+
+	switch len(packets) {
+	// Empty packet
+	case 0:
+		return nil, errInvalidHeader
+	// Multiple Packets
+	default:
+		return packets, nil
+	}
+}
+
+// Marshal takes an array of Packets and serializes them to a single buffer
+func Marshal(packets []Packet) ([]byte, error) {
+	out := make([]byte, 0)
+	for _, p := range packets {
+		data, err := p.Marshal()
+		if err != nil {
+			return nil, err
+		}
+		out = append(out, data...)
+	}
+	return out, nil
+}
+
+// unmarshal is a factory which pulls the first RTCP packet from a bytestream,
+// and returns it's parsed representation, and the amount of data that was processed.
+func unmarshal(rawData []byte) (packet Packet, bytesprocessed int, err error) {
+	var h Header
+
+	err = h.Unmarshal(rawData)
+	if err != nil {
+		return nil, 0, err
+	}
+
+	bytesprocessed = int(h.Length+1) * 4
+	if bytesprocessed > len(rawData) {
+		return nil, 0, errPacketTooShort
+	}
+	inPacket := rawData[:bytesprocessed]
+
+	switch h.Type {
+	case TypeSenderReport:
+		packet = new(SenderReport)
+
+	case TypeReceiverReport:
+		packet = new(ReceiverReport)
+
+	case TypeSourceDescription:
+		packet = new(SourceDescription)
+
+	case TypeGoodbye:
+		packet = new(Goodbye)
+
+	case TypeTransportSpecificFeedback:
+		switch h.Count {
+		case FormatTLN:
+			packet = new(TransportLayerNack)
+		case FormatRRR:
+			packet = new(RapidResynchronizationRequest)
+		case FormatTCC:
+			packet = new(TransportLayerCC)
+		default:
+			packet = new(RawPacket)
+		}
+
+	case TypePayloadSpecificFeedback:
+		switch h.Count {
+		case FormatPLI:
+			packet = new(PictureLossIndication)
+		case FormatSLI:
+			packet = new(SliceLossIndication)
+		case FormatREMB:
+			packet = new(ReceiverEstimatedMaximumBitrate)
+		case FormatFIR:
+			packet = new(FullIntraRequest)
+		default:
+			packet = new(RawPacket)
+		}
+
+	default:
+		packet = new(RawPacket)
+	}
+
+	err = packet.Unmarshal(inPacket)
+
+	return packet, bytesprocessed, err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/picture_loss_indication.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/picture_loss_indication.go
new file mode 100644
index 000000000..7216ecd14
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/picture_loss_indication.go
@@ -0,0 +1,91 @@
+package rtcp
+
+import (
+	"encoding/binary"
+	"fmt"
+)
+
+// The PictureLossIndication packet informs the encoder about the loss of an undefined amount of coded video data belonging to one or more pictures
+type PictureLossIndication struct {
+	// SSRC of sender
+	SenderSSRC uint32
+
+	// SSRC where the loss was experienced
+	MediaSSRC uint32
+}
+
+var _ Packet = (*PictureLossIndication)(nil) // assert is a Packet
+
+const (
+	pliLength = 2
+)
+
+// Marshal encodes the PictureLossIndication in binary
+func (p PictureLossIndication) Marshal() ([]byte, error) {
+	/*
+	 * PLI does not require parameters.  Therefore, the length field MUST be
+	 * 2, and there MUST NOT be any Feedback Control Information.
+	 *
+	 * The semantics of this FB message is independent of the payload type.
+	 */
+	rawPacket := make([]byte, p.len())
+	packetBody := rawPacket[headerLength:]
+
+	binary.BigEndian.PutUint32(packetBody, p.SenderSSRC)
+	binary.BigEndian.PutUint32(packetBody[4:], p.MediaSSRC)
+
+	h := Header{
+		Count:  FormatPLI,
+		Type:   TypePayloadSpecificFeedback,
+		Length: pliLength,
+	}
+	hData, err := h.Marshal()
+	if err != nil {
+		return nil, err
+	}
+	copy(rawPacket, hData)
+
+	return rawPacket, nil
+}
+
+// Unmarshal decodes the PictureLossIndication from binary
+func (p *PictureLossIndication) Unmarshal(rawPacket []byte) error {
+	if len(rawPacket) < (headerLength + (ssrcLength * 2)) {
+		return errPacketTooShort
+	}
+
+	var h Header
+	if err := h.Unmarshal(rawPacket); err != nil {
+		return err
+	}
+
+	if h.Type != TypePayloadSpecificFeedback || h.Count != FormatPLI {
+		return errWrongType
+	}
+
+	p.SenderSSRC = binary.BigEndian.Uint32(rawPacket[headerLength:])
+	p.MediaSSRC = binary.BigEndian.Uint32(rawPacket[headerLength+ssrcLength:])
+	return nil
+}
+
+// Header returns the Header associated with this packet.
+func (p *PictureLossIndication) Header() Header {
+	return Header{
+		Count:  FormatPLI,
+		Type:   TypePayloadSpecificFeedback,
+		Length: pliLength,
+	}
+}
+
+func (p *PictureLossIndication) len() int {
+	return headerLength + ssrcLength*2
+}
+
+func (p *PictureLossIndication) String() string {
+	return fmt.Sprintf("PictureLossIndication %x %x", p.SenderSSRC, p.MediaSSRC)
+}
+
+// DestinationSSRC returns an array of SSRC values that this packet refers to.
+func (p *PictureLossIndication) DestinationSSRC() []uint32 {
+	return []uint32{p.MediaSSRC}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/rapid_resynchronization_request.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/rapid_resynchronization_request.go
new file mode 100644
index 000000000..5d270556b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/rapid_resynchronization_request.go
@@ -0,0 +1,88 @@
+package rtcp
+
+import (
+	"encoding/binary"
+	"fmt"
+)
+
+// The RapidResynchronizationRequest packet informs the encoder about the loss of an undefined amount of coded video data belonging to one or more pictures
+type RapidResynchronizationRequest struct {
+	// SSRC of sender
+	SenderSSRC uint32
+
+	// SSRC of the media source
+	MediaSSRC uint32
+}
+
+var _ Packet = (*RapidResynchronizationRequest)(nil) // assert is a Packet
+
+const (
+	rrrLength       = 2
+	rrrHeaderLength = ssrcLength * 2
+	rrrMediaOffset  = 4
+)
+
+// Marshal encodes the RapidResynchronizationRequest in binary
+func (p RapidResynchronizationRequest) Marshal() ([]byte, error) {
+	/*
+	 * RRR does not require parameters.  Therefore, the length field MUST be
+	 * 2, and there MUST NOT be any Feedback Control Information.
+	 *
+	 * The semantics of this FB message is independent of the payload type.
+	 */
+	rawPacket := make([]byte, p.len())
+	packetBody := rawPacket[headerLength:]
+
+	binary.BigEndian.PutUint32(packetBody, p.SenderSSRC)
+	binary.BigEndian.PutUint32(packetBody[rrrMediaOffset:], p.MediaSSRC)
+
+	hData, err := p.Header().Marshal()
+	if err != nil {
+		return nil, err
+	}
+	copy(rawPacket, hData)
+
+	return rawPacket, nil
+}
+
+// Unmarshal decodes the RapidResynchronizationRequest from binary
+func (p *RapidResynchronizationRequest) Unmarshal(rawPacket []byte) error {
+	if len(rawPacket) < (headerLength + (ssrcLength * 2)) {
+		return errPacketTooShort
+	}
+
+	var h Header
+	if err := h.Unmarshal(rawPacket); err != nil {
+		return err
+	}
+
+	if h.Type != TypeTransportSpecificFeedback || h.Count != FormatRRR {
+		return errWrongType
+	}
+
+	p.SenderSSRC = binary.BigEndian.Uint32(rawPacket[headerLength:])
+	p.MediaSSRC = binary.BigEndian.Uint32(rawPacket[headerLength+ssrcLength:])
+	return nil
+}
+
+func (p *RapidResynchronizationRequest) len() int {
+	return headerLength + rrrHeaderLength
+}
+
+// Header returns the Header associated with this packet.
+func (p *RapidResynchronizationRequest) Header() Header {
+	return Header{
+		Count:  FormatRRR,
+		Type:   TypeTransportSpecificFeedback,
+		Length: rrrLength,
+	}
+}
+
+// DestinationSSRC returns an array of SSRC values that this packet refers to.
+func (p *RapidResynchronizationRequest) DestinationSSRC() []uint32 {
+	return []uint32{p.MediaSSRC}
+}
+
+func (p *RapidResynchronizationRequest) String() string {
+	return fmt.Sprintf("RapidResynchronizationRequest %x %x", p.SenderSSRC, p.MediaSSRC)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/raw_packet.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/raw_packet.go
new file mode 100644
index 000000000..3cb6eafd3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/raw_packet.go
@@ -0,0 +1,44 @@
+package rtcp
+
+import "fmt"
+
+// RawPacket represents an unparsed RTCP packet. It's returned by Unmarshal when
+// a packet with an unknown type is encountered.
+type RawPacket []byte
+
+var _ Packet = (*RawPacket)(nil) // assert is a Packet
+
+// Marshal encodes the packet in binary.
+func (r RawPacket) Marshal() ([]byte, error) {
+	return r, nil
+}
+
+// Unmarshal decodes the packet from binary.
+func (r *RawPacket) Unmarshal(b []byte) error {
+	if len(b) < (headerLength) {
+		return errPacketTooShort
+	}
+	*r = b
+
+	var h Header
+	return h.Unmarshal(b)
+}
+
+// Header returns the Header associated with this packet.
+func (r RawPacket) Header() Header {
+	var h Header
+	if err := h.Unmarshal(r); err != nil {
+		return Header{}
+	}
+	return h
+}
+
+// DestinationSSRC returns an array of SSRC values that this packet refers to.
+func (r *RawPacket) DestinationSSRC() []uint32 {
+	return []uint32{}
+}
+
+func (r RawPacket) String() string {
+	out := fmt.Sprintf("RawPacket: %v", ([]byte)(r))
+	return out
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/receiver_estimated_maximum_bitrate.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/receiver_estimated_maximum_bitrate.go
new file mode 100644
index 000000000..d37f49e6f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/receiver_estimated_maximum_bitrate.go
@@ -0,0 +1,284 @@
+package rtcp
+
+import (
+	"bytes"
+	"encoding/binary"
+	"fmt"
+	"math/bits"
+)
+
+// ReceiverEstimatedMaximumBitrate contains the receiver's estimated maximum bitrate.
+// see: https://tools.ietf.org/html/draft-alvestrand-rmcat-remb-03
+type ReceiverEstimatedMaximumBitrate struct {
+	// SSRC of sender
+	SenderSSRC uint32
+
+	// Estimated maximum bitrate
+	Bitrate uint64
+
+	// SSRC entries which this packet applies to
+	SSRCs []uint32
+}
+
+var _ Packet = (*ReceiverEstimatedMaximumBitrate)(nil) // assert is a Packet
+
+// Marshal serializes the packet and returns a byte slice.
+func (p ReceiverEstimatedMaximumBitrate) Marshal() (buf []byte, err error) {
+	// Allocate a buffer of the exact output size.
+	buf = make([]byte, p.MarshalSize())
+
+	// Write to our buffer.
+	n, err := p.MarshalTo(buf)
+	if err != nil {
+		return nil, err
+	}
+
+	// This will always be true but just to be safe.
+	if n != len(buf) {
+		return nil, errWrongMarshalSize
+	}
+
+	return buf, nil
+}
+
+// MarshalSize returns the size of the packet when marshaled.
+// This can be used in conjunction with `MarshalTo` to avoid allocations.
+func (p ReceiverEstimatedMaximumBitrate) MarshalSize() (n int) {
+	return 20 + 4*len(p.SSRCs)
+}
+
+// MarshalTo serializes the packet to the given byte slice.
+func (p ReceiverEstimatedMaximumBitrate) MarshalTo(buf []byte) (n int, err error) {
+	/*
+	    0                   1                   2                   3
+	    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |V=2|P| FMT=15  |   PT=206      |             length            |
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |                  SSRC of packet sender                        |
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |                  SSRC of media source                         |
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |  Unique identifier 'R' 'E' 'M' 'B'                            |
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |  Num SSRC     | BR Exp    |  BR Mantissa                      |
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |   SSRC feedback                                               |
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |  ...                                                          |
+	*/
+
+	size := p.MarshalSize()
+	if len(buf) < size {
+		return 0, errPacketTooShort
+	}
+
+	buf[0] = 143 // v=2, p=0, fmt=15
+	buf[1] = 206
+
+	// Length of this packet in 32-bit words minus one.
+	length := uint16((p.MarshalSize() / 4) - 1)
+	binary.BigEndian.PutUint16(buf[2:4], length)
+
+	binary.BigEndian.PutUint32(buf[4:8], p.SenderSSRC)
+	binary.BigEndian.PutUint32(buf[8:12], 0) // always zero
+
+	// ALL HAIL REMB
+	buf[12] = 'R'
+	buf[13] = 'E'
+	buf[14] = 'M'
+	buf[15] = 'B'
+
+	// Write the length of the ssrcs to follow at the end
+	buf[16] = byte(len(p.SSRCs))
+
+	// We can only encode 18 bits of information in the mantissa.
+	// The exponent lets us shift to the left up to 64 places (6-bits).
+	// We actually need a uint82 to encode the largest possible number,
+	// but uint64 should be good enough for 2.3 exabytes per second.
+
+	// So we need to truncate the bitrate and use the exponent for the shift.
+	// bitrate = mantissa * (1 << exp)
+
+	// Calculate the total shift based on the leading number of zeroes.
+	// This will be negative if there is no shift required.
+	shift := uint(64 - bits.LeadingZeros64(p.Bitrate))
+
+	var mantissa uint
+	var exp uint
+
+	if shift <= 18 {
+		// Fit everything in the mantissa because we can.
+		mantissa = uint(p.Bitrate)
+		exp = 0
+	} else {
+		// We can only use 18 bits of precision, so truncate.
+		mantissa = uint(p.Bitrate >> (shift - 18))
+		exp = shift - 18
+	}
+
+	// We can't quite use the binary package because
+	// a) it's a uint24 and b) the exponent is only 6-bits
+	// Just trust me; this is big-endian encoding.
+	buf[17] = byte((exp << 2) | (mantissa >> 16))
+	buf[18] = byte(mantissa >> 8)
+	buf[19] = byte(mantissa)
+
+	// Write the SSRCs at the very end.
+	n = 20
+	for _, ssrc := range p.SSRCs {
+		binary.BigEndian.PutUint32(buf[n:n+4], ssrc)
+		n += 4
+	}
+
+	return n, nil
+}
+
+// Unmarshal reads a REMB packet from the given byte slice.
+func (p *ReceiverEstimatedMaximumBitrate) Unmarshal(buf []byte) (err error) {
+	/*
+	    0                   1                   2                   3
+	    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |V=2|P| FMT=15  |   PT=206      |             length            |
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |                  SSRC of packet sender                        |
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |                  SSRC of media source                         |
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |  Unique identifier 'R' 'E' 'M' 'B'                            |
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |  Num SSRC     | BR Exp    |  BR Mantissa                      |
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |   SSRC feedback                                               |
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |  ...                                                          |
+	*/
+
+	// 20 bytes is the size of the packet with no SSRCs
+	if len(buf) < 20 {
+		return errPacketTooShort
+	}
+
+	// version  must be 2
+	version := buf[0] >> 6
+	if version != 2 {
+		return fmt.Errorf("%w expected(2) actual(%d)", errBadVersion, version)
+	}
+
+	// padding must be unset
+	padding := (buf[0] >> 5) & 1
+	if padding != 0 {
+		return fmt.Errorf("%w expected(0) actual(%d)", errWrongPadding, padding)
+	}
+
+	// fmt must be 15
+	fmtVal := buf[0] & 31
+	if fmtVal != 15 {
+		return fmt.Errorf("%w expected(15) actual(%d)", errWrongFeedbackType, fmtVal)
+	}
+
+	// Must be payload specific feedback
+	if buf[1] != 206 {
+		return fmt.Errorf("%w expected(206) actual(%d)", errWrongPayloadType, buf[1])
+	}
+
+	// length is the number of 32-bit words, minus 1
+	length := binary.BigEndian.Uint16(buf[2:4])
+	size := int((length + 1) * 4)
+
+	// There's not way this could be legit
+	if size < 20 {
+		return errHeaderTooSmall
+	}
+
+	// Make sure the buffer is large enough.
+	if len(buf) < size {
+		return errPacketTooShort
+	}
+
+	// The sender SSRC is 32-bits
+	p.SenderSSRC = binary.BigEndian.Uint32(buf[4:8])
+
+	// The destination SSRC must be 0
+	media := binary.BigEndian.Uint32(buf[8:12])
+	if media != 0 {
+		return errSSRCMustBeZero
+	}
+
+	// REMB rules all around me
+	if !bytes.Equal(buf[12:16], []byte{'R', 'E', 'M', 'B'}) {
+		return errMissingREMBidentifier
+	}
+
+	// The next byte is the number of SSRC entries at the end.
+	num := int(buf[16])
+
+	// Now we know the expected size, make sure they match.
+	if size != 20+4*num {
+		return errSSRCNumAndLengthMismatch
+	}
+
+	// Get the 6-bit exponent value.
+	exp := buf[17] >> 2
+
+	// The remaining 2-bits plus the next 16-bits are the mantissa.
+	mantissa := uint64(buf[17]&3)<<16 | uint64(buf[18])<<8 | uint64(buf[19])
+
+	// bitrate = mantissa * 2^exp
+
+	if exp > 46 {
+		// NOTE: We intentionally truncate values so they fit in a uint64.
+		// Otherwise we would need a uint82.
+		// This is 2.3 exabytes per second, which should be good enough.
+		p.Bitrate = ^uint64(0)
+	} else {
+		p.Bitrate = mantissa << exp
+	}
+
+	// Clear any existing SSRCs
+	p.SSRCs = nil
+
+	// Loop over and parse the SSRC entires at the end.
+	// We already verified that size == num * 4
+	for n := 20; n < size; n += 4 {
+		ssrc := binary.BigEndian.Uint32(buf[n : n+4])
+		p.SSRCs = append(p.SSRCs, ssrc)
+	}
+
+	return nil
+}
+
+// Header returns the Header associated with this packet.
+func (p *ReceiverEstimatedMaximumBitrate) Header() Header {
+	return Header{
+		Count:  FormatREMB,
+		Type:   TypePayloadSpecificFeedback,
+		Length: uint16((p.MarshalSize() / 4) - 1),
+	}
+}
+
+// String prints the REMB packet in a human-readable format.
+func (p *ReceiverEstimatedMaximumBitrate) String() string {
+	// Keep a table of powers to units for fast conversion.
+	bitUnits := []string{"b", "Kb", "Mb", "Gb", "Tb", "Pb", "Eb"}
+
+	// Do some unit conversions because b/s is far too difficult to read.
+	bitrate := float64(p.Bitrate)
+	powers := 0
+
+	// Keep dividing the bitrate until it's under 1000
+	for bitrate >= 1000.0 && powers < len(bitUnits) {
+		bitrate /= 1000.0
+		powers++
+	}
+
+	unit := bitUnits[powers]
+
+	return fmt.Sprintf("ReceiverEstimatedMaximumBitrate %x %.2f %s/s", p.SenderSSRC, bitrate, unit)
+}
+
+// DestinationSSRC returns an array of SSRC values that this packet refers to.
+func (p *ReceiverEstimatedMaximumBitrate) DestinationSSRC() []uint32 {
+	return p.SSRCs
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/receiver_report.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/receiver_report.go
new file mode 100644
index 000000000..cf28d3964
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/receiver_report.go
@@ -0,0 +1,193 @@
+package rtcp
+
+import (
+	"encoding/binary"
+	"fmt"
+)
+
+// A ReceiverReport (RR) packet provides reception quality feedback for an RTP stream
+type ReceiverReport struct {
+	// The synchronization source identifier for the originator of this RR packet.
+	SSRC uint32
+	// Zero or more reception report blocks depending on the number of other
+	// sources heard by this sender since the last report. Each reception report
+	// block conveys statistics on the reception of RTP packets from a
+	// single synchronization source.
+	Reports []ReceptionReport
+	// Extension contains additional, payload-specific information that needs to
+	// be reported regularly about the receiver.
+	ProfileExtensions []byte
+}
+
+var _ Packet = (*ReceiverReport)(nil) // assert is a Packet
+
+const (
+	ssrcLength     = 4
+	rrSSRCOffset   = headerLength
+	rrReportOffset = rrSSRCOffset + ssrcLength
+)
+
+// Marshal encodes the ReceiverReport in binary
+func (r ReceiverReport) Marshal() ([]byte, error) {
+	/*
+	 *         0                   1                   2                   3
+	 *         0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * header |V=2|P|    RC   |   PT=RR=201   |             length            |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                     SSRC of packet sender                     |
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * report |                 SSRC_1 (SSRC of first source)                 |
+	 * block  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *   1    | fraction lost |       cumulative number of packets lost       |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |           extended highest sequence number received           |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                      interarrival jitter                      |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                         last SR (LSR)                         |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                   delay since last SR (DLSR)                  |
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * report |                 SSRC_2 (SSRC of second source)                |
+	 * block  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *   2    :                               ...                             :
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 *        |                  profile-specific extensions                  |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 */
+
+	rawPacket := make([]byte, r.len())
+	packetBody := rawPacket[headerLength:]
+
+	binary.BigEndian.PutUint32(packetBody, r.SSRC)
+
+	for i, rp := range r.Reports {
+		data, err := rp.Marshal()
+		if err != nil {
+			return nil, err
+		}
+		offset := ssrcLength + receptionReportLength*i
+		copy(packetBody[offset:], data)
+	}
+
+	if len(r.Reports) > countMax {
+		return nil, errTooManyReports
+	}
+
+	pe := make([]byte, len(r.ProfileExtensions))
+	copy(pe, r.ProfileExtensions)
+
+	// if the length of the profile extensions isn't devisible
+	// by 4, we need to pad the end.
+	for (len(pe) & 0x3) != 0 {
+		pe = append(pe, 0)
+	}
+
+	rawPacket = append(rawPacket, pe...)
+
+	hData, err := r.Header().Marshal()
+	if err != nil {
+		return nil, err
+	}
+	copy(rawPacket, hData)
+
+	return rawPacket, nil
+}
+
+// Unmarshal decodes the ReceiverReport from binary
+func (r *ReceiverReport) Unmarshal(rawPacket []byte) error {
+	/*
+	 *         0                   1                   2                   3
+	 *         0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * header |V=2|P|    RC   |   PT=RR=201   |             length            |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                     SSRC of packet sender                     |
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * report |                 SSRC_1 (SSRC of first source)                 |
+	 * block  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *   1    | fraction lost |       cumulative number of packets lost       |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |           extended highest sequence number received           |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                      interarrival jitter                      |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                         last SR (LSR)                         |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                   delay since last SR (DLSR)                  |
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * report |                 SSRC_2 (SSRC of second source)                |
+	 * block  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *   2    :                               ...                             :
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 *        |                  profile-specific extensions                  |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 */
+
+	if len(rawPacket) < (headerLength + ssrcLength) {
+		return errPacketTooShort
+	}
+
+	var h Header
+	if err := h.Unmarshal(rawPacket); err != nil {
+		return err
+	}
+
+	if h.Type != TypeReceiverReport {
+		return errWrongType
+	}
+
+	r.SSRC = binary.BigEndian.Uint32(rawPacket[rrSSRCOffset:])
+
+	for i := rrReportOffset; i < len(rawPacket) && len(r.Reports) < int(h.Count); i += receptionReportLength {
+		var rr ReceptionReport
+		if err := rr.Unmarshal(rawPacket[i:]); err != nil {
+			return err
+		}
+		r.Reports = append(r.Reports, rr)
+	}
+	r.ProfileExtensions = rawPacket[rrReportOffset+(len(r.Reports)*receptionReportLength):]
+
+	if uint8(len(r.Reports)) != h.Count {
+		return errInvalidHeader
+	}
+
+	return nil
+}
+
+func (r *ReceiverReport) len() int {
+	repsLength := 0
+	for _, rep := range r.Reports {
+		repsLength += rep.len()
+	}
+	return headerLength + ssrcLength + repsLength
+}
+
+// Header returns the Header associated with this packet.
+func (r *ReceiverReport) Header() Header {
+	return Header{
+		Count:  uint8(len(r.Reports)),
+		Type:   TypeReceiverReport,
+		Length: uint16((r.len()/4)-1) + uint16(getPadding(len(r.ProfileExtensions))),
+	}
+}
+
+// DestinationSSRC returns an array of SSRC values that this packet refers to.
+func (r *ReceiverReport) DestinationSSRC() []uint32 {
+	out := make([]uint32, len(r.Reports))
+	for i, v := range r.Reports {
+		out[i] = v.SSRC
+	}
+	return out
+}
+
+func (r ReceiverReport) String() string {
+	out := fmt.Sprintf("ReceiverReport from %x\n", r.SSRC)
+	out += "\tSSRC    \tLost\tLastSequence\n"
+	for _, i := range r.Reports {
+		out += fmt.Sprintf("\t%x\t%d/%d\t%d\n", i.SSRC, i.FractionLost, i.TotalLost, i.LastSequenceNumber)
+	}
+	out += fmt.Sprintf("\tProfile Extension Data: %v\n", r.ProfileExtensions)
+	return out
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/reception_report.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/reception_report.go
new file mode 100644
index 000000000..5bff8f2b5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/reception_report.go
@@ -0,0 +1,130 @@
+package rtcp
+
+import "encoding/binary"
+
+// A ReceptionReport block conveys statistics on the reception of RTP packets
+// from a single synchronization source.
+type ReceptionReport struct {
+	// The SSRC identifier of the source to which the information in this
+	// reception report block pertains.
+	SSRC uint32
+	// The fraction of RTP data packets from source SSRC lost since the
+	// previous SR or RR packet was sent, expressed as a fixed point
+	// number with the binary point at the left edge of the field.
+	FractionLost uint8
+	// The total number of RTP data packets from source SSRC that have
+	// been lost since the beginning of reception.
+	TotalLost uint32
+	// The low 16 bits contain the highest sequence number received in an
+	// RTP data packet from source SSRC, and the most significant 16
+	// bits extend that sequence number with the corresponding count of
+	// sequence number cycles.
+	LastSequenceNumber uint32
+	// An estimate of the statistical variance of the RTP data packet
+	// interarrival time, measured in timestamp units and expressed as an
+	// unsigned integer.
+	Jitter uint32
+	// The middle 32 bits out of 64 in the NTP timestamp received as part of
+	// the most recent RTCP sender report (SR) packet from source SSRC. If no
+	// SR has been received yet, the field is set to zero.
+	LastSenderReport uint32
+	// The delay, expressed in units of 1/65536 seconds, between receiving the
+	// last SR packet from source SSRC and sending this reception report block.
+	// If no SR packet has been received yet from SSRC, the field is set to zero.
+	Delay uint32
+}
+
+const (
+	receptionReportLength = 24
+	fractionLostOffset    = 4
+	totalLostOffset       = 5
+	lastSeqOffset         = 8
+	jitterOffset          = 12
+	lastSROffset          = 16
+	delayOffset           = 20
+)
+
+// Marshal encodes the ReceptionReport in binary
+func (r ReceptionReport) Marshal() ([]byte, error) {
+	/*
+	 *  0                   1                   2                   3
+	 *  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 * +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * |                              SSRC                             |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * | fraction lost |       cumulative number of packets lost       |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * |           extended highest sequence number received           |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * |                      interarrival jitter                      |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * |                         last SR (LSR)                         |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * |                   delay since last SR (DLSR)                  |
+	 * +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 */
+
+	rawPacket := make([]byte, receptionReportLength)
+
+	binary.BigEndian.PutUint32(rawPacket, r.SSRC)
+
+	rawPacket[fractionLostOffset] = r.FractionLost
+
+	// pack TotalLost into 24 bits
+	if r.TotalLost >= (1 << 25) {
+		return nil, errInvalidTotalLost
+	}
+	tlBytes := rawPacket[totalLostOffset:]
+	tlBytes[0] = byte(r.TotalLost >> 16)
+	tlBytes[1] = byte(r.TotalLost >> 8)
+	tlBytes[2] = byte(r.TotalLost)
+
+	binary.BigEndian.PutUint32(rawPacket[lastSeqOffset:], r.LastSequenceNumber)
+	binary.BigEndian.PutUint32(rawPacket[jitterOffset:], r.Jitter)
+	binary.BigEndian.PutUint32(rawPacket[lastSROffset:], r.LastSenderReport)
+	binary.BigEndian.PutUint32(rawPacket[delayOffset:], r.Delay)
+
+	return rawPacket, nil
+}
+
+// Unmarshal decodes the ReceptionReport from binary
+func (r *ReceptionReport) Unmarshal(rawPacket []byte) error {
+	if len(rawPacket) < receptionReportLength {
+		return errPacketTooShort
+	}
+
+	/*
+	 *  0                   1                   2                   3
+	 *  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 * +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * |                              SSRC                             |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * | fraction lost |       cumulative number of packets lost       |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * |           extended highest sequence number received           |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * |                      interarrival jitter                      |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * |                         last SR (LSR)                         |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * |                   delay since last SR (DLSR)                  |
+	 * +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 */
+
+	r.SSRC = binary.BigEndian.Uint32(rawPacket)
+	r.FractionLost = rawPacket[fractionLostOffset]
+
+	tlBytes := rawPacket[totalLostOffset:]
+	r.TotalLost = uint32(tlBytes[2]) | uint32(tlBytes[1])<<8 | uint32(tlBytes[0])<<16
+
+	r.LastSequenceNumber = binary.BigEndian.Uint32(rawPacket[lastSeqOffset:])
+	r.Jitter = binary.BigEndian.Uint32(rawPacket[jitterOffset:])
+	r.LastSenderReport = binary.BigEndian.Uint32(rawPacket[lastSROffset:])
+	r.Delay = binary.BigEndian.Uint32(rawPacket[delayOffset:])
+
+	return nil
+}
+
+func (r *ReceptionReport) len() int {
+	return receptionReportLength
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/renovate.json b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/renovate.json
new file mode 100644
index 000000000..4400fd9b2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/renovate.json
@@ -0,0 +1,15 @@
+{
+  "extends": [
+    "config:base"
+  ],
+  "postUpdateOptions": [
+    "gomodTidy"
+  ],
+  "commitBody": "Generated by renovateBot",
+  "packageRules": [
+    {
+      "packagePatterns": ["^golang.org/x/"],
+      "schedule": ["on the first day of the month"]
+    }
+  ]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/sender_report.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/sender_report.go
new file mode 100644
index 000000000..1b163807a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/sender_report.go
@@ -0,0 +1,260 @@
+package rtcp
+
+import (
+	"encoding/binary"
+	"fmt"
+)
+
+// A SenderReport (SR) packet provides reception quality feedback for an RTP stream
+type SenderReport struct {
+	// The synchronization source identifier for the originator of this SR packet.
+	SSRC uint32
+	// The wallclock time when this report was sent so that it may be used in
+	// combination with timestamps returned in reception reports from other
+	// receivers to measure round-trip propagation to those receivers.
+	NTPTime uint64
+	// Corresponds to the same time as the NTP timestamp (above), but in
+	// the same units and with the same random offset as the RTP
+	// timestamps in data packets. This correspondence may be used for
+	// intra- and inter-media synchronization for sources whose NTP
+	// timestamps are synchronized, and may be used by media-independent
+	// receivers to estimate the nominal RTP clock frequency.
+	RTPTime uint32
+	// The total number of RTP data packets transmitted by the sender
+	// since starting transmission up until the time this SR packet was
+	// generated.
+	PacketCount uint32
+	// The total number of payload octets (i.e., not including header or
+	// padding) transmitted in RTP data packets by the sender since
+	// starting transmission up until the time this SR packet was
+	// generated.
+	OctetCount uint32
+	// Zero or more reception report blocks depending on the number of other
+	// sources heard by this sender since the last report. Each reception report
+	// block conveys statistics on the reception of RTP packets from a
+	// single synchronization source.
+	Reports []ReceptionReport
+	// ProfileExtensions contains additional, payload-specific information that needs to
+	// be reported regularly about the sender.
+	ProfileExtensions []byte
+}
+
+var _ Packet = (*SenderReport)(nil) // assert is a Packet
+
+const (
+	srHeaderLength      = 24
+	srSSRCOffset        = 0
+	srNTPOffset         = srSSRCOffset + ssrcLength
+	ntpTimeLength       = 8
+	srRTPOffset         = srNTPOffset + ntpTimeLength
+	rtpTimeLength       = 4
+	srPacketCountOffset = srRTPOffset + rtpTimeLength
+	srPacketCountLength = 4
+	srOctetCountOffset  = srPacketCountOffset + srPacketCountLength
+	srOctetCountLength  = 4
+	srReportOffset      = srOctetCountOffset + srOctetCountLength
+)
+
+// Marshal encodes the SenderReport in binary
+func (r SenderReport) Marshal() ([]byte, error) {
+	/*
+	 *         0                   1                   2                   3
+	 *         0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * header |V=2|P|    RC   |   PT=SR=200   |             length            |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                         SSRC of sender                        |
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * sender |              NTP timestamp, most significant word             |
+	 * info   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |             NTP timestamp, least significant word             |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                         RTP timestamp                         |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                     sender's packet count                     |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                      sender's octet count                     |
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * report |                 SSRC_1 (SSRC of first source)                 |
+	 * block  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *   1    | fraction lost |       cumulative number of packets lost       |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |           extended highest sequence number received           |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                      interarrival jitter                      |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                         last SR (LSR)                         |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                   delay since last SR (DLSR)                  |
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * report |                 SSRC_2 (SSRC of second source)                |
+	 * block  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *   2    :                               ...                             :
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 *        |                  profile-specific extensions                  |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 */
+
+	rawPacket := make([]byte, r.len())
+	packetBody := rawPacket[headerLength:]
+
+	binary.BigEndian.PutUint32(packetBody[srSSRCOffset:], r.SSRC)
+	binary.BigEndian.PutUint64(packetBody[srNTPOffset:], r.NTPTime)
+	binary.BigEndian.PutUint32(packetBody[srRTPOffset:], r.RTPTime)
+	binary.BigEndian.PutUint32(packetBody[srPacketCountOffset:], r.PacketCount)
+	binary.BigEndian.PutUint32(packetBody[srOctetCountOffset:], r.OctetCount)
+
+	offset := srHeaderLength
+	for _, rp := range r.Reports {
+		data, err := rp.Marshal()
+		if err != nil {
+			return nil, err
+		}
+		copy(packetBody[offset:], data)
+		offset += receptionReportLength
+	}
+
+	if len(r.Reports) > countMax {
+		return nil, errTooManyReports
+	}
+
+	copy(packetBody[offset:], r.ProfileExtensions)
+
+	hData, err := r.Header().Marshal()
+	if err != nil {
+		return nil, err
+	}
+	copy(rawPacket, hData)
+
+	return rawPacket, nil
+}
+
+// Unmarshal decodes the SenderReport from binary
+func (r *SenderReport) Unmarshal(rawPacket []byte) error {
+	/*
+	 *         0                   1                   2                   3
+	 *         0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * header |V=2|P|    RC   |   PT=SR=200   |             length            |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                         SSRC of sender                        |
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * sender |              NTP timestamp, most significant word             |
+	 * info   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |             NTP timestamp, least significant word             |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                         RTP timestamp                         |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                     sender's packet count                     |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                      sender's octet count                     |
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * report |                 SSRC_1 (SSRC of first source)                 |
+	 * block  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *   1    | fraction lost |       cumulative number of packets lost       |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |           extended highest sequence number received           |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                      interarrival jitter                      |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                         last SR (LSR)                         |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                   delay since last SR (DLSR)                  |
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * report |                 SSRC_2 (SSRC of second source)                |
+	 * block  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *   2    :                               ...                             :
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 *        |                  profile-specific extensions                  |
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 */
+
+	if len(rawPacket) < (headerLength + srHeaderLength) {
+		return errPacketTooShort
+	}
+
+	var h Header
+	if err := h.Unmarshal(rawPacket); err != nil {
+		return err
+	}
+
+	if h.Type != TypeSenderReport {
+		return errWrongType
+	}
+
+	packetBody := rawPacket[headerLength:]
+
+	r.SSRC = binary.BigEndian.Uint32(packetBody[srSSRCOffset:])
+	r.NTPTime = binary.BigEndian.Uint64(packetBody[srNTPOffset:])
+	r.RTPTime = binary.BigEndian.Uint32(packetBody[srRTPOffset:])
+	r.PacketCount = binary.BigEndian.Uint32(packetBody[srPacketCountOffset:])
+	r.OctetCount = binary.BigEndian.Uint32(packetBody[srOctetCountOffset:])
+
+	offset := srReportOffset
+	for i := 0; i < int(h.Count); i++ {
+		rrEnd := offset + receptionReportLength
+		if rrEnd > len(packetBody) {
+			return errPacketTooShort
+		}
+		rrBody := packetBody[offset : offset+receptionReportLength]
+		offset = rrEnd
+
+		var rr ReceptionReport
+		if err := rr.Unmarshal(rrBody); err != nil {
+			return err
+		}
+		r.Reports = append(r.Reports, rr)
+	}
+
+	if offset < len(packetBody) {
+		r.ProfileExtensions = packetBody[offset:]
+	}
+
+	if uint8(len(r.Reports)) != h.Count {
+		return errInvalidHeader
+	}
+
+	return nil
+}
+
+// DestinationSSRC returns an array of SSRC values that this packet refers to.
+func (r *SenderReport) DestinationSSRC() []uint32 {
+	out := make([]uint32, len(r.Reports)+1)
+	for i, v := range r.Reports {
+		out[i] = v.SSRC
+	}
+	out[len(r.Reports)] = r.SSRC
+	return out
+}
+
+func (r *SenderReport) len() int {
+	repsLength := 0
+	for _, rep := range r.Reports {
+		repsLength += rep.len()
+	}
+	return headerLength + srHeaderLength + repsLength + len(r.ProfileExtensions)
+}
+
+// Header returns the Header associated with this packet.
+func (r *SenderReport) Header() Header {
+	return Header{
+		Count:  uint8(len(r.Reports)),
+		Type:   TypeSenderReport,
+		Length: uint16((r.len() / 4) - 1),
+	}
+}
+
+func (r SenderReport) String() string {
+	out := fmt.Sprintf("SenderReport from %x\n", r.SSRC)
+	out += fmt.Sprintf("\tNTPTime:\t%d\n", r.NTPTime)
+	out += fmt.Sprintf("\tRTPTIme:\t%d\n", r.RTPTime)
+	out += fmt.Sprintf("\tPacketCount:\t%d\n", r.PacketCount)
+	out += fmt.Sprintf("\tOctetCount:\t%d\n", r.OctetCount)
+
+	out += "\tSSRC    \tLost\tLastSequence\n"
+	for _, i := range r.Reports {
+		out += fmt.Sprintf("\t%x\t%d/%d\t%d\n", i.SSRC, i.FractionLost, i.TotalLost, i.LastSequenceNumber)
+	}
+	out += fmt.Sprintf("\tProfile Extension Data: %v\n", r.ProfileExtensions)
+	return out
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/slice_loss_indication.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/slice_loss_indication.go
new file mode 100644
index 000000000..76893092d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/slice_loss_indication.go
@@ -0,0 +1,115 @@
+package rtcp
+
+import (
+	"encoding/binary"
+	"fmt"
+	"math"
+)
+
+// SLIEntry represents a single entry to the SLI packet's
+// list of lost slices.
+type SLIEntry struct {
+	// ID of first lost slice
+	First uint16
+
+	// Number of lost slices
+	Number uint16
+
+	// ID of related picture
+	Picture uint8
+}
+
+// The SliceLossIndication packet informs the encoder about the loss of a picture slice
+type SliceLossIndication struct {
+	// SSRC of sender
+	SenderSSRC uint32
+
+	// SSRC of the media source
+	MediaSSRC uint32
+
+	SLI []SLIEntry
+}
+
+var _ Packet = (*SliceLossIndication)(nil) // assert is a Packet
+
+const (
+	sliLength = 2
+	sliOffset = 8
+)
+
+// Marshal encodes the SliceLossIndication in binary
+func (p SliceLossIndication) Marshal() ([]byte, error) {
+	if len(p.SLI)+sliLength > math.MaxUint8 {
+		return nil, errTooManyReports
+	}
+
+	rawPacket := make([]byte, sliOffset+(len(p.SLI)*4))
+	binary.BigEndian.PutUint32(rawPacket, p.SenderSSRC)
+	binary.BigEndian.PutUint32(rawPacket[4:], p.MediaSSRC)
+	for i, s := range p.SLI {
+		sli := ((uint32(s.First) & 0x1FFF) << 19) |
+			((uint32(s.Number) & 0x1FFF) << 6) |
+			(uint32(s.Picture) & 0x3F)
+		binary.BigEndian.PutUint32(rawPacket[sliOffset+(4*i):], sli)
+	}
+	hData, err := p.Header().Marshal()
+	if err != nil {
+		return nil, err
+	}
+
+	return append(hData, rawPacket...), nil
+}
+
+// Unmarshal decodes the SliceLossIndication from binary
+func (p *SliceLossIndication) Unmarshal(rawPacket []byte) error {
+	if len(rawPacket) < (headerLength + ssrcLength) {
+		return errPacketTooShort
+	}
+
+	var h Header
+	if err := h.Unmarshal(rawPacket); err != nil {
+		return err
+	}
+
+	if len(rawPacket) < (headerLength + int(4*h.Length)) {
+		return errPacketTooShort
+	}
+
+	if h.Type != TypeTransportSpecificFeedback || h.Count != FormatSLI {
+		return errWrongType
+	}
+
+	p.SenderSSRC = binary.BigEndian.Uint32(rawPacket[headerLength:])
+	p.MediaSSRC = binary.BigEndian.Uint32(rawPacket[headerLength+ssrcLength:])
+	for i := headerLength + sliOffset; i < (headerLength + int(h.Length*4)); i += 4 {
+		sli := binary.BigEndian.Uint32(rawPacket[i:])
+		p.SLI = append(p.SLI, SLIEntry{
+			First:   uint16((sli >> 19) & 0x1FFF),
+			Number:  uint16((sli >> 6) & 0x1FFF),
+			Picture: uint8(sli & 0x3F),
+		})
+	}
+	return nil
+}
+
+func (p *SliceLossIndication) len() int {
+	return headerLength + sliOffset + (len(p.SLI) * 4)
+}
+
+// Header returns the Header associated with this packet.
+func (p *SliceLossIndication) Header() Header {
+	return Header{
+		Count:  FormatSLI,
+		Type:   TypeTransportSpecificFeedback,
+		Length: uint16((p.len() / 4) - 1),
+	}
+}
+
+func (p *SliceLossIndication) String() string {
+	return fmt.Sprintf("SliceLossIndication %x %x %+v", p.SenderSSRC, p.MediaSSRC, p.SLI)
+}
+
+// DestinationSSRC returns an array of SSRC values that this packet refers to.
+func (p *SliceLossIndication) DestinationSSRC() []uint32 {
+	return []uint32{p.MediaSSRC}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/source_description.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/source_description.go
new file mode 100644
index 000000000..4306b66b4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/source_description.go
@@ -0,0 +1,352 @@
+package rtcp
+
+import (
+	"encoding/binary"
+	"fmt"
+)
+
+// SDESType is the item type used in the RTCP SDES control packet.
+type SDESType uint8
+
+// RTP SDES item types registered with IANA. See: https://www.iana.org/assignments/rtp-parameters/rtp-parameters.xhtml#rtp-parameters-5
+const (
+	SDESEnd      SDESType = iota // end of SDES list                RFC 3550, 6.5
+	SDESCNAME                    // canonical name                  RFC 3550, 6.5.1
+	SDESName                     // user name                       RFC 3550, 6.5.2
+	SDESEmail                    // user's electronic mail address  RFC 3550, 6.5.3
+	SDESPhone                    // user's phone number             RFC 3550, 6.5.4
+	SDESLocation                 // geographic user location        RFC 3550, 6.5.5
+	SDESTool                     // name of application or tool     RFC 3550, 6.5.6
+	SDESNote                     // notice about the source         RFC 3550, 6.5.7
+	SDESPrivate                  // private extensions              RFC 3550, 6.5.8  (not implemented)
+)
+
+func (s SDESType) String() string {
+	switch s {
+	case SDESEnd:
+		return "END"
+	case SDESCNAME:
+		return "CNAME"
+	case SDESName:
+		return "NAME"
+	case SDESEmail:
+		return "EMAIL"
+	case SDESPhone:
+		return "PHONE"
+	case SDESLocation:
+		return "LOC"
+	case SDESTool:
+		return "TOOL"
+	case SDESNote:
+		return "NOTE"
+	case SDESPrivate:
+		return "PRIV"
+	default:
+		return string(s)
+	}
+}
+
+const (
+	sdesSourceLen        = 4
+	sdesTypeLen          = 1
+	sdesTypeOffset       = 0
+	sdesOctetCountLen    = 1
+	sdesOctetCountOffset = 1
+	sdesMaxOctetCount    = (1 << 8) - 1
+	sdesTextOffset       = 2
+)
+
+// A SourceDescription (SDES) packet describes the sources in an RTP stream.
+type SourceDescription struct {
+	Chunks []SourceDescriptionChunk
+}
+
+var _ Packet = (*SourceDescription)(nil) // assert is a Packet
+
+// Marshal encodes the SourceDescription in binary
+func (s SourceDescription) Marshal() ([]byte, error) {
+	/*
+	 *         0                   1                   2                   3
+	 *         0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * header |V=2|P|    SC   |  PT=SDES=202  |             length            |
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * chunk  |                          SSRC/CSRC_1                          |
+	 *   1    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                           SDES items                          |
+	 *        |                              ...                              |
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * chunk  |                          SSRC/CSRC_2                          |
+	 *   2    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                           SDES items                          |
+	 *        |                              ...                              |
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 */
+
+	rawPacket := make([]byte, s.len())
+	packetBody := rawPacket[headerLength:]
+
+	chunkOffset := 0
+	for _, c := range s.Chunks {
+		data, err := c.Marshal()
+		if err != nil {
+			return nil, err
+		}
+		copy(packetBody[chunkOffset:], data)
+		chunkOffset += len(data)
+	}
+
+	if len(s.Chunks) > countMax {
+		return nil, errTooManyChunks
+	}
+
+	hData, err := s.Header().Marshal()
+	if err != nil {
+		return nil, err
+	}
+	copy(rawPacket, hData)
+
+	return rawPacket, nil
+}
+
+// Unmarshal decodes the SourceDescription from binary
+func (s *SourceDescription) Unmarshal(rawPacket []byte) error {
+	/*
+	 *         0                   1                   2                   3
+	 *         0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 *        +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * header |V=2|P|    SC   |  PT=SDES=202  |             length            |
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * chunk  |                          SSRC/CSRC_1                          |
+	 *   1    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                           SDES items                          |
+	 *        |                              ...                              |
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * chunk  |                          SSRC/CSRC_2                          |
+	 *   2    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *        |                           SDES items                          |
+	 *        |                              ...                              |
+	 *        +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 */
+
+	var h Header
+	if err := h.Unmarshal(rawPacket); err != nil {
+		return err
+	}
+
+	if h.Type != TypeSourceDescription {
+		return errWrongType
+	}
+
+	for i := headerLength; i < len(rawPacket); {
+		var chunk SourceDescriptionChunk
+		if err := chunk.Unmarshal(rawPacket[i:]); err != nil {
+			return err
+		}
+		s.Chunks = append(s.Chunks, chunk)
+
+		i += chunk.len()
+	}
+
+	if len(s.Chunks) != int(h.Count) {
+		return errInvalidHeader
+	}
+
+	return nil
+}
+
+func (s *SourceDescription) len() int {
+	chunksLength := 0
+	for _, c := range s.Chunks {
+		chunksLength += c.len()
+	}
+	return headerLength + chunksLength
+}
+
+// Header returns the Header associated with this packet.
+func (s *SourceDescription) Header() Header {
+	return Header{
+		Count:  uint8(len(s.Chunks)),
+		Type:   TypeSourceDescription,
+		Length: uint16((s.len() / 4) - 1),
+	}
+}
+
+// A SourceDescriptionChunk contains items describing a single RTP source
+type SourceDescriptionChunk struct {
+	// The source (ssrc) or contributing source (csrc) identifier this packet describes
+	Source uint32
+	Items  []SourceDescriptionItem
+}
+
+// Marshal encodes the SourceDescriptionChunk in binary
+func (s SourceDescriptionChunk) Marshal() ([]byte, error) {
+	/*
+	 *  +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 *  |                          SSRC/CSRC_1                          |
+	 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *  |                           SDES items                          |
+	 *  |                              ...                              |
+	 *  +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 */
+
+	rawPacket := make([]byte, sdesSourceLen)
+	binary.BigEndian.PutUint32(rawPacket, s.Source)
+
+	for _, it := range s.Items {
+		data, err := it.Marshal()
+		if err != nil {
+			return nil, err
+		}
+		rawPacket = append(rawPacket, data...)
+	}
+
+	// The list of items in each chunk MUST be terminated by one or more null octets
+	rawPacket = append(rawPacket, uint8(SDESEnd))
+
+	// additional null octets MUST be included if needed to pad until the next 32-bit boundary
+	rawPacket = append(rawPacket, make([]byte, getPadding(len(rawPacket)))...)
+
+	return rawPacket, nil
+}
+
+// Unmarshal decodes the SourceDescriptionChunk from binary
+func (s *SourceDescriptionChunk) Unmarshal(rawPacket []byte) error {
+	/*
+	 *  +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 *  |                          SSRC/CSRC_1                          |
+	 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *  |                           SDES items                          |
+	 *  |                              ...                              |
+	 *  +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 */
+
+	if len(rawPacket) < (sdesSourceLen + sdesTypeLen) {
+		return errPacketTooShort
+	}
+
+	s.Source = binary.BigEndian.Uint32(rawPacket)
+
+	for i := 4; i < len(rawPacket); {
+		if pktType := SDESType(rawPacket[i]); pktType == SDESEnd {
+			return nil
+		}
+
+		var it SourceDescriptionItem
+		if err := it.Unmarshal(rawPacket[i:]); err != nil {
+			return err
+		}
+		s.Items = append(s.Items, it)
+		i += it.len()
+	}
+
+	return errPacketTooShort
+}
+
+func (s SourceDescriptionChunk) len() int {
+	len := sdesSourceLen
+	for _, it := range s.Items {
+		len += it.len()
+	}
+	len += sdesTypeLen // for terminating null octet
+
+	// align to 32-bit boundary
+	len += getPadding(len)
+
+	return len
+}
+
+// A SourceDescriptionItem is a part of a SourceDescription that describes a stream.
+type SourceDescriptionItem struct {
+	// The type identifier for this item. eg, SDESCNAME for canonical name description.
+	//
+	// Type zero or SDESEnd is interpreted as the end of an item list and cannot be used.
+	Type SDESType
+	// Text is a unicode text blob associated with the item. Its meaning varies based on the item's Type.
+	Text string
+}
+
+func (s SourceDescriptionItem) len() int {
+	/*
+	 *   0                   1                   2                   3
+	 *   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *  |    CNAME=1    |     length    | user and domain name        ...
+	 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 */
+	return sdesTypeLen + sdesOctetCountLen + len([]byte(s.Text))
+}
+
+// Marshal encodes the SourceDescriptionItem in binary
+func (s SourceDescriptionItem) Marshal() ([]byte, error) {
+	/*
+	 *   0                   1                   2                   3
+	 *   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *  |    CNAME=1    |     length    | user and domain name        ...
+	 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 */
+
+	if s.Type == SDESEnd {
+		return nil, errSDESMissingType
+	}
+
+	rawPacket := make([]byte, sdesTypeLen+sdesOctetCountLen)
+
+	rawPacket[sdesTypeOffset] = uint8(s.Type)
+
+	txtBytes := []byte(s.Text)
+	octetCount := len(txtBytes)
+	if octetCount > sdesMaxOctetCount {
+		return nil, errSDESTextTooLong
+	}
+	rawPacket[sdesOctetCountOffset] = uint8(octetCount)
+
+	rawPacket = append(rawPacket, txtBytes...)
+
+	return rawPacket, nil
+}
+
+// Unmarshal decodes the SourceDescriptionItem from binary
+func (s *SourceDescriptionItem) Unmarshal(rawPacket []byte) error {
+	/*
+	 *   0                   1                   2                   3
+	 *   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 *  |    CNAME=1    |     length    | user and domain name        ...
+	 *  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 */
+
+	if len(rawPacket) < (sdesTypeLen + sdesOctetCountLen) {
+		return errPacketTooShort
+	}
+
+	s.Type = SDESType(rawPacket[sdesTypeOffset])
+
+	octetCount := int(rawPacket[sdesOctetCountOffset])
+	if sdesTextOffset+octetCount > len(rawPacket) {
+		return errPacketTooShort
+	}
+
+	txtBytes := rawPacket[sdesTextOffset : sdesTextOffset+octetCount]
+	s.Text = string(txtBytes)
+
+	return nil
+}
+
+// DestinationSSRC returns an array of SSRC values that this packet refers to.
+func (s *SourceDescription) DestinationSSRC() []uint32 {
+	out := make([]uint32, len(s.Chunks))
+	for i, v := range s.Chunks {
+		out[i] = v.Source
+	}
+	return out
+}
+
+func (s *SourceDescription) String() string {
+	out := "Source Description:\n"
+	for _, c := range s.Chunks {
+		out += fmt.Sprintf("\t%x: %s\n", c.Source, c.Items)
+	}
+	return out
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/transport_layer_cc.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/transport_layer_cc.go
new file mode 100644
index 000000000..960658189
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/transport_layer_cc.go
@@ -0,0 +1,560 @@
+package rtcp
+
+// Author: adwpc
+
+import (
+	"encoding/binary"
+	"errors"
+	"fmt"
+	"math"
+)
+
+// https://tools.ietf.org/html/draft-holmer-rmcat-transport-wide-cc-extensions-01#page-5
+// 0                   1                   2                   3
+// 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |V=2|P|  FMT=15 |    PT=205     |           length              |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |                     SSRC of packet sender                     |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |                      SSRC of media source                     |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |      base sequence number     |      packet status count      |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |                 reference time                | fb pkt. count |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |          packet chunk         |         packet chunk          |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// .                                                               .
+// .                                                               .
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |         packet chunk          |  recv delta   |  recv delta   |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// .                                                               .
+// .                                                               .
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |           recv delta          |  recv delta   | zero padding  |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+// for packet status chunk
+const (
+	// type of packet status chunk
+	TypeTCCRunLengthChunk    = 0
+	TypeTCCStatusVectorChunk = 1
+
+	// len of packet status chunk
+	packetStatusChunkLength = 2
+)
+
+// type of packet status symbol and recv delta
+const (
+	// https://tools.ietf.org/html/draft-holmer-rmcat-transport-wide-cc-extensions-01#section-3.1.1
+	TypeTCCPacketNotReceived = uint16(iota)
+	TypeTCCPacketReceivedSmallDelta
+	TypeTCCPacketReceivedLargeDelta
+	// https://tools.ietf.org/html/draft-holmer-rmcat-transport-wide-cc-extensions-01#page-7
+	// see Example 2: "packet received, w/o recv delta"
+	TypeTCCPacketReceivedWithoutDelta
+)
+
+// for status vector chunk
+const (
+	// https://tools.ietf.org/html/draft-holmer-rmcat-transport-wide-cc-extensions-01#section-3.1.4
+	TypeTCCSymbolSizeOneBit = 0
+	TypeTCCSymbolSizeTwoBit = 1
+
+	// Notice: RFC is wrong: "packet received" (0) and "packet not received" (1)
+	// if S == TypeTCCSymbolSizeOneBit, symbol list will be: TypeTCCPacketNotReceived TypeTCCPacketReceivedSmallDelta
+	// if S == TypeTCCSymbolSizeTwoBit, symbol list will be same as above:
+)
+
+func numOfBitsOfSymbolSize() map[uint16]uint16 {
+	return map[uint16]uint16{
+		TypeTCCSymbolSizeOneBit: 1,
+		TypeTCCSymbolSizeTwoBit: 2,
+	}
+}
+
+var _ Packet = (*TransportLayerCC)(nil) // assert is a Packet
+
+var (
+	errPacketStatusChunkLength = errors.New("packet status chunk must be 2 bytes")
+	errDeltaExceedLimit        = errors.New("delta exceed limit")
+)
+
+// PacketStatusChunk has two kinds:
+// RunLengthChunk and StatusVectorChunk
+type PacketStatusChunk interface {
+	Marshal() ([]byte, error)
+	Unmarshal(rawPacket []byte) error
+}
+
+// RunLengthChunk T=TypeTCCRunLengthChunk
+// 0                   1
+// 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |T| S |       Run Length        |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+type RunLengthChunk struct {
+	PacketStatusChunk
+
+	// T = TypeTCCRunLengthChunk
+	Type uint16
+
+	// S: type of packet status
+	// kind: TypeTCCPacketNotReceived or...
+	PacketStatusSymbol uint16
+
+	// RunLength: count of S
+	RunLength uint16
+}
+
+// Marshal ..
+func (r RunLengthChunk) Marshal() ([]byte, error) {
+	chunk := make([]byte, 2)
+
+	// append 1 bit '0'
+	dst, err := setNBitsOfUint16(0, 1, 0, 0)
+	if err != nil {
+		return nil, err
+	}
+
+	// append 2 bit PacketStatusSymbol
+	dst, err = setNBitsOfUint16(dst, 2, 1, r.PacketStatusSymbol)
+	if err != nil {
+		return nil, err
+	}
+
+	// append 13 bit RunLength
+	dst, err = setNBitsOfUint16(dst, 13, 3, r.RunLength)
+	if err != nil {
+		return nil, err
+	}
+
+	binary.BigEndian.PutUint16(chunk, dst)
+	return chunk, nil
+}
+
+// Unmarshal ..
+func (r *RunLengthChunk) Unmarshal(rawPacket []byte) error {
+	if len(rawPacket) != packetStatusChunkLength {
+		return errPacketStatusChunkLength
+	}
+
+	// record type
+	r.Type = TypeTCCRunLengthChunk
+
+	// get PacketStatusSymbol
+	// r.PacketStatusSymbol = uint16(rawPacket[0] >> 5 & 0x03)
+	r.PacketStatusSymbol = getNBitsFromByte(rawPacket[0], 1, 2)
+
+	// get RunLength
+	// r.RunLength = uint16(rawPacket[0]&0x1F)*256 + uint16(rawPacket[1])
+	r.RunLength = getNBitsFromByte(rawPacket[0], 3, 5)<<8 + uint16(rawPacket[1])
+	return nil
+}
+
+// StatusVectorChunk T=typeStatusVecotrChunk
+// 0                   1
+// 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |T|S|       symbol list         |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+type StatusVectorChunk struct {
+	PacketStatusChunk
+	// T = TypeTCCRunLengthChunk
+	Type uint16
+
+	// TypeTCCSymbolSizeOneBit or TypeTCCSymbolSizeTwoBit
+	SymbolSize uint16
+
+	// when SymbolSize = TypeTCCSymbolSizeOneBit, SymbolList is 14*1bit:
+	// TypeTCCSymbolListPacketReceived or TypeTCCSymbolListPacketNotReceived
+	// when SymbolSize = TypeTCCSymbolSizeTwoBit, SymbolList is 7*2bit:
+	// TypeTCCPacketNotReceived TypeTCCPacketReceivedSmallDelta TypeTCCPacketReceivedLargeDelta or typePacketReserved
+	SymbolList []uint16
+}
+
+// Marshal ..
+func (r StatusVectorChunk) Marshal() ([]byte, error) {
+	chunk := make([]byte, 2)
+
+	// set first bit '1'
+	dst, err := setNBitsOfUint16(0, 1, 0, 1)
+	if err != nil {
+		return nil, err
+	}
+
+	// set second bit SymbolSize
+	dst, err = setNBitsOfUint16(dst, 1, 1, r.SymbolSize)
+	if err != nil {
+		return nil, err
+	}
+
+	numOfBits := numOfBitsOfSymbolSize()[r.SymbolSize]
+	// append 14 bit SymbolList
+	for i, s := range r.SymbolList {
+		index := numOfBits*uint16(i) + 2
+		dst, err = setNBitsOfUint16(dst, numOfBits, index, s)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	binary.BigEndian.PutUint16(chunk, dst)
+	// set SymbolList(bit8-15)
+	// chunk[1] = uint8(r.SymbolList) & 0x0f
+	return chunk, nil
+}
+
+// Unmarshal ..
+func (r *StatusVectorChunk) Unmarshal(rawPacket []byte) error {
+	if len(rawPacket) != packetStatusChunkLength {
+		return errPacketStatusChunkLength
+	}
+
+	r.Type = TypeTCCStatusVectorChunk
+	r.SymbolSize = getNBitsFromByte(rawPacket[0], 1, 1)
+
+	if r.SymbolSize == TypeTCCSymbolSizeOneBit {
+		for i := uint16(0); i < 6; i++ {
+			r.SymbolList = append(r.SymbolList, getNBitsFromByte(rawPacket[0], 2+i, 1))
+		}
+		for i := uint16(0); i < 8; i++ {
+			r.SymbolList = append(r.SymbolList, getNBitsFromByte(rawPacket[1], i, 1))
+		}
+		return nil
+	}
+	if r.SymbolSize == TypeTCCSymbolSizeTwoBit {
+		for i := uint16(0); i < 3; i++ {
+			r.SymbolList = append(r.SymbolList, getNBitsFromByte(rawPacket[0], 2+i*2, 2))
+		}
+		for i := uint16(0); i < 4; i++ {
+			r.SymbolList = append(r.SymbolList, getNBitsFromByte(rawPacket[1], i*2, 2))
+		}
+		return nil
+	}
+
+	r.SymbolSize = getNBitsFromByte(rawPacket[0], 2, 6)<<8 + uint16(rawPacket[1])
+	return nil
+}
+
+const (
+	// TypeTCCDeltaScaleFactor https://tools.ietf.org/html/draft-holmer-rmcat-transport-wide-cc-extensions-01#section-3.1.5
+	TypeTCCDeltaScaleFactor = 250
+)
+
+// RecvDelta are represented as multiples of 250us
+// small delta is 1 byte: [0，63.75]ms = [0, 63750]us = [0, 255]*250us
+// big delta is 2 bytes: [-8192.0, 8191.75]ms = [-8192000, 8191750]us = [-32768, 32767]*250us
+// https://tools.ietf.org/html/draft-holmer-rmcat-transport-wide-cc-extensions-01#section-3.1.5
+type RecvDelta struct {
+	Type uint16
+	// us
+	Delta int64
+}
+
+// Marshal ..
+func (r RecvDelta) Marshal() ([]byte, error) {
+	delta := r.Delta / TypeTCCDeltaScaleFactor
+
+	// small delta
+	if r.Type == TypeTCCPacketReceivedSmallDelta && delta >= 0 && delta <= math.MaxUint8 {
+		deltaChunk := make([]byte, 1)
+		deltaChunk[0] = byte(delta)
+		return deltaChunk, nil
+	}
+
+	// big delta
+	if r.Type == TypeTCCPacketReceivedLargeDelta && delta >= math.MinInt16 && delta <= math.MaxInt16 {
+		deltaChunk := make([]byte, 2)
+		binary.BigEndian.PutUint16(deltaChunk, uint16(delta))
+		return deltaChunk, nil
+	}
+
+	// overflow
+	return nil, errDeltaExceedLimit
+}
+
+// Unmarshal ..
+func (r *RecvDelta) Unmarshal(rawPacket []byte) error {
+	chunkLen := len(rawPacket)
+
+	// must be 1 or 2 bytes
+	if chunkLen != 1 && chunkLen != 2 {
+		return errDeltaExceedLimit
+	}
+
+	if chunkLen == 1 {
+		r.Type = TypeTCCPacketReceivedSmallDelta
+		r.Delta = TypeTCCDeltaScaleFactor * int64(rawPacket[0])
+		return nil
+	}
+
+	r.Type = TypeTCCPacketReceivedLargeDelta
+	r.Delta = TypeTCCDeltaScaleFactor * int64(int16(binary.BigEndian.Uint16(rawPacket)))
+	return nil
+}
+
+const (
+	// the offset after header
+	baseSequenceNumberOffset = 8
+	packetStatusCountOffset  = 10
+	referenceTimeOffset      = 12
+	fbPktCountOffset         = 15
+	packetChunkOffset        = 16
+)
+
+// TransportLayerCC for sender-BWE
+// https://tools.ietf.org/html/draft-holmer-rmcat-transport-wide-cc-extensions-01#page-5
+type TransportLayerCC struct {
+	// header
+	Header Header
+
+	// SSRC of sender
+	SenderSSRC uint32
+
+	// SSRC of the media source
+	MediaSSRC uint32
+
+	// Transport wide sequence of rtp extension
+	BaseSequenceNumber uint16
+
+	// PacketStatusCount
+	PacketStatusCount uint16
+
+	// ReferenceTime
+	ReferenceTime uint32
+
+	// FbPktCount
+	FbPktCount uint8
+
+	// PacketChunks
+	PacketChunks []PacketStatusChunk
+
+	// RecvDeltas
+	RecvDeltas []*RecvDelta
+}
+
+// Header returns the Header associated with this packet.
+// func (t *TransportLayerCC) Header() Header {
+// return t.Header
+// return Header{
+// Padding: true,
+// Count:   FormatTCC,
+// Type:    TypeTCCTransportSpecificFeedback,
+// // https://tools.ietf.org/html/rfc4585#page-33
+// Length: uint16((t.len() / 4) - 1),
+// }
+// }
+
+func (t *TransportLayerCC) packetLen() uint16 {
+	n := uint16(headerLength + packetChunkOffset + len(t.PacketChunks)*2)
+	for _, d := range t.RecvDeltas {
+		delta := d.Delta / TypeTCCDeltaScaleFactor
+
+		// small delta
+		if delta >= 0 && delta <= math.MaxUint8 {
+			n++
+		} else {
+			n += 2
+		}
+	}
+	return n
+}
+
+// Len return total bytes with padding
+func (t *TransportLayerCC) Len() uint16 {
+	n := t.packetLen()
+	// has padding
+	if n%4 != 0 {
+		n = (n/4 + 1) * 4
+	}
+
+	return n
+}
+
+func (t TransportLayerCC) String() string {
+	out := fmt.Sprintf("TransportLayerCC:\n\tHeader %v\n", t.Header)
+	out += fmt.Sprintf("TransportLayerCC:\n\tSender Ssrc %d\n", t.SenderSSRC)
+	out += fmt.Sprintf("\tMedia Ssrc %d\n", t.MediaSSRC)
+	out += fmt.Sprintf("\tBase Sequence Number %d\n", t.BaseSequenceNumber)
+	out += fmt.Sprintf("\tStatus Count %d\n", t.PacketStatusCount)
+	out += fmt.Sprintf("\tReference Time %d\n", t.ReferenceTime)
+	out += fmt.Sprintf("\tFeedback Packet Count %d\n", t.FbPktCount)
+	out += "\tPacketChunks "
+	for _, chunk := range t.PacketChunks {
+		out += fmt.Sprintf("%+v ", chunk)
+	}
+	out += "\n\tRecvDeltas "
+	for _, delta := range t.RecvDeltas {
+		out += fmt.Sprintf("%+v ", delta)
+	}
+	out += "\n"
+	return out
+}
+
+// Marshal encodes the TransportLayerCC in binary
+func (t TransportLayerCC) Marshal() ([]byte, error) {
+	header, err := t.Header.Marshal()
+	if err != nil {
+		return nil, err
+	}
+
+	payload := make([]byte, t.Len()-headerLength)
+	binary.BigEndian.PutUint32(payload, t.SenderSSRC)
+	binary.BigEndian.PutUint32(payload[4:], t.MediaSSRC)
+	binary.BigEndian.PutUint16(payload[baseSequenceNumberOffset:], t.BaseSequenceNumber)
+	binary.BigEndian.PutUint16(payload[packetStatusCountOffset:], t.PacketStatusCount)
+	ReferenceTimeAndFbPktCount := appendNBitsToUint32(0, 24, t.ReferenceTime)
+	ReferenceTimeAndFbPktCount = appendNBitsToUint32(ReferenceTimeAndFbPktCount, 8, uint32(t.FbPktCount))
+	binary.BigEndian.PutUint32(payload[referenceTimeOffset:], ReferenceTimeAndFbPktCount)
+
+	for i, chunk := range t.PacketChunks {
+		b, err := chunk.Marshal()
+		if err != nil {
+			return nil, err
+		}
+		copy(payload[packetChunkOffset+i*2:], b)
+	}
+
+	recvDeltaOffset := packetChunkOffset + len(t.PacketChunks)*2
+	var i int
+	for _, delta := range t.RecvDeltas {
+		b, err := delta.Marshal()
+		if err == nil {
+			copy(payload[recvDeltaOffset+i:], b)
+			i++
+			if delta.Type == TypeTCCPacketReceivedLargeDelta {
+				i++
+			}
+		}
+	}
+
+	if t.Header.Padding {
+		payload[len(payload)-1] = uint8(t.Len() - t.packetLen())
+	}
+
+	return append(header, payload...), nil
+}
+
+// Unmarshal ..
+func (t *TransportLayerCC) Unmarshal(rawPacket []byte) error { //nolint:gocognit
+	if len(rawPacket) < (headerLength + ssrcLength) {
+		return errPacketTooShort
+	}
+
+	if err := t.Header.Unmarshal(rawPacket); err != nil {
+		return err
+	}
+
+	// https://tools.ietf.org/html/rfc4585#page-33
+	// header's length + payload's length
+	totalLength := 4 * (t.Header.Length + 1)
+
+	if totalLength <= headerLength+packetChunkOffset {
+		return errPacketTooShort
+	}
+
+	if len(rawPacket) < int(totalLength) {
+		return errPacketTooShort
+	}
+
+	if t.Header.Type != TypeTransportSpecificFeedback || t.Header.Count != FormatTCC {
+		return errWrongType
+	}
+
+	t.SenderSSRC = binary.BigEndian.Uint32(rawPacket[headerLength:])
+	t.MediaSSRC = binary.BigEndian.Uint32(rawPacket[headerLength+ssrcLength:])
+	t.BaseSequenceNumber = binary.BigEndian.Uint16(rawPacket[headerLength+baseSequenceNumberOffset:])
+	t.PacketStatusCount = binary.BigEndian.Uint16(rawPacket[headerLength+packetStatusCountOffset:])
+	t.ReferenceTime = get24BitsFromBytes(rawPacket[headerLength+referenceTimeOffset : headerLength+referenceTimeOffset+3])
+	t.FbPktCount = rawPacket[headerLength+fbPktCountOffset]
+
+	packetStatusPos := uint16(headerLength + packetChunkOffset)
+	var processedPacketNum uint16
+	for processedPacketNum < t.PacketStatusCount {
+		if packetStatusPos+packetStatusChunkLength >= totalLength {
+			return errPacketTooShort
+		}
+		typ := getNBitsFromByte(rawPacket[packetStatusPos : packetStatusPos+1][0], 0, 1)
+		var iPacketStatus PacketStatusChunk
+		switch typ {
+		case TypeTCCRunLengthChunk:
+			packetStatus := &RunLengthChunk{Type: typ}
+			iPacketStatus = packetStatus
+			err := packetStatus.Unmarshal(rawPacket[packetStatusPos : packetStatusPos+2])
+			if err != nil {
+				return err
+			}
+
+			packetNumberToProcess := min(t.PacketStatusCount-processedPacketNum, packetStatus.RunLength)
+			if packetStatus.PacketStatusSymbol == TypeTCCPacketReceivedSmallDelta ||
+				packetStatus.PacketStatusSymbol == TypeTCCPacketReceivedLargeDelta {
+				for j := uint16(0); j < packetNumberToProcess; j++ {
+					t.RecvDeltas = append(t.RecvDeltas, &RecvDelta{Type: packetStatus.PacketStatusSymbol})
+				}
+			}
+			processedPacketNum += packetNumberToProcess
+		case TypeTCCStatusVectorChunk:
+			packetStatus := &StatusVectorChunk{Type: typ}
+			iPacketStatus = packetStatus
+			err := packetStatus.Unmarshal(rawPacket[packetStatusPos : packetStatusPos+2])
+			if err != nil {
+				return err
+			}
+			if packetStatus.SymbolSize == TypeTCCSymbolSizeOneBit {
+				for j := 0; j < len(packetStatus.SymbolList); j++ {
+					if packetStatus.SymbolList[j] == TypeTCCPacketReceivedSmallDelta {
+						t.RecvDeltas = append(t.RecvDeltas, &RecvDelta{Type: TypeTCCPacketReceivedSmallDelta})
+					}
+				}
+			}
+			if packetStatus.SymbolSize == TypeTCCSymbolSizeTwoBit {
+				for j := 0; j < len(packetStatus.SymbolList); j++ {
+					if packetStatus.SymbolList[j] == TypeTCCPacketReceivedSmallDelta || packetStatus.SymbolList[j] == TypeTCCPacketReceivedLargeDelta {
+						t.RecvDeltas = append(t.RecvDeltas, &RecvDelta{Type: packetStatus.SymbolList[j]})
+					}
+				}
+			}
+			processedPacketNum += uint16(len(packetStatus.SymbolList))
+		}
+		packetStatusPos += packetStatusChunkLength
+		t.PacketChunks = append(t.PacketChunks, iPacketStatus)
+	}
+
+	recvDeltasPos := packetStatusPos
+	for _, delta := range t.RecvDeltas {
+		if recvDeltasPos >= totalLength {
+			return errPacketTooShort
+		}
+		if delta.Type == TypeTCCPacketReceivedSmallDelta {
+			err := delta.Unmarshal(rawPacket[recvDeltasPos : recvDeltasPos+1])
+			if err != nil {
+				return err
+			}
+			recvDeltasPos++
+		}
+		if delta.Type == TypeTCCPacketReceivedLargeDelta {
+			err := delta.Unmarshal(rawPacket[recvDeltasPos : recvDeltasPos+2])
+			if err != nil {
+				return err
+			}
+			recvDeltasPos += 2
+		}
+	}
+
+	return nil
+}
+
+// DestinationSSRC returns an array of SSRC values that this packet refers to.
+func (t TransportLayerCC) DestinationSSRC() []uint32 {
+	return []uint32{t.MediaSSRC}
+}
+
+func min(x, y uint16) uint16 {
+	if x < y {
+		return x
+	}
+	return y
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/transport_layer_nack.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/transport_layer_nack.go
new file mode 100644
index 000000000..f7ab80308
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/transport_layer_nack.go
@@ -0,0 +1,174 @@
+package rtcp
+
+import (
+	"encoding/binary"
+	"fmt"
+	"math"
+)
+
+// PacketBitmap shouldn't be used like a normal integral,
+// so it's type is masked here. Access it with PacketList().
+type PacketBitmap uint16
+
+// NackPair is a wire-representation of a collection of
+// Lost RTP packets
+type NackPair struct {
+	// ID of lost packets
+	PacketID uint16
+
+	// Bitmask of following lost packets
+	LostPackets PacketBitmap
+}
+
+// The TransportLayerNack packet informs the encoder about the loss of a transport packet
+// IETF RFC 4585, Section 6.2.1
+// https://tools.ietf.org/html/rfc4585#section-6.2.1
+type TransportLayerNack struct {
+	// SSRC of sender
+	SenderSSRC uint32
+
+	// SSRC of the media source
+	MediaSSRC uint32
+
+	Nacks []NackPair
+}
+
+var _ Packet = (*TransportLayerNack)(nil) // assert is a Packet
+
+// NackPairsFromSequenceNumbers generates a slice of NackPair from a list of SequenceNumbers
+// This handles generating the proper values for PacketID/LostPackets
+func NackPairsFromSequenceNumbers(sequenceNumbers []uint16) (pairs []NackPair) {
+	if len(sequenceNumbers) == 0 {
+		return []NackPair{}
+	}
+
+	nackPair := &NackPair{PacketID: sequenceNumbers[0]}
+	for i := 1; i < len(sequenceNumbers); i++ {
+		m := sequenceNumbers[i]
+
+		if m-nackPair.PacketID > 16 {
+			pairs = append(pairs, *nackPair)
+			nackPair = &NackPair{PacketID: m}
+			continue
+		}
+
+		nackPair.LostPackets |= 1 << (m - nackPair.PacketID - 1)
+	}
+	pairs = append(pairs, *nackPair)
+	return
+}
+
+// Range calls f sequentially for each sequence number covered by n.
+// If f returns false, Range stops the iteration.
+func (n *NackPair) Range(f func(seqno uint16) bool) {
+	more := f(n.PacketID)
+	if !more {
+		return
+	}
+
+	b := n.LostPackets
+	for i := uint16(0); b != 0; i++ {
+		if (b & (1 << i)) != 0 {
+			b &^= (1 << i)
+			more = f(n.PacketID + i + 1)
+			if !more {
+				return
+			}
+		}
+	}
+}
+
+// PacketList returns a list of Nack'd packets that's referenced by a NackPair
+func (n *NackPair) PacketList() []uint16 {
+	out := make([]uint16, 0, 17)
+	n.Range(func(seqno uint16) bool {
+		out = append(out, seqno)
+		return true
+	})
+	return out
+}
+
+const (
+	tlnLength  = 2
+	nackOffset = 8
+)
+
+// Marshal encodes the TransportLayerNack in binary
+func (p TransportLayerNack) Marshal() ([]byte, error) {
+	if len(p.Nacks)+tlnLength > math.MaxUint8 {
+		return nil, errTooManyReports
+	}
+
+	rawPacket := make([]byte, nackOffset+(len(p.Nacks)*4))
+	binary.BigEndian.PutUint32(rawPacket, p.SenderSSRC)
+	binary.BigEndian.PutUint32(rawPacket[4:], p.MediaSSRC)
+	for i := 0; i < len(p.Nacks); i++ {
+		binary.BigEndian.PutUint16(rawPacket[nackOffset+(4*i):], p.Nacks[i].PacketID)
+		binary.BigEndian.PutUint16(rawPacket[nackOffset+(4*i)+2:], uint16(p.Nacks[i].LostPackets))
+	}
+	h := p.Header()
+	hData, err := h.Marshal()
+	if err != nil {
+		return nil, err
+	}
+
+	return append(hData, rawPacket...), nil
+}
+
+// Unmarshal decodes the TransportLayerNack from binary
+func (p *TransportLayerNack) Unmarshal(rawPacket []byte) error {
+	if len(rawPacket) < (headerLength + ssrcLength) {
+		return errPacketTooShort
+	}
+
+	var h Header
+	if err := h.Unmarshal(rawPacket); err != nil {
+		return err
+	}
+
+	if len(rawPacket) < (headerLength + int(4*h.Length)) {
+		return errPacketTooShort
+	}
+
+	if h.Type != TypeTransportSpecificFeedback || h.Count != FormatTLN {
+		return errWrongType
+	}
+
+	p.SenderSSRC = binary.BigEndian.Uint32(rawPacket[headerLength:])
+	p.MediaSSRC = binary.BigEndian.Uint32(rawPacket[headerLength+ssrcLength:])
+	for i := headerLength + nackOffset; i < (headerLength + int(h.Length*4)); i += 4 {
+		p.Nacks = append(p.Nacks, NackPair{
+			binary.BigEndian.Uint16(rawPacket[i:]),
+			PacketBitmap(binary.BigEndian.Uint16(rawPacket[i+2:])),
+		})
+	}
+	return nil
+}
+
+func (p *TransportLayerNack) len() int {
+	return headerLength + nackOffset + (len(p.Nacks) * 4)
+}
+
+// Header returns the Header associated with this packet.
+func (p *TransportLayerNack) Header() Header {
+	return Header{
+		Count:  FormatTLN,
+		Type:   TypeTransportSpecificFeedback,
+		Length: uint16((p.len() / 4) - 1),
+	}
+}
+
+func (p TransportLayerNack) String() string {
+	out := fmt.Sprintf("TransportLayerNack from %x\n", p.SenderSSRC)
+	out += fmt.Sprintf("\tMedia Ssrc %x\n", p.MediaSSRC)
+	out += "\tID\tLostPackets\n"
+	for _, i := range p.Nacks {
+		out += fmt.Sprintf("\t%d\t%b\n", i.PacketID, i.LostPackets)
+	}
+	return out
+}
+
+// DestinationSSRC returns an array of SSRC values that this packet refers to.
+func (p *TransportLayerNack) DestinationSSRC() []uint32 {
+	return []uint32{p.MediaSSRC}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/util.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/util.go
new file mode 100644
index 000000000..5702d35f8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtcp/util.go
@@ -0,0 +1,38 @@
+package rtcp
+
+// getPadding Returns the padding required to make the length a multiple of 4
+func getPadding(len int) int {
+	if len%4 == 0 {
+		return 0
+	}
+	return 4 - (len % 4)
+}
+
+// setNBitsOfUint16 will truncate the value to size, left-shift to startIndex position and set
+func setNBitsOfUint16(src, size, startIndex, val uint16) (uint16, error) {
+	if startIndex+size > 16 {
+		return 0, errInvalidSizeOrStartIndex
+	}
+
+	// truncate val to size bits
+	val &= (1 << size) - 1
+
+	return src | (val << (16 - size - startIndex)), nil
+}
+
+// appendBit32 will left-shift and append n bits of val
+func appendNBitsToUint32(src, n, val uint32) uint32 {
+	return (src << n) | (val & (0xFFFFFFFF >> (32 - n)))
+}
+
+// getNBit get n bits from 1 byte, begin with a position
+func getNBitsFromByte(b byte, begin, n uint16) uint16 {
+	endShift := 8 - (begin + n)
+	mask := (0xFF >> begin) & uint8(0xFF<<endShift)
+	return uint16(b&mask) >> endShift
+}
+
+// get24BitFromBytes get 24bits from `[3]byte` slice
+func get24BitsFromBytes(b []byte) uint32 {
+	return uint32(b[0])<<16 + uint32(b[1])<<8 + uint32(b[2])
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/.gitignore b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/.gitignore
new file mode 100644
index 000000000..83db74ba5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/.gitignore
@@ -0,0 +1,24 @@
+### JetBrains IDE ###
+#####################
+.idea/
+
+### Emacs Temporary Files ###
+#############################
+*~
+
+### Folders ###
+###############
+bin/
+vendor/
+node_modules/
+
+### Files ###
+#############
+*.ivf
+*.ogg
+tags
+cover.out
+*.sw[poe]
+*.wasm
+examples/sfu-ws/cert.pem
+examples/sfu-ws/key.pem
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/.golangci.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/.golangci.yml
new file mode 100644
index 000000000..d6162c970
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/.golangci.yml
@@ -0,0 +1,89 @@
+linters-settings:
+  govet:
+    check-shadowing: true
+  misspell:
+    locale: US
+  exhaustive:
+    default-signifies-exhaustive: true
+  gomodguard:
+    blocked:
+      modules:
+        - github.com/pkg/errors:
+            recommendations:
+            - errors
+
+linters:
+  enable:
+    - asciicheck       # Simple linter to check that your code does not contain non-ASCII identifiers
+    - bodyclose        # checks whether HTTP response body is closed successfully
+    - deadcode         # Finds unused code
+    - depguard         # Go linter that checks if package imports are in a list of acceptable packages
+    - dogsled          # Checks assignments with too many blank identifiers (e.g. x, _, _, _, := f())
+    - dupl             # Tool for code clone detection
+    - errcheck         # Errcheck is a program for checking for unchecked errors in go programs. These unchecked errors can be critical bugs in some cases
+    - exhaustive       # check exhaustiveness of enum switch statements
+    - exportloopref    # checks for pointers to enclosing loop variables
+    - gci              # Gci control golang package import order and make it always deterministic.
+    - gochecknoglobals # Checks that no globals are present in Go code
+    - gochecknoinits   # Checks that no init functions are present in Go code
+    - gocognit         # Computes and checks the cognitive complexity of functions
+    - goconst          # Finds repeated strings that could be replaced by a constant
+    - gocritic         # The most opinionated Go source code linter
+    - godox            # Tool for detection of FIXME, TODO and other comment keywords
+    - goerr113         # Golang linter to check the errors handling expressions
+    - gofmt            # Gofmt checks whether code was gofmt-ed. By default this tool runs with -s option to check for code simplification
+    - gofumpt          # Gofumpt checks whether code was gofumpt-ed.
+    - goheader         # Checks is file header matches to pattern
+    - goimports        # Goimports does everything that gofmt does. Additionally it checks unused imports
+    - golint           # Golint differs from gofmt. Gofmt reformats Go source code, whereas golint prints out style mistakes
+    - gomodguard       # Allow and block list linter for direct Go module dependencies. This is different from depguard where there are different block types for example version constraints and module recommendations.
+    - goprintffuncname # Checks that printf-like functions are named with `f` at the end
+    - gosec            # Inspects source code for security problems
+    - gosimple         # Linter for Go source code that specializes in simplifying a code
+    - govet            # Vet examines Go source code and reports suspicious constructs, such as Printf calls whose arguments do not align with the format string
+    - ineffassign      # Detects when assignments to existing variables are not used
+    - misspell         # Finds commonly misspelled English words in comments
+    - nakedret         # Finds naked returns in functions greater than a specified function length
+    - noctx            # noctx finds sending http request without context.Context
+    - scopelint        # Scopelint checks for unpinned variables in go programs
+    - staticcheck      # Staticcheck is a go vet on steroids, applying a ton of static analysis checks
+    - structcheck      # Finds unused struct fields
+    - stylecheck       # Stylecheck is a replacement for golint
+    - typecheck        # Like the front-end of a Go compiler, parses and type-checks Go code
+    - unconvert        # Remove unnecessary type conversions
+    - unparam          # Reports unused function parameters
+    - unused           # Checks Go code for unused constants, variables, functions and types
+    - varcheck         # Finds unused global variables and constants
+    - whitespace       # Tool for detection of leading and trailing whitespace
+  disable:
+    - funlen           # Tool for detection of long functions
+    - gocyclo          # Computes and checks the cyclomatic complexity of functions
+    - godot            # Check if comments end in a period
+    - gomnd            # An analyzer to detect magic numbers.
+    - lll              # Reports long lines
+    - maligned         # Tool to detect Go structs that would take less memory if their fields were sorted
+    - nestif           # Reports deeply nested if statements
+    - nlreturn         # nlreturn checks for a new line before return and branch statements to increase code clarity
+    - nolintlint       # Reports ill-formed or insufficient nolint directives
+    - prealloc         # Finds slice declarations that could potentially be preallocated
+    - rowserrcheck     # checks whether Err of rows is checked successfully
+    - sqlclosecheck    # Checks that sql.Rows and sql.Stmt are closed.
+    - testpackage      # linter that makes you use a separate _test package
+    - wsl              # Whitespace Linter - Forces you to use empty lines!
+
+issues:
+  exclude-use-default: false
+  exclude-rules:
+    # Allow complex tests, better to be self contained
+    - path: _test\.go
+      linters:
+        - gocognit
+
+    # Allow complex main function in examples
+    - path: examples
+      text: "of func `main` is high"
+      linters:
+        - gocognit
+
+run:
+  skip-dirs-use-default: false
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/LICENSE
new file mode 100644
index 000000000..ab602974d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/README.md
new file mode 100644
index 000000000..b17709e58
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/README.md
@@ -0,0 +1,53 @@
+<h1 align="center">
+  <br>
+  Pion RTP
+  <br>
+</h1>
+<h4 align="center">A Go implementation of RTP</h4>
+<p align="center">
+  <a href="https://pion.ly"><img src="https://img.shields.io/badge/pion-rtp-gray.svg?longCache=true&colorB=brightgreen" alt="Pion RTP"></a>
+  <a href="https://sourcegraph.com/github.com/pion/rtp?badge"><img src="https://sourcegraph.com/github.com/pion/rtp/-/badge.svg" alt="Sourcegraph Widget"></a>
+  <a href="https://pion.ly/slack"><img src="https://img.shields.io/badge/join-us%20on%20slack-gray.svg?longCache=true&logo=slack&colorB=brightgreen" alt="Slack Widget"></a>
+  <br>
+  <a href="https://travis-ci.org/pion/rtp"><img src="https://travis-ci.org/pion/rtp.svg?branch=master" alt="Build Status"></a>
+  <a href="https://pkg.go.dev/github.com/pion/rtp"><img src="https://godoc.org/github.com/pion/rtp?status.svg" alt="GoDoc"></a>
+  <a href="https://codecov.io/gh/pion/rtp"><img src="https://codecov.io/gh/pion/rtp/branch/master/graph/badge.svg" alt="Coverage Status"></a>
+  <a href="https://goreportcard.com/report/github.com/pion/rtp"><img src="https://goreportcard.com/badge/github.com/pion/rtp" alt="Go Report Card"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+</p>
+<br>
+
+### Roadmap
+The library is used as a part of our WebRTC implementation. Please refer to that [roadmap](https://github.com/pion/webrtc/issues/9) to track our major milestones.
+
+### Community
+Pion has an active community on the [Golang Slack](https://invite.slack.golangbridge.org/). Sign up and join the **#pion** channel for discussions and support. You can also use [Pion mailing list](https://groups.google.com/forum/#!forum/pion).
+
+We are always looking to support **your projects**. Please reach out if you have something to build!
+
+If you need commercial support or don't want to use public methods you can contact us at [team@pion.ly](mailto:team@pion.ly)
+
+### Contributing
+Check out the **[contributing wiki](https://github.com/pion/webrtc/wiki/Contributing)** to join the group of amazing people making this project possible:
+
+* [John Bradley](https://github.com/kc5nra) - *Original Author*
+* [Sean DuBois](https://github.com/Sean-Der) - *Original Author*
+* [Woodrow Douglass](https://github.com/wdouglass) *RTCP, RTP improvements, G.722 support, Bugfixes*
+* [Michael MacDonald](https://github.com/mjmac)
+* [Luke Curley](https://github.com/kixelated) *Performance*
+* [Antoine Baché](https://github.com/Antonito) *Fixed crashes*
+* [Hugo Arregui](https://github.com/hugoArregui)
+* [Raphael Derosso Pereira](https://github.com/raphaelpereira)
+* [Atsushi Watanabe](https://github.com/at-wat)
+* [adwpc](https://github.com/adwpc) *add transport-cc extension*
+* [Bao Nguyen](https://github.com/sysbot) *add VP9 noop, bug fixes.
+* [Tarrence van As](https://github.com/tarrencev) *add audio level extension*
+* [Simone Gotti](https://github.com/sgotti)
+* [Guilherme Souza](https://github.com/gqgs)
+* [Rob Lofthouse](https://github.com/roblofthouse)
+* [Kazuyuki Honda](https://github.com/hakobera)
+* [Haiyang Wang](https://github.com/ocean2811)
+* [lxb](https://github.com/lxb531)
+
+### License
+MIT License - see [LICENSE](LICENSE) for full text
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/abssendtimeextension.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/abssendtimeextension.go
new file mode 100644
index 000000000..fc9731d0b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/abssendtimeextension.go
@@ -0,0 +1,78 @@
+package rtp
+
+import (
+	"time"
+)
+
+const (
+	absSendTimeExtensionSize = 3
+)
+
+// AbsSendTimeExtension is a extension payload format in
+// http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time
+type AbsSendTimeExtension struct {
+	Timestamp uint64
+}
+
+// Marshal serializes the members to buffer.
+func (t *AbsSendTimeExtension) Marshal() ([]byte, error) {
+	return []byte{
+		byte(t.Timestamp & 0xFF0000 >> 16),
+		byte(t.Timestamp & 0xFF00 >> 8),
+		byte(t.Timestamp & 0xFF),
+	}, nil
+}
+
+// Unmarshal parses the passed byte slice and stores the result in the members.
+func (t *AbsSendTimeExtension) Unmarshal(rawData []byte) error {
+	if len(rawData) < absSendTimeExtensionSize {
+		return errTooSmall
+	}
+	t.Timestamp = uint64(rawData[0])<<16 | uint64(rawData[1])<<8 | uint64(rawData[2])
+	return nil
+}
+
+// Estimate absolute send time according to the receive time.
+// Note that if the transmission delay is larger than 64 seconds, estimated time will be wrong.
+func (t *AbsSendTimeExtension) Estimate(receive time.Time) time.Time {
+	receiveNTP := toNtpTime(receive)
+	ntp := receiveNTP&0xFFFFFFC000000000 | (t.Timestamp&0xFFFFFF)<<14
+	if receiveNTP < ntp {
+		// Receive time must be always later than send time
+		ntp -= 0x1000000 << 14
+	}
+
+	return toTime(ntp)
+}
+
+// NewAbsSendTimeExtension makes new AbsSendTimeExtension from time.Time.
+func NewAbsSendTimeExtension(sendTime time.Time) *AbsSendTimeExtension {
+	return &AbsSendTimeExtension{
+		Timestamp: toNtpTime(sendTime) >> 14,
+	}
+}
+
+func toNtpTime(t time.Time) uint64 {
+	var s uint64
+	var f uint64
+	u := uint64(t.UnixNano())
+	s = u / 1e9
+	s += 0x83AA7E80 // offset in seconds between unix epoch and ntp epoch
+	f = u % 1e9
+	f <<= 32
+	f /= 1e9
+	s <<= 32
+
+	return s | f
+}
+
+func toTime(t uint64) time.Time {
+	s := t >> 32
+	f := t & 0xFFFFFFFF
+	f *= 1e9
+	f >>= 32
+	s -= 0x83AA7E80
+	u := s*1e9 + f
+
+	return time.Unix(0, int64(u))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/audiolevelextension.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/audiolevelextension.go
new file mode 100644
index 000000000..f8701e153
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/audiolevelextension.go
@@ -0,0 +1,60 @@
+package rtp
+
+import (
+	"errors"
+)
+
+const (
+	// audioLevelExtensionSize One byte header size
+	audioLevelExtensionSize = 1
+)
+
+var errAudioLevelOverflow = errors.New("audio level overflow")
+
+// AudioLevelExtension is a extension payload format described in
+// https://tools.ietf.org/html/rfc6464
+//
+// Implementation based on:
+// https://chromium.googlesource.com/external/webrtc/+/e2a017725570ead5946a4ca8235af27470ca0df9/webrtc/modules/rtp_rtcp/source/rtp_header_extensions.cc#49
+//
+// One byte format:
+// 0                   1
+// 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |  ID   | len=0 |V| level       |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+//
+// Two byte format:
+// 0                   1                   2                   3
+// 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |      ID       |     len=1     |V|    level    |    0 (pad)    |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+type AudioLevelExtension struct {
+	Level uint8
+	Voice bool
+}
+
+// Marshal serializes the members to buffer
+func (a *AudioLevelExtension) Marshal() ([]byte, error) {
+	if a.Level > 127 {
+		return nil, errAudioLevelOverflow
+	}
+	voice := uint8(0x00)
+	if a.Voice {
+		voice = 0x80
+	}
+	buf := make([]byte, audioLevelExtensionSize)
+	buf[0] = voice | a.Level
+	return buf, nil
+}
+
+// Unmarshal parses the passed byte slice and stores the result in the members
+func (a *AudioLevelExtension) Unmarshal(rawData []byte) error {
+	if len(rawData) < audioLevelExtensionSize {
+		return errTooSmall
+	}
+	a.Level = rawData[0] & 0x7F
+	a.Voice = rawData[0]&0x80 != 0
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecov.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecov.yml
new file mode 100644
index 000000000..085200a48
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecov.yml
@@ -0,0 +1,20 @@
+#
+# DO NOT EDIT THIS FILE
+#
+# It is automatically copied from https://github.com/pion/.goassets repository.
+#
+
+coverage:
+  status:
+    project:
+      default:
+        # Allow decreasing 2% of total coverage to avoid noise.
+        threshold: 2%
+    patch:
+      default:
+        target: 70%
+        only_pulls: true
+
+ignore:
+  - "examples/*"
+  - "examples/**/*"
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/codecs.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/codecs.go
new file mode 100644
index 000000000..0e078974e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/codecs.go
@@ -0,0 +1,2 @@
+// Package codecs implements codec specific RTP payloader/depayloaders
+package codecs
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/common.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/common.go
new file mode 100644
index 000000000..39336d2b7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/common.go
@@ -0,0 +1,8 @@
+package codecs
+
+func min(a, b int) int {
+	if a < b {
+		return a
+	}
+	return b
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/error.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/error.go
new file mode 100644
index 000000000..38ee9076b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/error.go
@@ -0,0 +1,11 @@
+package codecs
+
+import "errors"
+
+var (
+	errShortPacket          = errors.New("packet is not large enough")
+	errNilPacket            = errors.New("invalid nil packet")
+	errTooManyPDiff         = errors.New("too many PDiff")
+	errTooManySpatialLayers = errors.New("too many spatial layers")
+	errUnhandledNALUType    = errors.New("NALU Type is unhandled")
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/g711_packet.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/g711_packet.go
new file mode 100644
index 000000000..a74876f31
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/g711_packet.go
@@ -0,0 +1,22 @@
+package codecs
+
+// G711Payloader payloads G711 packets
+type G711Payloader struct{}
+
+// Payload fragments an G711 packet across one or more byte arrays
+func (p *G711Payloader) Payload(mtu int, payload []byte) [][]byte {
+	var out [][]byte
+	if payload == nil || mtu <= 0 {
+		return out
+	}
+
+	for len(payload) > mtu {
+		o := make([]byte, mtu)
+		copy(o, payload[:mtu])
+		payload = payload[mtu:]
+		out = append(out, o)
+	}
+	o := make([]byte, len(payload))
+	copy(o, payload)
+	return append(out, o)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/g722_packet.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/g722_packet.go
new file mode 100644
index 000000000..70c98838e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/g722_packet.go
@@ -0,0 +1,22 @@
+package codecs
+
+// G722Payloader payloads G722 packets
+type G722Payloader struct{}
+
+// Payload fragments an G722 packet across one or more byte arrays
+func (p *G722Payloader) Payload(mtu int, payload []byte) [][]byte {
+	var out [][]byte
+	if payload == nil || mtu <= 0 {
+		return out
+	}
+
+	for len(payload) > mtu {
+		o := make([]byte, mtu)
+		copy(o, payload[:mtu])
+		payload = payload[mtu:]
+		out = append(out, o)
+	}
+	o := make([]byte, len(payload))
+	copy(o, payload)
+	return append(out, o)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/h264_packet.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/h264_packet.go
new file mode 100644
index 000000000..3ee592690
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/h264_packet.go
@@ -0,0 +1,205 @@
+package codecs
+
+import (
+	"encoding/binary"
+	"fmt"
+)
+
+// H264Payloader payloads H264 packets
+type H264Payloader struct{}
+
+const (
+	stapaNALUType = 24
+	fuaNALUType   = 28
+
+	fuaHeaderSize       = 2
+	stapaHeaderSize     = 1
+	stapaNALULengthSize = 2
+
+	naluTypeBitmask   = 0x1F
+	naluRefIdcBitmask = 0x60
+	fuaStartBitmask   = 0x80
+)
+
+func annexbNALUStartCode() []byte { return []byte{0x00, 0x00, 0x00, 0x01} }
+
+func emitNalus(nals []byte, emit func([]byte)) {
+	nextInd := func(nalu []byte, start int) (indStart int, indLen int) {
+		zeroCount := 0
+
+		for i, b := range nalu[start:] {
+			if b == 0 {
+				zeroCount++
+				continue
+			} else if b == 1 {
+				if zeroCount >= 2 {
+					return start + i - zeroCount, zeroCount + 1
+				}
+			}
+			zeroCount = 0
+		}
+		return -1, -1
+	}
+
+	nextIndStart, nextIndLen := nextInd(nals, 0)
+	if nextIndStart == -1 {
+		emit(nals)
+	} else {
+		for nextIndStart != -1 {
+			prevStart := nextIndStart + nextIndLen
+			nextIndStart, nextIndLen = nextInd(nals, prevStart)
+			if nextIndStart != -1 {
+				emit(nals[prevStart:nextIndStart])
+			} else {
+				// Emit until end of stream, no end indicator found
+				emit(nals[prevStart:])
+			}
+		}
+	}
+}
+
+// Payload fragments a H264 packet across one or more byte arrays
+func (p *H264Payloader) Payload(mtu int, payload []byte) [][]byte {
+	var payloads [][]byte
+	if len(payload) == 0 {
+		return payloads
+	}
+
+	emitNalus(payload, func(nalu []byte) {
+		if len(nalu) == 0 {
+			return
+		}
+
+		naluType := nalu[0] & naluTypeBitmask
+		naluRefIdc := nalu[0] & naluRefIdcBitmask
+
+		if naluType == 9 || naluType == 12 {
+			return
+		}
+
+		// Single NALU
+		if len(nalu) <= mtu {
+			out := make([]byte, len(nalu))
+			copy(out, nalu)
+			payloads = append(payloads, out)
+			return
+		}
+
+		// FU-A
+		maxFragmentSize := mtu - fuaHeaderSize
+
+		// The FU payload consists of fragments of the payload of the fragmented
+		// NAL unit so that if the fragmentation unit payloads of consecutive
+		// FUs are sequentially concatenated, the payload of the fragmented NAL
+		// unit can be reconstructed.  The NAL unit type octet of the fragmented
+		// NAL unit is not included as such in the fragmentation unit payload,
+		// 	but rather the information of the NAL unit type octet of the
+		// fragmented NAL unit is conveyed in the F and NRI fields of the FU
+		// indicator octet of the fragmentation unit and in the type field of
+		// the FU header.  An FU payload MAY have any number of octets and MAY
+		// be empty.
+
+		naluData := nalu
+		// According to the RFC, the first octet is skipped due to redundant information
+		naluDataIndex := 1
+		naluDataLength := len(nalu) - naluDataIndex
+		naluDataRemaining := naluDataLength
+
+		if min(maxFragmentSize, naluDataRemaining) <= 0 {
+			return
+		}
+
+		for naluDataRemaining > 0 {
+			currentFragmentSize := min(maxFragmentSize, naluDataRemaining)
+			out := make([]byte, fuaHeaderSize+currentFragmentSize)
+
+			// +---------------+
+			// |0|1|2|3|4|5|6|7|
+			// +-+-+-+-+-+-+-+-+
+			// |F|NRI|  Type   |
+			// +---------------+
+			out[0] = fuaNALUType
+			out[0] |= naluRefIdc
+
+			// +---------------+
+			// |0|1|2|3|4|5|6|7|
+			// +-+-+-+-+-+-+-+-+
+			// |S|E|R|  Type   |
+			// +---------------+
+
+			out[1] = naluType
+			if naluDataRemaining == naluDataLength {
+				// Set start bit
+				out[1] |= 1 << 7
+			} else if naluDataRemaining-currentFragmentSize == 0 {
+				// Set end bit
+				out[1] |= 1 << 6
+			}
+
+			copy(out[fuaHeaderSize:], naluData[naluDataIndex:naluDataIndex+currentFragmentSize])
+			payloads = append(payloads, out)
+
+			naluDataRemaining -= currentFragmentSize
+			naluDataIndex += currentFragmentSize
+		}
+	})
+
+	return payloads
+}
+
+// H264Packet represents the H264 header that is stored in the payload of an RTP Packet
+type H264Packet struct {
+}
+
+// Unmarshal parses the passed byte slice and stores the result in the H264Packet this method is called upon
+func (p *H264Packet) Unmarshal(payload []byte) ([]byte, error) {
+	if payload == nil {
+		return nil, errNilPacket
+	} else if len(payload) <= 2 {
+		return nil, fmt.Errorf("%w: %d <= 2", errShortPacket, len(payload))
+	}
+
+	// NALU Types
+	// https://tools.ietf.org/html/rfc6184#section-5.4
+	naluType := payload[0] & naluTypeBitmask
+	switch {
+	case naluType > 0 && naluType < 24:
+		return append(annexbNALUStartCode(), payload...), nil
+
+	case naluType == stapaNALUType:
+		currOffset := int(stapaHeaderSize)
+		result := []byte{}
+		for currOffset < len(payload) {
+			naluSize := int(binary.BigEndian.Uint16(payload[currOffset:]))
+			currOffset += stapaNALULengthSize
+
+			if len(payload) < currOffset+naluSize {
+				return nil, fmt.Errorf("%w STAP-A declared size(%d) is larger than buffer(%d)", errShortPacket, naluSize, len(payload)-currOffset)
+			}
+
+			result = append(result, annexbNALUStartCode()...)
+			result = append(result, payload[currOffset:currOffset+naluSize]...)
+			currOffset += naluSize
+		}
+		return result, nil
+
+	case naluType == fuaNALUType:
+		if len(payload) < fuaHeaderSize {
+			return nil, errShortPacket
+		}
+
+		if payload[1]&fuaStartBitmask != 0 {
+			naluRefIdc := payload[0] & naluRefIdcBitmask
+			fragmentedNaluType := payload[1] & naluTypeBitmask
+
+			// Take a copy of payload since we are mutating it.
+			payloadCopy := append([]byte{}, payload...)
+			payloadCopy[fuaHeaderSize-1] = naluRefIdc | fragmentedNaluType
+			return append(annexbNALUStartCode(), payloadCopy[fuaHeaderSize-1:]...), nil
+		}
+
+		return payload[fuaHeaderSize:], nil
+	}
+
+	return nil, fmt.Errorf("%w: %d", errUnhandledNALUType, naluType)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/opus_packet.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/opus_packet.go
new file mode 100644
index 000000000..504741f87
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/opus_packet.go
@@ -0,0 +1,44 @@
+package codecs
+
+// OpusPayloader payloads Opus packets
+type OpusPayloader struct{}
+
+// Payload fragments an Opus packet across one or more byte arrays
+func (p *OpusPayloader) Payload(mtu int, payload []byte) [][]byte {
+	if payload == nil {
+		return [][]byte{}
+	}
+
+	out := make([]byte, len(payload))
+	copy(out, payload)
+	return [][]byte{out}
+}
+
+// OpusPacket represents the Opus header that is stored in the payload of an RTP Packet
+type OpusPacket struct {
+	Payload []byte
+}
+
+// Unmarshal parses the passed byte slice and stores the result in the OpusPacket this method is called upon
+func (p *OpusPacket) Unmarshal(packet []byte) ([]byte, error) {
+	if packet == nil {
+		return nil, errNilPacket
+	} else if len(packet) == 0 {
+		return nil, errShortPacket
+	}
+
+	p.Payload = packet
+	return packet, nil
+}
+
+// OpusPartitionHeadChecker checks Opus partition head
+type OpusPartitionHeadChecker struct{}
+
+// IsPartitionHead checks whether if this is a head of the Opus partition
+func (*OpusPartitionHeadChecker) IsPartitionHead(packet []byte) bool {
+	p := &OpusPacket{}
+	if _, err := p.Unmarshal(packet); err != nil {
+		return false
+	}
+	return true
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/vp8_packet.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/vp8_packet.go
new file mode 100644
index 000000000..7ade7da9e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/vp8_packet.go
@@ -0,0 +1,143 @@
+package codecs
+
+// VP8Payloader payloads VP8 packets
+type VP8Payloader struct{}
+
+const (
+	vp8HeaderSize = 1
+)
+
+// Payload fragments a VP8 packet across one or more byte arrays
+func (p *VP8Payloader) Payload(mtu int, payload []byte) [][]byte {
+	/*
+	 * https://tools.ietf.org/html/rfc7741#section-4.2
+	 *
+	 *       0 1 2 3 4 5 6 7
+	 *      +-+-+-+-+-+-+-+-+
+	 *      |X|R|N|S|R| PID | (REQUIRED)
+	 *      +-+-+-+-+-+-+-+-+
+	 * X:   |I|L|T|K| RSV   | (OPTIONAL)
+	 *      +-+-+-+-+-+-+-+-+
+	 * I:   |M| PictureID   | (OPTIONAL)
+	 *      +-+-+-+-+-+-+-+-+
+	 * L:   |   TL0PICIDX   | (OPTIONAL)
+	 *      +-+-+-+-+-+-+-+-+
+	 * T/K: |TID|Y| KEYIDX  | (OPTIONAL)
+	 *      +-+-+-+-+-+-+-+-+
+	 *  S: Start of VP8 partition.  SHOULD be set to 1 when the first payload
+	 *     octet of the RTP packet is the beginning of a new VP8 partition,
+	 *     and MUST NOT be 1 otherwise.  The S bit MUST be set to 1 for the
+	 *     first packet of each encoded frame.
+	 */
+
+	maxFragmentSize := mtu - vp8HeaderSize
+
+	payloadData := payload
+	payloadDataRemaining := len(payload)
+
+	payloadDataIndex := 0
+	var payloads [][]byte
+
+	// Make sure the fragment/payload size is correct
+	if min(maxFragmentSize, payloadDataRemaining) <= 0 {
+		return payloads
+	}
+	for payloadDataRemaining > 0 {
+		currentFragmentSize := min(maxFragmentSize, payloadDataRemaining)
+		out := make([]byte, vp8HeaderSize+currentFragmentSize)
+		if payloadDataRemaining == len(payload) {
+			out[0] = 0x10
+		}
+
+		copy(out[vp8HeaderSize:], payloadData[payloadDataIndex:payloadDataIndex+currentFragmentSize])
+		payloads = append(payloads, out)
+
+		payloadDataRemaining -= currentFragmentSize
+		payloadDataIndex += currentFragmentSize
+	}
+
+	return payloads
+}
+
+// VP8Packet represents the VP8 header that is stored in the payload of an RTP Packet
+type VP8Packet struct {
+	// Required Header
+	X   uint8 /* extended controlbits present */
+	N   uint8 /* (non-reference frame)  when set to 1 this frame can be discarded */
+	S   uint8 /* start of VP8 partition */
+	PID uint8 /* partition index */
+
+	// Optional Header
+	I         uint8  /* 1 if PictureID is present */
+	L         uint8  /* 1 if TL0PICIDX is present */
+	T         uint8  /* 1 if TID is present */
+	K         uint8  /* 1 if KEYIDX is present */
+	PictureID uint16 /* 8 or 16 bits, picture ID */
+	TL0PICIDX uint8  /* 8 bits temporal level zero index */
+
+	Payload []byte
+}
+
+// Unmarshal parses the passed byte slice and stores the result in the VP8Packet this method is called upon
+func (p *VP8Packet) Unmarshal(payload []byte) ([]byte, error) {
+	if payload == nil {
+		return nil, errNilPacket
+	}
+
+	payloadLen := len(payload)
+
+	if payloadLen < 4 {
+		return nil, errShortPacket
+	}
+
+	payloadIndex := 0
+
+	p.X = (payload[payloadIndex] & 0x80) >> 7
+	p.N = (payload[payloadIndex] & 0x20) >> 5
+	p.S = (payload[payloadIndex] & 0x10) >> 4
+	p.PID = payload[payloadIndex] & 0x07
+
+	payloadIndex++
+
+	if p.X == 1 {
+		p.I = (payload[payloadIndex] & 0x80) >> 7
+		p.L = (payload[payloadIndex] & 0x40) >> 6
+		p.T = (payload[payloadIndex] & 0x20) >> 5
+		p.K = (payload[payloadIndex] & 0x10) >> 4
+		payloadIndex++
+	}
+
+	if p.I == 1 { // PID present?
+		if payload[payloadIndex]&0x80 > 0 { // M == 1, PID is 16bit
+			payloadIndex += 2
+		} else {
+			payloadIndex++
+		}
+	}
+
+	if p.L == 1 {
+		payloadIndex++
+	}
+
+	if p.T == 1 || p.K == 1 {
+		payloadIndex++
+	}
+
+	if payloadIndex >= payloadLen {
+		return nil, errShortPacket
+	}
+	p.Payload = payload[payloadIndex:]
+	return p.Payload, nil
+}
+
+// VP8PartitionHeadChecker checks VP8 partition head
+type VP8PartitionHeadChecker struct{}
+
+// IsPartitionHead checks whether if this is a head of the VP8 partition
+func (*VP8PartitionHeadChecker) IsPartitionHead(packet []byte) bool {
+	p := &VP8Packet{}
+	if _, err := p.Unmarshal(packet); err != nil {
+		return false
+	}
+	return p.S == 1
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/vp9_packet.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/vp9_packet.go
new file mode 100644
index 000000000..5cb619be0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/codecs/vp9_packet.go
@@ -0,0 +1,385 @@
+package codecs
+
+import (
+	"github.com/pion/randutil"
+)
+
+// Use global random generator to properly seed by crypto grade random.
+var globalMathRandomGenerator = randutil.NewMathRandomGenerator() // nolint:gochecknoglobals
+
+// VP9Payloader payloads VP9 packets
+type VP9Payloader struct {
+	pictureID   uint16
+	initialized bool
+
+	// InitialPictureIDFn is a function that returns random initial picture ID.
+	InitialPictureIDFn func() uint16
+}
+
+const (
+	vp9HeaderSize    = 3 // Flexible mode 15 bit picture ID
+	maxSpatialLayers = 5
+	maxVP9RefPics    = 3
+)
+
+// Payload fragments an VP9 packet across one or more byte arrays
+func (p *VP9Payloader) Payload(mtu int, payload []byte) [][]byte {
+	/*
+	 * https://www.ietf.org/id/draft-ietf-payload-vp9-10.txt
+	 *
+	 * Flexible mode (F=1)
+	 *        0 1 2 3 4 5 6 7
+	 *       +-+-+-+-+-+-+-+-+
+	 *       |I|P|L|F|B|E|V|-| (REQUIRED)
+	 *       +-+-+-+-+-+-+-+-+
+	 *  I:   |M| PICTURE ID  | (REQUIRED)
+	 *       +-+-+-+-+-+-+-+-+
+	 *  M:   | EXTENDED PID  | (RECOMMENDED)
+	 *       +-+-+-+-+-+-+-+-+
+	 *  L:   | TID |U| SID |D| (CONDITIONALLY RECOMMENDED)
+	 *       +-+-+-+-+-+-+-+-+                             -\
+	 *  P,F: | P_DIFF      |N| (CONDITIONALLY REQUIRED)    - up to 3 times
+	 *       +-+-+-+-+-+-+-+-+                             -/
+	 *  V:   | SS            |
+	 *       | ..            |
+	 *       +-+-+-+-+-+-+-+-+
+	 *
+	 * Non-flexible mode (F=0)
+	 *        0 1 2 3 4 5 6 7
+	 *       +-+-+-+-+-+-+-+-+
+	 *       |I|P|L|F|B|E|V|-| (REQUIRED)
+	 *       +-+-+-+-+-+-+-+-+
+	 *  I:   |M| PICTURE ID  | (RECOMMENDED)
+	 *       +-+-+-+-+-+-+-+-+
+	 *  M:   | EXTENDED PID  | (RECOMMENDED)
+	 *       +-+-+-+-+-+-+-+-+
+	 *  L:   | TID |U| SID |D| (CONDITIONALLY RECOMMENDED)
+	 *       +-+-+-+-+-+-+-+-+
+	 *       |   TL0PICIDX   | (CONDITIONALLY REQUIRED)
+	 *       +-+-+-+-+-+-+-+-+
+	 *  V:   | SS            |
+	 *       | ..            |
+	 *       +-+-+-+-+-+-+-+-+
+	 */
+
+	if !p.initialized {
+		if p.InitialPictureIDFn == nil {
+			p.InitialPictureIDFn = func() uint16 {
+				return uint16(globalMathRandomGenerator.Intn(0x7FFF))
+			}
+		}
+		p.pictureID = p.InitialPictureIDFn() & 0x7FFF
+		p.initialized = true
+	}
+	if payload == nil {
+		return [][]byte{}
+	}
+
+	maxFragmentSize := mtu - vp9HeaderSize
+	payloadDataRemaining := len(payload)
+	payloadDataIndex := 0
+
+	if min(maxFragmentSize, payloadDataRemaining) <= 0 {
+		return [][]byte{}
+	}
+
+	var payloads [][]byte
+	for payloadDataRemaining > 0 {
+		currentFragmentSize := min(maxFragmentSize, payloadDataRemaining)
+		out := make([]byte, vp9HeaderSize+currentFragmentSize)
+
+		out[0] = 0x90 // F=1 I=1
+		if payloadDataIndex == 0 {
+			out[0] |= 0x08 // B=1
+		}
+		if payloadDataRemaining == currentFragmentSize {
+			out[0] |= 0x04 // E=1
+		}
+		out[1] = byte(p.pictureID>>8) | 0x80
+		out[2] = byte(p.pictureID)
+		copy(out[vp9HeaderSize:], payload[payloadDataIndex:payloadDataIndex+currentFragmentSize])
+		payloads = append(payloads, out)
+
+		payloadDataRemaining -= currentFragmentSize
+		payloadDataIndex += currentFragmentSize
+	}
+	p.pictureID++
+	if p.pictureID >= 0x8000 {
+		p.pictureID = 0
+	}
+
+	return payloads
+}
+
+// VP9Packet represents the VP9 header that is stored in the payload of an RTP Packet
+type VP9Packet struct {
+	// Required header
+	I bool // PictureID is present
+	P bool // Inter-picture predicted frame
+	L bool // Layer indices is present
+	F bool // Flexible mode
+	B bool // Start of a frame
+	E bool // End of a frame
+	V bool // Scalability structure (SS) data present
+
+	// Recommended headers
+	PictureID uint16 // 7 or 16 bits, picture ID
+
+	// Conditionally recommended headers
+	TID uint8 // Temporal layer ID
+	U   bool  // Switching up point
+	SID uint8 // Spatial layer ID
+	D   bool  // Inter-layer dependency used
+
+	// Conditionally required headers
+	PDiff     []uint8 // Reference index (F=1)
+	TL0PICIDX uint8   // Temporal layer zero index (F=0)
+
+	// Scalability structure headers
+	NS      uint8 // N_S + 1 indicates the number of spatial layers present in the VP9 stream
+	Y       bool  // Each spatial layer's frame resolution present
+	G       bool  // PG description present flag.
+	NG      uint8 // N_G indicates the number of pictures in a Picture Group (PG)
+	Width   []uint16
+	Height  []uint16
+	PGTID   []uint8   // Temporal layer ID of pictures in a Picture Group
+	PGU     []bool    // Switching up point of pictures in a Picture Group
+	PGPDiff [][]uint8 // Reference indecies of pictures in a Picture Group
+
+	Payload []byte
+}
+
+// Unmarshal parses the passed byte slice and stores the result in the VP9Packet this method is called upon
+func (p *VP9Packet) Unmarshal(packet []byte) ([]byte, error) {
+	if packet == nil {
+		return nil, errNilPacket
+	}
+	if len(packet) < 1 {
+		return nil, errShortPacket
+	}
+
+	p.I = packet[0]&0x80 != 0
+	p.P = packet[0]&0x40 != 0
+	p.L = packet[0]&0x20 != 0
+	p.F = packet[0]&0x10 != 0
+	p.B = packet[0]&0x08 != 0
+	p.E = packet[0]&0x04 != 0
+	p.V = packet[0]&0x02 != 0
+
+	pos := 1
+	var err error
+
+	if p.I {
+		pos, err = p.parsePictureID(packet, pos)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	if p.L {
+		pos, err = p.parseLayerInfo(packet, pos)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	if p.F && p.P {
+		pos, err = p.parseRefIndices(packet, pos)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	if p.V {
+		pos, err = p.parseSSData(packet, pos)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	p.Payload = packet[pos:]
+	return p.Payload, nil
+}
+
+// Picture ID:
+//
+//      +-+-+-+-+-+-+-+-+
+// I:   |M| PICTURE ID  |   M:0 => picture id is 7 bits.
+//      +-+-+-+-+-+-+-+-+   M:1 => picture id is 15 bits.
+// M:   | EXTENDED PID  |
+//      +-+-+-+-+-+-+-+-+
+//
+func (p *VP9Packet) parsePictureID(packet []byte, pos int) (int, error) {
+	if len(packet) <= pos {
+		return pos, errShortPacket
+	}
+
+	p.PictureID = uint16(packet[pos] & 0x7F)
+	if packet[pos]&0x80 != 0 {
+		pos++
+		if len(packet) <= pos {
+			return pos, errShortPacket
+		}
+		p.PictureID = p.PictureID<<8 | uint16(packet[pos])
+	}
+	pos++
+	return pos, nil
+}
+
+func (p *VP9Packet) parseLayerInfo(packet []byte, pos int) (int, error) {
+	pos, err := p.parseLayerInfoCommon(packet, pos)
+	if err != nil {
+		return pos, err
+	}
+
+	if p.F {
+		return pos, nil
+	}
+
+	return p.parseLayerInfoNonFlexibleMode(packet, pos)
+}
+
+// Layer indices (flexible mode):
+//
+//      +-+-+-+-+-+-+-+-+
+// L:   |  T  |U|  S  |D|
+//      +-+-+-+-+-+-+-+-+
+//
+func (p *VP9Packet) parseLayerInfoCommon(packet []byte, pos int) (int, error) {
+	if len(packet) <= pos {
+		return pos, errShortPacket
+	}
+
+	p.TID = packet[pos] >> 5
+	p.U = packet[pos]&0x10 != 0
+	p.SID = (packet[pos] >> 1) & 0x7
+	p.D = packet[pos]&0x01 != 0
+
+	if p.SID >= maxSpatialLayers {
+		return pos, errTooManySpatialLayers
+	}
+
+	pos++
+	return pos, nil
+}
+
+// Layer indices (non-flexible mode):
+//
+//      +-+-+-+-+-+-+-+-+
+// L:   |  T  |U|  S  |D|
+//      +-+-+-+-+-+-+-+-+
+//      |   TL0PICIDX   |
+//      +-+-+-+-+-+-+-+-+
+//
+func (p *VP9Packet) parseLayerInfoNonFlexibleMode(packet []byte, pos int) (int, error) {
+	if len(packet) <= pos {
+		return pos, errShortPacket
+	}
+
+	p.TL0PICIDX = packet[pos]
+	pos++
+	return pos, nil
+}
+
+// Reference indices:
+//
+//      +-+-+-+-+-+-+-+-+                P=1,F=1: At least one reference index
+// P,F: | P_DIFF      |N|  up to 3 times          has to be specified.
+//      +-+-+-+-+-+-+-+-+                    N=1: An additional P_DIFF follows
+//                                                current P_DIFF.
+//
+func (p *VP9Packet) parseRefIndices(packet []byte, pos int) (int, error) {
+	for {
+		if len(packet) <= pos {
+			return pos, errShortPacket
+		}
+		p.PDiff = append(p.PDiff, packet[pos]>>1)
+		if packet[pos]&0x01 == 0 {
+			break
+		}
+		if len(p.PDiff) >= maxVP9RefPics {
+			return pos, errTooManyPDiff
+		}
+		pos++
+	}
+	pos++
+
+	return pos, nil
+}
+
+// Scalability structure (SS):
+//
+//      +-+-+-+-+-+-+-+-+
+// V:   | N_S |Y|G|-|-|-|
+//      +-+-+-+-+-+-+-+-+              -|
+// Y:   |     WIDTH     | (OPTIONAL)    .
+//      +               +               .
+//      |               | (OPTIONAL)    .
+//      +-+-+-+-+-+-+-+-+               . N_S + 1 times
+//      |     HEIGHT    | (OPTIONAL)    .
+//      +               +               .
+//      |               | (OPTIONAL)    .
+//      +-+-+-+-+-+-+-+-+              -|
+// G:   |      N_G      | (OPTIONAL)
+//      +-+-+-+-+-+-+-+-+                           -|
+// N_G: |  T  |U| R |-|-| (OPTIONAL)                 .
+//      +-+-+-+-+-+-+-+-+              -|            . N_G times
+//      |    P_DIFF     | (OPTIONAL)    . R times    .
+//      +-+-+-+-+-+-+-+-+              -|           -|
+//
+func (p *VP9Packet) parseSSData(packet []byte, pos int) (int, error) {
+	if len(packet) <= pos {
+		return pos, errShortPacket
+	}
+
+	p.NS = packet[pos] >> 5
+	p.Y = packet[pos]&0x10 != 0
+	p.G = (packet[pos]>>1)&0x7 != 0
+	pos++
+
+	NS := p.NS + 1
+	p.NG = 0
+
+	if p.Y {
+		p.Width = make([]uint16, NS)
+		p.Height = make([]uint16, NS)
+		for i := 0; i < int(NS); i++ {
+			p.Width[i] = uint16(packet[pos])<<8 | uint16(packet[pos+1])
+			pos += 2
+			p.Height[i] = uint16(packet[pos])<<8 | uint16(packet[pos+1])
+			pos += 2
+		}
+	}
+
+	if p.G {
+		p.NG = packet[pos]
+		pos++
+	}
+
+	for i := 0; i < int(p.NG); i++ {
+		p.PGTID = append(p.PGTID, packet[pos]>>5)
+		p.PGU = append(p.PGU, packet[pos]&0x10 != 0)
+		R := (packet[pos] >> 2) & 0x3
+		pos++
+
+		p.PGPDiff = append(p.PGPDiff, []uint8{})
+		for j := 0; j < int(R); j++ {
+			p.PGPDiff[i] = append(p.PGPDiff[i], packet[pos])
+			pos++
+		}
+	}
+
+	return pos, nil
+}
+
+// VP9PartitionHeadChecker checks VP9 partition head
+type VP9PartitionHeadChecker struct{}
+
+// IsPartitionHead checks whether if this is a head of the VP9 partition
+func (*VP9PartitionHeadChecker) IsPartitionHead(packet []byte) bool {
+	p := &VP9Packet{}
+	if _, err := p.Unmarshal(packet); err != nil {
+		return false
+	}
+	return p.B
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/depacketizer.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/depacketizer.go
new file mode 100644
index 000000000..b8c09dad9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/depacketizer.go
@@ -0,0 +1,6 @@
+package rtp
+
+// Depacketizer depacketizes a RTP payload, removing any RTP specific data from the payload
+type Depacketizer interface {
+	Unmarshal(packet []byte) ([]byte, error)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/error.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/error.go
new file mode 100644
index 000000000..5458c6fa5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/error.go
@@ -0,0 +1,21 @@
+package rtp
+
+import (
+	"errors"
+)
+
+var (
+	errHeaderSizeInsufficient             = errors.New("RTP header size insufficient")
+	errHeaderSizeInsufficientForExtension = errors.New("RTP header size insufficient for extension")
+	errTooSmall                           = errors.New("buffer too small")
+	errHeaderExtensionsNotEnabled         = errors.New("h.Extension not enabled")
+	errHeaderExtensionNotFound            = errors.New("extension not found")
+
+	errRFC8285OneByteHeaderIDRange = errors.New("header extension id must be between 1 and 14 for RFC 5285 one byte extensions")
+	errRFC8285OneByteHeaderSize    = errors.New("header extension payload must be 16bytes or less for RFC 5285 one byte extensions")
+
+	errRFC8285TwoByteHeaderIDRange = errors.New("header extension id must be between 1 and 255 for RFC 5285 two byte extensions")
+	errRFC8285TwoByteHeaderSize    = errors.New("header extension payload must be 255bytes or less for RFC 5285 two byte extensions")
+
+	errRFC3550HeaderIDRange = errors.New("header extension id must be 0 for non-RFC 5285 extensions")
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/go.mod
new file mode 100644
index 000000000..412ae63d7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/go.mod
@@ -0,0 +1,5 @@
+module github.com/pion/rtp
+
+go 1.13
+
+require github.com/pion/randutil v0.1.0
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/go.sum b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/go.sum
new file mode 100644
index 000000000..401b903b1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/go.sum
@@ -0,0 +1,2 @@
+github.com/pion/randutil v0.1.0 h1:CFG1UdESneORglEsnimhUjf33Rwjubwj6xfiOXBa3mA=
+github.com/pion/randutil v0.1.0/go.mod h1:XcJrSMMbbMRhASFVOlj/5hQial/Y8oH/HVo7TBZq+j8=
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/packet.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/packet.go
new file mode 100644
index 000000000..b237b0a78
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/packet.go
@@ -0,0 +1,490 @@
+package rtp
+
+import (
+	"encoding/binary"
+	"fmt"
+	"io"
+)
+
+// Extension RTP Header extension
+type Extension struct {
+	id      uint8
+	payload []byte
+}
+
+// Header represents an RTP packet header
+// NOTE: PayloadOffset is populated by Marshal/Unmarshal and should not be modified
+type Header struct {
+	Version          uint8
+	Padding          bool
+	Extension        bool
+	Marker           bool
+	PayloadOffset    int
+	PayloadType      uint8
+	SequenceNumber   uint16
+	Timestamp        uint32
+	SSRC             uint32
+	CSRC             []uint32
+	ExtensionProfile uint16
+	Extensions       []Extension
+}
+
+// Packet represents an RTP Packet
+// NOTE: Raw is populated by Marshal/Unmarshal and should not be modified
+type Packet struct {
+	Header
+	Raw     []byte
+	Payload []byte
+}
+
+const (
+	headerLength            = 4
+	versionShift            = 6
+	versionMask             = 0x3
+	paddingShift            = 5
+	paddingMask             = 0x1
+	extensionShift          = 4
+	extensionMask           = 0x1
+	extensionProfileOneByte = 0xBEDE
+	extensionProfileTwoByte = 0x1000
+	extensionIDReserved     = 0xF
+	ccMask                  = 0xF
+	markerShift             = 7
+	markerMask              = 0x1
+	ptMask                  = 0x7F
+	seqNumOffset            = 2
+	seqNumLength            = 2
+	timestampOffset         = 4
+	timestampLength         = 4
+	ssrcOffset              = 8
+	ssrcLength              = 4
+	csrcOffset              = 12
+	csrcLength              = 4
+)
+
+// String helps with debugging by printing packet information in a readable way
+func (p Packet) String() string {
+	out := "RTP PACKET:\n"
+
+	out += fmt.Sprintf("\tVersion: %v\n", p.Version)
+	out += fmt.Sprintf("\tMarker: %v\n", p.Marker)
+	out += fmt.Sprintf("\tPayload Type: %d\n", p.PayloadType)
+	out += fmt.Sprintf("\tSequence Number: %d\n", p.SequenceNumber)
+	out += fmt.Sprintf("\tTimestamp: %d\n", p.Timestamp)
+	out += fmt.Sprintf("\tSSRC: %d (%x)\n", p.SSRC, p.SSRC)
+	out += fmt.Sprintf("\tPayload Length: %d\n", len(p.Payload))
+
+	return out
+}
+
+// Unmarshal parses the passed byte slice and stores the result in the Header this method is called upon
+func (h *Header) Unmarshal(rawPacket []byte) error { //nolint:gocognit
+	if len(rawPacket) < headerLength {
+		return fmt.Errorf("%w: %d < %d", errHeaderSizeInsufficient, len(rawPacket), headerLength)
+	}
+
+	/*
+	 *  0                   1                   2                   3
+	 *  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * |V=2|P|X|  CC   |M|     PT      |       sequence number         |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * |                           timestamp                           |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * |           synchronization source (SSRC) identifier            |
+	 * +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * |            contributing source (CSRC) identifiers             |
+	 * |                             ....                              |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 */
+
+	h.Version = rawPacket[0] >> versionShift & versionMask
+	h.Padding = (rawPacket[0] >> paddingShift & paddingMask) > 0
+	h.Extension = (rawPacket[0] >> extensionShift & extensionMask) > 0
+	nCSRC := int(rawPacket[0] & ccMask)
+	if cap(h.CSRC) < nCSRC || h.CSRC == nil {
+		h.CSRC = make([]uint32, nCSRC)
+	} else {
+		h.CSRC = h.CSRC[:nCSRC]
+	}
+
+	currOffset := csrcOffset + (nCSRC * csrcLength)
+	if len(rawPacket) < currOffset {
+		return fmt.Errorf("size %d < %d: %w", len(rawPacket), currOffset, errHeaderSizeInsufficient)
+	}
+
+	h.Marker = (rawPacket[1] >> markerShift & markerMask) > 0
+	h.PayloadType = rawPacket[1] & ptMask
+
+	h.SequenceNumber = binary.BigEndian.Uint16(rawPacket[seqNumOffset : seqNumOffset+seqNumLength])
+	h.Timestamp = binary.BigEndian.Uint32(rawPacket[timestampOffset : timestampOffset+timestampLength])
+	h.SSRC = binary.BigEndian.Uint32(rawPacket[ssrcOffset : ssrcOffset+ssrcLength])
+
+	for i := range h.CSRC {
+		offset := csrcOffset + (i * csrcLength)
+		h.CSRC[i] = binary.BigEndian.Uint32(rawPacket[offset:])
+	}
+
+	if h.Extensions != nil {
+		h.Extensions = h.Extensions[:0]
+	}
+
+	if h.Extension {
+		if expected := currOffset + 4; len(rawPacket) < expected {
+			return fmt.Errorf("size %d < %d: %w",
+				len(rawPacket), expected,
+				errHeaderSizeInsufficientForExtension,
+			)
+		}
+
+		h.ExtensionProfile = binary.BigEndian.Uint16(rawPacket[currOffset:])
+		currOffset += 2
+		extensionLength := int(binary.BigEndian.Uint16(rawPacket[currOffset:])) * 4
+		currOffset += 2
+
+		if expected := currOffset + extensionLength; len(rawPacket) < expected {
+			return fmt.Errorf("size %d < %d: %w",
+				len(rawPacket), expected,
+				errHeaderSizeInsufficientForExtension,
+			)
+		}
+
+		switch h.ExtensionProfile {
+		// RFC 8285 RTP One Byte Header Extension
+		case extensionProfileOneByte:
+			end := currOffset + extensionLength
+			for currOffset < end {
+				if rawPacket[currOffset] == 0x00 { // padding
+					currOffset++
+					continue
+				}
+
+				extid := rawPacket[currOffset] >> 4
+				len := int(rawPacket[currOffset]&^0xF0 + 1)
+				currOffset++
+
+				if extid == extensionIDReserved {
+					break
+				}
+
+				extension := Extension{id: extid, payload: rawPacket[currOffset : currOffset+len]}
+				h.Extensions = append(h.Extensions, extension)
+				currOffset += len
+			}
+
+		// RFC 8285 RTP Two Byte Header Extension
+		case extensionProfileTwoByte:
+			end := currOffset + extensionLength
+			for currOffset < end {
+				if rawPacket[currOffset] == 0x00 { // padding
+					currOffset++
+					continue
+				}
+
+				extid := rawPacket[currOffset]
+				currOffset++
+
+				len := int(rawPacket[currOffset])
+				currOffset++
+
+				extension := Extension{id: extid, payload: rawPacket[currOffset : currOffset+len]}
+				h.Extensions = append(h.Extensions, extension)
+				currOffset += len
+			}
+
+		default: // RFC3550 Extension
+			if len(rawPacket) < currOffset+extensionLength {
+				return fmt.Errorf("%w: %d < %d", errHeaderSizeInsufficientForExtension, len(rawPacket), currOffset+extensionLength)
+			}
+
+			extension := Extension{id: 0, payload: rawPacket[currOffset : currOffset+extensionLength]}
+			h.Extensions = append(h.Extensions, extension)
+			currOffset += len(h.Extensions[0].payload)
+		}
+	}
+
+	h.PayloadOffset = currOffset
+
+	return nil
+}
+
+// Unmarshal parses the passed byte slice and stores the result in the Packet this method is called upon
+func (p *Packet) Unmarshal(rawPacket []byte) error {
+	if err := p.Header.Unmarshal(rawPacket); err != nil {
+		return err
+	}
+
+	p.Payload = rawPacket[p.PayloadOffset:]
+	p.Raw = rawPacket
+	return nil
+}
+
+// Marshal serializes the header into bytes.
+func (h *Header) Marshal() (buf []byte, err error) {
+	buf = make([]byte, h.MarshalSize())
+
+	n, err := h.MarshalTo(buf)
+	if err != nil {
+		return nil, err
+	}
+
+	return buf[:n], nil
+}
+
+// MarshalTo serializes the header and writes to the buffer.
+func (h *Header) MarshalTo(buf []byte) (n int, err error) {
+	/*
+	 *  0                   1                   2                   3
+	 *  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * |V=2|P|X|  CC   |M|     PT      |       sequence number         |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * |                           timestamp                           |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 * |           synchronization source (SSRC) identifier            |
+	 * +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
+	 * |            contributing source (CSRC) identifiers             |
+	 * |                             ....                              |
+	 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	 */
+
+	size := h.MarshalSize()
+	if size > len(buf) {
+		return 0, io.ErrShortBuffer
+	}
+
+	// The first byte contains the version, padding bit, extension bit, and csrc size
+	buf[0] = (h.Version << versionShift) | uint8(len(h.CSRC))
+	if h.Padding {
+		buf[0] |= 1 << paddingShift
+	}
+
+	if h.Extension {
+		buf[0] |= 1 << extensionShift
+	}
+
+	// The second byte contains the marker bit and payload type.
+	buf[1] = h.PayloadType
+	if h.Marker {
+		buf[1] |= 1 << markerShift
+	}
+
+	binary.BigEndian.PutUint16(buf[2:4], h.SequenceNumber)
+	binary.BigEndian.PutUint32(buf[4:8], h.Timestamp)
+	binary.BigEndian.PutUint32(buf[8:12], h.SSRC)
+
+	n = 12
+	for _, csrc := range h.CSRC {
+		binary.BigEndian.PutUint32(buf[n:n+4], csrc)
+		n += 4
+	}
+
+	if h.Extension {
+		extHeaderPos := n
+		binary.BigEndian.PutUint16(buf[n+0:n+2], h.ExtensionProfile)
+		n += 4
+		startExtensionsPos := n
+
+		switch h.ExtensionProfile {
+		// RFC 8285 RTP One Byte Header Extension
+		case extensionProfileOneByte:
+			for _, extension := range h.Extensions {
+				buf[n] = extension.id<<4 | (uint8(len(extension.payload)) - 1)
+				n++
+				n += copy(buf[n:], extension.payload)
+			}
+		// RFC 8285 RTP Two Byte Header Extension
+		case extensionProfileTwoByte:
+			for _, extension := range h.Extensions {
+				buf[n] = extension.id
+				n++
+				buf[n] = uint8(len(extension.payload))
+				n++
+				n += copy(buf[n:], extension.payload)
+			}
+		default: // RFC3550 Extension
+			extlen := len(h.Extensions[0].payload)
+			if extlen%4 != 0 {
+				// the payload must be in 32-bit words.
+				return 0, io.ErrShortBuffer
+			}
+			n += copy(buf[n:], h.Extensions[0].payload)
+		}
+
+		// calculate extensions size and round to 4 bytes boundaries
+		extSize := n - startExtensionsPos
+		roundedExtSize := ((extSize + 3) / 4) * 4
+
+		binary.BigEndian.PutUint16(buf[extHeaderPos+2:extHeaderPos+4], uint16(roundedExtSize/4))
+
+		// add padding to reach 4 bytes boundaries
+		for i := 0; i < roundedExtSize-extSize; i++ {
+			buf[n] = 0
+			n++
+		}
+	}
+
+	h.PayloadOffset = n
+
+	return n, nil
+}
+
+// MarshalSize returns the size of the header once marshaled.
+func (h *Header) MarshalSize() int {
+	// NOTE: Be careful to match the MarshalTo() method.
+	size := 12 + (len(h.CSRC) * csrcLength)
+
+	if h.Extension {
+		extSize := 4
+
+		switch h.ExtensionProfile {
+		// RFC 8285 RTP One Byte Header Extension
+		case extensionProfileOneByte:
+			for _, extension := range h.Extensions {
+				extSize += 1 + len(extension.payload)
+			}
+		// RFC 8285 RTP Two Byte Header Extension
+		case extensionProfileTwoByte:
+			for _, extension := range h.Extensions {
+				extSize += 2 + len(extension.payload)
+			}
+		default:
+			extSize += len(h.Extensions[0].payload)
+		}
+
+		// extensions size must have 4 bytes boundaries
+		size += ((extSize + 3) / 4) * 4
+	}
+
+	return size
+}
+
+// SetExtension sets an RTP header extension
+func (h *Header) SetExtension(id uint8, payload []byte) error { //nolint:gocognit
+	if h.Extension {
+		switch h.ExtensionProfile {
+		// RFC 8285 RTP One Byte Header Extension
+		case extensionProfileOneByte:
+			if id < 1 || id > 14 {
+				return fmt.Errorf("%w actual(%d)", errRFC8285OneByteHeaderIDRange, id)
+			}
+			if len(payload) > 16 {
+				return fmt.Errorf("%w actual(%d)", errRFC8285OneByteHeaderSize, len(payload))
+			}
+		// RFC 8285 RTP Two Byte Header Extension
+		case extensionProfileTwoByte:
+			if id < 1 || id > 255 {
+				return fmt.Errorf("%w actual(%d)", errRFC8285TwoByteHeaderIDRange, id)
+			}
+			if len(payload) > 255 {
+				return fmt.Errorf("%w actual(%d)", errRFC8285TwoByteHeaderSize, len(payload))
+			}
+		default: // RFC3550 Extension
+			if id != 0 {
+				return fmt.Errorf("%w actual(%d)", errRFC3550HeaderIDRange, id)
+			}
+		}
+
+		// Update existing if it exists else add new extension
+		for i, extension := range h.Extensions {
+			if extension.id == id {
+				h.Extensions[i].payload = payload
+				return nil
+			}
+		}
+		h.Extensions = append(h.Extensions, Extension{id: id, payload: payload})
+		return nil
+	}
+
+	// No existing header extensions
+	h.Extension = true
+
+	switch len := len(payload); {
+	case len <= 16:
+		h.ExtensionProfile = extensionProfileOneByte
+	case len > 16 && len < 256:
+		h.ExtensionProfile = extensionProfileTwoByte
+	}
+
+	h.Extensions = append(h.Extensions, Extension{id: id, payload: payload})
+	return nil
+}
+
+// GetExtensionIDs returns an extension id array
+func (h *Header) GetExtensionIDs() []uint8 {
+	if !h.Extension {
+		return nil
+	}
+
+	if len(h.Extensions) == 0 {
+		return nil
+	}
+
+	ids := make([]uint8, 0, len(h.Extensions))
+	for _, extension := range h.Extensions {
+		ids = append(ids, extension.id)
+	}
+	return ids
+}
+
+// GetExtension returns an RTP header extension
+func (h *Header) GetExtension(id uint8) []byte {
+	if !h.Extension {
+		return nil
+	}
+	for _, extension := range h.Extensions {
+		if extension.id == id {
+			return extension.payload
+		}
+	}
+	return nil
+}
+
+// DelExtension Removes an RTP Header extension
+func (h *Header) DelExtension(id uint8) error {
+	if !h.Extension {
+		return errHeaderExtensionsNotEnabled
+	}
+	for i, extension := range h.Extensions {
+		if extension.id == id {
+			h.Extensions = append(h.Extensions[:i], h.Extensions[i+1:]...)
+			return nil
+		}
+	}
+	return errHeaderExtensionNotFound
+}
+
+// Marshal serializes the packet into bytes.
+func (p *Packet) Marshal() (buf []byte, err error) {
+	buf = make([]byte, p.MarshalSize())
+
+	n, err := p.MarshalTo(buf)
+	if err != nil {
+		return nil, err
+	}
+
+	return buf[:n], nil
+}
+
+// MarshalTo serializes the packet and writes to the buffer.
+func (p *Packet) MarshalTo(buf []byte) (n int, err error) {
+	n, err = p.Header.MarshalTo(buf)
+	if err != nil {
+		return 0, err
+	}
+
+	// Make sure the buffer is large enough to hold the packet.
+	if n+len(p.Payload) > len(buf) {
+		return 0, io.ErrShortBuffer
+	}
+
+	m := copy(buf[n:], p.Payload)
+	p.Raw = buf[:n+m]
+
+	return n + m, nil
+}
+
+// MarshalSize returns the size of the packet once marshaled.
+func (p *Packet) MarshalSize() int {
+	return p.Header.MarshalSize() + len(p.Payload)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/packetizer.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/packetizer.go
new file mode 100644
index 000000000..5a8482f61
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/packetizer.go
@@ -0,0 +1,91 @@
+package rtp
+
+import (
+	"time"
+)
+
+// Payloader payloads a byte array for use as rtp.Packet payloads
+type Payloader interface {
+	Payload(mtu int, payload []byte) [][]byte
+}
+
+// Packetizer packetizes a payload
+type Packetizer interface {
+	Packetize(payload []byte, samples uint32) []*Packet
+	EnableAbsSendTime(value int)
+}
+
+type packetizer struct {
+	MTU              int
+	PayloadType      uint8
+	SSRC             uint32
+	Payloader        Payloader
+	Sequencer        Sequencer
+	Timestamp        uint32
+	ClockRate        uint32
+	extensionNumbers struct { // put extension numbers in here. If they're 0, the extension is disabled (0 is not a legal extension number)
+		AbsSendTime int // http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time
+	}
+	timegen func() time.Time
+}
+
+// NewPacketizer returns a new instance of a Packetizer for a specific payloader
+func NewPacketizer(mtu int, pt uint8, ssrc uint32, payloader Payloader, sequencer Sequencer, clockRate uint32) Packetizer {
+	return &packetizer{
+		MTU:         mtu,
+		PayloadType: pt,
+		SSRC:        ssrc,
+		Payloader:   payloader,
+		Sequencer:   sequencer,
+		Timestamp:   globalMathRandomGenerator.Uint32(),
+		ClockRate:   clockRate,
+		timegen:     time.Now,
+	}
+}
+
+func (p *packetizer) EnableAbsSendTime(value int) {
+	p.extensionNumbers.AbsSendTime = value
+}
+
+// Packetize packetizes the payload of an RTP packet and returns one or more RTP packets
+func (p *packetizer) Packetize(payload []byte, samples uint32) []*Packet {
+	// Guard against an empty payload
+	if len(payload) == 0 {
+		return nil
+	}
+
+	payloads := p.Payloader.Payload(p.MTU-12, payload)
+	packets := make([]*Packet, len(payloads))
+
+	for i, pp := range payloads {
+		packets[i] = &Packet{
+			Header: Header{
+				Version:        2,
+				Padding:        false,
+				Extension:      false,
+				Marker:         i == len(payloads)-1,
+				PayloadType:    p.PayloadType,
+				SequenceNumber: p.Sequencer.NextSequenceNumber(),
+				Timestamp:      p.Timestamp, // Figure out how to do timestamps
+				SSRC:           p.SSRC,
+			},
+			Payload: pp,
+		}
+	}
+	p.Timestamp += samples
+
+	if len(packets) != 0 && p.extensionNumbers.AbsSendTime != 0 {
+		sendTime := NewAbsSendTimeExtension(p.timegen())
+		// apply http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time
+		b, err := sendTime.Marshal()
+		if err != nil {
+			return nil // never happens
+		}
+		err = packets[len(packets)-1].SetExtension(uint8(p.extensionNumbers.AbsSendTime), b)
+		if err != nil {
+			return nil // never happens
+		}
+	}
+
+	return packets
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/partitionheadchecker.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/partitionheadchecker.go
new file mode 100644
index 000000000..6ec2a7631
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/partitionheadchecker.go
@@ -0,0 +1,6 @@
+package rtp
+
+// PartitionHeadChecker is the interface that checks whether the packet is keyframe or not
+type PartitionHeadChecker interface {
+	IsPartitionHead([]byte) bool
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/rand.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/rand.go
new file mode 100644
index 000000000..ee8552356
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/rand.go
@@ -0,0 +1,8 @@
+package rtp
+
+import (
+	"github.com/pion/randutil"
+)
+
+// Use global random generator to properly seed by crypto grade random.
+var globalMathRandomGenerator = randutil.NewMathRandomGenerator() // nolint:gochecknoglobals
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/renovate.json b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/renovate.json
new file mode 100644
index 000000000..4400fd9b2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/renovate.json
@@ -0,0 +1,15 @@
+{
+  "extends": [
+    "config:base"
+  ],
+  "postUpdateOptions": [
+    "gomodTidy"
+  ],
+  "commitBody": "Generated by renovateBot",
+  "packageRules": [
+    {
+      "packagePatterns": ["^golang.org/x/"],
+      "schedule": ["on the first day of the month"]
+    }
+  ]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/rtp.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/rtp.go
new file mode 100644
index 000000000..b66b2e4b8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/rtp.go
@@ -0,0 +1,2 @@
+// Package rtp provides RTP packetizer and depacketizer
+package rtp
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/sequencer.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/sequencer.go
new file mode 100644
index 000000000..2b4a5072e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/sequencer.go
@@ -0,0 +1,57 @@
+package rtp
+
+import (
+	"math"
+	"sync"
+)
+
+// Sequencer generates sequential sequence numbers for building RTP packets
+type Sequencer interface {
+	NextSequenceNumber() uint16
+	RollOverCount() uint64
+}
+
+// NewRandomSequencer returns a new sequencer starting from a random sequence
+// number
+func NewRandomSequencer() Sequencer {
+	return &sequencer{
+		sequenceNumber: uint16(globalMathRandomGenerator.Intn(math.MaxUint16)),
+	}
+}
+
+// NewFixedSequencer returns a new sequencer starting from a specific
+// sequence number
+func NewFixedSequencer(s uint16) Sequencer {
+	return &sequencer{
+		sequenceNumber: s - 1, // -1 because the first sequence number prepends 1
+	}
+}
+
+type sequencer struct {
+	sequenceNumber uint16
+	rollOverCount  uint64
+	mutex          sync.Mutex
+}
+
+// NextSequenceNumber increment and returns a new sequence number for
+// building RTP packets
+func (s *sequencer) NextSequenceNumber() uint16 {
+	s.mutex.Lock()
+	defer s.mutex.Unlock()
+
+	s.sequenceNumber++
+	if s.sequenceNumber == 0 {
+		s.rollOverCount++
+	}
+
+	return s.sequenceNumber
+}
+
+// RollOverCount returns the amount of times the 16bit sequence number
+// has wrapped
+func (s *sequencer) RollOverCount() uint64 {
+	s.mutex.Lock()
+	defer s.mutex.Unlock()
+
+	return s.rollOverCount
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/transportccextension.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/transportccextension.go
new file mode 100644
index 000000000..f9ffe4eb1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/rtp/transportccextension.go
@@ -0,0 +1,39 @@
+package rtp
+
+import (
+	"encoding/binary"
+)
+
+const (
+	// transport-wide sequence
+	transportCCExtensionSize = 2
+)
+
+// TransportCCExtension is a extension payload format in
+// https://tools.ietf.org/html/draft-holmer-rmcat-transport-wide-cc-extensions-01
+// 0                   1                   2                   3
+// 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |       0xBE    |    0xDE       |           length=1            |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |  ID   | L=1   |transport-wide sequence number | zero padding  |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+type TransportCCExtension struct {
+	TransportSequence uint16
+}
+
+// Marshal serializes the members to buffer
+func (t *TransportCCExtension) Marshal() ([]byte, error) {
+	buf := make([]byte, transportCCExtensionSize)
+	binary.BigEndian.PutUint16(buf[0:2], t.TransportSequence)
+	return buf, nil
+}
+
+// Unmarshal parses the passed byte slice and stores the result in the members
+func (t *TransportCCExtension) Unmarshal(rawData []byte) error {
+	if len(rawData) < transportCCExtensionSize {
+		return errTooSmall
+	}
+	t.TransportSequence = binary.BigEndian.Uint16(rawData[0:2])
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/.gitignore b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/.gitignore
new file mode 100644
index 000000000..d39fb86a3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/.gitignore
@@ -0,0 +1 @@
+*.sw[poe]
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/.golangci.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/.golangci.yml
new file mode 100644
index 000000000..421369778
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/.golangci.yml
@@ -0,0 +1,82 @@
+linters-settings:
+  govet:
+    check-shadowing: true
+  misspell:
+    locale: US
+  exhaustive:
+    default-signifies-exhaustive: true
+
+linters:
+  enable:
+    - asciicheck       # Simple linter to check that your code does not contain non-ASCII identifiers
+    - bodyclose        # checks whether HTTP response body is closed successfully
+    - deadcode         # Finds unused code
+    - depguard         # Go linter that checks if package imports are in a list of acceptable packages
+    - dogsled          # Checks assignments with too many blank identifiers (e.g. x, _, _, _, := f())
+    - dupl             # Tool for code clone detection
+    - errcheck         # Errcheck is a program for checking for unchecked errors in go programs. These unchecked errors can be critical bugs in some cases
+    - exhaustive       # check exhaustiveness of enum switch statements
+    - exportloopref    # checks for pointers to enclosing loop variables
+    - gci              # Gci control golang package import order and make it always deterministic.
+    - gochecknoglobals # Checks that no globals are present in Go code
+    - gochecknoinits   # Checks that no init functions are present in Go code
+    - gocognit         # Computes and checks the cognitive complexity of functions
+    - goconst          # Finds repeated strings that could be replaced by a constant
+    - gocritic         # The most opinionated Go source code linter
+    - godox            # Tool for detection of FIXME, TODO and other comment keywords
+    - goerr113         # Golang linter to check the errors handling expressions
+    - gofmt            # Gofmt checks whether code was gofmt-ed. By default this tool runs with -s option to check for code simplification
+    - gofumpt          # Gofumpt checks whether code was gofumpt-ed.
+    - goheader         # Checks is file header matches to pattern
+    - goimports        # Goimports does everything that gofmt does. Additionally it checks unused imports
+    - golint           # Golint differs from gofmt. Gofmt reformats Go source code, whereas golint prints out style mistakes
+    - gomodguard       # Allow and block list linter for direct Go module dependencies. This is different from depguard where there are different block types for example version constraints and module recommendations.
+    - goprintffuncname # Checks that printf-like functions are named with `f` at the end
+    - gosec            # Inspects source code for security problems
+    - gosimple         # Linter for Go source code that specializes in simplifying a code
+    - govet            # Vet examines Go source code and reports suspicious constructs, such as Printf calls whose arguments do not align with the format string
+    - ineffassign      # Detects when assignments to existing variables are not used
+    - misspell         # Finds commonly misspelled English words in comments
+    - nakedret         # Finds naked returns in functions greater than a specified function length
+    - noctx            # noctx finds sending http request without context.Context
+    - scopelint        # Scopelint checks for unpinned variables in go programs
+    - staticcheck      # Staticcheck is a go vet on steroids, applying a ton of static analysis checks
+    - structcheck      # Finds unused struct fields
+    - stylecheck       # Stylecheck is a replacement for golint
+    - typecheck        # Like the front-end of a Go compiler, parses and type-checks Go code
+    - unconvert        # Remove unnecessary type conversions
+    - unparam          # Reports unused function parameters
+    - unused           # Checks Go code for unused constants, variables, functions and types
+    - varcheck         # Finds unused global variables and constants
+    - whitespace       # Tool for detection of leading and trailing whitespace
+  disable:
+    - funlen           # Tool for detection of long functions
+    - gocyclo          # Computes and checks the cyclomatic complexity of functions
+    - godot            # Check if comments end in a period
+    - gomnd            # An analyzer to detect magic numbers.
+    - lll              # Reports long lines
+    - maligned         # Tool to detect Go structs that would take less memory if their fields were sorted
+    - nestif           # Reports deeply nested if statements
+    - nlreturn         # nlreturn checks for a new line before return and branch statements to increase code clarity
+    - nolintlint       # Reports ill-formed or insufficient nolint directives
+    - prealloc         # Finds slice declarations that could potentially be preallocated
+    - rowserrcheck     # checks whether Err of rows is checked successfully
+    - sqlclosecheck    # Checks that sql.Rows and sql.Stmt are closed.
+    - testpackage      # linter that makes you use a separate _test package
+    - wsl              # Whitespace Linter - Forces you to use empty lines!
+
+issues:
+  exclude-rules:
+    # Allow complex tests, better to be self contained
+    - path: _test\.go
+      linters:
+        - gocognit
+
+    # Allow complex main function in examples
+    - path: examples
+      text: "of func `main` is high"
+      linters:
+        - gocognit
+
+run:
+  skip-dirs-use-default: false
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/DESIGN.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/DESIGN.md
new file mode 100644
index 000000000..02ac16113
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/DESIGN.md
@@ -0,0 +1,20 @@
+<h1 align="center">
+  Design
+</h1>
+
+### Portable
+Pion SCTP is written in Go and extremely portable. Anywhere Golang runs, Pion SCTP should work as well! Instead of dealing with complicated
+cross-compiling of multiple libraries, you now can run anywhere with one `go build`
+
+### Simple API
+The API is based on an io.ReadWriteCloser.
+
+### Readable
+If code comes from an RFC we try to make sure everything is commented with a link to the spec.
+This makes learning and debugging easier, this library was written to also serve as a guide for others.
+
+### Tested
+Every commit is tested via travis-ci Go provides fantastic facilities for testing, and more will be added as time goes on.
+
+### Shared libraries
+Every pion product is built using shared libraries, allowing others to review and reuse our libraries.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/LICENSE
new file mode 100644
index 000000000..ab602974d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/README.md
new file mode 100644
index 000000000..18b569381
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/README.md
@@ -0,0 +1,54 @@
+<h1 align="center">
+  <br>
+  Pion SCTP
+  <br>
+</h1>
+<h4 align="center">A Go implementation of SCTP</h4>
+<p align="center">
+  <a href="https://pion.ly"><img src="https://img.shields.io/badge/pion-sctp-gray.svg?longCache=true&colorB=brightgreen" alt="Pion SCTP"></a>
+  <!--<a href="https://sourcegraph.com/github.com/pion/webrtc?badge"><img src="https://sourcegraph.com/github.com/pion/webrtc/-/badge.svg" alt="Sourcegraph Widget"></a>-->
+  <a href="https://pion.ly/slack"><img src="https://img.shields.io/badge/join-us%20on%20slack-gray.svg?longCache=true&logo=slack&colorB=brightgreen" alt="Slack Widget"></a>
+  <br>
+  <a href="https://travis-ci.org/pion/sctp"><img src="https://travis-ci.org/pion/sctp.svg?branch=master" alt="Build Status"></a>
+  <a href="https://pkg.go.dev/github.com/pion/sctp"><img src="https://godoc.org/github.com/pion/sctp?status.svg" alt="GoDoc"></a>
+  <a href="https://codecov.io/gh/pion/sctp"><img src="https://codecov.io/gh/pion/sctp/branch/master/graph/badge.svg" alt="Coverage Status"></a>
+  <a href="https://goreportcard.com/report/github.com/pion/sctp"><img src="https://goreportcard.com/badge/github.com/pion/sctp" alt="Go Report Card"></a>
+  <!--<a href="https://www.codacy.com/app/Sean-Der/webrtc"><img src="https://api.codacy.com/project/badge/Grade/18f4aec384894e6aac0b94effe51961d" alt="Codacy Badge"></a>-->
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+</p>
+<br>
+
+See [DESIGN.md](DESIGN.md) for an overview of features and future goals.
+
+### Roadmap
+The library is used as a part of our WebRTC implementation. Please refer to that [roadmap](https://github.com/pion/webrtc/issues/9) to track our major milestones.
+
+### Community
+Pion has an active community on the [Golang Slack](https://invite.slack.golangbridge.org/). Sign up and join the **#pion** channel for discussions and support. You can also use [Pion mailing list](https://groups.google.com/forum/#!forum/pion).
+
+We are always looking to support **your projects**. Please reach out if you have something to build!
+
+If you need commercial support or don't want to use public methods you can contact us at [team@pion.ly](mailto:team@pion.ly)
+
+### Contributing
+Check out the **[contributing wiki](https://github.com/pion/webrtc/wiki/Contributing)** to join the group of amazing people making this project possible:
+
+* [John Bradley](https://github.com/kc5nra) - *Original Author*
+* [Sean DuBois](https://github.com/Sean-Der) - *Original Author*
+* [Michiel De Backker](https://github.com/backkem) - *Public API, Initialization*
+* [Konstantin Itskov](https://github.com/trivigy) - *Fix documentation*
+* [chenkaiC4](https://github.com/chenkaiC4) - *Fix GolangCI Linter*
+* [Ronan J](https://github.com/ronanj) - *Fix PPID*
+* [Michael MacDonald](https://github.com/mjmac) - *Fix races*
+* [Yutaka Takeda](https://github.com/enobufs) - *PR-SCTP, Retransmissions, Congestion Control*
+* [Antoine Baché](https://github.com/Antonito) - *SCTP Profiling*
+* [Cecylia Bocovich](https://github.com/cohosh) - *Fix SCTP reads*
+* [Hugo Arregui](https://github.com/hugoArregui)
+* [Atsushi Watanabe](https://github.com/at-wat)
+* [Lukas Herman](https://github.com/lherman-cs)
+* [Luke Curley](https://github.com/kixelated) - *Performance*
+* [Aaron France](https://github.com/AeroNotix)
+* [ZHENK](https://github.com/scorpionknifes)
+
+### License
+MIT License - see [LICENSE](LICENSE) for full text
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/ack_timer.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/ack_timer.go
new file mode 100644
index 000000000..ba23d54d2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/ack_timer.go
@@ -0,0 +1,105 @@
+package sctp
+
+import (
+	"sync"
+	"time"
+)
+
+const (
+	ackInterval time.Duration = 200 * time.Millisecond
+)
+
+// ackTimerObserver is the inteface to an ack timer observer.
+type ackTimerObserver interface {
+	onAckTimeout()
+}
+
+// ackTimer provides the retnransmission timer conforms with RFC 4960 Sec 6.3.1
+type ackTimer struct {
+	observer ackTimerObserver
+	interval time.Duration
+	stopFunc stopAckTimerLoop
+	closed   bool
+	mutex    sync.RWMutex
+}
+
+type stopAckTimerLoop func()
+
+// newAckTimer creates a new acknowledgement timer used to enable delayed ack.
+func newAckTimer(observer ackTimerObserver) *ackTimer {
+	return &ackTimer{
+		observer: observer,
+		interval: ackInterval,
+	}
+}
+
+// start starts the timer.
+func (t *ackTimer) start() bool {
+	t.mutex.Lock()
+	defer t.mutex.Unlock()
+
+	// this timer is already closed
+	if t.closed {
+		return false
+	}
+
+	// this is a noop if the timer is already running
+	if t.stopFunc != nil {
+		return false
+	}
+
+	cancelCh := make(chan struct{})
+
+	go func() {
+		timer := time.NewTimer(t.interval)
+
+		select {
+		case <-timer.C:
+			t.stop()
+			t.observer.onAckTimeout()
+		case <-cancelCh:
+			timer.Stop()
+		}
+	}()
+
+	t.stopFunc = func() {
+		close(cancelCh)
+	}
+
+	return true
+}
+
+// stops the timer. this is similar to stop() but subsequent start() call
+// will fail (the timer is no longer usable)
+func (t *ackTimer) stop() {
+	t.mutex.Lock()
+	defer t.mutex.Unlock()
+
+	if t.stopFunc != nil {
+		t.stopFunc()
+		t.stopFunc = nil
+	}
+}
+
+// closes the timer. this is similar to stop() but subsequent start() call
+// will fail (the timer is no longer usable)
+func (t *ackTimer) close() {
+	t.mutex.Lock()
+	defer t.mutex.Unlock()
+
+	if t.stopFunc != nil {
+		t.stopFunc()
+		t.stopFunc = nil
+	}
+
+	t.closed = true
+}
+
+// isRunning tests if the timer is running.
+// Debug purpose only
+func (t *ackTimer) isRunning() bool {
+	t.mutex.RLock()
+	defer t.mutex.RUnlock()
+
+	return (t.stopFunc != nil)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/association.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/association.go
new file mode 100644
index 000000000..1393cb89e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/association.go
@@ -0,0 +1,2241 @@
+package sctp
+
+import (
+	"bytes"
+	"fmt"
+	"io"
+	"math"
+	"net"
+	"sync"
+	"sync/atomic"
+	"time"
+
+	"github.com/pion/logging"
+	"github.com/pion/randutil"
+	"github.com/pkg/errors"
+)
+
+// Use global random generator to properly seed by crypto grade random.
+var (
+	globalMathRandomGenerator = randutil.NewMathRandomGenerator() // nolint:gochecknoglobals
+	errChunk                  = errors.New("Abort chunk, with following errors")
+)
+
+const (
+	receiveMTU            uint32 = 8192 // MTU for inbound packet (from DTLS)
+	initialMTU            uint32 = 1228 // initial MTU for outgoing packets (to DTLS)
+	initialRecvBufSize    uint32 = 1024 * 1024
+	commonHeaderSize      uint32 = 12
+	dataChunkHeaderSize   uint32 = 16
+	defaultMaxMessageSize uint32 = 65536
+)
+
+// association state enums
+const (
+	closed uint32 = iota
+	cookieWait
+	cookieEchoed
+	established
+	shutdownAckSent
+	shutdownPending
+	shutdownReceived
+	shutdownSent
+)
+
+// retransmission timer IDs
+const (
+	timerT1Init int = iota
+	timerT1Cookie
+	timerT3RTX
+	timerReconfig
+)
+
+// ack mode (for testing)
+const (
+	ackModeNormal int = iota
+	ackModeNoDelay
+	ackModeAlwaysDelay
+)
+
+// ack transmission state
+const (
+	ackStateIdle      int = iota // ack timer is off
+	ackStateImmediate            // ack timer is on (ack is being delayed)
+	ackStateDelay                // will send ack immediately
+)
+
+// other constants
+const (
+	acceptChSize = 16
+)
+
+func getAssociationStateString(a uint32) string {
+	switch a {
+	case closed:
+		return "Closed"
+	case cookieWait:
+		return "CookieWait"
+	case cookieEchoed:
+		return "CookieEchoed"
+	case established:
+		return "Established"
+	case shutdownPending:
+		return "ShutdownPending"
+	case shutdownSent:
+		return "ShutdownSent"
+	case shutdownReceived:
+		return "ShutdownReceived"
+	case shutdownAckSent:
+		return "ShutdownAckSent"
+	default:
+		return fmt.Sprintf("Invalid association state %d", a)
+	}
+}
+
+// Association represents an SCTP association
+// 13.2.  Parameters Necessary per Association (i.e., the TCB)
+// Peer        : Tag value to be sent in every packet and is received
+// Verification: in the INIT or INIT ACK chunk.
+// Tag         :
+//
+// My          : Tag expected in every inbound packet and sent in the
+// Verification: INIT or INIT ACK chunk.
+//
+// Tag         :
+// State       : A state variable indicating what state the association
+//             : is in, i.e., COOKIE-WAIT, COOKIE-ECHOED, ESTABLISHED,
+//             : SHUTDOWN-PENDING, SHUTDOWN-SENT, SHUTDOWN-RECEIVED,
+//             : SHUTDOWN-ACK-SENT.
+//
+//               Note: No "CLOSED" state is illustrated since if a
+//               association is "CLOSED" its TCB SHOULD be removed.
+type Association struct {
+	bytesReceived uint64
+	bytesSent     uint64
+
+	lock sync.RWMutex
+
+	netConn net.Conn
+
+	peerVerificationTag    uint32
+	myVerificationTag      uint32
+	state                  uint32
+	myNextTSN              uint32 // nextTSN
+	peerLastTSN            uint32 // lastRcvdTSN
+	minTSN2MeasureRTT      uint32 // for RTT measurement
+	willSendForwardTSN     bool
+	willRetransmitFast     bool
+	willRetransmitReconfig bool
+
+	// Reconfig
+	myNextRSN        uint32
+	reconfigs        map[uint32]*chunkReconfig
+	reconfigRequests map[uint32]*paramOutgoingResetRequest
+
+	// Non-RFC internal data
+	sourcePort              uint16
+	destinationPort         uint16
+	myMaxNumInboundStreams  uint16
+	myMaxNumOutboundStreams uint16
+	myCookie                *paramStateCookie
+	payloadQueue            *payloadQueue
+	inflightQueue           *payloadQueue
+	pendingQueue            *pendingQueue
+	controlQueue            *controlQueue
+	mtu                     uint32
+	maxPayloadSize          uint32 // max DATA chunk payload size
+	cumulativeTSNAckPoint   uint32
+	advancedPeerTSNAckPoint uint32
+	useForwardTSN           bool
+
+	// Congestion control parameters
+	maxReceiveBufferSize uint32
+	maxMessageSize       uint32
+	cwnd                 uint32 // my congestion window size
+	rwnd                 uint32 // calculated peer's receiver windows size
+	ssthresh             uint32 // slow start threshold
+	partialBytesAcked    uint32
+	inFastRecovery       bool
+	fastRecoverExitPoint uint32
+
+	// RTX & Ack timer
+	rtoMgr    *rtoManager
+	t1Init    *rtxTimer
+	t1Cookie  *rtxTimer
+	t3RTX     *rtxTimer
+	tReconfig *rtxTimer
+	ackTimer  *ackTimer
+
+	// Chunks stored for retransmission
+	storedInit       *chunkInit
+	storedCookieEcho *chunkCookieEcho
+
+	streams              map[uint16]*Stream
+	acceptCh             chan *Stream
+	readLoopCloseCh      chan struct{}
+	awakeWriteLoopCh     chan struct{}
+	closeWriteLoopCh     chan struct{}
+	handshakeCompletedCh chan error
+
+	closeWriteLoopOnce sync.Once
+
+	// local error
+	silentError error
+
+	ackState int
+	ackMode  int // for testing
+
+	// stats
+	stats *associationStats
+
+	// per inbound packet context
+	delayedAckTriggered   bool
+	immediateAckTriggered bool
+
+	name string
+	log  logging.LeveledLogger
+}
+
+// Config collects the arguments to createAssociation construction into
+// a single structure
+type Config struct {
+	NetConn              net.Conn
+	MaxReceiveBufferSize uint32
+	MaxMessageSize       uint32
+	LoggerFactory        logging.LoggerFactory
+}
+
+// Server accepts a SCTP stream over a conn
+func Server(config Config) (*Association, error) {
+	a := createAssociation(config)
+	a.init(false)
+
+	select {
+	case err := <-a.handshakeCompletedCh:
+		if err != nil {
+			return nil, err
+		}
+		return a, nil
+	case <-a.readLoopCloseCh:
+		return nil, errors.Errorf("association closed before connecting")
+	}
+}
+
+// Client opens a SCTP stream over a conn
+func Client(config Config) (*Association, error) {
+	a := createAssociation(config)
+	a.init(true)
+
+	select {
+	case err := <-a.handshakeCompletedCh:
+		if err != nil {
+			return nil, err
+		}
+		return a, nil
+	case <-a.readLoopCloseCh:
+		return nil, errors.Errorf("association closed before connecting")
+	}
+}
+
+func createAssociation(config Config) *Association {
+	var maxReceiveBufferSize uint32
+	if config.MaxReceiveBufferSize == 0 {
+		maxReceiveBufferSize = initialRecvBufSize
+	} else {
+		maxReceiveBufferSize = config.MaxReceiveBufferSize
+	}
+
+	var maxMessageSize uint32
+	if config.MaxMessageSize == 0 {
+		maxMessageSize = defaultMaxMessageSize
+	} else {
+		maxMessageSize = config.MaxMessageSize
+	}
+
+	tsn := globalMathRandomGenerator.Uint32()
+	a := &Association{
+		netConn:                 config.NetConn,
+		maxReceiveBufferSize:    maxReceiveBufferSize,
+		maxMessageSize:          maxMessageSize,
+		myMaxNumOutboundStreams: math.MaxUint16,
+		myMaxNumInboundStreams:  math.MaxUint16,
+		payloadQueue:            newPayloadQueue(),
+		inflightQueue:           newPayloadQueue(),
+		pendingQueue:            newPendingQueue(),
+		controlQueue:            newControlQueue(),
+		mtu:                     initialMTU,
+		maxPayloadSize:          initialMTU - (commonHeaderSize + dataChunkHeaderSize),
+		myVerificationTag:       globalMathRandomGenerator.Uint32(),
+		myNextTSN:               tsn,
+		myNextRSN:               tsn,
+		minTSN2MeasureRTT:       tsn,
+		state:                   closed,
+		rtoMgr:                  newRTOManager(),
+		streams:                 map[uint16]*Stream{},
+		reconfigs:               map[uint32]*chunkReconfig{},
+		reconfigRequests:        map[uint32]*paramOutgoingResetRequest{},
+		acceptCh:                make(chan *Stream, acceptChSize),
+		readLoopCloseCh:         make(chan struct{}),
+		awakeWriteLoopCh:        make(chan struct{}, 1),
+		closeWriteLoopCh:        make(chan struct{}),
+		handshakeCompletedCh:    make(chan error),
+		cumulativeTSNAckPoint:   tsn - 1,
+		advancedPeerTSNAckPoint: tsn - 1,
+		silentError:             errors.Errorf("silently discard"),
+		stats:                   &associationStats{},
+		log:                     config.LoggerFactory.NewLogger("sctp"),
+	}
+
+	a.name = fmt.Sprintf("%p", a)
+
+	// RFC 4690 Sec 7.2.1
+	//  o  The initial cwnd before DATA transmission or after a sufficiently
+	//     long idle period MUST be set to min(4*MTU, max (2*MTU, 4380
+	//     bytes)).
+	a.cwnd = min32(4*a.mtu, max32(2*a.mtu, 4380))
+	a.log.Tracef("[%s] updated cwnd=%d ssthresh=%d inflight=%d (INI)",
+		a.name, a.cwnd, a.ssthresh, a.inflightQueue.getNumBytes())
+
+	a.t1Init = newRTXTimer(timerT1Init, a, maxInitRetrans)
+	a.t1Cookie = newRTXTimer(timerT1Cookie, a, maxInitRetrans)
+	a.t3RTX = newRTXTimer(timerT3RTX, a, noMaxRetrans)        // retransmit forever
+	a.tReconfig = newRTXTimer(timerReconfig, a, noMaxRetrans) // retransmit forever
+	a.ackTimer = newAckTimer(a)
+
+	return a
+}
+
+func (a *Association) init(isClient bool) {
+	a.lock.Lock()
+	defer a.lock.Unlock()
+
+	go a.readLoop()
+	go a.writeLoop()
+
+	if isClient {
+		a.setState(cookieWait)
+		init := &chunkInit{}
+		init.initialTSN = a.myNextTSN
+		init.numOutboundStreams = a.myMaxNumOutboundStreams
+		init.numInboundStreams = a.myMaxNumInboundStreams
+		init.initiateTag = a.myVerificationTag
+		init.advertisedReceiverWindowCredit = a.maxReceiveBufferSize
+		setSupportedExtensions(&init.chunkInitCommon)
+		a.storedInit = init
+
+		err := a.sendInit()
+		if err != nil {
+			a.log.Errorf("[%s] failed to send init: %s", a.name, err.Error())
+		}
+
+		a.t1Init.start(a.rtoMgr.getRTO())
+	}
+}
+
+// caller must hold a.lock
+func (a *Association) sendInit() error {
+	a.log.Debugf("[%s] sending INIT", a.name)
+	if a.storedInit == nil {
+		return errors.Errorf("the init not stored to send")
+	}
+
+	outbound := &packet{}
+	outbound.verificationTag = a.peerVerificationTag
+	a.sourcePort = 5000      // Spec??
+	a.destinationPort = 5000 // Spec??
+	outbound.sourcePort = a.sourcePort
+	outbound.destinationPort = a.destinationPort
+
+	outbound.chunks = []chunk{a.storedInit}
+
+	a.controlQueue.push(outbound)
+	a.awakeWriteLoop()
+
+	return nil
+}
+
+// caller must hold a.lock
+func (a *Association) sendCookieEcho() error {
+	if a.storedCookieEcho == nil {
+		return errors.Errorf("cookieEcho not stored to send")
+	}
+
+	a.log.Debugf("[%s] sending COOKIE-ECHO", a.name)
+
+	outbound := &packet{}
+	outbound.verificationTag = a.peerVerificationTag
+	outbound.sourcePort = a.sourcePort
+	outbound.destinationPort = a.destinationPort
+	outbound.chunks = []chunk{a.storedCookieEcho}
+
+	a.controlQueue.push(outbound)
+	a.awakeWriteLoop()
+
+	return nil
+}
+
+// Close ends the SCTP Association and cleans up any state
+func (a *Association) Close() error {
+	a.log.Debugf("[%s] closing association..", a.name)
+
+	a.setState(closed)
+
+	err := a.netConn.Close()
+
+	a.closeAllTimers()
+
+	// awake writeLoop to exit
+	a.closeWriteLoopOnce.Do(func() { close(a.closeWriteLoopCh) })
+
+	// Wait for readLoop to end
+	<-a.readLoopCloseCh
+
+	a.log.Debugf("[%s] association closed", a.name)
+	a.log.Debugf("[%s] stats nDATAs (in) : %d", a.name, a.stats.getNumDATAs())
+	a.log.Debugf("[%s] stats nSACKs (in) : %d", a.name, a.stats.getNumSACKs())
+	a.log.Debugf("[%s] stats nT3Timeouts : %d", a.name, a.stats.getNumT3Timeouts())
+	a.log.Debugf("[%s] stats nAckTimeouts: %d", a.name, a.stats.getNumAckTimeouts())
+	a.log.Debugf("[%s] stats nFastRetrans: %d", a.name, a.stats.getNumFastRetrans())
+	return err
+}
+
+func (a *Association) closeAllTimers() {
+	// Close all retransmission & ack timers
+	a.t1Init.close()
+	a.t1Cookie.close()
+	a.t3RTX.close()
+	a.tReconfig.close()
+	a.ackTimer.close()
+}
+
+func (a *Association) readLoop() {
+	var closeErr error
+	defer func() {
+		// also stop writeLoop, otherwise writeLoop can be leaked
+		// if connection is lost when there is no writing packet.
+		a.closeWriteLoopOnce.Do(func() { close(a.closeWriteLoopCh) })
+
+		a.lock.Lock()
+		for _, s := range a.streams {
+			a.unregisterStream(s, closeErr)
+		}
+		a.lock.Unlock()
+		close(a.acceptCh)
+		close(a.readLoopCloseCh)
+	}()
+
+	a.log.Debugf("[%s] readLoop entered", a.name)
+	buffer := make([]byte, receiveMTU)
+
+	for {
+		n, err := a.netConn.Read(buffer)
+		if err != nil {
+			closeErr = err
+			break
+		}
+		// Make a buffer sized to what we read, then copy the data we
+		// read from the underlying transport. We do this because the
+		// user data is passed to the reassembly queue without
+		// copying.
+		inbound := make([]byte, n)
+		copy(inbound, buffer[:n])
+		atomic.AddUint64(&a.bytesReceived, uint64(n))
+		if err = a.handleInbound(inbound); err != nil {
+			closeErr = err
+			break
+		}
+	}
+
+	a.log.Debugf("[%s] readLoop exited %s", a.name, closeErr)
+}
+
+func (a *Association) writeLoop() {
+	a.log.Debugf("[%s] writeLoop entered", a.name)
+
+loop:
+	for {
+		rawPackets := a.gatherOutbound()
+
+		for _, raw := range rawPackets {
+			_, err := a.netConn.Write(raw)
+			if err != nil {
+				if err != io.EOF {
+					a.log.Warnf("[%s] failed to write packets on netConn: %v", a.name, err)
+				}
+				a.log.Debugf("[%s] writeLoop ended", a.name)
+				break loop
+			}
+			atomic.AddUint64(&a.bytesSent, uint64(len(raw)))
+		}
+
+		select {
+		case <-a.awakeWriteLoopCh:
+		case <-a.closeWriteLoopCh:
+			break loop
+		}
+	}
+
+	a.setState(closed)
+	a.closeAllTimers()
+
+	a.log.Debugf("[%s] writeLoop exited", a.name)
+}
+
+func (a *Association) awakeWriteLoop() {
+	select {
+	case a.awakeWriteLoopCh <- struct{}{}:
+	default:
+	}
+}
+
+// unregisterStream un-registers a stream from the association
+// The caller should hold the association write lock.
+func (a *Association) unregisterStream(s *Stream, err error) {
+	s.lock.Lock()
+	defer s.lock.Unlock()
+
+	delete(a.streams, s.streamIdentifier)
+	s.readErr = err
+	s.readNotifier.Broadcast()
+}
+
+// handleInbound parses incoming raw packets
+func (a *Association) handleInbound(raw []byte) error {
+	p := &packet{}
+	if err := p.unmarshal(raw); err != nil {
+		a.log.Warnf("[%s] unable to parse SCTP packet %s", a.name, err)
+		return nil
+	}
+
+	if err := checkPacket(p); err != nil {
+		a.log.Warnf("[%s] failed validating packet %s", a.name, err)
+		return nil
+	}
+
+	a.handleChunkStart()
+
+	for _, c := range p.chunks {
+		if err := a.handleChunk(p, c); err != nil {
+			return err
+		}
+	}
+
+	a.handleChunkEnd()
+
+	return nil
+}
+
+// The caller should hold the lock
+func (a *Association) gatherOutboundDataAndReconfigPackets(rawPackets [][]byte) [][]byte {
+	for _, p := range a.getDataPacketsToRetransmit() {
+		raw, err := p.marshal()
+		if err != nil {
+			a.log.Warnf("[%s] failed to serialize a DATA packet to be retransmitted", a.name)
+			continue
+		}
+		rawPackets = append(rawPackets, raw)
+	}
+
+	// Pop unsent data chunks from the pending queue to send as much as
+	// cwnd and rwnd allow.
+	chunks, sisToReset := a.popPendingDataChunksToSend()
+	if len(chunks) > 0 {
+		// Start timer. (noop if already started)
+		a.log.Tracef("[%s] T3-rtx timer start (pt1)", a.name)
+		a.t3RTX.start(a.rtoMgr.getRTO())
+		for _, p := range a.bundleDataChunksIntoPackets(chunks) {
+			raw, err := p.marshal()
+			if err != nil {
+				a.log.Warnf("[%s] failed to serialize a DATA packet", a.name)
+				continue
+			}
+			rawPackets = append(rawPackets, raw)
+		}
+	}
+
+	if len(sisToReset) > 0 || a.willRetransmitReconfig {
+		if a.willRetransmitReconfig {
+			a.willRetransmitReconfig = false
+			a.log.Debugf("[%s] retransmit %d RECONFIG chunk(s)", a.name, len(a.reconfigs))
+			for _, c := range a.reconfigs {
+				p := a.createPacket([]chunk{c})
+				raw, err := p.marshal()
+				if err != nil {
+					a.log.Warnf("[%s] failed to serialize a RECONFIG packet to be retransmitted", a.name)
+				} else {
+					rawPackets = append(rawPackets, raw)
+				}
+			}
+		}
+
+		if len(sisToReset) > 0 {
+			rsn := a.generateNextRSN()
+			tsn := a.myNextTSN - 1
+			c := &chunkReconfig{
+				paramA: &paramOutgoingResetRequest{
+					reconfigRequestSequenceNumber: rsn,
+					senderLastTSN:                 tsn,
+					streamIdentifiers:             sisToReset,
+				},
+			}
+			a.reconfigs[rsn] = c // store in the map for retransmission
+			a.log.Debugf("[%s] sending RECONFIG: rsn=%d tsn=%d streams=%v",
+				a.name, rsn, a.myNextTSN-1, sisToReset)
+			p := a.createPacket([]chunk{c})
+			raw, err := p.marshal()
+			if err != nil {
+				a.log.Warnf("[%s] failed to serialize a RECONFIG packet to be transmitted", a.name)
+			} else {
+				rawPackets = append(rawPackets, raw)
+			}
+		}
+
+		if len(a.reconfigs) > 0 {
+			a.tReconfig.start(a.rtoMgr.getRTO())
+		}
+	}
+
+	return rawPackets
+}
+
+// The caller should hold the lock
+func (a *Association) gatherOutboundFrastRetransmissionPackets(rawPackets [][]byte) [][]byte {
+	if a.willRetransmitFast {
+		a.willRetransmitFast = false
+
+		toFastRetrans := []chunk{}
+		fastRetransSize := commonHeaderSize
+
+		for i := 0; ; i++ {
+			c, ok := a.inflightQueue.get(a.cumulativeTSNAckPoint + uint32(i) + 1)
+			if !ok {
+				break // end of pending data
+			}
+
+			if c.acked || c.abandoned() {
+				continue
+			}
+
+			if c.nSent > 1 || c.missIndicator < 3 {
+				continue
+			}
+
+			// RFC 4960 Sec 7.2.4 Fast Retransmit on Gap Reports
+			//  3)  Determine how many of the earliest (i.e., lowest TSN) DATA chunks
+			//      marked for retransmission will fit into a single packet, subject
+			//      to constraint of the path MTU of the destination transport
+			//      address to which the packet is being sent.  Call this value K.
+			//      Retransmit those K DATA chunks in a single packet.  When a Fast
+			//      Retransmit is being performed, the sender SHOULD ignore the value
+			//      of cwnd and SHOULD NOT delay retransmission for this single
+			//		packet.
+
+			dataChunkSize := dataChunkHeaderSize + uint32(len(c.userData))
+			if a.mtu < fastRetransSize+dataChunkSize {
+				break
+			}
+
+			fastRetransSize += dataChunkSize
+			a.stats.incFastRetrans()
+			c.nSent++
+			a.checkPartialReliabilityStatus(c)
+			toFastRetrans = append(toFastRetrans, c)
+			a.log.Tracef("[%s] fast-retransmit: tsn=%d sent=%d htna=%d",
+				a.name, c.tsn, c.nSent, a.fastRecoverExitPoint)
+		}
+
+		if len(toFastRetrans) > 0 {
+			raw, err := a.createPacket(toFastRetrans).marshal()
+			if err != nil {
+				a.log.Warnf("[%s] failed to serialize a DATA packet to be fast-retransmitted", a.name)
+			} else {
+				rawPackets = append(rawPackets, raw)
+			}
+		}
+	}
+
+	return rawPackets
+}
+
+// The caller should hold the lock
+func (a *Association) gatherOutboundSackPackets(rawPackets [][]byte) [][]byte {
+	if a.ackState == ackStateImmediate {
+		a.ackState = ackStateIdle
+		sack := a.createSelectiveAckChunk()
+		a.log.Debugf("[%s] sending SACK: %s", a.name, sack.String())
+		raw, err := a.createPacket([]chunk{sack}).marshal()
+		if err != nil {
+			a.log.Warnf("[%s] failed to serialize a SACK packet", a.name)
+		} else {
+			rawPackets = append(rawPackets, raw)
+		}
+	}
+
+	return rawPackets
+}
+
+// The caller should hold the lock
+func (a *Association) gatherOutboundForwardTSNPackets(rawPackets [][]byte) [][]byte {
+	if a.willSendForwardTSN {
+		a.willSendForwardTSN = false
+		if sna32GT(a.advancedPeerTSNAckPoint, a.cumulativeTSNAckPoint) {
+			fwdtsn := a.createForwardTSN()
+			raw, err := a.createPacket([]chunk{fwdtsn}).marshal()
+			if err != nil {
+				a.log.Warnf("[%s] failed to serialize a Forward TSN packet", a.name)
+			} else {
+				rawPackets = append(rawPackets, raw)
+			}
+		}
+	}
+
+	return rawPackets
+}
+
+// gatherOutbound gathers outgoing packets
+func (a *Association) gatherOutbound() [][]byte {
+	a.lock.Lock()
+	defer a.lock.Unlock()
+
+	rawPackets := [][]byte{}
+
+	if a.controlQueue.size() > 0 {
+		for _, p := range a.controlQueue.popAll() {
+			raw, err := p.marshal()
+			if err != nil {
+				a.log.Warnf("[%s] failed to serialize a control packet", a.name)
+				continue
+			}
+			rawPackets = append(rawPackets, raw)
+		}
+	}
+
+	state := a.getState()
+
+	if state == established {
+		rawPackets = a.gatherOutboundDataAndReconfigPackets(rawPackets)
+		rawPackets = a.gatherOutboundFrastRetransmissionPackets(rawPackets)
+		rawPackets = a.gatherOutboundSackPackets(rawPackets)
+		rawPackets = a.gatherOutboundForwardTSNPackets(rawPackets)
+	}
+
+	return rawPackets
+}
+
+func checkPacket(p *packet) error {
+	// All packets must adhere to these rules
+
+	// This is the SCTP sender's port number.  It can be used by the
+	// receiver in combination with the source IP address, the SCTP
+	// destination port, and possibly the destination IP address to
+	// identify the association to which this packet belongs.  The port
+	// number 0 MUST NOT be used.
+	if p.sourcePort == 0 {
+		return errors.Errorf("sctp packet must not have a source port of 0")
+	}
+
+	// This is the SCTP port number to which this packet is destined.
+	// The receiving host will use this port number to de-multiplex the
+	// SCTP packet to the correct receiving endpoint/application.  The
+	// port number 0 MUST NOT be used.
+	if p.destinationPort == 0 {
+		return errors.Errorf("sctp packet must not have a destination port of 0")
+	}
+
+	// Check values on the packet that are specific to a particular chunk type
+	for _, c := range p.chunks {
+		switch c.(type) { // nolint:gocritic
+		case *chunkInit:
+			// An INIT or INIT ACK chunk MUST NOT be bundled with any other chunk.
+			// They MUST be the only chunks present in the SCTP packets that carry
+			// them.
+			if len(p.chunks) != 1 {
+				return errors.Errorf("init chunk must not be bundled with any other chunk")
+			}
+
+			// A packet containing an INIT chunk MUST have a zero Verification
+			// Tag.
+			if p.verificationTag != 0 {
+				return errors.Errorf("init chunk expects a verification tag of 0 on the packet when out-of-the-blue")
+			}
+		}
+	}
+
+	return nil
+}
+
+func min16(a, b uint16) uint16 {
+	if a < b {
+		return a
+	}
+	return b
+}
+
+func max32(a, b uint32) uint32 {
+	if a > b {
+		return a
+	}
+	return b
+}
+
+func min32(a, b uint32) uint32 {
+	if a < b {
+		return a
+	}
+	return b
+}
+
+// setState atomically sets the state of the Association.
+// The caller should hold the lock.
+func (a *Association) setState(newState uint32) {
+	oldState := atomic.SwapUint32(&a.state, newState)
+	if newState != oldState {
+		a.log.Debugf("[%s] state change: '%s' => '%s'",
+			a.name,
+			getAssociationStateString(oldState),
+			getAssociationStateString(newState))
+	}
+}
+
+// getState atomically returns the state of the Association.
+func (a *Association) getState() uint32 {
+	return atomic.LoadUint32(&a.state)
+}
+
+// BytesSent returns the number of bytes sent
+func (a *Association) BytesSent() uint64 {
+	return atomic.LoadUint64(&a.bytesSent)
+}
+
+// BytesReceived returns the number of bytes received
+func (a *Association) BytesReceived() uint64 {
+	return atomic.LoadUint64(&a.bytesReceived)
+}
+
+func setSupportedExtensions(init *chunkInitCommon) {
+	// nolint:godox
+	// TODO RFC5061 https://tools.ietf.org/html/rfc6525#section-5.2
+	// An implementation supporting this (Supported Extensions Parameter)
+	// extension MUST list the ASCONF, the ASCONF-ACK, and the AUTH chunks
+	// in its INIT and INIT-ACK parameters.
+	init.params = append(init.params, &paramSupportedExtensions{
+		ChunkTypes: []chunkType{ctReconfig, ctForwardTSN},
+	})
+}
+
+// The caller should hold the lock.
+func (a *Association) handleInit(p *packet, i *chunkInit) ([]*packet, error) {
+	state := a.getState()
+	a.log.Debugf("[%s] chunkInit received in state '%s'", a.name, getAssociationStateString(state))
+
+	// https://tools.ietf.org/html/rfc4960#section-5.2.1
+	// Upon receipt of an INIT in the COOKIE-WAIT state, an endpoint MUST
+	// respond with an INIT ACK using the same parameters it sent in its
+	// original INIT chunk (including its Initiate Tag, unchanged).  When
+	// responding, the endpoint MUST send the INIT ACK back to the same
+	// address that the original INIT (sent by this endpoint) was sent.
+
+	if state != closed && state != cookieWait && state != cookieEchoed {
+		// 5.2.2.  Unexpected INIT in States Other than CLOSED, COOKIE-ECHOED,
+		//        COOKIE-WAIT, and SHUTDOWN-ACK-SENT
+		return nil, errors.Errorf("todo: handle Init when in state %s", getAssociationStateString(state))
+	}
+
+	// Should we be setting any of these permanently until we've ACKed further?
+	a.myMaxNumInboundStreams = min16(i.numInboundStreams, a.myMaxNumInboundStreams)
+	a.myMaxNumOutboundStreams = min16(i.numOutboundStreams, a.myMaxNumOutboundStreams)
+	a.peerVerificationTag = i.initiateTag
+	a.sourcePort = p.destinationPort
+	a.destinationPort = p.sourcePort
+
+	// 13.2 This is the last TSN received in sequence.  This value
+	// is set initially by taking the peer's initial TSN,
+	// received in the INIT or INIT ACK chunk, and
+	// subtracting one from it.
+	a.peerLastTSN = i.initialTSN - 1
+
+	for _, param := range i.params {
+		switch v := param.(type) { // nolint:gocritic
+		case *paramSupportedExtensions:
+			for _, t := range v.ChunkTypes {
+				if t == ctForwardTSN {
+					a.log.Debugf("[%s] use ForwardTSN (on init)\n", a.name)
+					a.useForwardTSN = true
+				}
+			}
+		}
+	}
+	if !a.useForwardTSN {
+		a.log.Warnf("[%s] not using ForwardTSN (on init)\n", a.name)
+	}
+
+	outbound := &packet{}
+	outbound.verificationTag = a.peerVerificationTag
+	outbound.sourcePort = a.sourcePort
+	outbound.destinationPort = a.destinationPort
+
+	initAck := &chunkInitAck{}
+
+	initAck.initialTSN = a.myNextTSN
+	initAck.numOutboundStreams = a.myMaxNumOutboundStreams
+	initAck.numInboundStreams = a.myMaxNumInboundStreams
+	initAck.initiateTag = a.myVerificationTag
+	initAck.advertisedReceiverWindowCredit = a.maxReceiveBufferSize
+
+	if a.myCookie == nil {
+		var err error
+		if a.myCookie, err = newRandomStateCookie(); err != nil {
+			return nil, err
+		}
+	}
+
+	initAck.params = []param{a.myCookie}
+
+	setSupportedExtensions(&initAck.chunkInitCommon)
+
+	outbound.chunks = []chunk{initAck}
+
+	return pack(outbound), nil
+}
+
+// The caller should hold the lock.
+func (a *Association) handleInitAck(p *packet, i *chunkInitAck) error {
+	state := a.getState()
+	a.log.Debugf("[%s] chunkInitAck received in state '%s'", a.name, getAssociationStateString(state))
+	if state != cookieWait {
+		// RFC 4960
+		// 5.2.3.  Unexpected INIT ACK
+		//   If an INIT ACK is received by an endpoint in any state other than the
+		//   COOKIE-WAIT state, the endpoint should discard the INIT ACK chunk.
+		//   An unexpected INIT ACK usually indicates the processing of an old or
+		//   duplicated INIT chunk.
+		return nil
+	}
+
+	a.myMaxNumInboundStreams = min16(i.numInboundStreams, a.myMaxNumInboundStreams)
+	a.myMaxNumOutboundStreams = min16(i.numOutboundStreams, a.myMaxNumOutboundStreams)
+	a.peerVerificationTag = i.initiateTag
+	a.peerLastTSN = i.initialTSN - 1
+	if a.sourcePort != p.destinationPort ||
+		a.destinationPort != p.sourcePort {
+		a.log.Warnf("[%s] handleInitAck: port mismatch", a.name)
+		return nil
+	}
+
+	a.rwnd = i.advertisedReceiverWindowCredit
+	a.log.Debugf("[%s] initial rwnd=%d", a.name, a.rwnd)
+
+	// RFC 4690 Sec 7.2.1
+	//  o  The initial value of ssthresh MAY be arbitrarily high (for
+	//     example, implementations MAY use the size of the receiver
+	//     advertised window).
+	a.ssthresh = a.rwnd
+	a.log.Tracef("[%s] updated cwnd=%d ssthresh=%d inflight=%d (INI)",
+		a.name, a.cwnd, a.ssthresh, a.inflightQueue.getNumBytes())
+
+	a.t1Init.stop()
+	a.storedInit = nil
+
+	var cookieParam *paramStateCookie
+	for _, param := range i.params {
+		switch v := param.(type) {
+		case *paramStateCookie:
+			cookieParam = v
+		case *paramSupportedExtensions:
+			for _, t := range v.ChunkTypes {
+				if t == ctForwardTSN {
+					a.log.Debugf("[%s] use ForwardTSN (on initAck)\n", a.name)
+					a.useForwardTSN = true
+				}
+			}
+		}
+	}
+	if !a.useForwardTSN {
+		a.log.Warnf("[%s] not using ForwardTSN (on initAck)\n", a.name)
+	}
+	if cookieParam == nil {
+		return errors.Errorf("no cookie in InitAck")
+	}
+
+	a.storedCookieEcho = &chunkCookieEcho{}
+	a.storedCookieEcho.cookie = cookieParam.cookie
+
+	err := a.sendCookieEcho()
+	if err != nil {
+		a.log.Errorf("[%s] failed to send init: %s", a.name, err.Error())
+	}
+
+	a.t1Cookie.start(a.rtoMgr.getRTO())
+	a.setState(cookieEchoed)
+	return nil
+}
+
+// The caller should hold the lock.
+func (a *Association) handleHeartbeat(c *chunkHeartbeat) []*packet {
+	a.log.Tracef("[%s] chunkHeartbeat", a.name)
+	hbi, ok := c.params[0].(*paramHeartbeatInfo)
+	if !ok {
+		a.log.Warnf("[%s] failed to handle Heartbeat, no ParamHeartbeatInfo", a.name)
+	}
+
+	return pack(&packet{
+		verificationTag: a.peerVerificationTag,
+		sourcePort:      a.sourcePort,
+		destinationPort: a.destinationPort,
+		chunks: []chunk{&chunkHeartbeatAck{
+			params: []param{
+				&paramHeartbeatInfo{
+					heartbeatInformation: hbi.heartbeatInformation,
+				},
+			},
+		}},
+	})
+}
+
+// The caller should hold the lock.
+func (a *Association) handleCookieEcho(c *chunkCookieEcho) []*packet {
+	state := a.getState()
+	a.log.Debugf("[%s] COOKIE-ECHO received in state '%s'", a.name, getAssociationStateString(state))
+	switch state {
+	default:
+		return nil
+	case established:
+		if !bytes.Equal(a.myCookie.cookie, c.cookie) {
+			return nil
+		}
+	case closed, cookieWait, cookieEchoed:
+		if !bytes.Equal(a.myCookie.cookie, c.cookie) {
+			return nil
+		}
+
+		a.t1Init.stop()
+		a.storedInit = nil
+
+		a.t1Cookie.stop()
+		a.storedCookieEcho = nil
+
+		a.setState(established)
+		a.handshakeCompletedCh <- nil
+	}
+
+	p := &packet{
+		verificationTag: a.peerVerificationTag,
+		sourcePort:      a.sourcePort,
+		destinationPort: a.destinationPort,
+		chunks:          []chunk{&chunkCookieAck{}},
+	}
+	return pack(p)
+}
+
+// The caller should hold the lock.
+func (a *Association) handleCookieAck() {
+	state := a.getState()
+	a.log.Debugf("[%s] COOKIE-ACK received in state '%s'", a.name, getAssociationStateString(state))
+	if state != cookieEchoed {
+		// RFC 4960
+		// 5.2.5.  Handle Duplicate COOKIE-ACK.
+		//   At any state other than COOKIE-ECHOED, an endpoint should silently
+		//   discard a received COOKIE ACK chunk.
+		return
+	}
+
+	a.t1Cookie.stop()
+	a.storedCookieEcho = nil
+
+	a.setState(established)
+	a.handshakeCompletedCh <- nil
+}
+
+// The caller should hold the lock.
+func (a *Association) handleData(d *chunkPayloadData) []*packet {
+	a.log.Tracef("[%s] DATA: tsn=%d immediateSack=%v len=%d",
+		a.name, d.tsn, d.immediateSack, len(d.userData))
+	a.stats.incDATAs()
+
+	canPush := a.payloadQueue.canPush(d, a.peerLastTSN)
+	if canPush {
+		s := a.getOrCreateStream(d.streamIdentifier)
+		if s == nil {
+			// silentely discard the data. (sender will retry on T3-rtx timeout)
+			// see pion/sctp#30
+			a.log.Debugf("discard %d", d.streamSequenceNumber)
+			return nil
+		}
+
+		if a.getMyReceiverWindowCredit() > 0 {
+			// Pass the new chunk to stream level as soon as it arrives
+			a.payloadQueue.push(d, a.peerLastTSN)
+			s.handleData(d)
+		} else {
+			// Receive buffer is full
+			lastTSN, ok := a.payloadQueue.getLastTSNReceived()
+			if ok && sna32LT(d.tsn, lastTSN) {
+				a.log.Debugf("[%s] receive buffer full, but accepted as this is a missing chunk with tsn=%d ssn=%d", a.name, d.tsn, d.streamSequenceNumber)
+				a.payloadQueue.push(d, a.peerLastTSN)
+				s.handleData(d)
+			} else {
+				a.log.Debugf("[%s] receive buffer full. dropping DATA with tsn=%d ssn=%d", a.name, d.tsn, d.streamSequenceNumber)
+			}
+		}
+	}
+
+	return a.handlePeerLastTSNAndAcknowledgement(d.immediateSack)
+}
+
+// A common routine for handleData and handleForwardTSN routines
+// The caller should hold the lock.
+func (a *Association) handlePeerLastTSNAndAcknowledgement(sackImmediately bool) []*packet {
+	var reply []*packet
+
+	// Try to advance peerLastTSN
+
+	// From RFC 3758 Sec 3.6:
+	//   .. and then MUST further advance its cumulative TSN point locally
+	//   if possible
+	// Meaning, if peerLastTSN+1 points to a chunk that is received,
+	// advance peerLastTSN until peerLastTSN+1 points to unreceived chunk.
+	for {
+		if _, popOk := a.payloadQueue.pop(a.peerLastTSN + 1); !popOk {
+			break
+		}
+		a.peerLastTSN++
+
+		for _, rstReq := range a.reconfigRequests {
+			resp := a.resetStreamsIfAny(rstReq)
+			if resp != nil {
+				a.log.Debugf("[%s] RESET RESPONSE: %+v", a.name, resp)
+				reply = append(reply, resp)
+			}
+		}
+	}
+
+	hasPacketLoss := (a.payloadQueue.size() > 0)
+	if hasPacketLoss {
+		a.log.Tracef("[%s] packetloss: %s", a.name, a.payloadQueue.getGapAckBlocksString(a.peerLastTSN))
+	}
+
+	if (a.ackState != ackStateImmediate && !sackImmediately && !hasPacketLoss && a.ackMode == ackModeNormal) || a.ackMode == ackModeAlwaysDelay {
+		if a.ackState == ackStateIdle {
+			a.delayedAckTriggered = true
+		} else {
+			a.immediateAckTriggered = true
+		}
+	} else {
+		a.immediateAckTriggered = true
+	}
+
+	return reply
+}
+
+// The caller should hold the lock.
+func (a *Association) getMyReceiverWindowCredit() uint32 {
+	var bytesQueued uint32
+	for _, s := range a.streams {
+		bytesQueued += uint32(s.getNumBytesInReassemblyQueue())
+	}
+
+	if bytesQueued >= a.maxReceiveBufferSize {
+		return 0
+	}
+	return a.maxReceiveBufferSize - bytesQueued
+}
+
+// OpenStream opens a stream
+func (a *Association) OpenStream(streamIdentifier uint16, defaultPayloadType PayloadProtocolIdentifier) (*Stream, error) {
+	a.lock.Lock()
+	defer a.lock.Unlock()
+
+	if _, ok := a.streams[streamIdentifier]; ok {
+		return nil, errors.Errorf("there already exists a stream with identifier %d", streamIdentifier)
+	}
+
+	s := a.createStream(streamIdentifier, false)
+	s.setDefaultPayloadType(defaultPayloadType)
+
+	return s, nil
+}
+
+// AcceptStream accepts a stream
+func (a *Association) AcceptStream() (*Stream, error) {
+	s, ok := <-a.acceptCh
+	if !ok {
+		return nil, io.EOF // no more incoming streams
+	}
+	return s, nil
+}
+
+// createStream creates a stream. The caller should hold the lock and check no stream exists for this id.
+func (a *Association) createStream(streamIdentifier uint16, accept bool) *Stream {
+	s := &Stream{
+		association:      a,
+		streamIdentifier: streamIdentifier,
+		reassemblyQueue:  newReassemblyQueue(streamIdentifier),
+		log:              a.log,
+		name:             fmt.Sprintf("%d:%s", streamIdentifier, a.name),
+	}
+
+	s.readNotifier = sync.NewCond(&s.lock)
+
+	if accept {
+		select {
+		case a.acceptCh <- s:
+			a.streams[streamIdentifier] = s
+			a.log.Debugf("[%s] accepted a new stream (streamIdentifier: %d)",
+				a.name, streamIdentifier)
+		default:
+			a.log.Debugf("[%s] dropped a new stream (acceptCh size: %d)",
+				a.name, len(a.acceptCh))
+			return nil
+		}
+	} else {
+		a.streams[streamIdentifier] = s
+	}
+
+	return s
+}
+
+// getOrCreateStream gets or creates a stream. The caller should hold the lock.
+func (a *Association) getOrCreateStream(streamIdentifier uint16) *Stream {
+	if s, ok := a.streams[streamIdentifier]; ok {
+		return s
+	}
+
+	return a.createStream(streamIdentifier, true)
+}
+
+// The caller should hold the lock.
+func (a *Association) processSelectiveAck(d *chunkSelectiveAck) (map[uint16]int, uint32, error) { // nolint:gocognit
+	bytesAckedPerStream := map[uint16]int{}
+
+	// New ack point, so pop all ACKed packets from inflightQueue
+	// We add 1 because the "currentAckPoint" has already been popped from the inflight queue
+	// For the first SACK we take care of this by setting the ackpoint to cumAck - 1
+	for i := a.cumulativeTSNAckPoint + 1; sna32LTE(i, d.cumulativeTSNAck); i++ {
+		c, ok := a.inflightQueue.pop(i)
+		if !ok {
+			return nil, 0, errors.Errorf("tsn %v unable to be popped from inflight queue", i)
+		}
+
+		if !c.acked {
+			// RFC 4096 sec 6.3.2.  Retransmission Timer Rules
+			//   R3)  Whenever a SACK is received that acknowledges the DATA chunk
+			//        with the earliest outstanding TSN for that address, restart the
+			//        T3-rtx timer for that address with its current RTO (if there is
+			//        still outstanding data on that address).
+			if i == a.cumulativeTSNAckPoint+1 {
+				// T3 timer needs to be reset. Stop it for now.
+				a.t3RTX.stop()
+			}
+
+			nBytesAcked := len(c.userData)
+
+			// Sum the number of bytes acknowledged per stream
+			if amount, ok := bytesAckedPerStream[c.streamIdentifier]; ok {
+				bytesAckedPerStream[c.streamIdentifier] = amount + nBytesAcked
+			} else {
+				bytesAckedPerStream[c.streamIdentifier] = nBytesAcked
+			}
+
+			// RFC 4960 sec 6.3.1.  RTO Calculation
+			//   C4)  When data is in flight and when allowed by rule C5 below, a new
+			//        RTT measurement MUST be made each round trip.  Furthermore, new
+			//        RTT measurements SHOULD be made no more than once per round trip
+			//        for a given destination transport address.
+			//   C5)  Karn's algorithm: RTT measurements MUST NOT be made using
+			//        packets that were retransmitted (and thus for which it is
+			//        ambiguous whether the reply was for the first instance of the
+			//        chunk or for a later instance)
+			if c.nSent == 1 && sna32GTE(c.tsn, a.minTSN2MeasureRTT) {
+				a.minTSN2MeasureRTT = a.myNextTSN
+				rtt := time.Since(c.since).Seconds() * 1000.0
+				srtt := a.rtoMgr.setNewRTT(rtt)
+				a.log.Tracef("[%s] SACK: measured-rtt=%f srtt=%f new-rto=%f",
+					a.name, rtt, srtt, a.rtoMgr.getRTO())
+			}
+		}
+
+		if a.inFastRecovery && c.tsn == a.fastRecoverExitPoint {
+			a.log.Debugf("[%s] exit fast-recovery", a.name)
+			a.inFastRecovery = false
+		}
+	}
+
+	htna := d.cumulativeTSNAck
+
+	// Mark selectively acknowledged chunks as "acked"
+	for _, g := range d.gapAckBlocks {
+		for i := g.start; i <= g.end; i++ {
+			tsn := d.cumulativeTSNAck + uint32(i)
+			c, ok := a.inflightQueue.get(tsn)
+			if !ok {
+				return nil, 0, errors.Errorf("requested non-existent TSN %v", tsn)
+			}
+
+			if !c.acked {
+				nBytesAcked := a.inflightQueue.markAsAcked(tsn)
+
+				// Sum the number of bytes acknowledged per stream
+				if amount, ok := bytesAckedPerStream[c.streamIdentifier]; ok {
+					bytesAckedPerStream[c.streamIdentifier] = amount + nBytesAcked
+				} else {
+					bytesAckedPerStream[c.streamIdentifier] = nBytesAcked
+				}
+
+				a.log.Tracef("[%s] tsn=%d has been sacked", a.name, c.tsn)
+
+				if c.nSent == 1 {
+					a.minTSN2MeasureRTT = a.myNextTSN
+					rtt := time.Since(c.since).Seconds() * 1000.0
+					srtt := a.rtoMgr.setNewRTT(rtt)
+					a.log.Tracef("[%s] SACK: measured-rtt=%f srtt=%f new-rto=%f",
+						a.name, rtt, srtt, a.rtoMgr.getRTO())
+				}
+
+				if sna32LT(htna, tsn) {
+					htna = tsn
+				}
+			}
+		}
+	}
+
+	return bytesAckedPerStream, htna, nil
+}
+
+// The caller should hold the lock.
+func (a *Association) onCumulativeTSNAckPointAdvanced(totalBytesAcked int) {
+	// RFC 4096, sec 6.3.2.  Retransmission Timer Rules
+	//   R2)  Whenever all outstanding data sent to an address have been
+	//        acknowledged, turn off the T3-rtx timer of that address.
+	if a.inflightQueue.size() == 0 {
+		a.log.Tracef("[%s] SACK: no more packet in-flight (pending=%d)", a.name, a.pendingQueue.size())
+		a.t3RTX.stop()
+	} else {
+		a.log.Tracef("[%s] T3-rtx timer start (pt2)", a.name)
+		a.t3RTX.start(a.rtoMgr.getRTO())
+	}
+
+	// Update congestion control parameters
+	if a.cwnd <= a.ssthresh {
+		// RFC 4096, sec 7.2.1.  Slow-Start
+		//   o  When cwnd is less than or equal to ssthresh, an SCTP endpoint MUST
+		//		use the slow-start algorithm to increase cwnd only if the current
+		//      congestion window is being fully utilized, an incoming SACK
+		//      advances the Cumulative TSN Ack Point, and the data sender is not
+		//      in Fast Recovery.  Only when these three conditions are met can
+		//      the cwnd be increased; otherwise, the cwnd MUST not be increased.
+		//		If these conditions are met, then cwnd MUST be increased by, at
+		//      most, the lesser of 1) the total size of the previously
+		//      outstanding DATA chunk(s) acknowledged, and 2) the destination's
+		//      path MTU.
+		if !a.inFastRecovery &&
+			a.pendingQueue.size() > 0 {
+			a.cwnd += min32(uint32(totalBytesAcked), a.cwnd) // TCP way
+			// a.cwnd += min32(uint32(totalBytesAcked), a.mtu) // SCTP way (slow)
+			a.log.Tracef("[%s] updated cwnd=%d ssthresh=%d acked=%d (SS)",
+				a.name, a.cwnd, a.ssthresh, totalBytesAcked)
+		} else {
+			a.log.Tracef("[%s] cwnd did not grow: cwnd=%d ssthresh=%d acked=%d FR=%v pending=%d",
+				a.name, a.cwnd, a.ssthresh, totalBytesAcked, a.inFastRecovery, a.pendingQueue.size())
+		}
+	} else {
+		// RFC 4096, sec 7.2.2.  Congestion Avoidance
+		//   o  Whenever cwnd is greater than ssthresh, upon each SACK arrival
+		//      that advances the Cumulative TSN Ack Point, increase
+		//      partial_bytes_acked by the total number of bytes of all new chunks
+		//      acknowledged in that SACK including chunks acknowledged by the new
+		//      Cumulative TSN Ack and by Gap Ack Blocks.
+		a.partialBytesAcked += uint32(totalBytesAcked)
+
+		//   o  When partial_bytes_acked is equal to or greater than cwnd and
+		//      before the arrival of the SACK the sender had cwnd or more bytes
+		//      of data outstanding (i.e., before arrival of the SACK, flight size
+		//      was greater than or equal to cwnd), increase cwnd by MTU, and
+		//      reset partial_bytes_acked to (partial_bytes_acked - cwnd).
+		if a.partialBytesAcked >= a.cwnd && a.pendingQueue.size() > 0 {
+			a.partialBytesAcked -= a.cwnd
+			a.cwnd += a.mtu
+			a.log.Tracef("[%s] updated cwnd=%d ssthresh=%d acked=%d (CA)",
+				a.name, a.cwnd, a.ssthresh, totalBytesAcked)
+		}
+	}
+}
+
+// The caller should hold the lock.
+func (a *Association) processFastRetransmission(cumTSNAckPoint, htna uint32, cumTSNAckPointAdvanced bool) error {
+	// HTNA algorithm - RFC 4960 Sec 7.2.4
+	// Increment missIndicator of each chunks that the SACK reported missing
+	// when either of the following is met:
+	// a)  Not in fast-recovery
+	//     miss indications are incremented only for missing TSNs prior to the
+	//     highest TSN newly acknowledged in the SACK.
+	// b)  In fast-recovery AND the Cumulative TSN Ack Point advanced
+	//     the miss indications are incremented for all TSNs reported missing
+	//     in the SACK.
+	if !a.inFastRecovery || (a.inFastRecovery && cumTSNAckPointAdvanced) {
+		var maxTSN uint32
+		if !a.inFastRecovery {
+			// a) increment only for missing TSNs prior to the HTNA
+			maxTSN = htna
+		} else {
+			// b) increment for all TSNs reported missing
+			maxTSN = cumTSNAckPoint + uint32(a.inflightQueue.size()) + 1
+		}
+
+		for tsn := cumTSNAckPoint + 1; sna32LT(tsn, maxTSN); tsn++ {
+			c, ok := a.inflightQueue.get(tsn)
+			if !ok {
+				return errors.Errorf("requested non-existent TSN %v", tsn)
+			}
+			if !c.acked && !c.abandoned() && c.missIndicator < 3 {
+				c.missIndicator++
+				if c.missIndicator == 3 {
+					if !a.inFastRecovery {
+						// 2)  If not in Fast Recovery, adjust the ssthresh and cwnd of the
+						//     destination address(es) to which the missing DATA chunks were
+						//     last sent, according to the formula described in Section 7.2.3.
+						a.inFastRecovery = true
+						a.fastRecoverExitPoint = htna
+						a.ssthresh = max32(a.cwnd/2, 4*a.mtu)
+						a.cwnd = a.ssthresh
+						a.partialBytesAcked = 0
+						a.willRetransmitFast = true
+
+						a.log.Tracef("[%s] updated cwnd=%d ssthresh=%d inflight=%d (FR)",
+							a.name, a.cwnd, a.ssthresh, a.inflightQueue.getNumBytes())
+					}
+				}
+			}
+		}
+	}
+
+	if a.inFastRecovery && cumTSNAckPointAdvanced {
+		a.willRetransmitFast = true
+	}
+
+	return nil
+}
+
+// The caller should hold the lock.
+func (a *Association) handleSack(d *chunkSelectiveAck) error {
+	a.log.Tracef("[%s] SACK: cumTSN=%d a_rwnd=%d", a.name, d.cumulativeTSNAck, d.advertisedReceiverWindowCredit)
+	state := a.getState()
+	if state != established {
+		return nil
+	}
+
+	a.stats.incSACKs()
+
+	if sna32GT(a.cumulativeTSNAckPoint, d.cumulativeTSNAck) {
+		// RFC 4960 sec 6.2.1.  Processing a Received SACK
+		// D)
+		//   i) If Cumulative TSN Ack is less than the Cumulative TSN Ack
+		//      Point, then drop the SACK.  Since Cumulative TSN Ack is
+		//      monotonically increasing, a SACK whose Cumulative TSN Ack is
+		//      less than the Cumulative TSN Ack Point indicates an out-of-
+		//      order SACK.
+
+		a.log.Debugf("[%s] SACK Cumulative ACK %v is older than ACK point %v",
+			a.name,
+			d.cumulativeTSNAck,
+			a.cumulativeTSNAckPoint)
+
+		return nil
+	}
+
+	// Process selective ack
+	bytesAckedPerStream, htna, err := a.processSelectiveAck(d)
+	if err != nil {
+		return err
+	}
+
+	var totalBytesAcked int
+	for _, nBytesAcked := range bytesAckedPerStream {
+		totalBytesAcked += nBytesAcked
+	}
+
+	cumTSNAckPointAdvanced := false
+	if sna32LT(a.cumulativeTSNAckPoint, d.cumulativeTSNAck) {
+		a.log.Tracef("[%s] SACK: cumTSN advanced: %d -> %d",
+			a.name,
+			a.cumulativeTSNAckPoint,
+			d.cumulativeTSNAck)
+
+		a.cumulativeTSNAckPoint = d.cumulativeTSNAck
+		cumTSNAckPointAdvanced = true
+		a.onCumulativeTSNAckPointAdvanced(totalBytesAcked)
+	}
+
+	for si, nBytesAcked := range bytesAckedPerStream {
+		if s, ok := a.streams[si]; ok {
+			a.lock.Unlock()
+			s.onBufferReleased(nBytesAcked)
+			a.lock.Lock()
+		}
+	}
+
+	// New rwnd value
+	// RFC 4960 sec 6.2.1.  Processing a Received SACK
+	// D)
+	//   ii) Set rwnd equal to the newly received a_rwnd minus the number
+	//       of bytes still outstanding after processing the Cumulative
+	//       TSN Ack and the Gap Ack Blocks.
+
+	// bytes acked were already subtracted by markAsAcked() method
+	bytesOutstanding := uint32(a.inflightQueue.getNumBytes())
+	if bytesOutstanding >= d.advertisedReceiverWindowCredit {
+		a.rwnd = 0
+	} else {
+		a.rwnd = d.advertisedReceiverWindowCredit - bytesOutstanding
+	}
+
+	err = a.processFastRetransmission(d.cumulativeTSNAck, htna, cumTSNAckPointAdvanced)
+	if err != nil {
+		return err
+	}
+
+	if a.useForwardTSN {
+		// RFC 3758 Sec 3.5 C1
+		if sna32LT(a.advancedPeerTSNAckPoint, a.cumulativeTSNAckPoint) {
+			a.advancedPeerTSNAckPoint = a.cumulativeTSNAckPoint
+		}
+
+		// RFC 3758 Sec 3.5 C2
+		for i := a.advancedPeerTSNAckPoint + 1; ; i++ {
+			c, ok := a.inflightQueue.get(i)
+			if !ok {
+				break
+			}
+			if !c.abandoned() {
+				break
+			}
+			a.advancedPeerTSNAckPoint = i
+		}
+
+		// RFC 3758 Sec 3.5 C3
+		if sna32GT(a.advancedPeerTSNAckPoint, a.cumulativeTSNAckPoint) {
+			a.willSendForwardTSN = true
+		}
+		a.awakeWriteLoop()
+	}
+
+	if a.inflightQueue.size() > 0 {
+		// Start timer. (noop if already started)
+		a.log.Tracef("[%s] T3-rtx timer start (pt3)", a.name)
+		a.t3RTX.start(a.rtoMgr.getRTO())
+	}
+
+	if cumTSNAckPointAdvanced {
+		a.awakeWriteLoop()
+	}
+
+	return nil
+}
+
+// createForwardTSN generates ForwardTSN chunk.
+// This method will be be called if useForwardTSN is set to false.
+// The caller should hold the lock.
+func (a *Association) createForwardTSN() *chunkForwardTSN {
+	// RFC 3758 Sec 3.5 C4
+	streamMap := map[uint16]uint16{} // to report only once per SI
+	for i := a.cumulativeTSNAckPoint + 1; sna32LTE(i, a.advancedPeerTSNAckPoint); i++ {
+		c, ok := a.inflightQueue.get(i)
+		if !ok {
+			break
+		}
+
+		ssn, ok := streamMap[c.streamIdentifier]
+		if !ok {
+			streamMap[c.streamIdentifier] = c.streamSequenceNumber
+		} else if sna16LT(ssn, c.streamSequenceNumber) {
+			// to report only once with greatest SSN
+			streamMap[c.streamIdentifier] = c.streamSequenceNumber
+		}
+	}
+
+	fwdtsn := &chunkForwardTSN{
+		newCumulativeTSN: a.advancedPeerTSNAckPoint,
+		streams:          []chunkForwardTSNStream{},
+	}
+
+	var streamStr string
+	for si, ssn := range streamMap {
+		streamStr += fmt.Sprintf("(si=%d ssn=%d)", si, ssn)
+		fwdtsn.streams = append(fwdtsn.streams, chunkForwardTSNStream{
+			identifier: si,
+			sequence:   ssn,
+		})
+	}
+	a.log.Tracef("[%s] building fwdtsn: newCumulativeTSN=%d cumTSN=%d - %s", a.name, fwdtsn.newCumulativeTSN, a.cumulativeTSNAckPoint, streamStr)
+
+	return fwdtsn
+}
+
+// createPacket wraps chunks in a packet.
+// The caller should hold the read lock.
+func (a *Association) createPacket(cs []chunk) *packet {
+	return &packet{
+		verificationTag: a.peerVerificationTag,
+		sourcePort:      a.sourcePort,
+		destinationPort: a.destinationPort,
+		chunks:          cs,
+	}
+}
+
+// The caller should hold the lock.
+func (a *Association) handleReconfig(c *chunkReconfig) ([]*packet, error) {
+	a.log.Tracef("[%s] handleReconfig", a.name)
+
+	pp := make([]*packet, 0)
+
+	p, err := a.handleReconfigParam(c.paramA)
+	if err != nil {
+		return nil, err
+	}
+	if p != nil {
+		pp = append(pp, p)
+	}
+
+	if c.paramB != nil {
+		p, err = a.handleReconfigParam(c.paramB)
+		if err != nil {
+			return nil, err
+		}
+		if p != nil {
+			pp = append(pp, p)
+		}
+	}
+	return pp, nil
+}
+
+// The caller should hold the lock.
+func (a *Association) handleForwardTSN(c *chunkForwardTSN) []*packet {
+	a.log.Tracef("[%s] FwdTSN: %s", a.name, c.String())
+
+	if !a.useForwardTSN {
+		a.log.Warn("[%s] received FwdTSN but not enabled")
+		// Return an error chunk
+		cerr := &chunkError{
+			errorCauses: []errorCause{&errorCauseUnrecognizedChunkType{}},
+		}
+		outbound := &packet{}
+		outbound.verificationTag = a.peerVerificationTag
+		outbound.sourcePort = a.sourcePort
+		outbound.destinationPort = a.destinationPort
+		outbound.chunks = []chunk{cerr}
+		return []*packet{outbound}
+	}
+
+	// From RFC 3758 Sec 3.6:
+	//   Note, if the "New Cumulative TSN" value carried in the arrived
+	//   FORWARD TSN chunk is found to be behind or at the current cumulative
+	//   TSN point, the data receiver MUST treat this FORWARD TSN as out-of-
+	//   date and MUST NOT update its Cumulative TSN.  The receiver SHOULD
+	//   send a SACK to its peer (the sender of the FORWARD TSN) since such a
+	//   duplicate may indicate the previous SACK was lost in the network.
+
+	a.log.Tracef("[%s] should send ack? newCumTSN=%d peerLastTSN=%d\n",
+		a.name, c.newCumulativeTSN, a.peerLastTSN)
+	if sna32LTE(c.newCumulativeTSN, a.peerLastTSN) {
+		a.log.Tracef("[%s] sending ack on Forward TSN", a.name)
+		a.ackState = ackStateImmediate
+		a.ackTimer.stop()
+		a.awakeWriteLoop()
+		return nil
+	}
+
+	// From RFC 3758 Sec 3.6:
+	//   the receiver MUST perform the same TSN handling, including duplicate
+	//   detection, gap detection, SACK generation, cumulative TSN
+	//   advancement, etc. as defined in RFC 2960 [2]---with the following
+	//   exceptions and additions.
+
+	//   When a FORWARD TSN chunk arrives, the data receiver MUST first update
+	//   its cumulative TSN point to the value carried in the FORWARD TSN
+	//   chunk,
+
+	// Advance peerLastTSN
+	for sna32LT(a.peerLastTSN, c.newCumulativeTSN) {
+		a.payloadQueue.pop(a.peerLastTSN + 1) // may not exist
+		a.peerLastTSN++
+	}
+
+	// Report new peerLastTSN value and abandoned largest SSN value to
+	// corresponding streams so that the abandoned chunks can be removed
+	// from the reassemblyQueue.
+	for _, forwarded := range c.streams {
+		if s, ok := a.streams[forwarded.identifier]; ok {
+			s.handleForwardTSNForOrdered(forwarded.sequence)
+		}
+	}
+
+	// TSN may be forewared for unordered chunks. ForwardTSN chunk does not
+	// report which stream identifier it skipped for unordered chunks.
+	// Therefore, we need to broadcast this event to all existing streams for
+	// unordered chunks.
+	// See https://github.com/pion/sctp/issues/106
+	for _, s := range a.streams {
+		s.handleForwardTSNForUnordered(c.newCumulativeTSN)
+	}
+
+	return a.handlePeerLastTSNAndAcknowledgement(false)
+}
+
+func (a *Association) sendResetRequest(streamIdentifier uint16) error {
+	a.lock.Lock()
+	defer a.lock.Unlock()
+
+	state := a.getState()
+	if state != established {
+		return errors.Errorf("sending reset packet in non-established state: state=%s",
+			getAssociationStateString(state))
+	}
+
+	// Create DATA chunk which only contains valid stream identifier with
+	// nil userData and use it as a EOS from the stream.
+	c := &chunkPayloadData{
+		streamIdentifier:  streamIdentifier,
+		beginningFragment: true,
+		endingFragment:    true,
+		userData:          nil,
+	}
+
+	a.pendingQueue.push(c)
+	a.awakeWriteLoop()
+	return nil
+}
+
+// The caller should hold the lock.
+func (a *Association) handleReconfigParam(raw param) (*packet, error) {
+	switch p := raw.(type) {
+	case *paramOutgoingResetRequest:
+		a.reconfigRequests[p.reconfigRequestSequenceNumber] = p
+		resp := a.resetStreamsIfAny(p)
+		if resp != nil {
+			return resp, nil
+		}
+		return nil, nil
+
+	case *paramReconfigResponse:
+		delete(a.reconfigs, p.reconfigResponseSequenceNumber)
+		if len(a.reconfigs) == 0 {
+			a.tReconfig.stop()
+		}
+		return nil, nil
+	default:
+		return nil, errors.Errorf("unexpected parameter type %T", p)
+	}
+}
+
+// The caller should hold the lock.
+func (a *Association) resetStreamsIfAny(p *paramOutgoingResetRequest) *packet {
+	result := reconfigResultSuccessPerformed
+	if sna32LTE(p.senderLastTSN, a.peerLastTSN) {
+		a.log.Debugf("[%s] resetStream(): senderLastTSN=%d <= peerLastTSN=%d",
+			a.name, p.senderLastTSN, a.peerLastTSN)
+		for _, id := range p.streamIdentifiers {
+			s, ok := a.streams[id]
+			if !ok {
+				continue
+			}
+			a.unregisterStream(s, io.EOF)
+		}
+		delete(a.reconfigRequests, p.reconfigRequestSequenceNumber)
+	} else {
+		a.log.Debugf("[%s] resetStream(): senderLastTSN=%d > peerLastTSN=%d",
+			a.name, p.senderLastTSN, a.peerLastTSN)
+		result = reconfigResultInProgress
+	}
+
+	return a.createPacket([]chunk{&chunkReconfig{
+		paramA: &paramReconfigResponse{
+			reconfigResponseSequenceNumber: p.reconfigRequestSequenceNumber,
+			result:                         result,
+		},
+	}})
+}
+
+// Move the chunk peeked with a.pendingQueue.peek() to the inflightQueue.
+// The caller should hold the lock.
+func (a *Association) movePendingDataChunkToInflightQueue(c *chunkPayloadData) {
+	if err := a.pendingQueue.pop(c); err != nil {
+		a.log.Errorf("[%s] failed to pop from pending queue: %s", a.name, err.Error())
+	}
+
+	// Mark all fragements are in-flight now
+	if c.endingFragment {
+		c.setAllInflight()
+	}
+
+	// Assign TSN
+	c.tsn = a.generateNextTSN()
+
+	c.since = time.Now() // use to calculate RTT and also for maxPacketLifeTime
+	c.nSent = 1          // being sent for the first time
+
+	a.checkPartialReliabilityStatus(c)
+
+	a.log.Tracef("[%s] sending ppi=%d tsn=%d ssn=%d sent=%d len=%d (%v,%v)",
+		a.name, c.payloadType, c.tsn, c.streamSequenceNumber, c.nSent, len(c.userData), c.beginningFragment, c.endingFragment)
+
+	// Push it into the inflightQueue
+	a.inflightQueue.pushNoCheck(c)
+}
+
+// popPendingDataChunksToSend pops chunks from the pending queues as many as
+// the cwnd and rwnd allows to send.
+// The caller should hold the lock.
+func (a *Association) popPendingDataChunksToSend() ([]*chunkPayloadData, []uint16) {
+	chunks := []*chunkPayloadData{}
+	var sisToReset []uint16 // stream identifieres to reset
+
+	if a.pendingQueue.size() > 0 {
+		// RFC 4960 sec 6.1.  Transmission of DATA Chunks
+		//   A) At any given time, the data sender MUST NOT transmit new data to
+		//      any destination transport address if its peer's rwnd indicates
+		//      that the peer has no buffer space (i.e., rwnd is 0; see Section
+		//      6.2.1).  However, regardless of the value of rwnd (including if it
+		//      is 0), the data sender can always have one DATA chunk in flight to
+		//      the receiver if allowed by cwnd (see rule B, below).
+
+		for {
+			c := a.pendingQueue.peek()
+			if c == nil {
+				break // no more pending data
+			}
+
+			dataLen := uint32(len(c.userData))
+			if dataLen == 0 {
+				sisToReset = append(sisToReset, c.streamIdentifier)
+				err := a.pendingQueue.pop(c)
+				if err != nil {
+					a.log.Errorf("failed to pop from pending queue: %s", err.Error())
+				}
+				continue
+			}
+
+			if uint32(a.inflightQueue.getNumBytes())+dataLen > a.cwnd {
+				break // would exceeds cwnd
+			}
+
+			if dataLen > a.rwnd {
+				break // no more rwnd
+			}
+
+			a.rwnd -= dataLen
+
+			a.movePendingDataChunkToInflightQueue(c)
+			chunks = append(chunks, c)
+		}
+
+		// the data sender can always have one DATA chunk in flight to the receiver
+		if len(chunks) == 0 && a.inflightQueue.size() == 0 {
+			// Send zero window probe
+			c := a.pendingQueue.peek()
+			if c != nil {
+				a.movePendingDataChunkToInflightQueue(c)
+				chunks = append(chunks, c)
+			}
+		}
+	}
+
+	return chunks, sisToReset
+}
+
+// bundleDataChunksIntoPackets packs DATA chunks into packets. It tries to bundle
+// DATA chunks into a packet so long as the resulting packet size does not exceed
+// the path MTU.
+// The caller should hold the lock.
+func (a *Association) bundleDataChunksIntoPackets(chunks []*chunkPayloadData) []*packet {
+	packets := []*packet{}
+	chunksToSend := []chunk{}
+	bytesInPacket := int(commonHeaderSize)
+
+	for _, c := range chunks {
+		// RFC 4960 sec 6.1.  Transmission of DATA Chunks
+		//   Multiple DATA chunks committed for transmission MAY be bundled in a
+		//   single packet.  Furthermore, DATA chunks being retransmitted MAY be
+		//   bundled with new DATA chunks, as long as the resulting packet size
+		//   does not exceed the path MTU.
+		if bytesInPacket+len(c.userData) > int(a.mtu) {
+			packets = append(packets, a.createPacket(chunksToSend))
+			chunksToSend = []chunk{}
+			bytesInPacket = int(commonHeaderSize)
+		}
+
+		chunksToSend = append(chunksToSend, c)
+		bytesInPacket += int(dataChunkHeaderSize) + len(c.userData)
+	}
+
+	if len(chunksToSend) > 0 {
+		packets = append(packets, a.createPacket(chunksToSend))
+	}
+
+	return packets
+}
+
+// sendPayloadData sends the data chunks.
+func (a *Association) sendPayloadData(chunks []*chunkPayloadData) error {
+	a.lock.Lock()
+	defer a.lock.Unlock()
+
+	state := a.getState()
+	if state != established {
+		return errors.Errorf("sending payload data in non-established state: state=%s",
+			getAssociationStateString(state))
+	}
+
+	// Push the chunks into the pending queue first.
+	for _, c := range chunks {
+		a.pendingQueue.push(c)
+	}
+
+	a.awakeWriteLoop()
+	return nil
+}
+
+// The caller should hold the lock.
+func (a *Association) checkPartialReliabilityStatus(c *chunkPayloadData) {
+	if !a.useForwardTSN {
+		return
+	}
+
+	// draft-ietf-rtcweb-data-protocol-09.txt section 6
+	//	6.  Procedures
+	//		All Data Channel Establishment Protocol messages MUST be sent using
+	//		ordered delivery and reliable transmission.
+	//
+	if c.payloadType == PayloadTypeWebRTCDCEP {
+		return
+	}
+
+	// PR-SCTP
+	if s, ok := a.streams[c.streamIdentifier]; ok {
+		s.lock.RLock()
+		if s.reliabilityType == ReliabilityTypeRexmit {
+			if c.nSent >= s.reliabilityValue {
+				c.setAbandoned(true)
+				a.log.Tracef("[%s] marked as abandoned: tsn=%d ppi=%d (remix: %d)", a.name, c.tsn, c.payloadType, c.nSent)
+			}
+		} else if s.reliabilityType == ReliabilityTypeTimed {
+			elapsed := int64(time.Since(c.since).Seconds() * 1000)
+			if elapsed >= int64(s.reliabilityValue) {
+				c.setAbandoned(true)
+				a.log.Tracef("[%s] marked as abandoned: tsn=%d ppi=%d (timed: %d)", a.name, c.tsn, c.payloadType, elapsed)
+			}
+		}
+		s.lock.RUnlock()
+	} else {
+		a.log.Errorf("[%s] stream %d not found)", a.name, c.streamIdentifier)
+	}
+}
+
+// getDataPacketsToRetransmit is called when T3-rtx is timed out and retransmit outstanding data chunks
+// that are not acked or abandoned yet.
+// The caller should hold the lock.
+func (a *Association) getDataPacketsToRetransmit() []*packet {
+	awnd := min32(a.cwnd, a.rwnd)
+	chunks := []*chunkPayloadData{}
+	var bytesToSend int
+	var done bool
+
+	for i := 0; !done; i++ {
+		c, ok := a.inflightQueue.get(a.cumulativeTSNAckPoint + uint32(i) + 1)
+		if !ok {
+			break // end of pending data
+		}
+
+		if !c.retransmit {
+			continue
+		}
+
+		if i == 0 && int(a.rwnd) < len(c.userData) {
+			// Send it as a zero window probe
+			done = true
+		} else if bytesToSend+len(c.userData) > int(awnd) {
+			break
+		}
+
+		// reset the retransmit flag not to retransmit again before the next
+		// t3-rtx timer fires
+		c.retransmit = false
+		bytesToSend += len(c.userData)
+
+		c.nSent++
+
+		a.checkPartialReliabilityStatus(c)
+
+		a.log.Tracef("[%s] retransmitting tsn=%d ssn=%d sent=%d", a.name, c.tsn, c.streamSequenceNumber, c.nSent)
+
+		chunks = append(chunks, c)
+	}
+
+	return a.bundleDataChunksIntoPackets(chunks)
+}
+
+// generateNextTSN returns the myNextTSN and increases it. The caller should hold the lock.
+// The caller should hold the lock.
+func (a *Association) generateNextTSN() uint32 {
+	tsn := a.myNextTSN
+	a.myNextTSN++
+	return tsn
+}
+
+// generateNextRSN returns the myNextRSN and increases it. The caller should hold the lock.
+// The caller should hold the lock.
+func (a *Association) generateNextRSN() uint32 {
+	rsn := a.myNextRSN
+	a.myNextRSN++
+	return rsn
+}
+
+func (a *Association) createSelectiveAckChunk() *chunkSelectiveAck {
+	sack := &chunkSelectiveAck{}
+	sack.cumulativeTSNAck = a.peerLastTSN
+	sack.advertisedReceiverWindowCredit = a.getMyReceiverWindowCredit()
+	sack.duplicateTSN = a.payloadQueue.popDuplicates()
+	sack.gapAckBlocks = a.payloadQueue.getGapAckBlocks(a.peerLastTSN)
+	return sack
+}
+
+func pack(p *packet) []*packet {
+	return []*packet{p}
+}
+
+func (a *Association) handleChunkStart() {
+	a.lock.Lock()
+	defer a.lock.Unlock()
+
+	a.delayedAckTriggered = false
+	a.immediateAckTriggered = false
+}
+
+func (a *Association) handleChunkEnd() {
+	a.lock.Lock()
+	defer a.lock.Unlock()
+
+	if a.immediateAckTriggered {
+		// Send SACK now!
+		a.ackState = ackStateImmediate
+		a.ackTimer.stop()
+		a.awakeWriteLoop()
+	} else if a.delayedAckTriggered {
+		// Will send delayed ack in the next ack timeout
+		a.ackState = ackStateDelay
+		a.ackTimer.start()
+	}
+}
+
+func (a *Association) handleChunk(p *packet, c chunk) error {
+	a.lock.Lock()
+	defer a.lock.Unlock()
+
+	var packets []*packet
+	var err error
+
+	if _, err = c.check(); err != nil {
+		a.log.Errorf("[ %s ] failed validating chunk: %s ", a.name, err)
+		return nil
+	}
+
+	switch c := c.(type) {
+	case *chunkInit:
+		packets, err = a.handleInit(p, c)
+
+	case *chunkInitAck:
+		err = a.handleInitAck(p, c)
+
+	case *chunkAbort:
+		var errStr string
+		for _, e := range c.errorCauses {
+			errStr += fmt.Sprintf("(%s)", e)
+		}
+		return fmt.Errorf("[%s] %w: %s", a.name, errChunk, errStr)
+
+	case *chunkError:
+		var errStr string
+		for _, e := range c.errorCauses {
+			errStr += fmt.Sprintf("(%s)", e)
+		}
+		a.log.Debugf("[%s] Error chunk, with following errors: %s", a.name, errStr)
+
+	case *chunkHeartbeat:
+		packets = a.handleHeartbeat(c)
+
+	case *chunkCookieEcho:
+		packets = a.handleCookieEcho(c)
+
+	case *chunkCookieAck:
+		a.handleCookieAck()
+
+	case *chunkPayloadData:
+		packets = a.handleData(c)
+
+	case *chunkSelectiveAck:
+		err = a.handleSack(c)
+
+	case *chunkReconfig:
+		packets, err = a.handleReconfig(c)
+
+	case *chunkForwardTSN:
+		packets = a.handleForwardTSN(c)
+
+	default:
+		err = errors.Errorf("unhandled chunk type")
+	}
+
+	// Log and return, the only condition that is fatal is a ABORT chunk
+	if err != nil {
+		a.log.Errorf("Failed to handle chunk: %v", err)
+		return nil
+	}
+
+	if len(packets) > 0 {
+		a.controlQueue.pushAll(packets)
+		a.awakeWriteLoop()
+	}
+
+	return nil
+}
+
+func (a *Association) onRetransmissionTimeout(id int, nRtos uint) {
+	a.lock.Lock()
+	defer a.lock.Unlock()
+
+	if id == timerT1Init {
+		err := a.sendInit()
+		if err != nil {
+			a.log.Debugf("[%s] failed to retransmit init (nRtos=%d): %v", a.name, nRtos, err)
+		}
+		return
+	}
+
+	if id == timerT1Cookie {
+		err := a.sendCookieEcho()
+		if err != nil {
+			a.log.Debugf("[%s] failed to retransmit cookie-echo (nRtos=%d): %v", a.name, nRtos, err)
+		}
+		return
+	}
+
+	if id == timerT3RTX {
+		a.stats.incT3Timeouts()
+
+		// RFC 4960 sec 6.3.3
+		//  E1)  For the destination address for which the timer expires, adjust
+		//       its ssthresh with rules defined in Section 7.2.3 and set the
+		//       cwnd <- MTU.
+		// RFC 4960 sec 7.2.3
+		//   When the T3-rtx timer expires on an address, SCTP should perform slow
+		//   start by:
+		//      ssthresh = max(cwnd/2, 4*MTU)
+		//      cwnd = 1*MTU
+
+		a.ssthresh = max32(a.cwnd/2, 4*a.mtu)
+		a.cwnd = a.mtu
+		a.log.Tracef("[%s] updated cwnd=%d ssthresh=%d inflight=%d (RTO)",
+			a.name, a.cwnd, a.ssthresh, a.inflightQueue.getNumBytes())
+
+		// RFC 3758 sec 3.5
+		//  A5) Any time the T3-rtx timer expires, on any destination, the sender
+		//  SHOULD try to advance the "Advanced.Peer.Ack.Point" by following
+		//  the procedures outlined in C2 - C5.
+		if a.useForwardTSN {
+			// RFC 3758 Sec 3.5 C2
+			for i := a.advancedPeerTSNAckPoint + 1; ; i++ {
+				c, ok := a.inflightQueue.get(i)
+				if !ok {
+					break
+				}
+				if !c.abandoned() {
+					break
+				}
+				a.advancedPeerTSNAckPoint = i
+			}
+
+			// RFC 3758 Sec 3.5 C3
+			if sna32GT(a.advancedPeerTSNAckPoint, a.cumulativeTSNAckPoint) {
+				a.willSendForwardTSN = true
+			}
+		}
+
+		a.log.Debugf("[%s] T3-rtx timed out: nRtos=%d cwnd=%d ssthresh=%d", a.name, nRtos, a.cwnd, a.ssthresh)
+
+		/*
+			a.log.Debugf("   - advancedPeerTSNAckPoint=%d", a.advancedPeerTSNAckPoint)
+			a.log.Debugf("   - cumulativeTSNAckPoint=%d", a.cumulativeTSNAckPoint)
+			a.inflightQueue.updateSortedKeys()
+			for i, tsn := range a.inflightQueue.sorted {
+				if c, ok := a.inflightQueue.get(tsn); ok {
+					a.log.Debugf("   - [%d] tsn=%d acked=%v abandoned=%v (%v,%v) len=%d",
+						i, c.tsn, c.acked, c.abandoned(), c.beginningFragment, c.endingFragment, len(c.userData))
+				}
+			}
+		*/
+
+		a.inflightQueue.markAllToRetrasmit()
+		a.awakeWriteLoop()
+
+		return
+	}
+
+	if id == timerReconfig {
+		a.willRetransmitReconfig = true
+		a.awakeWriteLoop()
+	}
+}
+
+func (a *Association) onRetransmissionFailure(id int) {
+	a.lock.Lock()
+	defer a.lock.Unlock()
+
+	if id == timerT1Init {
+		a.log.Errorf("[%s] retransmission failure: T1-init", a.name)
+		a.handshakeCompletedCh <- errors.Errorf("handshake failed (INIT ACK)")
+		return
+	}
+
+	if id == timerT1Cookie {
+		a.log.Errorf("[%s] retransmission failure: T1-cookie", a.name)
+		a.handshakeCompletedCh <- errors.Errorf("handshake failed (COOKIE ECHO)")
+		return
+	}
+
+	if id == timerT3RTX {
+		// T3-rtx timer will not fail by design
+		// Justifications:
+		//  * ICE would fail if the connectivity is lost
+		//  * WebRTC spec is not clear how this incident should be reported to ULP
+		a.log.Errorf("[%s] retransmission failure: T3-rtx (DATA)", a.name)
+		return
+	}
+}
+
+func (a *Association) onAckTimeout() {
+	a.lock.Lock()
+	defer a.lock.Unlock()
+
+	a.log.Tracef("[%s] ack timed out (ackState: %d)", a.name, a.ackState)
+	a.stats.incAckTimeouts()
+
+	a.ackState = ackStateImmediate
+	a.awakeWriteLoop()
+}
+
+// bufferedAmount returns total amount (in bytes) of currently buffered user data.
+// This is used only by testing.
+func (a *Association) bufferedAmount() int {
+	a.lock.RLock()
+	defer a.lock.RUnlock()
+
+	return a.pendingQueue.getNumBytes() + a.inflightQueue.getNumBytes()
+}
+
+// MaxMessageSize returns the maximum message size you can send.
+func (a *Association) MaxMessageSize() uint32 {
+	return atomic.LoadUint32(&a.maxMessageSize)
+}
+
+// SetMaxMessageSize sets the maximum message size you can send.
+func (a *Association) SetMaxMessageSize(maxMsgSize uint32) {
+	atomic.StoreUint32(&a.maxMessageSize, maxMsgSize)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/association_stats.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/association_stats.go
new file mode 100644
index 000000000..4ccb7be99
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/association_stats.go
@@ -0,0 +1,61 @@
+package sctp
+
+import (
+	"sync/atomic"
+)
+
+type associationStats struct {
+	nDATAs       uint64
+	nSACKs       uint64
+	nT3Timeouts  uint64
+	nAckTimeouts uint64
+	nFastRetrans uint64
+}
+
+func (s *associationStats) incDATAs() {
+	atomic.AddUint64(&s.nDATAs, 1)
+}
+
+func (s *associationStats) getNumDATAs() uint64 {
+	return atomic.LoadUint64(&s.nDATAs)
+}
+
+func (s *associationStats) incSACKs() {
+	atomic.AddUint64(&s.nSACKs, 1)
+}
+
+func (s *associationStats) getNumSACKs() uint64 {
+	return atomic.LoadUint64(&s.nSACKs)
+}
+
+func (s *associationStats) incT3Timeouts() {
+	atomic.AddUint64(&s.nT3Timeouts, 1)
+}
+
+func (s *associationStats) getNumT3Timeouts() uint64 {
+	return atomic.LoadUint64(&s.nT3Timeouts)
+}
+
+func (s *associationStats) incAckTimeouts() {
+	atomic.AddUint64(&s.nAckTimeouts, 1)
+}
+
+func (s *associationStats) getNumAckTimeouts() uint64 {
+	return atomic.LoadUint64(&s.nAckTimeouts)
+}
+
+func (s *associationStats) incFastRetrans() {
+	atomic.AddUint64(&s.nFastRetrans, 1)
+}
+
+func (s *associationStats) getNumFastRetrans() uint64 {
+	return atomic.LoadUint64(&s.nFastRetrans)
+}
+
+func (s *associationStats) reset() {
+	atomic.StoreUint64(&s.nDATAs, 0)
+	atomic.StoreUint64(&s.nSACKs, 0)
+	atomic.StoreUint64(&s.nT3Timeouts, 0)
+	atomic.StoreUint64(&s.nAckTimeouts, 0)
+	atomic.StoreUint64(&s.nFastRetrans, 0)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk.go
new file mode 100644
index 000000000..ec47da17a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk.go
@@ -0,0 +1,9 @@
+package sctp
+
+type chunk interface {
+	unmarshal(raw []byte) error
+	marshal() ([]byte, error)
+	check() (bool, error)
+
+	valueLength() int
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_abort.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_abort.go
new file mode 100644
index 000000000..9fd46921d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_abort.go
@@ -0,0 +1,88 @@
+package sctp // nolint:dupl
+
+import (
+	"fmt"
+
+	"github.com/pkg/errors"
+)
+
+/*
+Abort represents an SCTP Chunk of type ABORT
+
+The ABORT chunk is sent to the peer of an association to close the
+association.  The ABORT chunk may contain Cause Parameters to inform
+the receiver about the reason of the abort.  DATA chunks MUST NOT be
+bundled with ABORT.  Control chunks (except for INIT, INIT ACK, and
+SHUTDOWN COMPLETE) MAY be bundled with an ABORT, but they MUST be
+placed before the ABORT in the SCTP packet or they will be ignored by
+the receiver.
+
+ 0                   1                   2                   3
+ 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|   Type = 6    |Reserved     |T|           Length              |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                                                               |
+|                   zero or more Error Causes                   |
+|                                                               |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+*/
+type chunkAbort struct {
+	chunkHeader
+	errorCauses []errorCause
+}
+
+func (a *chunkAbort) unmarshal(raw []byte) error {
+	if err := a.chunkHeader.unmarshal(raw); err != nil {
+		return err
+	}
+
+	if a.typ != ctAbort {
+		return errors.Errorf("ChunkType is not of type ABORT, actually is %s", a.typ.String())
+	}
+
+	offset := chunkHeaderSize
+	for {
+		if len(raw)-offset < 4 {
+			break
+		}
+
+		e, err := buildErrorCause(raw[offset:])
+		if err != nil {
+			return errors.Wrap(err, "Failed build Abort Chunk")
+		}
+
+		offset += int(e.length())
+		a.errorCauses = append(a.errorCauses, e)
+	}
+	return nil
+}
+
+func (a *chunkAbort) marshal() ([]byte, error) {
+	a.chunkHeader.typ = ctAbort
+	a.flags = 0x00
+	a.raw = []byte{}
+	for _, ec := range a.errorCauses {
+		raw, err := ec.marshal()
+		if err != nil {
+			return nil, err
+		}
+		a.raw = append(a.raw, raw...)
+	}
+	return a.chunkHeader.marshal()
+}
+
+func (a *chunkAbort) check() (abort bool, err error) {
+	return false, nil
+}
+
+// String makes chunkAbort printable
+func (a *chunkAbort) String() string {
+	res := a.chunkHeader.String()
+
+	for _, cause := range a.errorCauses {
+		res += fmt.Sprintf("\n - %s", cause)
+	}
+
+	return res
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_cookie_ack.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_cookie_ack.go
new file mode 100644
index 000000000..83b6f71a2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_cookie_ack.go
@@ -0,0 +1,44 @@
+package sctp
+
+import (
+	"github.com/pkg/errors"
+)
+
+/*
+chunkCookieAck represents an SCTP Chunk of type chunkCookieAck
+
+ 0                   1                   2                   3
+ 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|   Type = 11   |Chunk  Flags   |     Length = 4                |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+*/
+type chunkCookieAck struct {
+	chunkHeader
+}
+
+func (c *chunkCookieAck) unmarshal(raw []byte) error {
+	if err := c.chunkHeader.unmarshal(raw); err != nil {
+		return err
+	}
+
+	if c.typ != ctCookieAck {
+		return errors.Errorf("ChunkType is not of type COOKIEACK, actually is %s", c.typ.String())
+	}
+
+	return nil
+}
+
+func (c *chunkCookieAck) marshal() ([]byte, error) {
+	c.chunkHeader.typ = ctCookieAck
+	return c.chunkHeader.marshal()
+}
+
+func (c *chunkCookieAck) check() (abort bool, err error) {
+	return false, nil
+}
+
+// String makes chunkCookieAck printable
+func (c *chunkCookieAck) String() string {
+	return c.chunkHeader.String()
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_cookie_echo.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_cookie_echo.go
new file mode 100644
index 000000000..3f0ed3655
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_cookie_echo.go
@@ -0,0 +1,46 @@
+package sctp
+
+import (
+	"github.com/pkg/errors"
+)
+
+/*
+CookieEcho represents an SCTP Chunk of type CookieEcho
+
+ 0                   1                   2                   3
+ 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|   Type = 10   |Chunk  Flags   |         Length                |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                     Cookie                                    |
+|                                                               |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+*/
+type chunkCookieEcho struct {
+	chunkHeader
+	cookie []byte
+}
+
+func (c *chunkCookieEcho) unmarshal(raw []byte) error {
+	if err := c.chunkHeader.unmarshal(raw); err != nil {
+		return err
+	}
+
+	if c.typ != ctCookieEcho {
+		return errors.Errorf("ChunkType is not of type COOKIEECHO, actually is %s", c.typ.String())
+	}
+	c.cookie = c.raw
+
+	return nil
+}
+
+func (c *chunkCookieEcho) marshal() ([]byte, error) {
+	c.chunkHeader.typ = ctCookieEcho
+	c.chunkHeader.raw = c.cookie
+	return c.chunkHeader.marshal()
+}
+
+func (c *chunkCookieEcho) check() (abort bool, err error) {
+	return false, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_error.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_error.go
new file mode 100644
index 000000000..eb29324cf
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_error.go
@@ -0,0 +1,95 @@
+package sctp // nolint:dupl
+
+import (
+	"fmt"
+
+	"github.com/pkg/errors"
+)
+
+/*
+   Operation Error (ERROR) (9)
+
+   An endpoint sends this chunk to its peer endpoint to notify it of
+   certain error conditions.  It contains one or more error causes.  An
+   Operation Error is not considered fatal in and of itself, but may be
+   used with an ERROR chunk to report a fatal condition.  It has the
+   following parameters:
+
+        0                   1                   2                   3
+        0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+       |   Type = 9    | Chunk  Flags  |           Length              |
+       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+       \                                                               \
+       /                    one or more Error Causes                   /
+       \                                                               \
+       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+   Chunk Flags: 8 bits
+
+      Set to 0 on transmit and ignored on receipt.
+
+   Length: 16 bits (unsigned integer)
+
+      Set to the size of the chunk in bytes, including the chunk header
+      and all the Error Cause fields present.
+*/
+type chunkError struct {
+	chunkHeader
+	errorCauses []errorCause
+}
+
+func (a *chunkError) unmarshal(raw []byte) error {
+	if err := a.chunkHeader.unmarshal(raw); err != nil {
+		return err
+	}
+
+	if a.typ != ctError {
+		return errors.Errorf("ChunkType is not of type ctError, actually is %s", a.typ.String())
+	}
+
+	offset := chunkHeaderSize
+	for {
+		if len(raw)-offset < 4 {
+			break
+		}
+
+		e, err := buildErrorCause(raw[offset:])
+		if err != nil {
+			return errors.Wrap(err, "Failed build Error Chunk")
+		}
+
+		offset += int(e.length())
+		a.errorCauses = append(a.errorCauses, e)
+	}
+	return nil
+}
+
+func (a *chunkError) marshal() ([]byte, error) {
+	a.chunkHeader.typ = ctError
+	a.flags = 0x00
+	a.raw = []byte{}
+	for _, ec := range a.errorCauses {
+		raw, err := ec.marshal()
+		if err != nil {
+			return nil, err
+		}
+		a.raw = append(a.raw, raw...)
+	}
+	return a.chunkHeader.marshal()
+}
+
+func (a *chunkError) check() (abort bool, err error) {
+	return false, nil
+}
+
+// String makes chunkError printable
+func (a *chunkError) String() string {
+	res := a.chunkHeader.String()
+
+	for _, cause := range a.errorCauses {
+		res += fmt.Sprintf("\n - %s", cause)
+	}
+
+	return res
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_forward_tsn.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_forward_tsn.go
new file mode 100644
index 000000000..f6ff357f1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_forward_tsn.go
@@ -0,0 +1,145 @@
+package sctp
+
+import (
+	"encoding/binary"
+	"fmt"
+
+	"github.com/pkg/errors"
+)
+
+// This chunk shall be used by the data sender to inform the data
+// receiver to adjust its cumulative received TSN point forward because
+// some missing TSNs are associated with data chunks that SHOULD NOT be
+// transmitted or retransmitted by the sender.
+//
+//  0                   1                   2                   3
+//  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |   Type = 192  |  Flags = 0x00 |        Length = Variable      |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |                      New Cumulative TSN                       |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |         Stream-1              |       Stream Sequence-1       |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// \                                                               /
+// /                                                               \
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |         Stream-N              |       Stream Sequence-N       |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+type chunkForwardTSN struct {
+	chunkHeader
+
+	// This indicates the new cumulative TSN to the data receiver.  Upon
+	// the reception of this value, the data receiver MUST consider
+	// any missing TSNs earlier than or equal to this value as received,
+	// and stop reporting them as gaps in any subsequent SACKs.
+	newCumulativeTSN uint32
+
+	streams []chunkForwardTSNStream
+}
+
+const (
+	newCumulativeTSNLength = 4
+	forwardTSNStreamLength = 4
+)
+
+var errMarshalStreamFailed = errors.New("failed to marshal stream")
+
+func (c *chunkForwardTSN) unmarshal(raw []byte) error {
+	if err := c.chunkHeader.unmarshal(raw); err != nil {
+		return err
+	}
+
+	if len(c.raw) < newCumulativeTSNLength {
+		return errors.New("chunk to short")
+	}
+
+	c.newCumulativeTSN = binary.BigEndian.Uint32(c.raw[0:])
+
+	offset := newCumulativeTSNLength
+	remaining := len(c.raw) - offset
+	for remaining > 0 {
+		s := chunkForwardTSNStream{}
+
+		if err := s.unmarshal(c.raw[offset:]); err != nil {
+			return fmt.Errorf("failed to unmarshal stream: %w", err)
+		}
+
+		c.streams = append(c.streams, s)
+
+		offset += s.length()
+		remaining -= s.length()
+	}
+
+	return nil
+}
+
+func (c *chunkForwardTSN) marshal() ([]byte, error) {
+	out := make([]byte, newCumulativeTSNLength)
+	binary.BigEndian.PutUint32(out[0:], c.newCumulativeTSN)
+
+	for _, s := range c.streams {
+		b, err := s.marshal()
+		if err != nil {
+			return nil, fmt.Errorf("%w: %v", errMarshalStreamFailed, err)
+		}
+		out = append(out, b...)
+	}
+
+	c.typ = ctForwardTSN
+	c.raw = out
+	return c.chunkHeader.marshal()
+}
+
+func (c *chunkForwardTSN) check() (abort bool, err error) {
+	return true, nil
+}
+
+// String makes chunkForwardTSN printable
+func (c *chunkForwardTSN) String() string {
+	res := fmt.Sprintf("New Cumulative TSN: %d\n", c.newCumulativeTSN)
+	for _, s := range c.streams {
+		res += fmt.Sprintf(" - si=%d, ssn=%d\n", s.identifier, s.sequence)
+	}
+	return res
+}
+
+type chunkForwardTSNStream struct {
+	// This field holds a stream number that was skipped by this
+	// FWD-TSN.
+	identifier uint16
+
+	// This field holds the sequence number associated with the stream
+	// that was skipped.  The stream sequence field holds the largest
+	// stream sequence number in this stream being skipped.  The receiver
+	// of the FWD-TSN's can use the Stream-N and Stream Sequence-N fields
+	// to enable delivery of any stranded TSN's that remain on the stream
+	// re-ordering queues.  This field MUST NOT report TSN's corresponding
+	// to DATA chunks that are marked as unordered.  For ordered DATA
+	// chunks this field MUST be filled in.
+	sequence uint16
+}
+
+func (s *chunkForwardTSNStream) length() int {
+	return forwardTSNStreamLength
+}
+
+func (s *chunkForwardTSNStream) unmarshal(raw []byte) error {
+	if len(raw) < forwardTSNStreamLength {
+		return errors.New("stream to short")
+	}
+	s.identifier = binary.BigEndian.Uint16(raw[0:])
+	s.sequence = binary.BigEndian.Uint16(raw[2:])
+
+	return nil
+}
+
+func (s *chunkForwardTSNStream) marshal() ([]byte, error) { // nolint:unparam
+	out := make([]byte, forwardTSNStreamLength)
+
+	binary.BigEndian.PutUint16(out[0:], s.identifier)
+	binary.BigEndian.PutUint16(out[2:], s.sequence)
+
+	return out, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_heartbeat.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_heartbeat.go
new file mode 100644
index 000000000..f2026a408
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_heartbeat.go
@@ -0,0 +1,75 @@
+package sctp
+
+import (
+	"github.com/pkg/errors"
+)
+
+/*
+chunkHeartbeat represents an SCTP Chunk of type HEARTBEAT
+
+An endpoint should send this chunk to its peer endpoint to probe the
+reachability of a particular destination transport address defined in
+the present association.
+
+The parameter field contains the Heartbeat Information, which is a
+variable-length opaque data structure understood only by the sender.
+
+
+ 0                   1                   2                   3
+ 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|   Type = 4    | Chunk  Flags  |      Heartbeat Length         |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                                                               |
+|            Heartbeat Information TLV (Variable-Length)        |
+|                                                               |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+Defined as a variable-length parameter using the format described
+in Section 3.2.1, i.e.:
+
+Variable Parameters                  Status     Type Value
+-------------------------------------------------------------
+heartbeat Info                       Mandatory   1
+
+*/
+type chunkHeartbeat struct {
+	chunkHeader
+	params []param
+}
+
+func (h *chunkHeartbeat) unmarshal(raw []byte) error {
+	if err := h.chunkHeader.unmarshal(raw); err != nil {
+		return err
+	} else if h.typ != ctHeartbeat {
+		return errors.Errorf("ChunkType is not of type HEARTBEAT, actually is %s", h.typ.String())
+	}
+
+	if len(raw) <= chunkHeaderSize {
+		return errors.Errorf("Heartbeat is not long enough to contain Heartbeat Info %d", len(raw))
+	}
+
+	pType, err := parseParamType(raw[chunkHeaderSize:])
+	if err != nil {
+		return errors.Wrap(err, "failed to parse param type")
+	}
+	if pType != heartbeatInfo {
+		return errors.Errorf("Heartbeat should only have HEARTBEAT param, instead have %s", pType.String())
+	}
+
+	p, err := buildParam(pType, raw[chunkHeaderSize:])
+	if err != nil {
+		return errors.Wrap(err, "Failed unmarshalling param in Heartbeat Chunk")
+	}
+	h.params = append(h.params, p)
+
+	return nil
+}
+
+func (h *chunkHeartbeat) Marshal() ([]byte, error) {
+	return nil, errors.Errorf("Unimplemented")
+}
+
+func (h *chunkHeartbeat) check() (abort bool, err error) {
+	return false, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_heartbeat_ack.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_heartbeat_ack.go
new file mode 100644
index 000000000..ff840903e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_heartbeat_ack.go
@@ -0,0 +1,86 @@
+package sctp
+
+import (
+	"github.com/pkg/errors"
+)
+
+/*
+chunkHeartbeatAck represents an SCTP Chunk of type HEARTBEAT ACK
+
+An endpoint should send this chunk to its peer endpoint as a response
+to a HEARTBEAT chunk (see Section 8.3).  A HEARTBEAT ACK is always
+sent to the source IP address of the IP datagram containing the
+HEARTBEAT chunk to which this ack is responding.
+
+The parameter field contains a variable-length opaque data structure.
+
+ 0                   1                   2                   3
+ 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|   Type = 5    | Chunk  Flags  |    Heartbeat Ack Length       |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                                                               |
+|            Heartbeat Information TLV (Variable-Length)        |
+|                                                               |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+
+Defined as a variable-length parameter using the format described
+in Section 3.2.1, i.e.:
+
+Variable Parameters                  Status     Type Value
+-------------------------------------------------------------
+Heartbeat Info                       Mandatory   1
+
+*/
+type chunkHeartbeatAck struct {
+	chunkHeader
+	params []param
+}
+
+func (h *chunkHeartbeatAck) unmarshal(raw []byte) error {
+	return errors.Errorf("Unimplemented")
+}
+
+func (h *chunkHeartbeatAck) marshal() ([]byte, error) {
+	if len(h.params) != 1 {
+		return nil, errors.Errorf("Heartbeat Ack must have one param")
+	}
+
+	switch h.params[0].(type) {
+	case *paramHeartbeatInfo:
+		// ParamHeartbeatInfo is valid
+	default:
+		return nil, errors.Errorf("Heartbeat Ack must have one param, and it should be a HeartbeatInfo")
+	}
+
+	out := make([]byte, 0)
+	for idx, p := range h.params {
+		pp, err := p.marshal()
+		if err != nil {
+			return nil, errors.Wrap(err, "Unable to marshal parameter for Heartbeat Ack")
+		}
+
+		out = append(out, pp...)
+
+		// Chunks (including Type, Length, and Value fields) are padded out
+		// by the sender with all zero bytes to be a multiple of 4 bytes
+		// long.  This padding MUST NOT be more than 3 bytes in total.  The
+		// Chunk Length value does not include terminating padding of the
+		// chunk.  *However, it does include padding of any variable-length
+		// parameter except the last parameter in the chunk.*  The receiver
+		// MUST ignore the padding.
+		if idx != len(h.params)-1 {
+			out = padByte(out, getPadding(len(pp)))
+		}
+	}
+
+	h.chunkHeader.typ = ctHeartbeatAck
+	h.chunkHeader.raw = out
+
+	return h.chunkHeader.marshal()
+}
+
+func (h *chunkHeartbeatAck) check() (abort bool, err error) {
+	return false, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_init.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_init.go
new file mode 100644
index 000000000..65b9b1a4b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_init.go
@@ -0,0 +1,123 @@
+package sctp // nolint:dupl
+
+import (
+	"fmt"
+
+	"github.com/pkg/errors"
+)
+
+/*
+Init represents an SCTP Chunk of type INIT
+
+See chunkInitCommon for the fixed headers
+
+Variable Parameters                  Status     Type Value
+-------------------------------------------------------------
+IPv4 IP (Note 1)               Optional    5
+IPv6 IP (Note 1)               Optional    6
+Cookie Preservative                 Optional    9
+Reserved for ECN Capable (Note 2)   Optional    32768 (0x8000)
+Host Name IP (Note 3)          Optional    11
+Supported IP Types (Note 4)    Optional    12
+*/
+type chunkInit struct {
+	chunkHeader
+	chunkInitCommon
+}
+
+func (i *chunkInit) unmarshal(raw []byte) error {
+	if err := i.chunkHeader.unmarshal(raw); err != nil {
+		return err
+	}
+
+	if i.typ != ctInit {
+		return errors.Errorf("ChunkType is not of type INIT, actually is %s", i.typ.String())
+	} else if len(i.raw) < initChunkMinLength {
+		return errors.Errorf("Chunk Value isn't long enough for mandatory parameters exp: %d actual: %d", initChunkMinLength, len(i.raw))
+	}
+
+	// The Chunk Flags field in INIT is reserved, and all bits in it should
+	// be set to 0 by the sender and ignored by the receiver.  The sequence
+	// of parameters within an INIT can be processed in any order.
+	if i.flags != 0 {
+		return errors.New("ChunkType of type INIT flags must be all 0")
+	}
+
+	if err := i.chunkInitCommon.unmarshal(i.raw); err != nil {
+		return errors.Wrap(err, "Failed to unmarshal INIT body")
+	}
+
+	return nil
+}
+
+func (i *chunkInit) marshal() ([]byte, error) {
+	initShared, err := i.chunkInitCommon.marshal()
+	if err != nil {
+		return nil, errors.Wrap(err, "Failed marshaling INIT common data")
+	}
+
+	i.chunkHeader.typ = ctInit
+	i.chunkHeader.raw = initShared
+	return i.chunkHeader.marshal()
+}
+
+func (i *chunkInit) check() (abort bool, err error) {
+	// The receiver of the INIT (the responding end) records the value of
+	// the Initiate Tag parameter.  This value MUST be placed into the
+	// Verification Tag field of every SCTP packet that the receiver of
+	// the INIT transmits within this association.
+	//
+	// The Initiate Tag is allowed to have any value except 0.  See
+	// Section 5.3.1 for more on the selection of the tag value.
+	//
+	// If the value of the Initiate Tag in a received INIT chunk is found
+	// to be 0, the receiver MUST treat it as an error and close the
+	// association by transmitting an ABORT.
+	if i.initiateTag == 0 {
+		abort = true
+		return abort, errors.New("ChunkType of type INIT InitiateTag must not be 0")
+	}
+
+	// Defines the maximum number of streams the sender of this INIT
+	// chunk allows the peer end to create in this association.  The
+	// value 0 MUST NOT be used.
+	//
+	// Note: There is no negotiation of the actual number of streams but
+	// instead the two endpoints will use the min(requested, offered).
+	// See Section 5.1.1 for details.
+	//
+	// Note: A receiver of an INIT with the MIS value of 0 SHOULD abort
+	// the association.
+	if i.numInboundStreams == 0 {
+		abort = true
+		return abort, errors.New("INIT inbound stream request must be > 0")
+	}
+
+	// Defines the number of outbound streams the sender of this INIT
+	// chunk wishes to create in this association.  The value of 0 MUST
+	// NOT be used.
+	//
+	// Note: A receiver of an INIT with the OS value set to 0 SHOULD
+	// abort the association.
+
+	if i.numOutboundStreams == 0 {
+		abort = true
+		return abort, errors.New("INIT outbound stream request must be > 0")
+	}
+
+	// An SCTP receiver MUST be able to receive a minimum of 1500 bytes in
+	// one SCTP packet.  This means that an SCTP endpoint MUST NOT indicate
+	// less than 1500 bytes in its initial a_rwnd sent in the INIT or INIT
+	// ACK.
+	if i.advertisedReceiverWindowCredit < 1500 {
+		abort = true
+		return abort, errors.New("INIT Advertised Receiver Window Credit (a_rwnd) must be >= 1500")
+	}
+
+	return false, nil
+}
+
+// String makes chunkInit printable
+func (i *chunkInit) String() string {
+	return fmt.Sprintf("%s\n%s", i.chunkHeader, i.chunkInitCommon)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_init_ack.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_init_ack.go
new file mode 100644
index 000000000..551bcea7a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_init_ack.go
@@ -0,0 +1,126 @@
+package sctp // nolint:dupl
+
+import (
+	"fmt"
+
+	"github.com/pkg/errors"
+)
+
+/*
+chunkInitAck represents an SCTP Chunk of type INIT ACK
+
+See chunkInitCommon for the fixed headers
+
+Variable Parameters                  Status     Type Value
+-------------------------------------------------------------
+State Cookie                        Mandatory   7
+IPv4 IP (Note 1)               Optional    5
+IPv6 IP (Note 1)               Optional    6
+Unrecognized Parameter              Optional    8
+Reserved for ECN Capable (Note 2)   Optional    32768 (0x8000)
+Host Name IP (Note 3)          Optional    11<Paste>
+
+*/
+type chunkInitAck struct {
+	chunkHeader
+	chunkInitCommon
+}
+
+func (i *chunkInitAck) unmarshal(raw []byte) error {
+	if err := i.chunkHeader.unmarshal(raw); err != nil {
+		return err
+	}
+
+	if i.typ != ctInitAck {
+		return errors.Errorf("ChunkType is not of type INIT ACK, actually is %s", i.typ.String())
+	} else if len(i.raw) < initChunkMinLength {
+		return errors.Errorf("Chunk Value isn't long enough for mandatory parameters exp: %d actual: %d", initChunkMinLength, len(i.raw))
+	}
+
+	// The Chunk Flags field in INIT is reserved, and all bits in it should
+	// be set to 0 by the sender and ignored by the receiver.  The sequence
+	// of parameters within an INIT can be processed in any order.
+	if i.flags != 0 {
+		return errors.New("ChunkType of type INIT ACK flags must be all 0")
+	}
+
+	if err := i.chunkInitCommon.unmarshal(i.raw); err != nil {
+		return errors.Wrap(err, "Failed to unmarshal INIT body")
+	}
+
+	return nil
+}
+
+func (i *chunkInitAck) marshal() ([]byte, error) {
+	initShared, err := i.chunkInitCommon.marshal()
+	if err != nil {
+		return nil, errors.Wrap(err, "Failed marshaling INIT common data")
+	}
+
+	i.chunkHeader.typ = ctInitAck
+	i.chunkHeader.raw = initShared
+	return i.chunkHeader.marshal()
+}
+
+func (i *chunkInitAck) check() (abort bool, err error) {
+	// The receiver of the INIT ACK records the value of the Initiate Tag
+	// parameter.  This value MUST be placed into the Verification Tag
+	// field of every SCTP packet that the INIT ACK receiver transmits
+	// within this association.
+	//
+	// The Initiate Tag MUST NOT take the value 0.  See Section 5.3.1 for
+	// more on the selection of the Initiate Tag value.
+	//
+	// If the value of the Initiate Tag in a received INIT ACK chunk is
+	// found to be 0, the receiver MUST destroy the association
+	// discarding its TCB.  The receiver MAY send an ABORT for debugging
+	// purpose.
+	if i.initiateTag == 0 {
+		abort = true
+		return abort, errors.New("ChunkType of type INIT ACK InitiateTag must not be 0")
+	}
+
+	// Defines the maximum number of streams the sender of this INIT ACK
+	// chunk allows the peer end to create in this association.  The
+	// value 0 MUST NOT be used.
+	//
+	// Note: There is no negotiation of the actual number of streams but
+	// instead the two endpoints will use the min(requested, offered).
+	// See Section 5.1.1 for details.
+	//
+	// Note: A receiver of an INIT ACK with the MIS value set to 0 SHOULD
+	// destroy the association discarding its TCB.
+	if i.numInboundStreams == 0 {
+		abort = true
+		return abort, errors.New("INIT ACK inbound stream request must be > 0")
+	}
+
+	// Defines the number of outbound streams the sender of this INIT ACK
+	// chunk wishes to create in this association.  The value of 0 MUST
+	// NOT be used, and the value MUST NOT be greater than the MIS value
+	// sent in the INIT chunk.
+	//
+	// Note: A receiver of an INIT ACK with the OS value set to 0 SHOULD
+	// destroy the association discarding its TCB.
+
+	if i.numOutboundStreams == 0 {
+		abort = true
+		return abort, errors.New("INIT ACK outbound stream request must be > 0")
+	}
+
+	// An SCTP receiver MUST be able to receive a minimum of 1500 bytes in
+	// one SCTP packet.  This means that an SCTP endpoint MUST NOT indicate
+	// less than 1500 bytes in its initial a_rwnd sent in the INIT or INIT
+	// ACK.
+	if i.advertisedReceiverWindowCredit < 1500 {
+		abort = true
+		return abort, errors.New("INIT ACK Advertised Receiver Window Credit (a_rwnd) must be >= 1500")
+	}
+
+	return false, nil
+}
+
+// String makes chunkInitAck printable
+func (i *chunkInitAck) String() string {
+	return fmt.Sprintf("%s\n%s", i.chunkHeader, i.chunkInitCommon)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_init_common.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_init_common.go
new file mode 100644
index 000000000..f64be7865
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_init_common.go
@@ -0,0 +1,155 @@
+package sctp
+
+import (
+	"encoding/binary"
+	"fmt"
+
+	"github.com/pkg/errors"
+)
+
+/*
+chunkInitCommon represents an SCTP Chunk body of type INIT and INIT ACK
+
+ 0                   1                   2                   3
+ 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|   Type = 1    |  Chunk Flags  |      Chunk Length             |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                         Initiate Tag                          |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|           Advertised Receiver Window Credit (a_rwnd)          |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|  Number of Outbound Streams   |  Number of Inbound Streams    |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                          Initial TSN                          |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                                                               |
+|              Optional/Variable-Length Parameters              |
+|                                                               |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+The INIT chunk contains the following parameters.  Unless otherwise
+noted, each parameter MUST only be included once in the INIT chunk.
+
+Fixed Parameters                     Status
+----------------------------------------------
+Initiate Tag                        Mandatory
+Advertised Receiver Window Credit   Mandatory
+Number of Outbound Streams          Mandatory
+Number of Inbound Streams           Mandatory
+Initial TSN                         Mandatory
+*/
+
+type chunkInitCommon struct {
+	initiateTag                    uint32
+	advertisedReceiverWindowCredit uint32
+	numOutboundStreams             uint16
+	numInboundStreams              uint16
+	initialTSN                     uint32
+	params                         []param
+}
+
+const (
+	initChunkMinLength          = 16
+	initOptionalVarHeaderLength = 4
+)
+
+func (i *chunkInitCommon) unmarshal(raw []byte) error {
+	i.initiateTag = binary.BigEndian.Uint32(raw[0:])
+	i.advertisedReceiverWindowCredit = binary.BigEndian.Uint32(raw[4:])
+	i.numOutboundStreams = binary.BigEndian.Uint16(raw[8:])
+	i.numInboundStreams = binary.BigEndian.Uint16(raw[10:])
+	i.initialTSN = binary.BigEndian.Uint32(raw[12:])
+
+	// https://tools.ietf.org/html/rfc4960#section-3.2.1
+	//
+	// Chunk values of SCTP control chunks consist of a chunk-type-specific
+	// header of required fields, followed by zero or more parameters.  The
+	// optional and variable-length parameters contained in a chunk are
+	// defined in a Type-Length-Value format as shown below.
+	//
+	// 0                   1                   2                   3
+	// 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	// |          Parameter Type       |       Parameter Length        |
+	// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	// |                                                               |
+	// |                       Parameter Value                         |
+	// |                                                               |
+	// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+	offset := initChunkMinLength
+	remaining := len(raw) - offset
+	for remaining > 0 {
+		if remaining > initOptionalVarHeaderLength {
+			pType, err := parseParamType(raw[offset:])
+			if err != nil {
+				return errors.Wrap(err, "failed to parse param type")
+			}
+			p, err := buildParam(pType, raw[offset:])
+			if err != nil {
+				return errors.Wrap(err, "Failed unmarshalling param in Init Chunk")
+			}
+			i.params = append(i.params, p)
+			padding := getPadding(p.length())
+			offset += p.length() + padding
+			remaining -= p.length() + padding
+		} else {
+			break
+		}
+	}
+
+	return nil
+}
+
+func (i *chunkInitCommon) marshal() ([]byte, error) {
+	out := make([]byte, initChunkMinLength)
+	binary.BigEndian.PutUint32(out[0:], i.initiateTag)
+	binary.BigEndian.PutUint32(out[4:], i.advertisedReceiverWindowCredit)
+	binary.BigEndian.PutUint16(out[8:], i.numOutboundStreams)
+	binary.BigEndian.PutUint16(out[10:], i.numInboundStreams)
+	binary.BigEndian.PutUint32(out[12:], i.initialTSN)
+	for idx, p := range i.params {
+		pp, err := p.marshal()
+		if err != nil {
+			return nil, errors.Wrap(err, "Unable to marshal parameter for INIT/INITACK")
+		}
+
+		out = append(out, pp...)
+
+		// Chunks (including Type, Length, and Value fields) are padded out
+		// by the sender with all zero bytes to be a multiple of 4 bytes
+		// long.  This padding MUST NOT be more than 3 bytes in total.  The
+		// Chunk Length value does not include terminating padding of the
+		// chunk.  *However, it does include padding of any variable-length
+		// parameter except the last parameter in the chunk.*  The receiver
+		// MUST ignore the padding.
+		if idx != len(i.params)-1 {
+			out = padByte(out, getPadding(len(pp)))
+		}
+	}
+
+	return out, nil
+}
+
+// String makes chunkInitCommon printable
+func (i chunkInitCommon) String() string {
+	format := `initiateTag: %d
+	advertisedReceiverWindowCredit: %d
+	numOutboundStreams: %d
+	numInboundStreams: %d
+	initialTSN: %d`
+
+	res := fmt.Sprintf(format,
+		i.initiateTag,
+		i.advertisedReceiverWindowCredit,
+		i.numOutboundStreams,
+		i.numInboundStreams,
+		i.initialTSN,
+	)
+
+	for i, param := range i.params {
+		res += fmt.Sprintf("Param %d:\n %s", i, param)
+	}
+	return res
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_payload_data.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_payload_data.go
new file mode 100644
index 000000000..3e5e3468f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_payload_data.go
@@ -0,0 +1,195 @@
+package sctp
+
+import (
+	"encoding/binary"
+	"fmt"
+	"time"
+)
+
+/*
+chunkPayloadData represents an SCTP Chunk of type DATA
+
+ 0                   1                   2                   3
+ 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|   Type = 0    | Reserved|U|B|E|    Length                     |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                              TSN                              |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|      Stream Identifier S      |   Stream Sequence Number n    |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                  Payload Protocol Identifier                  |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                                                               |
+|                 User Data (seq n of Stream S)                 |
+|                                                               |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+
+An unfragmented user message shall have both the B and E bits set to
+'1'.  Setting both B and E bits to '0' indicates a middle fragment of
+a multi-fragment user message, as summarized in the following table:
+   B E                  Description
+============================================================
+|  1 0 | First piece of a fragmented user message          |
++----------------------------------------------------------+
+|  0 0 | Middle piece of a fragmented user message         |
++----------------------------------------------------------+
+|  0 1 | Last piece of a fragmented user message           |
++----------------------------------------------------------+
+|  1 1 | Unfragmented message                              |
+============================================================
+|             Table 1: Fragment Description Flags          |
+============================================================
+*/
+type chunkPayloadData struct {
+	chunkHeader
+
+	unordered         bool
+	beginningFragment bool
+	endingFragment    bool
+	immediateSack     bool
+
+	tsn                  uint32
+	streamIdentifier     uint16
+	streamSequenceNumber uint16
+	payloadType          PayloadProtocolIdentifier
+	userData             []byte
+
+	// Whether this data chunk was acknowledged (received by peer)
+	acked         bool
+	missIndicator uint32
+
+	// Partial-reliability parameters used only by sender
+	since        time.Time
+	nSent        uint32 // number of transmission made for this chunk
+	_abandoned   bool
+	_allInflight bool // valid only with the first fragment
+
+	// Retransmission flag set when T1-RTX timeout occurred and this
+	// chunk is still in the inflight queue
+	retransmit bool
+
+	head *chunkPayloadData // link to the head of the fragment
+}
+
+const (
+	payloadDataEndingFragmentBitmask   = 1
+	payloadDataBeginingFragmentBitmask = 2
+	payloadDataUnorderedBitmask        = 4
+	payloadDataImmediateSACK           = 8
+
+	payloadDataHeaderSize = 12
+)
+
+// PayloadProtocolIdentifier is an enum for DataChannel payload types
+type PayloadProtocolIdentifier uint32
+
+// PayloadProtocolIdentifier enums
+// https://www.iana.org/assignments/sctp-parameters/sctp-parameters.xhtml#sctp-parameters-25
+const (
+	PayloadTypeWebRTCDCEP        PayloadProtocolIdentifier = 50
+	PayloadTypeWebRTCString      PayloadProtocolIdentifier = 51
+	PayloadTypeWebRTCBinary      PayloadProtocolIdentifier = 53
+	PayloadTypeWebRTCStringEmpty PayloadProtocolIdentifier = 56
+	PayloadTypeWebRTCBinaryEmpty PayloadProtocolIdentifier = 57
+)
+
+func (p PayloadProtocolIdentifier) String() string {
+	switch p {
+	case PayloadTypeWebRTCDCEP:
+		return "WebRTC DCEP"
+	case PayloadTypeWebRTCString:
+		return "WebRTC String"
+	case PayloadTypeWebRTCBinary:
+		return "WebRTC Binary"
+	case PayloadTypeWebRTCStringEmpty:
+		return "WebRTC String (Empty)"
+	case PayloadTypeWebRTCBinaryEmpty:
+		return "WebRTC Binary (Empty)"
+	default:
+		return fmt.Sprintf("Unknown Payload Protocol Identifier: %d", p)
+	}
+}
+
+func (p *chunkPayloadData) unmarshal(raw []byte) error {
+	if err := p.chunkHeader.unmarshal(raw); err != nil {
+		return err
+	}
+
+	p.immediateSack = p.flags&payloadDataImmediateSACK != 0
+	p.unordered = p.flags&payloadDataUnorderedBitmask != 0
+	p.beginningFragment = p.flags&payloadDataBeginingFragmentBitmask != 0
+	p.endingFragment = p.flags&payloadDataEndingFragmentBitmask != 0
+
+	p.tsn = binary.BigEndian.Uint32(p.raw[0:])
+	p.streamIdentifier = binary.BigEndian.Uint16(p.raw[4:])
+	p.streamSequenceNumber = binary.BigEndian.Uint16(p.raw[6:])
+	p.payloadType = PayloadProtocolIdentifier(binary.BigEndian.Uint32(p.raw[8:]))
+	p.userData = p.raw[payloadDataHeaderSize:]
+
+	return nil
+}
+
+func (p *chunkPayloadData) marshal() ([]byte, error) {
+	payRaw := make([]byte, payloadDataHeaderSize+len(p.userData))
+
+	binary.BigEndian.PutUint32(payRaw[0:], p.tsn)
+	binary.BigEndian.PutUint16(payRaw[4:], p.streamIdentifier)
+	binary.BigEndian.PutUint16(payRaw[6:], p.streamSequenceNumber)
+	binary.BigEndian.PutUint32(payRaw[8:], uint32(p.payloadType))
+	copy(payRaw[payloadDataHeaderSize:], p.userData)
+
+	flags := uint8(0)
+	if p.endingFragment {
+		flags = 1
+	}
+	if p.beginningFragment {
+		flags |= 1 << 1
+	}
+	if p.unordered {
+		flags |= 1 << 2
+	}
+	if p.immediateSack {
+		flags |= 1 << 3
+	}
+
+	p.chunkHeader.flags = flags
+	p.chunkHeader.typ = ctPayloadData
+	p.chunkHeader.raw = payRaw
+	return p.chunkHeader.marshal()
+}
+
+func (p *chunkPayloadData) check() (abort bool, err error) {
+	return false, nil
+}
+
+// String makes chunkPayloadData printable
+func (p *chunkPayloadData) String() string {
+	return fmt.Sprintf("%s\n%d", p.chunkHeader, p.tsn)
+}
+
+func (p *chunkPayloadData) abandoned() bool {
+	if p.head != nil {
+		return p.head._abandoned && p.head._allInflight
+	}
+	return p._abandoned && p._allInflight
+}
+
+func (p *chunkPayloadData) setAbandoned(abandoned bool) {
+	if p.head != nil {
+		p.head._abandoned = abandoned
+		return
+	}
+	p._abandoned = abandoned
+}
+
+func (p *chunkPayloadData) setAllInflight() {
+	if p.endingFragment {
+		if p.head != nil {
+			p.head._allInflight = true
+		} else {
+			p._allInflight = true
+		}
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_reconfig.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_reconfig.go
new file mode 100644
index 000000000..a53ad5e49
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_reconfig.go
@@ -0,0 +1,99 @@
+package sctp
+
+import (
+	"fmt"
+
+	"github.com/pkg/errors"
+)
+
+// https://tools.ietf.org/html/rfc6525#section-3.1
+// chunkReconfig represents an SCTP Chunk used to reconfigure streams.
+//
+//  0                   1                   2                   3
+//  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// | Type = 130    |  Chunk Flags  |      Chunk Length             |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// \                                                               \
+// /                  Re-configuration Parameter                   /
+// \                                                               \
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// \                                                               \
+// /             Re-configuration Parameter (optional)             /
+// \                                                               \
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+type chunkReconfig struct {
+	chunkHeader
+	paramA param
+	paramB param
+}
+
+func (c *chunkReconfig) unmarshal(raw []byte) error {
+	if err := c.chunkHeader.unmarshal(raw); err != nil {
+		return err
+	}
+	pType, err := parseParamType(c.raw)
+	if err != nil {
+		return errors.Wrap(err, "failed to parse param type")
+	}
+	a, err := buildParam(pType, c.raw)
+	if err != nil {
+		return err
+	}
+	c.paramA = a
+
+	padding := getPadding(a.length())
+	offset := a.length() + padding
+	if len(c.raw) > offset {
+		pType, err := parseParamType(c.raw[offset:])
+		if err != nil {
+			return errors.Wrap(err, "failed to parse param type")
+		}
+		b, err := buildParam(pType, c.raw[offset:])
+		if err != nil {
+			return err
+		}
+		c.paramB = b
+	}
+
+	return nil
+}
+
+func (c *chunkReconfig) marshal() ([]byte, error) {
+	out, err := c.paramA.marshal()
+	if err != nil {
+		return nil, errors.Wrap(err, "Unable to marshal parameter A for reconfig")
+	}
+	if c.paramB != nil {
+		// Pad param A
+		out = padByte(out, getPadding(len(out)))
+
+		outB, err := c.paramB.marshal()
+		if err != nil {
+			return nil, errors.Wrap(err, "Unable to marshal parameter B for reconfig")
+		}
+
+		out = append(out, outB...)
+	}
+
+	c.typ = ctReconfig
+	c.raw = out
+	return c.chunkHeader.marshal()
+}
+
+func (c *chunkReconfig) check() (abort bool, err error) {
+	// nolint:godox
+	// TODO: check allowed combinations:
+	// https://tools.ietf.org/html/rfc6525#section-3.1
+	return true, nil
+}
+
+// String makes chunkReconfig printable
+func (c *chunkReconfig) String() string {
+	res := fmt.Sprintf("Param A:\n %s", c.paramA)
+	if c.paramB != nil {
+		res += fmt.Sprintf("Param B:\n %s", c.paramB)
+	}
+	return res
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_selective_ack.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_selective_ack.go
new file mode 100644
index 000000000..920d56229
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunk_selective_ack.go
@@ -0,0 +1,142 @@
+package sctp
+
+import (
+	"encoding/binary"
+	"fmt"
+
+	"github.com/pkg/errors"
+)
+
+/*
+chunkSelectiveAck represents an SCTP Chunk of type SACK
+
+This chunk is sent to the peer endpoint to acknowledge received DATA
+chunks and to inform the peer endpoint of gaps in the received
+subsequences of DATA chunks as represented by their TSNs.
+0                   1                   2                   3
+0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|   Type = 3    |Chunk  Flags   |      Chunk Length             |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                      Cumulative TSN Ack                       |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|          Advertised Receiver Window Credit (a_rwnd)           |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+| Number of Gap Ack Blocks = N  |  Number of Duplicate TSNs = X |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|  Gap Ack Block #1 Start       |   Gap Ack Block #1 End        |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+/                                                               /
+\                              ...                              \
+/                                                               /
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|   Gap Ack Block #N Start      |  Gap Ack Block #N End         |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                       Duplicate TSN 1                         |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+/                                                               /
+\                              ...                              \
+/                                                               /
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                       Duplicate TSN X                         |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+*/
+
+type gapAckBlock struct {
+	start uint16
+	end   uint16
+}
+
+// String makes gapAckBlock printable
+func (g gapAckBlock) String() string {
+	return fmt.Sprintf("%d - %d", g.start, g.end)
+}
+
+type chunkSelectiveAck struct {
+	chunkHeader
+	cumulativeTSNAck               uint32
+	advertisedReceiverWindowCredit uint32
+	gapAckBlocks                   []gapAckBlock
+	duplicateTSN                   []uint32
+}
+
+const (
+	selectiveAckHeaderSize = 12
+)
+
+func (s *chunkSelectiveAck) unmarshal(raw []byte) error {
+	if err := s.chunkHeader.unmarshal(raw); err != nil {
+		return err
+	}
+
+	if s.typ != ctSack {
+		return errors.Errorf("ChunkType is not of type SACK, actually is %s", s.typ.String())
+	}
+
+	if len(s.raw) < selectiveAckHeaderSize {
+		return errors.Errorf("SACK Chunk size is not large enough to contain header (%v remaining, needs %v bytes)",
+			len(s.raw), selectiveAckHeaderSize)
+	}
+
+	s.cumulativeTSNAck = binary.BigEndian.Uint32(s.raw[0:])
+	s.advertisedReceiverWindowCredit = binary.BigEndian.Uint32(s.raw[4:])
+	s.gapAckBlocks = make([]gapAckBlock, binary.BigEndian.Uint16(s.raw[8:]))
+	s.duplicateTSN = make([]uint32, binary.BigEndian.Uint16(s.raw[10:]))
+
+	if len(s.raw) != selectiveAckHeaderSize+(4*len(s.gapAckBlocks)+(4*len(s.duplicateTSN))) {
+		return errors.Errorf("SACK Chunk size does not match predicted amount from header values")
+	}
+
+	offset := selectiveAckHeaderSize
+	for i := range s.gapAckBlocks {
+		s.gapAckBlocks[i].start = binary.BigEndian.Uint16(s.raw[offset:])
+		s.gapAckBlocks[i].end = binary.BigEndian.Uint16(s.raw[offset+2:])
+		offset += 4
+	}
+	for i := range s.duplicateTSN {
+		s.duplicateTSN[i] = binary.BigEndian.Uint32(s.raw[offset:])
+		offset += 4
+	}
+
+	return nil
+}
+
+func (s *chunkSelectiveAck) marshal() ([]byte, error) {
+	sackRaw := make([]byte, selectiveAckHeaderSize+(4*len(s.gapAckBlocks)+(4*len(s.duplicateTSN))))
+	binary.BigEndian.PutUint32(sackRaw[0:], s.cumulativeTSNAck)
+	binary.BigEndian.PutUint32(sackRaw[4:], s.advertisedReceiverWindowCredit)
+	binary.BigEndian.PutUint16(sackRaw[8:], uint16(len(s.gapAckBlocks)))
+	binary.BigEndian.PutUint16(sackRaw[10:], uint16(len(s.duplicateTSN)))
+	offset := selectiveAckHeaderSize
+	for _, g := range s.gapAckBlocks {
+		binary.BigEndian.PutUint16(sackRaw[offset:], g.start)
+		binary.BigEndian.PutUint16(sackRaw[offset+2:], g.end)
+		offset += 4
+	}
+	for _, t := range s.duplicateTSN {
+		binary.BigEndian.PutUint32(sackRaw[offset:], t)
+		offset += 4
+	}
+
+	s.chunkHeader.typ = ctSack
+	s.chunkHeader.raw = sackRaw
+	return s.chunkHeader.marshal()
+}
+
+func (s *chunkSelectiveAck) check() (abort bool, err error) {
+	return false, nil
+}
+
+// String makes chunkSelectiveAck printable
+func (s *chunkSelectiveAck) String() string {
+	res := fmt.Sprintf("SACK cumTsnAck=%d arwnd=%d dupTsn=%d",
+		s.cumulativeTSNAck,
+		s.advertisedReceiverWindowCredit,
+		s.duplicateTSN)
+
+	for _, gap := range s.gapAckBlocks {
+		res = fmt.Sprintf("%s\n gap ack: %s", res, gap)
+	}
+
+	return res
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunkheader.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunkheader.go
new file mode 100644
index 000000000..a4a78db04
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunkheader.go
@@ -0,0 +1,90 @@
+package sctp
+
+import (
+	"encoding/binary"
+
+	"github.com/pkg/errors"
+)
+
+/*
+chunkHeader represents a SCTP Chunk header, defined in https://tools.ietf.org/html/rfc4960#section-3.2
+The figure below illustrates the field format for the chunks to be
+transmitted in the SCTP packet.  Each chunk is formatted with a Chunk
+Type field, a chunk-specific Flag field, a Chunk Length field, and a
+Value field.
+
+ 0                   1                   2                   3
+ 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|   Chunk Type  | Chunk  Flags  |        Chunk Length           |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                                                               |
+|                          Chunk Value                          |
+|                                                               |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+*/
+type chunkHeader struct {
+	typ   chunkType
+	flags byte
+	raw   []byte
+}
+
+const (
+	chunkHeaderSize = 4
+)
+
+func (c *chunkHeader) unmarshal(raw []byte) error {
+	if len(raw) < chunkHeaderSize {
+		return errors.Errorf("raw only %d bytes, %d is the minimum length for a SCTP chunk", len(raw), chunkHeaderSize)
+	}
+
+	c.typ = chunkType(raw[0])
+	c.flags = raw[1]
+	length := binary.BigEndian.Uint16(raw[2:])
+
+	// Length includes Chunk header
+	valueLength := int(length - chunkHeaderSize)
+	lengthAfterValue := len(raw) - (chunkHeaderSize + valueLength)
+
+	if lengthAfterValue < 0 {
+		return errors.Errorf("Not enough data left in SCTP packet to satisfy requested length remain %d req %d ", valueLength, len(raw)-chunkHeaderSize)
+	} else if lengthAfterValue < 4 {
+		// https://tools.ietf.org/html/rfc4960#section-3.2
+		// The Chunk Length field does not count any chunk padding.
+		// Chunks (including Type, Length, and Value fields) are padded out
+		// by the sender with all zero bytes to be a multiple of 4 bytes
+		// long.  This padding MUST NOT be more than 3 bytes in total.  The
+		// Chunk Length value does not include terminating padding of the
+		// chunk.  However, it does include padding of any variable-length
+		// parameter except the last parameter in the chunk.  The receiver
+		// MUST ignore the padding.
+		for i := lengthAfterValue; i > 0; i-- {
+			paddingOffset := chunkHeaderSize + valueLength + (i - 1)
+			if raw[paddingOffset] != 0 {
+				return errors.Errorf("Chunk padding is non-zero at offset %d ", paddingOffset)
+			}
+		}
+	}
+
+	c.raw = raw[chunkHeaderSize : chunkHeaderSize+valueLength]
+	return nil
+}
+
+func (c *chunkHeader) marshal() ([]byte, error) {
+	raw := make([]byte, 4+len(c.raw))
+
+	raw[0] = uint8(c.typ)
+	raw[1] = c.flags
+	binary.BigEndian.PutUint16(raw[2:], uint16(len(c.raw)+chunkHeaderSize))
+	copy(raw[4:], c.raw)
+	return raw, nil
+}
+
+func (c *chunkHeader) valueLength() int {
+	return len(c.raw)
+}
+
+// String makes chunkHeader printable
+func (c chunkHeader) String() string {
+	return c.typ.String()
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunktype.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunktype.go
new file mode 100644
index 000000000..65b57a463
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/chunktype.go
@@ -0,0 +1,67 @@
+package sctp
+
+import "fmt"
+
+// chunkType is an enum for SCTP Chunk Type field
+// This field identifies the type of information contained in the
+// Chunk Value field.
+type chunkType uint8
+
+// List of known chunkType enums
+const (
+	ctPayloadData      chunkType = 0
+	ctInit             chunkType = 1
+	ctInitAck          chunkType = 2
+	ctSack             chunkType = 3
+	ctHeartbeat        chunkType = 4
+	ctHeartbeatAck     chunkType = 5
+	ctAbort            chunkType = 6
+	ctShutdown         chunkType = 7
+	ctShutdownAck      chunkType = 8
+	ctError            chunkType = 9
+	ctCookieEcho       chunkType = 10
+	ctCookieAck        chunkType = 11
+	ctCWR              chunkType = 13
+	ctShutdownComplete chunkType = 14
+	ctReconfig         chunkType = 130
+	ctForwardTSN       chunkType = 192
+)
+
+func (c chunkType) String() string {
+	switch c {
+	case ctPayloadData:
+		return "DATA"
+	case ctInit:
+		return "INIT"
+	case ctInitAck:
+		return "INIT-ACK"
+	case ctSack:
+		return "SACK"
+	case ctHeartbeat:
+		return "HEARTBEAT"
+	case ctHeartbeatAck:
+		return "HEARTBEAT-ACK"
+	case ctAbort:
+		return "ABORT"
+	case ctShutdown:
+		return "SHUTDOWN"
+	case ctShutdownAck:
+		return "SHUTDOWN-ACK"
+	case ctError:
+		return "ERROR"
+	case ctCookieEcho:
+		return "COOKIE-ECHO"
+	case ctCookieAck:
+		return "COOKIE-ACK"
+	case ctCWR:
+		return "ECNE" // Explicit Congestion Notification Echo
+	case ctShutdownComplete:
+		return "SHUTDOWN-COMPLETE"
+	case ctReconfig:
+		return "RECONFIG" // Re-configuration
+	case ctForwardTSN:
+		return "FORWARD-TSN"
+	default:
+		return fmt.Sprintf("Unknown ChunkType: %d", c)
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/codecov.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/codecov.yml
new file mode 100644
index 000000000..085200a48
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/codecov.yml
@@ -0,0 +1,20 @@
+#
+# DO NOT EDIT THIS FILE
+#
+# It is automatically copied from https://github.com/pion/.goassets repository.
+#
+
+coverage:
+  status:
+    project:
+      default:
+        # Allow decreasing 2% of total coverage to avoid noise.
+        threshold: 2%
+    patch:
+      default:
+        target: 70%
+        only_pulls: true
+
+ignore:
+  - "examples/*"
+  - "examples/**/*"
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/control_queue.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/control_queue.go
new file mode 100644
index 000000000..7e1346935
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/control_queue.go
@@ -0,0 +1,29 @@
+package sctp
+
+// control queue
+
+type controlQueue struct {
+	queue []*packet
+}
+
+func newControlQueue() *controlQueue {
+	return &controlQueue{queue: []*packet{}}
+}
+
+func (q *controlQueue) push(c *packet) {
+	q.queue = append(q.queue, c)
+}
+
+func (q *controlQueue) pushAll(packets []*packet) {
+	q.queue = append(q.queue, packets...)
+}
+
+func (q *controlQueue) popAll() []*packet {
+	packets := q.queue
+	q.queue = []*packet{}
+	return packets
+}
+
+func (q *controlQueue) size() int {
+	return len(q.queue)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause.go
new file mode 100644
index 000000000..e94cc5c3e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause.go
@@ -0,0 +1,91 @@
+package sctp
+
+import (
+	"encoding/binary"
+	"fmt"
+
+	"github.com/pkg/errors"
+)
+
+// errorCauseCode is a cause code that appears in either a ERROR or ABORT chunk
+type errorCauseCode uint16
+
+type errorCause interface {
+	unmarshal([]byte) error
+	marshal() ([]byte, error)
+	length() uint16
+	String() string
+
+	errorCauseCode() errorCauseCode
+}
+
+// buildErrorCause delegates the building of a error cause from raw bytes to the correct structure
+func buildErrorCause(raw []byte) (errorCause, error) {
+	var e errorCause
+
+	c := errorCauseCode(binary.BigEndian.Uint16(raw[0:]))
+	switch c {
+	case invalidMandatoryParameter:
+		e = &errorCauseInvalidMandatoryParameter{}
+	case unrecognizedChunkType:
+		e = &errorCauseUnrecognizedChunkType{}
+	case protocolViolation:
+		e = &errorCauseProtocolViolation{}
+	default:
+		return nil, errors.Errorf("BuildErrorCause does not handle %s", c.String())
+	}
+
+	if err := e.unmarshal(raw); err != nil {
+		return nil, err
+	}
+	return e, nil
+}
+
+const (
+	invalidStreamIdentifier                errorCauseCode = 1
+	missingMandatoryParameter              errorCauseCode = 2
+	staleCookieError                       errorCauseCode = 3
+	outOfResource                          errorCauseCode = 4
+	unresolvableAddress                    errorCauseCode = 5
+	unrecognizedChunkType                  errorCauseCode = 6
+	invalidMandatoryParameter              errorCauseCode = 7
+	unrecognizedParameters                 errorCauseCode = 8
+	noUserData                             errorCauseCode = 9
+	cookieReceivedWhileShuttingDown        errorCauseCode = 10
+	restartOfAnAssociationWithNewAddresses errorCauseCode = 11
+	userInitiatedAbort                     errorCauseCode = 12
+	protocolViolation                      errorCauseCode = 13
+)
+
+func (e errorCauseCode) String() string {
+	switch e {
+	case invalidStreamIdentifier:
+		return "Invalid Stream Identifier"
+	case missingMandatoryParameter:
+		return "Missing Mandatory Parameter"
+	case staleCookieError:
+		return "Stale Cookie Error"
+	case outOfResource:
+		return "Out Of Resource"
+	case unresolvableAddress:
+		return "Unresolvable IP"
+	case unrecognizedChunkType:
+		return "Unrecognized Chunk Type"
+	case invalidMandatoryParameter:
+		return "Invalid Mandatory Parameter"
+	case unrecognizedParameters:
+		return "Unrecognized Parameters"
+	case noUserData:
+		return "No User Data"
+	case cookieReceivedWhileShuttingDown:
+		return "Cookie Received While Shutting Down"
+	case restartOfAnAssociationWithNewAddresses:
+		return "Restart Of An Association With New Addresses"
+	case userInitiatedAbort:
+		return "User Initiated Abort"
+	case protocolViolation:
+		return "Protocol Violation"
+	default:
+		return fmt.Sprintf("Unknown CauseCode: %d", e)
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause_header.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause_header.go
new file mode 100644
index 000000000..1ad6e1da4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause_header.go
@@ -0,0 +1,47 @@
+package sctp
+
+import (
+	"encoding/binary"
+)
+
+// errorCauseHeader represents the shared header that is shared by all error causes
+type errorCauseHeader struct {
+	code errorCauseCode
+	len  uint16
+	raw  []byte
+}
+
+const (
+	errorCauseHeaderLength = 4
+)
+
+func (e *errorCauseHeader) marshal() ([]byte, error) {
+	e.len = uint16(len(e.raw)) + uint16(errorCauseHeaderLength)
+	raw := make([]byte, e.len)
+	binary.BigEndian.PutUint16(raw[0:], uint16(e.code))
+	binary.BigEndian.PutUint16(raw[2:], e.len)
+	copy(raw[errorCauseHeaderLength:], e.raw)
+
+	return raw, nil
+}
+
+func (e *errorCauseHeader) unmarshal(raw []byte) error {
+	e.code = errorCauseCode(binary.BigEndian.Uint16(raw[0:]))
+	e.len = binary.BigEndian.Uint16(raw[2:])
+	valueLength := e.len - errorCauseHeaderLength
+	e.raw = raw[errorCauseHeaderLength : errorCauseHeaderLength+valueLength]
+	return nil
+}
+
+func (e *errorCauseHeader) length() uint16 {
+	return e.len
+}
+
+func (e *errorCauseHeader) errorCauseCode() errorCauseCode {
+	return e.code
+}
+
+// String makes errorCauseHeader printable
+func (e errorCauseHeader) String() string {
+	return e.code.String()
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause_invalid_mandatory_parameter.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause_invalid_mandatory_parameter.go
new file mode 100644
index 000000000..3da8b4783
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause_invalid_mandatory_parameter.go
@@ -0,0 +1,19 @@
+package sctp
+
+// errorCauseInvalidMandatoryParameter represents an SCTP error cause
+type errorCauseInvalidMandatoryParameter struct {
+	errorCauseHeader
+}
+
+func (e *errorCauseInvalidMandatoryParameter) marshal() ([]byte, error) {
+	return e.errorCauseHeader.marshal()
+}
+
+func (e *errorCauseInvalidMandatoryParameter) unmarshal(raw []byte) error {
+	return e.errorCauseHeader.unmarshal(raw)
+}
+
+// String makes errorCauseInvalidMandatoryParameter printable
+func (e *errorCauseInvalidMandatoryParameter) String() string {
+	return e.errorCauseHeader.String()
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause_protocol_violation.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause_protocol_violation.go
new file mode 100644
index 000000000..8b457f441
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause_protocol_violation.go
@@ -0,0 +1,50 @@
+package sctp
+
+import (
+	"fmt"
+
+	"github.com/pkg/errors"
+)
+
+/*
+   This error cause MAY be included in ABORT chunks that are sent
+   because an SCTP endpoint detects a protocol violation of the peer
+   that is not covered by the error causes described in Section 3.3.10.1
+   to Section 3.3.10.12.  An implementation MAY provide additional
+   information specifying what kind of protocol violation has been
+   detected.
+
+        0                   1                   2                   3
+        0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+       |         Cause Code=13         |      Cause Length=Variable    |
+       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+       /                    Additional Information                     /
+       \                                                               \
+       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+*/
+type errorCauseProtocolViolation struct {
+	errorCauseHeader
+	additionalInformation []byte
+}
+
+func (e *errorCauseProtocolViolation) marshal() ([]byte, error) {
+	e.raw = e.additionalInformation
+	return e.errorCauseHeader.marshal()
+}
+
+func (e *errorCauseProtocolViolation) unmarshal(raw []byte) error {
+	err := e.errorCauseHeader.unmarshal(raw)
+	if err != nil {
+		return errors.Wrap(err, "Unable to unmarshal Protocol Violation error")
+	}
+
+	e.additionalInformation = e.raw
+
+	return nil
+}
+
+// String makes errorCauseProtocolViolation printable
+func (e *errorCauseProtocolViolation) String() string {
+	return fmt.Sprintf("%s: %s", e.errorCauseHeader, e.additionalInformation)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause_unrecognized_chunk_type.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause_unrecognized_chunk_type.go
new file mode 100644
index 000000000..fee9a3603
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/error_cause_unrecognized_chunk_type.go
@@ -0,0 +1,28 @@
+package sctp
+
+// errorCauseUnrecognizedChunkType represents an SCTP error cause
+type errorCauseUnrecognizedChunkType struct {
+	errorCauseHeader
+	unrecognizedChunk []byte
+}
+
+func (e *errorCauseUnrecognizedChunkType) marshal() ([]byte, error) {
+	e.code = unrecognizedChunkType
+	e.errorCauseHeader.raw = e.unrecognizedChunk
+	return e.errorCauseHeader.marshal()
+}
+
+func (e *errorCauseUnrecognizedChunkType) unmarshal(raw []byte) error {
+	err := e.errorCauseHeader.unmarshal(raw)
+	if err != nil {
+		return err
+	}
+
+	e.unrecognizedChunk = e.errorCauseHeader.raw
+	return nil
+}
+
+// String makes errorCauseUnrecognizedChunkType printable
+func (e *errorCauseUnrecognizedChunkType) String() string {
+	return e.errorCauseHeader.String()
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/go.mod
new file mode 100644
index 000000000..022e2fcce
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/go.mod
@@ -0,0 +1,14 @@
+module github.com/pion/sctp
+
+require (
+	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/kr/pretty v0.1.0 // indirect
+	github.com/pion/logging v0.2.2
+	github.com/pion/randutil v0.1.0
+	github.com/pion/transport v0.10.1
+	github.com/pkg/errors v0.9.1
+	github.com/stretchr/testify v1.6.1
+	gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 // indirect
+)
+
+go 1.13
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/go.sum b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/go.sum
new file mode 100644
index 000000000..37442623d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/go.sum
@@ -0,0 +1,36 @@
+github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/kr/pretty v0.1.0 h1:L/CwN0zerZDmRFUapSPitk6f+Q3+0za1rQkzVuMiMFI=
+github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
+github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
+github.com/kr/text v0.1.0 h1:45sCR5RtlFHMR4UwH9sdQ5TC8v0qDQCHnXt+kaKSTVE=
+github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
+github.com/pion/logging v0.2.2 h1:M9+AIj/+pxNsDfAT64+MAVgJO0rsyLnoJKCqf//DoeY=
+github.com/pion/logging v0.2.2/go.mod h1:k0/tDVsRCX2Mb2ZEmTqNa7CWsQPc+YYCB7Q+5pahoms=
+github.com/pion/randutil v0.1.0 h1:CFG1UdESneORglEsnimhUjf33Rwjubwj6xfiOXBa3mA=
+github.com/pion/randutil v0.1.0/go.mod h1:XcJrSMMbbMRhASFVOlj/5hQial/Y8oH/HVo7TBZq+j8=
+github.com/pion/transport v0.10.1 h1:2W+yJT+0mOQ160ThZYUx5Zp2skzshiNgxrNE9GUfhJM=
+github.com/pion/transport v0.10.1/go.mod h1:PBis1stIILMiis0PewDw91WJeLJkyIMcEk+DwKOzf4A=
+github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
+github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.6.1 h1:hDPOHmpOpP40lSULcqw7IrRb/u7w6RpDC9399XyoNd0=
+github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20200625001655-4c5254603344 h1:vGXIOMxbNfDTk/aXCmfdLgkrSV+Z2tcbze+pEc3v5W4=
+golang.org/x/net v0.0.0-20200625001655-4c5254603344/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 h1:YR8cESwS4TdDjEe65xsg0ogRM/Nc3DYOhEAlW+xobZo=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c h1:dUUwHk2QECo/6vqA44rthZ8ie2QXMNeKRTHCNY2nXvo=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/packet.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/packet.go
new file mode 100644
index 000000000..dcc650b98
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/packet.go
@@ -0,0 +1,178 @@
+package sctp
+
+import (
+	"encoding/binary"
+	"fmt"
+	"hash/crc32"
+
+	"github.com/pkg/errors"
+)
+
+// Create the crc32 table we'll use for the checksum
+var castagnoliTable = crc32.MakeTable(crc32.Castagnoli) // nolint:gochecknoglobals
+
+// Allocate and zero this data once.
+// We need to use it for the checksum and don't want to allocate/clear each time.
+var fourZeroes [4]byte // nolint:gochecknoglobals
+
+/*
+Packet represents an SCTP packet, defined in https://tools.ietf.org/html/rfc4960#section-3
+An SCTP packet is composed of a common header and chunks.  A chunk
+contains either control information or user data.
+
+
+                      SCTP Packet Format
+ 0                   1                   2                   3
+ 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                        Common Header                          |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                          Chunk #1                             |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                           ...                                 |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                          Chunk #n                             |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+
+                SCTP Common Header Format
+
+ 0                   1                   2                   3
+ 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|     Source Value Number        |     Destination Value Number   |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                      Verification Tag                         |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+|                           Checksum                            |
++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+
+*/
+type packet struct {
+	sourcePort      uint16
+	destinationPort uint16
+	verificationTag uint32
+	chunks          []chunk
+}
+
+const (
+	packetHeaderSize = 12
+)
+
+func (p *packet) unmarshal(raw []byte) error {
+	if len(raw) < packetHeaderSize {
+		return errors.Errorf("raw only %d bytes, %d is the minimum length for a SCTP packet", len(raw), packetHeaderSize)
+	}
+
+	p.sourcePort = binary.BigEndian.Uint16(raw[0:])
+	p.destinationPort = binary.BigEndian.Uint16(raw[2:])
+	p.verificationTag = binary.BigEndian.Uint32(raw[4:])
+
+	offset := packetHeaderSize
+	for {
+		// Exact match, no more chunks
+		if offset == len(raw) {
+			break
+		} else if offset+chunkHeaderSize > len(raw) {
+			return errors.Errorf("Unable to parse SCTP chunk, not enough data for complete header: offset %d remaining %d", offset, len(raw))
+		}
+
+		var c chunk
+		switch chunkType(raw[offset]) {
+		case ctInit:
+			c = &chunkInit{}
+		case ctInitAck:
+			c = &chunkInitAck{}
+		case ctAbort:
+			c = &chunkAbort{}
+		case ctCookieEcho:
+			c = &chunkCookieEcho{}
+		case ctCookieAck:
+			c = &chunkCookieAck{}
+		case ctHeartbeat:
+			c = &chunkHeartbeat{}
+		case ctPayloadData:
+			c = &chunkPayloadData{}
+		case ctSack:
+			c = &chunkSelectiveAck{}
+		case ctReconfig:
+			c = &chunkReconfig{}
+		case ctForwardTSN:
+			c = &chunkForwardTSN{}
+		case ctError:
+			c = &chunkError{}
+		default:
+			return errors.Errorf("Failed to unmarshal, contains unknown chunk type %s", chunkType(raw[offset]).String())
+		}
+
+		if err := c.unmarshal(raw[offset:]); err != nil {
+			return err
+		}
+
+		p.chunks = append(p.chunks, c)
+		chunkValuePadding := getPadding(c.valueLength())
+		offset += chunkHeaderSize + c.valueLength() + chunkValuePadding
+	}
+	theirChecksum := binary.LittleEndian.Uint32(raw[8:])
+	ourChecksum := generatePacketChecksum(raw)
+	if theirChecksum != ourChecksum {
+		return errors.Errorf("Checksum mismatch theirs: %d ours: %d", theirChecksum, ourChecksum)
+	}
+	return nil
+}
+
+func (p *packet) marshal() ([]byte, error) {
+	raw := make([]byte, packetHeaderSize)
+
+	// Populate static headers
+	// 8-12 is Checksum which will be populated when packet is complete
+	binary.BigEndian.PutUint16(raw[0:], p.sourcePort)
+	binary.BigEndian.PutUint16(raw[2:], p.destinationPort)
+	binary.BigEndian.PutUint32(raw[4:], p.verificationTag)
+
+	// Populate chunks
+	for _, c := range p.chunks {
+		chunkRaw, err := c.marshal()
+		if err != nil {
+			return nil, err
+		}
+		raw = append(raw, chunkRaw...)
+
+		paddingNeeded := getPadding(len(raw))
+		if paddingNeeded != 0 {
+			raw = append(raw, make([]byte, paddingNeeded)...)
+		}
+	}
+
+	// Checksum is already in BigEndian
+	// Using LittleEndian.PutUint32 stops it from being flipped
+	binary.LittleEndian.PutUint32(raw[8:], generatePacketChecksum(raw))
+	return raw, nil
+}
+
+func generatePacketChecksum(raw []byte) (sum uint32) {
+	// Fastest way to do a crc32 without allocating.
+	sum = crc32.Update(sum, castagnoliTable, raw[0:8])
+	sum = crc32.Update(sum, castagnoliTable, fourZeroes[:])
+	sum = crc32.Update(sum, castagnoliTable, raw[12:])
+	return sum
+}
+
+// String makes packet printable
+func (p *packet) String() string {
+	format := `Packet:
+	sourcePort: %d
+	destinationPort: %d
+	verificationTag: %d
+	`
+	res := fmt.Sprintf(format,
+		p.sourcePort,
+		p.destinationPort,
+		p.verificationTag,
+	)
+	for i, chunk := range p.chunks {
+		res += fmt.Sprintf("Chunk %d:\n %s", i, chunk)
+	}
+	return res
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param.go
new file mode 100644
index 000000000..08e46d1f9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param.go
@@ -0,0 +1,35 @@
+package sctp
+
+import (
+	"github.com/pkg/errors"
+)
+
+type param interface {
+	marshal() ([]byte, error)
+	length() int
+}
+
+func buildParam(t paramType, rawParam []byte) (param, error) {
+	switch t {
+	case forwardTSNSupp:
+		return (&paramForwardTSNSupported{}).unmarshal(rawParam)
+	case supportedExt:
+		return (&paramSupportedExtensions{}).unmarshal(rawParam)
+	case random:
+		return (&paramRandom{}).unmarshal(rawParam)
+	case reqHMACAlgo:
+		return (&paramRequestedHMACAlgorithm{}).unmarshal(rawParam)
+	case chunkList:
+		return (&paramChunkList{}).unmarshal(rawParam)
+	case stateCookie:
+		return (&paramStateCookie{}).unmarshal(rawParam)
+	case heartbeatInfo:
+		return (&paramHeartbeatInfo{}).unmarshal(rawParam)
+	case outSSNResetReq:
+		return (&paramOutgoingResetRequest{}).unmarshal(rawParam)
+	case reconfigResp:
+		return (&paramReconfigResponse{}).unmarshal(rawParam)
+	default:
+		return nil, errors.Errorf("Unhandled ParamType %v", t)
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_chunk_list.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_chunk_list.go
new file mode 100644
index 000000000..4ea484c9f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_chunk_list.go
@@ -0,0 +1,28 @@
+package sctp
+
+type paramChunkList struct {
+	paramHeader
+	chunkTypes []chunkType
+}
+
+func (c *paramChunkList) marshal() ([]byte, error) {
+	c.typ = chunkList
+	c.raw = make([]byte, len(c.chunkTypes))
+	for i, t := range c.chunkTypes {
+		c.raw[i] = byte(t)
+	}
+
+	return c.paramHeader.marshal()
+}
+
+func (c *paramChunkList) unmarshal(raw []byte) (param, error) {
+	err := c.paramHeader.unmarshal(raw)
+	if err != nil {
+		return nil, err
+	}
+	for _, t := range c.raw {
+		c.chunkTypes = append(c.chunkTypes, chunkType(t))
+	}
+
+	return c, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_forward_tsn_supported.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_forward_tsn_supported.go
new file mode 100644
index 000000000..62de15570
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_forward_tsn_supported.go
@@ -0,0 +1,28 @@
+package sctp
+
+// At the initialization of the association, the sender of the INIT or
+// INIT ACK chunk MAY include this OPTIONAL parameter to inform its peer
+// that it is able to support the Forward TSN chunk
+//
+//   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+//  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+//  |    Parameter Type = 49152     |  Parameter Length = 4         |
+//  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+type paramForwardTSNSupported struct {
+	paramHeader
+}
+
+func (f *paramForwardTSNSupported) marshal() ([]byte, error) {
+	f.typ = forwardTSNSupp
+	f.raw = []byte{}
+	return f.paramHeader.marshal()
+}
+
+func (f *paramForwardTSNSupported) unmarshal(raw []byte) (param, error) {
+	err := f.paramHeader.unmarshal(raw)
+	if err != nil {
+		return nil, err
+	}
+	return f, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_heartbeat_info.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_heartbeat_info.go
new file mode 100644
index 000000000..47f64eb87
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_heartbeat_info.go
@@ -0,0 +1,21 @@
+package sctp
+
+type paramHeartbeatInfo struct {
+	paramHeader
+	heartbeatInformation []byte
+}
+
+func (h *paramHeartbeatInfo) marshal() ([]byte, error) {
+	h.typ = heartbeatInfo
+	h.raw = h.heartbeatInformation
+	return h.paramHeader.marshal()
+}
+
+func (h *paramHeartbeatInfo) unmarshal(raw []byte) (param, error) {
+	err := h.paramHeader.unmarshal(raw)
+	if err != nil {
+		return nil, err
+	}
+	h.heartbeatInformation = h.raw
+	return h, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_outgoing_reset_request.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_outgoing_reset_request.go
new file mode 100644
index 000000000..ceae17892
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_outgoing_reset_request.go
@@ -0,0 +1,88 @@
+package sctp
+
+import (
+	"encoding/binary"
+	"errors"
+)
+
+const (
+	paramOutgoingResetRequestStreamIdentifiersOffset = 12
+)
+
+// This parameter is used by the sender to request the reset of some or
+// all outgoing streams.
+//  0                   1                   2                   3
+//  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |     Parameter Type = 13       | Parameter Length = 16 + 2 * N |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |           Re-configuration Request Sequence Number            |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |           Re-configuration Response Sequence Number           |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |                Sender's Last Assigned TSN                     |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |  Stream Number 1 (optional)   |    Stream Number 2 (optional) |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// /                            ......                             /
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |  Stream Number N-1 (optional) |    Stream Number N (optional) |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+type paramOutgoingResetRequest struct {
+	paramHeader
+	// reconfigRequestSequenceNumber is used to identify the request.  It is a monotonically
+	// increasing number that is initialized to the same value as the
+	// initial TSN.  It is increased by 1 whenever sending a new Re-
+	// configuration Request Parameter.
+	reconfigRequestSequenceNumber uint32
+	// When this Outgoing SSN Reset Request Parameter is sent in response
+	// to an Incoming SSN Reset Request Parameter, this parameter is also
+	// an implicit response to the incoming request.  This field then
+	// holds the Re-configuration Request Sequence Number of the incoming
+	// request.  In other cases, it holds the next expected
+	// Re-configuration Request Sequence Number minus 1.
+	reconfigResponseSequenceNumber uint32
+	// This value holds the next TSN minus 1 -- in other words, the last
+	// TSN that this sender assigned.
+	senderLastTSN uint32
+	// This optional field, if included, is used to indicate specific
+	// streams that are to be reset.  If no streams are listed, then all
+	// streams are to be reset.
+	streamIdentifiers []uint16
+}
+
+var errSSNResetRequestParamTooShort = errors.New("outgoing SSN reset request parameter too short")
+
+func (r *paramOutgoingResetRequest) marshal() ([]byte, error) {
+	r.typ = outSSNResetReq
+	r.raw = make([]byte, paramOutgoingResetRequestStreamIdentifiersOffset+2*len(r.streamIdentifiers))
+	binary.BigEndian.PutUint32(r.raw, r.reconfigRequestSequenceNumber)
+	binary.BigEndian.PutUint32(r.raw[4:], r.reconfigResponseSequenceNumber)
+	binary.BigEndian.PutUint32(r.raw[8:], r.senderLastTSN)
+	for i, sID := range r.streamIdentifiers {
+		binary.BigEndian.PutUint16(r.raw[paramOutgoingResetRequestStreamIdentifiersOffset+2*i:], sID)
+	}
+	return r.paramHeader.marshal()
+}
+
+func (r *paramOutgoingResetRequest) unmarshal(raw []byte) (param, error) {
+	err := r.paramHeader.unmarshal(raw)
+	if err != nil {
+		return nil, err
+	}
+	if len(r.raw) < paramOutgoingResetRequestStreamIdentifiersOffset {
+		return nil, errSSNResetRequestParamTooShort
+	}
+	r.reconfigRequestSequenceNumber = binary.BigEndian.Uint32(r.raw)
+	r.reconfigResponseSequenceNumber = binary.BigEndian.Uint32(r.raw[4:])
+	r.senderLastTSN = binary.BigEndian.Uint32(r.raw[8:])
+
+	lim := (len(r.raw) - paramOutgoingResetRequestStreamIdentifiersOffset) / 2
+	r.streamIdentifiers = make([]uint16, lim)
+	for i := 0; i < lim; i++ {
+		r.streamIdentifiers[i] = binary.BigEndian.Uint16(r.raw[paramOutgoingResetRequestStreamIdentifiersOffset+2*i:])
+	}
+
+	return r, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_random.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_random.go
new file mode 100644
index 000000000..dc454b358
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_random.go
@@ -0,0 +1,21 @@
+package sctp
+
+type paramRandom struct {
+	paramHeader
+	randomData []byte
+}
+
+func (r *paramRandom) marshal() ([]byte, error) {
+	r.typ = random
+	r.raw = r.randomData
+	return r.paramHeader.marshal()
+}
+
+func (r *paramRandom) unmarshal(raw []byte) (param, error) {
+	err := r.paramHeader.unmarshal(raw)
+	if err != nil {
+		return nil, err
+	}
+	r.randomData = r.raw
+	return r, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_reconfig_response.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_reconfig_response.go
new file mode 100644
index 000000000..d9eab5512
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_reconfig_response.go
@@ -0,0 +1,92 @@
+package sctp
+
+import (
+	"encoding/binary"
+	"errors"
+	"fmt"
+)
+
+// This parameter is used by the receiver of a Re-configuration Request
+// Parameter to respond to the request.
+//
+// 0                   1                   2                   3
+// 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |     Parameter Type = 16       |      Parameter Length         |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |         Re-configuration Response Sequence Number             |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |                            Result                             |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |                   Sender's Next TSN (optional)                |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// |                  Receiver's Next TSN (optional)               |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+type paramReconfigResponse struct {
+	paramHeader
+	// This value is copied from the request parameter and is used by the
+	// receiver of the Re-configuration Response Parameter to tie the
+	// response to the request.
+	reconfigResponseSequenceNumber uint32
+	// This value describes the result of the processing of the request.
+	result reconfigResult
+}
+
+type reconfigResult uint32
+
+const (
+	reconfigResultSuccessNOP                    reconfigResult = 0
+	reconfigResultSuccessPerformed              reconfigResult = 1
+	reconfigResultDenied                        reconfigResult = 2
+	reconfigResultErrorWrongSSN                 reconfigResult = 3
+	reconfigResultErrorRequestAlreadyInProgress reconfigResult = 4
+	reconfigResultErrorBadSequenceNumber        reconfigResult = 5
+	reconfigResultInProgress                    reconfigResult = 6
+)
+
+var errReconfigRespParamTooShort = errors.New("reconfig response parameter too short")
+
+func (t reconfigResult) String() string {
+	switch t {
+	case reconfigResultSuccessNOP:
+		return "0: Success - Nothing to do"
+	case reconfigResultSuccessPerformed:
+		return "1: Success - Performed"
+	case reconfigResultDenied:
+		return "2: Denied"
+	case reconfigResultErrorWrongSSN:
+		return "3: Error - Wrong SSN"
+	case reconfigResultErrorRequestAlreadyInProgress:
+		return "4: Error - Request already in progress"
+	case reconfigResultErrorBadSequenceNumber:
+		return "5: Error - Bad Sequence Number"
+	case reconfigResultInProgress:
+		return "6: In progress"
+	default:
+		return fmt.Sprintf("Unknown reconfigResult: %d", t)
+	}
+}
+
+func (r *paramReconfigResponse) marshal() ([]byte, error) {
+	r.typ = reconfigResp
+	r.raw = make([]byte, 8)
+	binary.BigEndian.PutUint32(r.raw, r.reconfigResponseSequenceNumber)
+	binary.BigEndian.PutUint32(r.raw[4:], uint32(r.result))
+
+	return r.paramHeader.marshal()
+}
+
+func (r *paramReconfigResponse) unmarshal(raw []byte) (param, error) {
+	err := r.paramHeader.unmarshal(raw)
+	if err != nil {
+		return nil, err
+	}
+	if len(r.raw) < 8 {
+		return nil, errReconfigRespParamTooShort
+	}
+	r.reconfigResponseSequenceNumber = binary.BigEndian.Uint32(r.raw)
+	r.result = reconfigResult(binary.BigEndian.Uint32(r.raw[4:]))
+
+	return r, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_requested_hmac_algorithm.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_requested_hmac_algorithm.go
new file mode 100644
index 000000000..b520fe379
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_requested_hmac_algorithm.go
@@ -0,0 +1,73 @@
+package sctp
+
+import (
+	"encoding/binary"
+	"fmt"
+
+	"github.com/pkg/errors"
+)
+
+type hmacAlgorithm uint16
+
+const (
+	hmacResv1  hmacAlgorithm = 0
+	hmacSHA128               = 1
+	hmacResv2  hmacAlgorithm = 2
+	hmacSHA256 hmacAlgorithm = 3
+)
+
+func (c hmacAlgorithm) String() string {
+	switch c {
+	case hmacResv1:
+		return "HMAC Reserved (0x00)"
+	case hmacSHA128:
+		return "HMAC SHA-128"
+	case hmacResv2:
+		return "HMAC Reserved (0x02)"
+	case hmacSHA256:
+		return "HMAC SHA-256"
+	default:
+		return fmt.Sprintf("Unknown HMAC Algorithm type: %d", c)
+	}
+}
+
+type paramRequestedHMACAlgorithm struct {
+	paramHeader
+	availableAlgorithms []hmacAlgorithm
+}
+
+func (r *paramRequestedHMACAlgorithm) marshal() ([]byte, error) {
+	r.typ = reqHMACAlgo
+	r.raw = make([]byte, len(r.availableAlgorithms)*2)
+	i := 0
+	for _, a := range r.availableAlgorithms {
+		binary.BigEndian.PutUint16(r.raw[i:], uint16(a))
+		i += 2
+	}
+
+	return r.paramHeader.marshal()
+}
+
+func (r *paramRequestedHMACAlgorithm) unmarshal(raw []byte) (param, error) {
+	err := r.paramHeader.unmarshal(raw)
+	if err != nil {
+		return nil, err
+	}
+
+	i := 0
+	for i < len(r.raw) {
+		a := hmacAlgorithm(binary.BigEndian.Uint16(r.raw[i:]))
+		switch a {
+		case hmacSHA128:
+			fallthrough
+		case hmacSHA256:
+			r.availableAlgorithms = append(r.availableAlgorithms, a)
+		default:
+			return nil, errors.Errorf("Invalid algorithm type '%v'", a)
+		}
+
+		i += 2
+	}
+
+	return r, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_state_cookie.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_state_cookie.go
new file mode 100644
index 000000000..9681267d5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_state_cookie.go
@@ -0,0 +1,46 @@
+package sctp
+
+import (
+	"crypto/rand"
+	"fmt"
+)
+
+type paramStateCookie struct {
+	paramHeader
+	cookie []byte
+}
+
+func newRandomStateCookie() (*paramStateCookie, error) {
+	randCookie := make([]byte, 32)
+	_, err := rand.Read(randCookie)
+	// crypto/rand.Read returns n == len(b) if and only if err == nil.
+	if err != nil {
+		return nil, err
+	}
+
+	s := &paramStateCookie{
+		cookie: randCookie,
+	}
+
+	return s, nil
+}
+
+func (s *paramStateCookie) marshal() ([]byte, error) {
+	s.typ = stateCookie
+	s.raw = s.cookie
+	return s.paramHeader.marshal()
+}
+
+func (s *paramStateCookie) unmarshal(raw []byte) (param, error) {
+	err := s.paramHeader.unmarshal(raw)
+	if err != nil {
+		return nil, err
+	}
+	s.cookie = s.raw
+	return s, nil
+}
+
+// String makes paramStateCookie printable
+func (s *paramStateCookie) String() string {
+	return fmt.Sprintf("%s: %s", s.paramHeader, s.cookie)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_supported_extensions.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_supported_extensions.go
new file mode 100644
index 000000000..2935524ca
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/param_supported_extensions.go
@@ -0,0 +1,29 @@
+package sctp
+
+type paramSupportedExtensions struct {
+	paramHeader
+	ChunkTypes []chunkType
+}
+
+func (s *paramSupportedExtensions) marshal() ([]byte, error) {
+	s.typ = supportedExt
+	s.raw = make([]byte, len(s.ChunkTypes))
+	for i, c := range s.ChunkTypes {
+		s.raw[i] = byte(c)
+	}
+
+	return s.paramHeader.marshal()
+}
+
+func (s *paramSupportedExtensions) unmarshal(raw []byte) (param, error) {
+	err := s.paramHeader.unmarshal(raw)
+	if err != nil {
+		return nil, err
+	}
+
+	for _, t := range s.raw {
+		s.ChunkTypes = append(s.ChunkTypes, chunkType(t))
+	}
+
+	return s, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/paramheader.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/paramheader.go
new file mode 100644
index 000000000..d88642b37
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/paramheader.go
@@ -0,0 +1,63 @@
+package sctp
+
+import (
+	"encoding/binary"
+	"encoding/hex"
+	"fmt"
+
+	"github.com/pkg/errors"
+)
+
+type paramHeader struct {
+	typ paramType
+	len int
+	raw []byte
+}
+
+const (
+	paramHeaderLength = 4
+)
+
+func (p *paramHeader) marshal() ([]byte, error) {
+	paramLengthPlusHeader := paramHeaderLength + len(p.raw)
+
+	rawParam := make([]byte, paramLengthPlusHeader)
+	binary.BigEndian.PutUint16(rawParam[0:], uint16(p.typ))
+	binary.BigEndian.PutUint16(rawParam[2:], uint16(paramLengthPlusHeader))
+	copy(rawParam[paramHeaderLength:], p.raw)
+
+	return rawParam, nil
+}
+
+func (p *paramHeader) unmarshal(raw []byte) error {
+	if len(raw) < paramHeaderLength {
+		return errors.New("param header too short")
+	}
+
+	paramLengthPlusHeader := binary.BigEndian.Uint16(raw[2:])
+	if int(paramLengthPlusHeader) < paramHeaderLength {
+		return errors.Errorf("param self reported length (%d) smaller than header length (%d)", int(paramLengthPlusHeader), paramHeaderLength)
+	}
+	if len(raw) < int(paramLengthPlusHeader) {
+		return errors.Errorf("param length (%d) shorter than its self reported length (%d)", len(raw), int(paramLengthPlusHeader))
+	}
+
+	typ, err := parseParamType(raw[0:])
+	if err != nil {
+		return errors.Wrap(err, "failed to parse param type")
+	}
+	p.typ = typ
+	p.raw = raw[paramHeaderLength:paramLengthPlusHeader]
+	p.len = int(paramLengthPlusHeader)
+
+	return nil
+}
+
+func (p *paramHeader) length() int {
+	return p.len
+}
+
+// String makes paramHeader printable
+func (p paramHeader) String() string {
+	return fmt.Sprintf("%s (%d): %s", p.typ, p.len, hex.Dump(p.raw))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/paramtype.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/paramtype.go
new file mode 100644
index 000000000..bb0ee82cc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/paramtype.go
@@ -0,0 +1,106 @@
+package sctp
+
+import (
+	"encoding/binary"
+	"fmt"
+
+	"github.com/pkg/errors"
+)
+
+// paramType represents a SCTP INIT/INITACK parameter
+type paramType uint16
+
+const (
+	heartbeatInfo      paramType = 1     // Heartbeat Info	[RFC4960]
+	ipV4Addr           paramType = 5     // IPv4 IP	[RFC4960]
+	ipV6Addr           paramType = 6     // IPv6 IP	[RFC4960]
+	stateCookie        paramType = 7     // State Cookie	[RFC4960]
+	unrecognizedParam  paramType = 8     // Unrecognized Parameters	[RFC4960]
+	cookiePreservative paramType = 9     // Cookie Preservative	[RFC4960]
+	hostNameAddr       paramType = 11    // Host Name IP	[RFC4960]
+	supportedAddrTypes paramType = 12    // Supported IP Types	[RFC4960]
+	outSSNResetReq     paramType = 13    // Outgoing SSN Reset Request Parameter	[RFC6525]
+	incSSNResetReq     paramType = 14    // Incoming SSN Reset Request Parameter	[RFC6525]
+	ssnTSNResetReq     paramType = 15    // SSN/TSN Reset Request Parameter	[RFC6525]
+	reconfigResp       paramType = 16    // Re-configuration Response Parameter	[RFC6525]
+	addOutStreamsReq   paramType = 17    // Add Outgoing Streams Request Parameter	[RFC6525]
+	addIncStreamsReq   paramType = 18    // Add Incoming Streams Request Parameter	[RFC6525]
+	random             paramType = 32770 // Random (0x8002)	[RFC4805]
+	chunkList          paramType = 32771 // Chunk List (0x8003)	[RFC4895]
+	reqHMACAlgo        paramType = 32772 // Requested HMAC Algorithm Parameter (0x8004)	[RFC4895]
+	padding            paramType = 32773 // Padding (0x8005)
+	supportedExt       paramType = 32776 // Supported Extensions (0x8008)	[RFC5061]
+	forwardTSNSupp     paramType = 49152 // Forward TSN supported (0xC000)	[RFC3758]
+	addIPAddr          paramType = 49153 // Add IP IP (0xC001)	[RFC5061]
+	delIPAddr          paramType = 49154 // Delete IP IP (0xC002)	[RFC5061]
+	errClauseInd       paramType = 49155 // Error Cause Indication (0xC003)	[RFC5061]
+	setPriAddr         paramType = 49156 // Set Primary IP (0xC004)	[RFC5061]
+	successInd         paramType = 49157 // Success Indication (0xC005)	[RFC5061]
+	adaptLayerInd      paramType = 49158 // Adaptation Layer Indication (0xC006)	[RFC5061]
+)
+
+func parseParamType(raw []byte) (paramType, error) {
+	if len(raw) < 2 {
+		return paramType(0), errors.New("packet to short")
+	}
+	return paramType(binary.BigEndian.Uint16(raw)), nil
+}
+
+func (p paramType) String() string {
+	switch p {
+	case heartbeatInfo:
+		return "Heartbeat Info"
+	case ipV4Addr:
+		return "IPv4 IP"
+	case ipV6Addr:
+		return "IPv6 IP"
+	case stateCookie:
+		return "State Cookie"
+	case unrecognizedParam:
+		return "Unrecognized Parameters"
+	case cookiePreservative:
+		return "Cookie Preservative"
+	case hostNameAddr:
+		return "Host Name IP"
+	case supportedAddrTypes:
+		return "Supported IP Types"
+	case outSSNResetReq:
+		return "Outgoing SSN Reset Request Parameter"
+	case incSSNResetReq:
+		return "Incoming SSN Reset Request Parameter"
+	case ssnTSNResetReq:
+		return "SSN/TSN Reset Request Parameter"
+	case reconfigResp:
+		return "Re-configuration Response Parameter"
+	case addOutStreamsReq:
+		return "Add Outgoing Streams Request Parameter"
+	case addIncStreamsReq:
+		return "Add Incoming Streams Request Parameter"
+	case random:
+		return "Random"
+	case chunkList:
+		return "Chunk List"
+	case reqHMACAlgo:
+		return "Requested HMAC Algorithm Parameter"
+	case padding:
+		return "Padding"
+	case supportedExt:
+		return "Supported Extensions"
+	case forwardTSNSupp:
+		return "Forward TSN supported"
+	case addIPAddr:
+		return "Add IP IP"
+	case delIPAddr:
+		return "Delete IP IP"
+	case errClauseInd:
+		return "Error Cause Indication"
+	case setPriAddr:
+		return "Set Primary IP"
+	case successInd:
+		return "Success Indication"
+	case adaptLayerInd:
+		return "Adaptation Layer Indication"
+	default:
+		return fmt.Sprintf("Unknown ParamType: %d", p)
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/payload_queue.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/payload_queue.go
new file mode 100644
index 000000000..2d1a35a81
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/payload_queue.go
@@ -0,0 +1,179 @@
+package sctp
+
+import (
+	"fmt"
+	"sort"
+)
+
+type payloadQueue struct {
+	chunkMap map[uint32]*chunkPayloadData
+	sorted   []uint32
+	dupTSN   []uint32
+	nBytes   int
+}
+
+func newPayloadQueue() *payloadQueue {
+	return &payloadQueue{chunkMap: map[uint32]*chunkPayloadData{}}
+}
+
+func (q *payloadQueue) updateSortedKeys() {
+	if q.sorted != nil {
+		return
+	}
+
+	q.sorted = make([]uint32, len(q.chunkMap))
+	i := 0
+	for k := range q.chunkMap {
+		q.sorted[i] = k
+		i++
+	}
+
+	sort.Slice(q.sorted, func(i, j int) bool {
+		return sna32LT(q.sorted[i], q.sorted[j])
+	})
+}
+
+func (q *payloadQueue) canPush(p *chunkPayloadData, cumulativeTSN uint32) bool {
+	_, ok := q.chunkMap[p.tsn]
+	if ok || sna32LTE(p.tsn, cumulativeTSN) {
+		return false
+	}
+	return true
+}
+
+func (q *payloadQueue) pushNoCheck(p *chunkPayloadData) {
+	q.chunkMap[p.tsn] = p
+	q.nBytes += len(p.userData)
+	q.sorted = nil
+}
+
+// push pushes a payload data. If the payload data is already in our queue or
+// older than our cumulativeTSN marker, it will be recored as duplications,
+// which can later be retrieved using popDuplicates.
+func (q *payloadQueue) push(p *chunkPayloadData, cumulativeTSN uint32) bool {
+	_, ok := q.chunkMap[p.tsn]
+	if ok || sna32LTE(p.tsn, cumulativeTSN) {
+		// Found the packet, log in dups
+		q.dupTSN = append(q.dupTSN, p.tsn)
+		return false
+	}
+
+	q.chunkMap[p.tsn] = p
+	q.nBytes += len(p.userData)
+	q.sorted = nil
+	return true
+}
+
+// pop pops only if the oldest chunk's TSN matches the given TSN.
+func (q *payloadQueue) pop(tsn uint32) (*chunkPayloadData, bool) {
+	q.updateSortedKeys()
+
+	if len(q.chunkMap) > 0 && tsn == q.sorted[0] {
+		q.sorted = q.sorted[1:]
+		if c, ok := q.chunkMap[tsn]; ok {
+			delete(q.chunkMap, tsn)
+			q.nBytes -= len(c.userData)
+			return c, true
+		}
+	}
+
+	return nil, false
+}
+
+// get returns reference to chunkPayloadData with the given TSN value.
+func (q *payloadQueue) get(tsn uint32) (*chunkPayloadData, bool) {
+	c, ok := q.chunkMap[tsn]
+	return c, ok
+}
+
+// popDuplicates returns an array of TSN values that were found duplicate.
+func (q *payloadQueue) popDuplicates() []uint32 {
+	dups := q.dupTSN
+	q.dupTSN = []uint32{}
+	return dups
+}
+
+func (q *payloadQueue) getGapAckBlocks(cumulativeTSN uint32) (gapAckBlocks []gapAckBlock) {
+	var b gapAckBlock
+
+	if len(q.chunkMap) == 0 {
+		return []gapAckBlock{}
+	}
+
+	q.updateSortedKeys()
+
+	for i, tsn := range q.sorted {
+		if i == 0 {
+			b.start = uint16(tsn - cumulativeTSN)
+			b.end = b.start
+			continue
+		}
+		diff := uint16(tsn - cumulativeTSN)
+		if b.end+1 == diff {
+			b.end++
+		} else {
+			gapAckBlocks = append(gapAckBlocks, gapAckBlock{
+				start: b.start,
+				end:   b.end,
+			})
+			b.start = diff
+			b.end = diff
+		}
+	}
+
+	gapAckBlocks = append(gapAckBlocks, gapAckBlock{
+		start: b.start,
+		end:   b.end,
+	})
+
+	return gapAckBlocks
+}
+
+func (q *payloadQueue) getGapAckBlocksString(cumulativeTSN uint32) string {
+	gapAckBlocks := q.getGapAckBlocks(cumulativeTSN)
+	str := fmt.Sprintf("cumTSN=%d", cumulativeTSN)
+	for _, b := range gapAckBlocks {
+		str += fmt.Sprintf(",%d-%d", b.start, b.end)
+	}
+	return str
+}
+
+func (q *payloadQueue) markAsAcked(tsn uint32) int {
+	var nBytesAcked int
+	if c, ok := q.chunkMap[tsn]; ok {
+		c.acked = true
+		c.retransmit = false
+		nBytesAcked = len(c.userData)
+		q.nBytes -= nBytesAcked
+		c.userData = []byte{}
+	}
+
+	return nBytesAcked
+}
+
+func (q *payloadQueue) getLastTSNReceived() (uint32, bool) {
+	q.updateSortedKeys()
+
+	qlen := len(q.sorted)
+	if qlen == 0 {
+		return 0, false
+	}
+	return q.sorted[qlen-1], true
+}
+
+func (q *payloadQueue) markAllToRetrasmit() {
+	for _, c := range q.chunkMap {
+		if c.acked || c.abandoned() {
+			continue
+		}
+		c.retransmit = true
+	}
+}
+
+func (q *payloadQueue) getNumBytes() int {
+	return q.nBytes
+}
+
+func (q *payloadQueue) size() int {
+	return len(q.chunkMap)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/pending_queue.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/pending_queue.go
new file mode 100644
index 000000000..5f204d33d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/pending_queue.go
@@ -0,0 +1,138 @@
+package sctp
+
+import (
+	"github.com/pkg/errors"
+)
+
+// pendingBaseQueue
+
+type pendingBaseQueue struct {
+	queue []*chunkPayloadData
+}
+
+func newPendingBaseQueue() *pendingBaseQueue {
+	return &pendingBaseQueue{queue: []*chunkPayloadData{}}
+}
+
+func (q *pendingBaseQueue) push(c *chunkPayloadData) {
+	q.queue = append(q.queue, c)
+}
+
+func (q *pendingBaseQueue) pop() *chunkPayloadData {
+	if len(q.queue) == 0 {
+		return nil
+	}
+	c := q.queue[0]
+	q.queue = q.queue[1:]
+	return c
+}
+
+func (q *pendingBaseQueue) get(i int) *chunkPayloadData {
+	if len(q.queue) == 0 || i < 0 || i >= len(q.queue) {
+		return nil
+	}
+	return q.queue[i]
+}
+
+func (q *pendingBaseQueue) size() int {
+	return len(q.queue)
+}
+
+// pendingQueue
+
+type pendingQueue struct {
+	unorderedQueue      *pendingBaseQueue
+	orderedQueue        *pendingBaseQueue
+	nBytes              int
+	selected            bool
+	unorderedIsSelected bool
+}
+
+var (
+	errUnexpectedChuckPoppedUnordered = errors.New("unexpected chunk popped (unordered)")
+	errUnexpectedChuckPoppedOrdered   = errors.New("unexpected chunk popped (ordered)")
+	errUnexpectedQState               = errors.New("unexpected q state (should've been selected)")
+)
+
+func newPendingQueue() *pendingQueue {
+	return &pendingQueue{
+		unorderedQueue: newPendingBaseQueue(),
+		orderedQueue:   newPendingBaseQueue(),
+	}
+}
+
+func (q *pendingQueue) push(c *chunkPayloadData) {
+	if c.unordered {
+		q.unorderedQueue.push(c)
+	} else {
+		q.orderedQueue.push(c)
+	}
+	q.nBytes += len(c.userData)
+}
+
+func (q *pendingQueue) peek() *chunkPayloadData {
+	if q.selected {
+		if q.unorderedIsSelected {
+			return q.unorderedQueue.get(0)
+		}
+		return q.orderedQueue.get(0)
+	}
+
+	if c := q.unorderedQueue.get(0); c != nil {
+		return c
+	}
+	return q.orderedQueue.get(0)
+}
+
+func (q *pendingQueue) pop(c *chunkPayloadData) error {
+	if q.selected {
+		var popped *chunkPayloadData
+		if q.unorderedIsSelected {
+			popped = q.unorderedQueue.pop()
+			if popped != c {
+				return errUnexpectedChuckPoppedUnordered
+			}
+		} else {
+			popped = q.orderedQueue.pop()
+			if popped != c {
+				return errUnexpectedChuckPoppedOrdered
+			}
+		}
+		if popped.endingFragment {
+			q.selected = false
+		}
+	} else {
+		if !c.beginningFragment {
+			return errUnexpectedQState
+		}
+		if c.unordered {
+			popped := q.unorderedQueue.pop()
+			if popped != c {
+				return errUnexpectedChuckPoppedUnordered
+			}
+			if !popped.endingFragment {
+				q.selected = true
+				q.unorderedIsSelected = true
+			}
+		} else {
+			popped := q.orderedQueue.pop()
+			if popped != c {
+				return errUnexpectedChuckPoppedOrdered
+			}
+			if !popped.endingFragment {
+				q.selected = true
+				q.unorderedIsSelected = false
+			}
+		}
+	}
+	q.nBytes -= len(c.userData)
+	return nil
+}
+
+func (q *pendingQueue) getNumBytes() int {
+	return q.nBytes
+}
+
+func (q *pendingQueue) size() int {
+	return q.unorderedQueue.size() + q.orderedQueue.size()
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/reassembly_queue.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/reassembly_queue.go
new file mode 100644
index 000000000..f71d59c91
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/reassembly_queue.go
@@ -0,0 +1,353 @@
+package sctp
+
+import (
+	"io"
+	"sort"
+	"sync/atomic"
+
+	"github.com/pkg/errors"
+)
+
+func sortChunksByTSN(a []*chunkPayloadData) {
+	sort.Slice(a, func(i, j int) bool {
+		return sna32LT(a[i].tsn, a[j].tsn)
+	})
+}
+
+func sortChunksBySSN(a []*chunkSet) {
+	sort.Slice(a, func(i, j int) bool {
+		return sna16LT(a[i].ssn, a[j].ssn)
+	})
+}
+
+// chunkSet is a set of chunks that share the same SSN
+type chunkSet struct {
+	ssn    uint16 // used only with the ordered chunks
+	ppi    PayloadProtocolIdentifier
+	chunks []*chunkPayloadData
+}
+
+func newChunkSet(ssn uint16, ppi PayloadProtocolIdentifier) *chunkSet {
+	return &chunkSet{
+		ssn:    ssn,
+		ppi:    ppi,
+		chunks: []*chunkPayloadData{},
+	}
+}
+
+func (set *chunkSet) push(chunk *chunkPayloadData) bool {
+	// check if dup
+	for _, c := range set.chunks {
+		if c.tsn == chunk.tsn {
+			return false
+		}
+	}
+
+	// append and sort
+	set.chunks = append(set.chunks, chunk)
+	sortChunksByTSN(set.chunks)
+
+	// Check if we now have a complete set
+	complete := set.isComplete()
+	return complete
+}
+
+func (set *chunkSet) isComplete() bool {
+	// Condition for complete set
+	//   0. Has at least one chunk.
+	//   1. Begins with beginningFragment set to true
+	//   2. Ends with endingFragment set to true
+	//   3. TSN monotinically increase by 1 from beginning to end
+
+	// 0.
+	nChunks := len(set.chunks)
+	if nChunks == 0 {
+		return false
+	}
+
+	// 1.
+	if !set.chunks[0].beginningFragment {
+		return false
+	}
+
+	// 2.
+	if !set.chunks[nChunks-1].endingFragment {
+		return false
+	}
+
+	// 3.
+	var lastTSN uint32
+	for i, c := range set.chunks {
+		if i > 0 {
+			// Fragments must have contiguous TSN
+			// From RFC 4960 Section 3.3.1:
+			//   When a user message is fragmented into multiple chunks, the TSNs are
+			//   used by the receiver to reassemble the message.  This means that the
+			//   TSNs for each fragment of a fragmented user message MUST be strictly
+			//   sequential.
+			if c.tsn != lastTSN+1 {
+				// mid or end fragment is missing
+				return false
+			}
+		}
+
+		lastTSN = c.tsn
+	}
+
+	return true
+}
+
+type reassemblyQueue struct {
+	si              uint16
+	nextSSN         uint16 // expected SSN for next ordered chunk
+	ordered         []*chunkSet
+	unordered       []*chunkSet
+	unorderedChunks []*chunkPayloadData
+	nBytes          uint64
+}
+
+var errTryAgain = errors.New("try again")
+
+func newReassemblyQueue(si uint16) *reassemblyQueue {
+	// From RFC 4960 Sec 6.5:
+	//   The Stream Sequence Number in all the streams MUST start from 0 when
+	//   the association is established.  Also, when the Stream Sequence
+	//   Number reaches the value 65535 the next Stream Sequence Number MUST
+	//   be set to 0.
+	return &reassemblyQueue{
+		si:        si,
+		nextSSN:   0, // From RFC 4960 Sec 6.5:
+		ordered:   make([]*chunkSet, 0),
+		unordered: make([]*chunkSet, 0),
+	}
+}
+
+func (r *reassemblyQueue) push(chunk *chunkPayloadData) bool {
+	var cset *chunkSet
+
+	if chunk.streamIdentifier != r.si {
+		return false
+	}
+
+	if chunk.unordered {
+		// First, insert into unorderedChunks array
+		r.unorderedChunks = append(r.unorderedChunks, chunk)
+		atomic.AddUint64(&r.nBytes, uint64(len(chunk.userData)))
+		sortChunksByTSN(r.unorderedChunks)
+
+		// Scan unorderedChunks that are contiguous (in TSN)
+		cset = r.findCompleteUnorderedChunkSet()
+
+		// If found, append the complete set to the unordered array
+		if cset != nil {
+			r.unordered = append(r.unordered, cset)
+			return true
+		}
+
+		return false
+	}
+
+	// This is an ordered chunk
+
+	if sna16LT(chunk.streamSequenceNumber, r.nextSSN) {
+		return false
+	}
+
+	// Check if a chunkSet with the SSN already exists
+	for _, set := range r.ordered {
+		if set.ssn == chunk.streamSequenceNumber {
+			cset = set
+			break
+		}
+	}
+
+	// If not found, create a new chunkSet
+	if cset == nil {
+		cset = newChunkSet(chunk.streamSequenceNumber, chunk.payloadType)
+		r.ordered = append(r.ordered, cset)
+		if !chunk.unordered {
+			sortChunksBySSN(r.ordered)
+		}
+	}
+
+	atomic.AddUint64(&r.nBytes, uint64(len(chunk.userData)))
+
+	return cset.push(chunk)
+}
+
+func (r *reassemblyQueue) findCompleteUnorderedChunkSet() *chunkSet {
+	startIdx := -1
+	nChunks := 0
+	var lastTSN uint32
+	var found bool
+
+	for i, c := range r.unorderedChunks {
+		// seek beigining
+		if c.beginningFragment {
+			startIdx = i
+			nChunks = 1
+			lastTSN = c.tsn
+
+			if c.endingFragment {
+				found = true
+				break
+			}
+			continue
+		}
+
+		if startIdx < 0 {
+			continue
+		}
+
+		// Check if contiguous in TSN
+		if c.tsn != lastTSN+1 {
+			startIdx = -1
+			continue
+		}
+
+		lastTSN = c.tsn
+		nChunks++
+
+		if c.endingFragment {
+			found = true
+			break
+		}
+	}
+
+	if !found {
+		return nil
+	}
+
+	// Extract the range of chunks
+	var chunks []*chunkPayloadData
+	chunks = append(chunks, r.unorderedChunks[startIdx:startIdx+nChunks]...)
+
+	r.unorderedChunks = append(
+		r.unorderedChunks[:startIdx],
+		r.unorderedChunks[startIdx+nChunks:]...)
+
+	chunkSet := newChunkSet(0, chunks[0].payloadType)
+	chunkSet.chunks = chunks
+
+	return chunkSet
+}
+
+func (r *reassemblyQueue) isReadable() bool {
+	// Check unordered first
+	if len(r.unordered) > 0 {
+		// The chunk sets in r.unordered should all be complete.
+		return true
+	}
+
+	// Check ordered sets
+	if len(r.ordered) > 0 {
+		cset := r.ordered[0]
+		if cset.isComplete() {
+			if sna16LTE(cset.ssn, r.nextSSN) {
+				return true
+			}
+		}
+	}
+	return false
+}
+
+func (r *reassemblyQueue) read(buf []byte) (int, PayloadProtocolIdentifier, error) {
+	var cset *chunkSet
+	// Check unordered first
+	switch {
+	case len(r.unordered) > 0:
+		cset = r.unordered[0]
+		r.unordered = r.unordered[1:]
+	case len(r.ordered) > 0:
+		// Now, check ordered
+		cset = r.ordered[0]
+		if !cset.isComplete() {
+			return 0, 0, errTryAgain
+		}
+		if sna16GT(cset.ssn, r.nextSSN) {
+			return 0, 0, errTryAgain
+		}
+		r.ordered = r.ordered[1:]
+		if cset.ssn == r.nextSSN {
+			r.nextSSN++
+		}
+	default:
+		return 0, 0, errTryAgain
+	}
+
+	// Concat all fragments into the buffer
+	nWritten := 0
+	ppi := cset.ppi
+	var err error
+	for _, c := range cset.chunks {
+		toCopy := len(c.userData)
+		r.subtractNumBytes(toCopy)
+		if err == nil {
+			n := copy(buf[nWritten:], c.userData)
+			nWritten += n
+			if n < toCopy {
+				err = io.ErrShortBuffer
+			}
+		}
+	}
+
+	return nWritten, ppi, err
+}
+
+func (r *reassemblyQueue) forwardTSNForOrdered(lastSSN uint16) {
+	// Use lastSSN to locate a chunkSet then remove it if the set has
+	// not been complete
+	keep := []*chunkSet{}
+	for _, set := range r.ordered {
+		if sna16LTE(set.ssn, lastSSN) {
+			if !set.isComplete() {
+				// drop the set
+				for _, c := range set.chunks {
+					r.subtractNumBytes(len(c.userData))
+				}
+				continue
+			}
+		}
+		keep = append(keep, set)
+	}
+	r.ordered = keep
+
+	// Finally, forward nextSSN
+	if sna16LTE(r.nextSSN, lastSSN) {
+		r.nextSSN = lastSSN + 1
+	}
+}
+
+func (r *reassemblyQueue) forwardTSNForUnordered(newCumulativeTSN uint32) {
+	// Remove all fragments in the unordered sets that contains chunks
+	// equal to or older than `newCumulativeTSN`.
+	// We know all sets in the r.unordered are complete ones.
+	// Just remove chunks that are equal to or older than newCumulativeTSN
+	// from the unorderedChunks
+	lastIdx := -1
+	for i, c := range r.unorderedChunks {
+		if sna32GT(c.tsn, newCumulativeTSN) {
+			break
+		}
+		lastIdx = i
+	}
+	if lastIdx >= 0 {
+		for _, c := range r.unorderedChunks[0 : lastIdx+1] {
+			r.subtractNumBytes(len(c.userData))
+		}
+		r.unorderedChunks = r.unorderedChunks[lastIdx+1:]
+	}
+}
+
+func (r *reassemblyQueue) subtractNumBytes(nBytes int) {
+	cur := atomic.LoadUint64(&r.nBytes)
+	if int(cur) >= nBytes {
+		atomic.AddUint64(&r.nBytes, -uint64(nBytes))
+	} else {
+		atomic.StoreUint64(&r.nBytes, 0)
+	}
+}
+
+func (r *reassemblyQueue) getNumBytes() int {
+	return int(atomic.LoadUint64(&r.nBytes))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/renovate.json b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/renovate.json
new file mode 100644
index 000000000..4400fd9b2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/renovate.json
@@ -0,0 +1,15 @@
+{
+  "extends": [
+    "config:base"
+  ],
+  "postUpdateOptions": [
+    "gomodTidy"
+  ],
+  "commitBody": "Generated by renovateBot",
+  "packageRules": [
+    {
+      "packagePatterns": ["^golang.org/x/"],
+      "schedule": ["on the first day of the month"]
+    }
+  ]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/rtx_timer.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/rtx_timer.go
new file mode 100644
index 000000000..14bc39d77
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/rtx_timer.go
@@ -0,0 +1,219 @@
+package sctp
+
+import (
+	"math"
+	"sync"
+	"time"
+)
+
+const (
+	rtoInitial     float64 = 3.0 * 1000  // msec
+	rtoMin         float64 = 1.0 * 1000  // msec
+	rtoMax         float64 = 60.0 * 1000 // msec
+	rtoAlpha       float64 = 0.125
+	rtoBeta        float64 = 0.25
+	maxInitRetrans uint    = 8
+	pathMaxRetrans uint    = 5
+	noMaxRetrans   uint    = 0
+)
+
+// rtoManager manages Rtx timeout values.
+// This is an implementation of RFC 4960 sec 6.3.1.
+type rtoManager struct {
+	srtt     float64
+	rttvar   float64
+	rto      float64
+	noUpdate bool
+	mutex    sync.RWMutex
+}
+
+// newRTOManager creates a new rtoManager.
+func newRTOManager() *rtoManager {
+	return &rtoManager{
+		rto: rtoInitial,
+	}
+}
+
+// setNewRTT takes a newly measured RTT then adjust the RTO in msec.
+func (m *rtoManager) setNewRTT(rtt float64) float64 {
+	m.mutex.Lock()
+	defer m.mutex.Unlock()
+
+	if m.noUpdate {
+		return m.srtt
+	}
+
+	if m.srtt == 0 {
+		// First measurement
+		m.srtt = rtt
+		m.rttvar = rtt / 2
+	} else {
+		// Subsequent rtt measurement
+		m.rttvar = (1-rtoBeta)*m.rttvar + rtoBeta*(math.Abs(m.srtt-rtt))
+		m.srtt = (1-rtoAlpha)*m.srtt + rtoAlpha*rtt
+	}
+	m.rto = math.Min(math.Max(m.srtt+4*m.rttvar, rtoMin), rtoMax)
+	return m.srtt
+}
+
+// getRTO simply returns the current RTO in msec.
+func (m *rtoManager) getRTO() float64 {
+	m.mutex.RLock()
+	defer m.mutex.RUnlock()
+
+	return m.rto
+}
+
+// reset resets the RTO variables to the initial values.
+func (m *rtoManager) reset() {
+	m.mutex.Lock()
+	defer m.mutex.Unlock()
+
+	if m.noUpdate {
+		return
+	}
+
+	m.srtt = 0
+	m.rttvar = 0
+	m.rto = rtoInitial
+}
+
+// set RTO value for testing
+func (m *rtoManager) setRTO(rto float64, noUpdate bool) {
+	m.mutex.Lock()
+	defer m.mutex.Unlock()
+
+	m.rto = rto
+	m.noUpdate = noUpdate
+}
+
+// rtxTimerObserver is the inteface to a timer observer.
+// NOTE: Observers MUST NOT call start() or stop() method on rtxTimer
+// from within these callbacks.
+type rtxTimerObserver interface {
+	onRetransmissionTimeout(timerID int, n uint)
+	onRetransmissionFailure(timerID int)
+}
+
+// rtxTimer provides the retnransmission timer conforms with RFC 4960 Sec 6.3.1
+type rtxTimer struct {
+	id         int
+	observer   rtxTimerObserver
+	maxRetrans uint
+	stopFunc   stopTimerLoop
+	closed     bool
+	mutex      sync.RWMutex
+}
+
+type stopTimerLoop func()
+
+// newRTXTimer creates a new retransmission timer.
+// if maxRetrans is set to 0, it will keep retransmitting until stop() is called.
+// (it will never make onRetransmissionFailure() callback.
+func newRTXTimer(id int, observer rtxTimerObserver, maxRetrans uint) *rtxTimer {
+	return &rtxTimer{
+		id:         id,
+		observer:   observer,
+		maxRetrans: maxRetrans,
+	}
+}
+
+// start starts the timer.
+func (t *rtxTimer) start(rto float64) bool {
+	t.mutex.Lock()
+	defer t.mutex.Unlock()
+
+	// this timer is already closed
+	if t.closed {
+		return false
+	}
+
+	// this is a noop if the timer is always running
+	if t.stopFunc != nil {
+		return false
+	}
+
+	// Note: rto value is intentionally not capped by RTO.Min to allow
+	// fast timeout for the tests. Non-test code should pass in the
+	// rto generated by rtoManager getRTO() method which caps the
+	// value at RTO.Min or at RTO.Max.
+	var nRtos uint
+
+	cancelCh := make(chan struct{})
+
+	go func() {
+		canceling := false
+
+		for !canceling {
+			timeout := calculateNextTimeout(rto, nRtos)
+			timer := time.NewTimer(time.Duration(timeout) * time.Millisecond)
+
+			select {
+			case <-timer.C:
+				nRtos++
+				if t.maxRetrans == 0 || nRtos <= t.maxRetrans {
+					t.observer.onRetransmissionTimeout(t.id, nRtos)
+				} else {
+					t.stop()
+					t.observer.onRetransmissionFailure(t.id)
+				}
+			case <-cancelCh:
+				canceling = true
+				timer.Stop()
+			}
+		}
+	}()
+
+	t.stopFunc = func() {
+		close(cancelCh)
+	}
+
+	return true
+}
+
+// stop stops the timer.
+func (t *rtxTimer) stop() {
+	t.mutex.Lock()
+	defer t.mutex.Unlock()
+
+	if t.stopFunc != nil {
+		t.stopFunc()
+		t.stopFunc = nil
+	}
+}
+
+// closes the timer. this is similar to stop() but subsequent start() call
+// will fail (the timer is no longer usable)
+func (t *rtxTimer) close() {
+	t.mutex.Lock()
+	defer t.mutex.Unlock()
+
+	if t.stopFunc != nil {
+		t.stopFunc()
+		t.stopFunc = nil
+	}
+
+	t.closed = true
+}
+
+// isRunning tests if the timer is running.
+// Debug purpose only
+func (t *rtxTimer) isRunning() bool {
+	t.mutex.RLock()
+	defer t.mutex.RUnlock()
+
+	return (t.stopFunc != nil)
+}
+
+func calculateNextTimeout(rto float64, nRtos uint) float64 {
+	// RFC 4096 sec 6.3.3.  Handle T3-rtx Expiration
+	//   E2)  For the destination address for which the timer expires, set RTO
+	//        <- RTO * 2 ("back off the timer").  The maximum value discussed
+	//        in rule C7 above (RTO.max) may be used to provide an upper bound
+	//        to this doubling operation.
+	if nRtos < 31 {
+		m := 1 << nRtos
+		return math.Min(rto*float64(m), rtoMax)
+	}
+	return rtoMax
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/sctp.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/sctp.go
new file mode 100644
index 000000000..e60134293
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/sctp.go
@@ -0,0 +1,2 @@
+// Package sctp implements the SCTP spec
+package sctp
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/stream.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/stream.go
new file mode 100644
index 000000000..8a17b97c6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/stream.go
@@ -0,0 +1,357 @@
+package sctp
+
+import (
+	"io"
+	"math"
+	"sync"
+
+	"github.com/pion/logging"
+	"github.com/pkg/errors"
+)
+
+const (
+	// ReliabilityTypeReliable is used for reliable transmission
+	ReliabilityTypeReliable byte = 0
+	// ReliabilityTypeRexmit is used for partial reliability by retransmission count
+	ReliabilityTypeRexmit byte = 1
+	// ReliabilityTypeTimed is used for partial reliability by retransmission duration
+	ReliabilityTypeTimed byte = 2
+)
+
+// Stream represents an SCTP stream
+type Stream struct {
+	association         *Association
+	lock                sync.RWMutex
+	streamIdentifier    uint16
+	defaultPayloadType  PayloadProtocolIdentifier
+	reassemblyQueue     *reassemblyQueue
+	sequenceNumber      uint16
+	readNotifier        *sync.Cond
+	readErr             error
+	writeErr            error
+	unordered           bool
+	reliabilityType     byte
+	reliabilityValue    uint32
+	bufferedAmount      uint64
+	bufferedAmountLow   uint64
+	onBufferedAmountLow func()
+	log                 logging.LeveledLogger
+	name                string
+}
+
+// StreamIdentifier returns the Stream identifier associated to the stream.
+func (s *Stream) StreamIdentifier() uint16 {
+	s.lock.RLock()
+	defer s.lock.RUnlock()
+	return s.streamIdentifier
+}
+
+// SetDefaultPayloadType sets the default payload type used by Write.
+func (s *Stream) SetDefaultPayloadType(defaultPayloadType PayloadProtocolIdentifier) {
+	s.lock.Lock()
+	defer s.lock.Unlock()
+
+	s.setDefaultPayloadType(defaultPayloadType)
+}
+
+// setDefaultPayloadType sets the defaultPayloadType. The caller should hold the lock.
+func (s *Stream) setDefaultPayloadType(defaultPayloadType PayloadProtocolIdentifier) {
+	s.defaultPayloadType = defaultPayloadType
+}
+
+// SetReliabilityParams sets reliability parameters for this stream.
+func (s *Stream) SetReliabilityParams(unordered bool, relType byte, relVal uint32) {
+	s.lock.Lock()
+	defer s.lock.Unlock()
+
+	s.setReliabilityParams(unordered, relType, relVal)
+}
+
+// setReliabilityParams sets reliability parameters for this stream.
+// The caller should hold the lock.
+func (s *Stream) setReliabilityParams(unordered bool, relType byte, relVal uint32) {
+	s.log.Debugf("[%s] reliability params: ordered=%v type=%d value=%d",
+		s.name, !unordered, relType, relVal)
+	s.unordered = unordered
+	s.reliabilityType = relType
+	s.reliabilityValue = relVal
+}
+
+// Read reads a packet of len(p) bytes, dropping the Payload Protocol Identifier.
+// Returns EOF when the stream is reset or an error if the stream is closed
+// otherwise.
+func (s *Stream) Read(p []byte) (int, error) {
+	n, _, err := s.ReadSCTP(p)
+	return n, err
+}
+
+// ReadSCTP reads a packet of len(p) bytes and returns the associated Payload
+// Protocol Identifier.
+// Returns EOF when the stream is reset or an error if the stream is closed
+// otherwise.
+func (s *Stream) ReadSCTP(p []byte) (int, PayloadProtocolIdentifier, error) {
+	s.lock.Lock()
+	defer s.lock.Unlock()
+
+	for {
+		n, ppi, err := s.reassemblyQueue.read(p)
+		if err == nil {
+			return n, ppi, nil
+		} else if errors.Is(err, io.ErrShortBuffer) {
+			return 0, PayloadProtocolIdentifier(0), err
+		}
+
+		err = s.readErr
+		if err != nil {
+			return 0, PayloadProtocolIdentifier(0), err
+		}
+
+		s.readNotifier.Wait()
+	}
+}
+
+func (s *Stream) handleData(pd *chunkPayloadData) {
+	s.lock.Lock()
+	defer s.lock.Unlock()
+
+	var readable bool
+	if s.reassemblyQueue.push(pd) {
+		readable = s.reassemblyQueue.isReadable()
+		s.log.Debugf("[%s] reassemblyQueue readable=%v", s.name, readable)
+		if readable {
+			s.log.Debugf("[%s] readNotifier.signal()", s.name)
+			s.readNotifier.Signal()
+			s.log.Debugf("[%s] readNotifier.signal() done", s.name)
+		}
+	}
+}
+
+func (s *Stream) handleForwardTSNForOrdered(ssn uint16) {
+	var readable bool
+
+	func() {
+		s.lock.Lock()
+		defer s.lock.Unlock()
+
+		if s.unordered {
+			return // unordered chunks are handled by handleForwardUnordered method
+		}
+
+		// Remove all chunks older than or equal to the new TSN from
+		// the reassemblyQueue.
+		s.reassemblyQueue.forwardTSNForOrdered(ssn)
+		readable = s.reassemblyQueue.isReadable()
+	}()
+
+	// Notify the reader asynchronously if there's a data chunk to read.
+	if readable {
+		s.readNotifier.Signal()
+	}
+}
+
+func (s *Stream) handleForwardTSNForUnordered(newCumulativeTSN uint32) {
+	var readable bool
+
+	func() {
+		s.lock.Lock()
+		defer s.lock.Unlock()
+
+		if !s.unordered {
+			return // ordered chunks are handled by handleForwardTSNOrdered method
+		}
+
+		// Remove all chunks older than or equal to the new TSN from
+		// the reassemblyQueue.
+		s.reassemblyQueue.forwardTSNForUnordered(newCumulativeTSN)
+		readable = s.reassemblyQueue.isReadable()
+	}()
+
+	// Notify the reader asynchronously if there's a data chunk to read.
+	if readable {
+		s.readNotifier.Signal()
+	}
+}
+
+// Write writes len(p) bytes from p with the default Payload Protocol Identifier
+func (s *Stream) Write(p []byte) (n int, err error) {
+	return s.WriteSCTP(p, s.defaultPayloadType)
+}
+
+// WriteSCTP writes len(p) bytes from p to the DTLS connection
+func (s *Stream) WriteSCTP(p []byte, ppi PayloadProtocolIdentifier) (n int, err error) {
+	maxMessageSize := s.association.MaxMessageSize()
+	if len(p) > int(maxMessageSize) {
+		return 0, errors.Errorf("Outbound packet larger than maximum message size %v", math.MaxUint16)
+	}
+
+	s.lock.RLock()
+	err = s.writeErr
+	s.lock.RUnlock()
+	if err != nil {
+		return 0, err
+	}
+
+	chunks := s.packetize(p, ppi)
+
+	return len(p), s.association.sendPayloadData(chunks)
+}
+
+func (s *Stream) packetize(raw []byte, ppi PayloadProtocolIdentifier) []*chunkPayloadData {
+	s.lock.Lock()
+	defer s.lock.Unlock()
+
+	i := uint32(0)
+	remaining := uint32(len(raw))
+
+	// From draft-ietf-rtcweb-data-protocol-09, section 6:
+	//   All Data Channel Establishment Protocol messages MUST be sent using
+	//   ordered delivery and reliable transmission.
+	unordered := ppi != PayloadTypeWebRTCDCEP && s.unordered
+
+	var chunks []*chunkPayloadData
+	var head *chunkPayloadData
+	for remaining != 0 {
+		fragmentSize := min32(s.association.maxPayloadSize, remaining)
+
+		// Copy the userdata since we'll have to store it until acked
+		// and the caller may re-use the buffer in the mean time
+		userData := make([]byte, fragmentSize)
+		copy(userData, raw[i:i+fragmentSize])
+
+		chunk := &chunkPayloadData{
+			streamIdentifier:     s.streamIdentifier,
+			userData:             userData,
+			unordered:            unordered,
+			beginningFragment:    i == 0,
+			endingFragment:       remaining-fragmentSize == 0,
+			immediateSack:        false,
+			payloadType:          ppi,
+			streamSequenceNumber: s.sequenceNumber,
+			head:                 head,
+		}
+
+		if head == nil {
+			head = chunk
+		}
+
+		chunks = append(chunks, chunk)
+
+		remaining -= fragmentSize
+		i += fragmentSize
+	}
+
+	// RFC 4960 Sec 6.6
+	// Note: When transmitting ordered and unordered data, an endpoint does
+	// not increment its Stream Sequence Number when transmitting a DATA
+	// chunk with U flag set to 1.
+	if !unordered {
+		s.sequenceNumber++
+	}
+
+	s.bufferedAmount += uint64(len(raw))
+	s.log.Tracef("[%s] bufferedAmount = %d", s.name, s.bufferedAmount)
+
+	return chunks
+}
+
+// Close closes the write-direction of the stream.
+// Future calls to Write are not permitted after calling Close.
+func (s *Stream) Close() error {
+	if sid, isOpen := func() (uint16, bool) {
+		s.lock.Lock()
+		defer s.lock.Unlock()
+
+		isOpen := true
+		if s.writeErr == nil {
+			s.writeErr = errors.New("Stream closed")
+		} else {
+			isOpen = false
+		}
+
+		if s.readErr == nil {
+			s.readErr = io.EOF
+		} else {
+			isOpen = false
+		}
+		s.readNotifier.Broadcast() // broadcast regardless
+
+		return s.streamIdentifier, isOpen
+	}(); isOpen {
+		// Reset the outgoing stream
+		// https://tools.ietf.org/html/rfc6525
+		return s.association.sendResetRequest(sid)
+	}
+
+	return nil
+}
+
+// BufferedAmount returns the number of bytes of data currently queued to be sent over this stream.
+func (s *Stream) BufferedAmount() uint64 {
+	s.lock.RLock()
+	defer s.lock.RUnlock()
+
+	return s.bufferedAmount
+}
+
+// BufferedAmountLowThreshold returns the number of bytes of buffered outgoing data that is
+// considered "low." Defaults to 0.
+func (s *Stream) BufferedAmountLowThreshold() uint64 {
+	s.lock.RLock()
+	defer s.lock.RUnlock()
+
+	return s.bufferedAmountLow
+}
+
+// SetBufferedAmountLowThreshold is used to update the threshold.
+// See BufferedAmountLowThreshold().
+func (s *Stream) SetBufferedAmountLowThreshold(th uint64) {
+	s.lock.Lock()
+	defer s.lock.Unlock()
+
+	s.bufferedAmountLow = th
+}
+
+// OnBufferedAmountLow sets the callback handler which would be called when the number of
+// bytes of outgoing data buffered is lower than the threshold.
+func (s *Stream) OnBufferedAmountLow(f func()) {
+	s.lock.Lock()
+	defer s.lock.Unlock()
+
+	s.onBufferedAmountLow = f
+}
+
+// This method is called by association's readLoop (go-)routine to notify this stream
+// of the specified amount of outgoing data has been delivered to the peer.
+func (s *Stream) onBufferReleased(nBytesReleased int) {
+	if nBytesReleased <= 0 {
+		return
+	}
+
+	s.lock.Lock()
+
+	fromAmount := s.bufferedAmount
+
+	if s.bufferedAmount < uint64(nBytesReleased) {
+		s.bufferedAmount = 0
+		s.log.Errorf("[%s] released buffer size %d should be <= %d",
+			s.name, nBytesReleased, s.bufferedAmount)
+	} else {
+		s.bufferedAmount -= uint64(nBytesReleased)
+	}
+
+	s.log.Tracef("[%s] bufferedAmount = %d", s.name, s.bufferedAmount)
+
+	if s.onBufferedAmountLow != nil && fromAmount > s.bufferedAmountLow && s.bufferedAmount <= s.bufferedAmountLow {
+		f := s.onBufferedAmountLow
+		s.lock.Unlock()
+		f()
+		return
+	}
+
+	s.lock.Unlock()
+}
+
+func (s *Stream) getNumBytesInReassemblyQueue() int {
+	// No lock is required as it reads the size with atomic load function.
+	return s.reassemblyQueue.getNumBytes()
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/util.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/util.go
new file mode 100644
index 000000000..e2e54ab0c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sctp/util.go
@@ -0,0 +1,58 @@
+package sctp
+
+const (
+	paddingMultiple = 4
+)
+
+func getPadding(len int) int {
+	return (paddingMultiple - (len % paddingMultiple)) % paddingMultiple
+}
+
+func padByte(in []byte, cnt int) []byte {
+	if cnt < 0 {
+		cnt = 0
+	}
+	padding := make([]byte, cnt)
+	return append(in, padding...)
+}
+
+// Serial Number Arithmetic (RFC 1982)
+func sna32LT(i1, i2 uint32) bool {
+	return (i1 < i2 && i2-i1 < 1<<31) || (i1 > i2 && i1-i2 > 1<<31)
+}
+
+func sna32LTE(i1, i2 uint32) bool {
+	return i1 == i2 || sna32LT(i1, i2)
+}
+
+func sna32GT(i1, i2 uint32) bool {
+	return (i1 < i2 && (i2-i1) >= 1<<31) || (i1 > i2 && (i1-i2) <= 1<<31)
+}
+
+func sna32GTE(i1, i2 uint32) bool {
+	return i1 == i2 || sna32GT(i1, i2)
+}
+
+func sna32EQ(i1, i2 uint32) bool {
+	return i1 == i2
+}
+
+func sna16LT(i1, i2 uint16) bool {
+	return (i1 < i2 && (i2-i1) < 1<<15) || (i1 > i2 && (i1-i2) > 1<<15)
+}
+
+func sna16LTE(i1, i2 uint16) bool {
+	return i1 == i2 || sna16LT(i1, i2)
+}
+
+func sna16GT(i1, i2 uint16) bool {
+	return (i1 < i2 && (i2-i1) >= 1<<15) || (i1 > i2 && (i1-i2) <= 1<<15)
+}
+
+func sna16GTE(i1, i2 uint16) bool {
+	return i1 == i2 || sna16GT(i1, i2)
+}
+
+func sna16EQ(i1, i2 uint16) bool {
+	return i1 == i2
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/.gitignore b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/.gitignore
new file mode 100644
index 000000000..83db74ba5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/.gitignore
@@ -0,0 +1,24 @@
+### JetBrains IDE ###
+#####################
+.idea/
+
+### Emacs Temporary Files ###
+#############################
+*~
+
+### Folders ###
+###############
+bin/
+vendor/
+node_modules/
+
+### Files ###
+#############
+*.ivf
+*.ogg
+tags
+cover.out
+*.sw[poe]
+*.wasm
+examples/sfu-ws/cert.pem
+examples/sfu-ws/key.pem
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/.golangci.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/.golangci.yml
new file mode 100644
index 000000000..d6162c970
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/.golangci.yml
@@ -0,0 +1,89 @@
+linters-settings:
+  govet:
+    check-shadowing: true
+  misspell:
+    locale: US
+  exhaustive:
+    default-signifies-exhaustive: true
+  gomodguard:
+    blocked:
+      modules:
+        - github.com/pkg/errors:
+            recommendations:
+            - errors
+
+linters:
+  enable:
+    - asciicheck       # Simple linter to check that your code does not contain non-ASCII identifiers
+    - bodyclose        # checks whether HTTP response body is closed successfully
+    - deadcode         # Finds unused code
+    - depguard         # Go linter that checks if package imports are in a list of acceptable packages
+    - dogsled          # Checks assignments with too many blank identifiers (e.g. x, _, _, _, := f())
+    - dupl             # Tool for code clone detection
+    - errcheck         # Errcheck is a program for checking for unchecked errors in go programs. These unchecked errors can be critical bugs in some cases
+    - exhaustive       # check exhaustiveness of enum switch statements
+    - exportloopref    # checks for pointers to enclosing loop variables
+    - gci              # Gci control golang package import order and make it always deterministic.
+    - gochecknoglobals # Checks that no globals are present in Go code
+    - gochecknoinits   # Checks that no init functions are present in Go code
+    - gocognit         # Computes and checks the cognitive complexity of functions
+    - goconst          # Finds repeated strings that could be replaced by a constant
+    - gocritic         # The most opinionated Go source code linter
+    - godox            # Tool for detection of FIXME, TODO and other comment keywords
+    - goerr113         # Golang linter to check the errors handling expressions
+    - gofmt            # Gofmt checks whether code was gofmt-ed. By default this tool runs with -s option to check for code simplification
+    - gofumpt          # Gofumpt checks whether code was gofumpt-ed.
+    - goheader         # Checks is file header matches to pattern
+    - goimports        # Goimports does everything that gofmt does. Additionally it checks unused imports
+    - golint           # Golint differs from gofmt. Gofmt reformats Go source code, whereas golint prints out style mistakes
+    - gomodguard       # Allow and block list linter for direct Go module dependencies. This is different from depguard where there are different block types for example version constraints and module recommendations.
+    - goprintffuncname # Checks that printf-like functions are named with `f` at the end
+    - gosec            # Inspects source code for security problems
+    - gosimple         # Linter for Go source code that specializes in simplifying a code
+    - govet            # Vet examines Go source code and reports suspicious constructs, such as Printf calls whose arguments do not align with the format string
+    - ineffassign      # Detects when assignments to existing variables are not used
+    - misspell         # Finds commonly misspelled English words in comments
+    - nakedret         # Finds naked returns in functions greater than a specified function length
+    - noctx            # noctx finds sending http request without context.Context
+    - scopelint        # Scopelint checks for unpinned variables in go programs
+    - staticcheck      # Staticcheck is a go vet on steroids, applying a ton of static analysis checks
+    - structcheck      # Finds unused struct fields
+    - stylecheck       # Stylecheck is a replacement for golint
+    - typecheck        # Like the front-end of a Go compiler, parses and type-checks Go code
+    - unconvert        # Remove unnecessary type conversions
+    - unparam          # Reports unused function parameters
+    - unused           # Checks Go code for unused constants, variables, functions and types
+    - varcheck         # Finds unused global variables and constants
+    - whitespace       # Tool for detection of leading and trailing whitespace
+  disable:
+    - funlen           # Tool for detection of long functions
+    - gocyclo          # Computes and checks the cyclomatic complexity of functions
+    - godot            # Check if comments end in a period
+    - gomnd            # An analyzer to detect magic numbers.
+    - lll              # Reports long lines
+    - maligned         # Tool to detect Go structs that would take less memory if their fields were sorted
+    - nestif           # Reports deeply nested if statements
+    - nlreturn         # nlreturn checks for a new line before return and branch statements to increase code clarity
+    - nolintlint       # Reports ill-formed or insufficient nolint directives
+    - prealloc         # Finds slice declarations that could potentially be preallocated
+    - rowserrcheck     # checks whether Err of rows is checked successfully
+    - sqlclosecheck    # Checks that sql.Rows and sql.Stmt are closed.
+    - testpackage      # linter that makes you use a separate _test package
+    - wsl              # Whitespace Linter - Forces you to use empty lines!
+
+issues:
+  exclude-use-default: false
+  exclude-rules:
+    # Allow complex tests, better to be self contained
+    - path: _test\.go
+      linters:
+        - gocognit
+
+    # Allow complex main function in examples
+    - path: examples
+      text: "of func `main` is high"
+      linters:
+        - gocognit
+
+run:
+  skip-dirs-use-default: false
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/LICENSE
new file mode 100644
index 000000000..ab602974d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/README.md
new file mode 100644
index 000000000..e7d7ff692
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/README.md
@@ -0,0 +1,59 @@
+<h1 align="center">
+  <br>
+  Pion SDP
+  <br>
+</h1>
+<h4 align="center">A Go implementation of the SDP</h4>
+<p align="center">
+  <a href="https://pion.ly"><img src="https://img.shields.io/badge/pion-sdp-gray.svg?longCache=true&colorB=brightgreen" alt="Pion SDP"></a>
+  <a href="https://sourcegraph.com/github.com/pion/sdp?badge"><img src="https://sourcegraph.com/github.com/pion/sdp/-/badge.svg" alt="Sourcegraph Widget"></a>
+  <a href="https://pion.ly/slack"><img src="https://img.shields.io/badge/join-us%20on%20slack-gray.svg?longCache=true&logo=slack&colorB=brightgreen" alt="Slack Widget"></a>
+  <br>
+  <a href="https://travis-ci.org/pion/sdp"><img src="https://travis-ci.org/pion/sdp.svg?branch=master" alt="Build Status"></a>
+  <a href="https://pkg.go.dev/github.com/pion/sdp/v2"><img src="https://godoc.org/github.com/pion/sdp?status.svg" alt="GoDoc"></a>
+  <a href="https://codecov.io/gh/pion/sdp"><img src="https://codecov.io/gh/pion/sdp/branch/master/graph/badge.svg" alt="Coverage Status"></a>
+  <a href="https://goreportcard.com/report/github.com/pion/sdp"><img src="https://goreportcard.com/badge/github.com/pion/sdp" alt="Go Report Card"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+</p>
+<br>
+
+See [DESIGN.md](DESIGN.md) for an overview of features and future goals.
+
+### Roadmap
+The library is used as a part of our WebRTC implementation. Please refer to that [roadmap](https://github.com/pion/webrtc/issues/9) to track our major milestones.
+
+### Community
+Pion has an active community on the [Golang Slack](https://invite.slack.golangbridge.org/). Sign up and join the **#pion** channel for discussions and support. You can also use [Pion mailing list](https://groups.google.com/forum/#!forum/pion).
+
+We are always looking to support **your projects**. Please reach out if you have something to build!
+
+If you need commercial support or don't want to use public methods you can contact us at [team@pion.ly](mailto:team@pion.ly)
+
+### Contributing
+Check out the **[contributing wiki](https://github.com/pion/webrtc/wiki/Contributing)** to join the group of amazing people making this project possible:
+
+* [John Bradley](https://github.com/kc5nra) - *Original Author*
+* [Sean DuBois](https://github.com/Sean-Der) - *Original Author*
+* [Michiel De Backker](https://github.com/backkem) - *Public API, Initialization*
+* [Konstantin Itskov](https://github.com/trivigy) - *Fix documentation*
+* [chenkaiC4](https://github.com/chenkaiC4) - *Fix GolangCI Linter*
+* [Woodrow Douglass](https://github.com/wdouglass) *RTCP, RTP improvements, G.722 support, Bugfixes*
+* [Michael MacDonald](https://github.com/mjmac)
+* [Max Hawkins](https://github.com/maxhawkins)
+* [mchlrhw](https://github.com/mchlrhw)
+* [Hugo Arregui](https://github.com/hugoArregui)
+* [Guilherme Souza](https://github.com/gqgs)
+* [adwpc](https://github.com/adwpc) - *extmap add transport-cc*
+* [Atsushi Watanabe](https://github.com/at-wat)
+* [Luke S](https://github.com/encounter)
+* [Jerko Steiner](https://github.com/jeremija)
+* [Roman Romanenko](https://github.com/r-novel)
+* [Jason Brady](https://github.com/jbrady42)
+* [Kory Miller](https://github.com/jbrady42/korymiller1489)
+* [ZHENK](https://github.com/scorpionknifes)
+* [Tarrence van As](https://github.com/tarrencev)
+* [Maxim Oransky](https://github.com/sdfsdhgjkbmnmxc)
+* [Graham King](https://github.com/grahamking/)
+
+### License
+MIT License - see [LICENSE](LICENSE) for full text
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/base_lexer.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/base_lexer.go
new file mode 100644
index 000000000..45fe7994b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/base_lexer.go
@@ -0,0 +1,231 @@
+package sdp
+
+import (
+	"errors"
+	"fmt"
+	"io"
+)
+
+var errDocumentStart = errors.New("already on document start")
+
+type syntaxError struct {
+	s string
+	i int
+}
+
+func (e syntaxError) Error() string {
+	if e.i < 0 {
+		e.i = 0
+	}
+	head, middle, tail := e.s[:e.i], e.s[e.i:e.i+1], e.s[e.i+1:]
+	return fmt.Sprintf("%s --> %s <-- %s", head, middle, tail)
+}
+
+type baseLexer struct {
+	value []byte
+	pos   int
+}
+
+func (l baseLexer) syntaxError() error {
+	return syntaxError{s: string(l.value), i: l.pos - 1}
+}
+
+func (l *baseLexer) unreadByte() error {
+	if l.pos <= 0 {
+		return errDocumentStart
+	}
+	l.pos--
+	return nil
+}
+
+func (l *baseLexer) readByte() (byte, error) {
+	if l.pos >= len(l.value) {
+		return byte(0), io.EOF
+	}
+	ch := l.value[l.pos]
+	l.pos++
+	return ch, nil
+}
+
+func (l *baseLexer) nextLine() error {
+	for {
+		ch, err := l.readByte()
+		if err == io.EOF {
+			return nil
+		} else if err != nil {
+			return err
+		}
+		if !isNewline(ch) {
+			return l.unreadByte()
+		}
+	}
+}
+
+func (l *baseLexer) readWhitespace() error {
+	for {
+		ch, err := l.readByte()
+		if err == io.EOF {
+			return nil
+		} else if err != nil {
+			return err
+		}
+		if !isWhitespace(ch) {
+			return l.unreadByte()
+		}
+	}
+}
+
+func (l *baseLexer) readUint64Field() (i uint64, err error) {
+	for {
+		ch, err := l.readByte()
+		if err == io.EOF && i > 0 {
+			break
+		} else if err != nil {
+			return i, err
+		}
+
+		if isNewline(ch) {
+			if err := l.unreadByte(); err != nil {
+				return i, err
+			}
+			break
+		}
+
+		if isWhitespace(ch) {
+			if err := l.readWhitespace(); err != nil {
+				return i, err
+			}
+			break
+		}
+
+		switch ch {
+		case '0':
+			i *= 10
+		case '1':
+			i = i*10 + 1
+		case '2':
+			i = i*10 + 2
+		case '3':
+			i = i*10 + 3
+		case '4':
+			i = i*10 + 4
+		case '5':
+			i = i*10 + 5
+		case '6':
+			i = i*10 + 6
+		case '7':
+			i = i*10 + 7
+		case '8':
+			i = i*10 + 8
+		case '9':
+			i = i*10 + 9
+		default:
+			return i, l.syntaxError()
+		}
+	}
+
+	return i, nil
+}
+
+// Returns next field on this line or empty string if no more fields on line
+func (l *baseLexer) readField() (string, error) {
+	start := l.pos
+	stop := start
+	for {
+		stop = l.pos
+		ch, err := l.readByte()
+		if err == io.EOF && stop > start {
+			break
+		} else if err != nil {
+			return "", err
+		}
+
+		if isNewline(ch) {
+			if err := l.unreadByte(); err != nil {
+				return "", err
+			}
+			break
+		}
+
+		if isWhitespace(ch) {
+			if err := l.readWhitespace(); err != nil {
+				return "", err
+			}
+			break
+		}
+	}
+	return string(l.value[start:stop]), nil
+}
+
+// Returns symbols until line end
+func (l *baseLexer) readLine() (string, error) {
+	start := l.pos
+	trim := 1
+	for {
+		ch, err := l.readByte()
+		if err != nil {
+			return "", err
+		}
+		if ch == '\r' {
+			trim++
+		}
+		if ch == '\n' {
+			return string(l.value[start : l.pos-trim]), nil
+		}
+	}
+}
+
+func (l *baseLexer) readString(until byte) (string, error) {
+	start := l.pos
+	for {
+		ch, err := l.readByte()
+		if err != nil {
+			return "", err
+		}
+		if ch == until {
+			return string(l.value[start:l.pos]), nil
+		}
+	}
+}
+
+func (l *baseLexer) readType() (string, error) {
+	for {
+		b, err := l.readByte()
+		if err != nil {
+			return "", err
+		}
+
+		if isNewline(b) {
+			continue
+		}
+
+		err = l.unreadByte()
+		if err != nil {
+			return "", err
+		}
+
+		key, err := l.readString('=')
+		if err != nil {
+			return key, err
+		}
+
+		if len(key) == 2 {
+			return key, nil
+		}
+
+		return key, l.syntaxError()
+	}
+}
+
+func isNewline(ch byte) bool { return ch == '\n' || ch == '\r' }
+
+func isWhitespace(ch byte) bool { return ch == ' ' || ch == '\t' }
+
+func anyOf(element string, data ...string) bool {
+	for _, v := range data {
+		if element == v {
+			return true
+		}
+	}
+	return false
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/codecov.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/codecov.yml
new file mode 100644
index 000000000..085200a48
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/codecov.yml
@@ -0,0 +1,20 @@
+#
+# DO NOT EDIT THIS FILE
+#
+# It is automatically copied from https://github.com/pion/.goassets repository.
+#
+
+coverage:
+  status:
+    project:
+      default:
+        # Allow decreasing 2% of total coverage to avoid noise.
+        threshold: 2%
+    patch:
+      default:
+        target: 70%
+        only_pulls: true
+
+ignore:
+  - "examples/*"
+  - "examples/**/*"
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/common_description.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/common_description.go
new file mode 100644
index 000000000..1174be416
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/common_description.go
@@ -0,0 +1,110 @@
+package sdp
+
+import (
+	"strconv"
+	"strings"
+)
+
+// Information describes the "i=" field which provides textual information
+// about the session.
+type Information string
+
+func (i Information) String() string {
+	return string(i)
+}
+
+// ConnectionInformation defines the representation for the "c=" field
+// containing connection data.
+type ConnectionInformation struct {
+	NetworkType string
+	AddressType string
+	Address     *Address
+}
+
+func (c ConnectionInformation) String() string {
+	parts := []string{c.NetworkType, c.AddressType}
+	if c.Address != nil && c.Address.String() != "" {
+		parts = append(parts, c.Address.String())
+	}
+	return strings.Join(parts, " ")
+}
+
+// Address desribes a structured address token from within the "c=" field.
+type Address struct {
+	Address string
+	TTL     *int
+	Range   *int
+}
+
+func (c *Address) String() string {
+	var parts []string
+	parts = append(parts, c.Address)
+	if c.TTL != nil {
+		parts = append(parts, strconv.Itoa(*c.TTL))
+	}
+
+	if c.Range != nil {
+		parts = append(parts, strconv.Itoa(*c.Range))
+	}
+
+	return strings.Join(parts, "/")
+}
+
+// Bandwidth describes an optional field which denotes the proposed bandwidth
+// to be used by the session or media.
+type Bandwidth struct {
+	Experimental bool
+	Type         string
+	Bandwidth    uint64
+}
+
+func (b Bandwidth) String() string {
+	var output string
+	if b.Experimental {
+		output += "X-"
+	}
+	output += b.Type + ":" + strconv.FormatUint(b.Bandwidth, 10)
+	return output
+}
+
+// EncryptionKey describes the "k=" which conveys encryption key information.
+type EncryptionKey string
+
+func (s EncryptionKey) String() string {
+	return string(s)
+}
+
+// Attribute describes the "a=" field which represents the primary means for
+// extending SDP.
+type Attribute struct {
+	Key   string
+	Value string
+}
+
+// NewPropertyAttribute constructs a new attribute
+func NewPropertyAttribute(key string) Attribute {
+	return Attribute{
+		Key: key,
+	}
+}
+
+// NewAttribute constructs a new attribute
+func NewAttribute(key, value string) Attribute {
+	return Attribute{
+		Key:   key,
+		Value: value,
+	}
+}
+
+func (a Attribute) String() string {
+	output := a.Key
+	if len(a.Value) > 0 {
+		output += ":" + a.Value
+	}
+	return output
+}
+
+// IsICECandidate returns true if the attribute key equals "candidate".
+func (a Attribute) IsICECandidate() bool {
+	return a.Key == "candidate"
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/direction.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/direction.go
new file mode 100644
index 000000000..19ea92db7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/direction.go
@@ -0,0 +1,59 @@
+package sdp
+
+import "errors"
+
+// Direction is a marker for transmission directon of an endpoint
+type Direction int
+
+const (
+	// DirectionSendRecv is for bidirectional communication
+	DirectionSendRecv Direction = iota + 1
+	// DirectionSendOnly is for outgoing communication
+	DirectionSendOnly
+	// DirectionRecvOnly is for incoming communication
+	DirectionRecvOnly
+	// DirectionInactive is for no communication
+	DirectionInactive
+)
+
+const (
+	directionSendRecvStr = "sendrecv"
+	directionSendOnlyStr = "sendonly"
+	directionRecvOnlyStr = "recvonly"
+	directionInactiveStr = "inactive"
+	directionUnknownStr  = ""
+)
+
+var errDirectionString = errors.New("invalid direction string")
+
+// NewDirection defines a procedure for creating a new direction from a raw
+// string.
+func NewDirection(raw string) (Direction, error) {
+	switch raw {
+	case directionSendRecvStr:
+		return DirectionSendRecv, nil
+	case directionSendOnlyStr:
+		return DirectionSendOnly, nil
+	case directionRecvOnlyStr:
+		return DirectionRecvOnly, nil
+	case directionInactiveStr:
+		return DirectionInactive, nil
+	default:
+		return Direction(unknown), errDirectionString
+	}
+}
+
+func (t Direction) String() string {
+	switch t {
+	case DirectionSendRecv:
+		return directionSendRecvStr
+	case DirectionSendOnly:
+		return directionSendOnlyStr
+	case DirectionRecvOnly:
+		return directionRecvOnlyStr
+	case DirectionInactive:
+		return directionInactiveStr
+	default:
+		return directionUnknownStr
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/extmap.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/extmap.go
new file mode 100644
index 000000000..1242a8cf0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/extmap.go
@@ -0,0 +1,108 @@
+package sdp
+
+import (
+	"fmt"
+	"net/url"
+	"strconv"
+	"strings"
+)
+
+// Default ext values
+const (
+	DefExtMapValueABSSendTime     = 1
+	DefExtMapValueTransportCC     = 2
+	DefExtMapValueSDESMid         = 3
+	DefExtMapValueSDESRTPStreamID = 4
+
+	ABSSendTimeURI     = "http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time"
+	TransportCCURI     = "http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01"
+	SDESMidURI         = "urn:ietf:params:rtp-hdrext:sdes:mid"
+	SDESRTPStreamIDURI = "urn:ietf:params:rtp-hdrext:sdes:rtp-stream-id"
+	AudioLevelURI      = "urn:ietf:params:rtp-hdrext:ssrc-audio-level"
+)
+
+// ExtMap represents the activation of a single RTP header extension
+type ExtMap struct {
+	Value     int
+	Direction Direction
+	URI       *url.URL
+	ExtAttr   *string
+}
+
+// Clone converts this object to an Attribute
+func (e *ExtMap) Clone() Attribute {
+	return Attribute{Key: "extmap", Value: e.string()}
+}
+
+// Unmarshal creates an Extmap from a string
+func (e *ExtMap) Unmarshal(raw string) error {
+	parts := strings.SplitN(raw, ":", 2)
+	if len(parts) != 2 {
+		return fmt.Errorf("%w: %v", errSyntaxError, raw)
+	}
+
+	fields := strings.Fields(parts[1])
+	if len(fields) < 2 {
+		return fmt.Errorf("%w: %v", errSyntaxError, raw)
+	}
+
+	valdir := strings.Split(fields[0], "/")
+	value, err := strconv.ParseInt(valdir[0], 10, 64)
+	if (value < 1) || (value > 246) {
+		return fmt.Errorf("%w: %v -- extmap key must be in the range 1-256", errSyntaxError, valdir[0])
+	}
+	if err != nil {
+		return fmt.Errorf("%w: %v", errSyntaxError, valdir[0])
+	}
+
+	var direction Direction
+	if len(valdir) == 2 {
+		direction, err = NewDirection(valdir[1])
+		if err != nil {
+			return err
+		}
+	}
+
+	uri, err := url.Parse(fields[1])
+	if err != nil {
+		return err
+	}
+
+	if len(fields) == 3 {
+		tmp := fields[2]
+		e.ExtAttr = &tmp
+	}
+
+	e.Value = int(value)
+	e.Direction = direction
+	e.URI = uri
+	return nil
+}
+
+// Marshal creates a string from an ExtMap
+func (e *ExtMap) Marshal() string {
+	return e.Name() + ":" + e.string()
+}
+
+func (e *ExtMap) string() string {
+	output := fmt.Sprintf("%d", e.Value)
+	dirstring := e.Direction.String()
+	if dirstring != directionUnknownStr {
+		output += "/" + dirstring
+	}
+
+	if e.URI != nil {
+		output += " " + e.URI.String()
+	}
+
+	if e.ExtAttr != nil {
+		output += " " + *e.ExtAttr
+	}
+
+	return output
+}
+
+// Name returns the constant name of this object
+func (e *ExtMap) Name() string {
+	return "extmap"
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/fuzz.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/fuzz.go
new file mode 100644
index 000000000..f41ef78c6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/fuzz.go
@@ -0,0 +1,31 @@
+// +build gofuzz
+
+package sdp
+
+// Fuzz implements a randomized fuzz test of the sdp
+// parser using go-fuzz.
+//
+// To run the fuzzer, first download go-fuzz:
+// `go get github.com/dvyukov/go-fuzz/...`
+//
+// Then build the testing package:
+// `go-fuzz-build`
+//
+// And run the fuzzer on the corpus:
+// `go-fuzz`
+func Fuzz(data []byte) int {
+	// Check that unmarshalling any byte slice does not panic.
+	var sd SessionDescription
+	if err := sd.Unmarshal(data); err != nil {
+		return 0
+	}
+	// Check that we can marshal anything we unmarshalled.
+	_, err := sd.Marshal()
+	if err != nil {
+		panic("failed to marshal") // nolint
+	}
+	// It'd be nice to check that if we round trip Marshal then Unmarshal,
+	// we get the original back. Right now, though, we frequently don't,
+	// and we'd need to fix that first.
+	return 1
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/go.mod
new file mode 100644
index 000000000..da7ceaa54
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/go.mod
@@ -0,0 +1,8 @@
+module github.com/pion/sdp/v3
+
+go 1.13
+
+require (
+	github.com/pion/randutil v0.1.0
+	github.com/stretchr/testify v1.6.1
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/go.sum b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/go.sum
new file mode 100644
index 000000000..43316cb31
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/go.sum
@@ -0,0 +1,13 @@
+github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/pion/randutil v0.1.0 h1:CFG1UdESneORglEsnimhUjf33Rwjubwj6xfiOXBa3mA=
+github.com/pion/randutil v0.1.0/go.mod h1:XcJrSMMbbMRhASFVOlj/5hQial/Y8oH/HVo7TBZq+j8=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.6.1 h1:hDPOHmpOpP40lSULcqw7IrRb/u7w6RpDC9399XyoNd0=
+github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c h1:dUUwHk2QECo/6vqA44rthZ8ie2QXMNeKRTHCNY2nXvo=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/jsep.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/jsep.go
new file mode 100644
index 000000000..efdef0301
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/jsep.go
@@ -0,0 +1,205 @@
+package sdp
+
+import (
+	"fmt"
+	"net/url"
+	"strconv"
+	"time"
+)
+
+// Constants for SDP attributes used in JSEP
+const (
+	AttrKeyCandidate       = "candidate"
+	AttrKeyEndOfCandidates = "end-of-candidates"
+	AttrKeyIdentity        = "identity"
+	AttrKeyGroup           = "group"
+	AttrKeySSRC            = "ssrc"
+	AttrKeySSRCGroup       = "ssrc-group"
+	AttrKeyMsid            = "msid"
+	AttrKeyMsidSemantic    = "msid-semantic"
+	AttrKeyConnectionSetup = "setup"
+	AttrKeyMID             = "mid"
+	AttrKeyICELite         = "ice-lite"
+	AttrKeyRTCPMux         = "rtcp-mux"
+	AttrKeyRTCPRsize       = "rtcp-rsize"
+	AttrKeyInactive        = "inactive"
+	AttrKeyRecvOnly        = "recvonly"
+	AttrKeySendOnly        = "sendonly"
+	AttrKeySendRecv        = "sendrecv"
+	AttrKeyExtMap          = "extmap"
+)
+
+// Constants for semantic tokens used in JSEP
+const (
+	SemanticTokenLipSynchronization     = "LS"
+	SemanticTokenFlowIdentification     = "FID"
+	SemanticTokenForwardErrorCorrection = "FEC"
+	SemanticTokenWebRTCMediaStreams     = "WMS"
+)
+
+// Constants for extmap key
+const (
+	ExtMapValueTransportCC = 3
+)
+
+func extMapURI() map[int]string {
+	return map[int]string{
+		ExtMapValueTransportCC: "http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01",
+	}
+}
+
+// API to match draft-ietf-rtcweb-jsep
+// Move to webrtc or its own package?
+
+// NewJSEPSessionDescription creates a new SessionDescription with
+// some settings that are required by the JSEP spec.
+//
+// Note: Since v2.4.0, session ID has been fixed to use crypto random according to
+//       JSEP spec, so that NewJSEPSessionDescription now returns error as a second
+//       return value.
+func NewJSEPSessionDescription(identity bool) (*SessionDescription, error) {
+	sid, err := newSessionID()
+	if err != nil {
+		return nil, err
+	}
+	d := &SessionDescription{
+		Version: 0,
+		Origin: Origin{
+			Username:       "-",
+			SessionID:      sid,
+			SessionVersion: uint64(time.Now().Unix()),
+			NetworkType:    "IN",
+			AddressType:    "IP4",
+			UnicastAddress: "0.0.0.0",
+		},
+		SessionName: "-",
+		TimeDescriptions: []TimeDescription{
+			{
+				Timing: Timing{
+					StartTime: 0,
+					StopTime:  0,
+				},
+				RepeatTimes: nil,
+			},
+		},
+		Attributes: []Attribute{
+			// 	"Attribute(ice-options:trickle)", // TODO: implement trickle ICE
+		},
+	}
+
+	if identity {
+		d.WithPropertyAttribute(AttrKeyIdentity)
+	}
+
+	return d, nil
+}
+
+// WithPropertyAttribute adds a property attribute 'a=key' to the session description
+func (s *SessionDescription) WithPropertyAttribute(key string) *SessionDescription {
+	s.Attributes = append(s.Attributes, NewPropertyAttribute(key))
+	return s
+}
+
+// WithValueAttribute adds a value attribute 'a=key:value' to the session description
+func (s *SessionDescription) WithValueAttribute(key, value string) *SessionDescription {
+	s.Attributes = append(s.Attributes, NewAttribute(key, value))
+	return s
+}
+
+// WithFingerprint adds a fingerprint to the session description
+func (s *SessionDescription) WithFingerprint(algorithm, value string) *SessionDescription {
+	return s.WithValueAttribute("fingerprint", algorithm+" "+value)
+}
+
+// WithMedia adds a media description to the session description
+func (s *SessionDescription) WithMedia(md *MediaDescription) *SessionDescription {
+	s.MediaDescriptions = append(s.MediaDescriptions, md)
+	return s
+}
+
+// NewJSEPMediaDescription creates a new MediaName with
+// some settings that are required by the JSEP spec.
+func NewJSEPMediaDescription(codecType string, codecPrefs []string) *MediaDescription {
+	return &MediaDescription{
+		MediaName: MediaName{
+			Media:  codecType,
+			Port:   RangedPort{Value: 9},
+			Protos: []string{"UDP", "TLS", "RTP", "SAVPF"},
+		},
+		ConnectionInformation: &ConnectionInformation{
+			NetworkType: "IN",
+			AddressType: "IP4",
+			Address: &Address{
+				Address: "0.0.0.0",
+			},
+		},
+	}
+}
+
+// WithPropertyAttribute adds a property attribute 'a=key' to the media description
+func (d *MediaDescription) WithPropertyAttribute(key string) *MediaDescription {
+	d.Attributes = append(d.Attributes, NewPropertyAttribute(key))
+	return d
+}
+
+// WithValueAttribute adds a value attribute 'a=key:value' to the media description
+func (d *MediaDescription) WithValueAttribute(key, value string) *MediaDescription {
+	d.Attributes = append(d.Attributes, NewAttribute(key, value))
+	return d
+}
+
+// WithFingerprint adds a fingerprint to the media description
+func (d *MediaDescription) WithFingerprint(algorithm, value string) *MediaDescription {
+	return d.WithValueAttribute("fingerprint", algorithm+" "+value)
+}
+
+// WithICECredentials adds ICE credentials to the media description
+func (d *MediaDescription) WithICECredentials(username, password string) *MediaDescription {
+	return d.
+		WithValueAttribute("ice-ufrag", username).
+		WithValueAttribute("ice-pwd", password)
+}
+
+// WithCodec adds codec information to the media description
+func (d *MediaDescription) WithCodec(payloadType uint8, name string, clockrate uint32, channels uint16, fmtp string) *MediaDescription {
+	d.MediaName.Formats = append(d.MediaName.Formats, strconv.Itoa(int(payloadType)))
+	rtpmap := fmt.Sprintf("%d %s/%d", payloadType, name, clockrate)
+	if channels > 0 {
+		rtpmap += fmt.Sprintf("/%d", channels)
+	}
+	d.WithValueAttribute("rtpmap", rtpmap)
+	if fmtp != "" {
+		d.WithValueAttribute("fmtp", fmt.Sprintf("%d %s", payloadType, fmtp))
+	}
+	return d
+}
+
+// WithMediaSource adds media source information to the media description
+func (d *MediaDescription) WithMediaSource(ssrc uint32, cname, streamLabel, label string) *MediaDescription {
+	return d.
+		WithValueAttribute("ssrc", fmt.Sprintf("%d cname:%s", ssrc, cname)). // Deprecated but not phased out?
+		WithValueAttribute("ssrc", fmt.Sprintf("%d msid:%s %s", ssrc, streamLabel, label)).
+		WithValueAttribute("ssrc", fmt.Sprintf("%d mslabel:%s", ssrc, streamLabel)). // Deprecated but not phased out?
+		WithValueAttribute("ssrc", fmt.Sprintf("%d label:%s", ssrc, label))          // Deprecated but not phased out?
+}
+
+// WithCandidate adds an ICE candidate to the media description
+// Deprecated: use WithICECandidate instead
+func (d *MediaDescription) WithCandidate(value string) *MediaDescription {
+	return d.WithValueAttribute("candidate", value)
+}
+
+// WithExtMap adds an extmap to the media description
+func (d *MediaDescription) WithExtMap(e ExtMap) *MediaDescription {
+	return d.WithPropertyAttribute(e.Marshal())
+}
+
+// WithTransportCCExtMap adds an extmap to the media description
+func (d *MediaDescription) WithTransportCCExtMap() *MediaDescription {
+	uri, _ := url.Parse(extMapURI()[ExtMapValueTransportCC])
+	e := ExtMap{
+		Value: ExtMapValueTransportCC,
+		URI:   uri,
+	}
+	return d.WithExtMap(e)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/marshal.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/marshal.go
new file mode 100644
index 000000000..f029c4e99
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/marshal.go
@@ -0,0 +1,136 @@
+package sdp
+
+import (
+	"strings"
+)
+
+// Marshal takes a SDP struct to text
+// https://tools.ietf.org/html/rfc4566#section-5
+// Session description
+//    v=  (protocol version)
+//    o=  (originator and session identifier)
+//    s=  (session name)
+//    i=* (session information)
+//    u=* (URI of description)
+//    e=* (email address)
+//    p=* (phone number)
+//    c=* (connection information -- not required if included in
+//         all media)
+//    b=* (zero or more bandwidth information lines)
+//    One or more time descriptions ("t=" and "r=" lines; see below)
+//    z=* (time zone adjustments)
+//    k=* (encryption key)
+//    a=* (zero or more session attribute lines)
+//    Zero or more media descriptions
+//
+// Time description
+//    t=  (time the session is active)
+//    r=* (zero or more repeat times)
+//
+// Media description, if present
+//    m=  (media name and transport address)
+//    i=* (media title)
+//    c=* (connection information -- optional if included at
+//         session level)
+//    b=* (zero or more bandwidth information lines)
+//    k=* (encryption key)
+//    a=* (zero or more media attribute lines)
+func (s *SessionDescription) Marshal() ([]byte, error) {
+	m := make(marshaller, 0, 1024)
+
+	m.addKeyValue("v=", s.Version.String())
+	m.addKeyValue("o=", s.Origin.String())
+	m.addKeyValue("s=", s.SessionName.String())
+
+	if s.SessionInformation != nil {
+		m.addKeyValue("i=", s.SessionInformation.String())
+	}
+
+	if s.URI != nil {
+		m.addKeyValue("u=", s.URI.String())
+	}
+
+	if s.EmailAddress != nil {
+		m.addKeyValue("e=", s.EmailAddress.String())
+	}
+
+	if s.PhoneNumber != nil {
+		m.addKeyValue("p=", s.PhoneNumber.String())
+	}
+
+	if s.ConnectionInformation != nil {
+		m.addKeyValue("c=", s.ConnectionInformation.String())
+	}
+
+	for _, b := range s.Bandwidth {
+		m.addKeyValue("b=", b.String())
+	}
+
+	for _, td := range s.TimeDescriptions {
+		m.addKeyValue("t=", td.Timing.String())
+		for _, r := range td.RepeatTimes {
+			m.addKeyValue("r=", r.String())
+		}
+	}
+
+	if len(s.TimeZones) > 0 {
+		var b strings.Builder
+		for i, z := range s.TimeZones {
+			if i > 0 {
+				b.WriteString(" ")
+			}
+			b.WriteString(z.String())
+		}
+		m.addKeyValue("z=", b.String())
+	}
+
+	if s.EncryptionKey != nil {
+		m.addKeyValue("k=", s.EncryptionKey.String())
+	}
+
+	for _, a := range s.Attributes {
+		m.addKeyValue("a=", a.String())
+	}
+
+	for _, md := range s.MediaDescriptions {
+		m.addKeyValue("m=", md.MediaName.String())
+
+		if md.MediaTitle != nil {
+			m.addKeyValue("i=", md.MediaTitle.String())
+		}
+
+		if md.ConnectionInformation != nil {
+			m.addKeyValue("c=", md.ConnectionInformation.String())
+		}
+
+		for _, b := range md.Bandwidth {
+			m.addKeyValue("b=", b.String())
+		}
+
+		if md.EncryptionKey != nil {
+			m.addKeyValue("k=", md.EncryptionKey.String())
+		}
+
+		for _, a := range md.Attributes {
+			m.addKeyValue("a=", a.String())
+		}
+	}
+
+	return m.bytes(), nil
+}
+
+// marshaller contains state during marshaling.
+type marshaller []byte
+
+func (m *marshaller) addKeyValue(key, value string) {
+	if value == "" {
+		return
+	}
+	*m = append(*m, key...)
+	*m = append(*m, value...)
+	*m = append(*m, "\r\n"...)
+}
+
+func (m *marshaller) bytes() []byte {
+	return *m
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/media_description.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/media_description.go
new file mode 100644
index 000000000..c08850704
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/media_description.go
@@ -0,0 +1,80 @@
+package sdp
+
+import (
+	"strconv"
+	"strings"
+)
+
+// MediaDescription represents a media type.
+// https://tools.ietf.org/html/rfc4566#section-5.14
+type MediaDescription struct {
+	// m=<media> <port>/<number of ports> <proto> <fmt> ...
+	// https://tools.ietf.org/html/rfc4566#section-5.14
+	MediaName MediaName
+
+	// i=<session description>
+	// https://tools.ietf.org/html/rfc4566#section-5.4
+	MediaTitle *Information
+
+	// c=<nettype> <addrtype> <connection-address>
+	// https://tools.ietf.org/html/rfc4566#section-5.7
+	ConnectionInformation *ConnectionInformation
+
+	// b=<bwtype>:<bandwidth>
+	// https://tools.ietf.org/html/rfc4566#section-5.8
+	Bandwidth []Bandwidth
+
+	// k=<method>
+	// k=<method>:<encryption key>
+	// https://tools.ietf.org/html/rfc4566#section-5.12
+	EncryptionKey *EncryptionKey
+
+	// a=<attribute>
+	// a=<attribute>:<value>
+	// https://tools.ietf.org/html/rfc4566#section-5.13
+	Attributes []Attribute
+}
+
+// Attribute returns the value of an attribute and if it exists
+func (d *MediaDescription) Attribute(key string) (string, bool) {
+	for _, a := range d.Attributes {
+		if a.Key == key {
+			return a.Value, true
+		}
+	}
+	return "", false
+}
+
+// RangedPort supports special format for the media field "m=" port value. If
+// it may be necessary to specify multiple transport ports, the protocol allows
+// to write it as: <port>/<number of ports> where number of ports is a an
+// offsetting range.
+type RangedPort struct {
+	Value int
+	Range *int
+}
+
+func (p *RangedPort) String() string {
+	output := strconv.Itoa(p.Value)
+	if p.Range != nil {
+		output += "/" + strconv.Itoa(*p.Range)
+	}
+	return output
+}
+
+// MediaName describes the "m=" field storage structure.
+type MediaName struct {
+	Media   string
+	Port    RangedPort
+	Protos  []string
+	Formats []string
+}
+
+func (m MediaName) String() string {
+	return strings.Join([]string{
+		m.Media,
+		m.Port.String(),
+		strings.Join(m.Protos, "/"),
+		strings.Join(m.Formats, " "),
+	}, " ")
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/renovate.json b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/renovate.json
new file mode 100644
index 000000000..4400fd9b2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/renovate.json
@@ -0,0 +1,15 @@
+{
+  "extends": [
+    "config:base"
+  ],
+  "postUpdateOptions": [
+    "gomodTidy"
+  ],
+  "commitBody": "Generated by renovateBot",
+  "packageRules": [
+    {
+      "packagePatterns": ["^golang.org/x/"],
+      "schedule": ["on the first day of the month"]
+    }
+  ]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/sdp.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/sdp.go
new file mode 100644
index 000000000..c92ac1a7f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/sdp.go
@@ -0,0 +1,2 @@
+// Package sdp implements Session Description Protocol (SDP)
+package sdp
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/session_description.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/session_description.go
new file mode 100644
index 000000000..c4aaf5f95
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/session_description.go
@@ -0,0 +1,146 @@
+package sdp
+
+import (
+	"fmt"
+	"net/url"
+	"strconv"
+)
+
+// SessionDescription is a a well-defined format for conveying sufficient
+// information to discover and participate in a multimedia session.
+type SessionDescription struct {
+	// v=0
+	// https://tools.ietf.org/html/rfc4566#section-5.1
+	Version Version
+
+	// o=<username> <sess-id> <sess-version> <nettype> <addrtype> <unicast-address>
+	// https://tools.ietf.org/html/rfc4566#section-5.2
+	Origin Origin
+
+	// s=<session name>
+	// https://tools.ietf.org/html/rfc4566#section-5.3
+	SessionName SessionName
+
+	// i=<session description>
+	// https://tools.ietf.org/html/rfc4566#section-5.4
+	SessionInformation *Information
+
+	// u=<uri>
+	// https://tools.ietf.org/html/rfc4566#section-5.5
+	URI *url.URL
+
+	// e=<email-address>
+	// https://tools.ietf.org/html/rfc4566#section-5.6
+	EmailAddress *EmailAddress
+
+	// p=<phone-number>
+	// https://tools.ietf.org/html/rfc4566#section-5.6
+	PhoneNumber *PhoneNumber
+
+	// c=<nettype> <addrtype> <connection-address>
+	// https://tools.ietf.org/html/rfc4566#section-5.7
+	ConnectionInformation *ConnectionInformation
+
+	// b=<bwtype>:<bandwidth>
+	// https://tools.ietf.org/html/rfc4566#section-5.8
+	Bandwidth []Bandwidth
+
+	// https://tools.ietf.org/html/rfc4566#section-5.9
+	// https://tools.ietf.org/html/rfc4566#section-5.10
+	TimeDescriptions []TimeDescription
+
+	// z=<adjustment time> <offset> <adjustment time> <offset> ...
+	// https://tools.ietf.org/html/rfc4566#section-5.11
+	TimeZones []TimeZone
+
+	// k=<method>
+	// k=<method>:<encryption key>
+	// https://tools.ietf.org/html/rfc4566#section-5.12
+	EncryptionKey *EncryptionKey
+
+	// a=<attribute>
+	// a=<attribute>:<value>
+	// https://tools.ietf.org/html/rfc4566#section-5.13
+	Attributes []Attribute
+
+	// https://tools.ietf.org/html/rfc4566#section-5.14
+	MediaDescriptions []*MediaDescription
+}
+
+// Attribute returns the value of an attribute and if it exists
+func (s *SessionDescription) Attribute(key string) (string, bool) {
+	for _, a := range s.Attributes {
+		if a.Key == key {
+			return a.Value, true
+		}
+	}
+	return "", false
+}
+
+// Version describes the value provided by the "v=" field which gives
+// the version of the Session Description Protocol.
+type Version int
+
+func (v Version) String() string {
+	return strconv.Itoa(int(v))
+}
+
+// Origin defines the structure for the "o=" field which provides the
+// originator of the session plus a session identifier and version number.
+type Origin struct {
+	Username       string
+	SessionID      uint64
+	SessionVersion uint64
+	NetworkType    string
+	AddressType    string
+	UnicastAddress string
+}
+
+func (o Origin) String() string {
+	return fmt.Sprintf(
+		"%v %d %d %v %v %v",
+		o.Username,
+		o.SessionID,
+		o.SessionVersion,
+		o.NetworkType,
+		o.AddressType,
+		o.UnicastAddress,
+	)
+}
+
+// SessionName describes a structured representations for the "s=" field
+// and is the textual session name.
+type SessionName string
+
+func (s SessionName) String() string {
+	return string(s)
+}
+
+// EmailAddress describes a structured representations for the "e=" line
+// which specifies email contact information for the person responsible for
+// the conference.
+type EmailAddress string
+
+func (e EmailAddress) String() string {
+	return string(e)
+}
+
+// PhoneNumber describes a structured representations for the "p=" line
+// specify phone contact information for the person responsible for the
+// conference.
+type PhoneNumber string
+
+func (p PhoneNumber) String() string {
+	return string(p)
+}
+
+// TimeZone defines the structured object for "z=" line which describes
+// repeated sessions scheduling.
+type TimeZone struct {
+	AdjustmentTime uint64
+	Offset         int64
+}
+
+func (z TimeZone) String() string {
+	return strconv.FormatUint(z.AdjustmentTime, 10) + " " + strconv.FormatInt(z.Offset, 10)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/time_description.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/time_description.go
new file mode 100644
index 000000000..8b24e130d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/time_description.go
@@ -0,0 +1,51 @@
+package sdp
+
+import (
+	"strconv"
+	"strings"
+)
+
+// TimeDescription describes "t=", "r=" fields of the session description
+// which are used to specify the start and stop times for a session as well as
+// repeat intervals and durations for the scheduled session.
+type TimeDescription struct {
+	// t=<start-time> <stop-time>
+	// https://tools.ietf.org/html/rfc4566#section-5.9
+	Timing Timing
+
+	// r=<repeat interval> <active duration> <offsets from start-time>
+	// https://tools.ietf.org/html/rfc4566#section-5.10
+	RepeatTimes []RepeatTime
+}
+
+// Timing defines the "t=" field's structured representation for the start and
+// stop times.
+type Timing struct {
+	StartTime uint64
+	StopTime  uint64
+}
+
+func (t Timing) String() string {
+	output := strconv.FormatUint(t.StartTime, 10)
+	output += " " + strconv.FormatUint(t.StopTime, 10)
+	return output
+}
+
+// RepeatTime describes the "r=" fields of the session description which
+// represents the intervals and durations for repeated scheduled sessions.
+type RepeatTime struct {
+	Interval int64
+	Duration int64
+	Offsets  []int64
+}
+
+func (r RepeatTime) String() string {
+	fields := make([]string, 0)
+	fields = append(fields, strconv.FormatInt(r.Interval, 10))
+	fields = append(fields, strconv.FormatInt(r.Duration, 10))
+	for _, value := range r.Offsets {
+		fields = append(fields, strconv.FormatInt(value, 10))
+	}
+
+	return strings.Join(fields, " ")
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/unmarshal.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/unmarshal.go
new file mode 100644
index 000000000..92e0dcf48
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/unmarshal.go
@@ -0,0 +1,907 @@
+package sdp
+
+import (
+	"errors"
+	"fmt"
+	"net/url"
+	"strconv"
+	"strings"
+)
+
+var (
+	errSDPInvalidSyntax       = errors.New("sdp: invalid syntax")
+	errSDPInvalidNumericValue = errors.New("sdp: invalid numeric value")
+	errSDPInvalidValue        = errors.New("sdp: invalid value")
+	errSDPInvalidPortValue    = errors.New("sdp: invalid port value")
+)
+
+// Unmarshal is the primary function that deserializes the session description
+// message and stores it inside of a structured SessionDescription object.
+//
+// The States Transition Table describes the computation flow between functions
+// (namely s1, s2, s3, ...) for a parsing procedure that complies with the
+// specifications laid out by the rfc4566#section-5 as well as by JavaScript
+// Session Establishment Protocol draft. Links:
+// 		https://tools.ietf.org/html/rfc4566#section-5
+// 		https://tools.ietf.org/html/draft-ietf-rtcweb-jsep-24
+//
+// https://tools.ietf.org/html/rfc4566#section-5
+// Session description
+//    v=  (protocol version)
+//    o=  (originator and session identifier)
+//    s=  (session name)
+//    i=* (session information)
+//    u=* (URI of description)
+//    e=* (email address)
+//    p=* (phone number)
+//    c=* (connection information -- not required if included in
+//         all media)
+//    b=* (zero or more bandwidth information lines)
+//    One or more time descriptions ("t=" and "r=" lines; see below)
+//    z=* (time zone adjustments)
+//    k=* (encryption key)
+//    a=* (zero or more session attribute lines)
+//    Zero or more media descriptions
+//
+// Time description
+//    t=  (time the session is active)
+//    r=* (zero or more repeat times)
+//
+// Media description, if present
+//    m=  (media name and transport address)
+//    i=* (media title)
+//    c=* (connection information -- optional if included at
+//         session level)
+//    b=* (zero or more bandwidth information lines)
+//    k=* (encryption key)
+//    a=* (zero or more media attribute lines)
+//
+// In order to generate the following state table and draw subsequent
+// deterministic finite-state automota ("DFA") the following regex was used to
+// derive the DFA:
+//    vosi?u?e?p?c?b*(tr*)+z?k?a*(mi?c?b*k?a*)*
+// possible place and state to exit:
+//                    **   * * *  ** * * * *
+//                    99   1 1 1  11 1 1 1 1
+//                         3 1 1  26 5 5 4 4
+//
+// Please pay close attention to the `k`, and `a` parsing states. In the table
+// below in order to distinguish between the states belonging to the media
+// description as opposed to the session description, the states are marked
+// with an asterisk ("a*", "k*").
+// +--------+----+-------+----+-----+----+-----+---+----+----+---+---+-----+---+---+----+---+----+
+// | STATES | a* | a*,k* | a  | a,k | b  | b,c | e | i  | m  | o | p | r,t | s | t | u  | v | z  |
+// +--------+----+-------+----+-----+----+-----+---+----+----+---+---+-----+---+---+----+---+----+
+// |   s1   |    |       |    |     |    |     |   |    |    |   |   |     |   |   |    | 2 |    |
+// |   s2   |    |       |    |     |    |     |   |    |    | 3 |   |     |   |   |    |   |    |
+// |   s3   |    |       |    |     |    |     |   |    |    |   |   |     | 4 |   |    |   |    |
+// |   s4   |    |       |    |     |    |   5 | 6 |  7 |    |   | 8 |     |   | 9 | 10 |   |    |
+// |   s5   |    |       |    |     |  5 |     |   |    |    |   |   |     |   | 9 |    |   |    |
+// |   s6   |    |       |    |     |    |   5 |   |    |    |   | 8 |     |   | 9 |    |   |    |
+// |   s7   |    |       |    |     |    |   5 | 6 |    |    |   | 8 |     |   | 9 | 10 |   |    |
+// |   s8   |    |       |    |     |    |   5 |   |    |    |   |   |     |   | 9 |    |   |    |
+// |   s9   |    |       |    |  11 |    |     |   |    | 12 |   |   |   9 |   |   |    |   | 13 |
+// |   s10  |    |       |    |     |    |   5 | 6 |    |    |   | 8 |     |   | 9 |    |   |    |
+// |   s11  |    |       | 11 |     |    |     |   |    | 12 |   |   |     |   |   |    |   |    |
+// |   s12  |    |    14 |    |     |    |  15 |   | 16 | 12 |   |   |     |   |   |    |   |    |
+// |   s13  |    |       |    |  11 |    |     |   |    | 12 |   |   |     |   |   |    |   |    |
+// |   s14  | 14 |       |    |     |    |     |   |    | 12 |   |   |     |   |   |    |   |    |
+// |   s15  |    |    14 |    |     | 15 |     |   |    | 12 |   |   |     |   |   |    |   |    |
+// |   s16  |    |    14 |    |     |    |  15 |   |    | 12 |   |   |     |   |   |    |   |    |
+// +--------+----+-------+----+-----+----+-----+---+----+----+---+---+-----+---+---+----+---+----+
+func (s *SessionDescription) Unmarshal(value []byte) error {
+	l := new(lexer)
+	l.desc = s
+	l.value = value
+	for state := s1; state != nil; {
+		var err error
+		state, err = state(l)
+		if err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+func s1(l *lexer) (stateFn, error) {
+	return l.handleType(func(key string) stateFn {
+		if key == "v=" {
+			return unmarshalProtocolVersion
+		}
+		return nil
+	})
+}
+
+func s2(l *lexer) (stateFn, error) {
+	return l.handleType(func(key string) stateFn {
+		if key == "o=" {
+			return unmarshalOrigin
+		}
+		return nil
+	})
+}
+
+func s3(l *lexer) (stateFn, error) {
+	return l.handleType(func(key string) stateFn {
+		if key == "s=" {
+			return unmarshalSessionName
+		}
+		return nil
+	})
+}
+
+func s4(l *lexer) (stateFn, error) {
+	return l.handleType(func(key string) stateFn {
+		switch key {
+		case "i=":
+			return unmarshalSessionInformation
+		case "u=":
+			return unmarshalURI
+		case "e=":
+			return unmarshalEmail
+		case "p=":
+			return unmarshalPhone
+		case "c=":
+			return unmarshalSessionConnectionInformation
+		case "b=":
+			return unmarshalSessionBandwidth
+		case "t=":
+			return unmarshalTiming
+		}
+		return nil
+	})
+}
+
+func s5(l *lexer) (stateFn, error) {
+	return l.handleType(func(key string) stateFn {
+		switch key {
+		case "b=":
+			return unmarshalSessionBandwidth
+		case "t=":
+			return unmarshalTiming
+		}
+		return nil
+	})
+}
+
+func s6(l *lexer) (stateFn, error) {
+	return l.handleType(func(key string) stateFn {
+		switch key {
+		case "p=":
+			return unmarshalPhone
+		case "c=":
+			return unmarshalSessionConnectionInformation
+		case "b=":
+			return unmarshalSessionBandwidth
+		case "t=":
+			return unmarshalTiming
+		}
+		return nil
+	})
+}
+
+func s7(l *lexer) (stateFn, error) {
+	return l.handleType(func(key string) stateFn {
+		switch key {
+		case "u=":
+			return unmarshalURI
+		case "e=":
+			return unmarshalEmail
+		case "p=":
+			return unmarshalPhone
+		case "c=":
+			return unmarshalSessionConnectionInformation
+		case "b=":
+			return unmarshalSessionBandwidth
+		case "t=":
+			return unmarshalTiming
+		}
+		return nil
+	})
+}
+
+func s8(l *lexer) (stateFn, error) {
+	return l.handleType(func(key string) stateFn {
+		switch key {
+		case "c=":
+			return unmarshalSessionConnectionInformation
+		case "b=":
+			return unmarshalSessionBandwidth
+		case "t=":
+			return unmarshalTiming
+		}
+		return nil
+	})
+}
+
+func s9(l *lexer) (stateFn, error) {
+	return l.handleType(func(key string) stateFn {
+		switch key {
+		case "z=":
+			return unmarshalTimeZones
+		case "k=":
+			return unmarshalSessionEncryptionKey
+		case "a=":
+			return unmarshalSessionAttribute
+		case "r=":
+			return unmarshalRepeatTimes
+		case "t=":
+			return unmarshalTiming
+		case "m=":
+			return unmarshalMediaDescription
+		}
+		return nil
+	})
+}
+
+func s10(l *lexer) (stateFn, error) {
+	return l.handleType(func(key string) stateFn {
+		switch key {
+		case "e=":
+			return unmarshalEmail
+		case "p=":
+			return unmarshalPhone
+		case "c=":
+			return unmarshalSessionConnectionInformation
+		case "b=":
+			return unmarshalSessionBandwidth
+		case "t=":
+			return unmarshalTiming
+		}
+		return nil
+	})
+}
+
+func s11(l *lexer) (stateFn, error) {
+	return l.handleType(func(key string) stateFn {
+		switch key {
+		case "a=":
+			return unmarshalSessionAttribute
+		case "m=":
+			return unmarshalMediaDescription
+		}
+		return nil
+	})
+}
+
+func s12(l *lexer) (stateFn, error) {
+	return l.handleType(func(key string) stateFn {
+		switch key {
+		case "a=":
+			return unmarshalMediaAttribute
+		case "k=":
+			return unmarshalMediaEncryptionKey
+		case "b=":
+			return unmarshalMediaBandwidth
+		case "c=":
+			return unmarshalMediaConnectionInformation
+		case "i=":
+			return unmarshalMediaTitle
+		case "m=":
+			return unmarshalMediaDescription
+		}
+		return nil
+	})
+}
+
+func s13(l *lexer) (stateFn, error) {
+	return l.handleType(func(key string) stateFn {
+		switch key {
+		case "a=":
+			return unmarshalSessionAttribute
+		case "k=":
+			return unmarshalSessionEncryptionKey
+		case "m=":
+			return unmarshalMediaDescription
+		}
+		return nil
+	})
+}
+
+func s14(l *lexer) (stateFn, error) {
+	return l.handleType(func(key string) stateFn {
+		switch key {
+		case "a=":
+			return unmarshalMediaAttribute
+		case "k=":
+			// Non-spec ordering
+			return unmarshalMediaEncryptionKey
+		case "b=":
+			// Non-spec ordering
+			return unmarshalMediaBandwidth
+		case "c=":
+			// Non-spec ordering
+			return unmarshalMediaConnectionInformation
+		case "i=":
+			// Non-spec ordering
+			return unmarshalMediaTitle
+		case "m=":
+			return unmarshalMediaDescription
+		}
+		return nil
+	})
+}
+
+func s15(l *lexer) (stateFn, error) {
+	return l.handleType(func(key string) stateFn {
+		switch key {
+		case "a=":
+			return unmarshalMediaAttribute
+		case "k=":
+			return unmarshalMediaEncryptionKey
+		case "b=":
+			return unmarshalMediaBandwidth
+		case "c=":
+			return unmarshalMediaConnectionInformation
+		case "i=":
+			// Non-spec ordering
+			return unmarshalMediaTitle
+		case "m=":
+			return unmarshalMediaDescription
+		}
+		return nil
+	})
+}
+
+func s16(l *lexer) (stateFn, error) {
+	return l.handleType(func(key string) stateFn {
+		switch key {
+		case "a=":
+			return unmarshalMediaAttribute
+		case "k=":
+			return unmarshalMediaEncryptionKey
+		case "c=":
+			return unmarshalMediaConnectionInformation
+		case "b=":
+			return unmarshalMediaBandwidth
+		case "i=":
+			// Non-spec ordering
+			return unmarshalMediaTitle
+		case "m=":
+			return unmarshalMediaDescription
+		}
+		return nil
+	})
+}
+
+func unmarshalProtocolVersion(l *lexer) (stateFn, error) {
+	version, err := l.readUint64Field()
+	if err != nil {
+		return nil, err
+	}
+
+	// As off the latest draft of the rfc this value is required to be 0.
+	// https://tools.ietf.org/html/draft-ietf-rtcweb-jsep-24#section-5.8.1
+	if version != 0 {
+		return nil, fmt.Errorf("%w `%v`", errSDPInvalidValue, version)
+	}
+
+	if err := l.nextLine(); err != nil {
+		return nil, err
+	}
+
+	return s2, nil
+}
+
+func unmarshalOrigin(l *lexer) (stateFn, error) {
+	var err error
+
+	l.desc.Origin.Username, err = l.readField()
+	if err != nil {
+		return nil, err
+	}
+
+	l.desc.Origin.SessionID, err = l.readUint64Field()
+	if err != nil {
+		return nil, err
+	}
+
+	l.desc.Origin.SessionVersion, err = l.readUint64Field()
+	if err != nil {
+		return nil, err
+	}
+
+	l.desc.Origin.NetworkType, err = l.readField()
+	if err != nil {
+		return nil, err
+	}
+
+	// Set according to currently registered with IANA
+	// https://tools.ietf.org/html/rfc4566#section-8.2.6
+	if !anyOf(l.desc.Origin.NetworkType, "IN") {
+		return nil, fmt.Errorf("%w `%v`", errSDPInvalidValue, l.desc.Origin.NetworkType)
+	}
+
+	l.desc.Origin.AddressType, err = l.readField()
+	if err != nil {
+		return nil, err
+	}
+
+	// Set according to currently registered with IANA
+	// https://tools.ietf.org/html/rfc4566#section-8.2.7
+	if !anyOf(l.desc.Origin.AddressType, "IP4", "IP6") {
+		return nil, fmt.Errorf("%w `%v`", errSDPInvalidValue, l.desc.Origin.AddressType)
+	}
+
+	l.desc.Origin.UnicastAddress, err = l.readField()
+	if err != nil {
+		return nil, err
+	}
+
+	if err := l.nextLine(); err != nil {
+		return nil, err
+	}
+
+	return s3, nil
+}
+
+func unmarshalSessionName(l *lexer) (stateFn, error) {
+	value, err := l.readLine()
+	if err != nil {
+		return nil, err
+	}
+
+	l.desc.SessionName = SessionName(value)
+	return s4, nil
+}
+
+func unmarshalSessionInformation(l *lexer) (stateFn, error) {
+	value, err := l.readLine()
+	if err != nil {
+		return nil, err
+	}
+
+	sessionInformation := Information(value)
+	l.desc.SessionInformation = &sessionInformation
+	return s7, nil
+}
+
+func unmarshalURI(l *lexer) (stateFn, error) {
+	value, err := l.readLine()
+	if err != nil {
+		return nil, err
+	}
+
+	l.desc.URI, err = url.Parse(value)
+	if err != nil {
+		return nil, err
+	}
+
+	return s10, nil
+}
+
+func unmarshalEmail(l *lexer) (stateFn, error) {
+	value, err := l.readLine()
+	if err != nil {
+		return nil, err
+	}
+
+	emailAddress := EmailAddress(value)
+	l.desc.EmailAddress = &emailAddress
+	return s6, nil
+}
+
+func unmarshalPhone(l *lexer) (stateFn, error) {
+	value, err := l.readLine()
+	if err != nil {
+		return nil, err
+	}
+
+	phoneNumber := PhoneNumber(value)
+	l.desc.PhoneNumber = &phoneNumber
+	return s8, nil
+}
+
+func unmarshalSessionConnectionInformation(l *lexer) (stateFn, error) {
+	var err error
+	l.desc.ConnectionInformation, err = l.unmarshalConnectionInformation()
+	if err != nil {
+		return nil, err
+	}
+	return s5, nil
+}
+
+func (l *lexer) unmarshalConnectionInformation() (*ConnectionInformation, error) {
+	var err error
+	var c ConnectionInformation
+
+	c.NetworkType, err = l.readField()
+	if err != nil {
+		return nil, err
+	}
+
+	// Set according to currently registered with IANA
+	// https://tools.ietf.org/html/rfc4566#section-8.2.6
+	if !anyOf(c.NetworkType, "IN") {
+		return nil, fmt.Errorf("%w `%v`", errSDPInvalidValue, c.NetworkType)
+	}
+
+	c.AddressType, err = l.readField()
+	if err != nil {
+		return nil, err
+	}
+
+	// Set according to currently registered with IANA
+	// https://tools.ietf.org/html/rfc4566#section-8.2.7
+	if !anyOf(c.AddressType, "IP4", "IP6") {
+		return nil, fmt.Errorf("%w `%v`", errSDPInvalidValue, c.AddressType)
+	}
+
+	address, err := l.readField()
+	if err != nil {
+		return nil, err
+	}
+
+	if address != "" {
+		c.Address = new(Address)
+		c.Address.Address = address
+	}
+
+	if err := l.nextLine(); err != nil {
+		return nil, err
+	}
+
+	return &c, nil
+}
+
+func unmarshalSessionBandwidth(l *lexer) (stateFn, error) {
+	value, err := l.readLine()
+	if err != nil {
+		return nil, err
+	}
+
+	bandwidth, err := unmarshalBandwidth(value)
+	if err != nil {
+		return nil, fmt.Errorf("%w `b=%v`", errSDPInvalidValue, value)
+	}
+	l.desc.Bandwidth = append(l.desc.Bandwidth, *bandwidth)
+
+	return s5, nil
+}
+
+func unmarshalBandwidth(value string) (*Bandwidth, error) {
+	parts := strings.Split(value, ":")
+	if len(parts) != 2 {
+		return nil, fmt.Errorf("%w `b=%v`", errSDPInvalidValue, parts)
+	}
+
+	experimental := strings.HasPrefix(parts[0], "X-")
+	if experimental {
+		parts[0] = strings.TrimPrefix(parts[0], "X-")
+	} else if !anyOf(parts[0], "CT", "AS") {
+		// Set according to currently registered with IANA
+		// https://tools.ietf.org/html/rfc4566#section-5.8
+		return nil, fmt.Errorf("%w `%v`", errSDPInvalidValue, parts[0])
+	}
+
+	bandwidth, err := strconv.ParseUint(parts[1], 10, 64)
+	if err != nil {
+		return nil, fmt.Errorf("%w `%v`", errSDPInvalidNumericValue, parts[1])
+	}
+
+	return &Bandwidth{
+		Experimental: experimental,
+		Type:         parts[0],
+		Bandwidth:    bandwidth,
+	}, nil
+}
+
+func unmarshalTiming(l *lexer) (stateFn, error) {
+	var err error
+	var td TimeDescription
+
+	td.Timing.StartTime, err = l.readUint64Field()
+	if err != nil {
+		return nil, err
+	}
+
+	td.Timing.StopTime, err = l.readUint64Field()
+	if err != nil {
+		return nil, err
+	}
+
+	if err := l.nextLine(); err != nil {
+		return nil, err
+	}
+
+	l.desc.TimeDescriptions = append(l.desc.TimeDescriptions, td)
+	return s9, nil
+}
+
+func unmarshalRepeatTimes(l *lexer) (stateFn, error) {
+	var err error
+	var newRepeatTime RepeatTime
+
+	latestTimeDesc := &l.desc.TimeDescriptions[len(l.desc.TimeDescriptions)-1]
+
+	field, err := l.readField()
+	if err != nil {
+		return nil, err
+	}
+
+	newRepeatTime.Interval, err = parseTimeUnits(field)
+	if err != nil {
+		return nil, fmt.Errorf("%w `%v`", errSDPInvalidValue, field)
+	}
+
+	field, err = l.readField()
+	if err != nil {
+		return nil, err
+	}
+
+	newRepeatTime.Duration, err = parseTimeUnits(field)
+	if err != nil {
+		return nil, fmt.Errorf("%w `%v`", errSDPInvalidValue, field)
+	}
+
+	for {
+		field, err := l.readField()
+		if err != nil {
+			return nil, err
+		}
+		if field == "" {
+			break
+		}
+		offset, err := parseTimeUnits(field)
+		if err != nil {
+			return nil, fmt.Errorf("%w `%v`", errSDPInvalidValue, field)
+		}
+		newRepeatTime.Offsets = append(newRepeatTime.Offsets, offset)
+	}
+
+	if err := l.nextLine(); err != nil {
+		return nil, err
+	}
+
+	latestTimeDesc.RepeatTimes = append(latestTimeDesc.RepeatTimes, newRepeatTime)
+	return s9, nil
+}
+
+func unmarshalTimeZones(l *lexer) (stateFn, error) {
+	// These fields are transimitted in pairs
+	// z=<adjustment time> <offset> <adjustment time> <offset> ....
+	// so we are making sure that there are actually multiple of 2 total.
+	for {
+		var err error
+		var timeZone TimeZone
+
+		timeZone.AdjustmentTime, err = l.readUint64Field()
+		if err != nil {
+			return nil, err
+		}
+
+		offset, err := l.readField()
+		if err != nil {
+			return nil, err
+		}
+
+		if offset == "" {
+			break
+		}
+
+		timeZone.Offset, err = parseTimeUnits(offset)
+		if err != nil {
+			return nil, err
+		}
+
+		l.desc.TimeZones = append(l.desc.TimeZones, timeZone)
+	}
+
+	if err := l.nextLine(); err != nil {
+		return nil, err
+	}
+
+	return s13, nil
+}
+
+func unmarshalSessionEncryptionKey(l *lexer) (stateFn, error) {
+	value, err := l.readLine()
+	if err != nil {
+		return nil, err
+	}
+
+	encryptionKey := EncryptionKey(value)
+	l.desc.EncryptionKey = &encryptionKey
+	return s11, nil
+}
+
+func unmarshalSessionAttribute(l *lexer) (stateFn, error) {
+	value, err := l.readLine()
+	if err != nil {
+		return nil, err
+	}
+
+	i := strings.IndexRune(value, ':')
+	var a Attribute
+	if i > 0 {
+		a = NewAttribute(value[:i], value[i+1:])
+	} else {
+		a = NewPropertyAttribute(value)
+	}
+
+	l.desc.Attributes = append(l.desc.Attributes, a)
+	return s11, nil
+}
+
+func unmarshalMediaDescription(l *lexer) (stateFn, error) {
+	var newMediaDesc MediaDescription
+
+	// <media>
+	field, err := l.readField()
+	if err != nil {
+		return nil, err
+	}
+
+	// Set according to currently registered with IANA
+	// https://tools.ietf.org/html/rfc4566#section-5.14
+	if !anyOf(field, "audio", "video", "text", "application", "message") {
+		return nil, fmt.Errorf("%w `%v`", errSDPInvalidValue, field)
+	}
+	newMediaDesc.MediaName.Media = field
+
+	// <port>
+	field, err = l.readField()
+	if err != nil {
+		return nil, err
+	}
+	parts := strings.Split(field, "/")
+	newMediaDesc.MediaName.Port.Value, err = parsePort(parts[0])
+	if err != nil {
+		return nil, fmt.Errorf("%w `%v`", errSDPInvalidPortValue, parts[0])
+	}
+
+	if len(parts) > 1 {
+		var portRange int
+		portRange, err = strconv.Atoi(parts[1])
+		if err != nil {
+			return nil, fmt.Errorf("%w `%v`", errSDPInvalidValue, parts)
+		}
+		newMediaDesc.MediaName.Port.Range = &portRange
+	}
+
+	// <proto>
+	field, err = l.readField()
+	if err != nil {
+		return nil, err
+	}
+
+	// Set according to currently registered with IANA
+	// https://tools.ietf.org/html/rfc4566#section-5.14
+	for _, proto := range strings.Split(field, "/") {
+		if !anyOf(proto, "UDP", "RTP", "AVP", "SAVP", "SAVPF", "TLS", "DTLS", "SCTP", "AVPF") {
+			return nil, fmt.Errorf("%w `%v`", errSDPInvalidNumericValue, field)
+		}
+		newMediaDesc.MediaName.Protos = append(newMediaDesc.MediaName.Protos, proto)
+	}
+
+	// <fmt>...
+	for {
+		field, err = l.readField()
+		if err != nil {
+			return nil, err
+		}
+		if field == "" {
+			break
+		}
+		newMediaDesc.MediaName.Formats = append(newMediaDesc.MediaName.Formats, field)
+	}
+
+	if err := l.nextLine(); err != nil {
+		return nil, err
+	}
+
+	l.desc.MediaDescriptions = append(l.desc.MediaDescriptions, &newMediaDesc)
+	return s12, nil
+}
+
+func unmarshalMediaTitle(l *lexer) (stateFn, error) {
+	value, err := l.readLine()
+	if err != nil {
+		return nil, err
+	}
+
+	latestMediaDesc := l.desc.MediaDescriptions[len(l.desc.MediaDescriptions)-1]
+	mediaTitle := Information(value)
+	latestMediaDesc.MediaTitle = &mediaTitle
+	return s16, nil
+}
+
+func unmarshalMediaConnectionInformation(l *lexer) (stateFn, error) {
+	var err error
+	latestMediaDesc := l.desc.MediaDescriptions[len(l.desc.MediaDescriptions)-1]
+	latestMediaDesc.ConnectionInformation, err = l.unmarshalConnectionInformation()
+	if err != nil {
+		return nil, err
+	}
+	return s15, nil
+}
+
+func unmarshalMediaBandwidth(l *lexer) (stateFn, error) {
+	value, err := l.readLine()
+	if err != nil {
+		return nil, err
+	}
+
+	latestMediaDesc := l.desc.MediaDescriptions[len(l.desc.MediaDescriptions)-1]
+	bandwidth, err := unmarshalBandwidth(value)
+	if err != nil {
+		return nil, fmt.Errorf("%w `b=%v`", errSDPInvalidSyntax, value)
+	}
+	latestMediaDesc.Bandwidth = append(latestMediaDesc.Bandwidth, *bandwidth)
+	return s15, nil
+}
+
+func unmarshalMediaEncryptionKey(l *lexer) (stateFn, error) {
+	value, err := l.readLine()
+	if err != nil {
+		return nil, err
+	}
+
+	latestMediaDesc := l.desc.MediaDescriptions[len(l.desc.MediaDescriptions)-1]
+	encryptionKey := EncryptionKey(value)
+	latestMediaDesc.EncryptionKey = &encryptionKey
+	return s14, nil
+}
+
+func unmarshalMediaAttribute(l *lexer) (stateFn, error) {
+	value, err := l.readLine()
+	if err != nil {
+		return nil, err
+	}
+
+	i := strings.IndexRune(value, ':')
+	var a Attribute
+	if i > 0 {
+		a = NewAttribute(value[:i], value[i+1:])
+	} else {
+		a = NewPropertyAttribute(value)
+	}
+
+	latestMediaDesc := l.desc.MediaDescriptions[len(l.desc.MediaDescriptions)-1]
+	latestMediaDesc.Attributes = append(latestMediaDesc.Attributes, a)
+	return s14, nil
+}
+
+func parseTimeUnits(value string) (num int64, err error) {
+	k := timeShorthand(value[len(value)-1])
+	if k > 0 {
+		num, err = strconv.ParseInt(value[:len(value)-1], 10, 64)
+	} else {
+		k = 1
+		num, err = strconv.ParseInt(value, 10, 64)
+	}
+	if err != nil {
+		return 0, fmt.Errorf("%w `%v`", errSDPInvalidValue, value)
+	}
+	return num * k, nil
+}
+
+func timeShorthand(b byte) int64 {
+	// Some time offsets in the protocol can be provided with a shorthand
+	// notation. This code ensures to convert it to NTP timestamp format.
+	switch b {
+	case 'd': // days
+		return 86400
+	case 'h': // hours
+		return 3600
+	case 'm': // minutes
+		return 60
+	case 's': // seconds (allowed for completeness)
+		return 1
+	default:
+		return 0
+	}
+}
+
+func parsePort(value string) (int, error) {
+	port, err := strconv.Atoi(value)
+	if err != nil {
+		return 0, fmt.Errorf("%w `%v`", errSDPInvalidPortValue, port)
+	}
+
+	if port < 0 || port > 65536 {
+		return 0, fmt.Errorf("%w -- out of range `%v`", errSDPInvalidPortValue, port)
+	}
+
+	return port, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/util.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/util.go
new file mode 100644
index 000000000..74f47ed19
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/sdp/v3/util.go
@@ -0,0 +1,318 @@
+package sdp
+
+import (
+	"errors"
+	"fmt"
+	"io"
+	"sort"
+	"strconv"
+	"strings"
+
+	"github.com/pion/randutil"
+)
+
+const (
+	attributeKey = "a="
+)
+
+var (
+	errExtractCodecRtpmap  = errors.New("could not extract codec from rtpmap")
+	errExtractCodecFmtp    = errors.New("could not extract codec from fmtp")
+	errExtractCodecRtcpFb  = errors.New("could not extract codec from rtcp-fb")
+	errPayloadTypeNotFound = errors.New("payload type not found")
+	errCodecNotFound       = errors.New("codec not found")
+	errSyntaxError         = errors.New("SyntaxError")
+)
+
+// ConnectionRole indicates which of the end points should initiate the connection establishment
+type ConnectionRole int
+
+const (
+	// ConnectionRoleActive indicates the endpoint will initiate an outgoing connection.
+	ConnectionRoleActive ConnectionRole = iota + 1
+
+	// ConnectionRolePassive indicates the endpoint will accept an incoming connection.
+	ConnectionRolePassive
+
+	// ConnectionRoleActpass indicates the endpoint is willing to accept an incoming connection or to initiate an outgoing connection.
+	ConnectionRoleActpass
+
+	// ConnectionRoleHoldconn indicates the endpoint does not want the connection to be established for the time being.
+	ConnectionRoleHoldconn
+)
+
+func (t ConnectionRole) String() string {
+	switch t {
+	case ConnectionRoleActive:
+		return "active"
+	case ConnectionRolePassive:
+		return "passive"
+	case ConnectionRoleActpass:
+		return "actpass"
+	case ConnectionRoleHoldconn:
+		return "holdconn"
+	default:
+		return "Unknown"
+	}
+}
+
+func newSessionID() (uint64, error) {
+	// https://tools.ietf.org/html/draft-ietf-rtcweb-jsep-26#section-5.2.1
+	// Session ID is recommended to be constructed by generating a 64-bit
+	// quantity with the highest bit set to zero and the remaining 63-bits
+	// being cryptographically random.
+	id, err := randutil.CryptoUint64()
+	return id & (^(uint64(1) << 63)), err
+}
+
+// Codec represents a codec
+type Codec struct {
+	PayloadType        uint8
+	Name               string
+	ClockRate          uint32
+	EncodingParameters string
+	Fmtp               string
+	RTCPFeedback       []string
+}
+
+const (
+	unknown = iota
+)
+
+func (c Codec) String() string {
+	return fmt.Sprintf("%d %s/%d/%s (%s) [%s]", c.PayloadType, c.Name, c.ClockRate, c.EncodingParameters, c.Fmtp, strings.Join(c.RTCPFeedback, ", "))
+}
+
+func parseRtpmap(rtpmap string) (Codec, error) {
+	var codec Codec
+	parsingFailed := errExtractCodecRtpmap
+
+	// a=rtpmap:<payload type> <encoding name>/<clock rate>[/<encoding parameters>]
+	split := strings.Split(rtpmap, " ")
+	if len(split) != 2 {
+		return codec, parsingFailed
+	}
+
+	ptSplit := strings.Split(split[0], ":")
+	if len(ptSplit) != 2 {
+		return codec, parsingFailed
+	}
+
+	ptInt, err := strconv.Atoi(ptSplit[1])
+	if err != nil {
+		return codec, parsingFailed
+	}
+
+	codec.PayloadType = uint8(ptInt)
+
+	split = strings.Split(split[1], "/")
+	codec.Name = split[0]
+	parts := len(split)
+	if parts > 1 {
+		rate, err := strconv.Atoi(split[1])
+		if err != nil {
+			return codec, parsingFailed
+		}
+		codec.ClockRate = uint32(rate)
+	}
+	if parts > 2 {
+		codec.EncodingParameters = split[2]
+	}
+
+	return codec, nil
+}
+
+func parseFmtp(fmtp string) (Codec, error) {
+	var codec Codec
+	parsingFailed := errExtractCodecFmtp
+
+	// a=fmtp:<format> <format specific parameters>
+	split := strings.Split(fmtp, " ")
+	if len(split) != 2 {
+		return codec, parsingFailed
+	}
+
+	formatParams := split[1]
+
+	split = strings.Split(split[0], ":")
+	if len(split) != 2 {
+		return codec, parsingFailed
+	}
+
+	ptInt, err := strconv.Atoi(split[1])
+	if err != nil {
+		return codec, parsingFailed
+	}
+
+	codec.PayloadType = uint8(ptInt)
+	codec.Fmtp = formatParams
+
+	return codec, nil
+}
+
+func parseRtcpFb(rtcpFb string) (Codec, error) {
+	var codec Codec
+	parsingFailed := errExtractCodecRtcpFb
+
+	// a=ftcp-fb:<payload type> <RTCP feedback type> [<RTCP feedback parameter>]
+	split := strings.SplitN(rtcpFb, " ", 2)
+	if len(split) != 2 {
+		return codec, parsingFailed
+	}
+
+	ptSplit := strings.Split(split[0], ":")
+	if len(ptSplit) != 2 {
+		return codec, parsingFailed
+	}
+
+	ptInt, err := strconv.Atoi(ptSplit[1])
+	if err != nil {
+		return codec, parsingFailed
+	}
+
+	codec.PayloadType = uint8(ptInt)
+	codec.RTCPFeedback = append(codec.RTCPFeedback, split[1])
+
+	return codec, nil
+}
+
+func mergeCodecs(codec Codec, codecs map[uint8]Codec) {
+	savedCodec := codecs[codec.PayloadType]
+
+	if savedCodec.PayloadType == 0 {
+		savedCodec.PayloadType = codec.PayloadType
+	}
+	if savedCodec.Name == "" {
+		savedCodec.Name = codec.Name
+	}
+	if savedCodec.ClockRate == 0 {
+		savedCodec.ClockRate = codec.ClockRate
+	}
+	if savedCodec.EncodingParameters == "" {
+		savedCodec.EncodingParameters = codec.EncodingParameters
+	}
+	if savedCodec.Fmtp == "" {
+		savedCodec.Fmtp = codec.Fmtp
+	}
+	savedCodec.RTCPFeedback = append(savedCodec.RTCPFeedback, codec.RTCPFeedback...)
+
+	codecs[savedCodec.PayloadType] = savedCodec
+}
+
+func (s *SessionDescription) buildCodecMap() map[uint8]Codec {
+	codecs := make(map[uint8]Codec)
+
+	for _, m := range s.MediaDescriptions {
+		for _, a := range m.Attributes {
+			attr := a.String()
+			switch {
+			case strings.HasPrefix(attr, "rtpmap:"):
+				codec, err := parseRtpmap(attr)
+				if err == nil {
+					mergeCodecs(codec, codecs)
+				}
+			case strings.HasPrefix(attr, "fmtp:"):
+				codec, err := parseFmtp(attr)
+				if err == nil {
+					mergeCodecs(codec, codecs)
+				}
+			case strings.HasPrefix(attr, "rtcp-fb:"):
+				codec, err := parseRtcpFb(attr)
+				if err == nil {
+					mergeCodecs(codec, codecs)
+				}
+			}
+		}
+	}
+
+	return codecs
+}
+
+func equivalentFmtp(want, got string) bool {
+	wantSplit := strings.Split(want, ";")
+	gotSplit := strings.Split(got, ";")
+
+	if len(wantSplit) != len(gotSplit) {
+		return false
+	}
+
+	sort.Strings(wantSplit)
+	sort.Strings(gotSplit)
+
+	for i, wantPart := range wantSplit {
+		wantPart = strings.TrimSpace(wantPart)
+		gotPart := strings.TrimSpace(gotSplit[i])
+		if gotPart != wantPart {
+			return false
+		}
+	}
+
+	return true
+}
+
+func codecsMatch(wanted, got Codec) bool {
+	if wanted.Name != "" && !strings.EqualFold(wanted.Name, got.Name) {
+		return false
+	}
+	if wanted.ClockRate != 0 && wanted.ClockRate != got.ClockRate {
+		return false
+	}
+	if wanted.EncodingParameters != "" && wanted.EncodingParameters != got.EncodingParameters {
+		return false
+	}
+	if wanted.Fmtp != "" && !equivalentFmtp(wanted.Fmtp, got.Fmtp) {
+		return false
+	}
+
+	return true
+}
+
+// GetCodecForPayloadType scans the SessionDescription for the given payload type and returns the codec
+func (s *SessionDescription) GetCodecForPayloadType(payloadType uint8) (Codec, error) {
+	codecs := s.buildCodecMap()
+
+	codec, ok := codecs[payloadType]
+	if ok {
+		return codec, nil
+	}
+
+	return codec, errPayloadTypeNotFound
+}
+
+// GetPayloadTypeForCodec scans the SessionDescription for a codec that matches the provided codec
+// as closely as possible and returns its payload type
+func (s *SessionDescription) GetPayloadTypeForCodec(wanted Codec) (uint8, error) {
+	codecs := s.buildCodecMap()
+
+	for payloadType, codec := range codecs {
+		if codecsMatch(wanted, codec) {
+			return payloadType, nil
+		}
+	}
+
+	return 0, errCodecNotFound
+}
+
+type stateFn func(*lexer) (stateFn, error)
+
+type lexer struct {
+	desc *SessionDescription
+	baseLexer
+}
+
+type keyToState func(key string) stateFn
+
+func (l *lexer) handleType(fn keyToState) (stateFn, error) {
+	key, err := l.readType()
+	if err == io.EOF && key == "" {
+		return nil, nil
+	} else if err != nil {
+		return nil, err
+	}
+
+	if res := fn(key); res != nil {
+		return res, nil
+	}
+
+	return nil, l.syntaxError()
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/.gitignore b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/.gitignore
new file mode 100644
index 000000000..83db74ba5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/.gitignore
@@ -0,0 +1,24 @@
+### JetBrains IDE ###
+#####################
+.idea/
+
+### Emacs Temporary Files ###
+#############################
+*~
+
+### Folders ###
+###############
+bin/
+vendor/
+node_modules/
+
+### Files ###
+#############
+*.ivf
+*.ogg
+tags
+cover.out
+*.sw[poe]
+*.wasm
+examples/sfu-ws/cert.pem
+examples/sfu-ws/key.pem
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/.golangci.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/.golangci.yml
new file mode 100644
index 000000000..d6162c970
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/.golangci.yml
@@ -0,0 +1,89 @@
+linters-settings:
+  govet:
+    check-shadowing: true
+  misspell:
+    locale: US
+  exhaustive:
+    default-signifies-exhaustive: true
+  gomodguard:
+    blocked:
+      modules:
+        - github.com/pkg/errors:
+            recommendations:
+            - errors
+
+linters:
+  enable:
+    - asciicheck       # Simple linter to check that your code does not contain non-ASCII identifiers
+    - bodyclose        # checks whether HTTP response body is closed successfully
+    - deadcode         # Finds unused code
+    - depguard         # Go linter that checks if package imports are in a list of acceptable packages
+    - dogsled          # Checks assignments with too many blank identifiers (e.g. x, _, _, _, := f())
+    - dupl             # Tool for code clone detection
+    - errcheck         # Errcheck is a program for checking for unchecked errors in go programs. These unchecked errors can be critical bugs in some cases
+    - exhaustive       # check exhaustiveness of enum switch statements
+    - exportloopref    # checks for pointers to enclosing loop variables
+    - gci              # Gci control golang package import order and make it always deterministic.
+    - gochecknoglobals # Checks that no globals are present in Go code
+    - gochecknoinits   # Checks that no init functions are present in Go code
+    - gocognit         # Computes and checks the cognitive complexity of functions
+    - goconst          # Finds repeated strings that could be replaced by a constant
+    - gocritic         # The most opinionated Go source code linter
+    - godox            # Tool for detection of FIXME, TODO and other comment keywords
+    - goerr113         # Golang linter to check the errors handling expressions
+    - gofmt            # Gofmt checks whether code was gofmt-ed. By default this tool runs with -s option to check for code simplification
+    - gofumpt          # Gofumpt checks whether code was gofumpt-ed.
+    - goheader         # Checks is file header matches to pattern
+    - goimports        # Goimports does everything that gofmt does. Additionally it checks unused imports
+    - golint           # Golint differs from gofmt. Gofmt reformats Go source code, whereas golint prints out style mistakes
+    - gomodguard       # Allow and block list linter for direct Go module dependencies. This is different from depguard where there are different block types for example version constraints and module recommendations.
+    - goprintffuncname # Checks that printf-like functions are named with `f` at the end
+    - gosec            # Inspects source code for security problems
+    - gosimple         # Linter for Go source code that specializes in simplifying a code
+    - govet            # Vet examines Go source code and reports suspicious constructs, such as Printf calls whose arguments do not align with the format string
+    - ineffassign      # Detects when assignments to existing variables are not used
+    - misspell         # Finds commonly misspelled English words in comments
+    - nakedret         # Finds naked returns in functions greater than a specified function length
+    - noctx            # noctx finds sending http request without context.Context
+    - scopelint        # Scopelint checks for unpinned variables in go programs
+    - staticcheck      # Staticcheck is a go vet on steroids, applying a ton of static analysis checks
+    - structcheck      # Finds unused struct fields
+    - stylecheck       # Stylecheck is a replacement for golint
+    - typecheck        # Like the front-end of a Go compiler, parses and type-checks Go code
+    - unconvert        # Remove unnecessary type conversions
+    - unparam          # Reports unused function parameters
+    - unused           # Checks Go code for unused constants, variables, functions and types
+    - varcheck         # Finds unused global variables and constants
+    - whitespace       # Tool for detection of leading and trailing whitespace
+  disable:
+    - funlen           # Tool for detection of long functions
+    - gocyclo          # Computes and checks the cyclomatic complexity of functions
+    - godot            # Check if comments end in a period
+    - gomnd            # An analyzer to detect magic numbers.
+    - lll              # Reports long lines
+    - maligned         # Tool to detect Go structs that would take less memory if their fields were sorted
+    - nestif           # Reports deeply nested if statements
+    - nlreturn         # nlreturn checks for a new line before return and branch statements to increase code clarity
+    - nolintlint       # Reports ill-formed or insufficient nolint directives
+    - prealloc         # Finds slice declarations that could potentially be preallocated
+    - rowserrcheck     # checks whether Err of rows is checked successfully
+    - sqlclosecheck    # Checks that sql.Rows and sql.Stmt are closed.
+    - testpackage      # linter that makes you use a separate _test package
+    - wsl              # Whitespace Linter - Forces you to use empty lines!
+
+issues:
+  exclude-use-default: false
+  exclude-rules:
+    # Allow complex tests, better to be self contained
+    - path: _test\.go
+      linters:
+        - gocognit
+
+    # Allow complex main function in examples
+    - path: examples
+      text: "of func `main` is high"
+      linters:
+        - gocognit
+
+run:
+  skip-dirs-use-default: false
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/DESIGN.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/DESIGN.md
new file mode 100644
index 000000000..8742540df
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/DESIGN.md
@@ -0,0 +1,20 @@
+<h1 align="center">
+  Design
+</h1>
+
+### Portable
+Pion SRTP is written in Go and extremely portable. Anywhere Golang runs, Pion SRTP should work as well! Instead of dealing with complicated
+cross-compiling of multiple libraries, you now can run anywhere with one `go build`
+
+### Simple API
+The API is based on an io.ReadWriteCloser.
+
+### Readable
+If code comes from an RFC we try to make sure everything is commented with a link to the spec.
+This makes learning and debugging easier, this library was written to also serve as a guide for others.
+
+### Tested
+Every commit is tested via travis-ci Go provides fantastic facilities for testing, and more will be added as time goes on.
+
+### Shared libraries
+Every pion product is built using shared libraries, allowing others to review and reuse our libraries.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/LICENSE
new file mode 100644
index 000000000..ab602974d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/README.md
new file mode 100644
index 000000000..19551e35e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/README.md
@@ -0,0 +1,54 @@
+<h1 align="center">
+  <br>
+  Pion SRTP
+  <br>
+</h1>
+<h4 align="center">A Go implementation of SRTP</h4>
+<p align="center">
+  <a href="https://pion.ly"><img src="https://img.shields.io/badge/pion-srtp-gray.svg?longCache=true&colorB=brightgreen" alt="Pion SRTP"></a>
+  <a href="https://sourcegraph.com/github.com/pion/srtp?badge"><img src="https://sourcegraph.com/github.com/pion/srtp/-/badge.svg" alt="Sourcegraph Widget"></a>
+  <a href="https://pion.ly/slack"><img src="https://img.shields.io/badge/join-us%20on%20slack-gray.svg?longCache=true&logo=slack&colorB=brightgreen" alt="Slack Widget"></a>
+  <br>
+  <a href="https://travis-ci.org/pion/srtp"><img src="https://travis-ci.org/pion/srtp.svg?branch=master" alt="Build Status"></a>
+  <a href="https://pkg.go.dev/github.com/pion/srtp"><img src="https://godoc.org/github.com/pion/srtp?status.svg" alt="GoDoc"></a>
+  <a href="https://codecov.io/gh/pion/srtp"><img src="https://codecov.io/gh/pion/srtp/branch/master/graph/badge.svg" alt="Coverage Status"></a>
+  <a href="https://goreportcard.com/report/github.com/pion/srtp"><img src="https://goreportcard.com/badge/github.com/pion/srtp" alt="Go Report Card"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+</p>
+<br>
+
+See [DESIGN.md](DESIGN.md) for an overview of features and future goals.
+
+### Roadmap
+The library is used as a part of our WebRTC implementation. Please refer to that [roadmap](https://github.com/pion/webrtc/issues/9) to track our major milestones.
+
+### Community
+Pion has an active community on the [Golang Slack](https://invite.slack.golangbridge.org/). Sign up and join the **#pion** channel for discussions and support. You can also use [Pion mailing list](https://groups.google.com/forum/#!forum/pion).
+
+We are always looking to support **your projects**. Please reach out if you have something to build!
+
+If you need commercial support or don't want to use public methods you can contact us at [team@pion.ly](mailto:team@pion.ly)
+
+### Contributing
+Check out the **[contributing wiki](https://github.com/pion/webrtc/wiki/Contributing)** to join the group of amazing people making this project possible:
+
+* [Sean DuBois](https://github.com/Sean-Der) - *Original Author*
+* [Michiel De Backker](https://github.com/backkem) - *io.Writer interfaces*
+* [Tobias Fridén](https://github.com/tobiasfriden) *SRTP authentication verification*
+* [chenkaiC4](https://github.com/chenkaiC4) - *Fix GolangCI Linter*
+* [Luke Curley](https://github.com/kixelated) - *Performance*
+* [Chris Hiszpanski](https://github.com/thinkski) - *Fix out-of-bounds access*
+* [Yutaka Takeda](https://github.com/enobufs) - *Fix log messages*
+* [Max Hawkins](https://github.com/maxhawkins)
+* [Woodrow Douglass](https://github.com/wdouglass)
+* [Hugo Arregui](https://github.com/hugoArregui)
+* [Atsushi Watanabe](https://github.com/at-wat)
+* [Novel Corpse](https://github.com/NovelCorpse)
+* [Jerko Steiner](https://github.com/jeremija)
+* [Juliusz Chroboczek](https://github.com/jech)
+* [Mission Liao](https://github.com/mission-liao)
+* [Orlando](https://github.com/OrlandoCo)
+* [Tarrence van As](https://github.com/tarrencev)
+
+### License
+MIT License - see [LICENSE](LICENSE) for full text
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/codecov.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/codecov.yml
new file mode 100644
index 000000000..085200a48
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/codecov.yml
@@ -0,0 +1,20 @@
+#
+# DO NOT EDIT THIS FILE
+#
+# It is automatically copied from https://github.com/pion/.goassets repository.
+#
+
+coverage:
+  status:
+    project:
+      default:
+        # Allow decreasing 2% of total coverage to avoid noise.
+        threshold: 2%
+    patch:
+      default:
+        target: 70%
+        only_pulls: true
+
+ignore:
+  - "examples/*"
+  - "examples/**/*"
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/context.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/context.go
new file mode 100644
index 000000000..63566de74
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/context.go
@@ -0,0 +1,196 @@
+package srtp
+
+import (
+	"fmt"
+
+	"github.com/pion/transport/replaydetector"
+)
+
+const (
+	labelSRTPEncryption        = 0x00
+	labelSRTPAuthenticationTag = 0x01
+	labelSRTPSalt              = 0x02
+
+	labelSRTCPEncryption        = 0x03
+	labelSRTCPAuthenticationTag = 0x04
+	labelSRTCPSalt              = 0x05
+
+	maxROCDisorder    = 100
+	maxSequenceNumber = 65535
+
+	srtcpIndexSize = 4
+)
+
+// Encrypt/Decrypt state for a single SRTP SSRC
+type srtpSSRCState struct {
+	ssrc                 uint32
+	rolloverCounter      uint32
+	rolloverHasProcessed bool
+	lastSequenceNumber   uint16
+	replayDetector       replaydetector.ReplayDetector
+}
+
+// Encrypt/Decrypt state for a single SRTCP SSRC
+type srtcpSSRCState struct {
+	srtcpIndex     uint32
+	ssrc           uint32
+	replayDetector replaydetector.ReplayDetector
+}
+
+// Context represents a SRTP cryptographic context.
+// Context can only be used for one-way operations.
+// it must either used ONLY for encryption or ONLY for decryption.
+type Context struct {
+	cipher srtpCipher
+
+	srtpSSRCStates  map[uint32]*srtpSSRCState
+	srtcpSSRCStates map[uint32]*srtcpSSRCState
+
+	newSRTCPReplayDetector func() replaydetector.ReplayDetector
+	newSRTPReplayDetector  func() replaydetector.ReplayDetector
+}
+
+// CreateContext creates a new SRTP Context.
+//
+// CreateContext receives variable number of ContextOption-s.
+// Passing multiple options which set the same parameter let the last one valid.
+// Following example create SRTP Context with replay protection with window size of 256.
+//
+//   decCtx, err := srtp.CreateContext(key, salt, profile, srtp.SRTPReplayProtection(256))
+//
+func CreateContext(masterKey, masterSalt []byte, profile ProtectionProfile, opts ...ContextOption) (c *Context, err error) {
+	keyLen, err := profile.keyLen()
+	if err != nil {
+		return nil, err
+	}
+
+	saltLen, err := profile.saltLen()
+	if err != nil {
+		return nil, err
+	}
+
+	if masterKeyLen := len(masterKey); masterKeyLen != keyLen {
+		return c, fmt.Errorf("%w expected(%d) actual(%d)", errShortSrtpMasterKey, masterKey, keyLen)
+	} else if masterSaltLen := len(masterSalt); masterSaltLen != saltLen {
+		return c, fmt.Errorf("%w expected(%d) actual(%d)", errShortSrtpMasterSalt, saltLen, masterSaltLen)
+	}
+
+	c = &Context{
+		srtpSSRCStates:  map[uint32]*srtpSSRCState{},
+		srtcpSSRCStates: map[uint32]*srtcpSSRCState{},
+	}
+
+	switch profile {
+	case ProtectionProfileAeadAes128Gcm:
+		c.cipher, err = newSrtpCipherAeadAesGcm(masterKey, masterSalt)
+	case ProtectionProfileAes128CmHmacSha1_80:
+		c.cipher, err = newSrtpCipherAesCmHmacSha1(masterKey, masterSalt)
+	default:
+		return nil, fmt.Errorf("%w: %#v", errNoSuchSRTPProfile, profile)
+	}
+	if err != nil {
+		return nil, err
+	}
+
+	for _, o := range append(
+		[]ContextOption{ // Default options
+			SRTPNoReplayProtection(),
+			SRTCPNoReplayProtection(),
+		},
+		opts..., // User specified options
+	) {
+		if errOpt := o(c); errOpt != nil {
+			return nil, errOpt
+		}
+	}
+
+	return c, nil
+}
+
+// https://tools.ietf.org/html/rfc3550#appendix-A.1
+func (s *srtpSSRCState) nextRolloverCount(sequenceNumber uint16) (uint32, func()) {
+	roc := s.rolloverCounter
+
+	switch {
+	case !s.rolloverHasProcessed:
+	case sequenceNumber == 0: // We exactly hit the rollover count
+		// Only update rolloverCounter if lastSequenceNumber is greater then maxROCDisorder
+		// otherwise we already incremented for disorder
+		if s.lastSequenceNumber > maxROCDisorder {
+			roc++
+		}
+	case s.lastSequenceNumber < maxROCDisorder &&
+		sequenceNumber > (maxSequenceNumber-maxROCDisorder):
+		// Our last sequence number incremented because we crossed 0, but then our current number was within maxROCDisorder of the max
+		// So we fell behind, drop to account for jitter
+		roc--
+	case sequenceNumber < maxROCDisorder &&
+		s.lastSequenceNumber > (maxSequenceNumber-maxROCDisorder):
+		// our current is within a maxROCDisorder of 0
+		// and our last sequence number was a high sequence number, increment to account for jitter
+		roc++
+	}
+	return roc, func() {
+		s.rolloverHasProcessed = true
+		s.lastSequenceNumber = sequenceNumber
+		s.rolloverCounter = roc
+	}
+}
+
+func (c *Context) getSRTPSSRCState(ssrc uint32) *srtpSSRCState {
+	s, ok := c.srtpSSRCStates[ssrc]
+	if ok {
+		return s
+	}
+
+	s = &srtpSSRCState{
+		ssrc:           ssrc,
+		replayDetector: c.newSRTPReplayDetector(),
+	}
+	c.srtpSSRCStates[ssrc] = s
+	return s
+}
+
+func (c *Context) getSRTCPSSRCState(ssrc uint32) *srtcpSSRCState {
+	s, ok := c.srtcpSSRCStates[ssrc]
+	if ok {
+		return s
+	}
+
+	s = &srtcpSSRCState{
+		ssrc:           ssrc,
+		replayDetector: c.newSRTCPReplayDetector(),
+	}
+	c.srtcpSSRCStates[ssrc] = s
+	return s
+}
+
+// ROC returns SRTP rollover counter value of specified SSRC.
+func (c *Context) ROC(ssrc uint32) (uint32, bool) {
+	s, ok := c.srtpSSRCStates[ssrc]
+	if !ok {
+		return 0, false
+	}
+	return s.rolloverCounter, true
+}
+
+// SetROC sets SRTP rollover counter value of specified SSRC.
+func (c *Context) SetROC(ssrc uint32, roc uint32) {
+	s := c.getSRTPSSRCState(ssrc)
+	s.rolloverCounter = roc
+}
+
+// Index returns SRTCP index value of specified SSRC.
+func (c *Context) Index(ssrc uint32) (uint32, bool) {
+	s, ok := c.srtcpSSRCStates[ssrc]
+	if !ok {
+		return 0, false
+	}
+	return s.srtcpIndex, true
+}
+
+// SetIndex sets SRTCP index value of specified SSRC.
+func (c *Context) SetIndex(ssrc uint32, index uint32) {
+	s := c.getSRTCPSSRCState(ssrc)
+	s.srtcpIndex = index % (maxSRTCPIndex + 1)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/errors.go
new file mode 100644
index 000000000..a70262145
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/errors.go
@@ -0,0 +1,40 @@
+package srtp
+
+import (
+	"errors"
+	"fmt"
+)
+
+var (
+	errDuplicated                    = errors.New("duplicated packet")
+	errShortSrtpMasterKey            = errors.New("SRTP master key is not long enough")
+	errShortSrtpMasterSalt           = errors.New("SRTP master salt is not long enough")
+	errNoSuchSRTPProfile             = errors.New("no such SRTP Profile")
+	errNonZeroKDRNotSupported        = errors.New("indexOverKdr > 0 is not supported yet")
+	errExporterWrongLabel            = errors.New("exporter called with wrong label")
+	errNoConfig                      = errors.New("no config provided")
+	errNoConn                        = errors.New("no conn provided")
+	errFailedToVerifyAuthTag         = errors.New("failed to verify auth tag")
+	errTooShortRTCP                  = errors.New("packet is too short to be rtcp packet")
+	errPayloadDiffers                = errors.New("payload differs")
+	errStartedChannelUsedIncorrectly = errors.New("started channel used incorrectly, should only be closed")
+
+	errStreamNotInited     = errors.New("stream has not been inited, unable to close")
+	errStreamAlreadyClosed = errors.New("stream is already closed")
+	errStreamAlreadyInited = errors.New("stream is already inited")
+	errFailedTypeAssertion = errors.New("failed to cast child")
+)
+
+type errorDuplicated struct {
+	Proto string // srtp or srtcp
+	SSRC  uint32
+	Index uint32 // sequence number or index
+}
+
+func (e *errorDuplicated) Error() string {
+	return fmt.Sprintf("%s ssrc=%d index=%d: %v", e.Proto, e.SSRC, e.Index, errDuplicated)
+}
+
+func (e *errorDuplicated) Unwrap() error {
+	return errDuplicated
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/go.mod
new file mode 100644
index 000000000..eeb3ba44b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/go.mod
@@ -0,0 +1,11 @@
+module github.com/pion/srtp/v2
+
+go 1.14
+
+require (
+	github.com/pion/logging v0.2.2
+	github.com/pion/rtcp v1.2.6
+	github.com/pion/rtp v1.6.2
+	github.com/pion/transport v0.12.2
+	github.com/stretchr/testify v1.6.1
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/go.sum b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/go.sum
new file mode 100644
index 000000000..6b3bdb580
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/go.sum
@@ -0,0 +1,32 @@
+github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/pion/logging v0.2.2 h1:M9+AIj/+pxNsDfAT64+MAVgJO0rsyLnoJKCqf//DoeY=
+github.com/pion/logging v0.2.2/go.mod h1:k0/tDVsRCX2Mb2ZEmTqNa7CWsQPc+YYCB7Q+5pahoms=
+github.com/pion/randutil v0.1.0 h1:CFG1UdESneORglEsnimhUjf33Rwjubwj6xfiOXBa3mA=
+github.com/pion/randutil v0.1.0/go.mod h1:XcJrSMMbbMRhASFVOlj/5hQial/Y8oH/HVo7TBZq+j8=
+github.com/pion/rtcp v1.2.6 h1:1zvwBbyd0TeEuuWftrd/4d++m+/kZSeiguxU61LFWpo=
+github.com/pion/rtcp v1.2.6/go.mod h1:52rMNPWFsjr39z9B9MhnkqhPLoeHTv1aN63o/42bWE0=
+github.com/pion/rtp v1.6.2 h1:iGBerLX6JiDjB9NXuaPzHyxHFG9JsIEdgwTC0lp5n/U=
+github.com/pion/rtp v1.6.2/go.mod h1:bDb5n+BFZxXx0Ea7E5qe+klMuqiBrP+w8XSjiWtCUko=
+github.com/pion/transport v0.12.2 h1:WYEjhloRHt1R86LhUKjC5y+P52Y11/QqEUalvtzVoys=
+github.com/pion/transport v0.12.2/go.mod h1:N3+vZQD9HlDP5GWkZ85LohxNsDcNgofQmyL6ojX5d8Q=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.6.1 h1:hDPOHmpOpP40lSULcqw7IrRb/u7w6RpDC9399XyoNd0=
+github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20201201195509-5d6afe98e0b7 h1:3uJsdck53FDIpWwLeAXlia9p4C8j0BO2xZrqzKpL0D8=
+golang.org/x/net v0.0.0-20201201195509-5d6afe98e0b7/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c h1:dUUwHk2QECo/6vqA44rthZ8ie2QXMNeKRTHCNY2nXvo=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/key_derivation.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/key_derivation.go
new file mode 100644
index 000000000..5bbf3aaad
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/key_derivation.go
@@ -0,0 +1,63 @@
+package srtp
+
+import (
+	"crypto/aes"
+	"encoding/binary"
+)
+
+func aesCmKeyDerivation(label byte, masterKey, masterSalt []byte, indexOverKdr int, outLen int) ([]byte, error) {
+	if indexOverKdr != 0 {
+		// 24-bit "index DIV kdr" must be xored to prf input.
+		return nil, errNonZeroKDRNotSupported
+	}
+
+	// https://tools.ietf.org/html/rfc3711#appendix-B.3
+	// The input block for AES-CM is generated by exclusive-oring the master salt with the
+	// concatenation of the encryption key label 0x00 with (index DIV kdr),
+	// - index is 'rollover count' and DIV is 'divided by'
+
+	nMasterKey := len(masterKey)
+	nMasterSalt := len(masterSalt)
+
+	prfIn := make([]byte, nMasterKey)
+	copy(prfIn[:nMasterSalt], masterSalt)
+
+	prfIn[7] ^= label
+
+	// The resulting value is then AES encrypted using the master key to get the cipher key.
+	block, err := aes.NewCipher(masterKey)
+	if err != nil {
+		return nil, err
+	}
+
+	out := make([]byte, ((outLen+nMasterKey)/nMasterKey)*nMasterKey)
+	var i uint16
+	for n := 0; n < outLen; n += nMasterKey {
+		binary.BigEndian.PutUint16(prfIn[nMasterKey-2:], i)
+		block.Encrypt(out[n:n+nMasterKey], prfIn)
+		i++
+	}
+	return out[:outLen], nil
+}
+
+// Generate IV https://tools.ietf.org/html/rfc3711#section-4.1.1
+// where the 128-bit integer value IV SHALL be defined by the SSRC, the
+// SRTP packet index i, and the SRTP session salting key k_s, as below.
+// - ROC = a 32-bit unsigned rollover counter (ROC), which records how many
+// -       times the 16-bit RTP sequence number has been reset to zero after
+// -       passing through 65,535
+// i = 2^16 * ROC + SEQ
+// IV = (salt*2 ^ 16) | (ssrc*2 ^ 64) | (i*2 ^ 16)
+func generateCounter(sequenceNumber uint16, rolloverCounter uint32, ssrc uint32, sessionSalt []byte) []byte {
+	counter := make([]byte, 16)
+
+	binary.BigEndian.PutUint32(counter[4:], ssrc)
+	binary.BigEndian.PutUint32(counter[8:], rolloverCounter)
+	binary.BigEndian.PutUint32(counter[12:], uint32(sequenceNumber)<<16)
+
+	for i := range sessionSalt {
+		counter[i] ^= sessionSalt[i]
+	}
+
+	return counter
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/keying.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/keying.go
new file mode 100644
index 000000000..82fd4d900
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/keying.go
@@ -0,0 +1,54 @@
+package srtp
+
+const labelExtractorDtlsSrtp = "EXTRACTOR-dtls_srtp"
+
+// KeyingMaterialExporter allows package SRTP to extract keying material
+type KeyingMaterialExporter interface {
+	ExportKeyingMaterial(label string, context []byte, length int) ([]byte, error)
+}
+
+// ExtractSessionKeysFromDTLS allows setting the Config SessionKeys by
+// extracting them from DTLS. This behavior is defined in RFC5764:
+// https://tools.ietf.org/html/rfc5764
+func (c *Config) ExtractSessionKeysFromDTLS(exporter KeyingMaterialExporter, isClient bool) error {
+	keyLen, err := c.Profile.keyLen()
+	if err != nil {
+		return err
+	}
+
+	saltLen, err := c.Profile.saltLen()
+	if err != nil {
+		return err
+	}
+
+	keyingMaterial, err := exporter.ExportKeyingMaterial(labelExtractorDtlsSrtp, nil, (keyLen*2)+(saltLen*2))
+	if err != nil {
+		return err
+	}
+
+	offset := 0
+	clientWriteKey := append([]byte{}, keyingMaterial[offset:offset+keyLen]...)
+	offset += keyLen
+
+	serverWriteKey := append([]byte{}, keyingMaterial[offset:offset+keyLen]...)
+	offset += keyLen
+
+	clientWriteKey = append(clientWriteKey, keyingMaterial[offset:offset+saltLen]...)
+	offset += saltLen
+
+	serverWriteKey = append(serverWriteKey, keyingMaterial[offset:offset+saltLen]...)
+
+	if isClient {
+		c.Keys.LocalMasterKey = clientWriteKey[0:keyLen]
+		c.Keys.LocalMasterSalt = clientWriteKey[keyLen:]
+		c.Keys.RemoteMasterKey = serverWriteKey[0:keyLen]
+		c.Keys.RemoteMasterSalt = serverWriteKey[keyLen:]
+		return nil
+	}
+
+	c.Keys.LocalMasterKey = serverWriteKey[0:keyLen]
+	c.Keys.LocalMasterSalt = serverWriteKey[keyLen:]
+	c.Keys.RemoteMasterKey = clientWriteKey[0:keyLen]
+	c.Keys.RemoteMasterSalt = clientWriteKey[keyLen:]
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/option.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/option.go
new file mode 100644
index 000000000..d6159f13f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/option.go
@@ -0,0 +1,54 @@
+package srtp
+
+import (
+	"github.com/pion/transport/replaydetector"
+)
+
+// ContextOption represents option of Context using the functional options pattern.
+type ContextOption func(*Context) error
+
+// SRTPReplayProtection sets SRTP replay protection window size.
+func SRTPReplayProtection(windowSize uint) ContextOption { // nolint:golint
+	return func(c *Context) error {
+		c.newSRTPReplayDetector = func() replaydetector.ReplayDetector {
+			return replaydetector.WithWrap(windowSize, maxSequenceNumber)
+		}
+		return nil
+	}
+}
+
+// SRTCPReplayProtection sets SRTCP replay protection window size.
+func SRTCPReplayProtection(windowSize uint) ContextOption {
+	return func(c *Context) error {
+		c.newSRTCPReplayDetector = func() replaydetector.ReplayDetector {
+			return replaydetector.WithWrap(windowSize, maxSRTCPIndex)
+		}
+		return nil
+	}
+}
+
+// SRTPNoReplayProtection disables SRTP replay protection.
+func SRTPNoReplayProtection() ContextOption { // nolint:golint
+	return func(c *Context) error {
+		c.newSRTPReplayDetector = func() replaydetector.ReplayDetector {
+			return &nopReplayDetector{}
+		}
+		return nil
+	}
+}
+
+// SRTCPNoReplayProtection disables SRTCP replay protection.
+func SRTCPNoReplayProtection() ContextOption {
+	return func(c *Context) error {
+		c.newSRTCPReplayDetector = func() replaydetector.ReplayDetector {
+			return &nopReplayDetector{}
+		}
+		return nil
+	}
+}
+
+type nopReplayDetector struct{}
+
+func (s *nopReplayDetector) Check(uint64) (func(), bool) {
+	return func() {}, true
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/protection_profile.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/protection_profile.go
new file mode 100644
index 000000000..54c01b571
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/protection_profile.go
@@ -0,0 +1,56 @@
+package srtp
+
+import "fmt"
+
+// ProtectionProfile specifies Cipher and AuthTag details, similar to TLS cipher suite
+type ProtectionProfile uint16
+
+// Supported protection profiles
+const (
+	ProtectionProfileAes128CmHmacSha1_80 ProtectionProfile = 0x0001
+	ProtectionProfileAeadAes128Gcm       ProtectionProfile = 0x0007
+)
+
+func (p ProtectionProfile) keyLen() (int, error) {
+	switch p {
+	case ProtectionProfileAes128CmHmacSha1_80:
+		fallthrough
+	case ProtectionProfileAeadAes128Gcm:
+		return 16, nil
+	default:
+		return 0, fmt.Errorf("%w: %#v", errNoSuchSRTPProfile, p)
+	}
+}
+
+func (p ProtectionProfile) saltLen() (int, error) {
+	switch p {
+	case ProtectionProfileAes128CmHmacSha1_80:
+		return 14, nil
+	case ProtectionProfileAeadAes128Gcm:
+		return 12, nil
+	default:
+		return 0, fmt.Errorf("%w: %#v", errNoSuchSRTPProfile, p)
+	}
+}
+
+func (p ProtectionProfile) authTagLen() (int, error) {
+	switch p {
+	case ProtectionProfileAes128CmHmacSha1_80:
+		return (&srtpCipherAesCmHmacSha1{}).authTagLen(), nil
+	case ProtectionProfileAeadAes128Gcm:
+		return (&srtpCipherAeadAesGcm{}).authTagLen(), nil
+	default:
+		return 0, fmt.Errorf("%w: %#v", errNoSuchSRTPProfile, p)
+	}
+}
+
+func (p ProtectionProfile) authKeyLen() (int, error) {
+	switch p {
+	case ProtectionProfileAes128CmHmacSha1_80:
+		return 20, nil
+	case ProtectionProfileAeadAes128Gcm:
+		return 0, nil
+	default:
+		return 0, fmt.Errorf("%w: %#v", errNoSuchSRTPProfile, p)
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/renovate.json b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/renovate.json
new file mode 100644
index 000000000..4400fd9b2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/renovate.json
@@ -0,0 +1,15 @@
+{
+  "extends": [
+    "config:base"
+  ],
+  "postUpdateOptions": [
+    "gomodTidy"
+  ],
+  "commitBody": "Generated by renovateBot",
+  "packageRules": [
+    {
+      "packagePatterns": ["^golang.org/x/"],
+      "schedule": ["on the first day of the month"]
+    }
+  ]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/session.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/session.go
new file mode 100644
index 000000000..95520f782
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/session.go
@@ -0,0 +1,150 @@
+package srtp
+
+import (
+	"io"
+	"net"
+	"sync"
+
+	"github.com/pion/logging"
+	"github.com/pion/transport/packetio"
+)
+
+type streamSession interface {
+	Close() error
+	write([]byte) (int, error)
+	decrypt([]byte) error
+}
+
+type session struct {
+	localContextMutex           sync.Mutex
+	localContext, remoteContext *Context
+	localOptions, remoteOptions []ContextOption
+
+	newStream chan readStream
+
+	started chan interface{}
+	closed  chan interface{}
+
+	readStreamsClosed bool
+	readStreams       map[uint32]readStream
+	readStreamsLock   sync.Mutex
+
+	log           logging.LeveledLogger
+	bufferFactory func(packetType packetio.BufferPacketType, ssrc uint32) io.ReadWriteCloser
+
+	nextConn net.Conn
+}
+
+// Config is used to configure a session.
+// You can provide either a KeyingMaterialExporter to export keys
+// or directly pass the keys themselves.
+// After a Config is passed to a session it must not be modified.
+type Config struct {
+	Keys          SessionKeys
+	Profile       ProtectionProfile
+	BufferFactory func(packetType packetio.BufferPacketType, ssrc uint32) io.ReadWriteCloser
+	LoggerFactory logging.LoggerFactory
+
+	// List of local/remote context options.
+	// ReplayProtection is enabled on remote context by default.
+	// Default replay protection window size is 64.
+	LocalOptions, RemoteOptions []ContextOption
+}
+
+// SessionKeys bundles the keys required to setup an SRTP session
+type SessionKeys struct {
+	LocalMasterKey   []byte
+	LocalMasterSalt  []byte
+	RemoteMasterKey  []byte
+	RemoteMasterSalt []byte
+}
+
+func (s *session) getOrCreateReadStream(ssrc uint32, child streamSession, proto func() readStream) (readStream, bool) {
+	s.readStreamsLock.Lock()
+	defer s.readStreamsLock.Unlock()
+
+	if s.readStreamsClosed {
+		return nil, false
+	}
+
+	r, ok := s.readStreams[ssrc]
+	if ok {
+		return r, false
+	}
+
+	// Create the readStream.
+	r = proto()
+
+	if err := r.init(child, ssrc); err != nil {
+		return nil, false
+	}
+
+	s.readStreams[ssrc] = r
+	return r, true
+}
+
+func (s *session) removeReadStream(ssrc uint32) {
+	s.readStreamsLock.Lock()
+	defer s.readStreamsLock.Unlock()
+
+	if s.readStreamsClosed {
+		return
+	}
+
+	delete(s.readStreams, ssrc)
+}
+
+func (s *session) close() error {
+	if s.nextConn == nil {
+		return nil
+	} else if err := s.nextConn.Close(); err != nil {
+		return err
+	}
+
+	<-s.closed
+	return nil
+}
+
+func (s *session) start(localMasterKey, localMasterSalt, remoteMasterKey, remoteMasterSalt []byte, profile ProtectionProfile, child streamSession) error {
+	var err error
+	s.localContext, err = CreateContext(localMasterKey, localMasterSalt, profile, s.localOptions...)
+	if err != nil {
+		return err
+	}
+
+	s.remoteContext, err = CreateContext(remoteMasterKey, remoteMasterSalt, profile, s.remoteOptions...)
+	if err != nil {
+		return err
+	}
+
+	go func() {
+		defer func() {
+			close(s.newStream)
+
+			s.readStreamsLock.Lock()
+			s.readStreamsClosed = true
+			s.readStreamsLock.Unlock()
+			close(s.closed)
+		}()
+
+		b := make([]byte, 8192)
+		for {
+			var i int
+			i, err = s.nextConn.Read(b)
+			if err != nil {
+				if err != io.EOF {
+					s.log.Error(err.Error())
+				}
+				return
+			}
+
+			if err = child.decrypt(b[:i]); err != nil {
+				s.log.Info(err.Error())
+			}
+		}
+	}()
+
+	close(s.started)
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/session_srtcp.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/session_srtcp.go
new file mode 100644
index 000000000..a5fb656cc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/session_srtcp.go
@@ -0,0 +1,180 @@
+package srtp
+
+import (
+	"net"
+	"time"
+
+	"github.com/pion/logging"
+	"github.com/pion/rtcp"
+)
+
+const defaultSessionSRTCPReplayProtectionWindow = 64
+
+// SessionSRTCP implements io.ReadWriteCloser and provides a bi-directional SRTCP session
+// SRTCP itself does not have a design like this, but it is common in most applications
+// for local/remote to each have their own keying material. This provides those patterns
+// instead of making everyone re-implement
+type SessionSRTCP struct {
+	session
+	writeStream *WriteStreamSRTCP
+}
+
+// NewSessionSRTCP creates a SRTCP session using conn as the underlying transport.
+func NewSessionSRTCP(conn net.Conn, config *Config) (*SessionSRTCP, error) { //nolint:dupl
+	if config == nil {
+		return nil, errNoConfig
+	} else if conn == nil {
+		return nil, errNoConn
+	}
+
+	loggerFactory := config.LoggerFactory
+	if loggerFactory == nil {
+		loggerFactory = logging.NewDefaultLoggerFactory()
+	}
+
+	localOpts := append(
+		[]ContextOption{},
+		config.LocalOptions...,
+	)
+	remoteOpts := append(
+		[]ContextOption{
+			// Default options
+			SRTCPReplayProtection(defaultSessionSRTCPReplayProtectionWindow),
+		},
+		config.RemoteOptions...,
+	)
+
+	s := &SessionSRTCP{
+		session: session{
+			nextConn:      conn,
+			localOptions:  localOpts,
+			remoteOptions: remoteOpts,
+			readStreams:   map[uint32]readStream{},
+			newStream:     make(chan readStream),
+			started:       make(chan interface{}),
+			closed:        make(chan interface{}),
+			bufferFactory: config.BufferFactory,
+			log:           loggerFactory.NewLogger("srtp"),
+		},
+	}
+	s.writeStream = &WriteStreamSRTCP{s}
+
+	err := s.session.start(
+		config.Keys.LocalMasterKey, config.Keys.LocalMasterSalt,
+		config.Keys.RemoteMasterKey, config.Keys.RemoteMasterSalt,
+		config.Profile,
+		s,
+	)
+	if err != nil {
+		return nil, err
+	}
+	return s, nil
+}
+
+// OpenWriteStream returns the global write stream for the Session
+func (s *SessionSRTCP) OpenWriteStream() (*WriteStreamSRTCP, error) {
+	return s.writeStream, nil
+}
+
+// OpenReadStream opens a read stream for the given SSRC, it can be used
+// if you want a certain SSRC, but don't want to wait for AcceptStream
+func (s *SessionSRTCP) OpenReadStream(ssrc uint32) (*ReadStreamSRTCP, error) {
+	r, _ := s.session.getOrCreateReadStream(ssrc, s, newReadStreamSRTCP)
+
+	if readStream, ok := r.(*ReadStreamSRTCP); ok {
+		return readStream, nil
+	}
+	return nil, errFailedTypeAssertion
+}
+
+// AcceptStream returns a stream to handle RTCP for a single SSRC
+func (s *SessionSRTCP) AcceptStream() (*ReadStreamSRTCP, uint32, error) {
+	stream, ok := <-s.newStream
+	if !ok {
+		return nil, 0, errStreamAlreadyClosed
+	}
+
+	readStream, ok := stream.(*ReadStreamSRTCP)
+	if !ok {
+		return nil, 0, errFailedTypeAssertion
+	}
+
+	return readStream, stream.GetSSRC(), nil
+}
+
+// Close ends the session
+func (s *SessionSRTCP) Close() error {
+	return s.session.close()
+}
+
+// Private
+
+func (s *SessionSRTCP) write(buf []byte) (int, error) {
+	if _, ok := <-s.session.started; ok {
+		return 0, errStartedChannelUsedIncorrectly
+	}
+
+	s.session.localContextMutex.Lock()
+	encrypted, err := s.localContext.EncryptRTCP(nil, buf, nil)
+	s.session.localContextMutex.Unlock()
+
+	if err != nil {
+		return 0, err
+	}
+	return s.session.nextConn.Write(encrypted)
+}
+
+func (s *SessionSRTCP) setWriteDeadline(t time.Time) error {
+	return s.session.nextConn.SetWriteDeadline(t)
+}
+
+// create a list of Destination SSRCs
+// that's a superset of all Destinations in the slice.
+func destinationSSRC(pkts []rtcp.Packet) []uint32 {
+	ssrcSet := make(map[uint32]struct{})
+	for _, p := range pkts {
+		for _, ssrc := range p.DestinationSSRC() {
+			ssrcSet[ssrc] = struct{}{}
+		}
+	}
+
+	out := make([]uint32, 0, len(ssrcSet))
+	for ssrc := range ssrcSet {
+		out = append(out, ssrc)
+	}
+
+	return out
+}
+
+func (s *SessionSRTCP) decrypt(buf []byte) error {
+	decrypted, err := s.remoteContext.DecryptRTCP(buf, buf, nil)
+	if err != nil {
+		return err
+	}
+
+	pkt, err := rtcp.Unmarshal(decrypted)
+	if err != nil {
+		return err
+	}
+
+	for _, ssrc := range destinationSSRC(pkt) {
+		r, isNew := s.session.getOrCreateReadStream(ssrc, s, newReadStreamSRTCP)
+		if r == nil {
+			return nil // Session has been closed
+		} else if isNew {
+			s.session.newStream <- r // Notify AcceptStream
+		}
+
+		readStream, ok := r.(*ReadStreamSRTCP)
+		if !ok {
+			return errFailedTypeAssertion
+		}
+
+		_, err = readStream.write(decrypted)
+		if err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/session_srtp.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/session_srtp.go
new file mode 100644
index 000000000..dc815af6b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/session_srtp.go
@@ -0,0 +1,171 @@
+package srtp
+
+import (
+	"net"
+	"time"
+
+	"github.com/pion/logging"
+	"github.com/pion/rtp"
+)
+
+const defaultSessionSRTPReplayProtectionWindow = 64
+
+// SessionSRTP implements io.ReadWriteCloser and provides a bi-directional SRTP session
+// SRTP itself does not have a design like this, but it is common in most applications
+// for local/remote to each have their own keying material. This provides those patterns
+// instead of making everyone re-implement
+type SessionSRTP struct {
+	session
+	writeStream *WriteStreamSRTP
+}
+
+// NewSessionSRTP creates a SRTP session using conn as the underlying transport.
+func NewSessionSRTP(conn net.Conn, config *Config) (*SessionSRTP, error) { //nolint:dupl
+	if config == nil {
+		return nil, errNoConfig
+	} else if conn == nil {
+		return nil, errNoConn
+	}
+
+	loggerFactory := config.LoggerFactory
+	if loggerFactory == nil {
+		loggerFactory = logging.NewDefaultLoggerFactory()
+	}
+
+	localOpts := append(
+		[]ContextOption{},
+		config.LocalOptions...,
+	)
+	remoteOpts := append(
+		[]ContextOption{
+			// Default options
+			SRTPReplayProtection(defaultSessionSRTPReplayProtectionWindow),
+		},
+		config.RemoteOptions...,
+	)
+
+	s := &SessionSRTP{
+		session: session{
+			nextConn:      conn,
+			localOptions:  localOpts,
+			remoteOptions: remoteOpts,
+			readStreams:   map[uint32]readStream{},
+			newStream:     make(chan readStream),
+			started:       make(chan interface{}),
+			closed:        make(chan interface{}),
+			bufferFactory: config.BufferFactory,
+			log:           loggerFactory.NewLogger("srtp"),
+		},
+	}
+	s.writeStream = &WriteStreamSRTP{s}
+
+	err := s.session.start(
+		config.Keys.LocalMasterKey, config.Keys.LocalMasterSalt,
+		config.Keys.RemoteMasterKey, config.Keys.RemoteMasterSalt,
+		config.Profile,
+		s,
+	)
+	if err != nil {
+		return nil, err
+	}
+	return s, nil
+}
+
+// OpenWriteStream returns the global write stream for the Session
+func (s *SessionSRTP) OpenWriteStream() (*WriteStreamSRTP, error) {
+	return s.writeStream, nil
+}
+
+// OpenReadStream opens a read stream for the given SSRC, it can be used
+// if you want a certain SSRC, but don't want to wait for AcceptStream
+func (s *SessionSRTP) OpenReadStream(ssrc uint32) (*ReadStreamSRTP, error) {
+	r, _ := s.session.getOrCreateReadStream(ssrc, s, newReadStreamSRTP)
+
+	if readStream, ok := r.(*ReadStreamSRTP); ok {
+		return readStream, nil
+	}
+
+	return nil, errFailedTypeAssertion
+}
+
+// AcceptStream returns a stream to handle RTCP for a single SSRC
+func (s *SessionSRTP) AcceptStream() (*ReadStreamSRTP, uint32, error) {
+	stream, ok := <-s.newStream
+	if !ok {
+		return nil, 0, errStreamAlreadyClosed
+	}
+
+	readStream, ok := stream.(*ReadStreamSRTP)
+	if !ok {
+		return nil, 0, errFailedTypeAssertion
+	}
+
+	return readStream, stream.GetSSRC(), nil
+}
+
+// Close ends the session
+func (s *SessionSRTP) Close() error {
+	return s.session.close()
+}
+
+func (s *SessionSRTP) write(b []byte) (int, error) {
+	packet := &rtp.Packet{}
+
+	err := packet.Unmarshal(b)
+	if err != nil {
+		return 0, nil
+	}
+
+	return s.writeRTP(&packet.Header, packet.Payload)
+}
+
+func (s *SessionSRTP) writeRTP(header *rtp.Header, payload []byte) (int, error) {
+	if _, ok := <-s.session.started; ok {
+		return 0, errStartedChannelUsedIncorrectly
+	}
+
+	s.session.localContextMutex.Lock()
+	encrypted, err := s.localContext.encryptRTP(nil, header, payload)
+	s.session.localContextMutex.Unlock()
+
+	if err != nil {
+		return 0, err
+	}
+
+	return s.session.nextConn.Write(encrypted)
+}
+
+func (s *SessionSRTP) setWriteDeadline(t time.Time) error {
+	return s.session.nextConn.SetWriteDeadline(t)
+}
+
+func (s *SessionSRTP) decrypt(buf []byte) error {
+	h := &rtp.Header{}
+	if err := h.Unmarshal(buf); err != nil {
+		return err
+	}
+
+	r, isNew := s.session.getOrCreateReadStream(h.SSRC, s, newReadStreamSRTP)
+	if r == nil {
+		return nil // Session has been closed
+	} else if isNew {
+		s.session.newStream <- r // Notify AcceptStream
+	}
+
+	readStream, ok := r.(*ReadStreamSRTP)
+	if !ok {
+		return errFailedTypeAssertion
+	}
+
+	decrypted, err := s.remoteContext.decryptRTP(buf, buf, h)
+	if err != nil {
+		return err
+	}
+
+	_, err = readStream.write(decrypted)
+	if err != nil {
+		return err
+	}
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtcp.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtcp.go
new file mode 100644
index 000000000..dbf512549
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtcp.go
@@ -0,0 +1,77 @@
+package srtp
+
+import (
+	"encoding/binary"
+	"fmt"
+
+	"github.com/pion/rtcp"
+)
+
+const maxSRTCPIndex = 0x7FFFFFFF
+
+func (c *Context) decryptRTCP(dst, encrypted []byte) ([]byte, error) {
+	out := allocateIfMismatch(dst, encrypted)
+	tailOffset := len(encrypted) - (c.cipher.authTagLen() + srtcpIndexSize)
+
+	if tailOffset < 0 {
+		return nil, fmt.Errorf("%w: %d", errTooShortRTCP, len(encrypted))
+	} else if isEncrypted := encrypted[tailOffset] >> 7; isEncrypted == 0 {
+		return out, nil
+	}
+
+	index := c.cipher.getRTCPIndex(encrypted)
+	ssrc := binary.BigEndian.Uint32(encrypted[4:])
+
+	s := c.getSRTCPSSRCState(ssrc)
+	markAsValid, ok := s.replayDetector.Check(uint64(index))
+	if !ok {
+		return nil, &errorDuplicated{Proto: "srtcp", SSRC: ssrc, Index: index}
+	}
+
+	out, err := c.cipher.decryptRTCP(out, encrypted, index, ssrc)
+	if err != nil {
+		return nil, err
+	}
+
+	markAsValid()
+	return out, nil
+}
+
+// DecryptRTCP decrypts a buffer that contains a RTCP packet
+func (c *Context) DecryptRTCP(dst, encrypted []byte, header *rtcp.Header) ([]byte, error) {
+	if header == nil {
+		header = &rtcp.Header{}
+	}
+
+	if err := header.Unmarshal(encrypted); err != nil {
+		return nil, err
+	}
+
+	return c.decryptRTCP(dst, encrypted)
+}
+
+func (c *Context) encryptRTCP(dst, decrypted []byte) ([]byte, error) {
+	ssrc := binary.BigEndian.Uint32(decrypted[4:])
+	s := c.getSRTCPSSRCState(ssrc)
+
+	// We roll over early because MSB is used for marking as encrypted
+	s.srtcpIndex++
+	if s.srtcpIndex > maxSRTCPIndex {
+		s.srtcpIndex = 0
+	}
+
+	return c.cipher.encryptRTCP(dst, decrypted, s.srtcpIndex, ssrc)
+}
+
+// EncryptRTCP Encrypts a RTCP packet
+func (c *Context) EncryptRTCP(dst, decrypted []byte, header *rtcp.Header) ([]byte, error) {
+	if header == nil {
+		header = &rtcp.Header{}
+	}
+
+	if err := header.Unmarshal(decrypted); err != nil {
+		return nil, err
+	}
+
+	return c.encryptRTCP(dst, decrypted)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtp.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtp.go
new file mode 100644
index 000000000..c4ed3ace0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtp.go
@@ -0,0 +1,68 @@
+// Package srtp implements Secure Real-time Transport Protocol
+package srtp
+
+import (
+	"github.com/pion/rtp"
+)
+
+func (c *Context) decryptRTP(dst, ciphertext []byte, header *rtp.Header) ([]byte, error) {
+	s := c.getSRTPSSRCState(header.SSRC)
+
+	markAsValid, ok := s.replayDetector.Check(uint64(header.SequenceNumber))
+	if !ok {
+		return nil, &errorDuplicated{
+			Proto: "srtp", SSRC: header.SSRC, Index: uint32(header.SequenceNumber),
+		}
+	}
+
+	dst = growBufferSize(dst, len(ciphertext)-c.cipher.authTagLen())
+	roc, updateROC := s.nextRolloverCount(header.SequenceNumber)
+
+	dst, err := c.cipher.decryptRTP(dst, ciphertext, header, roc)
+	if err != nil {
+		return nil, err
+	}
+
+	markAsValid()
+	updateROC()
+	return dst, nil
+}
+
+// DecryptRTP decrypts a RTP packet with an encrypted payload
+func (c *Context) DecryptRTP(dst, encrypted []byte, header *rtp.Header) ([]byte, error) {
+	if header == nil {
+		header = &rtp.Header{}
+	}
+
+	if err := header.Unmarshal(encrypted); err != nil {
+		return nil, err
+	}
+
+	return c.decryptRTP(dst, encrypted, header)
+}
+
+// EncryptRTP marshals and encrypts an RTP packet, writing to the dst buffer provided.
+// If the dst buffer does not have the capacity to hold `len(plaintext) + 10` bytes, a new one will be allocated and returned.
+// If a rtp.Header is provided, it will be Unmarshaled using the plaintext.
+func (c *Context) EncryptRTP(dst []byte, plaintext []byte, header *rtp.Header) ([]byte, error) {
+	if header == nil {
+		header = &rtp.Header{}
+	}
+
+	if err := header.Unmarshal(plaintext); err != nil {
+		return nil, err
+	}
+
+	return c.encryptRTP(dst, header, plaintext[header.PayloadOffset:])
+}
+
+// encryptRTP marshals and encrypts an RTP packet, writing to the dst buffer provided.
+// If the dst buffer does not have the capacity, a new one will be allocated and returned.
+// Similar to above but faster because it can avoid unmarshaling the header and marshaling the payload.
+func (c *Context) encryptRTP(dst []byte, header *rtp.Header, payload []byte) (ciphertext []byte, err error) {
+	s := c.getSRTPSSRCState(header.SSRC)
+	roc, updateROC := s.nextRolloverCount(header.SequenceNumber)
+	updateROC()
+
+	return c.cipher.encryptRTP(dst, header, payload, roc)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtp_cipher.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtp_cipher.go
new file mode 100644
index 000000000..6c1fda04a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtp_cipher.go
@@ -0,0 +1,16 @@
+package srtp
+
+import "github.com/pion/rtp"
+
+// cipher represents a implementation of one
+// of the SRTP Specific ciphers
+type srtpCipher interface {
+	authTagLen() int
+	getRTCPIndex([]byte) uint32
+
+	encryptRTP([]byte, *rtp.Header, []byte, uint32) ([]byte, error)
+	encryptRTCP([]byte, []byte, uint32, uint32) ([]byte, error)
+
+	decryptRTP([]byte, []byte, *rtp.Header, uint32) ([]byte, error)
+	decryptRTCP([]byte, []byte, uint32, uint32) ([]byte, error)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtp_cipher_aead_aes_gcm.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtp_cipher_aead_aes_gcm.go
new file mode 100644
index 000000000..58e1b8f62
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtp_cipher_aead_aes_gcm.go
@@ -0,0 +1,172 @@
+package srtp
+
+import (
+	"crypto/aes"
+	"crypto/cipher"
+	"encoding/binary"
+
+	"github.com/pion/rtp"
+)
+
+const (
+	rtcpEncryptionFlag = 0x80
+)
+
+type srtpCipherAeadAesGcm struct {
+	srtpCipher, srtcpCipher cipher.AEAD
+
+	srtpSessionSalt, srtcpSessionSalt []byte
+}
+
+func newSrtpCipherAeadAesGcm(masterKey, masterSalt []byte) (*srtpCipherAeadAesGcm, error) {
+	s := &srtpCipherAeadAesGcm{}
+
+	srtpSessionKey, err := aesCmKeyDerivation(labelSRTPEncryption, masterKey, masterSalt, 0, len(masterKey))
+	if err != nil {
+		return nil, err
+	}
+
+	srtpBlock, err := aes.NewCipher(srtpSessionKey)
+	if err != nil {
+		return nil, err
+	}
+
+	s.srtpCipher, err = cipher.NewGCM(srtpBlock)
+	if err != nil {
+		return nil, err
+	}
+
+	srtcpSessionKey, err := aesCmKeyDerivation(labelSRTCPEncryption, masterKey, masterSalt, 0, len(masterKey))
+	if err != nil {
+		return nil, err
+	}
+
+	srtcpBlock, err := aes.NewCipher(srtcpSessionKey)
+	if err != nil {
+		return nil, err
+	}
+
+	s.srtcpCipher, err = cipher.NewGCM(srtcpBlock)
+	if err != nil {
+		return nil, err
+	}
+
+	if s.srtpSessionSalt, err = aesCmKeyDerivation(labelSRTPSalt, masterKey, masterSalt, 0, len(masterSalt)); err != nil {
+		return nil, err
+	} else if s.srtcpSessionSalt, err = aesCmKeyDerivation(labelSRTCPSalt, masterKey, masterSalt, 0, len(masterSalt)); err != nil {
+		return nil, err
+	}
+
+	return s, nil
+}
+
+func (s *srtpCipherAeadAesGcm) authTagLen() int {
+	return 16
+}
+
+func (s *srtpCipherAeadAesGcm) encryptRTP(dst []byte, header *rtp.Header, payload []byte, roc uint32) (ciphertext []byte, err error) {
+	hdr, err := header.Marshal()
+	if err != nil {
+		return nil, err
+	}
+
+	iv := s.rtpInitializationVector(header, roc)
+	out := s.srtpCipher.Seal(nil, iv, payload, hdr)
+	return append(hdr, out...), nil
+}
+
+func (s *srtpCipherAeadAesGcm) decryptRTP(dst, ciphertext []byte, header *rtp.Header, roc uint32) ([]byte, error) {
+	iv := s.rtpInitializationVector(header, roc)
+
+	out, err := s.srtpCipher.Open(nil, iv, ciphertext[header.PayloadOffset:], ciphertext[:header.PayloadOffset])
+	if err != nil {
+		return nil, err
+	}
+
+	out = append(make([]byte, header.PayloadOffset), out...)
+	copy(out, ciphertext[:header.PayloadOffset])
+
+	return out, nil
+}
+
+func (s *srtpCipherAeadAesGcm) encryptRTCP(dst, decrypted []byte, srtcpIndex uint32, ssrc uint32) ([]byte, error) {
+	iv := s.rtcpInitializationVector(srtcpIndex, ssrc)
+	aad := s.rtcpAdditionalAuthenticatedData(decrypted, srtcpIndex)
+
+	out := s.srtcpCipher.Seal(nil, iv, decrypted[8:], aad)
+
+	out = append(make([]byte, 8), out...)
+	copy(out, decrypted[:8])
+	out = append(out, aad[8:]...)
+
+	return out, nil
+}
+
+func (s *srtpCipherAeadAesGcm) decryptRTCP(out, encrypted []byte, srtcpIndex, ssrc uint32) ([]byte, error) {
+	iv := s.rtcpInitializationVector(srtcpIndex, ssrc)
+	aad := s.rtcpAdditionalAuthenticatedData(encrypted, srtcpIndex)
+
+	decrypted, err := s.srtcpCipher.Open(nil, iv, encrypted[8:len(encrypted)-srtcpIndexSize], aad)
+	if err != nil {
+		return nil, err
+	}
+
+	decrypted = append(encrypted[:8], decrypted...)
+	return decrypted, nil
+}
+
+// The 12-octet IV used by AES-GCM SRTP is formed by first concatenating
+// 2 octets of zeroes, the 4-octet SSRC, the 4-octet rollover counter
+// (ROC), and the 2-octet sequence number (SEQ).  The resulting 12-octet
+// value is then XORed to the 12-octet salt to form the 12-octet IV.
+//
+// https://tools.ietf.org/html/rfc7714#section-8.1
+func (s *srtpCipherAeadAesGcm) rtpInitializationVector(header *rtp.Header, roc uint32) []byte {
+	iv := make([]byte, 12)
+	binary.BigEndian.PutUint32(iv[2:], header.SSRC)
+	binary.BigEndian.PutUint32(iv[6:], roc)
+	binary.BigEndian.PutUint16(iv[10:], header.SequenceNumber)
+
+	for i := range iv {
+		iv[i] ^= s.srtpSessionSalt[i]
+	}
+	return iv
+}
+
+// The 12-octet IV used by AES-GCM SRTCP is formed by first
+// concatenating 2 octets of zeroes, the 4-octet SSRC identifier,
+// 2 octets of zeroes, a single "0" bit, and the 31-bit SRTCP index.
+// The resulting 12-octet value is then XORed to the 12-octet salt to
+// form the 12-octet IV.
+//
+// https://tools.ietf.org/html/rfc7714#section-9.1
+func (s *srtpCipherAeadAesGcm) rtcpInitializationVector(srtcpIndex uint32, ssrc uint32) []byte {
+	iv := make([]byte, 12)
+
+	binary.BigEndian.PutUint32(iv[2:], ssrc)
+	binary.BigEndian.PutUint32(iv[8:], srtcpIndex)
+
+	for i := range iv {
+		iv[i] ^= s.srtcpSessionSalt[i]
+	}
+	return iv
+}
+
+// In an SRTCP packet, a 1-bit Encryption flag is prepended to the
+// 31-bit SRTCP index to form a 32-bit value we shall call the
+// "ESRTCP word"
+//
+// https://tools.ietf.org/html/rfc7714#section-17
+func (s *srtpCipherAeadAesGcm) rtcpAdditionalAuthenticatedData(rtcpPacket []byte, srtcpIndex uint32) []byte {
+	aad := make([]byte, 12)
+
+	copy(aad, rtcpPacket[:8])
+	binary.BigEndian.PutUint32(aad[8:], srtcpIndex)
+	aad[8] |= rtcpEncryptionFlag
+
+	return aad
+}
+
+func (s *srtpCipherAeadAesGcm) getRTCPIndex(in []byte) uint32 {
+	return binary.BigEndian.Uint32(in[len(in)-4:]) &^ (rtcpEncryptionFlag << 24)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtp_cipher_aes_cm_hmac_sha1.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtp_cipher_aes_cm_hmac_sha1.go
new file mode 100644
index 000000000..ea1dae094
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/srtp_cipher_aes_cm_hmac_sha1.go
@@ -0,0 +1,224 @@
+package srtp
+
+import ( //nolint:gci
+	"crypto/aes"
+	"crypto/cipher"
+	"crypto/hmac"
+	"crypto/sha1" //nolint:gosec
+	"crypto/subtle"
+	"encoding/binary"
+	"hash"
+
+	"github.com/pion/rtp"
+)
+
+type srtpCipherAesCmHmacSha1 struct {
+	srtpSessionSalt []byte
+	srtpSessionAuth hash.Hash
+	srtpBlock       cipher.Block
+
+	srtcpSessionSalt []byte
+	srtcpSessionAuth hash.Hash
+	srtcpBlock       cipher.Block
+}
+
+func newSrtpCipherAesCmHmacSha1(masterKey, masterSalt []byte) (*srtpCipherAesCmHmacSha1, error) {
+	s := &srtpCipherAesCmHmacSha1{}
+	srtpSessionKey, err := aesCmKeyDerivation(labelSRTPEncryption, masterKey, masterSalt, 0, len(masterKey))
+	if err != nil {
+		return nil, err
+	} else if s.srtpBlock, err = aes.NewCipher(srtpSessionKey); err != nil {
+		return nil, err
+	}
+
+	srtcpSessionKey, err := aesCmKeyDerivation(labelSRTCPEncryption, masterKey, masterSalt, 0, len(masterKey))
+	if err != nil {
+		return nil, err
+	} else if s.srtcpBlock, err = aes.NewCipher(srtcpSessionKey); err != nil {
+		return nil, err
+	}
+
+	if s.srtpSessionSalt, err = aesCmKeyDerivation(labelSRTPSalt, masterKey, masterSalt, 0, len(masterSalt)); err != nil {
+		return nil, err
+	} else if s.srtcpSessionSalt, err = aesCmKeyDerivation(labelSRTCPSalt, masterKey, masterSalt, 0, len(masterSalt)); err != nil {
+		return nil, err
+	}
+
+	authKeyLen, err := ProtectionProfileAes128CmHmacSha1_80.authKeyLen()
+	if err != nil {
+		return nil, err
+	}
+
+	srtpSessionAuthTag, err := aesCmKeyDerivation(labelSRTPAuthenticationTag, masterKey, masterSalt, 0, authKeyLen)
+	if err != nil {
+		return nil, err
+	}
+
+	srtcpSessionAuthTag, err := aesCmKeyDerivation(labelSRTCPAuthenticationTag, masterKey, masterSalt, 0, authKeyLen)
+	if err != nil {
+		return nil, err
+	}
+
+	s.srtcpSessionAuth = hmac.New(sha1.New, srtcpSessionAuthTag)
+	s.srtpSessionAuth = hmac.New(sha1.New, srtpSessionAuthTag)
+	return s, nil
+}
+
+func (s *srtpCipherAesCmHmacSha1) authTagLen() int {
+	return 10
+}
+
+func (s *srtpCipherAesCmHmacSha1) encryptRTP(dst []byte, header *rtp.Header, payload []byte, roc uint32) (ciphertext []byte, err error) {
+	// Grow the given buffer to fit the output.
+	dst = growBufferSize(dst, header.MarshalSize()+len(payload)+s.authTagLen())
+
+	// Copy the header unencrypted.
+	n, err := header.MarshalTo(dst)
+	if err != nil {
+		return nil, err
+	}
+
+	// Encrypt the payload
+	counter := generateCounter(header.SequenceNumber, roc, header.SSRC, s.srtpSessionSalt)
+	stream := cipher.NewCTR(s.srtpBlock, counter)
+	stream.XORKeyStream(dst[n:], payload)
+	n += len(payload)
+
+	// Generate the auth tag.
+	authTag, err := s.generateSrtpAuthTag(dst[:n], roc)
+	if err != nil {
+		return nil, err
+	}
+
+	// Write the auth tag to the dest.
+	copy(dst[n:], authTag)
+
+	return dst, nil
+}
+
+func (s *srtpCipherAesCmHmacSha1) decryptRTP(dst, ciphertext []byte, header *rtp.Header, roc uint32) ([]byte, error) {
+	// Split the auth tag and the cipher text into two parts.
+	actualTag := ciphertext[len(ciphertext)-s.authTagLen():]
+	ciphertext = ciphertext[:len(ciphertext)-s.authTagLen()]
+
+	// Generate the auth tag we expect to see from the ciphertext.
+	expectedTag, err := s.generateSrtpAuthTag(ciphertext, roc)
+	if err != nil {
+		return nil, err
+	}
+
+	// See if the auth tag actually matches.
+	// We use a constant time comparison to prevent timing attacks.
+	if subtle.ConstantTimeCompare(actualTag, expectedTag) != 1 {
+		return nil, errFailedToVerifyAuthTag
+	}
+
+	// Write the plaintext header to the destination buffer.
+	copy(dst, ciphertext[:header.PayloadOffset])
+
+	// Decrypt the ciphertext for the payload.
+	counter := generateCounter(header.SequenceNumber, roc, header.SSRC, s.srtpSessionSalt)
+	stream := cipher.NewCTR(s.srtpBlock, counter)
+	stream.XORKeyStream(dst[header.PayloadOffset:], ciphertext[header.PayloadOffset:])
+	return dst, nil
+}
+
+func (s *srtpCipherAesCmHmacSha1) encryptRTCP(dst, decrypted []byte, srtcpIndex uint32, ssrc uint32) ([]byte, error) {
+	dst = allocateIfMismatch(dst, decrypted)
+
+	// Encrypt everything after header
+	stream := cipher.NewCTR(s.srtcpBlock, generateCounter(uint16(srtcpIndex&0xffff), srtcpIndex>>16, ssrc, s.srtcpSessionSalt))
+	stream.XORKeyStream(dst[8:], dst[8:])
+
+	// Add SRTCP Index and set Encryption bit
+	dst = append(dst, make([]byte, 4)...)
+	binary.BigEndian.PutUint32(dst[len(dst)-4:], srtcpIndex)
+	dst[len(dst)-4] |= 0x80
+
+	authTag, err := s.generateSrtcpAuthTag(dst)
+	if err != nil {
+		return nil, err
+	}
+	return append(dst, authTag...), nil
+}
+
+func (s *srtpCipherAesCmHmacSha1) decryptRTCP(out, encrypted []byte, index, ssrc uint32) ([]byte, error) {
+	tailOffset := len(encrypted) - (s.authTagLen() + srtcpIndexSize)
+	out = out[0:tailOffset]
+
+	expectedTag, err := s.generateSrtcpAuthTag(encrypted[:len(encrypted)-s.authTagLen()])
+	if err != nil {
+		return nil, err
+	}
+
+	actualTag := encrypted[len(encrypted)-s.authTagLen():]
+	if subtle.ConstantTimeCompare(actualTag, expectedTag) != 1 {
+		return nil, errFailedToVerifyAuthTag
+	}
+
+	stream := cipher.NewCTR(s.srtcpBlock, generateCounter(uint16(index&0xffff), index>>16, ssrc, s.srtcpSessionSalt))
+	stream.XORKeyStream(out[8:], out[8:])
+
+	return out, nil
+}
+
+func (s *srtpCipherAesCmHmacSha1) generateSrtpAuthTag(buf []byte, roc uint32) ([]byte, error) {
+	// https://tools.ietf.org/html/rfc3711#section-4.2
+	// In the case of SRTP, M SHALL consist of the Authenticated
+	// Portion of the packet (as specified in Figure 1) concatenated with
+	// the ROC, M = Authenticated Portion || ROC;
+	//
+	// The pre-defined authentication transform for SRTP is HMAC-SHA1
+	// [RFC2104].  With HMAC-SHA1, the SRTP_PREFIX_LENGTH (Figure 3) SHALL
+	// be 0.  For SRTP (respectively SRTCP), the HMAC SHALL be applied to
+	// the session authentication key and M as specified above, i.e.,
+	// HMAC(k_a, M).  The HMAC output SHALL then be truncated to the n_tag
+	// left-most bits.
+	// - Authenticated portion of the packet is everything BEFORE MKI
+	// - k_a is the session message authentication key
+	// - n_tag is the bit-length of the output authentication tag
+	s.srtpSessionAuth.Reset()
+
+	if _, err := s.srtpSessionAuth.Write(buf); err != nil {
+		return nil, err
+	}
+
+	// For SRTP only, we need to hash the rollover counter as well.
+	rocRaw := [4]byte{}
+	binary.BigEndian.PutUint32(rocRaw[:], roc)
+
+	_, err := s.srtpSessionAuth.Write(rocRaw[:])
+	if err != nil {
+		return nil, err
+	}
+
+	// Truncate the hash to the first 10 bytes.
+	return s.srtpSessionAuth.Sum(nil)[0:s.authTagLen()], nil
+}
+
+func (s *srtpCipherAesCmHmacSha1) generateSrtcpAuthTag(buf []byte) ([]byte, error) {
+	// https://tools.ietf.org/html/rfc3711#section-4.2
+	//
+	// The pre-defined authentication transform for SRTP is HMAC-SHA1
+	// [RFC2104].  With HMAC-SHA1, the SRTP_PREFIX_LENGTH (Figure 3) SHALL
+	// be 0.  For SRTP (respectively SRTCP), the HMAC SHALL be applied to
+	// the session authentication key and M as specified above, i.e.,
+	// HMAC(k_a, M).  The HMAC output SHALL then be truncated to the n_tag
+	// left-most bits.
+	// - Authenticated portion of the packet is everything BEFORE MKI
+	// - k_a is the session message authentication key
+	// - n_tag is the bit-length of the output authentication tag
+	s.srtcpSessionAuth.Reset()
+
+	if _, err := s.srtcpSessionAuth.Write(buf); err != nil {
+		return nil, err
+	}
+
+	return s.srtcpSessionAuth.Sum(nil)[0:s.authTagLen()], nil
+}
+
+func (s *srtpCipherAesCmHmacSha1) getRTCPIndex(in []byte) uint32 {
+	tailOffset := len(in) - (s.authTagLen() + srtcpIndexSize)
+	srtcpIndexBuffer := in[tailOffset : tailOffset+srtcpIndexSize]
+	return binary.BigEndian.Uint32(srtcpIndexBuffer) &^ (1 << 31)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/stream.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/stream.go
new file mode 100644
index 000000000..7b7a0cf9a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/stream.go
@@ -0,0 +1,8 @@
+package srtp
+
+type readStream interface {
+	init(child streamSession, ssrc uint32) error
+
+	Read(buf []byte) (int, error)
+	GetSSRC() uint32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/stream_srtcp.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/stream_srtcp.go
new file mode 100644
index 000000000..bc6cf944d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/stream_srtcp.go
@@ -0,0 +1,152 @@
+package srtp
+
+import (
+	"errors"
+	"io"
+	"sync"
+	"time"
+
+	"github.com/pion/rtcp"
+	"github.com/pion/transport/packetio"
+)
+
+// Limit the buffer size to 100KB
+const srtcpBufferSize = 100 * 1000
+
+// ReadStreamSRTCP handles decryption for a single RTCP SSRC
+type ReadStreamSRTCP struct {
+	mu sync.Mutex
+
+	isInited bool
+	isClosed chan bool
+
+	session *SessionSRTCP
+	ssrc    uint32
+
+	buffer io.ReadWriteCloser
+}
+
+func (r *ReadStreamSRTCP) write(buf []byte) (n int, err error) {
+	n, err = r.buffer.Write(buf)
+
+	if errors.Is(err, packetio.ErrFull) {
+		// Silently drop data when the buffer is full.
+		return len(buf), nil
+	}
+
+	return n, err
+}
+
+// Used by getOrCreateReadStream
+func newReadStreamSRTCP() readStream {
+	return &ReadStreamSRTCP{}
+}
+
+// ReadRTCP reads and decrypts full RTCP packet and its header from the nextConn
+func (r *ReadStreamSRTCP) ReadRTCP(buf []byte) (int, *rtcp.Header, error) {
+	n, err := r.Read(buf)
+	if err != nil {
+		return 0, nil, err
+	}
+
+	header := &rtcp.Header{}
+	err = header.Unmarshal(buf[:n])
+	if err != nil {
+		return 0, nil, err
+	}
+
+	return n, header, nil
+}
+
+// Read reads and decrypts full RTCP packet from the nextConn
+func (r *ReadStreamSRTCP) Read(buf []byte) (int, error) {
+	return r.buffer.Read(buf)
+}
+
+// SetReadDeadline sets the deadline for the Read operation.
+// Setting to zero means no deadline.
+func (r *ReadStreamSRTCP) SetReadDeadline(t time.Time) error {
+	return r.buffer.(*packetio.Buffer).SetReadDeadline(t)
+}
+
+// Close removes the ReadStream from the session and cleans up any associated state
+func (r *ReadStreamSRTCP) Close() error {
+	r.mu.Lock()
+	defer r.mu.Unlock()
+
+	if !r.isInited {
+		return errStreamNotInited
+	}
+
+	select {
+	case <-r.isClosed:
+		return errStreamAlreadyClosed
+	default:
+		err := r.buffer.Close()
+		if err != nil {
+			return err
+		}
+
+		r.session.removeReadStream(r.ssrc)
+		return nil
+	}
+}
+
+func (r *ReadStreamSRTCP) init(child streamSession, ssrc uint32) error {
+	sessionSRTCP, ok := child.(*SessionSRTCP)
+
+	r.mu.Lock()
+	defer r.mu.Unlock()
+	if !ok {
+		return errFailedTypeAssertion
+	} else if r.isInited {
+		return errStreamAlreadyInited
+	}
+
+	r.session = sessionSRTCP
+	r.ssrc = ssrc
+	r.isInited = true
+	r.isClosed = make(chan bool)
+
+	if r.session.bufferFactory != nil {
+		r.buffer = r.session.bufferFactory(packetio.RTCPBufferPacket, ssrc)
+	} else {
+		// Create a buffer and limit it to 100KB
+		buff := packetio.NewBuffer()
+		buff.SetLimitSize(srtcpBufferSize)
+		r.buffer = buff
+	}
+
+	return nil
+}
+
+// GetSSRC returns the SSRC we are demuxing for
+func (r *ReadStreamSRTCP) GetSSRC() uint32 {
+	return r.ssrc
+}
+
+// WriteStreamSRTCP is stream for a single Session that is used to encrypt RTCP
+type WriteStreamSRTCP struct {
+	session *SessionSRTCP
+}
+
+// WriteRTCP encrypts a RTCP header and its payload to the nextConn
+func (w *WriteStreamSRTCP) WriteRTCP(header *rtcp.Header, payload []byte) (int, error) {
+	headerRaw, err := header.Marshal()
+	if err != nil {
+		return 0, err
+	}
+
+	return w.session.write(append(headerRaw, payload...))
+}
+
+// Write encrypts and writes a full RTCP packets to the nextConn
+func (w *WriteStreamSRTCP) Write(b []byte) (int, error) {
+	return w.session.write(b)
+}
+
+// SetWriteDeadline sets the deadline for the Write operation.
+// Setting to zero means no deadline.
+func (w *WriteStreamSRTCP) SetWriteDeadline(t time.Time) error {
+	return w.session.setWriteDeadline(t)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/stream_srtp.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/stream_srtp.go
new file mode 100644
index 000000000..b5b2f6c10
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/stream_srtp.go
@@ -0,0 +1,149 @@
+package srtp
+
+import (
+	"errors"
+	"io"
+	"sync"
+	"time"
+
+	"github.com/pion/rtp"
+	"github.com/pion/transport/packetio"
+)
+
+// Limit the buffer size to 1MB
+const srtpBufferSize = 1000 * 1000
+
+// ReadStreamSRTP handles decryption for a single RTP SSRC
+type ReadStreamSRTP struct {
+	mu sync.Mutex
+
+	isInited bool
+	isClosed chan bool
+
+	session *SessionSRTP
+	ssrc    uint32
+
+	buffer io.ReadWriteCloser
+}
+
+// Used by getOrCreateReadStream
+func newReadStreamSRTP() readStream {
+	return &ReadStreamSRTP{}
+}
+
+func (r *ReadStreamSRTP) init(child streamSession, ssrc uint32) error {
+	sessionSRTP, ok := child.(*SessionSRTP)
+
+	r.mu.Lock()
+	defer r.mu.Unlock()
+
+	if !ok {
+		return errFailedTypeAssertion
+	} else if r.isInited {
+		return errStreamAlreadyInited
+	}
+
+	r.session = sessionSRTP
+	r.ssrc = ssrc
+	r.isInited = true
+	r.isClosed = make(chan bool)
+
+	// Create a buffer with a 1MB limit
+	if r.session.bufferFactory != nil {
+		r.buffer = r.session.bufferFactory(packetio.RTPBufferPacket, ssrc)
+	} else {
+		buff := packetio.NewBuffer()
+		buff.SetLimitSize(srtpBufferSize)
+		r.buffer = buff
+	}
+
+	return nil
+}
+
+func (r *ReadStreamSRTP) write(buf []byte) (n int, err error) {
+	n, err = r.buffer.Write(buf)
+
+	if errors.Is(err, packetio.ErrFull) {
+		// Silently drop data when the buffer is full.
+		return len(buf), nil
+	}
+
+	return n, err
+}
+
+// Read reads and decrypts full RTP packet from the nextConn
+func (r *ReadStreamSRTP) Read(buf []byte) (int, error) {
+	return r.buffer.Read(buf)
+}
+
+// ReadRTP reads and decrypts full RTP packet and its header from the nextConn
+func (r *ReadStreamSRTP) ReadRTP(buf []byte) (int, *rtp.Header, error) {
+	n, err := r.Read(buf)
+	if err != nil {
+		return 0, nil, err
+	}
+
+	header := &rtp.Header{}
+
+	err = header.Unmarshal(buf[:n])
+	if err != nil {
+		return 0, nil, err
+	}
+
+	return n, header, nil
+}
+
+// SetReadDeadline sets the deadline for the Read operation.
+// Setting to zero means no deadline.
+func (r *ReadStreamSRTP) SetReadDeadline(t time.Time) error {
+	return r.buffer.(*packetio.Buffer).SetReadDeadline(t)
+}
+
+// Close removes the ReadStream from the session and cleans up any associated state
+func (r *ReadStreamSRTP) Close() error {
+	r.mu.Lock()
+	defer r.mu.Unlock()
+
+	if !r.isInited {
+		return errStreamNotInited
+	}
+
+	select {
+	case <-r.isClosed:
+		return errStreamAlreadyClosed
+	default:
+		err := r.buffer.Close()
+		if err != nil {
+			return err
+		}
+
+		r.session.removeReadStream(r.ssrc)
+		return nil
+	}
+}
+
+// GetSSRC returns the SSRC we are demuxing for
+func (r *ReadStreamSRTP) GetSSRC() uint32 {
+	return r.ssrc
+}
+
+// WriteStreamSRTP is stream for a single Session that is used to encrypt RTP
+type WriteStreamSRTP struct {
+	session *SessionSRTP
+}
+
+// WriteRTP encrypts a RTP packet and writes to the connection
+func (w *WriteStreamSRTP) WriteRTP(header *rtp.Header, payload []byte) (int, error) {
+	return w.session.writeRTP(header, payload)
+}
+
+// Write encrypts and writes a full RTP packets to the nextConn
+func (w *WriteStreamSRTP) Write(b []byte) (int, error) {
+	return w.session.write(b)
+}
+
+// SetWriteDeadline sets the deadline for the Write operation.
+// Setting to zero means no deadline.
+func (w *WriteStreamSRTP) SetWriteDeadline(t time.Time) error {
+	return w.session.setWriteDeadline(t)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/util.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/util.go
new file mode 100644
index 000000000..1ae34a62a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/srtp/v2/util.go
@@ -0,0 +1,33 @@
+package srtp
+
+import "bytes"
+
+// Grow the buffer size to the given number of bytes.
+func growBufferSize(buf []byte, size int) []byte {
+	if size <= cap(buf) {
+		return buf[:size]
+	}
+
+	buf2 := make([]byte, size)
+	copy(buf2, buf)
+	return buf2
+}
+
+// Check if buffers match, if not allocate a new buffer and return it
+func allocateIfMismatch(dst, src []byte) []byte {
+	if dst == nil {
+		dst = make([]byte, len(src))
+		copy(dst, src)
+	} else if !bytes.Equal(dst, src) { // bytes.Equal returns on ref equality, no optimization needed
+		extraNeeded := len(src) - len(dst)
+		if extraNeeded > 0 {
+			dst = append(dst, make([]byte, extraNeeded)...)
+		} else if extraNeeded < 0 {
+			dst = dst[:len(dst)+extraNeeded]
+		}
+
+		copy(dst, src)
+	}
+
+	return dst
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.codecov.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.codecov.yml
new file mode 100644
index 000000000..7fa67fec8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.codecov.yml
@@ -0,0 +1,9 @@
+coverage:
+  status:
+    patch: off
+    project:
+      default:
+        # basic
+        target: 98
+        threshold: null
+        base: auto
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.gitignore b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.gitignore
new file mode 100644
index 000000000..b9420d943
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.gitignore
@@ -0,0 +1,17 @@
+*-fuzz.zip
+.idea
+benchmark.*.write
+*.test
+*.out
+*.sw[poe]
+bench.go-*
+PACKAGES
+cmd/stun-cli/stun-cli
+cmd/stun-decode/stun-decode
+cmd/stun-bench/stun-bench
+cmd/stun-nat-behaviour/stun-nat-behaviour
+
+coverage.txt
+
+e2e/dump.pcap
+e2e/log-*.txt
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.golangci.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.golangci.yml
new file mode 100644
index 000000000..40ca69c0d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.golangci.yml
@@ -0,0 +1,93 @@
+linters-settings:
+  govet:
+    check-shadowing: true
+  golint:
+    min-confidence: 0
+  gocyclo:
+    min-complexity: 15
+  maligned:
+    suggest-new: true
+  dupl:
+    threshold: 100
+  goconst:
+    min-len: 2
+    min-occurrences: 2
+  misspell:
+    locale: US
+  lll:
+    line-length: 140
+  goimports:
+    local-prefixes: github.com/pion
+  gocritic:
+    enabled-tags:
+      - performance
+      - style
+      - experimental
+    disabled-checks:
+      - commentedOutCode
+      - sloppyReassign
+
+issues:
+  exclude:
+    - "`assertHMACSize` - `blocksize` always receives `64`"
+  exclude-rules:
+    - text: "string `<nil>`"
+      linters:
+        - goconst
+
+    # Exclude some linters from running on tests files.
+    - path: _test\.go
+      linters:
+        - gocyclo
+        - errcheck
+        - dupl
+        - gosec
+        - goconst
+
+    # Ease some gocritic warnings on test files.
+    - path: _test\.go
+      text: "(unnamedResult|exitAfterDefer|unlambda)"
+      linters:
+        - gocritic
+
+    # Exclude known linters from partially hard-vendored code,
+    # which is impossible to exclude via "nolint" comments.
+    - path: internal/hmac/
+      text: "weak cryptographic primitive"
+      linters:
+        - gosec
+    - path: internal/hmac/
+      text: "Write\\` is not checked"
+      linters:
+        - errcheck
+
+    # Ease linting on benchmarking code.
+    - path: cmd/stun-bench/
+      linters:
+        - gosec
+        - errcheck
+        - unparam
+
+    - path: ^cmd/
+      linters:
+        - gocyclo
+    - path: ^cmd/
+      text: "(unnamedResult|exitAfterDefer)"
+      linters:
+        - gocritic
+
+linters:
+  enable-all: true
+  disable:
+    - funlen
+    - gochecknoglobals
+    - godox
+    - prealloc
+    - scopelint
+
+run:
+  skip-dirs:
+    - e2e
+    - fuzz
+    - testdata
+    - api
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.goreleaser.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.goreleaser.yml
new file mode 100644
index 000000000..d72bde60c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.goreleaser.yml
@@ -0,0 +1,39 @@
+before:
+  hooks:
+    - go mod tidy
+
+archives:
+- replacements:
+    darwin: Darwin
+    linux: Linux
+    windows: Windows
+    386: i386
+    amd64: x86_64
+
+checksum:
+  name_template: 'checksums.txt'
+
+snapshot:
+  name_template: "{{ .Tag }}-next"
+
+changelog:
+  sort: asc
+  filters:
+    exclude:
+    - '^docs:'
+    - '^test:'
+
+builds:
+  - binary: stun-not-behavior
+    id: stun-not-behavior
+    goos:
+      - darwin
+      - windows
+      - linux
+      - freebsd
+    goarch:
+      - amd64
+      - 386
+    env:
+      - CGO_ENABLED=0
+    main: ./cmd/stun-nat-behavior
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.travis.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.travis.yml
new file mode 100644
index 000000000..e464e84ad
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/.travis.yml
@@ -0,0 +1,135 @@
+#
+# DO NOT EDIT THIS FILE DIRECTLY
+#
+# It is automatically copied from https://github.com/pion/.goassets repository.
+# If this repository should have package specific CI config,
+# remove the repository name from .goassets/.github/workflows/assets-sync.yml.
+#
+
+dist: bionic
+language: go
+
+
+branches:
+  only:
+  - master
+
+env:
+  global:
+    - GO111MODULE=on
+    - GOLANGCI_LINT_VERSION=1.19.1
+
+cache:
+  directories:
+    - ${HOME}/.cache/go-build
+    - ${GOPATH}/pkg/mod
+  npm: true
+  yarn: true
+
+_lint_job: &lint_job
+  env: CACHE_NAME=lint
+  before_install:
+    - if [ -f .github/.ci.conf ]; then . .github/.ci.conf; fi
+  install: skip
+  before_script:
+    - |
+      curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh \
+        | bash -s - -b $GOPATH/bin v${GOLANGCI_LINT_VERSION}
+  script:
+    - bash .github/assert-contributors.sh
+    - bash .github/lint-disallowed-functions-in-library.sh
+    - bash .github/lint-commit-message.sh
+    - bash .github/lint-filename.sh
+    - golangci-lint run ./...
+_test_job: &test_job
+  env: CACHE_NAME=test
+  before_install:
+    - if [ -f .github/.ci.conf ]; then . .github/.ci.conf; fi
+    - go mod download
+  install:
+    - go build ./...
+  script:
+    - testpkgs=${TEST_PACKAGES:-$(go list ./... | grep -v examples)}
+    - coverpkgs=$(echo "${testpkgs}" | paste -s -d ',')
+    - |
+      go test \
+        -coverpkg=${coverpkgs} -coverprofile=cover.out -covermode=atomic \
+        ${TEST_EXTRA_ARGS:-} \
+        -v -race ${testpkgs}
+    - if [ -n "${TEST_HOOK}" ]; then ${TEST_HOOK}; fi
+  after_success:
+    - travis_retry bash <(curl -s https://codecov.io/bash) -c -F go
+_test_i386_job: &test_i386_job
+  env: CACHE_NAME=test386
+  services: docker
+  before_install:
+    - if [ -f .github/.ci.conf ]; then . .github/.ci.conf; fi
+  script:
+    - testpkgs=${TEST_PACKAGES:-$(go list ./... | grep -v examples)}
+    - |
+      docker run \
+        -u $(id -u):$(id -g) \
+        -e "GO111MODULE=on" \
+        -e "CGO_ENABLED=0" \
+        -v ${PWD}:/go/src/github.com/pion/$(basename ${PWD}) \
+        -v ${HOME}/gopath/pkg/mod:/go/pkg/mod \
+        -v ${HOME}/.cache/go-build:/.cache/go-build \
+        -w /go/src/github.com/pion/$(basename ${PWD}) \
+        -it i386/golang:${GO_VERSION}-alpine \
+        /usr/local/go/bin/go test \
+          ${TEST_EXTRA_ARGS:-} \
+          -v ${testpkgs}
+_test_wasm_job: &test_wasm_job
+  env: CACHE_NAME=wasm
+  language: node_js
+  node_js: 12
+  before_install:
+    - if [ -f .github/.ci.conf ]; then . .github/.ci.conf; fi
+    - if ${SKIP_WASM_TEST:-false}; then exit 0; fi
+  install:
+    # Manually download and install Go instead of using gimme.
+    # It looks like gimme Go causes some errors on go-test for Wasm.
+    - curl -sSfL https://dl.google.com/go/go${GO_VERSION}.linux-amd64.tar.gz | tar -C ~ -xzf -
+    - export GOROOT=${HOME}/go
+    - export PATH=${GOROOT}/bin:${PATH}
+    - yarn install
+    - export GO_JS_WASM_EXEC=${GO_JS_WASM_EXEC:-${GOROOT}/misc/wasm/go_js_wasm_exec}
+  script:
+    - testpkgs=${TEST_PACKAGES:-$(go list ./... | grep -v examples)}
+    - coverpkgs=$(echo "${testpkgs}" | paste -s -d ',')
+    - |
+      GOOS=js GOARCH=wasm go test \
+        -coverpkg=${coverpkgs} -coverprofile=cover.out -covermode=atomic \
+        -exec="${GO_JS_WASM_EXEC}" \
+        -v ${testpkgs}
+  after_success:
+    - travis_retry bash <(curl -s https://codecov.io/bash) -c -F wasm
+
+jobs:
+  include:
+    - <<: *lint_job
+      name: Lint 1.14
+      go: 1.14
+    - <<: *test_job
+      name: Test 1.13
+      go: 1.13
+    - <<: *test_job
+      name: Test 1.14
+      go: 1.14
+    - <<: *test_i386_job
+      name: Test i386 1.13
+      env: GO_VERSION=1.13
+      go: 1.14  # version for host environment used to go list
+    - <<: *test_i386_job
+      name: Test i386 1.14
+      env: GO_VERSION=1.14
+      go: 1.14  # version for host environment used to go list
+    - <<: *test_wasm_job
+      name: Test WASM 1.13
+      env: GO_VERSION=1.13
+    - <<: *test_wasm_job
+      name: Test WASM 1.14
+      env: GO_VERSION=1.14
+
+notifications:
+  email: false
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/AUTHORS b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/AUTHORS
new file mode 100644
index 000000000..717af8f60
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/AUTHORS
@@ -0,0 +1,10 @@
+Sean DuBois <https://github.com/Sean-Der>
+Raphael Randschau <https://github.com/nicolai86>
+Aleksandr Razumov <ar@cydev.ru>
+Aliaksandr Valialkin <valyala@gmail.com>
+Michiel De Backker <https://github.com/backkem>
+Y.Horie <https://github.com/u5surf>
+songjiayang <https://github.com/songjiayang>
+The gortc project
+The IETF Trust
+The Go Authors
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/Dockerfile b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/Dockerfile
new file mode 100644
index 000000000..429239a38
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/Dockerfile
@@ -0,0 +1,5 @@
+FROM golang:1.14
+
+COPY . /go/src/github.com/pion/stun
+
+RUN go test github.com/pion/stun
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/LICENSE.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/LICENSE.md
new file mode 100644
index 000000000..5cc9cbdc5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/LICENSE.md
@@ -0,0 +1,7 @@
+Copyright 2018 Pion LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/Makefile b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/Makefile
new file mode 100644
index 000000000..43de8d003
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/Makefile
@@ -0,0 +1,61 @@
+VERSION := $(shell git describe --tags | sed -e 's/^v//g' | awk -F "-" '{print $$1}')
+ITERATION := $(shell git describe --tags --long | awk -F "-" '{print $$2}')
+GO_VERSION=$(shell gobuild -v)
+GO := $(or $(GOROOT),/usr/lib/go)/bin/go
+PROCS := $(shell nproc)
+cores:
+	@echo "cores: $(PROCS)"
+bench:
+	go test -bench .
+bench-record:
+	$(GO) test -bench . > "benchmarks/stun-go-$(GO_VERSION).txt"
+fuzz-prepare-msg:
+	go-fuzz-build -func FuzzMessage -o stun-msg-fuzz.zip github.com/pion/stun
+fuzz-prepare-typ:
+	go-fuzz-build -func FuzzType -o stun-typ-fuzz.zip github.com/pion/stun
+fuzz-prepare-setters:
+	go-fuzz-build -func FuzzSetters -o stun-setters-fuzz.zip github.com/pion/stun
+fuzz-msg:
+	go-fuzz -bin=./stun-msg-fuzz.zip -workdir=fuzz/stun-msg
+fuzz-typ:
+	go-fuzz -bin=./stun-typ-fuzz.zip -workdir=fuzz/stun-typ
+fuzz-setters:
+	go-fuzz -bin=./stun-setters-fuzz.zip -workdir=fuzz/stun-setters
+fuzz-test:
+	go test -tags gofuzz -run TestFuzz -v .
+fuzz-reset-setters:
+	rm -f -v -r stun-setters-fuzz.zip fuzz/stun-setters
+lint:
+	@golangci-lint run ./...
+	@echo "ok"
+escape:
+	@echo "Not escapes, except autogenerated:"
+	@go build -gcflags '-m -l' 2>&1 \
+	| grep -v "<autogenerated>" \
+	| grep escapes
+format:
+	goimports -w .
+bench-compare:
+	go test -bench . > bench.go-16
+	go-tip test -bench . > bench.go-tip
+	@benchcmp bench.go-16 bench.go-tip
+install-fuzz:
+	go get -u github.com/dvyukov/go-fuzz/go-fuzz-build
+	go get github.com/dvyukov/go-fuzz/go-fuzz
+install:
+	go get gortc.io/api
+	go get -u github.com/golangci/golangci-lint/cmd/golangci-lint
+docker-build:
+	docker build -t pion/stun .
+test-integration:
+	@cd e2e && bash ./test.sh
+prepush: assert test lint test-integration
+check-api:
+	@cd api && bash ./check.sh
+assert:
+	bash .github/assert-contributors.sh
+	bash .github/lint-disallowed-functions-in-library.sh
+	bash .github/lint-commit-message.sh
+test:
+	@./go.test.sh
+clean:
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/README.md
new file mode 100644
index 000000000..6dd50d0f3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/README.md
@@ -0,0 +1,184 @@
+<h1 align="center">
+  <br>
+  Pion STUN
+  <br>
+</h1>
+<h4 align="center">A Go implementation of STUN</h4>
+<p align="center">
+  <a href="https://pion.ly"><img src="https://img.shields.io/badge/pion-stun-gray.svg?longCache=true&colorB=brightgreen" alt="Pion stun"></a>
+  <!--<a href="https://sourcegraph.com/github.com/pion/webrtc?badge"><img src="https://sourcegraph.com/github.com/pion/webrtc/-/badge.svg" alt="Sourcegraph Widget"></a>-->
+  <a href="https://pion.ly/slack"><img src="https://img.shields.io/badge/join-us%20on%20slack-gray.svg?longCache=true&logo=slack&colorB=brightgreen" alt="Slack Widget"></a>
+  <br>
+  <a href="https://travis-ci.org/pion/stun"><img src="https://travis-ci.org/pion/stun.svg?branch=master" alt="Build Status"></a>
+  <a href="https://pkg.go.dev/github.com/pion/stun"><img src="https://godoc.org/github.com/pion/stun?status.svg" alt="GoDoc"></a>
+  <a href="https://codecov.io/gh/pion/stun"><img src="https://codecov.io/gh/pion/stun/branch/master/graph/badge.svg" alt="Coverage Status"></a>
+  <a href="https://goreportcard.com/report/github.com/pion/stun"><img src="https://goreportcard.com/badge/github.com/pion/stun" alt="Go Report Card"></a>
+  <!--<a href="https://www.codacy.com/app/Sean-Der/webrtc"><img src="https://api.codacy.com/project/badge/Grade/18f4aec384894e6aac0b94effe51961d" alt="Codacy Badge"></a>-->
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+</p>
+<br>
+
+### Roadmap
+The library is used as a part of our WebRTC implementation. Please refer to that [roadmap](https://github.com/pion/webrtc/issues/9) to track our major milestones.
+
+### Community
+Pion has an active community on the [Golang Slack](https://invite.slack.golangbridge.org/). Sign up and join the **#pion** channel for discussions and support. You can also use [Pion mailing list](https://groups.google.com/forum/#!forum/pion).
+
+We are always looking to support **your projects**. Please reach out if you have something to build!
+
+If you need commercial support or don't want to use public methods you can contact us at [team@pion.ly](mailto:team@pion.ly)
+
+### Contributing
+Check out the **[contributing wiki](https://github.com/pion/webrtc/wiki/Contributing)** to join the group of amazing people making this project possible:
+
+* [Sean DuBois](https://github.com/Sean-Der) - *Original Author*
+* [Raphael Randschau](https://github.com/nicolai86) - *STUN client*
+* [Michiel De Backker](https://github.com/backkem) - *Minor fixes*
+* [Y.Horie](https://github.com/u5surf) - *Fix lint issues*
+* [Aleksandr Razumov](https://github.com/ernado) - *The v0.3 version*
+* [songjiayang](https://github.com/songjiayang)
+* [Adam Kiss](https://github.com/masterada)
+* [Moises Marangoni](https://github.com/Moisesbr)
+* [Yutaka Takeda](https://github.com/enobufs)
+* [Hugo Arregui](https://github.com/hugoArregui)
+* [Maanas Royy](https://github.com/maanas)
+* [Atsushi Watanabe](https://github.com/at-wat)
+* [Cecylia Bocovich](https://github.com/cohosh)
+* [Christian Muehlhaeuser](https://github.com/muesli)
+
+# STUN
+Package stun implements Session Traversal Utilities for NAT (STUN) [[RFC5389](https://tools.ietf.org/html/rfc5389)]
+protocol and [client](https://pkg.go.dev/github.com/pion/stun#Client) with no external dependencies and zero allocations in hot paths.
+Client [supports](https://pkg.go.dev/github.com/pion/stun#WithRTO) automatic request retransmissions.
+
+# Example
+You can get your current IP address from any STUN server by sending
+binding request. See more idiomatic example at `cmd/stun-client`.
+```go
+package main
+
+import (
+	"fmt"
+
+	"github.com/pion/stun"
+)
+
+func main() {
+	// Creating a "connection" to STUN server.
+	c, err := stun.Dial("udp", "stun.l.google.com:19302")
+	if err != nil {
+		panic(err)
+	}
+	// Building binding request with random transaction id.
+	message := stun.MustBuild(stun.TransactionID, stun.BindingRequest)
+	// Sending request to STUN server, waiting for response message.
+	if err := c.Do(message, func(res stun.Event) {
+		if res.Error != nil {
+			panic(res.Error)
+		}
+		// Decoding XOR-MAPPED-ADDRESS attribute from message.
+		var xorAddr stun.XORMappedAddress
+		if err := xorAddr.GetFrom(res.Message); err != nil {
+			panic(err)
+		}
+		fmt.Println("your IP is", xorAddr.IP)
+	}); err != nil {
+		panic(err)
+	}
+}
+```
+
+## Supported RFCs
+- [x] [RFC 5389](https://tools.ietf.org/html/rfc5389) — Session Traversal Utilities for NAT
+- [x] [RFC 5769](https://tools.ietf.org/html/rfc5769) — Test Vectors for STUN
+- [x] [RFC 6062](https://tools.ietf.org/html/rfc6062) — TURN extensions for TCP allocations
+- [x] [RFC 7064](https://tools.ietf.org/html/rfc7064) — STUN URI
+- [x] (TLS-over-)TCP client support
+- [ ] [ALTERNATE-SERVER](https://tools.ietf.org/html/rfc5389#section-11) support [#48](https://github.com/pion/stun/issues/48)
+- [ ] [RFC 5780](https://tools.ietf.org/html/rfc5780) — NAT Behavior Discovery Using STUN [#49](https://github.com/pion/stun/issues/49)
+
+# Stability
+Package is currently stable, no backward incompatible changes are expected
+with exception of critical bugs or security fixes.
+
+Additional attributes are unlikely to be implemented in scope of stun package,
+the only exception is constants for attribute or message types.
+
+# RFC 3489 notes
+RFC 5389 obsoletes RFC 3489, so implementation was ignored by purpose, however,
+RFC 3489 can be easily implemented as separate package.
+
+# Requirements
+Go 1.12 is currently supported and tested in CI.
+
+# Testing
+Client behavior is tested and verified in many ways:
+  * End-To-End with long-term credentials
+    * **coturn**: The coturn [server](https://github.com/coturn/coturn/wiki/turnserver) (linux)
+  * Bunch of code static checkers (linters)
+  * Standard unit-tests with coverage reporting (linux {amd64, **arm**64}, windows and darwin)
+  * Explicit API backward compatibility [check](https://github.com/gortc/api), see `api` directory
+
+See [TeamCity project](https://tc.gortc.io/project.html?projectId=stun&guest=1) and `e2e` directory
+for more information. Also the Wireshark `.pcap` files are available for e2e test in
+artifacts for build.
+
+# Benchmarks
+
+Intel(R) Core(TM) i7-8700K:
+
+```
+version: 1.16.5
+goos: linux
+goarch: amd64
+pkg: github.com/pion/stun
+PASS
+benchmark                                         iter       time/iter      throughput   bytes alloc        allocs
+---------                                         ----       ---------      ----------   -----------        ------
+BenchmarkMappedAddress_AddTo-12               30000000     36.40 ns/op                        0 B/op   0 allocs/op
+BenchmarkAlternateServer_AddTo-12             50000000     36.70 ns/op                        0 B/op   0 allocs/op
+BenchmarkAgent_GC-12                            500000   2552.00 ns/op                        0 B/op   0 allocs/op
+BenchmarkAgent_Process-12                     50000000     38.00 ns/op                        0 B/op   0 allocs/op
+BenchmarkMessage_GetNotFound-12              200000000      6.90 ns/op                        0 B/op   0 allocs/op
+BenchmarkMessage_Get-12                      200000000      7.61 ns/op                        0 B/op   0 allocs/op
+BenchmarkClient_Do-12                          2000000   1072.00 ns/op                        0 B/op   0 allocs/op
+BenchmarkErrorCode_AddTo-12                   20000000     67.00 ns/op                        0 B/op   0 allocs/op
+BenchmarkErrorCodeAttribute_AddTo-12          30000000     52.20 ns/op                        0 B/op   0 allocs/op
+BenchmarkErrorCodeAttribute_GetFrom-12       100000000     12.00 ns/op                        0 B/op   0 allocs/op
+BenchmarkFingerprint_AddTo-12                 20000000    102.00 ns/op     430.08 MB/s        0 B/op   0 allocs/op
+BenchmarkFingerprint_Check-12                 30000000     54.80 ns/op     948.38 MB/s        0 B/op   0 allocs/op
+BenchmarkBuildOverhead/Build-12                5000000    333.00 ns/op                        0 B/op   0 allocs/op
+BenchmarkBuildOverhead/BuildNonPointer-12      3000000    536.00 ns/op                      100 B/op   4 allocs/op
+BenchmarkBuildOverhead/Raw-12                 10000000    181.00 ns/op                        0 B/op   0 allocs/op
+BenchmarkMessageIntegrity_AddTo-12             1000000   1053.00 ns/op      18.98 MB/s        0 B/op   0 allocs/op
+BenchmarkMessageIntegrity_Check-12             1000000   1135.00 ns/op      28.17 MB/s        0 B/op   0 allocs/op
+BenchmarkMessage_Write-12                    100000000     27.70 ns/op    1011.09 MB/s        0 B/op   0 allocs/op
+BenchmarkMessageType_Value-12               2000000000      0.49 ns/op                        0 B/op   0 allocs/op
+BenchmarkMessage_WriteTo-12                  100000000     12.80 ns/op                        0 B/op   0 allocs/op
+BenchmarkMessage_ReadFrom-12                  50000000     25.00 ns/op     801.19 MB/s        0 B/op   0 allocs/op
+BenchmarkMessage_ReadBytes-12                100000000     18.00 ns/op    1113.03 MB/s        0 B/op   0 allocs/op
+BenchmarkIsMessage-12                       2000000000      1.08 ns/op   18535.57 MB/s        0 B/op   0 allocs/op
+BenchmarkMessage_NewTransactionID-12           2000000    673.00 ns/op                        0 B/op   0 allocs/op
+BenchmarkMessageFull-12                        5000000    316.00 ns/op                        0 B/op   0 allocs/op
+BenchmarkMessageFullHardcore-12               20000000     88.90 ns/op                        0 B/op   0 allocs/op
+BenchmarkMessage_WriteHeader-12              200000000      8.18 ns/op                        0 B/op   0 allocs/op
+BenchmarkMessage_CloneTo-12                   30000000     37.90 ns/op    1795.32 MB/s        0 B/op   0 allocs/op
+BenchmarkMessage_AddTo-12                    300000000      4.77 ns/op                        0 B/op   0 allocs/op
+BenchmarkDecode-12                           100000000     22.00 ns/op                        0 B/op   0 allocs/op
+BenchmarkUsername_AddTo-12                    50000000     23.20 ns/op                        0 B/op   0 allocs/op
+BenchmarkUsername_GetFrom-12                 100000000     17.90 ns/op                        0 B/op   0 allocs/op
+BenchmarkNonce_AddTo-12                       50000000     34.40 ns/op                        0 B/op   0 allocs/op
+BenchmarkNonce_AddTo_BadLength-12            200000000      8.29 ns/op                        0 B/op   0 allocs/op
+BenchmarkNonce_GetFrom-12                    100000000     17.50 ns/op                        0 B/op   0 allocs/op
+BenchmarkUnknownAttributes/AddTo-12           30000000     48.10 ns/op                        0 B/op   0 allocs/op
+BenchmarkUnknownAttributes/GetFrom-12        100000000     20.90 ns/op                        0 B/op   0 allocs/op
+BenchmarkXOR-12                               50000000     25.80 ns/op   39652.86 MB/s        0 B/op   0 allocs/op
+BenchmarkXORSafe-12                            3000000    515.00 ns/op    1988.04 MB/s        0 B/op   0 allocs/op
+BenchmarkXORFast-12                           20000000     73.40 ns/op   13959.30 MB/s        0 B/op   0 allocs/op
+BenchmarkXORMappedAddress_AddTo-12            20000000     56.70 ns/op                        0 B/op   0 allocs/op
+BenchmarkXORMappedAddress_GetFrom-12          50000000     37.40 ns/op                        0 B/op   0 allocs/op
+ok  	github.com/pion/stun	76.868s
+```
+
+### License
+MIT License - see [LICENSE](LICENSE) for full text
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/addr.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/addr.go
new file mode 100644
index 000000000..c4d9653d5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/addr.go
@@ -0,0 +1,134 @@
+package stun
+
+import (
+	"fmt"
+	"io"
+	"net"
+	"strconv"
+)
+
+// MappedAddress represents MAPPED-ADDRESS attribute.
+//
+// This attribute is used only by servers for achieving backwards
+// compatibility with RFC 3489 clients.
+//
+// RFC 5389 Section 15.1
+type MappedAddress struct {
+	IP   net.IP
+	Port int
+}
+
+// AlternateServer represents ALTERNATE-SERVER attribute.
+//
+// RFC 5389 Section 15.11
+type AlternateServer struct {
+	IP   net.IP
+	Port int
+}
+
+// OtherAddress represents OTHER-ADDRESS attribute.
+//
+// RFC 5780 Section 7.4
+type OtherAddress struct {
+	IP   net.IP
+	Port int
+}
+
+// AddTo adds ALTERNATE-SERVER attribute to message.
+func (s *AlternateServer) AddTo(m *Message) error {
+	a := (*MappedAddress)(s)
+	return a.addAs(m, AttrAlternateServer)
+}
+
+// GetFrom decodes ALTERNATE-SERVER from message.
+func (s *AlternateServer) GetFrom(m *Message) error {
+	a := (*MappedAddress)(s)
+	return a.getAs(m, AttrAlternateServer)
+}
+
+func (a MappedAddress) String() string {
+	return net.JoinHostPort(a.IP.String(), strconv.Itoa(a.Port))
+}
+
+func (a *MappedAddress) getAs(m *Message, t AttrType) error {
+	v, err := m.Get(t)
+	if err != nil {
+		return err
+	}
+	if len(v) <= 4 {
+		return io.ErrUnexpectedEOF
+	}
+	family := bin.Uint16(v[0:2])
+	if family != familyIPv6 && family != familyIPv4 {
+		return newDecodeErr("xor-mapped address", "family",
+			fmt.Sprintf("bad value %d", family),
+		)
+	}
+	ipLen := net.IPv4len
+	if family == familyIPv6 {
+		ipLen = net.IPv6len
+	}
+	// Ensuring len(a.IP) == ipLen and reusing a.IP.
+	if len(a.IP) < ipLen {
+		a.IP = a.IP[:cap(a.IP)]
+		for len(a.IP) < ipLen {
+			a.IP = append(a.IP, 0)
+		}
+	}
+	a.IP = a.IP[:ipLen]
+	for i := range a.IP {
+		a.IP[i] = 0
+	}
+	a.Port = int(bin.Uint16(v[2:4]))
+	copy(a.IP, v[4:])
+	return nil
+}
+
+func (a *MappedAddress) addAs(m *Message, t AttrType) error {
+	var (
+		family = familyIPv4
+		ip     = a.IP
+	)
+	if len(a.IP) == net.IPv6len {
+		if isIPv4(ip) {
+			ip = ip[12:16] // like in ip.To4()
+		} else {
+			family = familyIPv6
+		}
+	} else if len(ip) != net.IPv4len {
+		return ErrBadIPLength
+	}
+	value := make([]byte, 128)
+	value[0] = 0 // first 8 bits are zeroes
+	bin.PutUint16(value[0:2], family)
+	bin.PutUint16(value[2:4], uint16(a.Port))
+	copy(value[4:], ip)
+	m.Add(t, value[:4+len(ip)])
+	return nil
+}
+
+// AddTo adds MAPPED-ADDRESS to message.
+func (a *MappedAddress) AddTo(m *Message) error {
+	return a.addAs(m, AttrMappedAddress)
+}
+
+// GetFrom decodes MAPPED-ADDRESS from message.
+func (a *MappedAddress) GetFrom(m *Message) error {
+	return a.getAs(m, AttrMappedAddress)
+}
+
+// AddTo adds OTHER-ADDRESS attribute to message.
+func (o *OtherAddress) AddTo(m *Message) error {
+	a := (*MappedAddress)(o)
+	return a.addAs(m, AttrOtherAddress)
+}
+
+// GetFrom decodes OTHER-ADDRESS from message.
+func (o *OtherAddress) GetFrom(m *Message) error {
+	a := (*MappedAddress)(o)
+	return a.getAs(m, AttrOtherAddress)
+}
+
+func (o OtherAddress) String() string {
+	return net.JoinHostPort(o.IP.String(), strconv.Itoa(o.Port))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/agent.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/agent.go
new file mode 100644
index 000000000..6a8a47352
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/agent.go
@@ -0,0 +1,228 @@
+package stun
+
+import (
+	"errors"
+	"sync"
+	"time"
+)
+
+// NoopHandler just discards any event.
+var NoopHandler Handler = func(e Event) {}
+
+// NewAgent initializes and returns new Agent with provided handler.
+// If h is nil, the NoopHandler will be used.
+func NewAgent(h Handler) *Agent {
+	if h == nil {
+		h = NoopHandler
+	}
+	a := &Agent{
+		transactions: make(map[transactionID]agentTransaction),
+		handler:      h,
+	}
+	return a
+}
+
+// Agent is low-level abstraction over transaction list that
+// handles concurrency (all calls are goroutine-safe) and
+// time outs (via Collect call).
+type Agent struct {
+	// transactions is map of transactions that are currently
+	// in progress. Event handling is done in such way when
+	// transaction is unregistered before agentTransaction access,
+	// minimizing mux lock and protecting agentTransaction from
+	// data races via unexpected concurrent access.
+	transactions map[transactionID]agentTransaction
+	closed       bool       // all calls are invalid if true
+	mux          sync.Mutex // protects transactions and closed
+	handler      Handler    // handles transactions
+}
+
+// Handler handles state changes of transaction.
+//
+// Handler is called on transaction state change.
+// Usage of e is valid only during call, user must
+// copy needed fields explicitly.
+type Handler func(e Event)
+
+// Event is passed to Handler describing the transaction event.
+// Do not reuse outside Handler.
+type Event struct {
+	TransactionID [TransactionIDSize]byte
+	Message       *Message
+	Error         error
+}
+
+// agentTransaction represents transaction in progress.
+// Concurrent access is invalid.
+type agentTransaction struct {
+	id       transactionID
+	deadline time.Time
+}
+
+var (
+	// ErrTransactionStopped indicates that transaction was manually stopped.
+	ErrTransactionStopped = errors.New("transaction is stopped")
+	// ErrTransactionNotExists indicates that agent failed to find transaction.
+	ErrTransactionNotExists = errors.New("transaction not exists")
+	// ErrTransactionExists indicates that transaction with same id is already
+	// registered.
+	ErrTransactionExists = errors.New("transaction exists with same id")
+)
+
+// StopWithError removes transaction from list and calls handler with
+// provided error. Can return ErrTransactionNotExists and ErrAgentClosed.
+func (a *Agent) StopWithError(id [TransactionIDSize]byte, err error) error {
+	a.mux.Lock()
+	if a.closed {
+		a.mux.Unlock()
+		return ErrAgentClosed
+	}
+	t, exists := a.transactions[id]
+	delete(a.transactions, id)
+	h := a.handler
+	a.mux.Unlock()
+	if !exists {
+		return ErrTransactionNotExists
+	}
+	h(Event{
+		TransactionID: t.id,
+		Error:         err,
+	})
+	return nil
+}
+
+// Stop stops transaction by id with ErrTransactionStopped, blocking
+// until handler returns.
+func (a *Agent) Stop(id [TransactionIDSize]byte) error {
+	return a.StopWithError(id, ErrTransactionStopped)
+}
+
+// ErrAgentClosed indicates that agent is in closed state and is unable
+// to handle transactions.
+var ErrAgentClosed = errors.New("agent is closed")
+
+// Start registers transaction with provided id and deadline.
+// Could return ErrAgentClosed, ErrTransactionExists.
+//
+// Agent handler is guaranteed to be eventually called.
+func (a *Agent) Start(id [TransactionIDSize]byte, deadline time.Time) error {
+	a.mux.Lock()
+	defer a.mux.Unlock()
+	if a.closed {
+		return ErrAgentClosed
+	}
+	_, exists := a.transactions[id]
+	if exists {
+		return ErrTransactionExists
+	}
+	a.transactions[id] = agentTransaction{
+		id:       id,
+		deadline: deadline,
+	}
+	return nil
+}
+
+// agentCollectCap is initial capacity for Agent.Collect slices,
+// sufficient to make function zero-alloc in most cases.
+const agentCollectCap = 100
+
+// ErrTransactionTimeOut indicates that transaction has reached deadline.
+var ErrTransactionTimeOut = errors.New("transaction is timed out")
+
+// Collect terminates all transactions that have deadline before provided
+// time, blocking until all handlers will process ErrTransactionTimeOut.
+// Will return ErrAgentClosed if agent is already closed.
+//
+// It is safe to call Collect concurrently but makes no sense.
+func (a *Agent) Collect(gcTime time.Time) error {
+	toRemove := make([]transactionID, 0, agentCollectCap)
+	a.mux.Lock()
+	if a.closed {
+		// Doing nothing if agent is closed.
+		// All transactions should be already closed
+		// during Close() call.
+		a.mux.Unlock()
+		return ErrAgentClosed
+	}
+	// Adding all transactions with deadline before gcTime
+	// to toCall and toRemove slices.
+	// No allocs if there are less than agentCollectCap
+	// timed out transactions.
+	for id, t := range a.transactions {
+		if t.deadline.Before(gcTime) {
+			toRemove = append(toRemove, id)
+		}
+	}
+	// Un-registering timed out transactions.
+	for _, id := range toRemove {
+		delete(a.transactions, id)
+	}
+	// Calling handler does not require locked mutex,
+	// reducing lock time.
+	h := a.handler
+	a.mux.Unlock()
+	// Sending ErrTransactionTimeOut to handler for all transactions,
+	// blocking until last one.
+	event := Event{
+		Error: ErrTransactionTimeOut,
+	}
+	for _, id := range toRemove {
+		event.TransactionID = id
+		h(event)
+	}
+	return nil
+}
+
+// Process incoming message, synchronously passing it to handler.
+func (a *Agent) Process(m *Message) error {
+	e := Event{
+		TransactionID: m.TransactionID,
+		Message:       m,
+	}
+	a.mux.Lock()
+	if a.closed {
+		a.mux.Unlock()
+		return ErrAgentClosed
+	}
+	h := a.handler
+	delete(a.transactions, m.TransactionID)
+	a.mux.Unlock()
+	h(e)
+	return nil
+}
+
+// SetHandler sets agent handler to h.
+func (a *Agent) SetHandler(h Handler) error {
+	a.mux.Lock()
+	if a.closed {
+		a.mux.Unlock()
+		return ErrAgentClosed
+	}
+	a.handler = h
+	a.mux.Unlock()
+	return nil
+}
+
+// Close terminates all transactions with ErrAgentClosed and renders Agent to
+// closed state.
+func (a *Agent) Close() error {
+	e := Event{
+		Error: ErrAgentClosed,
+	}
+	a.mux.Lock()
+	if a.closed {
+		a.mux.Unlock()
+		return ErrAgentClosed
+	}
+	for _, t := range a.transactions {
+		e.TransactionID = t.id
+		a.handler(e)
+	}
+	a.transactions = nil
+	a.closed = true
+	a.handler = nil
+	a.mux.Unlock()
+	return nil
+}
+
+type transactionID [TransactionIDSize]byte
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/appveyor.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/appveyor.yml
new file mode 100644
index 000000000..664099d5a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/appveyor.yml
@@ -0,0 +1,22 @@
+version: "{build}"
+
+platform: x64
+
+branches:
+  only:
+    - master
+
+skip_tags: true
+
+clone_folder: c:\gopath\src\github.com\pion\stun
+
+environment:
+  GOPATH: c:\gopath
+  GOVERSION: 1.12
+
+install:
+  - go version
+  - go get -v -t .
+
+build_script:
+  - go test -v .
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/attributes.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/attributes.go
new file mode 100644
index 000000000..7238234a7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/attributes.go
@@ -0,0 +1,226 @@
+package stun
+
+import (
+	"errors"
+	"fmt"
+)
+
+// Attributes is list of message attributes.
+type Attributes []RawAttribute
+
+// Get returns first attribute from list by the type.
+// If attribute is present the RawAttribute is returned and the
+// boolean is true. Otherwise the returned RawAttribute will be
+// empty and boolean will be false.
+func (a Attributes) Get(t AttrType) (RawAttribute, bool) {
+	for _, candidate := range a {
+		if candidate.Type == t {
+			return candidate, true
+		}
+	}
+	return RawAttribute{}, false
+}
+
+// AttrType is attribute type.
+type AttrType uint16
+
+// Required returns true if type is from comprehension-required range (0x0000-0x7FFF).
+func (t AttrType) Required() bool {
+	return t <= 0x7FFF
+}
+
+// Optional returns true if type is from comprehension-optional range (0x8000-0xFFFF).
+func (t AttrType) Optional() bool {
+	return t >= 0x8000
+}
+
+// Attributes from comprehension-required range (0x0000-0x7FFF).
+const (
+	AttrMappedAddress     AttrType = 0x0001 // MAPPED-ADDRESS
+	AttrUsername          AttrType = 0x0006 // USERNAME
+	AttrMessageIntegrity  AttrType = 0x0008 // MESSAGE-INTEGRITY
+	AttrErrorCode         AttrType = 0x0009 // ERROR-CODE
+	AttrUnknownAttributes AttrType = 0x000A // UNKNOWN-ATTRIBUTES
+	AttrRealm             AttrType = 0x0014 // REALM
+	AttrNonce             AttrType = 0x0015 // NONCE
+	AttrXORMappedAddress  AttrType = 0x0020 // XOR-MAPPED-ADDRESS
+)
+
+// Attributes from comprehension-optional range (0x8000-0xFFFF).
+const (
+	AttrSoftware        AttrType = 0x8022 // SOFTWARE
+	AttrAlternateServer AttrType = 0x8023 // ALTERNATE-SERVER
+	AttrFingerprint     AttrType = 0x8028 // FINGERPRINT
+)
+
+// Attributes from RFC 5245 ICE.
+const (
+	AttrPriority       AttrType = 0x0024 // PRIORITY
+	AttrUseCandidate   AttrType = 0x0025 // USE-CANDIDATE
+	AttrICEControlled  AttrType = 0x8029 // ICE-CONTROLLED
+	AttrICEControlling AttrType = 0x802A // ICE-CONTROLLING
+)
+
+// Attributes from RFC 5766 TURN.
+const (
+	AttrChannelNumber      AttrType = 0x000C // CHANNEL-NUMBER
+	AttrLifetime           AttrType = 0x000D // LIFETIME
+	AttrXORPeerAddress     AttrType = 0x0012 // XOR-PEER-ADDRESS
+	AttrData               AttrType = 0x0013 // DATA
+	AttrXORRelayedAddress  AttrType = 0x0016 // XOR-RELAYED-ADDRESS
+	AttrEvenPort           AttrType = 0x0018 // EVEN-PORT
+	AttrRequestedTransport AttrType = 0x0019 // REQUESTED-TRANSPORT
+	AttrDontFragment       AttrType = 0x001A // DONT-FRAGMENT
+	AttrReservationToken   AttrType = 0x0022 // RESERVATION-TOKEN
+)
+
+// Attributes from RFC 5780 NAT Behavior Discovery
+const (
+	AttrOtherAddress  AttrType = 0x802C // OTHER-ADDRESS
+	AttrChangeRequest AttrType = 0x0003 // CHANGE-REQUEST
+)
+
+// Attributes from RFC 6062 TURN Extensions for TCP Allocations.
+const (
+	AttrConnectionID AttrType = 0x002a // CONNECTION-ID
+)
+
+// Attributes from RFC 6156 TURN IPv6.
+const (
+	AttrRequestedAddressFamily AttrType = 0x0017 // REQUESTED-ADDRESS-FAMILY
+)
+
+// Attributes from An Origin Attribute for the STUN Protocol.
+const (
+	AttrOrigin AttrType = 0x802F
+)
+
+// Value returns uint16 representation of attribute type.
+func (t AttrType) Value() uint16 {
+	return uint16(t)
+}
+
+var attrNames = map[AttrType]string{
+	AttrMappedAddress:          "MAPPED-ADDRESS",
+	AttrUsername:               "USERNAME",
+	AttrErrorCode:              "ERROR-CODE",
+	AttrMessageIntegrity:       "MESSAGE-INTEGRITY",
+	AttrUnknownAttributes:      "UNKNOWN-ATTRIBUTES",
+	AttrRealm:                  "REALM",
+	AttrNonce:                  "NONCE",
+	AttrXORMappedAddress:       "XOR-MAPPED-ADDRESS",
+	AttrSoftware:               "SOFTWARE",
+	AttrAlternateServer:        "ALTERNATE-SERVER",
+	AttrOtherAddress:           "OTHER-ADDRESS",
+	AttrChangeRequest:          "CHANGE-REQUEST",
+	AttrFingerprint:            "FINGERPRINT",
+	AttrPriority:               "PRIORITY",
+	AttrUseCandidate:           "USE-CANDIDATE",
+	AttrICEControlled:          "ICE-CONTROLLED",
+	AttrICEControlling:         "ICE-CONTROLLING",
+	AttrChannelNumber:          "CHANNEL-NUMBER",
+	AttrLifetime:               "LIFETIME",
+	AttrXORPeerAddress:         "XOR-PEER-ADDRESS",
+	AttrData:                   "DATA",
+	AttrXORRelayedAddress:      "XOR-RELAYED-ADDRESS",
+	AttrEvenPort:               "EVEN-PORT",
+	AttrRequestedTransport:     "REQUESTED-TRANSPORT",
+	AttrDontFragment:           "DONT-FRAGMENT",
+	AttrReservationToken:       "RESERVATION-TOKEN",
+	AttrConnectionID:           "CONNECTION-ID",
+	AttrRequestedAddressFamily: "REQUESTED-ADDRESS-FAMILY",
+	AttrOrigin:                 "ORIGIN",
+}
+
+func (t AttrType) String() string {
+	s, ok := attrNames[t]
+	if !ok {
+		// Just return hex representation of unknown attribute type.
+		return fmt.Sprintf("0x%x", uint16(t))
+	}
+	return s
+}
+
+// RawAttribute is a Type-Length-Value (TLV) object that
+// can be added to a STUN message. Attributes are divided into two
+// types: comprehension-required and comprehension-optional.  STUN
+// agents can safely ignore comprehension-optional attributes they
+// don't understand, but cannot successfully process a message if it
+// contains comprehension-required attributes that are not
+// understood.
+type RawAttribute struct {
+	Type   AttrType
+	Length uint16 // ignored while encoding
+	Value  []byte
+}
+
+// AddTo implements Setter, adding attribute as a.Type with a.Value and ignoring
+// the Length field.
+func (a RawAttribute) AddTo(m *Message) error {
+	m.Add(a.Type, a.Value)
+	return nil
+}
+
+// Equal returns true if a == b.
+func (a RawAttribute) Equal(b RawAttribute) bool {
+	if a.Type != b.Type {
+		return false
+	}
+	if a.Length != b.Length {
+		return false
+	}
+	if len(b.Value) != len(a.Value) {
+		return false
+	}
+	for i, v := range a.Value {
+		if b.Value[i] != v {
+			return false
+		}
+	}
+	return true
+}
+
+func (a RawAttribute) String() string {
+	return fmt.Sprintf("%s: 0x%x", a.Type, a.Value)
+}
+
+// ErrAttributeNotFound means that attribute with provided attribute
+// type does not exist in message.
+var ErrAttributeNotFound = errors.New("attribute not found")
+
+// Get returns byte slice that represents attribute value,
+// if there is no attribute with such type,
+// ErrAttributeNotFound is returned.
+func (m *Message) Get(t AttrType) ([]byte, error) {
+	v, ok := m.Attributes.Get(t)
+	if !ok {
+		return nil, ErrAttributeNotFound
+	}
+	return v.Value, nil
+}
+
+// STUN aligns attributes on 32-bit boundaries, attributes whose content
+// is not a multiple of 4 bytes are padded with 1, 2, or 3 bytes of
+// padding so that its value contains a multiple of 4 bytes.  The
+// padding bits are ignored, and may be any value.
+//
+// https://tools.ietf.org/html/rfc5389#section-15
+const padding = 4
+
+func nearestPaddedValueLength(l int) int {
+	n := padding * (l / padding)
+	if n < l {
+		n += padding
+	}
+	return n
+}
+
+// This method converts uint16 vlue to AttrType. If it finds an old attribute
+// type value, it also translates it to the new value to enable backward
+// compatibility. (See: https://github.com/pion/stun/issues/21)
+func compatAttrType(val uint16) AttrType {
+	if val == 0x8020 {
+		return AttrXORMappedAddress // new: 0x0020
+	}
+	return AttrType(val)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/attributes_debug.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/attributes_debug.go
new file mode 100644
index 000000000..7bf09af7c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/attributes_debug.go
@@ -0,0 +1,33 @@
+// +build debug
+
+package stun
+
+import "fmt"
+
+// AttrOverflowErr occurs when len(v) > Max.
+type AttrOverflowErr struct {
+	Type AttrType
+	Max  int
+	Got  int
+}
+
+func (e AttrOverflowErr) Error() string {
+	return fmt.Sprintf("incorrect length of %s attribute: %d exceeds maximum %d",
+		e.Type, e.Got, e.Max,
+	)
+}
+
+// AttrLengthErr means that length for attribute is invalid.
+type AttrLengthErr struct {
+	Attr     AttrType
+	Got      int
+	Expected int
+}
+
+func (e AttrLengthErr) Error() string {
+	return fmt.Sprintf("incorrect length of %s attribute: got %d, expected %d",
+		e.Attr,
+		e.Got,
+		e.Expected,
+	)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/checks.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/checks.go
new file mode 100644
index 000000000..a7609973a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/checks.go
@@ -0,0 +1,45 @@
+// +build !debug
+
+package stun
+
+import "github.com/pion/stun/internal/hmac"
+
+// CheckSize returns ErrAttrSizeInvalid if got is not equal to expected.
+func CheckSize(_ AttrType, got, expected int) error {
+	if got == expected {
+		return nil
+	}
+	return ErrAttributeSizeInvalid
+}
+
+func checkHMAC(got, expected []byte) error {
+	if hmac.Equal(got, expected) {
+		return nil
+	}
+	return ErrIntegrityMismatch
+}
+
+func checkFingerprint(got, expected uint32) error {
+	if got == expected {
+		return nil
+	}
+	return ErrFingerprintMismatch
+}
+
+// IsAttrSizeInvalid returns true if error means that attribute size is invalid.
+func IsAttrSizeInvalid(err error) bool {
+	return err == ErrAttributeSizeInvalid
+}
+
+// CheckOverflow returns ErrAttributeSizeOverflow if got is bigger that max.
+func CheckOverflow(_ AttrType, got, max int) error {
+	if got <= max {
+		return nil
+	}
+	return ErrAttributeSizeOverflow
+}
+
+// IsAttrSizeOverflow returns true if error means that attribute size is too big.
+func IsAttrSizeOverflow(err error) bool {
+	return err == ErrAttributeSizeOverflow
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/checks_debug.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/checks_debug.go
new file mode 100644
index 000000000..955f555b0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/checks_debug.go
@@ -0,0 +1,61 @@
+// +build debug
+
+package stun
+
+import "github.com/pion/stun/internal/hmac"
+
+// CheckSize returns *AttrLengthError if got is not equal to expected.
+func CheckSize(a AttrType, got, expected int) error {
+	if got == expected {
+		return nil
+	}
+	return &AttrLengthErr{
+		Got:      got,
+		Expected: expected,
+		Attr:     a,
+	}
+}
+
+func checkHMAC(got, expected []byte) error {
+	if hmac.Equal(got, expected) {
+		return nil
+	}
+	return &IntegrityErr{
+		Expected: expected,
+		Actual:   got,
+	}
+}
+
+func checkFingerprint(got, expected uint32) error {
+	if got == expected {
+		return nil
+	}
+	return &CRCMismatch{
+		Actual:   got,
+		Expected: expected,
+	}
+}
+
+// IsAttrSizeInvalid returns true if error means that attribute size is invalid.
+func IsAttrSizeInvalid(err error) bool {
+	_, ok := err.(*AttrLengthErr)
+	return ok
+}
+
+// CheckOverflow returns *AttrOverflowErr if got is bigger that max.
+func CheckOverflow(t AttrType, got, max int) error {
+	if got <= max {
+		return nil
+	}
+	return &AttrOverflowErr{
+		Type: t,
+		Got:  got,
+		Max:  max,
+	}
+}
+
+// IsAttrSizeOverflow returns true if error means that attribute size is too big.
+func IsAttrSizeOverflow(err error) bool {
+	_, ok := err.(*AttrOverflowErr)
+	return ok
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/client.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/client.go
new file mode 100644
index 000000000..62a0b6eb0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/client.go
@@ -0,0 +1,631 @@
+package stun
+
+import (
+	"errors"
+	"fmt"
+	"io"
+	"log"
+	"net"
+	"runtime"
+	"sync"
+	"sync/atomic"
+	"time"
+)
+
+// Dial connects to the address on the named network and then
+// initializes Client on that connection, returning error if any.
+func Dial(network, address string) (*Client, error) {
+	conn, err := net.Dial(network, address)
+	if err != nil {
+		return nil, err
+	}
+	return NewClient(conn)
+}
+
+// ErrNoConnection means that ClientOptions.Connection is nil.
+var ErrNoConnection = errors.New("no connection provided")
+
+// ClientOption sets some client option.
+type ClientOption func(c *Client)
+
+// WithHandler sets client handler which is called if Agent emits the Event
+// with TransactionID that is not currently registered by Client.
+// Useful for handling Data indications from TURN server.
+func WithHandler(h Handler) ClientOption {
+	return func(c *Client) {
+		c.handler = h
+	}
+}
+
+// WithRTO sets client RTO as defined in STUN RFC.
+func WithRTO(rto time.Duration) ClientOption {
+	return func(c *Client) {
+		c.rto = int64(rto)
+	}
+}
+
+// WithClock sets Clock of client, the source of current time.
+// Also clock is passed to default collector if set.
+func WithClock(clock Clock) ClientOption {
+	return func(c *Client) {
+		c.clock = clock
+	}
+}
+
+// WithTimeoutRate sets RTO timer minimum resolution.
+func WithTimeoutRate(d time.Duration) ClientOption {
+	return func(c *Client) {
+		c.rtoRate = d
+	}
+}
+
+// WithAgent sets client STUN agent.
+//
+// Defaults to agent implementation in current package,
+// see agent.go.
+func WithAgent(a ClientAgent) ClientOption {
+	return func(c *Client) {
+		c.a = a
+	}
+}
+
+// WithCollector rests client timeout collector, the implementation
+// of ticker which calls function on each tick.
+func WithCollector(coll Collector) ClientOption {
+	return func(c *Client) {
+		c.collector = coll
+	}
+}
+
+// WithNoConnClose prevents client from closing underlying connection when
+// the Close() method is called.
+var WithNoConnClose ClientOption = func(c *Client) {
+	c.closeConn = false
+}
+
+// WithNoRetransmit disables retransmissions and sets RTO to
+// defaultMaxAttempts * defaultRTO which will be effectively time out
+// if not set.
+//
+// Useful for TCP connections where transport handles RTO.
+func WithNoRetransmit(c *Client) {
+	c.maxAttempts = 0
+	if c.rto == 0 {
+		c.rto = defaultMaxAttempts * int64(defaultRTO)
+	}
+}
+
+const (
+	defaultTimeoutRate = time.Millisecond * 5
+	defaultRTO         = time.Millisecond * 300
+	defaultMaxAttempts = 7
+)
+
+// NewClient initializes new Client from provided options,
+// starting internal goroutines and using default options fields
+// if necessary. Call Close method after using Client to close conn and
+// release resources.
+//
+// The conn will be closed on Close call. Use WithNoConnClose option to
+// prevent that.
+//
+// Note that user should handle the protocol multiplexing, client does not
+// provide any API for it, so if you need to read application data, wrap the
+// connection with your (de-)multiplexer and pass the wrapper as conn.
+func NewClient(conn Connection, options ...ClientOption) (*Client, error) {
+	c := &Client{
+		close:       make(chan struct{}),
+		c:           conn,
+		clock:       systemClock,
+		rto:         int64(defaultRTO),
+		rtoRate:     defaultTimeoutRate,
+		t:           make(map[transactionID]*clientTransaction, 100),
+		maxAttempts: defaultMaxAttempts,
+		closeConn:   true,
+	}
+	for _, o := range options {
+		o(c)
+	}
+	if c.c == nil {
+		return nil, ErrNoConnection
+	}
+	if c.a == nil {
+		c.a = NewAgent(nil)
+	}
+	if err := c.a.SetHandler(c.handleAgentCallback); err != nil {
+		return nil, err
+	}
+	if c.collector == nil {
+		c.collector = &tickerCollector{
+			close: make(chan struct{}),
+			clock: c.clock,
+		}
+	}
+	if err := c.collector.Start(c.rtoRate, func(t time.Time) {
+		closedOrPanic(c.a.Collect(t))
+	}); err != nil {
+		return nil, err
+	}
+	c.wg.Add(1)
+	go c.readUntilClosed()
+	runtime.SetFinalizer(c, clientFinalizer)
+	return c, nil
+}
+
+func clientFinalizer(c *Client) {
+	if c == nil {
+		return
+	}
+	err := c.Close()
+	if err == ErrClientClosed {
+		return
+	}
+	if err == nil {
+		log.Println("client: called finalizer on non-closed client") // nolint
+		return
+	}
+	log.Println("client: called finalizer on non-closed client:", err) // nolint
+}
+
+// Connection wraps Reader, Writer and Closer interfaces.
+type Connection interface {
+	io.Reader
+	io.Writer
+	io.Closer
+}
+
+// ClientAgent is Agent implementation that is used by Client to
+// process transactions.
+type ClientAgent interface {
+	Process(*Message) error
+	Close() error
+	Start(id [TransactionIDSize]byte, deadline time.Time) error
+	Stop(id [TransactionIDSize]byte) error
+	Collect(time.Time) error
+	SetHandler(h Handler) error
+}
+
+// Client simulates "connection" to STUN server.
+type Client struct {
+	rto         int64 // time.Duration
+	a           ClientAgent
+	c           Connection
+	close       chan struct{}
+	rtoRate     time.Duration
+	maxAttempts int32
+	closed      bool
+	closeConn   bool // should call c.Close() while closing
+	wg          sync.WaitGroup
+	clock       Clock
+	handler     Handler
+	collector   Collector
+	t           map[transactionID]*clientTransaction
+
+	// mux guards closed and t
+	mux sync.RWMutex
+}
+
+// clientTransaction represents transaction in progress.
+// If transaction is succeed or failed, f will be called
+// provided by event.
+// Concurrent access is invalid.
+type clientTransaction struct {
+	id      transactionID
+	attempt int32
+	calls   int32
+	h       Handler
+	start   time.Time
+	rto     time.Duration
+	raw     []byte
+}
+
+func (t *clientTransaction) handle(e Event) {
+	if atomic.AddInt32(&t.calls, 1) == 1 {
+		t.h(e)
+	}
+}
+
+var clientTransactionPool = &sync.Pool{
+	New: func() interface{} {
+		return &clientTransaction{
+			raw: make([]byte, 1500),
+		}
+	},
+}
+
+func acquireClientTransaction() *clientTransaction {
+	return clientTransactionPool.Get().(*clientTransaction)
+}
+
+func putClientTransaction(t *clientTransaction) {
+	t.raw = t.raw[:0]
+	t.start = time.Time{}
+	t.attempt = 0
+	t.id = transactionID{}
+	clientTransactionPool.Put(t)
+}
+
+func (t *clientTransaction) nextTimeout(now time.Time) time.Time {
+	return now.Add(time.Duration(t.attempt+1) * t.rto)
+}
+
+// start registers transaction.
+//
+// Could return ErrClientClosed, ErrTransactionExists.
+func (c *Client) start(t *clientTransaction) error {
+	c.mux.Lock()
+	defer c.mux.Unlock()
+	if c.closed {
+		return ErrClientClosed
+	}
+	_, exists := c.t[t.id]
+	if exists {
+		return ErrTransactionExists
+	}
+	c.t[t.id] = t
+	return nil
+}
+
+// Clock abstracts the source of current time.
+type Clock interface {
+	Now() time.Time
+}
+
+type systemClockService struct{}
+
+func (systemClockService) Now() time.Time { return time.Now() }
+
+var systemClock = systemClockService{}
+
+// SetRTO sets current RTO value.
+func (c *Client) SetRTO(rto time.Duration) {
+	atomic.StoreInt64(&c.rto, int64(rto))
+}
+
+// StopErr occurs when Client fails to stop transaction while
+// processing error.
+type StopErr struct {
+	Err   error // value returned by Stop()
+	Cause error // error that caused Stop() call
+}
+
+func (e StopErr) Error() string {
+	return fmt.Sprintf("error while stopping due to %s: %s", sprintErr(e.Cause), sprintErr(e.Err))
+}
+
+// CloseErr indicates client close failure.
+type CloseErr struct {
+	AgentErr      error
+	ConnectionErr error
+}
+
+func sprintErr(err error) string {
+	if err == nil {
+		return "<nil>"
+	}
+	return err.Error()
+}
+
+func (c CloseErr) Error() string {
+	return fmt.Sprintf("failed to close: %s (connection), %s (agent)", sprintErr(c.ConnectionErr), sprintErr(c.AgentErr))
+}
+
+func (c *Client) readUntilClosed() {
+	defer c.wg.Done()
+	m := new(Message)
+	m.Raw = make([]byte, 1024)
+	for {
+		select {
+		case <-c.close:
+			return
+		default:
+		}
+		_, err := m.ReadFrom(c.c)
+		if err == nil {
+			if pErr := c.a.Process(m); pErr == ErrAgentClosed {
+				return
+			}
+		}
+	}
+}
+
+func closedOrPanic(err error) {
+	if err == nil || err == ErrAgentClosed {
+		return
+	}
+	panic(err) // nolint
+}
+
+type tickerCollector struct {
+	close chan struct{}
+	wg    sync.WaitGroup
+	clock Clock
+}
+
+// Collector calls function f with constant rate.
+//
+// The simple Collector is ticker which calls function on each tick.
+type Collector interface {
+	Start(rate time.Duration, f func(now time.Time)) error
+	Close() error
+}
+
+func (a *tickerCollector) Start(rate time.Duration, f func(now time.Time)) error {
+	t := time.NewTicker(rate)
+	a.wg.Add(1)
+	go func() {
+		defer a.wg.Done()
+		for {
+			select {
+			case <-a.close:
+				t.Stop()
+				return
+			case <-t.C:
+				f(a.clock.Now())
+			}
+		}
+	}()
+	return nil
+}
+
+func (a *tickerCollector) Close() error {
+	close(a.close)
+	a.wg.Wait()
+	return nil
+}
+
+// ErrClientClosed indicates that client is closed.
+var ErrClientClosed = errors.New("client is closed")
+
+// Close stops internal connection and agent, returning CloseErr on error.
+func (c *Client) Close() error {
+	if err := c.checkInit(); err != nil {
+		return err
+	}
+	c.mux.Lock()
+	if c.closed {
+		c.mux.Unlock()
+		return ErrClientClosed
+	}
+	c.closed = true
+	c.mux.Unlock()
+	if closeErr := c.collector.Close(); closeErr != nil {
+		return closeErr
+	}
+	var connErr error
+	agentErr := c.a.Close()
+	if c.closeConn {
+		connErr = c.c.Close()
+	}
+	close(c.close)
+	c.wg.Wait()
+	if agentErr == nil && connErr == nil {
+		return nil
+	}
+	return CloseErr{
+		AgentErr:      agentErr,
+		ConnectionErr: connErr,
+	}
+}
+
+// Indicate sends indication m to server. Shorthand to Start call
+// with zero deadline and callback.
+func (c *Client) Indicate(m *Message) error {
+	return c.Start(m, nil)
+}
+
+// callbackWaitHandler blocks on wait() call until callback is called.
+type callbackWaitHandler struct {
+	handler   Handler
+	callback  func(event Event)
+	cond      *sync.Cond
+	processed bool
+}
+
+func (s *callbackWaitHandler) HandleEvent(e Event) {
+	s.cond.L.Lock()
+	if s.callback == nil {
+		panic("s.callback is nil") // nolint
+	}
+	s.callback(e)
+	s.processed = true
+	s.cond.Broadcast()
+	s.cond.L.Unlock()
+}
+
+func (s *callbackWaitHandler) wait() {
+	s.cond.L.Lock()
+	for !s.processed {
+		s.cond.Wait()
+	}
+	s.processed = false
+	s.callback = nil
+	s.cond.L.Unlock()
+}
+
+func (s *callbackWaitHandler) setCallback(f func(event Event)) {
+	if f == nil {
+		panic("f is nil") // nolint
+	}
+	s.cond.L.Lock()
+	s.callback = f
+	if s.handler == nil {
+		s.handler = s.HandleEvent
+	}
+	s.cond.L.Unlock()
+}
+
+var callbackWaitHandlerPool = sync.Pool{
+	New: func() interface{} {
+		return &callbackWaitHandler{
+			cond: sync.NewCond(new(sync.Mutex)),
+		}
+	},
+}
+
+// ErrClientNotInitialized means that client connection or agent is nil.
+var ErrClientNotInitialized = errors.New("client not initialized")
+
+func (c *Client) checkInit() error {
+	if c == nil || c.c == nil || c.a == nil || c.close == nil {
+		return ErrClientNotInitialized
+	}
+	return nil
+}
+
+// Do is Start wrapper that waits until callback is called. If no callback
+// provided, Indicate is called instead.
+//
+// Do has cpu overhead due to blocking, see BenchmarkClient_Do.
+// Use Start method for less overhead.
+func (c *Client) Do(m *Message, f func(Event)) error {
+	if err := c.checkInit(); err != nil {
+		return err
+	}
+	if f == nil {
+		return c.Indicate(m)
+	}
+	h := callbackWaitHandlerPool.Get().(*callbackWaitHandler)
+	h.setCallback(f)
+	defer func() {
+		callbackWaitHandlerPool.Put(h)
+	}()
+	if err := c.Start(m, h.handler); err != nil {
+		return err
+	}
+	h.wait()
+	return nil
+}
+
+func (c *Client) delete(id transactionID) {
+	c.mux.Lock()
+	if c.t != nil {
+		delete(c.t, id)
+	}
+	c.mux.Unlock()
+}
+
+type buffer struct {
+	buf []byte
+}
+
+var bufferPool = &sync.Pool{
+	New: func() interface{} {
+		return &buffer{buf: make([]byte, 2048)}
+	},
+}
+
+func (c *Client) handleAgentCallback(e Event) {
+	c.mux.Lock()
+	if c.closed {
+		c.mux.Unlock()
+		return
+	}
+	t, found := c.t[e.TransactionID]
+	if found {
+		delete(c.t, t.id)
+	}
+	c.mux.Unlock()
+	if !found {
+		if c.handler != nil && e.Error != ErrTransactionStopped {
+			c.handler(e)
+		}
+		// Ignoring.
+		return
+	}
+	if atomic.LoadInt32(&c.maxAttempts) <= t.attempt || e.Error == nil {
+		// Transaction completed.
+		t.handle(e)
+		putClientTransaction(t)
+		return
+	}
+	// Doing re-transmission.
+	t.attempt++
+	b := bufferPool.Get().(*buffer)
+	b.buf = b.buf[:copy(b.buf[:cap(b.buf)], t.raw)]
+	defer bufferPool.Put(b)
+	var (
+		now     = c.clock.Now()
+		timeOut = t.nextTimeout(now)
+		id      = t.id
+	)
+	// Starting client transaction.
+	if startErr := c.start(t); startErr != nil {
+		c.delete(id)
+		e.Error = startErr
+		t.handle(e)
+		putClientTransaction(t)
+		return
+	}
+	// Starting agent transaction.
+	if startErr := c.a.Start(id, timeOut); startErr != nil {
+		c.delete(id)
+		e.Error = startErr
+		t.handle(e)
+		putClientTransaction(t)
+		return
+	}
+	// Writing message to connection again.
+	_, writeErr := c.c.Write(b.buf)
+	if writeErr != nil {
+		c.delete(id)
+		e.Error = writeErr
+		// Stopping agent transaction instead of waiting until it's deadline.
+		// This will call handleAgentCallback with "ErrTransactionStopped" error
+		// which will be ignored.
+		if stopErr := c.a.Stop(id); stopErr != nil {
+			// Failed to stop agent transaction. Wrapping the error in StopError.
+			e.Error = StopErr{
+				Err:   stopErr,
+				Cause: writeErr,
+			}
+		}
+		t.handle(e)
+		putClientTransaction(t)
+		return
+	}
+}
+
+// Start starts transaction (if h set) and writes message to server, handler
+// is called asynchronously.
+func (c *Client) Start(m *Message, h Handler) error {
+	if err := c.checkInit(); err != nil {
+		return err
+	}
+	c.mux.RLock()
+	closed := c.closed
+	c.mux.RUnlock()
+	if closed {
+		return ErrClientClosed
+	}
+	if h != nil {
+		// Starting transaction only if h is set. Useful for indications.
+		t := acquireClientTransaction()
+		t.id = m.TransactionID
+		t.start = c.clock.Now()
+		t.h = h
+		t.rto = time.Duration(atomic.LoadInt64(&c.rto))
+		t.attempt = 0
+		t.raw = append(t.raw[:0], m.Raw...)
+		t.calls = 0
+		d := t.nextTimeout(t.start)
+		if err := c.start(t); err != nil {
+			return err
+		}
+		if err := c.a.Start(m.TransactionID, d); err != nil {
+			return err
+		}
+	}
+	_, err := m.WriteTo(c.c)
+	if err != nil && h != nil {
+		c.delete(m.TransactionID)
+		// Stopping transaction instead of waiting until deadline.
+		if stopErr := c.a.Stop(m.TransactionID); stopErr != nil {
+			return StopErr{
+				Err:   stopErr,
+				Cause: err,
+			}
+		}
+	}
+	return err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/errorcode.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/errorcode.go
new file mode 100644
index 000000000..8095048cd
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/errorcode.go
@@ -0,0 +1,158 @@
+package stun
+
+import (
+	"errors"
+	"fmt"
+	"io"
+)
+
+// ErrorCodeAttribute represents ERROR-CODE attribute.
+//
+// RFC 5389 Section 15.6
+type ErrorCodeAttribute struct {
+	Code   ErrorCode
+	Reason []byte
+}
+
+func (c ErrorCodeAttribute) String() string {
+	return fmt.Sprintf("%d: %s", c.Code, c.Reason)
+}
+
+// constants for ERROR-CODE encoding.
+const (
+	errorCodeReasonStart = 4
+	errorCodeClassByte   = 2
+	errorCodeNumberByte  = 3
+	errorCodeReasonMaxB  = 763
+	errorCodeModulo      = 100
+)
+
+// AddTo adds ERROR-CODE to m.
+func (c ErrorCodeAttribute) AddTo(m *Message) error {
+	value := make([]byte, 0, errorCodeReasonMaxB)
+	if err := CheckOverflow(AttrErrorCode,
+		len(c.Reason)+errorCodeReasonStart,
+		errorCodeReasonMaxB+errorCodeReasonStart,
+	); err != nil {
+		return err
+	}
+	value = value[:errorCodeReasonStart+len(c.Reason)]
+	number := byte(c.Code % errorCodeModulo) // error code modulo 100
+	class := byte(c.Code / errorCodeModulo)  // hundred digit
+	value[errorCodeClassByte] = class
+	value[errorCodeNumberByte] = number
+	copy(value[errorCodeReasonStart:], c.Reason)
+	m.Add(AttrErrorCode, value)
+	return nil
+}
+
+// GetFrom decodes ERROR-CODE from m. Reason is valid until m.Raw is valid.
+func (c *ErrorCodeAttribute) GetFrom(m *Message) error {
+	v, err := m.Get(AttrErrorCode)
+	if err != nil {
+		return err
+	}
+	if len(v) < errorCodeReasonStart {
+		return io.ErrUnexpectedEOF
+	}
+	var (
+		class  = uint16(v[errorCodeClassByte])
+		number = uint16(v[errorCodeNumberByte])
+		code   = int(class*errorCodeModulo + number)
+	)
+	c.Code = ErrorCode(code)
+	c.Reason = v[errorCodeReasonStart:]
+	return nil
+}
+
+// ErrorCode is code for ERROR-CODE attribute.
+type ErrorCode int
+
+// ErrNoDefaultReason means that default reason for provided error code
+// is not defined in RFC.
+var ErrNoDefaultReason = errors.New("no default reason for ErrorCode")
+
+// AddTo adds ERROR-CODE with default reason to m. If there
+// is no default reason, returns ErrNoDefaultReason.
+func (c ErrorCode) AddTo(m *Message) error {
+	reason := errorReasons[c]
+	if reason == nil {
+		return ErrNoDefaultReason
+	}
+	a := &ErrorCodeAttribute{
+		Code:   c,
+		Reason: reason,
+	}
+	return a.AddTo(m)
+}
+
+// Possible error codes.
+const (
+	CodeTryAlternate     ErrorCode = 300
+	CodeBadRequest       ErrorCode = 400
+	CodeUnauthorized     ErrorCode = 401
+	CodeUnknownAttribute ErrorCode = 420
+	CodeStaleNonce       ErrorCode = 438
+	CodeRoleConflict     ErrorCode = 487
+	CodeServerError      ErrorCode = 500
+)
+
+// DEPRECATED constants.
+const (
+	// DEPRECATED, use CodeUnauthorized.
+	CodeUnauthorised = CodeUnauthorized
+)
+
+// Error codes from RFC 5766.
+//
+// RFC 5766 Section 15
+const (
+	CodeForbidden             ErrorCode = 403 // Forbidden
+	CodeAllocMismatch         ErrorCode = 437 // Allocation Mismatch
+	CodeWrongCredentials      ErrorCode = 441 // Wrong Credentials
+	CodeUnsupportedTransProto ErrorCode = 442 // Unsupported Transport Protocol
+	CodeAllocQuotaReached     ErrorCode = 486 // Allocation Quota Reached
+	CodeInsufficientCapacity  ErrorCode = 508 // Insufficient Capacity
+)
+
+// Error codes from RFC 6062.
+//
+// RFC 6062 Section 6.3
+const (
+	CodeConnAlreadyExists    ErrorCode = 446
+	CodeConnTimeoutOrFailure ErrorCode = 447
+)
+
+// Error codes from RFC 6156.
+//
+// RFC 6156 Section 10.2
+const (
+	CodeAddrFamilyNotSupported ErrorCode = 440 // Address Family not Supported
+	CodePeerAddrFamilyMismatch ErrorCode = 443 // Peer Address Family Mismatch
+)
+
+var errorReasons = map[ErrorCode][]byte{
+	CodeTryAlternate:     []byte("Try Alternate"),
+	CodeBadRequest:       []byte("Bad Request"),
+	CodeUnauthorized:     []byte("Unauthorized"),
+	CodeUnknownAttribute: []byte("Unknown Attribute"),
+	CodeStaleNonce:       []byte("Stale Nonce"),
+	CodeServerError:      []byte("Server Error"),
+	CodeRoleConflict:     []byte("Role Conflict"),
+
+	// RFC 5766.
+	CodeForbidden:             []byte("Forbidden"),
+	CodeAllocMismatch:         []byte("Allocation Mismatch"),
+	CodeWrongCredentials:      []byte("Wrong Credentials"),
+	CodeUnsupportedTransProto: []byte("Unsupported Transport Protocol"),
+	CodeAllocQuotaReached:     []byte("Allocation Quota Reached"),
+	CodeInsufficientCapacity:  []byte("Insufficient Capacity"),
+
+	// RFC 6062.
+	CodeConnAlreadyExists:    []byte("Connection Already Exists"),
+	CodeConnTimeoutOrFailure: []byte("Connection Timeout or Failure"),
+
+	// RFC 6156.
+	CodeAddrFamilyNotSupported: []byte("Address Family not Supported"),
+	CodePeerAddrFamilyMismatch: []byte("Peer Address Family Mismatch"),
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/errors.go
new file mode 100644
index 000000000..029c9e426
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/errors.go
@@ -0,0 +1,62 @@
+package stun
+
+import "errors"
+
+// DecodeErr records an error and place when it is occurred.
+type DecodeErr struct {
+	Place   DecodeErrPlace
+	Message string
+}
+
+// IsInvalidCookie returns true if error means that magic cookie
+// value is invalid.
+func (e DecodeErr) IsInvalidCookie() bool {
+	return e.Place == DecodeErrPlace{"message", "cookie"}
+}
+
+// IsPlaceParent reports if error place parent is p.
+func (e DecodeErr) IsPlaceParent(p string) bool {
+	return e.Place.Parent == p
+}
+
+// IsPlaceChildren reports if error place children is c.
+func (e DecodeErr) IsPlaceChildren(c string) bool {
+	return e.Place.Children == c
+}
+
+// IsPlace reports if error place is p.
+func (e DecodeErr) IsPlace(p DecodeErrPlace) bool {
+	return e.Place == p
+}
+
+// DecodeErrPlace records a place where error is occurred.
+type DecodeErrPlace struct {
+	Parent   string
+	Children string
+}
+
+func (p DecodeErrPlace) String() string {
+	return p.Parent + "/" + p.Children
+}
+
+func (e DecodeErr) Error() string {
+	return "BadFormat for " + e.Place.String() + ": " + e.Message
+}
+
+func newDecodeErr(parent, children, message string) *DecodeErr {
+	return &DecodeErr{
+		Place:   DecodeErrPlace{Parent: parent, Children: children},
+		Message: message,
+	}
+}
+
+// TODO(ar): rewrite errors to be more precise.
+func newAttrDecodeErr(children, message string) *DecodeErr {
+	return newDecodeErr("attribute", children, message)
+}
+
+// ErrAttributeSizeInvalid means that decoded attribute size is invalid.
+var ErrAttributeSizeInvalid = errors.New("attribute size is invalid")
+
+// ErrAttributeSizeOverflow means that decoded attribute size is too big.
+var ErrAttributeSizeOverflow = errors.New("attribute size overflow")
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/fingerprint.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/fingerprint.go
new file mode 100644
index 000000000..aef80a206
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/fingerprint.go
@@ -0,0 +1,67 @@
+package stun
+
+import (
+	"errors"
+	"hash/crc32"
+)
+
+// FingerprintAttr represents FINGERPRINT attribute.
+//
+// RFC 5389 Section 15.5
+type FingerprintAttr struct{}
+
+// ErrFingerprintMismatch means that computed fingerprint differs from expected.
+var ErrFingerprintMismatch = errors.New("fingerprint check failed")
+
+// Fingerprint is shorthand for FingerprintAttr.
+//
+// Example:
+//
+//  m := New()
+//  Fingerprint.AddTo(m)
+var Fingerprint FingerprintAttr
+
+const (
+	fingerprintXORValue uint32 = 0x5354554e //nolint:staticcheck
+	fingerprintSize            = 4          // 32 bit
+)
+
+// FingerprintValue returns CRC-32 of b XOR-ed by 0x5354554e.
+//
+// The value of the attribute is computed as the CRC-32 of the STUN message
+// up to (but excluding) the FINGERPRINT attribute itself, XOR'ed with
+// the 32-bit value 0x5354554e (the XOR helps in cases where an
+// application packet is also using CRC-32 in it).
+func FingerprintValue(b []byte) uint32 {
+	return crc32.ChecksumIEEE(b) ^ fingerprintXORValue // XOR
+}
+
+// AddTo adds fingerprint to message.
+func (FingerprintAttr) AddTo(m *Message) error {
+	l := m.Length
+	// length in header should include size of fingerprint attribute
+	m.Length += fingerprintSize + attributeHeaderSize // increasing length
+	m.WriteLength()                                   // writing Length to Raw
+	b := make([]byte, fingerprintSize)
+	val := FingerprintValue(m.Raw)
+	bin.PutUint32(b, val)
+	m.Length = l
+	m.Add(AttrFingerprint, b)
+	return nil
+}
+
+// Check reads fingerprint value from m and checks it, returning error if any.
+// Can return *AttrLengthErr, ErrAttributeNotFound, and *CRCMismatch.
+func (FingerprintAttr) Check(m *Message) error {
+	b, err := m.Get(AttrFingerprint)
+	if err != nil {
+		return err
+	}
+	if err = CheckSize(AttrFingerprint, len(b), fingerprintSize); err != nil {
+		return err
+	}
+	val := bin.Uint32(b)
+	attrStart := len(m.Raw) - (fingerprintSize + attributeHeaderSize)
+	expected := FingerprintValue(m.Raw[:attrStart])
+	return checkFingerprint(val, expected)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/fingerprint_debug.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/fingerprint_debug.go
new file mode 100644
index 000000000..6da074cd8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/fingerprint_debug.go
@@ -0,0 +1,18 @@
+// +build debug
+
+package stun
+
+import "fmt"
+
+// CRCMismatch represents CRC check error.
+type CRCMismatch struct {
+	Expected uint32
+	Actual   uint32
+}
+
+func (m CRCMismatch) Error() string {
+	return fmt.Sprintf("CRC mismatch: %x (expected) != %x (actual)",
+		m.Expected,
+		m.Actual,
+	)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/fuzz.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/fuzz.go
new file mode 100644
index 000000000..debfa8d1c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/fuzz.go
@@ -0,0 +1,140 @@
+// +build gofuzz
+
+package stun
+
+import (
+	"encoding/binary"
+	"fmt"
+)
+
+var (
+	m = New()
+)
+
+// FuzzMessage is go-fuzz endpoint for message.
+func FuzzMessage(data []byte) int {
+	m.Reset()
+	// fuzzer dont know about cookies
+	binary.BigEndian.PutUint32(data[4:8], magicCookie)
+	// trying to read data as message
+	if _, err := m.Write(data); err != nil {
+		return 0
+	}
+	m2 := New()
+	if _, err := m2.Write(m.Raw); err != nil {
+		panic(err) // nolint
+	}
+	if m2.TransactionID != m.TransactionID {
+		panic("transaction ID mismatch") // nolint
+	}
+	if m2.Type != m.Type {
+		panic("type missmatch") // nolint
+	}
+	if len(m2.Attributes) != len(m.Attributes) {
+		panic("attributes length missmatch") // nolint
+	}
+	return 1
+}
+
+// FuzzType is go-fuzz endpoint for message type.
+func FuzzType(data []byte) int {
+	t := MessageType{}
+	vt, _ := binary.Uvarint(data)
+	v := uint16(vt) & 0x1fff // first 3 bits are empty
+	t.ReadValue(v)
+	v2 := t.Value()
+	if v != v2 {
+		panic("v != v2") // nolint
+	}
+	t2 := MessageType{}
+	t2.ReadValue(v2)
+	if t2 != t {
+		panic("t2 != t") // nolint
+	}
+	return 0
+}
+
+type attr interface {
+	Getter
+	Setter
+}
+
+type attrs []struct {
+	g attr
+	t AttrType
+}
+
+func (a attrs) pick(v byte) struct {
+	g attr
+	t AttrType
+} {
+	idx := int(v) % len(a)
+	return a[idx]
+}
+
+func FuzzSetters(data []byte) int {
+	var (
+		m1 = &Message{
+			Raw: make([]byte, 0, 2048),
+		}
+		m2 = &Message{
+			Raw: make([]byte, 0, 2048),
+		}
+		m3 = &Message{
+			Raw: make([]byte, 0, 2048),
+		}
+	)
+	attributes := attrs{
+		{new(Realm), AttrRealm},
+		{new(XORMappedAddress), AttrXORMappedAddress},
+		{new(Nonce), AttrNonce},
+		{new(Software), AttrSoftware},
+		{new(AlternateServer), AttrAlternateServer},
+		{new(ErrorCodeAttribute), AttrErrorCode},
+		{new(UnknownAttributes), AttrUnknownAttributes},
+		{new(Username), AttrUsername},
+		{new(MappedAddress), AttrMappedAddress},
+		{new(Realm), AttrRealm},
+	}
+	var firstByte = byte(0)
+	if len(data) > 0 {
+		firstByte = data[0]
+	}
+	a := attributes.pick(firstByte)
+	value := data
+	if len(data) > 1 {
+		value = value[1:]
+	}
+	m1.WriteHeader()
+	m1.Add(a.t, value)
+	err := a.g.GetFrom(m1)
+	if err == ErrAttributeNotFound {
+		fmt.Println("unexpected 404") // nolint
+		panic(err)                    // nolint
+	}
+	if err != nil {
+		return 1
+	}
+	m2.WriteHeader()
+	if err = a.g.AddTo(m2); err != nil {
+		// We allow decoding some text attributes
+		// when their length is too big, but
+		// not encoding.
+		if !IsAttrSizeOverflow(err) {
+			panic(err) // nolint
+		}
+		return 1
+	}
+	m3.WriteHeader()
+	v, err := m2.Get(a.t)
+	if err != nil {
+		panic(err) // nolint
+	}
+	m3.Add(a.t, v)
+
+	if !m2.Equal(m3) {
+		fmt.Println(m2, "not equal", m3) // nolint
+		panic("not equal")               // nolint
+	}
+	return 1
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/go.mod
new file mode 100644
index 000000000..72b56716f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/go.mod
@@ -0,0 +1,3 @@
+module github.com/pion/stun
+
+go 1.12
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/go.sum b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/go.sum
new file mode 100644
index 000000000..e69de29bb
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/go.test.sh b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/go.test.sh
new file mode 100644
index 000000000..25234e4b3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/go.test.sh
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+
+set -e
+touch coverage.txt
+
+# test fuzz inputs
+go test -tags gofuzz -run TestFuzz -v .
+
+# quick-test without -race
+go test ./...
+
+# test with "debug" tag
+go test -tags debug ./...
+
+# test concurrency
+go test -race -cpu=1,2,4 -run TestClient_DoConcurrent
+
+for d in $(go list ./... | grep -v vendor); do
+    go test -race -coverprofile=profile.out -covermode=atomic "$d"
+    if [[ -f profile.out ]]; then
+        cat profile.out >> coverage.txt
+        rm profile.out
+    fi
+done
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/helpers.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/helpers.go
new file mode 100644
index 000000000..158a51dd4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/helpers.go
@@ -0,0 +1,105 @@
+package stun
+
+// Interfaces that are implemented by message attributes, shorthands for them,
+// or helpers for message fields as type or transaction id.
+type (
+	// Setter sets *Message attribute.
+	Setter interface {
+		AddTo(m *Message) error
+	}
+	// Getter parses attribute from *Message.
+	Getter interface {
+		GetFrom(m *Message) error
+	}
+	// Checker checks *Message attribute.
+	Checker interface {
+		Check(m *Message) error
+	}
+)
+
+// Build resets message and applies setters to it in batch, returning on
+// first error. To prevent allocations, pass pointers to values.
+//
+// Example:
+//  var (
+//  	t        = BindingRequest
+//  	username = NewUsername("username")
+//  	nonce    = NewNonce("nonce")
+//  	realm    = NewRealm("example.org")
+//  )
+//  m := new(Message)
+//  m.Build(t, username, nonce, realm)     // 4 allocations
+//  m.Build(&t, &username, &nonce, &realm) // 0 allocations
+//
+// See BenchmarkBuildOverhead.
+func (m *Message) Build(setters ...Setter) error {
+	m.Reset()
+	m.WriteHeader()
+	for _, s := range setters {
+		if err := s.AddTo(m); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+// Check applies checkers to message in batch, returning on first error.
+func (m *Message) Check(checkers ...Checker) error {
+	for _, c := range checkers {
+		if err := c.Check(m); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+// Parse applies getters to message in batch, returning on first error.
+func (m *Message) Parse(getters ...Getter) error {
+	for _, c := range getters {
+		if err := c.GetFrom(m); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+// MustBuild wraps Build call and panics on error.
+func MustBuild(setters ...Setter) *Message {
+	m, err := Build(setters...)
+	if err != nil {
+		panic(err) // nolint
+	}
+	return m
+}
+
+// Build wraps Message.Build method.
+func Build(setters ...Setter) (*Message, error) {
+	m := new(Message)
+	if err := m.Build(setters...); err != nil {
+		return nil, err
+	}
+	return m, nil
+}
+
+// ForEach is helper that iterates over message attributes allowing to call
+// Getter in f callback to get all attributes of type t and returning on first
+// f error.
+//
+// The m.Get method inside f will be returning next attribute on each f call.
+// Does not error if there are no results.
+func (m *Message) ForEach(t AttrType, f func(m *Message) error) error {
+	attrs := m.Attributes
+	defer func() {
+		m.Attributes = attrs
+	}()
+	for i, a := range attrs {
+		if a.Type != t {
+			continue
+		}
+		m.Attributes = attrs[i:]
+		if err := f(m); err != nil {
+			return err
+		}
+	}
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/integrity.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/integrity.go
new file mode 100644
index 000000000..39b0d5073
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/integrity.go
@@ -0,0 +1,124 @@
+package stun
+
+import (
+	"crypto/md5"  // #nosec
+	"crypto/sha1" // #nosec
+	"errors"
+	"fmt"
+	"strings"
+
+	"github.com/pion/stun/internal/hmac"
+)
+
+// separator for credentials.
+const credentialsSep = ":"
+
+// NewLongTermIntegrity returns new MessageIntegrity with key for long-term
+// credentials. Password, username, and realm must be SASL-prepared.
+func NewLongTermIntegrity(username, realm, password string) MessageIntegrity {
+	k := strings.Join([]string{username, realm, password}, credentialsSep)
+	// #nosec
+	h := md5.New()
+	fmt.Fprint(h, k)
+	return MessageIntegrity(h.Sum(nil))
+}
+
+// NewShortTermIntegrity returns new MessageIntegrity with key for short-term
+// credentials. Password must be SASL-prepared.
+func NewShortTermIntegrity(password string) MessageIntegrity {
+	return MessageIntegrity(password)
+}
+
+// MessageIntegrity represents MESSAGE-INTEGRITY attribute.
+//
+// AddTo and Check methods are using zero-allocation version of hmac, see
+// newHMAC function and internal/hmac/pool.go.
+//
+// RFC 5389 Section 15.4
+type MessageIntegrity []byte
+
+func newHMAC(key, message, buf []byte) []byte {
+	mac := hmac.AcquireSHA1(key)
+	writeOrPanic(mac, message)
+	defer hmac.PutSHA1(mac)
+	return mac.Sum(buf)
+}
+
+func (i MessageIntegrity) String() string {
+	return fmt.Sprintf("KEY: 0x%x", []byte(i))
+}
+
+const messageIntegritySize = 20
+
+// ErrFingerprintBeforeIntegrity means that FINGERPRINT attribute is already in
+// message, so MESSAGE-INTEGRITY attribute cannot be added.
+var ErrFingerprintBeforeIntegrity = errors.New("FINGERPRINT before MESSAGE-INTEGRITY attribute")
+
+// AddTo adds MESSAGE-INTEGRITY attribute to message.
+//
+// CPU costly, see BenchmarkMessageIntegrity_AddTo.
+func (i MessageIntegrity) AddTo(m *Message) error {
+	for _, a := range m.Attributes {
+		// Message should not contain FINGERPRINT attribute
+		// before MESSAGE-INTEGRITY.
+		if a.Type == AttrFingerprint {
+			return ErrFingerprintBeforeIntegrity
+		}
+	}
+	// The text used as input to HMAC is the STUN message,
+	// including the header, up to and including the attribute preceding the
+	// MESSAGE-INTEGRITY attribute.
+	length := m.Length
+	// Adjusting m.Length to contain MESSAGE-INTEGRITY TLV.
+	m.Length += messageIntegritySize + attributeHeaderSize
+	m.WriteLength()                            // writing length to m.Raw
+	v := newHMAC(i, m.Raw, m.Raw[len(m.Raw):]) // calculating HMAC for adjusted m.Raw
+	m.Length = length                          // changing m.Length back
+
+	// Copy hmac value to temporary variable to protect it from resetting
+	// while processing m.Add call.
+	vBuf := make([]byte, sha1.Size)
+	copy(vBuf, v)
+
+	m.Add(AttrMessageIntegrity, vBuf)
+	return nil
+}
+
+// ErrIntegrityMismatch means that computed HMAC differs from expected.
+var ErrIntegrityMismatch = errors.New("integrity check failed")
+
+// Check checks MESSAGE-INTEGRITY attribute.
+//
+// CPU costly, see BenchmarkMessageIntegrity_Check.
+func (i MessageIntegrity) Check(m *Message) error {
+	v, err := m.Get(AttrMessageIntegrity)
+	if err != nil {
+		return err
+	}
+
+	// Adjusting length in header to match m.Raw that was
+	// used when computing HMAC.
+	var (
+		length         = m.Length
+		afterIntegrity = false
+		sizeReduced    int
+	)
+	for _, a := range m.Attributes {
+		if afterIntegrity {
+			sizeReduced += nearestPaddedValueLength(int(a.Length))
+			sizeReduced += attributeHeaderSize
+		}
+		if a.Type == AttrMessageIntegrity {
+			afterIntegrity = true
+		}
+	}
+	m.Length -= uint32(sizeReduced)
+	m.WriteLength()
+	// startOfHMAC should be first byte of integrity attribute.
+	startOfHMAC := messageHeaderSize + m.Length - (attributeHeaderSize + messageIntegritySize)
+	b := m.Raw[:startOfHMAC] // data before integrity attribute
+	expected := newHMAC(i, b, m.Raw[len(m.Raw):])
+	m.Length = length
+	m.WriteLength() // writing length back
+	return checkHMAC(v, expected)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/integrity_debug.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/integrity_debug.go
new file mode 100644
index 000000000..6b8a30307
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/integrity_debug.go
@@ -0,0 +1,18 @@
+// +build debug
+
+package stun
+
+import "fmt"
+
+// IntegrityErr occurs when computed HMAC differs from expected.
+type IntegrityErr struct {
+	Expected []byte
+	Actual   []byte
+}
+
+func (i *IntegrityErr) Error() string {
+	return fmt.Sprintf(
+		"Integrity check failed: 0x%x (expected) !- 0x%x (actual)",
+		i.Expected, i.Actual,
+	)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/internal/hmac/hmac.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/internal/hmac/hmac.go
new file mode 100644
index 000000000..801ece67a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/internal/hmac/hmac.go
@@ -0,0 +1,101 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+/*
+Package hmac implements the Keyed-Hash Message Authentication Code (HMAC) as
+defined in U.S. Federal Information Processing Standards Publication 198.
+An HMAC is a cryptographic hash that uses a key to sign a message.
+The receiver verifies the hash by recomputing it using the same key.
+
+Receivers should be careful to use Equal to compare MACs in order to avoid
+timing side-channels:
+
+	// ValidMAC reports whether messageMAC is a valid HMAC tag for message.
+	func ValidMAC(message, messageMAC, key []byte) bool {
+		mac := hmac.New(sha256.New, key)
+		mac.Write(message)
+		expectedMAC := mac.Sum(nil)
+		return hmac.Equal(messageMAC, expectedMAC)
+	}
+*/
+package hmac
+
+import (
+	"crypto/subtle"
+	"hash"
+)
+
+// FIPS 198-1:
+// https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf
+
+// key is zero padded to the block size of the hash function
+// ipad = 0x36 byte repeated for key length
+// opad = 0x5c byte repeated for key length
+// hmac = H([key ^ opad] H([key ^ ipad] text))
+
+type hmac struct {
+	size         int
+	blocksize    int
+	opad, ipad   []byte
+	outer, inner hash.Hash
+}
+
+func (h *hmac) Sum(in []byte) []byte {
+	origLen := len(in)
+	in = h.inner.Sum(in)
+	h.outer.Reset()
+	h.outer.Write(h.opad)
+	h.outer.Write(in[origLen:])
+	return h.outer.Sum(in[:origLen])
+}
+
+func (h *hmac) Write(p []byte) (n int, err error) {
+	return h.inner.Write(p)
+}
+
+func (h *hmac) Size() int { return h.size }
+
+func (h *hmac) BlockSize() int { return h.blocksize }
+
+func (h *hmac) Reset() {
+	h.inner.Reset()
+	h.inner.Write(h.ipad)
+}
+
+// New returns a new HMAC hash using the given hash.Hash type and key.
+// Note that unlike other hash implementations in the standard library,
+// the returned Hash does not implement encoding.BinaryMarshaler
+// or encoding.BinaryUnmarshaler.
+func New(h func() hash.Hash, key []byte) hash.Hash {
+	hm := new(hmac)
+	hm.outer = h()
+	hm.inner = h()
+	hm.size = hm.inner.Size()
+	hm.blocksize = hm.inner.BlockSize()
+	hm.ipad = make([]byte, hm.blocksize)
+	hm.opad = make([]byte, hm.blocksize)
+	if len(key) > hm.blocksize {
+		// If key is too big, hash it.
+		hm.outer.Write(key)
+		key = hm.outer.Sum(nil)
+	}
+	copy(hm.ipad, key)
+	copy(hm.opad, key)
+	for i := range hm.ipad {
+		hm.ipad[i] ^= 0x36
+	}
+	for i := range hm.opad {
+		hm.opad[i] ^= 0x5c
+	}
+	hm.inner.Write(hm.ipad)
+	return hm
+}
+
+// Equal compares two MACs for equality without leaking timing information.
+func Equal(mac1, mac2 []byte) bool {
+	// We don't have to be constant time if the lengths of the MACs are
+	// different as that suggests that a completely different hash function
+	// was used.
+	return subtle.ConstantTimeCompare(mac1, mac2) == 1
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/internal/hmac/pool.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/internal/hmac/pool.go
new file mode 100644
index 000000000..4db61e540
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/internal/hmac/pool.go
@@ -0,0 +1,92 @@
+package hmac
+
+import (
+	"crypto/sha1"
+	"crypto/sha256"
+	"hash"
+	"sync"
+)
+
+// setZeroes sets all bytes from b to zeroes.
+//
+// See https://github.com/golang/go/issues/5373
+func setZeroes(b []byte) {
+	for i := range b {
+		b[i] = 0
+	}
+}
+
+func (h *hmac) resetTo(key []byte) {
+	h.outer.Reset()
+	h.inner.Reset()
+	setZeroes(h.ipad)
+	setZeroes(h.opad)
+	if len(key) > h.blocksize {
+		// If key is too big, hash it.
+		h.outer.Write(key)
+		key = h.outer.Sum(nil)
+	}
+	copy(h.ipad, key)
+	copy(h.opad, key)
+	for i := range h.ipad {
+		h.ipad[i] ^= 0x36
+	}
+	for i := range h.opad {
+		h.opad[i] ^= 0x5c
+	}
+	h.inner.Write(h.ipad)
+}
+
+var hmacSHA1Pool = &sync.Pool{
+	New: func() interface{} {
+		h := New(sha1.New, make([]byte, sha1.BlockSize))
+		return h
+	},
+}
+
+// AcquireSHA1 returns new HMAC from pool.
+func AcquireSHA1(key []byte) hash.Hash {
+	h := hmacSHA1Pool.Get().(*hmac)
+	assertHMACSize(h, sha1.Size, sha1.BlockSize)
+	h.resetTo(key)
+	return h
+}
+
+// PutSHA1 puts h to pool.
+func PutSHA1(h hash.Hash) {
+	hm := h.(*hmac)
+	assertHMACSize(hm, sha1.Size, sha1.BlockSize)
+	hmacSHA1Pool.Put(hm)
+}
+
+var hmacSHA256Pool = &sync.Pool{
+	New: func() interface{} {
+		h := New(sha256.New, make([]byte, sha256.BlockSize))
+		return h
+	},
+}
+
+// AcquireSHA256 returns new HMAC from SHA256 pool.
+func AcquireSHA256(key []byte) hash.Hash {
+	h := hmacSHA256Pool.Get().(*hmac)
+	assertHMACSize(h, sha256.Size, sha256.BlockSize)
+	h.resetTo(key)
+	return h
+}
+
+// PutSHA256 puts h to SHA256 pool.
+func PutSHA256(h hash.Hash) {
+	hm := h.(*hmac)
+	assertHMACSize(hm, sha256.Size, sha256.BlockSize)
+	hmacSHA256Pool.Put(hm)
+}
+
+// assertHMACSize panics if h.size != size or h.blocksize != blocksize.
+//
+// Put and Acquire functions are internal functions to project, so
+// checking it via such assert is optimal.
+func assertHMACSize(h *hmac, size, blocksize int) {
+	if h.size != size || h.blocksize != blocksize {
+		panic("BUG: hmac size invalid") // nolint
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/internal/hmac/vendor.sh b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/internal/hmac/vendor.sh
new file mode 100644
index 000000000..83a2b32d3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/internal/hmac/vendor.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+cp -v $GOROOT/src/crypto/hmac/{hmac,hmac_test}.go .
+git diff {hmac,hmac_test}.go
+
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/message.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/message.go
new file mode 100644
index 000000000..381923530
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/message.go
@@ -0,0 +1,588 @@
+package stun
+
+import (
+	"crypto/rand"
+	"encoding/base64"
+	"errors"
+	"fmt"
+	"io"
+)
+
+const (
+	// magicCookie is fixed value that aids in distinguishing STUN packets
+	// from packets of other protocols when STUN is multiplexed with those
+	// other protocols on the same Port.
+	//
+	// The magic cookie field MUST contain the fixed value 0x2112A442 in
+	// network byte order.
+	//
+	// Defined in "STUN Message Structure", section 6.
+	magicCookie         = 0x2112A442
+	attributeHeaderSize = 4
+	messageHeaderSize   = 20
+
+	// TransactionIDSize is length of transaction id array (in bytes).
+	TransactionIDSize = 12 // 96 bit
+)
+
+// NewTransactionID returns new random transaction ID using crypto/rand
+// as source.
+func NewTransactionID() (b [TransactionIDSize]byte) {
+	readFullOrPanic(rand.Reader, b[:])
+	return b
+}
+
+// IsMessage returns true if b looks like STUN message.
+// Useful for multiplexing. IsMessage does not guarantee
+// that decoding will be successful.
+func IsMessage(b []byte) bool {
+	return len(b) >= messageHeaderSize && bin.Uint32(b[4:8]) == magicCookie
+}
+
+// New returns *Message with pre-allocated Raw.
+func New() *Message {
+	const defaultRawCapacity = 120
+	return &Message{
+		Raw: make([]byte, messageHeaderSize, defaultRawCapacity),
+	}
+}
+
+// ErrDecodeToNil occurs on Decode(data, nil) call.
+var ErrDecodeToNil = errors.New("attempt to decode to nil message")
+
+// Decode decodes Message from data to m, returning error if any.
+func Decode(data []byte, m *Message) error {
+	if m == nil {
+		return ErrDecodeToNil
+	}
+	m.Raw = append(m.Raw[:0], data...)
+	return m.Decode()
+}
+
+// Message represents a single STUN packet. It uses aggressive internal
+// buffering to enable zero-allocation encoding and decoding,
+// so there are some usage constraints:
+//
+// 	Message, its fields, results of m.Get or any attribute a.GetFrom
+//	are valid only until Message.Raw is not modified.
+type Message struct {
+	Type          MessageType
+	Length        uint32 // len(Raw) not including header
+	TransactionID [TransactionIDSize]byte
+	Attributes    Attributes
+	Raw           []byte
+}
+
+// AddTo sets b.TransactionID to m.TransactionID.
+//
+// Implements Setter to aid in crafting responses.
+func (m *Message) AddTo(b *Message) error {
+	b.TransactionID = m.TransactionID
+	b.WriteTransactionID()
+	return nil
+}
+
+// NewTransactionID sets m.TransactionID to random value from crypto/rand
+// and returns error if any.
+func (m *Message) NewTransactionID() error {
+	_, err := io.ReadFull(rand.Reader, m.TransactionID[:])
+	if err == nil {
+		m.WriteTransactionID()
+	}
+	return err
+}
+
+func (m *Message) String() string {
+	tID := base64.StdEncoding.EncodeToString(m.TransactionID[:])
+	return fmt.Sprintf("%s l=%d attrs=%d id=%s", m.Type, m.Length, len(m.Attributes), tID)
+}
+
+// Reset resets Message, attributes and underlying buffer length.
+func (m *Message) Reset() {
+	m.Raw = m.Raw[:0]
+	m.Length = 0
+	m.Attributes = m.Attributes[:0]
+}
+
+// grow ensures that internal buffer has n length.
+func (m *Message) grow(n int) {
+	if len(m.Raw) >= n {
+		return
+	}
+	if cap(m.Raw) >= n {
+		m.Raw = m.Raw[:n]
+		return
+	}
+	m.Raw = append(m.Raw, make([]byte, n-len(m.Raw))...)
+}
+
+// Add appends new attribute to message. Not goroutine-safe.
+//
+// Value of attribute is copied to internal buffer so
+// it is safe to reuse v.
+func (m *Message) Add(t AttrType, v []byte) {
+	// Allocating buffer for TLV (type-length-value).
+	// T = t, L = len(v), V = v.
+	// m.Raw will look like:
+	// [0:20]                               <- message header
+	// [20:20+m.Length]                     <- existing message attributes
+	// [20+m.Length:20+m.Length+len(v) + 4] <- allocated buffer for new TLV
+	// [first:last]                         <- same as previous
+	// [0 1|2 3|4    4 + len(v)]            <- mapping for allocated buffer
+	//   T   L        V
+	allocSize := attributeHeaderSize + len(v)  // ~ len(TLV) = len(TL) + len(V)
+	first := messageHeaderSize + int(m.Length) // first byte number
+	last := first + allocSize                  // last byte number
+	m.grow(last)                               // growing cap(Raw) to fit TLV
+	m.Raw = m.Raw[:last]                       // now len(Raw) = last
+	m.Length += uint32(allocSize)              // rendering length change
+
+	// Sub-slicing internal buffer to simplify encoding.
+	buf := m.Raw[first:last]           // slice for TLV
+	value := buf[attributeHeaderSize:] // slice for V
+	attr := RawAttribute{
+		Type:   t,              // T
+		Length: uint16(len(v)), // L
+		Value:  value,          // V
+	}
+
+	// Encoding attribute TLV to allocated buffer.
+	bin.PutUint16(buf[0:2], attr.Type.Value()) // T
+	bin.PutUint16(buf[2:4], attr.Length)       // L
+	copy(value, v)                             // V
+
+	// Checking that attribute value needs padding.
+	if attr.Length%padding != 0 {
+		// Performing padding.
+		bytesToAdd := nearestPaddedValueLength(len(v)) - len(v)
+		last += bytesToAdd
+		m.grow(last)
+		// setting all padding bytes to zero
+		// to prevent data leak from previous
+		// data in next bytesToAdd bytes
+		buf = m.Raw[last-bytesToAdd : last]
+		for i := range buf {
+			buf[i] = 0
+		}
+		m.Raw = m.Raw[:last]           // increasing buffer length
+		m.Length += uint32(bytesToAdd) // rendering length change
+	}
+	m.Attributes = append(m.Attributes, attr)
+	m.WriteLength()
+}
+
+func attrSliceEqual(a, b Attributes) bool {
+	for _, attr := range a {
+		found := false
+		for _, attrB := range b {
+			if attrB.Type != attr.Type {
+				continue
+			}
+			if attrB.Equal(attr) {
+				found = true
+				break
+			}
+		}
+		if !found {
+			return false
+		}
+	}
+	return true
+}
+
+func attrEqual(a, b Attributes) bool {
+	if a == nil && b == nil {
+		return true
+	}
+	if a == nil || b == nil {
+		return false
+	}
+	if len(a) != len(b) {
+		return false
+	}
+	if !attrSliceEqual(a, b) {
+		return false
+	}
+	if !attrSliceEqual(b, a) {
+		return false
+	}
+	return true
+}
+
+// Equal returns true if Message b equals to m.
+// Ignores m.Raw.
+func (m *Message) Equal(b *Message) bool {
+	if m == nil && b == nil {
+		return true
+	}
+	if m == nil || b == nil {
+		return false
+	}
+	if m.Type != b.Type {
+		return false
+	}
+	if m.TransactionID != b.TransactionID {
+		return false
+	}
+	if m.Length != b.Length {
+		return false
+	}
+	if !attrEqual(m.Attributes, b.Attributes) {
+		return false
+	}
+	return true
+}
+
+// WriteLength writes m.Length to m.Raw.
+func (m *Message) WriteLength() {
+	m.grow(4)
+	bin.PutUint16(m.Raw[2:4], uint16(m.Length))
+}
+
+// WriteHeader writes header to underlying buffer. Not goroutine-safe.
+func (m *Message) WriteHeader() {
+	m.grow(messageHeaderSize)
+	_ = m.Raw[:messageHeaderSize] // early bounds check to guarantee safety of writes below
+
+	m.WriteType()
+	m.WriteLength()
+	bin.PutUint32(m.Raw[4:8], magicCookie)               // magic cookie
+	copy(m.Raw[8:messageHeaderSize], m.TransactionID[:]) // transaction ID
+}
+
+// WriteTransactionID writes m.TransactionID to m.Raw.
+func (m *Message) WriteTransactionID() {
+	copy(m.Raw[8:messageHeaderSize], m.TransactionID[:]) // transaction ID
+}
+
+// WriteAttributes encodes all m.Attributes to m.
+func (m *Message) WriteAttributes() {
+	attributes := m.Attributes
+	m.Attributes = attributes[:0]
+	for _, a := range attributes {
+		m.Add(a.Type, a.Value)
+	}
+	m.Attributes = attributes
+}
+
+// WriteType writes m.Type to m.Raw.
+func (m *Message) WriteType() {
+	m.grow(2)
+	bin.PutUint16(m.Raw[0:2], m.Type.Value()) // message type
+}
+
+// SetType sets m.Type and writes it to m.Raw.
+func (m *Message) SetType(t MessageType) {
+	m.Type = t
+	m.WriteType()
+}
+
+// Encode re-encodes message into m.Raw.
+func (m *Message) Encode() {
+	m.Raw = m.Raw[:0]
+	m.WriteHeader()
+	m.Length = 0
+	m.WriteAttributes()
+}
+
+// WriteTo implements WriterTo via calling Write(m.Raw) on w and returning
+// call result.
+func (m *Message) WriteTo(w io.Writer) (int64, error) {
+	n, err := w.Write(m.Raw)
+	return int64(n), err
+}
+
+// ReadFrom implements ReaderFrom. Reads message from r into m.Raw,
+// Decodes it and return error if any. If m.Raw is too small, will return
+// ErrUnexpectedEOF, ErrUnexpectedHeaderEOF or *DecodeErr.
+//
+// Can return *DecodeErr while decoding too.
+func (m *Message) ReadFrom(r io.Reader) (int64, error) {
+	tBuf := m.Raw[:cap(m.Raw)]
+	var (
+		n   int
+		err error
+	)
+	if n, err = r.Read(tBuf); err != nil {
+		return int64(n), err
+	}
+	m.Raw = tBuf[:n]
+	return int64(n), m.Decode()
+}
+
+// ErrUnexpectedHeaderEOF means that there were not enough bytes in
+// m.Raw to read header.
+var ErrUnexpectedHeaderEOF = errors.New("unexpected EOF: not enough bytes to read header")
+
+// Decode decodes m.Raw into m.
+func (m *Message) Decode() error {
+	// decoding message header
+	buf := m.Raw
+	if len(buf) < messageHeaderSize {
+		return ErrUnexpectedHeaderEOF
+	}
+	var (
+		t        = bin.Uint16(buf[0:2])      // first 2 bytes
+		size     = int(bin.Uint16(buf[2:4])) // second 2 bytes
+		cookie   = bin.Uint32(buf[4:8])      // last 4 bytes
+		fullSize = messageHeaderSize + size  // len(m.Raw)
+	)
+	if cookie != magicCookie {
+		msg := fmt.Sprintf("%x is invalid magic cookie (should be %x)", cookie, magicCookie)
+		return newDecodeErr("message", "cookie", msg)
+	}
+	if len(buf) < fullSize {
+		msg := fmt.Sprintf("buffer length %d is less than %d (expected message size)", len(buf), fullSize)
+		return newAttrDecodeErr("message", msg)
+	}
+	// saving header data
+	m.Type.ReadValue(t)
+	m.Length = uint32(size)
+	copy(m.TransactionID[:], buf[8:messageHeaderSize])
+
+	m.Attributes = m.Attributes[:0]
+	var (
+		offset = 0
+		b      = buf[messageHeaderSize:fullSize]
+	)
+	for offset < size {
+		// checking that we have enough bytes to read header
+		if len(b) < attributeHeaderSize {
+			msg := fmt.Sprintf("buffer length %d is less than %d (expected header size)", len(b), attributeHeaderSize)
+			return newAttrDecodeErr("header", msg)
+		}
+		var (
+			a = RawAttribute{
+				Type:   compatAttrType(bin.Uint16(b[0:2])), // first 2 bytes
+				Length: bin.Uint16(b[2:4]),                 // second 2 bytes
+			}
+			aL     = int(a.Length)                // attribute length
+			aBuffL = nearestPaddedValueLength(aL) // expected buffer length (with padding)
+		)
+		b = b[attributeHeaderSize:] // slicing again to simplify value read
+		offset += attributeHeaderSize
+		if len(b) < aBuffL { // checking size
+			msg := fmt.Sprintf("buffer length %d is less than %d (expected value size for %s)", len(b), aBuffL, a.Type)
+			return newAttrDecodeErr("value", msg)
+		}
+		a.Value = b[:aL]
+		offset += aBuffL
+		b = b[aBuffL:]
+
+		m.Attributes = append(m.Attributes, a)
+	}
+	return nil
+}
+
+// Write decodes message and return error if any.
+//
+// Any error is unrecoverable, but message could be partially decoded.
+func (m *Message) Write(tBuf []byte) (int, error) {
+	m.Raw = append(m.Raw[:0], tBuf...)
+	return len(tBuf), m.Decode()
+}
+
+// CloneTo clones m to b securing any further m mutations.
+func (m *Message) CloneTo(b *Message) error {
+	// TODO(ar): implement low-level copy.
+	b.Raw = append(b.Raw[:0], m.Raw...)
+	return b.Decode()
+}
+
+// MessageClass is 8-bit representation of 2-bit class of STUN Message Class.
+type MessageClass byte
+
+// Possible values for message class in STUN Message Type.
+const (
+	ClassRequest         MessageClass = 0x00 // 0b00
+	ClassIndication      MessageClass = 0x01 // 0b01
+	ClassSuccessResponse MessageClass = 0x02 // 0b10
+	ClassErrorResponse   MessageClass = 0x03 // 0b11
+)
+
+// Common STUN message types.
+var (
+	// Binding request message type.
+	BindingRequest = NewType(MethodBinding, ClassRequest)
+	// Binding success response message type
+	BindingSuccess = NewType(MethodBinding, ClassSuccessResponse)
+	// Binding error response message type.
+	BindingError = NewType(MethodBinding, ClassErrorResponse)
+)
+
+func (c MessageClass) String() string {
+	switch c {
+	case ClassRequest:
+		return "request"
+	case ClassIndication:
+		return "indication"
+	case ClassSuccessResponse:
+		return "success response"
+	case ClassErrorResponse:
+		return "error response"
+	default:
+		panic("unknown message class") // nolint: never happens unless wrongly casted
+	}
+}
+
+// Method is uint16 representation of 12-bit STUN method.
+type Method uint16
+
+// Possible methods for STUN Message.
+const (
+	MethodBinding          Method = 0x001
+	MethodAllocate         Method = 0x003
+	MethodRefresh          Method = 0x004
+	MethodSend             Method = 0x006
+	MethodData             Method = 0x007
+	MethodCreatePermission Method = 0x008
+	MethodChannelBind      Method = 0x009
+)
+
+// Methods from RFC 6062.
+const (
+	MethodConnect           Method = 0x000a
+	MethodConnectionBind    Method = 0x000b
+	MethodConnectionAttempt Method = 0x000c
+)
+
+var methodName = map[Method]string{
+	MethodBinding:          "Binding",
+	MethodAllocate:         "Allocate",
+	MethodRefresh:          "Refresh",
+	MethodSend:             "Send",
+	MethodData:             "Data",
+	MethodCreatePermission: "CreatePermission",
+	MethodChannelBind:      "ChannelBind",
+
+	// RFC 6062.
+	MethodConnect:           "Connect",
+	MethodConnectionBind:    "ConnectionBind",
+	MethodConnectionAttempt: "ConnectionAttempt",
+}
+
+func (m Method) String() string {
+	s, ok := methodName[m]
+	if !ok {
+		// Falling back to hex representation.
+		s = fmt.Sprintf("0x%x", uint16(m))
+	}
+	return s
+}
+
+// MessageType is STUN Message Type Field.
+type MessageType struct {
+	Method Method       // e.g. binding
+	Class  MessageClass // e.g. request
+}
+
+// AddTo sets m type to t.
+func (t MessageType) AddTo(m *Message) error {
+	m.SetType(t)
+	return nil
+}
+
+// NewType returns new message type with provided method and class.
+func NewType(method Method, class MessageClass) MessageType {
+	return MessageType{
+		Method: method,
+		Class:  class,
+	}
+}
+
+const (
+	methodABits = 0xf   // 0b0000000000001111
+	methodBBits = 0x70  // 0b0000000001110000
+	methodDBits = 0xf80 // 0b0000111110000000
+
+	methodBShift = 1
+	methodDShift = 2
+
+	firstBit  = 0x1
+	secondBit = 0x2
+
+	c0Bit = firstBit
+	c1Bit = secondBit
+
+	classC0Shift = 4
+	classC1Shift = 7
+)
+
+// Value returns bit representation of messageType.
+func (t MessageType) Value() uint16 {
+	//	 0                 1
+	//	 2  3  4 5 6 7 8 9 0 1 2 3 4 5
+	//	+--+--+-+-+-+-+-+-+-+-+-+-+-+-+
+	//	|M |M |M|M|M|C|M|M|M|C|M|M|M|M|
+	//	|11|10|9|8|7|1|6|5|4|0|3|2|1|0|
+	//	+--+--+-+-+-+-+-+-+-+-+-+-+-+-+
+	// Figure 3: Format of STUN Message Type Field
+
+	// Warning: Abandon all hope ye who enter here.
+	// Splitting M into A(M0-M3), B(M4-M6), D(M7-M11).
+	m := uint16(t.Method)
+	a := m & methodABits // A = M * 0b0000000000001111 (right 4 bits)
+	b := m & methodBBits // B = M * 0b0000000001110000 (3 bits after A)
+	d := m & methodDBits // D = M * 0b0000111110000000 (5 bits after B)
+
+	// Shifting to add "holes" for C0 (at 4 bit) and C1 (8 bit).
+	m = a + (b << methodBShift) + (d << methodDShift)
+
+	// C0 is zero bit of C, C1 is first bit.
+	// C0 = C * 0b01, C1 = (C * 0b10) >> 1
+	// Ct = C0 << 4 + C1 << 8.
+	// Optimizations: "((C * 0b10) >> 1) << 8" as "(C * 0b10) << 7"
+	// We need C0 shifted by 4, and C1 by 8 to fit "11" and "7" positions
+	// (see figure 3).
+	c := uint16(t.Class)
+	c0 := (c & c0Bit) << classC0Shift
+	c1 := (c & c1Bit) << classC1Shift
+	class := c0 + c1
+
+	return m + class
+}
+
+// ReadValue decodes uint16 into MessageType.
+func (t *MessageType) ReadValue(v uint16) {
+	// Decoding class.
+	// We are taking first bit from v >> 4 and second from v >> 7.
+	c0 := (v >> classC0Shift) & c0Bit
+	c1 := (v >> classC1Shift) & c1Bit
+	class := c0 + c1
+	t.Class = MessageClass(class)
+
+	// Decoding method.
+	a := v & methodABits                   // A(M0-M3)
+	b := (v >> methodBShift) & methodBBits // B(M4-M6)
+	d := (v >> methodDShift) & methodDBits // D(M7-M11)
+	m := a + b + d
+	t.Method = Method(m)
+}
+
+func (t MessageType) String() string {
+	return fmt.Sprintf("%s %s", t.Method, t.Class)
+}
+
+// Contains return true if message contain t attribute.
+func (m *Message) Contains(t AttrType) bool {
+	for _, a := range m.Attributes {
+		if a.Type == t {
+			return true
+		}
+	}
+	return false
+}
+
+type transactionIDValueSetter [TransactionIDSize]byte
+
+// NewTransactionIDSetter returns new Setter that sets message transaction id
+// to provided value.
+func NewTransactionIDSetter(value [TransactionIDSize]byte) Setter {
+	return transactionIDValueSetter(value)
+}
+
+func (t transactionIDValueSetter) AddTo(m *Message) error {
+	m.TransactionID = t
+	m.WriteTransactionID()
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/renovate.json b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/renovate.json
new file mode 100644
index 000000000..4400fd9b2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/renovate.json
@@ -0,0 +1,15 @@
+{
+  "extends": [
+    "config:base"
+  ],
+  "postUpdateOptions": [
+    "gomodTidy"
+  ],
+  "commitBody": "Generated by renovateBot",
+  "packageRules": [
+    {
+      "packagePatterns": ["^golang.org/x/"],
+      "schedule": ["on the first day of the month"]
+    }
+  ]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/stun.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/stun.go
new file mode 100644
index 000000000..9f804d270
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/stun.go
@@ -0,0 +1,51 @@
+// Package stun implements Session Traversal Utilities for NAT (STUN) RFC 5389.
+//
+// The stun package is intended to use by package that implements extension
+// to STUN (e.g. TURN) or client/server applications.
+//
+// Most methods are designed to be zero allocations. If it is not enough,
+// low-level methods are available. On other hand, there are helpers that
+// reduce code repeat.
+//
+// See examples for Message for basic usage, or https://github.com/pion/turn
+// package for example of stun extension implementation.
+package stun
+
+import (
+	"encoding/binary"
+	"io"
+)
+
+// bin is shorthand to binary.BigEndian.
+var bin = binary.BigEndian
+
+func readFullOrPanic(r io.Reader, v []byte) int {
+	n, err := io.ReadFull(r, v)
+	if err != nil {
+		panic(err) // nolint
+	}
+	return n
+}
+
+func writeOrPanic(w io.Writer, v []byte) int {
+	n, err := w.Write(v)
+	if err != nil {
+		panic(err) // nolint
+	}
+	return n
+}
+
+// IANA assigned ports for "stun" protocol.
+const (
+	DefaultPort    = 3478
+	DefaultTLSPort = 5349
+)
+
+type transactionIDSetter struct{}
+
+func (transactionIDSetter) AddTo(m *Message) error {
+	return m.NewTransactionID()
+}
+
+// TransactionID is Setter for m.TransactionID.
+var TransactionID Setter = transactionIDSetter{}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/textattrs.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/textattrs.go
new file mode 100644
index 000000000..efdfbd957
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/textattrs.go
@@ -0,0 +1,129 @@
+package stun
+
+// NewUsername returns Username with provided value.
+func NewUsername(username string) Username {
+	return Username(username)
+}
+
+// Username represents USERNAME attribute.
+//
+// RFC 5389 Section 15.3
+type Username []byte
+
+func (u Username) String() string {
+	return string(u)
+}
+
+const maxUsernameB = 513
+
+// AddTo adds USERNAME attribute to message.
+func (u Username) AddTo(m *Message) error {
+	return TextAttribute(u).AddToAs(m, AttrUsername, maxUsernameB)
+}
+
+// GetFrom gets USERNAME from message.
+func (u *Username) GetFrom(m *Message) error {
+	return (*TextAttribute)(u).GetFromAs(m, AttrUsername)
+}
+
+// NewRealm returns Realm with provided value.
+// Must be SASL-prepared.
+func NewRealm(realm string) Realm {
+	return Realm(realm)
+}
+
+// Realm represents REALM attribute.
+//
+// RFC 5389 Section 15.7
+type Realm []byte
+
+func (n Realm) String() string {
+	return string(n)
+}
+
+const maxRealmB = 763
+
+// AddTo adds NONCE to message.
+func (n Realm) AddTo(m *Message) error {
+	return TextAttribute(n).AddToAs(m, AttrRealm, maxRealmB)
+}
+
+// GetFrom gets REALM from message.
+func (n *Realm) GetFrom(m *Message) error {
+	return (*TextAttribute)(n).GetFromAs(m, AttrRealm)
+}
+
+const softwareRawMaxB = 763
+
+// Software is SOFTWARE attribute.
+//
+// RFC 5389 Section 15.10
+type Software []byte
+
+func (s Software) String() string {
+	return string(s)
+}
+
+// NewSoftware returns *Software from string.
+func NewSoftware(software string) Software {
+	return Software(software)
+}
+
+// AddTo adds Software attribute to m.
+func (s Software) AddTo(m *Message) error {
+	return TextAttribute(s).AddToAs(m, AttrSoftware, softwareRawMaxB)
+}
+
+// GetFrom decodes Software from m.
+func (s *Software) GetFrom(m *Message) error {
+	return (*TextAttribute)(s).GetFromAs(m, AttrSoftware)
+}
+
+// Nonce represents NONCE attribute.
+//
+// RFC 5389 Section 15.8
+type Nonce []byte
+
+// NewNonce returns new Nonce from string.
+func NewNonce(nonce string) Nonce {
+	return Nonce(nonce)
+}
+
+func (n Nonce) String() string {
+	return string(n)
+}
+
+const maxNonceB = 763
+
+// AddTo adds NONCE to message.
+func (n Nonce) AddTo(m *Message) error {
+	return TextAttribute(n).AddToAs(m, AttrNonce, maxNonceB)
+}
+
+// GetFrom gets NONCE from message.
+func (n *Nonce) GetFrom(m *Message) error {
+	return (*TextAttribute)(n).GetFromAs(m, AttrNonce)
+}
+
+// TextAttribute is helper for adding and getting text attributes.
+type TextAttribute []byte
+
+// AddToAs adds attribute with type t to m, checking maximum length. If maxLen
+// is less than 0, no check is performed.
+func (v TextAttribute) AddToAs(m *Message, t AttrType, maxLen int) error {
+	if err := CheckOverflow(t, len(v), maxLen); err != nil {
+		return err
+	}
+	m.Add(t, v)
+	return nil
+}
+
+// GetFromAs gets t attribute from m and appends its value to reseted v.
+func (v *TextAttribute) GetFromAs(m *Message, t AttrType) error {
+	a, err := m.Get(t)
+	if err != nil {
+		return err
+	}
+	*v = a
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/uattrs.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/uattrs.go
new file mode 100644
index 000000000..238d32d10
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/uattrs.go
@@ -0,0 +1,63 @@
+package stun
+
+import "errors"
+
+// UnknownAttributes represents UNKNOWN-ATTRIBUTES attribute.
+//
+// RFC 5389 Section 15.9
+type UnknownAttributes []AttrType
+
+func (a UnknownAttributes) String() string {
+	s := ""
+	if len(a) == 0 {
+		return "<nil>"
+	}
+	last := len(a) - 1
+	for i, t := range a {
+		s += t.String()
+		if i != last {
+			s += ", "
+		}
+	}
+	return s
+}
+
+// type size is 16 bit.
+const attrTypeSize = 4
+
+// AddTo adds UNKNOWN-ATTRIBUTES attribute to message.
+func (a UnknownAttributes) AddTo(m *Message) error {
+	v := make([]byte, 0, attrTypeSize*20) // 20 should be enough
+	// If len(a.Types) > 20, there will be allocations.
+	for i, t := range a {
+		v = append(v, 0, 0, 0, 0) // 4 times by 0 (16 bits)
+		first := attrTypeSize * i
+		last := first + attrTypeSize
+		bin.PutUint16(v[first:last], t.Value())
+	}
+	m.Add(AttrUnknownAttributes, v)
+	return nil
+}
+
+// ErrBadUnknownAttrsSize means that UNKNOWN-ATTRIBUTES attribute value
+// has invalid length.
+var ErrBadUnknownAttrsSize = errors.New("bad UNKNOWN-ATTRIBUTES size")
+
+// GetFrom parses UNKNOWN-ATTRIBUTES from message.
+func (a *UnknownAttributes) GetFrom(m *Message) error {
+	v, err := m.Get(AttrUnknownAttributes)
+	if err != nil {
+		return err
+	}
+	if len(v)%attrTypeSize != 0 {
+		return ErrBadUnknownAttrsSize
+	}
+	*a = (*a)[:0]
+	first := 0
+	for first < len(v) {
+		last := first + attrTypeSize
+		*a = append(*a, AttrType(bin.Uint16(v[first:last])))
+		first = last
+	}
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/xor.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/xor.go
new file mode 100644
index 000000000..34365eb26
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/xor.go
@@ -0,0 +1,62 @@
+// Copyright 2013 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package stun
+
+import (
+	"runtime"
+	"unsafe"
+)
+
+// #nosec
+const wordSize = int(unsafe.Sizeof(uintptr(0)))
+
+var supportsUnaligned = runtime.GOARCH == "386" || runtime.GOARCH == "amd64"
+
+// fastXORBytes xors in bulk. It only works on architectures that
+// support unaligned read/writes.
+//
+// #nosec
+func fastXORBytes(dst, a, b []byte) int {
+	n := len(a)
+	if len(b) < n {
+		n = len(b)
+	}
+
+	w := n / wordSize
+	if w > 0 {
+		dw := *(*[]uintptr)(unsafe.Pointer(&dst))
+		aw := *(*[]uintptr)(unsafe.Pointer(&a))
+		bw := *(*[]uintptr)(unsafe.Pointer(&b))
+		for i := 0; i < w; i++ {
+			dw[i] = aw[i] ^ bw[i]
+		}
+	}
+
+	for i := n - n%wordSize; i < n; i++ {
+		dst[i] = a[i] ^ b[i]
+	}
+
+	return n
+}
+
+func safeXORBytes(dst, a, b []byte) int {
+	n := len(a)
+	if len(b) < n {
+		n = len(b)
+	}
+	for i := 0; i < n; i++ {
+		dst[i] = a[i] ^ b[i]
+	}
+	return n
+}
+
+// xorBytes xors the bytes in a and b. The destination is assumed to have enough
+// space. Returns the number of bytes xor'd.
+func xorBytes(dst, a, b []byte) int {
+	if supportsUnaligned {
+		return fastXORBytes(dst, a, b)
+	}
+	return safeXORBytes(dst, a, b)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/xoraddr.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/xoraddr.go
new file mode 100644
index 000000000..23f7777c0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/stun/xoraddr.go
@@ -0,0 +1,145 @@
+package stun
+
+import (
+	"errors"
+	"fmt"
+	"io"
+	"net"
+	"strconv"
+)
+
+const (
+	familyIPv4 uint16 = 0x01
+	familyIPv6 uint16 = 0x02
+)
+
+// XORMappedAddress implements XOR-MAPPED-ADDRESS attribute.
+//
+// RFC 5389 Section 15.2
+type XORMappedAddress struct {
+	IP   net.IP
+	Port int
+}
+
+func (a XORMappedAddress) String() string {
+	return net.JoinHostPort(a.IP.String(), strconv.Itoa(a.Port))
+}
+
+// isIPv4 returns true if ip with len of net.IPv6Len seems to be ipv4.
+func isIPv4(ip net.IP) bool {
+	// Optimized for performance. Copied from net.IP.To4.
+	return isZeros(ip[0:10]) && ip[10] == 0xff && ip[11] == 0xff
+}
+
+// Is p all zeros?
+func isZeros(p net.IP) bool {
+	for i := 0; i < len(p); i++ {
+		if p[i] != 0 {
+			return false
+		}
+	}
+	return true
+}
+
+// ErrBadIPLength means that len(IP) is not net.{IPv6len,IPv4len}.
+var ErrBadIPLength = errors.New("invalid length of IP value")
+
+// AddToAs adds XOR-MAPPED-ADDRESS value to m as t attribute.
+func (a XORMappedAddress) AddToAs(m *Message, t AttrType) error {
+	var (
+		family = familyIPv4
+		ip     = a.IP
+	)
+	if len(a.IP) == net.IPv6len {
+		if isIPv4(ip) {
+			ip = ip[12:16] // like in ip.To4()
+		} else {
+			family = familyIPv6
+		}
+	} else if len(ip) != net.IPv4len {
+		return ErrBadIPLength
+	}
+	value := make([]byte, 32+128)
+	value[0] = 0 // first 8 bits are zeroes
+	xorValue := make([]byte, net.IPv6len)
+	copy(xorValue[4:], m.TransactionID[:])
+	bin.PutUint32(xorValue[0:4], magicCookie)
+	bin.PutUint16(value[0:2], family)
+	bin.PutUint16(value[2:4], uint16(a.Port^magicCookie>>16))
+	xorBytes(value[4:4+len(ip)], ip, xorValue)
+	m.Add(t, value[:4+len(ip)])
+	return nil
+}
+
+// AddTo adds XOR-MAPPED-ADDRESS to m. Can return ErrBadIPLength
+// if len(a.IP) is invalid.
+func (a XORMappedAddress) AddTo(m *Message) error {
+	return a.AddToAs(m, AttrXORMappedAddress)
+}
+
+// GetFromAs decodes XOR-MAPPED-ADDRESS attribute value in message
+// getting it as for t type.
+func (a *XORMappedAddress) GetFromAs(m *Message, t AttrType) error {
+	v, err := m.Get(t)
+	if err != nil {
+		return err
+	}
+	family := bin.Uint16(v[0:2])
+	if family != familyIPv6 && family != familyIPv4 {
+		return newDecodeErr("xor-mapped address", "family",
+			fmt.Sprintf("bad value %d", family),
+		)
+	}
+	ipLen := net.IPv4len
+	if family == familyIPv6 {
+		ipLen = net.IPv6len
+	}
+	// Ensuring len(a.IP) == ipLen and reusing a.IP.
+	if len(a.IP) < ipLen {
+		a.IP = a.IP[:cap(a.IP)]
+		for len(a.IP) < ipLen {
+			a.IP = append(a.IP, 0)
+		}
+	}
+	a.IP = a.IP[:ipLen]
+	for i := range a.IP {
+		a.IP[i] = 0
+	}
+	if len(v) <= 4 {
+		return io.ErrUnexpectedEOF
+	}
+	if err := CheckOverflow(t, len(v[4:]), len(a.IP)); err != nil {
+		return err
+	}
+	a.Port = int(bin.Uint16(v[2:4])) ^ (magicCookie >> 16)
+	xorValue := make([]byte, 4+TransactionIDSize)
+	bin.PutUint32(xorValue[0:4], magicCookie)
+	copy(xorValue[4:], m.TransactionID[:])
+	xorBytes(a.IP, v[4:], xorValue)
+	return nil
+}
+
+// GetFrom decodes XOR-MAPPED-ADDRESS attribute in message and returns
+// error if any. While decoding, a.IP is reused if possible and can be
+// rendered to invalid state (e.g. if a.IP was set to IPv6 and then
+// IPv4 value were decoded into it), be careful.
+//
+// Example:
+//
+//  expectedIP := net.ParseIP("213.141.156.236")
+//  expectedIP.String() // 213.141.156.236, 16 bytes, first 12 of them are zeroes
+//  expectedPort := 21254
+//  addr := &XORMappedAddress{
+//    IP:   expectedIP,
+//    Port: expectedPort,
+//  }
+//  // addr were added to message that is decoded as newMessage
+//  // ...
+//
+//  addr.GetFrom(newMessage)
+//  addr.IP.String()    // 213.141.156.236, net.IPv4Len
+//  expectedIP.String() // d58d:9cec::ffff:d58d:9cec, 16 bytes, first 4 are IPv4
+//  // now we have len(expectedIP) = 16 and len(addr.IP) = 4.
+func (a *XORMappedAddress) GetFrom(m *Message) error {
+	return a.GetFromAs(m, AttrXORMappedAddress)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/LICENSE
new file mode 100644
index 000000000..ab602974d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/deadline/deadline.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/deadline/deadline.go
new file mode 100644
index 000000000..6f9738670
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/deadline/deadline.go
@@ -0,0 +1,110 @@
+// Package deadline provides deadline timer used to implement
+// net.Conn compatible connection
+package deadline
+
+import (
+	"context"
+	"sync"
+	"time"
+)
+
+// Deadline signals updatable deadline timer.
+// Also, it implements context.Context.
+type Deadline struct {
+	exceeded chan struct{}
+	stop     chan struct{}
+	stopped  chan bool
+	deadline time.Time
+	mu       sync.RWMutex
+}
+
+// New creates new deadline timer.
+func New() *Deadline {
+	d := &Deadline{
+		exceeded: make(chan struct{}),
+		stop:     make(chan struct{}),
+		stopped:  make(chan bool, 1),
+	}
+	d.stopped <- true
+	return d
+}
+
+// Set new deadline. Zero value means no deadline.
+func (d *Deadline) Set(t time.Time) {
+	d.mu.Lock()
+	defer d.mu.Unlock()
+
+	d.deadline = t
+
+	close(d.stop)
+
+	select {
+	case <-d.exceeded:
+		d.exceeded = make(chan struct{})
+	default:
+		stopped := <-d.stopped
+		if !stopped {
+			d.exceeded = make(chan struct{})
+		}
+	}
+	d.stop = make(chan struct{})
+	d.stopped = make(chan bool, 1)
+
+	if t.IsZero() {
+		d.stopped <- true
+		return
+	}
+
+	if dur := time.Until(t); dur > 0 {
+		exceeded := d.exceeded
+		stopped := d.stopped
+		go func() {
+			select {
+			case <-time.After(dur):
+				close(exceeded)
+				stopped <- false
+			case <-d.stop:
+				stopped <- true
+			}
+		}()
+		return
+	}
+
+	close(d.exceeded)
+	d.stopped <- false
+}
+
+// Done receives deadline signal.
+func (d *Deadline) Done() <-chan struct{} {
+	d.mu.RLock()
+	defer d.mu.RUnlock()
+	return d.exceeded
+}
+
+// Err returns context.DeadlineExceeded if the deadline is exceeded.
+// Otherwise, it returns nil.
+func (d *Deadline) Err() error {
+	d.mu.RLock()
+	defer d.mu.RUnlock()
+	select {
+	case <-d.exceeded:
+		return context.DeadlineExceeded
+	default:
+		return nil
+	}
+}
+
+// Deadline returns current deadline.
+func (d *Deadline) Deadline() (time.Time, bool) {
+	d.mu.RLock()
+	defer d.mu.RUnlock()
+	if d.deadline.IsZero() {
+		return d.deadline, false
+	}
+	return d.deadline, true
+}
+
+// Value returns nil.
+func (d *Deadline) Value(interface{}) interface{} {
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/packetio/buffer.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/packetio/buffer.go
new file mode 100644
index 000000000..97d86f8c8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/packetio/buffer.go
@@ -0,0 +1,347 @@
+// Package packetio provides packet buffer
+package packetio
+
+import (
+	"errors"
+	"io"
+	"sync"
+	"time"
+
+	"github.com/pion/transport/deadline"
+)
+
+var errPacketTooBig = errors.New("packet too big")
+
+// BufferPacketType allow the Buffer to know which packet protocol is writing.
+type BufferPacketType int
+
+const (
+	// RTPBufferPacket indicates the Buffer that is handling RTP packets
+	RTPBufferPacket BufferPacketType = 1
+	// RTCPBufferPacket indicates the Buffer that is handling RTCP packets
+	RTCPBufferPacket BufferPacketType = 2
+)
+
+// Buffer allows writing packets to an intermediate buffer, which can then be read form.
+// This is verify similar to bytes.Buffer but avoids combining multiple writes into a single read.
+type Buffer struct {
+	mutex sync.Mutex
+
+	// this is a circular buffer.  If head <= tail, then the useful
+	// data is in the interval [head, tail[.  If tail < head, then
+	// the useful data is the union of [head, len[ and [0, tail[.
+	// In order to avoid ambiguity when head = tail, we always leave
+	// an unused byte in the buffer.
+	data       []byte
+	head, tail int
+
+	notify chan struct{}
+	subs   bool
+	closed bool
+
+	count                 int
+	limitCount, limitSize int
+
+	readDeadline *deadline.Deadline
+}
+
+const (
+	minSize    = 2048
+	cutoffSize = 128 * 1024
+	maxSize    = 4 * 1024 * 1024
+)
+
+// NewBuffer creates a new Buffer.
+func NewBuffer() *Buffer {
+	return &Buffer{
+		notify:       make(chan struct{}),
+		readDeadline: deadline.New(),
+	}
+}
+
+// available returns true if the buffer is large enough to fit a packet
+// of the given size, taking overhead into account.
+func (b *Buffer) available(size int) bool {
+	available := b.head - b.tail
+	if available <= 0 {
+		available += len(b.data)
+	}
+	// we interpret head=tail as empty, so always keep a byte free
+	if size+2+1 > available {
+		return false
+	}
+
+	return true
+}
+
+// grow increases the size of the buffer.  If it returns nil, then the
+// buffer has been grown.  It returns ErrFull if hits a limit.
+func (b *Buffer) grow() error {
+	var newsize int
+	if len(b.data) < cutoffSize {
+		newsize = 2 * len(b.data)
+	} else {
+		newsize = 5 * len(b.data) / 4
+	}
+	if newsize < minSize {
+		newsize = minSize
+	}
+	if (b.limitSize <= 0 || sizeHardlimit) && newsize > maxSize {
+		newsize = maxSize
+	}
+
+	// one byte slack
+	if b.limitSize > 0 && newsize > b.limitSize+1 {
+		newsize = b.limitSize + 1
+	}
+
+	if newsize <= len(b.data) {
+		return ErrFull
+	}
+
+	newdata := make([]byte, newsize)
+
+	var n int
+	if b.head <= b.tail {
+		// data was contiguous
+		n = copy(newdata, b.data[b.head:b.tail])
+	} else {
+		// data was discontiguous
+		n = copy(newdata, b.data[b.head:])
+		n += copy(newdata[n:], b.data[:b.tail])
+	}
+	b.head = 0
+	b.tail = n
+	b.data = newdata
+
+	return nil
+}
+
+// Write appends a copy of the packet data to the buffer.
+// Returns ErrFull if the packet doesn't fit.
+//
+// Note that the packet size is limited to 65536 bytes since v0.11.0 due to the internal data structure.
+func (b *Buffer) Write(packet []byte) (int, error) {
+	if len(packet) >= 0x10000 {
+		return 0, errPacketTooBig
+	}
+
+	b.mutex.Lock()
+
+	if b.closed {
+		b.mutex.Unlock()
+		return 0, io.ErrClosedPipe
+	}
+
+	if (b.limitCount > 0 && b.count >= b.limitCount) ||
+		(b.limitSize > 0 && b.size()+2+len(packet) > b.limitSize) {
+		b.mutex.Unlock()
+		return 0, ErrFull
+	}
+
+	// grow the buffer until the packet fits
+	for !b.available(len(packet)) {
+		err := b.grow()
+		if err != nil {
+			b.mutex.Unlock()
+			return 0, err
+		}
+	}
+
+	var notify chan struct{}
+
+	if b.subs {
+		// readers are waiting.  Prepare to notify, but only
+		// actually do it after we release the lock.
+		notify = b.notify
+		b.notify = make(chan struct{})
+		b.subs = false
+	}
+
+	// store the length of the packet
+	b.data[b.tail] = uint8(len(packet) >> 8)
+	b.tail++
+	if b.tail >= len(b.data) {
+		b.tail = 0
+	}
+	b.data[b.tail] = uint8(len(packet))
+	b.tail++
+	if b.tail >= len(b.data) {
+		b.tail = 0
+	}
+
+	// store the packet
+	n := copy(b.data[b.tail:], packet)
+	b.tail += n
+	if b.tail >= len(b.data) {
+		// we reached the end, wrap around
+		m := copy(b.data, packet[n:])
+		b.tail = m
+	}
+	b.count++
+	b.mutex.Unlock()
+
+	if notify != nil {
+		close(notify)
+	}
+
+	return len(packet), nil
+}
+
+// Read populates the given byte slice, returning the number of bytes read.
+// Blocks until data is available or the buffer is closed.
+// Returns io.ErrShortBuffer is the packet is too small to copy the Write.
+// Returns io.EOF if the buffer is closed.
+func (b *Buffer) Read(packet []byte) (n int, err error) {
+	// Return immediately if the deadline is already exceeded.
+	select {
+	case <-b.readDeadline.Done():
+		return 0, &netError{ErrTimeout, true, true}
+	default:
+	}
+
+	for {
+		b.mutex.Lock()
+
+		if b.head != b.tail {
+			// decode the packet size
+			n1 := b.data[b.head]
+			b.head++
+			if b.head >= len(b.data) {
+				b.head = 0
+			}
+			n2 := b.data[b.head]
+			b.head++
+			if b.head >= len(b.data) {
+				b.head = 0
+			}
+			count := int((uint16(n1) << 8) | uint16(n2))
+
+			// determine the number of bytes we'll actually copy
+			copied := count
+			if copied > len(packet) {
+				copied = len(packet)
+			}
+
+			// copy the data
+			if b.head+copied < len(b.data) {
+				copy(packet, b.data[b.head:b.head+copied])
+			} else {
+				k := copy(packet, b.data[b.head:])
+				copy(packet[k:], b.data[:copied-k])
+			}
+
+			// advance head, discarding any data that wasn't copied
+			b.head += count
+			if b.head >= len(b.data) {
+				b.head -= len(b.data)
+			}
+
+			if b.head == b.tail {
+				// the buffer is empty, reset to beginning
+				// in order to improve cache locality.
+				b.head = 0
+				b.tail = 0
+			}
+
+			b.count--
+
+			b.mutex.Unlock()
+
+			if copied < count {
+				return copied, io.ErrShortBuffer
+			}
+			return copied, nil
+		}
+
+		if b.closed {
+			b.mutex.Unlock()
+			return 0, io.EOF
+		}
+
+		notify := b.notify
+		b.subs = true
+		b.mutex.Unlock()
+
+		select {
+		case <-b.readDeadline.Done():
+			return 0, &netError{ErrTimeout, true, true}
+		case <-notify:
+		}
+	}
+}
+
+// Close the buffer, unblocking any pending reads.
+// Data in the buffer can still be read, Read will return io.EOF only when empty.
+func (b *Buffer) Close() (err error) {
+	b.mutex.Lock()
+
+	if b.closed {
+		b.mutex.Unlock()
+		return nil
+	}
+
+	notify := b.notify
+	b.closed = true
+
+	b.mutex.Unlock()
+
+	close(notify)
+
+	return nil
+}
+
+// Count returns the number of packets in the buffer.
+func (b *Buffer) Count() int {
+	b.mutex.Lock()
+	defer b.mutex.Unlock()
+	return b.count
+}
+
+// SetLimitCount controls the maximum number of packets that can be buffered.
+// Causes Write to return ErrFull when this limit is reached.
+// A zero value will disable this limit.
+func (b *Buffer) SetLimitCount(limit int) {
+	b.mutex.Lock()
+	defer b.mutex.Unlock()
+
+	b.limitCount = limit
+}
+
+// Size returns the total byte size of packets in the buffer, including
+// a small amount of administrative overhead.
+func (b *Buffer) Size() int {
+	b.mutex.Lock()
+	defer b.mutex.Unlock()
+
+	return b.size()
+}
+
+func (b *Buffer) size() int {
+	size := b.tail - b.head
+	if size < 0 {
+		size += len(b.data)
+	}
+	return size
+}
+
+// SetLimitSize controls the maximum number of bytes that can be buffered.
+// Causes Write to return ErrFull when this limit is reached.
+// A zero value means 4MB since v0.11.0.
+//
+// User can set packetioSizeHardlimit build tag to enable 4MB hardlimit.
+// When packetioSizeHardlimit build tag is set, SetLimitSize exceeding
+// the hardlimit will be silently discarded.
+func (b *Buffer) SetLimitSize(limit int) {
+	b.mutex.Lock()
+	defer b.mutex.Unlock()
+
+	b.limitSize = limit
+}
+
+// SetReadDeadline sets the deadline for the Read operation.
+// Setting to zero means no deadline.
+func (b *Buffer) SetReadDeadline(t time.Time) error {
+	b.readDeadline.Set(t)
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/packetio/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/packetio/errors.go
new file mode 100644
index 000000000..06f1b9d98
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/packetio/errors.go
@@ -0,0 +1,27 @@
+package packetio
+
+import (
+	"errors"
+)
+
+// netError implements net.Error
+type netError struct {
+	error
+	timeout, temporary bool
+}
+
+func (e *netError) Timeout() bool {
+	return e.timeout
+}
+
+func (e *netError) Temporary() bool {
+	return e.temporary
+}
+
+var (
+	// ErrFull is returned when the buffer has hit the configured limits.
+	ErrFull = errors.New("packetio.Buffer is full, discarding write")
+
+	// ErrTimeout is returned when a deadline has expired
+	ErrTimeout = errors.New("i/o timeout")
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/packetio/hardlimit.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/packetio/hardlimit.go
new file mode 100644
index 000000000..5ddacc733
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/packetio/hardlimit.go
@@ -0,0 +1,5 @@
+// +build packetioSizeHardlimit
+
+package packetio
+
+const sizeHardlimit = true
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/packetio/no_hardlimit.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/packetio/no_hardlimit.go
new file mode 100644
index 000000000..55ea30865
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/packetio/no_hardlimit.go
@@ -0,0 +1,5 @@
+// +build !packetioSizeHardlimit
+
+package packetio
+
+const sizeHardlimit = false
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/replaydetector/fixedbig.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/replaydetector/fixedbig.go
new file mode 100644
index 000000000..a571a1aad
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/replaydetector/fixedbig.go
@@ -0,0 +1,78 @@
+package replaydetector
+
+import (
+	"fmt"
+)
+
+// fixedBigInt is the fix-sized multi-word integer.
+type fixedBigInt struct {
+	bits    []uint64
+	n       uint
+	msbMask uint64
+}
+
+// newFixedBigInt creates a new fix-sized multi-word int.
+func newFixedBigInt(n uint) *fixedBigInt {
+	chunkSize := (n + 63) / 64
+	if chunkSize == 0 {
+		chunkSize = 1
+	}
+	return &fixedBigInt{
+		bits:    make([]uint64, chunkSize),
+		n:       n,
+		msbMask: (1 << (64 - n%64)) - 1,
+	}
+}
+
+// Lsh is the left shift operation.
+func (s *fixedBigInt) Lsh(n uint) {
+	if n == 0 {
+		return
+	}
+	nChunk := int(n / 64)
+	nN := n % 64
+
+	for i := len(s.bits) - 1; i >= 0; i-- {
+		var carry uint64
+		if i-nChunk >= 0 {
+			carry = s.bits[i-nChunk] << nN
+			if i-nChunk-1 >= 0 {
+				carry |= s.bits[i-nChunk-1] >> (64 - nN)
+			}
+		}
+		s.bits[i] = (s.bits[i] << n) | carry
+	}
+	s.bits[len(s.bits)-1] &= s.msbMask
+}
+
+// Bit returns i-th bit of the fixedBigInt.
+func (s *fixedBigInt) Bit(i uint) uint {
+	if i >= s.n {
+		return 0
+	}
+	chunk := i / 64
+	pos := i % 64
+	if s.bits[chunk]&(1<<pos) != 0 {
+		return 1
+	}
+	return 0
+}
+
+// SetBit sets i-th bit to 1.
+func (s *fixedBigInt) SetBit(i uint) {
+	if i >= s.n {
+		return
+	}
+	chunk := i / 64
+	pos := i % 64
+	s.bits[chunk] |= 1 << pos
+}
+
+// String returns string representation of fixedBigInt.
+func (s *fixedBigInt) String() string {
+	var out string
+	for i := len(s.bits) - 1; i >= 0; i-- {
+		out += fmt.Sprintf("%016X", s.bits[i])
+	}
+	return out
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/replaydetector/replaydetector.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/replaydetector/replaydetector.go
new file mode 100644
index 000000000..d9420022b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/replaydetector/replaydetector.go
@@ -0,0 +1,116 @@
+// Package replaydetector provides packet replay detection algorithm.
+package replaydetector
+
+// ReplayDetector is the interface of sequence replay detector.
+type ReplayDetector interface {
+	// Check returns true if given sequence number is not replayed.
+	// Call accept() to mark the packet is received properly.
+	Check(seq uint64) (accept func(), ok bool)
+}
+
+type slidingWindowDetector struct {
+	latestSeq  uint64
+	maxSeq     uint64
+	windowSize uint
+	mask       *fixedBigInt
+}
+
+// New creates ReplayDetector.
+// Created ReplayDetector doesn't allow wrapping.
+// It can handle monotonically increasing sequence number up to
+// full 64bit number. It is suitable for DTLS replay protection.
+func New(windowSize uint, maxSeq uint64) ReplayDetector {
+	return &slidingWindowDetector{
+		maxSeq:     maxSeq,
+		windowSize: windowSize,
+		mask:       newFixedBigInt(windowSize),
+	}
+}
+
+func (d *slidingWindowDetector) Check(seq uint64) (accept func(), ok bool) {
+	if seq > d.maxSeq {
+		// Exceeded upper limit.
+		return func() {}, false
+	}
+
+	if seq <= d.latestSeq {
+		if d.latestSeq >= uint64(d.windowSize)+seq {
+			return func() {}, false
+		}
+		if d.mask.Bit(uint(d.latestSeq-seq)) != 0 {
+			// The sequence number is duplicated.
+			return func() {}, false
+		}
+	}
+
+	return func() {
+		if seq > d.latestSeq {
+			// Update the head of the window.
+			d.mask.Lsh(uint(seq - d.latestSeq))
+			d.latestSeq = seq
+		}
+		diff := (d.latestSeq - seq) % d.maxSeq
+		d.mask.SetBit(uint(diff))
+	}, true
+}
+
+// WithWrap creates ReplayDetector allowing sequence wrapping.
+// This is suitable for short bitwidth counter like SRTP and SRTCP.
+func WithWrap(windowSize uint, maxSeq uint64) ReplayDetector {
+	return &wrappedSlidingWindowDetector{
+		maxSeq:     maxSeq,
+		windowSize: windowSize,
+		mask:       newFixedBigInt(windowSize),
+	}
+}
+
+type wrappedSlidingWindowDetector struct {
+	latestSeq  uint64
+	maxSeq     uint64
+	windowSize uint
+	mask       *fixedBigInt
+	init       bool
+}
+
+func (d *wrappedSlidingWindowDetector) Check(seq uint64) (accept func(), ok bool) {
+	if seq > d.maxSeq {
+		// Exceeded upper limit.
+		return func() {}, false
+	}
+	if !d.init {
+		if seq != 0 {
+			d.latestSeq = seq - 1
+		} else {
+			d.latestSeq = d.maxSeq
+		}
+		d.init = true
+	}
+
+	diff := int64(d.latestSeq) - int64(seq)
+	// Wrap the number.
+	if diff > int64(d.maxSeq)/2 {
+		diff -= int64(d.maxSeq + 1)
+	} else if diff <= -int64(d.maxSeq)/2 {
+		diff += int64(d.maxSeq + 1)
+	}
+
+	if diff >= int64(d.windowSize) {
+		// Too old.
+		return func() {}, false
+	}
+	if diff >= 0 {
+		if d.mask.Bit(uint(diff)) != 0 {
+			// The sequence number is duplicated.
+			return func() {}, false
+		}
+	}
+
+	return func() {
+		if diff < 0 {
+			// Update the head of the window.
+			d.mask.Lsh(uint(-diff))
+			d.latestSeq = seq
+		}
+		d.mask.SetBit(uint(d.latestSeq - seq))
+	}, true
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/.gitignore b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/.gitignore
new file mode 100644
index 000000000..d39fb86a3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/.gitignore
@@ -0,0 +1 @@
+*.sw[poe]
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/README.md
new file mode 100644
index 000000000..b502f9f8e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/README.md
@@ -0,0 +1,239 @@
+# vnet
+A virtual network layer for pion.
+
+## Overview
+
+### Goals
+* To make NAT traversal tests easy.
+* To emulate packet impairment at application level for testing.
+* To monitor packets at specified arbitrary interfaces.
+
+### Features
+* Configurable virtual LAN and WAN
+* Virtually hosted ICE servers
+
+### Virtual network components
+
+#### Top View
+```
+                           ......................................
+                           :         Virtual Network (vnet)     :
+                           :                                    :
+   +-------+ *         1 +----+         +--------+              :
+   | :App  |------------>|:Net|--o<-----|:Router |              :
+   +-------+             +----+         |        |              :
+   +-----------+ *     1 +----+         |        |              :
+   |:STUNServer|-------->|:Net|--o<-----|        |              :
+   +-----------+         +----+         |        |              :
+   +-----------+ *     1 +----+         |        |              :
+   |:TURNServer|-------->|:Net|--o<-----|        |              :
+   +-----------+         +----+ [1]     |        |              :
+                           :          1 |        | 1  <<has>>   :
+                           :      +---<>|        |<>----+ [2]   :
+                           :      |     +--------+      |       :
+                         To form  |      *|             v 0..1  :
+                   a subnet tree  |       o [3]      +-----+    :
+                           :      |       ^          |:NAT |    :
+                           :      |       |          +-----+    :
+                           :      +-------+                     :
+                           ......................................
+    Note:
+        o: NIC (Netork Interface Controller)
+      [1]: Net implments NIC interface.
+      [2]: Root router has no NAT. All child routers have a NAT always.
+      [3]: Router implements NIC interface for accesses from the
+           parent router.
+```
+
+#### Net
+Net provides 3 interfaces:
+* Configuration API (direct)
+* Network API via Net (equivalent to net.Xxx())
+* Router access via NIC interface
+```
+                   (Pion module/app, ICE servers, etc.)
+                             +-----------+
+                             |   :App    |
+                             +-----------+
+                                 * | 
+                                   | <<uses>>
+                                 1 v
+   +---------+ 1           * +-----------+ 1    * +-----------+ 1    * +------+
+ ..| :Router |----+------>o--|   :Net    |<>------|:Interface |<>------|:Addr |
+   +---------+    |      NIC +-----------+        +-----------+        +------+
+                  | <<interface>>               (vnet.Interface)      (net.Addr)
+                  |
+                  |        * +-----------+ 1    * +-----------+ 1    * +------+
+                  +------>o--|  :Router  |<>------|:Interface |<>------|:Addr |
+                         NIC +-----------+        +-----------+        +------+
+                    <<interface>>               (vnet.Interface)      (net.Addr)
+```
+
+> The instance of `Net` will be the one passed around the project.
+> Net class has public methods for configuration and for application use.
+
+
+## Implementation
+
+### Design Policy
+* Each pion package should have config object which has `Net` (of type vnet.Net) property. (just like how
+        we distribute `LoggerFactory` throughout the pion project.
+* DNS => a simple dictionary (global)?
+* Each Net has routing capability (a goroutine)
+* Use interface provided net package as much as possible
+* Routers are connected in a tree structure (no loop is allowed)
+   - To simplify routing
+   - Easy to control / monitor (stats, etc)
+* Root router has no NAT (== Internet / WAN)
+* Non-root router has a NAT always
+* When a Net is instantiated, it will automatically add `lo0` and `eth0` interface, and `lo0` will
+have one IP address, 127.0.0.1. (this is not used in pion/ice, however)
+* When a Net is added to a router, the router automatically assign an IP address for `eth0`
+interface.
+   - For simplicity
+* User data won't fragment, but optionally drop chunk larger than MTU
+* IPv6 is not supported
+
+### Basic steps for setting up virtual network
+1. Create a root router (WAN)
+1. Create child routers and add to its parent (forms a tree, don't create a loop!)
+1. Add instances of Net to each routers
+1. Call Stop(), or Stop(), on the top router, which propages all other routers
+
+#### Example: WAN with one endpoint (vnet)
+```go
+import (
+	"net"
+
+	"github.com/pion/transport/vnet"
+	"github.com/pion/logging"
+)
+
+// Create WAN (a root router).
+wan, err := vnet.NewRouter(&RouterConfig{
+    CIDR:          "0.0.0.0/0",
+    LoggerFactory: logging.NewDefaultLoggerFactory(),
+})
+
+// Create a network.
+// You can specify a static IP for the instance of Net to use. If not specified,
+// router will assign an IP address that is contained in the router's CIDR.
+nw := vnet.NewNet(&vnet.NetConfig{
+    StaticIP: "27.1.2.3",
+})
+
+// Add the network to the router.
+// The router will assign an IP address to `nw`.
+if err = wan.AddNet(nw); err != nil {
+    // handle error
+}
+
+// Start router.
+// This will start internal goroutine to route packets.
+// If you set child routers (using AddRouter), the call on the root router
+// will start the rest of routers for you.
+if err = wan.Start(); err != nil {
+    // handle error
+}
+
+//
+// Your application runs here using `nw`.
+//
+
+// Stop the router.
+// This will stop all internal goroutines in the router tree.
+// (No need to call Stop() on child routers)
+if err = wan.Stop(); err != nil {
+    // handle error
+}
+```
+
+#### Example of how to pass around the instance of vnet.Net
+The instance of vnet.Net wraps a subset of net package to enable operations
+on the virtual network. Your project must be able to pass the instance to
+all your routines that do network operation with net package. A typical way
+is to use a config param to create your instances with the virtual network
+instance (`nw` in the above example) like this:
+
+```go
+type AgentConfig struct {
+    :
+    Net:  *vnet.Net,
+}
+
+type Agent struct {
+     :
+    net:  *vnet.Net,
+}
+
+func NetAgent(config *AgentConfig) *Agent {
+    if config.Net == nil {
+        config.Net = vnet.NewNet(nil) // defaults to native operation
+    }
+    
+    return &Agent {
+         :
+        net: config.Net,
+    }
+}
+```
+
+```go
+// a.net is the instance of vnet.Net class
+func (a *Agent) listenUDP(...) error {
+    conn, err := a.net.ListenPacket(udpString, ...)
+    if err != nil {
+        return nil, err
+    }
+      :
+}
+```
+
+
+### Compatibility and Support Status
+
+|`net`<br>(built-in)|`vnet`|Note|
+|---|---|---|
+|net.Interfaces()|a.net.Interfaces()||
+|net.InterfaceByName()|a.net.InterfaceByName()||
+|net.ResolveUDPAddr()|a.net.ResolveUDPAddr()||
+|net.ListenPacket()|a.net.ListenPacket()||
+|net.ListenUDP()|a.net.ListenUDP()|(ListenPacket() is recommended)|
+|net.Listen()|a.net.Listen()|(TODO)|
+|net.ListenTCP()|(not supported)|(Listen() would be recommended)|
+|net.Dial()|a.net.Dial()||
+|net.DialUDP()|a.net.DialUDP()||
+|net.DialTCP()|(not supported)||
+|net.Interface|vnet.Interface||
+|net.PacketConn|(use it as-is)||
+|net.UDPConn|vnet.UDPConn|Use vnet.UDPPacketConn in your code|
+|net.TCPConn|vnet.TCPConn|(TODO)|Use net.Conn in your code|
+|net.Dialer|vnet.Dialer|Use a.net.CreateDialer() to create it.<br>The use of vnet.Dialer is currently experimental.|
+
+> `a.net` is an instance of Net class, and types are defined under the package name `vnet`
+
+> Most of other `interface` types in net package can be used as is.
+
+> Please post a github issue when other types/methods need to be added to vnet/vnet.Net.
+
+## TODO / Next Step
+* Implement TCP (TCPConn, Listen)
+* Support of IPv6
+* Write a bunch of examples for building virtual networks.
+* Add network impairment features (on Router)
+  - Introduce lantecy / jitter
+  - Packet filtering handler (allow selectively drop packets, etc.)
+* Add statistics data retrieval
+  - Total number of packets forward by each router
+  - Total number of packet loss
+  - Total number of connection failure (TCP)
+
+## References
+* [Comparing Simulated Packet Loss and RealWorld Network Congestion](https://www.riverbed.com/document/fpo/WhitePaper-Riverbed-SimulatedPacketLoss.pdf)
+
+### Code experiments
+* [CIDR and IPMask](https://play.golang.org/p/B7OBhkZqjmj)
+* [Test with net.IP](https://play.golang.org/p/AgXd23wKY4W)
+* [ListenPacket](https://play.golang.org/p/d4vasbnRimQ)
+* [isDottedIP()](https://play.golang.org/p/t4aZ47TgJfO)
+* [SplitHostPort](https://play.golang.org/p/JtvurlcMbhn)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/chunk.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/chunk.go
new file mode 100644
index 000000000..7a87a2fd7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/chunk.go
@@ -0,0 +1,283 @@
+package vnet
+
+import (
+	"fmt"
+	"net"
+	"strconv"
+	"strings"
+	"sync/atomic"
+	"time"
+)
+
+type tcpFlag uint8
+
+const (
+	tcpFIN tcpFlag = 0x01
+	tcpSYN tcpFlag = 0x02
+	tcpRST tcpFlag = 0x04
+	tcpPSH tcpFlag = 0x08
+	tcpACK tcpFlag = 0x10
+)
+
+func (f tcpFlag) String() string {
+	var sa []string
+	if f&tcpFIN != 0 {
+		sa = append(sa, "FIN")
+	}
+	if f&tcpSYN != 0 {
+		sa = append(sa, "SYN")
+	}
+	if f&tcpRST != 0 {
+		sa = append(sa, "RST")
+	}
+	if f&tcpPSH != 0 {
+		sa = append(sa, "PSH")
+	}
+	if f&tcpACK != 0 {
+		sa = append(sa, "ACK")
+	}
+
+	return strings.Join(sa, "-")
+}
+
+// Generate a base36-encoded unique tag
+// See: https://play.golang.org/p/0ZaAID1q-HN
+var assignChunkTag = func() func() string { //nolint:gochecknoglobals
+	var tagCtr uint64
+
+	return func() string {
+		n := atomic.AddUint64(&tagCtr, 1)
+		return strconv.FormatUint(n, 36)
+	}
+}()
+
+// Chunk represents a packet passed around in the vnet
+type Chunk interface {
+	setTimestamp() time.Time                 // used by router
+	getTimestamp() time.Time                 // used by router
+	getSourceIP() net.IP                     // used by router
+	getDestinationIP() net.IP                // used by router
+	setSourceAddr(address string) error      // used by nat
+	setDestinationAddr(address string) error // used by nat
+
+	SourceAddr() net.Addr
+	DestinationAddr() net.Addr
+	UserData() []byte
+	Tag() string
+	Clone() Chunk
+	Network() string // returns "udp" or "tcp"
+	String() string
+}
+
+type chunkIP struct {
+	timestamp     time.Time
+	sourceIP      net.IP
+	destinationIP net.IP
+	tag           string
+}
+
+func (c *chunkIP) setTimestamp() time.Time {
+	c.timestamp = time.Now()
+	return c.timestamp
+}
+
+func (c *chunkIP) getTimestamp() time.Time {
+	return c.timestamp
+}
+
+func (c *chunkIP) getDestinationIP() net.IP {
+	return c.destinationIP
+}
+
+func (c *chunkIP) getSourceIP() net.IP {
+	return c.sourceIP
+}
+
+func (c *chunkIP) Tag() string {
+	return c.tag
+}
+
+type chunkUDP struct {
+	chunkIP
+	sourcePort      int
+	destinationPort int
+	userData        []byte
+}
+
+func newChunkUDP(srcAddr, dstAddr *net.UDPAddr) *chunkUDP {
+	return &chunkUDP{
+		chunkIP: chunkIP{
+			sourceIP:      srcAddr.IP,
+			destinationIP: dstAddr.IP,
+			tag:           assignChunkTag(),
+		},
+		sourcePort:      srcAddr.Port,
+		destinationPort: dstAddr.Port,
+	}
+}
+
+func (c *chunkUDP) SourceAddr() net.Addr {
+	return &net.UDPAddr{
+		IP:   c.sourceIP,
+		Port: c.sourcePort,
+	}
+}
+
+func (c *chunkUDP) DestinationAddr() net.Addr {
+	return &net.UDPAddr{
+		IP:   c.destinationIP,
+		Port: c.destinationPort,
+	}
+}
+
+func (c *chunkUDP) UserData() []byte {
+	return c.userData
+}
+
+func (c *chunkUDP) Clone() Chunk {
+	var userData []byte
+	if c.userData != nil {
+		userData = make([]byte, len(c.userData))
+		copy(userData, c.userData)
+	}
+
+	return &chunkUDP{
+		chunkIP: chunkIP{
+			timestamp:     c.timestamp,
+			sourceIP:      c.sourceIP,
+			destinationIP: c.destinationIP,
+			tag:           c.tag,
+		},
+		sourcePort:      c.sourcePort,
+		destinationPort: c.destinationPort,
+		userData:        userData,
+	}
+}
+
+func (c *chunkUDP) Network() string {
+	return udpString
+}
+
+func (c *chunkUDP) String() string {
+	src := c.SourceAddr()
+	dst := c.DestinationAddr()
+	return fmt.Sprintf("%s chunk %s %s => %s",
+		src.Network(),
+		c.tag,
+		src.String(),
+		dst.String(),
+	)
+}
+
+func (c *chunkUDP) setSourceAddr(address string) error {
+	addr, err := net.ResolveUDPAddr(udpString, address)
+	if err != nil {
+		return err
+	}
+	c.sourceIP = addr.IP
+	c.sourcePort = addr.Port
+	return nil
+}
+
+func (c *chunkUDP) setDestinationAddr(address string) error {
+	addr, err := net.ResolveUDPAddr(udpString, address)
+	if err != nil {
+		return err
+	}
+	c.destinationIP = addr.IP
+	c.destinationPort = addr.Port
+	return nil
+}
+
+type chunkTCP struct {
+	chunkIP
+	sourcePort      int
+	destinationPort int
+	flags           tcpFlag // control bits
+	userData        []byte  // only with PSH flag
+	// seq             uint32  // always starts with 0
+	// ack             uint32  // always starts with 0
+}
+
+func newChunkTCP(srcAddr, dstAddr *net.TCPAddr, flags tcpFlag) *chunkTCP {
+	return &chunkTCP{
+		chunkIP: chunkIP{
+			sourceIP:      srcAddr.IP,
+			destinationIP: dstAddr.IP,
+			tag:           assignChunkTag(),
+		},
+		sourcePort:      srcAddr.Port,
+		destinationPort: dstAddr.Port,
+		flags:           flags,
+	}
+}
+
+func (c *chunkTCP) SourceAddr() net.Addr {
+	return &net.TCPAddr{
+		IP:   c.sourceIP,
+		Port: c.sourcePort,
+	}
+}
+
+func (c *chunkTCP) DestinationAddr() net.Addr {
+	return &net.TCPAddr{
+		IP:   c.destinationIP,
+		Port: c.destinationPort,
+	}
+}
+
+func (c *chunkTCP) UserData() []byte {
+	return c.userData
+}
+
+func (c *chunkTCP) Clone() Chunk {
+	userData := make([]byte, len(c.userData))
+	copy(userData, c.userData)
+
+	return &chunkTCP{
+		chunkIP: chunkIP{
+			timestamp:     c.timestamp,
+			sourceIP:      c.sourceIP,
+			destinationIP: c.destinationIP,
+		},
+		sourcePort:      c.sourcePort,
+		destinationPort: c.destinationPort,
+		userData:        userData,
+	}
+}
+
+func (c *chunkTCP) Network() string {
+	return "tcp"
+}
+
+func (c *chunkTCP) String() string {
+	src := c.SourceAddr()
+	dst := c.DestinationAddr()
+	return fmt.Sprintf("%s %s chunk %s %s => %s",
+		src.Network(),
+		c.flags.String(),
+		c.tag,
+		src.String(),
+		dst.String(),
+	)
+}
+
+func (c *chunkTCP) setSourceAddr(address string) error {
+	addr, err := net.ResolveTCPAddr("tcp", address)
+	if err != nil {
+		return err
+	}
+	c.sourceIP = addr.IP
+	c.sourcePort = addr.Port
+	return nil
+}
+
+func (c *chunkTCP) setDestinationAddr(address string) error {
+	addr, err := net.ResolveTCPAddr("tcp", address)
+	if err != nil {
+		return err
+	}
+	c.destinationIP = addr.IP
+	c.destinationPort = addr.Port
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/chunk_queue.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/chunk_queue.go
new file mode 100644
index 000000000..7b2446224
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/chunk_queue.go
@@ -0,0 +1,52 @@
+package vnet
+
+import (
+	"sync"
+)
+
+type chunkQueue struct {
+	chunks  []Chunk
+	maxSize int // 0 or negative value: unlimited
+	mutex   sync.RWMutex
+}
+
+func newChunkQueue(maxSize int) *chunkQueue {
+	return &chunkQueue{maxSize: maxSize}
+}
+
+func (q *chunkQueue) push(c Chunk) bool {
+	q.mutex.Lock()
+	defer q.mutex.Unlock()
+
+	if q.maxSize > 0 && len(q.chunks) >= q.maxSize {
+		return false // dropped
+	}
+
+	q.chunks = append(q.chunks, c)
+	return true
+}
+
+func (q *chunkQueue) pop() (Chunk, bool) {
+	q.mutex.Lock()
+	defer q.mutex.Unlock()
+
+	if len(q.chunks) == 0 {
+		return nil, false
+	}
+
+	c := q.chunks[0]
+	q.chunks = q.chunks[1:]
+
+	return c, true
+}
+
+func (q *chunkQueue) peek() Chunk {
+	q.mutex.RLock()
+	defer q.mutex.RUnlock()
+
+	if len(q.chunks) == 0 {
+		return nil
+	}
+
+	return q.chunks[0]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/conn.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/conn.go
new file mode 100644
index 000000000..f4b8b9290
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/conn.go
@@ -0,0 +1,246 @@
+package vnet
+
+import (
+	"errors"
+	"io"
+	"math"
+	"net"
+	"sync"
+	"time"
+)
+
+const (
+	maxReadQueueSize = 1024
+)
+
+var (
+	errObsCannotBeNil       = errors.New("obs cannot be nil")
+	errUseClosedNetworkConn = errors.New("use of closed network connection")
+	errAddrNotUDPAddr       = errors.New("addr is not a net.UDPAddr")
+	errLocAddr              = errors.New("something went wrong with locAddr")
+	errAlreadyClosed        = errors.New("already closed")
+	errNoRemAddr            = errors.New("no remAddr defined")
+)
+
+// UDPPacketConn is packet-oriented connection for UDP.
+type UDPPacketConn interface {
+	net.PacketConn
+	Read(b []byte) (int, error)
+	RemoteAddr() net.Addr
+	Write(b []byte) (int, error)
+}
+
+// vNet implements this
+type connObserver interface {
+	write(c Chunk) error
+	onClosed(addr net.Addr)
+	determineSourceIP(locIP, dstIP net.IP) net.IP
+}
+
+// UDPConn is the implementation of the Conn and PacketConn interfaces for UDP network connections.
+// comatible with net.PacketConn and net.Conn
+type UDPConn struct {
+	locAddr   *net.UDPAddr // read-only
+	remAddr   *net.UDPAddr // read-only
+	obs       connObserver // read-only
+	readCh    chan Chunk   // thread-safe
+	closed    bool         // requires mutex
+	mu        sync.Mutex   // to mutex closed flag
+	readTimer *time.Timer  // thread-safe
+}
+
+func newUDPConn(locAddr, remAddr *net.UDPAddr, obs connObserver) (*UDPConn, error) {
+	if obs == nil {
+		return nil, errObsCannotBeNil
+	}
+
+	return &UDPConn{
+		locAddr:   locAddr,
+		remAddr:   remAddr,
+		obs:       obs,
+		readCh:    make(chan Chunk, maxReadQueueSize),
+		readTimer: time.NewTimer(time.Duration(math.MaxInt64)),
+	}, nil
+}
+
+// ReadFrom reads a packet from the connection,
+// copying the payload into p. It returns the number of
+// bytes copied into p and the return address that
+// was on the packet.
+// It returns the number of bytes read (0 <= n <= len(p))
+// and any error encountered. Callers should always process
+// the n > 0 bytes returned before considering the error err.
+// ReadFrom can be made to time out and return
+// an Error with Timeout() == true after a fixed time limit;
+// see SetDeadline and SetReadDeadline.
+func (c *UDPConn) ReadFrom(p []byte) (n int, addr net.Addr, err error) {
+loop:
+	for {
+		select {
+		case chunk, ok := <-c.readCh:
+			if !ok {
+				break loop
+			}
+			var err error
+			n := copy(p, chunk.UserData())
+			addr := chunk.SourceAddr()
+			if n < len(chunk.UserData()) {
+				err = io.ErrShortBuffer
+			}
+
+			if c.remAddr != nil {
+				if addr.String() != c.remAddr.String() {
+					break // discard (shouldn't happen)
+				}
+			}
+			return n, addr, err
+
+		case <-c.readTimer.C:
+			return 0, nil, &net.OpError{
+				Op:   "read",
+				Net:  c.locAddr.Network(),
+				Addr: c.locAddr,
+				Err:  newTimeoutError("i/o timeout"),
+			}
+		}
+	}
+
+	return 0, nil, &net.OpError{
+		Op:   "read",
+		Net:  c.locAddr.Network(),
+		Addr: c.locAddr,
+		Err:  errUseClosedNetworkConn,
+	}
+}
+
+// WriteTo writes a packet with payload p to addr.
+// WriteTo can be made to time out and return
+// an Error with Timeout() == true after a fixed time limit;
+// see SetDeadline and SetWriteDeadline.
+// On packet-oriented connections, write timeouts are rare.
+func (c *UDPConn) WriteTo(p []byte, addr net.Addr) (n int, err error) {
+	dstAddr, ok := addr.(*net.UDPAddr)
+	if !ok {
+		return 0, errAddrNotUDPAddr
+	}
+
+	srcIP := c.obs.determineSourceIP(c.locAddr.IP, dstAddr.IP)
+	if srcIP == nil {
+		return 0, errLocAddr
+	}
+	srcAddr := &net.UDPAddr{
+		IP:   srcIP,
+		Port: c.locAddr.Port,
+	}
+
+	chunk := newChunkUDP(srcAddr, dstAddr)
+	chunk.userData = make([]byte, len(p))
+	copy(chunk.userData, p)
+	if err := c.obs.write(chunk); err != nil {
+		return 0, err
+	}
+	return len(p), nil
+}
+
+// Close closes the connection.
+// Any blocked ReadFrom or WriteTo operations will be unblocked and return errors.
+func (c *UDPConn) Close() error {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+
+	if c.closed {
+		return errAlreadyClosed
+	}
+	c.closed = true
+	close(c.readCh)
+
+	c.obs.onClosed(c.locAddr)
+	return nil
+}
+
+// LocalAddr returns the local network address.
+func (c *UDPConn) LocalAddr() net.Addr {
+	return c.locAddr
+}
+
+// SetDeadline sets the read and write deadlines associated
+// with the connection. It is equivalent to calling both
+// SetReadDeadline and SetWriteDeadline.
+//
+// A deadline is an absolute time after which I/O operations
+// fail with a timeout (see type Error) instead of
+// blocking. The deadline applies to all future and pending
+// I/O, not just the immediately following call to ReadFrom or
+// WriteTo. After a deadline has been exceeded, the connection
+// can be refreshed by setting a deadline in the future.
+//
+// An idle timeout can be implemented by repeatedly extending
+// the deadline after successful ReadFrom or WriteTo calls.
+//
+// A zero value for t means I/O operations will not time out.
+func (c *UDPConn) SetDeadline(t time.Time) error {
+	return c.SetReadDeadline(t)
+}
+
+// SetReadDeadline sets the deadline for future ReadFrom calls
+// and any currently-blocked ReadFrom call.
+// A zero value for t means ReadFrom will not time out.
+func (c *UDPConn) SetReadDeadline(t time.Time) error {
+	var d time.Duration
+	var noDeadline time.Time
+	if t == noDeadline {
+		d = time.Duration(math.MaxInt64)
+	} else {
+		d = time.Until(t)
+	}
+	c.readTimer.Reset(d)
+	return nil
+}
+
+// SetWriteDeadline sets the deadline for future WriteTo calls
+// and any currently-blocked WriteTo call.
+// Even if write times out, it may return n > 0, indicating that
+// some of the data was successfully written.
+// A zero value for t means WriteTo will not time out.
+func (c *UDPConn) SetWriteDeadline(t time.Time) error {
+	// Write never blocks.
+	return nil
+}
+
+// Read reads data from the connection.
+// Read can be made to time out and return an Error with Timeout() == true
+// after a fixed time limit; see SetDeadline and SetReadDeadline.
+func (c *UDPConn) Read(b []byte) (int, error) {
+	n, _, err := c.ReadFrom(b)
+	return n, err
+}
+
+// RemoteAddr returns the remote network address.
+func (c *UDPConn) RemoteAddr() net.Addr {
+	return c.remAddr
+}
+
+// Write writes data to the connection.
+// Write can be made to time out and return an Error with Timeout() == true
+// after a fixed time limit; see SetDeadline and SetWriteDeadline.
+func (c *UDPConn) Write(b []byte) (int, error) {
+	if c.remAddr == nil {
+		return 0, errNoRemAddr
+	}
+
+	return c.WriteTo(b, c.remAddr)
+}
+
+func (c *UDPConn) onInboundChunk(chunk Chunk) {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+
+	if c.closed {
+		return
+	}
+
+	select {
+	case c.readCh <- chunk:
+	default:
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/conn_map.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/conn_map.go
new file mode 100644
index 000000000..d52818d27
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/conn_map.go
@@ -0,0 +1,136 @@
+package vnet
+
+import (
+	"errors"
+	"net"
+	"sync"
+)
+
+var (
+	errAddressAlreadyInUse       = errors.New("address already in use")
+	errNoSuchUDPConn             = errors.New("no such UDPConn")
+	errCannotRemoveUnspecifiedIP = errors.New("cannot remove unspecified IP by the specified IP")
+)
+
+type udpConnMap struct {
+	portMap map[int][]*UDPConn
+	mutex   sync.RWMutex
+}
+
+func newUDPConnMap() *udpConnMap {
+	return &udpConnMap{
+		portMap: map[int][]*UDPConn{},
+	}
+}
+
+func (m *udpConnMap) insert(conn *UDPConn) error {
+	m.mutex.Lock()
+	defer m.mutex.Unlock()
+
+	udpAddr := conn.LocalAddr().(*net.UDPAddr)
+
+	// check if the port has a listener
+	conns, ok := m.portMap[udpAddr.Port]
+	if ok {
+		if udpAddr.IP.IsUnspecified() {
+			return errAddressAlreadyInUse
+		}
+
+		for _, conn := range conns {
+			laddr := conn.LocalAddr().(*net.UDPAddr)
+			if laddr.IP.IsUnspecified() || laddr.IP.Equal(udpAddr.IP) {
+				return errAddressAlreadyInUse
+			}
+		}
+
+		conns = append(conns, conn)
+	} else {
+		conns = []*UDPConn{conn}
+	}
+
+	m.portMap[udpAddr.Port] = conns
+	return nil
+}
+
+func (m *udpConnMap) find(addr net.Addr) (*UDPConn, bool) {
+	m.mutex.Lock() // could be RLock, but we have delete() op
+	defer m.mutex.Unlock()
+
+	udpAddr := addr.(*net.UDPAddr)
+
+	if conns, ok := m.portMap[udpAddr.Port]; ok {
+		if udpAddr.IP.IsUnspecified() {
+			// pick the first one appears in the iteration
+			if len(conns) == 0 {
+				// This can't happen!
+				delete(m.portMap, udpAddr.Port)
+				return nil, false
+			}
+			return conns[0], true
+		}
+
+		for _, conn := range conns {
+			laddr := conn.LocalAddr().(*net.UDPAddr)
+			if laddr.IP.IsUnspecified() || laddr.IP.Equal(udpAddr.IP) {
+				return conn, ok
+			}
+		}
+	}
+
+	return nil, false
+}
+
+func (m *udpConnMap) delete(addr net.Addr) error {
+	m.mutex.Lock()
+	defer m.mutex.Unlock()
+
+	udpAddr := addr.(*net.UDPAddr)
+
+	conns, ok := m.portMap[udpAddr.Port]
+	if !ok {
+		return errNoSuchUDPConn
+	}
+
+	if udpAddr.IP.IsUnspecified() {
+		// remove all from this port
+		delete(m.portMap, udpAddr.Port)
+		return nil
+	}
+
+	newConns := []*UDPConn{}
+
+	for _, conn := range conns {
+		laddr := conn.LocalAddr().(*net.UDPAddr)
+		if laddr.IP.IsUnspecified() {
+			// This can't happen!
+			return errCannotRemoveUnspecifiedIP
+		}
+
+		if laddr.IP.Equal(udpAddr.IP) {
+			continue
+		}
+
+		newConns = append(newConns, conn)
+	}
+
+	if len(newConns) == 0 {
+		delete(m.portMap, udpAddr.Port)
+	} else {
+		m.portMap[udpAddr.Port] = newConns
+	}
+
+	return nil
+}
+
+// size returns the number of UDPConns (UDP listeners)
+func (m *udpConnMap) size() int {
+	m.mutex.RLock()
+	defer m.mutex.RUnlock()
+
+	n := 0
+	for _, conns := range m.portMap {
+		n += len(conns)
+	}
+
+	return n
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/errors.go
new file mode 100644
index 000000000..d0e9394f5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/errors.go
@@ -0,0 +1,19 @@
+package vnet
+
+type timeoutError struct {
+	msg string
+}
+
+func newTimeoutError(msg string) error {
+	return &timeoutError{
+		msg: msg,
+	}
+}
+
+func (e *timeoutError) Error() string {
+	return e.msg
+}
+
+func (e *timeoutError) Timeout() bool {
+	return true
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/interface.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/interface.go
new file mode 100644
index 000000000..ec80c0b78
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/interface.go
@@ -0,0 +1,40 @@
+package vnet
+
+import (
+	"errors"
+	"net"
+)
+
+var errNoAddressAssigned = errors.New("no address assigned")
+
+// See: https://play.golang.org/p/nBO9KGYEziv
+
+// InterfaceBase ...
+type InterfaceBase net.Interface
+
+// Interface ...
+type Interface struct {
+	InterfaceBase
+	addrs []net.Addr
+}
+
+// NewInterface ...
+func NewInterface(ifc net.Interface) *Interface {
+	return &Interface{
+		InterfaceBase: InterfaceBase(ifc),
+		addrs:         nil,
+	}
+}
+
+// AddAddr ...
+func (ifc *Interface) AddAddr(addr net.Addr) {
+	ifc.addrs = append(ifc.addrs, addr)
+}
+
+// Addrs ...
+func (ifc *Interface) Addrs() ([]net.Addr, error) {
+	if len(ifc.addrs) == 0 {
+		return nil, errNoAddressAssigned
+	}
+	return ifc.addrs, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/nat.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/nat.go
new file mode 100644
index 000000000..4ece5faad
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/nat.go
@@ -0,0 +1,338 @@
+package vnet
+
+import (
+	"errors"
+	"fmt"
+	"net"
+	"sync"
+	"time"
+
+	"github.com/pion/logging"
+)
+
+var (
+	errNATRequriesMapping            = errors.New("1:1 NAT requires more than one mapping")
+	errMismatchLengthIP              = errors.New("length mismtach between mappedIPs and localIPs")
+	errNonUDPTranslationNotSupported = errors.New("non-udp translation is not supported yet")
+	errNoAssociatedLocalAddress      = errors.New("no associated local address")
+	errNoNATBindingFound             = errors.New("no NAT binding found")
+	errHasNoPermission               = errors.New("has no permission")
+)
+
+// EndpointDependencyType defines a type of behavioral dependendency on the
+// remote endpoint's IP address or port number. This is used for the two
+// kinds of behaviors:
+//  - Port mapping behavior
+//  - Filtering behavior
+// See: https://tools.ietf.org/html/rfc4787
+type EndpointDependencyType uint8
+
+const (
+	// EndpointIndependent means the behavior is independent of the endpoint's address or port
+	EndpointIndependent EndpointDependencyType = iota
+	// EndpointAddrDependent means the behavior is dependent on the endpoint's address
+	EndpointAddrDependent
+	// EndpointAddrPortDependent means the behavior is dependent on the endpoint's address and port
+	EndpointAddrPortDependent
+)
+
+// NATMode defines basic behavior of the NAT
+type NATMode uint8
+
+const (
+	// NATModeNormal means the NAT behaves as a standard NAPT (RFC 2663).
+	NATModeNormal NATMode = iota
+	// NATModeNAT1To1 exhibits 1:1 DNAT where the external IP address is statically mapped to
+	// a specific local IP address with port number is preserved always between them.
+	// When this mode is selected, MappingBehavior, FilteringBehavior, PortPreservation and
+	// MappingLifeTime of NATType are ignored.
+	NATModeNAT1To1
+)
+
+const (
+	defaultNATMappingLifeTime = 30 * time.Second
+)
+
+// NATType has a set of parameters that define the behavior of NAT.
+type NATType struct {
+	Mode              NATMode
+	MappingBehavior   EndpointDependencyType
+	FilteringBehavior EndpointDependencyType
+	Hairpining        bool // Not implemented yet
+	PortPreservation  bool // Not implemented yet
+	MappingLifeTime   time.Duration
+}
+
+type natConfig struct {
+	name          string
+	natType       NATType
+	mappedIPs     []net.IP // mapped IPv4
+	localIPs      []net.IP // local IPv4, required only when the mode is NATModeNAT1To1
+	loggerFactory logging.LoggerFactory
+}
+
+type mapping struct {
+	proto   string              // "udp" or "tcp"
+	local   string              // "<local-ip>:<local-port>"
+	mapped  string              // "<mapped-ip>:<mapped-port>"
+	bound   string              // key: "[<remote-ip>[:<remote-port>]]"
+	filters map[string]struct{} // key: "[<remote-ip>[:<remote-port>]]"
+	expires time.Time           // time to expire
+}
+
+type networkAddressTranslator struct {
+	name           string
+	natType        NATType
+	mappedIPs      []net.IP            // mapped IPv4
+	localIPs       []net.IP            // local IPv4, required only when the mode is NATModeNAT1To1
+	outboundMap    map[string]*mapping // key: "<proto>:<local-ip>:<local-port>[:remote-ip[:remote-port]]
+	inboundMap     map[string]*mapping // key: "<proto>:<mapped-ip>:<mapped-port>"
+	udpPortCounter int
+	mutex          sync.RWMutex
+	log            logging.LeveledLogger
+}
+
+func newNAT(config *natConfig) (*networkAddressTranslator, error) {
+	natType := config.natType
+
+	if natType.Mode == NATModeNAT1To1 {
+		// 1:1 NAT behavior
+		natType.MappingBehavior = EndpointIndependent
+		natType.FilteringBehavior = EndpointIndependent
+		natType.PortPreservation = true
+		natType.MappingLifeTime = 0
+
+		if len(config.mappedIPs) == 0 {
+			return nil, errNATRequriesMapping
+		}
+		if len(config.mappedIPs) != len(config.localIPs) {
+			return nil, errMismatchLengthIP
+		}
+	} else {
+		// Normal (NAPT) behavior
+		natType.Mode = NATModeNormal
+		if natType.MappingLifeTime == 0 {
+			natType.MappingLifeTime = defaultNATMappingLifeTime
+		}
+	}
+
+	return &networkAddressTranslator{
+		name:        config.name,
+		natType:     natType,
+		mappedIPs:   config.mappedIPs,
+		localIPs:    config.localIPs,
+		outboundMap: map[string]*mapping{},
+		inboundMap:  map[string]*mapping{},
+		log:         config.loggerFactory.NewLogger("vnet"),
+	}, nil
+}
+
+func (n *networkAddressTranslator) getPairedMappedIP(locIP net.IP) net.IP {
+	for i, ip := range n.localIPs {
+		if ip.Equal(locIP) {
+			return n.mappedIPs[i]
+		}
+	}
+	return nil
+}
+
+func (n *networkAddressTranslator) getPairedLocalIP(mappedIP net.IP) net.IP {
+	for i, ip := range n.mappedIPs {
+		if ip.Equal(mappedIP) {
+			return n.localIPs[i]
+		}
+	}
+	return nil
+}
+
+func (n *networkAddressTranslator) translateOutbound(from Chunk) (Chunk, error) {
+	n.mutex.Lock()
+	defer n.mutex.Unlock()
+
+	to := from.Clone()
+
+	if from.Network() == udpString {
+		if n.natType.Mode == NATModeNAT1To1 {
+			// 1:1 NAT behavior
+			srcAddr := from.SourceAddr().(*net.UDPAddr)
+			srcIP := n.getPairedMappedIP(srcAddr.IP)
+			if srcIP == nil {
+				n.log.Debugf("[%s] drop outbound chunk %s with not route", n.name, from.String())
+				return nil, nil // silently discard
+			}
+			srcPort := srcAddr.Port
+			if err := to.setSourceAddr(fmt.Sprintf("%s:%d", srcIP.String(), srcPort)); err != nil {
+				return nil, err
+			}
+		} else {
+			// Normal (NAPT) behavior
+			var bound, filterKey string
+			switch n.natType.MappingBehavior {
+			case EndpointIndependent:
+				bound = ""
+			case EndpointAddrDependent:
+				bound = from.getDestinationIP().String()
+			case EndpointAddrPortDependent:
+				bound = from.DestinationAddr().String()
+			}
+
+			switch n.natType.FilteringBehavior {
+			case EndpointIndependent:
+				filterKey = ""
+			case EndpointAddrDependent:
+				filterKey = from.getDestinationIP().String()
+			case EndpointAddrPortDependent:
+				filterKey = from.DestinationAddr().String()
+			}
+
+			oKey := fmt.Sprintf("udp:%s:%s", from.SourceAddr().String(), bound)
+
+			m := n.findOutboundMapping(oKey)
+			if m == nil {
+				// Create a new mapping
+				mappedPort := 0xC000 + n.udpPortCounter
+				n.udpPortCounter++
+
+				m = &mapping{
+					proto:   from.SourceAddr().Network(),
+					local:   from.SourceAddr().String(),
+					bound:   bound,
+					mapped:  fmt.Sprintf("%s:%d", n.mappedIPs[0].String(), mappedPort),
+					filters: map[string]struct{}{},
+					expires: time.Now().Add(n.natType.MappingLifeTime),
+				}
+
+				n.outboundMap[oKey] = m
+
+				iKey := fmt.Sprintf("udp:%s", m.mapped)
+
+				n.log.Debugf("[%s] created a new NAT binding oKey=%s iKey=%s\n",
+					n.name,
+					oKey,
+					iKey)
+
+				m.filters[filterKey] = struct{}{}
+				n.log.Debugf("[%s] permit access from %s to %s\n", n.name, filterKey, m.mapped)
+				n.inboundMap[iKey] = m
+			} else if _, ok := m.filters[filterKey]; !ok {
+				n.log.Debugf("[%s] permit access from %s to %s\n", n.name, filterKey, m.mapped)
+				m.filters[filterKey] = struct{}{}
+			}
+
+			if err := to.setSourceAddr(m.mapped); err != nil {
+				return nil, err
+			}
+		}
+
+		n.log.Debugf("[%s] translate outbound chunk from %s to %s", n.name, from.String(), to.String())
+
+		return to, nil
+	}
+
+	return nil, errNonUDPTranslationNotSupported
+}
+
+func (n *networkAddressTranslator) translateInbound(from Chunk) (Chunk, error) {
+	n.mutex.Lock()
+	defer n.mutex.Unlock()
+
+	to := from.Clone()
+
+	if from.Network() == udpString {
+		if n.natType.Mode == NATModeNAT1To1 {
+			// 1:1 NAT behavior
+			dstAddr := from.DestinationAddr().(*net.UDPAddr)
+			dstIP := n.getPairedLocalIP(dstAddr.IP)
+			if dstIP == nil {
+				return nil, fmt.Errorf("drop %s as %w", from.String(), errNoAssociatedLocalAddress)
+			}
+			dstPort := from.DestinationAddr().(*net.UDPAddr).Port
+			if err := to.setDestinationAddr(fmt.Sprintf("%s:%d", dstIP, dstPort)); err != nil {
+				return nil, err
+			}
+		} else {
+			// Normal (NAPT) behavior
+			iKey := fmt.Sprintf("udp:%s", from.DestinationAddr().String())
+			m := n.findInboundMapping(iKey)
+			if m == nil {
+				return nil, fmt.Errorf("drop %s as %w", from.String(), errNoNATBindingFound)
+			}
+
+			var filterKey string
+			switch n.natType.FilteringBehavior {
+			case EndpointIndependent:
+				filterKey = ""
+			case EndpointAddrDependent:
+				filterKey = from.getSourceIP().String()
+			case EndpointAddrPortDependent:
+				filterKey = from.SourceAddr().String()
+			}
+
+			if _, ok := m.filters[filterKey]; !ok {
+				return nil, fmt.Errorf("drop %s as the remote %s %w", from.String(), filterKey, errHasNoPermission)
+			}
+
+			// See RFC 4847 Section 4.3.  Mapping Refresh
+			// a) Inbound refresh may be useful for applications with no outgoing
+			//   UDP traffic.  However, allowing inbound refresh may allow an
+			//   external attacker or misbehaving application to keep a mapping
+			//   alive indefinitely.  This may be a security risk.  Also, if the
+			//   process is repeated with different ports, over time, it could
+			//   use up all the ports on the NAT.
+
+			if err := to.setDestinationAddr(m.local); err != nil {
+				return nil, err
+			}
+		}
+
+		n.log.Debugf("[%s] translate inbound chunk from %s to %s", n.name, from.String(), to.String())
+
+		return to, nil
+	}
+
+	return nil, errNonUDPTranslationNotSupported
+}
+
+// caller must hold the mutex
+func (n *networkAddressTranslator) findOutboundMapping(oKey string) *mapping {
+	now := time.Now()
+
+	m, ok := n.outboundMap[oKey]
+	if ok {
+		// check if this mapping is expired
+		if now.After(m.expires) {
+			n.removeMapping(m)
+			m = nil // expired
+		} else {
+			m.expires = time.Now().Add(n.natType.MappingLifeTime)
+		}
+	}
+
+	return m
+}
+
+// caller must hold the mutex
+func (n *networkAddressTranslator) findInboundMapping(iKey string) *mapping {
+	now := time.Now()
+	m, ok := n.inboundMap[iKey]
+	if !ok {
+		return nil
+	}
+
+	// check if this mapping is expired
+	if now.After(m.expires) {
+		n.removeMapping(m)
+		return nil
+	}
+
+	return m
+}
+
+// caller must hold the mutex
+func (n *networkAddressTranslator) removeMapping(m *mapping) {
+	oKey := fmt.Sprintf("%s:%s:%s", m.proto, m.local, m.bound)
+	iKey := fmt.Sprintf("%s:%s", m.proto, m.mapped)
+
+	delete(n.outboundMap, oKey)
+	delete(n.inboundMap, iKey)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/net.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/net.go
new file mode 100644
index 000000000..4dc6a2a06
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/net.go
@@ -0,0 +1,677 @@
+package vnet
+
+import (
+	"encoding/binary"
+	"errors"
+	"fmt"
+	"math/rand"
+	"net"
+	"strconv"
+	"strings"
+	"sync"
+)
+
+const (
+	lo0String = "lo0String"
+	udpString = "udp"
+)
+
+var (
+	macAddrCounter                 uint64 = 0xBEEFED910200 //nolint:gochecknoglobals
+	errNoInterface                        = errors.New("no interface is available")
+	errNotFound                           = errors.New("not found")
+	errUnexpectedNetwork                  = errors.New("unexpected network")
+	errCantAssignRequestedAddr            = errors.New("can't assign requested address")
+	errUnknownNetwork                     = errors.New("unknown network")
+	errNoRouterLinked                     = errors.New("no router linked")
+	errInvalidPortNumber                  = errors.New("invalid port number")
+	errUnexpectedTypeSwitchFailure        = errors.New("unexpected type-switch failure")
+	errBindFailerFor                      = errors.New("bind failed for")
+	errEndPortLessThanStart               = errors.New("end port is less than the start")
+	errPortSpaceExhausted                 = errors.New("port space exhausted")
+	errVNetDisabled                       = errors.New("vnet is not enabled")
+)
+
+func newMACAddress() net.HardwareAddr {
+	b := make([]byte, 8)
+	binary.BigEndian.PutUint64(b, macAddrCounter)
+	macAddrCounter++
+	return b[2:]
+}
+
+type vNet struct {
+	interfaces []*Interface // read-only
+	staticIPs  []net.IP     // read-only
+	router     *Router      // read-only
+	udpConns   *udpConnMap  // read-only
+	mutex      sync.RWMutex
+}
+
+func (v *vNet) _getInterfaces() ([]*Interface, error) {
+	if len(v.interfaces) == 0 {
+		return nil, errNoInterface
+	}
+
+	return v.interfaces, nil
+}
+
+func (v *vNet) getInterfaces() ([]*Interface, error) {
+	v.mutex.RLock()
+	defer v.mutex.RUnlock()
+
+	return v._getInterfaces()
+}
+
+// caller must hold the mutex (read)
+func (v *vNet) _getInterface(ifName string) (*Interface, error) {
+	ifs, err := v._getInterfaces()
+	if err != nil {
+		return nil, err
+	}
+	for _, ifc := range ifs {
+		if ifc.Name == ifName {
+			return ifc, nil
+		}
+	}
+
+	return nil, fmt.Errorf("interface %s %w", ifName, errNotFound)
+}
+
+func (v *vNet) getInterface(ifName string) (*Interface, error) {
+	v.mutex.RLock()
+	defer v.mutex.RUnlock()
+
+	return v._getInterface(ifName)
+}
+
+// caller must hold the mutex
+func (v *vNet) getAllIPAddrs(ipv6 bool) []net.IP {
+	ips := []net.IP{}
+
+	for _, ifc := range v.interfaces {
+		addrs, err := ifc.Addrs()
+		if err != nil {
+			continue
+		}
+
+		for _, addr := range addrs {
+			var ip net.IP
+			if ipNet, ok := addr.(*net.IPNet); ok {
+				ip = ipNet.IP
+			} else if ipAddr, ok := addr.(*net.IPAddr); ok {
+				ip = ipAddr.IP
+			} else {
+				continue
+			}
+
+			if !ipv6 {
+				if ip.To4() != nil {
+					ips = append(ips, ip)
+				}
+			}
+		}
+	}
+
+	return ips
+}
+
+func (v *vNet) setRouter(r *Router) error {
+	v.mutex.Lock()
+	defer v.mutex.Unlock()
+
+	v.router = r
+	return nil
+}
+
+func (v *vNet) onInboundChunk(c Chunk) {
+	v.mutex.Lock()
+	defer v.mutex.Unlock()
+
+	if c.Network() == udpString {
+		if conn, ok := v.udpConns.find(c.DestinationAddr()); ok {
+			conn.onInboundChunk(c)
+		}
+	}
+}
+
+// caller must hold the mutex
+func (v *vNet) _dialUDP(network string, locAddr, remAddr *net.UDPAddr) (UDPPacketConn, error) {
+	// validate network
+	if network != udpString && network != "udp4" {
+		return nil, fmt.Errorf("%w: %s", errUnexpectedNetwork, network)
+	}
+
+	if locAddr == nil {
+		locAddr = &net.UDPAddr{
+			IP: net.IPv4zero,
+		}
+	} else if locAddr.IP == nil {
+		locAddr.IP = net.IPv4zero
+	}
+
+	// validate address. do we have that address?
+	if !v.hasIPAddr(locAddr.IP) {
+		return nil, &net.OpError{
+			Op:   "listen",
+			Net:  network,
+			Addr: locAddr,
+			Err:  fmt.Errorf("bind: %w", errCantAssignRequestedAddr),
+		}
+	}
+
+	if locAddr.Port == 0 {
+		// choose randomly from the range between 5000 and 5999
+		port, err := v.assignPort(locAddr.IP, 5000, 5999)
+		if err != nil {
+			return nil, &net.OpError{
+				Op:   "listen",
+				Net:  network,
+				Addr: locAddr,
+				Err:  err,
+			}
+		}
+		locAddr.Port = port
+	} else if _, ok := v.udpConns.find(locAddr); ok {
+		return nil, &net.OpError{
+			Op:   "listen",
+			Net:  network,
+			Addr: locAddr,
+			Err:  fmt.Errorf("bind: %w", errAddressAlreadyInUse),
+		}
+	}
+
+	conn, err := newUDPConn(locAddr, remAddr, v)
+	if err != nil {
+		return nil, err
+	}
+
+	err = v.udpConns.insert(conn)
+	if err != nil {
+		return nil, err
+	}
+
+	return conn, nil
+}
+
+func (v *vNet) listenPacket(network string, address string) (UDPPacketConn, error) {
+	v.mutex.Lock()
+	defer v.mutex.Unlock()
+
+	locAddr, err := v.resolveUDPAddr(network, address)
+	if err != nil {
+		return nil, err
+	}
+
+	return v._dialUDP(network, locAddr, nil)
+}
+
+func (v *vNet) listenUDP(network string, locAddr *net.UDPAddr) (UDPPacketConn, error) {
+	v.mutex.Lock()
+	defer v.mutex.Unlock()
+
+	return v._dialUDP(network, locAddr, nil)
+}
+
+func (v *vNet) dialUDP(network string, locAddr, remAddr *net.UDPAddr) (UDPPacketConn, error) {
+	v.mutex.Lock()
+	defer v.mutex.Unlock()
+
+	return v._dialUDP(network, locAddr, remAddr)
+}
+
+func (v *vNet) dial(network string, address string) (UDPPacketConn, error) {
+	v.mutex.Lock()
+	defer v.mutex.Unlock()
+
+	remAddr, err := v.resolveUDPAddr(network, address)
+	if err != nil {
+		return nil, err
+	}
+
+	// Determine source address
+	srcIP := v.determineSourceIP(nil, remAddr.IP)
+
+	locAddr := &net.UDPAddr{IP: srcIP, Port: 0}
+
+	return v._dialUDP(network, locAddr, remAddr)
+}
+
+func (v *vNet) resolveUDPAddr(network, address string) (*net.UDPAddr, error) {
+	if network != udpString && network != "udp4" {
+		return nil, fmt.Errorf("%w %s", errUnknownNetwork, network)
+	}
+
+	host, sPort, err := net.SplitHostPort(address)
+	if err != nil {
+		return nil, err
+	}
+
+	// Check if host is a domain name
+	ip := net.ParseIP(host)
+	if ip == nil {
+		host = strings.ToLower(host)
+		if host == "localhost" {
+			ip = net.IPv4(127, 0, 0, 1)
+		} else {
+			// host is a domain name. resolve IP address by the name
+			if v.router == nil {
+				return nil, errNoRouterLinked
+			}
+
+			ip, err = v.router.resolver.lookUp(host)
+			if err != nil {
+				return nil, err
+			}
+		}
+	}
+
+	port, err := strconv.Atoi(sPort)
+	if err != nil {
+		return nil, errInvalidPortNumber
+	}
+
+	udpAddr := &net.UDPAddr{
+		IP:   ip,
+		Port: port,
+	}
+
+	return udpAddr, nil
+}
+
+func (v *vNet) write(c Chunk) error {
+	if c.Network() == udpString {
+		if udp, ok := c.(*chunkUDP); ok {
+			if c.getDestinationIP().IsLoopback() {
+				if conn, ok := v.udpConns.find(udp.DestinationAddr()); ok {
+					conn.onInboundChunk(udp)
+				}
+				return nil
+			}
+		} else {
+			return errUnexpectedTypeSwitchFailure
+		}
+	}
+
+	if v.router == nil {
+		return errNoRouterLinked
+	}
+
+	v.router.push(c)
+	return nil
+}
+
+func (v *vNet) onClosed(addr net.Addr) {
+	if addr.Network() == udpString {
+		//nolint:errcheck
+		v.udpConns.delete(addr) // #nosec
+	}
+}
+
+// This method determines the srcIP based on the dstIP when locIP
+// is any IP address ("0.0.0.0" or "::"). If locIP is a non-any addr,
+// this method simply returns locIP.
+// caller must hold the mutex
+func (v *vNet) determineSourceIP(locIP, dstIP net.IP) net.IP {
+	if locIP != nil && !locIP.IsUnspecified() {
+		return locIP
+	}
+
+	var srcIP net.IP
+
+	if dstIP.IsLoopback() {
+		srcIP = net.ParseIP("127.0.0.1")
+	} else {
+		ifc, err2 := v._getInterface("eth0")
+		if err2 != nil {
+			return nil
+		}
+
+		addrs, err2 := ifc.Addrs()
+		if err2 != nil {
+			return nil
+		}
+
+		if len(addrs) == 0 {
+			return nil
+		}
+
+		var findIPv4 bool
+		if locIP != nil {
+			findIPv4 = (locIP.To4() != nil)
+		} else {
+			findIPv4 = (dstIP.To4() != nil)
+		}
+
+		for _, addr := range addrs {
+			ip := addr.(*net.IPNet).IP
+			if findIPv4 {
+				if ip.To4() != nil {
+					srcIP = ip
+					break
+				}
+			} else {
+				if ip.To4() == nil {
+					srcIP = ip
+					break
+				}
+			}
+		}
+	}
+
+	return srcIP
+}
+
+// caller must hold the mutex
+func (v *vNet) hasIPAddr(ip net.IP) bool { //nolint:gocognit
+	for _, ifc := range v.interfaces {
+		if addrs, err := ifc.Addrs(); err == nil {
+			for _, addr := range addrs {
+				var locIP net.IP
+				if ipNet, ok := addr.(*net.IPNet); ok {
+					locIP = ipNet.IP
+				} else if ipAddr, ok := addr.(*net.IPAddr); ok {
+					locIP = ipAddr.IP
+				} else {
+					continue
+				}
+
+				switch ip.String() {
+				case "0.0.0.0":
+					if locIP.To4() != nil {
+						return true
+					}
+				case "::":
+					if locIP.To4() == nil {
+						return true
+					}
+				default:
+					if locIP.Equal(ip) {
+						return true
+					}
+				}
+			}
+		}
+	}
+
+	return false
+}
+
+// caller must hold the mutex
+func (v *vNet) allocateLocalAddr(ip net.IP, port int) error {
+	// gather local IP addresses to bind
+	var ips []net.IP
+	if ip.IsUnspecified() {
+		ips = v.getAllIPAddrs(ip.To4() == nil)
+	} else if v.hasIPAddr(ip) {
+		ips = []net.IP{ip}
+	}
+
+	if len(ips) == 0 {
+		return fmt.Errorf("%w %s", errBindFailerFor, ip.String())
+	}
+
+	// check if all these transport addresses are not in use
+	for _, ip2 := range ips {
+		addr := &net.UDPAddr{
+			IP:   ip2,
+			Port: port,
+		}
+		if _, ok := v.udpConns.find(addr); ok {
+			return &net.OpError{
+				Op:   "bind",
+				Net:  udpString,
+				Addr: addr,
+				Err:  fmt.Errorf("bind: %w", errAddressAlreadyInUse),
+			}
+		}
+	}
+
+	return nil
+}
+
+// caller must hold the mutex
+func (v *vNet) assignPort(ip net.IP, start, end int) (int, error) {
+	// choose randomly from the range between start and end (inclusive)
+	if end < start {
+		return -1, errEndPortLessThanStart
+	}
+
+	space := end + 1 - start
+	offset := rand.Intn(space) //nolint:gosec
+	for i := 0; i < space; i++ {
+		port := ((offset + i) % space) + start
+
+		err := v.allocateLocalAddr(ip, port)
+		if err == nil {
+			return port, nil
+		}
+	}
+
+	return -1, errPortSpaceExhausted
+}
+
+// NetConfig is a bag of configuration parameters passed to NewNet().
+type NetConfig struct {
+	// StaticIPs is an array of static IP addresses to be assigned for this Net.
+	// If no static IP address is given, the router will automatically assign
+	// an IP address.
+	StaticIPs []string
+
+	// StaticIP is deprecated. Use StaticIPs.
+	StaticIP string
+}
+
+// Net represents a local network stack euivalent to a set of layers from NIC
+// up to the transport (UDP / TCP) layer.
+type Net struct {
+	v   *vNet
+	ifs []*Interface
+}
+
+// NewNet creates an instance of Net.
+// If config is nil, the virtual network is disabled. (uses corresponding
+// net.Xxxx() operations.
+// By design, it always have lo0 and eth0 interfaces.
+// The lo0 has the address 127.0.0.1 assigned by default.
+// IP address for eth0 will be assigned when this Net is added to a router.
+func NewNet(config *NetConfig) *Net {
+	if config == nil {
+		ifs := []*Interface{}
+		if orgIfs, err := net.Interfaces(); err == nil {
+			for _, orgIfc := range orgIfs {
+				ifc := NewInterface(orgIfc)
+				if addrs, err := orgIfc.Addrs(); err == nil {
+					for _, addr := range addrs {
+						ifc.AddAddr(addr)
+					}
+				}
+
+				ifs = append(ifs, ifc)
+			}
+		}
+
+		return &Net{ifs: ifs}
+	}
+
+	lo0 := NewInterface(net.Interface{
+		Index:        1,
+		MTU:          16384,
+		Name:         lo0String,
+		HardwareAddr: nil,
+		Flags:        net.FlagUp | net.FlagLoopback | net.FlagMulticast,
+	})
+	lo0.AddAddr(&net.IPNet{
+		IP:   net.ParseIP("127.0.0.1"),
+		Mask: net.CIDRMask(8, 32),
+	})
+
+	eth0 := NewInterface(net.Interface{
+		Index:        2,
+		MTU:          1500,
+		Name:         "eth0",
+		HardwareAddr: newMACAddress(),
+		Flags:        net.FlagUp | net.FlagMulticast,
+	})
+
+	var staticIPs []net.IP
+	for _, ipStr := range config.StaticIPs {
+		if ip := net.ParseIP(ipStr); ip != nil {
+			staticIPs = append(staticIPs, ip)
+		}
+	}
+	if len(config.StaticIP) > 0 {
+		if ip := net.ParseIP(config.StaticIP); ip != nil {
+			staticIPs = append(staticIPs, ip)
+		}
+	}
+
+	v := &vNet{
+		interfaces: []*Interface{lo0, eth0},
+		staticIPs:  staticIPs,
+		udpConns:   newUDPConnMap(),
+	}
+
+	return &Net{
+		v: v,
+	}
+}
+
+// Interfaces returns a list of the system's network interfaces.
+func (n *Net) Interfaces() ([]*Interface, error) {
+	if n.v == nil {
+		return n.ifs, nil
+	}
+
+	return n.v.getInterfaces()
+}
+
+// InterfaceByName returns the interface specified by name.
+func (n *Net) InterfaceByName(name string) (*Interface, error) {
+	if n.v == nil {
+		for _, ifc := range n.ifs {
+			if ifc.Name == name {
+				return ifc, nil
+			}
+		}
+
+		return nil, fmt.Errorf("interface %s %w", name, errNotFound)
+	}
+
+	return n.v.getInterface(name)
+}
+
+// ListenPacket announces on the local network address.
+func (n *Net) ListenPacket(network string, address string) (net.PacketConn, error) {
+	if n.v == nil {
+		return net.ListenPacket(network, address)
+	}
+
+	return n.v.listenPacket(network, address)
+}
+
+// ListenUDP acts like ListenPacket for UDP networks.
+func (n *Net) ListenUDP(network string, locAddr *net.UDPAddr) (UDPPacketConn, error) {
+	if n.v == nil {
+		return net.ListenUDP(network, locAddr)
+	}
+
+	return n.v.listenUDP(network, locAddr)
+}
+
+// Dial connects to the address on the named network.
+func (n *Net) Dial(network, address string) (net.Conn, error) {
+	if n.v == nil {
+		return net.Dial(network, address)
+	}
+
+	return n.v.dial(network, address)
+}
+
+// CreateDialer creates an instance of vnet.Dialer
+func (n *Net) CreateDialer(dialer *net.Dialer) Dialer {
+	if n.v == nil {
+		return &vDialer{
+			dialer: dialer,
+		}
+	}
+
+	return &vDialer{
+		dialer: dialer,
+		v:      n.v,
+	}
+}
+
+// DialUDP acts like Dial for UDP networks.
+func (n *Net) DialUDP(network string, laddr, raddr *net.UDPAddr) (UDPPacketConn, error) {
+	if n.v == nil {
+		return net.DialUDP(network, laddr, raddr)
+	}
+
+	return n.v.dialUDP(network, laddr, raddr)
+}
+
+// ResolveUDPAddr returns an address of UDP end point.
+func (n *Net) ResolveUDPAddr(network, address string) (*net.UDPAddr, error) {
+	if n.v == nil {
+		return net.ResolveUDPAddr(network, address)
+	}
+
+	return n.v.resolveUDPAddr(network, address)
+}
+
+func (n *Net) getInterface(ifName string) (*Interface, error) {
+	if n.v == nil {
+		return nil, errVNetDisabled
+	}
+
+	return n.v.getInterface(ifName)
+}
+
+func (n *Net) setRouter(r *Router) error {
+	if n.v == nil {
+		return errVNetDisabled
+	}
+
+	return n.v.setRouter(r)
+}
+
+func (n *Net) onInboundChunk(c Chunk) {
+	if n.v == nil {
+		return
+	}
+
+	n.v.onInboundChunk(c)
+}
+
+func (n *Net) getStaticIPs() []net.IP {
+	if n.v == nil {
+		return nil
+	}
+
+	return n.v.staticIPs
+}
+
+// IsVirtual tests if the virtual network is enabled.
+func (n *Net) IsVirtual() bool {
+	return n.v != nil
+}
+
+// Dialer is identical to net.Dialer excepts that its methods
+// (Dial, DialContext) are overridden to use virtual network.
+// Use vnet.CreateDialer() to create an instance of this Dialer.
+type Dialer interface {
+	Dial(network, address string) (net.Conn, error)
+}
+
+type vDialer struct {
+	dialer *net.Dialer
+	v      *vNet
+}
+
+func (d *vDialer) Dial(network, address string) (net.Conn, error) {
+	if d.v == nil {
+		return d.dialer.Dial(network, address)
+	}
+
+	return d.v.dial(network, address)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/resolver.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/resolver.go
new file mode 100644
index 000000000..e5166e3cd
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/resolver.go
@@ -0,0 +1,89 @@
+package vnet
+
+import (
+	"errors"
+	"fmt"
+	"net"
+	"sync"
+
+	"github.com/pion/logging"
+)
+
+var (
+	errHostnameEmpty       = errors.New("host name must not be empty")
+	errFailedtoParseIPAddr = errors.New("failed to parse IP address")
+)
+
+type resolverConfig struct {
+	LoggerFactory logging.LoggerFactory
+}
+
+type resolver struct {
+	parent *resolver             // read-only
+	hosts  map[string]net.IP     // requires mutex
+	mutex  sync.RWMutex          // thread-safe
+	log    logging.LeveledLogger // read-only
+}
+
+func newResolver(config *resolverConfig) *resolver {
+	r := &resolver{
+		hosts: map[string]net.IP{},
+		log:   config.LoggerFactory.NewLogger("vnet"),
+	}
+
+	if err := r.addHost("localhost", "127.0.0.1"); err != nil {
+		r.log.Warn("failed to add localhost to resolver")
+	}
+	return r
+}
+
+func (r *resolver) setParent(parent *resolver) {
+	r.mutex.Lock()
+	defer r.mutex.Unlock()
+
+	r.parent = parent
+}
+
+func (r *resolver) addHost(name string, ipAddr string) error {
+	r.mutex.Lock()
+	defer r.mutex.Unlock()
+
+	if len(name) == 0 {
+		return errHostnameEmpty
+	}
+	ip := net.ParseIP(ipAddr)
+	if ip == nil {
+		return fmt.Errorf("%w \"%s\"", errFailedtoParseIPAddr, ipAddr)
+	}
+	r.hosts[name] = ip
+	return nil
+}
+
+func (r *resolver) lookUp(hostName string) (net.IP, error) {
+	ip := func() net.IP {
+		r.mutex.RLock()
+		defer r.mutex.RUnlock()
+
+		if ip2, ok := r.hosts[hostName]; ok {
+			return ip2
+		}
+		return nil
+	}()
+	if ip != nil {
+		return ip, nil
+	}
+
+	// mutex must be unlocked before calling into parent resolver
+
+	if r.parent != nil {
+		return r.parent.lookUp(hostName)
+	}
+
+	return nil, &net.DNSError{
+		Err:         "host not found",
+		Name:        hostName,
+		Server:      "vnet resolver",
+		IsTimeout:   false,
+		IsTemporary: false,
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/router.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/router.go
new file mode 100644
index 000000000..616d2c9b6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/router.go
@@ -0,0 +1,605 @@
+package vnet
+
+import (
+	"errors"
+	"fmt"
+	"math/rand"
+	"net"
+	"strings"
+	"sync"
+	"sync/atomic"
+	"time"
+
+	"github.com/pion/logging"
+)
+
+const (
+	defaultRouterQueueSize = 0 // unlimited
+)
+
+var (
+	errInvalidLocalIPinStaticIPs     = errors.New("invalid local IP in StaticIPs")
+	errLocalIPBeyondStaticIPsSubset  = errors.New("mapped in StaticIPs is beyond subnet")
+	errLocalIPNoStaticsIPsAssociated = errors.New("all StaticIPs must have associated local IPs")
+	errRouterAlreadyStarted          = errors.New("router already started")
+	errRouterAlreadyStopped          = errors.New("router already stopped")
+	errStaticIPisBeyondSubnet        = errors.New("static IP is beyond subnet")
+	errAddressSpaceExhausted         = errors.New("address space exhausted")
+	errNoIPAddrEth0                  = errors.New("no IP address is assigned for eth0")
+)
+
+// Generate a unique router name
+var assignRouterName = func() func() string { //nolint:gochecknoglobals
+	var routerIDCtr uint64
+
+	return func() string {
+		n := atomic.AddUint64(&routerIDCtr, 1)
+		return fmt.Sprintf("router%d", n)
+	}
+}()
+
+// RouterConfig ...
+type RouterConfig struct {
+	// Name of router. If not specified, a unique name will be assigned.
+	Name string
+	// CIDR notation, like "192.0.2.0/24"
+	CIDR string
+	// StaticIPs is an array of static IP addresses to be assigned for this router.
+	// If no static IP address is given, the router will automatically assign
+	// an IP address.
+	// This will be ignored if this router is the root.
+	StaticIPs []string
+	// StaticIP is deprecated. Use StaticIPs.
+	StaticIP string
+	// Internal queue size
+	QueueSize int
+	// Effective only when this router has a parent router
+	NATType *NATType
+	// Minimum Delay
+	MinDelay time.Duration
+	// Max Jitter
+	MaxJitter time.Duration
+	// Logger factory
+	LoggerFactory logging.LoggerFactory
+}
+
+// NIC is a nework inerface controller that interfaces Router
+type NIC interface {
+	getInterface(ifName string) (*Interface, error)
+	onInboundChunk(c Chunk)
+	getStaticIPs() []net.IP
+	setRouter(r *Router) error
+}
+
+// ChunkFilter is a handler users can add to filter chunks.
+// If the filter returns false, the packet will be dropped.
+type ChunkFilter func(c Chunk) bool
+
+// Router ...
+type Router struct {
+	name           string                    // read-only
+	interfaces     []*Interface              // read-only
+	ipv4Net        *net.IPNet                // read-only
+	staticIPs      []net.IP                  // read-only
+	staticLocalIPs map[string]net.IP         // read-only,
+	lastID         byte                      // requires mutex [x], used to assign the last digit of IPv4 address
+	queue          *chunkQueue               // read-only
+	parent         *Router                   // read-only
+	children       []*Router                 // read-only
+	natType        *NATType                  // read-only
+	nat            *networkAddressTranslator // read-only
+	nics           map[string]NIC            // read-only
+	stopFunc       func()                    // requires mutex [x]
+	resolver       *resolver                 // read-only
+	chunkFilters   []ChunkFilter             // requires mutex [x]
+	minDelay       time.Duration             // requires mutex [x]
+	maxJitter      time.Duration             // requires mutex [x]
+	mutex          sync.RWMutex              // thread-safe
+	pushCh         chan struct{}             // writer requires mutex
+	loggerFactory  logging.LoggerFactory     // read-only
+	log            logging.LeveledLogger     // read-only
+}
+
+// NewRouter ...
+func NewRouter(config *RouterConfig) (*Router, error) {
+	loggerFactory := config.LoggerFactory
+	log := loggerFactory.NewLogger("vnet")
+
+	_, ipv4Net, err := net.ParseCIDR(config.CIDR)
+	if err != nil {
+		return nil, err
+	}
+
+	queueSize := defaultRouterQueueSize
+	if config.QueueSize > 0 {
+		queueSize = config.QueueSize
+	}
+
+	// set up network interface, lo0
+	lo0 := NewInterface(net.Interface{
+		Index:        1,
+		MTU:          16384,
+		Name:         lo0String,
+		HardwareAddr: nil,
+		Flags:        net.FlagUp | net.FlagLoopback | net.FlagMulticast,
+	})
+	lo0.AddAddr(&net.IPAddr{IP: net.ParseIP("127.0.0.1"), Zone: ""})
+
+	// set up network interface, eth0
+	eth0 := NewInterface(net.Interface{
+		Index:        2,
+		MTU:          1500,
+		Name:         "eth0",
+		HardwareAddr: newMACAddress(),
+		Flags:        net.FlagUp | net.FlagMulticast,
+	})
+
+	// local host name resolver
+	resolver := newResolver(&resolverConfig{
+		LoggerFactory: config.LoggerFactory,
+	})
+
+	name := config.Name
+	if len(name) == 0 {
+		name = assignRouterName()
+	}
+
+	var staticIPs []net.IP
+	staticLocalIPs := map[string]net.IP{}
+	for _, ipStr := range config.StaticIPs {
+		ipPair := strings.Split(ipStr, "/")
+		if ip := net.ParseIP(ipPair[0]); ip != nil {
+			if len(ipPair) > 1 {
+				locIP := net.ParseIP(ipPair[1])
+				if locIP == nil {
+					return nil, errInvalidLocalIPinStaticIPs
+				}
+				if !ipv4Net.Contains(locIP) {
+					return nil, fmt.Errorf("local IP %s %w", locIP.String(), errLocalIPBeyondStaticIPsSubset)
+				}
+				staticLocalIPs[ip.String()] = locIP
+			}
+			staticIPs = append(staticIPs, ip)
+		}
+	}
+	if len(config.StaticIP) > 0 {
+		log.Warn("StaticIP is deprecated. Use StaticIPs instead")
+		if ip := net.ParseIP(config.StaticIP); ip != nil {
+			staticIPs = append(staticIPs, ip)
+		}
+	}
+
+	if nStaticLocal := len(staticLocalIPs); nStaticLocal > 0 {
+		if nStaticLocal != len(staticIPs) {
+			return nil, errLocalIPNoStaticsIPsAssociated
+		}
+	}
+
+	return &Router{
+		name:           name,
+		interfaces:     []*Interface{lo0, eth0},
+		ipv4Net:        ipv4Net,
+		staticIPs:      staticIPs,
+		staticLocalIPs: staticLocalIPs,
+		queue:          newChunkQueue(queueSize),
+		natType:        config.NATType,
+		nics:           map[string]NIC{},
+		resolver:       resolver,
+		minDelay:       config.MinDelay,
+		maxJitter:      config.MaxJitter,
+		pushCh:         make(chan struct{}, 1),
+		loggerFactory:  loggerFactory,
+		log:            log,
+	}, nil
+}
+
+// caller must hold the mutex
+func (r *Router) getInterfaces() ([]*Interface, error) {
+	if len(r.interfaces) == 0 {
+		return nil, fmt.Errorf("%w is available", errNoInterface)
+	}
+
+	return r.interfaces, nil
+}
+
+func (r *Router) getInterface(ifName string) (*Interface, error) {
+	r.mutex.RLock()
+	defer r.mutex.RUnlock()
+
+	ifs, err := r.getInterfaces()
+	if err != nil {
+		return nil, err
+	}
+	for _, ifc := range ifs {
+		if ifc.Name == ifName {
+			return ifc, nil
+		}
+	}
+
+	return nil, fmt.Errorf("interface %s %w", ifName, errNotFound)
+}
+
+// Start ...
+func (r *Router) Start() error {
+	r.mutex.Lock()
+	defer r.mutex.Unlock()
+
+	if r.stopFunc != nil {
+		return errRouterAlreadyStarted
+	}
+
+	cancelCh := make(chan struct{})
+
+	go func() {
+	loop:
+		for {
+			d, err := r.processChunks()
+			if err != nil {
+				r.log.Errorf("[%s] %s", r.name, err.Error())
+				break
+			}
+
+			if d <= 0 {
+				select {
+				case <-r.pushCh:
+				case <-cancelCh:
+					break loop
+				}
+			} else {
+				t := time.NewTimer(d)
+				select {
+				case <-t.C:
+				case <-cancelCh:
+					break loop
+				}
+			}
+		}
+	}()
+
+	r.stopFunc = func() {
+		close(cancelCh)
+	}
+
+	for _, child := range r.children {
+		if err := child.Start(); err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+// Stop ...
+func (r *Router) Stop() error {
+	r.mutex.Lock()
+	defer r.mutex.Unlock()
+
+	if r.stopFunc == nil {
+		return errRouterAlreadyStopped
+	}
+
+	for _, router := range r.children {
+		r.mutex.Unlock()
+		err := router.Stop()
+		r.mutex.Lock()
+
+		if err != nil {
+			return err
+		}
+	}
+
+	r.stopFunc()
+	r.stopFunc = nil
+	return nil
+}
+
+// caller must hold the mutex
+func (r *Router) addNIC(nic NIC) error {
+	ifc, err := nic.getInterface("eth0")
+	if err != nil {
+		return err
+	}
+
+	var ips []net.IP
+
+	if ips = nic.getStaticIPs(); len(ips) == 0 {
+		// assign an IP address
+		ip, err2 := r.assignIPAddress()
+		if err2 != nil {
+			return err2
+		}
+		ips = append(ips, ip)
+	}
+
+	for _, ip := range ips {
+		if !r.ipv4Net.Contains(ip) {
+			return fmt.Errorf("%w: %s", errStaticIPisBeyondSubnet, r.ipv4Net.String())
+		}
+
+		ifc.AddAddr(&net.IPNet{
+			IP:   ip,
+			Mask: r.ipv4Net.Mask,
+		})
+
+		r.nics[ip.String()] = nic
+	}
+
+	if err = nic.setRouter(r); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// AddRouter adds a chile Router.
+func (r *Router) AddRouter(router *Router) error {
+	r.mutex.Lock()
+	defer r.mutex.Unlock()
+
+	// Router is a NIC. Add it as a NIC so that packets are routed to this child
+	// router.
+	err := r.addNIC(router)
+	if err != nil {
+		return err
+	}
+
+	if err = router.setRouter(r); err != nil {
+		return err
+	}
+
+	r.children = append(r.children, router)
+	return nil
+}
+
+// AddNet ...
+func (r *Router) AddNet(nic NIC) error {
+	r.mutex.Lock()
+	defer r.mutex.Unlock()
+
+	return r.addNIC(nic)
+}
+
+// AddHost adds a mapping of hostname and an IP address to the local resolver.
+func (r *Router) AddHost(hostName string, ipAddr string) error {
+	return r.resolver.addHost(hostName, ipAddr)
+}
+
+// AddChunkFilter adds a filter for chunks traversing this router.
+// You may add more than one filter. The filters are called in the order of this method call.
+// If a chunk is dropped by a filter, subsequent filter will not receive the chunk.
+func (r *Router) AddChunkFilter(filter ChunkFilter) {
+	r.mutex.Lock()
+	defer r.mutex.Unlock()
+
+	r.chunkFilters = append(r.chunkFilters, filter)
+}
+
+// caller should hold the mutex
+func (r *Router) assignIPAddress() (net.IP, error) {
+	// See: https://stackoverflow.com/questions/14915188/ip-address-ending-with-zero
+
+	if r.lastID == 0xfe {
+		return nil, errAddressSpaceExhausted
+	}
+
+	ip := make(net.IP, 4)
+	copy(ip, r.ipv4Net.IP[:3])
+	r.lastID++
+	ip[3] = r.lastID
+	return ip, nil
+}
+
+func (r *Router) push(c Chunk) {
+	r.mutex.Lock()
+	defer r.mutex.Unlock()
+
+	r.log.Debugf("[%s] route %s", r.name, c.String())
+	if r.stopFunc != nil {
+		c.setTimestamp()
+		if r.queue.push(c) {
+			select {
+			case r.pushCh <- struct{}{}:
+			default:
+			}
+		} else {
+			r.log.Warnf("[%s] queue was full. dropped a chunk", r.name)
+		}
+	}
+}
+
+func (r *Router) processChunks() (time.Duration, error) {
+	r.mutex.Lock()
+	defer r.mutex.Unlock()
+
+	// Introduce jitter by delaying the processing of chunks.
+	if r.maxJitter > 0 {
+		jitter := time.Duration(rand.Int63n(int64(r.maxJitter))) //nolint:gosec
+		time.Sleep(jitter)
+	}
+
+	//      cutOff
+	//         v min delay
+	//         |<--->|
+	//  +------------:--
+	//  |OOOOOOXXXXX :   --> time
+	//  +------------:--
+	//  |<--->|     now
+	//    due
+
+	enteredAt := time.Now()
+	cutOff := enteredAt.Add(-r.minDelay)
+
+	var d time.Duration // the next sleep duration
+
+	for {
+		d = 0
+
+		c := r.queue.peek()
+		if c == nil {
+			break // no more chunk in the queue
+		}
+
+		// check timestamp to find if the chunk is due
+		if c.getTimestamp().After(cutOff) {
+			// There is one or more chunk in the queue but none of them are due.
+			// Calculate the next sleep duration here.
+			nextExpire := c.getTimestamp().Add(r.minDelay)
+			d = nextExpire.Sub(enteredAt)
+			break
+		}
+
+		var ok bool
+		if c, ok = r.queue.pop(); !ok {
+			break // no more chunk in the queue
+		}
+
+		blocked := false
+		for i := 0; i < len(r.chunkFilters); i++ {
+			filter := r.chunkFilters[i]
+			if !filter(c) {
+				blocked = true
+				break
+			}
+		}
+		if blocked {
+			continue // discard
+		}
+
+		dstIP := c.getDestinationIP()
+
+		// check if the desination is in our subnet
+		if r.ipv4Net.Contains(dstIP) {
+			// search for the destination NIC
+			var nic NIC
+			if nic, ok = r.nics[dstIP.String()]; !ok {
+				// NIC not found. drop it.
+				r.log.Debugf("[%s] %s unreachable", r.name, c.String())
+				continue
+			}
+
+			// found the NIC, forward the chunk to the NIC.
+			// call to NIC must unlock mutex
+			r.mutex.Unlock()
+			nic.onInboundChunk(c)
+			r.mutex.Lock()
+			continue
+		}
+
+		// the destination is outside of this subnet
+		// is this WAN?
+		if r.parent == nil {
+			// this WAN. No route for this chunk
+			r.log.Debugf("[%s] no route found for %s", r.name, c.String())
+			continue
+		}
+
+		// Pass it to the parent via NAT
+		toParent, err := r.nat.translateOutbound(c)
+		if err != nil {
+			return 0, err
+		}
+
+		if toParent == nil {
+			continue
+		}
+
+		//nolint:godox
+		/* FIXME: this implementation would introduce a duplicate packet!
+		if r.nat.natType.Hairpining {
+			hairpinned, err := r.nat.translateInbound(toParent)
+			if err != nil {
+				r.log.Warnf("[%s] %s", r.name, err.Error())
+			} else {
+				go func() {
+					r.push(hairpinned)
+				}()
+			}
+		}
+		*/
+
+		// call to parent router mutex unlock mutex
+		r.mutex.Unlock()
+		r.parent.push(toParent)
+		r.mutex.Lock()
+	}
+
+	return d, nil
+}
+
+// caller must hold the mutex
+func (r *Router) setRouter(parent *Router) error {
+	r.parent = parent
+	r.resolver.setParent(parent.resolver)
+
+	// when this method is called, one or more IP address has already been assigned by
+	// the parent router.
+	ifc, err := r.getInterface("eth0")
+	if err != nil {
+		return err
+	}
+
+	if len(ifc.addrs) == 0 {
+		return errNoIPAddrEth0
+	}
+
+	mappedIPs := []net.IP{}
+	localIPs := []net.IP{}
+
+	for _, ifcAddr := range ifc.addrs {
+		var ip net.IP
+		switch addr := ifcAddr.(type) {
+		case *net.IPNet:
+			ip = addr.IP
+		case *net.IPAddr: // Do we really need this case?
+			ip = addr.IP
+		default:
+		}
+
+		if ip == nil {
+			continue
+		}
+
+		mappedIPs = append(mappedIPs, ip)
+
+		if locIP := r.staticLocalIPs[ip.String()]; locIP != nil {
+			localIPs = append(localIPs, locIP)
+		}
+	}
+
+	// Set up NAT here
+	if r.natType == nil {
+		r.natType = &NATType{
+			MappingBehavior:   EndpointIndependent,
+			FilteringBehavior: EndpointAddrPortDependent,
+			Hairpining:        false,
+			PortPreservation:  false,
+			MappingLifeTime:   30 * time.Second,
+		}
+	}
+	r.nat, err = newNAT(&natConfig{
+		name:          r.name,
+		natType:       *r.natType,
+		mappedIPs:     mappedIPs,
+		localIPs:      localIPs,
+		loggerFactory: r.loggerFactory,
+	})
+	if err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (r *Router) onInboundChunk(c Chunk) {
+	fromParent, err := r.nat.translateInbound(c)
+	if err != nil {
+		r.log.Warnf("[%s] %s", r.name, err.Error())
+		return
+	}
+
+	r.push(fromParent)
+}
+
+func (r *Router) getStaticIPs() []net.IP {
+	return r.staticIPs
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/vnet.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/vnet.go
new file mode 100644
index 000000000..bfe0f0f27
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/transport/vnet/vnet.go
@@ -0,0 +1,2 @@
+// Package vnet provides a virtual network layer for pion
+package vnet
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/.gitignore b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/.gitignore
new file mode 100644
index 000000000..98c12d9a4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/.gitignore
@@ -0,0 +1,9 @@
+*.sw[poe]
+examples/turn-client/tcp/tcp
+examples/turn-client/udp/udp
+examples/turn-server/add-software-attribute/add-software-attribute
+examples/turn-server/log/log
+examples/turn-server/simple/simple
+examples/turn-server/tcp/tcp
+examples/lt-cred-generator/lt-cred-generator
+examples/turn-server/lt-cred/lt-cred
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/.golangci.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/.golangci.yml
new file mode 100644
index 000000000..8e4185a5c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/.golangci.yml
@@ -0,0 +1,88 @@
+linters-settings:
+  govet:
+    check-shadowing: true
+  misspell:
+    locale: US
+  exhaustive:
+    default-signifies-exhaustive: true
+  gomodguard:
+    blocked:
+      modules:
+        - github.com/pkg/errors:
+            recommendations:
+            - errors
+
+linters:
+  enable:
+    - asciicheck       # Simple linter to check that your code does not contain non-ASCII identifiers
+    - bodyclose        # checks whether HTTP response body is closed successfully
+    - deadcode         # Finds unused code
+    - depguard         # Go linter that checks if package imports are in a list of acceptable packages
+    - dogsled          # Checks assignments with too many blank identifiers (e.g. x, _, _, _, := f())
+    - dupl             # Tool for code clone detection
+    - errcheck         # Errcheck is a program for checking for unchecked errors in go programs. These unchecked errors can be critical bugs in some cases
+    - exhaustive       # check exhaustiveness of enum switch statements
+    - exportloopref    # checks for pointers to enclosing loop variables
+    - gci              # Gci control golang package import order and make it always deterministic.
+    - gochecknoglobals # Checks that no globals are present in Go code
+    - gochecknoinits   # Checks that no init functions are present in Go code
+    - gocognit         # Computes and checks the cognitive complexity of functions
+    - goconst          # Finds repeated strings that could be replaced by a constant
+    - gocritic         # The most opinionated Go source code linter
+    - godox            # Tool for detection of FIXME, TODO and other comment keywords
+    - goerr113         # Golang linter to check the errors handling expressions
+    - gofmt            # Gofmt checks whether code was gofmt-ed. By default this tool runs with -s option to check for code simplification
+    - gofumpt          # Gofumpt checks whether code was gofumpt-ed.
+    - goheader         # Checks is file header matches to pattern
+    - goimports        # Goimports does everything that gofmt does. Additionally it checks unused imports
+    - golint           # Golint differs from gofmt. Gofmt reformats Go source code, whereas golint prints out style mistakes
+    - gomodguard       # Allow and block list linter for direct Go module dependencies. This is different from depguard where there are different block types for example version constraints and module recommendations.
+    - goprintffuncname # Checks that printf-like functions are named with `f` at the end
+    - gosec            # Inspects source code for security problems
+    - gosimple         # Linter for Go source code that specializes in simplifying a code
+    - govet            # Vet examines Go source code and reports suspicious constructs, such as Printf calls whose arguments do not align with the format string
+    - ineffassign      # Detects when assignments to existing variables are not used
+    - misspell         # Finds commonly misspelled English words in comments
+    - nakedret         # Finds naked returns in functions greater than a specified function length
+    - noctx            # noctx finds sending http request without context.Context
+    - scopelint        # Scopelint checks for unpinned variables in go programs
+    - staticcheck      # Staticcheck is a go vet on steroids, applying a ton of static analysis checks
+    - structcheck      # Finds unused struct fields
+    - stylecheck       # Stylecheck is a replacement for golint
+    - typecheck        # Like the front-end of a Go compiler, parses and type-checks Go code
+    - unconvert        # Remove unnecessary type conversions
+    - unparam          # Reports unused function parameters
+    - unused           # Checks Go code for unused constants, variables, functions and types
+    - varcheck         # Finds unused global variables and constants
+    - whitespace       # Tool for detection of leading and trailing whitespace
+  disable:
+    - funlen           # Tool for detection of long functions
+    - gocyclo          # Computes and checks the cyclomatic complexity of functions
+    - godot            # Check if comments end in a period
+    - gomnd            # An analyzer to detect magic numbers.
+    - lll              # Reports long lines
+    - maligned         # Tool to detect Go structs that would take less memory if their fields were sorted
+    - nestif           # Reports deeply nested if statements
+    - nlreturn         # nlreturn checks for a new line before return and branch statements to increase code clarity
+    - nolintlint       # Reports ill-formed or insufficient nolint directives
+    - prealloc         # Finds slice declarations that could potentially be preallocated
+    - rowserrcheck     # checks whether Err of rows is checked successfully
+    - sqlclosecheck    # Checks that sql.Rows and sql.Stmt are closed.
+    - testpackage      # linter that makes you use a separate _test package
+    - wsl              # Whitespace Linter - Forces you to use empty lines!
+
+issues:
+  exclude-rules:
+    # Allow complex tests, better to be self contained
+    - path: _test\.go
+      linters:
+        - gocognit
+
+    # Allow complex main function in examples
+    - path: examples
+      text: "of func `main` is high"
+      linters:
+        - gocognit
+
+run:
+  skip-dirs-use-default: false
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/.goreleaser.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/.goreleaser.yml
new file mode 100644
index 000000000..c7f2efdc4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/.goreleaser.yml
@@ -0,0 +1,109 @@
+before:
+  hooks:
+    - go mod tidy
+
+archives:
+- replacements:
+    darwin: Darwin
+    linux: Linux
+    windows: Windows
+    386: i386
+    amd64: x86_64
+
+checksum:
+  name_template: 'checksums.txt'
+
+snapshot:
+  name_template: "{{ .Tag }}-next"
+
+changelog:
+  sort: asc
+  filters:
+    exclude:
+    - '^docs:'
+    - '^test:'
+
+builds:
+  - binary: turn-client-tcp
+    id: turn-client-tcp
+    goos:
+      - darwin
+      - windows
+      - linux
+      - freebsd
+    goarch:
+      - amd64
+      - 386
+    env:
+      - CGO_ENABLED=0
+    main: ./examples/turn-client/tcp
+
+  - binary: turn-client-udp
+    id: turn-client-udp
+    goos:
+      - darwin
+      - windows
+      - linux
+      - freebsd
+    goarch:
+      - amd64
+      - 386
+    env:
+      - CGO_ENABLED=0
+    main: ./examples/turn-client/udp
+
+  - binary: turn-server-add-software-attribute
+    id: turn-server-add-software-attribute
+    goos:
+      - darwin
+      - windows
+      - linux
+      - freebsd
+    goarch:
+      - amd64
+      - 386
+    env:
+      - CGO_ENABLED=0
+    main: ./examples/turn-server/add-software-attribute
+
+  - binary: turn-server-log
+    id: turn-server-log
+    goos:
+      - darwin
+      - windows
+      - linux
+      - freebsd
+    goarch:
+      - amd64
+      - 386
+    env:
+      - CGO_ENABLED=0
+    main: ./examples/turn-server/log
+
+  - binary: turn-server-simple
+    id: turn-server-simple
+    goos:
+      - darwin
+      - windows
+      - linux
+      - freebsd
+    goarch:
+      - amd64
+      - 386
+    env:
+      - CGO_ENABLED=0
+    main: ./examples/turn-server/simple/
+
+  - binary: turn-server-tcp
+    id: turn-server-tcp
+    goos:
+      - darwin
+      - windows
+      - linux
+      - freebsd
+    goarch:
+      - amd64
+      - 386
+    env:
+      - CGO_ENABLED=0
+    main: ./examples/turn-server/tcp/
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/DESIGN.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/DESIGN.md
new file mode 100644
index 000000000..2c5246693
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/DESIGN.md
@@ -0,0 +1,31 @@
+# Why Pion TURN
+TURN servers aren't exactly a hot technology, they are usually an after thought when building something. Most of the time
+beginners build an interesting WebRTC application, but at the very end realize they need a TURN server. It is really frustrating when you
+want to share your cool new project, only to realize you have to run another service.
+
+Then you find yourself building from source, fighting with config files and making changes you don't fully understand. Pion TURN was born
+hoping to solve these frustrations. These are the guiding principals/features that define pion-turn.
+
+## Easy setup
+simple-turn is a statically built TURN server, configured by environment variables. The entire install setup is 5 commands, on any platform!
+The goal is that anyone should be able to run a TURN server on any platform.
+
+## Integration first
+pion-turn makes no assumptions about how you authenticate users, how you log, or even your topology! Instead of running a dedicated TURN server you
+can inherit from github.com/pion/turn and set whatever logger you want.
+
+## Embeddable
+You can add this to an existing service. This means all your config files stay homogeneous instead of having the mismatch that makes it harder to manage your services.
+For small setups it is usually an overkill to deploy dedicated TURN servers, this makes it easier to solve the problems you care about.
+
+## Safe
+Golang provides a great foundation to build safe network services. Especially when running a networked service that is highly concurrent bugs can be devastating.
+
+## Readable
+All network interaction is commented with a link to the spec. This makes learning and debugging easier, the TURN server was written to also serve as a guide for others.
+
+## Tested
+Every commit is tested via travis-ci Go provides fantastic facilities for testing, and more will be added as time goes on.
+
+## Shared libraries
+Every pion product is built using shared libraries, allowing others to build things using existing tested STUN and TURN tools.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/LICENSE.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/LICENSE.md
new file mode 100644
index 000000000..5cc9cbdc5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/LICENSE.md
@@ -0,0 +1,7 @@
+Copyright 2018 Pion LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/README.md
new file mode 100644
index 000000000..372b28692
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/README.md
@@ -0,0 +1,96 @@
+<h1 align="center">
+  <a href="https://pion.ly"><img src="./.github/gopher-pion.png" alt="Pion TURN" height="250px"></a>
+  <br>
+  Pion TURN
+  <br>
+</h1>
+<h4 align="center">A toolkit for building TURN clients and servers in Go</h4>
+<p align="center">
+  <a href="https://pion.ly"><img src="https://img.shields.io/badge/pion-turn-gray.svg?longCache=true&colorB=brightgreen" alt="Pion TURN"></a>
+  <a href="http://gophers.slack.com/messages/pion"><img src="https://img.shields.io/badge/join-us%20on%20slack-gray.svg?longCache=true&logo=slack&colorB=brightgreen" alt="Slack Widget"></a>
+  <a href="https://github.com/pion/awesome-pion" alt="Awesome Pion"><img src="https://cdn.rawgit.com/sindresorhus/awesome/d7305f38d29fed78fa85652e3a63e154dd8e8829/media/badge.svg"></a>
+  <br>
+  <a href="https://travis-ci.org/pion/turn"><img src="https://travis-ci.org/pion/turn.svg?branch=master" alt="Build Status"></a>
+  <a href="https://pkg.go.dev/github.com/pion/turn/v2"><img src="https://godoc.org/github.com/pion/turn?status.svg" alt="GoDoc"></a>
+  <a href="https://codecov.io/gh/pion/turn"><img src="https://codecov.io/gh/pion/turn/branch/master/graph/badge.svg" alt="Coverage Status"></a>
+  <a href="https://goreportcard.com/report/github.com/pion/turn"><img src="https://goreportcard.com/badge/github.com/pion/turn" alt="Go Report Card"></a>
+  <a href="https://www.codacy.com/app/pion/turn"><img src="https://api.codacy.com/project/badge/Grade/d53ec6c70576476cb16c140c2964afde" alt="Codacy Badge"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+</p>
+<br>
+
+Pion TURN is a Go toolkit for building TURN servers and clients. We wrote it to solve problems we had when building RTC projects.
+
+* **Deployable** - Use modern tooling of the Go ecosystem. Stop generating config files.
+* **Embeddable** - Include `pion/turn` in your existing applications. No need to manage another service.
+* **Extendable** - TURN as an API so you can easily integrate with your existing monitoring and metrics.
+* **Maintainable** - `pion/turn` is simple and well documented. Designed for learning and easy debugging.
+* **Portable** - Quickly deploy to multiple architectures/platforms just by setting an environment variable.
+* **Safe** - Stability and safety is important for network services. Go provides everything we need.
+* **Scalable** - Create allocations and mutate state at runtime. Designed to make scaling easy.
+
+# Using
+`pion/turn` is an API for building STUN/TURN clients and servers, not a binary you deploy then configure. It may require copying our examples and
+making minor modifications to fit your need, no knowledge of Go is required however. You may be able to download the pre-made binaries of our examples
+if you wish to get started quickly.
+
+The advantage of this is that you don't need to deal with complicated config files, or custom APIs to modify the state of Pion TURN.
+After you instantiate an instance of a Pion TURN server or client you interact with it like any library. The quickest way to get started is to look at the
+[examples](examples) or [GoDoc](https://godoc.org/github.com/pion/turn)
+
+# Examples
+We try to cover most common use cases in [examples](examples). If more examples could be helpful please file an issue, we are always looking
+to expand and improve `pion/turn` to make it easier for developers.
+
+To build any example you just need to run `go build` in the directory of the example you care about.
+It is also very easy to [cross compile](https://dave.cheney.net/2015/08/22/cross-compilation-with-go-1-5) Go programs.
+
+You can also see `pion/turn` usage in [pion/ice](https://github.com/pion/ice)
+
+# [FAQ](https://github.com/pion/webrtc/wiki/FAQ)
+
+### RFCs
+#### Implemented
+* [RFC 5389: Session Traversal Utilities for NAT (STUN)](https://tools.ietf.org/html/rfc5389)
+* [RFC 5766: Traversal Using Relays around NAT (TURN)](https://tools.ietf.org/html/rfc5766)
+
+#### Planned
+* [RFC 6062: Traversal Using Relays around NAT (TURN) Extensions for TCP Allocations](https://tools.ietf.org/html/rfc6062)
+* [RFC 6156: Traversal Using Relays around NAT (TURN) Extension for IPv6](https://tools.ietf.org/html/rfc6156)
+
+### Community
+Pion has an active community on the [Golang Slack](https://pion.ly/slack). Sign up and join the **#pion** channel for discussions and support.
+
+We are always looking to support **your projects**. Please reach out if you have something to build!
+
+### Contributing
+Check out the [CONTRIBUTING.md](CONTRIBUTING.md) to join the group of amazing people making this project possible:
+
+* [Michiel De Backker](https://github.com/backkem) - *Documentation*
+* [Ingmar Wittkau](https://github.com/iwittkau) - *STUN client*
+* [John Bradley](https://github.com/kc5nra) - *Original Author*
+* [jose nazario](https://github.com/paralax) - *Documentation*
+* [Mészáros Mihály](https://github.com/misi) - *Documentation*
+* [Mike Santry](https://github.com/santrym) - *Mascot*
+* [Sean DuBois](https://github.com/Sean-Der) - *Original Author*
+* [winds2016](https://github.com/winds2016) - *Windows platform testing*
+* [songjiayang](https://github.com/songjiayang) - *SongJiaYang*
+* [Yutaka Takeda](https://github.com/enobufs) - *vnet*
+* [namreg](https://github.com/namreg) - *Igor German*
+* [Aleksandr Razumov](https://github.com/ernado) - *protocol*
+* [Robert Eperjesi](https://github.com/epes)
+* [Lukas Rezek](https://github.com/lrezek)
+* [Hugo Arregui](https://github.com/hugoArregui)
+* [Aaron France](https://github.com/AeroNotix)
+* [Atsushi Watanabe](https://github.com/at-wat)
+* [Tom Clift](https://github.com/tclift)
+* [lllf](https://github.com/LittleLightLittleFire)
+* nindolabs (Marouane)
+* [Onwuka Gideon](https://github.com/dongido001)
+* [Herman Banken](https://github.com/hermanbanken)
+* [Jannis Mattheis](https://github.com/jmattheis)
+
+### License
+MIT License - see [LICENSE.md](LICENSE.md) for full text
+
+
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/client.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/client.go
new file mode 100644
index 000000000..b04e7d186
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/client.go
@@ -0,0 +1,569 @@
+package turn
+
+import (
+	b64 "encoding/base64"
+	"fmt"
+	"math"
+	"net"
+	"sync"
+	"time"
+
+	"github.com/pion/logging"
+	"github.com/pion/stun"
+	"github.com/pion/transport/vnet"
+	"github.com/pion/turn/v2/internal/client"
+	"github.com/pion/turn/v2/internal/proto"
+)
+
+const (
+	defaultRTO        = 200 * time.Millisecond
+	maxRtxCount       = 7              // total 7 requests (Rc)
+	maxDataBufferSize = math.MaxUint16 // message size limit for Chromium
+)
+
+//              interval [msec]
+// 0: 0 ms      +500
+// 1: 500 ms	+1000
+// 2: 1500 ms   +2000
+// 3: 3500 ms   +4000
+// 4: 7500 ms   +8000
+// 5: 15500 ms  +16000
+// 6: 31500 ms  +32000
+// -: 63500 ms  failed
+
+// ClientConfig is a bag of config parameters for Client.
+type ClientConfig struct {
+	STUNServerAddr string // STUN server address (e.g. "stun.abc.com:3478")
+	TURNServerAddr string // TURN server addrees (e.g. "turn.abc.com:3478")
+	Username       string
+	Password       string
+	Realm          string
+	Software       string
+	RTO            time.Duration
+	Conn           net.PacketConn // Listening socket (net.PacketConn)
+	LoggerFactory  logging.LoggerFactory
+	Net            *vnet.Net
+}
+
+// Client is a STUN server client
+type Client struct {
+	conn          net.PacketConn         // read-only
+	stunServ      net.Addr               // read-only
+	turnServ      net.Addr               // read-only
+	stunServStr   string                 // read-only, used for dmuxing
+	turnServStr   string                 // read-only, used for dmuxing
+	username      stun.Username          // read-only
+	password      string                 // read-only
+	realm         stun.Realm             // read-only
+	integrity     stun.MessageIntegrity  // read-only
+	software      stun.Software          // read-only
+	trMap         *client.TransactionMap // thread-safe
+	rto           time.Duration          // read-only
+	relayedConn   *client.UDPConn        // protected by mutex ***
+	allocTryLock  client.TryLock         // thread-safe
+	listenTryLock client.TryLock         // thread-safe
+	net           *vnet.Net              // read-only
+	mutex         sync.RWMutex           // thread-safe
+	mutexTrMap    sync.Mutex             // thread-safe
+	log           logging.LeveledLogger  // read-only
+}
+
+// NewClient returns a new Client instance. listeningAddress is the address and port to listen on, default "0.0.0.0:0"
+func NewClient(config *ClientConfig) (*Client, error) {
+	loggerFactory := config.LoggerFactory
+	if loggerFactory == nil {
+		loggerFactory = logging.NewDefaultLoggerFactory()
+	}
+
+	log := loggerFactory.NewLogger("turnc")
+
+	if config.Conn == nil {
+		return nil, errNilConn
+	}
+
+	if config.Net == nil {
+		config.Net = vnet.NewNet(nil) // defaults to native operation
+	} else if config.Net.IsVirtual() {
+		log.Warn("vnet is enabled")
+	}
+
+	var stunServ, turnServ net.Addr
+	var stunServStr, turnServStr string
+	var err error
+	if len(config.STUNServerAddr) > 0 {
+		log.Debugf("resolving %s", config.STUNServerAddr)
+		stunServ, err = config.Net.ResolveUDPAddr("udp4", config.STUNServerAddr)
+		if err != nil {
+			return nil, err
+		}
+		stunServStr = stunServ.String()
+		log.Debugf("stunServ: %s", stunServStr)
+	}
+	if len(config.TURNServerAddr) > 0 {
+		log.Debugf("resolving %s", config.TURNServerAddr)
+		turnServ, err = config.Net.ResolveUDPAddr("udp4", config.TURNServerAddr)
+		if err != nil {
+			return nil, err
+		}
+		turnServStr = turnServ.String()
+		log.Debugf("turnServ: %s", turnServStr)
+	}
+
+	rto := defaultRTO
+	if config.RTO > 0 {
+		rto = config.RTO
+	}
+
+	c := &Client{
+		conn:        config.Conn,
+		stunServ:    stunServ,
+		turnServ:    turnServ,
+		stunServStr: stunServStr,
+		turnServStr: turnServStr,
+		username:    stun.NewUsername(config.Username),
+		password:    config.Password,
+		realm:       stun.NewRealm(config.Realm),
+		software:    stun.NewSoftware(config.Software),
+		net:         config.Net,
+		trMap:       client.NewTransactionMap(),
+		rto:         rto,
+		log:         log,
+	}
+
+	return c, nil
+}
+
+// TURNServerAddr return the TURN server address
+func (c *Client) TURNServerAddr() net.Addr {
+	return c.turnServ
+}
+
+// STUNServerAddr return the STUN server address
+func (c *Client) STUNServerAddr() net.Addr {
+	return c.stunServ
+}
+
+// Username returns username
+func (c *Client) Username() stun.Username {
+	return c.username
+}
+
+// Realm return realm
+func (c *Client) Realm() stun.Realm {
+	return c.realm
+}
+
+// WriteTo sends data to the specified destination using the base socket.
+func (c *Client) WriteTo(data []byte, to net.Addr) (int, error) {
+	return c.conn.WriteTo(data, to)
+}
+
+// Listen will have this client start listening on the conn provided via the config.
+// This is optional. If not used, you will need to call HandleInbound method
+// to supply incoming data, instead.
+func (c *Client) Listen() error {
+	if err := c.listenTryLock.Lock(); err != nil {
+		return fmt.Errorf("%w: %s", errAlreadyListening, err.Error())
+	}
+
+	go func() {
+		buf := make([]byte, maxDataBufferSize)
+		for {
+			n, from, err := c.conn.ReadFrom(buf)
+			if err != nil {
+				c.log.Debugf("exiting read loop: %s", err.Error())
+				break
+			}
+
+			_, err = c.HandleInbound(buf[:n], from)
+			if err != nil {
+				c.log.Debugf("exiting read loop: %s", err.Error())
+				break
+			}
+		}
+
+		c.listenTryLock.Unlock()
+	}()
+
+	return nil
+}
+
+// Close closes this client
+func (c *Client) Close() {
+	c.mutexTrMap.Lock()
+	defer c.mutexTrMap.Unlock()
+
+	c.trMap.CloseAndDeleteAll()
+}
+
+// TransactionID & Base64: https://play.golang.org/p/EEgmJDI971P
+
+// SendBindingRequestTo sends a new STUN request to the given transport address
+func (c *Client) SendBindingRequestTo(to net.Addr) (net.Addr, error) {
+	attrs := []stun.Setter{stun.TransactionID, stun.BindingRequest}
+	if len(c.software) > 0 {
+		attrs = append(attrs, c.software)
+	}
+
+	msg, err := stun.Build(attrs...)
+	if err != nil {
+		return nil, err
+	}
+	trRes, err := c.PerformTransaction(msg, to, false)
+	if err != nil {
+		return nil, err
+	}
+
+	var reflAddr stun.XORMappedAddress
+	if err := reflAddr.GetFrom(trRes.Msg); err != nil {
+		return nil, err
+	}
+
+	return &net.UDPAddr{
+		IP:   reflAddr.IP,
+		Port: reflAddr.Port,
+	}, nil
+}
+
+// SendBindingRequest sends a new STUN request to the STUN server
+func (c *Client) SendBindingRequest() (net.Addr, error) {
+	if c.stunServ == nil {
+		return nil, errSTUNServerAddressNotSet
+	}
+	return c.SendBindingRequestTo(c.stunServ)
+}
+
+// Allocate sends a TURN allocation request to the given transport address
+func (c *Client) Allocate() (net.PacketConn, error) {
+	if err := c.allocTryLock.Lock(); err != nil {
+		return nil, fmt.Errorf("%w: %s", errOneAllocateOnly, err.Error())
+	}
+	defer c.allocTryLock.Unlock()
+
+	relayedConn := c.relayedUDPConn()
+	if relayedConn != nil {
+		return nil, fmt.Errorf("%w: %s", errAlreadyAllocated, relayedConn.LocalAddr().String())
+	}
+
+	msg, err := stun.Build(
+		stun.TransactionID,
+		stun.NewType(stun.MethodAllocate, stun.ClassRequest),
+		proto.RequestedTransport{Protocol: proto.ProtoUDP},
+		stun.Fingerprint,
+	)
+	if err != nil {
+		return nil, err
+	}
+
+	trRes, err := c.PerformTransaction(msg, c.turnServ, false)
+	if err != nil {
+		return nil, err
+	}
+
+	res := trRes.Msg
+
+	// Anonymous allocate failed, trying to authenticate.
+	var nonce stun.Nonce
+	if err = nonce.GetFrom(res); err != nil {
+		return nil, err
+	}
+	if err = c.realm.GetFrom(res); err != nil {
+		return nil, err
+	}
+	c.realm = append([]byte(nil), c.realm...)
+	c.integrity = stun.NewLongTermIntegrity(
+		c.username.String(), c.realm.String(), c.password,
+	)
+	// Trying to authorize.
+	msg, err = stun.Build(
+		stun.TransactionID,
+		stun.NewType(stun.MethodAllocate, stun.ClassRequest),
+		proto.RequestedTransport{Protocol: proto.ProtoUDP},
+		&c.username,
+		&c.realm,
+		&nonce,
+		&c.integrity,
+		stun.Fingerprint,
+	)
+	if err != nil {
+		return nil, err
+	}
+
+	trRes, err = c.PerformTransaction(msg, c.turnServ, false)
+	if err != nil {
+		return nil, err
+	}
+	res = trRes.Msg
+
+	if res.Type.Class == stun.ClassErrorResponse {
+		var code stun.ErrorCodeAttribute
+		if err = code.GetFrom(res); err == nil {
+			return nil, fmt.Errorf("%s (error %s)", res.Type, code) //nolint:goerr113
+		}
+		return nil, fmt.Errorf("%s", res.Type) //nolint:goerr113
+	}
+
+	// Getting relayed addresses from response.
+	var relayed proto.RelayedAddress
+	if err := relayed.GetFrom(res); err != nil {
+		return nil, err
+	}
+	relayedAddr := &net.UDPAddr{
+		IP:   relayed.IP,
+		Port: relayed.Port,
+	}
+
+	// Getting lifetime from response
+	var lifetime proto.Lifetime
+	if err := lifetime.GetFrom(res); err != nil {
+		return nil, err
+	}
+
+	relayedConn = client.NewUDPConn(&client.UDPConnConfig{
+		Observer:    c,
+		RelayedAddr: relayedAddr,
+		Integrity:   c.integrity,
+		Nonce:       nonce,
+		Lifetime:    lifetime.Duration,
+		Log:         c.log,
+	})
+
+	c.setRelayedUDPConn(relayedConn)
+
+	return relayedConn, nil
+}
+
+// PerformTransaction performs STUN transaction
+func (c *Client) PerformTransaction(msg *stun.Message, to net.Addr, ignoreResult bool) (client.TransactionResult,
+	error) {
+	trKey := b64.StdEncoding.EncodeToString(msg.TransactionID[:])
+
+	raw := make([]byte, len(msg.Raw))
+	copy(raw, msg.Raw)
+
+	tr := client.NewTransaction(&client.TransactionConfig{
+		Key:          trKey,
+		Raw:          raw,
+		To:           to,
+		Interval:     c.rto,
+		IgnoreResult: ignoreResult,
+	})
+
+	c.trMap.Insert(trKey, tr)
+
+	c.log.Tracef("start %s transaction %s to %s", msg.Type, trKey, tr.To.String())
+	_, err := c.conn.WriteTo(tr.Raw, to)
+	if err != nil {
+		return client.TransactionResult{}, err
+	}
+
+	tr.StartRtxTimer(c.onRtxTimeout)
+
+	// If dontWait is true, get the transaction going and return immediately
+	if ignoreResult {
+		return client.TransactionResult{}, nil
+	}
+
+	res := tr.WaitForResult()
+	if res.Err != nil {
+		return res, res.Err
+	}
+	return res, nil
+}
+
+// OnDeallocated is called when deallocation of relay address has been complete.
+// (Called by UDPConn)
+func (c *Client) OnDeallocated(relayedAddr net.Addr) {
+	c.setRelayedUDPConn(nil)
+}
+
+// HandleInbound handles data received.
+// This method handles incoming packet demultiplex it by the source address
+// and the types of the message.
+// This return a booleen (handled or not) and if there was an error.
+// Caller should check if the packet was handled by this client or not.
+// If not handled, it is assumed that the packet is application data.
+// If an error is returned, the caller should discard the packet regardless.
+func (c *Client) HandleInbound(data []byte, from net.Addr) (bool, error) {
+	// +-------------------+-------------------------------+
+	// |   Return Values   |                               |
+	// +-------------------+       Meaning / Action        |
+	// | handled |  error  |                               |
+	// |=========+=========+===============================+
+	// |  false  |   nil   | Handle the packet as app data |
+	// |---------+---------+-------------------------------+
+	// |  true   |   nil   |        Nothing to do          |
+	// |---------+---------+-------------------------------+
+	// |  false  |  error  |     (shouldn't happen)        |
+	// |---------+---------+-------------------------------+
+	// |  true   |  error  | Error occurred while handling |
+	// +---------+---------+-------------------------------+
+	// Possible causes of the error:
+	//  - Malformed packet (parse error)
+	//  - STUN message was a request
+	//  - Non-STUN message from the STUN server
+
+	switch {
+	case stun.IsMessage(data):
+		return true, c.handleSTUNMessage(data, from)
+	case proto.IsChannelData(data):
+		return true, c.handleChannelData(data)
+	case len(c.stunServStr) != 0 && from.String() == c.stunServStr:
+		// received from STUN server but it is not a STUN message
+		return true, errNonSTUNMessage
+	default:
+		// assume, this is an application data
+		c.log.Tracef("non-STUN/TURN packect, unhandled")
+	}
+
+	return false, nil
+}
+
+func (c *Client) handleSTUNMessage(data []byte, from net.Addr) error {
+	raw := make([]byte, len(data))
+	copy(raw, data)
+
+	msg := &stun.Message{Raw: raw}
+	if err := msg.Decode(); err != nil {
+		return fmt.Errorf("%w: %s", errFailedToDecodeSTUN, err.Error())
+	}
+
+	if msg.Type.Class == stun.ClassRequest {
+		return fmt.Errorf("%w : %s", errUnexpectedSTUNRequestMessage, msg.String())
+	}
+
+	if msg.Type.Class == stun.ClassIndication {
+		if msg.Type.Method == stun.MethodData {
+			var peerAddr proto.PeerAddress
+			if err := peerAddr.GetFrom(msg); err != nil {
+				return err
+			}
+			from = &net.UDPAddr{
+				IP:   peerAddr.IP,
+				Port: peerAddr.Port,
+			}
+
+			var data proto.Data
+			if err := data.GetFrom(msg); err != nil {
+				return err
+			}
+
+			c.log.Debugf("data indication received from %s", from.String())
+
+			relayedConn := c.relayedUDPConn()
+			if relayedConn == nil {
+				c.log.Debug("no relayed conn allocated")
+				return nil // silently discard
+			}
+
+			relayedConn.HandleInbound(data, from)
+		}
+		return nil
+	}
+
+	// This is a STUN response message (transactional)
+	// The type is either:
+	// - stun.ClassSuccessResponse
+	// - stun.ClassErrorResponse
+
+	trKey := b64.StdEncoding.EncodeToString(msg.TransactionID[:])
+
+	c.mutexTrMap.Lock()
+	tr, ok := c.trMap.Find(trKey)
+	if !ok {
+		c.mutexTrMap.Unlock()
+		// silently discard
+		c.log.Debugf("no transaction for %s", msg.String())
+		return nil
+	}
+
+	// End the transaction
+	tr.StopRtxTimer()
+	c.trMap.Delete(trKey)
+	c.mutexTrMap.Unlock()
+
+	if !tr.WriteResult(client.TransactionResult{
+		Msg:     msg,
+		From:    from,
+		Retries: tr.Retries(),
+	}) {
+		c.log.Debugf("no listener for %s", msg.String())
+	}
+
+	return nil
+}
+
+func (c *Client) handleChannelData(data []byte) error {
+	chData := &proto.ChannelData{
+		Raw: make([]byte, len(data)),
+	}
+	copy(chData.Raw, data)
+	if err := chData.Decode(); err != nil {
+		return err
+	}
+
+	relayedConn := c.relayedUDPConn()
+	if relayedConn == nil {
+		c.log.Debug("no relayed conn allocated")
+		return nil // silently discard
+	}
+
+	addr, ok := relayedConn.FindAddrByChannelNumber(uint16(chData.Number))
+	if !ok {
+		return fmt.Errorf("%w: %d", errChannelBindNotFound, int(chData.Number))
+	}
+
+	c.log.Tracef("channel data received from %s (ch=%d)", addr.String(), int(chData.Number))
+
+	relayedConn.HandleInbound(chData.Data, addr)
+	return nil
+}
+
+func (c *Client) onRtxTimeout(trKey string, nRtx int) {
+	c.mutexTrMap.Lock()
+	defer c.mutexTrMap.Unlock()
+
+	tr, ok := c.trMap.Find(trKey)
+	if !ok {
+		return // already gone
+	}
+
+	if nRtx == maxRtxCount {
+		// all retransmisstions failed
+		c.trMap.Delete(trKey)
+		if !tr.WriteResult(client.TransactionResult{
+			Err: fmt.Errorf("%w %s", errAllRetransmissionsFailed, trKey),
+		}) {
+			c.log.Debug("no listener for transaction")
+		}
+		return
+	}
+
+	c.log.Tracef("retransmitting transaction %s to %s (nRtx=%d)",
+		trKey, tr.To.String(), nRtx)
+	_, err := c.conn.WriteTo(tr.Raw, tr.To)
+	if err != nil {
+		c.trMap.Delete(trKey)
+		if !tr.WriteResult(client.TransactionResult{
+			Err: fmt.Errorf("%w %s", errFailedToRetransmitTransaction, trKey),
+		}) {
+			c.log.Debug("no listener for transaction")
+		}
+		return
+	}
+	tr.StartRtxTimer(c.onRtxTimeout)
+}
+
+func (c *Client) setRelayedUDPConn(conn *client.UDPConn) {
+	c.mutex.Lock()
+	defer c.mutex.Unlock()
+
+	c.relayedConn = conn
+}
+
+func (c *Client) relayedUDPConn() *client.UDPConn {
+	c.mutex.RLock()
+	defer c.mutex.RUnlock()
+
+	return c.relayedConn
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/codecov.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/codecov.yml
new file mode 100644
index 000000000..085200a48
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/codecov.yml
@@ -0,0 +1,20 @@
+#
+# DO NOT EDIT THIS FILE
+#
+# It is automatically copied from https://github.com/pion/.goassets repository.
+#
+
+coverage:
+  status:
+    project:
+      default:
+        # Allow decreasing 2% of total coverage to avoid noise.
+        threshold: 2%
+    patch:
+      default:
+        target: 70%
+        only_pulls: true
+
+ignore:
+  - "examples/*"
+  - "examples/**/*"
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/errors.go
new file mode 100644
index 000000000..12d5e0e86
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/errors.go
@@ -0,0 +1,28 @@
+package turn
+
+import "errors"
+
+var (
+	errRelayAddressInvalid           = errors.New("turn: RelayAddress must be valid IP to use RelayAddressGeneratorStatic")
+	errNoAvailableConns              = errors.New("turn: PacketConnConfigs and ConnConfigs are empty, unable to proceed")
+	errConnUnset                     = errors.New("turn: PacketConnConfig must have a non-nil Conn")
+	errListenerUnset                 = errors.New("turn: ListenerConfig must have a non-nil Listener")
+	errListeningAddressInvalid       = errors.New("turn: RelayAddressGenerator has invalid ListeningAddress")
+	errRelayAddressGeneratorUnset    = errors.New("turn: RelayAddressGenerator in RelayConfig is unset")
+	errMaxRetriesExceeded            = errors.New("turn: max retries exceeded")
+	errMaxPortNotZero                = errors.New("turn: MaxPort must be not 0")
+	errMinPortNotZero                = errors.New("turn: MaxPort must be not 0")
+	errNilConn                       = errors.New("turn: conn cannot not be nil")
+	errTODO                          = errors.New("turn: TODO")
+	errAlreadyListening              = errors.New("turn: already listening")
+	errFailedToClose                 = errors.New("turn: Server failed to close")
+	errFailedToRetransmitTransaction = errors.New("turn: failed to retransmit transaction")
+	errAllRetransmissionsFailed      = errors.New("all retransmissions failed for")
+	errChannelBindNotFound           = errors.New("no binding found for channel")
+	errSTUNServerAddressNotSet       = errors.New("STUN server address is not set for the client")
+	errOneAllocateOnly               = errors.New("only one Allocate() caller is allowed")
+	errAlreadyAllocated              = errors.New("already allocated")
+	errNonSTUNMessage                = errors.New("non-STUN message from STUN server")
+	errFailedToDecodeSTUN            = errors.New("failed to decode STUN message")
+	errUnexpectedSTUNRequestMessage  = errors.New("unexpected STUN request message")
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/go.mod
new file mode 100644
index 000000000..de599c37c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/go.mod
@@ -0,0 +1,11 @@
+module github.com/pion/turn/v2
+
+go 1.13
+
+require (
+	github.com/pion/logging v0.2.2
+	github.com/pion/randutil v0.1.0
+	github.com/pion/stun v0.3.5
+	github.com/pion/transport v0.10.1
+	github.com/stretchr/testify v1.6.1
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/go.sum b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/go.sum
new file mode 100644
index 000000000..7756c3768
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/go.sum
@@ -0,0 +1,28 @@
+github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/pion/logging v0.2.2 h1:M9+AIj/+pxNsDfAT64+MAVgJO0rsyLnoJKCqf//DoeY=
+github.com/pion/logging v0.2.2/go.mod h1:k0/tDVsRCX2Mb2ZEmTqNa7CWsQPc+YYCB7Q+5pahoms=
+github.com/pion/randutil v0.1.0 h1:CFG1UdESneORglEsnimhUjf33Rwjubwj6xfiOXBa3mA=
+github.com/pion/randutil v0.1.0/go.mod h1:XcJrSMMbbMRhASFVOlj/5hQial/Y8oH/HVo7TBZq+j8=
+github.com/pion/stun v0.3.5 h1:uLUCBCkQby4S1cf6CGuR9QrVOKcvUwFeemaC865QHDg=
+github.com/pion/stun v0.3.5/go.mod h1:gDMim+47EeEtfWogA37n6qXZS88L5V6LqFcf+DZA2UA=
+github.com/pion/transport v0.10.1 h1:2W+yJT+0mOQ160ThZYUx5Zp2skzshiNgxrNE9GUfhJM=
+github.com/pion/transport v0.10.1/go.mod h1:PBis1stIILMiis0PewDw91WJeLJkyIMcEk+DwKOzf4A=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.6.1 h1:hDPOHmpOpP40lSULcqw7IrRb/u7w6RpDC9399XyoNd0=
+github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20200625001655-4c5254603344 h1:vGXIOMxbNfDTk/aXCmfdLgkrSV+Z2tcbze+pEc3v5W4=
+golang.org/x/net v0.0.0-20200625001655-4c5254603344/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c h1:dUUwHk2QECo/6vqA44rthZ8ie2QXMNeKRTHCNY2nXvo=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/allocation.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/allocation.go
new file mode 100644
index 000000000..d1cb8c6c8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/allocation.go
@@ -0,0 +1,259 @@
+// Package allocation contains all CRUD operations for allocations
+package allocation
+
+import (
+	"net"
+	"sync"
+	"time"
+
+	"github.com/pion/logging"
+	"github.com/pion/stun"
+	"github.com/pion/turn/v2/internal/ipnet"
+	"github.com/pion/turn/v2/internal/proto"
+)
+
+// Allocation is tied to a FiveTuple and relays traffic
+// use CreateAllocation and GetAllocation to operate
+type Allocation struct {
+	RelayAddr           net.Addr
+	Protocol            Protocol
+	TurnSocket          net.PacketConn
+	RelaySocket         net.PacketConn
+	fiveTuple           *FiveTuple
+	permissionsLock     sync.RWMutex
+	permissions         map[string]*Permission
+	channelBindingsLock sync.RWMutex
+	channelBindings     []*ChannelBind
+	lifetimeTimer       *time.Timer
+	closed              chan interface{}
+	log                 logging.LeveledLogger
+}
+
+func addr2IPFingerprint(addr net.Addr) string {
+	switch a := addr.(type) {
+	case *net.UDPAddr:
+		return a.IP.String()
+	case *net.TCPAddr: // Do we really need this case?
+		return a.IP.String()
+	}
+	return "" // shoud never happen
+}
+
+// NewAllocation creates a new instance of NewAllocation.
+func NewAllocation(turnSocket net.PacketConn, fiveTuple *FiveTuple, log logging.LeveledLogger) *Allocation {
+	return &Allocation{
+		TurnSocket:  turnSocket,
+		fiveTuple:   fiveTuple,
+		permissions: make(map[string]*Permission, 64),
+		closed:      make(chan interface{}),
+		log:         log,
+	}
+}
+
+// GetPermission gets the Permission from the allocation
+func (a *Allocation) GetPermission(addr net.Addr) *Permission {
+	a.permissionsLock.RLock()
+	defer a.permissionsLock.RUnlock()
+
+	return a.permissions[addr2IPFingerprint(addr)]
+}
+
+// AddPermission adds a new permission to the allocation
+func (a *Allocation) AddPermission(p *Permission) {
+	fingerprint := addr2IPFingerprint(p.Addr)
+
+	a.permissionsLock.RLock()
+	existedPermission, ok := a.permissions[fingerprint]
+	a.permissionsLock.RUnlock()
+
+	if ok {
+		existedPermission.refresh(permissionTimeout)
+		return
+	}
+
+	p.allocation = a
+	a.permissionsLock.Lock()
+	a.permissions[fingerprint] = p
+	a.permissionsLock.Unlock()
+
+	p.start(permissionTimeout)
+}
+
+// RemovePermission removes the net.Addr's fingerprint from the allocation's permissions
+func (a *Allocation) RemovePermission(addr net.Addr) {
+	a.permissionsLock.Lock()
+	defer a.permissionsLock.Unlock()
+	delete(a.permissions, addr2IPFingerprint(addr))
+}
+
+// AddChannelBind adds a new ChannelBind to the allocation, it also updates the
+// permissions needed for this ChannelBind
+func (a *Allocation) AddChannelBind(c *ChannelBind, lifetime time.Duration) error {
+	// Check that this channel id isn't bound to another transport address, and
+	// that this transport address isn't bound to another channel number.
+	channelByNumber := a.GetChannelByNumber(c.Number)
+
+	if channelByNumber != a.GetChannelByAddr(c.Peer) {
+		return errSameChannelDifferentPeer
+	}
+
+	// Add or refresh this channel.
+	if channelByNumber == nil {
+		a.channelBindingsLock.Lock()
+		defer a.channelBindingsLock.Unlock()
+
+		c.allocation = a
+		a.channelBindings = append(a.channelBindings, c)
+		c.start(lifetime)
+
+		// Channel binds also refresh permissions.
+		a.AddPermission(NewPermission(c.Peer, a.log))
+	} else {
+		channelByNumber.refresh(lifetime)
+
+		// Channel binds also refresh permissions.
+		a.AddPermission(NewPermission(channelByNumber.Peer, a.log))
+	}
+
+	return nil
+}
+
+// RemoveChannelBind removes the ChannelBind from this allocation by id
+func (a *Allocation) RemoveChannelBind(number proto.ChannelNumber) bool {
+	a.channelBindingsLock.Lock()
+	defer a.channelBindingsLock.Unlock()
+
+	for i := len(a.channelBindings) - 1; i >= 0; i-- {
+		if a.channelBindings[i].Number == number {
+			a.channelBindings = append(a.channelBindings[:i], a.channelBindings[i+1:]...)
+			return true
+		}
+	}
+
+	return false
+}
+
+// GetChannelByNumber gets the ChannelBind from this allocation by id
+func (a *Allocation) GetChannelByNumber(number proto.ChannelNumber) *ChannelBind {
+	a.channelBindingsLock.RLock()
+	defer a.channelBindingsLock.RUnlock()
+	for _, cb := range a.channelBindings {
+		if cb.Number == number {
+			return cb
+		}
+	}
+	return nil
+}
+
+// GetChannelByAddr gets the ChannelBind from this allocation by net.Addr
+func (a *Allocation) GetChannelByAddr(addr net.Addr) *ChannelBind {
+	a.channelBindingsLock.RLock()
+	defer a.channelBindingsLock.RUnlock()
+	for _, cb := range a.channelBindings {
+		if ipnet.AddrEqual(cb.Peer, addr) {
+			return cb
+		}
+	}
+	return nil
+}
+
+// Refresh updates the allocations lifetime
+func (a *Allocation) Refresh(lifetime time.Duration) {
+	if !a.lifetimeTimer.Reset(lifetime) {
+		a.log.Errorf("Failed to reset allocation timer for %v", a.fiveTuple)
+	}
+}
+
+// Close closes the allocation
+func (a *Allocation) Close() error {
+	select {
+	case <-a.closed:
+		return nil
+	default:
+	}
+	close(a.closed)
+
+	a.lifetimeTimer.Stop()
+
+	a.permissionsLock.RLock()
+	for _, p := range a.permissions {
+		p.lifetimeTimer.Stop()
+	}
+	a.permissionsLock.RUnlock()
+
+	a.channelBindingsLock.RLock()
+	for _, c := range a.channelBindings {
+		c.lifetimeTimer.Stop()
+	}
+	a.channelBindingsLock.RUnlock()
+
+	return a.RelaySocket.Close()
+}
+
+//  https://tools.ietf.org/html/rfc5766#section-10.3
+//  When the server receives a UDP datagram at a currently allocated
+//  relayed transport address, the server looks up the allocation
+//  associated with the relayed transport address.  The server then
+//  checks to see whether the set of permissions for the allocation allow
+//  the relaying of the UDP datagram as described in Section 8.
+//
+//  If relaying is permitted, then the server checks if there is a
+//  channel bound to the peer that sent the UDP datagram (see
+//  Section 11).  If a channel is bound, then processing proceeds as
+//  described in Section 11.7.
+//
+//  If relaying is permitted but no channel is bound to the peer, then
+//  the server forms and sends a Data indication.  The Data indication
+//  MUST contain both an XOR-PEER-ADDRESS and a DATA attribute.  The DATA
+//  attribute is set to the value of the 'data octets' field from the
+//  datagram, and the XOR-PEER-ADDRESS attribute is set to the source
+//  transport address of the received UDP datagram.  The Data indication
+//  is then sent on the 5-tuple associated with the allocation.
+
+const rtpMTU = 1500
+
+func (a *Allocation) packetHandler(m *Manager) {
+	buffer := make([]byte, rtpMTU)
+
+	for {
+		n, srcAddr, err := a.RelaySocket.ReadFrom(buffer)
+		if err != nil {
+			m.DeleteAllocation(a.fiveTuple)
+			return
+		}
+
+		a.log.Debugf("relay socket %s received %d bytes from %s",
+			a.RelaySocket.LocalAddr().String(),
+			n,
+			srcAddr.String())
+
+		if channel := a.GetChannelByAddr(srcAddr); channel != nil {
+			channelData := &proto.ChannelData{
+				Data:   buffer[:n],
+				Number: channel.Number,
+			}
+			channelData.Encode()
+
+			if _, err = a.TurnSocket.WriteTo(channelData.Raw, a.fiveTuple.SrcAddr); err != nil {
+				a.log.Errorf("Failed to send ChannelData from allocation %v %v", srcAddr, err)
+			}
+		} else if p := a.GetPermission(srcAddr); p != nil {
+			udpAddr := srcAddr.(*net.UDPAddr)
+			peerAddressAttr := proto.PeerAddress{IP: udpAddr.IP, Port: udpAddr.Port}
+			dataAttr := proto.Data(buffer[:n])
+
+			msg, err := stun.Build(stun.TransactionID, stun.NewType(stun.MethodData, stun.ClassIndication), peerAddressAttr, dataAttr)
+			if err != nil {
+				a.log.Errorf("Failed to send DataIndication from allocation %v %v", srcAddr, err)
+			}
+			a.log.Debugf("relaying message from %s to client at %s",
+				srcAddr.String(),
+				a.fiveTuple.SrcAddr.String())
+			if _, err = a.TurnSocket.WriteTo(msg.Raw, a.fiveTuple.SrcAddr); err != nil {
+				a.log.Errorf("Failed to send DataIndication from allocation %v %v", srcAddr, err)
+			}
+		} else {
+			a.log.Infof("No Permission or Channel exists for %v on allocation %v", srcAddr, a.RelayAddr.String())
+		}
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/allocation_manager.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/allocation_manager.go
new file mode 100644
index 000000000..9a1271a4e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/allocation_manager.go
@@ -0,0 +1,186 @@
+package allocation
+
+import (
+	"fmt"
+	"net"
+	"sync"
+	"time"
+
+	"github.com/pion/logging"
+)
+
+// ManagerConfig a bag of config params for Manager.
+type ManagerConfig struct {
+	LeveledLogger      logging.LeveledLogger
+	AllocatePacketConn func(network string, requestedPort int) (net.PacketConn, net.Addr, error)
+	AllocateConn       func(network string, requestedPort int) (net.Conn, net.Addr, error)
+}
+
+type reservation struct {
+	token string
+	port  int
+}
+
+// Manager is used to hold active allocations
+type Manager struct {
+	lock sync.RWMutex
+	log  logging.LeveledLogger
+
+	allocations  map[string]*Allocation
+	reservations []*reservation
+
+	allocatePacketConn func(network string, requestedPort int) (net.PacketConn, net.Addr, error)
+	allocateConn       func(network string, requestedPort int) (net.Conn, net.Addr, error)
+}
+
+// NewManager creates a new instance of Manager.
+func NewManager(config ManagerConfig) (*Manager, error) {
+	switch {
+	case config.AllocatePacketConn == nil:
+		return nil, errAllocatePacketConnMustBeSet
+	case config.AllocateConn == nil:
+		return nil, errAllocateConnMustBeSet
+	case config.LeveledLogger == nil:
+		return nil, errLeveledLoggerMustBeSet
+	}
+
+	return &Manager{
+		log:                config.LeveledLogger,
+		allocations:        make(map[string]*Allocation, 64),
+		allocatePacketConn: config.AllocatePacketConn,
+		allocateConn:       config.AllocateConn,
+	}, nil
+}
+
+// GetAllocation fetches the allocation matching the passed FiveTuple
+func (m *Manager) GetAllocation(fiveTuple *FiveTuple) *Allocation {
+	m.lock.RLock()
+	defer m.lock.RUnlock()
+	return m.allocations[fiveTuple.Fingerprint()]
+}
+
+// Close closes the manager and closes all allocations it manages
+func (m *Manager) Close() error {
+	m.lock.Lock()
+	defer m.lock.Unlock()
+
+	for _, a := range m.allocations {
+		if err := a.Close(); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+// CreateAllocation creates a new allocation and starts relaying
+func (m *Manager) CreateAllocation(fiveTuple *FiveTuple, turnSocket net.PacketConn, requestedPort int, lifetime time.Duration) (*Allocation, error) {
+	switch {
+	case fiveTuple == nil:
+		return nil, errNilFiveTuple
+	case fiveTuple.SrcAddr == nil:
+		return nil, errNilFiveTupleSrcAddr
+	case fiveTuple.DstAddr == nil:
+		return nil, errNilFiveTupleDstAddr
+	case turnSocket == nil:
+		return nil, errNilTurnSocket
+	case lifetime == 0:
+		return nil, errLifetimeZero
+	}
+
+	if a := m.GetAllocation(fiveTuple); a != nil {
+		return nil, fmt.Errorf("%w: %v", errDupeFiveTuple, fiveTuple)
+	}
+	a := NewAllocation(turnSocket, fiveTuple, m.log)
+
+	conn, relayAddr, err := m.allocatePacketConn("udp4", requestedPort)
+	if err != nil {
+		return nil, err
+	}
+
+	a.RelaySocket = conn
+	a.RelayAddr = relayAddr
+
+	m.log.Debugf("listening on relay addr: %s", a.RelayAddr.String())
+
+	a.lifetimeTimer = time.AfterFunc(lifetime, func() {
+		m.DeleteAllocation(a.fiveTuple)
+	})
+
+	m.lock.Lock()
+	m.allocations[fiveTuple.Fingerprint()] = a
+	m.lock.Unlock()
+
+	go a.packetHandler(m)
+	return a, nil
+}
+
+// DeleteAllocation removes an allocation
+func (m *Manager) DeleteAllocation(fiveTuple *FiveTuple) {
+	fingerprint := fiveTuple.Fingerprint()
+
+	m.lock.Lock()
+	allocation := m.allocations[fingerprint]
+	delete(m.allocations, fingerprint)
+	m.lock.Unlock()
+
+	if allocation == nil {
+		return
+	}
+
+	if err := allocation.Close(); err != nil {
+		m.log.Errorf("Failed to close allocation: %v", err)
+	}
+}
+
+// CreateReservation stores the reservation for the token+port
+func (m *Manager) CreateReservation(reservationToken string, port int) {
+	time.AfterFunc(30*time.Second, func() {
+		m.lock.Lock()
+		defer m.lock.Unlock()
+		for i := len(m.reservations) - 1; i >= 0; i-- {
+			if m.reservations[i].token == reservationToken {
+				m.reservations = append(m.reservations[:i], m.reservations[i+1:]...)
+				return
+			}
+		}
+	})
+
+	m.lock.Lock()
+	m.reservations = append(m.reservations, &reservation{
+		token: reservationToken,
+		port:  port,
+	})
+	m.lock.Unlock()
+}
+
+// GetReservation returns the port for a given reservation if it exists
+func (m *Manager) GetReservation(reservationToken string) (int, bool) {
+	m.lock.RLock()
+	defer m.lock.RUnlock()
+
+	for _, r := range m.reservations {
+		if r.token == reservationToken {
+			return r.port, true
+		}
+	}
+	return 0, false
+}
+
+// GetRandomEvenPort returns a random un-allocated udp4 port
+func (m *Manager) GetRandomEvenPort() (int, error) {
+	conn, addr, err := m.allocatePacketConn("udp4", 0)
+	if err != nil {
+		return 0, err
+	}
+
+	udpAddr, ok := addr.(*net.UDPAddr)
+	if !ok {
+		return 0, errFailedToCastUDPAddr
+	} else if err := conn.Close(); err != nil {
+		return 0, err
+	} else if udpAddr.Port%2 == 1 {
+		return m.GetRandomEvenPort()
+	}
+
+	return udpAddr.Port, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/channel_bind.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/channel_bind.go
new file mode 100644
index 000000000..6216369d7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/channel_bind.go
@@ -0,0 +1,43 @@
+package allocation
+
+import (
+	"net"
+	"time"
+
+	"github.com/pion/logging"
+	"github.com/pion/turn/v2/internal/proto"
+)
+
+// ChannelBind represents a TURN Channel
+// https://tools.ietf.org/html/rfc5766#section-2.5
+type ChannelBind struct {
+	Peer   net.Addr
+	Number proto.ChannelNumber
+
+	allocation    *Allocation
+	lifetimeTimer *time.Timer
+	log           logging.LeveledLogger
+}
+
+// NewChannelBind creates a new ChannelBind
+func NewChannelBind(number proto.ChannelNumber, peer net.Addr, log logging.LeveledLogger) *ChannelBind {
+	return &ChannelBind{
+		Number: number,
+		Peer:   peer,
+		log:    log,
+	}
+}
+
+func (c *ChannelBind) start(lifetime time.Duration) {
+	c.lifetimeTimer = time.AfterFunc(lifetime, func() {
+		if !c.allocation.RemoveChannelBind(c.Number) {
+			c.log.Errorf("Failed to remove ChannelBind for %v %x %v", c.Number, c.Peer, c.allocation.fiveTuple)
+		}
+	})
+}
+
+func (c *ChannelBind) refresh(lifetime time.Duration) {
+	if !c.lifetimeTimer.Reset(lifetime) {
+		c.log.Errorf("Failed to reset ChannelBind timer for %v %x %v", c.Number, c.Peer, c.allocation.fiveTuple)
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/errors.go
new file mode 100644
index 000000000..fdd8335dc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/errors.go
@@ -0,0 +1,17 @@
+package allocation
+
+import "errors"
+
+var (
+	errAllocatePacketConnMustBeSet = errors.New("AllocatePacketConn must be set")
+	errAllocateConnMustBeSet       = errors.New("AllocateConn must be set")
+	errLeveledLoggerMustBeSet      = errors.New("LeveledLogger must be set")
+	errSameChannelDifferentPeer    = errors.New("you cannot use the same channel number with different peer")
+	errNilFiveTuple                = errors.New("allocations must not be created with nil FivTuple")
+	errNilFiveTupleSrcAddr         = errors.New("allocations must not be created with nil FiveTuple.SrcAddr")
+	errNilFiveTupleDstAddr         = errors.New("allocations must not be created with nil FiveTuple.DstAddr")
+	errNilTurnSocket               = errors.New("allocations must not be created with nil turnSocket")
+	errLifetimeZero                = errors.New("allocations must not be created with a lifetime of 0")
+	errDupeFiveTuple               = errors.New("allocation attempt created with duplicate FiveTuple")
+	errFailedToCastUDPAddr         = errors.New("failed to cast net.Addr to *net.UDPAddr")
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/five_tuple.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/five_tuple.go
new file mode 100644
index 000000000..1f2b3b5b6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/five_tuple.go
@@ -0,0 +1,36 @@
+package allocation
+
+import (
+	"fmt"
+	"net"
+)
+
+// Protocol is an enum for relay protocol
+type Protocol uint8
+
+// Network protocols for relay
+const (
+	UDP Protocol = iota
+	TCP
+)
+
+// FiveTuple is the combination (client IP address and port, server IP
+// address and port, and transport protocol (currently one of UDP,
+// TCP, or TLS)) used to communicate between the client and the
+// server.  The 5-tuple uniquely identifies this communication
+// stream.  The 5-tuple also uniquely identifies the Allocation on
+// the server.
+type FiveTuple struct {
+	Protocol
+	SrcAddr, DstAddr net.Addr
+}
+
+// Equal asserts if two FiveTuples are equal
+func (f *FiveTuple) Equal(b *FiveTuple) bool {
+	return f.Fingerprint() == b.Fingerprint()
+}
+
+// Fingerprint is the identity of a FiveTuple
+func (f *FiveTuple) Fingerprint() string {
+	return fmt.Sprintf("%d_%s_%s", f.Protocol, f.SrcAddr.String(), f.DstAddr.String())
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/permission.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/permission.go
new file mode 100644
index 000000000..03538eb5b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/allocation/permission.go
@@ -0,0 +1,40 @@
+package allocation
+
+import (
+	"net"
+	"time"
+
+	"github.com/pion/logging"
+)
+
+const permissionTimeout = time.Duration(5) * time.Minute
+
+// Permission represents a TURN permission. TURN permissions mimic the address-restricted
+// filtering mechanism of NATs that comply with [RFC4787].
+// https://tools.ietf.org/html/rfc5766#section-2.3
+type Permission struct {
+	Addr          net.Addr
+	allocation    *Allocation
+	lifetimeTimer *time.Timer
+	log           logging.LeveledLogger
+}
+
+// NewPermission create a new Permission
+func NewPermission(addr net.Addr, log logging.LeveledLogger) *Permission {
+	return &Permission{
+		Addr: addr,
+		log:  log,
+	}
+}
+
+func (p *Permission) start(lifetime time.Duration) {
+	p.lifetimeTimer = time.AfterFunc(lifetime, func() {
+		p.allocation.RemovePermission(p.Addr)
+	})
+}
+
+func (p *Permission) refresh(lifetime time.Duration) {
+	if !p.lifetimeTimer.Reset(lifetime) {
+		p.log.Errorf("Failed to reset permission timer for %v %v", p.Addr, p.allocation.fiveTuple)
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/binding.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/binding.go
new file mode 100644
index 000000000..ee52053cb
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/binding.go
@@ -0,0 +1,151 @@
+package client
+
+import (
+	"net"
+	"sync"
+	"sync/atomic"
+	"time"
+)
+
+//  Chanel number:
+//    0x4000 through 0x7FFF: These values are the allowed channel
+//    numbers (16,383 possible values).
+const (
+	minChannelNumber uint16 = 0x4000
+	maxChannelNumber uint16 = 0x7fff
+)
+
+type bindingState int32
+
+const (
+	bindingStateIdle bindingState = iota
+	bindingStateRequest
+	bindingStateReady
+	bindingStateRefresh
+	bindingStateFailed
+)
+
+type binding struct {
+	number       uint16          // read-only
+	st           bindingState    // thread-safe (atomic op)
+	addr         net.Addr        // read-only
+	mgr          *bindingManager // read-only
+	muBind       sync.Mutex      // thread-safe, for ChannelBind ops
+	_refreshedAt time.Time       // protected by mutex
+	mutex        sync.RWMutex    // thread-safe
+}
+
+func (b *binding) setState(state bindingState) {
+	atomic.StoreInt32((*int32)(&b.st), int32(state))
+}
+
+func (b *binding) state() bindingState {
+	return bindingState(atomic.LoadInt32((*int32)(&b.st)))
+}
+
+func (b *binding) setRefreshedAt(at time.Time) {
+	b.mutex.Lock()
+	defer b.mutex.Unlock()
+
+	b._refreshedAt = at
+}
+
+func (b *binding) refreshedAt() time.Time {
+	b.mutex.RLock()
+	defer b.mutex.RUnlock()
+
+	return b._refreshedAt
+}
+
+// Thread-safe binding map
+type bindingManager struct {
+	chanMap map[uint16]*binding
+	addrMap map[string]*binding
+	next    uint16
+	mutex   sync.RWMutex
+}
+
+func newBindingManager() *bindingManager {
+	return &bindingManager{
+		chanMap: map[uint16]*binding{},
+		addrMap: map[string]*binding{},
+		next:    minChannelNumber,
+	}
+}
+
+func (mgr *bindingManager) assignChannelNumber() uint16 {
+	n := mgr.next
+	if mgr.next == maxChannelNumber {
+		mgr.next = minChannelNumber
+	} else {
+		mgr.next++
+	}
+	return n
+}
+
+func (mgr *bindingManager) create(addr net.Addr) *binding {
+	mgr.mutex.Lock()
+	defer mgr.mutex.Unlock()
+
+	b := &binding{
+		number:       mgr.assignChannelNumber(),
+		addr:         addr,
+		mgr:          mgr,
+		_refreshedAt: time.Now(),
+	}
+
+	mgr.chanMap[b.number] = b
+	mgr.addrMap[b.addr.String()] = b
+	return b
+}
+
+func (mgr *bindingManager) findByAddr(addr net.Addr) (*binding, bool) {
+	mgr.mutex.RLock()
+	defer mgr.mutex.RUnlock()
+
+	b, ok := mgr.addrMap[addr.String()]
+	return b, ok
+}
+
+func (mgr *bindingManager) findByNumber(number uint16) (*binding, bool) {
+	mgr.mutex.RLock()
+	defer mgr.mutex.RUnlock()
+
+	b, ok := mgr.chanMap[number]
+	return b, ok
+}
+
+func (mgr *bindingManager) deleteByAddr(addr net.Addr) bool {
+	mgr.mutex.Lock()
+	defer mgr.mutex.Unlock()
+
+	b, ok := mgr.addrMap[addr.String()]
+	if !ok {
+		return false
+	}
+
+	delete(mgr.addrMap, addr.String())
+	delete(mgr.chanMap, b.number)
+	return true
+}
+
+func (mgr *bindingManager) deleteByNumber(number uint16) bool {
+	mgr.mutex.Lock()
+	defer mgr.mutex.Unlock()
+
+	b, ok := mgr.chanMap[number]
+	if !ok {
+		return false
+	}
+
+	delete(mgr.addrMap, b.addr.String())
+	delete(mgr.chanMap, number)
+	return true
+}
+
+func (mgr *bindingManager) size() int {
+	mgr.mutex.RLock()
+	defer mgr.mutex.RUnlock()
+
+	return len(mgr.chanMap)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/conn.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/conn.go
new file mode 100644
index 000000000..8a2b1ae75
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/conn.go
@@ -0,0 +1,613 @@
+// Package client implements the API for a TURN client
+package client
+
+import (
+	"errors"
+	"fmt"
+	"io"
+	"math"
+	"net"
+	"sync"
+	"time"
+
+	"github.com/pion/logging"
+	"github.com/pion/stun"
+	"github.com/pion/turn/v2/internal/proto"
+)
+
+const (
+	maxReadQueueSize    = 1024
+	permRefreshInterval = 120 * time.Second
+	maxRetryAttempts    = 3
+)
+
+const (
+	timerIDRefreshAlloc int = iota
+	timerIDRefreshPerms
+)
+
+func noDeadline() time.Time {
+	return time.Time{}
+}
+
+type inboundData struct {
+	data []byte
+	from net.Addr
+}
+
+// UDPConnObserver is an interface to UDPConn observer
+type UDPConnObserver interface {
+	TURNServerAddr() net.Addr
+	Username() stun.Username
+	Realm() stun.Realm
+	WriteTo(data []byte, to net.Addr) (int, error)
+	PerformTransaction(msg *stun.Message, to net.Addr, dontWait bool) (TransactionResult, error)
+	OnDeallocated(relayedAddr net.Addr)
+}
+
+// UDPConnConfig is a set of configuration params use by NewUDPConn
+type UDPConnConfig struct {
+	Observer    UDPConnObserver
+	RelayedAddr net.Addr
+	Integrity   stun.MessageIntegrity
+	Nonce       stun.Nonce
+	Lifetime    time.Duration
+	Log         logging.LeveledLogger
+}
+
+// UDPConn is the implementation of the Conn and PacketConn interfaces for UDP network connections.
+// comatible with net.PacketConn and net.Conn
+type UDPConn struct {
+	obs               UDPConnObserver       // read-only
+	relayedAddr       net.Addr              // read-only
+	permMap           *permissionMap        // thread-safe
+	bindingMgr        *bindingManager       // thread-safe
+	integrity         stun.MessageIntegrity // read-only
+	_nonce            stun.Nonce            // needs mutex x
+	_lifetime         time.Duration         // needs mutex x
+	readCh            chan *inboundData     // thread-safe
+	closeCh           chan struct{}         // thread-safe
+	readTimer         *time.Timer           // thread-safe
+	refreshAllocTimer *PeriodicTimer        // thread-safe
+	refreshPermsTimer *PeriodicTimer        // thread-safe
+	mutex             sync.RWMutex          // thread-safe
+	log               logging.LeveledLogger // read-only
+}
+
+// NewUDPConn creates a new instance of UDPConn
+func NewUDPConn(config *UDPConnConfig) *UDPConn {
+	c := &UDPConn{
+		obs:         config.Observer,
+		relayedAddr: config.RelayedAddr,
+		permMap:     newPermissionMap(),
+		bindingMgr:  newBindingManager(),
+		integrity:   config.Integrity,
+		_nonce:      config.Nonce,
+		_lifetime:   config.Lifetime,
+		readCh:      make(chan *inboundData, maxReadQueueSize),
+		closeCh:     make(chan struct{}),
+		readTimer:   time.NewTimer(time.Duration(math.MaxInt64)),
+		log:         config.Log,
+	}
+
+	c.log.Debugf("initial lifetime: %d seconds", int(c.lifetime().Seconds()))
+
+	c.refreshAllocTimer = NewPeriodicTimer(
+		timerIDRefreshAlloc,
+		c.onRefreshTimers,
+		c.lifetime()/2,
+	)
+
+	c.refreshPermsTimer = NewPeriodicTimer(
+		timerIDRefreshPerms,
+		c.onRefreshTimers,
+		permRefreshInterval,
+	)
+
+	if c.refreshAllocTimer.Start() {
+		c.log.Debugf("refreshAllocTimer started")
+	}
+	if c.refreshPermsTimer.Start() {
+		c.log.Debugf("refreshPermsTimer started")
+	}
+
+	return c
+}
+
+// ReadFrom reads a packet from the connection,
+// copying the payload into p. It returns the number of
+// bytes copied into p and the return address that
+// was on the packet.
+// It returns the number of bytes read (0 <= n <= len(p))
+// and any error encountered. Callers should always process
+// the n > 0 bytes returned before considering the error err.
+// ReadFrom can be made to time out and return
+// an Error with Timeout() == true after a fixed time limit;
+// see SetDeadline and SetReadDeadline.
+func (c *UDPConn) ReadFrom(p []byte) (n int, addr net.Addr, err error) {
+	for {
+		select {
+		case ibData := <-c.readCh:
+			n := copy(p, ibData.data)
+			if n < len(ibData.data) {
+				return 0, nil, io.ErrShortBuffer
+			}
+			return n, ibData.from, nil
+
+		case <-c.readTimer.C:
+			return 0, nil, &net.OpError{
+				Op:   "read",
+				Net:  c.LocalAddr().Network(),
+				Addr: c.LocalAddr(),
+				Err:  newTimeoutError("i/o timeout"),
+			}
+
+		case <-c.closeCh:
+			return 0, nil, &net.OpError{
+				Op:   "read",
+				Net:  c.LocalAddr().Network(),
+				Addr: c.LocalAddr(),
+				Err:  errClosed,
+			}
+		}
+	}
+}
+
+// WriteTo writes a packet with payload p to addr.
+// WriteTo can be made to time out and return
+// an Error with Timeout() == true after a fixed time limit;
+// see SetDeadline and SetWriteDeadline.
+// On packet-oriented connections, write timeouts are rare.
+func (c *UDPConn) WriteTo(p []byte, addr net.Addr) (int, error) { //nolint: gocognit
+	var err error
+	_, ok := addr.(*net.UDPAddr)
+	if !ok {
+		return 0, errUDPAddrCast
+	}
+
+	// check if we have a permission for the destination IP addr
+	perm, ok := c.permMap.find(addr)
+	if !ok {
+		perm = &permission{}
+		c.permMap.insert(addr, perm)
+	}
+
+	// This func-block would block, per destination IP (, or perm), until
+	// the perm state becomes "requested". Purpose of this is to guarantee
+	// the order of packets (within the same perm).
+	// Note that CreatePermission transaction may not be complete before
+	// all the data transmission. This is done assuming that the request
+	// will be mostly likely successful and we can tolerate some loss of
+	// UDP packet (or reorder), inorder to minimize the latency in most cases.
+	createPermission := func() error {
+		perm.mutex.Lock()
+		defer perm.mutex.Unlock()
+
+		if perm.state() == permStateIdle {
+			// punch a hole! (this would block a bit..)
+			if err = c.createPermissions(addr); err != nil {
+				c.permMap.delete(addr)
+				return err
+			}
+			perm.setState(permStatePermitted)
+		}
+		return nil
+	}
+
+	for i := 0; i < maxRetryAttempts; i++ {
+		if err = createPermission(); !errors.Is(err, errTryAgain) {
+			break
+		}
+	}
+	if err != nil {
+		return 0, err
+	}
+
+	// bind channel
+	b, ok := c.bindingMgr.findByAddr(addr)
+	if !ok {
+		b = c.bindingMgr.create(addr)
+	}
+
+	bindSt := b.state()
+
+	if bindSt == bindingStateIdle || bindSt == bindingStateRequest || bindSt == bindingStateFailed {
+		func() {
+			// block only callers with the same binding until
+			// the binding transaction has been complete
+			b.muBind.Lock()
+			defer b.muBind.Unlock()
+
+			// binding state may have been changed while waiting. check again.
+			if b.state() == bindingStateIdle {
+				b.setState(bindingStateRequest)
+				go func() {
+					err2 := c.bind(b)
+					if err2 != nil {
+						c.log.Warnf("bind() failed: %s", err2.Error())
+						b.setState(bindingStateFailed)
+						// keep going...
+					} else {
+						b.setState(bindingStateReady)
+					}
+				}()
+			}
+		}()
+
+		// send data using SendIndication
+		peerAddr := addr2PeerAddress(addr)
+		var msg *stun.Message
+		msg, err = stun.Build(
+			stun.TransactionID,
+			stun.NewType(stun.MethodSend, stun.ClassIndication),
+			proto.Data(p),
+			peerAddr,
+			stun.Fingerprint,
+		)
+		if err != nil {
+			return 0, err
+		}
+
+		// indication has no transaction (fire-and-forget)
+
+		return c.obs.WriteTo(msg.Raw, c.obs.TURNServerAddr())
+	}
+
+	// binding is either ready
+
+	// check if the binding needs a refresh
+	func() {
+		b.muBind.Lock()
+		defer b.muBind.Unlock()
+
+		if b.state() == bindingStateReady && time.Since(b.refreshedAt()) > 5*time.Minute {
+			b.setState(bindingStateRefresh)
+			go func() {
+				err = c.bind(b)
+				if err != nil {
+					c.log.Warnf("bind() for refresh failed: %s", err.Error())
+					b.setState(bindingStateFailed)
+					// keep going...
+				} else {
+					b.setRefreshedAt(time.Now())
+					b.setState(bindingStateReady)
+				}
+			}()
+		}
+	}()
+
+	// send via ChannelData
+	return c.sendChannelData(p, b.number)
+}
+
+// Close closes the connection.
+// Any blocked ReadFrom or WriteTo operations will be unblocked and return errors.
+func (c *UDPConn) Close() error {
+	c.refreshAllocTimer.Stop()
+	c.refreshPermsTimer.Stop()
+
+	select {
+	case <-c.closeCh:
+		return errAlreadyClosed
+	default:
+		close(c.closeCh)
+	}
+
+	c.obs.OnDeallocated(c.relayedAddr)
+	return c.refreshAllocation(0, true /* dontWait=true */)
+}
+
+// LocalAddr returns the local network address.
+func (c *UDPConn) LocalAddr() net.Addr {
+	return c.relayedAddr
+}
+
+// SetDeadline sets the read and write deadlines associated
+// with the connection. It is equivalent to calling both
+// SetReadDeadline and SetWriteDeadline.
+//
+// A deadline is an absolute time after which I/O operations
+// fail with a timeout (see type Error) instead of
+// blocking. The deadline applies to all future and pending
+// I/O, not just the immediately following call to ReadFrom or
+// WriteTo. After a deadline has been exceeded, the connection
+// can be refreshed by setting a deadline in the future.
+//
+// An idle timeout can be implemented by repeatedly extending
+// the deadline after successful ReadFrom or WriteTo calls.
+//
+// A zero value for t means I/O operations will not time out.
+func (c *UDPConn) SetDeadline(t time.Time) error {
+	return c.SetReadDeadline(t)
+}
+
+// SetReadDeadline sets the deadline for future ReadFrom calls
+// and any currently-blocked ReadFrom call.
+// A zero value for t means ReadFrom will not time out.
+func (c *UDPConn) SetReadDeadline(t time.Time) error {
+	var d time.Duration
+	if t == noDeadline() {
+		d = time.Duration(math.MaxInt64)
+	} else {
+		d = time.Until(t)
+	}
+	c.readTimer.Reset(d)
+	return nil
+}
+
+// SetWriteDeadline sets the deadline for future WriteTo calls
+// and any currently-blocked WriteTo call.
+// Even if write times out, it may return n > 0, indicating that
+// some of the data was successfully written.
+// A zero value for t means WriteTo will not time out.
+func (c *UDPConn) SetWriteDeadline(t time.Time) error {
+	// Write never blocks.
+	return nil
+}
+
+func addr2PeerAddress(addr net.Addr) proto.PeerAddress {
+	var peerAddr proto.PeerAddress
+	switch a := addr.(type) {
+	case *net.UDPAddr:
+		peerAddr.IP = a.IP
+		peerAddr.Port = a.Port
+	case *net.TCPAddr:
+		peerAddr.IP = a.IP
+		peerAddr.Port = a.Port
+	}
+
+	return peerAddr
+}
+
+func (c *UDPConn) createPermissions(addrs ...net.Addr) error {
+	setters := []stun.Setter{
+		stun.TransactionID,
+		stun.NewType(stun.MethodCreatePermission, stun.ClassRequest),
+	}
+
+	for _, addr := range addrs {
+		setters = append(setters, addr2PeerAddress(addr))
+	}
+
+	setters = append(setters,
+		c.obs.Username(),
+		c.obs.Realm(),
+		c.nonce(),
+		c.integrity,
+		stun.Fingerprint)
+
+	msg, err := stun.Build(setters...)
+	if err != nil {
+		return err
+	}
+
+	trRes, err := c.obs.PerformTransaction(msg, c.obs.TURNServerAddr(), false)
+	if err != nil {
+		return err
+	}
+
+	res := trRes.Msg
+
+	if res.Type.Class == stun.ClassErrorResponse {
+		var code stun.ErrorCodeAttribute
+		if err = code.GetFrom(res); err == nil {
+			if code.Code == stun.CodeStaleNonce {
+				c.setNonceFromMsg(res)
+				return errTryAgain
+			}
+			return fmt.Errorf("%s (error %s)", res.Type, code) //nolint:goerr113
+		}
+
+		return fmt.Errorf("%s", res.Type) //nolint:goerr113
+	}
+
+	return nil
+}
+
+// HandleInbound passes inbound data in UDPConn
+func (c *UDPConn) HandleInbound(data []byte, from net.Addr) {
+	// copy data
+	copied := make([]byte, len(data))
+	copy(copied, data)
+
+	select {
+	case c.readCh <- &inboundData{data: copied, from: from}:
+	default:
+		c.log.Warnf("receive buffer full")
+	}
+}
+
+// FindAddrByChannelNumber returns a peer address associated with the
+// channel number on this UDPConn
+func (c *UDPConn) FindAddrByChannelNumber(chNum uint16) (net.Addr, bool) {
+	b, ok := c.bindingMgr.findByNumber(chNum)
+	if !ok {
+		return nil, false
+	}
+	return b.addr, true
+}
+
+func (c *UDPConn) setNonceFromMsg(msg *stun.Message) {
+	// Update nonce
+	var nonce stun.Nonce
+	if err := nonce.GetFrom(msg); err == nil {
+		c.setNonce(nonce)
+		c.log.Debug("refresh allocation: 438, got new nonce.")
+	} else {
+		c.log.Warn("refresh allocation: 438 but no nonce.")
+	}
+}
+
+func (c *UDPConn) refreshAllocation(lifetime time.Duration, dontWait bool) error {
+	msg, err := stun.Build(
+		stun.TransactionID,
+		stun.NewType(stun.MethodRefresh, stun.ClassRequest),
+		proto.Lifetime{Duration: lifetime},
+		c.obs.Username(),
+		c.obs.Realm(),
+		c.nonce(),
+		c.integrity,
+		stun.Fingerprint,
+	)
+	if err != nil {
+		return fmt.Errorf("%w: %s", errFailedToBuildRefreshRequest, err.Error())
+	}
+
+	c.log.Debugf("send refresh request (dontWait=%v)", dontWait)
+	trRes, err := c.obs.PerformTransaction(msg, c.obs.TURNServerAddr(), dontWait)
+	if err != nil {
+		return fmt.Errorf("%w: %s", errFailedToRefreshAllocation, err.Error())
+	}
+
+	if dontWait {
+		c.log.Debug("refresh request sent")
+		return nil
+	}
+
+	c.log.Debug("refresh request sent, and waiting response")
+
+	res := trRes.Msg
+	if res.Type.Class == stun.ClassErrorResponse {
+		var code stun.ErrorCodeAttribute
+		if err = code.GetFrom(res); err == nil {
+			if code.Code == stun.CodeStaleNonce {
+				c.setNonceFromMsg(res)
+				return errTryAgain
+			}
+			return err
+		}
+		return fmt.Errorf("%s", res.Type) //nolint:goerr113
+	}
+
+	// Getting lifetime from response
+	var updatedLifetime proto.Lifetime
+	if err := updatedLifetime.GetFrom(res); err != nil {
+		return fmt.Errorf("%w: %s", errFailedToGetLifetime, err.Error())
+	}
+
+	c.setLifetime(updatedLifetime.Duration)
+	c.log.Debugf("updated lifetime: %d seconds", int(c.lifetime().Seconds()))
+	return nil
+}
+
+func (c *UDPConn) refreshPermissions() error {
+	addrs := c.permMap.addrs()
+	if len(addrs) == 0 {
+		c.log.Debug("no permission to refresh")
+		return nil
+	}
+	if err := c.createPermissions(addrs...); err != nil {
+		if errors.Is(err, errTryAgain) {
+			return errTryAgain
+		}
+		c.log.Errorf("fail to refresh permissions: %s", err.Error())
+		return err
+	}
+	c.log.Debug("refresh permissions successful")
+	return nil
+}
+
+func (c *UDPConn) bind(b *binding) error {
+	setters := []stun.Setter{
+		stun.TransactionID,
+		stun.NewType(stun.MethodChannelBind, stun.ClassRequest),
+		addr2PeerAddress(b.addr),
+		proto.ChannelNumber(b.number),
+		c.obs.Username(),
+		c.obs.Realm(),
+		c.nonce(),
+		c.integrity,
+		stun.Fingerprint,
+	}
+
+	msg, err := stun.Build(setters...)
+	if err != nil {
+		return err
+	}
+
+	trRes, err := c.obs.PerformTransaction(msg, c.obs.TURNServerAddr(), false)
+	if err != nil {
+		c.bindingMgr.deleteByAddr(b.addr)
+		return err
+	}
+
+	res := trRes.Msg
+
+	if res.Type != stun.NewType(stun.MethodChannelBind, stun.ClassSuccessResponse) {
+		return fmt.Errorf("unexpected response type %s", res.Type) //nolint:goerr113
+	}
+
+	c.log.Debugf("channel binding successful: %s %d", b.addr.String(), b.number)
+
+	// Success.
+	return nil
+}
+
+func (c *UDPConn) sendChannelData(data []byte, chNum uint16) (int, error) {
+	chData := &proto.ChannelData{
+		Data:   data,
+		Number: proto.ChannelNumber(chNum),
+	}
+	chData.Encode()
+	return c.obs.WriteTo(chData.Raw, c.obs.TURNServerAddr())
+}
+
+func (c *UDPConn) onRefreshTimers(id int) {
+	c.log.Debugf("refresh timer %d expired", id)
+	switch id {
+	case timerIDRefreshAlloc:
+		var err error
+		lifetime := c.lifetime()
+		// limit the max retries on errTryAgain to 3
+		// when stale nonce returns, sencond retry should succeed
+		for i := 0; i < maxRetryAttempts; i++ {
+			err = c.refreshAllocation(lifetime, false)
+			if !errors.Is(err, errTryAgain) {
+				break
+			}
+		}
+		if err != nil {
+			c.log.Warnf("refresh allocation failed")
+		}
+	case timerIDRefreshPerms:
+		var err error
+		for i := 0; i < maxRetryAttempts; i++ {
+			err = c.refreshPermissions()
+			if !errors.Is(err, errTryAgain) {
+				break
+			}
+		}
+		if err != nil {
+			c.log.Warnf("refresh permissions failed")
+		}
+	}
+}
+
+func (c *UDPConn) nonce() stun.Nonce {
+	c.mutex.RLock()
+	defer c.mutex.RUnlock()
+
+	return c._nonce
+}
+
+func (c *UDPConn) setNonce(nonce stun.Nonce) {
+	c.mutex.Lock()
+	defer c.mutex.Unlock()
+
+	c.log.Debugf("set new nonce with %d bytes", len(nonce))
+	c._nonce = nonce
+}
+
+func (c *UDPConn) lifetime() time.Duration {
+	c.mutex.RLock()
+	defer c.mutex.RUnlock()
+
+	return c._lifetime
+}
+
+func (c *UDPConn) setLifetime(lifetime time.Duration) {
+	c.mutex.Lock()
+	defer c.mutex.Unlock()
+
+	c._lifetime = lifetime
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/errors.go
new file mode 100644
index 000000000..2d4bd30c4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/errors.go
@@ -0,0 +1,37 @@
+package client
+
+import (
+	"errors"
+)
+
+var (
+	errFakeErr                             = errors.New("fake error")
+	errTryAgain                            = errors.New("try again")
+	errClosed                              = errors.New("use of closed network connection")
+	errUDPAddrCast                         = errors.New("addr is not a net.UDPAddr")
+	errAlreadyClosed                       = errors.New("already closed")
+	errDoubleLock                          = errors.New("try-lock is already locked")
+	errTransactionClosed                   = errors.New("transaction closed")
+	errWaitForResultOnNonResultTransaction = errors.New("WaitForResult called on non-result transaction")
+	errFailedToBuildRefreshRequest         = errors.New("failed to build refresh request")
+	errFailedToRefreshAllocation           = errors.New("failed to refresh allocation")
+	errFailedToGetLifetime                 = errors.New("failed to get lifetime from refresh response")
+)
+
+type timeoutError struct {
+	msg string
+}
+
+func newTimeoutError(msg string) error {
+	return &timeoutError{
+		msg: msg,
+	}
+}
+
+func (e *timeoutError) Error() string {
+	return e.msg
+}
+
+func (e *timeoutError) Timeout() bool {
+	return true
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/periodic_timer.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/periodic_timer.go
new file mode 100644
index 000000000..fcd567870
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/periodic_timer.go
@@ -0,0 +1,82 @@
+package client
+
+import (
+	"sync"
+	"time"
+)
+
+// PeriodicTimerTimeoutHandler is a handler called on timeout
+type PeriodicTimerTimeoutHandler func(timerID int)
+
+// PeriodicTimer is a periodic timer
+type PeriodicTimer struct {
+	id             int
+	interval       time.Duration
+	timeoutHandler PeriodicTimerTimeoutHandler
+	stopFunc       func()
+	mutex          sync.RWMutex
+}
+
+// NewPeriodicTimer create a new timer
+func NewPeriodicTimer(id int, timeoutHandler PeriodicTimerTimeoutHandler, interval time.Duration) *PeriodicTimer {
+	return &PeriodicTimer{
+		id:             id,
+		interval:       interval,
+		timeoutHandler: timeoutHandler,
+	}
+}
+
+// Start starts the timer.
+func (t *PeriodicTimer) Start() bool {
+	t.mutex.Lock()
+	defer t.mutex.Unlock()
+
+	// this is a noop if the timer is always running
+	if t.stopFunc != nil {
+		return false
+	}
+
+	cancelCh := make(chan struct{})
+
+	go func() {
+		canceling := false
+
+		for !canceling {
+			timer := time.NewTimer(t.interval)
+
+			select {
+			case <-timer.C:
+				t.timeoutHandler(t.id)
+			case <-cancelCh:
+				canceling = true
+				timer.Stop()
+			}
+		}
+	}()
+
+	t.stopFunc = func() {
+		close(cancelCh)
+	}
+
+	return true
+}
+
+// Stop stops the timer.
+func (t *PeriodicTimer) Stop() {
+	t.mutex.Lock()
+	defer t.mutex.Unlock()
+
+	if t.stopFunc != nil {
+		t.stopFunc()
+		t.stopFunc = nil
+	}
+}
+
+// IsRunning tests if the timer is running.
+// Debug purpose only
+func (t *PeriodicTimer) IsRunning() bool {
+	t.mutex.RLock()
+	defer t.mutex.RUnlock()
+
+	return (t.stopFunc != nil)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/permission.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/permission.go
new file mode 100644
index 000000000..5546a22e2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/permission.go
@@ -0,0 +1,90 @@
+package client
+
+import (
+	"net"
+	"sync"
+	"sync/atomic"
+)
+
+type permState int32
+
+const (
+	permStateIdle permState = iota
+	permStatePermitted
+)
+
+type permission struct {
+	st    permState    // thread-safe (atomic op)
+	mutex sync.RWMutex // thread-safe
+}
+
+func (p *permission) setState(state permState) {
+	atomic.StoreInt32((*int32)(&p.st), int32(state))
+}
+
+func (p *permission) state() permState {
+	return permState(atomic.LoadInt32((*int32)(&p.st)))
+}
+
+// Thread-safe permission map
+type permissionMap struct {
+	permMap map[string]*permission
+	mutex   sync.RWMutex
+}
+
+func (m *permissionMap) insert(addr net.Addr, p *permission) bool {
+	m.mutex.Lock()
+	defer m.mutex.Unlock()
+
+	udpAddr, ok := addr.(*net.UDPAddr)
+	if !ok {
+		return false
+	}
+
+	m.permMap[udpAddr.IP.String()] = p
+	return true
+}
+
+func (m *permissionMap) find(addr net.Addr) (*permission, bool) {
+	m.mutex.RLock()
+	defer m.mutex.RUnlock()
+
+	udpAddr, ok := addr.(*net.UDPAddr)
+	if !ok {
+		return nil, false
+	}
+
+	p, ok := m.permMap[udpAddr.IP.String()]
+	return p, ok
+}
+
+func (m *permissionMap) delete(addr net.Addr) {
+	m.mutex.Lock()
+	defer m.mutex.Unlock()
+
+	udpAddr, ok := addr.(*net.UDPAddr)
+	if !ok {
+		return
+	}
+
+	delete(m.permMap, udpAddr.IP.String())
+}
+
+func (m *permissionMap) addrs() []net.Addr {
+	m.mutex.RLock()
+	defer m.mutex.RUnlock()
+
+	addrs := []net.Addr{}
+	for k := range m.permMap {
+		addrs = append(addrs, &net.UDPAddr{
+			IP: net.ParseIP(k),
+		})
+	}
+	return addrs
+}
+
+func newPermissionMap() *permissionMap {
+	return &permissionMap{
+		permMap: map[string]*permission{},
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/transaction.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/transaction.go
new file mode 100644
index 000000000..610a4d4d2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/transaction.go
@@ -0,0 +1,185 @@
+package client
+
+import (
+	"net"
+	"sync"
+	"time"
+
+	"github.com/pion/stun"
+)
+
+const (
+	maxRtxInterval time.Duration = 1600 * time.Millisecond
+)
+
+// TransactionResult is a bag of result values of a transaction
+type TransactionResult struct {
+	Msg     *stun.Message
+	From    net.Addr
+	Retries int
+	Err     error
+}
+
+// TransactionConfig is a set of config params used by NewTransaction
+type TransactionConfig struct {
+	Key          string
+	Raw          []byte
+	To           net.Addr
+	Interval     time.Duration
+	IgnoreResult bool // true to throw away the result of this transaction (it will not be readable using WaitForResult)
+}
+
+// Transaction represents a transaction
+type Transaction struct {
+	Key      string                 // read-only
+	Raw      []byte                 // read-only
+	To       net.Addr               // read-only
+	nRtx     int                    // modified only by the timer thread
+	interval time.Duration          // modified only by the timer thread
+	timer    *time.Timer            // thread-safe, set only by the creator, and stopper
+	resultCh chan TransactionResult // thread-safe
+	mutex    sync.RWMutex
+}
+
+// NewTransaction creates a new instance of Transaction
+func NewTransaction(config *TransactionConfig) *Transaction {
+	var resultCh chan TransactionResult
+	if !config.IgnoreResult {
+		resultCh = make(chan TransactionResult)
+	}
+
+	return &Transaction{
+		Key:      config.Key,      // read-only
+		Raw:      config.Raw,      // read-only
+		To:       config.To,       // read-only
+		interval: config.Interval, // modified only by the timer thread
+		resultCh: resultCh,        // thread-safe
+	}
+}
+
+// StartRtxTimer starts the transaction timer
+func (t *Transaction) StartRtxTimer(onTimeout func(trKey string, nRtx int)) {
+	t.mutex.Lock()
+	defer t.mutex.Unlock()
+
+	t.timer = time.AfterFunc(t.interval, func() {
+		t.mutex.Lock()
+		t.nRtx++
+		nRtx := t.nRtx
+		t.interval *= 2
+		if t.interval > maxRtxInterval {
+			t.interval = maxRtxInterval
+		}
+		t.mutex.Unlock()
+		onTimeout(t.Key, nRtx)
+	})
+}
+
+// StopRtxTimer stop the transaction timer
+func (t *Transaction) StopRtxTimer() {
+	t.mutex.Lock()
+	defer t.mutex.Unlock()
+
+	if t.timer != nil {
+		t.timer.Stop()
+	}
+}
+
+// WriteResult writes the result to the result channel
+func (t *Transaction) WriteResult(res TransactionResult) bool {
+	if t.resultCh == nil {
+		return false
+	}
+
+	t.resultCh <- res
+
+	return true
+}
+
+// WaitForResult waits for the transaction result
+func (t *Transaction) WaitForResult() TransactionResult {
+	if t.resultCh == nil {
+		return TransactionResult{
+			Err: errWaitForResultOnNonResultTransaction,
+		}
+	}
+
+	result, ok := <-t.resultCh
+	if !ok {
+		result.Err = errTransactionClosed
+	}
+	return result
+}
+
+// Close closes the transaction
+func (t *Transaction) Close() {
+	if t.resultCh != nil {
+		close(t.resultCh)
+	}
+}
+
+// Retries returns the number of retransmission it has made
+func (t *Transaction) Retries() int {
+	t.mutex.RLock()
+	defer t.mutex.RUnlock()
+
+	return t.nRtx
+}
+
+// TransactionMap is a thread-safe transaction map
+type TransactionMap struct {
+	trMap map[string]*Transaction
+	mutex sync.RWMutex
+}
+
+// NewTransactionMap create a new instance of the transaction map
+func NewTransactionMap() *TransactionMap {
+	return &TransactionMap{
+		trMap: map[string]*Transaction{},
+	}
+}
+
+// Insert inserts a trasaction to the map
+func (m *TransactionMap) Insert(key string, tr *Transaction) bool {
+	m.mutex.Lock()
+	defer m.mutex.Unlock()
+
+	m.trMap[key] = tr
+	return true
+}
+
+// Find looks up a transaction by its key
+func (m *TransactionMap) Find(key string) (*Transaction, bool) {
+	m.mutex.RLock()
+	defer m.mutex.RUnlock()
+
+	tr, ok := m.trMap[key]
+	return tr, ok
+}
+
+// Delete deletes a transaction by its key
+func (m *TransactionMap) Delete(key string) {
+	m.mutex.Lock()
+	defer m.mutex.Unlock()
+
+	delete(m.trMap, key)
+}
+
+// CloseAndDeleteAll closes and deletes all transactions
+func (m *TransactionMap) CloseAndDeleteAll() {
+	m.mutex.Lock()
+	defer m.mutex.Unlock()
+
+	for trKey, tr := range m.trMap {
+		tr.Close()
+		delete(m.trMap, trKey)
+	}
+}
+
+// Size returns the length of the transaction map
+func (m *TransactionMap) Size() int {
+	m.mutex.RLock()
+	defer m.mutex.RUnlock()
+
+	return len(m.trMap)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/trylock.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/trylock.go
new file mode 100644
index 000000000..48e25a054
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/client/trylock.go
@@ -0,0 +1,24 @@
+package client
+
+import (
+	"sync/atomic"
+)
+
+// TryLock implement the classic  "try-lock" operation.
+type TryLock struct {
+	n int32
+}
+
+// Lock tries to lock the try-lock. If successful, it returns true.
+// Otherwise, it returns false immedidately.
+func (c *TryLock) Lock() error {
+	if !atomic.CompareAndSwapInt32(&c.n, 0, 1) {
+		return errDoubleLock
+	}
+	return nil
+}
+
+// Unlock unlocks the try-lock.
+func (c *TryLock) Unlock() {
+	atomic.StoreInt32(&c.n, 0)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/ipnet/util.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/ipnet/util.go
new file mode 100644
index 000000000..9df7f5695
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/ipnet/util.go
@@ -0,0 +1,40 @@
+// Package ipnet contains helper functions around net and IP
+package ipnet
+
+import (
+	"errors"
+	"net"
+)
+
+var errFailedToCastAddr = errors.New("failed to cast net.Addr to *net.UDPAddr or *net.TCPAddr")
+
+// AddrIPPort extracts the IP and Port from a net.Addr
+func AddrIPPort(a net.Addr) (net.IP, int, error) {
+	aUDP, ok := a.(*net.UDPAddr)
+	if ok {
+		return aUDP.IP, aUDP.Port, nil
+	}
+
+	aTCP, ok := a.(*net.TCPAddr)
+	if ok {
+		return aTCP.IP, aTCP.Port, nil
+	}
+
+	return nil, 0, errFailedToCastAddr
+}
+
+// AddrEqual asserts that two net.Addrs are equal
+// Currently only supprots UDP but will be extended in the future to support others
+func AddrEqual(a, b net.Addr) bool {
+	aUDP, ok := a.(*net.UDPAddr)
+	if !ok {
+		return false
+	}
+
+	bUDP, ok := b.(*net.UDPAddr)
+	if !ok {
+		return false
+	}
+
+	return aUDP.IP.Equal(bUDP.IP) && aUDP.Port == bUDP.Port
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/addr.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/addr.go
new file mode 100644
index 000000000..b1d654d9e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/addr.go
@@ -0,0 +1,65 @@
+package proto
+
+import (
+	"fmt"
+	"net"
+)
+
+// Addr is ip:port.
+type Addr struct {
+	IP   net.IP
+	Port int
+}
+
+// Network implements net.Addr.
+func (Addr) Network() string { return "turn" }
+
+// FromUDPAddr sets addr to UDPAddr.
+func (a *Addr) FromUDPAddr(n *net.UDPAddr) {
+	a.IP = n.IP
+	a.Port = n.Port
+}
+
+// Equal returns true if b == a.
+func (a Addr) Equal(b Addr) bool {
+	if a.Port != b.Port {
+		return false
+	}
+	return a.IP.Equal(b.IP)
+}
+
+// EqualIP returns true if a and b have equal IP addresses.
+func (a Addr) EqualIP(b Addr) bool {
+	return a.IP.Equal(b.IP)
+}
+
+func (a Addr) String() string {
+	return fmt.Sprintf("%s:%d", a.IP, a.Port)
+}
+
+// FiveTuple represents 5-TUPLE value.
+type FiveTuple struct {
+	Client Addr
+	Server Addr
+	Proto  Protocol
+}
+
+func (t FiveTuple) String() string {
+	return fmt.Sprintf("%s->%s (%s)",
+		t.Client, t.Server, t.Proto,
+	)
+}
+
+// Equal returns true if b == t.
+func (t FiveTuple) Equal(b FiveTuple) bool {
+	if t.Proto != b.Proto {
+		return false
+	}
+	if !t.Client.Equal(b.Client) {
+		return false
+	}
+	if !t.Server.Equal(b.Server) {
+		return false
+	}
+	return true
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/chandata.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/chandata.go
new file mode 100644
index 000000000..fb1295b1a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/chandata.go
@@ -0,0 +1,140 @@
+package proto
+
+import (
+	"bytes"
+	"encoding/binary"
+	"errors"
+	"io"
+)
+
+// ChannelData represents The ChannelData Message.
+//
+// See RFC 5766 Section 11.4
+type ChannelData struct {
+	Data   []byte // can be subslice of Raw
+	Length int    // ignored while encoding, len(Data) is used
+	Number ChannelNumber
+	Raw    []byte
+}
+
+// Equal returns true if b == c.
+func (c *ChannelData) Equal(b *ChannelData) bool {
+	if c == nil && b == nil {
+		return true
+	}
+	if c == nil || b == nil {
+		return false
+	}
+	if c.Number != b.Number {
+		return false
+	}
+	if len(c.Data) != len(b.Data) {
+		return false
+	}
+	return bytes.Equal(c.Data, b.Data)
+}
+
+// grow ensures that internal buffer will fit v more bytes and
+// increases it capacity if necessary.
+//
+// Similar to stun.Message.grow method.
+func (c *ChannelData) grow(v int) {
+	n := len(c.Raw) + v
+	for cap(c.Raw) < n {
+		c.Raw = append(c.Raw, 0)
+	}
+	c.Raw = c.Raw[:n]
+}
+
+// Reset resets Length, Data and Raw length.
+func (c *ChannelData) Reset() {
+	c.Raw = c.Raw[:0]
+	c.Length = 0
+	c.Data = c.Data[:0]
+}
+
+// Encode encodes ChannelData Message to Raw.
+func (c *ChannelData) Encode() {
+	c.Raw = c.Raw[:0]
+	c.WriteHeader()
+	c.Raw = append(c.Raw, c.Data...)
+	padded := nearestPaddedValueLength(len(c.Raw))
+	if bytesToAdd := padded - len(c.Raw); bytesToAdd > 0 {
+		for i := 0; i < bytesToAdd; i++ {
+			c.Raw = append(c.Raw, 0)
+		}
+	}
+}
+
+const padding = 4
+
+func nearestPaddedValueLength(l int) int {
+	n := padding * (l / padding)
+	if n < l {
+		n += padding
+	}
+	return n
+}
+
+// WriteHeader writes channel number and length.
+func (c *ChannelData) WriteHeader() {
+	if len(c.Raw) < channelDataHeaderSize {
+		// Making WriteHeader call valid even when c.Raw
+		// is nil or len(c.Raw) is less than needed for header.
+		c.grow(channelDataHeaderSize)
+	}
+	// Early bounds check to guarantee safety of writes below.
+	_ = c.Raw[:channelDataHeaderSize]
+	binary.BigEndian.PutUint16(c.Raw[:channelDataNumberSize], uint16(c.Number))
+	binary.BigEndian.PutUint16(c.Raw[channelDataNumberSize:channelDataHeaderSize],
+		uint16(len(c.Data)),
+	)
+}
+
+// ErrBadChannelDataLength means that channel data length is not equal
+// to actual data length.
+var ErrBadChannelDataLength = errors.New("channelData length != len(Data)")
+
+// Decode decodes The ChannelData Message from Raw.
+func (c *ChannelData) Decode() error {
+	buf := c.Raw
+	if len(buf) < channelDataHeaderSize {
+		return io.ErrUnexpectedEOF
+	}
+	num := binary.BigEndian.Uint16(buf[:channelDataNumberSize])
+	c.Number = ChannelNumber(num)
+	l := binary.BigEndian.Uint16(buf[channelDataNumberSize:channelDataHeaderSize])
+	c.Data = buf[channelDataHeaderSize:]
+	c.Length = int(l)
+	if !c.Number.Valid() {
+		return ErrInvalidChannelNumber
+	}
+	if int(l) < len(c.Data) {
+		c.Data = c.Data[:int(l)]
+	}
+	if int(l) > len(buf[channelDataHeaderSize:]) {
+		return ErrBadChannelDataLength
+	}
+	return nil
+}
+
+const (
+	channelDataLengthSize = 2
+	channelDataNumberSize = channelDataLengthSize
+	channelDataHeaderSize = channelDataLengthSize + channelDataNumberSize
+)
+
+// IsChannelData returns true if buf looks like the ChannelData Message.
+func IsChannelData(buf []byte) bool {
+	if len(buf) < channelDataHeaderSize {
+		return false
+	}
+
+	if int(binary.BigEndian.Uint16(buf[channelDataNumberSize:channelDataHeaderSize])) > len(buf[channelDataHeaderSize:]) {
+		return false
+	}
+
+	// Quick check for channel number.
+	num := binary.BigEndian.Uint16(buf[0:channelNumberSize])
+	return isChannelNumberValid(num)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/chann.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/chann.go
new file mode 100644
index 000000000..d64ef73f4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/chann.go
@@ -0,0 +1,67 @@
+package proto
+
+import (
+	"encoding/binary"
+	"errors"
+	"strconv"
+
+	"github.com/pion/stun"
+)
+
+// ChannelNumber represents CHANNEL-NUMBER attribute.
+//
+// The CHANNEL-NUMBER attribute contains the number of the channel.
+//
+// RFC 5766 Section 14.1
+type ChannelNumber uint16 // encoded as uint16
+
+func (n ChannelNumber) String() string { return strconv.Itoa(int(n)) }
+
+// 16 bits of uint + 16 bits of RFFU = 0.
+const channelNumberSize = 4
+
+// AddTo adds CHANNEL-NUMBER to message.
+func (n ChannelNumber) AddTo(m *stun.Message) error {
+	v := make([]byte, channelNumberSize)
+	binary.BigEndian.PutUint16(v[:2], uint16(n))
+	// v[2:4] are zeroes (RFFU = 0)
+	m.Add(stun.AttrChannelNumber, v)
+	return nil
+}
+
+// GetFrom decodes CHANNEL-NUMBER from message.
+func (n *ChannelNumber) GetFrom(m *stun.Message) error {
+	v, err := m.Get(stun.AttrChannelNumber)
+	if err != nil {
+		return err
+	}
+	if err = stun.CheckSize(stun.AttrChannelNumber, len(v), channelNumberSize); err != nil {
+		return err
+	}
+	_ = v[channelNumberSize-1] // asserting length
+	*n = ChannelNumber(binary.BigEndian.Uint16(v[:2]))
+	// v[2:4] is RFFU and equals to 0.
+	return nil
+}
+
+// See https://tools.ietf.org/html/rfc5766#section-11:
+//
+// 0x4000 through 0x7FFF: These values are the allowed channel
+// numbers (16,383 possible values).
+const (
+	MinChannelNumber = 0x4000
+	MaxChannelNumber = 0x7FFF
+)
+
+// ErrInvalidChannelNumber means that channel number is not valid as by RFC 5766 Section 11.
+var ErrInvalidChannelNumber = errors.New("channel number not in [0x4000, 0x7FFF]")
+
+// isChannelNumberValid returns true if c in [0x4000, 0x7FFF].
+func isChannelNumberValid(c uint16) bool {
+	return c >= MinChannelNumber && c <= MaxChannelNumber
+}
+
+// Valid returns true if channel number has correct value that complies RFC 5766 Section 11 range.
+func (n ChannelNumber) Valid() bool {
+	return isChannelNumberValid(uint16(n))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/data.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/data.go
new file mode 100644
index 000000000..64243e0c5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/data.go
@@ -0,0 +1,30 @@
+package proto
+
+import "github.com/pion/stun"
+
+// Data represents DATA attribute.
+//
+// The DATA attribute is present in all Send and Data indications.  The
+// value portion of this attribute is variable length and consists of
+// the application data (that is, the data that would immediately follow
+// the UDP header if the data was been sent directly between the client
+// and the peer).
+//
+// RFC 5766 Section 14.4
+type Data []byte
+
+// AddTo adds DATA to message.
+func (d Data) AddTo(m *stun.Message) error {
+	m.Add(stun.AttrData, d)
+	return nil
+}
+
+// GetFrom decodes DATA from message.
+func (d *Data) GetFrom(m *stun.Message) error {
+	v, err := m.Get(stun.AttrData)
+	if err != nil {
+		return err
+	}
+	*d = v
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/dontfrag.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/dontfrag.go
new file mode 100644
index 000000000..eb4d8caf8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/dontfrag.go
@@ -0,0 +1,18 @@
+package proto
+
+import "github.com/pion/stun"
+
+// DontFragmentAttr represents DONT-FRAGMENT attribute.
+type DontFragmentAttr struct{}
+
+// AddTo adds DONT-FRAGMENT attribute to message.
+func (DontFragmentAttr) AddTo(m *stun.Message) error {
+	m.Add(stun.AttrDontFragment, nil)
+	return nil
+}
+
+// IsSet returns true if DONT-FRAGMENT attribute is set.
+func (DontFragmentAttr) IsSet(m *stun.Message) bool {
+	_, err := m.Get(stun.AttrDontFragment)
+	return err == nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/evenport.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/evenport.go
new file mode 100644
index 000000000..a5a388258
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/evenport.go
@@ -0,0 +1,55 @@
+package proto
+
+import "github.com/pion/stun"
+
+// EvenPort represents EVEN-PORT attribute.
+//
+// This attribute allows the client to request that the port in the
+// relayed transport address be even, and (optionally) that the server
+// reserve the next-higher port number.
+//
+// RFC 5766 Section 14.6
+type EvenPort struct {
+	// ReservePort means that the server is requested to reserve
+	// the next-higher port number (on the same IP address)
+	// for a subsequent allocation.
+	ReservePort bool
+}
+
+func (p EvenPort) String() string {
+	if p.ReservePort {
+		return "reserve: true"
+	}
+	return "reserve: false"
+}
+
+const (
+	evenPortSize = 1
+	firstBitSet  = (1 << 8) - 1 // 0b100000000
+)
+
+// AddTo adds EVEN-PORT to message.
+func (p EvenPort) AddTo(m *stun.Message) error {
+	v := make([]byte, evenPortSize)
+	if p.ReservePort {
+		// Set first bit to 1.
+		v[0] = firstBitSet
+	}
+	m.Add(stun.AttrEvenPort, v)
+	return nil
+}
+
+// GetFrom decodes EVEN-PORT from message.
+func (p *EvenPort) GetFrom(m *stun.Message) error {
+	v, err := m.Get(stun.AttrEvenPort)
+	if err != nil {
+		return err
+	}
+	if err = stun.CheckSize(stun.AttrEvenPort, len(v), evenPortSize); err != nil {
+		return err
+	}
+	if v[0]&firstBitSet > 0 {
+		p.ReservePort = true
+	}
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/fuzz.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/fuzz.go
new file mode 100644
index 000000000..1a171fb74
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/fuzz.go
@@ -0,0 +1,111 @@
+// +build gofuzz
+
+package proto
+
+import (
+	"fmt"
+
+	"github.com/pion/stun"
+)
+
+type attr interface {
+	stun.Getter
+	stun.Setter
+}
+
+type attrs []struct {
+	g attr
+	t stun.AttrType
+}
+
+func (a attrs) pick(v byte) struct {
+	g attr
+	t stun.AttrType
+} {
+	idx := int(v) % len(a)
+	return a[idx]
+}
+
+func FuzzSetters(data []byte) int {
+	var (
+		m1 = &stun.Message{
+			Raw: make([]byte, 0, 2048),
+		}
+		m2 = &stun.Message{
+			Raw: make([]byte, 0, 2048),
+		}
+		m3 = &stun.Message{
+			Raw: make([]byte, 0, 2048),
+		}
+	)
+	attributes := attrs{
+		{new(RequestedTransport), stun.AttrRequestedTransport},
+		{new(RelayedAddress), stun.AttrXORRelayedAddress},
+		{new(ChannelNumber), stun.AttrChannelNumber},
+		{new(Data), stun.AttrData},
+		{new(EvenPort), stun.AttrEvenPort},
+		{new(Lifetime), stun.AttrLifetime},
+		{new(ReservationToken), stun.AttrReservationToken},
+	}
+	var firstByte = byte(0)
+	if len(data) > 0 {
+		firstByte = data[0]
+	}
+	a := attributes.pick(firstByte)
+	value := data
+	if len(data) > 1 {
+		value = value[1:]
+	}
+	m1.WriteHeader()
+	m1.Add(a.t, value)
+	err := a.g.GetFrom(m1)
+	if err == stun.ErrAttributeNotFound {
+		fmt.Println("unexpected 404") // nolint
+		panic(err)                    // nolint
+	}
+	if err != nil {
+		return 1
+	}
+	m2.WriteHeader()
+	if err := a.g.AddTo(m2); err != nil {
+		fmt.Println("failed to add attribute to m2") // nolint
+		panic(err)                                   // nolint
+	}
+	m3.WriteHeader()
+	v, err := m2.Get(a.t)
+	if err != nil {
+		panic(err) // nolint
+	}
+	m3.Add(a.t, v)
+
+	if !m2.Equal(m3) {
+		fmt.Println(m2, "not equal", m3) // nolint
+		panic("not equal")               // nolint
+	}
+	return 1
+}
+
+var d = &ChannelData{}
+
+func FuzzChannelData(data []byte) int {
+	d.Reset()
+	if b := bin.Uint16(data[0:4]); b > 20000 {
+		bin.PutUint16(data[0:4], MinChannelNumber-1)
+	} else if b > 40000 {
+		bin.PutUint16(data[0:4], MinChannelNumber+(MaxChannelNumber-MinChannelNumber)%b)
+	}
+	d.Raw = append(d.Raw, data...)
+	if d.Decode() != nil {
+		return 0
+	}
+	d2 := &ChannelData{}
+	d.Encode()
+	if !d.Number.Valid() {
+		return 1
+	}
+	d2.Raw = d.Raw
+	if err := d2.Decode(); err != nil {
+		panic(err) //nolint
+	}
+	return 1
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/lifetime.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/lifetime.go
new file mode 100644
index 000000000..b78169660
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/lifetime.go
@@ -0,0 +1,52 @@
+package proto
+
+import (
+	"encoding/binary"
+	"time"
+
+	"github.com/pion/stun"
+)
+
+// DefaultLifetime in RFC 5766 is 10 minutes.
+//
+// RFC 5766 Section 2.2
+const DefaultLifetime = time.Minute * 10
+
+// Lifetime represents LIFETIME attribute.
+//
+// The LIFETIME attribute represents the duration for which the server
+// will maintain an allocation in the absence of a refresh. The value
+// portion of this attribute is 4-bytes long and consists of a 32-bit
+// unsigned integral value representing the number of seconds remaining
+// until expiration.
+//
+// RFC 5766 Section 14.2
+type Lifetime struct {
+	time.Duration
+}
+
+// uint32 seconds
+const lifetimeSize = 4 // 4 bytes, 32 bits
+
+// AddTo adds LIFETIME to message.
+func (l Lifetime) AddTo(m *stun.Message) error {
+	v := make([]byte, lifetimeSize)
+	binary.BigEndian.PutUint32(v, uint32(l.Seconds()))
+	m.Add(stun.AttrLifetime, v)
+	return nil
+}
+
+// GetFrom decodes LIFETIME from message.
+func (l *Lifetime) GetFrom(m *stun.Message) error {
+	v, err := m.Get(stun.AttrLifetime)
+	if err != nil {
+		return err
+	}
+	if err = stun.CheckSize(stun.AttrLifetime, len(v), lifetimeSize); err != nil {
+		return err
+	}
+	_ = v[lifetimeSize-1] // asserting length
+	seconds := binary.BigEndian.Uint32(v)
+	l.Duration = time.Second * time.Duration(seconds)
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/peeraddr.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/peeraddr.go
new file mode 100644
index 000000000..b357b823e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/peeraddr.go
@@ -0,0 +1,42 @@
+package proto
+
+import (
+	"net"
+
+	"github.com/pion/stun"
+)
+
+// PeerAddress implements XOR-PEER-ADDRESS attribute.
+//
+// The XOR-PEER-ADDRESS specifies the address and port of the peer as
+// seen from the TURN server. (For example, the peer's server-reflexive
+// transport address if the peer is behind a NAT.)
+//
+// RFC 5766 Section 14.3
+type PeerAddress struct {
+	IP   net.IP
+	Port int
+}
+
+func (a PeerAddress) String() string {
+	return stun.XORMappedAddress(a).String()
+}
+
+// AddTo adds XOR-PEER-ADDRESS to message.
+func (a PeerAddress) AddTo(m *stun.Message) error {
+	return stun.XORMappedAddress(a).AddToAs(m, stun.AttrXORPeerAddress)
+}
+
+// GetFrom decodes XOR-PEER-ADDRESS from message.
+func (a *PeerAddress) GetFrom(m *stun.Message) error {
+	return (*stun.XORMappedAddress)(a).GetFromAs(m, stun.AttrXORPeerAddress)
+}
+
+// XORPeerAddress implements XOR-PEER-ADDRESS attribute.
+//
+// The XOR-PEER-ADDRESS specifies the address and port of the peer as
+// seen from the TURN server. (For example, the peer's server-reflexive
+// transport address if the peer is behind a NAT.)
+//
+// RFC 5766 Section 14.3
+type XORPeerAddress = PeerAddress
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/proto.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/proto.go
new file mode 100644
index 000000000..4b08c7620
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/proto.go
@@ -0,0 +1,30 @@
+// Package proto implements RFC 5766 Traversal Using Relays around NAT.
+//
+// Merged from gortc/turn v0.80.
+package proto
+
+import (
+	"github.com/pion/stun"
+)
+
+// Default ports for TURN from RFC 5766 Section 4.
+const (
+	// DefaultPort for TURN is same as STUN.
+	DefaultPort = stun.DefaultPort
+	// DefaultTLSPort is for TURN over TLS and is same as STUN.
+	DefaultTLSPort = stun.DefaultTLSPort
+)
+
+// CreatePermissionRequest is shorthand for create permission request type.
+func CreatePermissionRequest() stun.MessageType {
+	return stun.NewType(stun.MethodCreatePermission, stun.ClassRequest)
+}
+
+// AllocateRequest is shorthand for allocation request message type.
+func AllocateRequest() stun.MessageType { return stun.NewType(stun.MethodAllocate, stun.ClassRequest) }
+
+// SendIndication is shorthand for send indication message type.
+func SendIndication() stun.MessageType { return stun.NewType(stun.MethodSend, stun.ClassIndication) }
+
+// RefreshRequest is shorthand for refresh request message type.
+func RefreshRequest() stun.MessageType { return stun.NewType(stun.MethodRefresh, stun.ClassRequest) }
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/relayedaddr.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/relayedaddr.go
new file mode 100644
index 000000000..2169cb756
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/relayedaddr.go
@@ -0,0 +1,40 @@
+package proto
+
+import (
+	"net"
+
+	"github.com/pion/stun"
+)
+
+// RelayedAddress implements XOR-RELAYED-ADDRESS attribute.
+//
+// It specifies the address and port that the server allocated to the
+// client. It is encoded in the same way as XOR-MAPPED-ADDRESS.
+//
+// RFC 5766 Section 14.5
+type RelayedAddress struct {
+	IP   net.IP
+	Port int
+}
+
+func (a RelayedAddress) String() string {
+	return stun.XORMappedAddress(a).String()
+}
+
+// AddTo adds XOR-PEER-ADDRESS to message.
+func (a RelayedAddress) AddTo(m *stun.Message) error {
+	return stun.XORMappedAddress(a).AddToAs(m, stun.AttrXORRelayedAddress)
+}
+
+// GetFrom decodes XOR-PEER-ADDRESS from message.
+func (a *RelayedAddress) GetFrom(m *stun.Message) error {
+	return (*stun.XORMappedAddress)(a).GetFromAs(m, stun.AttrXORRelayedAddress)
+}
+
+// XORRelayedAddress implements XOR-RELAYED-ADDRESS attribute.
+//
+// It specifies the address and port that the server allocated to the
+// client. It is encoded in the same way as XOR-MAPPED-ADDRESS.
+//
+// RFC 5766 Section 14.5
+type XORRelayedAddress = RelayedAddress
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/reqfamily.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/reqfamily.go
new file mode 100644
index 000000000..e83d6bba4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/reqfamily.go
@@ -0,0 +1,61 @@
+package proto
+
+import (
+	"errors"
+
+	"github.com/pion/stun"
+)
+
+// RequestedAddressFamily represents the REQUESTED-ADDRESS-FAMILY Attribute as
+// defined in RFC 6156 Section 4.1.1.
+type RequestedAddressFamily byte
+
+const requestedFamilySize = 4
+
+var errInvalidRequestedFamilyValue = errors.New("invalid value for requested family attribute")
+
+// GetFrom decodes REQUESTED-ADDRESS-FAMILY from message.
+func (f *RequestedAddressFamily) GetFrom(m *stun.Message) error {
+	v, err := m.Get(stun.AttrRequestedAddressFamily)
+	if err != nil {
+		return err
+	}
+	if err = stun.CheckSize(stun.AttrRequestedAddressFamily, len(v), requestedFamilySize); err != nil {
+		return err
+	}
+	switch v[0] {
+	case byte(RequestedFamilyIPv4), byte(RequestedFamilyIPv6):
+		*f = RequestedAddressFamily(v[0])
+	default:
+		return errInvalidRequestedFamilyValue
+	}
+	return nil
+}
+
+func (f RequestedAddressFamily) String() string {
+	switch f {
+	case RequestedFamilyIPv4:
+		return "IPv4"
+	case RequestedFamilyIPv6:
+		return "IPv6"
+	default:
+		return "unknown"
+	}
+}
+
+// AddTo adds REQUESTED-ADDRESS-FAMILY to message.
+func (f RequestedAddressFamily) AddTo(m *stun.Message) error {
+	v := make([]byte, requestedFamilySize)
+	v[0] = byte(f)
+	// b[1:4] is RFFU = 0.
+	// The RFFU field MUST be set to zero on transmission and MUST be
+	// ignored on reception. It is reserved for future uses.
+	m.Add(stun.AttrRequestedAddressFamily, v)
+	return nil
+}
+
+// Values for RequestedAddressFamily as defined in RFC 6156 Section 4.1.1.
+const (
+	RequestedFamilyIPv4 RequestedAddressFamily = 0x01
+	RequestedFamilyIPv6 RequestedAddressFamily = 0x02
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/reqtrans.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/reqtrans.go
new file mode 100644
index 000000000..a4e48639f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/reqtrans.go
@@ -0,0 +1,65 @@
+package proto
+
+import (
+	"strconv"
+
+	"github.com/pion/stun"
+)
+
+// Protocol is IANA assigned protocol number.
+type Protocol byte
+
+const (
+	// ProtoUDP is IANA assigned protocol number for UDP.
+	ProtoUDP Protocol = 17
+)
+
+func (p Protocol) String() string {
+	switch p {
+	case ProtoUDP:
+		return "UDP"
+	default:
+		return strconv.Itoa(int(p))
+	}
+}
+
+// RequestedTransport represents REQUESTED-TRANSPORT attribute.
+//
+// This attribute is used by the client to request a specific transport
+// protocol for the allocated transport address. RFC 5766 only allows the use of
+// codepoint 17 (User Datagram Protocol).
+//
+// RFC 5766 Section 14.7
+type RequestedTransport struct {
+	Protocol Protocol
+}
+
+func (t RequestedTransport) String() string {
+	return "protocol: " + t.Protocol.String()
+}
+
+const requestedTransportSize = 4
+
+// AddTo adds REQUESTED-TRANSPORT to message.
+func (t RequestedTransport) AddTo(m *stun.Message) error {
+	v := make([]byte, requestedTransportSize)
+	v[0] = byte(t.Protocol)
+	// b[1:4] is RFFU = 0.
+	// The RFFU field MUST be set to zero on transmission and MUST be
+	// ignored on reception. It is reserved for future uses.
+	m.Add(stun.AttrRequestedTransport, v)
+	return nil
+}
+
+// GetFrom decodes REQUESTED-TRANSPORT from message.
+func (t *RequestedTransport) GetFrom(m *stun.Message) error {
+	v, err := m.Get(stun.AttrRequestedTransport)
+	if err != nil {
+		return err
+	}
+	if err = stun.CheckSize(stun.AttrRequestedTransport, len(v), requestedTransportSize); err != nil {
+		return err
+	}
+	t.Protocol = Protocol(v[0])
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/rsrvtoken.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/rsrvtoken.go
new file mode 100644
index 000000000..6e2ed4d80
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/proto/rsrvtoken.go
@@ -0,0 +1,39 @@
+package proto
+
+import "github.com/pion/stun"
+
+// ReservationToken represents RESERVATION-TOKEN attribute.
+//
+// The RESERVATION-TOKEN attribute contains a token that uniquely
+// identifies a relayed transport address being held in reserve by the
+// server. The server includes this attribute in a success response to
+// tell the client about the token, and the client includes this
+// attribute in a subsequent Allocate request to request the server use
+// that relayed transport address for the allocation.
+//
+// RFC 5766 Section 14.9
+type ReservationToken []byte
+
+const reservationTokenSize = 8 // 8 bytes
+
+// AddTo adds RESERVATION-TOKEN to message.
+func (t ReservationToken) AddTo(m *stun.Message) error {
+	if err := stun.CheckSize(stun.AttrReservationToken, len(t), reservationTokenSize); err != nil {
+		return err
+	}
+	m.Add(stun.AttrReservationToken, t)
+	return nil
+}
+
+// GetFrom decodes RESERVATION-TOKEN from message.
+func (t *ReservationToken) GetFrom(m *stun.Message) error {
+	v, err := m.Get(stun.AttrReservationToken)
+	if err != nil {
+		return err
+	}
+	if err = stun.CheckSize(stun.AttrReservationToken, len(v), reservationTokenSize); err != nil {
+		return err
+	}
+	*t = v
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/errors.go
new file mode 100644
index 000000000..13f8ee1a3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/errors.go
@@ -0,0 +1,26 @@
+package server
+
+import "errors"
+
+var (
+	errFailedToGenerateNonce                  = errors.New("failed to generate nonce")
+	errFailedToSendError                      = errors.New("failed to send error message")
+	errDuplicatedNonce                        = errors.New("duplicated Nonce generated, discarding request")
+	errNoSuchUser                             = errors.New("no such user exists")
+	errUnexpectedClass                        = errors.New("unexpected class")
+	errUnexpectedMethod                       = errors.New("unexpected method")
+	errFailedToHandle                         = errors.New("failed to handle")
+	errUnhandledSTUNPacket                    = errors.New("unhandled STUN packet")
+	errUnableToHandleChannelData              = errors.New("unable to handle ChannelData")
+	errFailedToCreateSTUNPacket               = errors.New("failed to create stun message from packet")
+	errFailedToCreateChannelData              = errors.New("failed to create channel data from packet")
+	errRelayAlreadyAllocatedForFiveTuple      = errors.New("relay already allocated for 5-TUPLE")
+	errRequestedTransportMustBeUDP            = errors.New("RequestedTransport must be UDP")
+	errNoDontFragmentSupport                  = errors.New("no support for DONT-FRAGMENT")
+	errRequestWithReservationTokenAndEvenPort = errors.New("Request must not contain RESERVATION-TOKEN and EVEN-PORT")
+	errNoAllocationFound                      = errors.New("no allocation found")
+	errNoPermission                           = errors.New("unable to handle send-indication, no permission added")
+	errShortWrite                             = errors.New("packet write smaller than packet")
+	errNoSuchChannelBind                      = errors.New("no such channel bind")
+	errFailedWriteSocket                      = errors.New("failed writing to socket")
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/server.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/server.go
new file mode 100644
index 000000000..27f375839
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/server.go
@@ -0,0 +1,109 @@
+// Package server implements the private API to implement a TURN server
+package server
+
+import (
+	"fmt"
+	"net"
+	"sync"
+	"time"
+
+	"github.com/pion/logging"
+	"github.com/pion/stun"
+	"github.com/pion/turn/v2/internal/allocation"
+	"github.com/pion/turn/v2/internal/proto"
+)
+
+// Request contains all the state needed to process a single incoming datagram
+type Request struct {
+	// Current Request State
+	Conn    net.PacketConn
+	SrcAddr net.Addr
+	Buff    []byte
+
+	// Server State
+	AllocationManager *allocation.Manager
+	Nonces            *sync.Map
+
+	// User Configuration
+	AuthHandler        func(username string, realm string, srcAddr net.Addr) (key []byte, ok bool)
+	Log                logging.LeveledLogger
+	Realm              string
+	ChannelBindTimeout time.Duration
+}
+
+// HandleRequest processes the give Request
+func HandleRequest(r Request) error {
+	r.Log.Debugf("received %d bytes of udp from %s on %s", len(r.Buff), r.SrcAddr.String(), r.Conn.LocalAddr().String())
+
+	if proto.IsChannelData(r.Buff) {
+		return handleDataPacket(r)
+	}
+
+	return handleTURNPacket(r)
+}
+
+func handleDataPacket(r Request) error {
+	r.Log.Debugf("received DataPacket from %s", r.SrcAddr.String())
+	c := proto.ChannelData{Raw: r.Buff}
+	if err := c.Decode(); err != nil {
+		return fmt.Errorf("%w: %v", errFailedToCreateChannelData, err)
+	}
+
+	err := handleChannelData(r, &c)
+	if err != nil {
+		err = fmt.Errorf("%w from %v: %v", errUnableToHandleChannelData, r.SrcAddr, err)
+	}
+
+	return err
+}
+
+func handleTURNPacket(r Request) error {
+	r.Log.Debug("handleTURNPacket")
+	m := &stun.Message{Raw: append([]byte{}, r.Buff...)}
+	if err := m.Decode(); err != nil {
+		return fmt.Errorf("%w: %v", errFailedToCreateSTUNPacket, err)
+	}
+
+	h, err := getMessageHandler(m.Type.Class, m.Type.Method)
+	if err != nil {
+		return fmt.Errorf("%w %v-%v from %v: %v", errUnhandledSTUNPacket, m.Type.Method, m.Type.Class, r.SrcAddr, err)
+	}
+
+	err = h(r, m)
+	if err != nil {
+		return fmt.Errorf("%w %v-%v from %v: %v", errFailedToHandle, m.Type.Method, m.Type.Class, r.SrcAddr, err)
+	}
+
+	return nil
+}
+
+func getMessageHandler(class stun.MessageClass, method stun.Method) (func(r Request, m *stun.Message) error, error) {
+	switch class {
+	case stun.ClassIndication:
+		switch method {
+		case stun.MethodSend:
+			return handleSendIndication, nil
+		default:
+			return nil, fmt.Errorf("%w: %s", errUnexpectedMethod, method)
+		}
+
+	case stun.ClassRequest:
+		switch method {
+		case stun.MethodAllocate:
+			return handleAllocateRequest, nil
+		case stun.MethodRefresh:
+			return handleRefreshRequest, nil
+		case stun.MethodCreatePermission:
+			return handleCreatePermissionRequest, nil
+		case stun.MethodChannelBind:
+			return handleChannelBindRequest, nil
+		case stun.MethodBinding:
+			return handleBindingRequest, nil
+		default:
+			return nil, fmt.Errorf("%w: %s", errUnexpectedMethod, method)
+		}
+
+	default:
+		return nil, fmt.Errorf("%w: %s", errUnexpectedClass, class)
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/stun.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/stun.go
new file mode 100644
index 000000000..673e99f62
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/stun.go
@@ -0,0 +1,22 @@
+package server
+
+import (
+	"github.com/pion/stun"
+	"github.com/pion/turn/v2/internal/ipnet"
+)
+
+func handleBindingRequest(r Request, m *stun.Message) error {
+	r.Log.Debugf("received BindingRequest from %s", r.SrcAddr.String())
+
+	ip, port, err := ipnet.AddrIPPort(r.SrcAddr)
+	if err != nil {
+		return err
+	}
+
+	attrs := buildMsg(m.TransactionID, stun.BindingSuccess, &stun.XORMappedAddress{
+		IP:   ip,
+		Port: port,
+	}, stun.Fingerprint)
+
+	return buildAndSend(r.Conn, r.SrcAddr, attrs...)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/turn.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/turn.go
new file mode 100644
index 000000000..cbac09c2d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/turn.go
@@ -0,0 +1,352 @@
+package server
+
+import (
+	"fmt"
+	"net"
+
+	"github.com/pion/stun"
+	"github.com/pion/turn/v2/internal/allocation"
+	"github.com/pion/turn/v2/internal/ipnet"
+	"github.com/pion/turn/v2/internal/proto"
+)
+
+// // https://tools.ietf.org/html/rfc5766#section-6.2
+func handleAllocateRequest(r Request, m *stun.Message) error {
+	r.Log.Debugf("received AllocateRequest from %s", r.SrcAddr.String())
+
+	// 1. The server MUST require that the request be authenticated.  This
+	//    authentication MUST be done using the long-term credential
+	//    mechanism of [https://tools.ietf.org/html/rfc5389#section-10.2.2]
+	//    unless the client and server agree to use another mechanism through
+	//    some procedure outside the scope of this document.
+	messageIntegrity, hasAuth, err := authenticateRequest(r, m, stun.MethodAllocate)
+	if !hasAuth {
+		return err
+	}
+
+	fiveTuple := &allocation.FiveTuple{
+		SrcAddr:  r.SrcAddr,
+		DstAddr:  r.Conn.LocalAddr(),
+		Protocol: allocation.UDP,
+	}
+	requestedPort := 0
+	reservationToken := ""
+
+	badRequestMsg := buildMsg(m.TransactionID, stun.NewType(stun.MethodAllocate, stun.ClassErrorResponse), &stun.ErrorCodeAttribute{Code: stun.CodeBadRequest})
+	insufficentCapacityMsg := buildMsg(m.TransactionID, stun.NewType(stun.MethodAllocate, stun.ClassErrorResponse), &stun.ErrorCodeAttribute{Code: stun.CodeInsufficientCapacity})
+
+	// 2. The server checks if the 5-tuple is currently in use by an
+	//    existing allocation.  If yes, the server rejects the request with
+	//    a 437 (Allocation Mismatch) error.
+	if alloc := r.AllocationManager.GetAllocation(fiveTuple); alloc != nil {
+		msg := buildMsg(m.TransactionID, stun.NewType(stun.MethodAllocate, stun.ClassErrorResponse), &stun.ErrorCodeAttribute{Code: stun.CodeAllocMismatch})
+		return buildAndSendErr(r.Conn, r.SrcAddr, errRelayAlreadyAllocatedForFiveTuple, msg...)
+	}
+
+	// 3. The server checks if the request contains a REQUESTED-TRANSPORT
+	//    attribute.  If the REQUESTED-TRANSPORT attribute is not included
+	//    or is malformed, the server rejects the request with a 400 (Bad
+	//    Request) error.  Otherwise, if the attribute is included but
+	//    specifies a protocol other that UDP, the server rejects the
+	//    request with a 442 (Unsupported Transport Protocol) error.
+	var requestedTransport proto.RequestedTransport
+	if err = requestedTransport.GetFrom(m); err != nil {
+		return buildAndSendErr(r.Conn, r.SrcAddr, err, badRequestMsg...)
+	} else if requestedTransport.Protocol != proto.ProtoUDP {
+		msg := buildMsg(m.TransactionID, stun.NewType(stun.MethodAllocate, stun.ClassErrorResponse), &stun.ErrorCodeAttribute{Code: stun.CodeUnsupportedTransProto})
+		return buildAndSendErr(r.Conn, r.SrcAddr, errRequestedTransportMustBeUDP, msg...)
+	}
+
+	// 4. The request may contain a DONT-FRAGMENT attribute.  If it does,
+	//    but the server does not support sending UDP datagrams with the DF
+	//    bit set to 1 (see Section 12), then the server treats the DONT-
+	//    FRAGMENT attribute in the Allocate request as an unknown
+	//    comprehension-required attribute.
+	if m.Contains(stun.AttrDontFragment) {
+		msg := buildMsg(m.TransactionID, stun.NewType(stun.MethodAllocate, stun.ClassErrorResponse), &stun.ErrorCodeAttribute{Code: stun.CodeUnknownAttribute}, &stun.UnknownAttributes{stun.AttrDontFragment})
+		return buildAndSendErr(r.Conn, r.SrcAddr, errNoDontFragmentSupport, msg...)
+	}
+
+	// 5.  The server checks if the request contains a RESERVATION-TOKEN
+	//     attribute.  If yes, and the request also contains an EVEN-PORT
+	//     attribute, then the server rejects the request with a 400 (Bad
+	//     Request) error.  Otherwise, it checks to see if the token is
+	//     valid (i.e., the token is in range and has not expired and the
+	//     corresponding relayed transport address is still available).  If
+	//     the token is not valid for some reason, the server rejects the
+	//     request with a 508 (Insufficient Capacity) error.
+	var reservationTokenAttr proto.ReservationToken
+	if err = reservationTokenAttr.GetFrom(m); err == nil {
+		var evenPort proto.EvenPort
+		if err = evenPort.GetFrom(m); err == nil {
+			return buildAndSendErr(r.Conn, r.SrcAddr, errRequestWithReservationTokenAndEvenPort, badRequestMsg...)
+		}
+	}
+
+	// 6. The server checks if the request contains an EVEN-PORT attribute.
+	//    If yes, then the server checks that it can satisfy the request
+	//    (i.e., can allocate a relayed transport address as described
+	//    below).  If the server cannot satisfy the request, then the
+	//    server rejects the request with a 508 (Insufficient Capacity)
+	//    error.
+	var evenPort proto.EvenPort
+	if err = evenPort.GetFrom(m); err == nil {
+		randomPort := 0
+		randomPort, err = r.AllocationManager.GetRandomEvenPort()
+		if err != nil {
+			return buildAndSendErr(r.Conn, r.SrcAddr, err, insufficentCapacityMsg...)
+		}
+		requestedPort = randomPort
+		reservationToken = randSeq(8)
+	}
+
+	// 7. At any point, the server MAY choose to reject the request with a
+	//    486 (Allocation Quota Reached) error if it feels the client is
+	//    trying to exceed some locally defined allocation quota.  The
+	//    server is free to define this allocation quota any way it wishes,
+	//    but SHOULD define it based on the username used to authenticate
+	//    the request, and not on the client's transport address.
+
+	// 8. Also at any point, the server MAY choose to reject the request
+	//    with a 300 (Try Alternate) error if it wishes to redirect the
+	//    client to a different server.  The use of this error code and
+	//    attribute follow the specification in [RFC5389].
+	lifetimeDuration := allocationLifeTime(m)
+	a, err := r.AllocationManager.CreateAllocation(
+		fiveTuple,
+		r.Conn,
+		requestedPort,
+		lifetimeDuration)
+	if err != nil {
+		return buildAndSendErr(r.Conn, r.SrcAddr, err, insufficentCapacityMsg...)
+	}
+
+	// Once the allocation is created, the server replies with a success
+	// response.  The success response contains:
+	//   * An XOR-RELAYED-ADDRESS attribute containing the relayed transport
+	//     address.
+	//   * A LIFETIME attribute containing the current value of the time-to-
+	//     expiry timer.
+	//   * A RESERVATION-TOKEN attribute (if a second relayed transport
+	//     address was reserved).
+	//   * An XOR-MAPPED-ADDRESS attribute containing the client's IP address
+	//     and port (from the 5-tuple).
+
+	srcIP, srcPort, err := ipnet.AddrIPPort(r.SrcAddr)
+	if err != nil {
+		return buildAndSendErr(r.Conn, r.SrcAddr, err, badRequestMsg...)
+	}
+
+	relayIP, relayPort, err := ipnet.AddrIPPort(a.RelayAddr)
+	if err != nil {
+		return buildAndSendErr(r.Conn, r.SrcAddr, err, badRequestMsg...)
+	}
+
+	responseAttrs := []stun.Setter{
+		&proto.RelayedAddress{
+			IP:   relayIP,
+			Port: relayPort,
+		},
+		&proto.Lifetime{
+			Duration: lifetimeDuration,
+		},
+		&stun.XORMappedAddress{
+			IP:   srcIP,
+			Port: srcPort,
+		},
+	}
+
+	if reservationToken != "" {
+		r.AllocationManager.CreateReservation(reservationToken, relayPort)
+		responseAttrs = append(responseAttrs, proto.ReservationToken([]byte(reservationToken)))
+	}
+
+	msg := buildMsg(m.TransactionID, stun.NewType(stun.MethodAllocate, stun.ClassSuccessResponse), append(responseAttrs, messageIntegrity)...)
+	return buildAndSend(r.Conn, r.SrcAddr, msg...)
+}
+
+func handleRefreshRequest(r Request, m *stun.Message) error {
+	r.Log.Debugf("received RefreshRequest from %s", r.SrcAddr.String())
+
+	messageIntegrity, hasAuth, err := authenticateRequest(r, m, stun.MethodRefresh)
+	if !hasAuth {
+		return err
+	}
+
+	lifetimeDuration := allocationLifeTime(m)
+	fiveTuple := &allocation.FiveTuple{
+		SrcAddr:  r.SrcAddr,
+		DstAddr:  r.Conn.LocalAddr(),
+		Protocol: allocation.UDP,
+	}
+
+	if lifetimeDuration != 0 {
+		a := r.AllocationManager.GetAllocation(fiveTuple)
+
+		if a == nil {
+			return fmt.Errorf("%w %v:%v", errNoAllocationFound, r.SrcAddr, r.Conn.LocalAddr())
+		}
+		a.Refresh(lifetimeDuration)
+	} else {
+		r.AllocationManager.DeleteAllocation(fiveTuple)
+	}
+
+	return buildAndSend(r.Conn, r.SrcAddr, buildMsg(m.TransactionID, stun.NewType(stun.MethodRefresh, stun.ClassSuccessResponse), []stun.Setter{
+		&proto.Lifetime{
+			Duration: lifetimeDuration,
+		},
+		messageIntegrity,
+	}...)...)
+}
+
+func handleCreatePermissionRequest(r Request, m *stun.Message) error {
+	r.Log.Debugf("received CreatePermission from %s", r.SrcAddr.String())
+
+	a := r.AllocationManager.GetAllocation(&allocation.FiveTuple{
+		SrcAddr:  r.SrcAddr,
+		DstAddr:  r.Conn.LocalAddr(),
+		Protocol: allocation.UDP,
+	})
+	if a == nil {
+		return fmt.Errorf("%w %v:%v", errNoAllocationFound, r.SrcAddr, r.Conn.LocalAddr())
+	}
+
+	messageIntegrity, hasAuth, err := authenticateRequest(r, m, stun.MethodCreatePermission)
+	if !hasAuth {
+		return err
+	}
+
+	addCount := 0
+
+	if err := m.ForEach(stun.AttrXORPeerAddress, func(m *stun.Message) error {
+		var peerAddress proto.PeerAddress
+		if err := peerAddress.GetFrom(m); err != nil {
+			return err
+		}
+
+		r.Log.Debugf("adding permission for %s", fmt.Sprintf("%s:%d",
+			peerAddress.IP.String(), peerAddress.Port))
+		a.AddPermission(allocation.NewPermission(
+			&net.UDPAddr{
+				IP:   peerAddress.IP,
+				Port: peerAddress.Port,
+			},
+			r.Log,
+		))
+		addCount++
+		return nil
+	}); err != nil {
+		addCount = 0
+	}
+
+	respClass := stun.ClassSuccessResponse
+	if addCount == 0 {
+		respClass = stun.ClassErrorResponse
+	}
+
+	return buildAndSend(r.Conn, r.SrcAddr, buildMsg(m.TransactionID, stun.NewType(stun.MethodCreatePermission, respClass), []stun.Setter{messageIntegrity}...)...)
+}
+
+func handleSendIndication(r Request, m *stun.Message) error {
+	r.Log.Debugf("received SendIndication from %s", r.SrcAddr.String())
+	a := r.AllocationManager.GetAllocation(&allocation.FiveTuple{
+		SrcAddr:  r.SrcAddr,
+		DstAddr:  r.Conn.LocalAddr(),
+		Protocol: allocation.UDP,
+	})
+	if a == nil {
+		return fmt.Errorf("%w %v:%v", errNoAllocationFound, r.SrcAddr, r.Conn.LocalAddr())
+	}
+
+	dataAttr := proto.Data{}
+	if err := dataAttr.GetFrom(m); err != nil {
+		return err
+	}
+
+	peerAddress := proto.PeerAddress{}
+	if err := peerAddress.GetFrom(m); err != nil {
+		return err
+	}
+
+	msgDst := &net.UDPAddr{IP: peerAddress.IP, Port: peerAddress.Port}
+	if perm := a.GetPermission(msgDst); perm == nil {
+		return fmt.Errorf("%w: %v", errNoPermission, msgDst)
+	}
+
+	l, err := a.RelaySocket.WriteTo(dataAttr, msgDst)
+	if l != len(dataAttr) {
+		return fmt.Errorf("%w %d != %d (expected) err: %v", errShortWrite, l, len(dataAttr), err)
+	}
+	return err
+}
+
+func handleChannelBindRequest(r Request, m *stun.Message) error {
+	r.Log.Debugf("received ChannelBindRequest from %s", r.SrcAddr.String())
+
+	a := r.AllocationManager.GetAllocation(&allocation.FiveTuple{
+		SrcAddr:  r.SrcAddr,
+		DstAddr:  r.Conn.LocalAddr(),
+		Protocol: allocation.UDP,
+	})
+	if a == nil {
+		return fmt.Errorf("%w %v:%v", errNoAllocationFound, r.SrcAddr, r.Conn.LocalAddr())
+	}
+
+	badRequestMsg := buildMsg(m.TransactionID, stun.NewType(stun.MethodChannelBind, stun.ClassErrorResponse), &stun.ErrorCodeAttribute{Code: stun.CodeBadRequest})
+
+	messageIntegrity, hasAuth, err := authenticateRequest(r, m, stun.MethodChannelBind)
+	if !hasAuth {
+		return err
+	}
+
+	var channel proto.ChannelNumber
+	if err = channel.GetFrom(m); err != nil {
+		return buildAndSendErr(r.Conn, r.SrcAddr, err, badRequestMsg...)
+	}
+
+	peerAddr := proto.PeerAddress{}
+	if err = peerAddr.GetFrom(m); err != nil {
+		return buildAndSendErr(r.Conn, r.SrcAddr, err, badRequestMsg...)
+	}
+
+	r.Log.Debugf("binding channel %d to %s",
+		channel,
+		fmt.Sprintf("%s:%d", peerAddr.IP.String(), peerAddr.Port))
+	err = a.AddChannelBind(allocation.NewChannelBind(
+		channel,
+		&net.UDPAddr{IP: peerAddr.IP, Port: peerAddr.Port},
+		r.Log,
+	), r.ChannelBindTimeout)
+	if err != nil {
+		return buildAndSendErr(r.Conn, r.SrcAddr, err, badRequestMsg...)
+	}
+
+	return buildAndSend(r.Conn, r.SrcAddr, buildMsg(m.TransactionID, stun.NewType(stun.MethodChannelBind, stun.ClassSuccessResponse), []stun.Setter{messageIntegrity}...)...)
+}
+
+func handleChannelData(r Request, c *proto.ChannelData) error {
+	r.Log.Debugf("received ChannelData from %s", r.SrcAddr.String())
+
+	a := r.AllocationManager.GetAllocation(&allocation.FiveTuple{
+		SrcAddr:  r.SrcAddr,
+		DstAddr:  r.Conn.LocalAddr(),
+		Protocol: allocation.UDP,
+	})
+	if a == nil {
+		return fmt.Errorf("%w %v:%v", errNoAllocationFound, r.SrcAddr, r.Conn.LocalAddr())
+	}
+
+	channel := a.GetChannelByNumber(c.Number)
+	if channel == nil {
+		return fmt.Errorf("%w %x", errNoSuchChannelBind, uint16(c.Number))
+	}
+
+	l, err := a.RelaySocket.WriteTo(c.Data, channel.Peer)
+	if err != nil {
+		return fmt.Errorf("%w: %s", errFailedWriteSocket, err.Error())
+	} else if l != len(c.Data) {
+		return fmt.Errorf("%w %d != %d (expected)", errShortWrite, l, len(c.Data))
+	}
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/util.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/util.go
new file mode 100644
index 000000000..c6baffbd1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/internal/server/util.go
@@ -0,0 +1,133 @@
+package server
+
+import (
+	"crypto/md5" //nolint:gosec,gci
+	"fmt"
+	"io"
+	"math/rand"
+	"net"
+	"strconv"
+	"time"
+
+	"github.com/pion/stun"
+	"github.com/pion/turn/v2/internal/proto"
+)
+
+const (
+	maximumAllocationLifetime = time.Hour // https://tools.ietf.org/html/rfc5766#section-6.2 defines 3600 seconds recommendation
+	nonceLifetime             = time.Hour // https://tools.ietf.org/html/rfc5766#section-4
+
+)
+
+func randSeq(n int) string {
+	letters := []rune("abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ")
+	b := make([]rune, n)
+	for i := range b {
+		b[i] = letters[rand.Intn(len(letters))] //nolint:gosec
+	}
+	return string(b)
+}
+
+func buildNonce() (string, error) {
+	/* #nosec */
+	h := md5.New()
+	if _, err := io.WriteString(h, strconv.FormatInt(time.Now().Unix(), 10)); err != nil {
+		return "", fmt.Errorf("%w: %v", errFailedToGenerateNonce, err)
+	}
+	if _, err := io.WriteString(h, strconv.FormatInt(rand.Int63(), 10)); err != nil { //nolint:gosec
+		return "", fmt.Errorf("%w: %v", errFailedToGenerateNonce, err)
+	}
+	return fmt.Sprintf("%x", h.Sum(nil)), nil
+}
+
+func buildAndSend(conn net.PacketConn, dst net.Addr, attrs ...stun.Setter) error {
+	msg, err := stun.Build(attrs...)
+	if err != nil {
+		return err
+	}
+	_, err = conn.WriteTo(msg.Raw, dst)
+	return err
+}
+
+// Send a STUN packet and return the original error to the caller
+func buildAndSendErr(conn net.PacketConn, dst net.Addr, err error, attrs ...stun.Setter) error {
+	if sendErr := buildAndSend(conn, dst, attrs...); sendErr != nil {
+		err = fmt.Errorf("%w %v %v", errFailedToSendError, sendErr, err)
+	}
+	return err
+}
+
+func buildMsg(transactionID [stun.TransactionIDSize]byte, msgType stun.MessageType, additional ...stun.Setter) []stun.Setter {
+	return append([]stun.Setter{&stun.Message{TransactionID: transactionID}, msgType}, additional...)
+}
+
+func authenticateRequest(r Request, m *stun.Message, callingMethod stun.Method) (stun.MessageIntegrity, bool, error) {
+	respondWithNonce := func(responseCode stun.ErrorCode) (stun.MessageIntegrity, bool, error) {
+		nonce, err := buildNonce()
+		if err != nil {
+			return nil, false, err
+		}
+
+		// Nonce has already been taken
+		if _, keyCollision := r.Nonces.LoadOrStore(nonce, time.Now()); keyCollision {
+			return nil, false, errDuplicatedNonce
+		}
+
+		return nil, false, buildAndSend(r.Conn, r.SrcAddr, buildMsg(m.TransactionID,
+			stun.NewType(callingMethod, stun.ClassErrorResponse),
+			&stun.ErrorCodeAttribute{Code: responseCode},
+			stun.NewNonce(nonce),
+			stun.NewRealm(r.Realm),
+		)...)
+	}
+
+	if !m.Contains(stun.AttrMessageIntegrity) {
+		return respondWithNonce(stun.CodeUnauthorized)
+	}
+
+	nonceAttr := &stun.Nonce{}
+	usernameAttr := &stun.Username{}
+	realmAttr := &stun.Realm{}
+	badRequestMsg := buildMsg(m.TransactionID, stun.NewType(callingMethod, stun.ClassErrorResponse), &stun.ErrorCodeAttribute{Code: stun.CodeBadRequest})
+
+	if err := nonceAttr.GetFrom(m); err != nil {
+		return nil, false, buildAndSendErr(r.Conn, r.SrcAddr, err, badRequestMsg...)
+	}
+
+	// Assert Nonce exists and is not expired
+	nonceCreationTime, ok := r.Nonces.Load(string(*nonceAttr))
+	if !ok || time.Since(nonceCreationTime.(time.Time)) >= nonceLifetime {
+		r.Nonces.Delete(nonceAttr)
+		return respondWithNonce(stun.CodeStaleNonce)
+	}
+
+	if err := realmAttr.GetFrom(m); err != nil {
+		return nil, false, buildAndSendErr(r.Conn, r.SrcAddr, err, badRequestMsg...)
+	} else if err := usernameAttr.GetFrom(m); err != nil {
+		return nil, false, buildAndSendErr(r.Conn, r.SrcAddr, err, badRequestMsg...)
+	}
+
+	ourKey, ok := r.AuthHandler(usernameAttr.String(), realmAttr.String(), r.SrcAddr)
+	if !ok {
+		return nil, false, buildAndSendErr(r.Conn, r.SrcAddr, fmt.Errorf("%w %s", errNoSuchUser, usernameAttr.String()), badRequestMsg...)
+	}
+
+	if err := stun.MessageIntegrity(ourKey).Check(m); err != nil {
+		return nil, false, buildAndSendErr(r.Conn, r.SrcAddr, err, badRequestMsg...)
+	}
+
+	return stun.MessageIntegrity(ourKey), true, nil
+}
+
+func allocationLifeTime(m *stun.Message) time.Duration {
+	lifetimeDuration := proto.DefaultLifetime
+
+	var lifetime proto.Lifetime
+	if err := lifetime.GetFrom(m); err == nil {
+		if lifetime.Duration < maximumAllocationLifetime {
+			lifetimeDuration = lifetime.Duration
+		}
+	}
+
+	return lifetimeDuration
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/lt_cred.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/lt_cred.go
new file mode 100644
index 000000000..07520b1ed
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/lt_cred.go
@@ -0,0 +1,56 @@
+package turn
+
+import ( //nolint:gci
+	"crypto/hmac"
+	"crypto/sha1" //nolint:gosec,gci
+	"encoding/base64"
+	"net"
+	"strconv"
+	"time"
+
+	"github.com/pion/logging"
+)
+
+// GenerateCredentials can be used to create credentials valid for [duration] time
+func GenerateLongTermCredentials(sharedSecret string, duration time.Duration) (string, string, error) {
+	t := time.Now().Add(duration).Unix()
+	username := strconv.FormatInt(t, 10)
+	password, err := longTermCredentials(username, sharedSecret)
+	return username, password, err
+}
+
+func longTermCredentials(username string, sharedSecret string) (string, error) {
+	mac := hmac.New(sha1.New, []byte(sharedSecret))
+	_, err := mac.Write([]byte(username))
+	if err != nil {
+		return "", err // Not sure if this will ever happen
+	}
+	password := mac.Sum(nil)
+	return base64.StdEncoding.EncodeToString(password), nil
+}
+
+// NewAuthHandler returns a turn.AuthAuthHandler used with Long Term (or Time Windowed) Credentials.
+// https://tools.ietf.org/search/rfc5389#section-10.2
+func NewLongTermAuthHandler(sharedSecret string, l logging.LeveledLogger) AuthHandler {
+	if l == nil {
+		l = logging.NewDefaultLoggerFactory().NewLogger("turn")
+	}
+	return func(username, realm string, srcAddr net.Addr) (key []byte, ok bool) {
+		l.Tracef("Authentication username=%q realm=%q srcAddr=%v\n", username, realm, srcAddr)
+		t, err := strconv.Atoi(username)
+		if err != nil {
+			l.Errorf("Invalid time-windowed username %q", username)
+			return nil, false
+		}
+		if int64(t) < time.Now().Unix() {
+			l.Errorf("Expired time-windowed username %q", username)
+			return nil, false
+		}
+		password, err := longTermCredentials(username, sharedSecret)
+		if err != nil {
+			l.Error(err.Error())
+			return nil, false
+		}
+		return GenerateAuthKey(username, realm, password), true
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/relay_address_generator_none.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/relay_address_generator_none.go
new file mode 100644
index 000000000..6fab06105
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/relay_address_generator_none.go
@@ -0,0 +1,45 @@
+package turn
+
+import (
+	"net"
+	"strconv"
+
+	"github.com/pion/transport/vnet"
+)
+
+// RelayAddressGeneratorNone returns the listener with no modifications
+type RelayAddressGeneratorNone struct {
+	// Address is passed to Listen/ListenPacket when creating the Relay
+	Address string
+
+	Net *vnet.Net
+}
+
+// Validate is caled on server startup and confirms the RelayAddressGenerator is properly configured
+func (r *RelayAddressGeneratorNone) Validate() error {
+	if r.Net == nil {
+		r.Net = vnet.NewNet(nil)
+	}
+
+	switch {
+	case r.Address == "":
+		return errListeningAddressInvalid
+	default:
+		return nil
+	}
+}
+
+// AllocatePacketConn generates a new PacketConn to receive traffic on and the IP/Port to populate the allocation response with
+func (r *RelayAddressGeneratorNone) AllocatePacketConn(network string, requestedPort int) (net.PacketConn, net.Addr, error) {
+	conn, err := r.Net.ListenPacket(network, r.Address+":"+strconv.Itoa(requestedPort))
+	if err != nil {
+		return nil, nil, err
+	}
+
+	return conn, conn.LocalAddr(), nil
+}
+
+// AllocateConn generates a new Conn to receive traffic on and the IP/Port to populate the allocation response with
+func (r *RelayAddressGeneratorNone) AllocateConn(network string, requestedPort int) (net.Conn, net.Addr, error) {
+	return nil, nil, errTODO
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/relay_address_generator_range.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/relay_address_generator_range.go
new file mode 100644
index 000000000..9f95429e2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/relay_address_generator_range.go
@@ -0,0 +1,92 @@
+package turn
+
+import (
+	"fmt"
+	"net"
+
+	"github.com/pion/randutil"
+	"github.com/pion/transport/vnet"
+)
+
+// RelayAddressGeneratorPortRange can be used to only allocate connections inside a defined port range.
+// Similar to the RelayAddressGeneratorStatic a static ip address can be set.
+type RelayAddressGeneratorPortRange struct {
+	// RelayAddress is the IP returned to the user when the relay is created
+	RelayAddress net.IP
+
+	// MinPort the minimum port to allocate
+	MinPort uint16
+	// MaxPort the maximum (inclusive) port to allocate
+	MaxPort uint16
+
+	// MaxRetries the amount of tries to allocate a random port in the defined range
+	MaxRetries int
+
+	// Rand the random source of numbers
+	Rand randutil.MathRandomGenerator
+
+	// Address is passed to Listen/ListenPacket when creating the Relay
+	Address string
+
+	Net *vnet.Net
+}
+
+// Validate is called on server startup and confirms the RelayAddressGenerator is properly configured
+func (r *RelayAddressGeneratorPortRange) Validate() error {
+	if r.Net == nil {
+		r.Net = vnet.NewNet(nil)
+	}
+
+	if r.Rand == nil {
+		r.Rand = randutil.NewMathRandomGenerator()
+	}
+
+	if r.MaxRetries == 0 {
+		r.MaxRetries = 10
+	}
+
+	switch {
+	case r.MinPort == 0:
+		return errMinPortNotZero
+	case r.MaxPort == 0:
+		return errMaxPortNotZero
+	case r.RelayAddress == nil:
+		return errRelayAddressInvalid
+	case r.Address == "":
+		return errListeningAddressInvalid
+	default:
+		return nil
+	}
+}
+
+// AllocatePacketConn generates a new PacketConn to receive traffic on and the IP/Port to populate the allocation response with
+func (r *RelayAddressGeneratorPortRange) AllocatePacketConn(network string, requestedPort int) (net.PacketConn, net.Addr, error) {
+	if requestedPort != 0 {
+		conn, err := r.Net.ListenPacket(network, fmt.Sprintf("%s:%d", r.Address, requestedPort))
+		if err != nil {
+			return nil, nil, err
+		}
+		relayAddr := conn.LocalAddr().(*net.UDPAddr)
+		relayAddr.IP = r.RelayAddress
+		return conn, relayAddr, nil
+	}
+
+	for try := 0; try < r.MaxRetries; try++ {
+		port := r.MinPort + uint16(r.Rand.Intn(int((r.MaxPort+1)-r.MinPort)))
+		conn, err := r.Net.ListenPacket(network, fmt.Sprintf("%s:%d", r.Address, port))
+		if err != nil {
+			continue
+		}
+
+		relayAddr := conn.LocalAddr().(*net.UDPAddr)
+		relayAddr.IP = r.RelayAddress
+		return conn, relayAddr, nil
+	}
+
+	return nil, nil, errMaxRetriesExceeded
+}
+
+// AllocateConn generates a new Conn to receive traffic on and the IP/Port to populate the allocation response with
+func (r *RelayAddressGeneratorPortRange) AllocateConn(network string, requestedPort int) (net.Conn, net.Addr, error) {
+	return nil, nil, errTODO
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/relay_address_generator_static.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/relay_address_generator_static.go
new file mode 100644
index 000000000..ae921e7f2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/relay_address_generator_static.go
@@ -0,0 +1,55 @@
+package turn
+
+import (
+	"net"
+	"strconv"
+
+	"github.com/pion/transport/vnet"
+)
+
+// RelayAddressGeneratorStatic can be used to return static IP address each time a relay is created.
+// This can be used when you have a single static IP address that you want to use
+type RelayAddressGeneratorStatic struct {
+	// RelayAddress is the IP returned to the user when the relay is created
+	RelayAddress net.IP
+
+	// Address is passed to Listen/ListenPacket when creating the Relay
+	Address string
+
+	Net *vnet.Net
+}
+
+// Validate is caled on server startup and confirms the RelayAddressGenerator is properly configured
+func (r *RelayAddressGeneratorStatic) Validate() error {
+	if r.Net == nil {
+		r.Net = vnet.NewNet(nil)
+	}
+
+	switch {
+	case r.RelayAddress == nil:
+		return errRelayAddressInvalid
+	case r.Address == "":
+		return errListeningAddressInvalid
+	default:
+		return nil
+	}
+}
+
+// AllocatePacketConn generates a new PacketConn to receive traffic on and the IP/Port to populate the allocation response with
+func (r *RelayAddressGeneratorStatic) AllocatePacketConn(network string, requestedPort int) (net.PacketConn, net.Addr, error) {
+	conn, err := r.Net.ListenPacket(network, r.Address+":"+strconv.Itoa(requestedPort))
+	if err != nil {
+		return nil, nil, err
+	}
+
+	// Replace actual listening IP with the user requested one of RelayAddressGeneratorStatic
+	relayAddr := conn.LocalAddr().(*net.UDPAddr)
+	relayAddr.IP = r.RelayAddress
+
+	return conn, relayAddr, nil
+}
+
+// AllocateConn generates a new Conn to receive traffic on and the IP/Port to populate the allocation response with
+func (r *RelayAddressGeneratorStatic) AllocateConn(network string, requestedPort int) (net.Conn, net.Addr, error) {
+	return nil, nil, errTODO
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/renovate.json b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/renovate.json
new file mode 100644
index 000000000..4400fd9b2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/renovate.json
@@ -0,0 +1,15 @@
+{
+  "extends": [
+    "config:base"
+  ],
+  "postUpdateOptions": [
+    "gomodTidy"
+  ],
+  "commitBody": "Generated by renovateBot",
+  "packageRules": [
+    {
+      "packagePatterns": ["^golang.org/x/"],
+      "schedule": ["on the first day of the month"]
+    }
+  ]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/server.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/server.go
new file mode 100644
index 000000000..c8deba81c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/server.go
@@ -0,0 +1,161 @@
+// Package turn contains the public API for pion/turn, a toolkit for building TURN clients and servers
+package turn
+
+import (
+	"fmt"
+	"net"
+	"sync"
+	"time"
+
+	"github.com/pion/logging"
+	"github.com/pion/turn/v2/internal/allocation"
+	"github.com/pion/turn/v2/internal/proto"
+	"github.com/pion/turn/v2/internal/server"
+)
+
+const (
+	inboundMTU = 1500
+)
+
+// Server is an instance of the Pion TURN Server
+type Server struct {
+	log                logging.LeveledLogger
+	authHandler        AuthHandler
+	realm              string
+	channelBindTimeout time.Duration
+	nonces             *sync.Map
+
+	packetConnConfigs []PacketConnConfig
+	listenerConfigs   []ListenerConfig
+}
+
+// NewServer creates the Pion TURN server
+func NewServer(config ServerConfig) (*Server, error) {
+	if err := config.validate(); err != nil {
+		return nil, err
+	}
+
+	loggerFactory := config.LoggerFactory
+	if loggerFactory == nil {
+		loggerFactory = logging.NewDefaultLoggerFactory()
+	}
+
+	s := &Server{
+		log:                loggerFactory.NewLogger("turn"),
+		authHandler:        config.AuthHandler,
+		realm:              config.Realm,
+		channelBindTimeout: config.ChannelBindTimeout,
+		packetConnConfigs:  config.PacketConnConfigs,
+		listenerConfigs:    config.ListenerConfigs,
+		nonces:             &sync.Map{},
+	}
+
+	if s.channelBindTimeout == 0 {
+		s.channelBindTimeout = proto.DefaultLifetime
+	}
+
+	for i := range s.packetConnConfigs {
+		go func(p PacketConnConfig) {
+			allocationManager, err := allocation.NewManager(allocation.ManagerConfig{
+				AllocatePacketConn: p.RelayAddressGenerator.AllocatePacketConn,
+				AllocateConn:       p.RelayAddressGenerator.AllocateConn,
+				LeveledLogger:      s.log,
+			})
+			if err != nil {
+				s.log.Errorf("exit read loop on error: %s", err.Error())
+				return
+			}
+			defer func() {
+				if err := allocationManager.Close(); err != nil {
+					s.log.Errorf("Failed to close AllocationManager: %s", err.Error())
+				}
+			}()
+
+			s.readLoop(p.PacketConn, allocationManager)
+		}(s.packetConnConfigs[i])
+	}
+
+	for _, listener := range s.listenerConfigs {
+		go func(l ListenerConfig) {
+			allocationManager, err := allocation.NewManager(allocation.ManagerConfig{
+				AllocatePacketConn: l.RelayAddressGenerator.AllocatePacketConn,
+				AllocateConn:       l.RelayAddressGenerator.AllocateConn,
+				LeveledLogger:      s.log,
+			})
+			if err != nil {
+				s.log.Errorf("exit read loop on error: %s", err.Error())
+				return
+			}
+			defer func() {
+				if err := allocationManager.Close(); err != nil {
+					s.log.Errorf("Failed to close AllocationManager: %s", err.Error())
+				}
+			}()
+
+			for {
+				conn, err := l.Listener.Accept()
+				if err != nil {
+					s.log.Debugf("exit accept loop on error: %s", err.Error())
+					return
+				}
+
+				go s.readLoop(NewSTUNConn(conn), allocationManager)
+			}
+		}(listener)
+	}
+
+	return s, nil
+}
+
+// Close stops the TURN Server. It cleans up any associated state and closes all connections it is managing
+func (s *Server) Close() error {
+	var errors []error
+
+	for _, p := range s.packetConnConfigs {
+		if err := p.PacketConn.Close(); err != nil {
+			errors = append(errors, err)
+		}
+	}
+
+	for _, l := range s.listenerConfigs {
+		if err := l.Listener.Close(); err != nil {
+			errors = append(errors, err)
+		}
+	}
+
+	if len(errors) == 0 {
+		return nil
+	}
+
+	err := errFailedToClose
+	for _, e := range errors {
+		err = fmt.Errorf("%s; Close error (%v) ", err.Error(), e) //nolint:goerr113
+	}
+
+	return err
+}
+
+func (s *Server) readLoop(p net.PacketConn, allocationManager *allocation.Manager) {
+	buf := make([]byte, inboundMTU)
+	for {
+		n, addr, err := p.ReadFrom(buf)
+		if err != nil {
+			s.log.Debugf("exit read loop on error: %s", err.Error())
+			return
+		}
+
+		if err := server.HandleRequest(server.Request{
+			Conn:               p,
+			SrcAddr:            addr,
+			Buff:               buf[:n],
+			Log:                s.log,
+			AuthHandler:        s.authHandler,
+			Realm:              s.realm,
+			AllocationManager:  allocationManager,
+			ChannelBindTimeout: s.channelBindTimeout,
+			Nonces:             s.nonces,
+		}); err != nil {
+			s.log.Errorf("error when handling datagram: %v", err)
+		}
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/server_config.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/server_config.go
new file mode 100644
index 000000000..9ff3872f4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/server_config.go
@@ -0,0 +1,116 @@
+package turn
+
+import (
+	"crypto/md5" //nolint:gosec,gci
+	"fmt"
+	"net"
+	"strings"
+	"time"
+
+	"github.com/pion/logging"
+)
+
+// RelayAddressGenerator is used to generate a RelayAddress when creating an allocation.
+// You can use one of the provided ones or provide your own.
+type RelayAddressGenerator interface {
+	// Validate confirms that the RelayAddressGenerator is properly initialized
+	Validate() error
+
+	// Allocate a PacketConn (UDP) RelayAddress
+	AllocatePacketConn(network string, requestedPort int) (net.PacketConn, net.Addr, error)
+
+	// Allocate a Conn (TCP) RelayAddress
+	AllocateConn(network string, requestedPort int) (net.Conn, net.Addr, error)
+}
+
+// PacketConnConfig is a single net.PacketConn to listen/write on. This will be used for UDP listeners
+type PacketConnConfig struct {
+	PacketConn net.PacketConn
+
+	// When an allocation is generated the RelayAddressGenerator
+	// creates the net.PacketConn and returns the IP/Port it is available at
+	RelayAddressGenerator RelayAddressGenerator
+}
+
+func (c *PacketConnConfig) validate() error {
+	if c.PacketConn == nil {
+		return errConnUnset
+	}
+	if c.RelayAddressGenerator == nil {
+		return errRelayAddressGeneratorUnset
+	}
+
+	return c.RelayAddressGenerator.Validate()
+}
+
+// ListenerConfig is a single net.Listener to accept connections on. This will be used for TCP, TLS and DTLS listeners
+type ListenerConfig struct {
+	Listener net.Listener
+
+	// When an allocation is generated the RelayAddressGenerator
+	// creates the net.PacketConn and returns the IP/Port it is available at
+	RelayAddressGenerator RelayAddressGenerator
+}
+
+func (c *ListenerConfig) validate() error {
+	if c.Listener == nil {
+		return errListenerUnset
+	}
+
+	if c.RelayAddressGenerator == nil {
+		return errRelayAddressGeneratorUnset
+	}
+
+	return c.RelayAddressGenerator.Validate()
+}
+
+// AuthHandler is a callback used to handle incoming auth requests, allowing users to customize Pion TURN with custom behavior
+type AuthHandler func(username, realm string, srcAddr net.Addr) (key []byte, ok bool)
+
+// GenerateAuthKey is a convince function to easily generate keys in the format used by AuthHandler
+func GenerateAuthKey(username, realm, password string) []byte {
+	// #nosec
+	h := md5.New()
+	fmt.Fprint(h, strings.Join([]string{username, realm, password}, ":"))
+	return h.Sum(nil)
+}
+
+// ServerConfig configures the Pion TURN Server
+type ServerConfig struct {
+	// PacketConnConfigs and ListenerConfigs are a list of all the turn listeners
+	// Each listener can have custom behavior around the creation of Relays
+	PacketConnConfigs []PacketConnConfig
+	ListenerConfigs   []ListenerConfig
+
+	// LoggerFactory must be set for logging from this server.
+	LoggerFactory logging.LoggerFactory
+
+	// Realm sets the realm for this server
+	Realm string
+
+	// AuthHandler is a callback used to handle incoming auth requests, allowing users to customize Pion TURN with custom behavior
+	AuthHandler AuthHandler
+
+	// ChannelBindTimeout sets the lifetime of channel binding. Defaults to 10 minutes.
+	ChannelBindTimeout time.Duration
+}
+
+func (s *ServerConfig) validate() error {
+	if len(s.PacketConnConfigs) == 0 && len(s.ListenerConfigs) == 0 {
+		return errNoAvailableConns
+	}
+
+	for _, s := range s.PacketConnConfigs {
+		if err := s.validate(); err != nil {
+			return err
+		}
+	}
+
+	for _, s := range s.ListenerConfigs {
+		if err := s.validate(); err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/stun_conn.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/stun_conn.go
new file mode 100644
index 000000000..e1446bd10
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/turn/v2/stun_conn.go
@@ -0,0 +1,121 @@
+package turn
+
+import (
+	"encoding/binary"
+	"errors"
+	"net"
+	"time"
+
+	"github.com/pion/stun"
+	"github.com/pion/turn/v2/internal/proto"
+)
+
+var (
+	errInvalidTURNFrame    = errors.New("data is not a valid TURN frame, no STUN or ChannelData found")
+	errIncompleteTURNFrame = errors.New("data contains incomplete STUN or TURN frame")
+)
+
+// STUNConn wraps a net.Conn and implements
+// net.PacketConn by being STUN aware and
+// packetizing the stream
+type STUNConn struct {
+	nextConn net.Conn
+	buff     []byte
+}
+
+const (
+	stunHeaderSize = 20
+
+	channelDataLengthSize = 2
+	channelDataNumberSize = channelDataLengthSize
+	channelDataHeaderSize = channelDataLengthSize + channelDataNumberSize
+	channelDataPadding    = 4
+)
+
+// Given a buffer give the last offset of the TURN frame
+// If the buffer isn't a valid STUN or ChannelData packet
+// or the length doesn't match return false
+func consumeSingleTURNFrame(p []byte) (int, error) {
+	// Too short to determine if ChannelData or STUN
+	if len(p) < 9 {
+		return 0, errIncompleteTURNFrame
+	}
+
+	var datagramSize uint16
+	if stun.IsMessage(p) {
+		datagramSize = binary.BigEndian.Uint16(p[2:4]) + stunHeaderSize
+	} else if num := binary.BigEndian.Uint16(p[0:4]); proto.ChannelNumber(num).Valid() {
+		datagramSize = binary.BigEndian.Uint16(p[channelDataNumberSize:channelDataHeaderSize])
+		if paddingOverflow := (datagramSize + channelDataPadding) % channelDataPadding; paddingOverflow != 0 {
+			datagramSize = (datagramSize + channelDataPadding) - paddingOverflow
+		}
+
+		datagramSize += channelDataHeaderSize
+	} else {
+		return 0, errInvalidTURNFrame
+	}
+
+	if len(p) < int(datagramSize) {
+		return 0, errIncompleteTURNFrame
+	}
+
+	return int(datagramSize), nil
+}
+
+// ReadFrom implements ReadFrom from net.PacketConn
+func (s *STUNConn) ReadFrom(p []byte) (n int, addr net.Addr, err error) {
+	// First pass any buffered data from previous reads
+	n, err = consumeSingleTURNFrame(s.buff)
+	if errors.Is(err, errInvalidTURNFrame) {
+		return 0, nil, err
+	} else if err == nil {
+		copy(p, s.buff[:n])
+		s.buff = s.buff[n:]
+
+		return n, s.nextConn.RemoteAddr(), nil
+	}
+
+	// Then read from the nextConn, appending to our buff
+	n, err = s.nextConn.Read(p)
+	if err != nil {
+		return 0, nil, err
+	}
+
+	s.buff = append(s.buff, append([]byte{}, p[:n]...)...)
+	return s.ReadFrom(p)
+}
+
+// WriteTo implements WriteTo from net.PacketConn
+func (s *STUNConn) WriteTo(p []byte, addr net.Addr) (n int, err error) {
+	return s.nextConn.Write(p)
+}
+
+// Close implements Close from net.PacketConn
+func (s *STUNConn) Close() error {
+	return s.nextConn.Close()
+}
+
+// LocalAddr implements LocalAddr from net.PacketConn
+func (s *STUNConn) LocalAddr() net.Addr {
+	return s.nextConn.LocalAddr()
+}
+
+// SetDeadline implements SetDeadline from net.PacketConn
+func (s *STUNConn) SetDeadline(t time.Time) error {
+	return s.nextConn.SetDeadline(t)
+}
+
+// SetReadDeadline implements SetReadDeadline from net.PacketConn
+func (s *STUNConn) SetReadDeadline(t time.Time) error {
+	return s.nextConn.SetReadDeadline(t)
+}
+
+// SetWriteDeadline implements SetWriteDeadline from net.PacketConn
+func (s *STUNConn) SetWriteDeadline(t time.Time) error {
+	return s.nextConn.SetWriteDeadline(t)
+}
+
+// NewSTUNConn creates a STUNConn
+func NewSTUNConn(nextConn net.Conn) *STUNConn {
+	return &STUNConn{nextConn: nextConn}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/.gitignore b/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/.gitignore
new file mode 100644
index 000000000..f7b34922f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/.gitignore
@@ -0,0 +1,15 @@
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+
+# Test binary, built with `go test -c`
+*.test
+
+# Output of the go coverage tool, specifically when used with LiteIDE
+*.out
+
+# Dependency directories (remove the comment below to include it)
+# vendor/
\ No newline at end of file
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/.golangci.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/.golangci.yml
new file mode 100644
index 000000000..1387b5576
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/.golangci.yml
@@ -0,0 +1,12 @@
+linters-settings:
+  govet:
+    check-shadowing: true
+  misspell:
+    locale: US
+
+linters:
+  enable-all: true
+  disable:
+
+issues:
+  exclude-use-default: false
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/LICENSE
new file mode 100644
index 000000000..81f990d60
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2020
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/README.md
new file mode 100644
index 000000000..f96659f10
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/README.md
@@ -0,0 +1,39 @@
+<h1 align="center">
+  <br>
+  Pion UDP
+  <br>
+</h1>
+<h4 align="center">A connection-oriented listener over a UDP PacketConn</h4>
+<p align="center">
+  <a href="https://pion.ly"><img src="https://img.shields.io/badge/pion-udp-gray.svg?longCache=true&colorB=brightgreen" alt="Pion UDP"></a>
+  <!--<a href="https://sourcegraph.com/github.com/pion/webrtc?badge"><img src="https://sourcegraph.com/github.com/pion/webrtc/-/badge.svg" alt="Sourcegraph Widget"></a>-->
+  <a href="https://pion.ly/slack"><img src="https://img.shields.io/badge/join-us%20on%20slack-gray.svg?longCache=true&logo=slack&colorB=brightgreen" alt="Slack Widget"></a>
+  <br>
+  <a href="https://travis-ci.org/pion/udp"><img src="https://travis-ci.org/pion/udp.svg?branch=master" alt="Build Status"></a>
+  <a href="https://pkg.go.dev/github.com/pion/udp"><img src="https://godoc.org/github.com/pion/udp?status.svg" alt="GoDoc"></a>
+  <a href="https://codecov.io/gh/pion/udp"><img src="https://codecov.io/gh/pion/udp/branch/master/graph/badge.svg" alt="Coverage Status"></a>
+  <a href="https://goreportcard.com/report/github.com/pion/udp"><img src="https://goreportcard.com/badge/github.com/pion/udp" alt="Go Report Card"></a>
+  <!--<a href="https://www.codacy.com/app/Sean-Der/webrtc"><img src="https://api.codacy.com/project/badge/Grade/18f4aec384894e6aac0b94effe51961d" alt="Codacy Badge"></a>-->
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+</p>
+<br>
+
+### Roadmap
+This package is used in the [DTLS](https://github.com/pion/dtls) and [SCTP](https://github.com/pion/sctp) transport to provide a connection-oriented listener over a UDP.
+
+### Community
+Pion has an active community on the [Golang Slack](https://pion.ly/slack/). You can also use [Pion mailing list](https://groups.google.com/forum/#!forum/pion).
+
+We are always looking to support **your projects**. Please reach out if you have something to build!
+
+If you need commercial support or don't want to use public methods you can contact us at [team@pion.ly](mailto:team@pion.ly)
+
+### Contributing
+Check out the **[contributing wiki](https://github.com/pion/webrtc/wiki/Contributing)** to join the group of amazing people making this project possible:
+
+* [Sean DuBois](https://github.com/Sean-Der) - *Original Author*
+* [Michiel De Backker](https://github.com/backkem) - *Original Author*
+* [Atsushi Watanabe](https://github.com/at-wat) - *Original Author*
+
+### License
+MIT License - see [LICENSE](LICENSE) for full text
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/conn.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/conn.go
new file mode 100644
index 000000000..9f680e83c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/conn.go
@@ -0,0 +1,296 @@
+// Package udp provides a connection-oriented listener over a UDP PacketConn
+package udp
+
+import (
+	"context"
+	"errors"
+	"net"
+	"sync"
+	"sync/atomic"
+	"time"
+
+	"github.com/pion/transport/deadline"
+	"github.com/pion/transport/packetio"
+)
+
+const receiveMTU = 8192
+const defaultListenBacklog = 128 // same as Linux default
+
+var errClosedListener = errors.New("udp: listener closed")
+var errListenQueueExceeded = errors.New("udp: listen queue exceeded")
+
+// listener augments a connection-oriented Listener over a UDP PacketConn
+type listener struct {
+	pConn *net.UDPConn
+
+	accepting    atomic.Value // bool
+	acceptCh     chan *Conn
+	doneCh       chan struct{}
+	doneOnce     sync.Once
+	acceptFilter func([]byte) bool
+
+	connLock sync.Mutex
+	conns    map[string]*Conn
+	connWG   sync.WaitGroup
+
+	readWG   sync.WaitGroup
+	errClose atomic.Value // error
+}
+
+// Accept waits for and returns the next connection to the listener.
+func (l *listener) Accept() (net.Conn, error) {
+	select {
+	case c := <-l.acceptCh:
+		l.connWG.Add(1)
+		return c, nil
+
+	case <-l.doneCh:
+		return nil, errClosedListener
+	}
+}
+
+// Close closes the listener.
+// Any blocked Accept operations will be unblocked and return errors.
+func (l *listener) Close() error {
+	var err error
+	l.doneOnce.Do(func() {
+		l.accepting.Store(false)
+		close(l.doneCh)
+
+		l.connLock.Lock()
+		// Close unaccepted connections
+	L_CLOSE:
+		for {
+			select {
+			case c := <-l.acceptCh:
+				close(c.doneCh)
+				delete(l.conns, c.rAddr.String())
+
+			default:
+				break L_CLOSE
+			}
+		}
+		nConns := len(l.conns)
+		l.connLock.Unlock()
+
+		l.connWG.Done()
+
+		if nConns == 0 {
+			// Wait if this is the final connection
+			l.readWG.Wait()
+			if errClose, ok := l.errClose.Load().(error); ok {
+				err = errClose
+			}
+		} else {
+			err = nil
+		}
+	})
+
+	return err
+}
+
+// Addr returns the listener's network address.
+func (l *listener) Addr() net.Addr {
+	return l.pConn.LocalAddr()
+}
+
+// ListenConfig stores options for listening to an address.
+type ListenConfig struct {
+	// Backlog defines the maximum length of the queue of pending
+	// connections. It is equivalent of the backlog argument of
+	// POSIX listen function.
+	// If a connection request arrives when the queue is full,
+	// the request will be silently discarded, unlike TCP.
+	// Set zero to use default value 128 which is same as Linux default.
+	Backlog int
+
+	// AcceptFilter determines whether the new conn should be made for
+	// the incoming packet. If not set, any packet creates new conn.
+	AcceptFilter func([]byte) bool
+}
+
+// Listen creates a new listener based on the ListenConfig.
+func (lc *ListenConfig) Listen(network string, laddr *net.UDPAddr) (net.Listener, error) {
+	if lc.Backlog == 0 {
+		lc.Backlog = defaultListenBacklog
+	}
+
+	conn, err := net.ListenUDP(network, laddr)
+	if err != nil {
+		return nil, err
+	}
+
+	l := &listener{
+		pConn:        conn,
+		acceptCh:     make(chan *Conn, lc.Backlog),
+		conns:        make(map[string]*Conn),
+		doneCh:       make(chan struct{}),
+		acceptFilter: lc.AcceptFilter,
+	}
+	l.accepting.Store(true)
+	l.connWG.Add(1)
+	l.readWG.Add(2) // wait readLoop and Close execution routine
+
+	go l.readLoop()
+	go func() {
+		l.connWG.Wait()
+		if err := l.pConn.Close(); err != nil {
+			l.errClose.Store(err)
+		}
+		l.readWG.Done()
+	}()
+
+	return l, nil
+}
+
+// Listen creates a new listener using default ListenConfig.
+func Listen(network string, laddr *net.UDPAddr) (net.Listener, error) {
+	return (&ListenConfig{}).Listen(network, laddr)
+}
+
+var readBufferPool = &sync.Pool{
+	New: func() interface{} {
+		buf := make([]byte, receiveMTU)
+		return &buf
+	},
+}
+
+// readLoop has to tasks:
+// 1. Dispatching incoming packets to the correct Conn.
+//    It can therefore not be ended until all Conns are closed.
+// 2. Creating a new Conn when receiving from a new remote.
+func (l *listener) readLoop() {
+	defer l.readWG.Done()
+
+	for {
+		buf := *(readBufferPool.Get().(*[]byte))
+		n, raddr, err := l.pConn.ReadFrom(buf)
+		if err != nil {
+			return
+		}
+		conn, ok, err := l.getConn(raddr, buf[:n])
+		if err != nil {
+			continue
+		}
+		if ok {
+			_, _ = conn.buffer.Write(buf[:n])
+		}
+	}
+}
+
+func (l *listener) getConn(raddr net.Addr, buf []byte) (*Conn, bool, error) {
+	l.connLock.Lock()
+	defer l.connLock.Unlock()
+	conn, ok := l.conns[raddr.String()]
+	if !ok {
+		if !l.accepting.Load().(bool) {
+			return nil, false, errClosedListener
+		}
+		if l.acceptFilter != nil {
+			if !l.acceptFilter(buf) {
+				return nil, false, nil
+			}
+		}
+		conn = l.newConn(raddr)
+		select {
+		case l.acceptCh <- conn:
+			l.conns[raddr.String()] = conn
+		default:
+			return nil, false, errListenQueueExceeded
+		}
+	}
+	return conn, true, nil
+}
+
+// Conn augments a connection-oriented connection over a UDP PacketConn
+type Conn struct {
+	listener *listener
+
+	rAddr net.Addr
+
+	buffer *packetio.Buffer
+
+	doneCh   chan struct{}
+	doneOnce sync.Once
+
+	writeDeadline *deadline.Deadline
+}
+
+func (l *listener) newConn(rAddr net.Addr) *Conn {
+	return &Conn{
+		listener:      l,
+		rAddr:         rAddr,
+		buffer:        packetio.NewBuffer(),
+		doneCh:        make(chan struct{}),
+		writeDeadline: deadline.New(),
+	}
+}
+
+// Read
+func (c *Conn) Read(p []byte) (int, error) {
+	return c.buffer.Read(p)
+}
+
+// Write writes len(p) bytes from p to the DTLS connection
+func (c *Conn) Write(p []byte) (n int, err error) {
+	select {
+	case <-c.writeDeadline.Done():
+		return 0, context.DeadlineExceeded
+	default:
+	}
+	return c.listener.pConn.WriteTo(p, c.rAddr)
+}
+
+// Close closes the conn and releases any Read calls
+func (c *Conn) Close() error {
+	var err error
+	c.doneOnce.Do(func() {
+		c.listener.connWG.Done()
+		close(c.doneCh)
+		c.listener.connLock.Lock()
+		delete(c.listener.conns, c.rAddr.String())
+		nConns := len(c.listener.conns)
+		c.listener.connLock.Unlock()
+
+		if nConns == 0 && !c.listener.accepting.Load().(bool) {
+			// Wait if this is the final connection
+			c.listener.readWG.Wait()
+			if errClose, ok := c.listener.errClose.Load().(error); ok {
+				err = errClose
+			}
+		} else {
+			err = nil
+		}
+	})
+
+	return err
+}
+
+// LocalAddr implements net.Conn.LocalAddr
+func (c *Conn) LocalAddr() net.Addr {
+	return c.listener.pConn.LocalAddr()
+}
+
+// RemoteAddr implements net.Conn.RemoteAddr
+func (c *Conn) RemoteAddr() net.Addr {
+	return c.rAddr
+}
+
+// SetDeadline implements net.Conn.SetDeadline
+func (c *Conn) SetDeadline(t time.Time) error {
+	c.writeDeadline.Set(t)
+	return c.SetReadDeadline(t)
+}
+
+// SetReadDeadline implements net.Conn.SetDeadline
+func (c *Conn) SetReadDeadline(t time.Time) error {
+	return c.buffer.SetReadDeadline(t)
+}
+
+// SetWriteDeadline implements net.Conn.SetDeadline
+func (c *Conn) SetWriteDeadline(t time.Time) error {
+	c.writeDeadline.Set(t)
+	// Write deadline of underlying connection should not be changed
+	// since the connection can be shared.
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/go.mod
new file mode 100644
index 000000000..59289b648
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/go.mod
@@ -0,0 +1,5 @@
+module github.com/pion/udp
+
+go 1.14
+
+require github.com/pion/transport v0.10.0
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/go.sum b/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/go.sum
new file mode 100644
index 000000000..cd0abb22c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/udp/go.sum
@@ -0,0 +1,19 @@
+github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/pion/logging v0.2.2/go.mod h1:k0/tDVsRCX2Mb2ZEmTqNa7CWsQPc+YYCB7Q+5pahoms=
+github.com/pion/transport v0.10.0 h1:9M12BSneJm6ggGhJyWpDveFOstJsTiQjkLf4M44rm80=
+github.com/pion/transport v0.10.0/go.mod h1:BnHnUipd0rZQyTVB2SBGojFHT9CBt5C5TcsJSQGkvSE=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.5.1 h1:nOGnQDM7FYENwehXlg/kFVnos3rEvtKTjRvOWSzb6H4=
+github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/net v0.0.0-20200226121028-0de0cce0169b h1:0mm1VjtFUOIlE1SbDlwjYaDxZVDP2S5ou6y0gSgXHu8=
+golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v2 v2.2.2 h1:ZCJp+EgiOT7lHqUV2J862kp8Qj64Jo6az82+3Td9dZw=
+gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/.codacy.yaml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/.codacy.yaml
new file mode 100644
index 000000000..a8c225b74
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/.codacy.yaml
@@ -0,0 +1,3 @@
+---
+exclude_paths:
+  - examples/examples.json
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/.eslintrc.json b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/.eslintrc.json
new file mode 100644
index 000000000..a755cdbfe
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/.eslintrc.json
@@ -0,0 +1,3 @@
+{
+  "extends": ["standard"]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/.gitignore b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/.gitignore
new file mode 100644
index 000000000..83db74ba5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/.gitignore
@@ -0,0 +1,24 @@
+### JetBrains IDE ###
+#####################
+.idea/
+
+### Emacs Temporary Files ###
+#############################
+*~
+
+### Folders ###
+###############
+bin/
+vendor/
+node_modules/
+
+### Files ###
+#############
+*.ivf
+*.ogg
+tags
+cover.out
+*.sw[poe]
+*.wasm
+examples/sfu-ws/cert.pem
+examples/sfu-ws/key.pem
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/.golangci.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/.golangci.yml
new file mode 100644
index 000000000..d6162c970
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/.golangci.yml
@@ -0,0 +1,89 @@
+linters-settings:
+  govet:
+    check-shadowing: true
+  misspell:
+    locale: US
+  exhaustive:
+    default-signifies-exhaustive: true
+  gomodguard:
+    blocked:
+      modules:
+        - github.com/pkg/errors:
+            recommendations:
+            - errors
+
+linters:
+  enable:
+    - asciicheck       # Simple linter to check that your code does not contain non-ASCII identifiers
+    - bodyclose        # checks whether HTTP response body is closed successfully
+    - deadcode         # Finds unused code
+    - depguard         # Go linter that checks if package imports are in a list of acceptable packages
+    - dogsled          # Checks assignments with too many blank identifiers (e.g. x, _, _, _, := f())
+    - dupl             # Tool for code clone detection
+    - errcheck         # Errcheck is a program for checking for unchecked errors in go programs. These unchecked errors can be critical bugs in some cases
+    - exhaustive       # check exhaustiveness of enum switch statements
+    - exportloopref    # checks for pointers to enclosing loop variables
+    - gci              # Gci control golang package import order and make it always deterministic.
+    - gochecknoglobals # Checks that no globals are present in Go code
+    - gochecknoinits   # Checks that no init functions are present in Go code
+    - gocognit         # Computes and checks the cognitive complexity of functions
+    - goconst          # Finds repeated strings that could be replaced by a constant
+    - gocritic         # The most opinionated Go source code linter
+    - godox            # Tool for detection of FIXME, TODO and other comment keywords
+    - goerr113         # Golang linter to check the errors handling expressions
+    - gofmt            # Gofmt checks whether code was gofmt-ed. By default this tool runs with -s option to check for code simplification
+    - gofumpt          # Gofumpt checks whether code was gofumpt-ed.
+    - goheader         # Checks is file header matches to pattern
+    - goimports        # Goimports does everything that gofmt does. Additionally it checks unused imports
+    - golint           # Golint differs from gofmt. Gofmt reformats Go source code, whereas golint prints out style mistakes
+    - gomodguard       # Allow and block list linter for direct Go module dependencies. This is different from depguard where there are different block types for example version constraints and module recommendations.
+    - goprintffuncname # Checks that printf-like functions are named with `f` at the end
+    - gosec            # Inspects source code for security problems
+    - gosimple         # Linter for Go source code that specializes in simplifying a code
+    - govet            # Vet examines Go source code and reports suspicious constructs, such as Printf calls whose arguments do not align with the format string
+    - ineffassign      # Detects when assignments to existing variables are not used
+    - misspell         # Finds commonly misspelled English words in comments
+    - nakedret         # Finds naked returns in functions greater than a specified function length
+    - noctx            # noctx finds sending http request without context.Context
+    - scopelint        # Scopelint checks for unpinned variables in go programs
+    - staticcheck      # Staticcheck is a go vet on steroids, applying a ton of static analysis checks
+    - structcheck      # Finds unused struct fields
+    - stylecheck       # Stylecheck is a replacement for golint
+    - typecheck        # Like the front-end of a Go compiler, parses and type-checks Go code
+    - unconvert        # Remove unnecessary type conversions
+    - unparam          # Reports unused function parameters
+    - unused           # Checks Go code for unused constants, variables, functions and types
+    - varcheck         # Finds unused global variables and constants
+    - whitespace       # Tool for detection of leading and trailing whitespace
+  disable:
+    - funlen           # Tool for detection of long functions
+    - gocyclo          # Computes and checks the cyclomatic complexity of functions
+    - godot            # Check if comments end in a period
+    - gomnd            # An analyzer to detect magic numbers.
+    - lll              # Reports long lines
+    - maligned         # Tool to detect Go structs that would take less memory if their fields were sorted
+    - nestif           # Reports deeply nested if statements
+    - nlreturn         # nlreturn checks for a new line before return and branch statements to increase code clarity
+    - nolintlint       # Reports ill-formed or insufficient nolint directives
+    - prealloc         # Finds slice declarations that could potentially be preallocated
+    - rowserrcheck     # checks whether Err of rows is checked successfully
+    - sqlclosecheck    # Checks that sql.Rows and sql.Stmt are closed.
+    - testpackage      # linter that makes you use a separate _test package
+    - wsl              # Whitespace Linter - Forces you to use empty lines!
+
+issues:
+  exclude-use-default: false
+  exclude-rules:
+    # Allow complex tests, better to be self contained
+    - path: _test\.go
+      linters:
+        - gocognit
+
+    # Allow complex main function in examples
+    - path: examples
+      text: "of func `main` is high"
+      linters:
+        - gocognit
+
+run:
+  skip-dirs-use-default: false
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/DESIGN.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/DESIGN.md
new file mode 100644
index 000000000..e22b08e30
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/DESIGN.md
@@ -0,0 +1,43 @@
+<h1 align="center">
+  Design
+</h1>
+WebRTC is a powerful, but complicated technology you can build amazing things with, it comes with a steep learning curve though.
+Using WebRTC in the browser is easy, but outside the browser is more of a challenge. There are multiple libraries, and they all have
+varying levels of quality. Most are also difficult to build, and depend on libraries that aren't available in repos or portable.
+
+Pion WebRTC aims to solve all that! Built in native Go you should be able to send and receive media and text from anywhere with minimal headache.
+These are the design principals that drive Pion WebRTC and hopefully convince you it is worth a try.
+
+### Portable
+Pion WebRTC is written in Go and extremely portable. Anywhere Golang runs, Pion WebRTC should work as well! Instead of dealing with complicated
+cross-compiling of multiple libraries, you now can run anywhere with one `go build`
+
+### Flexible
+When possible we leave all decisions to the user. When choice is possible (like what logging library is used) we defer to the developer.
+
+### Simple API
+If you know how to use WebRTC in your browser, you know how to use Pion WebRTC.
+We try our best just to duplicate the Javascript API, so your code can look the same everywhere.
+
+If this is your first time using WebRTC, don't worry! We have multiple [examples](https://github.com/pion/webrtc/tree/master/examples) and [GoDoc](https://pkg.go.dev/github.com/pion/webrtc/v3)
+
+### Bring your own media
+Pion WebRTC doesn't make any assumptions about where your audio, video or text come from. You can use FFmpeg, GStreamer, MLT or just serve a video file.
+This library only serves to transport, not create media.
+
+### Safe
+Golang provides a great foundation to build safe network services.
+Especially when running a networked service that is highly concurrent bugs can be devastating.
+
+### Readable
+If code comes from an RFC we try to make sure everything is commented with a link to the spec.
+This makes learning and debugging easier, this WebRTC library was written to also serve as a guide for others.
+
+### Tested
+Every commit is tested via travis-ci Go provides fantastic facilities for testing, and more will be added as time goes on.
+
+### Shared libraries
+Every Pion project is built using shared libraries, allowing others to review and reuse our libraries.
+
+### Community
+The most important part of Pion is the community. This projects only exist because of individual contributions. We aim to be radically open and do everything we can to support those that make Pion possible.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/LICENSE
new file mode 100644
index 000000000..ab602974d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/README.md
new file mode 100644
index 000000000..8aafa709e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/README.md
@@ -0,0 +1,264 @@
+<h1 align="center">
+  <a href="https://pion.ly"><img src="./.github/pion-gopher-webrtc.png" alt="Pion WebRTC" height="250px"></a>
+  <br>
+  Pion WebRTC
+  <br>
+</h1>
+<h4 align="center">A pure Go implementation of the WebRTC API</h4>
+<p align="center">
+  <a href="https://pion.ly"><img src="https://img.shields.io/badge/pion-webrtc-gray.svg?longCache=true&colorB=brightgreen" alt="Pion webrtc"></a>
+  <a href="https://sourcegraph.com/github.com/pion/webrtc?badge"><img src="https://sourcegraph.com/github.com/pion/webrtc/-/badge.svg" alt="Sourcegraph Widget"></a>
+  <a href="https://pion.ly/slack"><img src="https://img.shields.io/badge/join-us%20on%20slack-gray.svg?longCache=true&logo=slack&colorB=brightgreen" alt="Slack Widget"></a>
+  <a href="https://twitter.com/_pion?ref_src=twsrc%5Etfw"><img src="https://img.shields.io/twitter/url.svg?label=Follow%20%40_pion&style=social&url=https%3A%2F%2Ftwitter.com%2F_pion" alt="Twitter Widget"></a>
+  <a href="https://github.com/pion/awesome-pion" alt="Awesome Pion"><img src="https://cdn.rawgit.com/sindresorhus/awesome/d7305f38d29fed78fa85652e3a63e154dd8e8829/media/badge.svg"></a>
+  <br>
+  <a href="https://travis-ci.org/pion/webrtc"><img src="https://travis-ci.org/pion/webrtc.svg?branch=master" alt="Build Status"></a>
+  <a href="https://pkg.go.dev/github.com/pion/webrtc/v3"><img src="https://pkg.go.dev/badge/github.com/pion/webrtc/v3" alt="PkgGoDev"></a>
+  <a href="https://codecov.io/gh/pion/webrtc"><img src="https://codecov.io/gh/pion/webrtc/branch/master/graph/badge.svg" alt="Coverage Status"></a>
+  <a href="https://goreportcard.com/report/github.com/pion/webrtc"><img src="https://goreportcard.com/badge/github.com/pion/webrtc" alt="Go Report Card"></a>
+  <a href="https://www.codacy.com/app/Sean-Der/webrtc"><img src="https://api.codacy.com/project/badge/Grade/18f4aec384894e6aac0b94effe51961d" alt="Codacy Badge"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+</p>
+<br>
+
+### New Release
+
+Pion WebRTC v3.0.0 has been released! See the [release notes](https://github.com/pion/webrtc/wiki/Release-WebRTC@v3.0.0) to learn about new features and breaking changes.
+
+If you aren't able to upgrade yet check the [tags](https://github.com/pion/webrtc/tags) for the latest `v2` release.
+
+We would love your feedback! Please create GitHub issues or join [the Slack channel](https://pion.ly/slack) to follow development and speak with the maintainers.
+
+----
+
+### Usage
+[Go Modules](https://blog.golang.org/using-go-modules) are mandatory for using Pion WebRTC. So make sure you set `export GO111MODULE=on`, and explicitly specify `/v2` or `/v3` when importing.
+
+
+**[example applications](examples/README.md)** contains code samples of common things people build with Pion WebRTC.
+
+**[example-webrtc-applications](https://github.com/pion/example-webrtc-applications)** contains more full featured examples that use 3rd party libraries.
+
+**[awesome-pion](https://github.com/pion/awesome-pion)** contains projects that have used Pion, and serve as real world examples of usage.
+
+**[GoDoc](https://pkg.go.dev/github.com/pion/webrtc/v3)** is an auto generated API reference. All our Public APIs are commented.
+
+**[FAQ](https://github.com/pion/webrtc/wiki/FAQ)** has answers to common questions. If you have a question not covered please ask in [Slack](https://pion.ly/slack) we are always looking to expand it.
+
+Now go build something awesome! Here are some **ideas** to get your creative juices flowing:
+* Send a video file to multiple browser in real time for perfectly synchronized movie watching.
+* Send a webcam on an embedded device to your browser with no additional server required!
+* Securely send data between two servers, without using pub/sub.
+* Record your webcam and do special effects server side.
+* Build a conferencing application that processes audio/video and make decisions off of it.
+* Remotely control a robots and stream its cameras in realtime.
+
+### Want to learn more about WebRTC?
+Check out [WebRTC for the Curious](https://webrtcforthecurious.com). A book about WebRTC in depth, not just about the APIs.
+Learn the full details of ICE, SCTP, DTLS, SRTP, and how they work together to make up the WebRTC stack.
+
+This is also a great resource if you are trying to debug. Learn the tools of the trade and how to approach WebRTC issues.
+
+This book is vendor agnostic and will not have any Pion specific information.
+
+### Features
+#### PeerConnection API
+* Go implementation of [webrtc-pc](https://w3c.github.io/webrtc-pc/) and [webrtc-stats](https://www.w3.org/TR/webrtc-stats/)
+* DataChannels
+* Send/Receive audio and video
+* Renegotiation
+* Plan-B and Unified Plan
+* [SettingEngine](https://pkg.go.dev/github.com/pion/webrtc/v3#SettingEngine) for Pion specific extensions
+
+
+#### Connectivity
+* Full ICE Agent
+* ICE Restart
+* Trickle ICE
+* STUN
+* TURN (UDP, TCP, DTLS and TLS)
+* mDNS candidates
+
+#### DataChannels
+* Ordered/Unordered
+* Lossy/Lossless
+
+#### Media
+* API with direct RTP/RTCP access
+* Opus, PCM, H264, VP8 and VP9 packetizer
+* API also allows developer to pass their own packetizer
+* IVF, Ogg, H264 and Matroska provided for easy sending and saving
+* [getUserMedia](https://github.com/pion/mediadevices) implementation (Requires Cgo)
+* Easy integration with x264, libvpx, GStreamer and ffmpeg.
+* [Simulcast](https://github.com/pion/webrtc/tree/master/examples/simulcast)
+* [SVC](https://github.com/pion/rtp/blob/master/codecs/vp9_packet.go#L138)
+* [NACK](https://github.com/pion/interceptor/pull/4)
+* Full loss recovery and congestion control is not complete, see [pion/interceptor](https://github.com/pion/interceptor) for progress
+  * See [ion](https://github.com/pion/ion-sfu/tree/master/pkg/buffer) for how an implementor can do it today
+
+#### Security
+* TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 and TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA for DTLS v1.2
+* SRTP_AEAD_AES_256_GCM and SRTP_AES128_CM_HMAC_SHA1_80 for SRTP
+* Hardware acceleration available for GCM suites
+
+#### Pure Go
+* No Cgo usage
+* Wide platform support
+  * Windows, macOS, Linux, FreeBSD
+  * iOS, Android
+  * [WASM](https://github.com/pion/webrtc/wiki/WebAssembly-Development-and-Testing) see [examples](examples/README.md#webassembly)
+  *  386, amd64, arm, mips, ppc64
+* Easy to build *Numbers generated on Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz*
+  * **Time to build examples/play-from-disk** - 0.66s user 0.20s system 306% cpu 0.279 total
+  * **Time to run entire test suite** - 25.60s user 9.40s system 45% cpu 1:16.69 total
+* Tools to measure performance [provided](https://github.com/pion/rtsp-bench)
+
+
+### Roadmap
+The library is in active development, please refer to the [roadmap](https://github.com/pion/webrtc/issues/9) to track our major milestones.
+We also maintain a list of [Big Ideas](https://github.com/pion/webrtc/wiki/Big-Ideas) these are things we want to build but don't have a clear plan or the resources yet.
+If you are looking to get involved this is a great place to get started! We would also love to hear your ideas! Even if you can't implement it yourself, it could inspire others.
+
+### Community
+Pion has an active community on the [Slack](https://pion.ly/slack).
+
+Follow the [Pion Twitter](https://twitter.com/_pion) for project updates and important WebRTC news.
+
+We are always looking to support **your projects**. Please reach out if you have something to build!
+If you need commercial support or don't want to use public methods you can contact us at [team@pion.ly](mailto:team@pion.ly)
+
+### Contributing
+Check out the **[contributing wiki](https://github.com/pion/webrtc/wiki/Contributing)** to join the group of amazing people making this project possible:
+
+* [John Bradley](https://github.com/kc5nra) - *Original Author*
+* [Michael Melvin Santry](https://github.com/santrym) - *Mascot*
+* [Raphael Randschau](https://github.com/nicolai86) - *STUN*
+* [Sean DuBois](https://github.com/Sean-Der) - *Original Author*
+* [Michiel De Backker](https://github.com/backkem) - *SDP, Public API, Project Management*
+* [Brendan Rius](https://github.com/brendanrius) - *Cleanup*
+* [Konstantin Itskov](https://github.com/trivigy) - *SDP Parsing*
+* [chenkaiC4](https://github.com/chenkaiC4) - *Fix GolangCI Linter*
+* [Ronan J](https://github.com/ronanj) - *Fix STCP PPID*
+* [wattanakorn495](https://github.com/wattanakorn495)
+* [Max Hawkins](https://github.com/maxhawkins) - *RTCP*
+* [Justin Okamoto](https://github.com/justinokamoto) - *Fix Docs*
+* [leeoxiang](https://github.com/notedit) - *Implement Janus examples*
+* [Denis](https://github.com/Hixon10) - *Adding docker-compose to pion-to-pion example*
+* [earle](https://github.com/aguilEA) - *Generate DTLS fingerprint in Go*
+* [Jake B](https://github.com/silbinarywolf) - *Fix Windows installation instructions*
+* [Michael MacDonald](https://github.com/mjmac) - *Plan B compatibility, Remote TURN/Trickle-ICE, Logging framework*
+* [Oleg Kovalov](https://github.com/cristaloleg) *Use wildcards instead of hardcoding travis-ci config*
+* [Woodrow Douglass](https://github.com/wdouglass) *RTCP, RTP improvements, G.722 support, Bugfixes*
+* [Tobias Fridén](https://github.com/tobiasfriden) *SRTP authentication verification*
+* [Yutaka Takeda](https://github.com/enobufs) *Fix ICE connection timeout*
+* [Hugo Arregui](https://github.com/hugoArregui) *Fix connection timeout*
+* [Rob Deutsch](https://github.com/rob-deutsch) *RTPReceiver graceful shutdown*
+* [Jin Lei](https://github.com/jinleileiking) - *SFU example use http*
+* [Will Watson](https://github.com/wwatson) - *Enable gocritic*
+* [Luke Curley](https://github.com/kixelated)
+* [Antoine Baché](https://github.com/Antonito) - *OGG Opus export*
+* [frank](https://github.com/feixiao) - *Building examples on OSX*
+* [mxmCherry](https://github.com/mxmCherry)
+* [Alex Browne](https://github.com/albrow) - *JavaScript/Wasm bindings*
+* [adwpc](https://github.com/adwpc) - *SFU example with websocket*
+* [imalic3](https://github.com/imalic3) - *SFU websocket example with datachannel broadcast*
+* [Žiga Željko](https://github.com/zigazeljko)
+* [Simonacca Fotokite](https://github.com/simonacca-fotokite)
+* [Marouane](https://github.com/nindolabs) *Fix Offer bundle generation*
+* [Christopher Fry](https://github.com/christopherfry)
+* [Adam Kiss](https://github.com/masterada)
+* [xsbchen](https://github.com/xsbchen)
+* [Alex Harford](https://github.com/alexjh)
+* [Aleksandr Razumov](https://github.com/ernado)
+* [mchlrhw](https://github.com/mchlrhw)
+* [AlexWoo(武杰)](https://github.com/AlexWoo) *Fix RemoteDescription parsing for certificate fingerprint*
+* [Cecylia Bocovich](https://github.com/cohosh)
+* [Slugalisk](https://github.com/slugalisk)
+* [Agugua Kenechukwu](https://github.com/spaceCh1mp)
+* [Ato Araki](https://github.com/atotto)
+* [Rafael Viscarra](https://github.com/rviscarra)
+* [Mike Coleman](https://github.com/fivebats)
+* [Suhas Gaddam](https://github.com/suhasgaddam)
+* [Atsushi Watanabe](https://github.com/at-wat)
+* [Robert Eperjesi](https://github.com/epes)
+* [Aaron France](https://github.com/AeroNotix)
+* [Gareth Hayes](https://github.com/gazhayes)
+* [Sebastian Waisbrot](https://github.com/seppo0010)
+* [Masataka Hisasue](https://github.com/sylba2050) - *Fix Docs*
+* [Hongchao Ma(马洪超)](https://github.com/hcm007)
+* [Aaron France](https://github.com/AeroNotix)
+* [Chris Hiszpanski](https://github.com/thinkski) - *Fix Answer bundle generation*
+* [Vicken Simonian](https://github.com/vsimon)
+* [Guilherme Souza](https://github.com/gqgs)
+* [Andrew N. Shalaev](https://github.com/isqad)
+* [David Hamilton](https://github.com/dihamilton)
+* [Ilya Mayorov](https://github.com/faroyam)
+* [Patrick Lange](https://github.com/langep)
+* [cyannuk](https://github.com/cyannuk)
+* [Lukas Herman](https://github.com/lherman-cs)
+* [Konstantin Chugalinskiy](https://github.com/kchugalinskiy)
+* [Bao Nguyen](https://github.com/sysbot)
+* [Luke S](https://github.com/encounter)
+* [Hendrik Hofstadt](https://github.com/hendrikhofstadt)
+* [Clayton McCray](https://github.com/ClaytonMcCray)
+* [lawl](https://github.com/lawl)
+* [Jorropo](https://github.com/Jorropo)
+* [Akil](https://github.com/akilude)
+* [Quentin Renard](https://github.com/asticode)
+* [opennota](https://github.com/opennota)
+* [Simon Eisenmann](https://github.com/longsleep)
+* [Ben Weitzman](https://github.com/benweitzman)
+* [Masahiro Nakamura](https://github.com/tsuu32)
+* [Tarrence van As](https://github.com/tarrencev)
+* [Yuki Igarashi](https://github.com/bonprosoft)
+* [Egon Elbre](https://github.com/egonelbre)
+* [Jerko Steiner](https://github.com/jeremija)
+* [Roman Romanenko](https://github.com/r-novel)
+* [YongXin SHI](https://github.com/a-wing)
+* [Magnus Wahlstrand](https://github.com/kyeett)
+* [Chad Retz](https://github.com/cretz)
+* [Simone Gotti](https://github.com/sgotti)
+* [Cedric Fung](https://github.com/cedricfung)
+* [Norman Rasmussen](https://github.com/normanr) - *Fix Empty DataChannel messages*
+* [salmān aljammāz](https://github.com/saljam)
+* [cnderrauber](https://github.com/cnderrauber)
+* [Juliusz Chroboczek](https://github.com/jech)
+* [John Berthels](https://github.com/jbert)
+* [Somers Matthews](https://github.com/somersbmatthews)
+* [Vitaliy F](https://github.com/funvit)
+* [Ivan Egorov](https://github.com/vany-egorov)
+* [Nick Mykins](https://github.com/nmyk)
+* [Jason Brady](https://github.com/jbrady42)
+* [krishna chiatanya](https://github.com/kittuov)
+* [JacobZwang](https://github.com/JacobZwang)
+* [박종훈](https://github.com/JonghunBok)
+* [Sam Lancia](https://github.com/nerd2)
+* [Henry](https://github.com/cryptix)
+* [Jeff Tchang](https://github.com/tachang)
+* [JooYoung Lim](https://github.com/DevRockstarZ)
+* [Sidney San Martín](https://github.com/s4y)
+* [soolaugust](https://github.com/soolaugust)
+* [Kuzmin Vladimir](https://github.com/tekig)
+* [Alessandro Ros](https://github.com/aler9)
+* [Thomas Miller](https://github.com/tmiv)
+* [yoko(q191201771)](https://github.com/q191201771)
+* [Joshua Obasaju](https://github.com/obasajujoshua31)
+* [Mission Liao](https://github.com/mission-liao)
+* [Hanjun Kim](https://github.com/hallazzang)
+* [ZHENK](https://github.com/scorpionknifes)
+* [Rahul Nakre](https://github.com/rahulnakre)
+* [OrlandoCo](https://github.com/OrlandoCo)
+* [Assad Obaid](https://github.com/assadobaid)
+* [Jamie Good](https://github.com/jamiegood) - *Bug fix in jsfiddle example*
+* [Artur Shellunts](https://github.com/ashellunts)
+* [Sean Knight](https://github.com/SeanKnight)
+* [o0olele](https://github.com/o0olele)
+* [Bo Shi](https://github.com/bshimc)
+* [Suzuki Takeo](https://github.com/BambooTuna)
+* [baiyufei](https://github.com/baiyufei)
+* [pascal-ace](https://github.com/pascal-ace)
+* [Threadnaught](https://github.com/Threadnaught)
+* [Dean Eigenmann](https://github.com/decanus)
+
+### License
+MIT License - see [LICENSE](LICENSE) for full text
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/api.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/api.go
new file mode 100644
index 000000000..60ac72809
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/api.go
@@ -0,0 +1,73 @@
+// +build !js
+
+package webrtc
+
+import (
+	"github.com/pion/interceptor"
+	"github.com/pion/logging"
+)
+
+// API bundles the global functions of the WebRTC and ORTC API.
+// Some of these functions are also exported globally using the
+// defaultAPI object. Note that the global version of the API
+// may be phased out in the future.
+type API struct {
+	settingEngine *SettingEngine
+	mediaEngine   *MediaEngine
+	interceptor   interceptor.Interceptor
+}
+
+// NewAPI Creates a new API object for keeping semi-global settings to WebRTC objects
+func NewAPI(options ...func(*API)) *API {
+	a := &API{}
+
+	for _, o := range options {
+		o(a)
+	}
+
+	if a.settingEngine == nil {
+		a.settingEngine = &SettingEngine{}
+	}
+
+	if a.settingEngine.LoggerFactory == nil {
+		a.settingEngine.LoggerFactory = logging.NewDefaultLoggerFactory()
+	}
+
+	if a.mediaEngine == nil {
+		a.mediaEngine = &MediaEngine{}
+	}
+
+	if a.interceptor == nil {
+		a.interceptor = &interceptor.NoOp{}
+	}
+
+	return a
+}
+
+// WithMediaEngine allows providing a MediaEngine to the API.
+// Settings can be changed after passing the engine to an API.
+func WithMediaEngine(m *MediaEngine) func(a *API) {
+	return func(a *API) {
+		if m != nil {
+			a.mediaEngine = m
+		} else {
+			a.mediaEngine = &MediaEngine{}
+		}
+	}
+}
+
+// WithSettingEngine allows providing a SettingEngine to the API.
+// Settings should not be changed after passing the engine to an API.
+func WithSettingEngine(s SettingEngine) func(a *API) {
+	return func(a *API) {
+		a.settingEngine = &s
+	}
+}
+
+// WithInterceptorRegistry allows providing Interceptors to the API.
+// Settings should not be changed after passing the registry to an API.
+func WithInterceptorRegistry(interceptorRegistry *interceptor.Registry) func(a *API) {
+	return func(a *API) {
+		a.interceptor = interceptorRegistry.Build()
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/api_js.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/api_js.go
new file mode 100644
index 000000000..964b7b05e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/api_js.go
@@ -0,0 +1,31 @@
+// +build js,wasm
+
+package webrtc
+
+// API bundles the global funcions of the WebRTC and ORTC API.
+type API struct {
+	settingEngine *SettingEngine
+}
+
+// NewAPI Creates a new API object for keeping semi-global settings to WebRTC objects
+func NewAPI(options ...func(*API)) *API {
+	a := &API{}
+
+	for _, o := range options {
+		o(a)
+	}
+
+	if a.settingEngine == nil {
+		a.settingEngine = &SettingEngine{}
+	}
+
+	return a
+}
+
+// WithSettingEngine allows providing a SettingEngine to the API.
+// Settings should not be changed after passing the engine to an API.
+func WithSettingEngine(s SettingEngine) func(a *API) {
+	return func(a *API) {
+		a.settingEngine = &s
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/atomicbool.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/atomicbool.go
new file mode 100644
index 000000000..c5ace62d0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/atomicbool.go
@@ -0,0 +1,20 @@
+package webrtc
+
+import "sync/atomic"
+
+type atomicBool struct {
+	val int32
+}
+
+func (b *atomicBool) set(value bool) { // nolint: unparam
+	var i int32
+	if value {
+		i = 1
+	}
+
+	atomic.StoreInt32(&(b.val), i)
+}
+
+func (b *atomicBool) get() bool {
+	return atomic.LoadInt32(&(b.val)) != 0
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/bundlepolicy.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/bundlepolicy.go
new file mode 100644
index 000000000..6d39a2773
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/bundlepolicy.go
@@ -0,0 +1,78 @@
+package webrtc
+
+import (
+	"encoding/json"
+)
+
+// BundlePolicy affects which media tracks are negotiated if the remote
+// endpoint is not bundle-aware, and what ICE candidates are gathered. If the
+// remote endpoint is bundle-aware, all media tracks and data channels are
+// bundled onto the same transport.
+type BundlePolicy int
+
+const (
+	// BundlePolicyBalanced indicates to gather ICE candidates for each
+	// media type in use (audio, video, and data). If the remote endpoint is
+	// not bundle-aware, negotiate only one audio and video track on separate
+	// transports.
+	BundlePolicyBalanced BundlePolicy = iota + 1
+
+	// BundlePolicyMaxCompat indicates to gather ICE candidates for each
+	// track. If the remote endpoint is not bundle-aware, negotiate all media
+	// tracks on separate transports.
+	BundlePolicyMaxCompat
+
+	// BundlePolicyMaxBundle indicates to gather ICE candidates for only
+	// one track. If the remote endpoint is not bundle-aware, negotiate only
+	// one media track.
+	BundlePolicyMaxBundle
+)
+
+// This is done this way because of a linter.
+const (
+	bundlePolicyBalancedStr  = "balanced"
+	bundlePolicyMaxCompatStr = "max-compat"
+	bundlePolicyMaxBundleStr = "max-bundle"
+)
+
+func newBundlePolicy(raw string) BundlePolicy {
+	switch raw {
+	case bundlePolicyBalancedStr:
+		return BundlePolicyBalanced
+	case bundlePolicyMaxCompatStr:
+		return BundlePolicyMaxCompat
+	case bundlePolicyMaxBundleStr:
+		return BundlePolicyMaxBundle
+	default:
+		return BundlePolicy(Unknown)
+	}
+}
+
+func (t BundlePolicy) String() string {
+	switch t {
+	case BundlePolicyBalanced:
+		return bundlePolicyBalancedStr
+	case BundlePolicyMaxCompat:
+		return bundlePolicyMaxCompatStr
+	case BundlePolicyMaxBundle:
+		return bundlePolicyMaxBundleStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
+
+// UnmarshalJSON parses the JSON-encoded data and stores the result
+func (t *BundlePolicy) UnmarshalJSON(b []byte) error {
+	var val string
+	if err := json.Unmarshal(b, &val); err != nil {
+		return err
+	}
+
+	*t = newBundlePolicy(val)
+	return nil
+}
+
+// MarshalJSON returns the JSON encoding
+func (t BundlePolicy) MarshalJSON() ([]byte, error) {
+	return json.Marshal(t.String())
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/certificate.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/certificate.go
new file mode 100644
index 000000000..bf106d6af
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/certificate.go
@@ -0,0 +1,185 @@
+// +build !js
+
+package webrtc
+
+import (
+	"crypto"
+	"crypto/ecdsa"
+	"crypto/rand"
+	"crypto/rsa"
+	"crypto/x509"
+	"crypto/x509/pkix"
+	"encoding/base64"
+	"encoding/hex"
+	"fmt"
+	"math/big"
+	"time"
+
+	"github.com/pion/dtls/v2/pkg/crypto/fingerprint"
+	"github.com/pion/webrtc/v3/pkg/rtcerr"
+)
+
+// Certificate represents a x509Cert used to authenticate WebRTC communications.
+type Certificate struct {
+	privateKey crypto.PrivateKey
+	x509Cert   *x509.Certificate
+	statsID    string
+}
+
+// NewCertificate generates a new x509 compliant Certificate to be used
+// by DTLS for encrypting data sent over the wire. This method differs from
+// GenerateCertificate by allowing to specify a template x509.Certificate to
+// be used in order to define certificate parameters.
+func NewCertificate(key crypto.PrivateKey, tpl x509.Certificate) (*Certificate, error) {
+	var err error
+	var certDER []byte
+	switch sk := key.(type) {
+	case *rsa.PrivateKey:
+		pk := sk.Public()
+		tpl.SignatureAlgorithm = x509.SHA256WithRSA
+		certDER, err = x509.CreateCertificate(rand.Reader, &tpl, &tpl, pk, sk)
+		if err != nil {
+			return nil, &rtcerr.UnknownError{Err: err}
+		}
+	case *ecdsa.PrivateKey:
+		pk := sk.Public()
+		tpl.SignatureAlgorithm = x509.ECDSAWithSHA256
+		certDER, err = x509.CreateCertificate(rand.Reader, &tpl, &tpl, pk, sk)
+		if err != nil {
+			return nil, &rtcerr.UnknownError{Err: err}
+		}
+	default:
+		return nil, &rtcerr.NotSupportedError{Err: ErrPrivateKeyType}
+	}
+
+	cert, err := x509.ParseCertificate(certDER)
+	if err != nil {
+		return nil, &rtcerr.UnknownError{Err: err}
+	}
+
+	return &Certificate{privateKey: key, x509Cert: cert, statsID: fmt.Sprintf("certificate-%d", time.Now().UnixNano())}, nil
+}
+
+// Equals determines if two certificates are identical by comparing both the
+// secretKeys and x509Certificates.
+func (c Certificate) Equals(o Certificate) bool {
+	switch cSK := c.privateKey.(type) {
+	case *rsa.PrivateKey:
+		if oSK, ok := o.privateKey.(*rsa.PrivateKey); ok {
+			if cSK.N.Cmp(oSK.N) != 0 {
+				return false
+			}
+			return c.x509Cert.Equal(o.x509Cert)
+		}
+		return false
+	case *ecdsa.PrivateKey:
+		if oSK, ok := o.privateKey.(*ecdsa.PrivateKey); ok {
+			if cSK.X.Cmp(oSK.X) != 0 || cSK.Y.Cmp(oSK.Y) != 0 {
+				return false
+			}
+			return c.x509Cert.Equal(o.x509Cert)
+		}
+		return false
+	default:
+		return false
+	}
+}
+
+// Expires returns the timestamp after which this certificate is no longer valid.
+func (c Certificate) Expires() time.Time {
+	if c.x509Cert == nil {
+		return time.Time{}
+	}
+	return c.x509Cert.NotAfter
+}
+
+// GetFingerprints returns the list of certificate fingerprints, one of which
+// is computed with the digest algorithm used in the certificate signature.
+func (c Certificate) GetFingerprints() ([]DTLSFingerprint, error) {
+	fingerprintAlgorithms := []crypto.Hash{crypto.SHA256}
+	res := make([]DTLSFingerprint, len(fingerprintAlgorithms))
+
+	i := 0
+	for _, algo := range fingerprintAlgorithms {
+		name, err := fingerprint.StringFromHash(algo)
+		if err != nil {
+			return nil, fmt.Errorf("%w: %v", ErrFailedToGenerateCertificateFingerprint, err)
+		}
+		value, err := fingerprint.Fingerprint(c.x509Cert, algo)
+		if err != nil {
+			return nil, fmt.Errorf("%w: %v", ErrFailedToGenerateCertificateFingerprint, err)
+		}
+		res[i] = DTLSFingerprint{
+			Algorithm: name,
+			Value:     value,
+		}
+	}
+
+	return res[:i+1], nil
+}
+
+// GenerateCertificate causes the creation of an X.509 certificate and
+// corresponding private key.
+func GenerateCertificate(secretKey crypto.PrivateKey) (*Certificate, error) {
+	origin := make([]byte, 16)
+	/* #nosec */
+	if _, err := rand.Read(origin); err != nil {
+		return nil, &rtcerr.UnknownError{Err: err}
+	}
+
+	// Max random value, a 130-bits integer, i.e 2^130 - 1
+	maxBigInt := new(big.Int)
+	/* #nosec */
+	maxBigInt.Exp(big.NewInt(2), big.NewInt(130), nil).Sub(maxBigInt, big.NewInt(1))
+	/* #nosec */
+	serialNumber, err := rand.Int(rand.Reader, maxBigInt)
+	if err != nil {
+		return nil, &rtcerr.UnknownError{Err: err}
+	}
+
+	return NewCertificate(secretKey, x509.Certificate{
+		ExtKeyUsage: []x509.ExtKeyUsage{
+			x509.ExtKeyUsageClientAuth,
+			x509.ExtKeyUsageServerAuth,
+		},
+		BasicConstraintsValid: true,
+		NotBefore:             time.Now(),
+		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature,
+		NotAfter:              time.Now().AddDate(0, 1, 0),
+		SerialNumber:          serialNumber,
+		Version:               2,
+		Subject:               pkix.Name{CommonName: hex.EncodeToString(origin)},
+		IsCA:                  true,
+	})
+}
+
+// CertificateFromX509 creates a new WebRTC Certificate from a given PrivateKey and Certificate
+//
+// This can be used if you want to share a certificate across multiple PeerConnections
+func CertificateFromX509(privateKey crypto.PrivateKey, certificate *x509.Certificate) Certificate {
+	return Certificate{privateKey, certificate, fmt.Sprintf("certificate-%d", time.Now().UnixNano())}
+}
+
+func (c Certificate) collectStats(report *statsReportCollector) error {
+	report.Collecting()
+
+	fingerPrintAlgo, err := c.GetFingerprints()
+	if err != nil {
+		return err
+	}
+
+	base64Certificate := base64.RawURLEncoding.EncodeToString(c.x509Cert.Raw)
+
+	stats := CertificateStats{
+		Timestamp:            statsTimestampFrom(time.Now()),
+		Type:                 StatsTypeCertificate,
+		ID:                   c.statsID,
+		Fingerprint:          fingerPrintAlgo[0].Value,
+		FingerprintAlgorithm: fingerPrintAlgo[0].Algorithm,
+		Base64Certificate:    base64Certificate,
+		IssuerCertificateID:  c.x509Cert.Issuer.String(),
+	}
+
+	report.Collect(stats.ID, stats)
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/codecov.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/codecov.yml
new file mode 100644
index 000000000..085200a48
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/codecov.yml
@@ -0,0 +1,20 @@
+#
+# DO NOT EDIT THIS FILE
+#
+# It is automatically copied from https://github.com/pion/.goassets repository.
+#
+
+coverage:
+  status:
+    project:
+      default:
+        # Allow decreasing 2% of total coverage to avoid noise.
+        threshold: 2%
+    patch:
+      default:
+        target: 70%
+        only_pulls: true
+
+ignore:
+  - "examples/*"
+  - "examples/**/*"
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/configuration.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/configuration.go
new file mode 100644
index 000000000..056fec5f0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/configuration.go
@@ -0,0 +1,51 @@
+// +build !js
+
+package webrtc
+
+// A Configuration defines how peer-to-peer communication via PeerConnection
+// is established or re-established.
+// Configurations may be set up once and reused across multiple connections.
+// Configurations are treated as readonly. As long as they are unmodified,
+// they are safe for concurrent use.
+type Configuration struct {
+	// ICEServers defines a slice describing servers available to be used by
+	// ICE, such as STUN and TURN servers.
+	ICEServers []ICEServer `json:"iceServers,omitempty"`
+
+	// ICETransportPolicy indicates which candidates the ICEAgent is allowed
+	// to use.
+	ICETransportPolicy ICETransportPolicy `json:"iceTransportPolicy,omitempty"`
+
+	// BundlePolicy indicates which media-bundling policy to use when gathering
+	// ICE candidates.
+	BundlePolicy BundlePolicy `json:"bundlePolicy,omitempty"`
+
+	// RTCPMuxPolicy indicates which rtcp-mux policy to use when gathering ICE
+	// candidates.
+	RTCPMuxPolicy RTCPMuxPolicy `json:"rtcpMuxPolicy,omitempty"`
+
+	// PeerIdentity sets the target peer identity for the PeerConnection.
+	// The PeerConnection will not establish a connection to a remote peer
+	// unless it can be successfully authenticated with the provided name.
+	PeerIdentity string `json:"peerIdentity"`
+
+	// Certificates describes a set of certificates that the PeerConnection
+	// uses to authenticate. Valid values for this parameter are created
+	// through calls to the GenerateCertificate function. Although any given
+	// DTLS connection will use only one certificate, this attribute allows the
+	// caller to provide multiple certificates that support different
+	// algorithms. The final certificate will be selected based on the DTLS
+	// handshake, which establishes which certificates are allowed. The
+	// PeerConnection implementation selects which of the certificates is
+	// used for a given connection; how certificates are selected is outside
+	// the scope of this specification. If this value is absent, then a default
+	// set of certificates is generated for each PeerConnection instance.
+	Certificates []Certificate `json:"certificates,omitempty"`
+
+	// ICECandidatePoolSize describes the size of the prefetched ICE pool.
+	ICECandidatePoolSize uint8 `json:"iceCandidatePoolSize,omitempty"`
+
+	// SDPSemantics controls the type of SDP offers accepted by and
+	// SDP answers generated by the PeerConnection.
+	SDPSemantics SDPSemantics `json:"sdpSemantics,omitempty"`
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/configuration_common.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/configuration_common.go
new file mode 100644
index 000000000..92fc22831
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/configuration_common.go
@@ -0,0 +1,24 @@
+package webrtc
+
+import "strings"
+
+// getICEServers side-steps the strict parsing mode of the ice package
+// (as defined in https://tools.ietf.org/html/rfc7064) by copying and then
+// stripping any erroneous queries from "stun(s):" URLs before parsing.
+func (c Configuration) getICEServers() []ICEServer {
+	iceServers := append([]ICEServer{}, c.ICEServers...)
+
+	for iceServersIndex := range iceServers {
+		iceServers[iceServersIndex].URLs = append([]string{}, iceServers[iceServersIndex].URLs...)
+
+		for urlsIndex, rawURL := range iceServers[iceServersIndex].URLs {
+			if strings.HasPrefix(rawURL, "stun") {
+				// strip the query from "stun(s):" if present
+				parts := strings.Split(rawURL, "?")
+				rawURL = parts[0]
+			}
+			iceServers[iceServersIndex].URLs[urlsIndex] = rawURL
+		}
+	}
+	return iceServers
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/configuration_js.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/configuration_js.go
new file mode 100644
index 000000000..44ab9f3c5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/configuration_js.go
@@ -0,0 +1,35 @@
+// +build js,wasm
+
+package webrtc
+
+// Configuration defines a set of parameters to configure how the
+// peer-to-peer communication via PeerConnection is established or
+// re-established.
+type Configuration struct {
+	// ICEServers defines a slice describing servers available to be used by
+	// ICE, such as STUN and TURN servers.
+	ICEServers []ICEServer
+
+	// ICETransportPolicy indicates which candidates the ICEAgent is allowed
+	// to use.
+	ICETransportPolicy ICETransportPolicy
+
+	// BundlePolicy indicates which media-bundling policy to use when gathering
+	// ICE candidates.
+	BundlePolicy BundlePolicy
+
+	// RTCPMuxPolicy indicates which rtcp-mux policy to use when gathering ICE
+	// candidates.
+	RTCPMuxPolicy RTCPMuxPolicy
+
+	// PeerIdentity sets the target peer identity for the PeerConnection.
+	// The PeerConnection will not establish a connection to a remote peer
+	// unless it can be successfully authenticated with the provided name.
+	PeerIdentity string
+
+	// Certificates are not supported in the JavaScript/Wasm bindings.
+	// Certificates []Certificate
+
+	// ICECandidatePoolSize describes the size of the prefetched ICE pool.
+	ICECandidatePoolSize uint8
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/constants.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/constants.go
new file mode 100644
index 000000000..79d759ae8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/constants.go
@@ -0,0 +1,25 @@
+package webrtc
+
+const (
+	// Unknown defines default public constant to use for "enum" like struct
+	// comparisons when no value was defined.
+	Unknown    = iota
+	unknownStr = "unknown"
+	ssrcStr    = "ssrc"
+
+	// Equal to UDP MTU
+	receiveMTU = 1460
+
+	// simulcastProbeCount is the amount of RTP Packets
+	// that handleUndeclaredSSRC will read and try to dispatch from
+	// mid and rid values
+	simulcastProbeCount = 10
+
+	// simulcastMaxProbeRoutines is how many active routines can be used to probe
+	// If the total amount of incoming SSRCes exceeds this new requests will be ignored
+	simulcastMaxProbeRoutines = 25
+
+	mediaSectionApplication = "application"
+
+	rtpOutboundMTU = 1200
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannel.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannel.go
new file mode 100644
index 000000000..f391e7f2f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannel.go
@@ -0,0 +1,597 @@
+// +build !js
+
+package webrtc
+
+import (
+	"errors"
+	"fmt"
+	"io"
+	"math"
+	"sync"
+	"sync/atomic"
+	"time"
+
+	"github.com/pion/datachannel"
+	"github.com/pion/logging"
+	"github.com/pion/webrtc/v3/pkg/rtcerr"
+)
+
+const dataChannelBufferSize = math.MaxUint16 // message size limit for Chromium
+var errSCTPNotEstablished = errors.New("SCTP not established")
+
+// DataChannel represents a WebRTC DataChannel
+// The DataChannel interface represents a network channel
+// which can be used for bidirectional peer-to-peer transfers of arbitrary data
+type DataChannel struct {
+	mu sync.RWMutex
+
+	statsID                    string
+	label                      string
+	ordered                    bool
+	maxPacketLifeTime          *uint16
+	maxRetransmits             *uint16
+	protocol                   string
+	negotiated                 bool
+	id                         *uint16
+	readyState                 atomic.Value // DataChannelState
+	bufferedAmountLowThreshold uint64
+	detachCalled               bool
+
+	// The binaryType represents attribute MUST, on getting, return the value to
+	// which it was last set. On setting, if the new value is either the string
+	// "blob" or the string "arraybuffer", then set the IDL attribute to this
+	// new value. Otherwise, throw a SyntaxError. When an DataChannel object
+	// is created, the binaryType attribute MUST be initialized to the string
+	// "blob". This attribute controls how binary data is exposed to scripts.
+	// binaryType                 string
+
+	onMessageHandler    func(DataChannelMessage)
+	openHandlerOnce     sync.Once
+	onOpenHandler       func()
+	onCloseHandler      func()
+	onBufferedAmountLow func()
+	onErrorHandler      func(error)
+
+	sctpTransport *SCTPTransport
+	dataChannel   *datachannel.DataChannel
+
+	// A reference to the associated api object used by this datachannel
+	api *API
+	log logging.LeveledLogger
+}
+
+// NewDataChannel creates a new DataChannel.
+// This constructor is part of the ORTC API. It is not
+// meant to be used together with the basic WebRTC API.
+func (api *API) NewDataChannel(transport *SCTPTransport, params *DataChannelParameters) (*DataChannel, error) {
+	d, err := api.newDataChannel(params, api.settingEngine.LoggerFactory.NewLogger("ortc"))
+	if err != nil {
+		return nil, err
+	}
+
+	err = d.open(transport)
+	if err != nil {
+		return nil, err
+	}
+
+	return d, nil
+}
+
+// newDataChannel is an internal constructor for the data channel used to
+// create the DataChannel object before the networking is set up.
+func (api *API) newDataChannel(params *DataChannelParameters, log logging.LeveledLogger) (*DataChannel, error) {
+	// https://w3c.github.io/webrtc-pc/#peer-to-peer-data-api (Step #5)
+	if len(params.Label) > 65535 {
+		return nil, &rtcerr.TypeError{Err: ErrStringSizeLimit}
+	}
+
+	d := &DataChannel{
+		statsID:           fmt.Sprintf("DataChannel-%d", time.Now().UnixNano()),
+		label:             params.Label,
+		protocol:          params.Protocol,
+		negotiated:        params.Negotiated,
+		id:                params.ID,
+		ordered:           params.Ordered,
+		maxPacketLifeTime: params.MaxPacketLifeTime,
+		maxRetransmits:    params.MaxRetransmits,
+		api:               api,
+		log:               log,
+	}
+
+	d.setReadyState(DataChannelStateConnecting)
+	return d, nil
+}
+
+// open opens the datachannel over the sctp transport
+func (d *DataChannel) open(sctpTransport *SCTPTransport) error {
+	d.mu.Lock()
+	if d.sctpTransport != nil {
+		// already open
+		d.mu.Unlock()
+		return nil
+	}
+	d.sctpTransport = sctpTransport
+
+	if err := d.ensureSCTP(); err != nil {
+		d.mu.Unlock()
+		return err
+	}
+
+	var channelType datachannel.ChannelType
+	var reliabilityParameter uint32
+
+	switch {
+	case d.maxPacketLifeTime == nil && d.maxRetransmits == nil:
+		if d.ordered {
+			channelType = datachannel.ChannelTypeReliable
+		} else {
+			channelType = datachannel.ChannelTypeReliableUnordered
+		}
+
+	case d.maxRetransmits != nil:
+		reliabilityParameter = uint32(*d.maxRetransmits)
+		if d.ordered {
+			channelType = datachannel.ChannelTypePartialReliableRexmit
+		} else {
+			channelType = datachannel.ChannelTypePartialReliableRexmitUnordered
+		}
+	default:
+		reliabilityParameter = uint32(*d.maxPacketLifeTime)
+		if d.ordered {
+			channelType = datachannel.ChannelTypePartialReliableTimed
+		} else {
+			channelType = datachannel.ChannelTypePartialReliableTimedUnordered
+		}
+	}
+
+	cfg := &datachannel.Config{
+		ChannelType:          channelType,
+		Priority:             datachannel.ChannelPriorityNormal,
+		ReliabilityParameter: reliabilityParameter,
+		Label:                d.label,
+		Protocol:             d.protocol,
+		Negotiated:           d.negotiated,
+		LoggerFactory:        d.api.settingEngine.LoggerFactory,
+	}
+
+	if d.id == nil {
+		err := d.sctpTransport.generateAndSetDataChannelID(d.sctpTransport.dtlsTransport.role(), &d.id)
+		if err != nil {
+			return err
+		}
+	}
+
+	dc, err := datachannel.Dial(d.sctpTransport.association, *d.id, cfg)
+	if err != nil {
+		d.mu.Unlock()
+		return err
+	}
+
+	// bufferedAmountLowThreshold and onBufferedAmountLow might be set earlier
+	dc.SetBufferedAmountLowThreshold(d.bufferedAmountLowThreshold)
+	dc.OnBufferedAmountLow(d.onBufferedAmountLow)
+	d.mu.Unlock()
+
+	d.handleOpen(dc)
+	return nil
+}
+
+func (d *DataChannel) ensureSCTP() error {
+	if d.sctpTransport == nil {
+		return errSCTPNotEstablished
+	}
+
+	d.sctpTransport.lock.RLock()
+	defer d.sctpTransport.lock.RUnlock()
+	if d.sctpTransport.association == nil {
+		return errSCTPNotEstablished
+	}
+	return nil
+}
+
+// Transport returns the SCTPTransport instance the DataChannel is sending over.
+func (d *DataChannel) Transport() *SCTPTransport {
+	d.mu.RLock()
+	defer d.mu.RUnlock()
+
+	return d.sctpTransport
+}
+
+// After onOpen is complete check that the user called detach
+// and provide an error message if the call was missed
+func (d *DataChannel) checkDetachAfterOpen() {
+	d.mu.RLock()
+	defer d.mu.RUnlock()
+
+	if d.api.settingEngine.detach.DataChannels && !d.detachCalled {
+		d.log.Warn("webrtc.DetachDataChannels() enabled but didn't Detach, call Detach from OnOpen")
+	}
+}
+
+// OnOpen sets an event handler which is invoked when
+// the underlying data transport has been established (or re-established).
+func (d *DataChannel) OnOpen(f func()) {
+	d.mu.Lock()
+	d.openHandlerOnce = sync.Once{}
+	d.onOpenHandler = f
+	d.mu.Unlock()
+
+	if d.ReadyState() == DataChannelStateOpen {
+		// If the data channel is already open, call the handler immediately.
+		go d.openHandlerOnce.Do(func() {
+			f()
+			d.checkDetachAfterOpen()
+		})
+	}
+}
+
+func (d *DataChannel) onOpen() {
+	d.mu.RLock()
+	handler := d.onOpenHandler
+	d.mu.RUnlock()
+
+	if handler != nil {
+		go d.openHandlerOnce.Do(func() {
+			handler()
+			d.checkDetachAfterOpen()
+		})
+	}
+}
+
+// OnClose sets an event handler which is invoked when
+// the underlying data transport has been closed.
+func (d *DataChannel) OnClose(f func()) {
+	d.mu.Lock()
+	defer d.mu.Unlock()
+	d.onCloseHandler = f
+}
+
+func (d *DataChannel) onClose() {
+	d.mu.RLock()
+	handler := d.onCloseHandler
+	d.mu.RUnlock()
+
+	if handler != nil {
+		go handler()
+	}
+}
+
+// OnMessage sets an event handler which is invoked on a binary
+// message arrival over the sctp transport from a remote peer.
+// OnMessage can currently receive messages up to 16384 bytes
+// in size. Check out the detach API if you want to use larger
+// message sizes. Note that browser support for larger messages
+// is also limited.
+func (d *DataChannel) OnMessage(f func(msg DataChannelMessage)) {
+	d.mu.Lock()
+	defer d.mu.Unlock()
+	d.onMessageHandler = f
+}
+
+func (d *DataChannel) onMessage(msg DataChannelMessage) {
+	d.mu.RLock()
+	handler := d.onMessageHandler
+	d.mu.RUnlock()
+
+	if handler == nil {
+		return
+	}
+	handler(msg)
+}
+
+func (d *DataChannel) handleOpen(dc *datachannel.DataChannel) {
+	d.mu.Lock()
+	d.dataChannel = dc
+	d.mu.Unlock()
+	d.setReadyState(DataChannelStateOpen)
+
+	d.onOpen()
+
+	d.mu.Lock()
+	defer d.mu.Unlock()
+
+	if !d.api.settingEngine.detach.DataChannels {
+		go d.readLoop()
+	}
+}
+
+// OnError sets an event handler which is invoked when
+// the underlying data transport cannot be read.
+func (d *DataChannel) OnError(f func(err error)) {
+	d.mu.Lock()
+	defer d.mu.Unlock()
+	d.onErrorHandler = f
+}
+
+func (d *DataChannel) onError(err error) {
+	d.mu.RLock()
+	handler := d.onErrorHandler
+	d.mu.RUnlock()
+
+	if handler != nil {
+		go handler(err)
+	}
+}
+
+// See https://github.com/pion/webrtc/issues/1516
+// nolint:gochecknoglobals
+var rlBufPool = sync.Pool{New: func() interface{} {
+	return make([]byte, dataChannelBufferSize)
+}}
+
+func (d *DataChannel) readLoop() {
+	for {
+		buffer := rlBufPool.Get().([]byte)
+		n, isString, err := d.dataChannel.ReadDataChannel(buffer)
+		if err != nil {
+			rlBufPool.Put(buffer) // nolint:staticcheck
+			d.setReadyState(DataChannelStateClosed)
+			if err != io.EOF {
+				d.onError(err)
+			}
+			d.onClose()
+			return
+		}
+
+		m := DataChannelMessage{Data: make([]byte, n), IsString: isString}
+		copy(m.Data, buffer[:n])
+		// The 'staticcheck' pragma is a false positive on the part of the CI linter.
+		rlBufPool.Put(buffer) // nolint:staticcheck
+
+		// NB: Why was DataChannelMessage not passed as a pointer value?
+		d.onMessage(m) // nolint:staticcheck
+	}
+}
+
+// Send sends the binary message to the DataChannel peer
+func (d *DataChannel) Send(data []byte) error {
+	err := d.ensureOpen()
+	if err != nil {
+		return err
+	}
+
+	_, err = d.dataChannel.WriteDataChannel(data, false)
+	return err
+}
+
+// SendText sends the text message to the DataChannel peer
+func (d *DataChannel) SendText(s string) error {
+	err := d.ensureOpen()
+	if err != nil {
+		return err
+	}
+
+	_, err = d.dataChannel.WriteDataChannel([]byte(s), true)
+	return err
+}
+
+func (d *DataChannel) ensureOpen() error {
+	d.mu.RLock()
+	defer d.mu.RUnlock()
+	if d.ReadyState() != DataChannelStateOpen {
+		return io.ErrClosedPipe
+	}
+	return nil
+}
+
+// Detach allows you to detach the underlying datachannel. This provides
+// an idiomatic API to work with, however it disables the OnMessage callback.
+// Before calling Detach you have to enable this behavior by calling
+// webrtc.DetachDataChannels(). Combining detached and normal data channels
+// is not supported.
+// Please refer to the data-channels-detach example and the
+// pion/datachannel documentation for the correct way to handle the
+// resulting DataChannel object.
+func (d *DataChannel) Detach() (datachannel.ReadWriteCloser, error) {
+	d.mu.Lock()
+	defer d.mu.Unlock()
+
+	if !d.api.settingEngine.detach.DataChannels {
+		return nil, errDetachNotEnabled
+	}
+
+	if d.dataChannel == nil {
+		return nil, errDetachBeforeOpened
+	}
+
+	d.detachCalled = true
+
+	return d.dataChannel, nil
+}
+
+// Close Closes the DataChannel. It may be called regardless of whether
+// the DataChannel object was created by this peer or the remote peer.
+func (d *DataChannel) Close() error {
+	d.mu.Lock()
+	haveSctpTransport := d.dataChannel != nil
+	d.mu.Unlock()
+
+	if d.ReadyState() == DataChannelStateClosed {
+		return nil
+	}
+
+	d.setReadyState(DataChannelStateClosing)
+	if !haveSctpTransport {
+		return nil
+	}
+
+	return d.dataChannel.Close()
+}
+
+// Label represents a label that can be used to distinguish this
+// DataChannel object from other DataChannel objects. Scripts are
+// allowed to create multiple DataChannel objects with the same label.
+func (d *DataChannel) Label() string {
+	d.mu.RLock()
+	defer d.mu.RUnlock()
+
+	return d.label
+}
+
+// Ordered represents if the DataChannel is ordered, and false if
+// out-of-order delivery is allowed.
+func (d *DataChannel) Ordered() bool {
+	d.mu.RLock()
+	defer d.mu.RUnlock()
+
+	return d.ordered
+}
+
+// MaxPacketLifeTime represents the length of the time window (msec) during
+// which transmissions and retransmissions may occur in unreliable mode.
+func (d *DataChannel) MaxPacketLifeTime() *uint16 {
+	d.mu.RLock()
+	defer d.mu.RUnlock()
+
+	return d.maxPacketLifeTime
+}
+
+// MaxRetransmits represents the maximum number of retransmissions that are
+// attempted in unreliable mode.
+func (d *DataChannel) MaxRetransmits() *uint16 {
+	d.mu.RLock()
+	defer d.mu.RUnlock()
+
+	return d.maxRetransmits
+}
+
+// Protocol represents the name of the sub-protocol used with this
+// DataChannel.
+func (d *DataChannel) Protocol() string {
+	d.mu.RLock()
+	defer d.mu.RUnlock()
+
+	return d.protocol
+}
+
+// Negotiated represents whether this DataChannel was negotiated by the
+// application (true), or not (false).
+func (d *DataChannel) Negotiated() bool {
+	d.mu.RLock()
+	defer d.mu.RUnlock()
+
+	return d.negotiated
+}
+
+// ID represents the ID for this DataChannel. The value is initially
+// null, which is what will be returned if the ID was not provided at
+// channel creation time, and the DTLS role of the SCTP transport has not
+// yet been negotiated. Otherwise, it will return the ID that was either
+// selected by the script or generated. After the ID is set to a non-null
+// value, it will not change.
+func (d *DataChannel) ID() *uint16 {
+	d.mu.RLock()
+	defer d.mu.RUnlock()
+
+	return d.id
+}
+
+// ReadyState represents the state of the DataChannel object.
+func (d *DataChannel) ReadyState() DataChannelState {
+	if v := d.readyState.Load(); v != nil {
+		return v.(DataChannelState)
+	}
+	return DataChannelState(0)
+}
+
+// BufferedAmount represents the number of bytes of application data
+// (UTF-8 text and binary data) that have been queued using send(). Even
+// though the data transmission can occur in parallel, the returned value
+// MUST NOT be decreased before the current task yielded back to the event
+// loop to prevent race conditions. The value does not include framing
+// overhead incurred by the protocol, or buffering done by the operating
+// system or network hardware. The value of BufferedAmount slot will only
+// increase with each call to the send() method as long as the ReadyState is
+// open; however, BufferedAmount does not reset to zero once the channel
+// closes.
+func (d *DataChannel) BufferedAmount() uint64 {
+	d.mu.RLock()
+	defer d.mu.RUnlock()
+
+	if d.dataChannel == nil {
+		return 0
+	}
+	return d.dataChannel.BufferedAmount()
+}
+
+// BufferedAmountLowThreshold represents the threshold at which the
+// bufferedAmount is considered to be low. When the bufferedAmount decreases
+// from above this threshold to equal or below it, the bufferedamountlow
+// event fires. BufferedAmountLowThreshold is initially zero on each new
+// DataChannel, but the application may change its value at any time.
+// The threshold is set to 0 by default.
+func (d *DataChannel) BufferedAmountLowThreshold() uint64 {
+	d.mu.RLock()
+	defer d.mu.RUnlock()
+
+	if d.dataChannel == nil {
+		return d.bufferedAmountLowThreshold
+	}
+	return d.dataChannel.BufferedAmountLowThreshold()
+}
+
+// SetBufferedAmountLowThreshold is used to update the threshold.
+// See BufferedAmountLowThreshold().
+func (d *DataChannel) SetBufferedAmountLowThreshold(th uint64) {
+	d.mu.Lock()
+	defer d.mu.Unlock()
+
+	d.bufferedAmountLowThreshold = th
+
+	if d.dataChannel != nil {
+		d.dataChannel.SetBufferedAmountLowThreshold(th)
+	}
+}
+
+// OnBufferedAmountLow sets an event handler which is invoked when
+// the number of bytes of outgoing data becomes lower than the
+// BufferedAmountLowThreshold.
+func (d *DataChannel) OnBufferedAmountLow(f func()) {
+	d.mu.Lock()
+	defer d.mu.Unlock()
+
+	d.onBufferedAmountLow = f
+	if d.dataChannel != nil {
+		d.dataChannel.OnBufferedAmountLow(f)
+	}
+}
+
+func (d *DataChannel) getStatsID() string {
+	d.mu.Lock()
+	defer d.mu.Unlock()
+	return d.statsID
+}
+
+func (d *DataChannel) collectStats(collector *statsReportCollector) {
+	collector.Collecting()
+
+	d.mu.Lock()
+	defer d.mu.Unlock()
+
+	stats := DataChannelStats{
+		Timestamp: statsTimestampNow(),
+		Type:      StatsTypeDataChannel,
+		ID:        d.statsID,
+		Label:     d.label,
+		Protocol:  d.protocol,
+		// TransportID string `json:"transportId"`
+		State: d.ReadyState(),
+	}
+
+	if d.id != nil {
+		stats.DataChannelIdentifier = int32(*d.id)
+	}
+
+	if d.dataChannel != nil {
+		stats.MessagesSent = d.dataChannel.MessagesSent()
+		stats.BytesSent = d.dataChannel.BytesSent()
+		stats.MessagesReceived = d.dataChannel.MessagesReceived()
+		stats.BytesReceived = d.dataChannel.BytesReceived()
+	}
+
+	collector.Collect(stats.ID, stats)
+}
+
+func (d *DataChannel) setReadyState(r DataChannelState) {
+	d.readyState.Store(r)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannel_js.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannel_js.go
new file mode 100644
index 000000000..7aa6d99f8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannel_js.go
@@ -0,0 +1,319 @@
+// +build js,wasm
+
+package webrtc
+
+import (
+	"fmt"
+	"syscall/js"
+
+	"github.com/pion/datachannel"
+)
+
+const dataChannelBufferSize = 16384 // Lowest common denominator among browsers
+
+// DataChannel represents a WebRTC DataChannel
+// The DataChannel interface represents a network channel
+// which can be used for bidirectional peer-to-peer transfers of arbitrary data
+type DataChannel struct {
+	// Pointer to the underlying JavaScript RTCPeerConnection object.
+	underlying js.Value
+
+	// Keep track of handlers/callbacks so we can call Release as required by the
+	// syscall/js API. Initially nil.
+	onOpenHandler       *js.Func
+	onCloseHandler      *js.Func
+	onMessageHandler    *js.Func
+	onBufferedAmountLow *js.Func
+
+	// A reference to the associated api object used by this datachannel
+	api *API
+}
+
+// OnOpen sets an event handler which is invoked when
+// the underlying data transport has been established (or re-established).
+func (d *DataChannel) OnOpen(f func()) {
+	if d.onOpenHandler != nil {
+		oldHandler := d.onOpenHandler
+		defer oldHandler.Release()
+	}
+	onOpenHandler := js.FuncOf(func(this js.Value, args []js.Value) interface{} {
+		go f()
+		return js.Undefined()
+	})
+	d.onOpenHandler = &onOpenHandler
+	d.underlying.Set("onopen", onOpenHandler)
+}
+
+// OnClose sets an event handler which is invoked when
+// the underlying data transport has been closed.
+func (d *DataChannel) OnClose(f func()) {
+	if d.onCloseHandler != nil {
+		oldHandler := d.onCloseHandler
+		defer oldHandler.Release()
+	}
+	onCloseHandler := js.FuncOf(func(this js.Value, args []js.Value) interface{} {
+		go f()
+		return js.Undefined()
+	})
+	d.onCloseHandler = &onCloseHandler
+	d.underlying.Set("onclose", onCloseHandler)
+}
+
+// OnMessage sets an event handler which is invoked on a binary message arrival
+// from a remote peer. Note that browsers may place limitations on message size.
+func (d *DataChannel) OnMessage(f func(msg DataChannelMessage)) {
+	if d.onMessageHandler != nil {
+		oldHandler := d.onMessageHandler
+		defer oldHandler.Release()
+	}
+	onMessageHandler := js.FuncOf(func(this js.Value, args []js.Value) interface{} {
+		// pion/webrtc/projects/15
+		data := args[0].Get("data")
+		go func() {
+			// valueToDataChannelMessage may block when handling 'Blob' data
+			// so we need to call it from a new routine. See:
+			// https://pkg.go.dev/syscall/js#FuncOf
+			msg := valueToDataChannelMessage(data)
+			f(msg)
+		}()
+		return js.Undefined()
+	})
+	d.onMessageHandler = &onMessageHandler
+	d.underlying.Set("onmessage", onMessageHandler)
+}
+
+// Send sends the binary message to the DataChannel peer
+func (d *DataChannel) Send(data []byte) (err error) {
+	defer func() {
+		if e := recover(); e != nil {
+			err = recoveryToError(e)
+		}
+	}()
+	array := js.Global().Get("Uint8Array").New(len(data))
+	js.CopyBytesToJS(array, data)
+	d.underlying.Call("send", array)
+	return nil
+}
+
+// SendText sends the text message to the DataChannel peer
+func (d *DataChannel) SendText(s string) (err error) {
+	defer func() {
+		if e := recover(); e != nil {
+			err = recoveryToError(e)
+		}
+	}()
+	d.underlying.Call("send", s)
+	return nil
+}
+
+// Detach allows you to detach the underlying datachannel. This provides
+// an idiomatic API to work with, however it disables the OnMessage callback.
+// Before calling Detach you have to enable this behavior by calling
+// webrtc.DetachDataChannels(). Combining detached and normal data channels
+// is not supported.
+// Please reffer to the data-channels-detach example and the
+// pion/datachannel documentation for the correct way to handle the
+// resulting DataChannel object.
+func (d *DataChannel) Detach() (datachannel.ReadWriteCloser, error) {
+	if !d.api.settingEngine.detach.DataChannels {
+		return nil, fmt.Errorf("enable detaching by calling webrtc.DetachDataChannels()")
+	}
+
+	detached := newDetachedDataChannel(d)
+	return detached, nil
+}
+
+// Close Closes the DataChannel. It may be called regardless of whether
+// the DataChannel object was created by this peer or the remote peer.
+func (d *DataChannel) Close() (err error) {
+	defer func() {
+		if e := recover(); e != nil {
+			err = recoveryToError(e)
+		}
+	}()
+
+	d.underlying.Call("close")
+
+	// Release any handlers as required by the syscall/js API.
+	if d.onOpenHandler != nil {
+		d.onOpenHandler.Release()
+	}
+	if d.onCloseHandler != nil {
+		d.onCloseHandler.Release()
+	}
+	if d.onMessageHandler != nil {
+		d.onMessageHandler.Release()
+	}
+	if d.onBufferedAmountLow != nil {
+		d.onBufferedAmountLow.Release()
+	}
+
+	return nil
+}
+
+// Label represents a label that can be used to distinguish this
+// DataChannel object from other DataChannel objects. Scripts are
+// allowed to create multiple DataChannel objects with the same label.
+func (d *DataChannel) Label() string {
+	return d.underlying.Get("label").String()
+}
+
+// Ordered represents if the DataChannel is ordered, and false if
+// out-of-order delivery is allowed.
+func (d *DataChannel) Ordered() bool {
+	ordered := d.underlying.Get("ordered")
+	if jsValueIsUndefined(ordered) {
+		return true // default is true
+	}
+	return ordered.Bool()
+}
+
+// MaxPacketLifeTime represents the length of the time window (msec) during
+// which transmissions and retransmissions may occur in unreliable mode.
+func (d *DataChannel) MaxPacketLifeTime() *uint16 {
+	if !jsValueIsUndefined(d.underlying.Get("maxPacketLifeTime")) {
+		return valueToUint16Pointer(d.underlying.Get("maxPacketLifeTime"))
+	} else {
+		// See https://bugs.chromium.org/p/chromium/issues/detail?id=696681
+		// Chrome calls this "maxRetransmitTime"
+		return valueToUint16Pointer(d.underlying.Get("maxRetransmitTime"))
+	}
+}
+
+// MaxRetransmits represents the maximum number of retransmissions that are
+// attempted in unreliable mode.
+func (d *DataChannel) MaxRetransmits() *uint16 {
+	return valueToUint16Pointer(d.underlying.Get("maxRetransmits"))
+}
+
+// Protocol represents the name of the sub-protocol used with this
+// DataChannel.
+func (d *DataChannel) Protocol() string {
+	return d.underlying.Get("protocol").String()
+}
+
+// Negotiated represents whether this DataChannel was negotiated by the
+// application (true), or not (false).
+func (d *DataChannel) Negotiated() bool {
+	return d.underlying.Get("negotiated").Bool()
+}
+
+// ID represents the ID for this DataChannel. The value is initially
+// null, which is what will be returned if the ID was not provided at
+// channel creation time. Otherwise, it will return the ID that was either
+// selected by the script or generated. After the ID is set to a non-null
+// value, it will not change.
+func (d *DataChannel) ID() *uint16 {
+	return valueToUint16Pointer(d.underlying.Get("id"))
+}
+
+// ReadyState represents the state of the DataChannel object.
+func (d *DataChannel) ReadyState() DataChannelState {
+	return newDataChannelState(d.underlying.Get("readyState").String())
+}
+
+// BufferedAmount represents the number of bytes of application data
+// (UTF-8 text and binary data) that have been queued using send(). Even
+// though the data transmission can occur in parallel, the returned value
+// MUST NOT be decreased before the current task yielded back to the event
+// loop to prevent race conditions. The value does not include framing
+// overhead incurred by the protocol, or buffering done by the operating
+// system or network hardware. The value of BufferedAmount slot will only
+// increase with each call to the send() method as long as the ReadyState is
+// open; however, BufferedAmount does not reset to zero once the channel
+// closes.
+func (d *DataChannel) BufferedAmount() uint64 {
+	return uint64(d.underlying.Get("bufferedAmount").Int())
+}
+
+// BufferedAmountLowThreshold represents the threshold at which the
+// bufferedAmount is considered to be low. When the bufferedAmount decreases
+// from above this threshold to equal or below it, the bufferedamountlow
+// event fires. BufferedAmountLowThreshold is initially zero on each new
+// DataChannel, but the application may change its value at any time.
+func (d *DataChannel) BufferedAmountLowThreshold() uint64 {
+	return uint64(d.underlying.Get("bufferedAmountLowThreshold").Int())
+}
+
+// SetBufferedAmountLowThreshold is used to update the threshold.
+// See BufferedAmountLowThreshold().
+func (d *DataChannel) SetBufferedAmountLowThreshold(th uint64) {
+	d.underlying.Set("bufferedAmountLowThreshold", th)
+}
+
+// OnBufferedAmountLow sets an event handler which is invoked when
+// the number of bytes of outgoing data becomes lower than the
+// BufferedAmountLowThreshold.
+func (d *DataChannel) OnBufferedAmountLow(f func()) {
+	if d.onBufferedAmountLow != nil {
+		oldHandler := d.onBufferedAmountLow
+		defer oldHandler.Release()
+	}
+	onBufferedAmountLow := js.FuncOf(func(this js.Value, args []js.Value) interface{} {
+		go f()
+		return js.Undefined()
+	})
+	d.onBufferedAmountLow = &onBufferedAmountLow
+	d.underlying.Set("onbufferedamountlow", onBufferedAmountLow)
+}
+
+// valueToDataChannelMessage converts the given value to a DataChannelMessage.
+// val should be obtained from MessageEvent.data where MessageEvent is received
+// via the RTCDataChannel.onmessage callback.
+func valueToDataChannelMessage(val js.Value) DataChannelMessage {
+	// If val is of type string, the conversion is straightforward.
+	if val.Type() == js.TypeString {
+		return DataChannelMessage{
+			IsString: true,
+			Data:     []byte(val.String()),
+		}
+	}
+
+	// For other types, we need to first determine val.constructor.name.
+	constructorName := val.Get("constructor").Get("name").String()
+	var data []byte
+	switch constructorName {
+	case "Uint8Array":
+		// We can easily convert Uint8Array to []byte
+		data = uint8ArrayValueToBytes(val)
+	case "Blob":
+		// Convert the Blob to an ArrayBuffer and then convert the ArrayBuffer
+		// to a Uint8Array.
+		// See: https://developer.mozilla.org/en-US/docs/Web/API/Blob
+
+		// The JavaScript API for reading from the Blob is asynchronous. We use a
+		// channel to signal when reading is done.
+		reader := js.Global().Get("FileReader").New()
+		doneChan := make(chan struct{})
+		reader.Call("addEventListener", "loadend", js.FuncOf(func(this js.Value, args []js.Value) interface{} {
+			go func() {
+				// Signal that the FileReader is done reading/loading by sending through
+				// the doneChan.
+				doneChan <- struct{}{}
+			}()
+			return js.Undefined()
+		}))
+
+		reader.Call("readAsArrayBuffer", val)
+
+		// Wait for the FileReader to finish reading/loading.
+		<-doneChan
+
+		// At this point buffer.result is a typed array, which we know how to
+		// handle.
+		buffer := reader.Get("result")
+		uint8Array := js.Global().Get("Uint8Array").New(buffer)
+		data = uint8ArrayValueToBytes(uint8Array)
+	default:
+		// Assume we have an ArrayBufferView type which we can convert to a
+		// Uint8Array in JavaScript.
+		// See: https://developer.mozilla.org/en-US/docs/Web/API/ArrayBufferView
+		uint8Array := js.Global().Get("Uint8Array").New(val)
+		data = uint8ArrayValueToBytes(uint8Array)
+	}
+
+	return DataChannelMessage{
+		IsString: false,
+		Data:     data,
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannel_js_detach.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannel_js_detach.go
new file mode 100644
index 000000000..dd0069e01
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannel_js_detach.go
@@ -0,0 +1,71 @@
+// +build js,wasm
+
+package webrtc
+
+import (
+	"errors"
+)
+
+type detachedDataChannel struct {
+	dc *DataChannel
+
+	read chan DataChannelMessage
+	done chan struct{}
+}
+
+func newDetachedDataChannel(dc *DataChannel) *detachedDataChannel {
+	read := make(chan DataChannelMessage)
+	done := make(chan struct{})
+
+	// Wire up callbacks
+	dc.OnMessage(func(msg DataChannelMessage) {
+		read <- msg // pion/webrtc/projects/15
+	})
+
+	// pion/webrtc/projects/15
+
+	return &detachedDataChannel{
+		dc:   dc,
+		read: read,
+		done: done,
+	}
+}
+
+func (c *detachedDataChannel) Read(p []byte) (int, error) {
+	n, _, err := c.ReadDataChannel(p)
+	return n, err
+}
+
+func (c *detachedDataChannel) ReadDataChannel(p []byte) (int, bool, error) {
+	select {
+	case <-c.done:
+		return 0, false, errors.New("Reader closed")
+	case msg := <-c.read:
+		n := copy(p, msg.Data)
+		if n < len(msg.Data) {
+			return n, msg.IsString, errors.New("Read buffer to small")
+		}
+		return n, msg.IsString, nil
+	}
+}
+
+func (c *detachedDataChannel) Write(p []byte) (n int, err error) {
+	return c.WriteDataChannel(p, false)
+}
+
+func (c *detachedDataChannel) WriteDataChannel(p []byte, isString bool) (n int, err error) {
+	if isString {
+		err = c.dc.SendText(string(p))
+		return len(p), err
+	}
+
+	err = c.dc.Send(p)
+
+	return len(p), err
+}
+
+func (c *detachedDataChannel) Close() error {
+	close(c.done)
+
+	return c.dc.Close()
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannelinit.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannelinit.go
new file mode 100644
index 000000000..a4320e463
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannelinit.go
@@ -0,0 +1,33 @@
+package webrtc
+
+// DataChannelInit can be used to configure properties of the underlying
+// channel such as data reliability.
+type DataChannelInit struct {
+	// Ordered indicates if data is allowed to be delivered out of order. The
+	// default value of true, guarantees that data will be delivered in order.
+	Ordered *bool
+
+	// MaxPacketLifeTime limits the time (in milliseconds) during which the
+	// channel will transmit or retransmit data if not acknowledged. This value
+	// may be clamped if it exceeds the maximum value supported.
+	MaxPacketLifeTime *uint16
+
+	// MaxRetransmits limits the number of times a channel will retransmit data
+	// if not successfully delivered. This value may be clamped if it exceeds
+	// the maximum value supported.
+	MaxRetransmits *uint16
+
+	// Protocol describes the subprotocol name used for this channel.
+	Protocol *string
+
+	// Negotiated describes if the data channel is created by the local peer or
+	// the remote peer. The default value of false tells the user agent to
+	// announce the channel in-band and instruct the other peer to dispatch a
+	// corresponding DataChannel. If set to true, it is up to the application
+	// to negotiate the channel and create an DataChannel with the same id
+	// at the other peer.
+	Negotiated *bool
+
+	// ID overrides the default selection of ID for this channel.
+	ID *uint16
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannelmessage.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannelmessage.go
new file mode 100644
index 000000000..1e3c63b36
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannelmessage.go
@@ -0,0 +1,10 @@
+package webrtc
+
+// DataChannelMessage represents a message received from the
+// data channel. IsString will be set to true if the incoming
+// message is of the string type. Otherwise the message is of
+// a binary type.
+type DataChannelMessage struct {
+	IsString bool
+	Data     []byte
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannelparameters.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannelparameters.go
new file mode 100644
index 000000000..d67a63b09
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannelparameters.go
@@ -0,0 +1,12 @@
+package webrtc
+
+// DataChannelParameters describes the configuration of the DataChannel.
+type DataChannelParameters struct {
+	Label             string  `json:"label"`
+	Protocol          string  `json:"protocol"`
+	ID                *uint16 `json:"id"`
+	Ordered           bool    `json:"ordered"`
+	MaxPacketLifeTime *uint16 `json:"maxPacketLifeTime"`
+	MaxRetransmits    *uint16 `json:"maxRetransmits"`
+	Negotiated        bool    `json:"negotiated"`
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannelstate.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannelstate.go
new file mode 100644
index 000000000..a2c7b95de
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/datachannelstate.go
@@ -0,0 +1,61 @@
+package webrtc
+
+// DataChannelState indicates the state of a data channel.
+type DataChannelState int
+
+const (
+	// DataChannelStateConnecting indicates that the data channel is being
+	// established. This is the initial state of DataChannel, whether created
+	// with CreateDataChannel, or dispatched as a part of an DataChannelEvent.
+	DataChannelStateConnecting DataChannelState = iota + 1
+
+	// DataChannelStateOpen indicates that the underlying data transport is
+	// established and communication is possible.
+	DataChannelStateOpen
+
+	// DataChannelStateClosing indicates that the procedure to close down the
+	// underlying data transport has started.
+	DataChannelStateClosing
+
+	// DataChannelStateClosed indicates that the underlying data transport
+	// has been closed or could not be established.
+	DataChannelStateClosed
+)
+
+// This is done this way because of a linter.
+const (
+	dataChannelStateConnectingStr = "connecting"
+	dataChannelStateOpenStr       = "open"
+	dataChannelStateClosingStr    = "closing"
+	dataChannelStateClosedStr     = "closed"
+)
+
+func newDataChannelState(raw string) DataChannelState {
+	switch raw {
+	case dataChannelStateConnectingStr:
+		return DataChannelStateConnecting
+	case dataChannelStateOpenStr:
+		return DataChannelStateOpen
+	case dataChannelStateClosingStr:
+		return DataChannelStateClosing
+	case dataChannelStateClosedStr:
+		return DataChannelStateClosed
+	default:
+		return DataChannelState(Unknown)
+	}
+}
+
+func (t DataChannelState) String() string {
+	switch t {
+	case DataChannelStateConnecting:
+		return dataChannelStateConnectingStr
+	case DataChannelStateOpen:
+		return dataChannelStateOpenStr
+	case DataChannelStateClosing:
+		return dataChannelStateClosingStr
+	case DataChannelStateClosed:
+		return dataChannelStateClosedStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlsfingerprint.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlsfingerprint.go
new file mode 100644
index 000000000..db13d3ec6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlsfingerprint.go
@@ -0,0 +1,14 @@
+package webrtc
+
+// DTLSFingerprint specifies the hash function algorithm and certificate
+// fingerprint as described in https://tools.ietf.org/html/rfc4572.
+type DTLSFingerprint struct {
+	// Algorithm specifies one of the the hash function algorithms defined in
+	// the 'Hash function Textual Names' registry.
+	Algorithm string `json:"algorithm"`
+
+	// Value specifies the value of the certificate fingerprint in lowercase
+	// hex string as expressed utilizing the syntax of 'fingerprint' in
+	// https://tools.ietf.org/html/rfc4572#section-5.
+	Value string `json:"value"`
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlsparameters.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlsparameters.go
new file mode 100644
index 000000000..4b4b56836
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlsparameters.go
@@ -0,0 +1,7 @@
+package webrtc
+
+// DTLSParameters holds information relating to DTLS configuration.
+type DTLSParameters struct {
+	Role         DTLSRole          `json:"role"`
+	Fingerprints []DTLSFingerprint `json:"fingerprints"`
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlsrole.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlsrole.go
new file mode 100644
index 000000000..6e67f60e1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlsrole.go
@@ -0,0 +1,92 @@
+package webrtc
+
+import (
+	"github.com/pion/sdp/v3"
+)
+
+// DTLSRole indicates the role of the DTLS transport.
+type DTLSRole byte
+
+const (
+	// DTLSRoleAuto defines the DTLS role is determined based on
+	// the resolved ICE role: the ICE controlled role acts as the DTLS
+	// client and the ICE controlling role acts as the DTLS server.
+	DTLSRoleAuto DTLSRole = iota + 1
+
+	// DTLSRoleClient defines the DTLS client role.
+	DTLSRoleClient
+
+	// DTLSRoleServer defines the DTLS server role.
+	DTLSRoleServer
+)
+
+const (
+	// https://tools.ietf.org/html/rfc5763
+	/*
+		The answerer MUST use either a
+		setup attribute value of setup:active or setup:passive.  Note that
+		if the answerer uses setup:passive, then the DTLS handshake will
+		not begin until the answerer is received, which adds additional
+		latency. setup:active allows the answer and the DTLS handshake to
+		occur in parallel.  Thus, setup:active is RECOMMENDED.
+	*/
+	defaultDtlsRoleAnswer = DTLSRoleClient
+	/*
+		The endpoint that is the offerer MUST use the setup attribute
+		value of setup:actpass and be prepared to receive a client_hello
+		before it receives the answer.
+	*/
+	defaultDtlsRoleOffer = DTLSRoleAuto
+)
+
+func (r DTLSRole) String() string {
+	switch r {
+	case DTLSRoleAuto:
+		return "auto"
+	case DTLSRoleClient:
+		return "client"
+	case DTLSRoleServer:
+		return "server"
+	default:
+		return unknownStr
+	}
+}
+
+// Iterate a SessionDescription from a remote to determine if an explicit
+// role can been determined from it. The decision is made from the first role we we parse.
+// If no role can be found we return DTLSRoleAuto
+func dtlsRoleFromRemoteSDP(sessionDescription *sdp.SessionDescription) DTLSRole {
+	if sessionDescription == nil {
+		return DTLSRoleAuto
+	}
+
+	for _, mediaSection := range sessionDescription.MediaDescriptions {
+		for _, attribute := range mediaSection.Attributes {
+			if attribute.Key == "setup" {
+				switch attribute.Value {
+				case sdp.ConnectionRoleActive.String():
+					return DTLSRoleClient
+				case sdp.ConnectionRolePassive.String():
+					return DTLSRoleServer
+				default:
+					return DTLSRoleAuto
+				}
+			}
+		}
+	}
+
+	return DTLSRoleAuto
+}
+
+func connectionRoleFromDtlsRole(d DTLSRole) sdp.ConnectionRole {
+	switch d {
+	case DTLSRoleClient:
+		return sdp.ConnectionRoleActive
+	case DTLSRoleServer:
+		return sdp.ConnectionRolePassive
+	case DTLSRoleAuto:
+		return sdp.ConnectionRoleActpass
+	default:
+		return sdp.ConnectionRole(0)
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlstransport.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlstransport.go
new file mode 100644
index 000000000..d11009290
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlstransport.go
@@ -0,0 +1,419 @@
+// +build !js
+
+package webrtc
+
+import (
+	"crypto/ecdsa"
+	"crypto/elliptic"
+	"crypto/rand"
+	"crypto/tls"
+	"crypto/x509"
+	"errors"
+	"fmt"
+	"strings"
+	"sync"
+	"sync/atomic"
+	"time"
+
+	"github.com/pion/dtls/v2"
+	"github.com/pion/dtls/v2/pkg/crypto/fingerprint"
+	"github.com/pion/srtp/v2"
+	"github.com/pion/webrtc/v3/internal/mux"
+	"github.com/pion/webrtc/v3/internal/util"
+	"github.com/pion/webrtc/v3/pkg/rtcerr"
+)
+
+// DTLSTransport allows an application access to information about the DTLS
+// transport over which RTP and RTCP packets are sent and received by
+// RTPSender and RTPReceiver, as well other data such as SCTP packets sent
+// and received by data channels.
+type DTLSTransport struct {
+	lock sync.RWMutex
+
+	iceTransport          *ICETransport
+	certificates          []Certificate
+	remoteParameters      DTLSParameters
+	remoteCertificate     []byte
+	state                 DTLSTransportState
+	srtpProtectionProfile srtp.ProtectionProfile
+
+	onStateChangeHandler func(DTLSTransportState)
+
+	conn *dtls.Conn
+
+	srtpSession, srtcpSession   atomic.Value
+	srtpEndpoint, srtcpEndpoint *mux.Endpoint
+	simulcastStreams            []*srtp.ReadStreamSRTP
+	srtpReady                   chan struct{}
+
+	dtlsMatcher mux.MatchFunc
+
+	api *API
+}
+
+// NewDTLSTransport creates a new DTLSTransport.
+// This constructor is part of the ORTC API. It is not
+// meant to be used together with the basic WebRTC API.
+func (api *API) NewDTLSTransport(transport *ICETransport, certificates []Certificate) (*DTLSTransport, error) {
+	t := &DTLSTransport{
+		iceTransport: transport,
+		api:          api,
+		state:        DTLSTransportStateNew,
+		dtlsMatcher:  mux.MatchDTLS,
+		srtpReady:    make(chan struct{}),
+	}
+
+	if len(certificates) > 0 {
+		now := time.Now()
+		for _, x509Cert := range certificates {
+			if !x509Cert.Expires().IsZero() && now.After(x509Cert.Expires()) {
+				return nil, &rtcerr.InvalidAccessError{Err: ErrCertificateExpired}
+			}
+			t.certificates = append(t.certificates, x509Cert)
+		}
+	} else {
+		sk, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
+		if err != nil {
+			return nil, &rtcerr.UnknownError{Err: err}
+		}
+		certificate, err := GenerateCertificate(sk)
+		if err != nil {
+			return nil, err
+		}
+		t.certificates = []Certificate{*certificate}
+	}
+
+	return t, nil
+}
+
+// ICETransport returns the currently-configured *ICETransport or nil
+// if one has not been configured
+func (t *DTLSTransport) ICETransport() *ICETransport {
+	t.lock.RLock()
+	defer t.lock.RUnlock()
+	return t.iceTransport
+}
+
+// onStateChange requires the caller holds the lock
+func (t *DTLSTransport) onStateChange(state DTLSTransportState) {
+	t.state = state
+	handler := t.onStateChangeHandler
+	if handler != nil {
+		handler(state)
+	}
+}
+
+// OnStateChange sets a handler that is fired when the DTLS
+// connection state changes.
+func (t *DTLSTransport) OnStateChange(f func(DTLSTransportState)) {
+	t.lock.Lock()
+	defer t.lock.Unlock()
+	t.onStateChangeHandler = f
+}
+
+// State returns the current dtls transport state.
+func (t *DTLSTransport) State() DTLSTransportState {
+	t.lock.RLock()
+	defer t.lock.RUnlock()
+	return t.state
+}
+
+// GetLocalParameters returns the DTLS parameters of the local DTLSTransport upon construction.
+func (t *DTLSTransport) GetLocalParameters() (DTLSParameters, error) {
+	fingerprints := []DTLSFingerprint{}
+
+	for _, c := range t.certificates {
+		prints, err := c.GetFingerprints()
+		if err != nil {
+			return DTLSParameters{}, err
+		}
+
+		fingerprints = append(fingerprints, prints...)
+	}
+
+	return DTLSParameters{
+		Role:         DTLSRoleAuto, // always returns the default role
+		Fingerprints: fingerprints,
+	}, nil
+}
+
+// GetRemoteCertificate returns the certificate chain in use by the remote side
+// returns an empty list prior to selection of the remote certificate
+func (t *DTLSTransport) GetRemoteCertificate() []byte {
+	t.lock.RLock()
+	defer t.lock.RUnlock()
+	return t.remoteCertificate
+}
+
+func (t *DTLSTransport) startSRTP() error {
+	srtpConfig := &srtp.Config{
+		Profile:       t.srtpProtectionProfile,
+		BufferFactory: t.api.settingEngine.BufferFactory,
+		LoggerFactory: t.api.settingEngine.LoggerFactory,
+	}
+	if t.api.settingEngine.replayProtection.SRTP != nil {
+		srtpConfig.RemoteOptions = append(
+			srtpConfig.RemoteOptions,
+			srtp.SRTPReplayProtection(*t.api.settingEngine.replayProtection.SRTP),
+		)
+	}
+
+	if t.api.settingEngine.disableSRTPReplayProtection {
+		srtpConfig.RemoteOptions = append(
+			srtpConfig.RemoteOptions,
+			srtp.SRTPNoReplayProtection(),
+		)
+	}
+
+	if t.api.settingEngine.replayProtection.SRTCP != nil {
+		srtpConfig.RemoteOptions = append(
+			srtpConfig.RemoteOptions,
+			srtp.SRTCPReplayProtection(*t.api.settingEngine.replayProtection.SRTCP),
+		)
+	}
+
+	if t.api.settingEngine.disableSRTCPReplayProtection {
+		srtpConfig.RemoteOptions = append(
+			srtpConfig.RemoteOptions,
+			srtp.SRTCPNoReplayProtection(),
+		)
+	}
+
+	connState := t.conn.ConnectionState()
+	err := srtpConfig.ExtractSessionKeysFromDTLS(&connState, t.role() == DTLSRoleClient)
+	if err != nil {
+		return fmt.Errorf("%w: %v", errDtlsKeyExtractionFailed, err)
+	}
+
+	srtpSession, err := srtp.NewSessionSRTP(t.srtpEndpoint, srtpConfig)
+	if err != nil {
+		return fmt.Errorf("%w: %v", errFailedToStartSRTP, err)
+	}
+
+	srtcpSession, err := srtp.NewSessionSRTCP(t.srtcpEndpoint, srtpConfig)
+	if err != nil {
+		return fmt.Errorf("%w: %v", errFailedToStartSRTCP, err)
+	}
+
+	t.srtpSession.Store(srtpSession)
+	t.srtcpSession.Store(srtcpSession)
+	close(t.srtpReady)
+	return nil
+}
+
+func (t *DTLSTransport) getSRTPSession() (*srtp.SessionSRTP, error) {
+	if value := t.srtpSession.Load(); value != nil {
+		return value.(*srtp.SessionSRTP), nil
+	}
+
+	return nil, errDtlsTransportNotStarted
+}
+
+func (t *DTLSTransport) getSRTCPSession() (*srtp.SessionSRTCP, error) {
+	if value := t.srtcpSession.Load(); value != nil {
+		return value.(*srtp.SessionSRTCP), nil
+	}
+
+	return nil, errDtlsTransportNotStarted
+}
+
+func (t *DTLSTransport) role() DTLSRole {
+	// If remote has an explicit role use the inverse
+	switch t.remoteParameters.Role {
+	case DTLSRoleClient:
+		return DTLSRoleServer
+	case DTLSRoleServer:
+		return DTLSRoleClient
+	default:
+	}
+
+	// If SettingEngine has an explicit role
+	switch t.api.settingEngine.answeringDTLSRole {
+	case DTLSRoleServer:
+		return DTLSRoleServer
+	case DTLSRoleClient:
+		return DTLSRoleClient
+	default:
+	}
+
+	// Remote was auto and no explicit role was configured via SettingEngine
+	if t.iceTransport.Role() == ICERoleControlling {
+		return DTLSRoleServer
+	}
+	return defaultDtlsRoleAnswer
+}
+
+// Start DTLS transport negotiation with the parameters of the remote DTLS transport
+func (t *DTLSTransport) Start(remoteParameters DTLSParameters) error {
+	// Take lock and prepare connection, we must not hold the lock
+	// when connecting
+	prepareTransport := func() (DTLSRole, *dtls.Config, error) {
+		t.lock.Lock()
+		defer t.lock.Unlock()
+
+		if err := t.ensureICEConn(); err != nil {
+			return DTLSRole(0), nil, err
+		}
+
+		if t.state != DTLSTransportStateNew {
+			return DTLSRole(0), nil, &rtcerr.InvalidStateError{Err: fmt.Errorf("%w: %s", errInvalidDTLSStart, t.state)}
+		}
+
+		t.srtpEndpoint = t.iceTransport.NewEndpoint(mux.MatchSRTP)
+		t.srtcpEndpoint = t.iceTransport.NewEndpoint(mux.MatchSRTCP)
+		t.remoteParameters = remoteParameters
+
+		cert := t.certificates[0]
+		t.onStateChange(DTLSTransportStateConnecting)
+
+		return t.role(), &dtls.Config{
+			Certificates: []tls.Certificate{
+				{
+					Certificate: [][]byte{cert.x509Cert.Raw},
+					PrivateKey:  cert.privateKey,
+				},
+			},
+			SRTPProtectionProfiles: []dtls.SRTPProtectionProfile{dtls.SRTP_AEAD_AES_128_GCM, dtls.SRTP_AES128_CM_HMAC_SHA1_80},
+			ClientAuth:             dtls.RequireAnyClientCert,
+			LoggerFactory:          t.api.settingEngine.LoggerFactory,
+			InsecureSkipVerify:     true,
+		}, nil
+	}
+
+	var dtlsConn *dtls.Conn
+	dtlsEndpoint := t.iceTransport.NewEndpoint(mux.MatchDTLS)
+	role, dtlsConfig, err := prepareTransport()
+	if err != nil {
+		return err
+	}
+
+	if t.api.settingEngine.replayProtection.DTLS != nil {
+		dtlsConfig.ReplayProtectionWindow = int(*t.api.settingEngine.replayProtection.DTLS)
+	}
+
+	// Connect as DTLS Client/Server, function is blocking and we
+	// must not hold the DTLSTransport lock
+	if role == DTLSRoleClient {
+		dtlsConn, err = dtls.Client(dtlsEndpoint, dtlsConfig)
+	} else {
+		dtlsConn, err = dtls.Server(dtlsEndpoint, dtlsConfig)
+	}
+
+	// Re-take the lock, nothing beyond here is blocking
+	t.lock.Lock()
+	defer t.lock.Unlock()
+
+	if err != nil {
+		t.onStateChange(DTLSTransportStateFailed)
+		return err
+	}
+
+	srtpProfile, ok := dtlsConn.SelectedSRTPProtectionProfile()
+	if !ok {
+		t.onStateChange(DTLSTransportStateFailed)
+		return ErrNoSRTPProtectionProfile
+	}
+
+	switch srtpProfile {
+	case dtls.SRTP_AEAD_AES_128_GCM:
+		t.srtpProtectionProfile = srtp.ProtectionProfileAeadAes128Gcm
+	case dtls.SRTP_AES128_CM_HMAC_SHA1_80:
+		t.srtpProtectionProfile = srtp.ProtectionProfileAes128CmHmacSha1_80
+	default:
+		t.onStateChange(DTLSTransportStateFailed)
+		return ErrNoSRTPProtectionProfile
+	}
+
+	t.conn = dtlsConn
+	t.onStateChange(DTLSTransportStateConnected)
+
+	if t.api.settingEngine.disableCertificateFingerprintVerification {
+		return nil
+	}
+
+	// Check the fingerprint if a certificate was exchanged
+	remoteCerts := t.conn.ConnectionState().PeerCertificates
+	if len(remoteCerts) == 0 {
+		t.onStateChange(DTLSTransportStateFailed)
+		return errNoRemoteCertificate
+	}
+	t.remoteCertificate = remoteCerts[0]
+
+	parsedRemoteCert, err := x509.ParseCertificate(t.remoteCertificate)
+	if err != nil {
+		t.onStateChange(DTLSTransportStateFailed)
+		return err
+	}
+
+	if err = t.validateFingerPrint(parsedRemoteCert); err != nil {
+		t.onStateChange(DTLSTransportStateFailed)
+		return err
+	}
+
+	return t.startSRTP()
+}
+
+// Stop stops and closes the DTLSTransport object.
+func (t *DTLSTransport) Stop() error {
+	t.lock.Lock()
+	defer t.lock.Unlock()
+
+	// Try closing everything and collect the errors
+	var closeErrs []error
+
+	if srtpSessionValue := t.srtpSession.Load(); srtpSessionValue != nil {
+		closeErrs = append(closeErrs, srtpSessionValue.(*srtp.SessionSRTP).Close())
+	}
+
+	if srtcpSessionValue := t.srtcpSession.Load(); srtcpSessionValue != nil {
+		closeErrs = append(closeErrs, srtcpSessionValue.(*srtp.SessionSRTCP).Close())
+	}
+
+	for i := range t.simulcastStreams {
+		closeErrs = append(closeErrs, t.simulcastStreams[i].Close())
+	}
+
+	if t.conn != nil {
+		// dtls connection may be closed on sctp close.
+		if err := t.conn.Close(); err != nil && !errors.Is(err, dtls.ErrConnClosed) {
+			closeErrs = append(closeErrs, err)
+		}
+	}
+	t.onStateChange(DTLSTransportStateClosed)
+	return util.FlattenErrs(closeErrs)
+}
+
+func (t *DTLSTransport) validateFingerPrint(remoteCert *x509.Certificate) error {
+	for _, fp := range t.remoteParameters.Fingerprints {
+		hashAlgo, err := fingerprint.HashFromString(fp.Algorithm)
+		if err != nil {
+			return err
+		}
+
+		remoteValue, err := fingerprint.Fingerprint(remoteCert, hashAlgo)
+		if err != nil {
+			return err
+		}
+
+		if strings.EqualFold(remoteValue, fp.Value) {
+			return nil
+		}
+	}
+
+	return errNoMatchingCertificateFingerprint
+}
+
+func (t *DTLSTransport) ensureICEConn() error {
+	if t.iceTransport == nil || t.iceTransport.State() == ICETransportStateNew {
+		return errICEConnectionNotStarted
+	}
+
+	return nil
+}
+
+func (t *DTLSTransport) storeSimulcastStream(s *srtp.ReadStreamSRTP) {
+	t.lock.Lock()
+	defer t.lock.Unlock()
+
+	t.simulcastStreams = append(t.simulcastStreams, s)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlstransportstate.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlstransportstate.go
new file mode 100644
index 000000000..900b50b75
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/dtlstransportstate.go
@@ -0,0 +1,71 @@
+package webrtc
+
+// DTLSTransportState indicates the DTLS transport establishment state.
+type DTLSTransportState int
+
+const (
+	// DTLSTransportStateNew indicates that DTLS has not started negotiating
+	// yet.
+	DTLSTransportStateNew DTLSTransportState = iota + 1
+
+	// DTLSTransportStateConnecting indicates that DTLS is in the process of
+	// negotiating a secure connection and verifying the remote fingerprint.
+	DTLSTransportStateConnecting
+
+	// DTLSTransportStateConnected indicates that DTLS has completed
+	// negotiation of a secure connection and verified the remote fingerprint.
+	DTLSTransportStateConnected
+
+	// DTLSTransportStateClosed indicates that the transport has been closed
+	// intentionally as the result of receipt of a close_notify alert, or
+	// calling close().
+	DTLSTransportStateClosed
+
+	// DTLSTransportStateFailed indicates that the transport has failed as
+	// the result of an error (such as receipt of an error alert or failure to
+	// validate the remote fingerprint).
+	DTLSTransportStateFailed
+)
+
+// This is done this way because of a linter.
+const (
+	dtlsTransportStateNewStr        = "new"
+	dtlsTransportStateConnectingStr = "connecting"
+	dtlsTransportStateConnectedStr  = "connected"
+	dtlsTransportStateClosedStr     = "closed"
+	dtlsTransportStateFailedStr     = "failed"
+)
+
+func newDTLSTransportState(raw string) DTLSTransportState {
+	switch raw {
+	case dtlsTransportStateNewStr:
+		return DTLSTransportStateNew
+	case dtlsTransportStateConnectingStr:
+		return DTLSTransportStateConnecting
+	case dtlsTransportStateConnectedStr:
+		return DTLSTransportStateConnected
+	case dtlsTransportStateClosedStr:
+		return DTLSTransportStateClosed
+	case dtlsTransportStateFailedStr:
+		return DTLSTransportStateFailed
+	default:
+		return DTLSTransportState(Unknown)
+	}
+}
+
+func (t DTLSTransportState) String() string {
+	switch t {
+	case DTLSTransportStateNew:
+		return dtlsTransportStateNewStr
+	case DTLSTransportStateConnecting:
+		return dtlsTransportStateConnectingStr
+	case DTLSTransportStateConnected:
+		return dtlsTransportStateConnectedStr
+	case DTLSTransportStateClosed:
+		return dtlsTransportStateClosedStr
+	case DTLSTransportStateFailed:
+		return dtlsTransportStateFailedStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/errors.go
new file mode 100644
index 000000000..a9daf16db
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/errors.go
@@ -0,0 +1,220 @@
+package webrtc
+
+import (
+	"errors"
+)
+
+var (
+	// ErrUnknownType indicates an error with Unknown info.
+	ErrUnknownType = errors.New("unknown")
+
+	// ErrConnectionClosed indicates an operation executed after connection
+	// has already been closed.
+	ErrConnectionClosed = errors.New("connection closed")
+
+	// ErrDataChannelNotOpen indicates an operation executed when the data
+	// channel is not (yet) open.
+	ErrDataChannelNotOpen = errors.New("data channel not open")
+
+	// ErrCertificateExpired indicates that an x509 certificate has expired.
+	ErrCertificateExpired = errors.New("x509Cert expired")
+
+	// ErrNoTurnCredentials indicates that a TURN server URL was provided
+	// without required credentials.
+	ErrNoTurnCredentials = errors.New("turn server credentials required")
+
+	// ErrTurnCredentials indicates that provided TURN credentials are partial
+	// or malformed.
+	ErrTurnCredentials = errors.New("invalid turn server credentials")
+
+	// ErrExistingTrack indicates that a track already exists.
+	ErrExistingTrack = errors.New("track already exists")
+
+	// ErrPrivateKeyType indicates that a particular private key encryption
+	// chosen to generate a certificate is not supported.
+	ErrPrivateKeyType = errors.New("private key type not supported")
+
+	// ErrModifyingPeerIdentity indicates that an attempt to modify
+	// PeerIdentity was made after PeerConnection has been initialized.
+	ErrModifyingPeerIdentity = errors.New("peerIdentity cannot be modified")
+
+	// ErrModifyingCertificates indicates that an attempt to modify
+	// Certificates was made after PeerConnection has been initialized.
+	ErrModifyingCertificates = errors.New("certificates cannot be modified")
+
+	// ErrModifyingBundlePolicy indicates that an attempt to modify
+	// BundlePolicy was made after PeerConnection has been initialized.
+	ErrModifyingBundlePolicy = errors.New("bundle policy cannot be modified")
+
+	// ErrModifyingRTCPMuxPolicy indicates that an attempt to modify
+	// RTCPMuxPolicy was made after PeerConnection has been initialized.
+	ErrModifyingRTCPMuxPolicy = errors.New("rtcp mux policy cannot be modified")
+
+	// ErrModifyingICECandidatePoolSize indicates that an attempt to modify
+	// ICECandidatePoolSize was made after PeerConnection has been initialized.
+	ErrModifyingICECandidatePoolSize = errors.New("ice candidate pool size cannot be modified")
+
+	// ErrStringSizeLimit indicates that the character size limit of string is
+	// exceeded. The limit is hardcoded to 65535 according to specifications.
+	ErrStringSizeLimit = errors.New("data channel label exceeds size limit")
+
+	// ErrMaxDataChannelID indicates that the maximum number ID that could be
+	// specified for a data channel has been exceeded.
+	ErrMaxDataChannelID = errors.New("maximum number ID for datachannel specified")
+
+	// ErrNegotiatedWithoutID indicates that an attempt to create a data channel
+	// was made while setting the negotiated option to true without providing
+	// the negotiated channel ID.
+	ErrNegotiatedWithoutID = errors.New("negotiated set without channel id")
+
+	// ErrRetransmitsOrPacketLifeTime indicates that an attempt to create a data
+	// channel was made with both options MaxPacketLifeTime and MaxRetransmits
+	// set together. Such configuration is not supported by the specification
+	// and is mutually exclusive.
+	ErrRetransmitsOrPacketLifeTime = errors.New("both MaxPacketLifeTime and MaxRetransmits was set")
+
+	// ErrCodecNotFound is returned when a codec search to the Media Engine fails
+	ErrCodecNotFound = errors.New("codec not found")
+
+	// ErrNoRemoteDescription indicates that an operation was rejected because
+	// the remote description is not set
+	ErrNoRemoteDescription = errors.New("remote description is not set")
+
+	// ErrIncorrectSDPSemantics indicates that the PeerConnection was configured to
+	// generate SDP Answers with different SDP Semantics than the received Offer
+	ErrIncorrectSDPSemantics = errors.New("offer SDP semantics does not match configuration")
+
+	// ErrIncorrectSignalingState indicates that the signaling state of PeerConnection is not correct
+	ErrIncorrectSignalingState = errors.New("operation can not be run in current signaling state")
+
+	// ErrProtocolTooLarge indicates that value given for a DataChannelInit protocol is
+	// longer then 65535 bytes
+	ErrProtocolTooLarge = errors.New("protocol is larger then 65535 bytes")
+
+	// ErrSenderNotCreatedByConnection indicates RemoveTrack was called with a RtpSender not created
+	// by this PeerConnection
+	ErrSenderNotCreatedByConnection = errors.New("RtpSender not created by this PeerConnection")
+
+	// ErrSessionDescriptionNoFingerprint indicates SetRemoteDescription was called with a SessionDescription that has no
+	// fingerprint
+	ErrSessionDescriptionNoFingerprint = errors.New("SetRemoteDescription called with no fingerprint")
+
+	// ErrSessionDescriptionInvalidFingerprint indicates SetRemoteDescription was called with a SessionDescription that
+	// has an invalid fingerprint
+	ErrSessionDescriptionInvalidFingerprint = errors.New("SetRemoteDescription called with an invalid fingerprint")
+
+	// ErrSessionDescriptionConflictingFingerprints indicates SetRemoteDescription was called with a SessionDescription that
+	// has an conflicting fingerprints
+	ErrSessionDescriptionConflictingFingerprints = errors.New("SetRemoteDescription called with multiple conflicting fingerprint")
+
+	// ErrSessionDescriptionMissingIceUfrag indicates SetRemoteDescription was called with a SessionDescription that
+	// is missing an ice-ufrag value
+	ErrSessionDescriptionMissingIceUfrag = errors.New("SetRemoteDescription called with no ice-ufrag")
+
+	// ErrSessionDescriptionMissingIcePwd indicates SetRemoteDescription was called with a SessionDescription that
+	// is missing an ice-pwd value
+	ErrSessionDescriptionMissingIcePwd = errors.New("SetRemoteDescription called with no ice-pwd")
+
+	// ErrSessionDescriptionConflictingIceUfrag  indicates SetRemoteDescription was called with a SessionDescription that
+	// contains multiple conflicting ice-ufrag values
+	ErrSessionDescriptionConflictingIceUfrag = errors.New("SetRemoteDescription called with multiple conflicting ice-ufrag values")
+
+	// ErrSessionDescriptionConflictingIcePwd indicates SetRemoteDescription was called with a SessionDescription that
+	// contains multiple conflicting ice-pwd values
+	ErrSessionDescriptionConflictingIcePwd = errors.New("SetRemoteDescription called with multiple conflicting ice-pwd values")
+
+	// ErrNoSRTPProtectionProfile indicates that the DTLS handshake completed and no SRTP Protection Profile was chosen
+	ErrNoSRTPProtectionProfile = errors.New("DTLS Handshake completed and no SRTP Protection Profile was chosen")
+
+	// ErrFailedToGenerateCertificateFingerprint indicates that we failed to generate the fingerprint used for comparing certificates
+	ErrFailedToGenerateCertificateFingerprint = errors.New("failed to generate certificate fingerprint")
+
+	// ErrNoCodecsAvailable indicates that operation isn't possible because the MediaEngine has no codecs available
+	ErrNoCodecsAvailable = errors.New("operation failed no codecs are available")
+
+	// ErrUnsupportedCodec indicates the remote peer doesn't support the requested codec
+	ErrUnsupportedCodec = errors.New("unable to start track, codec is not supported by remote")
+
+	// ErrUnbindFailed indicates that a TrackLocal was not able to be unbind
+	ErrUnbindFailed = errors.New("failed to unbind TrackLocal from PeerConnection")
+
+	// ErrNoPayloaderForCodec indicates that the requested codec does not have a payloader
+	ErrNoPayloaderForCodec = errors.New("the requested codec does not have a payloader")
+
+	// ErrRegisterHeaderExtensionInvalidDirection indicates that a extension was registered with a direction besides `sendonly` or `recvonly`
+	ErrRegisterHeaderExtensionInvalidDirection = errors.New("a header extension must be registered as 'recvonly', 'sendonly' or both")
+
+	// ErrSimulcastProbeOverflow indicates that too many Simulcast probe streams are in flight and the requested SSRC was ignored
+	ErrSimulcastProbeOverflow = errors.New("simulcast probe limit has been reached, new SSRC has been discarded")
+
+	errDetachNotEnabled                 = errors.New("enable detaching by calling webrtc.DetachDataChannels()")
+	errDetachBeforeOpened               = errors.New("datachannel not opened yet, try calling Detach from OnOpen")
+	errDtlsTransportNotStarted          = errors.New("the DTLS transport has not started yet")
+	errDtlsKeyExtractionFailed          = errors.New("failed extracting keys from DTLS for SRTP")
+	errFailedToStartSRTP                = errors.New("failed to start SRTP")
+	errFailedToStartSRTCP               = errors.New("failed to start SRTCP")
+	errInvalidDTLSStart                 = errors.New("attempted to start DTLSTransport that is not in new state")
+	errNoRemoteCertificate              = errors.New("peer didn't provide certificate via DTLS")
+	errIdentityProviderNotImplemented   = errors.New("identity provider is not implemented")
+	errNoMatchingCertificateFingerprint = errors.New("remote certificate does not match any fingerprint")
+
+	errICEConnectionNotStarted        = errors.New("ICE connection not started")
+	errICECandidateTypeUnknown        = errors.New("unknown candidate type")
+	errICEInvalidConvertCandidateType = errors.New("cannot convert ice.CandidateType into webrtc.ICECandidateType, invalid type")
+	errICEAgentNotExist               = errors.New("ICEAgent does not exist")
+	errICECandiatesCoversionFailed    = errors.New("unable to convert ICE candidates to ICECandidates")
+	errICERoleUnknown                 = errors.New("unknown ICE Role")
+	errICEProtocolUnknown             = errors.New("unknown protocol")
+	errICEGathererNotStarted          = errors.New("gatherer not started")
+
+	errNetworkTypeUnknown = errors.New("unknown network type")
+
+	errSDPDoesNotMatchOffer                           = errors.New("new sdp does not match previous offer")
+	errSDPDoesNotMatchAnswer                          = errors.New("new sdp does not match previous answer")
+	errPeerConnSDPTypeInvalidValue                    = errors.New("provided value is not a valid enum value of type SDPType")
+	errPeerConnStateChangeInvalid                     = errors.New("invalid state change op")
+	errPeerConnStateChangeUnhandled                   = errors.New("unhandled state change op")
+	errPeerConnSDPTypeInvalidValueSetLocalDescription = errors.New("invalid SDP type supplied to SetLocalDescription()")
+	errPeerConnRemoteDescriptionWithoutMidValue       = errors.New("remoteDescription contained media section without mid value")
+	errPeerConnRemoteDescriptionNil                   = errors.New("remoteDescription has not been set yet")
+	errPeerConnSingleMediaSectionHasExplicitSSRC      = errors.New("single media section has an explicit SSRC")
+	errPeerConnRemoteSSRCAddTransceiver               = errors.New("could not add transceiver for remote SSRC")
+	errPeerConnSimulcastMidRTPExtensionRequired       = errors.New("mid RTP Extensions required for Simulcast")
+	errPeerConnSimulcastStreamIDRTPExtensionRequired  = errors.New("stream id RTP Extensions required for Simulcast")
+	errPeerConnSimulcastIncomingSSRCFailed            = errors.New("incoming SSRC failed Simulcast probing")
+	errPeerConnAddTransceiverFromKindOnlyAcceptsOne   = errors.New("AddTransceiverFromKind only accepts one RtpTransceiverInit")
+	errPeerConnAddTransceiverFromTrackOnlyAcceptsOne  = errors.New("AddTransceiverFromTrack only accepts one RtpTransceiverInit")
+	errPeerConnAddTransceiverFromKindSupport          = errors.New("AddTransceiverFromKind currently only supports recvonly")
+	errPeerConnAddTransceiverFromTrackSupport         = errors.New("AddTransceiverFromTrack currently only supports sendonly and sendrecv")
+	errPeerConnSetIdentityProviderNotImplemented      = errors.New("TODO SetIdentityProvider")
+	errPeerConnWriteRTCPOpenWriteStream               = errors.New("WriteRTCP failed to open WriteStream")
+	errPeerConnTranscieverMidNil                      = errors.New("cannot find transceiver with mid")
+
+	errRTPReceiverDTLSTransportNil            = errors.New("DTLSTransport must not be nil")
+	errRTPReceiverReceiveAlreadyCalled        = errors.New("Receive has already been called")
+	errRTPReceiverWithSSRCTrackStreamNotFound = errors.New("unable to find stream for Track with SSRC")
+	errRTPReceiverForSSRCTrackStreamNotFound  = errors.New("no trackStreams found for SSRC")
+	errRTPReceiverForRIDTrackStreamNotFound   = errors.New("no trackStreams found for RID")
+
+	errRTPSenderTrackNil          = errors.New("Track must not be nil")
+	errRTPSenderDTLSTransportNil  = errors.New("DTLSTransport must not be nil")
+	errRTPSenderSendAlreadyCalled = errors.New("Send has already been called")
+
+	errRTPTransceiverCannotChangeMid        = errors.New("errRTPSenderTrackNil")
+	errRTPTransceiverSetSendingInvalidState = errors.New("invalid state change in RTPTransceiver.setSending")
+
+	errSCTPTransportDTLS = errors.New("DTLS not established")
+
+	errSDPZeroTransceivers                 = errors.New("addTransceiverSDP() called with 0 transceivers")
+	errSDPMediaSectionMediaDataChanInvalid = errors.New("invalid Media Section. Media + DataChannel both enabled")
+	errSDPMediaSectionMultipleTrackInvalid = errors.New("invalid Media Section. Can not have multiple tracks in one MediaSection in UnifiedPlan")
+
+	errSettingEngineSetAnsweringDTLSRole = errors.New("SetAnsweringDTLSRole must DTLSRoleClient or DTLSRoleServer")
+
+	errSignalingStateCannotRollback            = errors.New("can't rollback from stable state")
+	errSignalingStateProposedTransitionInvalid = errors.New("invalid proposed signaling state transition")
+
+	errStatsICECandidateStateInvalid = errors.New("cannot convert to StatsICECandidatePairStateSucceeded invalid ice candidate state")
+
+	errICETransportNotInNew = errors.New("ICETransport can only be called in ICETransportStateNew")
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/gathering_complete_promise.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/gathering_complete_promise.go
new file mode 100644
index 000000000..a4d52f943
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/gathering_complete_promise.go
@@ -0,0 +1,24 @@
+package webrtc
+
+import (
+	"context"
+)
+
+// GatheringCompletePromise is a Pion specific helper function that returns a channel that is closed when gathering is complete.
+// This function may be helpful in cases where you are unable to trickle your ICE Candidates.
+//
+// It is better to not use this function, and instead trickle candidates. If you use this function you will see longer connection startup times.
+// When the call is connected you will see no impact however.
+func GatheringCompletePromise(pc *PeerConnection) (gatherComplete <-chan struct{}) {
+	gatheringComplete, done := context.WithCancel(context.Background())
+
+	// It's possible to miss the GatherComplete event since setGatherCompleteHandler is an atomic operation and the
+	// promise might have been created after the gathering is finished. Therefore, we need to check if the ICE gathering
+	// state has changed to complete so that we don't block the caller forever.
+	pc.setGatherCompleteHandler(func() { done() })
+	if pc.ICEGatheringState() == ICEGatheringStateComplete {
+		done()
+	}
+
+	return gatheringComplete.Done()
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/go.mod b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/go.mod
new file mode 100644
index 000000000..9025eafe3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/go.mod
@@ -0,0 +1,23 @@
+module github.com/pion/webrtc/v3
+
+go 1.12
+
+require (
+	github.com/onsi/ginkgo v1.14.2 // indirect
+	github.com/onsi/gomega v1.10.3 // indirect
+	github.com/pion/datachannel v1.4.21
+	github.com/pion/dtls/v2 v2.0.4
+	github.com/pion/ice/v2 v2.0.14
+	github.com/pion/interceptor v0.0.9
+	github.com/pion/logging v0.2.2
+	github.com/pion/randutil v0.1.0
+	github.com/pion/rtcp v1.2.6
+	github.com/pion/rtp v1.6.2
+	github.com/pion/sctp v1.7.11
+	github.com/pion/sdp/v3 v3.0.4
+	github.com/pion/srtp/v2 v2.0.1
+	github.com/pion/transport v0.12.2
+	github.com/sclevine/agouti v3.0.0+incompatible
+	github.com/stretchr/testify v1.7.0
+	golang.org/x/net v0.0.0-20201201195509-5d6afe98e0b7
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/go.sum b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/go.sum
new file mode 100644
index 000000000..fd0314bf7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/go.sum
@@ -0,0 +1,138 @@
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
+github.com/fsnotify/fsnotify v1.4.9 h1:hsms1Qyu0jgnwNXIxa+/V/PDsU6CfLf6CNO8H7IWoS4=
+github.com/fsnotify/fsnotify v1.4.9/go.mod h1:znqG4EE+3YCdAaPaxE2ZRY/06pZUdp0tY4IgpuI1SZQ=
+github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
+github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8=
+github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA=
+github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs=
+github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:WU3c8KckQ9AFe+yFwt9sWVRKCVIyN9cPHBJSNnbL67w=
+github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0=
+github.com/golang/protobuf v1.4.2 h1:+Z5KGCizgyZCbGh1KZqA0fcLLkwbsjIzS4aV2v7wJX0=
+github.com/golang/protobuf v1.4.2/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
+github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
+github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
+github.com/google/go-cmp v0.4.0 h1:xsAVV57WRhGj6kEIi8ReJzQlHHqcBYCElAvkovg3B/4=
+github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/uuid v1.1.2 h1:EVhdT+1Kseyi1/pUmXKaFxYsDNy9RQYkMWRH68J/W7Y=
+github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU=
+github.com/kr/pretty v0.1.0 h1:L/CwN0zerZDmRFUapSPitk6f+Q3+0za1rQkzVuMiMFI=
+github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
+github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
+github.com/kr/text v0.1.0 h1:45sCR5RtlFHMR4UwH9sdQ5TC8v0qDQCHnXt+kaKSTVE=
+github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
+github.com/nxadm/tail v1.4.4 h1:DQuhQpB1tVlglWS2hLQ5OV6B5r8aGxSrPc5Qo6uTN78=
+github.com/nxadm/tail v1.4.4/go.mod h1:kenIhsEOeOJmVchQTgglprH7qJGnHDVpk1VPCcaMI8A=
+github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
+github.com/onsi/ginkgo v1.12.1/go.mod h1:zj2OWP4+oCPe1qIXoGWkgMRwljMUYCdkwsT2108oapk=
+github.com/onsi/ginkgo v1.14.2 h1:8mVmC9kjFFmA8H4pKMUhcblgifdkOIXPvbhN1T36q1M=
+github.com/onsi/ginkgo v1.14.2/go.mod h1:iSB4RoI2tjJc9BBv4NKIKWKya62Rps+oPG/Lv9klQyY=
+github.com/onsi/gomega v1.7.1/go.mod h1:XdKZgCCFLUoM/7CFJVPcG8C1xQ1AJ0vpAezJrB7JYyY=
+github.com/onsi/gomega v1.10.1/go.mod h1:iN09h71vgCQne3DLsj+A5owkum+a2tYe+TOCB1ybHNo=
+github.com/onsi/gomega v1.10.3 h1:gph6h/qe9GSUw1NhH1gp+qb+h8rXD8Cy60Z32Qw3ELA=
+github.com/onsi/gomega v1.10.3/go.mod h1:V9xEwhxec5O8UDM77eCW8vLymOMltsqPVYWrpDsH8xc=
+github.com/pion/datachannel v1.4.21 h1:3ZvhNyfmxsAqltQrApLPQMhSFNA+aT87RqyCq4OXmf0=
+github.com/pion/datachannel v1.4.21/go.mod h1:oiNyP4gHx2DIwRzX/MFyH0Rz/Gz05OgBlayAI2hAWjg=
+github.com/pion/dtls/v2 v2.0.4 h1:WuUcqi6oYMu/noNTz92QrF1DaFj4eXbhQ6dzaaAwOiI=
+github.com/pion/dtls/v2 v2.0.4/go.mod h1:qAkFscX0ZHoI1E07RfYPoRw3manThveu+mlTDdOxoGI=
+github.com/pion/ice/v2 v2.0.14 h1:FxXxauyykf89SWAtkQCfnHkno6G8+bhRkNguSh9zU+4=
+github.com/pion/ice/v2 v2.0.14/go.mod h1:wqaUbOq5ObDNU5ox1hRsEst0rWfsKuH1zXjQFEWiZwM=
+github.com/pion/interceptor v0.0.9 h1:fk5hTdyLO3KURQsf/+RjMpEm4NE3yeTY9Kh97b5BvwA=
+github.com/pion/interceptor v0.0.9/go.mod h1:dHgEP5dtxOTf21MObuBAjJeAayPxLUAZjerGH8Xr07c=
+github.com/pion/logging v0.2.2 h1:M9+AIj/+pxNsDfAT64+MAVgJO0rsyLnoJKCqf//DoeY=
+github.com/pion/logging v0.2.2/go.mod h1:k0/tDVsRCX2Mb2ZEmTqNa7CWsQPc+YYCB7Q+5pahoms=
+github.com/pion/mdns v0.0.4 h1:O4vvVqr4DGX63vzmO6Fw9vpy3lfztVWHGCQfyw0ZLSY=
+github.com/pion/mdns v0.0.4/go.mod h1:R1sL0p50l42S5lJs91oNdUL58nm0QHrhxnSegr++qC0=
+github.com/pion/randutil v0.1.0 h1:CFG1UdESneORglEsnimhUjf33Rwjubwj6xfiOXBa3mA=
+github.com/pion/randutil v0.1.0/go.mod h1:XcJrSMMbbMRhASFVOlj/5hQial/Y8oH/HVo7TBZq+j8=
+github.com/pion/rtcp v1.2.6 h1:1zvwBbyd0TeEuuWftrd/4d++m+/kZSeiguxU61LFWpo=
+github.com/pion/rtcp v1.2.6/go.mod h1:52rMNPWFsjr39z9B9MhnkqhPLoeHTv1aN63o/42bWE0=
+github.com/pion/rtp v1.6.2 h1:iGBerLX6JiDjB9NXuaPzHyxHFG9JsIEdgwTC0lp5n/U=
+github.com/pion/rtp v1.6.2/go.mod h1:bDb5n+BFZxXx0Ea7E5qe+klMuqiBrP+w8XSjiWtCUko=
+github.com/pion/sctp v1.7.10/go.mod h1:EhpTUQu1/lcK3xI+eriS6/96fWetHGCvBi9MSsnaBN0=
+github.com/pion/sctp v1.7.11 h1:UCnj7MsobLKLuP/Hh+JMiI/6W5Bs/VF45lWKgHFjSIE=
+github.com/pion/sctp v1.7.11/go.mod h1:EhpTUQu1/lcK3xI+eriS6/96fWetHGCvBi9MSsnaBN0=
+github.com/pion/sdp/v3 v3.0.4 h1:2Kf+dgrzJflNCSw3TV5v2VLeI0s/qkzy2r5jlR0wzf8=
+github.com/pion/sdp/v3 v3.0.4/go.mod h1:bNiSknmJE0HYBprTHXKPQ3+JjacTv5uap92ueJZKsRk=
+github.com/pion/srtp/v2 v2.0.1 h1:kgfh65ob3EcnFYA4kUBvU/menCp9u7qaJLXwWgpobzs=
+github.com/pion/srtp/v2 v2.0.1/go.mod h1:c8NWHhhkFf/drmHTAblkdu8++lsISEBBdAuiyxgqIsE=
+github.com/pion/stun v0.3.5 h1:uLUCBCkQby4S1cf6CGuR9QrVOKcvUwFeemaC865QHDg=
+github.com/pion/stun v0.3.5/go.mod h1:gDMim+47EeEtfWogA37n6qXZS88L5V6LqFcf+DZA2UA=
+github.com/pion/transport v0.8.10/go.mod h1:tBmha/UCjpum5hqTWhfAEs3CO4/tHSg0MYRhSzR+CZ8=
+github.com/pion/transport v0.10.0/go.mod h1:BnHnUipd0rZQyTVB2SBGojFHT9CBt5C5TcsJSQGkvSE=
+github.com/pion/transport v0.10.1/go.mod h1:PBis1stIILMiis0PewDw91WJeLJkyIMcEk+DwKOzf4A=
+github.com/pion/transport v0.12.0/go.mod h1:N3+vZQD9HlDP5GWkZ85LohxNsDcNgofQmyL6ojX5d8Q=
+github.com/pion/transport v0.12.2 h1:WYEjhloRHt1R86LhUKjC5y+P52Y11/QqEUalvtzVoys=
+github.com/pion/transport v0.12.2/go.mod h1:N3+vZQD9HlDP5GWkZ85LohxNsDcNgofQmyL6ojX5d8Q=
+github.com/pion/turn/v2 v2.0.5 h1:iwMHqDfPEDEOFzwWKT56eFmh6DYC6o/+xnLAEzgISbA=
+github.com/pion/turn/v2 v2.0.5/go.mod h1:APg43CFyt/14Uy7heYUOGWdkem/Wu4PhCO/bjyrTqMw=
+github.com/pion/udp v0.1.0 h1:uGxQsNyrqG3GLINv36Ff60covYmfrLoxzwnCsIYspXI=
+github.com/pion/udp v0.1.0/go.mod h1:BPELIjbwE9PRbd/zxI/KYBnbo7B6+oA6YuEaNE8lths=
+github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
+github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/sclevine/agouti v3.0.0+incompatible h1:8IBJS6PWz3uTlMP3YBIR5f+KAldcGuOeFkFbUWfBgK4=
+github.com/sclevine/agouti v3.0.0+incompatible/go.mod h1:b4WX9W9L1sfQKXeJf1mUTLZKJ48R1S7H23Ji7oFO5Bw=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
+github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
+github.com/stretchr/testify v1.6.1 h1:hDPOHmpOpP40lSULcqw7IrRb/u7w6RpDC9399XyoNd0=
+github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.7.0 h1:nwc3DEeHmmLAfoZucVR881uASk0Mfjw8xYJ99tb5CcY=
+github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/crypto v0.0.0-20201016220609-9e8e0b390897 h1:pLI5jrR7OSLijeIDcmRxNmw2api+jEfxLoykJVice/E=
+golang.org/x/crypto v0.0.0-20201016220609-9e8e0b390897/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20191126235420-ef20fe5d7933/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200520004742-59133d7f0dd7/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
+golang.org/x/net v0.0.0-20200625001655-4c5254603344/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
+golang.org/x/net v0.0.0-20201006153459-a7d1128ccaa0/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/net v0.0.0-20201031054903-ff519b6c9102/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/net v0.0.0-20201201195509-5d6afe98e0b7 h1:3uJsdck53FDIpWwLeAXlia9p4C8j0BO2xZrqzKpL0D8=
+golang.org/x/net v0.0.0-20201201195509-5d6afe98e0b7/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20190904154756-749cb33beabd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20191005200804-aed5e4c7ecf9/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20191120155948-bd437916bb0e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200519105757-fe76b779f299/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f h1:+Nyd8tzPX9R7BWHguqsrbFdRx3WQ/1ib8I44HXV5yTA=
+golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
+golang.org/x/text v0.3.3 h1:cokOdA+Jmi5PJGXLlLllQSgYigAEfHXJAERHVMaCc2k=
+golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1 h1:go1bK/D/BFZV2I8cIQd1NKEZ+0owSTG1fDTci4IqFcE=
+golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
+google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
+google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=
+google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE=
+google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo=
+google.golang.org/protobuf v1.23.0 h1:4MY060fB1DLGMB/7MBTLnwQUY6+F09GEiz6SsrNqyzM=
+google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 h1:YR8cESwS4TdDjEe65xsg0ogRM/Nc3DYOhEAlW+xobZo=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys=
+gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ=
+gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw=
+gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.2.4/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.3.0 h1:clyUAQHOM3G0M3f5vQj7LuJrETvjVot3Z5el9nffUtU=
+gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c h1:dUUwHk2QECo/6vqA44rthZ8ie2QXMNeKRTHCNY2nXvo=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/ice_go.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/ice_go.go
new file mode 100644
index 000000000..897ed0da3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/ice_go.go
@@ -0,0 +1,10 @@
+// +build !js
+
+package webrtc
+
+// NewICETransport creates a new NewICETransport.
+// This constructor is part of the ORTC API. It is not
+// meant to be used together with the basic WebRTC API.
+func (api *API) NewICETransport(gatherer *ICEGatherer) *ICETransport {
+	return NewICETransport(gatherer, api.settingEngine.LoggerFactory)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecandidate.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecandidate.go
new file mode 100644
index 000000000..1b0fbfcdb
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecandidate.go
@@ -0,0 +1,169 @@
+package webrtc
+
+import (
+	"fmt"
+
+	"github.com/pion/ice/v2"
+)
+
+// ICECandidate represents a ice candidate
+type ICECandidate struct {
+	statsID        string
+	Foundation     string           `json:"foundation"`
+	Priority       uint32           `json:"priority"`
+	Address        string           `json:"address"`
+	Protocol       ICEProtocol      `json:"protocol"`
+	Port           uint16           `json:"port"`
+	Typ            ICECandidateType `json:"type"`
+	Component      uint16           `json:"component"`
+	RelatedAddress string           `json:"relatedAddress"`
+	RelatedPort    uint16           `json:"relatedPort"`
+	TCPType        string           `json:"tcpType"`
+}
+
+// Conversion for package ice
+
+func newICECandidatesFromICE(iceCandidates []ice.Candidate) ([]ICECandidate, error) {
+	candidates := []ICECandidate{}
+
+	for _, i := range iceCandidates {
+		c, err := newICECandidateFromICE(i)
+		if err != nil {
+			return nil, err
+		}
+		candidates = append(candidates, c)
+	}
+
+	return candidates, nil
+}
+
+func newICECandidateFromICE(i ice.Candidate) (ICECandidate, error) {
+	typ, err := convertTypeFromICE(i.Type())
+	if err != nil {
+		return ICECandidate{}, err
+	}
+	protocol, err := NewICEProtocol(i.NetworkType().NetworkShort())
+	if err != nil {
+		return ICECandidate{}, err
+	}
+
+	c := ICECandidate{
+		statsID:    i.ID(),
+		Foundation: i.Foundation(),
+		Priority:   i.Priority(),
+		Address:    i.Address(),
+		Protocol:   protocol,
+		Port:       uint16(i.Port()),
+		Component:  i.Component(),
+		Typ:        typ,
+		TCPType:    i.TCPType().String(),
+	}
+
+	if i.RelatedAddress() != nil {
+		c.RelatedAddress = i.RelatedAddress().Address
+		c.RelatedPort = uint16(i.RelatedAddress().Port)
+	}
+
+	return c, nil
+}
+
+func (c ICECandidate) toICE() (ice.Candidate, error) {
+	candidateID := c.statsID
+	switch c.Typ {
+	case ICECandidateTypeHost:
+		config := ice.CandidateHostConfig{
+			CandidateID: candidateID,
+			Network:     c.Protocol.String(),
+			Address:     c.Address,
+			Port:        int(c.Port),
+			Component:   c.Component,
+			TCPType:     ice.NewTCPType(c.TCPType),
+			Foundation:  c.Foundation,
+			Priority:    c.Priority,
+		}
+		return ice.NewCandidateHost(&config)
+	case ICECandidateTypeSrflx:
+		config := ice.CandidateServerReflexiveConfig{
+			CandidateID: candidateID,
+			Network:     c.Protocol.String(),
+			Address:     c.Address,
+			Port:        int(c.Port),
+			Component:   c.Component,
+			Foundation:  c.Foundation,
+			Priority:    c.Priority,
+			RelAddr:     c.RelatedAddress,
+			RelPort:     int(c.RelatedPort),
+		}
+		return ice.NewCandidateServerReflexive(&config)
+	case ICECandidateTypePrflx:
+		config := ice.CandidatePeerReflexiveConfig{
+			CandidateID: candidateID,
+			Network:     c.Protocol.String(),
+			Address:     c.Address,
+			Port:        int(c.Port),
+			Component:   c.Component,
+			Foundation:  c.Foundation,
+			Priority:    c.Priority,
+			RelAddr:     c.RelatedAddress,
+			RelPort:     int(c.RelatedPort),
+		}
+		return ice.NewCandidatePeerReflexive(&config)
+	case ICECandidateTypeRelay:
+		config := ice.CandidateRelayConfig{
+			CandidateID: candidateID,
+			Network:     c.Protocol.String(),
+			Address:     c.Address,
+			Port:        int(c.Port),
+			Component:   c.Component,
+			Foundation:  c.Foundation,
+			Priority:    c.Priority,
+			RelAddr:     c.RelatedAddress,
+			RelPort:     int(c.RelatedPort),
+		}
+		return ice.NewCandidateRelay(&config)
+	default:
+		return nil, fmt.Errorf("%w: %s", errICECandidateTypeUnknown, c.Typ)
+	}
+}
+
+func convertTypeFromICE(t ice.CandidateType) (ICECandidateType, error) {
+	switch t {
+	case ice.CandidateTypeHost:
+		return ICECandidateTypeHost, nil
+	case ice.CandidateTypeServerReflexive:
+		return ICECandidateTypeSrflx, nil
+	case ice.CandidateTypePeerReflexive:
+		return ICECandidateTypePrflx, nil
+	case ice.CandidateTypeRelay:
+		return ICECandidateTypeRelay, nil
+	default:
+		return ICECandidateType(t), fmt.Errorf("%w: %s", errICECandidateTypeUnknown, t)
+	}
+}
+
+func (c ICECandidate) String() string {
+	ic, err := c.toICE()
+	if err != nil {
+		return fmt.Sprintf("%#v failed to convert to ICE: %s", c, err)
+	}
+	return ic.String()
+}
+
+// ToJSON returns an ICECandidateInit
+// as indicated by the spec https://w3c.github.io/webrtc-pc/#dom-rtcicecandidate-tojson
+func (c ICECandidate) ToJSON() ICECandidateInit {
+	zeroVal := uint16(0)
+	emptyStr := ""
+	candidateStr := ""
+
+	candidate, err := c.toICE()
+	if err == nil {
+		candidateStr = candidate.Marshal()
+	}
+
+	return ICECandidateInit{
+		Candidate:     fmt.Sprintf("candidate:%s", candidateStr),
+		SDPMid:        &emptyStr,
+		SDPMLineIndex: &zeroVal,
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecandidateinit.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecandidateinit.go
new file mode 100644
index 000000000..31ebb4ba7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecandidateinit.go
@@ -0,0 +1,9 @@
+package webrtc
+
+// ICECandidateInit is used to serialize ice candidates
+type ICECandidateInit struct {
+	Candidate        string  `json:"candidate"`
+	SDPMid           *string `json:"sdpMid"`
+	SDPMLineIndex    *uint16 `json:"sdpMLineIndex"`
+	UsernameFragment *string `json:"usernameFragment"`
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecandidatepair.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecandidatepair.go
new file mode 100644
index 000000000..7350fbe59
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecandidatepair.go
@@ -0,0 +1,29 @@
+package webrtc
+
+import "fmt"
+
+// ICECandidatePair represents an ICE Candidate pair
+type ICECandidatePair struct {
+	statsID string
+	Local   *ICECandidate
+	Remote  *ICECandidate
+}
+
+func newICECandidatePairStatsID(localID, remoteID string) string {
+	return fmt.Sprintf("%s-%s", localID, remoteID)
+}
+
+func (p *ICECandidatePair) String() string {
+	return fmt.Sprintf("(local) %s <-> (remote) %s", p.Local, p.Remote)
+}
+
+// NewICECandidatePair returns an initialized *ICECandidatePair
+// for the given pair of ICECandidate instances
+func NewICECandidatePair(local, remote *ICECandidate) *ICECandidatePair {
+	statsID := newICECandidatePairStatsID(local.statsID, remote.statsID)
+	return &ICECandidatePair{
+		statsID: statsID,
+		Local:   local,
+		Remote:  remote,
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecandidatetype.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecandidatetype.go
new file mode 100644
index 000000000..e57bf14af
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecandidatetype.go
@@ -0,0 +1,94 @@
+package webrtc
+
+import (
+	"fmt"
+
+	"github.com/pion/ice/v2"
+)
+
+// ICECandidateType represents the type of the ICE candidate used.
+type ICECandidateType int
+
+const (
+	// ICECandidateTypeHost indicates that the candidate is of Host type as
+	// described in https://tools.ietf.org/html/rfc8445#section-5.1.1.1. A
+	// candidate obtained by binding to a specific port from an IP address on
+	// the host. This includes IP addresses on physical interfaces and logical
+	// ones, such as ones obtained through VPNs.
+	ICECandidateTypeHost ICECandidateType = iota + 1
+
+	// ICECandidateTypeSrflx indicates the the candidate is of Server
+	// Reflexive type as described
+	// https://tools.ietf.org/html/rfc8445#section-5.1.1.2. A candidate type
+	// whose IP address and port are a binding allocated by a NAT for an ICE
+	// agent after it sends a packet through the NAT to a server, such as a
+	// STUN server.
+	ICECandidateTypeSrflx
+
+	// ICECandidateTypePrflx indicates that the candidate is of Peer
+	// Reflexive type. A candidate type whose IP address and port are a binding
+	// allocated by a NAT for an ICE agent after it sends a packet through the
+	// NAT to its peer.
+	ICECandidateTypePrflx
+
+	// ICECandidateTypeRelay indicates the the candidate is of Relay type as
+	// described in https://tools.ietf.org/html/rfc8445#section-5.1.1.2. A
+	// candidate type obtained from a relay server, such as a TURN server.
+	ICECandidateTypeRelay
+)
+
+// This is done this way because of a linter.
+const (
+	iceCandidateTypeHostStr  = "host"
+	iceCandidateTypeSrflxStr = "srflx"
+	iceCandidateTypePrflxStr = "prflx"
+	iceCandidateTypeRelayStr = "relay"
+)
+
+// NewICECandidateType takes a string and converts it into ICECandidateType
+func NewICECandidateType(raw string) (ICECandidateType, error) {
+	switch raw {
+	case iceCandidateTypeHostStr:
+		return ICECandidateTypeHost, nil
+	case iceCandidateTypeSrflxStr:
+		return ICECandidateTypeSrflx, nil
+	case iceCandidateTypePrflxStr:
+		return ICECandidateTypePrflx, nil
+	case iceCandidateTypeRelayStr:
+		return ICECandidateTypeRelay, nil
+	default:
+		return ICECandidateType(Unknown), fmt.Errorf("%w: %s", errICECandidateTypeUnknown, raw)
+	}
+}
+
+func (t ICECandidateType) String() string {
+	switch t {
+	case ICECandidateTypeHost:
+		return iceCandidateTypeHostStr
+	case ICECandidateTypeSrflx:
+		return iceCandidateTypeSrflxStr
+	case ICECandidateTypePrflx:
+		return iceCandidateTypePrflxStr
+	case ICECandidateTypeRelay:
+		return iceCandidateTypeRelayStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
+
+func getCandidateType(candidateType ice.CandidateType) (ICECandidateType, error) {
+	switch candidateType {
+	case ice.CandidateTypeHost:
+		return ICECandidateTypeHost, nil
+	case ice.CandidateTypeServerReflexive:
+		return ICECandidateTypeSrflx, nil
+	case ice.CandidateTypePeerReflexive:
+		return ICECandidateTypePrflx, nil
+	case ice.CandidateTypeRelay:
+		return ICECandidateTypeRelay, nil
+	default:
+		// NOTE: this should never happen[tm]
+		err := fmt.Errorf("%w: %s", errICEInvalidConvertCandidateType, candidateType.String())
+		return ICECandidateType(Unknown), err
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecomponent.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecomponent.go
new file mode 100644
index 000000000..1f03ec5b0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecomponent.go
@@ -0,0 +1,47 @@
+package webrtc
+
+// ICEComponent describes if the ice transport is used for RTP
+// (or RTCP multiplexing).
+type ICEComponent int
+
+const (
+	// ICEComponentRTP indicates that the ICE Transport is used for RTP (or
+	// RTCP multiplexing), as defined in
+	// https://tools.ietf.org/html/rfc5245#section-4.1.1.1. Protocols
+	// multiplexed with RTP (e.g. data channel) share its component ID. This
+	// represents the component-id value 1 when encoded in candidate-attribute.
+	ICEComponentRTP ICEComponent = iota + 1
+
+	// ICEComponentRTCP indicates that the ICE Transport is used for RTCP as
+	// defined by https://tools.ietf.org/html/rfc5245#section-4.1.1.1. This
+	// represents the component-id value 2 when encoded in candidate-attribute.
+	ICEComponentRTCP
+)
+
+// This is done this way because of a linter.
+const (
+	iceComponentRTPStr  = "rtp"
+	iceComponentRTCPStr = "rtcp"
+)
+
+func newICEComponent(raw string) ICEComponent {
+	switch raw {
+	case iceComponentRTPStr:
+		return ICEComponentRTP
+	case iceComponentRTCPStr:
+		return ICEComponentRTCP
+	default:
+		return ICEComponent(Unknown)
+	}
+}
+
+func (t ICEComponent) String() string {
+	switch t {
+	case ICEComponentRTP:
+		return iceComponentRTPStr
+	case ICEComponentRTCP:
+		return iceComponentRTCPStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceconnectionstate.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceconnectionstate.go
new file mode 100644
index 000000000..22fd26975
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceconnectionstate.go
@@ -0,0 +1,94 @@
+package webrtc
+
+// ICEConnectionState indicates signaling state of the ICE Connection.
+type ICEConnectionState int
+
+const (
+	// ICEConnectionStateNew indicates that any of the ICETransports are
+	// in the "new" state and none of them are in the "checking", "disconnected"
+	// or "failed" state, or all ICETransports are in the "closed" state, or
+	// there are no transports.
+	ICEConnectionStateNew ICEConnectionState = iota + 1
+
+	// ICEConnectionStateChecking indicates that any of the ICETransports
+	// are in the "checking" state and none of them are in the "disconnected"
+	// or "failed" state.
+	ICEConnectionStateChecking
+
+	// ICEConnectionStateConnected indicates that all ICETransports are
+	// in the "connected", "completed" or "closed" state and at least one of
+	// them is in the "connected" state.
+	ICEConnectionStateConnected
+
+	// ICEConnectionStateCompleted indicates that all ICETransports are
+	// in the "completed" or "closed" state and at least one of them is in the
+	// "completed" state.
+	ICEConnectionStateCompleted
+
+	// ICEConnectionStateDisconnected indicates that any of the
+	// ICETransports are in the "disconnected" state and none of them are
+	// in the "failed" state.
+	ICEConnectionStateDisconnected
+
+	// ICEConnectionStateFailed indicates that any of the ICETransports
+	// are in the "failed" state.
+	ICEConnectionStateFailed
+
+	// ICEConnectionStateClosed indicates that the PeerConnection's
+	// isClosed is true.
+	ICEConnectionStateClosed
+)
+
+// This is done this way because of a linter.
+const (
+	iceConnectionStateNewStr          = "new"
+	iceConnectionStateCheckingStr     = "checking"
+	iceConnectionStateConnectedStr    = "connected"
+	iceConnectionStateCompletedStr    = "completed"
+	iceConnectionStateDisconnectedStr = "disconnected"
+	iceConnectionStateFailedStr       = "failed"
+	iceConnectionStateClosedStr       = "closed"
+)
+
+// NewICEConnectionState takes a string and converts it to ICEConnectionState
+func NewICEConnectionState(raw string) ICEConnectionState {
+	switch raw {
+	case iceConnectionStateNewStr:
+		return ICEConnectionStateNew
+	case iceConnectionStateCheckingStr:
+		return ICEConnectionStateChecking
+	case iceConnectionStateConnectedStr:
+		return ICEConnectionStateConnected
+	case iceConnectionStateCompletedStr:
+		return ICEConnectionStateCompleted
+	case iceConnectionStateDisconnectedStr:
+		return ICEConnectionStateDisconnected
+	case iceConnectionStateFailedStr:
+		return ICEConnectionStateFailed
+	case iceConnectionStateClosedStr:
+		return ICEConnectionStateClosed
+	default:
+		return ICEConnectionState(Unknown)
+	}
+}
+
+func (c ICEConnectionState) String() string {
+	switch c {
+	case ICEConnectionStateNew:
+		return iceConnectionStateNewStr
+	case ICEConnectionStateChecking:
+		return iceConnectionStateCheckingStr
+	case ICEConnectionStateConnected:
+		return iceConnectionStateConnectedStr
+	case ICEConnectionStateCompleted:
+		return iceConnectionStateCompletedStr
+	case ICEConnectionStateDisconnected:
+		return iceConnectionStateDisconnectedStr
+	case ICEConnectionStateFailed:
+		return iceConnectionStateFailedStr
+	case ICEConnectionStateClosed:
+		return iceConnectionStateClosedStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecredentialtype.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecredentialtype.go
new file mode 100644
index 000000000..3967c16da
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icecredentialtype.go
@@ -0,0 +1,43 @@
+package webrtc
+
+// ICECredentialType indicates the type of credentials used to connect to
+// an ICE server.
+type ICECredentialType int
+
+const (
+	// ICECredentialTypePassword describes username and password based
+	// credentials as described in https://tools.ietf.org/html/rfc5389.
+	ICECredentialTypePassword ICECredentialType = iota
+
+	// ICECredentialTypeOauth describes token based credential as described
+	// in https://tools.ietf.org/html/rfc7635.
+	ICECredentialTypeOauth
+)
+
+// This is done this way because of a linter.
+const (
+	iceCredentialTypePasswordStr = "password"
+	iceCredentialTypeOauthStr    = "oauth"
+)
+
+func newICECredentialType(raw string) ICECredentialType {
+	switch raw {
+	case iceCredentialTypePasswordStr:
+		return ICECredentialTypePassword
+	case iceCredentialTypeOauthStr:
+		return ICECredentialTypeOauth
+	default:
+		return ICECredentialType(Unknown)
+	}
+}
+
+func (t ICECredentialType) String() string {
+	switch t {
+	case ICECredentialTypePassword:
+		return iceCredentialTypePasswordStr
+	case ICECredentialTypeOauth:
+		return iceCredentialTypeOauthStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icegatherer.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icegatherer.go
new file mode 100644
index 000000000..31c64ee85
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icegatherer.go
@@ -0,0 +1,367 @@
+// +build !js
+
+package webrtc
+
+import (
+	"sync"
+	"sync/atomic"
+
+	"github.com/pion/ice/v2"
+	"github.com/pion/logging"
+)
+
+// ICEGatherer gathers local host, server reflexive and relay
+// candidates, as well as enabling the retrieval of local Interactive
+// Connectivity Establishment (ICE) parameters which can be
+// exchanged in signaling.
+type ICEGatherer struct {
+	lock  sync.RWMutex
+	log   logging.LeveledLogger
+	state ICEGathererState
+
+	validatedServers []*ice.URL
+	gatherPolicy     ICETransportPolicy
+
+	agent *ice.Agent
+
+	onLocalCandidateHandler atomic.Value // func(candidate *ICECandidate)
+	onStateChangeHandler    atomic.Value // func(state ICEGathererState)
+
+	// Used for GatheringCompletePromise
+	onGatheringCompleteHandler atomic.Value // func()
+
+	api *API
+}
+
+// NewICEGatherer creates a new NewICEGatherer.
+// This constructor is part of the ORTC API. It is not
+// meant to be used together with the basic WebRTC API.
+func (api *API) NewICEGatherer(opts ICEGatherOptions) (*ICEGatherer, error) {
+	var validatedServers []*ice.URL
+	if len(opts.ICEServers) > 0 {
+		for _, server := range opts.ICEServers {
+			url, err := server.urls()
+			if err != nil {
+				return nil, err
+			}
+			validatedServers = append(validatedServers, url...)
+		}
+	}
+
+	return &ICEGatherer{
+		state:            ICEGathererStateNew,
+		gatherPolicy:     opts.ICEGatherPolicy,
+		validatedServers: validatedServers,
+		api:              api,
+		log:              api.settingEngine.LoggerFactory.NewLogger("ice"),
+	}, nil
+}
+
+func (g *ICEGatherer) createAgent() error {
+	g.lock.Lock()
+	defer g.lock.Unlock()
+
+	if g.agent != nil || g.State() != ICEGathererStateNew {
+		return nil
+	}
+
+	candidateTypes := []ice.CandidateType{}
+	if g.api.settingEngine.candidates.ICELite {
+		candidateTypes = append(candidateTypes, ice.CandidateTypeHost)
+	} else if g.gatherPolicy == ICETransportPolicyRelay {
+		candidateTypes = append(candidateTypes, ice.CandidateTypeRelay)
+	}
+
+	var nat1To1CandiTyp ice.CandidateType
+	switch g.api.settingEngine.candidates.NAT1To1IPCandidateType {
+	case ICECandidateTypeHost:
+		nat1To1CandiTyp = ice.CandidateTypeHost
+	case ICECandidateTypeSrflx:
+		nat1To1CandiTyp = ice.CandidateTypeServerReflexive
+	default:
+		nat1To1CandiTyp = ice.CandidateTypeUnspecified
+	}
+
+	mDNSMode := g.api.settingEngine.candidates.MulticastDNSMode
+	if mDNSMode != ice.MulticastDNSModeDisabled && mDNSMode != ice.MulticastDNSModeQueryAndGather {
+		// If enum is in state we don't recognized default to MulticastDNSModeQueryOnly
+		mDNSMode = ice.MulticastDNSModeQueryOnly
+	}
+
+	config := &ice.AgentConfig{
+		Lite:                   g.api.settingEngine.candidates.ICELite,
+		Urls:                   g.validatedServers,
+		PortMin:                g.api.settingEngine.ephemeralUDP.PortMin,
+		PortMax:                g.api.settingEngine.ephemeralUDP.PortMax,
+		DisconnectedTimeout:    g.api.settingEngine.timeout.ICEDisconnectedTimeout,
+		FailedTimeout:          g.api.settingEngine.timeout.ICEFailedTimeout,
+		KeepaliveInterval:      g.api.settingEngine.timeout.ICEKeepaliveInterval,
+		LoggerFactory:          g.api.settingEngine.LoggerFactory,
+		CandidateTypes:         candidateTypes,
+		HostAcceptanceMinWait:  g.api.settingEngine.timeout.ICEHostAcceptanceMinWait,
+		SrflxAcceptanceMinWait: g.api.settingEngine.timeout.ICESrflxAcceptanceMinWait,
+		PrflxAcceptanceMinWait: g.api.settingEngine.timeout.ICEPrflxAcceptanceMinWait,
+		RelayAcceptanceMinWait: g.api.settingEngine.timeout.ICERelayAcceptanceMinWait,
+		InterfaceFilter:        g.api.settingEngine.candidates.InterfaceFilter,
+		NAT1To1IPs:             g.api.settingEngine.candidates.NAT1To1IPs,
+		NAT1To1IPCandidateType: nat1To1CandiTyp,
+		Net:                    g.api.settingEngine.vnet,
+		MulticastDNSMode:       mDNSMode,
+		MulticastDNSHostName:   g.api.settingEngine.candidates.MulticastDNSHostName,
+		LocalUfrag:             g.api.settingEngine.candidates.UsernameFragment,
+		LocalPwd:               g.api.settingEngine.candidates.Password,
+		TCPMux:                 g.api.settingEngine.iceTCPMux,
+		ProxyDialer:            g.api.settingEngine.iceProxyDialer,
+	}
+
+	requestedNetworkTypes := g.api.settingEngine.candidates.ICENetworkTypes
+	if len(requestedNetworkTypes) == 0 {
+		requestedNetworkTypes = supportedNetworkTypes()
+	}
+
+	for _, typ := range requestedNetworkTypes {
+		config.NetworkTypes = append(config.NetworkTypes, ice.NetworkType(typ))
+	}
+
+	agent, err := ice.NewAgent(config)
+	if err != nil {
+		return err
+	}
+
+	g.agent = agent
+	return nil
+}
+
+// Gather ICE candidates.
+func (g *ICEGatherer) Gather() error {
+	if err := g.createAgent(); err != nil {
+		return err
+	}
+
+	g.lock.Lock()
+	agent := g.agent
+	g.lock.Unlock()
+
+	g.setState(ICEGathererStateGathering)
+	if err := agent.OnCandidate(func(candidate ice.Candidate) {
+		onLocalCandidateHandler := func(*ICECandidate) {}
+		if handler, ok := g.onLocalCandidateHandler.Load().(func(candidate *ICECandidate)); ok && handler != nil {
+			onLocalCandidateHandler = handler
+		}
+
+		onGatheringCompleteHandler := func() {}
+		if handler, ok := g.onGatheringCompleteHandler.Load().(func()); ok && handler != nil {
+			onGatheringCompleteHandler = handler
+		}
+
+		if candidate != nil {
+			c, err := newICECandidateFromICE(candidate)
+			if err != nil {
+				g.log.Warnf("Failed to convert ice.Candidate: %s", err)
+				return
+			}
+			onLocalCandidateHandler(&c)
+		} else {
+			g.setState(ICEGathererStateComplete)
+
+			onGatheringCompleteHandler()
+			onLocalCandidateHandler(nil)
+		}
+	}); err != nil {
+		return err
+	}
+	return agent.GatherCandidates()
+}
+
+// Close prunes all local candidates, and closes the ports.
+func (g *ICEGatherer) Close() error {
+	g.lock.Lock()
+	defer g.lock.Unlock()
+
+	if g.agent == nil {
+		return nil
+	} else if err := g.agent.Close(); err != nil {
+		return err
+	}
+
+	g.agent = nil
+	g.setState(ICEGathererStateClosed)
+
+	return nil
+}
+
+// GetLocalParameters returns the ICE parameters of the ICEGatherer.
+func (g *ICEGatherer) GetLocalParameters() (ICEParameters, error) {
+	if err := g.createAgent(); err != nil {
+		return ICEParameters{}, err
+	}
+
+	frag, pwd, err := g.agent.GetLocalUserCredentials()
+	if err != nil {
+		return ICEParameters{}, err
+	}
+
+	return ICEParameters{
+		UsernameFragment: frag,
+		Password:         pwd,
+		ICELite:          false,
+	}, nil
+}
+
+// GetLocalCandidates returns the sequence of valid local candidates associated with the ICEGatherer.
+func (g *ICEGatherer) GetLocalCandidates() ([]ICECandidate, error) {
+	if err := g.createAgent(); err != nil {
+		return nil, err
+	}
+	iceCandidates, err := g.agent.GetLocalCandidates()
+	if err != nil {
+		return nil, err
+	}
+
+	return newICECandidatesFromICE(iceCandidates)
+}
+
+// OnLocalCandidate sets an event handler which fires when a new local ICE candidate is available
+// Take note that the handler is gonna be called with a nil pointer when gathering is finished.
+func (g *ICEGatherer) OnLocalCandidate(f func(*ICECandidate)) {
+	g.onLocalCandidateHandler.Store(f)
+}
+
+// OnStateChange fires any time the ICEGatherer changes
+func (g *ICEGatherer) OnStateChange(f func(ICEGathererState)) {
+	g.onStateChangeHandler.Store(f)
+}
+
+// State indicates the current state of the ICE gatherer.
+func (g *ICEGatherer) State() ICEGathererState {
+	return atomicLoadICEGathererState(&g.state)
+}
+
+func (g *ICEGatherer) setState(s ICEGathererState) {
+	atomicStoreICEGathererState(&g.state, s)
+
+	if handler, ok := g.onStateChangeHandler.Load().(func(state ICEGathererState)); ok && handler != nil {
+		handler(s)
+	}
+}
+
+func (g *ICEGatherer) getAgent() *ice.Agent {
+	g.lock.RLock()
+	defer g.lock.RUnlock()
+	return g.agent
+}
+
+func (g *ICEGatherer) collectStats(collector *statsReportCollector) {
+	agent := g.getAgent()
+	if agent == nil {
+		return
+	}
+
+	collector.Collecting()
+	go func(collector *statsReportCollector, agent *ice.Agent) {
+		for _, candidatePairStats := range agent.GetCandidatePairsStats() {
+			collector.Collecting()
+
+			state, err := toStatsICECandidatePairState(candidatePairStats.State)
+			if err != nil {
+				g.log.Error(err.Error())
+			}
+
+			pairID := newICECandidatePairStatsID(candidatePairStats.LocalCandidateID,
+				candidatePairStats.RemoteCandidateID)
+
+			stats := ICECandidatePairStats{
+				Timestamp: statsTimestampFrom(candidatePairStats.Timestamp),
+				Type:      StatsTypeCandidatePair,
+				ID:        pairID,
+				// TransportID:
+				LocalCandidateID:            candidatePairStats.LocalCandidateID,
+				RemoteCandidateID:           candidatePairStats.RemoteCandidateID,
+				State:                       state,
+				Nominated:                   candidatePairStats.Nominated,
+				PacketsSent:                 candidatePairStats.PacketsSent,
+				PacketsReceived:             candidatePairStats.PacketsReceived,
+				BytesSent:                   candidatePairStats.BytesSent,
+				BytesReceived:               candidatePairStats.BytesReceived,
+				LastPacketSentTimestamp:     statsTimestampFrom(candidatePairStats.LastPacketSentTimestamp),
+				LastPacketReceivedTimestamp: statsTimestampFrom(candidatePairStats.LastPacketReceivedTimestamp),
+				FirstRequestTimestamp:       statsTimestampFrom(candidatePairStats.FirstRequestTimestamp),
+				LastRequestTimestamp:        statsTimestampFrom(candidatePairStats.LastRequestTimestamp),
+				LastResponseTimestamp:       statsTimestampFrom(candidatePairStats.LastResponseTimestamp),
+				TotalRoundTripTime:          candidatePairStats.TotalRoundTripTime,
+				CurrentRoundTripTime:        candidatePairStats.CurrentRoundTripTime,
+				AvailableOutgoingBitrate:    candidatePairStats.AvailableOutgoingBitrate,
+				AvailableIncomingBitrate:    candidatePairStats.AvailableIncomingBitrate,
+				CircuitBreakerTriggerCount:  candidatePairStats.CircuitBreakerTriggerCount,
+				RequestsReceived:            candidatePairStats.RequestsReceived,
+				RequestsSent:                candidatePairStats.RequestsSent,
+				ResponsesReceived:           candidatePairStats.ResponsesReceived,
+				ResponsesSent:               candidatePairStats.ResponsesSent,
+				RetransmissionsReceived:     candidatePairStats.RetransmissionsReceived,
+				RetransmissionsSent:         candidatePairStats.RetransmissionsSent,
+				ConsentRequestsSent:         candidatePairStats.ConsentRequestsSent,
+				ConsentExpiredTimestamp:     statsTimestampFrom(candidatePairStats.ConsentExpiredTimestamp),
+			}
+			collector.Collect(stats.ID, stats)
+		}
+
+		for _, candidateStats := range agent.GetLocalCandidatesStats() {
+			collector.Collecting()
+
+			networkType, err := getNetworkType(candidateStats.NetworkType)
+			if err != nil {
+				g.log.Error(err.Error())
+			}
+
+			candidateType, err := getCandidateType(candidateStats.CandidateType)
+			if err != nil {
+				g.log.Error(err.Error())
+			}
+
+			stats := ICECandidateStats{
+				Timestamp:     statsTimestampFrom(candidateStats.Timestamp),
+				ID:            candidateStats.ID,
+				Type:          StatsTypeLocalCandidate,
+				NetworkType:   networkType,
+				IP:            candidateStats.IP,
+				Port:          int32(candidateStats.Port),
+				Protocol:      networkType.Protocol(),
+				CandidateType: candidateType,
+				Priority:      int32(candidateStats.Priority),
+				URL:           candidateStats.URL,
+				RelayProtocol: candidateStats.RelayProtocol,
+				Deleted:       candidateStats.Deleted,
+			}
+			collector.Collect(stats.ID, stats)
+		}
+
+		for _, candidateStats := range agent.GetRemoteCandidatesStats() {
+			collector.Collecting()
+			networkType, err := getNetworkType(candidateStats.NetworkType)
+			if err != nil {
+				g.log.Error(err.Error())
+			}
+
+			candidateType, err := getCandidateType(candidateStats.CandidateType)
+			if err != nil {
+				g.log.Error(err.Error())
+			}
+
+			stats := ICECandidateStats{
+				Timestamp:     statsTimestampFrom(candidateStats.Timestamp),
+				ID:            candidateStats.ID,
+				Type:          StatsTypeRemoteCandidate,
+				NetworkType:   networkType,
+				IP:            candidateStats.IP,
+				Port:          int32(candidateStats.Port),
+				Protocol:      networkType.Protocol(),
+				CandidateType: candidateType,
+				Priority:      int32(candidateStats.Priority),
+				URL:           candidateStats.URL,
+				RelayProtocol: candidateStats.RelayProtocol,
+			}
+			collector.Collect(stats.ID, stats)
+		}
+		collector.Done()
+	}(collector, agent)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icegathererstate.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icegathererstate.go
new file mode 100644
index 000000000..80dc77a2d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icegathererstate.go
@@ -0,0 +1,48 @@
+package webrtc
+
+import (
+	"sync/atomic"
+)
+
+// ICEGathererState represents the current state of the ICE gatherer.
+type ICEGathererState uint32
+
+const (
+	// ICEGathererStateNew indicates object has been created but
+	// gather() has not been called.
+	ICEGathererStateNew ICEGathererState = iota + 1
+
+	// ICEGathererStateGathering indicates gather() has been called,
+	// and the ICEGatherer is in the process of gathering candidates.
+	ICEGathererStateGathering
+
+	// ICEGathererStateComplete indicates the ICEGatherer has completed gathering.
+	ICEGathererStateComplete
+
+	// ICEGathererStateClosed indicates the closed state can only be entered
+	// when the ICEGatherer has been closed intentionally by calling close().
+	ICEGathererStateClosed
+)
+
+func (s ICEGathererState) String() string {
+	switch s {
+	case ICEGathererStateNew:
+		return "new"
+	case ICEGathererStateGathering:
+		return "gathering"
+	case ICEGathererStateComplete:
+		return "complete"
+	case ICEGathererStateClosed:
+		return "closed"
+	default:
+		return unknownStr
+	}
+}
+
+func atomicStoreICEGathererState(state *ICEGathererState, newState ICEGathererState) {
+	atomic.StoreUint32((*uint32)(state), uint32(newState))
+}
+
+func atomicLoadICEGathererState(state *ICEGathererState) ICEGathererState {
+	return ICEGathererState(atomic.LoadUint32((*uint32)(state)))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icegatheringstate.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icegatheringstate.go
new file mode 100644
index 000000000..21361f912
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icegatheringstate.go
@@ -0,0 +1,53 @@
+package webrtc
+
+// ICEGatheringState describes the state of the candidate gathering process.
+type ICEGatheringState int
+
+const (
+	// ICEGatheringStateNew indicates that any of the ICETransports are
+	// in the "new" gathering state and none of the transports are in the
+	// "gathering" state, or there are no transports.
+	ICEGatheringStateNew ICEGatheringState = iota + 1
+
+	// ICEGatheringStateGathering indicates that any of the ICETransports
+	// are in the "gathering" state.
+	ICEGatheringStateGathering
+
+	// ICEGatheringStateComplete indicates that at least one ICETransport
+	// exists, and all ICETransports are in the "completed" gathering state.
+	ICEGatheringStateComplete
+)
+
+// This is done this way because of a linter.
+const (
+	iceGatheringStateNewStr       = "new"
+	iceGatheringStateGatheringStr = "gathering"
+	iceGatheringStateCompleteStr  = "complete"
+)
+
+// NewICEGatheringState takes a string and converts it to ICEGatheringState
+func NewICEGatheringState(raw string) ICEGatheringState {
+	switch raw {
+	case iceGatheringStateNewStr:
+		return ICEGatheringStateNew
+	case iceGatheringStateGatheringStr:
+		return ICEGatheringStateGathering
+	case iceGatheringStateCompleteStr:
+		return ICEGatheringStateComplete
+	default:
+		return ICEGatheringState(Unknown)
+	}
+}
+
+func (t ICEGatheringState) String() string {
+	switch t {
+	case ICEGatheringStateNew:
+		return iceGatheringStateNewStr
+	case ICEGatheringStateGathering:
+		return iceGatheringStateGatheringStr
+	case ICEGatheringStateComplete:
+		return iceGatheringStateCompleteStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icegatheroptions.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icegatheroptions.go
new file mode 100644
index 000000000..88421c74e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icegatheroptions.go
@@ -0,0 +1,7 @@
+package webrtc
+
+// ICEGatherOptions provides options relating to the gathering of ICE candidates.
+type ICEGatherOptions struct {
+	ICEServers      []ICEServer
+	ICEGatherPolicy ICETransportPolicy
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceparameters.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceparameters.go
new file mode 100644
index 000000000..0c03a88bf
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceparameters.go
@@ -0,0 +1,9 @@
+package webrtc
+
+// ICEParameters includes the ICE username fragment
+// and password and other ICE-related parameters.
+type ICEParameters struct {
+	UsernameFragment string `json:"usernameFragment"`
+	Password         string `json:"password"`
+	ICELite          bool   `json:"iceLite"`
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceprotocol.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceprotocol.go
new file mode 100644
index 000000000..f9eb0cfab
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceprotocol.go
@@ -0,0 +1,47 @@
+package webrtc
+
+import (
+	"fmt"
+	"strings"
+)
+
+// ICEProtocol indicates the transport protocol type that is used in the
+// ice.URL structure.
+type ICEProtocol int
+
+const (
+	// ICEProtocolUDP indicates the URL uses a UDP transport.
+	ICEProtocolUDP ICEProtocol = iota + 1
+
+	// ICEProtocolTCP indicates the URL uses a TCP transport.
+	ICEProtocolTCP
+)
+
+// This is done this way because of a linter.
+const (
+	iceProtocolUDPStr = "udp"
+	iceProtocolTCPStr = "tcp"
+)
+
+// NewICEProtocol takes a string and converts it to ICEProtocol
+func NewICEProtocol(raw string) (ICEProtocol, error) {
+	switch {
+	case strings.EqualFold(iceProtocolUDPStr, raw):
+		return ICEProtocolUDP, nil
+	case strings.EqualFold(iceProtocolTCPStr, raw):
+		return ICEProtocolTCP, nil
+	default:
+		return ICEProtocol(Unknown), fmt.Errorf("%w: %s", errICEProtocolUnknown, raw)
+	}
+}
+
+func (t ICEProtocol) String() string {
+	switch t {
+	case ICEProtocolUDP:
+		return iceProtocolUDPStr
+	case ICEProtocolTCP:
+		return iceProtocolTCPStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icerole.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icerole.go
new file mode 100644
index 000000000..11187863b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icerole.go
@@ -0,0 +1,45 @@
+package webrtc
+
+// ICERole describes the role ice.Agent is playing in selecting the
+// preferred the candidate pair.
+type ICERole int
+
+const (
+	// ICERoleControlling indicates that the ICE agent that is responsible
+	// for selecting the final choice of candidate pairs and signaling them
+	// through STUN and an updated offer, if needed. In any session, one agent
+	// is always controlling. The other is the controlled agent.
+	ICERoleControlling ICERole = iota + 1
+
+	// ICERoleControlled indicates that an ICE agent that waits for the
+	// controlling agent to select the final choice of candidate pairs.
+	ICERoleControlled
+)
+
+// This is done this way because of a linter.
+const (
+	iceRoleControllingStr = "controlling"
+	iceRoleControlledStr  = "controlled"
+)
+
+func newICERole(raw string) ICERole {
+	switch raw {
+	case iceRoleControllingStr:
+		return ICERoleControlling
+	case iceRoleControlledStr:
+		return ICERoleControlled
+	default:
+		return ICERole(Unknown)
+	}
+}
+
+func (t ICERole) String() string {
+	switch t {
+	case ICERoleControlling:
+		return iceRoleControllingStr
+	case ICERoleControlled:
+		return iceRoleControlledStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceserver.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceserver.go
new file mode 100644
index 000000000..76146ece2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceserver.go
@@ -0,0 +1,68 @@
+// +build !js
+
+package webrtc
+
+import (
+	"github.com/pion/ice/v2"
+	"github.com/pion/webrtc/v3/pkg/rtcerr"
+)
+
+// ICEServer describes a single STUN and TURN server that can be used by
+// the ICEAgent to establish a connection with a peer.
+type ICEServer struct {
+	URLs           []string          `json:"urls"`
+	Username       string            `json:"username,omitempty"`
+	Credential     interface{}       `json:"credential,omitempty"`
+	CredentialType ICECredentialType `json:"credentialType,omitempty"`
+}
+
+func (s ICEServer) parseURL(i int) (*ice.URL, error) {
+	return ice.ParseURL(s.URLs[i])
+}
+
+func (s ICEServer) validate() error {
+	_, err := s.urls()
+	return err
+}
+
+func (s ICEServer) urls() ([]*ice.URL, error) {
+	urls := []*ice.URL{}
+
+	for i := range s.URLs {
+		url, err := s.parseURL(i)
+		if err != nil {
+			return nil, &rtcerr.InvalidAccessError{Err: err}
+		}
+
+		if url.Scheme == ice.SchemeTypeTURN || url.Scheme == ice.SchemeTypeTURNS {
+			// https://www.w3.org/TR/webrtc/#set-the-configuration (step #11.3.2)
+			if s.Username == "" || s.Credential == nil {
+				return nil, &rtcerr.InvalidAccessError{Err: ErrNoTurnCredentials}
+			}
+			url.Username = s.Username
+
+			switch s.CredentialType {
+			case ICECredentialTypePassword:
+				// https://www.w3.org/TR/webrtc/#set-the-configuration (step #11.3.3)
+				password, ok := s.Credential.(string)
+				if !ok {
+					return nil, &rtcerr.InvalidAccessError{Err: ErrTurnCredentials}
+				}
+				url.Password = password
+
+			case ICECredentialTypeOauth:
+				// https://www.w3.org/TR/webrtc/#set-the-configuration (step #11.3.4)
+				if _, ok := s.Credential.(OAuthCredential); !ok {
+					return nil, &rtcerr.InvalidAccessError{Err: ErrTurnCredentials}
+				}
+
+			default:
+				return nil, &rtcerr.InvalidAccessError{Err: ErrTurnCredentials}
+			}
+		}
+
+		urls = append(urls, url)
+	}
+
+	return urls, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceserver_js.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceserver_js.go
new file mode 100644
index 000000000..07b2dcba6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/iceserver_js.go
@@ -0,0 +1,42 @@
+// +build js,wasm
+
+package webrtc
+
+import (
+	"errors"
+
+	"github.com/pion/ice/v2"
+)
+
+// ICEServer describes a single STUN and TURN server that can be used by
+// the ICEAgent to establish a connection with a peer.
+type ICEServer struct {
+	URLs     []string
+	Username string
+	// Note: TURN is not supported in the WASM bindings yet
+	Credential     interface{}
+	CredentialType ICECredentialType
+}
+
+func (s ICEServer) parseURL(i int) (*ice.URL, error) {
+	return ice.ParseURL(s.URLs[i])
+}
+
+func (s ICEServer) validate() ([]*ice.URL, error) {
+	urls := []*ice.URL{}
+
+	for i := range s.URLs {
+		url, err := s.parseURL(i)
+		if err != nil {
+			return nil, err
+		}
+
+		if url.Scheme == ice.SchemeTypeTURN || url.Scheme == ice.SchemeTypeTURNS {
+			return nil, errors.New("TURN is not currently supported in the JavaScript/Wasm bindings")
+		}
+
+		urls = append(urls, url)
+	}
+
+	return urls, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icetcp.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icetcp.go
new file mode 100644
index 000000000..a5f1d0942
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icetcp.go
@@ -0,0 +1,18 @@
+package webrtc
+
+import (
+	"net"
+
+	"github.com/pion/ice/v2"
+	"github.com/pion/logging"
+)
+
+// NewICETCPMux creates a new instance of ice.TCPMuxDefault. It enables use of
+// passive ICE TCP candidates.
+func NewICETCPMux(logger logging.LeveledLogger, listener net.Listener, readBufferSize int) ice.TCPMux {
+	return ice.NewTCPMuxDefault(ice.TCPMuxParams{
+		Listener:       listener,
+		Logger:         logger,
+		ReadBufferSize: readBufferSize,
+	})
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icetransport.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icetransport.go
new file mode 100644
index 000000000..ba20ec156
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icetransport.go
@@ -0,0 +1,368 @@
+// +build !js
+
+package webrtc
+
+import (
+	"context"
+	"fmt"
+	"sync"
+	"sync/atomic"
+	"time"
+
+	"github.com/pion/ice/v2"
+	"github.com/pion/logging"
+	"github.com/pion/webrtc/v3/internal/mux"
+)
+
+// ICETransport allows an application access to information about the ICE
+// transport over which packets are sent and received.
+type ICETransport struct {
+	lock sync.RWMutex
+
+	role ICERole
+	// Component ICEComponent
+	// State ICETransportState
+	// gatheringState ICEGathererState
+
+	onConnectionStateChangeHandler       atomic.Value // func(ICETransportState)
+	onSelectedCandidatePairChangeHandler atomic.Value // func(*ICECandidatePair)
+
+	state atomic.Value // ICETransportState
+
+	gatherer *ICEGatherer
+	conn     *ice.Conn
+	mux      *mux.Mux
+
+	ctx       context.Context
+	ctxCancel func()
+
+	loggerFactory logging.LoggerFactory
+
+	log logging.LeveledLogger
+}
+
+// func (t *ICETransport) GetLocalCandidates() []ICECandidate {
+//
+// }
+//
+// func (t *ICETransport) GetRemoteCandidates() []ICECandidate {
+//
+// }
+//
+// func (t *ICETransport) GetSelectedCandidatePair() ICECandidatePair {
+//
+// }
+//
+// func (t *ICETransport) GetLocalParameters() ICEParameters {
+//
+// }
+//
+// func (t *ICETransport) GetRemoteParameters() ICEParameters {
+//
+// }
+
+// NewICETransport creates a new NewICETransport.
+func NewICETransport(gatherer *ICEGatherer, loggerFactory logging.LoggerFactory) *ICETransport {
+	iceTransport := &ICETransport{
+		gatherer:      gatherer,
+		loggerFactory: loggerFactory,
+		log:           loggerFactory.NewLogger("ortc"),
+	}
+	iceTransport.setState(ICETransportStateNew)
+	return iceTransport
+}
+
+// Start incoming connectivity checks based on its configured role.
+func (t *ICETransport) Start(gatherer *ICEGatherer, params ICEParameters, role *ICERole) error {
+	t.lock.Lock()
+	defer t.lock.Unlock()
+
+	if t.State() != ICETransportStateNew {
+		return errICETransportNotInNew
+	}
+
+	if gatherer != nil {
+		t.gatherer = gatherer
+	}
+
+	if err := t.ensureGatherer(); err != nil {
+		return err
+	}
+
+	agent := t.gatherer.getAgent()
+	if agent == nil {
+		return fmt.Errorf("%w: unable to start ICETransport", errICEAgentNotExist)
+	}
+
+	if err := agent.OnConnectionStateChange(func(iceState ice.ConnectionState) {
+		state := newICETransportStateFromICE(iceState)
+
+		t.setState(state)
+		t.onConnectionStateChange(state)
+	}); err != nil {
+		return err
+	}
+	if err := agent.OnSelectedCandidatePairChange(func(local, remote ice.Candidate) {
+		candidates, err := newICECandidatesFromICE([]ice.Candidate{local, remote})
+		if err != nil {
+			t.log.Warnf("%w: %s", errICECandiatesCoversionFailed, err)
+			return
+		}
+		t.onSelectedCandidatePairChange(NewICECandidatePair(&candidates[0], &candidates[1]))
+	}); err != nil {
+		return err
+	}
+
+	if role == nil {
+		controlled := ICERoleControlled
+		role = &controlled
+	}
+	t.role = *role
+
+	t.ctx, t.ctxCancel = context.WithCancel(context.Background())
+
+	// Drop the lock here to allow ICE candidates to be
+	// added so that the agent can complete a connection
+	t.lock.Unlock()
+
+	var iceConn *ice.Conn
+	var err error
+	switch *role {
+	case ICERoleControlling:
+		iceConn, err = agent.Dial(t.ctx,
+			params.UsernameFragment,
+			params.Password)
+
+	case ICERoleControlled:
+		iceConn, err = agent.Accept(t.ctx,
+			params.UsernameFragment,
+			params.Password)
+
+	default:
+		err = errICERoleUnknown
+	}
+
+	// Reacquire the lock to set the connection/mux
+	t.lock.Lock()
+	if err != nil {
+		return err
+	}
+
+	t.conn = iceConn
+
+	config := mux.Config{
+		Conn:          t.conn,
+		BufferSize:    receiveMTU,
+		LoggerFactory: t.loggerFactory,
+	}
+	t.mux = mux.NewMux(config)
+
+	return nil
+}
+
+// restart is not exposed currently because ORTC has users create a whole new ICETransport
+// so for now lets keep it private so we don't cause ORTC users to depend on non-standard APIs
+func (t *ICETransport) restart() error {
+	t.lock.Lock()
+	defer t.lock.Unlock()
+
+	agent := t.gatherer.getAgent()
+	if agent == nil {
+		return fmt.Errorf("%w: unable to restart ICETransport", errICEAgentNotExist)
+	}
+
+	if err := agent.Restart(t.gatherer.api.settingEngine.candidates.UsernameFragment, t.gatherer.api.settingEngine.candidates.Password); err != nil {
+		return err
+	}
+	return t.gatherer.Gather()
+}
+
+// Stop irreversibly stops the ICETransport.
+func (t *ICETransport) Stop() error {
+	t.lock.Lock()
+	defer t.lock.Unlock()
+
+	t.setState(ICETransportStateClosed)
+
+	if t.ctxCancel != nil {
+		t.ctxCancel()
+	}
+
+	if t.mux != nil {
+		return t.mux.Close()
+	} else if t.gatherer != nil {
+		return t.gatherer.Close()
+	}
+	return nil
+}
+
+// OnSelectedCandidatePairChange sets a handler that is invoked when a new
+// ICE candidate pair is selected
+func (t *ICETransport) OnSelectedCandidatePairChange(f func(*ICECandidatePair)) {
+	t.onSelectedCandidatePairChangeHandler.Store(f)
+}
+
+func (t *ICETransport) onSelectedCandidatePairChange(pair *ICECandidatePair) {
+	handler := t.onSelectedCandidatePairChangeHandler.Load()
+	if handler != nil {
+		handler.(func(*ICECandidatePair))(pair)
+	}
+}
+
+// OnConnectionStateChange sets a handler that is fired when the ICE
+// connection state changes.
+func (t *ICETransport) OnConnectionStateChange(f func(ICETransportState)) {
+	t.onConnectionStateChangeHandler.Store(f)
+}
+
+func (t *ICETransport) onConnectionStateChange(state ICETransportState) {
+	handler := t.onConnectionStateChangeHandler.Load()
+	if handler != nil {
+		handler.(func(ICETransportState))(state)
+	}
+}
+
+// Role indicates the current role of the ICE transport.
+func (t *ICETransport) Role() ICERole {
+	t.lock.RLock()
+	defer t.lock.RUnlock()
+
+	return t.role
+}
+
+// SetRemoteCandidates sets the sequence of candidates associated with the remote ICETransport.
+func (t *ICETransport) SetRemoteCandidates(remoteCandidates []ICECandidate) error {
+	t.lock.RLock()
+	defer t.lock.RUnlock()
+
+	if err := t.ensureGatherer(); err != nil {
+		return err
+	}
+
+	agent := t.gatherer.getAgent()
+	if agent == nil {
+		return fmt.Errorf("%w: unable to set remote candidates", errICEAgentNotExist)
+	}
+
+	for _, c := range remoteCandidates {
+		i, err := c.toICE()
+		if err != nil {
+			return err
+		}
+
+		if err = agent.AddRemoteCandidate(i); err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+// AddRemoteCandidate adds a candidate associated with the remote ICETransport.
+func (t *ICETransport) AddRemoteCandidate(remoteCandidate *ICECandidate) error {
+	t.lock.RLock()
+	defer t.lock.RUnlock()
+
+	var (
+		c   ice.Candidate
+		err error
+	)
+
+	if err = t.ensureGatherer(); err != nil {
+		return err
+	}
+
+	if remoteCandidate != nil {
+		if c, err = remoteCandidate.toICE(); err != nil {
+			return err
+		}
+	}
+
+	agent := t.gatherer.getAgent()
+	if agent == nil {
+		return fmt.Errorf("%w: unable to add remote candidates", errICEAgentNotExist)
+	}
+
+	return agent.AddRemoteCandidate(c)
+}
+
+// State returns the current ice transport state.
+func (t *ICETransport) State() ICETransportState {
+	if v := t.state.Load(); v != nil {
+		return v.(ICETransportState)
+	}
+	return ICETransportState(0)
+}
+
+func (t *ICETransport) setState(i ICETransportState) {
+	t.state.Store(i)
+}
+
+// NewEndpoint registers a new endpoint on the underlying mux.
+func (t *ICETransport) NewEndpoint(f mux.MatchFunc) *mux.Endpoint {
+	t.lock.Lock()
+	defer t.lock.Unlock()
+	return t.mux.NewEndpoint(f)
+}
+
+func (t *ICETransport) ensureGatherer() error {
+	if t.gatherer == nil {
+		return errICEGathererNotStarted
+	} else if t.gatherer.getAgent() == nil {
+		if err := t.gatherer.createAgent(); err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+func (t *ICETransport) collectStats(collector *statsReportCollector) {
+	t.lock.Lock()
+	conn := t.conn
+	t.lock.Unlock()
+
+	collector.Collecting()
+
+	stats := TransportStats{
+		Timestamp: statsTimestampFrom(time.Now()),
+		Type:      StatsTypeTransport,
+		ID:        "iceTransport",
+	}
+
+	if conn != nil {
+		stats.BytesSent = conn.BytesSent()
+		stats.BytesReceived = conn.BytesReceived()
+	}
+
+	collector.Collect(stats.ID, stats)
+}
+
+func (t *ICETransport) haveRemoteCredentialsChange(newUfrag, newPwd string) bool {
+	t.lock.Lock()
+	defer t.lock.Unlock()
+
+	agent := t.gatherer.getAgent()
+	if agent == nil {
+		return false
+	}
+
+	uFrag, uPwd, err := agent.GetRemoteUserCredentials()
+	if err != nil {
+		return false
+	}
+
+	return uFrag != newUfrag || uPwd != newPwd
+}
+
+func (t *ICETransport) setRemoteCredentials(newUfrag, newPwd string) error {
+	t.lock.Lock()
+	defer t.lock.Unlock()
+
+	agent := t.gatherer.getAgent()
+	if agent == nil {
+		return fmt.Errorf("%w: unable to SetRemoteCredentials", errICEAgentNotExist)
+	}
+
+	return agent.SetRemoteCredentials(newUfrag, newPwd)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icetransportpolicy.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icetransportpolicy.go
new file mode 100644
index 000000000..16273f569
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icetransportpolicy.go
@@ -0,0 +1,65 @@
+package webrtc
+
+import (
+	"encoding/json"
+)
+
+// ICETransportPolicy defines the ICE candidate policy surface the
+// permitted candidates. Only these candidates are used for connectivity checks.
+type ICETransportPolicy int
+
+// ICEGatherPolicy is the ORTC equivalent of ICETransportPolicy
+type ICEGatherPolicy = ICETransportPolicy
+
+const (
+	// ICETransportPolicyAll indicates any type of candidate is used.
+	ICETransportPolicyAll ICETransportPolicy = iota
+
+	// ICETransportPolicyRelay indicates only media relay candidates such
+	// as candidates passing through a TURN server are used.
+	ICETransportPolicyRelay
+)
+
+// This is done this way because of a linter.
+const (
+	iceTransportPolicyRelayStr = "relay"
+	iceTransportPolicyAllStr   = "all"
+)
+
+// NewICETransportPolicy takes a string and converts it to ICETransportPolicy
+func NewICETransportPolicy(raw string) ICETransportPolicy {
+	switch raw {
+	case iceTransportPolicyRelayStr:
+		return ICETransportPolicyRelay
+	case iceTransportPolicyAllStr:
+		return ICETransportPolicyAll
+	default:
+		return ICETransportPolicy(Unknown)
+	}
+}
+
+func (t ICETransportPolicy) String() string {
+	switch t {
+	case ICETransportPolicyRelay:
+		return iceTransportPolicyRelayStr
+	case ICETransportPolicyAll:
+		return iceTransportPolicyAllStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
+
+// UnmarshalJSON parses the JSON-encoded data and stores the result
+func (t *ICETransportPolicy) UnmarshalJSON(b []byte) error {
+	var val string
+	if err := json.Unmarshal(b, &val); err != nil {
+		return err
+	}
+	*t = NewICETransportPolicy(val)
+	return nil
+}
+
+// MarshalJSON returns the JSON encoding
+func (t ICETransportPolicy) MarshalJSON() ([]byte, error) {
+	return json.Marshal(t.String())
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icetransportstate.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icetransportstate.go
new file mode 100644
index 000000000..da93e44d4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/icetransportstate.go
@@ -0,0 +1,107 @@
+package webrtc
+
+import "github.com/pion/ice/v2"
+
+// ICETransportState represents the current state of the ICE transport.
+type ICETransportState int
+
+const (
+	// ICETransportStateNew indicates the ICETransport is waiting
+	// for remote candidates to be supplied.
+	ICETransportStateNew = iota + 1
+
+	// ICETransportStateChecking indicates the ICETransport has
+	// received at least one remote candidate, and a local and remote
+	// ICECandidateComplete dictionary was not added as the last candidate.
+	ICETransportStateChecking
+
+	// ICETransportStateConnected indicates the ICETransport has
+	// received a response to an outgoing connectivity check, or has
+	// received incoming DTLS/media after a successful response to an
+	// incoming connectivity check, but is still checking other candidate
+	// pairs to see if there is a better connection.
+	ICETransportStateConnected
+
+	// ICETransportStateCompleted indicates the ICETransport tested
+	// all appropriate candidate pairs and at least one functioning
+	// candidate pair has been found.
+	ICETransportStateCompleted
+
+	// ICETransportStateFailed indicates the ICETransport the last
+	// candidate was added and all appropriate candidate pairs have either
+	// failed connectivity checks or have lost consent.
+	ICETransportStateFailed
+
+	// ICETransportStateDisconnected indicates the ICETransport has received
+	// at least one local and remote candidate, but the final candidate was
+	// received yet and all appropriate candidate pairs thus far have been
+	// tested and failed.
+	ICETransportStateDisconnected
+
+	// ICETransportStateClosed indicates the ICETransport has shut down
+	// and is no longer responding to STUN requests.
+	ICETransportStateClosed
+)
+
+func (c ICETransportState) String() string {
+	switch c {
+	case ICETransportStateNew:
+		return "new"
+	case ICETransportStateChecking:
+		return "checking"
+	case ICETransportStateConnected:
+		return "connected"
+	case ICETransportStateCompleted:
+		return "completed"
+	case ICETransportStateFailed:
+		return "failed"
+	case ICETransportStateDisconnected:
+		return "disconnected"
+	case ICETransportStateClosed:
+		return "closed"
+	default:
+		return unknownStr
+	}
+}
+
+func newICETransportStateFromICE(i ice.ConnectionState) ICETransportState {
+	switch i {
+	case ice.ConnectionStateNew:
+		return ICETransportStateNew
+	case ice.ConnectionStateChecking:
+		return ICETransportStateChecking
+	case ice.ConnectionStateConnected:
+		return ICETransportStateConnected
+	case ice.ConnectionStateCompleted:
+		return ICETransportStateCompleted
+	case ice.ConnectionStateFailed:
+		return ICETransportStateFailed
+	case ice.ConnectionStateDisconnected:
+		return ICETransportStateDisconnected
+	case ice.ConnectionStateClosed:
+		return ICETransportStateClosed
+	default:
+		return ICETransportState(Unknown)
+	}
+}
+
+func (c ICETransportState) toICE() ice.ConnectionState {
+	switch c {
+	case ICETransportStateNew:
+		return ice.ConnectionStateNew
+	case ICETransportStateChecking:
+		return ice.ConnectionStateChecking
+	case ICETransportStateConnected:
+		return ice.ConnectionStateConnected
+	case ICETransportStateCompleted:
+		return ice.ConnectionStateCompleted
+	case ICETransportStateFailed:
+		return ice.ConnectionStateFailed
+	case ICETransportStateDisconnected:
+		return ice.ConnectionStateDisconnected
+	case ICETransportStateClosed:
+		return ice.ConnectionStateClosed
+	default:
+		return ice.ConnectionState(Unknown)
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/interceptor.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/interceptor.go
new file mode 100644
index 000000000..d76793b99
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/interceptor.go
@@ -0,0 +1,85 @@
+// +build !js
+
+package webrtc
+
+import (
+	"sync/atomic"
+
+	"github.com/pion/interceptor"
+	"github.com/pion/interceptor/pkg/nack"
+	"github.com/pion/rtp"
+)
+
+// RegisterDefaultInterceptors will register some useful interceptors.
+// If you want to customize which interceptors are loaded, you should copy the
+// code from this method and remove unwanted interceptors.
+func RegisterDefaultInterceptors(mediaEngine *MediaEngine, interceptorRegistry *interceptor.Registry) error {
+	if err := ConfigureNack(mediaEngine, interceptorRegistry); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// ConfigureNack will setup everything necessary for handling generating/responding to nack messages.
+func ConfigureNack(mediaEngine *MediaEngine, interceptorRegistry *interceptor.Registry) error {
+	generator, err := nack.NewGeneratorInterceptor()
+	if err != nil {
+		return err
+	}
+
+	responder, err := nack.NewResponderInterceptor()
+	if err != nil {
+		return err
+	}
+
+	mediaEngine.RegisterFeedback(RTCPFeedback{Type: "nack"}, RTPCodecTypeVideo)
+	mediaEngine.RegisterFeedback(RTCPFeedback{Type: "nack", Parameter: "pli"}, RTPCodecTypeVideo)
+	interceptorRegistry.Add(responder)
+	interceptorRegistry.Add(generator)
+	return nil
+}
+
+type interceptorToTrackLocalWriter struct{ interceptor atomic.Value } // interceptor.RTPWriter }
+
+func (i *interceptorToTrackLocalWriter) WriteRTP(header *rtp.Header, payload []byte) (int, error) {
+	if writer, ok := i.interceptor.Load().(interceptor.RTPWriter); ok && writer != nil {
+		return writer.Write(header, payload, interceptor.Attributes{})
+	}
+
+	return 0, nil
+}
+
+func (i *interceptorToTrackLocalWriter) Write(b []byte) (int, error) {
+	packet := &rtp.Packet{}
+	if err := packet.Unmarshal(b); err != nil {
+		return 0, err
+	}
+
+	return i.WriteRTP(&packet.Header, packet.Payload)
+}
+
+func createStreamInfo(id string, ssrc SSRC, payloadType PayloadType, codec RTPCodecCapability, webrtcHeaderExtensions []RTPHeaderExtensionParameter) interceptor.StreamInfo {
+	headerExtensions := make([]interceptor.RTPHeaderExtension, 0, len(webrtcHeaderExtensions))
+	for _, h := range webrtcHeaderExtensions {
+		headerExtensions = append(headerExtensions, interceptor.RTPHeaderExtension{ID: h.ID, URI: h.URI})
+	}
+
+	feedbacks := make([]interceptor.RTCPFeedback, 0, len(codec.RTCPFeedback))
+	for _, f := range codec.RTCPFeedback {
+		feedbacks = append(feedbacks, interceptor.RTCPFeedback{Type: f.Type, Parameter: f.Parameter})
+	}
+
+	return interceptor.StreamInfo{
+		ID:                  id,
+		Attributes:          interceptor.Attributes{},
+		SSRC:                uint32(ssrc),
+		PayloadType:         uint8(payloadType),
+		RTPHeaderExtensions: headerExtensions,
+		MimeType:            codec.MimeType,
+		ClockRate:           codec.ClockRate,
+		Channels:            codec.Channels,
+		SDPFmtpLine:         codec.SDPFmtpLine,
+		RTCPFeedback:        feedbacks,
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/internal/mux/endpoint.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/internal/mux/endpoint.go
new file mode 100644
index 000000000..afccc0778
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/internal/mux/endpoint.go
@@ -0,0 +1,75 @@
+package mux
+
+import (
+	"errors"
+	"io"
+	"net"
+	"time"
+
+	"github.com/pion/ice/v2"
+	"github.com/pion/transport/packetio"
+)
+
+// Endpoint implements net.Conn. It is used to read muxed packets.
+type Endpoint struct {
+	mux    *Mux
+	buffer *packetio.Buffer
+}
+
+// Close unregisters the endpoint from the Mux
+func (e *Endpoint) Close() (err error) {
+	err = e.close()
+	if err != nil {
+		return err
+	}
+
+	e.mux.RemoveEndpoint(e)
+	return nil
+}
+
+func (e *Endpoint) close() error {
+	return e.buffer.Close()
+}
+
+// Read reads a packet of len(p) bytes from the underlying conn
+// that are matched by the associated MuxFunc
+func (e *Endpoint) Read(p []byte) (int, error) {
+	return e.buffer.Read(p)
+}
+
+// Write writes len(p) bytes to the underlying conn
+func (e *Endpoint) Write(p []byte) (int, error) {
+	n, err := e.mux.nextConn.Write(p)
+	if errors.Is(err, ice.ErrNoCandidatePairs) {
+		return 0, nil
+	} else if errors.Is(err, ice.ErrClosed) {
+		return 0, io.ErrClosedPipe
+	}
+
+	return n, err
+}
+
+// LocalAddr is a stub
+func (e *Endpoint) LocalAddr() net.Addr {
+	return e.mux.nextConn.LocalAddr()
+}
+
+// RemoteAddr is a stub
+func (e *Endpoint) RemoteAddr() net.Addr {
+	return e.mux.nextConn.RemoteAddr()
+}
+
+// SetDeadline is a stub
+func (e *Endpoint) SetDeadline(t time.Time) error {
+	return nil
+}
+
+// SetReadDeadline is a stub
+func (e *Endpoint) SetReadDeadline(t time.Time) error {
+	return nil
+}
+
+// SetWriteDeadline is a stub
+func (e *Endpoint) SetWriteDeadline(t time.Time) error {
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/internal/mux/mux.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/internal/mux/mux.go
new file mode 100644
index 000000000..83aaa26bc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/internal/mux/mux.go
@@ -0,0 +1,145 @@
+// Package mux multiplexes packets on a single socket (RFC7983)
+package mux
+
+import (
+	"net"
+	"sync"
+
+	"github.com/pion/logging"
+	"github.com/pion/transport/packetio"
+)
+
+// The maximum amount of data that can be buffered before returning errors.
+const maxBufferSize = 1000 * 1000 // 1MB
+
+// Config collects the arguments to mux.Mux construction into
+// a single structure
+type Config struct {
+	Conn          net.Conn
+	BufferSize    int
+	LoggerFactory logging.LoggerFactory
+}
+
+// Mux allows multiplexing
+type Mux struct {
+	lock       sync.RWMutex
+	nextConn   net.Conn
+	endpoints  map[*Endpoint]MatchFunc
+	bufferSize int
+	closedCh   chan struct{}
+
+	log logging.LeveledLogger
+}
+
+// NewMux creates a new Mux
+func NewMux(config Config) *Mux {
+	m := &Mux{
+		nextConn:   config.Conn,
+		endpoints:  make(map[*Endpoint]MatchFunc),
+		bufferSize: config.BufferSize,
+		closedCh:   make(chan struct{}),
+		log:        config.LoggerFactory.NewLogger("mux"),
+	}
+
+	go m.readLoop()
+
+	return m
+}
+
+// NewEndpoint creates a new Endpoint
+func (m *Mux) NewEndpoint(f MatchFunc) *Endpoint {
+	e := &Endpoint{
+		mux:    m,
+		buffer: packetio.NewBuffer(),
+	}
+
+	// Set a maximum size of the buffer in bytes.
+	// NOTE: We actually won't get anywhere close to this limit.
+	// SRTP will constantly read from the endpoint and drop packets if it's full.
+	e.buffer.SetLimitSize(maxBufferSize)
+
+	m.lock.Lock()
+	m.endpoints[e] = f
+	m.lock.Unlock()
+
+	return e
+}
+
+// RemoveEndpoint removes an endpoint from the Mux
+func (m *Mux) RemoveEndpoint(e *Endpoint) {
+	m.lock.Lock()
+	defer m.lock.Unlock()
+	delete(m.endpoints, e)
+}
+
+// Close closes the Mux and all associated Endpoints.
+func (m *Mux) Close() error {
+	m.lock.Lock()
+	for e := range m.endpoints {
+		err := e.close()
+		if err != nil {
+			return err
+		}
+
+		delete(m.endpoints, e)
+	}
+	m.lock.Unlock()
+
+	err := m.nextConn.Close()
+	if err != nil {
+		return err
+	}
+
+	// Wait for readLoop to end
+	<-m.closedCh
+
+	return nil
+}
+
+func (m *Mux) readLoop() {
+	defer func() {
+		close(m.closedCh)
+	}()
+
+	buf := make([]byte, m.bufferSize)
+	for {
+		n, err := m.nextConn.Read(buf)
+		if err != nil {
+			return
+		}
+
+		err = m.dispatch(buf[:n])
+		if err != nil {
+			return
+		}
+	}
+}
+
+func (m *Mux) dispatch(buf []byte) error {
+	var endpoint *Endpoint
+
+	m.lock.Lock()
+	for e, f := range m.endpoints {
+		if f(buf) {
+			endpoint = e
+			break
+		}
+	}
+	m.lock.Unlock()
+
+	if endpoint == nil {
+		if len(buf) > 0 {
+			m.log.Warnf("Warning: mux: no endpoint for packet starting with %d\n", buf[0])
+		} else {
+			m.log.Warnf("Warning: mux: no endpoint for zero length packet")
+		}
+		return nil
+	}
+
+	_, err := endpoint.buffer.Write(buf)
+	if err != nil {
+		return err
+	}
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/internal/mux/muxfunc.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/internal/mux/muxfunc.go
new file mode 100644
index 000000000..2ab585bf9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/internal/mux/muxfunc.go
@@ -0,0 +1,101 @@
+package mux
+
+import (
+	"bytes"
+	"encoding/binary"
+)
+
+// MatchFunc allows custom logic for mapping packets to an Endpoint
+type MatchFunc func([]byte) bool
+
+// MatchAll always returns true
+func MatchAll(b []byte) bool {
+	return true
+}
+
+// MatchNone always returns false
+func MatchNone(b []byte) bool {
+	return false
+}
+
+// MatchRange is a MatchFunc that accepts packets with the first byte in [lower..upper]
+func MatchRange(lower, upper byte) MatchFunc {
+	return func(buf []byte) bool {
+		if len(buf) < 1 {
+			return false
+		}
+		b := buf[0]
+		return b >= lower && b <= upper
+	}
+}
+
+// MatchFuncs as described in RFC7983
+// https://tools.ietf.org/html/rfc7983
+//              +----------------+
+//              |        [0..3] -+--> forward to STUN
+//              |                |
+//              |      [16..19] -+--> forward to ZRTP
+//              |                |
+//  packet -->  |      [20..63] -+--> forward to DTLS
+//              |                |
+//              |      [64..79] -+--> forward to TURN Channel
+//              |                |
+//              |    [128..191] -+--> forward to RTP/RTCP
+//              +----------------+
+
+// MatchSTUN is a MatchFunc that accepts packets with the first byte in [0..3]
+// as defied in RFC7983
+func MatchSTUN(b []byte) bool {
+	return MatchRange(0, 3)(b)
+}
+
+// MatchZRTP is a MatchFunc that accepts packets with the first byte in [16..19]
+// as defied in RFC7983
+func MatchZRTP(b []byte) bool {
+	return MatchRange(16, 19)(b)
+}
+
+// MatchDTLS is a MatchFunc that accepts packets with the first byte in [20..63]
+// as defied in RFC7983
+func MatchDTLS(b []byte) bool {
+	return MatchRange(20, 63)(b)
+}
+
+// MatchTURN is a MatchFunc that accepts packets with the first byte in [64..79]
+// as defied in RFC7983
+func MatchTURN(b []byte) bool {
+	return MatchRange(64, 79)(b)
+}
+
+// MatchSRTPOrSRTCP is a MatchFunc that accepts packets with the first byte in [128..191]
+// as defied in RFC7983
+func MatchSRTPOrSRTCP(b []byte) bool {
+	return MatchRange(128, 191)(b)
+}
+
+func isRTCP(buf []byte) bool {
+	// Not long enough to determine RTP/RTCP
+	if len(buf) < 4 {
+		return false
+	}
+
+	var rtcpPacketType uint8
+	r := bytes.NewReader([]byte{buf[1]})
+	if err := binary.Read(r, binary.BigEndian, &rtcpPacketType); err != nil {
+		return false
+	} else if rtcpPacketType >= 192 && rtcpPacketType <= 223 {
+		return true
+	}
+
+	return false
+}
+
+// MatchSRTP is a MatchFunc that only matches SRTP and not SRTCP
+func MatchSRTP(buf []byte) bool {
+	return MatchSRTPOrSRTCP(buf) && !isRTCP(buf)
+}
+
+// MatchSRTCP is a MatchFunc that only matches SRTCP and not SRTP
+func MatchSRTCP(buf []byte) bool {
+	return MatchSRTPOrSRTCP(buf) && isRTCP(buf)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/internal/util/util.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/internal/util/util.go
new file mode 100644
index 000000000..6e12b6410
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/internal/util/util.go
@@ -0,0 +1,72 @@
+// Package util provides auxiliary functions internally used in webrtc package
+package util
+
+import (
+	"errors"
+	"strings"
+
+	"github.com/pion/randutil"
+)
+
+const (
+	runesAlpha = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"
+)
+
+// Use global random generator to properly seed by crypto grade random.
+var globalMathRandomGenerator = randutil.NewMathRandomGenerator() // nolint:gochecknoglobals
+
+// MathRandAlpha generates a mathmatical random alphabet sequence of the requested length.
+func MathRandAlpha(n int) string {
+	return globalMathRandomGenerator.GenerateString(n, runesAlpha)
+}
+
+// RandUint32 generates a mathmatical random uint32.
+func RandUint32() uint32 {
+	return globalMathRandomGenerator.Uint32()
+}
+
+// FlattenErrs flattens multiple errors into one
+func FlattenErrs(errs []error) error {
+	errs2 := []error{}
+	for _, e := range errs {
+		if e != nil {
+			errs2 = append(errs2, e)
+		}
+	}
+	if len(errs2) == 0 {
+		return nil
+	}
+	return multiError(errs2)
+}
+
+type multiError []error
+
+func (me multiError) Error() string {
+	var errstrings []string
+
+	for _, err := range me {
+		if err != nil {
+			errstrings = append(errstrings, err.Error())
+		}
+	}
+
+	if len(errstrings) == 0 {
+		return "multiError must contain multiple error but is empty"
+	}
+
+	return strings.Join(errstrings, "\n")
+}
+
+func (me multiError) Is(err error) bool {
+	for _, e := range me {
+		if errors.Is(e, err) {
+			return true
+		}
+		if me2, ok := e.(multiError); ok {
+			if me2.Is(err) {
+				return true
+			}
+		}
+	}
+	return false
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/js_compare.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/js_compare.go
new file mode 100644
index 000000000..31e39802b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/js_compare.go
@@ -0,0 +1,13 @@
+// +build js,go1.14
+
+package webrtc
+
+import "syscall/js"
+
+func jsValueIsUndefined(v js.Value) bool {
+	return v.IsUndefined()
+}
+
+func jsValueIsNull(v js.Value) bool {
+	return v.IsNull()
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/js_compare_legacy.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/js_compare_legacy.go
new file mode 100644
index 000000000..e2e247a0e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/js_compare_legacy.go
@@ -0,0 +1,13 @@
+// +build js,!go1.14
+
+package webrtc
+
+import "syscall/js"
+
+func jsValueIsUndefined(v js.Value) bool {
+	return v == js.Undefined()
+}
+
+func jsValueIsNull(v js.Value) bool {
+	return v == js.Null()
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/js_utils.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/js_utils.go
new file mode 100644
index 000000000..25e89396b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/js_utils.go
@@ -0,0 +1,168 @@
+// +build js,wasm
+
+package webrtc
+
+import (
+	"fmt"
+	"syscall/js"
+)
+
+// awaitPromise accepts a js.Value representing a Promise. If the promise
+// resolves, it returns (result, nil). If the promise rejects, it returns
+// (js.Undefined, error). awaitPromise has a synchronous-like API but does not
+// block the JavaScript event loop.
+func awaitPromise(promise js.Value) (js.Value, error) {
+	resultsChan := make(chan js.Value)
+	errChan := make(chan js.Error)
+
+	thenFunc := js.FuncOf(func(this js.Value, args []js.Value) interface{} {
+		go func() {
+			resultsChan <- args[0]
+		}()
+		return js.Undefined()
+	})
+	defer thenFunc.Release()
+	promise.Call("then", thenFunc)
+
+	catchFunc := js.FuncOf(func(this js.Value, args []js.Value) interface{} {
+		go func() {
+			errChan <- js.Error{args[0]}
+		}()
+		return js.Undefined()
+	})
+	defer catchFunc.Release()
+	promise.Call("catch", catchFunc)
+
+	select {
+	case result := <-resultsChan:
+		return result, nil
+	case err := <-errChan:
+		return js.Undefined(), err
+	}
+}
+
+func valueToUint16Pointer(val js.Value) *uint16 {
+	if jsValueIsNull(val) || jsValueIsUndefined(val) {
+		return nil
+	}
+	convertedVal := uint16(val.Int())
+	return &convertedVal
+}
+
+func valueToStringPointer(val js.Value) *string {
+	if jsValueIsNull(val) || jsValueIsUndefined(val) {
+		return nil
+	}
+	stringVal := val.String()
+	return &stringVal
+}
+
+func stringToValueOrUndefined(val string) js.Value {
+	if val == "" {
+		return js.Undefined()
+	}
+	return js.ValueOf(val)
+}
+
+func uint8ToValueOrUndefined(val uint8) js.Value {
+	if val == 0 {
+		return js.Undefined()
+	}
+	return js.ValueOf(val)
+}
+
+func interfaceToValueOrUndefined(val interface{}) js.Value {
+	if val == nil {
+		return js.Undefined()
+	}
+	return js.ValueOf(val)
+}
+
+func valueToStringOrZero(val js.Value) string {
+	if jsValueIsUndefined(val) || jsValueIsNull(val) {
+		return ""
+	}
+	return val.String()
+}
+
+func valueToUint8OrZero(val js.Value) uint8 {
+	if jsValueIsUndefined(val) || jsValueIsNull(val) {
+		return 0
+	}
+	return uint8(val.Int())
+}
+
+func valueToUint16OrZero(val js.Value) uint16 {
+	if jsValueIsNull(val) || jsValueIsUndefined(val) {
+		return 0
+	}
+	return uint16(val.Int())
+}
+
+func valueToUint32OrZero(val js.Value) uint32 {
+	if jsValueIsNull(val) || jsValueIsUndefined(val) {
+		return 0
+	}
+	return uint32(val.Int())
+}
+
+func valueToStrings(val js.Value) []string {
+	result := make([]string, val.Length())
+	for i := 0; i < val.Length(); i++ {
+		result[i] = val.Index(i).String()
+	}
+	return result
+}
+
+func stringPointerToValue(val *string) js.Value {
+	if val == nil {
+		return js.Undefined()
+	}
+	return js.ValueOf(*val)
+}
+
+func uint16PointerToValue(val *uint16) js.Value {
+	if val == nil {
+		return js.Undefined()
+	}
+	return js.ValueOf(*val)
+}
+
+func boolPointerToValue(val *bool) js.Value {
+	if val == nil {
+		return js.Undefined()
+	}
+	return js.ValueOf(*val)
+}
+
+func stringsToValue(strings []string) js.Value {
+	val := make([]interface{}, len(strings))
+	for i, s := range strings {
+		val[i] = s
+	}
+	return js.ValueOf(val)
+}
+
+func stringEnumToValueOrUndefined(s string) js.Value {
+	if s == "unknown" {
+		return js.Undefined()
+	}
+	return js.ValueOf(s)
+}
+
+// Converts the return value of recover() to an error.
+func recoveryToError(e interface{}) error {
+	switch e := e.(type) {
+	case error:
+		return e
+	default:
+		return fmt.Errorf("recovered with non-error value: (%T) %s", e, e)
+	}
+}
+
+func uint8ArrayValueToBytes(val js.Value) []byte {
+	result := make([]byte, val.Length())
+	js.CopyBytesToGo(result, val)
+
+	return result
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/mediaengine.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/mediaengine.go
new file mode 100644
index 000000000..a2d68f6e9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/mediaengine.go
@@ -0,0 +1,512 @@
+// +build !js
+
+package webrtc
+
+import (
+	"fmt"
+	"strconv"
+	"strings"
+	"time"
+
+	"github.com/pion/rtp"
+	"github.com/pion/rtp/codecs"
+	"github.com/pion/sdp/v3"
+)
+
+const (
+	// MimeTypeH264 H264 MIME type.
+	// Note: Matching should be case insensitive.
+	MimeTypeH264 = "video/h264"
+	// MimeTypeOpus Opus MIME type
+	// Note: Matching should be case insensitive.
+	MimeTypeOpus = "audio/opus"
+	// MimeTypeVP8 VP8 MIME type
+	// Note: Matching should be case insensitive.
+	MimeTypeVP8 = "video/vp8"
+	// MimeTypeVP9 VP9 MIME type
+	// Note: Matching should be case insensitive.
+	MimeTypeVP9 = "video/vp9"
+	// MimeTypeG722 G722 MIME type
+	// Note: Matching should be case insensitive.
+	MimeTypeG722 = "audio/G722"
+	// MimeTypePCMU PCMU MIME type
+	// Note: Matching should be case insensitive.
+	MimeTypePCMU = "audio/PCMU"
+	// MimeTypePCMA PCMA MIME type
+	// Note: Matching should be case insensitive.
+	MimeTypePCMA = "audio/PCMA"
+)
+
+type mediaEngineHeaderExtension struct {
+	uri              string
+	isAudio, isVideo bool
+
+	// If set only Transceivers of this direction are allowed
+	allowedDirections []RTPTransceiverDirection
+}
+
+// A MediaEngine defines the codecs supported by a PeerConnection, and the
+// configuration of those codecs. A MediaEngine must not be shared between
+// PeerConnections.
+type MediaEngine struct {
+	// If we have attempted to negotiate a codec type yet.
+	negotiatedVideo, negotiatedAudio bool
+
+	videoCodecs, audioCodecs                     []RTPCodecParameters
+	negotiatedVideoCodecs, negotiatedAudioCodecs []RTPCodecParameters
+
+	headerExtensions           []mediaEngineHeaderExtension
+	negotiatedHeaderExtensions map[int]mediaEngineHeaderExtension
+}
+
+// RegisterDefaultCodecs registers the default codecs supported by Pion WebRTC.
+// RegisterDefaultCodecs is not safe for concurrent use.
+func (m *MediaEngine) RegisterDefaultCodecs() error {
+	// Default Pion Audio Codecs
+	for _, codec := range []RTPCodecParameters{
+		{
+			RTPCodecCapability: RTPCodecCapability{MimeTypeOpus, 48000, 2, "minptime=10;useinbandfec=1", nil},
+			PayloadType:        111,
+		},
+		{
+			RTPCodecCapability: RTPCodecCapability{MimeTypeG722, 8000, 0, "", nil},
+			PayloadType:        9,
+		},
+		{
+			RTPCodecCapability: RTPCodecCapability{MimeTypePCMU, 8000, 0, "", nil},
+			PayloadType:        0,
+		},
+		{
+			RTPCodecCapability: RTPCodecCapability{MimeTypePCMA, 8000, 0, "", nil},
+			PayloadType:        8,
+		},
+	} {
+		if err := m.RegisterCodec(codec, RTPCodecTypeAudio); err != nil {
+			return err
+		}
+	}
+
+	// Default Pion Audio Header Extensions
+	for _, extension := range []string{
+		"urn:ietf:params:rtp-hdrext:sdes:mid",
+		"urn:ietf:params:rtp-hdrext:sdes:rtp-stream-id",
+		"urn:ietf:params:rtp-hdrext:sdes:repaired-rtp-stream-id",
+	} {
+		if err := m.RegisterHeaderExtension(RTPHeaderExtensionCapability{extension}, RTPCodecTypeAudio); err != nil {
+			return err
+		}
+	}
+
+	videoRTCPFeedback := []RTCPFeedback{{"goog-remb", ""}, {"ccm", "fir"}, {"nack", ""}, {"nack", "pli"}}
+	for _, codec := range []RTPCodecParameters{
+		{
+			RTPCodecCapability: RTPCodecCapability{MimeTypeVP8, 90000, 0, "", videoRTCPFeedback},
+			PayloadType:        96,
+		},
+		{
+			RTPCodecCapability: RTPCodecCapability{"video/rtx", 90000, 0, "apt=96", nil},
+			PayloadType:        97,
+		},
+
+		{
+			RTPCodecCapability: RTPCodecCapability{MimeTypeVP9, 90000, 0, "profile-id=0", videoRTCPFeedback},
+			PayloadType:        98,
+		},
+		{
+			RTPCodecCapability: RTPCodecCapability{"video/rtx", 90000, 0, "apt=98", nil},
+			PayloadType:        99,
+		},
+
+		{
+			RTPCodecCapability: RTPCodecCapability{MimeTypeVP9, 90000, 0, "profile-id=1", videoRTCPFeedback},
+			PayloadType:        100,
+		},
+		{
+			RTPCodecCapability: RTPCodecCapability{"video/rtx", 90000, 0, "apt=100", nil},
+			PayloadType:        101,
+		},
+
+		{
+			RTPCodecCapability: RTPCodecCapability{MimeTypeH264, 90000, 0, "level-asymmetry-allowed=1;packetization-mode=1;profile-level-id=42001f", videoRTCPFeedback},
+			PayloadType:        102,
+		},
+		{
+			RTPCodecCapability: RTPCodecCapability{"video/rtx", 90000, 0, "apt=102", nil},
+			PayloadType:        121,
+		},
+
+		{
+			RTPCodecCapability: RTPCodecCapability{MimeTypeH264, 90000, 0, "level-asymmetry-allowed=1;packetization-mode=0;profile-level-id=42001f", videoRTCPFeedback},
+			PayloadType:        127,
+		},
+		{
+			RTPCodecCapability: RTPCodecCapability{"video/rtx", 90000, 0, "apt=127", nil},
+			PayloadType:        120,
+		},
+
+		{
+			RTPCodecCapability: RTPCodecCapability{MimeTypeH264, 90000, 0, "level-asymmetry-allowed=1;packetization-mode=1;profile-level-id=42e01f", videoRTCPFeedback},
+			PayloadType:        125,
+		},
+		{
+			RTPCodecCapability: RTPCodecCapability{"video/rtx", 90000, 0, "apt=125", nil},
+			PayloadType:        107,
+		},
+
+		{
+			RTPCodecCapability: RTPCodecCapability{MimeTypeH264, 90000, 0, "level-asymmetry-allowed=1;packetization-mode=0;profile-level-id=42e01f", videoRTCPFeedback},
+			PayloadType:        108,
+		},
+		{
+			RTPCodecCapability: RTPCodecCapability{"video/rtx", 90000, 0, "apt=108", nil},
+			PayloadType:        109,
+		},
+
+		{
+			RTPCodecCapability: RTPCodecCapability{MimeTypeH264, 90000, 0, "level-asymmetry-allowed=1;packetization-mode=0;profile-level-id=42001f", videoRTCPFeedback},
+			PayloadType:        127,
+		},
+		{
+			RTPCodecCapability: RTPCodecCapability{"video/rtx", 90000, 0, "apt=127", nil},
+			PayloadType:        120,
+		},
+
+		{
+			RTPCodecCapability: RTPCodecCapability{MimeTypeH264, 90000, 0, "level-asymmetry-allowed=1;packetization-mode=1;profile-level-id=640032", videoRTCPFeedback},
+			PayloadType:        123,
+		},
+		{
+			RTPCodecCapability: RTPCodecCapability{"video/rtx", 90000, 0, "apt=123", nil},
+			PayloadType:        118,
+		},
+
+		{
+			RTPCodecCapability: RTPCodecCapability{"video/ulpfec", 90000, 0, "", nil},
+			PayloadType:        116,
+		},
+	} {
+		if err := m.RegisterCodec(codec, RTPCodecTypeVideo); err != nil {
+			return err
+		}
+	}
+
+	// Default Pion Video Header Extensions
+	for _, extension := range []string{
+		"urn:ietf:params:rtp-hdrext:sdes:mid",
+		"urn:ietf:params:rtp-hdrext:sdes:rtp-stream-id",
+		"urn:ietf:params:rtp-hdrext:sdes:repaired-rtp-stream-id",
+	} {
+		if err := m.RegisterHeaderExtension(RTPHeaderExtensionCapability{extension}, RTPCodecTypeVideo); err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+// RegisterCodec adds codec to the MediaEngine
+// These are the list of codecs supported by this PeerConnection.
+// RegisterCodec is not safe for concurrent use.
+func (m *MediaEngine) RegisterCodec(codec RTPCodecParameters, typ RTPCodecType) error {
+	codec.statsID = fmt.Sprintf("RTPCodec-%d", time.Now().UnixNano())
+	switch typ {
+	case RTPCodecTypeAudio:
+		m.audioCodecs = append(m.audioCodecs, codec)
+	case RTPCodecTypeVideo:
+		m.videoCodecs = append(m.videoCodecs, codec)
+	default:
+		return ErrUnknownType
+	}
+	return nil
+}
+
+// RegisterHeaderExtension adds a header extension to the MediaEngine
+// To determine the negotiated value use `GetHeaderExtensionID` after signaling is complete
+func (m *MediaEngine) RegisterHeaderExtension(extension RTPHeaderExtensionCapability, typ RTPCodecType, allowedDirections ...RTPTransceiverDirection) error {
+	if m.negotiatedHeaderExtensions == nil {
+		m.negotiatedHeaderExtensions = map[int]mediaEngineHeaderExtension{}
+	}
+
+	if len(allowedDirections) == 0 {
+		allowedDirections = []RTPTransceiverDirection{RTPTransceiverDirectionRecvonly, RTPTransceiverDirectionSendonly}
+	}
+
+	for _, direction := range allowedDirections {
+		if direction != RTPTransceiverDirectionRecvonly && direction != RTPTransceiverDirectionSendonly {
+			return ErrRegisterHeaderExtensionInvalidDirection
+		}
+	}
+
+	extensionIndex := -1
+	for i := range m.headerExtensions {
+		if extension.URI == m.headerExtensions[i].uri {
+			extensionIndex = i
+		}
+	}
+
+	if extensionIndex == -1 {
+		m.headerExtensions = append(m.headerExtensions, mediaEngineHeaderExtension{})
+		extensionIndex = len(m.headerExtensions) - 1
+	}
+
+	if typ == RTPCodecTypeAudio {
+		m.headerExtensions[extensionIndex].isAudio = true
+	} else if typ == RTPCodecTypeVideo {
+		m.headerExtensions[extensionIndex].isVideo = true
+	}
+
+	m.headerExtensions[extensionIndex].uri = extension.URI
+	m.headerExtensions[extensionIndex].allowedDirections = allowedDirections
+
+	return nil
+}
+
+// RegisterFeedback adds feedback mechanism to already registered codecs.
+func (m *MediaEngine) RegisterFeedback(feedback RTCPFeedback, typ RTPCodecType) {
+	switch typ {
+	case RTPCodecTypeVideo:
+		for i, v := range m.videoCodecs {
+			v.RTCPFeedback = append(v.RTCPFeedback, feedback)
+			m.videoCodecs[i] = v
+		}
+	case RTPCodecTypeAudio:
+		for i, v := range m.audioCodecs {
+			v.RTCPFeedback = append(v.RTCPFeedback, feedback)
+			m.audioCodecs[i] = v
+		}
+	}
+}
+
+// getHeaderExtensionID returns the negotiated ID for a header extension.
+// If the Header Extension isn't enabled ok will be false
+func (m *MediaEngine) getHeaderExtensionID(extension RTPHeaderExtensionCapability) (val int, audioNegotiated, videoNegotiated bool) {
+	if m.negotiatedHeaderExtensions == nil {
+		return 0, false, false
+	}
+
+	for id, h := range m.negotiatedHeaderExtensions {
+		if extension.URI == h.uri {
+			return id, h.isAudio, h.isVideo
+		}
+	}
+
+	return
+}
+
+func (m *MediaEngine) getCodecByPayload(payloadType PayloadType) (RTPCodecParameters, RTPCodecType, error) {
+	for _, codec := range m.negotiatedVideoCodecs {
+		if codec.PayloadType == payloadType {
+			return codec, RTPCodecTypeVideo, nil
+		}
+	}
+	for _, codec := range m.negotiatedAudioCodecs {
+		if codec.PayloadType == payloadType {
+			return codec, RTPCodecTypeAudio, nil
+		}
+	}
+
+	return RTPCodecParameters{}, 0, ErrCodecNotFound
+}
+
+func (m *MediaEngine) collectStats(collector *statsReportCollector) {
+	statsLoop := func(codecs []RTPCodecParameters) {
+		for _, codec := range codecs {
+			collector.Collecting()
+			stats := CodecStats{
+				Timestamp:   statsTimestampFrom(time.Now()),
+				Type:        StatsTypeCodec,
+				ID:          codec.statsID,
+				PayloadType: codec.PayloadType,
+				MimeType:    codec.MimeType,
+				ClockRate:   codec.ClockRate,
+				Channels:    uint8(codec.Channels),
+				SDPFmtpLine: codec.SDPFmtpLine,
+			}
+
+			collector.Collect(stats.ID, stats)
+		}
+	}
+
+	statsLoop(m.videoCodecs)
+	statsLoop(m.audioCodecs)
+}
+
+// Look up a codec and enable if it exists
+func (m *MediaEngine) updateCodecParameters(remoteCodec RTPCodecParameters, typ RTPCodecType) error {
+	codecs := m.videoCodecs
+	if typ == RTPCodecTypeAudio {
+		codecs = m.audioCodecs
+	}
+
+	pushCodec := func(codec RTPCodecParameters) error {
+		if typ == RTPCodecTypeAudio {
+			m.negotiatedAudioCodecs = append(m.negotiatedAudioCodecs, codec)
+		} else if typ == RTPCodecTypeVideo {
+			m.negotiatedVideoCodecs = append(m.negotiatedVideoCodecs, codec)
+		}
+		return nil
+	}
+
+	if strings.HasPrefix(remoteCodec.RTPCodecCapability.SDPFmtpLine, "apt=") {
+		payloadType, err := strconv.Atoi(strings.TrimPrefix(remoteCodec.RTPCodecCapability.SDPFmtpLine, "apt="))
+		if err != nil {
+			return err
+		}
+
+		if _, _, err = m.getCodecByPayload(PayloadType(payloadType)); err != nil {
+			return nil // not an error, we just ignore this codec we don't support
+		}
+	}
+
+	if _, err := codecParametersFuzzySearch(remoteCodec, codecs); err == nil {
+		return pushCodec(remoteCodec)
+	}
+
+	return nil
+}
+
+// Look up a header extension and enable if it exists
+func (m *MediaEngine) updateHeaderExtension(id int, extension string, typ RTPCodecType) error {
+	if m.negotiatedHeaderExtensions == nil {
+		return nil
+	}
+
+	for _, localExtension := range m.headerExtensions {
+		if localExtension.uri == extension {
+			h := mediaEngineHeaderExtension{uri: extension, allowedDirections: localExtension.allowedDirections}
+			if existingValue, ok := m.negotiatedHeaderExtensions[id]; ok {
+				h = existingValue
+			}
+
+			switch {
+			case localExtension.isAudio && typ == RTPCodecTypeAudio:
+				h.isAudio = true
+			case localExtension.isVideo && typ == RTPCodecTypeVideo:
+				h.isVideo = true
+			}
+
+			m.negotiatedHeaderExtensions[id] = h
+		}
+	}
+	return nil
+}
+
+// Update the MediaEngine from a remote description
+func (m *MediaEngine) updateFromRemoteDescription(desc sdp.SessionDescription) error {
+	for _, media := range desc.MediaDescriptions {
+		var typ RTPCodecType
+		switch {
+		case !m.negotiatedAudio && strings.EqualFold(media.MediaName.Media, "audio"):
+			m.negotiatedAudio = true
+			typ = RTPCodecTypeAudio
+		case !m.negotiatedVideo && strings.EqualFold(media.MediaName.Media, "video"):
+			m.negotiatedVideo = true
+			typ = RTPCodecTypeVideo
+		default:
+			continue
+		}
+
+		codecs, err := codecsFromMediaDescription(media)
+		if err != nil {
+			return err
+		}
+
+		for _, codec := range codecs {
+			if err = m.updateCodecParameters(codec, typ); err != nil {
+				return err
+			}
+		}
+
+		extensions, err := rtpExtensionsFromMediaDescription(media)
+		if err != nil {
+			return err
+		}
+
+		for extension, id := range extensions {
+			if err = m.updateHeaderExtension(id, extension, typ); err != nil {
+				return err
+			}
+		}
+	}
+	return nil
+}
+
+func (m *MediaEngine) getCodecsByKind(typ RTPCodecType) []RTPCodecParameters {
+	if typ == RTPCodecTypeVideo {
+		if m.negotiatedVideo {
+			return m.negotiatedVideoCodecs
+		}
+
+		return m.videoCodecs
+	} else if typ == RTPCodecTypeAudio {
+		if m.negotiatedAudio {
+			return m.negotiatedAudioCodecs
+		}
+
+		return m.audioCodecs
+	}
+
+	return nil
+}
+
+func (m *MediaEngine) getRTPParametersByKind(typ RTPCodecType, directions []RTPTransceiverDirection) RTPParameters {
+	headerExtensions := make([]RTPHeaderExtensionParameter, 0)
+
+	if m.negotiatedVideo && typ == RTPCodecTypeVideo ||
+		m.negotiatedAudio && typ == RTPCodecTypeAudio {
+		for id, e := range m.negotiatedHeaderExtensions {
+			if haveRTPTransceiverDirectionIntersection(e.allowedDirections, directions) && (e.isAudio && typ == RTPCodecTypeAudio || e.isVideo && typ == RTPCodecTypeVideo) {
+				headerExtensions = append(headerExtensions, RTPHeaderExtensionParameter{ID: id, URI: e.uri})
+			}
+		}
+	} else {
+		for id, e := range m.headerExtensions {
+			if haveRTPTransceiverDirectionIntersection(e.allowedDirections, directions) && (e.isAudio && typ == RTPCodecTypeAudio || e.isVideo && typ == RTPCodecTypeVideo) {
+				headerExtensions = append(headerExtensions, RTPHeaderExtensionParameter{ID: id + 1, URI: e.uri})
+			}
+		}
+	}
+
+	return RTPParameters{
+		HeaderExtensions: headerExtensions,
+		Codecs:           m.getCodecsByKind(typ),
+	}
+}
+
+func (m *MediaEngine) getRTPParametersByPayloadType(payloadType PayloadType) (RTPParameters, error) {
+	codec, typ, err := m.getCodecByPayload(payloadType)
+	if err != nil {
+		return RTPParameters{}, err
+	}
+
+	headerExtensions := make([]RTPHeaderExtensionParameter, 0)
+	for id, e := range m.negotiatedHeaderExtensions {
+		if e.isAudio && typ == RTPCodecTypeAudio || e.isVideo && typ == RTPCodecTypeVideo {
+			headerExtensions = append(headerExtensions, RTPHeaderExtensionParameter{ID: id, URI: e.uri})
+		}
+	}
+
+	return RTPParameters{
+		HeaderExtensions: headerExtensions,
+		Codecs:           []RTPCodecParameters{codec},
+	}, nil
+}
+
+func payloaderForCodec(codec RTPCodecCapability) (rtp.Payloader, error) {
+	switch strings.ToLower(codec.MimeType) {
+	case strings.ToLower(MimeTypeH264):
+		return &codecs.H264Payloader{}, nil
+	case strings.ToLower(MimeTypeOpus):
+		return &codecs.OpusPayloader{}, nil
+	case strings.ToLower(MimeTypeVP8):
+		return &codecs.VP8Payloader{}, nil
+	case strings.ToLower(MimeTypeVP9):
+		return &codecs.VP9Payloader{}, nil
+	case strings.ToLower(MimeTypeG722):
+		return &codecs.G722Payloader{}, nil
+	case strings.ToLower(MimeTypePCMU), strings.ToLower(MimeTypePCMA):
+		return &codecs.G711Payloader{}, nil
+	default:
+		return nil, ErrNoPayloaderForCodec
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/networktype.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/networktype.go
new file mode 100644
index 000000000..e5dd84073
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/networktype.go
@@ -0,0 +1,104 @@
+package webrtc
+
+import (
+	"fmt"
+
+	"github.com/pion/ice/v2"
+)
+
+func supportedNetworkTypes() []NetworkType {
+	return []NetworkType{
+		NetworkTypeUDP4,
+		NetworkTypeUDP6,
+		// NetworkTypeTCP4, // Not supported yet
+		// NetworkTypeTCP6, // Not supported yet
+	}
+}
+
+// NetworkType represents the type of network
+type NetworkType int
+
+const (
+	// NetworkTypeUDP4 indicates UDP over IPv4.
+	NetworkTypeUDP4 NetworkType = iota + 1
+
+	// NetworkTypeUDP6 indicates UDP over IPv6.
+	NetworkTypeUDP6
+
+	// NetworkTypeTCP4 indicates TCP over IPv4.
+	NetworkTypeTCP4
+
+	// NetworkTypeTCP6 indicates TCP over IPv6.
+	NetworkTypeTCP6
+)
+
+// This is done this way because of a linter.
+const (
+	networkTypeUDP4Str = "udp4"
+	networkTypeUDP6Str = "udp6"
+	networkTypeTCP4Str = "tcp4"
+	networkTypeTCP6Str = "tcp6"
+)
+
+func (t NetworkType) String() string {
+	switch t {
+	case NetworkTypeUDP4:
+		return networkTypeUDP4Str
+	case NetworkTypeUDP6:
+		return networkTypeUDP6Str
+	case NetworkTypeTCP4:
+		return networkTypeTCP4Str
+	case NetworkTypeTCP6:
+		return networkTypeTCP6Str
+	default:
+		return ErrUnknownType.Error()
+	}
+}
+
+// Protocol returns udp or tcp
+func (t NetworkType) Protocol() string {
+	switch t {
+	case NetworkTypeUDP4:
+		return "udp"
+	case NetworkTypeUDP6:
+		return "udp"
+	case NetworkTypeTCP4:
+		return "tcp"
+	case NetworkTypeTCP6:
+		return "tcp"
+	default:
+		return ErrUnknownType.Error()
+	}
+}
+
+// NewNetworkType allows create network type from string
+// It will be useful for getting custom network types from external config.
+func NewNetworkType(raw string) (NetworkType, error) {
+	switch raw {
+	case networkTypeUDP4Str:
+		return NetworkTypeUDP4, nil
+	case networkTypeUDP6Str:
+		return NetworkTypeUDP6, nil
+	case networkTypeTCP4Str:
+		return NetworkTypeTCP4, nil
+	case networkTypeTCP6Str:
+		return NetworkTypeTCP6, nil
+	default:
+		return NetworkType(Unknown), fmt.Errorf("%w: %s", errNetworkTypeUnknown, raw)
+	}
+}
+
+func getNetworkType(iceNetworkType ice.NetworkType) (NetworkType, error) {
+	switch iceNetworkType {
+	case ice.NetworkTypeUDP4:
+		return NetworkTypeUDP4, nil
+	case ice.NetworkTypeUDP6:
+		return NetworkTypeUDP6, nil
+	case ice.NetworkTypeTCP4:
+		return NetworkTypeTCP4, nil
+	case ice.NetworkTypeTCP6:
+		return NetworkTypeTCP6, nil
+	default:
+		return NetworkType(Unknown), fmt.Errorf("%w: %s", errNetworkTypeUnknown, iceNetworkType.String())
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/oauthcredential.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/oauthcredential.go
new file mode 100644
index 000000000..46170c7a2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/oauthcredential.go
@@ -0,0 +1,15 @@
+package webrtc
+
+// OAuthCredential represents OAuth credential information which is used by
+// the STUN/TURN client to connect to an ICE server as defined in
+// https://tools.ietf.org/html/rfc7635. Note that the kid parameter is not
+// located in OAuthCredential, but in ICEServer's username member.
+type OAuthCredential struct {
+	// MACKey is a base64-url encoded format. It is used in STUN message
+	// integrity hash calculation.
+	MACKey string
+
+	// AccessToken is a base64-encoded format. This is an encrypted
+	// self-contained token that is opaque to the application.
+	AccessToken string
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/offeransweroptions.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/offeransweroptions.go
new file mode 100644
index 000000000..2a34aed43
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/offeransweroptions.go
@@ -0,0 +1,26 @@
+package webrtc
+
+// OfferAnswerOptions is a base structure which describes the options that
+// can be used to control the offer/answer creation process.
+type OfferAnswerOptions struct {
+	// VoiceActivityDetection allows the application to provide information
+	// about whether it wishes voice detection feature to be enabled or disabled.
+	VoiceActivityDetection bool
+}
+
+// AnswerOptions structure describes the options used to control the answer
+// creation process.
+type AnswerOptions struct {
+	OfferAnswerOptions
+}
+
+// OfferOptions structure describes the options used to control the offer
+// creation process
+type OfferOptions struct {
+	OfferAnswerOptions
+
+	// ICERestart forces the underlying ice gathering process to be restarted.
+	// When this value is true, the generated description will have ICE
+	// credentials that are different from the current credentials
+	ICERestart bool
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/operations.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/operations.go
new file mode 100644
index 000000000..82bc83224
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/operations.go
@@ -0,0 +1,87 @@
+package webrtc
+
+import (
+	"sync"
+)
+
+// Operation is a function
+type operation func()
+
+// Operations is a task executor.
+type operations struct {
+	mu   sync.Mutex
+	busy bool
+	ops  []operation
+}
+
+func newOperations() *operations {
+	return &operations{}
+}
+
+// Enqueue adds a new action to be executed. If there are no actions scheduled,
+// the execution will start immediately in a new goroutine.
+func (o *operations) Enqueue(op operation) {
+	if op == nil {
+		return
+	}
+
+	o.mu.Lock()
+	running := o.busy
+	o.ops = append(o.ops, op)
+	o.busy = true
+	o.mu.Unlock()
+
+	if !running {
+		go o.start()
+	}
+}
+
+// IsEmpty checks if there are tasks in the queue
+func (o *operations) IsEmpty() bool {
+	o.mu.Lock()
+	defer o.mu.Unlock()
+	return len(o.ops) == 0
+}
+
+// Done blocks until all currently enqueued operations are finished executing.
+// For more complex synchronization, use Enqueue directly.
+func (o *operations) Done() {
+	var wg sync.WaitGroup
+	wg.Add(1)
+	o.Enqueue(func() {
+		wg.Done()
+	})
+	wg.Wait()
+}
+
+func (o *operations) pop() func() {
+	o.mu.Lock()
+	defer o.mu.Unlock()
+	if len(o.ops) == 0 {
+		return nil
+	}
+
+	fn := o.ops[0]
+	o.ops = o.ops[1:]
+	return fn
+}
+
+func (o *operations) start() {
+	defer func() {
+		o.mu.Lock()
+		defer o.mu.Unlock()
+		if len(o.ops) == 0 {
+			o.busy = false
+			return
+		}
+		// either a new operation was enqueued while we
+		// were busy, or an operation panicked
+		go o.start()
+	}()
+
+	fn := o.pop()
+	for fn != nil {
+		fn()
+		fn = o.pop()
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/package.json b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/package.json
new file mode 100644
index 000000000..429f3efb3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/package.json
@@ -0,0 +1,11 @@
+{
+  "name": "webrtc",
+  "repository": "git@github.com:pion/webrtc.git",
+  "private": true,
+  "devDependencies": {
+    "wrtc": "0.4.7"
+  },
+  "dependencies": {
+    "request": "2.88.2"
+  }
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/peerconnection.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/peerconnection.go
new file mode 100644
index 000000000..f8c0d153e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/peerconnection.go
@@ -0,0 +1,2294 @@
+// +build !js
+
+package webrtc
+
+import (
+	"crypto/ecdsa"
+	"crypto/elliptic"
+	"crypto/rand"
+	"fmt"
+	"io"
+	"strconv"
+	"strings"
+	"sync"
+	"sync/atomic"
+	"time"
+
+	"github.com/pion/ice/v2"
+	"github.com/pion/interceptor"
+	"github.com/pion/logging"
+	"github.com/pion/rtcp"
+	"github.com/pion/sdp/v3"
+	"github.com/pion/webrtc/v3/internal/util"
+	"github.com/pion/webrtc/v3/pkg/rtcerr"
+)
+
+// PeerConnection represents a WebRTC connection that establishes a
+// peer-to-peer communications with another PeerConnection instance in a
+// browser, or to another endpoint implementing the required protocols.
+type PeerConnection struct {
+	statsID string
+	mu      sync.RWMutex
+
+	// ops is an operations queue which will ensure the enqueued actions are
+	// executed in order. It is used for asynchronously, but serially processing
+	// remote and local descriptions
+	ops *operations
+
+	configuration Configuration
+
+	currentLocalDescription  *SessionDescription
+	pendingLocalDescription  *SessionDescription
+	currentRemoteDescription *SessionDescription
+	pendingRemoteDescription *SessionDescription
+	signalingState           SignalingState
+	iceConnectionState       ICEConnectionState
+	connectionState          PeerConnectionState
+
+	idpLoginURL *string
+
+	isClosed               *atomicBool
+	isNegotiationNeeded    *atomicBool
+	negotiationNeededState negotiationNeededState
+
+	lastOffer  string
+	lastAnswer string
+
+	// a value containing the last known greater mid value
+	// we internally generate mids as numbers. Needed since JSEP
+	// requires that when reusing a media section a new unique mid
+	// should be defined (see JSEP 3.4.1).
+	greaterMid int
+
+	rtpTransceivers []*RTPTransceiver
+
+	onSignalingStateChangeHandler     func(SignalingState)
+	onICEConnectionStateChangeHandler func(ICEConnectionState)
+	onConnectionStateChangeHandler    func(PeerConnectionState)
+	onTrackHandler                    func(*TrackRemote, *RTPReceiver)
+	onDataChannelHandler              func(*DataChannel)
+	onNegotiationNeededHandler        atomic.Value // func()
+
+	iceGatherer   *ICEGatherer
+	iceTransport  *ICETransport
+	dtlsTransport *DTLSTransport
+	sctpTransport *SCTPTransport
+
+	// A reference to the associated API state used by this connection
+	api *API
+	log logging.LeveledLogger
+
+	interceptorRTCPWriter interceptor.RTCPWriter
+}
+
+// NewPeerConnection creates a PeerConnection with the default codecs and
+// interceptors.  See RegisterDefaultCodecs and RegisterDefaultInterceptors.
+//
+// If you wish to customize the set of available codecs or the set of
+// active interceptors, create a MediaEngine and call api.NewPeerConnection
+// instead of this function.
+func NewPeerConnection(configuration Configuration) (*PeerConnection, error) {
+	m := &MediaEngine{}
+	if err := m.RegisterDefaultCodecs(); err != nil {
+		return nil, err
+	}
+
+	i := &interceptor.Registry{}
+	if err := RegisterDefaultInterceptors(m, i); err != nil {
+		return nil, err
+	}
+
+	api := NewAPI(WithMediaEngine(m), WithInterceptorRegistry(i))
+	return api.NewPeerConnection(configuration)
+}
+
+// NewPeerConnection creates a new PeerConnection with the provided configuration against the received API object
+func (api *API) NewPeerConnection(configuration Configuration) (*PeerConnection, error) {
+	// https://w3c.github.io/webrtc-pc/#constructor (Step #2)
+	// Some variables defined explicitly despite their implicit zero values to
+	// allow better readability to understand what is happening.
+	pc := &PeerConnection{
+		statsID: fmt.Sprintf("PeerConnection-%d", time.Now().UnixNano()),
+		configuration: Configuration{
+			ICEServers:           []ICEServer{},
+			ICETransportPolicy:   ICETransportPolicyAll,
+			BundlePolicy:         BundlePolicyBalanced,
+			RTCPMuxPolicy:        RTCPMuxPolicyRequire,
+			Certificates:         []Certificate{},
+			ICECandidatePoolSize: 0,
+		},
+		ops:                    newOperations(),
+		isClosed:               &atomicBool{},
+		isNegotiationNeeded:    &atomicBool{},
+		negotiationNeededState: negotiationNeededStateEmpty,
+		lastOffer:              "",
+		lastAnswer:             "",
+		greaterMid:             -1,
+		signalingState:         SignalingStateStable,
+		iceConnectionState:     ICEConnectionStateNew,
+		connectionState:        PeerConnectionStateNew,
+
+		api: api,
+		log: api.settingEngine.LoggerFactory.NewLogger("pc"),
+	}
+
+	pc.interceptorRTCPWriter = api.interceptor.BindRTCPWriter(interceptor.RTCPWriterFunc(pc.writeRTCP))
+
+	var err error
+	if err = pc.initConfiguration(configuration); err != nil {
+		return nil, err
+	}
+
+	pc.iceGatherer, err = pc.createICEGatherer()
+	if err != nil {
+		return nil, err
+	}
+
+	// Create the ice transport
+	iceTransport := pc.createICETransport()
+	pc.iceTransport = iceTransport
+
+	// Create the DTLS transport
+	dtlsTransport, err := pc.api.NewDTLSTransport(pc.iceTransport, pc.configuration.Certificates)
+	if err != nil {
+		return nil, err
+	}
+	pc.dtlsTransport = dtlsTransport
+
+	// Create the SCTP transport
+	pc.sctpTransport = pc.api.NewSCTPTransport(pc.dtlsTransport)
+
+	// Wire up the on datachannel handler
+	pc.sctpTransport.OnDataChannel(func(d *DataChannel) {
+		pc.mu.RLock()
+		handler := pc.onDataChannelHandler
+		pc.mu.RUnlock()
+		if handler != nil {
+			handler(d)
+		}
+	})
+
+	return pc, nil
+}
+
+// initConfiguration defines validation of the specified Configuration and
+// its assignment to the internal configuration variable. This function differs
+// from its SetConfiguration counterpart because most of the checks do not
+// include verification statements related to the existing state. Thus the
+// function describes only minor verification of some the struct variables.
+func (pc *PeerConnection) initConfiguration(configuration Configuration) error {
+	if configuration.PeerIdentity != "" {
+		pc.configuration.PeerIdentity = configuration.PeerIdentity
+	}
+
+	// https://www.w3.org/TR/webrtc/#constructor (step #3)
+	if len(configuration.Certificates) > 0 {
+		now := time.Now()
+		for _, x509Cert := range configuration.Certificates {
+			if !x509Cert.Expires().IsZero() && now.After(x509Cert.Expires()) {
+				return &rtcerr.InvalidAccessError{Err: ErrCertificateExpired}
+			}
+			pc.configuration.Certificates = append(pc.configuration.Certificates, x509Cert)
+		}
+	} else {
+		sk, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
+		if err != nil {
+			return &rtcerr.UnknownError{Err: err}
+		}
+		certificate, err := GenerateCertificate(sk)
+		if err != nil {
+			return err
+		}
+		pc.configuration.Certificates = []Certificate{*certificate}
+	}
+
+	if configuration.BundlePolicy != BundlePolicy(Unknown) {
+		pc.configuration.BundlePolicy = configuration.BundlePolicy
+	}
+
+	if configuration.RTCPMuxPolicy != RTCPMuxPolicy(Unknown) {
+		pc.configuration.RTCPMuxPolicy = configuration.RTCPMuxPolicy
+	}
+
+	if configuration.ICECandidatePoolSize != 0 {
+		pc.configuration.ICECandidatePoolSize = configuration.ICECandidatePoolSize
+	}
+
+	if configuration.ICETransportPolicy != ICETransportPolicy(Unknown) {
+		pc.configuration.ICETransportPolicy = configuration.ICETransportPolicy
+	}
+
+	if configuration.SDPSemantics != SDPSemantics(Unknown) {
+		pc.configuration.SDPSemantics = configuration.SDPSemantics
+	}
+
+	sanitizedICEServers := configuration.getICEServers()
+	if len(sanitizedICEServers) > 0 {
+		for _, server := range sanitizedICEServers {
+			if err := server.validate(); err != nil {
+				return err
+			}
+		}
+		pc.configuration.ICEServers = sanitizedICEServers
+	}
+
+	return nil
+}
+
+// OnSignalingStateChange sets an event handler which is invoked when the
+// peer connection's signaling state changes
+func (pc *PeerConnection) OnSignalingStateChange(f func(SignalingState)) {
+	pc.mu.Lock()
+	defer pc.mu.Unlock()
+	pc.onSignalingStateChangeHandler = f
+}
+
+func (pc *PeerConnection) onSignalingStateChange(newState SignalingState) {
+	pc.mu.RLock()
+	handler := pc.onSignalingStateChangeHandler
+	pc.mu.RUnlock()
+
+	pc.log.Infof("signaling state changed to %s", newState)
+	if handler != nil {
+		go handler(newState)
+	}
+}
+
+// OnDataChannel sets an event handler which is invoked when a data
+// channel message arrives from a remote peer.
+func (pc *PeerConnection) OnDataChannel(f func(*DataChannel)) {
+	pc.mu.Lock()
+	defer pc.mu.Unlock()
+	pc.onDataChannelHandler = f
+}
+
+// OnNegotiationNeeded sets an event handler which is invoked when
+// a change has occurred which requires session negotiation
+func (pc *PeerConnection) OnNegotiationNeeded(f func()) {
+	pc.onNegotiationNeededHandler.Store(f)
+}
+
+func (pc *PeerConnection) onNegotiationNeeded() {
+	// https://w3c.github.io/webrtc-pc/#updating-the-negotiation-needed-flag
+	// non-canon step 1
+	pc.mu.Lock()
+	defer pc.mu.Unlock()
+	if pc.negotiationNeededState == negotiationNeededStateRun {
+		pc.negotiationNeededState = negotiationNeededStateQueue
+		return
+	} else if pc.negotiationNeededState == negotiationNeededStateQueue {
+		return
+	}
+
+	pc.negotiationNeededState = negotiationNeededStateRun
+
+	pc.ops.Enqueue(pc.negotiationNeededOp)
+}
+
+func (pc *PeerConnection) negotiationNeededOp() {
+	// Don't run NegotiatedNeeded checks if OnNegotiationNeeded is not set
+	if handler := pc.onNegotiationNeededHandler.Load(); handler == nil {
+		return
+	}
+
+	// https://www.w3.org/TR/webrtc/#updating-the-negotiation-needed-flag
+	// Step 2.1
+	if pc.isClosed.get() {
+		return
+	}
+	// non-canon step 2.2
+	if !pc.ops.IsEmpty() {
+		pc.ops.Enqueue(pc.negotiationNeededOp)
+		return
+	}
+
+	// non-canon, run again if there was a request
+	defer func() {
+		pc.mu.Lock()
+		if pc.negotiationNeededState == negotiationNeededStateQueue {
+			defer pc.onNegotiationNeeded()
+		}
+		pc.negotiationNeededState = negotiationNeededStateEmpty
+		pc.mu.Unlock()
+	}()
+
+	// Step 2.3
+	if pc.SignalingState() != SignalingStateStable {
+		return
+	}
+
+	// Step 2.4
+	if !pc.checkNegotiationNeeded() {
+		pc.isNegotiationNeeded.set(false)
+		return
+	}
+
+	// Step 2.5
+	if pc.isNegotiationNeeded.get() {
+		return
+	}
+
+	// Step 2.6
+	pc.isNegotiationNeeded.set(true)
+
+	// Step 2.7
+	if handler, ok := pc.onNegotiationNeededHandler.Load().(func()); ok && handler != nil {
+		handler()
+	}
+}
+
+func (pc *PeerConnection) checkNegotiationNeeded() bool { //nolint:gocognit
+	// To check if negotiation is needed for connection, perform the following checks:
+	// Skip 1, 2 steps
+	// Step 3
+	pc.mu.Lock()
+	defer pc.mu.Unlock()
+
+	localDesc := pc.currentLocalDescription
+	remoteDesc := pc.currentRemoteDescription
+
+	if localDesc == nil {
+		return true
+	}
+
+	pc.sctpTransport.lock.Lock()
+	lenDataChannel := len(pc.sctpTransport.dataChannels)
+	pc.sctpTransport.lock.Unlock()
+
+	if lenDataChannel != 0 && haveDataChannel(localDesc) == nil {
+		return true
+	}
+
+	for _, t := range pc.rtpTransceivers {
+		// https://www.w3.org/TR/webrtc/#dfn-update-the-negotiation-needed-flag
+		// Step 5.1
+		// if t.stopping && !t.stopped {
+		// 	return true
+		// }
+		m := getByMid(t.Mid(), localDesc)
+		// Step 5.2
+		if !t.stopped && m == nil {
+			return true
+		}
+		if !t.stopped && m != nil {
+			// Step 5.3.1
+			if t.Direction() == RTPTransceiverDirectionSendrecv || t.Direction() == RTPTransceiverDirectionSendonly {
+				descMsid, okMsid := m.Attribute(sdp.AttrKeyMsid)
+				track := t.Sender().Track()
+				if !okMsid || descMsid != track.StreamID()+" "+track.ID() {
+					return true
+				}
+			}
+			switch localDesc.Type {
+			case SDPTypeOffer:
+				// Step 5.3.2
+				rm := getByMid(t.Mid(), remoteDesc)
+				if rm == nil {
+					return true
+				}
+
+				if getPeerDirection(m) != t.Direction() && getPeerDirection(rm) != t.Direction().Revers() {
+					return true
+				}
+			case SDPTypeAnswer:
+				// Step 5.3.3
+				if _, ok := m.Attribute(t.Direction().String()); !ok {
+					return true
+				}
+			default:
+			}
+		}
+		// Step 5.4
+		if t.stopped && t.Mid() != "" {
+			if getByMid(t.Mid(), localDesc) != nil || getByMid(t.Mid(), remoteDesc) != nil {
+				return true
+			}
+		}
+	}
+	// Step 6
+	return false
+}
+
+// OnICECandidate sets an event handler which is invoked when a new ICE
+// candidate is found.
+// Take note that the handler is gonna be called with a nil pointer when
+// gathering is finished.
+func (pc *PeerConnection) OnICECandidate(f func(*ICECandidate)) {
+	pc.iceGatherer.OnLocalCandidate(f)
+}
+
+// OnICEGatheringStateChange sets an event handler which is invoked when the
+// ICE candidate gathering state has changed.
+func (pc *PeerConnection) OnICEGatheringStateChange(f func(ICEGathererState)) {
+	pc.iceGatherer.OnStateChange(f)
+}
+
+// OnTrack sets an event handler which is called when remote track
+// arrives from a remote peer.
+func (pc *PeerConnection) OnTrack(f func(*TrackRemote, *RTPReceiver)) {
+	pc.mu.Lock()
+	defer pc.mu.Unlock()
+	pc.onTrackHandler = f
+}
+
+func (pc *PeerConnection) onTrack(t *TrackRemote, r *RTPReceiver) {
+	pc.mu.RLock()
+	handler := pc.onTrackHandler
+	pc.mu.RUnlock()
+
+	pc.log.Debugf("got new track: %+v", t)
+	if t != nil {
+		if handler != nil {
+			go handler(t, r)
+		} else {
+			pc.log.Warnf("OnTrack unset, unable to handle incoming media streams")
+		}
+	}
+}
+
+// OnICEConnectionStateChange sets an event handler which is called
+// when an ICE connection state is changed.
+func (pc *PeerConnection) OnICEConnectionStateChange(f func(ICEConnectionState)) {
+	pc.mu.Lock()
+	defer pc.mu.Unlock()
+	pc.onICEConnectionStateChangeHandler = f
+}
+
+func (pc *PeerConnection) onICEConnectionStateChange(cs ICEConnectionState) {
+	pc.mu.Lock()
+	pc.iceConnectionState = cs
+	handler := pc.onICEConnectionStateChangeHandler
+	pc.mu.Unlock()
+
+	pc.log.Infof("ICE connection state changed: %s", cs)
+	if handler != nil {
+		go handler(cs)
+	}
+}
+
+// OnConnectionStateChange sets an event handler which is called
+// when the PeerConnectionState has changed
+func (pc *PeerConnection) OnConnectionStateChange(f func(PeerConnectionState)) {
+	pc.mu.Lock()
+	defer pc.mu.Unlock()
+	pc.onConnectionStateChangeHandler = f
+}
+
+// SetConfiguration updates the configuration of this PeerConnection object.
+func (pc *PeerConnection) SetConfiguration(configuration Configuration) error { //nolint:gocognit
+	// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-setconfiguration (step #2)
+	if pc.isClosed.get() {
+		return &rtcerr.InvalidStateError{Err: ErrConnectionClosed}
+	}
+
+	// https://www.w3.org/TR/webrtc/#set-the-configuration (step #3)
+	if configuration.PeerIdentity != "" {
+		if configuration.PeerIdentity != pc.configuration.PeerIdentity {
+			return &rtcerr.InvalidModificationError{Err: ErrModifyingPeerIdentity}
+		}
+		pc.configuration.PeerIdentity = configuration.PeerIdentity
+	}
+
+	// https://www.w3.org/TR/webrtc/#set-the-configuration (step #4)
+	if len(configuration.Certificates) > 0 {
+		if len(configuration.Certificates) != len(pc.configuration.Certificates) {
+			return &rtcerr.InvalidModificationError{Err: ErrModifyingCertificates}
+		}
+
+		for i, certificate := range configuration.Certificates {
+			if !pc.configuration.Certificates[i].Equals(certificate) {
+				return &rtcerr.InvalidModificationError{Err: ErrModifyingCertificates}
+			}
+		}
+		pc.configuration.Certificates = configuration.Certificates
+	}
+
+	// https://www.w3.org/TR/webrtc/#set-the-configuration (step #5)
+	if configuration.BundlePolicy != BundlePolicy(Unknown) {
+		if configuration.BundlePolicy != pc.configuration.BundlePolicy {
+			return &rtcerr.InvalidModificationError{Err: ErrModifyingBundlePolicy}
+		}
+		pc.configuration.BundlePolicy = configuration.BundlePolicy
+	}
+
+	// https://www.w3.org/TR/webrtc/#set-the-configuration (step #6)
+	if configuration.RTCPMuxPolicy != RTCPMuxPolicy(Unknown) {
+		if configuration.RTCPMuxPolicy != pc.configuration.RTCPMuxPolicy {
+			return &rtcerr.InvalidModificationError{Err: ErrModifyingRTCPMuxPolicy}
+		}
+		pc.configuration.RTCPMuxPolicy = configuration.RTCPMuxPolicy
+	}
+
+	// https://www.w3.org/TR/webrtc/#set-the-configuration (step #7)
+	if configuration.ICECandidatePoolSize != 0 {
+		if pc.configuration.ICECandidatePoolSize != configuration.ICECandidatePoolSize &&
+			pc.LocalDescription() != nil {
+			return &rtcerr.InvalidModificationError{Err: ErrModifyingICECandidatePoolSize}
+		}
+		pc.configuration.ICECandidatePoolSize = configuration.ICECandidatePoolSize
+	}
+
+	// https://www.w3.org/TR/webrtc/#set-the-configuration (step #8)
+	if configuration.ICETransportPolicy != ICETransportPolicy(Unknown) {
+		pc.configuration.ICETransportPolicy = configuration.ICETransportPolicy
+	}
+
+	// https://www.w3.org/TR/webrtc/#set-the-configuration (step #11)
+	if len(configuration.ICEServers) > 0 {
+		// https://www.w3.org/TR/webrtc/#set-the-configuration (step #11.3)
+		for _, server := range configuration.ICEServers {
+			if err := server.validate(); err != nil {
+				return err
+			}
+		}
+		pc.configuration.ICEServers = configuration.ICEServers
+	}
+	return nil
+}
+
+// GetConfiguration returns a Configuration object representing the current
+// configuration of this PeerConnection object. The returned object is a
+// copy and direct mutation on it will not take affect until SetConfiguration
+// has been called with Configuration passed as its only argument.
+// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-getconfiguration
+func (pc *PeerConnection) GetConfiguration() Configuration {
+	return pc.configuration
+}
+
+func (pc *PeerConnection) getStatsID() string {
+	pc.mu.RLock()
+	defer pc.mu.RUnlock()
+	return pc.statsID
+}
+
+func (pc *PeerConnection) hasLocalDescriptionChanged(desc *SessionDescription) bool {
+	for _, t := range pc.GetTransceivers() {
+		m := getByMid(t.Mid(), desc)
+		if m == nil {
+			return true
+		}
+
+		if getPeerDirection(m) != t.Direction() {
+			return true
+		}
+	}
+
+	return false
+}
+
+// CreateOffer starts the PeerConnection and generates the localDescription
+// https://w3c.github.io/webrtc-pc/#dom-rtcpeerconnection-createoffer
+func (pc *PeerConnection) CreateOffer(options *OfferOptions) (SessionDescription, error) { //nolint:gocognit
+	useIdentity := pc.idpLoginURL != nil
+	switch {
+	case useIdentity:
+		return SessionDescription{}, errIdentityProviderNotImplemented
+	case pc.isClosed.get():
+		return SessionDescription{}, &rtcerr.InvalidStateError{Err: ErrConnectionClosed}
+	}
+
+	if options != nil && options.ICERestart {
+		if err := pc.iceTransport.restart(); err != nil {
+			return SessionDescription{}, err
+		}
+	}
+
+	var (
+		d     *sdp.SessionDescription
+		offer SessionDescription
+		err   error
+	)
+
+	// This may be necessary to recompute if, for example, createOffer was called when only an
+	// audio RTCRtpTransceiver was added to connection, but while performing the in-parallel
+	// steps to create an offer, a video RTCRtpTransceiver was added, requiring additional
+	// inspection of video system resources.
+	for {
+		// We cache current transceivers to ensure they aren't
+		// mutated during offer generation. We later check if they have
+		// been mutated and recompute the offer if necessary.
+		currentTransceivers := pc.GetTransceivers()
+
+		// in-parallel steps to create an offer
+		// https://w3c.github.io/webrtc-pc/#dfn-in-parallel-steps-to-create-an-offer
+		isPlanB := pc.configuration.SDPSemantics == SDPSemanticsPlanB
+		if pc.currentRemoteDescription != nil {
+			isPlanB = descriptionIsPlanB(pc.RemoteDescription())
+		}
+
+		// include unmatched local transceivers
+		if !isPlanB {
+			// update the greater mid if the remote description provides a greater one
+			if pc.currentRemoteDescription != nil {
+				var numericMid int
+				for _, media := range pc.currentRemoteDescription.parsed.MediaDescriptions {
+					mid := getMidValue(media)
+					if mid == "" {
+						continue
+					}
+					numericMid, err = strconv.Atoi(mid)
+					if err != nil {
+						continue
+					}
+					if numericMid > pc.greaterMid {
+						pc.greaterMid = numericMid
+					}
+				}
+			}
+			for _, t := range currentTransceivers {
+				if t.Mid() != "" {
+					continue
+				}
+				pc.greaterMid++
+				err = t.setMid(strconv.Itoa(pc.greaterMid))
+				if err != nil {
+					return SessionDescription{}, err
+				}
+			}
+		}
+
+		if pc.currentRemoteDescription == nil {
+			d, err = pc.generateUnmatchedSDP(currentTransceivers, useIdentity)
+		} else {
+			d, err = pc.generateMatchedSDP(currentTransceivers, useIdentity, true /*includeUnmatched */, connectionRoleFromDtlsRole(defaultDtlsRoleOffer))
+		}
+
+		if err != nil {
+			return SessionDescription{}, err
+		}
+
+		sdpBytes, err := d.Marshal()
+		if err != nil {
+			return SessionDescription{}, err
+		}
+
+		offer = SessionDescription{
+			Type:   SDPTypeOffer,
+			SDP:    string(sdpBytes),
+			parsed: d,
+		}
+
+		// Verify local media hasn't changed during offer
+		// generation. Recompute if necessary
+		if isPlanB || !pc.hasLocalDescriptionChanged(&offer) {
+			break
+		}
+	}
+
+	pc.lastOffer = offer.SDP
+	return offer, nil
+}
+
+func (pc *PeerConnection) createICEGatherer() (*ICEGatherer, error) {
+	g, err := pc.api.NewICEGatherer(ICEGatherOptions{
+		ICEServers:      pc.configuration.getICEServers(),
+		ICEGatherPolicy: pc.configuration.ICETransportPolicy,
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	return g, nil
+}
+
+// Update the PeerConnectionState given the state of relevant transports
+// https://www.w3.org/TR/webrtc/#rtcpeerconnectionstate-enum
+func (pc *PeerConnection) updateConnectionState(iceConnectionState ICEConnectionState, dtlsTransportState DTLSTransportState) {
+	pc.mu.Lock()
+	defer pc.mu.Unlock()
+
+	connectionState := PeerConnectionStateNew
+	switch {
+	// The RTCPeerConnection object's [[IsClosed]] slot is true.
+	case pc.isClosed.get():
+		connectionState = PeerConnectionStateClosed
+
+	// Any of the RTCIceTransports or RTCDtlsTransports are in a "failed" state.
+	case iceConnectionState == ICEConnectionStateFailed || dtlsTransportState == DTLSTransportStateFailed:
+		connectionState = PeerConnectionStateFailed
+
+	// Any of the RTCIceTransports or RTCDtlsTransports are in the "disconnected"
+	// state and none of them are in the "failed" or "connecting" or "checking" state.  */
+	case iceConnectionState == ICEConnectionStateDisconnected:
+		connectionState = PeerConnectionStateDisconnected
+
+	// All RTCIceTransports and RTCDtlsTransports are in the "connected", "completed" or "closed"
+	// state and at least one of them is in the "connected" or "completed" state.
+	case iceConnectionState == ICEConnectionStateConnected && dtlsTransportState == DTLSTransportStateConnected:
+		connectionState = PeerConnectionStateConnected
+
+	//  Any of the RTCIceTransports or RTCDtlsTransports are in the "connecting" or
+	// "checking" state and none of them is in the "failed" state.
+	case iceConnectionState == ICEConnectionStateChecking && dtlsTransportState == DTLSTransportStateConnecting:
+		connectionState = PeerConnectionStateConnecting
+	}
+
+	if pc.connectionState == connectionState {
+		return
+	}
+
+	pc.log.Infof("peer connection state changed: %s", connectionState)
+	pc.connectionState = connectionState
+	handler := pc.onConnectionStateChangeHandler
+	if handler != nil {
+		go handler(connectionState)
+	}
+}
+
+func (pc *PeerConnection) createICETransport() *ICETransport {
+	t := pc.api.NewICETransport(pc.iceGatherer)
+	t.OnConnectionStateChange(func(state ICETransportState) {
+		var cs ICEConnectionState
+		switch state {
+		case ICETransportStateNew:
+			cs = ICEConnectionStateNew
+		case ICETransportStateChecking:
+			cs = ICEConnectionStateChecking
+		case ICETransportStateConnected:
+			cs = ICEConnectionStateConnected
+		case ICETransportStateCompleted:
+			cs = ICEConnectionStateCompleted
+		case ICETransportStateFailed:
+			cs = ICEConnectionStateFailed
+		case ICETransportStateDisconnected:
+			cs = ICEConnectionStateDisconnected
+		case ICETransportStateClosed:
+			cs = ICEConnectionStateClosed
+		default:
+			pc.log.Warnf("OnConnectionStateChange: unhandled ICE state: %s", state)
+			return
+		}
+		pc.onICEConnectionStateChange(cs)
+		pc.updateConnectionState(cs, pc.dtlsTransport.State())
+	})
+
+	return t
+}
+
+// CreateAnswer starts the PeerConnection and generates the localDescription
+func (pc *PeerConnection) CreateAnswer(options *AnswerOptions) (SessionDescription, error) {
+	useIdentity := pc.idpLoginURL != nil
+	switch {
+	case pc.RemoteDescription() == nil:
+		return SessionDescription{}, &rtcerr.InvalidStateError{Err: ErrNoRemoteDescription}
+	case useIdentity:
+		return SessionDescription{}, errIdentityProviderNotImplemented
+	case pc.isClosed.get():
+		return SessionDescription{}, &rtcerr.InvalidStateError{Err: ErrConnectionClosed}
+	case pc.signalingState.Get() != SignalingStateHaveRemoteOffer && pc.signalingState.Get() != SignalingStateHaveLocalPranswer:
+		return SessionDescription{}, &rtcerr.InvalidStateError{Err: ErrIncorrectSignalingState}
+	}
+
+	connectionRole := connectionRoleFromDtlsRole(pc.api.settingEngine.answeringDTLSRole)
+	if connectionRole == sdp.ConnectionRole(0) {
+		connectionRole = connectionRoleFromDtlsRole(defaultDtlsRoleAnswer)
+	}
+
+	currentTransceivers := pc.GetTransceivers()
+	d, err := pc.generateMatchedSDP(currentTransceivers, useIdentity, false /*includeUnmatched */, connectionRole)
+	if err != nil {
+		return SessionDescription{}, err
+	}
+
+	sdpBytes, err := d.Marshal()
+	if err != nil {
+		return SessionDescription{}, err
+	}
+
+	desc := SessionDescription{
+		Type:   SDPTypeAnswer,
+		SDP:    string(sdpBytes),
+		parsed: d,
+	}
+	pc.lastAnswer = desc.SDP
+	return desc, nil
+}
+
+// 4.4.1.6 Set the SessionDescription
+func (pc *PeerConnection) setDescription(sd *SessionDescription, op stateChangeOp) error { //nolint:gocognit
+	switch {
+	case pc.isClosed.get():
+		return &rtcerr.InvalidStateError{Err: ErrConnectionClosed}
+	case NewSDPType(sd.Type.String()) == SDPType(Unknown):
+		return &rtcerr.TypeError{Err: fmt.Errorf("%w: '%d' is not a valid enum value of type SDPType", errPeerConnSDPTypeInvalidValue, sd.Type)}
+	}
+
+	nextState, err := func() (SignalingState, error) {
+		pc.mu.Lock()
+		defer pc.mu.Unlock()
+
+		cur := pc.SignalingState()
+		setLocal := stateChangeOpSetLocal
+		setRemote := stateChangeOpSetRemote
+		newSDPDoesNotMatchOffer := &rtcerr.InvalidModificationError{Err: errSDPDoesNotMatchOffer}
+		newSDPDoesNotMatchAnswer := &rtcerr.InvalidModificationError{Err: errSDPDoesNotMatchAnswer}
+
+		var nextState SignalingState
+		var err error
+		switch op {
+		case setLocal:
+			switch sd.Type {
+			// stable->SetLocal(offer)->have-local-offer
+			case SDPTypeOffer:
+				if sd.SDP != pc.lastOffer {
+					return nextState, newSDPDoesNotMatchOffer
+				}
+				nextState, err = checkNextSignalingState(cur, SignalingStateHaveLocalOffer, setLocal, sd.Type)
+				if err == nil {
+					pc.pendingLocalDescription = sd
+				}
+			// have-remote-offer->SetLocal(answer)->stable
+			// have-local-pranswer->SetLocal(answer)->stable
+			case SDPTypeAnswer:
+				if sd.SDP != pc.lastAnswer {
+					return nextState, newSDPDoesNotMatchAnswer
+				}
+				nextState, err = checkNextSignalingState(cur, SignalingStateStable, setLocal, sd.Type)
+				if err == nil {
+					pc.currentLocalDescription = sd
+					pc.currentRemoteDescription = pc.pendingRemoteDescription
+					pc.pendingRemoteDescription = nil
+					pc.pendingLocalDescription = nil
+				}
+			case SDPTypeRollback:
+				nextState, err = checkNextSignalingState(cur, SignalingStateStable, setLocal, sd.Type)
+				if err == nil {
+					pc.pendingLocalDescription = nil
+				}
+			// have-remote-offer->SetLocal(pranswer)->have-local-pranswer
+			case SDPTypePranswer:
+				if sd.SDP != pc.lastAnswer {
+					return nextState, newSDPDoesNotMatchAnswer
+				}
+				nextState, err = checkNextSignalingState(cur, SignalingStateHaveLocalPranswer, setLocal, sd.Type)
+				if err == nil {
+					pc.pendingLocalDescription = sd
+				}
+			default:
+				return nextState, &rtcerr.OperationError{Err: fmt.Errorf("%w: %s(%s)", errPeerConnStateChangeInvalid, op, sd.Type)}
+			}
+		case setRemote:
+			switch sd.Type {
+			// stable->SetRemote(offer)->have-remote-offer
+			case SDPTypeOffer:
+				nextState, err = checkNextSignalingState(cur, SignalingStateHaveRemoteOffer, setRemote, sd.Type)
+				if err == nil {
+					pc.pendingRemoteDescription = sd
+				}
+			// have-local-offer->SetRemote(answer)->stable
+			// have-remote-pranswer->SetRemote(answer)->stable
+			case SDPTypeAnswer:
+				nextState, err = checkNextSignalingState(cur, SignalingStateStable, setRemote, sd.Type)
+				if err == nil {
+					pc.currentRemoteDescription = sd
+					pc.currentLocalDescription = pc.pendingLocalDescription
+					pc.pendingRemoteDescription = nil
+					pc.pendingLocalDescription = nil
+				}
+			case SDPTypeRollback:
+				nextState, err = checkNextSignalingState(cur, SignalingStateStable, setRemote, sd.Type)
+				if err == nil {
+					pc.pendingRemoteDescription = nil
+				}
+			// have-local-offer->SetRemote(pranswer)->have-remote-pranswer
+			case SDPTypePranswer:
+				nextState, err = checkNextSignalingState(cur, SignalingStateHaveRemotePranswer, setRemote, sd.Type)
+				if err == nil {
+					pc.pendingRemoteDescription = sd
+				}
+			default:
+				return nextState, &rtcerr.OperationError{Err: fmt.Errorf("%w: %s(%s)", errPeerConnStateChangeInvalid, op, sd.Type)}
+			}
+		default:
+			return nextState, &rtcerr.OperationError{Err: fmt.Errorf("%w: %q", errPeerConnStateChangeUnhandled, op)}
+		}
+
+		return nextState, err
+	}()
+
+	if err == nil {
+		pc.signalingState.Set(nextState)
+		if pc.signalingState.Get() == SignalingStateStable {
+			pc.isNegotiationNeeded.set(false)
+			pc.onNegotiationNeeded()
+		}
+		pc.onSignalingStateChange(nextState)
+	}
+	return err
+}
+
+// SetLocalDescription sets the SessionDescription of the local peer
+func (pc *PeerConnection) SetLocalDescription(desc SessionDescription) error {
+	if pc.isClosed.get() {
+		return &rtcerr.InvalidStateError{Err: ErrConnectionClosed}
+	}
+
+	haveLocalDescription := pc.currentLocalDescription != nil
+
+	// JSEP 5.4
+	if desc.SDP == "" {
+		switch desc.Type {
+		case SDPTypeAnswer, SDPTypePranswer:
+			desc.SDP = pc.lastAnswer
+		case SDPTypeOffer:
+			desc.SDP = pc.lastOffer
+		default:
+			return &rtcerr.InvalidModificationError{
+				Err: fmt.Errorf("%w: %s", errPeerConnSDPTypeInvalidValueSetLocalDescription, desc.Type),
+			}
+		}
+	}
+
+	desc.parsed = &sdp.SessionDescription{}
+	if err := desc.parsed.Unmarshal([]byte(desc.SDP)); err != nil {
+		return err
+	}
+	if err := pc.setDescription(&desc, stateChangeOpSetLocal); err != nil {
+		return err
+	}
+
+	currentTransceivers := append([]*RTPTransceiver{}, pc.GetTransceivers()...)
+
+	weAnswer := desc.Type == SDPTypeAnswer
+	remoteDesc := pc.RemoteDescription()
+	if weAnswer && remoteDesc != nil {
+		if err := pc.startRTPSenders(currentTransceivers); err != nil {
+			return err
+		}
+		pc.ops.Enqueue(func() {
+			pc.startRTP(haveLocalDescription, remoteDesc, currentTransceivers)
+		})
+	}
+
+	if pc.iceGatherer.State() == ICEGathererStateNew {
+		return pc.iceGatherer.Gather()
+	}
+	return nil
+}
+
+// LocalDescription returns PendingLocalDescription if it is not null and
+// otherwise it returns CurrentLocalDescription. This property is used to
+// determine if SetLocalDescription has already been called.
+// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-localdescription
+func (pc *PeerConnection) LocalDescription() *SessionDescription {
+	if pendingLocalDescription := pc.PendingLocalDescription(); pendingLocalDescription != nil {
+		return pendingLocalDescription
+	}
+	return pc.CurrentLocalDescription()
+}
+
+// SetRemoteDescription sets the SessionDescription of the remote peer
+// nolint: gocyclo
+func (pc *PeerConnection) SetRemoteDescription(desc SessionDescription) error { //nolint:gocognit
+	if pc.isClosed.get() {
+		return &rtcerr.InvalidStateError{Err: ErrConnectionClosed}
+	}
+
+	isRenegotation := pc.currentRemoteDescription != nil
+
+	if _, err := desc.Unmarshal(); err != nil {
+		return err
+	}
+	if err := pc.setDescription(&desc, stateChangeOpSetRemote); err != nil {
+		return err
+	}
+
+	if err := pc.api.mediaEngine.updateFromRemoteDescription(*desc.parsed); err != nil {
+		return err
+	}
+
+	var t *RTPTransceiver
+	localTransceivers := append([]*RTPTransceiver{}, pc.GetTransceivers()...)
+	detectedPlanB := descriptionIsPlanB(pc.RemoteDescription())
+	weOffer := desc.Type == SDPTypeAnswer
+
+	if !weOffer && !detectedPlanB {
+		for _, media := range pc.RemoteDescription().parsed.MediaDescriptions {
+			midValue := getMidValue(media)
+			if midValue == "" {
+				return errPeerConnRemoteDescriptionWithoutMidValue
+			}
+
+			if media.MediaName.Media == mediaSectionApplication {
+				continue
+			}
+
+			kind := NewRTPCodecType(media.MediaName.Media)
+			direction := getPeerDirection(media)
+			if kind == 0 || direction == RTPTransceiverDirection(Unknown) {
+				continue
+			}
+
+			t, localTransceivers = findByMid(midValue, localTransceivers)
+			if t == nil {
+				t, localTransceivers = satisfyTypeAndDirection(kind, direction, localTransceivers)
+			} else if direction == RTPTransceiverDirectionInactive {
+				if err := t.Stop(); err != nil {
+					return err
+				}
+			}
+
+			if t == nil {
+				receiver, err := pc.api.NewRTPReceiver(kind, pc.dtlsTransport)
+				if err != nil {
+					return err
+				}
+				t = pc.newRTPTransceiver(receiver, nil, RTPTransceiverDirectionRecvonly, kind)
+
+				pc.onNegotiationNeeded()
+			}
+			if t.Mid() == "" {
+				if err := t.setMid(midValue); err != nil {
+					return err
+				}
+			}
+		}
+	}
+
+	remoteUfrag, remotePwd, candidates, err := extractICEDetails(desc.parsed)
+	if err != nil {
+		return err
+	}
+
+	if isRenegotation && pc.iceTransport.haveRemoteCredentialsChange(remoteUfrag, remotePwd) {
+		// An ICE Restart only happens implicitly for a SetRemoteDescription of type offer
+		if !weOffer {
+			if err = pc.iceTransport.restart(); err != nil {
+				return err
+			}
+		}
+
+		if err = pc.iceTransport.setRemoteCredentials(remoteUfrag, remotePwd); err != nil {
+			return err
+		}
+	}
+
+	for i := range candidates {
+		if err = pc.iceTransport.AddRemoteCandidate(&candidates[i]); err != nil {
+			return err
+		}
+	}
+
+	currentTransceivers := append([]*RTPTransceiver{}, pc.GetTransceivers()...)
+
+	if isRenegotation {
+		if weOffer {
+			if err = pc.startRTPSenders(currentTransceivers); err != nil {
+				return err
+			}
+			pc.ops.Enqueue(func() {
+				pc.startRTP(true, &desc, currentTransceivers)
+			})
+		}
+		return nil
+	}
+
+	remoteIsLite := false
+	if liteValue, haveRemoteIs := desc.parsed.Attribute(sdp.AttrKeyICELite); haveRemoteIs && liteValue == sdp.AttrKeyICELite {
+		remoteIsLite = true
+	}
+
+	fingerprint, fingerprintHash, err := extractFingerprint(desc.parsed)
+	if err != nil {
+		return err
+	}
+
+	iceRole := ICERoleControlled
+	// If one of the agents is lite and the other one is not, the lite agent must be the controlling agent.
+	// If both or neither agents are lite the offering agent is controlling.
+	// RFC 8445 S6.1.1
+	if (weOffer && remoteIsLite == pc.api.settingEngine.candidates.ICELite) || (remoteIsLite && !pc.api.settingEngine.candidates.ICELite) {
+		iceRole = ICERoleControlling
+	}
+
+	// Start the networking in a new routine since it will block until
+	// the connection is actually established.
+	if weOffer {
+		if err := pc.startRTPSenders(currentTransceivers); err != nil {
+			return err
+		}
+	}
+
+	pc.ops.Enqueue(func() {
+		pc.startTransports(iceRole, dtlsRoleFromRemoteSDP(desc.parsed), remoteUfrag, remotePwd, fingerprint, fingerprintHash)
+		if weOffer {
+			pc.startRTP(false, &desc, currentTransceivers)
+		}
+	})
+	return nil
+}
+
+func (pc *PeerConnection) startReceiver(incoming trackDetails, receiver *RTPReceiver) {
+	encodings := []RTPDecodingParameters{}
+	if incoming.ssrc != 0 {
+		encodings = append(encodings, RTPDecodingParameters{RTPCodingParameters{SSRC: incoming.ssrc}})
+	}
+	for _, rid := range incoming.rids {
+		encodings = append(encodings, RTPDecodingParameters{RTPCodingParameters{RID: rid}})
+	}
+
+	if err := receiver.Receive(RTPReceiveParameters{Encodings: encodings}); err != nil {
+		pc.log.Warnf("RTPReceiver Receive failed %s", err)
+		return
+	}
+
+	// set track id and label early so they can be set as new track information
+	// is received from the SDP.
+	for i := range receiver.tracks {
+		receiver.tracks[i].track.mu.Lock()
+		receiver.tracks[i].track.id = incoming.id
+		receiver.tracks[i].track.streamID = incoming.streamID
+		receiver.tracks[i].track.mu.Unlock()
+	}
+
+	// We can't block and wait for a single SSRC
+	if incoming.ssrc == 0 {
+		return
+	}
+
+	go func() {
+		if err := receiver.Track().determinePayloadType(); err != nil {
+			pc.log.Warnf("Could not determine PayloadType for SSRC %d", receiver.Track().SSRC())
+			return
+		}
+
+		params, err := pc.api.mediaEngine.getRTPParametersByPayloadType(receiver.Track().PayloadType())
+		if err != nil {
+			pc.log.Warnf("no codec could be found for payloadType %d", receiver.Track().PayloadType())
+			return
+		}
+
+		receiver.Track().mu.Lock()
+		receiver.Track().kind = receiver.kind
+		receiver.Track().codec = params.Codecs[0]
+		receiver.Track().params = params
+		receiver.Track().mu.Unlock()
+
+		pc.onTrack(receiver.Track(), receiver)
+	}()
+}
+
+// startRTPReceivers opens knows inbound SRTP streams from the RemoteDescription
+func (pc *PeerConnection) startRTPReceivers(incomingTracks []trackDetails, currentTransceivers []*RTPTransceiver) { //nolint:gocognit
+	localTransceivers := append([]*RTPTransceiver{}, currentTransceivers...)
+
+	remoteIsPlanB := false
+	switch pc.configuration.SDPSemantics {
+	case SDPSemanticsPlanB:
+		remoteIsPlanB = true
+	case SDPSemanticsUnifiedPlanWithFallback:
+		remoteIsPlanB = descriptionIsPlanB(pc.RemoteDescription())
+	default:
+		// none
+	}
+
+	// Ensure we haven't already started a transceiver for this ssrc
+	for i := range incomingTracks {
+		if len(incomingTracks) <= i {
+			break
+		}
+		incomingTrack := incomingTracks[i]
+
+		for _, t := range localTransceivers {
+			if (t.Receiver()) == nil || t.Receiver().Track() == nil || t.Receiver().Track().ssrc != incomingTrack.ssrc {
+				continue
+			}
+
+			incomingTracks = filterTrackWithSSRC(incomingTracks, incomingTrack.ssrc)
+		}
+	}
+
+	unhandledTracks := incomingTracks[:0]
+	for i := range incomingTracks {
+		trackHandled := false
+		for j := range localTransceivers {
+			t := localTransceivers[j]
+			incomingTrack := incomingTracks[i]
+
+			if t.Mid() != incomingTrack.mid {
+				continue
+			}
+
+			if (incomingTrack.kind != t.kind) ||
+				(t.Direction() != RTPTransceiverDirectionRecvonly && t.Direction() != RTPTransceiverDirectionSendrecv) ||
+				(t.Receiver()) == nil ||
+				(t.Receiver().haveReceived()) {
+				continue
+			}
+
+			pc.startReceiver(incomingTrack, t.Receiver())
+			trackHandled = true
+			break
+		}
+
+		if !trackHandled {
+			unhandledTracks = append(unhandledTracks, incomingTracks[i])
+		}
+	}
+
+	if remoteIsPlanB {
+		for _, incoming := range unhandledTracks {
+			t, err := pc.AddTransceiverFromKind(incoming.kind, RtpTransceiverInit{
+				Direction: RTPTransceiverDirectionSendrecv,
+			})
+			if err != nil {
+				pc.log.Warnf("Could not add transceiver for remote SSRC %d: %s", incoming.ssrc, err)
+				continue
+			}
+			pc.startReceiver(incoming, t.Receiver())
+		}
+	}
+}
+
+// startRTPSenders starts all outbound RTP streams
+func (pc *PeerConnection) startRTPSenders(currentTransceivers []*RTPTransceiver) error {
+	for _, transceiver := range currentTransceivers {
+		if transceiver.Sender() != nil && transceiver.Sender().isNegotiated() && !transceiver.Sender().hasSent() {
+			err := transceiver.Sender().Send(RTPSendParameters{
+				Encodings: []RTPEncodingParameters{
+					{
+						RTPCodingParameters{
+							SSRC:        transceiver.Sender().ssrc,
+							PayloadType: transceiver.Sender().payloadType,
+						},
+					},
+				},
+			})
+			if err != nil {
+				return err
+			}
+		}
+	}
+
+	return nil
+}
+
+// Start SCTP subsystem
+func (pc *PeerConnection) startSCTP() {
+	// Start sctp
+	if err := pc.sctpTransport.Start(SCTPCapabilities{
+		MaxMessageSize: 0,
+	}); err != nil {
+		pc.log.Warnf("Failed to start SCTP: %s", err)
+		if err = pc.sctpTransport.Stop(); err != nil {
+			pc.log.Warnf("Failed to stop SCTPTransport: %s", err)
+		}
+
+		return
+	}
+
+	// DataChannels that need to be opened now that SCTP is available
+	// make a copy we may have incoming DataChannels mutating this while we open
+	pc.sctpTransport.lock.RLock()
+	dataChannels := append([]*DataChannel{}, pc.sctpTransport.dataChannels...)
+	pc.sctpTransport.lock.RUnlock()
+
+	var openedDCCount uint32
+	for _, d := range dataChannels {
+		if d.ReadyState() == DataChannelStateConnecting {
+			err := d.open(pc.sctpTransport)
+			if err != nil {
+				pc.log.Warnf("failed to open data channel: %s", err)
+				continue
+			}
+			openedDCCount++
+		}
+	}
+
+	pc.sctpTransport.lock.Lock()
+	pc.sctpTransport.dataChannelsOpened += openedDCCount
+	pc.sctpTransport.lock.Unlock()
+}
+
+func (pc *PeerConnection) handleUndeclaredSSRC(rtpStream io.Reader, ssrc SSRC) error { //nolint:gocognit
+	remoteDescription := pc.RemoteDescription()
+	if remoteDescription == nil {
+		return errPeerConnRemoteDescriptionNil
+	}
+
+	// If the remote SDP was only one media section the ssrc doesn't have to be explicitly declared
+	if len(remoteDescription.parsed.MediaDescriptions) == 1 {
+		onlyMediaSection := remoteDescription.parsed.MediaDescriptions[0]
+		for _, a := range onlyMediaSection.Attributes {
+			if a.Key == ssrcStr {
+				return errPeerConnSingleMediaSectionHasExplicitSSRC
+			}
+		}
+
+		incoming := trackDetails{
+			ssrc: ssrc,
+			kind: RTPCodecTypeVideo,
+		}
+		if onlyMediaSection.MediaName.Media == RTPCodecTypeAudio.String() {
+			incoming.kind = RTPCodecTypeAudio
+		}
+
+		t, err := pc.AddTransceiverFromKind(incoming.kind, RtpTransceiverInit{
+			Direction: RTPTransceiverDirectionSendrecv,
+		})
+		if err != nil {
+			return fmt.Errorf("%w: %d: %s", errPeerConnRemoteSSRCAddTransceiver, ssrc, err)
+		}
+		pc.startReceiver(incoming, t.Receiver())
+		return nil
+	}
+
+	midExtensionID, audioSupported, videoSupported := pc.api.mediaEngine.getHeaderExtensionID(RTPHeaderExtensionCapability{sdp.SDESMidURI})
+	if !audioSupported && !videoSupported {
+		return errPeerConnSimulcastMidRTPExtensionRequired
+	}
+
+	streamIDExtensionID, audioSupported, videoSupported := pc.api.mediaEngine.getHeaderExtensionID(RTPHeaderExtensionCapability{sdp.SDESRTPStreamIDURI})
+	if !audioSupported && !videoSupported {
+		return errPeerConnSimulcastStreamIDRTPExtensionRequired
+	}
+
+	b := make([]byte, receiveMTU)
+	var mid, rid string
+	for readCount := 0; readCount <= simulcastProbeCount; readCount++ {
+		i, err := rtpStream.Read(b)
+		if err != nil {
+			return err
+		}
+
+		maybeMid, maybeRid, payloadType, err := handleUnknownRTPPacket(b[:i], uint8(midExtensionID), uint8(streamIDExtensionID))
+		if err != nil {
+			return err
+		}
+
+		if maybeMid != "" {
+			mid = maybeMid
+		}
+		if maybeRid != "" {
+			rid = maybeRid
+		}
+
+		if mid == "" || rid == "" {
+			continue
+		}
+
+		params, err := pc.api.mediaEngine.getRTPParametersByPayloadType(payloadType)
+		if err != nil {
+			return err
+		}
+
+		for _, t := range pc.GetTransceivers() {
+			if t.Mid() != mid || t.Receiver() == nil {
+				continue
+			}
+
+			track, err := t.Receiver().receiveForRid(rid, params, ssrc)
+			if err != nil {
+				return err
+			}
+			pc.onTrack(track, t.Receiver())
+			return nil
+		}
+	}
+
+	return errPeerConnSimulcastIncomingSSRCFailed
+}
+
+// undeclaredMediaProcessor handles RTP/RTCP packets that don't match any a:ssrc lines
+func (pc *PeerConnection) undeclaredMediaProcessor() {
+	go func() {
+		var simulcastRoutineCount uint64
+		for {
+			srtpSession, err := pc.dtlsTransport.getSRTPSession()
+			if err != nil {
+				pc.log.Warnf("undeclaredMediaProcessor failed to open SrtpSession: %v", err)
+				return
+			}
+
+			stream, ssrc, err := srtpSession.AcceptStream()
+			if err != nil {
+				pc.log.Warnf("Failed to accept RTP %v", err)
+				return
+			}
+
+			if pc.isClosed.get() {
+				if err = stream.Close(); err != nil {
+					pc.log.Warnf("Failed to close RTP stream %v", err)
+				}
+				continue
+			}
+
+			if atomic.AddUint64(&simulcastRoutineCount, 1) >= simulcastMaxProbeRoutines {
+				atomic.AddUint64(&simulcastRoutineCount, ^uint64(0))
+				pc.log.Warn(ErrSimulcastProbeOverflow.Error())
+				continue
+			}
+
+			go func(rtpStream io.Reader, ssrc SSRC) {
+				pc.dtlsTransport.storeSimulcastStream(stream)
+
+				if err := pc.handleUndeclaredSSRC(rtpStream, ssrc); err != nil {
+					pc.log.Errorf("Incoming unhandled RTP ssrc(%d), OnTrack will not be fired. %v", ssrc, err)
+				}
+				atomic.AddUint64(&simulcastRoutineCount, ^uint64(0))
+			}(stream, SSRC(ssrc))
+		}
+	}()
+
+	go func() {
+		for {
+			srtcpSession, err := pc.dtlsTransport.getSRTCPSession()
+			if err != nil {
+				pc.log.Warnf("undeclaredMediaProcessor failed to open SrtcpSession: %v", err)
+				return
+			}
+
+			_, ssrc, err := srtcpSession.AcceptStream()
+			if err != nil {
+				pc.log.Warnf("Failed to accept RTCP %v", err)
+				return
+			}
+			pc.log.Warnf("Incoming unhandled RTCP ssrc(%d), OnTrack will not be fired", ssrc)
+		}
+	}()
+}
+
+// RemoteDescription returns pendingRemoteDescription if it is not null and
+// otherwise it returns currentRemoteDescription. This property is used to
+// determine if setRemoteDescription has already been called.
+// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-remotedescription
+func (pc *PeerConnection) RemoteDescription() *SessionDescription {
+	pc.mu.RLock()
+	defer pc.mu.RUnlock()
+
+	if pc.pendingRemoteDescription != nil {
+		return pc.pendingRemoteDescription
+	}
+	return pc.currentRemoteDescription
+}
+
+// AddICECandidate accepts an ICE candidate string and adds it
+// to the existing set of candidates.
+func (pc *PeerConnection) AddICECandidate(candidate ICECandidateInit) error {
+	if pc.RemoteDescription() == nil {
+		return &rtcerr.InvalidStateError{Err: ErrNoRemoteDescription}
+	}
+
+	candidateValue := strings.TrimPrefix(candidate.Candidate, "candidate:")
+
+	var iceCandidate *ICECandidate
+	if candidateValue != "" {
+		candidate, err := ice.UnmarshalCandidate(candidateValue)
+		if err != nil {
+			return err
+		}
+
+		c, err := newICECandidateFromICE(candidate)
+		if err != nil {
+			return err
+		}
+		iceCandidate = &c
+	}
+
+	return pc.iceTransport.AddRemoteCandidate(iceCandidate)
+}
+
+// ICEConnectionState returns the ICE connection state of the
+// PeerConnection instance.
+func (pc *PeerConnection) ICEConnectionState() ICEConnectionState {
+	pc.mu.RLock()
+	defer pc.mu.RUnlock()
+
+	return pc.iceConnectionState
+}
+
+// GetSenders returns the RTPSender that are currently attached to this PeerConnection
+func (pc *PeerConnection) GetSenders() []*RTPSender {
+	pc.mu.Lock()
+	defer pc.mu.Unlock()
+
+	result := []*RTPSender{}
+	for _, transceiver := range pc.rtpTransceivers {
+		if transceiver.Sender() != nil {
+			result = append(result, transceiver.Sender())
+		}
+	}
+	return result
+}
+
+// GetReceivers returns the RTPReceivers that are currently attached to this PeerConnection
+func (pc *PeerConnection) GetReceivers() (receivers []*RTPReceiver) {
+	pc.mu.Lock()
+	defer pc.mu.Unlock()
+
+	for _, transceiver := range pc.rtpTransceivers {
+		if transceiver.Receiver() != nil {
+			receivers = append(receivers, transceiver.Receiver())
+		}
+	}
+	return
+}
+
+// GetTransceivers returns the RtpTransceiver that are currently attached to this PeerConnection
+func (pc *PeerConnection) GetTransceivers() []*RTPTransceiver {
+	pc.mu.Lock()
+	defer pc.mu.Unlock()
+
+	return pc.rtpTransceivers
+}
+
+// AddTrack adds a Track to the PeerConnection
+func (pc *PeerConnection) AddTrack(track TrackLocal) (*RTPSender, error) {
+	if pc.isClosed.get() {
+		return nil, &rtcerr.InvalidStateError{Err: ErrConnectionClosed}
+	}
+
+	var transceiver *RTPTransceiver
+	for _, t := range pc.GetTransceivers() {
+		if !t.stopped && t.kind == track.Kind() && t.Sender() == nil {
+			transceiver = t
+			break
+		}
+	}
+	if transceiver != nil {
+		sender, err := pc.api.NewRTPSender(track, pc.dtlsTransport)
+		if err != nil {
+			return nil, err
+		}
+		transceiver.setSender(sender)
+		// we still need to call setSendingTrack to ensure direction has changed
+		if err := transceiver.setSendingTrack(track); err != nil {
+			return nil, err
+		}
+		pc.onNegotiationNeeded()
+
+		return sender, nil
+	}
+
+	transceiver, err := pc.AddTransceiverFromTrack(track)
+	if err != nil {
+		return nil, err
+	}
+
+	return transceiver.Sender(), nil
+}
+
+// RemoveTrack removes a Track from the PeerConnection
+func (pc *PeerConnection) RemoveTrack(sender *RTPSender) error {
+	if pc.isClosed.get() {
+		return &rtcerr.InvalidStateError{Err: ErrConnectionClosed}
+	}
+
+	var transceiver *RTPTransceiver
+	for _, t := range pc.GetTransceivers() {
+		if t.Sender() == sender {
+			transceiver = t
+			break
+		}
+	}
+
+	if transceiver == nil {
+		return &rtcerr.InvalidAccessError{Err: ErrSenderNotCreatedByConnection}
+	} else if err := sender.Stop(); err != nil {
+		return err
+	}
+
+	if err := transceiver.setSendingTrack(nil); err != nil {
+		return err
+	}
+
+	pc.onNegotiationNeeded()
+
+	return nil
+}
+
+// AddTransceiverFromKind Create a new RtpTransceiver(SendRecv or RecvOnly) and add it to the set of transceivers.
+func (pc *PeerConnection) AddTransceiverFromKind(kind RTPCodecType, init ...RtpTransceiverInit) (*RTPTransceiver, error) {
+	if pc.isClosed.get() {
+		return nil, &rtcerr.InvalidStateError{Err: ErrConnectionClosed}
+	}
+
+	direction := RTPTransceiverDirectionSendrecv
+	if len(init) > 1 {
+		return nil, errPeerConnAddTransceiverFromKindOnlyAcceptsOne
+	} else if len(init) == 1 {
+		direction = init[0].Direction
+	}
+
+	switch direction {
+	case RTPTransceiverDirectionSendrecv:
+		codecs := pc.api.mediaEngine.getCodecsByKind(kind)
+		if len(codecs) == 0 {
+			return nil, ErrNoCodecsAvailable
+		}
+
+		track, err := NewTrackLocalStaticSample(codecs[0].RTPCodecCapability, util.MathRandAlpha(16), util.MathRandAlpha(16))
+		if err != nil {
+			return nil, err
+		}
+
+		return pc.AddTransceiverFromTrack(track, init...)
+	case RTPTransceiverDirectionRecvonly:
+		receiver, err := pc.api.NewRTPReceiver(kind, pc.dtlsTransport)
+		if err != nil {
+			return nil, err
+		}
+
+		t := pc.newRTPTransceiver(
+			receiver,
+			nil,
+			RTPTransceiverDirectionRecvonly,
+			kind,
+		)
+
+		pc.onNegotiationNeeded()
+
+		return t, nil
+	default:
+		return nil, errPeerConnAddTransceiverFromKindSupport
+	}
+}
+
+// AddTransceiverFromTrack Create a new RtpTransceiver(SendRecv or SendOnly) and add it to the set of transceivers.
+func (pc *PeerConnection) AddTransceiverFromTrack(track TrackLocal, init ...RtpTransceiverInit) (*RTPTransceiver, error) {
+	if pc.isClosed.get() {
+		return nil, &rtcerr.InvalidStateError{Err: ErrConnectionClosed}
+	}
+
+	direction := RTPTransceiverDirectionSendrecv
+	if len(init) > 1 {
+		return nil, errPeerConnAddTransceiverFromTrackOnlyAcceptsOne
+	} else if len(init) == 1 {
+		direction = init[0].Direction
+	}
+
+	switch direction {
+	case RTPTransceiverDirectionSendrecv:
+		receiver, err := pc.api.NewRTPReceiver(track.Kind(), pc.dtlsTransport)
+		if err != nil {
+			return nil, err
+		}
+
+		sender, err := pc.api.NewRTPSender(track, pc.dtlsTransport)
+		if err != nil {
+			return nil, err
+		}
+
+		t := pc.newRTPTransceiver(
+			receiver,
+			sender,
+			RTPTransceiverDirectionSendrecv,
+			track.Kind(),
+		)
+
+		pc.onNegotiationNeeded()
+
+		return t, nil
+
+	case RTPTransceiverDirectionSendonly:
+		sender, err := pc.api.NewRTPSender(track, pc.dtlsTransport)
+		if err != nil {
+			return nil, err
+		}
+
+		t := pc.newRTPTransceiver(
+			nil,
+			sender,
+			RTPTransceiverDirectionSendonly,
+			track.Kind(),
+		)
+
+		pc.onNegotiationNeeded()
+
+		return t, nil
+	default:
+		return nil, errPeerConnAddTransceiverFromTrackSupport
+	}
+}
+
+// CreateDataChannel creates a new DataChannel object with the given label
+// and optional DataChannelInit used to configure properties of the
+// underlying channel such as data reliability.
+func (pc *PeerConnection) CreateDataChannel(label string, options *DataChannelInit) (*DataChannel, error) {
+	// https://w3c.github.io/webrtc-pc/#peer-to-peer-data-api (Step #2)
+	if pc.isClosed.get() {
+		return nil, &rtcerr.InvalidStateError{Err: ErrConnectionClosed}
+	}
+
+	params := &DataChannelParameters{
+		Label:   label,
+		Ordered: true,
+	}
+
+	// https://w3c.github.io/webrtc-pc/#peer-to-peer-data-api (Step #19)
+	if options != nil {
+		params.ID = options.ID
+	}
+
+	if options != nil {
+		// Ordered indicates if data is allowed to be delivered out of order. The
+		// default value of true, guarantees that data will be delivered in order.
+		// https://w3c.github.io/webrtc-pc/#peer-to-peer-data-api (Step #9)
+		if options.Ordered != nil {
+			params.Ordered = *options.Ordered
+		}
+
+		// https://w3c.github.io/webrtc-pc/#peer-to-peer-data-api (Step #7)
+		if options.MaxPacketLifeTime != nil {
+			params.MaxPacketLifeTime = options.MaxPacketLifeTime
+		}
+
+		// https://w3c.github.io/webrtc-pc/#peer-to-peer-data-api (Step #8)
+		if options.MaxRetransmits != nil {
+			params.MaxRetransmits = options.MaxRetransmits
+		}
+
+		// https://w3c.github.io/webrtc-pc/#peer-to-peer-data-api (Step #10)
+		if options.Protocol != nil {
+			params.Protocol = *options.Protocol
+		}
+
+		// https://w3c.github.io/webrtc-pc/#peer-to-peer-data-api (Step #11)
+		if len(params.Protocol) > 65535 {
+			return nil, &rtcerr.TypeError{Err: ErrProtocolTooLarge}
+		}
+
+		// https://w3c.github.io/webrtc-pc/#peer-to-peer-data-api (Step #12)
+		if options.Negotiated != nil {
+			params.Negotiated = *options.Negotiated
+		}
+	}
+
+	d, err := pc.api.newDataChannel(params, pc.log)
+	if err != nil {
+		return nil, err
+	}
+
+	// https://w3c.github.io/webrtc-pc/#peer-to-peer-data-api (Step #16)
+	if d.maxPacketLifeTime != nil && d.maxRetransmits != nil {
+		return nil, &rtcerr.TypeError{Err: ErrRetransmitsOrPacketLifeTime}
+	}
+
+	pc.sctpTransport.lock.Lock()
+	pc.sctpTransport.dataChannels = append(pc.sctpTransport.dataChannels, d)
+	pc.sctpTransport.dataChannelsRequested++
+	pc.sctpTransport.lock.Unlock()
+
+	// If SCTP already connected open all the channels
+	if pc.sctpTransport.State() == SCTPTransportStateConnected {
+		if err = d.open(pc.sctpTransport); err != nil {
+			return nil, err
+		}
+	}
+
+	pc.onNegotiationNeeded()
+
+	return d, nil
+}
+
+// SetIdentityProvider is used to configure an identity provider to generate identity assertions
+func (pc *PeerConnection) SetIdentityProvider(provider string) error {
+	return errPeerConnSetIdentityProviderNotImplemented
+}
+
+// WriteRTCP sends a user provided RTCP packet to the connected peer. If no peer is connected the
+// packet is discarded. It also runs any configured interceptors.
+func (pc *PeerConnection) WriteRTCP(pkts []rtcp.Packet) error {
+	_, err := pc.interceptorRTCPWriter.Write(pkts, make(interceptor.Attributes))
+	return err
+}
+
+func (pc *PeerConnection) writeRTCP(pkts []rtcp.Packet, _ interceptor.Attributes) (int, error) {
+	raw, err := rtcp.Marshal(pkts)
+	if err != nil {
+		return 0, err
+	}
+
+	srtcpSession, err := pc.dtlsTransport.getSRTCPSession()
+	if err != nil {
+		return 0, nil
+	}
+
+	writeStream, err := srtcpSession.OpenWriteStream()
+	if err != nil {
+		return 0, fmt.Errorf("%w: %v", errPeerConnWriteRTCPOpenWriteStream, err)
+	}
+
+	if n, err := writeStream.Write(raw); err != nil {
+		return n, err
+	}
+	return 0, nil
+}
+
+// Close ends the PeerConnection
+func (pc *PeerConnection) Close() error {
+	// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-close (step #1)
+	if pc.isClosed.get() {
+		return nil
+	}
+
+	// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-close (step #2)
+	pc.isClosed.set(true)
+
+	// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-close (step #3)
+	pc.signalingState.Set(SignalingStateClosed)
+
+	// Try closing everything and collect the errors
+	// Shutdown strategy:
+	// 1. All Conn close by closing their underlying Conn.
+	// 2. A Mux stops this chain. It won't close the underlying
+	//    Conn if one of the endpoints is closed down. To
+	//    continue the chain the Mux has to be closed.
+	closeErrs := make([]error, 4)
+
+	closeErrs = append(closeErrs, pc.api.interceptor.Close())
+
+	// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-close (step #4)
+	for _, t := range pc.GetTransceivers() {
+		if !t.stopped {
+			closeErrs = append(closeErrs, t.Stop())
+		}
+	}
+
+	// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-close (step #5)
+	pc.sctpTransport.lock.Lock()
+	for _, d := range pc.sctpTransport.dataChannels {
+		d.setReadyState(DataChannelStateClosed)
+	}
+	pc.sctpTransport.lock.Unlock()
+
+	// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-close (step #6)
+	if pc.sctpTransport != nil {
+		closeErrs = append(closeErrs, pc.sctpTransport.Stop())
+	}
+
+	// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-close (step #7)
+	closeErrs = append(closeErrs, pc.dtlsTransport.Stop())
+
+	// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-close (step #8, #9, #10)
+	if pc.iceTransport != nil {
+		closeErrs = append(closeErrs, pc.iceTransport.Stop())
+	}
+
+	// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-close (step #11)
+	pc.updateConnectionState(pc.ICEConnectionState(), pc.dtlsTransport.State())
+
+	return util.FlattenErrs(closeErrs)
+}
+
+func (pc *PeerConnection) newRTPTransceiver(
+	receiver *RTPReceiver,
+	sender *RTPSender,
+	direction RTPTransceiverDirection,
+	kind RTPCodecType,
+) *RTPTransceiver {
+	t := &RTPTransceiver{kind: kind}
+	t.setReceiver(receiver)
+	t.setSender(sender)
+	t.setDirection(direction)
+
+	pc.mu.Lock()
+	pc.rtpTransceivers = append(pc.rtpTransceivers, t)
+	pc.mu.Unlock()
+
+	return t
+}
+
+// CurrentLocalDescription represents the local description that was
+// successfully negotiated the last time the PeerConnection transitioned
+// into the stable state plus any local candidates that have been generated
+// by the ICEAgent since the offer or answer was created.
+func (pc *PeerConnection) CurrentLocalDescription() *SessionDescription {
+	pc.mu.Lock()
+	defer pc.mu.Unlock()
+	return populateLocalCandidates(pc.currentLocalDescription, pc.iceGatherer, pc.ICEGatheringState())
+}
+
+// PendingLocalDescription represents a local description that is in the
+// process of being negotiated plus any local candidates that have been
+// generated by the ICEAgent since the offer or answer was created. If the
+// PeerConnection is in the stable state, the value is null.
+func (pc *PeerConnection) PendingLocalDescription() *SessionDescription {
+	pc.mu.Lock()
+	defer pc.mu.Unlock()
+	return populateLocalCandidates(pc.pendingLocalDescription, pc.iceGatherer, pc.ICEGatheringState())
+}
+
+// CurrentRemoteDescription represents the last remote description that was
+// successfully negotiated the last time the PeerConnection transitioned
+// into the stable state plus any remote candidates that have been supplied
+// via AddICECandidate() since the offer or answer was created.
+func (pc *PeerConnection) CurrentRemoteDescription() *SessionDescription {
+	return pc.currentRemoteDescription
+}
+
+// PendingRemoteDescription represents a remote description that is in the
+// process of being negotiated, complete with any remote candidates that
+// have been supplied via AddICECandidate() since the offer or answer was
+// created. If the PeerConnection is in the stable state, the value is
+// null.
+func (pc *PeerConnection) PendingRemoteDescription() *SessionDescription {
+	return pc.pendingRemoteDescription
+}
+
+// SignalingState attribute returns the signaling state of the
+// PeerConnection instance.
+func (pc *PeerConnection) SignalingState() SignalingState {
+	return pc.signalingState.Get()
+}
+
+// ICEGatheringState attribute returns the ICE gathering state of the
+// PeerConnection instance.
+func (pc *PeerConnection) ICEGatheringState() ICEGatheringState {
+	if pc.iceGatherer == nil {
+		return ICEGatheringStateNew
+	}
+
+	switch pc.iceGatherer.State() {
+	case ICEGathererStateNew:
+		return ICEGatheringStateNew
+	case ICEGathererStateGathering:
+		return ICEGatheringStateGathering
+	default:
+		return ICEGatheringStateComplete
+	}
+}
+
+// ConnectionState attribute returns the connection state of the
+// PeerConnection instance.
+func (pc *PeerConnection) ConnectionState() PeerConnectionState {
+	pc.mu.Lock()
+	defer pc.mu.Unlock()
+
+	return pc.connectionState
+}
+
+// GetStats return data providing statistics about the overall connection
+func (pc *PeerConnection) GetStats() StatsReport {
+	var (
+		dataChannelsAccepted  uint32
+		dataChannelsClosed    uint32
+		dataChannelsOpened    uint32
+		dataChannelsRequested uint32
+	)
+	statsCollector := newStatsReportCollector()
+	statsCollector.Collecting()
+
+	pc.mu.Lock()
+	if pc.iceGatherer != nil {
+		pc.iceGatherer.collectStats(statsCollector)
+	}
+	if pc.iceTransport != nil {
+		pc.iceTransport.collectStats(statsCollector)
+	}
+
+	pc.sctpTransport.lock.Lock()
+	dataChannels := append([]*DataChannel{}, pc.sctpTransport.dataChannels...)
+	dataChannelsAccepted = pc.sctpTransport.dataChannelsAccepted
+	dataChannelsOpened = pc.sctpTransport.dataChannelsOpened
+	dataChannelsRequested = pc.sctpTransport.dataChannelsRequested
+	pc.sctpTransport.lock.Unlock()
+
+	for _, d := range dataChannels {
+		state := d.ReadyState()
+		if state != DataChannelStateConnecting && state != DataChannelStateOpen {
+			dataChannelsClosed++
+		}
+
+		d.collectStats(statsCollector)
+	}
+	pc.sctpTransport.collectStats(statsCollector)
+
+	stats := PeerConnectionStats{
+		Timestamp:             statsTimestampNow(),
+		Type:                  StatsTypePeerConnection,
+		ID:                    pc.statsID,
+		DataChannelsAccepted:  dataChannelsAccepted,
+		DataChannelsClosed:    dataChannelsClosed,
+		DataChannelsOpened:    dataChannelsOpened,
+		DataChannelsRequested: dataChannelsRequested,
+	}
+
+	statsCollector.Collect(stats.ID, stats)
+
+	certificates := pc.configuration.Certificates
+	for _, certificate := range certificates {
+		if err := certificate.collectStats(statsCollector); err != nil {
+			continue
+		}
+	}
+	pc.mu.Unlock()
+
+	pc.api.mediaEngine.collectStats(statsCollector)
+
+	return statsCollector.Ready()
+}
+
+// Start all transports. PeerConnection now has enough state
+func (pc *PeerConnection) startTransports(iceRole ICERole, dtlsRole DTLSRole, remoteUfrag, remotePwd, fingerprint, fingerprintHash string) {
+	// Start the ice transport
+	err := pc.iceTransport.Start(
+		pc.iceGatherer,
+		ICEParameters{
+			UsernameFragment: remoteUfrag,
+			Password:         remotePwd,
+			ICELite:          false,
+		},
+		&iceRole,
+	)
+	if err != nil {
+		pc.log.Warnf("Failed to start manager: %s", err)
+		return
+	}
+
+	// Start the dtls transport
+	err = pc.dtlsTransport.Start(DTLSParameters{
+		Role:         dtlsRole,
+		Fingerprints: []DTLSFingerprint{{Algorithm: fingerprintHash, Value: fingerprint}},
+	})
+	pc.updateConnectionState(pc.ICEConnectionState(), pc.dtlsTransport.State())
+	if err != nil {
+		pc.log.Warnf("Failed to start manager: %s", err)
+		return
+	}
+}
+
+func (pc *PeerConnection) startRTP(isRenegotiation bool, remoteDesc *SessionDescription, currentTransceivers []*RTPTransceiver) {
+	trackDetails := trackDetailsFromSDP(pc.log, remoteDesc.parsed)
+	if isRenegotiation {
+		for _, t := range currentTransceivers {
+			if t.Receiver() == nil || t.Receiver().Track() == nil {
+				continue
+			}
+
+			t.Receiver().Track().mu.Lock()
+			ssrc := t.Receiver().Track().ssrc
+
+			if details := trackDetailsForSSRC(trackDetails, ssrc); details != nil {
+				t.Receiver().Track().id = details.id
+				t.Receiver().Track().streamID = details.streamID
+				t.Receiver().Track().mu.Unlock()
+				continue
+			}
+
+			t.Receiver().Track().mu.Unlock()
+
+			if err := t.Receiver().Stop(); err != nil {
+				pc.log.Warnf("Failed to stop RtpReceiver: %s", err)
+				continue
+			}
+
+			receiver, err := pc.api.NewRTPReceiver(t.Receiver().kind, pc.dtlsTransport)
+			if err != nil {
+				pc.log.Warnf("Failed to create new RtpReceiver: %s", err)
+				continue
+			}
+			t.setReceiver(receiver)
+		}
+	}
+
+	pc.startRTPReceivers(trackDetails, currentTransceivers)
+	if haveApplicationMediaSection(remoteDesc.parsed) {
+		pc.startSCTP()
+	}
+
+	if !isRenegotiation {
+		pc.undeclaredMediaProcessor()
+	}
+}
+
+// generateUnmatchedSDP generates an SDP that doesn't take remote state into account
+// This is used for the initial call for CreateOffer
+func (pc *PeerConnection) generateUnmatchedSDP(transceivers []*RTPTransceiver, useIdentity bool) (*sdp.SessionDescription, error) {
+	d, err := sdp.NewJSEPSessionDescription(useIdentity)
+	if err != nil {
+		return nil, err
+	}
+
+	iceParams, err := pc.iceGatherer.GetLocalParameters()
+	if err != nil {
+		return nil, err
+	}
+
+	candidates, err := pc.iceGatherer.GetLocalCandidates()
+	if err != nil {
+		return nil, err
+	}
+
+	isPlanB := pc.configuration.SDPSemantics == SDPSemanticsPlanB
+	mediaSections := []mediaSection{}
+
+	// Needed for pc.sctpTransport.dataChannelsRequested
+	pc.sctpTransport.lock.Lock()
+	defer pc.sctpTransport.lock.Unlock()
+
+	if isPlanB {
+		video := make([]*RTPTransceiver, 0)
+		audio := make([]*RTPTransceiver, 0)
+
+		for _, t := range transceivers {
+			if t.kind == RTPCodecTypeVideo {
+				video = append(video, t)
+			} else if t.kind == RTPCodecTypeAudio {
+				audio = append(audio, t)
+			}
+			if t.Sender() != nil {
+				t.Sender().setNegotiated()
+			}
+		}
+
+		if len(video) > 0 {
+			mediaSections = append(mediaSections, mediaSection{id: "video", transceivers: video})
+		}
+		if len(audio) > 0 {
+			mediaSections = append(mediaSections, mediaSection{id: "audio", transceivers: audio})
+		}
+
+		if pc.sctpTransport.dataChannelsRequested != 0 {
+			mediaSections = append(mediaSections, mediaSection{id: "data", data: true})
+		}
+	} else {
+		for _, t := range transceivers {
+			if t.Sender() != nil {
+				t.Sender().setNegotiated()
+			}
+			mediaSections = append(mediaSections, mediaSection{id: t.Mid(), transceivers: []*RTPTransceiver{t}})
+		}
+
+		if pc.sctpTransport.dataChannelsRequested != 0 {
+			mediaSections = append(mediaSections, mediaSection{id: strconv.Itoa(len(mediaSections)), data: true})
+		}
+	}
+
+	dtlsFingerprints, err := pc.configuration.Certificates[0].GetFingerprints()
+	if err != nil {
+		return nil, err
+	}
+
+	return populateSDP(d, isPlanB, dtlsFingerprints, pc.api.settingEngine.sdpMediaLevelFingerprints, pc.api.settingEngine.candidates.ICELite, pc.api.mediaEngine, connectionRoleFromDtlsRole(defaultDtlsRoleOffer), candidates, iceParams, mediaSections, pc.ICEGatheringState())
+}
+
+// generateMatchedSDP generates a SDP and takes the remote state into account
+// this is used everytime we have a RemoteDescription
+// nolint: gocyclo
+func (pc *PeerConnection) generateMatchedSDP(transceivers []*RTPTransceiver, useIdentity bool, includeUnmatched bool, connectionRole sdp.ConnectionRole) (*sdp.SessionDescription, error) { //nolint:gocognit
+	d, err := sdp.NewJSEPSessionDescription(useIdentity)
+	if err != nil {
+		return nil, err
+	}
+
+	iceParams, err := pc.iceGatherer.GetLocalParameters()
+	if err != nil {
+		return nil, err
+	}
+
+	candidates, err := pc.iceGatherer.GetLocalCandidates()
+	if err != nil {
+		return nil, err
+	}
+
+	var t *RTPTransceiver
+	localTransceivers := append([]*RTPTransceiver{}, transceivers...)
+	detectedPlanB := descriptionIsPlanB(pc.RemoteDescription())
+	mediaSections := []mediaSection{}
+	alreadyHaveApplicationMediaSection := false
+
+	for _, media := range pc.RemoteDescription().parsed.MediaDescriptions {
+		midValue := getMidValue(media)
+		if midValue == "" {
+			return nil, errPeerConnRemoteDescriptionWithoutMidValue
+		}
+
+		if media.MediaName.Media == mediaSectionApplication {
+			mediaSections = append(mediaSections, mediaSection{id: midValue, data: true})
+			alreadyHaveApplicationMediaSection = true
+			continue
+		}
+
+		kind := NewRTPCodecType(media.MediaName.Media)
+		direction := getPeerDirection(media)
+		if kind == 0 || direction == RTPTransceiverDirection(Unknown) {
+			continue
+		}
+
+		sdpSemantics := pc.configuration.SDPSemantics
+
+		switch {
+		case sdpSemantics == SDPSemanticsPlanB || sdpSemantics == SDPSemanticsUnifiedPlanWithFallback && detectedPlanB:
+			if !detectedPlanB {
+				return nil, &rtcerr.TypeError{Err: ErrIncorrectSDPSemantics}
+			}
+			// If we're responding to a plan-b offer, then we should try to fill up this
+			// media entry with all matching local transceivers
+			mediaTransceivers := []*RTPTransceiver{}
+			for {
+				// keep going until we can't get any more
+				t, localTransceivers = satisfyTypeAndDirection(kind, direction, localTransceivers)
+				if t == nil {
+					if len(mediaTransceivers) == 0 {
+						t = &RTPTransceiver{kind: kind}
+						t.setDirection(RTPTransceiverDirectionInactive)
+						mediaTransceivers = append(mediaTransceivers, t)
+					}
+					break
+				}
+				if t.Sender() != nil {
+					t.Sender().setNegotiated()
+				}
+				mediaTransceivers = append(mediaTransceivers, t)
+			}
+			mediaSections = append(mediaSections, mediaSection{id: midValue, transceivers: mediaTransceivers})
+		case sdpSemantics == SDPSemanticsUnifiedPlan || sdpSemantics == SDPSemanticsUnifiedPlanWithFallback:
+			if detectedPlanB {
+				return nil, &rtcerr.TypeError{Err: ErrIncorrectSDPSemantics}
+			}
+			t, localTransceivers = findByMid(midValue, localTransceivers)
+			if t == nil {
+				return nil, fmt.Errorf("%w: %q", errPeerConnTranscieverMidNil, midValue)
+			}
+			if t.Sender() != nil {
+				t.Sender().setNegotiated()
+			}
+			mediaTransceivers := []*RTPTransceiver{t}
+			mediaSections = append(mediaSections, mediaSection{id: midValue, transceivers: mediaTransceivers, ridMap: getRids(media)})
+		}
+	}
+
+	// If we are offering also include unmatched local transceivers
+	if includeUnmatched {
+		if !detectedPlanB {
+			for _, t := range localTransceivers {
+				if t.Sender() != nil {
+					t.Sender().setNegotiated()
+				}
+				mediaSections = append(mediaSections, mediaSection{id: t.Mid(), transceivers: []*RTPTransceiver{t}})
+			}
+		}
+
+		if pc.sctpTransport.dataChannelsRequested != 0 && !alreadyHaveApplicationMediaSection {
+			if detectedPlanB {
+				mediaSections = append(mediaSections, mediaSection{id: "data", data: true})
+			} else {
+				mediaSections = append(mediaSections, mediaSection{id: strconv.Itoa(len(mediaSections)), data: true})
+			}
+		}
+	}
+
+	if pc.configuration.SDPSemantics == SDPSemanticsUnifiedPlanWithFallback && detectedPlanB {
+		pc.log.Info("Plan-B Offer detected; responding with Plan-B Answer")
+	}
+
+	dtlsFingerprints, err := pc.configuration.Certificates[0].GetFingerprints()
+	if err != nil {
+		return nil, err
+	}
+
+	return populateSDP(d, detectedPlanB, dtlsFingerprints, pc.api.settingEngine.sdpMediaLevelFingerprints, pc.api.settingEngine.candidates.ICELite, pc.api.mediaEngine, connectionRole, candidates, iceParams, mediaSections, pc.ICEGatheringState())
+}
+
+func (pc *PeerConnection) setGatherCompleteHandler(handler func()) {
+	pc.iceGatherer.onGatheringCompleteHandler.Store(handler)
+}
+
+// SCTP returns the SCTPTransport for this PeerConnection
+//
+// The SCTP transport over which SCTP data is sent and received. If SCTP has not been negotiated, the value is nil.
+// https://www.w3.org/TR/webrtc/#attributes-15
+func (pc *PeerConnection) SCTP() *SCTPTransport {
+	return pc.sctpTransport
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/peerconnection_js.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/peerconnection_js.go
new file mode 100644
index 000000000..c29319407
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/peerconnection_js.go
@@ -0,0 +1,676 @@
+// +build js,wasm
+
+// Package webrtc implements the WebRTC 1.0 as defined in W3C WebRTC specification document.
+package webrtc
+
+import (
+	"syscall/js"
+
+	"github.com/pion/ice/v2"
+	"github.com/pion/webrtc/v3/pkg/rtcerr"
+)
+
+// PeerConnection represents a WebRTC connection that establishes a
+// peer-to-peer communications with another PeerConnection instance in a
+// browser, or to another endpoint implementing the required protocols.
+type PeerConnection struct {
+	// Pointer to the underlying JavaScript RTCPeerConnection object.
+	underlying js.Value
+
+	// Keep track of handlers/callbacks so we can call Release as required by the
+	// syscall/js API. Initially nil.
+	onSignalingStateChangeHandler     *js.Func
+	onDataChannelHandler              *js.Func
+	onNegotiationNeededHandler        *js.Func
+	onConnectionStateChangeHandler    *js.Func
+	onICEConnectionStateChangeHandler *js.Func
+	onICECandidateHandler             *js.Func
+	onICEGatheringStateChangeHandler  *js.Func
+
+	// Used by GatheringCompletePromise
+	onGatherCompleteHandler func()
+
+	// A reference to the associated API state used by this connection
+	api *API
+}
+
+// NewPeerConnection creates a peerconnection.
+func NewPeerConnection(configuration Configuration) (*PeerConnection, error) {
+	api := NewAPI()
+	return api.NewPeerConnection(configuration)
+}
+
+// NewPeerConnection creates a new PeerConnection with the provided configuration against the received API object
+func (api *API) NewPeerConnection(configuration Configuration) (_ *PeerConnection, err error) {
+	defer func() {
+		if e := recover(); e != nil {
+			err = recoveryToError(e)
+		}
+	}()
+	configMap := configurationToValue(configuration)
+	underlying := js.Global().Get("window").Get("RTCPeerConnection").New(configMap)
+	return &PeerConnection{
+		underlying: underlying,
+		api:        api,
+	}, nil
+}
+
+func (pc *PeerConnection) JSValue() js.Value {
+	return pc.underlying
+}
+
+// OnSignalingStateChange sets an event handler which is invoked when the
+// peer connection's signaling state changes
+func (pc *PeerConnection) OnSignalingStateChange(f func(SignalingState)) {
+	if pc.onSignalingStateChangeHandler != nil {
+		oldHandler := pc.onSignalingStateChangeHandler
+		defer oldHandler.Release()
+	}
+	onSignalingStateChangeHandler := js.FuncOf(func(this js.Value, args []js.Value) interface{} {
+		state := newSignalingState(args[0].String())
+		go f(state)
+		return js.Undefined()
+	})
+	pc.onSignalingStateChangeHandler = &onSignalingStateChangeHandler
+	pc.underlying.Set("onsignalingstatechange", onSignalingStateChangeHandler)
+}
+
+// OnDataChannel sets an event handler which is invoked when a data
+// channel message arrives from a remote peer.
+func (pc *PeerConnection) OnDataChannel(f func(*DataChannel)) {
+	if pc.onDataChannelHandler != nil {
+		oldHandler := pc.onDataChannelHandler
+		defer oldHandler.Release()
+	}
+	onDataChannelHandler := js.FuncOf(func(this js.Value, args []js.Value) interface{} {
+		// pion/webrtc/projects/15
+		// This reference to the underlying DataChannel doesn't know
+		// about any other references to the same DataChannel. This might result in
+		// memory leaks where we don't clean up handler functions. Could possibly fix
+		// by keeping a mutex-protected list of all DataChannel references as a
+		// property of this PeerConnection, but at the cost of additional overhead.
+		dataChannel := &DataChannel{
+			underlying: args[0].Get("channel"),
+			api:        pc.api,
+		}
+		go f(dataChannel)
+		return js.Undefined()
+	})
+	pc.onDataChannelHandler = &onDataChannelHandler
+	pc.underlying.Set("ondatachannel", onDataChannelHandler)
+}
+
+// OnNegotiationNeeded sets an event handler which is invoked when
+// a change has occurred which requires session negotiation
+func (pc *PeerConnection) OnNegotiationNeeded(f func()) {
+	if pc.onNegotiationNeededHandler != nil {
+		oldHandler := pc.onNegotiationNeededHandler
+		defer oldHandler.Release()
+	}
+	onNegotiationNeededHandler := js.FuncOf(func(this js.Value, args []js.Value) interface{} {
+		go f()
+		return js.Undefined()
+	})
+	pc.onNegotiationNeededHandler = &onNegotiationNeededHandler
+	pc.underlying.Set("onnegotiationneeded", onNegotiationNeededHandler)
+}
+
+// OnICEConnectionStateChange sets an event handler which is called
+// when an ICE connection state is changed.
+func (pc *PeerConnection) OnICEConnectionStateChange(f func(ICEConnectionState)) {
+	if pc.onICEConnectionStateChangeHandler != nil {
+		oldHandler := pc.onICEConnectionStateChangeHandler
+		defer oldHandler.Release()
+	}
+	onICEConnectionStateChangeHandler := js.FuncOf(func(this js.Value, args []js.Value) interface{} {
+		connectionState := NewICEConnectionState(pc.underlying.Get("iceConnectionState").String())
+		go f(connectionState)
+		return js.Undefined()
+	})
+	pc.onICEConnectionStateChangeHandler = &onICEConnectionStateChangeHandler
+	pc.underlying.Set("oniceconnectionstatechange", onICEConnectionStateChangeHandler)
+}
+
+// OnConnectionStateChange sets an event handler which is called
+// when an PeerConnectionState is changed.
+func (pc *PeerConnection) OnConnectionStateChange(f func(PeerConnectionState)) {
+	if pc.onConnectionStateChangeHandler != nil {
+		oldHandler := pc.onConnectionStateChangeHandler
+		defer oldHandler.Release()
+	}
+	onConnectionStateChangeHandler := js.FuncOf(func(this js.Value, args []js.Value) interface{} {
+		connectionState := newPeerConnectionState(pc.underlying.Get("connectionState").String())
+		go f(connectionState)
+		return js.Undefined()
+	})
+	pc.onConnectionStateChangeHandler = &onConnectionStateChangeHandler
+	pc.underlying.Set("onconnectionstatechange", onConnectionStateChangeHandler)
+}
+
+func (pc *PeerConnection) checkConfiguration(configuration Configuration) error {
+	// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-setconfiguration (step #2)
+	if pc.ConnectionState() == PeerConnectionStateClosed {
+		return &rtcerr.InvalidStateError{Err: ErrConnectionClosed}
+	}
+
+	existingConfig := pc.GetConfiguration()
+	// https://www.w3.org/TR/webrtc/#set-the-configuration (step #3)
+	if configuration.PeerIdentity != "" {
+		if configuration.PeerIdentity != existingConfig.PeerIdentity {
+			return &rtcerr.InvalidModificationError{Err: ErrModifyingPeerIdentity}
+		}
+	}
+
+	// https://github.com/pion/webrtc/issues/513
+	// https://www.w3.org/TR/webrtc/#set-the-configuration (step #4)
+	// if len(configuration.Certificates) > 0 {
+	// 	if len(configuration.Certificates) != len(existingConfiguration.Certificates) {
+	// 		return &rtcerr.InvalidModificationError{Err: ErrModifyingCertificates}
+	// 	}
+
+	// 	for i, certificate := range configuration.Certificates {
+	// 		if !pc.configuration.Certificates[i].Equals(certificate) {
+	// 			return &rtcerr.InvalidModificationError{Err: ErrModifyingCertificates}
+	// 		}
+	// 	}
+	// 	pc.configuration.Certificates = configuration.Certificates
+	// }
+
+	// https://www.w3.org/TR/webrtc/#set-the-configuration (step #5)
+	if configuration.BundlePolicy != BundlePolicy(Unknown) {
+		if configuration.BundlePolicy != existingConfig.BundlePolicy {
+			return &rtcerr.InvalidModificationError{Err: ErrModifyingBundlePolicy}
+		}
+	}
+
+	// https://www.w3.org/TR/webrtc/#set-the-configuration (step #6)
+	if configuration.RTCPMuxPolicy != RTCPMuxPolicy(Unknown) {
+		if configuration.RTCPMuxPolicy != existingConfig.RTCPMuxPolicy {
+			return &rtcerr.InvalidModificationError{Err: ErrModifyingRTCPMuxPolicy}
+		}
+	}
+
+	// https://www.w3.org/TR/webrtc/#set-the-configuration (step #7)
+	if configuration.ICECandidatePoolSize != 0 {
+		if configuration.ICECandidatePoolSize != existingConfig.ICECandidatePoolSize &&
+			pc.LocalDescription() != nil {
+			return &rtcerr.InvalidModificationError{Err: ErrModifyingICECandidatePoolSize}
+		}
+	}
+
+	// https://www.w3.org/TR/webrtc/#set-the-configuration (step #11)
+	if len(configuration.ICEServers) > 0 {
+		// https://www.w3.org/TR/webrtc/#set-the-configuration (step #11.3)
+		for _, server := range configuration.ICEServers {
+			if _, err := server.validate(); err != nil {
+				return err
+			}
+		}
+	}
+	return nil
+}
+
+// SetConfiguration updates the configuration of this PeerConnection object.
+func (pc *PeerConnection) SetConfiguration(configuration Configuration) (err error) {
+	defer func() {
+		if e := recover(); e != nil {
+			err = recoveryToError(e)
+		}
+	}()
+	if err := pc.checkConfiguration(configuration); err != nil {
+		return err
+	}
+	configMap := configurationToValue(configuration)
+	pc.underlying.Call("setConfiguration", configMap)
+	return nil
+}
+
+// GetConfiguration returns a Configuration object representing the current
+// configuration of this PeerConnection object. The returned object is a
+// copy and direct mutation on it will not take affect until SetConfiguration
+// has been called with Configuration passed as its only argument.
+// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-getconfiguration
+func (pc *PeerConnection) GetConfiguration() Configuration {
+	return valueToConfiguration(pc.underlying.Call("getConfiguration"))
+}
+
+// CreateOffer starts the PeerConnection and generates the localDescription
+func (pc *PeerConnection) CreateOffer(options *OfferOptions) (_ SessionDescription, err error) {
+	defer func() {
+		if e := recover(); e != nil {
+			err = recoveryToError(e)
+		}
+	}()
+	promise := pc.underlying.Call("createOffer", offerOptionsToValue(options))
+	desc, err := awaitPromise(promise)
+	if err != nil {
+		return SessionDescription{}, err
+	}
+	return *valueToSessionDescription(desc), nil
+}
+
+// CreateAnswer starts the PeerConnection and generates the localDescription
+func (pc *PeerConnection) CreateAnswer(options *AnswerOptions) (_ SessionDescription, err error) {
+	defer func() {
+		if e := recover(); e != nil {
+			err = recoveryToError(e)
+		}
+	}()
+	promise := pc.underlying.Call("createAnswer", answerOptionsToValue(options))
+	desc, err := awaitPromise(promise)
+	if err != nil {
+		return SessionDescription{}, err
+	}
+	return *valueToSessionDescription(desc), nil
+}
+
+// SetLocalDescription sets the SessionDescription of the local peer
+func (pc *PeerConnection) SetLocalDescription(desc SessionDescription) (err error) {
+	defer func() {
+		if e := recover(); e != nil {
+			err = recoveryToError(e)
+		}
+	}()
+	promise := pc.underlying.Call("setLocalDescription", sessionDescriptionToValue(&desc))
+	_, err = awaitPromise(promise)
+	return err
+}
+
+// LocalDescription returns PendingLocalDescription if it is not null and
+// otherwise it returns CurrentLocalDescription. This property is used to
+// determine if setLocalDescription has already been called.
+// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-localdescription
+func (pc *PeerConnection) LocalDescription() *SessionDescription {
+	return valueToSessionDescription(pc.underlying.Get("localDescription"))
+}
+
+// SetRemoteDescription sets the SessionDescription of the remote peer
+func (pc *PeerConnection) SetRemoteDescription(desc SessionDescription) (err error) {
+	defer func() {
+		if e := recover(); e != nil {
+			err = recoveryToError(e)
+		}
+	}()
+	promise := pc.underlying.Call("setRemoteDescription", sessionDescriptionToValue(&desc))
+	_, err = awaitPromise(promise)
+	return err
+}
+
+// RemoteDescription returns PendingRemoteDescription if it is not null and
+// otherwise it returns CurrentRemoteDescription. This property is used to
+// determine if setRemoteDescription has already been called.
+// https://www.w3.org/TR/webrtc/#dom-rtcpeerconnection-remotedescription
+func (pc *PeerConnection) RemoteDescription() *SessionDescription {
+	return valueToSessionDescription(pc.underlying.Get("remoteDescription"))
+}
+
+// AddICECandidate accepts an ICE candidate string and adds it
+// to the existing set of candidates
+func (pc *PeerConnection) AddICECandidate(candidate ICECandidateInit) (err error) {
+	defer func() {
+		if e := recover(); e != nil {
+			err = recoveryToError(e)
+		}
+	}()
+	promise := pc.underlying.Call("addIceCandidate", iceCandidateInitToValue(candidate))
+	_, err = awaitPromise(promise)
+	return err
+}
+
+// ICEConnectionState returns the ICE connection state of the
+// PeerConnection instance.
+func (pc *PeerConnection) ICEConnectionState() ICEConnectionState {
+	return NewICEConnectionState(pc.underlying.Get("iceConnectionState").String())
+}
+
+// OnICECandidate sets an event handler which is invoked when a new ICE
+// candidate is found.
+func (pc *PeerConnection) OnICECandidate(f func(candidate *ICECandidate)) {
+	if pc.onICECandidateHandler != nil {
+		oldHandler := pc.onICECandidateHandler
+		defer oldHandler.Release()
+	}
+	onICECandidateHandler := js.FuncOf(func(this js.Value, args []js.Value) interface{} {
+		candidate := valueToICECandidate(args[0].Get("candidate"))
+		if candidate == nil && pc.onGatherCompleteHandler != nil {
+			go pc.onGatherCompleteHandler()
+		}
+
+		go f(candidate)
+		return js.Undefined()
+	})
+	pc.onICECandidateHandler = &onICECandidateHandler
+	pc.underlying.Set("onicecandidate", onICECandidateHandler)
+}
+
+// OnICEGatheringStateChange sets an event handler which is invoked when the
+// ICE candidate gathering state has changed.
+func (pc *PeerConnection) OnICEGatheringStateChange(f func()) {
+	if pc.onICEGatheringStateChangeHandler != nil {
+		oldHandler := pc.onICEGatheringStateChangeHandler
+		defer oldHandler.Release()
+	}
+	onICEGatheringStateChangeHandler := js.FuncOf(func(this js.Value, args []js.Value) interface{} {
+		go f()
+		return js.Undefined()
+	})
+	pc.onICEGatheringStateChangeHandler = &onICEGatheringStateChangeHandler
+	pc.underlying.Set("onicegatheringstatechange", onICEGatheringStateChangeHandler)
+}
+
+// CreateDataChannel creates a new DataChannel object with the given label
+// and optional DataChannelInit used to configure properties of the
+// underlying channel such as data reliability.
+func (pc *PeerConnection) CreateDataChannel(label string, options *DataChannelInit) (_ *DataChannel, err error) {
+	defer func() {
+		if e := recover(); e != nil {
+			err = recoveryToError(e)
+		}
+	}()
+	channel := pc.underlying.Call("createDataChannel", label, dataChannelInitToValue(options))
+	return &DataChannel{
+		underlying: channel,
+		api:        pc.api,
+	}, nil
+}
+
+// SetIdentityProvider is used to configure an identity provider to generate identity assertions
+func (pc *PeerConnection) SetIdentityProvider(provider string) (err error) {
+	defer func() {
+		if e := recover(); e != nil {
+			err = recoveryToError(e)
+		}
+	}()
+	pc.underlying.Call("setIdentityProvider", provider)
+	return nil
+}
+
+// Close ends the PeerConnection
+func (pc *PeerConnection) Close() (err error) {
+	defer func() {
+		if e := recover(); e != nil {
+			err = recoveryToError(e)
+		}
+	}()
+
+	pc.underlying.Call("close")
+
+	// Release any handlers as required by the syscall/js API.
+	if pc.onSignalingStateChangeHandler != nil {
+		pc.onSignalingStateChangeHandler.Release()
+	}
+	if pc.onDataChannelHandler != nil {
+		pc.onDataChannelHandler.Release()
+	}
+	if pc.onNegotiationNeededHandler != nil {
+		pc.onNegotiationNeededHandler.Release()
+	}
+	if pc.onConnectionStateChangeHandler != nil {
+		pc.onConnectionStateChangeHandler.Release()
+	}
+	if pc.onICEConnectionStateChangeHandler != nil {
+		pc.onICEConnectionStateChangeHandler.Release()
+	}
+	if pc.onICECandidateHandler != nil {
+		pc.onICECandidateHandler.Release()
+	}
+	if pc.onICEGatheringStateChangeHandler != nil {
+		pc.onICEGatheringStateChangeHandler.Release()
+	}
+
+	return nil
+}
+
+// CurrentLocalDescription represents the local description that was
+// successfully negotiated the last time the PeerConnection transitioned
+// into the stable state plus any local candidates that have been generated
+// by the ICEAgent since the offer or answer was created.
+func (pc *PeerConnection) CurrentLocalDescription() *SessionDescription {
+	desc := pc.underlying.Get("currentLocalDescription")
+	return valueToSessionDescription(desc)
+}
+
+// PendingLocalDescription represents a local description that is in the
+// process of being negotiated plus any local candidates that have been
+// generated by the ICEAgent since the offer or answer was created. If the
+// PeerConnection is in the stable state, the value is null.
+func (pc *PeerConnection) PendingLocalDescription() *SessionDescription {
+	desc := pc.underlying.Get("pendingLocalDescription")
+	return valueToSessionDescription(desc)
+}
+
+// CurrentRemoteDescription represents the last remote description that was
+// successfully negotiated the last time the PeerConnection transitioned
+// into the stable state plus any remote candidates that have been supplied
+// via AddICECandidate() since the offer or answer was created.
+func (pc *PeerConnection) CurrentRemoteDescription() *SessionDescription {
+	desc := pc.underlying.Get("currentRemoteDescription")
+	return valueToSessionDescription(desc)
+}
+
+// PendingRemoteDescription represents a remote description that is in the
+// process of being negotiated, complete with any remote candidates that
+// have been supplied via AddICECandidate() since the offer or answer was
+// created. If the PeerConnection is in the stable state, the value is
+// null.
+func (pc *PeerConnection) PendingRemoteDescription() *SessionDescription {
+	desc := pc.underlying.Get("pendingRemoteDescription")
+	return valueToSessionDescription(desc)
+}
+
+// SignalingState returns the signaling state of the PeerConnection instance.
+func (pc *PeerConnection) SignalingState() SignalingState {
+	rawState := pc.underlying.Get("signalingState").String()
+	return newSignalingState(rawState)
+}
+
+// ICEGatheringState attribute the ICE gathering state of the PeerConnection
+// instance.
+func (pc *PeerConnection) ICEGatheringState() ICEGatheringState {
+	rawState := pc.underlying.Get("iceGatheringState").String()
+	return NewICEGatheringState(rawState)
+}
+
+// ConnectionState attribute the connection state of the PeerConnection
+// instance.
+func (pc *PeerConnection) ConnectionState() PeerConnectionState {
+	rawState := pc.underlying.Get("connectionState").String()
+	return newPeerConnectionState(rawState)
+}
+
+func (pc *PeerConnection) setGatherCompleteHandler(handler func()) {
+	pc.onGatherCompleteHandler = handler
+
+	// If no onIceCandidate handler has been set provide an empty one
+	// otherwise our onGatherCompleteHandler will not be executed
+	if pc.onICECandidateHandler == nil {
+		pc.OnICECandidate(func(i *ICECandidate) {})
+	}
+}
+
+// Converts a Configuration to js.Value so it can be passed
+// through to the JavaScript WebRTC API. Any zero values are converted to
+// js.Undefined(), which will result in the default value being used.
+func configurationToValue(configuration Configuration) js.Value {
+	return js.ValueOf(map[string]interface{}{
+		"iceServers":           iceServersToValue(configuration.ICEServers),
+		"iceTransportPolicy":   stringEnumToValueOrUndefined(configuration.ICETransportPolicy.String()),
+		"bundlePolicy":         stringEnumToValueOrUndefined(configuration.BundlePolicy.String()),
+		"rtcpMuxPolicy":        stringEnumToValueOrUndefined(configuration.RTCPMuxPolicy.String()),
+		"peerIdentity":         stringToValueOrUndefined(configuration.PeerIdentity),
+		"iceCandidatePoolSize": uint8ToValueOrUndefined(configuration.ICECandidatePoolSize),
+
+		// Note: Certificates are not currently supported.
+		// "certificates": configuration.Certificates,
+	})
+}
+
+func iceServersToValue(iceServers []ICEServer) js.Value {
+	if len(iceServers) == 0 {
+		return js.Undefined()
+	}
+	maps := make([]interface{}, len(iceServers))
+	for i, server := range iceServers {
+		maps[i] = iceServerToValue(server)
+	}
+	return js.ValueOf(maps)
+}
+
+func iceServerToValue(server ICEServer) js.Value {
+	return js.ValueOf(map[string]interface{}{
+		"urls":     stringsToValue(server.URLs), // required
+		"username": stringToValueOrUndefined(server.Username),
+		// Note: credential and credentialType are not currently supported.
+		// "credential":     interfaceToValueOrUndefined(server.Credential),
+		// "credentialType": stringEnumToValueOrUndefined(server.CredentialType.String()),
+	})
+}
+
+func valueToConfiguration(configValue js.Value) Configuration {
+	if jsValueIsNull(configValue) || jsValueIsUndefined(configValue) {
+		return Configuration{}
+	}
+	return Configuration{
+		ICEServers:           valueToICEServers(configValue.Get("iceServers")),
+		ICETransportPolicy:   NewICETransportPolicy(valueToStringOrZero(configValue.Get("iceTransportPolicy"))),
+		BundlePolicy:         newBundlePolicy(valueToStringOrZero(configValue.Get("bundlePolicy"))),
+		RTCPMuxPolicy:        newRTCPMuxPolicy(valueToStringOrZero(configValue.Get("rtcpMuxPolicy"))),
+		PeerIdentity:         valueToStringOrZero(configValue.Get("peerIdentity")),
+		ICECandidatePoolSize: valueToUint8OrZero(configValue.Get("iceCandidatePoolSize")),
+
+		// Note: Certificates are not supported.
+		// Certificates []Certificate
+	}
+}
+
+func valueToICEServers(iceServersValue js.Value) []ICEServer {
+	if jsValueIsNull(iceServersValue) || jsValueIsUndefined(iceServersValue) {
+		return nil
+	}
+	iceServers := make([]ICEServer, iceServersValue.Length())
+	for i := 0; i < iceServersValue.Length(); i++ {
+		iceServers[i] = valueToICEServer(iceServersValue.Index(i))
+	}
+	return iceServers
+}
+
+func valueToICEServer(iceServerValue js.Value) ICEServer {
+	return ICEServer{
+		URLs:     valueToStrings(iceServerValue.Get("urls")), // required
+		Username: valueToStringOrZero(iceServerValue.Get("username")),
+		// Note: Credential and CredentialType are not currently supported.
+		// Credential: iceServerValue.Get("credential"),
+		// CredentialType: newICECredentialType(valueToStringOrZero(iceServerValue.Get("credentialType"))),
+	}
+}
+
+func valueToICECandidate(val js.Value) *ICECandidate {
+	if jsValueIsNull(val) || jsValueIsUndefined(val) {
+		return nil
+	}
+	if jsValueIsUndefined(val.Get("protocol")) && !jsValueIsUndefined(val.Get("candidate")) {
+		// Missing some fields, assume it's Firefox and parse SDP candidate.
+		c, err := ice.UnmarshalCandidate(val.Get("candidate").String())
+		if err != nil {
+			return nil
+		}
+
+		iceCandidate, err := newICECandidateFromICE(c)
+		if err != nil {
+			return nil
+		}
+
+		return &iceCandidate
+	}
+	protocol, _ := NewICEProtocol(val.Get("protocol").String())
+	candidateType, _ := NewICECandidateType(val.Get("type").String())
+	return &ICECandidate{
+		Foundation:     val.Get("foundation").String(),
+		Priority:       valueToUint32OrZero(val.Get("priority")),
+		Address:        val.Get("address").String(),
+		Protocol:       protocol,
+		Port:           valueToUint16OrZero(val.Get("port")),
+		Typ:            candidateType,
+		Component:      stringToComponentIDOrZero(val.Get("component").String()),
+		RelatedAddress: val.Get("relatedAddress").String(),
+		RelatedPort:    valueToUint16OrZero(val.Get("relatedPort")),
+	}
+}
+
+func stringToComponentIDOrZero(val string) uint16 {
+	// See: https://developer.mozilla.org/en-US/docs/Web/API/RTCIceComponent
+	switch val {
+	case "rtp":
+		return 1
+	case "rtcp":
+		return 2
+	}
+	return 0
+}
+
+func sessionDescriptionToValue(desc *SessionDescription) js.Value {
+	if desc == nil {
+		return js.Undefined()
+	}
+	return js.ValueOf(map[string]interface{}{
+		"type": desc.Type.String(),
+		"sdp":  desc.SDP,
+	})
+}
+
+func valueToSessionDescription(descValue js.Value) *SessionDescription {
+	if jsValueIsNull(descValue) || jsValueIsUndefined(descValue) {
+		return nil
+	}
+	return &SessionDescription{
+		Type: NewSDPType(descValue.Get("type").String()),
+		SDP:  descValue.Get("sdp").String(),
+	}
+}
+
+func offerOptionsToValue(offerOptions *OfferOptions) js.Value {
+	if offerOptions == nil {
+		return js.Undefined()
+	}
+	return js.ValueOf(map[string]interface{}{
+		"iceRestart":             offerOptions.ICERestart,
+		"voiceActivityDetection": offerOptions.VoiceActivityDetection,
+	})
+}
+
+func answerOptionsToValue(answerOptions *AnswerOptions) js.Value {
+	if answerOptions == nil {
+		return js.Undefined()
+	}
+	return js.ValueOf(map[string]interface{}{
+		"voiceActivityDetection": answerOptions.VoiceActivityDetection,
+	})
+}
+
+func iceCandidateInitToValue(candidate ICECandidateInit) js.Value {
+	return js.ValueOf(map[string]interface{}{
+		"candidate":        candidate.Candidate,
+		"sdpMid":           stringPointerToValue(candidate.SDPMid),
+		"sdpMLineIndex":    uint16PointerToValue(candidate.SDPMLineIndex),
+		"usernameFragment": stringPointerToValue(candidate.UsernameFragment),
+	})
+}
+
+func dataChannelInitToValue(options *DataChannelInit) js.Value {
+	if options == nil {
+		return js.Undefined()
+	}
+
+	maxPacketLifeTime := uint16PointerToValue(options.MaxPacketLifeTime)
+	return js.ValueOf(map[string]interface{}{
+		"ordered":           boolPointerToValue(options.Ordered),
+		"maxPacketLifeTime": maxPacketLifeTime,
+		// See https://bugs.chromium.org/p/chromium/issues/detail?id=696681
+		// Chrome calls this "maxRetransmitTime"
+		"maxRetransmitTime": maxPacketLifeTime,
+		"maxRetransmits":    uint16PointerToValue(options.MaxRetransmits),
+		"protocol":          stringPointerToValue(options.Protocol),
+		"negotiated":        boolPointerToValue(options.Negotiated),
+		"id":                uint16PointerToValue(options.ID),
+	})
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/peerconnectionstate.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/peerconnectionstate.go
new file mode 100644
index 000000000..66ac20eef
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/peerconnectionstate.go
@@ -0,0 +1,94 @@
+package webrtc
+
+// PeerConnectionState indicates the state of the PeerConnection.
+type PeerConnectionState int
+
+const (
+	// PeerConnectionStateNew indicates that any of the ICETransports or
+	// DTLSTransports are in the "new" state and none of the transports are
+	// in the "connecting", "checking", "failed" or "disconnected" state, or
+	// all transports are in the "closed" state, or there are no transports.
+	PeerConnectionStateNew PeerConnectionState = iota + 1
+
+	// PeerConnectionStateConnecting indicates that any of the
+	// ICETransports or DTLSTransports are in the "connecting" or
+	// "checking" state and none of them is in the "failed" state.
+	PeerConnectionStateConnecting
+
+	// PeerConnectionStateConnected indicates that all ICETransports and
+	// DTLSTransports are in the "connected", "completed" or "closed" state
+	// and at least one of them is in the "connected" or "completed" state.
+	PeerConnectionStateConnected
+
+	// PeerConnectionStateDisconnected indicates that any of the
+	// ICETransports or DTLSTransports are in the "disconnected" state
+	// and none of them are in the "failed" or "connecting" or "checking" state.
+	PeerConnectionStateDisconnected
+
+	// PeerConnectionStateFailed indicates that any of the ICETransports
+	// or DTLSTransports are in a "failed" state.
+	PeerConnectionStateFailed
+
+	// PeerConnectionStateClosed indicates the peer connection is closed
+	// and the isClosed member variable of PeerConnection is true.
+	PeerConnectionStateClosed
+)
+
+// This is done this way because of a linter.
+const (
+	peerConnectionStateNewStr          = "new"
+	peerConnectionStateConnectingStr   = "connecting"
+	peerConnectionStateConnectedStr    = "connected"
+	peerConnectionStateDisconnectedStr = "disconnected"
+	peerConnectionStateFailedStr       = "failed"
+	peerConnectionStateClosedStr       = "closed"
+)
+
+func newPeerConnectionState(raw string) PeerConnectionState {
+	switch raw {
+	case peerConnectionStateNewStr:
+		return PeerConnectionStateNew
+	case peerConnectionStateConnectingStr:
+		return PeerConnectionStateConnecting
+	case peerConnectionStateConnectedStr:
+		return PeerConnectionStateConnected
+	case peerConnectionStateDisconnectedStr:
+		return PeerConnectionStateDisconnected
+	case peerConnectionStateFailedStr:
+		return PeerConnectionStateFailed
+	case peerConnectionStateClosedStr:
+		return PeerConnectionStateClosed
+	default:
+		return PeerConnectionState(Unknown)
+	}
+}
+
+func (t PeerConnectionState) String() string {
+	switch t {
+	case PeerConnectionStateNew:
+		return peerConnectionStateNewStr
+	case PeerConnectionStateConnecting:
+		return peerConnectionStateConnectingStr
+	case PeerConnectionStateConnected:
+		return peerConnectionStateConnectedStr
+	case PeerConnectionStateDisconnected:
+		return peerConnectionStateDisconnectedStr
+	case PeerConnectionStateFailed:
+		return peerConnectionStateFailedStr
+	case PeerConnectionStateClosed:
+		return peerConnectionStateClosedStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
+
+type negotiationNeededState int
+
+const (
+	// NegotiationNeededStateEmpty not running and queue is empty
+	negotiationNeededStateEmpty = iota
+	// NegotiationNeededStateEmpty running and queue is empty
+	negotiationNeededStateRun
+	// NegotiationNeededStateEmpty running and queue
+	negotiationNeededStateQueue
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/h264reader/h264reader.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/h264reader/h264reader.go
new file mode 100644
index 000000000..79fbe8452
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/h264reader/h264reader.go
@@ -0,0 +1,191 @@
+// Package h264reader implements a H264 Annex-B Reader
+package h264reader
+
+import (
+	"bytes"
+	"errors"
+	"io"
+)
+
+// H264Reader reads data from stream and constructs h264 nal units
+type H264Reader struct {
+	stream                      io.Reader
+	nalBuffer                   []byte
+	countOfConsecutiveZeroBytes int
+	nalPrefixParsed             bool
+	readBuffer                  []byte
+}
+
+var (
+	errNilReader           = errors.New("stream is nil")
+	errDataIsNotH264Stream = errors.New("data is not a H264 bitstream")
+)
+
+// NewReader creates new H264Reader
+func NewReader(in io.Reader) (*H264Reader, error) {
+	if in == nil {
+		return nil, errNilReader
+	}
+
+	reader := &H264Reader{
+		stream:          in,
+		nalBuffer:       make([]byte, 0),
+		nalPrefixParsed: false,
+		readBuffer:      make([]byte, 0),
+	}
+
+	return reader, nil
+}
+
+// NAL H.264 Network Abstraction Layer
+type NAL struct {
+	PictureOrderCount uint32
+
+	// NAL header
+	ForbiddenZeroBit bool
+	RefIdc           uint8
+	UnitType         NalUnitType
+
+	Data []byte // header byte + rbsp
+}
+
+func (reader *H264Reader) read(numToRead int) (data []byte) {
+	for len(reader.readBuffer) < numToRead {
+		buf := make([]byte, 4096)
+		n, err := reader.stream.Read(buf)
+		if n == 0 || err != nil {
+			break
+		}
+		buf = buf[0:n]
+		reader.readBuffer = append(reader.readBuffer, buf...)
+	}
+	var numShouldRead int
+	if numToRead <= len(reader.readBuffer) {
+		numShouldRead = numToRead
+	} else {
+		numShouldRead = len(reader.readBuffer)
+	}
+	data = reader.readBuffer[0:numShouldRead]
+	reader.readBuffer = reader.readBuffer[numShouldRead:]
+	return data
+}
+
+func (reader *H264Reader) bitStreamStartsWithH264Prefix() (prefixLength int, e error) {
+	nalPrefix3Bytes := []byte{0, 0, 1}
+	nalPrefix4Bytes := []byte{0, 0, 0, 1}
+
+	prefixBuffer := reader.read(4)
+
+	n := len(prefixBuffer)
+
+	if n == 0 {
+		return 0, io.EOF
+	}
+
+	if n < 3 {
+		return 0, errDataIsNotH264Stream
+	}
+
+	nalPrefix3BytesFound := bytes.Equal(nalPrefix3Bytes, prefixBuffer[:3])
+	if n == 3 {
+		if nalPrefix3BytesFound {
+			return 0, io.EOF
+		}
+		return 0, errDataIsNotH264Stream
+	}
+
+	// n == 4
+	if nalPrefix3BytesFound {
+		reader.nalBuffer = append(reader.nalBuffer, prefixBuffer[3])
+		return 3, nil
+	}
+
+	nalPrefix4BytesFound := bytes.Equal(nalPrefix4Bytes, prefixBuffer)
+	if nalPrefix4BytesFound {
+		return 4, nil
+	}
+	return 0, errDataIsNotH264Stream
+}
+
+// NextNAL reads from stream and returns then next NAL,
+// and an error if there is incomplete frame data.
+// Returns all nil values when no more NALs are available.
+func (reader *H264Reader) NextNAL() (*NAL, error) {
+	if !reader.nalPrefixParsed {
+		_, err := reader.bitStreamStartsWithH264Prefix()
+		if err != nil {
+			return nil, err
+		}
+
+		reader.nalPrefixParsed = true
+	}
+
+	for {
+		buffer := reader.read(1)
+		n := len(buffer)
+
+		if n != 1 {
+			break
+		}
+		readByte := buffer[0]
+		nalFound := reader.processByte(readByte)
+		if nalFound {
+			nal := newNal(reader.nalBuffer)
+			nal.parseHeader()
+			if nal.UnitType == NalUnitTypeSEI {
+				reader.nalBuffer = nil
+				continue
+			} else {
+				break
+			}
+		}
+
+		reader.nalBuffer = append(reader.nalBuffer, readByte)
+	}
+
+	if len(reader.nalBuffer) == 0 {
+		return nil, io.EOF
+	}
+
+	nal := newNal(reader.nalBuffer)
+	reader.nalBuffer = nil
+	nal.parseHeader()
+
+	return nal, nil
+}
+
+func (reader *H264Reader) processByte(readByte byte) (nalFound bool) {
+	nalFound = false
+
+	switch readByte {
+	case 0:
+		reader.countOfConsecutiveZeroBytes++
+	case 1:
+		if reader.countOfConsecutiveZeroBytes >= 2 {
+			countOfConsecutiveZeroBytesInPrefix := 2
+			if reader.countOfConsecutiveZeroBytes > 2 {
+				countOfConsecutiveZeroBytesInPrefix = 3
+			}
+			nalUnitLength := len(reader.nalBuffer) - countOfConsecutiveZeroBytesInPrefix
+			reader.nalBuffer = reader.nalBuffer[0:nalUnitLength]
+			nalFound = true
+		} else {
+			reader.countOfConsecutiveZeroBytes = 0
+		}
+	default:
+		reader.countOfConsecutiveZeroBytes = 0
+	}
+
+	return nalFound
+}
+
+func newNal(data []byte) *NAL {
+	return &NAL{PictureOrderCount: 0, ForbiddenZeroBit: false, RefIdc: 0, UnitType: NalUnitTypeUnspecified, Data: data}
+}
+
+func (h *NAL) parseHeader() {
+	firstByte := h.Data[0]
+	h.ForbiddenZeroBit = (((firstByte & 0x80) >> 7) == 1) // 0x80 = 0b10000000
+	h.RefIdc = (firstByte & 0x60) >> 5                    // 0x60 = 0b01100000
+	h.UnitType = NalUnitType((firstByte & 0x1F) >> 0)     // 0x1F = 0b00011111
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/h264reader/nalunittype.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/h264reader/nalunittype.go
new file mode 100644
index 000000000..6c7293f3b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/h264reader/nalunittype.go
@@ -0,0 +1,68 @@
+package h264reader
+
+import "strconv"
+
+// NalUnitType is the type of a NAL
+type NalUnitType uint8
+
+// Enums for NalUnitTypes
+const (
+	NalUnitTypeUnspecified              NalUnitType = 0  // Unspecified
+	NalUnitTypeCodedSliceNonIdr         NalUnitType = 1  // Coded slice of a non-IDR picture
+	NalUnitTypeCodedSliceDataPartitionA NalUnitType = 2  // Coded slice data partition A
+	NalUnitTypeCodedSliceDataPartitionB NalUnitType = 3  // Coded slice data partition B
+	NalUnitTypeCodedSliceDataPartitionC NalUnitType = 4  // Coded slice data partition C
+	NalUnitTypeCodedSliceIdr            NalUnitType = 5  // Coded slice of an IDR picture
+	NalUnitTypeSEI                      NalUnitType = 6  // Supplemental enhancement information (SEI)
+	NalUnitTypeSPS                      NalUnitType = 7  // Sequence parameter set
+	NalUnitTypePPS                      NalUnitType = 8  // Picture parameter set
+	NalUnitTypeAUD                      NalUnitType = 9  // Access unit delimiter
+	NalUnitTypeEndOfSequence            NalUnitType = 10 // End of sequence
+	NalUnitTypeEndOfStream              NalUnitType = 11 // End of stream
+	NalUnitTypeFiller                   NalUnitType = 12 // Filler data
+	NalUnitTypeSpsExt                   NalUnitType = 13 // Sequence parameter set extension
+	NalUnitTypeCodedSliceAux            NalUnitType = 19 // Coded slice of an auxiliary coded picture without partitioning
+	// 14..18                                            // Reserved
+	// 20..23                                            // Reserved
+	// 24..31                                            // Unspecified
+)
+
+func (n *NalUnitType) String() string {
+	var str string
+	switch *n {
+	case NalUnitTypeUnspecified:
+		str = "Unspecified"
+	case NalUnitTypeCodedSliceNonIdr:
+		str = "CodedSliceNonIdr"
+	case NalUnitTypeCodedSliceDataPartitionA:
+		str = "CodedSliceDataPartitionA"
+	case NalUnitTypeCodedSliceDataPartitionB:
+		str = "CodedSliceDataPartitionB"
+	case NalUnitTypeCodedSliceDataPartitionC:
+		str = "CodedSliceDataPartitionC"
+	case NalUnitTypeCodedSliceIdr:
+		str = "CodedSliceIdr"
+	case NalUnitTypeSEI:
+		str = "SEI"
+	case NalUnitTypeSPS:
+		str = "SPS"
+	case NalUnitTypePPS:
+		str = "PPS"
+	case NalUnitTypeAUD:
+		str = "AUD"
+	case NalUnitTypeEndOfSequence:
+		str = "EndOfSequence"
+	case NalUnitTypeEndOfStream:
+		str = "EndOfStream"
+	case NalUnitTypeFiller:
+		str = "Filler"
+	case NalUnitTypeSpsExt:
+		str = "SpsExt"
+	case NalUnitTypeCodedSliceAux:
+		str = "NalUnitTypeCodedSliceAux"
+	default:
+		str = "Unknown"
+	}
+	str = str + "(" + strconv.FormatInt(int64(*n), 10) + ")"
+	return str
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/h264writer/h264writer.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/h264writer/h264writer.go
new file mode 100644
index 000000000..9637441d4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/h264writer/h264writer.go
@@ -0,0 +1,90 @@
+// Package h264writer implements H264 media container writer
+package h264writer
+
+import (
+	"bytes"
+	"encoding/binary"
+	"io"
+	"os"
+
+	"github.com/pion/rtp"
+	"github.com/pion/rtp/codecs"
+)
+
+type (
+	// H264Writer is used to take RTP packets, parse them and
+	// write the data to an io.Writer.
+	// Currently it only supports non-interleaved mode
+	// Therefore, only 1-23, 24 (STAP-A), 28 (FU-A) NAL types are allowed.
+	// https://tools.ietf.org/html/rfc6184#section-5.2
+	H264Writer struct {
+		writer      io.Writer
+		hasKeyFrame bool
+	}
+)
+
+// New builds a new H264 writer
+func New(filename string) (*H264Writer, error) {
+	f, err := os.Create(filename)
+	if err != nil {
+		return nil, err
+	}
+
+	return NewWith(f), nil
+}
+
+// NewWith initializes a new H264 writer with an io.Writer output
+func NewWith(w io.Writer) *H264Writer {
+	return &H264Writer{
+		writer: w,
+	}
+}
+
+// WriteRTP adds a new packet and writes the appropriate headers for it
+func (h *H264Writer) WriteRTP(packet *rtp.Packet) error {
+	if len(packet.Payload) == 0 {
+		return nil
+	}
+
+	if !h.hasKeyFrame {
+		if h.hasKeyFrame = isKeyFrame(packet.Payload); !h.hasKeyFrame {
+			// key frame not defined yet. discarding packet
+			return nil
+		}
+	}
+
+	data, err := (&codecs.H264Packet{}).Unmarshal(packet.Payload)
+	if err != nil {
+		return err
+	}
+
+	_, err = h.writer.Write(data)
+
+	return err
+}
+
+// Close closes the underlying writer
+func (h *H264Writer) Close() error {
+	if h.writer != nil {
+		if closer, ok := h.writer.(io.Closer); ok {
+			return closer.Close()
+		}
+	}
+
+	return nil
+}
+
+func isKeyFrame(data []byte) bool {
+	const typeSTAPA = 24
+
+	var word uint32
+
+	payload := bytes.NewReader(data)
+	err := binary.Read(payload, binary.BigEndian, &word)
+
+	if err != nil || (word&0x1F000000)>>24 != typeSTAPA {
+		return false
+	}
+
+	return word&0x1F == 7
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/ivfwriter/ivfwriter.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/ivfwriter/ivfwriter.go
new file mode 100644
index 000000000..3dcd16dab
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/ivfwriter/ivfwriter.go
@@ -0,0 +1,147 @@
+// Package ivfwriter implements IVF media container writer
+package ivfwriter
+
+import (
+	"encoding/binary"
+	"errors"
+	"io"
+	"os"
+
+	"github.com/pion/rtp"
+	"github.com/pion/rtp/codecs"
+)
+
+var (
+	errFileNotOpened    = errors.New("file not opened")
+	errInvalidNilPacket = errors.New("invalid nil packet")
+)
+
+// IVFWriter is used to take RTP packets and write them to an IVF on disk
+type IVFWriter struct {
+	ioWriter     io.Writer
+	count        uint64
+	seenKeyFrame bool
+	currentFrame []byte
+}
+
+// New builds a new IVF writer
+func New(fileName string) (*IVFWriter, error) {
+	f, err := os.Create(fileName)
+	if err != nil {
+		return nil, err
+	}
+	writer, err := NewWith(f)
+	if err != nil {
+		return nil, err
+	}
+	writer.ioWriter = f
+	return writer, nil
+}
+
+// NewWith initialize a new IVF writer with an io.Writer output
+func NewWith(out io.Writer) (*IVFWriter, error) {
+	if out == nil {
+		return nil, errFileNotOpened
+	}
+
+	writer := &IVFWriter{
+		ioWriter:     out,
+		seenKeyFrame: false,
+	}
+	if err := writer.writeHeader(); err != nil {
+		return nil, err
+	}
+	return writer, nil
+}
+
+func (i *IVFWriter) writeHeader() error {
+	header := make([]byte, 32)
+	copy(header[0:], "DKIF")                        // DKIF
+	binary.LittleEndian.PutUint16(header[4:], 0)    // Version
+	binary.LittleEndian.PutUint16(header[6:], 32)   // Header size
+	copy(header[8:], "VP80")                        // FOURCC
+	binary.LittleEndian.PutUint16(header[12:], 640) // Width in pixels
+	binary.LittleEndian.PutUint16(header[14:], 480) // Height in pixels
+	binary.LittleEndian.PutUint32(header[16:], 30)  // Framerate denominator
+	binary.LittleEndian.PutUint32(header[20:], 1)   // Framerate numerator
+	binary.LittleEndian.PutUint32(header[24:], 900) // Frame count, will be updated on first Close() call
+	binary.LittleEndian.PutUint32(header[28:], 0)   // Unused
+
+	_, err := i.ioWriter.Write(header)
+	return err
+}
+
+// WriteRTP adds a new packet and writes the appropriate headers for it
+func (i *IVFWriter) WriteRTP(packet *rtp.Packet) error {
+	if i.ioWriter == nil {
+		return errFileNotOpened
+	}
+
+	vp8Packet := codecs.VP8Packet{}
+	if _, err := vp8Packet.Unmarshal(packet.Payload); err != nil {
+		return err
+	}
+
+	isKeyFrame := vp8Packet.Payload[0] & 0x01
+	switch {
+	case !i.seenKeyFrame && isKeyFrame == 1:
+		return nil
+	case i.currentFrame == nil && vp8Packet.S != 1:
+		return nil
+	}
+
+	i.seenKeyFrame = true
+	i.currentFrame = append(i.currentFrame, vp8Packet.Payload[0:]...)
+
+	if !packet.Marker {
+		return nil
+	} else if len(i.currentFrame) == 0 {
+		return nil
+	}
+
+	frameHeader := make([]byte, 12)
+	binary.LittleEndian.PutUint32(frameHeader[0:], uint32(len(i.currentFrame))) // Frame length
+	binary.LittleEndian.PutUint64(frameHeader[4:], i.count)                     // PTS
+
+	i.count++
+
+	if _, err := i.ioWriter.Write(frameHeader); err != nil {
+		return err
+	} else if _, err := i.ioWriter.Write(i.currentFrame); err != nil {
+		return err
+	}
+
+	i.currentFrame = nil
+	return nil
+}
+
+// Close stops the recording
+func (i *IVFWriter) Close() error {
+	if i.ioWriter == nil {
+		// Returns no error as it may be convenient to call
+		// Close() multiple times
+		return nil
+	}
+
+	defer func() {
+		i.ioWriter = nil
+	}()
+
+	if ws, ok := i.ioWriter.(io.WriteSeeker); ok {
+		// Update the framecount
+		if _, err := ws.Seek(24, 0); err != nil {
+			return err
+		}
+		buff := make([]byte, 4)
+		binary.LittleEndian.PutUint32(buff, uint32(i.count))
+		if _, err := ws.Write(buff); err != nil {
+			return err
+		}
+	}
+
+	if closer, ok := i.ioWriter.(io.Closer); ok {
+		return closer.Close()
+	}
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/media.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/media.go
new file mode 100644
index 000000000..bcd7e3389
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/media.go
@@ -0,0 +1,25 @@
+// Package media provides media writer and filters
+package media
+
+import (
+	"time"
+
+	"github.com/pion/rtp"
+)
+
+// A Sample contains encoded media and timing information
+type Sample struct {
+	Data      []byte
+	Timestamp time.Time
+	Duration  time.Duration
+}
+
+// Writer defines an interface to handle
+// the creation of media files
+type Writer interface {
+	// Add the content of an RTP packet to the media
+	WriteRTP(packet *rtp.Packet) error
+	// Close the media
+	// Note: Close implementation must be idempotent
+	Close() error
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/oggreader/oggreader.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/oggreader/oggreader.go
new file mode 100644
index 000000000..6a7005de3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/oggreader/oggreader.go
@@ -0,0 +1,215 @@
+// Package oggreader implements the Ogg media container reader
+package oggreader
+
+import (
+	"encoding/binary"
+	"errors"
+	"io"
+)
+
+const (
+	pageHeaderTypeBeginningOfStream = 0x02
+	pageHeaderSignature             = "OggS"
+
+	idPageSignature = "OpusHead"
+
+	pageHeaderLen       = 27
+	idPagePayloadLength = 19
+)
+
+var (
+	errNilStream                 = errors.New("stream is nil")
+	errBadIDPageSignature        = errors.New("bad header signature")
+	errBadIDPageType             = errors.New("wrong header, expected beginning of stream")
+	errBadIDPageLength           = errors.New("payload for id page must be 19 bytes")
+	errBadIDPagePayloadSignature = errors.New("bad payload signature")
+	errShortPageHeader           = errors.New("not enough data for payload header")
+	errChecksumMismatch          = errors.New("expected and actual checksum do not match")
+)
+
+// OggReader is used to read Ogg files and return page payloads
+type OggReader struct {
+	stream               io.ReadSeeker
+	bytesReadSuccesfully int64
+	checksumTable        *[256]uint32
+	doChecksum           bool
+}
+
+// OggHeader is the metadata from the first two pages
+// in the file (ID and Comment)
+//
+// https://tools.ietf.org/html/rfc7845.html#section-3
+type OggHeader struct {
+	ChannelMap uint8
+	Channels   uint8
+	OutputGain uint16
+	PreSkip    uint16
+	SampleRate uint32
+	Version    uint8
+}
+
+// OggPageHeader is the metadata for a Page
+// Pages are the fundamental unit of multiplexing in an Ogg stream
+//
+// https://tools.ietf.org/html/rfc7845.html#section-1
+type OggPageHeader struct {
+	GranulePosition uint64
+
+	sig           [4]byte
+	version       uint8
+	headerType    uint8
+	serial        uint32
+	index         uint32
+	segmentsCount uint8
+}
+
+// NewWith returns a new Ogg reader and Ogg header
+// with an io.ReadSeeker input
+func NewWith(in io.ReadSeeker) (*OggReader, *OggHeader, error) {
+	return newWith(in /* doChecksum */, true)
+}
+
+func newWith(in io.ReadSeeker, doChecksum bool) (*OggReader, *OggHeader, error) {
+	if in == nil {
+		return nil, nil, errNilStream
+	}
+
+	reader := &OggReader{
+		stream:        in,
+		checksumTable: generateChecksumTable(),
+		doChecksum:    doChecksum,
+	}
+
+	header, err := reader.readHeaders()
+	if err != nil {
+		return nil, nil, err
+	}
+
+	return reader, header, nil
+}
+
+func (o *OggReader) readHeaders() (*OggHeader, error) {
+	payload, pageHeader, err := o.ParseNextPage()
+	if err != nil {
+		return nil, err
+	}
+
+	header := &OggHeader{}
+	if string(pageHeader.sig[:]) != pageHeaderSignature {
+		return nil, errBadIDPageSignature
+	}
+
+	if pageHeader.headerType != pageHeaderTypeBeginningOfStream {
+		return nil, errBadIDPageType
+	}
+
+	if len(payload) != idPagePayloadLength {
+		return nil, errBadIDPageLength
+	}
+
+	if s := string(payload[:8]); s != idPageSignature {
+		return nil, errBadIDPagePayloadSignature
+	}
+
+	header.Version = payload[8]
+	header.Channels = payload[9]
+	header.PreSkip = binary.LittleEndian.Uint16(payload[10:12])
+	header.SampleRate = binary.LittleEndian.Uint32(payload[12:16])
+	header.OutputGain = binary.LittleEndian.Uint16(payload[16:18])
+	header.ChannelMap = payload[18]
+
+	return header, nil
+}
+
+// ParseNextPage reads from stream and returns Ogg page payload, header,
+// and an error if there is incomplete page data.
+func (o *OggReader) ParseNextPage() ([]byte, *OggPageHeader, error) {
+	h := make([]byte, pageHeaderLen)
+
+	n, err := io.ReadFull(o.stream, h)
+	if err != nil {
+		return nil, nil, err
+	} else if n < len(h) {
+		return nil, nil, errShortPageHeader
+	}
+
+	pageHeader := &OggPageHeader{
+		sig: [4]byte{h[0], h[1], h[2], h[3]},
+	}
+
+	pageHeader.version = h[4]
+	pageHeader.headerType = h[5]
+	pageHeader.GranulePosition = binary.LittleEndian.Uint64(h[6 : 6+8])
+	pageHeader.serial = binary.LittleEndian.Uint32(h[14 : 14+4])
+	pageHeader.index = binary.LittleEndian.Uint32(h[18 : 18+4])
+	pageHeader.segmentsCount = h[26]
+
+	sizeBuffer := make([]byte, pageHeader.segmentsCount)
+	if _, err = io.ReadFull(o.stream, sizeBuffer); err != nil {
+		return nil, nil, err
+	}
+
+	payloadSize := 0
+	for _, s := range sizeBuffer {
+		payloadSize += int(s)
+	}
+
+	payload := make([]byte, payloadSize)
+	if _, err = io.ReadFull(o.stream, payload); err != nil {
+		return nil, nil, err
+	}
+
+	if o.doChecksum {
+		var checksum uint32
+		updateChecksum := func(v byte) {
+			checksum = (checksum << 8) ^ o.checksumTable[byte(checksum>>24)^v]
+		}
+
+		for index := range h {
+			// Don't include expected checksum in our generation
+			if index > 21 && index < 26 {
+				updateChecksum(0)
+				continue
+			}
+
+			updateChecksum(h[index])
+		}
+		for _, s := range sizeBuffer {
+			updateChecksum(s)
+		}
+		for index := range payload {
+			updateChecksum(payload[index])
+		}
+
+		if binary.LittleEndian.Uint32(h[22:22+4]) != checksum {
+			return nil, nil, errChecksumMismatch
+		}
+	}
+
+	return payload, pageHeader, nil
+}
+
+// ResetReader resets the internal stream of OggReader. This is useful
+// for live streams, where the end of the file might be read without the
+// data being finished.
+func (o *OggReader) ResetReader(reset func(bytesRead int64) io.ReadSeeker) {
+	o.stream = reset(o.bytesReadSuccesfully)
+}
+
+func generateChecksumTable() *[256]uint32 {
+	var table [256]uint32
+	const poly = 0x04c11db7
+
+	for i := range table {
+		r := uint32(i) << 24
+		for j := 0; j < 8; j++ {
+			if (r & 0x80000000) != 0 {
+				r = (r << 1) ^ poly
+			} else {
+				r <<= 1
+			}
+			table[i] = (r & 0xffffffff)
+		}
+	}
+	return &table
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/oggwriter/oggwriter.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/oggwriter/oggwriter.go
new file mode 100644
index 000000000..e20492b7a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/media/oggwriter/oggwriter.go
@@ -0,0 +1,261 @@
+// Package oggwriter implements OGG media container writer
+package oggwriter
+
+import (
+	"encoding/binary"
+	"errors"
+	"io"
+	"os"
+
+	"github.com/pion/randutil"
+	"github.com/pion/rtp"
+	"github.com/pion/rtp/codecs"
+)
+
+const (
+	pageHeaderTypeContinuationOfStream = 0x00
+	pageHeaderTypeBeginningOfStream    = 0x02
+	pageHeaderTypeEndOfStream          = 0x04
+	defaultPreSkip                     = 3840 // 3840 recommended in the RFC
+	idPageSignature                    = "OpusHead"
+	commentPageSignature               = "OpusTags"
+	pageHeaderSignature                = "OggS"
+)
+
+var (
+	errFileNotOpened    = errors.New("file not opened")
+	errInvalidNilPacket = errors.New("invalid nil packet")
+)
+
+// OggWriter is used to take RTP packets and write them to an OGG on disk
+type OggWriter struct {
+	stream                  io.Writer
+	fd                      *os.File
+	sampleRate              uint32
+	channelCount            uint16
+	serial                  uint32
+	pageIndex               uint32
+	checksumTable           *[256]uint32
+	previousGranulePosition uint64
+	previousTimestamp       uint32
+	lastPayloadSize         int
+}
+
+// New builds a new OGG Opus writer
+func New(fileName string, sampleRate uint32, channelCount uint16) (*OggWriter, error) {
+	f, err := os.Create(fileName)
+	if err != nil {
+		return nil, err
+	}
+	writer, err := NewWith(f, sampleRate, channelCount)
+	if err != nil {
+		return nil, f.Close()
+	}
+	writer.fd = f
+	return writer, nil
+}
+
+// NewWith initialize a new OGG Opus writer with an io.Writer output
+func NewWith(out io.Writer, sampleRate uint32, channelCount uint16) (*OggWriter, error) {
+	if out == nil {
+		return nil, errFileNotOpened
+	}
+
+	writer := &OggWriter{
+		stream:        out,
+		sampleRate:    sampleRate,
+		channelCount:  channelCount,
+		serial:        randutil.NewMathRandomGenerator().Uint32(),
+		checksumTable: generateChecksumTable(),
+
+		// Timestamp and Granule MUST start from 1
+		// Only headers can have 0 values
+		previousTimestamp:       1,
+		previousGranulePosition: 1,
+	}
+	if err := writer.writeHeaders(); err != nil {
+		return nil, err
+	}
+
+	return writer, nil
+}
+
+/*
+    ref: https://tools.ietf.org/html/rfc7845.html
+    https://git.xiph.org/?p=opus-tools.git;a=blob;f=src/opus_header.c#l219
+
+       Page 0         Pages 1 ... n        Pages (n+1) ...
+    +------------+ +---+ +---+ ... +---+ +-----------+ +---------+ +--
+    |            | |   | |   |     |   | |           | |         | |
+    |+----------+| |+-----------------+| |+-------------------+ +-----
+    |||ID Header|| ||  Comment Header || ||Audio Data Packet 1| | ...
+    |+----------+| |+-----------------+| |+-------------------+ +-----
+    |            | |   | |   |     |   | |           | |         | |
+    +------------+ +---+ +---+ ... +---+ +-----------+ +---------+ +--
+    ^      ^                           ^
+    |      |                           |
+    |      |                           Mandatory Page Break
+    |      |
+    |      ID header is contained on a single page
+    |
+    'Beginning Of Stream'
+
+   Figure 1: Example Packet Organization for a Logical Ogg Opus Stream
+*/
+
+func (i *OggWriter) writeHeaders() error {
+	// ID Header
+	oggIDHeader := make([]byte, 19)
+
+	copy(oggIDHeader[0:], idPageSignature)                          // Magic Signature 'OpusHead'
+	oggIDHeader[8] = 1                                              // Version
+	oggIDHeader[9] = uint8(i.channelCount)                          // Channel count
+	binary.LittleEndian.PutUint16(oggIDHeader[10:], defaultPreSkip) // pre-skip
+	binary.LittleEndian.PutUint32(oggIDHeader[12:], i.sampleRate)   // original sample rate, any valid sample e.g 48000
+	binary.LittleEndian.PutUint16(oggIDHeader[16:], 0)              // output gain
+	oggIDHeader[18] = 0                                             // channel map 0 = one stream: mono or stereo
+
+	// Reference: https://tools.ietf.org/html/rfc7845.html#page-6
+	// RFC specifies that the ID Header page should have a granule position of 0 and a Header Type set to 2 (StartOfStream)
+	data := i.createPage(oggIDHeader, pageHeaderTypeBeginningOfStream, 0, i.pageIndex)
+	if err := i.writeToStream(data); err != nil {
+		return err
+	}
+	i.pageIndex++
+
+	// Comment Header
+	oggCommentHeader := make([]byte, 21)
+	copy(oggCommentHeader[0:], commentPageSignature)        // Magic Signature 'OpusTags'
+	binary.LittleEndian.PutUint32(oggCommentHeader[8:], 5)  // Vendor Length
+	copy(oggCommentHeader[12:], "pion")                     // Vendor name 'pion'
+	binary.LittleEndian.PutUint32(oggCommentHeader[17:], 0) // User Comment List Length
+
+	// RFC specifies that the page where the CommentHeader completes should have a granule position of 0
+	data = i.createPage(oggCommentHeader, pageHeaderTypeContinuationOfStream, 0, i.pageIndex)
+	if err := i.writeToStream(data); err != nil {
+		return err
+	}
+	i.pageIndex++
+
+	return nil
+}
+
+const (
+	pageHeaderSize = 27
+)
+
+func (i *OggWriter) createPage(payload []uint8, headerType uint8, granulePos uint64, pageIndex uint32) []byte {
+	i.lastPayloadSize = len(payload)
+	page := make([]byte, pageHeaderSize+1+i.lastPayloadSize)
+
+	copy(page[0:], pageHeaderSignature)                 // page headers starts with 'OggS'
+	page[4] = 0                                         // Version
+	page[5] = headerType                                // 1 = continuation, 2 = beginning of stream, 4 = end of stream
+	binary.LittleEndian.PutUint64(page[6:], granulePos) // granule position
+	binary.LittleEndian.PutUint32(page[14:], i.serial)  // Bitstream serial number
+	binary.LittleEndian.PutUint32(page[18:], pageIndex) // Page sequence number
+	page[26] = 1                                        // Number of segments in page, giving always 1 segment
+	page[27] = uint8(i.lastPayloadSize)                 // Segment Table inserting at 27th position since page header length is 27
+	copy(page[28:], payload)                            // inserting at 28th since Segment Table(1) + header length(27)
+
+	var checksum uint32
+	for index := range page {
+		checksum = (checksum << 8) ^ i.checksumTable[byte(checksum>>24)^page[index]]
+	}
+	binary.LittleEndian.PutUint32(page[22:], checksum) // Checksum - generating for page data and inserting at 22th position into 32 bits
+
+	return page
+}
+
+// WriteRTP adds a new packet and writes the appropriate headers for it
+func (i *OggWriter) WriteRTP(packet *rtp.Packet) error {
+	if packet == nil {
+		return errInvalidNilPacket
+	}
+
+	opusPacket := codecs.OpusPacket{}
+	if _, err := opusPacket.Unmarshal(packet.Payload); err != nil {
+		// Only handle Opus packets
+		return err
+	}
+
+	payload := opusPacket.Payload[0:]
+
+	// Should be equivalent to sampleRate * duration
+	if i.previousTimestamp != 1 {
+		increment := packet.Timestamp - i.previousTimestamp
+		i.previousGranulePosition += uint64(increment)
+	}
+	i.previousTimestamp = packet.Timestamp
+
+	data := i.createPage(payload, pageHeaderTypeContinuationOfStream, i.previousGranulePosition, i.pageIndex)
+	i.pageIndex++
+	return i.writeToStream(data)
+}
+
+// Close stops the recording
+func (i *OggWriter) Close() error {
+	defer func() {
+		i.fd = nil
+		i.stream = nil
+	}()
+
+	// Returns no error has it may be convenient to call
+	// Close() multiple times
+	if i.fd == nil {
+		// Close stream if we are operating on a stream
+		if closer, ok := i.stream.(io.Closer); ok {
+			return closer.Close()
+		}
+		return nil
+	}
+
+	// Seek back one page, we need to update the header and generate new CRC
+	pageOffset, err := i.fd.Seek(-1*int64(i.lastPayloadSize+pageHeaderSize+1), 2)
+	if err != nil {
+		return err
+	}
+
+	payload := make([]byte, i.lastPayloadSize)
+	if _, err := i.fd.ReadAt(payload, pageOffset+pageHeaderSize+1); err != nil {
+		return err
+	}
+
+	data := i.createPage(payload, pageHeaderTypeEndOfStream, i.previousGranulePosition, i.pageIndex-1)
+	if err := i.writeToStream(data); err != nil {
+		return err
+	}
+
+	// Update the last page if we are operating on files
+	// to mark it as the EOS
+	return i.fd.Close()
+}
+
+// Wraps writing to the stream and maintains state
+// so we can set values for EOS
+func (i *OggWriter) writeToStream(p []byte) error {
+	if i.stream == nil {
+		return errFileNotOpened
+	}
+
+	_, err := i.stream.Write(p)
+	return err
+}
+
+func generateChecksumTable() *[256]uint32 {
+	var table [256]uint32
+	const poly = 0x04c11db7
+
+	for i := range table {
+		r := uint32(i) << 24
+		for j := 0; j < 8; j++ {
+			if (r & 0x80000000) != 0 {
+				r = (r << 1) ^ poly
+			} else {
+				r <<= 1
+			}
+			table[i] = (r & 0xffffffff)
+		}
+	}
+	return &table
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/rtcerr/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/rtcerr/errors.go
new file mode 100644
index 000000000..aa94b7bf9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/pkg/rtcerr/errors.go
@@ -0,0 +1,160 @@
+// Package rtcerr implements the error wrappers defined throughout the
+// WebRTC 1.0 specifications.
+package rtcerr
+
+import (
+	"fmt"
+)
+
+// UnknownError indicates the operation failed for an unknown transient reason.
+type UnknownError struct {
+	Err error
+}
+
+func (e *UnknownError) Error() string {
+	return fmt.Sprintf("UnknownError: %v", e.Err)
+}
+
+// Unwrap returns the result of calling the Unwrap method on err, if err's type contains
+// an Unwrap method returning error. Otherwise, Unwrap returns nil.
+func (e *UnknownError) Unwrap() error {
+	return e.Err
+}
+
+// InvalidStateError indicates the object is in an invalid state.
+type InvalidStateError struct {
+	Err error
+}
+
+func (e *InvalidStateError) Error() string {
+	return fmt.Sprintf("InvalidStateError: %v", e.Err)
+}
+
+// Unwrap returns the result of calling the Unwrap method on err, if err's type contains
+// an Unwrap method returning error. Otherwise, Unwrap returns nil.
+func (e *InvalidStateError) Unwrap() error {
+	return e.Err
+}
+
+// InvalidAccessError indicates the object does not support the operation or
+// argument.
+type InvalidAccessError struct {
+	Err error
+}
+
+func (e *InvalidAccessError) Error() string {
+	return fmt.Sprintf("InvalidAccessError: %v", e.Err)
+}
+
+// Unwrap returns the result of calling the Unwrap method on err, if err's type contains
+// an Unwrap method returning error. Otherwise, Unwrap returns nil.
+func (e *InvalidAccessError) Unwrap() error {
+	return e.Err
+}
+
+// NotSupportedError indicates the operation is not supported.
+type NotSupportedError struct {
+	Err error
+}
+
+func (e *NotSupportedError) Error() string {
+	return fmt.Sprintf("NotSupportedError: %v", e.Err)
+}
+
+// Unwrap returns the result of calling the Unwrap method on err, if err's type contains
+// an Unwrap method returning error. Otherwise, Unwrap returns nil.
+func (e *NotSupportedError) Unwrap() error {
+	return e.Err
+}
+
+// InvalidModificationError indicates the object cannot be modified in this way.
+type InvalidModificationError struct {
+	Err error
+}
+
+func (e *InvalidModificationError) Error() string {
+	return fmt.Sprintf("InvalidModificationError: %v", e.Err)
+}
+
+// Unwrap returns the result of calling the Unwrap method on err, if err's type contains
+// an Unwrap method returning error. Otherwise, Unwrap returns nil.
+func (e *InvalidModificationError) Unwrap() error {
+	return e.Err
+}
+
+// SyntaxError indicates the string did not match the expected pattern.
+type SyntaxError struct {
+	Err error
+}
+
+func (e *SyntaxError) Error() string {
+	return fmt.Sprintf("SyntaxError: %v", e.Err)
+}
+
+// Unwrap returns the result of calling the Unwrap method on err, if err's type contains
+// an Unwrap method returning error. Otherwise, Unwrap returns nil.
+func (e *SyntaxError) Unwrap() error {
+	return e.Err
+}
+
+// TypeError indicates an error when a value is not of the expected type.
+type TypeError struct {
+	Err error
+}
+
+func (e *TypeError) Error() string {
+	return fmt.Sprintf("TypeError: %v", e.Err)
+}
+
+// Unwrap returns the result of calling the Unwrap method on err, if err's type contains
+// an Unwrap method returning error. Otherwise, Unwrap returns nil.
+func (e *TypeError) Unwrap() error {
+	return e.Err
+}
+
+// OperationError indicates the operation failed for an operation-specific
+// reason.
+type OperationError struct {
+	Err error
+}
+
+func (e *OperationError) Error() string {
+	return fmt.Sprintf("OperationError: %v", e.Err)
+}
+
+// Unwrap returns the result of calling the Unwrap method on err, if err's type contains
+// an Unwrap method returning error. Otherwise, Unwrap returns nil.
+func (e *OperationError) Unwrap() error {
+	return e.Err
+}
+
+// NotReadableError indicates the input/output read operation failed.
+type NotReadableError struct {
+	Err error
+}
+
+func (e *NotReadableError) Error() string {
+	return fmt.Sprintf("NotReadableError: %v", e.Err)
+}
+
+// Unwrap returns the result of calling the Unwrap method on err, if err's type contains
+// an Unwrap method returning error. Otherwise, Unwrap returns nil.
+func (e *NotReadableError) Unwrap() error {
+	return e.Err
+}
+
+// RangeError indicates an error when a value is not in the set or range
+// of allowed values.
+type RangeError struct {
+	Err error
+}
+
+func (e *RangeError) Error() string {
+	return fmt.Sprintf("RangeError: %v", e.Err)
+}
+
+// Unwrap returns the result of calling the Unwrap method on err, if err's type contains
+// an Unwrap method returning error. Otherwise, Unwrap returns nil.
+func (e *RangeError) Unwrap() error {
+	return e.Err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/renovate.json b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/renovate.json
new file mode 100644
index 000000000..4400fd9b2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/renovate.json
@@ -0,0 +1,15 @@
+{
+  "extends": [
+    "config:base"
+  ],
+  "postUpdateOptions": [
+    "gomodTidy"
+  ],
+  "commitBody": "Generated by renovateBot",
+  "packageRules": [
+    {
+      "packagePatterns": ["^golang.org/x/"],
+      "schedule": ["on the first day of the month"]
+    }
+  ]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtcpfeedback.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtcpfeedback.go
new file mode 100644
index 000000000..b377738f6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtcpfeedback.go
@@ -0,0 +1,31 @@
+package webrtc
+
+const (
+	// TypeRTCPFBTransportCC ..
+	TypeRTCPFBTransportCC = "transport-cc"
+
+	// TypeRTCPFBGoogREMB ..
+	TypeRTCPFBGoogREMB = "goog-remb"
+
+	// TypeRTCPFBACK ..
+	TypeRTCPFBACK = "ack"
+
+	// TypeRTCPFBCCM ..
+	TypeRTCPFBCCM = "ccm"
+
+	// TypeRTCPFBNACK ..
+	TypeRTCPFBNACK = "nack"
+)
+
+// RTCPFeedback signals the connection to use additional RTCP packet types.
+// https://draft.ortc.org/#dom-rtcrtcpfeedback
+type RTCPFeedback struct {
+	// Type is the type of feedback.
+	// see: https://draft.ortc.org/#dom-rtcrtcpfeedback
+	// valid: ack, ccm, nack, goog-remb, transport-cc
+	Type string
+
+	// The parameter value depends on the type.
+	// For example, type="nack" parameter="pli" will send Picture Loss Indicator packets.
+	Parameter string
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtcpmuxpolicy.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtcpmuxpolicy.go
new file mode 100644
index 000000000..f74e440b3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtcpmuxpolicy.go
@@ -0,0 +1,66 @@
+package webrtc
+
+import (
+	"encoding/json"
+)
+
+// RTCPMuxPolicy affects what ICE candidates are gathered to support
+// non-multiplexed RTCP.
+type RTCPMuxPolicy int
+
+const (
+	// RTCPMuxPolicyNegotiate indicates to gather ICE candidates for both
+	// RTP and RTCP candidates. If the remote-endpoint is capable of
+	// multiplexing RTCP, multiplex RTCP on the RTP candidates. If it is not,
+	// use both the RTP and RTCP candidates separately.
+	RTCPMuxPolicyNegotiate RTCPMuxPolicy = iota + 1
+
+	// RTCPMuxPolicyRequire indicates to gather ICE candidates only for
+	// RTP and multiplex RTCP on the RTP candidates. If the remote endpoint is
+	// not capable of rtcp-mux, session negotiation will fail.
+	RTCPMuxPolicyRequire
+)
+
+// This is done this way because of a linter.
+const (
+	rtcpMuxPolicyNegotiateStr = "negotiate"
+	rtcpMuxPolicyRequireStr   = "require"
+)
+
+func newRTCPMuxPolicy(raw string) RTCPMuxPolicy {
+	switch raw {
+	case rtcpMuxPolicyNegotiateStr:
+		return RTCPMuxPolicyNegotiate
+	case rtcpMuxPolicyRequireStr:
+		return RTCPMuxPolicyRequire
+	default:
+		return RTCPMuxPolicy(Unknown)
+	}
+}
+
+func (t RTCPMuxPolicy) String() string {
+	switch t {
+	case RTCPMuxPolicyNegotiate:
+		return rtcpMuxPolicyNegotiateStr
+	case RTCPMuxPolicyRequire:
+		return rtcpMuxPolicyRequireStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
+
+// UnmarshalJSON parses the JSON-encoded data and stores the result
+func (t *RTCPMuxPolicy) UnmarshalJSON(b []byte) error {
+	var val string
+	if err := json.Unmarshal(b, &val); err != nil {
+		return err
+	}
+
+	*t = newRTCPMuxPolicy(val)
+	return nil
+}
+
+// MarshalJSON returns the JSON encoding
+func (t RTCPMuxPolicy) MarshalJSON() ([]byte, error) {
+	return json.Marshal(t.String())
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpcapabilities.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpcapabilities.go
new file mode 100644
index 000000000..dc42230d1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpcapabilities.go
@@ -0,0 +1,9 @@
+package webrtc
+
+// RTPCapabilities represents the capabilities of a transceiver
+//
+// https://w3c.github.io/webrtc-pc/#rtcrtpcapabilities
+type RTPCapabilities struct {
+	Codecs           []RTPCodecCapability
+	HeaderExtensions []RTPHeaderExtensionCapability
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpcodec.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpcodec.go
new file mode 100644
index 000000000..f1bb1c165
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpcodec.go
@@ -0,0 +1,107 @@
+package webrtc
+
+import (
+	"strings"
+)
+
+// RTPCodecType determines the type of a codec
+type RTPCodecType int
+
+const (
+
+	// RTPCodecTypeAudio indicates this is an audio codec
+	RTPCodecTypeAudio RTPCodecType = iota + 1
+
+	// RTPCodecTypeVideo indicates this is a video codec
+	RTPCodecTypeVideo
+)
+
+func (t RTPCodecType) String() string {
+	switch t {
+	case RTPCodecTypeAudio:
+		return "audio"
+	case RTPCodecTypeVideo:
+		return "video" //nolint: goconst
+	default:
+		return ErrUnknownType.Error()
+	}
+}
+
+// NewRTPCodecType creates a RTPCodecType from a string
+func NewRTPCodecType(r string) RTPCodecType {
+	switch {
+	case strings.EqualFold(r, RTPCodecTypeAudio.String()):
+		return RTPCodecTypeAudio
+	case strings.EqualFold(r, RTPCodecTypeVideo.String()):
+		return RTPCodecTypeVideo
+	default:
+		return RTPCodecType(0)
+	}
+}
+
+// RTPCodecCapability provides information about codec capabilities.
+//
+// https://w3c.github.io/webrtc-pc/#dictionary-rtcrtpcodeccapability-members
+type RTPCodecCapability struct {
+	MimeType     string
+	ClockRate    uint32
+	Channels     uint16
+	SDPFmtpLine  string
+	RTCPFeedback []RTCPFeedback
+}
+
+// RTPHeaderExtensionCapability is used to define a RFC5285 RTP header extension supported by the codec.
+//
+// https://w3c.github.io/webrtc-pc/#dom-rtcrtpcapabilities-headerextensions
+type RTPHeaderExtensionCapability struct {
+	URI string
+}
+
+// RTPHeaderExtensionParameter represents a negotiated RFC5285 RTP header extension.
+//
+// https://w3c.github.io/webrtc-pc/#dictionary-rtcrtpheaderextensionparameters-members
+type RTPHeaderExtensionParameter struct {
+	URI string
+	ID  int
+}
+
+// RTPCodecParameters is a sequence containing the media codecs that an RtpSender
+// will choose from, as well as entries for RTX, RED and FEC mechanisms. This also
+// includes the PayloadType that has been negotiated
+//
+// https://w3c.github.io/webrtc-pc/#rtcrtpcodecparameters
+type RTPCodecParameters struct {
+	RTPCodecCapability
+	PayloadType PayloadType
+
+	statsID string
+}
+
+// RTPParameters is a list of negotiated codecs and header extensions
+//
+// https://w3c.github.io/webrtc-pc/#dictionary-rtcrtpparameters-members
+type RTPParameters struct {
+	HeaderExtensions []RTPHeaderExtensionParameter
+	Codecs           []RTPCodecParameters
+}
+
+// Do a fuzzy find for a codec in the list of codecs
+// Used for lookup up a codec in an existing list to find a match
+func codecParametersFuzzySearch(needle RTPCodecParameters, haystack []RTPCodecParameters) (RTPCodecParameters, error) {
+	// First attempt to match on MimeType + SDPFmtpLine
+	for _, c := range haystack {
+		if strings.EqualFold(c.RTPCodecCapability.MimeType, needle.RTPCodecCapability.MimeType) &&
+			c.RTPCodecCapability.SDPFmtpLine == needle.RTPCodecCapability.SDPFmtpLine {
+			return c, nil
+		}
+	}
+
+	// Fallback to just MimeType
+	for _, c := range haystack {
+		if strings.EqualFold(c.RTPCodecCapability.MimeType, needle.RTPCodecCapability.MimeType) {
+			return c, nil
+		}
+	}
+
+	return RTPCodecParameters{}, ErrCodecNotFound
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpcodingparameters.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpcodingparameters.go
new file mode 100644
index 000000000..8a08c3321
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpcodingparameters.go
@@ -0,0 +1,10 @@
+package webrtc
+
+// RTPCodingParameters provides information relating to both encoding and decoding.
+// This is a subset of the RFC since Pion WebRTC doesn't implement encoding/decoding itself
+// http://draft.ortc.org/#dom-rtcrtpcodingparameters
+type RTPCodingParameters struct {
+	RID         string      `json:"rid"`
+	SSRC        SSRC        `json:"ssrc"`
+	PayloadType PayloadType `json:"payloadType"`
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpdecodingparameters.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpdecodingparameters.go
new file mode 100644
index 000000000..77aa1fc1c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpdecodingparameters.go
@@ -0,0 +1,8 @@
+package webrtc
+
+// RTPDecodingParameters provides information relating to both encoding and decoding.
+// This is a subset of the RFC since Pion WebRTC doesn't implement decoding itself
+// http://draft.ortc.org/#dom-rtcrtpdecodingparameters
+type RTPDecodingParameters struct {
+	RTPCodingParameters
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpencodingparameters.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpencodingparameters.go
new file mode 100644
index 000000000..09481a570
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpencodingparameters.go
@@ -0,0 +1,8 @@
+package webrtc
+
+// RTPEncodingParameters provides information relating to both encoding and decoding.
+// This is a subset of the RFC since Pion WebRTC doesn't implement encoding itself
+// http://draft.ortc.org/#dom-rtcrtpencodingparameters
+type RTPEncodingParameters struct {
+	RTPCodingParameters
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpreceiveparameters.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpreceiveparameters.go
new file mode 100644
index 000000000..badf6b733
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpreceiveparameters.go
@@ -0,0 +1,6 @@
+package webrtc
+
+// RTPReceiveParameters contains the RTP stack settings used by receivers
+type RTPReceiveParameters struct {
+	Encodings []RTPDecodingParameters
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpreceiver.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpreceiver.go
new file mode 100644
index 000000000..8d558e050
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpreceiver.go
@@ -0,0 +1,361 @@
+// +build !js
+
+package webrtc
+
+import (
+	"fmt"
+	"io"
+	"sync"
+	"time"
+
+	"github.com/pion/interceptor"
+	"github.com/pion/rtcp"
+	"github.com/pion/srtp/v2"
+	"github.com/pion/webrtc/v3/internal/util"
+)
+
+// trackStreams maintains a mapping of RTP/RTCP streams to a specific track
+// a RTPReceiver may contain multiple streams if we are dealing with Multicast
+type trackStreams struct {
+	track *TrackRemote
+
+	rtpReadStream  *srtp.ReadStreamSRTP
+	rtpInterceptor interceptor.RTPReader
+
+	rtcpReadStream  *srtp.ReadStreamSRTCP
+	rtcpInterceptor interceptor.RTCPReader
+}
+
+// RTPReceiver allows an application to inspect the receipt of a TrackRemote
+type RTPReceiver struct {
+	kind      RTPCodecType
+	transport *DTLSTransport
+
+	tracks []trackStreams
+
+	closed, received chan interface{}
+	mu               sync.RWMutex
+
+	// A reference to the associated api object
+	api *API
+}
+
+// NewRTPReceiver constructs a new RTPReceiver
+func (api *API) NewRTPReceiver(kind RTPCodecType, transport *DTLSTransport) (*RTPReceiver, error) {
+	if transport == nil {
+		return nil, errRTPReceiverDTLSTransportNil
+	}
+
+	r := &RTPReceiver{
+		kind:      kind,
+		transport: transport,
+		api:       api,
+		closed:    make(chan interface{}),
+		received:  make(chan interface{}),
+		tracks:    []trackStreams{},
+	}
+
+	return r, nil
+}
+
+// Transport returns the currently-configured *DTLSTransport or nil
+// if one has not yet been configured
+func (r *RTPReceiver) Transport() *DTLSTransport {
+	r.mu.RLock()
+	defer r.mu.RUnlock()
+	return r.transport
+}
+
+// GetParameters describes the current configuration for the encoding and
+// transmission of media on the receiver's track.
+func (r *RTPReceiver) GetParameters() RTPParameters {
+	return r.api.mediaEngine.getRTPParametersByKind(r.kind, []RTPTransceiverDirection{RTPTransceiverDirectionRecvonly})
+}
+
+// Track returns the RtpTransceiver TrackRemote
+func (r *RTPReceiver) Track() *TrackRemote {
+	r.mu.RLock()
+	defer r.mu.RUnlock()
+
+	if len(r.tracks) != 1 {
+		return nil
+	}
+	return r.tracks[0].track
+}
+
+// Tracks returns the RtpTransceiver tracks
+// A RTPReceiver to support Simulcast may now have multiple tracks
+func (r *RTPReceiver) Tracks() []*TrackRemote {
+	r.mu.RLock()
+	defer r.mu.RUnlock()
+
+	var tracks []*TrackRemote
+	for i := range r.tracks {
+		tracks = append(tracks, r.tracks[i].track)
+	}
+	return tracks
+}
+
+// Receive initialize the track and starts all the transports
+func (r *RTPReceiver) Receive(parameters RTPReceiveParameters) error {
+	r.mu.Lock()
+	defer r.mu.Unlock()
+	select {
+	case <-r.received:
+		return errRTPReceiverReceiveAlreadyCalled
+	default:
+	}
+	defer close(r.received)
+
+	if len(parameters.Encodings) == 1 && parameters.Encodings[0].SSRC != 0 {
+		t := trackStreams{
+			track: newTrackRemote(
+				r.kind,
+				parameters.Encodings[0].SSRC,
+				"",
+				r,
+			),
+		}
+
+		globalParams := r.GetParameters()
+		codec := RTPCodecCapability{}
+		if len(globalParams.Codecs) != 0 {
+			codec = globalParams.Codecs[0].RTPCodecCapability
+		}
+
+		streamInfo := createStreamInfo("", parameters.Encodings[0].SSRC, 0, codec, globalParams.HeaderExtensions)
+		var err error
+		if t.rtpReadStream, t.rtpInterceptor, t.rtcpReadStream, t.rtcpInterceptor, err = r.streamsForSSRC(parameters.Encodings[0].SSRC, streamInfo); err != nil {
+			return err
+		}
+
+		r.tracks = append(r.tracks, t)
+	} else {
+		for _, encoding := range parameters.Encodings {
+			r.tracks = append(r.tracks, trackStreams{
+				track: newTrackRemote(
+					r.kind,
+					0,
+					encoding.RID,
+					r,
+				),
+			})
+		}
+	}
+
+	return nil
+}
+
+// Read reads incoming RTCP for this RTPReceiver
+func (r *RTPReceiver) Read(b []byte) (n int, a interceptor.Attributes, err error) {
+	select {
+	case <-r.received:
+		return r.tracks[0].rtcpInterceptor.Read(b, a)
+	case <-r.closed:
+		return 0, nil, io.ErrClosedPipe
+	}
+}
+
+// ReadSimulcast reads incoming RTCP for this RTPReceiver for given rid
+func (r *RTPReceiver) ReadSimulcast(b []byte, rid string) (n int, a interceptor.Attributes, err error) {
+	select {
+	case <-r.received:
+		for _, t := range r.tracks {
+			if t.track != nil && t.track.rid == rid {
+				return t.rtcpInterceptor.Read(b, a)
+			}
+		}
+		return 0, nil, fmt.Errorf("%w: %s", errRTPReceiverForRIDTrackStreamNotFound, rid)
+	case <-r.closed:
+		return 0, nil, io.ErrClosedPipe
+	}
+}
+
+// ReadRTCP is a convenience method that wraps Read and unmarshal for you.
+// It also runs any configured interceptors.
+func (r *RTPReceiver) ReadRTCP() ([]rtcp.Packet, interceptor.Attributes, error) {
+	b := make([]byte, receiveMTU)
+	i, attributes, err := r.Read(b)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	pkts, err := rtcp.Unmarshal(b[:i])
+	if err != nil {
+		return nil, nil, err
+	}
+
+	return pkts, attributes, nil
+}
+
+// ReadSimulcastRTCP is a convenience method that wraps ReadSimulcast and unmarshal for you
+func (r *RTPReceiver) ReadSimulcastRTCP(rid string) ([]rtcp.Packet, interceptor.Attributes, error) {
+	b := make([]byte, receiveMTU)
+	i, attributes, err := r.ReadSimulcast(b, rid)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	pkts, err := rtcp.Unmarshal(b[:i])
+	return pkts, attributes, err
+}
+
+func (r *RTPReceiver) haveReceived() bool {
+	select {
+	case <-r.received:
+		return true
+	default:
+		return false
+	}
+}
+
+// Stop irreversibly stops the RTPReceiver
+func (r *RTPReceiver) Stop() error {
+	r.mu.Lock()
+	defer r.mu.Unlock()
+	var err error
+
+	select {
+	case <-r.closed:
+		return err
+	default:
+	}
+
+	select {
+	case <-r.received:
+		for i := range r.tracks {
+			errs := []error{}
+
+			if r.tracks[i].rtcpReadStream != nil {
+				errs = append(errs, r.tracks[i].rtcpReadStream.Close())
+			}
+
+			if r.tracks[i].rtpReadStream != nil {
+				errs = append(errs, r.tracks[i].rtpReadStream.Close())
+			}
+
+			err = util.FlattenErrs(errs)
+		}
+	default:
+	}
+
+	close(r.closed)
+	return err
+}
+
+func (r *RTPReceiver) streamsForTrack(t *TrackRemote) *trackStreams {
+	for i := range r.tracks {
+		if r.tracks[i].track == t {
+			return &r.tracks[i]
+		}
+	}
+	return nil
+}
+
+// readRTP should only be called by a track, this only exists so we can keep state in one place
+func (r *RTPReceiver) readRTP(b []byte, reader *TrackRemote) (n int, a interceptor.Attributes, err error) {
+	<-r.received
+	if t := r.streamsForTrack(reader); t != nil {
+		return t.rtpInterceptor.Read(b, a)
+	}
+
+	return 0, nil, fmt.Errorf("%w: %d", errRTPReceiverWithSSRCTrackStreamNotFound, reader.SSRC())
+}
+
+// receiveForRid is the sibling of Receive expect for RIDs instead of SSRCs
+// It populates all the internal state for the given RID
+func (r *RTPReceiver) receiveForRid(rid string, params RTPParameters, ssrc SSRC) (*TrackRemote, error) {
+	r.mu.Lock()
+	defer r.mu.Unlock()
+
+	for i := range r.tracks {
+		if r.tracks[i].track.RID() == rid {
+			r.tracks[i].track.mu.Lock()
+			r.tracks[i].track.kind = r.kind
+			r.tracks[i].track.codec = params.Codecs[0]
+			r.tracks[i].track.params = params
+			r.tracks[i].track.ssrc = ssrc
+			streamInfo := createStreamInfo("", ssrc, params.Codecs[0].PayloadType, params.Codecs[0].RTPCodecCapability, params.HeaderExtensions)
+			r.tracks[i].track.mu.Unlock()
+
+			var err error
+			if r.tracks[i].rtpReadStream, r.tracks[i].rtpInterceptor, r.tracks[i].rtcpReadStream, r.tracks[i].rtcpInterceptor, err = r.streamsForSSRC(ssrc, streamInfo); err != nil {
+				return nil, err
+			}
+
+			return r.tracks[i].track, nil
+		}
+	}
+
+	return nil, fmt.Errorf("%w: %d", errRTPReceiverForSSRCTrackStreamNotFound, ssrc)
+}
+
+func (r *RTPReceiver) streamsForSSRC(ssrc SSRC, streamInfo interceptor.StreamInfo) (*srtp.ReadStreamSRTP, interceptor.RTPReader, *srtp.ReadStreamSRTCP, interceptor.RTCPReader, error) {
+	srtpSession, err := r.transport.getSRTPSession()
+	if err != nil {
+		return nil, nil, nil, nil, err
+	}
+
+	rtpReadStream, err := srtpSession.OpenReadStream(uint32(ssrc))
+	if err != nil {
+		return nil, nil, nil, nil, err
+	}
+
+	rtpInterceptor := r.api.interceptor.BindRemoteStream(&streamInfo, interceptor.RTPReaderFunc(func(in []byte, a interceptor.Attributes) (n int, attributes interceptor.Attributes, err error) {
+		n, err = rtpReadStream.Read(in)
+		return n, a, err
+	}))
+
+	srtcpSession, err := r.transport.getSRTCPSession()
+	if err != nil {
+		return nil, nil, nil, nil, err
+	}
+
+	rtcpReadStream, err := srtcpSession.OpenReadStream(uint32(ssrc))
+	if err != nil {
+		return nil, nil, nil, nil, err
+	}
+
+	rtcpInterceptor := r.api.interceptor.BindRTCPReader(interceptor.RTPReaderFunc(func(in []byte, a interceptor.Attributes) (n int, attributes interceptor.Attributes, err error) {
+		n, err = rtcpReadStream.Read(in)
+		return n, a, err
+	}))
+
+	return rtpReadStream, rtpInterceptor, rtcpReadStream, rtcpInterceptor, nil
+}
+
+// SetReadDeadline sets the max amount of time the RTCP stream will block before returning. 0 is forever.
+func (r *RTPReceiver) SetReadDeadline(t time.Time) error {
+	r.mu.RLock()
+	defer r.mu.RUnlock()
+
+	if err := r.tracks[0].rtcpReadStream.SetReadDeadline(t); err != nil {
+		return err
+	}
+	return nil
+}
+
+// SetReadDeadlineSimulcast sets the max amount of time the RTCP stream for a given rid will block before returning. 0 is forever.
+func (r *RTPReceiver) SetReadDeadlineSimulcast(deadline time.Time, rid string) error {
+	r.mu.RLock()
+	defer r.mu.RUnlock()
+
+	for _, t := range r.tracks {
+		if t.track != nil && t.track.rid == rid {
+			return t.rtcpReadStream.SetReadDeadline(deadline)
+		}
+	}
+	return fmt.Errorf("%w: %s", errRTPReceiverForRIDTrackStreamNotFound, rid)
+}
+
+// setRTPReadDeadline sets the max amount of time the RTP stream will block before returning. 0 is forever.
+// This should be fired by calling SetReadDeadline on the TrackRemote
+func (r *RTPReceiver) setRTPReadDeadline(deadline time.Time, reader *TrackRemote) error {
+	r.mu.RLock()
+	defer r.mu.RUnlock()
+
+	if t := r.streamsForTrack(reader); t != nil {
+		return t.rtpReadStream.SetReadDeadline(deadline)
+	}
+	return fmt.Errorf("%w: %d", errRTPReceiverWithSSRCTrackStreamNotFound, reader.SSRC())
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpsender.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpsender.go
new file mode 100644
index 000000000..c29cbeede
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpsender.go
@@ -0,0 +1,254 @@
+// +build !js
+
+package webrtc
+
+import (
+	"io"
+	"sync"
+
+	"github.com/pion/interceptor"
+	"github.com/pion/randutil"
+	"github.com/pion/rtcp"
+	"github.com/pion/rtp"
+)
+
+// RTPSender allows an application to control how a given Track is encoded and transmitted to a remote peer
+type RTPSender struct {
+	track TrackLocal
+
+	srtpStream      *srtpWriterFuture
+	rtcpInterceptor interceptor.RTCPReader
+
+	context TrackLocalContext
+
+	transport *DTLSTransport
+
+	payloadType PayloadType
+	ssrc        SSRC
+
+	// nolint:godox
+	// TODO(sgotti) remove this when in future we'll avoid replacing
+	// a transceiver sender since we can just check the
+	// transceiver negotiation status
+	negotiated bool
+
+	// A reference to the associated api object
+	api *API
+	id  string
+
+	mu                     sync.RWMutex
+	sendCalled, stopCalled chan struct{}
+}
+
+// NewRTPSender constructs a new RTPSender
+func (api *API) NewRTPSender(track TrackLocal, transport *DTLSTransport) (*RTPSender, error) {
+	if track == nil {
+		return nil, errRTPSenderTrackNil
+	} else if transport == nil {
+		return nil, errRTPSenderDTLSTransportNil
+	}
+
+	id, err := randutil.GenerateCryptoRandomString(32, "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ")
+	if err != nil {
+		return nil, err
+	}
+
+	r := &RTPSender{
+		track:      track,
+		transport:  transport,
+		api:        api,
+		sendCalled: make(chan struct{}),
+		stopCalled: make(chan struct{}),
+		ssrc:       SSRC(randutil.NewMathRandomGenerator().Uint32()),
+		id:         id,
+		srtpStream: &srtpWriterFuture{},
+	}
+
+	r.srtpStream.rtpSender = r
+
+	r.rtcpInterceptor = r.api.interceptor.BindRTCPReader(interceptor.RTPReaderFunc(func(in []byte, a interceptor.Attributes) (n int, attributes interceptor.Attributes, err error) {
+		n, err = r.srtpStream.Read(in)
+		return n, a, err
+	}))
+
+	return r, nil
+}
+
+func (r *RTPSender) isNegotiated() bool {
+	r.mu.RLock()
+	defer r.mu.RUnlock()
+	return r.negotiated
+}
+
+func (r *RTPSender) setNegotiated() {
+	r.mu.Lock()
+	defer r.mu.Unlock()
+	r.negotiated = true
+}
+
+// Transport returns the currently-configured *DTLSTransport or nil
+// if one has not yet been configured
+func (r *RTPSender) Transport() *DTLSTransport {
+	r.mu.RLock()
+	defer r.mu.RUnlock()
+	return r.transport
+}
+
+// GetParameters describes the current configuration for the encoding and
+// transmission of media on the sender's track.
+func (r *RTPSender) GetParameters() RTPSendParameters {
+	return RTPSendParameters{
+		RTPParameters: r.api.mediaEngine.getRTPParametersByKind(
+			r.track.Kind(),
+			[]RTPTransceiverDirection{RTPTransceiverDirectionSendonly},
+		),
+		Encodings: []RTPEncodingParameters{
+			{
+				RTPCodingParameters: RTPCodingParameters{
+					SSRC:        r.ssrc,
+					PayloadType: r.payloadType,
+				},
+			},
+		},
+	}
+}
+
+// Track returns the RTCRtpTransceiver track, or nil
+func (r *RTPSender) Track() TrackLocal {
+	r.mu.RLock()
+	defer r.mu.RUnlock()
+	return r.track
+}
+
+// ReplaceTrack replaces the track currently being used as the sender's source with a new TrackLocal.
+// The new track must be of the same media kind (audio, video, etc) and switching the track should not
+// require negotiation.
+func (r *RTPSender) ReplaceTrack(track TrackLocal) error {
+	r.mu.Lock()
+	defer r.mu.Unlock()
+
+	if r.hasSent() && r.track != nil {
+		if err := r.track.Unbind(r.context); err != nil {
+			return err
+		}
+	}
+
+	if !r.hasSent() || track == nil {
+		r.track = track
+		return nil
+	}
+
+	if _, err := track.Bind(r.context); err != nil {
+		// Re-bind the original track
+		if _, reBindErr := r.track.Bind(r.context); reBindErr != nil {
+			return reBindErr
+		}
+
+		return err
+	}
+
+	r.track = track
+	return nil
+}
+
+// Send Attempts to set the parameters controlling the sending of media.
+func (r *RTPSender) Send(parameters RTPSendParameters) error {
+	r.mu.Lock()
+	defer r.mu.Unlock()
+
+	if r.hasSent() {
+		return errRTPSenderSendAlreadyCalled
+	}
+
+	writeStream := &interceptorToTrackLocalWriter{}
+	r.context = TrackLocalContext{
+		id:          r.id,
+		params:      r.api.mediaEngine.getRTPParametersByKind(r.track.Kind(), []RTPTransceiverDirection{RTPTransceiverDirectionSendonly}),
+		ssrc:        parameters.Encodings[0].SSRC,
+		writeStream: writeStream,
+	}
+
+	codec, err := r.track.Bind(r.context)
+	if err != nil {
+		return err
+	}
+	r.context.params.Codecs = []RTPCodecParameters{codec}
+
+	streamInfo := createStreamInfo(r.id, parameters.Encodings[0].SSRC, codec.PayloadType, codec.RTPCodecCapability, parameters.HeaderExtensions)
+	rtpInterceptor := r.api.interceptor.BindLocalStream(&streamInfo, interceptor.RTPWriterFunc(func(header *rtp.Header, payload []byte, attributes interceptor.Attributes) (int, error) {
+		return r.srtpStream.WriteRTP(header, payload)
+	}))
+	writeStream.interceptor.Store(rtpInterceptor)
+
+	close(r.sendCalled)
+	return nil
+}
+
+// Stop irreversibly stops the RTPSender
+func (r *RTPSender) Stop() error {
+	r.mu.Lock()
+
+	if stopped := r.hasStopped(); stopped {
+		r.mu.Unlock()
+		return nil
+	}
+
+	close(r.stopCalled)
+	r.mu.Unlock()
+
+	if !r.hasSent() {
+		return nil
+	}
+
+	if err := r.ReplaceTrack(nil); err != nil {
+		return err
+	}
+
+	return r.srtpStream.Close()
+}
+
+// Read reads incoming RTCP for this RTPReceiver
+func (r *RTPSender) Read(b []byte) (n int, a interceptor.Attributes, err error) {
+	select {
+	case <-r.sendCalled:
+		return r.rtcpInterceptor.Read(b, a)
+	case <-r.stopCalled:
+		return 0, nil, io.ErrClosedPipe
+	}
+}
+
+// ReadRTCP is a convenience method that wraps Read and unmarshals for you.
+func (r *RTPSender) ReadRTCP() ([]rtcp.Packet, interceptor.Attributes, error) {
+	b := make([]byte, receiveMTU)
+	i, attributes, err := r.Read(b)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	pkts, err := rtcp.Unmarshal(b[:i])
+	if err != nil {
+		return nil, nil, err
+	}
+
+	return pkts, attributes, nil
+}
+
+// hasSent tells if data has been ever sent for this instance
+func (r *RTPSender) hasSent() bool {
+	select {
+	case <-r.sendCalled:
+		return true
+	default:
+		return false
+	}
+}
+
+// hasStopped tells if stop has been called
+func (r *RTPSender) hasStopped() bool {
+	select {
+	case <-r.stopCalled:
+		return true
+	default:
+		return false
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpsendparameters.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpsendparameters.go
new file mode 100644
index 000000000..cc55e5dcc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtpsendparameters.go
@@ -0,0 +1,7 @@
+package webrtc
+
+// RTPSendParameters contains the RTP stack settings used by receivers
+type RTPSendParameters struct {
+	RTPParameters
+	Encodings []RTPEncodingParameters
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtptransceiver.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtptransceiver.go
new file mode 100644
index 000000000..b0c1f03d1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtptransceiver.go
@@ -0,0 +1,187 @@
+// +build !js
+
+package webrtc
+
+import (
+	"fmt"
+	"sync/atomic"
+
+	"github.com/pion/rtp"
+)
+
+// RTPTransceiver represents a combination of an RTPSender and an RTPReceiver that share a common mid.
+type RTPTransceiver struct {
+	mid       atomic.Value // string
+	sender    atomic.Value // *RTPSender
+	receiver  atomic.Value // *RTPReceiver
+	direction atomic.Value // RTPTransceiverDirection
+
+	stopped bool
+	kind    RTPCodecType
+}
+
+// Sender returns the RTPTransceiver's RTPSender if it has one
+func (t *RTPTransceiver) Sender() *RTPSender {
+	if v := t.sender.Load(); v != nil {
+		return v.(*RTPSender)
+	}
+
+	return nil
+}
+
+// SetSender sets the RTPSender and Track to current transceiver
+func (t *RTPTransceiver) SetSender(s *RTPSender, track TrackLocal) error {
+	t.setSender(s)
+	return t.setSendingTrack(track)
+}
+
+func (t *RTPTransceiver) setSender(s *RTPSender) {
+	t.sender.Store(s)
+}
+
+// Receiver returns the RTPTransceiver's RTPReceiver if it has one
+func (t *RTPTransceiver) Receiver() *RTPReceiver {
+	if v := t.receiver.Load(); v != nil {
+		return v.(*RTPReceiver)
+	}
+
+	return nil
+}
+
+// setMid sets the RTPTransceiver's mid. If it was already set, will return an error.
+func (t *RTPTransceiver) setMid(mid string) error {
+	if currentMid := t.Mid(); currentMid != "" {
+		return fmt.Errorf("%w: %s to %s", errRTPTransceiverCannotChangeMid, currentMid, mid)
+	}
+	t.mid.Store(mid)
+	return nil
+}
+
+// Mid gets the Transceiver's mid value. When not already set, this value will be set in CreateOffer or CreateAnswer.
+func (t *RTPTransceiver) Mid() string {
+	if v := t.mid.Load(); v != nil {
+		return v.(string)
+	}
+	return ""
+}
+
+// Kind returns RTPTransceiver's kind.
+func (t *RTPTransceiver) Kind() RTPCodecType {
+	return t.kind
+}
+
+// Direction returns the RTPTransceiver's current direction
+func (t *RTPTransceiver) Direction() RTPTransceiverDirection {
+	return t.direction.Load().(RTPTransceiverDirection)
+}
+
+// Stop irreversibly stops the RTPTransceiver
+func (t *RTPTransceiver) Stop() error {
+	if t.Sender() != nil {
+		if err := t.Sender().Stop(); err != nil {
+			return err
+		}
+	}
+	if t.Receiver() != nil {
+		if err := t.Receiver().Stop(); err != nil {
+			return err
+		}
+	}
+
+	t.setDirection(RTPTransceiverDirectionInactive)
+	return nil
+}
+
+func (t *RTPTransceiver) setReceiver(r *RTPReceiver) {
+	t.receiver.Store(r)
+}
+
+func (t *RTPTransceiver) setDirection(d RTPTransceiverDirection) {
+	t.direction.Store(d)
+}
+
+func (t *RTPTransceiver) setSendingTrack(track TrackLocal) error {
+	if err := t.Sender().ReplaceTrack(track); err != nil {
+		return err
+	}
+	if track == nil {
+		t.setSender(nil)
+	}
+
+	switch {
+	case track != nil && t.Direction() == RTPTransceiverDirectionRecvonly:
+		t.setDirection(RTPTransceiverDirectionSendrecv)
+	case track != nil && t.Direction() == RTPTransceiverDirectionInactive:
+		t.setDirection(RTPTransceiverDirectionSendonly)
+	case track == nil && t.Direction() == RTPTransceiverDirectionSendrecv:
+		t.setDirection(RTPTransceiverDirectionRecvonly)
+	case track == nil && t.Direction() == RTPTransceiverDirectionSendonly:
+		t.setDirection(RTPTransceiverDirectionInactive)
+	default:
+		return errRTPTransceiverSetSendingInvalidState
+	}
+	return nil
+}
+
+func findByMid(mid string, localTransceivers []*RTPTransceiver) (*RTPTransceiver, []*RTPTransceiver) {
+	for i, t := range localTransceivers {
+		if t.Mid() == mid {
+			return t, append(localTransceivers[:i], localTransceivers[i+1:]...)
+		}
+	}
+
+	return nil, localTransceivers
+}
+
+// Given a direction+type pluck a transceiver from the passed list
+// if no entry satisfies the requested type+direction return a inactive Transceiver
+func satisfyTypeAndDirection(remoteKind RTPCodecType, remoteDirection RTPTransceiverDirection, localTransceivers []*RTPTransceiver) (*RTPTransceiver, []*RTPTransceiver) {
+	// Get direction order from most preferred to least
+	getPreferredDirections := func() []RTPTransceiverDirection {
+		switch remoteDirection {
+		case RTPTransceiverDirectionSendrecv:
+			return []RTPTransceiverDirection{RTPTransceiverDirectionRecvonly, RTPTransceiverDirectionSendrecv}
+		case RTPTransceiverDirectionSendonly:
+			return []RTPTransceiverDirection{RTPTransceiverDirectionRecvonly, RTPTransceiverDirectionSendrecv}
+		case RTPTransceiverDirectionRecvonly:
+			return []RTPTransceiverDirection{RTPTransceiverDirectionSendonly, RTPTransceiverDirectionSendrecv}
+		default:
+			return []RTPTransceiverDirection{}
+		}
+	}
+
+	for _, possibleDirection := range getPreferredDirections() {
+		for i := range localTransceivers {
+			t := localTransceivers[i]
+			if t.Mid() == "" && t.kind == remoteKind && possibleDirection == t.Direction() {
+				return t, append(localTransceivers[:i], localTransceivers[i+1:]...)
+			}
+		}
+	}
+
+	return nil, localTransceivers
+}
+
+// handleUnknownRTPPacket consumes a single RTP Packet and returns information that is helpful
+// for demuxing and handling an unknown SSRC (usually for Simulcast)
+func handleUnknownRTPPacket(buf []byte, midExtensionID, streamIDExtensionID uint8) (mid, rid string, payloadType PayloadType, err error) {
+	rp := &rtp.Packet{}
+	if err = rp.Unmarshal(buf); err != nil {
+		return
+	}
+
+	if !rp.Header.Extension {
+		return
+	}
+
+	payloadType = PayloadType(rp.PayloadType)
+	if payload := rp.GetExtension(midExtensionID); payload != nil {
+		mid = string(payload)
+	}
+
+	if payload := rp.GetExtension(streamIDExtensionID); payload != nil {
+		rid = string(payload)
+	}
+
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtptransceiverdirection.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtptransceiverdirection.go
new file mode 100644
index 000000000..307301473
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtptransceiverdirection.go
@@ -0,0 +1,85 @@
+package webrtc
+
+// RTPTransceiverDirection indicates the direction of the RTPTransceiver.
+type RTPTransceiverDirection int
+
+const (
+	// RTPTransceiverDirectionSendrecv indicates the RTPSender will offer
+	// to send RTP and RTPReceiver the will offer to receive RTP.
+	RTPTransceiverDirectionSendrecv RTPTransceiverDirection = iota + 1
+
+	// RTPTransceiverDirectionSendonly indicates the RTPSender will offer
+	// to send RTP.
+	RTPTransceiverDirectionSendonly
+
+	// RTPTransceiverDirectionRecvonly indicates the RTPReceiver the will
+	// offer to receive RTP.
+	RTPTransceiverDirectionRecvonly
+
+	// RTPTransceiverDirectionInactive indicates the RTPSender won't offer
+	// to send RTP and RTPReceiver the won't offer to receive RTP.
+	RTPTransceiverDirectionInactive
+)
+
+// This is done this way because of a linter.
+const (
+	rtpTransceiverDirectionSendrecvStr = "sendrecv"
+	rtpTransceiverDirectionSendonlyStr = "sendonly"
+	rtpTransceiverDirectionRecvonlyStr = "recvonly"
+	rtpTransceiverDirectionInactiveStr = "inactive"
+)
+
+// NewRTPTransceiverDirection defines a procedure for creating a new
+// RTPTransceiverDirection from a raw string naming the transceiver direction.
+func NewRTPTransceiverDirection(raw string) RTPTransceiverDirection {
+	switch raw {
+	case rtpTransceiverDirectionSendrecvStr:
+		return RTPTransceiverDirectionSendrecv
+	case rtpTransceiverDirectionSendonlyStr:
+		return RTPTransceiverDirectionSendonly
+	case rtpTransceiverDirectionRecvonlyStr:
+		return RTPTransceiverDirectionRecvonly
+	case rtpTransceiverDirectionInactiveStr:
+		return RTPTransceiverDirectionInactive
+	default:
+		return RTPTransceiverDirection(Unknown)
+	}
+}
+
+func (t RTPTransceiverDirection) String() string {
+	switch t {
+	case RTPTransceiverDirectionSendrecv:
+		return rtpTransceiverDirectionSendrecvStr
+	case RTPTransceiverDirectionSendonly:
+		return rtpTransceiverDirectionSendonlyStr
+	case RTPTransceiverDirectionRecvonly:
+		return rtpTransceiverDirectionRecvonlyStr
+	case RTPTransceiverDirectionInactive:
+		return rtpTransceiverDirectionInactiveStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
+
+// Revers indicate the opposite direction
+func (t RTPTransceiverDirection) Revers() RTPTransceiverDirection {
+	switch t {
+	case RTPTransceiverDirectionSendonly:
+		return RTPTransceiverDirectionRecvonly
+	case RTPTransceiverDirectionRecvonly:
+		return RTPTransceiverDirectionSendonly
+	default:
+		return t
+	}
+}
+
+func haveRTPTransceiverDirectionIntersection(haystack []RTPTransceiverDirection, needle []RTPTransceiverDirection) bool {
+	for _, n := range needle {
+		for _, h := range haystack {
+			if n == h {
+				return true
+			}
+		}
+	}
+	return false
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtptransceiverinit.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtptransceiverinit.go
new file mode 100644
index 000000000..3c439b7f7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/rtptransceiverinit.go
@@ -0,0 +1,12 @@
+package webrtc
+
+// RTPTransceiverInit dictionary is used when calling the WebRTC function addTransceiver() to provide configuration options for the new transceiver.
+type RTPTransceiverInit struct {
+	Direction     RTPTransceiverDirection
+	SendEncodings []RTPEncodingParameters
+	// Streams       []*Track
+}
+
+// RtpTransceiverInit is a temporary mapping while we fix case sensitivity
+// Deprecated: Use RTPTransceiverInit instead
+type RtpTransceiverInit = RTPTransceiverInit //nolint: stylecheck,golint
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sctpcapabilities.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sctpcapabilities.go
new file mode 100644
index 000000000..34399d3b0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sctpcapabilities.go
@@ -0,0 +1,6 @@
+package webrtc
+
+// SCTPCapabilities indicates the capabilities of the SCTPTransport.
+type SCTPCapabilities struct {
+	MaxMessageSize uint32 `json:"maxMessageSize"`
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sctptransport.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sctptransport.go
new file mode 100644
index 000000000..d7b3764c3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sctptransport.go
@@ -0,0 +1,379 @@
+// +build !js
+
+package webrtc
+
+import (
+	"io"
+	"math"
+	"sync"
+	"time"
+
+	"github.com/pion/datachannel"
+	"github.com/pion/logging"
+	"github.com/pion/sctp"
+	"github.com/pion/webrtc/v3/pkg/rtcerr"
+)
+
+const sctpMaxChannels = uint16(65535)
+
+// SCTPTransport provides details about the SCTP transport.
+type SCTPTransport struct {
+	lock sync.RWMutex
+
+	dtlsTransport *DTLSTransport
+
+	// State represents the current state of the SCTP transport.
+	state SCTPTransportState
+
+	// SCTPTransportState doesn't have an enum to distinguish between New/Connecting
+	// so we need a dedicated field
+	isStarted bool
+
+	// MaxMessageSize represents the maximum size of data that can be passed to
+	// DataChannel's send() method.
+	maxMessageSize float64
+
+	// MaxChannels represents the maximum amount of DataChannel's that can
+	// be used simultaneously.
+	maxChannels *uint16
+
+	// OnStateChange  func()
+
+	onErrorHandler func(error)
+
+	association                *sctp.Association
+	onDataChannelHandler       func(*DataChannel)
+	onDataChannelOpenedHandler func(*DataChannel)
+
+	// DataChannels
+	dataChannels          []*DataChannel
+	dataChannelsOpened    uint32
+	dataChannelsRequested uint32
+	dataChannelsAccepted  uint32
+
+	api *API
+	log logging.LeveledLogger
+}
+
+// NewSCTPTransport creates a new SCTPTransport.
+// This constructor is part of the ORTC API. It is not
+// meant to be used together with the basic WebRTC API.
+func (api *API) NewSCTPTransport(dtls *DTLSTransport) *SCTPTransport {
+	res := &SCTPTransport{
+		dtlsTransport: dtls,
+		state:         SCTPTransportStateConnecting,
+		api:           api,
+		log:           api.settingEngine.LoggerFactory.NewLogger("ortc"),
+	}
+
+	res.updateMessageSize()
+	res.updateMaxChannels()
+
+	return res
+}
+
+// Transport returns the DTLSTransport instance the SCTPTransport is sending over.
+func (r *SCTPTransport) Transport() *DTLSTransport {
+	r.lock.RLock()
+	defer r.lock.RUnlock()
+
+	return r.dtlsTransport
+}
+
+// GetCapabilities returns the SCTPCapabilities of the SCTPTransport.
+func (r *SCTPTransport) GetCapabilities() SCTPCapabilities {
+	return SCTPCapabilities{
+		MaxMessageSize: 0,
+	}
+}
+
+// Start the SCTPTransport. Since both local and remote parties must mutually
+// create an SCTPTransport, SCTP SO (Simultaneous Open) is used to establish
+// a connection over SCTP.
+func (r *SCTPTransport) Start(remoteCaps SCTPCapabilities) error {
+	if r.isStarted {
+		return nil
+	}
+	r.isStarted = true
+
+	if err := r.ensureDTLS(); err != nil {
+		return err
+	}
+
+	sctpAssociation, err := sctp.Client(sctp.Config{
+		NetConn:       r.Transport().conn,
+		LoggerFactory: r.api.settingEngine.LoggerFactory,
+	})
+	if err != nil {
+		return err
+	}
+
+	r.lock.Lock()
+	defer r.lock.Unlock()
+
+	r.association = sctpAssociation
+	r.state = SCTPTransportStateConnected
+
+	go r.acceptDataChannels(sctpAssociation)
+
+	return nil
+}
+
+// Stop stops the SCTPTransport
+func (r *SCTPTransport) Stop() error {
+	r.lock.Lock()
+	defer r.lock.Unlock()
+	if r.association == nil {
+		return nil
+	}
+	err := r.association.Close()
+	if err != nil {
+		return err
+	}
+
+	r.association = nil
+	r.state = SCTPTransportStateClosed
+
+	return nil
+}
+
+func (r *SCTPTransport) ensureDTLS() error {
+	dtlsTransport := r.Transport()
+	if dtlsTransport == nil || dtlsTransport.conn == nil {
+		return errSCTPTransportDTLS
+	}
+
+	return nil
+}
+
+func (r *SCTPTransport) acceptDataChannels(a *sctp.Association) {
+	for {
+		dc, err := datachannel.Accept(a, &datachannel.Config{
+			LoggerFactory: r.api.settingEngine.LoggerFactory,
+		})
+		if err != nil {
+			if err != io.EOF {
+				r.log.Errorf("Failed to accept data channel: %v", err)
+				r.onError(err)
+			}
+			return
+		}
+
+		var (
+			maxRetransmits    *uint16
+			maxPacketLifeTime *uint16
+		)
+		val := uint16(dc.Config.ReliabilityParameter)
+		ordered := true
+
+		switch dc.Config.ChannelType {
+		case datachannel.ChannelTypeReliable:
+			ordered = true
+		case datachannel.ChannelTypeReliableUnordered:
+			ordered = false
+		case datachannel.ChannelTypePartialReliableRexmit:
+			ordered = true
+			maxRetransmits = &val
+		case datachannel.ChannelTypePartialReliableRexmitUnordered:
+			ordered = false
+			maxRetransmits = &val
+		case datachannel.ChannelTypePartialReliableTimed:
+			ordered = true
+			maxPacketLifeTime = &val
+		case datachannel.ChannelTypePartialReliableTimedUnordered:
+			ordered = false
+			maxPacketLifeTime = &val
+		default:
+		}
+
+		sid := dc.StreamIdentifier()
+		rtcDC, err := r.api.newDataChannel(&DataChannelParameters{
+			ID:                &sid,
+			Label:             dc.Config.Label,
+			Protocol:          dc.Config.Protocol,
+			Negotiated:        dc.Config.Negotiated,
+			Ordered:           ordered,
+			MaxPacketLifeTime: maxPacketLifeTime,
+			MaxRetransmits:    maxRetransmits,
+		}, r.api.settingEngine.LoggerFactory.NewLogger("ortc"))
+		if err != nil {
+			r.log.Errorf("Failed to accept data channel: %v", err)
+			r.onError(err)
+			return
+		}
+
+		<-r.onDataChannel(rtcDC)
+		rtcDC.handleOpen(dc)
+
+		r.lock.Lock()
+		r.dataChannelsOpened++
+		handler := r.onDataChannelOpenedHandler
+		r.lock.Unlock()
+
+		if handler != nil {
+			handler(rtcDC)
+		}
+	}
+}
+
+// OnError sets an event handler which is invoked when
+// the SCTP connection error occurs.
+func (r *SCTPTransport) OnError(f func(err error)) {
+	r.lock.Lock()
+	defer r.lock.Unlock()
+	r.onErrorHandler = f
+}
+
+func (r *SCTPTransport) onError(err error) {
+	r.lock.RLock()
+	handler := r.onErrorHandler
+	r.lock.RUnlock()
+
+	if handler != nil {
+		go handler(err)
+	}
+}
+
+// OnDataChannel sets an event handler which is invoked when a data
+// channel message arrives from a remote peer.
+func (r *SCTPTransport) OnDataChannel(f func(*DataChannel)) {
+	r.lock.Lock()
+	defer r.lock.Unlock()
+	r.onDataChannelHandler = f
+}
+
+// OnDataChannelOpened sets an event handler which is invoked when a data
+// channel is opened
+func (r *SCTPTransport) OnDataChannelOpened(f func(*DataChannel)) {
+	r.lock.Lock()
+	defer r.lock.Unlock()
+	r.onDataChannelOpenedHandler = f
+}
+
+func (r *SCTPTransport) onDataChannel(dc *DataChannel) (done chan struct{}) {
+	r.lock.Lock()
+	r.dataChannels = append(r.dataChannels, dc)
+	r.dataChannelsAccepted++
+	handler := r.onDataChannelHandler
+	r.lock.Unlock()
+
+	done = make(chan struct{})
+	if handler == nil || dc == nil {
+		close(done)
+		return
+	}
+
+	// Run this synchronously to allow setup done in onDataChannelFn()
+	// to complete before datachannel event handlers might be called.
+	go func() {
+		handler(dc)
+		close(done)
+	}()
+
+	return
+}
+
+func (r *SCTPTransport) updateMessageSize() {
+	r.lock.Lock()
+	defer r.lock.Unlock()
+
+	var remoteMaxMessageSize float64 = 65536 // pion/webrtc#758
+	var canSendSize float64 = 65536          // pion/webrtc#758
+
+	r.maxMessageSize = r.calcMessageSize(remoteMaxMessageSize, canSendSize)
+}
+
+func (r *SCTPTransport) calcMessageSize(remoteMaxMessageSize, canSendSize float64) float64 {
+	switch {
+	case remoteMaxMessageSize == 0 &&
+		canSendSize == 0:
+		return math.Inf(1)
+
+	case remoteMaxMessageSize == 0:
+		return canSendSize
+
+	case canSendSize == 0:
+		return remoteMaxMessageSize
+
+	case canSendSize > remoteMaxMessageSize:
+		return remoteMaxMessageSize
+
+	default:
+		return canSendSize
+	}
+}
+
+func (r *SCTPTransport) updateMaxChannels() {
+	val := sctpMaxChannels
+	r.maxChannels = &val
+}
+
+// MaxChannels is the maximum number of RTCDataChannels that can be open simultaneously.
+func (r *SCTPTransport) MaxChannels() uint16 {
+	r.lock.Lock()
+	defer r.lock.Unlock()
+
+	if r.maxChannels == nil {
+		return sctpMaxChannels
+	}
+
+	return *r.maxChannels
+}
+
+// State returns the current state of the SCTPTransport
+func (r *SCTPTransport) State() SCTPTransportState {
+	r.lock.RLock()
+	defer r.lock.RUnlock()
+	return r.state
+}
+
+func (r *SCTPTransport) collectStats(collector *statsReportCollector) {
+	r.lock.Lock()
+	association := r.association
+	r.lock.Unlock()
+
+	collector.Collecting()
+
+	stats := TransportStats{
+		Timestamp: statsTimestampFrom(time.Now()),
+		Type:      StatsTypeTransport,
+		ID:        "sctpTransport",
+	}
+
+	if association != nil {
+		stats.BytesSent = association.BytesSent()
+		stats.BytesReceived = association.BytesReceived()
+	}
+
+	collector.Collect(stats.ID, stats)
+}
+
+func (r *SCTPTransport) generateAndSetDataChannelID(dtlsRole DTLSRole, idOut **uint16) error {
+	isChannelWithID := func(id uint16) bool {
+		for _, d := range r.dataChannels {
+			if d.id != nil && *d.id == id {
+				return true
+			}
+		}
+		return false
+	}
+
+	var id uint16
+	if dtlsRole != DTLSRoleClient {
+		id++
+	}
+
+	max := r.MaxChannels()
+
+	r.lock.Lock()
+	defer r.lock.Unlock()
+	for ; id < max-1; id += 2 {
+		if isChannelWithID(id) {
+			continue
+		}
+		*idOut = &id
+		return nil
+	}
+
+	return &rtcerr.OperationError{Err: ErrMaxDataChannelID}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sctptransportstate.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sctptransportstate.go
new file mode 100644
index 000000000..8dc794162
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sctptransportstate.go
@@ -0,0 +1,54 @@
+package webrtc
+
+// SCTPTransportState indicates the state of the SCTP transport.
+type SCTPTransportState int
+
+const (
+	// SCTPTransportStateConnecting indicates the SCTPTransport is in the
+	// process of negotiating an association. This is the initial state of the
+	// SCTPTransportState when an SCTPTransport is created.
+	SCTPTransportStateConnecting SCTPTransportState = iota + 1
+
+	// SCTPTransportStateConnected indicates the negotiation of an
+	// association is completed.
+	SCTPTransportStateConnected
+
+	// SCTPTransportStateClosed indicates a SHUTDOWN or ABORT chunk is
+	// received or when the SCTP association has been closed intentionally,
+	// such as by closing the peer connection or applying a remote description
+	// that rejects data or changes the SCTP port.
+	SCTPTransportStateClosed
+)
+
+// This is done this way because of a linter.
+const (
+	sctpTransportStateConnectingStr = "connecting"
+	sctpTransportStateConnectedStr  = "connected"
+	sctpTransportStateClosedStr     = "closed"
+)
+
+func newSCTPTransportState(raw string) SCTPTransportState {
+	switch raw {
+	case sctpTransportStateConnectingStr:
+		return SCTPTransportStateConnecting
+	case sctpTransportStateConnectedStr:
+		return SCTPTransportStateConnected
+	case sctpTransportStateClosedStr:
+		return SCTPTransportStateClosed
+	default:
+		return SCTPTransportState(Unknown)
+	}
+}
+
+func (s SCTPTransportState) String() string {
+	switch s {
+	case SCTPTransportStateConnecting:
+		return sctpTransportStateConnectingStr
+	case SCTPTransportStateConnected:
+		return sctpTransportStateConnectedStr
+	case SCTPTransportStateClosed:
+		return sctpTransportStateClosedStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sdp.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sdp.go
new file mode 100644
index 000000000..7454696fd
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sdp.go
@@ -0,0 +1,643 @@
+// +build !js
+
+package webrtc
+
+import (
+	"fmt"
+	"net/url"
+	"regexp"
+	"strconv"
+	"strings"
+
+	"github.com/pion/ice/v2"
+	"github.com/pion/logging"
+	"github.com/pion/sdp/v3"
+)
+
+// trackDetails represents any media source that can be represented in a SDP
+// This isn't keyed by SSRC because it also needs to support rid based sources
+type trackDetails struct {
+	mid      string
+	kind     RTPCodecType
+	streamID string
+	id       string
+	ssrc     SSRC
+	rids     []string
+}
+
+func trackDetailsForSSRC(trackDetails []trackDetails, ssrc SSRC) *trackDetails {
+	for i := range trackDetails {
+		if trackDetails[i].ssrc == ssrc {
+			return &trackDetails[i]
+		}
+	}
+	return nil
+}
+
+func filterTrackWithSSRC(incomingTracks []trackDetails, ssrc SSRC) []trackDetails {
+	filtered := []trackDetails{}
+	for i := range incomingTracks {
+		if incomingTracks[i].ssrc != ssrc {
+			filtered = append(filtered, incomingTracks[i])
+		}
+	}
+	return filtered
+}
+
+// extract all trackDetails from an SDP.
+func trackDetailsFromSDP(log logging.LeveledLogger, s *sdp.SessionDescription) []trackDetails { // nolint:gocognit
+	incomingTracks := []trackDetails{}
+	rtxRepairFlows := map[uint32]bool{}
+
+	for _, media := range s.MediaDescriptions {
+		// Plan B can have multiple tracks in a signle media section
+		streamID := ""
+		trackID := ""
+
+		// If media section is recvonly or inactive skip
+		if _, ok := media.Attribute(sdp.AttrKeyRecvOnly); ok {
+			continue
+		} else if _, ok := media.Attribute(sdp.AttrKeyInactive); ok {
+			continue
+		}
+
+		midValue := getMidValue(media)
+		if midValue == "" {
+			continue
+		}
+
+		codecType := NewRTPCodecType(media.MediaName.Media)
+		if codecType == 0 {
+			continue
+		}
+
+		for _, attr := range media.Attributes {
+			switch attr.Key {
+			case sdp.AttrKeySSRCGroup:
+				split := strings.Split(attr.Value, " ")
+				if split[0] == sdp.SemanticTokenFlowIdentification {
+					// Add rtx ssrcs to blacklist, to avoid adding them as tracks
+					// Essentially lines like `a=ssrc-group:FID 2231627014 632943048` are processed by this section
+					// as this declares that the second SSRC (632943048) is a rtx repair flow (RFC4588) for the first
+					// (2231627014) as specified in RFC5576
+					if len(split) == 3 {
+						_, err := strconv.ParseUint(split[1], 10, 32)
+						if err != nil {
+							log.Warnf("Failed to parse SSRC: %v", err)
+							continue
+						}
+						rtxRepairFlow, err := strconv.ParseUint(split[2], 10, 32)
+						if err != nil {
+							log.Warnf("Failed to parse SSRC: %v", err)
+							continue
+						}
+						rtxRepairFlows[uint32(rtxRepairFlow)] = true
+						incomingTracks = filterTrackWithSSRC(incomingTracks, SSRC(rtxRepairFlow)) // Remove if rtx was added as track before
+					}
+				}
+
+			// Handle `a=msid:<stream_id> <track_label>` for Unified plan. The first value is the same as MediaStream.id
+			// in the browser and can be used to figure out which tracks belong to the same stream. The browser should
+			// figure this out automatically when an ontrack event is emitted on RTCPeerConnection.
+			case sdp.AttrKeyMsid:
+				split := strings.Split(attr.Value, " ")
+				if len(split) == 2 {
+					streamID = split[0]
+					trackID = split[1]
+				}
+
+			case sdp.AttrKeySSRC:
+				split := strings.Split(attr.Value, " ")
+				ssrc, err := strconv.ParseUint(split[0], 10, 32)
+				if err != nil {
+					log.Warnf("Failed to parse SSRC: %v", err)
+					continue
+				}
+
+				if rtxRepairFlow := rtxRepairFlows[uint32(ssrc)]; rtxRepairFlow {
+					continue // This ssrc is a RTX repair flow, ignore
+				}
+
+				if len(split) == 3 && strings.HasPrefix(split[1], "msid:") {
+					streamID = split[1][len("msid:"):]
+					trackID = split[2]
+				}
+
+				isNewTrack := true
+				trackDetails := &trackDetails{}
+				for i := range incomingTracks {
+					if incomingTracks[i].ssrc == SSRC(ssrc) {
+						trackDetails = &incomingTracks[i]
+						isNewTrack = false
+					}
+				}
+
+				trackDetails.mid = midValue
+				trackDetails.kind = codecType
+				trackDetails.streamID = streamID
+				trackDetails.id = trackID
+				trackDetails.ssrc = SSRC(ssrc)
+
+				if isNewTrack {
+					incomingTracks = append(incomingTracks, *trackDetails)
+				}
+			}
+		}
+
+		if rids := getRids(media); len(rids) != 0 && trackID != "" && streamID != "" {
+			newTrack := trackDetails{
+				mid:      midValue,
+				kind:     codecType,
+				streamID: streamID,
+				id:       trackID,
+				rids:     []string{},
+			}
+			for rid := range rids {
+				newTrack.rids = append(newTrack.rids, rid)
+			}
+
+			incomingTracks = append(incomingTracks, newTrack)
+		}
+	}
+	return incomingTracks
+}
+
+func getRids(media *sdp.MediaDescription) map[string]string {
+	rids := map[string]string{}
+	for _, attr := range media.Attributes {
+		if attr.Key == "rid" {
+			split := strings.Split(attr.Value, " ")
+			rids[split[0]] = attr.Value
+		}
+	}
+	return rids
+}
+
+func addCandidatesToMediaDescriptions(candidates []ICECandidate, m *sdp.MediaDescription, iceGatheringState ICEGatheringState) error {
+	appendCandidateIfNew := func(c ice.Candidate, attributes []sdp.Attribute) {
+		marshaled := c.Marshal()
+		for _, a := range attributes {
+			if marshaled == a.Value {
+				return
+			}
+		}
+
+		m.WithValueAttribute("candidate", marshaled)
+	}
+
+	for _, c := range candidates {
+		candidate, err := c.toICE()
+		if err != nil {
+			return err
+		}
+
+		candidate.SetComponent(1)
+		appendCandidateIfNew(candidate, m.Attributes)
+
+		candidate.SetComponent(2)
+		appendCandidateIfNew(candidate, m.Attributes)
+	}
+
+	if iceGatheringState != ICEGatheringStateComplete {
+		return nil
+	}
+	for _, a := range m.Attributes {
+		if a.Key == "end-of-candidates" {
+			return nil
+		}
+	}
+
+	m.WithPropertyAttribute("end-of-candidates")
+	return nil
+}
+
+func addDataMediaSection(d *sdp.SessionDescription, shouldAddCandidates bool, dtlsFingerprints []DTLSFingerprint, midValue string, iceParams ICEParameters, candidates []ICECandidate, dtlsRole sdp.ConnectionRole, iceGatheringState ICEGatheringState) error {
+	media := (&sdp.MediaDescription{
+		MediaName: sdp.MediaName{
+			Media:   mediaSectionApplication,
+			Port:    sdp.RangedPort{Value: 9},
+			Protos:  []string{"UDP", "DTLS", "SCTP"},
+			Formats: []string{"webrtc-datachannel"},
+		},
+		ConnectionInformation: &sdp.ConnectionInformation{
+			NetworkType: "IN",
+			AddressType: "IP4",
+			Address: &sdp.Address{
+				Address: "0.0.0.0",
+			},
+		},
+	}).
+		WithValueAttribute(sdp.AttrKeyConnectionSetup, dtlsRole.String()).
+		WithValueAttribute(sdp.AttrKeyMID, midValue).
+		WithPropertyAttribute(RTPTransceiverDirectionSendrecv.String()).
+		WithPropertyAttribute("sctp-port:5000").
+		WithICECredentials(iceParams.UsernameFragment, iceParams.Password)
+
+	for _, f := range dtlsFingerprints {
+		media = media.WithFingerprint(f.Algorithm, strings.ToUpper(f.Value))
+	}
+
+	if shouldAddCandidates {
+		if err := addCandidatesToMediaDescriptions(candidates, media, iceGatheringState); err != nil {
+			return err
+		}
+	}
+
+	d.WithMedia(media)
+	return nil
+}
+
+func populateLocalCandidates(sessionDescription *SessionDescription, i *ICEGatherer, iceGatheringState ICEGatheringState) *SessionDescription {
+	if sessionDescription == nil || i == nil {
+		return sessionDescription
+	}
+
+	candidates, err := i.GetLocalCandidates()
+	if err != nil {
+		return sessionDescription
+	}
+
+	parsed := sessionDescription.parsed
+	if len(parsed.MediaDescriptions) > 0 {
+		m := parsed.MediaDescriptions[0]
+		if err = addCandidatesToMediaDescriptions(candidates, m, iceGatheringState); err != nil {
+			return sessionDescription
+		}
+	}
+
+	sdp, err := parsed.Marshal()
+	if err != nil {
+		return sessionDescription
+	}
+
+	return &SessionDescription{
+		SDP:  string(sdp),
+		Type: sessionDescription.Type,
+	}
+}
+
+func addTransceiverSDP(d *sdp.SessionDescription, isPlanB, shouldAddCandidates bool, dtlsFingerprints []DTLSFingerprint, mediaEngine *MediaEngine, midValue string, iceParams ICEParameters, candidates []ICECandidate, dtlsRole sdp.ConnectionRole, iceGatheringState ICEGatheringState, mediaSection mediaSection) (bool, error) {
+	transceivers := mediaSection.transceivers
+	if len(transceivers) < 1 {
+		return false, errSDPZeroTransceivers
+	}
+	// Use the first transceiver to generate the section attributes
+	t := transceivers[0]
+	media := sdp.NewJSEPMediaDescription(t.kind.String(), []string{}).
+		WithValueAttribute(sdp.AttrKeyConnectionSetup, dtlsRole.String()).
+		WithValueAttribute(sdp.AttrKeyMID, midValue).
+		WithICECredentials(iceParams.UsernameFragment, iceParams.Password).
+		WithPropertyAttribute(sdp.AttrKeyRTCPMux).
+		WithPropertyAttribute(sdp.AttrKeyRTCPRsize)
+
+	codecs := mediaEngine.getCodecsByKind(t.kind)
+	for _, codec := range codecs {
+		name := strings.TrimPrefix(codec.MimeType, "audio/")
+		name = strings.TrimPrefix(name, "video/")
+		media.WithCodec(uint8(codec.PayloadType), name, codec.ClockRate, codec.Channels, codec.SDPFmtpLine)
+
+		for _, feedback := range codec.RTPCodecCapability.RTCPFeedback {
+			media.WithValueAttribute("rtcp-fb", fmt.Sprintf("%d %s %s", codec.PayloadType, feedback.Type, feedback.Parameter))
+		}
+	}
+	if len(codecs) == 0 {
+		// Explicitly reject track if we don't have the codec
+		d.WithMedia(&sdp.MediaDescription{
+			MediaName: sdp.MediaName{
+				Media:   t.kind.String(),
+				Port:    sdp.RangedPort{Value: 0},
+				Protos:  []string{"UDP", "TLS", "RTP", "SAVPF"},
+				Formats: []string{"0"},
+			},
+		})
+		return false, nil
+	}
+
+	directions := []RTPTransceiverDirection{}
+	if t.Sender() != nil {
+		directions = append(directions, RTPTransceiverDirectionSendonly)
+	}
+	if t.Receiver() != nil {
+		directions = append(directions, RTPTransceiverDirectionRecvonly)
+	}
+
+	parameters := mediaEngine.getRTPParametersByKind(t.kind, directions)
+	for _, rtpExtension := range parameters.HeaderExtensions {
+		extURL, err := url.Parse(rtpExtension.URI)
+		if err != nil {
+			return false, err
+		}
+		media.WithExtMap(sdp.ExtMap{Value: rtpExtension.ID, URI: extURL})
+	}
+
+	if len(mediaSection.ridMap) > 0 {
+		recvRids := make([]string, 0, len(mediaSection.ridMap))
+
+		for rid := range mediaSection.ridMap {
+			media.WithValueAttribute("rid", rid+" recv")
+			recvRids = append(recvRids, rid)
+		}
+		// Simulcast
+		media.WithValueAttribute("simulcast", "recv "+strings.Join(recvRids, ";"))
+	}
+
+	for _, mt := range transceivers {
+		if mt.Sender() != nil && mt.Sender().Track() != nil {
+			track := mt.Sender().Track()
+			media = media.WithMediaSource(uint32(mt.Sender().ssrc), track.StreamID() /* cname */, track.StreamID() /* streamLabel */, track.ID())
+			if !isPlanB {
+				media = media.WithPropertyAttribute("msid:" + track.StreamID() + " " + track.ID())
+				break
+			}
+		}
+	}
+
+	media = media.WithPropertyAttribute(t.Direction().String())
+
+	for _, fingerprint := range dtlsFingerprints {
+		media = media.WithFingerprint(fingerprint.Algorithm, strings.ToUpper(fingerprint.Value))
+	}
+
+	if shouldAddCandidates {
+		if err := addCandidatesToMediaDescriptions(candidates, media, iceGatheringState); err != nil {
+			return false, err
+		}
+	}
+
+	d.WithMedia(media)
+
+	return true, nil
+}
+
+type mediaSection struct {
+	id           string
+	transceivers []*RTPTransceiver
+	data         bool
+	ridMap       map[string]string
+}
+
+// populateSDP serializes a PeerConnections state into an SDP
+func populateSDP(d *sdp.SessionDescription, isPlanB bool, dtlsFingerprints []DTLSFingerprint, mediaDescriptionFingerprint bool, isICELite bool, mediaEngine *MediaEngine, connectionRole sdp.ConnectionRole, candidates []ICECandidate, iceParams ICEParameters, mediaSections []mediaSection, iceGatheringState ICEGatheringState) (*sdp.SessionDescription, error) {
+	var err error
+	mediaDtlsFingerprints := []DTLSFingerprint{}
+
+	if mediaDescriptionFingerprint {
+		mediaDtlsFingerprints = dtlsFingerprints
+	}
+
+	bundleValue := "BUNDLE"
+	bundleCount := 0
+	appendBundle := func(midValue string) {
+		bundleValue += " " + midValue
+		bundleCount++
+	}
+
+	for i, m := range mediaSections {
+		if m.data && len(m.transceivers) != 0 {
+			return nil, errSDPMediaSectionMediaDataChanInvalid
+		} else if !isPlanB && len(m.transceivers) > 1 {
+			return nil, errSDPMediaSectionMultipleTrackInvalid
+		}
+
+		shouldAddID := true
+		shouldAddCanidates := i == 0
+		if m.data {
+			if err = addDataMediaSection(d, shouldAddCanidates, mediaDtlsFingerprints, m.id, iceParams, candidates, connectionRole, iceGatheringState); err != nil {
+				return nil, err
+			}
+		} else {
+			shouldAddID, err = addTransceiverSDP(d, isPlanB, shouldAddCanidates, mediaDtlsFingerprints, mediaEngine, m.id, iceParams, candidates, connectionRole, iceGatheringState, m)
+			if err != nil {
+				return nil, err
+			}
+		}
+
+		if shouldAddID {
+			appendBundle(m.id)
+		}
+	}
+
+	if !mediaDescriptionFingerprint {
+		for _, fingerprint := range dtlsFingerprints {
+			d.WithFingerprint(fingerprint.Algorithm, strings.ToUpper(fingerprint.Value))
+		}
+	}
+
+	if isICELite {
+		// RFC 5245 S15.3
+		d = d.WithValueAttribute(sdp.AttrKeyICELite, sdp.AttrKeyICELite)
+	}
+
+	return d.WithValueAttribute(sdp.AttrKeyGroup, bundleValue), nil
+}
+
+func getMidValue(media *sdp.MediaDescription) string {
+	for _, attr := range media.Attributes {
+		if attr.Key == "mid" {
+			return attr.Value
+		}
+	}
+	return ""
+}
+
+func descriptionIsPlanB(desc *SessionDescription) bool {
+	if desc == nil || desc.parsed == nil {
+		return false
+	}
+
+	detectionRegex := regexp.MustCompile(`(?i)^(audio|video|data)$`)
+	for _, media := range desc.parsed.MediaDescriptions {
+		if len(detectionRegex.FindStringSubmatch(getMidValue(media))) == 2 {
+			return true
+		}
+	}
+	return false
+}
+
+func getPeerDirection(media *sdp.MediaDescription) RTPTransceiverDirection {
+	for _, a := range media.Attributes {
+		if direction := NewRTPTransceiverDirection(a.Key); direction != RTPTransceiverDirection(Unknown) {
+			return direction
+		}
+	}
+	return RTPTransceiverDirection(Unknown)
+}
+
+func extractFingerprint(desc *sdp.SessionDescription) (string, string, error) {
+	fingerprints := []string{}
+
+	if fingerprint, haveFingerprint := desc.Attribute("fingerprint"); haveFingerprint {
+		fingerprints = append(fingerprints, fingerprint)
+	}
+
+	for _, m := range desc.MediaDescriptions {
+		if fingerprint, haveFingerprint := m.Attribute("fingerprint"); haveFingerprint {
+			fingerprints = append(fingerprints, fingerprint)
+		}
+	}
+
+	if len(fingerprints) < 1 {
+		return "", "", ErrSessionDescriptionNoFingerprint
+	}
+
+	for _, m := range fingerprints {
+		if m != fingerprints[0] {
+			return "", "", ErrSessionDescriptionConflictingFingerprints
+		}
+	}
+
+	parts := strings.Split(fingerprints[0], " ")
+	if len(parts) != 2 {
+		return "", "", ErrSessionDescriptionInvalidFingerprint
+	}
+	return parts[1], parts[0], nil
+}
+
+func extractICEDetails(desc *sdp.SessionDescription) (string, string, []ICECandidate, error) {
+	candidates := []ICECandidate{}
+	remotePwds := []string{}
+	remoteUfrags := []string{}
+
+	if ufrag, haveUfrag := desc.Attribute("ice-ufrag"); haveUfrag {
+		remoteUfrags = append(remoteUfrags, ufrag)
+	}
+	if pwd, havePwd := desc.Attribute("ice-pwd"); havePwd {
+		remotePwds = append(remotePwds, pwd)
+	}
+
+	for _, m := range desc.MediaDescriptions {
+		if ufrag, haveUfrag := m.Attribute("ice-ufrag"); haveUfrag {
+			remoteUfrags = append(remoteUfrags, ufrag)
+		}
+		if pwd, havePwd := m.Attribute("ice-pwd"); havePwd {
+			remotePwds = append(remotePwds, pwd)
+		}
+
+		for _, a := range m.Attributes {
+			if a.IsICECandidate() {
+				c, err := ice.UnmarshalCandidate(a.Value)
+				if err != nil {
+					return "", "", nil, err
+				}
+
+				candidate, err := newICECandidateFromICE(c)
+				if err != nil {
+					return "", "", nil, err
+				}
+
+				candidates = append(candidates, candidate)
+			}
+		}
+	}
+
+	if len(remoteUfrags) == 0 {
+		return "", "", nil, ErrSessionDescriptionMissingIceUfrag
+	} else if len(remotePwds) == 0 {
+		return "", "", nil, ErrSessionDescriptionMissingIcePwd
+	}
+
+	for _, m := range remoteUfrags {
+		if m != remoteUfrags[0] {
+			return "", "", nil, ErrSessionDescriptionConflictingIceUfrag
+		}
+	}
+
+	for _, m := range remotePwds {
+		if m != remotePwds[0] {
+			return "", "", nil, ErrSessionDescriptionConflictingIcePwd
+		}
+	}
+
+	return remoteUfrags[0], remotePwds[0], candidates, nil
+}
+
+func haveApplicationMediaSection(desc *sdp.SessionDescription) bool {
+	for _, m := range desc.MediaDescriptions {
+		if m.MediaName.Media == mediaSectionApplication {
+			return true
+		}
+	}
+
+	return false
+}
+
+func getByMid(searchMid string, desc *SessionDescription) *sdp.MediaDescription {
+	for _, m := range desc.parsed.MediaDescriptions {
+		if mid, ok := m.Attribute(sdp.AttrKeyMID); ok && mid == searchMid {
+			return m
+		}
+	}
+	return nil
+}
+
+// haveDataChannel return MediaDescription with MediaName equal application
+func haveDataChannel(desc *SessionDescription) *sdp.MediaDescription {
+	for _, d := range desc.parsed.MediaDescriptions {
+		if d.MediaName.Media == mediaSectionApplication {
+			return d
+		}
+	}
+	return nil
+}
+
+func codecsFromMediaDescription(m *sdp.MediaDescription) (out []RTPCodecParameters, err error) {
+	s := &sdp.SessionDescription{
+		MediaDescriptions: []*sdp.MediaDescription{m},
+	}
+
+	for _, payloadStr := range m.MediaName.Formats {
+		payloadType, err := strconv.Atoi(payloadStr)
+		if err != nil {
+			return nil, err
+		}
+
+		codec, err := s.GetCodecForPayloadType(uint8(payloadType))
+		if err != nil {
+			if payloadType == 0 {
+				continue
+			}
+			return nil, err
+		}
+
+		channels := uint16(0)
+		val, err := strconv.Atoi(codec.EncodingParameters)
+		if err == nil {
+			channels = uint16(val)
+		}
+
+		feedback := []RTCPFeedback{}
+		for _, raw := range codec.RTCPFeedback {
+			split := strings.Split(raw, " ")
+			entry := RTCPFeedback{Type: split[0]}
+			if len(split) == 2 {
+				entry.Parameter = split[1]
+			}
+
+			feedback = append(feedback, entry)
+		}
+
+		out = append(out, RTPCodecParameters{
+			RTPCodecCapability: RTPCodecCapability{m.MediaName.Media + "/" + codec.Name, codec.ClockRate, channels, codec.Fmtp, feedback},
+			PayloadType:        PayloadType(payloadType),
+		})
+	}
+
+	return out, nil
+}
+
+func rtpExtensionsFromMediaDescription(m *sdp.MediaDescription) (map[string]int, error) {
+	out := map[string]int{}
+
+	for _, a := range m.Attributes {
+		if a.Key == sdp.AttrKeyExtMap {
+			e := sdp.ExtMap{}
+			if err := e.Unmarshal(a.String()); err != nil {
+				return nil, err
+			}
+
+			out[e.URI.String()] = e.Value
+		}
+	}
+
+	return out, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sdpsemantics.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sdpsemantics.go
new file mode 100644
index 000000000..b8d396c9b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sdpsemantics.go
@@ -0,0 +1,74 @@
+package webrtc
+
+import (
+	"encoding/json"
+)
+
+// SDPSemantics determines which style of SDP offers and answers
+// can be used
+type SDPSemantics int
+
+const (
+	// SDPSemanticsUnifiedPlan uses unified-plan offers and answers
+	// (the default in Chrome since M72)
+	// https://tools.ietf.org/html/draft-roach-mmusic-unified-plan-00
+	SDPSemanticsUnifiedPlan SDPSemantics = iota
+
+	// SDPSemanticsPlanB uses plan-b offers and answers
+	// NB: This format should be considered deprecated
+	// https://tools.ietf.org/html/draft-uberti-rtcweb-plan-00
+	SDPSemanticsPlanB
+
+	// SDPSemanticsUnifiedPlanWithFallback prefers unified-plan
+	// offers and answers, but will respond to a plan-b offer
+	// with a plan-b answer
+	SDPSemanticsUnifiedPlanWithFallback
+)
+
+const (
+	sdpSemanticsUnifiedPlanWithFallback = "unified-plan-with-fallback"
+	sdpSemanticsUnifiedPlan             = "unified-plan"
+	sdpSemanticsPlanB                   = "plan-b"
+)
+
+func newSDPSemantics(raw string) SDPSemantics {
+	switch raw {
+	case sdpSemanticsUnifiedPlan:
+		return SDPSemanticsUnifiedPlan
+	case sdpSemanticsPlanB:
+		return SDPSemanticsPlanB
+	case sdpSemanticsUnifiedPlanWithFallback:
+		return SDPSemanticsUnifiedPlanWithFallback
+	default:
+		return SDPSemantics(Unknown)
+	}
+}
+
+func (s SDPSemantics) String() string {
+	switch s {
+	case SDPSemanticsUnifiedPlanWithFallback:
+		return sdpSemanticsUnifiedPlanWithFallback
+	case SDPSemanticsUnifiedPlan:
+		return sdpSemanticsUnifiedPlan
+	case SDPSemanticsPlanB:
+		return sdpSemanticsPlanB
+	default:
+		return ErrUnknownType.Error()
+	}
+}
+
+// UnmarshalJSON parses the JSON-encoded data and stores the result
+func (s *SDPSemantics) UnmarshalJSON(b []byte) error {
+	var val string
+	if err := json.Unmarshal(b, &val); err != nil {
+		return err
+	}
+
+	*s = newSDPSemantics(val)
+	return nil
+}
+
+// MarshalJSON returns the JSON encoding
+func (s SDPSemantics) MarshalJSON() ([]byte, error) {
+	return json.Marshal(s.String())
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sdptype.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sdptype.go
new file mode 100644
index 000000000..bd49b6d14
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sdptype.go
@@ -0,0 +1,100 @@
+package webrtc
+
+import (
+	"encoding/json"
+	"strings"
+)
+
+// SDPType describes the type of an SessionDescription.
+type SDPType int
+
+const (
+	// SDPTypeOffer indicates that a description MUST be treated as an SDP
+	// offer.
+	SDPTypeOffer SDPType = iota + 1
+
+	// SDPTypePranswer indicates that a description MUST be treated as an
+	// SDP answer, but not a final answer. A description used as an SDP
+	// pranswer may be applied as a response to an SDP offer, or an update to
+	// a previously sent SDP pranswer.
+	SDPTypePranswer
+
+	// SDPTypeAnswer indicates that a description MUST be treated as an SDP
+	// final answer, and the offer-answer exchange MUST be considered complete.
+	// A description used as an SDP answer may be applied as a response to an
+	// SDP offer or as an update to a previously sent SDP pranswer.
+	SDPTypeAnswer
+
+	// SDPTypeRollback indicates that a description MUST be treated as
+	// canceling the current SDP negotiation and moving the SDP offer and
+	// answer back to what it was in the previous stable state. Note the
+	// local or remote SDP descriptions in the previous stable state could be
+	// null if there has not yet been a successful offer-answer negotiation.
+	SDPTypeRollback
+)
+
+// This is done this way because of a linter.
+const (
+	sdpTypeOfferStr    = "offer"
+	sdpTypePranswerStr = "pranswer"
+	sdpTypeAnswerStr   = "answer"
+	sdpTypeRollbackStr = "rollback"
+)
+
+// NewSDPType creates an SDPType from a string
+func NewSDPType(raw string) SDPType {
+	switch raw {
+	case sdpTypeOfferStr:
+		return SDPTypeOffer
+	case sdpTypePranswerStr:
+		return SDPTypePranswer
+	case sdpTypeAnswerStr:
+		return SDPTypeAnswer
+	case sdpTypeRollbackStr:
+		return SDPTypeRollback
+	default:
+		return SDPType(Unknown)
+	}
+}
+
+func (t SDPType) String() string {
+	switch t {
+	case SDPTypeOffer:
+		return sdpTypeOfferStr
+	case SDPTypePranswer:
+		return sdpTypePranswerStr
+	case SDPTypeAnswer:
+		return sdpTypeAnswerStr
+	case SDPTypeRollback:
+		return sdpTypeRollbackStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
+
+// MarshalJSON enables JSON marshaling of a SDPType
+func (t SDPType) MarshalJSON() ([]byte, error) {
+	return json.Marshal(t.String())
+}
+
+// UnmarshalJSON enables JSON unmarshaling of a SDPType
+func (t *SDPType) UnmarshalJSON(b []byte) error {
+	var s string
+	if err := json.Unmarshal(b, &s); err != nil {
+		return err
+	}
+	switch strings.ToLower(s) {
+	default:
+		return ErrUnknownType
+	case "offer":
+		*t = SDPTypeOffer
+	case "pranswer":
+		*t = SDPTypePranswer
+	case "answer":
+		*t = SDPTypeAnswer
+	case "rollback":
+		*t = SDPTypeRollback
+	}
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sessiondescription.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sessiondescription.go
new file mode 100644
index 000000000..ea8927e02
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/sessiondescription.go
@@ -0,0 +1,25 @@
+package webrtc
+
+import (
+	"github.com/pion/sdp/v3"
+)
+
+// SessionDescription is used to expose local and remote session descriptions.
+type SessionDescription struct {
+	Type SDPType `json:"type"`
+	SDP  string  `json:"sdp"`
+
+	// This will never be initialized by callers, internal use only
+	parsed *sdp.SessionDescription
+}
+
+// Unmarshal is a helper to deserialize the sdp, and re-use it internally
+// if required
+func (sd *SessionDescription) Unmarshal() (*sdp.SessionDescription, error) {
+	if sd.parsed != nil {
+		return sd.parsed, nil
+	}
+	sd.parsed = &sdp.SessionDescription{}
+	err := sd.parsed.Unmarshal([]byte(sd.SDP))
+	return sd.parsed, err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/settingengine.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/settingengine.go
new file mode 100644
index 000000000..dbbd3f3e8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/settingengine.go
@@ -0,0 +1,257 @@
+// +build !js
+
+package webrtc
+
+import (
+	"io"
+	"time"
+
+	"github.com/pion/ice/v2"
+	"github.com/pion/logging"
+	"github.com/pion/transport/packetio"
+	"github.com/pion/transport/vnet"
+	"golang.org/x/net/proxy"
+)
+
+// SettingEngine allows influencing behavior in ways that are not
+// supported by the WebRTC API. This allows us to support additional
+// use-cases without deviating from the WebRTC API elsewhere.
+type SettingEngine struct {
+	ephemeralUDP struct {
+		PortMin uint16
+		PortMax uint16
+	}
+	detach struct {
+		DataChannels bool
+	}
+	timeout struct {
+		ICEDisconnectedTimeout    *time.Duration
+		ICEFailedTimeout          *time.Duration
+		ICEKeepaliveInterval      *time.Duration
+		ICEHostAcceptanceMinWait  *time.Duration
+		ICESrflxAcceptanceMinWait *time.Duration
+		ICEPrflxAcceptanceMinWait *time.Duration
+		ICERelayAcceptanceMinWait *time.Duration
+	}
+	candidates struct {
+		ICELite                bool
+		ICENetworkTypes        []NetworkType
+		InterfaceFilter        func(string) bool
+		NAT1To1IPs             []string
+		NAT1To1IPCandidateType ICECandidateType
+		MulticastDNSMode       ice.MulticastDNSMode
+		MulticastDNSHostName   string
+		UsernameFragment       string
+		Password               string
+	}
+	replayProtection struct {
+		DTLS  *uint
+		SRTP  *uint
+		SRTCP *uint
+	}
+	sdpMediaLevelFingerprints                 bool
+	answeringDTLSRole                         DTLSRole
+	disableCertificateFingerprintVerification bool
+	disableSRTPReplayProtection               bool
+	disableSRTCPReplayProtection              bool
+	vnet                                      *vnet.Net
+	BufferFactory                             func(packetType packetio.BufferPacketType, ssrc uint32) io.ReadWriteCloser
+	LoggerFactory                             logging.LoggerFactory
+	iceTCPMux                                 ice.TCPMux
+	iceProxyDialer                            proxy.Dialer
+}
+
+// DetachDataChannels enables detaching data channels. When enabled
+// data channels have to be detached in the OnOpen callback using the
+// DataChannel.Detach method.
+func (e *SettingEngine) DetachDataChannels() {
+	e.detach.DataChannels = true
+}
+
+// SetICETimeouts sets the behavior around ICE Timeouts
+// * disconnectedTimeout is the duration without network activity before a Agent is considered disconnected. Default is 5 Seconds
+// * failedTimeout is the duration without network activity before a Agent is considered failed after disconnected. Default is 25 Seconds
+// * keepAliveInterval is how often the ICE Agent sends extra traffic if there is no activity, if media is flowing no traffic will be sent. Default is 2 seconds
+func (e *SettingEngine) SetICETimeouts(disconnectedTimeout, failedTimeout, keepAliveInterval time.Duration) {
+	e.timeout.ICEDisconnectedTimeout = &disconnectedTimeout
+	e.timeout.ICEFailedTimeout = &failedTimeout
+	e.timeout.ICEKeepaliveInterval = &keepAliveInterval
+}
+
+// SetHostAcceptanceMinWait sets the ICEHostAcceptanceMinWait
+func (e *SettingEngine) SetHostAcceptanceMinWait(t time.Duration) {
+	e.timeout.ICEHostAcceptanceMinWait = &t
+}
+
+// SetSrflxAcceptanceMinWait sets the ICESrflxAcceptanceMinWait
+func (e *SettingEngine) SetSrflxAcceptanceMinWait(t time.Duration) {
+	e.timeout.ICESrflxAcceptanceMinWait = &t
+}
+
+// SetPrflxAcceptanceMinWait sets the ICEPrflxAcceptanceMinWait
+func (e *SettingEngine) SetPrflxAcceptanceMinWait(t time.Duration) {
+	e.timeout.ICEPrflxAcceptanceMinWait = &t
+}
+
+// SetRelayAcceptanceMinWait sets the ICERelayAcceptanceMinWait
+func (e *SettingEngine) SetRelayAcceptanceMinWait(t time.Duration) {
+	e.timeout.ICERelayAcceptanceMinWait = &t
+}
+
+// SetEphemeralUDPPortRange limits the pool of ephemeral ports that
+// ICE UDP connections can allocate from. This affects both host candidates,
+// and the local address of server reflexive candidates.
+func (e *SettingEngine) SetEphemeralUDPPortRange(portMin, portMax uint16) error {
+	if portMax < portMin {
+		return ice.ErrPort
+	}
+
+	e.ephemeralUDP.PortMin = portMin
+	e.ephemeralUDP.PortMax = portMax
+	return nil
+}
+
+// SetLite configures whether or not the ice agent should be a lite agent
+func (e *SettingEngine) SetLite(lite bool) {
+	e.candidates.ICELite = lite
+}
+
+// SetNetworkTypes configures what types of candidate networks are supported
+// during local and server reflexive gathering.
+func (e *SettingEngine) SetNetworkTypes(candidateTypes []NetworkType) {
+	e.candidates.ICENetworkTypes = candidateTypes
+}
+
+// SetInterfaceFilter sets the filtering functions when gathering ICE candidates
+// This can be used to exclude certain network interfaces from ICE. Which may be
+// useful if you know a certain interface will never succeed, or if you wish to reduce
+// the amount of information you wish to expose to the remote peer
+func (e *SettingEngine) SetInterfaceFilter(filter func(string) bool) {
+	e.candidates.InterfaceFilter = filter
+}
+
+// SetNAT1To1IPs sets a list of external IP addresses of 1:1 (D)NAT
+// and a candidate type for which the external IP address is used.
+// This is useful when you are host a server using Pion on an AWS EC2 instance
+// which has a private address, behind a 1:1 DNAT with a public IP (e.g.
+// Elastic IP). In this case, you can give the public IP address so that
+// Pion will use the public IP address in its candidate instead of the private
+// IP address. The second argument, candidateType, is used to tell Pion which
+// type of candidate should use the given public IP address.
+// Two types of candidates are supported:
+//
+// ICECandidateTypeHost:
+//		The public IP address will be used for the host candidate in the SDP.
+// ICECandidateTypeSrflx:
+//		A server reflexive candidate with the given public IP address will be added
+// to the SDP.
+//
+// Please note that if you choose ICECandidateTypeHost, then the private IP address
+// won't be advertised with the peer. Also, this option cannot be used along with mDNS.
+//
+// If you choose ICECandidateTypeSrflx, it simply adds a server reflexive candidate
+// with the public IP. The host candidate is still available along with mDNS
+// capabilities unaffected. Also, you cannot give STUN server URL at the same time.
+// It will result in an error otherwise.
+func (e *SettingEngine) SetNAT1To1IPs(ips []string, candidateType ICECandidateType) {
+	e.candidates.NAT1To1IPs = ips
+	e.candidates.NAT1To1IPCandidateType = candidateType
+}
+
+// SetAnsweringDTLSRole sets the DTLS role that is selected when offering
+// The DTLS role controls if the WebRTC Client as a client or server. This
+// may be useful when interacting with non-compliant clients or debugging issues.
+//
+// DTLSRoleActive:
+// 		Act as DTLS Client, send the ClientHello and starts the handshake
+// DTLSRolePassive:
+// 		Act as DTLS Server, wait for ClientHello
+func (e *SettingEngine) SetAnsweringDTLSRole(role DTLSRole) error {
+	if role != DTLSRoleClient && role != DTLSRoleServer {
+		return errSettingEngineSetAnsweringDTLSRole
+	}
+
+	e.answeringDTLSRole = role
+	return nil
+}
+
+// SetVNet sets the VNet instance that is passed to pion/ice
+//
+// VNet is a virtual network layer for Pion, allowing users to simulate
+// different topologies, latency, loss and jitter. This can be useful for
+// learning WebRTC concepts or testing your application in a lab environment
+func (e *SettingEngine) SetVNet(vnet *vnet.Net) {
+	e.vnet = vnet
+}
+
+// SetICEMulticastDNSMode controls if pion/ice queries and generates mDNS ICE Candidates
+func (e *SettingEngine) SetICEMulticastDNSMode(multicastDNSMode ice.MulticastDNSMode) {
+	e.candidates.MulticastDNSMode = multicastDNSMode
+}
+
+// SetMulticastDNSHostName sets a static HostName to be used by pion/ice instead of generating one on startup
+//
+// This should only be used for a single PeerConnection. Having multiple PeerConnections with the same HostName will cause
+// undefined behavior
+func (e *SettingEngine) SetMulticastDNSHostName(hostName string) {
+	e.candidates.MulticastDNSHostName = hostName
+}
+
+// SetICECredentials sets a staic uFrag/uPwd to be used by pion/ice
+//
+// This is useful if you want to do signalless WebRTC session, or having a reproducible environment with static credentials
+func (e *SettingEngine) SetICECredentials(usernameFragment, password string) {
+	e.candidates.UsernameFragment = usernameFragment
+	e.candidates.Password = password
+}
+
+// DisableCertificateFingerprintVerification disables fingerprint verification after DTLS Handshake has finished
+func (e *SettingEngine) DisableCertificateFingerprintVerification(isDisabled bool) {
+	e.disableCertificateFingerprintVerification = isDisabled
+}
+
+// SetDTLSReplayProtectionWindow sets a replay attack protection window size of DTLS connection.
+func (e *SettingEngine) SetDTLSReplayProtectionWindow(n uint) {
+	e.replayProtection.DTLS = &n
+}
+
+// SetSRTPReplayProtectionWindow sets a replay attack protection window size of SRTP session.
+func (e *SettingEngine) SetSRTPReplayProtectionWindow(n uint) {
+	e.disableSRTPReplayProtection = false
+	e.replayProtection.SRTP = &n
+}
+
+// SetSRTCPReplayProtectionWindow sets a replay attack protection window size of SRTCP session.
+func (e *SettingEngine) SetSRTCPReplayProtectionWindow(n uint) {
+	e.disableSRTCPReplayProtection = false
+	e.replayProtection.SRTCP = &n
+}
+
+// DisableSRTPReplayProtection disables SRTP replay protection.
+func (e *SettingEngine) DisableSRTPReplayProtection(isDisabled bool) {
+	e.disableSRTPReplayProtection = isDisabled
+}
+
+// DisableSRTCPReplayProtection disables SRTCP replay protection.
+func (e *SettingEngine) DisableSRTCPReplayProtection(isDisabled bool) {
+	e.disableSRTCPReplayProtection = isDisabled
+}
+
+// SetSDPMediaLevelFingerprints configures the logic for DTLS Fingerprint insertion
+// If true, fingerprints will be inserted in the sdp at the fingerprint
+// level, instead of the session level. This helps with compatibility with
+// some webrtc implementations.
+func (e *SettingEngine) SetSDPMediaLevelFingerprints(sdpMediaLevelFingerprints bool) {
+	e.sdpMediaLevelFingerprints = sdpMediaLevelFingerprints
+}
+
+// SetICETCPMux enables ICE-TCP when set to a non-nil value. Make sure that
+// NetworkTypeTCP4 or NetworkTypeTCP6 is enabled as well.
+func (e *SettingEngine) SetICETCPMux(tcpMux ice.TCPMux) {
+	e.iceTCPMux = tcpMux
+}
+
+// SetICEProxyDialer sets the proxy dialer interface based on golang.org/x/net/proxy.
+func (e *SettingEngine) SetICEProxyDialer(d proxy.Dialer) {
+	e.iceProxyDialer = d
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/settingengine_js.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/settingengine_js.go
new file mode 100644
index 000000000..5b77d6602
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/settingengine_js.go
@@ -0,0 +1,19 @@
+// +build js,wasm
+
+package webrtc
+
+// SettingEngine allows influencing behavior in ways that are not
+// supported by the WebRTC API. This allows us to support additional
+// use-cases without deviating from the WebRTC API elsewhere.
+type SettingEngine struct {
+	detach struct {
+		DataChannels bool
+	}
+}
+
+// DetachDataChannels enables detaching data channels. When enabled
+// data channels have to be detached in the OnOpen callback using the
+// DataChannel.Detach method.
+func (e *SettingEngine) DetachDataChannels() {
+	e.detach.DataChannels = true
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/signalingstate.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/signalingstate.go
new file mode 100644
index 000000000..b64dffca8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/signalingstate.go
@@ -0,0 +1,188 @@
+package webrtc
+
+import (
+	"fmt"
+	"sync/atomic"
+
+	"github.com/pion/webrtc/v3/pkg/rtcerr"
+)
+
+type stateChangeOp int
+
+const (
+	stateChangeOpSetLocal stateChangeOp = iota + 1
+	stateChangeOpSetRemote
+)
+
+func (op stateChangeOp) String() string {
+	switch op {
+	case stateChangeOpSetLocal:
+		return "SetLocal"
+	case stateChangeOpSetRemote:
+		return "SetRemote"
+	default:
+		return "Unknown State Change Operation"
+	}
+}
+
+// SignalingState indicates the signaling state of the offer/answer process.
+type SignalingState int32
+
+const (
+	// SignalingStateStable indicates there is no offer/answer exchange in
+	// progress. This is also the initial state, in which case the local and
+	// remote descriptions are nil.
+	SignalingStateStable SignalingState = iota + 1
+
+	// SignalingStateHaveLocalOffer indicates that a local description, of
+	// type "offer", has been successfully applied.
+	SignalingStateHaveLocalOffer
+
+	// SignalingStateHaveRemoteOffer indicates that a remote description, of
+	// type "offer", has been successfully applied.
+	SignalingStateHaveRemoteOffer
+
+	// SignalingStateHaveLocalPranswer indicates that a remote description
+	// of type "offer" has been successfully applied and a local description
+	// of type "pranswer" has been successfully applied.
+	SignalingStateHaveLocalPranswer
+
+	// SignalingStateHaveRemotePranswer indicates that a local description
+	// of type "offer" has been successfully applied and a remote description
+	// of type "pranswer" has been successfully applied.
+	SignalingStateHaveRemotePranswer
+
+	// SignalingStateClosed indicates The PeerConnection has been closed.
+	SignalingStateClosed
+)
+
+// This is done this way because of a linter.
+const (
+	signalingStateStableStr             = "stable"
+	signalingStateHaveLocalOfferStr     = "have-local-offer"
+	signalingStateHaveRemoteOfferStr    = "have-remote-offer"
+	signalingStateHaveLocalPranswerStr  = "have-local-pranswer"
+	signalingStateHaveRemotePranswerStr = "have-remote-pranswer"
+	signalingStateClosedStr             = "closed"
+)
+
+func newSignalingState(raw string) SignalingState {
+	switch raw {
+	case signalingStateStableStr:
+		return SignalingStateStable
+	case signalingStateHaveLocalOfferStr:
+		return SignalingStateHaveLocalOffer
+	case signalingStateHaveRemoteOfferStr:
+		return SignalingStateHaveRemoteOffer
+	case signalingStateHaveLocalPranswerStr:
+		return SignalingStateHaveLocalPranswer
+	case signalingStateHaveRemotePranswerStr:
+		return SignalingStateHaveRemotePranswer
+	case signalingStateClosedStr:
+		return SignalingStateClosed
+	default:
+		return SignalingState(Unknown)
+	}
+}
+
+func (t SignalingState) String() string {
+	switch t {
+	case SignalingStateStable:
+		return signalingStateStableStr
+	case SignalingStateHaveLocalOffer:
+		return signalingStateHaveLocalOfferStr
+	case SignalingStateHaveRemoteOffer:
+		return signalingStateHaveRemoteOfferStr
+	case SignalingStateHaveLocalPranswer:
+		return signalingStateHaveLocalPranswerStr
+	case SignalingStateHaveRemotePranswer:
+		return signalingStateHaveRemotePranswerStr
+	case SignalingStateClosed:
+		return signalingStateClosedStr
+	default:
+		return ErrUnknownType.Error()
+	}
+}
+
+// Get thread safe read value
+func (t *SignalingState) Get() SignalingState {
+	return SignalingState(atomic.LoadInt32((*int32)(t)))
+}
+
+// Set thread safe write value
+func (t *SignalingState) Set(state SignalingState) {
+	atomic.StoreInt32((*int32)(t), int32(state))
+}
+
+func checkNextSignalingState(cur, next SignalingState, op stateChangeOp, sdpType SDPType) (SignalingState, error) { // nolint:gocognit
+	// Special case for rollbacks
+	if sdpType == SDPTypeRollback && cur == SignalingStateStable {
+		return cur, &rtcerr.InvalidModificationError{
+			Err: errSignalingStateCannotRollback,
+		}
+	}
+
+	// 4.3.1 valid state transitions
+	switch cur { // nolint:exhaustive
+	case SignalingStateStable:
+		switch op {
+		case stateChangeOpSetLocal:
+			// stable->SetLocal(offer)->have-local-offer
+			if sdpType == SDPTypeOffer && next == SignalingStateHaveLocalOffer {
+				return next, nil
+			}
+		case stateChangeOpSetRemote:
+			// stable->SetRemote(offer)->have-remote-offer
+			if sdpType == SDPTypeOffer && next == SignalingStateHaveRemoteOffer {
+				return next, nil
+			}
+		}
+	case SignalingStateHaveLocalOffer:
+		if op == stateChangeOpSetRemote {
+			switch sdpType { // nolint:exhaustive
+			// have-local-offer->SetRemote(answer)->stable
+			case SDPTypeAnswer:
+				if next == SignalingStateStable {
+					return next, nil
+				}
+			// have-local-offer->SetRemote(pranswer)->have-remote-pranswer
+			case SDPTypePranswer:
+				if next == SignalingStateHaveRemotePranswer {
+					return next, nil
+				}
+			}
+		}
+	case SignalingStateHaveRemotePranswer:
+		if op == stateChangeOpSetRemote && sdpType == SDPTypeAnswer {
+			// have-remote-pranswer->SetRemote(answer)->stable
+			if next == SignalingStateStable {
+				return next, nil
+			}
+		}
+	case SignalingStateHaveRemoteOffer:
+		if op == stateChangeOpSetLocal {
+			switch sdpType { // nolint:exhaustive
+			// have-remote-offer->SetLocal(answer)->stable
+			case SDPTypeAnswer:
+				if next == SignalingStateStable {
+					return next, nil
+				}
+			// have-remote-offer->SetLocal(pranswer)->have-local-pranswer
+			case SDPTypePranswer:
+				if next == SignalingStateHaveLocalPranswer {
+					return next, nil
+				}
+			}
+		}
+	case SignalingStateHaveLocalPranswer:
+		if op == stateChangeOpSetLocal && sdpType == SDPTypeAnswer {
+			// have-local-pranswer->SetLocal(answer)->stable
+			if next == SignalingStateStable {
+				return next, nil
+			}
+		}
+	}
+	return cur, &rtcerr.InvalidModificationError{
+		Err: fmt.Errorf("%w: %s->%s(%s)->%s", errSignalingStateProposedTransitionInvalid, cur, op, sdpType, next),
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/srtp_writer_future.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/srtp_writer_future.go
new file mode 100644
index 000000000..fd3d22107
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/srtp_writer_future.go
@@ -0,0 +1,105 @@
+// +build !js
+
+package webrtc
+
+import (
+	"io"
+	"sync/atomic"
+
+	"github.com/pion/rtp"
+	"github.com/pion/srtp/v2"
+)
+
+// srtpWriterFuture blocks Read/Write calls until
+// the SRTP Session is available
+type srtpWriterFuture struct {
+	rtpSender      *RTPSender
+	rtcpReadStream atomic.Value // *srtp.ReadStreamSRTCP
+	rtpWriteStream atomic.Value // *srtp.WriteStreamSRTP
+}
+
+func (s *srtpWriterFuture) init(returnWhenNoSRTP bool) error {
+	if returnWhenNoSRTP {
+		select {
+		case <-s.rtpSender.stopCalled:
+			return io.ErrClosedPipe
+		case <-s.rtpSender.transport.srtpReady:
+		default:
+			return nil
+		}
+	} else {
+		select {
+		case <-s.rtpSender.stopCalled:
+			return io.ErrClosedPipe
+		case <-s.rtpSender.transport.srtpReady:
+		}
+	}
+
+	srtcpSession, err := s.rtpSender.transport.getSRTCPSession()
+	if err != nil {
+		return err
+	}
+
+	rtcpReadStream, err := srtcpSession.OpenReadStream(uint32(s.rtpSender.ssrc))
+	if err != nil {
+		return err
+	}
+
+	srtpSession, err := s.rtpSender.transport.getSRTPSession()
+	if err != nil {
+		return err
+	}
+
+	rtpWriteStream, err := srtpSession.OpenWriteStream()
+	if err != nil {
+		return err
+	}
+
+	s.rtcpReadStream.Store(rtcpReadStream)
+	s.rtpWriteStream.Store(rtpWriteStream)
+	return nil
+}
+
+func (s *srtpWriterFuture) Close() error {
+	if value := s.rtcpReadStream.Load(); value != nil {
+		return value.(*srtp.ReadStreamSRTCP).Close()
+	}
+
+	return nil
+}
+
+func (s *srtpWriterFuture) Read(b []byte) (n int, err error) {
+	if value := s.rtcpReadStream.Load(); value != nil {
+		return value.(*srtp.ReadStreamSRTCP).Read(b)
+	}
+
+	if err := s.init(false); err != nil || s.rtcpReadStream.Load() == nil {
+		return 0, err
+	}
+
+	return s.Read(b)
+}
+
+func (s *srtpWriterFuture) WriteRTP(header *rtp.Header, payload []byte) (int, error) {
+	if value := s.rtpWriteStream.Load(); value != nil {
+		return value.(*srtp.WriteStreamSRTP).WriteRTP(header, payload)
+	}
+
+	if err := s.init(true); err != nil || s.rtpWriteStream.Load() == nil {
+		return 0, err
+	}
+
+	return s.WriteRTP(header, payload)
+}
+
+func (s *srtpWriterFuture) Write(b []byte) (int, error) {
+	if value := s.rtpWriteStream.Load(); value != nil {
+		return value.(*srtp.WriteStreamSRTP).Write(b)
+	}
+
+	if err := s.init(true); err != nil || s.rtpWriteStream.Load() == nil {
+		return 0, err
+	}
+
+	return s.Write(b)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/stats.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/stats.go
new file mode 100644
index 000000000..a218d9e8f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/stats.go
@@ -0,0 +1,1452 @@
+package webrtc
+
+import (
+	"fmt"
+	"sync"
+	"time"
+
+	"github.com/pion/ice/v2"
+)
+
+// A Stats object contains a set of statistics copies out of a monitored component
+// of the WebRTC stack at a specific time.
+type Stats interface{}
+
+// StatsType indicates the type of the object that a Stats object represents.
+type StatsType string
+
+const (
+	// StatsTypeCodec is used by CodecStats.
+	StatsTypeCodec StatsType = "codec"
+
+	// StatsTypeInboundRTP is used by InboundRTPStreamStats.
+	StatsTypeInboundRTP StatsType = "inbound-rtp"
+
+	// StatsTypeOutboundRTP is used by OutboundRTPStreamStats.
+	StatsTypeOutboundRTP StatsType = "outbound-rtp"
+
+	// StatsTypeRemoteInboundRTP is used by RemoteInboundRTPStreamStats.
+	StatsTypeRemoteInboundRTP StatsType = "remote-inbound-rtp"
+
+	// StatsTypeRemoteOutboundRTP is used by RemoteOutboundRTPStreamStats.
+	StatsTypeRemoteOutboundRTP StatsType = "remote-outbound-rtp"
+
+	// StatsTypeCSRC is used by RTPContributingSourceStats.
+	StatsTypeCSRC StatsType = "csrc"
+
+	// StatsTypePeerConnection used by PeerConnectionStats.
+	StatsTypePeerConnection StatsType = "peer-connection"
+
+	// StatsTypeDataChannel is used by DataChannelStats.
+	StatsTypeDataChannel StatsType = "data-channel"
+
+	// StatsTypeStream is used by MediaStreamStats.
+	StatsTypeStream StatsType = "stream"
+
+	// StatsTypeTrack is used by SenderVideoTrackAttachmentStats and SenderAudioTrackAttachmentStats.
+	StatsTypeTrack StatsType = "track"
+
+	// StatsTypeSender is used by by the AudioSenderStats or VideoSenderStats depending on kind.
+	StatsTypeSender StatsType = "sender"
+
+	// StatsTypeReceiver is used by the AudioReceiverStats or VideoReceiverStats depending on kind.
+	StatsTypeReceiver StatsType = "receiver"
+
+	// StatsTypeTransport is used by TransportStats.
+	StatsTypeTransport StatsType = "transport"
+
+	// StatsTypeCandidatePair is used by ICECandidatePairStats.
+	StatsTypeCandidatePair StatsType = "candidate-pair"
+
+	// StatsTypeLocalCandidate is used by ICECandidateStats for the local candidate.
+	StatsTypeLocalCandidate StatsType = "local-candidate"
+
+	// StatsTypeRemoteCandidate is used by ICECandidateStats for the remote candidate.
+	StatsTypeRemoteCandidate StatsType = "remote-candidate"
+
+	// StatsTypeCertificate is used by CertificateStats.
+	StatsTypeCertificate StatsType = "certificate"
+)
+
+// StatsTimestamp is a timestamp represented by the floating point number of
+// milliseconds since the epoch.
+type StatsTimestamp float64
+
+// Time returns the time.Time represented by this timestamp.
+func (s StatsTimestamp) Time() time.Time {
+	millis := float64(s)
+	nanos := int64(millis * float64(time.Millisecond))
+
+	return time.Unix(0, nanos).UTC()
+}
+
+func statsTimestampFrom(t time.Time) StatsTimestamp {
+	return StatsTimestamp(t.UnixNano() / int64(time.Millisecond))
+}
+
+func statsTimestampNow() StatsTimestamp {
+	return statsTimestampFrom(time.Now())
+}
+
+// StatsReport collects Stats objects indexed by their ID.
+type StatsReport map[string]Stats
+
+type statsReportCollector struct {
+	collectingGroup sync.WaitGroup
+	report          StatsReport
+	mux             sync.Mutex
+}
+
+func newStatsReportCollector() *statsReportCollector {
+	return &statsReportCollector{report: make(StatsReport)}
+}
+
+func (src *statsReportCollector) Collecting() {
+	src.collectingGroup.Add(1)
+}
+
+func (src *statsReportCollector) Collect(id string, stats Stats) {
+	src.mux.Lock()
+	defer src.mux.Unlock()
+
+	src.report[id] = stats
+	src.collectingGroup.Done()
+}
+
+func (src *statsReportCollector) Done() {
+	src.collectingGroup.Done()
+}
+
+func (src *statsReportCollector) Ready() StatsReport {
+	src.collectingGroup.Wait()
+	src.mux.Lock()
+	defer src.mux.Unlock()
+	return src.report
+}
+
+// CodecType specifies whether a CodecStats objects represents a media format
+// that is being encoded or decoded
+type CodecType string
+
+const (
+	// CodecTypeEncode means the attached CodecStats represents a media format that
+	// is being encoded, or that the implementation is prepared to encode.
+	CodecTypeEncode CodecType = "encode"
+
+	// CodecTypeDecode means the attached CodecStats represents a media format
+	// that the implementation is prepared to decode.
+	CodecTypeDecode CodecType = "decode"
+)
+
+// CodecStats contains statistics for a codec that is currently being used by RTP streams
+// being sent or received by this PeerConnection object.
+type CodecStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// PayloadType as used in RTP encoding or decoding
+	PayloadType PayloadType `json:"payloadType"`
+
+	// CodecType of this CodecStats
+	CodecType CodecType `json:"codecType"`
+
+	// TransportID is the unique identifier of the transport on which this codec is
+	// being used, which can be used to look up the corresponding TransportStats object.
+	TransportID string `json:"transportId"`
+
+	// MimeType is the codec MIME media type/subtype. e.g., video/vp8 or equivalent.
+	MimeType string `json:"mimeType"`
+
+	// ClockRate represents the media sampling rate.
+	ClockRate uint32 `json:"clockRate"`
+
+	// Channels is 2 for stereo, missing for most other cases.
+	Channels uint8 `json:"channels"`
+
+	// SDPFmtpLine is the a=fmtp line in the SDP corresponding to the codec,
+	// i.e., after the colon following the PT.
+	SDPFmtpLine string `json:"sdpFmtpLine"`
+
+	// Implementation identifies the implementation used. This is useful for diagnosing
+	// interoperability issues.
+	Implementation string `json:"implementation"`
+}
+
+// InboundRTPStreamStats contains statistics for an inbound RTP stream that is
+// currently received with this PeerConnection object.
+type InboundRTPStreamStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// SSRC is the 32-bit unsigned integer value used to identify the source of the
+	// stream of RTP packets that this stats object concerns.
+	SSRC SSRC `json:"ssrc"`
+
+	// Kind is either "audio" or "video"
+	Kind string `json:"kind"`
+
+	// It is a unique identifier that is associated to the object that was inspected
+	// to produce the TransportStats associated with this RTP stream.
+	TransportID string `json:"transportId"`
+
+	// CodecID is a unique identifier that is associated to the object that was inspected
+	// to produce the CodecStats associated with this RTP stream.
+	CodecID string `json:"codecId"`
+
+	// FIRCount counts the total number of Full Intra Request (FIR) packets received
+	// by the sender. This metric is only valid for video and is sent by receiver.
+	FIRCount uint32 `json:"firCount"`
+
+	// PLICount counts the total number of Picture Loss Indication (PLI) packets
+	// received by the sender. This metric is only valid for video and is sent by receiver.
+	PLICount uint32 `json:"pliCount"`
+
+	// NACKCount counts the total number of Negative ACKnowledgement (NACK) packets
+	// received by the sender and is sent by receiver.
+	NACKCount uint32 `json:"nackCount"`
+
+	// SLICount counts the total number of Slice Loss Indication (SLI) packets received
+	// by the sender. This metric is only valid for video and is sent by receiver.
+	SLICount uint32 `json:"sliCount"`
+
+	// QPSum is the sum of the QP values of frames passed. The count of frames is
+	// in FramesDecoded for inbound stream stats, and in FramesEncoded for outbound stream stats.
+	QPSum uint64 `json:"qpSum"`
+
+	// PacketsReceived is the total number of RTP packets received for this SSRC.
+	PacketsReceived uint32 `json:"packetsReceived"`
+
+	// PacketsLost is the total number of RTP packets lost for this SSRC. Note that
+	// because of how this is estimated, it can be negative if more packets are received than sent.
+	PacketsLost int32 `json:"packetsLost"`
+
+	// Jitter is the packet jitter measured in seconds for this SSRC
+	Jitter float64 `json:"jitter"`
+
+	// PacketsDiscarded is the cumulative number of RTP packets discarded by the jitter
+	// buffer due to late or early-arrival, i.e., these packets are not played out.
+	// RTP packets discarded due to packet duplication are not reported in this metric.
+	PacketsDiscarded uint32 `json:"packetsDiscarded"`
+
+	// PacketsRepaired is the cumulative number of lost RTP packets repaired after applying
+	// an error-resilience mechanism. It is measured for the primary source RTP packets
+	// and only counted for RTP packets that have no further chance of repair.
+	PacketsRepaired uint32 `json:"packetsRepaired"`
+
+	// BurstPacketsLost is the cumulative number of RTP packets lost during loss bursts.
+	BurstPacketsLost uint32 `json:"burstPacketsLost"`
+
+	// BurstPacketsDiscarded is the cumulative number of RTP packets discarded during discard bursts.
+	BurstPacketsDiscarded uint32 `json:"burstPacketsDiscarded"`
+
+	// BurstLossCount is the cumulative number of bursts of lost RTP packets.
+	BurstLossCount uint32 `json:"burstLossCount"`
+
+	// BurstDiscardCount is the cumulative number of bursts of discarded RTP packets.
+	BurstDiscardCount uint32 `json:"burstDiscardCount"`
+
+	// BurstLossRate is the fraction of RTP packets lost during bursts to the
+	// total number of RTP packets expected in the bursts.
+	BurstLossRate float64 `json:"burstLossRate"`
+
+	// BurstDiscardRate is the fraction of RTP packets discarded during bursts to
+	// the total number of RTP packets expected in bursts.
+	BurstDiscardRate float64 `json:"burstDiscardRate"`
+
+	// GapLossRate is the fraction of RTP packets lost during the gap periods.
+	GapLossRate float64 `json:"gapLossRate"`
+
+	// GapDiscardRate is the fraction of RTP packets discarded during the gap periods.
+	GapDiscardRate float64 `json:"gapDiscardRate"`
+
+	// TrackID is the identifier of the stats object representing the receiving track,
+	// a ReceiverAudioTrackAttachmentStats or ReceiverVideoTrackAttachmentStats.
+	TrackID string `json:"trackId"`
+
+	// ReceiverID is the stats ID used to look up the AudioReceiverStats or VideoReceiverStats
+	// object receiving this stream.
+	ReceiverID string `json:"receiverId"`
+
+	// RemoteID is used for looking up the remote RemoteOutboundRTPStreamStats object
+	// for the same SSRC.
+	RemoteID string `json:"remoteId"`
+
+	// FramesDecoded represents the total number of frames correctly decoded for this SSRC,
+	// i.e., frames that would be displayed if no frames are dropped. Only valid for video.
+	FramesDecoded uint32 `json:"framesDecoded"`
+
+	// LastPacketReceivedTimestamp represents the timestamp at which the last packet was
+	// received for this SSRC. This differs from Timestamp, which represents the time
+	// at which the statistics were generated by the local endpoint.
+	LastPacketReceivedTimestamp StatsTimestamp `json:"lastPacketReceivedTimestamp"`
+
+	// AverageRTCPInterval is the average RTCP interval between two consecutive compound RTCP packets.
+	// This is calculated by the sending endpoint when sending compound RTCP reports.
+	// Compound packets must contain at least a RTCP RR or SR packet and an SDES packet
+	// with the CNAME item.
+	AverageRTCPInterval float64 `json:"averageRtcpInterval"`
+
+	// FECPacketsReceived is the total number of RTP FEC packets received for this SSRC.
+	// This counter can also be incremented when receiving FEC packets in-band with media packets (e.g., with Opus).
+	FECPacketsReceived uint32 `json:"fecPacketsReceived"`
+
+	// BytesReceived is the total number of bytes received for this SSRC.
+	BytesReceived uint64 `json:"bytesReceived"`
+
+	// PacketsFailedDecryption is the cumulative number of RTP packets that failed
+	// to be decrypted. These packets are not counted by PacketsDiscarded.
+	PacketsFailedDecryption uint32 `json:"packetsFailedDecryption"`
+
+	// PacketsDuplicated is the cumulative number of packets discarded because they
+	// are duplicated. Duplicate packets are not counted in PacketsDiscarded.
+	//
+	// Duplicated packets have the same RTP sequence number and content as a previously
+	// received packet. If multiple duplicates of a packet are received, all of them are counted.
+	// An improved estimate of lost packets can be calculated by adding PacketsDuplicated to PacketsLost.
+	PacketsDuplicated uint32 `json:"packetsDuplicated"`
+
+	// PerDSCPPacketsReceived is the total number of packets received for this SSRC,
+	// per Differentiated Services code point (DSCP) [RFC2474]. DSCPs are identified
+	// as decimal integers in string form. Note that due to network remapping and bleaching,
+	// these numbers are not expected to match the numbers seen on sending. Not all
+	// OSes make this information available.
+	PerDSCPPacketsReceived map[string]uint32 `json:"perDscpPacketsReceived"`
+}
+
+// QualityLimitationReason lists the reason for limiting the resolution and/or framerate.
+// Only valid for video.
+type QualityLimitationReason string
+
+const (
+	// QualityLimitationReasonNone means the resolution and/or framerate is not limited.
+	QualityLimitationReasonNone QualityLimitationReason = "none"
+
+	// QualityLimitationReasonCPU means the resolution and/or framerate is primarily limited due to CPU load.
+	QualityLimitationReasonCPU QualityLimitationReason = "cpu"
+
+	// QualityLimitationReasonBandwidth means the resolution and/or framerate is primarily limited due to congestion cues during bandwidth estimation. Typical, congestion control algorithms use inter-arrival time, round-trip time, packet or other congestion cues to perform bandwidth estimation.
+	QualityLimitationReasonBandwidth QualityLimitationReason = "bandwidth"
+
+	// QualityLimitationReasonOther means the resolution and/or framerate is primarily limited for a reason other than the above.
+	QualityLimitationReasonOther QualityLimitationReason = "other"
+)
+
+// OutboundRTPStreamStats contains statistics for an outbound RTP stream that is
+// currently sent with this PeerConnection object.
+type OutboundRTPStreamStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// SSRC is the 32-bit unsigned integer value used to identify the source of the
+	// stream of RTP packets that this stats object concerns.
+	SSRC SSRC `json:"ssrc"`
+
+	// Kind is either "audio" or "video"
+	Kind string `json:"kind"`
+
+	// It is a unique identifier that is associated to the object that was inspected
+	// to produce the TransportStats associated with this RTP stream.
+	TransportID string `json:"transportId"`
+
+	// CodecID is a unique identifier that is associated to the object that was inspected
+	// to produce the CodecStats associated with this RTP stream.
+	CodecID string `json:"codecId"`
+
+	// FIRCount counts the total number of Full Intra Request (FIR) packets received
+	// by the sender. This metric is only valid for video and is sent by receiver.
+	FIRCount uint32 `json:"firCount"`
+
+	// PLICount counts the total number of Picture Loss Indication (PLI) packets
+	// received by the sender. This metric is only valid for video and is sent by receiver.
+	PLICount uint32 `json:"pliCount"`
+
+	// NACKCount counts the total number of Negative ACKnowledgement (NACK) packets
+	// received by the sender and is sent by receiver.
+	NACKCount uint32 `json:"nackCount"`
+
+	// SLICount counts the total number of Slice Loss Indication (SLI) packets received
+	// by the sender. This metric is only valid for video and is sent by receiver.
+	SLICount uint32 `json:"sliCount"`
+
+	// QPSum is the sum of the QP values of frames passed. The count of frames is
+	// in FramesDecoded for inbound stream stats, and in FramesEncoded for outbound stream stats.
+	QPSum uint64 `json:"qpSum"`
+
+	// PacketsSent is the total number of RTP packets sent for this SSRC.
+	PacketsSent uint32 `json:"packetsSent"`
+
+	// PacketsDiscardedOnSend is the total number of RTP packets for this SSRC that
+	// have been discarded due to socket errors, i.e. a socket error occurred when handing
+	// the packets to the socket. This might happen due to various reasons, including
+	// full buffer or no available memory.
+	PacketsDiscardedOnSend uint32 `json:"packetsDiscardedOnSend"`
+
+	// FECPacketsSent is the total number of RTP FEC packets sent for this SSRC.
+	// This counter can also be incremented when sending FEC packets in-band with
+	// media packets (e.g., with Opus).
+	FECPacketsSent uint32 `json:"fecPacketsSent"`
+
+	// BytesSent is the total number of bytes sent for this SSRC.
+	BytesSent uint64 `json:"bytesSent"`
+
+	// BytesDiscardedOnSend is the total number of bytes for this SSRC that have
+	// been discarded due to socket errors, i.e. a socket error occurred when handing
+	// the packets containing the bytes to the socket. This might happen due to various
+	// reasons, including full buffer or no available memory.
+	BytesDiscardedOnSend uint64 `json:"bytesDiscardedOnSend"`
+
+	// TrackID is the identifier of the stats object representing the current track
+	// attachment to the sender of this stream, a SenderAudioTrackAttachmentStats
+	// or SenderVideoTrackAttachmentStats.
+	TrackID string `json:"trackId"`
+
+	// SenderID is the stats ID used to look up the AudioSenderStats or VideoSenderStats
+	// object sending this stream.
+	SenderID string `json:"senderId"`
+
+	// RemoteID is used for looking up the remote RemoteInboundRTPStreamStats object
+	// for the same SSRC.
+	RemoteID string `json:"remoteId"`
+
+	// LastPacketSentTimestamp represents the timestamp at which the last packet was
+	// sent for this SSRC. This differs from timestamp, which represents the time at
+	// which the statistics were generated by the local endpoint.
+	LastPacketSentTimestamp StatsTimestamp `json:"lastPacketSentTimestamp"`
+
+	// TargetBitrate is the current target bitrate configured for this particular SSRC
+	// and is the Transport Independent Application Specific (TIAS) bitrate [RFC3890].
+	// Typically, the target bitrate is a configuration parameter provided to the codec's
+	// encoder and does not count the size of the IP or other transport layers like TCP or UDP.
+	// It is measured in bits per second and the bitrate is calculated over a 1 second window.
+	TargetBitrate float64 `json:"targetBitrate"`
+
+	// FramesEncoded represents the total number of frames successfully encoded for this RTP media stream.
+	// Only valid for video.
+	FramesEncoded uint32 `json:"framesEncoded"`
+
+	// TotalEncodeTime is the total number of seconds that has been spent encoding the
+	// framesEncoded frames of this stream. The average encode time can be calculated by
+	// dividing this value with FramesEncoded. The time it takes to encode one frame is the
+	// time passed between feeding the encoder a frame and the encoder returning encoded data
+	// for that frame. This does not include any additional time it may take to packetize the resulting data.
+	TotalEncodeTime float64 `json:"totalEncodeTime"`
+
+	// AverageRTCPInterval is the average RTCP interval between two consecutive compound RTCP
+	// packets. This is calculated by the sending endpoint when sending compound RTCP reports.
+	// Compound packets must contain at least a RTCP RR or SR packet and an SDES packet with the CNAME item.
+	AverageRTCPInterval float64 `json:"averageRtcpInterval"`
+
+	// QualityLimitationReason is the current reason for limiting the resolution and/or framerate,
+	// or "none" if not limited. Only valid for video.
+	QualityLimitationReason QualityLimitationReason `json:"qualityLimitationReason"`
+
+	// QualityLimitationDurations is record of the total time, in seconds, that this
+	// stream has spent in each quality limitation state. The record includes a mapping
+	// for all QualityLimitationReason types, including "none". Only valid for video.
+	QualityLimitationDurations map[string]float64 `json:"qualityLimitationDurations"`
+
+	// PerDSCPPacketsSent is the total number of packets sent for this SSRC, per DSCP.
+	// DSCPs are identified as decimal integers in string form.
+	PerDSCPPacketsSent map[string]uint32 `json:"perDscpPacketsSent"`
+}
+
+// RemoteInboundRTPStreamStats contains statistics for the remote endpoint's inbound
+// RTP stream corresponding to an outbound stream that is currently sent with this
+// PeerConnection object. It is measured at the remote endpoint and reported in an RTCP
+// Receiver Report (RR) or RTCP Extended Report (XR).
+type RemoteInboundRTPStreamStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// SSRC is the 32-bit unsigned integer value used to identify the source of the
+	// stream of RTP packets that this stats object concerns.
+	SSRC SSRC `json:"ssrc"`
+
+	// Kind is either "audio" or "video"
+	Kind string `json:"kind"`
+
+	// It is a unique identifier that is associated to the object that was inspected
+	// to produce the TransportStats associated with this RTP stream.
+	TransportID string `json:"transportId"`
+
+	// CodecID is a unique identifier that is associated to the object that was inspected
+	// to produce the CodecStats associated with this RTP stream.
+	CodecID string `json:"codecId"`
+
+	// FIRCount counts the total number of Full Intra Request (FIR) packets received
+	// by the sender. This metric is only valid for video and is sent by receiver.
+	FIRCount uint32 `json:"firCount"`
+
+	// PLICount counts the total number of Picture Loss Indication (PLI) packets
+	// received by the sender. This metric is only valid for video and is sent by receiver.
+	PLICount uint32 `json:"pliCount"`
+
+	// NACKCount counts the total number of Negative ACKnowledgement (NACK) packets
+	// received by the sender and is sent by receiver.
+	NACKCount uint32 `json:"nackCount"`
+
+	// SLICount counts the total number of Slice Loss Indication (SLI) packets received
+	// by the sender. This metric is only valid for video and is sent by receiver.
+	SLICount uint32 `json:"sliCount"`
+
+	// QPSum is the sum of the QP values of frames passed. The count of frames is
+	// in FramesDecoded for inbound stream stats, and in FramesEncoded for outbound stream stats.
+	QPSum uint64 `json:"qpSum"`
+
+	// PacketsReceived is the total number of RTP packets received for this SSRC.
+	PacketsReceived uint32 `json:"packetsReceived"`
+
+	// PacketsLost is the total number of RTP packets lost for this SSRC. Note that
+	// because of how this is estimated, it can be negative if more packets are received than sent.
+	PacketsLost int32 `json:"packetsLost"`
+
+	// Jitter is the packet jitter measured in seconds for this SSRC
+	Jitter float64 `json:"jitter"`
+
+	// PacketsDiscarded is the cumulative number of RTP packets discarded by the jitter
+	// buffer due to late or early-arrival, i.e., these packets are not played out.
+	// RTP packets discarded due to packet duplication are not reported in this metric.
+	PacketsDiscarded uint32 `json:"packetsDiscarded"`
+
+	// PacketsRepaired is the cumulative number of lost RTP packets repaired after applying
+	// an error-resilience mechanism. It is measured for the primary source RTP packets
+	// and only counted for RTP packets that have no further chance of repair.
+	PacketsRepaired uint32 `json:"packetsRepaired"`
+
+	// BurstPacketsLost is the cumulative number of RTP packets lost during loss bursts.
+	BurstPacketsLost uint32 `json:"burstPacketsLost"`
+
+	// BurstPacketsDiscarded is the cumulative number of RTP packets discarded during discard bursts.
+	BurstPacketsDiscarded uint32 `json:"burstPacketsDiscarded"`
+
+	// BurstLossCount is the cumulative number of bursts of lost RTP packets.
+	BurstLossCount uint32 `json:"burstLossCount"`
+
+	// BurstDiscardCount is the cumulative number of bursts of discarded RTP packets.
+	BurstDiscardCount uint32 `json:"burstDiscardCount"`
+
+	// BurstLossRate is the fraction of RTP packets lost during bursts to the
+	// total number of RTP packets expected in the bursts.
+	BurstLossRate float64 `json:"burstLossRate"`
+
+	// BurstDiscardRate is the fraction of RTP packets discarded during bursts to
+	// the total number of RTP packets expected in bursts.
+	BurstDiscardRate float64 `json:"burstDiscardRate"`
+
+	// GapLossRate is the fraction of RTP packets lost during the gap periods.
+	GapLossRate float64 `json:"gapLossRate"`
+
+	// GapDiscardRate is the fraction of RTP packets discarded during the gap periods.
+	GapDiscardRate float64 `json:"gapDiscardRate"`
+
+	// LocalID is used for looking up the local OutboundRTPStreamStats object for the same SSRC.
+	LocalID string `json:"localId"`
+
+	// RoundTripTime is the estimated round trip time for this SSRC based on the
+	// RTCP timestamps in the RTCP Receiver Report (RR) and measured in seconds.
+	RoundTripTime float64 `json:"roundTripTime"`
+
+	// FractionLost is the the fraction packet loss reported for this SSRC.
+	FractionLost float64 `json:"fractionLost"`
+}
+
+// RemoteOutboundRTPStreamStats contains statistics for the remote endpoint's outbound
+// RTP stream corresponding to an inbound stream that is currently received with this
+// PeerConnection object. It is measured at the remote endpoint and reported in an
+// RTCP Sender Report (SR).
+type RemoteOutboundRTPStreamStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// SSRC is the 32-bit unsigned integer value used to identify the source of the
+	// stream of RTP packets that this stats object concerns.
+	SSRC SSRC `json:"ssrc"`
+
+	// Kind is either "audio" or "video"
+	Kind string `json:"kind"`
+
+	// It is a unique identifier that is associated to the object that was inspected
+	// to produce the TransportStats associated with this RTP stream.
+	TransportID string `json:"transportId"`
+
+	// CodecID is a unique identifier that is associated to the object that was inspected
+	// to produce the CodecStats associated with this RTP stream.
+	CodecID string `json:"codecId"`
+
+	// FIRCount counts the total number of Full Intra Request (FIR) packets received
+	// by the sender. This metric is only valid for video and is sent by receiver.
+	FIRCount uint32 `json:"firCount"`
+
+	// PLICount counts the total number of Picture Loss Indication (PLI) packets
+	// received by the sender. This metric is only valid for video and is sent by receiver.
+	PLICount uint32 `json:"pliCount"`
+
+	// NACKCount counts the total number of Negative ACKnowledgement (NACK) packets
+	// received by the sender and is sent by receiver.
+	NACKCount uint32 `json:"nackCount"`
+
+	// SLICount counts the total number of Slice Loss Indication (SLI) packets received
+	// by the sender. This metric is only valid for video and is sent by receiver.
+	SLICount uint32 `json:"sliCount"`
+
+	// QPSum is the sum of the QP values of frames passed. The count of frames is
+	// in FramesDecoded for inbound stream stats, and in FramesEncoded for outbound stream stats.
+	QPSum uint64 `json:"qpSum"`
+
+	// PacketsSent is the total number of RTP packets sent for this SSRC.
+	PacketsSent uint32 `json:"packetsSent"`
+
+	// PacketsDiscardedOnSend is the total number of RTP packets for this SSRC that
+	// have been discarded due to socket errors, i.e. a socket error occurred when handing
+	// the packets to the socket. This might happen due to various reasons, including
+	// full buffer or no available memory.
+	PacketsDiscardedOnSend uint32 `json:"packetsDiscardedOnSend"`
+
+	// FECPacketsSent is the total number of RTP FEC packets sent for this SSRC.
+	// This counter can also be incremented when sending FEC packets in-band with
+	// media packets (e.g., with Opus).
+	FECPacketsSent uint32 `json:"fecPacketsSent"`
+
+	// BytesSent is the total number of bytes sent for this SSRC.
+	BytesSent uint64 `json:"bytesSent"`
+
+	// BytesDiscardedOnSend is the total number of bytes for this SSRC that have
+	// been discarded due to socket errors, i.e. a socket error occurred when handing
+	// the packets containing the bytes to the socket. This might happen due to various
+	// reasons, including full buffer or no available memory.
+	BytesDiscardedOnSend uint64 `json:"bytesDiscardedOnSend"`
+
+	// LocalID is used for looking up the local InboundRTPStreamStats object for the same SSRC.
+	LocalID string `json:"localId"`
+
+	// RemoteTimestamp represents the remote timestamp at which these statistics were
+	// sent by the remote endpoint. This differs from timestamp, which represents the
+	// time at which the statistics were generated or received by the local endpoint.
+	// The RemoteTimestamp, if present, is derived from the NTP timestamp in an RTCP
+	// Sender Report (SR) packet, which reflects the remote endpoint's clock.
+	// That clock may not be synchronized with the local clock.
+	RemoteTimestamp StatsTimestamp `json:"remoteTimestamp"`
+}
+
+// RTPContributingSourceStats contains statistics for a contributing source (CSRC) that contributed
+// to an inbound RTP stream.
+type RTPContributingSourceStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// ContributorSSRC is the SSRC identifier of the contributing source represented
+	// by this stats object. It is a 32-bit unsigned integer that appears in the CSRC
+	// list of any packets the relevant source contributed to.
+	ContributorSSRC SSRC `json:"contributorSsrc"`
+
+	// InboundRTPStreamID is the ID of the InboundRTPStreamStats object representing
+	// the inbound RTP stream that this contributing source is contributing to.
+	InboundRTPStreamID string `json:"inboundRtpStreamId"`
+
+	// PacketsContributedTo is the total number of RTP packets that this contributing
+	// source contributed to. This value is incremented each time a packet is counted
+	// by InboundRTPStreamStats.packetsReceived, and the packet's CSRC list contains
+	// the SSRC identifier of this contributing source, ContributorSSRC.
+	PacketsContributedTo uint32 `json:"packetsContributedTo"`
+
+	// AudioLevel is present if the last received RTP packet that this source contributed
+	// to contained an [RFC6465] mixer-to-client audio level header extension. The value
+	// of audioLevel is between 0..1 (linear), where 1.0 represents 0 dBov, 0 represents
+	// silence, and 0.5 represents approximately 6 dBSPL change in the sound pressure level from 0 dBov.
+	AudioLevel float64 `json:"audioLevel"`
+}
+
+// PeerConnectionStats contains statistics related to the PeerConnection object.
+type PeerConnectionStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// DataChannelsOpened represents the number of unique DataChannels that have
+	// entered the "open" state during their lifetime.
+	DataChannelsOpened uint32 `json:"dataChannelsOpened"`
+
+	// DataChannelsClosed represents the number of unique DataChannels that have
+	// left the "open" state during their lifetime (due to being closed by either
+	// end or the underlying transport being closed). DataChannels that transition
+	// from "connecting" to "closing" or "closed" without ever being "open"
+	// are not counted in this number.
+	DataChannelsClosed uint32 `json:"dataChannelsClosed"`
+
+	// DataChannelsRequested Represents the number of unique DataChannels returned
+	// from a successful createDataChannel() call on the PeerConnection. If the
+	// underlying data transport is not established, these may be in the "connecting" state.
+	DataChannelsRequested uint32 `json:"dataChannelsRequested"`
+
+	// DataChannelsAccepted represents the number of unique DataChannels signaled
+	// in a "datachannel" event on the PeerConnection.
+	DataChannelsAccepted uint32 `json:"dataChannelsAccepted"`
+}
+
+// DataChannelStats contains statistics related to each DataChannel ID.
+type DataChannelStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// Label is the "label" value of the DataChannel object.
+	Label string `json:"label"`
+
+	// Protocol is the "protocol" value of the DataChannel object.
+	Protocol string `json:"protocol"`
+
+	// DataChannelIdentifier is the "id" attribute of the DataChannel object.
+	DataChannelIdentifier int32 `json:"dataChannelIdentifier"`
+
+	// TransportID the ID of the TransportStats object for transport used to carry this datachannel.
+	TransportID string `json:"transportId"`
+
+	// State is the "readyState" value of the DataChannel object.
+	State DataChannelState `json:"state"`
+
+	// MessagesSent represents the total number of API "message" events sent.
+	MessagesSent uint32 `json:"messagesSent"`
+
+	// BytesSent represents the total number of payload bytes sent on this
+	// datachannel not including headers or padding.
+	BytesSent uint64 `json:"bytesSent"`
+
+	// MessagesReceived represents the total number of API "message" events received.
+	MessagesReceived uint32 `json:"messagesReceived"`
+
+	// BytesReceived represents the total number of bytes received on this
+	// datachannel not including headers or padding.
+	BytesReceived uint64 `json:"bytesReceived"`
+}
+
+// MediaStreamStats contains statistics related to a specific MediaStream.
+type MediaStreamStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// StreamIdentifier is the "id" property of the MediaStream
+	StreamIdentifier string `json:"streamIdentifier"`
+
+	// TrackIDs is a list of the identifiers of the stats object representing the
+	// stream's tracks, either ReceiverAudioTrackAttachmentStats or ReceiverVideoTrackAttachmentStats.
+	TrackIDs []string `json:"trackIds"`
+}
+
+// AudioSenderStats represents the stats about one audio sender of a PeerConnection
+// object for which one calls GetStats.
+//
+// It appears in the stats as soon as the RTPSender is added by either AddTrack
+// or AddTransceiver, or by media negotiation.
+type AudioSenderStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// TrackIdentifier represents the id property of the track.
+	TrackIdentifier string `json:"trackIdentifier"`
+
+	// RemoteSource is true if the source is remote, for instance if it is sourced
+	// from another host via a PeerConnection. False otherwise. Only applicable for 'track' stats.
+	RemoteSource bool `json:"remoteSource"`
+
+	// Ended reflects the "ended" state of the track.
+	Ended bool `json:"ended"`
+
+	// Kind is either "audio" or "video". This reflects the "kind" attribute of the MediaStreamTrack.
+	Kind string `json:"kind"`
+
+	// AudioLevel represents the output audio level of the track.
+	//
+	// The value is a value between 0..1 (linear), where 1.0 represents 0 dBov,
+	// 0 represents silence, and 0.5 represents approximately 6 dBSPL change in
+	// the sound pressure level from 0 dBov.
+	//
+	// If the track is sourced from an Receiver, does no audio processing, has a
+	// constant level, and has a volume setting of 1.0, the audio level is expected
+	// to be the same as the audio level of the source SSRC, while if the volume setting
+	// is 0.5, the AudioLevel is expected to be half that value.
+	//
+	// For outgoing audio tracks, the AudioLevel is the level of the audio being sent.
+	AudioLevel float64 `json:"audioLevel"`
+
+	// TotalAudioEnergy is the total energy of all the audio samples sent/received
+	// for this object, calculated by duration * Math.pow(energy/maxEnergy, 2) for
+	// each audio sample seen.
+	TotalAudioEnergy float64 `json:"totalAudioEnergy"`
+
+	// VoiceActivityFlag represents whether the last RTP packet sent or played out
+	// by this track contained voice activity or not based on the presence of the
+	// V bit in the extension header, as defined in [RFC6464].
+	//
+	// This value indicates the voice activity in the latest RTP packet played out
+	// from a given SSRC, and is defined in RTPSynchronizationSource.voiceActivityFlag.
+	VoiceActivityFlag bool `json:"voiceActivityFlag"`
+
+	// TotalSamplesDuration represents the total duration in seconds of all samples
+	// that have sent or received (and thus counted by TotalSamplesSent or TotalSamplesReceived).
+	// Can be used with TotalAudioEnergy to compute an average audio level over different intervals.
+	TotalSamplesDuration float64 `json:"totalSamplesDuration"`
+
+	// EchoReturnLoss is only present while the sender is sending a track sourced from
+	// a microphone where echo cancellation is applied. Calculated in decibels.
+	EchoReturnLoss float64 `json:"echoReturnLoss"`
+
+	// EchoReturnLossEnhancement is only present while the sender is sending a track
+	// sourced from a microphone where echo cancellation is applied. Calculated in decibels.
+	EchoReturnLossEnhancement float64 `json:"echoReturnLossEnhancement"`
+
+	// TotalSamplesSent is the total number of samples that have been sent by this sender.
+	TotalSamplesSent uint64 `json:"totalSamplesSent"`
+}
+
+// SenderAudioTrackAttachmentStats object represents the stats about one attachment
+// of an audio MediaStreamTrack to the PeerConnection object for which one calls GetStats.
+//
+// It appears in the stats as soon as it is attached (via AddTrack, via AddTransceiver,
+// via ReplaceTrack on an RTPSender object).
+//
+// If an audio track is attached twice (via AddTransceiver or ReplaceTrack), there
+// will be two SenderAudioTrackAttachmentStats objects, one for each attachment.
+// They will have the same "TrackIdentifier" attribute, but different "ID" attributes.
+//
+// If the track is detached from the PeerConnection (via removeTrack or via replaceTrack),
+// it continues to appear, but with the "ObjectDeleted" member set to true.
+type SenderAudioTrackAttachmentStats AudioSenderStats
+
+// VideoSenderStats represents the stats about one video sender of a PeerConnection
+// object for which one calls GetStats.
+//
+// It appears in the stats as soon as the sender is added by either AddTrack or
+// AddTransceiver, or by media negotiation.
+type VideoSenderStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// FramesCaptured represents the total number of frames captured, before encoding,
+	// for this RTPSender (or for this MediaStreamTrack, if type is "track"). For example,
+	// if type is "sender" and this sender's track represents a camera, then this is the
+	// number of frames produced by the camera for this track while being sent by this sender,
+	// combined with the number of frames produced by all tracks previously attached to this
+	// sender while being sent by this sender. Framerates can vary due to hardware limitations
+	// or environmental factors such as lighting conditions.
+	FramesCaptured uint32 `json:"framesCaptured"`
+
+	// FramesSent represents the total number of frames sent by this RTPSender
+	// (or for this MediaStreamTrack, if type is "track").
+	FramesSent uint32 `json:"framesSent"`
+
+	// HugeFramesSent represents the total number of huge frames sent by this RTPSender
+	// (or for this MediaStreamTrack, if type is "track"). Huge frames, by definition,
+	// are frames that have an encoded size at least 2.5 times the average size of the frames.
+	// The average size of the frames is defined as the target bitrate per second divided
+	// by the target fps at the time the frame was encoded. These are usually complex
+	// to encode frames with a lot of changes in the picture. This can be used to estimate,
+	// e.g slide changes in the streamed presentation. If a huge frame is also a key frame,
+	// then both counters HugeFramesSent and KeyFramesSent are incremented.
+	HugeFramesSent uint32 `json:"hugeFramesSent"`
+
+	// KeyFramesSent represents the total number of key frames sent by this RTPSender
+	// (or for this MediaStreamTrack, if type is "track"), such as Infra-frames in
+	// VP8 [RFC6386] or I-frames in H.264 [RFC6184]. This is a subset of FramesSent.
+	// FramesSent - KeyFramesSent gives you the number of delta frames sent.
+	KeyFramesSent uint32 `json:"keyFramesSent"`
+}
+
+// SenderVideoTrackAttachmentStats represents the stats about one attachment of a
+// video MediaStreamTrack to the PeerConnection object for which one calls GetStats.
+//
+// It appears in the stats as soon as it is attached (via AddTrack, via AddTransceiver,
+// via ReplaceTrack on an RTPSender object).
+//
+// If a video track is attached twice (via AddTransceiver or ReplaceTrack), there
+// will be two SenderVideoTrackAttachmentStats objects, one for each attachment.
+// They will have the same "TrackIdentifier" attribute, but different "ID" attributes.
+//
+// If the track is detached from the PeerConnection (via RemoveTrack or via ReplaceTrack),
+// it continues to appear, but with the "ObjectDeleted" member set to true.
+type SenderVideoTrackAttachmentStats VideoSenderStats
+
+// AudioReceiverStats contains audio metrics related to a specific receiver.
+type AudioReceiverStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// AudioLevel represents the output audio level of the track.
+	//
+	// The value is a value between 0..1 (linear), where 1.0 represents 0 dBov,
+	// 0 represents silence, and 0.5 represents approximately 6 dBSPL change in
+	// the sound pressure level from 0 dBov.
+	//
+	// If the track is sourced from an Receiver, does no audio processing, has a
+	// constant level, and has a volume setting of 1.0, the audio level is expected
+	// to be the same as the audio level of the source SSRC, while if the volume setting
+	// is 0.5, the AudioLevel is expected to be half that value.
+	//
+	// For outgoing audio tracks, the AudioLevel is the level of the audio being sent.
+	AudioLevel float64 `json:"audioLevel"`
+
+	// TotalAudioEnergy is the total energy of all the audio samples sent/received
+	// for this object, calculated by duration * Math.pow(energy/maxEnergy, 2) for
+	// each audio sample seen.
+	TotalAudioEnergy float64 `json:"totalAudioEnergy"`
+
+	// VoiceActivityFlag represents whether the last RTP packet sent or played out
+	// by this track contained voice activity or not based on the presence of the
+	// V bit in the extension header, as defined in [RFC6464].
+	//
+	// This value indicates the voice activity in the latest RTP packet played out
+	// from a given SSRC, and is defined in RTPSynchronizationSource.voiceActivityFlag.
+	VoiceActivityFlag bool `json:"voiceActivityFlag"`
+
+	// TotalSamplesDuration represents the total duration in seconds of all samples
+	// that have sent or received (and thus counted by TotalSamplesSent or TotalSamplesReceived).
+	// Can be used with TotalAudioEnergy to compute an average audio level over different intervals.
+	TotalSamplesDuration float64 `json:"totalSamplesDuration"`
+
+	// EstimatedPlayoutTimestamp is the estimated playout time of this receiver's
+	// track. The playout time is the NTP timestamp of the last playable sample that
+	// has a known timestamp (from an RTCP SR packet mapping RTP timestamps to NTP
+	// timestamps), extrapolated with the time elapsed since it was ready to be played out.
+	// This is the "current time" of the track in NTP clock time of the sender and
+	// can be present even if there is no audio currently playing.
+	//
+	// This can be useful for estimating how much audio and video is out of
+	// sync for two tracks from the same source:
+	// 		AudioTrackStats.EstimatedPlayoutTimestamp - VideoTrackStats.EstimatedPlayoutTimestamp
+	EstimatedPlayoutTimestamp StatsTimestamp `json:"estimatedPlayoutTimestamp"`
+
+	// JitterBufferDelay is the sum of the time, in seconds, each sample takes from
+	// the time it is received and to the time it exits the jitter buffer.
+	// This increases upon samples exiting, having completed their time in the buffer
+	// (incrementing JitterBufferEmittedCount). The average jitter buffer delay can
+	// be calculated by dividing the JitterBufferDelay with the JitterBufferEmittedCount.
+	JitterBufferDelay float64 `json:"jitterBufferDelay"`
+
+	// JitterBufferEmittedCount is the total number of samples that have come out
+	// of the jitter buffer (increasing JitterBufferDelay).
+	JitterBufferEmittedCount uint64 `json:"jitterBufferEmittedCount"`
+
+	// TotalSamplesReceived is the total number of samples that have been received
+	// by this receiver. This includes ConcealedSamples.
+	TotalSamplesReceived uint64 `json:"totalSamplesReceived"`
+
+	// ConcealedSamples is the total number of samples that are concealed samples.
+	// A concealed sample is a sample that is based on data that was synthesized
+	// to conceal packet loss and does not represent incoming data.
+	ConcealedSamples uint64 `json:"concealedSamples"`
+
+	// ConcealmentEvents is the number of concealment events. This counter increases
+	// every time a concealed sample is synthesized after a non-concealed sample.
+	// That is, multiple consecutive concealed samples will increase the concealedSamples
+	// count multiple times but is a single concealment event.
+	ConcealmentEvents uint64 `json:"concealmentEvents"`
+}
+
+// VideoReceiverStats contains video metrics related to a specific receiver.
+type VideoReceiverStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// FrameWidth represents the width of the last processed frame for this track.
+	// Before the first frame is processed this attribute is missing.
+	FrameWidth uint32 `json:"frameWidth"`
+
+	// FrameHeight represents the height of the last processed frame for this track.
+	// Before the first frame is processed this attribute is missing.
+	FrameHeight uint32 `json:"frameHeight"`
+
+	// FramesPerSecond represents the nominal FPS value before the degradation preference
+	// is applied. It is the number of complete frames in the last second. For sending
+	// tracks it is the current captured FPS and for the receiving tracks it is the
+	// current decoding framerate.
+	FramesPerSecond float64 `json:"framesPerSecond"`
+
+	// EstimatedPlayoutTimestamp is the estimated playout time of this receiver's
+	// track. The playout time is the NTP timestamp of the last playable sample that
+	// has a known timestamp (from an RTCP SR packet mapping RTP timestamps to NTP
+	// timestamps), extrapolated with the time elapsed since it was ready to be played out.
+	// This is the "current time" of the track in NTP clock time of the sender and
+	// can be present even if there is no audio currently playing.
+	//
+	// This can be useful for estimating how much audio and video is out of
+	// sync for two tracks from the same source:
+	// 		AudioTrackStats.EstimatedPlayoutTimestamp - VideoTrackStats.EstimatedPlayoutTimestamp
+	EstimatedPlayoutTimestamp StatsTimestamp `json:"estimatedPlayoutTimestamp"`
+
+	// JitterBufferDelay is the sum of the time, in seconds, each sample takes from
+	// the time it is received and to the time it exits the jitter buffer.
+	// This increases upon samples exiting, having completed their time in the buffer
+	// (incrementing JitterBufferEmittedCount). The average jitter buffer delay can
+	// be calculated by dividing the JitterBufferDelay with the JitterBufferEmittedCount.
+	JitterBufferDelay float64 `json:"jitterBufferDelay"`
+
+	// JitterBufferEmittedCount is the total number of samples that have come out
+	// of the jitter buffer (increasing JitterBufferDelay).
+	JitterBufferEmittedCount uint64 `json:"jitterBufferEmittedCount"`
+
+	// FramesReceived Represents the total number of complete frames received for
+	// this receiver. This metric is incremented when the complete frame is received.
+	FramesReceived uint32 `json:"framesReceived"`
+
+	// KeyFramesReceived represents the total number of complete key frames received
+	// for this MediaStreamTrack, such as Infra-frames in VP8 [RFC6386] or I-frames
+	// in H.264 [RFC6184]. This is a subset of framesReceived. `framesReceived - keyFramesReceived`
+	// gives you the number of delta frames received. This metric is incremented when
+	// the complete key frame is received. It is not incremented if a partial key
+	// frames is received and sent for decoding, i.e., the frame could not be recovered
+	// via retransmission or FEC.
+	KeyFramesReceived uint32 `json:"keyFramesReceived"`
+
+	// FramesDecoded represents the total number of frames correctly decoded for this
+	// SSRC, i.e., frames that would be displayed if no frames are dropped.
+	FramesDecoded uint32 `json:"framesDecoded"`
+
+	// FramesDropped is the total number of frames dropped predecode or dropped
+	// because the frame missed its display deadline for this receiver's track.
+	FramesDropped uint32 `json:"framesDropped"`
+
+	// The cumulative number of partial frames lost. This metric is incremented when
+	// the frame is sent to the decoder. If the partial frame is received and recovered
+	// via retransmission or FEC before decoding, the FramesReceived counter is incremented.
+	PartialFramesLost uint32 `json:"partialFramesLost"`
+
+	// FullFramesLost is the cumulative number of full frames lost.
+	FullFramesLost uint32 `json:"fullFramesLost"`
+}
+
+// TransportStats contains transport statistics related to the PeerConnection object.
+type TransportStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// PacketsSent represents the total number of packets sent over this transport.
+	PacketsSent uint32 `json:"packetsSent"`
+
+	// PacketsReceived represents the total number of packets received on this transport.
+	PacketsReceived uint32 `json:"packetsReceived"`
+
+	// BytesSent represents the total number of payload bytes sent on this PeerConnection
+	// not including headers or padding.
+	BytesSent uint64 `json:"bytesSent"`
+
+	// BytesReceived represents the total number of bytes received on this PeerConnection
+	// not including headers or padding.
+	BytesReceived uint64 `json:"bytesReceived"`
+
+	// RTCPTransportStatsID is the ID of the transport that gives stats for the RTCP
+	// component If RTP and RTCP are not multiplexed and this record has only
+	// the RTP component stats.
+	RTCPTransportStatsID string `json:"rtcpTransportStatsId"`
+
+	// ICERole is set to the current value of the "role" attribute of the underlying
+	// DTLSTransport's "transport".
+	ICERole ICERole `json:"iceRole"`
+
+	// DTLSState is set to the current value of the "state" attribute of the underlying DTLSTransport.
+	DTLSState DTLSTransportState `json:"dtlsState"`
+
+	// SelectedCandidatePairID is a unique identifier that is associated to the object
+	// that was inspected to produce the ICECandidatePairStats associated with this transport.
+	SelectedCandidatePairID string `json:"selectedCandidatePairId"`
+
+	// LocalCertificateID is the ID of the CertificateStats for the local certificate.
+	// Present only if DTLS is negotiated.
+	LocalCertificateID string `json:"localCertificateId"`
+
+	// LocalCertificateID is the ID of the CertificateStats for the remote certificate.
+	// Present only if DTLS is negotiated.
+	RemoteCertificateID string `json:"remoteCertificateId"`
+
+	// DTLSCipher is the descriptive name of the cipher suite used for the DTLS transport,
+	// as defined in the "Description" column of the IANA cipher suite registry.
+	DTLSCipher string `json:"dtlsCipher"`
+
+	// SRTPCipher is the descriptive name of the protection profile used for the SRTP
+	// transport, as defined in the "Profile" column of the IANA DTLS-SRTP protection
+	// profile registry.
+	SRTPCipher string `json:"srtpCipher"`
+}
+
+// StatsICECandidatePairState is the state of an ICE candidate pair used in the
+// ICECandidatePairStats object.
+type StatsICECandidatePairState string
+
+func toStatsICECandidatePairState(state ice.CandidatePairState) (StatsICECandidatePairState, error) {
+	switch state {
+	case ice.CandidatePairStateWaiting:
+		return StatsICECandidatePairStateWaiting, nil
+	case ice.CandidatePairStateInProgress:
+		return StatsICECandidatePairStateInProgress, nil
+	case ice.CandidatePairStateFailed:
+		return StatsICECandidatePairStateFailed, nil
+	case ice.CandidatePairStateSucceeded:
+		return StatsICECandidatePairStateSucceeded, nil
+	default:
+		// NOTE: this should never happen[tm]
+		err := fmt.Errorf("%w: %s", errStatsICECandidateStateInvalid, state.String())
+		return StatsICECandidatePairState("Unknown"), err
+	}
+}
+
+const (
+	// StatsICECandidatePairStateFrozen means a check for this pair hasn't been
+	// performed, and it can't yet be performed until some other check succeeds,
+	// allowing this pair to unfreeze and move into the Waiting state.
+	StatsICECandidatePairStateFrozen StatsICECandidatePairState = "frozen"
+
+	// StatsICECandidatePairStateWaiting means a check has not been performed for
+	// this pair, and can be performed as soon as it is the highest-priority Waiting
+	// pair on the check list.
+	StatsICECandidatePairStateWaiting StatsICECandidatePairState = "waiting"
+
+	// StatsICECandidatePairStateInProgress means a check has been sent for this pair,
+	// but the transaction is in progress.
+	StatsICECandidatePairStateInProgress StatsICECandidatePairState = "in-progress"
+
+	// StatsICECandidatePairStateFailed means a check for this pair was already done
+	// and failed, either never producing any response or producing an unrecoverable
+	// failure response.
+	StatsICECandidatePairStateFailed StatsICECandidatePairState = "failed"
+
+	// StatsICECandidatePairStateSucceeded means a check for this pair was already
+	// done and produced a successful result.
+	StatsICECandidatePairStateSucceeded StatsICECandidatePairState = "succeeded"
+)
+
+// ICECandidatePairStats contains ICE candidate pair statistics related
+// to the ICETransport objects.
+type ICECandidatePairStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// TransportID is a unique identifier that is associated to the object that
+	// was inspected to produce the TransportStats associated with this candidate pair.
+	TransportID string `json:"transportId"`
+
+	// LocalCandidateID is a unique identifier that is associated to the object
+	// that was inspected to produce the ICECandidateStats for the local candidate
+	// associated with this candidate pair.
+	LocalCandidateID string `json:"localCandidateId"`
+
+	// RemoteCandidateID is a unique identifier that is associated to the object
+	// that was inspected to produce the ICECandidateStats for the remote candidate
+	// associated with this candidate pair.
+	RemoteCandidateID string `json:"remoteCandidateId"`
+
+	// State represents the state of the checklist for the local and remote
+	// candidates in a pair.
+	State StatsICECandidatePairState `json:"state"`
+
+	// Nominated is true when this valid pair that should be used for media
+	// if it is the highest-priority one amongst those whose nominated flag is set
+	Nominated bool `json:"nominated"`
+
+	// PacketsSent represents the total number of packets sent on this candidate pair.
+	PacketsSent uint32 `json:"packetsSent"`
+
+	// PacketsReceived represents the total number of packets received on this candidate pair.
+	PacketsReceived uint32 `json:"packetsReceived"`
+
+	// BytesSent represents the total number of payload bytes sent on this candidate pair
+	// not including headers or padding.
+	BytesSent uint64 `json:"bytesSent"`
+
+	// BytesReceived represents the total number of payload bytes received on this candidate pair
+	// not including headers or padding.
+	BytesReceived uint64 `json:"bytesReceived"`
+
+	// LastPacketSentTimestamp represents the timestamp at which the last packet was
+	// sent on this particular candidate pair, excluding STUN packets.
+	LastPacketSentTimestamp StatsTimestamp `json:"lastPacketSentTimestamp"`
+
+	// LastPacketReceivedTimestamp represents the timestamp at which the last packet
+	// was received on this particular candidate pair, excluding STUN packets.
+	LastPacketReceivedTimestamp StatsTimestamp `json:"lastPacketReceivedTimestamp"`
+
+	// FirstRequestTimestamp represents the timestamp at which the first STUN request
+	// was sent on this particular candidate pair.
+	FirstRequestTimestamp StatsTimestamp `json:"firstRequestTimestamp"`
+
+	// LastRequestTimestamp represents the timestamp at which the last STUN request
+	// was sent on this particular candidate pair. The average interval between two
+	// consecutive connectivity checks sent can be calculated with
+	// (LastRequestTimestamp - FirstRequestTimestamp) / RequestsSent.
+	LastRequestTimestamp StatsTimestamp `json:"lastRequestTimestamp"`
+
+	// LastResponseTimestamp represents the timestamp at which the last STUN response
+	// was received on this particular candidate pair.
+	LastResponseTimestamp StatsTimestamp `json:"lastResponseTimestamp"`
+
+	// TotalRoundTripTime represents the sum of all round trip time measurements
+	// in seconds since the beginning of the session, based on STUN connectivity
+	// check responses (ResponsesReceived), including those that reply to requests
+	// that are sent in order to verify consent. The average round trip time can
+	// be computed from TotalRoundTripTime by dividing it by ResponsesReceived.
+	TotalRoundTripTime float64 `json:"totalRoundTripTime"`
+
+	// CurrentRoundTripTime represents the latest round trip time measured in seconds,
+	// computed from both STUN connectivity checks, including those that are sent
+	// for consent verification.
+	CurrentRoundTripTime float64 `json:"currentRoundTripTime"`
+
+	// AvailableOutgoingBitrate is calculated by the underlying congestion control
+	// by combining the available bitrate for all the outgoing RTP streams using
+	// this candidate pair. The bitrate measurement does not count the size of the
+	// IP or other transport layers like TCP or UDP. It is similar to the TIAS defined
+	// in RFC 3890, i.e., it is measured in bits per second and the bitrate is calculated
+	// over a 1 second window.
+	AvailableOutgoingBitrate float64 `json:"availableOutgoingBitrate"`
+
+	// AvailableIncomingBitrate is calculated by the underlying congestion control
+	// by combining the available bitrate for all the incoming RTP streams using
+	// this candidate pair. The bitrate measurement does not count the size of the
+	// IP or other transport layers like TCP or UDP. It is similar to the TIAS defined
+	// in  RFC 3890, i.e., it is measured in bits per second and the bitrate is
+	// calculated over a 1 second window.
+	AvailableIncomingBitrate float64 `json:"availableIncomingBitrate"`
+
+	// CircuitBreakerTriggerCount represents the number of times the circuit breaker
+	// is triggered for this particular 5-tuple, ceasing transmission.
+	CircuitBreakerTriggerCount uint32 `json:"circuitBreakerTriggerCount"`
+
+	// RequestsReceived represents the total number of connectivity check requests
+	// received (including retransmissions). It is impossible for the receiver to
+	// tell whether the request was sent in order to check connectivity or check
+	// consent, so all connectivity checks requests are counted here.
+	RequestsReceived uint64 `json:"requestsReceived"`
+
+	// RequestsSent represents the total number of connectivity check requests
+	// sent (not including retransmissions).
+	RequestsSent uint64 `json:"requestsSent"`
+
+	// ResponsesReceived represents the total number of connectivity check responses received.
+	ResponsesReceived uint64 `json:"responsesReceived"`
+
+	// ResponsesSent represents the total number of connectivity check responses sent.
+	// Since we cannot distinguish connectivity check requests and consent requests,
+	// all responses are counted.
+	ResponsesSent uint64 `json:"responsesSent"`
+
+	// RetransmissionsReceived represents the total number of connectivity check
+	// request retransmissions received.
+	RetransmissionsReceived uint64 `json:"retransmissionsReceived"`
+
+	// RetransmissionsSent represents the total number of connectivity check
+	// request retransmissions sent.
+	RetransmissionsSent uint64 `json:"retransmissionsSent"`
+
+	// ConsentRequestsSent represents the total number of consent requests sent.
+	ConsentRequestsSent uint64 `json:"consentRequestsSent"`
+
+	// ConsentExpiredTimestamp represents the timestamp at which the latest valid
+	// STUN binding response expired.
+	ConsentExpiredTimestamp StatsTimestamp `json:"consentExpiredTimestamp"`
+}
+
+// ICECandidateStats contains ICE candidate statistics related to the ICETransport objects.
+type ICECandidateStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// TransportID is a unique identifier that is associated to the object that
+	// was inspected to produce the TransportStats associated with this candidate.
+	TransportID string `json:"transportId"`
+
+	// NetworkType represents the type of network interface used by the base of a
+	// local candidate (the address the ICE agent sends from). Only present for
+	// local candidates; it's not possible to know what type of network interface
+	// a remote candidate is using.
+	//
+	// Note:
+	// This stat only tells you about the network interface used by the first "hop";
+	// it's possible that a connection will be bottlenecked by another type of network.
+	// For example, when using Wi-Fi tethering, the networkType of the relevant candidate
+	// would be "wifi", even when the next hop is over a cellular connection.
+	NetworkType NetworkType `json:"networkType"`
+
+	// IP is the IP address of the candidate, allowing for IPv4 addresses and
+	// IPv6 addresses, but fully qualified domain names (FQDNs) are not allowed.
+	IP string `json:"ip"`
+
+	// Port is the port number of the candidate.
+	Port int32 `json:"port"`
+
+	// Protocol is one of udp and tcp.
+	Protocol string `json:"protocol"`
+
+	// CandidateType is the "Type" field of the ICECandidate.
+	CandidateType ICECandidateType `json:"candidateType"`
+
+	// Priority is the "Priority" field of the ICECandidate.
+	Priority int32 `json:"priority"`
+
+	// URL is the URL of the TURN or STUN server indicated in the that translated
+	// this IP address. It is the URL address surfaced in an PeerConnectionICEEvent.
+	URL string `json:"url"`
+
+	// RelayProtocol is the protocol used by the endpoint to communicate with the
+	// TURN server. This is only present for local candidates. Valid values for
+	// the TURN URL protocol is one of udp, tcp, or tls.
+	RelayProtocol string `json:"relayProtocol"`
+
+	// Deleted is true if the candidate has been deleted/freed. For host candidates,
+	// this means that any network resources (typically a socket) associated with the
+	// candidate have been released. For TURN candidates, this means the TURN allocation
+	// is no longer active.
+	//
+	// Only defined for local candidates. For remote candidates, this property is not applicable.
+	Deleted bool `json:"deleted"`
+}
+
+// CertificateStats contains information about a certificate used by an ICETransport.
+type CertificateStats struct {
+	// Timestamp is the timestamp associated with this object.
+	Timestamp StatsTimestamp `json:"timestamp"`
+
+	// Type is the object's StatsType
+	Type StatsType `json:"type"`
+
+	// ID is a unique id that is associated with the component inspected to produce
+	// this Stats object. Two Stats objects will have the same ID if they were produced
+	// by inspecting the same underlying object.
+	ID string `json:"id"`
+
+	// Fingerprint is the fingerprint of the certificate.
+	Fingerprint string `json:"fingerprint"`
+
+	// FingerprintAlgorithm is the hash function used to compute the certificate fingerprint. For instance, "sha-256".
+	FingerprintAlgorithm string `json:"fingerprintAlgorithm"`
+
+	// Base64Certificate is the DER-encoded base-64 representation of the certificate.
+	Base64Certificate string `json:"base64Certificate"`
+
+	// IssuerCertificateID refers to the stats object that contains the next certificate
+	// in the certificate chain. If the current certificate is at the end of the chain
+	// (i.e. a self-signed certificate), this will not be set.
+	IssuerCertificateID string `json:"issuerCertificateId"`
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/stats_go.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/stats_go.go
new file mode 100644
index 000000000..e1f622e5a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/stats_go.go
@@ -0,0 +1,93 @@
+// +build !js
+
+package webrtc
+
+// GetConnectionStats is a helper method to return the associated stats for a given PeerConnection
+func (r StatsReport) GetConnectionStats(conn *PeerConnection) (PeerConnectionStats, bool) {
+	statsID := conn.getStatsID()
+	stats, ok := r[statsID]
+	if !ok {
+		return PeerConnectionStats{}, false
+	}
+
+	pcStats, ok := stats.(PeerConnectionStats)
+	if !ok {
+		return PeerConnectionStats{}, false
+	}
+	return pcStats, true
+}
+
+// GetDataChannelStats is a helper method to return the associated stats for a given DataChannel
+func (r StatsReport) GetDataChannelStats(dc *DataChannel) (DataChannelStats, bool) {
+	statsID := dc.getStatsID()
+	stats, ok := r[statsID]
+	if !ok {
+		return DataChannelStats{}, false
+	}
+
+	dcStats, ok := stats.(DataChannelStats)
+	if !ok {
+		return DataChannelStats{}, false
+	}
+	return dcStats, true
+}
+
+// GetICECandidateStats is a helper method to return the associated stats for a given ICECandidate
+func (r StatsReport) GetICECandidateStats(c *ICECandidate) (ICECandidateStats, bool) {
+	statsID := c.statsID
+	stats, ok := r[statsID]
+	if !ok {
+		return ICECandidateStats{}, false
+	}
+
+	candidateStats, ok := stats.(ICECandidateStats)
+	if !ok {
+		return ICECandidateStats{}, false
+	}
+	return candidateStats, true
+}
+
+// GetICECandidatePairStats is a helper method to return the associated stats for a given ICECandidatePair
+func (r StatsReport) GetICECandidatePairStats(c *ICECandidatePair) (ICECandidatePairStats, bool) {
+	statsID := c.statsID
+	stats, ok := r[statsID]
+	if !ok {
+		return ICECandidatePairStats{}, false
+	}
+
+	candidateStats, ok := stats.(ICECandidatePairStats)
+	if !ok {
+		return ICECandidatePairStats{}, false
+	}
+	return candidateStats, true
+}
+
+// GetCertificateStats is a helper method to return the associated stats for a given Certificate
+func (r StatsReport) GetCertificateStats(c *Certificate) (CertificateStats, bool) {
+	statsID := c.statsID
+	stats, ok := r[statsID]
+	if !ok {
+		return CertificateStats{}, false
+	}
+
+	certificateStats, ok := stats.(CertificateStats)
+	if !ok {
+		return CertificateStats{}, false
+	}
+	return certificateStats, true
+}
+
+// GetCodecStats is a helper method to return the associated stats for a given Codec
+func (r StatsReport) GetCodecStats(c *RTPCodecParameters) (CodecStats, bool) {
+	statsID := c.statsID
+	stats, ok := r[statsID]
+	if !ok {
+		return CodecStats{}, false
+	}
+
+	codecStats, ok := stats.(CodecStats)
+	if !ok {
+		return CodecStats{}, false
+	}
+	return codecStats, true
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/track_local.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/track_local.go
new file mode 100644
index 000000000..e6e1da1f4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/track_local.go
@@ -0,0 +1,75 @@
+package webrtc
+
+import "github.com/pion/rtp"
+
+// TrackLocalWriter is the Writer for outbound RTP Packets
+type TrackLocalWriter interface {
+	// WriteRTP encrypts a RTP packet and writes to the connection
+	WriteRTP(header *rtp.Header, payload []byte) (int, error)
+
+	// Write encrypts and writes a full RTP packet
+	Write(b []byte) (int, error)
+}
+
+// TrackLocalContext is the Context passed when a TrackLocal has been Binded/Unbinded from a PeerConnection, and used
+// in Interceptors.
+type TrackLocalContext struct {
+	id          string
+	params      RTPParameters
+	ssrc        SSRC
+	writeStream TrackLocalWriter
+}
+
+// CodecParameters returns the negotiated RTPCodecParameters. These are the codecs supported by both
+// PeerConnections and the SSRC/PayloadTypes
+func (t *TrackLocalContext) CodecParameters() []RTPCodecParameters {
+	return t.params.Codecs
+}
+
+// HeaderExtensions returns the negotiated RTPHeaderExtensionParameters. These are the header extensions supported by
+// both PeerConnections and the SSRC/PayloadTypes
+func (t *TrackLocalContext) HeaderExtensions() []RTPHeaderExtensionParameter {
+	return t.params.HeaderExtensions
+}
+
+// SSRC requires the negotiated SSRC of this track
+// This track may have multiple if RTX is enabled
+func (t *TrackLocalContext) SSRC() SSRC {
+	return t.ssrc
+}
+
+// WriteStream returns the WriteStream for this TrackLocal. The implementer writes the outbound
+// media packets to it
+func (t *TrackLocalContext) WriteStream() TrackLocalWriter {
+	return t.writeStream
+}
+
+// ID is a unique identifier that is used for both Bind/Unbind
+func (t *TrackLocalContext) ID() string {
+	return t.id
+}
+
+// TrackLocal is an interface that controls how the user can send media
+// The user can provide their own TrackLocal implementatiosn, or use
+// the implementations in pkg/media
+type TrackLocal interface {
+	// Bind should implement the way how the media data flows from the Track to the PeerConnection
+	// This will be called internally after signaling is complete and the list of available
+	// codecs has been determined
+	Bind(TrackLocalContext) (RTPCodecParameters, error)
+
+	// Unbind should implement the teardown logic when the track is no longer needed. This happens
+	// because a track has been stopped.
+	Unbind(TrackLocalContext) error
+
+	// ID is the unique identifier for this Track. This should be unique for the
+	// stream, but doesn't have to globally unique. A common example would be 'audio' or 'video'
+	// and StreamID would be 'desktop' or 'webcam'
+	ID() string
+
+	// StreamID is the group this track belongs too. This must be unique
+	StreamID() string
+
+	// Kind controls if this TrackLocal is audio or video
+	Kind() RTPCodecType
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/track_local_static.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/track_local_static.go
new file mode 100644
index 000000000..ff6a53490
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/track_local_static.go
@@ -0,0 +1,242 @@
+// +build !js
+
+package webrtc
+
+import (
+	"strings"
+	"sync"
+
+	"github.com/pion/rtp"
+	"github.com/pion/webrtc/v3/internal/util"
+	"github.com/pion/webrtc/v3/pkg/media"
+)
+
+// trackBinding is a single bind for a Track
+// Bind can be called multiple times, this stores the
+// result for a single bind call so that it can be used when writing
+type trackBinding struct {
+	id          string
+	ssrc        SSRC
+	payloadType PayloadType
+	writeStream TrackLocalWriter
+}
+
+// TrackLocalStaticRTP  is a TrackLocal that has a pre-set codec and accepts RTP Packets.
+// If you wish to send a media.Sample use TrackLocalStaticSample
+type TrackLocalStaticRTP struct {
+	mu           sync.RWMutex
+	bindings     []trackBinding
+	codec        RTPCodecCapability
+	id, streamID string
+}
+
+// NewTrackLocalStaticRTP returns a TrackLocalStaticRTP.
+func NewTrackLocalStaticRTP(c RTPCodecCapability, id, streamID string) (*TrackLocalStaticRTP, error) {
+	return &TrackLocalStaticRTP{
+		codec:    c,
+		bindings: []trackBinding{},
+		id:       id,
+		streamID: streamID,
+	}, nil
+}
+
+// Bind is called by the PeerConnection after negotiation is complete
+// This asserts that the code requested is supported by the remote peer.
+// If so it setups all the state (SSRC and PayloadType) to have a call
+func (s *TrackLocalStaticRTP) Bind(t TrackLocalContext) (RTPCodecParameters, error) {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+
+	parameters := RTPCodecParameters{RTPCodecCapability: s.codec}
+	if codec, err := codecParametersFuzzySearch(parameters, t.CodecParameters()); err == nil {
+		s.bindings = append(s.bindings, trackBinding{
+			ssrc:        t.SSRC(),
+			payloadType: codec.PayloadType,
+			writeStream: t.WriteStream(),
+			id:          t.ID(),
+		})
+		return codec, nil
+	}
+
+	return RTPCodecParameters{}, ErrUnsupportedCodec
+}
+
+// Unbind implements the teardown logic when the track is no longer needed. This happens
+// because a track has been stopped.
+func (s *TrackLocalStaticRTP) Unbind(t TrackLocalContext) error {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+
+	for i := range s.bindings {
+		if s.bindings[i].id == t.ID() {
+			s.bindings[i] = s.bindings[len(s.bindings)-1]
+			s.bindings = s.bindings[:len(s.bindings)-1]
+			return nil
+		}
+	}
+
+	return ErrUnbindFailed
+}
+
+// ID is the unique identifier for this Track. This should be unique for the
+// stream, but doesn't have to globally unique. A common example would be 'audio' or 'video'
+// and StreamID would be 'desktop' or 'webcam'
+func (s *TrackLocalStaticRTP) ID() string { return s.id }
+
+// StreamID is the group this track belongs too. This must be unique
+func (s *TrackLocalStaticRTP) StreamID() string { return s.streamID }
+
+// Kind controls if this TrackLocal is audio or video
+func (s *TrackLocalStaticRTP) Kind() RTPCodecType {
+	switch {
+	case strings.HasPrefix(s.codec.MimeType, "audio/"):
+		return RTPCodecTypeAudio
+	case strings.HasPrefix(s.codec.MimeType, "video/"):
+		return RTPCodecTypeVideo
+	default:
+		return RTPCodecType(0)
+	}
+}
+
+// Codec gets the Codec of the track
+func (s *TrackLocalStaticRTP) Codec() RTPCodecCapability {
+	return s.codec
+}
+
+// WriteRTP writes a RTP Packet to the TrackLocalStaticRTP
+// If one PeerConnection fails the packets will still be sent to
+// all PeerConnections. The error message will contain the ID of the failed
+// PeerConnections so you can remove them
+func (s *TrackLocalStaticRTP) WriteRTP(p *rtp.Packet) error {
+	s.mu.RLock()
+	defer s.mu.RUnlock()
+
+	writeErrs := []error{}
+	outboundPacket := *p
+
+	for _, b := range s.bindings {
+		outboundPacket.Header.SSRC = uint32(b.ssrc)
+		outboundPacket.Header.PayloadType = uint8(b.payloadType)
+		if _, err := b.writeStream.WriteRTP(&outboundPacket.Header, outboundPacket.Payload); err != nil {
+			writeErrs = append(writeErrs, err)
+		}
+	}
+
+	return util.FlattenErrs(writeErrs)
+}
+
+// Write writes a RTP Packet as a buffer to the TrackLocalStaticRTP
+// If one PeerConnection fails the packets will still be sent to
+// all PeerConnections. The error message will contain the ID of the failed
+// PeerConnections so you can remove them
+func (s *TrackLocalStaticRTP) Write(b []byte) (n int, err error) {
+	packet := &rtp.Packet{}
+	if err = packet.Unmarshal(b); err != nil {
+		return 0, err
+	}
+
+	return len(b), s.WriteRTP(packet)
+}
+
+// TrackLocalStaticSample is a TrackLocal that has a pre-set codec and accepts Samples.
+// If you wish to send a RTP Packet use TrackLocalStaticRTP
+type TrackLocalStaticSample struct {
+	packetizer rtp.Packetizer
+	rtpTrack   *TrackLocalStaticRTP
+	clockRate  float64
+}
+
+// NewTrackLocalStaticSample returns a TrackLocalStaticSample
+func NewTrackLocalStaticSample(c RTPCodecCapability, id, streamID string) (*TrackLocalStaticSample, error) {
+	rtpTrack, err := NewTrackLocalStaticRTP(c, id, streamID)
+	if err != nil {
+		return nil, err
+	}
+
+	return &TrackLocalStaticSample{
+		rtpTrack: rtpTrack,
+	}, nil
+}
+
+// ID is the unique identifier for this Track. This should be unique for the
+// stream, but doesn't have to globally unique. A common example would be 'audio' or 'video'
+// and StreamID would be 'desktop' or 'webcam'
+func (s *TrackLocalStaticSample) ID() string { return s.rtpTrack.ID() }
+
+// StreamID is the group this track belongs too. This must be unique
+func (s *TrackLocalStaticSample) StreamID() string { return s.rtpTrack.StreamID() }
+
+// Kind controls if this TrackLocal is audio or video
+func (s *TrackLocalStaticSample) Kind() RTPCodecType { return s.rtpTrack.Kind() }
+
+// Codec gets the Codec of the track
+func (s *TrackLocalStaticSample) Codec() RTPCodecCapability {
+	return s.rtpTrack.Codec()
+}
+
+// Bind is called by the PeerConnection after negotiation is complete
+// This asserts that the code requested is supported by the remote peer.
+// If so it setups all the state (SSRC and PayloadType) to have a call
+func (s *TrackLocalStaticSample) Bind(t TrackLocalContext) (RTPCodecParameters, error) {
+	codec, err := s.rtpTrack.Bind(t)
+	if err != nil {
+		return codec, err
+	}
+
+	s.rtpTrack.mu.Lock()
+	defer s.rtpTrack.mu.Unlock()
+
+	// We only need one packetizer
+	if s.packetizer != nil {
+		return codec, nil
+	}
+
+	payloader, err := payloaderForCodec(codec.RTPCodecCapability)
+	if err != nil {
+		return codec, err
+	}
+
+	s.packetizer = rtp.NewPacketizer(
+		rtpOutboundMTU,
+		0, // Value is handled when writing
+		0, // Value is handled when writing
+		payloader,
+		rtp.NewRandomSequencer(),
+		codec.ClockRate,
+	)
+	s.clockRate = float64(codec.RTPCodecCapability.ClockRate)
+	return codec, nil
+}
+
+// Unbind implements the teardown logic when the track is no longer needed. This happens
+// because a track has been stopped.
+func (s *TrackLocalStaticSample) Unbind(t TrackLocalContext) error {
+	return s.rtpTrack.Unbind(t)
+}
+
+// WriteSample writes a Sample to the TrackLocalStaticSample
+// If one PeerConnection fails the packets will still be sent to
+// all PeerConnections. The error message will contain the ID of the failed
+// PeerConnections so you can remove them
+func (s *TrackLocalStaticSample) WriteSample(sample media.Sample) error {
+	s.rtpTrack.mu.RLock()
+	p := s.packetizer
+	clockRate := s.clockRate
+	s.rtpTrack.mu.RUnlock()
+
+	if p == nil {
+		return nil
+	}
+
+	samples := sample.Duration.Seconds() * clockRate
+	packets := p.(rtp.Packetizer).Packetize(sample.Data, uint32(samples))
+
+	writeErrs := []error{}
+	for _, p := range packets {
+		if err := s.rtpTrack.WriteRTP(p); err != nil {
+			writeErrs = append(writeErrs, err)
+		}
+	}
+
+	return util.FlattenErrs(writeErrs)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/track_remote.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/track_remote.go
new file mode 100644
index 000000000..6733b7cfb
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/track_remote.go
@@ -0,0 +1,183 @@
+// +build !js
+
+package webrtc
+
+import (
+	"sync"
+	"time"
+
+	"github.com/pion/interceptor"
+	"github.com/pion/rtp"
+)
+
+// TrackRemote represents a single inbound source of media
+type TrackRemote struct {
+	mu sync.RWMutex
+
+	id       string
+	streamID string
+
+	payloadType PayloadType
+	kind        RTPCodecType
+	ssrc        SSRC
+	codec       RTPCodecParameters
+	params      RTPParameters
+	rid         string
+
+	receiver         *RTPReceiver
+	peeked           []byte
+	peekedAttributes interceptor.Attributes
+}
+
+func newTrackRemote(kind RTPCodecType, ssrc SSRC, rid string, receiver *RTPReceiver) *TrackRemote {
+	return &TrackRemote{
+		kind:     kind,
+		ssrc:     ssrc,
+		rid:      rid,
+		receiver: receiver,
+	}
+}
+
+// ID is the unique identifier for this Track. This should be unique for the
+// stream, but doesn't have to globally unique. A common example would be 'audio' or 'video'
+// and StreamID would be 'desktop' or 'webcam'
+func (t *TrackRemote) ID() string {
+	t.mu.RLock()
+	defer t.mu.RUnlock()
+	return t.id
+}
+
+// RID gets the RTP Stream ID of this Track
+// With Simulcast you will have multiple tracks with the same ID, but different RID values.
+// In many cases a TrackRemote will not have an RID, so it is important to assert it is non-zero
+func (t *TrackRemote) RID() string {
+	t.mu.RLock()
+	defer t.mu.RUnlock()
+
+	return t.rid
+}
+
+// PayloadType gets the PayloadType of the track
+func (t *TrackRemote) PayloadType() PayloadType {
+	t.mu.RLock()
+	defer t.mu.RUnlock()
+	return t.payloadType
+}
+
+// Kind gets the Kind of the track
+func (t *TrackRemote) Kind() RTPCodecType {
+	t.mu.RLock()
+	defer t.mu.RUnlock()
+	return t.kind
+}
+
+// StreamID is the group this track belongs too. This must be unique
+func (t *TrackRemote) StreamID() string {
+	t.mu.RLock()
+	defer t.mu.RUnlock()
+	return t.streamID
+}
+
+// SSRC gets the SSRC of the track
+func (t *TrackRemote) SSRC() SSRC {
+	t.mu.RLock()
+	defer t.mu.RUnlock()
+	return t.ssrc
+}
+
+// Msid gets the Msid of the track
+func (t *TrackRemote) Msid() string {
+	return t.StreamID() + " " + t.ID()
+}
+
+// Codec gets the Codec of the track
+func (t *TrackRemote) Codec() RTPCodecParameters {
+	t.mu.RLock()
+	defer t.mu.RUnlock()
+	return t.codec
+}
+
+// Read reads data from the track.
+func (t *TrackRemote) Read(b []byte) (n int, attributes interceptor.Attributes, err error) {
+	t.mu.RLock()
+	r := t.receiver
+	peeked := t.peeked != nil
+	t.mu.RUnlock()
+
+	if peeked {
+		t.mu.Lock()
+		data := t.peeked
+		attributes = t.peekedAttributes
+
+		t.peeked = nil
+		t.peekedAttributes = nil
+		t.mu.Unlock()
+		// someone else may have stolen our packet when we
+		// released the lock.  Deal with it.
+		if data != nil {
+			n = copy(b, data)
+			return
+		}
+	}
+
+	return r.readRTP(b, t)
+}
+
+// ReadRTP is a convenience method that wraps Read and unmarshals for you.
+func (t *TrackRemote) ReadRTP() (*rtp.Packet, interceptor.Attributes, error) {
+	b := make([]byte, receiveMTU)
+	i, attributes, err := t.Read(b)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	r := &rtp.Packet{}
+	if err := r.Unmarshal(b[:i]); err != nil {
+		return nil, nil, err
+	}
+	return r, attributes, nil
+}
+
+// determinePayloadType blocks and reads a single packet to determine the PayloadType for this Track
+// this is useful because we can't announce it to the user until we know the payloadType
+func (t *TrackRemote) determinePayloadType() error {
+	b := make([]byte, receiveMTU)
+	n, _, err := t.peek(b)
+	if err != nil {
+		return err
+	}
+	r := rtp.Packet{}
+	if err := r.Unmarshal(b[:n]); err != nil {
+		return err
+	}
+
+	t.mu.Lock()
+	t.payloadType = PayloadType(r.PayloadType)
+	defer t.mu.Unlock()
+
+	return nil
+}
+
+// peek is like Read, but it doesn't discard the packet read
+func (t *TrackRemote) peek(b []byte) (n int, a interceptor.Attributes, err error) {
+	n, a, err = t.Read(b)
+	if err != nil {
+		return
+	}
+
+	t.mu.Lock()
+	// this might overwrite data if somebody peeked between the Read
+	// and us getting the lock.  Oh well, we'll just drop a packet in
+	// that case.
+	data := make([]byte, n)
+	n = copy(data, b[:n])
+	t.peeked = data
+	t.peekedAttributes = a
+	t.mu.Unlock()
+	return
+}
+
+// SetReadDeadline sets the max amount of time the RTP stream will block before returning. 0 is forever.
+func (t *TrackRemote) SetReadDeadline(deadline time.Time) error {
+	return t.receiver.setRTPReadDeadline(deadline, t)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/webrtc.go b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/webrtc.go
new file mode 100644
index 000000000..ff32a5578
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/webrtc.go
@@ -0,0 +1,17 @@
+// Package webrtc implements the WebRTC 1.0 as defined in W3C WebRTC specification document.
+package webrtc
+
+// SSRC represents a synchronization source
+// A synchronization source is a randomly chosen
+// value meant to be globally unique within a particular
+// RTP session. Used to identify a single stream of media.
+//
+// https://tools.ietf.org/html/rfc3550#section-3
+type SSRC uint32
+
+// PayloadType identifies the format of the RTP payload and determines
+// its interpretation by the application. Each codec in a RTP Session
+// will have a different PayloadType
+//
+// https://tools.ietf.org/html/rfc3550#section-3
+type PayloadType uint8
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/yarn.lock b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/yarn.lock
new file mode 100644
index 000000000..90f73c219
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pion/webrtc/v3/yarn.lock
@@ -0,0 +1,795 @@
+# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+# yarn lockfile v1
+
+
+abbrev@1:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/abbrev/-/abbrev-1.1.1.tgz#f8f2c887ad10bf67f634f005b6987fed3179aac8"
+  integrity sha512-nne9/IiQ/hzIhY6pdDnbBtz7DjPTKrY00P/zvPSm5pOFkl6xuGrGnXn/VtTNNfNtAfZ9/1RtehkszU9qcTii0Q==
+
+ajv@^6.5.5:
+  version "6.12.2"
+  resolved "https://registry.yarnpkg.com/ajv/-/ajv-6.12.2.tgz#c629c5eced17baf314437918d2da88c99d5958cd"
+  integrity sha512-k+V+hzjm5q/Mr8ef/1Y9goCmlsK4I6Sm74teeyGvFk1XrOsbsKLjEdrvny42CZ+a8sXbk8KWpY/bDwS+FLL2UQ==
+  dependencies:
+    fast-deep-equal "^3.1.1"
+    fast-json-stable-stringify "^2.0.0"
+    json-schema-traverse "^0.4.1"
+    uri-js "^4.2.2"
+
+ansi-regex@^2.0.0:
+  version "2.1.1"
+  resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-2.1.1.tgz#c3b33ab5ee360d86e0e628f0468ae7ef27d654df"
+  integrity sha1-w7M6te42DYbg5ijwRorn7yfWVN8=
+
+ansi-regex@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-3.0.0.tgz#ed0317c322064f79466c02966bddb605ab37d998"
+  integrity sha1-7QMXwyIGT3lGbAKWa922Bas32Zg=
+
+aproba@^1.0.3:
+  version "1.2.0"
+  resolved "https://registry.yarnpkg.com/aproba/-/aproba-1.2.0.tgz#6802e6264efd18c790a1b0d517f0f2627bf2c94a"
+  integrity sha512-Y9J6ZjXtoYh8RnXVCMOU/ttDmk1aBjunq9vO0ta5x85WDQiQfUF9sIPBITdbiiIVcBo03Hi3jMxigBtsddlXRw==
+
+are-we-there-yet@~1.1.2:
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/are-we-there-yet/-/are-we-there-yet-1.1.5.tgz#4b35c2944f062a8bfcda66410760350fe9ddfc21"
+  integrity sha512-5hYdAkZlcG8tOLujVDTgCT+uPX0VnpAH28gWsLfzpXYm7wP6mp5Q/gYyR7YQ0cKVJcXJnl3j2kpBan13PtQf6w==
+  dependencies:
+    delegates "^1.0.0"
+    readable-stream "^2.0.6"
+
+asn1@~0.2.3:
+  version "0.2.4"
+  resolved "https://registry.yarnpkg.com/asn1/-/asn1-0.2.4.tgz#8d2475dfab553bb33e77b54e59e880bb8ce23136"
+  integrity sha512-jxwzQpLQjSmWXgwaCZE9Nz+glAG01yF1QnWgbhGwHI5A6FRIEY6IVqtHhIepHqI7/kyEyQEagBC5mBEFlIYvdg==
+  dependencies:
+    safer-buffer "~2.1.0"
+
+assert-plus@1.0.0, assert-plus@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/assert-plus/-/assert-plus-1.0.0.tgz#f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
+  integrity sha1-8S4PPF13sLHN2RRpQuTpbB5N1SU=
+
+asynckit@^0.4.0:
+  version "0.4.0"
+  resolved "https://registry.yarnpkg.com/asynckit/-/asynckit-0.4.0.tgz#c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
+  integrity sha1-x57Zf380y48robyXkLzDZkdLS3k=
+
+aws-sign2@~0.7.0:
+  version "0.7.0"
+  resolved "https://registry.yarnpkg.com/aws-sign2/-/aws-sign2-0.7.0.tgz#b46e890934a9591f2d2f6f86d7e6a9f1b3fe76a8"
+  integrity sha1-tG6JCTSpWR8tL2+G1+ap8bP+dqg=
+
+aws4@^1.8.0:
+  version "1.10.0"
+  resolved "https://registry.yarnpkg.com/aws4/-/aws4-1.10.0.tgz#a17b3a8ea811060e74d47d306122400ad4497ae2"
+  integrity sha512-3YDiu347mtVtjpyV3u5kVqQLP242c06zwDOgpeRnybmXlYYsLbtTrUBUm8i8srONt+FWobl5aibnU1030PeeuA==
+
+balanced-match@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/balanced-match/-/balanced-match-1.0.0.tgz#89b4d199ab2bee49de164ea02b89ce462d71b767"
+  integrity sha1-ibTRmasr7kneFk6gK4nORi1xt2c=
+
+bcrypt-pbkdf@^1.0.0:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz#a4301d389b6a43f9b67ff3ca11a3f6637e360e9e"
+  integrity sha1-pDAdOJtqQ/m2f/PKEaP2Y342Dp4=
+  dependencies:
+    tweetnacl "^0.14.3"
+
+brace-expansion@^1.1.7:
+  version "1.1.11"
+  resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-1.1.11.tgz#3c7fcbf529d87226f3d2f52b966ff5271eb441dd"
+  integrity sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==
+  dependencies:
+    balanced-match "^1.0.0"
+    concat-map "0.0.1"
+
+caseless@~0.12.0:
+  version "0.12.0"
+  resolved "https://registry.yarnpkg.com/caseless/-/caseless-0.12.0.tgz#1b681c21ff84033c826543090689420d187151dc"
+  integrity sha1-G2gcIf+EAzyCZUMJBolCDRhxUdw=
+
+chownr@^1.1.1:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/chownr/-/chownr-1.1.1.tgz#54726b8b8fff4df053c42187e801fb4412df1494"
+  integrity sha512-j38EvO5+LHX84jlo6h4UzmOwi0UgW61WRyPtJz4qaadK5eY3BTS5TY/S1Stc3Uk2lIM6TPevAlULiEJwie860g==
+
+code-point-at@^1.0.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/code-point-at/-/code-point-at-1.1.0.tgz#0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
+  integrity sha1-DQcLTQQ6W+ozovGkDi7bPZpMz3c=
+
+combined-stream@^1.0.6, combined-stream@~1.0.6:
+  version "1.0.8"
+  resolved "https://registry.yarnpkg.com/combined-stream/-/combined-stream-1.0.8.tgz#c3d45a8b34fd730631a110a8a2520682b31d5a7f"
+  integrity sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==
+  dependencies:
+    delayed-stream "~1.0.0"
+
+concat-map@0.0.1:
+  version "0.0.1"
+  resolved "https://registry.yarnpkg.com/concat-map/-/concat-map-0.0.1.tgz#d8a96bd77fd68df7793a73036a3ba0d5405d477b"
+  integrity sha1-2Klr13/Wjfd5OnMDajug1UBdR3s=
+
+console-control-strings@^1.0.0, console-control-strings@~1.1.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/console-control-strings/-/console-control-strings-1.1.0.tgz#3d7cf4464db6446ea644bf4b39507f9851008e8e"
+  integrity sha1-PXz0Rk22RG6mRL9LOVB/mFEAjo4=
+
+core-util-is@1.0.2, core-util-is@~1.0.0:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/core-util-is/-/core-util-is-1.0.2.tgz#b5fd54220aa2bc5ab57aab7140c940754503c1a7"
+  integrity sha1-tf1UIgqivFq1eqtxQMlAdUUDwac=
+
+dashdash@^1.12.0:
+  version "1.14.1"
+  resolved "https://registry.yarnpkg.com/dashdash/-/dashdash-1.14.1.tgz#853cfa0f7cbe2fed5de20326b8dd581035f6e2f0"
+  integrity sha1-hTz6D3y+L+1d4gMmuN1YEDX24vA=
+  dependencies:
+    assert-plus "^1.0.0"
+
+debug@^2.1.2:
+  version "2.6.9"
+  resolved "https://registry.yarnpkg.com/debug/-/debug-2.6.9.tgz#5d128515df134ff327e90a4c93f4e077a536341f"
+  integrity sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==
+  dependencies:
+    ms "2.0.0"
+
+deep-extend@^0.6.0:
+  version "0.6.0"
+  resolved "https://registry.yarnpkg.com/deep-extend/-/deep-extend-0.6.0.tgz#c4fa7c95404a17a9c3e8ca7e1537312b736330ac"
+  integrity sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==
+
+delayed-stream@~1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/delayed-stream/-/delayed-stream-1.0.0.tgz#df3ae199acadfb7d440aaae0b29e2272b24ec619"
+  integrity sha1-3zrhmayt+31ECqrgsp4icrJOxhk=
+
+delegates@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/delegates/-/delegates-1.0.0.tgz#84c6e159b81904fdca59a0ef44cd870d31250f9a"
+  integrity sha1-hMbhWbgZBP3KWaDvRM2HDTElD5o=
+
+detect-libc@^1.0.2:
+  version "1.0.3"
+  resolved "https://registry.yarnpkg.com/detect-libc/-/detect-libc-1.0.3.tgz#fa137c4bd698edf55cd5cd02ac559f91a4c4ba9b"
+  integrity sha1-+hN8S9aY7fVc1c0CrFWfkaTEups=
+
+domexception@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/domexception/-/domexception-1.0.1.tgz#937442644ca6a31261ef36e3ec677fe805582c90"
+  integrity sha512-raigMkn7CJNNo6Ihro1fzG7wr3fHuYVytzquZKX5n0yizGsTcYgzdIUwj1X9pK0VvjeihV+XiclP+DjwbsSKug==
+  dependencies:
+    webidl-conversions "^4.0.2"
+
+ecc-jsbn@~0.1.1:
+  version "0.1.2"
+  resolved "https://registry.yarnpkg.com/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz#3a83a904e54353287874c564b7549386849a98c9"
+  integrity sha1-OoOpBOVDUyh4dMVkt1SThoSamMk=
+  dependencies:
+    jsbn "~0.1.0"
+    safer-buffer "^2.1.0"
+
+extend@~3.0.2:
+  version "3.0.2"
+  resolved "https://registry.yarnpkg.com/extend/-/extend-3.0.2.tgz#f8b1136b4071fbd8eb140aff858b1019ec2915fa"
+  integrity sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==
+
+extsprintf@1.3.0:
+  version "1.3.0"
+  resolved "https://registry.yarnpkg.com/extsprintf/-/extsprintf-1.3.0.tgz#96918440e3041a7a414f8c52e3c574eb3c3e1e05"
+  integrity sha1-lpGEQOMEGnpBT4xS48V06zw+HgU=
+
+extsprintf@^1.2.0:
+  version "1.4.0"
+  resolved "https://registry.yarnpkg.com/extsprintf/-/extsprintf-1.4.0.tgz#e2689f8f356fad62cca65a3a91c5df5f9551692f"
+  integrity sha1-4mifjzVvrWLMplo6kcXfX5VRaS8=
+
+fast-deep-equal@^3.1.1:
+  version "3.1.1"
+  resolved "https://registry.yarnpkg.com/fast-deep-equal/-/fast-deep-equal-3.1.1.tgz#545145077c501491e33b15ec408c294376e94ae4"
+  integrity sha512-8UEa58QDLauDNfpbrX55Q9jrGHThw2ZMdOky5Gl1CDtVeJDPVrG4Jxx1N8jw2gkWaff5UUuX1KJd+9zGe2B+ZA==
+
+fast-json-stable-stringify@^2.0.0:
+  version "2.1.0"
+  resolved "https://registry.yarnpkg.com/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz#874bf69c6f404c2b5d99c481341399fd55892633"
+  integrity sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw==
+
+forever-agent@~0.6.1:
+  version "0.6.1"
+  resolved "https://registry.yarnpkg.com/forever-agent/-/forever-agent-0.6.1.tgz#fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
+  integrity sha1-+8cfDEGt6zf5bFd60e1C2P2sypE=
+
+form-data@~2.3.2:
+  version "2.3.3"
+  resolved "https://registry.yarnpkg.com/form-data/-/form-data-2.3.3.tgz#dcce52c05f644f298c6a7ab936bd724ceffbf3a6"
+  integrity sha512-1lLKB2Mu3aGP1Q/2eCOx0fNbRMe7XdwktwOruhfqqd0rIJWwN4Dh+E3hrPSlDCXnSR7UtZ1N38rVXm+6+MEhJQ==
+  dependencies:
+    asynckit "^0.4.0"
+    combined-stream "^1.0.6"
+    mime-types "^2.1.12"
+
+fs-minipass@^1.2.5:
+  version "1.2.5"
+  resolved "https://registry.yarnpkg.com/fs-minipass/-/fs-minipass-1.2.5.tgz#06c277218454ec288df77ada54a03b8702aacb9d"
+  integrity sha512-JhBl0skXjUPCFH7x6x61gQxrKyXsxB5gcgePLZCwfyCGGsTISMoIeObbrvVeP6Xmyaudw4TT43qV2Gz+iyd2oQ==
+  dependencies:
+    minipass "^2.2.1"
+
+fs.realpath@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/fs.realpath/-/fs.realpath-1.0.0.tgz#1504ad2523158caa40db4a2787cb01411994ea4f"
+  integrity sha1-FQStJSMVjKpA20onh8sBQRmU6k8=
+
+gauge@~2.7.3:
+  version "2.7.4"
+  resolved "https://registry.yarnpkg.com/gauge/-/gauge-2.7.4.tgz#2c03405c7538c39d7eb37b317022e325fb018bf7"
+  integrity sha1-LANAXHU4w51+s3sxcCLjJfsBi/c=
+  dependencies:
+    aproba "^1.0.3"
+    console-control-strings "^1.0.0"
+    has-unicode "^2.0.0"
+    object-assign "^4.1.0"
+    signal-exit "^3.0.0"
+    string-width "^1.0.1"
+    strip-ansi "^3.0.1"
+    wide-align "^1.1.0"
+
+getpass@^0.1.1:
+  version "0.1.7"
+  resolved "https://registry.yarnpkg.com/getpass/-/getpass-0.1.7.tgz#5eff8e3e684d569ae4cb2b1282604e8ba62149fa"
+  integrity sha1-Xv+OPmhNVprkyysSgmBOi6YhSfo=
+  dependencies:
+    assert-plus "^1.0.0"
+
+glob@^7.1.3:
+  version "7.1.3"
+  resolved "https://registry.yarnpkg.com/glob/-/glob-7.1.3.tgz#3960832d3f1574108342dafd3a67b332c0969df1"
+  integrity sha512-vcfuiIxogLV4DlGBHIUOwI0IbrJ8HWPc4MU7HzviGeNho/UJDfi6B5p3sHeWIQ0KGIU0Jpxi5ZHxemQfLkkAwQ==
+  dependencies:
+    fs.realpath "^1.0.0"
+    inflight "^1.0.4"
+    inherits "2"
+    minimatch "^3.0.4"
+    once "^1.3.0"
+    path-is-absolute "^1.0.0"
+
+har-schema@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/har-schema/-/har-schema-2.0.0.tgz#a94c2224ebcac04782a0d9035521f24735b7ec92"
+  integrity sha1-qUwiJOvKwEeCoNkDVSHyRzW37JI=
+
+har-validator@~5.1.3:
+  version "5.1.3"
+  resolved "https://registry.yarnpkg.com/har-validator/-/har-validator-5.1.3.tgz#1ef89ebd3e4996557675eed9893110dc350fa080"
+  integrity sha512-sNvOCzEQNr/qrvJgc3UG/kD4QtlHycrzwS+6mfTrrSq97BvaYcPZZI1ZSqGSPR73Cxn4LKTD4PttRwfU7jWq5g==
+  dependencies:
+    ajv "^6.5.5"
+    har-schema "^2.0.0"
+
+has-unicode@^2.0.0:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/has-unicode/-/has-unicode-2.0.1.tgz#e0e6fe6a28cf51138855e086d1691e771de2a8b9"
+  integrity sha1-4Ob+aijPUROIVeCG0Wkedx3iqLk=
+
+http-signature@~1.2.0:
+  version "1.2.0"
+  resolved "https://registry.yarnpkg.com/http-signature/-/http-signature-1.2.0.tgz#9aecd925114772f3d95b65a60abb8f7c18fbace1"
+  integrity sha1-muzZJRFHcvPZW2WmCruPfBj7rOE=
+  dependencies:
+    assert-plus "^1.0.0"
+    jsprim "^1.2.2"
+    sshpk "^1.7.0"
+
+iconv-lite@^0.4.4:
+  version "0.4.24"
+  resolved "https://registry.yarnpkg.com/iconv-lite/-/iconv-lite-0.4.24.tgz#2022b4b25fbddc21d2f524974a474aafe733908b"
+  integrity sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==
+  dependencies:
+    safer-buffer ">= 2.1.2 < 3"
+
+ignore-walk@^3.0.1:
+  version "3.0.1"
+  resolved "https://registry.yarnpkg.com/ignore-walk/-/ignore-walk-3.0.1.tgz#a83e62e7d272ac0e3b551aaa82831a19b69f82f8"
+  integrity sha512-DTVlMx3IYPe0/JJcYP7Gxg7ttZZu3IInhuEhbchuqneY9wWe5Ojy2mXLBaQFUQmo0AW2r3qG7m1mg86js+gnlQ==
+  dependencies:
+    minimatch "^3.0.4"
+
+inflight@^1.0.4:
+  version "1.0.6"
+  resolved "https://registry.yarnpkg.com/inflight/-/inflight-1.0.6.tgz#49bd6331d7d02d0c09bc910a1075ba8165b56df9"
+  integrity sha1-Sb1jMdfQLQwJvJEKEHW6gWW1bfk=
+  dependencies:
+    once "^1.3.0"
+    wrappy "1"
+
+inherits@2, inherits@~2.0.3:
+  version "2.0.3"
+  resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.3.tgz#633c2c83e3da42a502f52466022480f4208261de"
+  integrity sha1-Yzwsg+PaQqUC9SRmAiSA9CCCYd4=
+
+ini@~1.3.0:
+  version "1.3.5"
+  resolved "https://registry.yarnpkg.com/ini/-/ini-1.3.5.tgz#eee25f56db1c9ec6085e0c22778083f596abf927"
+  integrity sha512-RZY5huIKCMRWDUqZlEi72f/lmXKMvuszcMBduliQ3nnWbx9X/ZBQO7DijMEYS9EhHBb2qacRUMtC7svLwe0lcw==
+
+is-fullwidth-code-point@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz#ef9e31386f031a7f0d643af82fde50c457ef00cb"
+  integrity sha1-754xOG8DGn8NZDr4L95QxFfvAMs=
+  dependencies:
+    number-is-nan "^1.0.0"
+
+is-fullwidth-code-point@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz#a3b30a5c4f199183167aaab93beefae3ddfb654f"
+  integrity sha1-o7MKXE8ZkYMWeqq5O+764937ZU8=
+
+is-typedarray@~1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/is-typedarray/-/is-typedarray-1.0.0.tgz#e479c80858df0c1b11ddda6940f96011fcda4a9a"
+  integrity sha1-5HnICFjfDBsR3dppQPlgEfzaSpo=
+
+isarray@~1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/isarray/-/isarray-1.0.0.tgz#bb935d48582cba168c06834957a54a3e07124f11"
+  integrity sha1-u5NdSFgsuhaMBoNJV6VKPgcSTxE=
+
+isstream@~0.1.2:
+  version "0.1.2"
+  resolved "https://registry.yarnpkg.com/isstream/-/isstream-0.1.2.tgz#47e63f7af55afa6f92e1500e690eb8b8529c099a"
+  integrity sha1-R+Y/evVa+m+S4VAOaQ64uFKcCZo=
+
+jsbn@~0.1.0:
+  version "0.1.1"
+  resolved "https://registry.yarnpkg.com/jsbn/-/jsbn-0.1.1.tgz#a5e654c2e5a2deb5f201d96cefbca80c0ef2f513"
+  integrity sha1-peZUwuWi3rXyAdls77yoDA7y9RM=
+
+json-schema-traverse@^0.4.1:
+  version "0.4.1"
+  resolved "https://registry.yarnpkg.com/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz#69f6a87d9513ab8bb8fe63bdb0979c448e684660"
+  integrity sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==
+
+json-schema@0.2.3:
+  version "0.2.3"
+  resolved "https://registry.yarnpkg.com/json-schema/-/json-schema-0.2.3.tgz#b480c892e59a2f05954ce727bd3f2a4e882f9e13"
+  integrity sha1-tIDIkuWaLwWVTOcnvT8qTogvnhM=
+
+json-stringify-safe@~5.0.1:
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz#1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
+  integrity sha1-Epai1Y/UXxmg9s4B1lcB4sc1tus=
+
+jsprim@^1.2.2:
+  version "1.4.1"
+  resolved "https://registry.yarnpkg.com/jsprim/-/jsprim-1.4.1.tgz#313e66bc1e5cc06e438bc1b7499c2e5c56acb6a2"
+  integrity sha1-MT5mvB5cwG5Di8G3SZwuXFastqI=
+  dependencies:
+    assert-plus "1.0.0"
+    extsprintf "1.3.0"
+    json-schema "0.2.3"
+    verror "1.10.0"
+
+mime-db@1.44.0:
+  version "1.44.0"
+  resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.44.0.tgz#fa11c5eb0aca1334b4233cb4d52f10c5a6272f92"
+  integrity sha512-/NOTfLrsPBVeH7YtFPgsVWveuL+4SjjYxaQ1xtM1KMFj7HdxlBlxeyNLzhyJVx7r4rZGJAZ/6lkKCitSc/Nmpg==
+
+mime-types@^2.1.12, mime-types@~2.1.19:
+  version "2.1.27"
+  resolved "https://registry.yarnpkg.com/mime-types/-/mime-types-2.1.27.tgz#47949f98e279ea53119f5722e0f34e529bec009f"
+  integrity sha512-JIhqnCasI9yD+SsmkquHBxTSEuZdQX5BuQnS2Vc7puQQQ+8yiP5AY5uWhpdv4YL4VM5c6iliiYWPgJ/nJQLp7w==
+  dependencies:
+    mime-db "1.44.0"
+
+minimatch@^3.0.4:
+  version "3.0.4"
+  resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-3.0.4.tgz#5166e286457f03306064be5497e8dbb0c3d32083"
+  integrity sha512-yJHVQEhyqPLUTgt9B83PXu6W3rx4MvvHvSUvToogpwoGDOUQ+yDrR0HRot+yOCdCO7u4hX3pWft6kWBBcqh0UA==
+  dependencies:
+    brace-expansion "^1.1.7"
+
+minimist@0.0.8:
+  version "0.0.8"
+  resolved "https://registry.yarnpkg.com/minimist/-/minimist-0.0.8.tgz#857fcabfc3397d2625b8228262e86aa7a011b05d"
+  integrity sha1-hX/Kv8M5fSYluCKCYuhqp6ARsF0=
+
+minimist@^1.2.0:
+  version "1.2.0"
+  resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.0.tgz#a35008b20f41383eec1fb914f4cd5df79a264284"
+  integrity sha1-o1AIsg9BOD7sH7kU9M1d95omQoQ=
+
+minipass@^2.2.1, minipass@^2.3.4:
+  version "2.3.5"
+  resolved "https://registry.yarnpkg.com/minipass/-/minipass-2.3.5.tgz#cacebe492022497f656b0f0f51e2682a9ed2d848"
+  integrity sha512-Gi1W4k059gyRbyVUZQ4mEqLm0YIUiGYfvxhF6SIlk3ui1WVxMTGfGdQ2SInh3PDrRTVvPKgULkpJtT4RH10+VA==
+  dependencies:
+    safe-buffer "^5.1.2"
+    yallist "^3.0.0"
+
+minizlib@^1.1.1:
+  version "1.2.1"
+  resolved "https://registry.yarnpkg.com/minizlib/-/minizlib-1.2.1.tgz#dd27ea6136243c7c880684e8672bb3a45fd9b614"
+  integrity sha512-7+4oTUOWKg7AuL3vloEWekXY2/D20cevzsrNT2kGWm+39J9hGTCBv8VI5Pm5lXZ/o3/mdR4f8rflAPhnQb8mPA==
+  dependencies:
+    minipass "^2.2.1"
+
+mkdirp@^0.5.0, mkdirp@^0.5.1:
+  version "0.5.1"
+  resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.1.tgz#30057438eac6cf7f8c4767f38648d6697d75c903"
+  integrity sha1-MAV0OOrGz3+MR2fzhkjWaX11yQM=
+  dependencies:
+    minimist "0.0.8"
+
+ms@2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/ms/-/ms-2.0.0.tgz#5608aeadfc00be6c2901df5f9861788de0d597c8"
+  integrity sha1-VgiurfwAvmwpAd9fmGF4jeDVl8g=
+
+needle@^2.2.1:
+  version "2.2.4"
+  resolved "https://registry.yarnpkg.com/needle/-/needle-2.2.4.tgz#51931bff82533b1928b7d1d69e01f1b00ffd2a4e"
+  integrity sha512-HyoqEb4wr/rsoaIDfTH2aVL9nWtQqba2/HvMv+++m8u0dz808MaagKILxtfeSN7QU7nvbQ79zk3vYOJp9zsNEA==
+  dependencies:
+    debug "^2.1.2"
+    iconv-lite "^0.4.4"
+    sax "^1.2.4"
+
+node-pre-gyp@^0.13.0:
+  version "0.13.0"
+  resolved "https://registry.yarnpkg.com/node-pre-gyp/-/node-pre-gyp-0.13.0.tgz#df9ab7b68dd6498137717838e4f92a33fc9daa42"
+  integrity sha512-Md1D3xnEne8b/HGVQkZZwV27WUi1ZRuZBij24TNaZwUPU3ZAFtvT6xxJGaUVillfmMKnn5oD1HoGsp2Ftik7SQ==
+  dependencies:
+    detect-libc "^1.0.2"
+    mkdirp "^0.5.1"
+    needle "^2.2.1"
+    nopt "^4.0.1"
+    npm-packlist "^1.1.6"
+    npmlog "^4.0.2"
+    rc "^1.2.7"
+    rimraf "^2.6.1"
+    semver "^5.3.0"
+    tar "^4"
+
+nopt@^4.0.1:
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/nopt/-/nopt-4.0.1.tgz#d0d4685afd5415193c8c7505602d0d17cd64474d"
+  integrity sha1-0NRoWv1UFRk8jHUFYC0NF81kR00=
+  dependencies:
+    abbrev "1"
+    osenv "^0.1.4"
+
+npm-bundled@^1.0.1:
+  version "1.0.6"
+  resolved "https://registry.yarnpkg.com/npm-bundled/-/npm-bundled-1.0.6.tgz#e7ba9aadcef962bb61248f91721cd932b3fe6bdd"
+  integrity sha512-8/JCaftHwbd//k6y2rEWp6k1wxVfpFzB6t1p825+cUb7Ym2XQfhwIC5KwhrvzZRJu+LtDE585zVaS32+CGtf0g==
+
+npm-packlist@^1.1.6:
+  version "1.4.1"
+  resolved "https://registry.yarnpkg.com/npm-packlist/-/npm-packlist-1.4.1.tgz#19064cdf988da80ea3cee45533879d90192bbfbc"
+  integrity sha512-+TcdO7HJJ8peiiYhvPxsEDhF3PJFGUGRcFsGve3vxvxdcpO2Z4Z7rkosRM0kWj6LfbK/P0gu3dzk5RU1ffvFcw==
+  dependencies:
+    ignore-walk "^3.0.1"
+    npm-bundled "^1.0.1"
+
+npmlog@^4.0.2:
+  version "4.1.2"
+  resolved "https://registry.yarnpkg.com/npmlog/-/npmlog-4.1.2.tgz#08a7f2a8bf734604779a9efa4ad5cc717abb954b"
+  integrity sha512-2uUqazuKlTaSI/dC8AzicUck7+IrEaOnN/e0jd3Xtt1KcGpwx30v50mL7oPyr/h9bL3E4aZccVwpwP+5W9Vjkg==
+  dependencies:
+    are-we-there-yet "~1.1.2"
+    console-control-strings "~1.1.0"
+    gauge "~2.7.3"
+    set-blocking "~2.0.0"
+
+number-is-nan@^1.0.0:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/number-is-nan/-/number-is-nan-1.0.1.tgz#097b602b53422a522c1afb8790318336941a011d"
+  integrity sha1-CXtgK1NCKlIsGvuHkDGDNpQaAR0=
+
+oauth-sign@~0.9.0:
+  version "0.9.0"
+  resolved "https://registry.yarnpkg.com/oauth-sign/-/oauth-sign-0.9.0.tgz#47a7b016baa68b5fa0ecf3dee08a85c679ac6455"
+  integrity sha512-fexhUFFPTGV8ybAtSIGbV6gOkSv8UtRbDBnAyLQw4QPKkgNlsH2ByPGtMUqdWkos6YCRmAqViwgZrJc/mRDzZQ==
+
+object-assign@^4.1.0:
+  version "4.1.1"
+  resolved "https://registry.yarnpkg.com/object-assign/-/object-assign-4.1.1.tgz#2109adc7965887cfc05cbbd442cac8bfbb360863"
+  integrity sha1-IQmtx5ZYh8/AXLvUQsrIv7s2CGM=
+
+once@^1.3.0:
+  version "1.4.0"
+  resolved "https://registry.yarnpkg.com/once/-/once-1.4.0.tgz#583b1aa775961d4b113ac17d9c50baef9dd76bd1"
+  integrity sha1-WDsap3WWHUsROsF9nFC6753Xa9E=
+  dependencies:
+    wrappy "1"
+
+os-homedir@^1.0.0:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/os-homedir/-/os-homedir-1.0.2.tgz#ffbc4988336e0e833de0c168c7ef152121aa7fb3"
+  integrity sha1-/7xJiDNuDoM94MFox+8VISGqf7M=
+
+os-tmpdir@^1.0.0:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/os-tmpdir/-/os-tmpdir-1.0.2.tgz#bbe67406c79aa85c5cfec766fe5734555dfa1274"
+  integrity sha1-u+Z0BseaqFxc/sdm/lc0VV36EnQ=
+
+osenv@^0.1.4:
+  version "0.1.5"
+  resolved "https://registry.yarnpkg.com/osenv/-/osenv-0.1.5.tgz#85cdfafaeb28e8677f416e287592b5f3f49ea410"
+  integrity sha512-0CWcCECdMVc2Rw3U5w9ZjqX6ga6ubk1xDVKxtBQPK7wis/0F2r9T6k4ydGYhecl7YUBxBVxhL5oisPsNxAPe2g==
+  dependencies:
+    os-homedir "^1.0.0"
+    os-tmpdir "^1.0.0"
+
+path-is-absolute@^1.0.0:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/path-is-absolute/-/path-is-absolute-1.0.1.tgz#174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
+  integrity sha1-F0uSaHNVNP+8es5r9TpanhtcX18=
+
+performance-now@^2.1.0:
+  version "2.1.0"
+  resolved "https://registry.yarnpkg.com/performance-now/-/performance-now-2.1.0.tgz#6309f4e0e5fa913ec1c69307ae364b4b377c9e7b"
+  integrity sha1-Ywn04OX6kT7BxpMHrjZLSzd8nns=
+
+process-nextick-args@~2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/process-nextick-args/-/process-nextick-args-2.0.0.tgz#a37d732f4271b4ab1ad070d35508e8290788ffaa"
+  integrity sha512-MtEC1TqN0EU5nephaJ4rAtThHtC86dNN9qCuEhtshvpVBkAW5ZO7BASN9REnF9eoXGcRub+pFuKEpOHE+HbEMw==
+
+psl@^1.1.28:
+  version "1.8.0"
+  resolved "https://registry.yarnpkg.com/psl/-/psl-1.8.0.tgz#9326f8bcfb013adcc005fdff056acce020e51c24"
+  integrity sha512-RIdOzyoavK+hA18OGGWDqUTsCLhtA7IcZ/6NCs4fFJaHBDab+pDDmDIByWFRQJq2Cd7r1OoQxBGKOaztq+hjIQ==
+
+punycode@^2.1.0, punycode@^2.1.1:
+  version "2.1.1"
+  resolved "https://registry.yarnpkg.com/punycode/-/punycode-2.1.1.tgz#b58b010ac40c22c5657616c8d2c2c02c7bf479ec"
+  integrity sha512-XRsRjdf+j5ml+y/6GKHPZbrF/8p2Yga0JPtdqTIY2Xe5ohJPD9saDJJLPvp9+NSBprVvevdXZybnj2cv8OEd0A==
+
+qs@~6.5.2:
+  version "6.5.2"
+  resolved "https://registry.yarnpkg.com/qs/-/qs-6.5.2.tgz#cb3ae806e8740444584ef154ce8ee98d403f3e36"
+  integrity sha512-N5ZAX4/LxJmF+7wN74pUD6qAh9/wnvdQcjq9TZjevvXzSUo7bfmw91saqMjzGS2xq91/odN2dW/WOl7qQHNDGA==
+
+rc@^1.2.7:
+  version "1.2.8"
+  resolved "https://registry.yarnpkg.com/rc/-/rc-1.2.8.tgz#cd924bf5200a075b83c188cd6b9e211b7fc0d3ed"
+  integrity sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==
+  dependencies:
+    deep-extend "^0.6.0"
+    ini "~1.3.0"
+    minimist "^1.2.0"
+    strip-json-comments "~2.0.1"
+
+readable-stream@^2.0.6:
+  version "2.3.6"
+  resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-2.3.6.tgz#b11c27d88b8ff1fbe070643cf94b0c79ae1b0aaf"
+  integrity sha512-tQtKA9WIAhBF3+VLAseyMqZeBjW0AHJoxOtYqSUZNJxauErmLbVm2FW1y+J/YA9dUrAC39ITejlZWhVIwawkKw==
+  dependencies:
+    core-util-is "~1.0.0"
+    inherits "~2.0.3"
+    isarray "~1.0.0"
+    process-nextick-args "~2.0.0"
+    safe-buffer "~5.1.1"
+    string_decoder "~1.1.1"
+    util-deprecate "~1.0.1"
+
+request@2.88.2:
+  version "2.88.2"
+  resolved "https://registry.yarnpkg.com/request/-/request-2.88.2.tgz#d73c918731cb5a87da047e207234146f664d12b3"
+  integrity sha512-MsvtOrfG9ZcrOwAW+Qi+F6HbD0CWXEh9ou77uOb7FM2WPhwT7smM833PzanhJLsgXjN89Ir6V2PczXNnMpwKhw==
+  dependencies:
+    aws-sign2 "~0.7.0"
+    aws4 "^1.8.0"
+    caseless "~0.12.0"
+    combined-stream "~1.0.6"
+    extend "~3.0.2"
+    forever-agent "~0.6.1"
+    form-data "~2.3.2"
+    har-validator "~5.1.3"
+    http-signature "~1.2.0"
+    is-typedarray "~1.0.0"
+    isstream "~0.1.2"
+    json-stringify-safe "~5.0.1"
+    mime-types "~2.1.19"
+    oauth-sign "~0.9.0"
+    performance-now "^2.1.0"
+    qs "~6.5.2"
+    safe-buffer "^5.1.2"
+    tough-cookie "~2.5.0"
+    tunnel-agent "^0.6.0"
+    uuid "^3.3.2"
+
+rimraf@^2.6.1:
+  version "2.6.3"
+  resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-2.6.3.tgz#b2d104fe0d8fb27cf9e0a1cda8262dd3833c6cab"
+  integrity sha512-mwqeW5XsA2qAejG46gYdENaxXjx9onRNCfn7L0duuP4hCuTIi/QO7PDK07KJfp1d+izWPrzEJDcSqBa0OZQriA==
+  dependencies:
+    glob "^7.1.3"
+
+safe-buffer@^5.0.1:
+  version "5.2.1"
+  resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.2.1.tgz#1eaf9fa9bdb1fdd4ec75f58f9cdb4e6b7827eec6"
+  integrity sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==
+
+safe-buffer@^5.1.2, safe-buffer@~5.1.0, safe-buffer@~5.1.1:
+  version "5.1.2"
+  resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.1.2.tgz#991ec69d296e0313747d59bdfd2b745c35f8828d"
+  integrity sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==
+
+"safer-buffer@>= 2.1.2 < 3", safer-buffer@^2.0.2, safer-buffer@^2.1.0, safer-buffer@~2.1.0:
+  version "2.1.2"
+  resolved "https://registry.yarnpkg.com/safer-buffer/-/safer-buffer-2.1.2.tgz#44fa161b0187b9549dd84bb91802f9bd8385cd6a"
+  integrity sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==
+
+sax@^1.2.4:
+  version "1.2.4"
+  resolved "https://registry.yarnpkg.com/sax/-/sax-1.2.4.tgz#2816234e2378bddc4e5354fab5caa895df7100d9"
+  integrity sha512-NqVDv9TpANUjFm0N8uM5GxL36UgKi9/atZw+x7YFnQ8ckwFGKrl4xX4yWtrey3UJm5nP1kUbnYgLopqWNSRhWw==
+
+semver@^5.3.0:
+  version "5.6.0"
+  resolved "https://registry.yarnpkg.com/semver/-/semver-5.6.0.tgz#7e74256fbaa49c75aa7c7a205cc22799cac80004"
+  integrity sha512-RS9R6R35NYgQn++fkDWaOmqGoj4Ek9gGs+DPxNUZKuwE183xjJroKvyo1IzVFeXvUrvmALy6FWD5xrdJT25gMg==
+
+set-blocking@~2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/set-blocking/-/set-blocking-2.0.0.tgz#045f9782d011ae9a6803ddd382b24392b3d890f7"
+  integrity sha1-BF+XgtARrppoA93TgrJDkrPYkPc=
+
+signal-exit@^3.0.0:
+  version "3.0.2"
+  resolved "https://registry.yarnpkg.com/signal-exit/-/signal-exit-3.0.2.tgz#b5fdc08f1287ea1178628e415e25132b73646c6d"
+  integrity sha1-tf3AjxKH6hF4Yo5BXiUTK3NkbG0=
+
+sshpk@^1.7.0:
+  version "1.16.1"
+  resolved "https://registry.yarnpkg.com/sshpk/-/sshpk-1.16.1.tgz#fb661c0bef29b39db40769ee39fa70093d6f6877"
+  integrity sha512-HXXqVUq7+pcKeLqqZj6mHFUMvXtOJt1uoUx09pFW6011inTMxqI8BA8PM95myrIyyKwdnzjdFjLiE6KBPVtJIg==
+  dependencies:
+    asn1 "~0.2.3"
+    assert-plus "^1.0.0"
+    bcrypt-pbkdf "^1.0.0"
+    dashdash "^1.12.0"
+    ecc-jsbn "~0.1.1"
+    getpass "^0.1.1"
+    jsbn "~0.1.0"
+    safer-buffer "^2.0.2"
+    tweetnacl "~0.14.0"
+
+string-width@^1.0.1:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/string-width/-/string-width-1.0.2.tgz#118bdf5b8cdc51a2a7e70d211e07e2b0b9b107d3"
+  integrity sha1-EYvfW4zcUaKn5w0hHgfisLmxB9M=
+  dependencies:
+    code-point-at "^1.0.0"
+    is-fullwidth-code-point "^1.0.0"
+    strip-ansi "^3.0.0"
+
+"string-width@^1.0.2 || 2":
+  version "2.1.1"
+  resolved "https://registry.yarnpkg.com/string-width/-/string-width-2.1.1.tgz#ab93f27a8dc13d28cac815c462143a6d9012ae9e"
+  integrity sha512-nOqH59deCq9SRHlxq1Aw85Jnt4w6KvLKqWVik6oA9ZklXLNIOlqg4F2yrT1MVaTjAqvVwdfeZ7w7aCvJD7ugkw==
+  dependencies:
+    is-fullwidth-code-point "^2.0.0"
+    strip-ansi "^4.0.0"
+
+string_decoder@~1.1.1:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-1.1.1.tgz#9cf1611ba62685d7030ae9e4ba34149c3af03fc8"
+  integrity sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==
+  dependencies:
+    safe-buffer "~5.1.0"
+
+strip-ansi@^3.0.0, strip-ansi@^3.0.1:
+  version "3.0.1"
+  resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-3.0.1.tgz#6a385fb8853d952d5ff05d0e8aaf94278dc63dcf"
+  integrity sha1-ajhfuIU9lS1f8F0Oiq+UJ43GPc8=
+  dependencies:
+    ansi-regex "^2.0.0"
+
+strip-ansi@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-4.0.0.tgz#a8479022eb1ac368a871389b635262c505ee368f"
+  integrity sha1-qEeQIusaw2iocTibY1JixQXuNo8=
+  dependencies:
+    ansi-regex "^3.0.0"
+
+strip-json-comments@~2.0.1:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/strip-json-comments/-/strip-json-comments-2.0.1.tgz#3c531942e908c2697c0ec344858c286c7ca0a60a"
+  integrity sha1-PFMZQukIwml8DsNEhYwobHygpgo=
+
+tar@^4:
+  version "4.4.8"
+  resolved "https://registry.yarnpkg.com/tar/-/tar-4.4.8.tgz#b19eec3fde2a96e64666df9fdb40c5ca1bc3747d"
+  integrity sha512-LzHF64s5chPQQS0IYBn9IN5h3i98c12bo4NCO7e0sGM2llXQ3p2FGC5sdENN4cTW48O915Sh+x+EXx7XW96xYQ==
+  dependencies:
+    chownr "^1.1.1"
+    fs-minipass "^1.2.5"
+    minipass "^2.3.4"
+    minizlib "^1.1.1"
+    mkdirp "^0.5.0"
+    safe-buffer "^5.1.2"
+    yallist "^3.0.2"
+
+tough-cookie@~2.5.0:
+  version "2.5.0"
+  resolved "https://registry.yarnpkg.com/tough-cookie/-/tough-cookie-2.5.0.tgz#cd9fb2a0aa1d5a12b473bd9fb96fa3dcff65ade2"
+  integrity sha512-nlLsUzgm1kfLXSXfRZMc1KLAugd4hqJHDTvc2hDIwS3mZAfMEuMbc03SujMF+GEcpaX/qboeycw6iO8JwVv2+g==
+  dependencies:
+    psl "^1.1.28"
+    punycode "^2.1.1"
+
+tunnel-agent@^0.6.0:
+  version "0.6.0"
+  resolved "https://registry.yarnpkg.com/tunnel-agent/-/tunnel-agent-0.6.0.tgz#27a5dea06b36b04a0a9966774b290868f0fc40fd"
+  integrity sha1-J6XeoGs2sEoKmWZ3SykIaPD8QP0=
+  dependencies:
+    safe-buffer "^5.0.1"
+
+tweetnacl@^0.14.3, tweetnacl@~0.14.0:
+  version "0.14.5"
+  resolved "https://registry.yarnpkg.com/tweetnacl/-/tweetnacl-0.14.5.tgz#5ae68177f192d4456269d108afa93ff8743f4f64"
+  integrity sha1-WuaBd/GS1EViadEIr6k/+HQ/T2Q=
+
+uri-js@^4.2.2:
+  version "4.2.2"
+  resolved "https://registry.yarnpkg.com/uri-js/-/uri-js-4.2.2.tgz#94c540e1ff772956e2299507c010aea6c8838eb0"
+  integrity sha512-KY9Frmirql91X2Qgjry0Wd4Y+YTdrdZheS8TFwvkbLWf/G5KNJDCh6pKL5OZctEW4+0Baa5idK2ZQuELRwPznQ==
+  dependencies:
+    punycode "^2.1.0"
+
+util-deprecate@~1.0.1:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/util-deprecate/-/util-deprecate-1.0.2.tgz#450d4dc9fa70de732762fbd2d4a28981419a0ccf"
+  integrity sha1-RQ1Nyfpw3nMnYvvS1KKJgUGaDM8=
+
+uuid@^3.3.2:
+  version "3.4.0"
+  resolved "https://registry.yarnpkg.com/uuid/-/uuid-3.4.0.tgz#b23e4358afa8a202fe7a100af1f5f883f02007ee"
+  integrity sha512-HjSDRw6gZE5JMggctHBcjVak08+KEVhSIiDzFnT9S9aegmp85S/bReBVTb4QTFaRNptJ9kuYaNhnbNEOkbKb/A==
+
+verror@1.10.0:
+  version "1.10.0"
+  resolved "https://registry.yarnpkg.com/verror/-/verror-1.10.0.tgz#3a105ca17053af55d6e270c1f8288682e18da400"
+  integrity sha1-OhBcoXBTr1XW4nDB+CiGguGNpAA=
+  dependencies:
+    assert-plus "^1.0.0"
+    core-util-is "1.0.2"
+    extsprintf "^1.2.0"
+
+webidl-conversions@^4.0.2:
+  version "4.0.2"
+  resolved "https://registry.yarnpkg.com/webidl-conversions/-/webidl-conversions-4.0.2.tgz#a855980b1f0b6b359ba1d5d9fb39ae941faa63ad"
+  integrity sha512-YQ+BmxuTgd6UXZW3+ICGfyqRyHXVlD5GtQr5+qjiNW7bF0cqrzX500HVXPBOvgXb5YnzDd+h0zqyv61KUD7+Sg==
+
+wide-align@^1.1.0:
+  version "1.1.3"
+  resolved "https://registry.yarnpkg.com/wide-align/-/wide-align-1.1.3.tgz#ae074e6bdc0c14a431e804e624549c633b000457"
+  integrity sha512-QGkOQc8XL6Bt5PwnsExKBPuMKBxnGxWWW3fU55Xt4feHozMUhdUMaBCk290qpm/wG5u/RSKzwdAC4i51YigihA==
+  dependencies:
+    string-width "^1.0.2 || 2"
+
+wrappy@1:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/wrappy/-/wrappy-1.0.2.tgz#b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
+  integrity sha1-tSQ9jz7BqjXxNkYFvA0QNuMKtp8=
+
+wrtc@0.4.7:
+  version "0.4.7"
+  resolved "https://registry.yarnpkg.com/wrtc/-/wrtc-0.4.7.tgz#c61530cd662713e50bffe64b7a78673ce070426c"
+  integrity sha512-P6Hn7VT4lfSH49HxLHcHhDq+aFf/jd9dPY7lDHeFhZ22N3858EKuwm2jmnlPzpsRGEPaoF6XwkcxY5SYnt4f/g==
+  dependencies:
+    node-pre-gyp "^0.13.0"
+  optionalDependencies:
+    domexception "^1.0.1"
+
+yallist@^3.0.0, yallist@^3.0.2:
+  version "3.0.3"
+  resolved "https://registry.yarnpkg.com/yallist/-/yallist-3.0.3.tgz#b4b049e314be545e3ce802236d6cd22cd91c3de9"
+  integrity sha512-S+Zk8DEWE6oKpV+vI3qWkaK+jSbIK86pCwe2IF/xwIpQ8jEuxpw9NyaGjmp9+BoJv5FV2piqCDcoCtStppiq2A==
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/.gitignore b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/.gitignore
new file mode 100644
index 000000000..daf913b1b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/.gitignore
@@ -0,0 +1,24 @@
+# Compiled Object files, Static and Dynamic libs (Shared Objects)
+*.o
+*.a
+*.so
+
+# Folders
+_obj
+_test
+
+# Architecture specific extensions/prefixes
+*.[568vq]
+[568vq].out
+
+*.cgo1.go
+*.cgo2.c
+_cgo_defun.c
+_cgo_gotypes.go
+_cgo_export.*
+
+_testmain.go
+
+*.exe
+*.test
+*.prof
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/.travis.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/.travis.yml
new file mode 100644
index 000000000..9159de03e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/.travis.yml
@@ -0,0 +1,10 @@
+language: go
+go_import_path: github.com/pkg/errors
+go:
+  - 1.11.x
+  - 1.12.x
+  - 1.13.x
+  - tip
+
+script:
+  - make check
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/LICENSE b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/LICENSE
new file mode 100644
index 000000000..835ba3e75
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/LICENSE
@@ -0,0 +1,23 @@
+Copyright (c) 2015, Dave Cheney <dave@cheney.net>
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/Makefile b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/Makefile
new file mode 100644
index 000000000..ce9d7cded
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/Makefile
@@ -0,0 +1,44 @@
+PKGS := github.com/pkg/errors
+SRCDIRS := $(shell go list -f '{{.Dir}}' $(PKGS))
+GO := go
+
+check: test vet gofmt misspell unconvert staticcheck ineffassign unparam
+
+test: 
+	$(GO) test $(PKGS)
+
+vet: | test
+	$(GO) vet $(PKGS)
+
+staticcheck:
+	$(GO) get honnef.co/go/tools/cmd/staticcheck
+	staticcheck -checks all $(PKGS)
+
+misspell:
+	$(GO) get github.com/client9/misspell/cmd/misspell
+	misspell \
+		-locale GB \
+		-error \
+		*.md *.go
+
+unconvert:
+	$(GO) get github.com/mdempsky/unconvert
+	unconvert -v $(PKGS)
+
+ineffassign:
+	$(GO) get github.com/gordonklaus/ineffassign
+	find $(SRCDIRS) -name '*.go' | xargs ineffassign
+
+pedantic: check errcheck
+
+unparam:
+	$(GO) get mvdan.cc/unparam
+	unparam ./...
+
+errcheck:
+	$(GO) get github.com/kisielk/errcheck
+	errcheck $(PKGS)
+
+gofmt:  
+	@echo Checking code is gofmted
+	@test -z "$(shell gofmt -s -l -d -e $(SRCDIRS) | tee /dev/stderr)"
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/README.md b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/README.md
new file mode 100644
index 000000000..54dfdcb12
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/README.md
@@ -0,0 +1,59 @@
+# errors [![Travis-CI](https://travis-ci.org/pkg/errors.svg)](https://travis-ci.org/pkg/errors) [![AppVeyor](https://ci.appveyor.com/api/projects/status/b98mptawhudj53ep/branch/master?svg=true)](https://ci.appveyor.com/project/davecheney/errors/branch/master) [![GoDoc](https://godoc.org/github.com/pkg/errors?status.svg)](http://godoc.org/github.com/pkg/errors) [![Report card](https://goreportcard.com/badge/github.com/pkg/errors)](https://goreportcard.com/report/github.com/pkg/errors) [![Sourcegraph](https://sourcegraph.com/github.com/pkg/errors/-/badge.svg)](https://sourcegraph.com/github.com/pkg/errors?badge)
+
+Package errors provides simple error handling primitives.
+
+`go get github.com/pkg/errors`
+
+The traditional error handling idiom in Go is roughly akin to
+```go
+if err != nil {
+        return err
+}
+```
+which applied recursively up the call stack results in error reports without context or debugging information. The errors package allows programmers to add context to the failure path in their code in a way that does not destroy the original value of the error.
+
+## Adding context to an error
+
+The errors.Wrap function returns a new error that adds context to the original error. For example
+```go
+_, err := ioutil.ReadAll(r)
+if err != nil {
+        return errors.Wrap(err, "read failed")
+}
+```
+## Retrieving the cause of an error
+
+Using `errors.Wrap` constructs a stack of errors, adding context to the preceding error. Depending on the nature of the error it may be necessary to reverse the operation of errors.Wrap to retrieve the original error for inspection. Any error value which implements this interface can be inspected by `errors.Cause`.
+```go
+type causer interface {
+        Cause() error
+}
+```
+`errors.Cause` will recursively retrieve the topmost error which does not implement `causer`, which is assumed to be the original cause. For example:
+```go
+switch err := errors.Cause(err).(type) {
+case *MyError:
+        // handle specifically
+default:
+        // unknown error
+}
+```
+
+[Read the package documentation for more information](https://godoc.org/github.com/pkg/errors).
+
+## Roadmap
+
+With the upcoming [Go2 error proposals](https://go.googlesource.com/proposal/+/master/design/go2draft.md) this package is moving into maintenance mode. The roadmap for a 1.0 release is as follows:
+
+- 0.9. Remove pre Go 1.9 and Go 1.10 support, address outstanding pull requests (if possible)
+- 1.0. Final release.
+
+## Contributing
+
+Because of the Go2 errors changes, this package is not accepting proposals for new functionality. With that said, we welcome pull requests, bug fixes and issue reports. 
+
+Before sending a PR, please discuss your change by raising an issue.
+
+## License
+
+BSD-2-Clause
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/appveyor.yml b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/appveyor.yml
new file mode 100644
index 000000000..a932eade0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/appveyor.yml
@@ -0,0 +1,32 @@
+version: build-{build}.{branch}
+
+clone_folder: C:\gopath\src\github.com\pkg\errors
+shallow_clone: true # for startup speed
+
+environment:
+  GOPATH: C:\gopath
+
+platform:
+  - x64
+
+# http://www.appveyor.com/docs/installed-software
+install:
+  # some helpful output for debugging builds
+  - go version
+  - go env
+  # pre-installed MinGW at C:\MinGW is 32bit only
+  # but MSYS2 at C:\msys64 has mingw64
+  - set PATH=C:\msys64\mingw64\bin;%PATH%
+  - gcc --version
+  - g++ --version
+
+build_script:
+  - go install -v ./...
+
+test_script:
+  - set PATH=C:\gopath\bin;%PATH%
+  - go test -v ./...
+
+#artifacts:
+#  - path: '%GOPATH%\bin\*.exe'
+deploy: off
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/errors.go b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/errors.go
new file mode 100644
index 000000000..161aea258
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/errors.go
@@ -0,0 +1,288 @@
+// Package errors provides simple error handling primitives.
+//
+// The traditional error handling idiom in Go is roughly akin to
+//
+//     if err != nil {
+//             return err
+//     }
+//
+// which when applied recursively up the call stack results in error reports
+// without context or debugging information. The errors package allows
+// programmers to add context to the failure path in their code in a way
+// that does not destroy the original value of the error.
+//
+// Adding context to an error
+//
+// The errors.Wrap function returns a new error that adds context to the
+// original error by recording a stack trace at the point Wrap is called,
+// together with the supplied message. For example
+//
+//     _, err := ioutil.ReadAll(r)
+//     if err != nil {
+//             return errors.Wrap(err, "read failed")
+//     }
+//
+// If additional control is required, the errors.WithStack and
+// errors.WithMessage functions destructure errors.Wrap into its component
+// operations: annotating an error with a stack trace and with a message,
+// respectively.
+//
+// Retrieving the cause of an error
+//
+// Using errors.Wrap constructs a stack of errors, adding context to the
+// preceding error. Depending on the nature of the error it may be necessary
+// to reverse the operation of errors.Wrap to retrieve the original error
+// for inspection. Any error value which implements this interface
+//
+//     type causer interface {
+//             Cause() error
+//     }
+//
+// can be inspected by errors.Cause. errors.Cause will recursively retrieve
+// the topmost error that does not implement causer, which is assumed to be
+// the original cause. For example:
+//
+//     switch err := errors.Cause(err).(type) {
+//     case *MyError:
+//             // handle specifically
+//     default:
+//             // unknown error
+//     }
+//
+// Although the causer interface is not exported by this package, it is
+// considered a part of its stable public interface.
+//
+// Formatted printing of errors
+//
+// All error values returned from this package implement fmt.Formatter and can
+// be formatted by the fmt package. The following verbs are supported:
+//
+//     %s    print the error. If the error has a Cause it will be
+//           printed recursively.
+//     %v    see %s
+//     %+v   extended format. Each Frame of the error's StackTrace will
+//           be printed in detail.
+//
+// Retrieving the stack trace of an error or wrapper
+//
+// New, Errorf, Wrap, and Wrapf record a stack trace at the point they are
+// invoked. This information can be retrieved with the following interface:
+//
+//     type stackTracer interface {
+//             StackTrace() errors.StackTrace
+//     }
+//
+// The returned errors.StackTrace type is defined as
+//
+//     type StackTrace []Frame
+//
+// The Frame type represents a call site in the stack trace. Frame supports
+// the fmt.Formatter interface that can be used for printing information about
+// the stack trace of this error. For example:
+//
+//     if err, ok := err.(stackTracer); ok {
+//             for _, f := range err.StackTrace() {
+//                     fmt.Printf("%+s:%d\n", f, f)
+//             }
+//     }
+//
+// Although the stackTracer interface is not exported by this package, it is
+// considered a part of its stable public interface.
+//
+// See the documentation for Frame.Format for more details.
+package errors
+
+import (
+	"fmt"
+	"io"
+)
+
+// New returns an error with the supplied message.
+// New also records the stack trace at the point it was called.
+func New(message string) error {
+	return &fundamental{
+		msg:   message,
+		stack: callers(),
+	}
+}
+
+// Errorf formats according to a format specifier and returns the string
+// as a value that satisfies error.
+// Errorf also records the stack trace at the point it was called.
+func Errorf(format string, args ...interface{}) error {
+	return &fundamental{
+		msg:   fmt.Sprintf(format, args...),
+		stack: callers(),
+	}
+}
+
+// fundamental is an error that has a message and a stack, but no caller.
+type fundamental struct {
+	msg string
+	*stack
+}
+
+func (f *fundamental) Error() string { return f.msg }
+
+func (f *fundamental) Format(s fmt.State, verb rune) {
+	switch verb {
+	case 'v':
+		if s.Flag('+') {
+			io.WriteString(s, f.msg)
+			f.stack.Format(s, verb)
+			return
+		}
+		fallthrough
+	case 's':
+		io.WriteString(s, f.msg)
+	case 'q':
+		fmt.Fprintf(s, "%q", f.msg)
+	}
+}
+
+// WithStack annotates err with a stack trace at the point WithStack was called.
+// If err is nil, WithStack returns nil.
+func WithStack(err error) error {
+	if err == nil {
+		return nil
+	}
+	return &withStack{
+		err,
+		callers(),
+	}
+}
+
+type withStack struct {
+	error
+	*stack
+}
+
+func (w *withStack) Cause() error { return w.error }
+
+// Unwrap provides compatibility for Go 1.13 error chains.
+func (w *withStack) Unwrap() error { return w.error }
+
+func (w *withStack) Format(s fmt.State, verb rune) {
+	switch verb {
+	case 'v':
+		if s.Flag('+') {
+			fmt.Fprintf(s, "%+v", w.Cause())
+			w.stack.Format(s, verb)
+			return
+		}
+		fallthrough
+	case 's':
+		io.WriteString(s, w.Error())
+	case 'q':
+		fmt.Fprintf(s, "%q", w.Error())
+	}
+}
+
+// Wrap returns an error annotating err with a stack trace
+// at the point Wrap is called, and the supplied message.
+// If err is nil, Wrap returns nil.
+func Wrap(err error, message string) error {
+	if err == nil {
+		return nil
+	}
+	err = &withMessage{
+		cause: err,
+		msg:   message,
+	}
+	return &withStack{
+		err,
+		callers(),
+	}
+}
+
+// Wrapf returns an error annotating err with a stack trace
+// at the point Wrapf is called, and the format specifier.
+// If err is nil, Wrapf returns nil.
+func Wrapf(err error, format string, args ...interface{}) error {
+	if err == nil {
+		return nil
+	}
+	err = &withMessage{
+		cause: err,
+		msg:   fmt.Sprintf(format, args...),
+	}
+	return &withStack{
+		err,
+		callers(),
+	}
+}
+
+// WithMessage annotates err with a new message.
+// If err is nil, WithMessage returns nil.
+func WithMessage(err error, message string) error {
+	if err == nil {
+		return nil
+	}
+	return &withMessage{
+		cause: err,
+		msg:   message,
+	}
+}
+
+// WithMessagef annotates err with the format specifier.
+// If err is nil, WithMessagef returns nil.
+func WithMessagef(err error, format string, args ...interface{}) error {
+	if err == nil {
+		return nil
+	}
+	return &withMessage{
+		cause: err,
+		msg:   fmt.Sprintf(format, args...),
+	}
+}
+
+type withMessage struct {
+	cause error
+	msg   string
+}
+
+func (w *withMessage) Error() string { return w.msg + ": " + w.cause.Error() }
+func (w *withMessage) Cause() error  { return w.cause }
+
+// Unwrap provides compatibility for Go 1.13 error chains.
+func (w *withMessage) Unwrap() error { return w.cause }
+
+func (w *withMessage) Format(s fmt.State, verb rune) {
+	switch verb {
+	case 'v':
+		if s.Flag('+') {
+			fmt.Fprintf(s, "%+v\n", w.Cause())
+			io.WriteString(s, w.msg)
+			return
+		}
+		fallthrough
+	case 's', 'q':
+		io.WriteString(s, w.Error())
+	}
+}
+
+// Cause returns the underlying cause of the error, if possible.
+// An error value has a cause if it implements the following
+// interface:
+//
+//     type causer interface {
+//            Cause() error
+//     }
+//
+// If the error does not implement Cause, the original error will
+// be returned. If the error is nil, nil will be returned without further
+// investigation.
+func Cause(err error) error {
+	type causer interface {
+		Cause() error
+	}
+
+	for err != nil {
+		cause, ok := err.(causer)
+		if !ok {
+			break
+		}
+		err = cause.Cause()
+	}
+	return err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/go113.go b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/go113.go
new file mode 100644
index 000000000..be0d10d0c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/go113.go
@@ -0,0 +1,38 @@
+// +build go1.13
+
+package errors
+
+import (
+	stderrors "errors"
+)
+
+// Is reports whether any error in err's chain matches target.
+//
+// The chain consists of err itself followed by the sequence of errors obtained by
+// repeatedly calling Unwrap.
+//
+// An error is considered to match a target if it is equal to that target or if
+// it implements a method Is(error) bool such that Is(target) returns true.
+func Is(err, target error) bool { return stderrors.Is(err, target) }
+
+// As finds the first error in err's chain that matches target, and if so, sets
+// target to that error value and returns true.
+//
+// The chain consists of err itself followed by the sequence of errors obtained by
+// repeatedly calling Unwrap.
+//
+// An error matches target if the error's concrete value is assignable to the value
+// pointed to by target, or if the error has a method As(interface{}) bool such that
+// As(target) returns true. In the latter case, the As method is responsible for
+// setting target.
+//
+// As will panic if target is not a non-nil pointer to either a type that implements
+// error, or to any interface type. As returns false if err is nil.
+func As(err error, target interface{}) bool { return stderrors.As(err, target) }
+
+// Unwrap returns the result of calling the Unwrap method on err, if err's
+// type contains an Unwrap method returning error.
+// Otherwise, Unwrap returns nil.
+func Unwrap(err error) error {
+	return stderrors.Unwrap(err)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/stack.go b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/stack.go
new file mode 100644
index 000000000..779a8348f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/github.com/pkg/errors/stack.go
@@ -0,0 +1,177 @@
+package errors
+
+import (
+	"fmt"
+	"io"
+	"path"
+	"runtime"
+	"strconv"
+	"strings"
+)
+
+// Frame represents a program counter inside a stack frame.
+// For historical reasons if Frame is interpreted as a uintptr
+// its value represents the program counter + 1.
+type Frame uintptr
+
+// pc returns the program counter for this frame;
+// multiple frames may have the same PC value.
+func (f Frame) pc() uintptr { return uintptr(f) - 1 }
+
+// file returns the full path to the file that contains the
+// function for this Frame's pc.
+func (f Frame) file() string {
+	fn := runtime.FuncForPC(f.pc())
+	if fn == nil {
+		return "unknown"
+	}
+	file, _ := fn.FileLine(f.pc())
+	return file
+}
+
+// line returns the line number of source code of the
+// function for this Frame's pc.
+func (f Frame) line() int {
+	fn := runtime.FuncForPC(f.pc())
+	if fn == nil {
+		return 0
+	}
+	_, line := fn.FileLine(f.pc())
+	return line
+}
+
+// name returns the name of this function, if known.
+func (f Frame) name() string {
+	fn := runtime.FuncForPC(f.pc())
+	if fn == nil {
+		return "unknown"
+	}
+	return fn.Name()
+}
+
+// Format formats the frame according to the fmt.Formatter interface.
+//
+//    %s    source file
+//    %d    source line
+//    %n    function name
+//    %v    equivalent to %s:%d
+//
+// Format accepts flags that alter the printing of some verbs, as follows:
+//
+//    %+s   function name and path of source file relative to the compile time
+//          GOPATH separated by \n\t (<funcname>\n\t<path>)
+//    %+v   equivalent to %+s:%d
+func (f Frame) Format(s fmt.State, verb rune) {
+	switch verb {
+	case 's':
+		switch {
+		case s.Flag('+'):
+			io.WriteString(s, f.name())
+			io.WriteString(s, "\n\t")
+			io.WriteString(s, f.file())
+		default:
+			io.WriteString(s, path.Base(f.file()))
+		}
+	case 'd':
+		io.WriteString(s, strconv.Itoa(f.line()))
+	case 'n':
+		io.WriteString(s, funcname(f.name()))
+	case 'v':
+		f.Format(s, 's')
+		io.WriteString(s, ":")
+		f.Format(s, 'd')
+	}
+}
+
+// MarshalText formats a stacktrace Frame as a text string. The output is the
+// same as that of fmt.Sprintf("%+v", f), but without newlines or tabs.
+func (f Frame) MarshalText() ([]byte, error) {
+	name := f.name()
+	if name == "unknown" {
+		return []byte(name), nil
+	}
+	return []byte(fmt.Sprintf("%s %s:%d", name, f.file(), f.line())), nil
+}
+
+// StackTrace is stack of Frames from innermost (newest) to outermost (oldest).
+type StackTrace []Frame
+
+// Format formats the stack of Frames according to the fmt.Formatter interface.
+//
+//    %s	lists source files for each Frame in the stack
+//    %v	lists the source file and line number for each Frame in the stack
+//
+// Format accepts flags that alter the printing of some verbs, as follows:
+//
+//    %+v   Prints filename, function, and line number for each Frame in the stack.
+func (st StackTrace) Format(s fmt.State, verb rune) {
+	switch verb {
+	case 'v':
+		switch {
+		case s.Flag('+'):
+			for _, f := range st {
+				io.WriteString(s, "\n")
+				f.Format(s, verb)
+			}
+		case s.Flag('#'):
+			fmt.Fprintf(s, "%#v", []Frame(st))
+		default:
+			st.formatSlice(s, verb)
+		}
+	case 's':
+		st.formatSlice(s, verb)
+	}
+}
+
+// formatSlice will format this StackTrace into the given buffer as a slice of
+// Frame, only valid when called with '%s' or '%v'.
+func (st StackTrace) formatSlice(s fmt.State, verb rune) {
+	io.WriteString(s, "[")
+	for i, f := range st {
+		if i > 0 {
+			io.WriteString(s, " ")
+		}
+		f.Format(s, verb)
+	}
+	io.WriteString(s, "]")
+}
+
+// stack represents a stack of program counters.
+type stack []uintptr
+
+func (s *stack) Format(st fmt.State, verb rune) {
+	switch verb {
+	case 'v':
+		switch {
+		case st.Flag('+'):
+			for _, pc := range *s {
+				f := Frame(pc)
+				fmt.Fprintf(st, "\n%+v", f)
+			}
+		}
+	}
+}
+
+func (s *stack) StackTrace() StackTrace {
+	f := make([]Frame, len(*s))
+	for i := 0; i < len(f); i++ {
+		f[i] = Frame((*s)[i])
+	}
+	return f
+}
+
+func callers() *stack {
+	const depth = 32
+	var pcs [depth]uintptr
+	n := runtime.Callers(3, pcs[:])
+	var st stack = pcs[0:n]
+	return &st
+}
+
+// funcname removes the path prefix component of a function's name reported by func.Name().
+func funcname(name string) string {
+	i := strings.LastIndex(name, "/")
+	name = name[i+1:]
+	i = strings.Index(name, ".")
+	return name[i+1:]
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/AUTHORS b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/AUTHORS
new file mode 100644
index 000000000..2b00ddba0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/AUTHORS
@@ -0,0 +1,3 @@
+# This source code refers to The Go Authors for copyright purposes.
+# The master list of authors is in the main Go distribution,
+# visible at https://tip.golang.org/AUTHORS.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/CONTRIBUTORS b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/CONTRIBUTORS
new file mode 100644
index 000000000..1fbd3e976
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/CONTRIBUTORS
@@ -0,0 +1,3 @@
+# This source code was written by the Go contributors.
+# The master list of contributors is in the main Go distribution,
+# visible at https://tip.golang.org/CONTRIBUTORS.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/LICENSE b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/LICENSE
new file mode 100644
index 000000000..6a66aea5e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/LICENSE
@@ -0,0 +1,27 @@
+Copyright (c) 2009 The Go Authors. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/PATENTS b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/PATENTS
new file mode 100644
index 000000000..733099041
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/PATENTS
@@ -0,0 +1,22 @@
+Additional IP Rights Grant (Patents)
+
+"This implementation" means the copyrightable works distributed by
+Google as part of the Go project.
+
+Google hereby grants to You a perpetual, worldwide, non-exclusive,
+no-charge, royalty-free, irrevocable (except as stated in this section)
+patent license to make, have made, use, offer to sell, sell, import,
+transfer and otherwise run, modify and propagate the contents of this
+implementation of Go, where such license applies only to those patent
+claims, both currently owned or controlled by Google and acquired in
+the future, licensable by Google that are necessarily infringed by this
+implementation of Go.  This grant does not include claims that would be
+infringed only as a consequence of further modification of this
+implementation.  If you or your agent or exclusive licensee institute or
+order or agree to the institution of patent litigation against any
+entity (including a cross-claim or counterclaim in a lawsuit) alleging
+that this implementation of Go or any code incorporated within this
+implementation of Go constitutes direct or contributory patent
+infringement, or inducement of patent infringement, then any patent
+rights granted to you under this License for this implementation of Go
+shall terminate as of the date such litigation is filed.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/cryptobyte/asn1.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/cryptobyte/asn1.go
new file mode 100644
index 000000000..d3596ee66
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/cryptobyte/asn1.go
@@ -0,0 +1,752 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package cryptobyte
+
+import (
+	encoding_asn1 "encoding/asn1"
+	"fmt"
+	"math/big"
+	"reflect"
+	"time"
+
+	"golang.org/x/crypto/cryptobyte/asn1"
+)
+
+// This file contains ASN.1-related methods for String and Builder.
+
+// Builder
+
+// AddASN1Int64 appends a DER-encoded ASN.1 INTEGER.
+func (b *Builder) AddASN1Int64(v int64) {
+	b.addASN1Signed(asn1.INTEGER, v)
+}
+
+// AddASN1Int64WithTag appends a DER-encoded ASN.1 INTEGER with the
+// given tag.
+func (b *Builder) AddASN1Int64WithTag(v int64, tag asn1.Tag) {
+	b.addASN1Signed(tag, v)
+}
+
+// AddASN1Enum appends a DER-encoded ASN.1 ENUMERATION.
+func (b *Builder) AddASN1Enum(v int64) {
+	b.addASN1Signed(asn1.ENUM, v)
+}
+
+func (b *Builder) addASN1Signed(tag asn1.Tag, v int64) {
+	b.AddASN1(tag, func(c *Builder) {
+		length := 1
+		for i := v; i >= 0x80 || i < -0x80; i >>= 8 {
+			length++
+		}
+
+		for ; length > 0; length-- {
+			i := v >> uint((length-1)*8) & 0xff
+			c.AddUint8(uint8(i))
+		}
+	})
+}
+
+// AddASN1Uint64 appends a DER-encoded ASN.1 INTEGER.
+func (b *Builder) AddASN1Uint64(v uint64) {
+	b.AddASN1(asn1.INTEGER, func(c *Builder) {
+		length := 1
+		for i := v; i >= 0x80; i >>= 8 {
+			length++
+		}
+
+		for ; length > 0; length-- {
+			i := v >> uint((length-1)*8) & 0xff
+			c.AddUint8(uint8(i))
+		}
+	})
+}
+
+// AddASN1BigInt appends a DER-encoded ASN.1 INTEGER.
+func (b *Builder) AddASN1BigInt(n *big.Int) {
+	if b.err != nil {
+		return
+	}
+
+	b.AddASN1(asn1.INTEGER, func(c *Builder) {
+		if n.Sign() < 0 {
+			// A negative number has to be converted to two's-complement form. So we
+			// invert and subtract 1. If the most-significant-bit isn't set then
+			// we'll need to pad the beginning with 0xff in order to keep the number
+			// negative.
+			nMinus1 := new(big.Int).Neg(n)
+			nMinus1.Sub(nMinus1, bigOne)
+			bytes := nMinus1.Bytes()
+			for i := range bytes {
+				bytes[i] ^= 0xff
+			}
+			if len(bytes) == 0 || bytes[0]&0x80 == 0 {
+				c.add(0xff)
+			}
+			c.add(bytes...)
+		} else if n.Sign() == 0 {
+			c.add(0)
+		} else {
+			bytes := n.Bytes()
+			if bytes[0]&0x80 != 0 {
+				c.add(0)
+			}
+			c.add(bytes...)
+		}
+	})
+}
+
+// AddASN1OctetString appends a DER-encoded ASN.1 OCTET STRING.
+func (b *Builder) AddASN1OctetString(bytes []byte) {
+	b.AddASN1(asn1.OCTET_STRING, func(c *Builder) {
+		c.AddBytes(bytes)
+	})
+}
+
+const generalizedTimeFormatStr = "20060102150405Z0700"
+
+// AddASN1GeneralizedTime appends a DER-encoded ASN.1 GENERALIZEDTIME.
+func (b *Builder) AddASN1GeneralizedTime(t time.Time) {
+	if t.Year() < 0 || t.Year() > 9999 {
+		b.err = fmt.Errorf("cryptobyte: cannot represent %v as a GeneralizedTime", t)
+		return
+	}
+	b.AddASN1(asn1.GeneralizedTime, func(c *Builder) {
+		c.AddBytes([]byte(t.Format(generalizedTimeFormatStr)))
+	})
+}
+
+// AddASN1BitString appends a DER-encoded ASN.1 BIT STRING. This does not
+// support BIT STRINGs that are not a whole number of bytes.
+func (b *Builder) AddASN1BitString(data []byte) {
+	b.AddASN1(asn1.BIT_STRING, func(b *Builder) {
+		b.AddUint8(0)
+		b.AddBytes(data)
+	})
+}
+
+func (b *Builder) addBase128Int(n int64) {
+	var length int
+	if n == 0 {
+		length = 1
+	} else {
+		for i := n; i > 0; i >>= 7 {
+			length++
+		}
+	}
+
+	for i := length - 1; i >= 0; i-- {
+		o := byte(n >> uint(i*7))
+		o &= 0x7f
+		if i != 0 {
+			o |= 0x80
+		}
+
+		b.add(o)
+	}
+}
+
+func isValidOID(oid encoding_asn1.ObjectIdentifier) bool {
+	if len(oid) < 2 {
+		return false
+	}
+
+	if oid[0] > 2 || (oid[0] <= 1 && oid[1] >= 40) {
+		return false
+	}
+
+	for _, v := range oid {
+		if v < 0 {
+			return false
+		}
+	}
+
+	return true
+}
+
+func (b *Builder) AddASN1ObjectIdentifier(oid encoding_asn1.ObjectIdentifier) {
+	b.AddASN1(asn1.OBJECT_IDENTIFIER, func(b *Builder) {
+		if !isValidOID(oid) {
+			b.err = fmt.Errorf("cryptobyte: invalid OID: %v", oid)
+			return
+		}
+
+		b.addBase128Int(int64(oid[0])*40 + int64(oid[1]))
+		for _, v := range oid[2:] {
+			b.addBase128Int(int64(v))
+		}
+	})
+}
+
+func (b *Builder) AddASN1Boolean(v bool) {
+	b.AddASN1(asn1.BOOLEAN, func(b *Builder) {
+		if v {
+			b.AddUint8(0xff)
+		} else {
+			b.AddUint8(0)
+		}
+	})
+}
+
+func (b *Builder) AddASN1NULL() {
+	b.add(uint8(asn1.NULL), 0)
+}
+
+// MarshalASN1 calls encoding_asn1.Marshal on its input and appends the result if
+// successful or records an error if one occurred.
+func (b *Builder) MarshalASN1(v interface{}) {
+	// NOTE(martinkr): This is somewhat of a hack to allow propagation of
+	// encoding_asn1.Marshal errors into Builder.err. N.B. if you call MarshalASN1 with a
+	// value embedded into a struct, its tag information is lost.
+	if b.err != nil {
+		return
+	}
+	bytes, err := encoding_asn1.Marshal(v)
+	if err != nil {
+		b.err = err
+		return
+	}
+	b.AddBytes(bytes)
+}
+
+// AddASN1 appends an ASN.1 object. The object is prefixed with the given tag.
+// Tags greater than 30 are not supported and result in an error (i.e.
+// low-tag-number form only). The child builder passed to the
+// BuilderContinuation can be used to build the content of the ASN.1 object.
+func (b *Builder) AddASN1(tag asn1.Tag, f BuilderContinuation) {
+	if b.err != nil {
+		return
+	}
+	// Identifiers with the low five bits set indicate high-tag-number format
+	// (two or more octets), which we don't support.
+	if tag&0x1f == 0x1f {
+		b.err = fmt.Errorf("cryptobyte: high-tag number identifier octects not supported: 0x%x", tag)
+		return
+	}
+	b.AddUint8(uint8(tag))
+	b.addLengthPrefixed(1, true, f)
+}
+
+// String
+
+// ReadASN1Boolean decodes an ASN.1 BOOLEAN and converts it to a boolean
+// representation into out and advances. It reports whether the read
+// was successful.
+func (s *String) ReadASN1Boolean(out *bool) bool {
+	var bytes String
+	if !s.ReadASN1(&bytes, asn1.BOOLEAN) || len(bytes) != 1 {
+		return false
+	}
+
+	switch bytes[0] {
+	case 0:
+		*out = false
+	case 0xff:
+		*out = true
+	default:
+		return false
+	}
+
+	return true
+}
+
+var bigIntType = reflect.TypeOf((*big.Int)(nil)).Elem()
+
+// ReadASN1Integer decodes an ASN.1 INTEGER into out and advances. If out does
+// not point to an integer or to a big.Int, it panics. It reports whether the
+// read was successful.
+func (s *String) ReadASN1Integer(out interface{}) bool {
+	if reflect.TypeOf(out).Kind() != reflect.Ptr {
+		panic("out is not a pointer")
+	}
+	switch reflect.ValueOf(out).Elem().Kind() {
+	case reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64:
+		var i int64
+		if !s.readASN1Int64(&i) || reflect.ValueOf(out).Elem().OverflowInt(i) {
+			return false
+		}
+		reflect.ValueOf(out).Elem().SetInt(i)
+		return true
+	case reflect.Uint, reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64:
+		var u uint64
+		if !s.readASN1Uint64(&u) || reflect.ValueOf(out).Elem().OverflowUint(u) {
+			return false
+		}
+		reflect.ValueOf(out).Elem().SetUint(u)
+		return true
+	case reflect.Struct:
+		if reflect.TypeOf(out).Elem() == bigIntType {
+			return s.readASN1BigInt(out.(*big.Int))
+		}
+	}
+	panic("out does not point to an integer type")
+}
+
+func checkASN1Integer(bytes []byte) bool {
+	if len(bytes) == 0 {
+		// An INTEGER is encoded with at least one octet.
+		return false
+	}
+	if len(bytes) == 1 {
+		return true
+	}
+	if bytes[0] == 0 && bytes[1]&0x80 == 0 || bytes[0] == 0xff && bytes[1]&0x80 == 0x80 {
+		// Value is not minimally encoded.
+		return false
+	}
+	return true
+}
+
+var bigOne = big.NewInt(1)
+
+func (s *String) readASN1BigInt(out *big.Int) bool {
+	var bytes String
+	if !s.ReadASN1(&bytes, asn1.INTEGER) || !checkASN1Integer(bytes) {
+		return false
+	}
+	if bytes[0]&0x80 == 0x80 {
+		// Negative number.
+		neg := make([]byte, len(bytes))
+		for i, b := range bytes {
+			neg[i] = ^b
+		}
+		out.SetBytes(neg)
+		out.Add(out, bigOne)
+		out.Neg(out)
+	} else {
+		out.SetBytes(bytes)
+	}
+	return true
+}
+
+func (s *String) readASN1Int64(out *int64) bool {
+	var bytes String
+	if !s.ReadASN1(&bytes, asn1.INTEGER) || !checkASN1Integer(bytes) || !asn1Signed(out, bytes) {
+		return false
+	}
+	return true
+}
+
+func asn1Signed(out *int64, n []byte) bool {
+	length := len(n)
+	if length > 8 {
+		return false
+	}
+	for i := 0; i < length; i++ {
+		*out <<= 8
+		*out |= int64(n[i])
+	}
+	// Shift up and down in order to sign extend the result.
+	*out <<= 64 - uint8(length)*8
+	*out >>= 64 - uint8(length)*8
+	return true
+}
+
+func (s *String) readASN1Uint64(out *uint64) bool {
+	var bytes String
+	if !s.ReadASN1(&bytes, asn1.INTEGER) || !checkASN1Integer(bytes) || !asn1Unsigned(out, bytes) {
+		return false
+	}
+	return true
+}
+
+func asn1Unsigned(out *uint64, n []byte) bool {
+	length := len(n)
+	if length > 9 || length == 9 && n[0] != 0 {
+		// Too large for uint64.
+		return false
+	}
+	if n[0]&0x80 != 0 {
+		// Negative number.
+		return false
+	}
+	for i := 0; i < length; i++ {
+		*out <<= 8
+		*out |= uint64(n[i])
+	}
+	return true
+}
+
+// ReadASN1Int64WithTag decodes an ASN.1 INTEGER with the given tag into out
+// and advances. It reports whether the read was successful and resulted in a
+// value that can be represented in an int64.
+func (s *String) ReadASN1Int64WithTag(out *int64, tag asn1.Tag) bool {
+	var bytes String
+	return s.ReadASN1(&bytes, tag) && checkASN1Integer(bytes) && asn1Signed(out, bytes)
+}
+
+// ReadASN1Enum decodes an ASN.1 ENUMERATION into out and advances. It reports
+// whether the read was successful.
+func (s *String) ReadASN1Enum(out *int) bool {
+	var bytes String
+	var i int64
+	if !s.ReadASN1(&bytes, asn1.ENUM) || !checkASN1Integer(bytes) || !asn1Signed(&i, bytes) {
+		return false
+	}
+	if int64(int(i)) != i {
+		return false
+	}
+	*out = int(i)
+	return true
+}
+
+func (s *String) readBase128Int(out *int) bool {
+	ret := 0
+	for i := 0; len(*s) > 0; i++ {
+		if i == 4 {
+			return false
+		}
+		ret <<= 7
+		b := s.read(1)[0]
+		ret |= int(b & 0x7f)
+		if b&0x80 == 0 {
+			*out = ret
+			return true
+		}
+	}
+	return false // truncated
+}
+
+// ReadASN1ObjectIdentifier decodes an ASN.1 OBJECT IDENTIFIER into out and
+// advances. It reports whether the read was successful.
+func (s *String) ReadASN1ObjectIdentifier(out *encoding_asn1.ObjectIdentifier) bool {
+	var bytes String
+	if !s.ReadASN1(&bytes, asn1.OBJECT_IDENTIFIER) || len(bytes) == 0 {
+		return false
+	}
+
+	// In the worst case, we get two elements from the first byte (which is
+	// encoded differently) and then every varint is a single byte long.
+	components := make([]int, len(bytes)+1)
+
+	// The first varint is 40*value1 + value2:
+	// According to this packing, value1 can take the values 0, 1 and 2 only.
+	// When value1 = 0 or value1 = 1, then value2 is <= 39. When value1 = 2,
+	// then there are no restrictions on value2.
+	var v int
+	if !bytes.readBase128Int(&v) {
+		return false
+	}
+	if v < 80 {
+		components[0] = v / 40
+		components[1] = v % 40
+	} else {
+		components[0] = 2
+		components[1] = v - 80
+	}
+
+	i := 2
+	for ; len(bytes) > 0; i++ {
+		if !bytes.readBase128Int(&v) {
+			return false
+		}
+		components[i] = v
+	}
+	*out = components[:i]
+	return true
+}
+
+// ReadASN1GeneralizedTime decodes an ASN.1 GENERALIZEDTIME into out and
+// advances. It reports whether the read was successful.
+func (s *String) ReadASN1GeneralizedTime(out *time.Time) bool {
+	var bytes String
+	if !s.ReadASN1(&bytes, asn1.GeneralizedTime) {
+		return false
+	}
+	t := string(bytes)
+	res, err := time.Parse(generalizedTimeFormatStr, t)
+	if err != nil {
+		return false
+	}
+	if serialized := res.Format(generalizedTimeFormatStr); serialized != t {
+		return false
+	}
+	*out = res
+	return true
+}
+
+// ReadASN1BitString decodes an ASN.1 BIT STRING into out and advances.
+// It reports whether the read was successful.
+func (s *String) ReadASN1BitString(out *encoding_asn1.BitString) bool {
+	var bytes String
+	if !s.ReadASN1(&bytes, asn1.BIT_STRING) || len(bytes) == 0 ||
+		len(bytes)*8/8 != len(bytes) {
+		return false
+	}
+
+	paddingBits := uint8(bytes[0])
+	bytes = bytes[1:]
+	if paddingBits > 7 ||
+		len(bytes) == 0 && paddingBits != 0 ||
+		len(bytes) > 0 && bytes[len(bytes)-1]&(1<<paddingBits-1) != 0 {
+		return false
+	}
+
+	out.BitLength = len(bytes)*8 - int(paddingBits)
+	out.Bytes = bytes
+	return true
+}
+
+// ReadASN1BitString decodes an ASN.1 BIT STRING into out and advances. It is
+// an error if the BIT STRING is not a whole number of bytes. It reports
+// whether the read was successful.
+func (s *String) ReadASN1BitStringAsBytes(out *[]byte) bool {
+	var bytes String
+	if !s.ReadASN1(&bytes, asn1.BIT_STRING) || len(bytes) == 0 {
+		return false
+	}
+
+	paddingBits := uint8(bytes[0])
+	if paddingBits != 0 {
+		return false
+	}
+	*out = bytes[1:]
+	return true
+}
+
+// ReadASN1Bytes reads the contents of a DER-encoded ASN.1 element (not including
+// tag and length bytes) into out, and advances. The element must match the
+// given tag. It reports whether the read was successful.
+func (s *String) ReadASN1Bytes(out *[]byte, tag asn1.Tag) bool {
+	return s.ReadASN1((*String)(out), tag)
+}
+
+// ReadASN1 reads the contents of a DER-encoded ASN.1 element (not including
+// tag and length bytes) into out, and advances. The element must match the
+// given tag. It reports whether the read was successful.
+//
+// Tags greater than 30 are not supported (i.e. low-tag-number format only).
+func (s *String) ReadASN1(out *String, tag asn1.Tag) bool {
+	var t asn1.Tag
+	if !s.ReadAnyASN1(out, &t) || t != tag {
+		return false
+	}
+	return true
+}
+
+// ReadASN1Element reads the contents of a DER-encoded ASN.1 element (including
+// tag and length bytes) into out, and advances. The element must match the
+// given tag. It reports whether the read was successful.
+//
+// Tags greater than 30 are not supported (i.e. low-tag-number format only).
+func (s *String) ReadASN1Element(out *String, tag asn1.Tag) bool {
+	var t asn1.Tag
+	if !s.ReadAnyASN1Element(out, &t) || t != tag {
+		return false
+	}
+	return true
+}
+
+// ReadAnyASN1 reads the contents of a DER-encoded ASN.1 element (not including
+// tag and length bytes) into out, sets outTag to its tag, and advances.
+// It reports whether the read was successful.
+//
+// Tags greater than 30 are not supported (i.e. low-tag-number format only).
+func (s *String) ReadAnyASN1(out *String, outTag *asn1.Tag) bool {
+	return s.readASN1(out, outTag, true /* skip header */)
+}
+
+// ReadAnyASN1Element reads the contents of a DER-encoded ASN.1 element
+// (including tag and length bytes) into out, sets outTag to is tag, and
+// advances. It reports whether the read was successful.
+//
+// Tags greater than 30 are not supported (i.e. low-tag-number format only).
+func (s *String) ReadAnyASN1Element(out *String, outTag *asn1.Tag) bool {
+	return s.readASN1(out, outTag, false /* include header */)
+}
+
+// PeekASN1Tag reports whether the next ASN.1 value on the string starts with
+// the given tag.
+func (s String) PeekASN1Tag(tag asn1.Tag) bool {
+	if len(s) == 0 {
+		return false
+	}
+	return asn1.Tag(s[0]) == tag
+}
+
+// SkipASN1 reads and discards an ASN.1 element with the given tag. It
+// reports whether the operation was successful.
+func (s *String) SkipASN1(tag asn1.Tag) bool {
+	var unused String
+	return s.ReadASN1(&unused, tag)
+}
+
+// ReadOptionalASN1 attempts to read the contents of a DER-encoded ASN.1
+// element (not including tag and length bytes) tagged with the given tag into
+// out. It stores whether an element with the tag was found in outPresent,
+// unless outPresent is nil. It reports whether the read was successful.
+func (s *String) ReadOptionalASN1(out *String, outPresent *bool, tag asn1.Tag) bool {
+	present := s.PeekASN1Tag(tag)
+	if outPresent != nil {
+		*outPresent = present
+	}
+	if present && !s.ReadASN1(out, tag) {
+		return false
+	}
+	return true
+}
+
+// SkipOptionalASN1 advances s over an ASN.1 element with the given tag, or
+// else leaves s unchanged. It reports whether the operation was successful.
+func (s *String) SkipOptionalASN1(tag asn1.Tag) bool {
+	if !s.PeekASN1Tag(tag) {
+		return true
+	}
+	var unused String
+	return s.ReadASN1(&unused, tag)
+}
+
+// ReadOptionalASN1Integer attempts to read an optional ASN.1 INTEGER
+// explicitly tagged with tag into out and advances. If no element with a
+// matching tag is present, it writes defaultValue into out instead. If out
+// does not point to an integer or to a big.Int, it panics. It reports
+// whether the read was successful.
+func (s *String) ReadOptionalASN1Integer(out interface{}, tag asn1.Tag, defaultValue interface{}) bool {
+	if reflect.TypeOf(out).Kind() != reflect.Ptr {
+		panic("out is not a pointer")
+	}
+	var present bool
+	var i String
+	if !s.ReadOptionalASN1(&i, &present, tag) {
+		return false
+	}
+	if !present {
+		switch reflect.ValueOf(out).Elem().Kind() {
+		case reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64,
+			reflect.Uint, reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64:
+			reflect.ValueOf(out).Elem().Set(reflect.ValueOf(defaultValue))
+		case reflect.Struct:
+			if reflect.TypeOf(out).Elem() != bigIntType {
+				panic("invalid integer type")
+			}
+			if reflect.TypeOf(defaultValue).Kind() != reflect.Ptr ||
+				reflect.TypeOf(defaultValue).Elem() != bigIntType {
+				panic("out points to big.Int, but defaultValue does not")
+			}
+			out.(*big.Int).Set(defaultValue.(*big.Int))
+		default:
+			panic("invalid integer type")
+		}
+		return true
+	}
+	if !i.ReadASN1Integer(out) || !i.Empty() {
+		return false
+	}
+	return true
+}
+
+// ReadOptionalASN1OctetString attempts to read an optional ASN.1 OCTET STRING
+// explicitly tagged with tag into out and advances. If no element with a
+// matching tag is present, it sets "out" to nil instead. It reports
+// whether the read was successful.
+func (s *String) ReadOptionalASN1OctetString(out *[]byte, outPresent *bool, tag asn1.Tag) bool {
+	var present bool
+	var child String
+	if !s.ReadOptionalASN1(&child, &present, tag) {
+		return false
+	}
+	if outPresent != nil {
+		*outPresent = present
+	}
+	if present {
+		var oct String
+		if !child.ReadASN1(&oct, asn1.OCTET_STRING) || !child.Empty() {
+			return false
+		}
+		*out = oct
+	} else {
+		*out = nil
+	}
+	return true
+}
+
+// ReadOptionalASN1Boolean sets *out to the value of the next ASN.1 BOOLEAN or,
+// if the next bytes are not an ASN.1 BOOLEAN, to the value of defaultValue.
+// It reports whether the operation was successful.
+func (s *String) ReadOptionalASN1Boolean(out *bool, defaultValue bool) bool {
+	var present bool
+	var child String
+	if !s.ReadOptionalASN1(&child, &present, asn1.BOOLEAN) {
+		return false
+	}
+
+	if !present {
+		*out = defaultValue
+		return true
+	}
+
+	return s.ReadASN1Boolean(out)
+}
+
+func (s *String) readASN1(out *String, outTag *asn1.Tag, skipHeader bool) bool {
+	if len(*s) < 2 {
+		return false
+	}
+	tag, lenByte := (*s)[0], (*s)[1]
+
+	if tag&0x1f == 0x1f {
+		// ITU-T X.690 section 8.1.2
+		//
+		// An identifier octet with a tag part of 0x1f indicates a high-tag-number
+		// form identifier with two or more octets. We only support tags less than
+		// 31 (i.e. low-tag-number form, single octet identifier).
+		return false
+	}
+
+	if outTag != nil {
+		*outTag = asn1.Tag(tag)
+	}
+
+	// ITU-T X.690 section 8.1.3
+	//
+	// Bit 8 of the first length byte indicates whether the length is short- or
+	// long-form.
+	var length, headerLen uint32 // length includes headerLen
+	if lenByte&0x80 == 0 {
+		// Short-form length (section 8.1.3.4), encoded in bits 1-7.
+		length = uint32(lenByte) + 2
+		headerLen = 2
+	} else {
+		// Long-form length (section 8.1.3.5). Bits 1-7 encode the number of octets
+		// used to encode the length.
+		lenLen := lenByte & 0x7f
+		var len32 uint32
+
+		if lenLen == 0 || lenLen > 4 || len(*s) < int(2+lenLen) {
+			return false
+		}
+
+		lenBytes := String((*s)[2 : 2+lenLen])
+		if !lenBytes.readUnsigned(&len32, int(lenLen)) {
+			return false
+		}
+
+		// ITU-T X.690 section 10.1 (DER length forms) requires encoding the length
+		// with the minimum number of octets.
+		if len32 < 128 {
+			// Length should have used short-form encoding.
+			return false
+		}
+		if len32>>((lenLen-1)*8) == 0 {
+			// Leading octet is 0. Length should have been at least one byte shorter.
+			return false
+		}
+
+		headerLen = 2 + uint32(lenLen)
+		if headerLen+len32 < len32 {
+			// Overflow.
+			return false
+		}
+		length = headerLen + len32
+	}
+
+	if int(length) < 0 || !s.ReadBytes((*[]byte)(out), int(length)) {
+		return false
+	}
+	if skipHeader && !out.Skip(int(headerLen)) {
+		panic("cryptobyte: internal error")
+	}
+
+	return true
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/cryptobyte/asn1/asn1.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/cryptobyte/asn1/asn1.go
new file mode 100644
index 000000000..cda8e3edf
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/cryptobyte/asn1/asn1.go
@@ -0,0 +1,46 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Package asn1 contains supporting types for parsing and building ASN.1
+// messages with the cryptobyte package.
+package asn1 // import "golang.org/x/crypto/cryptobyte/asn1"
+
+// Tag represents an ASN.1 identifier octet, consisting of a tag number
+// (indicating a type) and class (such as context-specific or constructed).
+//
+// Methods in the cryptobyte package only support the low-tag-number form, i.e.
+// a single identifier octet with bits 7-8 encoding the class and bits 1-6
+// encoding the tag number.
+type Tag uint8
+
+const (
+	classConstructed     = 0x20
+	classContextSpecific = 0x80
+)
+
+// Constructed returns t with the constructed class bit set.
+func (t Tag) Constructed() Tag { return t | classConstructed }
+
+// ContextSpecific returns t with the context-specific class bit set.
+func (t Tag) ContextSpecific() Tag { return t | classContextSpecific }
+
+// The following is a list of standard tag and class combinations.
+const (
+	BOOLEAN           = Tag(1)
+	INTEGER           = Tag(2)
+	BIT_STRING        = Tag(3)
+	OCTET_STRING      = Tag(4)
+	NULL              = Tag(5)
+	OBJECT_IDENTIFIER = Tag(6)
+	ENUM              = Tag(10)
+	UTF8String        = Tag(12)
+	SEQUENCE          = Tag(16 | classConstructed)
+	SET               = Tag(17 | classConstructed)
+	PrintableString   = Tag(19)
+	T61String         = Tag(20)
+	IA5String         = Tag(22)
+	UTCTime           = Tag(23)
+	GeneralizedTime   = Tag(24)
+	GeneralString     = Tag(27)
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/cryptobyte/builder.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/cryptobyte/builder.go
new file mode 100644
index 000000000..ca7b1db5c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/cryptobyte/builder.go
@@ -0,0 +1,337 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package cryptobyte
+
+import (
+	"errors"
+	"fmt"
+)
+
+// A Builder builds byte strings from fixed-length and length-prefixed values.
+// Builders either allocate space as needed, or are ‘fixed’, which means that
+// they write into a given buffer and produce an error if it's exhausted.
+//
+// The zero value is a usable Builder that allocates space as needed.
+//
+// Simple values are marshaled and appended to a Builder using methods on the
+// Builder. Length-prefixed values are marshaled by providing a
+// BuilderContinuation, which is a function that writes the inner contents of
+// the value to a given Builder. See the documentation for BuilderContinuation
+// for details.
+type Builder struct {
+	err            error
+	result         []byte
+	fixedSize      bool
+	child          *Builder
+	offset         int
+	pendingLenLen  int
+	pendingIsASN1  bool
+	inContinuation *bool
+}
+
+// NewBuilder creates a Builder that appends its output to the given buffer.
+// Like append(), the slice will be reallocated if its capacity is exceeded.
+// Use Bytes to get the final buffer.
+func NewBuilder(buffer []byte) *Builder {
+	return &Builder{
+		result: buffer,
+	}
+}
+
+// NewFixedBuilder creates a Builder that appends its output into the given
+// buffer. This builder does not reallocate the output buffer. Writes that
+// would exceed the buffer's capacity are treated as an error.
+func NewFixedBuilder(buffer []byte) *Builder {
+	return &Builder{
+		result:    buffer,
+		fixedSize: true,
+	}
+}
+
+// SetError sets the value to be returned as the error from Bytes. Writes
+// performed after calling SetError are ignored.
+func (b *Builder) SetError(err error) {
+	b.err = err
+}
+
+// Bytes returns the bytes written by the builder or an error if one has
+// occurred during building.
+func (b *Builder) Bytes() ([]byte, error) {
+	if b.err != nil {
+		return nil, b.err
+	}
+	return b.result[b.offset:], nil
+}
+
+// BytesOrPanic returns the bytes written by the builder or panics if an error
+// has occurred during building.
+func (b *Builder) BytesOrPanic() []byte {
+	if b.err != nil {
+		panic(b.err)
+	}
+	return b.result[b.offset:]
+}
+
+// AddUint8 appends an 8-bit value to the byte string.
+func (b *Builder) AddUint8(v uint8) {
+	b.add(byte(v))
+}
+
+// AddUint16 appends a big-endian, 16-bit value to the byte string.
+func (b *Builder) AddUint16(v uint16) {
+	b.add(byte(v>>8), byte(v))
+}
+
+// AddUint24 appends a big-endian, 24-bit value to the byte string. The highest
+// byte of the 32-bit input value is silently truncated.
+func (b *Builder) AddUint24(v uint32) {
+	b.add(byte(v>>16), byte(v>>8), byte(v))
+}
+
+// AddUint32 appends a big-endian, 32-bit value to the byte string.
+func (b *Builder) AddUint32(v uint32) {
+	b.add(byte(v>>24), byte(v>>16), byte(v>>8), byte(v))
+}
+
+// AddBytes appends a sequence of bytes to the byte string.
+func (b *Builder) AddBytes(v []byte) {
+	b.add(v...)
+}
+
+// BuilderContinuation is a continuation-passing interface for building
+// length-prefixed byte sequences. Builder methods for length-prefixed
+// sequences (AddUint8LengthPrefixed etc) will invoke the BuilderContinuation
+// supplied to them. The child builder passed to the continuation can be used
+// to build the content of the length-prefixed sequence. For example:
+//
+//   parent := cryptobyte.NewBuilder()
+//   parent.AddUint8LengthPrefixed(func (child *Builder) {
+//     child.AddUint8(42)
+//     child.AddUint8LengthPrefixed(func (grandchild *Builder) {
+//       grandchild.AddUint8(5)
+//     })
+//   })
+//
+// It is an error to write more bytes to the child than allowed by the reserved
+// length prefix. After the continuation returns, the child must be considered
+// invalid, i.e. users must not store any copies or references of the child
+// that outlive the continuation.
+//
+// If the continuation panics with a value of type BuildError then the inner
+// error will be returned as the error from Bytes. If the child panics
+// otherwise then Bytes will repanic with the same value.
+type BuilderContinuation func(child *Builder)
+
+// BuildError wraps an error. If a BuilderContinuation panics with this value,
+// the panic will be recovered and the inner error will be returned from
+// Builder.Bytes.
+type BuildError struct {
+	Err error
+}
+
+// AddUint8LengthPrefixed adds a 8-bit length-prefixed byte sequence.
+func (b *Builder) AddUint8LengthPrefixed(f BuilderContinuation) {
+	b.addLengthPrefixed(1, false, f)
+}
+
+// AddUint16LengthPrefixed adds a big-endian, 16-bit length-prefixed byte sequence.
+func (b *Builder) AddUint16LengthPrefixed(f BuilderContinuation) {
+	b.addLengthPrefixed(2, false, f)
+}
+
+// AddUint24LengthPrefixed adds a big-endian, 24-bit length-prefixed byte sequence.
+func (b *Builder) AddUint24LengthPrefixed(f BuilderContinuation) {
+	b.addLengthPrefixed(3, false, f)
+}
+
+// AddUint32LengthPrefixed adds a big-endian, 32-bit length-prefixed byte sequence.
+func (b *Builder) AddUint32LengthPrefixed(f BuilderContinuation) {
+	b.addLengthPrefixed(4, false, f)
+}
+
+func (b *Builder) callContinuation(f BuilderContinuation, arg *Builder) {
+	if !*b.inContinuation {
+		*b.inContinuation = true
+
+		defer func() {
+			*b.inContinuation = false
+
+			r := recover()
+			if r == nil {
+				return
+			}
+
+			if buildError, ok := r.(BuildError); ok {
+				b.err = buildError.Err
+			} else {
+				panic(r)
+			}
+		}()
+	}
+
+	f(arg)
+}
+
+func (b *Builder) addLengthPrefixed(lenLen int, isASN1 bool, f BuilderContinuation) {
+	// Subsequent writes can be ignored if the builder has encountered an error.
+	if b.err != nil {
+		return
+	}
+
+	offset := len(b.result)
+	b.add(make([]byte, lenLen)...)
+
+	if b.inContinuation == nil {
+		b.inContinuation = new(bool)
+	}
+
+	b.child = &Builder{
+		result:         b.result,
+		fixedSize:      b.fixedSize,
+		offset:         offset,
+		pendingLenLen:  lenLen,
+		pendingIsASN1:  isASN1,
+		inContinuation: b.inContinuation,
+	}
+
+	b.callContinuation(f, b.child)
+	b.flushChild()
+	if b.child != nil {
+		panic("cryptobyte: internal error")
+	}
+}
+
+func (b *Builder) flushChild() {
+	if b.child == nil {
+		return
+	}
+	b.child.flushChild()
+	child := b.child
+	b.child = nil
+
+	if child.err != nil {
+		b.err = child.err
+		return
+	}
+
+	length := len(child.result) - child.pendingLenLen - child.offset
+
+	if length < 0 {
+		panic("cryptobyte: internal error") // result unexpectedly shrunk
+	}
+
+	if child.pendingIsASN1 {
+		// For ASN.1, we reserved a single byte for the length. If that turned out
+		// to be incorrect, we have to move the contents along in order to make
+		// space.
+		if child.pendingLenLen != 1 {
+			panic("cryptobyte: internal error")
+		}
+		var lenLen, lenByte uint8
+		if int64(length) > 0xfffffffe {
+			b.err = errors.New("pending ASN.1 child too long")
+			return
+		} else if length > 0xffffff {
+			lenLen = 5
+			lenByte = 0x80 | 4
+		} else if length > 0xffff {
+			lenLen = 4
+			lenByte = 0x80 | 3
+		} else if length > 0xff {
+			lenLen = 3
+			lenByte = 0x80 | 2
+		} else if length > 0x7f {
+			lenLen = 2
+			lenByte = 0x80 | 1
+		} else {
+			lenLen = 1
+			lenByte = uint8(length)
+			length = 0
+		}
+
+		// Insert the initial length byte, make space for successive length bytes,
+		// and adjust the offset.
+		child.result[child.offset] = lenByte
+		extraBytes := int(lenLen - 1)
+		if extraBytes != 0 {
+			child.add(make([]byte, extraBytes)...)
+			childStart := child.offset + child.pendingLenLen
+			copy(child.result[childStart+extraBytes:], child.result[childStart:])
+		}
+		child.offset++
+		child.pendingLenLen = extraBytes
+	}
+
+	l := length
+	for i := child.pendingLenLen - 1; i >= 0; i-- {
+		child.result[child.offset+i] = uint8(l)
+		l >>= 8
+	}
+	if l != 0 {
+		b.err = fmt.Errorf("cryptobyte: pending child length %d exceeds %d-byte length prefix", length, child.pendingLenLen)
+		return
+	}
+
+	if b.fixedSize && &b.result[0] != &child.result[0] {
+		panic("cryptobyte: BuilderContinuation reallocated a fixed-size buffer")
+	}
+
+	b.result = child.result
+}
+
+func (b *Builder) add(bytes ...byte) {
+	if b.err != nil {
+		return
+	}
+	if b.child != nil {
+		panic("cryptobyte: attempted write while child is pending")
+	}
+	if len(b.result)+len(bytes) < len(bytes) {
+		b.err = errors.New("cryptobyte: length overflow")
+	}
+	if b.fixedSize && len(b.result)+len(bytes) > cap(b.result) {
+		b.err = errors.New("cryptobyte: Builder is exceeding its fixed-size buffer")
+		return
+	}
+	b.result = append(b.result, bytes...)
+}
+
+// Unwrite rolls back n bytes written directly to the Builder. An attempt by a
+// child builder passed to a continuation to unwrite bytes from its parent will
+// panic.
+func (b *Builder) Unwrite(n int) {
+	if b.err != nil {
+		return
+	}
+	if b.child != nil {
+		panic("cryptobyte: attempted unwrite while child is pending")
+	}
+	length := len(b.result) - b.pendingLenLen - b.offset
+	if length < 0 {
+		panic("cryptobyte: internal error")
+	}
+	if n > length {
+		panic("cryptobyte: attempted to unwrite more than was written")
+	}
+	b.result = b.result[:len(b.result)-n]
+}
+
+// A MarshalingValue marshals itself into a Builder.
+type MarshalingValue interface {
+	// Marshal is called by Builder.AddValue. It receives a pointer to a builder
+	// to marshal itself into. It may return an error that occurred during
+	// marshaling, such as unset or invalid values.
+	Marshal(b *Builder) error
+}
+
+// AddValue calls Marshal on v, passing a pointer to the builder to append to.
+// If Marshal returns an error, it is set on the Builder so that subsequent
+// appends don't have an effect.
+func (b *Builder) AddValue(v MarshalingValue) {
+	err := v.Marshal(b)
+	if err != nil {
+		b.err = err
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/cryptobyte/string.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/cryptobyte/string.go
new file mode 100644
index 000000000..589d297e6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/cryptobyte/string.go
@@ -0,0 +1,161 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Package cryptobyte contains types that help with parsing and constructing
+// length-prefixed, binary messages, including ASN.1 DER. (The asn1 subpackage
+// contains useful ASN.1 constants.)
+//
+// The String type is for parsing. It wraps a []byte slice and provides helper
+// functions for consuming structures, value by value.
+//
+// The Builder type is for constructing messages. It providers helper functions
+// for appending values and also for appending length-prefixed submessages –
+// without having to worry about calculating the length prefix ahead of time.
+//
+// See the documentation and examples for the Builder and String types to get
+// started.
+package cryptobyte // import "golang.org/x/crypto/cryptobyte"
+
+// String represents a string of bytes. It provides methods for parsing
+// fixed-length and length-prefixed values from it.
+type String []byte
+
+// read advances a String by n bytes and returns them. If less than n bytes
+// remain, it returns nil.
+func (s *String) read(n int) []byte {
+	if len(*s) < n || n < 0 {
+		return nil
+	}
+	v := (*s)[:n]
+	*s = (*s)[n:]
+	return v
+}
+
+// Skip advances the String by n byte and reports whether it was successful.
+func (s *String) Skip(n int) bool {
+	return s.read(n) != nil
+}
+
+// ReadUint8 decodes an 8-bit value into out and advances over it.
+// It reports whether the read was successful.
+func (s *String) ReadUint8(out *uint8) bool {
+	v := s.read(1)
+	if v == nil {
+		return false
+	}
+	*out = uint8(v[0])
+	return true
+}
+
+// ReadUint16 decodes a big-endian, 16-bit value into out and advances over it.
+// It reports whether the read was successful.
+func (s *String) ReadUint16(out *uint16) bool {
+	v := s.read(2)
+	if v == nil {
+		return false
+	}
+	*out = uint16(v[0])<<8 | uint16(v[1])
+	return true
+}
+
+// ReadUint24 decodes a big-endian, 24-bit value into out and advances over it.
+// It reports whether the read was successful.
+func (s *String) ReadUint24(out *uint32) bool {
+	v := s.read(3)
+	if v == nil {
+		return false
+	}
+	*out = uint32(v[0])<<16 | uint32(v[1])<<8 | uint32(v[2])
+	return true
+}
+
+// ReadUint32 decodes a big-endian, 32-bit value into out and advances over it.
+// It reports whether the read was successful.
+func (s *String) ReadUint32(out *uint32) bool {
+	v := s.read(4)
+	if v == nil {
+		return false
+	}
+	*out = uint32(v[0])<<24 | uint32(v[1])<<16 | uint32(v[2])<<8 | uint32(v[3])
+	return true
+}
+
+func (s *String) readUnsigned(out *uint32, length int) bool {
+	v := s.read(length)
+	if v == nil {
+		return false
+	}
+	var result uint32
+	for i := 0; i < length; i++ {
+		result <<= 8
+		result |= uint32(v[i])
+	}
+	*out = result
+	return true
+}
+
+func (s *String) readLengthPrefixed(lenLen int, outChild *String) bool {
+	lenBytes := s.read(lenLen)
+	if lenBytes == nil {
+		return false
+	}
+	var length uint32
+	for _, b := range lenBytes {
+		length = length << 8
+		length = length | uint32(b)
+	}
+	v := s.read(int(length))
+	if v == nil {
+		return false
+	}
+	*outChild = v
+	return true
+}
+
+// ReadUint8LengthPrefixed reads the content of an 8-bit length-prefixed value
+// into out and advances over it. It reports whether the read was successful.
+func (s *String) ReadUint8LengthPrefixed(out *String) bool {
+	return s.readLengthPrefixed(1, out)
+}
+
+// ReadUint16LengthPrefixed reads the content of a big-endian, 16-bit
+// length-prefixed value into out and advances over it. It reports whether the
+// read was successful.
+func (s *String) ReadUint16LengthPrefixed(out *String) bool {
+	return s.readLengthPrefixed(2, out)
+}
+
+// ReadUint24LengthPrefixed reads the content of a big-endian, 24-bit
+// length-prefixed value into out and advances over it. It reports whether
+// the read was successful.
+func (s *String) ReadUint24LengthPrefixed(out *String) bool {
+	return s.readLengthPrefixed(3, out)
+}
+
+// ReadBytes reads n bytes into out and advances over them. It reports
+// whether the read was successful.
+func (s *String) ReadBytes(out *[]byte, n int) bool {
+	v := s.read(n)
+	if v == nil {
+		return false
+	}
+	*out = v
+	return true
+}
+
+// CopyBytes copies len(out) bytes into out and advances over them. It reports
+// whether the copy operation was successful
+func (s *String) CopyBytes(out []byte) bool {
+	n := len(out)
+	v := s.read(n)
+	if v == nil {
+		return false
+	}
+	return copy(out, v) == n
+}
+
+// Empty reports whether the string does not contain any bytes.
+func (s String) Empty() bool {
+	return len(s) == 0
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519.go
new file mode 100644
index 000000000..4b9a655d1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519.go
@@ -0,0 +1,95 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Package curve25519 provides an implementation of the X25519 function, which
+// performs scalar multiplication on the elliptic curve known as Curve25519.
+// See RFC 7748.
+package curve25519 // import "golang.org/x/crypto/curve25519"
+
+import (
+	"crypto/subtle"
+	"fmt"
+)
+
+// ScalarMult sets dst to the product scalar * point.
+//
+// Deprecated: when provided a low-order point, ScalarMult will set dst to all
+// zeroes, irrespective of the scalar. Instead, use the X25519 function, which
+// will return an error.
+func ScalarMult(dst, scalar, point *[32]byte) {
+	scalarMult(dst, scalar, point)
+}
+
+// ScalarBaseMult sets dst to the product scalar * base where base is the
+// standard generator.
+//
+// It is recommended to use the X25519 function with Basepoint instead, as
+// copying into fixed size arrays can lead to unexpected bugs.
+func ScalarBaseMult(dst, scalar *[32]byte) {
+	ScalarMult(dst, scalar, &basePoint)
+}
+
+const (
+	// ScalarSize is the size of the scalar input to X25519.
+	ScalarSize = 32
+	// PointSize is the size of the point input to X25519.
+	PointSize = 32
+)
+
+// Basepoint is the canonical Curve25519 generator.
+var Basepoint []byte
+
+var basePoint = [32]byte{9, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}
+
+func init() { Basepoint = basePoint[:] }
+
+func checkBasepoint() {
+	if subtle.ConstantTimeCompare(Basepoint, []byte{
+		0x09, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+	}) != 1 {
+		panic("curve25519: global Basepoint value was modified")
+	}
+}
+
+// X25519 returns the result of the scalar multiplication (scalar * point),
+// according to RFC 7748, Section 5. scalar, point and the return value are
+// slices of 32 bytes.
+//
+// scalar can be generated at random, for example with crypto/rand. point should
+// be either Basepoint or the output of another X25519 call.
+//
+// If point is Basepoint (but not if it's a different slice with the same
+// contents) a precomputed implementation might be used for performance.
+func X25519(scalar, point []byte) ([]byte, error) {
+	// Outline the body of function, to let the allocation be inlined in the
+	// caller, and possibly avoid escaping to the heap.
+	var dst [32]byte
+	return x25519(&dst, scalar, point)
+}
+
+func x25519(dst *[32]byte, scalar, point []byte) ([]byte, error) {
+	var in [32]byte
+	if l := len(scalar); l != 32 {
+		return nil, fmt.Errorf("bad scalar length: %d, expected %d", l, 32)
+	}
+	if l := len(point); l != 32 {
+		return nil, fmt.Errorf("bad point length: %d, expected %d", l, 32)
+	}
+	copy(in[:], scalar)
+	if &point[0] == &Basepoint[0] {
+		checkBasepoint()
+		ScalarBaseMult(dst, &in)
+	} else {
+		var base, zero [32]byte
+		copy(base[:], point)
+		ScalarMult(dst, &in, &base)
+		if subtle.ConstantTimeCompare(dst[:], zero[:]) == 1 {
+			return nil, fmt.Errorf("bad input point: low order point")
+		}
+	}
+	return dst[:], nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519_amd64.go
new file mode 100644
index 000000000..5120b779b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519_amd64.go
@@ -0,0 +1,240 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build amd64,!gccgo,!appengine,!purego
+
+package curve25519
+
+// These functions are implemented in the .s files. The names of the functions
+// in the rest of the file are also taken from the SUPERCOP sources to help
+// people following along.
+
+//go:noescape
+
+func cswap(inout *[5]uint64, v uint64)
+
+//go:noescape
+
+func ladderstep(inout *[5][5]uint64)
+
+//go:noescape
+
+func freeze(inout *[5]uint64)
+
+//go:noescape
+
+func mul(dest, a, b *[5]uint64)
+
+//go:noescape
+
+func square(out, in *[5]uint64)
+
+// mladder uses a Montgomery ladder to calculate (xr/zr) *= s.
+func mladder(xr, zr *[5]uint64, s *[32]byte) {
+	var work [5][5]uint64
+
+	work[0] = *xr
+	setint(&work[1], 1)
+	setint(&work[2], 0)
+	work[3] = *xr
+	setint(&work[4], 1)
+
+	j := uint(6)
+	var prevbit byte
+
+	for i := 31; i >= 0; i-- {
+		for j < 8 {
+			bit := ((*s)[i] >> j) & 1
+			swap := bit ^ prevbit
+			prevbit = bit
+			cswap(&work[1], uint64(swap))
+			ladderstep(&work)
+			j--
+		}
+		j = 7
+	}
+
+	*xr = work[1]
+	*zr = work[2]
+}
+
+func scalarMult(out, in, base *[32]byte) {
+	var e [32]byte
+	copy(e[:], (*in)[:])
+	e[0] &= 248
+	e[31] &= 127
+	e[31] |= 64
+
+	var t, z [5]uint64
+	unpack(&t, base)
+	mladder(&t, &z, &e)
+	invert(&z, &z)
+	mul(&t, &t, &z)
+	pack(out, &t)
+}
+
+func setint(r *[5]uint64, v uint64) {
+	r[0] = v
+	r[1] = 0
+	r[2] = 0
+	r[3] = 0
+	r[4] = 0
+}
+
+// unpack sets r = x where r consists of 5, 51-bit limbs in little-endian
+// order.
+func unpack(r *[5]uint64, x *[32]byte) {
+	r[0] = uint64(x[0]) |
+		uint64(x[1])<<8 |
+		uint64(x[2])<<16 |
+		uint64(x[3])<<24 |
+		uint64(x[4])<<32 |
+		uint64(x[5])<<40 |
+		uint64(x[6]&7)<<48
+
+	r[1] = uint64(x[6])>>3 |
+		uint64(x[7])<<5 |
+		uint64(x[8])<<13 |
+		uint64(x[9])<<21 |
+		uint64(x[10])<<29 |
+		uint64(x[11])<<37 |
+		uint64(x[12]&63)<<45
+
+	r[2] = uint64(x[12])>>6 |
+		uint64(x[13])<<2 |
+		uint64(x[14])<<10 |
+		uint64(x[15])<<18 |
+		uint64(x[16])<<26 |
+		uint64(x[17])<<34 |
+		uint64(x[18])<<42 |
+		uint64(x[19]&1)<<50
+
+	r[3] = uint64(x[19])>>1 |
+		uint64(x[20])<<7 |
+		uint64(x[21])<<15 |
+		uint64(x[22])<<23 |
+		uint64(x[23])<<31 |
+		uint64(x[24])<<39 |
+		uint64(x[25]&15)<<47
+
+	r[4] = uint64(x[25])>>4 |
+		uint64(x[26])<<4 |
+		uint64(x[27])<<12 |
+		uint64(x[28])<<20 |
+		uint64(x[29])<<28 |
+		uint64(x[30])<<36 |
+		uint64(x[31]&127)<<44
+}
+
+// pack sets out = x where out is the usual, little-endian form of the 5,
+// 51-bit limbs in x.
+func pack(out *[32]byte, x *[5]uint64) {
+	t := *x
+	freeze(&t)
+
+	out[0] = byte(t[0])
+	out[1] = byte(t[0] >> 8)
+	out[2] = byte(t[0] >> 16)
+	out[3] = byte(t[0] >> 24)
+	out[4] = byte(t[0] >> 32)
+	out[5] = byte(t[0] >> 40)
+	out[6] = byte(t[0] >> 48)
+
+	out[6] ^= byte(t[1]<<3) & 0xf8
+	out[7] = byte(t[1] >> 5)
+	out[8] = byte(t[1] >> 13)
+	out[9] = byte(t[1] >> 21)
+	out[10] = byte(t[1] >> 29)
+	out[11] = byte(t[1] >> 37)
+	out[12] = byte(t[1] >> 45)
+
+	out[12] ^= byte(t[2]<<6) & 0xc0
+	out[13] = byte(t[2] >> 2)
+	out[14] = byte(t[2] >> 10)
+	out[15] = byte(t[2] >> 18)
+	out[16] = byte(t[2] >> 26)
+	out[17] = byte(t[2] >> 34)
+	out[18] = byte(t[2] >> 42)
+	out[19] = byte(t[2] >> 50)
+
+	out[19] ^= byte(t[3]<<1) & 0xfe
+	out[20] = byte(t[3] >> 7)
+	out[21] = byte(t[3] >> 15)
+	out[22] = byte(t[3] >> 23)
+	out[23] = byte(t[3] >> 31)
+	out[24] = byte(t[3] >> 39)
+	out[25] = byte(t[3] >> 47)
+
+	out[25] ^= byte(t[4]<<4) & 0xf0
+	out[26] = byte(t[4] >> 4)
+	out[27] = byte(t[4] >> 12)
+	out[28] = byte(t[4] >> 20)
+	out[29] = byte(t[4] >> 28)
+	out[30] = byte(t[4] >> 36)
+	out[31] = byte(t[4] >> 44)
+}
+
+// invert calculates r = x^-1 mod p using Fermat's little theorem.
+func invert(r *[5]uint64, x *[5]uint64) {
+	var z2, z9, z11, z2_5_0, z2_10_0, z2_20_0, z2_50_0, z2_100_0, t [5]uint64
+
+	square(&z2, x)        /* 2 */
+	square(&t, &z2)       /* 4 */
+	square(&t, &t)        /* 8 */
+	mul(&z9, &t, x)       /* 9 */
+	mul(&z11, &z9, &z2)   /* 11 */
+	square(&t, &z11)      /* 22 */
+	mul(&z2_5_0, &t, &z9) /* 2^5 - 2^0 = 31 */
+
+	square(&t, &z2_5_0)      /* 2^6 - 2^1 */
+	for i := 1; i < 5; i++ { /* 2^20 - 2^10 */
+		square(&t, &t)
+	}
+	mul(&z2_10_0, &t, &z2_5_0) /* 2^10 - 2^0 */
+
+	square(&t, &z2_10_0)      /* 2^11 - 2^1 */
+	for i := 1; i < 10; i++ { /* 2^20 - 2^10 */
+		square(&t, &t)
+	}
+	mul(&z2_20_0, &t, &z2_10_0) /* 2^20 - 2^0 */
+
+	square(&t, &z2_20_0)      /* 2^21 - 2^1 */
+	for i := 1; i < 20; i++ { /* 2^40 - 2^20 */
+		square(&t, &t)
+	}
+	mul(&t, &t, &z2_20_0) /* 2^40 - 2^0 */
+
+	square(&t, &t)            /* 2^41 - 2^1 */
+	for i := 1; i < 10; i++ { /* 2^50 - 2^10 */
+		square(&t, &t)
+	}
+	mul(&z2_50_0, &t, &z2_10_0) /* 2^50 - 2^0 */
+
+	square(&t, &z2_50_0)      /* 2^51 - 2^1 */
+	for i := 1; i < 50; i++ { /* 2^100 - 2^50 */
+		square(&t, &t)
+	}
+	mul(&z2_100_0, &t, &z2_50_0) /* 2^100 - 2^0 */
+
+	square(&t, &z2_100_0)      /* 2^101 - 2^1 */
+	for i := 1; i < 100; i++ { /* 2^200 - 2^100 */
+		square(&t, &t)
+	}
+	mul(&t, &t, &z2_100_0) /* 2^200 - 2^0 */
+
+	square(&t, &t)            /* 2^201 - 2^1 */
+	for i := 1; i < 50; i++ { /* 2^250 - 2^50 */
+		square(&t, &t)
+	}
+	mul(&t, &t, &z2_50_0) /* 2^250 - 2^0 */
+
+	square(&t, &t) /* 2^251 - 2^1 */
+	square(&t, &t) /* 2^252 - 2^2 */
+	square(&t, &t) /* 2^253 - 2^3 */
+
+	square(&t, &t) /* 2^254 - 2^4 */
+
+	square(&t, &t)   /* 2^255 - 2^5 */
+	mul(r, &t, &z11) /* 2^255 - 21 */
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519_amd64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519_amd64.s
new file mode 100644
index 000000000..0250c8885
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519_amd64.s
@@ -0,0 +1,1793 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// This code was translated into a form compatible with 6a from the public
+// domain sources in SUPERCOP: https://bench.cr.yp.to/supercop.html
+
+// +build amd64,!gccgo,!appengine,!purego
+
+#define REDMASK51     0x0007FFFFFFFFFFFF
+
+// These constants cannot be encoded in non-MOVQ immediates.
+// We access them directly from memory instead.
+
+DATA ·_121666_213(SB)/8, $996687872
+GLOBL ·_121666_213(SB), 8, $8
+
+DATA ·_2P0(SB)/8, $0xFFFFFFFFFFFDA
+GLOBL ·_2P0(SB), 8, $8
+
+DATA ·_2P1234(SB)/8, $0xFFFFFFFFFFFFE
+GLOBL ·_2P1234(SB), 8, $8
+
+// func freeze(inout *[5]uint64)
+TEXT ·freeze(SB),7,$0-8
+	MOVQ inout+0(FP), DI
+
+	MOVQ 0(DI),SI
+	MOVQ 8(DI),DX
+	MOVQ 16(DI),CX
+	MOVQ 24(DI),R8
+	MOVQ 32(DI),R9
+	MOVQ $REDMASK51,AX
+	MOVQ AX,R10
+	SUBQ $18,R10
+	MOVQ $3,R11
+REDUCELOOP:
+	MOVQ SI,R12
+	SHRQ $51,R12
+	ANDQ AX,SI
+	ADDQ R12,DX
+	MOVQ DX,R12
+	SHRQ $51,R12
+	ANDQ AX,DX
+	ADDQ R12,CX
+	MOVQ CX,R12
+	SHRQ $51,R12
+	ANDQ AX,CX
+	ADDQ R12,R8
+	MOVQ R8,R12
+	SHRQ $51,R12
+	ANDQ AX,R8
+	ADDQ R12,R9
+	MOVQ R9,R12
+	SHRQ $51,R12
+	ANDQ AX,R9
+	IMUL3Q $19,R12,R12
+	ADDQ R12,SI
+	SUBQ $1,R11
+	JA REDUCELOOP
+	MOVQ $1,R12
+	CMPQ R10,SI
+	CMOVQLT R11,R12
+	CMPQ AX,DX
+	CMOVQNE R11,R12
+	CMPQ AX,CX
+	CMOVQNE R11,R12
+	CMPQ AX,R8
+	CMOVQNE R11,R12
+	CMPQ AX,R9
+	CMOVQNE R11,R12
+	NEGQ R12
+	ANDQ R12,AX
+	ANDQ R12,R10
+	SUBQ R10,SI
+	SUBQ AX,DX
+	SUBQ AX,CX
+	SUBQ AX,R8
+	SUBQ AX,R9
+	MOVQ SI,0(DI)
+	MOVQ DX,8(DI)
+	MOVQ CX,16(DI)
+	MOVQ R8,24(DI)
+	MOVQ R9,32(DI)
+	RET
+
+// func ladderstep(inout *[5][5]uint64)
+TEXT ·ladderstep(SB),0,$296-8
+	MOVQ inout+0(FP),DI
+
+	MOVQ 40(DI),SI
+	MOVQ 48(DI),DX
+	MOVQ 56(DI),CX
+	MOVQ 64(DI),R8
+	MOVQ 72(DI),R9
+	MOVQ SI,AX
+	MOVQ DX,R10
+	MOVQ CX,R11
+	MOVQ R8,R12
+	MOVQ R9,R13
+	ADDQ ·_2P0(SB),AX
+	ADDQ ·_2P1234(SB),R10
+	ADDQ ·_2P1234(SB),R11
+	ADDQ ·_2P1234(SB),R12
+	ADDQ ·_2P1234(SB),R13
+	ADDQ 80(DI),SI
+	ADDQ 88(DI),DX
+	ADDQ 96(DI),CX
+	ADDQ 104(DI),R8
+	ADDQ 112(DI),R9
+	SUBQ 80(DI),AX
+	SUBQ 88(DI),R10
+	SUBQ 96(DI),R11
+	SUBQ 104(DI),R12
+	SUBQ 112(DI),R13
+	MOVQ SI,0(SP)
+	MOVQ DX,8(SP)
+	MOVQ CX,16(SP)
+	MOVQ R8,24(SP)
+	MOVQ R9,32(SP)
+	MOVQ AX,40(SP)
+	MOVQ R10,48(SP)
+	MOVQ R11,56(SP)
+	MOVQ R12,64(SP)
+	MOVQ R13,72(SP)
+	MOVQ 40(SP),AX
+	MULQ 40(SP)
+	MOVQ AX,SI
+	MOVQ DX,CX
+	MOVQ 40(SP),AX
+	SHLQ $1,AX
+	MULQ 48(SP)
+	MOVQ AX,R8
+	MOVQ DX,R9
+	MOVQ 40(SP),AX
+	SHLQ $1,AX
+	MULQ 56(SP)
+	MOVQ AX,R10
+	MOVQ DX,R11
+	MOVQ 40(SP),AX
+	SHLQ $1,AX
+	MULQ 64(SP)
+	MOVQ AX,R12
+	MOVQ DX,R13
+	MOVQ 40(SP),AX
+	SHLQ $1,AX
+	MULQ 72(SP)
+	MOVQ AX,R14
+	MOVQ DX,R15
+	MOVQ 48(SP),AX
+	MULQ 48(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 48(SP),AX
+	SHLQ $1,AX
+	MULQ 56(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 48(SP),AX
+	SHLQ $1,AX
+	MULQ 64(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 48(SP),DX
+	IMUL3Q $38,DX,AX
+	MULQ 72(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 56(SP),AX
+	MULQ 56(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 56(SP),DX
+	IMUL3Q $38,DX,AX
+	MULQ 64(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 56(SP),DX
+	IMUL3Q $38,DX,AX
+	MULQ 72(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 64(SP),DX
+	IMUL3Q $19,DX,AX
+	MULQ 64(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 64(SP),DX
+	IMUL3Q $38,DX,AX
+	MULQ 72(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 72(SP),DX
+	IMUL3Q $19,DX,AX
+	MULQ 72(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ $REDMASK51,DX
+	SHLQ $13,SI,CX
+	ANDQ DX,SI
+	SHLQ $13,R8,R9
+	ANDQ DX,R8
+	ADDQ CX,R8
+	SHLQ $13,R10,R11
+	ANDQ DX,R10
+	ADDQ R9,R10
+	SHLQ $13,R12,R13
+	ANDQ DX,R12
+	ADDQ R11,R12
+	SHLQ $13,R14,R15
+	ANDQ DX,R14
+	ADDQ R13,R14
+	IMUL3Q $19,R15,CX
+	ADDQ CX,SI
+	MOVQ SI,CX
+	SHRQ $51,CX
+	ADDQ R8,CX
+	ANDQ DX,SI
+	MOVQ CX,R8
+	SHRQ $51,CX
+	ADDQ R10,CX
+	ANDQ DX,R8
+	MOVQ CX,R9
+	SHRQ $51,CX
+	ADDQ R12,CX
+	ANDQ DX,R9
+	MOVQ CX,AX
+	SHRQ $51,CX
+	ADDQ R14,CX
+	ANDQ DX,AX
+	MOVQ CX,R10
+	SHRQ $51,CX
+	IMUL3Q $19,CX,CX
+	ADDQ CX,SI
+	ANDQ DX,R10
+	MOVQ SI,80(SP)
+	MOVQ R8,88(SP)
+	MOVQ R9,96(SP)
+	MOVQ AX,104(SP)
+	MOVQ R10,112(SP)
+	MOVQ 0(SP),AX
+	MULQ 0(SP)
+	MOVQ AX,SI
+	MOVQ DX,CX
+	MOVQ 0(SP),AX
+	SHLQ $1,AX
+	MULQ 8(SP)
+	MOVQ AX,R8
+	MOVQ DX,R9
+	MOVQ 0(SP),AX
+	SHLQ $1,AX
+	MULQ 16(SP)
+	MOVQ AX,R10
+	MOVQ DX,R11
+	MOVQ 0(SP),AX
+	SHLQ $1,AX
+	MULQ 24(SP)
+	MOVQ AX,R12
+	MOVQ DX,R13
+	MOVQ 0(SP),AX
+	SHLQ $1,AX
+	MULQ 32(SP)
+	MOVQ AX,R14
+	MOVQ DX,R15
+	MOVQ 8(SP),AX
+	MULQ 8(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 8(SP),AX
+	SHLQ $1,AX
+	MULQ 16(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 8(SP),AX
+	SHLQ $1,AX
+	MULQ 24(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 8(SP),DX
+	IMUL3Q $38,DX,AX
+	MULQ 32(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 16(SP),AX
+	MULQ 16(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 16(SP),DX
+	IMUL3Q $38,DX,AX
+	MULQ 24(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 16(SP),DX
+	IMUL3Q $38,DX,AX
+	MULQ 32(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 24(SP),DX
+	IMUL3Q $19,DX,AX
+	MULQ 24(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 24(SP),DX
+	IMUL3Q $38,DX,AX
+	MULQ 32(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 32(SP),DX
+	IMUL3Q $19,DX,AX
+	MULQ 32(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ $REDMASK51,DX
+	SHLQ $13,SI,CX
+	ANDQ DX,SI
+	SHLQ $13,R8,R9
+	ANDQ DX,R8
+	ADDQ CX,R8
+	SHLQ $13,R10,R11
+	ANDQ DX,R10
+	ADDQ R9,R10
+	SHLQ $13,R12,R13
+	ANDQ DX,R12
+	ADDQ R11,R12
+	SHLQ $13,R14,R15
+	ANDQ DX,R14
+	ADDQ R13,R14
+	IMUL3Q $19,R15,CX
+	ADDQ CX,SI
+	MOVQ SI,CX
+	SHRQ $51,CX
+	ADDQ R8,CX
+	ANDQ DX,SI
+	MOVQ CX,R8
+	SHRQ $51,CX
+	ADDQ R10,CX
+	ANDQ DX,R8
+	MOVQ CX,R9
+	SHRQ $51,CX
+	ADDQ R12,CX
+	ANDQ DX,R9
+	MOVQ CX,AX
+	SHRQ $51,CX
+	ADDQ R14,CX
+	ANDQ DX,AX
+	MOVQ CX,R10
+	SHRQ $51,CX
+	IMUL3Q $19,CX,CX
+	ADDQ CX,SI
+	ANDQ DX,R10
+	MOVQ SI,120(SP)
+	MOVQ R8,128(SP)
+	MOVQ R9,136(SP)
+	MOVQ AX,144(SP)
+	MOVQ R10,152(SP)
+	MOVQ SI,SI
+	MOVQ R8,DX
+	MOVQ R9,CX
+	MOVQ AX,R8
+	MOVQ R10,R9
+	ADDQ ·_2P0(SB),SI
+	ADDQ ·_2P1234(SB),DX
+	ADDQ ·_2P1234(SB),CX
+	ADDQ ·_2P1234(SB),R8
+	ADDQ ·_2P1234(SB),R9
+	SUBQ 80(SP),SI
+	SUBQ 88(SP),DX
+	SUBQ 96(SP),CX
+	SUBQ 104(SP),R8
+	SUBQ 112(SP),R9
+	MOVQ SI,160(SP)
+	MOVQ DX,168(SP)
+	MOVQ CX,176(SP)
+	MOVQ R8,184(SP)
+	MOVQ R9,192(SP)
+	MOVQ 120(DI),SI
+	MOVQ 128(DI),DX
+	MOVQ 136(DI),CX
+	MOVQ 144(DI),R8
+	MOVQ 152(DI),R9
+	MOVQ SI,AX
+	MOVQ DX,R10
+	MOVQ CX,R11
+	MOVQ R8,R12
+	MOVQ R9,R13
+	ADDQ ·_2P0(SB),AX
+	ADDQ ·_2P1234(SB),R10
+	ADDQ ·_2P1234(SB),R11
+	ADDQ ·_2P1234(SB),R12
+	ADDQ ·_2P1234(SB),R13
+	ADDQ 160(DI),SI
+	ADDQ 168(DI),DX
+	ADDQ 176(DI),CX
+	ADDQ 184(DI),R8
+	ADDQ 192(DI),R9
+	SUBQ 160(DI),AX
+	SUBQ 168(DI),R10
+	SUBQ 176(DI),R11
+	SUBQ 184(DI),R12
+	SUBQ 192(DI),R13
+	MOVQ SI,200(SP)
+	MOVQ DX,208(SP)
+	MOVQ CX,216(SP)
+	MOVQ R8,224(SP)
+	MOVQ R9,232(SP)
+	MOVQ AX,240(SP)
+	MOVQ R10,248(SP)
+	MOVQ R11,256(SP)
+	MOVQ R12,264(SP)
+	MOVQ R13,272(SP)
+	MOVQ 224(SP),SI
+	IMUL3Q $19,SI,AX
+	MOVQ AX,280(SP)
+	MULQ 56(SP)
+	MOVQ AX,SI
+	MOVQ DX,CX
+	MOVQ 232(SP),DX
+	IMUL3Q $19,DX,AX
+	MOVQ AX,288(SP)
+	MULQ 48(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 200(SP),AX
+	MULQ 40(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 200(SP),AX
+	MULQ 48(SP)
+	MOVQ AX,R8
+	MOVQ DX,R9
+	MOVQ 200(SP),AX
+	MULQ 56(SP)
+	MOVQ AX,R10
+	MOVQ DX,R11
+	MOVQ 200(SP),AX
+	MULQ 64(SP)
+	MOVQ AX,R12
+	MOVQ DX,R13
+	MOVQ 200(SP),AX
+	MULQ 72(SP)
+	MOVQ AX,R14
+	MOVQ DX,R15
+	MOVQ 208(SP),AX
+	MULQ 40(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 208(SP),AX
+	MULQ 48(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 208(SP),AX
+	MULQ 56(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 208(SP),AX
+	MULQ 64(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 208(SP),DX
+	IMUL3Q $19,DX,AX
+	MULQ 72(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 216(SP),AX
+	MULQ 40(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 216(SP),AX
+	MULQ 48(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 216(SP),AX
+	MULQ 56(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 216(SP),DX
+	IMUL3Q $19,DX,AX
+	MULQ 64(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 216(SP),DX
+	IMUL3Q $19,DX,AX
+	MULQ 72(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 224(SP),AX
+	MULQ 40(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 224(SP),AX
+	MULQ 48(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 280(SP),AX
+	MULQ 64(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 280(SP),AX
+	MULQ 72(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 232(SP),AX
+	MULQ 40(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 288(SP),AX
+	MULQ 56(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 288(SP),AX
+	MULQ 64(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 288(SP),AX
+	MULQ 72(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ $REDMASK51,DX
+	SHLQ $13,SI,CX
+	ANDQ DX,SI
+	SHLQ $13,R8,R9
+	ANDQ DX,R8
+	ADDQ CX,R8
+	SHLQ $13,R10,R11
+	ANDQ DX,R10
+	ADDQ R9,R10
+	SHLQ $13,R12,R13
+	ANDQ DX,R12
+	ADDQ R11,R12
+	SHLQ $13,R14,R15
+	ANDQ DX,R14
+	ADDQ R13,R14
+	IMUL3Q $19,R15,CX
+	ADDQ CX,SI
+	MOVQ SI,CX
+	SHRQ $51,CX
+	ADDQ R8,CX
+	MOVQ CX,R8
+	SHRQ $51,CX
+	ANDQ DX,SI
+	ADDQ R10,CX
+	MOVQ CX,R9
+	SHRQ $51,CX
+	ANDQ DX,R8
+	ADDQ R12,CX
+	MOVQ CX,AX
+	SHRQ $51,CX
+	ANDQ DX,R9
+	ADDQ R14,CX
+	MOVQ CX,R10
+	SHRQ $51,CX
+	ANDQ DX,AX
+	IMUL3Q $19,CX,CX
+	ADDQ CX,SI
+	ANDQ DX,R10
+	MOVQ SI,40(SP)
+	MOVQ R8,48(SP)
+	MOVQ R9,56(SP)
+	MOVQ AX,64(SP)
+	MOVQ R10,72(SP)
+	MOVQ 264(SP),SI
+	IMUL3Q $19,SI,AX
+	MOVQ AX,200(SP)
+	MULQ 16(SP)
+	MOVQ AX,SI
+	MOVQ DX,CX
+	MOVQ 272(SP),DX
+	IMUL3Q $19,DX,AX
+	MOVQ AX,208(SP)
+	MULQ 8(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 240(SP),AX
+	MULQ 0(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 240(SP),AX
+	MULQ 8(SP)
+	MOVQ AX,R8
+	MOVQ DX,R9
+	MOVQ 240(SP),AX
+	MULQ 16(SP)
+	MOVQ AX,R10
+	MOVQ DX,R11
+	MOVQ 240(SP),AX
+	MULQ 24(SP)
+	MOVQ AX,R12
+	MOVQ DX,R13
+	MOVQ 240(SP),AX
+	MULQ 32(SP)
+	MOVQ AX,R14
+	MOVQ DX,R15
+	MOVQ 248(SP),AX
+	MULQ 0(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 248(SP),AX
+	MULQ 8(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 248(SP),AX
+	MULQ 16(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 248(SP),AX
+	MULQ 24(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 248(SP),DX
+	IMUL3Q $19,DX,AX
+	MULQ 32(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 256(SP),AX
+	MULQ 0(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 256(SP),AX
+	MULQ 8(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 256(SP),AX
+	MULQ 16(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 256(SP),DX
+	IMUL3Q $19,DX,AX
+	MULQ 24(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 256(SP),DX
+	IMUL3Q $19,DX,AX
+	MULQ 32(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 264(SP),AX
+	MULQ 0(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 264(SP),AX
+	MULQ 8(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 200(SP),AX
+	MULQ 24(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 200(SP),AX
+	MULQ 32(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 272(SP),AX
+	MULQ 0(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 208(SP),AX
+	MULQ 16(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 208(SP),AX
+	MULQ 24(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 208(SP),AX
+	MULQ 32(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ $REDMASK51,DX
+	SHLQ $13,SI,CX
+	ANDQ DX,SI
+	SHLQ $13,R8,R9
+	ANDQ DX,R8
+	ADDQ CX,R8
+	SHLQ $13,R10,R11
+	ANDQ DX,R10
+	ADDQ R9,R10
+	SHLQ $13,R12,R13
+	ANDQ DX,R12
+	ADDQ R11,R12
+	SHLQ $13,R14,R15
+	ANDQ DX,R14
+	ADDQ R13,R14
+	IMUL3Q $19,R15,CX
+	ADDQ CX,SI
+	MOVQ SI,CX
+	SHRQ $51,CX
+	ADDQ R8,CX
+	MOVQ CX,R8
+	SHRQ $51,CX
+	ANDQ DX,SI
+	ADDQ R10,CX
+	MOVQ CX,R9
+	SHRQ $51,CX
+	ANDQ DX,R8
+	ADDQ R12,CX
+	MOVQ CX,AX
+	SHRQ $51,CX
+	ANDQ DX,R9
+	ADDQ R14,CX
+	MOVQ CX,R10
+	SHRQ $51,CX
+	ANDQ DX,AX
+	IMUL3Q $19,CX,CX
+	ADDQ CX,SI
+	ANDQ DX,R10
+	MOVQ SI,DX
+	MOVQ R8,CX
+	MOVQ R9,R11
+	MOVQ AX,R12
+	MOVQ R10,R13
+	ADDQ ·_2P0(SB),DX
+	ADDQ ·_2P1234(SB),CX
+	ADDQ ·_2P1234(SB),R11
+	ADDQ ·_2P1234(SB),R12
+	ADDQ ·_2P1234(SB),R13
+	ADDQ 40(SP),SI
+	ADDQ 48(SP),R8
+	ADDQ 56(SP),R9
+	ADDQ 64(SP),AX
+	ADDQ 72(SP),R10
+	SUBQ 40(SP),DX
+	SUBQ 48(SP),CX
+	SUBQ 56(SP),R11
+	SUBQ 64(SP),R12
+	SUBQ 72(SP),R13
+	MOVQ SI,120(DI)
+	MOVQ R8,128(DI)
+	MOVQ R9,136(DI)
+	MOVQ AX,144(DI)
+	MOVQ R10,152(DI)
+	MOVQ DX,160(DI)
+	MOVQ CX,168(DI)
+	MOVQ R11,176(DI)
+	MOVQ R12,184(DI)
+	MOVQ R13,192(DI)
+	MOVQ 120(DI),AX
+	MULQ 120(DI)
+	MOVQ AX,SI
+	MOVQ DX,CX
+	MOVQ 120(DI),AX
+	SHLQ $1,AX
+	MULQ 128(DI)
+	MOVQ AX,R8
+	MOVQ DX,R9
+	MOVQ 120(DI),AX
+	SHLQ $1,AX
+	MULQ 136(DI)
+	MOVQ AX,R10
+	MOVQ DX,R11
+	MOVQ 120(DI),AX
+	SHLQ $1,AX
+	MULQ 144(DI)
+	MOVQ AX,R12
+	MOVQ DX,R13
+	MOVQ 120(DI),AX
+	SHLQ $1,AX
+	MULQ 152(DI)
+	MOVQ AX,R14
+	MOVQ DX,R15
+	MOVQ 128(DI),AX
+	MULQ 128(DI)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 128(DI),AX
+	SHLQ $1,AX
+	MULQ 136(DI)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 128(DI),AX
+	SHLQ $1,AX
+	MULQ 144(DI)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 128(DI),DX
+	IMUL3Q $38,DX,AX
+	MULQ 152(DI)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 136(DI),AX
+	MULQ 136(DI)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 136(DI),DX
+	IMUL3Q $38,DX,AX
+	MULQ 144(DI)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 136(DI),DX
+	IMUL3Q $38,DX,AX
+	MULQ 152(DI)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 144(DI),DX
+	IMUL3Q $19,DX,AX
+	MULQ 144(DI)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 144(DI),DX
+	IMUL3Q $38,DX,AX
+	MULQ 152(DI)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 152(DI),DX
+	IMUL3Q $19,DX,AX
+	MULQ 152(DI)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ $REDMASK51,DX
+	SHLQ $13,SI,CX
+	ANDQ DX,SI
+	SHLQ $13,R8,R9
+	ANDQ DX,R8
+	ADDQ CX,R8
+	SHLQ $13,R10,R11
+	ANDQ DX,R10
+	ADDQ R9,R10
+	SHLQ $13,R12,R13
+	ANDQ DX,R12
+	ADDQ R11,R12
+	SHLQ $13,R14,R15
+	ANDQ DX,R14
+	ADDQ R13,R14
+	IMUL3Q $19,R15,CX
+	ADDQ CX,SI
+	MOVQ SI,CX
+	SHRQ $51,CX
+	ADDQ R8,CX
+	ANDQ DX,SI
+	MOVQ CX,R8
+	SHRQ $51,CX
+	ADDQ R10,CX
+	ANDQ DX,R8
+	MOVQ CX,R9
+	SHRQ $51,CX
+	ADDQ R12,CX
+	ANDQ DX,R9
+	MOVQ CX,AX
+	SHRQ $51,CX
+	ADDQ R14,CX
+	ANDQ DX,AX
+	MOVQ CX,R10
+	SHRQ $51,CX
+	IMUL3Q $19,CX,CX
+	ADDQ CX,SI
+	ANDQ DX,R10
+	MOVQ SI,120(DI)
+	MOVQ R8,128(DI)
+	MOVQ R9,136(DI)
+	MOVQ AX,144(DI)
+	MOVQ R10,152(DI)
+	MOVQ 160(DI),AX
+	MULQ 160(DI)
+	MOVQ AX,SI
+	MOVQ DX,CX
+	MOVQ 160(DI),AX
+	SHLQ $1,AX
+	MULQ 168(DI)
+	MOVQ AX,R8
+	MOVQ DX,R9
+	MOVQ 160(DI),AX
+	SHLQ $1,AX
+	MULQ 176(DI)
+	MOVQ AX,R10
+	MOVQ DX,R11
+	MOVQ 160(DI),AX
+	SHLQ $1,AX
+	MULQ 184(DI)
+	MOVQ AX,R12
+	MOVQ DX,R13
+	MOVQ 160(DI),AX
+	SHLQ $1,AX
+	MULQ 192(DI)
+	MOVQ AX,R14
+	MOVQ DX,R15
+	MOVQ 168(DI),AX
+	MULQ 168(DI)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 168(DI),AX
+	SHLQ $1,AX
+	MULQ 176(DI)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 168(DI),AX
+	SHLQ $1,AX
+	MULQ 184(DI)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 168(DI),DX
+	IMUL3Q $38,DX,AX
+	MULQ 192(DI)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 176(DI),AX
+	MULQ 176(DI)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 176(DI),DX
+	IMUL3Q $38,DX,AX
+	MULQ 184(DI)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 176(DI),DX
+	IMUL3Q $38,DX,AX
+	MULQ 192(DI)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 184(DI),DX
+	IMUL3Q $19,DX,AX
+	MULQ 184(DI)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 184(DI),DX
+	IMUL3Q $38,DX,AX
+	MULQ 192(DI)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 192(DI),DX
+	IMUL3Q $19,DX,AX
+	MULQ 192(DI)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ $REDMASK51,DX
+	SHLQ $13,SI,CX
+	ANDQ DX,SI
+	SHLQ $13,R8,R9
+	ANDQ DX,R8
+	ADDQ CX,R8
+	SHLQ $13,R10,R11
+	ANDQ DX,R10
+	ADDQ R9,R10
+	SHLQ $13,R12,R13
+	ANDQ DX,R12
+	ADDQ R11,R12
+	SHLQ $13,R14,R15
+	ANDQ DX,R14
+	ADDQ R13,R14
+	IMUL3Q $19,R15,CX
+	ADDQ CX,SI
+	MOVQ SI,CX
+	SHRQ $51,CX
+	ADDQ R8,CX
+	ANDQ DX,SI
+	MOVQ CX,R8
+	SHRQ $51,CX
+	ADDQ R10,CX
+	ANDQ DX,R8
+	MOVQ CX,R9
+	SHRQ $51,CX
+	ADDQ R12,CX
+	ANDQ DX,R9
+	MOVQ CX,AX
+	SHRQ $51,CX
+	ADDQ R14,CX
+	ANDQ DX,AX
+	MOVQ CX,R10
+	SHRQ $51,CX
+	IMUL3Q $19,CX,CX
+	ADDQ CX,SI
+	ANDQ DX,R10
+	MOVQ SI,160(DI)
+	MOVQ R8,168(DI)
+	MOVQ R9,176(DI)
+	MOVQ AX,184(DI)
+	MOVQ R10,192(DI)
+	MOVQ 184(DI),SI
+	IMUL3Q $19,SI,AX
+	MOVQ AX,0(SP)
+	MULQ 16(DI)
+	MOVQ AX,SI
+	MOVQ DX,CX
+	MOVQ 192(DI),DX
+	IMUL3Q $19,DX,AX
+	MOVQ AX,8(SP)
+	MULQ 8(DI)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 160(DI),AX
+	MULQ 0(DI)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 160(DI),AX
+	MULQ 8(DI)
+	MOVQ AX,R8
+	MOVQ DX,R9
+	MOVQ 160(DI),AX
+	MULQ 16(DI)
+	MOVQ AX,R10
+	MOVQ DX,R11
+	MOVQ 160(DI),AX
+	MULQ 24(DI)
+	MOVQ AX,R12
+	MOVQ DX,R13
+	MOVQ 160(DI),AX
+	MULQ 32(DI)
+	MOVQ AX,R14
+	MOVQ DX,R15
+	MOVQ 168(DI),AX
+	MULQ 0(DI)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 168(DI),AX
+	MULQ 8(DI)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 168(DI),AX
+	MULQ 16(DI)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 168(DI),AX
+	MULQ 24(DI)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 168(DI),DX
+	IMUL3Q $19,DX,AX
+	MULQ 32(DI)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 176(DI),AX
+	MULQ 0(DI)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 176(DI),AX
+	MULQ 8(DI)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 176(DI),AX
+	MULQ 16(DI)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 176(DI),DX
+	IMUL3Q $19,DX,AX
+	MULQ 24(DI)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 176(DI),DX
+	IMUL3Q $19,DX,AX
+	MULQ 32(DI)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 184(DI),AX
+	MULQ 0(DI)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 184(DI),AX
+	MULQ 8(DI)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 0(SP),AX
+	MULQ 24(DI)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 0(SP),AX
+	MULQ 32(DI)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 192(DI),AX
+	MULQ 0(DI)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 8(SP),AX
+	MULQ 16(DI)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 8(SP),AX
+	MULQ 24(DI)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 8(SP),AX
+	MULQ 32(DI)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ $REDMASK51,DX
+	SHLQ $13,SI,CX
+	ANDQ DX,SI
+	SHLQ $13,R8,R9
+	ANDQ DX,R8
+	ADDQ CX,R8
+	SHLQ $13,R10,R11
+	ANDQ DX,R10
+	ADDQ R9,R10
+	SHLQ $13,R12,R13
+	ANDQ DX,R12
+	ADDQ R11,R12
+	SHLQ $13,R14,R15
+	ANDQ DX,R14
+	ADDQ R13,R14
+	IMUL3Q $19,R15,CX
+	ADDQ CX,SI
+	MOVQ SI,CX
+	SHRQ $51,CX
+	ADDQ R8,CX
+	MOVQ CX,R8
+	SHRQ $51,CX
+	ANDQ DX,SI
+	ADDQ R10,CX
+	MOVQ CX,R9
+	SHRQ $51,CX
+	ANDQ DX,R8
+	ADDQ R12,CX
+	MOVQ CX,AX
+	SHRQ $51,CX
+	ANDQ DX,R9
+	ADDQ R14,CX
+	MOVQ CX,R10
+	SHRQ $51,CX
+	ANDQ DX,AX
+	IMUL3Q $19,CX,CX
+	ADDQ CX,SI
+	ANDQ DX,R10
+	MOVQ SI,160(DI)
+	MOVQ R8,168(DI)
+	MOVQ R9,176(DI)
+	MOVQ AX,184(DI)
+	MOVQ R10,192(DI)
+	MOVQ 144(SP),SI
+	IMUL3Q $19,SI,AX
+	MOVQ AX,0(SP)
+	MULQ 96(SP)
+	MOVQ AX,SI
+	MOVQ DX,CX
+	MOVQ 152(SP),DX
+	IMUL3Q $19,DX,AX
+	MOVQ AX,8(SP)
+	MULQ 88(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 120(SP),AX
+	MULQ 80(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 120(SP),AX
+	MULQ 88(SP)
+	MOVQ AX,R8
+	MOVQ DX,R9
+	MOVQ 120(SP),AX
+	MULQ 96(SP)
+	MOVQ AX,R10
+	MOVQ DX,R11
+	MOVQ 120(SP),AX
+	MULQ 104(SP)
+	MOVQ AX,R12
+	MOVQ DX,R13
+	MOVQ 120(SP),AX
+	MULQ 112(SP)
+	MOVQ AX,R14
+	MOVQ DX,R15
+	MOVQ 128(SP),AX
+	MULQ 80(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 128(SP),AX
+	MULQ 88(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 128(SP),AX
+	MULQ 96(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 128(SP),AX
+	MULQ 104(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 128(SP),DX
+	IMUL3Q $19,DX,AX
+	MULQ 112(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 136(SP),AX
+	MULQ 80(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 136(SP),AX
+	MULQ 88(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 136(SP),AX
+	MULQ 96(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 136(SP),DX
+	IMUL3Q $19,DX,AX
+	MULQ 104(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 136(SP),DX
+	IMUL3Q $19,DX,AX
+	MULQ 112(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 144(SP),AX
+	MULQ 80(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 144(SP),AX
+	MULQ 88(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 0(SP),AX
+	MULQ 104(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 0(SP),AX
+	MULQ 112(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 152(SP),AX
+	MULQ 80(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 8(SP),AX
+	MULQ 96(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 8(SP),AX
+	MULQ 104(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 8(SP),AX
+	MULQ 112(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ $REDMASK51,DX
+	SHLQ $13,SI,CX
+	ANDQ DX,SI
+	SHLQ $13,R8,R9
+	ANDQ DX,R8
+	ADDQ CX,R8
+	SHLQ $13,R10,R11
+	ANDQ DX,R10
+	ADDQ R9,R10
+	SHLQ $13,R12,R13
+	ANDQ DX,R12
+	ADDQ R11,R12
+	SHLQ $13,R14,R15
+	ANDQ DX,R14
+	ADDQ R13,R14
+	IMUL3Q $19,R15,CX
+	ADDQ CX,SI
+	MOVQ SI,CX
+	SHRQ $51,CX
+	ADDQ R8,CX
+	MOVQ CX,R8
+	SHRQ $51,CX
+	ANDQ DX,SI
+	ADDQ R10,CX
+	MOVQ CX,R9
+	SHRQ $51,CX
+	ANDQ DX,R8
+	ADDQ R12,CX
+	MOVQ CX,AX
+	SHRQ $51,CX
+	ANDQ DX,R9
+	ADDQ R14,CX
+	MOVQ CX,R10
+	SHRQ $51,CX
+	ANDQ DX,AX
+	IMUL3Q $19,CX,CX
+	ADDQ CX,SI
+	ANDQ DX,R10
+	MOVQ SI,40(DI)
+	MOVQ R8,48(DI)
+	MOVQ R9,56(DI)
+	MOVQ AX,64(DI)
+	MOVQ R10,72(DI)
+	MOVQ 160(SP),AX
+	MULQ ·_121666_213(SB)
+	SHRQ $13,AX
+	MOVQ AX,SI
+	MOVQ DX,CX
+	MOVQ 168(SP),AX
+	MULQ ·_121666_213(SB)
+	SHRQ $13,AX
+	ADDQ AX,CX
+	MOVQ DX,R8
+	MOVQ 176(SP),AX
+	MULQ ·_121666_213(SB)
+	SHRQ $13,AX
+	ADDQ AX,R8
+	MOVQ DX,R9
+	MOVQ 184(SP),AX
+	MULQ ·_121666_213(SB)
+	SHRQ $13,AX
+	ADDQ AX,R9
+	MOVQ DX,R10
+	MOVQ 192(SP),AX
+	MULQ ·_121666_213(SB)
+	SHRQ $13,AX
+	ADDQ AX,R10
+	IMUL3Q $19,DX,DX
+	ADDQ DX,SI
+	ADDQ 80(SP),SI
+	ADDQ 88(SP),CX
+	ADDQ 96(SP),R8
+	ADDQ 104(SP),R9
+	ADDQ 112(SP),R10
+	MOVQ SI,80(DI)
+	MOVQ CX,88(DI)
+	MOVQ R8,96(DI)
+	MOVQ R9,104(DI)
+	MOVQ R10,112(DI)
+	MOVQ 104(DI),SI
+	IMUL3Q $19,SI,AX
+	MOVQ AX,0(SP)
+	MULQ 176(SP)
+	MOVQ AX,SI
+	MOVQ DX,CX
+	MOVQ 112(DI),DX
+	IMUL3Q $19,DX,AX
+	MOVQ AX,8(SP)
+	MULQ 168(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 80(DI),AX
+	MULQ 160(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 80(DI),AX
+	MULQ 168(SP)
+	MOVQ AX,R8
+	MOVQ DX,R9
+	MOVQ 80(DI),AX
+	MULQ 176(SP)
+	MOVQ AX,R10
+	MOVQ DX,R11
+	MOVQ 80(DI),AX
+	MULQ 184(SP)
+	MOVQ AX,R12
+	MOVQ DX,R13
+	MOVQ 80(DI),AX
+	MULQ 192(SP)
+	MOVQ AX,R14
+	MOVQ DX,R15
+	MOVQ 88(DI),AX
+	MULQ 160(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 88(DI),AX
+	MULQ 168(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 88(DI),AX
+	MULQ 176(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 88(DI),AX
+	MULQ 184(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 88(DI),DX
+	IMUL3Q $19,DX,AX
+	MULQ 192(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 96(DI),AX
+	MULQ 160(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 96(DI),AX
+	MULQ 168(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 96(DI),AX
+	MULQ 176(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 96(DI),DX
+	IMUL3Q $19,DX,AX
+	MULQ 184(SP)
+	ADDQ AX,SI
+	ADCQ DX,CX
+	MOVQ 96(DI),DX
+	IMUL3Q $19,DX,AX
+	MULQ 192(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 104(DI),AX
+	MULQ 160(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 104(DI),AX
+	MULQ 168(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 0(SP),AX
+	MULQ 184(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 0(SP),AX
+	MULQ 192(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 112(DI),AX
+	MULQ 160(SP)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 8(SP),AX
+	MULQ 176(SP)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 8(SP),AX
+	MULQ 184(SP)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 8(SP),AX
+	MULQ 192(SP)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ $REDMASK51,DX
+	SHLQ $13,SI,CX
+	ANDQ DX,SI
+	SHLQ $13,R8,R9
+	ANDQ DX,R8
+	ADDQ CX,R8
+	SHLQ $13,R10,R11
+	ANDQ DX,R10
+	ADDQ R9,R10
+	SHLQ $13,R12,R13
+	ANDQ DX,R12
+	ADDQ R11,R12
+	SHLQ $13,R14,R15
+	ANDQ DX,R14
+	ADDQ R13,R14
+	IMUL3Q $19,R15,CX
+	ADDQ CX,SI
+	MOVQ SI,CX
+	SHRQ $51,CX
+	ADDQ R8,CX
+	MOVQ CX,R8
+	SHRQ $51,CX
+	ANDQ DX,SI
+	ADDQ R10,CX
+	MOVQ CX,R9
+	SHRQ $51,CX
+	ANDQ DX,R8
+	ADDQ R12,CX
+	MOVQ CX,AX
+	SHRQ $51,CX
+	ANDQ DX,R9
+	ADDQ R14,CX
+	MOVQ CX,R10
+	SHRQ $51,CX
+	ANDQ DX,AX
+	IMUL3Q $19,CX,CX
+	ADDQ CX,SI
+	ANDQ DX,R10
+	MOVQ SI,80(DI)
+	MOVQ R8,88(DI)
+	MOVQ R9,96(DI)
+	MOVQ AX,104(DI)
+	MOVQ R10,112(DI)
+	RET
+
+// func cswap(inout *[4][5]uint64, v uint64)
+TEXT ·cswap(SB),7,$0
+	MOVQ inout+0(FP),DI
+	MOVQ v+8(FP),SI
+
+	SUBQ $1, SI
+	NOTQ SI
+	MOVQ SI, X15
+	PSHUFD $0x44, X15, X15
+
+	MOVOU 0(DI), X0
+	MOVOU 16(DI), X2
+	MOVOU 32(DI), X4
+	MOVOU 48(DI), X6
+	MOVOU 64(DI), X8
+	MOVOU 80(DI), X1
+	MOVOU 96(DI), X3
+	MOVOU 112(DI), X5
+	MOVOU 128(DI), X7
+	MOVOU 144(DI), X9
+
+	MOVO X1, X10
+	MOVO X3, X11
+	MOVO X5, X12
+	MOVO X7, X13
+	MOVO X9, X14
+
+	PXOR X0, X10
+	PXOR X2, X11
+	PXOR X4, X12
+	PXOR X6, X13
+	PXOR X8, X14
+	PAND X15, X10
+	PAND X15, X11
+	PAND X15, X12
+	PAND X15, X13
+	PAND X15, X14
+	PXOR X10, X0
+	PXOR X10, X1
+	PXOR X11, X2
+	PXOR X11, X3
+	PXOR X12, X4
+	PXOR X12, X5
+	PXOR X13, X6
+	PXOR X13, X7
+	PXOR X14, X8
+	PXOR X14, X9
+
+	MOVOU X0, 0(DI)
+	MOVOU X2, 16(DI)
+	MOVOU X4, 32(DI)
+	MOVOU X6, 48(DI)
+	MOVOU X8, 64(DI)
+	MOVOU X1, 80(DI)
+	MOVOU X3, 96(DI)
+	MOVOU X5, 112(DI)
+	MOVOU X7, 128(DI)
+	MOVOU X9, 144(DI)
+	RET
+
+// func mul(dest, a, b *[5]uint64)
+TEXT ·mul(SB),0,$16-24
+	MOVQ dest+0(FP), DI
+	MOVQ a+8(FP), SI
+	MOVQ b+16(FP), DX
+
+	MOVQ DX,CX
+	MOVQ 24(SI),DX
+	IMUL3Q $19,DX,AX
+	MOVQ AX,0(SP)
+	MULQ 16(CX)
+	MOVQ AX,R8
+	MOVQ DX,R9
+	MOVQ 32(SI),DX
+	IMUL3Q $19,DX,AX
+	MOVQ AX,8(SP)
+	MULQ 8(CX)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 0(SI),AX
+	MULQ 0(CX)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 0(SI),AX
+	MULQ 8(CX)
+	MOVQ AX,R10
+	MOVQ DX,R11
+	MOVQ 0(SI),AX
+	MULQ 16(CX)
+	MOVQ AX,R12
+	MOVQ DX,R13
+	MOVQ 0(SI),AX
+	MULQ 24(CX)
+	MOVQ AX,R14
+	MOVQ DX,R15
+	MOVQ 0(SI),AX
+	MULQ 32(CX)
+	MOVQ AX,BX
+	MOVQ DX,BP
+	MOVQ 8(SI),AX
+	MULQ 0(CX)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 8(SI),AX
+	MULQ 8(CX)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 8(SI),AX
+	MULQ 16(CX)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 8(SI),AX
+	MULQ 24(CX)
+	ADDQ AX,BX
+	ADCQ DX,BP
+	MOVQ 8(SI),DX
+	IMUL3Q $19,DX,AX
+	MULQ 32(CX)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 16(SI),AX
+	MULQ 0(CX)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 16(SI),AX
+	MULQ 8(CX)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 16(SI),AX
+	MULQ 16(CX)
+	ADDQ AX,BX
+	ADCQ DX,BP
+	MOVQ 16(SI),DX
+	IMUL3Q $19,DX,AX
+	MULQ 24(CX)
+	ADDQ AX,R8
+	ADCQ DX,R9
+	MOVQ 16(SI),DX
+	IMUL3Q $19,DX,AX
+	MULQ 32(CX)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 24(SI),AX
+	MULQ 0(CX)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ 24(SI),AX
+	MULQ 8(CX)
+	ADDQ AX,BX
+	ADCQ DX,BP
+	MOVQ 0(SP),AX
+	MULQ 24(CX)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 0(SP),AX
+	MULQ 32(CX)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 32(SI),AX
+	MULQ 0(CX)
+	ADDQ AX,BX
+	ADCQ DX,BP
+	MOVQ 8(SP),AX
+	MULQ 16(CX)
+	ADDQ AX,R10
+	ADCQ DX,R11
+	MOVQ 8(SP),AX
+	MULQ 24(CX)
+	ADDQ AX,R12
+	ADCQ DX,R13
+	MOVQ 8(SP),AX
+	MULQ 32(CX)
+	ADDQ AX,R14
+	ADCQ DX,R15
+	MOVQ $REDMASK51,SI
+	SHLQ $13,R8,R9
+	ANDQ SI,R8
+	SHLQ $13,R10,R11
+	ANDQ SI,R10
+	ADDQ R9,R10
+	SHLQ $13,R12,R13
+	ANDQ SI,R12
+	ADDQ R11,R12
+	SHLQ $13,R14,R15
+	ANDQ SI,R14
+	ADDQ R13,R14
+	SHLQ $13,BX,BP
+	ANDQ SI,BX
+	ADDQ R15,BX
+	IMUL3Q $19,BP,DX
+	ADDQ DX,R8
+	MOVQ R8,DX
+	SHRQ $51,DX
+	ADDQ R10,DX
+	MOVQ DX,CX
+	SHRQ $51,DX
+	ANDQ SI,R8
+	ADDQ R12,DX
+	MOVQ DX,R9
+	SHRQ $51,DX
+	ANDQ SI,CX
+	ADDQ R14,DX
+	MOVQ DX,AX
+	SHRQ $51,DX
+	ANDQ SI,R9
+	ADDQ BX,DX
+	MOVQ DX,R10
+	SHRQ $51,DX
+	ANDQ SI,AX
+	IMUL3Q $19,DX,DX
+	ADDQ DX,R8
+	ANDQ SI,R10
+	MOVQ R8,0(DI)
+	MOVQ CX,8(DI)
+	MOVQ R9,16(DI)
+	MOVQ AX,24(DI)
+	MOVQ R10,32(DI)
+	RET
+
+// func square(out, in *[5]uint64)
+TEXT ·square(SB),7,$0-16
+	MOVQ out+0(FP), DI
+	MOVQ in+8(FP), SI
+
+	MOVQ 0(SI),AX
+	MULQ 0(SI)
+	MOVQ AX,CX
+	MOVQ DX,R8
+	MOVQ 0(SI),AX
+	SHLQ $1,AX
+	MULQ 8(SI)
+	MOVQ AX,R9
+	MOVQ DX,R10
+	MOVQ 0(SI),AX
+	SHLQ $1,AX
+	MULQ 16(SI)
+	MOVQ AX,R11
+	MOVQ DX,R12
+	MOVQ 0(SI),AX
+	SHLQ $1,AX
+	MULQ 24(SI)
+	MOVQ AX,R13
+	MOVQ DX,R14
+	MOVQ 0(SI),AX
+	SHLQ $1,AX
+	MULQ 32(SI)
+	MOVQ AX,R15
+	MOVQ DX,BX
+	MOVQ 8(SI),AX
+	MULQ 8(SI)
+	ADDQ AX,R11
+	ADCQ DX,R12
+	MOVQ 8(SI),AX
+	SHLQ $1,AX
+	MULQ 16(SI)
+	ADDQ AX,R13
+	ADCQ DX,R14
+	MOVQ 8(SI),AX
+	SHLQ $1,AX
+	MULQ 24(SI)
+	ADDQ AX,R15
+	ADCQ DX,BX
+	MOVQ 8(SI),DX
+	IMUL3Q $38,DX,AX
+	MULQ 32(SI)
+	ADDQ AX,CX
+	ADCQ DX,R8
+	MOVQ 16(SI),AX
+	MULQ 16(SI)
+	ADDQ AX,R15
+	ADCQ DX,BX
+	MOVQ 16(SI),DX
+	IMUL3Q $38,DX,AX
+	MULQ 24(SI)
+	ADDQ AX,CX
+	ADCQ DX,R8
+	MOVQ 16(SI),DX
+	IMUL3Q $38,DX,AX
+	MULQ 32(SI)
+	ADDQ AX,R9
+	ADCQ DX,R10
+	MOVQ 24(SI),DX
+	IMUL3Q $19,DX,AX
+	MULQ 24(SI)
+	ADDQ AX,R9
+	ADCQ DX,R10
+	MOVQ 24(SI),DX
+	IMUL3Q $38,DX,AX
+	MULQ 32(SI)
+	ADDQ AX,R11
+	ADCQ DX,R12
+	MOVQ 32(SI),DX
+	IMUL3Q $19,DX,AX
+	MULQ 32(SI)
+	ADDQ AX,R13
+	ADCQ DX,R14
+	MOVQ $REDMASK51,SI
+	SHLQ $13,CX,R8
+	ANDQ SI,CX
+	SHLQ $13,R9,R10
+	ANDQ SI,R9
+	ADDQ R8,R9
+	SHLQ $13,R11,R12
+	ANDQ SI,R11
+	ADDQ R10,R11
+	SHLQ $13,R13,R14
+	ANDQ SI,R13
+	ADDQ R12,R13
+	SHLQ $13,R15,BX
+	ANDQ SI,R15
+	ADDQ R14,R15
+	IMUL3Q $19,BX,DX
+	ADDQ DX,CX
+	MOVQ CX,DX
+	SHRQ $51,DX
+	ADDQ R9,DX
+	ANDQ SI,CX
+	MOVQ DX,R8
+	SHRQ $51,DX
+	ADDQ R11,DX
+	ANDQ SI,R8
+	MOVQ DX,R9
+	SHRQ $51,DX
+	ADDQ R13,DX
+	ANDQ SI,R9
+	MOVQ DX,AX
+	SHRQ $51,DX
+	ADDQ R15,DX
+	ANDQ SI,AX
+	MOVQ DX,R10
+	SHRQ $51,DX
+	IMUL3Q $19,DX,DX
+	ADDQ DX,CX
+	ANDQ SI,R10
+	MOVQ CX,0(DI)
+	MOVQ R8,8(DI)
+	MOVQ R9,16(DI)
+	MOVQ AX,24(DI)
+	MOVQ R10,32(DI)
+	RET
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519_generic.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519_generic.go
new file mode 100644
index 000000000..c43b13fc8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519_generic.go
@@ -0,0 +1,828 @@
+// Copyright 2013 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package curve25519
+
+import "encoding/binary"
+
+// This code is a port of the public domain, "ref10" implementation of
+// curve25519 from SUPERCOP 20130419 by D. J. Bernstein.
+
+// fieldElement represents an element of the field GF(2^255 - 19). An element
+// t, entries t[0]...t[9], represents the integer t[0]+2^26 t[1]+2^51 t[2]+2^77
+// t[3]+2^102 t[4]+...+2^230 t[9]. Bounds on each t[i] vary depending on
+// context.
+type fieldElement [10]int32
+
+func feZero(fe *fieldElement) {
+	for i := range fe {
+		fe[i] = 0
+	}
+}
+
+func feOne(fe *fieldElement) {
+	feZero(fe)
+	fe[0] = 1
+}
+
+func feAdd(dst, a, b *fieldElement) {
+	for i := range dst {
+		dst[i] = a[i] + b[i]
+	}
+}
+
+func feSub(dst, a, b *fieldElement) {
+	for i := range dst {
+		dst[i] = a[i] - b[i]
+	}
+}
+
+func feCopy(dst, src *fieldElement) {
+	for i := range dst {
+		dst[i] = src[i]
+	}
+}
+
+// feCSwap replaces (f,g) with (g,f) if b == 1; replaces (f,g) with (f,g) if b == 0.
+//
+// Preconditions: b in {0,1}.
+func feCSwap(f, g *fieldElement, b int32) {
+	b = -b
+	for i := range f {
+		t := b & (f[i] ^ g[i])
+		f[i] ^= t
+		g[i] ^= t
+	}
+}
+
+// load3 reads a 24-bit, little-endian value from in.
+func load3(in []byte) int64 {
+	var r int64
+	r = int64(in[0])
+	r |= int64(in[1]) << 8
+	r |= int64(in[2]) << 16
+	return r
+}
+
+// load4 reads a 32-bit, little-endian value from in.
+func load4(in []byte) int64 {
+	return int64(binary.LittleEndian.Uint32(in))
+}
+
+func feFromBytes(dst *fieldElement, src *[32]byte) {
+	h0 := load4(src[:])
+	h1 := load3(src[4:]) << 6
+	h2 := load3(src[7:]) << 5
+	h3 := load3(src[10:]) << 3
+	h4 := load3(src[13:]) << 2
+	h5 := load4(src[16:])
+	h6 := load3(src[20:]) << 7
+	h7 := load3(src[23:]) << 5
+	h8 := load3(src[26:]) << 4
+	h9 := (load3(src[29:]) & 0x7fffff) << 2
+
+	var carry [10]int64
+	carry[9] = (h9 + 1<<24) >> 25
+	h0 += carry[9] * 19
+	h9 -= carry[9] << 25
+	carry[1] = (h1 + 1<<24) >> 25
+	h2 += carry[1]
+	h1 -= carry[1] << 25
+	carry[3] = (h3 + 1<<24) >> 25
+	h4 += carry[3]
+	h3 -= carry[3] << 25
+	carry[5] = (h5 + 1<<24) >> 25
+	h6 += carry[5]
+	h5 -= carry[5] << 25
+	carry[7] = (h7 + 1<<24) >> 25
+	h8 += carry[7]
+	h7 -= carry[7] << 25
+
+	carry[0] = (h0 + 1<<25) >> 26
+	h1 += carry[0]
+	h0 -= carry[0] << 26
+	carry[2] = (h2 + 1<<25) >> 26
+	h3 += carry[2]
+	h2 -= carry[2] << 26
+	carry[4] = (h4 + 1<<25) >> 26
+	h5 += carry[4]
+	h4 -= carry[4] << 26
+	carry[6] = (h6 + 1<<25) >> 26
+	h7 += carry[6]
+	h6 -= carry[6] << 26
+	carry[8] = (h8 + 1<<25) >> 26
+	h9 += carry[8]
+	h8 -= carry[8] << 26
+
+	dst[0] = int32(h0)
+	dst[1] = int32(h1)
+	dst[2] = int32(h2)
+	dst[3] = int32(h3)
+	dst[4] = int32(h4)
+	dst[5] = int32(h5)
+	dst[6] = int32(h6)
+	dst[7] = int32(h7)
+	dst[8] = int32(h8)
+	dst[9] = int32(h9)
+}
+
+// feToBytes marshals h to s.
+// Preconditions:
+//   |h| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+//
+// Write p=2^255-19; q=floor(h/p).
+// Basic claim: q = floor(2^(-255)(h + 19 2^(-25)h9 + 2^(-1))).
+//
+// Proof:
+//   Have |h|<=p so |q|<=1 so |19^2 2^(-255) q|<1/4.
+//   Also have |h-2^230 h9|<2^230 so |19 2^(-255)(h-2^230 h9)|<1/4.
+//
+//   Write y=2^(-1)-19^2 2^(-255)q-19 2^(-255)(h-2^230 h9).
+//   Then 0<y<1.
+//
+//   Write r=h-pq.
+//   Have 0<=r<=p-1=2^255-20.
+//   Thus 0<=r+19(2^-255)r<r+19(2^-255)2^255<=2^255-1.
+//
+//   Write x=r+19(2^-255)r+y.
+//   Then 0<x<2^255 so floor(2^(-255)x) = 0 so floor(q+2^(-255)x) = q.
+//
+//   Have q+2^(-255)x = 2^(-255)(h + 19 2^(-25) h9 + 2^(-1))
+//   so floor(2^(-255)(h + 19 2^(-25) h9 + 2^(-1))) = q.
+func feToBytes(s *[32]byte, h *fieldElement) {
+	var carry [10]int32
+
+	q := (19*h[9] + (1 << 24)) >> 25
+	q = (h[0] + q) >> 26
+	q = (h[1] + q) >> 25
+	q = (h[2] + q) >> 26
+	q = (h[3] + q) >> 25
+	q = (h[4] + q) >> 26
+	q = (h[5] + q) >> 25
+	q = (h[6] + q) >> 26
+	q = (h[7] + q) >> 25
+	q = (h[8] + q) >> 26
+	q = (h[9] + q) >> 25
+
+	// Goal: Output h-(2^255-19)q, which is between 0 and 2^255-20.
+	h[0] += 19 * q
+	// Goal: Output h-2^255 q, which is between 0 and 2^255-20.
+
+	carry[0] = h[0] >> 26
+	h[1] += carry[0]
+	h[0] -= carry[0] << 26
+	carry[1] = h[1] >> 25
+	h[2] += carry[1]
+	h[1] -= carry[1] << 25
+	carry[2] = h[2] >> 26
+	h[3] += carry[2]
+	h[2] -= carry[2] << 26
+	carry[3] = h[3] >> 25
+	h[4] += carry[3]
+	h[3] -= carry[3] << 25
+	carry[4] = h[4] >> 26
+	h[5] += carry[4]
+	h[4] -= carry[4] << 26
+	carry[5] = h[5] >> 25
+	h[6] += carry[5]
+	h[5] -= carry[5] << 25
+	carry[6] = h[6] >> 26
+	h[7] += carry[6]
+	h[6] -= carry[6] << 26
+	carry[7] = h[7] >> 25
+	h[8] += carry[7]
+	h[7] -= carry[7] << 25
+	carry[8] = h[8] >> 26
+	h[9] += carry[8]
+	h[8] -= carry[8] << 26
+	carry[9] = h[9] >> 25
+	h[9] -= carry[9] << 25
+	// h10 = carry9
+
+	// Goal: Output h[0]+...+2^255 h10-2^255 q, which is between 0 and 2^255-20.
+	// Have h[0]+...+2^230 h[9] between 0 and 2^255-1;
+	// evidently 2^255 h10-2^255 q = 0.
+	// Goal: Output h[0]+...+2^230 h[9].
+
+	s[0] = byte(h[0] >> 0)
+	s[1] = byte(h[0] >> 8)
+	s[2] = byte(h[0] >> 16)
+	s[3] = byte((h[0] >> 24) | (h[1] << 2))
+	s[4] = byte(h[1] >> 6)
+	s[5] = byte(h[1] >> 14)
+	s[6] = byte((h[1] >> 22) | (h[2] << 3))
+	s[7] = byte(h[2] >> 5)
+	s[8] = byte(h[2] >> 13)
+	s[9] = byte((h[2] >> 21) | (h[3] << 5))
+	s[10] = byte(h[3] >> 3)
+	s[11] = byte(h[3] >> 11)
+	s[12] = byte((h[3] >> 19) | (h[4] << 6))
+	s[13] = byte(h[4] >> 2)
+	s[14] = byte(h[4] >> 10)
+	s[15] = byte(h[4] >> 18)
+	s[16] = byte(h[5] >> 0)
+	s[17] = byte(h[5] >> 8)
+	s[18] = byte(h[5] >> 16)
+	s[19] = byte((h[5] >> 24) | (h[6] << 1))
+	s[20] = byte(h[6] >> 7)
+	s[21] = byte(h[6] >> 15)
+	s[22] = byte((h[6] >> 23) | (h[7] << 3))
+	s[23] = byte(h[7] >> 5)
+	s[24] = byte(h[7] >> 13)
+	s[25] = byte((h[7] >> 21) | (h[8] << 4))
+	s[26] = byte(h[8] >> 4)
+	s[27] = byte(h[8] >> 12)
+	s[28] = byte((h[8] >> 20) | (h[9] << 6))
+	s[29] = byte(h[9] >> 2)
+	s[30] = byte(h[9] >> 10)
+	s[31] = byte(h[9] >> 18)
+}
+
+// feMul calculates h = f * g
+// Can overlap h with f or g.
+//
+// Preconditions:
+//    |f| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc.
+//    |g| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc.
+//
+// Postconditions:
+//    |h| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+//
+// Notes on implementation strategy:
+//
+// Using schoolbook multiplication.
+// Karatsuba would save a little in some cost models.
+//
+// Most multiplications by 2 and 19 are 32-bit precomputations;
+// cheaper than 64-bit postcomputations.
+//
+// There is one remaining multiplication by 19 in the carry chain;
+// one *19 precomputation can be merged into this,
+// but the resulting data flow is considerably less clean.
+//
+// There are 12 carries below.
+// 10 of them are 2-way parallelizable and vectorizable.
+// Can get away with 11 carries, but then data flow is much deeper.
+//
+// With tighter constraints on inputs can squeeze carries into int32.
+func feMul(h, f, g *fieldElement) {
+	f0 := f[0]
+	f1 := f[1]
+	f2 := f[2]
+	f3 := f[3]
+	f4 := f[4]
+	f5 := f[5]
+	f6 := f[6]
+	f7 := f[7]
+	f8 := f[8]
+	f9 := f[9]
+	g0 := g[0]
+	g1 := g[1]
+	g2 := g[2]
+	g3 := g[3]
+	g4 := g[4]
+	g5 := g[5]
+	g6 := g[6]
+	g7 := g[7]
+	g8 := g[8]
+	g9 := g[9]
+	g1_19 := 19 * g1 // 1.4*2^29
+	g2_19 := 19 * g2 // 1.4*2^30; still ok
+	g3_19 := 19 * g3
+	g4_19 := 19 * g4
+	g5_19 := 19 * g5
+	g6_19 := 19 * g6
+	g7_19 := 19 * g7
+	g8_19 := 19 * g8
+	g9_19 := 19 * g9
+	f1_2 := 2 * f1
+	f3_2 := 2 * f3
+	f5_2 := 2 * f5
+	f7_2 := 2 * f7
+	f9_2 := 2 * f9
+	f0g0 := int64(f0) * int64(g0)
+	f0g1 := int64(f0) * int64(g1)
+	f0g2 := int64(f0) * int64(g2)
+	f0g3 := int64(f0) * int64(g3)
+	f0g4 := int64(f0) * int64(g4)
+	f0g5 := int64(f0) * int64(g5)
+	f0g6 := int64(f0) * int64(g6)
+	f0g7 := int64(f0) * int64(g7)
+	f0g8 := int64(f0) * int64(g8)
+	f0g9 := int64(f0) * int64(g9)
+	f1g0 := int64(f1) * int64(g0)
+	f1g1_2 := int64(f1_2) * int64(g1)
+	f1g2 := int64(f1) * int64(g2)
+	f1g3_2 := int64(f1_2) * int64(g3)
+	f1g4 := int64(f1) * int64(g4)
+	f1g5_2 := int64(f1_2) * int64(g5)
+	f1g6 := int64(f1) * int64(g6)
+	f1g7_2 := int64(f1_2) * int64(g7)
+	f1g8 := int64(f1) * int64(g8)
+	f1g9_38 := int64(f1_2) * int64(g9_19)
+	f2g0 := int64(f2) * int64(g0)
+	f2g1 := int64(f2) * int64(g1)
+	f2g2 := int64(f2) * int64(g2)
+	f2g3 := int64(f2) * int64(g3)
+	f2g4 := int64(f2) * int64(g4)
+	f2g5 := int64(f2) * int64(g5)
+	f2g6 := int64(f2) * int64(g6)
+	f2g7 := int64(f2) * int64(g7)
+	f2g8_19 := int64(f2) * int64(g8_19)
+	f2g9_19 := int64(f2) * int64(g9_19)
+	f3g0 := int64(f3) * int64(g0)
+	f3g1_2 := int64(f3_2) * int64(g1)
+	f3g2 := int64(f3) * int64(g2)
+	f3g3_2 := int64(f3_2) * int64(g3)
+	f3g4 := int64(f3) * int64(g4)
+	f3g5_2 := int64(f3_2) * int64(g5)
+	f3g6 := int64(f3) * int64(g6)
+	f3g7_38 := int64(f3_2) * int64(g7_19)
+	f3g8_19 := int64(f3) * int64(g8_19)
+	f3g9_38 := int64(f3_2) * int64(g9_19)
+	f4g0 := int64(f4) * int64(g0)
+	f4g1 := int64(f4) * int64(g1)
+	f4g2 := int64(f4) * int64(g2)
+	f4g3 := int64(f4) * int64(g3)
+	f4g4 := int64(f4) * int64(g4)
+	f4g5 := int64(f4) * int64(g5)
+	f4g6_19 := int64(f4) * int64(g6_19)
+	f4g7_19 := int64(f4) * int64(g7_19)
+	f4g8_19 := int64(f4) * int64(g8_19)
+	f4g9_19 := int64(f4) * int64(g9_19)
+	f5g0 := int64(f5) * int64(g0)
+	f5g1_2 := int64(f5_2) * int64(g1)
+	f5g2 := int64(f5) * int64(g2)
+	f5g3_2 := int64(f5_2) * int64(g3)
+	f5g4 := int64(f5) * int64(g4)
+	f5g5_38 := int64(f5_2) * int64(g5_19)
+	f5g6_19 := int64(f5) * int64(g6_19)
+	f5g7_38 := int64(f5_2) * int64(g7_19)
+	f5g8_19 := int64(f5) * int64(g8_19)
+	f5g9_38 := int64(f5_2) * int64(g9_19)
+	f6g0 := int64(f6) * int64(g0)
+	f6g1 := int64(f6) * int64(g1)
+	f6g2 := int64(f6) * int64(g2)
+	f6g3 := int64(f6) * int64(g3)
+	f6g4_19 := int64(f6) * int64(g4_19)
+	f6g5_19 := int64(f6) * int64(g5_19)
+	f6g6_19 := int64(f6) * int64(g6_19)
+	f6g7_19 := int64(f6) * int64(g7_19)
+	f6g8_19 := int64(f6) * int64(g8_19)
+	f6g9_19 := int64(f6) * int64(g9_19)
+	f7g0 := int64(f7) * int64(g0)
+	f7g1_2 := int64(f7_2) * int64(g1)
+	f7g2 := int64(f7) * int64(g2)
+	f7g3_38 := int64(f7_2) * int64(g3_19)
+	f7g4_19 := int64(f7) * int64(g4_19)
+	f7g5_38 := int64(f7_2) * int64(g5_19)
+	f7g6_19 := int64(f7) * int64(g6_19)
+	f7g7_38 := int64(f7_2) * int64(g7_19)
+	f7g8_19 := int64(f7) * int64(g8_19)
+	f7g9_38 := int64(f7_2) * int64(g9_19)
+	f8g0 := int64(f8) * int64(g0)
+	f8g1 := int64(f8) * int64(g1)
+	f8g2_19 := int64(f8) * int64(g2_19)
+	f8g3_19 := int64(f8) * int64(g3_19)
+	f8g4_19 := int64(f8) * int64(g4_19)
+	f8g5_19 := int64(f8) * int64(g5_19)
+	f8g6_19 := int64(f8) * int64(g6_19)
+	f8g7_19 := int64(f8) * int64(g7_19)
+	f8g8_19 := int64(f8) * int64(g8_19)
+	f8g9_19 := int64(f8) * int64(g9_19)
+	f9g0 := int64(f9) * int64(g0)
+	f9g1_38 := int64(f9_2) * int64(g1_19)
+	f9g2_19 := int64(f9) * int64(g2_19)
+	f9g3_38 := int64(f9_2) * int64(g3_19)
+	f9g4_19 := int64(f9) * int64(g4_19)
+	f9g5_38 := int64(f9_2) * int64(g5_19)
+	f9g6_19 := int64(f9) * int64(g6_19)
+	f9g7_38 := int64(f9_2) * int64(g7_19)
+	f9g8_19 := int64(f9) * int64(g8_19)
+	f9g9_38 := int64(f9_2) * int64(g9_19)
+	h0 := f0g0 + f1g9_38 + f2g8_19 + f3g7_38 + f4g6_19 + f5g5_38 + f6g4_19 + f7g3_38 + f8g2_19 + f9g1_38
+	h1 := f0g1 + f1g0 + f2g9_19 + f3g8_19 + f4g7_19 + f5g6_19 + f6g5_19 + f7g4_19 + f8g3_19 + f9g2_19
+	h2 := f0g2 + f1g1_2 + f2g0 + f3g9_38 + f4g8_19 + f5g7_38 + f6g6_19 + f7g5_38 + f8g4_19 + f9g3_38
+	h3 := f0g3 + f1g2 + f2g1 + f3g0 + f4g9_19 + f5g8_19 + f6g7_19 + f7g6_19 + f8g5_19 + f9g4_19
+	h4 := f0g4 + f1g3_2 + f2g2 + f3g1_2 + f4g0 + f5g9_38 + f6g8_19 + f7g7_38 + f8g6_19 + f9g5_38
+	h5 := f0g5 + f1g4 + f2g3 + f3g2 + f4g1 + f5g0 + f6g9_19 + f7g8_19 + f8g7_19 + f9g6_19
+	h6 := f0g6 + f1g5_2 + f2g4 + f3g3_2 + f4g2 + f5g1_2 + f6g0 + f7g9_38 + f8g8_19 + f9g7_38
+	h7 := f0g7 + f1g6 + f2g5 + f3g4 + f4g3 + f5g2 + f6g1 + f7g0 + f8g9_19 + f9g8_19
+	h8 := f0g8 + f1g7_2 + f2g6 + f3g5_2 + f4g4 + f5g3_2 + f6g2 + f7g1_2 + f8g0 + f9g9_38
+	h9 := f0g9 + f1g8 + f2g7 + f3g6 + f4g5 + f5g4 + f6g3 + f7g2 + f8g1 + f9g0
+	var carry [10]int64
+
+	// |h0| <= (1.1*1.1*2^52*(1+19+19+19+19)+1.1*1.1*2^50*(38+38+38+38+38))
+	//   i.e. |h0| <= 1.2*2^59; narrower ranges for h2, h4, h6, h8
+	// |h1| <= (1.1*1.1*2^51*(1+1+19+19+19+19+19+19+19+19))
+	//   i.e. |h1| <= 1.5*2^58; narrower ranges for h3, h5, h7, h9
+
+	carry[0] = (h0 + (1 << 25)) >> 26
+	h1 += carry[0]
+	h0 -= carry[0] << 26
+	carry[4] = (h4 + (1 << 25)) >> 26
+	h5 += carry[4]
+	h4 -= carry[4] << 26
+	// |h0| <= 2^25
+	// |h4| <= 2^25
+	// |h1| <= 1.51*2^58
+	// |h5| <= 1.51*2^58
+
+	carry[1] = (h1 + (1 << 24)) >> 25
+	h2 += carry[1]
+	h1 -= carry[1] << 25
+	carry[5] = (h5 + (1 << 24)) >> 25
+	h6 += carry[5]
+	h5 -= carry[5] << 25
+	// |h1| <= 2^24; from now on fits into int32
+	// |h5| <= 2^24; from now on fits into int32
+	// |h2| <= 1.21*2^59
+	// |h6| <= 1.21*2^59
+
+	carry[2] = (h2 + (1 << 25)) >> 26
+	h3 += carry[2]
+	h2 -= carry[2] << 26
+	carry[6] = (h6 + (1 << 25)) >> 26
+	h7 += carry[6]
+	h6 -= carry[6] << 26
+	// |h2| <= 2^25; from now on fits into int32 unchanged
+	// |h6| <= 2^25; from now on fits into int32 unchanged
+	// |h3| <= 1.51*2^58
+	// |h7| <= 1.51*2^58
+
+	carry[3] = (h3 + (1 << 24)) >> 25
+	h4 += carry[3]
+	h3 -= carry[3] << 25
+	carry[7] = (h7 + (1 << 24)) >> 25
+	h8 += carry[7]
+	h7 -= carry[7] << 25
+	// |h3| <= 2^24; from now on fits into int32 unchanged
+	// |h7| <= 2^24; from now on fits into int32 unchanged
+	// |h4| <= 1.52*2^33
+	// |h8| <= 1.52*2^33
+
+	carry[4] = (h4 + (1 << 25)) >> 26
+	h5 += carry[4]
+	h4 -= carry[4] << 26
+	carry[8] = (h8 + (1 << 25)) >> 26
+	h9 += carry[8]
+	h8 -= carry[8] << 26
+	// |h4| <= 2^25; from now on fits into int32 unchanged
+	// |h8| <= 2^25; from now on fits into int32 unchanged
+	// |h5| <= 1.01*2^24
+	// |h9| <= 1.51*2^58
+
+	carry[9] = (h9 + (1 << 24)) >> 25
+	h0 += carry[9] * 19
+	h9 -= carry[9] << 25
+	// |h9| <= 2^24; from now on fits into int32 unchanged
+	// |h0| <= 1.8*2^37
+
+	carry[0] = (h0 + (1 << 25)) >> 26
+	h1 += carry[0]
+	h0 -= carry[0] << 26
+	// |h0| <= 2^25; from now on fits into int32 unchanged
+	// |h1| <= 1.01*2^24
+
+	h[0] = int32(h0)
+	h[1] = int32(h1)
+	h[2] = int32(h2)
+	h[3] = int32(h3)
+	h[4] = int32(h4)
+	h[5] = int32(h5)
+	h[6] = int32(h6)
+	h[7] = int32(h7)
+	h[8] = int32(h8)
+	h[9] = int32(h9)
+}
+
+// feSquare calculates h = f*f. Can overlap h with f.
+//
+// Preconditions:
+//    |f| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc.
+//
+// Postconditions:
+//    |h| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+func feSquare(h, f *fieldElement) {
+	f0 := f[0]
+	f1 := f[1]
+	f2 := f[2]
+	f3 := f[3]
+	f4 := f[4]
+	f5 := f[5]
+	f6 := f[6]
+	f7 := f[7]
+	f8 := f[8]
+	f9 := f[9]
+	f0_2 := 2 * f0
+	f1_2 := 2 * f1
+	f2_2 := 2 * f2
+	f3_2 := 2 * f3
+	f4_2 := 2 * f4
+	f5_2 := 2 * f5
+	f6_2 := 2 * f6
+	f7_2 := 2 * f7
+	f5_38 := 38 * f5 // 1.31*2^30
+	f6_19 := 19 * f6 // 1.31*2^30
+	f7_38 := 38 * f7 // 1.31*2^30
+	f8_19 := 19 * f8 // 1.31*2^30
+	f9_38 := 38 * f9 // 1.31*2^30
+	f0f0 := int64(f0) * int64(f0)
+	f0f1_2 := int64(f0_2) * int64(f1)
+	f0f2_2 := int64(f0_2) * int64(f2)
+	f0f3_2 := int64(f0_2) * int64(f3)
+	f0f4_2 := int64(f0_2) * int64(f4)
+	f0f5_2 := int64(f0_2) * int64(f5)
+	f0f6_2 := int64(f0_2) * int64(f6)
+	f0f7_2 := int64(f0_2) * int64(f7)
+	f0f8_2 := int64(f0_2) * int64(f8)
+	f0f9_2 := int64(f0_2) * int64(f9)
+	f1f1_2 := int64(f1_2) * int64(f1)
+	f1f2_2 := int64(f1_2) * int64(f2)
+	f1f3_4 := int64(f1_2) * int64(f3_2)
+	f1f4_2 := int64(f1_2) * int64(f4)
+	f1f5_4 := int64(f1_2) * int64(f5_2)
+	f1f6_2 := int64(f1_2) * int64(f6)
+	f1f7_4 := int64(f1_2) * int64(f7_2)
+	f1f8_2 := int64(f1_2) * int64(f8)
+	f1f9_76 := int64(f1_2) * int64(f9_38)
+	f2f2 := int64(f2) * int64(f2)
+	f2f3_2 := int64(f2_2) * int64(f3)
+	f2f4_2 := int64(f2_2) * int64(f4)
+	f2f5_2 := int64(f2_2) * int64(f5)
+	f2f6_2 := int64(f2_2) * int64(f6)
+	f2f7_2 := int64(f2_2) * int64(f7)
+	f2f8_38 := int64(f2_2) * int64(f8_19)
+	f2f9_38 := int64(f2) * int64(f9_38)
+	f3f3_2 := int64(f3_2) * int64(f3)
+	f3f4_2 := int64(f3_2) * int64(f4)
+	f3f5_4 := int64(f3_2) * int64(f5_2)
+	f3f6_2 := int64(f3_2) * int64(f6)
+	f3f7_76 := int64(f3_2) * int64(f7_38)
+	f3f8_38 := int64(f3_2) * int64(f8_19)
+	f3f9_76 := int64(f3_2) * int64(f9_38)
+	f4f4 := int64(f4) * int64(f4)
+	f4f5_2 := int64(f4_2) * int64(f5)
+	f4f6_38 := int64(f4_2) * int64(f6_19)
+	f4f7_38 := int64(f4) * int64(f7_38)
+	f4f8_38 := int64(f4_2) * int64(f8_19)
+	f4f9_38 := int64(f4) * int64(f9_38)
+	f5f5_38 := int64(f5) * int64(f5_38)
+	f5f6_38 := int64(f5_2) * int64(f6_19)
+	f5f7_76 := int64(f5_2) * int64(f7_38)
+	f5f8_38 := int64(f5_2) * int64(f8_19)
+	f5f9_76 := int64(f5_2) * int64(f9_38)
+	f6f6_19 := int64(f6) * int64(f6_19)
+	f6f7_38 := int64(f6) * int64(f7_38)
+	f6f8_38 := int64(f6_2) * int64(f8_19)
+	f6f9_38 := int64(f6) * int64(f9_38)
+	f7f7_38 := int64(f7) * int64(f7_38)
+	f7f8_38 := int64(f7_2) * int64(f8_19)
+	f7f9_76 := int64(f7_2) * int64(f9_38)
+	f8f8_19 := int64(f8) * int64(f8_19)
+	f8f9_38 := int64(f8) * int64(f9_38)
+	f9f9_38 := int64(f9) * int64(f9_38)
+	h0 := f0f0 + f1f9_76 + f2f8_38 + f3f7_76 + f4f6_38 + f5f5_38
+	h1 := f0f1_2 + f2f9_38 + f3f8_38 + f4f7_38 + f5f6_38
+	h2 := f0f2_2 + f1f1_2 + f3f9_76 + f4f8_38 + f5f7_76 + f6f6_19
+	h3 := f0f3_2 + f1f2_2 + f4f9_38 + f5f8_38 + f6f7_38
+	h4 := f0f4_2 + f1f3_4 + f2f2 + f5f9_76 + f6f8_38 + f7f7_38
+	h5 := f0f5_2 + f1f4_2 + f2f3_2 + f6f9_38 + f7f8_38
+	h6 := f0f6_2 + f1f5_4 + f2f4_2 + f3f3_2 + f7f9_76 + f8f8_19
+	h7 := f0f7_2 + f1f6_2 + f2f5_2 + f3f4_2 + f8f9_38
+	h8 := f0f8_2 + f1f7_4 + f2f6_2 + f3f5_4 + f4f4 + f9f9_38
+	h9 := f0f9_2 + f1f8_2 + f2f7_2 + f3f6_2 + f4f5_2
+	var carry [10]int64
+
+	carry[0] = (h0 + (1 << 25)) >> 26
+	h1 += carry[0]
+	h0 -= carry[0] << 26
+	carry[4] = (h4 + (1 << 25)) >> 26
+	h5 += carry[4]
+	h4 -= carry[4] << 26
+
+	carry[1] = (h1 + (1 << 24)) >> 25
+	h2 += carry[1]
+	h1 -= carry[1] << 25
+	carry[5] = (h5 + (1 << 24)) >> 25
+	h6 += carry[5]
+	h5 -= carry[5] << 25
+
+	carry[2] = (h2 + (1 << 25)) >> 26
+	h3 += carry[2]
+	h2 -= carry[2] << 26
+	carry[6] = (h6 + (1 << 25)) >> 26
+	h7 += carry[6]
+	h6 -= carry[6] << 26
+
+	carry[3] = (h3 + (1 << 24)) >> 25
+	h4 += carry[3]
+	h3 -= carry[3] << 25
+	carry[7] = (h7 + (1 << 24)) >> 25
+	h8 += carry[7]
+	h7 -= carry[7] << 25
+
+	carry[4] = (h4 + (1 << 25)) >> 26
+	h5 += carry[4]
+	h4 -= carry[4] << 26
+	carry[8] = (h8 + (1 << 25)) >> 26
+	h9 += carry[8]
+	h8 -= carry[8] << 26
+
+	carry[9] = (h9 + (1 << 24)) >> 25
+	h0 += carry[9] * 19
+	h9 -= carry[9] << 25
+
+	carry[0] = (h0 + (1 << 25)) >> 26
+	h1 += carry[0]
+	h0 -= carry[0] << 26
+
+	h[0] = int32(h0)
+	h[1] = int32(h1)
+	h[2] = int32(h2)
+	h[3] = int32(h3)
+	h[4] = int32(h4)
+	h[5] = int32(h5)
+	h[6] = int32(h6)
+	h[7] = int32(h7)
+	h[8] = int32(h8)
+	h[9] = int32(h9)
+}
+
+// feMul121666 calculates h = f * 121666. Can overlap h with f.
+//
+// Preconditions:
+//    |f| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc.
+//
+// Postconditions:
+//    |h| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+func feMul121666(h, f *fieldElement) {
+	h0 := int64(f[0]) * 121666
+	h1 := int64(f[1]) * 121666
+	h2 := int64(f[2]) * 121666
+	h3 := int64(f[3]) * 121666
+	h4 := int64(f[4]) * 121666
+	h5 := int64(f[5]) * 121666
+	h6 := int64(f[6]) * 121666
+	h7 := int64(f[7]) * 121666
+	h8 := int64(f[8]) * 121666
+	h9 := int64(f[9]) * 121666
+	var carry [10]int64
+
+	carry[9] = (h9 + (1 << 24)) >> 25
+	h0 += carry[9] * 19
+	h9 -= carry[9] << 25
+	carry[1] = (h1 + (1 << 24)) >> 25
+	h2 += carry[1]
+	h1 -= carry[1] << 25
+	carry[3] = (h3 + (1 << 24)) >> 25
+	h4 += carry[3]
+	h3 -= carry[3] << 25
+	carry[5] = (h5 + (1 << 24)) >> 25
+	h6 += carry[5]
+	h5 -= carry[5] << 25
+	carry[7] = (h7 + (1 << 24)) >> 25
+	h8 += carry[7]
+	h7 -= carry[7] << 25
+
+	carry[0] = (h0 + (1 << 25)) >> 26
+	h1 += carry[0]
+	h0 -= carry[0] << 26
+	carry[2] = (h2 + (1 << 25)) >> 26
+	h3 += carry[2]
+	h2 -= carry[2] << 26
+	carry[4] = (h4 + (1 << 25)) >> 26
+	h5 += carry[4]
+	h4 -= carry[4] << 26
+	carry[6] = (h6 + (1 << 25)) >> 26
+	h7 += carry[6]
+	h6 -= carry[6] << 26
+	carry[8] = (h8 + (1 << 25)) >> 26
+	h9 += carry[8]
+	h8 -= carry[8] << 26
+
+	h[0] = int32(h0)
+	h[1] = int32(h1)
+	h[2] = int32(h2)
+	h[3] = int32(h3)
+	h[4] = int32(h4)
+	h[5] = int32(h5)
+	h[6] = int32(h6)
+	h[7] = int32(h7)
+	h[8] = int32(h8)
+	h[9] = int32(h9)
+}
+
+// feInvert sets out = z^-1.
+func feInvert(out, z *fieldElement) {
+	var t0, t1, t2, t3 fieldElement
+	var i int
+
+	feSquare(&t0, z)
+	for i = 1; i < 1; i++ {
+		feSquare(&t0, &t0)
+	}
+	feSquare(&t1, &t0)
+	for i = 1; i < 2; i++ {
+		feSquare(&t1, &t1)
+	}
+	feMul(&t1, z, &t1)
+	feMul(&t0, &t0, &t1)
+	feSquare(&t2, &t0)
+	for i = 1; i < 1; i++ {
+		feSquare(&t2, &t2)
+	}
+	feMul(&t1, &t1, &t2)
+	feSquare(&t2, &t1)
+	for i = 1; i < 5; i++ {
+		feSquare(&t2, &t2)
+	}
+	feMul(&t1, &t2, &t1)
+	feSquare(&t2, &t1)
+	for i = 1; i < 10; i++ {
+		feSquare(&t2, &t2)
+	}
+	feMul(&t2, &t2, &t1)
+	feSquare(&t3, &t2)
+	for i = 1; i < 20; i++ {
+		feSquare(&t3, &t3)
+	}
+	feMul(&t2, &t3, &t2)
+	feSquare(&t2, &t2)
+	for i = 1; i < 10; i++ {
+		feSquare(&t2, &t2)
+	}
+	feMul(&t1, &t2, &t1)
+	feSquare(&t2, &t1)
+	for i = 1; i < 50; i++ {
+		feSquare(&t2, &t2)
+	}
+	feMul(&t2, &t2, &t1)
+	feSquare(&t3, &t2)
+	for i = 1; i < 100; i++ {
+		feSquare(&t3, &t3)
+	}
+	feMul(&t2, &t3, &t2)
+	feSquare(&t2, &t2)
+	for i = 1; i < 50; i++ {
+		feSquare(&t2, &t2)
+	}
+	feMul(&t1, &t2, &t1)
+	feSquare(&t1, &t1)
+	for i = 1; i < 5; i++ {
+		feSquare(&t1, &t1)
+	}
+	feMul(out, &t1, &t0)
+}
+
+func scalarMultGeneric(out, in, base *[32]byte) {
+	var e [32]byte
+
+	copy(e[:], in[:])
+	e[0] &= 248
+	e[31] &= 127
+	e[31] |= 64
+
+	var x1, x2, z2, x3, z3, tmp0, tmp1 fieldElement
+	feFromBytes(&x1, base)
+	feOne(&x2)
+	feCopy(&x3, &x1)
+	feOne(&z3)
+
+	swap := int32(0)
+	for pos := 254; pos >= 0; pos-- {
+		b := e[pos/8] >> uint(pos&7)
+		b &= 1
+		swap ^= int32(b)
+		feCSwap(&x2, &x3, swap)
+		feCSwap(&z2, &z3, swap)
+		swap = int32(b)
+
+		feSub(&tmp0, &x3, &z3)
+		feSub(&tmp1, &x2, &z2)
+		feAdd(&x2, &x2, &z2)
+		feAdd(&z2, &x3, &z3)
+		feMul(&z3, &tmp0, &x2)
+		feMul(&z2, &z2, &tmp1)
+		feSquare(&tmp0, &tmp1)
+		feSquare(&tmp1, &x2)
+		feAdd(&x3, &z3, &z2)
+		feSub(&z2, &z3, &z2)
+		feMul(&x2, &tmp1, &tmp0)
+		feSub(&tmp1, &tmp1, &tmp0)
+		feSquare(&z2, &z2)
+		feMul121666(&z3, &tmp1)
+		feSquare(&x3, &x3)
+		feAdd(&tmp0, &tmp0, &z3)
+		feMul(&z3, &x1, &z2)
+		feMul(&z2, &tmp1, &tmp0)
+	}
+
+	feCSwap(&x2, &x3, swap)
+	feCSwap(&z2, &z3, swap)
+
+	feInvert(&z2, &z2)
+	feMul(&x2, &x2, &z2)
+	feToBytes(out, &x2)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519_noasm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519_noasm.go
new file mode 100644
index 000000000..047d49afc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/crypto/curve25519/curve25519_noasm.go
@@ -0,0 +1,11 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !amd64 gccgo appengine purego
+
+package curve25519
+
+func scalarMult(out, in, base *[32]byte) {
+	scalarMultGeneric(out, in, base)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/AUTHORS b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/AUTHORS
new file mode 100644
index 000000000..15167cd74
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/AUTHORS
@@ -0,0 +1,3 @@
+# This source code refers to The Go Authors for copyright purposes.
+# The master list of authors is in the main Go distribution,
+# visible at http://tip.golang.org/AUTHORS.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/CONTRIBUTORS b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/CONTRIBUTORS
new file mode 100644
index 000000000..1c4577e96
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/CONTRIBUTORS
@@ -0,0 +1,3 @@
+# This source code was written by the Go contributors.
+# The master list of contributors is in the main Go distribution,
+# visible at http://tip.golang.org/CONTRIBUTORS.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/LICENSE b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/LICENSE
new file mode 100644
index 000000000..6a66aea5e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/LICENSE
@@ -0,0 +1,27 @@
+Copyright (c) 2009 The Go Authors. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/PATENTS b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/PATENTS
new file mode 100644
index 000000000..733099041
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/PATENTS
@@ -0,0 +1,22 @@
+Additional IP Rights Grant (Patents)
+
+"This implementation" means the copyrightable works distributed by
+Google as part of the Go project.
+
+Google hereby grants to You a perpetual, worldwide, non-exclusive,
+no-charge, royalty-free, irrevocable (except as stated in this section)
+patent license to make, have made, use, offer to sell, sell, import,
+transfer and otherwise run, modify and propagate the contents of this
+implementation of Go, where such license applies only to those patent
+claims, both currently owned or controlled by Google and acquired in
+the future, licensable by Google that are necessarily infringed by this
+implementation of Go.  This grant does not include claims that would be
+infringed only as a consequence of further modification of this
+implementation.  If you or your agent or exclusive licensee institute or
+order or agree to the institution of patent litigation against any
+entity (including a cross-claim or counterclaim in a lawsuit) alleging
+that this implementation of Go or any code incorporated within this
+implementation of Go constitutes direct or contributory patent
+infringement, or inducement of patent infringement, then any patent
+rights granted to you under this License for this implementation of Go
+shall terminate as of the date such litigation is filed.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/asm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/asm.go
new file mode 100644
index 000000000..15e21b181
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/asm.go
@@ -0,0 +1,41 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package bpf
+
+import "fmt"
+
+// Assemble converts insts into raw instructions suitable for loading
+// into a BPF virtual machine.
+//
+// Currently, no optimization is attempted, the assembled program flow
+// is exactly as provided.
+func Assemble(insts []Instruction) ([]RawInstruction, error) {
+	ret := make([]RawInstruction, len(insts))
+	var err error
+	for i, inst := range insts {
+		ret[i], err = inst.Assemble()
+		if err != nil {
+			return nil, fmt.Errorf("assembling instruction %d: %s", i+1, err)
+		}
+	}
+	return ret, nil
+}
+
+// Disassemble attempts to parse raw back into
+// Instructions. Unrecognized RawInstructions are assumed to be an
+// extension not implemented by this package, and are passed through
+// unchanged to the output. The allDecoded value reports whether insts
+// contains no RawInstructions.
+func Disassemble(raw []RawInstruction) (insts []Instruction, allDecoded bool) {
+	insts = make([]Instruction, len(raw))
+	allDecoded = true
+	for i, r := range raw {
+		insts[i] = r.Disassemble()
+		if _, ok := insts[i].(RawInstruction); ok {
+			allDecoded = false
+		}
+	}
+	return insts, allDecoded
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/constants.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/constants.go
new file mode 100644
index 000000000..12f3ee835
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/constants.go
@@ -0,0 +1,222 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package bpf
+
+// A Register is a register of the BPF virtual machine.
+type Register uint16
+
+const (
+	// RegA is the accumulator register. RegA is always the
+	// destination register of ALU operations.
+	RegA Register = iota
+	// RegX is the indirection register, used by LoadIndirect
+	// operations.
+	RegX
+)
+
+// An ALUOp is an arithmetic or logic operation.
+type ALUOp uint16
+
+// ALU binary operation types.
+const (
+	ALUOpAdd ALUOp = iota << 4
+	ALUOpSub
+	ALUOpMul
+	ALUOpDiv
+	ALUOpOr
+	ALUOpAnd
+	ALUOpShiftLeft
+	ALUOpShiftRight
+	aluOpNeg // Not exported because it's the only unary ALU operation, and gets its own instruction type.
+	ALUOpMod
+	ALUOpXor
+)
+
+// A JumpTest is a comparison operator used in conditional jumps.
+type JumpTest uint16
+
+// Supported operators for conditional jumps.
+// K can be RegX for JumpIfX
+const (
+	// K == A
+	JumpEqual JumpTest = iota
+	// K != A
+	JumpNotEqual
+	// K > A
+	JumpGreaterThan
+	// K < A
+	JumpLessThan
+	// K >= A
+	JumpGreaterOrEqual
+	// K <= A
+	JumpLessOrEqual
+	// K & A != 0
+	JumpBitsSet
+	// K & A == 0
+	JumpBitsNotSet
+)
+
+// An Extension is a function call provided by the kernel that
+// performs advanced operations that are expensive or impossible
+// within the BPF virtual machine.
+//
+// Extensions are only implemented by the Linux kernel.
+//
+// TODO: should we prune this list? Some of these extensions seem
+// either broken or near-impossible to use correctly, whereas other
+// (len, random, ifindex) are quite useful.
+type Extension int
+
+// Extension functions available in the Linux kernel.
+const (
+	// extOffset is the negative maximum number of instructions used
+	// to load instructions by overloading the K argument.
+	extOffset = -0x1000
+	// ExtLen returns the length of the packet.
+	ExtLen Extension = 1
+	// ExtProto returns the packet's L3 protocol type.
+	ExtProto Extension = 0
+	// ExtType returns the packet's type (skb->pkt_type in the kernel)
+	//
+	// TODO: better documentation. How nice an API do we want to
+	// provide for these esoteric extensions?
+	ExtType Extension = 4
+	// ExtPayloadOffset returns the offset of the packet payload, or
+	// the first protocol header that the kernel does not know how to
+	// parse.
+	ExtPayloadOffset Extension = 52
+	// ExtInterfaceIndex returns the index of the interface on which
+	// the packet was received.
+	ExtInterfaceIndex Extension = 8
+	// ExtNetlinkAttr returns the netlink attribute of type X at
+	// offset A.
+	ExtNetlinkAttr Extension = 12
+	// ExtNetlinkAttrNested returns the nested netlink attribute of
+	// type X at offset A.
+	ExtNetlinkAttrNested Extension = 16
+	// ExtMark returns the packet's mark value.
+	ExtMark Extension = 20
+	// ExtQueue returns the packet's assigned hardware queue.
+	ExtQueue Extension = 24
+	// ExtLinkLayerType returns the packet's hardware address type
+	// (e.g. Ethernet, Infiniband).
+	ExtLinkLayerType Extension = 28
+	// ExtRXHash returns the packets receive hash.
+	//
+	// TODO: figure out what this rxhash actually is.
+	ExtRXHash Extension = 32
+	// ExtCPUID returns the ID of the CPU processing the current
+	// packet.
+	ExtCPUID Extension = 36
+	// ExtVLANTag returns the packet's VLAN tag.
+	ExtVLANTag Extension = 44
+	// ExtVLANTagPresent returns non-zero if the packet has a VLAN
+	// tag.
+	//
+	// TODO: I think this might be a lie: it reads bit 0x1000 of the
+	// VLAN header, which changed meaning in recent revisions of the
+	// spec - this extension may now return meaningless information.
+	ExtVLANTagPresent Extension = 48
+	// ExtVLANProto returns 0x8100 if the frame has a VLAN header,
+	// 0x88a8 if the frame has a "Q-in-Q" double VLAN header, or some
+	// other value if no VLAN information is present.
+	ExtVLANProto Extension = 60
+	// ExtRand returns a uniformly random uint32.
+	ExtRand Extension = 56
+)
+
+// The following gives names to various bit patterns used in opcode construction.
+
+const (
+	opMaskCls uint16 = 0x7
+	// opClsLoad masks
+	opMaskLoadDest  = 0x01
+	opMaskLoadWidth = 0x18
+	opMaskLoadMode  = 0xe0
+	// opClsALU & opClsJump
+	opMaskOperand  = 0x08
+	opMaskOperator = 0xf0
+)
+
+const (
+	// +---------------+-----------------+---+---+---+
+	// | AddrMode (3b) | LoadWidth (2b)  | 0 | 0 | 0 |
+	// +---------------+-----------------+---+---+---+
+	opClsLoadA uint16 = iota
+	// +---------------+-----------------+---+---+---+
+	// | AddrMode (3b) | LoadWidth (2b)  | 0 | 0 | 1 |
+	// +---------------+-----------------+---+---+---+
+	opClsLoadX
+	// +---+---+---+---+---+---+---+---+
+	// | 0 | 0 | 0 | 0 | 0 | 0 | 1 | 0 |
+	// +---+---+---+---+---+---+---+---+
+	opClsStoreA
+	// +---+---+---+---+---+---+---+---+
+	// | 0 | 0 | 0 | 0 | 0 | 0 | 1 | 1 |
+	// +---+---+---+---+---+---+---+---+
+	opClsStoreX
+	// +---------------+-----------------+---+---+---+
+	// | Operator (4b) | OperandSrc (1b) | 1 | 0 | 0 |
+	// +---------------+-----------------+---+---+---+
+	opClsALU
+	// +-----------------------------+---+---+---+---+
+	// |      TestOperator (4b)      | 0 | 1 | 0 | 1 |
+	// +-----------------------------+---+---+---+---+
+	opClsJump
+	// +---+-------------------------+---+---+---+---+
+	// | 0 | 0 | 0 |   RetSrc (1b)   | 0 | 1 | 1 | 0 |
+	// +---+-------------------------+---+---+---+---+
+	opClsReturn
+	// +---+-------------------------+---+---+---+---+
+	// | 0 | 0 | 0 |  TXAorTAX (1b)  | 0 | 1 | 1 | 1 |
+	// +---+-------------------------+---+---+---+---+
+	opClsMisc
+)
+
+const (
+	opAddrModeImmediate uint16 = iota << 5
+	opAddrModeAbsolute
+	opAddrModeIndirect
+	opAddrModeScratch
+	opAddrModePacketLen // actually an extension, not an addressing mode.
+	opAddrModeMemShift
+)
+
+const (
+	opLoadWidth4 uint16 = iota << 3
+	opLoadWidth2
+	opLoadWidth1
+)
+
+// Operand for ALU and Jump instructions
+type opOperand uint16
+
+// Supported operand sources.
+const (
+	opOperandConstant opOperand = iota << 3
+	opOperandX
+)
+
+// An jumpOp is a conditional jump condition.
+type jumpOp uint16
+
+// Supported jump conditions.
+const (
+	opJumpAlways jumpOp = iota << 4
+	opJumpEqual
+	opJumpGT
+	opJumpGE
+	opJumpSet
+)
+
+const (
+	opRetSrcConstant uint16 = iota << 4
+	opRetSrcA
+)
+
+const (
+	opMiscTAX = 0x00
+	opMiscTXA = 0x80
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/doc.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/doc.go
new file mode 100644
index 000000000..ae62feb53
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/doc.go
@@ -0,0 +1,82 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+/*
+
+Package bpf implements marshaling and unmarshaling of programs for the
+Berkeley Packet Filter virtual machine, and provides a Go implementation
+of the virtual machine.
+
+BPF's main use is to specify a packet filter for network taps, so that
+the kernel doesn't have to expensively copy every packet it sees to
+userspace. However, it's been repurposed to other areas where running
+user code in-kernel is needed. For example, Linux's seccomp uses BPF
+to apply security policies to system calls. For simplicity, this
+documentation refers only to packets, but other uses of BPF have their
+own data payloads.
+
+BPF programs run in a restricted virtual machine. It has almost no
+access to kernel functions, and while conditional branches are
+allowed, they can only jump forwards, to guarantee that there are no
+infinite loops.
+
+The virtual machine
+
+The BPF VM is an accumulator machine. Its main register, called
+register A, is an implicit source and destination in all arithmetic
+and logic operations. The machine also has 16 scratch registers for
+temporary storage, and an indirection register (register X) for
+indirect memory access. All registers are 32 bits wide.
+
+Each run of a BPF program is given one packet, which is placed in the
+VM's read-only "main memory". LoadAbsolute and LoadIndirect
+instructions can fetch up to 32 bits at a time into register A for
+examination.
+
+The goal of a BPF program is to produce and return a verdict (uint32),
+which tells the kernel what to do with the packet. In the context of
+packet filtering, the returned value is the number of bytes of the
+packet to forward to userspace, or 0 to ignore the packet. Other
+contexts like seccomp define their own return values.
+
+In order to simplify programs, attempts to read past the end of the
+packet terminate the program execution with a verdict of 0 (ignore
+packet). This means that the vast majority of BPF programs don't need
+to do any explicit bounds checking.
+
+In addition to the bytes of the packet, some BPF programs have access
+to extensions, which are essentially calls to kernel utility
+functions. Currently, the only extensions supported by this package
+are the Linux packet filter extensions.
+
+Examples
+
+This packet filter selects all ARP packets.
+
+	bpf.Assemble([]bpf.Instruction{
+		// Load "EtherType" field from the ethernet header.
+		bpf.LoadAbsolute{Off: 12, Size: 2},
+		// Skip over the next instruction if EtherType is not ARP.
+		bpf.JumpIf{Cond: bpf.JumpNotEqual, Val: 0x0806, SkipTrue: 1},
+		// Verdict is "send up to 4k of the packet to userspace."
+		bpf.RetConstant{Val: 4096},
+		// Verdict is "ignore packet."
+		bpf.RetConstant{Val: 0},
+	})
+
+This packet filter captures a random 1% sample of traffic.
+
+	bpf.Assemble([]bpf.Instruction{
+		// Get a 32-bit random number from the Linux kernel.
+		bpf.LoadExtension{Num: bpf.ExtRand},
+		// 1% dice roll?
+		bpf.JumpIf{Cond: bpf.JumpLessThan, Val: 2^32/100, SkipFalse: 1},
+		// Capture.
+		bpf.RetConstant{Val: 4096},
+		// Ignore.
+		bpf.RetConstant{Val: 0},
+	})
+
+*/
+package bpf // import "golang.org/x/net/bpf"
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/instructions.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/instructions.go
new file mode 100644
index 000000000..3cffcaa01
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/instructions.go
@@ -0,0 +1,726 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package bpf
+
+import "fmt"
+
+// An Instruction is one instruction executed by the BPF virtual
+// machine.
+type Instruction interface {
+	// Assemble assembles the Instruction into a RawInstruction.
+	Assemble() (RawInstruction, error)
+}
+
+// A RawInstruction is a raw BPF virtual machine instruction.
+type RawInstruction struct {
+	// Operation to execute.
+	Op uint16
+	// For conditional jump instructions, the number of instructions
+	// to skip if the condition is true/false.
+	Jt uint8
+	Jf uint8
+	// Constant parameter. The meaning depends on the Op.
+	K uint32
+}
+
+// Assemble implements the Instruction Assemble method.
+func (ri RawInstruction) Assemble() (RawInstruction, error) { return ri, nil }
+
+// Disassemble parses ri into an Instruction and returns it. If ri is
+// not recognized by this package, ri itself is returned.
+func (ri RawInstruction) Disassemble() Instruction {
+	switch ri.Op & opMaskCls {
+	case opClsLoadA, opClsLoadX:
+		reg := Register(ri.Op & opMaskLoadDest)
+		sz := 0
+		switch ri.Op & opMaskLoadWidth {
+		case opLoadWidth4:
+			sz = 4
+		case opLoadWidth2:
+			sz = 2
+		case opLoadWidth1:
+			sz = 1
+		default:
+			return ri
+		}
+		switch ri.Op & opMaskLoadMode {
+		case opAddrModeImmediate:
+			if sz != 4 {
+				return ri
+			}
+			return LoadConstant{Dst: reg, Val: ri.K}
+		case opAddrModeScratch:
+			if sz != 4 || ri.K > 15 {
+				return ri
+			}
+			return LoadScratch{Dst: reg, N: int(ri.K)}
+		case opAddrModeAbsolute:
+			if ri.K > extOffset+0xffffffff {
+				return LoadExtension{Num: Extension(-extOffset + ri.K)}
+			}
+			return LoadAbsolute{Size: sz, Off: ri.K}
+		case opAddrModeIndirect:
+			return LoadIndirect{Size: sz, Off: ri.K}
+		case opAddrModePacketLen:
+			if sz != 4 {
+				return ri
+			}
+			return LoadExtension{Num: ExtLen}
+		case opAddrModeMemShift:
+			return LoadMemShift{Off: ri.K}
+		default:
+			return ri
+		}
+
+	case opClsStoreA:
+		if ri.Op != opClsStoreA || ri.K > 15 {
+			return ri
+		}
+		return StoreScratch{Src: RegA, N: int(ri.K)}
+
+	case opClsStoreX:
+		if ri.Op != opClsStoreX || ri.K > 15 {
+			return ri
+		}
+		return StoreScratch{Src: RegX, N: int(ri.K)}
+
+	case opClsALU:
+		switch op := ALUOp(ri.Op & opMaskOperator); op {
+		case ALUOpAdd, ALUOpSub, ALUOpMul, ALUOpDiv, ALUOpOr, ALUOpAnd, ALUOpShiftLeft, ALUOpShiftRight, ALUOpMod, ALUOpXor:
+			switch operand := opOperand(ri.Op & opMaskOperand); operand {
+			case opOperandX:
+				return ALUOpX{Op: op}
+			case opOperandConstant:
+				return ALUOpConstant{Op: op, Val: ri.K}
+			default:
+				return ri
+			}
+		case aluOpNeg:
+			return NegateA{}
+		default:
+			return ri
+		}
+
+	case opClsJump:
+		switch op := jumpOp(ri.Op & opMaskOperator); op {
+		case opJumpAlways:
+			return Jump{Skip: ri.K}
+		case opJumpEqual, opJumpGT, opJumpGE, opJumpSet:
+			cond, skipTrue, skipFalse := jumpOpToTest(op, ri.Jt, ri.Jf)
+			switch operand := opOperand(ri.Op & opMaskOperand); operand {
+			case opOperandX:
+				return JumpIfX{Cond: cond, SkipTrue: skipTrue, SkipFalse: skipFalse}
+			case opOperandConstant:
+				return JumpIf{Cond: cond, Val: ri.K, SkipTrue: skipTrue, SkipFalse: skipFalse}
+			default:
+				return ri
+			}
+		default:
+			return ri
+		}
+
+	case opClsReturn:
+		switch ri.Op {
+		case opClsReturn | opRetSrcA:
+			return RetA{}
+		case opClsReturn | opRetSrcConstant:
+			return RetConstant{Val: ri.K}
+		default:
+			return ri
+		}
+
+	case opClsMisc:
+		switch ri.Op {
+		case opClsMisc | opMiscTAX:
+			return TAX{}
+		case opClsMisc | opMiscTXA:
+			return TXA{}
+		default:
+			return ri
+		}
+
+	default:
+		panic("unreachable") // switch is exhaustive on the bit pattern
+	}
+}
+
+func jumpOpToTest(op jumpOp, skipTrue uint8, skipFalse uint8) (JumpTest, uint8, uint8) {
+	var test JumpTest
+
+	// Decode "fake" jump conditions that don't appear in machine code
+	// Ensures the Assemble -> Disassemble stage recreates the same instructions
+	// See https://github.com/golang/go/issues/18470
+	if skipTrue == 0 {
+		switch op {
+		case opJumpEqual:
+			test = JumpNotEqual
+		case opJumpGT:
+			test = JumpLessOrEqual
+		case opJumpGE:
+			test = JumpLessThan
+		case opJumpSet:
+			test = JumpBitsNotSet
+		}
+
+		return test, skipFalse, 0
+	}
+
+	switch op {
+	case opJumpEqual:
+		test = JumpEqual
+	case opJumpGT:
+		test = JumpGreaterThan
+	case opJumpGE:
+		test = JumpGreaterOrEqual
+	case opJumpSet:
+		test = JumpBitsSet
+	}
+
+	return test, skipTrue, skipFalse
+}
+
+// LoadConstant loads Val into register Dst.
+type LoadConstant struct {
+	Dst Register
+	Val uint32
+}
+
+// Assemble implements the Instruction Assemble method.
+func (a LoadConstant) Assemble() (RawInstruction, error) {
+	return assembleLoad(a.Dst, 4, opAddrModeImmediate, a.Val)
+}
+
+// String returns the instruction in assembler notation.
+func (a LoadConstant) String() string {
+	switch a.Dst {
+	case RegA:
+		return fmt.Sprintf("ld #%d", a.Val)
+	case RegX:
+		return fmt.Sprintf("ldx #%d", a.Val)
+	default:
+		return fmt.Sprintf("unknown instruction: %#v", a)
+	}
+}
+
+// LoadScratch loads scratch[N] into register Dst.
+type LoadScratch struct {
+	Dst Register
+	N   int // 0-15
+}
+
+// Assemble implements the Instruction Assemble method.
+func (a LoadScratch) Assemble() (RawInstruction, error) {
+	if a.N < 0 || a.N > 15 {
+		return RawInstruction{}, fmt.Errorf("invalid scratch slot %d", a.N)
+	}
+	return assembleLoad(a.Dst, 4, opAddrModeScratch, uint32(a.N))
+}
+
+// String returns the instruction in assembler notation.
+func (a LoadScratch) String() string {
+	switch a.Dst {
+	case RegA:
+		return fmt.Sprintf("ld M[%d]", a.N)
+	case RegX:
+		return fmt.Sprintf("ldx M[%d]", a.N)
+	default:
+		return fmt.Sprintf("unknown instruction: %#v", a)
+	}
+}
+
+// LoadAbsolute loads packet[Off:Off+Size] as an integer value into
+// register A.
+type LoadAbsolute struct {
+	Off  uint32
+	Size int // 1, 2 or 4
+}
+
+// Assemble implements the Instruction Assemble method.
+func (a LoadAbsolute) Assemble() (RawInstruction, error) {
+	return assembleLoad(RegA, a.Size, opAddrModeAbsolute, a.Off)
+}
+
+// String returns the instruction in assembler notation.
+func (a LoadAbsolute) String() string {
+	switch a.Size {
+	case 1: // byte
+		return fmt.Sprintf("ldb [%d]", a.Off)
+	case 2: // half word
+		return fmt.Sprintf("ldh [%d]", a.Off)
+	case 4: // word
+		if a.Off > extOffset+0xffffffff {
+			return LoadExtension{Num: Extension(a.Off + 0x1000)}.String()
+		}
+		return fmt.Sprintf("ld [%d]", a.Off)
+	default:
+		return fmt.Sprintf("unknown instruction: %#v", a)
+	}
+}
+
+// LoadIndirect loads packet[X+Off:X+Off+Size] as an integer value
+// into register A.
+type LoadIndirect struct {
+	Off  uint32
+	Size int // 1, 2 or 4
+}
+
+// Assemble implements the Instruction Assemble method.
+func (a LoadIndirect) Assemble() (RawInstruction, error) {
+	return assembleLoad(RegA, a.Size, opAddrModeIndirect, a.Off)
+}
+
+// String returns the instruction in assembler notation.
+func (a LoadIndirect) String() string {
+	switch a.Size {
+	case 1: // byte
+		return fmt.Sprintf("ldb [x + %d]", a.Off)
+	case 2: // half word
+		return fmt.Sprintf("ldh [x + %d]", a.Off)
+	case 4: // word
+		return fmt.Sprintf("ld [x + %d]", a.Off)
+	default:
+		return fmt.Sprintf("unknown instruction: %#v", a)
+	}
+}
+
+// LoadMemShift multiplies the first 4 bits of the byte at packet[Off]
+// by 4 and stores the result in register X.
+//
+// This instruction is mainly useful to load into X the length of an
+// IPv4 packet header in a single instruction, rather than have to do
+// the arithmetic on the header's first byte by hand.
+type LoadMemShift struct {
+	Off uint32
+}
+
+// Assemble implements the Instruction Assemble method.
+func (a LoadMemShift) Assemble() (RawInstruction, error) {
+	return assembleLoad(RegX, 1, opAddrModeMemShift, a.Off)
+}
+
+// String returns the instruction in assembler notation.
+func (a LoadMemShift) String() string {
+	return fmt.Sprintf("ldx 4*([%d]&0xf)", a.Off)
+}
+
+// LoadExtension invokes a linux-specific extension and stores the
+// result in register A.
+type LoadExtension struct {
+	Num Extension
+}
+
+// Assemble implements the Instruction Assemble method.
+func (a LoadExtension) Assemble() (RawInstruction, error) {
+	if a.Num == ExtLen {
+		return assembleLoad(RegA, 4, opAddrModePacketLen, 0)
+	}
+	return assembleLoad(RegA, 4, opAddrModeAbsolute, uint32(extOffset+a.Num))
+}
+
+// String returns the instruction in assembler notation.
+func (a LoadExtension) String() string {
+	switch a.Num {
+	case ExtLen:
+		return "ld #len"
+	case ExtProto:
+		return "ld #proto"
+	case ExtType:
+		return "ld #type"
+	case ExtPayloadOffset:
+		return "ld #poff"
+	case ExtInterfaceIndex:
+		return "ld #ifidx"
+	case ExtNetlinkAttr:
+		return "ld #nla"
+	case ExtNetlinkAttrNested:
+		return "ld #nlan"
+	case ExtMark:
+		return "ld #mark"
+	case ExtQueue:
+		return "ld #queue"
+	case ExtLinkLayerType:
+		return "ld #hatype"
+	case ExtRXHash:
+		return "ld #rxhash"
+	case ExtCPUID:
+		return "ld #cpu"
+	case ExtVLANTag:
+		return "ld #vlan_tci"
+	case ExtVLANTagPresent:
+		return "ld #vlan_avail"
+	case ExtVLANProto:
+		return "ld #vlan_tpid"
+	case ExtRand:
+		return "ld #rand"
+	default:
+		return fmt.Sprintf("unknown instruction: %#v", a)
+	}
+}
+
+// StoreScratch stores register Src into scratch[N].
+type StoreScratch struct {
+	Src Register
+	N   int // 0-15
+}
+
+// Assemble implements the Instruction Assemble method.
+func (a StoreScratch) Assemble() (RawInstruction, error) {
+	if a.N < 0 || a.N > 15 {
+		return RawInstruction{}, fmt.Errorf("invalid scratch slot %d", a.N)
+	}
+	var op uint16
+	switch a.Src {
+	case RegA:
+		op = opClsStoreA
+	case RegX:
+		op = opClsStoreX
+	default:
+		return RawInstruction{}, fmt.Errorf("invalid source register %v", a.Src)
+	}
+
+	return RawInstruction{
+		Op: op,
+		K:  uint32(a.N),
+	}, nil
+}
+
+// String returns the instruction in assembler notation.
+func (a StoreScratch) String() string {
+	switch a.Src {
+	case RegA:
+		return fmt.Sprintf("st M[%d]", a.N)
+	case RegX:
+		return fmt.Sprintf("stx M[%d]", a.N)
+	default:
+		return fmt.Sprintf("unknown instruction: %#v", a)
+	}
+}
+
+// ALUOpConstant executes A = A <Op> Val.
+type ALUOpConstant struct {
+	Op  ALUOp
+	Val uint32
+}
+
+// Assemble implements the Instruction Assemble method.
+func (a ALUOpConstant) Assemble() (RawInstruction, error) {
+	return RawInstruction{
+		Op: opClsALU | uint16(opOperandConstant) | uint16(a.Op),
+		K:  a.Val,
+	}, nil
+}
+
+// String returns the instruction in assembler notation.
+func (a ALUOpConstant) String() string {
+	switch a.Op {
+	case ALUOpAdd:
+		return fmt.Sprintf("add #%d", a.Val)
+	case ALUOpSub:
+		return fmt.Sprintf("sub #%d", a.Val)
+	case ALUOpMul:
+		return fmt.Sprintf("mul #%d", a.Val)
+	case ALUOpDiv:
+		return fmt.Sprintf("div #%d", a.Val)
+	case ALUOpMod:
+		return fmt.Sprintf("mod #%d", a.Val)
+	case ALUOpAnd:
+		return fmt.Sprintf("and #%d", a.Val)
+	case ALUOpOr:
+		return fmt.Sprintf("or #%d", a.Val)
+	case ALUOpXor:
+		return fmt.Sprintf("xor #%d", a.Val)
+	case ALUOpShiftLeft:
+		return fmt.Sprintf("lsh #%d", a.Val)
+	case ALUOpShiftRight:
+		return fmt.Sprintf("rsh #%d", a.Val)
+	default:
+		return fmt.Sprintf("unknown instruction: %#v", a)
+	}
+}
+
+// ALUOpX executes A = A <Op> X
+type ALUOpX struct {
+	Op ALUOp
+}
+
+// Assemble implements the Instruction Assemble method.
+func (a ALUOpX) Assemble() (RawInstruction, error) {
+	return RawInstruction{
+		Op: opClsALU | uint16(opOperandX) | uint16(a.Op),
+	}, nil
+}
+
+// String returns the instruction in assembler notation.
+func (a ALUOpX) String() string {
+	switch a.Op {
+	case ALUOpAdd:
+		return "add x"
+	case ALUOpSub:
+		return "sub x"
+	case ALUOpMul:
+		return "mul x"
+	case ALUOpDiv:
+		return "div x"
+	case ALUOpMod:
+		return "mod x"
+	case ALUOpAnd:
+		return "and x"
+	case ALUOpOr:
+		return "or x"
+	case ALUOpXor:
+		return "xor x"
+	case ALUOpShiftLeft:
+		return "lsh x"
+	case ALUOpShiftRight:
+		return "rsh x"
+	default:
+		return fmt.Sprintf("unknown instruction: %#v", a)
+	}
+}
+
+// NegateA executes A = -A.
+type NegateA struct{}
+
+// Assemble implements the Instruction Assemble method.
+func (a NegateA) Assemble() (RawInstruction, error) {
+	return RawInstruction{
+		Op: opClsALU | uint16(aluOpNeg),
+	}, nil
+}
+
+// String returns the instruction in assembler notation.
+func (a NegateA) String() string {
+	return fmt.Sprintf("neg")
+}
+
+// Jump skips the following Skip instructions in the program.
+type Jump struct {
+	Skip uint32
+}
+
+// Assemble implements the Instruction Assemble method.
+func (a Jump) Assemble() (RawInstruction, error) {
+	return RawInstruction{
+		Op: opClsJump | uint16(opJumpAlways),
+		K:  a.Skip,
+	}, nil
+}
+
+// String returns the instruction in assembler notation.
+func (a Jump) String() string {
+	return fmt.Sprintf("ja %d", a.Skip)
+}
+
+// JumpIf skips the following Skip instructions in the program if A
+// <Cond> Val is true.
+type JumpIf struct {
+	Cond      JumpTest
+	Val       uint32
+	SkipTrue  uint8
+	SkipFalse uint8
+}
+
+// Assemble implements the Instruction Assemble method.
+func (a JumpIf) Assemble() (RawInstruction, error) {
+	return jumpToRaw(a.Cond, opOperandConstant, a.Val, a.SkipTrue, a.SkipFalse)
+}
+
+// String returns the instruction in assembler notation.
+func (a JumpIf) String() string {
+	return jumpToString(a.Cond, fmt.Sprintf("#%d", a.Val), a.SkipTrue, a.SkipFalse)
+}
+
+// JumpIfX skips the following Skip instructions in the program if A
+// <Cond> X is true.
+type JumpIfX struct {
+	Cond      JumpTest
+	SkipTrue  uint8
+	SkipFalse uint8
+}
+
+// Assemble implements the Instruction Assemble method.
+func (a JumpIfX) Assemble() (RawInstruction, error) {
+	return jumpToRaw(a.Cond, opOperandX, 0, a.SkipTrue, a.SkipFalse)
+}
+
+// String returns the instruction in assembler notation.
+func (a JumpIfX) String() string {
+	return jumpToString(a.Cond, "x", a.SkipTrue, a.SkipFalse)
+}
+
+// jumpToRaw assembles a jump instruction into a RawInstruction
+func jumpToRaw(test JumpTest, operand opOperand, k uint32, skipTrue, skipFalse uint8) (RawInstruction, error) {
+	var (
+		cond jumpOp
+		flip bool
+	)
+	switch test {
+	case JumpEqual:
+		cond = opJumpEqual
+	case JumpNotEqual:
+		cond, flip = opJumpEqual, true
+	case JumpGreaterThan:
+		cond = opJumpGT
+	case JumpLessThan:
+		cond, flip = opJumpGE, true
+	case JumpGreaterOrEqual:
+		cond = opJumpGE
+	case JumpLessOrEqual:
+		cond, flip = opJumpGT, true
+	case JumpBitsSet:
+		cond = opJumpSet
+	case JumpBitsNotSet:
+		cond, flip = opJumpSet, true
+	default:
+		return RawInstruction{}, fmt.Errorf("unknown JumpTest %v", test)
+	}
+	jt, jf := skipTrue, skipFalse
+	if flip {
+		jt, jf = jf, jt
+	}
+	return RawInstruction{
+		Op: opClsJump | uint16(cond) | uint16(operand),
+		Jt: jt,
+		Jf: jf,
+		K:  k,
+	}, nil
+}
+
+// jumpToString converts a jump instruction to assembler notation
+func jumpToString(cond JumpTest, operand string, skipTrue, skipFalse uint8) string {
+	switch cond {
+	// K == A
+	case JumpEqual:
+		return conditionalJump(operand, skipTrue, skipFalse, "jeq", "jneq")
+	// K != A
+	case JumpNotEqual:
+		return fmt.Sprintf("jneq %s,%d", operand, skipTrue)
+	// K > A
+	case JumpGreaterThan:
+		return conditionalJump(operand, skipTrue, skipFalse, "jgt", "jle")
+	// K < A
+	case JumpLessThan:
+		return fmt.Sprintf("jlt %s,%d", operand, skipTrue)
+	// K >= A
+	case JumpGreaterOrEqual:
+		return conditionalJump(operand, skipTrue, skipFalse, "jge", "jlt")
+	// K <= A
+	case JumpLessOrEqual:
+		return fmt.Sprintf("jle %s,%d", operand, skipTrue)
+	// K & A != 0
+	case JumpBitsSet:
+		if skipFalse > 0 {
+			return fmt.Sprintf("jset %s,%d,%d", operand, skipTrue, skipFalse)
+		}
+		return fmt.Sprintf("jset %s,%d", operand, skipTrue)
+	// K & A == 0, there is no assembler instruction for JumpBitNotSet, use JumpBitSet and invert skips
+	case JumpBitsNotSet:
+		return jumpToString(JumpBitsSet, operand, skipFalse, skipTrue)
+	default:
+		return fmt.Sprintf("unknown JumpTest %#v", cond)
+	}
+}
+
+func conditionalJump(operand string, skipTrue, skipFalse uint8, positiveJump, negativeJump string) string {
+	if skipTrue > 0 {
+		if skipFalse > 0 {
+			return fmt.Sprintf("%s %s,%d,%d", positiveJump, operand, skipTrue, skipFalse)
+		}
+		return fmt.Sprintf("%s %s,%d", positiveJump, operand, skipTrue)
+	}
+	return fmt.Sprintf("%s %s,%d", negativeJump, operand, skipFalse)
+}
+
+// RetA exits the BPF program, returning the value of register A.
+type RetA struct{}
+
+// Assemble implements the Instruction Assemble method.
+func (a RetA) Assemble() (RawInstruction, error) {
+	return RawInstruction{
+		Op: opClsReturn | opRetSrcA,
+	}, nil
+}
+
+// String returns the instruction in assembler notation.
+func (a RetA) String() string {
+	return fmt.Sprintf("ret a")
+}
+
+// RetConstant exits the BPF program, returning a constant value.
+type RetConstant struct {
+	Val uint32
+}
+
+// Assemble implements the Instruction Assemble method.
+func (a RetConstant) Assemble() (RawInstruction, error) {
+	return RawInstruction{
+		Op: opClsReturn | opRetSrcConstant,
+		K:  a.Val,
+	}, nil
+}
+
+// String returns the instruction in assembler notation.
+func (a RetConstant) String() string {
+	return fmt.Sprintf("ret #%d", a.Val)
+}
+
+// TXA copies the value of register X to register A.
+type TXA struct{}
+
+// Assemble implements the Instruction Assemble method.
+func (a TXA) Assemble() (RawInstruction, error) {
+	return RawInstruction{
+		Op: opClsMisc | opMiscTXA,
+	}, nil
+}
+
+// String returns the instruction in assembler notation.
+func (a TXA) String() string {
+	return fmt.Sprintf("txa")
+}
+
+// TAX copies the value of register A to register X.
+type TAX struct{}
+
+// Assemble implements the Instruction Assemble method.
+func (a TAX) Assemble() (RawInstruction, error) {
+	return RawInstruction{
+		Op: opClsMisc | opMiscTAX,
+	}, nil
+}
+
+// String returns the instruction in assembler notation.
+func (a TAX) String() string {
+	return fmt.Sprintf("tax")
+}
+
+func assembleLoad(dst Register, loadSize int, mode uint16, k uint32) (RawInstruction, error) {
+	var (
+		cls uint16
+		sz  uint16
+	)
+	switch dst {
+	case RegA:
+		cls = opClsLoadA
+	case RegX:
+		cls = opClsLoadX
+	default:
+		return RawInstruction{}, fmt.Errorf("invalid target register %v", dst)
+	}
+	switch loadSize {
+	case 1:
+		sz = opLoadWidth1
+	case 2:
+		sz = opLoadWidth2
+	case 4:
+		sz = opLoadWidth4
+	default:
+		return RawInstruction{}, fmt.Errorf("invalid load byte length %d", sz)
+	}
+	return RawInstruction{
+		Op: cls | sz | mode,
+		K:  k,
+	}, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/setter.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/setter.go
new file mode 100644
index 000000000..43e35f0ac
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/setter.go
@@ -0,0 +1,10 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package bpf
+
+// A Setter is a type which can attach a compiled BPF filter to itself.
+type Setter interface {
+	SetBPF(filter []RawInstruction) error
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/vm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/vm.go
new file mode 100644
index 000000000..73f57f1f7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/vm.go
@@ -0,0 +1,150 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package bpf
+
+import (
+	"errors"
+	"fmt"
+)
+
+// A VM is an emulated BPF virtual machine.
+type VM struct {
+	filter []Instruction
+}
+
+// NewVM returns a new VM using the input BPF program.
+func NewVM(filter []Instruction) (*VM, error) {
+	if len(filter) == 0 {
+		return nil, errors.New("one or more Instructions must be specified")
+	}
+
+	for i, ins := range filter {
+		check := len(filter) - (i + 1)
+		switch ins := ins.(type) {
+		// Check for out-of-bounds jumps in instructions
+		case Jump:
+			if check <= int(ins.Skip) {
+				return nil, fmt.Errorf("cannot jump %d instructions; jumping past program bounds", ins.Skip)
+			}
+		case JumpIf:
+			if check <= int(ins.SkipTrue) {
+				return nil, fmt.Errorf("cannot jump %d instructions in true case; jumping past program bounds", ins.SkipTrue)
+			}
+			if check <= int(ins.SkipFalse) {
+				return nil, fmt.Errorf("cannot jump %d instructions in false case; jumping past program bounds", ins.SkipFalse)
+			}
+		case JumpIfX:
+			if check <= int(ins.SkipTrue) {
+				return nil, fmt.Errorf("cannot jump %d instructions in true case; jumping past program bounds", ins.SkipTrue)
+			}
+			if check <= int(ins.SkipFalse) {
+				return nil, fmt.Errorf("cannot jump %d instructions in false case; jumping past program bounds", ins.SkipFalse)
+			}
+		// Check for division or modulus by zero
+		case ALUOpConstant:
+			if ins.Val != 0 {
+				break
+			}
+
+			switch ins.Op {
+			case ALUOpDiv, ALUOpMod:
+				return nil, errors.New("cannot divide by zero using ALUOpConstant")
+			}
+		// Check for unknown extensions
+		case LoadExtension:
+			switch ins.Num {
+			case ExtLen:
+			default:
+				return nil, fmt.Errorf("extension %d not implemented", ins.Num)
+			}
+		}
+	}
+
+	// Make sure last instruction is a return instruction
+	switch filter[len(filter)-1].(type) {
+	case RetA, RetConstant:
+	default:
+		return nil, errors.New("BPF program must end with RetA or RetConstant")
+	}
+
+	// Though our VM works using disassembled instructions, we
+	// attempt to assemble the input filter anyway to ensure it is compatible
+	// with an operating system VM.
+	_, err := Assemble(filter)
+
+	return &VM{
+		filter: filter,
+	}, err
+}
+
+// Run runs the VM's BPF program against the input bytes.
+// Run returns the number of bytes accepted by the BPF program, and any errors
+// which occurred while processing the program.
+func (v *VM) Run(in []byte) (int, error) {
+	var (
+		// Registers of the virtual machine
+		regA       uint32
+		regX       uint32
+		regScratch [16]uint32
+
+		// OK is true if the program should continue processing the next
+		// instruction, or false if not, causing the loop to break
+		ok = true
+	)
+
+	// TODO(mdlayher): implement:
+	// - NegateA:
+	//   - would require a change from uint32 registers to int32
+	//     registers
+
+	// TODO(mdlayher): add interop tests that check signedness of ALU
+	// operations against kernel implementation, and make sure Go
+	// implementation matches behavior
+
+	for i := 0; i < len(v.filter) && ok; i++ {
+		ins := v.filter[i]
+
+		switch ins := ins.(type) {
+		case ALUOpConstant:
+			regA = aluOpConstant(ins, regA)
+		case ALUOpX:
+			regA, ok = aluOpX(ins, regA, regX)
+		case Jump:
+			i += int(ins.Skip)
+		case JumpIf:
+			jump := jumpIf(ins, regA)
+			i += jump
+		case JumpIfX:
+			jump := jumpIfX(ins, regA, regX)
+			i += jump
+		case LoadAbsolute:
+			regA, ok = loadAbsolute(ins, in)
+		case LoadConstant:
+			regA, regX = loadConstant(ins, regA, regX)
+		case LoadExtension:
+			regA = loadExtension(ins, in)
+		case LoadIndirect:
+			regA, ok = loadIndirect(ins, in, regX)
+		case LoadMemShift:
+			regX, ok = loadMemShift(ins, in)
+		case LoadScratch:
+			regA, regX = loadScratch(ins, regScratch, regA, regX)
+		case RetA:
+			return int(regA), nil
+		case RetConstant:
+			return int(ins.Val), nil
+		case StoreScratch:
+			regScratch = storeScratch(ins, regScratch, regA, regX)
+		case TAX:
+			regX = regA
+		case TXA:
+			regA = regX
+		default:
+			return 0, fmt.Errorf("unknown Instruction at index %d: %T", i, ins)
+		}
+	}
+
+	return 0, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/vm_instructions.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/vm_instructions.go
new file mode 100644
index 000000000..cf8947c33
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/bpf/vm_instructions.go
@@ -0,0 +1,182 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package bpf
+
+import (
+	"encoding/binary"
+	"fmt"
+)
+
+func aluOpConstant(ins ALUOpConstant, regA uint32) uint32 {
+	return aluOpCommon(ins.Op, regA, ins.Val)
+}
+
+func aluOpX(ins ALUOpX, regA uint32, regX uint32) (uint32, bool) {
+	// Guard against division or modulus by zero by terminating
+	// the program, as the OS BPF VM does
+	if regX == 0 {
+		switch ins.Op {
+		case ALUOpDiv, ALUOpMod:
+			return 0, false
+		}
+	}
+
+	return aluOpCommon(ins.Op, regA, regX), true
+}
+
+func aluOpCommon(op ALUOp, regA uint32, value uint32) uint32 {
+	switch op {
+	case ALUOpAdd:
+		return regA + value
+	case ALUOpSub:
+		return regA - value
+	case ALUOpMul:
+		return regA * value
+	case ALUOpDiv:
+		// Division by zero not permitted by NewVM and aluOpX checks
+		return regA / value
+	case ALUOpOr:
+		return regA | value
+	case ALUOpAnd:
+		return regA & value
+	case ALUOpShiftLeft:
+		return regA << value
+	case ALUOpShiftRight:
+		return regA >> value
+	case ALUOpMod:
+		// Modulus by zero not permitted by NewVM and aluOpX checks
+		return regA % value
+	case ALUOpXor:
+		return regA ^ value
+	default:
+		return regA
+	}
+}
+
+func jumpIf(ins JumpIf, regA uint32) int {
+	return jumpIfCommon(ins.Cond, ins.SkipTrue, ins.SkipFalse, regA, ins.Val)
+}
+
+func jumpIfX(ins JumpIfX, regA uint32, regX uint32) int {
+	return jumpIfCommon(ins.Cond, ins.SkipTrue, ins.SkipFalse, regA, regX)
+}
+
+func jumpIfCommon(cond JumpTest, skipTrue, skipFalse uint8, regA uint32, value uint32) int {
+	var ok bool
+
+	switch cond {
+	case JumpEqual:
+		ok = regA == value
+	case JumpNotEqual:
+		ok = regA != value
+	case JumpGreaterThan:
+		ok = regA > value
+	case JumpLessThan:
+		ok = regA < value
+	case JumpGreaterOrEqual:
+		ok = regA >= value
+	case JumpLessOrEqual:
+		ok = regA <= value
+	case JumpBitsSet:
+		ok = (regA & value) != 0
+	case JumpBitsNotSet:
+		ok = (regA & value) == 0
+	}
+
+	if ok {
+		return int(skipTrue)
+	}
+
+	return int(skipFalse)
+}
+
+func loadAbsolute(ins LoadAbsolute, in []byte) (uint32, bool) {
+	offset := int(ins.Off)
+	size := int(ins.Size)
+
+	return loadCommon(in, offset, size)
+}
+
+func loadConstant(ins LoadConstant, regA uint32, regX uint32) (uint32, uint32) {
+	switch ins.Dst {
+	case RegA:
+		regA = ins.Val
+	case RegX:
+		regX = ins.Val
+	}
+
+	return regA, regX
+}
+
+func loadExtension(ins LoadExtension, in []byte) uint32 {
+	switch ins.Num {
+	case ExtLen:
+		return uint32(len(in))
+	default:
+		panic(fmt.Sprintf("unimplemented extension: %d", ins.Num))
+	}
+}
+
+func loadIndirect(ins LoadIndirect, in []byte, regX uint32) (uint32, bool) {
+	offset := int(ins.Off) + int(regX)
+	size := int(ins.Size)
+
+	return loadCommon(in, offset, size)
+}
+
+func loadMemShift(ins LoadMemShift, in []byte) (uint32, bool) {
+	offset := int(ins.Off)
+
+	// Size of LoadMemShift is always 1 byte
+	if !inBounds(len(in), offset, 1) {
+		return 0, false
+	}
+
+	// Mask off high 4 bits and multiply low 4 bits by 4
+	return uint32(in[offset]&0x0f) * 4, true
+}
+
+func inBounds(inLen int, offset int, size int) bool {
+	return offset+size <= inLen
+}
+
+func loadCommon(in []byte, offset int, size int) (uint32, bool) {
+	if !inBounds(len(in), offset, size) {
+		return 0, false
+	}
+
+	switch size {
+	case 1:
+		return uint32(in[offset]), true
+	case 2:
+		return uint32(binary.BigEndian.Uint16(in[offset : offset+size])), true
+	case 4:
+		return uint32(binary.BigEndian.Uint32(in[offset : offset+size])), true
+	default:
+		panic(fmt.Sprintf("invalid load size: %d", size))
+	}
+}
+
+func loadScratch(ins LoadScratch, regScratch [16]uint32, regA uint32, regX uint32) (uint32, uint32) {
+	switch ins.Dst {
+	case RegA:
+		regA = regScratch[ins.N]
+	case RegX:
+		regX = regScratch[ins.N]
+	}
+
+	return regA, regX
+}
+
+func storeScratch(ins StoreScratch, regScratch [16]uint32, regA uint32, regX uint32) [16]uint32 {
+	switch ins.Src {
+	case RegA:
+		regScratch[ins.N] = regA
+	case RegX:
+		regScratch[ins.N] = regX
+	}
+
+	return regScratch
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/dns/dnsmessage/message.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/dns/dnsmessage/message.go
new file mode 100644
index 000000000..654f191f8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/dns/dnsmessage/message.go
@@ -0,0 +1,2587 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Package dnsmessage provides a mostly RFC 1035 compliant implementation of
+// DNS message packing and unpacking.
+//
+// The package also supports messages with Extension Mechanisms for DNS
+// (EDNS(0)) as defined in RFC 6891.
+//
+// This implementation is designed to minimize heap allocations and avoid
+// unnecessary packing and unpacking as much as possible.
+package dnsmessage
+
+import (
+	"errors"
+)
+
+// Message formats
+
+// A Type is a type of DNS request and response.
+type Type uint16
+
+const (
+	// ResourceHeader.Type and Question.Type
+	TypeA     Type = 1
+	TypeNS    Type = 2
+	TypeCNAME Type = 5
+	TypeSOA   Type = 6
+	TypePTR   Type = 12
+	TypeMX    Type = 15
+	TypeTXT   Type = 16
+	TypeAAAA  Type = 28
+	TypeSRV   Type = 33
+	TypeOPT   Type = 41
+
+	// Question.Type
+	TypeWKS   Type = 11
+	TypeHINFO Type = 13
+	TypeMINFO Type = 14
+	TypeAXFR  Type = 252
+	TypeALL   Type = 255
+)
+
+var typeNames = map[Type]string{
+	TypeA:     "TypeA",
+	TypeNS:    "TypeNS",
+	TypeCNAME: "TypeCNAME",
+	TypeSOA:   "TypeSOA",
+	TypePTR:   "TypePTR",
+	TypeMX:    "TypeMX",
+	TypeTXT:   "TypeTXT",
+	TypeAAAA:  "TypeAAAA",
+	TypeSRV:   "TypeSRV",
+	TypeOPT:   "TypeOPT",
+	TypeWKS:   "TypeWKS",
+	TypeHINFO: "TypeHINFO",
+	TypeMINFO: "TypeMINFO",
+	TypeAXFR:  "TypeAXFR",
+	TypeALL:   "TypeALL",
+}
+
+// String implements fmt.Stringer.String.
+func (t Type) String() string {
+	if n, ok := typeNames[t]; ok {
+		return n
+	}
+	return printUint16(uint16(t))
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (t Type) GoString() string {
+	if n, ok := typeNames[t]; ok {
+		return "dnsmessage." + n
+	}
+	return printUint16(uint16(t))
+}
+
+// A Class is a type of network.
+type Class uint16
+
+const (
+	// ResourceHeader.Class and Question.Class
+	ClassINET   Class = 1
+	ClassCSNET  Class = 2
+	ClassCHAOS  Class = 3
+	ClassHESIOD Class = 4
+
+	// Question.Class
+	ClassANY Class = 255
+)
+
+var classNames = map[Class]string{
+	ClassINET:   "ClassINET",
+	ClassCSNET:  "ClassCSNET",
+	ClassCHAOS:  "ClassCHAOS",
+	ClassHESIOD: "ClassHESIOD",
+	ClassANY:    "ClassANY",
+}
+
+// String implements fmt.Stringer.String.
+func (c Class) String() string {
+	if n, ok := classNames[c]; ok {
+		return n
+	}
+	return printUint16(uint16(c))
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (c Class) GoString() string {
+	if n, ok := classNames[c]; ok {
+		return "dnsmessage." + n
+	}
+	return printUint16(uint16(c))
+}
+
+// An OpCode is a DNS operation code.
+type OpCode uint16
+
+// GoString implements fmt.GoStringer.GoString.
+func (o OpCode) GoString() string {
+	return printUint16(uint16(o))
+}
+
+// An RCode is a DNS response status code.
+type RCode uint16
+
+const (
+	// Message.Rcode
+	RCodeSuccess        RCode = 0
+	RCodeFormatError    RCode = 1
+	RCodeServerFailure  RCode = 2
+	RCodeNameError      RCode = 3
+	RCodeNotImplemented RCode = 4
+	RCodeRefused        RCode = 5
+)
+
+var rCodeNames = map[RCode]string{
+	RCodeSuccess:        "RCodeSuccess",
+	RCodeFormatError:    "RCodeFormatError",
+	RCodeServerFailure:  "RCodeServerFailure",
+	RCodeNameError:      "RCodeNameError",
+	RCodeNotImplemented: "RCodeNotImplemented",
+	RCodeRefused:        "RCodeRefused",
+}
+
+// String implements fmt.Stringer.String.
+func (r RCode) String() string {
+	if n, ok := rCodeNames[r]; ok {
+		return n
+	}
+	return printUint16(uint16(r))
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (r RCode) GoString() string {
+	if n, ok := rCodeNames[r]; ok {
+		return "dnsmessage." + n
+	}
+	return printUint16(uint16(r))
+}
+
+func printPaddedUint8(i uint8) string {
+	b := byte(i)
+	return string([]byte{
+		b/100 + '0',
+		b/10%10 + '0',
+		b%10 + '0',
+	})
+}
+
+func printUint8Bytes(buf []byte, i uint8) []byte {
+	b := byte(i)
+	if i >= 100 {
+		buf = append(buf, b/100+'0')
+	}
+	if i >= 10 {
+		buf = append(buf, b/10%10+'0')
+	}
+	return append(buf, b%10+'0')
+}
+
+func printByteSlice(b []byte) string {
+	if len(b) == 0 {
+		return ""
+	}
+	buf := make([]byte, 0, 5*len(b))
+	buf = printUint8Bytes(buf, uint8(b[0]))
+	for _, n := range b[1:] {
+		buf = append(buf, ',', ' ')
+		buf = printUint8Bytes(buf, uint8(n))
+	}
+	return string(buf)
+}
+
+const hexDigits = "0123456789abcdef"
+
+func printString(str []byte) string {
+	buf := make([]byte, 0, len(str))
+	for i := 0; i < len(str); i++ {
+		c := str[i]
+		if c == '.' || c == '-' || c == ' ' ||
+			'A' <= c && c <= 'Z' ||
+			'a' <= c && c <= 'z' ||
+			'0' <= c && c <= '9' {
+			buf = append(buf, c)
+			continue
+		}
+
+		upper := c >> 4
+		lower := (c << 4) >> 4
+		buf = append(
+			buf,
+			'\\',
+			'x',
+			hexDigits[upper],
+			hexDigits[lower],
+		)
+	}
+	return string(buf)
+}
+
+func printUint16(i uint16) string {
+	return printUint32(uint32(i))
+}
+
+func printUint32(i uint32) string {
+	// Max value is 4294967295.
+	buf := make([]byte, 10)
+	for b, d := buf, uint32(1000000000); d > 0; d /= 10 {
+		b[0] = byte(i/d%10 + '0')
+		if b[0] == '0' && len(b) == len(buf) && len(buf) > 1 {
+			buf = buf[1:]
+		}
+		b = b[1:]
+		i %= d
+	}
+	return string(buf)
+}
+
+func printBool(b bool) string {
+	if b {
+		return "true"
+	}
+	return "false"
+}
+
+var (
+	// ErrNotStarted indicates that the prerequisite information isn't
+	// available yet because the previous records haven't been appropriately
+	// parsed, skipped or finished.
+	ErrNotStarted = errors.New("parsing/packing of this type isn't available yet")
+
+	// ErrSectionDone indicated that all records in the section have been
+	// parsed or finished.
+	ErrSectionDone = errors.New("parsing/packing of this section has completed")
+
+	errBaseLen            = errors.New("insufficient data for base length type")
+	errCalcLen            = errors.New("insufficient data for calculated length type")
+	errReserved           = errors.New("segment prefix is reserved")
+	errTooManyPtr         = errors.New("too many pointers (>10)")
+	errInvalidPtr         = errors.New("invalid pointer")
+	errNilResouceBody     = errors.New("nil resource body")
+	errResourceLen        = errors.New("insufficient data for resource body length")
+	errSegTooLong         = errors.New("segment length too long")
+	errZeroSegLen         = errors.New("zero length segment")
+	errResTooLong         = errors.New("resource length too long")
+	errTooManyQuestions   = errors.New("too many Questions to pack (>65535)")
+	errTooManyAnswers     = errors.New("too many Answers to pack (>65535)")
+	errTooManyAuthorities = errors.New("too many Authorities to pack (>65535)")
+	errTooManyAdditionals = errors.New("too many Additionals to pack (>65535)")
+	errNonCanonicalName   = errors.New("name is not in canonical format (it must end with a .)")
+	errStringTooLong      = errors.New("character string exceeds maximum length (255)")
+	errCompressedSRV      = errors.New("compressed name in SRV resource data")
+)
+
+// Internal constants.
+const (
+	// packStartingCap is the default initial buffer size allocated during
+	// packing.
+	//
+	// The starting capacity doesn't matter too much, but most DNS responses
+	// Will be <= 512 bytes as it is the limit for DNS over UDP.
+	packStartingCap = 512
+
+	// uint16Len is the length (in bytes) of a uint16.
+	uint16Len = 2
+
+	// uint32Len is the length (in bytes) of a uint32.
+	uint32Len = 4
+
+	// headerLen is the length (in bytes) of a DNS header.
+	//
+	// A header is comprised of 6 uint16s and no padding.
+	headerLen = 6 * uint16Len
+)
+
+type nestedError struct {
+	// s is the current level's error message.
+	s string
+
+	// err is the nested error.
+	err error
+}
+
+// nestedError implements error.Error.
+func (e *nestedError) Error() string {
+	return e.s + ": " + e.err.Error()
+}
+
+// Header is a representation of a DNS message header.
+type Header struct {
+	ID                 uint16
+	Response           bool
+	OpCode             OpCode
+	Authoritative      bool
+	Truncated          bool
+	RecursionDesired   bool
+	RecursionAvailable bool
+	RCode              RCode
+}
+
+func (m *Header) pack() (id uint16, bits uint16) {
+	id = m.ID
+	bits = uint16(m.OpCode)<<11 | uint16(m.RCode)
+	if m.RecursionAvailable {
+		bits |= headerBitRA
+	}
+	if m.RecursionDesired {
+		bits |= headerBitRD
+	}
+	if m.Truncated {
+		bits |= headerBitTC
+	}
+	if m.Authoritative {
+		bits |= headerBitAA
+	}
+	if m.Response {
+		bits |= headerBitQR
+	}
+	return
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (m *Header) GoString() string {
+	return "dnsmessage.Header{" +
+		"ID: " + printUint16(m.ID) + ", " +
+		"Response: " + printBool(m.Response) + ", " +
+		"OpCode: " + m.OpCode.GoString() + ", " +
+		"Authoritative: " + printBool(m.Authoritative) + ", " +
+		"Truncated: " + printBool(m.Truncated) + ", " +
+		"RecursionDesired: " + printBool(m.RecursionDesired) + ", " +
+		"RecursionAvailable: " + printBool(m.RecursionAvailable) + ", " +
+		"RCode: " + m.RCode.GoString() + "}"
+}
+
+// Message is a representation of a DNS message.
+type Message struct {
+	Header
+	Questions   []Question
+	Answers     []Resource
+	Authorities []Resource
+	Additionals []Resource
+}
+
+type section uint8
+
+const (
+	sectionNotStarted section = iota
+	sectionHeader
+	sectionQuestions
+	sectionAnswers
+	sectionAuthorities
+	sectionAdditionals
+	sectionDone
+
+	headerBitQR = 1 << 15 // query/response (response=1)
+	headerBitAA = 1 << 10 // authoritative
+	headerBitTC = 1 << 9  // truncated
+	headerBitRD = 1 << 8  // recursion desired
+	headerBitRA = 1 << 7  // recursion available
+)
+
+var sectionNames = map[section]string{
+	sectionHeader:      "header",
+	sectionQuestions:   "Question",
+	sectionAnswers:     "Answer",
+	sectionAuthorities: "Authority",
+	sectionAdditionals: "Additional",
+}
+
+// header is the wire format for a DNS message header.
+type header struct {
+	id          uint16
+	bits        uint16
+	questions   uint16
+	answers     uint16
+	authorities uint16
+	additionals uint16
+}
+
+func (h *header) count(sec section) uint16 {
+	switch sec {
+	case sectionQuestions:
+		return h.questions
+	case sectionAnswers:
+		return h.answers
+	case sectionAuthorities:
+		return h.authorities
+	case sectionAdditionals:
+		return h.additionals
+	}
+	return 0
+}
+
+// pack appends the wire format of the header to msg.
+func (h *header) pack(msg []byte) []byte {
+	msg = packUint16(msg, h.id)
+	msg = packUint16(msg, h.bits)
+	msg = packUint16(msg, h.questions)
+	msg = packUint16(msg, h.answers)
+	msg = packUint16(msg, h.authorities)
+	return packUint16(msg, h.additionals)
+}
+
+func (h *header) unpack(msg []byte, off int) (int, error) {
+	newOff := off
+	var err error
+	if h.id, newOff, err = unpackUint16(msg, newOff); err != nil {
+		return off, &nestedError{"id", err}
+	}
+	if h.bits, newOff, err = unpackUint16(msg, newOff); err != nil {
+		return off, &nestedError{"bits", err}
+	}
+	if h.questions, newOff, err = unpackUint16(msg, newOff); err != nil {
+		return off, &nestedError{"questions", err}
+	}
+	if h.answers, newOff, err = unpackUint16(msg, newOff); err != nil {
+		return off, &nestedError{"answers", err}
+	}
+	if h.authorities, newOff, err = unpackUint16(msg, newOff); err != nil {
+		return off, &nestedError{"authorities", err}
+	}
+	if h.additionals, newOff, err = unpackUint16(msg, newOff); err != nil {
+		return off, &nestedError{"additionals", err}
+	}
+	return newOff, nil
+}
+
+func (h *header) header() Header {
+	return Header{
+		ID:                 h.id,
+		Response:           (h.bits & headerBitQR) != 0,
+		OpCode:             OpCode(h.bits>>11) & 0xF,
+		Authoritative:      (h.bits & headerBitAA) != 0,
+		Truncated:          (h.bits & headerBitTC) != 0,
+		RecursionDesired:   (h.bits & headerBitRD) != 0,
+		RecursionAvailable: (h.bits & headerBitRA) != 0,
+		RCode:              RCode(h.bits & 0xF),
+	}
+}
+
+// A Resource is a DNS resource record.
+type Resource struct {
+	Header ResourceHeader
+	Body   ResourceBody
+}
+
+func (r *Resource) GoString() string {
+	return "dnsmessage.Resource{" +
+		"Header: " + r.Header.GoString() +
+		", Body: &" + r.Body.GoString() +
+		"}"
+}
+
+// A ResourceBody is a DNS resource record minus the header.
+type ResourceBody interface {
+	// pack packs a Resource except for its header.
+	pack(msg []byte, compression map[string]int, compressionOff int) ([]byte, error)
+
+	// realType returns the actual type of the Resource. This is used to
+	// fill in the header Type field.
+	realType() Type
+
+	// GoString implements fmt.GoStringer.GoString.
+	GoString() string
+}
+
+// pack appends the wire format of the Resource to msg.
+func (r *Resource) pack(msg []byte, compression map[string]int, compressionOff int) ([]byte, error) {
+	if r.Body == nil {
+		return msg, errNilResouceBody
+	}
+	oldMsg := msg
+	r.Header.Type = r.Body.realType()
+	msg, lenOff, err := r.Header.pack(msg, compression, compressionOff)
+	if err != nil {
+		return msg, &nestedError{"ResourceHeader", err}
+	}
+	preLen := len(msg)
+	msg, err = r.Body.pack(msg, compression, compressionOff)
+	if err != nil {
+		return msg, &nestedError{"content", err}
+	}
+	if err := r.Header.fixLen(msg, lenOff, preLen); err != nil {
+		return oldMsg, err
+	}
+	return msg, nil
+}
+
+// A Parser allows incrementally parsing a DNS message.
+//
+// When parsing is started, the Header is parsed. Next, each Question can be
+// either parsed or skipped. Alternatively, all Questions can be skipped at
+// once. When all Questions have been parsed, attempting to parse Questions
+// will return (nil, nil) and attempting to skip Questions will return
+// (true, nil). After all Questions have been either parsed or skipped, all
+// Answers, Authorities and Additionals can be either parsed or skipped in the
+// same way, and each type of Resource must be fully parsed or skipped before
+// proceeding to the next type of Resource.
+//
+// Note that there is no requirement to fully skip or parse the message.
+type Parser struct {
+	msg    []byte
+	header header
+
+	section        section
+	off            int
+	index          int
+	resHeaderValid bool
+	resHeader      ResourceHeader
+}
+
+// Start parses the header and enables the parsing of Questions.
+func (p *Parser) Start(msg []byte) (Header, error) {
+	if p.msg != nil {
+		*p = Parser{}
+	}
+	p.msg = msg
+	var err error
+	if p.off, err = p.header.unpack(msg, 0); err != nil {
+		return Header{}, &nestedError{"unpacking header", err}
+	}
+	p.section = sectionQuestions
+	return p.header.header(), nil
+}
+
+func (p *Parser) checkAdvance(sec section) error {
+	if p.section < sec {
+		return ErrNotStarted
+	}
+	if p.section > sec {
+		return ErrSectionDone
+	}
+	p.resHeaderValid = false
+	if p.index == int(p.header.count(sec)) {
+		p.index = 0
+		p.section++
+		return ErrSectionDone
+	}
+	return nil
+}
+
+func (p *Parser) resource(sec section) (Resource, error) {
+	var r Resource
+	var err error
+	r.Header, err = p.resourceHeader(sec)
+	if err != nil {
+		return r, err
+	}
+	p.resHeaderValid = false
+	r.Body, p.off, err = unpackResourceBody(p.msg, p.off, r.Header)
+	if err != nil {
+		return Resource{}, &nestedError{"unpacking " + sectionNames[sec], err}
+	}
+	p.index++
+	return r, nil
+}
+
+func (p *Parser) resourceHeader(sec section) (ResourceHeader, error) {
+	if p.resHeaderValid {
+		return p.resHeader, nil
+	}
+	if err := p.checkAdvance(sec); err != nil {
+		return ResourceHeader{}, err
+	}
+	var hdr ResourceHeader
+	off, err := hdr.unpack(p.msg, p.off)
+	if err != nil {
+		return ResourceHeader{}, err
+	}
+	p.resHeaderValid = true
+	p.resHeader = hdr
+	p.off = off
+	return hdr, nil
+}
+
+func (p *Parser) skipResource(sec section) error {
+	if p.resHeaderValid {
+		newOff := p.off + int(p.resHeader.Length)
+		if newOff > len(p.msg) {
+			return errResourceLen
+		}
+		p.off = newOff
+		p.resHeaderValid = false
+		p.index++
+		return nil
+	}
+	if err := p.checkAdvance(sec); err != nil {
+		return err
+	}
+	var err error
+	p.off, err = skipResource(p.msg, p.off)
+	if err != nil {
+		return &nestedError{"skipping: " + sectionNames[sec], err}
+	}
+	p.index++
+	return nil
+}
+
+// Question parses a single Question.
+func (p *Parser) Question() (Question, error) {
+	if err := p.checkAdvance(sectionQuestions); err != nil {
+		return Question{}, err
+	}
+	var name Name
+	off, err := name.unpack(p.msg, p.off)
+	if err != nil {
+		return Question{}, &nestedError{"unpacking Question.Name", err}
+	}
+	typ, off, err := unpackType(p.msg, off)
+	if err != nil {
+		return Question{}, &nestedError{"unpacking Question.Type", err}
+	}
+	class, off, err := unpackClass(p.msg, off)
+	if err != nil {
+		return Question{}, &nestedError{"unpacking Question.Class", err}
+	}
+	p.off = off
+	p.index++
+	return Question{name, typ, class}, nil
+}
+
+// AllQuestions parses all Questions.
+func (p *Parser) AllQuestions() ([]Question, error) {
+	// Multiple questions are valid according to the spec,
+	// but servers don't actually support them. There will
+	// be at most one question here.
+	//
+	// Do not pre-allocate based on info in p.header, since
+	// the data is untrusted.
+	qs := []Question{}
+	for {
+		q, err := p.Question()
+		if err == ErrSectionDone {
+			return qs, nil
+		}
+		if err != nil {
+			return nil, err
+		}
+		qs = append(qs, q)
+	}
+}
+
+// SkipQuestion skips a single Question.
+func (p *Parser) SkipQuestion() error {
+	if err := p.checkAdvance(sectionQuestions); err != nil {
+		return err
+	}
+	off, err := skipName(p.msg, p.off)
+	if err != nil {
+		return &nestedError{"skipping Question Name", err}
+	}
+	if off, err = skipType(p.msg, off); err != nil {
+		return &nestedError{"skipping Question Type", err}
+	}
+	if off, err = skipClass(p.msg, off); err != nil {
+		return &nestedError{"skipping Question Class", err}
+	}
+	p.off = off
+	p.index++
+	return nil
+}
+
+// SkipAllQuestions skips all Questions.
+func (p *Parser) SkipAllQuestions() error {
+	for {
+		if err := p.SkipQuestion(); err == ErrSectionDone {
+			return nil
+		} else if err != nil {
+			return err
+		}
+	}
+}
+
+// AnswerHeader parses a single Answer ResourceHeader.
+func (p *Parser) AnswerHeader() (ResourceHeader, error) {
+	return p.resourceHeader(sectionAnswers)
+}
+
+// Answer parses a single Answer Resource.
+func (p *Parser) Answer() (Resource, error) {
+	return p.resource(sectionAnswers)
+}
+
+// AllAnswers parses all Answer Resources.
+func (p *Parser) AllAnswers() ([]Resource, error) {
+	// The most common query is for A/AAAA, which usually returns
+	// a handful of IPs.
+	//
+	// Pre-allocate up to a certain limit, since p.header is
+	// untrusted data.
+	n := int(p.header.answers)
+	if n > 20 {
+		n = 20
+	}
+	as := make([]Resource, 0, n)
+	for {
+		a, err := p.Answer()
+		if err == ErrSectionDone {
+			return as, nil
+		}
+		if err != nil {
+			return nil, err
+		}
+		as = append(as, a)
+	}
+}
+
+// SkipAnswer skips a single Answer Resource.
+func (p *Parser) SkipAnswer() error {
+	return p.skipResource(sectionAnswers)
+}
+
+// SkipAllAnswers skips all Answer Resources.
+func (p *Parser) SkipAllAnswers() error {
+	for {
+		if err := p.SkipAnswer(); err == ErrSectionDone {
+			return nil
+		} else if err != nil {
+			return err
+		}
+	}
+}
+
+// AuthorityHeader parses a single Authority ResourceHeader.
+func (p *Parser) AuthorityHeader() (ResourceHeader, error) {
+	return p.resourceHeader(sectionAuthorities)
+}
+
+// Authority parses a single Authority Resource.
+func (p *Parser) Authority() (Resource, error) {
+	return p.resource(sectionAuthorities)
+}
+
+// AllAuthorities parses all Authority Resources.
+func (p *Parser) AllAuthorities() ([]Resource, error) {
+	// Authorities contains SOA in case of NXDOMAIN and friends,
+	// otherwise it is empty.
+	//
+	// Pre-allocate up to a certain limit, since p.header is
+	// untrusted data.
+	n := int(p.header.authorities)
+	if n > 10 {
+		n = 10
+	}
+	as := make([]Resource, 0, n)
+	for {
+		a, err := p.Authority()
+		if err == ErrSectionDone {
+			return as, nil
+		}
+		if err != nil {
+			return nil, err
+		}
+		as = append(as, a)
+	}
+}
+
+// SkipAuthority skips a single Authority Resource.
+func (p *Parser) SkipAuthority() error {
+	return p.skipResource(sectionAuthorities)
+}
+
+// SkipAllAuthorities skips all Authority Resources.
+func (p *Parser) SkipAllAuthorities() error {
+	for {
+		if err := p.SkipAuthority(); err == ErrSectionDone {
+			return nil
+		} else if err != nil {
+			return err
+		}
+	}
+}
+
+// AdditionalHeader parses a single Additional ResourceHeader.
+func (p *Parser) AdditionalHeader() (ResourceHeader, error) {
+	return p.resourceHeader(sectionAdditionals)
+}
+
+// Additional parses a single Additional Resource.
+func (p *Parser) Additional() (Resource, error) {
+	return p.resource(sectionAdditionals)
+}
+
+// AllAdditionals parses all Additional Resources.
+func (p *Parser) AllAdditionals() ([]Resource, error) {
+	// Additionals usually contain OPT, and sometimes A/AAAA
+	// glue records.
+	//
+	// Pre-allocate up to a certain limit, since p.header is
+	// untrusted data.
+	n := int(p.header.additionals)
+	if n > 10 {
+		n = 10
+	}
+	as := make([]Resource, 0, n)
+	for {
+		a, err := p.Additional()
+		if err == ErrSectionDone {
+			return as, nil
+		}
+		if err != nil {
+			return nil, err
+		}
+		as = append(as, a)
+	}
+}
+
+// SkipAdditional skips a single Additional Resource.
+func (p *Parser) SkipAdditional() error {
+	return p.skipResource(sectionAdditionals)
+}
+
+// SkipAllAdditionals skips all Additional Resources.
+func (p *Parser) SkipAllAdditionals() error {
+	for {
+		if err := p.SkipAdditional(); err == ErrSectionDone {
+			return nil
+		} else if err != nil {
+			return err
+		}
+	}
+}
+
+// CNAMEResource parses a single CNAMEResource.
+//
+// One of the XXXHeader methods must have been called before calling this
+// method.
+func (p *Parser) CNAMEResource() (CNAMEResource, error) {
+	if !p.resHeaderValid || p.resHeader.Type != TypeCNAME {
+		return CNAMEResource{}, ErrNotStarted
+	}
+	r, err := unpackCNAMEResource(p.msg, p.off)
+	if err != nil {
+		return CNAMEResource{}, err
+	}
+	p.off += int(p.resHeader.Length)
+	p.resHeaderValid = false
+	p.index++
+	return r, nil
+}
+
+// MXResource parses a single MXResource.
+//
+// One of the XXXHeader methods must have been called before calling this
+// method.
+func (p *Parser) MXResource() (MXResource, error) {
+	if !p.resHeaderValid || p.resHeader.Type != TypeMX {
+		return MXResource{}, ErrNotStarted
+	}
+	r, err := unpackMXResource(p.msg, p.off)
+	if err != nil {
+		return MXResource{}, err
+	}
+	p.off += int(p.resHeader.Length)
+	p.resHeaderValid = false
+	p.index++
+	return r, nil
+}
+
+// NSResource parses a single NSResource.
+//
+// One of the XXXHeader methods must have been called before calling this
+// method.
+func (p *Parser) NSResource() (NSResource, error) {
+	if !p.resHeaderValid || p.resHeader.Type != TypeNS {
+		return NSResource{}, ErrNotStarted
+	}
+	r, err := unpackNSResource(p.msg, p.off)
+	if err != nil {
+		return NSResource{}, err
+	}
+	p.off += int(p.resHeader.Length)
+	p.resHeaderValid = false
+	p.index++
+	return r, nil
+}
+
+// PTRResource parses a single PTRResource.
+//
+// One of the XXXHeader methods must have been called before calling this
+// method.
+func (p *Parser) PTRResource() (PTRResource, error) {
+	if !p.resHeaderValid || p.resHeader.Type != TypePTR {
+		return PTRResource{}, ErrNotStarted
+	}
+	r, err := unpackPTRResource(p.msg, p.off)
+	if err != nil {
+		return PTRResource{}, err
+	}
+	p.off += int(p.resHeader.Length)
+	p.resHeaderValid = false
+	p.index++
+	return r, nil
+}
+
+// SOAResource parses a single SOAResource.
+//
+// One of the XXXHeader methods must have been called before calling this
+// method.
+func (p *Parser) SOAResource() (SOAResource, error) {
+	if !p.resHeaderValid || p.resHeader.Type != TypeSOA {
+		return SOAResource{}, ErrNotStarted
+	}
+	r, err := unpackSOAResource(p.msg, p.off)
+	if err != nil {
+		return SOAResource{}, err
+	}
+	p.off += int(p.resHeader.Length)
+	p.resHeaderValid = false
+	p.index++
+	return r, nil
+}
+
+// TXTResource parses a single TXTResource.
+//
+// One of the XXXHeader methods must have been called before calling this
+// method.
+func (p *Parser) TXTResource() (TXTResource, error) {
+	if !p.resHeaderValid || p.resHeader.Type != TypeTXT {
+		return TXTResource{}, ErrNotStarted
+	}
+	r, err := unpackTXTResource(p.msg, p.off, p.resHeader.Length)
+	if err != nil {
+		return TXTResource{}, err
+	}
+	p.off += int(p.resHeader.Length)
+	p.resHeaderValid = false
+	p.index++
+	return r, nil
+}
+
+// SRVResource parses a single SRVResource.
+//
+// One of the XXXHeader methods must have been called before calling this
+// method.
+func (p *Parser) SRVResource() (SRVResource, error) {
+	if !p.resHeaderValid || p.resHeader.Type != TypeSRV {
+		return SRVResource{}, ErrNotStarted
+	}
+	r, err := unpackSRVResource(p.msg, p.off)
+	if err != nil {
+		return SRVResource{}, err
+	}
+	p.off += int(p.resHeader.Length)
+	p.resHeaderValid = false
+	p.index++
+	return r, nil
+}
+
+// AResource parses a single AResource.
+//
+// One of the XXXHeader methods must have been called before calling this
+// method.
+func (p *Parser) AResource() (AResource, error) {
+	if !p.resHeaderValid || p.resHeader.Type != TypeA {
+		return AResource{}, ErrNotStarted
+	}
+	r, err := unpackAResource(p.msg, p.off)
+	if err != nil {
+		return AResource{}, err
+	}
+	p.off += int(p.resHeader.Length)
+	p.resHeaderValid = false
+	p.index++
+	return r, nil
+}
+
+// AAAAResource parses a single AAAAResource.
+//
+// One of the XXXHeader methods must have been called before calling this
+// method.
+func (p *Parser) AAAAResource() (AAAAResource, error) {
+	if !p.resHeaderValid || p.resHeader.Type != TypeAAAA {
+		return AAAAResource{}, ErrNotStarted
+	}
+	r, err := unpackAAAAResource(p.msg, p.off)
+	if err != nil {
+		return AAAAResource{}, err
+	}
+	p.off += int(p.resHeader.Length)
+	p.resHeaderValid = false
+	p.index++
+	return r, nil
+}
+
+// OPTResource parses a single OPTResource.
+//
+// One of the XXXHeader methods must have been called before calling this
+// method.
+func (p *Parser) OPTResource() (OPTResource, error) {
+	if !p.resHeaderValid || p.resHeader.Type != TypeOPT {
+		return OPTResource{}, ErrNotStarted
+	}
+	r, err := unpackOPTResource(p.msg, p.off, p.resHeader.Length)
+	if err != nil {
+		return OPTResource{}, err
+	}
+	p.off += int(p.resHeader.Length)
+	p.resHeaderValid = false
+	p.index++
+	return r, nil
+}
+
+// Unpack parses a full Message.
+func (m *Message) Unpack(msg []byte) error {
+	var p Parser
+	var err error
+	if m.Header, err = p.Start(msg); err != nil {
+		return err
+	}
+	if m.Questions, err = p.AllQuestions(); err != nil {
+		return err
+	}
+	if m.Answers, err = p.AllAnswers(); err != nil {
+		return err
+	}
+	if m.Authorities, err = p.AllAuthorities(); err != nil {
+		return err
+	}
+	if m.Additionals, err = p.AllAdditionals(); err != nil {
+		return err
+	}
+	return nil
+}
+
+// Pack packs a full Message.
+func (m *Message) Pack() ([]byte, error) {
+	return m.AppendPack(make([]byte, 0, packStartingCap))
+}
+
+// AppendPack is like Pack but appends the full Message to b and returns the
+// extended buffer.
+func (m *Message) AppendPack(b []byte) ([]byte, error) {
+	// Validate the lengths. It is very unlikely that anyone will try to
+	// pack more than 65535 of any particular type, but it is possible and
+	// we should fail gracefully.
+	if len(m.Questions) > int(^uint16(0)) {
+		return nil, errTooManyQuestions
+	}
+	if len(m.Answers) > int(^uint16(0)) {
+		return nil, errTooManyAnswers
+	}
+	if len(m.Authorities) > int(^uint16(0)) {
+		return nil, errTooManyAuthorities
+	}
+	if len(m.Additionals) > int(^uint16(0)) {
+		return nil, errTooManyAdditionals
+	}
+
+	var h header
+	h.id, h.bits = m.Header.pack()
+
+	h.questions = uint16(len(m.Questions))
+	h.answers = uint16(len(m.Answers))
+	h.authorities = uint16(len(m.Authorities))
+	h.additionals = uint16(len(m.Additionals))
+
+	compressionOff := len(b)
+	msg := h.pack(b)
+
+	// RFC 1035 allows (but does not require) compression for packing. RFC
+	// 1035 requires unpacking implementations to support compression, so
+	// unconditionally enabling it is fine.
+	//
+	// DNS lookups are typically done over UDP, and RFC 1035 states that UDP
+	// DNS messages can be a maximum of 512 bytes long. Without compression,
+	// many DNS response messages are over this limit, so enabling
+	// compression will help ensure compliance.
+	compression := map[string]int{}
+
+	for i := range m.Questions {
+		var err error
+		if msg, err = m.Questions[i].pack(msg, compression, compressionOff); err != nil {
+			return nil, &nestedError{"packing Question", err}
+		}
+	}
+	for i := range m.Answers {
+		var err error
+		if msg, err = m.Answers[i].pack(msg, compression, compressionOff); err != nil {
+			return nil, &nestedError{"packing Answer", err}
+		}
+	}
+	for i := range m.Authorities {
+		var err error
+		if msg, err = m.Authorities[i].pack(msg, compression, compressionOff); err != nil {
+			return nil, &nestedError{"packing Authority", err}
+		}
+	}
+	for i := range m.Additionals {
+		var err error
+		if msg, err = m.Additionals[i].pack(msg, compression, compressionOff); err != nil {
+			return nil, &nestedError{"packing Additional", err}
+		}
+	}
+
+	return msg, nil
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (m *Message) GoString() string {
+	s := "dnsmessage.Message{Header: " + m.Header.GoString() + ", " +
+		"Questions: []dnsmessage.Question{"
+	if len(m.Questions) > 0 {
+		s += m.Questions[0].GoString()
+		for _, q := range m.Questions[1:] {
+			s += ", " + q.GoString()
+		}
+	}
+	s += "}, Answers: []dnsmessage.Resource{"
+	if len(m.Answers) > 0 {
+		s += m.Answers[0].GoString()
+		for _, a := range m.Answers[1:] {
+			s += ", " + a.GoString()
+		}
+	}
+	s += "}, Authorities: []dnsmessage.Resource{"
+	if len(m.Authorities) > 0 {
+		s += m.Authorities[0].GoString()
+		for _, a := range m.Authorities[1:] {
+			s += ", " + a.GoString()
+		}
+	}
+	s += "}, Additionals: []dnsmessage.Resource{"
+	if len(m.Additionals) > 0 {
+		s += m.Additionals[0].GoString()
+		for _, a := range m.Additionals[1:] {
+			s += ", " + a.GoString()
+		}
+	}
+	return s + "}}"
+}
+
+// A Builder allows incrementally packing a DNS message.
+//
+// Example usage:
+//	buf := make([]byte, 2, 514)
+//	b := NewBuilder(buf, Header{...})
+//	b.EnableCompression()
+//	// Optionally start a section and add things to that section.
+//	// Repeat adding sections as necessary.
+//	buf, err := b.Finish()
+//	// If err is nil, buf[2:] will contain the built bytes.
+type Builder struct {
+	// msg is the storage for the message being built.
+	msg []byte
+
+	// section keeps track of the current section being built.
+	section section
+
+	// header keeps track of what should go in the header when Finish is
+	// called.
+	header header
+
+	// start is the starting index of the bytes allocated in msg for header.
+	start int
+
+	// compression is a mapping from name suffixes to their starting index
+	// in msg.
+	compression map[string]int
+}
+
+// NewBuilder creates a new builder with compression disabled.
+//
+// Note: Most users will want to immediately enable compression with the
+// EnableCompression method. See that method's comment for why you may or may
+// not want to enable compression.
+//
+// The DNS message is appended to the provided initial buffer buf (which may be
+// nil) as it is built. The final message is returned by the (*Builder).Finish
+// method, which may return the same underlying array if there was sufficient
+// capacity in the slice.
+func NewBuilder(buf []byte, h Header) Builder {
+	if buf == nil {
+		buf = make([]byte, 0, packStartingCap)
+	}
+	b := Builder{msg: buf, start: len(buf)}
+	b.header.id, b.header.bits = h.pack()
+	var hb [headerLen]byte
+	b.msg = append(b.msg, hb[:]...)
+	b.section = sectionHeader
+	return b
+}
+
+// EnableCompression enables compression in the Builder.
+//
+// Leaving compression disabled avoids compression related allocations, but can
+// result in larger message sizes. Be careful with this mode as it can cause
+// messages to exceed the UDP size limit.
+//
+// According to RFC 1035, section 4.1.4, the use of compression is optional, but
+// all implementations must accept both compressed and uncompressed DNS
+// messages.
+//
+// Compression should be enabled before any sections are added for best results.
+func (b *Builder) EnableCompression() {
+	b.compression = map[string]int{}
+}
+
+func (b *Builder) startCheck(s section) error {
+	if b.section <= sectionNotStarted {
+		return ErrNotStarted
+	}
+	if b.section > s {
+		return ErrSectionDone
+	}
+	return nil
+}
+
+// StartQuestions prepares the builder for packing Questions.
+func (b *Builder) StartQuestions() error {
+	if err := b.startCheck(sectionQuestions); err != nil {
+		return err
+	}
+	b.section = sectionQuestions
+	return nil
+}
+
+// StartAnswers prepares the builder for packing Answers.
+func (b *Builder) StartAnswers() error {
+	if err := b.startCheck(sectionAnswers); err != nil {
+		return err
+	}
+	b.section = sectionAnswers
+	return nil
+}
+
+// StartAuthorities prepares the builder for packing Authorities.
+func (b *Builder) StartAuthorities() error {
+	if err := b.startCheck(sectionAuthorities); err != nil {
+		return err
+	}
+	b.section = sectionAuthorities
+	return nil
+}
+
+// StartAdditionals prepares the builder for packing Additionals.
+func (b *Builder) StartAdditionals() error {
+	if err := b.startCheck(sectionAdditionals); err != nil {
+		return err
+	}
+	b.section = sectionAdditionals
+	return nil
+}
+
+func (b *Builder) incrementSectionCount() error {
+	var count *uint16
+	var err error
+	switch b.section {
+	case sectionQuestions:
+		count = &b.header.questions
+		err = errTooManyQuestions
+	case sectionAnswers:
+		count = &b.header.answers
+		err = errTooManyAnswers
+	case sectionAuthorities:
+		count = &b.header.authorities
+		err = errTooManyAuthorities
+	case sectionAdditionals:
+		count = &b.header.additionals
+		err = errTooManyAdditionals
+	}
+	if *count == ^uint16(0) {
+		return err
+	}
+	*count++
+	return nil
+}
+
+// Question adds a single Question.
+func (b *Builder) Question(q Question) error {
+	if b.section < sectionQuestions {
+		return ErrNotStarted
+	}
+	if b.section > sectionQuestions {
+		return ErrSectionDone
+	}
+	msg, err := q.pack(b.msg, b.compression, b.start)
+	if err != nil {
+		return err
+	}
+	if err := b.incrementSectionCount(); err != nil {
+		return err
+	}
+	b.msg = msg
+	return nil
+}
+
+func (b *Builder) checkResourceSection() error {
+	if b.section < sectionAnswers {
+		return ErrNotStarted
+	}
+	if b.section > sectionAdditionals {
+		return ErrSectionDone
+	}
+	return nil
+}
+
+// CNAMEResource adds a single CNAMEResource.
+func (b *Builder) CNAMEResource(h ResourceHeader, r CNAMEResource) error {
+	if err := b.checkResourceSection(); err != nil {
+		return err
+	}
+	h.Type = r.realType()
+	msg, lenOff, err := h.pack(b.msg, b.compression, b.start)
+	if err != nil {
+		return &nestedError{"ResourceHeader", err}
+	}
+	preLen := len(msg)
+	if msg, err = r.pack(msg, b.compression, b.start); err != nil {
+		return &nestedError{"CNAMEResource body", err}
+	}
+	if err := h.fixLen(msg, lenOff, preLen); err != nil {
+		return err
+	}
+	if err := b.incrementSectionCount(); err != nil {
+		return err
+	}
+	b.msg = msg
+	return nil
+}
+
+// MXResource adds a single MXResource.
+func (b *Builder) MXResource(h ResourceHeader, r MXResource) error {
+	if err := b.checkResourceSection(); err != nil {
+		return err
+	}
+	h.Type = r.realType()
+	msg, lenOff, err := h.pack(b.msg, b.compression, b.start)
+	if err != nil {
+		return &nestedError{"ResourceHeader", err}
+	}
+	preLen := len(msg)
+	if msg, err = r.pack(msg, b.compression, b.start); err != nil {
+		return &nestedError{"MXResource body", err}
+	}
+	if err := h.fixLen(msg, lenOff, preLen); err != nil {
+		return err
+	}
+	if err := b.incrementSectionCount(); err != nil {
+		return err
+	}
+	b.msg = msg
+	return nil
+}
+
+// NSResource adds a single NSResource.
+func (b *Builder) NSResource(h ResourceHeader, r NSResource) error {
+	if err := b.checkResourceSection(); err != nil {
+		return err
+	}
+	h.Type = r.realType()
+	msg, lenOff, err := h.pack(b.msg, b.compression, b.start)
+	if err != nil {
+		return &nestedError{"ResourceHeader", err}
+	}
+	preLen := len(msg)
+	if msg, err = r.pack(msg, b.compression, b.start); err != nil {
+		return &nestedError{"NSResource body", err}
+	}
+	if err := h.fixLen(msg, lenOff, preLen); err != nil {
+		return err
+	}
+	if err := b.incrementSectionCount(); err != nil {
+		return err
+	}
+	b.msg = msg
+	return nil
+}
+
+// PTRResource adds a single PTRResource.
+func (b *Builder) PTRResource(h ResourceHeader, r PTRResource) error {
+	if err := b.checkResourceSection(); err != nil {
+		return err
+	}
+	h.Type = r.realType()
+	msg, lenOff, err := h.pack(b.msg, b.compression, b.start)
+	if err != nil {
+		return &nestedError{"ResourceHeader", err}
+	}
+	preLen := len(msg)
+	if msg, err = r.pack(msg, b.compression, b.start); err != nil {
+		return &nestedError{"PTRResource body", err}
+	}
+	if err := h.fixLen(msg, lenOff, preLen); err != nil {
+		return err
+	}
+	if err := b.incrementSectionCount(); err != nil {
+		return err
+	}
+	b.msg = msg
+	return nil
+}
+
+// SOAResource adds a single SOAResource.
+func (b *Builder) SOAResource(h ResourceHeader, r SOAResource) error {
+	if err := b.checkResourceSection(); err != nil {
+		return err
+	}
+	h.Type = r.realType()
+	msg, lenOff, err := h.pack(b.msg, b.compression, b.start)
+	if err != nil {
+		return &nestedError{"ResourceHeader", err}
+	}
+	preLen := len(msg)
+	if msg, err = r.pack(msg, b.compression, b.start); err != nil {
+		return &nestedError{"SOAResource body", err}
+	}
+	if err := h.fixLen(msg, lenOff, preLen); err != nil {
+		return err
+	}
+	if err := b.incrementSectionCount(); err != nil {
+		return err
+	}
+	b.msg = msg
+	return nil
+}
+
+// TXTResource adds a single TXTResource.
+func (b *Builder) TXTResource(h ResourceHeader, r TXTResource) error {
+	if err := b.checkResourceSection(); err != nil {
+		return err
+	}
+	h.Type = r.realType()
+	msg, lenOff, err := h.pack(b.msg, b.compression, b.start)
+	if err != nil {
+		return &nestedError{"ResourceHeader", err}
+	}
+	preLen := len(msg)
+	if msg, err = r.pack(msg, b.compression, b.start); err != nil {
+		return &nestedError{"TXTResource body", err}
+	}
+	if err := h.fixLen(msg, lenOff, preLen); err != nil {
+		return err
+	}
+	if err := b.incrementSectionCount(); err != nil {
+		return err
+	}
+	b.msg = msg
+	return nil
+}
+
+// SRVResource adds a single SRVResource.
+func (b *Builder) SRVResource(h ResourceHeader, r SRVResource) error {
+	if err := b.checkResourceSection(); err != nil {
+		return err
+	}
+	h.Type = r.realType()
+	msg, lenOff, err := h.pack(b.msg, b.compression, b.start)
+	if err != nil {
+		return &nestedError{"ResourceHeader", err}
+	}
+	preLen := len(msg)
+	if msg, err = r.pack(msg, b.compression, b.start); err != nil {
+		return &nestedError{"SRVResource body", err}
+	}
+	if err := h.fixLen(msg, lenOff, preLen); err != nil {
+		return err
+	}
+	if err := b.incrementSectionCount(); err != nil {
+		return err
+	}
+	b.msg = msg
+	return nil
+}
+
+// AResource adds a single AResource.
+func (b *Builder) AResource(h ResourceHeader, r AResource) error {
+	if err := b.checkResourceSection(); err != nil {
+		return err
+	}
+	h.Type = r.realType()
+	msg, lenOff, err := h.pack(b.msg, b.compression, b.start)
+	if err != nil {
+		return &nestedError{"ResourceHeader", err}
+	}
+	preLen := len(msg)
+	if msg, err = r.pack(msg, b.compression, b.start); err != nil {
+		return &nestedError{"AResource body", err}
+	}
+	if err := h.fixLen(msg, lenOff, preLen); err != nil {
+		return err
+	}
+	if err := b.incrementSectionCount(); err != nil {
+		return err
+	}
+	b.msg = msg
+	return nil
+}
+
+// AAAAResource adds a single AAAAResource.
+func (b *Builder) AAAAResource(h ResourceHeader, r AAAAResource) error {
+	if err := b.checkResourceSection(); err != nil {
+		return err
+	}
+	h.Type = r.realType()
+	msg, lenOff, err := h.pack(b.msg, b.compression, b.start)
+	if err != nil {
+		return &nestedError{"ResourceHeader", err}
+	}
+	preLen := len(msg)
+	if msg, err = r.pack(msg, b.compression, b.start); err != nil {
+		return &nestedError{"AAAAResource body", err}
+	}
+	if err := h.fixLen(msg, lenOff, preLen); err != nil {
+		return err
+	}
+	if err := b.incrementSectionCount(); err != nil {
+		return err
+	}
+	b.msg = msg
+	return nil
+}
+
+// OPTResource adds a single OPTResource.
+func (b *Builder) OPTResource(h ResourceHeader, r OPTResource) error {
+	if err := b.checkResourceSection(); err != nil {
+		return err
+	}
+	h.Type = r.realType()
+	msg, lenOff, err := h.pack(b.msg, b.compression, b.start)
+	if err != nil {
+		return &nestedError{"ResourceHeader", err}
+	}
+	preLen := len(msg)
+	if msg, err = r.pack(msg, b.compression, b.start); err != nil {
+		return &nestedError{"OPTResource body", err}
+	}
+	if err := h.fixLen(msg, lenOff, preLen); err != nil {
+		return err
+	}
+	if err := b.incrementSectionCount(); err != nil {
+		return err
+	}
+	b.msg = msg
+	return nil
+}
+
+// Finish ends message building and generates a binary message.
+func (b *Builder) Finish() ([]byte, error) {
+	if b.section < sectionHeader {
+		return nil, ErrNotStarted
+	}
+	b.section = sectionDone
+	// Space for the header was allocated in NewBuilder.
+	b.header.pack(b.msg[b.start:b.start])
+	return b.msg, nil
+}
+
+// A ResourceHeader is the header of a DNS resource record. There are
+// many types of DNS resource records, but they all share the same header.
+type ResourceHeader struct {
+	// Name is the domain name for which this resource record pertains.
+	Name Name
+
+	// Type is the type of DNS resource record.
+	//
+	// This field will be set automatically during packing.
+	Type Type
+
+	// Class is the class of network to which this DNS resource record
+	// pertains.
+	Class Class
+
+	// TTL is the length of time (measured in seconds) which this resource
+	// record is valid for (time to live). All Resources in a set should
+	// have the same TTL (RFC 2181 Section 5.2).
+	TTL uint32
+
+	// Length is the length of data in the resource record after the header.
+	//
+	// This field will be set automatically during packing.
+	Length uint16
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (h *ResourceHeader) GoString() string {
+	return "dnsmessage.ResourceHeader{" +
+		"Name: " + h.Name.GoString() + ", " +
+		"Type: " + h.Type.GoString() + ", " +
+		"Class: " + h.Class.GoString() + ", " +
+		"TTL: " + printUint32(h.TTL) + ", " +
+		"Length: " + printUint16(h.Length) + "}"
+}
+
+// pack appends the wire format of the ResourceHeader to oldMsg.
+//
+// lenOff is the offset in msg where the Length field was packed.
+func (h *ResourceHeader) pack(oldMsg []byte, compression map[string]int, compressionOff int) (msg []byte, lenOff int, err error) {
+	msg = oldMsg
+	if msg, err = h.Name.pack(msg, compression, compressionOff); err != nil {
+		return oldMsg, 0, &nestedError{"Name", err}
+	}
+	msg = packType(msg, h.Type)
+	msg = packClass(msg, h.Class)
+	msg = packUint32(msg, h.TTL)
+	lenOff = len(msg)
+	msg = packUint16(msg, h.Length)
+	return msg, lenOff, nil
+}
+
+func (h *ResourceHeader) unpack(msg []byte, off int) (int, error) {
+	newOff := off
+	var err error
+	if newOff, err = h.Name.unpack(msg, newOff); err != nil {
+		return off, &nestedError{"Name", err}
+	}
+	if h.Type, newOff, err = unpackType(msg, newOff); err != nil {
+		return off, &nestedError{"Type", err}
+	}
+	if h.Class, newOff, err = unpackClass(msg, newOff); err != nil {
+		return off, &nestedError{"Class", err}
+	}
+	if h.TTL, newOff, err = unpackUint32(msg, newOff); err != nil {
+		return off, &nestedError{"TTL", err}
+	}
+	if h.Length, newOff, err = unpackUint16(msg, newOff); err != nil {
+		return off, &nestedError{"Length", err}
+	}
+	return newOff, nil
+}
+
+// fixLen updates a packed ResourceHeader to include the length of the
+// ResourceBody.
+//
+// lenOff is the offset of the ResourceHeader.Length field in msg.
+//
+// preLen is the length that msg was before the ResourceBody was packed.
+func (h *ResourceHeader) fixLen(msg []byte, lenOff int, preLen int) error {
+	conLen := len(msg) - preLen
+	if conLen > int(^uint16(0)) {
+		return errResTooLong
+	}
+
+	// Fill in the length now that we know how long the content is.
+	packUint16(msg[lenOff:lenOff], uint16(conLen))
+	h.Length = uint16(conLen)
+
+	return nil
+}
+
+// EDNS(0) wire constants.
+const (
+	edns0Version = 0
+
+	edns0DNSSECOK     = 0x00008000
+	ednsVersionMask   = 0x00ff0000
+	edns0DNSSECOKMask = 0x00ff8000
+)
+
+// SetEDNS0 configures h for EDNS(0).
+//
+// The provided extRCode must be an extedned RCode.
+func (h *ResourceHeader) SetEDNS0(udpPayloadLen int, extRCode RCode, dnssecOK bool) error {
+	h.Name = Name{Data: [nameLen]byte{'.'}, Length: 1} // RFC 6891 section 6.1.2
+	h.Type = TypeOPT
+	h.Class = Class(udpPayloadLen)
+	h.TTL = uint32(extRCode) >> 4 << 24
+	if dnssecOK {
+		h.TTL |= edns0DNSSECOK
+	}
+	return nil
+}
+
+// DNSSECAllowed reports whether the DNSSEC OK bit is set.
+func (h *ResourceHeader) DNSSECAllowed() bool {
+	return h.TTL&edns0DNSSECOKMask == edns0DNSSECOK // RFC 6891 section 6.1.3
+}
+
+// ExtendedRCode returns an extended RCode.
+//
+// The provided rcode must be the RCode in DNS message header.
+func (h *ResourceHeader) ExtendedRCode(rcode RCode) RCode {
+	if h.TTL&ednsVersionMask == edns0Version { // RFC 6891 section 6.1.3
+		return RCode(h.TTL>>24<<4) | rcode
+	}
+	return rcode
+}
+
+func skipResource(msg []byte, off int) (int, error) {
+	newOff, err := skipName(msg, off)
+	if err != nil {
+		return off, &nestedError{"Name", err}
+	}
+	if newOff, err = skipType(msg, newOff); err != nil {
+		return off, &nestedError{"Type", err}
+	}
+	if newOff, err = skipClass(msg, newOff); err != nil {
+		return off, &nestedError{"Class", err}
+	}
+	if newOff, err = skipUint32(msg, newOff); err != nil {
+		return off, &nestedError{"TTL", err}
+	}
+	length, newOff, err := unpackUint16(msg, newOff)
+	if err != nil {
+		return off, &nestedError{"Length", err}
+	}
+	if newOff += int(length); newOff > len(msg) {
+		return off, errResourceLen
+	}
+	return newOff, nil
+}
+
+// packUint16 appends the wire format of field to msg.
+func packUint16(msg []byte, field uint16) []byte {
+	return append(msg, byte(field>>8), byte(field))
+}
+
+func unpackUint16(msg []byte, off int) (uint16, int, error) {
+	if off+uint16Len > len(msg) {
+		return 0, off, errBaseLen
+	}
+	return uint16(msg[off])<<8 | uint16(msg[off+1]), off + uint16Len, nil
+}
+
+func skipUint16(msg []byte, off int) (int, error) {
+	if off+uint16Len > len(msg) {
+		return off, errBaseLen
+	}
+	return off + uint16Len, nil
+}
+
+// packType appends the wire format of field to msg.
+func packType(msg []byte, field Type) []byte {
+	return packUint16(msg, uint16(field))
+}
+
+func unpackType(msg []byte, off int) (Type, int, error) {
+	t, o, err := unpackUint16(msg, off)
+	return Type(t), o, err
+}
+
+func skipType(msg []byte, off int) (int, error) {
+	return skipUint16(msg, off)
+}
+
+// packClass appends the wire format of field to msg.
+func packClass(msg []byte, field Class) []byte {
+	return packUint16(msg, uint16(field))
+}
+
+func unpackClass(msg []byte, off int) (Class, int, error) {
+	c, o, err := unpackUint16(msg, off)
+	return Class(c), o, err
+}
+
+func skipClass(msg []byte, off int) (int, error) {
+	return skipUint16(msg, off)
+}
+
+// packUint32 appends the wire format of field to msg.
+func packUint32(msg []byte, field uint32) []byte {
+	return append(
+		msg,
+		byte(field>>24),
+		byte(field>>16),
+		byte(field>>8),
+		byte(field),
+	)
+}
+
+func unpackUint32(msg []byte, off int) (uint32, int, error) {
+	if off+uint32Len > len(msg) {
+		return 0, off, errBaseLen
+	}
+	v := uint32(msg[off])<<24 | uint32(msg[off+1])<<16 | uint32(msg[off+2])<<8 | uint32(msg[off+3])
+	return v, off + uint32Len, nil
+}
+
+func skipUint32(msg []byte, off int) (int, error) {
+	if off+uint32Len > len(msg) {
+		return off, errBaseLen
+	}
+	return off + uint32Len, nil
+}
+
+// packText appends the wire format of field to msg.
+func packText(msg []byte, field string) ([]byte, error) {
+	l := len(field)
+	if l > 255 {
+		return nil, errStringTooLong
+	}
+	msg = append(msg, byte(l))
+	msg = append(msg, field...)
+
+	return msg, nil
+}
+
+func unpackText(msg []byte, off int) (string, int, error) {
+	if off >= len(msg) {
+		return "", off, errBaseLen
+	}
+	beginOff := off + 1
+	endOff := beginOff + int(msg[off])
+	if endOff > len(msg) {
+		return "", off, errCalcLen
+	}
+	return string(msg[beginOff:endOff]), endOff, nil
+}
+
+// packBytes appends the wire format of field to msg.
+func packBytes(msg []byte, field []byte) []byte {
+	return append(msg, field...)
+}
+
+func unpackBytes(msg []byte, off int, field []byte) (int, error) {
+	newOff := off + len(field)
+	if newOff > len(msg) {
+		return off, errBaseLen
+	}
+	copy(field, msg[off:newOff])
+	return newOff, nil
+}
+
+const nameLen = 255
+
+// A Name is a non-encoded domain name. It is used instead of strings to avoid
+// allocations.
+type Name struct {
+	Data   [nameLen]byte
+	Length uint8
+}
+
+// NewName creates a new Name from a string.
+func NewName(name string) (Name, error) {
+	if len([]byte(name)) > nameLen {
+		return Name{}, errCalcLen
+	}
+	n := Name{Length: uint8(len(name))}
+	copy(n.Data[:], []byte(name))
+	return n, nil
+}
+
+// MustNewName creates a new Name from a string and panics on error.
+func MustNewName(name string) Name {
+	n, err := NewName(name)
+	if err != nil {
+		panic("creating name: " + err.Error())
+	}
+	return n
+}
+
+// String implements fmt.Stringer.String.
+func (n Name) String() string {
+	return string(n.Data[:n.Length])
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (n *Name) GoString() string {
+	return `dnsmessage.MustNewName("` + printString(n.Data[:n.Length]) + `")`
+}
+
+// pack appends the wire format of the Name to msg.
+//
+// Domain names are a sequence of counted strings split at the dots. They end
+// with a zero-length string. Compression can be used to reuse domain suffixes.
+//
+// The compression map will be updated with new domain suffixes. If compression
+// is nil, compression will not be used.
+func (n *Name) pack(msg []byte, compression map[string]int, compressionOff int) ([]byte, error) {
+	oldMsg := msg
+
+	// Add a trailing dot to canonicalize name.
+	if n.Length == 0 || n.Data[n.Length-1] != '.' {
+		return oldMsg, errNonCanonicalName
+	}
+
+	// Allow root domain.
+	if n.Data[0] == '.' && n.Length == 1 {
+		return append(msg, 0), nil
+	}
+
+	// Emit sequence of counted strings, chopping at dots.
+	for i, begin := 0, 0; i < int(n.Length); i++ {
+		// Check for the end of the segment.
+		if n.Data[i] == '.' {
+			// The two most significant bits have special meaning.
+			// It isn't allowed for segments to be long enough to
+			// need them.
+			if i-begin >= 1<<6 {
+				return oldMsg, errSegTooLong
+			}
+
+			// Segments must have a non-zero length.
+			if i-begin == 0 {
+				return oldMsg, errZeroSegLen
+			}
+
+			msg = append(msg, byte(i-begin))
+
+			for j := begin; j < i; j++ {
+				msg = append(msg, n.Data[j])
+			}
+
+			begin = i + 1
+			continue
+		}
+
+		// We can only compress domain suffixes starting with a new
+		// segment. A pointer is two bytes with the two most significant
+		// bits set to 1 to indicate that it is a pointer.
+		if (i == 0 || n.Data[i-1] == '.') && compression != nil {
+			if ptr, ok := compression[string(n.Data[i:])]; ok {
+				// Hit. Emit a pointer instead of the rest of
+				// the domain.
+				return append(msg, byte(ptr>>8|0xC0), byte(ptr)), nil
+			}
+
+			// Miss. Add the suffix to the compression table if the
+			// offset can be stored in the available 14 bytes.
+			if len(msg) <= int(^uint16(0)>>2) {
+				compression[string(n.Data[i:])] = len(msg) - compressionOff
+			}
+		}
+	}
+	return append(msg, 0), nil
+}
+
+// unpack unpacks a domain name.
+func (n *Name) unpack(msg []byte, off int) (int, error) {
+	return n.unpackCompressed(msg, off, true /* allowCompression */)
+}
+
+func (n *Name) unpackCompressed(msg []byte, off int, allowCompression bool) (int, error) {
+	// currOff is the current working offset.
+	currOff := off
+
+	// newOff is the offset where the next record will start. Pointers lead
+	// to data that belongs to other names and thus doesn't count towards to
+	// the usage of this name.
+	newOff := off
+
+	// ptr is the number of pointers followed.
+	var ptr int
+
+	// Name is a slice representation of the name data.
+	name := n.Data[:0]
+
+Loop:
+	for {
+		if currOff >= len(msg) {
+			return off, errBaseLen
+		}
+		c := int(msg[currOff])
+		currOff++
+		switch c & 0xC0 {
+		case 0x00: // String segment
+			if c == 0x00 {
+				// A zero length signals the end of the name.
+				break Loop
+			}
+			endOff := currOff + c
+			if endOff > len(msg) {
+				return off, errCalcLen
+			}
+			name = append(name, msg[currOff:endOff]...)
+			name = append(name, '.')
+			currOff = endOff
+		case 0xC0: // Pointer
+			if !allowCompression {
+				return off, errCompressedSRV
+			}
+			if currOff >= len(msg) {
+				return off, errInvalidPtr
+			}
+			c1 := msg[currOff]
+			currOff++
+			if ptr == 0 {
+				newOff = currOff
+			}
+			// Don't follow too many pointers, maybe there's a loop.
+			if ptr++; ptr > 10 {
+				return off, errTooManyPtr
+			}
+			currOff = (c^0xC0)<<8 | int(c1)
+		default:
+			// Prefixes 0x80 and 0x40 are reserved.
+			return off, errReserved
+		}
+	}
+	if len(name) == 0 {
+		name = append(name, '.')
+	}
+	if len(name) > len(n.Data) {
+		return off, errCalcLen
+	}
+	n.Length = uint8(len(name))
+	if ptr == 0 {
+		newOff = currOff
+	}
+	return newOff, nil
+}
+
+func skipName(msg []byte, off int) (int, error) {
+	// newOff is the offset where the next record will start. Pointers lead
+	// to data that belongs to other names and thus doesn't count towards to
+	// the usage of this name.
+	newOff := off
+
+Loop:
+	for {
+		if newOff >= len(msg) {
+			return off, errBaseLen
+		}
+		c := int(msg[newOff])
+		newOff++
+		switch c & 0xC0 {
+		case 0x00:
+			if c == 0x00 {
+				// A zero length signals the end of the name.
+				break Loop
+			}
+			// literal string
+			newOff += c
+			if newOff > len(msg) {
+				return off, errCalcLen
+			}
+		case 0xC0:
+			// Pointer to somewhere else in msg.
+
+			// Pointers are two bytes.
+			newOff++
+
+			// Don't follow the pointer as the data here has ended.
+			break Loop
+		default:
+			// Prefixes 0x80 and 0x40 are reserved.
+			return off, errReserved
+		}
+	}
+
+	return newOff, nil
+}
+
+// A Question is a DNS query.
+type Question struct {
+	Name  Name
+	Type  Type
+	Class Class
+}
+
+// pack appends the wire format of the Question to msg.
+func (q *Question) pack(msg []byte, compression map[string]int, compressionOff int) ([]byte, error) {
+	msg, err := q.Name.pack(msg, compression, compressionOff)
+	if err != nil {
+		return msg, &nestedError{"Name", err}
+	}
+	msg = packType(msg, q.Type)
+	return packClass(msg, q.Class), nil
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (q *Question) GoString() string {
+	return "dnsmessage.Question{" +
+		"Name: " + q.Name.GoString() + ", " +
+		"Type: " + q.Type.GoString() + ", " +
+		"Class: " + q.Class.GoString() + "}"
+}
+
+func unpackResourceBody(msg []byte, off int, hdr ResourceHeader) (ResourceBody, int, error) {
+	var (
+		r    ResourceBody
+		err  error
+		name string
+	)
+	switch hdr.Type {
+	case TypeA:
+		var rb AResource
+		rb, err = unpackAResource(msg, off)
+		r = &rb
+		name = "A"
+	case TypeNS:
+		var rb NSResource
+		rb, err = unpackNSResource(msg, off)
+		r = &rb
+		name = "NS"
+	case TypeCNAME:
+		var rb CNAMEResource
+		rb, err = unpackCNAMEResource(msg, off)
+		r = &rb
+		name = "CNAME"
+	case TypeSOA:
+		var rb SOAResource
+		rb, err = unpackSOAResource(msg, off)
+		r = &rb
+		name = "SOA"
+	case TypePTR:
+		var rb PTRResource
+		rb, err = unpackPTRResource(msg, off)
+		r = &rb
+		name = "PTR"
+	case TypeMX:
+		var rb MXResource
+		rb, err = unpackMXResource(msg, off)
+		r = &rb
+		name = "MX"
+	case TypeTXT:
+		var rb TXTResource
+		rb, err = unpackTXTResource(msg, off, hdr.Length)
+		r = &rb
+		name = "TXT"
+	case TypeAAAA:
+		var rb AAAAResource
+		rb, err = unpackAAAAResource(msg, off)
+		r = &rb
+		name = "AAAA"
+	case TypeSRV:
+		var rb SRVResource
+		rb, err = unpackSRVResource(msg, off)
+		r = &rb
+		name = "SRV"
+	case TypeOPT:
+		var rb OPTResource
+		rb, err = unpackOPTResource(msg, off, hdr.Length)
+		r = &rb
+		name = "OPT"
+	}
+	if err != nil {
+		return nil, off, &nestedError{name + " record", err}
+	}
+	if r == nil {
+		return nil, off, errors.New("invalid resource type: " + hdr.Type.String())
+	}
+	return r, off + int(hdr.Length), nil
+}
+
+// A CNAMEResource is a CNAME Resource record.
+type CNAMEResource struct {
+	CNAME Name
+}
+
+func (r *CNAMEResource) realType() Type {
+	return TypeCNAME
+}
+
+// pack appends the wire format of the CNAMEResource to msg.
+func (r *CNAMEResource) pack(msg []byte, compression map[string]int, compressionOff int) ([]byte, error) {
+	return r.CNAME.pack(msg, compression, compressionOff)
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (r *CNAMEResource) GoString() string {
+	return "dnsmessage.CNAMEResource{CNAME: " + r.CNAME.GoString() + "}"
+}
+
+func unpackCNAMEResource(msg []byte, off int) (CNAMEResource, error) {
+	var cname Name
+	if _, err := cname.unpack(msg, off); err != nil {
+		return CNAMEResource{}, err
+	}
+	return CNAMEResource{cname}, nil
+}
+
+// An MXResource is an MX Resource record.
+type MXResource struct {
+	Pref uint16
+	MX   Name
+}
+
+func (r *MXResource) realType() Type {
+	return TypeMX
+}
+
+// pack appends the wire format of the MXResource to msg.
+func (r *MXResource) pack(msg []byte, compression map[string]int, compressionOff int) ([]byte, error) {
+	oldMsg := msg
+	msg = packUint16(msg, r.Pref)
+	msg, err := r.MX.pack(msg, compression, compressionOff)
+	if err != nil {
+		return oldMsg, &nestedError{"MXResource.MX", err}
+	}
+	return msg, nil
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (r *MXResource) GoString() string {
+	return "dnsmessage.MXResource{" +
+		"Pref: " + printUint16(r.Pref) + ", " +
+		"MX: " + r.MX.GoString() + "}"
+}
+
+func unpackMXResource(msg []byte, off int) (MXResource, error) {
+	pref, off, err := unpackUint16(msg, off)
+	if err != nil {
+		return MXResource{}, &nestedError{"Pref", err}
+	}
+	var mx Name
+	if _, err := mx.unpack(msg, off); err != nil {
+		return MXResource{}, &nestedError{"MX", err}
+	}
+	return MXResource{pref, mx}, nil
+}
+
+// An NSResource is an NS Resource record.
+type NSResource struct {
+	NS Name
+}
+
+func (r *NSResource) realType() Type {
+	return TypeNS
+}
+
+// pack appends the wire format of the NSResource to msg.
+func (r *NSResource) pack(msg []byte, compression map[string]int, compressionOff int) ([]byte, error) {
+	return r.NS.pack(msg, compression, compressionOff)
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (r *NSResource) GoString() string {
+	return "dnsmessage.NSResource{NS: " + r.NS.GoString() + "}"
+}
+
+func unpackNSResource(msg []byte, off int) (NSResource, error) {
+	var ns Name
+	if _, err := ns.unpack(msg, off); err != nil {
+		return NSResource{}, err
+	}
+	return NSResource{ns}, nil
+}
+
+// A PTRResource is a PTR Resource record.
+type PTRResource struct {
+	PTR Name
+}
+
+func (r *PTRResource) realType() Type {
+	return TypePTR
+}
+
+// pack appends the wire format of the PTRResource to msg.
+func (r *PTRResource) pack(msg []byte, compression map[string]int, compressionOff int) ([]byte, error) {
+	return r.PTR.pack(msg, compression, compressionOff)
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (r *PTRResource) GoString() string {
+	return "dnsmessage.PTRResource{PTR: " + r.PTR.GoString() + "}"
+}
+
+func unpackPTRResource(msg []byte, off int) (PTRResource, error) {
+	var ptr Name
+	if _, err := ptr.unpack(msg, off); err != nil {
+		return PTRResource{}, err
+	}
+	return PTRResource{ptr}, nil
+}
+
+// An SOAResource is an SOA Resource record.
+type SOAResource struct {
+	NS      Name
+	MBox    Name
+	Serial  uint32
+	Refresh uint32
+	Retry   uint32
+	Expire  uint32
+
+	// MinTTL the is the default TTL of Resources records which did not
+	// contain a TTL value and the TTL of negative responses. (RFC 2308
+	// Section 4)
+	MinTTL uint32
+}
+
+func (r *SOAResource) realType() Type {
+	return TypeSOA
+}
+
+// pack appends the wire format of the SOAResource to msg.
+func (r *SOAResource) pack(msg []byte, compression map[string]int, compressionOff int) ([]byte, error) {
+	oldMsg := msg
+	msg, err := r.NS.pack(msg, compression, compressionOff)
+	if err != nil {
+		return oldMsg, &nestedError{"SOAResource.NS", err}
+	}
+	msg, err = r.MBox.pack(msg, compression, compressionOff)
+	if err != nil {
+		return oldMsg, &nestedError{"SOAResource.MBox", err}
+	}
+	msg = packUint32(msg, r.Serial)
+	msg = packUint32(msg, r.Refresh)
+	msg = packUint32(msg, r.Retry)
+	msg = packUint32(msg, r.Expire)
+	return packUint32(msg, r.MinTTL), nil
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (r *SOAResource) GoString() string {
+	return "dnsmessage.SOAResource{" +
+		"NS: " + r.NS.GoString() + ", " +
+		"MBox: " + r.MBox.GoString() + ", " +
+		"Serial: " + printUint32(r.Serial) + ", " +
+		"Refresh: " + printUint32(r.Refresh) + ", " +
+		"Retry: " + printUint32(r.Retry) + ", " +
+		"Expire: " + printUint32(r.Expire) + ", " +
+		"MinTTL: " + printUint32(r.MinTTL) + "}"
+}
+
+func unpackSOAResource(msg []byte, off int) (SOAResource, error) {
+	var ns Name
+	off, err := ns.unpack(msg, off)
+	if err != nil {
+		return SOAResource{}, &nestedError{"NS", err}
+	}
+	var mbox Name
+	if off, err = mbox.unpack(msg, off); err != nil {
+		return SOAResource{}, &nestedError{"MBox", err}
+	}
+	serial, off, err := unpackUint32(msg, off)
+	if err != nil {
+		return SOAResource{}, &nestedError{"Serial", err}
+	}
+	refresh, off, err := unpackUint32(msg, off)
+	if err != nil {
+		return SOAResource{}, &nestedError{"Refresh", err}
+	}
+	retry, off, err := unpackUint32(msg, off)
+	if err != nil {
+		return SOAResource{}, &nestedError{"Retry", err}
+	}
+	expire, off, err := unpackUint32(msg, off)
+	if err != nil {
+		return SOAResource{}, &nestedError{"Expire", err}
+	}
+	minTTL, _, err := unpackUint32(msg, off)
+	if err != nil {
+		return SOAResource{}, &nestedError{"MinTTL", err}
+	}
+	return SOAResource{ns, mbox, serial, refresh, retry, expire, minTTL}, nil
+}
+
+// A TXTResource is a TXT Resource record.
+type TXTResource struct {
+	TXT []string
+}
+
+func (r *TXTResource) realType() Type {
+	return TypeTXT
+}
+
+// pack appends the wire format of the TXTResource to msg.
+func (r *TXTResource) pack(msg []byte, compression map[string]int, compressionOff int) ([]byte, error) {
+	oldMsg := msg
+	for _, s := range r.TXT {
+		var err error
+		msg, err = packText(msg, s)
+		if err != nil {
+			return oldMsg, err
+		}
+	}
+	return msg, nil
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (r *TXTResource) GoString() string {
+	s := "dnsmessage.TXTResource{TXT: []string{"
+	if len(r.TXT) == 0 {
+		return s + "}}"
+	}
+	s += `"` + printString([]byte(r.TXT[0]))
+	for _, t := range r.TXT[1:] {
+		s += `", "` + printString([]byte(t))
+	}
+	return s + `"}}`
+}
+
+func unpackTXTResource(msg []byte, off int, length uint16) (TXTResource, error) {
+	txts := make([]string, 0, 1)
+	for n := uint16(0); n < length; {
+		var t string
+		var err error
+		if t, off, err = unpackText(msg, off); err != nil {
+			return TXTResource{}, &nestedError{"text", err}
+		}
+		// Check if we got too many bytes.
+		if length-n < uint16(len(t))+1 {
+			return TXTResource{}, errCalcLen
+		}
+		n += uint16(len(t)) + 1
+		txts = append(txts, t)
+	}
+	return TXTResource{txts}, nil
+}
+
+// An SRVResource is an SRV Resource record.
+type SRVResource struct {
+	Priority uint16
+	Weight   uint16
+	Port     uint16
+	Target   Name // Not compressed as per RFC 2782.
+}
+
+func (r *SRVResource) realType() Type {
+	return TypeSRV
+}
+
+// pack appends the wire format of the SRVResource to msg.
+func (r *SRVResource) pack(msg []byte, compression map[string]int, compressionOff int) ([]byte, error) {
+	oldMsg := msg
+	msg = packUint16(msg, r.Priority)
+	msg = packUint16(msg, r.Weight)
+	msg = packUint16(msg, r.Port)
+	msg, err := r.Target.pack(msg, nil, compressionOff)
+	if err != nil {
+		return oldMsg, &nestedError{"SRVResource.Target", err}
+	}
+	return msg, nil
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (r *SRVResource) GoString() string {
+	return "dnsmessage.SRVResource{" +
+		"Priority: " + printUint16(r.Priority) + ", " +
+		"Weight: " + printUint16(r.Weight) + ", " +
+		"Port: " + printUint16(r.Port) + ", " +
+		"Target: " + r.Target.GoString() + "}"
+}
+
+func unpackSRVResource(msg []byte, off int) (SRVResource, error) {
+	priority, off, err := unpackUint16(msg, off)
+	if err != nil {
+		return SRVResource{}, &nestedError{"Priority", err}
+	}
+	weight, off, err := unpackUint16(msg, off)
+	if err != nil {
+		return SRVResource{}, &nestedError{"Weight", err}
+	}
+	port, off, err := unpackUint16(msg, off)
+	if err != nil {
+		return SRVResource{}, &nestedError{"Port", err}
+	}
+	var target Name
+	if _, err := target.unpackCompressed(msg, off, false /* allowCompression */); err != nil {
+		return SRVResource{}, &nestedError{"Target", err}
+	}
+	return SRVResource{priority, weight, port, target}, nil
+}
+
+// An AResource is an A Resource record.
+type AResource struct {
+	A [4]byte
+}
+
+func (r *AResource) realType() Type {
+	return TypeA
+}
+
+// pack appends the wire format of the AResource to msg.
+func (r *AResource) pack(msg []byte, compression map[string]int, compressionOff int) ([]byte, error) {
+	return packBytes(msg, r.A[:]), nil
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (r *AResource) GoString() string {
+	return "dnsmessage.AResource{" +
+		"A: [4]byte{" + printByteSlice(r.A[:]) + "}}"
+}
+
+func unpackAResource(msg []byte, off int) (AResource, error) {
+	var a [4]byte
+	if _, err := unpackBytes(msg, off, a[:]); err != nil {
+		return AResource{}, err
+	}
+	return AResource{a}, nil
+}
+
+// An AAAAResource is an AAAA Resource record.
+type AAAAResource struct {
+	AAAA [16]byte
+}
+
+func (r *AAAAResource) realType() Type {
+	return TypeAAAA
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (r *AAAAResource) GoString() string {
+	return "dnsmessage.AAAAResource{" +
+		"AAAA: [16]byte{" + printByteSlice(r.AAAA[:]) + "}}"
+}
+
+// pack appends the wire format of the AAAAResource to msg.
+func (r *AAAAResource) pack(msg []byte, compression map[string]int, compressionOff int) ([]byte, error) {
+	return packBytes(msg, r.AAAA[:]), nil
+}
+
+func unpackAAAAResource(msg []byte, off int) (AAAAResource, error) {
+	var aaaa [16]byte
+	if _, err := unpackBytes(msg, off, aaaa[:]); err != nil {
+		return AAAAResource{}, err
+	}
+	return AAAAResource{aaaa}, nil
+}
+
+// An OPTResource is an OPT pseudo Resource record.
+//
+// The pseudo resource record is part of the extension mechanisms for DNS
+// as defined in RFC 6891.
+type OPTResource struct {
+	Options []Option
+}
+
+// An Option represents a DNS message option within OPTResource.
+//
+// The message option is part of the extension mechanisms for DNS as
+// defined in RFC 6891.
+type Option struct {
+	Code uint16 // option code
+	Data []byte
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (o *Option) GoString() string {
+	return "dnsmessage.Option{" +
+		"Code: " + printUint16(o.Code) + ", " +
+		"Data: []byte{" + printByteSlice(o.Data) + "}}"
+}
+
+func (r *OPTResource) realType() Type {
+	return TypeOPT
+}
+
+func (r *OPTResource) pack(msg []byte, compression map[string]int, compressionOff int) ([]byte, error) {
+	for _, opt := range r.Options {
+		msg = packUint16(msg, opt.Code)
+		l := uint16(len(opt.Data))
+		msg = packUint16(msg, l)
+		msg = packBytes(msg, opt.Data)
+	}
+	return msg, nil
+}
+
+// GoString implements fmt.GoStringer.GoString.
+func (r *OPTResource) GoString() string {
+	s := "dnsmessage.OPTResource{Options: []dnsmessage.Option{"
+	if len(r.Options) == 0 {
+		return s + "}}"
+	}
+	s += r.Options[0].GoString()
+	for _, o := range r.Options[1:] {
+		s += ", " + o.GoString()
+	}
+	return s + "}}"
+}
+
+func unpackOPTResource(msg []byte, off int, length uint16) (OPTResource, error) {
+	var opts []Option
+	for oldOff := off; off < oldOff+int(length); {
+		var err error
+		var o Option
+		o.Code, off, err = unpackUint16(msg, off)
+		if err != nil {
+			return OPTResource{}, &nestedError{"Code", err}
+		}
+		var l uint16
+		l, off, err = unpackUint16(msg, off)
+		if err != nil {
+			return OPTResource{}, &nestedError{"Data", err}
+		}
+		o.Data = make([]byte, l)
+		if copy(o.Data, msg[off:]) != int(l) {
+			return OPTResource{}, &nestedError{"Data", errCalcLen}
+		}
+		off += int(l)
+		opts = append(opts, o)
+	}
+	return OPTResource{opts}, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/iana/const.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/iana/const.go
new file mode 100644
index 000000000..cea712fac
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/iana/const.go
@@ -0,0 +1,223 @@
+// go generate gen.go
+// Code generated by the command above; DO NOT EDIT.
+
+// Package iana provides protocol number resources managed by the Internet Assigned Numbers Authority (IANA).
+package iana // import "golang.org/x/net/internal/iana"
+
+// Differentiated Services Field Codepoints (DSCP), Updated: 2018-05-04
+const (
+	DiffServCS0           = 0x00 // CS0
+	DiffServCS1           = 0x20 // CS1
+	DiffServCS2           = 0x40 // CS2
+	DiffServCS3           = 0x60 // CS3
+	DiffServCS4           = 0x80 // CS4
+	DiffServCS5           = 0xa0 // CS5
+	DiffServCS6           = 0xc0 // CS6
+	DiffServCS7           = 0xe0 // CS7
+	DiffServAF11          = 0x28 // AF11
+	DiffServAF12          = 0x30 // AF12
+	DiffServAF13          = 0x38 // AF13
+	DiffServAF21          = 0x48 // AF21
+	DiffServAF22          = 0x50 // AF22
+	DiffServAF23          = 0x58 // AF23
+	DiffServAF31          = 0x68 // AF31
+	DiffServAF32          = 0x70 // AF32
+	DiffServAF33          = 0x78 // AF33
+	DiffServAF41          = 0x88 // AF41
+	DiffServAF42          = 0x90 // AF42
+	DiffServAF43          = 0x98 // AF43
+	DiffServEF            = 0xb8 // EF
+	DiffServVOICEADMIT    = 0xb0 // VOICE-ADMIT
+	NotECNTransport       = 0x00 // Not-ECT (Not ECN-Capable Transport)
+	ECNTransport1         = 0x01 // ECT(1) (ECN-Capable Transport(1))
+	ECNTransport0         = 0x02 // ECT(0) (ECN-Capable Transport(0))
+	CongestionExperienced = 0x03 // CE (Congestion Experienced)
+)
+
+// Protocol Numbers, Updated: 2017-10-13
+const (
+	ProtocolIP             = 0   // IPv4 encapsulation, pseudo protocol number
+	ProtocolHOPOPT         = 0   // IPv6 Hop-by-Hop Option
+	ProtocolICMP           = 1   // Internet Control Message
+	ProtocolIGMP           = 2   // Internet Group Management
+	ProtocolGGP            = 3   // Gateway-to-Gateway
+	ProtocolIPv4           = 4   // IPv4 encapsulation
+	ProtocolST             = 5   // Stream
+	ProtocolTCP            = 6   // Transmission Control
+	ProtocolCBT            = 7   // CBT
+	ProtocolEGP            = 8   // Exterior Gateway Protocol
+	ProtocolIGP            = 9   // any private interior gateway (used by Cisco for their IGRP)
+	ProtocolBBNRCCMON      = 10  // BBN RCC Monitoring
+	ProtocolNVPII          = 11  // Network Voice Protocol
+	ProtocolPUP            = 12  // PUP
+	ProtocolEMCON          = 14  // EMCON
+	ProtocolXNET           = 15  // Cross Net Debugger
+	ProtocolCHAOS          = 16  // Chaos
+	ProtocolUDP            = 17  // User Datagram
+	ProtocolMUX            = 18  // Multiplexing
+	ProtocolDCNMEAS        = 19  // DCN Measurement Subsystems
+	ProtocolHMP            = 20  // Host Monitoring
+	ProtocolPRM            = 21  // Packet Radio Measurement
+	ProtocolXNSIDP         = 22  // XEROX NS IDP
+	ProtocolTRUNK1         = 23  // Trunk-1
+	ProtocolTRUNK2         = 24  // Trunk-2
+	ProtocolLEAF1          = 25  // Leaf-1
+	ProtocolLEAF2          = 26  // Leaf-2
+	ProtocolRDP            = 27  // Reliable Data Protocol
+	ProtocolIRTP           = 28  // Internet Reliable Transaction
+	ProtocolISOTP4         = 29  // ISO Transport Protocol Class 4
+	ProtocolNETBLT         = 30  // Bulk Data Transfer Protocol
+	ProtocolMFENSP         = 31  // MFE Network Services Protocol
+	ProtocolMERITINP       = 32  // MERIT Internodal Protocol
+	ProtocolDCCP           = 33  // Datagram Congestion Control Protocol
+	Protocol3PC            = 34  // Third Party Connect Protocol
+	ProtocolIDPR           = 35  // Inter-Domain Policy Routing Protocol
+	ProtocolXTP            = 36  // XTP
+	ProtocolDDP            = 37  // Datagram Delivery Protocol
+	ProtocolIDPRCMTP       = 38  // IDPR Control Message Transport Proto
+	ProtocolTPPP           = 39  // TP++ Transport Protocol
+	ProtocolIL             = 40  // IL Transport Protocol
+	ProtocolIPv6           = 41  // IPv6 encapsulation
+	ProtocolSDRP           = 42  // Source Demand Routing Protocol
+	ProtocolIPv6Route      = 43  // Routing Header for IPv6
+	ProtocolIPv6Frag       = 44  // Fragment Header for IPv6
+	ProtocolIDRP           = 45  // Inter-Domain Routing Protocol
+	ProtocolRSVP           = 46  // Reservation Protocol
+	ProtocolGRE            = 47  // Generic Routing Encapsulation
+	ProtocolDSR            = 48  // Dynamic Source Routing Protocol
+	ProtocolBNA            = 49  // BNA
+	ProtocolESP            = 50  // Encap Security Payload
+	ProtocolAH             = 51  // Authentication Header
+	ProtocolINLSP          = 52  // Integrated Net Layer Security  TUBA
+	ProtocolNARP           = 54  // NBMA Address Resolution Protocol
+	ProtocolMOBILE         = 55  // IP Mobility
+	ProtocolTLSP           = 56  // Transport Layer Security Protocol using Kryptonet key management
+	ProtocolSKIP           = 57  // SKIP
+	ProtocolIPv6ICMP       = 58  // ICMP for IPv6
+	ProtocolIPv6NoNxt      = 59  // No Next Header for IPv6
+	ProtocolIPv6Opts       = 60  // Destination Options for IPv6
+	ProtocolCFTP           = 62  // CFTP
+	ProtocolSATEXPAK       = 64  // SATNET and Backroom EXPAK
+	ProtocolKRYPTOLAN      = 65  // Kryptolan
+	ProtocolRVD            = 66  // MIT Remote Virtual Disk Protocol
+	ProtocolIPPC           = 67  // Internet Pluribus Packet Core
+	ProtocolSATMON         = 69  // SATNET Monitoring
+	ProtocolVISA           = 70  // VISA Protocol
+	ProtocolIPCV           = 71  // Internet Packet Core Utility
+	ProtocolCPNX           = 72  // Computer Protocol Network Executive
+	ProtocolCPHB           = 73  // Computer Protocol Heart Beat
+	ProtocolWSN            = 74  // Wang Span Network
+	ProtocolPVP            = 75  // Packet Video Protocol
+	ProtocolBRSATMON       = 76  // Backroom SATNET Monitoring
+	ProtocolSUNND          = 77  // SUN ND PROTOCOL-Temporary
+	ProtocolWBMON          = 78  // WIDEBAND Monitoring
+	ProtocolWBEXPAK        = 79  // WIDEBAND EXPAK
+	ProtocolISOIP          = 80  // ISO Internet Protocol
+	ProtocolVMTP           = 81  // VMTP
+	ProtocolSECUREVMTP     = 82  // SECURE-VMTP
+	ProtocolVINES          = 83  // VINES
+	ProtocolTTP            = 84  // Transaction Transport Protocol
+	ProtocolIPTM           = 84  // Internet Protocol Traffic Manager
+	ProtocolNSFNETIGP      = 85  // NSFNET-IGP
+	ProtocolDGP            = 86  // Dissimilar Gateway Protocol
+	ProtocolTCF            = 87  // TCF
+	ProtocolEIGRP          = 88  // EIGRP
+	ProtocolOSPFIGP        = 89  // OSPFIGP
+	ProtocolSpriteRPC      = 90  // Sprite RPC Protocol
+	ProtocolLARP           = 91  // Locus Address Resolution Protocol
+	ProtocolMTP            = 92  // Multicast Transport Protocol
+	ProtocolAX25           = 93  // AX.25 Frames
+	ProtocolIPIP           = 94  // IP-within-IP Encapsulation Protocol
+	ProtocolSCCSP          = 96  // Semaphore Communications Sec. Pro.
+	ProtocolETHERIP        = 97  // Ethernet-within-IP Encapsulation
+	ProtocolENCAP          = 98  // Encapsulation Header
+	ProtocolGMTP           = 100 // GMTP
+	ProtocolIFMP           = 101 // Ipsilon Flow Management Protocol
+	ProtocolPNNI           = 102 // PNNI over IP
+	ProtocolPIM            = 103 // Protocol Independent Multicast
+	ProtocolARIS           = 104 // ARIS
+	ProtocolSCPS           = 105 // SCPS
+	ProtocolQNX            = 106 // QNX
+	ProtocolAN             = 107 // Active Networks
+	ProtocolIPComp         = 108 // IP Payload Compression Protocol
+	ProtocolSNP            = 109 // Sitara Networks Protocol
+	ProtocolCompaqPeer     = 110 // Compaq Peer Protocol
+	ProtocolIPXinIP        = 111 // IPX in IP
+	ProtocolVRRP           = 112 // Virtual Router Redundancy Protocol
+	ProtocolPGM            = 113 // PGM Reliable Transport Protocol
+	ProtocolL2TP           = 115 // Layer Two Tunneling Protocol
+	ProtocolDDX            = 116 // D-II Data Exchange (DDX)
+	ProtocolIATP           = 117 // Interactive Agent Transfer Protocol
+	ProtocolSTP            = 118 // Schedule Transfer Protocol
+	ProtocolSRP            = 119 // SpectraLink Radio Protocol
+	ProtocolUTI            = 120 // UTI
+	ProtocolSMP            = 121 // Simple Message Protocol
+	ProtocolPTP            = 123 // Performance Transparency Protocol
+	ProtocolISIS           = 124 // ISIS over IPv4
+	ProtocolFIRE           = 125 // FIRE
+	ProtocolCRTP           = 126 // Combat Radio Transport Protocol
+	ProtocolCRUDP          = 127 // Combat Radio User Datagram
+	ProtocolSSCOPMCE       = 128 // SSCOPMCE
+	ProtocolIPLT           = 129 // IPLT
+	ProtocolSPS            = 130 // Secure Packet Shield
+	ProtocolPIPE           = 131 // Private IP Encapsulation within IP
+	ProtocolSCTP           = 132 // Stream Control Transmission Protocol
+	ProtocolFC             = 133 // Fibre Channel
+	ProtocolRSVPE2EIGNORE  = 134 // RSVP-E2E-IGNORE
+	ProtocolMobilityHeader = 135 // Mobility Header
+	ProtocolUDPLite        = 136 // UDPLite
+	ProtocolMPLSinIP       = 137 // MPLS-in-IP
+	ProtocolMANET          = 138 // MANET Protocols
+	ProtocolHIP            = 139 // Host Identity Protocol
+	ProtocolShim6          = 140 // Shim6 Protocol
+	ProtocolWESP           = 141 // Wrapped Encapsulating Security Payload
+	ProtocolROHC           = 142 // Robust Header Compression
+	ProtocolReserved       = 255 // Reserved
+)
+
+// Address Family Numbers, Updated: 2018-04-02
+const (
+	AddrFamilyIPv4                          = 1     // IP (IP version 4)
+	AddrFamilyIPv6                          = 2     // IP6 (IP version 6)
+	AddrFamilyNSAP                          = 3     // NSAP
+	AddrFamilyHDLC                          = 4     // HDLC (8-bit multidrop)
+	AddrFamilyBBN1822                       = 5     // BBN 1822
+	AddrFamily802                           = 6     // 802 (includes all 802 media plus Ethernet "canonical format")
+	AddrFamilyE163                          = 7     // E.163
+	AddrFamilyE164                          = 8     // E.164 (SMDS, Frame Relay, ATM)
+	AddrFamilyF69                           = 9     // F.69 (Telex)
+	AddrFamilyX121                          = 10    // X.121 (X.25, Frame Relay)
+	AddrFamilyIPX                           = 11    // IPX
+	AddrFamilyAppletalk                     = 12    // Appletalk
+	AddrFamilyDecnetIV                      = 13    // Decnet IV
+	AddrFamilyBanyanVines                   = 14    // Banyan Vines
+	AddrFamilyE164withSubaddress            = 15    // E.164 with NSAP format subaddress
+	AddrFamilyDNS                           = 16    // DNS (Domain Name System)
+	AddrFamilyDistinguishedName             = 17    // Distinguished Name
+	AddrFamilyASNumber                      = 18    // AS Number
+	AddrFamilyXTPoverIPv4                   = 19    // XTP over IP version 4
+	AddrFamilyXTPoverIPv6                   = 20    // XTP over IP version 6
+	AddrFamilyXTPnativemodeXTP              = 21    // XTP native mode XTP
+	AddrFamilyFibreChannelWorldWidePortName = 22    // Fibre Channel World-Wide Port Name
+	AddrFamilyFibreChannelWorldWideNodeName = 23    // Fibre Channel World-Wide Node Name
+	AddrFamilyGWID                          = 24    // GWID
+	AddrFamilyL2VPN                         = 25    // AFI for L2VPN information
+	AddrFamilyMPLSTPSectionEndpointID       = 26    // MPLS-TP Section Endpoint Identifier
+	AddrFamilyMPLSTPLSPEndpointID           = 27    // MPLS-TP LSP Endpoint Identifier
+	AddrFamilyMPLSTPPseudowireEndpointID    = 28    // MPLS-TP Pseudowire Endpoint Identifier
+	AddrFamilyMTIPv4                        = 29    // MT IP: Multi-Topology IP version 4
+	AddrFamilyMTIPv6                        = 30    // MT IPv6: Multi-Topology IP version 6
+	AddrFamilyEIGRPCommonServiceFamily      = 16384 // EIGRP Common Service Family
+	AddrFamilyEIGRPIPv4ServiceFamily        = 16385 // EIGRP IPv4 Service Family
+	AddrFamilyEIGRPIPv6ServiceFamily        = 16386 // EIGRP IPv6 Service Family
+	AddrFamilyLISPCanonicalAddressFormat    = 16387 // LISP Canonical Address Format (LCAF)
+	AddrFamilyBGPLS                         = 16388 // BGP-LS
+	AddrFamily48bitMAC                      = 16389 // 48-bit MAC
+	AddrFamily64bitMAC                      = 16390 // 64-bit MAC
+	AddrFamilyOUI                           = 16391 // OUI
+	AddrFamilyMACFinal24bits                = 16392 // MAC/24
+	AddrFamilyMACFinal40bits                = 16393 // MAC/40
+	AddrFamilyIPv6Initial64bits             = 16394 // IPv6/64
+	AddrFamilyRBridgePortID                 = 16395 // RBridge Port ID
+	AddrFamilyTRILLNickname                 = 16396 // TRILL Nickname
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr.go
new file mode 100644
index 000000000..0cde35a44
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr.go
@@ -0,0 +1,11 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris zos
+
+package socket
+
+func (h *cmsghdr) len() int { return int(h.Len) }
+func (h *cmsghdr) lvl() int { return int(h.Level) }
+func (h *cmsghdr) typ() int { return int(h.Type) }
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_bsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_bsd.go
new file mode 100644
index 000000000..14dbb3ad4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_bsd.go
@@ -0,0 +1,13 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd netbsd openbsd
+
+package socket
+
+func (h *cmsghdr) set(l, lvl, typ int) {
+	h.Len = uint32(l)
+	h.Level = int32(lvl)
+	h.Type = int32(typ)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_linux_32bit.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_linux_32bit.go
new file mode 100644
index 000000000..bac66811d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_linux_32bit.go
@@ -0,0 +1,14 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build arm mips mipsle 386
+// +build linux
+
+package socket
+
+func (h *cmsghdr) set(l, lvl, typ int) {
+	h.Len = uint32(l)
+	h.Level = int32(lvl)
+	h.Type = int32(typ)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_linux_64bit.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_linux_64bit.go
new file mode 100644
index 000000000..27be0efac
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_linux_64bit.go
@@ -0,0 +1,14 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build arm64 amd64 ppc64 ppc64le mips64 mips64le riscv64 s390x
+// +build linux
+
+package socket
+
+func (h *cmsghdr) set(l, lvl, typ int) {
+	h.Len = uint64(l)
+	h.Level = int32(lvl)
+	h.Type = int32(typ)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_solaris_64bit.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_solaris_64bit.go
new file mode 100644
index 000000000..7dedd430e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_solaris_64bit.go
@@ -0,0 +1,14 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build amd64
+// +build solaris
+
+package socket
+
+func (h *cmsghdr) set(l, lvl, typ int) {
+	h.Len = uint32(l)
+	h.Level = int32(lvl)
+	h.Type = int32(typ)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_stub.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_stub.go
new file mode 100644
index 000000000..83c35ecdc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_stub.go
@@ -0,0 +1,27 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !aix,!darwin,!dragonfly,!freebsd,!linux,!netbsd,!openbsd,!solaris,!zos
+
+package socket
+
+func controlHeaderLen() int {
+	return 0
+}
+
+func controlMessageLen(dataLen int) int {
+	return 0
+}
+
+func controlMessageSpace(dataLen int) int {
+	return 0
+}
+
+type cmsghdr struct{}
+
+func (h *cmsghdr) len() int { return 0 }
+func (h *cmsghdr) lvl() int { return 0 }
+func (h *cmsghdr) typ() int { return 0 }
+
+func (h *cmsghdr) set(l, lvl, typ int) {}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_unix.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_unix.go
new file mode 100644
index 000000000..c2b2b6595
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_unix.go
@@ -0,0 +1,21 @@
+// Copyright 2020 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris
+
+package socket
+
+import "golang.org/x/sys/unix"
+
+func controlHeaderLen() int {
+	return unix.CmsgLen(0)
+}
+
+func controlMessageLen(dataLen int) int {
+	return unix.CmsgLen(dataLen)
+}
+
+func controlMessageSpace(dataLen int) int {
+	return unix.CmsgSpace(dataLen)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_zos_s390x.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_zos_s390x.go
new file mode 100644
index 000000000..98be146bc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/cmsghdr_zos_s390x.go
@@ -0,0 +1,25 @@
+// Copyright 2020 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+import "syscall"
+
+func (h *cmsghdr) set(l, lvl, typ int) {
+	h.Len = int32(l)
+	h.Level = int32(lvl)
+	h.Type = int32(typ)
+}
+
+func controlHeaderLen() int {
+	return syscall.CmsgLen(0)
+}
+
+func controlMessageLen(dataLen int) int {
+	return syscall.CmsgLen(dataLen)
+}
+
+func controlMessageSpace(dataLen int) int {
+	return syscall.CmsgSpace(dataLen)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/empty.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/empty.s
new file mode 100644
index 000000000..bff0231c7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/empty.s
@@ -0,0 +1,7 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build darwin,go1.12
+
+// This exists solely so we can linkname in symbols from syscall.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/error_unix.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/error_unix.go
new file mode 100644
index 000000000..47f0d6e2d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/error_unix.go
@@ -0,0 +1,31 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris zos
+
+package socket
+
+import "syscall"
+
+var (
+	errEAGAIN error = syscall.EAGAIN
+	errEINVAL error = syscall.EINVAL
+	errENOENT error = syscall.ENOENT
+)
+
+// errnoErr returns common boxed Errno values, to prevent allocations
+// at runtime.
+func errnoErr(errno syscall.Errno) error {
+	switch errno {
+	case 0:
+		return nil
+	case syscall.EAGAIN:
+		return errEAGAIN
+	case syscall.EINVAL:
+		return errEINVAL
+	case syscall.ENOENT:
+		return errENOENT
+	}
+	return errno
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/error_windows.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/error_windows.go
new file mode 100644
index 000000000..6a6379a8b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/error_windows.go
@@ -0,0 +1,26 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+import "syscall"
+
+var (
+	errERROR_IO_PENDING error = syscall.ERROR_IO_PENDING
+	errEINVAL           error = syscall.EINVAL
+)
+
+// errnoErr returns common boxed Errno values, to prevent allocations
+// at runtime.
+func errnoErr(errno syscall.Errno) error {
+	switch errno {
+	case 0:
+		return nil
+	case syscall.ERROR_IO_PENDING:
+		return errERROR_IO_PENDING
+	case syscall.EINVAL:
+		return errEINVAL
+	}
+	return errno
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/iovec_32bit.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/iovec_32bit.go
new file mode 100644
index 000000000..05d6082d1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/iovec_32bit.go
@@ -0,0 +1,19 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build arm mips mipsle 386
+// +build darwin dragonfly freebsd linux netbsd openbsd
+
+package socket
+
+import "unsafe"
+
+func (v *iovec) set(b []byte) {
+	l := len(b)
+	if l == 0 {
+		return
+	}
+	v.Base = (*byte)(unsafe.Pointer(&b[0]))
+	v.Len = uint32(l)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/iovec_64bit.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/iovec_64bit.go
new file mode 100644
index 000000000..0309e10fe
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/iovec_64bit.go
@@ -0,0 +1,19 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build arm64 amd64 ppc64 ppc64le mips64 mips64le riscv64 s390x
+// +build aix darwin dragonfly freebsd linux netbsd openbsd zos
+
+package socket
+
+import "unsafe"
+
+func (v *iovec) set(b []byte) {
+	l := len(b)
+	if l == 0 {
+		return
+	}
+	v.Base = (*byte)(unsafe.Pointer(&b[0]))
+	v.Len = uint64(l)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/iovec_solaris_64bit.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/iovec_solaris_64bit.go
new file mode 100644
index 000000000..8d17a40c4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/iovec_solaris_64bit.go
@@ -0,0 +1,19 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build amd64
+// +build solaris
+
+package socket
+
+import "unsafe"
+
+func (v *iovec) set(b []byte) {
+	l := len(b)
+	if l == 0 {
+		return
+	}
+	v.Base = (*int8)(unsafe.Pointer(&b[0]))
+	v.Len = uint64(l)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/iovec_stub.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/iovec_stub.go
new file mode 100644
index 000000000..f44d4f523
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/iovec_stub.go
@@ -0,0 +1,11 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !aix,!darwin,!dragonfly,!freebsd,!linux,!netbsd,!openbsd,!solaris,!zos
+
+package socket
+
+type iovec struct{}
+
+func (v *iovec) set(b []byte) {}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/mmsghdr_stub.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/mmsghdr_stub.go
new file mode 100644
index 000000000..1a7f2792f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/mmsghdr_stub.go
@@ -0,0 +1,21 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !aix,!linux,!netbsd
+
+package socket
+
+import "net"
+
+type mmsghdr struct{}
+
+type mmsghdrs []mmsghdr
+
+func (hs mmsghdrs) pack(ms []Message, parseFn func([]byte, string) (net.Addr, error), marshalFn func(net.Addr) []byte) error {
+	return nil
+}
+
+func (hs mmsghdrs) unpack(ms []Message, parseFn func([]byte, string) (net.Addr, error), hint string) error {
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/mmsghdr_unix.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/mmsghdr_unix.go
new file mode 100644
index 000000000..f1100683a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/mmsghdr_unix.go
@@ -0,0 +1,42 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix linux netbsd
+
+package socket
+
+import "net"
+
+type mmsghdrs []mmsghdr
+
+func (hs mmsghdrs) pack(ms []Message, parseFn func([]byte, string) (net.Addr, error), marshalFn func(net.Addr) []byte) error {
+	for i := range hs {
+		vs := make([]iovec, len(ms[i].Buffers))
+		var sa []byte
+		if parseFn != nil {
+			sa = make([]byte, sizeofSockaddrInet6)
+		}
+		if marshalFn != nil {
+			sa = marshalFn(ms[i].Addr)
+		}
+		hs[i].Hdr.pack(vs, ms[i].Buffers, ms[i].OOB, sa)
+	}
+	return nil
+}
+
+func (hs mmsghdrs) unpack(ms []Message, parseFn func([]byte, string) (net.Addr, error), hint string) error {
+	for i := range hs {
+		ms[i].N = int(hs[i].Len)
+		ms[i].NN = hs[i].Hdr.controllen()
+		ms[i].Flags = hs[i].Hdr.flags()
+		if parseFn != nil {
+			var err error
+			ms[i].Addr, err = parseFn(hs[i].Hdr.name(), hint)
+			if err != nil {
+				return err
+			}
+		}
+	}
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_bsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_bsd.go
new file mode 100644
index 000000000..77f44c1f1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_bsd.go
@@ -0,0 +1,39 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd netbsd openbsd
+
+package socket
+
+import "unsafe"
+
+func (h *msghdr) pack(vs []iovec, bs [][]byte, oob []byte, sa []byte) {
+	for i := range vs {
+		vs[i].set(bs[i])
+	}
+	h.setIov(vs)
+	if len(oob) > 0 {
+		h.Control = (*byte)(unsafe.Pointer(&oob[0]))
+		h.Controllen = uint32(len(oob))
+	}
+	if sa != nil {
+		h.Name = (*byte)(unsafe.Pointer(&sa[0]))
+		h.Namelen = uint32(len(sa))
+	}
+}
+
+func (h *msghdr) name() []byte {
+	if h.Name != nil && h.Namelen > 0 {
+		return (*[sizeofSockaddrInet6]byte)(unsafe.Pointer(h.Name))[:h.Namelen]
+	}
+	return nil
+}
+
+func (h *msghdr) controllen() int {
+	return int(h.Controllen)
+}
+
+func (h *msghdr) flags() int {
+	return int(h.Flags)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_bsdvar.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_bsdvar.go
new file mode 100644
index 000000000..c5562dd66
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_bsdvar.go
@@ -0,0 +1,16 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd netbsd
+
+package socket
+
+func (h *msghdr) setIov(vs []iovec) {
+	l := len(vs)
+	if l == 0 {
+		return
+	}
+	h.Iov = &vs[0]
+	h.Iovlen = int32(l)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_linux.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_linux.go
new file mode 100644
index 000000000..5a38798cc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_linux.go
@@ -0,0 +1,36 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+import "unsafe"
+
+func (h *msghdr) pack(vs []iovec, bs [][]byte, oob []byte, sa []byte) {
+	for i := range vs {
+		vs[i].set(bs[i])
+	}
+	h.setIov(vs)
+	if len(oob) > 0 {
+		h.setControl(oob)
+	}
+	if sa != nil {
+		h.Name = (*byte)(unsafe.Pointer(&sa[0]))
+		h.Namelen = uint32(len(sa))
+	}
+}
+
+func (h *msghdr) name() []byte {
+	if h.Name != nil && h.Namelen > 0 {
+		return (*[sizeofSockaddrInet6]byte)(unsafe.Pointer(h.Name))[:h.Namelen]
+	}
+	return nil
+}
+
+func (h *msghdr) controllen() int {
+	return int(h.Controllen)
+}
+
+func (h *msghdr) flags() int {
+	return int(h.Flags)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_linux_32bit.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_linux_32bit.go
new file mode 100644
index 000000000..a7a5987c8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_linux_32bit.go
@@ -0,0 +1,24 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build arm mips mipsle 386
+// +build linux
+
+package socket
+
+import "unsafe"
+
+func (h *msghdr) setIov(vs []iovec) {
+	l := len(vs)
+	if l == 0 {
+		return
+	}
+	h.Iov = &vs[0]
+	h.Iovlen = uint32(l)
+}
+
+func (h *msghdr) setControl(b []byte) {
+	h.Control = (*byte)(unsafe.Pointer(&b[0]))
+	h.Controllen = uint32(len(b))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_linux_64bit.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_linux_64bit.go
new file mode 100644
index 000000000..e731833a2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_linux_64bit.go
@@ -0,0 +1,24 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build arm64 amd64 ppc64 ppc64le mips64 mips64le riscv64 s390x
+// +build linux
+
+package socket
+
+import "unsafe"
+
+func (h *msghdr) setIov(vs []iovec) {
+	l := len(vs)
+	if l == 0 {
+		return
+	}
+	h.Iov = &vs[0]
+	h.Iovlen = uint64(l)
+}
+
+func (h *msghdr) setControl(b []byte) {
+	h.Control = (*byte)(unsafe.Pointer(&b[0]))
+	h.Controllen = uint64(len(b))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_openbsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_openbsd.go
new file mode 100644
index 000000000..71a69e251
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_openbsd.go
@@ -0,0 +1,14 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+func (h *msghdr) setIov(vs []iovec) {
+	l := len(vs)
+	if l == 0 {
+		return
+	}
+	h.Iov = &vs[0]
+	h.Iovlen = uint32(l)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_solaris_64bit.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_solaris_64bit.go
new file mode 100644
index 000000000..6465b2073
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_solaris_64bit.go
@@ -0,0 +1,36 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build amd64
+// +build solaris
+
+package socket
+
+import "unsafe"
+
+func (h *msghdr) pack(vs []iovec, bs [][]byte, oob []byte, sa []byte) {
+	for i := range vs {
+		vs[i].set(bs[i])
+	}
+	if len(vs) > 0 {
+		h.Iov = &vs[0]
+		h.Iovlen = int32(len(vs))
+	}
+	if len(oob) > 0 {
+		h.Accrights = (*int8)(unsafe.Pointer(&oob[0]))
+		h.Accrightslen = int32(len(oob))
+	}
+	if sa != nil {
+		h.Name = (*byte)(unsafe.Pointer(&sa[0]))
+		h.Namelen = uint32(len(sa))
+	}
+}
+
+func (h *msghdr) controllen() int {
+	return int(h.Accrightslen)
+}
+
+func (h *msghdr) flags() int {
+	return int(NativeEndian.Uint32(h.Pad_cgo_2[:]))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_stub.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_stub.go
new file mode 100644
index 000000000..1a253d2d6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_stub.go
@@ -0,0 +1,14 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !aix,!darwin,!dragonfly,!freebsd,!linux,!netbsd,!openbsd,!solaris,!zos
+
+package socket
+
+type msghdr struct{}
+
+func (h *msghdr) pack(vs []iovec, bs [][]byte, oob []byte, sa []byte) {}
+func (h *msghdr) name() []byte                                        { return nil }
+func (h *msghdr) controllen() int                                     { return 0 }
+func (h *msghdr) flags() int                                          { return 0 }
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_zos_s390x.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_zos_s390x.go
new file mode 100644
index 000000000..eb1a99a33
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/msghdr_zos_s390x.go
@@ -0,0 +1,36 @@
+// Copyright 2020 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build s390x
+// +build zos
+
+package socket
+
+import "unsafe"
+
+func (h *msghdr) pack(vs []iovec, bs [][]byte, oob []byte, sa []byte) {
+	for i := range vs {
+		vs[i].set(bs[i])
+	}
+	if len(vs) > 0 {
+		h.Iov = &vs[0]
+		h.Iovlen = int32(len(vs))
+	}
+	if len(oob) > 0 {
+		h.Control = (*byte)(unsafe.Pointer(&oob[0]))
+		h.Controllen = uint32(len(oob))
+	}
+	if sa != nil {
+		h.Name = (*byte)(unsafe.Pointer(&sa[0]))
+		h.Namelen = uint32(len(sa))
+	}
+}
+
+func (h *msghdr) controllen() int {
+	return int(h.Controllen)
+}
+
+func (h *msghdr) flags() int {
+	return int(h.Flags)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/norace.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/norace.go
new file mode 100644
index 000000000..9519ffbba
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/norace.go
@@ -0,0 +1,12 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !race
+
+package socket
+
+func (m *Message) raceRead() {
+}
+func (m *Message) raceWrite() {
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/race.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/race.go
new file mode 100644
index 000000000..df60c62ff
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/race.go
@@ -0,0 +1,37 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build race
+
+package socket
+
+import (
+	"runtime"
+	"unsafe"
+)
+
+// This package reads and writes the Message buffers using a
+// direct system call, which the race detector can't see.
+// These functions tell the race detector what is going on during the syscall.
+
+func (m *Message) raceRead() {
+	for _, b := range m.Buffers {
+		if len(b) > 0 {
+			runtime.RaceReadRange(unsafe.Pointer(&b[0]), len(b))
+		}
+	}
+	if b := m.OOB; len(b) > 0 {
+		runtime.RaceReadRange(unsafe.Pointer(&b[0]), len(b))
+	}
+}
+func (m *Message) raceWrite() {
+	for _, b := range m.Buffers {
+		if len(b) > 0 {
+			runtime.RaceWriteRange(unsafe.Pointer(&b[0]), len(b))
+		}
+	}
+	if b := m.OOB; len(b) > 0 {
+		runtime.RaceWriteRange(unsafe.Pointer(&b[0]), len(b))
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn.go
new file mode 100644
index 000000000..b07b89005
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn.go
@@ -0,0 +1,64 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+import (
+	"errors"
+	"net"
+	"os"
+	"syscall"
+)
+
+// A Conn represents a raw connection.
+type Conn struct {
+	network string
+	c       syscall.RawConn
+}
+
+// NewConn returns a new raw connection.
+func NewConn(c net.Conn) (*Conn, error) {
+	var err error
+	var cc Conn
+	switch c := c.(type) {
+	case *net.TCPConn:
+		cc.network = "tcp"
+		cc.c, err = c.SyscallConn()
+	case *net.UDPConn:
+		cc.network = "udp"
+		cc.c, err = c.SyscallConn()
+	case *net.IPConn:
+		cc.network = "ip"
+		cc.c, err = c.SyscallConn()
+	default:
+		return nil, errors.New("unknown connection type")
+	}
+	if err != nil {
+		return nil, err
+	}
+	return &cc, nil
+}
+
+func (o *Option) get(c *Conn, b []byte) (int, error) {
+	var operr error
+	var n int
+	fn := func(s uintptr) {
+		n, operr = getsockopt(s, o.Level, o.Name, b)
+	}
+	if err := c.c.Control(fn); err != nil {
+		return 0, err
+	}
+	return n, os.NewSyscallError("getsockopt", operr)
+}
+
+func (o *Option) set(c *Conn, b []byte) error {
+	var operr error
+	fn := func(s uintptr) {
+		operr = setsockopt(s, o.Level, o.Name, b)
+	}
+	if err := c.c.Control(fn); err != nil {
+		return err
+	}
+	return os.NewSyscallError("setsockopt", operr)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn_mmsg.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn_mmsg.go
new file mode 100644
index 000000000..d01fc4c7d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn_mmsg.go
@@ -0,0 +1,79 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build linux
+
+package socket
+
+import (
+	"net"
+	"os"
+	"syscall"
+)
+
+func (c *Conn) recvMsgs(ms []Message, flags int) (int, error) {
+	for i := range ms {
+		ms[i].raceWrite()
+	}
+	hs := make(mmsghdrs, len(ms))
+	var parseFn func([]byte, string) (net.Addr, error)
+	if c.network != "tcp" {
+		parseFn = parseInetAddr
+	}
+	if err := hs.pack(ms, parseFn, nil); err != nil {
+		return 0, err
+	}
+	var operr error
+	var n int
+	fn := func(s uintptr) bool {
+		n, operr = recvmmsg(s, hs, flags)
+		if operr == syscall.EAGAIN {
+			return false
+		}
+		return true
+	}
+	if err := c.c.Read(fn); err != nil {
+		return n, err
+	}
+	if operr != nil {
+		return n, os.NewSyscallError("recvmmsg", operr)
+	}
+	if err := hs[:n].unpack(ms[:n], parseFn, c.network); err != nil {
+		return n, err
+	}
+	return n, nil
+}
+
+func (c *Conn) sendMsgs(ms []Message, flags int) (int, error) {
+	for i := range ms {
+		ms[i].raceRead()
+	}
+	hs := make(mmsghdrs, len(ms))
+	var marshalFn func(net.Addr) []byte
+	if c.network != "tcp" {
+		marshalFn = marshalInetAddr
+	}
+	if err := hs.pack(ms, nil, marshalFn); err != nil {
+		return 0, err
+	}
+	var operr error
+	var n int
+	fn := func(s uintptr) bool {
+		n, operr = sendmmsg(s, hs, flags)
+		if operr == syscall.EAGAIN {
+			return false
+		}
+		return true
+	}
+	if err := c.c.Write(fn); err != nil {
+		return n, err
+	}
+	if operr != nil {
+		return n, os.NewSyscallError("sendmmsg", operr)
+	}
+	if err := hs[:n].unpack(ms[:n], nil, ""); err != nil {
+		return n, err
+	}
+	return n, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn_msg.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn_msg.go
new file mode 100644
index 000000000..610b1a1a5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn_msg.go
@@ -0,0 +1,79 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris windows zos
+
+package socket
+
+import (
+	"os"
+	"runtime"
+	"syscall"
+)
+
+func (c *Conn) recvMsg(m *Message, flags int) error {
+	m.raceWrite()
+	var h msghdr
+	vs := make([]iovec, len(m.Buffers))
+	var sa []byte
+	if c.network != "tcp" {
+		sa = make([]byte, sizeofSockaddrInet6)
+	}
+	h.pack(vs, m.Buffers, m.OOB, sa)
+	var operr error
+	var n int
+	fn := func(s uintptr) bool {
+		n, operr = recvmsg(s, &h, flags)
+		if operr == syscall.EAGAIN || (runtime.GOOS == "zos" && operr == syscall.EWOULDBLOCK) {
+			return false
+		}
+		return true
+	}
+	if err := c.c.Read(fn); err != nil {
+		return err
+	}
+	if operr != nil {
+		return os.NewSyscallError("recvmsg", operr)
+	}
+	if c.network != "tcp" {
+		var err error
+		m.Addr, err = parseInetAddr(sa[:], c.network)
+		if err != nil {
+			return err
+		}
+	}
+	m.N = n
+	m.NN = h.controllen()
+	m.Flags = h.flags()
+	return nil
+}
+
+func (c *Conn) sendMsg(m *Message, flags int) error {
+	m.raceRead()
+	var h msghdr
+	vs := make([]iovec, len(m.Buffers))
+	var sa []byte
+	if m.Addr != nil {
+		sa = marshalInetAddr(m.Addr)
+	}
+	h.pack(vs, m.Buffers, m.OOB, sa)
+	var operr error
+	var n int
+	fn := func(s uintptr) bool {
+		n, operr = sendmsg(s, &h, flags)
+		if operr == syscall.EAGAIN || (runtime.GOOS == "zos" && operr == syscall.EWOULDBLOCK) {
+			return false
+		}
+		return true
+	}
+	if err := c.c.Write(fn); err != nil {
+		return err
+	}
+	if operr != nil {
+		return os.NewSyscallError("sendmsg", operr)
+	}
+	m.N = n
+	m.NN = len(m.OOB)
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn_nommsg.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn_nommsg.go
new file mode 100644
index 000000000..fe5bb942b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn_nommsg.go
@@ -0,0 +1,15 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !linux
+
+package socket
+
+func (c *Conn) recvMsgs(ms []Message, flags int) (int, error) {
+	return 0, errNotImplemented
+}
+
+func (c *Conn) sendMsgs(ms []Message, flags int) (int, error) {
+	return 0, errNotImplemented
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn_nomsg.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn_nomsg.go
new file mode 100644
index 000000000..e51b60d15
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/rawconn_nomsg.go
@@ -0,0 +1,15 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !aix,!darwin,!dragonfly,!freebsd,!linux,!netbsd,!openbsd,!solaris,!windows,!zos
+
+package socket
+
+func (c *Conn) recvMsg(m *Message, flags int) error {
+	return errNotImplemented
+}
+
+func (c *Conn) sendMsg(m *Message, flags int) error {
+	return errNotImplemented
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/socket.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/socket.go
new file mode 100644
index 000000000..dba47bf12
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/socket.go
@@ -0,0 +1,280 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Package socket provides a portable interface for socket system
+// calls.
+package socket // import "golang.org/x/net/internal/socket"
+
+import (
+	"errors"
+	"net"
+	"runtime"
+	"unsafe"
+)
+
+var errNotImplemented = errors.New("not implemented on " + runtime.GOOS + "/" + runtime.GOARCH)
+
+// An Option represents a sticky socket option.
+type Option struct {
+	Level int // level
+	Name  int // name; must be equal or greater than 1
+	Len   int // length of value in bytes; must be equal or greater than 1
+}
+
+// Get reads a value for the option from the kernel.
+// It returns the number of bytes written into b.
+func (o *Option) Get(c *Conn, b []byte) (int, error) {
+	if o.Name < 1 || o.Len < 1 {
+		return 0, errors.New("invalid option")
+	}
+	if len(b) < o.Len {
+		return 0, errors.New("short buffer")
+	}
+	return o.get(c, b)
+}
+
+// GetInt returns an integer value for the option.
+//
+// The Len field of Option must be either 1 or 4.
+func (o *Option) GetInt(c *Conn) (int, error) {
+	if o.Len != 1 && o.Len != 4 {
+		return 0, errors.New("invalid option")
+	}
+	var b []byte
+	var bb [4]byte
+	if o.Len == 1 {
+		b = bb[:1]
+	} else {
+		b = bb[:4]
+	}
+	n, err := o.get(c, b)
+	if err != nil {
+		return 0, err
+	}
+	if n != o.Len {
+		return 0, errors.New("invalid option length")
+	}
+	if o.Len == 1 {
+		return int(b[0]), nil
+	}
+	return int(NativeEndian.Uint32(b[:4])), nil
+}
+
+// Set writes the option and value to the kernel.
+func (o *Option) Set(c *Conn, b []byte) error {
+	if o.Name < 1 || o.Len < 1 {
+		return errors.New("invalid option")
+	}
+	if len(b) < o.Len {
+		return errors.New("short buffer")
+	}
+	return o.set(c, b)
+}
+
+// SetInt writes the option and value to the kernel.
+//
+// The Len field of Option must be either 1 or 4.
+func (o *Option) SetInt(c *Conn, v int) error {
+	if o.Len != 1 && o.Len != 4 {
+		return errors.New("invalid option")
+	}
+	var b []byte
+	if o.Len == 1 {
+		b = []byte{byte(v)}
+	} else {
+		var bb [4]byte
+		NativeEndian.PutUint32(bb[:o.Len], uint32(v))
+		b = bb[:4]
+	}
+	return o.set(c, b)
+}
+
+// ControlMessageSpace returns the whole length of control message.
+func ControlMessageSpace(dataLen int) int {
+	return controlMessageSpace(dataLen)
+}
+
+// A ControlMessage represents the head message in a stream of control
+// messages.
+//
+// A control message comprises of a header, data and a few padding
+// fields to conform to the interface to the kernel.
+//
+// See RFC 3542 for further information.
+type ControlMessage []byte
+
+// Data returns the data field of the control message at the head on
+// m.
+func (m ControlMessage) Data(dataLen int) []byte {
+	l := controlHeaderLen()
+	if len(m) < l || len(m) < l+dataLen {
+		return nil
+	}
+	return m[l : l+dataLen]
+}
+
+// Next returns the control message at the next on m.
+//
+// Next works only for standard control messages.
+func (m ControlMessage) Next(dataLen int) ControlMessage {
+	l := ControlMessageSpace(dataLen)
+	if len(m) < l {
+		return nil
+	}
+	return m[l:]
+}
+
+// MarshalHeader marshals the header fields of the control message at
+// the head on m.
+func (m ControlMessage) MarshalHeader(lvl, typ, dataLen int) error {
+	if len(m) < controlHeaderLen() {
+		return errors.New("short message")
+	}
+	h := (*cmsghdr)(unsafe.Pointer(&m[0]))
+	h.set(controlMessageLen(dataLen), lvl, typ)
+	return nil
+}
+
+// ParseHeader parses and returns the header fields of the control
+// message at the head on m.
+func (m ControlMessage) ParseHeader() (lvl, typ, dataLen int, err error) {
+	l := controlHeaderLen()
+	if len(m) < l {
+		return 0, 0, 0, errors.New("short message")
+	}
+	h := (*cmsghdr)(unsafe.Pointer(&m[0]))
+	return h.lvl(), h.typ(), int(uint64(h.len()) - uint64(l)), nil
+}
+
+// Marshal marshals the control message at the head on m, and returns
+// the next control message.
+func (m ControlMessage) Marshal(lvl, typ int, data []byte) (ControlMessage, error) {
+	l := len(data)
+	if len(m) < ControlMessageSpace(l) {
+		return nil, errors.New("short message")
+	}
+	h := (*cmsghdr)(unsafe.Pointer(&m[0]))
+	h.set(controlMessageLen(l), lvl, typ)
+	if l > 0 {
+		copy(m.Data(l), data)
+	}
+	return m.Next(l), nil
+}
+
+// Parse parses m as a single or multiple control messages.
+//
+// Parse works for both standard and compatible messages.
+func (m ControlMessage) Parse() ([]ControlMessage, error) {
+	var ms []ControlMessage
+	for len(m) >= controlHeaderLen() {
+		h := (*cmsghdr)(unsafe.Pointer(&m[0]))
+		l := h.len()
+		if l <= 0 {
+			return nil, errors.New("invalid header length")
+		}
+		if uint64(l) < uint64(controlHeaderLen()) {
+			return nil, errors.New("invalid message length")
+		}
+		if uint64(l) > uint64(len(m)) {
+			return nil, errors.New("short buffer")
+		}
+		// On message reception:
+		//
+		// |<- ControlMessageSpace --------------->|
+		// |<- controlMessageLen ---------->|      |
+		// |<- controlHeaderLen ->|         |      |
+		// +---------------+------+---------+------+
+		// |    Header     | PadH |  Data   | PadD |
+		// +---------------+------+---------+------+
+		//
+		// On compatible message reception:
+		//
+		// | ... |<- controlMessageLen ----------->|
+		// | ... |<- controlHeaderLen ->|          |
+		// +-----+---------------+------+----------+
+		// | ... |    Header     | PadH |   Data   |
+		// +-----+---------------+------+----------+
+		ms = append(ms, ControlMessage(m[:l]))
+		ll := l - controlHeaderLen()
+		if len(m) >= ControlMessageSpace(ll) {
+			m = m[ControlMessageSpace(ll):]
+		} else {
+			m = m[controlMessageLen(ll):]
+		}
+	}
+	return ms, nil
+}
+
+// NewControlMessage returns a new stream of control messages.
+func NewControlMessage(dataLen []int) ControlMessage {
+	var l int
+	for i := range dataLen {
+		l += ControlMessageSpace(dataLen[i])
+	}
+	return make([]byte, l)
+}
+
+// A Message represents an IO message.
+type Message struct {
+	// When writing, the Buffers field must contain at least one
+	// byte to write.
+	// When reading, the Buffers field will always contain a byte
+	// to read.
+	Buffers [][]byte
+
+	// OOB contains protocol-specific control or miscellaneous
+	// ancillary data known as out-of-band data.
+	OOB []byte
+
+	// Addr specifies a destination address when writing.
+	// It can be nil when the underlying protocol of the raw
+	// connection uses connection-oriented communication.
+	// After a successful read, it may contain the source address
+	// on the received packet.
+	Addr net.Addr
+
+	N     int // # of bytes read or written from/to Buffers
+	NN    int // # of bytes read or written from/to OOB
+	Flags int // protocol-specific information on the received message
+}
+
+// RecvMsg wraps recvmsg system call.
+//
+// The provided flags is a set of platform-dependent flags, such as
+// syscall.MSG_PEEK.
+func (c *Conn) RecvMsg(m *Message, flags int) error {
+	return c.recvMsg(m, flags)
+}
+
+// SendMsg wraps sendmsg system call.
+//
+// The provided flags is a set of platform-dependent flags, such as
+// syscall.MSG_DONTROUTE.
+func (c *Conn) SendMsg(m *Message, flags int) error {
+	return c.sendMsg(m, flags)
+}
+
+// RecvMsgs wraps recvmmsg system call.
+//
+// It returns the number of processed messages.
+//
+// The provided flags is a set of platform-dependent flags, such as
+// syscall.MSG_PEEK.
+//
+// Only Linux supports this.
+func (c *Conn) RecvMsgs(ms []Message, flags int) (int, error) {
+	return c.recvMsgs(ms, flags)
+}
+
+// SendMsgs wraps sendmmsg system call.
+//
+// It returns the number of processed messages.
+//
+// The provided flags is a set of platform-dependent flags, such as
+// syscall.MSG_DONTROUTE.
+//
+// Only Linux supports this.
+func (c *Conn) SendMsgs(ms []Message, flags int) (int, error) {
+	return c.sendMsgs(ms, flags)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys.go
new file mode 100644
index 000000000..4a26af186
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys.go
@@ -0,0 +1,23 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+import (
+	"encoding/binary"
+	"unsafe"
+)
+
+// NativeEndian is the machine native endian implementation of ByteOrder.
+var NativeEndian binary.ByteOrder
+
+func init() {
+	i := uint32(1)
+	b := (*[4]byte)(unsafe.Pointer(&i))
+	if b[0] == 1 {
+		NativeEndian = binary.LittleEndian
+	} else {
+		NativeEndian = binary.BigEndian
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_bsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_bsd.go
new file mode 100644
index 000000000..d432835b4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_bsd.go
@@ -0,0 +1,15 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd openbsd
+
+package socket
+
+func recvmmsg(s uintptr, hs []mmsghdr, flags int) (int, error) {
+	return 0, errNotImplemented
+}
+
+func sendmmsg(s uintptr, hs []mmsghdr, flags int) (int, error) {
+	return 0, errNotImplemented
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_const_unix.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_const_unix.go
new file mode 100644
index 000000000..43797d6e5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_const_unix.go
@@ -0,0 +1,17 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris
+
+package socket
+
+import "golang.org/x/sys/unix"
+
+const (
+	sysAF_UNSPEC = unix.AF_UNSPEC
+	sysAF_INET   = unix.AF_INET
+	sysAF_INET6  = unix.AF_INET6
+
+	sysSOCK_RAW = unix.SOCK_RAW
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_const_zos.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_const_zos.go
new file mode 100644
index 000000000..01b637203
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_const_zos.go
@@ -0,0 +1,17 @@
+// Copyright 2020 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build zos
+
+package socket
+
+import "syscall"
+
+const (
+	sysAF_UNSPEC = syscall.AF_UNSPEC
+	sysAF_INET   = syscall.AF_INET
+	sysAF_INET6  = syscall.AF_INET6
+
+	sysSOCK_RAW = syscall.SOCK_RAW
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linkname.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linkname.go
new file mode 100644
index 000000000..61c3f38a5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linkname.go
@@ -0,0 +1,42 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix go1.12,darwin
+
+package socket
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+//go:linkname syscall_getsockopt syscall.getsockopt
+func syscall_getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *uint32) error
+
+func getsockopt(s uintptr, level, name int, b []byte) (int, error) {
+	l := uint32(len(b))
+	err := syscall_getsockopt(int(s), level, name, unsafe.Pointer(&b[0]), &l)
+	return int(l), err
+}
+
+//go:linkname syscall_setsockopt syscall.setsockopt
+func syscall_setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) error
+
+func setsockopt(s uintptr, level, name int, b []byte) error {
+	return syscall_setsockopt(int(s), level, name, unsafe.Pointer(&b[0]), uintptr(len(b)))
+}
+
+//go:linkname syscall_recvmsg syscall.recvmsg
+func syscall_recvmsg(s int, msg *syscall.Msghdr, flags int) (n int, err error)
+
+func recvmsg(s uintptr, h *msghdr, flags int) (int, error) {
+	return syscall_recvmsg(int(s), (*syscall.Msghdr)(unsafe.Pointer(h)), flags)
+}
+
+//go:linkname syscall_sendmsg syscall.sendmsg
+func syscall_sendmsg(s int, msg *syscall.Msghdr, flags int) (n int, err error)
+
+func sendmsg(s uintptr, h *msghdr, flags int) (int, error) {
+	return syscall_sendmsg(int(s), (*syscall.Msghdr)(unsafe.Pointer(h)), flags)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux.go
new file mode 100644
index 000000000..8b03cd6de
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux.go
@@ -0,0 +1,22 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build linux,!s390x,!386
+
+package socket
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+func recvmmsg(s uintptr, hs []mmsghdr, flags int) (int, error) {
+	n, _, errno := syscall.Syscall6(sysRECVMMSG, s, uintptr(unsafe.Pointer(&hs[0])), uintptr(len(hs)), uintptr(flags), 0, 0)
+	return int(n), errnoErr(errno)
+}
+
+func sendmmsg(s uintptr, hs []mmsghdr, flags int) (int, error) {
+	n, _, errno := syscall.Syscall6(sysSENDMMSG, s, uintptr(unsafe.Pointer(&hs[0])), uintptr(len(hs)), uintptr(flags), 0, 0)
+	return int(n), errnoErr(errno)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_386.go
new file mode 100644
index 000000000..651215321
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_386.go
@@ -0,0 +1,53 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+const (
+	sysSETSOCKOPT = 0xe
+	sysGETSOCKOPT = 0xf
+	sysSENDMSG    = 0x10
+	sysRECVMSG    = 0x11
+	sysRECVMMSG   = 0x13
+	sysSENDMMSG   = 0x14
+)
+
+func socketcall(call, a0, a1, a2, a3, a4, a5 uintptr) (uintptr, syscall.Errno)
+func rawsocketcall(call, a0, a1, a2, a3, a4, a5 uintptr) (uintptr, syscall.Errno)
+
+func getsockopt(s uintptr, level, name int, b []byte) (int, error) {
+	l := uint32(len(b))
+	_, errno := socketcall(sysGETSOCKOPT, s, uintptr(level), uintptr(name), uintptr(unsafe.Pointer(&b[0])), uintptr(unsafe.Pointer(&l)), 0)
+	return int(l), errnoErr(errno)
+}
+
+func setsockopt(s uintptr, level, name int, b []byte) error {
+	_, errno := socketcall(sysSETSOCKOPT, s, uintptr(level), uintptr(name), uintptr(unsafe.Pointer(&b[0])), uintptr(len(b)), 0)
+	return errnoErr(errno)
+}
+
+func recvmsg(s uintptr, h *msghdr, flags int) (int, error) {
+	n, errno := socketcall(sysRECVMSG, s, uintptr(unsafe.Pointer(h)), uintptr(flags), 0, 0, 0)
+	return int(n), errnoErr(errno)
+}
+
+func sendmsg(s uintptr, h *msghdr, flags int) (int, error) {
+	n, errno := socketcall(sysSENDMSG, s, uintptr(unsafe.Pointer(h)), uintptr(flags), 0, 0, 0)
+	return int(n), errnoErr(errno)
+}
+
+func recvmmsg(s uintptr, hs []mmsghdr, flags int) (int, error) {
+	n, errno := socketcall(sysRECVMMSG, s, uintptr(unsafe.Pointer(&hs[0])), uintptr(len(hs)), uintptr(flags), 0, 0)
+	return int(n), errnoErr(errno)
+}
+
+func sendmmsg(s uintptr, hs []mmsghdr, flags int) (int, error) {
+	n, errno := socketcall(sysSENDMMSG, s, uintptr(unsafe.Pointer(&hs[0])), uintptr(len(hs)), uintptr(flags), 0, 0)
+	return int(n), errnoErr(errno)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_386.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_386.s
new file mode 100644
index 000000000..93e7d75ec
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_386.s
@@ -0,0 +1,11 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+#include "textflag.h"
+
+TEXT	·socketcall(SB),NOSPLIT,$0-36
+	JMP	syscall·socketcall(SB)
+
+TEXT	·rawsocketcall(SB),NOSPLIT,$0-36
+	JMP	syscall·rawsocketcall(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_amd64.go
new file mode 100644
index 000000000..9decee2e5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_amd64.go
@@ -0,0 +1,10 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+const (
+	sysRECVMMSG = 0x12b
+	sysSENDMMSG = 0x133
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_arm.go
new file mode 100644
index 000000000..d753b436d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_arm.go
@@ -0,0 +1,10 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+const (
+	sysRECVMMSG = 0x16d
+	sysSENDMMSG = 0x176
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_arm64.go
new file mode 100644
index 000000000..b67089436
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_arm64.go
@@ -0,0 +1,10 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+const (
+	sysRECVMMSG = 0xf3
+	sysSENDMMSG = 0x10d
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_mips.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_mips.go
new file mode 100644
index 000000000..9c0d74014
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_mips.go
@@ -0,0 +1,10 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+const (
+	sysRECVMMSG = 0x10ef
+	sysSENDMMSG = 0x10f7
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_mips64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_mips64.go
new file mode 100644
index 000000000..071a4aba8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_mips64.go
@@ -0,0 +1,10 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+const (
+	sysRECVMMSG = 0x14ae
+	sysSENDMMSG = 0x14b6
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_mips64le.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_mips64le.go
new file mode 100644
index 000000000..071a4aba8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_mips64le.go
@@ -0,0 +1,10 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+const (
+	sysRECVMMSG = 0x14ae
+	sysSENDMMSG = 0x14b6
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_mipsle.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_mipsle.go
new file mode 100644
index 000000000..9c0d74014
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_mipsle.go
@@ -0,0 +1,10 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+const (
+	sysRECVMMSG = 0x10ef
+	sysSENDMMSG = 0x10f7
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_ppc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_ppc64.go
new file mode 100644
index 000000000..21c1e3f00
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_ppc64.go
@@ -0,0 +1,10 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+const (
+	sysRECVMMSG = 0x157
+	sysSENDMMSG = 0x15d
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_ppc64le.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_ppc64le.go
new file mode 100644
index 000000000..21c1e3f00
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_ppc64le.go
@@ -0,0 +1,10 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+const (
+	sysRECVMMSG = 0x157
+	sysSENDMMSG = 0x15d
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_riscv64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_riscv64.go
new file mode 100644
index 000000000..64f69f1dc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_riscv64.go
@@ -0,0 +1,12 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build riscv64
+
+package socket
+
+const (
+	sysRECVMMSG = 0xf3
+	sysSENDMMSG = 0x10d
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_s390x.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_s390x.go
new file mode 100644
index 000000000..651215321
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_s390x.go
@@ -0,0 +1,53 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+const (
+	sysSETSOCKOPT = 0xe
+	sysGETSOCKOPT = 0xf
+	sysSENDMSG    = 0x10
+	sysRECVMSG    = 0x11
+	sysRECVMMSG   = 0x13
+	sysSENDMMSG   = 0x14
+)
+
+func socketcall(call, a0, a1, a2, a3, a4, a5 uintptr) (uintptr, syscall.Errno)
+func rawsocketcall(call, a0, a1, a2, a3, a4, a5 uintptr) (uintptr, syscall.Errno)
+
+func getsockopt(s uintptr, level, name int, b []byte) (int, error) {
+	l := uint32(len(b))
+	_, errno := socketcall(sysGETSOCKOPT, s, uintptr(level), uintptr(name), uintptr(unsafe.Pointer(&b[0])), uintptr(unsafe.Pointer(&l)), 0)
+	return int(l), errnoErr(errno)
+}
+
+func setsockopt(s uintptr, level, name int, b []byte) error {
+	_, errno := socketcall(sysSETSOCKOPT, s, uintptr(level), uintptr(name), uintptr(unsafe.Pointer(&b[0])), uintptr(len(b)), 0)
+	return errnoErr(errno)
+}
+
+func recvmsg(s uintptr, h *msghdr, flags int) (int, error) {
+	n, errno := socketcall(sysRECVMSG, s, uintptr(unsafe.Pointer(h)), uintptr(flags), 0, 0, 0)
+	return int(n), errnoErr(errno)
+}
+
+func sendmsg(s uintptr, h *msghdr, flags int) (int, error) {
+	n, errno := socketcall(sysSENDMSG, s, uintptr(unsafe.Pointer(h)), uintptr(flags), 0, 0, 0)
+	return int(n), errnoErr(errno)
+}
+
+func recvmmsg(s uintptr, hs []mmsghdr, flags int) (int, error) {
+	n, errno := socketcall(sysRECVMMSG, s, uintptr(unsafe.Pointer(&hs[0])), uintptr(len(hs)), uintptr(flags), 0, 0)
+	return int(n), errnoErr(errno)
+}
+
+func sendmmsg(s uintptr, hs []mmsghdr, flags int) (int, error) {
+	n, errno := socketcall(sysSENDMMSG, s, uintptr(unsafe.Pointer(&hs[0])), uintptr(len(hs)), uintptr(flags), 0, 0)
+	return int(n), errnoErr(errno)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_s390x.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_s390x.s
new file mode 100644
index 000000000..06d75628c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_linux_s390x.s
@@ -0,0 +1,11 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+#include "textflag.h"
+
+TEXT	·socketcall(SB),NOSPLIT,$0-72
+	JMP	syscall·socketcall(SB)
+
+TEXT	·rawsocketcall(SB),NOSPLIT,$0-72
+	JMP	syscall·rawsocketcall(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_netbsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_netbsd.go
new file mode 100644
index 000000000..431851c12
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_netbsd.go
@@ -0,0 +1,25 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+const (
+	sysRECVMMSG = 0x1db
+	sysSENDMMSG = 0x1dc
+)
+
+func recvmmsg(s uintptr, hs []mmsghdr, flags int) (int, error) {
+	n, _, errno := syscall.Syscall6(sysRECVMMSG, s, uintptr(unsafe.Pointer(&hs[0])), uintptr(len(hs)), uintptr(flags), 0, 0)
+	return int(n), errnoErr(errno)
+}
+
+func sendmmsg(s uintptr, hs []mmsghdr, flags int) (int, error) {
+	n, _, errno := syscall.Syscall6(sysSENDMMSG, s, uintptr(unsafe.Pointer(&hs[0])), uintptr(len(hs)), uintptr(flags), 0, 0)
+	return int(n), errnoErr(errno)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_posix.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_posix.go
new file mode 100644
index 000000000..05ded237e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_posix.go
@@ -0,0 +1,183 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris windows zos
+
+package socket
+
+import (
+	"encoding/binary"
+	"errors"
+	"net"
+	"runtime"
+	"strconv"
+	"sync"
+	"time"
+)
+
+func marshalInetAddr(a net.Addr) []byte {
+	switch a := a.(type) {
+	case *net.TCPAddr:
+		return marshalSockaddr(a.IP, a.Port, a.Zone)
+	case *net.UDPAddr:
+		return marshalSockaddr(a.IP, a.Port, a.Zone)
+	case *net.IPAddr:
+		return marshalSockaddr(a.IP, 0, a.Zone)
+	default:
+		return nil
+	}
+}
+
+func marshalSockaddr(ip net.IP, port int, zone string) []byte {
+	if ip4 := ip.To4(); ip4 != nil {
+		b := make([]byte, sizeofSockaddrInet)
+		switch runtime.GOOS {
+		case "android", "illumos", "linux", "solaris", "windows":
+			NativeEndian.PutUint16(b[:2], uint16(sysAF_INET))
+		default:
+			b[0] = sizeofSockaddrInet
+			b[1] = sysAF_INET
+		}
+		binary.BigEndian.PutUint16(b[2:4], uint16(port))
+		copy(b[4:8], ip4)
+		return b
+	}
+	if ip6 := ip.To16(); ip6 != nil && ip.To4() == nil {
+		b := make([]byte, sizeofSockaddrInet6)
+		switch runtime.GOOS {
+		case "android", "illumos", "linux", "solaris", "windows":
+			NativeEndian.PutUint16(b[:2], uint16(sysAF_INET6))
+		default:
+			b[0] = sizeofSockaddrInet6
+			b[1] = sysAF_INET6
+		}
+		binary.BigEndian.PutUint16(b[2:4], uint16(port))
+		copy(b[8:24], ip6)
+		if zone != "" {
+			NativeEndian.PutUint32(b[24:28], uint32(zoneCache.index(zone)))
+		}
+		return b
+	}
+	return nil
+}
+
+func parseInetAddr(b []byte, network string) (net.Addr, error) {
+	if len(b) < 2 {
+		return nil, errors.New("invalid address")
+	}
+	var af int
+	switch runtime.GOOS {
+	case "android", "illumos", "linux", "solaris", "windows":
+		af = int(NativeEndian.Uint16(b[:2]))
+	default:
+		af = int(b[1])
+	}
+	var ip net.IP
+	var zone string
+	if af == sysAF_INET {
+		if len(b) < sizeofSockaddrInet {
+			return nil, errors.New("short address")
+		}
+		ip = make(net.IP, net.IPv4len)
+		copy(ip, b[4:8])
+	}
+	if af == sysAF_INET6 {
+		if len(b) < sizeofSockaddrInet6 {
+			return nil, errors.New("short address")
+		}
+		ip = make(net.IP, net.IPv6len)
+		copy(ip, b[8:24])
+		if id := int(NativeEndian.Uint32(b[24:28])); id > 0 {
+			zone = zoneCache.name(id)
+		}
+	}
+	switch network {
+	case "tcp", "tcp4", "tcp6":
+		return &net.TCPAddr{IP: ip, Port: int(binary.BigEndian.Uint16(b[2:4])), Zone: zone}, nil
+	case "udp", "udp4", "udp6":
+		return &net.UDPAddr{IP: ip, Port: int(binary.BigEndian.Uint16(b[2:4])), Zone: zone}, nil
+	default:
+		return &net.IPAddr{IP: ip, Zone: zone}, nil
+	}
+}
+
+// An ipv6ZoneCache represents a cache holding partial network
+// interface information. It is used for reducing the cost of IPv6
+// addressing scope zone resolution.
+//
+// Multiple names sharing the index are managed by first-come
+// first-served basis for consistency.
+type ipv6ZoneCache struct {
+	sync.RWMutex                // guard the following
+	lastFetched  time.Time      // last time routing information was fetched
+	toIndex      map[string]int // interface name to its index
+	toName       map[int]string // interface index to its name
+}
+
+var zoneCache = ipv6ZoneCache{
+	toIndex: make(map[string]int),
+	toName:  make(map[int]string),
+}
+
+// update refreshes the network interface information if the cache was last
+// updated more than 1 minute ago, or if force is set. It returns whether the
+// cache was updated.
+func (zc *ipv6ZoneCache) update(ift []net.Interface, force bool) (updated bool) {
+	zc.Lock()
+	defer zc.Unlock()
+	now := time.Now()
+	if !force && zc.lastFetched.After(now.Add(-60*time.Second)) {
+		return false
+	}
+	zc.lastFetched = now
+	if len(ift) == 0 {
+		var err error
+		if ift, err = net.Interfaces(); err != nil {
+			return false
+		}
+	}
+	zc.toIndex = make(map[string]int, len(ift))
+	zc.toName = make(map[int]string, len(ift))
+	for _, ifi := range ift {
+		zc.toIndex[ifi.Name] = ifi.Index
+		if _, ok := zc.toName[ifi.Index]; !ok {
+			zc.toName[ifi.Index] = ifi.Name
+		}
+	}
+	return true
+}
+
+func (zc *ipv6ZoneCache) name(zone int) string {
+	updated := zoneCache.update(nil, false)
+	zoneCache.RLock()
+	name, ok := zoneCache.toName[zone]
+	zoneCache.RUnlock()
+	if !ok && !updated {
+		zoneCache.update(nil, true)
+		zoneCache.RLock()
+		name, ok = zoneCache.toName[zone]
+		zoneCache.RUnlock()
+	}
+	if !ok { // last resort
+		name = strconv.Itoa(zone)
+	}
+	return name
+}
+
+func (zc *ipv6ZoneCache) index(zone string) int {
+	updated := zoneCache.update(nil, false)
+	zoneCache.RLock()
+	index, ok := zoneCache.toIndex[zone]
+	zoneCache.RUnlock()
+	if !ok && !updated {
+		zoneCache.update(nil, true)
+		zoneCache.RLock()
+		index, ok = zoneCache.toIndex[zone]
+		zoneCache.RUnlock()
+	}
+	if !ok { // last resort
+		index, _ = strconv.Atoi(zone)
+	}
+	return index
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_solaris.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_solaris.go
new file mode 100644
index 000000000..e79ca9518
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_solaris.go
@@ -0,0 +1,59 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+//go:cgo_import_dynamic libc___xnet_getsockopt __xnet_getsockopt "libsocket.so"
+//go:cgo_import_dynamic libc_setsockopt setsockopt "libsocket.so"
+//go:cgo_import_dynamic libc___xnet_recvmsg __xnet_recvmsg "libsocket.so"
+//go:cgo_import_dynamic libc___xnet_sendmsg __xnet_sendmsg "libsocket.so"
+
+//go:linkname procGetsockopt libc___xnet_getsockopt
+//go:linkname procSetsockopt libc_setsockopt
+//go:linkname procRecvmsg libc___xnet_recvmsg
+//go:linkname procSendmsg libc___xnet_sendmsg
+
+var (
+	procGetsockopt uintptr
+	procSetsockopt uintptr
+	procRecvmsg    uintptr
+	procSendmsg    uintptr
+)
+
+func sysvicall6(trap, nargs, a1, a2, a3, a4, a5, a6 uintptr) (uintptr, uintptr, syscall.Errno)
+func rawSysvicall6(trap, nargs, a1, a2, a3, a4, a5, a6 uintptr) (uintptr, uintptr, syscall.Errno)
+
+func getsockopt(s uintptr, level, name int, b []byte) (int, error) {
+	l := uint32(len(b))
+	_, _, errno := sysvicall6(uintptr(unsafe.Pointer(&procGetsockopt)), 5, s, uintptr(level), uintptr(name), uintptr(unsafe.Pointer(&b[0])), uintptr(unsafe.Pointer(&l)), 0)
+	return int(l), errnoErr(errno)
+}
+
+func setsockopt(s uintptr, level, name int, b []byte) error {
+	_, _, errno := sysvicall6(uintptr(unsafe.Pointer(&procSetsockopt)), 5, s, uintptr(level), uintptr(name), uintptr(unsafe.Pointer(&b[0])), uintptr(len(b)), 0)
+	return errnoErr(errno)
+}
+
+func recvmsg(s uintptr, h *msghdr, flags int) (int, error) {
+	n, _, errno := sysvicall6(uintptr(unsafe.Pointer(&procRecvmsg)), 3, s, uintptr(unsafe.Pointer(h)), uintptr(flags), 0, 0, 0)
+	return int(n), errnoErr(errno)
+}
+
+func sendmsg(s uintptr, h *msghdr, flags int) (int, error) {
+	n, _, errno := sysvicall6(uintptr(unsafe.Pointer(&procSendmsg)), 3, s, uintptr(unsafe.Pointer(h)), uintptr(flags), 0, 0, 0)
+	return int(n), errnoErr(errno)
+}
+
+func recvmmsg(s uintptr, hs []mmsghdr, flags int) (int, error) {
+	return 0, errNotImplemented
+}
+
+func sendmmsg(s uintptr, hs []mmsghdr, flags int) (int, error) {
+	return 0, errNotImplemented
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_solaris_amd64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_solaris_amd64.s
new file mode 100644
index 000000000..a18ac5ed7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_solaris_amd64.s
@@ -0,0 +1,11 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+#include "textflag.h"
+
+TEXT	·sysvicall6(SB),NOSPLIT,$0-88
+	JMP	syscall·sysvicall6(SB)
+
+TEXT	·rawSysvicall6(SB),NOSPLIT,$0-88
+	JMP	syscall·rawSysvicall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_stub.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_stub.go
new file mode 100644
index 000000000..3c97008da
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_stub.go
@@ -0,0 +1,49 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !aix,!darwin,!dragonfly,!freebsd,!linux,!netbsd,!openbsd,!solaris,!windows,!zos
+
+package socket
+
+import "net"
+
+const (
+	sysAF_UNSPEC = 0x0
+	sysAF_INET   = 0x2
+	sysAF_INET6  = 0xa
+
+	sysSOCK_RAW = 0x3
+)
+
+func marshalInetAddr(ip net.IP, port int, zone string) []byte {
+	return nil
+}
+
+func parseInetAddr(b []byte, network string) (net.Addr, error) {
+	return nil, errNotImplemented
+}
+
+func getsockopt(s uintptr, level, name int, b []byte) (int, error) {
+	return 0, errNotImplemented
+}
+
+func setsockopt(s uintptr, level, name int, b []byte) error {
+	return errNotImplemented
+}
+
+func recvmsg(s uintptr, h *msghdr, flags int) (int, error) {
+	return 0, errNotImplemented
+}
+
+func sendmsg(s uintptr, h *msghdr, flags int) (int, error) {
+	return 0, errNotImplemented
+}
+
+func recvmmsg(s uintptr, hs []mmsghdr, flags int) (int, error) {
+	return 0, errNotImplemented
+}
+
+func sendmmsg(s uintptr, hs []mmsghdr, flags int) (int, error) {
+	return 0, errNotImplemented
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_unix.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_unix.go
new file mode 100644
index 000000000..0eb71283f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_unix.go
@@ -0,0 +1,33 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build dragonfly freebsd linux,!s390x,!386 netbsd openbsd
+
+package socket
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+func getsockopt(s uintptr, level, name int, b []byte) (int, error) {
+	l := uint32(len(b))
+	_, _, errno := syscall.Syscall6(syscall.SYS_GETSOCKOPT, s, uintptr(level), uintptr(name), uintptr(unsafe.Pointer(&b[0])), uintptr(unsafe.Pointer(&l)), 0)
+	return int(l), errnoErr(errno)
+}
+
+func setsockopt(s uintptr, level, name int, b []byte) error {
+	_, _, errno := syscall.Syscall6(syscall.SYS_SETSOCKOPT, s, uintptr(level), uintptr(name), uintptr(unsafe.Pointer(&b[0])), uintptr(len(b)), 0)
+	return errnoErr(errno)
+}
+
+func recvmsg(s uintptr, h *msghdr, flags int) (int, error) {
+	n, _, errno := syscall.Syscall(syscall.SYS_RECVMSG, s, uintptr(unsafe.Pointer(h)), uintptr(flags))
+	return int(n), errnoErr(errno)
+}
+
+func sendmsg(s uintptr, h *msghdr, flags int) (int, error) {
+	n, _, errno := syscall.Syscall(syscall.SYS_SENDMSG, s, uintptr(unsafe.Pointer(h)), uintptr(flags))
+	return int(n), errnoErr(errno)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_windows.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_windows.go
new file mode 100644
index 000000000..d556a4461
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_windows.go
@@ -0,0 +1,71 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+import (
+	"syscall"
+	"unsafe"
+
+	"golang.org/x/sys/windows"
+)
+
+func probeProtocolStack() int {
+	var p uintptr
+	return int(unsafe.Sizeof(p))
+}
+
+const (
+	sysAF_UNSPEC = windows.AF_UNSPEC
+	sysAF_INET   = windows.AF_INET
+	sysAF_INET6  = windows.AF_INET6
+
+	sysSOCK_RAW = windows.SOCK_RAW
+)
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]uint8
+}
+
+type sockaddrInet6 struct {
+	Family   uint16
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
+
+func getsockopt(s uintptr, level, name int, b []byte) (int, error) {
+	l := uint32(len(b))
+	err := syscall.Getsockopt(syscall.Handle(s), int32(level), int32(name), (*byte)(unsafe.Pointer(&b[0])), (*int32)(unsafe.Pointer(&l)))
+	return int(l), err
+}
+
+func setsockopt(s uintptr, level, name int, b []byte) error {
+	return syscall.Setsockopt(syscall.Handle(s), int32(level), int32(name), (*byte)(unsafe.Pointer(&b[0])), int32(len(b)))
+}
+
+func recvmsg(s uintptr, h *msghdr, flags int) (int, error) {
+	return 0, errNotImplemented
+}
+
+func sendmsg(s uintptr, h *msghdr, flags int) (int, error) {
+	return 0, errNotImplemented
+}
+
+func recvmmsg(s uintptr, hs []mmsghdr, flags int) (int, error) {
+	return 0, errNotImplemented
+}
+
+func sendmmsg(s uintptr, hs []mmsghdr, flags int) (int, error) {
+	return 0, errNotImplemented
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_zos_s390x.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_zos_s390x.go
new file mode 100644
index 000000000..1e38b9223
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_zos_s390x.go
@@ -0,0 +1,38 @@
+// Copyright 2020 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+func syscall_syscall(trap, a1, a2, a3 uintptr) (r1, r2 uintptr, err syscall.Errno)
+func syscall_syscall6(trap, a1, a2, a3, a4, a5, a6 uintptr) (r1, r2 uintptr, err syscall.Errno)
+
+func probeProtocolStack() int {
+	return 4 // sizeof(int) on GOOS=zos GOARCH=s390x
+}
+
+func getsockopt(s uintptr, level, name int, b []byte) (int, error) {
+	l := uint32(len(b))
+	_, _, errno := syscall_syscall6(syscall.SYS_GETSOCKOPT, s, uintptr(level), uintptr(name), uintptr(unsafe.Pointer(&b[0])), uintptr(unsafe.Pointer(&l)), 0)
+	return int(l), errnoErr(errno)
+}
+
+func setsockopt(s uintptr, level, name int, b []byte) error {
+	_, _, errno := syscall_syscall6(syscall.SYS_SETSOCKOPT, s, uintptr(level), uintptr(name), uintptr(unsafe.Pointer(&b[0])), uintptr(len(b)), 0)
+	return errnoErr(errno)
+}
+
+func recvmsg(s uintptr, h *msghdr, flags int) (int, error) {
+	n, _, errno := syscall_syscall(syscall.SYS___RECVMSG_A, s, uintptr(unsafe.Pointer(h)), uintptr(flags))
+	return int(n), errnoErr(errno)
+}
+
+func sendmsg(s uintptr, h *msghdr, flags int) (int, error) {
+	n, _, errno := syscall_syscall(syscall.SYS___SENDMSG_A, s, uintptr(unsafe.Pointer(h)), uintptr(flags))
+	return int(n), errnoErr(errno)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_zos_s390x.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_zos_s390x.s
new file mode 100644
index 000000000..60d5839c2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/sys_zos_s390x.s
@@ -0,0 +1,11 @@
+// Copyright 2020 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+#include "textflag.h"
+
+TEXT ·syscall_syscall(SB),NOSPLIT,$0
+        JMP     syscall·_syscall(SB)
+
+TEXT ·syscall_syscall6(SB),NOSPLIT,$0
+        JMP     syscall·_syscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_aix_ppc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_aix_ppc64.go
new file mode 100644
index 000000000..93d923ad7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_aix_ppc64.go
@@ -0,0 +1,59 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_aix.go
+
+// Added for go1.11 compatibility
+// +build aix
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type mmsghdr struct {
+	Hdr       msghdr
+	Len       uint32
+	Pad_cgo_0 [4]byte
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]uint8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x30
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_darwin_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_darwin_386.go
new file mode 100644
index 000000000..150f980f5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_darwin_386.go
@@ -0,0 +1,50 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_darwin.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x8
+	sizeofMsghdr = 0x1c
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_darwin_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_darwin_amd64.go
new file mode 100644
index 000000000..a686c9528
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_darwin_amd64.go
@@ -0,0 +1,52 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_darwin.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *iovec
+	Iovlen     int32
+	Pad_cgo_1  [4]byte
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x30
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_darwin_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_darwin_arm.go
new file mode 100644
index 000000000..150f980f5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_darwin_arm.go
@@ -0,0 +1,50 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_darwin.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x8
+	sizeofMsghdr = 0x1c
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_darwin_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_darwin_arm64.go
new file mode 100644
index 000000000..a686c9528
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_darwin_arm64.go
@@ -0,0 +1,52 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_darwin.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *iovec
+	Iovlen     int32
+	Pad_cgo_1  [4]byte
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x30
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_dragonfly_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_dragonfly_amd64.go
new file mode 100644
index 000000000..d45c197e2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_dragonfly_amd64.go
@@ -0,0 +1,52 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_dragonfly.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *iovec
+	Iovlen     int32
+	Pad_cgo_1  [4]byte
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x30
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_freebsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_freebsd_386.go
new file mode 100644
index 000000000..ffec860ea
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_freebsd_386.go
@@ -0,0 +1,50 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_freebsd.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x8
+	sizeofMsghdr = 0x1c
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_freebsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_freebsd_amd64.go
new file mode 100644
index 000000000..aa701ab67
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_freebsd_amd64.go
@@ -0,0 +1,52 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_freebsd.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *iovec
+	Iovlen     int32
+	Pad_cgo_1  [4]byte
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x30
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_freebsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_freebsd_arm.go
new file mode 100644
index 000000000..ffec860ea
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_freebsd_arm.go
@@ -0,0 +1,50 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_freebsd.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x8
+	sizeofMsghdr = 0x1c
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_freebsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_freebsd_arm64.go
new file mode 100644
index 000000000..aa701ab67
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_freebsd_arm64.go
@@ -0,0 +1,52 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_freebsd.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *iovec
+	Iovlen     int32
+	Pad_cgo_1  [4]byte
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x30
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_386.go
new file mode 100644
index 000000000..0c847bee7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_386.go
@@ -0,0 +1,53 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *iovec
+	Iovlen     uint32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type mmsghdr struct {
+	Hdr msghdr
+	Len uint32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type sockaddrInet6 struct {
+	Family   uint16
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x8
+	sizeofMsghdr = 0x1c
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_amd64.go
new file mode 100644
index 000000000..15e2aecaa
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_amd64.go
@@ -0,0 +1,56 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	Pad_cgo_1  [4]byte
+}
+
+type mmsghdr struct {
+	Hdr       msghdr
+	Len       uint32
+	Pad_cgo_0 [4]byte
+}
+
+type cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type sockaddrInet6 struct {
+	Family   uint16
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x38
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_arm.go
new file mode 100644
index 000000000..0c847bee7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_arm.go
@@ -0,0 +1,53 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *iovec
+	Iovlen     uint32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type mmsghdr struct {
+	Hdr msghdr
+	Len uint32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type sockaddrInet6 struct {
+	Family   uint16
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x8
+	sizeofMsghdr = 0x1c
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_arm64.go
new file mode 100644
index 000000000..15e2aecaa
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_arm64.go
@@ -0,0 +1,56 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	Pad_cgo_1  [4]byte
+}
+
+type mmsghdr struct {
+	Hdr       msghdr
+	Len       uint32
+	Pad_cgo_0 [4]byte
+}
+
+type cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type sockaddrInet6 struct {
+	Family   uint16
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x38
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_mips.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_mips.go
new file mode 100644
index 000000000..0c847bee7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_mips.go
@@ -0,0 +1,53 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *iovec
+	Iovlen     uint32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type mmsghdr struct {
+	Hdr msghdr
+	Len uint32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type sockaddrInet6 struct {
+	Family   uint16
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x8
+	sizeofMsghdr = 0x1c
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_mips64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_mips64.go
new file mode 100644
index 000000000..15e2aecaa
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_mips64.go
@@ -0,0 +1,56 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	Pad_cgo_1  [4]byte
+}
+
+type mmsghdr struct {
+	Hdr       msghdr
+	Len       uint32
+	Pad_cgo_0 [4]byte
+}
+
+type cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type sockaddrInet6 struct {
+	Family   uint16
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x38
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_mips64le.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_mips64le.go
new file mode 100644
index 000000000..15e2aecaa
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_mips64le.go
@@ -0,0 +1,56 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	Pad_cgo_1  [4]byte
+}
+
+type mmsghdr struct {
+	Hdr       msghdr
+	Len       uint32
+	Pad_cgo_0 [4]byte
+}
+
+type cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type sockaddrInet6 struct {
+	Family   uint16
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x38
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_mipsle.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_mipsle.go
new file mode 100644
index 000000000..0c847bee7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_mipsle.go
@@ -0,0 +1,53 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *iovec
+	Iovlen     uint32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type mmsghdr struct {
+	Hdr msghdr
+	Len uint32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type sockaddrInet6 struct {
+	Family   uint16
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x8
+	sizeofMsghdr = 0x1c
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_ppc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_ppc64.go
new file mode 100644
index 000000000..15e2aecaa
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_ppc64.go
@@ -0,0 +1,56 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	Pad_cgo_1  [4]byte
+}
+
+type mmsghdr struct {
+	Hdr       msghdr
+	Len       uint32
+	Pad_cgo_0 [4]byte
+}
+
+type cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type sockaddrInet6 struct {
+	Family   uint16
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x38
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_ppc64le.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_ppc64le.go
new file mode 100644
index 000000000..15e2aecaa
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_ppc64le.go
@@ -0,0 +1,56 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	Pad_cgo_1  [4]byte
+}
+
+type mmsghdr struct {
+	Hdr       msghdr
+	Len       uint32
+	Pad_cgo_0 [4]byte
+}
+
+type cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type sockaddrInet6 struct {
+	Family   uint16
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x38
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_riscv64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_riscv64.go
new file mode 100644
index 000000000..8640c03e4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_riscv64.go
@@ -0,0 +1,57 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+// +build riscv64
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	Pad_cgo_0  [4]byte
+}
+
+type mmsghdr struct {
+	Hdr       msghdr
+	Len       uint32
+	Pad_cgo_0 [4]byte
+}
+
+type cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type sockaddrInet6 struct {
+	Family   uint16
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x38
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_s390x.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_s390x.go
new file mode 100644
index 000000000..15e2aecaa
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_linux_s390x.go
@@ -0,0 +1,56 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	Pad_cgo_1  [4]byte
+}
+
+type mmsghdr struct {
+	Hdr       msghdr
+	Len       uint32
+	Pad_cgo_0 [4]byte
+}
+
+type cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type sockaddrInet6 struct {
+	Family   uint16
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x38
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_netbsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_netbsd_386.go
new file mode 100644
index 000000000..6b72d24dd
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_netbsd_386.go
@@ -0,0 +1,55 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_netbsd.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type mmsghdr struct {
+	Hdr msghdr
+	Len uint32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x8
+	sizeofMsghdr = 0x1c
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_netbsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_netbsd_amd64.go
new file mode 100644
index 000000000..9aaa4ab1c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_netbsd_amd64.go
@@ -0,0 +1,58 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_netbsd.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *iovec
+	Iovlen     int32
+	Pad_cgo_1  [4]byte
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type mmsghdr struct {
+	Hdr       msghdr
+	Len       uint32
+	Pad_cgo_0 [4]byte
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x30
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_netbsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_netbsd_arm.go
new file mode 100644
index 000000000..6b72d24dd
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_netbsd_arm.go
@@ -0,0 +1,55 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_netbsd.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type mmsghdr struct {
+	Hdr msghdr
+	Len uint32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x8
+	sizeofMsghdr = 0x1c
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_netbsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_netbsd_arm64.go
new file mode 100644
index 000000000..9aaa4ab1c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_netbsd_arm64.go
@@ -0,0 +1,58 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_netbsd.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *iovec
+	Iovlen     int32
+	Pad_cgo_1  [4]byte
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type mmsghdr struct {
+	Hdr       msghdr
+	Len       uint32
+	Pad_cgo_0 [4]byte
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x30
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_openbsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_openbsd_386.go
new file mode 100644
index 000000000..3ec8d42fe
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_openbsd_386.go
@@ -0,0 +1,50 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_openbsd.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *iovec
+	Iovlen     uint32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x8
+	sizeofMsghdr = 0x1c
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_openbsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_openbsd_amd64.go
new file mode 100644
index 000000000..ea0ee008d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_openbsd_amd64.go
@@ -0,0 +1,52 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_openbsd.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *iovec
+	Iovlen     uint32
+	Pad_cgo_1  [4]byte
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x30
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_openbsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_openbsd_arm.go
new file mode 100644
index 000000000..3ec8d42fe
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_openbsd_arm.go
@@ -0,0 +1,50 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_openbsd.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *iovec
+	Iovlen     uint32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x8
+	sizeofMsghdr = 0x1c
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_openbsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_openbsd_arm64.go
new file mode 100644
index 000000000..ea0ee008d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_openbsd_arm64.go
@@ -0,0 +1,52 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_openbsd.go
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *iovec
+	Iovlen     uint32
+	Pad_cgo_1  [4]byte
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x30
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x1c
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_solaris_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_solaris_amd64.go
new file mode 100644
index 000000000..48b2b591f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_solaris_amd64.go
@@ -0,0 +1,51 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_solaris.go
+
+package socket
+
+type iovec struct {
+	Base *int8
+	Len  uint64
+}
+
+type msghdr struct {
+	Name         *byte
+	Namelen      uint32
+	Pad_cgo_0    [4]byte
+	Iov          *iovec
+	Iovlen       int32
+	Pad_cgo_1    [4]byte
+	Accrights    *int8
+	Accrightslen int32
+	Pad_cgo_2    [4]byte
+}
+
+type cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type sockaddrInet6 struct {
+	Family         uint16
+	Port           uint16
+	Flowinfo       uint32
+	Addr           [16]byte /* in6_addr */
+	Scope_id       uint32
+	X__sin6_src_id uint32
+}
+
+const (
+	sizeofIovec  = 0x10
+	sizeofMsghdr = 0x30
+
+	sizeofSockaddrInet  = 0x10
+	sizeofSockaddrInet6 = 0x20
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_zos_s390x.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_zos_s390x.go
new file mode 100644
index 000000000..514ca3754
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socket/zsys_zos_s390x.go
@@ -0,0 +1,32 @@
+// Copyright 2020 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socket
+
+type iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type msghdr struct {
+	Name       *byte
+	Iov        *iovec
+	Control    *byte
+	Flags      int32
+	Namelen    uint32
+	Iovlen     int32
+	Controllen uint32
+}
+
+type cmsghdr struct {
+	Len   int32
+	Level int32
+	Type  int32
+}
+
+const (
+	sizeofCmsghdr       = 12
+	sizeofSockaddrInet  = 16
+	sizeofSockaddrInet6 = 28
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socks/client.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socks/client.go
new file mode 100644
index 000000000..3d6f516a5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socks/client.go
@@ -0,0 +1,168 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package socks
+
+import (
+	"context"
+	"errors"
+	"io"
+	"net"
+	"strconv"
+	"time"
+)
+
+var (
+	noDeadline   = time.Time{}
+	aLongTimeAgo = time.Unix(1, 0)
+)
+
+func (d *Dialer) connect(ctx context.Context, c net.Conn, address string) (_ net.Addr, ctxErr error) {
+	host, port, err := splitHostPort(address)
+	if err != nil {
+		return nil, err
+	}
+	if deadline, ok := ctx.Deadline(); ok && !deadline.IsZero() {
+		c.SetDeadline(deadline)
+		defer c.SetDeadline(noDeadline)
+	}
+	if ctx != context.Background() {
+		errCh := make(chan error, 1)
+		done := make(chan struct{})
+		defer func() {
+			close(done)
+			if ctxErr == nil {
+				ctxErr = <-errCh
+			}
+		}()
+		go func() {
+			select {
+			case <-ctx.Done():
+				c.SetDeadline(aLongTimeAgo)
+				errCh <- ctx.Err()
+			case <-done:
+				errCh <- nil
+			}
+		}()
+	}
+
+	b := make([]byte, 0, 6+len(host)) // the size here is just an estimate
+	b = append(b, Version5)
+	if len(d.AuthMethods) == 0 || d.Authenticate == nil {
+		b = append(b, 1, byte(AuthMethodNotRequired))
+	} else {
+		ams := d.AuthMethods
+		if len(ams) > 255 {
+			return nil, errors.New("too many authentication methods")
+		}
+		b = append(b, byte(len(ams)))
+		for _, am := range ams {
+			b = append(b, byte(am))
+		}
+	}
+	if _, ctxErr = c.Write(b); ctxErr != nil {
+		return
+	}
+
+	if _, ctxErr = io.ReadFull(c, b[:2]); ctxErr != nil {
+		return
+	}
+	if b[0] != Version5 {
+		return nil, errors.New("unexpected protocol version " + strconv.Itoa(int(b[0])))
+	}
+	am := AuthMethod(b[1])
+	if am == AuthMethodNoAcceptableMethods {
+		return nil, errors.New("no acceptable authentication methods")
+	}
+	if d.Authenticate != nil {
+		if ctxErr = d.Authenticate(ctx, c, am); ctxErr != nil {
+			return
+		}
+	}
+
+	b = b[:0]
+	b = append(b, Version5, byte(d.cmd), 0)
+	if ip := net.ParseIP(host); ip != nil {
+		if ip4 := ip.To4(); ip4 != nil {
+			b = append(b, AddrTypeIPv4)
+			b = append(b, ip4...)
+		} else if ip6 := ip.To16(); ip6 != nil {
+			b = append(b, AddrTypeIPv6)
+			b = append(b, ip6...)
+		} else {
+			return nil, errors.New("unknown address type")
+		}
+	} else {
+		if len(host) > 255 {
+			return nil, errors.New("FQDN too long")
+		}
+		b = append(b, AddrTypeFQDN)
+		b = append(b, byte(len(host)))
+		b = append(b, host...)
+	}
+	b = append(b, byte(port>>8), byte(port))
+	if _, ctxErr = c.Write(b); ctxErr != nil {
+		return
+	}
+
+	if _, ctxErr = io.ReadFull(c, b[:4]); ctxErr != nil {
+		return
+	}
+	if b[0] != Version5 {
+		return nil, errors.New("unexpected protocol version " + strconv.Itoa(int(b[0])))
+	}
+	if cmdErr := Reply(b[1]); cmdErr != StatusSucceeded {
+		return nil, errors.New("unknown error " + cmdErr.String())
+	}
+	if b[2] != 0 {
+		return nil, errors.New("non-zero reserved field")
+	}
+	l := 2
+	var a Addr
+	switch b[3] {
+	case AddrTypeIPv4:
+		l += net.IPv4len
+		a.IP = make(net.IP, net.IPv4len)
+	case AddrTypeIPv6:
+		l += net.IPv6len
+		a.IP = make(net.IP, net.IPv6len)
+	case AddrTypeFQDN:
+		if _, err := io.ReadFull(c, b[:1]); err != nil {
+			return nil, err
+		}
+		l += int(b[0])
+	default:
+		return nil, errors.New("unknown address type " + strconv.Itoa(int(b[3])))
+	}
+	if cap(b) < l {
+		b = make([]byte, l)
+	} else {
+		b = b[:l]
+	}
+	if _, ctxErr = io.ReadFull(c, b); ctxErr != nil {
+		return
+	}
+	if a.IP != nil {
+		copy(a.IP, b)
+	} else {
+		a.Name = string(b[:len(b)-2])
+	}
+	a.Port = int(b[len(b)-2])<<8 | int(b[len(b)-1])
+	return &a, nil
+}
+
+func splitHostPort(address string) (string, int, error) {
+	host, port, err := net.SplitHostPort(address)
+	if err != nil {
+		return "", 0, err
+	}
+	portnum, err := strconv.Atoi(port)
+	if err != nil {
+		return "", 0, err
+	}
+	if 1 > portnum || portnum > 0xffff {
+		return "", 0, errors.New("port number out of range " + port)
+	}
+	return host, portnum, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socks/socks.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socks/socks.go
new file mode 100644
index 000000000..97db2340e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/internal/socks/socks.go
@@ -0,0 +1,317 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Package socks provides a SOCKS version 5 client implementation.
+//
+// SOCKS protocol version 5 is defined in RFC 1928.
+// Username/Password authentication for SOCKS version 5 is defined in
+// RFC 1929.
+package socks
+
+import (
+	"context"
+	"errors"
+	"io"
+	"net"
+	"strconv"
+)
+
+// A Command represents a SOCKS command.
+type Command int
+
+func (cmd Command) String() string {
+	switch cmd {
+	case CmdConnect:
+		return "socks connect"
+	case cmdBind:
+		return "socks bind"
+	default:
+		return "socks " + strconv.Itoa(int(cmd))
+	}
+}
+
+// An AuthMethod represents a SOCKS authentication method.
+type AuthMethod int
+
+// A Reply represents a SOCKS command reply code.
+type Reply int
+
+func (code Reply) String() string {
+	switch code {
+	case StatusSucceeded:
+		return "succeeded"
+	case 0x01:
+		return "general SOCKS server failure"
+	case 0x02:
+		return "connection not allowed by ruleset"
+	case 0x03:
+		return "network unreachable"
+	case 0x04:
+		return "host unreachable"
+	case 0x05:
+		return "connection refused"
+	case 0x06:
+		return "TTL expired"
+	case 0x07:
+		return "command not supported"
+	case 0x08:
+		return "address type not supported"
+	default:
+		return "unknown code: " + strconv.Itoa(int(code))
+	}
+}
+
+// Wire protocol constants.
+const (
+	Version5 = 0x05
+
+	AddrTypeIPv4 = 0x01
+	AddrTypeFQDN = 0x03
+	AddrTypeIPv6 = 0x04
+
+	CmdConnect Command = 0x01 // establishes an active-open forward proxy connection
+	cmdBind    Command = 0x02 // establishes a passive-open forward proxy connection
+
+	AuthMethodNotRequired         AuthMethod = 0x00 // no authentication required
+	AuthMethodUsernamePassword    AuthMethod = 0x02 // use username/password
+	AuthMethodNoAcceptableMethods AuthMethod = 0xff // no acceptable authentication methods
+
+	StatusSucceeded Reply = 0x00
+)
+
+// An Addr represents a SOCKS-specific address.
+// Either Name or IP is used exclusively.
+type Addr struct {
+	Name string // fully-qualified domain name
+	IP   net.IP
+	Port int
+}
+
+func (a *Addr) Network() string { return "socks" }
+
+func (a *Addr) String() string {
+	if a == nil {
+		return "<nil>"
+	}
+	port := strconv.Itoa(a.Port)
+	if a.IP == nil {
+		return net.JoinHostPort(a.Name, port)
+	}
+	return net.JoinHostPort(a.IP.String(), port)
+}
+
+// A Conn represents a forward proxy connection.
+type Conn struct {
+	net.Conn
+
+	boundAddr net.Addr
+}
+
+// BoundAddr returns the address assigned by the proxy server for
+// connecting to the command target address from the proxy server.
+func (c *Conn) BoundAddr() net.Addr {
+	if c == nil {
+		return nil
+	}
+	return c.boundAddr
+}
+
+// A Dialer holds SOCKS-specific options.
+type Dialer struct {
+	cmd          Command // either CmdConnect or cmdBind
+	proxyNetwork string  // network between a proxy server and a client
+	proxyAddress string  // proxy server address
+
+	// ProxyDial specifies the optional dial function for
+	// establishing the transport connection.
+	ProxyDial func(context.Context, string, string) (net.Conn, error)
+
+	// AuthMethods specifies the list of request authentication
+	// methods.
+	// If empty, SOCKS client requests only AuthMethodNotRequired.
+	AuthMethods []AuthMethod
+
+	// Authenticate specifies the optional authentication
+	// function. It must be non-nil when AuthMethods is not empty.
+	// It must return an error when the authentication is failed.
+	Authenticate func(context.Context, io.ReadWriter, AuthMethod) error
+}
+
+// DialContext connects to the provided address on the provided
+// network.
+//
+// The returned error value may be a net.OpError. When the Op field of
+// net.OpError contains "socks", the Source field contains a proxy
+// server address and the Addr field contains a command target
+// address.
+//
+// See func Dial of the net package of standard library for a
+// description of the network and address parameters.
+func (d *Dialer) DialContext(ctx context.Context, network, address string) (net.Conn, error) {
+	if err := d.validateTarget(network, address); err != nil {
+		proxy, dst, _ := d.pathAddrs(address)
+		return nil, &net.OpError{Op: d.cmd.String(), Net: network, Source: proxy, Addr: dst, Err: err}
+	}
+	if ctx == nil {
+		proxy, dst, _ := d.pathAddrs(address)
+		return nil, &net.OpError{Op: d.cmd.String(), Net: network, Source: proxy, Addr: dst, Err: errors.New("nil context")}
+	}
+	var err error
+	var c net.Conn
+	if d.ProxyDial != nil {
+		c, err = d.ProxyDial(ctx, d.proxyNetwork, d.proxyAddress)
+	} else {
+		var dd net.Dialer
+		c, err = dd.DialContext(ctx, d.proxyNetwork, d.proxyAddress)
+	}
+	if err != nil {
+		proxy, dst, _ := d.pathAddrs(address)
+		return nil, &net.OpError{Op: d.cmd.String(), Net: network, Source: proxy, Addr: dst, Err: err}
+	}
+	a, err := d.connect(ctx, c, address)
+	if err != nil {
+		c.Close()
+		proxy, dst, _ := d.pathAddrs(address)
+		return nil, &net.OpError{Op: d.cmd.String(), Net: network, Source: proxy, Addr: dst, Err: err}
+	}
+	return &Conn{Conn: c, boundAddr: a}, nil
+}
+
+// DialWithConn initiates a connection from SOCKS server to the target
+// network and address using the connection c that is already
+// connected to the SOCKS server.
+//
+// It returns the connection's local address assigned by the SOCKS
+// server.
+func (d *Dialer) DialWithConn(ctx context.Context, c net.Conn, network, address string) (net.Addr, error) {
+	if err := d.validateTarget(network, address); err != nil {
+		proxy, dst, _ := d.pathAddrs(address)
+		return nil, &net.OpError{Op: d.cmd.String(), Net: network, Source: proxy, Addr: dst, Err: err}
+	}
+	if ctx == nil {
+		proxy, dst, _ := d.pathAddrs(address)
+		return nil, &net.OpError{Op: d.cmd.String(), Net: network, Source: proxy, Addr: dst, Err: errors.New("nil context")}
+	}
+	a, err := d.connect(ctx, c, address)
+	if err != nil {
+		proxy, dst, _ := d.pathAddrs(address)
+		return nil, &net.OpError{Op: d.cmd.String(), Net: network, Source: proxy, Addr: dst, Err: err}
+	}
+	return a, nil
+}
+
+// Dial connects to the provided address on the provided network.
+//
+// Unlike DialContext, it returns a raw transport connection instead
+// of a forward proxy connection.
+//
+// Deprecated: Use DialContext or DialWithConn instead.
+func (d *Dialer) Dial(network, address string) (net.Conn, error) {
+	if err := d.validateTarget(network, address); err != nil {
+		proxy, dst, _ := d.pathAddrs(address)
+		return nil, &net.OpError{Op: d.cmd.String(), Net: network, Source: proxy, Addr: dst, Err: err}
+	}
+	var err error
+	var c net.Conn
+	if d.ProxyDial != nil {
+		c, err = d.ProxyDial(context.Background(), d.proxyNetwork, d.proxyAddress)
+	} else {
+		c, err = net.Dial(d.proxyNetwork, d.proxyAddress)
+	}
+	if err != nil {
+		proxy, dst, _ := d.pathAddrs(address)
+		return nil, &net.OpError{Op: d.cmd.String(), Net: network, Source: proxy, Addr: dst, Err: err}
+	}
+	if _, err := d.DialWithConn(context.Background(), c, network, address); err != nil {
+		c.Close()
+		return nil, err
+	}
+	return c, nil
+}
+
+func (d *Dialer) validateTarget(network, address string) error {
+	switch network {
+	case "tcp", "tcp6", "tcp4":
+	default:
+		return errors.New("network not implemented")
+	}
+	switch d.cmd {
+	case CmdConnect, cmdBind:
+	default:
+		return errors.New("command not implemented")
+	}
+	return nil
+}
+
+func (d *Dialer) pathAddrs(address string) (proxy, dst net.Addr, err error) {
+	for i, s := range []string{d.proxyAddress, address} {
+		host, port, err := splitHostPort(s)
+		if err != nil {
+			return nil, nil, err
+		}
+		a := &Addr{Port: port}
+		a.IP = net.ParseIP(host)
+		if a.IP == nil {
+			a.Name = host
+		}
+		if i == 0 {
+			proxy = a
+		} else {
+			dst = a
+		}
+	}
+	return
+}
+
+// NewDialer returns a new Dialer that dials through the provided
+// proxy server's network and address.
+func NewDialer(network, address string) *Dialer {
+	return &Dialer{proxyNetwork: network, proxyAddress: address, cmd: CmdConnect}
+}
+
+const (
+	authUsernamePasswordVersion = 0x01
+	authStatusSucceeded         = 0x00
+)
+
+// UsernamePassword are the credentials for the username/password
+// authentication method.
+type UsernamePassword struct {
+	Username string
+	Password string
+}
+
+// Authenticate authenticates a pair of username and password with the
+// proxy server.
+func (up *UsernamePassword) Authenticate(ctx context.Context, rw io.ReadWriter, auth AuthMethod) error {
+	switch auth {
+	case AuthMethodNotRequired:
+		return nil
+	case AuthMethodUsernamePassword:
+		if len(up.Username) == 0 || len(up.Username) > 255 || len(up.Password) == 0 || len(up.Password) > 255 {
+			return errors.New("invalid username/password")
+		}
+		b := []byte{authUsernamePasswordVersion}
+		b = append(b, byte(len(up.Username)))
+		b = append(b, up.Username...)
+		b = append(b, byte(len(up.Password)))
+		b = append(b, up.Password...)
+		// TODO(mikio): handle IO deadlines and cancelation if
+		// necessary
+		if _, err := rw.Write(b); err != nil {
+			return err
+		}
+		if _, err := io.ReadFull(rw, b[:2]); err != nil {
+			return err
+		}
+		if b[0] != authUsernamePasswordVersion {
+			return errors.New("invalid username/password version")
+		}
+		if b[1] != authStatusSucceeded {
+			return errors.New("username/password authentication failed")
+		}
+		return nil
+	}
+	return errors.New("unsupported authentication method " + strconv.Itoa(int(auth)))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/batch.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/batch.go
new file mode 100644
index 000000000..1a3a4fc0c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/batch.go
@@ -0,0 +1,194 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import (
+	"net"
+	"runtime"
+
+	"golang.org/x/net/internal/socket"
+)
+
+// BUG(mikio): On Windows, the ReadBatch and WriteBatch methods of
+// PacketConn are not implemented.
+
+// BUG(mikio): On Windows, the ReadBatch and WriteBatch methods of
+// RawConn are not implemented.
+
+// A Message represents an IO message.
+//
+//	type Message struct {
+//		Buffers [][]byte
+//		OOB     []byte
+//		Addr    net.Addr
+//		N       int
+//		NN      int
+//		Flags   int
+//	}
+//
+// The Buffers fields represents a list of contiguous buffers, which
+// can be used for vectored IO, for example, putting a header and a
+// payload in each slice.
+// When writing, the Buffers field must contain at least one byte to
+// write.
+// When reading, the Buffers field will always contain a byte to read.
+//
+// The OOB field contains protocol-specific control or miscellaneous
+// ancillary data known as out-of-band data.
+// It can be nil when not required.
+//
+// The Addr field specifies a destination address when writing.
+// It can be nil when the underlying protocol of the endpoint uses
+// connection-oriented communication.
+// After a successful read, it may contain the source address on the
+// received packet.
+//
+// The N field indicates the number of bytes read or written from/to
+// Buffers.
+//
+// The NN field indicates the number of bytes read or written from/to
+// OOB.
+//
+// The Flags field contains protocol-specific information on the
+// received message.
+type Message = socket.Message
+
+// ReadBatch reads a batch of messages.
+//
+// The provided flags is a set of platform-dependent flags, such as
+// syscall.MSG_PEEK.
+//
+// On a successful read it returns the number of messages received, up
+// to len(ms).
+//
+// On Linux, a batch read will be optimized.
+// On other platforms, this method will read only a single message.
+//
+// Unlike the ReadFrom method, it doesn't strip the IPv4 header
+// followed by option headers from the received IPv4 datagram when the
+// underlying transport is net.IPConn. Each Buffers field of Message
+// must be large enough to accommodate an IPv4 header and option
+// headers.
+func (c *payloadHandler) ReadBatch(ms []Message, flags int) (int, error) {
+	if !c.ok() {
+		return 0, errInvalidConn
+	}
+	switch runtime.GOOS {
+	case "linux":
+		n, err := c.RecvMsgs([]socket.Message(ms), flags)
+		if err != nil {
+			err = &net.OpError{Op: "read", Net: c.PacketConn.LocalAddr().Network(), Source: c.PacketConn.LocalAddr(), Err: err}
+		}
+		return n, err
+	default:
+		n := 1
+		err := c.RecvMsg(&ms[0], flags)
+		if err != nil {
+			n = 0
+			err = &net.OpError{Op: "read", Net: c.PacketConn.LocalAddr().Network(), Source: c.PacketConn.LocalAddr(), Err: err}
+		}
+		if compatFreeBSD32 && ms[0].NN > 0 {
+			adjustFreeBSD32(&ms[0])
+		}
+		return n, err
+	}
+}
+
+// WriteBatch writes a batch of messages.
+//
+// The provided flags is a set of platform-dependent flags, such as
+// syscall.MSG_DONTROUTE.
+//
+// It returns the number of messages written on a successful write.
+//
+// On Linux, a batch write will be optimized.
+// On other platforms, this method will write only a single message.
+func (c *payloadHandler) WriteBatch(ms []Message, flags int) (int, error) {
+	if !c.ok() {
+		return 0, errInvalidConn
+	}
+	switch runtime.GOOS {
+	case "linux":
+		n, err := c.SendMsgs([]socket.Message(ms), flags)
+		if err != nil {
+			err = &net.OpError{Op: "write", Net: c.PacketConn.LocalAddr().Network(), Source: c.PacketConn.LocalAddr(), Err: err}
+		}
+		return n, err
+	default:
+		n := 1
+		err := c.SendMsg(&ms[0], flags)
+		if err != nil {
+			n = 0
+			err = &net.OpError{Op: "write", Net: c.PacketConn.LocalAddr().Network(), Source: c.PacketConn.LocalAddr(), Err: err}
+		}
+		return n, err
+	}
+}
+
+// ReadBatch reads a batch of messages.
+//
+// The provided flags is a set of platform-dependent flags, such as
+// syscall.MSG_PEEK.
+//
+// On a successful read it returns the number of messages received, up
+// to len(ms).
+//
+// On Linux, a batch read will be optimized.
+// On other platforms, this method will read only a single message.
+func (c *packetHandler) ReadBatch(ms []Message, flags int) (int, error) {
+	if !c.ok() {
+		return 0, errInvalidConn
+	}
+	switch runtime.GOOS {
+	case "linux":
+		n, err := c.RecvMsgs([]socket.Message(ms), flags)
+		if err != nil {
+			err = &net.OpError{Op: "read", Net: c.IPConn.LocalAddr().Network(), Source: c.IPConn.LocalAddr(), Err: err}
+		}
+		return n, err
+	default:
+		n := 1
+		err := c.RecvMsg(&ms[0], flags)
+		if err != nil {
+			n = 0
+			err = &net.OpError{Op: "read", Net: c.IPConn.LocalAddr().Network(), Source: c.IPConn.LocalAddr(), Err: err}
+		}
+		if compatFreeBSD32 && ms[0].NN > 0 {
+			adjustFreeBSD32(&ms[0])
+		}
+		return n, err
+	}
+}
+
+// WriteBatch writes a batch of messages.
+//
+// The provided flags is a set of platform-dependent flags, such as
+// syscall.MSG_DONTROUTE.
+//
+// It returns the number of messages written on a successful write.
+//
+// On Linux, a batch write will be optimized.
+// On other platforms, this method will write only a single message.
+func (c *packetHandler) WriteBatch(ms []Message, flags int) (int, error) {
+	if !c.ok() {
+		return 0, errInvalidConn
+	}
+	switch runtime.GOOS {
+	case "linux":
+		n, err := c.SendMsgs([]socket.Message(ms), flags)
+		if err != nil {
+			err = &net.OpError{Op: "write", Net: c.IPConn.LocalAddr().Network(), Source: c.IPConn.LocalAddr(), Err: err}
+		}
+		return n, err
+	default:
+		n := 1
+		err := c.SendMsg(&ms[0], flags)
+		if err != nil {
+			n = 0
+			err = &net.OpError{Op: "write", Net: c.IPConn.LocalAddr().Network(), Source: c.IPConn.LocalAddr(), Err: err}
+		}
+		return n, err
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control.go
new file mode 100644
index 000000000..a2b02ca95
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control.go
@@ -0,0 +1,144 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import (
+	"fmt"
+	"net"
+	"sync"
+
+	"golang.org/x/net/internal/iana"
+	"golang.org/x/net/internal/socket"
+)
+
+type rawOpt struct {
+	sync.RWMutex
+	cflags ControlFlags
+}
+
+func (c *rawOpt) set(f ControlFlags)        { c.cflags |= f }
+func (c *rawOpt) clear(f ControlFlags)      { c.cflags &^= f }
+func (c *rawOpt) isset(f ControlFlags) bool { return c.cflags&f != 0 }
+
+type ControlFlags uint
+
+const (
+	FlagTTL       ControlFlags = 1 << iota // pass the TTL on the received packet
+	FlagSrc                                // pass the source address on the received packet
+	FlagDst                                // pass the destination address on the received packet
+	FlagInterface                          // pass the interface index on the received packet
+)
+
+// A ControlMessage represents per packet basis IP-level socket options.
+type ControlMessage struct {
+	// Receiving socket options: SetControlMessage allows to
+	// receive the options from the protocol stack using ReadFrom
+	// method of PacketConn or RawConn.
+	//
+	// Specifying socket options: ControlMessage for WriteTo
+	// method of PacketConn or RawConn allows to send the options
+	// to the protocol stack.
+	//
+	TTL     int    // time-to-live, receiving only
+	Src     net.IP // source address, specifying only
+	Dst     net.IP // destination address, receiving only
+	IfIndex int    // interface index, must be 1 <= value when specifying
+}
+
+func (cm *ControlMessage) String() string {
+	if cm == nil {
+		return "<nil>"
+	}
+	return fmt.Sprintf("ttl=%d src=%v dst=%v ifindex=%d", cm.TTL, cm.Src, cm.Dst, cm.IfIndex)
+}
+
+// Marshal returns the binary encoding of cm.
+func (cm *ControlMessage) Marshal() []byte {
+	if cm == nil {
+		return nil
+	}
+	var m socket.ControlMessage
+	if ctlOpts[ctlPacketInfo].name > 0 && (cm.Src.To4() != nil || cm.IfIndex > 0) {
+		m = socket.NewControlMessage([]int{ctlOpts[ctlPacketInfo].length})
+	}
+	if len(m) > 0 {
+		ctlOpts[ctlPacketInfo].marshal(m, cm)
+	}
+	return m
+}
+
+// Parse parses b as a control message and stores the result in cm.
+func (cm *ControlMessage) Parse(b []byte) error {
+	ms, err := socket.ControlMessage(b).Parse()
+	if err != nil {
+		return err
+	}
+	for _, m := range ms {
+		lvl, typ, l, err := m.ParseHeader()
+		if err != nil {
+			return err
+		}
+		if lvl != iana.ProtocolIP {
+			continue
+		}
+		switch {
+		case typ == ctlOpts[ctlTTL].name && l >= ctlOpts[ctlTTL].length:
+			ctlOpts[ctlTTL].parse(cm, m.Data(l))
+		case typ == ctlOpts[ctlDst].name && l >= ctlOpts[ctlDst].length:
+			ctlOpts[ctlDst].parse(cm, m.Data(l))
+		case typ == ctlOpts[ctlInterface].name && l >= ctlOpts[ctlInterface].length:
+			ctlOpts[ctlInterface].parse(cm, m.Data(l))
+		case typ == ctlOpts[ctlPacketInfo].name && l >= ctlOpts[ctlPacketInfo].length:
+			ctlOpts[ctlPacketInfo].parse(cm, m.Data(l))
+		}
+	}
+	return nil
+}
+
+// NewControlMessage returns a new control message.
+//
+// The returned message is large enough for options specified by cf.
+func NewControlMessage(cf ControlFlags) []byte {
+	opt := rawOpt{cflags: cf}
+	var l int
+	if opt.isset(FlagTTL) && ctlOpts[ctlTTL].name > 0 {
+		l += socket.ControlMessageSpace(ctlOpts[ctlTTL].length)
+	}
+	if ctlOpts[ctlPacketInfo].name > 0 {
+		if opt.isset(FlagSrc | FlagDst | FlagInterface) {
+			l += socket.ControlMessageSpace(ctlOpts[ctlPacketInfo].length)
+		}
+	} else {
+		if opt.isset(FlagDst) && ctlOpts[ctlDst].name > 0 {
+			l += socket.ControlMessageSpace(ctlOpts[ctlDst].length)
+		}
+		if opt.isset(FlagInterface) && ctlOpts[ctlInterface].name > 0 {
+			l += socket.ControlMessageSpace(ctlOpts[ctlInterface].length)
+		}
+	}
+	var b []byte
+	if l > 0 {
+		b = make([]byte, l)
+	}
+	return b
+}
+
+// Ancillary data socket options
+const (
+	ctlTTL        = iota // header field
+	ctlSrc               // header field
+	ctlDst               // header field
+	ctlInterface         // inbound or outbound interface
+	ctlPacketInfo        // inbound or outbound packet path
+	ctlMax
+)
+
+// A ctlOpt represents a binding for ancillary data socket option.
+type ctlOpt struct {
+	name    int // option name, must be equal or greater than 1
+	length  int // option length
+	marshal func([]byte, *ControlMessage) []byte
+	parse   func(*ControlMessage, []byte)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_bsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_bsd.go
new file mode 100644
index 000000000..69c4f553c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_bsd.go
@@ -0,0 +1,41 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd netbsd openbsd
+
+package ipv4
+
+import (
+	"net"
+	"syscall"
+	"unsafe"
+
+	"golang.org/x/net/internal/iana"
+	"golang.org/x/net/internal/socket"
+)
+
+func marshalDst(b []byte, cm *ControlMessage) []byte {
+	m := socket.ControlMessage(b)
+	m.MarshalHeader(iana.ProtocolIP, sysIP_RECVDSTADDR, net.IPv4len)
+	return m.Next(net.IPv4len)
+}
+
+func parseDst(cm *ControlMessage, b []byte) {
+	if len(cm.Dst) < net.IPv4len {
+		cm.Dst = make(net.IP, net.IPv4len)
+	}
+	copy(cm.Dst, b[:net.IPv4len])
+}
+
+func marshalInterface(b []byte, cm *ControlMessage) []byte {
+	m := socket.ControlMessage(b)
+	m.MarshalHeader(iana.ProtocolIP, sysIP_RECVIF, syscall.SizeofSockaddrDatalink)
+	return m.Next(syscall.SizeofSockaddrDatalink)
+}
+
+func parseInterface(cm *ControlMessage, b []byte) {
+	var sadl syscall.SockaddrDatalink
+	copy((*[unsafe.Sizeof(sadl)]byte)(unsafe.Pointer(&sadl))[:], b)
+	cm.IfIndex = int(sadl.Index)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_pktinfo.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_pktinfo.go
new file mode 100644
index 000000000..425338f35
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_pktinfo.go
@@ -0,0 +1,39 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build darwin linux solaris
+
+package ipv4
+
+import (
+	"net"
+	"unsafe"
+
+	"golang.org/x/net/internal/iana"
+	"golang.org/x/net/internal/socket"
+)
+
+func marshalPacketInfo(b []byte, cm *ControlMessage) []byte {
+	m := socket.ControlMessage(b)
+	m.MarshalHeader(iana.ProtocolIP, sysIP_PKTINFO, sizeofInetPktinfo)
+	if cm != nil {
+		pi := (*inetPktinfo)(unsafe.Pointer(&m.Data(sizeofInetPktinfo)[0]))
+		if ip := cm.Src.To4(); ip != nil {
+			copy(pi.Spec_dst[:], ip)
+		}
+		if cm.IfIndex > 0 {
+			pi.setIfindex(cm.IfIndex)
+		}
+	}
+	return m.Next(sizeofInetPktinfo)
+}
+
+func parsePacketInfo(cm *ControlMessage, b []byte) {
+	pi := (*inetPktinfo)(unsafe.Pointer(&b[0]))
+	cm.IfIndex = int(pi.Ifindex)
+	if len(cm.Dst) < net.IPv4len {
+		cm.Dst = make(net.IP, net.IPv4len)
+	}
+	copy(cm.Dst, pi.Addr[:])
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_stub.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_stub.go
new file mode 100644
index 000000000..9d8253479
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_stub.go
@@ -0,0 +1,13 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !aix,!darwin,!dragonfly,!freebsd,!linux,!netbsd,!openbsd,!solaris,!windows,!zos
+
+package ipv4
+
+import "golang.org/x/net/internal/socket"
+
+func setControlMessage(c *socket.Conn, opt *rawOpt, cf ControlFlags, on bool) error {
+	return errNotImplemented
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_unix.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_unix.go
new file mode 100644
index 000000000..b27fa4903
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_unix.go
@@ -0,0 +1,73 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris
+
+package ipv4
+
+import (
+	"unsafe"
+
+	"golang.org/x/net/internal/iana"
+	"golang.org/x/net/internal/socket"
+)
+
+func setControlMessage(c *socket.Conn, opt *rawOpt, cf ControlFlags, on bool) error {
+	opt.Lock()
+	defer opt.Unlock()
+	if so, ok := sockOpts[ssoReceiveTTL]; ok && cf&FlagTTL != 0 {
+		if err := so.SetInt(c, boolint(on)); err != nil {
+			return err
+		}
+		if on {
+			opt.set(FlagTTL)
+		} else {
+			opt.clear(FlagTTL)
+		}
+	}
+	if so, ok := sockOpts[ssoPacketInfo]; ok {
+		if cf&(FlagSrc|FlagDst|FlagInterface) != 0 {
+			if err := so.SetInt(c, boolint(on)); err != nil {
+				return err
+			}
+			if on {
+				opt.set(cf & (FlagSrc | FlagDst | FlagInterface))
+			} else {
+				opt.clear(cf & (FlagSrc | FlagDst | FlagInterface))
+			}
+		}
+	} else {
+		if so, ok := sockOpts[ssoReceiveDst]; ok && cf&FlagDst != 0 {
+			if err := so.SetInt(c, boolint(on)); err != nil {
+				return err
+			}
+			if on {
+				opt.set(FlagDst)
+			} else {
+				opt.clear(FlagDst)
+			}
+		}
+		if so, ok := sockOpts[ssoReceiveInterface]; ok && cf&FlagInterface != 0 {
+			if err := so.SetInt(c, boolint(on)); err != nil {
+				return err
+			}
+			if on {
+				opt.set(FlagInterface)
+			} else {
+				opt.clear(FlagInterface)
+			}
+		}
+	}
+	return nil
+}
+
+func marshalTTL(b []byte, cm *ControlMessage) []byte {
+	m := socket.ControlMessage(b)
+	m.MarshalHeader(iana.ProtocolIP, sysIP_RECVTTL, 1)
+	return m.Next(1)
+}
+
+func parseTTL(cm *ControlMessage, b []byte) {
+	cm.TTL = int(*(*byte)(unsafe.Pointer(&b[:1][0])))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_windows.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_windows.go
new file mode 100644
index 000000000..82c630642
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_windows.go
@@ -0,0 +1,12 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import "golang.org/x/net/internal/socket"
+
+func setControlMessage(c *socket.Conn, opt *rawOpt, cf ControlFlags, on bool) error {
+	// TODO(mikio): implement this
+	return errNotImplemented
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_zos.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_zos.go
new file mode 100644
index 000000000..04420003e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/control_zos.go
@@ -0,0 +1,86 @@
+// Copyright 2020 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import (
+	"net"
+	"unsafe"
+
+	"golang.org/x/net/internal/iana"
+	"golang.org/x/net/internal/socket"
+)
+
+func marshalPacketInfo(b []byte, cm *ControlMessage) []byte {
+	m := socket.ControlMessage(b)
+	m.MarshalHeader(iana.ProtocolIP, sysIP_PKTINFO, sizeofInetPktinfo)
+	if cm != nil {
+		pi := (*inetPktinfo)(unsafe.Pointer(&m.Data(sizeofInetPktinfo)[0]))
+		if ip := cm.Src.To4(); ip != nil {
+			copy(pi.Addr[:], ip)
+		}
+		if cm.IfIndex > 0 {
+			pi.setIfindex(cm.IfIndex)
+		}
+	}
+	return m.Next(sizeofInetPktinfo)
+}
+
+func parsePacketInfo(cm *ControlMessage, b []byte) {
+	pi := (*inetPktinfo)(unsafe.Pointer(&b[0]))
+	cm.IfIndex = int(pi.Ifindex)
+	if len(cm.Dst) < net.IPv4len {
+		cm.Dst = make(net.IP, net.IPv4len)
+	}
+	copy(cm.Dst, pi.Addr[:])
+}
+
+func setControlMessage(c *socket.Conn, opt *rawOpt, cf ControlFlags, on bool) error {
+	opt.Lock()
+	defer opt.Unlock()
+	if so, ok := sockOpts[ssoReceiveTTL]; ok && cf&FlagTTL != 0 {
+		if err := so.SetInt(c, boolint(on)); err != nil {
+			return err
+		}
+		if on {
+			opt.set(FlagTTL)
+		} else {
+			opt.clear(FlagTTL)
+		}
+	}
+	if so, ok := sockOpts[ssoPacketInfo]; ok {
+		if cf&(FlagSrc|FlagDst|FlagInterface) != 0 {
+			if err := so.SetInt(c, boolint(on)); err != nil {
+				return err
+			}
+			if on {
+				opt.set(cf & (FlagSrc | FlagDst | FlagInterface))
+			} else {
+				opt.clear(cf & (FlagSrc | FlagDst | FlagInterface))
+			}
+		}
+	} else {
+		if so, ok := sockOpts[ssoReceiveDst]; ok && cf&FlagDst != 0 {
+			if err := so.SetInt(c, boolint(on)); err != nil {
+				return err
+			}
+			if on {
+				opt.set(FlagDst)
+			} else {
+				opt.clear(FlagDst)
+			}
+		}
+		if so, ok := sockOpts[ssoReceiveInterface]; ok && cf&FlagInterface != 0 {
+			if err := so.SetInt(c, boolint(on)); err != nil {
+				return err
+			}
+			if on {
+				opt.set(FlagInterface)
+			} else {
+				opt.clear(FlagInterface)
+			}
+		}
+	}
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/dgramopt.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/dgramopt.go
new file mode 100644
index 000000000..c191c22ab
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/dgramopt.go
@@ -0,0 +1,264 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import (
+	"net"
+
+	"golang.org/x/net/bpf"
+)
+
+// MulticastTTL returns the time-to-live field value for outgoing
+// multicast packets.
+func (c *dgramOpt) MulticastTTL() (int, error) {
+	if !c.ok() {
+		return 0, errInvalidConn
+	}
+	so, ok := sockOpts[ssoMulticastTTL]
+	if !ok {
+		return 0, errNotImplemented
+	}
+	return so.GetInt(c.Conn)
+}
+
+// SetMulticastTTL sets the time-to-live field value for future
+// outgoing multicast packets.
+func (c *dgramOpt) SetMulticastTTL(ttl int) error {
+	if !c.ok() {
+		return errInvalidConn
+	}
+	so, ok := sockOpts[ssoMulticastTTL]
+	if !ok {
+		return errNotImplemented
+	}
+	return so.SetInt(c.Conn, ttl)
+}
+
+// MulticastInterface returns the default interface for multicast
+// packet transmissions.
+func (c *dgramOpt) MulticastInterface() (*net.Interface, error) {
+	if !c.ok() {
+		return nil, errInvalidConn
+	}
+	so, ok := sockOpts[ssoMulticastInterface]
+	if !ok {
+		return nil, errNotImplemented
+	}
+	return so.getMulticastInterface(c.Conn)
+}
+
+// SetMulticastInterface sets the default interface for future
+// multicast packet transmissions.
+func (c *dgramOpt) SetMulticastInterface(ifi *net.Interface) error {
+	if !c.ok() {
+		return errInvalidConn
+	}
+	so, ok := sockOpts[ssoMulticastInterface]
+	if !ok {
+		return errNotImplemented
+	}
+	return so.setMulticastInterface(c.Conn, ifi)
+}
+
+// MulticastLoopback reports whether transmitted multicast packets
+// should be copied and send back to the originator.
+func (c *dgramOpt) MulticastLoopback() (bool, error) {
+	if !c.ok() {
+		return false, errInvalidConn
+	}
+	so, ok := sockOpts[ssoMulticastLoopback]
+	if !ok {
+		return false, errNotImplemented
+	}
+	on, err := so.GetInt(c.Conn)
+	if err != nil {
+		return false, err
+	}
+	return on == 1, nil
+}
+
+// SetMulticastLoopback sets whether transmitted multicast packets
+// should be copied and send back to the originator.
+func (c *dgramOpt) SetMulticastLoopback(on bool) error {
+	if !c.ok() {
+		return errInvalidConn
+	}
+	so, ok := sockOpts[ssoMulticastLoopback]
+	if !ok {
+		return errNotImplemented
+	}
+	return so.SetInt(c.Conn, boolint(on))
+}
+
+// JoinGroup joins the group address group on the interface ifi.
+// By default all sources that can cast data to group are accepted.
+// It's possible to mute and unmute data transmission from a specific
+// source by using ExcludeSourceSpecificGroup and
+// IncludeSourceSpecificGroup.
+// JoinGroup uses the system assigned multicast interface when ifi is
+// nil, although this is not recommended because the assignment
+// depends on platforms and sometimes it might require routing
+// configuration.
+func (c *dgramOpt) JoinGroup(ifi *net.Interface, group net.Addr) error {
+	if !c.ok() {
+		return errInvalidConn
+	}
+	so, ok := sockOpts[ssoJoinGroup]
+	if !ok {
+		return errNotImplemented
+	}
+	grp := netAddrToIP4(group)
+	if grp == nil {
+		return errMissingAddress
+	}
+	return so.setGroup(c.Conn, ifi, grp)
+}
+
+// LeaveGroup leaves the group address group on the interface ifi
+// regardless of whether the group is any-source group or
+// source-specific group.
+func (c *dgramOpt) LeaveGroup(ifi *net.Interface, group net.Addr) error {
+	if !c.ok() {
+		return errInvalidConn
+	}
+	so, ok := sockOpts[ssoLeaveGroup]
+	if !ok {
+		return errNotImplemented
+	}
+	grp := netAddrToIP4(group)
+	if grp == nil {
+		return errMissingAddress
+	}
+	return so.setGroup(c.Conn, ifi, grp)
+}
+
+// JoinSourceSpecificGroup joins the source-specific group comprising
+// group and source on the interface ifi.
+// JoinSourceSpecificGroup uses the system assigned multicast
+// interface when ifi is nil, although this is not recommended because
+// the assignment depends on platforms and sometimes it might require
+// routing configuration.
+func (c *dgramOpt) JoinSourceSpecificGroup(ifi *net.Interface, group, source net.Addr) error {
+	if !c.ok() {
+		return errInvalidConn
+	}
+	so, ok := sockOpts[ssoJoinSourceGroup]
+	if !ok {
+		return errNotImplemented
+	}
+	grp := netAddrToIP4(group)
+	if grp == nil {
+		return errMissingAddress
+	}
+	src := netAddrToIP4(source)
+	if src == nil {
+		return errMissingAddress
+	}
+	return so.setSourceGroup(c.Conn, ifi, grp, src)
+}
+
+// LeaveSourceSpecificGroup leaves the source-specific group on the
+// interface ifi.
+func (c *dgramOpt) LeaveSourceSpecificGroup(ifi *net.Interface, group, source net.Addr) error {
+	if !c.ok() {
+		return errInvalidConn
+	}
+	so, ok := sockOpts[ssoLeaveSourceGroup]
+	if !ok {
+		return errNotImplemented
+	}
+	grp := netAddrToIP4(group)
+	if grp == nil {
+		return errMissingAddress
+	}
+	src := netAddrToIP4(source)
+	if src == nil {
+		return errMissingAddress
+	}
+	return so.setSourceGroup(c.Conn, ifi, grp, src)
+}
+
+// ExcludeSourceSpecificGroup excludes the source-specific group from
+// the already joined any-source groups by JoinGroup on the interface
+// ifi.
+func (c *dgramOpt) ExcludeSourceSpecificGroup(ifi *net.Interface, group, source net.Addr) error {
+	if !c.ok() {
+		return errInvalidConn
+	}
+	so, ok := sockOpts[ssoBlockSourceGroup]
+	if !ok {
+		return errNotImplemented
+	}
+	grp := netAddrToIP4(group)
+	if grp == nil {
+		return errMissingAddress
+	}
+	src := netAddrToIP4(source)
+	if src == nil {
+		return errMissingAddress
+	}
+	return so.setSourceGroup(c.Conn, ifi, grp, src)
+}
+
+// IncludeSourceSpecificGroup includes the excluded source-specific
+// group by ExcludeSourceSpecificGroup again on the interface ifi.
+func (c *dgramOpt) IncludeSourceSpecificGroup(ifi *net.Interface, group, source net.Addr) error {
+	if !c.ok() {
+		return errInvalidConn
+	}
+	so, ok := sockOpts[ssoUnblockSourceGroup]
+	if !ok {
+		return errNotImplemented
+	}
+	grp := netAddrToIP4(group)
+	if grp == nil {
+		return errMissingAddress
+	}
+	src := netAddrToIP4(source)
+	if src == nil {
+		return errMissingAddress
+	}
+	return so.setSourceGroup(c.Conn, ifi, grp, src)
+}
+
+// ICMPFilter returns an ICMP filter.
+// Currently only Linux supports this.
+func (c *dgramOpt) ICMPFilter() (*ICMPFilter, error) {
+	if !c.ok() {
+		return nil, errInvalidConn
+	}
+	so, ok := sockOpts[ssoICMPFilter]
+	if !ok {
+		return nil, errNotImplemented
+	}
+	return so.getICMPFilter(c.Conn)
+}
+
+// SetICMPFilter deploys the ICMP filter.
+// Currently only Linux supports this.
+func (c *dgramOpt) SetICMPFilter(f *ICMPFilter) error {
+	if !c.ok() {
+		return errInvalidConn
+	}
+	so, ok := sockOpts[ssoICMPFilter]
+	if !ok {
+		return errNotImplemented
+	}
+	return so.setICMPFilter(c.Conn, f)
+}
+
+// SetBPF attaches a BPF program to the connection.
+//
+// Only supported on Linux.
+func (c *dgramOpt) SetBPF(filter []bpf.RawInstruction) error {
+	if !c.ok() {
+		return errInvalidConn
+	}
+	so, ok := sockOpts[ssoAttachFilter]
+	if !ok {
+		return errNotImplemented
+	}
+	return so.setBPF(c.Conn, filter)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/doc.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/doc.go
new file mode 100644
index 000000000..245834979
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/doc.go
@@ -0,0 +1,244 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Package ipv4 implements IP-level socket options for the Internet
+// Protocol version 4.
+//
+// The package provides IP-level socket options that allow
+// manipulation of IPv4 facilities.
+//
+// The IPv4 protocol and basic host requirements for IPv4 are defined
+// in RFC 791 and RFC 1122.
+// Host extensions for multicasting and socket interface extensions
+// for multicast source filters are defined in RFC 1112 and RFC 3678.
+// IGMPv1, IGMPv2 and IGMPv3 are defined in RFC 1112, RFC 2236 and RFC
+// 3376.
+// Source-specific multicast is defined in RFC 4607.
+//
+//
+// Unicasting
+//
+// The options for unicasting are available for net.TCPConn,
+// net.UDPConn and net.IPConn which are created as network connections
+// that use the IPv4 transport. When a single TCP connection carrying
+// a data flow of multiple packets needs to indicate the flow is
+// important, Conn is used to set the type-of-service field on the
+// IPv4 header for each packet.
+//
+//	ln, err := net.Listen("tcp4", "0.0.0.0:1024")
+//	if err != nil {
+//		// error handling
+//	}
+//	defer ln.Close()
+//	for {
+//		c, err := ln.Accept()
+//		if err != nil {
+//			// error handling
+//		}
+//		go func(c net.Conn) {
+//			defer c.Close()
+//
+// The outgoing packets will be labeled DiffServ assured forwarding
+// class 1 low drop precedence, known as AF11 packets.
+//
+//			if err := ipv4.NewConn(c).SetTOS(0x28); err != nil {
+//				// error handling
+//			}
+//			if _, err := c.Write(data); err != nil {
+//				// error handling
+//			}
+//		}(c)
+//	}
+//
+//
+// Multicasting
+//
+// The options for multicasting are available for net.UDPConn and
+// net.IPConn which are created as network connections that use the
+// IPv4 transport. A few network facilities must be prepared before
+// you begin multicasting, at a minimum joining network interfaces and
+// multicast groups.
+//
+//	en0, err := net.InterfaceByName("en0")
+//	if err != nil {
+//		// error handling
+//	}
+//	en1, err := net.InterfaceByIndex(911)
+//	if err != nil {
+//		// error handling
+//	}
+//	group := net.IPv4(224, 0, 0, 250)
+//
+// First, an application listens to an appropriate address with an
+// appropriate service port.
+//
+//	c, err := net.ListenPacket("udp4", "0.0.0.0:1024")
+//	if err != nil {
+//		// error handling
+//	}
+//	defer c.Close()
+//
+// Second, the application joins multicast groups, starts listening to
+// the groups on the specified network interfaces. Note that the
+// service port for transport layer protocol does not matter with this
+// operation as joining groups affects only network and link layer
+// protocols, such as IPv4 and Ethernet.
+//
+//	p := ipv4.NewPacketConn(c)
+//	if err := p.JoinGroup(en0, &net.UDPAddr{IP: group}); err != nil {
+//		// error handling
+//	}
+//	if err := p.JoinGroup(en1, &net.UDPAddr{IP: group}); err != nil {
+//		// error handling
+//	}
+//
+// The application might set per packet control message transmissions
+// between the protocol stack within the kernel. When the application
+// needs a destination address on an incoming packet,
+// SetControlMessage of PacketConn is used to enable control message
+// transmissions.
+//
+//	if err := p.SetControlMessage(ipv4.FlagDst, true); err != nil {
+//		// error handling
+//	}
+//
+// The application could identify whether the received packets are
+// of interest by using the control message that contains the
+// destination address of the received packet.
+//
+//	b := make([]byte, 1500)
+//	for {
+//		n, cm, src, err := p.ReadFrom(b)
+//		if err != nil {
+//			// error handling
+//		}
+//		if cm.Dst.IsMulticast() {
+//			if cm.Dst.Equal(group) {
+//				// joined group, do something
+//			} else {
+//				// unknown group, discard
+//				continue
+//			}
+//		}
+//
+// The application can also send both unicast and multicast packets.
+//
+//		p.SetTOS(0x0)
+//		p.SetTTL(16)
+//		if _, err := p.WriteTo(data, nil, src); err != nil {
+//			// error handling
+//		}
+//		dst := &net.UDPAddr{IP: group, Port: 1024}
+//		for _, ifi := range []*net.Interface{en0, en1} {
+//			if err := p.SetMulticastInterface(ifi); err != nil {
+//				// error handling
+//			}
+//			p.SetMulticastTTL(2)
+//			if _, err := p.WriteTo(data, nil, dst); err != nil {
+//				// error handling
+//			}
+//		}
+//	}
+//
+//
+// More multicasting
+//
+// An application that uses PacketConn or RawConn may join multiple
+// multicast groups. For example, a UDP listener with port 1024 might
+// join two different groups across over two different network
+// interfaces by using:
+//
+//	c, err := net.ListenPacket("udp4", "0.0.0.0:1024")
+//	if err != nil {
+//		// error handling
+//	}
+//	defer c.Close()
+//	p := ipv4.NewPacketConn(c)
+//	if err := p.JoinGroup(en0, &net.UDPAddr{IP: net.IPv4(224, 0, 0, 248)}); err != nil {
+//		// error handling
+//	}
+//	if err := p.JoinGroup(en0, &net.UDPAddr{IP: net.IPv4(224, 0, 0, 249)}); err != nil {
+//		// error handling
+//	}
+//	if err := p.JoinGroup(en1, &net.UDPAddr{IP: net.IPv4(224, 0, 0, 249)}); err != nil {
+//		// error handling
+//	}
+//
+// It is possible for multiple UDP listeners that listen on the same
+// UDP port to join the same multicast group. The net package will
+// provide a socket that listens to a wildcard address with reusable
+// UDP port when an appropriate multicast address prefix is passed to
+// the net.ListenPacket or net.ListenUDP.
+//
+//	c1, err := net.ListenPacket("udp4", "224.0.0.0:1024")
+//	if err != nil {
+//		// error handling
+//	}
+//	defer c1.Close()
+//	c2, err := net.ListenPacket("udp4", "224.0.0.0:1024")
+//	if err != nil {
+//		// error handling
+//	}
+//	defer c2.Close()
+//	p1 := ipv4.NewPacketConn(c1)
+//	if err := p1.JoinGroup(en0, &net.UDPAddr{IP: net.IPv4(224, 0, 0, 248)}); err != nil {
+//		// error handling
+//	}
+//	p2 := ipv4.NewPacketConn(c2)
+//	if err := p2.JoinGroup(en0, &net.UDPAddr{IP: net.IPv4(224, 0, 0, 248)}); err != nil {
+//		// error handling
+//	}
+//
+// Also it is possible for the application to leave or rejoin a
+// multicast group on the network interface.
+//
+//	if err := p.LeaveGroup(en0, &net.UDPAddr{IP: net.IPv4(224, 0, 0, 248)}); err != nil {
+//		// error handling
+//	}
+//	if err := p.JoinGroup(en0, &net.UDPAddr{IP: net.IPv4(224, 0, 0, 250)}); err != nil {
+//		// error handling
+//	}
+//
+//
+// Source-specific multicasting
+//
+// An application that uses PacketConn or RawConn on IGMPv3 supported
+// platform is able to join source-specific multicast groups.
+// The application may use JoinSourceSpecificGroup and
+// LeaveSourceSpecificGroup for the operation known as "include" mode,
+//
+//	ssmgroup := net.UDPAddr{IP: net.IPv4(232, 7, 8, 9)}
+//	ssmsource := net.UDPAddr{IP: net.IPv4(192, 168, 0, 1)}
+//	if err := p.JoinSourceSpecificGroup(en0, &ssmgroup, &ssmsource); err != nil {
+//		// error handling
+//	}
+//	if err := p.LeaveSourceSpecificGroup(en0, &ssmgroup, &ssmsource); err != nil {
+//		// error handling
+//	}
+//
+// or JoinGroup, ExcludeSourceSpecificGroup,
+// IncludeSourceSpecificGroup and LeaveGroup for the operation known
+// as "exclude" mode.
+//
+//	exclsource := net.UDPAddr{IP: net.IPv4(192, 168, 0, 254)}
+//	if err := p.JoinGroup(en0, &ssmgroup); err != nil {
+//		// error handling
+//	}
+//	if err := p.ExcludeSourceSpecificGroup(en0, &ssmgroup, &exclsource); err != nil {
+//		// error handling
+//	}
+//	if err := p.LeaveGroup(en0, &ssmgroup); err != nil {
+//		// error handling
+//	}
+//
+// Note that it depends on each platform implementation what happens
+// when an application which runs on IGMPv3 unsupported platform uses
+// JoinSourceSpecificGroup and LeaveSourceSpecificGroup.
+// In general the platform tries to fall back to conversations using
+// IGMPv1 or IGMPv2 and starts to listen to multicast traffic.
+// In the fallback case, ExcludeSourceSpecificGroup and
+// IncludeSourceSpecificGroup may return an error.
+package ipv4 // import "golang.org/x/net/ipv4"
+
+// BUG(mikio): This package is not implemented on JS, NaCl and Plan 9.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/endpoint.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/endpoint.go
new file mode 100644
index 000000000..4a6d7a85e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/endpoint.go
@@ -0,0 +1,186 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import (
+	"net"
+	"time"
+
+	"golang.org/x/net/internal/socket"
+)
+
+// BUG(mikio): On Windows, the JoinSourceSpecificGroup,
+// LeaveSourceSpecificGroup, ExcludeSourceSpecificGroup and
+// IncludeSourceSpecificGroup methods of PacketConn and RawConn are
+// not implemented.
+
+// A Conn represents a network endpoint that uses the IPv4 transport.
+// It is used to control basic IP-level socket options such as TOS and
+// TTL.
+type Conn struct {
+	genericOpt
+}
+
+type genericOpt struct {
+	*socket.Conn
+}
+
+func (c *genericOpt) ok() bool { return c != nil && c.Conn != nil }
+
+// NewConn returns a new Conn.
+func NewConn(c net.Conn) *Conn {
+	cc, _ := socket.NewConn(c)
+	return &Conn{
+		genericOpt: genericOpt{Conn: cc},
+	}
+}
+
+// A PacketConn represents a packet network endpoint that uses the
+// IPv4 transport. It is used to control several IP-level socket
+// options including multicasting. It also provides datagram based
+// network I/O methods specific to the IPv4 and higher layer protocols
+// such as UDP.
+type PacketConn struct {
+	genericOpt
+	dgramOpt
+	payloadHandler
+}
+
+type dgramOpt struct {
+	*socket.Conn
+}
+
+func (c *dgramOpt) ok() bool { return c != nil && c.Conn != nil }
+
+// SetControlMessage sets the per packet IP-level socket options.
+func (c *PacketConn) SetControlMessage(cf ControlFlags, on bool) error {
+	if !c.payloadHandler.ok() {
+		return errInvalidConn
+	}
+	return setControlMessage(c.dgramOpt.Conn, &c.payloadHandler.rawOpt, cf, on)
+}
+
+// SetDeadline sets the read and write deadlines associated with the
+// endpoint.
+func (c *PacketConn) SetDeadline(t time.Time) error {
+	if !c.payloadHandler.ok() {
+		return errInvalidConn
+	}
+	return c.payloadHandler.PacketConn.SetDeadline(t)
+}
+
+// SetReadDeadline sets the read deadline associated with the
+// endpoint.
+func (c *PacketConn) SetReadDeadline(t time.Time) error {
+	if !c.payloadHandler.ok() {
+		return errInvalidConn
+	}
+	return c.payloadHandler.PacketConn.SetReadDeadline(t)
+}
+
+// SetWriteDeadline sets the write deadline associated with the
+// endpoint.
+func (c *PacketConn) SetWriteDeadline(t time.Time) error {
+	if !c.payloadHandler.ok() {
+		return errInvalidConn
+	}
+	return c.payloadHandler.PacketConn.SetWriteDeadline(t)
+}
+
+// Close closes the endpoint.
+func (c *PacketConn) Close() error {
+	if !c.payloadHandler.ok() {
+		return errInvalidConn
+	}
+	return c.payloadHandler.PacketConn.Close()
+}
+
+// NewPacketConn returns a new PacketConn using c as its underlying
+// transport.
+func NewPacketConn(c net.PacketConn) *PacketConn {
+	cc, _ := socket.NewConn(c.(net.Conn))
+	p := &PacketConn{
+		genericOpt:     genericOpt{Conn: cc},
+		dgramOpt:       dgramOpt{Conn: cc},
+		payloadHandler: payloadHandler{PacketConn: c, Conn: cc},
+	}
+	return p
+}
+
+// A RawConn represents a packet network endpoint that uses the IPv4
+// transport. It is used to control several IP-level socket options
+// including IPv4 header manipulation. It also provides datagram
+// based network I/O methods specific to the IPv4 and higher layer
+// protocols that handle IPv4 datagram directly such as OSPF, GRE.
+type RawConn struct {
+	genericOpt
+	dgramOpt
+	packetHandler
+}
+
+// SetControlMessage sets the per packet IP-level socket options.
+func (c *RawConn) SetControlMessage(cf ControlFlags, on bool) error {
+	if !c.packetHandler.ok() {
+		return errInvalidConn
+	}
+	return setControlMessage(c.dgramOpt.Conn, &c.packetHandler.rawOpt, cf, on)
+}
+
+// SetDeadline sets the read and write deadlines associated with the
+// endpoint.
+func (c *RawConn) SetDeadline(t time.Time) error {
+	if !c.packetHandler.ok() {
+		return errInvalidConn
+	}
+	return c.packetHandler.IPConn.SetDeadline(t)
+}
+
+// SetReadDeadline sets the read deadline associated with the
+// endpoint.
+func (c *RawConn) SetReadDeadline(t time.Time) error {
+	if !c.packetHandler.ok() {
+		return errInvalidConn
+	}
+	return c.packetHandler.IPConn.SetReadDeadline(t)
+}
+
+// SetWriteDeadline sets the write deadline associated with the
+// endpoint.
+func (c *RawConn) SetWriteDeadline(t time.Time) error {
+	if !c.packetHandler.ok() {
+		return errInvalidConn
+	}
+	return c.packetHandler.IPConn.SetWriteDeadline(t)
+}
+
+// Close closes the endpoint.
+func (c *RawConn) Close() error {
+	if !c.packetHandler.ok() {
+		return errInvalidConn
+	}
+	return c.packetHandler.IPConn.Close()
+}
+
+// NewRawConn returns a new RawConn using c as its underlying
+// transport.
+func NewRawConn(c net.PacketConn) (*RawConn, error) {
+	cc, err := socket.NewConn(c.(net.Conn))
+	if err != nil {
+		return nil, err
+	}
+	r := &RawConn{
+		genericOpt:    genericOpt{Conn: cc},
+		dgramOpt:      dgramOpt{Conn: cc},
+		packetHandler: packetHandler{IPConn: c.(*net.IPConn), Conn: cc},
+	}
+	so, ok := sockOpts[ssoHeaderPrepend]
+	if !ok {
+		return nil, errNotImplemented
+	}
+	if err := so.SetInt(r.dgramOpt.Conn, boolint(true)); err != nil {
+		return nil, err
+	}
+	return r, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/genericopt.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/genericopt.go
new file mode 100644
index 000000000..51c12371e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/genericopt.go
@@ -0,0 +1,55 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+// TOS returns the type-of-service field value for outgoing packets.
+func (c *genericOpt) TOS() (int, error) {
+	if !c.ok() {
+		return 0, errInvalidConn
+	}
+	so, ok := sockOpts[ssoTOS]
+	if !ok {
+		return 0, errNotImplemented
+	}
+	return so.GetInt(c.Conn)
+}
+
+// SetTOS sets the type-of-service field value for future outgoing
+// packets.
+func (c *genericOpt) SetTOS(tos int) error {
+	if !c.ok() {
+		return errInvalidConn
+	}
+	so, ok := sockOpts[ssoTOS]
+	if !ok {
+		return errNotImplemented
+	}
+	return so.SetInt(c.Conn, tos)
+}
+
+// TTL returns the time-to-live field value for outgoing packets.
+func (c *genericOpt) TTL() (int, error) {
+	if !c.ok() {
+		return 0, errInvalidConn
+	}
+	so, ok := sockOpts[ssoTTL]
+	if !ok {
+		return 0, errNotImplemented
+	}
+	return so.GetInt(c.Conn)
+}
+
+// SetTTL sets the time-to-live field value for future outgoing
+// packets.
+func (c *genericOpt) SetTTL(ttl int) error {
+	if !c.ok() {
+		return errInvalidConn
+	}
+	so, ok := sockOpts[ssoTTL]
+	if !ok {
+		return errNotImplemented
+	}
+	return so.SetInt(c.Conn, ttl)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/header.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/header.go
new file mode 100644
index 000000000..a00a3eaff
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/header.go
@@ -0,0 +1,172 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import (
+	"encoding/binary"
+	"fmt"
+	"net"
+	"runtime"
+
+	"golang.org/x/net/internal/socket"
+)
+
+const (
+	Version   = 4  // protocol version
+	HeaderLen = 20 // header length without extension headers
+)
+
+type HeaderFlags int
+
+const (
+	MoreFragments HeaderFlags = 1 << iota // more fragments flag
+	DontFragment                          // don't fragment flag
+)
+
+// A Header represents an IPv4 header.
+type Header struct {
+	Version  int         // protocol version
+	Len      int         // header length
+	TOS      int         // type-of-service
+	TotalLen int         // packet total length
+	ID       int         // identification
+	Flags    HeaderFlags // flags
+	FragOff  int         // fragment offset
+	TTL      int         // time-to-live
+	Protocol int         // next protocol
+	Checksum int         // checksum
+	Src      net.IP      // source address
+	Dst      net.IP      // destination address
+	Options  []byte      // options, extension headers
+}
+
+func (h *Header) String() string {
+	if h == nil {
+		return "<nil>"
+	}
+	return fmt.Sprintf("ver=%d hdrlen=%d tos=%#x totallen=%d id=%#x flags=%#x fragoff=%#x ttl=%d proto=%d cksum=%#x src=%v dst=%v", h.Version, h.Len, h.TOS, h.TotalLen, h.ID, h.Flags, h.FragOff, h.TTL, h.Protocol, h.Checksum, h.Src, h.Dst)
+}
+
+// Marshal returns the binary encoding of h.
+//
+// The returned slice is in the format used by a raw IP socket on the
+// local system.
+// This may differ from the wire format, depending on the system.
+func (h *Header) Marshal() ([]byte, error) {
+	if h == nil {
+		return nil, errNilHeader
+	}
+	if h.Len < HeaderLen {
+		return nil, errHeaderTooShort
+	}
+	hdrlen := HeaderLen + len(h.Options)
+	b := make([]byte, hdrlen)
+	b[0] = byte(Version<<4 | (hdrlen >> 2 & 0x0f))
+	b[1] = byte(h.TOS)
+	flagsAndFragOff := (h.FragOff & 0x1fff) | int(h.Flags<<13)
+	switch runtime.GOOS {
+	case "darwin", "ios", "dragonfly", "netbsd":
+		socket.NativeEndian.PutUint16(b[2:4], uint16(h.TotalLen))
+		socket.NativeEndian.PutUint16(b[6:8], uint16(flagsAndFragOff))
+	case "freebsd":
+		if freebsdVersion < 1100000 {
+			socket.NativeEndian.PutUint16(b[2:4], uint16(h.TotalLen))
+			socket.NativeEndian.PutUint16(b[6:8], uint16(flagsAndFragOff))
+		} else {
+			binary.BigEndian.PutUint16(b[2:4], uint16(h.TotalLen))
+			binary.BigEndian.PutUint16(b[6:8], uint16(flagsAndFragOff))
+		}
+	default:
+		binary.BigEndian.PutUint16(b[2:4], uint16(h.TotalLen))
+		binary.BigEndian.PutUint16(b[6:8], uint16(flagsAndFragOff))
+	}
+	binary.BigEndian.PutUint16(b[4:6], uint16(h.ID))
+	b[8] = byte(h.TTL)
+	b[9] = byte(h.Protocol)
+	binary.BigEndian.PutUint16(b[10:12], uint16(h.Checksum))
+	if ip := h.Src.To4(); ip != nil {
+		copy(b[12:16], ip[:net.IPv4len])
+	}
+	if ip := h.Dst.To4(); ip != nil {
+		copy(b[16:20], ip[:net.IPv4len])
+	} else {
+		return nil, errMissingAddress
+	}
+	if len(h.Options) > 0 {
+		copy(b[HeaderLen:], h.Options)
+	}
+	return b, nil
+}
+
+// Parse parses b as an IPv4 header and stores the result in h.
+//
+// The provided b must be in the format used by a raw IP socket on the
+// local system.
+// This may differ from the wire format, depending on the system.
+func (h *Header) Parse(b []byte) error {
+	if h == nil || b == nil {
+		return errNilHeader
+	}
+	if len(b) < HeaderLen {
+		return errHeaderTooShort
+	}
+	hdrlen := int(b[0]&0x0f) << 2
+	if len(b) < hdrlen {
+		return errExtHeaderTooShort
+	}
+	h.Version = int(b[0] >> 4)
+	h.Len = hdrlen
+	h.TOS = int(b[1])
+	h.ID = int(binary.BigEndian.Uint16(b[4:6]))
+	h.TTL = int(b[8])
+	h.Protocol = int(b[9])
+	h.Checksum = int(binary.BigEndian.Uint16(b[10:12]))
+	h.Src = net.IPv4(b[12], b[13], b[14], b[15])
+	h.Dst = net.IPv4(b[16], b[17], b[18], b[19])
+	switch runtime.GOOS {
+	case "darwin", "ios", "dragonfly", "netbsd":
+		h.TotalLen = int(socket.NativeEndian.Uint16(b[2:4])) + hdrlen
+		h.FragOff = int(socket.NativeEndian.Uint16(b[6:8]))
+	case "freebsd":
+		if freebsdVersion < 1100000 {
+			h.TotalLen = int(socket.NativeEndian.Uint16(b[2:4]))
+			if freebsdVersion < 1000000 {
+				h.TotalLen += hdrlen
+			}
+			h.FragOff = int(socket.NativeEndian.Uint16(b[6:8]))
+		} else {
+			h.TotalLen = int(binary.BigEndian.Uint16(b[2:4]))
+			h.FragOff = int(binary.BigEndian.Uint16(b[6:8]))
+		}
+	default:
+		h.TotalLen = int(binary.BigEndian.Uint16(b[2:4]))
+		h.FragOff = int(binary.BigEndian.Uint16(b[6:8]))
+	}
+	h.Flags = HeaderFlags(h.FragOff&0xe000) >> 13
+	h.FragOff = h.FragOff & 0x1fff
+	optlen := hdrlen - HeaderLen
+	if optlen > 0 && len(b) >= hdrlen {
+		if cap(h.Options) < optlen {
+			h.Options = make([]byte, optlen)
+		} else {
+			h.Options = h.Options[:optlen]
+		}
+		copy(h.Options, b[HeaderLen:hdrlen])
+	}
+	return nil
+}
+
+// ParseHeader parses b as an IPv4 header.
+//
+// The provided b must be in the format used by a raw IP socket on the
+// local system.
+// This may differ from the wire format, depending on the system.
+func ParseHeader(b []byte) (*Header, error) {
+	h := new(Header)
+	if err := h.Parse(b); err != nil {
+		return nil, err
+	}
+	return h, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/helper.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/helper.go
new file mode 100644
index 000000000..e845a7376
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/helper.go
@@ -0,0 +1,77 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import (
+	"errors"
+	"net"
+	"runtime"
+
+	"golang.org/x/net/internal/socket"
+)
+
+var (
+	errInvalidConn       = errors.New("invalid connection")
+	errMissingAddress    = errors.New("missing address")
+	errNilHeader         = errors.New("nil header")
+	errHeaderTooShort    = errors.New("header too short")
+	errExtHeaderTooShort = errors.New("extension header too short")
+	errInvalidConnType   = errors.New("invalid conn type")
+	errNotImplemented    = errors.New("not implemented on " + runtime.GOOS + "/" + runtime.GOARCH)
+
+	// See https://www.freebsd.org/doc/en/books/porters-handbook/versions.html.
+	freebsdVersion  uint32
+	compatFreeBSD32 bool // 386 emulation on amd64
+)
+
+// See golang.org/issue/30899.
+func adjustFreeBSD32(m *socket.Message) {
+	// FreeBSD 12.0-RELEASE is affected by https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236737
+	if 1200086 <= freebsdVersion && freebsdVersion < 1201000 {
+		l := (m.NN + 4 - 1) &^ (4 - 1)
+		if m.NN < l && l <= len(m.OOB) {
+			m.NN = l
+		}
+	}
+}
+
+func boolint(b bool) int {
+	if b {
+		return 1
+	}
+	return 0
+}
+
+func netAddrToIP4(a net.Addr) net.IP {
+	switch v := a.(type) {
+	case *net.UDPAddr:
+		if ip := v.IP.To4(); ip != nil {
+			return ip
+		}
+	case *net.IPAddr:
+		if ip := v.IP.To4(); ip != nil {
+			return ip
+		}
+	}
+	return nil
+}
+
+func opAddr(a net.Addr) net.Addr {
+	switch a.(type) {
+	case *net.TCPAddr:
+		if a == nil {
+			return nil
+		}
+	case *net.UDPAddr:
+		if a == nil {
+			return nil
+		}
+	case *net.IPAddr:
+		if a == nil {
+			return nil
+		}
+	}
+	return a
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/iana.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/iana.go
new file mode 100644
index 000000000..4375b4099
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/iana.go
@@ -0,0 +1,38 @@
+// go generate gen.go
+// Code generated by the command above; DO NOT EDIT.
+
+package ipv4
+
+// Internet Control Message Protocol (ICMP) Parameters, Updated: 2018-02-26
+const (
+	ICMPTypeEchoReply              ICMPType = 0  // Echo Reply
+	ICMPTypeDestinationUnreachable ICMPType = 3  // Destination Unreachable
+	ICMPTypeRedirect               ICMPType = 5  // Redirect
+	ICMPTypeEcho                   ICMPType = 8  // Echo
+	ICMPTypeRouterAdvertisement    ICMPType = 9  // Router Advertisement
+	ICMPTypeRouterSolicitation     ICMPType = 10 // Router Solicitation
+	ICMPTypeTimeExceeded           ICMPType = 11 // Time Exceeded
+	ICMPTypeParameterProblem       ICMPType = 12 // Parameter Problem
+	ICMPTypeTimestamp              ICMPType = 13 // Timestamp
+	ICMPTypeTimestampReply         ICMPType = 14 // Timestamp Reply
+	ICMPTypePhoturis               ICMPType = 40 // Photuris
+	ICMPTypeExtendedEchoRequest    ICMPType = 42 // Extended Echo Request
+	ICMPTypeExtendedEchoReply      ICMPType = 43 // Extended Echo Reply
+)
+
+// Internet Control Message Protocol (ICMP) Parameters, Updated: 2018-02-26
+var icmpTypes = map[ICMPType]string{
+	0:  "echo reply",
+	3:  "destination unreachable",
+	5:  "redirect",
+	8:  "echo",
+	9:  "router advertisement",
+	10: "router solicitation",
+	11: "time exceeded",
+	12: "parameter problem",
+	13: "timestamp",
+	14: "timestamp reply",
+	40: "photuris",
+	42: "extended echo request",
+	43: "extended echo reply",
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/icmp.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/icmp.go
new file mode 100644
index 000000000..9902bb3d2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/icmp.go
@@ -0,0 +1,57 @@
+// Copyright 2013 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import "golang.org/x/net/internal/iana"
+
+// An ICMPType represents a type of ICMP message.
+type ICMPType int
+
+func (typ ICMPType) String() string {
+	s, ok := icmpTypes[typ]
+	if !ok {
+		return "<nil>"
+	}
+	return s
+}
+
+// Protocol returns the ICMPv4 protocol number.
+func (typ ICMPType) Protocol() int {
+	return iana.ProtocolICMP
+}
+
+// An ICMPFilter represents an ICMP message filter for incoming
+// packets. The filter belongs to a packet delivery path on a host and
+// it cannot interact with forwarding packets or tunnel-outer packets.
+//
+// Note: RFC 8200 defines a reasonable role model and it works not
+// only for IPv6 but IPv4. A node means a device that implements IP.
+// A router means a node that forwards IP packets not explicitly
+// addressed to itself, and a host means a node that is not a router.
+type ICMPFilter struct {
+	icmpFilter
+}
+
+// Accept accepts incoming ICMP packets including the type field value
+// typ.
+func (f *ICMPFilter) Accept(typ ICMPType) {
+	f.accept(typ)
+}
+
+// Block blocks incoming ICMP packets including the type field value
+// typ.
+func (f *ICMPFilter) Block(typ ICMPType) {
+	f.block(typ)
+}
+
+// SetAll sets the filter action to the filter.
+func (f *ICMPFilter) SetAll(block bool) {
+	f.setAll(block)
+}
+
+// WillBlock reports whether the ICMP type will be blocked.
+func (f *ICMPFilter) WillBlock(typ ICMPType) bool {
+	return f.willBlock(typ)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/icmp_linux.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/icmp_linux.go
new file mode 100644
index 000000000..6e1c5c80a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/icmp_linux.go
@@ -0,0 +1,25 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+func (f *icmpFilter) accept(typ ICMPType) {
+	f.Data &^= 1 << (uint32(typ) & 31)
+}
+
+func (f *icmpFilter) block(typ ICMPType) {
+	f.Data |= 1 << (uint32(typ) & 31)
+}
+
+func (f *icmpFilter) setAll(block bool) {
+	if block {
+		f.Data = 1<<32 - 1
+	} else {
+		f.Data = 0
+	}
+}
+
+func (f *icmpFilter) willBlock(typ ICMPType) bool {
+	return f.Data&(1<<(uint32(typ)&31)) != 0
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/icmp_stub.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/icmp_stub.go
new file mode 100644
index 000000000..21bb29ab3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/icmp_stub.go
@@ -0,0 +1,25 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !linux
+
+package ipv4
+
+const sizeofICMPFilter = 0x0
+
+type icmpFilter struct {
+}
+
+func (f *icmpFilter) accept(typ ICMPType) {
+}
+
+func (f *icmpFilter) block(typ ICMPType) {
+}
+
+func (f *icmpFilter) setAll(block bool) {
+}
+
+func (f *icmpFilter) willBlock(typ ICMPType) bool {
+	return false
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/packet.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/packet.go
new file mode 100644
index 000000000..7d784e06d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/packet.go
@@ -0,0 +1,117 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import (
+	"net"
+
+	"golang.org/x/net/internal/socket"
+)
+
+// BUG(mikio): On Windows, the ReadFrom and WriteTo methods of RawConn
+// are not implemented.
+
+// A packetHandler represents the IPv4 datagram handler.
+type packetHandler struct {
+	*net.IPConn
+	*socket.Conn
+	rawOpt
+}
+
+func (c *packetHandler) ok() bool { return c != nil && c.IPConn != nil && c.Conn != nil }
+
+// ReadFrom reads an IPv4 datagram from the endpoint c, copying the
+// datagram into b. It returns the received datagram as the IPv4
+// header h, the payload p and the control message cm.
+func (c *packetHandler) ReadFrom(b []byte) (h *Header, p []byte, cm *ControlMessage, err error) {
+	if !c.ok() {
+		return nil, nil, nil, errInvalidConn
+	}
+	c.rawOpt.RLock()
+	m := socket.Message{
+		Buffers: [][]byte{b},
+		OOB:     NewControlMessage(c.rawOpt.cflags),
+	}
+	c.rawOpt.RUnlock()
+	if err := c.RecvMsg(&m, 0); err != nil {
+		return nil, nil, nil, &net.OpError{Op: "read", Net: c.IPConn.LocalAddr().Network(), Source: c.IPConn.LocalAddr(), Err: err}
+	}
+	var hs []byte
+	if hs, p, err = slicePacket(b[:m.N]); err != nil {
+		return nil, nil, nil, &net.OpError{Op: "read", Net: c.IPConn.LocalAddr().Network(), Source: c.IPConn.LocalAddr(), Err: err}
+	}
+	if h, err = ParseHeader(hs); err != nil {
+		return nil, nil, nil, &net.OpError{Op: "read", Net: c.IPConn.LocalAddr().Network(), Source: c.IPConn.LocalAddr(), Err: err}
+	}
+	if m.NN > 0 {
+		if compatFreeBSD32 {
+			adjustFreeBSD32(&m)
+		}
+		cm = new(ControlMessage)
+		if err := cm.Parse(m.OOB[:m.NN]); err != nil {
+			return nil, nil, nil, &net.OpError{Op: "read", Net: c.IPConn.LocalAddr().Network(), Source: c.IPConn.LocalAddr(), Err: err}
+		}
+	}
+	if src, ok := m.Addr.(*net.IPAddr); ok && cm != nil {
+		cm.Src = src.IP
+	}
+	return
+}
+
+func slicePacket(b []byte) (h, p []byte, err error) {
+	if len(b) < HeaderLen {
+		return nil, nil, errHeaderTooShort
+	}
+	hdrlen := int(b[0]&0x0f) << 2
+	return b[:hdrlen], b[hdrlen:], nil
+}
+
+// WriteTo writes an IPv4 datagram through the endpoint c, copying the
+// datagram from the IPv4 header h and the payload p. The control
+// message cm allows the datagram path and the outgoing interface to be
+// specified.  Currently only Darwin and Linux support this. The cm
+// may be nil if control of the outgoing datagram is not required.
+//
+// The IPv4 header h must contain appropriate fields that include:
+//
+//	Version       = <must be specified>
+//	Len           = <must be specified>
+//	TOS           = <must be specified>
+//	TotalLen      = <must be specified>
+//	ID            = platform sets an appropriate value if ID is zero
+//	FragOff       = <must be specified>
+//	TTL           = <must be specified>
+//	Protocol      = <must be specified>
+//	Checksum      = platform sets an appropriate value if Checksum is zero
+//	Src           = platform sets an appropriate value if Src is nil
+//	Dst           = <must be specified>
+//	Options       = optional
+func (c *packetHandler) WriteTo(h *Header, p []byte, cm *ControlMessage) error {
+	if !c.ok() {
+		return errInvalidConn
+	}
+	m := socket.Message{
+		OOB: cm.Marshal(),
+	}
+	wh, err := h.Marshal()
+	if err != nil {
+		return err
+	}
+	m.Buffers = [][]byte{wh, p}
+	dst := new(net.IPAddr)
+	if cm != nil {
+		if ip := cm.Dst.To4(); ip != nil {
+			dst.IP = ip
+		}
+	}
+	if dst.IP == nil {
+		dst.IP = h.Dst
+	}
+	m.Addr = dst
+	if err := c.SendMsg(&m, 0); err != nil {
+		return &net.OpError{Op: "write", Net: c.IPConn.LocalAddr().Network(), Source: c.IPConn.LocalAddr(), Addr: opAddr(dst), Err: err}
+	}
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/payload.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/payload.go
new file mode 100644
index 000000000..f95f811ac
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/payload.go
@@ -0,0 +1,23 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import (
+	"net"
+
+	"golang.org/x/net/internal/socket"
+)
+
+// BUG(mikio): On Windows, the ControlMessage for ReadFrom and WriteTo
+// methods of PacketConn is not implemented.
+
+// A payloadHandler represents the IPv4 datagram payload handler.
+type payloadHandler struct {
+	net.PacketConn
+	*socket.Conn
+	rawOpt
+}
+
+func (c *payloadHandler) ok() bool { return c != nil && c.PacketConn != nil && c.Conn != nil }
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/payload_cmsg.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/payload_cmsg.go
new file mode 100644
index 000000000..7bde68947
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/payload_cmsg.go
@@ -0,0 +1,84 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris zos
+
+package ipv4
+
+import (
+	"net"
+
+	"golang.org/x/net/internal/socket"
+)
+
+// ReadFrom reads a payload of the received IPv4 datagram, from the
+// endpoint c, copying the payload into b. It returns the number of
+// bytes copied into b, the control message cm and the source address
+// src of the received datagram.
+func (c *payloadHandler) ReadFrom(b []byte) (n int, cm *ControlMessage, src net.Addr, err error) {
+	if !c.ok() {
+		return 0, nil, nil, errInvalidConn
+	}
+	c.rawOpt.RLock()
+	m := socket.Message{
+		OOB: NewControlMessage(c.rawOpt.cflags),
+	}
+	c.rawOpt.RUnlock()
+	switch c.PacketConn.(type) {
+	case *net.UDPConn:
+		m.Buffers = [][]byte{b}
+		if err := c.RecvMsg(&m, 0); err != nil {
+			return 0, nil, nil, &net.OpError{Op: "read", Net: c.PacketConn.LocalAddr().Network(), Source: c.PacketConn.LocalAddr(), Err: err}
+		}
+	case *net.IPConn:
+		h := make([]byte, HeaderLen)
+		m.Buffers = [][]byte{h, b}
+		if err := c.RecvMsg(&m, 0); err != nil {
+			return 0, nil, nil, &net.OpError{Op: "read", Net: c.PacketConn.LocalAddr().Network(), Source: c.PacketConn.LocalAddr(), Err: err}
+		}
+		hdrlen := int(h[0]&0x0f) << 2
+		if hdrlen > len(h) {
+			d := hdrlen - len(h)
+			copy(b, b[d:])
+			m.N -= d
+		} else {
+			m.N -= hdrlen
+		}
+	default:
+		return 0, nil, nil, &net.OpError{Op: "read", Net: c.PacketConn.LocalAddr().Network(), Source: c.PacketConn.LocalAddr(), Err: errInvalidConnType}
+	}
+	if m.NN > 0 {
+		if compatFreeBSD32 {
+			adjustFreeBSD32(&m)
+		}
+		cm = new(ControlMessage)
+		if err := cm.Parse(m.OOB[:m.NN]); err != nil {
+			return 0, nil, nil, &net.OpError{Op: "read", Net: c.PacketConn.LocalAddr().Network(), Source: c.PacketConn.LocalAddr(), Err: err}
+		}
+		cm.Src = netAddrToIP4(m.Addr)
+	}
+	return m.N, cm, m.Addr, nil
+}
+
+// WriteTo writes a payload of the IPv4 datagram, to the destination
+// address dst through the endpoint c, copying the payload from b. It
+// returns the number of bytes written. The control message cm allows
+// the datagram path and the outgoing interface to be specified.
+// Currently only Darwin and Linux support this. The cm may be nil if
+// control of the outgoing datagram is not required.
+func (c *payloadHandler) WriteTo(b []byte, cm *ControlMessage, dst net.Addr) (n int, err error) {
+	if !c.ok() {
+		return 0, errInvalidConn
+	}
+	m := socket.Message{
+		Buffers: [][]byte{b},
+		OOB:     cm.Marshal(),
+		Addr:    dst,
+	}
+	err = c.SendMsg(&m, 0)
+	if err != nil {
+		err = &net.OpError{Op: "write", Net: c.PacketConn.LocalAddr().Network(), Source: c.PacketConn.LocalAddr(), Addr: opAddr(dst), Err: err}
+	}
+	return m.N, err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/payload_nocmsg.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/payload_nocmsg.go
new file mode 100644
index 000000000..251bd0c70
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/payload_nocmsg.go
@@ -0,0 +1,39 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !aix,!darwin,!dragonfly,!freebsd,!linux,!netbsd,!openbsd,!solaris,!zos
+
+package ipv4
+
+import "net"
+
+// ReadFrom reads a payload of the received IPv4 datagram, from the
+// endpoint c, copying the payload into b. It returns the number of
+// bytes copied into b, the control message cm and the source address
+// src of the received datagram.
+func (c *payloadHandler) ReadFrom(b []byte) (n int, cm *ControlMessage, src net.Addr, err error) {
+	if !c.ok() {
+		return 0, nil, nil, errInvalidConn
+	}
+	if n, src, err = c.PacketConn.ReadFrom(b); err != nil {
+		return 0, nil, nil, err
+	}
+	return
+}
+
+// WriteTo writes a payload of the IPv4 datagram, to the destination
+// address dst through the endpoint c, copying the payload from b. It
+// returns the number of bytes written. The control message cm allows
+// the datagram path and the outgoing interface to be specified.
+// Currently only Darwin and Linux support this. The cm may be nil if
+// control of the outgoing datagram is not required.
+func (c *payloadHandler) WriteTo(b []byte, cm *ControlMessage, dst net.Addr) (n int, err error) {
+	if !c.ok() {
+		return 0, errInvalidConn
+	}
+	if dst == nil {
+		return 0, errMissingAddress
+	}
+	return c.PacketConn.WriteTo(b, dst)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sockopt.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sockopt.go
new file mode 100644
index 000000000..22e90c039
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sockopt.go
@@ -0,0 +1,44 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import "golang.org/x/net/internal/socket"
+
+// Sticky socket options
+const (
+	ssoTOS                = iota // header field for unicast packet
+	ssoTTL                       // header field for unicast packet
+	ssoMulticastTTL              // header field for multicast packet
+	ssoMulticastInterface        // outbound interface for multicast packet
+	ssoMulticastLoopback         // loopback for multicast packet
+	ssoReceiveTTL                // header field on received packet
+	ssoReceiveDst                // header field on received packet
+	ssoReceiveInterface          // inbound interface on received packet
+	ssoPacketInfo                // incbound or outbound packet path
+	ssoHeaderPrepend             // ipv4 header prepend
+	ssoStripHeader               // strip ipv4 header
+	ssoICMPFilter                // icmp filter
+	ssoJoinGroup                 // any-source multicast
+	ssoLeaveGroup                // any-source multicast
+	ssoJoinSourceGroup           // source-specific multicast
+	ssoLeaveSourceGroup          // source-specific multicast
+	ssoBlockSourceGroup          // any-source or source-specific multicast
+	ssoUnblockSourceGroup        // any-source or source-specific multicast
+	ssoAttachFilter              // attach BPF for filtering inbound traffic
+)
+
+// Sticky socket option value types
+const (
+	ssoTypeIPMreq = iota + 1
+	ssoTypeIPMreqn
+	ssoTypeGroupReq
+	ssoTypeGroupSourceReq
+)
+
+// A sockOpt represents a binding for sticky socket option.
+type sockOpt struct {
+	socket.Option
+	typ int // hint for option value type; optional
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sockopt_posix.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sockopt_posix.go
new file mode 100644
index 000000000..ef29718d1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sockopt_posix.go
@@ -0,0 +1,71 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris windows zos
+
+package ipv4
+
+import (
+	"net"
+	"unsafe"
+
+	"golang.org/x/net/bpf"
+	"golang.org/x/net/internal/socket"
+)
+
+func (so *sockOpt) getMulticastInterface(c *socket.Conn) (*net.Interface, error) {
+	switch so.typ {
+	case ssoTypeIPMreqn:
+		return so.getIPMreqn(c)
+	default:
+		return so.getMulticastIf(c)
+	}
+}
+
+func (so *sockOpt) setMulticastInterface(c *socket.Conn, ifi *net.Interface) error {
+	switch so.typ {
+	case ssoTypeIPMreqn:
+		return so.setIPMreqn(c, ifi, nil)
+	default:
+		return so.setMulticastIf(c, ifi)
+	}
+}
+
+func (so *sockOpt) getICMPFilter(c *socket.Conn) (*ICMPFilter, error) {
+	b := make([]byte, so.Len)
+	n, err := so.Get(c, b)
+	if err != nil {
+		return nil, err
+	}
+	if n != sizeofICMPFilter {
+		return nil, errNotImplemented
+	}
+	return (*ICMPFilter)(unsafe.Pointer(&b[0])), nil
+}
+
+func (so *sockOpt) setICMPFilter(c *socket.Conn, f *ICMPFilter) error {
+	b := (*[sizeofICMPFilter]byte)(unsafe.Pointer(f))[:sizeofICMPFilter]
+	return so.Set(c, b)
+}
+
+func (so *sockOpt) setGroup(c *socket.Conn, ifi *net.Interface, grp net.IP) error {
+	switch so.typ {
+	case ssoTypeIPMreq:
+		return so.setIPMreq(c, ifi, grp)
+	case ssoTypeIPMreqn:
+		return so.setIPMreqn(c, ifi, grp)
+	case ssoTypeGroupReq:
+		return so.setGroupReq(c, ifi, grp)
+	default:
+		return errNotImplemented
+	}
+}
+
+func (so *sockOpt) setSourceGroup(c *socket.Conn, ifi *net.Interface, grp, src net.IP) error {
+	return so.setGroupSourceReq(c, ifi, grp, src)
+}
+
+func (so *sockOpt) setBPF(c *socket.Conn, f []bpf.RawInstruction) error {
+	return so.setAttachFilter(c, f)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sockopt_stub.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sockopt_stub.go
new file mode 100644
index 000000000..fbca52684
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sockopt_stub.go
@@ -0,0 +1,42 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !aix,!darwin,!dragonfly,!freebsd,!linux,!netbsd,!openbsd,!solaris,!windows,!zos
+
+package ipv4
+
+import (
+	"net"
+
+	"golang.org/x/net/bpf"
+	"golang.org/x/net/internal/socket"
+)
+
+func (so *sockOpt) getMulticastInterface(c *socket.Conn) (*net.Interface, error) {
+	return nil, errNotImplemented
+}
+
+func (so *sockOpt) setMulticastInterface(c *socket.Conn, ifi *net.Interface) error {
+	return errNotImplemented
+}
+
+func (so *sockOpt) getICMPFilter(c *socket.Conn) (*ICMPFilter, error) {
+	return nil, errNotImplemented
+}
+
+func (so *sockOpt) setICMPFilter(c *socket.Conn, f *ICMPFilter) error {
+	return errNotImplemented
+}
+
+func (so *sockOpt) setGroup(c *socket.Conn, ifi *net.Interface, grp net.IP) error {
+	return errNotImplemented
+}
+
+func (so *sockOpt) setSourceGroup(c *socket.Conn, ifi *net.Interface, grp, src net.IP) error {
+	return errNotImplemented
+}
+
+func (so *sockOpt) setBPF(c *socket.Conn, f []bpf.RawInstruction) error {
+	return errNotImplemented
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_aix.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_aix.go
new file mode 100644
index 000000000..3d1201e6d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_aix.go
@@ -0,0 +1,38 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Added for go1.11 compatibility
+// +build aix
+
+package ipv4
+
+import (
+	"net"
+	"syscall"
+
+	"golang.org/x/net/internal/iana"
+	"golang.org/x/net/internal/socket"
+)
+
+var (
+	ctlOpts = [ctlMax]ctlOpt{
+		ctlTTL:       {sysIP_RECVTTL, 1, marshalTTL, parseTTL},
+		ctlDst:       {sysIP_RECVDSTADDR, net.IPv4len, marshalDst, parseDst},
+		ctlInterface: {sysIP_RECVIF, syscall.SizeofSockaddrDatalink, marshalInterface, parseInterface},
+	}
+
+	sockOpts = map[int]*sockOpt{
+		ssoTOS:                {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_TOS, Len: 4}},
+		ssoTTL:                {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_TTL, Len: 4}},
+		ssoMulticastTTL:       {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_TTL, Len: 1}},
+		ssoMulticastInterface: {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_IF, Len: 4}},
+		ssoMulticastLoopback:  {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_LOOP, Len: 1}},
+		ssoReceiveTTL:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVTTL, Len: 4}},
+		ssoReceiveDst:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVDSTADDR, Len: 4}},
+		ssoReceiveInterface:   {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVIF, Len: 4}},
+		ssoHeaderPrepend:      {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_HDRINCL, Len: 4}},
+		ssoJoinGroup:          {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_ADD_MEMBERSHIP, Len: sizeofIPMreq}, typ: ssoTypeIPMreq},
+		ssoLeaveGroup:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_DROP_MEMBERSHIP, Len: sizeofIPMreq}, typ: ssoTypeIPMreq},
+	}
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_asmreq.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_asmreq.go
new file mode 100644
index 000000000..76d670aca
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_asmreq.go
@@ -0,0 +1,122 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd netbsd openbsd solaris windows
+
+package ipv4
+
+import (
+	"errors"
+	"net"
+	"unsafe"
+
+	"golang.org/x/net/internal/socket"
+)
+
+var errNoSuchInterface = errors.New("no such interface")
+
+func (so *sockOpt) setIPMreq(c *socket.Conn, ifi *net.Interface, grp net.IP) error {
+	mreq := ipMreq{Multiaddr: [4]byte{grp[0], grp[1], grp[2], grp[3]}}
+	if err := setIPMreqInterface(&mreq, ifi); err != nil {
+		return err
+	}
+	b := (*[sizeofIPMreq]byte)(unsafe.Pointer(&mreq))[:sizeofIPMreq]
+	return so.Set(c, b)
+}
+
+func (so *sockOpt) getMulticastIf(c *socket.Conn) (*net.Interface, error) {
+	var b [4]byte
+	if _, err := so.Get(c, b[:]); err != nil {
+		return nil, err
+	}
+	ifi, err := netIP4ToInterface(net.IPv4(b[0], b[1], b[2], b[3]))
+	if err != nil {
+		return nil, err
+	}
+	return ifi, nil
+}
+
+func (so *sockOpt) setMulticastIf(c *socket.Conn, ifi *net.Interface) error {
+	ip, err := netInterfaceToIP4(ifi)
+	if err != nil {
+		return err
+	}
+	var b [4]byte
+	copy(b[:], ip)
+	return so.Set(c, b[:])
+}
+
+func setIPMreqInterface(mreq *ipMreq, ifi *net.Interface) error {
+	if ifi == nil {
+		return nil
+	}
+	ifat, err := ifi.Addrs()
+	if err != nil {
+		return err
+	}
+	for _, ifa := range ifat {
+		switch ifa := ifa.(type) {
+		case *net.IPAddr:
+			if ip := ifa.IP.To4(); ip != nil {
+				copy(mreq.Interface[:], ip)
+				return nil
+			}
+		case *net.IPNet:
+			if ip := ifa.IP.To4(); ip != nil {
+				copy(mreq.Interface[:], ip)
+				return nil
+			}
+		}
+	}
+	return errNoSuchInterface
+}
+
+func netIP4ToInterface(ip net.IP) (*net.Interface, error) {
+	ift, err := net.Interfaces()
+	if err != nil {
+		return nil, err
+	}
+	for _, ifi := range ift {
+		ifat, err := ifi.Addrs()
+		if err != nil {
+			return nil, err
+		}
+		for _, ifa := range ifat {
+			switch ifa := ifa.(type) {
+			case *net.IPAddr:
+				if ip.Equal(ifa.IP) {
+					return &ifi, nil
+				}
+			case *net.IPNet:
+				if ip.Equal(ifa.IP) {
+					return &ifi, nil
+				}
+			}
+		}
+	}
+	return nil, errNoSuchInterface
+}
+
+func netInterfaceToIP4(ifi *net.Interface) (net.IP, error) {
+	if ifi == nil {
+		return net.IPv4zero.To4(), nil
+	}
+	ifat, err := ifi.Addrs()
+	if err != nil {
+		return nil, err
+	}
+	for _, ifa := range ifat {
+		switch ifa := ifa.(type) {
+		case *net.IPAddr:
+			if ip := ifa.IP.To4(); ip != nil {
+				return ip, nil
+			}
+		case *net.IPNet:
+			if ip := ifa.IP.To4(); ip != nil {
+				return ip, nil
+			}
+		}
+	}
+	return nil, errNoSuchInterface
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_asmreq_stub.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_asmreq_stub.go
new file mode 100644
index 000000000..6dc339ce6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_asmreq_stub.go
@@ -0,0 +1,25 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !aix,!darwin,!dragonfly,!freebsd,!netbsd,!openbsd,!solaris,!windows
+
+package ipv4
+
+import (
+	"net"
+
+	"golang.org/x/net/internal/socket"
+)
+
+func (so *sockOpt) setIPMreq(c *socket.Conn, ifi *net.Interface, grp net.IP) error {
+	return errNotImplemented
+}
+
+func (so *sockOpt) getMulticastIf(c *socket.Conn) (*net.Interface, error) {
+	return nil, errNotImplemented
+}
+
+func (so *sockOpt) setMulticastIf(c *socket.Conn, ifi *net.Interface) error {
+	return errNotImplemented
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_asmreqn.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_asmreqn.go
new file mode 100644
index 000000000..1f24f69f3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_asmreqn.go
@@ -0,0 +1,42 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build darwin freebsd linux
+
+package ipv4
+
+import (
+	"net"
+	"unsafe"
+
+	"golang.org/x/net/internal/socket"
+)
+
+func (so *sockOpt) getIPMreqn(c *socket.Conn) (*net.Interface, error) {
+	b := make([]byte, so.Len)
+	if _, err := so.Get(c, b); err != nil {
+		return nil, err
+	}
+	mreqn := (*ipMreqn)(unsafe.Pointer(&b[0]))
+	if mreqn.Ifindex == 0 {
+		return nil, nil
+	}
+	ifi, err := net.InterfaceByIndex(int(mreqn.Ifindex))
+	if err != nil {
+		return nil, err
+	}
+	return ifi, nil
+}
+
+func (so *sockOpt) setIPMreqn(c *socket.Conn, ifi *net.Interface, grp net.IP) error {
+	var mreqn ipMreqn
+	if ifi != nil {
+		mreqn.Ifindex = int32(ifi.Index)
+	}
+	if grp != nil {
+		mreqn.Multiaddr = [4]byte{grp[0], grp[1], grp[2], grp[3]}
+	}
+	b := (*[sizeofIPMreqn]byte)(unsafe.Pointer(&mreqn))[:sizeofIPMreqn]
+	return so.Set(c, b)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_asmreqn_stub.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_asmreqn_stub.go
new file mode 100644
index 000000000..48ef55624
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_asmreqn_stub.go
@@ -0,0 +1,21 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !darwin,!freebsd,!linux
+
+package ipv4
+
+import (
+	"net"
+
+	"golang.org/x/net/internal/socket"
+)
+
+func (so *sockOpt) getIPMreqn(c *socket.Conn) (*net.Interface, error) {
+	return nil, errNotImplemented
+}
+
+func (so *sockOpt) setIPMreqn(c *socket.Conn, ifi *net.Interface, grp net.IP) error {
+	return errNotImplemented
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_bpf.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_bpf.go
new file mode 100644
index 000000000..5c03dce3b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_bpf.go
@@ -0,0 +1,24 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build linux
+
+package ipv4
+
+import (
+	"unsafe"
+
+	"golang.org/x/net/bpf"
+	"golang.org/x/net/internal/socket"
+	"golang.org/x/sys/unix"
+)
+
+func (so *sockOpt) setAttachFilter(c *socket.Conn, f []bpf.RawInstruction) error {
+	prog := unix.SockFprog{
+		Len:    uint16(len(f)),
+		Filter: (*unix.SockFilter)(unsafe.Pointer(&f[0])),
+	}
+	b := (*[unix.SizeofSockFprog]byte)(unsafe.Pointer(&prog))[:unix.SizeofSockFprog]
+	return so.Set(c, b)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_bpf_stub.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_bpf_stub.go
new file mode 100644
index 000000000..5c9864271
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_bpf_stub.go
@@ -0,0 +1,16 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !linux
+
+package ipv4
+
+import (
+	"golang.org/x/net/bpf"
+	"golang.org/x/net/internal/socket"
+)
+
+func (so *sockOpt) setAttachFilter(c *socket.Conn, f []bpf.RawInstruction) error {
+	return errNotImplemented
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_bsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_bsd.go
new file mode 100644
index 000000000..58256dd9d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_bsd.go
@@ -0,0 +1,37 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build netbsd openbsd
+
+package ipv4
+
+import (
+	"net"
+	"syscall"
+
+	"golang.org/x/net/internal/iana"
+	"golang.org/x/net/internal/socket"
+)
+
+var (
+	ctlOpts = [ctlMax]ctlOpt{
+		ctlTTL:       {sysIP_RECVTTL, 1, marshalTTL, parseTTL},
+		ctlDst:       {sysIP_RECVDSTADDR, net.IPv4len, marshalDst, parseDst},
+		ctlInterface: {sysIP_RECVIF, syscall.SizeofSockaddrDatalink, marshalInterface, parseInterface},
+	}
+
+	sockOpts = map[int]*sockOpt{
+		ssoTOS:                {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_TOS, Len: 4}},
+		ssoTTL:                {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_TTL, Len: 4}},
+		ssoMulticastTTL:       {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_TTL, Len: 1}},
+		ssoMulticastInterface: {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_IF, Len: 4}},
+		ssoMulticastLoopback:  {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_LOOP, Len: 1}},
+		ssoReceiveTTL:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVTTL, Len: 4}},
+		ssoReceiveDst:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVDSTADDR, Len: 4}},
+		ssoReceiveInterface:   {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVIF, Len: 4}},
+		ssoHeaderPrepend:      {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_HDRINCL, Len: 4}},
+		ssoJoinGroup:          {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_ADD_MEMBERSHIP, Len: sizeofIPMreq}, typ: ssoTypeIPMreq},
+		ssoLeaveGroup:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_DROP_MEMBERSHIP, Len: sizeofIPMreq}, typ: ssoTypeIPMreq},
+	}
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_darwin.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_darwin.go
new file mode 100644
index 000000000..ac213c735
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_darwin.go
@@ -0,0 +1,65 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import (
+	"net"
+	"syscall"
+	"unsafe"
+
+	"golang.org/x/net/internal/iana"
+	"golang.org/x/net/internal/socket"
+)
+
+var (
+	ctlOpts = [ctlMax]ctlOpt{
+		ctlTTL:        {sysIP_RECVTTL, 1, marshalTTL, parseTTL},
+		ctlDst:        {sysIP_RECVDSTADDR, net.IPv4len, marshalDst, parseDst},
+		ctlInterface:  {sysIP_RECVIF, syscall.SizeofSockaddrDatalink, marshalInterface, parseInterface},
+		ctlPacketInfo: {sysIP_PKTINFO, sizeofInetPktinfo, marshalPacketInfo, parsePacketInfo},
+	}
+
+	sockOpts = map[int]*sockOpt{
+		ssoTOS:                {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_TOS, Len: 4}},
+		ssoTTL:                {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_TTL, Len: 4}},
+		ssoMulticastTTL:       {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_TTL, Len: 1}},
+		ssoMulticastInterface: {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_IF, Len: sizeofIPMreqn}, typ: ssoTypeIPMreqn},
+		ssoMulticastLoopback:  {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_LOOP, Len: 4}},
+		ssoReceiveTTL:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVTTL, Len: 4}},
+		ssoReceiveDst:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVDSTADDR, Len: 4}},
+		ssoReceiveInterface:   {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVIF, Len: 4}},
+		ssoHeaderPrepend:      {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_HDRINCL, Len: 4}},
+		ssoStripHeader:        {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_STRIPHDR, Len: 4}},
+		ssoJoinGroup:          {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_JOIN_GROUP, Len: sizeofGroupReq}, typ: ssoTypeGroupReq},
+		ssoLeaveGroup:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_LEAVE_GROUP, Len: sizeofGroupReq}, typ: ssoTypeGroupReq},
+		ssoJoinSourceGroup:    {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_JOIN_SOURCE_GROUP, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoLeaveSourceGroup:   {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_LEAVE_SOURCE_GROUP, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoBlockSourceGroup:   {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_BLOCK_SOURCE, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoUnblockSourceGroup: {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_UNBLOCK_SOURCE, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoPacketInfo:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVPKTINFO, Len: 4}},
+	}
+)
+
+func (pi *inetPktinfo) setIfindex(i int) {
+	pi.Ifindex = uint32(i)
+}
+
+func (gr *groupReq) setGroup(grp net.IP) {
+	sa := (*sockaddrInet)(unsafe.Pointer(uintptr(unsafe.Pointer(gr)) + 4))
+	sa.Len = sizeofSockaddrInet
+	sa.Family = syscall.AF_INET
+	copy(sa.Addr[:], grp)
+}
+
+func (gsr *groupSourceReq) setSourceGroup(grp, src net.IP) {
+	sa := (*sockaddrInet)(unsafe.Pointer(uintptr(unsafe.Pointer(gsr)) + 4))
+	sa.Len = sizeofSockaddrInet
+	sa.Family = syscall.AF_INET
+	copy(sa.Addr[:], grp)
+	sa = (*sockaddrInet)(unsafe.Pointer(uintptr(unsafe.Pointer(gsr)) + 132))
+	sa.Len = sizeofSockaddrInet
+	sa.Family = syscall.AF_INET
+	copy(sa.Addr[:], src)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_dragonfly.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_dragonfly.go
new file mode 100644
index 000000000..859764f33
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_dragonfly.go
@@ -0,0 +1,35 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import (
+	"net"
+	"syscall"
+
+	"golang.org/x/net/internal/iana"
+	"golang.org/x/net/internal/socket"
+)
+
+var (
+	ctlOpts = [ctlMax]ctlOpt{
+		ctlTTL:       {sysIP_RECVTTL, 1, marshalTTL, parseTTL},
+		ctlDst:       {sysIP_RECVDSTADDR, net.IPv4len, marshalDst, parseDst},
+		ctlInterface: {sysIP_RECVIF, syscall.SizeofSockaddrDatalink, marshalInterface, parseInterface},
+	}
+
+	sockOpts = map[int]*sockOpt{
+		ssoTOS:                {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_TOS, Len: 4}},
+		ssoTTL:                {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_TTL, Len: 4}},
+		ssoMulticastTTL:       {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_TTL, Len: 1}},
+		ssoMulticastInterface: {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_IF, Len: 4}},
+		ssoMulticastLoopback:  {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_LOOP, Len: 4}},
+		ssoReceiveTTL:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVTTL, Len: 4}},
+		ssoReceiveDst:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVDSTADDR, Len: 4}},
+		ssoReceiveInterface:   {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVIF, Len: 4}},
+		ssoHeaderPrepend:      {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_HDRINCL, Len: 4}},
+		ssoJoinGroup:          {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_ADD_MEMBERSHIP, Len: sizeofIPMreq}, typ: ssoTypeIPMreq},
+		ssoLeaveGroup:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_DROP_MEMBERSHIP, Len: sizeofIPMreq}, typ: ssoTypeIPMreq},
+	}
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_freebsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_freebsd.go
new file mode 100644
index 000000000..482873d9a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_freebsd.go
@@ -0,0 +1,76 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import (
+	"net"
+	"runtime"
+	"strings"
+	"syscall"
+	"unsafe"
+
+	"golang.org/x/net/internal/iana"
+	"golang.org/x/net/internal/socket"
+)
+
+var (
+	ctlOpts = [ctlMax]ctlOpt{
+		ctlTTL:       {sysIP_RECVTTL, 1, marshalTTL, parseTTL},
+		ctlDst:       {sysIP_RECVDSTADDR, net.IPv4len, marshalDst, parseDst},
+		ctlInterface: {sysIP_RECVIF, syscall.SizeofSockaddrDatalink, marshalInterface, parseInterface},
+	}
+
+	sockOpts = map[int]*sockOpt{
+		ssoTOS:                {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_TOS, Len: 4}},
+		ssoTTL:                {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_TTL, Len: 4}},
+		ssoMulticastTTL:       {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_TTL, Len: 1}},
+		ssoMulticastInterface: {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_IF, Len: 4}},
+		ssoMulticastLoopback:  {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_LOOP, Len: 4}},
+		ssoReceiveTTL:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVTTL, Len: 4}},
+		ssoReceiveDst:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVDSTADDR, Len: 4}},
+		ssoReceiveInterface:   {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVIF, Len: 4}},
+		ssoHeaderPrepend:      {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_HDRINCL, Len: 4}},
+		ssoJoinGroup:          {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_JOIN_GROUP, Len: sizeofGroupReq}, typ: ssoTypeGroupReq},
+		ssoLeaveGroup:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_LEAVE_GROUP, Len: sizeofGroupReq}, typ: ssoTypeGroupReq},
+		ssoJoinSourceGroup:    {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_JOIN_SOURCE_GROUP, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoLeaveSourceGroup:   {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_LEAVE_SOURCE_GROUP, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoBlockSourceGroup:   {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_BLOCK_SOURCE, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoUnblockSourceGroup: {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_UNBLOCK_SOURCE, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+	}
+)
+
+func init() {
+	freebsdVersion, _ = syscall.SysctlUint32("kern.osreldate")
+	if freebsdVersion >= 1000000 {
+		sockOpts[ssoMulticastInterface] = &sockOpt{Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_IF, Len: sizeofIPMreqn}, typ: ssoTypeIPMreqn}
+	}
+	if runtime.GOOS == "freebsd" && runtime.GOARCH == "386" {
+		archs, _ := syscall.Sysctl("kern.supported_archs")
+		for _, s := range strings.Fields(archs) {
+			if s == "amd64" {
+				compatFreeBSD32 = true
+				break
+			}
+		}
+	}
+}
+
+func (gr *groupReq) setGroup(grp net.IP) {
+	sa := (*sockaddrInet)(unsafe.Pointer(&gr.Group))
+	sa.Len = sizeofSockaddrInet
+	sa.Family = syscall.AF_INET
+	copy(sa.Addr[:], grp)
+}
+
+func (gsr *groupSourceReq) setSourceGroup(grp, src net.IP) {
+	sa := (*sockaddrInet)(unsafe.Pointer(&gsr.Group))
+	sa.Len = sizeofSockaddrInet
+	sa.Family = syscall.AF_INET
+	copy(sa.Addr[:], grp)
+	sa = (*sockaddrInet)(unsafe.Pointer(&gsr.Source))
+	sa.Len = sizeofSockaddrInet
+	sa.Family = syscall.AF_INET
+	copy(sa.Addr[:], src)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_linux.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_linux.go
new file mode 100644
index 000000000..cf755c7fb
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_linux.go
@@ -0,0 +1,60 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import (
+	"net"
+	"syscall"
+	"unsafe"
+
+	"golang.org/x/net/internal/iana"
+	"golang.org/x/net/internal/socket"
+	"golang.org/x/sys/unix"
+)
+
+var (
+	ctlOpts = [ctlMax]ctlOpt{
+		ctlTTL:        {sysIP_TTL, 1, marshalTTL, parseTTL},
+		ctlPacketInfo: {sysIP_PKTINFO, sizeofInetPktinfo, marshalPacketInfo, parsePacketInfo},
+	}
+
+	sockOpts = map[int]*sockOpt{
+		ssoTOS:                {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_TOS, Len: 4}},
+		ssoTTL:                {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_TTL, Len: 4}},
+		ssoMulticastTTL:       {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_TTL, Len: 4}},
+		ssoMulticastInterface: {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_IF, Len: sizeofIPMreqn}, typ: ssoTypeIPMreqn},
+		ssoMulticastLoopback:  {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_LOOP, Len: 4}},
+		ssoReceiveTTL:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVTTL, Len: 4}},
+		ssoPacketInfo:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_PKTINFO, Len: 4}},
+		ssoHeaderPrepend:      {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_HDRINCL, Len: 4}},
+		ssoICMPFilter:         {Option: socket.Option{Level: iana.ProtocolReserved, Name: sysICMP_FILTER, Len: sizeofICMPFilter}},
+		ssoJoinGroup:          {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_JOIN_GROUP, Len: sizeofGroupReq}, typ: ssoTypeGroupReq},
+		ssoLeaveGroup:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_LEAVE_GROUP, Len: sizeofGroupReq}, typ: ssoTypeGroupReq},
+		ssoJoinSourceGroup:    {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_JOIN_SOURCE_GROUP, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoLeaveSourceGroup:   {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_LEAVE_SOURCE_GROUP, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoBlockSourceGroup:   {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_BLOCK_SOURCE, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoUnblockSourceGroup: {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_UNBLOCK_SOURCE, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoAttachFilter:       {Option: socket.Option{Level: unix.SOL_SOCKET, Name: unix.SO_ATTACH_FILTER, Len: unix.SizeofSockFprog}},
+	}
+)
+
+func (pi *inetPktinfo) setIfindex(i int) {
+	pi.Ifindex = int32(i)
+}
+
+func (gr *groupReq) setGroup(grp net.IP) {
+	sa := (*sockaddrInet)(unsafe.Pointer(&gr.Group))
+	sa.Family = syscall.AF_INET
+	copy(sa.Addr[:], grp)
+}
+
+func (gsr *groupSourceReq) setSourceGroup(grp, src net.IP) {
+	sa := (*sockaddrInet)(unsafe.Pointer(&gsr.Group))
+	sa.Family = syscall.AF_INET
+	copy(sa.Addr[:], grp)
+	sa = (*sockaddrInet)(unsafe.Pointer(&gsr.Source))
+	sa.Family = syscall.AF_INET
+	copy(sa.Addr[:], src)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_solaris.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_solaris.go
new file mode 100644
index 000000000..832fef1e2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_solaris.go
@@ -0,0 +1,57 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import (
+	"net"
+	"syscall"
+	"unsafe"
+
+	"golang.org/x/net/internal/iana"
+	"golang.org/x/net/internal/socket"
+)
+
+var (
+	ctlOpts = [ctlMax]ctlOpt{
+		ctlTTL:        {sysIP_RECVTTL, 4, marshalTTL, parseTTL},
+		ctlPacketInfo: {sysIP_PKTINFO, sizeofInetPktinfo, marshalPacketInfo, parsePacketInfo},
+	}
+
+	sockOpts = map[int]sockOpt{
+		ssoTOS:                {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_TOS, Len: 4}},
+		ssoTTL:                {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_TTL, Len: 4}},
+		ssoMulticastTTL:       {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_TTL, Len: 1}},
+		ssoMulticastInterface: {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_IF, Len: 4}},
+		ssoMulticastLoopback:  {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_LOOP, Len: 1}},
+		ssoReceiveTTL:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVTTL, Len: 4}},
+		ssoPacketInfo:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVPKTINFO, Len: 4}},
+		ssoHeaderPrepend:      {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_HDRINCL, Len: 4}},
+		ssoJoinGroup:          {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_JOIN_GROUP, Len: sizeofGroupReq}, typ: ssoTypeGroupReq},
+		ssoLeaveGroup:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_LEAVE_GROUP, Len: sizeofGroupReq}, typ: ssoTypeGroupReq},
+		ssoJoinSourceGroup:    {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_JOIN_SOURCE_GROUP, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoLeaveSourceGroup:   {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_LEAVE_SOURCE_GROUP, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoBlockSourceGroup:   {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_BLOCK_SOURCE, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoUnblockSourceGroup: {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_UNBLOCK_SOURCE, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+	}
+)
+
+func (pi *inetPktinfo) setIfindex(i int) {
+	pi.Ifindex = uint32(i)
+}
+
+func (gr *groupReq) setGroup(grp net.IP) {
+	sa := (*sockaddrInet)(unsafe.Pointer(uintptr(unsafe.Pointer(gr)) + 4))
+	sa.Family = syscall.AF_INET
+	copy(sa.Addr[:], grp)
+}
+
+func (gsr *groupSourceReq) setSourceGroup(grp, src net.IP) {
+	sa := (*sockaddrInet)(unsafe.Pointer(uintptr(unsafe.Pointer(gsr)) + 4))
+	sa.Family = syscall.AF_INET
+	copy(sa.Addr[:], grp)
+	sa = (*sockaddrInet)(unsafe.Pointer(uintptr(unsafe.Pointer(gsr)) + 260))
+	sa.Family = syscall.AF_INET
+	copy(sa.Addr[:], src)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_ssmreq.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_ssmreq.go
new file mode 100644
index 000000000..eeced7f31
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_ssmreq.go
@@ -0,0 +1,52 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build darwin freebsd linux solaris
+
+package ipv4
+
+import (
+	"net"
+	"unsafe"
+
+	"golang.org/x/net/internal/socket"
+)
+
+func (so *sockOpt) setGroupReq(c *socket.Conn, ifi *net.Interface, grp net.IP) error {
+	var gr groupReq
+	if ifi != nil {
+		gr.Interface = uint32(ifi.Index)
+	}
+	gr.setGroup(grp)
+	var b []byte
+	if compatFreeBSD32 {
+		var d [sizeofGroupReq + 4]byte
+		s := (*[sizeofGroupReq]byte)(unsafe.Pointer(&gr))
+		copy(d[:4], s[:4])
+		copy(d[8:], s[4:])
+		b = d[:]
+	} else {
+		b = (*[sizeofGroupReq]byte)(unsafe.Pointer(&gr))[:sizeofGroupReq]
+	}
+	return so.Set(c, b)
+}
+
+func (so *sockOpt) setGroupSourceReq(c *socket.Conn, ifi *net.Interface, grp, src net.IP) error {
+	var gsr groupSourceReq
+	if ifi != nil {
+		gsr.Interface = uint32(ifi.Index)
+	}
+	gsr.setSourceGroup(grp, src)
+	var b []byte
+	if compatFreeBSD32 {
+		var d [sizeofGroupSourceReq + 4]byte
+		s := (*[sizeofGroupSourceReq]byte)(unsafe.Pointer(&gsr))
+		copy(d[:4], s[:4])
+		copy(d[8:], s[4:])
+		b = d[:]
+	} else {
+		b = (*[sizeofGroupSourceReq]byte)(unsafe.Pointer(&gsr))[:sizeofGroupSourceReq]
+	}
+	return so.Set(c, b)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_ssmreq_stub.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_ssmreq_stub.go
new file mode 100644
index 000000000..c0921674b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_ssmreq_stub.go
@@ -0,0 +1,21 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !darwin,!freebsd,!linux,!solaris
+
+package ipv4
+
+import (
+	"net"
+
+	"golang.org/x/net/internal/socket"
+)
+
+func (so *sockOpt) setGroupReq(c *socket.Conn, ifi *net.Interface, grp net.IP) error {
+	return errNotImplemented
+}
+
+func (so *sockOpt) setGroupSourceReq(c *socket.Conn, ifi *net.Interface, grp, src net.IP) error {
+	return errNotImplemented
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_stub.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_stub.go
new file mode 100644
index 000000000..555585188
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_stub.go
@@ -0,0 +1,13 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !aix,!darwin,!dragonfly,!freebsd,!linux,!netbsd,!openbsd,!solaris,!windows,!zos
+
+package ipv4
+
+var (
+	ctlOpts = [ctlMax]ctlOpt{}
+
+	sockOpts = map[int]*sockOpt{}
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_windows.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_windows.go
new file mode 100644
index 000000000..b0913d539
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_windows.go
@@ -0,0 +1,67 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import (
+	"golang.org/x/net/internal/iana"
+	"golang.org/x/net/internal/socket"
+)
+
+const (
+	// See ws2tcpip.h.
+	sysIP_OPTIONS                = 0x1
+	sysIP_HDRINCL                = 0x2
+	sysIP_TOS                    = 0x3
+	sysIP_TTL                    = 0x4
+	sysIP_MULTICAST_IF           = 0x9
+	sysIP_MULTICAST_TTL          = 0xa
+	sysIP_MULTICAST_LOOP         = 0xb
+	sysIP_ADD_MEMBERSHIP         = 0xc
+	sysIP_DROP_MEMBERSHIP        = 0xd
+	sysIP_DONTFRAGMENT           = 0xe
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0xf
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x10
+	sysIP_PKTINFO                = 0x13
+
+	sizeofInetPktinfo  = 0x8
+	sizeofIPMreq       = 0x8
+	sizeofIPMreqSource = 0xc
+)
+
+type inetPktinfo struct {
+	Addr    [4]byte
+	Ifindex int32
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte
+	Interface [4]byte
+}
+
+type ipMreqSource struct {
+	Multiaddr  [4]byte
+	Sourceaddr [4]byte
+	Interface  [4]byte
+}
+
+// See http://msdn.microsoft.com/en-us/library/windows/desktop/ms738586(v=vs.85).aspx
+var (
+	ctlOpts = [ctlMax]ctlOpt{}
+
+	sockOpts = map[int]*sockOpt{
+		ssoTOS:                {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_TOS, Len: 4}},
+		ssoTTL:                {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_TTL, Len: 4}},
+		ssoMulticastTTL:       {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_TTL, Len: 4}},
+		ssoMulticastInterface: {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_IF, Len: 4}},
+		ssoMulticastLoopback:  {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_LOOP, Len: 4}},
+		ssoHeaderPrepend:      {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_HDRINCL, Len: 4}},
+		ssoJoinGroup:          {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_ADD_MEMBERSHIP, Len: sizeofIPMreq}, typ: ssoTypeIPMreq},
+		ssoLeaveGroup:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_DROP_MEMBERSHIP, Len: sizeofIPMreq}, typ: ssoTypeIPMreq},
+	}
+)
+
+func (pi *inetPktinfo) setIfindex(i int) {
+	pi.Ifindex = int32(i)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_zos.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_zos.go
new file mode 100644
index 000000000..7426606cf
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/sys_zos.go
@@ -0,0 +1,55 @@
+// Copyright 2020 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package ipv4
+
+import (
+	"net"
+	"syscall"
+	"unsafe"
+
+	"golang.org/x/net/internal/iana"
+	"golang.org/x/net/internal/socket"
+)
+
+var (
+	ctlOpts = [ctlMax]ctlOpt{
+		ctlPacketInfo: {sysIP_PKTINFO, sizeofInetPktinfo, marshalPacketInfo, parsePacketInfo},
+	}
+
+	sockOpts = map[int]*sockOpt{
+		ssoMulticastTTL:       {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_TTL, Len: 1}},
+		ssoMulticastInterface: {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_IF, Len: 4}},
+		ssoMulticastLoopback:  {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_MULTICAST_LOOP, Len: 1}},
+		ssoPacketInfo:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysIP_RECVPKTINFO, Len: 4}},
+		ssoJoinGroup:          {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_JOIN_GROUP, Len: sizeofGroupReq}, typ: ssoTypeGroupReq},
+		ssoLeaveGroup:         {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_LEAVE_GROUP, Len: sizeofGroupReq}, typ: ssoTypeGroupReq},
+		ssoJoinSourceGroup:    {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_JOIN_SOURCE_GROUP, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoLeaveSourceGroup:   {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_LEAVE_SOURCE_GROUP, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoBlockSourceGroup:   {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_BLOCK_SOURCE, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+		ssoUnblockSourceGroup: {Option: socket.Option{Level: iana.ProtocolIP, Name: sysMCAST_UNBLOCK_SOURCE, Len: sizeofGroupSourceReq}, typ: ssoTypeGroupSourceReq},
+	}
+)
+
+func (pi *inetPktinfo) setIfindex(i int) {
+	pi.Ifindex = uint32(i)
+}
+
+func (gr *groupReq) setGroup(grp net.IP) {
+	sa := (*sockaddrInet4)(unsafe.Pointer(&gr.Group))
+	sa.Family = syscall.AF_INET
+	sa.Len = sizeofSockaddrInet4
+	copy(sa.Addr[:], grp)
+}
+
+func (gsr *groupSourceReq) setSourceGroup(grp, src net.IP) {
+	sa := (*sockaddrInet4)(unsafe.Pointer(&gsr.Group))
+	sa.Family = syscall.AF_INET
+	sa.Len = sizeofSockaddrInet4
+	copy(sa.Addr[:], grp)
+	sa = (*sockaddrInet4)(unsafe.Pointer(&gsr.Source))
+	sa.Family = syscall.AF_INET
+	sa.Len = sizeofSockaddrInet4
+	copy(sa.Addr[:], src)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_aix_ppc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_aix_ppc64.go
new file mode 100644
index 000000000..c741d5c8e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_aix_ppc64.go
@@ -0,0 +1,33 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_aix.go
+
+// Added for go1.11 compatibility
+// +build aix
+
+package ipv4
+
+const (
+	sysIP_OPTIONS     = 0x1
+	sysIP_HDRINCL     = 0x2
+	sysIP_TOS         = 0x3
+	sysIP_TTL         = 0x4
+	sysIP_RECVOPTS    = 0x5
+	sysIP_RECVRETOPTS = 0x6
+	sysIP_RECVDSTADDR = 0x7
+	sysIP_RETOPTS     = 0x8
+	sysIP_RECVIF      = 0x20
+	sysIP_RECVTTL     = 0x22
+
+	sysIP_MULTICAST_IF    = 0x9
+	sysIP_MULTICAST_TTL   = 0xa
+	sysIP_MULTICAST_LOOP  = 0xb
+	sysIP_ADD_MEMBERSHIP  = 0xc
+	sysIP_DROP_MEMBERSHIP = 0xd
+
+	sizeofIPMreq = 0x8
+)
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_darwin.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_darwin.go
new file mode 100644
index 000000000..e05a251ba
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_darwin.go
@@ -0,0 +1,99 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_darwin.go
+
+package ipv4
+
+const (
+	sysIP_OPTIONS     = 0x1
+	sysIP_HDRINCL     = 0x2
+	sysIP_TOS         = 0x3
+	sysIP_TTL         = 0x4
+	sysIP_RECVOPTS    = 0x5
+	sysIP_RECVRETOPTS = 0x6
+	sysIP_RECVDSTADDR = 0x7
+	sysIP_RETOPTS     = 0x8
+	sysIP_RECVIF      = 0x14
+	sysIP_STRIPHDR    = 0x17
+	sysIP_RECVTTL     = 0x18
+	sysIP_BOUND_IF    = 0x19
+	sysIP_PKTINFO     = 0x1a
+	sysIP_RECVPKTINFO = 0x1a
+
+	sysIP_MULTICAST_IF           = 0x9
+	sysIP_MULTICAST_TTL          = 0xa
+	sysIP_MULTICAST_LOOP         = 0xb
+	sysIP_ADD_MEMBERSHIP         = 0xc
+	sysIP_DROP_MEMBERSHIP        = 0xd
+	sysIP_MULTICAST_VIF          = 0xe
+	sysIP_MULTICAST_IFINDEX      = 0x42
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x46
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x47
+	sysIP_BLOCK_SOURCE           = 0x48
+	sysIP_UNBLOCK_SOURCE         = 0x49
+	sysMCAST_JOIN_GROUP          = 0x50
+	sysMCAST_LEAVE_GROUP         = 0x51
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x52
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x53
+	sysMCAST_BLOCK_SOURCE        = 0x54
+	sysMCAST_UNBLOCK_SOURCE      = 0x55
+
+	sizeofSockaddrStorage = 0x80
+	sizeofSockaddrInet    = 0x10
+	sizeofInetPktinfo     = 0xc
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x84
+	sizeofGroupSourceReq = 0x104
+)
+
+type sockaddrStorage struct {
+	Len         uint8
+	Family      uint8
+	X__ss_pad1  [6]int8
+	X__ss_align int64
+	X__ss_pad2  [112]int8
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type inetPktinfo struct {
+	Ifindex  uint32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  [4]byte /* in_addr */
+	Sourceaddr [4]byte /* in_addr */
+	Interface  [4]byte /* in_addr */
+}
+
+type groupReq struct {
+	Interface uint32
+	Pad_cgo_0 [128]byte
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Pad_cgo_0 [128]byte
+	Pad_cgo_1 [128]byte
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_dragonfly.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_dragonfly.go
new file mode 100644
index 000000000..6d65e9fcb
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_dragonfly.go
@@ -0,0 +1,31 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_dragonfly.go
+
+package ipv4
+
+const (
+	sysIP_OPTIONS     = 0x1
+	sysIP_HDRINCL     = 0x2
+	sysIP_TOS         = 0x3
+	sysIP_TTL         = 0x4
+	sysIP_RECVOPTS    = 0x5
+	sysIP_RECVRETOPTS = 0x6
+	sysIP_RECVDSTADDR = 0x7
+	sysIP_RETOPTS     = 0x8
+	sysIP_RECVIF      = 0x14
+	sysIP_RECVTTL     = 0x41
+
+	sysIP_MULTICAST_IF    = 0x9
+	sysIP_MULTICAST_TTL   = 0xa
+	sysIP_MULTICAST_LOOP  = 0xb
+	sysIP_MULTICAST_VIF   = 0xe
+	sysIP_ADD_MEMBERSHIP  = 0xc
+	sysIP_DROP_MEMBERSHIP = 0xd
+
+	sizeofIPMreq = 0x8
+)
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_freebsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_freebsd_386.go
new file mode 100644
index 000000000..136e2b8f1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_freebsd_386.go
@@ -0,0 +1,93 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_freebsd.go
+
+package ipv4
+
+const (
+	sysIP_OPTIONS     = 0x1
+	sysIP_HDRINCL     = 0x2
+	sysIP_TOS         = 0x3
+	sysIP_TTL         = 0x4
+	sysIP_RECVOPTS    = 0x5
+	sysIP_RECVRETOPTS = 0x6
+	sysIP_RECVDSTADDR = 0x7
+	sysIP_SENDSRCADDR = 0x7
+	sysIP_RETOPTS     = 0x8
+	sysIP_RECVIF      = 0x14
+	sysIP_ONESBCAST   = 0x17
+	sysIP_BINDANY     = 0x18
+	sysIP_RECVTTL     = 0x41
+	sysIP_MINTTL      = 0x42
+	sysIP_DONTFRAG    = 0x43
+	sysIP_RECVTOS     = 0x44
+
+	sysIP_MULTICAST_IF           = 0x9
+	sysIP_MULTICAST_TTL          = 0xa
+	sysIP_MULTICAST_LOOP         = 0xb
+	sysIP_ADD_MEMBERSHIP         = 0xc
+	sysIP_DROP_MEMBERSHIP        = 0xd
+	sysIP_MULTICAST_VIF          = 0xe
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x46
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x47
+	sysIP_BLOCK_SOURCE           = 0x48
+	sysIP_UNBLOCK_SOURCE         = 0x49
+	sysMCAST_JOIN_GROUP          = 0x50
+	sysMCAST_LEAVE_GROUP         = 0x51
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x52
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x53
+	sysMCAST_BLOCK_SOURCE        = 0x54
+	sysMCAST_UNBLOCK_SOURCE      = 0x55
+
+	sizeofSockaddrStorage = 0x80
+	sizeofSockaddrInet    = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x84
+	sizeofGroupSourceReq = 0x104
+)
+
+type sockaddrStorage struct {
+	Len         uint8
+	Family      uint8
+	X__ss_pad1  [6]int8
+	X__ss_align int64
+	X__ss_pad2  [112]int8
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  [4]byte /* in_addr */
+	Sourceaddr [4]byte /* in_addr */
+	Interface  [4]byte /* in_addr */
+}
+
+type groupReq struct {
+	Interface uint32
+	Group     sockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Group     sockaddrStorage
+	Source    sockaddrStorage
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_freebsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_freebsd_amd64.go
new file mode 100644
index 000000000..4f730f19e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_freebsd_amd64.go
@@ -0,0 +1,95 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_freebsd.go
+
+package ipv4
+
+const (
+	sysIP_OPTIONS     = 0x1
+	sysIP_HDRINCL     = 0x2
+	sysIP_TOS         = 0x3
+	sysIP_TTL         = 0x4
+	sysIP_RECVOPTS    = 0x5
+	sysIP_RECVRETOPTS = 0x6
+	sysIP_RECVDSTADDR = 0x7
+	sysIP_SENDSRCADDR = 0x7
+	sysIP_RETOPTS     = 0x8
+	sysIP_RECVIF      = 0x14
+	sysIP_ONESBCAST   = 0x17
+	sysIP_BINDANY     = 0x18
+	sysIP_RECVTTL     = 0x41
+	sysIP_MINTTL      = 0x42
+	sysIP_DONTFRAG    = 0x43
+	sysIP_RECVTOS     = 0x44
+
+	sysIP_MULTICAST_IF           = 0x9
+	sysIP_MULTICAST_TTL          = 0xa
+	sysIP_MULTICAST_LOOP         = 0xb
+	sysIP_ADD_MEMBERSHIP         = 0xc
+	sysIP_DROP_MEMBERSHIP        = 0xd
+	sysIP_MULTICAST_VIF          = 0xe
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x46
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x47
+	sysIP_BLOCK_SOURCE           = 0x48
+	sysIP_UNBLOCK_SOURCE         = 0x49
+	sysMCAST_JOIN_GROUP          = 0x50
+	sysMCAST_LEAVE_GROUP         = 0x51
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x52
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x53
+	sysMCAST_BLOCK_SOURCE        = 0x54
+	sysMCAST_UNBLOCK_SOURCE      = 0x55
+
+	sizeofSockaddrStorage = 0x80
+	sizeofSockaddrInet    = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x88
+	sizeofGroupSourceReq = 0x108
+)
+
+type sockaddrStorage struct {
+	Len         uint8
+	Family      uint8
+	X__ss_pad1  [6]int8
+	X__ss_align int64
+	X__ss_pad2  [112]int8
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  [4]byte /* in_addr */
+	Sourceaddr [4]byte /* in_addr */
+	Interface  [4]byte /* in_addr */
+}
+
+type groupReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     sockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     sockaddrStorage
+	Source    sockaddrStorage
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_freebsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_freebsd_arm.go
new file mode 100644
index 000000000..4f730f19e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_freebsd_arm.go
@@ -0,0 +1,95 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_freebsd.go
+
+package ipv4
+
+const (
+	sysIP_OPTIONS     = 0x1
+	sysIP_HDRINCL     = 0x2
+	sysIP_TOS         = 0x3
+	sysIP_TTL         = 0x4
+	sysIP_RECVOPTS    = 0x5
+	sysIP_RECVRETOPTS = 0x6
+	sysIP_RECVDSTADDR = 0x7
+	sysIP_SENDSRCADDR = 0x7
+	sysIP_RETOPTS     = 0x8
+	sysIP_RECVIF      = 0x14
+	sysIP_ONESBCAST   = 0x17
+	sysIP_BINDANY     = 0x18
+	sysIP_RECVTTL     = 0x41
+	sysIP_MINTTL      = 0x42
+	sysIP_DONTFRAG    = 0x43
+	sysIP_RECVTOS     = 0x44
+
+	sysIP_MULTICAST_IF           = 0x9
+	sysIP_MULTICAST_TTL          = 0xa
+	sysIP_MULTICAST_LOOP         = 0xb
+	sysIP_ADD_MEMBERSHIP         = 0xc
+	sysIP_DROP_MEMBERSHIP        = 0xd
+	sysIP_MULTICAST_VIF          = 0xe
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x46
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x47
+	sysIP_BLOCK_SOURCE           = 0x48
+	sysIP_UNBLOCK_SOURCE         = 0x49
+	sysMCAST_JOIN_GROUP          = 0x50
+	sysMCAST_LEAVE_GROUP         = 0x51
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x52
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x53
+	sysMCAST_BLOCK_SOURCE        = 0x54
+	sysMCAST_UNBLOCK_SOURCE      = 0x55
+
+	sizeofSockaddrStorage = 0x80
+	sizeofSockaddrInet    = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x88
+	sizeofGroupSourceReq = 0x108
+)
+
+type sockaddrStorage struct {
+	Len         uint8
+	Family      uint8
+	X__ss_pad1  [6]int8
+	X__ss_align int64
+	X__ss_pad2  [112]int8
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  [4]byte /* in_addr */
+	Sourceaddr [4]byte /* in_addr */
+	Interface  [4]byte /* in_addr */
+}
+
+type groupReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     sockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     sockaddrStorage
+	Source    sockaddrStorage
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_freebsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_freebsd_arm64.go
new file mode 100644
index 000000000..ecebf3272
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_freebsd_arm64.go
@@ -0,0 +1,93 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_freebsd.go
+
+package ipv4
+
+const (
+	sysIP_OPTIONS     = 0x1
+	sysIP_HDRINCL     = 0x2
+	sysIP_TOS         = 0x3
+	sysIP_TTL         = 0x4
+	sysIP_RECVOPTS    = 0x5
+	sysIP_RECVRETOPTS = 0x6
+	sysIP_RECVDSTADDR = 0x7
+	sysIP_SENDSRCADDR = 0x7
+	sysIP_RETOPTS     = 0x8
+	sysIP_RECVIF      = 0x14
+	sysIP_ONESBCAST   = 0x17
+	sysIP_BINDANY     = 0x18
+	sysIP_RECVTTL     = 0x41
+	sysIP_MINTTL      = 0x42
+	sysIP_DONTFRAG    = 0x43
+	sysIP_RECVTOS     = 0x44
+
+	sysIP_MULTICAST_IF           = 0x9
+	sysIP_MULTICAST_TTL          = 0xa
+	sysIP_MULTICAST_LOOP         = 0xb
+	sysIP_ADD_MEMBERSHIP         = 0xc
+	sysIP_DROP_MEMBERSHIP        = 0xd
+	sysIP_MULTICAST_VIF          = 0xe
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x46
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x47
+	sysIP_BLOCK_SOURCE           = 0x48
+	sysIP_UNBLOCK_SOURCE         = 0x49
+	sysMCAST_JOIN_GROUP          = 0x50
+	sysMCAST_LEAVE_GROUP         = 0x51
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x52
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x53
+	sysMCAST_BLOCK_SOURCE        = 0x54
+	sysMCAST_UNBLOCK_SOURCE      = 0x55
+
+	sizeofSockaddrStorage = 0x80
+	sizeofSockaddrInet    = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x88
+	sizeofGroupSourceReq = 0x108
+)
+
+type sockaddrStorage struct {
+	Len         uint8
+	Family      uint8
+	X__ss_pad1  [6]uint8
+	X__ss_align int64
+	X__ss_pad2  [112]uint8
+}
+
+type sockaddrInet struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]uint8
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  [4]byte /* in_addr */
+	Sourceaddr [4]byte /* in_addr */
+	Interface  [4]byte /* in_addr */
+}
+
+type groupReq struct {
+	Interface uint32
+	Group     sockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Group     sockaddrStorage
+	Source    sockaddrStorage
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_386.go
new file mode 100644
index 000000000..1c7fdfa13
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_386.go
@@ -0,0 +1,130 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package ipv4
+
+const (
+	sysIP_TOS             = 0x1
+	sysIP_TTL             = 0x2
+	sysIP_HDRINCL         = 0x3
+	sysIP_OPTIONS         = 0x4
+	sysIP_ROUTER_ALERT    = 0x5
+	sysIP_RECVOPTS        = 0x6
+	sysIP_RETOPTS         = 0x7
+	sysIP_PKTINFO         = 0x8
+	sysIP_PKTOPTIONS      = 0x9
+	sysIP_MTU_DISCOVER    = 0xa
+	sysIP_RECVERR         = 0xb
+	sysIP_RECVTTL         = 0xc
+	sysIP_RECVTOS         = 0xd
+	sysIP_MTU             = 0xe
+	sysIP_FREEBIND        = 0xf
+	sysIP_TRANSPARENT     = 0x13
+	sysIP_RECVRETOPTS     = 0x7
+	sysIP_ORIGDSTADDR     = 0x14
+	sysIP_RECVORIGDSTADDR = 0x14
+	sysIP_MINTTL          = 0x15
+	sysIP_NODEFRAG        = 0x16
+	sysIP_UNICAST_IF      = 0x32
+
+	sysIP_MULTICAST_IF           = 0x20
+	sysIP_MULTICAST_TTL          = 0x21
+	sysIP_MULTICAST_LOOP         = 0x22
+	sysIP_ADD_MEMBERSHIP         = 0x23
+	sysIP_DROP_MEMBERSHIP        = 0x24
+	sysIP_UNBLOCK_SOURCE         = 0x25
+	sysIP_BLOCK_SOURCE           = 0x26
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x27
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x28
+	sysIP_MSFILTER               = 0x29
+	sysMCAST_JOIN_GROUP          = 0x2a
+	sysMCAST_LEAVE_GROUP         = 0x2d
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x2e
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x2f
+	sysMCAST_BLOCK_SOURCE        = 0x2b
+	sysMCAST_UNBLOCK_SOURCE      = 0x2c
+	sysMCAST_MSFILTER            = 0x30
+	sysIP_MULTICAST_ALL          = 0x31
+
+	sysICMP_FILTER = 0x1
+
+	sysSO_EE_ORIGIN_NONE         = 0x0
+	sysSO_EE_ORIGIN_LOCAL        = 0x1
+	sysSO_EE_ORIGIN_ICMP         = 0x2
+	sysSO_EE_ORIGIN_ICMP6        = 0x3
+	sysSO_EE_ORIGIN_TXSTATUS     = 0x4
+	sysSO_EE_ORIGIN_TIMESTAMPING = 0x4
+
+	sizeofKernelSockaddrStorage = 0x80
+	sizeofSockaddrInet          = 0x10
+	sizeofInetPktinfo           = 0xc
+	sizeofSockExtendedErr       = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x84
+	sizeofGroupSourceReq = 0x104
+
+	sizeofICMPFilter = 0x4
+)
+
+type kernelSockaddrStorage struct {
+	Family  uint16
+	X__data [126]int8
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type inetPktinfo struct {
+	Ifindex  int32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type sockExtendedErr struct {
+	Errno  uint32
+	Origin uint8
+	Type   uint8
+	Code   uint8
+	Pad    uint8
+	Info   uint32
+	Data   uint32
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  uint32
+	Interface  uint32
+	Sourceaddr uint32
+}
+
+type groupReq struct {
+	Interface uint32
+	Group     kernelSockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Group     kernelSockaddrStorage
+	Source    kernelSockaddrStorage
+}
+
+type icmpFilter struct {
+	Data uint32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_amd64.go
new file mode 100644
index 000000000..a04e78518
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_amd64.go
@@ -0,0 +1,132 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package ipv4
+
+const (
+	sysIP_TOS             = 0x1
+	sysIP_TTL             = 0x2
+	sysIP_HDRINCL         = 0x3
+	sysIP_OPTIONS         = 0x4
+	sysIP_ROUTER_ALERT    = 0x5
+	sysIP_RECVOPTS        = 0x6
+	sysIP_RETOPTS         = 0x7
+	sysIP_PKTINFO         = 0x8
+	sysIP_PKTOPTIONS      = 0x9
+	sysIP_MTU_DISCOVER    = 0xa
+	sysIP_RECVERR         = 0xb
+	sysIP_RECVTTL         = 0xc
+	sysIP_RECVTOS         = 0xd
+	sysIP_MTU             = 0xe
+	sysIP_FREEBIND        = 0xf
+	sysIP_TRANSPARENT     = 0x13
+	sysIP_RECVRETOPTS     = 0x7
+	sysIP_ORIGDSTADDR     = 0x14
+	sysIP_RECVORIGDSTADDR = 0x14
+	sysIP_MINTTL          = 0x15
+	sysIP_NODEFRAG        = 0x16
+	sysIP_UNICAST_IF      = 0x32
+
+	sysIP_MULTICAST_IF           = 0x20
+	sysIP_MULTICAST_TTL          = 0x21
+	sysIP_MULTICAST_LOOP         = 0x22
+	sysIP_ADD_MEMBERSHIP         = 0x23
+	sysIP_DROP_MEMBERSHIP        = 0x24
+	sysIP_UNBLOCK_SOURCE         = 0x25
+	sysIP_BLOCK_SOURCE           = 0x26
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x27
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x28
+	sysIP_MSFILTER               = 0x29
+	sysMCAST_JOIN_GROUP          = 0x2a
+	sysMCAST_LEAVE_GROUP         = 0x2d
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x2e
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x2f
+	sysMCAST_BLOCK_SOURCE        = 0x2b
+	sysMCAST_UNBLOCK_SOURCE      = 0x2c
+	sysMCAST_MSFILTER            = 0x30
+	sysIP_MULTICAST_ALL          = 0x31
+
+	sysICMP_FILTER = 0x1
+
+	sysSO_EE_ORIGIN_NONE         = 0x0
+	sysSO_EE_ORIGIN_LOCAL        = 0x1
+	sysSO_EE_ORIGIN_ICMP         = 0x2
+	sysSO_EE_ORIGIN_ICMP6        = 0x3
+	sysSO_EE_ORIGIN_TXSTATUS     = 0x4
+	sysSO_EE_ORIGIN_TIMESTAMPING = 0x4
+
+	sizeofKernelSockaddrStorage = 0x80
+	sizeofSockaddrInet          = 0x10
+	sizeofInetPktinfo           = 0xc
+	sizeofSockExtendedErr       = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x88
+	sizeofGroupSourceReq = 0x108
+
+	sizeofICMPFilter = 0x4
+)
+
+type kernelSockaddrStorage struct {
+	Family  uint16
+	X__data [126]int8
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type inetPktinfo struct {
+	Ifindex  int32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type sockExtendedErr struct {
+	Errno  uint32
+	Origin uint8
+	Type   uint8
+	Code   uint8
+	Pad    uint8
+	Info   uint32
+	Data   uint32
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  uint32
+	Interface  uint32
+	Sourceaddr uint32
+}
+
+type groupReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     kernelSockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     kernelSockaddrStorage
+	Source    kernelSockaddrStorage
+}
+
+type icmpFilter struct {
+	Data uint32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_arm.go
new file mode 100644
index 000000000..1c7fdfa13
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_arm.go
@@ -0,0 +1,130 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package ipv4
+
+const (
+	sysIP_TOS             = 0x1
+	sysIP_TTL             = 0x2
+	sysIP_HDRINCL         = 0x3
+	sysIP_OPTIONS         = 0x4
+	sysIP_ROUTER_ALERT    = 0x5
+	sysIP_RECVOPTS        = 0x6
+	sysIP_RETOPTS         = 0x7
+	sysIP_PKTINFO         = 0x8
+	sysIP_PKTOPTIONS      = 0x9
+	sysIP_MTU_DISCOVER    = 0xa
+	sysIP_RECVERR         = 0xb
+	sysIP_RECVTTL         = 0xc
+	sysIP_RECVTOS         = 0xd
+	sysIP_MTU             = 0xe
+	sysIP_FREEBIND        = 0xf
+	sysIP_TRANSPARENT     = 0x13
+	sysIP_RECVRETOPTS     = 0x7
+	sysIP_ORIGDSTADDR     = 0x14
+	sysIP_RECVORIGDSTADDR = 0x14
+	sysIP_MINTTL          = 0x15
+	sysIP_NODEFRAG        = 0x16
+	sysIP_UNICAST_IF      = 0x32
+
+	sysIP_MULTICAST_IF           = 0x20
+	sysIP_MULTICAST_TTL          = 0x21
+	sysIP_MULTICAST_LOOP         = 0x22
+	sysIP_ADD_MEMBERSHIP         = 0x23
+	sysIP_DROP_MEMBERSHIP        = 0x24
+	sysIP_UNBLOCK_SOURCE         = 0x25
+	sysIP_BLOCK_SOURCE           = 0x26
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x27
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x28
+	sysIP_MSFILTER               = 0x29
+	sysMCAST_JOIN_GROUP          = 0x2a
+	sysMCAST_LEAVE_GROUP         = 0x2d
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x2e
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x2f
+	sysMCAST_BLOCK_SOURCE        = 0x2b
+	sysMCAST_UNBLOCK_SOURCE      = 0x2c
+	sysMCAST_MSFILTER            = 0x30
+	sysIP_MULTICAST_ALL          = 0x31
+
+	sysICMP_FILTER = 0x1
+
+	sysSO_EE_ORIGIN_NONE         = 0x0
+	sysSO_EE_ORIGIN_LOCAL        = 0x1
+	sysSO_EE_ORIGIN_ICMP         = 0x2
+	sysSO_EE_ORIGIN_ICMP6        = 0x3
+	sysSO_EE_ORIGIN_TXSTATUS     = 0x4
+	sysSO_EE_ORIGIN_TIMESTAMPING = 0x4
+
+	sizeofKernelSockaddrStorage = 0x80
+	sizeofSockaddrInet          = 0x10
+	sizeofInetPktinfo           = 0xc
+	sizeofSockExtendedErr       = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x84
+	sizeofGroupSourceReq = 0x104
+
+	sizeofICMPFilter = 0x4
+)
+
+type kernelSockaddrStorage struct {
+	Family  uint16
+	X__data [126]int8
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type inetPktinfo struct {
+	Ifindex  int32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type sockExtendedErr struct {
+	Errno  uint32
+	Origin uint8
+	Type   uint8
+	Code   uint8
+	Pad    uint8
+	Info   uint32
+	Data   uint32
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  uint32
+	Interface  uint32
+	Sourceaddr uint32
+}
+
+type groupReq struct {
+	Interface uint32
+	Group     kernelSockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Group     kernelSockaddrStorage
+	Source    kernelSockaddrStorage
+}
+
+type icmpFilter struct {
+	Data uint32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_arm64.go
new file mode 100644
index 000000000..a04e78518
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_arm64.go
@@ -0,0 +1,132 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package ipv4
+
+const (
+	sysIP_TOS             = 0x1
+	sysIP_TTL             = 0x2
+	sysIP_HDRINCL         = 0x3
+	sysIP_OPTIONS         = 0x4
+	sysIP_ROUTER_ALERT    = 0x5
+	sysIP_RECVOPTS        = 0x6
+	sysIP_RETOPTS         = 0x7
+	sysIP_PKTINFO         = 0x8
+	sysIP_PKTOPTIONS      = 0x9
+	sysIP_MTU_DISCOVER    = 0xa
+	sysIP_RECVERR         = 0xb
+	sysIP_RECVTTL         = 0xc
+	sysIP_RECVTOS         = 0xd
+	sysIP_MTU             = 0xe
+	sysIP_FREEBIND        = 0xf
+	sysIP_TRANSPARENT     = 0x13
+	sysIP_RECVRETOPTS     = 0x7
+	sysIP_ORIGDSTADDR     = 0x14
+	sysIP_RECVORIGDSTADDR = 0x14
+	sysIP_MINTTL          = 0x15
+	sysIP_NODEFRAG        = 0x16
+	sysIP_UNICAST_IF      = 0x32
+
+	sysIP_MULTICAST_IF           = 0x20
+	sysIP_MULTICAST_TTL          = 0x21
+	sysIP_MULTICAST_LOOP         = 0x22
+	sysIP_ADD_MEMBERSHIP         = 0x23
+	sysIP_DROP_MEMBERSHIP        = 0x24
+	sysIP_UNBLOCK_SOURCE         = 0x25
+	sysIP_BLOCK_SOURCE           = 0x26
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x27
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x28
+	sysIP_MSFILTER               = 0x29
+	sysMCAST_JOIN_GROUP          = 0x2a
+	sysMCAST_LEAVE_GROUP         = 0x2d
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x2e
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x2f
+	sysMCAST_BLOCK_SOURCE        = 0x2b
+	sysMCAST_UNBLOCK_SOURCE      = 0x2c
+	sysMCAST_MSFILTER            = 0x30
+	sysIP_MULTICAST_ALL          = 0x31
+
+	sysICMP_FILTER = 0x1
+
+	sysSO_EE_ORIGIN_NONE         = 0x0
+	sysSO_EE_ORIGIN_LOCAL        = 0x1
+	sysSO_EE_ORIGIN_ICMP         = 0x2
+	sysSO_EE_ORIGIN_ICMP6        = 0x3
+	sysSO_EE_ORIGIN_TXSTATUS     = 0x4
+	sysSO_EE_ORIGIN_TIMESTAMPING = 0x4
+
+	sizeofKernelSockaddrStorage = 0x80
+	sizeofSockaddrInet          = 0x10
+	sizeofInetPktinfo           = 0xc
+	sizeofSockExtendedErr       = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x88
+	sizeofGroupSourceReq = 0x108
+
+	sizeofICMPFilter = 0x4
+)
+
+type kernelSockaddrStorage struct {
+	Family  uint16
+	X__data [126]int8
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type inetPktinfo struct {
+	Ifindex  int32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type sockExtendedErr struct {
+	Errno  uint32
+	Origin uint8
+	Type   uint8
+	Code   uint8
+	Pad    uint8
+	Info   uint32
+	Data   uint32
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  uint32
+	Interface  uint32
+	Sourceaddr uint32
+}
+
+type groupReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     kernelSockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     kernelSockaddrStorage
+	Source    kernelSockaddrStorage
+}
+
+type icmpFilter struct {
+	Data uint32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_mips.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_mips.go
new file mode 100644
index 000000000..1c7fdfa13
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_mips.go
@@ -0,0 +1,130 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package ipv4
+
+const (
+	sysIP_TOS             = 0x1
+	sysIP_TTL             = 0x2
+	sysIP_HDRINCL         = 0x3
+	sysIP_OPTIONS         = 0x4
+	sysIP_ROUTER_ALERT    = 0x5
+	sysIP_RECVOPTS        = 0x6
+	sysIP_RETOPTS         = 0x7
+	sysIP_PKTINFO         = 0x8
+	sysIP_PKTOPTIONS      = 0x9
+	sysIP_MTU_DISCOVER    = 0xa
+	sysIP_RECVERR         = 0xb
+	sysIP_RECVTTL         = 0xc
+	sysIP_RECVTOS         = 0xd
+	sysIP_MTU             = 0xe
+	sysIP_FREEBIND        = 0xf
+	sysIP_TRANSPARENT     = 0x13
+	sysIP_RECVRETOPTS     = 0x7
+	sysIP_ORIGDSTADDR     = 0x14
+	sysIP_RECVORIGDSTADDR = 0x14
+	sysIP_MINTTL          = 0x15
+	sysIP_NODEFRAG        = 0x16
+	sysIP_UNICAST_IF      = 0x32
+
+	sysIP_MULTICAST_IF           = 0x20
+	sysIP_MULTICAST_TTL          = 0x21
+	sysIP_MULTICAST_LOOP         = 0x22
+	sysIP_ADD_MEMBERSHIP         = 0x23
+	sysIP_DROP_MEMBERSHIP        = 0x24
+	sysIP_UNBLOCK_SOURCE         = 0x25
+	sysIP_BLOCK_SOURCE           = 0x26
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x27
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x28
+	sysIP_MSFILTER               = 0x29
+	sysMCAST_JOIN_GROUP          = 0x2a
+	sysMCAST_LEAVE_GROUP         = 0x2d
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x2e
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x2f
+	sysMCAST_BLOCK_SOURCE        = 0x2b
+	sysMCAST_UNBLOCK_SOURCE      = 0x2c
+	sysMCAST_MSFILTER            = 0x30
+	sysIP_MULTICAST_ALL          = 0x31
+
+	sysICMP_FILTER = 0x1
+
+	sysSO_EE_ORIGIN_NONE         = 0x0
+	sysSO_EE_ORIGIN_LOCAL        = 0x1
+	sysSO_EE_ORIGIN_ICMP         = 0x2
+	sysSO_EE_ORIGIN_ICMP6        = 0x3
+	sysSO_EE_ORIGIN_TXSTATUS     = 0x4
+	sysSO_EE_ORIGIN_TIMESTAMPING = 0x4
+
+	sizeofKernelSockaddrStorage = 0x80
+	sizeofSockaddrInet          = 0x10
+	sizeofInetPktinfo           = 0xc
+	sizeofSockExtendedErr       = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x84
+	sizeofGroupSourceReq = 0x104
+
+	sizeofICMPFilter = 0x4
+)
+
+type kernelSockaddrStorage struct {
+	Family  uint16
+	X__data [126]int8
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type inetPktinfo struct {
+	Ifindex  int32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type sockExtendedErr struct {
+	Errno  uint32
+	Origin uint8
+	Type   uint8
+	Code   uint8
+	Pad    uint8
+	Info   uint32
+	Data   uint32
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  uint32
+	Interface  uint32
+	Sourceaddr uint32
+}
+
+type groupReq struct {
+	Interface uint32
+	Group     kernelSockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Group     kernelSockaddrStorage
+	Source    kernelSockaddrStorage
+}
+
+type icmpFilter struct {
+	Data uint32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_mips64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_mips64.go
new file mode 100644
index 000000000..a04e78518
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_mips64.go
@@ -0,0 +1,132 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package ipv4
+
+const (
+	sysIP_TOS             = 0x1
+	sysIP_TTL             = 0x2
+	sysIP_HDRINCL         = 0x3
+	sysIP_OPTIONS         = 0x4
+	sysIP_ROUTER_ALERT    = 0x5
+	sysIP_RECVOPTS        = 0x6
+	sysIP_RETOPTS         = 0x7
+	sysIP_PKTINFO         = 0x8
+	sysIP_PKTOPTIONS      = 0x9
+	sysIP_MTU_DISCOVER    = 0xa
+	sysIP_RECVERR         = 0xb
+	sysIP_RECVTTL         = 0xc
+	sysIP_RECVTOS         = 0xd
+	sysIP_MTU             = 0xe
+	sysIP_FREEBIND        = 0xf
+	sysIP_TRANSPARENT     = 0x13
+	sysIP_RECVRETOPTS     = 0x7
+	sysIP_ORIGDSTADDR     = 0x14
+	sysIP_RECVORIGDSTADDR = 0x14
+	sysIP_MINTTL          = 0x15
+	sysIP_NODEFRAG        = 0x16
+	sysIP_UNICAST_IF      = 0x32
+
+	sysIP_MULTICAST_IF           = 0x20
+	sysIP_MULTICAST_TTL          = 0x21
+	sysIP_MULTICAST_LOOP         = 0x22
+	sysIP_ADD_MEMBERSHIP         = 0x23
+	sysIP_DROP_MEMBERSHIP        = 0x24
+	sysIP_UNBLOCK_SOURCE         = 0x25
+	sysIP_BLOCK_SOURCE           = 0x26
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x27
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x28
+	sysIP_MSFILTER               = 0x29
+	sysMCAST_JOIN_GROUP          = 0x2a
+	sysMCAST_LEAVE_GROUP         = 0x2d
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x2e
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x2f
+	sysMCAST_BLOCK_SOURCE        = 0x2b
+	sysMCAST_UNBLOCK_SOURCE      = 0x2c
+	sysMCAST_MSFILTER            = 0x30
+	sysIP_MULTICAST_ALL          = 0x31
+
+	sysICMP_FILTER = 0x1
+
+	sysSO_EE_ORIGIN_NONE         = 0x0
+	sysSO_EE_ORIGIN_LOCAL        = 0x1
+	sysSO_EE_ORIGIN_ICMP         = 0x2
+	sysSO_EE_ORIGIN_ICMP6        = 0x3
+	sysSO_EE_ORIGIN_TXSTATUS     = 0x4
+	sysSO_EE_ORIGIN_TIMESTAMPING = 0x4
+
+	sizeofKernelSockaddrStorage = 0x80
+	sizeofSockaddrInet          = 0x10
+	sizeofInetPktinfo           = 0xc
+	sizeofSockExtendedErr       = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x88
+	sizeofGroupSourceReq = 0x108
+
+	sizeofICMPFilter = 0x4
+)
+
+type kernelSockaddrStorage struct {
+	Family  uint16
+	X__data [126]int8
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type inetPktinfo struct {
+	Ifindex  int32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type sockExtendedErr struct {
+	Errno  uint32
+	Origin uint8
+	Type   uint8
+	Code   uint8
+	Pad    uint8
+	Info   uint32
+	Data   uint32
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  uint32
+	Interface  uint32
+	Sourceaddr uint32
+}
+
+type groupReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     kernelSockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     kernelSockaddrStorage
+	Source    kernelSockaddrStorage
+}
+
+type icmpFilter struct {
+	Data uint32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_mips64le.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_mips64le.go
new file mode 100644
index 000000000..a04e78518
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_mips64le.go
@@ -0,0 +1,132 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package ipv4
+
+const (
+	sysIP_TOS             = 0x1
+	sysIP_TTL             = 0x2
+	sysIP_HDRINCL         = 0x3
+	sysIP_OPTIONS         = 0x4
+	sysIP_ROUTER_ALERT    = 0x5
+	sysIP_RECVOPTS        = 0x6
+	sysIP_RETOPTS         = 0x7
+	sysIP_PKTINFO         = 0x8
+	sysIP_PKTOPTIONS      = 0x9
+	sysIP_MTU_DISCOVER    = 0xa
+	sysIP_RECVERR         = 0xb
+	sysIP_RECVTTL         = 0xc
+	sysIP_RECVTOS         = 0xd
+	sysIP_MTU             = 0xe
+	sysIP_FREEBIND        = 0xf
+	sysIP_TRANSPARENT     = 0x13
+	sysIP_RECVRETOPTS     = 0x7
+	sysIP_ORIGDSTADDR     = 0x14
+	sysIP_RECVORIGDSTADDR = 0x14
+	sysIP_MINTTL          = 0x15
+	sysIP_NODEFRAG        = 0x16
+	sysIP_UNICAST_IF      = 0x32
+
+	sysIP_MULTICAST_IF           = 0x20
+	sysIP_MULTICAST_TTL          = 0x21
+	sysIP_MULTICAST_LOOP         = 0x22
+	sysIP_ADD_MEMBERSHIP         = 0x23
+	sysIP_DROP_MEMBERSHIP        = 0x24
+	sysIP_UNBLOCK_SOURCE         = 0x25
+	sysIP_BLOCK_SOURCE           = 0x26
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x27
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x28
+	sysIP_MSFILTER               = 0x29
+	sysMCAST_JOIN_GROUP          = 0x2a
+	sysMCAST_LEAVE_GROUP         = 0x2d
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x2e
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x2f
+	sysMCAST_BLOCK_SOURCE        = 0x2b
+	sysMCAST_UNBLOCK_SOURCE      = 0x2c
+	sysMCAST_MSFILTER            = 0x30
+	sysIP_MULTICAST_ALL          = 0x31
+
+	sysICMP_FILTER = 0x1
+
+	sysSO_EE_ORIGIN_NONE         = 0x0
+	sysSO_EE_ORIGIN_LOCAL        = 0x1
+	sysSO_EE_ORIGIN_ICMP         = 0x2
+	sysSO_EE_ORIGIN_ICMP6        = 0x3
+	sysSO_EE_ORIGIN_TXSTATUS     = 0x4
+	sysSO_EE_ORIGIN_TIMESTAMPING = 0x4
+
+	sizeofKernelSockaddrStorage = 0x80
+	sizeofSockaddrInet          = 0x10
+	sizeofInetPktinfo           = 0xc
+	sizeofSockExtendedErr       = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x88
+	sizeofGroupSourceReq = 0x108
+
+	sizeofICMPFilter = 0x4
+)
+
+type kernelSockaddrStorage struct {
+	Family  uint16
+	X__data [126]int8
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type inetPktinfo struct {
+	Ifindex  int32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type sockExtendedErr struct {
+	Errno  uint32
+	Origin uint8
+	Type   uint8
+	Code   uint8
+	Pad    uint8
+	Info   uint32
+	Data   uint32
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  uint32
+	Interface  uint32
+	Sourceaddr uint32
+}
+
+type groupReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     kernelSockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     kernelSockaddrStorage
+	Source    kernelSockaddrStorage
+}
+
+type icmpFilter struct {
+	Data uint32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_mipsle.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_mipsle.go
new file mode 100644
index 000000000..1c7fdfa13
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_mipsle.go
@@ -0,0 +1,130 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package ipv4
+
+const (
+	sysIP_TOS             = 0x1
+	sysIP_TTL             = 0x2
+	sysIP_HDRINCL         = 0x3
+	sysIP_OPTIONS         = 0x4
+	sysIP_ROUTER_ALERT    = 0x5
+	sysIP_RECVOPTS        = 0x6
+	sysIP_RETOPTS         = 0x7
+	sysIP_PKTINFO         = 0x8
+	sysIP_PKTOPTIONS      = 0x9
+	sysIP_MTU_DISCOVER    = 0xa
+	sysIP_RECVERR         = 0xb
+	sysIP_RECVTTL         = 0xc
+	sysIP_RECVTOS         = 0xd
+	sysIP_MTU             = 0xe
+	sysIP_FREEBIND        = 0xf
+	sysIP_TRANSPARENT     = 0x13
+	sysIP_RECVRETOPTS     = 0x7
+	sysIP_ORIGDSTADDR     = 0x14
+	sysIP_RECVORIGDSTADDR = 0x14
+	sysIP_MINTTL          = 0x15
+	sysIP_NODEFRAG        = 0x16
+	sysIP_UNICAST_IF      = 0x32
+
+	sysIP_MULTICAST_IF           = 0x20
+	sysIP_MULTICAST_TTL          = 0x21
+	sysIP_MULTICAST_LOOP         = 0x22
+	sysIP_ADD_MEMBERSHIP         = 0x23
+	sysIP_DROP_MEMBERSHIP        = 0x24
+	sysIP_UNBLOCK_SOURCE         = 0x25
+	sysIP_BLOCK_SOURCE           = 0x26
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x27
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x28
+	sysIP_MSFILTER               = 0x29
+	sysMCAST_JOIN_GROUP          = 0x2a
+	sysMCAST_LEAVE_GROUP         = 0x2d
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x2e
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x2f
+	sysMCAST_BLOCK_SOURCE        = 0x2b
+	sysMCAST_UNBLOCK_SOURCE      = 0x2c
+	sysMCAST_MSFILTER            = 0x30
+	sysIP_MULTICAST_ALL          = 0x31
+
+	sysICMP_FILTER = 0x1
+
+	sysSO_EE_ORIGIN_NONE         = 0x0
+	sysSO_EE_ORIGIN_LOCAL        = 0x1
+	sysSO_EE_ORIGIN_ICMP         = 0x2
+	sysSO_EE_ORIGIN_ICMP6        = 0x3
+	sysSO_EE_ORIGIN_TXSTATUS     = 0x4
+	sysSO_EE_ORIGIN_TIMESTAMPING = 0x4
+
+	sizeofKernelSockaddrStorage = 0x80
+	sizeofSockaddrInet          = 0x10
+	sizeofInetPktinfo           = 0xc
+	sizeofSockExtendedErr       = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x84
+	sizeofGroupSourceReq = 0x104
+
+	sizeofICMPFilter = 0x4
+)
+
+type kernelSockaddrStorage struct {
+	Family  uint16
+	X__data [126]int8
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type inetPktinfo struct {
+	Ifindex  int32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type sockExtendedErr struct {
+	Errno  uint32
+	Origin uint8
+	Type   uint8
+	Code   uint8
+	Pad    uint8
+	Info   uint32
+	Data   uint32
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  uint32
+	Interface  uint32
+	Sourceaddr uint32
+}
+
+type groupReq struct {
+	Interface uint32
+	Group     kernelSockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Group     kernelSockaddrStorage
+	Source    kernelSockaddrStorage
+}
+
+type icmpFilter struct {
+	Data uint32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_ppc.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_ppc.go
new file mode 100644
index 000000000..3c5ea5473
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_ppc.go
@@ -0,0 +1,130 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package ipv4
+
+const (
+	sysIP_TOS             = 0x1
+	sysIP_TTL             = 0x2
+	sysIP_HDRINCL         = 0x3
+	sysIP_OPTIONS         = 0x4
+	sysIP_ROUTER_ALERT    = 0x5
+	sysIP_RECVOPTS        = 0x6
+	sysIP_RETOPTS         = 0x7
+	sysIP_PKTINFO         = 0x8
+	sysIP_PKTOPTIONS      = 0x9
+	sysIP_MTU_DISCOVER    = 0xa
+	sysIP_RECVERR         = 0xb
+	sysIP_RECVTTL         = 0xc
+	sysIP_RECVTOS         = 0xd
+	sysIP_MTU             = 0xe
+	sysIP_FREEBIND        = 0xf
+	sysIP_TRANSPARENT     = 0x13
+	sysIP_RECVRETOPTS     = 0x7
+	sysIP_ORIGDSTADDR     = 0x14
+	sysIP_RECVORIGDSTADDR = 0x14
+	sysIP_MINTTL          = 0x15
+	sysIP_NODEFRAG        = 0x16
+	sysIP_UNICAST_IF      = 0x32
+
+	sysIP_MULTICAST_IF           = 0x20
+	sysIP_MULTICAST_TTL          = 0x21
+	sysIP_MULTICAST_LOOP         = 0x22
+	sysIP_ADD_MEMBERSHIP         = 0x23
+	sysIP_DROP_MEMBERSHIP        = 0x24
+	sysIP_UNBLOCK_SOURCE         = 0x25
+	sysIP_BLOCK_SOURCE           = 0x26
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x27
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x28
+	sysIP_MSFILTER               = 0x29
+	sysMCAST_JOIN_GROUP          = 0x2a
+	sysMCAST_LEAVE_GROUP         = 0x2d
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x2e
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x2f
+	sysMCAST_BLOCK_SOURCE        = 0x2b
+	sysMCAST_UNBLOCK_SOURCE      = 0x2c
+	sysMCAST_MSFILTER            = 0x30
+	sysIP_MULTICAST_ALL          = 0x31
+
+	sysICMP_FILTER = 0x1
+
+	sysSO_EE_ORIGIN_NONE         = 0x0
+	sysSO_EE_ORIGIN_LOCAL        = 0x1
+	sysSO_EE_ORIGIN_ICMP         = 0x2
+	sysSO_EE_ORIGIN_ICMP6        = 0x3
+	sysSO_EE_ORIGIN_TXSTATUS     = 0x4
+	sysSO_EE_ORIGIN_TIMESTAMPING = 0x4
+
+	sizeofKernelSockaddrStorage = 0x80
+	sizeofSockaddrInet          = 0x10
+	sizeofInetPktinfo           = 0xc
+	sizeofSockExtendedErr       = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x84
+	sizeofGroupSourceReq = 0x104
+
+	sizeofICMPFilter = 0x4
+)
+
+type kernelSockaddrStorage struct {
+	Family  uint16
+	X__data [126]uint8
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type inetPktinfo struct {
+	Ifindex  int32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type sockExtendedErr struct {
+	Errno  uint32
+	Origin uint8
+	Type   uint8
+	Code   uint8
+	Pad    uint8
+	Info   uint32
+	Data   uint32
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  uint32
+	Interface  uint32
+	Sourceaddr uint32
+}
+
+type groupReq struct {
+	Interface uint32
+	Group     kernelSockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Group     kernelSockaddrStorage
+	Source    kernelSockaddrStorage
+}
+
+type icmpFilter struct {
+	Data uint32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_ppc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_ppc64.go
new file mode 100644
index 000000000..a04e78518
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_ppc64.go
@@ -0,0 +1,132 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package ipv4
+
+const (
+	sysIP_TOS             = 0x1
+	sysIP_TTL             = 0x2
+	sysIP_HDRINCL         = 0x3
+	sysIP_OPTIONS         = 0x4
+	sysIP_ROUTER_ALERT    = 0x5
+	sysIP_RECVOPTS        = 0x6
+	sysIP_RETOPTS         = 0x7
+	sysIP_PKTINFO         = 0x8
+	sysIP_PKTOPTIONS      = 0x9
+	sysIP_MTU_DISCOVER    = 0xa
+	sysIP_RECVERR         = 0xb
+	sysIP_RECVTTL         = 0xc
+	sysIP_RECVTOS         = 0xd
+	sysIP_MTU             = 0xe
+	sysIP_FREEBIND        = 0xf
+	sysIP_TRANSPARENT     = 0x13
+	sysIP_RECVRETOPTS     = 0x7
+	sysIP_ORIGDSTADDR     = 0x14
+	sysIP_RECVORIGDSTADDR = 0x14
+	sysIP_MINTTL          = 0x15
+	sysIP_NODEFRAG        = 0x16
+	sysIP_UNICAST_IF      = 0x32
+
+	sysIP_MULTICAST_IF           = 0x20
+	sysIP_MULTICAST_TTL          = 0x21
+	sysIP_MULTICAST_LOOP         = 0x22
+	sysIP_ADD_MEMBERSHIP         = 0x23
+	sysIP_DROP_MEMBERSHIP        = 0x24
+	sysIP_UNBLOCK_SOURCE         = 0x25
+	sysIP_BLOCK_SOURCE           = 0x26
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x27
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x28
+	sysIP_MSFILTER               = 0x29
+	sysMCAST_JOIN_GROUP          = 0x2a
+	sysMCAST_LEAVE_GROUP         = 0x2d
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x2e
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x2f
+	sysMCAST_BLOCK_SOURCE        = 0x2b
+	sysMCAST_UNBLOCK_SOURCE      = 0x2c
+	sysMCAST_MSFILTER            = 0x30
+	sysIP_MULTICAST_ALL          = 0x31
+
+	sysICMP_FILTER = 0x1
+
+	sysSO_EE_ORIGIN_NONE         = 0x0
+	sysSO_EE_ORIGIN_LOCAL        = 0x1
+	sysSO_EE_ORIGIN_ICMP         = 0x2
+	sysSO_EE_ORIGIN_ICMP6        = 0x3
+	sysSO_EE_ORIGIN_TXSTATUS     = 0x4
+	sysSO_EE_ORIGIN_TIMESTAMPING = 0x4
+
+	sizeofKernelSockaddrStorage = 0x80
+	sizeofSockaddrInet          = 0x10
+	sizeofInetPktinfo           = 0xc
+	sizeofSockExtendedErr       = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x88
+	sizeofGroupSourceReq = 0x108
+
+	sizeofICMPFilter = 0x4
+)
+
+type kernelSockaddrStorage struct {
+	Family  uint16
+	X__data [126]int8
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type inetPktinfo struct {
+	Ifindex  int32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type sockExtendedErr struct {
+	Errno  uint32
+	Origin uint8
+	Type   uint8
+	Code   uint8
+	Pad    uint8
+	Info   uint32
+	Data   uint32
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  uint32
+	Interface  uint32
+	Sourceaddr uint32
+}
+
+type groupReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     kernelSockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     kernelSockaddrStorage
+	Source    kernelSockaddrStorage
+}
+
+type icmpFilter struct {
+	Data uint32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_ppc64le.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_ppc64le.go
new file mode 100644
index 000000000..a04e78518
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_ppc64le.go
@@ -0,0 +1,132 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package ipv4
+
+const (
+	sysIP_TOS             = 0x1
+	sysIP_TTL             = 0x2
+	sysIP_HDRINCL         = 0x3
+	sysIP_OPTIONS         = 0x4
+	sysIP_ROUTER_ALERT    = 0x5
+	sysIP_RECVOPTS        = 0x6
+	sysIP_RETOPTS         = 0x7
+	sysIP_PKTINFO         = 0x8
+	sysIP_PKTOPTIONS      = 0x9
+	sysIP_MTU_DISCOVER    = 0xa
+	sysIP_RECVERR         = 0xb
+	sysIP_RECVTTL         = 0xc
+	sysIP_RECVTOS         = 0xd
+	sysIP_MTU             = 0xe
+	sysIP_FREEBIND        = 0xf
+	sysIP_TRANSPARENT     = 0x13
+	sysIP_RECVRETOPTS     = 0x7
+	sysIP_ORIGDSTADDR     = 0x14
+	sysIP_RECVORIGDSTADDR = 0x14
+	sysIP_MINTTL          = 0x15
+	sysIP_NODEFRAG        = 0x16
+	sysIP_UNICAST_IF      = 0x32
+
+	sysIP_MULTICAST_IF           = 0x20
+	sysIP_MULTICAST_TTL          = 0x21
+	sysIP_MULTICAST_LOOP         = 0x22
+	sysIP_ADD_MEMBERSHIP         = 0x23
+	sysIP_DROP_MEMBERSHIP        = 0x24
+	sysIP_UNBLOCK_SOURCE         = 0x25
+	sysIP_BLOCK_SOURCE           = 0x26
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x27
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x28
+	sysIP_MSFILTER               = 0x29
+	sysMCAST_JOIN_GROUP          = 0x2a
+	sysMCAST_LEAVE_GROUP         = 0x2d
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x2e
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x2f
+	sysMCAST_BLOCK_SOURCE        = 0x2b
+	sysMCAST_UNBLOCK_SOURCE      = 0x2c
+	sysMCAST_MSFILTER            = 0x30
+	sysIP_MULTICAST_ALL          = 0x31
+
+	sysICMP_FILTER = 0x1
+
+	sysSO_EE_ORIGIN_NONE         = 0x0
+	sysSO_EE_ORIGIN_LOCAL        = 0x1
+	sysSO_EE_ORIGIN_ICMP         = 0x2
+	sysSO_EE_ORIGIN_ICMP6        = 0x3
+	sysSO_EE_ORIGIN_TXSTATUS     = 0x4
+	sysSO_EE_ORIGIN_TIMESTAMPING = 0x4
+
+	sizeofKernelSockaddrStorage = 0x80
+	sizeofSockaddrInet          = 0x10
+	sizeofInetPktinfo           = 0xc
+	sizeofSockExtendedErr       = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x88
+	sizeofGroupSourceReq = 0x108
+
+	sizeofICMPFilter = 0x4
+)
+
+type kernelSockaddrStorage struct {
+	Family  uint16
+	X__data [126]int8
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type inetPktinfo struct {
+	Ifindex  int32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type sockExtendedErr struct {
+	Errno  uint32
+	Origin uint8
+	Type   uint8
+	Code   uint8
+	Pad    uint8
+	Info   uint32
+	Data   uint32
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  uint32
+	Interface  uint32
+	Sourceaddr uint32
+}
+
+type groupReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     kernelSockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     kernelSockaddrStorage
+	Source    kernelSockaddrStorage
+}
+
+type icmpFilter struct {
+	Data uint32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_riscv64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_riscv64.go
new file mode 100644
index 000000000..e626134a8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_riscv64.go
@@ -0,0 +1,134 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+// +build riscv64
+
+package ipv4
+
+const (
+	sysIP_TOS             = 0x1
+	sysIP_TTL             = 0x2
+	sysIP_HDRINCL         = 0x3
+	sysIP_OPTIONS         = 0x4
+	sysIP_ROUTER_ALERT    = 0x5
+	sysIP_RECVOPTS        = 0x6
+	sysIP_RETOPTS         = 0x7
+	sysIP_PKTINFO         = 0x8
+	sysIP_PKTOPTIONS      = 0x9
+	sysIP_MTU_DISCOVER    = 0xa
+	sysIP_RECVERR         = 0xb
+	sysIP_RECVTTL         = 0xc
+	sysIP_RECVTOS         = 0xd
+	sysIP_MTU             = 0xe
+	sysIP_FREEBIND        = 0xf
+	sysIP_TRANSPARENT     = 0x13
+	sysIP_RECVRETOPTS     = 0x7
+	sysIP_ORIGDSTADDR     = 0x14
+	sysIP_RECVORIGDSTADDR = 0x14
+	sysIP_MINTTL          = 0x15
+	sysIP_NODEFRAG        = 0x16
+	sysIP_UNICAST_IF      = 0x32
+
+	sysIP_MULTICAST_IF           = 0x20
+	sysIP_MULTICAST_TTL          = 0x21
+	sysIP_MULTICAST_LOOP         = 0x22
+	sysIP_ADD_MEMBERSHIP         = 0x23
+	sysIP_DROP_MEMBERSHIP        = 0x24
+	sysIP_UNBLOCK_SOURCE         = 0x25
+	sysIP_BLOCK_SOURCE           = 0x26
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x27
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x28
+	sysIP_MSFILTER               = 0x29
+	sysMCAST_JOIN_GROUP          = 0x2a
+	sysMCAST_LEAVE_GROUP         = 0x2d
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x2e
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x2f
+	sysMCAST_BLOCK_SOURCE        = 0x2b
+	sysMCAST_UNBLOCK_SOURCE      = 0x2c
+	sysMCAST_MSFILTER            = 0x30
+	sysIP_MULTICAST_ALL          = 0x31
+
+	sysICMP_FILTER = 0x1
+
+	sysSO_EE_ORIGIN_NONE         = 0x0
+	sysSO_EE_ORIGIN_LOCAL        = 0x1
+	sysSO_EE_ORIGIN_ICMP         = 0x2
+	sysSO_EE_ORIGIN_ICMP6        = 0x3
+	sysSO_EE_ORIGIN_TXSTATUS     = 0x4
+	sysSO_EE_ORIGIN_TIMESTAMPING = 0x4
+
+	sizeofKernelSockaddrStorage = 0x80
+	sizeofSockaddrInet          = 0x10
+	sizeofInetPktinfo           = 0xc
+	sizeofSockExtendedErr       = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x88
+	sizeofGroupSourceReq = 0x108
+
+	sizeofICMPFilter = 0x4
+)
+
+type kernelSockaddrStorage struct {
+	Family  uint16
+	X__data [126]int8
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type inetPktinfo struct {
+	Ifindex  int32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type sockExtendedErr struct {
+	Errno  uint32
+	Origin uint8
+	Type   uint8
+	Code   uint8
+	Pad    uint8
+	Info   uint32
+	Data   uint32
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  uint32
+	Interface  uint32
+	Sourceaddr uint32
+}
+
+type groupReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     kernelSockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     kernelSockaddrStorage
+	Source    kernelSockaddrStorage
+}
+
+type icmpFilter struct {
+	Data uint32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_s390x.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_s390x.go
new file mode 100644
index 000000000..a04e78518
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_linux_s390x.go
@@ -0,0 +1,132 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_linux.go
+
+package ipv4
+
+const (
+	sysIP_TOS             = 0x1
+	sysIP_TTL             = 0x2
+	sysIP_HDRINCL         = 0x3
+	sysIP_OPTIONS         = 0x4
+	sysIP_ROUTER_ALERT    = 0x5
+	sysIP_RECVOPTS        = 0x6
+	sysIP_RETOPTS         = 0x7
+	sysIP_PKTINFO         = 0x8
+	sysIP_PKTOPTIONS      = 0x9
+	sysIP_MTU_DISCOVER    = 0xa
+	sysIP_RECVERR         = 0xb
+	sysIP_RECVTTL         = 0xc
+	sysIP_RECVTOS         = 0xd
+	sysIP_MTU             = 0xe
+	sysIP_FREEBIND        = 0xf
+	sysIP_TRANSPARENT     = 0x13
+	sysIP_RECVRETOPTS     = 0x7
+	sysIP_ORIGDSTADDR     = 0x14
+	sysIP_RECVORIGDSTADDR = 0x14
+	sysIP_MINTTL          = 0x15
+	sysIP_NODEFRAG        = 0x16
+	sysIP_UNICAST_IF      = 0x32
+
+	sysIP_MULTICAST_IF           = 0x20
+	sysIP_MULTICAST_TTL          = 0x21
+	sysIP_MULTICAST_LOOP         = 0x22
+	sysIP_ADD_MEMBERSHIP         = 0x23
+	sysIP_DROP_MEMBERSHIP        = 0x24
+	sysIP_UNBLOCK_SOURCE         = 0x25
+	sysIP_BLOCK_SOURCE           = 0x26
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x27
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x28
+	sysIP_MSFILTER               = 0x29
+	sysMCAST_JOIN_GROUP          = 0x2a
+	sysMCAST_LEAVE_GROUP         = 0x2d
+	sysMCAST_JOIN_SOURCE_GROUP   = 0x2e
+	sysMCAST_LEAVE_SOURCE_GROUP  = 0x2f
+	sysMCAST_BLOCK_SOURCE        = 0x2b
+	sysMCAST_UNBLOCK_SOURCE      = 0x2c
+	sysMCAST_MSFILTER            = 0x30
+	sysIP_MULTICAST_ALL          = 0x31
+
+	sysICMP_FILTER = 0x1
+
+	sysSO_EE_ORIGIN_NONE         = 0x0
+	sysSO_EE_ORIGIN_LOCAL        = 0x1
+	sysSO_EE_ORIGIN_ICMP         = 0x2
+	sysSO_EE_ORIGIN_ICMP6        = 0x3
+	sysSO_EE_ORIGIN_TXSTATUS     = 0x4
+	sysSO_EE_ORIGIN_TIMESTAMPING = 0x4
+
+	sizeofKernelSockaddrStorage = 0x80
+	sizeofSockaddrInet          = 0x10
+	sizeofInetPktinfo           = 0xc
+	sizeofSockExtendedErr       = 0x10
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqn        = 0xc
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x88
+	sizeofGroupSourceReq = 0x108
+
+	sizeofICMPFilter = 0x4
+)
+
+type kernelSockaddrStorage struct {
+	Family  uint16
+	X__data [126]int8
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	X__pad [8]uint8
+}
+
+type inetPktinfo struct {
+	Ifindex  int32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type sockExtendedErr struct {
+	Errno  uint32
+	Origin uint8
+	Type   uint8
+	Code   uint8
+	Pad    uint8
+	Info   uint32
+	Data   uint32
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type ipMreqSource struct {
+	Multiaddr  uint32
+	Interface  uint32
+	Sourceaddr uint32
+}
+
+type groupReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     kernelSockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Pad_cgo_0 [4]byte
+	Group     kernelSockaddrStorage
+	Source    kernelSockaddrStorage
+}
+
+type icmpFilter struct {
+	Data uint32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_netbsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_netbsd.go
new file mode 100644
index 000000000..8cfc648ad
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_netbsd.go
@@ -0,0 +1,30 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_netbsd.go
+
+package ipv4
+
+const (
+	sysIP_OPTIONS     = 0x1
+	sysIP_HDRINCL     = 0x2
+	sysIP_TOS         = 0x3
+	sysIP_TTL         = 0x4
+	sysIP_RECVOPTS    = 0x5
+	sysIP_RECVRETOPTS = 0x6
+	sysIP_RECVDSTADDR = 0x7
+	sysIP_RETOPTS     = 0x8
+	sysIP_RECVIF      = 0x14
+	sysIP_RECVTTL     = 0x17
+
+	sysIP_MULTICAST_IF    = 0x9
+	sysIP_MULTICAST_TTL   = 0xa
+	sysIP_MULTICAST_LOOP  = 0xb
+	sysIP_ADD_MEMBERSHIP  = 0xc
+	sysIP_DROP_MEMBERSHIP = 0xd
+
+	sizeofIPMreq = 0x8
+)
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_openbsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_openbsd.go
new file mode 100644
index 000000000..37629cb0a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_openbsd.go
@@ -0,0 +1,30 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_openbsd.go
+
+package ipv4
+
+const (
+	sysIP_OPTIONS     = 0x1
+	sysIP_HDRINCL     = 0x2
+	sysIP_TOS         = 0x3
+	sysIP_TTL         = 0x4
+	sysIP_RECVOPTS    = 0x5
+	sysIP_RECVRETOPTS = 0x6
+	sysIP_RECVDSTADDR = 0x7
+	sysIP_RETOPTS     = 0x8
+	sysIP_RECVIF      = 0x1e
+	sysIP_RECVTTL     = 0x1f
+
+	sysIP_MULTICAST_IF    = 0x9
+	sysIP_MULTICAST_TTL   = 0xa
+	sysIP_MULTICAST_LOOP  = 0xb
+	sysIP_ADD_MEMBERSHIP  = 0xc
+	sysIP_DROP_MEMBERSHIP = 0xd
+
+	sizeofIPMreq = 0x8
+)
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_solaris.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_solaris.go
new file mode 100644
index 000000000..cb80a308b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_solaris.go
@@ -0,0 +1,100 @@
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs defs_solaris.go
+
+package ipv4
+
+const (
+	sysIP_OPTIONS     = 0x1
+	sysIP_HDRINCL     = 0x2
+	sysIP_TOS         = 0x3
+	sysIP_TTL         = 0x4
+	sysIP_RECVOPTS    = 0x5
+	sysIP_RECVRETOPTS = 0x6
+	sysIP_RECVDSTADDR = 0x7
+	sysIP_RETOPTS     = 0x8
+	sysIP_RECVIF      = 0x9
+	sysIP_RECVSLLA    = 0xa
+	sysIP_RECVTTL     = 0xb
+
+	sysIP_MULTICAST_IF           = 0x10
+	sysIP_MULTICAST_TTL          = 0x11
+	sysIP_MULTICAST_LOOP         = 0x12
+	sysIP_ADD_MEMBERSHIP         = 0x13
+	sysIP_DROP_MEMBERSHIP        = 0x14
+	sysIP_BLOCK_SOURCE           = 0x15
+	sysIP_UNBLOCK_SOURCE         = 0x16
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 0x17
+	sysIP_DROP_SOURCE_MEMBERSHIP = 0x18
+	sysIP_NEXTHOP                = 0x19
+
+	sysIP_PKTINFO     = 0x1a
+	sysIP_RECVPKTINFO = 0x1a
+	sysIP_DONTFRAG    = 0x1b
+
+	sysIP_BOUND_IF      = 0x41
+	sysIP_UNSPEC_SRC    = 0x42
+	sysIP_BROADCAST_TTL = 0x43
+	sysIP_DHCPINIT_IF   = 0x45
+
+	sysIP_REUSEADDR = 0x104
+	sysIP_DONTROUTE = 0x105
+	sysIP_BROADCAST = 0x106
+
+	sysMCAST_JOIN_GROUP         = 0x29
+	sysMCAST_LEAVE_GROUP        = 0x2a
+	sysMCAST_BLOCK_SOURCE       = 0x2b
+	sysMCAST_UNBLOCK_SOURCE     = 0x2c
+	sysMCAST_JOIN_SOURCE_GROUP  = 0x2d
+	sysMCAST_LEAVE_SOURCE_GROUP = 0x2e
+
+	sizeofSockaddrStorage = 0x100
+	sizeofSockaddrInet    = 0x10
+	sizeofInetPktinfo     = 0xc
+
+	sizeofIPMreq         = 0x8
+	sizeofIPMreqSource   = 0xc
+	sizeofGroupReq       = 0x104
+	sizeofGroupSourceReq = 0x204
+)
+
+type sockaddrStorage struct {
+	Family     uint16
+	X_ss_pad1  [6]int8
+	X_ss_align float64
+	X_ss_pad2  [240]int8
+}
+
+type sockaddrInet struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type inetPktinfo struct {
+	Ifindex  uint32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type ipMreqSource struct {
+	Multiaddr  [4]byte /* in_addr */
+	Sourceaddr [4]byte /* in_addr */
+	Interface  [4]byte /* in_addr */
+}
+
+type groupReq struct {
+	Interface uint32
+	Pad_cgo_0 [256]byte
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	Pad_cgo_0 [256]byte
+	Pad_cgo_1 [256]byte
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_zos_s390x.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_zos_s390x.go
new file mode 100644
index 000000000..4bbfda07d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/ipv4/zsys_zos_s390x.go
@@ -0,0 +1,80 @@
+// Copyright 2020 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Hand edited based on zerrors_zos_s390x.go
+// TODO(Bill O'Farrell): auto-generate.
+
+package ipv4
+
+const (
+	sysIP_ADD_MEMBERSHIP         = 5
+	sysIP_ADD_SOURCE_MEMBERSHIP  = 12
+	sysIP_BLOCK_SOURCE           = 10
+	sysIP_DEFAULT_MULTICAST_LOOP = 1
+	sysIP_DEFAULT_MULTICAST_TTL  = 1
+	sysIP_DROP_MEMBERSHIP        = 6
+	sysIP_DROP_SOURCE_MEMBERSHIP = 13
+	sysIP_MAX_MEMBERSHIPS        = 20
+	sysIP_MULTICAST_IF           = 7
+	sysIP_MULTICAST_LOOP         = 4
+	sysIP_MULTICAST_TTL          = 3
+	sysIP_OPTIONS                = 1
+	sysIP_PKTINFO                = 101
+	sysIP_RECVPKTINFO            = 102
+	sysIP_TOS                    = 2
+	sysIP_UNBLOCK_SOURCE         = 11
+
+	sysMCAST_JOIN_GROUP         = 40
+	sysMCAST_LEAVE_GROUP        = 41
+	sysMCAST_JOIN_SOURCE_GROUP  = 42
+	sysMCAST_LEAVE_SOURCE_GROUP = 43
+	sysMCAST_BLOCK_SOURCE       = 44
+	sysMCAST_UNBLOCK_SOURCE     = 45
+
+	sizeofIPMreq          = 8
+	sizeofSockaddrInet4   = 16
+	sizeofSockaddrStorage = 128
+	sizeofGroupReq        = 136
+	sizeofGroupSourceReq  = 264
+	sizeofInetPktinfo     = 8
+)
+
+type sockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte
+	Zero   [8]uint8
+}
+
+type inetPktinfo struct {
+	Addr    [4]byte
+	Ifindex uint32
+}
+
+type sockaddrStorage struct {
+	Len      uint8
+	Family   byte
+	ss_pad1  [6]byte
+	ss_align int64
+	ss_pad2  [112]byte
+}
+
+type groupReq struct {
+	Interface uint32
+	reserved  uint32
+	Group     sockaddrStorage
+}
+
+type groupSourceReq struct {
+	Interface uint32
+	reserved  uint32
+	Group     sockaddrStorage
+	Source    sockaddrStorage
+}
+
+type ipMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/dial.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/dial.go
new file mode 100644
index 000000000..811c2e4e9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/dial.go
@@ -0,0 +1,54 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package proxy
+
+import (
+	"context"
+	"net"
+)
+
+// A ContextDialer dials using a context.
+type ContextDialer interface {
+	DialContext(ctx context.Context, network, address string) (net.Conn, error)
+}
+
+// Dial works like DialContext on net.Dialer but using a dialer returned by FromEnvironment.
+//
+// The passed ctx is only used for returning the Conn, not the lifetime of the Conn.
+//
+// Custom dialers (registered via RegisterDialerType) that do not implement ContextDialer
+// can leak a goroutine for as long as it takes the underlying Dialer implementation to timeout.
+//
+// A Conn returned from a successful Dial after the context has been cancelled will be immediately closed.
+func Dial(ctx context.Context, network, address string) (net.Conn, error) {
+	d := FromEnvironment()
+	if xd, ok := d.(ContextDialer); ok {
+		return xd.DialContext(ctx, network, address)
+	}
+	return dialContext(ctx, d, network, address)
+}
+
+// WARNING: this can leak a goroutine for as long as the underlying Dialer implementation takes to timeout
+// A Conn returned from a successful Dial after the context has been cancelled will be immediately closed.
+func dialContext(ctx context.Context, d Dialer, network, address string) (net.Conn, error) {
+	var (
+		conn net.Conn
+		done = make(chan struct{}, 1)
+		err  error
+	)
+	go func() {
+		conn, err = d.Dial(network, address)
+		close(done)
+		if conn != nil && ctx.Err() != nil {
+			conn.Close()
+		}
+	}()
+	select {
+	case <-ctx.Done():
+		err = ctx.Err()
+	case <-done:
+	}
+	return conn, err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/direct.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/direct.go
new file mode 100644
index 000000000..3d66bdef9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/direct.go
@@ -0,0 +1,31 @@
+// Copyright 2011 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package proxy
+
+import (
+	"context"
+	"net"
+)
+
+type direct struct{}
+
+// Direct implements Dialer by making network connections directly using net.Dial or net.DialContext.
+var Direct = direct{}
+
+var (
+	_ Dialer        = Direct
+	_ ContextDialer = Direct
+)
+
+// Dial directly invokes net.Dial with the supplied parameters.
+func (direct) Dial(network, addr string) (net.Conn, error) {
+	return net.Dial(network, addr)
+}
+
+// DialContext instantiates a net.Dialer and invokes its DialContext receiver with the supplied parameters.
+func (direct) DialContext(ctx context.Context, network, addr string) (net.Conn, error) {
+	var d net.Dialer
+	return d.DialContext(ctx, network, addr)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/per_host.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/per_host.go
new file mode 100644
index 000000000..573fe79e8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/per_host.go
@@ -0,0 +1,155 @@
+// Copyright 2011 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package proxy
+
+import (
+	"context"
+	"net"
+	"strings"
+)
+
+// A PerHost directs connections to a default Dialer unless the host name
+// requested matches one of a number of exceptions.
+type PerHost struct {
+	def, bypass Dialer
+
+	bypassNetworks []*net.IPNet
+	bypassIPs      []net.IP
+	bypassZones    []string
+	bypassHosts    []string
+}
+
+// NewPerHost returns a PerHost Dialer that directs connections to either
+// defaultDialer or bypass, depending on whether the connection matches one of
+// the configured rules.
+func NewPerHost(defaultDialer, bypass Dialer) *PerHost {
+	return &PerHost{
+		def:    defaultDialer,
+		bypass: bypass,
+	}
+}
+
+// Dial connects to the address addr on the given network through either
+// defaultDialer or bypass.
+func (p *PerHost) Dial(network, addr string) (c net.Conn, err error) {
+	host, _, err := net.SplitHostPort(addr)
+	if err != nil {
+		return nil, err
+	}
+
+	return p.dialerForRequest(host).Dial(network, addr)
+}
+
+// DialContext connects to the address addr on the given network through either
+// defaultDialer or bypass.
+func (p *PerHost) DialContext(ctx context.Context, network, addr string) (c net.Conn, err error) {
+	host, _, err := net.SplitHostPort(addr)
+	if err != nil {
+		return nil, err
+	}
+	d := p.dialerForRequest(host)
+	if x, ok := d.(ContextDialer); ok {
+		return x.DialContext(ctx, network, addr)
+	}
+	return dialContext(ctx, d, network, addr)
+}
+
+func (p *PerHost) dialerForRequest(host string) Dialer {
+	if ip := net.ParseIP(host); ip != nil {
+		for _, net := range p.bypassNetworks {
+			if net.Contains(ip) {
+				return p.bypass
+			}
+		}
+		for _, bypassIP := range p.bypassIPs {
+			if bypassIP.Equal(ip) {
+				return p.bypass
+			}
+		}
+		return p.def
+	}
+
+	for _, zone := range p.bypassZones {
+		if strings.HasSuffix(host, zone) {
+			return p.bypass
+		}
+		if host == zone[1:] {
+			// For a zone ".example.com", we match "example.com"
+			// too.
+			return p.bypass
+		}
+	}
+	for _, bypassHost := range p.bypassHosts {
+		if bypassHost == host {
+			return p.bypass
+		}
+	}
+	return p.def
+}
+
+// AddFromString parses a string that contains comma-separated values
+// specifying hosts that should use the bypass proxy. Each value is either an
+// IP address, a CIDR range, a zone (*.example.com) or a host name
+// (localhost). A best effort is made to parse the string and errors are
+// ignored.
+func (p *PerHost) AddFromString(s string) {
+	hosts := strings.Split(s, ",")
+	for _, host := range hosts {
+		host = strings.TrimSpace(host)
+		if len(host) == 0 {
+			continue
+		}
+		if strings.Contains(host, "/") {
+			// We assume that it's a CIDR address like 127.0.0.0/8
+			if _, net, err := net.ParseCIDR(host); err == nil {
+				p.AddNetwork(net)
+			}
+			continue
+		}
+		if ip := net.ParseIP(host); ip != nil {
+			p.AddIP(ip)
+			continue
+		}
+		if strings.HasPrefix(host, "*.") {
+			p.AddZone(host[1:])
+			continue
+		}
+		p.AddHost(host)
+	}
+}
+
+// AddIP specifies an IP address that will use the bypass proxy. Note that
+// this will only take effect if a literal IP address is dialed. A connection
+// to a named host will never match an IP.
+func (p *PerHost) AddIP(ip net.IP) {
+	p.bypassIPs = append(p.bypassIPs, ip)
+}
+
+// AddNetwork specifies an IP range that will use the bypass proxy. Note that
+// this will only take effect if a literal IP address is dialed. A connection
+// to a named host will never match.
+func (p *PerHost) AddNetwork(net *net.IPNet) {
+	p.bypassNetworks = append(p.bypassNetworks, net)
+}
+
+// AddZone specifies a DNS suffix that will use the bypass proxy. A zone of
+// "example.com" matches "example.com" and all of its subdomains.
+func (p *PerHost) AddZone(zone string) {
+	if strings.HasSuffix(zone, ".") {
+		zone = zone[:len(zone)-1]
+	}
+	if !strings.HasPrefix(zone, ".") {
+		zone = "." + zone
+	}
+	p.bypassZones = append(p.bypassZones, zone)
+}
+
+// AddHost specifies a host name that will use the bypass proxy.
+func (p *PerHost) AddHost(host string) {
+	if strings.HasSuffix(host, ".") {
+		host = host[:len(host)-1]
+	}
+	p.bypassHosts = append(p.bypassHosts, host)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/proxy.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/proxy.go
new file mode 100644
index 000000000..9ff4b9a77
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/proxy.go
@@ -0,0 +1,149 @@
+// Copyright 2011 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Package proxy provides support for a variety of protocols to proxy network
+// data.
+package proxy // import "golang.org/x/net/proxy"
+
+import (
+	"errors"
+	"net"
+	"net/url"
+	"os"
+	"sync"
+)
+
+// A Dialer is a means to establish a connection.
+// Custom dialers should also implement ContextDialer.
+type Dialer interface {
+	// Dial connects to the given address via the proxy.
+	Dial(network, addr string) (c net.Conn, err error)
+}
+
+// Auth contains authentication parameters that specific Dialers may require.
+type Auth struct {
+	User, Password string
+}
+
+// FromEnvironment returns the dialer specified by the proxy-related
+// variables in the environment and makes underlying connections
+// directly.
+func FromEnvironment() Dialer {
+	return FromEnvironmentUsing(Direct)
+}
+
+// FromEnvironmentUsing returns the dialer specify by the proxy-related
+// variables in the environment and makes underlying connections
+// using the provided forwarding Dialer (for instance, a *net.Dialer
+// with desired configuration).
+func FromEnvironmentUsing(forward Dialer) Dialer {
+	allProxy := allProxyEnv.Get()
+	if len(allProxy) == 0 {
+		return forward
+	}
+
+	proxyURL, err := url.Parse(allProxy)
+	if err != nil {
+		return forward
+	}
+	proxy, err := FromURL(proxyURL, forward)
+	if err != nil {
+		return forward
+	}
+
+	noProxy := noProxyEnv.Get()
+	if len(noProxy) == 0 {
+		return proxy
+	}
+
+	perHost := NewPerHost(proxy, forward)
+	perHost.AddFromString(noProxy)
+	return perHost
+}
+
+// proxySchemes is a map from URL schemes to a function that creates a Dialer
+// from a URL with such a scheme.
+var proxySchemes map[string]func(*url.URL, Dialer) (Dialer, error)
+
+// RegisterDialerType takes a URL scheme and a function to generate Dialers from
+// a URL with that scheme and a forwarding Dialer. Registered schemes are used
+// by FromURL.
+func RegisterDialerType(scheme string, f func(*url.URL, Dialer) (Dialer, error)) {
+	if proxySchemes == nil {
+		proxySchemes = make(map[string]func(*url.URL, Dialer) (Dialer, error))
+	}
+	proxySchemes[scheme] = f
+}
+
+// FromURL returns a Dialer given a URL specification and an underlying
+// Dialer for it to make network requests.
+func FromURL(u *url.URL, forward Dialer) (Dialer, error) {
+	var auth *Auth
+	if u.User != nil {
+		auth = new(Auth)
+		auth.User = u.User.Username()
+		if p, ok := u.User.Password(); ok {
+			auth.Password = p
+		}
+	}
+
+	switch u.Scheme {
+	case "socks5", "socks5h":
+		addr := u.Hostname()
+		port := u.Port()
+		if port == "" {
+			port = "1080"
+		}
+		return SOCKS5("tcp", net.JoinHostPort(addr, port), auth, forward)
+	}
+
+	// If the scheme doesn't match any of the built-in schemes, see if it
+	// was registered by another package.
+	if proxySchemes != nil {
+		if f, ok := proxySchemes[u.Scheme]; ok {
+			return f(u, forward)
+		}
+	}
+
+	return nil, errors.New("proxy: unknown scheme: " + u.Scheme)
+}
+
+var (
+	allProxyEnv = &envOnce{
+		names: []string{"ALL_PROXY", "all_proxy"},
+	}
+	noProxyEnv = &envOnce{
+		names: []string{"NO_PROXY", "no_proxy"},
+	}
+)
+
+// envOnce looks up an environment variable (optionally by multiple
+// names) once. It mitigates expensive lookups on some platforms
+// (e.g. Windows).
+// (Borrowed from net/http/transport.go)
+type envOnce struct {
+	names []string
+	once  sync.Once
+	val   string
+}
+
+func (e *envOnce) Get() string {
+	e.once.Do(e.init)
+	return e.val
+}
+
+func (e *envOnce) init() {
+	for _, n := range e.names {
+		e.val = os.Getenv(n)
+		if e.val != "" {
+			return
+		}
+	}
+}
+
+// reset is used by tests
+func (e *envOnce) reset() {
+	e.once = sync.Once{}
+	e.val = ""
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/socks5.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/socks5.go
new file mode 100644
index 000000000..c91651f96
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/net/proxy/socks5.go
@@ -0,0 +1,42 @@
+// Copyright 2011 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package proxy
+
+import (
+	"context"
+	"net"
+
+	"golang.org/x/net/internal/socks"
+)
+
+// SOCKS5 returns a Dialer that makes SOCKSv5 connections to the given
+// address with an optional username and password.
+// See RFC 1928 and RFC 1929.
+func SOCKS5(network, address string, auth *Auth, forward Dialer) (Dialer, error) {
+	d := socks.NewDialer(network, address)
+	if forward != nil {
+		if f, ok := forward.(ContextDialer); ok {
+			d.ProxyDial = func(ctx context.Context, network string, address string) (net.Conn, error) {
+				return f.DialContext(ctx, network, address)
+			}
+		} else {
+			d.ProxyDial = func(ctx context.Context, network string, address string) (net.Conn, error) {
+				return dialContext(ctx, forward, network, address)
+			}
+		}
+	}
+	if auth != nil {
+		up := socks.UsernamePassword{
+			Username: auth.User,
+			Password: auth.Password,
+		}
+		d.AuthMethods = []socks.AuthMethod{
+			socks.AuthMethodNotRequired,
+			socks.AuthMethodUsernamePassword,
+		}
+		d.Authenticate = up.Authenticate
+	}
+	return d, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/AUTHORS b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/AUTHORS
new file mode 100644
index 000000000..15167cd74
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/AUTHORS
@@ -0,0 +1,3 @@
+# This source code refers to The Go Authors for copyright purposes.
+# The master list of authors is in the main Go distribution,
+# visible at http://tip.golang.org/AUTHORS.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/CONTRIBUTORS b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/CONTRIBUTORS
new file mode 100644
index 000000000..1c4577e96
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/CONTRIBUTORS
@@ -0,0 +1,3 @@
+# This source code was written by the Go contributors.
+# The master list of contributors is in the main Go distribution,
+# visible at http://tip.golang.org/CONTRIBUTORS.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/LICENSE b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/LICENSE
new file mode 100644
index 000000000..6a66aea5e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/LICENSE
@@ -0,0 +1,27 @@
+Copyright (c) 2009 The Go Authors. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/PATENTS b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/PATENTS
new file mode 100644
index 000000000..733099041
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/PATENTS
@@ -0,0 +1,22 @@
+Additional IP Rights Grant (Patents)
+
+"This implementation" means the copyrightable works distributed by
+Google as part of the Go project.
+
+Google hereby grants to You a perpetual, worldwide, non-exclusive,
+no-charge, royalty-free, irrevocable (except as stated in this section)
+patent license to make, have made, use, offer to sell, sell, import,
+transfer and otherwise run, modify and propagate the contents of this
+implementation of Go, where such license applies only to those patent
+claims, both currently owned or controlled by Google and acquired in
+the future, licensable by Google that are necessarily infringed by this
+implementation of Go.  This grant does not include claims that would be
+infringed only as a consequence of further modification of this
+implementation.  If you or your agent or exclusive licensee institute or
+order or agree to the institution of patent litigation against any
+entity (including a cross-claim or counterclaim in a lawsuit) alleging
+that this implementation of Go or any code incorporated within this
+implementation of Go constitutes direct or contributory patent
+infringement, or inducement of patent infringement, then any patent
+rights granted to you under this License for this implementation of Go
+shall terminate as of the date such litigation is filed.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/internal/unsafeheader/unsafeheader.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/internal/unsafeheader/unsafeheader.go
new file mode 100644
index 000000000..e07899b90
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/internal/unsafeheader/unsafeheader.go
@@ -0,0 +1,30 @@
+// Copyright 2020 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Package unsafeheader contains header declarations for the Go runtime's
+// slice and string implementations.
+//
+// This package allows x/sys to use types equivalent to
+// reflect.SliceHeader and reflect.StringHeader without introducing
+// a dependency on the (relatively heavy) "reflect" package.
+package unsafeheader
+
+import (
+	"unsafe"
+)
+
+// Slice is the runtime representation of a slice.
+// It cannot be used safely or portably and its representation may change in a later release.
+type Slice struct {
+	Data unsafe.Pointer
+	Len  int
+	Cap  int
+}
+
+// String is the runtime representation of a string.
+// It cannot be used safely or portably and its representation may change in a later release.
+type String struct {
+	Data unsafe.Pointer
+	Len  int
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/.gitignore b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/.gitignore
new file mode 100644
index 000000000..e3e0fc6f8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/.gitignore
@@ -0,0 +1,2 @@
+_obj/
+unix.test
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/README.md b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/README.md
new file mode 100644
index 000000000..579d2d735
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/README.md
@@ -0,0 +1,184 @@
+# Building `sys/unix`
+
+The sys/unix package provides access to the raw system call interface of the
+underlying operating system. See: https://godoc.org/golang.org/x/sys/unix
+
+Porting Go to a new architecture/OS combination or adding syscalls, types, or
+constants to an existing architecture/OS pair requires some manual effort;
+however, there are tools that automate much of the process.
+
+## Build Systems
+
+There are currently two ways we generate the necessary files. We are currently
+migrating the build system to use containers so the builds are reproducible.
+This is being done on an OS-by-OS basis. Please update this documentation as
+components of the build system change.
+
+### Old Build System (currently for `GOOS != "linux"`)
+
+The old build system generates the Go files based on the C header files
+present on your system. This means that files
+for a given GOOS/GOARCH pair must be generated on a system with that OS and
+architecture. This also means that the generated code can differ from system
+to system, based on differences in the header files.
+
+To avoid this, if you are using the old build system, only generate the Go
+files on an installation with unmodified header files. It is also important to
+keep track of which version of the OS the files were generated from (ex.
+Darwin 14 vs Darwin 15). This makes it easier to track the progress of changes
+and have each OS upgrade correspond to a single change.
+
+To build the files for your current OS and architecture, make sure GOOS and
+GOARCH are set correctly and run `mkall.sh`. This will generate the files for
+your specific system. Running `mkall.sh -n` shows the commands that will be run.
+
+Requirements: bash, go
+
+### New Build System (currently for `GOOS == "linux"`)
+
+The new build system uses a Docker container to generate the go files directly
+from source checkouts of the kernel and various system libraries. This means
+that on any platform that supports Docker, all the files using the new build
+system can be generated at once, and generated files will not change based on
+what the person running the scripts has installed on their computer.
+
+The OS specific files for the new build system are located in the `${GOOS}`
+directory, and the build is coordinated by the `${GOOS}/mkall.go` program. When
+the kernel or system library updates, modify the Dockerfile at
+`${GOOS}/Dockerfile` to checkout the new release of the source.
+
+To build all the files under the new build system, you must be on an amd64/Linux
+system and have your GOOS and GOARCH set accordingly. Running `mkall.sh` will
+then generate all of the files for all of the GOOS/GOARCH pairs in the new build
+system. Running `mkall.sh -n` shows the commands that will be run.
+
+Requirements: bash, go, docker
+
+## Component files
+
+This section describes the various files used in the code generation process.
+It also contains instructions on how to modify these files to add a new
+architecture/OS or to add additional syscalls, types, or constants. Note that
+if you are using the new build system, the scripts/programs cannot be called normally.
+They must be called from within the docker container.
+
+### asm files
+
+The hand-written assembly file at `asm_${GOOS}_${GOARCH}.s` implements system
+call dispatch. There are three entry points:
+```
+  func Syscall(trap, a1, a2, a3 uintptr) (r1, r2, err uintptr)
+  func Syscall6(trap, a1, a2, a3, a4, a5, a6 uintptr) (r1, r2, err uintptr)
+  func RawSyscall(trap, a1, a2, a3 uintptr) (r1, r2, err uintptr)
+```
+The first and second are the standard ones; they differ only in how many
+arguments can be passed to the kernel. The third is for low-level use by the
+ForkExec wrapper. Unlike the first two, it does not call into the scheduler to
+let it know that a system call is running.
+
+When porting Go to an new architecture/OS, this file must be implemented for
+each GOOS/GOARCH pair.
+
+### mksysnum
+
+Mksysnum is a Go program located at `${GOOS}/mksysnum.go` (or `mksysnum_${GOOS}.go`
+for the old system). This program takes in a list of header files containing the
+syscall number declarations and parses them to produce the corresponding list of
+Go numeric constants. See `zsysnum_${GOOS}_${GOARCH}.go` for the generated
+constants.
+
+Adding new syscall numbers is mostly done by running the build on a sufficiently
+new installation of the target OS (or updating the source checkouts for the
+new build system). However, depending on the OS, you may need to update the
+parsing in mksysnum.
+
+### mksyscall.go
+
+The `syscall.go`, `syscall_${GOOS}.go`, `syscall_${GOOS}_${GOARCH}.go` are
+hand-written Go files which implement system calls (for unix, the specific OS,
+or the specific OS/Architecture pair respectively) that need special handling
+and list `//sys` comments giving prototypes for ones that can be generated.
+
+The mksyscall.go program takes the `//sys` and `//sysnb` comments and converts
+them into syscalls. This requires the name of the prototype in the comment to
+match a syscall number in the `zsysnum_${GOOS}_${GOARCH}.go` file. The function
+prototype can be exported (capitalized) or not.
+
+Adding a new syscall often just requires adding a new `//sys` function prototype
+with the desired arguments and a capitalized name so it is exported. However, if
+you want the interface to the syscall to be different, often one will make an
+unexported `//sys` prototype, an then write a custom wrapper in
+`syscall_${GOOS}.go`.
+
+### types files
+
+For each OS, there is a hand-written Go file at `${GOOS}/types.go` (or
+`types_${GOOS}.go` on the old system). This file includes standard C headers and
+creates Go type aliases to the corresponding C types. The file is then fed
+through godef to get the Go compatible definitions. Finally, the generated code
+is fed though mkpost.go to format the code correctly and remove any hidden or
+private identifiers. This cleaned-up code is written to
+`ztypes_${GOOS}_${GOARCH}.go`.
+
+The hardest part about preparing this file is figuring out which headers to
+include and which symbols need to be `#define`d to get the actual data
+structures that pass through to the kernel system calls. Some C libraries
+preset alternate versions for binary compatibility and translate them on the
+way in and out of system calls, but there is almost always a `#define` that can
+get the real ones.
+See `types_darwin.go` and `linux/types.go` for examples.
+
+To add a new type, add in the necessary include statement at the top of the
+file (if it is not already there) and add in a type alias line. Note that if
+your type is significantly different on different architectures, you may need
+some `#if/#elif` macros in your include statements.
+
+### mkerrors.sh
+
+This script is used to generate the system's various constants. This doesn't
+just include the error numbers and error strings, but also the signal numbers
+an a wide variety of miscellaneous constants. The constants come from the list
+of include files in the `includes_${uname}` variable. A regex then picks out
+the desired `#define` statements, and generates the corresponding Go constants.
+The error numbers and strings are generated from `#include <errno.h>`, and the
+signal numbers and strings are generated from `#include <signal.h>`. All of
+these constants are written to `zerrors_${GOOS}_${GOARCH}.go` via a C program,
+`_errors.c`, which prints out all the constants.
+
+To add a constant, add the header that includes it to the appropriate variable.
+Then, edit the regex (if necessary) to match the desired constant. Avoid making
+the regex too broad to avoid matching unintended constants.
+
+### mkmerge.go
+
+This program is used to extract duplicate const, func, and type declarations
+from the generated architecture-specific files listed below, and merge these
+into a common file for each OS.
+
+The merge is performed in the following steps:
+1. Construct the set of common code that is idential in all architecture-specific files.
+2. Write this common code to the merged file.
+3. Remove the common code from all architecture-specific files.
+
+
+## Generated files
+
+### `zerrors_${GOOS}_${GOARCH}.go`
+
+A file containing all of the system's generated error numbers, error strings,
+signal numbers, and constants. Generated by `mkerrors.sh` (see above).
+
+### `zsyscall_${GOOS}_${GOARCH}.go`
+
+A file containing all the generated syscalls for a specific GOOS and GOARCH.
+Generated by `mksyscall.go` (see above).
+
+### `zsysnum_${GOOS}_${GOARCH}.go`
+
+A list of numeric constants for all the syscall number of the specific GOOS
+and GOARCH. Generated by mksysnum (see above).
+
+### `ztypes_${GOOS}_${GOARCH}.go`
+
+A file containing Go types for passing into (or returning from) syscalls.
+Generated by godefs and the types file (see above).
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/affinity_linux.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/affinity_linux.go
new file mode 100644
index 000000000..6e5c81acd
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/affinity_linux.go
@@ -0,0 +1,86 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// CPU affinity functions
+
+package unix
+
+import (
+	"math/bits"
+	"unsafe"
+)
+
+const cpuSetSize = _CPU_SETSIZE / _NCPUBITS
+
+// CPUSet represents a CPU affinity mask.
+type CPUSet [cpuSetSize]cpuMask
+
+func schedAffinity(trap uintptr, pid int, set *CPUSet) error {
+	_, _, e := RawSyscall(trap, uintptr(pid), uintptr(unsafe.Sizeof(*set)), uintptr(unsafe.Pointer(set)))
+	if e != 0 {
+		return errnoErr(e)
+	}
+	return nil
+}
+
+// SchedGetaffinity gets the CPU affinity mask of the thread specified by pid.
+// If pid is 0 the calling thread is used.
+func SchedGetaffinity(pid int, set *CPUSet) error {
+	return schedAffinity(SYS_SCHED_GETAFFINITY, pid, set)
+}
+
+// SchedSetaffinity sets the CPU affinity mask of the thread specified by pid.
+// If pid is 0 the calling thread is used.
+func SchedSetaffinity(pid int, set *CPUSet) error {
+	return schedAffinity(SYS_SCHED_SETAFFINITY, pid, set)
+}
+
+// Zero clears the set s, so that it contains no CPUs.
+func (s *CPUSet) Zero() {
+	for i := range s {
+		s[i] = 0
+	}
+}
+
+func cpuBitsIndex(cpu int) int {
+	return cpu / _NCPUBITS
+}
+
+func cpuBitsMask(cpu int) cpuMask {
+	return cpuMask(1 << (uint(cpu) % _NCPUBITS))
+}
+
+// Set adds cpu to the set s.
+func (s *CPUSet) Set(cpu int) {
+	i := cpuBitsIndex(cpu)
+	if i < len(s) {
+		s[i] |= cpuBitsMask(cpu)
+	}
+}
+
+// Clear removes cpu from the set s.
+func (s *CPUSet) Clear(cpu int) {
+	i := cpuBitsIndex(cpu)
+	if i < len(s) {
+		s[i] &^= cpuBitsMask(cpu)
+	}
+}
+
+// IsSet reports whether cpu is in the set s.
+func (s *CPUSet) IsSet(cpu int) bool {
+	i := cpuBitsIndex(cpu)
+	if i < len(s) {
+		return s[i]&cpuBitsMask(cpu) != 0
+	}
+	return false
+}
+
+// Count returns the number of CPUs in the set s.
+func (s *CPUSet) Count() int {
+	c := 0
+	for _, b := range s {
+		c += bits.OnesCount64(uint64(b))
+	}
+	return c
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/aliases.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/aliases.go
new file mode 100644
index 000000000..951fce4d0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/aliases.go
@@ -0,0 +1,14 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris
+// +build go1.9
+
+package unix
+
+import "syscall"
+
+type Signal = syscall.Signal
+type Errno = syscall.Errno
+type SysProcAttr = syscall.SysProcAttr
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_aix_ppc64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_aix_ppc64.s
new file mode 100644
index 000000000..06f84b855
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_aix_ppc64.s
@@ -0,0 +1,17 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System calls for ppc64, AIX are implemented in runtime/syscall_aix.go
+//
+
+TEXT ·syscall6(SB),NOSPLIT,$0-88
+	JMP	syscall·syscall6(SB)
+
+TEXT ·rawSyscall6(SB),NOSPLIT,$0-88
+	JMP	syscall·rawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_darwin_386.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_darwin_386.s
new file mode 100644
index 000000000..8a7278319
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_darwin_386.s
@@ -0,0 +1,29 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System call support for 386, Darwin
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-28
+	JMP	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-40
+	JMP	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-52
+	JMP	syscall·Syscall9(SB)
+
+TEXT ·RawSyscall(SB),NOSPLIT,$0-28
+	JMP	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-40
+	JMP	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_darwin_amd64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_darwin_amd64.s
new file mode 100644
index 000000000..6321421f2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_darwin_amd64.s
@@ -0,0 +1,29 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System call support for AMD64, Darwin
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-56
+	JMP	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-104
+	JMP	syscall·Syscall9(SB)
+
+TEXT	·RawSyscall(SB),NOSPLIT,$0-56
+	JMP	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_darwin_arm.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_darwin_arm.s
new file mode 100644
index 000000000..333242d50
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_darwin_arm.s
@@ -0,0 +1,30 @@
+// Copyright 2015 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+// +build arm,darwin
+
+#include "textflag.h"
+
+//
+// System call support for ARM, Darwin
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-28
+	B	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-40
+	B	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-52
+	B	syscall·Syscall9(SB)
+
+TEXT	·RawSyscall(SB),NOSPLIT,$0-28
+	B	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-40
+	B	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_darwin_arm64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_darwin_arm64.s
new file mode 100644
index 000000000..97e017437
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_darwin_arm64.s
@@ -0,0 +1,30 @@
+// Copyright 2015 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+// +build arm64,darwin
+
+#include "textflag.h"
+
+//
+// System call support for AMD64, Darwin
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-56
+	B	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-80
+	B	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-104
+	B	syscall·Syscall9(SB)
+
+TEXT	·RawSyscall(SB),NOSPLIT,$0-56
+	B	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-80
+	B	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_dragonfly_amd64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_dragonfly_amd64.s
new file mode 100644
index 000000000..603dd5728
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_dragonfly_amd64.s
@@ -0,0 +1,29 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System call support for AMD64, DragonFly
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-56
+	JMP	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-104
+	JMP	syscall·Syscall9(SB)
+
+TEXT ·RawSyscall(SB),NOSPLIT,$0-56
+	JMP	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_freebsd_386.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_freebsd_386.s
new file mode 100644
index 000000000..c9a0a2601
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_freebsd_386.s
@@ -0,0 +1,29 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System call support for 386, FreeBSD
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-28
+	JMP	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-40
+	JMP	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-52
+	JMP	syscall·Syscall9(SB)
+
+TEXT ·RawSyscall(SB),NOSPLIT,$0-28
+	JMP	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-40
+	JMP	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_freebsd_amd64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_freebsd_amd64.s
new file mode 100644
index 000000000..35172477c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_freebsd_amd64.s
@@ -0,0 +1,29 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System call support for AMD64, FreeBSD
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-56
+	JMP	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-104
+	JMP	syscall·Syscall9(SB)
+
+TEXT ·RawSyscall(SB),NOSPLIT,$0-56
+	JMP	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_freebsd_arm.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_freebsd_arm.s
new file mode 100644
index 000000000..9227c875b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_freebsd_arm.s
@@ -0,0 +1,29 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System call support for ARM, FreeBSD
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-28
+	B	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-40
+	B	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-52
+	B	syscall·Syscall9(SB)
+
+TEXT	·RawSyscall(SB),NOSPLIT,$0-28
+	B	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-40
+	B	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_freebsd_arm64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_freebsd_arm64.s
new file mode 100644
index 000000000..d9318cbf0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_freebsd_arm64.s
@@ -0,0 +1,29 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System call support for ARM64, FreeBSD
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-56
+	JMP	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-104
+	JMP	syscall·Syscall9(SB)
+
+TEXT ·RawSyscall(SB),NOSPLIT,$0-56
+	JMP	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_386.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_386.s
new file mode 100644
index 000000000..448bebbb5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_386.s
@@ -0,0 +1,65 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System calls for 386, Linux
+//
+
+// See ../runtime/sys_linux_386.s for the reason why we always use int 0x80
+// instead of the glibc-specific "CALL 0x10(GS)".
+#define INVOKE_SYSCALL	INT	$0x80
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT ·Syscall(SB),NOSPLIT,$0-28
+	JMP	syscall·Syscall(SB)
+
+TEXT ·Syscall6(SB),NOSPLIT,$0-40
+	JMP	syscall·Syscall6(SB)
+
+TEXT ·SyscallNoError(SB),NOSPLIT,$0-24
+	CALL	runtime·entersyscall(SB)
+	MOVL	trap+0(FP), AX  // syscall entry
+	MOVL	a1+4(FP), BX
+	MOVL	a2+8(FP), CX
+	MOVL	a3+12(FP), DX
+	MOVL	$0, SI
+	MOVL	$0, DI
+	INVOKE_SYSCALL
+	MOVL	AX, r1+16(FP)
+	MOVL	DX, r2+20(FP)
+	CALL	runtime·exitsyscall(SB)
+	RET
+
+TEXT ·RawSyscall(SB),NOSPLIT,$0-28
+	JMP	syscall·RawSyscall(SB)
+
+TEXT ·RawSyscall6(SB),NOSPLIT,$0-40
+	JMP	syscall·RawSyscall6(SB)
+
+TEXT ·RawSyscallNoError(SB),NOSPLIT,$0-24
+	MOVL	trap+0(FP), AX  // syscall entry
+	MOVL	a1+4(FP), BX
+	MOVL	a2+8(FP), CX
+	MOVL	a3+12(FP), DX
+	MOVL	$0, SI
+	MOVL	$0, DI
+	INVOKE_SYSCALL
+	MOVL	AX, r1+16(FP)
+	MOVL	DX, r2+20(FP)
+	RET
+
+TEXT ·socketcall(SB),NOSPLIT,$0-36
+	JMP	syscall·socketcall(SB)
+
+TEXT ·rawsocketcall(SB),NOSPLIT,$0-36
+	JMP	syscall·rawsocketcall(SB)
+
+TEXT ·seek(SB),NOSPLIT,$0-28
+	JMP	syscall·seek(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_amd64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_amd64.s
new file mode 100644
index 000000000..c6468a958
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_amd64.s
@@ -0,0 +1,57 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System calls for AMD64, Linux
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT ·Syscall(SB),NOSPLIT,$0-56
+	JMP	syscall·Syscall(SB)
+
+TEXT ·Syscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·Syscall6(SB)
+
+TEXT ·SyscallNoError(SB),NOSPLIT,$0-48
+	CALL	runtime·entersyscall(SB)
+	MOVQ	a1+8(FP), DI
+	MOVQ	a2+16(FP), SI
+	MOVQ	a3+24(FP), DX
+	MOVQ	$0, R10
+	MOVQ	$0, R8
+	MOVQ	$0, R9
+	MOVQ	trap+0(FP), AX	// syscall entry
+	SYSCALL
+	MOVQ	AX, r1+32(FP)
+	MOVQ	DX, r2+40(FP)
+	CALL	runtime·exitsyscall(SB)
+	RET
+
+TEXT ·RawSyscall(SB),NOSPLIT,$0-56
+	JMP	syscall·RawSyscall(SB)
+
+TEXT ·RawSyscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·RawSyscall6(SB)
+
+TEXT ·RawSyscallNoError(SB),NOSPLIT,$0-48
+	MOVQ	a1+8(FP), DI
+	MOVQ	a2+16(FP), SI
+	MOVQ	a3+24(FP), DX
+	MOVQ	$0, R10
+	MOVQ	$0, R8
+	MOVQ	$0, R9
+	MOVQ	trap+0(FP), AX	// syscall entry
+	SYSCALL
+	MOVQ	AX, r1+32(FP)
+	MOVQ	DX, r2+40(FP)
+	RET
+
+TEXT ·gettimeofday(SB),NOSPLIT,$0-16
+	JMP	syscall·gettimeofday(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_arm.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_arm.s
new file mode 100644
index 000000000..cf0f3575c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_arm.s
@@ -0,0 +1,56 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System calls for arm, Linux
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT ·Syscall(SB),NOSPLIT,$0-28
+	B	syscall·Syscall(SB)
+
+TEXT ·Syscall6(SB),NOSPLIT,$0-40
+	B	syscall·Syscall6(SB)
+
+TEXT ·SyscallNoError(SB),NOSPLIT,$0-24
+	BL	runtime·entersyscall(SB)
+	MOVW	trap+0(FP), R7
+	MOVW	a1+4(FP), R0
+	MOVW	a2+8(FP), R1
+	MOVW	a3+12(FP), R2
+	MOVW	$0, R3
+	MOVW	$0, R4
+	MOVW	$0, R5
+	SWI	$0
+	MOVW	R0, r1+16(FP)
+	MOVW	$0, R0
+	MOVW	R0, r2+20(FP)
+	BL	runtime·exitsyscall(SB)
+	RET
+
+TEXT ·RawSyscall(SB),NOSPLIT,$0-28
+	B	syscall·RawSyscall(SB)
+
+TEXT ·RawSyscall6(SB),NOSPLIT,$0-40
+	B	syscall·RawSyscall6(SB)
+
+TEXT ·RawSyscallNoError(SB),NOSPLIT,$0-24
+	MOVW	trap+0(FP), R7	// syscall entry
+	MOVW	a1+4(FP), R0
+	MOVW	a2+8(FP), R1
+	MOVW	a3+12(FP), R2
+	SWI	$0
+	MOVW	R0, r1+16(FP)
+	MOVW	$0, R0
+	MOVW	R0, r2+20(FP)
+	RET
+
+TEXT ·seek(SB),NOSPLIT,$0-28
+	B	syscall·seek(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_arm64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_arm64.s
new file mode 100644
index 000000000..afe6fdf6b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_arm64.s
@@ -0,0 +1,52 @@
+// Copyright 2015 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build linux
+// +build arm64
+// +build !gccgo
+
+#include "textflag.h"
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT ·Syscall(SB),NOSPLIT,$0-56
+	B	syscall·Syscall(SB)
+
+TEXT ·Syscall6(SB),NOSPLIT,$0-80
+	B	syscall·Syscall6(SB)
+
+TEXT ·SyscallNoError(SB),NOSPLIT,$0-48
+	BL	runtime·entersyscall(SB)
+	MOVD	a1+8(FP), R0
+	MOVD	a2+16(FP), R1
+	MOVD	a3+24(FP), R2
+	MOVD	$0, R3
+	MOVD	$0, R4
+	MOVD	$0, R5
+	MOVD	trap+0(FP), R8	// syscall entry
+	SVC
+	MOVD	R0, r1+32(FP)	// r1
+	MOVD	R1, r2+40(FP)	// r2
+	BL	runtime·exitsyscall(SB)
+	RET
+
+TEXT ·RawSyscall(SB),NOSPLIT,$0-56
+	B	syscall·RawSyscall(SB)
+
+TEXT ·RawSyscall6(SB),NOSPLIT,$0-80
+	B	syscall·RawSyscall6(SB)
+
+TEXT ·RawSyscallNoError(SB),NOSPLIT,$0-48
+	MOVD	a1+8(FP), R0
+	MOVD	a2+16(FP), R1
+	MOVD	a3+24(FP), R2
+	MOVD	$0, R3
+	MOVD	$0, R4
+	MOVD	$0, R5
+	MOVD	trap+0(FP), R8	// syscall entry
+	SVC
+	MOVD	R0, r1+32(FP)
+	MOVD	R1, r2+40(FP)
+	RET
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_mips64x.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_mips64x.s
new file mode 100644
index 000000000..ab9d63831
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_mips64x.s
@@ -0,0 +1,56 @@
+// Copyright 2015 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build linux
+// +build mips64 mips64le
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System calls for mips64, Linux
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT ·Syscall(SB),NOSPLIT,$0-56
+	JMP	syscall·Syscall(SB)
+
+TEXT ·Syscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·Syscall6(SB)
+
+TEXT ·SyscallNoError(SB),NOSPLIT,$0-48
+	JAL	runtime·entersyscall(SB)
+	MOVV	a1+8(FP), R4
+	MOVV	a2+16(FP), R5
+	MOVV	a3+24(FP), R6
+	MOVV	R0, R7
+	MOVV	R0, R8
+	MOVV	R0, R9
+	MOVV	trap+0(FP), R2	// syscall entry
+	SYSCALL
+	MOVV	R2, r1+32(FP)
+	MOVV	R3, r2+40(FP)
+	JAL	runtime·exitsyscall(SB)
+	RET
+
+TEXT ·RawSyscall(SB),NOSPLIT,$0-56
+	JMP	syscall·RawSyscall(SB)
+
+TEXT ·RawSyscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·RawSyscall6(SB)
+
+TEXT ·RawSyscallNoError(SB),NOSPLIT,$0-48
+	MOVV	a1+8(FP), R4
+	MOVV	a2+16(FP), R5
+	MOVV	a3+24(FP), R6
+	MOVV	R0, R7
+	MOVV	R0, R8
+	MOVV	R0, R9
+	MOVV	trap+0(FP), R2	// syscall entry
+	SYSCALL
+	MOVV	R2, r1+32(FP)
+	MOVV	R3, r2+40(FP)
+	RET
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_mipsx.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_mipsx.s
new file mode 100644
index 000000000..99e539904
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_mipsx.s
@@ -0,0 +1,54 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build linux
+// +build mips mipsle
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System calls for mips, Linux
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT ·Syscall(SB),NOSPLIT,$0-28
+	JMP syscall·Syscall(SB)
+
+TEXT ·Syscall6(SB),NOSPLIT,$0-40
+	JMP syscall·Syscall6(SB)
+
+TEXT ·Syscall9(SB),NOSPLIT,$0-52
+	JMP syscall·Syscall9(SB)
+
+TEXT ·SyscallNoError(SB),NOSPLIT,$0-24
+	JAL	runtime·entersyscall(SB)
+	MOVW	a1+4(FP), R4
+	MOVW	a2+8(FP), R5
+	MOVW	a3+12(FP), R6
+	MOVW	R0, R7
+	MOVW	trap+0(FP), R2	// syscall entry
+	SYSCALL
+	MOVW	R2, r1+16(FP)	// r1
+	MOVW	R3, r2+20(FP)	// r2
+	JAL	runtime·exitsyscall(SB)
+	RET
+
+TEXT ·RawSyscall(SB),NOSPLIT,$0-28
+	JMP syscall·RawSyscall(SB)
+
+TEXT ·RawSyscall6(SB),NOSPLIT,$0-40
+	JMP syscall·RawSyscall6(SB)
+
+TEXT ·RawSyscallNoError(SB),NOSPLIT,$0-24
+	MOVW	a1+4(FP), R4
+	MOVW	a2+8(FP), R5
+	MOVW	a3+12(FP), R6
+	MOVW	trap+0(FP), R2	// syscall entry
+	SYSCALL
+	MOVW	R2, r1+16(FP)
+	MOVW	R3, r2+20(FP)
+	RET
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_ppc64x.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_ppc64x.s
new file mode 100644
index 000000000..88f712557
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_ppc64x.s
@@ -0,0 +1,44 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build linux
+// +build ppc64 ppc64le
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System calls for ppc64, Linux
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT ·SyscallNoError(SB),NOSPLIT,$0-48
+	BL	runtime·entersyscall(SB)
+	MOVD	a1+8(FP), R3
+	MOVD	a2+16(FP), R4
+	MOVD	a3+24(FP), R5
+	MOVD	R0, R6
+	MOVD	R0, R7
+	MOVD	R0, R8
+	MOVD	trap+0(FP), R9	// syscall entry
+	SYSCALL R9
+	MOVD	R3, r1+32(FP)
+	MOVD	R4, r2+40(FP)
+	BL	runtime·exitsyscall(SB)
+	RET
+
+TEXT ·RawSyscallNoError(SB),NOSPLIT,$0-48
+	MOVD	a1+8(FP), R3
+	MOVD	a2+16(FP), R4
+	MOVD	a3+24(FP), R5
+	MOVD	R0, R6
+	MOVD	R0, R7
+	MOVD	R0, R8
+	MOVD	trap+0(FP), R9	// syscall entry
+	SYSCALL R9
+	MOVD	R3, r1+32(FP)
+	MOVD	R4, r2+40(FP)
+	RET
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_riscv64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_riscv64.s
new file mode 100644
index 000000000..3cfefed2e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_riscv64.s
@@ -0,0 +1,47 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build riscv64,!gccgo
+
+#include "textflag.h"
+
+//
+// System calls for linux/riscv64.
+//
+// Where available, just jump to package syscall's implementation of
+// these functions.
+
+TEXT ·Syscall(SB),NOSPLIT,$0-56
+	JMP	syscall·Syscall(SB)
+
+TEXT ·Syscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·Syscall6(SB)
+
+TEXT ·SyscallNoError(SB),NOSPLIT,$0-48
+	CALL	runtime·entersyscall(SB)
+	MOV	a1+8(FP), A0
+	MOV	a2+16(FP), A1
+	MOV	a3+24(FP), A2
+	MOV	trap+0(FP), A7	// syscall entry
+	ECALL
+	MOV	A0, r1+32(FP)	// r1
+	MOV	A1, r2+40(FP)	// r2
+	CALL	runtime·exitsyscall(SB)
+	RET
+
+TEXT ·RawSyscall(SB),NOSPLIT,$0-56
+	JMP	syscall·RawSyscall(SB)
+
+TEXT ·RawSyscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·RawSyscall6(SB)
+
+TEXT ·RawSyscallNoError(SB),NOSPLIT,$0-48
+	MOV	a1+8(FP), A0
+	MOV	a2+16(FP), A1
+	MOV	a3+24(FP), A2
+	MOV	trap+0(FP), A7	// syscall entry
+	ECALL
+	MOV	A0, r1+32(FP)
+	MOV	A1, r2+40(FP)
+	RET
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_s390x.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_s390x.s
new file mode 100644
index 000000000..a5a863c6b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_linux_s390x.s
@@ -0,0 +1,56 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build s390x
+// +build linux
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System calls for s390x, Linux
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT ·Syscall(SB),NOSPLIT,$0-56
+	BR	syscall·Syscall(SB)
+
+TEXT ·Syscall6(SB),NOSPLIT,$0-80
+	BR	syscall·Syscall6(SB)
+
+TEXT ·SyscallNoError(SB),NOSPLIT,$0-48
+	BL	runtime·entersyscall(SB)
+	MOVD	a1+8(FP), R2
+	MOVD	a2+16(FP), R3
+	MOVD	a3+24(FP), R4
+	MOVD	$0, R5
+	MOVD	$0, R6
+	MOVD	$0, R7
+	MOVD	trap+0(FP), R1	// syscall entry
+	SYSCALL
+	MOVD	R2, r1+32(FP)
+	MOVD	R3, r2+40(FP)
+	BL	runtime·exitsyscall(SB)
+	RET
+
+TEXT ·RawSyscall(SB),NOSPLIT,$0-56
+	BR	syscall·RawSyscall(SB)
+
+TEXT ·RawSyscall6(SB),NOSPLIT,$0-80
+	BR	syscall·RawSyscall6(SB)
+
+TEXT ·RawSyscallNoError(SB),NOSPLIT,$0-48
+	MOVD	a1+8(FP), R2
+	MOVD	a2+16(FP), R3
+	MOVD	a3+24(FP), R4
+	MOVD	$0, R5
+	MOVD	$0, R6
+	MOVD	$0, R7
+	MOVD	trap+0(FP), R1	// syscall entry
+	SYSCALL
+	MOVD	R2, r1+32(FP)
+	MOVD	R3, r2+40(FP)
+	RET
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_netbsd_386.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_netbsd_386.s
new file mode 100644
index 000000000..48bdcd763
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_netbsd_386.s
@@ -0,0 +1,29 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System call support for 386, NetBSD
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-28
+	JMP	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-40
+	JMP	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-52
+	JMP	syscall·Syscall9(SB)
+
+TEXT ·RawSyscall(SB),NOSPLIT,$0-28
+	JMP	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-40
+	JMP	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_netbsd_amd64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_netbsd_amd64.s
new file mode 100644
index 000000000..2ede05c72
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_netbsd_amd64.s
@@ -0,0 +1,29 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System call support for AMD64, NetBSD
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-56
+	JMP	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-104
+	JMP	syscall·Syscall9(SB)
+
+TEXT	·RawSyscall(SB),NOSPLIT,$0-56
+	JMP	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_netbsd_arm.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_netbsd_arm.s
new file mode 100644
index 000000000..e8928571c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_netbsd_arm.s
@@ -0,0 +1,29 @@
+// Copyright 2013 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System call support for ARM, NetBSD
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-28
+	B	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-40
+	B	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-52
+	B	syscall·Syscall9(SB)
+
+TEXT	·RawSyscall(SB),NOSPLIT,$0-28
+	B	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-40
+	B	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_netbsd_arm64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_netbsd_arm64.s
new file mode 100644
index 000000000..6f98ba5a3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_netbsd_arm64.s
@@ -0,0 +1,29 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System call support for ARM64, NetBSD
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-56
+	B	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-80
+	B	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-104
+	B	syscall·Syscall9(SB)
+
+TEXT	·RawSyscall(SB),NOSPLIT,$0-56
+	B	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-80
+	B	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_386.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_386.s
new file mode 100644
index 000000000..00576f3c8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_386.s
@@ -0,0 +1,29 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System call support for 386, OpenBSD
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-28
+	JMP	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-40
+	JMP	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-52
+	JMP	syscall·Syscall9(SB)
+
+TEXT ·RawSyscall(SB),NOSPLIT,$0-28
+	JMP	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-40
+	JMP	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_amd64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_amd64.s
new file mode 100644
index 000000000..790ef77f8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_amd64.s
@@ -0,0 +1,29 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System call support for AMD64, OpenBSD
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-56
+	JMP	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-104
+	JMP	syscall·Syscall9(SB)
+
+TEXT	·RawSyscall(SB),NOSPLIT,$0-56
+	JMP	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_arm.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_arm.s
new file mode 100644
index 000000000..469bfa100
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_arm.s
@@ -0,0 +1,29 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System call support for ARM, OpenBSD
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-28
+	B	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-40
+	B	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-52
+	B	syscall·Syscall9(SB)
+
+TEXT	·RawSyscall(SB),NOSPLIT,$0-28
+	B	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-40
+	B	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_arm64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_arm64.s
new file mode 100644
index 000000000..0cedea3d3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_arm64.s
@@ -0,0 +1,29 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System call support for arm64, OpenBSD
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-56
+	JMP	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-104
+	JMP	syscall·Syscall9(SB)
+
+TEXT	·RawSyscall(SB),NOSPLIT,$0-56
+	JMP	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_mips64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_mips64.s
new file mode 100644
index 000000000..567a4763c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_openbsd_mips64.s
@@ -0,0 +1,29 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System call support for mips64, OpenBSD
+//
+
+// Just jump to package syscall's implementation for all these functions.
+// The runtime may know about them.
+
+TEXT	·Syscall(SB),NOSPLIT,$0-56
+	JMP	syscall·Syscall(SB)
+
+TEXT	·Syscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·Syscall6(SB)
+
+TEXT	·Syscall9(SB),NOSPLIT,$0-104
+	JMP	syscall·Syscall9(SB)
+
+TEXT	·RawSyscall(SB),NOSPLIT,$0-56
+	JMP	syscall·RawSyscall(SB)
+
+TEXT	·RawSyscall6(SB),NOSPLIT,$0-80
+	JMP	syscall·RawSyscall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_solaris_amd64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_solaris_amd64.s
new file mode 100644
index 000000000..ded8260f3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/asm_solaris_amd64.s
@@ -0,0 +1,17 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !gccgo
+
+#include "textflag.h"
+
+//
+// System calls for amd64, Solaris are implemented in runtime/syscall_solaris.go
+//
+
+TEXT ·sysvicall6(SB),NOSPLIT,$0-88
+	JMP	syscall·sysvicall6(SB)
+
+TEXT ·rawSysvicall6(SB),NOSPLIT,$0-88
+	JMP	syscall·rawSysvicall6(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/bluetooth_linux.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/bluetooth_linux.go
new file mode 100644
index 000000000..a178a6149
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/bluetooth_linux.go
@@ -0,0 +1,36 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Bluetooth sockets and messages
+
+package unix
+
+// Bluetooth Protocols
+const (
+	BTPROTO_L2CAP  = 0
+	BTPROTO_HCI    = 1
+	BTPROTO_SCO    = 2
+	BTPROTO_RFCOMM = 3
+	BTPROTO_BNEP   = 4
+	BTPROTO_CMTP   = 5
+	BTPROTO_HIDP   = 6
+	BTPROTO_AVDTP  = 7
+)
+
+const (
+	HCI_CHANNEL_RAW     = 0
+	HCI_CHANNEL_USER    = 1
+	HCI_CHANNEL_MONITOR = 2
+	HCI_CHANNEL_CONTROL = 3
+	HCI_CHANNEL_LOGGING = 4
+)
+
+// Socketoption Level
+const (
+	SOL_BLUETOOTH = 0x112
+	SOL_HCI       = 0x0
+	SOL_L2CAP     = 0x6
+	SOL_RFCOMM    = 0x12
+	SOL_SCO       = 0x11
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/cap_freebsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/cap_freebsd.go
new file mode 100644
index 000000000..df5204877
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/cap_freebsd.go
@@ -0,0 +1,195 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build freebsd
+
+package unix
+
+import (
+	"errors"
+	"fmt"
+)
+
+// Go implementation of C mostly found in /usr/src/sys/kern/subr_capability.c
+
+const (
+	// This is the version of CapRights this package understands. See C implementation for parallels.
+	capRightsGoVersion = CAP_RIGHTS_VERSION_00
+	capArSizeMin       = CAP_RIGHTS_VERSION_00 + 2
+	capArSizeMax       = capRightsGoVersion + 2
+)
+
+var (
+	bit2idx = []int{
+		-1, 0, 1, -1, 2, -1, -1, -1, 3, -1, -1, -1, -1, -1, -1, -1,
+		4, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
+	}
+)
+
+func capidxbit(right uint64) int {
+	return int((right >> 57) & 0x1f)
+}
+
+func rightToIndex(right uint64) (int, error) {
+	idx := capidxbit(right)
+	if idx < 0 || idx >= len(bit2idx) {
+		return -2, fmt.Errorf("index for right 0x%x out of range", right)
+	}
+	return bit2idx[idx], nil
+}
+
+func caprver(right uint64) int {
+	return int(right >> 62)
+}
+
+func capver(rights *CapRights) int {
+	return caprver(rights.Rights[0])
+}
+
+func caparsize(rights *CapRights) int {
+	return capver(rights) + 2
+}
+
+// CapRightsSet sets the permissions in setrights in rights.
+func CapRightsSet(rights *CapRights, setrights []uint64) error {
+	// This is essentially a copy of cap_rights_vset()
+	if capver(rights) != CAP_RIGHTS_VERSION_00 {
+		return fmt.Errorf("bad rights version %d", capver(rights))
+	}
+
+	n := caparsize(rights)
+	if n < capArSizeMin || n > capArSizeMax {
+		return errors.New("bad rights size")
+	}
+
+	for _, right := range setrights {
+		if caprver(right) != CAP_RIGHTS_VERSION_00 {
+			return errors.New("bad right version")
+		}
+		i, err := rightToIndex(right)
+		if err != nil {
+			return err
+		}
+		if i >= n {
+			return errors.New("index overflow")
+		}
+		if capidxbit(rights.Rights[i]) != capidxbit(right) {
+			return errors.New("index mismatch")
+		}
+		rights.Rights[i] |= right
+		if capidxbit(rights.Rights[i]) != capidxbit(right) {
+			return errors.New("index mismatch (after assign)")
+		}
+	}
+
+	return nil
+}
+
+// CapRightsClear clears the permissions in clearrights from rights.
+func CapRightsClear(rights *CapRights, clearrights []uint64) error {
+	// This is essentially a copy of cap_rights_vclear()
+	if capver(rights) != CAP_RIGHTS_VERSION_00 {
+		return fmt.Errorf("bad rights version %d", capver(rights))
+	}
+
+	n := caparsize(rights)
+	if n < capArSizeMin || n > capArSizeMax {
+		return errors.New("bad rights size")
+	}
+
+	for _, right := range clearrights {
+		if caprver(right) != CAP_RIGHTS_VERSION_00 {
+			return errors.New("bad right version")
+		}
+		i, err := rightToIndex(right)
+		if err != nil {
+			return err
+		}
+		if i >= n {
+			return errors.New("index overflow")
+		}
+		if capidxbit(rights.Rights[i]) != capidxbit(right) {
+			return errors.New("index mismatch")
+		}
+		rights.Rights[i] &= ^(right & 0x01FFFFFFFFFFFFFF)
+		if capidxbit(rights.Rights[i]) != capidxbit(right) {
+			return errors.New("index mismatch (after assign)")
+		}
+	}
+
+	return nil
+}
+
+// CapRightsIsSet checks whether all the permissions in setrights are present in rights.
+func CapRightsIsSet(rights *CapRights, setrights []uint64) (bool, error) {
+	// This is essentially a copy of cap_rights_is_vset()
+	if capver(rights) != CAP_RIGHTS_VERSION_00 {
+		return false, fmt.Errorf("bad rights version %d", capver(rights))
+	}
+
+	n := caparsize(rights)
+	if n < capArSizeMin || n > capArSizeMax {
+		return false, errors.New("bad rights size")
+	}
+
+	for _, right := range setrights {
+		if caprver(right) != CAP_RIGHTS_VERSION_00 {
+			return false, errors.New("bad right version")
+		}
+		i, err := rightToIndex(right)
+		if err != nil {
+			return false, err
+		}
+		if i >= n {
+			return false, errors.New("index overflow")
+		}
+		if capidxbit(rights.Rights[i]) != capidxbit(right) {
+			return false, errors.New("index mismatch")
+		}
+		if (rights.Rights[i] & right) != right {
+			return false, nil
+		}
+	}
+
+	return true, nil
+}
+
+func capright(idx uint64, bit uint64) uint64 {
+	return ((1 << (57 + idx)) | bit)
+}
+
+// CapRightsInit returns a pointer to an initialised CapRights structure filled with rights.
+// See man cap_rights_init(3) and rights(4).
+func CapRightsInit(rights []uint64) (*CapRights, error) {
+	var r CapRights
+	r.Rights[0] = (capRightsGoVersion << 62) | capright(0, 0)
+	r.Rights[1] = capright(1, 0)
+
+	err := CapRightsSet(&r, rights)
+	if err != nil {
+		return nil, err
+	}
+	return &r, nil
+}
+
+// CapRightsLimit reduces the operations permitted on fd to at most those contained in rights.
+// The capability rights on fd can never be increased by CapRightsLimit.
+// See man cap_rights_limit(2) and rights(4).
+func CapRightsLimit(fd uintptr, rights *CapRights) error {
+	return capRightsLimit(int(fd), rights)
+}
+
+// CapRightsGet returns a CapRights structure containing the operations permitted on fd.
+// See man cap_rights_get(3) and rights(4).
+func CapRightsGet(fd uintptr) (*CapRights, error) {
+	r, err := CapRightsInit(nil)
+	if err != nil {
+		return nil, err
+	}
+	err = capRightsGet(capRightsGoVersion, int(fd), r)
+	if err != nil {
+		return nil, err
+	}
+	return r, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/constants.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/constants.go
new file mode 100644
index 000000000..3a6ac648d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/constants.go
@@ -0,0 +1,13 @@
+// Copyright 2015 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris
+
+package unix
+
+const (
+	R_OK = 0x4
+	W_OK = 0x2
+	X_OK = 0x1
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_aix_ppc.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_aix_ppc.go
new file mode 100644
index 000000000..5e5fb4510
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_aix_ppc.go
@@ -0,0 +1,27 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix
+// +build ppc
+
+// Functions to access/create device major and minor numbers matching the
+// encoding used by AIX.
+
+package unix
+
+// Major returns the major component of a Linux device number.
+func Major(dev uint64) uint32 {
+	return uint32((dev >> 16) & 0xffff)
+}
+
+// Minor returns the minor component of a Linux device number.
+func Minor(dev uint64) uint32 {
+	return uint32(dev & 0xffff)
+}
+
+// Mkdev returns a Linux device number generated from the given major and minor
+// components.
+func Mkdev(major, minor uint32) uint64 {
+	return uint64(((major) << 16) | (minor))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_aix_ppc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_aix_ppc64.go
new file mode 100644
index 000000000..8b401244c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_aix_ppc64.go
@@ -0,0 +1,29 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix
+// +build ppc64
+
+// Functions to access/create device major and minor numbers matching the
+// encoding used AIX.
+
+package unix
+
+// Major returns the major component of a Linux device number.
+func Major(dev uint64) uint32 {
+	return uint32((dev & 0x3fffffff00000000) >> 32)
+}
+
+// Minor returns the minor component of a Linux device number.
+func Minor(dev uint64) uint32 {
+	return uint32((dev & 0x00000000ffffffff) >> 0)
+}
+
+// Mkdev returns a Linux device number generated from the given major and minor
+// components.
+func Mkdev(major, minor uint32) uint64 {
+	var DEVNO64 uint64
+	DEVNO64 = 0x8000000000000000
+	return ((uint64(major) << 32) | (uint64(minor) & 0x00000000FFFFFFFF) | DEVNO64)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_darwin.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_darwin.go
new file mode 100644
index 000000000..8d1dc0fa3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_darwin.go
@@ -0,0 +1,24 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Functions to access/create device major and minor numbers matching the
+// encoding used in Darwin's sys/types.h header.
+
+package unix
+
+// Major returns the major component of a Darwin device number.
+func Major(dev uint64) uint32 {
+	return uint32((dev >> 24) & 0xff)
+}
+
+// Minor returns the minor component of a Darwin device number.
+func Minor(dev uint64) uint32 {
+	return uint32(dev & 0xffffff)
+}
+
+// Mkdev returns a Darwin device number generated from the given major and minor
+// components.
+func Mkdev(major, minor uint32) uint64 {
+	return (uint64(major) << 24) | uint64(minor)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_dragonfly.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_dragonfly.go
new file mode 100644
index 000000000..8502f202c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_dragonfly.go
@@ -0,0 +1,30 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Functions to access/create device major and minor numbers matching the
+// encoding used in Dragonfly's sys/types.h header.
+//
+// The information below is extracted and adapted from sys/types.h:
+//
+// Minor gives a cookie instead of an index since in order to avoid changing the
+// meanings of bits 0-15 or wasting time and space shifting bits 16-31 for
+// devices that don't use them.
+
+package unix
+
+// Major returns the major component of a DragonFlyBSD device number.
+func Major(dev uint64) uint32 {
+	return uint32((dev >> 8) & 0xff)
+}
+
+// Minor returns the minor component of a DragonFlyBSD device number.
+func Minor(dev uint64) uint32 {
+	return uint32(dev & 0xffff00ff)
+}
+
+// Mkdev returns a DragonFlyBSD device number generated from the given major and
+// minor components.
+func Mkdev(major, minor uint32) uint64 {
+	return (uint64(major) << 8) | uint64(minor)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_freebsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_freebsd.go
new file mode 100644
index 000000000..eba3b4bd3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_freebsd.go
@@ -0,0 +1,30 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Functions to access/create device major and minor numbers matching the
+// encoding used in FreeBSD's sys/types.h header.
+//
+// The information below is extracted and adapted from sys/types.h:
+//
+// Minor gives a cookie instead of an index since in order to avoid changing the
+// meanings of bits 0-15 or wasting time and space shifting bits 16-31 for
+// devices that don't use them.
+
+package unix
+
+// Major returns the major component of a FreeBSD device number.
+func Major(dev uint64) uint32 {
+	return uint32((dev >> 8) & 0xff)
+}
+
+// Minor returns the minor component of a FreeBSD device number.
+func Minor(dev uint64) uint32 {
+	return uint32(dev & 0xffff00ff)
+}
+
+// Mkdev returns a FreeBSD device number generated from the given major and
+// minor components.
+func Mkdev(major, minor uint32) uint64 {
+	return (uint64(major) << 8) | uint64(minor)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_linux.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_linux.go
new file mode 100644
index 000000000..d165d6f30
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_linux.go
@@ -0,0 +1,42 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Functions to access/create device major and minor numbers matching the
+// encoding used by the Linux kernel and glibc.
+//
+// The information below is extracted and adapted from bits/sysmacros.h in the
+// glibc sources:
+//
+// dev_t in glibc is 64-bit, with 32-bit major and minor numbers. glibc's
+// default encoding is MMMM Mmmm mmmM MMmm, where M is a hex digit of the major
+// number and m is a hex digit of the minor number. This is backward compatible
+// with legacy systems where dev_t is 16 bits wide, encoded as MMmm. It is also
+// backward compatible with the Linux kernel, which for some architectures uses
+// 32-bit dev_t, encoded as mmmM MMmm.
+
+package unix
+
+// Major returns the major component of a Linux device number.
+func Major(dev uint64) uint32 {
+	major := uint32((dev & 0x00000000000fff00) >> 8)
+	major |= uint32((dev & 0xfffff00000000000) >> 32)
+	return major
+}
+
+// Minor returns the minor component of a Linux device number.
+func Minor(dev uint64) uint32 {
+	minor := uint32((dev & 0x00000000000000ff) >> 0)
+	minor |= uint32((dev & 0x00000ffffff00000) >> 12)
+	return minor
+}
+
+// Mkdev returns a Linux device number generated from the given major and minor
+// components.
+func Mkdev(major, minor uint32) uint64 {
+	dev := (uint64(major) & 0x00000fff) << 8
+	dev |= (uint64(major) & 0xfffff000) << 32
+	dev |= (uint64(minor) & 0x000000ff) << 0
+	dev |= (uint64(minor) & 0xffffff00) << 12
+	return dev
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_netbsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_netbsd.go
new file mode 100644
index 000000000..b4a203d0c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_netbsd.go
@@ -0,0 +1,29 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Functions to access/create device major and minor numbers matching the
+// encoding used in NetBSD's sys/types.h header.
+
+package unix
+
+// Major returns the major component of a NetBSD device number.
+func Major(dev uint64) uint32 {
+	return uint32((dev & 0x000fff00) >> 8)
+}
+
+// Minor returns the minor component of a NetBSD device number.
+func Minor(dev uint64) uint32 {
+	minor := uint32((dev & 0x000000ff) >> 0)
+	minor |= uint32((dev & 0xfff00000) >> 12)
+	return minor
+}
+
+// Mkdev returns a NetBSD device number generated from the given major and minor
+// components.
+func Mkdev(major, minor uint32) uint64 {
+	dev := (uint64(major) << 8) & 0x000fff00
+	dev |= (uint64(minor) << 12) & 0xfff00000
+	dev |= (uint64(minor) << 0) & 0x000000ff
+	return dev
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_openbsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_openbsd.go
new file mode 100644
index 000000000..f3430c42f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dev_openbsd.go
@@ -0,0 +1,29 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Functions to access/create device major and minor numbers matching the
+// encoding used in OpenBSD's sys/types.h header.
+
+package unix
+
+// Major returns the major component of an OpenBSD device number.
+func Major(dev uint64) uint32 {
+	return uint32((dev & 0x0000ff00) >> 8)
+}
+
+// Minor returns the minor component of an OpenBSD device number.
+func Minor(dev uint64) uint32 {
+	minor := uint32((dev & 0x000000ff) >> 0)
+	minor |= uint32((dev & 0xffff0000) >> 8)
+	return minor
+}
+
+// Mkdev returns an OpenBSD device number generated from the given major and minor
+// components.
+func Mkdev(major, minor uint32) uint64 {
+	dev := (uint64(major) << 8) & 0x0000ff00
+	dev |= (uint64(minor) << 8) & 0xffff0000
+	dev |= (uint64(minor) << 0) & 0x000000ff
+	return dev
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dirent.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dirent.go
new file mode 100644
index 000000000..304016b68
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/dirent.go
@@ -0,0 +1,102 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris
+
+package unix
+
+import "unsafe"
+
+// readInt returns the size-bytes unsigned integer in native byte order at offset off.
+func readInt(b []byte, off, size uintptr) (u uint64, ok bool) {
+	if len(b) < int(off+size) {
+		return 0, false
+	}
+	if isBigEndian {
+		return readIntBE(b[off:], size), true
+	}
+	return readIntLE(b[off:], size), true
+}
+
+func readIntBE(b []byte, size uintptr) uint64 {
+	switch size {
+	case 1:
+		return uint64(b[0])
+	case 2:
+		_ = b[1] // bounds check hint to compiler; see golang.org/issue/14808
+		return uint64(b[1]) | uint64(b[0])<<8
+	case 4:
+		_ = b[3] // bounds check hint to compiler; see golang.org/issue/14808
+		return uint64(b[3]) | uint64(b[2])<<8 | uint64(b[1])<<16 | uint64(b[0])<<24
+	case 8:
+		_ = b[7] // bounds check hint to compiler; see golang.org/issue/14808
+		return uint64(b[7]) | uint64(b[6])<<8 | uint64(b[5])<<16 | uint64(b[4])<<24 |
+			uint64(b[3])<<32 | uint64(b[2])<<40 | uint64(b[1])<<48 | uint64(b[0])<<56
+	default:
+		panic("syscall: readInt with unsupported size")
+	}
+}
+
+func readIntLE(b []byte, size uintptr) uint64 {
+	switch size {
+	case 1:
+		return uint64(b[0])
+	case 2:
+		_ = b[1] // bounds check hint to compiler; see golang.org/issue/14808
+		return uint64(b[0]) | uint64(b[1])<<8
+	case 4:
+		_ = b[3] // bounds check hint to compiler; see golang.org/issue/14808
+		return uint64(b[0]) | uint64(b[1])<<8 | uint64(b[2])<<16 | uint64(b[3])<<24
+	case 8:
+		_ = b[7] // bounds check hint to compiler; see golang.org/issue/14808
+		return uint64(b[0]) | uint64(b[1])<<8 | uint64(b[2])<<16 | uint64(b[3])<<24 |
+			uint64(b[4])<<32 | uint64(b[5])<<40 | uint64(b[6])<<48 | uint64(b[7])<<56
+	default:
+		panic("syscall: readInt with unsupported size")
+	}
+}
+
+// ParseDirent parses up to max directory entries in buf,
+// appending the names to names. It returns the number of
+// bytes consumed from buf, the number of entries added
+// to names, and the new names slice.
+func ParseDirent(buf []byte, max int, names []string) (consumed int, count int, newnames []string) {
+	origlen := len(buf)
+	count = 0
+	for max != 0 && len(buf) > 0 {
+		reclen, ok := direntReclen(buf)
+		if !ok || reclen > uint64(len(buf)) {
+			return origlen, count, names
+		}
+		rec := buf[:reclen]
+		buf = buf[reclen:]
+		ino, ok := direntIno(rec)
+		if !ok {
+			break
+		}
+		if ino == 0 { // File absent in directory.
+			continue
+		}
+		const namoff = uint64(unsafe.Offsetof(Dirent{}.Name))
+		namlen, ok := direntNamlen(rec)
+		if !ok || namoff+namlen > uint64(len(rec)) {
+			break
+		}
+		name := rec[namoff : namoff+namlen]
+		for i, c := range name {
+			if c == 0 {
+				name = name[:i]
+				break
+			}
+		}
+		// Check for useless names before allocating a string.
+		if string(name) == "." || string(name) == ".." {
+			continue
+		}
+		max--
+		count++
+		names = append(names, string(name))
+	}
+	return origlen - len(buf), count, names
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/endian_big.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/endian_big.go
new file mode 100644
index 000000000..5e9269063
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/endian_big.go
@@ -0,0 +1,9 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+//
+// +build ppc64 s390x mips mips64
+
+package unix
+
+const isBigEndian = true
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/endian_little.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/endian_little.go
new file mode 100644
index 000000000..bcdb5d30e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/endian_little.go
@@ -0,0 +1,9 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+//
+// +build 386 amd64 amd64p32 arm arm64 ppc64le mipsle mips64le riscv64
+
+package unix
+
+const isBigEndian = false
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/env_unix.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/env_unix.go
new file mode 100644
index 000000000..84178b0a1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/env_unix.go
@@ -0,0 +1,31 @@
+// Copyright 2010 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris
+
+// Unix environment variables.
+
+package unix
+
+import "syscall"
+
+func Getenv(key string) (value string, found bool) {
+	return syscall.Getenv(key)
+}
+
+func Setenv(key, value string) error {
+	return syscall.Setenv(key, value)
+}
+
+func Clearenv() {
+	syscall.Clearenv()
+}
+
+func Environ() []string {
+	return syscall.Environ()
+}
+
+func Unsetenv(key string) error {
+	return syscall.Unsetenv(key)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/errors_freebsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/errors_freebsd_386.go
new file mode 100644
index 000000000..761db66ef
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/errors_freebsd_386.go
@@ -0,0 +1,233 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Constants that were deprecated or moved to enums in the FreeBSD headers. Keep
+// them here for backwards compatibility.
+
+package unix
+
+const (
+	DLT_HHDLC                         = 0x79
+	IFF_SMART                         = 0x20
+	IFT_1822                          = 0x2
+	IFT_A12MPPSWITCH                  = 0x82
+	IFT_AAL2                          = 0xbb
+	IFT_AAL5                          = 0x31
+	IFT_ADSL                          = 0x5e
+	IFT_AFLANE8023                    = 0x3b
+	IFT_AFLANE8025                    = 0x3c
+	IFT_ARAP                          = 0x58
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ASYNC                         = 0x54
+	IFT_ATM                           = 0x25
+	IFT_ATMDXI                        = 0x69
+	IFT_ATMFUNI                       = 0x6a
+	IFT_ATMIMA                        = 0x6b
+	IFT_ATMLOGICAL                    = 0x50
+	IFT_ATMRADIO                      = 0xbd
+	IFT_ATMSUBINTERFACE               = 0x86
+	IFT_ATMVCIENDPT                   = 0xc2
+	IFT_ATMVIRTUAL                    = 0x95
+	IFT_BGPPOLICYACCOUNTING           = 0xa2
+	IFT_BSC                           = 0x53
+	IFT_CCTEMUL                       = 0x3d
+	IFT_CEPT                          = 0x13
+	IFT_CES                           = 0x85
+	IFT_CHANNEL                       = 0x46
+	IFT_CNR                           = 0x55
+	IFT_COFFEE                        = 0x84
+	IFT_COMPOSITELINK                 = 0x9b
+	IFT_DCN                           = 0x8d
+	IFT_DIGITALPOWERLINE              = 0x8a
+	IFT_DIGITALWRAPPEROVERHEADCHANNEL = 0xba
+	IFT_DLSW                          = 0x4a
+	IFT_DOCSCABLEDOWNSTREAM           = 0x80
+	IFT_DOCSCABLEMACLAYER             = 0x7f
+	IFT_DOCSCABLEUPSTREAM             = 0x81
+	IFT_DS0                           = 0x51
+	IFT_DS0BUNDLE                     = 0x52
+	IFT_DS1FDL                        = 0xaa
+	IFT_DS3                           = 0x1e
+	IFT_DTM                           = 0x8c
+	IFT_DVBASILN                      = 0xac
+	IFT_DVBASIOUT                     = 0xad
+	IFT_DVBRCCDOWNSTREAM              = 0x93
+	IFT_DVBRCCMACLAYER                = 0x92
+	IFT_DVBRCCUPSTREAM                = 0x94
+	IFT_ENC                           = 0xf4
+	IFT_EON                           = 0x19
+	IFT_EPLRS                         = 0x57
+	IFT_ESCON                         = 0x49
+	IFT_ETHER                         = 0x6
+	IFT_FAITH                         = 0xf2
+	IFT_FAST                          = 0x7d
+	IFT_FASTETHER                     = 0x3e
+	IFT_FASTETHERFX                   = 0x45
+	IFT_FDDI                          = 0xf
+	IFT_FIBRECHANNEL                  = 0x38
+	IFT_FRAMERELAYINTERCONNECT        = 0x3a
+	IFT_FRAMERELAYMPI                 = 0x5c
+	IFT_FRDLCIENDPT                   = 0xc1
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_FRF16MFRBUNDLE                = 0xa3
+	IFT_FRFORWARD                     = 0x9e
+	IFT_G703AT2MB                     = 0x43
+	IFT_G703AT64K                     = 0x42
+	IFT_GIF                           = 0xf0
+	IFT_GIGABITETHERNET               = 0x75
+	IFT_GR303IDT                      = 0xb2
+	IFT_GR303RDT                      = 0xb1
+	IFT_H323GATEKEEPER                = 0xa4
+	IFT_H323PROXY                     = 0xa5
+	IFT_HDH1822                       = 0x3
+	IFT_HDLC                          = 0x76
+	IFT_HDSL2                         = 0xa8
+	IFT_HIPERLAN2                     = 0xb7
+	IFT_HIPPI                         = 0x2f
+	IFT_HIPPIINTERFACE                = 0x39
+	IFT_HOSTPAD                       = 0x5a
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IBM370PARCHAN                 = 0x48
+	IFT_IDSL                          = 0x9a
+	IFT_IEEE80211                     = 0x47
+	IFT_IEEE80212                     = 0x37
+	IFT_IEEE8023ADLAG                 = 0xa1
+	IFT_IFGSN                         = 0x91
+	IFT_IMT                           = 0xbe
+	IFT_INTERLEAVE                    = 0x7c
+	IFT_IP                            = 0x7e
+	IFT_IPFORWARD                     = 0x8e
+	IFT_IPOVERATM                     = 0x72
+	IFT_IPOVERCDLC                    = 0x6d
+	IFT_IPOVERCLAW                    = 0x6e
+	IFT_IPSWITCH                      = 0x4e
+	IFT_IPXIP                         = 0xf9
+	IFT_ISDN                          = 0x3f
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISDNS                         = 0x4b
+	IFT_ISDNU                         = 0x4c
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88025CRFPINT               = 0x62
+	IFT_ISO88025DTR                   = 0x56
+	IFT_ISO88025FIBER                 = 0x73
+	IFT_ISO88026                      = 0xa
+	IFT_ISUP                          = 0xb3
+	IFT_L3IPXVLAN                     = 0x89
+	IFT_LAPB                          = 0x10
+	IFT_LAPD                          = 0x4d
+	IFT_LAPF                          = 0x77
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MEDIAMAILOVERIP               = 0x8b
+	IFT_MFSIGLINK                     = 0xa7
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_MPC                           = 0x71
+	IFT_MPLS                          = 0xa6
+	IFT_MPLSTUNNEL                    = 0x96
+	IFT_MSDSL                         = 0x8f
+	IFT_MVL                           = 0xbf
+	IFT_MYRINET                       = 0x63
+	IFT_NFAS                          = 0xaf
+	IFT_NSIP                          = 0x1b
+	IFT_OPTICALCHANNEL                = 0xc3
+	IFT_OPTICALTRANSPORT              = 0xc4
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PFLOG                         = 0xf6
+	IFT_PFSYNC                        = 0xf7
+	IFT_PLC                           = 0xae
+	IFT_POS                           = 0xab
+	IFT_PPPMULTILINKBUNDLE            = 0x6c
+	IFT_PROPBWAP2MP                   = 0xb8
+	IFT_PROPCNLS                      = 0x59
+	IFT_PROPDOCSWIRELESSDOWNSTREAM    = 0xb5
+	IFT_PROPDOCSWIRELESSMACLAYER      = 0xb4
+	IFT_PROPDOCSWIRELESSUPSTREAM      = 0xb6
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPWIRELESSP2P               = 0x9d
+	IFT_PTPSERIAL                     = 0x16
+	IFT_PVC                           = 0xf1
+	IFT_QLLC                          = 0x44
+	IFT_RADIOMAC                      = 0xbc
+	IFT_RADSL                         = 0x5f
+	IFT_REACHDSL                      = 0xc0
+	IFT_RFC1483                       = 0x9f
+	IFT_RS232                         = 0x21
+	IFT_RSRB                          = 0x4f
+	IFT_SDLC                          = 0x11
+	IFT_SDSL                          = 0x60
+	IFT_SHDSL                         = 0xa9
+	IFT_SIP                           = 0x1f
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETOVERHEADCHANNEL          = 0xb9
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_SRP                           = 0x97
+	IFT_SS7SIGLINK                    = 0x9c
+	IFT_STACKTOSTACK                  = 0x6f
+	IFT_STARLAN                       = 0xb
+	IFT_STF                           = 0xd7
+	IFT_T1                            = 0x12
+	IFT_TDLC                          = 0x74
+	IFT_TERMPAD                       = 0x5b
+	IFT_TR008                         = 0xb0
+	IFT_TRANSPHDLC                    = 0x7b
+	IFT_TUNNEL                        = 0x83
+	IFT_ULTRA                         = 0x1d
+	IFT_USB                           = 0xa0
+	IFT_V11                           = 0x40
+	IFT_V35                           = 0x2d
+	IFT_V36                           = 0x41
+	IFT_V37                           = 0x78
+	IFT_VDSL                          = 0x61
+	IFT_VIRTUALIPADDRESS              = 0x70
+	IFT_VOICEEM                       = 0x64
+	IFT_VOICEENCAP                    = 0x67
+	IFT_VOICEFXO                      = 0x65
+	IFT_VOICEFXS                      = 0x66
+	IFT_VOICEOVERATM                  = 0x98
+	IFT_VOICEOVERFRAMERELAY           = 0x99
+	IFT_VOICEOVERIP                   = 0x68
+	IFT_X213                          = 0x5d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25HUNTGROUP                  = 0x7a
+	IFT_X25MLP                        = 0x79
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+	IPPROTO_MAXID                     = 0x34
+	IPV6_FAITH                        = 0x1d
+	IPV6_MIN_MEMBERSHIPS              = 0x1f
+	IP_FAITH                          = 0x16
+	IP_MAX_SOURCE_FILTER              = 0x400
+	IP_MIN_MEMBERSHIPS                = 0x1f
+	MAP_NORESERVE                     = 0x40
+	MAP_RENAME                        = 0x20
+	NET_RT_MAXID                      = 0x6
+	RTF_PRCLONING                     = 0x10000
+	RTM_OLDADD                        = 0x9
+	RTM_OLDDEL                        = 0xa
+	RT_CACHING_CONTEXT                = 0x1
+	RT_NORTREF                        = 0x2
+	SIOCADDRT                         = 0x8030720a
+	SIOCALIFADDR                      = 0x8118691b
+	SIOCDELRT                         = 0x8030720b
+	SIOCDLIFADDR                      = 0x8118691d
+	SIOCGLIFADDR                      = 0xc118691c
+	SIOCGLIFPHYADDR                   = 0xc118694b
+	SIOCSLIFPHYADDR                   = 0x8118694a
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/errors_freebsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/errors_freebsd_amd64.go
new file mode 100644
index 000000000..070f44b65
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/errors_freebsd_amd64.go
@@ -0,0 +1,233 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Constants that were deprecated or moved to enums in the FreeBSD headers. Keep
+// them here for backwards compatibility.
+
+package unix
+
+const (
+	DLT_HHDLC                         = 0x79
+	IFF_SMART                         = 0x20
+	IFT_1822                          = 0x2
+	IFT_A12MPPSWITCH                  = 0x82
+	IFT_AAL2                          = 0xbb
+	IFT_AAL5                          = 0x31
+	IFT_ADSL                          = 0x5e
+	IFT_AFLANE8023                    = 0x3b
+	IFT_AFLANE8025                    = 0x3c
+	IFT_ARAP                          = 0x58
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ASYNC                         = 0x54
+	IFT_ATM                           = 0x25
+	IFT_ATMDXI                        = 0x69
+	IFT_ATMFUNI                       = 0x6a
+	IFT_ATMIMA                        = 0x6b
+	IFT_ATMLOGICAL                    = 0x50
+	IFT_ATMRADIO                      = 0xbd
+	IFT_ATMSUBINTERFACE               = 0x86
+	IFT_ATMVCIENDPT                   = 0xc2
+	IFT_ATMVIRTUAL                    = 0x95
+	IFT_BGPPOLICYACCOUNTING           = 0xa2
+	IFT_BSC                           = 0x53
+	IFT_CCTEMUL                       = 0x3d
+	IFT_CEPT                          = 0x13
+	IFT_CES                           = 0x85
+	IFT_CHANNEL                       = 0x46
+	IFT_CNR                           = 0x55
+	IFT_COFFEE                        = 0x84
+	IFT_COMPOSITELINK                 = 0x9b
+	IFT_DCN                           = 0x8d
+	IFT_DIGITALPOWERLINE              = 0x8a
+	IFT_DIGITALWRAPPEROVERHEADCHANNEL = 0xba
+	IFT_DLSW                          = 0x4a
+	IFT_DOCSCABLEDOWNSTREAM           = 0x80
+	IFT_DOCSCABLEMACLAYER             = 0x7f
+	IFT_DOCSCABLEUPSTREAM             = 0x81
+	IFT_DS0                           = 0x51
+	IFT_DS0BUNDLE                     = 0x52
+	IFT_DS1FDL                        = 0xaa
+	IFT_DS3                           = 0x1e
+	IFT_DTM                           = 0x8c
+	IFT_DVBASILN                      = 0xac
+	IFT_DVBASIOUT                     = 0xad
+	IFT_DVBRCCDOWNSTREAM              = 0x93
+	IFT_DVBRCCMACLAYER                = 0x92
+	IFT_DVBRCCUPSTREAM                = 0x94
+	IFT_ENC                           = 0xf4
+	IFT_EON                           = 0x19
+	IFT_EPLRS                         = 0x57
+	IFT_ESCON                         = 0x49
+	IFT_ETHER                         = 0x6
+	IFT_FAITH                         = 0xf2
+	IFT_FAST                          = 0x7d
+	IFT_FASTETHER                     = 0x3e
+	IFT_FASTETHERFX                   = 0x45
+	IFT_FDDI                          = 0xf
+	IFT_FIBRECHANNEL                  = 0x38
+	IFT_FRAMERELAYINTERCONNECT        = 0x3a
+	IFT_FRAMERELAYMPI                 = 0x5c
+	IFT_FRDLCIENDPT                   = 0xc1
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_FRF16MFRBUNDLE                = 0xa3
+	IFT_FRFORWARD                     = 0x9e
+	IFT_G703AT2MB                     = 0x43
+	IFT_G703AT64K                     = 0x42
+	IFT_GIF                           = 0xf0
+	IFT_GIGABITETHERNET               = 0x75
+	IFT_GR303IDT                      = 0xb2
+	IFT_GR303RDT                      = 0xb1
+	IFT_H323GATEKEEPER                = 0xa4
+	IFT_H323PROXY                     = 0xa5
+	IFT_HDH1822                       = 0x3
+	IFT_HDLC                          = 0x76
+	IFT_HDSL2                         = 0xa8
+	IFT_HIPERLAN2                     = 0xb7
+	IFT_HIPPI                         = 0x2f
+	IFT_HIPPIINTERFACE                = 0x39
+	IFT_HOSTPAD                       = 0x5a
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IBM370PARCHAN                 = 0x48
+	IFT_IDSL                          = 0x9a
+	IFT_IEEE80211                     = 0x47
+	IFT_IEEE80212                     = 0x37
+	IFT_IEEE8023ADLAG                 = 0xa1
+	IFT_IFGSN                         = 0x91
+	IFT_IMT                           = 0xbe
+	IFT_INTERLEAVE                    = 0x7c
+	IFT_IP                            = 0x7e
+	IFT_IPFORWARD                     = 0x8e
+	IFT_IPOVERATM                     = 0x72
+	IFT_IPOVERCDLC                    = 0x6d
+	IFT_IPOVERCLAW                    = 0x6e
+	IFT_IPSWITCH                      = 0x4e
+	IFT_IPXIP                         = 0xf9
+	IFT_ISDN                          = 0x3f
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISDNS                         = 0x4b
+	IFT_ISDNU                         = 0x4c
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88025CRFPINT               = 0x62
+	IFT_ISO88025DTR                   = 0x56
+	IFT_ISO88025FIBER                 = 0x73
+	IFT_ISO88026                      = 0xa
+	IFT_ISUP                          = 0xb3
+	IFT_L3IPXVLAN                     = 0x89
+	IFT_LAPB                          = 0x10
+	IFT_LAPD                          = 0x4d
+	IFT_LAPF                          = 0x77
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MEDIAMAILOVERIP               = 0x8b
+	IFT_MFSIGLINK                     = 0xa7
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_MPC                           = 0x71
+	IFT_MPLS                          = 0xa6
+	IFT_MPLSTUNNEL                    = 0x96
+	IFT_MSDSL                         = 0x8f
+	IFT_MVL                           = 0xbf
+	IFT_MYRINET                       = 0x63
+	IFT_NFAS                          = 0xaf
+	IFT_NSIP                          = 0x1b
+	IFT_OPTICALCHANNEL                = 0xc3
+	IFT_OPTICALTRANSPORT              = 0xc4
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PFLOG                         = 0xf6
+	IFT_PFSYNC                        = 0xf7
+	IFT_PLC                           = 0xae
+	IFT_POS                           = 0xab
+	IFT_PPPMULTILINKBUNDLE            = 0x6c
+	IFT_PROPBWAP2MP                   = 0xb8
+	IFT_PROPCNLS                      = 0x59
+	IFT_PROPDOCSWIRELESSDOWNSTREAM    = 0xb5
+	IFT_PROPDOCSWIRELESSMACLAYER      = 0xb4
+	IFT_PROPDOCSWIRELESSUPSTREAM      = 0xb6
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPWIRELESSP2P               = 0x9d
+	IFT_PTPSERIAL                     = 0x16
+	IFT_PVC                           = 0xf1
+	IFT_QLLC                          = 0x44
+	IFT_RADIOMAC                      = 0xbc
+	IFT_RADSL                         = 0x5f
+	IFT_REACHDSL                      = 0xc0
+	IFT_RFC1483                       = 0x9f
+	IFT_RS232                         = 0x21
+	IFT_RSRB                          = 0x4f
+	IFT_SDLC                          = 0x11
+	IFT_SDSL                          = 0x60
+	IFT_SHDSL                         = 0xa9
+	IFT_SIP                           = 0x1f
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETOVERHEADCHANNEL          = 0xb9
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_SRP                           = 0x97
+	IFT_SS7SIGLINK                    = 0x9c
+	IFT_STACKTOSTACK                  = 0x6f
+	IFT_STARLAN                       = 0xb
+	IFT_STF                           = 0xd7
+	IFT_T1                            = 0x12
+	IFT_TDLC                          = 0x74
+	IFT_TERMPAD                       = 0x5b
+	IFT_TR008                         = 0xb0
+	IFT_TRANSPHDLC                    = 0x7b
+	IFT_TUNNEL                        = 0x83
+	IFT_ULTRA                         = 0x1d
+	IFT_USB                           = 0xa0
+	IFT_V11                           = 0x40
+	IFT_V35                           = 0x2d
+	IFT_V36                           = 0x41
+	IFT_V37                           = 0x78
+	IFT_VDSL                          = 0x61
+	IFT_VIRTUALIPADDRESS              = 0x70
+	IFT_VOICEEM                       = 0x64
+	IFT_VOICEENCAP                    = 0x67
+	IFT_VOICEFXO                      = 0x65
+	IFT_VOICEFXS                      = 0x66
+	IFT_VOICEOVERATM                  = 0x98
+	IFT_VOICEOVERFRAMERELAY           = 0x99
+	IFT_VOICEOVERIP                   = 0x68
+	IFT_X213                          = 0x5d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25HUNTGROUP                  = 0x7a
+	IFT_X25MLP                        = 0x79
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+	IPPROTO_MAXID                     = 0x34
+	IPV6_FAITH                        = 0x1d
+	IPV6_MIN_MEMBERSHIPS              = 0x1f
+	IP_FAITH                          = 0x16
+	IP_MAX_SOURCE_FILTER              = 0x400
+	IP_MIN_MEMBERSHIPS                = 0x1f
+	MAP_NORESERVE                     = 0x40
+	MAP_RENAME                        = 0x20
+	NET_RT_MAXID                      = 0x6
+	RTF_PRCLONING                     = 0x10000
+	RTM_OLDADD                        = 0x9
+	RTM_OLDDEL                        = 0xa
+	RT_CACHING_CONTEXT                = 0x1
+	RT_NORTREF                        = 0x2
+	SIOCADDRT                         = 0x8040720a
+	SIOCALIFADDR                      = 0x8118691b
+	SIOCDELRT                         = 0x8040720b
+	SIOCDLIFADDR                      = 0x8118691d
+	SIOCGLIFADDR                      = 0xc118691c
+	SIOCGLIFPHYADDR                   = 0xc118694b
+	SIOCSLIFPHYADDR                   = 0x8118694a
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/errors_freebsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/errors_freebsd_arm.go
new file mode 100644
index 000000000..856dca325
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/errors_freebsd_arm.go
@@ -0,0 +1,226 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package unix
+
+const (
+	IFT_1822                          = 0x2
+	IFT_A12MPPSWITCH                  = 0x82
+	IFT_AAL2                          = 0xbb
+	IFT_AAL5                          = 0x31
+	IFT_ADSL                          = 0x5e
+	IFT_AFLANE8023                    = 0x3b
+	IFT_AFLANE8025                    = 0x3c
+	IFT_ARAP                          = 0x58
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ASYNC                         = 0x54
+	IFT_ATM                           = 0x25
+	IFT_ATMDXI                        = 0x69
+	IFT_ATMFUNI                       = 0x6a
+	IFT_ATMIMA                        = 0x6b
+	IFT_ATMLOGICAL                    = 0x50
+	IFT_ATMRADIO                      = 0xbd
+	IFT_ATMSUBINTERFACE               = 0x86
+	IFT_ATMVCIENDPT                   = 0xc2
+	IFT_ATMVIRTUAL                    = 0x95
+	IFT_BGPPOLICYACCOUNTING           = 0xa2
+	IFT_BSC                           = 0x53
+	IFT_CCTEMUL                       = 0x3d
+	IFT_CEPT                          = 0x13
+	IFT_CES                           = 0x85
+	IFT_CHANNEL                       = 0x46
+	IFT_CNR                           = 0x55
+	IFT_COFFEE                        = 0x84
+	IFT_COMPOSITELINK                 = 0x9b
+	IFT_DCN                           = 0x8d
+	IFT_DIGITALPOWERLINE              = 0x8a
+	IFT_DIGITALWRAPPEROVERHEADCHANNEL = 0xba
+	IFT_DLSW                          = 0x4a
+	IFT_DOCSCABLEDOWNSTREAM           = 0x80
+	IFT_DOCSCABLEMACLAYER             = 0x7f
+	IFT_DOCSCABLEUPSTREAM             = 0x81
+	IFT_DS0                           = 0x51
+	IFT_DS0BUNDLE                     = 0x52
+	IFT_DS1FDL                        = 0xaa
+	IFT_DS3                           = 0x1e
+	IFT_DTM                           = 0x8c
+	IFT_DVBASILN                      = 0xac
+	IFT_DVBASIOUT                     = 0xad
+	IFT_DVBRCCDOWNSTREAM              = 0x93
+	IFT_DVBRCCMACLAYER                = 0x92
+	IFT_DVBRCCUPSTREAM                = 0x94
+	IFT_ENC                           = 0xf4
+	IFT_EON                           = 0x19
+	IFT_EPLRS                         = 0x57
+	IFT_ESCON                         = 0x49
+	IFT_ETHER                         = 0x6
+	IFT_FAST                          = 0x7d
+	IFT_FASTETHER                     = 0x3e
+	IFT_FASTETHERFX                   = 0x45
+	IFT_FDDI                          = 0xf
+	IFT_FIBRECHANNEL                  = 0x38
+	IFT_FRAMERELAYINTERCONNECT        = 0x3a
+	IFT_FRAMERELAYMPI                 = 0x5c
+	IFT_FRDLCIENDPT                   = 0xc1
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_FRF16MFRBUNDLE                = 0xa3
+	IFT_FRFORWARD                     = 0x9e
+	IFT_G703AT2MB                     = 0x43
+	IFT_G703AT64K                     = 0x42
+	IFT_GIF                           = 0xf0
+	IFT_GIGABITETHERNET               = 0x75
+	IFT_GR303IDT                      = 0xb2
+	IFT_GR303RDT                      = 0xb1
+	IFT_H323GATEKEEPER                = 0xa4
+	IFT_H323PROXY                     = 0xa5
+	IFT_HDH1822                       = 0x3
+	IFT_HDLC                          = 0x76
+	IFT_HDSL2                         = 0xa8
+	IFT_HIPERLAN2                     = 0xb7
+	IFT_HIPPI                         = 0x2f
+	IFT_HIPPIINTERFACE                = 0x39
+	IFT_HOSTPAD                       = 0x5a
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IBM370PARCHAN                 = 0x48
+	IFT_IDSL                          = 0x9a
+	IFT_IEEE80211                     = 0x47
+	IFT_IEEE80212                     = 0x37
+	IFT_IEEE8023ADLAG                 = 0xa1
+	IFT_IFGSN                         = 0x91
+	IFT_IMT                           = 0xbe
+	IFT_INTERLEAVE                    = 0x7c
+	IFT_IP                            = 0x7e
+	IFT_IPFORWARD                     = 0x8e
+	IFT_IPOVERATM                     = 0x72
+	IFT_IPOVERCDLC                    = 0x6d
+	IFT_IPOVERCLAW                    = 0x6e
+	IFT_IPSWITCH                      = 0x4e
+	IFT_ISDN                          = 0x3f
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISDNS                         = 0x4b
+	IFT_ISDNU                         = 0x4c
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88025CRFPINT               = 0x62
+	IFT_ISO88025DTR                   = 0x56
+	IFT_ISO88025FIBER                 = 0x73
+	IFT_ISO88026                      = 0xa
+	IFT_ISUP                          = 0xb3
+	IFT_L3IPXVLAN                     = 0x89
+	IFT_LAPB                          = 0x10
+	IFT_LAPD                          = 0x4d
+	IFT_LAPF                          = 0x77
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MEDIAMAILOVERIP               = 0x8b
+	IFT_MFSIGLINK                     = 0xa7
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_MPC                           = 0x71
+	IFT_MPLS                          = 0xa6
+	IFT_MPLSTUNNEL                    = 0x96
+	IFT_MSDSL                         = 0x8f
+	IFT_MVL                           = 0xbf
+	IFT_MYRINET                       = 0x63
+	IFT_NFAS                          = 0xaf
+	IFT_NSIP                          = 0x1b
+	IFT_OPTICALCHANNEL                = 0xc3
+	IFT_OPTICALTRANSPORT              = 0xc4
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PFLOG                         = 0xf6
+	IFT_PFSYNC                        = 0xf7
+	IFT_PLC                           = 0xae
+	IFT_POS                           = 0xab
+	IFT_PPPMULTILINKBUNDLE            = 0x6c
+	IFT_PROPBWAP2MP                   = 0xb8
+	IFT_PROPCNLS                      = 0x59
+	IFT_PROPDOCSWIRELESSDOWNSTREAM    = 0xb5
+	IFT_PROPDOCSWIRELESSMACLAYER      = 0xb4
+	IFT_PROPDOCSWIRELESSUPSTREAM      = 0xb6
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPWIRELESSP2P               = 0x9d
+	IFT_PTPSERIAL                     = 0x16
+	IFT_PVC                           = 0xf1
+	IFT_QLLC                          = 0x44
+	IFT_RADIOMAC                      = 0xbc
+	IFT_RADSL                         = 0x5f
+	IFT_REACHDSL                      = 0xc0
+	IFT_RFC1483                       = 0x9f
+	IFT_RS232                         = 0x21
+	IFT_RSRB                          = 0x4f
+	IFT_SDLC                          = 0x11
+	IFT_SDSL                          = 0x60
+	IFT_SHDSL                         = 0xa9
+	IFT_SIP                           = 0x1f
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETOVERHEADCHANNEL          = 0xb9
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_SRP                           = 0x97
+	IFT_SS7SIGLINK                    = 0x9c
+	IFT_STACKTOSTACK                  = 0x6f
+	IFT_STARLAN                       = 0xb
+	IFT_STF                           = 0xd7
+	IFT_T1                            = 0x12
+	IFT_TDLC                          = 0x74
+	IFT_TERMPAD                       = 0x5b
+	IFT_TR008                         = 0xb0
+	IFT_TRANSPHDLC                    = 0x7b
+	IFT_TUNNEL                        = 0x83
+	IFT_ULTRA                         = 0x1d
+	IFT_USB                           = 0xa0
+	IFT_V11                           = 0x40
+	IFT_V35                           = 0x2d
+	IFT_V36                           = 0x41
+	IFT_V37                           = 0x78
+	IFT_VDSL                          = 0x61
+	IFT_VIRTUALIPADDRESS              = 0x70
+	IFT_VOICEEM                       = 0x64
+	IFT_VOICEENCAP                    = 0x67
+	IFT_VOICEFXO                      = 0x65
+	IFT_VOICEFXS                      = 0x66
+	IFT_VOICEOVERATM                  = 0x98
+	IFT_VOICEOVERFRAMERELAY           = 0x99
+	IFT_VOICEOVERIP                   = 0x68
+	IFT_X213                          = 0x5d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25HUNTGROUP                  = 0x7a
+	IFT_X25MLP                        = 0x79
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+
+	// missing constants on FreeBSD-11.1-RELEASE, copied from old values in ztypes_freebsd_arm.go
+	IFF_SMART       = 0x20
+	IFT_FAITH       = 0xf2
+	IFT_IPXIP       = 0xf9
+	IPPROTO_MAXID   = 0x34
+	IPV6_FAITH      = 0x1d
+	IP_FAITH        = 0x16
+	MAP_NORESERVE   = 0x40
+	MAP_RENAME      = 0x20
+	NET_RT_MAXID    = 0x6
+	RTF_PRCLONING   = 0x10000
+	RTM_OLDADD      = 0x9
+	RTM_OLDDEL      = 0xa
+	SIOCADDRT       = 0x8030720a
+	SIOCALIFADDR    = 0x8118691b
+	SIOCDELRT       = 0x8030720b
+	SIOCDLIFADDR    = 0x8118691d
+	SIOCGLIFADDR    = 0xc118691c
+	SIOCGLIFPHYADDR = 0xc118694b
+	SIOCSLIFPHYADDR = 0x8118694a
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/errors_freebsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/errors_freebsd_arm64.go
new file mode 100644
index 000000000..946dcf3fc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/errors_freebsd_arm64.go
@@ -0,0 +1,17 @@
+// Copyright 2020 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Constants that were deprecated or moved to enums in the FreeBSD headers. Keep
+// them here for backwards compatibility.
+
+package unix
+
+const (
+	DLT_HHDLC            = 0x79
+	IPV6_MIN_MEMBERSHIPS = 0x1f
+	IP_MAX_SOURCE_FILTER = 0x400
+	IP_MIN_MEMBERSHIPS   = 0x1f
+	RT_CACHING_CONTEXT   = 0x1
+	RT_NORTREF           = 0x2
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/fcntl.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/fcntl.go
new file mode 100644
index 000000000..4dc534864
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/fcntl.go
@@ -0,0 +1,36 @@
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build dragonfly freebsd linux netbsd openbsd
+
+package unix
+
+import "unsafe"
+
+// fcntl64Syscall is usually SYS_FCNTL, but is overridden on 32-bit Linux
+// systems by fcntl_linux_32bit.go to be SYS_FCNTL64.
+var fcntl64Syscall uintptr = SYS_FCNTL
+
+func fcntl(fd int, cmd, arg int) (int, error) {
+	valptr, _, errno := Syscall(fcntl64Syscall, uintptr(fd), uintptr(cmd), uintptr(arg))
+	var err error
+	if errno != 0 {
+		err = errno
+	}
+	return int(valptr), err
+}
+
+// FcntlInt performs a fcntl syscall on fd with the provided command and argument.
+func FcntlInt(fd uintptr, cmd, arg int) (int, error) {
+	return fcntl(int(fd), cmd, arg)
+}
+
+// FcntlFlock performs a fcntl syscall for the F_GETLK, F_SETLK or F_SETLKW command.
+func FcntlFlock(fd uintptr, cmd int, lk *Flock_t) error {
+	_, _, errno := Syscall(fcntl64Syscall, fd, uintptr(cmd), uintptr(unsafe.Pointer(lk)))
+	if errno == 0 {
+		return nil
+	}
+	return errno
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/fcntl_darwin.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/fcntl_darwin.go
new file mode 100644
index 000000000..a9911c7c1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/fcntl_darwin.go
@@ -0,0 +1,24 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package unix
+
+import "unsafe"
+
+// FcntlInt performs a fcntl syscall on fd with the provided command and argument.
+func FcntlInt(fd uintptr, cmd, arg int) (int, error) {
+	return fcntl(int(fd), cmd, arg)
+}
+
+// FcntlFlock performs a fcntl syscall for the F_GETLK, F_SETLK or F_SETLKW command.
+func FcntlFlock(fd uintptr, cmd int, lk *Flock_t) error {
+	_, err := fcntl(int(fd), cmd, int(uintptr(unsafe.Pointer(lk))))
+	return err
+}
+
+// FcntlFstore performs a fcntl syscall for the F_PREALLOCATE command.
+func FcntlFstore(fd uintptr, cmd int, fstore *Fstore_t) error {
+	_, err := fcntl(int(fd), cmd, int(uintptr(unsafe.Pointer(fstore))))
+	return err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/fcntl_linux_32bit.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/fcntl_linux_32bit.go
new file mode 100644
index 000000000..fc0e50e03
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/fcntl_linux_32bit.go
@@ -0,0 +1,13 @@
+// +build linux,386 linux,arm linux,mips linux,mipsle
+
+// Copyright 2014 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package unix
+
+func init() {
+	// On 32-bit Linux systems, the fcntl syscall that matches Go's
+	// Flock_t type is SYS_FCNTL64, not SYS_FCNTL.
+	fcntl64Syscall = SYS_FCNTL64
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/fdset.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/fdset.go
new file mode 100644
index 000000000..b27be0a01
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/fdset.go
@@ -0,0 +1,29 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris
+
+package unix
+
+// Set adds fd to the set fds.
+func (fds *FdSet) Set(fd int) {
+	fds.Bits[fd/NFDBITS] |= (1 << (uintptr(fd) % NFDBITS))
+}
+
+// Clear removes fd from the set fds.
+func (fds *FdSet) Clear(fd int) {
+	fds.Bits[fd/NFDBITS] &^= (1 << (uintptr(fd) % NFDBITS))
+}
+
+// IsSet returns whether fd is in the set fds.
+func (fds *FdSet) IsSet(fd int) bool {
+	return fds.Bits[fd/NFDBITS]&(1<<(uintptr(fd)%NFDBITS)) != 0
+}
+
+// Zero clears the set fds.
+func (fds *FdSet) Zero() {
+	for i := range fds.Bits {
+		fds.Bits[i] = 0
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/gccgo.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/gccgo.go
new file mode 100644
index 000000000..86032c11e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/gccgo.go
@@ -0,0 +1,60 @@
+// Copyright 2015 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build gccgo
+// +build !aix
+
+package unix
+
+import "syscall"
+
+// We can't use the gc-syntax .s files for gccgo. On the plus side
+// much of the functionality can be written directly in Go.
+
+func realSyscallNoError(trap, a1, a2, a3, a4, a5, a6, a7, a8, a9 uintptr) (r uintptr)
+
+func realSyscall(trap, a1, a2, a3, a4, a5, a6, a7, a8, a9 uintptr) (r, errno uintptr)
+
+func SyscallNoError(trap, a1, a2, a3 uintptr) (r1, r2 uintptr) {
+	syscall.Entersyscall()
+	r := realSyscallNoError(trap, a1, a2, a3, 0, 0, 0, 0, 0, 0)
+	syscall.Exitsyscall()
+	return r, 0
+}
+
+func Syscall(trap, a1, a2, a3 uintptr) (r1, r2 uintptr, err syscall.Errno) {
+	syscall.Entersyscall()
+	r, errno := realSyscall(trap, a1, a2, a3, 0, 0, 0, 0, 0, 0)
+	syscall.Exitsyscall()
+	return r, 0, syscall.Errno(errno)
+}
+
+func Syscall6(trap, a1, a2, a3, a4, a5, a6 uintptr) (r1, r2 uintptr, err syscall.Errno) {
+	syscall.Entersyscall()
+	r, errno := realSyscall(trap, a1, a2, a3, a4, a5, a6, 0, 0, 0)
+	syscall.Exitsyscall()
+	return r, 0, syscall.Errno(errno)
+}
+
+func Syscall9(trap, a1, a2, a3, a4, a5, a6, a7, a8, a9 uintptr) (r1, r2 uintptr, err syscall.Errno) {
+	syscall.Entersyscall()
+	r, errno := realSyscall(trap, a1, a2, a3, a4, a5, a6, a7, a8, a9)
+	syscall.Exitsyscall()
+	return r, 0, syscall.Errno(errno)
+}
+
+func RawSyscallNoError(trap, a1, a2, a3 uintptr) (r1, r2 uintptr) {
+	r := realSyscallNoError(trap, a1, a2, a3, 0, 0, 0, 0, 0, 0)
+	return r, 0
+}
+
+func RawSyscall(trap, a1, a2, a3 uintptr) (r1, r2 uintptr, err syscall.Errno) {
+	r, errno := realSyscall(trap, a1, a2, a3, 0, 0, 0, 0, 0, 0)
+	return r, 0, syscall.Errno(errno)
+}
+
+func RawSyscall6(trap, a1, a2, a3, a4, a5, a6 uintptr) (r1, r2 uintptr, err syscall.Errno) {
+	r, errno := realSyscall(trap, a1, a2, a3, a4, a5, a6, 0, 0, 0)
+	return r, 0, syscall.Errno(errno)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/gccgo_c.c b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/gccgo_c.c
new file mode 100644
index 000000000..2cb1fefac
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/gccgo_c.c
@@ -0,0 +1,45 @@
+// Copyright 2015 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build gccgo
+// +build !aix
+
+#include <errno.h>
+#include <stdint.h>
+#include <unistd.h>
+
+#define _STRINGIFY2_(x) #x
+#define _STRINGIFY_(x) _STRINGIFY2_(x)
+#define GOSYM_PREFIX _STRINGIFY_(__USER_LABEL_PREFIX__)
+
+// Call syscall from C code because the gccgo support for calling from
+// Go to C does not support varargs functions.
+
+struct ret {
+	uintptr_t r;
+	uintptr_t err;
+};
+
+struct ret gccgoRealSyscall(uintptr_t trap, uintptr_t a1, uintptr_t a2, uintptr_t a3, uintptr_t a4, uintptr_t a5, uintptr_t a6, uintptr_t a7, uintptr_t a8, uintptr_t a9)
+  __asm__(GOSYM_PREFIX GOPKGPATH ".realSyscall");
+
+struct ret
+gccgoRealSyscall(uintptr_t trap, uintptr_t a1, uintptr_t a2, uintptr_t a3, uintptr_t a4, uintptr_t a5, uintptr_t a6, uintptr_t a7, uintptr_t a8, uintptr_t a9)
+{
+	struct ret r;
+
+	errno = 0;
+	r.r = syscall(trap, a1, a2, a3, a4, a5, a6, a7, a8, a9);
+	r.err = errno;
+	return r;
+}
+
+uintptr_t gccgoRealSyscallNoError(uintptr_t trap, uintptr_t a1, uintptr_t a2, uintptr_t a3, uintptr_t a4, uintptr_t a5, uintptr_t a6, uintptr_t a7, uintptr_t a8, uintptr_t a9)
+  __asm__(GOSYM_PREFIX GOPKGPATH ".realSyscallNoError");
+
+uintptr_t
+gccgoRealSyscallNoError(uintptr_t trap, uintptr_t a1, uintptr_t a2, uintptr_t a3, uintptr_t a4, uintptr_t a5, uintptr_t a6, uintptr_t a7, uintptr_t a8, uintptr_t a9)
+{
+	return syscall(trap, a1, a2, a3, a4, a5, a6, a7, a8, a9);
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/gccgo_linux_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/gccgo_linux_amd64.go
new file mode 100644
index 000000000..251a977a8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/gccgo_linux_amd64.go
@@ -0,0 +1,20 @@
+// Copyright 2015 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build gccgo,linux,amd64
+
+package unix
+
+import "syscall"
+
+//extern gettimeofday
+func realGettimeofday(*Timeval, *byte) int32
+
+func gettimeofday(tv *Timeval) (err syscall.Errno) {
+	r := realGettimeofday(tv, nil)
+	if r < 0 {
+		return syscall.GetErrno()
+	}
+	return 0
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ioctl.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ioctl.go
new file mode 100644
index 000000000..564167861
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ioctl.go
@@ -0,0 +1,74 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris
+
+package unix
+
+import (
+	"runtime"
+	"unsafe"
+)
+
+// ioctl itself should not be exposed directly, but additional get/set
+// functions for specific types are permissible.
+
+// IoctlSetInt performs an ioctl operation which sets an integer value
+// on fd, using the specified request number.
+func IoctlSetInt(fd int, req uint, value int) error {
+	return ioctl(fd, req, uintptr(value))
+}
+
+// IoctlSetPointerInt performs an ioctl operation which sets an
+// integer value on fd, using the specified request number. The ioctl
+// argument is called with a pointer to the integer value, rather than
+// passing the integer value directly.
+func IoctlSetPointerInt(fd int, req uint, value int) error {
+	v := int32(value)
+	return ioctl(fd, req, uintptr(unsafe.Pointer(&v)))
+}
+
+// IoctlSetWinsize performs an ioctl on fd with a *Winsize argument.
+//
+// To change fd's window size, the req argument should be TIOCSWINSZ.
+func IoctlSetWinsize(fd int, req uint, value *Winsize) error {
+	// TODO: if we get the chance, remove the req parameter and
+	// hardcode TIOCSWINSZ.
+	err := ioctl(fd, req, uintptr(unsafe.Pointer(value)))
+	runtime.KeepAlive(value)
+	return err
+}
+
+// IoctlSetTermios performs an ioctl on fd with a *Termios.
+//
+// The req value will usually be TCSETA or TIOCSETA.
+func IoctlSetTermios(fd int, req uint, value *Termios) error {
+	// TODO: if we get the chance, remove the req parameter.
+	err := ioctl(fd, req, uintptr(unsafe.Pointer(value)))
+	runtime.KeepAlive(value)
+	return err
+}
+
+// IoctlGetInt performs an ioctl operation which gets an integer value
+// from fd, using the specified request number.
+//
+// A few ioctl requests use the return value as an output parameter;
+// for those, IoctlRetInt should be used instead of this function.
+func IoctlGetInt(fd int, req uint) (int, error) {
+	var value int
+	err := ioctl(fd, req, uintptr(unsafe.Pointer(&value)))
+	return value, err
+}
+
+func IoctlGetWinsize(fd int, req uint) (*Winsize, error) {
+	var value Winsize
+	err := ioctl(fd, req, uintptr(unsafe.Pointer(&value)))
+	return &value, err
+}
+
+func IoctlGetTermios(fd int, req uint) (*Termios, error) {
+	var value Termios
+	err := ioctl(fd, req, uintptr(unsafe.Pointer(&value)))
+	return &value, err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/mkall.sh b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/mkall.sh
new file mode 100644
index 000000000..d257fac50
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/mkall.sh
@@ -0,0 +1,243 @@
+#!/usr/bin/env bash
+# Copyright 2009 The Go Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+# This script runs or (given -n) prints suggested commands to generate files for
+# the Architecture/OS specified by the GOARCH and GOOS environment variables.
+# See README.md for more information about how the build system works.
+
+GOOSARCH="${GOOS}_${GOARCH}"
+
+# defaults
+mksyscall="go run mksyscall.go"
+mkerrors="./mkerrors.sh"
+zerrors="zerrors_$GOOSARCH.go"
+mksysctl=""
+zsysctl="zsysctl_$GOOSARCH.go"
+mksysnum=
+mktypes=
+mkasm=
+run="sh"
+cmd=""
+
+case "$1" in
+-syscalls)
+	for i in zsyscall*go
+	do
+		# Run the command line that appears in the first line
+		# of the generated file to regenerate it.
+		sed 1q $i | sed 's;^// ;;' | sh > _$i && gofmt < _$i > $i
+		rm _$i
+	done
+	exit 0
+	;;
+-n)
+	run="cat"
+	cmd="echo"
+	shift
+esac
+
+case "$#" in
+0)
+	;;
+*)
+	echo 'usage: mkall.sh [-n]' 1>&2
+	exit 2
+esac
+
+if [[ "$GOOS" = "linux" ]]; then
+	# Use the Docker-based build system
+	# Files generated through docker (use $cmd so you can Ctl-C the build or run)
+	$cmd docker build --tag generate:$GOOS $GOOS
+	$cmd docker run --interactive --tty --volume $(cd -- "$(dirname -- "$0")" && /bin/pwd):/build generate:$GOOS
+	exit
+fi
+
+GOOSARCH_in=syscall_$GOOSARCH.go
+case "$GOOSARCH" in
+_* | *_ | _)
+	echo 'undefined $GOOS_$GOARCH:' "$GOOSARCH" 1>&2
+	exit 1
+	;;
+aix_ppc)
+	mkerrors="$mkerrors -maix32"
+	mksyscall="go run mksyscall_aix_ppc.go -aix"
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs"
+	;;
+aix_ppc64)
+	mkerrors="$mkerrors -maix64"
+	mksyscall="go run mksyscall_aix_ppc64.go -aix"
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs"
+	;;
+darwin_386)
+	mkerrors="$mkerrors -m32"
+	mksyscall="go run mksyscall.go -l32"
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs"
+	mkasm="go run mkasm_darwin.go"
+	;;
+darwin_amd64)
+	mkerrors="$mkerrors -m64"
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs"
+	mkasm="go run mkasm_darwin.go"
+	;;
+darwin_arm)
+	mkerrors="$mkerrors"
+	mksyscall="go run mksyscall.go -l32"
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs"
+	mkasm="go run mkasm_darwin.go"
+	;;
+darwin_arm64)
+	mkerrors="$mkerrors -m64"
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs"
+	mkasm="go run mkasm_darwin.go"
+	;;
+dragonfly_amd64)
+	mkerrors="$mkerrors -m64"
+	mksyscall="go run mksyscall.go -dragonfly"
+	mksysnum="go run mksysnum.go 'https://gitweb.dragonflybsd.org/dragonfly.git/blob_plain/HEAD:/sys/kern/syscalls.master'"
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs"
+	;;
+freebsd_386)
+	mkerrors="$mkerrors -m32"
+	mksyscall="go run mksyscall.go -l32"
+	mksysnum="go run mksysnum.go 'https://svn.freebsd.org/base/stable/11/sys/kern/syscalls.master'"
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs"
+	;;
+freebsd_amd64)
+	mkerrors="$mkerrors -m64"
+	mksysnum="go run mksysnum.go 'https://svn.freebsd.org/base/stable/11/sys/kern/syscalls.master'"
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs"
+	;;
+freebsd_arm)
+	mkerrors="$mkerrors"
+	mksyscall="go run mksyscall.go -l32 -arm"
+	mksysnum="go run mksysnum.go 'https://svn.freebsd.org/base/stable/11/sys/kern/syscalls.master'"
+	# Let the type of C char be signed for making the bare syscall
+	# API consistent across platforms.
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs -- -fsigned-char"
+	;;
+freebsd_arm64)
+	mkerrors="$mkerrors -m64"
+	mksysnum="go run mksysnum.go 'https://svn.freebsd.org/base/stable/11/sys/kern/syscalls.master'"
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs -- -fsigned-char"
+	;;
+netbsd_386)
+	mkerrors="$mkerrors -m32"
+	mksyscall="go run mksyscall.go -l32 -netbsd"
+	mksysnum="go run mksysnum.go 'http://cvsweb.netbsd.org/bsdweb.cgi/~checkout~/src/sys/kern/syscalls.master'"
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs"
+	;;
+netbsd_amd64)
+	mkerrors="$mkerrors -m64"
+	mksyscall="go run mksyscall.go -netbsd"
+	mksysnum="go run mksysnum.go 'http://cvsweb.netbsd.org/bsdweb.cgi/~checkout~/src/sys/kern/syscalls.master'"
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs"
+	;;
+netbsd_arm)
+	mkerrors="$mkerrors"
+	mksyscall="go run mksyscall.go -l32 -netbsd -arm"
+	mksysnum="go run mksysnum.go 'http://cvsweb.netbsd.org/bsdweb.cgi/~checkout~/src/sys/kern/syscalls.master'"
+	# Let the type of C char be signed for making the bare syscall
+	# API consistent across platforms.
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs -- -fsigned-char"
+	;;
+netbsd_arm64)
+	mkerrors="$mkerrors -m64"
+	mksyscall="go run mksyscall.go -netbsd"
+	mksysnum="go run mksysnum.go 'http://cvsweb.netbsd.org/bsdweb.cgi/~checkout~/src/sys/kern/syscalls.master'"
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs"
+	;;
+openbsd_386)
+	mkerrors="$mkerrors -m32"
+	mksyscall="go run mksyscall.go -l32 -openbsd"
+	mksysctl="go run mksysctl_openbsd.go"
+	mksysnum="go run mksysnum.go 'https://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/sys/kern/syscalls.master'"
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs"
+	;;
+openbsd_amd64)
+	mkerrors="$mkerrors -m64"
+	mksyscall="go run mksyscall.go -openbsd"
+	mksysctl="go run mksysctl_openbsd.go"
+	mksysnum="go run mksysnum.go 'https://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/sys/kern/syscalls.master'"
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs"
+	;;
+openbsd_arm)
+	mkerrors="$mkerrors"
+	mksyscall="go run mksyscall.go -l32 -openbsd -arm"
+	mksysctl="go run mksysctl_openbsd.go"
+	mksysnum="go run mksysnum.go 'https://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/sys/kern/syscalls.master'"
+	# Let the type of C char be signed for making the bare syscall
+	# API consistent across platforms.
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs -- -fsigned-char"
+	;;
+openbsd_arm64)
+	mkerrors="$mkerrors -m64"
+	mksyscall="go run mksyscall.go -openbsd"
+	mksysctl="go run mksysctl_openbsd.go"
+	mksysnum="go run mksysnum.go 'https://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/sys/kern/syscalls.master'"
+	# Let the type of C char be signed for making the bare syscall
+	# API consistent across platforms.
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs -- -fsigned-char"
+	;;
+openbsd_mips64)
+	mkerrors="$mkerrors -m64"
+	mksyscall="go run mksyscall.go -openbsd"
+	mksysctl="go run mksysctl_openbsd.go"
+	mksysnum="go run mksysnum.go 'https://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/sys/kern/syscalls.master'"
+	# Let the type of C char be signed for making the bare syscall
+	# API consistent across platforms.
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs -- -fsigned-char"
+	;;
+solaris_amd64)
+	mksyscall="go run mksyscall_solaris.go"
+	mkerrors="$mkerrors -m64"
+	mksysnum=
+	mktypes="GOARCH=$GOARCH go tool cgo -godefs"
+	;;
+illumos_amd64)
+        mksyscall="go run mksyscall_solaris.go"
+	mkerrors=
+	mksysnum=
+	mktypes=
+	;;
+*)
+	echo 'unrecognized $GOOS_$GOARCH: ' "$GOOSARCH" 1>&2
+	exit 1
+	;;
+esac
+
+(
+	if [ -n "$mkerrors" ]; then echo "$mkerrors |gofmt >$zerrors"; fi
+	case "$GOOS" in
+	*)
+		syscall_goos="syscall_$GOOS.go"
+		case "$GOOS" in
+		darwin | dragonfly | freebsd | netbsd | openbsd)
+			syscall_goos="syscall_bsd.go $syscall_goos"
+			;;
+		esac
+		if [ -n "$mksyscall" ]; then
+			if [ "$GOOSARCH" == "aix_ppc64" ]; then
+				# aix/ppc64 script generates files instead of writing to stdin.
+				echo "$mksyscall -tags $GOOS,$GOARCH $syscall_goos $GOOSARCH_in && gofmt -w zsyscall_$GOOSARCH.go && gofmt -w zsyscall_"$GOOSARCH"_gccgo.go && gofmt -w zsyscall_"$GOOSARCH"_gc.go " ;
+			elif [ "$GOOS" == "darwin" ]; then
+			        # 1.12 and later, syscalls via libSystem
+				echo "$mksyscall -tags $GOOS,$GOARCH,go1.12 $syscall_goos $GOOSARCH_in |gofmt >zsyscall_$GOOSARCH.go";
+				# 1.13 and later, syscalls via libSystem (including syscallPtr)
+				echo "$mksyscall -tags $GOOS,$GOARCH,go1.13 syscall_darwin.1_13.go |gofmt >zsyscall_$GOOSARCH.1_13.go";
+			elif [ "$GOOS" == "illumos" ]; then
+			        # illumos code generation requires a --illumos switch
+			        echo "$mksyscall -illumos -tags illumos,$GOARCH syscall_illumos.go |gofmt > zsyscall_illumos_$GOARCH.go";
+			        # illumos implies solaris, so solaris code generation is also required
+				echo "$mksyscall -tags solaris,$GOARCH syscall_solaris.go syscall_solaris_$GOARCH.go |gofmt >zsyscall_solaris_$GOARCH.go";
+			else
+				echo "$mksyscall -tags $GOOS,$GOARCH $syscall_goos $GOOSARCH_in |gofmt >zsyscall_$GOOSARCH.go";
+			fi
+		fi
+	esac
+	if [ -n "$mksysctl" ]; then echo "$mksysctl |gofmt >$zsysctl"; fi
+	if [ -n "$mksysnum" ]; then echo "$mksysnum |gofmt >zsysnum_$GOOSARCH.go"; fi
+	if [ -n "$mktypes" ]; then echo "$mktypes types_$GOOS.go | go run mkpost.go > ztypes_$GOOSARCH.go"; fi
+	if [ -n "$mkasm" ]; then echo "$mkasm $GOARCH"; fi
+) | $run
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/mkerrors.sh b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/mkerrors.sh
new file mode 100644
index 000000000..1bef7148d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/mkerrors.sh
@@ -0,0 +1,714 @@
+#!/usr/bin/env bash
+# Copyright 2009 The Go Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+# Generate Go code listing errors and other #defined constant
+# values (ENAMETOOLONG etc.), by asking the preprocessor
+# about the definitions.
+
+unset LANG
+export LC_ALL=C
+export LC_CTYPE=C
+
+if test -z "$GOARCH" -o -z "$GOOS"; then
+	echo 1>&2 "GOARCH or GOOS not defined in environment"
+	exit 1
+fi
+
+# Check that we are using the new build system if we should
+if [[ "$GOOS" = "linux" ]] && [[ "$GOLANG_SYS_BUILD" != "docker" ]]; then
+	echo 1>&2 "In the Docker based build system, mkerrors should not be called directly."
+	echo 1>&2 "See README.md"
+	exit 1
+fi
+
+if [[ "$GOOS" = "aix" ]]; then
+	CC=${CC:-gcc}
+else
+	CC=${CC:-cc}
+fi
+
+if [[ "$GOOS" = "solaris" ]]; then
+	# Assumes GNU versions of utilities in PATH.
+	export PATH=/usr/gnu/bin:$PATH
+fi
+
+uname=$(uname)
+
+includes_AIX='
+#include <net/if.h>
+#include <net/netopt.h>
+#include <netinet/ip_mroute.h>
+#include <sys/protosw.h>
+#include <sys/stropts.h>
+#include <sys/mman.h>
+#include <sys/poll.h>
+#include <sys/select.h>
+#include <sys/termio.h>
+#include <termios.h>
+#include <fcntl.h>
+
+#define AF_LOCAL AF_UNIX
+'
+
+includes_Darwin='
+#define _DARWIN_C_SOURCE
+#define KERNEL
+#define _DARWIN_USE_64_BIT_INODE
+#include <stdint.h>
+#include <sys/attr.h>
+#include <sys/clonefile.h>
+#include <sys/types.h>
+#include <sys/event.h>
+#include <sys/ptrace.h>
+#include <sys/select.h>
+#include <sys/socket.h>
+#include <sys/sockio.h>
+#include <sys/sysctl.h>
+#include <sys/mman.h>
+#include <sys/mount.h>
+#include <sys/utsname.h>
+#include <sys/wait.h>
+#include <sys/xattr.h>
+#include <net/bpf.h>
+#include <net/if.h>
+#include <net/if_types.h>
+#include <net/route.h>
+#include <netinet/in.h>
+#include <netinet/ip.h>
+#include <termios.h>
+'
+
+includes_DragonFly='
+#include <sys/types.h>
+#include <sys/event.h>
+#include <sys/select.h>
+#include <sys/socket.h>
+#include <sys/sockio.h>
+#include <sys/stat.h>
+#include <sys/sysctl.h>
+#include <sys/mman.h>
+#include <sys/mount.h>
+#include <sys/wait.h>
+#include <sys/ioctl.h>
+#include <net/bpf.h>
+#include <net/if.h>
+#include <net/if_types.h>
+#include <net/route.h>
+#include <netinet/in.h>
+#include <termios.h>
+#include <netinet/ip.h>
+#include <net/ip_mroute/ip_mroute.h>
+'
+
+includes_FreeBSD='
+#include <sys/capsicum.h>
+#include <sys/param.h>
+#include <sys/types.h>
+#include <sys/disk.h>
+#include <sys/event.h>
+#include <sys/sched.h>
+#include <sys/select.h>
+#include <sys/socket.h>
+#include <sys/sockio.h>
+#include <sys/stat.h>
+#include <sys/sysctl.h>
+#include <sys/mman.h>
+#include <sys/mount.h>
+#include <sys/wait.h>
+#include <sys/ioctl.h>
+#include <net/bpf.h>
+#include <net/if.h>
+#include <net/if_types.h>
+#include <net/route.h>
+#include <netinet/in.h>
+#include <termios.h>
+#include <netinet/ip.h>
+#include <netinet/ip_mroute.h>
+#include <sys/extattr.h>
+
+#if __FreeBSD__ >= 10
+#define IFT_CARP	0xf8	// IFT_CARP is deprecated in FreeBSD 10
+#undef SIOCAIFADDR
+#define SIOCAIFADDR	_IOW(105, 26, struct oifaliasreq)	// ifaliasreq contains if_data
+#undef SIOCSIFPHYADDR
+#define SIOCSIFPHYADDR	_IOW(105, 70, struct oifaliasreq)	// ifaliasreq contains if_data
+#endif
+'
+
+includes_Linux='
+#define _LARGEFILE_SOURCE
+#define _LARGEFILE64_SOURCE
+#ifndef __LP64__
+#define _FILE_OFFSET_BITS 64
+#endif
+#define _GNU_SOURCE
+
+// <sys/ioctl.h> is broken on powerpc64, as it fails to include definitions of
+// these structures. We just include them copied from <bits/termios.h>.
+#if defined(__powerpc__)
+struct sgttyb {
+        char    sg_ispeed;
+        char    sg_ospeed;
+        char    sg_erase;
+        char    sg_kill;
+        short   sg_flags;
+};
+
+struct tchars {
+        char    t_intrc;
+        char    t_quitc;
+        char    t_startc;
+        char    t_stopc;
+        char    t_eofc;
+        char    t_brkc;
+};
+
+struct ltchars {
+        char    t_suspc;
+        char    t_dsuspc;
+        char    t_rprntc;
+        char    t_flushc;
+        char    t_werasc;
+        char    t_lnextc;
+};
+#endif
+
+#include <bits/sockaddr.h>
+#include <sys/epoll.h>
+#include <sys/eventfd.h>
+#include <sys/inotify.h>
+#include <sys/ioctl.h>
+#include <sys/mman.h>
+#include <sys/mount.h>
+#include <sys/prctl.h>
+#include <sys/stat.h>
+#include <sys/types.h>
+#include <sys/time.h>
+#include <sys/select.h>
+#include <sys/signalfd.h>
+#include <sys/socket.h>
+#include <sys/timerfd.h>
+#include <sys/uio.h>
+#include <sys/xattr.h>
+#include <linux/bpf.h>
+#include <linux/can.h>
+#include <linux/can/error.h>
+#include <linux/can/raw.h>
+#include <linux/capability.h>
+#include <linux/cryptouser.h>
+#include <linux/devlink.h>
+#include <linux/dm-ioctl.h>
+#include <linux/errqueue.h>
+#include <linux/falloc.h>
+#include <linux/fanotify.h>
+#include <linux/filter.h>
+#include <linux/fs.h>
+#include <linux/fscrypt.h>
+#include <linux/fsverity.h>
+#include <linux/genetlink.h>
+#include <linux/hdreg.h>
+#include <linux/icmpv6.h>
+#include <linux/if.h>
+#include <linux/if_addr.h>
+#include <linux/if_alg.h>
+#include <linux/if_arp.h>
+#include <linux/if_ether.h>
+#include <linux/if_ppp.h>
+#include <linux/if_tun.h>
+#include <linux/if_packet.h>
+#include <linux/if_xdp.h>
+#include <linux/kexec.h>
+#include <linux/keyctl.h>
+#include <linux/loop.h>
+#include <linux/magic.h>
+#include <linux/memfd.h>
+#include <linux/module.h>
+#include <linux/netfilter/nfnetlink.h>
+#include <linux/netlink.h>
+#include <linux/net_namespace.h>
+#include <linux/nsfs.h>
+#include <linux/perf_event.h>
+#include <linux/ptrace.h>
+#include <linux/random.h>
+#include <linux/reboot.h>
+#include <linux/rtc.h>
+#include <linux/rtnetlink.h>
+#include <linux/sched.h>
+#include <linux/seccomp.h>
+#include <linux/serial.h>
+#include <linux/sockios.h>
+#include <linux/taskstats.h>
+#include <linux/tipc.h>
+#include <linux/vm_sockets.h>
+#include <linux/wait.h>
+#include <linux/watchdog.h>
+
+#include <mtd/ubi-user.h>
+#include <net/route.h>
+
+#if defined(__sparc__)
+// On sparc{,64}, the kernel defines struct termios2 itself which clashes with the
+// definition in glibc. As only the error constants are needed here, include the
+// generic termibits.h (which is included by termbits.h on sparc).
+#include <asm-generic/termbits.h>
+#else
+#include <asm/termbits.h>
+#endif
+
+#ifndef MSG_FASTOPEN
+#define MSG_FASTOPEN    0x20000000
+#endif
+
+#ifndef PTRACE_GETREGS
+#define PTRACE_GETREGS	0xc
+#endif
+
+#ifndef PTRACE_SETREGS
+#define PTRACE_SETREGS	0xd
+#endif
+
+#ifndef SOL_NETLINK
+#define SOL_NETLINK	270
+#endif
+
+#ifdef SOL_BLUETOOTH
+// SPARC includes this in /usr/include/sparc64-linux-gnu/bits/socket.h
+// but it is already in bluetooth_linux.go
+#undef SOL_BLUETOOTH
+#endif
+
+// Certain constants are missing from the fs/crypto UAPI
+#define FS_KEY_DESC_PREFIX              "fscrypt:"
+#define FS_KEY_DESC_PREFIX_SIZE         8
+#define FS_MAX_KEY_SIZE                 64
+
+// The code generator produces -0x1 for (~0), but an unsigned value is necessary
+// for the tipc_subscr timeout __u32 field.
+#undef TIPC_WAIT_FOREVER
+#define TIPC_WAIT_FOREVER 0xffffffff
+
+// Copied from linux/l2tp.h
+// Including linux/l2tp.h here causes conflicts between linux/in.h
+// and netinet/in.h included via net/route.h above.
+#define IPPROTO_L2TP		115
+'
+
+includes_NetBSD='
+#include <sys/types.h>
+#include <sys/param.h>
+#include <sys/event.h>
+#include <sys/extattr.h>
+#include <sys/mman.h>
+#include <sys/mount.h>
+#include <sys/sched.h>
+#include <sys/select.h>
+#include <sys/socket.h>
+#include <sys/sockio.h>
+#include <sys/sysctl.h>
+#include <sys/termios.h>
+#include <sys/ttycom.h>
+#include <sys/wait.h>
+#include <net/bpf.h>
+#include <net/if.h>
+#include <net/if_types.h>
+#include <net/route.h>
+#include <netinet/in.h>
+#include <netinet/in_systm.h>
+#include <netinet/ip.h>
+#include <netinet/ip_mroute.h>
+#include <netinet/if_ether.h>
+
+// Needed since <sys/param.h> refers to it...
+#define schedppq 1
+'
+
+includes_OpenBSD='
+#include <sys/types.h>
+#include <sys/param.h>
+#include <sys/event.h>
+#include <sys/mman.h>
+#include <sys/mount.h>
+#include <sys/select.h>
+#include <sys/sched.h>
+#include <sys/socket.h>
+#include <sys/sockio.h>
+#include <sys/stat.h>
+#include <sys/sysctl.h>
+#include <sys/termios.h>
+#include <sys/ttycom.h>
+#include <sys/unistd.h>
+#include <sys/wait.h>
+#include <net/bpf.h>
+#include <net/if.h>
+#include <net/if_types.h>
+#include <net/if_var.h>
+#include <net/route.h>
+#include <netinet/in.h>
+#include <netinet/in_systm.h>
+#include <netinet/ip.h>
+#include <netinet/ip_mroute.h>
+#include <netinet/if_ether.h>
+#include <net/if_bridge.h>
+
+// We keep some constants not supported in OpenBSD 5.5 and beyond for
+// the promise of compatibility.
+#define EMUL_ENABLED		0x1
+#define EMUL_NATIVE		0x2
+#define IPV6_FAITH		0x1d
+#define IPV6_OPTIONS		0x1
+#define IPV6_RTHDR_STRICT	0x1
+#define IPV6_SOCKOPT_RESERVED1	0x3
+#define SIOCGIFGENERIC		0xc020693a
+#define SIOCSIFGENERIC		0x80206939
+#define WALTSIG			0x4
+'
+
+includes_SunOS='
+#include <limits.h>
+#include <sys/types.h>
+#include <sys/select.h>
+#include <sys/socket.h>
+#include <sys/sockio.h>
+#include <sys/stat.h>
+#include <sys/mman.h>
+#include <sys/wait.h>
+#include <sys/ioctl.h>
+#include <sys/mkdev.h>
+#include <net/bpf.h>
+#include <net/if.h>
+#include <net/if_arp.h>
+#include <net/if_types.h>
+#include <net/route.h>
+#include <netinet/in.h>
+#include <termios.h>
+#include <netinet/ip.h>
+#include <netinet/ip_mroute.h>
+'
+
+
+includes='
+#include <sys/types.h>
+#include <sys/file.h>
+#include <fcntl.h>
+#include <dirent.h>
+#include <sys/socket.h>
+#include <netinet/in.h>
+#include <netinet/ip.h>
+#include <netinet/ip6.h>
+#include <netinet/tcp.h>
+#include <errno.h>
+#include <sys/signal.h>
+#include <signal.h>
+#include <sys/resource.h>
+#include <time.h>
+'
+ccflags="$@"
+
+# Write go tool cgo -godefs input.
+(
+	echo package unix
+	echo
+	echo '/*'
+	indirect="includes_$(uname)"
+	echo "${!indirect} $includes"
+	echo '*/'
+	echo 'import "C"'
+	echo 'import "syscall"'
+	echo
+	echo 'const ('
+
+	# The gcc command line prints all the #defines
+	# it encounters while processing the input
+	echo "${!indirect} $includes" | $CC -x c - -E -dM $ccflags |
+	awk '
+		$1 != "#define" || $2 ~ /\(/ || $3 == "" {next}
+
+		$2 ~ /^E([ABCD]X|[BIS]P|[SD]I|S|FL)$/ {next}  # 386 registers
+		$2 ~ /^(SIGEV_|SIGSTKSZ|SIGRT(MIN|MAX))/ {next}
+		$2 ~ /^(SCM_SRCRT)$/ {next}
+		$2 ~ /^(MAP_FAILED)$/ {next}
+		$2 ~ /^ELF_.*$/ {next}# <asm/elf.h> contains ELF_ARCH, etc.
+
+		$2 ~ /^EXTATTR_NAMESPACE_NAMES/ ||
+		$2 ~ /^EXTATTR_NAMESPACE_[A-Z]+_STRING/ {next}
+
+		$2 !~ /^ECCAPBITS/ &&
+		$2 !~ /^ETH_/ &&
+		$2 !~ /^EPROC_/ &&
+		$2 !~ /^EQUIV_/ &&
+		$2 !~ /^EXPR_/ &&
+		$2 ~ /^E[A-Z0-9_]+$/ ||
+		$2 ~ /^B[0-9_]+$/ ||
+		$2 ~ /^(OLD|NEW)DEV$/ ||
+		$2 == "BOTHER" ||
+		$2 ~ /^CI?BAUD(EX)?$/ ||
+		$2 == "IBSHIFT" ||
+		$2 ~ /^V[A-Z0-9]+$/ ||
+		$2 ~ /^CS[A-Z0-9]/ ||
+		$2 ~ /^I(SIG|CANON|CRNL|UCLC|EXTEN|MAXBEL|STRIP|UTF8)$/ ||
+		$2 ~ /^IGN/ ||
+		$2 ~ /^IX(ON|ANY|OFF)$/ ||
+		$2 ~ /^IN(LCR|PCK)$/ ||
+		$2 !~ "X86_CR3_PCID_NOFLUSH" &&
+		$2 ~ /(^FLU?SH)|(FLU?SH$)/ ||
+		$2 ~ /^C(LOCAL|READ|MSPAR|RTSCTS)$/ ||
+		$2 == "BRKINT" ||
+		$2 == "HUPCL" ||
+		$2 == "PENDIN" ||
+		$2 == "TOSTOP" ||
+		$2 == "XCASE" ||
+		$2 == "ALTWERASE" ||
+		$2 == "NOKERNINFO" ||
+		$2 == "NFDBITS" ||
+		$2 ~ /^PAR/ ||
+		$2 ~ /^SIG[^_]/ ||
+		$2 ~ /^O[CNPFPL][A-Z]+[^_][A-Z]+$/ ||
+		$2 ~ /^(NL|CR|TAB|BS|VT|FF)DLY$/ ||
+		$2 ~ /^(NL|CR|TAB|BS|VT|FF)[0-9]$/ ||
+		$2 ~ /^O?XTABS$/ ||
+		$2 ~ /^TC[IO](ON|OFF)$/ ||
+		$2 ~ /^IN_/ ||
+		$2 ~ /^LOCK_(SH|EX|NB|UN)$/ ||
+		$2 ~ /^LO_(KEY|NAME)_SIZE$/ ||
+		$2 ~ /^LOOP_(CLR|CTL|GET|SET)_/ ||
+		$2 ~ /^(AF|SOCK|SO|SOL|IPPROTO|IP|IPV6|ICMP6|TCP|MCAST|EVFILT|NOTE|EV|SHUT|PROT|MAP|MFD|T?PACKET|MSG|SCM|MCL|DT|MADV|PR)_/ ||
+		$2 ~ /^TP_STATUS_/ ||
+		$2 ~ /^FALLOC_/ ||
+		$2 == "ICMPV6_FILTER" ||
+		$2 == "SOMAXCONN" ||
+		$2 == "NAME_MAX" ||
+		$2 == "IFNAMSIZ" ||
+		$2 ~ /^CTL_(HW|KERN|MAXNAME|NET|QUERY)$/ ||
+		$2 ~ /^KERN_(HOSTNAME|OS(RELEASE|TYPE)|VERSION)$/ ||
+		$2 ~ /^HW_MACHINE$/ ||
+		$2 ~ /^SYSCTL_VERS/ ||
+		$2 !~ "MNT_BITS" &&
+		$2 ~ /^(MS|MNT|UMOUNT)_/ ||
+		$2 ~ /^NS_GET_/ ||
+		$2 ~ /^TUN(SET|GET|ATTACH|DETACH)/ ||
+		$2 ~ /^(O|F|[ES]?FD|NAME|S|PTRACE|PT|TFD)_/ ||
+		$2 ~ /^KEXEC_/ ||
+		$2 ~ /^LINUX_REBOOT_CMD_/ ||
+		$2 ~ /^LINUX_REBOOT_MAGIC[12]$/ ||
+		$2 ~ /^MODULE_INIT_/ ||
+		$2 !~ "NLA_TYPE_MASK" &&
+		$2 !~ /^RTC_VL_(ACCURACY|BACKUP|DATA)/ &&
+		$2 ~ /^(NETLINK|NLM|NLMSG|NLA|IFA|IFAN|RT|RTC|RTCF|RTN|RTPROT|RTNH|ARPHRD|ETH_P|NETNSA)_/ ||
+		$2 ~ /^SIOC/ ||
+		$2 ~ /^TIOC/ ||
+		$2 ~ /^TCGET/ ||
+		$2 ~ /^TCSET/ ||
+		$2 ~ /^TC(FLSH|SBRKP?|XONC)$/ ||
+		$2 !~ "RTF_BITS" &&
+		$2 ~ /^(IFF|IFT|NET_RT|RTM(GRP)?|RTF|RTV|RTA|RTAX)_/ ||
+		$2 ~ /^BIOC/ ||
+		$2 ~ /^DIOC/ ||
+		$2 ~ /^RUSAGE_(SELF|CHILDREN|THREAD)/ ||
+		$2 ~ /^RLIMIT_(AS|CORE|CPU|DATA|FSIZE|LOCKS|MEMLOCK|MSGQUEUE|NICE|NOFILE|NPROC|RSS|RTPRIO|RTTIME|SIGPENDING|STACK)|RLIM_INFINITY/ ||
+		$2 ~ /^PRIO_(PROCESS|PGRP|USER)/ ||
+		$2 ~ /^CLONE_[A-Z_]+/ ||
+		$2 !~ /^(BPF_TIMEVAL|BPF_FIB_LOOKUP_[A-Z]+)$/ &&
+		$2 ~ /^(BPF|DLT)_/ ||
+		$2 ~ /^(CLOCK|TIMER)_/ ||
+		$2 ~ /^CAN_/ ||
+		$2 ~ /^CAP_/ ||
+		$2 ~ /^CP_/ ||
+		$2 ~ /^CPUSTATES$/ ||
+		$2 ~ /^ALG_/ ||
+		$2 ~ /^FI(CLONE|DEDUPERANGE)/ ||
+		$2 ~ /^FS_(POLICY_FLAGS|KEY_DESC|ENCRYPTION_MODE|[A-Z0-9_]+_KEY_SIZE)/ ||
+		$2 ~ /^FS_IOC_.*(ENCRYPTION|VERITY|[GS]ETFLAGS)/ ||
+		$2 ~ /^FS_VERITY_/ ||
+		$2 ~ /^FSCRYPT_/ ||
+		$2 ~ /^DM_/ ||
+		$2 ~ /^GRND_/ ||
+		$2 ~ /^RND/ ||
+		$2 ~ /^KEY_(SPEC|REQKEY_DEFL)_/ ||
+		$2 ~ /^KEYCTL_/ ||
+		$2 ~ /^PERF_EVENT_IOC_/ ||
+		$2 ~ /^SECCOMP_MODE_/ ||
+		$2 ~ /^SPLICE_/ ||
+		$2 ~ /^SYNC_FILE_RANGE_/ ||
+		$2 !~ /^AUDIT_RECORD_MAGIC/ &&
+		$2 !~ /IOC_MAGIC/ &&
+		$2 ~ /^[A-Z][A-Z0-9_]+_MAGIC2?$/ ||
+		$2 ~ /^(VM|VMADDR)_/ ||
+		$2 ~ /^IOCTL_VM_SOCKETS_/ ||
+		$2 ~ /^(TASKSTATS|TS)_/ ||
+		$2 ~ /^CGROUPSTATS_/ ||
+		$2 ~ /^GENL_/ ||
+		$2 ~ /^STATX_/ ||
+		$2 ~ /^RENAME/ ||
+		$2 ~ /^UBI_IOC[A-Z]/ ||
+		$2 ~ /^UTIME_/ ||
+		$2 ~ /^XATTR_(CREATE|REPLACE|NO(DEFAULT|FOLLOW|SECURITY)|SHOWCOMPRESSION)/ ||
+		$2 ~ /^ATTR_(BIT_MAP_COUNT|(CMN|VOL|FILE)_)/ ||
+		$2 ~ /^FSOPT_/ ||
+		$2 ~ /^WDIOC_/ ||
+		$2 ~ /^NFN/ ||
+		$2 ~ /^XDP_/ ||
+		$2 ~ /^RWF_/ ||
+		$2 ~ /^(HDIO|WIN|SMART)_/ ||
+		$2 ~ /^CRYPTO_/ ||
+		$2 ~ /^TIPC_/ ||
+		$2 ~ /^DEVLINK_/ ||
+		$2 !~ "WMESGLEN" &&
+		$2 ~ /^W[A-Z0-9]+$/ ||
+		$2 ~/^PPPIOC/ ||
+		$2 ~ /^FAN_|FANOTIFY_/ ||
+		$2 ~ /^BLK[A-Z]*(GET$|SET$|BUF$|PART$|SIZE)/ {printf("\t%s = C.%s\n", $2, $2)}
+		$2 ~ /^__WCOREFLAG$/ {next}
+		$2 ~ /^__W[A-Z0-9]+$/ {printf("\t%s = C.%s\n", substr($2,3), $2)}
+
+		{next}
+	' | sort
+
+	echo ')'
+) >_const.go
+
+# Pull out the error names for later.
+errors=$(
+	echo '#include <errno.h>' | $CC -x c - -E -dM $ccflags |
+	awk '$1=="#define" && $2 ~ /^E[A-Z0-9_]+$/ { print $2 }' |
+	sort
+)
+
+# Pull out the signal names for later.
+signals=$(
+	echo '#include <signal.h>' | $CC -x c - -E -dM $ccflags |
+	awk '$1=="#define" && $2 ~ /^SIG[A-Z0-9]+$/ { print $2 }' |
+	egrep -v '(SIGSTKSIZE|SIGSTKSZ|SIGRT|SIGMAX64)' |
+	sort
+)
+
+# Again, writing regexps to a file.
+echo '#include <errno.h>' | $CC -x c - -E -dM $ccflags |
+	awk '$1=="#define" && $2 ~ /^E[A-Z0-9_]+$/ { print "^\t" $2 "[ \t]*=" }' |
+	sort >_error.grep
+echo '#include <signal.h>' | $CC -x c - -E -dM $ccflags |
+	awk '$1=="#define" && $2 ~ /^SIG[A-Z0-9]+$/ { print "^\t" $2 "[ \t]*=" }' |
+	egrep -v '(SIGSTKSIZE|SIGSTKSZ|SIGRT|SIGMAX64)' |
+	sort >_signal.grep
+
+echo '// mkerrors.sh' "$@"
+echo '// Code generated by the command above; see README.md. DO NOT EDIT.'
+echo
+echo "// +build ${GOARCH},${GOOS}"
+echo
+go tool cgo -godefs -- "$@" _const.go >_error.out
+cat _error.out | grep -vf _error.grep | grep -vf _signal.grep
+echo
+echo '// Errors'
+echo 'const ('
+cat _error.out | grep -f _error.grep | sed 's/=\(.*\)/= syscall.Errno(\1)/'
+echo ')'
+
+echo
+echo '// Signals'
+echo 'const ('
+cat _error.out | grep -f _signal.grep | sed 's/=\(.*\)/= syscall.Signal(\1)/'
+echo ')'
+
+# Run C program to print error and syscall strings.
+(
+	echo -E "
+#include <stdio.h>
+#include <stdlib.h>
+#include <errno.h>
+#include <ctype.h>
+#include <string.h>
+#include <signal.h>
+
+#define nelem(x) (sizeof(x)/sizeof((x)[0]))
+
+enum { A = 'A', Z = 'Z', a = 'a', z = 'z' }; // avoid need for single quotes below
+
+struct tuple {
+	int num;
+	const char *name;
+};
+
+struct tuple errors[] = {
+"
+	for i in $errors
+	do
+		echo -E '	{'$i', "'$i'" },'
+	done
+
+	echo -E "
+};
+
+struct tuple signals[] = {
+"
+	for i in $signals
+	do
+		echo -E '	{'$i', "'$i'" },'
+	done
+
+	# Use -E because on some systems bash builtin interprets \n itself.
+	echo -E '
+};
+
+static int
+tuplecmp(const void *a, const void *b)
+{
+	return ((struct tuple *)a)->num - ((struct tuple *)b)->num;
+}
+
+int
+main(void)
+{
+	int i, e;
+	char buf[1024], *p;
+
+	printf("\n\n// Error table\n");
+	printf("var errorList = [...]struct {\n");
+	printf("\tnum  syscall.Errno\n");
+	printf("\tname string\n");
+	printf("\tdesc string\n");
+	printf("} {\n");
+	qsort(errors, nelem(errors), sizeof errors[0], tuplecmp);
+	for(i=0; i<nelem(errors); i++) {
+		e = errors[i].num;
+		if(i > 0 && errors[i-1].num == e)
+			continue;
+		strcpy(buf, strerror(e));
+		// lowercase first letter: Bad -> bad, but STREAM -> STREAM.
+		if(A <= buf[0] && buf[0] <= Z && a <= buf[1] && buf[1] <= z)
+			buf[0] += a - A;
+		printf("\t{ %d, \"%s\", \"%s\" },\n", e, errors[i].name, buf);
+	}
+	printf("}\n\n");
+
+	printf("\n\n// Signal table\n");
+	printf("var signalList = [...]struct {\n");
+	printf("\tnum  syscall.Signal\n");
+	printf("\tname string\n");
+	printf("\tdesc string\n");
+	printf("} {\n");
+	qsort(signals, nelem(signals), sizeof signals[0], tuplecmp);
+	for(i=0; i<nelem(signals); i++) {
+		e = signals[i].num;
+		if(i > 0 && signals[i-1].num == e)
+			continue;
+		strcpy(buf, strsignal(e));
+		// lowercase first letter: Bad -> bad, but STREAM -> STREAM.
+		if(A <= buf[0] && buf[0] <= Z && a <= buf[1] && buf[1] <= z)
+			buf[0] += a - A;
+		// cut trailing : number.
+		p = strrchr(buf, ":"[0]);
+		if(p)
+			*p = '\0';
+		printf("\t{ %d, \"%s\", \"%s\" },\n", e, signals[i].name, buf);
+	}
+	printf("}\n\n");
+
+	return 0;
+}
+
+'
+) >_errors.c
+
+$CC $ccflags -o _errors _errors.c && $GORUN ./_errors && rm -f _errors.c _errors _const.go _error.grep _signal.grep _error.out
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/pagesize_unix.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/pagesize_unix.go
new file mode 100644
index 000000000..bc2f3629a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/pagesize_unix.go
@@ -0,0 +1,15 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris
+
+// For Unix, get the pagesize from the runtime.
+
+package unix
+
+import "syscall"
+
+func Getpagesize() int {
+	return syscall.Getpagesize()
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/pledge_openbsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/pledge_openbsd.go
new file mode 100644
index 000000000..eb48294b2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/pledge_openbsd.go
@@ -0,0 +1,163 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package unix
+
+import (
+	"errors"
+	"fmt"
+	"strconv"
+	"syscall"
+	"unsafe"
+)
+
+// Pledge implements the pledge syscall.
+//
+// The pledge syscall does not accept execpromises on OpenBSD releases
+// before 6.3.
+//
+// execpromises must be empty when Pledge is called on OpenBSD
+// releases predating 6.3, otherwise an error will be returned.
+//
+// For more information see pledge(2).
+func Pledge(promises, execpromises string) error {
+	maj, min, err := majmin()
+	if err != nil {
+		return err
+	}
+
+	err = pledgeAvailable(maj, min, execpromises)
+	if err != nil {
+		return err
+	}
+
+	pptr, err := syscall.BytePtrFromString(promises)
+	if err != nil {
+		return err
+	}
+
+	// This variable will hold either a nil unsafe.Pointer or
+	// an unsafe.Pointer to a string (execpromises).
+	var expr unsafe.Pointer
+
+	// If we're running on OpenBSD > 6.2, pass execpromises to the syscall.
+	if maj > 6 || (maj == 6 && min > 2) {
+		exptr, err := syscall.BytePtrFromString(execpromises)
+		if err != nil {
+			return err
+		}
+		expr = unsafe.Pointer(exptr)
+	}
+
+	_, _, e := syscall.Syscall(SYS_PLEDGE, uintptr(unsafe.Pointer(pptr)), uintptr(expr), 0)
+	if e != 0 {
+		return e
+	}
+
+	return nil
+}
+
+// PledgePromises implements the pledge syscall.
+//
+// This changes the promises and leaves the execpromises untouched.
+//
+// For more information see pledge(2).
+func PledgePromises(promises string) error {
+	maj, min, err := majmin()
+	if err != nil {
+		return err
+	}
+
+	err = pledgeAvailable(maj, min, "")
+	if err != nil {
+		return err
+	}
+
+	// This variable holds the execpromises and is always nil.
+	var expr unsafe.Pointer
+
+	pptr, err := syscall.BytePtrFromString(promises)
+	if err != nil {
+		return err
+	}
+
+	_, _, e := syscall.Syscall(SYS_PLEDGE, uintptr(unsafe.Pointer(pptr)), uintptr(expr), 0)
+	if e != 0 {
+		return e
+	}
+
+	return nil
+}
+
+// PledgeExecpromises implements the pledge syscall.
+//
+// This changes the execpromises and leaves the promises untouched.
+//
+// For more information see pledge(2).
+func PledgeExecpromises(execpromises string) error {
+	maj, min, err := majmin()
+	if err != nil {
+		return err
+	}
+
+	err = pledgeAvailable(maj, min, execpromises)
+	if err != nil {
+		return err
+	}
+
+	// This variable holds the promises and is always nil.
+	var pptr unsafe.Pointer
+
+	exptr, err := syscall.BytePtrFromString(execpromises)
+	if err != nil {
+		return err
+	}
+
+	_, _, e := syscall.Syscall(SYS_PLEDGE, uintptr(pptr), uintptr(unsafe.Pointer(exptr)), 0)
+	if e != 0 {
+		return e
+	}
+
+	return nil
+}
+
+// majmin returns major and minor version number for an OpenBSD system.
+func majmin() (major int, minor int, err error) {
+	var v Utsname
+	err = Uname(&v)
+	if err != nil {
+		return
+	}
+
+	major, err = strconv.Atoi(string(v.Release[0]))
+	if err != nil {
+		err = errors.New("cannot parse major version number returned by uname")
+		return
+	}
+
+	minor, err = strconv.Atoi(string(v.Release[2]))
+	if err != nil {
+		err = errors.New("cannot parse minor version number returned by uname")
+		return
+	}
+
+	return
+}
+
+// pledgeAvailable checks for availability of the pledge(2) syscall
+// based on the running OpenBSD version.
+func pledgeAvailable(maj, min int, execpromises string) error {
+	// If OpenBSD <= 5.9, pledge is not available.
+	if (maj == 5 && min != 9) || maj < 5 {
+		return fmt.Errorf("pledge syscall is not available on OpenBSD %d.%d", maj, min)
+	}
+
+	// If OpenBSD <= 6.2 and execpromises is not empty,
+	// return an error - execpromises is not available before 6.3
+	if (maj < 6 || (maj == 6 && min <= 2)) && execpromises != "" {
+		return fmt.Errorf("cannot use execpromises on OpenBSD %d.%d", maj, min)
+	}
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/race.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/race.go
new file mode 100644
index 000000000..61712b51c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/race.go
@@ -0,0 +1,30 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build darwin,race linux,race freebsd,race
+
+package unix
+
+import (
+	"runtime"
+	"unsafe"
+)
+
+const raceenabled = true
+
+func raceAcquire(addr unsafe.Pointer) {
+	runtime.RaceAcquire(addr)
+}
+
+func raceReleaseMerge(addr unsafe.Pointer) {
+	runtime.RaceReleaseMerge(addr)
+}
+
+func raceReadRange(addr unsafe.Pointer, len int) {
+	runtime.RaceReadRange(addr, len)
+}
+
+func raceWriteRange(addr unsafe.Pointer, len int) {
+	runtime.RaceWriteRange(addr, len)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/race0.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/race0.go
new file mode 100644
index 000000000..ad026678c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/race0.go
@@ -0,0 +1,25 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin,!race linux,!race freebsd,!race netbsd openbsd solaris dragonfly
+
+package unix
+
+import (
+	"unsafe"
+)
+
+const raceenabled = false
+
+func raceAcquire(addr unsafe.Pointer) {
+}
+
+func raceReleaseMerge(addr unsafe.Pointer) {
+}
+
+func raceReadRange(addr unsafe.Pointer, len int) {
+}
+
+func raceWriteRange(addr unsafe.Pointer, len int) {
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/readdirent_getdents.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/readdirent_getdents.go
new file mode 100644
index 000000000..3a90aa6df
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/readdirent_getdents.go
@@ -0,0 +1,12 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix dragonfly freebsd linux netbsd openbsd
+
+package unix
+
+// ReadDirent reads directory entries from fd and writes them into buf.
+func ReadDirent(fd int, buf []byte) (n int, err error) {
+	return Getdents(fd, buf)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/readdirent_getdirentries.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/readdirent_getdirentries.go
new file mode 100644
index 000000000..5fdae40b3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/readdirent_getdirentries.go
@@ -0,0 +1,19 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build darwin
+
+package unix
+
+import "unsafe"
+
+// ReadDirent reads directory entries from fd and writes them into buf.
+func ReadDirent(fd int, buf []byte) (n int, err error) {
+	// Final argument is (basep *uintptr) and the syscall doesn't take nil.
+	// 64 bits should be enough. (32 bits isn't even on 386). Since the
+	// actual system call is getdirentries64, 64 is a good guess.
+	// TODO(rsc): Can we use a single global basep for all calls?
+	var base = (*uintptr)(unsafe.Pointer(new(uint64)))
+	return Getdirentries(fd, buf, base)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/sockcmsg_dragonfly.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/sockcmsg_dragonfly.go
new file mode 100644
index 000000000..5144deecc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/sockcmsg_dragonfly.go
@@ -0,0 +1,16 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package unix
+
+// Round the length of a raw sockaddr up to align it properly.
+func cmsgAlignOf(salen int) int {
+	salign := SizeofPtr
+	if SizeofPtr == 8 && !supportsABI(_dragonflyABIChangeVersion) {
+		// 64-bit Dragonfly before the September 2019 ABI changes still requires
+		// 32-bit aligned access to network subsystem.
+		salign = 4
+	}
+	return (salen + salign - 1) & ^(salign - 1)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/sockcmsg_linux.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/sockcmsg_linux.go
new file mode 100644
index 000000000..8bf457059
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/sockcmsg_linux.go
@@ -0,0 +1,36 @@
+// Copyright 2011 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Socket control messages
+
+package unix
+
+import "unsafe"
+
+// UnixCredentials encodes credentials into a socket control message
+// for sending to another process. This can be used for
+// authentication.
+func UnixCredentials(ucred *Ucred) []byte {
+	b := make([]byte, CmsgSpace(SizeofUcred))
+	h := (*Cmsghdr)(unsafe.Pointer(&b[0]))
+	h.Level = SOL_SOCKET
+	h.Type = SCM_CREDENTIALS
+	h.SetLen(CmsgLen(SizeofUcred))
+	*(*Ucred)(h.data(0)) = *ucred
+	return b
+}
+
+// ParseUnixCredentials decodes a socket control message that contains
+// credentials in a Ucred structure. To receive such a message, the
+// SO_PASSCRED option must be enabled on the socket.
+func ParseUnixCredentials(m *SocketControlMessage) (*Ucred, error) {
+	if m.Header.Level != SOL_SOCKET {
+		return nil, EINVAL
+	}
+	if m.Header.Type != SCM_CREDENTIALS {
+		return nil, EINVAL
+	}
+	ucred := *(*Ucred)(unsafe.Pointer(&m.Data[0]))
+	return &ucred, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/sockcmsg_unix.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/sockcmsg_unix.go
new file mode 100644
index 000000000..003916ed7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/sockcmsg_unix.go
@@ -0,0 +1,92 @@
+// Copyright 2011 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris
+
+// Socket control messages
+
+package unix
+
+import (
+	"unsafe"
+)
+
+// CmsgLen returns the value to store in the Len field of the Cmsghdr
+// structure, taking into account any necessary alignment.
+func CmsgLen(datalen int) int {
+	return cmsgAlignOf(SizeofCmsghdr) + datalen
+}
+
+// CmsgSpace returns the number of bytes an ancillary element with
+// payload of the passed data length occupies.
+func CmsgSpace(datalen int) int {
+	return cmsgAlignOf(SizeofCmsghdr) + cmsgAlignOf(datalen)
+}
+
+func (h *Cmsghdr) data(offset uintptr) unsafe.Pointer {
+	return unsafe.Pointer(uintptr(unsafe.Pointer(h)) + uintptr(cmsgAlignOf(SizeofCmsghdr)) + offset)
+}
+
+// SocketControlMessage represents a socket control message.
+type SocketControlMessage struct {
+	Header Cmsghdr
+	Data   []byte
+}
+
+// ParseSocketControlMessage parses b as an array of socket control
+// messages.
+func ParseSocketControlMessage(b []byte) ([]SocketControlMessage, error) {
+	var msgs []SocketControlMessage
+	i := 0
+	for i+CmsgLen(0) <= len(b) {
+		h, dbuf, err := socketControlMessageHeaderAndData(b[i:])
+		if err != nil {
+			return nil, err
+		}
+		m := SocketControlMessage{Header: *h, Data: dbuf}
+		msgs = append(msgs, m)
+		i += cmsgAlignOf(int(h.Len))
+	}
+	return msgs, nil
+}
+
+func socketControlMessageHeaderAndData(b []byte) (*Cmsghdr, []byte, error) {
+	h := (*Cmsghdr)(unsafe.Pointer(&b[0]))
+	if h.Len < SizeofCmsghdr || uint64(h.Len) > uint64(len(b)) {
+		return nil, nil, EINVAL
+	}
+	return h, b[cmsgAlignOf(SizeofCmsghdr):h.Len], nil
+}
+
+// UnixRights encodes a set of open file descriptors into a socket
+// control message for sending to another process.
+func UnixRights(fds ...int) []byte {
+	datalen := len(fds) * 4
+	b := make([]byte, CmsgSpace(datalen))
+	h := (*Cmsghdr)(unsafe.Pointer(&b[0]))
+	h.Level = SOL_SOCKET
+	h.Type = SCM_RIGHTS
+	h.SetLen(CmsgLen(datalen))
+	for i, fd := range fds {
+		*(*int32)(h.data(4 * uintptr(i))) = int32(fd)
+	}
+	return b
+}
+
+// ParseUnixRights decodes a socket control message that contains an
+// integer array of open file descriptors from another process.
+func ParseUnixRights(m *SocketControlMessage) ([]int, error) {
+	if m.Header.Level != SOL_SOCKET {
+		return nil, EINVAL
+	}
+	if m.Header.Type != SCM_RIGHTS {
+		return nil, EINVAL
+	}
+	fds := make([]int, len(m.Data)>>2)
+	for i, j := 0, 0; i < len(m.Data); i += 4 {
+		fds[j] = int(*(*int32)(unsafe.Pointer(&m.Data[i])))
+		j++
+	}
+	return fds, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/sockcmsg_unix_other.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/sockcmsg_unix_other.go
new file mode 100644
index 000000000..57a0021da
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/sockcmsg_unix_other.go
@@ -0,0 +1,42 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin freebsd linux netbsd openbsd solaris
+
+package unix
+
+import (
+	"runtime"
+)
+
+// Round the length of a raw sockaddr up to align it properly.
+func cmsgAlignOf(salen int) int {
+	salign := SizeofPtr
+
+	// dragonfly needs to check ABI version at runtime, see cmsgAlignOf in
+	// sockcmsg_dragonfly.go
+	switch runtime.GOOS {
+	case "aix":
+		// There is no alignment on AIX.
+		salign = 1
+	case "darwin", "ios", "illumos", "solaris":
+		// NOTE: It seems like 64-bit Darwin, Illumos and Solaris
+		// kernels still require 32-bit aligned access to network
+		// subsystem.
+		if SizeofPtr == 8 {
+			salign = 4
+		}
+	case "netbsd", "openbsd":
+		// NetBSD and OpenBSD armv7 require 64-bit alignment.
+		if runtime.GOARCH == "arm" {
+			salign = 8
+		}
+		// NetBSD aarch64 requires 128-bit alignment.
+		if runtime.GOOS == "netbsd" && runtime.GOARCH == "arm64" {
+			salign = 16
+		}
+	}
+
+	return (salen + salign - 1) & ^(salign - 1)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/str.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/str.go
new file mode 100644
index 000000000..17fb69868
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/str.go
@@ -0,0 +1,26 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris
+
+package unix
+
+func itoa(val int) string { // do it here rather than with fmt to avoid dependency
+	if val < 0 {
+		return "-" + uitoa(uint(-val))
+	}
+	return uitoa(uint(val))
+}
+
+func uitoa(val uint) string {
+	var buf [32]byte // big enough for int64
+	i := len(buf) - 1
+	for val >= 10 {
+		buf[i] = byte(val%10 + '0')
+		i--
+		val /= 10
+	}
+	buf[i] = byte(val + '0')
+	return string(buf[i:])
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall.go
new file mode 100644
index 000000000..fd4ee8ebe
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall.go
@@ -0,0 +1,53 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris
+
+// Package unix contains an interface to the low-level operating system
+// primitives. OS details vary depending on the underlying system, and
+// by default, godoc will display OS-specific documentation for the current
+// system. If you want godoc to display OS documentation for another
+// system, set $GOOS and $GOARCH to the desired system. For example, if
+// you want to view documentation for freebsd/arm on linux/amd64, set $GOOS
+// to freebsd and $GOARCH to arm.
+//
+// The primary use of this package is inside other packages that provide a more
+// portable interface to the system, such as "os", "time" and "net".  Use
+// those packages rather than this one if you can.
+//
+// For details of the functions and data types in this package consult
+// the manuals for the appropriate operating system.
+//
+// These calls return err == nil to indicate success; otherwise
+// err represents an operating system error describing the failure and
+// holds a value of type syscall.Errno.
+package unix // import "golang.org/x/sys/unix"
+
+import "strings"
+
+// ByteSliceFromString returns a NUL-terminated slice of bytes
+// containing the text of s. If s contains a NUL byte at any
+// location, it returns (nil, EINVAL).
+func ByteSliceFromString(s string) ([]byte, error) {
+	if strings.IndexByte(s, 0) != -1 {
+		return nil, EINVAL
+	}
+	a := make([]byte, len(s)+1)
+	copy(a, s)
+	return a, nil
+}
+
+// BytePtrFromString returns a pointer to a NUL-terminated array of
+// bytes containing the text of s. If s contains a NUL byte at any
+// location, it returns (nil, EINVAL).
+func BytePtrFromString(s string) (*byte, error) {
+	a, err := ByteSliceFromString(s)
+	if err != nil {
+		return nil, err
+	}
+	return &a[0], nil
+}
+
+// Single-word zero for use when we need a valid pointer to 0 bytes.
+var _zero uintptr
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_aix.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_aix.go
new file mode 100644
index 000000000..9ad8a0d4a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_aix.go
@@ -0,0 +1,536 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix
+
+// Aix system calls.
+// This file is compiled as ordinary Go code,
+// but it is also input to mksyscall,
+// which parses the //sys lines and generates system call stubs.
+// Note that sometimes we use a lowercase //sys name and
+// wrap it in our own nicer implementation.
+
+package unix
+
+import "unsafe"
+
+/*
+ * Wrapped
+ */
+
+//sys	utimes(path string, times *[2]Timeval) (err error)
+func Utimes(path string, tv []Timeval) error {
+	if len(tv) != 2 {
+		return EINVAL
+	}
+	return utimes(path, (*[2]Timeval)(unsafe.Pointer(&tv[0])))
+}
+
+//sys	utimensat(dirfd int, path string, times *[2]Timespec, flag int) (err error)
+func UtimesNano(path string, ts []Timespec) error {
+	if len(ts) != 2 {
+		return EINVAL
+	}
+	return utimensat(AT_FDCWD, path, (*[2]Timespec)(unsafe.Pointer(&ts[0])), 0)
+}
+
+func UtimesNanoAt(dirfd int, path string, ts []Timespec, flags int) error {
+	if ts == nil {
+		return utimensat(dirfd, path, nil, flags)
+	}
+	if len(ts) != 2 {
+		return EINVAL
+	}
+	return utimensat(dirfd, path, (*[2]Timespec)(unsafe.Pointer(&ts[0])), flags)
+}
+
+func (sa *SockaddrInet4) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	if sa.Port < 0 || sa.Port > 0xFFFF {
+		return nil, 0, EINVAL
+	}
+	sa.raw.Family = AF_INET
+	p := (*[2]byte)(unsafe.Pointer(&sa.raw.Port))
+	p[0] = byte(sa.Port >> 8)
+	p[1] = byte(sa.Port)
+	for i := 0; i < len(sa.Addr); i++ {
+		sa.raw.Addr[i] = sa.Addr[i]
+	}
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrInet4, nil
+}
+
+func (sa *SockaddrInet6) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	if sa.Port < 0 || sa.Port > 0xFFFF {
+		return nil, 0, EINVAL
+	}
+	sa.raw.Family = AF_INET6
+	p := (*[2]byte)(unsafe.Pointer(&sa.raw.Port))
+	p[0] = byte(sa.Port >> 8)
+	p[1] = byte(sa.Port)
+	sa.raw.Scope_id = sa.ZoneId
+	for i := 0; i < len(sa.Addr); i++ {
+		sa.raw.Addr[i] = sa.Addr[i]
+	}
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrInet6, nil
+}
+
+func (sa *SockaddrUnix) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	name := sa.Name
+	n := len(name)
+	if n > len(sa.raw.Path) {
+		return nil, 0, EINVAL
+	}
+	if n == len(sa.raw.Path) && name[0] != '@' {
+		return nil, 0, EINVAL
+	}
+	sa.raw.Family = AF_UNIX
+	for i := 0; i < n; i++ {
+		sa.raw.Path[i] = uint8(name[i])
+	}
+	// length is family (uint16), name, NUL.
+	sl := _Socklen(2)
+	if n > 0 {
+		sl += _Socklen(n) + 1
+	}
+	if sa.raw.Path[0] == '@' {
+		sa.raw.Path[0] = 0
+		// Don't count trailing NUL for abstract address.
+		sl--
+	}
+
+	return unsafe.Pointer(&sa.raw), sl, nil
+}
+
+func Getsockname(fd int) (sa Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	var len _Socklen = SizeofSockaddrAny
+	if err = getsockname(fd, &rsa, &len); err != nil {
+		return
+	}
+	return anyToSockaddr(fd, &rsa)
+}
+
+//sys	getcwd(buf []byte) (err error)
+
+const ImplementsGetwd = true
+
+func Getwd() (ret string, err error) {
+	for len := uint64(4096); ; len *= 2 {
+		b := make([]byte, len)
+		err := getcwd(b)
+		if err == nil {
+			i := 0
+			for b[i] != 0 {
+				i++
+			}
+			return string(b[0:i]), nil
+		}
+		if err != ERANGE {
+			return "", err
+		}
+	}
+}
+
+func Getcwd(buf []byte) (n int, err error) {
+	err = getcwd(buf)
+	if err == nil {
+		i := 0
+		for buf[i] != 0 {
+			i++
+		}
+		n = i + 1
+	}
+	return
+}
+
+func Getgroups() (gids []int, err error) {
+	n, err := getgroups(0, nil)
+	if err != nil {
+		return nil, err
+	}
+	if n == 0 {
+		return nil, nil
+	}
+
+	// Sanity check group count. Max is 16 on BSD.
+	if n < 0 || n > 1000 {
+		return nil, EINVAL
+	}
+
+	a := make([]_Gid_t, n)
+	n, err = getgroups(n, &a[0])
+	if err != nil {
+		return nil, err
+	}
+	gids = make([]int, n)
+	for i, v := range a[0:n] {
+		gids[i] = int(v)
+	}
+	return
+}
+
+func Setgroups(gids []int) (err error) {
+	if len(gids) == 0 {
+		return setgroups(0, nil)
+	}
+
+	a := make([]_Gid_t, len(gids))
+	for i, v := range gids {
+		a[i] = _Gid_t(v)
+	}
+	return setgroups(len(a), &a[0])
+}
+
+/*
+ * Socket
+ */
+
+//sys	accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error)
+
+func Accept(fd int) (nfd int, sa Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	var len _Socklen = SizeofSockaddrAny
+	nfd, err = accept(fd, &rsa, &len)
+	if nfd == -1 {
+		return
+	}
+	sa, err = anyToSockaddr(fd, &rsa)
+	if err != nil {
+		Close(nfd)
+		nfd = 0
+	}
+	return
+}
+
+func Recvmsg(fd int, p, oob []byte, flags int) (n, oobn int, recvflags int, from Sockaddr, err error) {
+	// Recvmsg not implemented on AIX
+	sa := new(SockaddrUnix)
+	return -1, -1, -1, sa, ENOSYS
+}
+
+func Sendmsg(fd int, p, oob []byte, to Sockaddr, flags int) (err error) {
+	_, err = SendmsgN(fd, p, oob, to, flags)
+	return
+}
+
+func SendmsgN(fd int, p, oob []byte, to Sockaddr, flags int) (n int, err error) {
+	// SendmsgN not implemented on AIX
+	return -1, ENOSYS
+}
+
+func anyToSockaddr(fd int, rsa *RawSockaddrAny) (Sockaddr, error) {
+	switch rsa.Addr.Family {
+
+	case AF_UNIX:
+		pp := (*RawSockaddrUnix)(unsafe.Pointer(rsa))
+		sa := new(SockaddrUnix)
+
+		// Some versions of AIX have a bug in getsockname (see IV78655).
+		// We can't rely on sa.Len being set correctly.
+		n := SizeofSockaddrUnix - 3 // subtract leading Family, Len, terminating NUL.
+		for i := 0; i < n; i++ {
+			if pp.Path[i] == 0 {
+				n = i
+				break
+			}
+		}
+
+		bytes := (*[10000]byte)(unsafe.Pointer(&pp.Path[0]))[0:n]
+		sa.Name = string(bytes)
+		return sa, nil
+
+	case AF_INET:
+		pp := (*RawSockaddrInet4)(unsafe.Pointer(rsa))
+		sa := new(SockaddrInet4)
+		p := (*[2]byte)(unsafe.Pointer(&pp.Port))
+		sa.Port = int(p[0])<<8 + int(p[1])
+		for i := 0; i < len(sa.Addr); i++ {
+			sa.Addr[i] = pp.Addr[i]
+		}
+		return sa, nil
+
+	case AF_INET6:
+		pp := (*RawSockaddrInet6)(unsafe.Pointer(rsa))
+		sa := new(SockaddrInet6)
+		p := (*[2]byte)(unsafe.Pointer(&pp.Port))
+		sa.Port = int(p[0])<<8 + int(p[1])
+		sa.ZoneId = pp.Scope_id
+		for i := 0; i < len(sa.Addr); i++ {
+			sa.Addr[i] = pp.Addr[i]
+		}
+		return sa, nil
+	}
+	return nil, EAFNOSUPPORT
+}
+
+func Gettimeofday(tv *Timeval) (err error) {
+	err = gettimeofday(tv, nil)
+	return
+}
+
+func Sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	if raceenabled {
+		raceReleaseMerge(unsafe.Pointer(&ioSync))
+	}
+	return sendfile(outfd, infd, offset, count)
+}
+
+// TODO
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	return -1, ENOSYS
+}
+
+func direntIno(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Ino), unsafe.Sizeof(Dirent{}.Ino))
+}
+
+func direntReclen(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Reclen), unsafe.Sizeof(Dirent{}.Reclen))
+}
+
+func direntNamlen(buf []byte) (uint64, bool) {
+	reclen, ok := direntReclen(buf)
+	if !ok {
+		return 0, false
+	}
+	return reclen - uint64(unsafe.Offsetof(Dirent{}.Name)), true
+}
+
+//sys	getdirent(fd int, buf []byte) (n int, err error)
+func Getdents(fd int, buf []byte) (n int, err error) {
+	return getdirent(fd, buf)
+}
+
+//sys	wait4(pid Pid_t, status *_C_int, options int, rusage *Rusage) (wpid Pid_t, err error)
+func Wait4(pid int, wstatus *WaitStatus, options int, rusage *Rusage) (wpid int, err error) {
+	var status _C_int
+	var r Pid_t
+	err = ERESTART
+	// AIX wait4 may return with ERESTART errno, while the processus is still
+	// active.
+	for err == ERESTART {
+		r, err = wait4(Pid_t(pid), &status, options, rusage)
+	}
+	wpid = int(r)
+	if wstatus != nil {
+		*wstatus = WaitStatus(status)
+	}
+	return
+}
+
+/*
+ * Wait
+ */
+
+type WaitStatus uint32
+
+func (w WaitStatus) Stopped() bool { return w&0x40 != 0 }
+func (w WaitStatus) StopSignal() Signal {
+	if !w.Stopped() {
+		return -1
+	}
+	return Signal(w>>8) & 0xFF
+}
+
+func (w WaitStatus) Exited() bool { return w&0xFF == 0 }
+func (w WaitStatus) ExitStatus() int {
+	if !w.Exited() {
+		return -1
+	}
+	return int((w >> 8) & 0xFF)
+}
+
+func (w WaitStatus) Signaled() bool { return w&0x40 == 0 && w&0xFF != 0 }
+func (w WaitStatus) Signal() Signal {
+	if !w.Signaled() {
+		return -1
+	}
+	return Signal(w>>16) & 0xFF
+}
+
+func (w WaitStatus) Continued() bool { return w&0x01000000 != 0 }
+
+func (w WaitStatus) CoreDump() bool { return w&0x80 == 0x80 }
+
+func (w WaitStatus) TrapCause() int { return -1 }
+
+//sys	ioctl(fd int, req uint, arg uintptr) (err error)
+
+// fcntl must never be called with cmd=F_DUP2FD because it doesn't work on AIX
+// There is no way to create a custom fcntl and to keep //sys fcntl easily,
+// Therefore, the programmer must call dup2 instead of fcntl in this case.
+
+// FcntlInt performs a fcntl syscall on fd with the provided command and argument.
+//sys	FcntlInt(fd uintptr, cmd int, arg int) (r int,err error) = fcntl
+
+// FcntlFlock performs a fcntl syscall for the F_GETLK, F_SETLK or F_SETLKW command.
+//sys	FcntlFlock(fd uintptr, cmd int, lk *Flock_t) (err error) = fcntl
+
+//sys	fcntl(fd int, cmd int, arg int) (val int, err error)
+
+/*
+ * Direct access
+ */
+
+//sys	Acct(path string) (err error)
+//sys	Chdir(path string) (err error)
+//sys	Chroot(path string) (err error)
+//sys	Close(fd int) (err error)
+//sys	Dup(oldfd int) (fd int, err error)
+//sys	Exit(code int)
+//sys	Faccessat(dirfd int, path string, mode uint32, flags int) (err error)
+//sys	Fchdir(fd int) (err error)
+//sys	Fchmod(fd int, mode uint32) (err error)
+//sys	Fchmodat(dirfd int, path string, mode uint32, flags int) (err error)
+//sys	Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error)
+//sys	Fdatasync(fd int) (err error)
+//sys	Fsync(fd int) (err error)
+// readdir_r
+//sysnb	Getpgid(pid int) (pgid int, err error)
+
+//sys	Getpgrp() (pid int)
+
+//sysnb	Getpid() (pid int)
+//sysnb	Getppid() (ppid int)
+//sys	Getpriority(which int, who int) (prio int, err error)
+//sysnb	Getrusage(who int, rusage *Rusage) (err error)
+//sysnb	Getsid(pid int) (sid int, err error)
+//sysnb	Kill(pid int, sig Signal) (err error)
+//sys	Klogctl(typ int, buf []byte) (n int, err error) = syslog
+//sys	Mkdir(dirfd int, path string, mode uint32) (err error)
+//sys	Mkdirat(dirfd int, path string, mode uint32) (err error)
+//sys	Mkfifo(path string, mode uint32) (err error)
+//sys	Mknod(path string, mode uint32, dev int) (err error)
+//sys	Mknodat(dirfd int, path string, mode uint32, dev int) (err error)
+//sys	Nanosleep(time *Timespec, leftover *Timespec) (err error)
+//sys   Open(path string, mode int, perm uint32) (fd int, err error) = open64
+//sys   Openat(dirfd int, path string, flags int, mode uint32) (fd int, err error)
+//sys	read(fd int, p []byte) (n int, err error)
+//sys	Readlink(path string, buf []byte) (n int, err error)
+//sys	Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error)
+//sys	Setdomainname(p []byte) (err error)
+//sys	Sethostname(p []byte) (err error)
+//sysnb	Setpgid(pid int, pgid int) (err error)
+//sysnb	Setsid() (pid int, err error)
+//sysnb	Settimeofday(tv *Timeval) (err error)
+
+//sys	Setuid(uid int) (err error)
+//sys	Setgid(uid int) (err error)
+
+//sys	Setpriority(which int, who int, prio int) (err error)
+//sys	Statx(dirfd int, path string, flags int, mask int, stat *Statx_t) (err error)
+//sys	Sync()
+//sysnb	Times(tms *Tms) (ticks uintptr, err error)
+//sysnb	Umask(mask int) (oldmask int)
+//sysnb	Uname(buf *Utsname) (err error)
+//sys   Unlink(path string) (err error)
+//sys   Unlinkat(dirfd int, path string, flags int) (err error)
+//sys	Ustat(dev int, ubuf *Ustat_t) (err error)
+//sys	write(fd int, p []byte) (n int, err error)
+//sys	readlen(fd int, p *byte, np int) (n int, err error) = read
+//sys	writelen(fd int, p *byte, np int) (n int, err error) = write
+
+//sys	Dup2(oldfd int, newfd int) (err error)
+//sys	Fadvise(fd int, offset int64, length int64, advice int) (err error) = posix_fadvise64
+//sys	Fchown(fd int, uid int, gid int) (err error)
+//sys	fstat(fd int, stat *Stat_t) (err error)
+//sys	fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) = fstatat
+//sys	Fstatfs(fd int, buf *Statfs_t) (err error)
+//sys	Ftruncate(fd int, length int64) (err error)
+//sysnb	Getegid() (egid int)
+//sysnb	Geteuid() (euid int)
+//sysnb	Getgid() (gid int)
+//sysnb	Getuid() (uid int)
+//sys	Lchown(path string, uid int, gid int) (err error)
+//sys	Listen(s int, n int) (err error)
+//sys	lstat(path string, stat *Stat_t) (err error)
+//sys	Pause() (err error)
+//sys	Pread(fd int, p []byte, offset int64) (n int, err error) = pread64
+//sys	Pwrite(fd int, p []byte, offset int64) (n int, err error) = pwrite64
+//sys	Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error)
+//sys	Pselect(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timespec, sigmask *Sigset_t) (n int, err error)
+//sysnb	Setregid(rgid int, egid int) (err error)
+//sysnb	Setreuid(ruid int, euid int) (err error)
+//sys	Shutdown(fd int, how int) (err error)
+//sys	Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error)
+//sys	stat(path string, statptr *Stat_t) (err error)
+//sys	Statfs(path string, buf *Statfs_t) (err error)
+//sys	Truncate(path string, length int64) (err error)
+
+//sys	bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sysnb	getgroups(n int, list *_Gid_t) (nn int, err error)
+//sysnb	setgroups(n int, list *_Gid_t) (err error)
+//sys	getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error)
+//sys	setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error)
+//sysnb	socket(domain int, typ int, proto int) (fd int, err error)
+//sysnb	socketpair(domain int, typ int, proto int, fd *[2]int32) (err error)
+//sysnb	getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sysnb	getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sys	recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error)
+//sys	sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error)
+
+// In order to use msghdr structure with Control, Controllen, nrecvmsg and nsendmsg must be used.
+//sys	recvmsg(s int, msg *Msghdr, flags int) (n int, err error) = nrecvmsg
+//sys	sendmsg(s int, msg *Msghdr, flags int) (n int, err error) = nsendmsg
+
+//sys	munmap(addr uintptr, length uintptr) (err error)
+
+var mapper = &mmapper{
+	active: make(map[*byte][]byte),
+	mmap:   mmap,
+	munmap: munmap,
+}
+
+func Mmap(fd int, offset int64, length int, prot int, flags int) (data []byte, err error) {
+	return mapper.Mmap(fd, offset, length, prot, flags)
+}
+
+func Munmap(b []byte) (err error) {
+	return mapper.Munmap(b)
+}
+
+//sys	Madvise(b []byte, advice int) (err error)
+//sys	Mprotect(b []byte, prot int) (err error)
+//sys	Mlock(b []byte) (err error)
+//sys	Mlockall(flags int) (err error)
+//sys	Msync(b []byte, flags int) (err error)
+//sys	Munlock(b []byte) (err error)
+//sys	Munlockall() (err error)
+
+//sysnb pipe(p *[2]_C_int) (err error)
+
+func Pipe(p []int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe(&pp)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+//sys	poll(fds *PollFd, nfds int, timeout int) (n int, err error)
+
+func Poll(fds []PollFd, timeout int) (n int, err error) {
+	if len(fds) == 0 {
+		return poll(nil, 0, timeout)
+	}
+	return poll(&fds[0], len(fds), timeout)
+}
+
+//sys	gettimeofday(tv *Timeval, tzp *Timezone) (err error)
+//sysnb	Time(t *Time_t) (tt Time_t, err error)
+//sys	Utime(path string, buf *Utimbuf) (err error)
+
+//sys	Getsystemcfg(label int) (n uint64)
+
+//sys	umount(target string) (err error)
+func Unmount(target string, flags int) (err error) {
+	if flags != 0 {
+		// AIX doesn't have any flags for umount.
+		return ENOSYS
+	}
+	return umount(target)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_aix_ppc.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_aix_ppc.go
new file mode 100644
index 000000000..b3c8e3301
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_aix_ppc.go
@@ -0,0 +1,54 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix
+// +build ppc
+
+package unix
+
+//sysnb	Getrlimit(resource int, rlim *Rlimit) (err error) = getrlimit64
+//sysnb	Setrlimit(resource int, rlim *Rlimit) (err error) = setrlimit64
+//sys	Seek(fd int, offset int64, whence int) (off int64, err error) = lseek64
+
+//sys	mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: int32(sec), Nsec: int32(nsec)}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: int32(sec), Usec: int32(usec)}
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint32(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = int32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+func Fstat(fd int, stat *Stat_t) error {
+	return fstat(fd, stat)
+}
+
+func Fstatat(dirfd int, path string, stat *Stat_t, flags int) error {
+	return fstatat(dirfd, path, stat, flags)
+}
+
+func Lstat(path string, stat *Stat_t) error {
+	return lstat(path, stat)
+}
+
+func Stat(path string, statptr *Stat_t) error {
+	return stat(path, statptr)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_aix_ppc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_aix_ppc64.go
new file mode 100644
index 000000000..9a6e02417
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_aix_ppc64.go
@@ -0,0 +1,85 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix
+// +build ppc64
+
+package unix
+
+//sysnb	Getrlimit(resource int, rlim *Rlimit) (err error)
+//sysnb	Setrlimit(resource int, rlim *Rlimit) (err error)
+//sys	Seek(fd int, offset int64, whence int) (off int64, err error) = lseek
+
+//sys	mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error) = mmap64
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: int64(sec), Usec: int32(usec)}
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = int32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+// In order to only have Timespec structure, type of Stat_t's fields
+// Atim, Mtim and Ctim is changed from StTimespec to Timespec during
+// ztypes generation.
+// On ppc64, Timespec.Nsec is an int64 while StTimespec.Nsec is an
+// int32, so the fields' value must be modified.
+func fixStatTimFields(stat *Stat_t) {
+	stat.Atim.Nsec >>= 32
+	stat.Mtim.Nsec >>= 32
+	stat.Ctim.Nsec >>= 32
+}
+
+func Fstat(fd int, stat *Stat_t) error {
+	err := fstat(fd, stat)
+	if err != nil {
+		return err
+	}
+	fixStatTimFields(stat)
+	return nil
+}
+
+func Fstatat(dirfd int, path string, stat *Stat_t, flags int) error {
+	err := fstatat(dirfd, path, stat, flags)
+	if err != nil {
+		return err
+	}
+	fixStatTimFields(stat)
+	return nil
+}
+
+func Lstat(path string, stat *Stat_t) error {
+	err := lstat(path, stat)
+	if err != nil {
+		return err
+	}
+	fixStatTimFields(stat)
+	return nil
+}
+
+func Stat(path string, statptr *Stat_t) error {
+	err := stat(path, statptr)
+	if err != nil {
+		return err
+	}
+	fixStatTimFields(statptr)
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_bsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_bsd.go
new file mode 100644
index 000000000..123536a02
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_bsd.go
@@ -0,0 +1,663 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build darwin dragonfly freebsd netbsd openbsd
+
+// BSD system call wrappers shared by *BSD based systems
+// including OS X (Darwin) and FreeBSD.  Like the other
+// syscall_*.go files it is compiled as Go code but also
+// used as input to mksyscall which parses the //sys
+// lines and generates system call stubs.
+
+package unix
+
+import (
+	"runtime"
+	"syscall"
+	"unsafe"
+)
+
+const ImplementsGetwd = true
+
+func Getwd() (string, error) {
+	var buf [PathMax]byte
+	_, err := Getcwd(buf[0:])
+	if err != nil {
+		return "", err
+	}
+	n := clen(buf[:])
+	if n < 1 {
+		return "", EINVAL
+	}
+	return string(buf[:n]), nil
+}
+
+/*
+ * Wrapped
+ */
+
+//sysnb	getgroups(ngid int, gid *_Gid_t) (n int, err error)
+//sysnb	setgroups(ngid int, gid *_Gid_t) (err error)
+
+func Getgroups() (gids []int, err error) {
+	n, err := getgroups(0, nil)
+	if err != nil {
+		return nil, err
+	}
+	if n == 0 {
+		return nil, nil
+	}
+
+	// Sanity check group count. Max is 16 on BSD.
+	if n < 0 || n > 1000 {
+		return nil, EINVAL
+	}
+
+	a := make([]_Gid_t, n)
+	n, err = getgroups(n, &a[0])
+	if err != nil {
+		return nil, err
+	}
+	gids = make([]int, n)
+	for i, v := range a[0:n] {
+		gids[i] = int(v)
+	}
+	return
+}
+
+func Setgroups(gids []int) (err error) {
+	if len(gids) == 0 {
+		return setgroups(0, nil)
+	}
+
+	a := make([]_Gid_t, len(gids))
+	for i, v := range gids {
+		a[i] = _Gid_t(v)
+	}
+	return setgroups(len(a), &a[0])
+}
+
+// Wait status is 7 bits at bottom, either 0 (exited),
+// 0x7F (stopped), or a signal number that caused an exit.
+// The 0x80 bit is whether there was a core dump.
+// An extra number (exit code, signal causing a stop)
+// is in the high bits.
+
+type WaitStatus uint32
+
+const (
+	mask  = 0x7F
+	core  = 0x80
+	shift = 8
+
+	exited  = 0
+	killed  = 9
+	stopped = 0x7F
+)
+
+func (w WaitStatus) Exited() bool { return w&mask == exited }
+
+func (w WaitStatus) ExitStatus() int {
+	if w&mask != exited {
+		return -1
+	}
+	return int(w >> shift)
+}
+
+func (w WaitStatus) Signaled() bool { return w&mask != stopped && w&mask != 0 }
+
+func (w WaitStatus) Signal() syscall.Signal {
+	sig := syscall.Signal(w & mask)
+	if sig == stopped || sig == 0 {
+		return -1
+	}
+	return sig
+}
+
+func (w WaitStatus) CoreDump() bool { return w.Signaled() && w&core != 0 }
+
+func (w WaitStatus) Stopped() bool { return w&mask == stopped && syscall.Signal(w>>shift) != SIGSTOP }
+
+func (w WaitStatus) Killed() bool { return w&mask == killed && syscall.Signal(w>>shift) != SIGKILL }
+
+func (w WaitStatus) Continued() bool { return w&mask == stopped && syscall.Signal(w>>shift) == SIGSTOP }
+
+func (w WaitStatus) StopSignal() syscall.Signal {
+	if !w.Stopped() {
+		return -1
+	}
+	return syscall.Signal(w>>shift) & 0xFF
+}
+
+func (w WaitStatus) TrapCause() int { return -1 }
+
+//sys	wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error)
+
+func Wait4(pid int, wstatus *WaitStatus, options int, rusage *Rusage) (wpid int, err error) {
+	var status _C_int
+	wpid, err = wait4(pid, &status, options, rusage)
+	if wstatus != nil {
+		*wstatus = WaitStatus(status)
+	}
+	return
+}
+
+//sys	accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error)
+//sys	bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sysnb	socket(domain int, typ int, proto int) (fd int, err error)
+//sys	getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error)
+//sys	setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error)
+//sysnb	getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sysnb	getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sys	Shutdown(s int, how int) (err error)
+
+func (sa *SockaddrInet4) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	if sa.Port < 0 || sa.Port > 0xFFFF {
+		return nil, 0, EINVAL
+	}
+	sa.raw.Len = SizeofSockaddrInet4
+	sa.raw.Family = AF_INET
+	p := (*[2]byte)(unsafe.Pointer(&sa.raw.Port))
+	p[0] = byte(sa.Port >> 8)
+	p[1] = byte(sa.Port)
+	for i := 0; i < len(sa.Addr); i++ {
+		sa.raw.Addr[i] = sa.Addr[i]
+	}
+	return unsafe.Pointer(&sa.raw), _Socklen(sa.raw.Len), nil
+}
+
+func (sa *SockaddrInet6) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	if sa.Port < 0 || sa.Port > 0xFFFF {
+		return nil, 0, EINVAL
+	}
+	sa.raw.Len = SizeofSockaddrInet6
+	sa.raw.Family = AF_INET6
+	p := (*[2]byte)(unsafe.Pointer(&sa.raw.Port))
+	p[0] = byte(sa.Port >> 8)
+	p[1] = byte(sa.Port)
+	sa.raw.Scope_id = sa.ZoneId
+	for i := 0; i < len(sa.Addr); i++ {
+		sa.raw.Addr[i] = sa.Addr[i]
+	}
+	return unsafe.Pointer(&sa.raw), _Socklen(sa.raw.Len), nil
+}
+
+func (sa *SockaddrUnix) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	name := sa.Name
+	n := len(name)
+	if n >= len(sa.raw.Path) || n == 0 {
+		return nil, 0, EINVAL
+	}
+	sa.raw.Len = byte(3 + n) // 2 for Family, Len; 1 for NUL
+	sa.raw.Family = AF_UNIX
+	for i := 0; i < n; i++ {
+		sa.raw.Path[i] = int8(name[i])
+	}
+	return unsafe.Pointer(&sa.raw), _Socklen(sa.raw.Len), nil
+}
+
+func (sa *SockaddrDatalink) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	if sa.Index == 0 {
+		return nil, 0, EINVAL
+	}
+	sa.raw.Len = sa.Len
+	sa.raw.Family = AF_LINK
+	sa.raw.Index = sa.Index
+	sa.raw.Type = sa.Type
+	sa.raw.Nlen = sa.Nlen
+	sa.raw.Alen = sa.Alen
+	sa.raw.Slen = sa.Slen
+	for i := 0; i < len(sa.raw.Data); i++ {
+		sa.raw.Data[i] = sa.Data[i]
+	}
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrDatalink, nil
+}
+
+func anyToSockaddr(fd int, rsa *RawSockaddrAny) (Sockaddr, error) {
+	switch rsa.Addr.Family {
+	case AF_LINK:
+		pp := (*RawSockaddrDatalink)(unsafe.Pointer(rsa))
+		sa := new(SockaddrDatalink)
+		sa.Len = pp.Len
+		sa.Family = pp.Family
+		sa.Index = pp.Index
+		sa.Type = pp.Type
+		sa.Nlen = pp.Nlen
+		sa.Alen = pp.Alen
+		sa.Slen = pp.Slen
+		for i := 0; i < len(sa.Data); i++ {
+			sa.Data[i] = pp.Data[i]
+		}
+		return sa, nil
+
+	case AF_UNIX:
+		pp := (*RawSockaddrUnix)(unsafe.Pointer(rsa))
+		if pp.Len < 2 || pp.Len > SizeofSockaddrUnix {
+			return nil, EINVAL
+		}
+		sa := new(SockaddrUnix)
+
+		// Some BSDs include the trailing NUL in the length, whereas
+		// others do not. Work around this by subtracting the leading
+		// family and len. The path is then scanned to see if a NUL
+		// terminator still exists within the length.
+		n := int(pp.Len) - 2 // subtract leading Family, Len
+		for i := 0; i < n; i++ {
+			if pp.Path[i] == 0 {
+				// found early NUL; assume Len included the NUL
+				// or was overestimating.
+				n = i
+				break
+			}
+		}
+		bytes := (*[len(pp.Path)]byte)(unsafe.Pointer(&pp.Path[0]))[0:n]
+		sa.Name = string(bytes)
+		return sa, nil
+
+	case AF_INET:
+		pp := (*RawSockaddrInet4)(unsafe.Pointer(rsa))
+		sa := new(SockaddrInet4)
+		p := (*[2]byte)(unsafe.Pointer(&pp.Port))
+		sa.Port = int(p[0])<<8 + int(p[1])
+		for i := 0; i < len(sa.Addr); i++ {
+			sa.Addr[i] = pp.Addr[i]
+		}
+		return sa, nil
+
+	case AF_INET6:
+		pp := (*RawSockaddrInet6)(unsafe.Pointer(rsa))
+		sa := new(SockaddrInet6)
+		p := (*[2]byte)(unsafe.Pointer(&pp.Port))
+		sa.Port = int(p[0])<<8 + int(p[1])
+		sa.ZoneId = pp.Scope_id
+		for i := 0; i < len(sa.Addr); i++ {
+			sa.Addr[i] = pp.Addr[i]
+		}
+		return sa, nil
+	}
+	return nil, EAFNOSUPPORT
+}
+
+func Accept(fd int) (nfd int, sa Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	var len _Socklen = SizeofSockaddrAny
+	nfd, err = accept(fd, &rsa, &len)
+	if err != nil {
+		return
+	}
+	if (runtime.GOOS == "darwin" || runtime.GOOS == "ios") && len == 0 {
+		// Accepted socket has no address.
+		// This is likely due to a bug in xnu kernels,
+		// where instead of ECONNABORTED error socket
+		// is accepted, but has no address.
+		Close(nfd)
+		return 0, nil, ECONNABORTED
+	}
+	sa, err = anyToSockaddr(fd, &rsa)
+	if err != nil {
+		Close(nfd)
+		nfd = 0
+	}
+	return
+}
+
+func Getsockname(fd int) (sa Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	var len _Socklen = SizeofSockaddrAny
+	if err = getsockname(fd, &rsa, &len); err != nil {
+		return
+	}
+	// TODO(jsing): DragonFly has a "bug" (see issue 3349), which should be
+	// reported upstream.
+	if runtime.GOOS == "dragonfly" && rsa.Addr.Family == AF_UNSPEC && rsa.Addr.Len == 0 {
+		rsa.Addr.Family = AF_UNIX
+		rsa.Addr.Len = SizeofSockaddrUnix
+	}
+	return anyToSockaddr(fd, &rsa)
+}
+
+//sysnb socketpair(domain int, typ int, proto int, fd *[2]int32) (err error)
+
+// GetsockoptString returns the string value of the socket option opt for the
+// socket associated with fd at the given socket level.
+func GetsockoptString(fd, level, opt int) (string, error) {
+	buf := make([]byte, 256)
+	vallen := _Socklen(len(buf))
+	err := getsockopt(fd, level, opt, unsafe.Pointer(&buf[0]), &vallen)
+	if err != nil {
+		return "", err
+	}
+	return string(buf[:vallen-1]), nil
+}
+
+//sys   recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error)
+//sys   sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	recvmsg(s int, msg *Msghdr, flags int) (n int, err error)
+
+func Recvmsg(fd int, p, oob []byte, flags int) (n, oobn int, recvflags int, from Sockaddr, err error) {
+	var msg Msghdr
+	var rsa RawSockaddrAny
+	msg.Name = (*byte)(unsafe.Pointer(&rsa))
+	msg.Namelen = uint32(SizeofSockaddrAny)
+	var iov Iovec
+	if len(p) > 0 {
+		iov.Base = (*byte)(unsafe.Pointer(&p[0]))
+		iov.SetLen(len(p))
+	}
+	var dummy byte
+	if len(oob) > 0 {
+		// receive at least one normal byte
+		if len(p) == 0 {
+			iov.Base = &dummy
+			iov.SetLen(1)
+		}
+		msg.Control = (*byte)(unsafe.Pointer(&oob[0]))
+		msg.SetControllen(len(oob))
+	}
+	msg.Iov = &iov
+	msg.Iovlen = 1
+	if n, err = recvmsg(fd, &msg, flags); err != nil {
+		return
+	}
+	oobn = int(msg.Controllen)
+	recvflags = int(msg.Flags)
+	// source address is only specified if the socket is unconnected
+	if rsa.Addr.Family != AF_UNSPEC {
+		from, err = anyToSockaddr(fd, &rsa)
+	}
+	return
+}
+
+//sys	sendmsg(s int, msg *Msghdr, flags int) (n int, err error)
+
+func Sendmsg(fd int, p, oob []byte, to Sockaddr, flags int) (err error) {
+	_, err = SendmsgN(fd, p, oob, to, flags)
+	return
+}
+
+func SendmsgN(fd int, p, oob []byte, to Sockaddr, flags int) (n int, err error) {
+	var ptr unsafe.Pointer
+	var salen _Socklen
+	if to != nil {
+		ptr, salen, err = to.sockaddr()
+		if err != nil {
+			return 0, err
+		}
+	}
+	var msg Msghdr
+	msg.Name = (*byte)(unsafe.Pointer(ptr))
+	msg.Namelen = uint32(salen)
+	var iov Iovec
+	if len(p) > 0 {
+		iov.Base = (*byte)(unsafe.Pointer(&p[0]))
+		iov.SetLen(len(p))
+	}
+	var dummy byte
+	if len(oob) > 0 {
+		// send at least one normal byte
+		if len(p) == 0 {
+			iov.Base = &dummy
+			iov.SetLen(1)
+		}
+		msg.Control = (*byte)(unsafe.Pointer(&oob[0]))
+		msg.SetControllen(len(oob))
+	}
+	msg.Iov = &iov
+	msg.Iovlen = 1
+	if n, err = sendmsg(fd, &msg, flags); err != nil {
+		return 0, err
+	}
+	if len(oob) > 0 && len(p) == 0 {
+		n = 0
+	}
+	return n, nil
+}
+
+//sys	kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error)
+
+func Kevent(kq int, changes, events []Kevent_t, timeout *Timespec) (n int, err error) {
+	var change, event unsafe.Pointer
+	if len(changes) > 0 {
+		change = unsafe.Pointer(&changes[0])
+	}
+	if len(events) > 0 {
+		event = unsafe.Pointer(&events[0])
+	}
+	return kevent(kq, change, len(changes), event, len(events), timeout)
+}
+
+// sysctlmib translates name to mib number and appends any additional args.
+func sysctlmib(name string, args ...int) ([]_C_int, error) {
+	// Translate name to mib number.
+	mib, err := nametomib(name)
+	if err != nil {
+		return nil, err
+	}
+
+	for _, a := range args {
+		mib = append(mib, _C_int(a))
+	}
+
+	return mib, nil
+}
+
+func Sysctl(name string) (string, error) {
+	return SysctlArgs(name)
+}
+
+func SysctlArgs(name string, args ...int) (string, error) {
+	buf, err := SysctlRaw(name, args...)
+	if err != nil {
+		return "", err
+	}
+	n := len(buf)
+
+	// Throw away terminating NUL.
+	if n > 0 && buf[n-1] == '\x00' {
+		n--
+	}
+	return string(buf[0:n]), nil
+}
+
+func SysctlUint32(name string) (uint32, error) {
+	return SysctlUint32Args(name)
+}
+
+func SysctlUint32Args(name string, args ...int) (uint32, error) {
+	mib, err := sysctlmib(name, args...)
+	if err != nil {
+		return 0, err
+	}
+
+	n := uintptr(4)
+	buf := make([]byte, 4)
+	if err := sysctl(mib, &buf[0], &n, nil, 0); err != nil {
+		return 0, err
+	}
+	if n != 4 {
+		return 0, EIO
+	}
+	return *(*uint32)(unsafe.Pointer(&buf[0])), nil
+}
+
+func SysctlUint64(name string, args ...int) (uint64, error) {
+	mib, err := sysctlmib(name, args...)
+	if err != nil {
+		return 0, err
+	}
+
+	n := uintptr(8)
+	buf := make([]byte, 8)
+	if err := sysctl(mib, &buf[0], &n, nil, 0); err != nil {
+		return 0, err
+	}
+	if n != 8 {
+		return 0, EIO
+	}
+	return *(*uint64)(unsafe.Pointer(&buf[0])), nil
+}
+
+func SysctlRaw(name string, args ...int) ([]byte, error) {
+	mib, err := sysctlmib(name, args...)
+	if err != nil {
+		return nil, err
+	}
+
+	// Find size.
+	n := uintptr(0)
+	if err := sysctl(mib, nil, &n, nil, 0); err != nil {
+		return nil, err
+	}
+	if n == 0 {
+		return nil, nil
+	}
+
+	// Read into buffer of that size.
+	buf := make([]byte, n)
+	if err := sysctl(mib, &buf[0], &n, nil, 0); err != nil {
+		return nil, err
+	}
+
+	// The actual call may return less than the original reported required
+	// size so ensure we deal with that.
+	return buf[:n], nil
+}
+
+func SysctlClockinfo(name string) (*Clockinfo, error) {
+	mib, err := sysctlmib(name)
+	if err != nil {
+		return nil, err
+	}
+
+	n := uintptr(SizeofClockinfo)
+	var ci Clockinfo
+	if err := sysctl(mib, (*byte)(unsafe.Pointer(&ci)), &n, nil, 0); err != nil {
+		return nil, err
+	}
+	if n != SizeofClockinfo {
+		return nil, EIO
+	}
+	return &ci, nil
+}
+
+func SysctlTimeval(name string) (*Timeval, error) {
+	mib, err := sysctlmib(name)
+	if err != nil {
+		return nil, err
+	}
+
+	var tv Timeval
+	n := uintptr(unsafe.Sizeof(tv))
+	if err := sysctl(mib, (*byte)(unsafe.Pointer(&tv)), &n, nil, 0); err != nil {
+		return nil, err
+	}
+	if n != unsafe.Sizeof(tv) {
+		return nil, EIO
+	}
+	return &tv, nil
+}
+
+//sys	utimes(path string, timeval *[2]Timeval) (err error)
+
+func Utimes(path string, tv []Timeval) error {
+	if tv == nil {
+		return utimes(path, nil)
+	}
+	if len(tv) != 2 {
+		return EINVAL
+	}
+	return utimes(path, (*[2]Timeval)(unsafe.Pointer(&tv[0])))
+}
+
+func UtimesNano(path string, ts []Timespec) error {
+	if ts == nil {
+		err := utimensat(AT_FDCWD, path, nil, 0)
+		if err != ENOSYS {
+			return err
+		}
+		return utimes(path, nil)
+	}
+	if len(ts) != 2 {
+		return EINVAL
+	}
+	// Darwin setattrlist can set nanosecond timestamps
+	err := setattrlistTimes(path, ts, 0)
+	if err != ENOSYS {
+		return err
+	}
+	err = utimensat(AT_FDCWD, path, (*[2]Timespec)(unsafe.Pointer(&ts[0])), 0)
+	if err != ENOSYS {
+		return err
+	}
+	// Not as efficient as it could be because Timespec and
+	// Timeval have different types in the different OSes
+	tv := [2]Timeval{
+		NsecToTimeval(TimespecToNsec(ts[0])),
+		NsecToTimeval(TimespecToNsec(ts[1])),
+	}
+	return utimes(path, (*[2]Timeval)(unsafe.Pointer(&tv[0])))
+}
+
+func UtimesNanoAt(dirfd int, path string, ts []Timespec, flags int) error {
+	if ts == nil {
+		return utimensat(dirfd, path, nil, flags)
+	}
+	if len(ts) != 2 {
+		return EINVAL
+	}
+	err := setattrlistTimes(path, ts, flags)
+	if err != ENOSYS {
+		return err
+	}
+	return utimensat(dirfd, path, (*[2]Timespec)(unsafe.Pointer(&ts[0])), flags)
+}
+
+//sys	futimes(fd int, timeval *[2]Timeval) (err error)
+
+func Futimes(fd int, tv []Timeval) error {
+	if tv == nil {
+		return futimes(fd, nil)
+	}
+	if len(tv) != 2 {
+		return EINVAL
+	}
+	return futimes(fd, (*[2]Timeval)(unsafe.Pointer(&tv[0])))
+}
+
+//sys   poll(fds *PollFd, nfds int, timeout int) (n int, err error)
+
+func Poll(fds []PollFd, timeout int) (n int, err error) {
+	if len(fds) == 0 {
+		return poll(nil, 0, timeout)
+	}
+	return poll(&fds[0], len(fds), timeout)
+}
+
+// TODO: wrap
+//	Acct(name nil-string) (err error)
+//	Gethostuuid(uuid *byte, timeout *Timespec) (err error)
+//	Ptrace(req int, pid int, addr uintptr, data int) (ret uintptr, err error)
+
+var mapper = &mmapper{
+	active: make(map[*byte][]byte),
+	mmap:   mmap,
+	munmap: munmap,
+}
+
+func Mmap(fd int, offset int64, length int, prot int, flags int) (data []byte, err error) {
+	return mapper.Mmap(fd, offset, length, prot, flags)
+}
+
+func Munmap(b []byte) (err error) {
+	return mapper.Munmap(b)
+}
+
+//sys	Madvise(b []byte, behav int) (err error)
+//sys	Mlock(b []byte) (err error)
+//sys	Mlockall(flags int) (err error)
+//sys	Mprotect(b []byte, prot int) (err error)
+//sys	Msync(b []byte, flags int) (err error)
+//sys	Munlock(b []byte) (err error)
+//sys	Munlockall() (err error)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin.1_12.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin.1_12.go
new file mode 100644
index 000000000..b31ef0358
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin.1_12.go
@@ -0,0 +1,31 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build darwin,go1.12,!go1.13
+
+package unix
+
+import (
+	"unsafe"
+)
+
+const _SYS_GETDIRENTRIES64 = 344
+
+func Getdirentries(fd int, buf []byte, basep *uintptr) (n int, err error) {
+	// To implement this using libSystem we'd need syscall_syscallPtr for
+	// fdopendir. However, syscallPtr was only added in Go 1.13, so we fall
+	// back to raw syscalls for this func on Go 1.12.
+	var p unsafe.Pointer
+	if len(buf) > 0 {
+		p = unsafe.Pointer(&buf[0])
+	} else {
+		p = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(_SYS_GETDIRENTRIES64, uintptr(fd), uintptr(p), uintptr(len(buf)), uintptr(unsafe.Pointer(basep)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		return n, errnoErr(e1)
+	}
+	return n, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin.1_13.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin.1_13.go
new file mode 100644
index 000000000..dc0befee3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin.1_13.go
@@ -0,0 +1,108 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build darwin,go1.13
+
+package unix
+
+import (
+	"unsafe"
+
+	"golang.org/x/sys/internal/unsafeheader"
+)
+
+//sys	closedir(dir uintptr) (err error)
+//sys	readdir_r(dir uintptr, entry *Dirent, result **Dirent) (res Errno)
+
+func fdopendir(fd int) (dir uintptr, err error) {
+	r0, _, e1 := syscall_syscallPtr(funcPC(libc_fdopendir_trampoline), uintptr(fd), 0, 0)
+	dir = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fdopendir_trampoline()
+
+//go:linkname libc_fdopendir libc_fdopendir
+//go:cgo_import_dynamic libc_fdopendir fdopendir "/usr/lib/libSystem.B.dylib"
+
+func Getdirentries(fd int, buf []byte, basep *uintptr) (n int, err error) {
+	// Simulate Getdirentries using fdopendir/readdir_r/closedir.
+	// We store the number of entries to skip in the seek
+	// offset of fd. See issue #31368.
+	// It's not the full required semantics, but should handle the case
+	// of calling Getdirentries or ReadDirent repeatedly.
+	// It won't handle assigning the results of lseek to *basep, or handle
+	// the directory being edited underfoot.
+	skip, err := Seek(fd, 0, 1 /* SEEK_CUR */)
+	if err != nil {
+		return 0, err
+	}
+
+	// We need to duplicate the incoming file descriptor
+	// because the caller expects to retain control of it, but
+	// fdopendir expects to take control of its argument.
+	// Just Dup'ing the file descriptor is not enough, as the
+	// result shares underlying state. Use Openat to make a really
+	// new file descriptor referring to the same directory.
+	fd2, err := Openat(fd, ".", O_RDONLY, 0)
+	if err != nil {
+		return 0, err
+	}
+	d, err := fdopendir(fd2)
+	if err != nil {
+		Close(fd2)
+		return 0, err
+	}
+	defer closedir(d)
+
+	var cnt int64
+	for {
+		var entry Dirent
+		var entryp *Dirent
+		e := readdir_r(d, &entry, &entryp)
+		if e != 0 {
+			return n, errnoErr(e)
+		}
+		if entryp == nil {
+			break
+		}
+		if skip > 0 {
+			skip--
+			cnt++
+			continue
+		}
+
+		reclen := int(entry.Reclen)
+		if reclen > len(buf) {
+			// Not enough room. Return for now.
+			// The counter will let us know where we should start up again.
+			// Note: this strategy for suspending in the middle and
+			// restarting is O(n^2) in the length of the directory. Oh well.
+			break
+		}
+
+		// Copy entry into return buffer.
+		var s []byte
+		hdr := (*unsafeheader.Slice)(unsafe.Pointer(&s))
+		hdr.Data = unsafe.Pointer(&entry)
+		hdr.Cap = reclen
+		hdr.Len = reclen
+		copy(buf, s)
+
+		buf = buf[reclen:]
+		n += reclen
+		cnt++
+	}
+	// Set the seek offset of the input fd to record
+	// how many files we've already returned.
+	_, err = Seek(fd, cnt, 0 /* SEEK_SET */)
+	if err != nil {
+		return n, err
+	}
+
+	return n, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin.go
new file mode 100644
index 000000000..21b8092cd
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin.go
@@ -0,0 +1,605 @@
+// Copyright 2009,2010 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Darwin system calls.
+// This file is compiled as ordinary Go code,
+// but it is also input to mksyscall,
+// which parses the //sys lines and generates system call stubs.
+// Note that sometimes we use a lowercase //sys name and wrap
+// it in our own nicer implementation, either here or in
+// syscall_bsd.go or syscall_unix.go.
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+// SockaddrDatalink implements the Sockaddr interface for AF_LINK type sockets.
+type SockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [12]int8
+	raw    RawSockaddrDatalink
+}
+
+// Some external packages rely on SYS___SYSCTL being defined to implement their
+// own sysctl wrappers. Provide it here, even though direct syscalls are no
+// longer supported on darwin.
+const SYS___SYSCTL = 202
+
+// Translate "kern.hostname" to []_C_int{0,1,2,3}.
+func nametomib(name string) (mib []_C_int, err error) {
+	const siz = unsafe.Sizeof(mib[0])
+
+	// NOTE(rsc): It seems strange to set the buffer to have
+	// size CTL_MAXNAME+2 but use only CTL_MAXNAME
+	// as the size. I don't know why the +2 is here, but the
+	// kernel uses +2 for its own implementation of this function.
+	// I am scared that if we don't include the +2 here, the kernel
+	// will silently write 2 words farther than we specify
+	// and we'll get memory corruption.
+	var buf [CTL_MAXNAME + 2]_C_int
+	n := uintptr(CTL_MAXNAME) * siz
+
+	p := (*byte)(unsafe.Pointer(&buf[0]))
+	bytes, err := ByteSliceFromString(name)
+	if err != nil {
+		return nil, err
+	}
+
+	// Magic sysctl: "setting" 0.3 to a string name
+	// lets you read back the array of integers form.
+	if err = sysctl([]_C_int{0, 3}, p, &n, &bytes[0], uintptr(len(name))); err != nil {
+		return nil, err
+	}
+	return buf[0 : n/siz], nil
+}
+
+func direntIno(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Ino), unsafe.Sizeof(Dirent{}.Ino))
+}
+
+func direntReclen(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Reclen), unsafe.Sizeof(Dirent{}.Reclen))
+}
+
+func direntNamlen(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Namlen), unsafe.Sizeof(Dirent{}.Namlen))
+}
+
+func PtraceAttach(pid int) (err error) { return ptrace(PT_ATTACH, pid, 0, 0) }
+func PtraceDetach(pid int) (err error) { return ptrace(PT_DETACH, pid, 0, 0) }
+
+type attrList struct {
+	bitmapCount uint16
+	_           uint16
+	CommonAttr  uint32
+	VolAttr     uint32
+	DirAttr     uint32
+	FileAttr    uint32
+	Forkattr    uint32
+}
+
+//sysnb pipe() (r int, w int, err error)
+
+func Pipe(p []int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	p[0], p[1], err = pipe()
+	return
+}
+
+func Getfsstat(buf []Statfs_t, flags int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	var bufsize uintptr
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+		bufsize = unsafe.Sizeof(Statfs_t{}) * uintptr(len(buf))
+	}
+	return getfsstat(_p0, bufsize, flags)
+}
+
+func xattrPointer(dest []byte) *byte {
+	// It's only when dest is set to NULL that the OS X implementations of
+	// getxattr() and listxattr() return the current sizes of the named attributes.
+	// An empty byte array is not sufficient. To maintain the same behaviour as the
+	// linux implementation, we wrap around the system calls and pass in NULL when
+	// dest is empty.
+	var destp *byte
+	if len(dest) > 0 {
+		destp = &dest[0]
+	}
+	return destp
+}
+
+//sys	getxattr(path string, attr string, dest *byte, size int, position uint32, options int) (sz int, err error)
+
+func Getxattr(path string, attr string, dest []byte) (sz int, err error) {
+	return getxattr(path, attr, xattrPointer(dest), len(dest), 0, 0)
+}
+
+func Lgetxattr(link string, attr string, dest []byte) (sz int, err error) {
+	return getxattr(link, attr, xattrPointer(dest), len(dest), 0, XATTR_NOFOLLOW)
+}
+
+//sys	fgetxattr(fd int, attr string, dest *byte, size int, position uint32, options int) (sz int, err error)
+
+func Fgetxattr(fd int, attr string, dest []byte) (sz int, err error) {
+	return fgetxattr(fd, attr, xattrPointer(dest), len(dest), 0, 0)
+}
+
+//sys	setxattr(path string, attr string, data *byte, size int, position uint32, options int) (err error)
+
+func Setxattr(path string, attr string, data []byte, flags int) (err error) {
+	// The parameters for the OS X implementation vary slightly compared to the
+	// linux system call, specifically the position parameter:
+	//
+	//  linux:
+	//      int setxattr(
+	//          const char *path,
+	//          const char *name,
+	//          const void *value,
+	//          size_t size,
+	//          int flags
+	//      );
+	//
+	//  darwin:
+	//      int setxattr(
+	//          const char *path,
+	//          const char *name,
+	//          void *value,
+	//          size_t size,
+	//          u_int32_t position,
+	//          int options
+	//      );
+	//
+	// position specifies the offset within the extended attribute. In the
+	// current implementation, only the resource fork extended attribute makes
+	// use of this argument. For all others, position is reserved. We simply
+	// default to setting it to zero.
+	return setxattr(path, attr, xattrPointer(data), len(data), 0, flags)
+}
+
+func Lsetxattr(link string, attr string, data []byte, flags int) (err error) {
+	return setxattr(link, attr, xattrPointer(data), len(data), 0, flags|XATTR_NOFOLLOW)
+}
+
+//sys	fsetxattr(fd int, attr string, data *byte, size int, position uint32, options int) (err error)
+
+func Fsetxattr(fd int, attr string, data []byte, flags int) (err error) {
+	return fsetxattr(fd, attr, xattrPointer(data), len(data), 0, 0)
+}
+
+//sys	removexattr(path string, attr string, options int) (err error)
+
+func Removexattr(path string, attr string) (err error) {
+	// We wrap around and explicitly zero out the options provided to the OS X
+	// implementation of removexattr, we do so for interoperability with the
+	// linux variant.
+	return removexattr(path, attr, 0)
+}
+
+func Lremovexattr(link string, attr string) (err error) {
+	return removexattr(link, attr, XATTR_NOFOLLOW)
+}
+
+//sys	fremovexattr(fd int, attr string, options int) (err error)
+
+func Fremovexattr(fd int, attr string) (err error) {
+	return fremovexattr(fd, attr, 0)
+}
+
+//sys	listxattr(path string, dest *byte, size int, options int) (sz int, err error)
+
+func Listxattr(path string, dest []byte) (sz int, err error) {
+	return listxattr(path, xattrPointer(dest), len(dest), 0)
+}
+
+func Llistxattr(link string, dest []byte) (sz int, err error) {
+	return listxattr(link, xattrPointer(dest), len(dest), XATTR_NOFOLLOW)
+}
+
+//sys	flistxattr(fd int, dest *byte, size int, options int) (sz int, err error)
+
+func Flistxattr(fd int, dest []byte) (sz int, err error) {
+	return flistxattr(fd, xattrPointer(dest), len(dest), 0)
+}
+
+func setattrlistTimes(path string, times []Timespec, flags int) error {
+	_p0, err := BytePtrFromString(path)
+	if err != nil {
+		return err
+	}
+
+	var attrList attrList
+	attrList.bitmapCount = ATTR_BIT_MAP_COUNT
+	attrList.CommonAttr = ATTR_CMN_MODTIME | ATTR_CMN_ACCTIME
+
+	// order is mtime, atime: the opposite of Chtimes
+	attributes := [2]Timespec{times[1], times[0]}
+	options := 0
+	if flags&AT_SYMLINK_NOFOLLOW != 0 {
+		options |= FSOPT_NOFOLLOW
+	}
+	return setattrlist(
+		_p0,
+		unsafe.Pointer(&attrList),
+		unsafe.Pointer(&attributes),
+		unsafe.Sizeof(attributes),
+		options)
+}
+
+//sys setattrlist(path *byte, list unsafe.Pointer, buf unsafe.Pointer, size uintptr, options int) (err error)
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flags int) error {
+	// Darwin doesn't support SYS_UTIMENSAT
+	return ENOSYS
+}
+
+/*
+ * Wrapped
+ */
+
+//sys	fcntl(fd int, cmd int, arg int) (val int, err error)
+
+//sys	kill(pid int, signum int, posix int) (err error)
+
+func Kill(pid int, signum syscall.Signal) (err error) { return kill(pid, int(signum), 1) }
+
+//sys	ioctl(fd int, req uint, arg uintptr) (err error)
+
+//sys   sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) = SYS_SYSCTL
+
+func Uname(uname *Utsname) error {
+	mib := []_C_int{CTL_KERN, KERN_OSTYPE}
+	n := unsafe.Sizeof(uname.Sysname)
+	if err := sysctl(mib, &uname.Sysname[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	mib = []_C_int{CTL_KERN, KERN_HOSTNAME}
+	n = unsafe.Sizeof(uname.Nodename)
+	if err := sysctl(mib, &uname.Nodename[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	mib = []_C_int{CTL_KERN, KERN_OSRELEASE}
+	n = unsafe.Sizeof(uname.Release)
+	if err := sysctl(mib, &uname.Release[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	mib = []_C_int{CTL_KERN, KERN_VERSION}
+	n = unsafe.Sizeof(uname.Version)
+	if err := sysctl(mib, &uname.Version[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	// The version might have newlines or tabs in it, convert them to
+	// spaces.
+	for i, b := range uname.Version {
+		if b == '\n' || b == '\t' {
+			if i == len(uname.Version)-1 {
+				uname.Version[i] = 0
+			} else {
+				uname.Version[i] = ' '
+			}
+		}
+	}
+
+	mib = []_C_int{CTL_HW, HW_MACHINE}
+	n = unsafe.Sizeof(uname.Machine)
+	if err := sysctl(mib, &uname.Machine[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func Sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	if raceenabled {
+		raceReleaseMerge(unsafe.Pointer(&ioSync))
+	}
+	var length = int64(count)
+	err = sendfile(infd, outfd, *offset, &length, nil, 0)
+	written = int(length)
+	return
+}
+
+//sys	sendfile(infd int, outfd int, offset int64, len *int64, hdtr unsafe.Pointer, flags int) (err error)
+
+/*
+ * Exposed directly
+ */
+//sys	Access(path string, mode uint32) (err error)
+//sys	Adjtime(delta *Timeval, olddelta *Timeval) (err error)
+//sys	Chdir(path string) (err error)
+//sys	Chflags(path string, flags int) (err error)
+//sys	Chmod(path string, mode uint32) (err error)
+//sys	Chown(path string, uid int, gid int) (err error)
+//sys	Chroot(path string) (err error)
+//sys	ClockGettime(clockid int32, time *Timespec) (err error)
+//sys	Close(fd int) (err error)
+//sys	Clonefile(src string, dst string, flags int) (err error)
+//sys	Clonefileat(srcDirfd int, src string, dstDirfd int, dst string, flags int) (err error)
+//sys	Dup(fd int) (nfd int, err error)
+//sys	Dup2(from int, to int) (err error)
+//sys	Exchangedata(path1 string, path2 string, options int) (err error)
+//sys	Exit(code int)
+//sys	Faccessat(dirfd int, path string, mode uint32, flags int) (err error)
+//sys	Fchdir(fd int) (err error)
+//sys	Fchflags(fd int, flags int) (err error)
+//sys	Fchmod(fd int, mode uint32) (err error)
+//sys	Fchmodat(dirfd int, path string, mode uint32, flags int) (err error)
+//sys	Fchown(fd int, uid int, gid int) (err error)
+//sys	Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error)
+//sys	Fclonefileat(srcDirfd int, dstDirfd int, dst string, flags int) (err error)
+//sys	Flock(fd int, how int) (err error)
+//sys	Fpathconf(fd int, name int) (val int, err error)
+//sys	Fsync(fd int) (err error)
+//sys	Ftruncate(fd int, length int64) (err error)
+//sys	Getcwd(buf []byte) (n int, err error)
+//sys	Getdtablesize() (size int)
+//sysnb	Getegid() (egid int)
+//sysnb	Geteuid() (uid int)
+//sysnb	Getgid() (gid int)
+//sysnb	Getpgid(pid int) (pgid int, err error)
+//sysnb	Getpgrp() (pgrp int)
+//sysnb	Getpid() (pid int)
+//sysnb	Getppid() (ppid int)
+//sys	Getpriority(which int, who int) (prio int, err error)
+//sysnb	Getrlimit(which int, lim *Rlimit) (err error)
+//sysnb	Getrusage(who int, rusage *Rusage) (err error)
+//sysnb	Getsid(pid int) (sid int, err error)
+//sysnb	Gettimeofday(tp *Timeval) (err error)
+//sysnb	Getuid() (uid int)
+//sysnb	Issetugid() (tainted bool)
+//sys	Kqueue() (fd int, err error)
+//sys	Lchown(path string, uid int, gid int) (err error)
+//sys	Link(path string, link string) (err error)
+//sys	Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error)
+//sys	Listen(s int, backlog int) (err error)
+//sys	Mkdir(path string, mode uint32) (err error)
+//sys	Mkdirat(dirfd int, path string, mode uint32) (err error)
+//sys	Mkfifo(path string, mode uint32) (err error)
+//sys	Mknod(path string, mode uint32, dev int) (err error)
+//sys	Open(path string, mode int, perm uint32) (fd int, err error)
+//sys	Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error)
+//sys	Pathconf(path string, name int) (val int, err error)
+//sys	Pread(fd int, p []byte, offset int64) (n int, err error)
+//sys	Pwrite(fd int, p []byte, offset int64) (n int, err error)
+//sys	read(fd int, p []byte) (n int, err error)
+//sys	Readlink(path string, buf []byte) (n int, err error)
+//sys	Readlinkat(dirfd int, path string, buf []byte) (n int, err error)
+//sys	Rename(from string, to string) (err error)
+//sys	Renameat(fromfd int, from string, tofd int, to string) (err error)
+//sys	Revoke(path string) (err error)
+//sys	Rmdir(path string) (err error)
+//sys	Seek(fd int, offset int64, whence int) (newoffset int64, err error) = SYS_LSEEK
+//sys	Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error)
+//sys	Setegid(egid int) (err error)
+//sysnb	Seteuid(euid int) (err error)
+//sysnb	Setgid(gid int) (err error)
+//sys	Setlogin(name string) (err error)
+//sysnb	Setpgid(pid int, pgid int) (err error)
+//sys	Setpriority(which int, who int, prio int) (err error)
+//sys	Setprivexec(flag int) (err error)
+//sysnb	Setregid(rgid int, egid int) (err error)
+//sysnb	Setreuid(ruid int, euid int) (err error)
+//sysnb	Setrlimit(which int, lim *Rlimit) (err error)
+//sysnb	Setsid() (pid int, err error)
+//sysnb	Settimeofday(tp *Timeval) (err error)
+//sysnb	Setuid(uid int) (err error)
+//sys	Symlink(path string, link string) (err error)
+//sys	Symlinkat(oldpath string, newdirfd int, newpath string) (err error)
+//sys	Sync() (err error)
+//sys	Truncate(path string, length int64) (err error)
+//sys	Umask(newmask int) (oldmask int)
+//sys	Undelete(path string) (err error)
+//sys	Unlink(path string) (err error)
+//sys	Unlinkat(dirfd int, path string, flags int) (err error)
+//sys	Unmount(path string, flags int) (err error)
+//sys	write(fd int, p []byte) (n int, err error)
+//sys   mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error)
+//sys   munmap(addr uintptr, length uintptr) (err error)
+//sys	readlen(fd int, buf *byte, nbuf int) (n int, err error) = SYS_READ
+//sys	writelen(fd int, buf *byte, nbuf int) (n int, err error) = SYS_WRITE
+
+/*
+ * Unimplemented
+ */
+// Profil
+// Sigaction
+// Sigprocmask
+// Getlogin
+// Sigpending
+// Sigaltstack
+// Ioctl
+// Reboot
+// Execve
+// Vfork
+// Sbrk
+// Sstk
+// Ovadvise
+// Mincore
+// Setitimer
+// Swapon
+// Select
+// Sigsuspend
+// Readv
+// Writev
+// Nfssvc
+// Getfh
+// Quotactl
+// Mount
+// Csops
+// Waitid
+// Add_profil
+// Kdebug_trace
+// Sigreturn
+// Atsocket
+// Kqueue_from_portset_np
+// Kqueue_portset
+// Getattrlist
+// Setattrlist
+// Getdirentriesattr
+// Searchfs
+// Delete
+// Copyfile
+// Watchevent
+// Waitevent
+// Modwatch
+// Fsctl
+// Initgroups
+// Posix_spawn
+// Nfsclnt
+// Fhopen
+// Minherit
+// Semsys
+// Msgsys
+// Shmsys
+// Semctl
+// Semget
+// Semop
+// Msgctl
+// Msgget
+// Msgsnd
+// Msgrcv
+// Shmat
+// Shmctl
+// Shmdt
+// Shmget
+// Shm_open
+// Shm_unlink
+// Sem_open
+// Sem_close
+// Sem_unlink
+// Sem_wait
+// Sem_trywait
+// Sem_post
+// Sem_getvalue
+// Sem_init
+// Sem_destroy
+// Open_extended
+// Umask_extended
+// Stat_extended
+// Lstat_extended
+// Fstat_extended
+// Chmod_extended
+// Fchmod_extended
+// Access_extended
+// Settid
+// Gettid
+// Setsgroups
+// Getsgroups
+// Setwgroups
+// Getwgroups
+// Mkfifo_extended
+// Mkdir_extended
+// Identitysvc
+// Shared_region_check_np
+// Shared_region_map_np
+// __pthread_mutex_destroy
+// __pthread_mutex_init
+// __pthread_mutex_lock
+// __pthread_mutex_trylock
+// __pthread_mutex_unlock
+// __pthread_cond_init
+// __pthread_cond_destroy
+// __pthread_cond_broadcast
+// __pthread_cond_signal
+// Setsid_with_pid
+// __pthread_cond_timedwait
+// Aio_fsync
+// Aio_return
+// Aio_suspend
+// Aio_cancel
+// Aio_error
+// Aio_read
+// Aio_write
+// Lio_listio
+// __pthread_cond_wait
+// Iopolicysys
+// __pthread_kill
+// __pthread_sigmask
+// __sigwait
+// __disable_threadsignal
+// __pthread_markcancel
+// __pthread_canceled
+// __semwait_signal
+// Proc_info
+// sendfile
+// Stat64_extended
+// Lstat64_extended
+// Fstat64_extended
+// __pthread_chdir
+// __pthread_fchdir
+// Audit
+// Auditon
+// Getauid
+// Setauid
+// Getaudit
+// Setaudit
+// Getaudit_addr
+// Setaudit_addr
+// Auditctl
+// Bsdthread_create
+// Bsdthread_terminate
+// Stack_snapshot
+// Bsdthread_register
+// Workq_open
+// Workq_ops
+// __mac_execve
+// __mac_syscall
+// __mac_get_file
+// __mac_set_file
+// __mac_get_link
+// __mac_set_link
+// __mac_get_proc
+// __mac_set_proc
+// __mac_get_fd
+// __mac_set_fd
+// __mac_get_pid
+// __mac_get_lcid
+// __mac_get_lctx
+// __mac_set_lctx
+// Setlcid
+// Read_nocancel
+// Write_nocancel
+// Open_nocancel
+// Close_nocancel
+// Wait4_nocancel
+// Recvmsg_nocancel
+// Sendmsg_nocancel
+// Recvfrom_nocancel
+// Accept_nocancel
+// Fcntl_nocancel
+// Select_nocancel
+// Fsync_nocancel
+// Connect_nocancel
+// Sigsuspend_nocancel
+// Readv_nocancel
+// Writev_nocancel
+// Sendto_nocancel
+// Pread_nocancel
+// Pwrite_nocancel
+// Waitid_nocancel
+// Poll_nocancel
+// Msgsnd_nocancel
+// Msgrcv_nocancel
+// Sem_wait_nocancel
+// Aio_suspend_nocancel
+// __sigwait_nocancel
+// __semwait_signal_nocancel
+// __mac_mount
+// __mac_get_mount
+// __mac_getfsstat
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_386.go
new file mode 100644
index 000000000..ea0be1e92
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_386.go
@@ -0,0 +1,53 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build 386,darwin
+
+package unix
+
+import (
+	"syscall"
+)
+
+//sys   ptrace(request int, pid int, addr uintptr, data uintptr) (err error)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: int32(sec), Nsec: int32(nsec)}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: int32(sec), Usec: int32(usec)}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint32(fd)
+	k.Filter = int16(mode)
+	k.Flags = uint16(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint32(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = int32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+func Syscall9(num, a1, a2, a3, a4, a5, a6, a7, a8, a9 uintptr) (r1, r2 uintptr, err syscall.Errno)
+
+//sys	Fstat(fd int, stat *Stat_t) (err error) = SYS_FSTAT64
+//sys	Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) = SYS_FSTATAT64
+//sys	Fstatfs(fd int, stat *Statfs_t) (err error) = SYS_FSTATFS64
+//sys	getfsstat(buf unsafe.Pointer, size uintptr, flags int) (n int, err error) = SYS_GETFSSTAT64
+//sys	Lstat(path string, stat *Stat_t) (err error) = SYS_LSTAT64
+//sys	Stat(path string, stat *Stat_t) (err error) = SYS_STAT64
+//sys	Statfs(path string, stat *Statfs_t) (err error) = SYS_STATFS64
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_amd64.go
new file mode 100644
index 000000000..586240448
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_amd64.go
@@ -0,0 +1,53 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build amd64,darwin
+
+package unix
+
+import (
+	"syscall"
+)
+
+//sys   ptrace(request int, pid int, addr uintptr, data uintptr) (err error)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: int32(usec)}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint64(fd)
+	k.Filter = int16(mode)
+	k.Flags = uint16(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = int32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+func Syscall9(num, a1, a2, a3, a4, a5, a6, a7, a8, a9 uintptr) (r1, r2 uintptr, err syscall.Errno)
+
+//sys	Fstat(fd int, stat *Stat_t) (err error) = SYS_FSTAT64
+//sys	Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) = SYS_FSTATAT64
+//sys	Fstatfs(fd int, stat *Statfs_t) (err error) = SYS_FSTATFS64
+//sys	getfsstat(buf unsafe.Pointer, size uintptr, flags int) (n int, err error) = SYS_GETFSSTAT64
+//sys	Lstat(path string, stat *Stat_t) (err error) = SYS_LSTAT64
+//sys	Stat(path string, stat *Stat_t) (err error) = SYS_STAT64
+//sys	Statfs(path string, stat *Statfs_t) (err error) = SYS_STATFS64
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_arm.go
new file mode 100644
index 000000000..b8b314181
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_arm.go
@@ -0,0 +1,53 @@
+// Copyright 2015 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package unix
+
+import (
+	"syscall"
+)
+
+func ptrace(request int, pid int, addr uintptr, data uintptr) error {
+	return ENOTSUP
+}
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: int32(sec), Nsec: int32(nsec)}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: int32(sec), Usec: int32(usec)}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint32(fd)
+	k.Filter = int16(mode)
+	k.Flags = uint16(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint32(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = int32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+func Syscall9(num, a1, a2, a3, a4, a5, a6, a7, a8, a9 uintptr) (r1, r2 uintptr, err syscall.Errno) // sic
+
+//sys	Fstat(fd int, stat *Stat_t) (err error)
+//sys	Fstatat(fd int, path string, stat *Stat_t, flags int) (err error)
+//sys	Fstatfs(fd int, stat *Statfs_t) (err error)
+//sys	getfsstat(buf unsafe.Pointer, size uintptr, flags int) (n int, err error) = SYS_GETFSSTAT
+//sys	Lstat(path string, stat *Stat_t) (err error)
+//sys	Stat(path string, stat *Stat_t) (err error)
+//sys	Statfs(path string, stat *Statfs_t) (err error)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_arm64.go
new file mode 100644
index 000000000..674139837
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_arm64.go
@@ -0,0 +1,55 @@
+// Copyright 2015 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build arm64,darwin
+
+package unix
+
+import (
+	"syscall"
+)
+
+func ptrace(request int, pid int, addr uintptr, data uintptr) error {
+	return ENOTSUP
+}
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: int32(usec)}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint64(fd)
+	k.Filter = int16(mode)
+	k.Flags = uint16(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = int32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+func Syscall9(num, a1, a2, a3, a4, a5, a6, a7, a8, a9 uintptr) (r1, r2 uintptr, err syscall.Errno) // sic
+
+//sys	Fstat(fd int, stat *Stat_t) (err error)
+//sys	Fstatat(fd int, path string, stat *Stat_t, flags int) (err error)
+//sys	Fstatfs(fd int, stat *Statfs_t) (err error)
+//sys	getfsstat(buf unsafe.Pointer, size uintptr, flags int) (n int, err error) = SYS_GETFSSTAT
+//sys	Lstat(path string, stat *Stat_t) (err error)
+//sys	Stat(path string, stat *Stat_t) (err error)
+//sys	Statfs(path string, stat *Statfs_t) (err error)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_libSystem.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_libSystem.go
new file mode 100644
index 000000000..f34c86c89
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_darwin_libSystem.go
@@ -0,0 +1,33 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build darwin,go1.12
+
+package unix
+
+import "unsafe"
+
+// Implemented in the runtime package (runtime/sys_darwin.go)
+func syscall_syscall(fn, a1, a2, a3 uintptr) (r1, r2 uintptr, err Errno)
+func syscall_syscall6(fn, a1, a2, a3, a4, a5, a6 uintptr) (r1, r2 uintptr, err Errno)
+func syscall_syscall6X(fn, a1, a2, a3, a4, a5, a6 uintptr) (r1, r2 uintptr, err Errno)
+func syscall_syscall9(fn, a1, a2, a3, a4, a5, a6, a7, a8, a9 uintptr) (r1, r2 uintptr, err Errno) // 32-bit only
+func syscall_rawSyscall(fn, a1, a2, a3 uintptr) (r1, r2 uintptr, err Errno)
+func syscall_rawSyscall6(fn, a1, a2, a3, a4, a5, a6 uintptr) (r1, r2 uintptr, err Errno)
+func syscall_syscallPtr(fn, a1, a2, a3 uintptr) (r1, r2 uintptr, err Errno)
+
+//go:linkname syscall_syscall syscall.syscall
+//go:linkname syscall_syscall6 syscall.syscall6
+//go:linkname syscall_syscall6X syscall.syscall6X
+//go:linkname syscall_syscall9 syscall.syscall9
+//go:linkname syscall_rawSyscall syscall.rawSyscall
+//go:linkname syscall_rawSyscall6 syscall.rawSyscall6
+//go:linkname syscall_syscallPtr syscall.syscallPtr
+
+// Find the entry point for f. See comments in runtime/proc.go for the
+// function of the same name.
+//go:nosplit
+func funcPC(f func()) uintptr {
+	return **(**uintptr)(unsafe.Pointer(&f))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_dragonfly.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_dragonfly.go
new file mode 100644
index 000000000..bed7dcfec
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_dragonfly.go
@@ -0,0 +1,524 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// DragonFly BSD system calls.
+// This file is compiled as ordinary Go code,
+// but it is also input to mksyscall,
+// which parses the //sys lines and generates system call stubs.
+// Note that sometimes we use a lowercase //sys name and wrap
+// it in our own nicer implementation, either here or in
+// syscall_bsd.go or syscall_unix.go.
+
+package unix
+
+import (
+	"sync"
+	"unsafe"
+)
+
+// See version list in https://github.com/DragonFlyBSD/DragonFlyBSD/blob/master/sys/sys/param.h
+var (
+	osreldateOnce sync.Once
+	osreldate     uint32
+)
+
+// First __DragonFly_version after September 2019 ABI changes
+// http://lists.dragonflybsd.org/pipermail/users/2019-September/358280.html
+const _dragonflyABIChangeVersion = 500705
+
+func supportsABI(ver uint32) bool {
+	osreldateOnce.Do(func() { osreldate, _ = SysctlUint32("kern.osreldate") })
+	return osreldate >= ver
+}
+
+// SockaddrDatalink implements the Sockaddr interface for AF_LINK type sockets.
+type SockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [12]int8
+	Rcf    uint16
+	Route  [16]uint16
+	raw    RawSockaddrDatalink
+}
+
+// Translate "kern.hostname" to []_C_int{0,1,2,3}.
+func nametomib(name string) (mib []_C_int, err error) {
+	const siz = unsafe.Sizeof(mib[0])
+
+	// NOTE(rsc): It seems strange to set the buffer to have
+	// size CTL_MAXNAME+2 but use only CTL_MAXNAME
+	// as the size. I don't know why the +2 is here, but the
+	// kernel uses +2 for its own implementation of this function.
+	// I am scared that if we don't include the +2 here, the kernel
+	// will silently write 2 words farther than we specify
+	// and we'll get memory corruption.
+	var buf [CTL_MAXNAME + 2]_C_int
+	n := uintptr(CTL_MAXNAME) * siz
+
+	p := (*byte)(unsafe.Pointer(&buf[0]))
+	bytes, err := ByteSliceFromString(name)
+	if err != nil {
+		return nil, err
+	}
+
+	// Magic sysctl: "setting" 0.3 to a string name
+	// lets you read back the array of integers form.
+	if err = sysctl([]_C_int{0, 3}, p, &n, &bytes[0], uintptr(len(name))); err != nil {
+		return nil, err
+	}
+	return buf[0 : n/siz], nil
+}
+
+func direntIno(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Fileno), unsafe.Sizeof(Dirent{}.Fileno))
+}
+
+func direntReclen(buf []byte) (uint64, bool) {
+	namlen, ok := direntNamlen(buf)
+	if !ok {
+		return 0, false
+	}
+	return (16 + namlen + 1 + 7) &^ 7, true
+}
+
+func direntNamlen(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Namlen), unsafe.Sizeof(Dirent{}.Namlen))
+}
+
+//sysnb pipe() (r int, w int, err error)
+
+func Pipe(p []int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	p[0], p[1], err = pipe()
+	return
+}
+
+//sys	extpread(fd int, p []byte, flags int, offset int64) (n int, err error)
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	return extpread(fd, p, 0, offset)
+}
+
+//sys	extpwrite(fd int, p []byte, flags int, offset int64) (n int, err error)
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	return extpwrite(fd, p, 0, offset)
+}
+
+func Accept4(fd, flags int) (nfd int, sa Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	var len _Socklen = SizeofSockaddrAny
+	nfd, err = accept4(fd, &rsa, &len, flags)
+	if err != nil {
+		return
+	}
+	if len > SizeofSockaddrAny {
+		panic("RawSockaddrAny too small")
+	}
+	sa, err = anyToSockaddr(fd, &rsa)
+	if err != nil {
+		Close(nfd)
+		nfd = 0
+	}
+	return
+}
+
+//sys	Getcwd(buf []byte) (n int, err error) = SYS___GETCWD
+
+func Getfsstat(buf []Statfs_t, flags int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	var bufsize uintptr
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+		bufsize = unsafe.Sizeof(Statfs_t{}) * uintptr(len(buf))
+	}
+	r0, _, e1 := Syscall(SYS_GETFSSTAT, uintptr(_p0), bufsize, uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+func setattrlistTimes(path string, times []Timespec, flags int) error {
+	// used on Darwin for UtimesNano
+	return ENOSYS
+}
+
+//sys	ioctl(fd int, req uint, arg uintptr) (err error)
+
+//sys   sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) = SYS___SYSCTL
+
+func sysctlUname(mib []_C_int, old *byte, oldlen *uintptr) error {
+	err := sysctl(mib, old, oldlen, nil, 0)
+	if err != nil {
+		// Utsname members on Dragonfly are only 32 bytes and
+		// the syscall returns ENOMEM in case the actual value
+		// is longer.
+		if err == ENOMEM {
+			err = nil
+		}
+	}
+	return err
+}
+
+func Uname(uname *Utsname) error {
+	mib := []_C_int{CTL_KERN, KERN_OSTYPE}
+	n := unsafe.Sizeof(uname.Sysname)
+	if err := sysctlUname(mib, &uname.Sysname[0], &n); err != nil {
+		return err
+	}
+	uname.Sysname[unsafe.Sizeof(uname.Sysname)-1] = 0
+
+	mib = []_C_int{CTL_KERN, KERN_HOSTNAME}
+	n = unsafe.Sizeof(uname.Nodename)
+	if err := sysctlUname(mib, &uname.Nodename[0], &n); err != nil {
+		return err
+	}
+	uname.Nodename[unsafe.Sizeof(uname.Nodename)-1] = 0
+
+	mib = []_C_int{CTL_KERN, KERN_OSRELEASE}
+	n = unsafe.Sizeof(uname.Release)
+	if err := sysctlUname(mib, &uname.Release[0], &n); err != nil {
+		return err
+	}
+	uname.Release[unsafe.Sizeof(uname.Release)-1] = 0
+
+	mib = []_C_int{CTL_KERN, KERN_VERSION}
+	n = unsafe.Sizeof(uname.Version)
+	if err := sysctlUname(mib, &uname.Version[0], &n); err != nil {
+		return err
+	}
+
+	// The version might have newlines or tabs in it, convert them to
+	// spaces.
+	for i, b := range uname.Version {
+		if b == '\n' || b == '\t' {
+			if i == len(uname.Version)-1 {
+				uname.Version[i] = 0
+			} else {
+				uname.Version[i] = ' '
+			}
+		}
+	}
+
+	mib = []_C_int{CTL_HW, HW_MACHINE}
+	n = unsafe.Sizeof(uname.Machine)
+	if err := sysctlUname(mib, &uname.Machine[0], &n); err != nil {
+		return err
+	}
+	uname.Machine[unsafe.Sizeof(uname.Machine)-1] = 0
+
+	return nil
+}
+
+func Sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	if raceenabled {
+		raceReleaseMerge(unsafe.Pointer(&ioSync))
+	}
+	return sendfile(outfd, infd, offset, count)
+}
+
+/*
+ * Exposed directly
+ */
+//sys	Access(path string, mode uint32) (err error)
+//sys	Adjtime(delta *Timeval, olddelta *Timeval) (err error)
+//sys	Chdir(path string) (err error)
+//sys	Chflags(path string, flags int) (err error)
+//sys	Chmod(path string, mode uint32) (err error)
+//sys	Chown(path string, uid int, gid int) (err error)
+//sys	Chroot(path string) (err error)
+//sys	Close(fd int) (err error)
+//sys	Dup(fd int) (nfd int, err error)
+//sys	Dup2(from int, to int) (err error)
+//sys	Exit(code int)
+//sys	Faccessat(dirfd int, path string, mode uint32, flags int) (err error)
+//sys	Fchdir(fd int) (err error)
+//sys	Fchflags(fd int, flags int) (err error)
+//sys	Fchmod(fd int, mode uint32) (err error)
+//sys	Fchmodat(dirfd int, path string, mode uint32, flags int) (err error)
+//sys	Fchown(fd int, uid int, gid int) (err error)
+//sys	Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error)
+//sys	Flock(fd int, how int) (err error)
+//sys	Fpathconf(fd int, name int) (val int, err error)
+//sys	Fstat(fd int, stat *Stat_t) (err error)
+//sys	Fstatat(fd int, path string, stat *Stat_t, flags int) (err error)
+//sys	Fstatfs(fd int, stat *Statfs_t) (err error)
+//sys	Fsync(fd int) (err error)
+//sys	Ftruncate(fd int, length int64) (err error)
+//sys	Getdents(fd int, buf []byte) (n int, err error)
+//sys	Getdirentries(fd int, buf []byte, basep *uintptr) (n int, err error)
+//sys	Getdtablesize() (size int)
+//sysnb	Getegid() (egid int)
+//sysnb	Geteuid() (uid int)
+//sysnb	Getgid() (gid int)
+//sysnb	Getpgid(pid int) (pgid int, err error)
+//sysnb	Getpgrp() (pgrp int)
+//sysnb	Getpid() (pid int)
+//sysnb	Getppid() (ppid int)
+//sys	Getpriority(which int, who int) (prio int, err error)
+//sysnb	Getrlimit(which int, lim *Rlimit) (err error)
+//sysnb	Getrusage(who int, rusage *Rusage) (err error)
+//sysnb	Getsid(pid int) (sid int, err error)
+//sysnb	Gettimeofday(tv *Timeval) (err error)
+//sysnb	Getuid() (uid int)
+//sys	Issetugid() (tainted bool)
+//sys	Kill(pid int, signum syscall.Signal) (err error)
+//sys	Kqueue() (fd int, err error)
+//sys	Lchown(path string, uid int, gid int) (err error)
+//sys	Link(path string, link string) (err error)
+//sys	Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error)
+//sys	Listen(s int, backlog int) (err error)
+//sys	Lstat(path string, stat *Stat_t) (err error)
+//sys	Mkdir(path string, mode uint32) (err error)
+//sys	Mkdirat(dirfd int, path string, mode uint32) (err error)
+//sys	Mkfifo(path string, mode uint32) (err error)
+//sys	Mknod(path string, mode uint32, dev int) (err error)
+//sys	Mknodat(fd int, path string, mode uint32, dev int) (err error)
+//sys	Nanosleep(time *Timespec, leftover *Timespec) (err error)
+//sys	Open(path string, mode int, perm uint32) (fd int, err error)
+//sys	Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error)
+//sys	Pathconf(path string, name int) (val int, err error)
+//sys	read(fd int, p []byte) (n int, err error)
+//sys	Readlink(path string, buf []byte) (n int, err error)
+//sys	Rename(from string, to string) (err error)
+//sys	Renameat(fromfd int, from string, tofd int, to string) (err error)
+//sys	Revoke(path string) (err error)
+//sys	Rmdir(path string) (err error)
+//sys	Seek(fd int, offset int64, whence int) (newoffset int64, err error) = SYS_LSEEK
+//sys	Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error)
+//sysnb	Setegid(egid int) (err error)
+//sysnb	Seteuid(euid int) (err error)
+//sysnb	Setgid(gid int) (err error)
+//sys	Setlogin(name string) (err error)
+//sysnb	Setpgid(pid int, pgid int) (err error)
+//sys	Setpriority(which int, who int, prio int) (err error)
+//sysnb	Setregid(rgid int, egid int) (err error)
+//sysnb	Setreuid(ruid int, euid int) (err error)
+//sysnb	Setresgid(rgid int, egid int, sgid int) (err error)
+//sysnb	Setresuid(ruid int, euid int, suid int) (err error)
+//sysnb	Setrlimit(which int, lim *Rlimit) (err error)
+//sysnb	Setsid() (pid int, err error)
+//sysnb	Settimeofday(tp *Timeval) (err error)
+//sysnb	Setuid(uid int) (err error)
+//sys	Stat(path string, stat *Stat_t) (err error)
+//sys	Statfs(path string, stat *Statfs_t) (err error)
+//sys	Symlink(path string, link string) (err error)
+//sys	Symlinkat(oldpath string, newdirfd int, newpath string) (err error)
+//sys	Sync() (err error)
+//sys	Truncate(path string, length int64) (err error)
+//sys	Umask(newmask int) (oldmask int)
+//sys	Undelete(path string) (err error)
+//sys	Unlink(path string) (err error)
+//sys	Unlinkat(dirfd int, path string, flags int) (err error)
+//sys	Unmount(path string, flags int) (err error)
+//sys	write(fd int, p []byte) (n int, err error)
+//sys   mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error)
+//sys   munmap(addr uintptr, length uintptr) (err error)
+//sys	readlen(fd int, buf *byte, nbuf int) (n int, err error) = SYS_READ
+//sys	writelen(fd int, buf *byte, nbuf int) (n int, err error) = SYS_WRITE
+//sys	accept4(fd int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (nfd int, err error)
+//sys	utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error)
+
+/*
+ * Unimplemented
+ * TODO(jsing): Update this list for DragonFly.
+ */
+// Profil
+// Sigaction
+// Sigprocmask
+// Getlogin
+// Sigpending
+// Sigaltstack
+// Reboot
+// Execve
+// Vfork
+// Sbrk
+// Sstk
+// Ovadvise
+// Mincore
+// Setitimer
+// Swapon
+// Select
+// Sigsuspend
+// Readv
+// Writev
+// Nfssvc
+// Getfh
+// Quotactl
+// Mount
+// Csops
+// Waitid
+// Add_profil
+// Kdebug_trace
+// Sigreturn
+// Atsocket
+// Kqueue_from_portset_np
+// Kqueue_portset
+// Getattrlist
+// Setattrlist
+// Getdirentriesattr
+// Searchfs
+// Delete
+// Copyfile
+// Watchevent
+// Waitevent
+// Modwatch
+// Getxattr
+// Fgetxattr
+// Setxattr
+// Fsetxattr
+// Removexattr
+// Fremovexattr
+// Listxattr
+// Flistxattr
+// Fsctl
+// Initgroups
+// Posix_spawn
+// Nfsclnt
+// Fhopen
+// Minherit
+// Semsys
+// Msgsys
+// Shmsys
+// Semctl
+// Semget
+// Semop
+// Msgctl
+// Msgget
+// Msgsnd
+// Msgrcv
+// Shmat
+// Shmctl
+// Shmdt
+// Shmget
+// Shm_open
+// Shm_unlink
+// Sem_open
+// Sem_close
+// Sem_unlink
+// Sem_wait
+// Sem_trywait
+// Sem_post
+// Sem_getvalue
+// Sem_init
+// Sem_destroy
+// Open_extended
+// Umask_extended
+// Stat_extended
+// Lstat_extended
+// Fstat_extended
+// Chmod_extended
+// Fchmod_extended
+// Access_extended
+// Settid
+// Gettid
+// Setsgroups
+// Getsgroups
+// Setwgroups
+// Getwgroups
+// Mkfifo_extended
+// Mkdir_extended
+// Identitysvc
+// Shared_region_check_np
+// Shared_region_map_np
+// __pthread_mutex_destroy
+// __pthread_mutex_init
+// __pthread_mutex_lock
+// __pthread_mutex_trylock
+// __pthread_mutex_unlock
+// __pthread_cond_init
+// __pthread_cond_destroy
+// __pthread_cond_broadcast
+// __pthread_cond_signal
+// Setsid_with_pid
+// __pthread_cond_timedwait
+// Aio_fsync
+// Aio_return
+// Aio_suspend
+// Aio_cancel
+// Aio_error
+// Aio_read
+// Aio_write
+// Lio_listio
+// __pthread_cond_wait
+// Iopolicysys
+// __pthread_kill
+// __pthread_sigmask
+// __sigwait
+// __disable_threadsignal
+// __pthread_markcancel
+// __pthread_canceled
+// __semwait_signal
+// Proc_info
+// Stat64_extended
+// Lstat64_extended
+// Fstat64_extended
+// __pthread_chdir
+// __pthread_fchdir
+// Audit
+// Auditon
+// Getauid
+// Setauid
+// Getaudit
+// Setaudit
+// Getaudit_addr
+// Setaudit_addr
+// Auditctl
+// Bsdthread_create
+// Bsdthread_terminate
+// Stack_snapshot
+// Bsdthread_register
+// Workq_open
+// Workq_ops
+// __mac_execve
+// __mac_syscall
+// __mac_get_file
+// __mac_set_file
+// __mac_get_link
+// __mac_set_link
+// __mac_get_proc
+// __mac_set_proc
+// __mac_get_fd
+// __mac_set_fd
+// __mac_get_pid
+// __mac_get_lcid
+// __mac_get_lctx
+// __mac_set_lctx
+// Setlcid
+// Read_nocancel
+// Write_nocancel
+// Open_nocancel
+// Close_nocancel
+// Wait4_nocancel
+// Recvmsg_nocancel
+// Sendmsg_nocancel
+// Recvfrom_nocancel
+// Accept_nocancel
+// Fcntl_nocancel
+// Select_nocancel
+// Fsync_nocancel
+// Connect_nocancel
+// Sigsuspend_nocancel
+// Readv_nocancel
+// Writev_nocancel
+// Sendto_nocancel
+// Pread_nocancel
+// Pwrite_nocancel
+// Waitid_nocancel
+// Msgsnd_nocancel
+// Msgrcv_nocancel
+// Sem_wait_nocancel
+// Aio_suspend_nocancel
+// __sigwait_nocancel
+// __semwait_signal_nocancel
+// __mac_mount
+// __mac_get_mount
+// __mac_getfsstat
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_dragonfly_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_dragonfly_amd64.go
new file mode 100644
index 000000000..a6b4830ac
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_dragonfly_amd64.go
@@ -0,0 +1,56 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build amd64,dragonfly
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: usec}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint64(fd)
+	k.Filter = int16(mode)
+	k.Flags = uint16(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = int32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	var writtenOut uint64 = 0
+	_, _, e1 := Syscall9(SYS_SENDFILE, uintptr(infd), uintptr(outfd), uintptr(*offset), uintptr(count), 0, uintptr(unsafe.Pointer(&writtenOut)), 0, 0, 0)
+
+	written = int(writtenOut)
+
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+func Syscall9(num, a1, a2, a3, a4, a5, a6, a7, a8, a9 uintptr) (r1, r2 uintptr, err syscall.Errno)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd.go
new file mode 100644
index 000000000..f6db02aff
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd.go
@@ -0,0 +1,859 @@
+// Copyright 2009,2010 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// FreeBSD system calls.
+// This file is compiled as ordinary Go code,
+// but it is also input to mksyscall,
+// which parses the //sys lines and generates system call stubs.
+// Note that sometimes we use a lowercase //sys name and wrap
+// it in our own nicer implementation, either here or in
+// syscall_bsd.go or syscall_unix.go.
+
+package unix
+
+import (
+	"sync"
+	"unsafe"
+)
+
+const (
+	SYS_FSTAT_FREEBSD12         = 551 // { int fstat(int fd, _Out_ struct stat *sb); }
+	SYS_FSTATAT_FREEBSD12       = 552 // { int fstatat(int fd, _In_z_ char *path, \
+	SYS_GETDIRENTRIES_FREEBSD12 = 554 // { ssize_t getdirentries(int fd, \
+	SYS_STATFS_FREEBSD12        = 555 // { int statfs(_In_z_ char *path, \
+	SYS_FSTATFS_FREEBSD12       = 556 // { int fstatfs(int fd, \
+	SYS_GETFSSTAT_FREEBSD12     = 557 // { int getfsstat( \
+	SYS_MKNODAT_FREEBSD12       = 559 // { int mknodat(int fd, _In_z_ char *path, \
+)
+
+// See https://www.freebsd.org/doc/en_US.ISO8859-1/books/porters-handbook/versions.html.
+var (
+	osreldateOnce sync.Once
+	osreldate     uint32
+)
+
+// INO64_FIRST from /usr/src/lib/libc/sys/compat-ino64.h
+const _ino64First = 1200031
+
+func supportsABI(ver uint32) bool {
+	osreldateOnce.Do(func() { osreldate, _ = SysctlUint32("kern.osreldate") })
+	return osreldate >= ver
+}
+
+// SockaddrDatalink implements the Sockaddr interface for AF_LINK type sockets.
+type SockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [46]int8
+	raw    RawSockaddrDatalink
+}
+
+// Translate "kern.hostname" to []_C_int{0,1,2,3}.
+func nametomib(name string) (mib []_C_int, err error) {
+	const siz = unsafe.Sizeof(mib[0])
+
+	// NOTE(rsc): It seems strange to set the buffer to have
+	// size CTL_MAXNAME+2 but use only CTL_MAXNAME
+	// as the size. I don't know why the +2 is here, but the
+	// kernel uses +2 for its own implementation of this function.
+	// I am scared that if we don't include the +2 here, the kernel
+	// will silently write 2 words farther than we specify
+	// and we'll get memory corruption.
+	var buf [CTL_MAXNAME + 2]_C_int
+	n := uintptr(CTL_MAXNAME) * siz
+
+	p := (*byte)(unsafe.Pointer(&buf[0]))
+	bytes, err := ByteSliceFromString(name)
+	if err != nil {
+		return nil, err
+	}
+
+	// Magic sysctl: "setting" 0.3 to a string name
+	// lets you read back the array of integers form.
+	if err = sysctl([]_C_int{0, 3}, p, &n, &bytes[0], uintptr(len(name))); err != nil {
+		return nil, err
+	}
+	return buf[0 : n/siz], nil
+}
+
+func direntIno(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Fileno), unsafe.Sizeof(Dirent{}.Fileno))
+}
+
+func direntReclen(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Reclen), unsafe.Sizeof(Dirent{}.Reclen))
+}
+
+func direntNamlen(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Namlen), unsafe.Sizeof(Dirent{}.Namlen))
+}
+
+func Pipe(p []int) (err error) {
+	return Pipe2(p, 0)
+}
+
+//sysnb	pipe2(p *[2]_C_int, flags int) (err error)
+
+func Pipe2(p []int, flags int) error {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err := pipe2(&pp, flags)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return err
+}
+
+func GetsockoptIPMreqn(fd, level, opt int) (*IPMreqn, error) {
+	var value IPMreqn
+	vallen := _Socklen(SizeofIPMreqn)
+	errno := getsockopt(fd, level, opt, unsafe.Pointer(&value), &vallen)
+	return &value, errno
+}
+
+func SetsockoptIPMreqn(fd, level, opt int, mreq *IPMreqn) (err error) {
+	return setsockopt(fd, level, opt, unsafe.Pointer(mreq), unsafe.Sizeof(*mreq))
+}
+
+func Accept4(fd, flags int) (nfd int, sa Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	var len _Socklen = SizeofSockaddrAny
+	nfd, err = accept4(fd, &rsa, &len, flags)
+	if err != nil {
+		return
+	}
+	if len > SizeofSockaddrAny {
+		panic("RawSockaddrAny too small")
+	}
+	sa, err = anyToSockaddr(fd, &rsa)
+	if err != nil {
+		Close(nfd)
+		nfd = 0
+	}
+	return
+}
+
+//sys	Getcwd(buf []byte) (n int, err error) = SYS___GETCWD
+
+func Getfsstat(buf []Statfs_t, flags int) (n int, err error) {
+	var (
+		_p0          unsafe.Pointer
+		bufsize      uintptr
+		oldBuf       []statfs_freebsd11_t
+		needsConvert bool
+	)
+
+	if len(buf) > 0 {
+		if supportsABI(_ino64First) {
+			_p0 = unsafe.Pointer(&buf[0])
+			bufsize = unsafe.Sizeof(Statfs_t{}) * uintptr(len(buf))
+		} else {
+			n := len(buf)
+			oldBuf = make([]statfs_freebsd11_t, n)
+			_p0 = unsafe.Pointer(&oldBuf[0])
+			bufsize = unsafe.Sizeof(statfs_freebsd11_t{}) * uintptr(n)
+			needsConvert = true
+		}
+	}
+	var sysno uintptr = SYS_GETFSSTAT
+	if supportsABI(_ino64First) {
+		sysno = SYS_GETFSSTAT_FREEBSD12
+	}
+	r0, _, e1 := Syscall(sysno, uintptr(_p0), bufsize, uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	if e1 == 0 && needsConvert {
+		for i := range oldBuf {
+			buf[i].convertFrom(&oldBuf[i])
+		}
+	}
+	return
+}
+
+func setattrlistTimes(path string, times []Timespec, flags int) error {
+	// used on Darwin for UtimesNano
+	return ENOSYS
+}
+
+//sys   ioctl(fd int, req uint, arg uintptr) (err error)
+
+//sys   sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) = SYS___SYSCTL
+
+func Uname(uname *Utsname) error {
+	mib := []_C_int{CTL_KERN, KERN_OSTYPE}
+	n := unsafe.Sizeof(uname.Sysname)
+	if err := sysctl(mib, &uname.Sysname[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	mib = []_C_int{CTL_KERN, KERN_HOSTNAME}
+	n = unsafe.Sizeof(uname.Nodename)
+	if err := sysctl(mib, &uname.Nodename[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	mib = []_C_int{CTL_KERN, KERN_OSRELEASE}
+	n = unsafe.Sizeof(uname.Release)
+	if err := sysctl(mib, &uname.Release[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	mib = []_C_int{CTL_KERN, KERN_VERSION}
+	n = unsafe.Sizeof(uname.Version)
+	if err := sysctl(mib, &uname.Version[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	// The version might have newlines or tabs in it, convert them to
+	// spaces.
+	for i, b := range uname.Version {
+		if b == '\n' || b == '\t' {
+			if i == len(uname.Version)-1 {
+				uname.Version[i] = 0
+			} else {
+				uname.Version[i] = ' '
+			}
+		}
+	}
+
+	mib = []_C_int{CTL_HW, HW_MACHINE}
+	n = unsafe.Sizeof(uname.Machine)
+	if err := sysctl(mib, &uname.Machine[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func Stat(path string, st *Stat_t) (err error) {
+	var oldStat stat_freebsd11_t
+	if supportsABI(_ino64First) {
+		return fstatat_freebsd12(AT_FDCWD, path, st, 0)
+	}
+	err = stat(path, &oldStat)
+	if err != nil {
+		return err
+	}
+
+	st.convertFrom(&oldStat)
+	return nil
+}
+
+func Lstat(path string, st *Stat_t) (err error) {
+	var oldStat stat_freebsd11_t
+	if supportsABI(_ino64First) {
+		return fstatat_freebsd12(AT_FDCWD, path, st, AT_SYMLINK_NOFOLLOW)
+	}
+	err = lstat(path, &oldStat)
+	if err != nil {
+		return err
+	}
+
+	st.convertFrom(&oldStat)
+	return nil
+}
+
+func Fstat(fd int, st *Stat_t) (err error) {
+	var oldStat stat_freebsd11_t
+	if supportsABI(_ino64First) {
+		return fstat_freebsd12(fd, st)
+	}
+	err = fstat(fd, &oldStat)
+	if err != nil {
+		return err
+	}
+
+	st.convertFrom(&oldStat)
+	return nil
+}
+
+func Fstatat(fd int, path string, st *Stat_t, flags int) (err error) {
+	var oldStat stat_freebsd11_t
+	if supportsABI(_ino64First) {
+		return fstatat_freebsd12(fd, path, st, flags)
+	}
+	err = fstatat(fd, path, &oldStat, flags)
+	if err != nil {
+		return err
+	}
+
+	st.convertFrom(&oldStat)
+	return nil
+}
+
+func Statfs(path string, st *Statfs_t) (err error) {
+	var oldStatfs statfs_freebsd11_t
+	if supportsABI(_ino64First) {
+		return statfs_freebsd12(path, st)
+	}
+	err = statfs(path, &oldStatfs)
+	if err != nil {
+		return err
+	}
+
+	st.convertFrom(&oldStatfs)
+	return nil
+}
+
+func Fstatfs(fd int, st *Statfs_t) (err error) {
+	var oldStatfs statfs_freebsd11_t
+	if supportsABI(_ino64First) {
+		return fstatfs_freebsd12(fd, st)
+	}
+	err = fstatfs(fd, &oldStatfs)
+	if err != nil {
+		return err
+	}
+
+	st.convertFrom(&oldStatfs)
+	return nil
+}
+
+func Getdents(fd int, buf []byte) (n int, err error) {
+	return Getdirentries(fd, buf, nil)
+}
+
+func Getdirentries(fd int, buf []byte, basep *uintptr) (n int, err error) {
+	if supportsABI(_ino64First) {
+		if basep == nil || unsafe.Sizeof(*basep) == 8 {
+			return getdirentries_freebsd12(fd, buf, (*uint64)(unsafe.Pointer(basep)))
+		}
+		// The freebsd12 syscall needs a 64-bit base. On 32-bit machines
+		// we can't just use the basep passed in. See #32498.
+		var base uint64 = uint64(*basep)
+		n, err = getdirentries_freebsd12(fd, buf, &base)
+		*basep = uintptr(base)
+		if base>>32 != 0 {
+			// We can't stuff the base back into a uintptr, so any
+			// future calls would be suspect. Generate an error.
+			// EIO is allowed by getdirentries.
+			err = EIO
+		}
+		return
+	}
+
+	// The old syscall entries are smaller than the new. Use 1/4 of the original
+	// buffer size rounded up to DIRBLKSIZ (see /usr/src/lib/libc/sys/getdirentries.c).
+	oldBufLen := roundup(len(buf)/4, _dirblksiz)
+	oldBuf := make([]byte, oldBufLen)
+	n, err = getdirentries(fd, oldBuf, basep)
+	if err == nil && n > 0 {
+		n = convertFromDirents11(buf, oldBuf[:n])
+	}
+	return
+}
+
+func Mknod(path string, mode uint32, dev uint64) (err error) {
+	var oldDev int
+	if supportsABI(_ino64First) {
+		return mknodat_freebsd12(AT_FDCWD, path, mode, dev)
+	}
+	oldDev = int(dev)
+	return mknod(path, mode, oldDev)
+}
+
+func Mknodat(fd int, path string, mode uint32, dev uint64) (err error) {
+	var oldDev int
+	if supportsABI(_ino64First) {
+		return mknodat_freebsd12(fd, path, mode, dev)
+	}
+	oldDev = int(dev)
+	return mknodat(fd, path, mode, oldDev)
+}
+
+// round x to the nearest multiple of y, larger or equal to x.
+//
+// from /usr/include/sys/param.h Macros for counting and rounding.
+// #define roundup(x, y)   ((((x)+((y)-1))/(y))*(y))
+func roundup(x, y int) int {
+	return ((x + y - 1) / y) * y
+}
+
+func (s *Stat_t) convertFrom(old *stat_freebsd11_t) {
+	*s = Stat_t{
+		Dev:     uint64(old.Dev),
+		Ino:     uint64(old.Ino),
+		Nlink:   uint64(old.Nlink),
+		Mode:    old.Mode,
+		Uid:     old.Uid,
+		Gid:     old.Gid,
+		Rdev:    uint64(old.Rdev),
+		Atim:    old.Atim,
+		Mtim:    old.Mtim,
+		Ctim:    old.Ctim,
+		Btim:    old.Btim,
+		Size:    old.Size,
+		Blocks:  old.Blocks,
+		Blksize: old.Blksize,
+		Flags:   old.Flags,
+		Gen:     uint64(old.Gen),
+	}
+}
+
+func (s *Statfs_t) convertFrom(old *statfs_freebsd11_t) {
+	*s = Statfs_t{
+		Version:     _statfsVersion,
+		Type:        old.Type,
+		Flags:       old.Flags,
+		Bsize:       old.Bsize,
+		Iosize:      old.Iosize,
+		Blocks:      old.Blocks,
+		Bfree:       old.Bfree,
+		Bavail:      old.Bavail,
+		Files:       old.Files,
+		Ffree:       old.Ffree,
+		Syncwrites:  old.Syncwrites,
+		Asyncwrites: old.Asyncwrites,
+		Syncreads:   old.Syncreads,
+		Asyncreads:  old.Asyncreads,
+		// Spare
+		Namemax: old.Namemax,
+		Owner:   old.Owner,
+		Fsid:    old.Fsid,
+		// Charspare
+		// Fstypename
+		// Mntfromname
+		// Mntonname
+	}
+
+	sl := old.Fstypename[:]
+	n := clen(*(*[]byte)(unsafe.Pointer(&sl)))
+	copy(s.Fstypename[:], old.Fstypename[:n])
+
+	sl = old.Mntfromname[:]
+	n = clen(*(*[]byte)(unsafe.Pointer(&sl)))
+	copy(s.Mntfromname[:], old.Mntfromname[:n])
+
+	sl = old.Mntonname[:]
+	n = clen(*(*[]byte)(unsafe.Pointer(&sl)))
+	copy(s.Mntonname[:], old.Mntonname[:n])
+}
+
+func convertFromDirents11(buf []byte, old []byte) int {
+	const (
+		fixedSize    = int(unsafe.Offsetof(Dirent{}.Name))
+		oldFixedSize = int(unsafe.Offsetof(dirent_freebsd11{}.Name))
+	)
+
+	dstPos := 0
+	srcPos := 0
+	for dstPos+fixedSize < len(buf) && srcPos+oldFixedSize < len(old) {
+		var dstDirent Dirent
+		var srcDirent dirent_freebsd11
+
+		// If multiple direntries are written, sometimes when we reach the final one,
+		// we may have cap of old less than size of dirent_freebsd11.
+		copy((*[unsafe.Sizeof(srcDirent)]byte)(unsafe.Pointer(&srcDirent))[:], old[srcPos:])
+
+		reclen := roundup(fixedSize+int(srcDirent.Namlen)+1, 8)
+		if dstPos+reclen > len(buf) {
+			break
+		}
+
+		dstDirent.Fileno = uint64(srcDirent.Fileno)
+		dstDirent.Off = 0
+		dstDirent.Reclen = uint16(reclen)
+		dstDirent.Type = srcDirent.Type
+		dstDirent.Pad0 = 0
+		dstDirent.Namlen = uint16(srcDirent.Namlen)
+		dstDirent.Pad1 = 0
+
+		copy(dstDirent.Name[:], srcDirent.Name[:srcDirent.Namlen])
+		copy(buf[dstPos:], (*[unsafe.Sizeof(dstDirent)]byte)(unsafe.Pointer(&dstDirent))[:])
+		padding := buf[dstPos+fixedSize+int(dstDirent.Namlen) : dstPos+reclen]
+		for i := range padding {
+			padding[i] = 0
+		}
+
+		dstPos += int(dstDirent.Reclen)
+		srcPos += int(srcDirent.Reclen)
+	}
+
+	return dstPos
+}
+
+func Sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	if raceenabled {
+		raceReleaseMerge(unsafe.Pointer(&ioSync))
+	}
+	return sendfile(outfd, infd, offset, count)
+}
+
+//sys	ptrace(request int, pid int, addr uintptr, data int) (err error)
+
+func PtraceAttach(pid int) (err error) {
+	return ptrace(PTRACE_ATTACH, pid, 0, 0)
+}
+
+func PtraceCont(pid int, signal int) (err error) {
+	return ptrace(PTRACE_CONT, pid, 1, signal)
+}
+
+func PtraceDetach(pid int) (err error) {
+	return ptrace(PTRACE_DETACH, pid, 1, 0)
+}
+
+func PtraceGetFpRegs(pid int, fpregsout *FpReg) (err error) {
+	return ptrace(PTRACE_GETFPREGS, pid, uintptr(unsafe.Pointer(fpregsout)), 0)
+}
+
+func PtraceGetRegs(pid int, regsout *Reg) (err error) {
+	return ptrace(PTRACE_GETREGS, pid, uintptr(unsafe.Pointer(regsout)), 0)
+}
+
+func PtraceLwpEvents(pid int, enable int) (err error) {
+	return ptrace(PTRACE_LWPEVENTS, pid, 0, enable)
+}
+
+func PtraceLwpInfo(pid int, info uintptr) (err error) {
+	return ptrace(PTRACE_LWPINFO, pid, info, int(unsafe.Sizeof(PtraceLwpInfoStruct{})))
+}
+
+func PtracePeekData(pid int, addr uintptr, out []byte) (count int, err error) {
+	return PtraceIO(PIOD_READ_D, pid, addr, out, SizeofLong)
+}
+
+func PtracePeekText(pid int, addr uintptr, out []byte) (count int, err error) {
+	return PtraceIO(PIOD_READ_I, pid, addr, out, SizeofLong)
+}
+
+func PtracePokeData(pid int, addr uintptr, data []byte) (count int, err error) {
+	return PtraceIO(PIOD_WRITE_D, pid, addr, data, SizeofLong)
+}
+
+func PtracePokeText(pid int, addr uintptr, data []byte) (count int, err error) {
+	return PtraceIO(PIOD_WRITE_I, pid, addr, data, SizeofLong)
+}
+
+func PtraceSetRegs(pid int, regs *Reg) (err error) {
+	return ptrace(PTRACE_SETREGS, pid, uintptr(unsafe.Pointer(regs)), 0)
+}
+
+func PtraceSingleStep(pid int) (err error) {
+	return ptrace(PTRACE_SINGLESTEP, pid, 1, 0)
+}
+
+/*
+ * Exposed directly
+ */
+//sys	Access(path string, mode uint32) (err error)
+//sys	Adjtime(delta *Timeval, olddelta *Timeval) (err error)
+//sys	CapEnter() (err error)
+//sys	capRightsGet(version int, fd int, rightsp *CapRights) (err error) = SYS___CAP_RIGHTS_GET
+//sys	capRightsLimit(fd int, rightsp *CapRights) (err error)
+//sys	Chdir(path string) (err error)
+//sys	Chflags(path string, flags int) (err error)
+//sys	Chmod(path string, mode uint32) (err error)
+//sys	Chown(path string, uid int, gid int) (err error)
+//sys	Chroot(path string) (err error)
+//sys	Close(fd int) (err error)
+//sys	Dup(fd int) (nfd int, err error)
+//sys	Dup2(from int, to int) (err error)
+//sys	Exit(code int)
+//sys	ExtattrGetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error)
+//sys	ExtattrSetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error)
+//sys	ExtattrDeleteFd(fd int, attrnamespace int, attrname string) (err error)
+//sys	ExtattrListFd(fd int, attrnamespace int, data uintptr, nbytes int) (ret int, err error)
+//sys	ExtattrGetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error)
+//sys	ExtattrSetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error)
+//sys	ExtattrDeleteFile(file string, attrnamespace int, attrname string) (err error)
+//sys	ExtattrListFile(file string, attrnamespace int, data uintptr, nbytes int) (ret int, err error)
+//sys	ExtattrGetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error)
+//sys	ExtattrSetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error)
+//sys	ExtattrDeleteLink(link string, attrnamespace int, attrname string) (err error)
+//sys	ExtattrListLink(link string, attrnamespace int, data uintptr, nbytes int) (ret int, err error)
+//sys	Fadvise(fd int, offset int64, length int64, advice int) (err error) = SYS_POSIX_FADVISE
+//sys	Faccessat(dirfd int, path string, mode uint32, flags int) (err error)
+//sys	Fchdir(fd int) (err error)
+//sys	Fchflags(fd int, flags int) (err error)
+//sys	Fchmod(fd int, mode uint32) (err error)
+//sys	Fchmodat(dirfd int, path string, mode uint32, flags int) (err error)
+//sys	Fchown(fd int, uid int, gid int) (err error)
+//sys	Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error)
+//sys	Flock(fd int, how int) (err error)
+//sys	Fpathconf(fd int, name int) (val int, err error)
+//sys	fstat(fd int, stat *stat_freebsd11_t) (err error)
+//sys	fstat_freebsd12(fd int, stat *Stat_t) (err error)
+//sys	fstatat(fd int, path string, stat *stat_freebsd11_t, flags int) (err error)
+//sys	fstatat_freebsd12(fd int, path string, stat *Stat_t, flags int) (err error)
+//sys	fstatfs(fd int, stat *statfs_freebsd11_t) (err error)
+//sys	fstatfs_freebsd12(fd int, stat *Statfs_t) (err error)
+//sys	Fsync(fd int) (err error)
+//sys	Ftruncate(fd int, length int64) (err error)
+//sys	getdirentries(fd int, buf []byte, basep *uintptr) (n int, err error)
+//sys	getdirentries_freebsd12(fd int, buf []byte, basep *uint64) (n int, err error)
+//sys	Getdtablesize() (size int)
+//sysnb	Getegid() (egid int)
+//sysnb	Geteuid() (uid int)
+//sysnb	Getgid() (gid int)
+//sysnb	Getpgid(pid int) (pgid int, err error)
+//sysnb	Getpgrp() (pgrp int)
+//sysnb	Getpid() (pid int)
+//sysnb	Getppid() (ppid int)
+//sys	Getpriority(which int, who int) (prio int, err error)
+//sysnb	Getrlimit(which int, lim *Rlimit) (err error)
+//sysnb	Getrusage(who int, rusage *Rusage) (err error)
+//sysnb	Getsid(pid int) (sid int, err error)
+//sysnb	Gettimeofday(tv *Timeval) (err error)
+//sysnb	Getuid() (uid int)
+//sys	Issetugid() (tainted bool)
+//sys	Kill(pid int, signum syscall.Signal) (err error)
+//sys	Kqueue() (fd int, err error)
+//sys	Lchown(path string, uid int, gid int) (err error)
+//sys	Link(path string, link string) (err error)
+//sys	Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error)
+//sys	Listen(s int, backlog int) (err error)
+//sys	lstat(path string, stat *stat_freebsd11_t) (err error)
+//sys	Mkdir(path string, mode uint32) (err error)
+//sys	Mkdirat(dirfd int, path string, mode uint32) (err error)
+//sys	Mkfifo(path string, mode uint32) (err error)
+//sys	mknod(path string, mode uint32, dev int) (err error)
+//sys	mknodat(fd int, path string, mode uint32, dev int) (err error)
+//sys	mknodat_freebsd12(fd int, path string, mode uint32, dev uint64) (err error)
+//sys	Nanosleep(time *Timespec, leftover *Timespec) (err error)
+//sys	Open(path string, mode int, perm uint32) (fd int, err error)
+//sys	Openat(fdat int, path string, mode int, perm uint32) (fd int, err error)
+//sys	Pathconf(path string, name int) (val int, err error)
+//sys	Pread(fd int, p []byte, offset int64) (n int, err error)
+//sys	Pwrite(fd int, p []byte, offset int64) (n int, err error)
+//sys	read(fd int, p []byte) (n int, err error)
+//sys	Readlink(path string, buf []byte) (n int, err error)
+//sys	Readlinkat(dirfd int, path string, buf []byte) (n int, err error)
+//sys	Rename(from string, to string) (err error)
+//sys	Renameat(fromfd int, from string, tofd int, to string) (err error)
+//sys	Revoke(path string) (err error)
+//sys	Rmdir(path string) (err error)
+//sys	Seek(fd int, offset int64, whence int) (newoffset int64, err error) = SYS_LSEEK
+//sys	Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error)
+//sysnb	Setegid(egid int) (err error)
+//sysnb	Seteuid(euid int) (err error)
+//sysnb	Setgid(gid int) (err error)
+//sys	Setlogin(name string) (err error)
+//sysnb	Setpgid(pid int, pgid int) (err error)
+//sys	Setpriority(which int, who int, prio int) (err error)
+//sysnb	Setregid(rgid int, egid int) (err error)
+//sysnb	Setreuid(ruid int, euid int) (err error)
+//sysnb	Setresgid(rgid int, egid int, sgid int) (err error)
+//sysnb	Setresuid(ruid int, euid int, suid int) (err error)
+//sysnb	Setrlimit(which int, lim *Rlimit) (err error)
+//sysnb	Setsid() (pid int, err error)
+//sysnb	Settimeofday(tp *Timeval) (err error)
+//sysnb	Setuid(uid int) (err error)
+//sys	stat(path string, stat *stat_freebsd11_t) (err error)
+//sys	statfs(path string, stat *statfs_freebsd11_t) (err error)
+//sys	statfs_freebsd12(path string, stat *Statfs_t) (err error)
+//sys	Symlink(path string, link string) (err error)
+//sys	Symlinkat(oldpath string, newdirfd int, newpath string) (err error)
+//sys	Sync() (err error)
+//sys	Truncate(path string, length int64) (err error)
+//sys	Umask(newmask int) (oldmask int)
+//sys	Undelete(path string) (err error)
+//sys	Unlink(path string) (err error)
+//sys	Unlinkat(dirfd int, path string, flags int) (err error)
+//sys	Unmount(path string, flags int) (err error)
+//sys	write(fd int, p []byte) (n int, err error)
+//sys   mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error)
+//sys   munmap(addr uintptr, length uintptr) (err error)
+//sys	readlen(fd int, buf *byte, nbuf int) (n int, err error) = SYS_READ
+//sys	writelen(fd int, buf *byte, nbuf int) (n int, err error) = SYS_WRITE
+//sys	accept4(fd int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (nfd int, err error)
+//sys	utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error)
+
+/*
+ * Unimplemented
+ */
+// Profil
+// Sigaction
+// Sigprocmask
+// Getlogin
+// Sigpending
+// Sigaltstack
+// Ioctl
+// Reboot
+// Execve
+// Vfork
+// Sbrk
+// Sstk
+// Ovadvise
+// Mincore
+// Setitimer
+// Swapon
+// Select
+// Sigsuspend
+// Readv
+// Writev
+// Nfssvc
+// Getfh
+// Quotactl
+// Mount
+// Csops
+// Waitid
+// Add_profil
+// Kdebug_trace
+// Sigreturn
+// Atsocket
+// Kqueue_from_portset_np
+// Kqueue_portset
+// Getattrlist
+// Setattrlist
+// Getdents
+// Getdirentriesattr
+// Searchfs
+// Delete
+// Copyfile
+// Watchevent
+// Waitevent
+// Modwatch
+// Fsctl
+// Initgroups
+// Posix_spawn
+// Nfsclnt
+// Fhopen
+// Minherit
+// Semsys
+// Msgsys
+// Shmsys
+// Semctl
+// Semget
+// Semop
+// Msgctl
+// Msgget
+// Msgsnd
+// Msgrcv
+// Shmat
+// Shmctl
+// Shmdt
+// Shmget
+// Shm_open
+// Shm_unlink
+// Sem_open
+// Sem_close
+// Sem_unlink
+// Sem_wait
+// Sem_trywait
+// Sem_post
+// Sem_getvalue
+// Sem_init
+// Sem_destroy
+// Open_extended
+// Umask_extended
+// Stat_extended
+// Lstat_extended
+// Fstat_extended
+// Chmod_extended
+// Fchmod_extended
+// Access_extended
+// Settid
+// Gettid
+// Setsgroups
+// Getsgroups
+// Setwgroups
+// Getwgroups
+// Mkfifo_extended
+// Mkdir_extended
+// Identitysvc
+// Shared_region_check_np
+// Shared_region_map_np
+// __pthread_mutex_destroy
+// __pthread_mutex_init
+// __pthread_mutex_lock
+// __pthread_mutex_trylock
+// __pthread_mutex_unlock
+// __pthread_cond_init
+// __pthread_cond_destroy
+// __pthread_cond_broadcast
+// __pthread_cond_signal
+// Setsid_with_pid
+// __pthread_cond_timedwait
+// Aio_fsync
+// Aio_return
+// Aio_suspend
+// Aio_cancel
+// Aio_error
+// Aio_read
+// Aio_write
+// Lio_listio
+// __pthread_cond_wait
+// Iopolicysys
+// __pthread_kill
+// __pthread_sigmask
+// __sigwait
+// __disable_threadsignal
+// __pthread_markcancel
+// __pthread_canceled
+// __semwait_signal
+// Proc_info
+// Stat64_extended
+// Lstat64_extended
+// Fstat64_extended
+// __pthread_chdir
+// __pthread_fchdir
+// Audit
+// Auditon
+// Getauid
+// Setauid
+// Getaudit
+// Setaudit
+// Getaudit_addr
+// Setaudit_addr
+// Auditctl
+// Bsdthread_create
+// Bsdthread_terminate
+// Stack_snapshot
+// Bsdthread_register
+// Workq_open
+// Workq_ops
+// __mac_execve
+// __mac_syscall
+// __mac_get_file
+// __mac_set_file
+// __mac_get_link
+// __mac_set_link
+// __mac_get_proc
+// __mac_set_proc
+// __mac_get_fd
+// __mac_set_fd
+// __mac_get_pid
+// __mac_get_lcid
+// __mac_get_lctx
+// __mac_set_lctx
+// Setlcid
+// Read_nocancel
+// Write_nocancel
+// Open_nocancel
+// Close_nocancel
+// Wait4_nocancel
+// Recvmsg_nocancel
+// Sendmsg_nocancel
+// Recvfrom_nocancel
+// Accept_nocancel
+// Fcntl_nocancel
+// Select_nocancel
+// Fsync_nocancel
+// Connect_nocancel
+// Sigsuspend_nocancel
+// Readv_nocancel
+// Writev_nocancel
+// Sendto_nocancel
+// Pread_nocancel
+// Pwrite_nocancel
+// Waitid_nocancel
+// Poll_nocancel
+// Msgsnd_nocancel
+// Msgrcv_nocancel
+// Sem_wait_nocancel
+// Aio_suspend_nocancel
+// __sigwait_nocancel
+// __semwait_signal_nocancel
+// __mac_mount
+// __mac_get_mount
+// __mac_getfsstat
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd_386.go
new file mode 100644
index 000000000..72a506ddc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd_386.go
@@ -0,0 +1,66 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build 386,freebsd
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: int32(sec), Nsec: int32(nsec)}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: int32(sec), Usec: int32(usec)}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint32(fd)
+	k.Filter = int16(mode)
+	k.Flags = uint16(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint32(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = int32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	var writtenOut uint64 = 0
+	_, _, e1 := Syscall9(SYS_SENDFILE, uintptr(infd), uintptr(outfd), uintptr(*offset), uintptr((*offset)>>32), uintptr(count), 0, uintptr(unsafe.Pointer(&writtenOut)), 0, 0)
+
+	written = int(writtenOut)
+
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+func Syscall9(num, a1, a2, a3, a4, a5, a6, a7, a8, a9 uintptr) (r1, r2 uintptr, err syscall.Errno)
+
+func PtraceGetFsBase(pid int, fsbase *int64) (err error) {
+	return ptrace(PTRACE_GETFSBASE, pid, uintptr(unsafe.Pointer(fsbase)), 0)
+}
+
+func PtraceIO(req int, pid int, addr uintptr, out []byte, countin int) (count int, err error) {
+	ioDesc := PtraceIoDesc{Op: int32(req), Offs: (*byte)(unsafe.Pointer(addr)), Addr: (*byte)(unsafe.Pointer(&out[0])), Len: uint32(countin)}
+	err = ptrace(PTRACE_IO, pid, uintptr(unsafe.Pointer(&ioDesc)), 0)
+	return int(ioDesc.Len), err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd_amd64.go
new file mode 100644
index 000000000..d5e376aca
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd_amd64.go
@@ -0,0 +1,66 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build amd64,freebsd
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: usec}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint64(fd)
+	k.Filter = int16(mode)
+	k.Flags = uint16(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = int32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	var writtenOut uint64 = 0
+	_, _, e1 := Syscall9(SYS_SENDFILE, uintptr(infd), uintptr(outfd), uintptr(*offset), uintptr(count), 0, uintptr(unsafe.Pointer(&writtenOut)), 0, 0, 0)
+
+	written = int(writtenOut)
+
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+func Syscall9(num, a1, a2, a3, a4, a5, a6, a7, a8, a9 uintptr) (r1, r2 uintptr, err syscall.Errno)
+
+func PtraceGetFsBase(pid int, fsbase *int64) (err error) {
+	return ptrace(PTRACE_GETFSBASE, pid, uintptr(unsafe.Pointer(fsbase)), 0)
+}
+
+func PtraceIO(req int, pid int, addr uintptr, out []byte, countin int) (count int, err error) {
+	ioDesc := PtraceIoDesc{Op: int32(req), Offs: (*byte)(unsafe.Pointer(addr)), Addr: (*byte)(unsafe.Pointer(&out[0])), Len: uint64(countin)}
+	err = ptrace(PTRACE_IO, pid, uintptr(unsafe.Pointer(&ioDesc)), 0)
+	return int(ioDesc.Len), err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd_arm.go
new file mode 100644
index 000000000..4ea45bce5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd_arm.go
@@ -0,0 +1,62 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build arm,freebsd
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: int32(nsec)}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: int32(usec)}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint32(fd)
+	k.Filter = int16(mode)
+	k.Flags = uint16(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint32(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = int32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	var writtenOut uint64 = 0
+	_, _, e1 := Syscall9(SYS_SENDFILE, uintptr(infd), uintptr(outfd), uintptr(*offset), uintptr((*offset)>>32), uintptr(count), 0, uintptr(unsafe.Pointer(&writtenOut)), 0, 0)
+
+	written = int(writtenOut)
+
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+func Syscall9(num, a1, a2, a3, a4, a5, a6, a7, a8, a9 uintptr) (r1, r2 uintptr, err syscall.Errno)
+
+func PtraceIO(req int, pid int, addr uintptr, out []byte, countin int) (count int, err error) {
+	ioDesc := PtraceIoDesc{Op: int32(req), Offs: (*byte)(unsafe.Pointer(addr)), Addr: (*byte)(unsafe.Pointer(&out[0])), Len: uint32(countin)}
+	err = ptrace(PTRACE_IO, pid, uintptr(unsafe.Pointer(&ioDesc)), 0)
+	return int(ioDesc.Len), err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd_arm64.go
new file mode 100644
index 000000000..aa5326db1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_freebsd_arm64.go
@@ -0,0 +1,62 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build arm64,freebsd
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: usec}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint64(fd)
+	k.Filter = int16(mode)
+	k.Flags = uint16(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = int32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	var writtenOut uint64 = 0
+	_, _, e1 := Syscall9(SYS_SENDFILE, uintptr(infd), uintptr(outfd), uintptr(*offset), uintptr(count), 0, uintptr(unsafe.Pointer(&writtenOut)), 0, 0, 0)
+
+	written = int(writtenOut)
+
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+func Syscall9(num, a1, a2, a3, a4, a5, a6, a7, a8, a9 uintptr) (r1, r2 uintptr, err syscall.Errno)
+
+func PtraceIO(req int, pid int, addr uintptr, out []byte, countin int) (count int, err error) {
+	ioDesc := PtraceIoDesc{Op: int32(req), Offs: (*byte)(unsafe.Pointer(addr)), Addr: (*byte)(unsafe.Pointer(&out[0])), Len: uint64(countin)}
+	err = ptrace(PTRACE_IO, pid, uintptr(unsafe.Pointer(&ioDesc)), 0)
+	return int(ioDesc.Len), err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_illumos.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_illumos.go
new file mode 100644
index 000000000..bbc4f3ea5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_illumos.go
@@ -0,0 +1,90 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// illumos system calls not present on Solaris.
+
+// +build amd64,illumos
+
+package unix
+
+import "unsafe"
+
+func bytes2iovec(bs [][]byte) []Iovec {
+	iovecs := make([]Iovec, len(bs))
+	for i, b := range bs {
+		iovecs[i].SetLen(len(b))
+		if len(b) > 0 {
+			// somehow Iovec.Base on illumos is (*int8), not (*byte)
+			iovecs[i].Base = (*int8)(unsafe.Pointer(&b[0]))
+		} else {
+			iovecs[i].Base = (*int8)(unsafe.Pointer(&_zero))
+		}
+	}
+	return iovecs
+}
+
+//sys	readv(fd int, iovs []Iovec) (n int, err error)
+
+func Readv(fd int, iovs [][]byte) (n int, err error) {
+	iovecs := bytes2iovec(iovs)
+	n, err = readv(fd, iovecs)
+	return n, err
+}
+
+//sys	preadv(fd int, iovs []Iovec, off int64) (n int, err error)
+
+func Preadv(fd int, iovs [][]byte, off int64) (n int, err error) {
+	iovecs := bytes2iovec(iovs)
+	n, err = preadv(fd, iovecs, off)
+	return n, err
+}
+
+//sys	writev(fd int, iovs []Iovec) (n int, err error)
+
+func Writev(fd int, iovs [][]byte) (n int, err error) {
+	iovecs := bytes2iovec(iovs)
+	n, err = writev(fd, iovecs)
+	return n, err
+}
+
+//sys	pwritev(fd int, iovs []Iovec, off int64) (n int, err error)
+
+func Pwritev(fd int, iovs [][]byte, off int64) (n int, err error) {
+	iovecs := bytes2iovec(iovs)
+	n, err = pwritev(fd, iovecs, off)
+	return n, err
+}
+
+//sys	accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error) = libsocket.accept4
+
+func Accept4(fd int, flags int) (nfd int, sa Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	var len _Socklen = SizeofSockaddrAny
+	nfd, err = accept4(fd, &rsa, &len, flags)
+	if err != nil {
+		return
+	}
+	if len > SizeofSockaddrAny {
+		panic("RawSockaddrAny too small")
+	}
+	sa, err = anyToSockaddr(fd, &rsa)
+	if err != nil {
+		Close(nfd)
+		nfd = 0
+	}
+	return
+}
+
+//sysnb	pipe2(p *[2]_C_int, flags int) (err error)
+
+func Pipe2(p []int, flags int) error {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err := pipe2(&pp, flags)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux.go
new file mode 100644
index 000000000..94dafa4e5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux.go
@@ -0,0 +1,2328 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Linux system calls.
+// This file is compiled as ordinary Go code,
+// but it is also input to mksyscall,
+// which parses the //sys lines and generates system call stubs.
+// Note that sometimes we use a lowercase //sys name and
+// wrap it in our own nicer implementation.
+
+package unix
+
+import (
+	"encoding/binary"
+	"runtime"
+	"syscall"
+	"unsafe"
+)
+
+/*
+ * Wrapped
+ */
+
+func Access(path string, mode uint32) (err error) {
+	return Faccessat(AT_FDCWD, path, mode, 0)
+}
+
+func Chmod(path string, mode uint32) (err error) {
+	return Fchmodat(AT_FDCWD, path, mode, 0)
+}
+
+func Chown(path string, uid int, gid int) (err error) {
+	return Fchownat(AT_FDCWD, path, uid, gid, 0)
+}
+
+func Creat(path string, mode uint32) (fd int, err error) {
+	return Open(path, O_CREAT|O_WRONLY|O_TRUNC, mode)
+}
+
+//sys	FanotifyInit(flags uint, event_f_flags uint) (fd int, err error)
+//sys	fanotifyMark(fd int, flags uint, mask uint64, dirFd int, pathname *byte) (err error)
+
+func FanotifyMark(fd int, flags uint, mask uint64, dirFd int, pathname string) (err error) {
+	if pathname == "" {
+		return fanotifyMark(fd, flags, mask, dirFd, nil)
+	}
+	p, err := BytePtrFromString(pathname)
+	if err != nil {
+		return err
+	}
+	return fanotifyMark(fd, flags, mask, dirFd, p)
+}
+
+//sys	fchmodat(dirfd int, path string, mode uint32) (err error)
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	// Linux fchmodat doesn't support the flags parameter. Mimick glibc's behavior
+	// and check the flags. Otherwise the mode would be applied to the symlink
+	// destination which is not what the user expects.
+	if flags&^AT_SYMLINK_NOFOLLOW != 0 {
+		return EINVAL
+	} else if flags&AT_SYMLINK_NOFOLLOW != 0 {
+		return EOPNOTSUPP
+	}
+	return fchmodat(dirfd, path, mode)
+}
+
+//sys	ioctl(fd int, req uint, arg uintptr) (err error)
+
+// ioctl itself should not be exposed directly, but additional get/set
+// functions for specific types are permissible.
+
+// IoctlRetInt performs an ioctl operation specified by req on a device
+// associated with opened file descriptor fd, and returns a non-negative
+// integer that is returned by the ioctl syscall.
+func IoctlRetInt(fd int, req uint) (int, error) {
+	ret, _, err := Syscall(SYS_IOCTL, uintptr(fd), uintptr(req), 0)
+	if err != 0 {
+		return 0, err
+	}
+	return int(ret), nil
+}
+
+func IoctlSetRTCTime(fd int, value *RTCTime) error {
+	err := ioctl(fd, RTC_SET_TIME, uintptr(unsafe.Pointer(value)))
+	runtime.KeepAlive(value)
+	return err
+}
+
+func IoctlSetRTCWkAlrm(fd int, value *RTCWkAlrm) error {
+	err := ioctl(fd, RTC_WKALM_SET, uintptr(unsafe.Pointer(value)))
+	runtime.KeepAlive(value)
+	return err
+}
+
+func IoctlGetUint32(fd int, req uint) (uint32, error) {
+	var value uint32
+	err := ioctl(fd, req, uintptr(unsafe.Pointer(&value)))
+	return value, err
+}
+
+func IoctlGetRTCTime(fd int) (*RTCTime, error) {
+	var value RTCTime
+	err := ioctl(fd, RTC_RD_TIME, uintptr(unsafe.Pointer(&value)))
+	return &value, err
+}
+
+func IoctlGetRTCWkAlrm(fd int) (*RTCWkAlrm, error) {
+	var value RTCWkAlrm
+	err := ioctl(fd, RTC_WKALM_RD, uintptr(unsafe.Pointer(&value)))
+	return &value, err
+}
+
+// IoctlFileClone performs an FICLONERANGE ioctl operation to clone the range of
+// data conveyed in value to the file associated with the file descriptor
+// destFd. See the ioctl_ficlonerange(2) man page for details.
+func IoctlFileCloneRange(destFd int, value *FileCloneRange) error {
+	err := ioctl(destFd, FICLONERANGE, uintptr(unsafe.Pointer(value)))
+	runtime.KeepAlive(value)
+	return err
+}
+
+// IoctlFileClone performs an FICLONE ioctl operation to clone the entire file
+// associated with the file description srcFd to the file associated with the
+// file descriptor destFd. See the ioctl_ficlone(2) man page for details.
+func IoctlFileClone(destFd, srcFd int) error {
+	return ioctl(destFd, FICLONE, uintptr(srcFd))
+}
+
+// IoctlFileClone performs an FIDEDUPERANGE ioctl operation to share the range of
+// data conveyed in value with the file associated with the file descriptor
+// destFd. See the ioctl_fideduperange(2) man page for details.
+func IoctlFileDedupeRange(destFd int, value *FileDedupeRange) error {
+	err := ioctl(destFd, FIDEDUPERANGE, uintptr(unsafe.Pointer(value)))
+	runtime.KeepAlive(value)
+	return err
+}
+
+//sys	Linkat(olddirfd int, oldpath string, newdirfd int, newpath string, flags int) (err error)
+
+func Link(oldpath string, newpath string) (err error) {
+	return Linkat(AT_FDCWD, oldpath, AT_FDCWD, newpath, 0)
+}
+
+func Mkdir(path string, mode uint32) (err error) {
+	return Mkdirat(AT_FDCWD, path, mode)
+}
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	return Mknodat(AT_FDCWD, path, mode, dev)
+}
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	return openat(AT_FDCWD, path, mode|O_LARGEFILE, perm)
+}
+
+//sys	openat(dirfd int, path string, flags int, mode uint32) (fd int, err error)
+
+func Openat(dirfd int, path string, flags int, mode uint32) (fd int, err error) {
+	return openat(dirfd, path, flags|O_LARGEFILE, mode)
+}
+
+//sys	openat2(dirfd int, path string, open_how *OpenHow, size int) (fd int, err error)
+
+func Openat2(dirfd int, path string, how *OpenHow) (fd int, err error) {
+	return openat2(dirfd, path, how, SizeofOpenHow)
+}
+
+//sys	ppoll(fds *PollFd, nfds int, timeout *Timespec, sigmask *Sigset_t) (n int, err error)
+
+func Ppoll(fds []PollFd, timeout *Timespec, sigmask *Sigset_t) (n int, err error) {
+	if len(fds) == 0 {
+		return ppoll(nil, 0, timeout, sigmask)
+	}
+	return ppoll(&fds[0], len(fds), timeout, sigmask)
+}
+
+//sys	Readlinkat(dirfd int, path string, buf []byte) (n int, err error)
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	return Readlinkat(AT_FDCWD, path, buf)
+}
+
+func Rename(oldpath string, newpath string) (err error) {
+	return Renameat(AT_FDCWD, oldpath, AT_FDCWD, newpath)
+}
+
+func Rmdir(path string) error {
+	return Unlinkat(AT_FDCWD, path, AT_REMOVEDIR)
+}
+
+//sys	Symlinkat(oldpath string, newdirfd int, newpath string) (err error)
+
+func Symlink(oldpath string, newpath string) (err error) {
+	return Symlinkat(oldpath, AT_FDCWD, newpath)
+}
+
+func Unlink(path string) error {
+	return Unlinkat(AT_FDCWD, path, 0)
+}
+
+//sys	Unlinkat(dirfd int, path string, flags int) (err error)
+
+func Utimes(path string, tv []Timeval) error {
+	if tv == nil {
+		err := utimensat(AT_FDCWD, path, nil, 0)
+		if err != ENOSYS {
+			return err
+		}
+		return utimes(path, nil)
+	}
+	if len(tv) != 2 {
+		return EINVAL
+	}
+	var ts [2]Timespec
+	ts[0] = NsecToTimespec(TimevalToNsec(tv[0]))
+	ts[1] = NsecToTimespec(TimevalToNsec(tv[1]))
+	err := utimensat(AT_FDCWD, path, (*[2]Timespec)(unsafe.Pointer(&ts[0])), 0)
+	if err != ENOSYS {
+		return err
+	}
+	return utimes(path, (*[2]Timeval)(unsafe.Pointer(&tv[0])))
+}
+
+//sys	utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error)
+
+func UtimesNano(path string, ts []Timespec) error {
+	if ts == nil {
+		err := utimensat(AT_FDCWD, path, nil, 0)
+		if err != ENOSYS {
+			return err
+		}
+		return utimes(path, nil)
+	}
+	if len(ts) != 2 {
+		return EINVAL
+	}
+	err := utimensat(AT_FDCWD, path, (*[2]Timespec)(unsafe.Pointer(&ts[0])), 0)
+	if err != ENOSYS {
+		return err
+	}
+	// If the utimensat syscall isn't available (utimensat was added to Linux
+	// in 2.6.22, Released, 8 July 2007) then fall back to utimes
+	var tv [2]Timeval
+	for i := 0; i < 2; i++ {
+		tv[i] = NsecToTimeval(TimespecToNsec(ts[i]))
+	}
+	return utimes(path, (*[2]Timeval)(unsafe.Pointer(&tv[0])))
+}
+
+func UtimesNanoAt(dirfd int, path string, ts []Timespec, flags int) error {
+	if ts == nil {
+		return utimensat(dirfd, path, nil, flags)
+	}
+	if len(ts) != 2 {
+		return EINVAL
+	}
+	return utimensat(dirfd, path, (*[2]Timespec)(unsafe.Pointer(&ts[0])), flags)
+}
+
+func Futimesat(dirfd int, path string, tv []Timeval) error {
+	if tv == nil {
+		return futimesat(dirfd, path, nil)
+	}
+	if len(tv) != 2 {
+		return EINVAL
+	}
+	return futimesat(dirfd, path, (*[2]Timeval)(unsafe.Pointer(&tv[0])))
+}
+
+func Futimes(fd int, tv []Timeval) (err error) {
+	// Believe it or not, this is the best we can do on Linux
+	// (and is what glibc does).
+	return Utimes("/proc/self/fd/"+itoa(fd), tv)
+}
+
+const ImplementsGetwd = true
+
+//sys	Getcwd(buf []byte) (n int, err error)
+
+func Getwd() (wd string, err error) {
+	var buf [PathMax]byte
+	n, err := Getcwd(buf[0:])
+	if err != nil {
+		return "", err
+	}
+	// Getcwd returns the number of bytes written to buf, including the NUL.
+	if n < 1 || n > len(buf) || buf[n-1] != 0 {
+		return "", EINVAL
+	}
+	return string(buf[0 : n-1]), nil
+}
+
+func Getgroups() (gids []int, err error) {
+	n, err := getgroups(0, nil)
+	if err != nil {
+		return nil, err
+	}
+	if n == 0 {
+		return nil, nil
+	}
+
+	// Sanity check group count. Max is 1<<16 on Linux.
+	if n < 0 || n > 1<<20 {
+		return nil, EINVAL
+	}
+
+	a := make([]_Gid_t, n)
+	n, err = getgroups(n, &a[0])
+	if err != nil {
+		return nil, err
+	}
+	gids = make([]int, n)
+	for i, v := range a[0:n] {
+		gids[i] = int(v)
+	}
+	return
+}
+
+func Setgroups(gids []int) (err error) {
+	if len(gids) == 0 {
+		return setgroups(0, nil)
+	}
+
+	a := make([]_Gid_t, len(gids))
+	for i, v := range gids {
+		a[i] = _Gid_t(v)
+	}
+	return setgroups(len(a), &a[0])
+}
+
+type WaitStatus uint32
+
+// Wait status is 7 bits at bottom, either 0 (exited),
+// 0x7F (stopped), or a signal number that caused an exit.
+// The 0x80 bit is whether there was a core dump.
+// An extra number (exit code, signal causing a stop)
+// is in the high bits. At least that's the idea.
+// There are various irregularities. For example, the
+// "continued" status is 0xFFFF, distinguishing itself
+// from stopped via the core dump bit.
+
+const (
+	mask    = 0x7F
+	core    = 0x80
+	exited  = 0x00
+	stopped = 0x7F
+	shift   = 8
+)
+
+func (w WaitStatus) Exited() bool { return w&mask == exited }
+
+func (w WaitStatus) Signaled() bool { return w&mask != stopped && w&mask != exited }
+
+func (w WaitStatus) Stopped() bool { return w&0xFF == stopped }
+
+func (w WaitStatus) Continued() bool { return w == 0xFFFF }
+
+func (w WaitStatus) CoreDump() bool { return w.Signaled() && w&core != 0 }
+
+func (w WaitStatus) ExitStatus() int {
+	if !w.Exited() {
+		return -1
+	}
+	return int(w>>shift) & 0xFF
+}
+
+func (w WaitStatus) Signal() syscall.Signal {
+	if !w.Signaled() {
+		return -1
+	}
+	return syscall.Signal(w & mask)
+}
+
+func (w WaitStatus) StopSignal() syscall.Signal {
+	if !w.Stopped() {
+		return -1
+	}
+	return syscall.Signal(w>>shift) & 0xFF
+}
+
+func (w WaitStatus) TrapCause() int {
+	if w.StopSignal() != SIGTRAP {
+		return -1
+	}
+	return int(w>>shift) >> 8
+}
+
+//sys	wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error)
+
+func Wait4(pid int, wstatus *WaitStatus, options int, rusage *Rusage) (wpid int, err error) {
+	var status _C_int
+	wpid, err = wait4(pid, &status, options, rusage)
+	if wstatus != nil {
+		*wstatus = WaitStatus(status)
+	}
+	return
+}
+
+func Mkfifo(path string, mode uint32) error {
+	return Mknod(path, mode|S_IFIFO, 0)
+}
+
+func Mkfifoat(dirfd int, path string, mode uint32) error {
+	return Mknodat(dirfd, path, mode|S_IFIFO, 0)
+}
+
+func (sa *SockaddrInet4) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	if sa.Port < 0 || sa.Port > 0xFFFF {
+		return nil, 0, EINVAL
+	}
+	sa.raw.Family = AF_INET
+	p := (*[2]byte)(unsafe.Pointer(&sa.raw.Port))
+	p[0] = byte(sa.Port >> 8)
+	p[1] = byte(sa.Port)
+	for i := 0; i < len(sa.Addr); i++ {
+		sa.raw.Addr[i] = sa.Addr[i]
+	}
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrInet4, nil
+}
+
+func (sa *SockaddrInet6) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	if sa.Port < 0 || sa.Port > 0xFFFF {
+		return nil, 0, EINVAL
+	}
+	sa.raw.Family = AF_INET6
+	p := (*[2]byte)(unsafe.Pointer(&sa.raw.Port))
+	p[0] = byte(sa.Port >> 8)
+	p[1] = byte(sa.Port)
+	sa.raw.Scope_id = sa.ZoneId
+	for i := 0; i < len(sa.Addr); i++ {
+		sa.raw.Addr[i] = sa.Addr[i]
+	}
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrInet6, nil
+}
+
+func (sa *SockaddrUnix) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	name := sa.Name
+	n := len(name)
+	if n >= len(sa.raw.Path) {
+		return nil, 0, EINVAL
+	}
+	sa.raw.Family = AF_UNIX
+	for i := 0; i < n; i++ {
+		sa.raw.Path[i] = int8(name[i])
+	}
+	// length is family (uint16), name, NUL.
+	sl := _Socklen(2)
+	if n > 0 {
+		sl += _Socklen(n) + 1
+	}
+	if sa.raw.Path[0] == '@' {
+		sa.raw.Path[0] = 0
+		// Don't count trailing NUL for abstract address.
+		sl--
+	}
+
+	return unsafe.Pointer(&sa.raw), sl, nil
+}
+
+// SockaddrLinklayer implements the Sockaddr interface for AF_PACKET type sockets.
+type SockaddrLinklayer struct {
+	Protocol uint16
+	Ifindex  int
+	Hatype   uint16
+	Pkttype  uint8
+	Halen    uint8
+	Addr     [8]byte
+	raw      RawSockaddrLinklayer
+}
+
+func (sa *SockaddrLinklayer) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	if sa.Ifindex < 0 || sa.Ifindex > 0x7fffffff {
+		return nil, 0, EINVAL
+	}
+	sa.raw.Family = AF_PACKET
+	sa.raw.Protocol = sa.Protocol
+	sa.raw.Ifindex = int32(sa.Ifindex)
+	sa.raw.Hatype = sa.Hatype
+	sa.raw.Pkttype = sa.Pkttype
+	sa.raw.Halen = sa.Halen
+	for i := 0; i < len(sa.Addr); i++ {
+		sa.raw.Addr[i] = sa.Addr[i]
+	}
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrLinklayer, nil
+}
+
+// SockaddrNetlink implements the Sockaddr interface for AF_NETLINK type sockets.
+type SockaddrNetlink struct {
+	Family uint16
+	Pad    uint16
+	Pid    uint32
+	Groups uint32
+	raw    RawSockaddrNetlink
+}
+
+func (sa *SockaddrNetlink) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	sa.raw.Family = AF_NETLINK
+	sa.raw.Pad = sa.Pad
+	sa.raw.Pid = sa.Pid
+	sa.raw.Groups = sa.Groups
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrNetlink, nil
+}
+
+// SockaddrHCI implements the Sockaddr interface for AF_BLUETOOTH type sockets
+// using the HCI protocol.
+type SockaddrHCI struct {
+	Dev     uint16
+	Channel uint16
+	raw     RawSockaddrHCI
+}
+
+func (sa *SockaddrHCI) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	sa.raw.Family = AF_BLUETOOTH
+	sa.raw.Dev = sa.Dev
+	sa.raw.Channel = sa.Channel
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrHCI, nil
+}
+
+// SockaddrL2 implements the Sockaddr interface for AF_BLUETOOTH type sockets
+// using the L2CAP protocol.
+type SockaddrL2 struct {
+	PSM      uint16
+	CID      uint16
+	Addr     [6]uint8
+	AddrType uint8
+	raw      RawSockaddrL2
+}
+
+func (sa *SockaddrL2) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	sa.raw.Family = AF_BLUETOOTH
+	psm := (*[2]byte)(unsafe.Pointer(&sa.raw.Psm))
+	psm[0] = byte(sa.PSM)
+	psm[1] = byte(sa.PSM >> 8)
+	for i := 0; i < len(sa.Addr); i++ {
+		sa.raw.Bdaddr[i] = sa.Addr[len(sa.Addr)-1-i]
+	}
+	cid := (*[2]byte)(unsafe.Pointer(&sa.raw.Cid))
+	cid[0] = byte(sa.CID)
+	cid[1] = byte(sa.CID >> 8)
+	sa.raw.Bdaddr_type = sa.AddrType
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrL2, nil
+}
+
+// SockaddrRFCOMM implements the Sockaddr interface for AF_BLUETOOTH type sockets
+// using the RFCOMM protocol.
+//
+// Server example:
+//
+//      fd, _ := Socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM)
+//      _ = unix.Bind(fd, &unix.SockaddrRFCOMM{
+//      	Channel: 1,
+//      	Addr:    [6]uint8{0, 0, 0, 0, 0, 0}, // BDADDR_ANY or 00:00:00:00:00:00
+//      })
+//      _ = Listen(fd, 1)
+//      nfd, sa, _ := Accept(fd)
+//      fmt.Printf("conn addr=%v fd=%d", sa.(*unix.SockaddrRFCOMM).Addr, nfd)
+//      Read(nfd, buf)
+//
+// Client example:
+//
+//      fd, _ := Socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM)
+//      _ = Connect(fd, &SockaddrRFCOMM{
+//      	Channel: 1,
+//      	Addr:    [6]byte{0x11, 0x22, 0x33, 0xaa, 0xbb, 0xcc}, // CC:BB:AA:33:22:11
+//      })
+//      Write(fd, []byte(`hello`))
+type SockaddrRFCOMM struct {
+	// Addr represents a bluetooth address, byte ordering is little-endian.
+	Addr [6]uint8
+
+	// Channel is a designated bluetooth channel, only 1-30 are available for use.
+	// Since Linux 2.6.7 and further zero value is the first available channel.
+	Channel uint8
+
+	raw RawSockaddrRFCOMM
+}
+
+func (sa *SockaddrRFCOMM) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	sa.raw.Family = AF_BLUETOOTH
+	sa.raw.Channel = sa.Channel
+	sa.raw.Bdaddr = sa.Addr
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrRFCOMM, nil
+}
+
+// SockaddrCAN implements the Sockaddr interface for AF_CAN type sockets.
+// The RxID and TxID fields are used for transport protocol addressing in
+// (CAN_TP16, CAN_TP20, CAN_MCNET, and CAN_ISOTP), they can be left with
+// zero values for CAN_RAW and CAN_BCM sockets as they have no meaning.
+//
+// The SockaddrCAN struct must be bound to the socket file descriptor
+// using Bind before the CAN socket can be used.
+//
+//      // Read one raw CAN frame
+//      fd, _ := Socket(AF_CAN, SOCK_RAW, CAN_RAW)
+//      addr := &SockaddrCAN{Ifindex: index}
+//      Bind(fd, addr)
+//      frame := make([]byte, 16)
+//      Read(fd, frame)
+//
+// The full SocketCAN documentation can be found in the linux kernel
+// archives at: https://www.kernel.org/doc/Documentation/networking/can.txt
+type SockaddrCAN struct {
+	Ifindex int
+	RxID    uint32
+	TxID    uint32
+	raw     RawSockaddrCAN
+}
+
+func (sa *SockaddrCAN) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	if sa.Ifindex < 0 || sa.Ifindex > 0x7fffffff {
+		return nil, 0, EINVAL
+	}
+	sa.raw.Family = AF_CAN
+	sa.raw.Ifindex = int32(sa.Ifindex)
+	rx := (*[4]byte)(unsafe.Pointer(&sa.RxID))
+	for i := 0; i < 4; i++ {
+		sa.raw.Addr[i] = rx[i]
+	}
+	tx := (*[4]byte)(unsafe.Pointer(&sa.TxID))
+	for i := 0; i < 4; i++ {
+		sa.raw.Addr[i+4] = tx[i]
+	}
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrCAN, nil
+}
+
+// SockaddrALG implements the Sockaddr interface for AF_ALG type sockets.
+// SockaddrALG enables userspace access to the Linux kernel's cryptography
+// subsystem. The Type and Name fields specify which type of hash or cipher
+// should be used with a given socket.
+//
+// To create a file descriptor that provides access to a hash or cipher, both
+// Bind and Accept must be used. Once the setup process is complete, input
+// data can be written to the socket, processed by the kernel, and then read
+// back as hash output or ciphertext.
+//
+// Here is an example of using an AF_ALG socket with SHA1 hashing.
+// The initial socket setup process is as follows:
+//
+//      // Open a socket to perform SHA1 hashing.
+//      fd, _ := unix.Socket(unix.AF_ALG, unix.SOCK_SEQPACKET, 0)
+//      addr := &unix.SockaddrALG{Type: "hash", Name: "sha1"}
+//      unix.Bind(fd, addr)
+//      // Note: unix.Accept does not work at this time; must invoke accept()
+//      // manually using unix.Syscall.
+//      hashfd, _, _ := unix.Syscall(unix.SYS_ACCEPT, uintptr(fd), 0, 0)
+//
+// Once a file descriptor has been returned from Accept, it may be used to
+// perform SHA1 hashing. The descriptor is not safe for concurrent use, but
+// may be re-used repeatedly with subsequent Write and Read operations.
+//
+// When hashing a small byte slice or string, a single Write and Read may
+// be used:
+//
+//      // Assume hashfd is already configured using the setup process.
+//      hash := os.NewFile(hashfd, "sha1")
+//      // Hash an input string and read the results. Each Write discards
+//      // previous hash state. Read always reads the current state.
+//      b := make([]byte, 20)
+//      for i := 0; i < 2; i++ {
+//          io.WriteString(hash, "Hello, world.")
+//          hash.Read(b)
+//          fmt.Println(hex.EncodeToString(b))
+//      }
+//      // Output:
+//      // 2ae01472317d1935a84797ec1983ae243fc6aa28
+//      // 2ae01472317d1935a84797ec1983ae243fc6aa28
+//
+// For hashing larger byte slices, or byte streams such as those read from
+// a file or socket, use Sendto with MSG_MORE to instruct the kernel to update
+// the hash digest instead of creating a new one for a given chunk and finalizing it.
+//
+//      // Assume hashfd and addr are already configured using the setup process.
+//      hash := os.NewFile(hashfd, "sha1")
+//      // Hash the contents of a file.
+//      f, _ := os.Open("/tmp/linux-4.10-rc7.tar.xz")
+//      b := make([]byte, 4096)
+//      for {
+//          n, err := f.Read(b)
+//          if err == io.EOF {
+//              break
+//          }
+//          unix.Sendto(hashfd, b[:n], unix.MSG_MORE, addr)
+//      }
+//      hash.Read(b)
+//      fmt.Println(hex.EncodeToString(b))
+//      // Output: 85cdcad0c06eef66f805ecce353bec9accbeecc5
+//
+// For more information, see: http://www.chronox.de/crypto-API/crypto/userspace-if.html.
+type SockaddrALG struct {
+	Type    string
+	Name    string
+	Feature uint32
+	Mask    uint32
+	raw     RawSockaddrALG
+}
+
+func (sa *SockaddrALG) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	// Leave room for NUL byte terminator.
+	if len(sa.Type) > 13 {
+		return nil, 0, EINVAL
+	}
+	if len(sa.Name) > 63 {
+		return nil, 0, EINVAL
+	}
+
+	sa.raw.Family = AF_ALG
+	sa.raw.Feat = sa.Feature
+	sa.raw.Mask = sa.Mask
+
+	typ, err := ByteSliceFromString(sa.Type)
+	if err != nil {
+		return nil, 0, err
+	}
+	name, err := ByteSliceFromString(sa.Name)
+	if err != nil {
+		return nil, 0, err
+	}
+
+	copy(sa.raw.Type[:], typ)
+	copy(sa.raw.Name[:], name)
+
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrALG, nil
+}
+
+// SockaddrVM implements the Sockaddr interface for AF_VSOCK type sockets.
+// SockaddrVM provides access to Linux VM sockets: a mechanism that enables
+// bidirectional communication between a hypervisor and its guest virtual
+// machines.
+type SockaddrVM struct {
+	// CID and Port specify a context ID and port address for a VM socket.
+	// Guests have a unique CID, and hosts may have a well-known CID of:
+	//  - VMADDR_CID_HYPERVISOR: refers to the hypervisor process.
+	//  - VMADDR_CID_HOST: refers to other processes on the host.
+	CID  uint32
+	Port uint32
+	raw  RawSockaddrVM
+}
+
+func (sa *SockaddrVM) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	sa.raw.Family = AF_VSOCK
+	sa.raw.Port = sa.Port
+	sa.raw.Cid = sa.CID
+
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrVM, nil
+}
+
+type SockaddrXDP struct {
+	Flags        uint16
+	Ifindex      uint32
+	QueueID      uint32
+	SharedUmemFD uint32
+	raw          RawSockaddrXDP
+}
+
+func (sa *SockaddrXDP) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	sa.raw.Family = AF_XDP
+	sa.raw.Flags = sa.Flags
+	sa.raw.Ifindex = sa.Ifindex
+	sa.raw.Queue_id = sa.QueueID
+	sa.raw.Shared_umem_fd = sa.SharedUmemFD
+
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrXDP, nil
+}
+
+// This constant mirrors the #define of PX_PROTO_OE in
+// linux/if_pppox.h. We're defining this by hand here instead of
+// autogenerating through mkerrors.sh because including
+// linux/if_pppox.h causes some declaration conflicts with other
+// includes (linux/if_pppox.h includes linux/in.h, which conflicts
+// with netinet/in.h). Given that we only need a single zero constant
+// out of that file, it's cleaner to just define it by hand here.
+const px_proto_oe = 0
+
+type SockaddrPPPoE struct {
+	SID    uint16
+	Remote []byte
+	Dev    string
+	raw    RawSockaddrPPPoX
+}
+
+func (sa *SockaddrPPPoE) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	if len(sa.Remote) != 6 {
+		return nil, 0, EINVAL
+	}
+	if len(sa.Dev) > IFNAMSIZ-1 {
+		return nil, 0, EINVAL
+	}
+
+	*(*uint16)(unsafe.Pointer(&sa.raw[0])) = AF_PPPOX
+	// This next field is in host-endian byte order. We can't use the
+	// same unsafe pointer cast as above, because this value is not
+	// 32-bit aligned and some architectures don't allow unaligned
+	// access.
+	//
+	// However, the value of px_proto_oe is 0, so we can use
+	// encoding/binary helpers to write the bytes without worrying
+	// about the ordering.
+	binary.BigEndian.PutUint32(sa.raw[2:6], px_proto_oe)
+	// This field is deliberately big-endian, unlike the previous
+	// one. The kernel expects SID to be in network byte order.
+	binary.BigEndian.PutUint16(sa.raw[6:8], sa.SID)
+	copy(sa.raw[8:14], sa.Remote)
+	for i := 14; i < 14+IFNAMSIZ; i++ {
+		sa.raw[i] = 0
+	}
+	copy(sa.raw[14:], sa.Dev)
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrPPPoX, nil
+}
+
+// SockaddrTIPC implements the Sockaddr interface for AF_TIPC type sockets.
+// For more information on TIPC, see: http://tipc.sourceforge.net/.
+type SockaddrTIPC struct {
+	// Scope is the publication scopes when binding service/service range.
+	// Should be set to TIPC_CLUSTER_SCOPE or TIPC_NODE_SCOPE.
+	Scope int
+
+	// Addr is the type of address used to manipulate a socket. Addr must be
+	// one of:
+	//  - *TIPCSocketAddr: "id" variant in the C addr union
+	//  - *TIPCServiceRange: "nameseq" variant in the C addr union
+	//  - *TIPCServiceName: "name" variant in the C addr union
+	//
+	// If nil, EINVAL will be returned when the structure is used.
+	Addr TIPCAddr
+
+	raw RawSockaddrTIPC
+}
+
+// TIPCAddr is implemented by types that can be used as an address for
+// SockaddrTIPC. It is only implemented by *TIPCSocketAddr, *TIPCServiceRange,
+// and *TIPCServiceName.
+type TIPCAddr interface {
+	tipcAddrtype() uint8
+	tipcAddr() [12]byte
+}
+
+func (sa *TIPCSocketAddr) tipcAddr() [12]byte {
+	var out [12]byte
+	copy(out[:], (*(*[unsafe.Sizeof(TIPCSocketAddr{})]byte)(unsafe.Pointer(sa)))[:])
+	return out
+}
+
+func (sa *TIPCSocketAddr) tipcAddrtype() uint8 { return TIPC_SOCKET_ADDR }
+
+func (sa *TIPCServiceRange) tipcAddr() [12]byte {
+	var out [12]byte
+	copy(out[:], (*(*[unsafe.Sizeof(TIPCServiceRange{})]byte)(unsafe.Pointer(sa)))[:])
+	return out
+}
+
+func (sa *TIPCServiceRange) tipcAddrtype() uint8 { return TIPC_SERVICE_RANGE }
+
+func (sa *TIPCServiceName) tipcAddr() [12]byte {
+	var out [12]byte
+	copy(out[:], (*(*[unsafe.Sizeof(TIPCServiceName{})]byte)(unsafe.Pointer(sa)))[:])
+	return out
+}
+
+func (sa *TIPCServiceName) tipcAddrtype() uint8 { return TIPC_SERVICE_ADDR }
+
+func (sa *SockaddrTIPC) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	if sa.Addr == nil {
+		return nil, 0, EINVAL
+	}
+
+	sa.raw.Family = AF_TIPC
+	sa.raw.Scope = int8(sa.Scope)
+	sa.raw.Addrtype = sa.Addr.tipcAddrtype()
+	sa.raw.Addr = sa.Addr.tipcAddr()
+
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrTIPC, nil
+}
+
+// SockaddrL2TPIP implements the Sockaddr interface for IPPROTO_L2TP/AF_INET sockets.
+type SockaddrL2TPIP struct {
+	Addr   [4]byte
+	ConnId uint32
+	raw    RawSockaddrL2TPIP
+}
+
+func (sa *SockaddrL2TPIP) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	sa.raw.Family = AF_INET
+	sa.raw.Conn_id = sa.ConnId
+	for i := 0; i < len(sa.Addr); i++ {
+		sa.raw.Addr[i] = sa.Addr[i]
+	}
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrL2TPIP, nil
+}
+
+// SockaddrL2TPIP6 implements the Sockaddr interface for IPPROTO_L2TP/AF_INET6 sockets.
+type SockaddrL2TPIP6 struct {
+	Addr   [16]byte
+	ZoneId uint32
+	ConnId uint32
+	raw    RawSockaddrL2TPIP6
+}
+
+func (sa *SockaddrL2TPIP6) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	sa.raw.Family = AF_INET6
+	sa.raw.Conn_id = sa.ConnId
+	sa.raw.Scope_id = sa.ZoneId
+	for i := 0; i < len(sa.Addr); i++ {
+		sa.raw.Addr[i] = sa.Addr[i]
+	}
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrL2TPIP6, nil
+}
+
+// SockaddrIUCV implements the Sockaddr interface for AF_IUCV sockets.
+type SockaddrIUCV struct {
+	UserID string
+	Name   string
+	raw    RawSockaddrIUCV
+}
+
+func (sa *SockaddrIUCV) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	sa.raw.Family = AF_IUCV
+	// These are EBCDIC encoded by the kernel, but we still need to pad them
+	// with blanks. Initializing with blanks allows the caller to feed in either
+	// a padded or an unpadded string.
+	for i := 0; i < 8; i++ {
+		sa.raw.Nodeid[i] = ' '
+		sa.raw.User_id[i] = ' '
+		sa.raw.Name[i] = ' '
+	}
+	if len(sa.UserID) > 8 || len(sa.Name) > 8 {
+		return nil, 0, EINVAL
+	}
+	for i, b := range []byte(sa.UserID[:]) {
+		sa.raw.User_id[i] = int8(b)
+	}
+	for i, b := range []byte(sa.Name[:]) {
+		sa.raw.Name[i] = int8(b)
+	}
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrIUCV, nil
+}
+
+func anyToSockaddr(fd int, rsa *RawSockaddrAny) (Sockaddr, error) {
+	switch rsa.Addr.Family {
+	case AF_NETLINK:
+		pp := (*RawSockaddrNetlink)(unsafe.Pointer(rsa))
+		sa := new(SockaddrNetlink)
+		sa.Family = pp.Family
+		sa.Pad = pp.Pad
+		sa.Pid = pp.Pid
+		sa.Groups = pp.Groups
+		return sa, nil
+
+	case AF_PACKET:
+		pp := (*RawSockaddrLinklayer)(unsafe.Pointer(rsa))
+		sa := new(SockaddrLinklayer)
+		sa.Protocol = pp.Protocol
+		sa.Ifindex = int(pp.Ifindex)
+		sa.Hatype = pp.Hatype
+		sa.Pkttype = pp.Pkttype
+		sa.Halen = pp.Halen
+		for i := 0; i < len(sa.Addr); i++ {
+			sa.Addr[i] = pp.Addr[i]
+		}
+		return sa, nil
+
+	case AF_UNIX:
+		pp := (*RawSockaddrUnix)(unsafe.Pointer(rsa))
+		sa := new(SockaddrUnix)
+		if pp.Path[0] == 0 {
+			// "Abstract" Unix domain socket.
+			// Rewrite leading NUL as @ for textual display.
+			// (This is the standard convention.)
+			// Not friendly to overwrite in place,
+			// but the callers below don't care.
+			pp.Path[0] = '@'
+		}
+
+		// Assume path ends at NUL.
+		// This is not technically the Linux semantics for
+		// abstract Unix domain sockets--they are supposed
+		// to be uninterpreted fixed-size binary blobs--but
+		// everyone uses this convention.
+		n := 0
+		for n < len(pp.Path) && pp.Path[n] != 0 {
+			n++
+		}
+		bytes := (*[len(pp.Path)]byte)(unsafe.Pointer(&pp.Path[0]))[0:n]
+		sa.Name = string(bytes)
+		return sa, nil
+
+	case AF_INET:
+		proto, err := GetsockoptInt(fd, SOL_SOCKET, SO_PROTOCOL)
+		if err != nil {
+			return nil, err
+		}
+
+		switch proto {
+		case IPPROTO_L2TP:
+			pp := (*RawSockaddrL2TPIP)(unsafe.Pointer(rsa))
+			sa := new(SockaddrL2TPIP)
+			sa.ConnId = pp.Conn_id
+			for i := 0; i < len(sa.Addr); i++ {
+				sa.Addr[i] = pp.Addr[i]
+			}
+			return sa, nil
+		default:
+			pp := (*RawSockaddrInet4)(unsafe.Pointer(rsa))
+			sa := new(SockaddrInet4)
+			p := (*[2]byte)(unsafe.Pointer(&pp.Port))
+			sa.Port = int(p[0])<<8 + int(p[1])
+			for i := 0; i < len(sa.Addr); i++ {
+				sa.Addr[i] = pp.Addr[i]
+			}
+			return sa, nil
+		}
+
+	case AF_INET6:
+		proto, err := GetsockoptInt(fd, SOL_SOCKET, SO_PROTOCOL)
+		if err != nil {
+			return nil, err
+		}
+
+		switch proto {
+		case IPPROTO_L2TP:
+			pp := (*RawSockaddrL2TPIP6)(unsafe.Pointer(rsa))
+			sa := new(SockaddrL2TPIP6)
+			sa.ConnId = pp.Conn_id
+			sa.ZoneId = pp.Scope_id
+			for i := 0; i < len(sa.Addr); i++ {
+				sa.Addr[i] = pp.Addr[i]
+			}
+			return sa, nil
+		default:
+			pp := (*RawSockaddrInet6)(unsafe.Pointer(rsa))
+			sa := new(SockaddrInet6)
+			p := (*[2]byte)(unsafe.Pointer(&pp.Port))
+			sa.Port = int(p[0])<<8 + int(p[1])
+			sa.ZoneId = pp.Scope_id
+			for i := 0; i < len(sa.Addr); i++ {
+				sa.Addr[i] = pp.Addr[i]
+			}
+			return sa, nil
+		}
+
+	case AF_VSOCK:
+		pp := (*RawSockaddrVM)(unsafe.Pointer(rsa))
+		sa := &SockaddrVM{
+			CID:  pp.Cid,
+			Port: pp.Port,
+		}
+		return sa, nil
+	case AF_BLUETOOTH:
+		proto, err := GetsockoptInt(fd, SOL_SOCKET, SO_PROTOCOL)
+		if err != nil {
+			return nil, err
+		}
+		// only BTPROTO_L2CAP and BTPROTO_RFCOMM can accept connections
+		switch proto {
+		case BTPROTO_L2CAP:
+			pp := (*RawSockaddrL2)(unsafe.Pointer(rsa))
+			sa := &SockaddrL2{
+				PSM:      pp.Psm,
+				CID:      pp.Cid,
+				Addr:     pp.Bdaddr,
+				AddrType: pp.Bdaddr_type,
+			}
+			return sa, nil
+		case BTPROTO_RFCOMM:
+			pp := (*RawSockaddrRFCOMM)(unsafe.Pointer(rsa))
+			sa := &SockaddrRFCOMM{
+				Channel: pp.Channel,
+				Addr:    pp.Bdaddr,
+			}
+			return sa, nil
+		}
+	case AF_XDP:
+		pp := (*RawSockaddrXDP)(unsafe.Pointer(rsa))
+		sa := &SockaddrXDP{
+			Flags:        pp.Flags,
+			Ifindex:      pp.Ifindex,
+			QueueID:      pp.Queue_id,
+			SharedUmemFD: pp.Shared_umem_fd,
+		}
+		return sa, nil
+	case AF_PPPOX:
+		pp := (*RawSockaddrPPPoX)(unsafe.Pointer(rsa))
+		if binary.BigEndian.Uint32(pp[2:6]) != px_proto_oe {
+			return nil, EINVAL
+		}
+		sa := &SockaddrPPPoE{
+			SID:    binary.BigEndian.Uint16(pp[6:8]),
+			Remote: pp[8:14],
+		}
+		for i := 14; i < 14+IFNAMSIZ; i++ {
+			if pp[i] == 0 {
+				sa.Dev = string(pp[14:i])
+				break
+			}
+		}
+		return sa, nil
+	case AF_TIPC:
+		pp := (*RawSockaddrTIPC)(unsafe.Pointer(rsa))
+
+		sa := &SockaddrTIPC{
+			Scope: int(pp.Scope),
+		}
+
+		// Determine which union variant is present in pp.Addr by checking
+		// pp.Addrtype.
+		switch pp.Addrtype {
+		case TIPC_SERVICE_RANGE:
+			sa.Addr = (*TIPCServiceRange)(unsafe.Pointer(&pp.Addr))
+		case TIPC_SERVICE_ADDR:
+			sa.Addr = (*TIPCServiceName)(unsafe.Pointer(&pp.Addr))
+		case TIPC_SOCKET_ADDR:
+			sa.Addr = (*TIPCSocketAddr)(unsafe.Pointer(&pp.Addr))
+		default:
+			return nil, EINVAL
+		}
+
+		return sa, nil
+	case AF_IUCV:
+		pp := (*RawSockaddrIUCV)(unsafe.Pointer(rsa))
+
+		var user [8]byte
+		var name [8]byte
+
+		for i := 0; i < 8; i++ {
+			user[i] = byte(pp.User_id[i])
+			name[i] = byte(pp.Name[i])
+		}
+
+		sa := &SockaddrIUCV{
+			UserID: string(user[:]),
+			Name:   string(name[:]),
+		}
+		return sa, nil
+
+	case AF_CAN:
+		pp := (*RawSockaddrCAN)(unsafe.Pointer(rsa))
+		sa := &SockaddrCAN{
+			Ifindex: int(pp.Ifindex),
+		}
+		rx := (*[4]byte)(unsafe.Pointer(&sa.RxID))
+		for i := 0; i < 4; i++ {
+			rx[i] = pp.Addr[i]
+		}
+		tx := (*[4]byte)(unsafe.Pointer(&sa.TxID))
+		for i := 0; i < 4; i++ {
+			tx[i] = pp.Addr[i+4]
+		}
+		return sa, nil
+
+	}
+	return nil, EAFNOSUPPORT
+}
+
+func Accept(fd int) (nfd int, sa Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	var len _Socklen = SizeofSockaddrAny
+	nfd, err = accept(fd, &rsa, &len)
+	if err != nil {
+		return
+	}
+	sa, err = anyToSockaddr(fd, &rsa)
+	if err != nil {
+		Close(nfd)
+		nfd = 0
+	}
+	return
+}
+
+func Accept4(fd int, flags int) (nfd int, sa Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	var len _Socklen = SizeofSockaddrAny
+	nfd, err = accept4(fd, &rsa, &len, flags)
+	if err != nil {
+		return
+	}
+	if len > SizeofSockaddrAny {
+		panic("RawSockaddrAny too small")
+	}
+	sa, err = anyToSockaddr(fd, &rsa)
+	if err != nil {
+		Close(nfd)
+		nfd = 0
+	}
+	return
+}
+
+func Getsockname(fd int) (sa Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	var len _Socklen = SizeofSockaddrAny
+	if err = getsockname(fd, &rsa, &len); err != nil {
+		return
+	}
+	return anyToSockaddr(fd, &rsa)
+}
+
+func GetsockoptIPMreqn(fd, level, opt int) (*IPMreqn, error) {
+	var value IPMreqn
+	vallen := _Socklen(SizeofIPMreqn)
+	err := getsockopt(fd, level, opt, unsafe.Pointer(&value), &vallen)
+	return &value, err
+}
+
+func GetsockoptUcred(fd, level, opt int) (*Ucred, error) {
+	var value Ucred
+	vallen := _Socklen(SizeofUcred)
+	err := getsockopt(fd, level, opt, unsafe.Pointer(&value), &vallen)
+	return &value, err
+}
+
+func GetsockoptTCPInfo(fd, level, opt int) (*TCPInfo, error) {
+	var value TCPInfo
+	vallen := _Socklen(SizeofTCPInfo)
+	err := getsockopt(fd, level, opt, unsafe.Pointer(&value), &vallen)
+	return &value, err
+}
+
+// GetsockoptString returns the string value of the socket option opt for the
+// socket associated with fd at the given socket level.
+func GetsockoptString(fd, level, opt int) (string, error) {
+	buf := make([]byte, 256)
+	vallen := _Socklen(len(buf))
+	err := getsockopt(fd, level, opt, unsafe.Pointer(&buf[0]), &vallen)
+	if err != nil {
+		if err == ERANGE {
+			buf = make([]byte, vallen)
+			err = getsockopt(fd, level, opt, unsafe.Pointer(&buf[0]), &vallen)
+		}
+		if err != nil {
+			return "", err
+		}
+	}
+	return string(buf[:vallen-1]), nil
+}
+
+func GetsockoptTpacketStats(fd, level, opt int) (*TpacketStats, error) {
+	var value TpacketStats
+	vallen := _Socklen(SizeofTpacketStats)
+	err := getsockopt(fd, level, opt, unsafe.Pointer(&value), &vallen)
+	return &value, err
+}
+
+func GetsockoptTpacketStatsV3(fd, level, opt int) (*TpacketStatsV3, error) {
+	var value TpacketStatsV3
+	vallen := _Socklen(SizeofTpacketStatsV3)
+	err := getsockopt(fd, level, opt, unsafe.Pointer(&value), &vallen)
+	return &value, err
+}
+
+func SetsockoptIPMreqn(fd, level, opt int, mreq *IPMreqn) (err error) {
+	return setsockopt(fd, level, opt, unsafe.Pointer(mreq), unsafe.Sizeof(*mreq))
+}
+
+func SetsockoptPacketMreq(fd, level, opt int, mreq *PacketMreq) error {
+	return setsockopt(fd, level, opt, unsafe.Pointer(mreq), unsafe.Sizeof(*mreq))
+}
+
+// SetsockoptSockFprog attaches a classic BPF or an extended BPF program to a
+// socket to filter incoming packets.  See 'man 7 socket' for usage information.
+func SetsockoptSockFprog(fd, level, opt int, fprog *SockFprog) error {
+	return setsockopt(fd, level, opt, unsafe.Pointer(fprog), unsafe.Sizeof(*fprog))
+}
+
+func SetsockoptCanRawFilter(fd, level, opt int, filter []CanFilter) error {
+	var p unsafe.Pointer
+	if len(filter) > 0 {
+		p = unsafe.Pointer(&filter[0])
+	}
+	return setsockopt(fd, level, opt, p, uintptr(len(filter)*SizeofCanFilter))
+}
+
+func SetsockoptTpacketReq(fd, level, opt int, tp *TpacketReq) error {
+	return setsockopt(fd, level, opt, unsafe.Pointer(tp), unsafe.Sizeof(*tp))
+}
+
+func SetsockoptTpacketReq3(fd, level, opt int, tp *TpacketReq3) error {
+	return setsockopt(fd, level, opt, unsafe.Pointer(tp), unsafe.Sizeof(*tp))
+}
+
+// Keyctl Commands (http://man7.org/linux/man-pages/man2/keyctl.2.html)
+
+// KeyctlInt calls keyctl commands in which each argument is an int.
+// These commands are KEYCTL_REVOKE, KEYCTL_CHOWN, KEYCTL_CLEAR, KEYCTL_LINK,
+// KEYCTL_UNLINK, KEYCTL_NEGATE, KEYCTL_SET_REQKEY_KEYRING, KEYCTL_SET_TIMEOUT,
+// KEYCTL_ASSUME_AUTHORITY, KEYCTL_SESSION_TO_PARENT, KEYCTL_REJECT,
+// KEYCTL_INVALIDATE, and KEYCTL_GET_PERSISTENT.
+//sys	KeyctlInt(cmd int, arg2 int, arg3 int, arg4 int, arg5 int) (ret int, err error) = SYS_KEYCTL
+
+// KeyctlBuffer calls keyctl commands in which the third and fourth
+// arguments are a buffer and its length, respectively.
+// These commands are KEYCTL_UPDATE, KEYCTL_READ, and KEYCTL_INSTANTIATE.
+//sys	KeyctlBuffer(cmd int, arg2 int, buf []byte, arg5 int) (ret int, err error) = SYS_KEYCTL
+
+// KeyctlString calls keyctl commands which return a string.
+// These commands are KEYCTL_DESCRIBE and KEYCTL_GET_SECURITY.
+func KeyctlString(cmd int, id int) (string, error) {
+	// We must loop as the string data may change in between the syscalls.
+	// We could allocate a large buffer here to reduce the chance that the
+	// syscall needs to be called twice; however, this is unnecessary as
+	// the performance loss is negligible.
+	var buffer []byte
+	for {
+		// Try to fill the buffer with data
+		length, err := KeyctlBuffer(cmd, id, buffer, 0)
+		if err != nil {
+			return "", err
+		}
+
+		// Check if the data was written
+		if length <= len(buffer) {
+			// Exclude the null terminator
+			return string(buffer[:length-1]), nil
+		}
+
+		// Make a bigger buffer if needed
+		buffer = make([]byte, length)
+	}
+}
+
+// Keyctl commands with special signatures.
+
+// KeyctlGetKeyringID implements the KEYCTL_GET_KEYRING_ID command.
+// See the full documentation at:
+// http://man7.org/linux/man-pages/man3/keyctl_get_keyring_ID.3.html
+func KeyctlGetKeyringID(id int, create bool) (ringid int, err error) {
+	createInt := 0
+	if create {
+		createInt = 1
+	}
+	return KeyctlInt(KEYCTL_GET_KEYRING_ID, id, createInt, 0, 0)
+}
+
+// KeyctlSetperm implements the KEYCTL_SETPERM command. The perm value is the
+// key handle permission mask as described in the "keyctl setperm" section of
+// http://man7.org/linux/man-pages/man1/keyctl.1.html.
+// See the full documentation at:
+// http://man7.org/linux/man-pages/man3/keyctl_setperm.3.html
+func KeyctlSetperm(id int, perm uint32) error {
+	_, err := KeyctlInt(KEYCTL_SETPERM, id, int(perm), 0, 0)
+	return err
+}
+
+//sys	keyctlJoin(cmd int, arg2 string) (ret int, err error) = SYS_KEYCTL
+
+// KeyctlJoinSessionKeyring implements the KEYCTL_JOIN_SESSION_KEYRING command.
+// See the full documentation at:
+// http://man7.org/linux/man-pages/man3/keyctl_join_session_keyring.3.html
+func KeyctlJoinSessionKeyring(name string) (ringid int, err error) {
+	return keyctlJoin(KEYCTL_JOIN_SESSION_KEYRING, name)
+}
+
+//sys	keyctlSearch(cmd int, arg2 int, arg3 string, arg4 string, arg5 int) (ret int, err error) = SYS_KEYCTL
+
+// KeyctlSearch implements the KEYCTL_SEARCH command.
+// See the full documentation at:
+// http://man7.org/linux/man-pages/man3/keyctl_search.3.html
+func KeyctlSearch(ringid int, keyType, description string, destRingid int) (id int, err error) {
+	return keyctlSearch(KEYCTL_SEARCH, ringid, keyType, description, destRingid)
+}
+
+//sys	keyctlIOV(cmd int, arg2 int, payload []Iovec, arg5 int) (err error) = SYS_KEYCTL
+
+// KeyctlInstantiateIOV implements the KEYCTL_INSTANTIATE_IOV command. This
+// command is similar to KEYCTL_INSTANTIATE, except that the payload is a slice
+// of Iovec (each of which represents a buffer) instead of a single buffer.
+// See the full documentation at:
+// http://man7.org/linux/man-pages/man3/keyctl_instantiate_iov.3.html
+func KeyctlInstantiateIOV(id int, payload []Iovec, ringid int) error {
+	return keyctlIOV(KEYCTL_INSTANTIATE_IOV, id, payload, ringid)
+}
+
+//sys	keyctlDH(cmd int, arg2 *KeyctlDHParams, buf []byte) (ret int, err error) = SYS_KEYCTL
+
+// KeyctlDHCompute implements the KEYCTL_DH_COMPUTE command. This command
+// computes a Diffie-Hellman shared secret based on the provide params. The
+// secret is written to the provided buffer and the returned size is the number
+// of bytes written (returning an error if there is insufficient space in the
+// buffer). If a nil buffer is passed in, this function returns the minimum
+// buffer length needed to store the appropriate data. Note that this differs
+// from KEYCTL_READ's behavior which always returns the requested payload size.
+// See the full documentation at:
+// http://man7.org/linux/man-pages/man3/keyctl_dh_compute.3.html
+func KeyctlDHCompute(params *KeyctlDHParams, buffer []byte) (size int, err error) {
+	return keyctlDH(KEYCTL_DH_COMPUTE, params, buffer)
+}
+
+// KeyctlRestrictKeyring implements the KEYCTL_RESTRICT_KEYRING command. This
+// command limits the set of keys that can be linked to the keyring, regardless
+// of keyring permissions. The command requires the "setattr" permission.
+//
+// When called with an empty keyType the command locks the keyring, preventing
+// any further keys from being linked to the keyring.
+//
+// The "asymmetric" keyType defines restrictions requiring key payloads to be
+// DER encoded X.509 certificates signed by keys in another keyring. Restrictions
+// for "asymmetric" include "builtin_trusted", "builtin_and_secondary_trusted",
+// "key_or_keyring:<key>", and "key_or_keyring:<key>:chain".
+//
+// As of Linux 4.12, only the "asymmetric" keyType defines type-specific
+// restrictions.
+//
+// See the full documentation at:
+// http://man7.org/linux/man-pages/man3/keyctl_restrict_keyring.3.html
+// http://man7.org/linux/man-pages/man2/keyctl.2.html
+func KeyctlRestrictKeyring(ringid int, keyType string, restriction string) error {
+	if keyType == "" {
+		return keyctlRestrictKeyring(KEYCTL_RESTRICT_KEYRING, ringid)
+	}
+	return keyctlRestrictKeyringByType(KEYCTL_RESTRICT_KEYRING, ringid, keyType, restriction)
+}
+
+//sys keyctlRestrictKeyringByType(cmd int, arg2 int, keyType string, restriction string) (err error) = SYS_KEYCTL
+//sys keyctlRestrictKeyring(cmd int, arg2 int) (err error) = SYS_KEYCTL
+
+func Recvmsg(fd int, p, oob []byte, flags int) (n, oobn int, recvflags int, from Sockaddr, err error) {
+	var msg Msghdr
+	var rsa RawSockaddrAny
+	msg.Name = (*byte)(unsafe.Pointer(&rsa))
+	msg.Namelen = uint32(SizeofSockaddrAny)
+	var iov Iovec
+	if len(p) > 0 {
+		iov.Base = &p[0]
+		iov.SetLen(len(p))
+	}
+	var dummy byte
+	if len(oob) > 0 {
+		if len(p) == 0 {
+			var sockType int
+			sockType, err = GetsockoptInt(fd, SOL_SOCKET, SO_TYPE)
+			if err != nil {
+				return
+			}
+			// receive at least one normal byte
+			if sockType != SOCK_DGRAM {
+				iov.Base = &dummy
+				iov.SetLen(1)
+			}
+		}
+		msg.Control = &oob[0]
+		msg.SetControllen(len(oob))
+	}
+	msg.Iov = &iov
+	msg.Iovlen = 1
+	if n, err = recvmsg(fd, &msg, flags); err != nil {
+		return
+	}
+	oobn = int(msg.Controllen)
+	recvflags = int(msg.Flags)
+	// source address is only specified if the socket is unconnected
+	if rsa.Addr.Family != AF_UNSPEC {
+		from, err = anyToSockaddr(fd, &rsa)
+	}
+	return
+}
+
+func Sendmsg(fd int, p, oob []byte, to Sockaddr, flags int) (err error) {
+	_, err = SendmsgN(fd, p, oob, to, flags)
+	return
+}
+
+func SendmsgN(fd int, p, oob []byte, to Sockaddr, flags int) (n int, err error) {
+	var ptr unsafe.Pointer
+	var salen _Socklen
+	if to != nil {
+		var err error
+		ptr, salen, err = to.sockaddr()
+		if err != nil {
+			return 0, err
+		}
+	}
+	var msg Msghdr
+	msg.Name = (*byte)(ptr)
+	msg.Namelen = uint32(salen)
+	var iov Iovec
+	if len(p) > 0 {
+		iov.Base = &p[0]
+		iov.SetLen(len(p))
+	}
+	var dummy byte
+	if len(oob) > 0 {
+		if len(p) == 0 {
+			var sockType int
+			sockType, err = GetsockoptInt(fd, SOL_SOCKET, SO_TYPE)
+			if err != nil {
+				return 0, err
+			}
+			// send at least one normal byte
+			if sockType != SOCK_DGRAM {
+				iov.Base = &dummy
+				iov.SetLen(1)
+			}
+		}
+		msg.Control = &oob[0]
+		msg.SetControllen(len(oob))
+	}
+	msg.Iov = &iov
+	msg.Iovlen = 1
+	if n, err = sendmsg(fd, &msg, flags); err != nil {
+		return 0, err
+	}
+	if len(oob) > 0 && len(p) == 0 {
+		n = 0
+	}
+	return n, nil
+}
+
+// BindToDevice binds the socket associated with fd to device.
+func BindToDevice(fd int, device string) (err error) {
+	return SetsockoptString(fd, SOL_SOCKET, SO_BINDTODEVICE, device)
+}
+
+//sys	ptrace(request int, pid int, addr uintptr, data uintptr) (err error)
+
+func ptracePeek(req int, pid int, addr uintptr, out []byte) (count int, err error) {
+	// The peek requests are machine-size oriented, so we wrap it
+	// to retrieve arbitrary-length data.
+
+	// The ptrace syscall differs from glibc's ptrace.
+	// Peeks returns the word in *data, not as the return value.
+
+	var buf [SizeofPtr]byte
+
+	// Leading edge. PEEKTEXT/PEEKDATA don't require aligned
+	// access (PEEKUSER warns that it might), but if we don't
+	// align our reads, we might straddle an unmapped page
+	// boundary and not get the bytes leading up to the page
+	// boundary.
+	n := 0
+	if addr%SizeofPtr != 0 {
+		err = ptrace(req, pid, addr-addr%SizeofPtr, uintptr(unsafe.Pointer(&buf[0])))
+		if err != nil {
+			return 0, err
+		}
+		n += copy(out, buf[addr%SizeofPtr:])
+		out = out[n:]
+	}
+
+	// Remainder.
+	for len(out) > 0 {
+		// We use an internal buffer to guarantee alignment.
+		// It's not documented if this is necessary, but we're paranoid.
+		err = ptrace(req, pid, addr+uintptr(n), uintptr(unsafe.Pointer(&buf[0])))
+		if err != nil {
+			return n, err
+		}
+		copied := copy(out, buf[0:])
+		n += copied
+		out = out[copied:]
+	}
+
+	return n, nil
+}
+
+func PtracePeekText(pid int, addr uintptr, out []byte) (count int, err error) {
+	return ptracePeek(PTRACE_PEEKTEXT, pid, addr, out)
+}
+
+func PtracePeekData(pid int, addr uintptr, out []byte) (count int, err error) {
+	return ptracePeek(PTRACE_PEEKDATA, pid, addr, out)
+}
+
+func PtracePeekUser(pid int, addr uintptr, out []byte) (count int, err error) {
+	return ptracePeek(PTRACE_PEEKUSR, pid, addr, out)
+}
+
+func ptracePoke(pokeReq int, peekReq int, pid int, addr uintptr, data []byte) (count int, err error) {
+	// As for ptracePeek, we need to align our accesses to deal
+	// with the possibility of straddling an invalid page.
+
+	// Leading edge.
+	n := 0
+	if addr%SizeofPtr != 0 {
+		var buf [SizeofPtr]byte
+		err = ptrace(peekReq, pid, addr-addr%SizeofPtr, uintptr(unsafe.Pointer(&buf[0])))
+		if err != nil {
+			return 0, err
+		}
+		n += copy(buf[addr%SizeofPtr:], data)
+		word := *((*uintptr)(unsafe.Pointer(&buf[0])))
+		err = ptrace(pokeReq, pid, addr-addr%SizeofPtr, word)
+		if err != nil {
+			return 0, err
+		}
+		data = data[n:]
+	}
+
+	// Interior.
+	for len(data) > SizeofPtr {
+		word := *((*uintptr)(unsafe.Pointer(&data[0])))
+		err = ptrace(pokeReq, pid, addr+uintptr(n), word)
+		if err != nil {
+			return n, err
+		}
+		n += SizeofPtr
+		data = data[SizeofPtr:]
+	}
+
+	// Trailing edge.
+	if len(data) > 0 {
+		var buf [SizeofPtr]byte
+		err = ptrace(peekReq, pid, addr+uintptr(n), uintptr(unsafe.Pointer(&buf[0])))
+		if err != nil {
+			return n, err
+		}
+		copy(buf[0:], data)
+		word := *((*uintptr)(unsafe.Pointer(&buf[0])))
+		err = ptrace(pokeReq, pid, addr+uintptr(n), word)
+		if err != nil {
+			return n, err
+		}
+		n += len(data)
+	}
+
+	return n, nil
+}
+
+func PtracePokeText(pid int, addr uintptr, data []byte) (count int, err error) {
+	return ptracePoke(PTRACE_POKETEXT, PTRACE_PEEKTEXT, pid, addr, data)
+}
+
+func PtracePokeData(pid int, addr uintptr, data []byte) (count int, err error) {
+	return ptracePoke(PTRACE_POKEDATA, PTRACE_PEEKDATA, pid, addr, data)
+}
+
+func PtracePokeUser(pid int, addr uintptr, data []byte) (count int, err error) {
+	return ptracePoke(PTRACE_POKEUSR, PTRACE_PEEKUSR, pid, addr, data)
+}
+
+func PtraceGetRegs(pid int, regsout *PtraceRegs) (err error) {
+	return ptrace(PTRACE_GETREGS, pid, 0, uintptr(unsafe.Pointer(regsout)))
+}
+
+func PtraceSetRegs(pid int, regs *PtraceRegs) (err error) {
+	return ptrace(PTRACE_SETREGS, pid, 0, uintptr(unsafe.Pointer(regs)))
+}
+
+func PtraceSetOptions(pid int, options int) (err error) {
+	return ptrace(PTRACE_SETOPTIONS, pid, 0, uintptr(options))
+}
+
+func PtraceGetEventMsg(pid int) (msg uint, err error) {
+	var data _C_long
+	err = ptrace(PTRACE_GETEVENTMSG, pid, 0, uintptr(unsafe.Pointer(&data)))
+	msg = uint(data)
+	return
+}
+
+func PtraceCont(pid int, signal int) (err error) {
+	return ptrace(PTRACE_CONT, pid, 0, uintptr(signal))
+}
+
+func PtraceSyscall(pid int, signal int) (err error) {
+	return ptrace(PTRACE_SYSCALL, pid, 0, uintptr(signal))
+}
+
+func PtraceSingleStep(pid int) (err error) { return ptrace(PTRACE_SINGLESTEP, pid, 0, 0) }
+
+func PtraceInterrupt(pid int) (err error) { return ptrace(PTRACE_INTERRUPT, pid, 0, 0) }
+
+func PtraceAttach(pid int) (err error) { return ptrace(PTRACE_ATTACH, pid, 0, 0) }
+
+func PtraceSeize(pid int) (err error) { return ptrace(PTRACE_SEIZE, pid, 0, 0) }
+
+func PtraceDetach(pid int) (err error) { return ptrace(PTRACE_DETACH, pid, 0, 0) }
+
+//sys	reboot(magic1 uint, magic2 uint, cmd int, arg string) (err error)
+
+func Reboot(cmd int) (err error) {
+	return reboot(LINUX_REBOOT_MAGIC1, LINUX_REBOOT_MAGIC2, cmd, "")
+}
+
+func direntIno(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Ino), unsafe.Sizeof(Dirent{}.Ino))
+}
+
+func direntReclen(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Reclen), unsafe.Sizeof(Dirent{}.Reclen))
+}
+
+func direntNamlen(buf []byte) (uint64, bool) {
+	reclen, ok := direntReclen(buf)
+	if !ok {
+		return 0, false
+	}
+	return reclen - uint64(unsafe.Offsetof(Dirent{}.Name)), true
+}
+
+//sys	mount(source string, target string, fstype string, flags uintptr, data *byte) (err error)
+
+func Mount(source string, target string, fstype string, flags uintptr, data string) (err error) {
+	// Certain file systems get rather angry and EINVAL if you give
+	// them an empty string of data, rather than NULL.
+	if data == "" {
+		return mount(source, target, fstype, flags, nil)
+	}
+	datap, err := BytePtrFromString(data)
+	if err != nil {
+		return err
+	}
+	return mount(source, target, fstype, flags, datap)
+}
+
+func Sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	if raceenabled {
+		raceReleaseMerge(unsafe.Pointer(&ioSync))
+	}
+	return sendfile(outfd, infd, offset, count)
+}
+
+// Sendto
+// Recvfrom
+// Socketpair
+
+/*
+ * Direct access
+ */
+//sys	Acct(path string) (err error)
+//sys	AddKey(keyType string, description string, payload []byte, ringid int) (id int, err error)
+//sys	Adjtimex(buf *Timex) (state int, err error)
+//sysnb	Capget(hdr *CapUserHeader, data *CapUserData) (err error)
+//sysnb	Capset(hdr *CapUserHeader, data *CapUserData) (err error)
+//sys	Chdir(path string) (err error)
+//sys	Chroot(path string) (err error)
+//sys	ClockGetres(clockid int32, res *Timespec) (err error)
+//sys	ClockGettime(clockid int32, time *Timespec) (err error)
+//sys	ClockNanosleep(clockid int32, flags int, request *Timespec, remain *Timespec) (err error)
+//sys	Close(fd int) (err error)
+//sys	CopyFileRange(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int, err error)
+//sys	DeleteModule(name string, flags int) (err error)
+//sys	Dup(oldfd int) (fd int, err error)
+
+func Dup2(oldfd, newfd int) error {
+	// Android O and newer blocks dup2; riscv and arm64 don't implement dup2.
+	if runtime.GOOS == "android" || runtime.GOARCH == "riscv64" || runtime.GOARCH == "arm64" {
+		return Dup3(oldfd, newfd, 0)
+	}
+	return dup2(oldfd, newfd)
+}
+
+//sys	Dup3(oldfd int, newfd int, flags int) (err error)
+//sysnb	EpollCreate1(flag int) (fd int, err error)
+//sysnb	EpollCtl(epfd int, op int, fd int, event *EpollEvent) (err error)
+//sys	Eventfd(initval uint, flags int) (fd int, err error) = SYS_EVENTFD2
+//sys	Exit(code int) = SYS_EXIT_GROUP
+//sys	Fallocate(fd int, mode uint32, off int64, len int64) (err error)
+//sys	Fchdir(fd int) (err error)
+//sys	Fchmod(fd int, mode uint32) (err error)
+//sys	Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error)
+//sys	Fdatasync(fd int) (err error)
+//sys	Fgetxattr(fd int, attr string, dest []byte) (sz int, err error)
+//sys	FinitModule(fd int, params string, flags int) (err error)
+//sys	Flistxattr(fd int, dest []byte) (sz int, err error)
+//sys	Flock(fd int, how int) (err error)
+//sys	Fremovexattr(fd int, attr string) (err error)
+//sys	Fsetxattr(fd int, attr string, dest []byte, flags int) (err error)
+//sys	Fsync(fd int) (err error)
+//sys	Getdents(fd int, buf []byte) (n int, err error) = SYS_GETDENTS64
+//sysnb	Getpgid(pid int) (pgid int, err error)
+
+func Getpgrp() (pid int) {
+	pid, _ = Getpgid(0)
+	return
+}
+
+//sysnb	Getpid() (pid int)
+//sysnb	Getppid() (ppid int)
+//sys	Getpriority(which int, who int) (prio int, err error)
+//sys	Getrandom(buf []byte, flags int) (n int, err error)
+//sysnb	Getrusage(who int, rusage *Rusage) (err error)
+//sysnb	Getsid(pid int) (sid int, err error)
+//sysnb	Gettid() (tid int)
+//sys	Getxattr(path string, attr string, dest []byte) (sz int, err error)
+//sys	InitModule(moduleImage []byte, params string) (err error)
+//sys	InotifyAddWatch(fd int, pathname string, mask uint32) (watchdesc int, err error)
+//sysnb	InotifyInit1(flags int) (fd int, err error)
+//sysnb	InotifyRmWatch(fd int, watchdesc uint32) (success int, err error)
+//sysnb	Kill(pid int, sig syscall.Signal) (err error)
+//sys	Klogctl(typ int, buf []byte) (n int, err error) = SYS_SYSLOG
+//sys	Lgetxattr(path string, attr string, dest []byte) (sz int, err error)
+//sys	Listxattr(path string, dest []byte) (sz int, err error)
+//sys	Llistxattr(path string, dest []byte) (sz int, err error)
+//sys	Lremovexattr(path string, attr string) (err error)
+//sys	Lsetxattr(path string, attr string, data []byte, flags int) (err error)
+//sys	MemfdCreate(name string, flags int) (fd int, err error)
+//sys	Mkdirat(dirfd int, path string, mode uint32) (err error)
+//sys	Mknodat(dirfd int, path string, mode uint32, dev int) (err error)
+//sys	Nanosleep(time *Timespec, leftover *Timespec) (err error)
+//sys	PerfEventOpen(attr *PerfEventAttr, pid int, cpu int, groupFd int, flags int) (fd int, err error)
+//sys	PivotRoot(newroot string, putold string) (err error) = SYS_PIVOT_ROOT
+//sysnb prlimit(pid int, resource int, newlimit *Rlimit, old *Rlimit) (err error) = SYS_PRLIMIT64
+//sys   Prctl(option int, arg2 uintptr, arg3 uintptr, arg4 uintptr, arg5 uintptr) (err error)
+//sys	Pselect(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timespec, sigmask *Sigset_t) (n int, err error) = SYS_PSELECT6
+//sys	read(fd int, p []byte) (n int, err error)
+//sys	Removexattr(path string, attr string) (err error)
+//sys	Renameat2(olddirfd int, oldpath string, newdirfd int, newpath string, flags uint) (err error)
+//sys	RequestKey(keyType string, description string, callback string, destRingid int) (id int, err error)
+//sys	Setdomainname(p []byte) (err error)
+//sys	Sethostname(p []byte) (err error)
+//sysnb	Setpgid(pid int, pgid int) (err error)
+//sysnb	Setsid() (pid int, err error)
+//sysnb	Settimeofday(tv *Timeval) (err error)
+//sys	Setns(fd int, nstype int) (err error)
+
+// PrctlRetInt performs a prctl operation specified by option and further
+// optional arguments arg2 through arg5 depending on option. It returns a
+// non-negative integer that is returned by the prctl syscall.
+func PrctlRetInt(option int, arg2 uintptr, arg3 uintptr, arg4 uintptr, arg5 uintptr) (int, error) {
+	ret, _, err := Syscall6(SYS_PRCTL, uintptr(option), uintptr(arg2), uintptr(arg3), uintptr(arg4), uintptr(arg5), 0)
+	if err != 0 {
+		return 0, err
+	}
+	return int(ret), nil
+}
+
+// issue 1435.
+// On linux Setuid and Setgid only affects the current thread, not the process.
+// This does not match what most callers expect so we must return an error
+// here rather than letting the caller think that the call succeeded.
+
+func Setuid(uid int) (err error) {
+	return EOPNOTSUPP
+}
+
+func Setgid(uid int) (err error) {
+	return EOPNOTSUPP
+}
+
+// SetfsgidRetGid sets fsgid for current thread and returns previous fsgid set.
+// setfsgid(2) will return a non-nil error only if its caller lacks CAP_SETUID capability.
+// If the call fails due to other reasons, current fsgid will be returned.
+func SetfsgidRetGid(gid int) (int, error) {
+	return setfsgid(gid)
+}
+
+// SetfsuidRetUid sets fsuid for current thread and returns previous fsuid set.
+// setfsgid(2) will return a non-nil error only if its caller lacks CAP_SETUID capability
+// If the call fails due to other reasons, current fsuid will be returned.
+func SetfsuidRetUid(uid int) (int, error) {
+	return setfsuid(uid)
+}
+
+func Setfsgid(gid int) error {
+	_, err := setfsgid(gid)
+	return err
+}
+
+func Setfsuid(uid int) error {
+	_, err := setfsuid(uid)
+	return err
+}
+
+func Signalfd(fd int, sigmask *Sigset_t, flags int) (newfd int, err error) {
+	return signalfd(fd, sigmask, _C__NSIG/8, flags)
+}
+
+//sys	Setpriority(which int, who int, prio int) (err error)
+//sys	Setxattr(path string, attr string, data []byte, flags int) (err error)
+//sys	signalfd(fd int, sigmask *Sigset_t, maskSize uintptr, flags int) (newfd int, err error) = SYS_SIGNALFD4
+//sys	Statx(dirfd int, path string, flags int, mask int, stat *Statx_t) (err error)
+//sys	Sync()
+//sys	Syncfs(fd int) (err error)
+//sysnb	Sysinfo(info *Sysinfo_t) (err error)
+//sys	Tee(rfd int, wfd int, len int, flags int) (n int64, err error)
+//sysnb TimerfdCreate(clockid int, flags int) (fd int, err error)
+//sysnb TimerfdGettime(fd int, currValue *ItimerSpec) (err error)
+//sysnb TimerfdSettime(fd int, flags int, newValue *ItimerSpec, oldValue *ItimerSpec) (err error)
+//sysnb	Tgkill(tgid int, tid int, sig syscall.Signal) (err error)
+//sysnb	Times(tms *Tms) (ticks uintptr, err error)
+//sysnb	Umask(mask int) (oldmask int)
+//sysnb	Uname(buf *Utsname) (err error)
+//sys	Unmount(target string, flags int) (err error) = SYS_UMOUNT2
+//sys	Unshare(flags int) (err error)
+//sys	write(fd int, p []byte) (n int, err error)
+//sys	exitThread(code int) (err error) = SYS_EXIT
+//sys	readlen(fd int, p *byte, np int) (n int, err error) = SYS_READ
+//sys	writelen(fd int, p *byte, np int) (n int, err error) = SYS_WRITE
+//sys	readv(fd int, iovs []Iovec) (n int, err error) = SYS_READV
+//sys	writev(fd int, iovs []Iovec) (n int, err error) = SYS_WRITEV
+//sys	preadv(fd int, iovs []Iovec, offs_l uintptr, offs_h uintptr) (n int, err error) = SYS_PREADV
+//sys	pwritev(fd int, iovs []Iovec, offs_l uintptr, offs_h uintptr) (n int, err error) = SYS_PWRITEV
+//sys	preadv2(fd int, iovs []Iovec, offs_l uintptr, offs_h uintptr, flags int) (n int, err error) = SYS_PREADV2
+//sys	pwritev2(fd int, iovs []Iovec, offs_l uintptr, offs_h uintptr, flags int) (n int, err error) = SYS_PWRITEV2
+
+func bytes2iovec(bs [][]byte) []Iovec {
+	iovecs := make([]Iovec, len(bs))
+	for i, b := range bs {
+		iovecs[i].SetLen(len(b))
+		if len(b) > 0 {
+			iovecs[i].Base = &b[0]
+		} else {
+			iovecs[i].Base = (*byte)(unsafe.Pointer(&_zero))
+		}
+	}
+	return iovecs
+}
+
+// offs2lohi splits offs into its lower and upper unsigned long. On 64-bit
+// systems, hi will always be 0. On 32-bit systems, offs will be split in half.
+// preadv/pwritev chose this calling convention so they don't need to add a
+// padding-register for alignment on ARM.
+func offs2lohi(offs int64) (lo, hi uintptr) {
+	return uintptr(offs), uintptr(uint64(offs) >> SizeofLong)
+}
+
+func Readv(fd int, iovs [][]byte) (n int, err error) {
+	iovecs := bytes2iovec(iovs)
+	n, err = readv(fd, iovecs)
+	readvRacedetect(iovecs, n, err)
+	return n, err
+}
+
+func Preadv(fd int, iovs [][]byte, offset int64) (n int, err error) {
+	iovecs := bytes2iovec(iovs)
+	lo, hi := offs2lohi(offset)
+	n, err = preadv(fd, iovecs, lo, hi)
+	readvRacedetect(iovecs, n, err)
+	return n, err
+}
+
+func Preadv2(fd int, iovs [][]byte, offset int64, flags int) (n int, err error) {
+	iovecs := bytes2iovec(iovs)
+	lo, hi := offs2lohi(offset)
+	n, err = preadv2(fd, iovecs, lo, hi, flags)
+	readvRacedetect(iovecs, n, err)
+	return n, err
+}
+
+func readvRacedetect(iovecs []Iovec, n int, err error) {
+	if !raceenabled {
+		return
+	}
+	for i := 0; n > 0 && i < len(iovecs); i++ {
+		m := int(iovecs[i].Len)
+		if m > n {
+			m = n
+		}
+		n -= m
+		if m > 0 {
+			raceWriteRange(unsafe.Pointer(iovecs[i].Base), m)
+		}
+	}
+	if err == nil {
+		raceAcquire(unsafe.Pointer(&ioSync))
+	}
+}
+
+func Writev(fd int, iovs [][]byte) (n int, err error) {
+	iovecs := bytes2iovec(iovs)
+	if raceenabled {
+		raceReleaseMerge(unsafe.Pointer(&ioSync))
+	}
+	n, err = writev(fd, iovecs)
+	writevRacedetect(iovecs, n)
+	return n, err
+}
+
+func Pwritev(fd int, iovs [][]byte, offset int64) (n int, err error) {
+	iovecs := bytes2iovec(iovs)
+	if raceenabled {
+		raceReleaseMerge(unsafe.Pointer(&ioSync))
+	}
+	lo, hi := offs2lohi(offset)
+	n, err = pwritev(fd, iovecs, lo, hi)
+	writevRacedetect(iovecs, n)
+	return n, err
+}
+
+func Pwritev2(fd int, iovs [][]byte, offset int64, flags int) (n int, err error) {
+	iovecs := bytes2iovec(iovs)
+	if raceenabled {
+		raceReleaseMerge(unsafe.Pointer(&ioSync))
+	}
+	lo, hi := offs2lohi(offset)
+	n, err = pwritev2(fd, iovecs, lo, hi, flags)
+	writevRacedetect(iovecs, n)
+	return n, err
+}
+
+func writevRacedetect(iovecs []Iovec, n int) {
+	if !raceenabled {
+		return
+	}
+	for i := 0; n > 0 && i < len(iovecs); i++ {
+		m := int(iovecs[i].Len)
+		if m > n {
+			m = n
+		}
+		n -= m
+		if m > 0 {
+			raceReadRange(unsafe.Pointer(iovecs[i].Base), m)
+		}
+	}
+}
+
+// mmap varies by architecture; see syscall_linux_*.go.
+//sys	munmap(addr uintptr, length uintptr) (err error)
+
+var mapper = &mmapper{
+	active: make(map[*byte][]byte),
+	mmap:   mmap,
+	munmap: munmap,
+}
+
+func Mmap(fd int, offset int64, length int, prot int, flags int) (data []byte, err error) {
+	return mapper.Mmap(fd, offset, length, prot, flags)
+}
+
+func Munmap(b []byte) (err error) {
+	return mapper.Munmap(b)
+}
+
+//sys	Madvise(b []byte, advice int) (err error)
+//sys	Mprotect(b []byte, prot int) (err error)
+//sys	Mlock(b []byte) (err error)
+//sys	Mlockall(flags int) (err error)
+//sys	Msync(b []byte, flags int) (err error)
+//sys	Munlock(b []byte) (err error)
+//sys	Munlockall() (err error)
+
+// Vmsplice splices user pages from a slice of Iovecs into a pipe specified by fd,
+// using the specified flags.
+func Vmsplice(fd int, iovs []Iovec, flags int) (int, error) {
+	var p unsafe.Pointer
+	if len(iovs) > 0 {
+		p = unsafe.Pointer(&iovs[0])
+	}
+
+	n, _, errno := Syscall6(SYS_VMSPLICE, uintptr(fd), uintptr(p), uintptr(len(iovs)), uintptr(flags), 0, 0)
+	if errno != 0 {
+		return 0, syscall.Errno(errno)
+	}
+
+	return int(n), nil
+}
+
+func isGroupMember(gid int) bool {
+	groups, err := Getgroups()
+	if err != nil {
+		return false
+	}
+
+	for _, g := range groups {
+		if g == gid {
+			return true
+		}
+	}
+	return false
+}
+
+//sys	faccessat(dirfd int, path string, mode uint32) (err error)
+//sys	Faccessat2(dirfd int, path string, mode uint32, flags int) (err error)
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	if flags == 0 {
+		return faccessat(dirfd, path, mode)
+	}
+
+	if err := Faccessat2(dirfd, path, mode, flags); err != ENOSYS && err != EPERM {
+		return err
+	}
+
+	// The Linux kernel faccessat system call does not take any flags.
+	// The glibc faccessat implements the flags itself; see
+	// https://sourceware.org/git/?p=glibc.git;a=blob;f=sysdeps/unix/sysv/linux/faccessat.c;hb=HEAD
+	// Because people naturally expect syscall.Faccessat to act
+	// like C faccessat, we do the same.
+
+	if flags & ^(AT_SYMLINK_NOFOLLOW|AT_EACCESS) != 0 {
+		return EINVAL
+	}
+
+	var st Stat_t
+	if err := Fstatat(dirfd, path, &st, flags&AT_SYMLINK_NOFOLLOW); err != nil {
+		return err
+	}
+
+	mode &= 7
+	if mode == 0 {
+		return nil
+	}
+
+	var uid int
+	if flags&AT_EACCESS != 0 {
+		uid = Geteuid()
+	} else {
+		uid = Getuid()
+	}
+
+	if uid == 0 {
+		if mode&1 == 0 {
+			// Root can read and write any file.
+			return nil
+		}
+		if st.Mode&0111 != 0 {
+			// Root can execute any file that anybody can execute.
+			return nil
+		}
+		return EACCES
+	}
+
+	var fmode uint32
+	if uint32(uid) == st.Uid {
+		fmode = (st.Mode >> 6) & 7
+	} else {
+		var gid int
+		if flags&AT_EACCESS != 0 {
+			gid = Getegid()
+		} else {
+			gid = Getgid()
+		}
+
+		if uint32(gid) == st.Gid || isGroupMember(gid) {
+			fmode = (st.Mode >> 3) & 7
+		} else {
+			fmode = st.Mode & 7
+		}
+	}
+
+	if fmode&mode == mode {
+		return nil
+	}
+
+	return EACCES
+}
+
+//sys nameToHandleAt(dirFD int, pathname string, fh *fileHandle, mountID *_C_int, flags int) (err error) = SYS_NAME_TO_HANDLE_AT
+//sys openByHandleAt(mountFD int, fh *fileHandle, flags int) (fd int, err error) = SYS_OPEN_BY_HANDLE_AT
+
+// fileHandle is the argument to nameToHandleAt and openByHandleAt. We
+// originally tried to generate it via unix/linux/types.go with "type
+// fileHandle C.struct_file_handle" but that generated empty structs
+// for mips64 and mips64le. Instead, hard code it for now (it's the
+// same everywhere else) until the mips64 generator issue is fixed.
+type fileHandle struct {
+	Bytes uint32
+	Type  int32
+}
+
+// FileHandle represents the C struct file_handle used by
+// name_to_handle_at (see NameToHandleAt) and open_by_handle_at (see
+// OpenByHandleAt).
+type FileHandle struct {
+	*fileHandle
+}
+
+// NewFileHandle constructs a FileHandle.
+func NewFileHandle(handleType int32, handle []byte) FileHandle {
+	const hdrSize = unsafe.Sizeof(fileHandle{})
+	buf := make([]byte, hdrSize+uintptr(len(handle)))
+	copy(buf[hdrSize:], handle)
+	fh := (*fileHandle)(unsafe.Pointer(&buf[0]))
+	fh.Type = handleType
+	fh.Bytes = uint32(len(handle))
+	return FileHandle{fh}
+}
+
+func (fh *FileHandle) Size() int   { return int(fh.fileHandle.Bytes) }
+func (fh *FileHandle) Type() int32 { return fh.fileHandle.Type }
+func (fh *FileHandle) Bytes() []byte {
+	n := fh.Size()
+	if n == 0 {
+		return nil
+	}
+	return (*[1 << 30]byte)(unsafe.Pointer(uintptr(unsafe.Pointer(&fh.fileHandle.Type)) + 4))[:n:n]
+}
+
+// NameToHandleAt wraps the name_to_handle_at system call; it obtains
+// a handle for a path name.
+func NameToHandleAt(dirfd int, path string, flags int) (handle FileHandle, mountID int, err error) {
+	var mid _C_int
+	// Try first with a small buffer, assuming the handle will
+	// only be 32 bytes.
+	size := uint32(32 + unsafe.Sizeof(fileHandle{}))
+	didResize := false
+	for {
+		buf := make([]byte, size)
+		fh := (*fileHandle)(unsafe.Pointer(&buf[0]))
+		fh.Bytes = size - uint32(unsafe.Sizeof(fileHandle{}))
+		err = nameToHandleAt(dirfd, path, fh, &mid, flags)
+		if err == EOVERFLOW {
+			if didResize {
+				// We shouldn't need to resize more than once
+				return
+			}
+			didResize = true
+			size = fh.Bytes + uint32(unsafe.Sizeof(fileHandle{}))
+			continue
+		}
+		if err != nil {
+			return
+		}
+		return FileHandle{fh}, int(mid), nil
+	}
+}
+
+// OpenByHandleAt wraps the open_by_handle_at system call; it opens a
+// file via a handle as previously returned by NameToHandleAt.
+func OpenByHandleAt(mountFD int, handle FileHandle, flags int) (fd int, err error) {
+	return openByHandleAt(mountFD, handle.fileHandle, flags)
+}
+
+// Klogset wraps the sys_syslog system call; it sets console_loglevel to
+// the value specified by arg and passes a dummy pointer to bufp.
+func Klogset(typ int, arg int) (err error) {
+	var p unsafe.Pointer
+	_, _, errno := Syscall(SYS_SYSLOG, uintptr(typ), uintptr(p), uintptr(arg))
+	if errno != 0 {
+		return errnoErr(errno)
+	}
+	return nil
+}
+
+// RemoteIovec is Iovec with the pointer replaced with an integer.
+// It is used for ProcessVMReadv and ProcessVMWritev, where the pointer
+// refers to a location in a different process' address space, which
+// would confuse the Go garbage collector.
+type RemoteIovec struct {
+	Base uintptr
+	Len  int
+}
+
+//sys	ProcessVMReadv(pid int, localIov []Iovec, remoteIov []RemoteIovec, flags uint) (n int, err error) = SYS_PROCESS_VM_READV
+//sys	ProcessVMWritev(pid int, localIov []Iovec, remoteIov []RemoteIovec, flags uint) (n int, err error) = SYS_PROCESS_VM_WRITEV
+
+/*
+ * Unimplemented
+ */
+// AfsSyscall
+// Alarm
+// ArchPrctl
+// Brk
+// ClockNanosleep
+// ClockSettime
+// Clone
+// EpollCtlOld
+// EpollPwait
+// EpollWaitOld
+// Execve
+// Fork
+// Futex
+// GetKernelSyms
+// GetMempolicy
+// GetRobustList
+// GetThreadArea
+// Getitimer
+// Getpmsg
+// IoCancel
+// IoDestroy
+// IoGetevents
+// IoSetup
+// IoSubmit
+// IoprioGet
+// IoprioSet
+// KexecLoad
+// LookupDcookie
+// Mbind
+// MigratePages
+// Mincore
+// ModifyLdt
+// Mount
+// MovePages
+// MqGetsetattr
+// MqNotify
+// MqOpen
+// MqTimedreceive
+// MqTimedsend
+// MqUnlink
+// Mremap
+// Msgctl
+// Msgget
+// Msgrcv
+// Msgsnd
+// Nfsservctl
+// Personality
+// Pselect6
+// Ptrace
+// Putpmsg
+// Quotactl
+// Readahead
+// Readv
+// RemapFilePages
+// RestartSyscall
+// RtSigaction
+// RtSigpending
+// RtSigprocmask
+// RtSigqueueinfo
+// RtSigreturn
+// RtSigsuspend
+// RtSigtimedwait
+// SchedGetPriorityMax
+// SchedGetPriorityMin
+// SchedGetparam
+// SchedGetscheduler
+// SchedRrGetInterval
+// SchedSetparam
+// SchedYield
+// Security
+// Semctl
+// Semget
+// Semop
+// Semtimedop
+// SetMempolicy
+// SetRobustList
+// SetThreadArea
+// SetTidAddress
+// Shmat
+// Shmctl
+// Shmdt
+// Shmget
+// Sigaltstack
+// Swapoff
+// Swapon
+// Sysfs
+// TimerCreate
+// TimerDelete
+// TimerGetoverrun
+// TimerGettime
+// TimerSettime
+// Tkill (obsolete)
+// Tuxcall
+// Umount2
+// Uselib
+// Utimensat
+// Vfork
+// Vhangup
+// Vserver
+// Waitid
+// _Sysctl
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_386.go
new file mode 100644
index 000000000..048d18e3c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_386.go
@@ -0,0 +1,390 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// TODO(rsc): Rewrite all nn(SP) references into name+(nn-8)(FP)
+// so that go vet can check that they are correct.
+
+// +build 386,linux
+
+package unix
+
+import (
+	"unsafe"
+)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: int32(sec), Nsec: int32(nsec)}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: int32(sec), Usec: int32(usec)}
+}
+
+//sysnb	pipe(p *[2]_C_int) (err error)
+
+func Pipe(p []int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe(&pp)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+//sysnb pipe2(p *[2]_C_int, flags int) (err error)
+
+func Pipe2(p []int, flags int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe2(&pp, flags)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+// 64-bit file system and 32-bit uid calls
+// (386 default is 32-bit file system and 16-bit uid).
+//sys	dup2(oldfd int, newfd int) (err error)
+//sysnb	EpollCreate(size int) (fd int, err error)
+//sys	EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error)
+//sys	Fadvise(fd int, offset int64, length int64, advice int) (err error) = SYS_FADVISE64_64
+//sys	Fchown(fd int, uid int, gid int) (err error) = SYS_FCHOWN32
+//sys	Fstat(fd int, stat *Stat_t) (err error) = SYS_FSTAT64
+//sys	Fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) = SYS_FSTATAT64
+//sys	Ftruncate(fd int, length int64) (err error) = SYS_FTRUNCATE64
+//sysnb	Getegid() (egid int) = SYS_GETEGID32
+//sysnb	Geteuid() (euid int) = SYS_GETEUID32
+//sysnb	Getgid() (gid int) = SYS_GETGID32
+//sysnb	Getuid() (uid int) = SYS_GETUID32
+//sysnb	InotifyInit() (fd int, err error)
+//sys	Ioperm(from int, num int, on int) (err error)
+//sys	Iopl(level int) (err error)
+//sys	Lchown(path string, uid int, gid int) (err error) = SYS_LCHOWN32
+//sys	Lstat(path string, stat *Stat_t) (err error) = SYS_LSTAT64
+//sys	Pread(fd int, p []byte, offset int64) (n int, err error) = SYS_PREAD64
+//sys	Pwrite(fd int, p []byte, offset int64) (n int, err error) = SYS_PWRITE64
+//sys	Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error)
+//sys	sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) = SYS_SENDFILE64
+//sys	setfsgid(gid int) (prev int, err error) = SYS_SETFSGID32
+//sys	setfsuid(uid int) (prev int, err error) = SYS_SETFSUID32
+//sysnb	Setregid(rgid int, egid int) (err error) = SYS_SETREGID32
+//sysnb	Setresgid(rgid int, egid int, sgid int) (err error) = SYS_SETRESGID32
+//sysnb	Setresuid(ruid int, euid int, suid int) (err error) = SYS_SETRESUID32
+//sysnb	Setreuid(ruid int, euid int) (err error) = SYS_SETREUID32
+//sys	Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int, err error)
+//sys	Stat(path string, stat *Stat_t) (err error) = SYS_STAT64
+//sys	SyncFileRange(fd int, off int64, n int64, flags int) (err error)
+//sys	Truncate(path string, length int64) (err error) = SYS_TRUNCATE64
+//sys	Ustat(dev int, ubuf *Ustat_t) (err error)
+//sysnb	getgroups(n int, list *_Gid_t) (nn int, err error) = SYS_GETGROUPS32
+//sysnb	setgroups(n int, list *_Gid_t) (err error) = SYS_SETGROUPS32
+//sys	Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) = SYS__NEWSELECT
+
+//sys	mmap2(addr uintptr, length uintptr, prot int, flags int, fd int, pageOffset uintptr) (xaddr uintptr, err error)
+//sys	Pause() (err error)
+
+func mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error) {
+	page := uintptr(offset / 4096)
+	if offset != int64(page)*4096 {
+		return 0, EINVAL
+	}
+	return mmap2(addr, length, prot, flags, fd, page)
+}
+
+type rlimit32 struct {
+	Cur uint32
+	Max uint32
+}
+
+//sysnb getrlimit(resource int, rlim *rlimit32) (err error) = SYS_GETRLIMIT
+
+const rlimInf32 = ^uint32(0)
+const rlimInf64 = ^uint64(0)
+
+func Getrlimit(resource int, rlim *Rlimit) (err error) {
+	err = prlimit(0, resource, nil, rlim)
+	if err != ENOSYS {
+		return err
+	}
+
+	rl := rlimit32{}
+	err = getrlimit(resource, &rl)
+	if err != nil {
+		return
+	}
+
+	if rl.Cur == rlimInf32 {
+		rlim.Cur = rlimInf64
+	} else {
+		rlim.Cur = uint64(rl.Cur)
+	}
+
+	if rl.Max == rlimInf32 {
+		rlim.Max = rlimInf64
+	} else {
+		rlim.Max = uint64(rl.Max)
+	}
+	return
+}
+
+//sysnb setrlimit(resource int, rlim *rlimit32) (err error) = SYS_SETRLIMIT
+
+func Setrlimit(resource int, rlim *Rlimit) (err error) {
+	err = prlimit(0, resource, rlim, nil)
+	if err != ENOSYS {
+		return err
+	}
+
+	rl := rlimit32{}
+	if rlim.Cur == rlimInf64 {
+		rl.Cur = rlimInf32
+	} else if rlim.Cur < uint64(rlimInf32) {
+		rl.Cur = uint32(rlim.Cur)
+	} else {
+		return EINVAL
+	}
+	if rlim.Max == rlimInf64 {
+		rl.Max = rlimInf32
+	} else if rlim.Max < uint64(rlimInf32) {
+		rl.Max = uint32(rlim.Max)
+	} else {
+		return EINVAL
+	}
+
+	return setrlimit(resource, &rl)
+}
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	newoffset, errno := seek(fd, offset, whence)
+	if errno != 0 {
+		return 0, errno
+	}
+	return newoffset, nil
+}
+
+//sys	futimesat(dirfd int, path string, times *[2]Timeval) (err error)
+//sysnb	Gettimeofday(tv *Timeval) (err error)
+//sysnb	Time(t *Time_t) (tt Time_t, err error)
+//sys	Utime(path string, buf *Utimbuf) (err error)
+//sys	utimes(path string, times *[2]Timeval) (err error)
+
+// On x86 Linux, all the socket calls go through an extra indirection,
+// I think because the 5-register system call interface can't handle
+// the 6-argument calls like sendto and recvfrom. Instead the
+// arguments to the underlying system call are the number below
+// and a pointer to an array of uintptr. We hide the pointer in the
+// socketcall assembly to avoid allocation on every system call.
+
+const (
+	// see linux/net.h
+	_SOCKET      = 1
+	_BIND        = 2
+	_CONNECT     = 3
+	_LISTEN      = 4
+	_ACCEPT      = 5
+	_GETSOCKNAME = 6
+	_GETPEERNAME = 7
+	_SOCKETPAIR  = 8
+	_SEND        = 9
+	_RECV        = 10
+	_SENDTO      = 11
+	_RECVFROM    = 12
+	_SHUTDOWN    = 13
+	_SETSOCKOPT  = 14
+	_GETSOCKOPT  = 15
+	_SENDMSG     = 16
+	_RECVMSG     = 17
+	_ACCEPT4     = 18
+	_RECVMMSG    = 19
+	_SENDMMSG    = 20
+)
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	fd, e := socketcall(_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), 0, 0, 0)
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error) {
+	fd, e := socketcall(_ACCEPT4, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func getsockname(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, e := rawsocketcall(_GETSOCKNAME, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), 0, 0, 0)
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func getpeername(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, e := rawsocketcall(_GETPEERNAME, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), 0, 0, 0)
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func socketpair(domain int, typ int, flags int, fd *[2]int32) (err error) {
+	_, e := rawsocketcall(_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(flags), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, e := socketcall(_BIND, uintptr(s), uintptr(addr), uintptr(addrlen), 0, 0, 0)
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, e := socketcall(_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen), 0, 0, 0)
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	fd, e := rawsocketcall(_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto), 0, 0, 0)
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, e := socketcall(_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, e := socketcall(_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), vallen, 0)
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func recvfrom(s int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var base uintptr
+	if len(p) > 0 {
+		base = uintptr(unsafe.Pointer(&p[0]))
+	}
+	n, e := socketcall(_RECVFROM, uintptr(s), base, uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func sendto(s int, p []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var base uintptr
+	if len(p) > 0 {
+		base = uintptr(unsafe.Pointer(&p[0]))
+	}
+	_, e := socketcall(_SENDTO, uintptr(s), base, uintptr(len(p)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	n, e := socketcall(_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags), 0, 0, 0)
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	n, e := socketcall(_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags), 0, 0, 0)
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func Listen(s int, n int) (err error) {
+	_, e := socketcall(_LISTEN, uintptr(s), uintptr(n), 0, 0, 0, 0)
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func Shutdown(s, how int) (err error) {
+	_, e := socketcall(_SHUTDOWN, uintptr(s), uintptr(how), 0, 0, 0, 0)
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func Fstatfs(fd int, buf *Statfs_t) (err error) {
+	_, _, e := Syscall(SYS_FSTATFS64, uintptr(fd), unsafe.Sizeof(*buf), uintptr(unsafe.Pointer(buf)))
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func Statfs(path string, buf *Statfs_t) (err error) {
+	pathp, err := BytePtrFromString(path)
+	if err != nil {
+		return err
+	}
+	_, _, e := Syscall(SYS_STATFS64, uintptr(unsafe.Pointer(pathp)), unsafe.Sizeof(*buf), uintptr(unsafe.Pointer(buf)))
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func (r *PtraceRegs) PC() uint64 { return uint64(uint32(r.Eip)) }
+
+func (r *PtraceRegs) SetPC(pc uint64) { r.Eip = int32(pc) }
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint32(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = uint32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+//sys	poll(fds *PollFd, nfds int, timeout int) (n int, err error)
+
+func Poll(fds []PollFd, timeout int) (n int, err error) {
+	if len(fds) == 0 {
+		return poll(nil, 0, timeout)
+	}
+	return poll(&fds[0], len(fds), timeout)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_amd64.go
new file mode 100644
index 000000000..72efe86ed
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_amd64.go
@@ -0,0 +1,194 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build amd64,linux
+
+package unix
+
+//sys	dup2(oldfd int, newfd int) (err error)
+//sysnb	EpollCreate(size int) (fd int, err error)
+//sys	EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error)
+//sys	Fadvise(fd int, offset int64, length int64, advice int) (err error) = SYS_FADVISE64
+//sys	Fchown(fd int, uid int, gid int) (err error)
+//sys	Fstat(fd int, stat *Stat_t) (err error)
+//sys	Fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) = SYS_NEWFSTATAT
+//sys	Fstatfs(fd int, buf *Statfs_t) (err error)
+//sys	Ftruncate(fd int, length int64) (err error)
+//sysnb	Getegid() (egid int)
+//sysnb	Geteuid() (euid int)
+//sysnb	Getgid() (gid int)
+//sysnb	Getrlimit(resource int, rlim *Rlimit) (err error)
+//sysnb	Getuid() (uid int)
+//sysnb	inotifyInit() (fd int, err error)
+
+func InotifyInit() (fd int, err error) {
+	// First try inotify_init1, because Android's seccomp policy blocks the latter.
+	fd, err = InotifyInit1(0)
+	if err == ENOSYS {
+		fd, err = inotifyInit()
+	}
+	return
+}
+
+//sys	Ioperm(from int, num int, on int) (err error)
+//sys	Iopl(level int) (err error)
+//sys	Lchown(path string, uid int, gid int) (err error)
+//sys	Listen(s int, n int) (err error)
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	return Fstatat(AT_FDCWD, path, stat, AT_SYMLINK_NOFOLLOW)
+}
+
+//sys	Pause() (err error)
+//sys	Pread(fd int, p []byte, offset int64) (n int, err error) = SYS_PREAD64
+//sys	Pwrite(fd int, p []byte, offset int64) (n int, err error) = SYS_PWRITE64
+//sys	Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error)
+//sys	Seek(fd int, offset int64, whence int) (off int64, err error) = SYS_LSEEK
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	var ts *Timespec
+	if timeout != nil {
+		ts = &Timespec{Sec: timeout.Sec, Nsec: timeout.Usec * 1000}
+	}
+	return Pselect(nfd, r, w, e, ts, nil)
+}
+
+//sys	sendfile(outfd int, infd int, offset *int64, count int) (written int, err error)
+//sys	setfsgid(gid int) (prev int, err error)
+//sys	setfsuid(uid int) (prev int, err error)
+//sysnb	Setregid(rgid int, egid int) (err error)
+//sysnb	Setresgid(rgid int, egid int, sgid int) (err error)
+//sysnb	Setresuid(ruid int, euid int, suid int) (err error)
+//sysnb	Setrlimit(resource int, rlim *Rlimit) (err error)
+//sysnb	Setreuid(ruid int, euid int) (err error)
+//sys	Shutdown(fd int, how int) (err error)
+//sys	Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error)
+
+func Stat(path string, stat *Stat_t) (err error) {
+	// Use fstatat, because Android's seccomp policy blocks stat.
+	return Fstatat(AT_FDCWD, path, stat, 0)
+}
+
+//sys	Statfs(path string, buf *Statfs_t) (err error)
+//sys	SyncFileRange(fd int, off int64, n int64, flags int) (err error)
+//sys	Truncate(path string, length int64) (err error)
+//sys	Ustat(dev int, ubuf *Ustat_t) (err error)
+//sys	accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error)
+//sys	accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error)
+//sys	bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sysnb	getgroups(n int, list *_Gid_t) (nn int, err error)
+//sysnb	setgroups(n int, list *_Gid_t) (err error)
+//sys	getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error)
+//sys	setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error)
+//sysnb	socket(domain int, typ int, proto int) (fd int, err error)
+//sysnb	socketpair(domain int, typ int, proto int, fd *[2]int32) (err error)
+//sysnb	getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sysnb	getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sys	recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error)
+//sys	sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	recvmsg(s int, msg *Msghdr, flags int) (n int, err error)
+//sys	sendmsg(s int, msg *Msghdr, flags int) (n int, err error)
+//sys	mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error)
+
+//sys	futimesat(dirfd int, path string, times *[2]Timeval) (err error)
+
+func Gettimeofday(tv *Timeval) (err error) {
+	errno := gettimeofday(tv)
+	if errno != 0 {
+		return errno
+	}
+	return nil
+}
+
+func Time(t *Time_t) (tt Time_t, err error) {
+	var tv Timeval
+	errno := gettimeofday(&tv)
+	if errno != 0 {
+		return 0, errno
+	}
+	if t != nil {
+		*t = Time_t(tv.Sec)
+	}
+	return Time_t(tv.Sec), nil
+}
+
+//sys	Utime(path string, buf *Utimbuf) (err error)
+//sys	utimes(path string, times *[2]Timeval) (err error)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: usec}
+}
+
+//sysnb	pipe(p *[2]_C_int) (err error)
+
+func Pipe(p []int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe(&pp)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+//sysnb pipe2(p *[2]_C_int, flags int) (err error)
+
+func Pipe2(p []int, flags int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe2(&pp, flags)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+func (r *PtraceRegs) PC() uint64 { return r.Rip }
+
+func (r *PtraceRegs) SetPC(pc uint64) { r.Rip = pc }
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint64(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = uint64(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint64(length)
+}
+
+//sys	poll(fds *PollFd, nfds int, timeout int) (n int, err error)
+
+func Poll(fds []PollFd, timeout int) (n int, err error) {
+	if len(fds) == 0 {
+		return poll(nil, 0, timeout)
+	}
+	return poll(&fds[0], len(fds), timeout)
+}
+
+//sys	kexecFileLoad(kernelFd int, initrdFd int, cmdlineLen int, cmdline string, flags int) (err error)
+
+func KexecFileLoad(kernelFd int, initrdFd int, cmdline string, flags int) error {
+	cmdlineLen := len(cmdline)
+	if cmdlineLen > 0 {
+		// Account for the additional NULL byte added by
+		// BytePtrFromString in kexecFileLoad. The kexec_file_load
+		// syscall expects a NULL-terminated string.
+		cmdlineLen++
+	}
+	return kexecFileLoad(kernelFd, initrdFd, cmdlineLen, cmdline, flags)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_amd64_gc.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_amd64_gc.go
new file mode 100644
index 000000000..21a4946ba
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_amd64_gc.go
@@ -0,0 +1,13 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build amd64,linux
+// +build !gccgo
+
+package unix
+
+import "syscall"
+
+//go:noescape
+func gettimeofday(tv *Timeval) (err syscall.Errno)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_arm.go
new file mode 100644
index 000000000..496837b1e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_arm.go
@@ -0,0 +1,286 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build arm,linux
+
+package unix
+
+import (
+	"unsafe"
+)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: int32(sec), Nsec: int32(nsec)}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: int32(sec), Usec: int32(usec)}
+}
+
+//sysnb	pipe(p *[2]_C_int) (err error)
+
+func Pipe(p []int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	// Try pipe2 first for Android O, then try pipe for kernel 2.6.23.
+	err = pipe2(&pp, 0)
+	if err == ENOSYS {
+		err = pipe(&pp)
+	}
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+//sysnb pipe2(p *[2]_C_int, flags int) (err error)
+
+func Pipe2(p []int, flags int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe2(&pp, flags)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	newoffset, errno := seek(fd, offset, whence)
+	if errno != 0 {
+		return 0, errno
+	}
+	return newoffset, nil
+}
+
+//sys	accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error)
+//sys	accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error)
+//sys	bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sysnb	getgroups(n int, list *_Gid_t) (nn int, err error) = SYS_GETGROUPS32
+//sysnb	setgroups(n int, list *_Gid_t) (err error) = SYS_SETGROUPS32
+//sys	getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error)
+//sys	setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error)
+//sysnb	socket(domain int, typ int, proto int) (fd int, err error)
+//sysnb	getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sysnb	getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sys	recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error)
+//sys	sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error)
+//sysnb	socketpair(domain int, typ int, flags int, fd *[2]int32) (err error)
+//sys	recvmsg(s int, msg *Msghdr, flags int) (n int, err error)
+//sys	sendmsg(s int, msg *Msghdr, flags int) (n int, err error)
+
+// 64-bit file system and 32-bit uid calls
+// (16-bit uid calls are not always supported in newer kernels)
+//sys	dup2(oldfd int, newfd int) (err error)
+//sysnb	EpollCreate(size int) (fd int, err error)
+//sys	EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error)
+//sys	Fchown(fd int, uid int, gid int) (err error) = SYS_FCHOWN32
+//sys	Fstat(fd int, stat *Stat_t) (err error) = SYS_FSTAT64
+//sys	Fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) = SYS_FSTATAT64
+//sysnb	Getegid() (egid int) = SYS_GETEGID32
+//sysnb	Geteuid() (euid int) = SYS_GETEUID32
+//sysnb	Getgid() (gid int) = SYS_GETGID32
+//sysnb	Getuid() (uid int) = SYS_GETUID32
+//sysnb	InotifyInit() (fd int, err error)
+//sys	Lchown(path string, uid int, gid int) (err error) = SYS_LCHOWN32
+//sys	Listen(s int, n int) (err error)
+//sys	Lstat(path string, stat *Stat_t) (err error) = SYS_LSTAT64
+//sys	Pause() (err error)
+//sys	Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error)
+//sys	sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) = SYS_SENDFILE64
+//sys	Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) = SYS__NEWSELECT
+//sys	setfsgid(gid int) (prev int, err error) = SYS_SETFSGID32
+//sys	setfsuid(uid int) (prev int, err error) = SYS_SETFSUID32
+//sysnb	Setregid(rgid int, egid int) (err error) = SYS_SETREGID32
+//sysnb	Setresgid(rgid int, egid int, sgid int) (err error) = SYS_SETRESGID32
+//sysnb	Setresuid(ruid int, euid int, suid int) (err error) = SYS_SETRESUID32
+//sysnb	Setreuid(ruid int, euid int) (err error) = SYS_SETREUID32
+//sys	Shutdown(fd int, how int) (err error)
+//sys	Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int, err error)
+//sys	Stat(path string, stat *Stat_t) (err error) = SYS_STAT64
+//sys	Ustat(dev int, ubuf *Ustat_t) (err error)
+
+//sys	futimesat(dirfd int, path string, times *[2]Timeval) (err error)
+//sysnb	Gettimeofday(tv *Timeval) (err error)
+
+func Time(t *Time_t) (Time_t, error) {
+	var tv Timeval
+	err := Gettimeofday(&tv)
+	if err != nil {
+		return 0, err
+	}
+	if t != nil {
+		*t = Time_t(tv.Sec)
+	}
+	return Time_t(tv.Sec), nil
+}
+
+func Utime(path string, buf *Utimbuf) error {
+	tv := []Timeval{
+		{Sec: buf.Actime},
+		{Sec: buf.Modtime},
+	}
+	return Utimes(path, tv)
+}
+
+//sys	utimes(path string, times *[2]Timeval) (err error)
+
+//sys   Pread(fd int, p []byte, offset int64) (n int, err error) = SYS_PREAD64
+//sys   Pwrite(fd int, p []byte, offset int64) (n int, err error) = SYS_PWRITE64
+//sys	Truncate(path string, length int64) (err error) = SYS_TRUNCATE64
+//sys	Ftruncate(fd int, length int64) (err error) = SYS_FTRUNCATE64
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall6(SYS_ARM_FADVISE64_64, uintptr(fd), uintptr(advice), uintptr(offset), uintptr(offset>>32), uintptr(length), uintptr(length>>32))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+//sys	mmap2(addr uintptr, length uintptr, prot int, flags int, fd int, pageOffset uintptr) (xaddr uintptr, err error)
+
+func Fstatfs(fd int, buf *Statfs_t) (err error) {
+	_, _, e := Syscall(SYS_FSTATFS64, uintptr(fd), unsafe.Sizeof(*buf), uintptr(unsafe.Pointer(buf)))
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func Statfs(path string, buf *Statfs_t) (err error) {
+	pathp, err := BytePtrFromString(path)
+	if err != nil {
+		return err
+	}
+	_, _, e := Syscall(SYS_STATFS64, uintptr(unsafe.Pointer(pathp)), unsafe.Sizeof(*buf), uintptr(unsafe.Pointer(buf)))
+	if e != 0 {
+		err = e
+	}
+	return
+}
+
+func mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error) {
+	page := uintptr(offset / 4096)
+	if offset != int64(page)*4096 {
+		return 0, EINVAL
+	}
+	return mmap2(addr, length, prot, flags, fd, page)
+}
+
+type rlimit32 struct {
+	Cur uint32
+	Max uint32
+}
+
+//sysnb getrlimit(resource int, rlim *rlimit32) (err error) = SYS_UGETRLIMIT
+
+const rlimInf32 = ^uint32(0)
+const rlimInf64 = ^uint64(0)
+
+func Getrlimit(resource int, rlim *Rlimit) (err error) {
+	err = prlimit(0, resource, nil, rlim)
+	if err != ENOSYS {
+		return err
+	}
+
+	rl := rlimit32{}
+	err = getrlimit(resource, &rl)
+	if err != nil {
+		return
+	}
+
+	if rl.Cur == rlimInf32 {
+		rlim.Cur = rlimInf64
+	} else {
+		rlim.Cur = uint64(rl.Cur)
+	}
+
+	if rl.Max == rlimInf32 {
+		rlim.Max = rlimInf64
+	} else {
+		rlim.Max = uint64(rl.Max)
+	}
+	return
+}
+
+//sysnb setrlimit(resource int, rlim *rlimit32) (err error) = SYS_SETRLIMIT
+
+func Setrlimit(resource int, rlim *Rlimit) (err error) {
+	err = prlimit(0, resource, rlim, nil)
+	if err != ENOSYS {
+		return err
+	}
+
+	rl := rlimit32{}
+	if rlim.Cur == rlimInf64 {
+		rl.Cur = rlimInf32
+	} else if rlim.Cur < uint64(rlimInf32) {
+		rl.Cur = uint32(rlim.Cur)
+	} else {
+		return EINVAL
+	}
+	if rlim.Max == rlimInf64 {
+		rl.Max = rlimInf32
+	} else if rlim.Max < uint64(rlimInf32) {
+		rl.Max = uint32(rlim.Max)
+	} else {
+		return EINVAL
+	}
+
+	return setrlimit(resource, &rl)
+}
+
+func (r *PtraceRegs) PC() uint64 { return uint64(r.Uregs[15]) }
+
+func (r *PtraceRegs) SetPC(pc uint64) { r.Uregs[15] = uint32(pc) }
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint32(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = uint32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+//sys	poll(fds *PollFd, nfds int, timeout int) (n int, err error)
+
+func Poll(fds []PollFd, timeout int) (n int, err error) {
+	if len(fds) == 0 {
+		return poll(nil, 0, timeout)
+	}
+	return poll(&fds[0], len(fds), timeout)
+}
+
+//sys	armSyncFileRange(fd int, flags int, off int64, n int64) (err error) = SYS_ARM_SYNC_FILE_RANGE
+
+func SyncFileRange(fd int, off int64, n int64, flags int) error {
+	// The sync_file_range and arm_sync_file_range syscalls differ only in the
+	// order of their arguments.
+	return armSyncFileRange(fd, flags, off, n)
+}
+
+//sys	kexecFileLoad(kernelFd int, initrdFd int, cmdlineLen int, cmdline string, flags int) (err error)
+
+func KexecFileLoad(kernelFd int, initrdFd int, cmdline string, flags int) error {
+	cmdlineLen := len(cmdline)
+	if cmdlineLen > 0 {
+		// Account for the additional NULL byte added by
+		// BytePtrFromString in kexecFileLoad. The kexec_file_load
+		// syscall expects a NULL-terminated string.
+		cmdlineLen++
+	}
+	return kexecFileLoad(kernelFd, initrdFd, cmdlineLen, cmdline, flags)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_arm64.go
new file mode 100644
index 000000000..c6de6b913
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_arm64.go
@@ -0,0 +1,245 @@
+// Copyright 2015 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build arm64,linux
+
+package unix
+
+import "unsafe"
+
+func EpollCreate(size int) (fd int, err error) {
+	if size <= 0 {
+		return -1, EINVAL
+	}
+	return EpollCreate1(0)
+}
+
+//sys	EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) = SYS_EPOLL_PWAIT
+//sys	Fadvise(fd int, offset int64, length int64, advice int) (err error) = SYS_FADVISE64
+//sys	Fchown(fd int, uid int, gid int) (err error)
+//sys	Fstat(fd int, stat *Stat_t) (err error)
+//sys	Fstatat(fd int, path string, stat *Stat_t, flags int) (err error)
+//sys	Fstatfs(fd int, buf *Statfs_t) (err error)
+//sys	Ftruncate(fd int, length int64) (err error)
+//sysnb	Getegid() (egid int)
+//sysnb	Geteuid() (euid int)
+//sysnb	Getgid() (gid int)
+//sysnb	getrlimit(resource int, rlim *Rlimit) (err error)
+//sysnb	Getuid() (uid int)
+//sys	Listen(s int, n int) (err error)
+//sys	Pread(fd int, p []byte, offset int64) (n int, err error) = SYS_PREAD64
+//sys	Pwrite(fd int, p []byte, offset int64) (n int, err error) = SYS_PWRITE64
+//sys	Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error)
+//sys	Seek(fd int, offset int64, whence int) (off int64, err error) = SYS_LSEEK
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	var ts *Timespec
+	if timeout != nil {
+		ts = &Timespec{Sec: timeout.Sec, Nsec: timeout.Usec * 1000}
+	}
+	return Pselect(nfd, r, w, e, ts, nil)
+}
+
+//sys	sendfile(outfd int, infd int, offset *int64, count int) (written int, err error)
+//sys	setfsgid(gid int) (prev int, err error)
+//sys	setfsuid(uid int) (prev int, err error)
+//sysnb	Setregid(rgid int, egid int) (err error)
+//sysnb	Setresgid(rgid int, egid int, sgid int) (err error)
+//sysnb	Setresuid(ruid int, euid int, suid int) (err error)
+//sysnb	setrlimit(resource int, rlim *Rlimit) (err error)
+//sysnb	Setreuid(ruid int, euid int) (err error)
+//sys	Shutdown(fd int, how int) (err error)
+//sys	Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error)
+
+func Stat(path string, stat *Stat_t) (err error) {
+	return Fstatat(AT_FDCWD, path, stat, 0)
+}
+
+func Lchown(path string, uid int, gid int) (err error) {
+	return Fchownat(AT_FDCWD, path, uid, gid, AT_SYMLINK_NOFOLLOW)
+}
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	return Fstatat(AT_FDCWD, path, stat, AT_SYMLINK_NOFOLLOW)
+}
+
+//sys	Statfs(path string, buf *Statfs_t) (err error)
+//sys	SyncFileRange(fd int, off int64, n int64, flags int) (err error)
+//sys	Truncate(path string, length int64) (err error)
+
+func Ustat(dev int, ubuf *Ustat_t) (err error) {
+	return ENOSYS
+}
+
+//sys	accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error)
+//sys	accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error)
+//sys	bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sysnb	getgroups(n int, list *_Gid_t) (nn int, err error)
+//sysnb	setgroups(n int, list *_Gid_t) (err error)
+//sys	getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error)
+//sys	setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error)
+//sysnb	socket(domain int, typ int, proto int) (fd int, err error)
+//sysnb	socketpair(domain int, typ int, proto int, fd *[2]int32) (err error)
+//sysnb	getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sysnb	getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sys	recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error)
+//sys	sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	recvmsg(s int, msg *Msghdr, flags int) (n int, err error)
+//sys	sendmsg(s int, msg *Msghdr, flags int) (n int, err error)
+//sys	mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error)
+
+//sysnb	Gettimeofday(tv *Timeval) (err error)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: usec}
+}
+
+func futimesat(dirfd int, path string, tv *[2]Timeval) (err error) {
+	if tv == nil {
+		return utimensat(dirfd, path, nil, 0)
+	}
+
+	ts := []Timespec{
+		NsecToTimespec(TimevalToNsec(tv[0])),
+		NsecToTimespec(TimevalToNsec(tv[1])),
+	}
+	return utimensat(dirfd, path, (*[2]Timespec)(unsafe.Pointer(&ts[0])), 0)
+}
+
+func Time(t *Time_t) (Time_t, error) {
+	var tv Timeval
+	err := Gettimeofday(&tv)
+	if err != nil {
+		return 0, err
+	}
+	if t != nil {
+		*t = Time_t(tv.Sec)
+	}
+	return Time_t(tv.Sec), nil
+}
+
+func Utime(path string, buf *Utimbuf) error {
+	tv := []Timeval{
+		{Sec: buf.Actime},
+		{Sec: buf.Modtime},
+	}
+	return Utimes(path, tv)
+}
+
+func utimes(path string, tv *[2]Timeval) (err error) {
+	if tv == nil {
+		return utimensat(AT_FDCWD, path, nil, 0)
+	}
+
+	ts := []Timespec{
+		NsecToTimespec(TimevalToNsec(tv[0])),
+		NsecToTimespec(TimevalToNsec(tv[1])),
+	}
+	return utimensat(AT_FDCWD, path, (*[2]Timespec)(unsafe.Pointer(&ts[0])), 0)
+}
+
+func Pipe(p []int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe2(&pp, 0)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+//sysnb pipe2(p *[2]_C_int, flags int) (err error)
+
+func Pipe2(p []int, flags int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe2(&pp, flags)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+// Getrlimit prefers the prlimit64 system call. See issue 38604.
+func Getrlimit(resource int, rlim *Rlimit) error {
+	err := prlimit(0, resource, nil, rlim)
+	if err != ENOSYS {
+		return err
+	}
+	return getrlimit(resource, rlim)
+}
+
+// Setrlimit prefers the prlimit64 system call. See issue 38604.
+func Setrlimit(resource int, rlim *Rlimit) error {
+	err := prlimit(0, resource, rlim, nil)
+	if err != ENOSYS {
+		return err
+	}
+	return setrlimit(resource, rlim)
+}
+
+func (r *PtraceRegs) PC() uint64 { return r.Pc }
+
+func (r *PtraceRegs) SetPC(pc uint64) { r.Pc = pc }
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint64(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = uint64(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint64(length)
+}
+
+func InotifyInit() (fd int, err error) {
+	return InotifyInit1(0)
+}
+
+// dup2 exists because func Dup3 in syscall_linux.go references
+// it in an unreachable path. dup2 isn't available on arm64.
+func dup2(oldfd int, newfd int) error
+
+func Pause() error {
+	_, err := ppoll(nil, 0, nil, nil)
+	return err
+}
+
+func Poll(fds []PollFd, timeout int) (n int, err error) {
+	var ts *Timespec
+	if timeout >= 0 {
+		ts = new(Timespec)
+		*ts = NsecToTimespec(int64(timeout) * 1e6)
+	}
+	if len(fds) == 0 {
+		return ppoll(nil, 0, ts, nil)
+	}
+	return ppoll(&fds[0], len(fds), ts, nil)
+}
+
+//sys	kexecFileLoad(kernelFd int, initrdFd int, cmdlineLen int, cmdline string, flags int) (err error)
+
+func KexecFileLoad(kernelFd int, initrdFd int, cmdline string, flags int) error {
+	cmdlineLen := len(cmdline)
+	if cmdlineLen > 0 {
+		// Account for the additional NULL byte added by
+		// BytePtrFromString in kexecFileLoad. The kexec_file_load
+		// syscall expects a NULL-terminated string.
+		cmdlineLen++
+	}
+	return kexecFileLoad(kernelFd, initrdFd, cmdlineLen, cmdline, flags)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gc.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gc.go
new file mode 100644
index 000000000..c26e6ec23
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gc.go
@@ -0,0 +1,14 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build linux,!gccgo
+
+package unix
+
+// SyscallNoError may be used instead of Syscall for syscalls that don't fail.
+func SyscallNoError(trap, a1, a2, a3 uintptr) (r1, r2 uintptr)
+
+// RawSyscallNoError may be used instead of RawSyscall for syscalls that don't
+// fail.
+func RawSyscallNoError(trap, a1, a2, a3 uintptr) (r1, r2 uintptr)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gc_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gc_386.go
new file mode 100644
index 000000000..070bd3899
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gc_386.go
@@ -0,0 +1,16 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build linux,!gccgo,386
+
+package unix
+
+import "syscall"
+
+// Underlying system call writes to newoffset via pointer.
+// Implemented in assembly to avoid allocation.
+func seek(fd int, offset int64, whence int) (newoffset int64, err syscall.Errno)
+
+func socketcall(call int, a0, a1, a2, a3, a4, a5 uintptr) (n int, err syscall.Errno)
+func rawsocketcall(call int, a0, a1, a2, a3, a4, a5 uintptr) (n int, err syscall.Errno)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gc_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gc_arm.go
new file mode 100644
index 000000000..8c514c95e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gc_arm.go
@@ -0,0 +1,13 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build arm,!gccgo,linux
+
+package unix
+
+import "syscall"
+
+// Underlying system call writes to newoffset via pointer.
+// Implemented in assembly to avoid allocation.
+func seek(fd int, offset int64, whence int) (newoffset int64, err syscall.Errno)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gccgo_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gccgo_386.go
new file mode 100644
index 000000000..308eb7aec
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gccgo_386.go
@@ -0,0 +1,30 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build linux,gccgo,386
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+func seek(fd int, offset int64, whence int) (int64, syscall.Errno) {
+	var newoffset int64
+	offsetLow := uint32(offset & 0xffffffff)
+	offsetHigh := uint32((offset >> 32) & 0xffffffff)
+	_, _, err := Syscall6(SYS__LLSEEK, uintptr(fd), uintptr(offsetHigh), uintptr(offsetLow), uintptr(unsafe.Pointer(&newoffset)), uintptr(whence), 0)
+	return newoffset, err
+}
+
+func socketcall(call int, a0, a1, a2, a3, a4, a5 uintptr) (int, syscall.Errno) {
+	fd, _, err := Syscall(SYS_SOCKETCALL, uintptr(call), uintptr(unsafe.Pointer(&a0)), 0)
+	return int(fd), err
+}
+
+func rawsocketcall(call int, a0, a1, a2, a3, a4, a5 uintptr) (int, syscall.Errno) {
+	fd, _, err := RawSyscall(SYS_SOCKETCALL, uintptr(call), uintptr(unsafe.Pointer(&a0)), 0)
+	return int(fd), err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gccgo_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gccgo_arm.go
new file mode 100644
index 000000000..aa7fc9e19
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_gccgo_arm.go
@@ -0,0 +1,20 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build linux,gccgo,arm
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+func seek(fd int, offset int64, whence int) (int64, syscall.Errno) {
+	var newoffset int64
+	offsetLow := uint32(offset & 0xffffffff)
+	offsetHigh := uint32((offset >> 32) & 0xffffffff)
+	_, _, err := Syscall6(SYS__LLSEEK, uintptr(fd), uintptr(offsetHigh), uintptr(offsetLow), uintptr(unsafe.Pointer(&newoffset)), uintptr(whence), 0)
+	return newoffset, err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_mips64x.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_mips64x.go
new file mode 100644
index 000000000..f0287476c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_mips64x.go
@@ -0,0 +1,230 @@
+// Copyright 2015 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build linux
+// +build mips64 mips64le
+
+package unix
+
+//sys	dup2(oldfd int, newfd int) (err error)
+//sysnb	EpollCreate(size int) (fd int, err error)
+//sys	EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error)
+//sys	Fadvise(fd int, offset int64, length int64, advice int) (err error) = SYS_FADVISE64
+//sys	Fchown(fd int, uid int, gid int) (err error)
+//sys	Fstatfs(fd int, buf *Statfs_t) (err error)
+//sys	Ftruncate(fd int, length int64) (err error)
+//sysnb	Getegid() (egid int)
+//sysnb	Geteuid() (euid int)
+//sysnb	Getgid() (gid int)
+//sysnb	Getrlimit(resource int, rlim *Rlimit) (err error)
+//sysnb	Getuid() (uid int)
+//sys	Lchown(path string, uid int, gid int) (err error)
+//sys	Listen(s int, n int) (err error)
+//sys	Pause() (err error)
+//sys	Pread(fd int, p []byte, offset int64) (n int, err error) = SYS_PREAD64
+//sys	Pwrite(fd int, p []byte, offset int64) (n int, err error) = SYS_PWRITE64
+//sys	Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error)
+//sys	Seek(fd int, offset int64, whence int) (off int64, err error) = SYS_LSEEK
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	var ts *Timespec
+	if timeout != nil {
+		ts = &Timespec{Sec: timeout.Sec, Nsec: timeout.Usec * 1000}
+	}
+	return Pselect(nfd, r, w, e, ts, nil)
+}
+
+//sys	sendfile(outfd int, infd int, offset *int64, count int) (written int, err error)
+//sys	setfsgid(gid int) (prev int, err error)
+//sys	setfsuid(uid int) (prev int, err error)
+//sysnb	Setregid(rgid int, egid int) (err error)
+//sysnb	Setresgid(rgid int, egid int, sgid int) (err error)
+//sysnb	Setresuid(ruid int, euid int, suid int) (err error)
+//sysnb	Setrlimit(resource int, rlim *Rlimit) (err error)
+//sysnb	Setreuid(ruid int, euid int) (err error)
+//sys	Shutdown(fd int, how int) (err error)
+//sys	Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error)
+//sys	Statfs(path string, buf *Statfs_t) (err error)
+//sys	SyncFileRange(fd int, off int64, n int64, flags int) (err error)
+//sys	Truncate(path string, length int64) (err error)
+//sys	Ustat(dev int, ubuf *Ustat_t) (err error)
+//sys	accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error)
+//sys	accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error)
+//sys	bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sysnb	getgroups(n int, list *_Gid_t) (nn int, err error)
+//sysnb	setgroups(n int, list *_Gid_t) (err error)
+//sys	getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error)
+//sys	setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error)
+//sysnb	socket(domain int, typ int, proto int) (fd int, err error)
+//sysnb	socketpair(domain int, typ int, proto int, fd *[2]int32) (err error)
+//sysnb	getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sysnb	getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sys	recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error)
+//sys	sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	recvmsg(s int, msg *Msghdr, flags int) (n int, err error)
+//sys	sendmsg(s int, msg *Msghdr, flags int) (n int, err error)
+//sys	mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error)
+
+//sys	futimesat(dirfd int, path string, times *[2]Timeval) (err error)
+//sysnb	Gettimeofday(tv *Timeval) (err error)
+
+func Time(t *Time_t) (tt Time_t, err error) {
+	var tv Timeval
+	err = Gettimeofday(&tv)
+	if err != nil {
+		return 0, err
+	}
+	if t != nil {
+		*t = Time_t(tv.Sec)
+	}
+	return Time_t(tv.Sec), nil
+}
+
+//sys	Utime(path string, buf *Utimbuf) (err error)
+//sys	utimes(path string, times *[2]Timeval) (err error)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: usec}
+}
+
+func Pipe(p []int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe2(&pp, 0)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+//sysnb pipe2(p *[2]_C_int, flags int) (err error)
+
+func Pipe2(p []int, flags int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe2(&pp, flags)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+func Ioperm(from int, num int, on int) (err error) {
+	return ENOSYS
+}
+
+func Iopl(level int) (err error) {
+	return ENOSYS
+}
+
+type stat_t struct {
+	Dev        uint32
+	Pad0       [3]int32
+	Ino        uint64
+	Mode       uint32
+	Nlink      uint32
+	Uid        uint32
+	Gid        uint32
+	Rdev       uint32
+	Pad1       [3]uint32
+	Size       int64
+	Atime      uint32
+	Atime_nsec uint32
+	Mtime      uint32
+	Mtime_nsec uint32
+	Ctime      uint32
+	Ctime_nsec uint32
+	Blksize    uint32
+	Pad2       uint32
+	Blocks     int64
+}
+
+//sys	fstat(fd int, st *stat_t) (err error)
+//sys	fstatat(dirfd int, path string, st *stat_t, flags int) (err error) = SYS_NEWFSTATAT
+//sys	lstat(path string, st *stat_t) (err error)
+//sys	stat(path string, st *stat_t) (err error)
+
+func Fstat(fd int, s *Stat_t) (err error) {
+	st := &stat_t{}
+	err = fstat(fd, st)
+	fillStat_t(s, st)
+	return
+}
+
+func Fstatat(dirfd int, path string, s *Stat_t, flags int) (err error) {
+	st := &stat_t{}
+	err = fstatat(dirfd, path, st, flags)
+	fillStat_t(s, st)
+	return
+}
+
+func Lstat(path string, s *Stat_t) (err error) {
+	st := &stat_t{}
+	err = lstat(path, st)
+	fillStat_t(s, st)
+	return
+}
+
+func Stat(path string, s *Stat_t) (err error) {
+	st := &stat_t{}
+	err = stat(path, st)
+	fillStat_t(s, st)
+	return
+}
+
+func fillStat_t(s *Stat_t, st *stat_t) {
+	s.Dev = st.Dev
+	s.Ino = st.Ino
+	s.Mode = st.Mode
+	s.Nlink = st.Nlink
+	s.Uid = st.Uid
+	s.Gid = st.Gid
+	s.Rdev = st.Rdev
+	s.Size = st.Size
+	s.Atim = Timespec{int64(st.Atime), int64(st.Atime_nsec)}
+	s.Mtim = Timespec{int64(st.Mtime), int64(st.Mtime_nsec)}
+	s.Ctim = Timespec{int64(st.Ctime), int64(st.Ctime_nsec)}
+	s.Blksize = st.Blksize
+	s.Blocks = st.Blocks
+}
+
+func (r *PtraceRegs) PC() uint64 { return r.Epc }
+
+func (r *PtraceRegs) SetPC(pc uint64) { r.Epc = pc }
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint64(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = uint64(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint64(length)
+}
+
+func InotifyInit() (fd int, err error) {
+	return InotifyInit1(0)
+}
+
+//sys	poll(fds *PollFd, nfds int, timeout int) (n int, err error)
+
+func Poll(fds []PollFd, timeout int) (n int, err error) {
+	if len(fds) == 0 {
+		return poll(nil, 0, timeout)
+	}
+	return poll(&fds[0], len(fds), timeout)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_mipsx.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_mipsx.go
new file mode 100644
index 000000000..c11328111
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_mipsx.go
@@ -0,0 +1,238 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build linux
+// +build mips mipsle
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+func Syscall9(trap, a1, a2, a3, a4, a5, a6, a7, a8, a9 uintptr) (r1, r2 uintptr, err syscall.Errno)
+
+//sys	dup2(oldfd int, newfd int) (err error)
+//sysnb	EpollCreate(size int) (fd int, err error)
+//sys	EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error)
+//sys	Fadvise(fd int, offset int64, length int64, advice int) (err error) = SYS_FADVISE64
+//sys	Fchown(fd int, uid int, gid int) (err error)
+//sys	Ftruncate(fd int, length int64) (err error) = SYS_FTRUNCATE64
+//sysnb	Getegid() (egid int)
+//sysnb	Geteuid() (euid int)
+//sysnb	Getgid() (gid int)
+//sysnb	Getuid() (uid int)
+//sys	Lchown(path string, uid int, gid int) (err error)
+//sys	Listen(s int, n int) (err error)
+//sys	Pread(fd int, p []byte, offset int64) (n int, err error) = SYS_PREAD64
+//sys	Pwrite(fd int, p []byte, offset int64) (n int, err error) = SYS_PWRITE64
+//sys	Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error)
+//sys	Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) = SYS__NEWSELECT
+//sys	sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) = SYS_SENDFILE64
+//sys	setfsgid(gid int) (prev int, err error)
+//sys	setfsuid(uid int) (prev int, err error)
+//sysnb	Setregid(rgid int, egid int) (err error)
+//sysnb	Setresgid(rgid int, egid int, sgid int) (err error)
+//sysnb	Setresuid(ruid int, euid int, suid int) (err error)
+//sysnb	Setreuid(ruid int, euid int) (err error)
+//sys	Shutdown(fd int, how int) (err error)
+//sys	Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int, err error)
+//sys	SyncFileRange(fd int, off int64, n int64, flags int) (err error)
+//sys	Truncate(path string, length int64) (err error) = SYS_TRUNCATE64
+//sys	Ustat(dev int, ubuf *Ustat_t) (err error)
+//sys	accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error)
+//sys	accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error)
+//sys	bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sysnb	getgroups(n int, list *_Gid_t) (nn int, err error)
+//sysnb	setgroups(n int, list *_Gid_t) (err error)
+//sys	getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error)
+//sys	setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error)
+//sysnb	socket(domain int, typ int, proto int) (fd int, err error)
+//sysnb	socketpair(domain int, typ int, proto int, fd *[2]int32) (err error)
+//sysnb	getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sysnb	getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sys	recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error)
+//sys	sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	recvmsg(s int, msg *Msghdr, flags int) (n int, err error)
+//sys	sendmsg(s int, msg *Msghdr, flags int) (n int, err error)
+
+//sysnb	InotifyInit() (fd int, err error)
+//sys	Ioperm(from int, num int, on int) (err error)
+//sys	Iopl(level int) (err error)
+
+//sys	futimesat(dirfd int, path string, times *[2]Timeval) (err error)
+//sysnb	Gettimeofday(tv *Timeval) (err error)
+//sysnb	Time(t *Time_t) (tt Time_t, err error)
+//sys	Utime(path string, buf *Utimbuf) (err error)
+//sys	utimes(path string, times *[2]Timeval) (err error)
+
+//sys	Lstat(path string, stat *Stat_t) (err error) = SYS_LSTAT64
+//sys	Fstat(fd int, stat *Stat_t) (err error) = SYS_FSTAT64
+//sys	Fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) = SYS_FSTATAT64
+//sys	Stat(path string, stat *Stat_t) (err error) = SYS_STAT64
+
+//sys	Pause() (err error)
+
+func Fstatfs(fd int, buf *Statfs_t) (err error) {
+	_, _, e := Syscall(SYS_FSTATFS64, uintptr(fd), unsafe.Sizeof(*buf), uintptr(unsafe.Pointer(buf)))
+	if e != 0 {
+		err = errnoErr(e)
+	}
+	return
+}
+
+func Statfs(path string, buf *Statfs_t) (err error) {
+	p, err := BytePtrFromString(path)
+	if err != nil {
+		return err
+	}
+	_, _, e := Syscall(SYS_STATFS64, uintptr(unsafe.Pointer(p)), unsafe.Sizeof(*buf), uintptr(unsafe.Pointer(buf)))
+	if e != 0 {
+		err = errnoErr(e)
+	}
+	return
+}
+
+func Seek(fd int, offset int64, whence int) (off int64, err error) {
+	_, _, e := Syscall6(SYS__LLSEEK, uintptr(fd), uintptr(offset>>32), uintptr(offset), uintptr(unsafe.Pointer(&off)), uintptr(whence), 0)
+	if e != 0 {
+		err = errnoErr(e)
+	}
+	return
+}
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: int32(sec), Nsec: int32(nsec)}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: int32(sec), Usec: int32(usec)}
+}
+
+//sysnb pipe2(p *[2]_C_int, flags int) (err error)
+
+func Pipe2(p []int, flags int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe2(&pp, flags)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+//sysnb pipe() (p1 int, p2 int, err error)
+
+func Pipe(p []int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	p[0], p[1], err = pipe()
+	return
+}
+
+//sys	mmap2(addr uintptr, length uintptr, prot int, flags int, fd int, pageOffset uintptr) (xaddr uintptr, err error)
+
+func mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error) {
+	page := uintptr(offset / 4096)
+	if offset != int64(page)*4096 {
+		return 0, EINVAL
+	}
+	return mmap2(addr, length, prot, flags, fd, page)
+}
+
+const rlimInf32 = ^uint32(0)
+const rlimInf64 = ^uint64(0)
+
+type rlimit32 struct {
+	Cur uint32
+	Max uint32
+}
+
+//sysnb getrlimit(resource int, rlim *rlimit32) (err error) = SYS_GETRLIMIT
+
+func Getrlimit(resource int, rlim *Rlimit) (err error) {
+	err = prlimit(0, resource, nil, rlim)
+	if err != ENOSYS {
+		return err
+	}
+
+	rl := rlimit32{}
+	err = getrlimit(resource, &rl)
+	if err != nil {
+		return
+	}
+
+	if rl.Cur == rlimInf32 {
+		rlim.Cur = rlimInf64
+	} else {
+		rlim.Cur = uint64(rl.Cur)
+	}
+
+	if rl.Max == rlimInf32 {
+		rlim.Max = rlimInf64
+	} else {
+		rlim.Max = uint64(rl.Max)
+	}
+	return
+}
+
+//sysnb setrlimit(resource int, rlim *rlimit32) (err error) = SYS_SETRLIMIT
+
+func Setrlimit(resource int, rlim *Rlimit) (err error) {
+	err = prlimit(0, resource, rlim, nil)
+	if err != ENOSYS {
+		return err
+	}
+
+	rl := rlimit32{}
+	if rlim.Cur == rlimInf64 {
+		rl.Cur = rlimInf32
+	} else if rlim.Cur < uint64(rlimInf32) {
+		rl.Cur = uint32(rlim.Cur)
+	} else {
+		return EINVAL
+	}
+	if rlim.Max == rlimInf64 {
+		rl.Max = rlimInf32
+	} else if rlim.Max < uint64(rlimInf32) {
+		rl.Max = uint32(rlim.Max)
+	} else {
+		return EINVAL
+	}
+
+	return setrlimit(resource, &rl)
+}
+
+func (r *PtraceRegs) PC() uint64 { return r.Epc }
+
+func (r *PtraceRegs) SetPC(pc uint64) { r.Epc = pc }
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint32(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = uint32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+//sys	poll(fds *PollFd, nfds int, timeout int) (n int, err error)
+
+func Poll(fds []PollFd, timeout int) (n int, err error) {
+	if len(fds) == 0 {
+		return poll(nil, 0, timeout)
+	}
+	return poll(&fds[0], len(fds), timeout)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_ppc64x.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_ppc64x.go
new file mode 100644
index 000000000..349374409
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_ppc64x.go
@@ -0,0 +1,156 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build linux
+// +build ppc64 ppc64le
+
+package unix
+
+//sys	dup2(oldfd int, newfd int) (err error)
+//sysnb	EpollCreate(size int) (fd int, err error)
+//sys	EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error)
+//sys	Fadvise(fd int, offset int64, length int64, advice int) (err error) = SYS_FADVISE64
+//sys	Fchown(fd int, uid int, gid int) (err error)
+//sys	Fstat(fd int, stat *Stat_t) (err error)
+//sys	Fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) = SYS_NEWFSTATAT
+//sys	Fstatfs(fd int, buf *Statfs_t) (err error)
+//sys	Ftruncate(fd int, length int64) (err error)
+//sysnb	Getegid() (egid int)
+//sysnb	Geteuid() (euid int)
+//sysnb	Getgid() (gid int)
+//sysnb	Getrlimit(resource int, rlim *Rlimit) (err error) = SYS_UGETRLIMIT
+//sysnb	Getuid() (uid int)
+//sysnb	InotifyInit() (fd int, err error)
+//sys	Ioperm(from int, num int, on int) (err error)
+//sys	Iopl(level int) (err error)
+//sys	Lchown(path string, uid int, gid int) (err error)
+//sys	Listen(s int, n int) (err error)
+//sys	Lstat(path string, stat *Stat_t) (err error)
+//sys	Pause() (err error)
+//sys	Pread(fd int, p []byte, offset int64) (n int, err error) = SYS_PREAD64
+//sys	Pwrite(fd int, p []byte, offset int64) (n int, err error) = SYS_PWRITE64
+//sys	Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error)
+//sys	Seek(fd int, offset int64, whence int) (off int64, err error) = SYS_LSEEK
+//sys	Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) = SYS__NEWSELECT
+//sys	sendfile(outfd int, infd int, offset *int64, count int) (written int, err error)
+//sys	setfsgid(gid int) (prev int, err error)
+//sys	setfsuid(uid int) (prev int, err error)
+//sysnb	Setregid(rgid int, egid int) (err error)
+//sysnb	Setresgid(rgid int, egid int, sgid int) (err error)
+//sysnb	Setresuid(ruid int, euid int, suid int) (err error)
+//sysnb	Setrlimit(resource int, rlim *Rlimit) (err error)
+//sysnb	Setreuid(ruid int, euid int) (err error)
+//sys	Shutdown(fd int, how int) (err error)
+//sys	Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error)
+//sys	Stat(path string, stat *Stat_t) (err error)
+//sys	Statfs(path string, buf *Statfs_t) (err error)
+//sys	Truncate(path string, length int64) (err error)
+//sys	Ustat(dev int, ubuf *Ustat_t) (err error)
+//sys	accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error)
+//sys	accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error)
+//sys	bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sysnb	getgroups(n int, list *_Gid_t) (nn int, err error)
+//sysnb	setgroups(n int, list *_Gid_t) (err error)
+//sys	getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error)
+//sys	setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error)
+//sysnb	socket(domain int, typ int, proto int) (fd int, err error)
+//sysnb	socketpair(domain int, typ int, proto int, fd *[2]int32) (err error)
+//sysnb	getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sysnb	getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sys	recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error)
+//sys	sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	recvmsg(s int, msg *Msghdr, flags int) (n int, err error)
+//sys	sendmsg(s int, msg *Msghdr, flags int) (n int, err error)
+//sys	mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error)
+
+//sys	futimesat(dirfd int, path string, times *[2]Timeval) (err error)
+//sysnb	Gettimeofday(tv *Timeval) (err error)
+//sysnb	Time(t *Time_t) (tt Time_t, err error)
+//sys	Utime(path string, buf *Utimbuf) (err error)
+//sys	utimes(path string, times *[2]Timeval) (err error)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: usec}
+}
+
+func (r *PtraceRegs) PC() uint64 { return r.Nip }
+
+func (r *PtraceRegs) SetPC(pc uint64) { r.Nip = pc }
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint64(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = uint64(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint64(length)
+}
+
+//sysnb pipe(p *[2]_C_int) (err error)
+
+func Pipe(p []int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe(&pp)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+//sysnb pipe2(p *[2]_C_int, flags int) (err error)
+
+func Pipe2(p []int, flags int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe2(&pp, flags)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+//sys	poll(fds *PollFd, nfds int, timeout int) (n int, err error)
+
+func Poll(fds []PollFd, timeout int) (n int, err error) {
+	if len(fds) == 0 {
+		return poll(nil, 0, timeout)
+	}
+	return poll(&fds[0], len(fds), timeout)
+}
+
+//sys	syncFileRange2(fd int, flags int, off int64, n int64) (err error) = SYS_SYNC_FILE_RANGE2
+
+func SyncFileRange(fd int, off int64, n int64, flags int) error {
+	// The sync_file_range and sync_file_range2 syscalls differ only in the
+	// order of their arguments.
+	return syncFileRange2(fd, flags, off, n)
+}
+
+//sys	kexecFileLoad(kernelFd int, initrdFd int, cmdlineLen int, cmdline string, flags int) (err error)
+
+func KexecFileLoad(kernelFd int, initrdFd int, cmdline string, flags int) error {
+	cmdlineLen := len(cmdline)
+	if cmdlineLen > 0 {
+		// Account for the additional NULL byte added by
+		// BytePtrFromString in kexecFileLoad. The kexec_file_load
+		// syscall expects a NULL-terminated string.
+		cmdlineLen++
+	}
+	return kexecFileLoad(kernelFd, initrdFd, cmdlineLen, cmdline, flags)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_riscv64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_riscv64.go
new file mode 100644
index 000000000..b0b150556
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_riscv64.go
@@ -0,0 +1,230 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build riscv64,linux
+
+package unix
+
+import "unsafe"
+
+func EpollCreate(size int) (fd int, err error) {
+	if size <= 0 {
+		return -1, EINVAL
+	}
+	return EpollCreate1(0)
+}
+
+//sys	EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) = SYS_EPOLL_PWAIT
+//sys	Fadvise(fd int, offset int64, length int64, advice int) (err error) = SYS_FADVISE64
+//sys	Fchown(fd int, uid int, gid int) (err error)
+//sys	Fstat(fd int, stat *Stat_t) (err error)
+//sys	Fstatat(fd int, path string, stat *Stat_t, flags int) (err error)
+//sys	Fstatfs(fd int, buf *Statfs_t) (err error)
+//sys	Ftruncate(fd int, length int64) (err error)
+//sysnb	Getegid() (egid int)
+//sysnb	Geteuid() (euid int)
+//sysnb	Getgid() (gid int)
+//sysnb	Getrlimit(resource int, rlim *Rlimit) (err error)
+//sysnb	Getuid() (uid int)
+//sys	Listen(s int, n int) (err error)
+//sys	Pread(fd int, p []byte, offset int64) (n int, err error) = SYS_PREAD64
+//sys	Pwrite(fd int, p []byte, offset int64) (n int, err error) = SYS_PWRITE64
+//sys	Seek(fd int, offset int64, whence int) (off int64, err error) = SYS_LSEEK
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	var ts *Timespec
+	if timeout != nil {
+		ts = &Timespec{Sec: timeout.Sec, Nsec: timeout.Usec * 1000}
+	}
+	return Pselect(nfd, r, w, e, ts, nil)
+}
+
+//sys	sendfile(outfd int, infd int, offset *int64, count int) (written int, err error)
+//sys	setfsgid(gid int) (prev int, err error)
+//sys	setfsuid(uid int) (prev int, err error)
+//sysnb	Setregid(rgid int, egid int) (err error)
+//sysnb	Setresgid(rgid int, egid int, sgid int) (err error)
+//sysnb	Setresuid(ruid int, euid int, suid int) (err error)
+//sysnb	Setrlimit(resource int, rlim *Rlimit) (err error)
+//sysnb	Setreuid(ruid int, euid int) (err error)
+//sys	Shutdown(fd int, how int) (err error)
+//sys	Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error)
+
+func Stat(path string, stat *Stat_t) (err error) {
+	return Fstatat(AT_FDCWD, path, stat, 0)
+}
+
+func Lchown(path string, uid int, gid int) (err error) {
+	return Fchownat(AT_FDCWD, path, uid, gid, AT_SYMLINK_NOFOLLOW)
+}
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	return Fstatat(AT_FDCWD, path, stat, AT_SYMLINK_NOFOLLOW)
+}
+
+//sys	Statfs(path string, buf *Statfs_t) (err error)
+//sys	SyncFileRange(fd int, off int64, n int64, flags int) (err error)
+//sys	Truncate(path string, length int64) (err error)
+
+func Ustat(dev int, ubuf *Ustat_t) (err error) {
+	return ENOSYS
+}
+
+//sys	accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error)
+//sys	accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error)
+//sys	bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sysnb	getgroups(n int, list *_Gid_t) (nn int, err error)
+//sysnb	setgroups(n int, list *_Gid_t) (err error)
+//sys	getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error)
+//sys	setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error)
+//sysnb	socket(domain int, typ int, proto int) (fd int, err error)
+//sysnb	socketpair(domain int, typ int, proto int, fd *[2]int32) (err error)
+//sysnb	getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sysnb	getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sys	recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error)
+//sys	sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	recvmsg(s int, msg *Msghdr, flags int) (n int, err error)
+//sys	sendmsg(s int, msg *Msghdr, flags int) (n int, err error)
+//sys	mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error)
+
+//sysnb	Gettimeofday(tv *Timeval) (err error)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: usec}
+}
+
+func futimesat(dirfd int, path string, tv *[2]Timeval) (err error) {
+	if tv == nil {
+		return utimensat(dirfd, path, nil, 0)
+	}
+
+	ts := []Timespec{
+		NsecToTimespec(TimevalToNsec(tv[0])),
+		NsecToTimespec(TimevalToNsec(tv[1])),
+	}
+	return utimensat(dirfd, path, (*[2]Timespec)(unsafe.Pointer(&ts[0])), 0)
+}
+
+func Time(t *Time_t) (Time_t, error) {
+	var tv Timeval
+	err := Gettimeofday(&tv)
+	if err != nil {
+		return 0, err
+	}
+	if t != nil {
+		*t = Time_t(tv.Sec)
+	}
+	return Time_t(tv.Sec), nil
+}
+
+func Utime(path string, buf *Utimbuf) error {
+	tv := []Timeval{
+		{Sec: buf.Actime},
+		{Sec: buf.Modtime},
+	}
+	return Utimes(path, tv)
+}
+
+func utimes(path string, tv *[2]Timeval) (err error) {
+	if tv == nil {
+		return utimensat(AT_FDCWD, path, nil, 0)
+	}
+
+	ts := []Timespec{
+		NsecToTimespec(TimevalToNsec(tv[0])),
+		NsecToTimespec(TimevalToNsec(tv[1])),
+	}
+	return utimensat(AT_FDCWD, path, (*[2]Timespec)(unsafe.Pointer(&ts[0])), 0)
+}
+
+func Pipe(p []int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe2(&pp, 0)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+//sysnb pipe2(p *[2]_C_int, flags int) (err error)
+
+func Pipe2(p []int, flags int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe2(&pp, flags)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+func (r *PtraceRegs) PC() uint64 { return r.Pc }
+
+func (r *PtraceRegs) SetPC(pc uint64) { r.Pc = pc }
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint64(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = uint64(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint64(length)
+}
+
+func InotifyInit() (fd int, err error) {
+	return InotifyInit1(0)
+}
+
+func Pause() error {
+	_, err := ppoll(nil, 0, nil, nil)
+	return err
+}
+
+func Poll(fds []PollFd, timeout int) (n int, err error) {
+	var ts *Timespec
+	if timeout >= 0 {
+		ts = new(Timespec)
+		*ts = NsecToTimespec(int64(timeout) * 1e6)
+	}
+	if len(fds) == 0 {
+		return ppoll(nil, 0, ts, nil)
+	}
+	return ppoll(&fds[0], len(fds), ts, nil)
+}
+
+func Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error) {
+	return Renameat2(olddirfd, oldpath, newdirfd, newpath, 0)
+}
+
+//sys	kexecFileLoad(kernelFd int, initrdFd int, cmdlineLen int, cmdline string, flags int) (err error)
+
+func KexecFileLoad(kernelFd int, initrdFd int, cmdline string, flags int) error {
+	cmdlineLen := len(cmdline)
+	if cmdlineLen > 0 {
+		// Account for the additional NULL byte added by
+		// BytePtrFromString in kexecFileLoad. The kexec_file_load
+		// syscall expects a NULL-terminated string.
+		cmdlineLen++
+	}
+	return kexecFileLoad(kernelFd, initrdFd, cmdlineLen, cmdline, flags)
+}
+
+// dup2 exists because func Dup3 in syscall_linux.go references
+// it in an unreachable path. dup2 isn't available on arm64.
+func dup2(oldfd int, newfd int) error
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_s390x.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_s390x.go
new file mode 100644
index 000000000..2363f7499
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_s390x.go
@@ -0,0 +1,342 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build s390x,linux
+
+package unix
+
+import (
+	"unsafe"
+)
+
+//sys	dup2(oldfd int, newfd int) (err error)
+//sysnb	EpollCreate(size int) (fd int, err error)
+//sys	EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error)
+//sys	Fadvise(fd int, offset int64, length int64, advice int) (err error) = SYS_FADVISE64
+//sys	Fchown(fd int, uid int, gid int) (err error)
+//sys	Fstat(fd int, stat *Stat_t) (err error)
+//sys	Fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) = SYS_NEWFSTATAT
+//sys	Fstatfs(fd int, buf *Statfs_t) (err error)
+//sys	Ftruncate(fd int, length int64) (err error)
+//sysnb	Getegid() (egid int)
+//sysnb	Geteuid() (euid int)
+//sysnb	Getgid() (gid int)
+//sysnb	Getrlimit(resource int, rlim *Rlimit) (err error)
+//sysnb	Getuid() (uid int)
+//sysnb	InotifyInit() (fd int, err error)
+//sys	Lchown(path string, uid int, gid int) (err error)
+//sys	Lstat(path string, stat *Stat_t) (err error)
+//sys	Pause() (err error)
+//sys	Pread(fd int, p []byte, offset int64) (n int, err error) = SYS_PREAD64
+//sys	Pwrite(fd int, p []byte, offset int64) (n int, err error) = SYS_PWRITE64
+//sys	Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error)
+//sys	Seek(fd int, offset int64, whence int) (off int64, err error) = SYS_LSEEK
+//sys	Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error)
+//sys	sendfile(outfd int, infd int, offset *int64, count int) (written int, err error)
+//sys	setfsgid(gid int) (prev int, err error)
+//sys	setfsuid(uid int) (prev int, err error)
+//sysnb	Setregid(rgid int, egid int) (err error)
+//sysnb	Setresgid(rgid int, egid int, sgid int) (err error)
+//sysnb	Setresuid(ruid int, euid int, suid int) (err error)
+//sysnb	Setrlimit(resource int, rlim *Rlimit) (err error)
+//sysnb	Setreuid(ruid int, euid int) (err error)
+//sys	Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error)
+//sys	Stat(path string, stat *Stat_t) (err error)
+//sys	Statfs(path string, buf *Statfs_t) (err error)
+//sys	SyncFileRange(fd int, off int64, n int64, flags int) (err error)
+//sys	Truncate(path string, length int64) (err error)
+//sys	Ustat(dev int, ubuf *Ustat_t) (err error)
+//sysnb	getgroups(n int, list *_Gid_t) (nn int, err error)
+//sysnb	setgroups(n int, list *_Gid_t) (err error)
+
+//sys	futimesat(dirfd int, path string, times *[2]Timeval) (err error)
+//sysnb	Gettimeofday(tv *Timeval) (err error)
+
+func Time(t *Time_t) (tt Time_t, err error) {
+	var tv Timeval
+	err = Gettimeofday(&tv)
+	if err != nil {
+		return 0, err
+	}
+	if t != nil {
+		*t = Time_t(tv.Sec)
+	}
+	return Time_t(tv.Sec), nil
+}
+
+//sys	Utime(path string, buf *Utimbuf) (err error)
+//sys	utimes(path string, times *[2]Timeval) (err error)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: usec}
+}
+
+//sysnb pipe2(p *[2]_C_int, flags int) (err error)
+
+func Pipe(p []int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe2(&pp, 0) // pipe2 is the same as pipe when flags are set to 0.
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+func Pipe2(p []int, flags int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe2(&pp, flags)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+func Ioperm(from int, num int, on int) (err error) {
+	return ENOSYS
+}
+
+func Iopl(level int) (err error) {
+	return ENOSYS
+}
+
+func (r *PtraceRegs) PC() uint64 { return r.Psw.Addr }
+
+func (r *PtraceRegs) SetPC(pc uint64) { r.Psw.Addr = pc }
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint64(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = uint64(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint64(length)
+}
+
+// Linux on s390x uses the old mmap interface, which requires arguments to be passed in a struct.
+// mmap2 also requires arguments to be passed in a struct; it is currently not exposed in <asm/unistd.h>.
+func mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error) {
+	mmap_args := [6]uintptr{addr, length, uintptr(prot), uintptr(flags), uintptr(fd), uintptr(offset)}
+	r0, _, e1 := Syscall(SYS_MMAP, uintptr(unsafe.Pointer(&mmap_args[0])), 0, 0)
+	xaddr = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// On s390x Linux, all the socket calls go through an extra indirection.
+// The arguments to the underlying system call (SYS_SOCKETCALL) are the
+// number below and a pointer to an array of uintptr.
+const (
+	// see linux/net.h
+	netSocket      = 1
+	netBind        = 2
+	netConnect     = 3
+	netListen      = 4
+	netAccept      = 5
+	netGetSockName = 6
+	netGetPeerName = 7
+	netSocketPair  = 8
+	netSend        = 9
+	netRecv        = 10
+	netSendTo      = 11
+	netRecvFrom    = 12
+	netShutdown    = 13
+	netSetSockOpt  = 14
+	netGetSockOpt  = 15
+	netSendMsg     = 16
+	netRecvMsg     = 17
+	netAccept4     = 18
+	netRecvMMsg    = 19
+	netSendMMsg    = 20
+)
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (int, error) {
+	args := [3]uintptr{uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen))}
+	fd, _, err := Syscall(SYS_SOCKETCALL, netAccept, uintptr(unsafe.Pointer(&args)), 0)
+	if err != 0 {
+		return 0, err
+	}
+	return int(fd), nil
+}
+
+func accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (int, error) {
+	args := [4]uintptr{uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags)}
+	fd, _, err := Syscall(SYS_SOCKETCALL, netAccept4, uintptr(unsafe.Pointer(&args)), 0)
+	if err != 0 {
+		return 0, err
+	}
+	return int(fd), nil
+}
+
+func getsockname(s int, rsa *RawSockaddrAny, addrlen *_Socklen) error {
+	args := [3]uintptr{uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen))}
+	_, _, err := RawSyscall(SYS_SOCKETCALL, netGetSockName, uintptr(unsafe.Pointer(&args)), 0)
+	if err != 0 {
+		return err
+	}
+	return nil
+}
+
+func getpeername(s int, rsa *RawSockaddrAny, addrlen *_Socklen) error {
+	args := [3]uintptr{uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen))}
+	_, _, err := RawSyscall(SYS_SOCKETCALL, netGetPeerName, uintptr(unsafe.Pointer(&args)), 0)
+	if err != 0 {
+		return err
+	}
+	return nil
+}
+
+func socketpair(domain int, typ int, flags int, fd *[2]int32) error {
+	args := [4]uintptr{uintptr(domain), uintptr(typ), uintptr(flags), uintptr(unsafe.Pointer(fd))}
+	_, _, err := RawSyscall(SYS_SOCKETCALL, netSocketPair, uintptr(unsafe.Pointer(&args)), 0)
+	if err != 0 {
+		return err
+	}
+	return nil
+}
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) error {
+	args := [3]uintptr{uintptr(s), uintptr(addr), uintptr(addrlen)}
+	_, _, err := Syscall(SYS_SOCKETCALL, netBind, uintptr(unsafe.Pointer(&args)), 0)
+	if err != 0 {
+		return err
+	}
+	return nil
+}
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) error {
+	args := [3]uintptr{uintptr(s), uintptr(addr), uintptr(addrlen)}
+	_, _, err := Syscall(SYS_SOCKETCALL, netConnect, uintptr(unsafe.Pointer(&args)), 0)
+	if err != 0 {
+		return err
+	}
+	return nil
+}
+
+func socket(domain int, typ int, proto int) (int, error) {
+	args := [3]uintptr{uintptr(domain), uintptr(typ), uintptr(proto)}
+	fd, _, err := RawSyscall(SYS_SOCKETCALL, netSocket, uintptr(unsafe.Pointer(&args)), 0)
+	if err != 0 {
+		return 0, err
+	}
+	return int(fd), nil
+}
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) error {
+	args := [5]uintptr{uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen))}
+	_, _, err := Syscall(SYS_SOCKETCALL, netGetSockOpt, uintptr(unsafe.Pointer(&args)), 0)
+	if err != 0 {
+		return err
+	}
+	return nil
+}
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) error {
+	args := [4]uintptr{uintptr(s), uintptr(level), uintptr(name), uintptr(val)}
+	_, _, err := Syscall(SYS_SOCKETCALL, netSetSockOpt, uintptr(unsafe.Pointer(&args)), 0)
+	if err != 0 {
+		return err
+	}
+	return nil
+}
+
+func recvfrom(s int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (int, error) {
+	var base uintptr
+	if len(p) > 0 {
+		base = uintptr(unsafe.Pointer(&p[0]))
+	}
+	args := [6]uintptr{uintptr(s), base, uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen))}
+	n, _, err := Syscall(SYS_SOCKETCALL, netRecvFrom, uintptr(unsafe.Pointer(&args)), 0)
+	if err != 0 {
+		return 0, err
+	}
+	return int(n), nil
+}
+
+func sendto(s int, p []byte, flags int, to unsafe.Pointer, addrlen _Socklen) error {
+	var base uintptr
+	if len(p) > 0 {
+		base = uintptr(unsafe.Pointer(&p[0]))
+	}
+	args := [6]uintptr{uintptr(s), base, uintptr(len(p)), uintptr(flags), uintptr(to), uintptr(addrlen)}
+	_, _, err := Syscall(SYS_SOCKETCALL, netSendTo, uintptr(unsafe.Pointer(&args)), 0)
+	if err != 0 {
+		return err
+	}
+	return nil
+}
+
+func recvmsg(s int, msg *Msghdr, flags int) (int, error) {
+	args := [3]uintptr{uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags)}
+	n, _, err := Syscall(SYS_SOCKETCALL, netRecvMsg, uintptr(unsafe.Pointer(&args)), 0)
+	if err != 0 {
+		return 0, err
+	}
+	return int(n), nil
+}
+
+func sendmsg(s int, msg *Msghdr, flags int) (int, error) {
+	args := [3]uintptr{uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags)}
+	n, _, err := Syscall(SYS_SOCKETCALL, netSendMsg, uintptr(unsafe.Pointer(&args)), 0)
+	if err != 0 {
+		return 0, err
+	}
+	return int(n), nil
+}
+
+func Listen(s int, n int) error {
+	args := [2]uintptr{uintptr(s), uintptr(n)}
+	_, _, err := Syscall(SYS_SOCKETCALL, netListen, uintptr(unsafe.Pointer(&args)), 0)
+	if err != 0 {
+		return err
+	}
+	return nil
+}
+
+func Shutdown(s, how int) error {
+	args := [2]uintptr{uintptr(s), uintptr(how)}
+	_, _, err := Syscall(SYS_SOCKETCALL, netShutdown, uintptr(unsafe.Pointer(&args)), 0)
+	if err != 0 {
+		return err
+	}
+	return nil
+}
+
+//sys	poll(fds *PollFd, nfds int, timeout int) (n int, err error)
+
+func Poll(fds []PollFd, timeout int) (n int, err error) {
+	if len(fds) == 0 {
+		return poll(nil, 0, timeout)
+	}
+	return poll(&fds[0], len(fds), timeout)
+}
+
+//sys	kexecFileLoad(kernelFd int, initrdFd int, cmdlineLen int, cmdline string, flags int) (err error)
+
+func KexecFileLoad(kernelFd int, initrdFd int, cmdline string, flags int) error {
+	cmdlineLen := len(cmdline)
+	if cmdlineLen > 0 {
+		// Account for the additional NULL byte added by
+		// BytePtrFromString in kexecFileLoad. The kexec_file_load
+		// syscall expects a NULL-terminated string.
+		cmdlineLen++
+	}
+	return kexecFileLoad(kernelFd, initrdFd, cmdlineLen, cmdline, flags)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_sparc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_sparc64.go
new file mode 100644
index 000000000..d389f1518
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_linux_sparc64.go
@@ -0,0 +1,151 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build sparc64,linux
+
+package unix
+
+//sys	EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error)
+//sys	Fadvise(fd int, offset int64, length int64, advice int) (err error) = SYS_FADVISE64
+//sys	dup2(oldfd int, newfd int) (err error)
+//sys	Fchown(fd int, uid int, gid int) (err error)
+//sys	Fstat(fd int, stat *Stat_t) (err error)
+//sys	Fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) = SYS_FSTATAT64
+//sys	Fstatfs(fd int, buf *Statfs_t) (err error)
+//sys	Ftruncate(fd int, length int64) (err error)
+//sysnb	Getegid() (egid int)
+//sysnb	Geteuid() (euid int)
+//sysnb	Getgid() (gid int)
+//sysnb	Getrlimit(resource int, rlim *Rlimit) (err error)
+//sysnb	Getuid() (uid int)
+//sysnb	InotifyInit() (fd int, err error)
+//sys	Lchown(path string, uid int, gid int) (err error)
+//sys	Listen(s int, n int) (err error)
+//sys	Lstat(path string, stat *Stat_t) (err error)
+//sys	Pause() (err error)
+//sys	Pread(fd int, p []byte, offset int64) (n int, err error) = SYS_PREAD64
+//sys	Pwrite(fd int, p []byte, offset int64) (n int, err error) = SYS_PWRITE64
+//sys	Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error)
+//sys	Seek(fd int, offset int64, whence int) (off int64, err error) = SYS_LSEEK
+//sys	Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error)
+//sys	sendfile(outfd int, infd int, offset *int64, count int) (written int, err error)
+//sys	setfsgid(gid int) (prev int, err error)
+//sys	setfsuid(uid int) (prev int, err error)
+//sysnb	Setregid(rgid int, egid int) (err error)
+//sysnb	Setresgid(rgid int, egid int, sgid int) (err error)
+//sysnb	Setresuid(ruid int, euid int, suid int) (err error)
+//sysnb	Setrlimit(resource int, rlim *Rlimit) (err error)
+//sysnb	Setreuid(ruid int, euid int) (err error)
+//sys	Shutdown(fd int, how int) (err error)
+//sys	Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error)
+//sys	Stat(path string, stat *Stat_t) (err error)
+//sys	Statfs(path string, buf *Statfs_t) (err error)
+//sys	SyncFileRange(fd int, off int64, n int64, flags int) (err error)
+//sys	Truncate(path string, length int64) (err error)
+//sys	accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error)
+//sys	accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error)
+//sys	bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error)
+//sysnb	getgroups(n int, list *_Gid_t) (nn int, err error)
+//sysnb	setgroups(n int, list *_Gid_t) (err error)
+//sys	getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error)
+//sys	setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error)
+//sysnb	socket(domain int, typ int, proto int) (fd int, err error)
+//sysnb	socketpair(domain int, typ int, proto int, fd *[2]int32) (err error)
+//sysnb	getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sysnb	getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error)
+//sys	recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error)
+//sys	sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error)
+//sys	recvmsg(s int, msg *Msghdr, flags int) (n int, err error)
+//sys	sendmsg(s int, msg *Msghdr, flags int) (n int, err error)
+//sys	mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error)
+
+func Ioperm(from int, num int, on int) (err error) {
+	return ENOSYS
+}
+
+func Iopl(level int) (err error) {
+	return ENOSYS
+}
+
+//sys	futimesat(dirfd int, path string, times *[2]Timeval) (err error)
+//sysnb	Gettimeofday(tv *Timeval) (err error)
+
+func Time(t *Time_t) (tt Time_t, err error) {
+	var tv Timeval
+	err = Gettimeofday(&tv)
+	if err != nil {
+		return 0, err
+	}
+	if t != nil {
+		*t = Time_t(tv.Sec)
+	}
+	return Time_t(tv.Sec), nil
+}
+
+//sys	Utime(path string, buf *Utimbuf) (err error)
+//sys	utimes(path string, times *[2]Timeval) (err error)
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: int32(usec)}
+}
+
+func (r *PtraceRegs) PC() uint64 { return r.Tpc }
+
+func (r *PtraceRegs) SetPC(pc uint64) { r.Tpc = pc }
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint64(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = uint64(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint64(length)
+}
+
+//sysnb pipe(p *[2]_C_int) (err error)
+
+func Pipe(p []int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe(&pp)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+//sysnb pipe2(p *[2]_C_int, flags int) (err error)
+
+func Pipe2(p []int, flags int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err = pipe2(&pp, flags)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return
+}
+
+//sys	poll(fds *PollFd, nfds int, timeout int) (n int, err error)
+
+func Poll(fds []PollFd, timeout int) (n int, err error) {
+	if len(fds) == 0 {
+		return poll(nil, 0, timeout)
+	}
+	return poll(&fds[0], len(fds), timeout)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd.go
new file mode 100644
index 000000000..dbd5e03b6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd.go
@@ -0,0 +1,599 @@
+// Copyright 2009,2010 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// NetBSD system calls.
+// This file is compiled as ordinary Go code,
+// but it is also input to mksyscall,
+// which parses the //sys lines and generates system call stubs.
+// Note that sometimes we use a lowercase //sys name and wrap
+// it in our own nicer implementation, either here or in
+// syscall_bsd.go or syscall_unix.go.
+
+package unix
+
+import (
+	"runtime"
+	"syscall"
+	"unsafe"
+)
+
+// SockaddrDatalink implements the Sockaddr interface for AF_LINK type sockets.
+type SockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [12]int8
+	raw    RawSockaddrDatalink
+}
+
+func Syscall9(trap, a1, a2, a3, a4, a5, a6, a7, a8, a9 uintptr) (r1, r2 uintptr, err syscall.Errno)
+
+func sysctlNodes(mib []_C_int) (nodes []Sysctlnode, err error) {
+	var olen uintptr
+
+	// Get a list of all sysctl nodes below the given MIB by performing
+	// a sysctl for the given MIB with CTL_QUERY appended.
+	mib = append(mib, CTL_QUERY)
+	qnode := Sysctlnode{Flags: SYSCTL_VERS_1}
+	qp := (*byte)(unsafe.Pointer(&qnode))
+	sz := unsafe.Sizeof(qnode)
+	if err = sysctl(mib, nil, &olen, qp, sz); err != nil {
+		return nil, err
+	}
+
+	// Now that we know the size, get the actual nodes.
+	nodes = make([]Sysctlnode, olen/sz)
+	np := (*byte)(unsafe.Pointer(&nodes[0]))
+	if err = sysctl(mib, np, &olen, qp, sz); err != nil {
+		return nil, err
+	}
+
+	return nodes, nil
+}
+
+func nametomib(name string) (mib []_C_int, err error) {
+	// Split name into components.
+	var parts []string
+	last := 0
+	for i := 0; i < len(name); i++ {
+		if name[i] == '.' {
+			parts = append(parts, name[last:i])
+			last = i + 1
+		}
+	}
+	parts = append(parts, name[last:])
+
+	// Discover the nodes and construct the MIB OID.
+	for partno, part := range parts {
+		nodes, err := sysctlNodes(mib)
+		if err != nil {
+			return nil, err
+		}
+		for _, node := range nodes {
+			n := make([]byte, 0)
+			for i := range node.Name {
+				if node.Name[i] != 0 {
+					n = append(n, byte(node.Name[i]))
+				}
+			}
+			if string(n) == part {
+				mib = append(mib, _C_int(node.Num))
+				break
+			}
+		}
+		if len(mib) != partno+1 {
+			return nil, EINVAL
+		}
+	}
+
+	return mib, nil
+}
+
+func direntIno(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Fileno), unsafe.Sizeof(Dirent{}.Fileno))
+}
+
+func direntReclen(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Reclen), unsafe.Sizeof(Dirent{}.Reclen))
+}
+
+func direntNamlen(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Namlen), unsafe.Sizeof(Dirent{}.Namlen))
+}
+
+//sysnb pipe() (fd1 int, fd2 int, err error)
+func Pipe(p []int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	p[0], p[1], err = pipe()
+	return
+}
+
+//sys Getdents(fd int, buf []byte) (n int, err error)
+func Getdirentries(fd int, buf []byte, basep *uintptr) (n int, err error) {
+	n, err = Getdents(fd, buf)
+	if err != nil || basep == nil {
+		return
+	}
+
+	var off int64
+	off, err = Seek(fd, 0, 1 /* SEEK_CUR */)
+	if err != nil {
+		*basep = ^uintptr(0)
+		return
+	}
+	*basep = uintptr(off)
+	if unsafe.Sizeof(*basep) == 8 {
+		return
+	}
+	if off>>32 != 0 {
+		// We can't stuff the offset back into a uintptr, so any
+		// future calls would be suspect. Generate an error.
+		// EIO is allowed by getdirentries.
+		err = EIO
+	}
+	return
+}
+
+//sys	Getcwd(buf []byte) (n int, err error) = SYS___GETCWD
+
+// TODO
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	return -1, ENOSYS
+}
+
+func setattrlistTimes(path string, times []Timespec, flags int) error {
+	// used on Darwin for UtimesNano
+	return ENOSYS
+}
+
+//sys	ioctl(fd int, req uint, arg uintptr) (err error)
+
+//sys   sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) = SYS___SYSCTL
+
+func IoctlGetPtmget(fd int, req uint) (*Ptmget, error) {
+	var value Ptmget
+	err := ioctl(fd, req, uintptr(unsafe.Pointer(&value)))
+	runtime.KeepAlive(value)
+	return &value, err
+}
+
+func Uname(uname *Utsname) error {
+	mib := []_C_int{CTL_KERN, KERN_OSTYPE}
+	n := unsafe.Sizeof(uname.Sysname)
+	if err := sysctl(mib, &uname.Sysname[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	mib = []_C_int{CTL_KERN, KERN_HOSTNAME}
+	n = unsafe.Sizeof(uname.Nodename)
+	if err := sysctl(mib, &uname.Nodename[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	mib = []_C_int{CTL_KERN, KERN_OSRELEASE}
+	n = unsafe.Sizeof(uname.Release)
+	if err := sysctl(mib, &uname.Release[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	mib = []_C_int{CTL_KERN, KERN_VERSION}
+	n = unsafe.Sizeof(uname.Version)
+	if err := sysctl(mib, &uname.Version[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	// The version might have newlines or tabs in it, convert them to
+	// spaces.
+	for i, b := range uname.Version {
+		if b == '\n' || b == '\t' {
+			if i == len(uname.Version)-1 {
+				uname.Version[i] = 0
+			} else {
+				uname.Version[i] = ' '
+			}
+		}
+	}
+
+	mib = []_C_int{CTL_HW, HW_MACHINE}
+	n = unsafe.Sizeof(uname.Machine)
+	if err := sysctl(mib, &uname.Machine[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func Sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	if raceenabled {
+		raceReleaseMerge(unsafe.Pointer(&ioSync))
+	}
+	return sendfile(outfd, infd, offset, count)
+}
+
+func Fstatvfs(fd int, buf *Statvfs_t) (err error) {
+	return Fstatvfs1(fd, buf, ST_WAIT)
+}
+
+func Statvfs(path string, buf *Statvfs_t) (err error) {
+	return Statvfs1(path, buf, ST_WAIT)
+}
+
+/*
+ * Exposed directly
+ */
+//sys	Access(path string, mode uint32) (err error)
+//sys	Adjtime(delta *Timeval, olddelta *Timeval) (err error)
+//sys	Chdir(path string) (err error)
+//sys	Chflags(path string, flags int) (err error)
+//sys	Chmod(path string, mode uint32) (err error)
+//sys	Chown(path string, uid int, gid int) (err error)
+//sys	Chroot(path string) (err error)
+//sys	Close(fd int) (err error)
+//sys	Dup(fd int) (nfd int, err error)
+//sys	Dup2(from int, to int) (err error)
+//sys	Dup3(from int, to int, flags int) (err error)
+//sys	Exit(code int)
+//sys	ExtattrGetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error)
+//sys	ExtattrSetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error)
+//sys	ExtattrDeleteFd(fd int, attrnamespace int, attrname string) (err error)
+//sys	ExtattrListFd(fd int, attrnamespace int, data uintptr, nbytes int) (ret int, err error)
+//sys	ExtattrGetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error)
+//sys	ExtattrSetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error)
+//sys	ExtattrDeleteFile(file string, attrnamespace int, attrname string) (err error)
+//sys	ExtattrListFile(file string, attrnamespace int, data uintptr, nbytes int) (ret int, err error)
+//sys	ExtattrGetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error)
+//sys	ExtattrSetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error)
+//sys	ExtattrDeleteLink(link string, attrnamespace int, attrname string) (err error)
+//sys	ExtattrListLink(link string, attrnamespace int, data uintptr, nbytes int) (ret int, err error)
+//sys	Faccessat(dirfd int, path string, mode uint32, flags int) (err error)
+//sys	Fadvise(fd int, offset int64, length int64, advice int) (err error) = SYS_POSIX_FADVISE
+//sys	Fchdir(fd int) (err error)
+//sys	Fchflags(fd int, flags int) (err error)
+//sys	Fchmod(fd int, mode uint32) (err error)
+//sys	Fchmodat(dirfd int, path string, mode uint32, flags int) (err error)
+//sys	Fchown(fd int, uid int, gid int) (err error)
+//sys	Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error)
+//sys	Flock(fd int, how int) (err error)
+//sys	Fpathconf(fd int, name int) (val int, err error)
+//sys	Fstat(fd int, stat *Stat_t) (err error)
+//sys	Fstatat(fd int, path string, stat *Stat_t, flags int) (err error)
+//sys	Fstatvfs1(fd int, buf *Statvfs_t, flags int) (err error) = SYS_FSTATVFS1
+//sys	Fsync(fd int) (err error)
+//sys	Ftruncate(fd int, length int64) (err error)
+//sysnb	Getegid() (egid int)
+//sysnb	Geteuid() (uid int)
+//sysnb	Getgid() (gid int)
+//sysnb	Getpgid(pid int) (pgid int, err error)
+//sysnb	Getpgrp() (pgrp int)
+//sysnb	Getpid() (pid int)
+//sysnb	Getppid() (ppid int)
+//sys	Getpriority(which int, who int) (prio int, err error)
+//sysnb	Getrlimit(which int, lim *Rlimit) (err error)
+//sysnb	Getrusage(who int, rusage *Rusage) (err error)
+//sysnb	Getsid(pid int) (sid int, err error)
+//sysnb	Gettimeofday(tv *Timeval) (err error)
+//sysnb	Getuid() (uid int)
+//sys	Issetugid() (tainted bool)
+//sys	Kill(pid int, signum syscall.Signal) (err error)
+//sys	Kqueue() (fd int, err error)
+//sys	Lchown(path string, uid int, gid int) (err error)
+//sys	Link(path string, link string) (err error)
+//sys	Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error)
+//sys	Listen(s int, backlog int) (err error)
+//sys	Lstat(path string, stat *Stat_t) (err error)
+//sys	Mkdir(path string, mode uint32) (err error)
+//sys	Mkdirat(dirfd int, path string, mode uint32) (err error)
+//sys	Mkfifo(path string, mode uint32) (err error)
+//sys	Mkfifoat(dirfd int, path string, mode uint32) (err error)
+//sys	Mknod(path string, mode uint32, dev int) (err error)
+//sys	Mknodat(dirfd int, path string, mode uint32, dev int) (err error)
+//sys	Nanosleep(time *Timespec, leftover *Timespec) (err error)
+//sys	Open(path string, mode int, perm uint32) (fd int, err error)
+//sys	Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error)
+//sys	Pathconf(path string, name int) (val int, err error)
+//sys	Pread(fd int, p []byte, offset int64) (n int, err error)
+//sys	Pwrite(fd int, p []byte, offset int64) (n int, err error)
+//sys	read(fd int, p []byte) (n int, err error)
+//sys	Readlink(path string, buf []byte) (n int, err error)
+//sys	Readlinkat(dirfd int, path string, buf []byte) (n int, err error)
+//sys	Rename(from string, to string) (err error)
+//sys	Renameat(fromfd int, from string, tofd int, to string) (err error)
+//sys	Revoke(path string) (err error)
+//sys	Rmdir(path string) (err error)
+//sys	Seek(fd int, offset int64, whence int) (newoffset int64, err error) = SYS_LSEEK
+//sys	Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error)
+//sysnb	Setegid(egid int) (err error)
+//sysnb	Seteuid(euid int) (err error)
+//sysnb	Setgid(gid int) (err error)
+//sysnb	Setpgid(pid int, pgid int) (err error)
+//sys	Setpriority(which int, who int, prio int) (err error)
+//sysnb	Setregid(rgid int, egid int) (err error)
+//sysnb	Setreuid(ruid int, euid int) (err error)
+//sysnb	Setrlimit(which int, lim *Rlimit) (err error)
+//sysnb	Setsid() (pid int, err error)
+//sysnb	Settimeofday(tp *Timeval) (err error)
+//sysnb	Setuid(uid int) (err error)
+//sys	Stat(path string, stat *Stat_t) (err error)
+//sys	Statvfs1(path string, buf *Statvfs_t, flags int) (err error) = SYS_STATVFS1
+//sys	Symlink(path string, link string) (err error)
+//sys	Symlinkat(oldpath string, newdirfd int, newpath string) (err error)
+//sys	Sync() (err error)
+//sys	Truncate(path string, length int64) (err error)
+//sys	Umask(newmask int) (oldmask int)
+//sys	Unlink(path string) (err error)
+//sys	Unlinkat(dirfd int, path string, flags int) (err error)
+//sys	Unmount(path string, flags int) (err error)
+//sys	write(fd int, p []byte) (n int, err error)
+//sys	mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error)
+//sys	munmap(addr uintptr, length uintptr) (err error)
+//sys	readlen(fd int, buf *byte, nbuf int) (n int, err error) = SYS_READ
+//sys	writelen(fd int, buf *byte, nbuf int) (n int, err error) = SYS_WRITE
+//sys	utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error)
+
+/*
+ * Unimplemented
+ */
+// ____semctl13
+// __clone
+// __fhopen40
+// __fhstat40
+// __fhstatvfs140
+// __fstat30
+// __getcwd
+// __getfh30
+// __getlogin
+// __lstat30
+// __mount50
+// __msgctl13
+// __msync13
+// __ntp_gettime30
+// __posix_chown
+// __posix_fchown
+// __posix_lchown
+// __posix_rename
+// __setlogin
+// __shmctl13
+// __sigaction_sigtramp
+// __sigaltstack14
+// __sigpending14
+// __sigprocmask14
+// __sigsuspend14
+// __sigtimedwait
+// __stat30
+// __syscall
+// __vfork14
+// _ksem_close
+// _ksem_destroy
+// _ksem_getvalue
+// _ksem_init
+// _ksem_open
+// _ksem_post
+// _ksem_trywait
+// _ksem_unlink
+// _ksem_wait
+// _lwp_continue
+// _lwp_create
+// _lwp_ctl
+// _lwp_detach
+// _lwp_exit
+// _lwp_getname
+// _lwp_getprivate
+// _lwp_kill
+// _lwp_park
+// _lwp_self
+// _lwp_setname
+// _lwp_setprivate
+// _lwp_suspend
+// _lwp_unpark
+// _lwp_unpark_all
+// _lwp_wait
+// _lwp_wakeup
+// _pset_bind
+// _sched_getaffinity
+// _sched_getparam
+// _sched_setaffinity
+// _sched_setparam
+// acct
+// aio_cancel
+// aio_error
+// aio_fsync
+// aio_read
+// aio_return
+// aio_suspend
+// aio_write
+// break
+// clock_getres
+// clock_gettime
+// clock_settime
+// compat_09_ogetdomainname
+// compat_09_osetdomainname
+// compat_09_ouname
+// compat_10_omsgsys
+// compat_10_osemsys
+// compat_10_oshmsys
+// compat_12_fstat12
+// compat_12_getdirentries
+// compat_12_lstat12
+// compat_12_msync
+// compat_12_oreboot
+// compat_12_oswapon
+// compat_12_stat12
+// compat_13_sigaction13
+// compat_13_sigaltstack13
+// compat_13_sigpending13
+// compat_13_sigprocmask13
+// compat_13_sigreturn13
+// compat_13_sigsuspend13
+// compat_14___semctl
+// compat_14_msgctl
+// compat_14_shmctl
+// compat_16___sigaction14
+// compat_16___sigreturn14
+// compat_20_fhstatfs
+// compat_20_fstatfs
+// compat_20_getfsstat
+// compat_20_statfs
+// compat_30___fhstat30
+// compat_30___fstat13
+// compat_30___lstat13
+// compat_30___stat13
+// compat_30_fhopen
+// compat_30_fhstat
+// compat_30_fhstatvfs1
+// compat_30_getdents
+// compat_30_getfh
+// compat_30_ntp_gettime
+// compat_30_socket
+// compat_40_mount
+// compat_43_fstat43
+// compat_43_lstat43
+// compat_43_oaccept
+// compat_43_ocreat
+// compat_43_oftruncate
+// compat_43_ogetdirentries
+// compat_43_ogetdtablesize
+// compat_43_ogethostid
+// compat_43_ogethostname
+// compat_43_ogetkerninfo
+// compat_43_ogetpagesize
+// compat_43_ogetpeername
+// compat_43_ogetrlimit
+// compat_43_ogetsockname
+// compat_43_okillpg
+// compat_43_olseek
+// compat_43_ommap
+// compat_43_oquota
+// compat_43_orecv
+// compat_43_orecvfrom
+// compat_43_orecvmsg
+// compat_43_osend
+// compat_43_osendmsg
+// compat_43_osethostid
+// compat_43_osethostname
+// compat_43_osetrlimit
+// compat_43_osigblock
+// compat_43_osigsetmask
+// compat_43_osigstack
+// compat_43_osigvec
+// compat_43_otruncate
+// compat_43_owait
+// compat_43_stat43
+// execve
+// extattr_delete_fd
+// extattr_delete_file
+// extattr_delete_link
+// extattr_get_fd
+// extattr_get_file
+// extattr_get_link
+// extattr_list_fd
+// extattr_list_file
+// extattr_list_link
+// extattr_set_fd
+// extattr_set_file
+// extattr_set_link
+// extattrctl
+// fchroot
+// fdatasync
+// fgetxattr
+// fktrace
+// flistxattr
+// fork
+// fremovexattr
+// fsetxattr
+// fstatvfs1
+// fsync_range
+// getcontext
+// getitimer
+// getvfsstat
+// getxattr
+// ktrace
+// lchflags
+// lchmod
+// lfs_bmapv
+// lfs_markv
+// lfs_segclean
+// lfs_segwait
+// lgetxattr
+// lio_listio
+// listxattr
+// llistxattr
+// lremovexattr
+// lseek
+// lsetxattr
+// lutimes
+// madvise
+// mincore
+// minherit
+// modctl
+// mq_close
+// mq_getattr
+// mq_notify
+// mq_open
+// mq_receive
+// mq_send
+// mq_setattr
+// mq_timedreceive
+// mq_timedsend
+// mq_unlink
+// mremap
+// msgget
+// msgrcv
+// msgsnd
+// nfssvc
+// ntp_adjtime
+// pmc_control
+// pmc_get_info
+// pollts
+// preadv
+// profil
+// pselect
+// pset_assign
+// pset_create
+// pset_destroy
+// ptrace
+// pwritev
+// quotactl
+// rasctl
+// readv
+// reboot
+// removexattr
+// sa_enable
+// sa_preempt
+// sa_register
+// sa_setconcurrency
+// sa_stacks
+// sa_yield
+// sbrk
+// sched_yield
+// semconfig
+// semget
+// semop
+// setcontext
+// setitimer
+// setxattr
+// shmat
+// shmdt
+// shmget
+// sstk
+// statvfs1
+// swapctl
+// sysarch
+// syscall
+// timer_create
+// timer_delete
+// timer_getoverrun
+// timer_gettime
+// timer_settime
+// undelete
+// utrace
+// uuidgen
+// vadvise
+// vfork
+// writev
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd_386.go
new file mode 100644
index 000000000..24da8b524
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd_386.go
@@ -0,0 +1,37 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build 386,netbsd
+
+package unix
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: int32(nsec)}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: int32(usec)}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint32(fd)
+	k.Filter = uint32(mode)
+	k.Flags = uint32(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint32(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = int32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd_amd64.go
new file mode 100644
index 000000000..25a0ac825
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd_amd64.go
@@ -0,0 +1,37 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build amd64,netbsd
+
+package unix
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: int32(usec)}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint64(fd)
+	k.Filter = uint32(mode)
+	k.Flags = uint32(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = int32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd_arm.go
new file mode 100644
index 000000000..21591ecd4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd_arm.go
@@ -0,0 +1,37 @@
+// Copyright 2013 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build arm,netbsd
+
+package unix
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: int32(nsec)}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: int32(usec)}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint32(fd)
+	k.Filter = uint32(mode)
+	k.Flags = uint32(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint32(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = int32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd_arm64.go
new file mode 100644
index 000000000..804749635
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_netbsd_arm64.go
@@ -0,0 +1,37 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build arm64,netbsd
+
+package unix
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: int32(usec)}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint64(fd)
+	k.Filter = uint32(mode)
+	k.Flags = uint32(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = int32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd.go
new file mode 100644
index 000000000..2c1f46ea1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd.go
@@ -0,0 +1,386 @@
+// Copyright 2009,2010 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// OpenBSD system calls.
+// This file is compiled as ordinary Go code,
+// but it is also input to mksyscall,
+// which parses the //sys lines and generates system call stubs.
+// Note that sometimes we use a lowercase //sys name and wrap
+// it in our own nicer implementation, either here or in
+// syscall_bsd.go or syscall_unix.go.
+
+package unix
+
+import (
+	"sort"
+	"syscall"
+	"unsafe"
+)
+
+// SockaddrDatalink implements the Sockaddr interface for AF_LINK type sockets.
+type SockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [24]int8
+	raw    RawSockaddrDatalink
+}
+
+func Syscall9(trap, a1, a2, a3, a4, a5, a6, a7, a8, a9 uintptr) (r1, r2 uintptr, err syscall.Errno)
+
+func nametomib(name string) (mib []_C_int, err error) {
+	i := sort.Search(len(sysctlMib), func(i int) bool {
+		return sysctlMib[i].ctlname >= name
+	})
+	if i < len(sysctlMib) && sysctlMib[i].ctlname == name {
+		return sysctlMib[i].ctloid, nil
+	}
+	return nil, EINVAL
+}
+
+func direntIno(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Fileno), unsafe.Sizeof(Dirent{}.Fileno))
+}
+
+func direntReclen(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Reclen), unsafe.Sizeof(Dirent{}.Reclen))
+}
+
+func direntNamlen(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Namlen), unsafe.Sizeof(Dirent{}.Namlen))
+}
+
+func SysctlUvmexp(name string) (*Uvmexp, error) {
+	mib, err := sysctlmib(name)
+	if err != nil {
+		return nil, err
+	}
+
+	n := uintptr(SizeofUvmexp)
+	var u Uvmexp
+	if err := sysctl(mib, (*byte)(unsafe.Pointer(&u)), &n, nil, 0); err != nil {
+		return nil, err
+	}
+	if n != SizeofUvmexp {
+		return nil, EIO
+	}
+	return &u, nil
+}
+
+func Pipe(p []int) (err error) {
+	return Pipe2(p, 0)
+}
+
+//sysnb	pipe2(p *[2]_C_int, flags int) (err error)
+func Pipe2(p []int, flags int) error {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	err := pipe2(&pp, flags)
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return err
+}
+
+//sys Getdents(fd int, buf []byte) (n int, err error)
+func Getdirentries(fd int, buf []byte, basep *uintptr) (n int, err error) {
+	n, err = Getdents(fd, buf)
+	if err != nil || basep == nil {
+		return
+	}
+
+	var off int64
+	off, err = Seek(fd, 0, 1 /* SEEK_CUR */)
+	if err != nil {
+		*basep = ^uintptr(0)
+		return
+	}
+	*basep = uintptr(off)
+	if unsafe.Sizeof(*basep) == 8 {
+		return
+	}
+	if off>>32 != 0 {
+		// We can't stuff the offset back into a uintptr, so any
+		// future calls would be suspect. Generate an error.
+		// EIO was allowed by getdirentries.
+		err = EIO
+	}
+	return
+}
+
+//sys	Getcwd(buf []byte) (n int, err error) = SYS___GETCWD
+
+func Sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	if raceenabled {
+		raceReleaseMerge(unsafe.Pointer(&ioSync))
+	}
+	return sendfile(outfd, infd, offset, count)
+}
+
+// TODO
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	return -1, ENOSYS
+}
+
+func Getfsstat(buf []Statfs_t, flags int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	var bufsize uintptr
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+		bufsize = unsafe.Sizeof(Statfs_t{}) * uintptr(len(buf))
+	}
+	r0, _, e1 := Syscall(SYS_GETFSSTAT, uintptr(_p0), bufsize, uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+func setattrlistTimes(path string, times []Timespec, flags int) error {
+	// used on Darwin for UtimesNano
+	return ENOSYS
+}
+
+//sys	ioctl(fd int, req uint, arg uintptr) (err error)
+
+//sys   sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) = SYS___SYSCTL
+
+//sys	ppoll(fds *PollFd, nfds int, timeout *Timespec, sigmask *Sigset_t) (n int, err error)
+
+func Ppoll(fds []PollFd, timeout *Timespec, sigmask *Sigset_t) (n int, err error) {
+	if len(fds) == 0 {
+		return ppoll(nil, 0, timeout, sigmask)
+	}
+	return ppoll(&fds[0], len(fds), timeout, sigmask)
+}
+
+func Uname(uname *Utsname) error {
+	mib := []_C_int{CTL_KERN, KERN_OSTYPE}
+	n := unsafe.Sizeof(uname.Sysname)
+	if err := sysctl(mib, &uname.Sysname[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	mib = []_C_int{CTL_KERN, KERN_HOSTNAME}
+	n = unsafe.Sizeof(uname.Nodename)
+	if err := sysctl(mib, &uname.Nodename[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	mib = []_C_int{CTL_KERN, KERN_OSRELEASE}
+	n = unsafe.Sizeof(uname.Release)
+	if err := sysctl(mib, &uname.Release[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	mib = []_C_int{CTL_KERN, KERN_VERSION}
+	n = unsafe.Sizeof(uname.Version)
+	if err := sysctl(mib, &uname.Version[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	// The version might have newlines or tabs in it, convert them to
+	// spaces.
+	for i, b := range uname.Version {
+		if b == '\n' || b == '\t' {
+			if i == len(uname.Version)-1 {
+				uname.Version[i] = 0
+			} else {
+				uname.Version[i] = ' '
+			}
+		}
+	}
+
+	mib = []_C_int{CTL_HW, HW_MACHINE}
+	n = unsafe.Sizeof(uname.Machine)
+	if err := sysctl(mib, &uname.Machine[0], &n, nil, 0); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+/*
+ * Exposed directly
+ */
+//sys	Access(path string, mode uint32) (err error)
+//sys	Adjtime(delta *Timeval, olddelta *Timeval) (err error)
+//sys	Chdir(path string) (err error)
+//sys	Chflags(path string, flags int) (err error)
+//sys	Chmod(path string, mode uint32) (err error)
+//sys	Chown(path string, uid int, gid int) (err error)
+//sys	Chroot(path string) (err error)
+//sys	Close(fd int) (err error)
+//sys	Dup(fd int) (nfd int, err error)
+//sys	Dup2(from int, to int) (err error)
+//sys	Dup3(from int, to int, flags int) (err error)
+//sys	Exit(code int)
+//sys	Faccessat(dirfd int, path string, mode uint32, flags int) (err error)
+//sys	Fchdir(fd int) (err error)
+//sys	Fchflags(fd int, flags int) (err error)
+//sys	Fchmod(fd int, mode uint32) (err error)
+//sys	Fchmodat(dirfd int, path string, mode uint32, flags int) (err error)
+//sys	Fchown(fd int, uid int, gid int) (err error)
+//sys	Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error)
+//sys	Flock(fd int, how int) (err error)
+//sys	Fpathconf(fd int, name int) (val int, err error)
+//sys	Fstat(fd int, stat *Stat_t) (err error)
+//sys	Fstatat(fd int, path string, stat *Stat_t, flags int) (err error)
+//sys	Fstatfs(fd int, stat *Statfs_t) (err error)
+//sys	Fsync(fd int) (err error)
+//sys	Ftruncate(fd int, length int64) (err error)
+//sysnb	Getegid() (egid int)
+//sysnb	Geteuid() (uid int)
+//sysnb	Getgid() (gid int)
+//sysnb	Getpgid(pid int) (pgid int, err error)
+//sysnb	Getpgrp() (pgrp int)
+//sysnb	Getpid() (pid int)
+//sysnb	Getppid() (ppid int)
+//sys	Getpriority(which int, who int) (prio int, err error)
+//sysnb	Getrlimit(which int, lim *Rlimit) (err error)
+//sysnb	Getrtable() (rtable int, err error)
+//sysnb	Getrusage(who int, rusage *Rusage) (err error)
+//sysnb	Getsid(pid int) (sid int, err error)
+//sysnb	Gettimeofday(tv *Timeval) (err error)
+//sysnb	Getuid() (uid int)
+//sys	Issetugid() (tainted bool)
+//sys	Kill(pid int, signum syscall.Signal) (err error)
+//sys	Kqueue() (fd int, err error)
+//sys	Lchown(path string, uid int, gid int) (err error)
+//sys	Link(path string, link string) (err error)
+//sys	Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error)
+//sys	Listen(s int, backlog int) (err error)
+//sys	Lstat(path string, stat *Stat_t) (err error)
+//sys	Mkdir(path string, mode uint32) (err error)
+//sys	Mkdirat(dirfd int, path string, mode uint32) (err error)
+//sys	Mkfifo(path string, mode uint32) (err error)
+//sys	Mkfifoat(dirfd int, path string, mode uint32) (err error)
+//sys	Mknod(path string, mode uint32, dev int) (err error)
+//sys	Mknodat(dirfd int, path string, mode uint32, dev int) (err error)
+//sys	Nanosleep(time *Timespec, leftover *Timespec) (err error)
+//sys	Open(path string, mode int, perm uint32) (fd int, err error)
+//sys	Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error)
+//sys	Pathconf(path string, name int) (val int, err error)
+//sys	Pread(fd int, p []byte, offset int64) (n int, err error)
+//sys	Pwrite(fd int, p []byte, offset int64) (n int, err error)
+//sys	read(fd int, p []byte) (n int, err error)
+//sys	Readlink(path string, buf []byte) (n int, err error)
+//sys	Readlinkat(dirfd int, path string, buf []byte) (n int, err error)
+//sys	Rename(from string, to string) (err error)
+//sys	Renameat(fromfd int, from string, tofd int, to string) (err error)
+//sys	Revoke(path string) (err error)
+//sys	Rmdir(path string) (err error)
+//sys	Seek(fd int, offset int64, whence int) (newoffset int64, err error) = SYS_LSEEK
+//sys	Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error)
+//sysnb	Setegid(egid int) (err error)
+//sysnb	Seteuid(euid int) (err error)
+//sysnb	Setgid(gid int) (err error)
+//sys	Setlogin(name string) (err error)
+//sysnb	Setpgid(pid int, pgid int) (err error)
+//sys	Setpriority(which int, who int, prio int) (err error)
+//sysnb	Setregid(rgid int, egid int) (err error)
+//sysnb	Setreuid(ruid int, euid int) (err error)
+//sysnb	Setresgid(rgid int, egid int, sgid int) (err error)
+//sysnb	Setresuid(ruid int, euid int, suid int) (err error)
+//sysnb	Setrlimit(which int, lim *Rlimit) (err error)
+//sysnb	Setrtable(rtable int) (err error)
+//sysnb	Setsid() (pid int, err error)
+//sysnb	Settimeofday(tp *Timeval) (err error)
+//sysnb	Setuid(uid int) (err error)
+//sys	Stat(path string, stat *Stat_t) (err error)
+//sys	Statfs(path string, stat *Statfs_t) (err error)
+//sys	Symlink(path string, link string) (err error)
+//sys	Symlinkat(oldpath string, newdirfd int, newpath string) (err error)
+//sys	Sync() (err error)
+//sys	Truncate(path string, length int64) (err error)
+//sys	Umask(newmask int) (oldmask int)
+//sys	Unlink(path string) (err error)
+//sys	Unlinkat(dirfd int, path string, flags int) (err error)
+//sys	Unmount(path string, flags int) (err error)
+//sys	write(fd int, p []byte) (n int, err error)
+//sys	mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error)
+//sys	munmap(addr uintptr, length uintptr) (err error)
+//sys	readlen(fd int, buf *byte, nbuf int) (n int, err error) = SYS_READ
+//sys	writelen(fd int, buf *byte, nbuf int) (n int, err error) = SYS_WRITE
+//sys	utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error)
+
+/*
+ * Unimplemented
+ */
+// __getcwd
+// __semctl
+// __syscall
+// __sysctl
+// adjfreq
+// break
+// clock_getres
+// clock_gettime
+// clock_settime
+// closefrom
+// execve
+// fhopen
+// fhstat
+// fhstatfs
+// fork
+// futimens
+// getfh
+// getgid
+// getitimer
+// getlogin
+// getresgid
+// getresuid
+// getthrid
+// ktrace
+// lfs_bmapv
+// lfs_markv
+// lfs_segclean
+// lfs_segwait
+// mincore
+// minherit
+// mount
+// mquery
+// msgctl
+// msgget
+// msgrcv
+// msgsnd
+// nfssvc
+// nnpfspioctl
+// preadv
+// profil
+// pwritev
+// quotactl
+// readv
+// reboot
+// renameat
+// rfork
+// sched_yield
+// semget
+// semop
+// setgroups
+// setitimer
+// setsockopt
+// shmat
+// shmctl
+// shmdt
+// shmget
+// sigaction
+// sigaltstack
+// sigpending
+// sigprocmask
+// sigreturn
+// sigsuspend
+// sysarch
+// syscall
+// threxit
+// thrsigdivert
+// thrsleep
+// thrwakeup
+// vfork
+// writev
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_386.go
new file mode 100644
index 000000000..42b5a0e51
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_386.go
@@ -0,0 +1,41 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build 386,openbsd
+
+package unix
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: int32(nsec)}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: int32(usec)}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint32(fd)
+	k.Filter = int16(mode)
+	k.Flags = uint16(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint32(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = uint32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+// SYS___SYSCTL is used by syscall_bsd.go for all BSDs, but in modern versions
+// of openbsd/386 the syscall is called sysctl instead of __sysctl.
+const SYS___SYSCTL = SYS_SYSCTL
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_amd64.go
new file mode 100644
index 000000000..6ea4b4883
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_amd64.go
@@ -0,0 +1,41 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build amd64,openbsd
+
+package unix
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: usec}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint64(fd)
+	k.Filter = int16(mode)
+	k.Flags = uint16(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = uint32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+// SYS___SYSCTL is used by syscall_bsd.go for all BSDs, but in modern versions
+// of openbsd/amd64 the syscall is called sysctl instead of __sysctl.
+const SYS___SYSCTL = SYS_SYSCTL
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_arm.go
new file mode 100644
index 000000000..1c3d26fa2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_arm.go
@@ -0,0 +1,41 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build arm,openbsd
+
+package unix
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: int32(nsec)}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: int32(usec)}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint32(fd)
+	k.Filter = int16(mode)
+	k.Flags = uint16(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint32(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = uint32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+// SYS___SYSCTL is used by syscall_bsd.go for all BSDs, but in modern versions
+// of openbsd/arm the syscall is called sysctl instead of __sysctl.
+const SYS___SYSCTL = SYS_SYSCTL
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_arm64.go
new file mode 100644
index 000000000..a8c458cb0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_arm64.go
@@ -0,0 +1,41 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build arm64,openbsd
+
+package unix
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: usec}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint64(fd)
+	k.Filter = int16(mode)
+	k.Flags = uint16(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = uint32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+// SYS___SYSCTL is used by syscall_bsd.go for all BSDs, but in modern versions
+// of openbsd/amd64 the syscall is called sysctl instead of __sysctl.
+const SYS___SYSCTL = SYS_SYSCTL
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_mips64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_mips64.go
new file mode 100644
index 000000000..30f285343
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_openbsd_mips64.go
@@ -0,0 +1,35 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package unix
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: usec}
+}
+
+func SetKevent(k *Kevent_t, fd, mode, flags int) {
+	k.Ident = uint64(fd)
+	k.Filter = int16(mode)
+	k.Flags = uint16(flags)
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetControllen(length int) {
+	msghdr.Controllen = uint32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
+
+// SYS___SYSCTL is used by syscall_bsd.go for all BSDs, but in modern versions
+// of OpenBSD the syscall is called sysctl instead of __sysctl.
+const SYS___SYSCTL = SYS_SYSCTL
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_solaris.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_solaris.go
new file mode 100644
index 000000000..0e2a696ad
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_solaris.go
@@ -0,0 +1,724 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Solaris system calls.
+// This file is compiled as ordinary Go code,
+// but it is also input to mksyscall,
+// which parses the //sys lines and generates system call stubs.
+// Note that sometimes we use a lowercase //sys name and wrap
+// it in our own nicer implementation, either here or in
+// syscall_solaris.go or syscall_unix.go.
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+// Implemented in runtime/syscall_solaris.go.
+type syscallFunc uintptr
+
+func rawSysvicall6(trap, nargs, a1, a2, a3, a4, a5, a6 uintptr) (r1, r2 uintptr, err syscall.Errno)
+func sysvicall6(trap, nargs, a1, a2, a3, a4, a5, a6 uintptr) (r1, r2 uintptr, err syscall.Errno)
+
+// SockaddrDatalink implements the Sockaddr interface for AF_LINK type sockets.
+type SockaddrDatalink struct {
+	Family uint16
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [244]int8
+	raw    RawSockaddrDatalink
+}
+
+func direntIno(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Ino), unsafe.Sizeof(Dirent{}.Ino))
+}
+
+func direntReclen(buf []byte) (uint64, bool) {
+	return readInt(buf, unsafe.Offsetof(Dirent{}.Reclen), unsafe.Sizeof(Dirent{}.Reclen))
+}
+
+func direntNamlen(buf []byte) (uint64, bool) {
+	reclen, ok := direntReclen(buf)
+	if !ok {
+		return 0, false
+	}
+	return reclen - uint64(unsafe.Offsetof(Dirent{}.Name)), true
+}
+
+//sysnb	pipe(p *[2]_C_int) (n int, err error)
+
+func Pipe(p []int) (err error) {
+	if len(p) != 2 {
+		return EINVAL
+	}
+	var pp [2]_C_int
+	n, err := pipe(&pp)
+	if n != 0 {
+		return err
+	}
+	p[0] = int(pp[0])
+	p[1] = int(pp[1])
+	return nil
+}
+
+func (sa *SockaddrInet4) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	if sa.Port < 0 || sa.Port > 0xFFFF {
+		return nil, 0, EINVAL
+	}
+	sa.raw.Family = AF_INET
+	p := (*[2]byte)(unsafe.Pointer(&sa.raw.Port))
+	p[0] = byte(sa.Port >> 8)
+	p[1] = byte(sa.Port)
+	for i := 0; i < len(sa.Addr); i++ {
+		sa.raw.Addr[i] = sa.Addr[i]
+	}
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrInet4, nil
+}
+
+func (sa *SockaddrInet6) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	if sa.Port < 0 || sa.Port > 0xFFFF {
+		return nil, 0, EINVAL
+	}
+	sa.raw.Family = AF_INET6
+	p := (*[2]byte)(unsafe.Pointer(&sa.raw.Port))
+	p[0] = byte(sa.Port >> 8)
+	p[1] = byte(sa.Port)
+	sa.raw.Scope_id = sa.ZoneId
+	for i := 0; i < len(sa.Addr); i++ {
+		sa.raw.Addr[i] = sa.Addr[i]
+	}
+	return unsafe.Pointer(&sa.raw), SizeofSockaddrInet6, nil
+}
+
+func (sa *SockaddrUnix) sockaddr() (unsafe.Pointer, _Socklen, error) {
+	name := sa.Name
+	n := len(name)
+	if n >= len(sa.raw.Path) {
+		return nil, 0, EINVAL
+	}
+	sa.raw.Family = AF_UNIX
+	for i := 0; i < n; i++ {
+		sa.raw.Path[i] = int8(name[i])
+	}
+	// length is family (uint16), name, NUL.
+	sl := _Socklen(2)
+	if n > 0 {
+		sl += _Socklen(n) + 1
+	}
+	if sa.raw.Path[0] == '@' {
+		sa.raw.Path[0] = 0
+		// Don't count trailing NUL for abstract address.
+		sl--
+	}
+
+	return unsafe.Pointer(&sa.raw), sl, nil
+}
+
+//sys	getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) = libsocket.getsockname
+
+func Getsockname(fd int) (sa Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	var len _Socklen = SizeofSockaddrAny
+	if err = getsockname(fd, &rsa, &len); err != nil {
+		return
+	}
+	return anyToSockaddr(fd, &rsa)
+}
+
+// GetsockoptString returns the string value of the socket option opt for the
+// socket associated with fd at the given socket level.
+func GetsockoptString(fd, level, opt int) (string, error) {
+	buf := make([]byte, 256)
+	vallen := _Socklen(len(buf))
+	err := getsockopt(fd, level, opt, unsafe.Pointer(&buf[0]), &vallen)
+	if err != nil {
+		return "", err
+	}
+	return string(buf[:vallen-1]), nil
+}
+
+const ImplementsGetwd = true
+
+//sys	Getcwd(buf []byte) (n int, err error)
+
+func Getwd() (wd string, err error) {
+	var buf [PathMax]byte
+	// Getcwd will return an error if it failed for any reason.
+	_, err = Getcwd(buf[0:])
+	if err != nil {
+		return "", err
+	}
+	n := clen(buf[:])
+	if n < 1 {
+		return "", EINVAL
+	}
+	return string(buf[:n]), nil
+}
+
+/*
+ * Wrapped
+ */
+
+//sysnb	getgroups(ngid int, gid *_Gid_t) (n int, err error)
+//sysnb	setgroups(ngid int, gid *_Gid_t) (err error)
+
+func Getgroups() (gids []int, err error) {
+	n, err := getgroups(0, nil)
+	// Check for error and sanity check group count. Newer versions of
+	// Solaris allow up to 1024 (NGROUPS_MAX).
+	if n < 0 || n > 1024 {
+		if err != nil {
+			return nil, err
+		}
+		return nil, EINVAL
+	} else if n == 0 {
+		return nil, nil
+	}
+
+	a := make([]_Gid_t, n)
+	n, err = getgroups(n, &a[0])
+	if n == -1 {
+		return nil, err
+	}
+	gids = make([]int, n)
+	for i, v := range a[0:n] {
+		gids[i] = int(v)
+	}
+	return
+}
+
+func Setgroups(gids []int) (err error) {
+	if len(gids) == 0 {
+		return setgroups(0, nil)
+	}
+
+	a := make([]_Gid_t, len(gids))
+	for i, v := range gids {
+		a[i] = _Gid_t(v)
+	}
+	return setgroups(len(a), &a[0])
+}
+
+// ReadDirent reads directory entries from fd and writes them into buf.
+func ReadDirent(fd int, buf []byte) (n int, err error) {
+	// Final argument is (basep *uintptr) and the syscall doesn't take nil.
+	// TODO(rsc): Can we use a single global basep for all calls?
+	return Getdents(fd, buf, new(uintptr))
+}
+
+// Wait status is 7 bits at bottom, either 0 (exited),
+// 0x7F (stopped), or a signal number that caused an exit.
+// The 0x80 bit is whether there was a core dump.
+// An extra number (exit code, signal causing a stop)
+// is in the high bits.
+
+type WaitStatus uint32
+
+const (
+	mask  = 0x7F
+	core  = 0x80
+	shift = 8
+
+	exited  = 0
+	stopped = 0x7F
+)
+
+func (w WaitStatus) Exited() bool { return w&mask == exited }
+
+func (w WaitStatus) ExitStatus() int {
+	if w&mask != exited {
+		return -1
+	}
+	return int(w >> shift)
+}
+
+func (w WaitStatus) Signaled() bool { return w&mask != stopped && w&mask != 0 }
+
+func (w WaitStatus) Signal() syscall.Signal {
+	sig := syscall.Signal(w & mask)
+	if sig == stopped || sig == 0 {
+		return -1
+	}
+	return sig
+}
+
+func (w WaitStatus) CoreDump() bool { return w.Signaled() && w&core != 0 }
+
+func (w WaitStatus) Stopped() bool { return w&mask == stopped && syscall.Signal(w>>shift) != SIGSTOP }
+
+func (w WaitStatus) Continued() bool { return w&mask == stopped && syscall.Signal(w>>shift) == SIGSTOP }
+
+func (w WaitStatus) StopSignal() syscall.Signal {
+	if !w.Stopped() {
+		return -1
+	}
+	return syscall.Signal(w>>shift) & 0xFF
+}
+
+func (w WaitStatus) TrapCause() int { return -1 }
+
+//sys	wait4(pid int32, statusp *_C_int, options int, rusage *Rusage) (wpid int32, err error)
+
+func Wait4(pid int, wstatus *WaitStatus, options int, rusage *Rusage) (int, error) {
+	var status _C_int
+	rpid, err := wait4(int32(pid), &status, options, rusage)
+	wpid := int(rpid)
+	if wpid == -1 {
+		return wpid, err
+	}
+	if wstatus != nil {
+		*wstatus = WaitStatus(status)
+	}
+	return wpid, nil
+}
+
+//sys	gethostname(buf []byte) (n int, err error)
+
+func Gethostname() (name string, err error) {
+	var buf [MaxHostNameLen]byte
+	n, err := gethostname(buf[:])
+	if n != 0 {
+		return "", err
+	}
+	n = clen(buf[:])
+	if n < 1 {
+		return "", EFAULT
+	}
+	return string(buf[:n]), nil
+}
+
+//sys	utimes(path string, times *[2]Timeval) (err error)
+
+func Utimes(path string, tv []Timeval) (err error) {
+	if tv == nil {
+		return utimes(path, nil)
+	}
+	if len(tv) != 2 {
+		return EINVAL
+	}
+	return utimes(path, (*[2]Timeval)(unsafe.Pointer(&tv[0])))
+}
+
+//sys	utimensat(fd int, path string, times *[2]Timespec, flag int) (err error)
+
+func UtimesNano(path string, ts []Timespec) error {
+	if ts == nil {
+		return utimensat(AT_FDCWD, path, nil, 0)
+	}
+	if len(ts) != 2 {
+		return EINVAL
+	}
+	return utimensat(AT_FDCWD, path, (*[2]Timespec)(unsafe.Pointer(&ts[0])), 0)
+}
+
+func UtimesNanoAt(dirfd int, path string, ts []Timespec, flags int) error {
+	if ts == nil {
+		return utimensat(dirfd, path, nil, flags)
+	}
+	if len(ts) != 2 {
+		return EINVAL
+	}
+	return utimensat(dirfd, path, (*[2]Timespec)(unsafe.Pointer(&ts[0])), flags)
+}
+
+//sys	fcntl(fd int, cmd int, arg int) (val int, err error)
+
+// FcntlInt performs a fcntl syscall on fd with the provided command and argument.
+func FcntlInt(fd uintptr, cmd, arg int) (int, error) {
+	valptr, _, errno := sysvicall6(uintptr(unsafe.Pointer(&procfcntl)), 3, uintptr(fd), uintptr(cmd), uintptr(arg), 0, 0, 0)
+	var err error
+	if errno != 0 {
+		err = errno
+	}
+	return int(valptr), err
+}
+
+// FcntlFlock performs a fcntl syscall for the F_GETLK, F_SETLK or F_SETLKW command.
+func FcntlFlock(fd uintptr, cmd int, lk *Flock_t) error {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procfcntl)), 3, uintptr(fd), uintptr(cmd), uintptr(unsafe.Pointer(lk)), 0, 0, 0)
+	if e1 != 0 {
+		return e1
+	}
+	return nil
+}
+
+//sys	futimesat(fildes int, path *byte, times *[2]Timeval) (err error)
+
+func Futimesat(dirfd int, path string, tv []Timeval) error {
+	pathp, err := BytePtrFromString(path)
+	if err != nil {
+		return err
+	}
+	if tv == nil {
+		return futimesat(dirfd, pathp, nil)
+	}
+	if len(tv) != 2 {
+		return EINVAL
+	}
+	return futimesat(dirfd, pathp, (*[2]Timeval)(unsafe.Pointer(&tv[0])))
+}
+
+// Solaris doesn't have an futimes function because it allows NULL to be
+// specified as the path for futimesat. However, Go doesn't like
+// NULL-style string interfaces, so this simple wrapper is provided.
+func Futimes(fd int, tv []Timeval) error {
+	if tv == nil {
+		return futimesat(fd, nil, nil)
+	}
+	if len(tv) != 2 {
+		return EINVAL
+	}
+	return futimesat(fd, nil, (*[2]Timeval)(unsafe.Pointer(&tv[0])))
+}
+
+func anyToSockaddr(fd int, rsa *RawSockaddrAny) (Sockaddr, error) {
+	switch rsa.Addr.Family {
+	case AF_UNIX:
+		pp := (*RawSockaddrUnix)(unsafe.Pointer(rsa))
+		sa := new(SockaddrUnix)
+		// Assume path ends at NUL.
+		// This is not technically the Solaris semantics for
+		// abstract Unix domain sockets -- they are supposed
+		// to be uninterpreted fixed-size binary blobs -- but
+		// everyone uses this convention.
+		n := 0
+		for n < len(pp.Path) && pp.Path[n] != 0 {
+			n++
+		}
+		bytes := (*[len(pp.Path)]byte)(unsafe.Pointer(&pp.Path[0]))[0:n]
+		sa.Name = string(bytes)
+		return sa, nil
+
+	case AF_INET:
+		pp := (*RawSockaddrInet4)(unsafe.Pointer(rsa))
+		sa := new(SockaddrInet4)
+		p := (*[2]byte)(unsafe.Pointer(&pp.Port))
+		sa.Port = int(p[0])<<8 + int(p[1])
+		for i := 0; i < len(sa.Addr); i++ {
+			sa.Addr[i] = pp.Addr[i]
+		}
+		return sa, nil
+
+	case AF_INET6:
+		pp := (*RawSockaddrInet6)(unsafe.Pointer(rsa))
+		sa := new(SockaddrInet6)
+		p := (*[2]byte)(unsafe.Pointer(&pp.Port))
+		sa.Port = int(p[0])<<8 + int(p[1])
+		sa.ZoneId = pp.Scope_id
+		for i := 0; i < len(sa.Addr); i++ {
+			sa.Addr[i] = pp.Addr[i]
+		}
+		return sa, nil
+	}
+	return nil, EAFNOSUPPORT
+}
+
+//sys	accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) = libsocket.accept
+
+func Accept(fd int) (nfd int, sa Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	var len _Socklen = SizeofSockaddrAny
+	nfd, err = accept(fd, &rsa, &len)
+	if nfd == -1 {
+		return
+	}
+	sa, err = anyToSockaddr(fd, &rsa)
+	if err != nil {
+		Close(nfd)
+		nfd = 0
+	}
+	return
+}
+
+//sys	recvmsg(s int, msg *Msghdr, flags int) (n int, err error) = libsocket.__xnet_recvmsg
+
+func Recvmsg(fd int, p, oob []byte, flags int) (n, oobn int, recvflags int, from Sockaddr, err error) {
+	var msg Msghdr
+	var rsa RawSockaddrAny
+	msg.Name = (*byte)(unsafe.Pointer(&rsa))
+	msg.Namelen = uint32(SizeofSockaddrAny)
+	var iov Iovec
+	if len(p) > 0 {
+		iov.Base = (*int8)(unsafe.Pointer(&p[0]))
+		iov.SetLen(len(p))
+	}
+	var dummy int8
+	if len(oob) > 0 {
+		// receive at least one normal byte
+		if len(p) == 0 {
+			iov.Base = &dummy
+			iov.SetLen(1)
+		}
+		msg.Accrightslen = int32(len(oob))
+	}
+	msg.Iov = &iov
+	msg.Iovlen = 1
+	if n, err = recvmsg(fd, &msg, flags); n == -1 {
+		return
+	}
+	oobn = int(msg.Accrightslen)
+	// source address is only specified if the socket is unconnected
+	if rsa.Addr.Family != AF_UNSPEC {
+		from, err = anyToSockaddr(fd, &rsa)
+	}
+	return
+}
+
+func Sendmsg(fd int, p, oob []byte, to Sockaddr, flags int) (err error) {
+	_, err = SendmsgN(fd, p, oob, to, flags)
+	return
+}
+
+//sys	sendmsg(s int, msg *Msghdr, flags int) (n int, err error) = libsocket.__xnet_sendmsg
+
+func SendmsgN(fd int, p, oob []byte, to Sockaddr, flags int) (n int, err error) {
+	var ptr unsafe.Pointer
+	var salen _Socklen
+	if to != nil {
+		ptr, salen, err = to.sockaddr()
+		if err != nil {
+			return 0, err
+		}
+	}
+	var msg Msghdr
+	msg.Name = (*byte)(unsafe.Pointer(ptr))
+	msg.Namelen = uint32(salen)
+	var iov Iovec
+	if len(p) > 0 {
+		iov.Base = (*int8)(unsafe.Pointer(&p[0]))
+		iov.SetLen(len(p))
+	}
+	var dummy int8
+	if len(oob) > 0 {
+		// send at least one normal byte
+		if len(p) == 0 {
+			iov.Base = &dummy
+			iov.SetLen(1)
+		}
+		msg.Accrightslen = int32(len(oob))
+	}
+	msg.Iov = &iov
+	msg.Iovlen = 1
+	if n, err = sendmsg(fd, &msg, flags); err != nil {
+		return 0, err
+	}
+	if len(oob) > 0 && len(p) == 0 {
+		n = 0
+	}
+	return n, nil
+}
+
+//sys	acct(path *byte) (err error)
+
+func Acct(path string) (err error) {
+	if len(path) == 0 {
+		// Assume caller wants to disable accounting.
+		return acct(nil)
+	}
+
+	pathp, err := BytePtrFromString(path)
+	if err != nil {
+		return err
+	}
+	return acct(pathp)
+}
+
+//sys	__makedev(version int, major uint, minor uint) (val uint64)
+
+func Mkdev(major, minor uint32) uint64 {
+	return __makedev(NEWDEV, uint(major), uint(minor))
+}
+
+//sys	__major(version int, dev uint64) (val uint)
+
+func Major(dev uint64) uint32 {
+	return uint32(__major(NEWDEV, dev))
+}
+
+//sys	__minor(version int, dev uint64) (val uint)
+
+func Minor(dev uint64) uint32 {
+	return uint32(__minor(NEWDEV, dev))
+}
+
+/*
+ * Expose the ioctl function
+ */
+
+//sys	ioctl(fd int, req uint, arg uintptr) (err error)
+
+func IoctlSetTermio(fd int, req uint, value *Termio) (err error) {
+	return ioctl(fd, req, uintptr(unsafe.Pointer(value)))
+}
+
+func IoctlGetTermio(fd int, req uint) (*Termio, error) {
+	var value Termio
+	err := ioctl(fd, req, uintptr(unsafe.Pointer(&value)))
+	return &value, err
+}
+
+//sys   poll(fds *PollFd, nfds int, timeout int) (n int, err error)
+
+func Poll(fds []PollFd, timeout int) (n int, err error) {
+	if len(fds) == 0 {
+		return poll(nil, 0, timeout)
+	}
+	return poll(&fds[0], len(fds), timeout)
+}
+
+func Sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	if raceenabled {
+		raceReleaseMerge(unsafe.Pointer(&ioSync))
+	}
+	return sendfile(outfd, infd, offset, count)
+}
+
+/*
+ * Exposed directly
+ */
+//sys	Access(path string, mode uint32) (err error)
+//sys	Adjtime(delta *Timeval, olddelta *Timeval) (err error)
+//sys	Chdir(path string) (err error)
+//sys	Chmod(path string, mode uint32) (err error)
+//sys	Chown(path string, uid int, gid int) (err error)
+//sys	Chroot(path string) (err error)
+//sys	Close(fd int) (err error)
+//sys	Creat(path string, mode uint32) (fd int, err error)
+//sys	Dup(fd int) (nfd int, err error)
+//sys	Dup2(oldfd int, newfd int) (err error)
+//sys	Exit(code int)
+//sys	Faccessat(dirfd int, path string, mode uint32, flags int) (err error)
+//sys	Fchdir(fd int) (err error)
+//sys	Fchmod(fd int, mode uint32) (err error)
+//sys	Fchmodat(dirfd int, path string, mode uint32, flags int) (err error)
+//sys	Fchown(fd int, uid int, gid int) (err error)
+//sys	Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error)
+//sys	Fdatasync(fd int) (err error)
+//sys	Flock(fd int, how int) (err error)
+//sys	Fpathconf(fd int, name int) (val int, err error)
+//sys	Fstat(fd int, stat *Stat_t) (err error)
+//sys	Fstatat(fd int, path string, stat *Stat_t, flags int) (err error)
+//sys	Fstatvfs(fd int, vfsstat *Statvfs_t) (err error)
+//sys	Getdents(fd int, buf []byte, basep *uintptr) (n int, err error)
+//sysnb	Getgid() (gid int)
+//sysnb	Getpid() (pid int)
+//sysnb	Getpgid(pid int) (pgid int, err error)
+//sysnb	Getpgrp() (pgid int, err error)
+//sys	Geteuid() (euid int)
+//sys	Getegid() (egid int)
+//sys	Getppid() (ppid int)
+//sys	Getpriority(which int, who int) (n int, err error)
+//sysnb	Getrlimit(which int, lim *Rlimit) (err error)
+//sysnb	Getrusage(who int, rusage *Rusage) (err error)
+//sysnb	Gettimeofday(tv *Timeval) (err error)
+//sysnb	Getuid() (uid int)
+//sys	Kill(pid int, signum syscall.Signal) (err error)
+//sys	Lchown(path string, uid int, gid int) (err error)
+//sys	Link(path string, link string) (err error)
+//sys	Listen(s int, backlog int) (err error) = libsocket.__xnet_llisten
+//sys	Lstat(path string, stat *Stat_t) (err error)
+//sys	Madvise(b []byte, advice int) (err error)
+//sys	Mkdir(path string, mode uint32) (err error)
+//sys	Mkdirat(dirfd int, path string, mode uint32) (err error)
+//sys	Mkfifo(path string, mode uint32) (err error)
+//sys	Mkfifoat(dirfd int, path string, mode uint32) (err error)
+//sys	Mknod(path string, mode uint32, dev int) (err error)
+//sys	Mknodat(dirfd int, path string, mode uint32, dev int) (err error)
+//sys	Mlock(b []byte) (err error)
+//sys	Mlockall(flags int) (err error)
+//sys	Mprotect(b []byte, prot int) (err error)
+//sys	Msync(b []byte, flags int) (err error)
+//sys	Munlock(b []byte) (err error)
+//sys	Munlockall() (err error)
+//sys	Nanosleep(time *Timespec, leftover *Timespec) (err error)
+//sys	Open(path string, mode int, perm uint32) (fd int, err error)
+//sys	Openat(dirfd int, path string, flags int, mode uint32) (fd int, err error)
+//sys	Pathconf(path string, name int) (val int, err error)
+//sys	Pause() (err error)
+//sys	Pread(fd int, p []byte, offset int64) (n int, err error)
+//sys	Pwrite(fd int, p []byte, offset int64) (n int, err error)
+//sys	read(fd int, p []byte) (n int, err error)
+//sys	Readlink(path string, buf []byte) (n int, err error)
+//sys	Rename(from string, to string) (err error)
+//sys	Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error)
+//sys	Rmdir(path string) (err error)
+//sys	Seek(fd int, offset int64, whence int) (newoffset int64, err error) = lseek
+//sys	Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error)
+//sysnb	Setegid(egid int) (err error)
+//sysnb	Seteuid(euid int) (err error)
+//sysnb	Setgid(gid int) (err error)
+//sys	Sethostname(p []byte) (err error)
+//sysnb	Setpgid(pid int, pgid int) (err error)
+//sys	Setpriority(which int, who int, prio int) (err error)
+//sysnb	Setregid(rgid int, egid int) (err error)
+//sysnb	Setreuid(ruid int, euid int) (err error)
+//sysnb	Setrlimit(which int, lim *Rlimit) (err error)
+//sysnb	Setsid() (pid int, err error)
+//sysnb	Setuid(uid int) (err error)
+//sys	Shutdown(s int, how int) (err error) = libsocket.shutdown
+//sys	Stat(path string, stat *Stat_t) (err error)
+//sys	Statvfs(path string, vfsstat *Statvfs_t) (err error)
+//sys	Symlink(path string, link string) (err error)
+//sys	Sync() (err error)
+//sysnb	Times(tms *Tms) (ticks uintptr, err error)
+//sys	Truncate(path string, length int64) (err error)
+//sys	Fsync(fd int) (err error)
+//sys	Ftruncate(fd int, length int64) (err error)
+//sys	Umask(mask int) (oldmask int)
+//sysnb	Uname(buf *Utsname) (err error)
+//sys	Unmount(target string, flags int) (err error) = libc.umount
+//sys	Unlink(path string) (err error)
+//sys	Unlinkat(dirfd int, path string, flags int) (err error)
+//sys	Ustat(dev int, ubuf *Ustat_t) (err error)
+//sys	Utime(path string, buf *Utimbuf) (err error)
+//sys	bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) = libsocket.__xnet_bind
+//sys	connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) = libsocket.__xnet_connect
+//sys	mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error)
+//sys	munmap(addr uintptr, length uintptr) (err error)
+//sys	sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) = libsendfile.sendfile
+//sys	sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) = libsocket.__xnet_sendto
+//sys	socket(domain int, typ int, proto int) (fd int, err error) = libsocket.__xnet_socket
+//sysnb	socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) = libsocket.__xnet_socketpair
+//sys	write(fd int, p []byte) (n int, err error)
+//sys	getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) = libsocket.__xnet_getsockopt
+//sysnb	getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) = libsocket.getpeername
+//sys	setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) = libsocket.setsockopt
+//sys	recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) = libsocket.recvfrom
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procread)), 3, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf), 0, 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procwrite)), 3, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf), 0, 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+var mapper = &mmapper{
+	active: make(map[*byte][]byte),
+	mmap:   mmap,
+	munmap: munmap,
+}
+
+func Mmap(fd int, offset int64, length int, prot int, flags int) (data []byte, err error) {
+	return mapper.Mmap(fd, offset, length, prot, flags)
+}
+
+func Munmap(b []byte) (err error) {
+	return mapper.Munmap(b)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_solaris_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_solaris_amd64.go
new file mode 100644
index 000000000..b22a34d7a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_solaris_amd64.go
@@ -0,0 +1,27 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build amd64,solaris
+
+package unix
+
+func setTimespec(sec, nsec int64) Timespec {
+	return Timespec{Sec: sec, Nsec: nsec}
+}
+
+func setTimeval(sec, usec int64) Timeval {
+	return Timeval{Sec: sec, Usec: usec}
+}
+
+func (iov *Iovec) SetLen(length int) {
+	iov.Len = uint64(length)
+}
+
+func (msghdr *Msghdr) SetIovlen(length int) {
+	msghdr.Iovlen = int32(length)
+}
+
+func (cmsg *Cmsghdr) SetLen(length int) {
+	cmsg.Len = uint32(length)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_unix.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_unix.go
new file mode 100644
index 000000000..400ba9fbc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_unix.go
@@ -0,0 +1,430 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris
+
+package unix
+
+import (
+	"bytes"
+	"sort"
+	"sync"
+	"syscall"
+	"unsafe"
+
+	"golang.org/x/sys/internal/unsafeheader"
+)
+
+var (
+	Stdin  = 0
+	Stdout = 1
+	Stderr = 2
+)
+
+// Do the interface allocations only once for common
+// Errno values.
+var (
+	errEAGAIN error = syscall.EAGAIN
+	errEINVAL error = syscall.EINVAL
+	errENOENT error = syscall.ENOENT
+)
+
+var (
+	signalNameMapOnce sync.Once
+	signalNameMap     map[string]syscall.Signal
+)
+
+// errnoErr returns common boxed Errno values, to prevent
+// allocations at runtime.
+func errnoErr(e syscall.Errno) error {
+	switch e {
+	case 0:
+		return nil
+	case EAGAIN:
+		return errEAGAIN
+	case EINVAL:
+		return errEINVAL
+	case ENOENT:
+		return errENOENT
+	}
+	return e
+}
+
+// ErrnoName returns the error name for error number e.
+func ErrnoName(e syscall.Errno) string {
+	i := sort.Search(len(errorList), func(i int) bool {
+		return errorList[i].num >= e
+	})
+	if i < len(errorList) && errorList[i].num == e {
+		return errorList[i].name
+	}
+	return ""
+}
+
+// SignalName returns the signal name for signal number s.
+func SignalName(s syscall.Signal) string {
+	i := sort.Search(len(signalList), func(i int) bool {
+		return signalList[i].num >= s
+	})
+	if i < len(signalList) && signalList[i].num == s {
+		return signalList[i].name
+	}
+	return ""
+}
+
+// SignalNum returns the syscall.Signal for signal named s,
+// or 0 if a signal with such name is not found.
+// The signal name should start with "SIG".
+func SignalNum(s string) syscall.Signal {
+	signalNameMapOnce.Do(func() {
+		signalNameMap = make(map[string]syscall.Signal, len(signalList))
+		for _, signal := range signalList {
+			signalNameMap[signal.name] = signal.num
+		}
+	})
+	return signalNameMap[s]
+}
+
+// clen returns the index of the first NULL byte in n or len(n) if n contains no NULL byte.
+func clen(n []byte) int {
+	i := bytes.IndexByte(n, 0)
+	if i == -1 {
+		i = len(n)
+	}
+	return i
+}
+
+// Mmap manager, for use by operating system-specific implementations.
+
+type mmapper struct {
+	sync.Mutex
+	active map[*byte][]byte // active mappings; key is last byte in mapping
+	mmap   func(addr, length uintptr, prot, flags, fd int, offset int64) (uintptr, error)
+	munmap func(addr uintptr, length uintptr) error
+}
+
+func (m *mmapper) Mmap(fd int, offset int64, length int, prot int, flags int) (data []byte, err error) {
+	if length <= 0 {
+		return nil, EINVAL
+	}
+
+	// Map the requested memory.
+	addr, errno := m.mmap(0, uintptr(length), prot, flags, fd, offset)
+	if errno != nil {
+		return nil, errno
+	}
+
+	// Use unsafe to convert addr into a []byte.
+	var b []byte
+	hdr := (*unsafeheader.Slice)(unsafe.Pointer(&b))
+	hdr.Data = unsafe.Pointer(addr)
+	hdr.Cap = length
+	hdr.Len = length
+
+	// Register mapping in m and return it.
+	p := &b[cap(b)-1]
+	m.Lock()
+	defer m.Unlock()
+	m.active[p] = b
+	return b, nil
+}
+
+func (m *mmapper) Munmap(data []byte) (err error) {
+	if len(data) == 0 || len(data) != cap(data) {
+		return EINVAL
+	}
+
+	// Find the base of the mapping.
+	p := &data[cap(data)-1]
+	m.Lock()
+	defer m.Unlock()
+	b := m.active[p]
+	if b == nil || &b[0] != &data[0] {
+		return EINVAL
+	}
+
+	// Unmap the memory and update m.
+	if errno := m.munmap(uintptr(unsafe.Pointer(&b[0])), uintptr(len(b))); errno != nil {
+		return errno
+	}
+	delete(m.active, p)
+	return nil
+}
+
+func Read(fd int, p []byte) (n int, err error) {
+	n, err = read(fd, p)
+	if raceenabled {
+		if n > 0 {
+			raceWriteRange(unsafe.Pointer(&p[0]), n)
+		}
+		if err == nil {
+			raceAcquire(unsafe.Pointer(&ioSync))
+		}
+	}
+	return
+}
+
+func Write(fd int, p []byte) (n int, err error) {
+	if raceenabled {
+		raceReleaseMerge(unsafe.Pointer(&ioSync))
+	}
+	n, err = write(fd, p)
+	if raceenabled && n > 0 {
+		raceReadRange(unsafe.Pointer(&p[0]), n)
+	}
+	return
+}
+
+// For testing: clients can set this flag to force
+// creation of IPv6 sockets to return EAFNOSUPPORT.
+var SocketDisableIPv6 bool
+
+// Sockaddr represents a socket address.
+type Sockaddr interface {
+	sockaddr() (ptr unsafe.Pointer, len _Socklen, err error) // lowercase; only we can define Sockaddrs
+}
+
+// SockaddrInet4 implements the Sockaddr interface for AF_INET type sockets.
+type SockaddrInet4 struct {
+	Port int
+	Addr [4]byte
+	raw  RawSockaddrInet4
+}
+
+// SockaddrInet6 implements the Sockaddr interface for AF_INET6 type sockets.
+type SockaddrInet6 struct {
+	Port   int
+	ZoneId uint32
+	Addr   [16]byte
+	raw    RawSockaddrInet6
+}
+
+// SockaddrUnix implements the Sockaddr interface for AF_UNIX type sockets.
+type SockaddrUnix struct {
+	Name string
+	raw  RawSockaddrUnix
+}
+
+func Bind(fd int, sa Sockaddr) (err error) {
+	ptr, n, err := sa.sockaddr()
+	if err != nil {
+		return err
+	}
+	return bind(fd, ptr, n)
+}
+
+func Connect(fd int, sa Sockaddr) (err error) {
+	ptr, n, err := sa.sockaddr()
+	if err != nil {
+		return err
+	}
+	return connect(fd, ptr, n)
+}
+
+func Getpeername(fd int) (sa Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	var len _Socklen = SizeofSockaddrAny
+	if err = getpeername(fd, &rsa, &len); err != nil {
+		return
+	}
+	return anyToSockaddr(fd, &rsa)
+}
+
+func GetsockoptByte(fd, level, opt int) (value byte, err error) {
+	var n byte
+	vallen := _Socklen(1)
+	err = getsockopt(fd, level, opt, unsafe.Pointer(&n), &vallen)
+	return n, err
+}
+
+func GetsockoptInt(fd, level, opt int) (value int, err error) {
+	var n int32
+	vallen := _Socklen(4)
+	err = getsockopt(fd, level, opt, unsafe.Pointer(&n), &vallen)
+	return int(n), err
+}
+
+func GetsockoptInet4Addr(fd, level, opt int) (value [4]byte, err error) {
+	vallen := _Socklen(4)
+	err = getsockopt(fd, level, opt, unsafe.Pointer(&value[0]), &vallen)
+	return value, err
+}
+
+func GetsockoptIPMreq(fd, level, opt int) (*IPMreq, error) {
+	var value IPMreq
+	vallen := _Socklen(SizeofIPMreq)
+	err := getsockopt(fd, level, opt, unsafe.Pointer(&value), &vallen)
+	return &value, err
+}
+
+func GetsockoptIPv6Mreq(fd, level, opt int) (*IPv6Mreq, error) {
+	var value IPv6Mreq
+	vallen := _Socklen(SizeofIPv6Mreq)
+	err := getsockopt(fd, level, opt, unsafe.Pointer(&value), &vallen)
+	return &value, err
+}
+
+func GetsockoptIPv6MTUInfo(fd, level, opt int) (*IPv6MTUInfo, error) {
+	var value IPv6MTUInfo
+	vallen := _Socklen(SizeofIPv6MTUInfo)
+	err := getsockopt(fd, level, opt, unsafe.Pointer(&value), &vallen)
+	return &value, err
+}
+
+func GetsockoptICMPv6Filter(fd, level, opt int) (*ICMPv6Filter, error) {
+	var value ICMPv6Filter
+	vallen := _Socklen(SizeofICMPv6Filter)
+	err := getsockopt(fd, level, opt, unsafe.Pointer(&value), &vallen)
+	return &value, err
+}
+
+func GetsockoptLinger(fd, level, opt int) (*Linger, error) {
+	var linger Linger
+	vallen := _Socklen(SizeofLinger)
+	err := getsockopt(fd, level, opt, unsafe.Pointer(&linger), &vallen)
+	return &linger, err
+}
+
+func GetsockoptTimeval(fd, level, opt int) (*Timeval, error) {
+	var tv Timeval
+	vallen := _Socklen(unsafe.Sizeof(tv))
+	err := getsockopt(fd, level, opt, unsafe.Pointer(&tv), &vallen)
+	return &tv, err
+}
+
+func GetsockoptUint64(fd, level, opt int) (value uint64, err error) {
+	var n uint64
+	vallen := _Socklen(8)
+	err = getsockopt(fd, level, opt, unsafe.Pointer(&n), &vallen)
+	return n, err
+}
+
+func Recvfrom(fd int, p []byte, flags int) (n int, from Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	var len _Socklen = SizeofSockaddrAny
+	if n, err = recvfrom(fd, p, flags, &rsa, &len); err != nil {
+		return
+	}
+	if rsa.Addr.Family != AF_UNSPEC {
+		from, err = anyToSockaddr(fd, &rsa)
+	}
+	return
+}
+
+func Sendto(fd int, p []byte, flags int, to Sockaddr) (err error) {
+	ptr, n, err := to.sockaddr()
+	if err != nil {
+		return err
+	}
+	return sendto(fd, p, flags, ptr, n)
+}
+
+func SetsockoptByte(fd, level, opt int, value byte) (err error) {
+	return setsockopt(fd, level, opt, unsafe.Pointer(&value), 1)
+}
+
+func SetsockoptInt(fd, level, opt int, value int) (err error) {
+	var n = int32(value)
+	return setsockopt(fd, level, opt, unsafe.Pointer(&n), 4)
+}
+
+func SetsockoptInet4Addr(fd, level, opt int, value [4]byte) (err error) {
+	return setsockopt(fd, level, opt, unsafe.Pointer(&value[0]), 4)
+}
+
+func SetsockoptIPMreq(fd, level, opt int, mreq *IPMreq) (err error) {
+	return setsockopt(fd, level, opt, unsafe.Pointer(mreq), SizeofIPMreq)
+}
+
+func SetsockoptIPv6Mreq(fd, level, opt int, mreq *IPv6Mreq) (err error) {
+	return setsockopt(fd, level, opt, unsafe.Pointer(mreq), SizeofIPv6Mreq)
+}
+
+func SetsockoptICMPv6Filter(fd, level, opt int, filter *ICMPv6Filter) error {
+	return setsockopt(fd, level, opt, unsafe.Pointer(filter), SizeofICMPv6Filter)
+}
+
+func SetsockoptLinger(fd, level, opt int, l *Linger) (err error) {
+	return setsockopt(fd, level, opt, unsafe.Pointer(l), SizeofLinger)
+}
+
+func SetsockoptString(fd, level, opt int, s string) (err error) {
+	var p unsafe.Pointer
+	if len(s) > 0 {
+		p = unsafe.Pointer(&[]byte(s)[0])
+	}
+	return setsockopt(fd, level, opt, p, uintptr(len(s)))
+}
+
+func SetsockoptTimeval(fd, level, opt int, tv *Timeval) (err error) {
+	return setsockopt(fd, level, opt, unsafe.Pointer(tv), unsafe.Sizeof(*tv))
+}
+
+func SetsockoptUint64(fd, level, opt int, value uint64) (err error) {
+	return setsockopt(fd, level, opt, unsafe.Pointer(&value), 8)
+}
+
+func Socket(domain, typ, proto int) (fd int, err error) {
+	if domain == AF_INET6 && SocketDisableIPv6 {
+		return -1, EAFNOSUPPORT
+	}
+	fd, err = socket(domain, typ, proto)
+	return
+}
+
+func Socketpair(domain, typ, proto int) (fd [2]int, err error) {
+	var fdx [2]int32
+	err = socketpair(domain, typ, proto, &fdx)
+	if err == nil {
+		fd[0] = int(fdx[0])
+		fd[1] = int(fdx[1])
+	}
+	return
+}
+
+var ioSync int64
+
+func CloseOnExec(fd int) { fcntl(fd, F_SETFD, FD_CLOEXEC) }
+
+func SetNonblock(fd int, nonblocking bool) (err error) {
+	flag, err := fcntl(fd, F_GETFL, 0)
+	if err != nil {
+		return err
+	}
+	if nonblocking {
+		flag |= O_NONBLOCK
+	} else {
+		flag &= ^O_NONBLOCK
+	}
+	_, err = fcntl(fd, F_SETFL, flag)
+	return err
+}
+
+// Exec calls execve(2), which replaces the calling executable in the process
+// tree. argv0 should be the full path to an executable ("/bin/ls") and the
+// executable name should also be the first argument in argv (["ls", "-l"]).
+// envv are the environment variables that should be passed to the new
+// process (["USER=go", "PWD=/tmp"]).
+func Exec(argv0 string, argv []string, envv []string) error {
+	return syscall.Exec(argv0, argv, envv)
+}
+
+// Lutimes sets the access and modification times tv on path. If path refers to
+// a symlink, it is not dereferenced and the timestamps are set on the symlink.
+// If tv is nil, the access and modification times are set to the current time.
+// Otherwise tv must contain exactly 2 elements, with access time as the first
+// element and modification time as the second element.
+func Lutimes(path string, tv []Timeval) error {
+	if tv == nil {
+		return UtimesNanoAt(AT_FDCWD, path, nil, AT_SYMLINK_NOFOLLOW)
+	}
+	if len(tv) != 2 {
+		return EINVAL
+	}
+	ts := []Timespec{
+		NsecToTimespec(TimevalToNsec(tv[0])),
+		NsecToTimespec(TimevalToNsec(tv[1])),
+	}
+	return UtimesNanoAt(AT_FDCWD, path, ts, AT_SYMLINK_NOFOLLOW)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_unix_gc.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_unix_gc.go
new file mode 100644
index 000000000..1c70d1b69
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_unix_gc.go
@@ -0,0 +1,15 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build darwin dragonfly freebsd linux netbsd openbsd solaris
+// +build !gccgo,!ppc64le,!ppc64
+
+package unix
+
+import "syscall"
+
+func Syscall(trap, a1, a2, a3 uintptr) (r1, r2 uintptr, err syscall.Errno)
+func Syscall6(trap, a1, a2, a3, a4, a5, a6 uintptr) (r1, r2 uintptr, err syscall.Errno)
+func RawSyscall(trap, a1, a2, a3 uintptr) (r1, r2 uintptr, err syscall.Errno)
+func RawSyscall6(trap, a1, a2, a3, a4, a5, a6 uintptr) (r1, r2 uintptr, err syscall.Errno)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_unix_gc_ppc64x.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_unix_gc_ppc64x.go
new file mode 100644
index 000000000..86dc765ab
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/syscall_unix_gc_ppc64x.go
@@ -0,0 +1,24 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build linux
+// +build ppc64le ppc64
+// +build !gccgo
+
+package unix
+
+import "syscall"
+
+func Syscall(trap, a1, a2, a3 uintptr) (r1, r2 uintptr, err syscall.Errno) {
+	return syscall.Syscall(trap, a1, a2, a3)
+}
+func Syscall6(trap, a1, a2, a3, a4, a5, a6 uintptr) (r1, r2 uintptr, err syscall.Errno) {
+	return syscall.Syscall6(trap, a1, a2, a3, a4, a5, a6)
+}
+func RawSyscall(trap, a1, a2, a3 uintptr) (r1, r2 uintptr, err syscall.Errno) {
+	return syscall.RawSyscall(trap, a1, a2, a3)
+}
+func RawSyscall6(trap, a1, a2, a3, a4, a5, a6 uintptr) (r1, r2 uintptr, err syscall.Errno) {
+	return syscall.RawSyscall6(trap, a1, a2, a3, a4, a5, a6)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/timestruct.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/timestruct.go
new file mode 100644
index 000000000..4a672f569
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/timestruct.go
@@ -0,0 +1,82 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build aix darwin dragonfly freebsd linux netbsd openbsd solaris
+
+package unix
+
+import "time"
+
+// TimespecToNsec converts a Timespec value into a number of
+// nanoseconds since the Unix epoch.
+func TimespecToNsec(ts Timespec) int64 { return int64(ts.Sec)*1e9 + int64(ts.Nsec) }
+
+// NsecToTimespec takes a number of nanoseconds since the Unix epoch
+// and returns the corresponding Timespec value.
+func NsecToTimespec(nsec int64) Timespec {
+	sec := nsec / 1e9
+	nsec = nsec % 1e9
+	if nsec < 0 {
+		nsec += 1e9
+		sec--
+	}
+	return setTimespec(sec, nsec)
+}
+
+// TimeToTimespec converts t into a Timespec.
+// On some 32-bit systems the range of valid Timespec values are smaller
+// than that of time.Time values.  So if t is out of the valid range of
+// Timespec, it returns a zero Timespec and ERANGE.
+func TimeToTimespec(t time.Time) (Timespec, error) {
+	sec := t.Unix()
+	nsec := int64(t.Nanosecond())
+	ts := setTimespec(sec, nsec)
+
+	// Currently all targets have either int32 or int64 for Timespec.Sec.
+	// If there were a new target with floating point type for it, we have
+	// to consider the rounding error.
+	if int64(ts.Sec) != sec {
+		return Timespec{}, ERANGE
+	}
+	return ts, nil
+}
+
+// TimevalToNsec converts a Timeval value into a number of nanoseconds
+// since the Unix epoch.
+func TimevalToNsec(tv Timeval) int64 { return int64(tv.Sec)*1e9 + int64(tv.Usec)*1e3 }
+
+// NsecToTimeval takes a number of nanoseconds since the Unix epoch
+// and returns the corresponding Timeval value.
+func NsecToTimeval(nsec int64) Timeval {
+	nsec += 999 // round up to microsecond
+	usec := nsec % 1e9 / 1e3
+	sec := nsec / 1e9
+	if usec < 0 {
+		usec += 1e6
+		sec--
+	}
+	return setTimeval(sec, usec)
+}
+
+// Unix returns ts as the number of seconds and nanoseconds elapsed since the
+// Unix epoch.
+func (ts *Timespec) Unix() (sec int64, nsec int64) {
+	return int64(ts.Sec), int64(ts.Nsec)
+}
+
+// Unix returns tv as the number of seconds and nanoseconds elapsed since the
+// Unix epoch.
+func (tv *Timeval) Unix() (sec int64, nsec int64) {
+	return int64(tv.Sec), int64(tv.Usec) * 1000
+}
+
+// Nano returns ts as the number of nanoseconds elapsed since the Unix epoch.
+func (ts *Timespec) Nano() int64 {
+	return int64(ts.Sec)*1e9 + int64(ts.Nsec)
+}
+
+// Nano returns tv as the number of nanoseconds elapsed since the Unix epoch.
+func (tv *Timeval) Nano() int64 {
+	return int64(tv.Sec)*1e9 + int64(tv.Usec)*1000
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/unveil_openbsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/unveil_openbsd.go
new file mode 100644
index 000000000..168d5ae77
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/unveil_openbsd.go
@@ -0,0 +1,42 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+// Unveil implements the unveil syscall.
+// For more information see unveil(2).
+// Note that the special case of blocking further
+// unveil calls is handled by UnveilBlock.
+func Unveil(path string, flags string) error {
+	pathPtr, err := syscall.BytePtrFromString(path)
+	if err != nil {
+		return err
+	}
+	flagsPtr, err := syscall.BytePtrFromString(flags)
+	if err != nil {
+		return err
+	}
+	_, _, e := syscall.Syscall(SYS_UNVEIL, uintptr(unsafe.Pointer(pathPtr)), uintptr(unsafe.Pointer(flagsPtr)), 0)
+	if e != 0 {
+		return e
+	}
+	return nil
+}
+
+// UnveilBlock blocks future unveil calls.
+// For more information see unveil(2).
+func UnveilBlock() error {
+	// Both pointers must be nil.
+	var pathUnsafe, flagsUnsafe unsafe.Pointer
+	_, _, e := syscall.Syscall(SYS_UNVEIL, uintptr(pathUnsafe), uintptr(flagsUnsafe), 0)
+	if e != 0 {
+		return e
+	}
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/xattr_bsd.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/xattr_bsd.go
new file mode 100644
index 000000000..30c1d71f4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/xattr_bsd.go
@@ -0,0 +1,240 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build freebsd netbsd
+
+package unix
+
+import (
+	"strings"
+	"unsafe"
+)
+
+// Derive extattr namespace and attribute name
+
+func xattrnamespace(fullattr string) (ns int, attr string, err error) {
+	s := strings.IndexByte(fullattr, '.')
+	if s == -1 {
+		return -1, "", ENOATTR
+	}
+
+	namespace := fullattr[0:s]
+	attr = fullattr[s+1:]
+
+	switch namespace {
+	case "user":
+		return EXTATTR_NAMESPACE_USER, attr, nil
+	case "system":
+		return EXTATTR_NAMESPACE_SYSTEM, attr, nil
+	default:
+		return -1, "", ENOATTR
+	}
+}
+
+func initxattrdest(dest []byte, idx int) (d unsafe.Pointer) {
+	if len(dest) > idx {
+		return unsafe.Pointer(&dest[idx])
+	} else {
+		return unsafe.Pointer(_zero)
+	}
+}
+
+// FreeBSD and NetBSD implement their own syscalls to handle extended attributes
+
+func Getxattr(file string, attr string, dest []byte) (sz int, err error) {
+	d := initxattrdest(dest, 0)
+	destsize := len(dest)
+
+	nsid, a, err := xattrnamespace(attr)
+	if err != nil {
+		return -1, err
+	}
+
+	return ExtattrGetFile(file, nsid, a, uintptr(d), destsize)
+}
+
+func Fgetxattr(fd int, attr string, dest []byte) (sz int, err error) {
+	d := initxattrdest(dest, 0)
+	destsize := len(dest)
+
+	nsid, a, err := xattrnamespace(attr)
+	if err != nil {
+		return -1, err
+	}
+
+	return ExtattrGetFd(fd, nsid, a, uintptr(d), destsize)
+}
+
+func Lgetxattr(link string, attr string, dest []byte) (sz int, err error) {
+	d := initxattrdest(dest, 0)
+	destsize := len(dest)
+
+	nsid, a, err := xattrnamespace(attr)
+	if err != nil {
+		return -1, err
+	}
+
+	return ExtattrGetLink(link, nsid, a, uintptr(d), destsize)
+}
+
+// flags are unused on FreeBSD
+
+func Fsetxattr(fd int, attr string, data []byte, flags int) (err error) {
+	var d unsafe.Pointer
+	if len(data) > 0 {
+		d = unsafe.Pointer(&data[0])
+	}
+	datasiz := len(data)
+
+	nsid, a, err := xattrnamespace(attr)
+	if err != nil {
+		return
+	}
+
+	_, err = ExtattrSetFd(fd, nsid, a, uintptr(d), datasiz)
+	return
+}
+
+func Setxattr(file string, attr string, data []byte, flags int) (err error) {
+	var d unsafe.Pointer
+	if len(data) > 0 {
+		d = unsafe.Pointer(&data[0])
+	}
+	datasiz := len(data)
+
+	nsid, a, err := xattrnamespace(attr)
+	if err != nil {
+		return
+	}
+
+	_, err = ExtattrSetFile(file, nsid, a, uintptr(d), datasiz)
+	return
+}
+
+func Lsetxattr(link string, attr string, data []byte, flags int) (err error) {
+	var d unsafe.Pointer
+	if len(data) > 0 {
+		d = unsafe.Pointer(&data[0])
+	}
+	datasiz := len(data)
+
+	nsid, a, err := xattrnamespace(attr)
+	if err != nil {
+		return
+	}
+
+	_, err = ExtattrSetLink(link, nsid, a, uintptr(d), datasiz)
+	return
+}
+
+func Removexattr(file string, attr string) (err error) {
+	nsid, a, err := xattrnamespace(attr)
+	if err != nil {
+		return
+	}
+
+	err = ExtattrDeleteFile(file, nsid, a)
+	return
+}
+
+func Fremovexattr(fd int, attr string) (err error) {
+	nsid, a, err := xattrnamespace(attr)
+	if err != nil {
+		return
+	}
+
+	err = ExtattrDeleteFd(fd, nsid, a)
+	return
+}
+
+func Lremovexattr(link string, attr string) (err error) {
+	nsid, a, err := xattrnamespace(attr)
+	if err != nil {
+		return
+	}
+
+	err = ExtattrDeleteLink(link, nsid, a)
+	return
+}
+
+func Listxattr(file string, dest []byte) (sz int, err error) {
+	d := initxattrdest(dest, 0)
+	destsiz := len(dest)
+
+	// FreeBSD won't allow you to list xattrs from multiple namespaces
+	s := 0
+	for _, nsid := range [...]int{EXTATTR_NAMESPACE_USER, EXTATTR_NAMESPACE_SYSTEM} {
+		stmp, e := ExtattrListFile(file, nsid, uintptr(d), destsiz)
+
+		/* Errors accessing system attrs are ignored so that
+		 * we can implement the Linux-like behavior of omitting errors that
+		 * we don't have read permissions on
+		 *
+		 * Linux will still error if we ask for user attributes on a file that
+		 * we don't have read permissions on, so don't ignore those errors
+		 */
+		if e != nil && e == EPERM && nsid != EXTATTR_NAMESPACE_USER {
+			continue
+		} else if e != nil {
+			return s, e
+		}
+
+		s += stmp
+		destsiz -= s
+		if destsiz < 0 {
+			destsiz = 0
+		}
+		d = initxattrdest(dest, s)
+	}
+
+	return s, nil
+}
+
+func Flistxattr(fd int, dest []byte) (sz int, err error) {
+	d := initxattrdest(dest, 0)
+	destsiz := len(dest)
+
+	s := 0
+	for _, nsid := range [...]int{EXTATTR_NAMESPACE_USER, EXTATTR_NAMESPACE_SYSTEM} {
+		stmp, e := ExtattrListFd(fd, nsid, uintptr(d), destsiz)
+		if e != nil && e == EPERM && nsid != EXTATTR_NAMESPACE_USER {
+			continue
+		} else if e != nil {
+			return s, e
+		}
+
+		s += stmp
+		destsiz -= s
+		if destsiz < 0 {
+			destsiz = 0
+		}
+		d = initxattrdest(dest, s)
+	}
+
+	return s, nil
+}
+
+func Llistxattr(link string, dest []byte) (sz int, err error) {
+	d := initxattrdest(dest, 0)
+	destsiz := len(dest)
+
+	s := 0
+	for _, nsid := range [...]int{EXTATTR_NAMESPACE_USER, EXTATTR_NAMESPACE_SYSTEM} {
+		stmp, e := ExtattrListLink(link, nsid, uintptr(d), destsiz)
+		if e != nil && e == EPERM && nsid != EXTATTR_NAMESPACE_USER {
+			continue
+		} else if e != nil {
+			return s, e
+		}
+
+		s += stmp
+		destsiz -= s
+		if destsiz < 0 {
+			destsiz = 0
+		}
+		d = initxattrdest(dest, s)
+	}
+
+	return s, nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_aix_ppc.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_aix_ppc.go
new file mode 100644
index 000000000..104994bc6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_aix_ppc.go
@@ -0,0 +1,1384 @@
+// mkerrors.sh -maix32
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build ppc,aix
+
+// Created by cgo -godefs - DO NOT EDIT
+// cgo -godefs -- -maix32 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                  = 0x10
+	AF_BYPASS                     = 0x19
+	AF_CCITT                      = 0xa
+	AF_CHAOS                      = 0x5
+	AF_DATAKIT                    = 0x9
+	AF_DECnet                     = 0xc
+	AF_DLI                        = 0xd
+	AF_ECMA                       = 0x8
+	AF_HYLINK                     = 0xf
+	AF_IMPLINK                    = 0x3
+	AF_INET                       = 0x2
+	AF_INET6                      = 0x18
+	AF_INTF                       = 0x14
+	AF_ISO                        = 0x7
+	AF_LAT                        = 0xe
+	AF_LINK                       = 0x12
+	AF_LOCAL                      = 0x1
+	AF_MAX                        = 0x1e
+	AF_NDD                        = 0x17
+	AF_NETWARE                    = 0x16
+	AF_NS                         = 0x6
+	AF_OSI                        = 0x7
+	AF_PUP                        = 0x4
+	AF_RIF                        = 0x15
+	AF_ROUTE                      = 0x11
+	AF_SNA                        = 0xb
+	AF_UNIX                       = 0x1
+	AF_UNSPEC                     = 0x0
+	ALTWERASE                     = 0x400000
+	ARPHRD_802_3                  = 0x6
+	ARPHRD_802_5                  = 0x6
+	ARPHRD_ETHER                  = 0x1
+	ARPHRD_FDDI                   = 0x1
+	B0                            = 0x0
+	B110                          = 0x3
+	B1200                         = 0x9
+	B134                          = 0x4
+	B150                          = 0x5
+	B1800                         = 0xa
+	B19200                        = 0xe
+	B200                          = 0x6
+	B2400                         = 0xb
+	B300                          = 0x7
+	B38400                        = 0xf
+	B4800                         = 0xc
+	B50                           = 0x1
+	B600                          = 0x8
+	B75                           = 0x2
+	B9600                         = 0xd
+	BRKINT                        = 0x2
+	BS0                           = 0x0
+	BS1                           = 0x1000
+	BSDLY                         = 0x1000
+	CAP_AACCT                     = 0x6
+	CAP_ARM_APPLICATION           = 0x5
+	CAP_BYPASS_RAC_VMM            = 0x3
+	CAP_CLEAR                     = 0x0
+	CAP_CREDENTIALS               = 0x7
+	CAP_EFFECTIVE                 = 0x1
+	CAP_EWLM_AGENT                = 0x4
+	CAP_INHERITABLE               = 0x2
+	CAP_MAXIMUM                   = 0x7
+	CAP_NUMA_ATTACH               = 0x2
+	CAP_PERMITTED                 = 0x3
+	CAP_PROPAGATE                 = 0x1
+	CAP_PROPOGATE                 = 0x1
+	CAP_SET                       = 0x1
+	CBAUD                         = 0xf
+	CFLUSH                        = 0xf
+	CIBAUD                        = 0xf0000
+	CLOCAL                        = 0x800
+	CLOCK_MONOTONIC               = 0xa
+	CLOCK_PROCESS_CPUTIME_ID      = 0xb
+	CLOCK_REALTIME                = 0x9
+	CLOCK_THREAD_CPUTIME_ID       = 0xc
+	CR0                           = 0x0
+	CR1                           = 0x100
+	CR2                           = 0x200
+	CR3                           = 0x300
+	CRDLY                         = 0x300
+	CREAD                         = 0x80
+	CS5                           = 0x0
+	CS6                           = 0x10
+	CS7                           = 0x20
+	CS8                           = 0x30
+	CSIOCGIFCONF                  = -0x3ff796dc
+	CSIZE                         = 0x30
+	CSMAP_DIR                     = "/usr/lib/nls/csmap/"
+	CSTART                        = '\021'
+	CSTOP                         = '\023'
+	CSTOPB                        = 0x40
+	CSUSP                         = 0x1a
+	ECHO                          = 0x8
+	ECHOCTL                       = 0x20000
+	ECHOE                         = 0x10
+	ECHOK                         = 0x20
+	ECHOKE                        = 0x80000
+	ECHONL                        = 0x40
+	ECHOPRT                       = 0x40000
+	ECH_ICMPID                    = 0x2
+	ETHERNET_CSMACD               = 0x6
+	EVENP                         = 0x80
+	EXCONTINUE                    = 0x0
+	EXDLOK                        = 0x3
+	EXIO                          = 0x2
+	EXPGIO                        = 0x0
+	EXRESUME                      = 0x2
+	EXRETURN                      = 0x1
+	EXSIG                         = 0x4
+	EXTA                          = 0xe
+	EXTB                          = 0xf
+	EXTRAP                        = 0x1
+	EYEC_RTENTRYA                 = 0x257274656e747241
+	EYEC_RTENTRYF                 = 0x257274656e747246
+	E_ACC                         = 0x0
+	FD_CLOEXEC                    = 0x1
+	FD_SETSIZE                    = 0xfffe
+	FF0                           = 0x0
+	FF1                           = 0x2000
+	FFDLY                         = 0x2000
+	FLUSHBAND                     = 0x40
+	FLUSHLOW                      = 0x8
+	FLUSHO                        = 0x100000
+	FLUSHR                        = 0x1
+	FLUSHRW                       = 0x3
+	FLUSHW                        = 0x2
+	F_CLOSEM                      = 0xa
+	F_DUP2FD                      = 0xe
+	F_DUPFD                       = 0x0
+	F_GETFD                       = 0x1
+	F_GETFL                       = 0x3
+	F_GETLK                       = 0x5
+	F_GETLK64                     = 0xb
+	F_GETOWN                      = 0x8
+	F_LOCK                        = 0x1
+	F_OK                          = 0x0
+	F_RDLCK                       = 0x1
+	F_SETFD                       = 0x2
+	F_SETFL                       = 0x4
+	F_SETLK                       = 0x6
+	F_SETLK64                     = 0xc
+	F_SETLKW                      = 0x7
+	F_SETLKW64                    = 0xd
+	F_SETOWN                      = 0x9
+	F_TEST                        = 0x3
+	F_TLOCK                       = 0x2
+	F_TSTLK                       = 0xf
+	F_ULOCK                       = 0x0
+	F_UNLCK                       = 0x3
+	F_WRLCK                       = 0x2
+	HUPCL                         = 0x400
+	IBSHIFT                       = 0x10
+	ICANON                        = 0x2
+	ICMP6_FILTER                  = 0x26
+	ICMP6_SEC_SEND_DEL            = 0x46
+	ICMP6_SEC_SEND_GET            = 0x47
+	ICMP6_SEC_SEND_SET            = 0x44
+	ICMP6_SEC_SEND_SET_CGA_ADDR   = 0x45
+	ICRNL                         = 0x100
+	IEXTEN                        = 0x200000
+	IFA_FIRSTALIAS                = 0x2000
+	IFA_ROUTE                     = 0x1
+	IFF_64BIT                     = 0x4000000
+	IFF_ALLCAST                   = 0x20000
+	IFF_ALLMULTI                  = 0x200
+	IFF_BPF                       = 0x8000000
+	IFF_BRIDGE                    = 0x40000
+	IFF_BROADCAST                 = 0x2
+	IFF_CANTCHANGE                = 0x80c52
+	IFF_CHECKSUM_OFFLOAD          = 0x10000000
+	IFF_D1                        = 0x8000
+	IFF_D2                        = 0x4000
+	IFF_D3                        = 0x2000
+	IFF_D4                        = 0x1000
+	IFF_DEBUG                     = 0x4
+	IFF_DEVHEALTH                 = 0x4000
+	IFF_DO_HW_LOOPBACK            = 0x10000
+	IFF_GROUP_ROUTING             = 0x2000000
+	IFF_IFBUFMGT                  = 0x800000
+	IFF_LINK0                     = 0x100000
+	IFF_LINK1                     = 0x200000
+	IFF_LINK2                     = 0x400000
+	IFF_LOOPBACK                  = 0x8
+	IFF_MULTICAST                 = 0x80000
+	IFF_NOARP                     = 0x80
+	IFF_NOECHO                    = 0x800
+	IFF_NOTRAILERS                = 0x20
+	IFF_OACTIVE                   = 0x400
+	IFF_POINTOPOINT               = 0x10
+	IFF_PROMISC                   = 0x100
+	IFF_PSEG                      = 0x40000000
+	IFF_RUNNING                   = 0x40
+	IFF_SIMPLEX                   = 0x800
+	IFF_SNAP                      = 0x8000
+	IFF_TCP_DISABLE_CKSUM         = 0x20000000
+	IFF_TCP_NOCKSUM               = 0x1000000
+	IFF_UP                        = 0x1
+	IFF_VIPA                      = 0x80000000
+	IFNAMSIZ                      = 0x10
+	IFO_FLUSH                     = 0x1
+	IFT_1822                      = 0x2
+	IFT_AAL5                      = 0x31
+	IFT_ARCNET                    = 0x23
+	IFT_ARCNETPLUS                = 0x24
+	IFT_ATM                       = 0x25
+	IFT_CEPT                      = 0x13
+	IFT_CLUSTER                   = 0x3e
+	IFT_DS3                       = 0x1e
+	IFT_EON                       = 0x19
+	IFT_ETHER                     = 0x6
+	IFT_FCS                       = 0x3a
+	IFT_FDDI                      = 0xf
+	IFT_FRELAY                    = 0x20
+	IFT_FRELAYDCE                 = 0x2c
+	IFT_GIFTUNNEL                 = 0x3c
+	IFT_HDH1822                   = 0x3
+	IFT_HF                        = 0x3d
+	IFT_HIPPI                     = 0x2f
+	IFT_HSSI                      = 0x2e
+	IFT_HY                        = 0xe
+	IFT_IB                        = 0xc7
+	IFT_ISDNBASIC                 = 0x14
+	IFT_ISDNPRIMARY               = 0x15
+	IFT_ISO88022LLC               = 0x29
+	IFT_ISO88023                  = 0x7
+	IFT_ISO88024                  = 0x8
+	IFT_ISO88025                  = 0x9
+	IFT_ISO88026                  = 0xa
+	IFT_LAPB                      = 0x10
+	IFT_LOCALTALK                 = 0x2a
+	IFT_LOOP                      = 0x18
+	IFT_MIOX25                    = 0x26
+	IFT_MODEM                     = 0x30
+	IFT_NSIP                      = 0x1b
+	IFT_OTHER                     = 0x1
+	IFT_P10                       = 0xc
+	IFT_P80                       = 0xd
+	IFT_PARA                      = 0x22
+	IFT_PPP                       = 0x17
+	IFT_PROPMUX                   = 0x36
+	IFT_PROPVIRTUAL               = 0x35
+	IFT_PTPSERIAL                 = 0x16
+	IFT_RS232                     = 0x21
+	IFT_SDLC                      = 0x11
+	IFT_SIP                       = 0x1f
+	IFT_SLIP                      = 0x1c
+	IFT_SMDSDXI                   = 0x2b
+	IFT_SMDSICIP                  = 0x34
+	IFT_SN                        = 0x38
+	IFT_SONET                     = 0x27
+	IFT_SONETPATH                 = 0x32
+	IFT_SONETVT                   = 0x33
+	IFT_SP                        = 0x39
+	IFT_STARLAN                   = 0xb
+	IFT_T1                        = 0x12
+	IFT_TUNNEL                    = 0x3b
+	IFT_ULTRA                     = 0x1d
+	IFT_V35                       = 0x2d
+	IFT_VIPA                      = 0x37
+	IFT_X25                       = 0x5
+	IFT_X25DDN                    = 0x4
+	IFT_X25PLE                    = 0x28
+	IFT_XETHER                    = 0x1a
+	IGNBRK                        = 0x1
+	IGNCR                         = 0x80
+	IGNPAR                        = 0x4
+	IMAXBEL                       = 0x10000
+	INLCR                         = 0x40
+	INPCK                         = 0x10
+	IN_CLASSA_HOST                = 0xffffff
+	IN_CLASSA_MAX                 = 0x80
+	IN_CLASSA_NET                 = 0xff000000
+	IN_CLASSA_NSHIFT              = 0x18
+	IN_CLASSB_HOST                = 0xffff
+	IN_CLASSB_MAX                 = 0x10000
+	IN_CLASSB_NET                 = 0xffff0000
+	IN_CLASSB_NSHIFT              = 0x10
+	IN_CLASSC_HOST                = 0xff
+	IN_CLASSC_NET                 = 0xffffff00
+	IN_CLASSC_NSHIFT              = 0x8
+	IN_CLASSD_HOST                = 0xfffffff
+	IN_CLASSD_NET                 = 0xf0000000
+	IN_CLASSD_NSHIFT              = 0x1c
+	IN_LOOPBACKNET                = 0x7f
+	IN_USE                        = 0x1
+	IPPROTO_AH                    = 0x33
+	IPPROTO_BIP                   = 0x53
+	IPPROTO_DSTOPTS               = 0x3c
+	IPPROTO_EGP                   = 0x8
+	IPPROTO_EON                   = 0x50
+	IPPROTO_ESP                   = 0x32
+	IPPROTO_FRAGMENT              = 0x2c
+	IPPROTO_GGP                   = 0x3
+	IPPROTO_GIF                   = 0x8c
+	IPPROTO_GRE                   = 0x2f
+	IPPROTO_HOPOPTS               = 0x0
+	IPPROTO_ICMP                  = 0x1
+	IPPROTO_ICMPV6                = 0x3a
+	IPPROTO_IDP                   = 0x16
+	IPPROTO_IGMP                  = 0x2
+	IPPROTO_IP                    = 0x0
+	IPPROTO_IPIP                  = 0x4
+	IPPROTO_IPV6                  = 0x29
+	IPPROTO_LOCAL                 = 0x3f
+	IPPROTO_MAX                   = 0x100
+	IPPROTO_MH                    = 0x87
+	IPPROTO_NONE                  = 0x3b
+	IPPROTO_PUP                   = 0xc
+	IPPROTO_QOS                   = 0x2d
+	IPPROTO_RAW                   = 0xff
+	IPPROTO_ROUTING               = 0x2b
+	IPPROTO_RSVP                  = 0x2e
+	IPPROTO_SCTP                  = 0x84
+	IPPROTO_TCP                   = 0x6
+	IPPROTO_TP                    = 0x1d
+	IPPROTO_UDP                   = 0x11
+	IPV6_ADDRFORM                 = 0x16
+	IPV6_ADDR_PREFERENCES         = 0x4a
+	IPV6_ADD_MEMBERSHIP           = 0xc
+	IPV6_AIXRAWSOCKET             = 0x39
+	IPV6_CHECKSUM                 = 0x27
+	IPV6_DONTFRAG                 = 0x2d
+	IPV6_DROP_MEMBERSHIP          = 0xd
+	IPV6_DSTOPTS                  = 0x36
+	IPV6_FLOWINFO_FLOWLABEL       = 0xffffff
+	IPV6_FLOWINFO_PRIFLOW         = 0xfffffff
+	IPV6_FLOWINFO_PRIORITY        = 0xf000000
+	IPV6_FLOWINFO_SRFLAG          = 0x10000000
+	IPV6_FLOWINFO_VERSION         = 0xf0000000
+	IPV6_HOPLIMIT                 = 0x28
+	IPV6_HOPOPTS                  = 0x34
+	IPV6_JOIN_GROUP               = 0xc
+	IPV6_LEAVE_GROUP              = 0xd
+	IPV6_MIPDSTOPTS               = 0x36
+	IPV6_MULTICAST_HOPS           = 0xa
+	IPV6_MULTICAST_IF             = 0x9
+	IPV6_MULTICAST_LOOP           = 0xb
+	IPV6_NEXTHOP                  = 0x30
+	IPV6_NOPROBE                  = 0x1c
+	IPV6_PATHMTU                  = 0x2e
+	IPV6_PKTINFO                  = 0x21
+	IPV6_PKTOPTIONS               = 0x24
+	IPV6_PRIORITY_10              = 0xa000000
+	IPV6_PRIORITY_11              = 0xb000000
+	IPV6_PRIORITY_12              = 0xc000000
+	IPV6_PRIORITY_13              = 0xd000000
+	IPV6_PRIORITY_14              = 0xe000000
+	IPV6_PRIORITY_15              = 0xf000000
+	IPV6_PRIORITY_8               = 0x8000000
+	IPV6_PRIORITY_9               = 0x9000000
+	IPV6_PRIORITY_BULK            = 0x4000000
+	IPV6_PRIORITY_CONTROL         = 0x7000000
+	IPV6_PRIORITY_FILLER          = 0x1000000
+	IPV6_PRIORITY_INTERACTIVE     = 0x6000000
+	IPV6_PRIORITY_RESERVED1       = 0x3000000
+	IPV6_PRIORITY_RESERVED2       = 0x5000000
+	IPV6_PRIORITY_UNATTENDED      = 0x2000000
+	IPV6_PRIORITY_UNCHARACTERIZED = 0x0
+	IPV6_RECVDSTOPTS              = 0x38
+	IPV6_RECVHOPLIMIT             = 0x29
+	IPV6_RECVHOPOPTS              = 0x35
+	IPV6_RECVHOPS                 = 0x22
+	IPV6_RECVIF                   = 0x1e
+	IPV6_RECVPATHMTU              = 0x2f
+	IPV6_RECVPKTINFO              = 0x23
+	IPV6_RECVRTHDR                = 0x33
+	IPV6_RECVSRCRT                = 0x1d
+	IPV6_RECVTCLASS               = 0x2a
+	IPV6_RTHDR                    = 0x32
+	IPV6_RTHDRDSTOPTS             = 0x37
+	IPV6_RTHDR_TYPE_0             = 0x0
+	IPV6_RTHDR_TYPE_2             = 0x2
+	IPV6_SENDIF                   = 0x1f
+	IPV6_SRFLAG_LOOSE             = 0x0
+	IPV6_SRFLAG_STRICT            = 0x10000000
+	IPV6_TCLASS                   = 0x2b
+	IPV6_TOKEN_LENGTH             = 0x40
+	IPV6_UNICAST_HOPS             = 0x4
+	IPV6_USE_MIN_MTU              = 0x2c
+	IPV6_V6ONLY                   = 0x25
+	IPV6_VERSION                  = 0x60000000
+	IP_ADDRFORM                   = 0x16
+	IP_ADD_MEMBERSHIP             = 0xc
+	IP_ADD_SOURCE_MEMBERSHIP      = 0x3c
+	IP_BLOCK_SOURCE               = 0x3a
+	IP_BROADCAST_IF               = 0x10
+	IP_CACHE_LINE_SIZE            = 0x80
+	IP_DEFAULT_MULTICAST_LOOP     = 0x1
+	IP_DEFAULT_MULTICAST_TTL      = 0x1
+	IP_DF                         = 0x4000
+	IP_DHCPMODE                   = 0x11
+	IP_DONTFRAG                   = 0x19
+	IP_DROP_MEMBERSHIP            = 0xd
+	IP_DROP_SOURCE_MEMBERSHIP     = 0x3d
+	IP_FINDPMTU                   = 0x1a
+	IP_HDRINCL                    = 0x2
+	IP_INC_MEMBERSHIPS            = 0x14
+	IP_INIT_MEMBERSHIP            = 0x14
+	IP_MAXPACKET                  = 0xffff
+	IP_MF                         = 0x2000
+	IP_MSS                        = 0x240
+	IP_MULTICAST_HOPS             = 0xa
+	IP_MULTICAST_IF               = 0x9
+	IP_MULTICAST_LOOP             = 0xb
+	IP_MULTICAST_TTL              = 0xa
+	IP_OPT                        = 0x1b
+	IP_OPTIONS                    = 0x1
+	IP_PMTUAGE                    = 0x1b
+	IP_RECVDSTADDR                = 0x7
+	IP_RECVIF                     = 0x14
+	IP_RECVIFINFO                 = 0xf
+	IP_RECVINTERFACE              = 0x20
+	IP_RECVMACHDR                 = 0xe
+	IP_RECVOPTS                   = 0x5
+	IP_RECVRETOPTS                = 0x6
+	IP_RECVTTL                    = 0x22
+	IP_RETOPTS                    = 0x8
+	IP_SOURCE_FILTER              = 0x48
+	IP_TOS                        = 0x3
+	IP_TTL                        = 0x4
+	IP_UNBLOCK_SOURCE             = 0x3b
+	IP_UNICAST_HOPS               = 0x4
+	ISIG                          = 0x1
+	ISTRIP                        = 0x20
+	IUCLC                         = 0x800
+	IXANY                         = 0x1000
+	IXOFF                         = 0x400
+	IXON                          = 0x200
+	I_FLUSH                       = 0x20005305
+	LNOFLSH                       = 0x8000
+	LOCK_EX                       = 0x2
+	LOCK_NB                       = 0x4
+	LOCK_SH                       = 0x1
+	LOCK_UN                       = 0x8
+	MADV_DONTNEED                 = 0x4
+	MADV_NORMAL                   = 0x0
+	MADV_RANDOM                   = 0x1
+	MADV_SEQUENTIAL               = 0x2
+	MADV_SPACEAVAIL               = 0x5
+	MADV_WILLNEED                 = 0x3
+	MAP_ANON                      = 0x10
+	MAP_ANONYMOUS                 = 0x10
+	MAP_FILE                      = 0x0
+	MAP_FIXED                     = 0x100
+	MAP_PRIVATE                   = 0x2
+	MAP_SHARED                    = 0x1
+	MAP_TYPE                      = 0xf0
+	MAP_VARIABLE                  = 0x0
+	MCAST_BLOCK_SOURCE            = 0x40
+	MCAST_EXCLUDE                 = 0x2
+	MCAST_INCLUDE                 = 0x1
+	MCAST_JOIN_GROUP              = 0x3e
+	MCAST_JOIN_SOURCE_GROUP       = 0x42
+	MCAST_LEAVE_GROUP             = 0x3f
+	MCAST_LEAVE_SOURCE_GROUP      = 0x43
+	MCAST_SOURCE_FILTER           = 0x49
+	MCAST_UNBLOCK_SOURCE          = 0x41
+	MCL_CURRENT                   = 0x100
+	MCL_FUTURE                    = 0x200
+	MSG_ANY                       = 0x4
+	MSG_ARGEXT                    = 0x400
+	MSG_BAND                      = 0x2
+	MSG_COMPAT                    = 0x8000
+	MSG_CTRUNC                    = 0x20
+	MSG_DONTROUTE                 = 0x4
+	MSG_EOR                       = 0x8
+	MSG_HIPRI                     = 0x1
+	MSG_MAXIOVLEN                 = 0x10
+	MSG_MPEG2                     = 0x80
+	MSG_NONBLOCK                  = 0x4000
+	MSG_NOSIGNAL                  = 0x100
+	MSG_OOB                       = 0x1
+	MSG_PEEK                      = 0x2
+	MSG_TRUNC                     = 0x10
+	MSG_WAITALL                   = 0x40
+	MSG_WAITFORONE                = 0x200
+	MS_ASYNC                      = 0x10
+	MS_EINTR                      = 0x80
+	MS_INVALIDATE                 = 0x40
+	MS_PER_SEC                    = 0x3e8
+	MS_SYNC                       = 0x20
+	NFDBITS                       = 0x20
+	NL0                           = 0x0
+	NL1                           = 0x4000
+	NL2                           = 0x8000
+	NL3                           = 0xc000
+	NLDLY                         = 0x4000
+	NOFLSH                        = 0x80
+	NOFLUSH                       = 0x80000000
+	OCRNL                         = 0x8
+	OFDEL                         = 0x80
+	OFILL                         = 0x40
+	OLCUC                         = 0x2
+	ONLCR                         = 0x4
+	ONLRET                        = 0x20
+	ONOCR                         = 0x10
+	ONOEOT                        = 0x80000
+	OPOST                         = 0x1
+	OXTABS                        = 0x40000
+	O_ACCMODE                     = 0x23
+	O_APPEND                      = 0x8
+	O_CIO                         = 0x80
+	O_CIOR                        = 0x800000000
+	O_CLOEXEC                     = 0x800000
+	O_CREAT                       = 0x100
+	O_DEFER                       = 0x2000
+	O_DELAY                       = 0x4000
+	O_DIRECT                      = 0x8000000
+	O_DIRECTORY                   = 0x80000
+	O_DSYNC                       = 0x400000
+	O_EFSOFF                      = 0x400000000
+	O_EFSON                       = 0x200000000
+	O_EXCL                        = 0x400
+	O_EXEC                        = 0x20
+	O_LARGEFILE                   = 0x4000000
+	O_NDELAY                      = 0x8000
+	O_NOCACHE                     = 0x100000
+	O_NOCTTY                      = 0x800
+	O_NOFOLLOW                    = 0x1000000
+	O_NONBLOCK                    = 0x4
+	O_NONE                        = 0x3
+	O_NSHARE                      = 0x10000
+	O_RAW                         = 0x100000000
+	O_RDONLY                      = 0x0
+	O_RDWR                        = 0x2
+	O_RSHARE                      = 0x1000
+	O_RSYNC                       = 0x200000
+	O_SEARCH                      = 0x20
+	O_SNAPSHOT                    = 0x40
+	O_SYNC                        = 0x10
+	O_TRUNC                       = 0x200
+	O_TTY_INIT                    = 0x0
+	O_WRONLY                      = 0x1
+	PARENB                        = 0x100
+	PAREXT                        = 0x100000
+	PARMRK                        = 0x8
+	PARODD                        = 0x200
+	PENDIN                        = 0x20000000
+	PRIO_PGRP                     = 0x1
+	PRIO_PROCESS                  = 0x0
+	PRIO_USER                     = 0x2
+	PROT_EXEC                     = 0x4
+	PROT_NONE                     = 0x0
+	PROT_READ                     = 0x1
+	PROT_WRITE                    = 0x2
+	PR_64BIT                      = 0x20
+	PR_ADDR                       = 0x2
+	PR_ARGEXT                     = 0x400
+	PR_ATOMIC                     = 0x1
+	PR_CONNREQUIRED               = 0x4
+	PR_FASTHZ                     = 0x5
+	PR_INP                        = 0x40
+	PR_INTRLEVEL                  = 0x8000
+	PR_MLS                        = 0x100
+	PR_MLS_1_LABEL                = 0x200
+	PR_NOEOR                      = 0x4000
+	PR_RIGHTS                     = 0x10
+	PR_SLOWHZ                     = 0x2
+	PR_WANTRCVD                   = 0x8
+	RLIMIT_AS                     = 0x6
+	RLIMIT_CORE                   = 0x4
+	RLIMIT_CPU                    = 0x0
+	RLIMIT_DATA                   = 0x2
+	RLIMIT_FSIZE                  = 0x1
+	RLIMIT_NOFILE                 = 0x7
+	RLIMIT_NPROC                  = 0x9
+	RLIMIT_RSS                    = 0x5
+	RLIMIT_STACK                  = 0x3
+	RLIM_INFINITY                 = 0x7fffffff
+	RTAX_AUTHOR                   = 0x6
+	RTAX_BRD                      = 0x7
+	RTAX_DST                      = 0x0
+	RTAX_GATEWAY                  = 0x1
+	RTAX_GENMASK                  = 0x3
+	RTAX_IFA                      = 0x5
+	RTAX_IFP                      = 0x4
+	RTAX_MAX                      = 0x8
+	RTAX_NETMASK                  = 0x2
+	RTA_AUTHOR                    = 0x40
+	RTA_BRD                       = 0x80
+	RTA_DOWNSTREAM                = 0x100
+	RTA_DST                       = 0x1
+	RTA_GATEWAY                   = 0x2
+	RTA_GENMASK                   = 0x8
+	RTA_IFA                       = 0x20
+	RTA_IFP                       = 0x10
+	RTA_NETMASK                   = 0x4
+	RTC_IA64                      = 0x3
+	RTC_POWER                     = 0x1
+	RTC_POWER_PC                  = 0x2
+	RTF_ACTIVE_DGD                = 0x1000000
+	RTF_BCE                       = 0x80000
+	RTF_BLACKHOLE                 = 0x1000
+	RTF_BROADCAST                 = 0x400000
+	RTF_BUL                       = 0x2000
+	RTF_CLONE                     = 0x10000
+	RTF_CLONED                    = 0x20000
+	RTF_CLONING                   = 0x100
+	RTF_DONE                      = 0x40
+	RTF_DYNAMIC                   = 0x10
+	RTF_FREE_IN_PROG              = 0x4000000
+	RTF_GATEWAY                   = 0x2
+	RTF_HOST                      = 0x4
+	RTF_LLINFO                    = 0x400
+	RTF_LOCAL                     = 0x200000
+	RTF_MASK                      = 0x80
+	RTF_MODIFIED                  = 0x20
+	RTF_MULTICAST                 = 0x800000
+	RTF_PERMANENT6                = 0x8000000
+	RTF_PINNED                    = 0x100000
+	RTF_PROTO1                    = 0x8000
+	RTF_PROTO2                    = 0x4000
+	RTF_PROTO3                    = 0x40000
+	RTF_REJECT                    = 0x8
+	RTF_SMALLMTU                  = 0x40000
+	RTF_STATIC                    = 0x800
+	RTF_STOPSRCH                  = 0x2000000
+	RTF_UNREACHABLE               = 0x10000000
+	RTF_UP                        = 0x1
+	RTF_XRESOLVE                  = 0x200
+	RTM_ADD                       = 0x1
+	RTM_CHANGE                    = 0x3
+	RTM_DELADDR                   = 0xd
+	RTM_DELETE                    = 0x2
+	RTM_EXPIRE                    = 0xf
+	RTM_GET                       = 0x4
+	RTM_GETNEXT                   = 0x11
+	RTM_IFINFO                    = 0xe
+	RTM_LOCK                      = 0x8
+	RTM_LOSING                    = 0x5
+	RTM_MISS                      = 0x7
+	RTM_NEWADDR                   = 0xc
+	RTM_OLDADD                    = 0x9
+	RTM_OLDDEL                    = 0xa
+	RTM_REDIRECT                  = 0x6
+	RTM_RESOLVE                   = 0xb
+	RTM_RTLOST                    = 0x10
+	RTM_RTTUNIT                   = 0xf4240
+	RTM_SAMEADDR                  = 0x12
+	RTM_SET                       = 0x13
+	RTM_VERSION                   = 0x2
+	RTM_VERSION_GR                = 0x4
+	RTM_VERSION_GR_COMPAT         = 0x3
+	RTM_VERSION_POLICY            = 0x5
+	RTM_VERSION_POLICY_EXT        = 0x6
+	RTM_VERSION_POLICY_PRFN       = 0x7
+	RTV_EXPIRE                    = 0x4
+	RTV_HOPCOUNT                  = 0x2
+	RTV_MTU                       = 0x1
+	RTV_RPIPE                     = 0x8
+	RTV_RTT                       = 0x40
+	RTV_RTTVAR                    = 0x80
+	RTV_SPIPE                     = 0x10
+	RTV_SSTHRESH                  = 0x20
+	RUSAGE_CHILDREN               = -0x1
+	RUSAGE_SELF                   = 0x0
+	RUSAGE_THREAD                 = 0x1
+	SCM_RIGHTS                    = 0x1
+	SHUT_RD                       = 0x0
+	SHUT_RDWR                     = 0x2
+	SHUT_WR                       = 0x1
+	SIGMAX64                      = 0xff
+	SIGQUEUE_MAX                  = 0x20
+	SIOCADDIFVIPA                 = 0x20006942
+	SIOCADDMTU                    = -0x7ffb9690
+	SIOCADDMULTI                  = -0x7fdf96cf
+	SIOCADDNETID                  = -0x7fd796a9
+	SIOCADDRT                     = -0x7fcf8df6
+	SIOCAIFADDR                   = -0x7fbf96e6
+	SIOCATMARK                    = 0x40047307
+	SIOCDARP                      = -0x7fb396e0
+	SIOCDELIFVIPA                 = 0x20006943
+	SIOCDELMTU                    = -0x7ffb968f
+	SIOCDELMULTI                  = -0x7fdf96ce
+	SIOCDELPMTU                   = -0x7fd78ff6
+	SIOCDELRT                     = -0x7fcf8df5
+	SIOCDIFADDR                   = -0x7fd796e7
+	SIOCDNETOPT                   = -0x3ffe9680
+	SIOCDX25XLATE                 = -0x7fd7969b
+	SIOCFIFADDR                   = -0x7fdf966d
+	SIOCGARP                      = -0x3fb396da
+	SIOCGETMTUS                   = 0x2000696f
+	SIOCGETSGCNT                  = -0x3feb8acc
+	SIOCGETVIFCNT                 = -0x3feb8acd
+	SIOCGHIWAT                    = 0x40047301
+	SIOCGIFADDR                   = -0x3fd796df
+	SIOCGIFADDRS                  = 0x2000698c
+	SIOCGIFBAUDRATE               = -0x3fdf9669
+	SIOCGIFBRDADDR                = -0x3fd796dd
+	SIOCGIFCONF                   = -0x3ff796bb
+	SIOCGIFCONFGLOB               = -0x3ff79670
+	SIOCGIFDSTADDR                = -0x3fd796de
+	SIOCGIFFLAGS                  = -0x3fd796ef
+	SIOCGIFGIDLIST                = 0x20006968
+	SIOCGIFHWADDR                 = -0x3fab966b
+	SIOCGIFMETRIC                 = -0x3fd796e9
+	SIOCGIFMTU                    = -0x3fd796aa
+	SIOCGIFNETMASK                = -0x3fd796db
+	SIOCGIFOPTIONS                = -0x3fd796d6
+	SIOCGISNO                     = -0x3fd79695
+	SIOCGLOADF                    = -0x3ffb967e
+	SIOCGLOWAT                    = 0x40047303
+	SIOCGNETOPT                   = -0x3ffe96a5
+	SIOCGNETOPT1                  = -0x3fdf967f
+	SIOCGNMTUS                    = 0x2000696e
+	SIOCGPGRP                     = 0x40047309
+	SIOCGSIZIFCONF                = 0x4004696a
+	SIOCGSRCFILTER                = -0x3fe796cb
+	SIOCGTUNEPHASE                = -0x3ffb9676
+	SIOCGX25XLATE                 = -0x3fd7969c
+	SIOCIFATTACH                  = -0x7fdf9699
+	SIOCIFDETACH                  = -0x7fdf969a
+	SIOCIFGETPKEY                 = -0x7fdf969b
+	SIOCIF_ATM_DARP               = -0x7fdf9683
+	SIOCIF_ATM_DUMPARP            = -0x7fdf9685
+	SIOCIF_ATM_GARP               = -0x7fdf9682
+	SIOCIF_ATM_IDLE               = -0x7fdf9686
+	SIOCIF_ATM_SARP               = -0x7fdf9681
+	SIOCIF_ATM_SNMPARP            = -0x7fdf9687
+	SIOCIF_ATM_SVC                = -0x7fdf9684
+	SIOCIF_ATM_UBR                = -0x7fdf9688
+	SIOCIF_DEVHEALTH              = -0x7ffb966c
+	SIOCIF_IB_ARP_INCOMP          = -0x7fdf9677
+	SIOCIF_IB_ARP_TIMER           = -0x7fdf9678
+	SIOCIF_IB_CLEAR_PINFO         = -0x3fdf966f
+	SIOCIF_IB_DEL_ARP             = -0x7fdf967f
+	SIOCIF_IB_DEL_PINFO           = -0x3fdf9670
+	SIOCIF_IB_DUMP_ARP            = -0x7fdf9680
+	SIOCIF_IB_GET_ARP             = -0x7fdf967e
+	SIOCIF_IB_GET_INFO            = -0x3f879675
+	SIOCIF_IB_GET_STATS           = -0x3f879672
+	SIOCIF_IB_NOTIFY_ADDR_REM     = -0x3f87966a
+	SIOCIF_IB_RESET_STATS         = -0x3f879671
+	SIOCIF_IB_RESIZE_CQ           = -0x7fdf9679
+	SIOCIF_IB_SET_ARP             = -0x7fdf967d
+	SIOCIF_IB_SET_PKEY            = -0x7fdf967c
+	SIOCIF_IB_SET_PORT            = -0x7fdf967b
+	SIOCIF_IB_SET_QKEY            = -0x7fdf9676
+	SIOCIF_IB_SET_QSIZE           = -0x7fdf967a
+	SIOCLISTIFVIPA                = 0x20006944
+	SIOCSARP                      = -0x7fb396e2
+	SIOCSHIWAT                    = 0x80047300
+	SIOCSIFADDR                   = -0x7fd796f4
+	SIOCSIFADDRORI                = -0x7fdb9673
+	SIOCSIFBRDADDR                = -0x7fd796ed
+	SIOCSIFDSTADDR                = -0x7fd796f2
+	SIOCSIFFLAGS                  = -0x7fd796f0
+	SIOCSIFGIDLIST                = 0x20006969
+	SIOCSIFMETRIC                 = -0x7fd796e8
+	SIOCSIFMTU                    = -0x7fd796a8
+	SIOCSIFNETDUMP                = -0x7fd796e4
+	SIOCSIFNETMASK                = -0x7fd796ea
+	SIOCSIFOPTIONS                = -0x7fd796d7
+	SIOCSIFSUBCHAN                = -0x7fd796e5
+	SIOCSISNO                     = -0x7fd79694
+	SIOCSLOADF                    = -0x3ffb967d
+	SIOCSLOWAT                    = 0x80047302
+	SIOCSNETOPT                   = -0x7ffe96a6
+	SIOCSPGRP                     = 0x80047308
+	SIOCSX25XLATE                 = -0x7fd7969d
+	SOCK_CONN_DGRAM               = 0x6
+	SOCK_DGRAM                    = 0x2
+	SOCK_RAW                      = 0x3
+	SOCK_RDM                      = 0x4
+	SOCK_SEQPACKET                = 0x5
+	SOCK_STREAM                   = 0x1
+	SOL_SOCKET                    = 0xffff
+	SOMAXCONN                     = 0x400
+	SO_ACCEPTCONN                 = 0x2
+	SO_AUDIT                      = 0x8000
+	SO_BROADCAST                  = 0x20
+	SO_CKSUMRECV                  = 0x800
+	SO_DEBUG                      = 0x1
+	SO_DONTROUTE                  = 0x10
+	SO_ERROR                      = 0x1007
+	SO_KEEPALIVE                  = 0x8
+	SO_KERNACCEPT                 = 0x2000
+	SO_LINGER                     = 0x80
+	SO_NOMULTIPATH                = 0x4000
+	SO_NOREUSEADDR                = 0x1000
+	SO_OOBINLINE                  = 0x100
+	SO_PEERID                     = 0x1009
+	SO_RCVBUF                     = 0x1002
+	SO_RCVLOWAT                   = 0x1004
+	SO_RCVTIMEO                   = 0x1006
+	SO_REUSEADDR                  = 0x4
+	SO_REUSEPORT                  = 0x200
+	SO_SNDBUF                     = 0x1001
+	SO_SNDLOWAT                   = 0x1003
+	SO_SNDTIMEO                   = 0x1005
+	SO_TIMESTAMPNS                = 0x100a
+	SO_TYPE                       = 0x1008
+	SO_USELOOPBACK                = 0x40
+	SO_USE_IFBUFS                 = 0x400
+	S_BANDURG                     = 0x400
+	S_EMODFMT                     = 0x3c000000
+	S_ENFMT                       = 0x400
+	S_ERROR                       = 0x100
+	S_HANGUP                      = 0x200
+	S_HIPRI                       = 0x2
+	S_ICRYPTO                     = 0x80000
+	S_IEXEC                       = 0x40
+	S_IFBLK                       = 0x6000
+	S_IFCHR                       = 0x2000
+	S_IFDIR                       = 0x4000
+	S_IFIFO                       = 0x1000
+	S_IFJOURNAL                   = 0x10000
+	S_IFLNK                       = 0xa000
+	S_IFMPX                       = 0x2200
+	S_IFMT                        = 0xf000
+	S_IFPDIR                      = 0x4000000
+	S_IFPSDIR                     = 0x8000000
+	S_IFPSSDIR                    = 0xc000000
+	S_IFREG                       = 0x8000
+	S_IFSOCK                      = 0xc000
+	S_IFSYSEA                     = 0x30000000
+	S_INPUT                       = 0x1
+	S_IREAD                       = 0x100
+	S_IRGRP                       = 0x20
+	S_IROTH                       = 0x4
+	S_IRUSR                       = 0x100
+	S_IRWXG                       = 0x38
+	S_IRWXO                       = 0x7
+	S_IRWXU                       = 0x1c0
+	S_ISGID                       = 0x400
+	S_ISUID                       = 0x800
+	S_ISVTX                       = 0x200
+	S_ITCB                        = 0x1000000
+	S_ITP                         = 0x800000
+	S_IWGRP                       = 0x10
+	S_IWOTH                       = 0x2
+	S_IWRITE                      = 0x80
+	S_IWUSR                       = 0x80
+	S_IXACL                       = 0x2000000
+	S_IXATTR                      = 0x40000
+	S_IXGRP                       = 0x8
+	S_IXINTERFACE                 = 0x100000
+	S_IXMOD                       = 0x40000000
+	S_IXOTH                       = 0x1
+	S_IXUSR                       = 0x40
+	S_MSG                         = 0x8
+	S_OUTPUT                      = 0x4
+	S_RDBAND                      = 0x20
+	S_RDNORM                      = 0x10
+	S_RESERVED1                   = 0x20000
+	S_RESERVED2                   = 0x200000
+	S_RESERVED3                   = 0x400000
+	S_RESERVED4                   = 0x80000000
+	S_RESFMT1                     = 0x10000000
+	S_RESFMT10                    = 0x34000000
+	S_RESFMT11                    = 0x38000000
+	S_RESFMT12                    = 0x3c000000
+	S_RESFMT2                     = 0x14000000
+	S_RESFMT3                     = 0x18000000
+	S_RESFMT4                     = 0x1c000000
+	S_RESFMT5                     = 0x20000000
+	S_RESFMT6                     = 0x24000000
+	S_RESFMT7                     = 0x28000000
+	S_RESFMT8                     = 0x2c000000
+	S_WRBAND                      = 0x80
+	S_WRNORM                      = 0x40
+	TAB0                          = 0x0
+	TAB1                          = 0x400
+	TAB2                          = 0x800
+	TAB3                          = 0xc00
+	TABDLY                        = 0xc00
+	TCFLSH                        = 0x540c
+	TCGETA                        = 0x5405
+	TCGETS                        = 0x5401
+	TCIFLUSH                      = 0x0
+	TCIOFF                        = 0x2
+	TCIOFLUSH                     = 0x2
+	TCION                         = 0x3
+	TCOFLUSH                      = 0x1
+	TCOOFF                        = 0x0
+	TCOON                         = 0x1
+	TCP_24DAYS_WORTH_OF_SLOWTICKS = 0x3f4800
+	TCP_ACLADD                    = 0x23
+	TCP_ACLBIND                   = 0x26
+	TCP_ACLCLEAR                  = 0x22
+	TCP_ACLDEL                    = 0x24
+	TCP_ACLDENY                   = 0x8
+	TCP_ACLFLUSH                  = 0x21
+	TCP_ACLGID                    = 0x1
+	TCP_ACLLS                     = 0x25
+	TCP_ACLSUBNET                 = 0x4
+	TCP_ACLUID                    = 0x2
+	TCP_CWND_DF                   = 0x16
+	TCP_CWND_IF                   = 0x15
+	TCP_DELAY_ACK_FIN             = 0x2
+	TCP_DELAY_ACK_SYN             = 0x1
+	TCP_FASTNAME                  = 0x101080a
+	TCP_KEEPCNT                   = 0x13
+	TCP_KEEPIDLE                  = 0x11
+	TCP_KEEPINTVL                 = 0x12
+	TCP_LSPRIV                    = 0x29
+	TCP_LUID                      = 0x20
+	TCP_MAXBURST                  = 0x8
+	TCP_MAXDF                     = 0x64
+	TCP_MAXIF                     = 0x64
+	TCP_MAXSEG                    = 0x2
+	TCP_MAXWIN                    = 0xffff
+	TCP_MAXWINDOWSCALE            = 0xe
+	TCP_MAX_SACK                  = 0x4
+	TCP_MSS                       = 0x5b4
+	TCP_NODELAY                   = 0x1
+	TCP_NODELAYACK                = 0x14
+	TCP_NOREDUCE_CWND_EXIT_FRXMT  = 0x19
+	TCP_NOREDUCE_CWND_IN_FRXMT    = 0x18
+	TCP_NOTENTER_SSTART           = 0x17
+	TCP_OPT                       = 0x19
+	TCP_RFC1323                   = 0x4
+	TCP_SETPRIV                   = 0x27
+	TCP_STDURG                    = 0x10
+	TCP_TIMESTAMP_OPTLEN          = 0xc
+	TCP_UNSETPRIV                 = 0x28
+	TCSAFLUSH                     = 0x2
+	TCSBRK                        = 0x5409
+	TCSETA                        = 0x5406
+	TCSETAF                       = 0x5408
+	TCSETAW                       = 0x5407
+	TCSETS                        = 0x5402
+	TCSETSF                       = 0x5404
+	TCSETSW                       = 0x5403
+	TCXONC                        = 0x540b
+	TIMER_ABSTIME                 = 0x3e7
+	TIMER_MAX                     = 0x20
+	TIOC                          = 0x5400
+	TIOCCBRK                      = 0x2000747a
+	TIOCCDTR                      = 0x20007478
+	TIOCCONS                      = 0x80047462
+	TIOCEXCL                      = 0x2000740d
+	TIOCFLUSH                     = 0x80047410
+	TIOCGETC                      = 0x40067412
+	TIOCGETD                      = 0x40047400
+	TIOCGETP                      = 0x40067408
+	TIOCGLTC                      = 0x40067474
+	TIOCGPGRP                     = 0x40047477
+	TIOCGSID                      = 0x40047448
+	TIOCGSIZE                     = 0x40087468
+	TIOCGWINSZ                    = 0x40087468
+	TIOCHPCL                      = 0x20007402
+	TIOCLBIC                      = 0x8004747e
+	TIOCLBIS                      = 0x8004747f
+	TIOCLGET                      = 0x4004747c
+	TIOCLSET                      = 0x8004747d
+	TIOCMBIC                      = 0x8004746b
+	TIOCMBIS                      = 0x8004746c
+	TIOCMGET                      = 0x4004746a
+	TIOCMIWAIT                    = 0x80047464
+	TIOCMODG                      = 0x40047403
+	TIOCMODS                      = 0x80047404
+	TIOCMSET                      = 0x8004746d
+	TIOCM_CAR                     = 0x40
+	TIOCM_CD                      = 0x40
+	TIOCM_CTS                     = 0x20
+	TIOCM_DSR                     = 0x100
+	TIOCM_DTR                     = 0x2
+	TIOCM_LE                      = 0x1
+	TIOCM_RI                      = 0x80
+	TIOCM_RNG                     = 0x80
+	TIOCM_RTS                     = 0x4
+	TIOCM_SR                      = 0x10
+	TIOCM_ST                      = 0x8
+	TIOCNOTTY                     = 0x20007471
+	TIOCNXCL                      = 0x2000740e
+	TIOCOUTQ                      = 0x40047473
+	TIOCPKT                       = 0x80047470
+	TIOCPKT_DATA                  = 0x0
+	TIOCPKT_DOSTOP                = 0x20
+	TIOCPKT_FLUSHREAD             = 0x1
+	TIOCPKT_FLUSHWRITE            = 0x2
+	TIOCPKT_NOSTOP                = 0x10
+	TIOCPKT_START                 = 0x8
+	TIOCPKT_STOP                  = 0x4
+	TIOCREMOTE                    = 0x80047469
+	TIOCSBRK                      = 0x2000747b
+	TIOCSDTR                      = 0x20007479
+	TIOCSETC                      = 0x80067411
+	TIOCSETD                      = 0x80047401
+	TIOCSETN                      = 0x8006740a
+	TIOCSETP                      = 0x80067409
+	TIOCSLTC                      = 0x80067475
+	TIOCSPGRP                     = 0x80047476
+	TIOCSSIZE                     = 0x80087467
+	TIOCSTART                     = 0x2000746e
+	TIOCSTI                       = 0x80017472
+	TIOCSTOP                      = 0x2000746f
+	TIOCSWINSZ                    = 0x80087467
+	TIOCUCNTL                     = 0x80047466
+	TOSTOP                        = 0x10000
+	UTIME_NOW                     = -0x2
+	UTIME_OMIT                    = -0x3
+	VDISCRD                       = 0xc
+	VDSUSP                        = 0xa
+	VEOF                          = 0x4
+	VEOL                          = 0x5
+	VEOL2                         = 0x6
+	VERASE                        = 0x2
+	VINTR                         = 0x0
+	VKILL                         = 0x3
+	VLNEXT                        = 0xe
+	VMIN                          = 0x4
+	VQUIT                         = 0x1
+	VREPRINT                      = 0xb
+	VSTART                        = 0x7
+	VSTOP                         = 0x8
+	VSTRT                         = 0x7
+	VSUSP                         = 0x9
+	VT0                           = 0x0
+	VT1                           = 0x8000
+	VTDELAY                       = 0x2000
+	VTDLY                         = 0x8000
+	VTIME                         = 0x5
+	VWERSE                        = 0xd
+	WPARSTART                     = 0x1
+	WPARSTOP                      = 0x2
+	WPARTTYNAME                   = "Global"
+	XCASE                         = 0x4
+	XTABS                         = 0xc00
+	_FDATAFLUSH                   = 0x2000000000
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x43)
+	EADDRNOTAVAIL   = syscall.Errno(0x44)
+	EAFNOSUPPORT    = syscall.Errno(0x42)
+	EAGAIN          = syscall.Errno(0xb)
+	EALREADY        = syscall.Errno(0x38)
+	EBADF           = syscall.Errno(0x9)
+	EBADMSG         = syscall.Errno(0x78)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x75)
+	ECHILD          = syscall.Errno(0xa)
+	ECHRNG          = syscall.Errno(0x25)
+	ECLONEME        = syscall.Errno(0x52)
+	ECONNABORTED    = syscall.Errno(0x48)
+	ECONNREFUSED    = syscall.Errno(0x4f)
+	ECONNRESET      = syscall.Errno(0x49)
+	ECORRUPT        = syscall.Errno(0x59)
+	EDEADLK         = syscall.Errno(0x2d)
+	EDESTADDREQ     = syscall.Errno(0x3a)
+	EDESTADDRREQ    = syscall.Errno(0x3a)
+	EDIST           = syscall.Errno(0x35)
+	EDOM            = syscall.Errno(0x21)
+	EDQUOT          = syscall.Errno(0x58)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFORMAT         = syscall.Errno(0x30)
+	EHOSTDOWN       = syscall.Errno(0x50)
+	EHOSTUNREACH    = syscall.Errno(0x51)
+	EIDRM           = syscall.Errno(0x24)
+	EILSEQ          = syscall.Errno(0x74)
+	EINPROGRESS     = syscall.Errno(0x37)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EISCONN         = syscall.Errno(0x4b)
+	EISDIR          = syscall.Errno(0x15)
+	EL2HLT          = syscall.Errno(0x2c)
+	EL2NSYNC        = syscall.Errno(0x26)
+	EL3HLT          = syscall.Errno(0x27)
+	EL3RST          = syscall.Errno(0x28)
+	ELNRNG          = syscall.Errno(0x29)
+	ELOOP           = syscall.Errno(0x55)
+	EMEDIA          = syscall.Errno(0x6e)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x3b)
+	EMULTIHOP       = syscall.Errno(0x7d)
+	ENAMETOOLONG    = syscall.Errno(0x56)
+	ENETDOWN        = syscall.Errno(0x45)
+	ENETRESET       = syscall.Errno(0x47)
+	ENETUNREACH     = syscall.Errno(0x46)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x70)
+	ENOBUFS         = syscall.Errno(0x4a)
+	ENOCONNECT      = syscall.Errno(0x32)
+	ENOCSI          = syscall.Errno(0x2b)
+	ENODATA         = syscall.Errno(0x7a)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x31)
+	ENOLINK         = syscall.Errno(0x7e)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x23)
+	ENOPROTOOPT     = syscall.Errno(0x3d)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSR           = syscall.Errno(0x76)
+	ENOSTR          = syscall.Errno(0x7b)
+	ENOSYS          = syscall.Errno(0x6d)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x4c)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x11)
+	ENOTREADY       = syscall.Errno(0x2e)
+	ENOTRECOVERABLE = syscall.Errno(0x5e)
+	ENOTRUST        = syscall.Errno(0x72)
+	ENOTSOCK        = syscall.Errno(0x39)
+	ENOTSUP         = syscall.Errno(0x7c)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x40)
+	EOVERFLOW       = syscall.Errno(0x7f)
+	EOWNERDEAD      = syscall.Errno(0x5f)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x41)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x53)
+	EPROTO          = syscall.Errno(0x79)
+	EPROTONOSUPPORT = syscall.Errno(0x3e)
+	EPROTOTYPE      = syscall.Errno(0x3c)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x5d)
+	ERESTART        = syscall.Errno(0x52)
+	EROFS           = syscall.Errno(0x1e)
+	ESAD            = syscall.Errno(0x71)
+	ESHUTDOWN       = syscall.Errno(0x4d)
+	ESOCKTNOSUPPORT = syscall.Errno(0x3f)
+	ESOFT           = syscall.Errno(0x6f)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x34)
+	ESYSERROR       = syscall.Errno(0x5a)
+	ETIME           = syscall.Errno(0x77)
+	ETIMEDOUT       = syscall.Errno(0x4e)
+	ETOOMANYREFS    = syscall.Errno(0x73)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUNATCH         = syscall.Errno(0x2a)
+	EUSERS          = syscall.Errno(0x54)
+	EWOULDBLOCK     = syscall.Errno(0xb)
+	EWRPROTECT      = syscall.Errno(0x2f)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT     = syscall.Signal(0x6)
+	SIGAIO      = syscall.Signal(0x17)
+	SIGALRM     = syscall.Signal(0xe)
+	SIGALRM1    = syscall.Signal(0x26)
+	SIGBUS      = syscall.Signal(0xa)
+	SIGCAPI     = syscall.Signal(0x31)
+	SIGCHLD     = syscall.Signal(0x14)
+	SIGCLD      = syscall.Signal(0x14)
+	SIGCONT     = syscall.Signal(0x13)
+	SIGCPUFAIL  = syscall.Signal(0x3b)
+	SIGDANGER   = syscall.Signal(0x21)
+	SIGEMT      = syscall.Signal(0x7)
+	SIGFPE      = syscall.Signal(0x8)
+	SIGGRANT    = syscall.Signal(0x3c)
+	SIGHUP      = syscall.Signal(0x1)
+	SIGILL      = syscall.Signal(0x4)
+	SIGINT      = syscall.Signal(0x2)
+	SIGIO       = syscall.Signal(0x17)
+	SIGIOINT    = syscall.Signal(0x10)
+	SIGIOT      = syscall.Signal(0x6)
+	SIGKAP      = syscall.Signal(0x3c)
+	SIGKILL     = syscall.Signal(0x9)
+	SIGLOST     = syscall.Signal(0x6)
+	SIGMAX      = syscall.Signal(0x3f)
+	SIGMAX32    = syscall.Signal(0x3f)
+	SIGMIGRATE  = syscall.Signal(0x23)
+	SIGMSG      = syscall.Signal(0x1b)
+	SIGPIPE     = syscall.Signal(0xd)
+	SIGPOLL     = syscall.Signal(0x17)
+	SIGPRE      = syscall.Signal(0x24)
+	SIGPROF     = syscall.Signal(0x20)
+	SIGPTY      = syscall.Signal(0x17)
+	SIGPWR      = syscall.Signal(0x1d)
+	SIGQUIT     = syscall.Signal(0x3)
+	SIGRECONFIG = syscall.Signal(0x3a)
+	SIGRETRACT  = syscall.Signal(0x3d)
+	SIGSAK      = syscall.Signal(0x3f)
+	SIGSEGV     = syscall.Signal(0xb)
+	SIGSOUND    = syscall.Signal(0x3e)
+	SIGSTOP     = syscall.Signal(0x11)
+	SIGSYS      = syscall.Signal(0xc)
+	SIGSYSERROR = syscall.Signal(0x30)
+	SIGTALRM    = syscall.Signal(0x26)
+	SIGTERM     = syscall.Signal(0xf)
+	SIGTRAP     = syscall.Signal(0x5)
+	SIGTSTP     = syscall.Signal(0x12)
+	SIGTTIN     = syscall.Signal(0x15)
+	SIGTTOU     = syscall.Signal(0x16)
+	SIGURG      = syscall.Signal(0x10)
+	SIGUSR1     = syscall.Signal(0x1e)
+	SIGUSR2     = syscall.Signal(0x1f)
+	SIGVIRT     = syscall.Signal(0x25)
+	SIGVTALRM   = syscall.Signal(0x22)
+	SIGWAITING  = syscall.Signal(0x27)
+	SIGWINCH    = syscall.Signal(0x1c)
+	SIGXCPU     = syscall.Signal(0x18)
+	SIGXFSZ     = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "not owner"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "I/O error"},
+	{6, "ENXIO", "no such device or address"},
+	{7, "E2BIG", "arg list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file number"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EWOULDBLOCK", "resource temporarily unavailable"},
+	{12, "ENOMEM", "not enough space"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "ENOTEMPTY", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "no such device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "file table overflow"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "not a typewriter"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "ENOMSG", "no message of desired type"},
+	{36, "EIDRM", "identifier removed"},
+	{37, "ECHRNG", "channel number out of range"},
+	{38, "EL2NSYNC", "level 2 not synchronized"},
+	{39, "EL3HLT", "level 3 halted"},
+	{40, "EL3RST", "level 3 reset"},
+	{41, "ELNRNG", "link number out of range"},
+	{42, "EUNATCH", "protocol driver not attached"},
+	{43, "ENOCSI", "no CSI structure available"},
+	{44, "EL2HLT", "level 2 halted"},
+	{45, "EDEADLK", "deadlock condition if locked"},
+	{46, "ENOTREADY", "device not ready"},
+	{47, "EWRPROTECT", "write-protected media"},
+	{48, "EFORMAT", "unformatted or incompatible media"},
+	{49, "ENOLCK", "no locks available"},
+	{50, "ENOCONNECT", "cannot Establish Connection"},
+	{52, "ESTALE", "missing file or filesystem"},
+	{53, "EDIST", "requests blocked by Administrator"},
+	{55, "EINPROGRESS", "operation now in progress"},
+	{56, "EALREADY", "operation already in progress"},
+	{57, "ENOTSOCK", "socket operation on non-socket"},
+	{58, "EDESTADDREQ", "destination address required"},
+	{59, "EMSGSIZE", "message too long"},
+	{60, "EPROTOTYPE", "protocol wrong type for socket"},
+	{61, "ENOPROTOOPT", "protocol not available"},
+	{62, "EPROTONOSUPPORT", "protocol not supported"},
+	{63, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{64, "EOPNOTSUPP", "operation not supported on socket"},
+	{65, "EPFNOSUPPORT", "protocol family not supported"},
+	{66, "EAFNOSUPPORT", "addr family not supported by protocol"},
+	{67, "EADDRINUSE", "address already in use"},
+	{68, "EADDRNOTAVAIL", "can't assign requested address"},
+	{69, "ENETDOWN", "network is down"},
+	{70, "ENETUNREACH", "network is unreachable"},
+	{71, "ENETRESET", "network dropped connection on reset"},
+	{72, "ECONNABORTED", "software caused connection abort"},
+	{73, "ECONNRESET", "connection reset by peer"},
+	{74, "ENOBUFS", "no buffer space available"},
+	{75, "EISCONN", "socket is already connected"},
+	{76, "ENOTCONN", "socket is not connected"},
+	{77, "ESHUTDOWN", "can't send after socket shutdown"},
+	{78, "ETIMEDOUT", "connection timed out"},
+	{79, "ECONNREFUSED", "connection refused"},
+	{80, "EHOSTDOWN", "host is down"},
+	{81, "EHOSTUNREACH", "no route to host"},
+	{82, "ERESTART", "restart the system call"},
+	{83, "EPROCLIM", "too many processes"},
+	{84, "EUSERS", "too many users"},
+	{85, "ELOOP", "too many levels of symbolic links"},
+	{86, "ENAMETOOLONG", "file name too long"},
+	{88, "EDQUOT", "disk quota exceeded"},
+	{89, "ECORRUPT", "invalid file system control data detected"},
+	{90, "ESYSERROR", "for future use "},
+	{93, "EREMOTE", "item is not local to host"},
+	{94, "ENOTRECOVERABLE", "state not recoverable "},
+	{95, "EOWNERDEAD", "previous owner died "},
+	{109, "ENOSYS", "function not implemented"},
+	{110, "EMEDIA", "media surface error"},
+	{111, "ESOFT", "I/O completed, but needs relocation"},
+	{112, "ENOATTR", "no attribute found"},
+	{113, "ESAD", "security Authentication Denied"},
+	{114, "ENOTRUST", "not a Trusted Program"},
+	{115, "ETOOMANYREFS", "too many references: can't splice"},
+	{116, "EILSEQ", "invalid wide character"},
+	{117, "ECANCELED", "asynchronous I/O cancelled"},
+	{118, "ENOSR", "out of STREAMS resources"},
+	{119, "ETIME", "system call timed out"},
+	{120, "EBADMSG", "next message has wrong type"},
+	{121, "EPROTO", "error in protocol"},
+	{122, "ENODATA", "no message on stream head read q"},
+	{123, "ENOSTR", "fd not associated with a stream"},
+	{124, "ENOTSUP", "unsupported attribute value"},
+	{125, "EMULTIHOP", "multihop is not allowed"},
+	{126, "ENOLINK", "the server link has been severed"},
+	{127, "EOVERFLOW", "value too large to be stored in data type"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGIOT", "IOT/Abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "stopped (signal)"},
+	{18, "SIGTSTP", "stopped"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible/complete"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{27, "SIGMSG", "input device data"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGPWR", "power-failure"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+	{32, "SIGPROF", "profiling timer expired"},
+	{33, "SIGDANGER", "paging space low"},
+	{34, "SIGVTALRM", "virtual timer expired"},
+	{35, "SIGMIGRATE", "signal 35"},
+	{36, "SIGPRE", "signal 36"},
+	{37, "SIGVIRT", "signal 37"},
+	{38, "SIGTALRM", "signal 38"},
+	{39, "SIGWAITING", "signal 39"},
+	{48, "SIGSYSERROR", "signal 48"},
+	{49, "SIGCAPI", "signal 49"},
+	{58, "SIGRECONFIG", "signal 58"},
+	{59, "SIGCPUFAIL", "CPU Failure Predicted"},
+	{60, "SIGKAP", "monitor mode granted"},
+	{61, "SIGRETRACT", "monitor mode retracted"},
+	{62, "SIGSOUND", "sound completed"},
+	{63, "SIGSAK", "secure attention"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_aix_ppc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_aix_ppc64.go
new file mode 100644
index 000000000..4fc8d3064
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_aix_ppc64.go
@@ -0,0 +1,1385 @@
+// mkerrors.sh -maix64
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build ppc64,aix
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -maix64 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                  = 0x10
+	AF_BYPASS                     = 0x19
+	AF_CCITT                      = 0xa
+	AF_CHAOS                      = 0x5
+	AF_DATAKIT                    = 0x9
+	AF_DECnet                     = 0xc
+	AF_DLI                        = 0xd
+	AF_ECMA                       = 0x8
+	AF_HYLINK                     = 0xf
+	AF_IMPLINK                    = 0x3
+	AF_INET                       = 0x2
+	AF_INET6                      = 0x18
+	AF_INTF                       = 0x14
+	AF_ISO                        = 0x7
+	AF_LAT                        = 0xe
+	AF_LINK                       = 0x12
+	AF_LOCAL                      = 0x1
+	AF_MAX                        = 0x1e
+	AF_NDD                        = 0x17
+	AF_NETWARE                    = 0x16
+	AF_NS                         = 0x6
+	AF_OSI                        = 0x7
+	AF_PUP                        = 0x4
+	AF_RIF                        = 0x15
+	AF_ROUTE                      = 0x11
+	AF_SNA                        = 0xb
+	AF_UNIX                       = 0x1
+	AF_UNSPEC                     = 0x0
+	ALTWERASE                     = 0x400000
+	ARPHRD_802_3                  = 0x6
+	ARPHRD_802_5                  = 0x6
+	ARPHRD_ETHER                  = 0x1
+	ARPHRD_FDDI                   = 0x1
+	B0                            = 0x0
+	B110                          = 0x3
+	B1200                         = 0x9
+	B134                          = 0x4
+	B150                          = 0x5
+	B1800                         = 0xa
+	B19200                        = 0xe
+	B200                          = 0x6
+	B2400                         = 0xb
+	B300                          = 0x7
+	B38400                        = 0xf
+	B4800                         = 0xc
+	B50                           = 0x1
+	B600                          = 0x8
+	B75                           = 0x2
+	B9600                         = 0xd
+	BRKINT                        = 0x2
+	BS0                           = 0x0
+	BS1                           = 0x1000
+	BSDLY                         = 0x1000
+	CAP_AACCT                     = 0x6
+	CAP_ARM_APPLICATION           = 0x5
+	CAP_BYPASS_RAC_VMM            = 0x3
+	CAP_CLEAR                     = 0x0
+	CAP_CREDENTIALS               = 0x7
+	CAP_EFFECTIVE                 = 0x1
+	CAP_EWLM_AGENT                = 0x4
+	CAP_INHERITABLE               = 0x2
+	CAP_MAXIMUM                   = 0x7
+	CAP_NUMA_ATTACH               = 0x2
+	CAP_PERMITTED                 = 0x3
+	CAP_PROPAGATE                 = 0x1
+	CAP_PROPOGATE                 = 0x1
+	CAP_SET                       = 0x1
+	CBAUD                         = 0xf
+	CFLUSH                        = 0xf
+	CIBAUD                        = 0xf0000
+	CLOCAL                        = 0x800
+	CLOCK_MONOTONIC               = 0xa
+	CLOCK_PROCESS_CPUTIME_ID      = 0xb
+	CLOCK_REALTIME                = 0x9
+	CLOCK_THREAD_CPUTIME_ID       = 0xc
+	CR0                           = 0x0
+	CR1                           = 0x100
+	CR2                           = 0x200
+	CR3                           = 0x300
+	CRDLY                         = 0x300
+	CREAD                         = 0x80
+	CS5                           = 0x0
+	CS6                           = 0x10
+	CS7                           = 0x20
+	CS8                           = 0x30
+	CSIOCGIFCONF                  = -0x3fef96dc
+	CSIZE                         = 0x30
+	CSMAP_DIR                     = "/usr/lib/nls/csmap/"
+	CSTART                        = '\021'
+	CSTOP                         = '\023'
+	CSTOPB                        = 0x40
+	CSUSP                         = 0x1a
+	ECHO                          = 0x8
+	ECHOCTL                       = 0x20000
+	ECHOE                         = 0x10
+	ECHOK                         = 0x20
+	ECHOKE                        = 0x80000
+	ECHONL                        = 0x40
+	ECHOPRT                       = 0x40000
+	ECH_ICMPID                    = 0x2
+	ETHERNET_CSMACD               = 0x6
+	EVENP                         = 0x80
+	EXCONTINUE                    = 0x0
+	EXDLOK                        = 0x3
+	EXIO                          = 0x2
+	EXPGIO                        = 0x0
+	EXRESUME                      = 0x2
+	EXRETURN                      = 0x1
+	EXSIG                         = 0x4
+	EXTA                          = 0xe
+	EXTB                          = 0xf
+	EXTRAP                        = 0x1
+	EYEC_RTENTRYA                 = 0x257274656e747241
+	EYEC_RTENTRYF                 = 0x257274656e747246
+	E_ACC                         = 0x0
+	FD_CLOEXEC                    = 0x1
+	FD_SETSIZE                    = 0xfffe
+	FF0                           = 0x0
+	FF1                           = 0x2000
+	FFDLY                         = 0x2000
+	FLUSHBAND                     = 0x40
+	FLUSHLOW                      = 0x8
+	FLUSHO                        = 0x100000
+	FLUSHR                        = 0x1
+	FLUSHRW                       = 0x3
+	FLUSHW                        = 0x2
+	F_CLOSEM                      = 0xa
+	F_DUP2FD                      = 0xe
+	F_DUPFD                       = 0x0
+	F_GETFD                       = 0x1
+	F_GETFL                       = 0x3
+	F_GETLK                       = 0xb
+	F_GETLK64                     = 0xb
+	F_GETOWN                      = 0x8
+	F_LOCK                        = 0x1
+	F_OK                          = 0x0
+	F_RDLCK                       = 0x1
+	F_SETFD                       = 0x2
+	F_SETFL                       = 0x4
+	F_SETLK                       = 0xc
+	F_SETLK64                     = 0xc
+	F_SETLKW                      = 0xd
+	F_SETLKW64                    = 0xd
+	F_SETOWN                      = 0x9
+	F_TEST                        = 0x3
+	F_TLOCK                       = 0x2
+	F_TSTLK                       = 0xf
+	F_ULOCK                       = 0x0
+	F_UNLCK                       = 0x3
+	F_WRLCK                       = 0x2
+	HUPCL                         = 0x400
+	IBSHIFT                       = 0x10
+	ICANON                        = 0x2
+	ICMP6_FILTER                  = 0x26
+	ICMP6_SEC_SEND_DEL            = 0x46
+	ICMP6_SEC_SEND_GET            = 0x47
+	ICMP6_SEC_SEND_SET            = 0x44
+	ICMP6_SEC_SEND_SET_CGA_ADDR   = 0x45
+	ICRNL                         = 0x100
+	IEXTEN                        = 0x200000
+	IFA_FIRSTALIAS                = 0x2000
+	IFA_ROUTE                     = 0x1
+	IFF_64BIT                     = 0x4000000
+	IFF_ALLCAST                   = 0x20000
+	IFF_ALLMULTI                  = 0x200
+	IFF_BPF                       = 0x8000000
+	IFF_BRIDGE                    = 0x40000
+	IFF_BROADCAST                 = 0x2
+	IFF_CANTCHANGE                = 0x80c52
+	IFF_CHECKSUM_OFFLOAD          = 0x10000000
+	IFF_D1                        = 0x8000
+	IFF_D2                        = 0x4000
+	IFF_D3                        = 0x2000
+	IFF_D4                        = 0x1000
+	IFF_DEBUG                     = 0x4
+	IFF_DEVHEALTH                 = 0x4000
+	IFF_DO_HW_LOOPBACK            = 0x10000
+	IFF_GROUP_ROUTING             = 0x2000000
+	IFF_IFBUFMGT                  = 0x800000
+	IFF_LINK0                     = 0x100000
+	IFF_LINK1                     = 0x200000
+	IFF_LINK2                     = 0x400000
+	IFF_LOOPBACK                  = 0x8
+	IFF_MULTICAST                 = 0x80000
+	IFF_NOARP                     = 0x80
+	IFF_NOECHO                    = 0x800
+	IFF_NOTRAILERS                = 0x20
+	IFF_OACTIVE                   = 0x400
+	IFF_POINTOPOINT               = 0x10
+	IFF_PROMISC                   = 0x100
+	IFF_PSEG                      = 0x40000000
+	IFF_RUNNING                   = 0x40
+	IFF_SIMPLEX                   = 0x800
+	IFF_SNAP                      = 0x8000
+	IFF_TCP_DISABLE_CKSUM         = 0x20000000
+	IFF_TCP_NOCKSUM               = 0x1000000
+	IFF_UP                        = 0x1
+	IFF_VIPA                      = 0x80000000
+	IFNAMSIZ                      = 0x10
+	IFO_FLUSH                     = 0x1
+	IFT_1822                      = 0x2
+	IFT_AAL5                      = 0x31
+	IFT_ARCNET                    = 0x23
+	IFT_ARCNETPLUS                = 0x24
+	IFT_ATM                       = 0x25
+	IFT_CEPT                      = 0x13
+	IFT_CLUSTER                   = 0x3e
+	IFT_DS3                       = 0x1e
+	IFT_EON                       = 0x19
+	IFT_ETHER                     = 0x6
+	IFT_FCS                       = 0x3a
+	IFT_FDDI                      = 0xf
+	IFT_FRELAY                    = 0x20
+	IFT_FRELAYDCE                 = 0x2c
+	IFT_GIFTUNNEL                 = 0x3c
+	IFT_HDH1822                   = 0x3
+	IFT_HF                        = 0x3d
+	IFT_HIPPI                     = 0x2f
+	IFT_HSSI                      = 0x2e
+	IFT_HY                        = 0xe
+	IFT_IB                        = 0xc7
+	IFT_ISDNBASIC                 = 0x14
+	IFT_ISDNPRIMARY               = 0x15
+	IFT_ISO88022LLC               = 0x29
+	IFT_ISO88023                  = 0x7
+	IFT_ISO88024                  = 0x8
+	IFT_ISO88025                  = 0x9
+	IFT_ISO88026                  = 0xa
+	IFT_LAPB                      = 0x10
+	IFT_LOCALTALK                 = 0x2a
+	IFT_LOOP                      = 0x18
+	IFT_MIOX25                    = 0x26
+	IFT_MODEM                     = 0x30
+	IFT_NSIP                      = 0x1b
+	IFT_OTHER                     = 0x1
+	IFT_P10                       = 0xc
+	IFT_P80                       = 0xd
+	IFT_PARA                      = 0x22
+	IFT_PPP                       = 0x17
+	IFT_PROPMUX                   = 0x36
+	IFT_PROPVIRTUAL               = 0x35
+	IFT_PTPSERIAL                 = 0x16
+	IFT_RS232                     = 0x21
+	IFT_SDLC                      = 0x11
+	IFT_SIP                       = 0x1f
+	IFT_SLIP                      = 0x1c
+	IFT_SMDSDXI                   = 0x2b
+	IFT_SMDSICIP                  = 0x34
+	IFT_SN                        = 0x38
+	IFT_SONET                     = 0x27
+	IFT_SONETPATH                 = 0x32
+	IFT_SONETVT                   = 0x33
+	IFT_SP                        = 0x39
+	IFT_STARLAN                   = 0xb
+	IFT_T1                        = 0x12
+	IFT_TUNNEL                    = 0x3b
+	IFT_ULTRA                     = 0x1d
+	IFT_V35                       = 0x2d
+	IFT_VIPA                      = 0x37
+	IFT_X25                       = 0x5
+	IFT_X25DDN                    = 0x4
+	IFT_X25PLE                    = 0x28
+	IFT_XETHER                    = 0x1a
+	IGNBRK                        = 0x1
+	IGNCR                         = 0x80
+	IGNPAR                        = 0x4
+	IMAXBEL                       = 0x10000
+	INLCR                         = 0x40
+	INPCK                         = 0x10
+	IN_CLASSA_HOST                = 0xffffff
+	IN_CLASSA_MAX                 = 0x80
+	IN_CLASSA_NET                 = 0xff000000
+	IN_CLASSA_NSHIFT              = 0x18
+	IN_CLASSB_HOST                = 0xffff
+	IN_CLASSB_MAX                 = 0x10000
+	IN_CLASSB_NET                 = 0xffff0000
+	IN_CLASSB_NSHIFT              = 0x10
+	IN_CLASSC_HOST                = 0xff
+	IN_CLASSC_NET                 = 0xffffff00
+	IN_CLASSC_NSHIFT              = 0x8
+	IN_CLASSD_HOST                = 0xfffffff
+	IN_CLASSD_NET                 = 0xf0000000
+	IN_CLASSD_NSHIFT              = 0x1c
+	IN_LOOPBACKNET                = 0x7f
+	IN_USE                        = 0x1
+	IPPROTO_AH                    = 0x33
+	IPPROTO_BIP                   = 0x53
+	IPPROTO_DSTOPTS               = 0x3c
+	IPPROTO_EGP                   = 0x8
+	IPPROTO_EON                   = 0x50
+	IPPROTO_ESP                   = 0x32
+	IPPROTO_FRAGMENT              = 0x2c
+	IPPROTO_GGP                   = 0x3
+	IPPROTO_GIF                   = 0x8c
+	IPPROTO_GRE                   = 0x2f
+	IPPROTO_HOPOPTS               = 0x0
+	IPPROTO_ICMP                  = 0x1
+	IPPROTO_ICMPV6                = 0x3a
+	IPPROTO_IDP                   = 0x16
+	IPPROTO_IGMP                  = 0x2
+	IPPROTO_IP                    = 0x0
+	IPPROTO_IPIP                  = 0x4
+	IPPROTO_IPV6                  = 0x29
+	IPPROTO_LOCAL                 = 0x3f
+	IPPROTO_MAX                   = 0x100
+	IPPROTO_MH                    = 0x87
+	IPPROTO_NONE                  = 0x3b
+	IPPROTO_PUP                   = 0xc
+	IPPROTO_QOS                   = 0x2d
+	IPPROTO_RAW                   = 0xff
+	IPPROTO_ROUTING               = 0x2b
+	IPPROTO_RSVP                  = 0x2e
+	IPPROTO_SCTP                  = 0x84
+	IPPROTO_TCP                   = 0x6
+	IPPROTO_TP                    = 0x1d
+	IPPROTO_UDP                   = 0x11
+	IPV6_ADDRFORM                 = 0x16
+	IPV6_ADDR_PREFERENCES         = 0x4a
+	IPV6_ADD_MEMBERSHIP           = 0xc
+	IPV6_AIXRAWSOCKET             = 0x39
+	IPV6_CHECKSUM                 = 0x27
+	IPV6_DONTFRAG                 = 0x2d
+	IPV6_DROP_MEMBERSHIP          = 0xd
+	IPV6_DSTOPTS                  = 0x36
+	IPV6_FLOWINFO_FLOWLABEL       = 0xffffff
+	IPV6_FLOWINFO_PRIFLOW         = 0xfffffff
+	IPV6_FLOWINFO_PRIORITY        = 0xf000000
+	IPV6_FLOWINFO_SRFLAG          = 0x10000000
+	IPV6_FLOWINFO_VERSION         = 0xf0000000
+	IPV6_HOPLIMIT                 = 0x28
+	IPV6_HOPOPTS                  = 0x34
+	IPV6_JOIN_GROUP               = 0xc
+	IPV6_LEAVE_GROUP              = 0xd
+	IPV6_MIPDSTOPTS               = 0x36
+	IPV6_MULTICAST_HOPS           = 0xa
+	IPV6_MULTICAST_IF             = 0x9
+	IPV6_MULTICAST_LOOP           = 0xb
+	IPV6_NEXTHOP                  = 0x30
+	IPV6_NOPROBE                  = 0x1c
+	IPV6_PATHMTU                  = 0x2e
+	IPV6_PKTINFO                  = 0x21
+	IPV6_PKTOPTIONS               = 0x24
+	IPV6_PRIORITY_10              = 0xa000000
+	IPV6_PRIORITY_11              = 0xb000000
+	IPV6_PRIORITY_12              = 0xc000000
+	IPV6_PRIORITY_13              = 0xd000000
+	IPV6_PRIORITY_14              = 0xe000000
+	IPV6_PRIORITY_15              = 0xf000000
+	IPV6_PRIORITY_8               = 0x8000000
+	IPV6_PRIORITY_9               = 0x9000000
+	IPV6_PRIORITY_BULK            = 0x4000000
+	IPV6_PRIORITY_CONTROL         = 0x7000000
+	IPV6_PRIORITY_FILLER          = 0x1000000
+	IPV6_PRIORITY_INTERACTIVE     = 0x6000000
+	IPV6_PRIORITY_RESERVED1       = 0x3000000
+	IPV6_PRIORITY_RESERVED2       = 0x5000000
+	IPV6_PRIORITY_UNATTENDED      = 0x2000000
+	IPV6_PRIORITY_UNCHARACTERIZED = 0x0
+	IPV6_RECVDSTOPTS              = 0x38
+	IPV6_RECVHOPLIMIT             = 0x29
+	IPV6_RECVHOPOPTS              = 0x35
+	IPV6_RECVHOPS                 = 0x22
+	IPV6_RECVIF                   = 0x1e
+	IPV6_RECVPATHMTU              = 0x2f
+	IPV6_RECVPKTINFO              = 0x23
+	IPV6_RECVRTHDR                = 0x33
+	IPV6_RECVSRCRT                = 0x1d
+	IPV6_RECVTCLASS               = 0x2a
+	IPV6_RTHDR                    = 0x32
+	IPV6_RTHDRDSTOPTS             = 0x37
+	IPV6_RTHDR_TYPE_0             = 0x0
+	IPV6_RTHDR_TYPE_2             = 0x2
+	IPV6_SENDIF                   = 0x1f
+	IPV6_SRFLAG_LOOSE             = 0x0
+	IPV6_SRFLAG_STRICT            = 0x10000000
+	IPV6_TCLASS                   = 0x2b
+	IPV6_TOKEN_LENGTH             = 0x40
+	IPV6_UNICAST_HOPS             = 0x4
+	IPV6_USE_MIN_MTU              = 0x2c
+	IPV6_V6ONLY                   = 0x25
+	IPV6_VERSION                  = 0x60000000
+	IP_ADDRFORM                   = 0x16
+	IP_ADD_MEMBERSHIP             = 0xc
+	IP_ADD_SOURCE_MEMBERSHIP      = 0x3c
+	IP_BLOCK_SOURCE               = 0x3a
+	IP_BROADCAST_IF               = 0x10
+	IP_CACHE_LINE_SIZE            = 0x80
+	IP_DEFAULT_MULTICAST_LOOP     = 0x1
+	IP_DEFAULT_MULTICAST_TTL      = 0x1
+	IP_DF                         = 0x4000
+	IP_DHCPMODE                   = 0x11
+	IP_DONTFRAG                   = 0x19
+	IP_DROP_MEMBERSHIP            = 0xd
+	IP_DROP_SOURCE_MEMBERSHIP     = 0x3d
+	IP_FINDPMTU                   = 0x1a
+	IP_HDRINCL                    = 0x2
+	IP_INC_MEMBERSHIPS            = 0x14
+	IP_INIT_MEMBERSHIP            = 0x14
+	IP_MAXPACKET                  = 0xffff
+	IP_MF                         = 0x2000
+	IP_MSS                        = 0x240
+	IP_MULTICAST_HOPS             = 0xa
+	IP_MULTICAST_IF               = 0x9
+	IP_MULTICAST_LOOP             = 0xb
+	IP_MULTICAST_TTL              = 0xa
+	IP_OPT                        = 0x1b
+	IP_OPTIONS                    = 0x1
+	IP_PMTUAGE                    = 0x1b
+	IP_RECVDSTADDR                = 0x7
+	IP_RECVIF                     = 0x14
+	IP_RECVIFINFO                 = 0xf
+	IP_RECVINTERFACE              = 0x20
+	IP_RECVMACHDR                 = 0xe
+	IP_RECVOPTS                   = 0x5
+	IP_RECVRETOPTS                = 0x6
+	IP_RECVTTL                    = 0x22
+	IP_RETOPTS                    = 0x8
+	IP_SOURCE_FILTER              = 0x48
+	IP_TOS                        = 0x3
+	IP_TTL                        = 0x4
+	IP_UNBLOCK_SOURCE             = 0x3b
+	IP_UNICAST_HOPS               = 0x4
+	ISIG                          = 0x1
+	ISTRIP                        = 0x20
+	IUCLC                         = 0x800
+	IXANY                         = 0x1000
+	IXOFF                         = 0x400
+	IXON                          = 0x200
+	I_FLUSH                       = 0x20005305
+	LNOFLSH                       = 0x8000
+	LOCK_EX                       = 0x2
+	LOCK_NB                       = 0x4
+	LOCK_SH                       = 0x1
+	LOCK_UN                       = 0x8
+	MADV_DONTNEED                 = 0x4
+	MADV_NORMAL                   = 0x0
+	MADV_RANDOM                   = 0x1
+	MADV_SEQUENTIAL               = 0x2
+	MADV_SPACEAVAIL               = 0x5
+	MADV_WILLNEED                 = 0x3
+	MAP_ANON                      = 0x10
+	MAP_ANONYMOUS                 = 0x10
+	MAP_FILE                      = 0x0
+	MAP_FIXED                     = 0x100
+	MAP_PRIVATE                   = 0x2
+	MAP_SHARED                    = 0x1
+	MAP_TYPE                      = 0xf0
+	MAP_VARIABLE                  = 0x0
+	MCAST_BLOCK_SOURCE            = 0x40
+	MCAST_EXCLUDE                 = 0x2
+	MCAST_INCLUDE                 = 0x1
+	MCAST_JOIN_GROUP              = 0x3e
+	MCAST_JOIN_SOURCE_GROUP       = 0x42
+	MCAST_LEAVE_GROUP             = 0x3f
+	MCAST_LEAVE_SOURCE_GROUP      = 0x43
+	MCAST_SOURCE_FILTER           = 0x49
+	MCAST_UNBLOCK_SOURCE          = 0x41
+	MCL_CURRENT                   = 0x100
+	MCL_FUTURE                    = 0x200
+	MSG_ANY                       = 0x4
+	MSG_ARGEXT                    = 0x400
+	MSG_BAND                      = 0x2
+	MSG_COMPAT                    = 0x8000
+	MSG_CTRUNC                    = 0x20
+	MSG_DONTROUTE                 = 0x4
+	MSG_EOR                       = 0x8
+	MSG_HIPRI                     = 0x1
+	MSG_MAXIOVLEN                 = 0x10
+	MSG_MPEG2                     = 0x80
+	MSG_NONBLOCK                  = 0x4000
+	MSG_NOSIGNAL                  = 0x100
+	MSG_OOB                       = 0x1
+	MSG_PEEK                      = 0x2
+	MSG_TRUNC                     = 0x10
+	MSG_WAITALL                   = 0x40
+	MSG_WAITFORONE                = 0x200
+	MS_ASYNC                      = 0x10
+	MS_EINTR                      = 0x80
+	MS_INVALIDATE                 = 0x40
+	MS_PER_SEC                    = 0x3e8
+	MS_SYNC                       = 0x20
+	NFDBITS                       = 0x40
+	NL0                           = 0x0
+	NL1                           = 0x4000
+	NL2                           = 0x8000
+	NL3                           = 0xc000
+	NLDLY                         = 0x4000
+	NOFLSH                        = 0x80
+	NOFLUSH                       = 0x80000000
+	OCRNL                         = 0x8
+	OFDEL                         = 0x80
+	OFILL                         = 0x40
+	OLCUC                         = 0x2
+	ONLCR                         = 0x4
+	ONLRET                        = 0x20
+	ONOCR                         = 0x10
+	ONOEOT                        = 0x80000
+	OPOST                         = 0x1
+	OXTABS                        = 0x40000
+	O_ACCMODE                     = 0x23
+	O_APPEND                      = 0x8
+	O_CIO                         = 0x80
+	O_CIOR                        = 0x800000000
+	O_CLOEXEC                     = 0x800000
+	O_CREAT                       = 0x100
+	O_DEFER                       = 0x2000
+	O_DELAY                       = 0x4000
+	O_DIRECT                      = 0x8000000
+	O_DIRECTORY                   = 0x80000
+	O_DSYNC                       = 0x400000
+	O_EFSOFF                      = 0x400000000
+	O_EFSON                       = 0x200000000
+	O_EXCL                        = 0x400
+	O_EXEC                        = 0x20
+	O_LARGEFILE                   = 0x4000000
+	O_NDELAY                      = 0x8000
+	O_NOCACHE                     = 0x100000
+	O_NOCTTY                      = 0x800
+	O_NOFOLLOW                    = 0x1000000
+	O_NONBLOCK                    = 0x4
+	O_NONE                        = 0x3
+	O_NSHARE                      = 0x10000
+	O_RAW                         = 0x100000000
+	O_RDONLY                      = 0x0
+	O_RDWR                        = 0x2
+	O_RSHARE                      = 0x1000
+	O_RSYNC                       = 0x200000
+	O_SEARCH                      = 0x20
+	O_SNAPSHOT                    = 0x40
+	O_SYNC                        = 0x10
+	O_TRUNC                       = 0x200
+	O_TTY_INIT                    = 0x0
+	O_WRONLY                      = 0x1
+	PARENB                        = 0x100
+	PAREXT                        = 0x100000
+	PARMRK                        = 0x8
+	PARODD                        = 0x200
+	PENDIN                        = 0x20000000
+	PRIO_PGRP                     = 0x1
+	PRIO_PROCESS                  = 0x0
+	PRIO_USER                     = 0x2
+	PROT_EXEC                     = 0x4
+	PROT_NONE                     = 0x0
+	PROT_READ                     = 0x1
+	PROT_WRITE                    = 0x2
+	PR_64BIT                      = 0x20
+	PR_ADDR                       = 0x2
+	PR_ARGEXT                     = 0x400
+	PR_ATOMIC                     = 0x1
+	PR_CONNREQUIRED               = 0x4
+	PR_FASTHZ                     = 0x5
+	PR_INP                        = 0x40
+	PR_INTRLEVEL                  = 0x8000
+	PR_MLS                        = 0x100
+	PR_MLS_1_LABEL                = 0x200
+	PR_NOEOR                      = 0x4000
+	PR_RIGHTS                     = 0x10
+	PR_SLOWHZ                     = 0x2
+	PR_WANTRCVD                   = 0x8
+	RLIMIT_AS                     = 0x6
+	RLIMIT_CORE                   = 0x4
+	RLIMIT_CPU                    = 0x0
+	RLIMIT_DATA                   = 0x2
+	RLIMIT_FSIZE                  = 0x1
+	RLIMIT_NOFILE                 = 0x7
+	RLIMIT_NPROC                  = 0x9
+	RLIMIT_RSS                    = 0x5
+	RLIMIT_STACK                  = 0x3
+	RLIM_INFINITY                 = 0x7fffffffffffffff
+	RTAX_AUTHOR                   = 0x6
+	RTAX_BRD                      = 0x7
+	RTAX_DST                      = 0x0
+	RTAX_GATEWAY                  = 0x1
+	RTAX_GENMASK                  = 0x3
+	RTAX_IFA                      = 0x5
+	RTAX_IFP                      = 0x4
+	RTAX_MAX                      = 0x8
+	RTAX_NETMASK                  = 0x2
+	RTA_AUTHOR                    = 0x40
+	RTA_BRD                       = 0x80
+	RTA_DOWNSTREAM                = 0x100
+	RTA_DST                       = 0x1
+	RTA_GATEWAY                   = 0x2
+	RTA_GENMASK                   = 0x8
+	RTA_IFA                       = 0x20
+	RTA_IFP                       = 0x10
+	RTA_NETMASK                   = 0x4
+	RTC_IA64                      = 0x3
+	RTC_POWER                     = 0x1
+	RTC_POWER_PC                  = 0x2
+	RTF_ACTIVE_DGD                = 0x1000000
+	RTF_BCE                       = 0x80000
+	RTF_BLACKHOLE                 = 0x1000
+	RTF_BROADCAST                 = 0x400000
+	RTF_BUL                       = 0x2000
+	RTF_CLONE                     = 0x10000
+	RTF_CLONED                    = 0x20000
+	RTF_CLONING                   = 0x100
+	RTF_DONE                      = 0x40
+	RTF_DYNAMIC                   = 0x10
+	RTF_FREE_IN_PROG              = 0x4000000
+	RTF_GATEWAY                   = 0x2
+	RTF_HOST                      = 0x4
+	RTF_LLINFO                    = 0x400
+	RTF_LOCAL                     = 0x200000
+	RTF_MASK                      = 0x80
+	RTF_MODIFIED                  = 0x20
+	RTF_MULTICAST                 = 0x800000
+	RTF_PERMANENT6                = 0x8000000
+	RTF_PINNED                    = 0x100000
+	RTF_PROTO1                    = 0x8000
+	RTF_PROTO2                    = 0x4000
+	RTF_PROTO3                    = 0x40000
+	RTF_REJECT                    = 0x8
+	RTF_SMALLMTU                  = 0x40000
+	RTF_STATIC                    = 0x800
+	RTF_STOPSRCH                  = 0x2000000
+	RTF_UNREACHABLE               = 0x10000000
+	RTF_UP                        = 0x1
+	RTF_XRESOLVE                  = 0x200
+	RTM_ADD                       = 0x1
+	RTM_CHANGE                    = 0x3
+	RTM_DELADDR                   = 0xd
+	RTM_DELETE                    = 0x2
+	RTM_EXPIRE                    = 0xf
+	RTM_GET                       = 0x4
+	RTM_GETNEXT                   = 0x11
+	RTM_IFINFO                    = 0xe
+	RTM_LOCK                      = 0x8
+	RTM_LOSING                    = 0x5
+	RTM_MISS                      = 0x7
+	RTM_NEWADDR                   = 0xc
+	RTM_OLDADD                    = 0x9
+	RTM_OLDDEL                    = 0xa
+	RTM_REDIRECT                  = 0x6
+	RTM_RESOLVE                   = 0xb
+	RTM_RTLOST                    = 0x10
+	RTM_RTTUNIT                   = 0xf4240
+	RTM_SAMEADDR                  = 0x12
+	RTM_SET                       = 0x13
+	RTM_VERSION                   = 0x2
+	RTM_VERSION_GR                = 0x4
+	RTM_VERSION_GR_COMPAT         = 0x3
+	RTM_VERSION_POLICY            = 0x5
+	RTM_VERSION_POLICY_EXT        = 0x6
+	RTM_VERSION_POLICY_PRFN       = 0x7
+	RTV_EXPIRE                    = 0x4
+	RTV_HOPCOUNT                  = 0x2
+	RTV_MTU                       = 0x1
+	RTV_RPIPE                     = 0x8
+	RTV_RTT                       = 0x40
+	RTV_RTTVAR                    = 0x80
+	RTV_SPIPE                     = 0x10
+	RTV_SSTHRESH                  = 0x20
+	RUSAGE_CHILDREN               = -0x1
+	RUSAGE_SELF                   = 0x0
+	RUSAGE_THREAD                 = 0x1
+	SCM_RIGHTS                    = 0x1
+	SHUT_RD                       = 0x0
+	SHUT_RDWR                     = 0x2
+	SHUT_WR                       = 0x1
+	SIGMAX64                      = 0xff
+	SIGQUEUE_MAX                  = 0x20
+	SIOCADDIFVIPA                 = 0x20006942
+	SIOCADDMTU                    = -0x7ffb9690
+	SIOCADDMULTI                  = -0x7fdf96cf
+	SIOCADDNETID                  = -0x7fd796a9
+	SIOCADDRT                     = -0x7fc78df6
+	SIOCAIFADDR                   = -0x7fbf96e6
+	SIOCATMARK                    = 0x40047307
+	SIOCDARP                      = -0x7fb396e0
+	SIOCDELIFVIPA                 = 0x20006943
+	SIOCDELMTU                    = -0x7ffb968f
+	SIOCDELMULTI                  = -0x7fdf96ce
+	SIOCDELPMTU                   = -0x7fd78ff6
+	SIOCDELRT                     = -0x7fc78df5
+	SIOCDIFADDR                   = -0x7fd796e7
+	SIOCDNETOPT                   = -0x3ffe9680
+	SIOCDX25XLATE                 = -0x7fd7969b
+	SIOCFIFADDR                   = -0x7fdf966d
+	SIOCGARP                      = -0x3fb396da
+	SIOCGETMTUS                   = 0x2000696f
+	SIOCGETSGCNT                  = -0x3feb8acc
+	SIOCGETVIFCNT                 = -0x3feb8acd
+	SIOCGHIWAT                    = 0x40047301
+	SIOCGIFADDR                   = -0x3fd796df
+	SIOCGIFADDRS                  = 0x2000698c
+	SIOCGIFBAUDRATE               = -0x3fdf9669
+	SIOCGIFBRDADDR                = -0x3fd796dd
+	SIOCGIFCONF                   = -0x3fef96bb
+	SIOCGIFCONFGLOB               = -0x3fef9670
+	SIOCGIFDSTADDR                = -0x3fd796de
+	SIOCGIFFLAGS                  = -0x3fd796ef
+	SIOCGIFGIDLIST                = 0x20006968
+	SIOCGIFHWADDR                 = -0x3fab966b
+	SIOCGIFMETRIC                 = -0x3fd796e9
+	SIOCGIFMTU                    = -0x3fd796aa
+	SIOCGIFNETMASK                = -0x3fd796db
+	SIOCGIFOPTIONS                = -0x3fd796d6
+	SIOCGISNO                     = -0x3fd79695
+	SIOCGLOADF                    = -0x3ffb967e
+	SIOCGLOWAT                    = 0x40047303
+	SIOCGNETOPT                   = -0x3ffe96a5
+	SIOCGNETOPT1                  = -0x3fdf967f
+	SIOCGNMTUS                    = 0x2000696e
+	SIOCGPGRP                     = 0x40047309
+	SIOCGSIZIFCONF                = 0x4004696a
+	SIOCGSRCFILTER                = -0x3fe796cb
+	SIOCGTUNEPHASE                = -0x3ffb9676
+	SIOCGX25XLATE                 = -0x3fd7969c
+	SIOCIFATTACH                  = -0x7fdf9699
+	SIOCIFDETACH                  = -0x7fdf969a
+	SIOCIFGETPKEY                 = -0x7fdf969b
+	SIOCIF_ATM_DARP               = -0x7fdf9683
+	SIOCIF_ATM_DUMPARP            = -0x7fdf9685
+	SIOCIF_ATM_GARP               = -0x7fdf9682
+	SIOCIF_ATM_IDLE               = -0x7fdf9686
+	SIOCIF_ATM_SARP               = -0x7fdf9681
+	SIOCIF_ATM_SNMPARP            = -0x7fdf9687
+	SIOCIF_ATM_SVC                = -0x7fdf9684
+	SIOCIF_ATM_UBR                = -0x7fdf9688
+	SIOCIF_DEVHEALTH              = -0x7ffb966c
+	SIOCIF_IB_ARP_INCOMP          = -0x7fdf9677
+	SIOCIF_IB_ARP_TIMER           = -0x7fdf9678
+	SIOCIF_IB_CLEAR_PINFO         = -0x3fdf966f
+	SIOCIF_IB_DEL_ARP             = -0x7fdf967f
+	SIOCIF_IB_DEL_PINFO           = -0x3fdf9670
+	SIOCIF_IB_DUMP_ARP            = -0x7fdf9680
+	SIOCIF_IB_GET_ARP             = -0x7fdf967e
+	SIOCIF_IB_GET_INFO            = -0x3f879675
+	SIOCIF_IB_GET_STATS           = -0x3f879672
+	SIOCIF_IB_NOTIFY_ADDR_REM     = -0x3f87966a
+	SIOCIF_IB_RESET_STATS         = -0x3f879671
+	SIOCIF_IB_RESIZE_CQ           = -0x7fdf9679
+	SIOCIF_IB_SET_ARP             = -0x7fdf967d
+	SIOCIF_IB_SET_PKEY            = -0x7fdf967c
+	SIOCIF_IB_SET_PORT            = -0x7fdf967b
+	SIOCIF_IB_SET_QKEY            = -0x7fdf9676
+	SIOCIF_IB_SET_QSIZE           = -0x7fdf967a
+	SIOCLISTIFVIPA                = 0x20006944
+	SIOCSARP                      = -0x7fb396e2
+	SIOCSHIWAT                    = 0xffffffff80047300
+	SIOCSIFADDR                   = -0x7fd796f4
+	SIOCSIFADDRORI                = -0x7fdb9673
+	SIOCSIFBRDADDR                = -0x7fd796ed
+	SIOCSIFDSTADDR                = -0x7fd796f2
+	SIOCSIFFLAGS                  = -0x7fd796f0
+	SIOCSIFGIDLIST                = 0x20006969
+	SIOCSIFMETRIC                 = -0x7fd796e8
+	SIOCSIFMTU                    = -0x7fd796a8
+	SIOCSIFNETDUMP                = -0x7fd796e4
+	SIOCSIFNETMASK                = -0x7fd796ea
+	SIOCSIFOPTIONS                = -0x7fd796d7
+	SIOCSIFSUBCHAN                = -0x7fd796e5
+	SIOCSISNO                     = -0x7fd79694
+	SIOCSLOADF                    = -0x3ffb967d
+	SIOCSLOWAT                    = 0xffffffff80047302
+	SIOCSNETOPT                   = -0x7ffe96a6
+	SIOCSPGRP                     = 0xffffffff80047308
+	SIOCSX25XLATE                 = -0x7fd7969d
+	SOCK_CONN_DGRAM               = 0x6
+	SOCK_DGRAM                    = 0x2
+	SOCK_RAW                      = 0x3
+	SOCK_RDM                      = 0x4
+	SOCK_SEQPACKET                = 0x5
+	SOCK_STREAM                   = 0x1
+	SOL_SOCKET                    = 0xffff
+	SOMAXCONN                     = 0x400
+	SO_ACCEPTCONN                 = 0x2
+	SO_AUDIT                      = 0x8000
+	SO_BROADCAST                  = 0x20
+	SO_CKSUMRECV                  = 0x800
+	SO_DEBUG                      = 0x1
+	SO_DONTROUTE                  = 0x10
+	SO_ERROR                      = 0x1007
+	SO_KEEPALIVE                  = 0x8
+	SO_KERNACCEPT                 = 0x2000
+	SO_LINGER                     = 0x80
+	SO_NOMULTIPATH                = 0x4000
+	SO_NOREUSEADDR                = 0x1000
+	SO_OOBINLINE                  = 0x100
+	SO_PEERID                     = 0x1009
+	SO_RCVBUF                     = 0x1002
+	SO_RCVLOWAT                   = 0x1004
+	SO_RCVTIMEO                   = 0x1006
+	SO_REUSEADDR                  = 0x4
+	SO_REUSEPORT                  = 0x200
+	SO_SNDBUF                     = 0x1001
+	SO_SNDLOWAT                   = 0x1003
+	SO_SNDTIMEO                   = 0x1005
+	SO_TIMESTAMPNS                = 0x100a
+	SO_TYPE                       = 0x1008
+	SO_USELOOPBACK                = 0x40
+	SO_USE_IFBUFS                 = 0x400
+	S_BANDURG                     = 0x400
+	S_EMODFMT                     = 0x3c000000
+	S_ENFMT                       = 0x400
+	S_ERROR                       = 0x100
+	S_HANGUP                      = 0x200
+	S_HIPRI                       = 0x2
+	S_ICRYPTO                     = 0x80000
+	S_IEXEC                       = 0x40
+	S_IFBLK                       = 0x6000
+	S_IFCHR                       = 0x2000
+	S_IFDIR                       = 0x4000
+	S_IFIFO                       = 0x1000
+	S_IFJOURNAL                   = 0x10000
+	S_IFLNK                       = 0xa000
+	S_IFMPX                       = 0x2200
+	S_IFMT                        = 0xf000
+	S_IFPDIR                      = 0x4000000
+	S_IFPSDIR                     = 0x8000000
+	S_IFPSSDIR                    = 0xc000000
+	S_IFREG                       = 0x8000
+	S_IFSOCK                      = 0xc000
+	S_IFSYSEA                     = 0x30000000
+	S_INPUT                       = 0x1
+	S_IREAD                       = 0x100
+	S_IRGRP                       = 0x20
+	S_IROTH                       = 0x4
+	S_IRUSR                       = 0x100
+	S_IRWXG                       = 0x38
+	S_IRWXO                       = 0x7
+	S_IRWXU                       = 0x1c0
+	S_ISGID                       = 0x400
+	S_ISUID                       = 0x800
+	S_ISVTX                       = 0x200
+	S_ITCB                        = 0x1000000
+	S_ITP                         = 0x800000
+	S_IWGRP                       = 0x10
+	S_IWOTH                       = 0x2
+	S_IWRITE                      = 0x80
+	S_IWUSR                       = 0x80
+	S_IXACL                       = 0x2000000
+	S_IXATTR                      = 0x40000
+	S_IXGRP                       = 0x8
+	S_IXINTERFACE                 = 0x100000
+	S_IXMOD                       = 0x40000000
+	S_IXOTH                       = 0x1
+	S_IXUSR                       = 0x40
+	S_MSG                         = 0x8
+	S_OUTPUT                      = 0x4
+	S_RDBAND                      = 0x20
+	S_RDNORM                      = 0x10
+	S_RESERVED1                   = 0x20000
+	S_RESERVED2                   = 0x200000
+	S_RESERVED3                   = 0x400000
+	S_RESERVED4                   = 0x80000000
+	S_RESFMT1                     = 0x10000000
+	S_RESFMT10                    = 0x34000000
+	S_RESFMT11                    = 0x38000000
+	S_RESFMT12                    = 0x3c000000
+	S_RESFMT2                     = 0x14000000
+	S_RESFMT3                     = 0x18000000
+	S_RESFMT4                     = 0x1c000000
+	S_RESFMT5                     = 0x20000000
+	S_RESFMT6                     = 0x24000000
+	S_RESFMT7                     = 0x28000000
+	S_RESFMT8                     = 0x2c000000
+	S_WRBAND                      = 0x80
+	S_WRNORM                      = 0x40
+	TAB0                          = 0x0
+	TAB1                          = 0x400
+	TAB2                          = 0x800
+	TAB3                          = 0xc00
+	TABDLY                        = 0xc00
+	TCFLSH                        = 0x540c
+	TCGETA                        = 0x5405
+	TCGETS                        = 0x5401
+	TCIFLUSH                      = 0x0
+	TCIOFF                        = 0x2
+	TCIOFLUSH                     = 0x2
+	TCION                         = 0x3
+	TCOFLUSH                      = 0x1
+	TCOOFF                        = 0x0
+	TCOON                         = 0x1
+	TCP_24DAYS_WORTH_OF_SLOWTICKS = 0x3f4800
+	TCP_ACLADD                    = 0x23
+	TCP_ACLBIND                   = 0x26
+	TCP_ACLCLEAR                  = 0x22
+	TCP_ACLDEL                    = 0x24
+	TCP_ACLDENY                   = 0x8
+	TCP_ACLFLUSH                  = 0x21
+	TCP_ACLGID                    = 0x1
+	TCP_ACLLS                     = 0x25
+	TCP_ACLSUBNET                 = 0x4
+	TCP_ACLUID                    = 0x2
+	TCP_CWND_DF                   = 0x16
+	TCP_CWND_IF                   = 0x15
+	TCP_DELAY_ACK_FIN             = 0x2
+	TCP_DELAY_ACK_SYN             = 0x1
+	TCP_FASTNAME                  = 0x101080a
+	TCP_KEEPCNT                   = 0x13
+	TCP_KEEPIDLE                  = 0x11
+	TCP_KEEPINTVL                 = 0x12
+	TCP_LSPRIV                    = 0x29
+	TCP_LUID                      = 0x20
+	TCP_MAXBURST                  = 0x8
+	TCP_MAXDF                     = 0x64
+	TCP_MAXIF                     = 0x64
+	TCP_MAXSEG                    = 0x2
+	TCP_MAXWIN                    = 0xffff
+	TCP_MAXWINDOWSCALE            = 0xe
+	TCP_MAX_SACK                  = 0x4
+	TCP_MSS                       = 0x5b4
+	TCP_NODELAY                   = 0x1
+	TCP_NODELAYACK                = 0x14
+	TCP_NOREDUCE_CWND_EXIT_FRXMT  = 0x19
+	TCP_NOREDUCE_CWND_IN_FRXMT    = 0x18
+	TCP_NOTENTER_SSTART           = 0x17
+	TCP_OPT                       = 0x19
+	TCP_RFC1323                   = 0x4
+	TCP_SETPRIV                   = 0x27
+	TCP_STDURG                    = 0x10
+	TCP_TIMESTAMP_OPTLEN          = 0xc
+	TCP_UNSETPRIV                 = 0x28
+	TCSAFLUSH                     = 0x2
+	TCSBRK                        = 0x5409
+	TCSETA                        = 0x5406
+	TCSETAF                       = 0x5408
+	TCSETAW                       = 0x5407
+	TCSETS                        = 0x5402
+	TCSETSF                       = 0x5404
+	TCSETSW                       = 0x5403
+	TCXONC                        = 0x540b
+	TIMER_ABSTIME                 = 0x3e7
+	TIMER_MAX                     = 0x20
+	TIOC                          = 0x5400
+	TIOCCBRK                      = 0x2000747a
+	TIOCCDTR                      = 0x20007478
+	TIOCCONS                      = 0xffffffff80047462
+	TIOCEXCL                      = 0x2000740d
+	TIOCFLUSH                     = 0xffffffff80047410
+	TIOCGETC                      = 0x40067412
+	TIOCGETD                      = 0x40047400
+	TIOCGETP                      = 0x40067408
+	TIOCGLTC                      = 0x40067474
+	TIOCGPGRP                     = 0x40047477
+	TIOCGSID                      = 0x40047448
+	TIOCGSIZE                     = 0x40087468
+	TIOCGWINSZ                    = 0x40087468
+	TIOCHPCL                      = 0x20007402
+	TIOCLBIC                      = 0xffffffff8004747e
+	TIOCLBIS                      = 0xffffffff8004747f
+	TIOCLGET                      = 0x4004747c
+	TIOCLSET                      = 0xffffffff8004747d
+	TIOCMBIC                      = 0xffffffff8004746b
+	TIOCMBIS                      = 0xffffffff8004746c
+	TIOCMGET                      = 0x4004746a
+	TIOCMIWAIT                    = 0xffffffff80047464
+	TIOCMODG                      = 0x40047403
+	TIOCMODS                      = 0xffffffff80047404
+	TIOCMSET                      = 0xffffffff8004746d
+	TIOCM_CAR                     = 0x40
+	TIOCM_CD                      = 0x40
+	TIOCM_CTS                     = 0x20
+	TIOCM_DSR                     = 0x100
+	TIOCM_DTR                     = 0x2
+	TIOCM_LE                      = 0x1
+	TIOCM_RI                      = 0x80
+	TIOCM_RNG                     = 0x80
+	TIOCM_RTS                     = 0x4
+	TIOCM_SR                      = 0x10
+	TIOCM_ST                      = 0x8
+	TIOCNOTTY                     = 0x20007471
+	TIOCNXCL                      = 0x2000740e
+	TIOCOUTQ                      = 0x40047473
+	TIOCPKT                       = 0xffffffff80047470
+	TIOCPKT_DATA                  = 0x0
+	TIOCPKT_DOSTOP                = 0x20
+	TIOCPKT_FLUSHREAD             = 0x1
+	TIOCPKT_FLUSHWRITE            = 0x2
+	TIOCPKT_NOSTOP                = 0x10
+	TIOCPKT_START                 = 0x8
+	TIOCPKT_STOP                  = 0x4
+	TIOCREMOTE                    = 0xffffffff80047469
+	TIOCSBRK                      = 0x2000747b
+	TIOCSDTR                      = 0x20007479
+	TIOCSETC                      = 0xffffffff80067411
+	TIOCSETD                      = 0xffffffff80047401
+	TIOCSETN                      = 0xffffffff8006740a
+	TIOCSETP                      = 0xffffffff80067409
+	TIOCSLTC                      = 0xffffffff80067475
+	TIOCSPGRP                     = 0xffffffff80047476
+	TIOCSSIZE                     = 0xffffffff80087467
+	TIOCSTART                     = 0x2000746e
+	TIOCSTI                       = 0xffffffff80017472
+	TIOCSTOP                      = 0x2000746f
+	TIOCSWINSZ                    = 0xffffffff80087467
+	TIOCUCNTL                     = 0xffffffff80047466
+	TOSTOP                        = 0x10000
+	UTIME_NOW                     = -0x2
+	UTIME_OMIT                    = -0x3
+	VDISCRD                       = 0xc
+	VDSUSP                        = 0xa
+	VEOF                          = 0x4
+	VEOL                          = 0x5
+	VEOL2                         = 0x6
+	VERASE                        = 0x2
+	VINTR                         = 0x0
+	VKILL                         = 0x3
+	VLNEXT                        = 0xe
+	VMIN                          = 0x4
+	VQUIT                         = 0x1
+	VREPRINT                      = 0xb
+	VSTART                        = 0x7
+	VSTOP                         = 0x8
+	VSTRT                         = 0x7
+	VSUSP                         = 0x9
+	VT0                           = 0x0
+	VT1                           = 0x8000
+	VTDELAY                       = 0x2000
+	VTDLY                         = 0x8000
+	VTIME                         = 0x5
+	VWERSE                        = 0xd
+	WPARSTART                     = 0x1
+	WPARSTOP                      = 0x2
+	WPARTTYNAME                   = "Global"
+	XCASE                         = 0x4
+	XTABS                         = 0xc00
+	_FDATAFLUSH                   = 0x2000000000
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x43)
+	EADDRNOTAVAIL   = syscall.Errno(0x44)
+	EAFNOSUPPORT    = syscall.Errno(0x42)
+	EAGAIN          = syscall.Errno(0xb)
+	EALREADY        = syscall.Errno(0x38)
+	EBADF           = syscall.Errno(0x9)
+	EBADMSG         = syscall.Errno(0x78)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x75)
+	ECHILD          = syscall.Errno(0xa)
+	ECHRNG          = syscall.Errno(0x25)
+	ECLONEME        = syscall.Errno(0x52)
+	ECONNABORTED    = syscall.Errno(0x48)
+	ECONNREFUSED    = syscall.Errno(0x4f)
+	ECONNRESET      = syscall.Errno(0x49)
+	ECORRUPT        = syscall.Errno(0x59)
+	EDEADLK         = syscall.Errno(0x2d)
+	EDESTADDREQ     = syscall.Errno(0x3a)
+	EDESTADDRREQ    = syscall.Errno(0x3a)
+	EDIST           = syscall.Errno(0x35)
+	EDOM            = syscall.Errno(0x21)
+	EDQUOT          = syscall.Errno(0x58)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFORMAT         = syscall.Errno(0x30)
+	EHOSTDOWN       = syscall.Errno(0x50)
+	EHOSTUNREACH    = syscall.Errno(0x51)
+	EIDRM           = syscall.Errno(0x24)
+	EILSEQ          = syscall.Errno(0x74)
+	EINPROGRESS     = syscall.Errno(0x37)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EISCONN         = syscall.Errno(0x4b)
+	EISDIR          = syscall.Errno(0x15)
+	EL2HLT          = syscall.Errno(0x2c)
+	EL2NSYNC        = syscall.Errno(0x26)
+	EL3HLT          = syscall.Errno(0x27)
+	EL3RST          = syscall.Errno(0x28)
+	ELNRNG          = syscall.Errno(0x29)
+	ELOOP           = syscall.Errno(0x55)
+	EMEDIA          = syscall.Errno(0x6e)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x3b)
+	EMULTIHOP       = syscall.Errno(0x7d)
+	ENAMETOOLONG    = syscall.Errno(0x56)
+	ENETDOWN        = syscall.Errno(0x45)
+	ENETRESET       = syscall.Errno(0x47)
+	ENETUNREACH     = syscall.Errno(0x46)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x70)
+	ENOBUFS         = syscall.Errno(0x4a)
+	ENOCONNECT      = syscall.Errno(0x32)
+	ENOCSI          = syscall.Errno(0x2b)
+	ENODATA         = syscall.Errno(0x7a)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x31)
+	ENOLINK         = syscall.Errno(0x7e)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x23)
+	ENOPROTOOPT     = syscall.Errno(0x3d)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSR           = syscall.Errno(0x76)
+	ENOSTR          = syscall.Errno(0x7b)
+	ENOSYS          = syscall.Errno(0x6d)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x4c)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x11)
+	ENOTREADY       = syscall.Errno(0x2e)
+	ENOTRECOVERABLE = syscall.Errno(0x5e)
+	ENOTRUST        = syscall.Errno(0x72)
+	ENOTSOCK        = syscall.Errno(0x39)
+	ENOTSUP         = syscall.Errno(0x7c)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x40)
+	EOVERFLOW       = syscall.Errno(0x7f)
+	EOWNERDEAD      = syscall.Errno(0x5f)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x41)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x53)
+	EPROTO          = syscall.Errno(0x79)
+	EPROTONOSUPPORT = syscall.Errno(0x3e)
+	EPROTOTYPE      = syscall.Errno(0x3c)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x5d)
+	ERESTART        = syscall.Errno(0x52)
+	EROFS           = syscall.Errno(0x1e)
+	ESAD            = syscall.Errno(0x71)
+	ESHUTDOWN       = syscall.Errno(0x4d)
+	ESOCKTNOSUPPORT = syscall.Errno(0x3f)
+	ESOFT           = syscall.Errno(0x6f)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x34)
+	ESYSERROR       = syscall.Errno(0x5a)
+	ETIME           = syscall.Errno(0x77)
+	ETIMEDOUT       = syscall.Errno(0x4e)
+	ETOOMANYREFS    = syscall.Errno(0x73)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUNATCH         = syscall.Errno(0x2a)
+	EUSERS          = syscall.Errno(0x54)
+	EWOULDBLOCK     = syscall.Errno(0xb)
+	EWRPROTECT      = syscall.Errno(0x2f)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT     = syscall.Signal(0x6)
+	SIGAIO      = syscall.Signal(0x17)
+	SIGALRM     = syscall.Signal(0xe)
+	SIGALRM1    = syscall.Signal(0x26)
+	SIGBUS      = syscall.Signal(0xa)
+	SIGCAPI     = syscall.Signal(0x31)
+	SIGCHLD     = syscall.Signal(0x14)
+	SIGCLD      = syscall.Signal(0x14)
+	SIGCONT     = syscall.Signal(0x13)
+	SIGCPUFAIL  = syscall.Signal(0x3b)
+	SIGDANGER   = syscall.Signal(0x21)
+	SIGEMT      = syscall.Signal(0x7)
+	SIGFPE      = syscall.Signal(0x8)
+	SIGGRANT    = syscall.Signal(0x3c)
+	SIGHUP      = syscall.Signal(0x1)
+	SIGILL      = syscall.Signal(0x4)
+	SIGINT      = syscall.Signal(0x2)
+	SIGIO       = syscall.Signal(0x17)
+	SIGIOINT    = syscall.Signal(0x10)
+	SIGIOT      = syscall.Signal(0x6)
+	SIGKAP      = syscall.Signal(0x3c)
+	SIGKILL     = syscall.Signal(0x9)
+	SIGLOST     = syscall.Signal(0x6)
+	SIGMAX      = syscall.Signal(0xff)
+	SIGMAX32    = syscall.Signal(0x3f)
+	SIGMIGRATE  = syscall.Signal(0x23)
+	SIGMSG      = syscall.Signal(0x1b)
+	SIGPIPE     = syscall.Signal(0xd)
+	SIGPOLL     = syscall.Signal(0x17)
+	SIGPRE      = syscall.Signal(0x24)
+	SIGPROF     = syscall.Signal(0x20)
+	SIGPTY      = syscall.Signal(0x17)
+	SIGPWR      = syscall.Signal(0x1d)
+	SIGQUIT     = syscall.Signal(0x3)
+	SIGRECONFIG = syscall.Signal(0x3a)
+	SIGRETRACT  = syscall.Signal(0x3d)
+	SIGSAK      = syscall.Signal(0x3f)
+	SIGSEGV     = syscall.Signal(0xb)
+	SIGSOUND    = syscall.Signal(0x3e)
+	SIGSTOP     = syscall.Signal(0x11)
+	SIGSYS      = syscall.Signal(0xc)
+	SIGSYSERROR = syscall.Signal(0x30)
+	SIGTALRM    = syscall.Signal(0x26)
+	SIGTERM     = syscall.Signal(0xf)
+	SIGTRAP     = syscall.Signal(0x5)
+	SIGTSTP     = syscall.Signal(0x12)
+	SIGTTIN     = syscall.Signal(0x15)
+	SIGTTOU     = syscall.Signal(0x16)
+	SIGURG      = syscall.Signal(0x10)
+	SIGUSR1     = syscall.Signal(0x1e)
+	SIGUSR2     = syscall.Signal(0x1f)
+	SIGVIRT     = syscall.Signal(0x25)
+	SIGVTALRM   = syscall.Signal(0x22)
+	SIGWAITING  = syscall.Signal(0x27)
+	SIGWINCH    = syscall.Signal(0x1c)
+	SIGXCPU     = syscall.Signal(0x18)
+	SIGXFSZ     = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "not owner"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "I/O error"},
+	{6, "ENXIO", "no such device or address"},
+	{7, "E2BIG", "arg list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file number"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EWOULDBLOCK", "resource temporarily unavailable"},
+	{12, "ENOMEM", "not enough space"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "ENOTEMPTY", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "no such device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "file table overflow"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "not a typewriter"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "ENOMSG", "no message of desired type"},
+	{36, "EIDRM", "identifier removed"},
+	{37, "ECHRNG", "channel number out of range"},
+	{38, "EL2NSYNC", "level 2 not synchronized"},
+	{39, "EL3HLT", "level 3 halted"},
+	{40, "EL3RST", "level 3 reset"},
+	{41, "ELNRNG", "link number out of range"},
+	{42, "EUNATCH", "protocol driver not attached"},
+	{43, "ENOCSI", "no CSI structure available"},
+	{44, "EL2HLT", "level 2 halted"},
+	{45, "EDEADLK", "deadlock condition if locked"},
+	{46, "ENOTREADY", "device not ready"},
+	{47, "EWRPROTECT", "write-protected media"},
+	{48, "EFORMAT", "unformatted or incompatible media"},
+	{49, "ENOLCK", "no locks available"},
+	{50, "ENOCONNECT", "cannot Establish Connection"},
+	{52, "ESTALE", "missing file or filesystem"},
+	{53, "EDIST", "requests blocked by Administrator"},
+	{55, "EINPROGRESS", "operation now in progress"},
+	{56, "EALREADY", "operation already in progress"},
+	{57, "ENOTSOCK", "socket operation on non-socket"},
+	{58, "EDESTADDREQ", "destination address required"},
+	{59, "EMSGSIZE", "message too long"},
+	{60, "EPROTOTYPE", "protocol wrong type for socket"},
+	{61, "ENOPROTOOPT", "protocol not available"},
+	{62, "EPROTONOSUPPORT", "protocol not supported"},
+	{63, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{64, "EOPNOTSUPP", "operation not supported on socket"},
+	{65, "EPFNOSUPPORT", "protocol family not supported"},
+	{66, "EAFNOSUPPORT", "addr family not supported by protocol"},
+	{67, "EADDRINUSE", "address already in use"},
+	{68, "EADDRNOTAVAIL", "can't assign requested address"},
+	{69, "ENETDOWN", "network is down"},
+	{70, "ENETUNREACH", "network is unreachable"},
+	{71, "ENETRESET", "network dropped connection on reset"},
+	{72, "ECONNABORTED", "software caused connection abort"},
+	{73, "ECONNRESET", "connection reset by peer"},
+	{74, "ENOBUFS", "no buffer space available"},
+	{75, "EISCONN", "socket is already connected"},
+	{76, "ENOTCONN", "socket is not connected"},
+	{77, "ESHUTDOWN", "can't send after socket shutdown"},
+	{78, "ETIMEDOUT", "connection timed out"},
+	{79, "ECONNREFUSED", "connection refused"},
+	{80, "EHOSTDOWN", "host is down"},
+	{81, "EHOSTUNREACH", "no route to host"},
+	{82, "ERESTART", "restart the system call"},
+	{83, "EPROCLIM", "too many processes"},
+	{84, "EUSERS", "too many users"},
+	{85, "ELOOP", "too many levels of symbolic links"},
+	{86, "ENAMETOOLONG", "file name too long"},
+	{88, "EDQUOT", "disk quota exceeded"},
+	{89, "ECORRUPT", "invalid file system control data detected"},
+	{90, "ESYSERROR", "for future use "},
+	{93, "EREMOTE", "item is not local to host"},
+	{94, "ENOTRECOVERABLE", "state not recoverable "},
+	{95, "EOWNERDEAD", "previous owner died "},
+	{109, "ENOSYS", "function not implemented"},
+	{110, "EMEDIA", "media surface error"},
+	{111, "ESOFT", "I/O completed, but needs relocation"},
+	{112, "ENOATTR", "no attribute found"},
+	{113, "ESAD", "security Authentication Denied"},
+	{114, "ENOTRUST", "not a Trusted Program"},
+	{115, "ETOOMANYREFS", "too many references: can't splice"},
+	{116, "EILSEQ", "invalid wide character"},
+	{117, "ECANCELED", "asynchronous I/O cancelled"},
+	{118, "ENOSR", "out of STREAMS resources"},
+	{119, "ETIME", "system call timed out"},
+	{120, "EBADMSG", "next message has wrong type"},
+	{121, "EPROTO", "error in protocol"},
+	{122, "ENODATA", "no message on stream head read q"},
+	{123, "ENOSTR", "fd not associated with a stream"},
+	{124, "ENOTSUP", "unsupported attribute value"},
+	{125, "EMULTIHOP", "multihop is not allowed"},
+	{126, "ENOLINK", "the server link has been severed"},
+	{127, "EOVERFLOW", "value too large to be stored in data type"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGIOT", "IOT/Abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "stopped (signal)"},
+	{18, "SIGTSTP", "stopped"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible/complete"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{27, "SIGMSG", "input device data"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGPWR", "power-failure"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+	{32, "SIGPROF", "profiling timer expired"},
+	{33, "SIGDANGER", "paging space low"},
+	{34, "SIGVTALRM", "virtual timer expired"},
+	{35, "SIGMIGRATE", "signal 35"},
+	{36, "SIGPRE", "signal 36"},
+	{37, "SIGVIRT", "signal 37"},
+	{38, "SIGTALRM", "signal 38"},
+	{39, "SIGWAITING", "signal 39"},
+	{48, "SIGSYSERROR", "signal 48"},
+	{49, "SIGCAPI", "signal 49"},
+	{58, "SIGRECONFIG", "signal 58"},
+	{59, "SIGCPUFAIL", "CPU Failure Predicted"},
+	{60, "SIGGRANT", "monitor mode granted"},
+	{61, "SIGRETRACT", "monitor mode retracted"},
+	{62, "SIGSOUND", "sound completed"},
+	{63, "SIGMAX32", "secure attention"},
+	{255, "SIGMAX", "signal 255"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_darwin_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_darwin_386.go
new file mode 100644
index 000000000..6f333594b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_darwin_386.go
@@ -0,0 +1,1786 @@
+// mkerrors.sh -m32
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build 386,darwin
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -m32 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                      = 0x10
+	AF_CCITT                          = 0xa
+	AF_CHAOS                          = 0x5
+	AF_CNT                            = 0x15
+	AF_COIP                           = 0x14
+	AF_DATAKIT                        = 0x9
+	AF_DECnet                         = 0xc
+	AF_DLI                            = 0xd
+	AF_E164                           = 0x1c
+	AF_ECMA                           = 0x8
+	AF_HYLINK                         = 0xf
+	AF_IEEE80211                      = 0x25
+	AF_IMPLINK                        = 0x3
+	AF_INET                           = 0x2
+	AF_INET6                          = 0x1e
+	AF_IPX                            = 0x17
+	AF_ISDN                           = 0x1c
+	AF_ISO                            = 0x7
+	AF_LAT                            = 0xe
+	AF_LINK                           = 0x12
+	AF_LOCAL                          = 0x1
+	AF_MAX                            = 0x28
+	AF_NATM                           = 0x1f
+	AF_NDRV                           = 0x1b
+	AF_NETBIOS                        = 0x21
+	AF_NS                             = 0x6
+	AF_OSI                            = 0x7
+	AF_PPP                            = 0x22
+	AF_PUP                            = 0x4
+	AF_RESERVED_36                    = 0x24
+	AF_ROUTE                          = 0x11
+	AF_SIP                            = 0x18
+	AF_SNA                            = 0xb
+	AF_SYSTEM                         = 0x20
+	AF_UNIX                           = 0x1
+	AF_UNSPEC                         = 0x0
+	AF_UTUN                           = 0x26
+	ALTWERASE                         = 0x200
+	ATTR_BIT_MAP_COUNT                = 0x5
+	ATTR_CMN_ACCESSMASK               = 0x20000
+	ATTR_CMN_ACCTIME                  = 0x1000
+	ATTR_CMN_ADDEDTIME                = 0x10000000
+	ATTR_CMN_BKUPTIME                 = 0x2000
+	ATTR_CMN_CHGTIME                  = 0x800
+	ATTR_CMN_CRTIME                   = 0x200
+	ATTR_CMN_DATA_PROTECT_FLAGS       = 0x40000000
+	ATTR_CMN_DEVID                    = 0x2
+	ATTR_CMN_DOCUMENT_ID              = 0x100000
+	ATTR_CMN_ERROR                    = 0x20000000
+	ATTR_CMN_EXTENDED_SECURITY        = 0x400000
+	ATTR_CMN_FILEID                   = 0x2000000
+	ATTR_CMN_FLAGS                    = 0x40000
+	ATTR_CMN_FNDRINFO                 = 0x4000
+	ATTR_CMN_FSID                     = 0x4
+	ATTR_CMN_FULLPATH                 = 0x8000000
+	ATTR_CMN_GEN_COUNT                = 0x80000
+	ATTR_CMN_GRPID                    = 0x10000
+	ATTR_CMN_GRPUUID                  = 0x1000000
+	ATTR_CMN_MODTIME                  = 0x400
+	ATTR_CMN_NAME                     = 0x1
+	ATTR_CMN_NAMEDATTRCOUNT           = 0x80000
+	ATTR_CMN_NAMEDATTRLIST            = 0x100000
+	ATTR_CMN_OBJID                    = 0x20
+	ATTR_CMN_OBJPERMANENTID           = 0x40
+	ATTR_CMN_OBJTAG                   = 0x10
+	ATTR_CMN_OBJTYPE                  = 0x8
+	ATTR_CMN_OWNERID                  = 0x8000
+	ATTR_CMN_PARENTID                 = 0x4000000
+	ATTR_CMN_PAROBJID                 = 0x80
+	ATTR_CMN_RETURNED_ATTRS           = 0x80000000
+	ATTR_CMN_SCRIPT                   = 0x100
+	ATTR_CMN_SETMASK                  = 0x41c7ff00
+	ATTR_CMN_USERACCESS               = 0x200000
+	ATTR_CMN_UUID                     = 0x800000
+	ATTR_CMN_VALIDMASK                = 0xffffffff
+	ATTR_CMN_VOLSETMASK               = 0x6700
+	ATTR_FILE_ALLOCSIZE               = 0x4
+	ATTR_FILE_CLUMPSIZE               = 0x10
+	ATTR_FILE_DATAALLOCSIZE           = 0x400
+	ATTR_FILE_DATAEXTENTS             = 0x800
+	ATTR_FILE_DATALENGTH              = 0x200
+	ATTR_FILE_DEVTYPE                 = 0x20
+	ATTR_FILE_FILETYPE                = 0x40
+	ATTR_FILE_FORKCOUNT               = 0x80
+	ATTR_FILE_FORKLIST                = 0x100
+	ATTR_FILE_IOBLOCKSIZE             = 0x8
+	ATTR_FILE_LINKCOUNT               = 0x1
+	ATTR_FILE_RSRCALLOCSIZE           = 0x2000
+	ATTR_FILE_RSRCEXTENTS             = 0x4000
+	ATTR_FILE_RSRCLENGTH              = 0x1000
+	ATTR_FILE_SETMASK                 = 0x20
+	ATTR_FILE_TOTALSIZE               = 0x2
+	ATTR_FILE_VALIDMASK               = 0x37ff
+	ATTR_VOL_ALLOCATIONCLUMP          = 0x40
+	ATTR_VOL_ATTRIBUTES               = 0x40000000
+	ATTR_VOL_CAPABILITIES             = 0x20000
+	ATTR_VOL_DIRCOUNT                 = 0x400
+	ATTR_VOL_ENCODINGSUSED            = 0x10000
+	ATTR_VOL_FILECOUNT                = 0x200
+	ATTR_VOL_FSTYPE                   = 0x1
+	ATTR_VOL_INFO                     = 0x80000000
+	ATTR_VOL_IOBLOCKSIZE              = 0x80
+	ATTR_VOL_MAXOBJCOUNT              = 0x800
+	ATTR_VOL_MINALLOCATION            = 0x20
+	ATTR_VOL_MOUNTEDDEVICE            = 0x8000
+	ATTR_VOL_MOUNTFLAGS               = 0x4000
+	ATTR_VOL_MOUNTPOINT               = 0x1000
+	ATTR_VOL_NAME                     = 0x2000
+	ATTR_VOL_OBJCOUNT                 = 0x100
+	ATTR_VOL_QUOTA_SIZE               = 0x10000000
+	ATTR_VOL_RESERVED_SIZE            = 0x20000000
+	ATTR_VOL_SETMASK                  = 0x80002000
+	ATTR_VOL_SIGNATURE                = 0x2
+	ATTR_VOL_SIZE                     = 0x4
+	ATTR_VOL_SPACEAVAIL               = 0x10
+	ATTR_VOL_SPACEFREE                = 0x8
+	ATTR_VOL_UUID                     = 0x40000
+	ATTR_VOL_VALIDMASK                = 0xf007ffff
+	B0                                = 0x0
+	B110                              = 0x6e
+	B115200                           = 0x1c200
+	B1200                             = 0x4b0
+	B134                              = 0x86
+	B14400                            = 0x3840
+	B150                              = 0x96
+	B1800                             = 0x708
+	B19200                            = 0x4b00
+	B200                              = 0xc8
+	B230400                           = 0x38400
+	B2400                             = 0x960
+	B28800                            = 0x7080
+	B300                              = 0x12c
+	B38400                            = 0x9600
+	B4800                             = 0x12c0
+	B50                               = 0x32
+	B57600                            = 0xe100
+	B600                              = 0x258
+	B7200                             = 0x1c20
+	B75                               = 0x4b
+	B76800                            = 0x12c00
+	B9600                             = 0x2580
+	BIOCFLUSH                         = 0x20004268
+	BIOCGBLEN                         = 0x40044266
+	BIOCGDLT                          = 0x4004426a
+	BIOCGDLTLIST                      = 0xc00c4279
+	BIOCGETIF                         = 0x4020426b
+	BIOCGHDRCMPLT                     = 0x40044274
+	BIOCGRSIG                         = 0x40044272
+	BIOCGRTIMEOUT                     = 0x4008426e
+	BIOCGSEESENT                      = 0x40044276
+	BIOCGSTATS                        = 0x4008426f
+	BIOCIMMEDIATE                     = 0x80044270
+	BIOCPROMISC                       = 0x20004269
+	BIOCSBLEN                         = 0xc0044266
+	BIOCSDLT                          = 0x80044278
+	BIOCSETF                          = 0x80084267
+	BIOCSETFNR                        = 0x8008427e
+	BIOCSETIF                         = 0x8020426c
+	BIOCSHDRCMPLT                     = 0x80044275
+	BIOCSRSIG                         = 0x80044273
+	BIOCSRTIMEOUT                     = 0x8008426d
+	BIOCSSEESENT                      = 0x80044277
+	BIOCVERSION                       = 0x40044271
+	BPF_A                             = 0x10
+	BPF_ABS                           = 0x20
+	BPF_ADD                           = 0x0
+	BPF_ALIGNMENT                     = 0x4
+	BPF_ALU                           = 0x4
+	BPF_AND                           = 0x50
+	BPF_B                             = 0x10
+	BPF_DIV                           = 0x30
+	BPF_H                             = 0x8
+	BPF_IMM                           = 0x0
+	BPF_IND                           = 0x40
+	BPF_JA                            = 0x0
+	BPF_JEQ                           = 0x10
+	BPF_JGE                           = 0x30
+	BPF_JGT                           = 0x20
+	BPF_JMP                           = 0x5
+	BPF_JSET                          = 0x40
+	BPF_K                             = 0x0
+	BPF_LD                            = 0x0
+	BPF_LDX                           = 0x1
+	BPF_LEN                           = 0x80
+	BPF_LSH                           = 0x60
+	BPF_MAJOR_VERSION                 = 0x1
+	BPF_MAXBUFSIZE                    = 0x80000
+	BPF_MAXINSNS                      = 0x200
+	BPF_MEM                           = 0x60
+	BPF_MEMWORDS                      = 0x10
+	BPF_MINBUFSIZE                    = 0x20
+	BPF_MINOR_VERSION                 = 0x1
+	BPF_MISC                          = 0x7
+	BPF_MSH                           = 0xa0
+	BPF_MUL                           = 0x20
+	BPF_NEG                           = 0x80
+	BPF_OR                            = 0x40
+	BPF_RELEASE                       = 0x30bb6
+	BPF_RET                           = 0x6
+	BPF_RSH                           = 0x70
+	BPF_ST                            = 0x2
+	BPF_STX                           = 0x3
+	BPF_SUB                           = 0x10
+	BPF_TAX                           = 0x0
+	BPF_TXA                           = 0x80
+	BPF_W                             = 0x0
+	BPF_X                             = 0x8
+	BRKINT                            = 0x2
+	BS0                               = 0x0
+	BS1                               = 0x8000
+	BSDLY                             = 0x8000
+	CFLUSH                            = 0xf
+	CLOCAL                            = 0x8000
+	CLOCK_MONOTONIC                   = 0x6
+	CLOCK_MONOTONIC_RAW               = 0x4
+	CLOCK_MONOTONIC_RAW_APPROX        = 0x5
+	CLOCK_PROCESS_CPUTIME_ID          = 0xc
+	CLOCK_REALTIME                    = 0x0
+	CLOCK_THREAD_CPUTIME_ID           = 0x10
+	CLOCK_UPTIME_RAW                  = 0x8
+	CLOCK_UPTIME_RAW_APPROX           = 0x9
+	CLONE_NOFOLLOW                    = 0x1
+	CLONE_NOOWNERCOPY                 = 0x2
+	CR0                               = 0x0
+	CR1                               = 0x1000
+	CR2                               = 0x2000
+	CR3                               = 0x3000
+	CRDLY                             = 0x3000
+	CREAD                             = 0x800
+	CRTSCTS                           = 0x30000
+	CS5                               = 0x0
+	CS6                               = 0x100
+	CS7                               = 0x200
+	CS8                               = 0x300
+	CSIZE                             = 0x300
+	CSTART                            = 0x11
+	CSTATUS                           = 0x14
+	CSTOP                             = 0x13
+	CSTOPB                            = 0x400
+	CSUSP                             = 0x1a
+	CTL_HW                            = 0x6
+	CTL_KERN                          = 0x1
+	CTL_MAXNAME                       = 0xc
+	CTL_NET                           = 0x4
+	DLT_A429                          = 0xb8
+	DLT_A653_ICM                      = 0xb9
+	DLT_AIRONET_HEADER                = 0x78
+	DLT_AOS                           = 0xde
+	DLT_APPLE_IP_OVER_IEEE1394        = 0x8a
+	DLT_ARCNET                        = 0x7
+	DLT_ARCNET_LINUX                  = 0x81
+	DLT_ATM_CLIP                      = 0x13
+	DLT_ATM_RFC1483                   = 0xb
+	DLT_AURORA                        = 0x7e
+	DLT_AX25                          = 0x3
+	DLT_AX25_KISS                     = 0xca
+	DLT_BACNET_MS_TP                  = 0xa5
+	DLT_BLUETOOTH_HCI_H4              = 0xbb
+	DLT_BLUETOOTH_HCI_H4_WITH_PHDR    = 0xc9
+	DLT_CAN20B                        = 0xbe
+	DLT_CAN_SOCKETCAN                 = 0xe3
+	DLT_CHAOS                         = 0x5
+	DLT_CHDLC                         = 0x68
+	DLT_CISCO_IOS                     = 0x76
+	DLT_C_HDLC                        = 0x68
+	DLT_C_HDLC_WITH_DIR               = 0xcd
+	DLT_DBUS                          = 0xe7
+	DLT_DECT                          = 0xdd
+	DLT_DOCSIS                        = 0x8f
+	DLT_DVB_CI                        = 0xeb
+	DLT_ECONET                        = 0x73
+	DLT_EN10MB                        = 0x1
+	DLT_EN3MB                         = 0x2
+	DLT_ENC                           = 0x6d
+	DLT_ERF                           = 0xc5
+	DLT_ERF_ETH                       = 0xaf
+	DLT_ERF_POS                       = 0xb0
+	DLT_FC_2                          = 0xe0
+	DLT_FC_2_WITH_FRAME_DELIMS        = 0xe1
+	DLT_FDDI                          = 0xa
+	DLT_FLEXRAY                       = 0xd2
+	DLT_FRELAY                        = 0x6b
+	DLT_FRELAY_WITH_DIR               = 0xce
+	DLT_GCOM_SERIAL                   = 0xad
+	DLT_GCOM_T1E1                     = 0xac
+	DLT_GPF_F                         = 0xab
+	DLT_GPF_T                         = 0xaa
+	DLT_GPRS_LLC                      = 0xa9
+	DLT_GSMTAP_ABIS                   = 0xda
+	DLT_GSMTAP_UM                     = 0xd9
+	DLT_HHDLC                         = 0x79
+	DLT_IBM_SN                        = 0x92
+	DLT_IBM_SP                        = 0x91
+	DLT_IEEE802                       = 0x6
+	DLT_IEEE802_11                    = 0x69
+	DLT_IEEE802_11_RADIO              = 0x7f
+	DLT_IEEE802_11_RADIO_AVS          = 0xa3
+	DLT_IEEE802_15_4                  = 0xc3
+	DLT_IEEE802_15_4_LINUX            = 0xbf
+	DLT_IEEE802_15_4_NOFCS            = 0xe6
+	DLT_IEEE802_15_4_NONASK_PHY       = 0xd7
+	DLT_IEEE802_16_MAC_CPS            = 0xbc
+	DLT_IEEE802_16_MAC_CPS_RADIO      = 0xc1
+	DLT_IPFILTER                      = 0x74
+	DLT_IPMB                          = 0xc7
+	DLT_IPMB_LINUX                    = 0xd1
+	DLT_IPNET                         = 0xe2
+	DLT_IPOIB                         = 0xf2
+	DLT_IPV4                          = 0xe4
+	DLT_IPV6                          = 0xe5
+	DLT_IP_OVER_FC                    = 0x7a
+	DLT_JUNIPER_ATM1                  = 0x89
+	DLT_JUNIPER_ATM2                  = 0x87
+	DLT_JUNIPER_ATM_CEMIC             = 0xee
+	DLT_JUNIPER_CHDLC                 = 0xb5
+	DLT_JUNIPER_ES                    = 0x84
+	DLT_JUNIPER_ETHER                 = 0xb2
+	DLT_JUNIPER_FIBRECHANNEL          = 0xea
+	DLT_JUNIPER_FRELAY                = 0xb4
+	DLT_JUNIPER_GGSN                  = 0x85
+	DLT_JUNIPER_ISM                   = 0xc2
+	DLT_JUNIPER_MFR                   = 0x86
+	DLT_JUNIPER_MLFR                  = 0x83
+	DLT_JUNIPER_MLPPP                 = 0x82
+	DLT_JUNIPER_MONITOR               = 0xa4
+	DLT_JUNIPER_PIC_PEER              = 0xae
+	DLT_JUNIPER_PPP                   = 0xb3
+	DLT_JUNIPER_PPPOE                 = 0xa7
+	DLT_JUNIPER_PPPOE_ATM             = 0xa8
+	DLT_JUNIPER_SERVICES              = 0x88
+	DLT_JUNIPER_SRX_E2E               = 0xe9
+	DLT_JUNIPER_ST                    = 0xc8
+	DLT_JUNIPER_VP                    = 0xb7
+	DLT_JUNIPER_VS                    = 0xe8
+	DLT_LAPB_WITH_DIR                 = 0xcf
+	DLT_LAPD                          = 0xcb
+	DLT_LIN                           = 0xd4
+	DLT_LINUX_EVDEV                   = 0xd8
+	DLT_LINUX_IRDA                    = 0x90
+	DLT_LINUX_LAPD                    = 0xb1
+	DLT_LINUX_PPP_WITHDIRECTION       = 0xa6
+	DLT_LINUX_SLL                     = 0x71
+	DLT_LOOP                          = 0x6c
+	DLT_LTALK                         = 0x72
+	DLT_MATCHING_MAX                  = 0xf5
+	DLT_MATCHING_MIN                  = 0x68
+	DLT_MFR                           = 0xb6
+	DLT_MOST                          = 0xd3
+	DLT_MPEG_2_TS                     = 0xf3
+	DLT_MPLS                          = 0xdb
+	DLT_MTP2                          = 0x8c
+	DLT_MTP2_WITH_PHDR                = 0x8b
+	DLT_MTP3                          = 0x8d
+	DLT_MUX27010                      = 0xec
+	DLT_NETANALYZER                   = 0xf0
+	DLT_NETANALYZER_TRANSPARENT       = 0xf1
+	DLT_NFC_LLCP                      = 0xf5
+	DLT_NFLOG                         = 0xef
+	DLT_NG40                          = 0xf4
+	DLT_NULL                          = 0x0
+	DLT_PCI_EXP                       = 0x7d
+	DLT_PFLOG                         = 0x75
+	DLT_PFSYNC                        = 0x12
+	DLT_PPI                           = 0xc0
+	DLT_PPP                           = 0x9
+	DLT_PPP_BSDOS                     = 0x10
+	DLT_PPP_ETHER                     = 0x33
+	DLT_PPP_PPPD                      = 0xa6
+	DLT_PPP_SERIAL                    = 0x32
+	DLT_PPP_WITH_DIR                  = 0xcc
+	DLT_PPP_WITH_DIRECTION            = 0xa6
+	DLT_PRISM_HEADER                  = 0x77
+	DLT_PRONET                        = 0x4
+	DLT_RAIF1                         = 0xc6
+	DLT_RAW                           = 0xc
+	DLT_RIO                           = 0x7c
+	DLT_SCCP                          = 0x8e
+	DLT_SITA                          = 0xc4
+	DLT_SLIP                          = 0x8
+	DLT_SLIP_BSDOS                    = 0xf
+	DLT_STANAG_5066_D_PDU             = 0xed
+	DLT_SUNATM                        = 0x7b
+	DLT_SYMANTEC_FIREWALL             = 0x63
+	DLT_TZSP                          = 0x80
+	DLT_USB                           = 0xba
+	DLT_USB_LINUX                     = 0xbd
+	DLT_USB_LINUX_MMAPPED             = 0xdc
+	DLT_USER0                         = 0x93
+	DLT_USER1                         = 0x94
+	DLT_USER10                        = 0x9d
+	DLT_USER11                        = 0x9e
+	DLT_USER12                        = 0x9f
+	DLT_USER13                        = 0xa0
+	DLT_USER14                        = 0xa1
+	DLT_USER15                        = 0xa2
+	DLT_USER2                         = 0x95
+	DLT_USER3                         = 0x96
+	DLT_USER4                         = 0x97
+	DLT_USER5                         = 0x98
+	DLT_USER6                         = 0x99
+	DLT_USER7                         = 0x9a
+	DLT_USER8                         = 0x9b
+	DLT_USER9                         = 0x9c
+	DLT_WIHART                        = 0xdf
+	DLT_X2E_SERIAL                    = 0xd5
+	DLT_X2E_XORAYA                    = 0xd6
+	DT_BLK                            = 0x6
+	DT_CHR                            = 0x2
+	DT_DIR                            = 0x4
+	DT_FIFO                           = 0x1
+	DT_LNK                            = 0xa
+	DT_REG                            = 0x8
+	DT_SOCK                           = 0xc
+	DT_UNKNOWN                        = 0x0
+	DT_WHT                            = 0xe
+	ECHO                              = 0x8
+	ECHOCTL                           = 0x40
+	ECHOE                             = 0x2
+	ECHOK                             = 0x4
+	ECHOKE                            = 0x1
+	ECHONL                            = 0x10
+	ECHOPRT                           = 0x20
+	EVFILT_AIO                        = -0x3
+	EVFILT_EXCEPT                     = -0xf
+	EVFILT_FS                         = -0x9
+	EVFILT_MACHPORT                   = -0x8
+	EVFILT_PROC                       = -0x5
+	EVFILT_READ                       = -0x1
+	EVFILT_SIGNAL                     = -0x6
+	EVFILT_SYSCOUNT                   = 0xf
+	EVFILT_THREADMARKER               = 0xf
+	EVFILT_TIMER                      = -0x7
+	EVFILT_USER                       = -0xa
+	EVFILT_VM                         = -0xc
+	EVFILT_VNODE                      = -0x4
+	EVFILT_WRITE                      = -0x2
+	EV_ADD                            = 0x1
+	EV_CLEAR                          = 0x20
+	EV_DELETE                         = 0x2
+	EV_DISABLE                        = 0x8
+	EV_DISPATCH                       = 0x80
+	EV_DISPATCH2                      = 0x180
+	EV_ENABLE                         = 0x4
+	EV_EOF                            = 0x8000
+	EV_ERROR                          = 0x4000
+	EV_FLAG0                          = 0x1000
+	EV_FLAG1                          = 0x2000
+	EV_ONESHOT                        = 0x10
+	EV_OOBAND                         = 0x2000
+	EV_POLL                           = 0x1000
+	EV_RECEIPT                        = 0x40
+	EV_SYSFLAGS                       = 0xf000
+	EV_UDATA_SPECIFIC                 = 0x100
+	EV_VANISHED                       = 0x200
+	EXTA                              = 0x4b00
+	EXTB                              = 0x9600
+	EXTPROC                           = 0x800
+	FD_CLOEXEC                        = 0x1
+	FD_SETSIZE                        = 0x400
+	FF0                               = 0x0
+	FF1                               = 0x4000
+	FFDLY                             = 0x4000
+	FLUSHO                            = 0x800000
+	FSOPT_ATTR_CMN_EXTENDED           = 0x20
+	FSOPT_NOFOLLOW                    = 0x1
+	FSOPT_NOINMEMUPDATE               = 0x2
+	FSOPT_PACK_INVAL_ATTRS            = 0x8
+	FSOPT_REPORT_FULLSIZE             = 0x4
+	F_ADDFILESIGS                     = 0x3d
+	F_ADDFILESIGS_FOR_DYLD_SIM        = 0x53
+	F_ADDFILESIGS_RETURN              = 0x61
+	F_ADDSIGS                         = 0x3b
+	F_ALLOCATEALL                     = 0x4
+	F_ALLOCATECONTIG                  = 0x2
+	F_BARRIERFSYNC                    = 0x55
+	F_CHECK_LV                        = 0x62
+	F_CHKCLEAN                        = 0x29
+	F_DUPFD                           = 0x0
+	F_DUPFD_CLOEXEC                   = 0x43
+	F_FINDSIGS                        = 0x4e
+	F_FLUSH_DATA                      = 0x28
+	F_FREEZE_FS                       = 0x35
+	F_FULLFSYNC                       = 0x33
+	F_GETCODEDIR                      = 0x48
+	F_GETFD                           = 0x1
+	F_GETFL                           = 0x3
+	F_GETLK                           = 0x7
+	F_GETLKPID                        = 0x42
+	F_GETNOSIGPIPE                    = 0x4a
+	F_GETOWN                          = 0x5
+	F_GETPATH                         = 0x32
+	F_GETPATH_MTMINFO                 = 0x47
+	F_GETPROTECTIONCLASS              = 0x3f
+	F_GETPROTECTIONLEVEL              = 0x4d
+	F_GLOBAL_NOCACHE                  = 0x37
+	F_LOG2PHYS                        = 0x31
+	F_LOG2PHYS_EXT                    = 0x41
+	F_NOCACHE                         = 0x30
+	F_NODIRECT                        = 0x3e
+	F_OK                              = 0x0
+	F_PATHPKG_CHECK                   = 0x34
+	F_PEOFPOSMODE                     = 0x3
+	F_PREALLOCATE                     = 0x2a
+	F_PUNCHHOLE                       = 0x63
+	F_RDADVISE                        = 0x2c
+	F_RDAHEAD                         = 0x2d
+	F_RDLCK                           = 0x1
+	F_SETBACKINGSTORE                 = 0x46
+	F_SETFD                           = 0x2
+	F_SETFL                           = 0x4
+	F_SETLK                           = 0x8
+	F_SETLKW                          = 0x9
+	F_SETLKWTIMEOUT                   = 0xa
+	F_SETNOSIGPIPE                    = 0x49
+	F_SETOWN                          = 0x6
+	F_SETPROTECTIONCLASS              = 0x40
+	F_SETSIZE                         = 0x2b
+	F_SINGLE_WRITER                   = 0x4c
+	F_THAW_FS                         = 0x36
+	F_TRANSCODEKEY                    = 0x4b
+	F_TRIM_ACTIVE_FILE                = 0x64
+	F_UNLCK                           = 0x2
+	F_VOLPOSMODE                      = 0x4
+	F_WRLCK                           = 0x3
+	HUPCL                             = 0x4000
+	HW_MACHINE                        = 0x1
+	ICANON                            = 0x100
+	ICMP6_FILTER                      = 0x12
+	ICRNL                             = 0x100
+	IEXTEN                            = 0x400
+	IFF_ALLMULTI                      = 0x200
+	IFF_ALTPHYS                       = 0x4000
+	IFF_BROADCAST                     = 0x2
+	IFF_DEBUG                         = 0x4
+	IFF_LINK0                         = 0x1000
+	IFF_LINK1                         = 0x2000
+	IFF_LINK2                         = 0x4000
+	IFF_LOOPBACK                      = 0x8
+	IFF_MULTICAST                     = 0x8000
+	IFF_NOARP                         = 0x80
+	IFF_NOTRAILERS                    = 0x20
+	IFF_OACTIVE                       = 0x400
+	IFF_POINTOPOINT                   = 0x10
+	IFF_PROMISC                       = 0x100
+	IFF_RUNNING                       = 0x40
+	IFF_SIMPLEX                       = 0x800
+	IFF_UP                            = 0x1
+	IFNAMSIZ                          = 0x10
+	IFT_1822                          = 0x2
+	IFT_AAL5                          = 0x31
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ATM                           = 0x25
+	IFT_BRIDGE                        = 0xd1
+	IFT_CARP                          = 0xf8
+	IFT_CELLULAR                      = 0xff
+	IFT_CEPT                          = 0x13
+	IFT_DS3                           = 0x1e
+	IFT_ENC                           = 0xf4
+	IFT_EON                           = 0x19
+	IFT_ETHER                         = 0x6
+	IFT_FAITH                         = 0x38
+	IFT_FDDI                          = 0xf
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_GIF                           = 0x37
+	IFT_HDH1822                       = 0x3
+	IFT_HIPPI                         = 0x2f
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IEEE1394                      = 0x90
+	IFT_IEEE8023ADLAG                 = 0x88
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88026                      = 0xa
+	IFT_L2VLAN                        = 0x87
+	IFT_LAPB                          = 0x10
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_NSIP                          = 0x1b
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PDP                           = 0xff
+	IFT_PFLOG                         = 0xf5
+	IFT_PFSYNC                        = 0xf6
+	IFT_PKTAP                         = 0xfe
+	IFT_PPP                           = 0x17
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPVIRTUAL                   = 0x35
+	IFT_PTPSERIAL                     = 0x16
+	IFT_RS232                         = 0x21
+	IFT_SDLC                          = 0x11
+	IFT_SIP                           = 0x1f
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_STARLAN                       = 0xb
+	IFT_STF                           = 0x39
+	IFT_T1                            = 0x12
+	IFT_ULTRA                         = 0x1d
+	IFT_V35                           = 0x2d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+	IGNBRK                            = 0x1
+	IGNCR                             = 0x80
+	IGNPAR                            = 0x4
+	IMAXBEL                           = 0x2000
+	INLCR                             = 0x40
+	INPCK                             = 0x10
+	IN_CLASSA_HOST                    = 0xffffff
+	IN_CLASSA_MAX                     = 0x80
+	IN_CLASSA_NET                     = 0xff000000
+	IN_CLASSA_NSHIFT                  = 0x18
+	IN_CLASSB_HOST                    = 0xffff
+	IN_CLASSB_MAX                     = 0x10000
+	IN_CLASSB_NET                     = 0xffff0000
+	IN_CLASSB_NSHIFT                  = 0x10
+	IN_CLASSC_HOST                    = 0xff
+	IN_CLASSC_NET                     = 0xffffff00
+	IN_CLASSC_NSHIFT                  = 0x8
+	IN_CLASSD_HOST                    = 0xfffffff
+	IN_CLASSD_NET                     = 0xf0000000
+	IN_CLASSD_NSHIFT                  = 0x1c
+	IN_LINKLOCALNETNUM                = 0xa9fe0000
+	IN_LOOPBACKNET                    = 0x7f
+	IPPROTO_3PC                       = 0x22
+	IPPROTO_ADFS                      = 0x44
+	IPPROTO_AH                        = 0x33
+	IPPROTO_AHIP                      = 0x3d
+	IPPROTO_APES                      = 0x63
+	IPPROTO_ARGUS                     = 0xd
+	IPPROTO_AX25                      = 0x5d
+	IPPROTO_BHA                       = 0x31
+	IPPROTO_BLT                       = 0x1e
+	IPPROTO_BRSATMON                  = 0x4c
+	IPPROTO_CFTP                      = 0x3e
+	IPPROTO_CHAOS                     = 0x10
+	IPPROTO_CMTP                      = 0x26
+	IPPROTO_CPHB                      = 0x49
+	IPPROTO_CPNX                      = 0x48
+	IPPROTO_DDP                       = 0x25
+	IPPROTO_DGP                       = 0x56
+	IPPROTO_DIVERT                    = 0xfe
+	IPPROTO_DONE                      = 0x101
+	IPPROTO_DSTOPTS                   = 0x3c
+	IPPROTO_EGP                       = 0x8
+	IPPROTO_EMCON                     = 0xe
+	IPPROTO_ENCAP                     = 0x62
+	IPPROTO_EON                       = 0x50
+	IPPROTO_ESP                       = 0x32
+	IPPROTO_ETHERIP                   = 0x61
+	IPPROTO_FRAGMENT                  = 0x2c
+	IPPROTO_GGP                       = 0x3
+	IPPROTO_GMTP                      = 0x64
+	IPPROTO_GRE                       = 0x2f
+	IPPROTO_HELLO                     = 0x3f
+	IPPROTO_HMP                       = 0x14
+	IPPROTO_HOPOPTS                   = 0x0
+	IPPROTO_ICMP                      = 0x1
+	IPPROTO_ICMPV6                    = 0x3a
+	IPPROTO_IDP                       = 0x16
+	IPPROTO_IDPR                      = 0x23
+	IPPROTO_IDRP                      = 0x2d
+	IPPROTO_IGMP                      = 0x2
+	IPPROTO_IGP                       = 0x55
+	IPPROTO_IGRP                      = 0x58
+	IPPROTO_IL                        = 0x28
+	IPPROTO_INLSP                     = 0x34
+	IPPROTO_INP                       = 0x20
+	IPPROTO_IP                        = 0x0
+	IPPROTO_IPCOMP                    = 0x6c
+	IPPROTO_IPCV                      = 0x47
+	IPPROTO_IPEIP                     = 0x5e
+	IPPROTO_IPIP                      = 0x4
+	IPPROTO_IPPC                      = 0x43
+	IPPROTO_IPV4                      = 0x4
+	IPPROTO_IPV6                      = 0x29
+	IPPROTO_IRTP                      = 0x1c
+	IPPROTO_KRYPTOLAN                 = 0x41
+	IPPROTO_LARP                      = 0x5b
+	IPPROTO_LEAF1                     = 0x19
+	IPPROTO_LEAF2                     = 0x1a
+	IPPROTO_MAX                       = 0x100
+	IPPROTO_MAXID                     = 0x34
+	IPPROTO_MEAS                      = 0x13
+	IPPROTO_MHRP                      = 0x30
+	IPPROTO_MICP                      = 0x5f
+	IPPROTO_MTP                       = 0x5c
+	IPPROTO_MUX                       = 0x12
+	IPPROTO_ND                        = 0x4d
+	IPPROTO_NHRP                      = 0x36
+	IPPROTO_NONE                      = 0x3b
+	IPPROTO_NSP                       = 0x1f
+	IPPROTO_NVPII                     = 0xb
+	IPPROTO_OSPFIGP                   = 0x59
+	IPPROTO_PGM                       = 0x71
+	IPPROTO_PIGP                      = 0x9
+	IPPROTO_PIM                       = 0x67
+	IPPROTO_PRM                       = 0x15
+	IPPROTO_PUP                       = 0xc
+	IPPROTO_PVP                       = 0x4b
+	IPPROTO_RAW                       = 0xff
+	IPPROTO_RCCMON                    = 0xa
+	IPPROTO_RDP                       = 0x1b
+	IPPROTO_ROUTING                   = 0x2b
+	IPPROTO_RSVP                      = 0x2e
+	IPPROTO_RVD                       = 0x42
+	IPPROTO_SATEXPAK                  = 0x40
+	IPPROTO_SATMON                    = 0x45
+	IPPROTO_SCCSP                     = 0x60
+	IPPROTO_SCTP                      = 0x84
+	IPPROTO_SDRP                      = 0x2a
+	IPPROTO_SEP                       = 0x21
+	IPPROTO_SRPC                      = 0x5a
+	IPPROTO_ST                        = 0x7
+	IPPROTO_SVMTP                     = 0x52
+	IPPROTO_SWIPE                     = 0x35
+	IPPROTO_TCF                       = 0x57
+	IPPROTO_TCP                       = 0x6
+	IPPROTO_TP                        = 0x1d
+	IPPROTO_TPXX                      = 0x27
+	IPPROTO_TRUNK1                    = 0x17
+	IPPROTO_TRUNK2                    = 0x18
+	IPPROTO_TTP                       = 0x54
+	IPPROTO_UDP                       = 0x11
+	IPPROTO_VINES                     = 0x53
+	IPPROTO_VISA                      = 0x46
+	IPPROTO_VMTP                      = 0x51
+	IPPROTO_WBEXPAK                   = 0x4f
+	IPPROTO_WBMON                     = 0x4e
+	IPPROTO_WSN                       = 0x4a
+	IPPROTO_XNET                      = 0xf
+	IPPROTO_XTP                       = 0x24
+	IPV6_2292DSTOPTS                  = 0x17
+	IPV6_2292HOPLIMIT                 = 0x14
+	IPV6_2292HOPOPTS                  = 0x16
+	IPV6_2292NEXTHOP                  = 0x15
+	IPV6_2292PKTINFO                  = 0x13
+	IPV6_2292PKTOPTIONS               = 0x19
+	IPV6_2292RTHDR                    = 0x18
+	IPV6_BINDV6ONLY                   = 0x1b
+	IPV6_BOUND_IF                     = 0x7d
+	IPV6_CHECKSUM                     = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS       = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP       = 0x1
+	IPV6_DEFHLIM                      = 0x40
+	IPV6_FAITH                        = 0x1d
+	IPV6_FLOWINFO_MASK                = 0xffffff0f
+	IPV6_FLOWLABEL_MASK               = 0xffff0f00
+	IPV6_FLOW_ECN_MASK                = 0x300
+	IPV6_FRAGTTL                      = 0x3c
+	IPV6_FW_ADD                       = 0x1e
+	IPV6_FW_DEL                       = 0x1f
+	IPV6_FW_FLUSH                     = 0x20
+	IPV6_FW_GET                       = 0x22
+	IPV6_FW_ZERO                      = 0x21
+	IPV6_HLIMDEC                      = 0x1
+	IPV6_IPSEC_POLICY                 = 0x1c
+	IPV6_JOIN_GROUP                   = 0xc
+	IPV6_LEAVE_GROUP                  = 0xd
+	IPV6_MAXHLIM                      = 0xff
+	IPV6_MAXOPTHDR                    = 0x800
+	IPV6_MAXPACKET                    = 0xffff
+	IPV6_MAX_GROUP_SRC_FILTER         = 0x200
+	IPV6_MAX_MEMBERSHIPS              = 0xfff
+	IPV6_MAX_SOCK_SRC_FILTER          = 0x80
+	IPV6_MIN_MEMBERSHIPS              = 0x1f
+	IPV6_MMTU                         = 0x500
+	IPV6_MULTICAST_HOPS               = 0xa
+	IPV6_MULTICAST_IF                 = 0x9
+	IPV6_MULTICAST_LOOP               = 0xb
+	IPV6_PORTRANGE                    = 0xe
+	IPV6_PORTRANGE_DEFAULT            = 0x0
+	IPV6_PORTRANGE_HIGH               = 0x1
+	IPV6_PORTRANGE_LOW                = 0x2
+	IPV6_RECVTCLASS                   = 0x23
+	IPV6_RTHDR_LOOSE                  = 0x0
+	IPV6_RTHDR_STRICT                 = 0x1
+	IPV6_RTHDR_TYPE_0                 = 0x0
+	IPV6_SOCKOPT_RESERVED1            = 0x3
+	IPV6_TCLASS                       = 0x24
+	IPV6_UNICAST_HOPS                 = 0x4
+	IPV6_V6ONLY                       = 0x1b
+	IPV6_VERSION                      = 0x60
+	IPV6_VERSION_MASK                 = 0xf0
+	IP_ADD_MEMBERSHIP                 = 0xc
+	IP_ADD_SOURCE_MEMBERSHIP          = 0x46
+	IP_BLOCK_SOURCE                   = 0x48
+	IP_BOUND_IF                       = 0x19
+	IP_DEFAULT_MULTICAST_LOOP         = 0x1
+	IP_DEFAULT_MULTICAST_TTL          = 0x1
+	IP_DF                             = 0x4000
+	IP_DROP_MEMBERSHIP                = 0xd
+	IP_DROP_SOURCE_MEMBERSHIP         = 0x47
+	IP_DUMMYNET_CONFIGURE             = 0x3c
+	IP_DUMMYNET_DEL                   = 0x3d
+	IP_DUMMYNET_FLUSH                 = 0x3e
+	IP_DUMMYNET_GET                   = 0x40
+	IP_FAITH                          = 0x16
+	IP_FW_ADD                         = 0x28
+	IP_FW_DEL                         = 0x29
+	IP_FW_FLUSH                       = 0x2a
+	IP_FW_GET                         = 0x2c
+	IP_FW_RESETLOG                    = 0x2d
+	IP_FW_ZERO                        = 0x2b
+	IP_HDRINCL                        = 0x2
+	IP_IPSEC_POLICY                   = 0x15
+	IP_MAXPACKET                      = 0xffff
+	IP_MAX_GROUP_SRC_FILTER           = 0x200
+	IP_MAX_MEMBERSHIPS                = 0xfff
+	IP_MAX_SOCK_MUTE_FILTER           = 0x80
+	IP_MAX_SOCK_SRC_FILTER            = 0x80
+	IP_MF                             = 0x2000
+	IP_MIN_MEMBERSHIPS                = 0x1f
+	IP_MSFILTER                       = 0x4a
+	IP_MSS                            = 0x240
+	IP_MULTICAST_IF                   = 0x9
+	IP_MULTICAST_IFINDEX              = 0x42
+	IP_MULTICAST_LOOP                 = 0xb
+	IP_MULTICAST_TTL                  = 0xa
+	IP_MULTICAST_VIF                  = 0xe
+	IP_NAT__XXX                       = 0x37
+	IP_OFFMASK                        = 0x1fff
+	IP_OLD_FW_ADD                     = 0x32
+	IP_OLD_FW_DEL                     = 0x33
+	IP_OLD_FW_FLUSH                   = 0x34
+	IP_OLD_FW_GET                     = 0x36
+	IP_OLD_FW_RESETLOG                = 0x38
+	IP_OLD_FW_ZERO                    = 0x35
+	IP_OPTIONS                        = 0x1
+	IP_PKTINFO                        = 0x1a
+	IP_PORTRANGE                      = 0x13
+	IP_PORTRANGE_DEFAULT              = 0x0
+	IP_PORTRANGE_HIGH                 = 0x1
+	IP_PORTRANGE_LOW                  = 0x2
+	IP_RECVDSTADDR                    = 0x7
+	IP_RECVIF                         = 0x14
+	IP_RECVOPTS                       = 0x5
+	IP_RECVPKTINFO                    = 0x1a
+	IP_RECVRETOPTS                    = 0x6
+	IP_RECVTOS                        = 0x1b
+	IP_RECVTTL                        = 0x18
+	IP_RETOPTS                        = 0x8
+	IP_RF                             = 0x8000
+	IP_RSVP_OFF                       = 0x10
+	IP_RSVP_ON                        = 0xf
+	IP_RSVP_VIF_OFF                   = 0x12
+	IP_RSVP_VIF_ON                    = 0x11
+	IP_STRIPHDR                       = 0x17
+	IP_TOS                            = 0x3
+	IP_TRAFFIC_MGT_BACKGROUND         = 0x41
+	IP_TTL                            = 0x4
+	IP_UNBLOCK_SOURCE                 = 0x49
+	ISIG                              = 0x80
+	ISTRIP                            = 0x20
+	IUTF8                             = 0x4000
+	IXANY                             = 0x800
+	IXOFF                             = 0x400
+	IXON                              = 0x200
+	KERN_HOSTNAME                     = 0xa
+	KERN_OSRELEASE                    = 0x2
+	KERN_OSTYPE                       = 0x1
+	KERN_VERSION                      = 0x4
+	LOCK_EX                           = 0x2
+	LOCK_NB                           = 0x4
+	LOCK_SH                           = 0x1
+	LOCK_UN                           = 0x8
+	MADV_CAN_REUSE                    = 0x9
+	MADV_DONTNEED                     = 0x4
+	MADV_FREE                         = 0x5
+	MADV_FREE_REUSABLE                = 0x7
+	MADV_FREE_REUSE                   = 0x8
+	MADV_NORMAL                       = 0x0
+	MADV_PAGEOUT                      = 0xa
+	MADV_RANDOM                       = 0x1
+	MADV_SEQUENTIAL                   = 0x2
+	MADV_WILLNEED                     = 0x3
+	MADV_ZERO_WIRED_PAGES             = 0x6
+	MAP_ANON                          = 0x1000
+	MAP_ANONYMOUS                     = 0x1000
+	MAP_COPY                          = 0x2
+	MAP_FILE                          = 0x0
+	MAP_FIXED                         = 0x10
+	MAP_HASSEMAPHORE                  = 0x200
+	MAP_JIT                           = 0x800
+	MAP_NOCACHE                       = 0x400
+	MAP_NOEXTEND                      = 0x100
+	MAP_NORESERVE                     = 0x40
+	MAP_PRIVATE                       = 0x2
+	MAP_RENAME                        = 0x20
+	MAP_RESERVED0080                  = 0x80
+	MAP_RESILIENT_CODESIGN            = 0x2000
+	MAP_RESILIENT_MEDIA               = 0x4000
+	MAP_SHARED                        = 0x1
+	MCL_CURRENT                       = 0x1
+	MCL_FUTURE                        = 0x2
+	MNT_ASYNC                         = 0x40
+	MNT_AUTOMOUNTED                   = 0x400000
+	MNT_CMDFLAGS                      = 0xf0000
+	MNT_CPROTECT                      = 0x80
+	MNT_DEFWRITE                      = 0x2000000
+	MNT_DONTBROWSE                    = 0x100000
+	MNT_DOVOLFS                       = 0x8000
+	MNT_DWAIT                         = 0x4
+	MNT_EXPORTED                      = 0x100
+	MNT_FORCE                         = 0x80000
+	MNT_IGNORE_OWNERSHIP              = 0x200000
+	MNT_JOURNALED                     = 0x800000
+	MNT_LOCAL                         = 0x1000
+	MNT_MULTILABEL                    = 0x4000000
+	MNT_NOATIME                       = 0x10000000
+	MNT_NOBLOCK                       = 0x20000
+	MNT_NODEV                         = 0x10
+	MNT_NOEXEC                        = 0x4
+	MNT_NOSUID                        = 0x8
+	MNT_NOUSERXATTR                   = 0x1000000
+	MNT_NOWAIT                        = 0x2
+	MNT_QUARANTINE                    = 0x400
+	MNT_QUOTA                         = 0x2000
+	MNT_RDONLY                        = 0x1
+	MNT_RELOAD                        = 0x40000
+	MNT_ROOTFS                        = 0x4000
+	MNT_SYNCHRONOUS                   = 0x2
+	MNT_UNION                         = 0x20
+	MNT_UNKNOWNPERMISSIONS            = 0x200000
+	MNT_UPDATE                        = 0x10000
+	MNT_VISFLAGMASK                   = 0x17f0f5ff
+	MNT_WAIT                          = 0x1
+	MSG_CTRUNC                        = 0x20
+	MSG_DONTROUTE                     = 0x4
+	MSG_DONTWAIT                      = 0x80
+	MSG_EOF                           = 0x100
+	MSG_EOR                           = 0x8
+	MSG_FLUSH                         = 0x400
+	MSG_HAVEMORE                      = 0x2000
+	MSG_HOLD                          = 0x800
+	MSG_NEEDSA                        = 0x10000
+	MSG_OOB                           = 0x1
+	MSG_PEEK                          = 0x2
+	MSG_RCVMORE                       = 0x4000
+	MSG_SEND                          = 0x1000
+	MSG_TRUNC                         = 0x10
+	MSG_WAITALL                       = 0x40
+	MSG_WAITSTREAM                    = 0x200
+	MS_ASYNC                          = 0x1
+	MS_DEACTIVATE                     = 0x8
+	MS_INVALIDATE                     = 0x2
+	MS_KILLPAGES                      = 0x4
+	MS_SYNC                           = 0x10
+	NAME_MAX                          = 0xff
+	NET_RT_DUMP                       = 0x1
+	NET_RT_DUMP2                      = 0x7
+	NET_RT_FLAGS                      = 0x2
+	NET_RT_IFLIST                     = 0x3
+	NET_RT_IFLIST2                    = 0x6
+	NET_RT_MAXID                      = 0xa
+	NET_RT_STAT                       = 0x4
+	NET_RT_TRASH                      = 0x5
+	NFDBITS                           = 0x20
+	NL0                               = 0x0
+	NL1                               = 0x100
+	NL2                               = 0x200
+	NL3                               = 0x300
+	NLDLY                             = 0x300
+	NOFLSH                            = 0x80000000
+	NOKERNINFO                        = 0x2000000
+	NOTE_ABSOLUTE                     = 0x8
+	NOTE_ATTRIB                       = 0x8
+	NOTE_BACKGROUND                   = 0x40
+	NOTE_CHILD                        = 0x4
+	NOTE_CRITICAL                     = 0x20
+	NOTE_DELETE                       = 0x1
+	NOTE_EXEC                         = 0x20000000
+	NOTE_EXIT                         = 0x80000000
+	NOTE_EXITSTATUS                   = 0x4000000
+	NOTE_EXIT_CSERROR                 = 0x40000
+	NOTE_EXIT_DECRYPTFAIL             = 0x10000
+	NOTE_EXIT_DETAIL                  = 0x2000000
+	NOTE_EXIT_DETAIL_MASK             = 0x70000
+	NOTE_EXIT_MEMORY                  = 0x20000
+	NOTE_EXIT_REPARENTED              = 0x80000
+	NOTE_EXTEND                       = 0x4
+	NOTE_FFAND                        = 0x40000000
+	NOTE_FFCOPY                       = 0xc0000000
+	NOTE_FFCTRLMASK                   = 0xc0000000
+	NOTE_FFLAGSMASK                   = 0xffffff
+	NOTE_FFNOP                        = 0x0
+	NOTE_FFOR                         = 0x80000000
+	NOTE_FORK                         = 0x40000000
+	NOTE_FUNLOCK                      = 0x100
+	NOTE_LEEWAY                       = 0x10
+	NOTE_LINK                         = 0x10
+	NOTE_LOWAT                        = 0x1
+	NOTE_MACH_CONTINUOUS_TIME         = 0x80
+	NOTE_NONE                         = 0x80
+	NOTE_NSECONDS                     = 0x4
+	NOTE_OOB                          = 0x2
+	NOTE_PCTRLMASK                    = -0x100000
+	NOTE_PDATAMASK                    = 0xfffff
+	NOTE_REAP                         = 0x10000000
+	NOTE_RENAME                       = 0x20
+	NOTE_REVOKE                       = 0x40
+	NOTE_SECONDS                      = 0x1
+	NOTE_SIGNAL                       = 0x8000000
+	NOTE_TRACK                        = 0x1
+	NOTE_TRACKERR                     = 0x2
+	NOTE_TRIGGER                      = 0x1000000
+	NOTE_USECONDS                     = 0x2
+	NOTE_VM_ERROR                     = 0x10000000
+	NOTE_VM_PRESSURE                  = 0x80000000
+	NOTE_VM_PRESSURE_SUDDEN_TERMINATE = 0x20000000
+	NOTE_VM_PRESSURE_TERMINATE        = 0x40000000
+	NOTE_WRITE                        = 0x2
+	OCRNL                             = 0x10
+	OFDEL                             = 0x20000
+	OFILL                             = 0x80
+	ONLCR                             = 0x2
+	ONLRET                            = 0x40
+	ONOCR                             = 0x20
+	ONOEOT                            = 0x8
+	OPOST                             = 0x1
+	OXTABS                            = 0x4
+	O_ACCMODE                         = 0x3
+	O_ALERT                           = 0x20000000
+	O_APPEND                          = 0x8
+	O_ASYNC                           = 0x40
+	O_CLOEXEC                         = 0x1000000
+	O_CREAT                           = 0x200
+	O_DIRECTORY                       = 0x100000
+	O_DP_GETRAWENCRYPTED              = 0x1
+	O_DP_GETRAWUNENCRYPTED            = 0x2
+	O_DSYNC                           = 0x400000
+	O_EVTONLY                         = 0x8000
+	O_EXCL                            = 0x800
+	O_EXLOCK                          = 0x20
+	O_FSYNC                           = 0x80
+	O_NDELAY                          = 0x4
+	O_NOCTTY                          = 0x20000
+	O_NOFOLLOW                        = 0x100
+	O_NONBLOCK                        = 0x4
+	O_POPUP                           = 0x80000000
+	O_RDONLY                          = 0x0
+	O_RDWR                            = 0x2
+	O_SHLOCK                          = 0x10
+	O_SYMLINK                         = 0x200000
+	O_SYNC                            = 0x80
+	O_TRUNC                           = 0x400
+	O_WRONLY                          = 0x1
+	PARENB                            = 0x1000
+	PARMRK                            = 0x8
+	PARODD                            = 0x2000
+	PENDIN                            = 0x20000000
+	PRIO_PGRP                         = 0x1
+	PRIO_PROCESS                      = 0x0
+	PRIO_USER                         = 0x2
+	PROT_EXEC                         = 0x4
+	PROT_NONE                         = 0x0
+	PROT_READ                         = 0x1
+	PROT_WRITE                        = 0x2
+	PT_ATTACH                         = 0xa
+	PT_ATTACHEXC                      = 0xe
+	PT_CONTINUE                       = 0x7
+	PT_DENY_ATTACH                    = 0x1f
+	PT_DETACH                         = 0xb
+	PT_FIRSTMACH                      = 0x20
+	PT_FORCEQUOTA                     = 0x1e
+	PT_KILL                           = 0x8
+	PT_READ_D                         = 0x2
+	PT_READ_I                         = 0x1
+	PT_READ_U                         = 0x3
+	PT_SIGEXC                         = 0xc
+	PT_STEP                           = 0x9
+	PT_THUPDATE                       = 0xd
+	PT_TRACE_ME                       = 0x0
+	PT_WRITE_D                        = 0x5
+	PT_WRITE_I                        = 0x4
+	PT_WRITE_U                        = 0x6
+	RLIMIT_AS                         = 0x5
+	RLIMIT_CORE                       = 0x4
+	RLIMIT_CPU                        = 0x0
+	RLIMIT_CPU_USAGE_MONITOR          = 0x2
+	RLIMIT_DATA                       = 0x2
+	RLIMIT_FSIZE                      = 0x1
+	RLIMIT_MEMLOCK                    = 0x6
+	RLIMIT_NOFILE                     = 0x8
+	RLIMIT_NPROC                      = 0x7
+	RLIMIT_RSS                        = 0x5
+	RLIMIT_STACK                      = 0x3
+	RLIM_INFINITY                     = 0x7fffffffffffffff
+	RTAX_AUTHOR                       = 0x6
+	RTAX_BRD                          = 0x7
+	RTAX_DST                          = 0x0
+	RTAX_GATEWAY                      = 0x1
+	RTAX_GENMASK                      = 0x3
+	RTAX_IFA                          = 0x5
+	RTAX_IFP                          = 0x4
+	RTAX_MAX                          = 0x8
+	RTAX_NETMASK                      = 0x2
+	RTA_AUTHOR                        = 0x40
+	RTA_BRD                           = 0x80
+	RTA_DST                           = 0x1
+	RTA_GATEWAY                       = 0x2
+	RTA_GENMASK                       = 0x8
+	RTA_IFA                           = 0x20
+	RTA_IFP                           = 0x10
+	RTA_NETMASK                       = 0x4
+	RTF_BLACKHOLE                     = 0x1000
+	RTF_BROADCAST                     = 0x400000
+	RTF_CLONING                       = 0x100
+	RTF_CONDEMNED                     = 0x2000000
+	RTF_DELCLONE                      = 0x80
+	RTF_DONE                          = 0x40
+	RTF_DYNAMIC                       = 0x10
+	RTF_GATEWAY                       = 0x2
+	RTF_HOST                          = 0x4
+	RTF_IFREF                         = 0x4000000
+	RTF_IFSCOPE                       = 0x1000000
+	RTF_LLINFO                        = 0x400
+	RTF_LOCAL                         = 0x200000
+	RTF_MODIFIED                      = 0x20
+	RTF_MULTICAST                     = 0x800000
+	RTF_NOIFREF                       = 0x2000
+	RTF_PINNED                        = 0x100000
+	RTF_PRCLONING                     = 0x10000
+	RTF_PROTO1                        = 0x8000
+	RTF_PROTO2                        = 0x4000
+	RTF_PROTO3                        = 0x40000
+	RTF_PROXY                         = 0x8000000
+	RTF_REJECT                        = 0x8
+	RTF_ROUTER                        = 0x10000000
+	RTF_STATIC                        = 0x800
+	RTF_UP                            = 0x1
+	RTF_WASCLONED                     = 0x20000
+	RTF_XRESOLVE                      = 0x200
+	RTM_ADD                           = 0x1
+	RTM_CHANGE                        = 0x3
+	RTM_DELADDR                       = 0xd
+	RTM_DELETE                        = 0x2
+	RTM_DELMADDR                      = 0x10
+	RTM_GET                           = 0x4
+	RTM_GET2                          = 0x14
+	RTM_IFINFO                        = 0xe
+	RTM_IFINFO2                       = 0x12
+	RTM_LOCK                          = 0x8
+	RTM_LOSING                        = 0x5
+	RTM_MISS                          = 0x7
+	RTM_NEWADDR                       = 0xc
+	RTM_NEWMADDR                      = 0xf
+	RTM_NEWMADDR2                     = 0x13
+	RTM_OLDADD                        = 0x9
+	RTM_OLDDEL                        = 0xa
+	RTM_REDIRECT                      = 0x6
+	RTM_RESOLVE                       = 0xb
+	RTM_RTTUNIT                       = 0xf4240
+	RTM_VERSION                       = 0x5
+	RTV_EXPIRE                        = 0x4
+	RTV_HOPCOUNT                      = 0x2
+	RTV_MTU                           = 0x1
+	RTV_RPIPE                         = 0x8
+	RTV_RTT                           = 0x40
+	RTV_RTTVAR                        = 0x80
+	RTV_SPIPE                         = 0x10
+	RTV_SSTHRESH                      = 0x20
+	RUSAGE_CHILDREN                   = -0x1
+	RUSAGE_SELF                       = 0x0
+	SCM_CREDS                         = 0x3
+	SCM_RIGHTS                        = 0x1
+	SCM_TIMESTAMP                     = 0x2
+	SCM_TIMESTAMP_MONOTONIC           = 0x4
+	SHUT_RD                           = 0x0
+	SHUT_RDWR                         = 0x2
+	SHUT_WR                           = 0x1
+	SIOCADDMULTI                      = 0x80206931
+	SIOCAIFADDR                       = 0x8040691a
+	SIOCARPIPLL                       = 0xc0206928
+	SIOCATMARK                        = 0x40047307
+	SIOCAUTOADDR                      = 0xc0206926
+	SIOCAUTONETMASK                   = 0x80206927
+	SIOCDELMULTI                      = 0x80206932
+	SIOCDIFADDR                       = 0x80206919
+	SIOCDIFPHYADDR                    = 0x80206941
+	SIOCGDRVSPEC                      = 0xc01c697b
+	SIOCGETVLAN                       = 0xc020697f
+	SIOCGHIWAT                        = 0x40047301
+	SIOCGIFADDR                       = 0xc0206921
+	SIOCGIFALTMTU                     = 0xc0206948
+	SIOCGIFASYNCMAP                   = 0xc020697c
+	SIOCGIFBOND                       = 0xc0206947
+	SIOCGIFBRDADDR                    = 0xc0206923
+	SIOCGIFCAP                        = 0xc020695b
+	SIOCGIFCONF                       = 0xc0086924
+	SIOCGIFDEVMTU                     = 0xc0206944
+	SIOCGIFDSTADDR                    = 0xc0206922
+	SIOCGIFFLAGS                      = 0xc0206911
+	SIOCGIFGENERIC                    = 0xc020693a
+	SIOCGIFKPI                        = 0xc0206987
+	SIOCGIFMAC                        = 0xc0206982
+	SIOCGIFMEDIA                      = 0xc0286938
+	SIOCGIFMETRIC                     = 0xc0206917
+	SIOCGIFMTU                        = 0xc0206933
+	SIOCGIFNETMASK                    = 0xc0206925
+	SIOCGIFPDSTADDR                   = 0xc0206940
+	SIOCGIFPHYS                       = 0xc0206935
+	SIOCGIFPSRCADDR                   = 0xc020693f
+	SIOCGIFSTATUS                     = 0xc331693d
+	SIOCGIFVLAN                       = 0xc020697f
+	SIOCGIFWAKEFLAGS                  = 0xc0206988
+	SIOCGLOWAT                        = 0x40047303
+	SIOCGPGRP                         = 0x40047309
+	SIOCIFCREATE                      = 0xc0206978
+	SIOCIFCREATE2                     = 0xc020697a
+	SIOCIFDESTROY                     = 0x80206979
+	SIOCIFGCLONERS                    = 0xc00c6981
+	SIOCRSLVMULTI                     = 0xc008693b
+	SIOCSDRVSPEC                      = 0x801c697b
+	SIOCSETVLAN                       = 0x8020697e
+	SIOCSHIWAT                        = 0x80047300
+	SIOCSIFADDR                       = 0x8020690c
+	SIOCSIFALTMTU                     = 0x80206945
+	SIOCSIFASYNCMAP                   = 0x8020697d
+	SIOCSIFBOND                       = 0x80206946
+	SIOCSIFBRDADDR                    = 0x80206913
+	SIOCSIFCAP                        = 0x8020695a
+	SIOCSIFDSTADDR                    = 0x8020690e
+	SIOCSIFFLAGS                      = 0x80206910
+	SIOCSIFGENERIC                    = 0x80206939
+	SIOCSIFKPI                        = 0x80206986
+	SIOCSIFLLADDR                     = 0x8020693c
+	SIOCSIFMAC                        = 0x80206983
+	SIOCSIFMEDIA                      = 0xc0206937
+	SIOCSIFMETRIC                     = 0x80206918
+	SIOCSIFMTU                        = 0x80206934
+	SIOCSIFNETMASK                    = 0x80206916
+	SIOCSIFPHYADDR                    = 0x8040693e
+	SIOCSIFPHYS                       = 0x80206936
+	SIOCSIFVLAN                       = 0x8020697e
+	SIOCSLOWAT                        = 0x80047302
+	SIOCSPGRP                         = 0x80047308
+	SOCK_DGRAM                        = 0x2
+	SOCK_MAXADDRLEN                   = 0xff
+	SOCK_RAW                          = 0x3
+	SOCK_RDM                          = 0x4
+	SOCK_SEQPACKET                    = 0x5
+	SOCK_STREAM                       = 0x1
+	SOL_SOCKET                        = 0xffff
+	SOMAXCONN                         = 0x80
+	SO_ACCEPTCONN                     = 0x2
+	SO_BROADCAST                      = 0x20
+	SO_DEBUG                          = 0x1
+	SO_DONTROUTE                      = 0x10
+	SO_DONTTRUNC                      = 0x2000
+	SO_ERROR                          = 0x1007
+	SO_KEEPALIVE                      = 0x8
+	SO_LABEL                          = 0x1010
+	SO_LINGER                         = 0x80
+	SO_LINGER_SEC                     = 0x1080
+	SO_NETSVC_MARKING_LEVEL           = 0x1119
+	SO_NET_SERVICE_TYPE               = 0x1116
+	SO_NKE                            = 0x1021
+	SO_NOADDRERR                      = 0x1023
+	SO_NOSIGPIPE                      = 0x1022
+	SO_NOTIFYCONFLICT                 = 0x1026
+	SO_NP_EXTENSIONS                  = 0x1083
+	SO_NREAD                          = 0x1020
+	SO_NUMRCVPKT                      = 0x1112
+	SO_NWRITE                         = 0x1024
+	SO_OOBINLINE                      = 0x100
+	SO_PEERLABEL                      = 0x1011
+	SO_RANDOMPORT                     = 0x1082
+	SO_RCVBUF                         = 0x1002
+	SO_RCVLOWAT                       = 0x1004
+	SO_RCVTIMEO                       = 0x1006
+	SO_REUSEADDR                      = 0x4
+	SO_REUSEPORT                      = 0x200
+	SO_REUSESHAREUID                  = 0x1025
+	SO_SNDBUF                         = 0x1001
+	SO_SNDLOWAT                       = 0x1003
+	SO_SNDTIMEO                       = 0x1005
+	SO_TIMESTAMP                      = 0x400
+	SO_TIMESTAMP_MONOTONIC            = 0x800
+	SO_TYPE                           = 0x1008
+	SO_UPCALLCLOSEWAIT                = 0x1027
+	SO_USELOOPBACK                    = 0x40
+	SO_WANTMORE                       = 0x4000
+	SO_WANTOOBFLAG                    = 0x8000
+	S_IEXEC                           = 0x40
+	S_IFBLK                           = 0x6000
+	S_IFCHR                           = 0x2000
+	S_IFDIR                           = 0x4000
+	S_IFIFO                           = 0x1000
+	S_IFLNK                           = 0xa000
+	S_IFMT                            = 0xf000
+	S_IFREG                           = 0x8000
+	S_IFSOCK                          = 0xc000
+	S_IFWHT                           = 0xe000
+	S_IREAD                           = 0x100
+	S_IRGRP                           = 0x20
+	S_IROTH                           = 0x4
+	S_IRUSR                           = 0x100
+	S_IRWXG                           = 0x38
+	S_IRWXO                           = 0x7
+	S_IRWXU                           = 0x1c0
+	S_ISGID                           = 0x400
+	S_ISTXT                           = 0x200
+	S_ISUID                           = 0x800
+	S_ISVTX                           = 0x200
+	S_IWGRP                           = 0x10
+	S_IWOTH                           = 0x2
+	S_IWRITE                          = 0x80
+	S_IWUSR                           = 0x80
+	S_IXGRP                           = 0x8
+	S_IXOTH                           = 0x1
+	S_IXUSR                           = 0x40
+	TAB0                              = 0x0
+	TAB1                              = 0x400
+	TAB2                              = 0x800
+	TAB3                              = 0x4
+	TABDLY                            = 0xc04
+	TCIFLUSH                          = 0x1
+	TCIOFF                            = 0x3
+	TCIOFLUSH                         = 0x3
+	TCION                             = 0x4
+	TCOFLUSH                          = 0x2
+	TCOOFF                            = 0x1
+	TCOON                             = 0x2
+	TCP_CONNECTIONTIMEOUT             = 0x20
+	TCP_CONNECTION_INFO               = 0x106
+	TCP_ENABLE_ECN                    = 0x104
+	TCP_FASTOPEN                      = 0x105
+	TCP_KEEPALIVE                     = 0x10
+	TCP_KEEPCNT                       = 0x102
+	TCP_KEEPINTVL                     = 0x101
+	TCP_MAXHLEN                       = 0x3c
+	TCP_MAXOLEN                       = 0x28
+	TCP_MAXSEG                        = 0x2
+	TCP_MAXWIN                        = 0xffff
+	TCP_MAX_SACK                      = 0x4
+	TCP_MAX_WINSHIFT                  = 0xe
+	TCP_MINMSS                        = 0xd8
+	TCP_MSS                           = 0x200
+	TCP_NODELAY                       = 0x1
+	TCP_NOOPT                         = 0x8
+	TCP_NOPUSH                        = 0x4
+	TCP_NOTSENT_LOWAT                 = 0x201
+	TCP_RXT_CONNDROPTIME              = 0x80
+	TCP_RXT_FINDROP                   = 0x100
+	TCP_SENDMOREACKS                  = 0x103
+	TCSAFLUSH                         = 0x2
+	TIOCCBRK                          = 0x2000747a
+	TIOCCDTR                          = 0x20007478
+	TIOCCONS                          = 0x80047462
+	TIOCDCDTIMESTAMP                  = 0x40087458
+	TIOCDRAIN                         = 0x2000745e
+	TIOCDSIMICROCODE                  = 0x20007455
+	TIOCEXCL                          = 0x2000740d
+	TIOCEXT                           = 0x80047460
+	TIOCFLUSH                         = 0x80047410
+	TIOCGDRAINWAIT                    = 0x40047456
+	TIOCGETA                          = 0x402c7413
+	TIOCGETD                          = 0x4004741a
+	TIOCGPGRP                         = 0x40047477
+	TIOCGWINSZ                        = 0x40087468
+	TIOCIXOFF                         = 0x20007480
+	TIOCIXON                          = 0x20007481
+	TIOCMBIC                          = 0x8004746b
+	TIOCMBIS                          = 0x8004746c
+	TIOCMGDTRWAIT                     = 0x4004745a
+	TIOCMGET                          = 0x4004746a
+	TIOCMODG                          = 0x40047403
+	TIOCMODS                          = 0x80047404
+	TIOCMSDTRWAIT                     = 0x8004745b
+	TIOCMSET                          = 0x8004746d
+	TIOCM_CAR                         = 0x40
+	TIOCM_CD                          = 0x40
+	TIOCM_CTS                         = 0x20
+	TIOCM_DSR                         = 0x100
+	TIOCM_DTR                         = 0x2
+	TIOCM_LE                          = 0x1
+	TIOCM_RI                          = 0x80
+	TIOCM_RNG                         = 0x80
+	TIOCM_RTS                         = 0x4
+	TIOCM_SR                          = 0x10
+	TIOCM_ST                          = 0x8
+	TIOCNOTTY                         = 0x20007471
+	TIOCNXCL                          = 0x2000740e
+	TIOCOUTQ                          = 0x40047473
+	TIOCPKT                           = 0x80047470
+	TIOCPKT_DATA                      = 0x0
+	TIOCPKT_DOSTOP                    = 0x20
+	TIOCPKT_FLUSHREAD                 = 0x1
+	TIOCPKT_FLUSHWRITE                = 0x2
+	TIOCPKT_IOCTL                     = 0x40
+	TIOCPKT_NOSTOP                    = 0x10
+	TIOCPKT_START                     = 0x8
+	TIOCPKT_STOP                      = 0x4
+	TIOCPTYGNAME                      = 0x40807453
+	TIOCPTYGRANT                      = 0x20007454
+	TIOCPTYUNLK                       = 0x20007452
+	TIOCREMOTE                        = 0x80047469
+	TIOCSBRK                          = 0x2000747b
+	TIOCSCONS                         = 0x20007463
+	TIOCSCTTY                         = 0x20007461
+	TIOCSDRAINWAIT                    = 0x80047457
+	TIOCSDTR                          = 0x20007479
+	TIOCSETA                          = 0x802c7414
+	TIOCSETAF                         = 0x802c7416
+	TIOCSETAW                         = 0x802c7415
+	TIOCSETD                          = 0x8004741b
+	TIOCSIG                           = 0x2000745f
+	TIOCSPGRP                         = 0x80047476
+	TIOCSTART                         = 0x2000746e
+	TIOCSTAT                          = 0x20007465
+	TIOCSTI                           = 0x80017472
+	TIOCSTOP                          = 0x2000746f
+	TIOCSWINSZ                        = 0x80087467
+	TIOCTIMESTAMP                     = 0x40087459
+	TIOCUCNTL                         = 0x80047466
+	TOSTOP                            = 0x400000
+	VDISCARD                          = 0xf
+	VDSUSP                            = 0xb
+	VEOF                              = 0x0
+	VEOL                              = 0x1
+	VEOL2                             = 0x2
+	VERASE                            = 0x3
+	VINTR                             = 0x8
+	VKILL                             = 0x5
+	VLNEXT                            = 0xe
+	VMIN                              = 0x10
+	VM_LOADAVG                        = 0x2
+	VM_MACHFACTOR                     = 0x4
+	VM_MAXID                          = 0x6
+	VM_METER                          = 0x1
+	VM_SWAPUSAGE                      = 0x5
+	VQUIT                             = 0x9
+	VREPRINT                          = 0x6
+	VSTART                            = 0xc
+	VSTATUS                           = 0x12
+	VSTOP                             = 0xd
+	VSUSP                             = 0xa
+	VT0                               = 0x0
+	VT1                               = 0x10000
+	VTDLY                             = 0x10000
+	VTIME                             = 0x11
+	VWERASE                           = 0x4
+	WCONTINUED                        = 0x10
+	WCOREFLAG                         = 0x80
+	WEXITED                           = 0x4
+	WNOHANG                           = 0x1
+	WNOWAIT                           = 0x20
+	WORDSIZE                          = 0x20
+	WSTOPPED                          = 0x8
+	WUNTRACED                         = 0x2
+	XATTR_CREATE                      = 0x2
+	XATTR_NODEFAULT                   = 0x10
+	XATTR_NOFOLLOW                    = 0x1
+	XATTR_NOSECURITY                  = 0x8
+	XATTR_REPLACE                     = 0x4
+	XATTR_SHOWCOMPRESSION             = 0x20
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADARCH        = syscall.Errno(0x56)
+	EBADEXEC        = syscall.Errno(0x55)
+	EBADF           = syscall.Errno(0x9)
+	EBADMACHO       = syscall.Errno(0x58)
+	EBADMSG         = syscall.Errno(0x5e)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x59)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDEVERR         = syscall.Errno(0x53)
+	EDOM            = syscall.Errno(0x21)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x5a)
+	EILSEQ          = syscall.Errno(0x5c)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x6a)
+	ELOOP           = syscall.Errno(0x3e)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	EMULTIHOP       = syscall.Errno(0x5f)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x5d)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODATA         = syscall.Errno(0x60)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOLINK         = syscall.Errno(0x61)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x5b)
+	ENOPOLICY       = syscall.Errno(0x67)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSR           = syscall.Errno(0x62)
+	ENOSTR          = syscall.Errno(0x63)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTRECOVERABLE = syscall.Errno(0x68)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x2d)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x66)
+	EOVERFLOW       = syscall.Errno(0x54)
+	EOWNERDEAD      = syscall.Errno(0x69)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTO          = syscall.Errno(0x64)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	EPWROFF         = syscall.Errno(0x52)
+	EQFULL          = syscall.Errno(0x6a)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHLIBVERS      = syscall.Errno(0x57)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIME           = syscall.Errno(0x65)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "EAGAIN", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "ENOTSUP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "operation timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disc quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC prog. not avail"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EPWROFF", "device power is off"},
+	{83, "EDEVERR", "device error"},
+	{84, "EOVERFLOW", "value too large to be stored in data type"},
+	{85, "EBADEXEC", "bad executable (or shared library)"},
+	{86, "EBADARCH", "bad CPU type in executable"},
+	{87, "ESHLIBVERS", "shared library version mismatch"},
+	{88, "EBADMACHO", "malformed Mach-o file"},
+	{89, "ECANCELED", "operation canceled"},
+	{90, "EIDRM", "identifier removed"},
+	{91, "ENOMSG", "no message of desired type"},
+	{92, "EILSEQ", "illegal byte sequence"},
+	{93, "ENOATTR", "attribute not found"},
+	{94, "EBADMSG", "bad message"},
+	{95, "EMULTIHOP", "EMULTIHOP (Reserved)"},
+	{96, "ENODATA", "no message available on STREAM"},
+	{97, "ENOLINK", "ENOLINK (Reserved)"},
+	{98, "ENOSR", "no STREAM resources"},
+	{99, "ENOSTR", "not a STREAM"},
+	{100, "EPROTO", "protocol error"},
+	{101, "ETIME", "STREAM ioctl timeout"},
+	{102, "EOPNOTSUPP", "operation not supported on socket"},
+	{103, "ENOPOLICY", "policy not found"},
+	{104, "ENOTRECOVERABLE", "state not recoverable"},
+	{105, "EOWNERDEAD", "previous owner died"},
+	{106, "EQFULL", "interface output queue is full"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGABRT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "suspended (signal)"},
+	{18, "SIGTSTP", "suspended"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_darwin_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_darwin_amd64.go
new file mode 100644
index 000000000..db767eb25
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_darwin_amd64.go
@@ -0,0 +1,1786 @@
+// mkerrors.sh -m64
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,darwin
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -m64 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                      = 0x10
+	AF_CCITT                          = 0xa
+	AF_CHAOS                          = 0x5
+	AF_CNT                            = 0x15
+	AF_COIP                           = 0x14
+	AF_DATAKIT                        = 0x9
+	AF_DECnet                         = 0xc
+	AF_DLI                            = 0xd
+	AF_E164                           = 0x1c
+	AF_ECMA                           = 0x8
+	AF_HYLINK                         = 0xf
+	AF_IEEE80211                      = 0x25
+	AF_IMPLINK                        = 0x3
+	AF_INET                           = 0x2
+	AF_INET6                          = 0x1e
+	AF_IPX                            = 0x17
+	AF_ISDN                           = 0x1c
+	AF_ISO                            = 0x7
+	AF_LAT                            = 0xe
+	AF_LINK                           = 0x12
+	AF_LOCAL                          = 0x1
+	AF_MAX                            = 0x28
+	AF_NATM                           = 0x1f
+	AF_NDRV                           = 0x1b
+	AF_NETBIOS                        = 0x21
+	AF_NS                             = 0x6
+	AF_OSI                            = 0x7
+	AF_PPP                            = 0x22
+	AF_PUP                            = 0x4
+	AF_RESERVED_36                    = 0x24
+	AF_ROUTE                          = 0x11
+	AF_SIP                            = 0x18
+	AF_SNA                            = 0xb
+	AF_SYSTEM                         = 0x20
+	AF_UNIX                           = 0x1
+	AF_UNSPEC                         = 0x0
+	AF_UTUN                           = 0x26
+	ALTWERASE                         = 0x200
+	ATTR_BIT_MAP_COUNT                = 0x5
+	ATTR_CMN_ACCESSMASK               = 0x20000
+	ATTR_CMN_ACCTIME                  = 0x1000
+	ATTR_CMN_ADDEDTIME                = 0x10000000
+	ATTR_CMN_BKUPTIME                 = 0x2000
+	ATTR_CMN_CHGTIME                  = 0x800
+	ATTR_CMN_CRTIME                   = 0x200
+	ATTR_CMN_DATA_PROTECT_FLAGS       = 0x40000000
+	ATTR_CMN_DEVID                    = 0x2
+	ATTR_CMN_DOCUMENT_ID              = 0x100000
+	ATTR_CMN_ERROR                    = 0x20000000
+	ATTR_CMN_EXTENDED_SECURITY        = 0x400000
+	ATTR_CMN_FILEID                   = 0x2000000
+	ATTR_CMN_FLAGS                    = 0x40000
+	ATTR_CMN_FNDRINFO                 = 0x4000
+	ATTR_CMN_FSID                     = 0x4
+	ATTR_CMN_FULLPATH                 = 0x8000000
+	ATTR_CMN_GEN_COUNT                = 0x80000
+	ATTR_CMN_GRPID                    = 0x10000
+	ATTR_CMN_GRPUUID                  = 0x1000000
+	ATTR_CMN_MODTIME                  = 0x400
+	ATTR_CMN_NAME                     = 0x1
+	ATTR_CMN_NAMEDATTRCOUNT           = 0x80000
+	ATTR_CMN_NAMEDATTRLIST            = 0x100000
+	ATTR_CMN_OBJID                    = 0x20
+	ATTR_CMN_OBJPERMANENTID           = 0x40
+	ATTR_CMN_OBJTAG                   = 0x10
+	ATTR_CMN_OBJTYPE                  = 0x8
+	ATTR_CMN_OWNERID                  = 0x8000
+	ATTR_CMN_PARENTID                 = 0x4000000
+	ATTR_CMN_PAROBJID                 = 0x80
+	ATTR_CMN_RETURNED_ATTRS           = 0x80000000
+	ATTR_CMN_SCRIPT                   = 0x100
+	ATTR_CMN_SETMASK                  = 0x41c7ff00
+	ATTR_CMN_USERACCESS               = 0x200000
+	ATTR_CMN_UUID                     = 0x800000
+	ATTR_CMN_VALIDMASK                = 0xffffffff
+	ATTR_CMN_VOLSETMASK               = 0x6700
+	ATTR_FILE_ALLOCSIZE               = 0x4
+	ATTR_FILE_CLUMPSIZE               = 0x10
+	ATTR_FILE_DATAALLOCSIZE           = 0x400
+	ATTR_FILE_DATAEXTENTS             = 0x800
+	ATTR_FILE_DATALENGTH              = 0x200
+	ATTR_FILE_DEVTYPE                 = 0x20
+	ATTR_FILE_FILETYPE                = 0x40
+	ATTR_FILE_FORKCOUNT               = 0x80
+	ATTR_FILE_FORKLIST                = 0x100
+	ATTR_FILE_IOBLOCKSIZE             = 0x8
+	ATTR_FILE_LINKCOUNT               = 0x1
+	ATTR_FILE_RSRCALLOCSIZE           = 0x2000
+	ATTR_FILE_RSRCEXTENTS             = 0x4000
+	ATTR_FILE_RSRCLENGTH              = 0x1000
+	ATTR_FILE_SETMASK                 = 0x20
+	ATTR_FILE_TOTALSIZE               = 0x2
+	ATTR_FILE_VALIDMASK               = 0x37ff
+	ATTR_VOL_ALLOCATIONCLUMP          = 0x40
+	ATTR_VOL_ATTRIBUTES               = 0x40000000
+	ATTR_VOL_CAPABILITIES             = 0x20000
+	ATTR_VOL_DIRCOUNT                 = 0x400
+	ATTR_VOL_ENCODINGSUSED            = 0x10000
+	ATTR_VOL_FILECOUNT                = 0x200
+	ATTR_VOL_FSTYPE                   = 0x1
+	ATTR_VOL_INFO                     = 0x80000000
+	ATTR_VOL_IOBLOCKSIZE              = 0x80
+	ATTR_VOL_MAXOBJCOUNT              = 0x800
+	ATTR_VOL_MINALLOCATION            = 0x20
+	ATTR_VOL_MOUNTEDDEVICE            = 0x8000
+	ATTR_VOL_MOUNTFLAGS               = 0x4000
+	ATTR_VOL_MOUNTPOINT               = 0x1000
+	ATTR_VOL_NAME                     = 0x2000
+	ATTR_VOL_OBJCOUNT                 = 0x100
+	ATTR_VOL_QUOTA_SIZE               = 0x10000000
+	ATTR_VOL_RESERVED_SIZE            = 0x20000000
+	ATTR_VOL_SETMASK                  = 0x80002000
+	ATTR_VOL_SIGNATURE                = 0x2
+	ATTR_VOL_SIZE                     = 0x4
+	ATTR_VOL_SPACEAVAIL               = 0x10
+	ATTR_VOL_SPACEFREE                = 0x8
+	ATTR_VOL_UUID                     = 0x40000
+	ATTR_VOL_VALIDMASK                = 0xf007ffff
+	B0                                = 0x0
+	B110                              = 0x6e
+	B115200                           = 0x1c200
+	B1200                             = 0x4b0
+	B134                              = 0x86
+	B14400                            = 0x3840
+	B150                              = 0x96
+	B1800                             = 0x708
+	B19200                            = 0x4b00
+	B200                              = 0xc8
+	B230400                           = 0x38400
+	B2400                             = 0x960
+	B28800                            = 0x7080
+	B300                              = 0x12c
+	B38400                            = 0x9600
+	B4800                             = 0x12c0
+	B50                               = 0x32
+	B57600                            = 0xe100
+	B600                              = 0x258
+	B7200                             = 0x1c20
+	B75                               = 0x4b
+	B76800                            = 0x12c00
+	B9600                             = 0x2580
+	BIOCFLUSH                         = 0x20004268
+	BIOCGBLEN                         = 0x40044266
+	BIOCGDLT                          = 0x4004426a
+	BIOCGDLTLIST                      = 0xc00c4279
+	BIOCGETIF                         = 0x4020426b
+	BIOCGHDRCMPLT                     = 0x40044274
+	BIOCGRSIG                         = 0x40044272
+	BIOCGRTIMEOUT                     = 0x4010426e
+	BIOCGSEESENT                      = 0x40044276
+	BIOCGSTATS                        = 0x4008426f
+	BIOCIMMEDIATE                     = 0x80044270
+	BIOCPROMISC                       = 0x20004269
+	BIOCSBLEN                         = 0xc0044266
+	BIOCSDLT                          = 0x80044278
+	BIOCSETF                          = 0x80104267
+	BIOCSETFNR                        = 0x8010427e
+	BIOCSETIF                         = 0x8020426c
+	BIOCSHDRCMPLT                     = 0x80044275
+	BIOCSRSIG                         = 0x80044273
+	BIOCSRTIMEOUT                     = 0x8010426d
+	BIOCSSEESENT                      = 0x80044277
+	BIOCVERSION                       = 0x40044271
+	BPF_A                             = 0x10
+	BPF_ABS                           = 0x20
+	BPF_ADD                           = 0x0
+	BPF_ALIGNMENT                     = 0x4
+	BPF_ALU                           = 0x4
+	BPF_AND                           = 0x50
+	BPF_B                             = 0x10
+	BPF_DIV                           = 0x30
+	BPF_H                             = 0x8
+	BPF_IMM                           = 0x0
+	BPF_IND                           = 0x40
+	BPF_JA                            = 0x0
+	BPF_JEQ                           = 0x10
+	BPF_JGE                           = 0x30
+	BPF_JGT                           = 0x20
+	BPF_JMP                           = 0x5
+	BPF_JSET                          = 0x40
+	BPF_K                             = 0x0
+	BPF_LD                            = 0x0
+	BPF_LDX                           = 0x1
+	BPF_LEN                           = 0x80
+	BPF_LSH                           = 0x60
+	BPF_MAJOR_VERSION                 = 0x1
+	BPF_MAXBUFSIZE                    = 0x80000
+	BPF_MAXINSNS                      = 0x200
+	BPF_MEM                           = 0x60
+	BPF_MEMWORDS                      = 0x10
+	BPF_MINBUFSIZE                    = 0x20
+	BPF_MINOR_VERSION                 = 0x1
+	BPF_MISC                          = 0x7
+	BPF_MSH                           = 0xa0
+	BPF_MUL                           = 0x20
+	BPF_NEG                           = 0x80
+	BPF_OR                            = 0x40
+	BPF_RELEASE                       = 0x30bb6
+	BPF_RET                           = 0x6
+	BPF_RSH                           = 0x70
+	BPF_ST                            = 0x2
+	BPF_STX                           = 0x3
+	BPF_SUB                           = 0x10
+	BPF_TAX                           = 0x0
+	BPF_TXA                           = 0x80
+	BPF_W                             = 0x0
+	BPF_X                             = 0x8
+	BRKINT                            = 0x2
+	BS0                               = 0x0
+	BS1                               = 0x8000
+	BSDLY                             = 0x8000
+	CFLUSH                            = 0xf
+	CLOCAL                            = 0x8000
+	CLOCK_MONOTONIC                   = 0x6
+	CLOCK_MONOTONIC_RAW               = 0x4
+	CLOCK_MONOTONIC_RAW_APPROX        = 0x5
+	CLOCK_PROCESS_CPUTIME_ID          = 0xc
+	CLOCK_REALTIME                    = 0x0
+	CLOCK_THREAD_CPUTIME_ID           = 0x10
+	CLOCK_UPTIME_RAW                  = 0x8
+	CLOCK_UPTIME_RAW_APPROX           = 0x9
+	CLONE_NOFOLLOW                    = 0x1
+	CLONE_NOOWNERCOPY                 = 0x2
+	CR0                               = 0x0
+	CR1                               = 0x1000
+	CR2                               = 0x2000
+	CR3                               = 0x3000
+	CRDLY                             = 0x3000
+	CREAD                             = 0x800
+	CRTSCTS                           = 0x30000
+	CS5                               = 0x0
+	CS6                               = 0x100
+	CS7                               = 0x200
+	CS8                               = 0x300
+	CSIZE                             = 0x300
+	CSTART                            = 0x11
+	CSTATUS                           = 0x14
+	CSTOP                             = 0x13
+	CSTOPB                            = 0x400
+	CSUSP                             = 0x1a
+	CTL_HW                            = 0x6
+	CTL_KERN                          = 0x1
+	CTL_MAXNAME                       = 0xc
+	CTL_NET                           = 0x4
+	DLT_A429                          = 0xb8
+	DLT_A653_ICM                      = 0xb9
+	DLT_AIRONET_HEADER                = 0x78
+	DLT_AOS                           = 0xde
+	DLT_APPLE_IP_OVER_IEEE1394        = 0x8a
+	DLT_ARCNET                        = 0x7
+	DLT_ARCNET_LINUX                  = 0x81
+	DLT_ATM_CLIP                      = 0x13
+	DLT_ATM_RFC1483                   = 0xb
+	DLT_AURORA                        = 0x7e
+	DLT_AX25                          = 0x3
+	DLT_AX25_KISS                     = 0xca
+	DLT_BACNET_MS_TP                  = 0xa5
+	DLT_BLUETOOTH_HCI_H4              = 0xbb
+	DLT_BLUETOOTH_HCI_H4_WITH_PHDR    = 0xc9
+	DLT_CAN20B                        = 0xbe
+	DLT_CAN_SOCKETCAN                 = 0xe3
+	DLT_CHAOS                         = 0x5
+	DLT_CHDLC                         = 0x68
+	DLT_CISCO_IOS                     = 0x76
+	DLT_C_HDLC                        = 0x68
+	DLT_C_HDLC_WITH_DIR               = 0xcd
+	DLT_DBUS                          = 0xe7
+	DLT_DECT                          = 0xdd
+	DLT_DOCSIS                        = 0x8f
+	DLT_DVB_CI                        = 0xeb
+	DLT_ECONET                        = 0x73
+	DLT_EN10MB                        = 0x1
+	DLT_EN3MB                         = 0x2
+	DLT_ENC                           = 0x6d
+	DLT_ERF                           = 0xc5
+	DLT_ERF_ETH                       = 0xaf
+	DLT_ERF_POS                       = 0xb0
+	DLT_FC_2                          = 0xe0
+	DLT_FC_2_WITH_FRAME_DELIMS        = 0xe1
+	DLT_FDDI                          = 0xa
+	DLT_FLEXRAY                       = 0xd2
+	DLT_FRELAY                        = 0x6b
+	DLT_FRELAY_WITH_DIR               = 0xce
+	DLT_GCOM_SERIAL                   = 0xad
+	DLT_GCOM_T1E1                     = 0xac
+	DLT_GPF_F                         = 0xab
+	DLT_GPF_T                         = 0xaa
+	DLT_GPRS_LLC                      = 0xa9
+	DLT_GSMTAP_ABIS                   = 0xda
+	DLT_GSMTAP_UM                     = 0xd9
+	DLT_HHDLC                         = 0x79
+	DLT_IBM_SN                        = 0x92
+	DLT_IBM_SP                        = 0x91
+	DLT_IEEE802                       = 0x6
+	DLT_IEEE802_11                    = 0x69
+	DLT_IEEE802_11_RADIO              = 0x7f
+	DLT_IEEE802_11_RADIO_AVS          = 0xa3
+	DLT_IEEE802_15_4                  = 0xc3
+	DLT_IEEE802_15_4_LINUX            = 0xbf
+	DLT_IEEE802_15_4_NOFCS            = 0xe6
+	DLT_IEEE802_15_4_NONASK_PHY       = 0xd7
+	DLT_IEEE802_16_MAC_CPS            = 0xbc
+	DLT_IEEE802_16_MAC_CPS_RADIO      = 0xc1
+	DLT_IPFILTER                      = 0x74
+	DLT_IPMB                          = 0xc7
+	DLT_IPMB_LINUX                    = 0xd1
+	DLT_IPNET                         = 0xe2
+	DLT_IPOIB                         = 0xf2
+	DLT_IPV4                          = 0xe4
+	DLT_IPV6                          = 0xe5
+	DLT_IP_OVER_FC                    = 0x7a
+	DLT_JUNIPER_ATM1                  = 0x89
+	DLT_JUNIPER_ATM2                  = 0x87
+	DLT_JUNIPER_ATM_CEMIC             = 0xee
+	DLT_JUNIPER_CHDLC                 = 0xb5
+	DLT_JUNIPER_ES                    = 0x84
+	DLT_JUNIPER_ETHER                 = 0xb2
+	DLT_JUNIPER_FIBRECHANNEL          = 0xea
+	DLT_JUNIPER_FRELAY                = 0xb4
+	DLT_JUNIPER_GGSN                  = 0x85
+	DLT_JUNIPER_ISM                   = 0xc2
+	DLT_JUNIPER_MFR                   = 0x86
+	DLT_JUNIPER_MLFR                  = 0x83
+	DLT_JUNIPER_MLPPP                 = 0x82
+	DLT_JUNIPER_MONITOR               = 0xa4
+	DLT_JUNIPER_PIC_PEER              = 0xae
+	DLT_JUNIPER_PPP                   = 0xb3
+	DLT_JUNIPER_PPPOE                 = 0xa7
+	DLT_JUNIPER_PPPOE_ATM             = 0xa8
+	DLT_JUNIPER_SERVICES              = 0x88
+	DLT_JUNIPER_SRX_E2E               = 0xe9
+	DLT_JUNIPER_ST                    = 0xc8
+	DLT_JUNIPER_VP                    = 0xb7
+	DLT_JUNIPER_VS                    = 0xe8
+	DLT_LAPB_WITH_DIR                 = 0xcf
+	DLT_LAPD                          = 0xcb
+	DLT_LIN                           = 0xd4
+	DLT_LINUX_EVDEV                   = 0xd8
+	DLT_LINUX_IRDA                    = 0x90
+	DLT_LINUX_LAPD                    = 0xb1
+	DLT_LINUX_PPP_WITHDIRECTION       = 0xa6
+	DLT_LINUX_SLL                     = 0x71
+	DLT_LOOP                          = 0x6c
+	DLT_LTALK                         = 0x72
+	DLT_MATCHING_MAX                  = 0xf5
+	DLT_MATCHING_MIN                  = 0x68
+	DLT_MFR                           = 0xb6
+	DLT_MOST                          = 0xd3
+	DLT_MPEG_2_TS                     = 0xf3
+	DLT_MPLS                          = 0xdb
+	DLT_MTP2                          = 0x8c
+	DLT_MTP2_WITH_PHDR                = 0x8b
+	DLT_MTP3                          = 0x8d
+	DLT_MUX27010                      = 0xec
+	DLT_NETANALYZER                   = 0xf0
+	DLT_NETANALYZER_TRANSPARENT       = 0xf1
+	DLT_NFC_LLCP                      = 0xf5
+	DLT_NFLOG                         = 0xef
+	DLT_NG40                          = 0xf4
+	DLT_NULL                          = 0x0
+	DLT_PCI_EXP                       = 0x7d
+	DLT_PFLOG                         = 0x75
+	DLT_PFSYNC                        = 0x12
+	DLT_PPI                           = 0xc0
+	DLT_PPP                           = 0x9
+	DLT_PPP_BSDOS                     = 0x10
+	DLT_PPP_ETHER                     = 0x33
+	DLT_PPP_PPPD                      = 0xa6
+	DLT_PPP_SERIAL                    = 0x32
+	DLT_PPP_WITH_DIR                  = 0xcc
+	DLT_PPP_WITH_DIRECTION            = 0xa6
+	DLT_PRISM_HEADER                  = 0x77
+	DLT_PRONET                        = 0x4
+	DLT_RAIF1                         = 0xc6
+	DLT_RAW                           = 0xc
+	DLT_RIO                           = 0x7c
+	DLT_SCCP                          = 0x8e
+	DLT_SITA                          = 0xc4
+	DLT_SLIP                          = 0x8
+	DLT_SLIP_BSDOS                    = 0xf
+	DLT_STANAG_5066_D_PDU             = 0xed
+	DLT_SUNATM                        = 0x7b
+	DLT_SYMANTEC_FIREWALL             = 0x63
+	DLT_TZSP                          = 0x80
+	DLT_USB                           = 0xba
+	DLT_USB_LINUX                     = 0xbd
+	DLT_USB_LINUX_MMAPPED             = 0xdc
+	DLT_USER0                         = 0x93
+	DLT_USER1                         = 0x94
+	DLT_USER10                        = 0x9d
+	DLT_USER11                        = 0x9e
+	DLT_USER12                        = 0x9f
+	DLT_USER13                        = 0xa0
+	DLT_USER14                        = 0xa1
+	DLT_USER15                        = 0xa2
+	DLT_USER2                         = 0x95
+	DLT_USER3                         = 0x96
+	DLT_USER4                         = 0x97
+	DLT_USER5                         = 0x98
+	DLT_USER6                         = 0x99
+	DLT_USER7                         = 0x9a
+	DLT_USER8                         = 0x9b
+	DLT_USER9                         = 0x9c
+	DLT_WIHART                        = 0xdf
+	DLT_X2E_SERIAL                    = 0xd5
+	DLT_X2E_XORAYA                    = 0xd6
+	DT_BLK                            = 0x6
+	DT_CHR                            = 0x2
+	DT_DIR                            = 0x4
+	DT_FIFO                           = 0x1
+	DT_LNK                            = 0xa
+	DT_REG                            = 0x8
+	DT_SOCK                           = 0xc
+	DT_UNKNOWN                        = 0x0
+	DT_WHT                            = 0xe
+	ECHO                              = 0x8
+	ECHOCTL                           = 0x40
+	ECHOE                             = 0x2
+	ECHOK                             = 0x4
+	ECHOKE                            = 0x1
+	ECHONL                            = 0x10
+	ECHOPRT                           = 0x20
+	EVFILT_AIO                        = -0x3
+	EVFILT_EXCEPT                     = -0xf
+	EVFILT_FS                         = -0x9
+	EVFILT_MACHPORT                   = -0x8
+	EVFILT_PROC                       = -0x5
+	EVFILT_READ                       = -0x1
+	EVFILT_SIGNAL                     = -0x6
+	EVFILT_SYSCOUNT                   = 0xf
+	EVFILT_THREADMARKER               = 0xf
+	EVFILT_TIMER                      = -0x7
+	EVFILT_USER                       = -0xa
+	EVFILT_VM                         = -0xc
+	EVFILT_VNODE                      = -0x4
+	EVFILT_WRITE                      = -0x2
+	EV_ADD                            = 0x1
+	EV_CLEAR                          = 0x20
+	EV_DELETE                         = 0x2
+	EV_DISABLE                        = 0x8
+	EV_DISPATCH                       = 0x80
+	EV_DISPATCH2                      = 0x180
+	EV_ENABLE                         = 0x4
+	EV_EOF                            = 0x8000
+	EV_ERROR                          = 0x4000
+	EV_FLAG0                          = 0x1000
+	EV_FLAG1                          = 0x2000
+	EV_ONESHOT                        = 0x10
+	EV_OOBAND                         = 0x2000
+	EV_POLL                           = 0x1000
+	EV_RECEIPT                        = 0x40
+	EV_SYSFLAGS                       = 0xf000
+	EV_UDATA_SPECIFIC                 = 0x100
+	EV_VANISHED                       = 0x200
+	EXTA                              = 0x4b00
+	EXTB                              = 0x9600
+	EXTPROC                           = 0x800
+	FD_CLOEXEC                        = 0x1
+	FD_SETSIZE                        = 0x400
+	FF0                               = 0x0
+	FF1                               = 0x4000
+	FFDLY                             = 0x4000
+	FLUSHO                            = 0x800000
+	FSOPT_ATTR_CMN_EXTENDED           = 0x20
+	FSOPT_NOFOLLOW                    = 0x1
+	FSOPT_NOINMEMUPDATE               = 0x2
+	FSOPT_PACK_INVAL_ATTRS            = 0x8
+	FSOPT_REPORT_FULLSIZE             = 0x4
+	F_ADDFILESIGS                     = 0x3d
+	F_ADDFILESIGS_FOR_DYLD_SIM        = 0x53
+	F_ADDFILESIGS_RETURN              = 0x61
+	F_ADDSIGS                         = 0x3b
+	F_ALLOCATEALL                     = 0x4
+	F_ALLOCATECONTIG                  = 0x2
+	F_BARRIERFSYNC                    = 0x55
+	F_CHECK_LV                        = 0x62
+	F_CHKCLEAN                        = 0x29
+	F_DUPFD                           = 0x0
+	F_DUPFD_CLOEXEC                   = 0x43
+	F_FINDSIGS                        = 0x4e
+	F_FLUSH_DATA                      = 0x28
+	F_FREEZE_FS                       = 0x35
+	F_FULLFSYNC                       = 0x33
+	F_GETCODEDIR                      = 0x48
+	F_GETFD                           = 0x1
+	F_GETFL                           = 0x3
+	F_GETLK                           = 0x7
+	F_GETLKPID                        = 0x42
+	F_GETNOSIGPIPE                    = 0x4a
+	F_GETOWN                          = 0x5
+	F_GETPATH                         = 0x32
+	F_GETPATH_MTMINFO                 = 0x47
+	F_GETPROTECTIONCLASS              = 0x3f
+	F_GETPROTECTIONLEVEL              = 0x4d
+	F_GLOBAL_NOCACHE                  = 0x37
+	F_LOG2PHYS                        = 0x31
+	F_LOG2PHYS_EXT                    = 0x41
+	F_NOCACHE                         = 0x30
+	F_NODIRECT                        = 0x3e
+	F_OK                              = 0x0
+	F_PATHPKG_CHECK                   = 0x34
+	F_PEOFPOSMODE                     = 0x3
+	F_PREALLOCATE                     = 0x2a
+	F_PUNCHHOLE                       = 0x63
+	F_RDADVISE                        = 0x2c
+	F_RDAHEAD                         = 0x2d
+	F_RDLCK                           = 0x1
+	F_SETBACKINGSTORE                 = 0x46
+	F_SETFD                           = 0x2
+	F_SETFL                           = 0x4
+	F_SETLK                           = 0x8
+	F_SETLKW                          = 0x9
+	F_SETLKWTIMEOUT                   = 0xa
+	F_SETNOSIGPIPE                    = 0x49
+	F_SETOWN                          = 0x6
+	F_SETPROTECTIONCLASS              = 0x40
+	F_SETSIZE                         = 0x2b
+	F_SINGLE_WRITER                   = 0x4c
+	F_THAW_FS                         = 0x36
+	F_TRANSCODEKEY                    = 0x4b
+	F_TRIM_ACTIVE_FILE                = 0x64
+	F_UNLCK                           = 0x2
+	F_VOLPOSMODE                      = 0x4
+	F_WRLCK                           = 0x3
+	HUPCL                             = 0x4000
+	HW_MACHINE                        = 0x1
+	ICANON                            = 0x100
+	ICMP6_FILTER                      = 0x12
+	ICRNL                             = 0x100
+	IEXTEN                            = 0x400
+	IFF_ALLMULTI                      = 0x200
+	IFF_ALTPHYS                       = 0x4000
+	IFF_BROADCAST                     = 0x2
+	IFF_DEBUG                         = 0x4
+	IFF_LINK0                         = 0x1000
+	IFF_LINK1                         = 0x2000
+	IFF_LINK2                         = 0x4000
+	IFF_LOOPBACK                      = 0x8
+	IFF_MULTICAST                     = 0x8000
+	IFF_NOARP                         = 0x80
+	IFF_NOTRAILERS                    = 0x20
+	IFF_OACTIVE                       = 0x400
+	IFF_POINTOPOINT                   = 0x10
+	IFF_PROMISC                       = 0x100
+	IFF_RUNNING                       = 0x40
+	IFF_SIMPLEX                       = 0x800
+	IFF_UP                            = 0x1
+	IFNAMSIZ                          = 0x10
+	IFT_1822                          = 0x2
+	IFT_AAL5                          = 0x31
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ATM                           = 0x25
+	IFT_BRIDGE                        = 0xd1
+	IFT_CARP                          = 0xf8
+	IFT_CELLULAR                      = 0xff
+	IFT_CEPT                          = 0x13
+	IFT_DS3                           = 0x1e
+	IFT_ENC                           = 0xf4
+	IFT_EON                           = 0x19
+	IFT_ETHER                         = 0x6
+	IFT_FAITH                         = 0x38
+	IFT_FDDI                          = 0xf
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_GIF                           = 0x37
+	IFT_HDH1822                       = 0x3
+	IFT_HIPPI                         = 0x2f
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IEEE1394                      = 0x90
+	IFT_IEEE8023ADLAG                 = 0x88
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88026                      = 0xa
+	IFT_L2VLAN                        = 0x87
+	IFT_LAPB                          = 0x10
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_NSIP                          = 0x1b
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PDP                           = 0xff
+	IFT_PFLOG                         = 0xf5
+	IFT_PFSYNC                        = 0xf6
+	IFT_PKTAP                         = 0xfe
+	IFT_PPP                           = 0x17
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPVIRTUAL                   = 0x35
+	IFT_PTPSERIAL                     = 0x16
+	IFT_RS232                         = 0x21
+	IFT_SDLC                          = 0x11
+	IFT_SIP                           = 0x1f
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_STARLAN                       = 0xb
+	IFT_STF                           = 0x39
+	IFT_T1                            = 0x12
+	IFT_ULTRA                         = 0x1d
+	IFT_V35                           = 0x2d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+	IGNBRK                            = 0x1
+	IGNCR                             = 0x80
+	IGNPAR                            = 0x4
+	IMAXBEL                           = 0x2000
+	INLCR                             = 0x40
+	INPCK                             = 0x10
+	IN_CLASSA_HOST                    = 0xffffff
+	IN_CLASSA_MAX                     = 0x80
+	IN_CLASSA_NET                     = 0xff000000
+	IN_CLASSA_NSHIFT                  = 0x18
+	IN_CLASSB_HOST                    = 0xffff
+	IN_CLASSB_MAX                     = 0x10000
+	IN_CLASSB_NET                     = 0xffff0000
+	IN_CLASSB_NSHIFT                  = 0x10
+	IN_CLASSC_HOST                    = 0xff
+	IN_CLASSC_NET                     = 0xffffff00
+	IN_CLASSC_NSHIFT                  = 0x8
+	IN_CLASSD_HOST                    = 0xfffffff
+	IN_CLASSD_NET                     = 0xf0000000
+	IN_CLASSD_NSHIFT                  = 0x1c
+	IN_LINKLOCALNETNUM                = 0xa9fe0000
+	IN_LOOPBACKNET                    = 0x7f
+	IPPROTO_3PC                       = 0x22
+	IPPROTO_ADFS                      = 0x44
+	IPPROTO_AH                        = 0x33
+	IPPROTO_AHIP                      = 0x3d
+	IPPROTO_APES                      = 0x63
+	IPPROTO_ARGUS                     = 0xd
+	IPPROTO_AX25                      = 0x5d
+	IPPROTO_BHA                       = 0x31
+	IPPROTO_BLT                       = 0x1e
+	IPPROTO_BRSATMON                  = 0x4c
+	IPPROTO_CFTP                      = 0x3e
+	IPPROTO_CHAOS                     = 0x10
+	IPPROTO_CMTP                      = 0x26
+	IPPROTO_CPHB                      = 0x49
+	IPPROTO_CPNX                      = 0x48
+	IPPROTO_DDP                       = 0x25
+	IPPROTO_DGP                       = 0x56
+	IPPROTO_DIVERT                    = 0xfe
+	IPPROTO_DONE                      = 0x101
+	IPPROTO_DSTOPTS                   = 0x3c
+	IPPROTO_EGP                       = 0x8
+	IPPROTO_EMCON                     = 0xe
+	IPPROTO_ENCAP                     = 0x62
+	IPPROTO_EON                       = 0x50
+	IPPROTO_ESP                       = 0x32
+	IPPROTO_ETHERIP                   = 0x61
+	IPPROTO_FRAGMENT                  = 0x2c
+	IPPROTO_GGP                       = 0x3
+	IPPROTO_GMTP                      = 0x64
+	IPPROTO_GRE                       = 0x2f
+	IPPROTO_HELLO                     = 0x3f
+	IPPROTO_HMP                       = 0x14
+	IPPROTO_HOPOPTS                   = 0x0
+	IPPROTO_ICMP                      = 0x1
+	IPPROTO_ICMPV6                    = 0x3a
+	IPPROTO_IDP                       = 0x16
+	IPPROTO_IDPR                      = 0x23
+	IPPROTO_IDRP                      = 0x2d
+	IPPROTO_IGMP                      = 0x2
+	IPPROTO_IGP                       = 0x55
+	IPPROTO_IGRP                      = 0x58
+	IPPROTO_IL                        = 0x28
+	IPPROTO_INLSP                     = 0x34
+	IPPROTO_INP                       = 0x20
+	IPPROTO_IP                        = 0x0
+	IPPROTO_IPCOMP                    = 0x6c
+	IPPROTO_IPCV                      = 0x47
+	IPPROTO_IPEIP                     = 0x5e
+	IPPROTO_IPIP                      = 0x4
+	IPPROTO_IPPC                      = 0x43
+	IPPROTO_IPV4                      = 0x4
+	IPPROTO_IPV6                      = 0x29
+	IPPROTO_IRTP                      = 0x1c
+	IPPROTO_KRYPTOLAN                 = 0x41
+	IPPROTO_LARP                      = 0x5b
+	IPPROTO_LEAF1                     = 0x19
+	IPPROTO_LEAF2                     = 0x1a
+	IPPROTO_MAX                       = 0x100
+	IPPROTO_MAXID                     = 0x34
+	IPPROTO_MEAS                      = 0x13
+	IPPROTO_MHRP                      = 0x30
+	IPPROTO_MICP                      = 0x5f
+	IPPROTO_MTP                       = 0x5c
+	IPPROTO_MUX                       = 0x12
+	IPPROTO_ND                        = 0x4d
+	IPPROTO_NHRP                      = 0x36
+	IPPROTO_NONE                      = 0x3b
+	IPPROTO_NSP                       = 0x1f
+	IPPROTO_NVPII                     = 0xb
+	IPPROTO_OSPFIGP                   = 0x59
+	IPPROTO_PGM                       = 0x71
+	IPPROTO_PIGP                      = 0x9
+	IPPROTO_PIM                       = 0x67
+	IPPROTO_PRM                       = 0x15
+	IPPROTO_PUP                       = 0xc
+	IPPROTO_PVP                       = 0x4b
+	IPPROTO_RAW                       = 0xff
+	IPPROTO_RCCMON                    = 0xa
+	IPPROTO_RDP                       = 0x1b
+	IPPROTO_ROUTING                   = 0x2b
+	IPPROTO_RSVP                      = 0x2e
+	IPPROTO_RVD                       = 0x42
+	IPPROTO_SATEXPAK                  = 0x40
+	IPPROTO_SATMON                    = 0x45
+	IPPROTO_SCCSP                     = 0x60
+	IPPROTO_SCTP                      = 0x84
+	IPPROTO_SDRP                      = 0x2a
+	IPPROTO_SEP                       = 0x21
+	IPPROTO_SRPC                      = 0x5a
+	IPPROTO_ST                        = 0x7
+	IPPROTO_SVMTP                     = 0x52
+	IPPROTO_SWIPE                     = 0x35
+	IPPROTO_TCF                       = 0x57
+	IPPROTO_TCP                       = 0x6
+	IPPROTO_TP                        = 0x1d
+	IPPROTO_TPXX                      = 0x27
+	IPPROTO_TRUNK1                    = 0x17
+	IPPROTO_TRUNK2                    = 0x18
+	IPPROTO_TTP                       = 0x54
+	IPPROTO_UDP                       = 0x11
+	IPPROTO_VINES                     = 0x53
+	IPPROTO_VISA                      = 0x46
+	IPPROTO_VMTP                      = 0x51
+	IPPROTO_WBEXPAK                   = 0x4f
+	IPPROTO_WBMON                     = 0x4e
+	IPPROTO_WSN                       = 0x4a
+	IPPROTO_XNET                      = 0xf
+	IPPROTO_XTP                       = 0x24
+	IPV6_2292DSTOPTS                  = 0x17
+	IPV6_2292HOPLIMIT                 = 0x14
+	IPV6_2292HOPOPTS                  = 0x16
+	IPV6_2292NEXTHOP                  = 0x15
+	IPV6_2292PKTINFO                  = 0x13
+	IPV6_2292PKTOPTIONS               = 0x19
+	IPV6_2292RTHDR                    = 0x18
+	IPV6_BINDV6ONLY                   = 0x1b
+	IPV6_BOUND_IF                     = 0x7d
+	IPV6_CHECKSUM                     = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS       = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP       = 0x1
+	IPV6_DEFHLIM                      = 0x40
+	IPV6_FAITH                        = 0x1d
+	IPV6_FLOWINFO_MASK                = 0xffffff0f
+	IPV6_FLOWLABEL_MASK               = 0xffff0f00
+	IPV6_FLOW_ECN_MASK                = 0x300
+	IPV6_FRAGTTL                      = 0x3c
+	IPV6_FW_ADD                       = 0x1e
+	IPV6_FW_DEL                       = 0x1f
+	IPV6_FW_FLUSH                     = 0x20
+	IPV6_FW_GET                       = 0x22
+	IPV6_FW_ZERO                      = 0x21
+	IPV6_HLIMDEC                      = 0x1
+	IPV6_IPSEC_POLICY                 = 0x1c
+	IPV6_JOIN_GROUP                   = 0xc
+	IPV6_LEAVE_GROUP                  = 0xd
+	IPV6_MAXHLIM                      = 0xff
+	IPV6_MAXOPTHDR                    = 0x800
+	IPV6_MAXPACKET                    = 0xffff
+	IPV6_MAX_GROUP_SRC_FILTER         = 0x200
+	IPV6_MAX_MEMBERSHIPS              = 0xfff
+	IPV6_MAX_SOCK_SRC_FILTER          = 0x80
+	IPV6_MIN_MEMBERSHIPS              = 0x1f
+	IPV6_MMTU                         = 0x500
+	IPV6_MULTICAST_HOPS               = 0xa
+	IPV6_MULTICAST_IF                 = 0x9
+	IPV6_MULTICAST_LOOP               = 0xb
+	IPV6_PORTRANGE                    = 0xe
+	IPV6_PORTRANGE_DEFAULT            = 0x0
+	IPV6_PORTRANGE_HIGH               = 0x1
+	IPV6_PORTRANGE_LOW                = 0x2
+	IPV6_RECVTCLASS                   = 0x23
+	IPV6_RTHDR_LOOSE                  = 0x0
+	IPV6_RTHDR_STRICT                 = 0x1
+	IPV6_RTHDR_TYPE_0                 = 0x0
+	IPV6_SOCKOPT_RESERVED1            = 0x3
+	IPV6_TCLASS                       = 0x24
+	IPV6_UNICAST_HOPS                 = 0x4
+	IPV6_V6ONLY                       = 0x1b
+	IPV6_VERSION                      = 0x60
+	IPV6_VERSION_MASK                 = 0xf0
+	IP_ADD_MEMBERSHIP                 = 0xc
+	IP_ADD_SOURCE_MEMBERSHIP          = 0x46
+	IP_BLOCK_SOURCE                   = 0x48
+	IP_BOUND_IF                       = 0x19
+	IP_DEFAULT_MULTICAST_LOOP         = 0x1
+	IP_DEFAULT_MULTICAST_TTL          = 0x1
+	IP_DF                             = 0x4000
+	IP_DROP_MEMBERSHIP                = 0xd
+	IP_DROP_SOURCE_MEMBERSHIP         = 0x47
+	IP_DUMMYNET_CONFIGURE             = 0x3c
+	IP_DUMMYNET_DEL                   = 0x3d
+	IP_DUMMYNET_FLUSH                 = 0x3e
+	IP_DUMMYNET_GET                   = 0x40
+	IP_FAITH                          = 0x16
+	IP_FW_ADD                         = 0x28
+	IP_FW_DEL                         = 0x29
+	IP_FW_FLUSH                       = 0x2a
+	IP_FW_GET                         = 0x2c
+	IP_FW_RESETLOG                    = 0x2d
+	IP_FW_ZERO                        = 0x2b
+	IP_HDRINCL                        = 0x2
+	IP_IPSEC_POLICY                   = 0x15
+	IP_MAXPACKET                      = 0xffff
+	IP_MAX_GROUP_SRC_FILTER           = 0x200
+	IP_MAX_MEMBERSHIPS                = 0xfff
+	IP_MAX_SOCK_MUTE_FILTER           = 0x80
+	IP_MAX_SOCK_SRC_FILTER            = 0x80
+	IP_MF                             = 0x2000
+	IP_MIN_MEMBERSHIPS                = 0x1f
+	IP_MSFILTER                       = 0x4a
+	IP_MSS                            = 0x240
+	IP_MULTICAST_IF                   = 0x9
+	IP_MULTICAST_IFINDEX              = 0x42
+	IP_MULTICAST_LOOP                 = 0xb
+	IP_MULTICAST_TTL                  = 0xa
+	IP_MULTICAST_VIF                  = 0xe
+	IP_NAT__XXX                       = 0x37
+	IP_OFFMASK                        = 0x1fff
+	IP_OLD_FW_ADD                     = 0x32
+	IP_OLD_FW_DEL                     = 0x33
+	IP_OLD_FW_FLUSH                   = 0x34
+	IP_OLD_FW_GET                     = 0x36
+	IP_OLD_FW_RESETLOG                = 0x38
+	IP_OLD_FW_ZERO                    = 0x35
+	IP_OPTIONS                        = 0x1
+	IP_PKTINFO                        = 0x1a
+	IP_PORTRANGE                      = 0x13
+	IP_PORTRANGE_DEFAULT              = 0x0
+	IP_PORTRANGE_HIGH                 = 0x1
+	IP_PORTRANGE_LOW                  = 0x2
+	IP_RECVDSTADDR                    = 0x7
+	IP_RECVIF                         = 0x14
+	IP_RECVOPTS                       = 0x5
+	IP_RECVPKTINFO                    = 0x1a
+	IP_RECVRETOPTS                    = 0x6
+	IP_RECVTOS                        = 0x1b
+	IP_RECVTTL                        = 0x18
+	IP_RETOPTS                        = 0x8
+	IP_RF                             = 0x8000
+	IP_RSVP_OFF                       = 0x10
+	IP_RSVP_ON                        = 0xf
+	IP_RSVP_VIF_OFF                   = 0x12
+	IP_RSVP_VIF_ON                    = 0x11
+	IP_STRIPHDR                       = 0x17
+	IP_TOS                            = 0x3
+	IP_TRAFFIC_MGT_BACKGROUND         = 0x41
+	IP_TTL                            = 0x4
+	IP_UNBLOCK_SOURCE                 = 0x49
+	ISIG                              = 0x80
+	ISTRIP                            = 0x20
+	IUTF8                             = 0x4000
+	IXANY                             = 0x800
+	IXOFF                             = 0x400
+	IXON                              = 0x200
+	KERN_HOSTNAME                     = 0xa
+	KERN_OSRELEASE                    = 0x2
+	KERN_OSTYPE                       = 0x1
+	KERN_VERSION                      = 0x4
+	LOCK_EX                           = 0x2
+	LOCK_NB                           = 0x4
+	LOCK_SH                           = 0x1
+	LOCK_UN                           = 0x8
+	MADV_CAN_REUSE                    = 0x9
+	MADV_DONTNEED                     = 0x4
+	MADV_FREE                         = 0x5
+	MADV_FREE_REUSABLE                = 0x7
+	MADV_FREE_REUSE                   = 0x8
+	MADV_NORMAL                       = 0x0
+	MADV_PAGEOUT                      = 0xa
+	MADV_RANDOM                       = 0x1
+	MADV_SEQUENTIAL                   = 0x2
+	MADV_WILLNEED                     = 0x3
+	MADV_ZERO_WIRED_PAGES             = 0x6
+	MAP_ANON                          = 0x1000
+	MAP_ANONYMOUS                     = 0x1000
+	MAP_COPY                          = 0x2
+	MAP_FILE                          = 0x0
+	MAP_FIXED                         = 0x10
+	MAP_HASSEMAPHORE                  = 0x200
+	MAP_JIT                           = 0x800
+	MAP_NOCACHE                       = 0x400
+	MAP_NOEXTEND                      = 0x100
+	MAP_NORESERVE                     = 0x40
+	MAP_PRIVATE                       = 0x2
+	MAP_RENAME                        = 0x20
+	MAP_RESERVED0080                  = 0x80
+	MAP_RESILIENT_CODESIGN            = 0x2000
+	MAP_RESILIENT_MEDIA               = 0x4000
+	MAP_SHARED                        = 0x1
+	MCL_CURRENT                       = 0x1
+	MCL_FUTURE                        = 0x2
+	MNT_ASYNC                         = 0x40
+	MNT_AUTOMOUNTED                   = 0x400000
+	MNT_CMDFLAGS                      = 0xf0000
+	MNT_CPROTECT                      = 0x80
+	MNT_DEFWRITE                      = 0x2000000
+	MNT_DONTBROWSE                    = 0x100000
+	MNT_DOVOLFS                       = 0x8000
+	MNT_DWAIT                         = 0x4
+	MNT_EXPORTED                      = 0x100
+	MNT_FORCE                         = 0x80000
+	MNT_IGNORE_OWNERSHIP              = 0x200000
+	MNT_JOURNALED                     = 0x800000
+	MNT_LOCAL                         = 0x1000
+	MNT_MULTILABEL                    = 0x4000000
+	MNT_NOATIME                       = 0x10000000
+	MNT_NOBLOCK                       = 0x20000
+	MNT_NODEV                         = 0x10
+	MNT_NOEXEC                        = 0x4
+	MNT_NOSUID                        = 0x8
+	MNT_NOUSERXATTR                   = 0x1000000
+	MNT_NOWAIT                        = 0x2
+	MNT_QUARANTINE                    = 0x400
+	MNT_QUOTA                         = 0x2000
+	MNT_RDONLY                        = 0x1
+	MNT_RELOAD                        = 0x40000
+	MNT_ROOTFS                        = 0x4000
+	MNT_SYNCHRONOUS                   = 0x2
+	MNT_UNION                         = 0x20
+	MNT_UNKNOWNPERMISSIONS            = 0x200000
+	MNT_UPDATE                        = 0x10000
+	MNT_VISFLAGMASK                   = 0x17f0f5ff
+	MNT_WAIT                          = 0x1
+	MSG_CTRUNC                        = 0x20
+	MSG_DONTROUTE                     = 0x4
+	MSG_DONTWAIT                      = 0x80
+	MSG_EOF                           = 0x100
+	MSG_EOR                           = 0x8
+	MSG_FLUSH                         = 0x400
+	MSG_HAVEMORE                      = 0x2000
+	MSG_HOLD                          = 0x800
+	MSG_NEEDSA                        = 0x10000
+	MSG_OOB                           = 0x1
+	MSG_PEEK                          = 0x2
+	MSG_RCVMORE                       = 0x4000
+	MSG_SEND                          = 0x1000
+	MSG_TRUNC                         = 0x10
+	MSG_WAITALL                       = 0x40
+	MSG_WAITSTREAM                    = 0x200
+	MS_ASYNC                          = 0x1
+	MS_DEACTIVATE                     = 0x8
+	MS_INVALIDATE                     = 0x2
+	MS_KILLPAGES                      = 0x4
+	MS_SYNC                           = 0x10
+	NAME_MAX                          = 0xff
+	NET_RT_DUMP                       = 0x1
+	NET_RT_DUMP2                      = 0x7
+	NET_RT_FLAGS                      = 0x2
+	NET_RT_IFLIST                     = 0x3
+	NET_RT_IFLIST2                    = 0x6
+	NET_RT_MAXID                      = 0xa
+	NET_RT_STAT                       = 0x4
+	NET_RT_TRASH                      = 0x5
+	NFDBITS                           = 0x20
+	NL0                               = 0x0
+	NL1                               = 0x100
+	NL2                               = 0x200
+	NL3                               = 0x300
+	NLDLY                             = 0x300
+	NOFLSH                            = 0x80000000
+	NOKERNINFO                        = 0x2000000
+	NOTE_ABSOLUTE                     = 0x8
+	NOTE_ATTRIB                       = 0x8
+	NOTE_BACKGROUND                   = 0x40
+	NOTE_CHILD                        = 0x4
+	NOTE_CRITICAL                     = 0x20
+	NOTE_DELETE                       = 0x1
+	NOTE_EXEC                         = 0x20000000
+	NOTE_EXIT                         = 0x80000000
+	NOTE_EXITSTATUS                   = 0x4000000
+	NOTE_EXIT_CSERROR                 = 0x40000
+	NOTE_EXIT_DECRYPTFAIL             = 0x10000
+	NOTE_EXIT_DETAIL                  = 0x2000000
+	NOTE_EXIT_DETAIL_MASK             = 0x70000
+	NOTE_EXIT_MEMORY                  = 0x20000
+	NOTE_EXIT_REPARENTED              = 0x80000
+	NOTE_EXTEND                       = 0x4
+	NOTE_FFAND                        = 0x40000000
+	NOTE_FFCOPY                       = 0xc0000000
+	NOTE_FFCTRLMASK                   = 0xc0000000
+	NOTE_FFLAGSMASK                   = 0xffffff
+	NOTE_FFNOP                        = 0x0
+	NOTE_FFOR                         = 0x80000000
+	NOTE_FORK                         = 0x40000000
+	NOTE_FUNLOCK                      = 0x100
+	NOTE_LEEWAY                       = 0x10
+	NOTE_LINK                         = 0x10
+	NOTE_LOWAT                        = 0x1
+	NOTE_MACH_CONTINUOUS_TIME         = 0x80
+	NOTE_NONE                         = 0x80
+	NOTE_NSECONDS                     = 0x4
+	NOTE_OOB                          = 0x2
+	NOTE_PCTRLMASK                    = -0x100000
+	NOTE_PDATAMASK                    = 0xfffff
+	NOTE_REAP                         = 0x10000000
+	NOTE_RENAME                       = 0x20
+	NOTE_REVOKE                       = 0x40
+	NOTE_SECONDS                      = 0x1
+	NOTE_SIGNAL                       = 0x8000000
+	NOTE_TRACK                        = 0x1
+	NOTE_TRACKERR                     = 0x2
+	NOTE_TRIGGER                      = 0x1000000
+	NOTE_USECONDS                     = 0x2
+	NOTE_VM_ERROR                     = 0x10000000
+	NOTE_VM_PRESSURE                  = 0x80000000
+	NOTE_VM_PRESSURE_SUDDEN_TERMINATE = 0x20000000
+	NOTE_VM_PRESSURE_TERMINATE        = 0x40000000
+	NOTE_WRITE                        = 0x2
+	OCRNL                             = 0x10
+	OFDEL                             = 0x20000
+	OFILL                             = 0x80
+	ONLCR                             = 0x2
+	ONLRET                            = 0x40
+	ONOCR                             = 0x20
+	ONOEOT                            = 0x8
+	OPOST                             = 0x1
+	OXTABS                            = 0x4
+	O_ACCMODE                         = 0x3
+	O_ALERT                           = 0x20000000
+	O_APPEND                          = 0x8
+	O_ASYNC                           = 0x40
+	O_CLOEXEC                         = 0x1000000
+	O_CREAT                           = 0x200
+	O_DIRECTORY                       = 0x100000
+	O_DP_GETRAWENCRYPTED              = 0x1
+	O_DP_GETRAWUNENCRYPTED            = 0x2
+	O_DSYNC                           = 0x400000
+	O_EVTONLY                         = 0x8000
+	O_EXCL                            = 0x800
+	O_EXLOCK                          = 0x20
+	O_FSYNC                           = 0x80
+	O_NDELAY                          = 0x4
+	O_NOCTTY                          = 0x20000
+	O_NOFOLLOW                        = 0x100
+	O_NONBLOCK                        = 0x4
+	O_POPUP                           = 0x80000000
+	O_RDONLY                          = 0x0
+	O_RDWR                            = 0x2
+	O_SHLOCK                          = 0x10
+	O_SYMLINK                         = 0x200000
+	O_SYNC                            = 0x80
+	O_TRUNC                           = 0x400
+	O_WRONLY                          = 0x1
+	PARENB                            = 0x1000
+	PARMRK                            = 0x8
+	PARODD                            = 0x2000
+	PENDIN                            = 0x20000000
+	PRIO_PGRP                         = 0x1
+	PRIO_PROCESS                      = 0x0
+	PRIO_USER                         = 0x2
+	PROT_EXEC                         = 0x4
+	PROT_NONE                         = 0x0
+	PROT_READ                         = 0x1
+	PROT_WRITE                        = 0x2
+	PT_ATTACH                         = 0xa
+	PT_ATTACHEXC                      = 0xe
+	PT_CONTINUE                       = 0x7
+	PT_DENY_ATTACH                    = 0x1f
+	PT_DETACH                         = 0xb
+	PT_FIRSTMACH                      = 0x20
+	PT_FORCEQUOTA                     = 0x1e
+	PT_KILL                           = 0x8
+	PT_READ_D                         = 0x2
+	PT_READ_I                         = 0x1
+	PT_READ_U                         = 0x3
+	PT_SIGEXC                         = 0xc
+	PT_STEP                           = 0x9
+	PT_THUPDATE                       = 0xd
+	PT_TRACE_ME                       = 0x0
+	PT_WRITE_D                        = 0x5
+	PT_WRITE_I                        = 0x4
+	PT_WRITE_U                        = 0x6
+	RLIMIT_AS                         = 0x5
+	RLIMIT_CORE                       = 0x4
+	RLIMIT_CPU                        = 0x0
+	RLIMIT_CPU_USAGE_MONITOR          = 0x2
+	RLIMIT_DATA                       = 0x2
+	RLIMIT_FSIZE                      = 0x1
+	RLIMIT_MEMLOCK                    = 0x6
+	RLIMIT_NOFILE                     = 0x8
+	RLIMIT_NPROC                      = 0x7
+	RLIMIT_RSS                        = 0x5
+	RLIMIT_STACK                      = 0x3
+	RLIM_INFINITY                     = 0x7fffffffffffffff
+	RTAX_AUTHOR                       = 0x6
+	RTAX_BRD                          = 0x7
+	RTAX_DST                          = 0x0
+	RTAX_GATEWAY                      = 0x1
+	RTAX_GENMASK                      = 0x3
+	RTAX_IFA                          = 0x5
+	RTAX_IFP                          = 0x4
+	RTAX_MAX                          = 0x8
+	RTAX_NETMASK                      = 0x2
+	RTA_AUTHOR                        = 0x40
+	RTA_BRD                           = 0x80
+	RTA_DST                           = 0x1
+	RTA_GATEWAY                       = 0x2
+	RTA_GENMASK                       = 0x8
+	RTA_IFA                           = 0x20
+	RTA_IFP                           = 0x10
+	RTA_NETMASK                       = 0x4
+	RTF_BLACKHOLE                     = 0x1000
+	RTF_BROADCAST                     = 0x400000
+	RTF_CLONING                       = 0x100
+	RTF_CONDEMNED                     = 0x2000000
+	RTF_DELCLONE                      = 0x80
+	RTF_DONE                          = 0x40
+	RTF_DYNAMIC                       = 0x10
+	RTF_GATEWAY                       = 0x2
+	RTF_HOST                          = 0x4
+	RTF_IFREF                         = 0x4000000
+	RTF_IFSCOPE                       = 0x1000000
+	RTF_LLINFO                        = 0x400
+	RTF_LOCAL                         = 0x200000
+	RTF_MODIFIED                      = 0x20
+	RTF_MULTICAST                     = 0x800000
+	RTF_NOIFREF                       = 0x2000
+	RTF_PINNED                        = 0x100000
+	RTF_PRCLONING                     = 0x10000
+	RTF_PROTO1                        = 0x8000
+	RTF_PROTO2                        = 0x4000
+	RTF_PROTO3                        = 0x40000
+	RTF_PROXY                         = 0x8000000
+	RTF_REJECT                        = 0x8
+	RTF_ROUTER                        = 0x10000000
+	RTF_STATIC                        = 0x800
+	RTF_UP                            = 0x1
+	RTF_WASCLONED                     = 0x20000
+	RTF_XRESOLVE                      = 0x200
+	RTM_ADD                           = 0x1
+	RTM_CHANGE                        = 0x3
+	RTM_DELADDR                       = 0xd
+	RTM_DELETE                        = 0x2
+	RTM_DELMADDR                      = 0x10
+	RTM_GET                           = 0x4
+	RTM_GET2                          = 0x14
+	RTM_IFINFO                        = 0xe
+	RTM_IFINFO2                       = 0x12
+	RTM_LOCK                          = 0x8
+	RTM_LOSING                        = 0x5
+	RTM_MISS                          = 0x7
+	RTM_NEWADDR                       = 0xc
+	RTM_NEWMADDR                      = 0xf
+	RTM_NEWMADDR2                     = 0x13
+	RTM_OLDADD                        = 0x9
+	RTM_OLDDEL                        = 0xa
+	RTM_REDIRECT                      = 0x6
+	RTM_RESOLVE                       = 0xb
+	RTM_RTTUNIT                       = 0xf4240
+	RTM_VERSION                       = 0x5
+	RTV_EXPIRE                        = 0x4
+	RTV_HOPCOUNT                      = 0x2
+	RTV_MTU                           = 0x1
+	RTV_RPIPE                         = 0x8
+	RTV_RTT                           = 0x40
+	RTV_RTTVAR                        = 0x80
+	RTV_SPIPE                         = 0x10
+	RTV_SSTHRESH                      = 0x20
+	RUSAGE_CHILDREN                   = -0x1
+	RUSAGE_SELF                       = 0x0
+	SCM_CREDS                         = 0x3
+	SCM_RIGHTS                        = 0x1
+	SCM_TIMESTAMP                     = 0x2
+	SCM_TIMESTAMP_MONOTONIC           = 0x4
+	SHUT_RD                           = 0x0
+	SHUT_RDWR                         = 0x2
+	SHUT_WR                           = 0x1
+	SIOCADDMULTI                      = 0x80206931
+	SIOCAIFADDR                       = 0x8040691a
+	SIOCARPIPLL                       = 0xc0206928
+	SIOCATMARK                        = 0x40047307
+	SIOCAUTOADDR                      = 0xc0206926
+	SIOCAUTONETMASK                   = 0x80206927
+	SIOCDELMULTI                      = 0x80206932
+	SIOCDIFADDR                       = 0x80206919
+	SIOCDIFPHYADDR                    = 0x80206941
+	SIOCGDRVSPEC                      = 0xc028697b
+	SIOCGETVLAN                       = 0xc020697f
+	SIOCGHIWAT                        = 0x40047301
+	SIOCGIFADDR                       = 0xc0206921
+	SIOCGIFALTMTU                     = 0xc0206948
+	SIOCGIFASYNCMAP                   = 0xc020697c
+	SIOCGIFBOND                       = 0xc0206947
+	SIOCGIFBRDADDR                    = 0xc0206923
+	SIOCGIFCAP                        = 0xc020695b
+	SIOCGIFCONF                       = 0xc00c6924
+	SIOCGIFDEVMTU                     = 0xc0206944
+	SIOCGIFDSTADDR                    = 0xc0206922
+	SIOCGIFFLAGS                      = 0xc0206911
+	SIOCGIFGENERIC                    = 0xc020693a
+	SIOCGIFKPI                        = 0xc0206987
+	SIOCGIFMAC                        = 0xc0206982
+	SIOCGIFMEDIA                      = 0xc02c6938
+	SIOCGIFMETRIC                     = 0xc0206917
+	SIOCGIFMTU                        = 0xc0206933
+	SIOCGIFNETMASK                    = 0xc0206925
+	SIOCGIFPDSTADDR                   = 0xc0206940
+	SIOCGIFPHYS                       = 0xc0206935
+	SIOCGIFPSRCADDR                   = 0xc020693f
+	SIOCGIFSTATUS                     = 0xc331693d
+	SIOCGIFVLAN                       = 0xc020697f
+	SIOCGIFWAKEFLAGS                  = 0xc0206988
+	SIOCGLOWAT                        = 0x40047303
+	SIOCGPGRP                         = 0x40047309
+	SIOCIFCREATE                      = 0xc0206978
+	SIOCIFCREATE2                     = 0xc020697a
+	SIOCIFDESTROY                     = 0x80206979
+	SIOCIFGCLONERS                    = 0xc0106981
+	SIOCRSLVMULTI                     = 0xc010693b
+	SIOCSDRVSPEC                      = 0x8028697b
+	SIOCSETVLAN                       = 0x8020697e
+	SIOCSHIWAT                        = 0x80047300
+	SIOCSIFADDR                       = 0x8020690c
+	SIOCSIFALTMTU                     = 0x80206945
+	SIOCSIFASYNCMAP                   = 0x8020697d
+	SIOCSIFBOND                       = 0x80206946
+	SIOCSIFBRDADDR                    = 0x80206913
+	SIOCSIFCAP                        = 0x8020695a
+	SIOCSIFDSTADDR                    = 0x8020690e
+	SIOCSIFFLAGS                      = 0x80206910
+	SIOCSIFGENERIC                    = 0x80206939
+	SIOCSIFKPI                        = 0x80206986
+	SIOCSIFLLADDR                     = 0x8020693c
+	SIOCSIFMAC                        = 0x80206983
+	SIOCSIFMEDIA                      = 0xc0206937
+	SIOCSIFMETRIC                     = 0x80206918
+	SIOCSIFMTU                        = 0x80206934
+	SIOCSIFNETMASK                    = 0x80206916
+	SIOCSIFPHYADDR                    = 0x8040693e
+	SIOCSIFPHYS                       = 0x80206936
+	SIOCSIFVLAN                       = 0x8020697e
+	SIOCSLOWAT                        = 0x80047302
+	SIOCSPGRP                         = 0x80047308
+	SOCK_DGRAM                        = 0x2
+	SOCK_MAXADDRLEN                   = 0xff
+	SOCK_RAW                          = 0x3
+	SOCK_RDM                          = 0x4
+	SOCK_SEQPACKET                    = 0x5
+	SOCK_STREAM                       = 0x1
+	SOL_SOCKET                        = 0xffff
+	SOMAXCONN                         = 0x80
+	SO_ACCEPTCONN                     = 0x2
+	SO_BROADCAST                      = 0x20
+	SO_DEBUG                          = 0x1
+	SO_DONTROUTE                      = 0x10
+	SO_DONTTRUNC                      = 0x2000
+	SO_ERROR                          = 0x1007
+	SO_KEEPALIVE                      = 0x8
+	SO_LABEL                          = 0x1010
+	SO_LINGER                         = 0x80
+	SO_LINGER_SEC                     = 0x1080
+	SO_NETSVC_MARKING_LEVEL           = 0x1119
+	SO_NET_SERVICE_TYPE               = 0x1116
+	SO_NKE                            = 0x1021
+	SO_NOADDRERR                      = 0x1023
+	SO_NOSIGPIPE                      = 0x1022
+	SO_NOTIFYCONFLICT                 = 0x1026
+	SO_NP_EXTENSIONS                  = 0x1083
+	SO_NREAD                          = 0x1020
+	SO_NUMRCVPKT                      = 0x1112
+	SO_NWRITE                         = 0x1024
+	SO_OOBINLINE                      = 0x100
+	SO_PEERLABEL                      = 0x1011
+	SO_RANDOMPORT                     = 0x1082
+	SO_RCVBUF                         = 0x1002
+	SO_RCVLOWAT                       = 0x1004
+	SO_RCVTIMEO                       = 0x1006
+	SO_REUSEADDR                      = 0x4
+	SO_REUSEPORT                      = 0x200
+	SO_REUSESHAREUID                  = 0x1025
+	SO_SNDBUF                         = 0x1001
+	SO_SNDLOWAT                       = 0x1003
+	SO_SNDTIMEO                       = 0x1005
+	SO_TIMESTAMP                      = 0x400
+	SO_TIMESTAMP_MONOTONIC            = 0x800
+	SO_TYPE                           = 0x1008
+	SO_UPCALLCLOSEWAIT                = 0x1027
+	SO_USELOOPBACK                    = 0x40
+	SO_WANTMORE                       = 0x4000
+	SO_WANTOOBFLAG                    = 0x8000
+	S_IEXEC                           = 0x40
+	S_IFBLK                           = 0x6000
+	S_IFCHR                           = 0x2000
+	S_IFDIR                           = 0x4000
+	S_IFIFO                           = 0x1000
+	S_IFLNK                           = 0xa000
+	S_IFMT                            = 0xf000
+	S_IFREG                           = 0x8000
+	S_IFSOCK                          = 0xc000
+	S_IFWHT                           = 0xe000
+	S_IREAD                           = 0x100
+	S_IRGRP                           = 0x20
+	S_IROTH                           = 0x4
+	S_IRUSR                           = 0x100
+	S_IRWXG                           = 0x38
+	S_IRWXO                           = 0x7
+	S_IRWXU                           = 0x1c0
+	S_ISGID                           = 0x400
+	S_ISTXT                           = 0x200
+	S_ISUID                           = 0x800
+	S_ISVTX                           = 0x200
+	S_IWGRP                           = 0x10
+	S_IWOTH                           = 0x2
+	S_IWRITE                          = 0x80
+	S_IWUSR                           = 0x80
+	S_IXGRP                           = 0x8
+	S_IXOTH                           = 0x1
+	S_IXUSR                           = 0x40
+	TAB0                              = 0x0
+	TAB1                              = 0x400
+	TAB2                              = 0x800
+	TAB3                              = 0x4
+	TABDLY                            = 0xc04
+	TCIFLUSH                          = 0x1
+	TCIOFF                            = 0x3
+	TCIOFLUSH                         = 0x3
+	TCION                             = 0x4
+	TCOFLUSH                          = 0x2
+	TCOOFF                            = 0x1
+	TCOON                             = 0x2
+	TCP_CONNECTIONTIMEOUT             = 0x20
+	TCP_CONNECTION_INFO               = 0x106
+	TCP_ENABLE_ECN                    = 0x104
+	TCP_FASTOPEN                      = 0x105
+	TCP_KEEPALIVE                     = 0x10
+	TCP_KEEPCNT                       = 0x102
+	TCP_KEEPINTVL                     = 0x101
+	TCP_MAXHLEN                       = 0x3c
+	TCP_MAXOLEN                       = 0x28
+	TCP_MAXSEG                        = 0x2
+	TCP_MAXWIN                        = 0xffff
+	TCP_MAX_SACK                      = 0x4
+	TCP_MAX_WINSHIFT                  = 0xe
+	TCP_MINMSS                        = 0xd8
+	TCP_MSS                           = 0x200
+	TCP_NODELAY                       = 0x1
+	TCP_NOOPT                         = 0x8
+	TCP_NOPUSH                        = 0x4
+	TCP_NOTSENT_LOWAT                 = 0x201
+	TCP_RXT_CONNDROPTIME              = 0x80
+	TCP_RXT_FINDROP                   = 0x100
+	TCP_SENDMOREACKS                  = 0x103
+	TCSAFLUSH                         = 0x2
+	TIOCCBRK                          = 0x2000747a
+	TIOCCDTR                          = 0x20007478
+	TIOCCONS                          = 0x80047462
+	TIOCDCDTIMESTAMP                  = 0x40107458
+	TIOCDRAIN                         = 0x2000745e
+	TIOCDSIMICROCODE                  = 0x20007455
+	TIOCEXCL                          = 0x2000740d
+	TIOCEXT                           = 0x80047460
+	TIOCFLUSH                         = 0x80047410
+	TIOCGDRAINWAIT                    = 0x40047456
+	TIOCGETA                          = 0x40487413
+	TIOCGETD                          = 0x4004741a
+	TIOCGPGRP                         = 0x40047477
+	TIOCGWINSZ                        = 0x40087468
+	TIOCIXOFF                         = 0x20007480
+	TIOCIXON                          = 0x20007481
+	TIOCMBIC                          = 0x8004746b
+	TIOCMBIS                          = 0x8004746c
+	TIOCMGDTRWAIT                     = 0x4004745a
+	TIOCMGET                          = 0x4004746a
+	TIOCMODG                          = 0x40047403
+	TIOCMODS                          = 0x80047404
+	TIOCMSDTRWAIT                     = 0x8004745b
+	TIOCMSET                          = 0x8004746d
+	TIOCM_CAR                         = 0x40
+	TIOCM_CD                          = 0x40
+	TIOCM_CTS                         = 0x20
+	TIOCM_DSR                         = 0x100
+	TIOCM_DTR                         = 0x2
+	TIOCM_LE                          = 0x1
+	TIOCM_RI                          = 0x80
+	TIOCM_RNG                         = 0x80
+	TIOCM_RTS                         = 0x4
+	TIOCM_SR                          = 0x10
+	TIOCM_ST                          = 0x8
+	TIOCNOTTY                         = 0x20007471
+	TIOCNXCL                          = 0x2000740e
+	TIOCOUTQ                          = 0x40047473
+	TIOCPKT                           = 0x80047470
+	TIOCPKT_DATA                      = 0x0
+	TIOCPKT_DOSTOP                    = 0x20
+	TIOCPKT_FLUSHREAD                 = 0x1
+	TIOCPKT_FLUSHWRITE                = 0x2
+	TIOCPKT_IOCTL                     = 0x40
+	TIOCPKT_NOSTOP                    = 0x10
+	TIOCPKT_START                     = 0x8
+	TIOCPKT_STOP                      = 0x4
+	TIOCPTYGNAME                      = 0x40807453
+	TIOCPTYGRANT                      = 0x20007454
+	TIOCPTYUNLK                       = 0x20007452
+	TIOCREMOTE                        = 0x80047469
+	TIOCSBRK                          = 0x2000747b
+	TIOCSCONS                         = 0x20007463
+	TIOCSCTTY                         = 0x20007461
+	TIOCSDRAINWAIT                    = 0x80047457
+	TIOCSDTR                          = 0x20007479
+	TIOCSETA                          = 0x80487414
+	TIOCSETAF                         = 0x80487416
+	TIOCSETAW                         = 0x80487415
+	TIOCSETD                          = 0x8004741b
+	TIOCSIG                           = 0x2000745f
+	TIOCSPGRP                         = 0x80047476
+	TIOCSTART                         = 0x2000746e
+	TIOCSTAT                          = 0x20007465
+	TIOCSTI                           = 0x80017472
+	TIOCSTOP                          = 0x2000746f
+	TIOCSWINSZ                        = 0x80087467
+	TIOCTIMESTAMP                     = 0x40107459
+	TIOCUCNTL                         = 0x80047466
+	TOSTOP                            = 0x400000
+	VDISCARD                          = 0xf
+	VDSUSP                            = 0xb
+	VEOF                              = 0x0
+	VEOL                              = 0x1
+	VEOL2                             = 0x2
+	VERASE                            = 0x3
+	VINTR                             = 0x8
+	VKILL                             = 0x5
+	VLNEXT                            = 0xe
+	VMIN                              = 0x10
+	VM_LOADAVG                        = 0x2
+	VM_MACHFACTOR                     = 0x4
+	VM_MAXID                          = 0x6
+	VM_METER                          = 0x1
+	VM_SWAPUSAGE                      = 0x5
+	VQUIT                             = 0x9
+	VREPRINT                          = 0x6
+	VSTART                            = 0xc
+	VSTATUS                           = 0x12
+	VSTOP                             = 0xd
+	VSUSP                             = 0xa
+	VT0                               = 0x0
+	VT1                               = 0x10000
+	VTDLY                             = 0x10000
+	VTIME                             = 0x11
+	VWERASE                           = 0x4
+	WCONTINUED                        = 0x10
+	WCOREFLAG                         = 0x80
+	WEXITED                           = 0x4
+	WNOHANG                           = 0x1
+	WNOWAIT                           = 0x20
+	WORDSIZE                          = 0x40
+	WSTOPPED                          = 0x8
+	WUNTRACED                         = 0x2
+	XATTR_CREATE                      = 0x2
+	XATTR_NODEFAULT                   = 0x10
+	XATTR_NOFOLLOW                    = 0x1
+	XATTR_NOSECURITY                  = 0x8
+	XATTR_REPLACE                     = 0x4
+	XATTR_SHOWCOMPRESSION             = 0x20
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADARCH        = syscall.Errno(0x56)
+	EBADEXEC        = syscall.Errno(0x55)
+	EBADF           = syscall.Errno(0x9)
+	EBADMACHO       = syscall.Errno(0x58)
+	EBADMSG         = syscall.Errno(0x5e)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x59)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDEVERR         = syscall.Errno(0x53)
+	EDOM            = syscall.Errno(0x21)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x5a)
+	EILSEQ          = syscall.Errno(0x5c)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x6a)
+	ELOOP           = syscall.Errno(0x3e)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	EMULTIHOP       = syscall.Errno(0x5f)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x5d)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODATA         = syscall.Errno(0x60)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOLINK         = syscall.Errno(0x61)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x5b)
+	ENOPOLICY       = syscall.Errno(0x67)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSR           = syscall.Errno(0x62)
+	ENOSTR          = syscall.Errno(0x63)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTRECOVERABLE = syscall.Errno(0x68)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x2d)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x66)
+	EOVERFLOW       = syscall.Errno(0x54)
+	EOWNERDEAD      = syscall.Errno(0x69)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTO          = syscall.Errno(0x64)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	EPWROFF         = syscall.Errno(0x52)
+	EQFULL          = syscall.Errno(0x6a)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHLIBVERS      = syscall.Errno(0x57)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIME           = syscall.Errno(0x65)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "EAGAIN", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "ENOTSUP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "operation timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disc quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC prog. not avail"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EPWROFF", "device power is off"},
+	{83, "EDEVERR", "device error"},
+	{84, "EOVERFLOW", "value too large to be stored in data type"},
+	{85, "EBADEXEC", "bad executable (or shared library)"},
+	{86, "EBADARCH", "bad CPU type in executable"},
+	{87, "ESHLIBVERS", "shared library version mismatch"},
+	{88, "EBADMACHO", "malformed Mach-o file"},
+	{89, "ECANCELED", "operation canceled"},
+	{90, "EIDRM", "identifier removed"},
+	{91, "ENOMSG", "no message of desired type"},
+	{92, "EILSEQ", "illegal byte sequence"},
+	{93, "ENOATTR", "attribute not found"},
+	{94, "EBADMSG", "bad message"},
+	{95, "EMULTIHOP", "EMULTIHOP (Reserved)"},
+	{96, "ENODATA", "no message available on STREAM"},
+	{97, "ENOLINK", "ENOLINK (Reserved)"},
+	{98, "ENOSR", "no STREAM resources"},
+	{99, "ENOSTR", "not a STREAM"},
+	{100, "EPROTO", "protocol error"},
+	{101, "ETIME", "STREAM ioctl timeout"},
+	{102, "EOPNOTSUPP", "operation not supported on socket"},
+	{103, "ENOPOLICY", "policy not found"},
+	{104, "ENOTRECOVERABLE", "state not recoverable"},
+	{105, "EOWNERDEAD", "previous owner died"},
+	{106, "EQFULL", "interface output queue is full"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGABRT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "suspended (signal)"},
+	{18, "SIGTSTP", "suspended"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_darwin_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_darwin_arm.go
new file mode 100644
index 000000000..ddc5d001b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_darwin_arm.go
@@ -0,0 +1,1786 @@
+// mkerrors.sh
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm,darwin
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                      = 0x10
+	AF_CCITT                          = 0xa
+	AF_CHAOS                          = 0x5
+	AF_CNT                            = 0x15
+	AF_COIP                           = 0x14
+	AF_DATAKIT                        = 0x9
+	AF_DECnet                         = 0xc
+	AF_DLI                            = 0xd
+	AF_E164                           = 0x1c
+	AF_ECMA                           = 0x8
+	AF_HYLINK                         = 0xf
+	AF_IEEE80211                      = 0x25
+	AF_IMPLINK                        = 0x3
+	AF_INET                           = 0x2
+	AF_INET6                          = 0x1e
+	AF_IPX                            = 0x17
+	AF_ISDN                           = 0x1c
+	AF_ISO                            = 0x7
+	AF_LAT                            = 0xe
+	AF_LINK                           = 0x12
+	AF_LOCAL                          = 0x1
+	AF_MAX                            = 0x28
+	AF_NATM                           = 0x1f
+	AF_NDRV                           = 0x1b
+	AF_NETBIOS                        = 0x21
+	AF_NS                             = 0x6
+	AF_OSI                            = 0x7
+	AF_PPP                            = 0x22
+	AF_PUP                            = 0x4
+	AF_RESERVED_36                    = 0x24
+	AF_ROUTE                          = 0x11
+	AF_SIP                            = 0x18
+	AF_SNA                            = 0xb
+	AF_SYSTEM                         = 0x20
+	AF_UNIX                           = 0x1
+	AF_UNSPEC                         = 0x0
+	AF_UTUN                           = 0x26
+	ALTWERASE                         = 0x200
+	ATTR_BIT_MAP_COUNT                = 0x5
+	ATTR_CMN_ACCESSMASK               = 0x20000
+	ATTR_CMN_ACCTIME                  = 0x1000
+	ATTR_CMN_ADDEDTIME                = 0x10000000
+	ATTR_CMN_BKUPTIME                 = 0x2000
+	ATTR_CMN_CHGTIME                  = 0x800
+	ATTR_CMN_CRTIME                   = 0x200
+	ATTR_CMN_DATA_PROTECT_FLAGS       = 0x40000000
+	ATTR_CMN_DEVID                    = 0x2
+	ATTR_CMN_DOCUMENT_ID              = 0x100000
+	ATTR_CMN_ERROR                    = 0x20000000
+	ATTR_CMN_EXTENDED_SECURITY        = 0x400000
+	ATTR_CMN_FILEID                   = 0x2000000
+	ATTR_CMN_FLAGS                    = 0x40000
+	ATTR_CMN_FNDRINFO                 = 0x4000
+	ATTR_CMN_FSID                     = 0x4
+	ATTR_CMN_FULLPATH                 = 0x8000000
+	ATTR_CMN_GEN_COUNT                = 0x80000
+	ATTR_CMN_GRPID                    = 0x10000
+	ATTR_CMN_GRPUUID                  = 0x1000000
+	ATTR_CMN_MODTIME                  = 0x400
+	ATTR_CMN_NAME                     = 0x1
+	ATTR_CMN_NAMEDATTRCOUNT           = 0x80000
+	ATTR_CMN_NAMEDATTRLIST            = 0x100000
+	ATTR_CMN_OBJID                    = 0x20
+	ATTR_CMN_OBJPERMANENTID           = 0x40
+	ATTR_CMN_OBJTAG                   = 0x10
+	ATTR_CMN_OBJTYPE                  = 0x8
+	ATTR_CMN_OWNERID                  = 0x8000
+	ATTR_CMN_PARENTID                 = 0x4000000
+	ATTR_CMN_PAROBJID                 = 0x80
+	ATTR_CMN_RETURNED_ATTRS           = 0x80000000
+	ATTR_CMN_SCRIPT                   = 0x100
+	ATTR_CMN_SETMASK                  = 0x41c7ff00
+	ATTR_CMN_USERACCESS               = 0x200000
+	ATTR_CMN_UUID                     = 0x800000
+	ATTR_CMN_VALIDMASK                = 0xffffffff
+	ATTR_CMN_VOLSETMASK               = 0x6700
+	ATTR_FILE_ALLOCSIZE               = 0x4
+	ATTR_FILE_CLUMPSIZE               = 0x10
+	ATTR_FILE_DATAALLOCSIZE           = 0x400
+	ATTR_FILE_DATAEXTENTS             = 0x800
+	ATTR_FILE_DATALENGTH              = 0x200
+	ATTR_FILE_DEVTYPE                 = 0x20
+	ATTR_FILE_FILETYPE                = 0x40
+	ATTR_FILE_FORKCOUNT               = 0x80
+	ATTR_FILE_FORKLIST                = 0x100
+	ATTR_FILE_IOBLOCKSIZE             = 0x8
+	ATTR_FILE_LINKCOUNT               = 0x1
+	ATTR_FILE_RSRCALLOCSIZE           = 0x2000
+	ATTR_FILE_RSRCEXTENTS             = 0x4000
+	ATTR_FILE_RSRCLENGTH              = 0x1000
+	ATTR_FILE_SETMASK                 = 0x20
+	ATTR_FILE_TOTALSIZE               = 0x2
+	ATTR_FILE_VALIDMASK               = 0x37ff
+	ATTR_VOL_ALLOCATIONCLUMP          = 0x40
+	ATTR_VOL_ATTRIBUTES               = 0x40000000
+	ATTR_VOL_CAPABILITIES             = 0x20000
+	ATTR_VOL_DIRCOUNT                 = 0x400
+	ATTR_VOL_ENCODINGSUSED            = 0x10000
+	ATTR_VOL_FILECOUNT                = 0x200
+	ATTR_VOL_FSTYPE                   = 0x1
+	ATTR_VOL_INFO                     = 0x80000000
+	ATTR_VOL_IOBLOCKSIZE              = 0x80
+	ATTR_VOL_MAXOBJCOUNT              = 0x800
+	ATTR_VOL_MINALLOCATION            = 0x20
+	ATTR_VOL_MOUNTEDDEVICE            = 0x8000
+	ATTR_VOL_MOUNTFLAGS               = 0x4000
+	ATTR_VOL_MOUNTPOINT               = 0x1000
+	ATTR_VOL_NAME                     = 0x2000
+	ATTR_VOL_OBJCOUNT                 = 0x100
+	ATTR_VOL_QUOTA_SIZE               = 0x10000000
+	ATTR_VOL_RESERVED_SIZE            = 0x20000000
+	ATTR_VOL_SETMASK                  = 0x80002000
+	ATTR_VOL_SIGNATURE                = 0x2
+	ATTR_VOL_SIZE                     = 0x4
+	ATTR_VOL_SPACEAVAIL               = 0x10
+	ATTR_VOL_SPACEFREE                = 0x8
+	ATTR_VOL_UUID                     = 0x40000
+	ATTR_VOL_VALIDMASK                = 0xf007ffff
+	B0                                = 0x0
+	B110                              = 0x6e
+	B115200                           = 0x1c200
+	B1200                             = 0x4b0
+	B134                              = 0x86
+	B14400                            = 0x3840
+	B150                              = 0x96
+	B1800                             = 0x708
+	B19200                            = 0x4b00
+	B200                              = 0xc8
+	B230400                           = 0x38400
+	B2400                             = 0x960
+	B28800                            = 0x7080
+	B300                              = 0x12c
+	B38400                            = 0x9600
+	B4800                             = 0x12c0
+	B50                               = 0x32
+	B57600                            = 0xe100
+	B600                              = 0x258
+	B7200                             = 0x1c20
+	B75                               = 0x4b
+	B76800                            = 0x12c00
+	B9600                             = 0x2580
+	BIOCFLUSH                         = 0x20004268
+	BIOCGBLEN                         = 0x40044266
+	BIOCGDLT                          = 0x4004426a
+	BIOCGDLTLIST                      = 0xc00c4279
+	BIOCGETIF                         = 0x4020426b
+	BIOCGHDRCMPLT                     = 0x40044274
+	BIOCGRSIG                         = 0x40044272
+	BIOCGRTIMEOUT                     = 0x4010426e
+	BIOCGSEESENT                      = 0x40044276
+	BIOCGSTATS                        = 0x4008426f
+	BIOCIMMEDIATE                     = 0x80044270
+	BIOCPROMISC                       = 0x20004269
+	BIOCSBLEN                         = 0xc0044266
+	BIOCSDLT                          = 0x80044278
+	BIOCSETF                          = 0x80104267
+	BIOCSETFNR                        = 0x8010427e
+	BIOCSETIF                         = 0x8020426c
+	BIOCSHDRCMPLT                     = 0x80044275
+	BIOCSRSIG                         = 0x80044273
+	BIOCSRTIMEOUT                     = 0x8010426d
+	BIOCSSEESENT                      = 0x80044277
+	BIOCVERSION                       = 0x40044271
+	BPF_A                             = 0x10
+	BPF_ABS                           = 0x20
+	BPF_ADD                           = 0x0
+	BPF_ALIGNMENT                     = 0x4
+	BPF_ALU                           = 0x4
+	BPF_AND                           = 0x50
+	BPF_B                             = 0x10
+	BPF_DIV                           = 0x30
+	BPF_H                             = 0x8
+	BPF_IMM                           = 0x0
+	BPF_IND                           = 0x40
+	BPF_JA                            = 0x0
+	BPF_JEQ                           = 0x10
+	BPF_JGE                           = 0x30
+	BPF_JGT                           = 0x20
+	BPF_JMP                           = 0x5
+	BPF_JSET                          = 0x40
+	BPF_K                             = 0x0
+	BPF_LD                            = 0x0
+	BPF_LDX                           = 0x1
+	BPF_LEN                           = 0x80
+	BPF_LSH                           = 0x60
+	BPF_MAJOR_VERSION                 = 0x1
+	BPF_MAXBUFSIZE                    = 0x80000
+	BPF_MAXINSNS                      = 0x200
+	BPF_MEM                           = 0x60
+	BPF_MEMWORDS                      = 0x10
+	BPF_MINBUFSIZE                    = 0x20
+	BPF_MINOR_VERSION                 = 0x1
+	BPF_MISC                          = 0x7
+	BPF_MSH                           = 0xa0
+	BPF_MUL                           = 0x20
+	BPF_NEG                           = 0x80
+	BPF_OR                            = 0x40
+	BPF_RELEASE                       = 0x30bb6
+	BPF_RET                           = 0x6
+	BPF_RSH                           = 0x70
+	BPF_ST                            = 0x2
+	BPF_STX                           = 0x3
+	BPF_SUB                           = 0x10
+	BPF_TAX                           = 0x0
+	BPF_TXA                           = 0x80
+	BPF_W                             = 0x0
+	BPF_X                             = 0x8
+	BRKINT                            = 0x2
+	BS0                               = 0x0
+	BS1                               = 0x8000
+	BSDLY                             = 0x8000
+	CFLUSH                            = 0xf
+	CLOCAL                            = 0x8000
+	CLOCK_MONOTONIC                   = 0x6
+	CLOCK_MONOTONIC_RAW               = 0x4
+	CLOCK_MONOTONIC_RAW_APPROX        = 0x5
+	CLOCK_PROCESS_CPUTIME_ID          = 0xc
+	CLOCK_REALTIME                    = 0x0
+	CLOCK_THREAD_CPUTIME_ID           = 0x10
+	CLOCK_UPTIME_RAW                  = 0x8
+	CLOCK_UPTIME_RAW_APPROX           = 0x9
+	CLONE_NOFOLLOW                    = 0x1
+	CLONE_NOOWNERCOPY                 = 0x2
+	CR0                               = 0x0
+	CR1                               = 0x1000
+	CR2                               = 0x2000
+	CR3                               = 0x3000
+	CRDLY                             = 0x3000
+	CREAD                             = 0x800
+	CRTSCTS                           = 0x30000
+	CS5                               = 0x0
+	CS6                               = 0x100
+	CS7                               = 0x200
+	CS8                               = 0x300
+	CSIZE                             = 0x300
+	CSTART                            = 0x11
+	CSTATUS                           = 0x14
+	CSTOP                             = 0x13
+	CSTOPB                            = 0x400
+	CSUSP                             = 0x1a
+	CTL_HW                            = 0x6
+	CTL_KERN                          = 0x1
+	CTL_MAXNAME                       = 0xc
+	CTL_NET                           = 0x4
+	DLT_A429                          = 0xb8
+	DLT_A653_ICM                      = 0xb9
+	DLT_AIRONET_HEADER                = 0x78
+	DLT_AOS                           = 0xde
+	DLT_APPLE_IP_OVER_IEEE1394        = 0x8a
+	DLT_ARCNET                        = 0x7
+	DLT_ARCNET_LINUX                  = 0x81
+	DLT_ATM_CLIP                      = 0x13
+	DLT_ATM_RFC1483                   = 0xb
+	DLT_AURORA                        = 0x7e
+	DLT_AX25                          = 0x3
+	DLT_AX25_KISS                     = 0xca
+	DLT_BACNET_MS_TP                  = 0xa5
+	DLT_BLUETOOTH_HCI_H4              = 0xbb
+	DLT_BLUETOOTH_HCI_H4_WITH_PHDR    = 0xc9
+	DLT_CAN20B                        = 0xbe
+	DLT_CAN_SOCKETCAN                 = 0xe3
+	DLT_CHAOS                         = 0x5
+	DLT_CHDLC                         = 0x68
+	DLT_CISCO_IOS                     = 0x76
+	DLT_C_HDLC                        = 0x68
+	DLT_C_HDLC_WITH_DIR               = 0xcd
+	DLT_DBUS                          = 0xe7
+	DLT_DECT                          = 0xdd
+	DLT_DOCSIS                        = 0x8f
+	DLT_DVB_CI                        = 0xeb
+	DLT_ECONET                        = 0x73
+	DLT_EN10MB                        = 0x1
+	DLT_EN3MB                         = 0x2
+	DLT_ENC                           = 0x6d
+	DLT_ERF                           = 0xc5
+	DLT_ERF_ETH                       = 0xaf
+	DLT_ERF_POS                       = 0xb0
+	DLT_FC_2                          = 0xe0
+	DLT_FC_2_WITH_FRAME_DELIMS        = 0xe1
+	DLT_FDDI                          = 0xa
+	DLT_FLEXRAY                       = 0xd2
+	DLT_FRELAY                        = 0x6b
+	DLT_FRELAY_WITH_DIR               = 0xce
+	DLT_GCOM_SERIAL                   = 0xad
+	DLT_GCOM_T1E1                     = 0xac
+	DLT_GPF_F                         = 0xab
+	DLT_GPF_T                         = 0xaa
+	DLT_GPRS_LLC                      = 0xa9
+	DLT_GSMTAP_ABIS                   = 0xda
+	DLT_GSMTAP_UM                     = 0xd9
+	DLT_HHDLC                         = 0x79
+	DLT_IBM_SN                        = 0x92
+	DLT_IBM_SP                        = 0x91
+	DLT_IEEE802                       = 0x6
+	DLT_IEEE802_11                    = 0x69
+	DLT_IEEE802_11_RADIO              = 0x7f
+	DLT_IEEE802_11_RADIO_AVS          = 0xa3
+	DLT_IEEE802_15_4                  = 0xc3
+	DLT_IEEE802_15_4_LINUX            = 0xbf
+	DLT_IEEE802_15_4_NOFCS            = 0xe6
+	DLT_IEEE802_15_4_NONASK_PHY       = 0xd7
+	DLT_IEEE802_16_MAC_CPS            = 0xbc
+	DLT_IEEE802_16_MAC_CPS_RADIO      = 0xc1
+	DLT_IPFILTER                      = 0x74
+	DLT_IPMB                          = 0xc7
+	DLT_IPMB_LINUX                    = 0xd1
+	DLT_IPNET                         = 0xe2
+	DLT_IPOIB                         = 0xf2
+	DLT_IPV4                          = 0xe4
+	DLT_IPV6                          = 0xe5
+	DLT_IP_OVER_FC                    = 0x7a
+	DLT_JUNIPER_ATM1                  = 0x89
+	DLT_JUNIPER_ATM2                  = 0x87
+	DLT_JUNIPER_ATM_CEMIC             = 0xee
+	DLT_JUNIPER_CHDLC                 = 0xb5
+	DLT_JUNIPER_ES                    = 0x84
+	DLT_JUNIPER_ETHER                 = 0xb2
+	DLT_JUNIPER_FIBRECHANNEL          = 0xea
+	DLT_JUNIPER_FRELAY                = 0xb4
+	DLT_JUNIPER_GGSN                  = 0x85
+	DLT_JUNIPER_ISM                   = 0xc2
+	DLT_JUNIPER_MFR                   = 0x86
+	DLT_JUNIPER_MLFR                  = 0x83
+	DLT_JUNIPER_MLPPP                 = 0x82
+	DLT_JUNIPER_MONITOR               = 0xa4
+	DLT_JUNIPER_PIC_PEER              = 0xae
+	DLT_JUNIPER_PPP                   = 0xb3
+	DLT_JUNIPER_PPPOE                 = 0xa7
+	DLT_JUNIPER_PPPOE_ATM             = 0xa8
+	DLT_JUNIPER_SERVICES              = 0x88
+	DLT_JUNIPER_SRX_E2E               = 0xe9
+	DLT_JUNIPER_ST                    = 0xc8
+	DLT_JUNIPER_VP                    = 0xb7
+	DLT_JUNIPER_VS                    = 0xe8
+	DLT_LAPB_WITH_DIR                 = 0xcf
+	DLT_LAPD                          = 0xcb
+	DLT_LIN                           = 0xd4
+	DLT_LINUX_EVDEV                   = 0xd8
+	DLT_LINUX_IRDA                    = 0x90
+	DLT_LINUX_LAPD                    = 0xb1
+	DLT_LINUX_PPP_WITHDIRECTION       = 0xa6
+	DLT_LINUX_SLL                     = 0x71
+	DLT_LOOP                          = 0x6c
+	DLT_LTALK                         = 0x72
+	DLT_MATCHING_MAX                  = 0xf5
+	DLT_MATCHING_MIN                  = 0x68
+	DLT_MFR                           = 0xb6
+	DLT_MOST                          = 0xd3
+	DLT_MPEG_2_TS                     = 0xf3
+	DLT_MPLS                          = 0xdb
+	DLT_MTP2                          = 0x8c
+	DLT_MTP2_WITH_PHDR                = 0x8b
+	DLT_MTP3                          = 0x8d
+	DLT_MUX27010                      = 0xec
+	DLT_NETANALYZER                   = 0xf0
+	DLT_NETANALYZER_TRANSPARENT       = 0xf1
+	DLT_NFC_LLCP                      = 0xf5
+	DLT_NFLOG                         = 0xef
+	DLT_NG40                          = 0xf4
+	DLT_NULL                          = 0x0
+	DLT_PCI_EXP                       = 0x7d
+	DLT_PFLOG                         = 0x75
+	DLT_PFSYNC                        = 0x12
+	DLT_PPI                           = 0xc0
+	DLT_PPP                           = 0x9
+	DLT_PPP_BSDOS                     = 0x10
+	DLT_PPP_ETHER                     = 0x33
+	DLT_PPP_PPPD                      = 0xa6
+	DLT_PPP_SERIAL                    = 0x32
+	DLT_PPP_WITH_DIR                  = 0xcc
+	DLT_PPP_WITH_DIRECTION            = 0xa6
+	DLT_PRISM_HEADER                  = 0x77
+	DLT_PRONET                        = 0x4
+	DLT_RAIF1                         = 0xc6
+	DLT_RAW                           = 0xc
+	DLT_RIO                           = 0x7c
+	DLT_SCCP                          = 0x8e
+	DLT_SITA                          = 0xc4
+	DLT_SLIP                          = 0x8
+	DLT_SLIP_BSDOS                    = 0xf
+	DLT_STANAG_5066_D_PDU             = 0xed
+	DLT_SUNATM                        = 0x7b
+	DLT_SYMANTEC_FIREWALL             = 0x63
+	DLT_TZSP                          = 0x80
+	DLT_USB                           = 0xba
+	DLT_USB_LINUX                     = 0xbd
+	DLT_USB_LINUX_MMAPPED             = 0xdc
+	DLT_USER0                         = 0x93
+	DLT_USER1                         = 0x94
+	DLT_USER10                        = 0x9d
+	DLT_USER11                        = 0x9e
+	DLT_USER12                        = 0x9f
+	DLT_USER13                        = 0xa0
+	DLT_USER14                        = 0xa1
+	DLT_USER15                        = 0xa2
+	DLT_USER2                         = 0x95
+	DLT_USER3                         = 0x96
+	DLT_USER4                         = 0x97
+	DLT_USER5                         = 0x98
+	DLT_USER6                         = 0x99
+	DLT_USER7                         = 0x9a
+	DLT_USER8                         = 0x9b
+	DLT_USER9                         = 0x9c
+	DLT_WIHART                        = 0xdf
+	DLT_X2E_SERIAL                    = 0xd5
+	DLT_X2E_XORAYA                    = 0xd6
+	DT_BLK                            = 0x6
+	DT_CHR                            = 0x2
+	DT_DIR                            = 0x4
+	DT_FIFO                           = 0x1
+	DT_LNK                            = 0xa
+	DT_REG                            = 0x8
+	DT_SOCK                           = 0xc
+	DT_UNKNOWN                        = 0x0
+	DT_WHT                            = 0xe
+	ECHO                              = 0x8
+	ECHOCTL                           = 0x40
+	ECHOE                             = 0x2
+	ECHOK                             = 0x4
+	ECHOKE                            = 0x1
+	ECHONL                            = 0x10
+	ECHOPRT                           = 0x20
+	EVFILT_AIO                        = -0x3
+	EVFILT_EXCEPT                     = -0xf
+	EVFILT_FS                         = -0x9
+	EVFILT_MACHPORT                   = -0x8
+	EVFILT_PROC                       = -0x5
+	EVFILT_READ                       = -0x1
+	EVFILT_SIGNAL                     = -0x6
+	EVFILT_SYSCOUNT                   = 0xf
+	EVFILT_THREADMARKER               = 0xf
+	EVFILT_TIMER                      = -0x7
+	EVFILT_USER                       = -0xa
+	EVFILT_VM                         = -0xc
+	EVFILT_VNODE                      = -0x4
+	EVFILT_WRITE                      = -0x2
+	EV_ADD                            = 0x1
+	EV_CLEAR                          = 0x20
+	EV_DELETE                         = 0x2
+	EV_DISABLE                        = 0x8
+	EV_DISPATCH                       = 0x80
+	EV_DISPATCH2                      = 0x180
+	EV_ENABLE                         = 0x4
+	EV_EOF                            = 0x8000
+	EV_ERROR                          = 0x4000
+	EV_FLAG0                          = 0x1000
+	EV_FLAG1                          = 0x2000
+	EV_ONESHOT                        = 0x10
+	EV_OOBAND                         = 0x2000
+	EV_POLL                           = 0x1000
+	EV_RECEIPT                        = 0x40
+	EV_SYSFLAGS                       = 0xf000
+	EV_UDATA_SPECIFIC                 = 0x100
+	EV_VANISHED                       = 0x200
+	EXTA                              = 0x4b00
+	EXTB                              = 0x9600
+	EXTPROC                           = 0x800
+	FD_CLOEXEC                        = 0x1
+	FD_SETSIZE                        = 0x400
+	FF0                               = 0x0
+	FF1                               = 0x4000
+	FFDLY                             = 0x4000
+	FLUSHO                            = 0x800000
+	FSOPT_ATTR_CMN_EXTENDED           = 0x20
+	FSOPT_NOFOLLOW                    = 0x1
+	FSOPT_NOINMEMUPDATE               = 0x2
+	FSOPT_PACK_INVAL_ATTRS            = 0x8
+	FSOPT_REPORT_FULLSIZE             = 0x4
+	F_ADDFILESIGS                     = 0x3d
+	F_ADDFILESIGS_FOR_DYLD_SIM        = 0x53
+	F_ADDFILESIGS_RETURN              = 0x61
+	F_ADDSIGS                         = 0x3b
+	F_ALLOCATEALL                     = 0x4
+	F_ALLOCATECONTIG                  = 0x2
+	F_BARRIERFSYNC                    = 0x55
+	F_CHECK_LV                        = 0x62
+	F_CHKCLEAN                        = 0x29
+	F_DUPFD                           = 0x0
+	F_DUPFD_CLOEXEC                   = 0x43
+	F_FINDSIGS                        = 0x4e
+	F_FLUSH_DATA                      = 0x28
+	F_FREEZE_FS                       = 0x35
+	F_FULLFSYNC                       = 0x33
+	F_GETCODEDIR                      = 0x48
+	F_GETFD                           = 0x1
+	F_GETFL                           = 0x3
+	F_GETLK                           = 0x7
+	F_GETLKPID                        = 0x42
+	F_GETNOSIGPIPE                    = 0x4a
+	F_GETOWN                          = 0x5
+	F_GETPATH                         = 0x32
+	F_GETPATH_MTMINFO                 = 0x47
+	F_GETPROTECTIONCLASS              = 0x3f
+	F_GETPROTECTIONLEVEL              = 0x4d
+	F_GLOBAL_NOCACHE                  = 0x37
+	F_LOG2PHYS                        = 0x31
+	F_LOG2PHYS_EXT                    = 0x41
+	F_NOCACHE                         = 0x30
+	F_NODIRECT                        = 0x3e
+	F_OK                              = 0x0
+	F_PATHPKG_CHECK                   = 0x34
+	F_PEOFPOSMODE                     = 0x3
+	F_PREALLOCATE                     = 0x2a
+	F_PUNCHHOLE                       = 0x63
+	F_RDADVISE                        = 0x2c
+	F_RDAHEAD                         = 0x2d
+	F_RDLCK                           = 0x1
+	F_SETBACKINGSTORE                 = 0x46
+	F_SETFD                           = 0x2
+	F_SETFL                           = 0x4
+	F_SETLK                           = 0x8
+	F_SETLKW                          = 0x9
+	F_SETLKWTIMEOUT                   = 0xa
+	F_SETNOSIGPIPE                    = 0x49
+	F_SETOWN                          = 0x6
+	F_SETPROTECTIONCLASS              = 0x40
+	F_SETSIZE                         = 0x2b
+	F_SINGLE_WRITER                   = 0x4c
+	F_THAW_FS                         = 0x36
+	F_TRANSCODEKEY                    = 0x4b
+	F_TRIM_ACTIVE_FILE                = 0x64
+	F_UNLCK                           = 0x2
+	F_VOLPOSMODE                      = 0x4
+	F_WRLCK                           = 0x3
+	HUPCL                             = 0x4000
+	HW_MACHINE                        = 0x1
+	ICANON                            = 0x100
+	ICMP6_FILTER                      = 0x12
+	ICRNL                             = 0x100
+	IEXTEN                            = 0x400
+	IFF_ALLMULTI                      = 0x200
+	IFF_ALTPHYS                       = 0x4000
+	IFF_BROADCAST                     = 0x2
+	IFF_DEBUG                         = 0x4
+	IFF_LINK0                         = 0x1000
+	IFF_LINK1                         = 0x2000
+	IFF_LINK2                         = 0x4000
+	IFF_LOOPBACK                      = 0x8
+	IFF_MULTICAST                     = 0x8000
+	IFF_NOARP                         = 0x80
+	IFF_NOTRAILERS                    = 0x20
+	IFF_OACTIVE                       = 0x400
+	IFF_POINTOPOINT                   = 0x10
+	IFF_PROMISC                       = 0x100
+	IFF_RUNNING                       = 0x40
+	IFF_SIMPLEX                       = 0x800
+	IFF_UP                            = 0x1
+	IFNAMSIZ                          = 0x10
+	IFT_1822                          = 0x2
+	IFT_AAL5                          = 0x31
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ATM                           = 0x25
+	IFT_BRIDGE                        = 0xd1
+	IFT_CARP                          = 0xf8
+	IFT_CELLULAR                      = 0xff
+	IFT_CEPT                          = 0x13
+	IFT_DS3                           = 0x1e
+	IFT_ENC                           = 0xf4
+	IFT_EON                           = 0x19
+	IFT_ETHER                         = 0x6
+	IFT_FAITH                         = 0x38
+	IFT_FDDI                          = 0xf
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_GIF                           = 0x37
+	IFT_HDH1822                       = 0x3
+	IFT_HIPPI                         = 0x2f
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IEEE1394                      = 0x90
+	IFT_IEEE8023ADLAG                 = 0x88
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88026                      = 0xa
+	IFT_L2VLAN                        = 0x87
+	IFT_LAPB                          = 0x10
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_NSIP                          = 0x1b
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PDP                           = 0xff
+	IFT_PFLOG                         = 0xf5
+	IFT_PFSYNC                        = 0xf6
+	IFT_PKTAP                         = 0xfe
+	IFT_PPP                           = 0x17
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPVIRTUAL                   = 0x35
+	IFT_PTPSERIAL                     = 0x16
+	IFT_RS232                         = 0x21
+	IFT_SDLC                          = 0x11
+	IFT_SIP                           = 0x1f
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_STARLAN                       = 0xb
+	IFT_STF                           = 0x39
+	IFT_T1                            = 0x12
+	IFT_ULTRA                         = 0x1d
+	IFT_V35                           = 0x2d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+	IGNBRK                            = 0x1
+	IGNCR                             = 0x80
+	IGNPAR                            = 0x4
+	IMAXBEL                           = 0x2000
+	INLCR                             = 0x40
+	INPCK                             = 0x10
+	IN_CLASSA_HOST                    = 0xffffff
+	IN_CLASSA_MAX                     = 0x80
+	IN_CLASSA_NET                     = 0xff000000
+	IN_CLASSA_NSHIFT                  = 0x18
+	IN_CLASSB_HOST                    = 0xffff
+	IN_CLASSB_MAX                     = 0x10000
+	IN_CLASSB_NET                     = 0xffff0000
+	IN_CLASSB_NSHIFT                  = 0x10
+	IN_CLASSC_HOST                    = 0xff
+	IN_CLASSC_NET                     = 0xffffff00
+	IN_CLASSC_NSHIFT                  = 0x8
+	IN_CLASSD_HOST                    = 0xfffffff
+	IN_CLASSD_NET                     = 0xf0000000
+	IN_CLASSD_NSHIFT                  = 0x1c
+	IN_LINKLOCALNETNUM                = 0xa9fe0000
+	IN_LOOPBACKNET                    = 0x7f
+	IPPROTO_3PC                       = 0x22
+	IPPROTO_ADFS                      = 0x44
+	IPPROTO_AH                        = 0x33
+	IPPROTO_AHIP                      = 0x3d
+	IPPROTO_APES                      = 0x63
+	IPPROTO_ARGUS                     = 0xd
+	IPPROTO_AX25                      = 0x5d
+	IPPROTO_BHA                       = 0x31
+	IPPROTO_BLT                       = 0x1e
+	IPPROTO_BRSATMON                  = 0x4c
+	IPPROTO_CFTP                      = 0x3e
+	IPPROTO_CHAOS                     = 0x10
+	IPPROTO_CMTP                      = 0x26
+	IPPROTO_CPHB                      = 0x49
+	IPPROTO_CPNX                      = 0x48
+	IPPROTO_DDP                       = 0x25
+	IPPROTO_DGP                       = 0x56
+	IPPROTO_DIVERT                    = 0xfe
+	IPPROTO_DONE                      = 0x101
+	IPPROTO_DSTOPTS                   = 0x3c
+	IPPROTO_EGP                       = 0x8
+	IPPROTO_EMCON                     = 0xe
+	IPPROTO_ENCAP                     = 0x62
+	IPPROTO_EON                       = 0x50
+	IPPROTO_ESP                       = 0x32
+	IPPROTO_ETHERIP                   = 0x61
+	IPPROTO_FRAGMENT                  = 0x2c
+	IPPROTO_GGP                       = 0x3
+	IPPROTO_GMTP                      = 0x64
+	IPPROTO_GRE                       = 0x2f
+	IPPROTO_HELLO                     = 0x3f
+	IPPROTO_HMP                       = 0x14
+	IPPROTO_HOPOPTS                   = 0x0
+	IPPROTO_ICMP                      = 0x1
+	IPPROTO_ICMPV6                    = 0x3a
+	IPPROTO_IDP                       = 0x16
+	IPPROTO_IDPR                      = 0x23
+	IPPROTO_IDRP                      = 0x2d
+	IPPROTO_IGMP                      = 0x2
+	IPPROTO_IGP                       = 0x55
+	IPPROTO_IGRP                      = 0x58
+	IPPROTO_IL                        = 0x28
+	IPPROTO_INLSP                     = 0x34
+	IPPROTO_INP                       = 0x20
+	IPPROTO_IP                        = 0x0
+	IPPROTO_IPCOMP                    = 0x6c
+	IPPROTO_IPCV                      = 0x47
+	IPPROTO_IPEIP                     = 0x5e
+	IPPROTO_IPIP                      = 0x4
+	IPPROTO_IPPC                      = 0x43
+	IPPROTO_IPV4                      = 0x4
+	IPPROTO_IPV6                      = 0x29
+	IPPROTO_IRTP                      = 0x1c
+	IPPROTO_KRYPTOLAN                 = 0x41
+	IPPROTO_LARP                      = 0x5b
+	IPPROTO_LEAF1                     = 0x19
+	IPPROTO_LEAF2                     = 0x1a
+	IPPROTO_MAX                       = 0x100
+	IPPROTO_MAXID                     = 0x34
+	IPPROTO_MEAS                      = 0x13
+	IPPROTO_MHRP                      = 0x30
+	IPPROTO_MICP                      = 0x5f
+	IPPROTO_MTP                       = 0x5c
+	IPPROTO_MUX                       = 0x12
+	IPPROTO_ND                        = 0x4d
+	IPPROTO_NHRP                      = 0x36
+	IPPROTO_NONE                      = 0x3b
+	IPPROTO_NSP                       = 0x1f
+	IPPROTO_NVPII                     = 0xb
+	IPPROTO_OSPFIGP                   = 0x59
+	IPPROTO_PGM                       = 0x71
+	IPPROTO_PIGP                      = 0x9
+	IPPROTO_PIM                       = 0x67
+	IPPROTO_PRM                       = 0x15
+	IPPROTO_PUP                       = 0xc
+	IPPROTO_PVP                       = 0x4b
+	IPPROTO_RAW                       = 0xff
+	IPPROTO_RCCMON                    = 0xa
+	IPPROTO_RDP                       = 0x1b
+	IPPROTO_ROUTING                   = 0x2b
+	IPPROTO_RSVP                      = 0x2e
+	IPPROTO_RVD                       = 0x42
+	IPPROTO_SATEXPAK                  = 0x40
+	IPPROTO_SATMON                    = 0x45
+	IPPROTO_SCCSP                     = 0x60
+	IPPROTO_SCTP                      = 0x84
+	IPPROTO_SDRP                      = 0x2a
+	IPPROTO_SEP                       = 0x21
+	IPPROTO_SRPC                      = 0x5a
+	IPPROTO_ST                        = 0x7
+	IPPROTO_SVMTP                     = 0x52
+	IPPROTO_SWIPE                     = 0x35
+	IPPROTO_TCF                       = 0x57
+	IPPROTO_TCP                       = 0x6
+	IPPROTO_TP                        = 0x1d
+	IPPROTO_TPXX                      = 0x27
+	IPPROTO_TRUNK1                    = 0x17
+	IPPROTO_TRUNK2                    = 0x18
+	IPPROTO_TTP                       = 0x54
+	IPPROTO_UDP                       = 0x11
+	IPPROTO_VINES                     = 0x53
+	IPPROTO_VISA                      = 0x46
+	IPPROTO_VMTP                      = 0x51
+	IPPROTO_WBEXPAK                   = 0x4f
+	IPPROTO_WBMON                     = 0x4e
+	IPPROTO_WSN                       = 0x4a
+	IPPROTO_XNET                      = 0xf
+	IPPROTO_XTP                       = 0x24
+	IPV6_2292DSTOPTS                  = 0x17
+	IPV6_2292HOPLIMIT                 = 0x14
+	IPV6_2292HOPOPTS                  = 0x16
+	IPV6_2292NEXTHOP                  = 0x15
+	IPV6_2292PKTINFO                  = 0x13
+	IPV6_2292PKTOPTIONS               = 0x19
+	IPV6_2292RTHDR                    = 0x18
+	IPV6_BINDV6ONLY                   = 0x1b
+	IPV6_BOUND_IF                     = 0x7d
+	IPV6_CHECKSUM                     = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS       = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP       = 0x1
+	IPV6_DEFHLIM                      = 0x40
+	IPV6_FAITH                        = 0x1d
+	IPV6_FLOWINFO_MASK                = 0xffffff0f
+	IPV6_FLOWLABEL_MASK               = 0xffff0f00
+	IPV6_FLOW_ECN_MASK                = 0x300
+	IPV6_FRAGTTL                      = 0x3c
+	IPV6_FW_ADD                       = 0x1e
+	IPV6_FW_DEL                       = 0x1f
+	IPV6_FW_FLUSH                     = 0x20
+	IPV6_FW_GET                       = 0x22
+	IPV6_FW_ZERO                      = 0x21
+	IPV6_HLIMDEC                      = 0x1
+	IPV6_IPSEC_POLICY                 = 0x1c
+	IPV6_JOIN_GROUP                   = 0xc
+	IPV6_LEAVE_GROUP                  = 0xd
+	IPV6_MAXHLIM                      = 0xff
+	IPV6_MAXOPTHDR                    = 0x800
+	IPV6_MAXPACKET                    = 0xffff
+	IPV6_MAX_GROUP_SRC_FILTER         = 0x200
+	IPV6_MAX_MEMBERSHIPS              = 0xfff
+	IPV6_MAX_SOCK_SRC_FILTER          = 0x80
+	IPV6_MIN_MEMBERSHIPS              = 0x1f
+	IPV6_MMTU                         = 0x500
+	IPV6_MULTICAST_HOPS               = 0xa
+	IPV6_MULTICAST_IF                 = 0x9
+	IPV6_MULTICAST_LOOP               = 0xb
+	IPV6_PORTRANGE                    = 0xe
+	IPV6_PORTRANGE_DEFAULT            = 0x0
+	IPV6_PORTRANGE_HIGH               = 0x1
+	IPV6_PORTRANGE_LOW                = 0x2
+	IPV6_RECVTCLASS                   = 0x23
+	IPV6_RTHDR_LOOSE                  = 0x0
+	IPV6_RTHDR_STRICT                 = 0x1
+	IPV6_RTHDR_TYPE_0                 = 0x0
+	IPV6_SOCKOPT_RESERVED1            = 0x3
+	IPV6_TCLASS                       = 0x24
+	IPV6_UNICAST_HOPS                 = 0x4
+	IPV6_V6ONLY                       = 0x1b
+	IPV6_VERSION                      = 0x60
+	IPV6_VERSION_MASK                 = 0xf0
+	IP_ADD_MEMBERSHIP                 = 0xc
+	IP_ADD_SOURCE_MEMBERSHIP          = 0x46
+	IP_BLOCK_SOURCE                   = 0x48
+	IP_BOUND_IF                       = 0x19
+	IP_DEFAULT_MULTICAST_LOOP         = 0x1
+	IP_DEFAULT_MULTICAST_TTL          = 0x1
+	IP_DF                             = 0x4000
+	IP_DROP_MEMBERSHIP                = 0xd
+	IP_DROP_SOURCE_MEMBERSHIP         = 0x47
+	IP_DUMMYNET_CONFIGURE             = 0x3c
+	IP_DUMMYNET_DEL                   = 0x3d
+	IP_DUMMYNET_FLUSH                 = 0x3e
+	IP_DUMMYNET_GET                   = 0x40
+	IP_FAITH                          = 0x16
+	IP_FW_ADD                         = 0x28
+	IP_FW_DEL                         = 0x29
+	IP_FW_FLUSH                       = 0x2a
+	IP_FW_GET                         = 0x2c
+	IP_FW_RESETLOG                    = 0x2d
+	IP_FW_ZERO                        = 0x2b
+	IP_HDRINCL                        = 0x2
+	IP_IPSEC_POLICY                   = 0x15
+	IP_MAXPACKET                      = 0xffff
+	IP_MAX_GROUP_SRC_FILTER           = 0x200
+	IP_MAX_MEMBERSHIPS                = 0xfff
+	IP_MAX_SOCK_MUTE_FILTER           = 0x80
+	IP_MAX_SOCK_SRC_FILTER            = 0x80
+	IP_MF                             = 0x2000
+	IP_MIN_MEMBERSHIPS                = 0x1f
+	IP_MSFILTER                       = 0x4a
+	IP_MSS                            = 0x240
+	IP_MULTICAST_IF                   = 0x9
+	IP_MULTICAST_IFINDEX              = 0x42
+	IP_MULTICAST_LOOP                 = 0xb
+	IP_MULTICAST_TTL                  = 0xa
+	IP_MULTICAST_VIF                  = 0xe
+	IP_NAT__XXX                       = 0x37
+	IP_OFFMASK                        = 0x1fff
+	IP_OLD_FW_ADD                     = 0x32
+	IP_OLD_FW_DEL                     = 0x33
+	IP_OLD_FW_FLUSH                   = 0x34
+	IP_OLD_FW_GET                     = 0x36
+	IP_OLD_FW_RESETLOG                = 0x38
+	IP_OLD_FW_ZERO                    = 0x35
+	IP_OPTIONS                        = 0x1
+	IP_PKTINFO                        = 0x1a
+	IP_PORTRANGE                      = 0x13
+	IP_PORTRANGE_DEFAULT              = 0x0
+	IP_PORTRANGE_HIGH                 = 0x1
+	IP_PORTRANGE_LOW                  = 0x2
+	IP_RECVDSTADDR                    = 0x7
+	IP_RECVIF                         = 0x14
+	IP_RECVOPTS                       = 0x5
+	IP_RECVPKTINFO                    = 0x1a
+	IP_RECVRETOPTS                    = 0x6
+	IP_RECVTOS                        = 0x1b
+	IP_RECVTTL                        = 0x18
+	IP_RETOPTS                        = 0x8
+	IP_RF                             = 0x8000
+	IP_RSVP_OFF                       = 0x10
+	IP_RSVP_ON                        = 0xf
+	IP_RSVP_VIF_OFF                   = 0x12
+	IP_RSVP_VIF_ON                    = 0x11
+	IP_STRIPHDR                       = 0x17
+	IP_TOS                            = 0x3
+	IP_TRAFFIC_MGT_BACKGROUND         = 0x41
+	IP_TTL                            = 0x4
+	IP_UNBLOCK_SOURCE                 = 0x49
+	ISIG                              = 0x80
+	ISTRIP                            = 0x20
+	IUTF8                             = 0x4000
+	IXANY                             = 0x800
+	IXOFF                             = 0x400
+	IXON                              = 0x200
+	KERN_HOSTNAME                     = 0xa
+	KERN_OSRELEASE                    = 0x2
+	KERN_OSTYPE                       = 0x1
+	KERN_VERSION                      = 0x4
+	LOCK_EX                           = 0x2
+	LOCK_NB                           = 0x4
+	LOCK_SH                           = 0x1
+	LOCK_UN                           = 0x8
+	MADV_CAN_REUSE                    = 0x9
+	MADV_DONTNEED                     = 0x4
+	MADV_FREE                         = 0x5
+	MADV_FREE_REUSABLE                = 0x7
+	MADV_FREE_REUSE                   = 0x8
+	MADV_NORMAL                       = 0x0
+	MADV_PAGEOUT                      = 0xa
+	MADV_RANDOM                       = 0x1
+	MADV_SEQUENTIAL                   = 0x2
+	MADV_WILLNEED                     = 0x3
+	MADV_ZERO_WIRED_PAGES             = 0x6
+	MAP_ANON                          = 0x1000
+	MAP_ANONYMOUS                     = 0x1000
+	MAP_COPY                          = 0x2
+	MAP_FILE                          = 0x0
+	MAP_FIXED                         = 0x10
+	MAP_HASSEMAPHORE                  = 0x200
+	MAP_JIT                           = 0x800
+	MAP_NOCACHE                       = 0x400
+	MAP_NOEXTEND                      = 0x100
+	MAP_NORESERVE                     = 0x40
+	MAP_PRIVATE                       = 0x2
+	MAP_RENAME                        = 0x20
+	MAP_RESERVED0080                  = 0x80
+	MAP_RESILIENT_CODESIGN            = 0x2000
+	MAP_RESILIENT_MEDIA               = 0x4000
+	MAP_SHARED                        = 0x1
+	MCL_CURRENT                       = 0x1
+	MCL_FUTURE                        = 0x2
+	MNT_ASYNC                         = 0x40
+	MNT_AUTOMOUNTED                   = 0x400000
+	MNT_CMDFLAGS                      = 0xf0000
+	MNT_CPROTECT                      = 0x80
+	MNT_DEFWRITE                      = 0x2000000
+	MNT_DONTBROWSE                    = 0x100000
+	MNT_DOVOLFS                       = 0x8000
+	MNT_DWAIT                         = 0x4
+	MNT_EXPORTED                      = 0x100
+	MNT_FORCE                         = 0x80000
+	MNT_IGNORE_OWNERSHIP              = 0x200000
+	MNT_JOURNALED                     = 0x800000
+	MNT_LOCAL                         = 0x1000
+	MNT_MULTILABEL                    = 0x4000000
+	MNT_NOATIME                       = 0x10000000
+	MNT_NOBLOCK                       = 0x20000
+	MNT_NODEV                         = 0x10
+	MNT_NOEXEC                        = 0x4
+	MNT_NOSUID                        = 0x8
+	MNT_NOUSERXATTR                   = 0x1000000
+	MNT_NOWAIT                        = 0x2
+	MNT_QUARANTINE                    = 0x400
+	MNT_QUOTA                         = 0x2000
+	MNT_RDONLY                        = 0x1
+	MNT_RELOAD                        = 0x40000
+	MNT_ROOTFS                        = 0x4000
+	MNT_SYNCHRONOUS                   = 0x2
+	MNT_UNION                         = 0x20
+	MNT_UNKNOWNPERMISSIONS            = 0x200000
+	MNT_UPDATE                        = 0x10000
+	MNT_VISFLAGMASK                   = 0x17f0f5ff
+	MNT_WAIT                          = 0x1
+	MSG_CTRUNC                        = 0x20
+	MSG_DONTROUTE                     = 0x4
+	MSG_DONTWAIT                      = 0x80
+	MSG_EOF                           = 0x100
+	MSG_EOR                           = 0x8
+	MSG_FLUSH                         = 0x400
+	MSG_HAVEMORE                      = 0x2000
+	MSG_HOLD                          = 0x800
+	MSG_NEEDSA                        = 0x10000
+	MSG_OOB                           = 0x1
+	MSG_PEEK                          = 0x2
+	MSG_RCVMORE                       = 0x4000
+	MSG_SEND                          = 0x1000
+	MSG_TRUNC                         = 0x10
+	MSG_WAITALL                       = 0x40
+	MSG_WAITSTREAM                    = 0x200
+	MS_ASYNC                          = 0x1
+	MS_DEACTIVATE                     = 0x8
+	MS_INVALIDATE                     = 0x2
+	MS_KILLPAGES                      = 0x4
+	MS_SYNC                           = 0x10
+	NAME_MAX                          = 0xff
+	NET_RT_DUMP                       = 0x1
+	NET_RT_DUMP2                      = 0x7
+	NET_RT_FLAGS                      = 0x2
+	NET_RT_IFLIST                     = 0x3
+	NET_RT_IFLIST2                    = 0x6
+	NET_RT_MAXID                      = 0xa
+	NET_RT_STAT                       = 0x4
+	NET_RT_TRASH                      = 0x5
+	NFDBITS                           = 0x20
+	NL0                               = 0x0
+	NL1                               = 0x100
+	NL2                               = 0x200
+	NL3                               = 0x300
+	NLDLY                             = 0x300
+	NOFLSH                            = 0x80000000
+	NOKERNINFO                        = 0x2000000
+	NOTE_ABSOLUTE                     = 0x8
+	NOTE_ATTRIB                       = 0x8
+	NOTE_BACKGROUND                   = 0x40
+	NOTE_CHILD                        = 0x4
+	NOTE_CRITICAL                     = 0x20
+	NOTE_DELETE                       = 0x1
+	NOTE_EXEC                         = 0x20000000
+	NOTE_EXIT                         = 0x80000000
+	NOTE_EXITSTATUS                   = 0x4000000
+	NOTE_EXIT_CSERROR                 = 0x40000
+	NOTE_EXIT_DECRYPTFAIL             = 0x10000
+	NOTE_EXIT_DETAIL                  = 0x2000000
+	NOTE_EXIT_DETAIL_MASK             = 0x70000
+	NOTE_EXIT_MEMORY                  = 0x20000
+	NOTE_EXIT_REPARENTED              = 0x80000
+	NOTE_EXTEND                       = 0x4
+	NOTE_FFAND                        = 0x40000000
+	NOTE_FFCOPY                       = 0xc0000000
+	NOTE_FFCTRLMASK                   = 0xc0000000
+	NOTE_FFLAGSMASK                   = 0xffffff
+	NOTE_FFNOP                        = 0x0
+	NOTE_FFOR                         = 0x80000000
+	NOTE_FORK                         = 0x40000000
+	NOTE_FUNLOCK                      = 0x100
+	NOTE_LEEWAY                       = 0x10
+	NOTE_LINK                         = 0x10
+	NOTE_LOWAT                        = 0x1
+	NOTE_MACH_CONTINUOUS_TIME         = 0x80
+	NOTE_NONE                         = 0x80
+	NOTE_NSECONDS                     = 0x4
+	NOTE_OOB                          = 0x2
+	NOTE_PCTRLMASK                    = -0x100000
+	NOTE_PDATAMASK                    = 0xfffff
+	NOTE_REAP                         = 0x10000000
+	NOTE_RENAME                       = 0x20
+	NOTE_REVOKE                       = 0x40
+	NOTE_SECONDS                      = 0x1
+	NOTE_SIGNAL                       = 0x8000000
+	NOTE_TRACK                        = 0x1
+	NOTE_TRACKERR                     = 0x2
+	NOTE_TRIGGER                      = 0x1000000
+	NOTE_USECONDS                     = 0x2
+	NOTE_VM_ERROR                     = 0x10000000
+	NOTE_VM_PRESSURE                  = 0x80000000
+	NOTE_VM_PRESSURE_SUDDEN_TERMINATE = 0x20000000
+	NOTE_VM_PRESSURE_TERMINATE        = 0x40000000
+	NOTE_WRITE                        = 0x2
+	OCRNL                             = 0x10
+	OFDEL                             = 0x20000
+	OFILL                             = 0x80
+	ONLCR                             = 0x2
+	ONLRET                            = 0x40
+	ONOCR                             = 0x20
+	ONOEOT                            = 0x8
+	OPOST                             = 0x1
+	OXTABS                            = 0x4
+	O_ACCMODE                         = 0x3
+	O_ALERT                           = 0x20000000
+	O_APPEND                          = 0x8
+	O_ASYNC                           = 0x40
+	O_CLOEXEC                         = 0x1000000
+	O_CREAT                           = 0x200
+	O_DIRECTORY                       = 0x100000
+	O_DP_GETRAWENCRYPTED              = 0x1
+	O_DP_GETRAWUNENCRYPTED            = 0x2
+	O_DSYNC                           = 0x400000
+	O_EVTONLY                         = 0x8000
+	O_EXCL                            = 0x800
+	O_EXLOCK                          = 0x20
+	O_FSYNC                           = 0x80
+	O_NDELAY                          = 0x4
+	O_NOCTTY                          = 0x20000
+	O_NOFOLLOW                        = 0x100
+	O_NONBLOCK                        = 0x4
+	O_POPUP                           = 0x80000000
+	O_RDONLY                          = 0x0
+	O_RDWR                            = 0x2
+	O_SHLOCK                          = 0x10
+	O_SYMLINK                         = 0x200000
+	O_SYNC                            = 0x80
+	O_TRUNC                           = 0x400
+	O_WRONLY                          = 0x1
+	PARENB                            = 0x1000
+	PARMRK                            = 0x8
+	PARODD                            = 0x2000
+	PENDIN                            = 0x20000000
+	PRIO_PGRP                         = 0x1
+	PRIO_PROCESS                      = 0x0
+	PRIO_USER                         = 0x2
+	PROT_EXEC                         = 0x4
+	PROT_NONE                         = 0x0
+	PROT_READ                         = 0x1
+	PROT_WRITE                        = 0x2
+	PT_ATTACH                         = 0xa
+	PT_ATTACHEXC                      = 0xe
+	PT_CONTINUE                       = 0x7
+	PT_DENY_ATTACH                    = 0x1f
+	PT_DETACH                         = 0xb
+	PT_FIRSTMACH                      = 0x20
+	PT_FORCEQUOTA                     = 0x1e
+	PT_KILL                           = 0x8
+	PT_READ_D                         = 0x2
+	PT_READ_I                         = 0x1
+	PT_READ_U                         = 0x3
+	PT_SIGEXC                         = 0xc
+	PT_STEP                           = 0x9
+	PT_THUPDATE                       = 0xd
+	PT_TRACE_ME                       = 0x0
+	PT_WRITE_D                        = 0x5
+	PT_WRITE_I                        = 0x4
+	PT_WRITE_U                        = 0x6
+	RLIMIT_AS                         = 0x5
+	RLIMIT_CORE                       = 0x4
+	RLIMIT_CPU                        = 0x0
+	RLIMIT_CPU_USAGE_MONITOR          = 0x2
+	RLIMIT_DATA                       = 0x2
+	RLIMIT_FSIZE                      = 0x1
+	RLIMIT_MEMLOCK                    = 0x6
+	RLIMIT_NOFILE                     = 0x8
+	RLIMIT_NPROC                      = 0x7
+	RLIMIT_RSS                        = 0x5
+	RLIMIT_STACK                      = 0x3
+	RLIM_INFINITY                     = 0x7fffffffffffffff
+	RTAX_AUTHOR                       = 0x6
+	RTAX_BRD                          = 0x7
+	RTAX_DST                          = 0x0
+	RTAX_GATEWAY                      = 0x1
+	RTAX_GENMASK                      = 0x3
+	RTAX_IFA                          = 0x5
+	RTAX_IFP                          = 0x4
+	RTAX_MAX                          = 0x8
+	RTAX_NETMASK                      = 0x2
+	RTA_AUTHOR                        = 0x40
+	RTA_BRD                           = 0x80
+	RTA_DST                           = 0x1
+	RTA_GATEWAY                       = 0x2
+	RTA_GENMASK                       = 0x8
+	RTA_IFA                           = 0x20
+	RTA_IFP                           = 0x10
+	RTA_NETMASK                       = 0x4
+	RTF_BLACKHOLE                     = 0x1000
+	RTF_BROADCAST                     = 0x400000
+	RTF_CLONING                       = 0x100
+	RTF_CONDEMNED                     = 0x2000000
+	RTF_DELCLONE                      = 0x80
+	RTF_DONE                          = 0x40
+	RTF_DYNAMIC                       = 0x10
+	RTF_GATEWAY                       = 0x2
+	RTF_HOST                          = 0x4
+	RTF_IFREF                         = 0x4000000
+	RTF_IFSCOPE                       = 0x1000000
+	RTF_LLINFO                        = 0x400
+	RTF_LOCAL                         = 0x200000
+	RTF_MODIFIED                      = 0x20
+	RTF_MULTICAST                     = 0x800000
+	RTF_NOIFREF                       = 0x2000
+	RTF_PINNED                        = 0x100000
+	RTF_PRCLONING                     = 0x10000
+	RTF_PROTO1                        = 0x8000
+	RTF_PROTO2                        = 0x4000
+	RTF_PROTO3                        = 0x40000
+	RTF_PROXY                         = 0x8000000
+	RTF_REJECT                        = 0x8
+	RTF_ROUTER                        = 0x10000000
+	RTF_STATIC                        = 0x800
+	RTF_UP                            = 0x1
+	RTF_WASCLONED                     = 0x20000
+	RTF_XRESOLVE                      = 0x200
+	RTM_ADD                           = 0x1
+	RTM_CHANGE                        = 0x3
+	RTM_DELADDR                       = 0xd
+	RTM_DELETE                        = 0x2
+	RTM_DELMADDR                      = 0x10
+	RTM_GET                           = 0x4
+	RTM_GET2                          = 0x14
+	RTM_IFINFO                        = 0xe
+	RTM_IFINFO2                       = 0x12
+	RTM_LOCK                          = 0x8
+	RTM_LOSING                        = 0x5
+	RTM_MISS                          = 0x7
+	RTM_NEWADDR                       = 0xc
+	RTM_NEWMADDR                      = 0xf
+	RTM_NEWMADDR2                     = 0x13
+	RTM_OLDADD                        = 0x9
+	RTM_OLDDEL                        = 0xa
+	RTM_REDIRECT                      = 0x6
+	RTM_RESOLVE                       = 0xb
+	RTM_RTTUNIT                       = 0xf4240
+	RTM_VERSION                       = 0x5
+	RTV_EXPIRE                        = 0x4
+	RTV_HOPCOUNT                      = 0x2
+	RTV_MTU                           = 0x1
+	RTV_RPIPE                         = 0x8
+	RTV_RTT                           = 0x40
+	RTV_RTTVAR                        = 0x80
+	RTV_SPIPE                         = 0x10
+	RTV_SSTHRESH                      = 0x20
+	RUSAGE_CHILDREN                   = -0x1
+	RUSAGE_SELF                       = 0x0
+	SCM_CREDS                         = 0x3
+	SCM_RIGHTS                        = 0x1
+	SCM_TIMESTAMP                     = 0x2
+	SCM_TIMESTAMP_MONOTONIC           = 0x4
+	SHUT_RD                           = 0x0
+	SHUT_RDWR                         = 0x2
+	SHUT_WR                           = 0x1
+	SIOCADDMULTI                      = 0x80206931
+	SIOCAIFADDR                       = 0x8040691a
+	SIOCARPIPLL                       = 0xc0206928
+	SIOCATMARK                        = 0x40047307
+	SIOCAUTOADDR                      = 0xc0206926
+	SIOCAUTONETMASK                   = 0x80206927
+	SIOCDELMULTI                      = 0x80206932
+	SIOCDIFADDR                       = 0x80206919
+	SIOCDIFPHYADDR                    = 0x80206941
+	SIOCGDRVSPEC                      = 0xc028697b
+	SIOCGETVLAN                       = 0xc020697f
+	SIOCGHIWAT                        = 0x40047301
+	SIOCGIFADDR                       = 0xc0206921
+	SIOCGIFALTMTU                     = 0xc0206948
+	SIOCGIFASYNCMAP                   = 0xc020697c
+	SIOCGIFBOND                       = 0xc0206947
+	SIOCGIFBRDADDR                    = 0xc0206923
+	SIOCGIFCAP                        = 0xc020695b
+	SIOCGIFCONF                       = 0xc00c6924
+	SIOCGIFDEVMTU                     = 0xc0206944
+	SIOCGIFDSTADDR                    = 0xc0206922
+	SIOCGIFFLAGS                      = 0xc0206911
+	SIOCGIFGENERIC                    = 0xc020693a
+	SIOCGIFKPI                        = 0xc0206987
+	SIOCGIFMAC                        = 0xc0206982
+	SIOCGIFMEDIA                      = 0xc02c6938
+	SIOCGIFMETRIC                     = 0xc0206917
+	SIOCGIFMTU                        = 0xc0206933
+	SIOCGIFNETMASK                    = 0xc0206925
+	SIOCGIFPDSTADDR                   = 0xc0206940
+	SIOCGIFPHYS                       = 0xc0206935
+	SIOCGIFPSRCADDR                   = 0xc020693f
+	SIOCGIFSTATUS                     = 0xc331693d
+	SIOCGIFVLAN                       = 0xc020697f
+	SIOCGIFWAKEFLAGS                  = 0xc0206988
+	SIOCGLOWAT                        = 0x40047303
+	SIOCGPGRP                         = 0x40047309
+	SIOCIFCREATE                      = 0xc0206978
+	SIOCIFCREATE2                     = 0xc020697a
+	SIOCIFDESTROY                     = 0x80206979
+	SIOCIFGCLONERS                    = 0xc0106981
+	SIOCRSLVMULTI                     = 0xc010693b
+	SIOCSDRVSPEC                      = 0x8028697b
+	SIOCSETVLAN                       = 0x8020697e
+	SIOCSHIWAT                        = 0x80047300
+	SIOCSIFADDR                       = 0x8020690c
+	SIOCSIFALTMTU                     = 0x80206945
+	SIOCSIFASYNCMAP                   = 0x8020697d
+	SIOCSIFBOND                       = 0x80206946
+	SIOCSIFBRDADDR                    = 0x80206913
+	SIOCSIFCAP                        = 0x8020695a
+	SIOCSIFDSTADDR                    = 0x8020690e
+	SIOCSIFFLAGS                      = 0x80206910
+	SIOCSIFGENERIC                    = 0x80206939
+	SIOCSIFKPI                        = 0x80206986
+	SIOCSIFLLADDR                     = 0x8020693c
+	SIOCSIFMAC                        = 0x80206983
+	SIOCSIFMEDIA                      = 0xc0206937
+	SIOCSIFMETRIC                     = 0x80206918
+	SIOCSIFMTU                        = 0x80206934
+	SIOCSIFNETMASK                    = 0x80206916
+	SIOCSIFPHYADDR                    = 0x8040693e
+	SIOCSIFPHYS                       = 0x80206936
+	SIOCSIFVLAN                       = 0x8020697e
+	SIOCSLOWAT                        = 0x80047302
+	SIOCSPGRP                         = 0x80047308
+	SOCK_DGRAM                        = 0x2
+	SOCK_MAXADDRLEN                   = 0xff
+	SOCK_RAW                          = 0x3
+	SOCK_RDM                          = 0x4
+	SOCK_SEQPACKET                    = 0x5
+	SOCK_STREAM                       = 0x1
+	SOL_SOCKET                        = 0xffff
+	SOMAXCONN                         = 0x80
+	SO_ACCEPTCONN                     = 0x2
+	SO_BROADCAST                      = 0x20
+	SO_DEBUG                          = 0x1
+	SO_DONTROUTE                      = 0x10
+	SO_DONTTRUNC                      = 0x2000
+	SO_ERROR                          = 0x1007
+	SO_KEEPALIVE                      = 0x8
+	SO_LABEL                          = 0x1010
+	SO_LINGER                         = 0x80
+	SO_LINGER_SEC                     = 0x1080
+	SO_NETSVC_MARKING_LEVEL           = 0x1119
+	SO_NET_SERVICE_TYPE               = 0x1116
+	SO_NKE                            = 0x1021
+	SO_NOADDRERR                      = 0x1023
+	SO_NOSIGPIPE                      = 0x1022
+	SO_NOTIFYCONFLICT                 = 0x1026
+	SO_NP_EXTENSIONS                  = 0x1083
+	SO_NREAD                          = 0x1020
+	SO_NUMRCVPKT                      = 0x1112
+	SO_NWRITE                         = 0x1024
+	SO_OOBINLINE                      = 0x100
+	SO_PEERLABEL                      = 0x1011
+	SO_RANDOMPORT                     = 0x1082
+	SO_RCVBUF                         = 0x1002
+	SO_RCVLOWAT                       = 0x1004
+	SO_RCVTIMEO                       = 0x1006
+	SO_REUSEADDR                      = 0x4
+	SO_REUSEPORT                      = 0x200
+	SO_REUSESHAREUID                  = 0x1025
+	SO_SNDBUF                         = 0x1001
+	SO_SNDLOWAT                       = 0x1003
+	SO_SNDTIMEO                       = 0x1005
+	SO_TIMESTAMP                      = 0x400
+	SO_TIMESTAMP_MONOTONIC            = 0x800
+	SO_TYPE                           = 0x1008
+	SO_UPCALLCLOSEWAIT                = 0x1027
+	SO_USELOOPBACK                    = 0x40
+	SO_WANTMORE                       = 0x4000
+	SO_WANTOOBFLAG                    = 0x8000
+	S_IEXEC                           = 0x40
+	S_IFBLK                           = 0x6000
+	S_IFCHR                           = 0x2000
+	S_IFDIR                           = 0x4000
+	S_IFIFO                           = 0x1000
+	S_IFLNK                           = 0xa000
+	S_IFMT                            = 0xf000
+	S_IFREG                           = 0x8000
+	S_IFSOCK                          = 0xc000
+	S_IFWHT                           = 0xe000
+	S_IREAD                           = 0x100
+	S_IRGRP                           = 0x20
+	S_IROTH                           = 0x4
+	S_IRUSR                           = 0x100
+	S_IRWXG                           = 0x38
+	S_IRWXO                           = 0x7
+	S_IRWXU                           = 0x1c0
+	S_ISGID                           = 0x400
+	S_ISTXT                           = 0x200
+	S_ISUID                           = 0x800
+	S_ISVTX                           = 0x200
+	S_IWGRP                           = 0x10
+	S_IWOTH                           = 0x2
+	S_IWRITE                          = 0x80
+	S_IWUSR                           = 0x80
+	S_IXGRP                           = 0x8
+	S_IXOTH                           = 0x1
+	S_IXUSR                           = 0x40
+	TAB0                              = 0x0
+	TAB1                              = 0x400
+	TAB2                              = 0x800
+	TAB3                              = 0x4
+	TABDLY                            = 0xc04
+	TCIFLUSH                          = 0x1
+	TCIOFF                            = 0x3
+	TCIOFLUSH                         = 0x3
+	TCION                             = 0x4
+	TCOFLUSH                          = 0x2
+	TCOOFF                            = 0x1
+	TCOON                             = 0x2
+	TCP_CONNECTIONTIMEOUT             = 0x20
+	TCP_CONNECTION_INFO               = 0x106
+	TCP_ENABLE_ECN                    = 0x104
+	TCP_FASTOPEN                      = 0x105
+	TCP_KEEPALIVE                     = 0x10
+	TCP_KEEPCNT                       = 0x102
+	TCP_KEEPINTVL                     = 0x101
+	TCP_MAXHLEN                       = 0x3c
+	TCP_MAXOLEN                       = 0x28
+	TCP_MAXSEG                        = 0x2
+	TCP_MAXWIN                        = 0xffff
+	TCP_MAX_SACK                      = 0x4
+	TCP_MAX_WINSHIFT                  = 0xe
+	TCP_MINMSS                        = 0xd8
+	TCP_MSS                           = 0x200
+	TCP_NODELAY                       = 0x1
+	TCP_NOOPT                         = 0x8
+	TCP_NOPUSH                        = 0x4
+	TCP_NOTSENT_LOWAT                 = 0x201
+	TCP_RXT_CONNDROPTIME              = 0x80
+	TCP_RXT_FINDROP                   = 0x100
+	TCP_SENDMOREACKS                  = 0x103
+	TCSAFLUSH                         = 0x2
+	TIOCCBRK                          = 0x2000747a
+	TIOCCDTR                          = 0x20007478
+	TIOCCONS                          = 0x80047462
+	TIOCDCDTIMESTAMP                  = 0x40107458
+	TIOCDRAIN                         = 0x2000745e
+	TIOCDSIMICROCODE                  = 0x20007455
+	TIOCEXCL                          = 0x2000740d
+	TIOCEXT                           = 0x80047460
+	TIOCFLUSH                         = 0x80047410
+	TIOCGDRAINWAIT                    = 0x40047456
+	TIOCGETA                          = 0x40487413
+	TIOCGETD                          = 0x4004741a
+	TIOCGPGRP                         = 0x40047477
+	TIOCGWINSZ                        = 0x40087468
+	TIOCIXOFF                         = 0x20007480
+	TIOCIXON                          = 0x20007481
+	TIOCMBIC                          = 0x8004746b
+	TIOCMBIS                          = 0x8004746c
+	TIOCMGDTRWAIT                     = 0x4004745a
+	TIOCMGET                          = 0x4004746a
+	TIOCMODG                          = 0x40047403
+	TIOCMODS                          = 0x80047404
+	TIOCMSDTRWAIT                     = 0x8004745b
+	TIOCMSET                          = 0x8004746d
+	TIOCM_CAR                         = 0x40
+	TIOCM_CD                          = 0x40
+	TIOCM_CTS                         = 0x20
+	TIOCM_DSR                         = 0x100
+	TIOCM_DTR                         = 0x2
+	TIOCM_LE                          = 0x1
+	TIOCM_RI                          = 0x80
+	TIOCM_RNG                         = 0x80
+	TIOCM_RTS                         = 0x4
+	TIOCM_SR                          = 0x10
+	TIOCM_ST                          = 0x8
+	TIOCNOTTY                         = 0x20007471
+	TIOCNXCL                          = 0x2000740e
+	TIOCOUTQ                          = 0x40047473
+	TIOCPKT                           = 0x80047470
+	TIOCPKT_DATA                      = 0x0
+	TIOCPKT_DOSTOP                    = 0x20
+	TIOCPKT_FLUSHREAD                 = 0x1
+	TIOCPKT_FLUSHWRITE                = 0x2
+	TIOCPKT_IOCTL                     = 0x40
+	TIOCPKT_NOSTOP                    = 0x10
+	TIOCPKT_START                     = 0x8
+	TIOCPKT_STOP                      = 0x4
+	TIOCPTYGNAME                      = 0x40807453
+	TIOCPTYGRANT                      = 0x20007454
+	TIOCPTYUNLK                       = 0x20007452
+	TIOCREMOTE                        = 0x80047469
+	TIOCSBRK                          = 0x2000747b
+	TIOCSCONS                         = 0x20007463
+	TIOCSCTTY                         = 0x20007461
+	TIOCSDRAINWAIT                    = 0x80047457
+	TIOCSDTR                          = 0x20007479
+	TIOCSETA                          = 0x80487414
+	TIOCSETAF                         = 0x80487416
+	TIOCSETAW                         = 0x80487415
+	TIOCSETD                          = 0x8004741b
+	TIOCSIG                           = 0x2000745f
+	TIOCSPGRP                         = 0x80047476
+	TIOCSTART                         = 0x2000746e
+	TIOCSTAT                          = 0x20007465
+	TIOCSTI                           = 0x80017472
+	TIOCSTOP                          = 0x2000746f
+	TIOCSWINSZ                        = 0x80087467
+	TIOCTIMESTAMP                     = 0x40107459
+	TIOCUCNTL                         = 0x80047466
+	TOSTOP                            = 0x400000
+	VDISCARD                          = 0xf
+	VDSUSP                            = 0xb
+	VEOF                              = 0x0
+	VEOL                              = 0x1
+	VEOL2                             = 0x2
+	VERASE                            = 0x3
+	VINTR                             = 0x8
+	VKILL                             = 0x5
+	VLNEXT                            = 0xe
+	VMIN                              = 0x10
+	VM_LOADAVG                        = 0x2
+	VM_MACHFACTOR                     = 0x4
+	VM_MAXID                          = 0x6
+	VM_METER                          = 0x1
+	VM_SWAPUSAGE                      = 0x5
+	VQUIT                             = 0x9
+	VREPRINT                          = 0x6
+	VSTART                            = 0xc
+	VSTATUS                           = 0x12
+	VSTOP                             = 0xd
+	VSUSP                             = 0xa
+	VT0                               = 0x0
+	VT1                               = 0x10000
+	VTDLY                             = 0x10000
+	VTIME                             = 0x11
+	VWERASE                           = 0x4
+	WCONTINUED                        = 0x10
+	WCOREFLAG                         = 0x80
+	WEXITED                           = 0x4
+	WNOHANG                           = 0x1
+	WNOWAIT                           = 0x20
+	WORDSIZE                          = 0x40
+	WSTOPPED                          = 0x8
+	WUNTRACED                         = 0x2
+	XATTR_CREATE                      = 0x2
+	XATTR_NODEFAULT                   = 0x10
+	XATTR_NOFOLLOW                    = 0x1
+	XATTR_NOSECURITY                  = 0x8
+	XATTR_REPLACE                     = 0x4
+	XATTR_SHOWCOMPRESSION             = 0x20
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADARCH        = syscall.Errno(0x56)
+	EBADEXEC        = syscall.Errno(0x55)
+	EBADF           = syscall.Errno(0x9)
+	EBADMACHO       = syscall.Errno(0x58)
+	EBADMSG         = syscall.Errno(0x5e)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x59)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDEVERR         = syscall.Errno(0x53)
+	EDOM            = syscall.Errno(0x21)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x5a)
+	EILSEQ          = syscall.Errno(0x5c)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x6a)
+	ELOOP           = syscall.Errno(0x3e)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	EMULTIHOP       = syscall.Errno(0x5f)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x5d)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODATA         = syscall.Errno(0x60)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOLINK         = syscall.Errno(0x61)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x5b)
+	ENOPOLICY       = syscall.Errno(0x67)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSR           = syscall.Errno(0x62)
+	ENOSTR          = syscall.Errno(0x63)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTRECOVERABLE = syscall.Errno(0x68)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x2d)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x66)
+	EOVERFLOW       = syscall.Errno(0x54)
+	EOWNERDEAD      = syscall.Errno(0x69)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTO          = syscall.Errno(0x64)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	EPWROFF         = syscall.Errno(0x52)
+	EQFULL          = syscall.Errno(0x6a)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHLIBVERS      = syscall.Errno(0x57)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIME           = syscall.Errno(0x65)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "EAGAIN", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "ENOTSUP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "operation timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disc quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC prog. not avail"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EPWROFF", "device power is off"},
+	{83, "EDEVERR", "device error"},
+	{84, "EOVERFLOW", "value too large to be stored in data type"},
+	{85, "EBADEXEC", "bad executable (or shared library)"},
+	{86, "EBADARCH", "bad CPU type in executable"},
+	{87, "ESHLIBVERS", "shared library version mismatch"},
+	{88, "EBADMACHO", "malformed Mach-o file"},
+	{89, "ECANCELED", "operation canceled"},
+	{90, "EIDRM", "identifier removed"},
+	{91, "ENOMSG", "no message of desired type"},
+	{92, "EILSEQ", "illegal byte sequence"},
+	{93, "ENOATTR", "attribute not found"},
+	{94, "EBADMSG", "bad message"},
+	{95, "EMULTIHOP", "EMULTIHOP (Reserved)"},
+	{96, "ENODATA", "no message available on STREAM"},
+	{97, "ENOLINK", "ENOLINK (Reserved)"},
+	{98, "ENOSR", "no STREAM resources"},
+	{99, "ENOSTR", "not a STREAM"},
+	{100, "EPROTO", "protocol error"},
+	{101, "ETIME", "STREAM ioctl timeout"},
+	{102, "EOPNOTSUPP", "operation not supported on socket"},
+	{103, "ENOPOLICY", "policy not found"},
+	{104, "ENOTRECOVERABLE", "state not recoverable"},
+	{105, "EOWNERDEAD", "previous owner died"},
+	{106, "EQFULL", "interface output queue is full"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGABRT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "suspended (signal)"},
+	{18, "SIGTSTP", "suspended"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_darwin_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_darwin_arm64.go
new file mode 100644
index 000000000..0614d26d0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_darwin_arm64.go
@@ -0,0 +1,1786 @@
+// mkerrors.sh -m64
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm64,darwin
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -m64 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                      = 0x10
+	AF_CCITT                          = 0xa
+	AF_CHAOS                          = 0x5
+	AF_CNT                            = 0x15
+	AF_COIP                           = 0x14
+	AF_DATAKIT                        = 0x9
+	AF_DECnet                         = 0xc
+	AF_DLI                            = 0xd
+	AF_E164                           = 0x1c
+	AF_ECMA                           = 0x8
+	AF_HYLINK                         = 0xf
+	AF_IEEE80211                      = 0x25
+	AF_IMPLINK                        = 0x3
+	AF_INET                           = 0x2
+	AF_INET6                          = 0x1e
+	AF_IPX                            = 0x17
+	AF_ISDN                           = 0x1c
+	AF_ISO                            = 0x7
+	AF_LAT                            = 0xe
+	AF_LINK                           = 0x12
+	AF_LOCAL                          = 0x1
+	AF_MAX                            = 0x28
+	AF_NATM                           = 0x1f
+	AF_NDRV                           = 0x1b
+	AF_NETBIOS                        = 0x21
+	AF_NS                             = 0x6
+	AF_OSI                            = 0x7
+	AF_PPP                            = 0x22
+	AF_PUP                            = 0x4
+	AF_RESERVED_36                    = 0x24
+	AF_ROUTE                          = 0x11
+	AF_SIP                            = 0x18
+	AF_SNA                            = 0xb
+	AF_SYSTEM                         = 0x20
+	AF_UNIX                           = 0x1
+	AF_UNSPEC                         = 0x0
+	AF_UTUN                           = 0x26
+	ALTWERASE                         = 0x200
+	ATTR_BIT_MAP_COUNT                = 0x5
+	ATTR_CMN_ACCESSMASK               = 0x20000
+	ATTR_CMN_ACCTIME                  = 0x1000
+	ATTR_CMN_ADDEDTIME                = 0x10000000
+	ATTR_CMN_BKUPTIME                 = 0x2000
+	ATTR_CMN_CHGTIME                  = 0x800
+	ATTR_CMN_CRTIME                   = 0x200
+	ATTR_CMN_DATA_PROTECT_FLAGS       = 0x40000000
+	ATTR_CMN_DEVID                    = 0x2
+	ATTR_CMN_DOCUMENT_ID              = 0x100000
+	ATTR_CMN_ERROR                    = 0x20000000
+	ATTR_CMN_EXTENDED_SECURITY        = 0x400000
+	ATTR_CMN_FILEID                   = 0x2000000
+	ATTR_CMN_FLAGS                    = 0x40000
+	ATTR_CMN_FNDRINFO                 = 0x4000
+	ATTR_CMN_FSID                     = 0x4
+	ATTR_CMN_FULLPATH                 = 0x8000000
+	ATTR_CMN_GEN_COUNT                = 0x80000
+	ATTR_CMN_GRPID                    = 0x10000
+	ATTR_CMN_GRPUUID                  = 0x1000000
+	ATTR_CMN_MODTIME                  = 0x400
+	ATTR_CMN_NAME                     = 0x1
+	ATTR_CMN_NAMEDATTRCOUNT           = 0x80000
+	ATTR_CMN_NAMEDATTRLIST            = 0x100000
+	ATTR_CMN_OBJID                    = 0x20
+	ATTR_CMN_OBJPERMANENTID           = 0x40
+	ATTR_CMN_OBJTAG                   = 0x10
+	ATTR_CMN_OBJTYPE                  = 0x8
+	ATTR_CMN_OWNERID                  = 0x8000
+	ATTR_CMN_PARENTID                 = 0x4000000
+	ATTR_CMN_PAROBJID                 = 0x80
+	ATTR_CMN_RETURNED_ATTRS           = 0x80000000
+	ATTR_CMN_SCRIPT                   = 0x100
+	ATTR_CMN_SETMASK                  = 0x41c7ff00
+	ATTR_CMN_USERACCESS               = 0x200000
+	ATTR_CMN_UUID                     = 0x800000
+	ATTR_CMN_VALIDMASK                = 0xffffffff
+	ATTR_CMN_VOLSETMASK               = 0x6700
+	ATTR_FILE_ALLOCSIZE               = 0x4
+	ATTR_FILE_CLUMPSIZE               = 0x10
+	ATTR_FILE_DATAALLOCSIZE           = 0x400
+	ATTR_FILE_DATAEXTENTS             = 0x800
+	ATTR_FILE_DATALENGTH              = 0x200
+	ATTR_FILE_DEVTYPE                 = 0x20
+	ATTR_FILE_FILETYPE                = 0x40
+	ATTR_FILE_FORKCOUNT               = 0x80
+	ATTR_FILE_FORKLIST                = 0x100
+	ATTR_FILE_IOBLOCKSIZE             = 0x8
+	ATTR_FILE_LINKCOUNT               = 0x1
+	ATTR_FILE_RSRCALLOCSIZE           = 0x2000
+	ATTR_FILE_RSRCEXTENTS             = 0x4000
+	ATTR_FILE_RSRCLENGTH              = 0x1000
+	ATTR_FILE_SETMASK                 = 0x20
+	ATTR_FILE_TOTALSIZE               = 0x2
+	ATTR_FILE_VALIDMASK               = 0x37ff
+	ATTR_VOL_ALLOCATIONCLUMP          = 0x40
+	ATTR_VOL_ATTRIBUTES               = 0x40000000
+	ATTR_VOL_CAPABILITIES             = 0x20000
+	ATTR_VOL_DIRCOUNT                 = 0x400
+	ATTR_VOL_ENCODINGSUSED            = 0x10000
+	ATTR_VOL_FILECOUNT                = 0x200
+	ATTR_VOL_FSTYPE                   = 0x1
+	ATTR_VOL_INFO                     = 0x80000000
+	ATTR_VOL_IOBLOCKSIZE              = 0x80
+	ATTR_VOL_MAXOBJCOUNT              = 0x800
+	ATTR_VOL_MINALLOCATION            = 0x20
+	ATTR_VOL_MOUNTEDDEVICE            = 0x8000
+	ATTR_VOL_MOUNTFLAGS               = 0x4000
+	ATTR_VOL_MOUNTPOINT               = 0x1000
+	ATTR_VOL_NAME                     = 0x2000
+	ATTR_VOL_OBJCOUNT                 = 0x100
+	ATTR_VOL_QUOTA_SIZE               = 0x10000000
+	ATTR_VOL_RESERVED_SIZE            = 0x20000000
+	ATTR_VOL_SETMASK                  = 0x80002000
+	ATTR_VOL_SIGNATURE                = 0x2
+	ATTR_VOL_SIZE                     = 0x4
+	ATTR_VOL_SPACEAVAIL               = 0x10
+	ATTR_VOL_SPACEFREE                = 0x8
+	ATTR_VOL_UUID                     = 0x40000
+	ATTR_VOL_VALIDMASK                = 0xf007ffff
+	B0                                = 0x0
+	B110                              = 0x6e
+	B115200                           = 0x1c200
+	B1200                             = 0x4b0
+	B134                              = 0x86
+	B14400                            = 0x3840
+	B150                              = 0x96
+	B1800                             = 0x708
+	B19200                            = 0x4b00
+	B200                              = 0xc8
+	B230400                           = 0x38400
+	B2400                             = 0x960
+	B28800                            = 0x7080
+	B300                              = 0x12c
+	B38400                            = 0x9600
+	B4800                             = 0x12c0
+	B50                               = 0x32
+	B57600                            = 0xe100
+	B600                              = 0x258
+	B7200                             = 0x1c20
+	B75                               = 0x4b
+	B76800                            = 0x12c00
+	B9600                             = 0x2580
+	BIOCFLUSH                         = 0x20004268
+	BIOCGBLEN                         = 0x40044266
+	BIOCGDLT                          = 0x4004426a
+	BIOCGDLTLIST                      = 0xc00c4279
+	BIOCGETIF                         = 0x4020426b
+	BIOCGHDRCMPLT                     = 0x40044274
+	BIOCGRSIG                         = 0x40044272
+	BIOCGRTIMEOUT                     = 0x4010426e
+	BIOCGSEESENT                      = 0x40044276
+	BIOCGSTATS                        = 0x4008426f
+	BIOCIMMEDIATE                     = 0x80044270
+	BIOCPROMISC                       = 0x20004269
+	BIOCSBLEN                         = 0xc0044266
+	BIOCSDLT                          = 0x80044278
+	BIOCSETF                          = 0x80104267
+	BIOCSETFNR                        = 0x8010427e
+	BIOCSETIF                         = 0x8020426c
+	BIOCSHDRCMPLT                     = 0x80044275
+	BIOCSRSIG                         = 0x80044273
+	BIOCSRTIMEOUT                     = 0x8010426d
+	BIOCSSEESENT                      = 0x80044277
+	BIOCVERSION                       = 0x40044271
+	BPF_A                             = 0x10
+	BPF_ABS                           = 0x20
+	BPF_ADD                           = 0x0
+	BPF_ALIGNMENT                     = 0x4
+	BPF_ALU                           = 0x4
+	BPF_AND                           = 0x50
+	BPF_B                             = 0x10
+	BPF_DIV                           = 0x30
+	BPF_H                             = 0x8
+	BPF_IMM                           = 0x0
+	BPF_IND                           = 0x40
+	BPF_JA                            = 0x0
+	BPF_JEQ                           = 0x10
+	BPF_JGE                           = 0x30
+	BPF_JGT                           = 0x20
+	BPF_JMP                           = 0x5
+	BPF_JSET                          = 0x40
+	BPF_K                             = 0x0
+	BPF_LD                            = 0x0
+	BPF_LDX                           = 0x1
+	BPF_LEN                           = 0x80
+	BPF_LSH                           = 0x60
+	BPF_MAJOR_VERSION                 = 0x1
+	BPF_MAXBUFSIZE                    = 0x80000
+	BPF_MAXINSNS                      = 0x200
+	BPF_MEM                           = 0x60
+	BPF_MEMWORDS                      = 0x10
+	BPF_MINBUFSIZE                    = 0x20
+	BPF_MINOR_VERSION                 = 0x1
+	BPF_MISC                          = 0x7
+	BPF_MSH                           = 0xa0
+	BPF_MUL                           = 0x20
+	BPF_NEG                           = 0x80
+	BPF_OR                            = 0x40
+	BPF_RELEASE                       = 0x30bb6
+	BPF_RET                           = 0x6
+	BPF_RSH                           = 0x70
+	BPF_ST                            = 0x2
+	BPF_STX                           = 0x3
+	BPF_SUB                           = 0x10
+	BPF_TAX                           = 0x0
+	BPF_TXA                           = 0x80
+	BPF_W                             = 0x0
+	BPF_X                             = 0x8
+	BRKINT                            = 0x2
+	BS0                               = 0x0
+	BS1                               = 0x8000
+	BSDLY                             = 0x8000
+	CFLUSH                            = 0xf
+	CLOCAL                            = 0x8000
+	CLOCK_MONOTONIC                   = 0x6
+	CLOCK_MONOTONIC_RAW               = 0x4
+	CLOCK_MONOTONIC_RAW_APPROX        = 0x5
+	CLOCK_PROCESS_CPUTIME_ID          = 0xc
+	CLOCK_REALTIME                    = 0x0
+	CLOCK_THREAD_CPUTIME_ID           = 0x10
+	CLOCK_UPTIME_RAW                  = 0x8
+	CLOCK_UPTIME_RAW_APPROX           = 0x9
+	CLONE_NOFOLLOW                    = 0x1
+	CLONE_NOOWNERCOPY                 = 0x2
+	CR0                               = 0x0
+	CR1                               = 0x1000
+	CR2                               = 0x2000
+	CR3                               = 0x3000
+	CRDLY                             = 0x3000
+	CREAD                             = 0x800
+	CRTSCTS                           = 0x30000
+	CS5                               = 0x0
+	CS6                               = 0x100
+	CS7                               = 0x200
+	CS8                               = 0x300
+	CSIZE                             = 0x300
+	CSTART                            = 0x11
+	CSTATUS                           = 0x14
+	CSTOP                             = 0x13
+	CSTOPB                            = 0x400
+	CSUSP                             = 0x1a
+	CTL_HW                            = 0x6
+	CTL_KERN                          = 0x1
+	CTL_MAXNAME                       = 0xc
+	CTL_NET                           = 0x4
+	DLT_A429                          = 0xb8
+	DLT_A653_ICM                      = 0xb9
+	DLT_AIRONET_HEADER                = 0x78
+	DLT_AOS                           = 0xde
+	DLT_APPLE_IP_OVER_IEEE1394        = 0x8a
+	DLT_ARCNET                        = 0x7
+	DLT_ARCNET_LINUX                  = 0x81
+	DLT_ATM_CLIP                      = 0x13
+	DLT_ATM_RFC1483                   = 0xb
+	DLT_AURORA                        = 0x7e
+	DLT_AX25                          = 0x3
+	DLT_AX25_KISS                     = 0xca
+	DLT_BACNET_MS_TP                  = 0xa5
+	DLT_BLUETOOTH_HCI_H4              = 0xbb
+	DLT_BLUETOOTH_HCI_H4_WITH_PHDR    = 0xc9
+	DLT_CAN20B                        = 0xbe
+	DLT_CAN_SOCKETCAN                 = 0xe3
+	DLT_CHAOS                         = 0x5
+	DLT_CHDLC                         = 0x68
+	DLT_CISCO_IOS                     = 0x76
+	DLT_C_HDLC                        = 0x68
+	DLT_C_HDLC_WITH_DIR               = 0xcd
+	DLT_DBUS                          = 0xe7
+	DLT_DECT                          = 0xdd
+	DLT_DOCSIS                        = 0x8f
+	DLT_DVB_CI                        = 0xeb
+	DLT_ECONET                        = 0x73
+	DLT_EN10MB                        = 0x1
+	DLT_EN3MB                         = 0x2
+	DLT_ENC                           = 0x6d
+	DLT_ERF                           = 0xc5
+	DLT_ERF_ETH                       = 0xaf
+	DLT_ERF_POS                       = 0xb0
+	DLT_FC_2                          = 0xe0
+	DLT_FC_2_WITH_FRAME_DELIMS        = 0xe1
+	DLT_FDDI                          = 0xa
+	DLT_FLEXRAY                       = 0xd2
+	DLT_FRELAY                        = 0x6b
+	DLT_FRELAY_WITH_DIR               = 0xce
+	DLT_GCOM_SERIAL                   = 0xad
+	DLT_GCOM_T1E1                     = 0xac
+	DLT_GPF_F                         = 0xab
+	DLT_GPF_T                         = 0xaa
+	DLT_GPRS_LLC                      = 0xa9
+	DLT_GSMTAP_ABIS                   = 0xda
+	DLT_GSMTAP_UM                     = 0xd9
+	DLT_HHDLC                         = 0x79
+	DLT_IBM_SN                        = 0x92
+	DLT_IBM_SP                        = 0x91
+	DLT_IEEE802                       = 0x6
+	DLT_IEEE802_11                    = 0x69
+	DLT_IEEE802_11_RADIO              = 0x7f
+	DLT_IEEE802_11_RADIO_AVS          = 0xa3
+	DLT_IEEE802_15_4                  = 0xc3
+	DLT_IEEE802_15_4_LINUX            = 0xbf
+	DLT_IEEE802_15_4_NOFCS            = 0xe6
+	DLT_IEEE802_15_4_NONASK_PHY       = 0xd7
+	DLT_IEEE802_16_MAC_CPS            = 0xbc
+	DLT_IEEE802_16_MAC_CPS_RADIO      = 0xc1
+	DLT_IPFILTER                      = 0x74
+	DLT_IPMB                          = 0xc7
+	DLT_IPMB_LINUX                    = 0xd1
+	DLT_IPNET                         = 0xe2
+	DLT_IPOIB                         = 0xf2
+	DLT_IPV4                          = 0xe4
+	DLT_IPV6                          = 0xe5
+	DLT_IP_OVER_FC                    = 0x7a
+	DLT_JUNIPER_ATM1                  = 0x89
+	DLT_JUNIPER_ATM2                  = 0x87
+	DLT_JUNIPER_ATM_CEMIC             = 0xee
+	DLT_JUNIPER_CHDLC                 = 0xb5
+	DLT_JUNIPER_ES                    = 0x84
+	DLT_JUNIPER_ETHER                 = 0xb2
+	DLT_JUNIPER_FIBRECHANNEL          = 0xea
+	DLT_JUNIPER_FRELAY                = 0xb4
+	DLT_JUNIPER_GGSN                  = 0x85
+	DLT_JUNIPER_ISM                   = 0xc2
+	DLT_JUNIPER_MFR                   = 0x86
+	DLT_JUNIPER_MLFR                  = 0x83
+	DLT_JUNIPER_MLPPP                 = 0x82
+	DLT_JUNIPER_MONITOR               = 0xa4
+	DLT_JUNIPER_PIC_PEER              = 0xae
+	DLT_JUNIPER_PPP                   = 0xb3
+	DLT_JUNIPER_PPPOE                 = 0xa7
+	DLT_JUNIPER_PPPOE_ATM             = 0xa8
+	DLT_JUNIPER_SERVICES              = 0x88
+	DLT_JUNIPER_SRX_E2E               = 0xe9
+	DLT_JUNIPER_ST                    = 0xc8
+	DLT_JUNIPER_VP                    = 0xb7
+	DLT_JUNIPER_VS                    = 0xe8
+	DLT_LAPB_WITH_DIR                 = 0xcf
+	DLT_LAPD                          = 0xcb
+	DLT_LIN                           = 0xd4
+	DLT_LINUX_EVDEV                   = 0xd8
+	DLT_LINUX_IRDA                    = 0x90
+	DLT_LINUX_LAPD                    = 0xb1
+	DLT_LINUX_PPP_WITHDIRECTION       = 0xa6
+	DLT_LINUX_SLL                     = 0x71
+	DLT_LOOP                          = 0x6c
+	DLT_LTALK                         = 0x72
+	DLT_MATCHING_MAX                  = 0xf5
+	DLT_MATCHING_MIN                  = 0x68
+	DLT_MFR                           = 0xb6
+	DLT_MOST                          = 0xd3
+	DLT_MPEG_2_TS                     = 0xf3
+	DLT_MPLS                          = 0xdb
+	DLT_MTP2                          = 0x8c
+	DLT_MTP2_WITH_PHDR                = 0x8b
+	DLT_MTP3                          = 0x8d
+	DLT_MUX27010                      = 0xec
+	DLT_NETANALYZER                   = 0xf0
+	DLT_NETANALYZER_TRANSPARENT       = 0xf1
+	DLT_NFC_LLCP                      = 0xf5
+	DLT_NFLOG                         = 0xef
+	DLT_NG40                          = 0xf4
+	DLT_NULL                          = 0x0
+	DLT_PCI_EXP                       = 0x7d
+	DLT_PFLOG                         = 0x75
+	DLT_PFSYNC                        = 0x12
+	DLT_PPI                           = 0xc0
+	DLT_PPP                           = 0x9
+	DLT_PPP_BSDOS                     = 0x10
+	DLT_PPP_ETHER                     = 0x33
+	DLT_PPP_PPPD                      = 0xa6
+	DLT_PPP_SERIAL                    = 0x32
+	DLT_PPP_WITH_DIR                  = 0xcc
+	DLT_PPP_WITH_DIRECTION            = 0xa6
+	DLT_PRISM_HEADER                  = 0x77
+	DLT_PRONET                        = 0x4
+	DLT_RAIF1                         = 0xc6
+	DLT_RAW                           = 0xc
+	DLT_RIO                           = 0x7c
+	DLT_SCCP                          = 0x8e
+	DLT_SITA                          = 0xc4
+	DLT_SLIP                          = 0x8
+	DLT_SLIP_BSDOS                    = 0xf
+	DLT_STANAG_5066_D_PDU             = 0xed
+	DLT_SUNATM                        = 0x7b
+	DLT_SYMANTEC_FIREWALL             = 0x63
+	DLT_TZSP                          = 0x80
+	DLT_USB                           = 0xba
+	DLT_USB_LINUX                     = 0xbd
+	DLT_USB_LINUX_MMAPPED             = 0xdc
+	DLT_USER0                         = 0x93
+	DLT_USER1                         = 0x94
+	DLT_USER10                        = 0x9d
+	DLT_USER11                        = 0x9e
+	DLT_USER12                        = 0x9f
+	DLT_USER13                        = 0xa0
+	DLT_USER14                        = 0xa1
+	DLT_USER15                        = 0xa2
+	DLT_USER2                         = 0x95
+	DLT_USER3                         = 0x96
+	DLT_USER4                         = 0x97
+	DLT_USER5                         = 0x98
+	DLT_USER6                         = 0x99
+	DLT_USER7                         = 0x9a
+	DLT_USER8                         = 0x9b
+	DLT_USER9                         = 0x9c
+	DLT_WIHART                        = 0xdf
+	DLT_X2E_SERIAL                    = 0xd5
+	DLT_X2E_XORAYA                    = 0xd6
+	DT_BLK                            = 0x6
+	DT_CHR                            = 0x2
+	DT_DIR                            = 0x4
+	DT_FIFO                           = 0x1
+	DT_LNK                            = 0xa
+	DT_REG                            = 0x8
+	DT_SOCK                           = 0xc
+	DT_UNKNOWN                        = 0x0
+	DT_WHT                            = 0xe
+	ECHO                              = 0x8
+	ECHOCTL                           = 0x40
+	ECHOE                             = 0x2
+	ECHOK                             = 0x4
+	ECHOKE                            = 0x1
+	ECHONL                            = 0x10
+	ECHOPRT                           = 0x20
+	EVFILT_AIO                        = -0x3
+	EVFILT_EXCEPT                     = -0xf
+	EVFILT_FS                         = -0x9
+	EVFILT_MACHPORT                   = -0x8
+	EVFILT_PROC                       = -0x5
+	EVFILT_READ                       = -0x1
+	EVFILT_SIGNAL                     = -0x6
+	EVFILT_SYSCOUNT                   = 0xf
+	EVFILT_THREADMARKER               = 0xf
+	EVFILT_TIMER                      = -0x7
+	EVFILT_USER                       = -0xa
+	EVFILT_VM                         = -0xc
+	EVFILT_VNODE                      = -0x4
+	EVFILT_WRITE                      = -0x2
+	EV_ADD                            = 0x1
+	EV_CLEAR                          = 0x20
+	EV_DELETE                         = 0x2
+	EV_DISABLE                        = 0x8
+	EV_DISPATCH                       = 0x80
+	EV_DISPATCH2                      = 0x180
+	EV_ENABLE                         = 0x4
+	EV_EOF                            = 0x8000
+	EV_ERROR                          = 0x4000
+	EV_FLAG0                          = 0x1000
+	EV_FLAG1                          = 0x2000
+	EV_ONESHOT                        = 0x10
+	EV_OOBAND                         = 0x2000
+	EV_POLL                           = 0x1000
+	EV_RECEIPT                        = 0x40
+	EV_SYSFLAGS                       = 0xf000
+	EV_UDATA_SPECIFIC                 = 0x100
+	EV_VANISHED                       = 0x200
+	EXTA                              = 0x4b00
+	EXTB                              = 0x9600
+	EXTPROC                           = 0x800
+	FD_CLOEXEC                        = 0x1
+	FD_SETSIZE                        = 0x400
+	FF0                               = 0x0
+	FF1                               = 0x4000
+	FFDLY                             = 0x4000
+	FLUSHO                            = 0x800000
+	FSOPT_ATTR_CMN_EXTENDED           = 0x20
+	FSOPT_NOFOLLOW                    = 0x1
+	FSOPT_NOINMEMUPDATE               = 0x2
+	FSOPT_PACK_INVAL_ATTRS            = 0x8
+	FSOPT_REPORT_FULLSIZE             = 0x4
+	F_ADDFILESIGS                     = 0x3d
+	F_ADDFILESIGS_FOR_DYLD_SIM        = 0x53
+	F_ADDFILESIGS_RETURN              = 0x61
+	F_ADDSIGS                         = 0x3b
+	F_ALLOCATEALL                     = 0x4
+	F_ALLOCATECONTIG                  = 0x2
+	F_BARRIERFSYNC                    = 0x55
+	F_CHECK_LV                        = 0x62
+	F_CHKCLEAN                        = 0x29
+	F_DUPFD                           = 0x0
+	F_DUPFD_CLOEXEC                   = 0x43
+	F_FINDSIGS                        = 0x4e
+	F_FLUSH_DATA                      = 0x28
+	F_FREEZE_FS                       = 0x35
+	F_FULLFSYNC                       = 0x33
+	F_GETCODEDIR                      = 0x48
+	F_GETFD                           = 0x1
+	F_GETFL                           = 0x3
+	F_GETLK                           = 0x7
+	F_GETLKPID                        = 0x42
+	F_GETNOSIGPIPE                    = 0x4a
+	F_GETOWN                          = 0x5
+	F_GETPATH                         = 0x32
+	F_GETPATH_MTMINFO                 = 0x47
+	F_GETPROTECTIONCLASS              = 0x3f
+	F_GETPROTECTIONLEVEL              = 0x4d
+	F_GLOBAL_NOCACHE                  = 0x37
+	F_LOG2PHYS                        = 0x31
+	F_LOG2PHYS_EXT                    = 0x41
+	F_NOCACHE                         = 0x30
+	F_NODIRECT                        = 0x3e
+	F_OK                              = 0x0
+	F_PATHPKG_CHECK                   = 0x34
+	F_PEOFPOSMODE                     = 0x3
+	F_PREALLOCATE                     = 0x2a
+	F_PUNCHHOLE                       = 0x63
+	F_RDADVISE                        = 0x2c
+	F_RDAHEAD                         = 0x2d
+	F_RDLCK                           = 0x1
+	F_SETBACKINGSTORE                 = 0x46
+	F_SETFD                           = 0x2
+	F_SETFL                           = 0x4
+	F_SETLK                           = 0x8
+	F_SETLKW                          = 0x9
+	F_SETLKWTIMEOUT                   = 0xa
+	F_SETNOSIGPIPE                    = 0x49
+	F_SETOWN                          = 0x6
+	F_SETPROTECTIONCLASS              = 0x40
+	F_SETSIZE                         = 0x2b
+	F_SINGLE_WRITER                   = 0x4c
+	F_THAW_FS                         = 0x36
+	F_TRANSCODEKEY                    = 0x4b
+	F_TRIM_ACTIVE_FILE                = 0x64
+	F_UNLCK                           = 0x2
+	F_VOLPOSMODE                      = 0x4
+	F_WRLCK                           = 0x3
+	HUPCL                             = 0x4000
+	HW_MACHINE                        = 0x1
+	ICANON                            = 0x100
+	ICMP6_FILTER                      = 0x12
+	ICRNL                             = 0x100
+	IEXTEN                            = 0x400
+	IFF_ALLMULTI                      = 0x200
+	IFF_ALTPHYS                       = 0x4000
+	IFF_BROADCAST                     = 0x2
+	IFF_DEBUG                         = 0x4
+	IFF_LINK0                         = 0x1000
+	IFF_LINK1                         = 0x2000
+	IFF_LINK2                         = 0x4000
+	IFF_LOOPBACK                      = 0x8
+	IFF_MULTICAST                     = 0x8000
+	IFF_NOARP                         = 0x80
+	IFF_NOTRAILERS                    = 0x20
+	IFF_OACTIVE                       = 0x400
+	IFF_POINTOPOINT                   = 0x10
+	IFF_PROMISC                       = 0x100
+	IFF_RUNNING                       = 0x40
+	IFF_SIMPLEX                       = 0x800
+	IFF_UP                            = 0x1
+	IFNAMSIZ                          = 0x10
+	IFT_1822                          = 0x2
+	IFT_AAL5                          = 0x31
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ATM                           = 0x25
+	IFT_BRIDGE                        = 0xd1
+	IFT_CARP                          = 0xf8
+	IFT_CELLULAR                      = 0xff
+	IFT_CEPT                          = 0x13
+	IFT_DS3                           = 0x1e
+	IFT_ENC                           = 0xf4
+	IFT_EON                           = 0x19
+	IFT_ETHER                         = 0x6
+	IFT_FAITH                         = 0x38
+	IFT_FDDI                          = 0xf
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_GIF                           = 0x37
+	IFT_HDH1822                       = 0x3
+	IFT_HIPPI                         = 0x2f
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IEEE1394                      = 0x90
+	IFT_IEEE8023ADLAG                 = 0x88
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88026                      = 0xa
+	IFT_L2VLAN                        = 0x87
+	IFT_LAPB                          = 0x10
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_NSIP                          = 0x1b
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PDP                           = 0xff
+	IFT_PFLOG                         = 0xf5
+	IFT_PFSYNC                        = 0xf6
+	IFT_PKTAP                         = 0xfe
+	IFT_PPP                           = 0x17
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPVIRTUAL                   = 0x35
+	IFT_PTPSERIAL                     = 0x16
+	IFT_RS232                         = 0x21
+	IFT_SDLC                          = 0x11
+	IFT_SIP                           = 0x1f
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_STARLAN                       = 0xb
+	IFT_STF                           = 0x39
+	IFT_T1                            = 0x12
+	IFT_ULTRA                         = 0x1d
+	IFT_V35                           = 0x2d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+	IGNBRK                            = 0x1
+	IGNCR                             = 0x80
+	IGNPAR                            = 0x4
+	IMAXBEL                           = 0x2000
+	INLCR                             = 0x40
+	INPCK                             = 0x10
+	IN_CLASSA_HOST                    = 0xffffff
+	IN_CLASSA_MAX                     = 0x80
+	IN_CLASSA_NET                     = 0xff000000
+	IN_CLASSA_NSHIFT                  = 0x18
+	IN_CLASSB_HOST                    = 0xffff
+	IN_CLASSB_MAX                     = 0x10000
+	IN_CLASSB_NET                     = 0xffff0000
+	IN_CLASSB_NSHIFT                  = 0x10
+	IN_CLASSC_HOST                    = 0xff
+	IN_CLASSC_NET                     = 0xffffff00
+	IN_CLASSC_NSHIFT                  = 0x8
+	IN_CLASSD_HOST                    = 0xfffffff
+	IN_CLASSD_NET                     = 0xf0000000
+	IN_CLASSD_NSHIFT                  = 0x1c
+	IN_LINKLOCALNETNUM                = 0xa9fe0000
+	IN_LOOPBACKNET                    = 0x7f
+	IPPROTO_3PC                       = 0x22
+	IPPROTO_ADFS                      = 0x44
+	IPPROTO_AH                        = 0x33
+	IPPROTO_AHIP                      = 0x3d
+	IPPROTO_APES                      = 0x63
+	IPPROTO_ARGUS                     = 0xd
+	IPPROTO_AX25                      = 0x5d
+	IPPROTO_BHA                       = 0x31
+	IPPROTO_BLT                       = 0x1e
+	IPPROTO_BRSATMON                  = 0x4c
+	IPPROTO_CFTP                      = 0x3e
+	IPPROTO_CHAOS                     = 0x10
+	IPPROTO_CMTP                      = 0x26
+	IPPROTO_CPHB                      = 0x49
+	IPPROTO_CPNX                      = 0x48
+	IPPROTO_DDP                       = 0x25
+	IPPROTO_DGP                       = 0x56
+	IPPROTO_DIVERT                    = 0xfe
+	IPPROTO_DONE                      = 0x101
+	IPPROTO_DSTOPTS                   = 0x3c
+	IPPROTO_EGP                       = 0x8
+	IPPROTO_EMCON                     = 0xe
+	IPPROTO_ENCAP                     = 0x62
+	IPPROTO_EON                       = 0x50
+	IPPROTO_ESP                       = 0x32
+	IPPROTO_ETHERIP                   = 0x61
+	IPPROTO_FRAGMENT                  = 0x2c
+	IPPROTO_GGP                       = 0x3
+	IPPROTO_GMTP                      = 0x64
+	IPPROTO_GRE                       = 0x2f
+	IPPROTO_HELLO                     = 0x3f
+	IPPROTO_HMP                       = 0x14
+	IPPROTO_HOPOPTS                   = 0x0
+	IPPROTO_ICMP                      = 0x1
+	IPPROTO_ICMPV6                    = 0x3a
+	IPPROTO_IDP                       = 0x16
+	IPPROTO_IDPR                      = 0x23
+	IPPROTO_IDRP                      = 0x2d
+	IPPROTO_IGMP                      = 0x2
+	IPPROTO_IGP                       = 0x55
+	IPPROTO_IGRP                      = 0x58
+	IPPROTO_IL                        = 0x28
+	IPPROTO_INLSP                     = 0x34
+	IPPROTO_INP                       = 0x20
+	IPPROTO_IP                        = 0x0
+	IPPROTO_IPCOMP                    = 0x6c
+	IPPROTO_IPCV                      = 0x47
+	IPPROTO_IPEIP                     = 0x5e
+	IPPROTO_IPIP                      = 0x4
+	IPPROTO_IPPC                      = 0x43
+	IPPROTO_IPV4                      = 0x4
+	IPPROTO_IPV6                      = 0x29
+	IPPROTO_IRTP                      = 0x1c
+	IPPROTO_KRYPTOLAN                 = 0x41
+	IPPROTO_LARP                      = 0x5b
+	IPPROTO_LEAF1                     = 0x19
+	IPPROTO_LEAF2                     = 0x1a
+	IPPROTO_MAX                       = 0x100
+	IPPROTO_MAXID                     = 0x34
+	IPPROTO_MEAS                      = 0x13
+	IPPROTO_MHRP                      = 0x30
+	IPPROTO_MICP                      = 0x5f
+	IPPROTO_MTP                       = 0x5c
+	IPPROTO_MUX                       = 0x12
+	IPPROTO_ND                        = 0x4d
+	IPPROTO_NHRP                      = 0x36
+	IPPROTO_NONE                      = 0x3b
+	IPPROTO_NSP                       = 0x1f
+	IPPROTO_NVPII                     = 0xb
+	IPPROTO_OSPFIGP                   = 0x59
+	IPPROTO_PGM                       = 0x71
+	IPPROTO_PIGP                      = 0x9
+	IPPROTO_PIM                       = 0x67
+	IPPROTO_PRM                       = 0x15
+	IPPROTO_PUP                       = 0xc
+	IPPROTO_PVP                       = 0x4b
+	IPPROTO_RAW                       = 0xff
+	IPPROTO_RCCMON                    = 0xa
+	IPPROTO_RDP                       = 0x1b
+	IPPROTO_ROUTING                   = 0x2b
+	IPPROTO_RSVP                      = 0x2e
+	IPPROTO_RVD                       = 0x42
+	IPPROTO_SATEXPAK                  = 0x40
+	IPPROTO_SATMON                    = 0x45
+	IPPROTO_SCCSP                     = 0x60
+	IPPROTO_SCTP                      = 0x84
+	IPPROTO_SDRP                      = 0x2a
+	IPPROTO_SEP                       = 0x21
+	IPPROTO_SRPC                      = 0x5a
+	IPPROTO_ST                        = 0x7
+	IPPROTO_SVMTP                     = 0x52
+	IPPROTO_SWIPE                     = 0x35
+	IPPROTO_TCF                       = 0x57
+	IPPROTO_TCP                       = 0x6
+	IPPROTO_TP                        = 0x1d
+	IPPROTO_TPXX                      = 0x27
+	IPPROTO_TRUNK1                    = 0x17
+	IPPROTO_TRUNK2                    = 0x18
+	IPPROTO_TTP                       = 0x54
+	IPPROTO_UDP                       = 0x11
+	IPPROTO_VINES                     = 0x53
+	IPPROTO_VISA                      = 0x46
+	IPPROTO_VMTP                      = 0x51
+	IPPROTO_WBEXPAK                   = 0x4f
+	IPPROTO_WBMON                     = 0x4e
+	IPPROTO_WSN                       = 0x4a
+	IPPROTO_XNET                      = 0xf
+	IPPROTO_XTP                       = 0x24
+	IPV6_2292DSTOPTS                  = 0x17
+	IPV6_2292HOPLIMIT                 = 0x14
+	IPV6_2292HOPOPTS                  = 0x16
+	IPV6_2292NEXTHOP                  = 0x15
+	IPV6_2292PKTINFO                  = 0x13
+	IPV6_2292PKTOPTIONS               = 0x19
+	IPV6_2292RTHDR                    = 0x18
+	IPV6_BINDV6ONLY                   = 0x1b
+	IPV6_BOUND_IF                     = 0x7d
+	IPV6_CHECKSUM                     = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS       = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP       = 0x1
+	IPV6_DEFHLIM                      = 0x40
+	IPV6_FAITH                        = 0x1d
+	IPV6_FLOWINFO_MASK                = 0xffffff0f
+	IPV6_FLOWLABEL_MASK               = 0xffff0f00
+	IPV6_FLOW_ECN_MASK                = 0x300
+	IPV6_FRAGTTL                      = 0x3c
+	IPV6_FW_ADD                       = 0x1e
+	IPV6_FW_DEL                       = 0x1f
+	IPV6_FW_FLUSH                     = 0x20
+	IPV6_FW_GET                       = 0x22
+	IPV6_FW_ZERO                      = 0x21
+	IPV6_HLIMDEC                      = 0x1
+	IPV6_IPSEC_POLICY                 = 0x1c
+	IPV6_JOIN_GROUP                   = 0xc
+	IPV6_LEAVE_GROUP                  = 0xd
+	IPV6_MAXHLIM                      = 0xff
+	IPV6_MAXOPTHDR                    = 0x800
+	IPV6_MAXPACKET                    = 0xffff
+	IPV6_MAX_GROUP_SRC_FILTER         = 0x200
+	IPV6_MAX_MEMBERSHIPS              = 0xfff
+	IPV6_MAX_SOCK_SRC_FILTER          = 0x80
+	IPV6_MIN_MEMBERSHIPS              = 0x1f
+	IPV6_MMTU                         = 0x500
+	IPV6_MULTICAST_HOPS               = 0xa
+	IPV6_MULTICAST_IF                 = 0x9
+	IPV6_MULTICAST_LOOP               = 0xb
+	IPV6_PORTRANGE                    = 0xe
+	IPV6_PORTRANGE_DEFAULT            = 0x0
+	IPV6_PORTRANGE_HIGH               = 0x1
+	IPV6_PORTRANGE_LOW                = 0x2
+	IPV6_RECVTCLASS                   = 0x23
+	IPV6_RTHDR_LOOSE                  = 0x0
+	IPV6_RTHDR_STRICT                 = 0x1
+	IPV6_RTHDR_TYPE_0                 = 0x0
+	IPV6_SOCKOPT_RESERVED1            = 0x3
+	IPV6_TCLASS                       = 0x24
+	IPV6_UNICAST_HOPS                 = 0x4
+	IPV6_V6ONLY                       = 0x1b
+	IPV6_VERSION                      = 0x60
+	IPV6_VERSION_MASK                 = 0xf0
+	IP_ADD_MEMBERSHIP                 = 0xc
+	IP_ADD_SOURCE_MEMBERSHIP          = 0x46
+	IP_BLOCK_SOURCE                   = 0x48
+	IP_BOUND_IF                       = 0x19
+	IP_DEFAULT_MULTICAST_LOOP         = 0x1
+	IP_DEFAULT_MULTICAST_TTL          = 0x1
+	IP_DF                             = 0x4000
+	IP_DROP_MEMBERSHIP                = 0xd
+	IP_DROP_SOURCE_MEMBERSHIP         = 0x47
+	IP_DUMMYNET_CONFIGURE             = 0x3c
+	IP_DUMMYNET_DEL                   = 0x3d
+	IP_DUMMYNET_FLUSH                 = 0x3e
+	IP_DUMMYNET_GET                   = 0x40
+	IP_FAITH                          = 0x16
+	IP_FW_ADD                         = 0x28
+	IP_FW_DEL                         = 0x29
+	IP_FW_FLUSH                       = 0x2a
+	IP_FW_GET                         = 0x2c
+	IP_FW_RESETLOG                    = 0x2d
+	IP_FW_ZERO                        = 0x2b
+	IP_HDRINCL                        = 0x2
+	IP_IPSEC_POLICY                   = 0x15
+	IP_MAXPACKET                      = 0xffff
+	IP_MAX_GROUP_SRC_FILTER           = 0x200
+	IP_MAX_MEMBERSHIPS                = 0xfff
+	IP_MAX_SOCK_MUTE_FILTER           = 0x80
+	IP_MAX_SOCK_SRC_FILTER            = 0x80
+	IP_MF                             = 0x2000
+	IP_MIN_MEMBERSHIPS                = 0x1f
+	IP_MSFILTER                       = 0x4a
+	IP_MSS                            = 0x240
+	IP_MULTICAST_IF                   = 0x9
+	IP_MULTICAST_IFINDEX              = 0x42
+	IP_MULTICAST_LOOP                 = 0xb
+	IP_MULTICAST_TTL                  = 0xa
+	IP_MULTICAST_VIF                  = 0xe
+	IP_NAT__XXX                       = 0x37
+	IP_OFFMASK                        = 0x1fff
+	IP_OLD_FW_ADD                     = 0x32
+	IP_OLD_FW_DEL                     = 0x33
+	IP_OLD_FW_FLUSH                   = 0x34
+	IP_OLD_FW_GET                     = 0x36
+	IP_OLD_FW_RESETLOG                = 0x38
+	IP_OLD_FW_ZERO                    = 0x35
+	IP_OPTIONS                        = 0x1
+	IP_PKTINFO                        = 0x1a
+	IP_PORTRANGE                      = 0x13
+	IP_PORTRANGE_DEFAULT              = 0x0
+	IP_PORTRANGE_HIGH                 = 0x1
+	IP_PORTRANGE_LOW                  = 0x2
+	IP_RECVDSTADDR                    = 0x7
+	IP_RECVIF                         = 0x14
+	IP_RECVOPTS                       = 0x5
+	IP_RECVPKTINFO                    = 0x1a
+	IP_RECVRETOPTS                    = 0x6
+	IP_RECVTOS                        = 0x1b
+	IP_RECVTTL                        = 0x18
+	IP_RETOPTS                        = 0x8
+	IP_RF                             = 0x8000
+	IP_RSVP_OFF                       = 0x10
+	IP_RSVP_ON                        = 0xf
+	IP_RSVP_VIF_OFF                   = 0x12
+	IP_RSVP_VIF_ON                    = 0x11
+	IP_STRIPHDR                       = 0x17
+	IP_TOS                            = 0x3
+	IP_TRAFFIC_MGT_BACKGROUND         = 0x41
+	IP_TTL                            = 0x4
+	IP_UNBLOCK_SOURCE                 = 0x49
+	ISIG                              = 0x80
+	ISTRIP                            = 0x20
+	IUTF8                             = 0x4000
+	IXANY                             = 0x800
+	IXOFF                             = 0x400
+	IXON                              = 0x200
+	KERN_HOSTNAME                     = 0xa
+	KERN_OSRELEASE                    = 0x2
+	KERN_OSTYPE                       = 0x1
+	KERN_VERSION                      = 0x4
+	LOCK_EX                           = 0x2
+	LOCK_NB                           = 0x4
+	LOCK_SH                           = 0x1
+	LOCK_UN                           = 0x8
+	MADV_CAN_REUSE                    = 0x9
+	MADV_DONTNEED                     = 0x4
+	MADV_FREE                         = 0x5
+	MADV_FREE_REUSABLE                = 0x7
+	MADV_FREE_REUSE                   = 0x8
+	MADV_NORMAL                       = 0x0
+	MADV_PAGEOUT                      = 0xa
+	MADV_RANDOM                       = 0x1
+	MADV_SEQUENTIAL                   = 0x2
+	MADV_WILLNEED                     = 0x3
+	MADV_ZERO_WIRED_PAGES             = 0x6
+	MAP_ANON                          = 0x1000
+	MAP_ANONYMOUS                     = 0x1000
+	MAP_COPY                          = 0x2
+	MAP_FILE                          = 0x0
+	MAP_FIXED                         = 0x10
+	MAP_HASSEMAPHORE                  = 0x200
+	MAP_JIT                           = 0x800
+	MAP_NOCACHE                       = 0x400
+	MAP_NOEXTEND                      = 0x100
+	MAP_NORESERVE                     = 0x40
+	MAP_PRIVATE                       = 0x2
+	MAP_RENAME                        = 0x20
+	MAP_RESERVED0080                  = 0x80
+	MAP_RESILIENT_CODESIGN            = 0x2000
+	MAP_RESILIENT_MEDIA               = 0x4000
+	MAP_SHARED                        = 0x1
+	MCL_CURRENT                       = 0x1
+	MCL_FUTURE                        = 0x2
+	MNT_ASYNC                         = 0x40
+	MNT_AUTOMOUNTED                   = 0x400000
+	MNT_CMDFLAGS                      = 0xf0000
+	MNT_CPROTECT                      = 0x80
+	MNT_DEFWRITE                      = 0x2000000
+	MNT_DONTBROWSE                    = 0x100000
+	MNT_DOVOLFS                       = 0x8000
+	MNT_DWAIT                         = 0x4
+	MNT_EXPORTED                      = 0x100
+	MNT_FORCE                         = 0x80000
+	MNT_IGNORE_OWNERSHIP              = 0x200000
+	MNT_JOURNALED                     = 0x800000
+	MNT_LOCAL                         = 0x1000
+	MNT_MULTILABEL                    = 0x4000000
+	MNT_NOATIME                       = 0x10000000
+	MNT_NOBLOCK                       = 0x20000
+	MNT_NODEV                         = 0x10
+	MNT_NOEXEC                        = 0x4
+	MNT_NOSUID                        = 0x8
+	MNT_NOUSERXATTR                   = 0x1000000
+	MNT_NOWAIT                        = 0x2
+	MNT_QUARANTINE                    = 0x400
+	MNT_QUOTA                         = 0x2000
+	MNT_RDONLY                        = 0x1
+	MNT_RELOAD                        = 0x40000
+	MNT_ROOTFS                        = 0x4000
+	MNT_SYNCHRONOUS                   = 0x2
+	MNT_UNION                         = 0x20
+	MNT_UNKNOWNPERMISSIONS            = 0x200000
+	MNT_UPDATE                        = 0x10000
+	MNT_VISFLAGMASK                   = 0x17f0f5ff
+	MNT_WAIT                          = 0x1
+	MSG_CTRUNC                        = 0x20
+	MSG_DONTROUTE                     = 0x4
+	MSG_DONTWAIT                      = 0x80
+	MSG_EOF                           = 0x100
+	MSG_EOR                           = 0x8
+	MSG_FLUSH                         = 0x400
+	MSG_HAVEMORE                      = 0x2000
+	MSG_HOLD                          = 0x800
+	MSG_NEEDSA                        = 0x10000
+	MSG_OOB                           = 0x1
+	MSG_PEEK                          = 0x2
+	MSG_RCVMORE                       = 0x4000
+	MSG_SEND                          = 0x1000
+	MSG_TRUNC                         = 0x10
+	MSG_WAITALL                       = 0x40
+	MSG_WAITSTREAM                    = 0x200
+	MS_ASYNC                          = 0x1
+	MS_DEACTIVATE                     = 0x8
+	MS_INVALIDATE                     = 0x2
+	MS_KILLPAGES                      = 0x4
+	MS_SYNC                           = 0x10
+	NAME_MAX                          = 0xff
+	NET_RT_DUMP                       = 0x1
+	NET_RT_DUMP2                      = 0x7
+	NET_RT_FLAGS                      = 0x2
+	NET_RT_IFLIST                     = 0x3
+	NET_RT_IFLIST2                    = 0x6
+	NET_RT_MAXID                      = 0xa
+	NET_RT_STAT                       = 0x4
+	NET_RT_TRASH                      = 0x5
+	NFDBITS                           = 0x20
+	NL0                               = 0x0
+	NL1                               = 0x100
+	NL2                               = 0x200
+	NL3                               = 0x300
+	NLDLY                             = 0x300
+	NOFLSH                            = 0x80000000
+	NOKERNINFO                        = 0x2000000
+	NOTE_ABSOLUTE                     = 0x8
+	NOTE_ATTRIB                       = 0x8
+	NOTE_BACKGROUND                   = 0x40
+	NOTE_CHILD                        = 0x4
+	NOTE_CRITICAL                     = 0x20
+	NOTE_DELETE                       = 0x1
+	NOTE_EXEC                         = 0x20000000
+	NOTE_EXIT                         = 0x80000000
+	NOTE_EXITSTATUS                   = 0x4000000
+	NOTE_EXIT_CSERROR                 = 0x40000
+	NOTE_EXIT_DECRYPTFAIL             = 0x10000
+	NOTE_EXIT_DETAIL                  = 0x2000000
+	NOTE_EXIT_DETAIL_MASK             = 0x70000
+	NOTE_EXIT_MEMORY                  = 0x20000
+	NOTE_EXIT_REPARENTED              = 0x80000
+	NOTE_EXTEND                       = 0x4
+	NOTE_FFAND                        = 0x40000000
+	NOTE_FFCOPY                       = 0xc0000000
+	NOTE_FFCTRLMASK                   = 0xc0000000
+	NOTE_FFLAGSMASK                   = 0xffffff
+	NOTE_FFNOP                        = 0x0
+	NOTE_FFOR                         = 0x80000000
+	NOTE_FORK                         = 0x40000000
+	NOTE_FUNLOCK                      = 0x100
+	NOTE_LEEWAY                       = 0x10
+	NOTE_LINK                         = 0x10
+	NOTE_LOWAT                        = 0x1
+	NOTE_MACH_CONTINUOUS_TIME         = 0x80
+	NOTE_NONE                         = 0x80
+	NOTE_NSECONDS                     = 0x4
+	NOTE_OOB                          = 0x2
+	NOTE_PCTRLMASK                    = -0x100000
+	NOTE_PDATAMASK                    = 0xfffff
+	NOTE_REAP                         = 0x10000000
+	NOTE_RENAME                       = 0x20
+	NOTE_REVOKE                       = 0x40
+	NOTE_SECONDS                      = 0x1
+	NOTE_SIGNAL                       = 0x8000000
+	NOTE_TRACK                        = 0x1
+	NOTE_TRACKERR                     = 0x2
+	NOTE_TRIGGER                      = 0x1000000
+	NOTE_USECONDS                     = 0x2
+	NOTE_VM_ERROR                     = 0x10000000
+	NOTE_VM_PRESSURE                  = 0x80000000
+	NOTE_VM_PRESSURE_SUDDEN_TERMINATE = 0x20000000
+	NOTE_VM_PRESSURE_TERMINATE        = 0x40000000
+	NOTE_WRITE                        = 0x2
+	OCRNL                             = 0x10
+	OFDEL                             = 0x20000
+	OFILL                             = 0x80
+	ONLCR                             = 0x2
+	ONLRET                            = 0x40
+	ONOCR                             = 0x20
+	ONOEOT                            = 0x8
+	OPOST                             = 0x1
+	OXTABS                            = 0x4
+	O_ACCMODE                         = 0x3
+	O_ALERT                           = 0x20000000
+	O_APPEND                          = 0x8
+	O_ASYNC                           = 0x40
+	O_CLOEXEC                         = 0x1000000
+	O_CREAT                           = 0x200
+	O_DIRECTORY                       = 0x100000
+	O_DP_GETRAWENCRYPTED              = 0x1
+	O_DP_GETRAWUNENCRYPTED            = 0x2
+	O_DSYNC                           = 0x400000
+	O_EVTONLY                         = 0x8000
+	O_EXCL                            = 0x800
+	O_EXLOCK                          = 0x20
+	O_FSYNC                           = 0x80
+	O_NDELAY                          = 0x4
+	O_NOCTTY                          = 0x20000
+	O_NOFOLLOW                        = 0x100
+	O_NONBLOCK                        = 0x4
+	O_POPUP                           = 0x80000000
+	O_RDONLY                          = 0x0
+	O_RDWR                            = 0x2
+	O_SHLOCK                          = 0x10
+	O_SYMLINK                         = 0x200000
+	O_SYNC                            = 0x80
+	O_TRUNC                           = 0x400
+	O_WRONLY                          = 0x1
+	PARENB                            = 0x1000
+	PARMRK                            = 0x8
+	PARODD                            = 0x2000
+	PENDIN                            = 0x20000000
+	PRIO_PGRP                         = 0x1
+	PRIO_PROCESS                      = 0x0
+	PRIO_USER                         = 0x2
+	PROT_EXEC                         = 0x4
+	PROT_NONE                         = 0x0
+	PROT_READ                         = 0x1
+	PROT_WRITE                        = 0x2
+	PT_ATTACH                         = 0xa
+	PT_ATTACHEXC                      = 0xe
+	PT_CONTINUE                       = 0x7
+	PT_DENY_ATTACH                    = 0x1f
+	PT_DETACH                         = 0xb
+	PT_FIRSTMACH                      = 0x20
+	PT_FORCEQUOTA                     = 0x1e
+	PT_KILL                           = 0x8
+	PT_READ_D                         = 0x2
+	PT_READ_I                         = 0x1
+	PT_READ_U                         = 0x3
+	PT_SIGEXC                         = 0xc
+	PT_STEP                           = 0x9
+	PT_THUPDATE                       = 0xd
+	PT_TRACE_ME                       = 0x0
+	PT_WRITE_D                        = 0x5
+	PT_WRITE_I                        = 0x4
+	PT_WRITE_U                        = 0x6
+	RLIMIT_AS                         = 0x5
+	RLIMIT_CORE                       = 0x4
+	RLIMIT_CPU                        = 0x0
+	RLIMIT_CPU_USAGE_MONITOR          = 0x2
+	RLIMIT_DATA                       = 0x2
+	RLIMIT_FSIZE                      = 0x1
+	RLIMIT_MEMLOCK                    = 0x6
+	RLIMIT_NOFILE                     = 0x8
+	RLIMIT_NPROC                      = 0x7
+	RLIMIT_RSS                        = 0x5
+	RLIMIT_STACK                      = 0x3
+	RLIM_INFINITY                     = 0x7fffffffffffffff
+	RTAX_AUTHOR                       = 0x6
+	RTAX_BRD                          = 0x7
+	RTAX_DST                          = 0x0
+	RTAX_GATEWAY                      = 0x1
+	RTAX_GENMASK                      = 0x3
+	RTAX_IFA                          = 0x5
+	RTAX_IFP                          = 0x4
+	RTAX_MAX                          = 0x8
+	RTAX_NETMASK                      = 0x2
+	RTA_AUTHOR                        = 0x40
+	RTA_BRD                           = 0x80
+	RTA_DST                           = 0x1
+	RTA_GATEWAY                       = 0x2
+	RTA_GENMASK                       = 0x8
+	RTA_IFA                           = 0x20
+	RTA_IFP                           = 0x10
+	RTA_NETMASK                       = 0x4
+	RTF_BLACKHOLE                     = 0x1000
+	RTF_BROADCAST                     = 0x400000
+	RTF_CLONING                       = 0x100
+	RTF_CONDEMNED                     = 0x2000000
+	RTF_DELCLONE                      = 0x80
+	RTF_DONE                          = 0x40
+	RTF_DYNAMIC                       = 0x10
+	RTF_GATEWAY                       = 0x2
+	RTF_HOST                          = 0x4
+	RTF_IFREF                         = 0x4000000
+	RTF_IFSCOPE                       = 0x1000000
+	RTF_LLINFO                        = 0x400
+	RTF_LOCAL                         = 0x200000
+	RTF_MODIFIED                      = 0x20
+	RTF_MULTICAST                     = 0x800000
+	RTF_NOIFREF                       = 0x2000
+	RTF_PINNED                        = 0x100000
+	RTF_PRCLONING                     = 0x10000
+	RTF_PROTO1                        = 0x8000
+	RTF_PROTO2                        = 0x4000
+	RTF_PROTO3                        = 0x40000
+	RTF_PROXY                         = 0x8000000
+	RTF_REJECT                        = 0x8
+	RTF_ROUTER                        = 0x10000000
+	RTF_STATIC                        = 0x800
+	RTF_UP                            = 0x1
+	RTF_WASCLONED                     = 0x20000
+	RTF_XRESOLVE                      = 0x200
+	RTM_ADD                           = 0x1
+	RTM_CHANGE                        = 0x3
+	RTM_DELADDR                       = 0xd
+	RTM_DELETE                        = 0x2
+	RTM_DELMADDR                      = 0x10
+	RTM_GET                           = 0x4
+	RTM_GET2                          = 0x14
+	RTM_IFINFO                        = 0xe
+	RTM_IFINFO2                       = 0x12
+	RTM_LOCK                          = 0x8
+	RTM_LOSING                        = 0x5
+	RTM_MISS                          = 0x7
+	RTM_NEWADDR                       = 0xc
+	RTM_NEWMADDR                      = 0xf
+	RTM_NEWMADDR2                     = 0x13
+	RTM_OLDADD                        = 0x9
+	RTM_OLDDEL                        = 0xa
+	RTM_REDIRECT                      = 0x6
+	RTM_RESOLVE                       = 0xb
+	RTM_RTTUNIT                       = 0xf4240
+	RTM_VERSION                       = 0x5
+	RTV_EXPIRE                        = 0x4
+	RTV_HOPCOUNT                      = 0x2
+	RTV_MTU                           = 0x1
+	RTV_RPIPE                         = 0x8
+	RTV_RTT                           = 0x40
+	RTV_RTTVAR                        = 0x80
+	RTV_SPIPE                         = 0x10
+	RTV_SSTHRESH                      = 0x20
+	RUSAGE_CHILDREN                   = -0x1
+	RUSAGE_SELF                       = 0x0
+	SCM_CREDS                         = 0x3
+	SCM_RIGHTS                        = 0x1
+	SCM_TIMESTAMP                     = 0x2
+	SCM_TIMESTAMP_MONOTONIC           = 0x4
+	SHUT_RD                           = 0x0
+	SHUT_RDWR                         = 0x2
+	SHUT_WR                           = 0x1
+	SIOCADDMULTI                      = 0x80206931
+	SIOCAIFADDR                       = 0x8040691a
+	SIOCARPIPLL                       = 0xc0206928
+	SIOCATMARK                        = 0x40047307
+	SIOCAUTOADDR                      = 0xc0206926
+	SIOCAUTONETMASK                   = 0x80206927
+	SIOCDELMULTI                      = 0x80206932
+	SIOCDIFADDR                       = 0x80206919
+	SIOCDIFPHYADDR                    = 0x80206941
+	SIOCGDRVSPEC                      = 0xc028697b
+	SIOCGETVLAN                       = 0xc020697f
+	SIOCGHIWAT                        = 0x40047301
+	SIOCGIFADDR                       = 0xc0206921
+	SIOCGIFALTMTU                     = 0xc0206948
+	SIOCGIFASYNCMAP                   = 0xc020697c
+	SIOCGIFBOND                       = 0xc0206947
+	SIOCGIFBRDADDR                    = 0xc0206923
+	SIOCGIFCAP                        = 0xc020695b
+	SIOCGIFCONF                       = 0xc00c6924
+	SIOCGIFDEVMTU                     = 0xc0206944
+	SIOCGIFDSTADDR                    = 0xc0206922
+	SIOCGIFFLAGS                      = 0xc0206911
+	SIOCGIFGENERIC                    = 0xc020693a
+	SIOCGIFKPI                        = 0xc0206987
+	SIOCGIFMAC                        = 0xc0206982
+	SIOCGIFMEDIA                      = 0xc02c6938
+	SIOCGIFMETRIC                     = 0xc0206917
+	SIOCGIFMTU                        = 0xc0206933
+	SIOCGIFNETMASK                    = 0xc0206925
+	SIOCGIFPDSTADDR                   = 0xc0206940
+	SIOCGIFPHYS                       = 0xc0206935
+	SIOCGIFPSRCADDR                   = 0xc020693f
+	SIOCGIFSTATUS                     = 0xc331693d
+	SIOCGIFVLAN                       = 0xc020697f
+	SIOCGIFWAKEFLAGS                  = 0xc0206988
+	SIOCGLOWAT                        = 0x40047303
+	SIOCGPGRP                         = 0x40047309
+	SIOCIFCREATE                      = 0xc0206978
+	SIOCIFCREATE2                     = 0xc020697a
+	SIOCIFDESTROY                     = 0x80206979
+	SIOCIFGCLONERS                    = 0xc0106981
+	SIOCRSLVMULTI                     = 0xc010693b
+	SIOCSDRVSPEC                      = 0x8028697b
+	SIOCSETVLAN                       = 0x8020697e
+	SIOCSHIWAT                        = 0x80047300
+	SIOCSIFADDR                       = 0x8020690c
+	SIOCSIFALTMTU                     = 0x80206945
+	SIOCSIFASYNCMAP                   = 0x8020697d
+	SIOCSIFBOND                       = 0x80206946
+	SIOCSIFBRDADDR                    = 0x80206913
+	SIOCSIFCAP                        = 0x8020695a
+	SIOCSIFDSTADDR                    = 0x8020690e
+	SIOCSIFFLAGS                      = 0x80206910
+	SIOCSIFGENERIC                    = 0x80206939
+	SIOCSIFKPI                        = 0x80206986
+	SIOCSIFLLADDR                     = 0x8020693c
+	SIOCSIFMAC                        = 0x80206983
+	SIOCSIFMEDIA                      = 0xc0206937
+	SIOCSIFMETRIC                     = 0x80206918
+	SIOCSIFMTU                        = 0x80206934
+	SIOCSIFNETMASK                    = 0x80206916
+	SIOCSIFPHYADDR                    = 0x8040693e
+	SIOCSIFPHYS                       = 0x80206936
+	SIOCSIFVLAN                       = 0x8020697e
+	SIOCSLOWAT                        = 0x80047302
+	SIOCSPGRP                         = 0x80047308
+	SOCK_DGRAM                        = 0x2
+	SOCK_MAXADDRLEN                   = 0xff
+	SOCK_RAW                          = 0x3
+	SOCK_RDM                          = 0x4
+	SOCK_SEQPACKET                    = 0x5
+	SOCK_STREAM                       = 0x1
+	SOL_SOCKET                        = 0xffff
+	SOMAXCONN                         = 0x80
+	SO_ACCEPTCONN                     = 0x2
+	SO_BROADCAST                      = 0x20
+	SO_DEBUG                          = 0x1
+	SO_DONTROUTE                      = 0x10
+	SO_DONTTRUNC                      = 0x2000
+	SO_ERROR                          = 0x1007
+	SO_KEEPALIVE                      = 0x8
+	SO_LABEL                          = 0x1010
+	SO_LINGER                         = 0x80
+	SO_LINGER_SEC                     = 0x1080
+	SO_NETSVC_MARKING_LEVEL           = 0x1119
+	SO_NET_SERVICE_TYPE               = 0x1116
+	SO_NKE                            = 0x1021
+	SO_NOADDRERR                      = 0x1023
+	SO_NOSIGPIPE                      = 0x1022
+	SO_NOTIFYCONFLICT                 = 0x1026
+	SO_NP_EXTENSIONS                  = 0x1083
+	SO_NREAD                          = 0x1020
+	SO_NUMRCVPKT                      = 0x1112
+	SO_NWRITE                         = 0x1024
+	SO_OOBINLINE                      = 0x100
+	SO_PEERLABEL                      = 0x1011
+	SO_RANDOMPORT                     = 0x1082
+	SO_RCVBUF                         = 0x1002
+	SO_RCVLOWAT                       = 0x1004
+	SO_RCVTIMEO                       = 0x1006
+	SO_REUSEADDR                      = 0x4
+	SO_REUSEPORT                      = 0x200
+	SO_REUSESHAREUID                  = 0x1025
+	SO_SNDBUF                         = 0x1001
+	SO_SNDLOWAT                       = 0x1003
+	SO_SNDTIMEO                       = 0x1005
+	SO_TIMESTAMP                      = 0x400
+	SO_TIMESTAMP_MONOTONIC            = 0x800
+	SO_TYPE                           = 0x1008
+	SO_UPCALLCLOSEWAIT                = 0x1027
+	SO_USELOOPBACK                    = 0x40
+	SO_WANTMORE                       = 0x4000
+	SO_WANTOOBFLAG                    = 0x8000
+	S_IEXEC                           = 0x40
+	S_IFBLK                           = 0x6000
+	S_IFCHR                           = 0x2000
+	S_IFDIR                           = 0x4000
+	S_IFIFO                           = 0x1000
+	S_IFLNK                           = 0xa000
+	S_IFMT                            = 0xf000
+	S_IFREG                           = 0x8000
+	S_IFSOCK                          = 0xc000
+	S_IFWHT                           = 0xe000
+	S_IREAD                           = 0x100
+	S_IRGRP                           = 0x20
+	S_IROTH                           = 0x4
+	S_IRUSR                           = 0x100
+	S_IRWXG                           = 0x38
+	S_IRWXO                           = 0x7
+	S_IRWXU                           = 0x1c0
+	S_ISGID                           = 0x400
+	S_ISTXT                           = 0x200
+	S_ISUID                           = 0x800
+	S_ISVTX                           = 0x200
+	S_IWGRP                           = 0x10
+	S_IWOTH                           = 0x2
+	S_IWRITE                          = 0x80
+	S_IWUSR                           = 0x80
+	S_IXGRP                           = 0x8
+	S_IXOTH                           = 0x1
+	S_IXUSR                           = 0x40
+	TAB0                              = 0x0
+	TAB1                              = 0x400
+	TAB2                              = 0x800
+	TAB3                              = 0x4
+	TABDLY                            = 0xc04
+	TCIFLUSH                          = 0x1
+	TCIOFF                            = 0x3
+	TCIOFLUSH                         = 0x3
+	TCION                             = 0x4
+	TCOFLUSH                          = 0x2
+	TCOOFF                            = 0x1
+	TCOON                             = 0x2
+	TCP_CONNECTIONTIMEOUT             = 0x20
+	TCP_CONNECTION_INFO               = 0x106
+	TCP_ENABLE_ECN                    = 0x104
+	TCP_FASTOPEN                      = 0x105
+	TCP_KEEPALIVE                     = 0x10
+	TCP_KEEPCNT                       = 0x102
+	TCP_KEEPINTVL                     = 0x101
+	TCP_MAXHLEN                       = 0x3c
+	TCP_MAXOLEN                       = 0x28
+	TCP_MAXSEG                        = 0x2
+	TCP_MAXWIN                        = 0xffff
+	TCP_MAX_SACK                      = 0x4
+	TCP_MAX_WINSHIFT                  = 0xe
+	TCP_MINMSS                        = 0xd8
+	TCP_MSS                           = 0x200
+	TCP_NODELAY                       = 0x1
+	TCP_NOOPT                         = 0x8
+	TCP_NOPUSH                        = 0x4
+	TCP_NOTSENT_LOWAT                 = 0x201
+	TCP_RXT_CONNDROPTIME              = 0x80
+	TCP_RXT_FINDROP                   = 0x100
+	TCP_SENDMOREACKS                  = 0x103
+	TCSAFLUSH                         = 0x2
+	TIOCCBRK                          = 0x2000747a
+	TIOCCDTR                          = 0x20007478
+	TIOCCONS                          = 0x80047462
+	TIOCDCDTIMESTAMP                  = 0x40107458
+	TIOCDRAIN                         = 0x2000745e
+	TIOCDSIMICROCODE                  = 0x20007455
+	TIOCEXCL                          = 0x2000740d
+	TIOCEXT                           = 0x80047460
+	TIOCFLUSH                         = 0x80047410
+	TIOCGDRAINWAIT                    = 0x40047456
+	TIOCGETA                          = 0x40487413
+	TIOCGETD                          = 0x4004741a
+	TIOCGPGRP                         = 0x40047477
+	TIOCGWINSZ                        = 0x40087468
+	TIOCIXOFF                         = 0x20007480
+	TIOCIXON                          = 0x20007481
+	TIOCMBIC                          = 0x8004746b
+	TIOCMBIS                          = 0x8004746c
+	TIOCMGDTRWAIT                     = 0x4004745a
+	TIOCMGET                          = 0x4004746a
+	TIOCMODG                          = 0x40047403
+	TIOCMODS                          = 0x80047404
+	TIOCMSDTRWAIT                     = 0x8004745b
+	TIOCMSET                          = 0x8004746d
+	TIOCM_CAR                         = 0x40
+	TIOCM_CD                          = 0x40
+	TIOCM_CTS                         = 0x20
+	TIOCM_DSR                         = 0x100
+	TIOCM_DTR                         = 0x2
+	TIOCM_LE                          = 0x1
+	TIOCM_RI                          = 0x80
+	TIOCM_RNG                         = 0x80
+	TIOCM_RTS                         = 0x4
+	TIOCM_SR                          = 0x10
+	TIOCM_ST                          = 0x8
+	TIOCNOTTY                         = 0x20007471
+	TIOCNXCL                          = 0x2000740e
+	TIOCOUTQ                          = 0x40047473
+	TIOCPKT                           = 0x80047470
+	TIOCPKT_DATA                      = 0x0
+	TIOCPKT_DOSTOP                    = 0x20
+	TIOCPKT_FLUSHREAD                 = 0x1
+	TIOCPKT_FLUSHWRITE                = 0x2
+	TIOCPKT_IOCTL                     = 0x40
+	TIOCPKT_NOSTOP                    = 0x10
+	TIOCPKT_START                     = 0x8
+	TIOCPKT_STOP                      = 0x4
+	TIOCPTYGNAME                      = 0x40807453
+	TIOCPTYGRANT                      = 0x20007454
+	TIOCPTYUNLK                       = 0x20007452
+	TIOCREMOTE                        = 0x80047469
+	TIOCSBRK                          = 0x2000747b
+	TIOCSCONS                         = 0x20007463
+	TIOCSCTTY                         = 0x20007461
+	TIOCSDRAINWAIT                    = 0x80047457
+	TIOCSDTR                          = 0x20007479
+	TIOCSETA                          = 0x80487414
+	TIOCSETAF                         = 0x80487416
+	TIOCSETAW                         = 0x80487415
+	TIOCSETD                          = 0x8004741b
+	TIOCSIG                           = 0x2000745f
+	TIOCSPGRP                         = 0x80047476
+	TIOCSTART                         = 0x2000746e
+	TIOCSTAT                          = 0x20007465
+	TIOCSTI                           = 0x80017472
+	TIOCSTOP                          = 0x2000746f
+	TIOCSWINSZ                        = 0x80087467
+	TIOCTIMESTAMP                     = 0x40107459
+	TIOCUCNTL                         = 0x80047466
+	TOSTOP                            = 0x400000
+	VDISCARD                          = 0xf
+	VDSUSP                            = 0xb
+	VEOF                              = 0x0
+	VEOL                              = 0x1
+	VEOL2                             = 0x2
+	VERASE                            = 0x3
+	VINTR                             = 0x8
+	VKILL                             = 0x5
+	VLNEXT                            = 0xe
+	VMIN                              = 0x10
+	VM_LOADAVG                        = 0x2
+	VM_MACHFACTOR                     = 0x4
+	VM_MAXID                          = 0x6
+	VM_METER                          = 0x1
+	VM_SWAPUSAGE                      = 0x5
+	VQUIT                             = 0x9
+	VREPRINT                          = 0x6
+	VSTART                            = 0xc
+	VSTATUS                           = 0x12
+	VSTOP                             = 0xd
+	VSUSP                             = 0xa
+	VT0                               = 0x0
+	VT1                               = 0x10000
+	VTDLY                             = 0x10000
+	VTIME                             = 0x11
+	VWERASE                           = 0x4
+	WCONTINUED                        = 0x10
+	WCOREFLAG                         = 0x80
+	WEXITED                           = 0x4
+	WNOHANG                           = 0x1
+	WNOWAIT                           = 0x20
+	WORDSIZE                          = 0x40
+	WSTOPPED                          = 0x8
+	WUNTRACED                         = 0x2
+	XATTR_CREATE                      = 0x2
+	XATTR_NODEFAULT                   = 0x10
+	XATTR_NOFOLLOW                    = 0x1
+	XATTR_NOSECURITY                  = 0x8
+	XATTR_REPLACE                     = 0x4
+	XATTR_SHOWCOMPRESSION             = 0x20
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADARCH        = syscall.Errno(0x56)
+	EBADEXEC        = syscall.Errno(0x55)
+	EBADF           = syscall.Errno(0x9)
+	EBADMACHO       = syscall.Errno(0x58)
+	EBADMSG         = syscall.Errno(0x5e)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x59)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDEVERR         = syscall.Errno(0x53)
+	EDOM            = syscall.Errno(0x21)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x5a)
+	EILSEQ          = syscall.Errno(0x5c)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x6a)
+	ELOOP           = syscall.Errno(0x3e)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	EMULTIHOP       = syscall.Errno(0x5f)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x5d)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODATA         = syscall.Errno(0x60)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOLINK         = syscall.Errno(0x61)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x5b)
+	ENOPOLICY       = syscall.Errno(0x67)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSR           = syscall.Errno(0x62)
+	ENOSTR          = syscall.Errno(0x63)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTRECOVERABLE = syscall.Errno(0x68)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x2d)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x66)
+	EOVERFLOW       = syscall.Errno(0x54)
+	EOWNERDEAD      = syscall.Errno(0x69)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTO          = syscall.Errno(0x64)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	EPWROFF         = syscall.Errno(0x52)
+	EQFULL          = syscall.Errno(0x6a)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHLIBVERS      = syscall.Errno(0x57)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIME           = syscall.Errno(0x65)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "EAGAIN", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "ENOTSUP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "operation timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disc quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC prog. not avail"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EPWROFF", "device power is off"},
+	{83, "EDEVERR", "device error"},
+	{84, "EOVERFLOW", "value too large to be stored in data type"},
+	{85, "EBADEXEC", "bad executable (or shared library)"},
+	{86, "EBADARCH", "bad CPU type in executable"},
+	{87, "ESHLIBVERS", "shared library version mismatch"},
+	{88, "EBADMACHO", "malformed Mach-o file"},
+	{89, "ECANCELED", "operation canceled"},
+	{90, "EIDRM", "identifier removed"},
+	{91, "ENOMSG", "no message of desired type"},
+	{92, "EILSEQ", "illegal byte sequence"},
+	{93, "ENOATTR", "attribute not found"},
+	{94, "EBADMSG", "bad message"},
+	{95, "EMULTIHOP", "EMULTIHOP (Reserved)"},
+	{96, "ENODATA", "no message available on STREAM"},
+	{97, "ENOLINK", "ENOLINK (Reserved)"},
+	{98, "ENOSR", "no STREAM resources"},
+	{99, "ENOSTR", "not a STREAM"},
+	{100, "EPROTO", "protocol error"},
+	{101, "ETIME", "STREAM ioctl timeout"},
+	{102, "EOPNOTSUPP", "operation not supported on socket"},
+	{103, "ENOPOLICY", "policy not found"},
+	{104, "ENOTRECOVERABLE", "state not recoverable"},
+	{105, "EOWNERDEAD", "previous owner died"},
+	{106, "EQFULL", "interface output queue is full"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGABRT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "suspended (signal)"},
+	{18, "SIGTSTP", "suspended"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_dragonfly_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_dragonfly_amd64.go
new file mode 100644
index 000000000..613047174
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_dragonfly_amd64.go
@@ -0,0 +1,1651 @@
+// mkerrors.sh -m64
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,dragonfly
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -m64 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                      = 0x10
+	AF_ATM                            = 0x1e
+	AF_BLUETOOTH                      = 0x21
+	AF_CCITT                          = 0xa
+	AF_CHAOS                          = 0x5
+	AF_CNT                            = 0x15
+	AF_COIP                           = 0x14
+	AF_DATAKIT                        = 0x9
+	AF_DECnet                         = 0xc
+	AF_DLI                            = 0xd
+	AF_E164                           = 0x1a
+	AF_ECMA                           = 0x8
+	AF_HYLINK                         = 0xf
+	AF_IEEE80211                      = 0x23
+	AF_IMPLINK                        = 0x3
+	AF_INET                           = 0x2
+	AF_INET6                          = 0x1c
+	AF_IPX                            = 0x17
+	AF_ISDN                           = 0x1a
+	AF_ISO                            = 0x7
+	AF_LAT                            = 0xe
+	AF_LINK                           = 0x12
+	AF_LOCAL                          = 0x1
+	AF_MAX                            = 0x24
+	AF_MPLS                           = 0x22
+	AF_NATM                           = 0x1d
+	AF_NETBIOS                        = 0x6
+	AF_NETGRAPH                       = 0x20
+	AF_OSI                            = 0x7
+	AF_PUP                            = 0x4
+	AF_ROUTE                          = 0x11
+	AF_SIP                            = 0x18
+	AF_SNA                            = 0xb
+	AF_UNIX                           = 0x1
+	AF_UNSPEC                         = 0x0
+	ALTWERASE                         = 0x200
+	B0                                = 0x0
+	B110                              = 0x6e
+	B115200                           = 0x1c200
+	B1200                             = 0x4b0
+	B134                              = 0x86
+	B14400                            = 0x3840
+	B150                              = 0x96
+	B1800                             = 0x708
+	B19200                            = 0x4b00
+	B200                              = 0xc8
+	B230400                           = 0x38400
+	B2400                             = 0x960
+	B28800                            = 0x7080
+	B300                              = 0x12c
+	B38400                            = 0x9600
+	B4800                             = 0x12c0
+	B50                               = 0x32
+	B57600                            = 0xe100
+	B600                              = 0x258
+	B7200                             = 0x1c20
+	B75                               = 0x4b
+	B76800                            = 0x12c00
+	B9600                             = 0x2580
+	BIOCFLUSH                         = 0x20004268
+	BIOCGBLEN                         = 0x40044266
+	BIOCGDLT                          = 0x4004426a
+	BIOCGDLTLIST                      = 0xc0104279
+	BIOCGETIF                         = 0x4020426b
+	BIOCGHDRCMPLT                     = 0x40044274
+	BIOCGRSIG                         = 0x40044272
+	BIOCGRTIMEOUT                     = 0x4010426e
+	BIOCGSEESENT                      = 0x40044276
+	BIOCGSTATS                        = 0x4008426f
+	BIOCIMMEDIATE                     = 0x80044270
+	BIOCLOCK                          = 0x2000427a
+	BIOCPROMISC                       = 0x20004269
+	BIOCSBLEN                         = 0xc0044266
+	BIOCSDLT                          = 0x80044278
+	BIOCSETF                          = 0x80104267
+	BIOCSETIF                         = 0x8020426c
+	BIOCSETWF                         = 0x8010427b
+	BIOCSHDRCMPLT                     = 0x80044275
+	BIOCSRSIG                         = 0x80044273
+	BIOCSRTIMEOUT                     = 0x8010426d
+	BIOCSSEESENT                      = 0x80044277
+	BIOCVERSION                       = 0x40044271
+	BPF_A                             = 0x10
+	BPF_ABS                           = 0x20
+	BPF_ADD                           = 0x0
+	BPF_ALIGNMENT                     = 0x8
+	BPF_ALU                           = 0x4
+	BPF_AND                           = 0x50
+	BPF_B                             = 0x10
+	BPF_DEFAULTBUFSIZE                = 0x1000
+	BPF_DIV                           = 0x30
+	BPF_H                             = 0x8
+	BPF_IMM                           = 0x0
+	BPF_IND                           = 0x40
+	BPF_JA                            = 0x0
+	BPF_JEQ                           = 0x10
+	BPF_JGE                           = 0x30
+	BPF_JGT                           = 0x20
+	BPF_JMP                           = 0x5
+	BPF_JSET                          = 0x40
+	BPF_K                             = 0x0
+	BPF_LD                            = 0x0
+	BPF_LDX                           = 0x1
+	BPF_LEN                           = 0x80
+	BPF_LSH                           = 0x60
+	BPF_MAJOR_VERSION                 = 0x1
+	BPF_MAXBUFSIZE                    = 0x80000
+	BPF_MAXINSNS                      = 0x200
+	BPF_MAX_CLONES                    = 0x80
+	BPF_MEM                           = 0x60
+	BPF_MEMWORDS                      = 0x10
+	BPF_MINBUFSIZE                    = 0x20
+	BPF_MINOR_VERSION                 = 0x1
+	BPF_MISC                          = 0x7
+	BPF_MSH                           = 0xa0
+	BPF_MUL                           = 0x20
+	BPF_NEG                           = 0x80
+	BPF_OR                            = 0x40
+	BPF_RELEASE                       = 0x30bb6
+	BPF_RET                           = 0x6
+	BPF_RSH                           = 0x70
+	BPF_ST                            = 0x2
+	BPF_STX                           = 0x3
+	BPF_SUB                           = 0x10
+	BPF_TAX                           = 0x0
+	BPF_TXA                           = 0x80
+	BPF_W                             = 0x0
+	BPF_X                             = 0x8
+	BRKINT                            = 0x2
+	CFLUSH                            = 0xf
+	CLOCAL                            = 0x8000
+	CLOCK_MONOTONIC                   = 0x4
+	CLOCK_MONOTONIC_FAST              = 0xc
+	CLOCK_MONOTONIC_PRECISE           = 0xb
+	CLOCK_PROCESS_CPUTIME_ID          = 0xf
+	CLOCK_PROF                        = 0x2
+	CLOCK_REALTIME                    = 0x0
+	CLOCK_REALTIME_FAST               = 0xa
+	CLOCK_REALTIME_PRECISE            = 0x9
+	CLOCK_SECOND                      = 0xd
+	CLOCK_THREAD_CPUTIME_ID           = 0xe
+	CLOCK_UPTIME                      = 0x5
+	CLOCK_UPTIME_FAST                 = 0x8
+	CLOCK_UPTIME_PRECISE              = 0x7
+	CLOCK_VIRTUAL                     = 0x1
+	CREAD                             = 0x800
+	CRTSCTS                           = 0x30000
+	CS5                               = 0x0
+	CS6                               = 0x100
+	CS7                               = 0x200
+	CS8                               = 0x300
+	CSIZE                             = 0x300
+	CSTART                            = 0x11
+	CSTATUS                           = 0x14
+	CSTOP                             = 0x13
+	CSTOPB                            = 0x400
+	CSUSP                             = 0x1a
+	CTL_HW                            = 0x6
+	CTL_KERN                          = 0x1
+	CTL_MAXNAME                       = 0xc
+	CTL_NET                           = 0x4
+	DLT_A429                          = 0xb8
+	DLT_A653_ICM                      = 0xb9
+	DLT_AIRONET_HEADER                = 0x78
+	DLT_APPLE_IP_OVER_IEEE1394        = 0x8a
+	DLT_ARCNET                        = 0x7
+	DLT_ARCNET_LINUX                  = 0x81
+	DLT_ATM_CLIP                      = 0x13
+	DLT_ATM_RFC1483                   = 0xb
+	DLT_AURORA                        = 0x7e
+	DLT_AX25                          = 0x3
+	DLT_AX25_KISS                     = 0xca
+	DLT_BACNET_MS_TP                  = 0xa5
+	DLT_BLUETOOTH_HCI_H4              = 0xbb
+	DLT_BLUETOOTH_HCI_H4_WITH_PHDR    = 0xc9
+	DLT_CAN20B                        = 0xbe
+	DLT_CHAOS                         = 0x5
+	DLT_CHDLC                         = 0x68
+	DLT_CISCO_IOS                     = 0x76
+	DLT_C_HDLC                        = 0x68
+	DLT_C_HDLC_WITH_DIR               = 0xcd
+	DLT_DOCSIS                        = 0x8f
+	DLT_ECONET                        = 0x73
+	DLT_EN10MB                        = 0x1
+	DLT_EN3MB                         = 0x2
+	DLT_ENC                           = 0x6d
+	DLT_ERF                           = 0xc5
+	DLT_ERF_ETH                       = 0xaf
+	DLT_ERF_POS                       = 0xb0
+	DLT_FDDI                          = 0xa
+	DLT_FLEXRAY                       = 0xd2
+	DLT_FRELAY                        = 0x6b
+	DLT_FRELAY_WITH_DIR               = 0xce
+	DLT_GCOM_SERIAL                   = 0xad
+	DLT_GCOM_T1E1                     = 0xac
+	DLT_GPF_F                         = 0xab
+	DLT_GPF_T                         = 0xaa
+	DLT_GPRS_LLC                      = 0xa9
+	DLT_HHDLC                         = 0x79
+	DLT_IBM_SN                        = 0x92
+	DLT_IBM_SP                        = 0x91
+	DLT_IEEE802                       = 0x6
+	DLT_IEEE802_11                    = 0x69
+	DLT_IEEE802_11_RADIO              = 0x7f
+	DLT_IEEE802_11_RADIO_AVS          = 0xa3
+	DLT_IEEE802_15_4                  = 0xc3
+	DLT_IEEE802_15_4_LINUX            = 0xbf
+	DLT_IEEE802_15_4_NONASK_PHY       = 0xd7
+	DLT_IEEE802_16_MAC_CPS            = 0xbc
+	DLT_IEEE802_16_MAC_CPS_RADIO      = 0xc1
+	DLT_IPFILTER                      = 0x74
+	DLT_IPMB                          = 0xc7
+	DLT_IPMB_LINUX                    = 0xd1
+	DLT_IP_OVER_FC                    = 0x7a
+	DLT_JUNIPER_ATM1                  = 0x89
+	DLT_JUNIPER_ATM2                  = 0x87
+	DLT_JUNIPER_CHDLC                 = 0xb5
+	DLT_JUNIPER_ES                    = 0x84
+	DLT_JUNIPER_ETHER                 = 0xb2
+	DLT_JUNIPER_FRELAY                = 0xb4
+	DLT_JUNIPER_GGSN                  = 0x85
+	DLT_JUNIPER_ISM                   = 0xc2
+	DLT_JUNIPER_MFR                   = 0x86
+	DLT_JUNIPER_MLFR                  = 0x83
+	DLT_JUNIPER_MLPPP                 = 0x82
+	DLT_JUNIPER_MONITOR               = 0xa4
+	DLT_JUNIPER_PIC_PEER              = 0xae
+	DLT_JUNIPER_PPP                   = 0xb3
+	DLT_JUNIPER_PPPOE                 = 0xa7
+	DLT_JUNIPER_PPPOE_ATM             = 0xa8
+	DLT_JUNIPER_SERVICES              = 0x88
+	DLT_JUNIPER_ST                    = 0xc8
+	DLT_JUNIPER_VP                    = 0xb7
+	DLT_LAPB_WITH_DIR                 = 0xcf
+	DLT_LAPD                          = 0xcb
+	DLT_LIN                           = 0xd4
+	DLT_LINUX_IRDA                    = 0x90
+	DLT_LINUX_LAPD                    = 0xb1
+	DLT_LINUX_SLL                     = 0x71
+	DLT_LOOP                          = 0x6c
+	DLT_LTALK                         = 0x72
+	DLT_MFR                           = 0xb6
+	DLT_MOST                          = 0xd3
+	DLT_MTP2                          = 0x8c
+	DLT_MTP2_WITH_PHDR                = 0x8b
+	DLT_MTP3                          = 0x8d
+	DLT_NULL                          = 0x0
+	DLT_PCI_EXP                       = 0x7d
+	DLT_PFLOG                         = 0x75
+	DLT_PFSYNC                        = 0x12
+	DLT_PPI                           = 0xc0
+	DLT_PPP                           = 0x9
+	DLT_PPP_BSDOS                     = 0x10
+	DLT_PPP_ETHER                     = 0x33
+	DLT_PPP_PPPD                      = 0xa6
+	DLT_PPP_SERIAL                    = 0x32
+	DLT_PPP_WITH_DIR                  = 0xcc
+	DLT_PRISM_HEADER                  = 0x77
+	DLT_PRONET                        = 0x4
+	DLT_RAIF1                         = 0xc6
+	DLT_RAW                           = 0xc
+	DLT_REDBACK_SMARTEDGE             = 0x20
+	DLT_RIO                           = 0x7c
+	DLT_SCCP                          = 0x8e
+	DLT_SITA                          = 0xc4
+	DLT_SLIP                          = 0x8
+	DLT_SLIP_BSDOS                    = 0xf
+	DLT_SUNATM                        = 0x7b
+	DLT_SYMANTEC_FIREWALL             = 0x63
+	DLT_TZSP                          = 0x80
+	DLT_USB                           = 0xba
+	DLT_USB_LINUX                     = 0xbd
+	DLT_X2E_SERIAL                    = 0xd5
+	DLT_X2E_XORAYA                    = 0xd6
+	DT_BLK                            = 0x6
+	DT_CHR                            = 0x2
+	DT_DBF                            = 0xf
+	DT_DIR                            = 0x4
+	DT_FIFO                           = 0x1
+	DT_LNK                            = 0xa
+	DT_REG                            = 0x8
+	DT_SOCK                           = 0xc
+	DT_UNKNOWN                        = 0x0
+	DT_WHT                            = 0xe
+	ECHO                              = 0x8
+	ECHOCTL                           = 0x40
+	ECHOE                             = 0x2
+	ECHOK                             = 0x4
+	ECHOKE                            = 0x1
+	ECHONL                            = 0x10
+	ECHOPRT                           = 0x20
+	EVFILT_AIO                        = -0x3
+	EVFILT_EXCEPT                     = -0x8
+	EVFILT_FS                         = -0xa
+	EVFILT_MARKER                     = 0xf
+	EVFILT_PROC                       = -0x5
+	EVFILT_READ                       = -0x1
+	EVFILT_SIGNAL                     = -0x6
+	EVFILT_SYSCOUNT                   = 0xa
+	EVFILT_TIMER                      = -0x7
+	EVFILT_USER                       = -0x9
+	EVFILT_VNODE                      = -0x4
+	EVFILT_WRITE                      = -0x2
+	EV_ADD                            = 0x1
+	EV_CLEAR                          = 0x20
+	EV_DELETE                         = 0x2
+	EV_DISABLE                        = 0x8
+	EV_DISPATCH                       = 0x80
+	EV_ENABLE                         = 0x4
+	EV_EOF                            = 0x8000
+	EV_ERROR                          = 0x4000
+	EV_FLAG1                          = 0x2000
+	EV_NODATA                         = 0x1000
+	EV_ONESHOT                        = 0x10
+	EV_RECEIPT                        = 0x40
+	EV_SYSFLAGS                       = 0xf000
+	EXTA                              = 0x4b00
+	EXTB                              = 0x9600
+	EXTEXIT_LWP                       = 0x10000
+	EXTEXIT_PROC                      = 0x0
+	EXTEXIT_SETINT                    = 0x1
+	EXTEXIT_SIMPLE                    = 0x0
+	EXTPROC                           = 0x800
+	FD_CLOEXEC                        = 0x1
+	FD_SETSIZE                        = 0x400
+	FLUSHO                            = 0x800000
+	F_DUP2FD                          = 0xa
+	F_DUP2FD_CLOEXEC                  = 0x12
+	F_DUPFD                           = 0x0
+	F_DUPFD_CLOEXEC                   = 0x11
+	F_GETFD                           = 0x1
+	F_GETFL                           = 0x3
+	F_GETLK                           = 0x7
+	F_GETOWN                          = 0x5
+	F_OK                              = 0x0
+	F_RDLCK                           = 0x1
+	F_SETFD                           = 0x2
+	F_SETFL                           = 0x4
+	F_SETLK                           = 0x8
+	F_SETLKW                          = 0x9
+	F_SETOWN                          = 0x6
+	F_UNLCK                           = 0x2
+	F_WRLCK                           = 0x3
+	HUPCL                             = 0x4000
+	HW_MACHINE                        = 0x1
+	ICANON                            = 0x100
+	ICMP6_FILTER                      = 0x12
+	ICRNL                             = 0x100
+	IEXTEN                            = 0x400
+	IFAN_ARRIVAL                      = 0x0
+	IFAN_DEPARTURE                    = 0x1
+	IFF_ALLMULTI                      = 0x200
+	IFF_ALTPHYS                       = 0x4000
+	IFF_BROADCAST                     = 0x2
+	IFF_CANTCHANGE                    = 0x118e72
+	IFF_DEBUG                         = 0x4
+	IFF_LINK0                         = 0x1000
+	IFF_LINK1                         = 0x2000
+	IFF_LINK2                         = 0x4000
+	IFF_LOOPBACK                      = 0x8
+	IFF_MONITOR                       = 0x40000
+	IFF_MULTICAST                     = 0x8000
+	IFF_NOARP                         = 0x80
+	IFF_NPOLLING                      = 0x100000
+	IFF_OACTIVE                       = 0x400
+	IFF_OACTIVE_COMPAT                = 0x400
+	IFF_POINTOPOINT                   = 0x10
+	IFF_POLLING                       = 0x10000
+	IFF_POLLING_COMPAT                = 0x10000
+	IFF_PPROMISC                      = 0x20000
+	IFF_PROMISC                       = 0x100
+	IFF_RUNNING                       = 0x40
+	IFF_SIMPLEX                       = 0x800
+	IFF_SMART                         = 0x20
+	IFF_STATICARP                     = 0x80000
+	IFF_UP                            = 0x1
+	IFNAMSIZ                          = 0x10
+	IFT_1822                          = 0x2
+	IFT_A12MPPSWITCH                  = 0x82
+	IFT_AAL2                          = 0xbb
+	IFT_AAL5                          = 0x31
+	IFT_ADSL                          = 0x5e
+	IFT_AFLANE8023                    = 0x3b
+	IFT_AFLANE8025                    = 0x3c
+	IFT_ARAP                          = 0x58
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ASYNC                         = 0x54
+	IFT_ATM                           = 0x25
+	IFT_ATMDXI                        = 0x69
+	IFT_ATMFUNI                       = 0x6a
+	IFT_ATMIMA                        = 0x6b
+	IFT_ATMLOGICAL                    = 0x50
+	IFT_ATMRADIO                      = 0xbd
+	IFT_ATMSUBINTERFACE               = 0x86
+	IFT_ATMVCIENDPT                   = 0xc2
+	IFT_ATMVIRTUAL                    = 0x95
+	IFT_BGPPOLICYACCOUNTING           = 0xa2
+	IFT_BRIDGE                        = 0xd1
+	IFT_BSC                           = 0x53
+	IFT_CARP                          = 0xf8
+	IFT_CCTEMUL                       = 0x3d
+	IFT_CEPT                          = 0x13
+	IFT_CES                           = 0x85
+	IFT_CHANNEL                       = 0x46
+	IFT_CNR                           = 0x55
+	IFT_COFFEE                        = 0x84
+	IFT_COMPOSITELINK                 = 0x9b
+	IFT_DCN                           = 0x8d
+	IFT_DIGITALPOWERLINE              = 0x8a
+	IFT_DIGITALWRAPPEROVERHEADCHANNEL = 0xba
+	IFT_DLSW                          = 0x4a
+	IFT_DOCSCABLEDOWNSTREAM           = 0x80
+	IFT_DOCSCABLEMACLAYER             = 0x7f
+	IFT_DOCSCABLEUPSTREAM             = 0x81
+	IFT_DS0                           = 0x51
+	IFT_DS0BUNDLE                     = 0x52
+	IFT_DS1FDL                        = 0xaa
+	IFT_DS3                           = 0x1e
+	IFT_DTM                           = 0x8c
+	IFT_DVBASILN                      = 0xac
+	IFT_DVBASIOUT                     = 0xad
+	IFT_DVBRCCDOWNSTREAM              = 0x93
+	IFT_DVBRCCMACLAYER                = 0x92
+	IFT_DVBRCCUPSTREAM                = 0x94
+	IFT_ENC                           = 0xf4
+	IFT_EON                           = 0x19
+	IFT_EPLRS                         = 0x57
+	IFT_ESCON                         = 0x49
+	IFT_ETHER                         = 0x6
+	IFT_FAITH                         = 0xf2
+	IFT_FAST                          = 0x7d
+	IFT_FASTETHER                     = 0x3e
+	IFT_FASTETHERFX                   = 0x45
+	IFT_FDDI                          = 0xf
+	IFT_FIBRECHANNEL                  = 0x38
+	IFT_FRAMERELAYINTERCONNECT        = 0x3a
+	IFT_FRAMERELAYMPI                 = 0x5c
+	IFT_FRDLCIENDPT                   = 0xc1
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_FRF16MFRBUNDLE                = 0xa3
+	IFT_FRFORWARD                     = 0x9e
+	IFT_G703AT2MB                     = 0x43
+	IFT_G703AT64K                     = 0x42
+	IFT_GIF                           = 0xf0
+	IFT_GIGABITETHERNET               = 0x75
+	IFT_GR303IDT                      = 0xb2
+	IFT_GR303RDT                      = 0xb1
+	IFT_H323GATEKEEPER                = 0xa4
+	IFT_H323PROXY                     = 0xa5
+	IFT_HDH1822                       = 0x3
+	IFT_HDLC                          = 0x76
+	IFT_HDSL2                         = 0xa8
+	IFT_HIPERLAN2                     = 0xb7
+	IFT_HIPPI                         = 0x2f
+	IFT_HIPPIINTERFACE                = 0x39
+	IFT_HOSTPAD                       = 0x5a
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IBM370PARCHAN                 = 0x48
+	IFT_IDSL                          = 0x9a
+	IFT_IEEE1394                      = 0x90
+	IFT_IEEE80211                     = 0x47
+	IFT_IEEE80212                     = 0x37
+	IFT_IEEE8023ADLAG                 = 0xa1
+	IFT_IFGSN                         = 0x91
+	IFT_IMT                           = 0xbe
+	IFT_INTERLEAVE                    = 0x7c
+	IFT_IP                            = 0x7e
+	IFT_IPFORWARD                     = 0x8e
+	IFT_IPOVERATM                     = 0x72
+	IFT_IPOVERCDLC                    = 0x6d
+	IFT_IPOVERCLAW                    = 0x6e
+	IFT_IPSWITCH                      = 0x4e
+	IFT_ISDN                          = 0x3f
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISDNS                         = 0x4b
+	IFT_ISDNU                         = 0x4c
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88025CRFPINT               = 0x62
+	IFT_ISO88025DTR                   = 0x56
+	IFT_ISO88025FIBER                 = 0x73
+	IFT_ISO88026                      = 0xa
+	IFT_ISUP                          = 0xb3
+	IFT_L2VLAN                        = 0x87
+	IFT_L3IPVLAN                      = 0x88
+	IFT_L3IPXVLAN                     = 0x89
+	IFT_LAPB                          = 0x10
+	IFT_LAPD                          = 0x4d
+	IFT_LAPF                          = 0x77
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MEDIAMAILOVERIP               = 0x8b
+	IFT_MFSIGLINK                     = 0xa7
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_MPC                           = 0x71
+	IFT_MPLS                          = 0xa6
+	IFT_MPLSTUNNEL                    = 0x96
+	IFT_MSDSL                         = 0x8f
+	IFT_MVL                           = 0xbf
+	IFT_MYRINET                       = 0x63
+	IFT_NFAS                          = 0xaf
+	IFT_NSIP                          = 0x1b
+	IFT_OPTICALCHANNEL                = 0xc3
+	IFT_OPTICALTRANSPORT              = 0xc4
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PFLOG                         = 0xf5
+	IFT_PFSYNC                        = 0xf6
+	IFT_PLC                           = 0xae
+	IFT_POS                           = 0xab
+	IFT_PPP                           = 0x17
+	IFT_PPPMULTILINKBUNDLE            = 0x6c
+	IFT_PROPBWAP2MP                   = 0xb8
+	IFT_PROPCNLS                      = 0x59
+	IFT_PROPDOCSWIRELESSDOWNSTREAM    = 0xb5
+	IFT_PROPDOCSWIRELESSMACLAYER      = 0xb4
+	IFT_PROPDOCSWIRELESSUPSTREAM      = 0xb6
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPVIRTUAL                   = 0x35
+	IFT_PROPWIRELESSP2P               = 0x9d
+	IFT_PTPSERIAL                     = 0x16
+	IFT_PVC                           = 0xf1
+	IFT_QLLC                          = 0x44
+	IFT_RADIOMAC                      = 0xbc
+	IFT_RADSL                         = 0x5f
+	IFT_REACHDSL                      = 0xc0
+	IFT_RFC1483                       = 0x9f
+	IFT_RS232                         = 0x21
+	IFT_RSRB                          = 0x4f
+	IFT_SDLC                          = 0x11
+	IFT_SDSL                          = 0x60
+	IFT_SHDSL                         = 0xa9
+	IFT_SIP                           = 0x1f
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETOVERHEADCHANNEL          = 0xb9
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_SRP                           = 0x97
+	IFT_SS7SIGLINK                    = 0x9c
+	IFT_STACKTOSTACK                  = 0x6f
+	IFT_STARLAN                       = 0xb
+	IFT_STF                           = 0xf3
+	IFT_T1                            = 0x12
+	IFT_TDLC                          = 0x74
+	IFT_TERMPAD                       = 0x5b
+	IFT_TR008                         = 0xb0
+	IFT_TRANSPHDLC                    = 0x7b
+	IFT_TUNNEL                        = 0x83
+	IFT_ULTRA                         = 0x1d
+	IFT_USB                           = 0xa0
+	IFT_V11                           = 0x40
+	IFT_V35                           = 0x2d
+	IFT_V36                           = 0x41
+	IFT_V37                           = 0x78
+	IFT_VDSL                          = 0x61
+	IFT_VIRTUALIPADDRESS              = 0x70
+	IFT_VOICEEM                       = 0x64
+	IFT_VOICEENCAP                    = 0x67
+	IFT_VOICEFXO                      = 0x65
+	IFT_VOICEFXS                      = 0x66
+	IFT_VOICEOVERATM                  = 0x98
+	IFT_VOICEOVERFRAMERELAY           = 0x99
+	IFT_VOICEOVERIP                   = 0x68
+	IFT_X213                          = 0x5d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25HUNTGROUP                  = 0x7a
+	IFT_X25MLP                        = 0x79
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+	IGNBRK                            = 0x1
+	IGNCR                             = 0x80
+	IGNPAR                            = 0x4
+	IMAXBEL                           = 0x2000
+	INLCR                             = 0x40
+	INPCK                             = 0x10
+	IN_CLASSA_HOST                    = 0xffffff
+	IN_CLASSA_MAX                     = 0x80
+	IN_CLASSA_NET                     = 0xff000000
+	IN_CLASSA_NSHIFT                  = 0x18
+	IN_CLASSB_HOST                    = 0xffff
+	IN_CLASSB_MAX                     = 0x10000
+	IN_CLASSB_NET                     = 0xffff0000
+	IN_CLASSB_NSHIFT                  = 0x10
+	IN_CLASSC_HOST                    = 0xff
+	IN_CLASSC_NET                     = 0xffffff00
+	IN_CLASSC_NSHIFT                  = 0x8
+	IN_CLASSD_HOST                    = 0xfffffff
+	IN_CLASSD_NET                     = 0xf0000000
+	IN_CLASSD_NSHIFT                  = 0x1c
+	IN_LOOPBACKNET                    = 0x7f
+	IPPROTO_3PC                       = 0x22
+	IPPROTO_ADFS                      = 0x44
+	IPPROTO_AH                        = 0x33
+	IPPROTO_AHIP                      = 0x3d
+	IPPROTO_APES                      = 0x63
+	IPPROTO_ARGUS                     = 0xd
+	IPPROTO_AX25                      = 0x5d
+	IPPROTO_BHA                       = 0x31
+	IPPROTO_BLT                       = 0x1e
+	IPPROTO_BRSATMON                  = 0x4c
+	IPPROTO_CARP                      = 0x70
+	IPPROTO_CFTP                      = 0x3e
+	IPPROTO_CHAOS                     = 0x10
+	IPPROTO_CMTP                      = 0x26
+	IPPROTO_CPHB                      = 0x49
+	IPPROTO_CPNX                      = 0x48
+	IPPROTO_DDP                       = 0x25
+	IPPROTO_DGP                       = 0x56
+	IPPROTO_DIVERT                    = 0xfe
+	IPPROTO_DONE                      = 0x101
+	IPPROTO_DSTOPTS                   = 0x3c
+	IPPROTO_EGP                       = 0x8
+	IPPROTO_EMCON                     = 0xe
+	IPPROTO_ENCAP                     = 0x62
+	IPPROTO_EON                       = 0x50
+	IPPROTO_ESP                       = 0x32
+	IPPROTO_ETHERIP                   = 0x61
+	IPPROTO_FRAGMENT                  = 0x2c
+	IPPROTO_GGP                       = 0x3
+	IPPROTO_GMTP                      = 0x64
+	IPPROTO_GRE                       = 0x2f
+	IPPROTO_HELLO                     = 0x3f
+	IPPROTO_HMP                       = 0x14
+	IPPROTO_HOPOPTS                   = 0x0
+	IPPROTO_ICMP                      = 0x1
+	IPPROTO_ICMPV6                    = 0x3a
+	IPPROTO_IDP                       = 0x16
+	IPPROTO_IDPR                      = 0x23
+	IPPROTO_IDRP                      = 0x2d
+	IPPROTO_IGMP                      = 0x2
+	IPPROTO_IGP                       = 0x55
+	IPPROTO_IGRP                      = 0x58
+	IPPROTO_IL                        = 0x28
+	IPPROTO_INLSP                     = 0x34
+	IPPROTO_INP                       = 0x20
+	IPPROTO_IP                        = 0x0
+	IPPROTO_IPCOMP                    = 0x6c
+	IPPROTO_IPCV                      = 0x47
+	IPPROTO_IPEIP                     = 0x5e
+	IPPROTO_IPIP                      = 0x4
+	IPPROTO_IPPC                      = 0x43
+	IPPROTO_IPV4                      = 0x4
+	IPPROTO_IPV6                      = 0x29
+	IPPROTO_IRTP                      = 0x1c
+	IPPROTO_KRYPTOLAN                 = 0x41
+	IPPROTO_LARP                      = 0x5b
+	IPPROTO_LEAF1                     = 0x19
+	IPPROTO_LEAF2                     = 0x1a
+	IPPROTO_MAX                       = 0x100
+	IPPROTO_MAXID                     = 0x34
+	IPPROTO_MEAS                      = 0x13
+	IPPROTO_MHRP                      = 0x30
+	IPPROTO_MICP                      = 0x5f
+	IPPROTO_MOBILE                    = 0x37
+	IPPROTO_MTP                       = 0x5c
+	IPPROTO_MUX                       = 0x12
+	IPPROTO_ND                        = 0x4d
+	IPPROTO_NHRP                      = 0x36
+	IPPROTO_NONE                      = 0x3b
+	IPPROTO_NSP                       = 0x1f
+	IPPROTO_NVPII                     = 0xb
+	IPPROTO_OSPFIGP                   = 0x59
+	IPPROTO_PFSYNC                    = 0xf0
+	IPPROTO_PGM                       = 0x71
+	IPPROTO_PIGP                      = 0x9
+	IPPROTO_PIM                       = 0x67
+	IPPROTO_PRM                       = 0x15
+	IPPROTO_PUP                       = 0xc
+	IPPROTO_PVP                       = 0x4b
+	IPPROTO_RAW                       = 0xff
+	IPPROTO_RCCMON                    = 0xa
+	IPPROTO_RDP                       = 0x1b
+	IPPROTO_ROUTING                   = 0x2b
+	IPPROTO_RSVP                      = 0x2e
+	IPPROTO_RVD                       = 0x42
+	IPPROTO_SATEXPAK                  = 0x40
+	IPPROTO_SATMON                    = 0x45
+	IPPROTO_SCCSP                     = 0x60
+	IPPROTO_SDRP                      = 0x2a
+	IPPROTO_SEP                       = 0x21
+	IPPROTO_SKIP                      = 0x39
+	IPPROTO_SRPC                      = 0x5a
+	IPPROTO_ST                        = 0x7
+	IPPROTO_SVMTP                     = 0x52
+	IPPROTO_SWIPE                     = 0x35
+	IPPROTO_TCF                       = 0x57
+	IPPROTO_TCP                       = 0x6
+	IPPROTO_TLSP                      = 0x38
+	IPPROTO_TP                        = 0x1d
+	IPPROTO_TPXX                      = 0x27
+	IPPROTO_TRUNK1                    = 0x17
+	IPPROTO_TRUNK2                    = 0x18
+	IPPROTO_TTP                       = 0x54
+	IPPROTO_UDP                       = 0x11
+	IPPROTO_UNKNOWN                   = 0x102
+	IPPROTO_VINES                     = 0x53
+	IPPROTO_VISA                      = 0x46
+	IPPROTO_VMTP                      = 0x51
+	IPPROTO_WBEXPAK                   = 0x4f
+	IPPROTO_WBMON                     = 0x4e
+	IPPROTO_WSN                       = 0x4a
+	IPPROTO_XNET                      = 0xf
+	IPPROTO_XTP                       = 0x24
+	IPV6_AUTOFLOWLABEL                = 0x3b
+	IPV6_BINDV6ONLY                   = 0x1b
+	IPV6_CHECKSUM                     = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS       = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP       = 0x1
+	IPV6_DEFHLIM                      = 0x40
+	IPV6_DONTFRAG                     = 0x3e
+	IPV6_DSTOPTS                      = 0x32
+	IPV6_FAITH                        = 0x1d
+	IPV6_FLOWINFO_MASK                = 0xffffff0f
+	IPV6_FLOWLABEL_MASK               = 0xffff0f00
+	IPV6_FRAGTTL                      = 0x78
+	IPV6_FW_ADD                       = 0x1e
+	IPV6_FW_DEL                       = 0x1f
+	IPV6_FW_FLUSH                     = 0x20
+	IPV6_FW_GET                       = 0x22
+	IPV6_FW_ZERO                      = 0x21
+	IPV6_HLIMDEC                      = 0x1
+	IPV6_HOPLIMIT                     = 0x2f
+	IPV6_HOPOPTS                      = 0x31
+	IPV6_IPSEC_POLICY                 = 0x1c
+	IPV6_JOIN_GROUP                   = 0xc
+	IPV6_LEAVE_GROUP                  = 0xd
+	IPV6_MAXHLIM                      = 0xff
+	IPV6_MAXPACKET                    = 0xffff
+	IPV6_MINHLIM                      = 0x28
+	IPV6_MMTU                         = 0x500
+	IPV6_MSFILTER                     = 0x4a
+	IPV6_MULTICAST_HOPS               = 0xa
+	IPV6_MULTICAST_IF                 = 0x9
+	IPV6_MULTICAST_LOOP               = 0xb
+	IPV6_NEXTHOP                      = 0x30
+	IPV6_PATHMTU                      = 0x2c
+	IPV6_PKTINFO                      = 0x2e
+	IPV6_PKTOPTIONS                   = 0x34
+	IPV6_PORTRANGE                    = 0xe
+	IPV6_PORTRANGE_DEFAULT            = 0x0
+	IPV6_PORTRANGE_HIGH               = 0x1
+	IPV6_PORTRANGE_LOW                = 0x2
+	IPV6_PREFER_TEMPADDR              = 0x3f
+	IPV6_RECVDSTOPTS                  = 0x28
+	IPV6_RECVHOPLIMIT                 = 0x25
+	IPV6_RECVHOPOPTS                  = 0x27
+	IPV6_RECVPATHMTU                  = 0x2b
+	IPV6_RECVPKTINFO                  = 0x24
+	IPV6_RECVRTHDR                    = 0x26
+	IPV6_RECVTCLASS                   = 0x39
+	IPV6_RTHDR                        = 0x33
+	IPV6_RTHDRDSTOPTS                 = 0x23
+	IPV6_RTHDR_LOOSE                  = 0x0
+	IPV6_RTHDR_STRICT                 = 0x1
+	IPV6_RTHDR_TYPE_0                 = 0x0
+	IPV6_SOCKOPT_RESERVED1            = 0x3
+	IPV6_TCLASS                       = 0x3d
+	IPV6_UNICAST_HOPS                 = 0x4
+	IPV6_USE_MIN_MTU                  = 0x2a
+	IPV6_V6ONLY                       = 0x1b
+	IPV6_VERSION                      = 0x60
+	IPV6_VERSION_MASK                 = 0xf0
+	IP_ADD_MEMBERSHIP                 = 0xc
+	IP_DEFAULT_MULTICAST_LOOP         = 0x1
+	IP_DEFAULT_MULTICAST_TTL          = 0x1
+	IP_DF                             = 0x4000
+	IP_DROP_MEMBERSHIP                = 0xd
+	IP_DUMMYNET_CONFIGURE             = 0x3c
+	IP_DUMMYNET_DEL                   = 0x3d
+	IP_DUMMYNET_FLUSH                 = 0x3e
+	IP_DUMMYNET_GET                   = 0x40
+	IP_FAITH                          = 0x16
+	IP_FW_ADD                         = 0x32
+	IP_FW_DEL                         = 0x33
+	IP_FW_FLUSH                       = 0x34
+	IP_FW_GET                         = 0x36
+	IP_FW_RESETLOG                    = 0x37
+	IP_FW_X                           = 0x31
+	IP_FW_ZERO                        = 0x35
+	IP_HDRINCL                        = 0x2
+	IP_IPSEC_POLICY                   = 0x15
+	IP_MAXPACKET                      = 0xffff
+	IP_MAX_MEMBERSHIPS                = 0x14
+	IP_MF                             = 0x2000
+	IP_MINTTL                         = 0x42
+	IP_MSS                            = 0x240
+	IP_MULTICAST_IF                   = 0x9
+	IP_MULTICAST_LOOP                 = 0xb
+	IP_MULTICAST_TTL                  = 0xa
+	IP_MULTICAST_VIF                  = 0xe
+	IP_OFFMASK                        = 0x1fff
+	IP_OPTIONS                        = 0x1
+	IP_PORTRANGE                      = 0x13
+	IP_PORTRANGE_DEFAULT              = 0x0
+	IP_PORTRANGE_HIGH                 = 0x1
+	IP_PORTRANGE_LOW                  = 0x2
+	IP_RECVDSTADDR                    = 0x7
+	IP_RECVIF                         = 0x14
+	IP_RECVOPTS                       = 0x5
+	IP_RECVRETOPTS                    = 0x6
+	IP_RECVTTL                        = 0x41
+	IP_RETOPTS                        = 0x8
+	IP_RF                             = 0x8000
+	IP_RSVP_OFF                       = 0x10
+	IP_RSVP_ON                        = 0xf
+	IP_RSVP_VIF_OFF                   = 0x12
+	IP_RSVP_VIF_ON                    = 0x11
+	IP_TOS                            = 0x3
+	IP_TTL                            = 0x4
+	ISIG                              = 0x80
+	ISTRIP                            = 0x20
+	IXANY                             = 0x800
+	IXOFF                             = 0x400
+	IXON                              = 0x200
+	KERN_HOSTNAME                     = 0xa
+	KERN_OSRELEASE                    = 0x2
+	KERN_OSTYPE                       = 0x1
+	KERN_VERSION                      = 0x4
+	LOCK_EX                           = 0x2
+	LOCK_NB                           = 0x4
+	LOCK_SH                           = 0x1
+	LOCK_UN                           = 0x8
+	MADV_AUTOSYNC                     = 0x7
+	MADV_CONTROL_END                  = 0xb
+	MADV_CONTROL_START                = 0xa
+	MADV_CORE                         = 0x9
+	MADV_DONTNEED                     = 0x4
+	MADV_FREE                         = 0x5
+	MADV_INVAL                        = 0xa
+	MADV_NOCORE                       = 0x8
+	MADV_NORMAL                       = 0x0
+	MADV_NOSYNC                       = 0x6
+	MADV_RANDOM                       = 0x1
+	MADV_SEQUENTIAL                   = 0x2
+	MADV_SETMAP                       = 0xb
+	MADV_WILLNEED                     = 0x3
+	MAP_ANON                          = 0x1000
+	MAP_ANONYMOUS                     = 0x1000
+	MAP_COPY                          = 0x2
+	MAP_FILE                          = 0x0
+	MAP_FIXED                         = 0x10
+	MAP_HASSEMAPHORE                  = 0x200
+	MAP_INHERIT                       = 0x80
+	MAP_NOCORE                        = 0x20000
+	MAP_NOEXTEND                      = 0x100
+	MAP_NORESERVE                     = 0x40
+	MAP_NOSYNC                        = 0x800
+	MAP_PRIVATE                       = 0x2
+	MAP_RENAME                        = 0x20
+	MAP_SHARED                        = 0x1
+	MAP_SIZEALIGN                     = 0x40000
+	MAP_STACK                         = 0x400
+	MAP_TRYFIXED                      = 0x10000
+	MAP_VPAGETABLE                    = 0x2000
+	MCL_CURRENT                       = 0x1
+	MCL_FUTURE                        = 0x2
+	MNT_ASYNC                         = 0x40
+	MNT_AUTOMOUNTED                   = 0x20
+	MNT_CMDFLAGS                      = 0xf0000
+	MNT_DEFEXPORTED                   = 0x200
+	MNT_DELEXPORT                     = 0x20000
+	MNT_EXKERB                        = 0x800
+	MNT_EXPORTANON                    = 0x400
+	MNT_EXPORTED                      = 0x100
+	MNT_EXPUBLIC                      = 0x20000000
+	MNT_EXRDONLY                      = 0x80
+	MNT_FORCE                         = 0x80000
+	MNT_IGNORE                        = 0x800000
+	MNT_LAZY                          = 0x4
+	MNT_LOCAL                         = 0x1000
+	MNT_NOATIME                       = 0x10000000
+	MNT_NOCLUSTERR                    = 0x40000000
+	MNT_NOCLUSTERW                    = 0x80000000
+	MNT_NODEV                         = 0x10
+	MNT_NOEXEC                        = 0x4
+	MNT_NOSUID                        = 0x8
+	MNT_NOSYMFOLLOW                   = 0x400000
+	MNT_NOWAIT                        = 0x2
+	MNT_QUOTA                         = 0x2000
+	MNT_RDONLY                        = 0x1
+	MNT_RELOAD                        = 0x40000
+	MNT_ROOTFS                        = 0x4000
+	MNT_SOFTDEP                       = 0x200000
+	MNT_SUIDDIR                       = 0x100000
+	MNT_SYNCHRONOUS                   = 0x2
+	MNT_TRIM                          = 0x1000000
+	MNT_UPDATE                        = 0x10000
+	MNT_USER                          = 0x8000
+	MNT_VISFLAGMASK                   = 0xf1f0ffff
+	MNT_WAIT                          = 0x1
+	MSG_CMSG_CLOEXEC                  = 0x1000
+	MSG_CTRUNC                        = 0x20
+	MSG_DONTROUTE                     = 0x4
+	MSG_DONTWAIT                      = 0x80
+	MSG_EOF                           = 0x100
+	MSG_EOR                           = 0x8
+	MSG_FBLOCKING                     = 0x10000
+	MSG_FMASK                         = 0xffff0000
+	MSG_FNONBLOCKING                  = 0x20000
+	MSG_NOSIGNAL                      = 0x400
+	MSG_OOB                           = 0x1
+	MSG_PEEK                          = 0x2
+	MSG_SYNC                          = 0x800
+	MSG_TRUNC                         = 0x10
+	MSG_UNUSED09                      = 0x200
+	MSG_WAITALL                       = 0x40
+	MS_ASYNC                          = 0x1
+	MS_INVALIDATE                     = 0x2
+	MS_SYNC                           = 0x0
+	NAME_MAX                          = 0xff
+	NET_RT_DUMP                       = 0x1
+	NET_RT_FLAGS                      = 0x2
+	NET_RT_IFLIST                     = 0x3
+	NET_RT_MAXID                      = 0x4
+	NFDBITS                           = 0x40
+	NOFLSH                            = 0x80000000
+	NOKERNINFO                        = 0x2000000
+	NOTE_ATTRIB                       = 0x8
+	NOTE_CHILD                        = 0x4
+	NOTE_DELETE                       = 0x1
+	NOTE_EXEC                         = 0x20000000
+	NOTE_EXIT                         = 0x80000000
+	NOTE_EXTEND                       = 0x4
+	NOTE_FFAND                        = 0x40000000
+	NOTE_FFCOPY                       = 0xc0000000
+	NOTE_FFCTRLMASK                   = 0xc0000000
+	NOTE_FFLAGSMASK                   = 0xffffff
+	NOTE_FFNOP                        = 0x0
+	NOTE_FFOR                         = 0x80000000
+	NOTE_FORK                         = 0x40000000
+	NOTE_LINK                         = 0x10
+	NOTE_LOWAT                        = 0x1
+	NOTE_OOB                          = 0x2
+	NOTE_PCTRLMASK                    = 0xf0000000
+	NOTE_PDATAMASK                    = 0xfffff
+	NOTE_RENAME                       = 0x20
+	NOTE_REVOKE                       = 0x40
+	NOTE_TRACK                        = 0x1
+	NOTE_TRACKERR                     = 0x2
+	NOTE_TRIGGER                      = 0x1000000
+	NOTE_WRITE                        = 0x2
+	OCRNL                             = 0x10
+	ONLCR                             = 0x2
+	ONLRET                            = 0x40
+	ONOCR                             = 0x20
+	ONOEOT                            = 0x8
+	OPOST                             = 0x1
+	OXTABS                            = 0x4
+	O_ACCMODE                         = 0x3
+	O_APPEND                          = 0x8
+	O_ASYNC                           = 0x40
+	O_CLOEXEC                         = 0x20000
+	O_CREAT                           = 0x200
+	O_DIRECT                          = 0x10000
+	O_DIRECTORY                       = 0x8000000
+	O_EXCL                            = 0x800
+	O_EXLOCK                          = 0x20
+	O_FAPPEND                         = 0x100000
+	O_FASYNCWRITE                     = 0x800000
+	O_FBLOCKING                       = 0x40000
+	O_FMASK                           = 0xfc0000
+	O_FNONBLOCKING                    = 0x80000
+	O_FOFFSET                         = 0x200000
+	O_FSYNC                           = 0x80
+	O_FSYNCWRITE                      = 0x400000
+	O_NDELAY                          = 0x4
+	O_NOCTTY                          = 0x8000
+	O_NOFOLLOW                        = 0x100
+	O_NONBLOCK                        = 0x4
+	O_RDONLY                          = 0x0
+	O_RDWR                            = 0x2
+	O_SHLOCK                          = 0x10
+	O_SYNC                            = 0x80
+	O_TRUNC                           = 0x400
+	O_WRONLY                          = 0x1
+	PARENB                            = 0x1000
+	PARMRK                            = 0x8
+	PARODD                            = 0x2000
+	PENDIN                            = 0x20000000
+	PRIO_PGRP                         = 0x1
+	PRIO_PROCESS                      = 0x0
+	PRIO_USER                         = 0x2
+	PROT_EXEC                         = 0x4
+	PROT_NONE                         = 0x0
+	PROT_READ                         = 0x1
+	PROT_WRITE                        = 0x2
+	RLIMIT_AS                         = 0xa
+	RLIMIT_CORE                       = 0x4
+	RLIMIT_CPU                        = 0x0
+	RLIMIT_DATA                       = 0x2
+	RLIMIT_FSIZE                      = 0x1
+	RLIMIT_MEMLOCK                    = 0x6
+	RLIMIT_NOFILE                     = 0x8
+	RLIMIT_NPROC                      = 0x7
+	RLIMIT_RSS                        = 0x5
+	RLIMIT_STACK                      = 0x3
+	RLIM_INFINITY                     = 0x7fffffffffffffff
+	RTAX_AUTHOR                       = 0x6
+	RTAX_BRD                          = 0x7
+	RTAX_DST                          = 0x0
+	RTAX_GATEWAY                      = 0x1
+	RTAX_GENMASK                      = 0x3
+	RTAX_IFA                          = 0x5
+	RTAX_IFP                          = 0x4
+	RTAX_MAX                          = 0xb
+	RTAX_MPLS1                        = 0x8
+	RTAX_MPLS2                        = 0x9
+	RTAX_MPLS3                        = 0xa
+	RTAX_NETMASK                      = 0x2
+	RTA_AUTHOR                        = 0x40
+	RTA_BRD                           = 0x80
+	RTA_DST                           = 0x1
+	RTA_GATEWAY                       = 0x2
+	RTA_GENMASK                       = 0x8
+	RTA_IFA                           = 0x20
+	RTA_IFP                           = 0x10
+	RTA_MPLS1                         = 0x100
+	RTA_MPLS2                         = 0x200
+	RTA_MPLS3                         = 0x400
+	RTA_NETMASK                       = 0x4
+	RTF_BLACKHOLE                     = 0x1000
+	RTF_BROADCAST                     = 0x400000
+	RTF_CLONING                       = 0x100
+	RTF_DONE                          = 0x40
+	RTF_DYNAMIC                       = 0x10
+	RTF_GATEWAY                       = 0x2
+	RTF_HOST                          = 0x4
+	RTF_LLINFO                        = 0x400
+	RTF_LOCAL                         = 0x200000
+	RTF_MODIFIED                      = 0x20
+	RTF_MPLSOPS                       = 0x1000000
+	RTF_MULTICAST                     = 0x800000
+	RTF_PINNED                        = 0x100000
+	RTF_PRCLONING                     = 0x10000
+	RTF_PROTO1                        = 0x8000
+	RTF_PROTO2                        = 0x4000
+	RTF_PROTO3                        = 0x40000
+	RTF_REJECT                        = 0x8
+	RTF_STATIC                        = 0x800
+	RTF_UP                            = 0x1
+	RTF_WASCLONED                     = 0x20000
+	RTF_XRESOLVE                      = 0x200
+	RTM_ADD                           = 0x1
+	RTM_CHANGE                        = 0x3
+	RTM_DELADDR                       = 0xd
+	RTM_DELETE                        = 0x2
+	RTM_DELMADDR                      = 0x10
+	RTM_GET                           = 0x4
+	RTM_IEEE80211                     = 0x12
+	RTM_IFANNOUNCE                    = 0x11
+	RTM_IFINFO                        = 0xe
+	RTM_LOCK                          = 0x8
+	RTM_LOSING                        = 0x5
+	RTM_MISS                          = 0x7
+	RTM_NEWADDR                       = 0xc
+	RTM_NEWMADDR                      = 0xf
+	RTM_OLDADD                        = 0x9
+	RTM_OLDDEL                        = 0xa
+	RTM_REDIRECT                      = 0x6
+	RTM_RESOLVE                       = 0xb
+	RTM_RTTUNIT                       = 0xf4240
+	RTM_VERSION                       = 0x6
+	RTV_EXPIRE                        = 0x4
+	RTV_HOPCOUNT                      = 0x2
+	RTV_IWCAPSEGS                     = 0x400
+	RTV_IWMAXSEGS                     = 0x200
+	RTV_MSL                           = 0x100
+	RTV_MTU                           = 0x1
+	RTV_RPIPE                         = 0x8
+	RTV_RTT                           = 0x40
+	RTV_RTTVAR                        = 0x80
+	RTV_SPIPE                         = 0x10
+	RTV_SSTHRESH                      = 0x20
+	RUSAGE_CHILDREN                   = -0x1
+	RUSAGE_SELF                       = 0x0
+	SCM_CREDS                         = 0x3
+	SCM_RIGHTS                        = 0x1
+	SCM_TIMESTAMP                     = 0x2
+	SHUT_RD                           = 0x0
+	SHUT_RDWR                         = 0x2
+	SHUT_WR                           = 0x1
+	SIOCADDMULTI                      = 0x80206931
+	SIOCADDRT                         = 0x8040720a
+	SIOCAIFADDR                       = 0x8040691a
+	SIOCALIFADDR                      = 0x8118691b
+	SIOCATMARK                        = 0x40047307
+	SIOCDELMULTI                      = 0x80206932
+	SIOCDELRT                         = 0x8040720b
+	SIOCDIFADDR                       = 0x80206919
+	SIOCDIFPHYADDR                    = 0x80206949
+	SIOCDLIFADDR                      = 0x8118691d
+	SIOCGDRVSPEC                      = 0xc028697b
+	SIOCGETSGCNT                      = 0xc0207210
+	SIOCGETVIFCNT                     = 0xc028720f
+	SIOCGHIWAT                        = 0x40047301
+	SIOCGIFADDR                       = 0xc0206921
+	SIOCGIFBRDADDR                    = 0xc0206923
+	SIOCGIFCAP                        = 0xc020691f
+	SIOCGIFCONF                       = 0xc0106924
+	SIOCGIFDATA                       = 0xc0206926
+	SIOCGIFDSTADDR                    = 0xc0206922
+	SIOCGIFFLAGS                      = 0xc0206911
+	SIOCGIFGENERIC                    = 0xc020693a
+	SIOCGIFGMEMB                      = 0xc028698a
+	SIOCGIFINDEX                      = 0xc0206920
+	SIOCGIFMEDIA                      = 0xc0306938
+	SIOCGIFMETRIC                     = 0xc0206917
+	SIOCGIFMTU                        = 0xc0206933
+	SIOCGIFNETMASK                    = 0xc0206925
+	SIOCGIFPDSTADDR                   = 0xc0206948
+	SIOCGIFPHYS                       = 0xc0206935
+	SIOCGIFPOLLCPU                    = 0xc020697e
+	SIOCGIFPSRCADDR                   = 0xc0206947
+	SIOCGIFSTATUS                     = 0xc331693b
+	SIOCGIFTSOLEN                     = 0xc0206980
+	SIOCGLIFADDR                      = 0xc118691c
+	SIOCGLIFPHYADDR                   = 0xc118694b
+	SIOCGLOWAT                        = 0x40047303
+	SIOCGPGRP                         = 0x40047309
+	SIOCGPRIVATE_0                    = 0xc0206950
+	SIOCGPRIVATE_1                    = 0xc0206951
+	SIOCIFCREATE                      = 0xc020697a
+	SIOCIFCREATE2                     = 0xc020697c
+	SIOCIFDESTROY                     = 0x80206979
+	SIOCIFGCLONERS                    = 0xc0106978
+	SIOCSDRVSPEC                      = 0x8028697b
+	SIOCSHIWAT                        = 0x80047300
+	SIOCSIFADDR                       = 0x8020690c
+	SIOCSIFBRDADDR                    = 0x80206913
+	SIOCSIFCAP                        = 0x8020691e
+	SIOCSIFDSTADDR                    = 0x8020690e
+	SIOCSIFFLAGS                      = 0x80206910
+	SIOCSIFGENERIC                    = 0x80206939
+	SIOCSIFLLADDR                     = 0x8020693c
+	SIOCSIFMEDIA                      = 0xc0206937
+	SIOCSIFMETRIC                     = 0x80206918
+	SIOCSIFMTU                        = 0x80206934
+	SIOCSIFNAME                       = 0x80206928
+	SIOCSIFNETMASK                    = 0x80206916
+	SIOCSIFPHYADDR                    = 0x80406946
+	SIOCSIFPHYS                       = 0x80206936
+	SIOCSIFPOLLCPU                    = 0x8020697d
+	SIOCSIFTSOLEN                     = 0x8020697f
+	SIOCSLIFPHYADDR                   = 0x8118694a
+	SIOCSLOWAT                        = 0x80047302
+	SIOCSPGRP                         = 0x80047308
+	SOCK_CLOEXEC                      = 0x10000000
+	SOCK_DGRAM                        = 0x2
+	SOCK_MAXADDRLEN                   = 0xff
+	SOCK_NONBLOCK                     = 0x20000000
+	SOCK_RAW                          = 0x3
+	SOCK_RDM                          = 0x4
+	SOCK_SEQPACKET                    = 0x5
+	SOCK_STREAM                       = 0x1
+	SOL_SOCKET                        = 0xffff
+	SOMAXCONN                         = 0x80
+	SO_ACCEPTCONN                     = 0x2
+	SO_ACCEPTFILTER                   = 0x1000
+	SO_BROADCAST                      = 0x20
+	SO_CPUHINT                        = 0x1030
+	SO_DEBUG                          = 0x1
+	SO_DONTROUTE                      = 0x10
+	SO_ERROR                          = 0x1007
+	SO_KEEPALIVE                      = 0x8
+	SO_LINGER                         = 0x80
+	SO_NOSIGPIPE                      = 0x800
+	SO_OOBINLINE                      = 0x100
+	SO_RCVBUF                         = 0x1002
+	SO_RCVLOWAT                       = 0x1004
+	SO_RCVTIMEO                       = 0x1006
+	SO_REUSEADDR                      = 0x4
+	SO_REUSEPORT                      = 0x200
+	SO_SNDBUF                         = 0x1001
+	SO_SNDLOWAT                       = 0x1003
+	SO_SNDSPACE                       = 0x100a
+	SO_SNDTIMEO                       = 0x1005
+	SO_TIMESTAMP                      = 0x400
+	SO_TYPE                           = 0x1008
+	SO_USELOOPBACK                    = 0x40
+	S_BLKSIZE                         = 0x200
+	S_IEXEC                           = 0x40
+	S_IFBLK                           = 0x6000
+	S_IFCHR                           = 0x2000
+	S_IFDB                            = 0x9000
+	S_IFDIR                           = 0x4000
+	S_IFIFO                           = 0x1000
+	S_IFLNK                           = 0xa000
+	S_IFMT                            = 0xf000
+	S_IFREG                           = 0x8000
+	S_IFSOCK                          = 0xc000
+	S_IFWHT                           = 0xe000
+	S_IREAD                           = 0x100
+	S_IRGRP                           = 0x20
+	S_IROTH                           = 0x4
+	S_IRUSR                           = 0x100
+	S_IRWXG                           = 0x38
+	S_IRWXO                           = 0x7
+	S_IRWXU                           = 0x1c0
+	S_ISGID                           = 0x400
+	S_ISTXT                           = 0x200
+	S_ISUID                           = 0x800
+	S_ISVTX                           = 0x200
+	S_IWGRP                           = 0x10
+	S_IWOTH                           = 0x2
+	S_IWRITE                          = 0x80
+	S_IWUSR                           = 0x80
+	S_IXGRP                           = 0x8
+	S_IXOTH                           = 0x1
+	S_IXUSR                           = 0x40
+	TCIFLUSH                          = 0x1
+	TCIOFF                            = 0x3
+	TCIOFLUSH                         = 0x3
+	TCION                             = 0x4
+	TCOFLUSH                          = 0x2
+	TCOOFF                            = 0x1
+	TCOON                             = 0x2
+	TCP_FASTKEEP                      = 0x80
+	TCP_KEEPCNT                       = 0x400
+	TCP_KEEPIDLE                      = 0x100
+	TCP_KEEPINIT                      = 0x20
+	TCP_KEEPINTVL                     = 0x200
+	TCP_MAXBURST                      = 0x4
+	TCP_MAXHLEN                       = 0x3c
+	TCP_MAXOLEN                       = 0x28
+	TCP_MAXSEG                        = 0x2
+	TCP_MAXWIN                        = 0xffff
+	TCP_MAX_WINSHIFT                  = 0xe
+	TCP_MINMSS                        = 0x100
+	TCP_MIN_WINSHIFT                  = 0x5
+	TCP_MSS                           = 0x200
+	TCP_NODELAY                       = 0x1
+	TCP_NOOPT                         = 0x8
+	TCP_NOPUSH                        = 0x4
+	TCP_SIGNATURE_ENABLE              = 0x10
+	TCSAFLUSH                         = 0x2
+	TIOCCBRK                          = 0x2000747a
+	TIOCCDTR                          = 0x20007478
+	TIOCCONS                          = 0x80047462
+	TIOCDCDTIMESTAMP                  = 0x40107458
+	TIOCDRAIN                         = 0x2000745e
+	TIOCEXCL                          = 0x2000740d
+	TIOCEXT                           = 0x80047460
+	TIOCFLUSH                         = 0x80047410
+	TIOCGDRAINWAIT                    = 0x40047456
+	TIOCGETA                          = 0x402c7413
+	TIOCGETD                          = 0x4004741a
+	TIOCGPGRP                         = 0x40047477
+	TIOCGSID                          = 0x40047463
+	TIOCGSIZE                         = 0x40087468
+	TIOCGWINSZ                        = 0x40087468
+	TIOCISPTMASTER                    = 0x20007455
+	TIOCMBIC                          = 0x8004746b
+	TIOCMBIS                          = 0x8004746c
+	TIOCMGDTRWAIT                     = 0x4004745a
+	TIOCMGET                          = 0x4004746a
+	TIOCMODG                          = 0x40047403
+	TIOCMODS                          = 0x80047404
+	TIOCMSDTRWAIT                     = 0x8004745b
+	TIOCMSET                          = 0x8004746d
+	TIOCM_CAR                         = 0x40
+	TIOCM_CD                          = 0x40
+	TIOCM_CTS                         = 0x20
+	TIOCM_DSR                         = 0x100
+	TIOCM_DTR                         = 0x2
+	TIOCM_LE                          = 0x1
+	TIOCM_RI                          = 0x80
+	TIOCM_RNG                         = 0x80
+	TIOCM_RTS                         = 0x4
+	TIOCM_SR                          = 0x10
+	TIOCM_ST                          = 0x8
+	TIOCNOTTY                         = 0x20007471
+	TIOCNXCL                          = 0x2000740e
+	TIOCOUTQ                          = 0x40047473
+	TIOCPKT                           = 0x80047470
+	TIOCPKT_DATA                      = 0x0
+	TIOCPKT_DOSTOP                    = 0x20
+	TIOCPKT_FLUSHREAD                 = 0x1
+	TIOCPKT_FLUSHWRITE                = 0x2
+	TIOCPKT_IOCTL                     = 0x40
+	TIOCPKT_NOSTOP                    = 0x10
+	TIOCPKT_START                     = 0x8
+	TIOCPKT_STOP                      = 0x4
+	TIOCREMOTE                        = 0x80047469
+	TIOCSBRK                          = 0x2000747b
+	TIOCSCTTY                         = 0x20007461
+	TIOCSDRAINWAIT                    = 0x80047457
+	TIOCSDTR                          = 0x20007479
+	TIOCSETA                          = 0x802c7414
+	TIOCSETAF                         = 0x802c7416
+	TIOCSETAW                         = 0x802c7415
+	TIOCSETD                          = 0x8004741b
+	TIOCSIG                           = 0x2000745f
+	TIOCSPGRP                         = 0x80047476
+	TIOCSSIZE                         = 0x80087467
+	TIOCSTART                         = 0x2000746e
+	TIOCSTAT                          = 0x20007465
+	TIOCSTI                           = 0x80017472
+	TIOCSTOP                          = 0x2000746f
+	TIOCSWINSZ                        = 0x80087467
+	TIOCTIMESTAMP                     = 0x40107459
+	TIOCUCNTL                         = 0x80047466
+	TOSTOP                            = 0x400000
+	VCHECKPT                          = 0x13
+	VDISCARD                          = 0xf
+	VDSUSP                            = 0xb
+	VEOF                              = 0x0
+	VEOL                              = 0x1
+	VEOL2                             = 0x2
+	VERASE                            = 0x3
+	VERASE2                           = 0x7
+	VINTR                             = 0x8
+	VKILL                             = 0x5
+	VLNEXT                            = 0xe
+	VMIN                              = 0x10
+	VM_BCACHE_SIZE_MAX                = 0x0
+	VM_SWZONE_SIZE_MAX                = 0x4000000000
+	VQUIT                             = 0x9
+	VREPRINT                          = 0x6
+	VSTART                            = 0xc
+	VSTATUS                           = 0x12
+	VSTOP                             = 0xd
+	VSUSP                             = 0xa
+	VTIME                             = 0x11
+	VWERASE                           = 0x4
+	WCONTINUED                        = 0x4
+	WCOREFLAG                         = 0x80
+	WLINUXCLONE                       = 0x80000000
+	WNOHANG                           = 0x1
+	WSTOPPED                          = 0x7f
+	WUNTRACED                         = 0x2
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EASYNC          = syscall.Errno(0x63)
+	EAUTH           = syscall.Errno(0x50)
+	EBADF           = syscall.Errno(0x9)
+	EBADMSG         = syscall.Errno(0x59)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x55)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDOM            = syscall.Errno(0x21)
+	EDOOFUS         = syscall.Errno(0x58)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x52)
+	EILSEQ          = syscall.Errno(0x56)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x63)
+	ELOOP           = syscall.Errno(0x3e)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	EMULTIHOP       = syscall.Errno(0x5a)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x57)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOLINK         = syscall.Errno(0x5b)
+	ENOMEDIUM       = syscall.Errno(0x5d)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x53)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x2d)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x2d)
+	EOVERFLOW       = syscall.Errno(0x54)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTO          = syscall.Errno(0x5c)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUNUSED94       = syscall.Errno(0x5e)
+	EUNUSED95       = syscall.Errno(0x5f)
+	EUNUSED96       = syscall.Errno(0x60)
+	EUNUSED97       = syscall.Errno(0x61)
+	EUNUSED98       = syscall.Errno(0x62)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT     = syscall.Signal(0x6)
+	SIGALRM     = syscall.Signal(0xe)
+	SIGBUS      = syscall.Signal(0xa)
+	SIGCHLD     = syscall.Signal(0x14)
+	SIGCKPT     = syscall.Signal(0x21)
+	SIGCKPTEXIT = syscall.Signal(0x22)
+	SIGCONT     = syscall.Signal(0x13)
+	SIGEMT      = syscall.Signal(0x7)
+	SIGFPE      = syscall.Signal(0x8)
+	SIGHUP      = syscall.Signal(0x1)
+	SIGILL      = syscall.Signal(0x4)
+	SIGINFO     = syscall.Signal(0x1d)
+	SIGINT      = syscall.Signal(0x2)
+	SIGIO       = syscall.Signal(0x17)
+	SIGIOT      = syscall.Signal(0x6)
+	SIGKILL     = syscall.Signal(0x9)
+	SIGPIPE     = syscall.Signal(0xd)
+	SIGPROF     = syscall.Signal(0x1b)
+	SIGQUIT     = syscall.Signal(0x3)
+	SIGSEGV     = syscall.Signal(0xb)
+	SIGSTOP     = syscall.Signal(0x11)
+	SIGSYS      = syscall.Signal(0xc)
+	SIGTERM     = syscall.Signal(0xf)
+	SIGTHR      = syscall.Signal(0x20)
+	SIGTRAP     = syscall.Signal(0x5)
+	SIGTSTP     = syscall.Signal(0x12)
+	SIGTTIN     = syscall.Signal(0x15)
+	SIGTTOU     = syscall.Signal(0x16)
+	SIGURG      = syscall.Signal(0x10)
+	SIGUSR1     = syscall.Signal(0x1e)
+	SIGUSR2     = syscall.Signal(0x1f)
+	SIGVTALRM   = syscall.Signal(0x1a)
+	SIGWINCH    = syscall.Signal(0x1c)
+	SIGXCPU     = syscall.Signal(0x18)
+	SIGXFSZ     = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "EWOULDBLOCK", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "EOPNOTSUPP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "operation timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disc quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC prog. not avail"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EIDRM", "identifier removed"},
+	{83, "ENOMSG", "no message of desired type"},
+	{84, "EOVERFLOW", "value too large to be stored in data type"},
+	{85, "ECANCELED", "operation canceled"},
+	{86, "EILSEQ", "illegal byte sequence"},
+	{87, "ENOATTR", "attribute not found"},
+	{88, "EDOOFUS", "programming error"},
+	{89, "EBADMSG", "bad message"},
+	{90, "EMULTIHOP", "multihop attempted"},
+	{91, "ENOLINK", "link has been severed"},
+	{92, "EPROTO", "protocol error"},
+	{93, "ENOMEDIUM", "no medium found"},
+	{94, "EUNUSED94", "unknown error: 94"},
+	{95, "EUNUSED95", "unknown error: 95"},
+	{96, "EUNUSED96", "unknown error: 96"},
+	{97, "EUNUSED97", "unknown error: 97"},
+	{98, "EUNUSED98", "unknown error: 98"},
+	{99, "ELAST", "unknown error: 99"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGIOT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "suspended (signal)"},
+	{18, "SIGTSTP", "suspended"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+	{32, "SIGTHR", "thread Scheduler"},
+	{33, "SIGCKPT", "checkPoint"},
+	{34, "SIGCKPTEXIT", "checkPointExit"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_freebsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_freebsd_386.go
new file mode 100644
index 000000000..3689c8084
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_freebsd_386.go
@@ -0,0 +1,1936 @@
+// mkerrors.sh -m32
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build 386,freebsd
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -m32 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                   = 0x10
+	AF_ARP                         = 0x23
+	AF_ATM                         = 0x1e
+	AF_BLUETOOTH                   = 0x24
+	AF_CCITT                       = 0xa
+	AF_CHAOS                       = 0x5
+	AF_CNT                         = 0x15
+	AF_COIP                        = 0x14
+	AF_DATAKIT                     = 0x9
+	AF_DECnet                      = 0xc
+	AF_DLI                         = 0xd
+	AF_E164                        = 0x1a
+	AF_ECMA                        = 0x8
+	AF_HYLINK                      = 0xf
+	AF_IEEE80211                   = 0x25
+	AF_IMPLINK                     = 0x3
+	AF_INET                        = 0x2
+	AF_INET6                       = 0x1c
+	AF_INET6_SDP                   = 0x2a
+	AF_INET_SDP                    = 0x28
+	AF_IPX                         = 0x17
+	AF_ISDN                        = 0x1a
+	AF_ISO                         = 0x7
+	AF_LAT                         = 0xe
+	AF_LINK                        = 0x12
+	AF_LOCAL                       = 0x1
+	AF_MAX                         = 0x2a
+	AF_NATM                        = 0x1d
+	AF_NETBIOS                     = 0x6
+	AF_NETGRAPH                    = 0x20
+	AF_OSI                         = 0x7
+	AF_PUP                         = 0x4
+	AF_ROUTE                       = 0x11
+	AF_SCLUSTER                    = 0x22
+	AF_SIP                         = 0x18
+	AF_SLOW                        = 0x21
+	AF_SNA                         = 0xb
+	AF_UNIX                        = 0x1
+	AF_UNSPEC                      = 0x0
+	AF_VENDOR00                    = 0x27
+	AF_VENDOR01                    = 0x29
+	AF_VENDOR02                    = 0x2b
+	AF_VENDOR03                    = 0x2d
+	AF_VENDOR04                    = 0x2f
+	AF_VENDOR05                    = 0x31
+	AF_VENDOR06                    = 0x33
+	AF_VENDOR07                    = 0x35
+	AF_VENDOR08                    = 0x37
+	AF_VENDOR09                    = 0x39
+	AF_VENDOR10                    = 0x3b
+	AF_VENDOR11                    = 0x3d
+	AF_VENDOR12                    = 0x3f
+	AF_VENDOR13                    = 0x41
+	AF_VENDOR14                    = 0x43
+	AF_VENDOR15                    = 0x45
+	AF_VENDOR16                    = 0x47
+	AF_VENDOR17                    = 0x49
+	AF_VENDOR18                    = 0x4b
+	AF_VENDOR19                    = 0x4d
+	AF_VENDOR20                    = 0x4f
+	AF_VENDOR21                    = 0x51
+	AF_VENDOR22                    = 0x53
+	AF_VENDOR23                    = 0x55
+	AF_VENDOR24                    = 0x57
+	AF_VENDOR25                    = 0x59
+	AF_VENDOR26                    = 0x5b
+	AF_VENDOR27                    = 0x5d
+	AF_VENDOR28                    = 0x5f
+	AF_VENDOR29                    = 0x61
+	AF_VENDOR30                    = 0x63
+	AF_VENDOR31                    = 0x65
+	AF_VENDOR32                    = 0x67
+	AF_VENDOR33                    = 0x69
+	AF_VENDOR34                    = 0x6b
+	AF_VENDOR35                    = 0x6d
+	AF_VENDOR36                    = 0x6f
+	AF_VENDOR37                    = 0x71
+	AF_VENDOR38                    = 0x73
+	AF_VENDOR39                    = 0x75
+	AF_VENDOR40                    = 0x77
+	AF_VENDOR41                    = 0x79
+	AF_VENDOR42                    = 0x7b
+	AF_VENDOR43                    = 0x7d
+	AF_VENDOR44                    = 0x7f
+	AF_VENDOR45                    = 0x81
+	AF_VENDOR46                    = 0x83
+	AF_VENDOR47                    = 0x85
+	ALTWERASE                      = 0x200
+	B0                             = 0x0
+	B110                           = 0x6e
+	B115200                        = 0x1c200
+	B1200                          = 0x4b0
+	B134                           = 0x86
+	B14400                         = 0x3840
+	B150                           = 0x96
+	B1800                          = 0x708
+	B19200                         = 0x4b00
+	B200                           = 0xc8
+	B230400                        = 0x38400
+	B2400                          = 0x960
+	B28800                         = 0x7080
+	B300                           = 0x12c
+	B38400                         = 0x9600
+	B460800                        = 0x70800
+	B4800                          = 0x12c0
+	B50                            = 0x32
+	B57600                         = 0xe100
+	B600                           = 0x258
+	B7200                          = 0x1c20
+	B75                            = 0x4b
+	B76800                         = 0x12c00
+	B921600                        = 0xe1000
+	B9600                          = 0x2580
+	BIOCFEEDBACK                   = 0x8004427c
+	BIOCFLUSH                      = 0x20004268
+	BIOCGBLEN                      = 0x40044266
+	BIOCGDIRECTION                 = 0x40044276
+	BIOCGDLT                       = 0x4004426a
+	BIOCGDLTLIST                   = 0xc0084279
+	BIOCGETBUFMODE                 = 0x4004427d
+	BIOCGETIF                      = 0x4020426b
+	BIOCGETZMAX                    = 0x4004427f
+	BIOCGHDRCMPLT                  = 0x40044274
+	BIOCGRSIG                      = 0x40044272
+	BIOCGRTIMEOUT                  = 0x4008426e
+	BIOCGSEESENT                   = 0x40044276
+	BIOCGSTATS                     = 0x4008426f
+	BIOCGTSTAMP                    = 0x40044283
+	BIOCIMMEDIATE                  = 0x80044270
+	BIOCLOCK                       = 0x2000427a
+	BIOCPROMISC                    = 0x20004269
+	BIOCROTZBUF                    = 0x400c4280
+	BIOCSBLEN                      = 0xc0044266
+	BIOCSDIRECTION                 = 0x80044277
+	BIOCSDLT                       = 0x80044278
+	BIOCSETBUFMODE                 = 0x8004427e
+	BIOCSETF                       = 0x80084267
+	BIOCSETFNR                     = 0x80084282
+	BIOCSETIF                      = 0x8020426c
+	BIOCSETWF                      = 0x8008427b
+	BIOCSETZBUF                    = 0x800c4281
+	BIOCSHDRCMPLT                  = 0x80044275
+	BIOCSRSIG                      = 0x80044273
+	BIOCSRTIMEOUT                  = 0x8008426d
+	BIOCSSEESENT                   = 0x80044277
+	BIOCSTSTAMP                    = 0x80044284
+	BIOCVERSION                    = 0x40044271
+	BPF_A                          = 0x10
+	BPF_ABS                        = 0x20
+	BPF_ADD                        = 0x0
+	BPF_ALIGNMENT                  = 0x4
+	BPF_ALU                        = 0x4
+	BPF_AND                        = 0x50
+	BPF_B                          = 0x10
+	BPF_BUFMODE_BUFFER             = 0x1
+	BPF_BUFMODE_ZBUF               = 0x2
+	BPF_DIV                        = 0x30
+	BPF_H                          = 0x8
+	BPF_IMM                        = 0x0
+	BPF_IND                        = 0x40
+	BPF_JA                         = 0x0
+	BPF_JEQ                        = 0x10
+	BPF_JGE                        = 0x30
+	BPF_JGT                        = 0x20
+	BPF_JMP                        = 0x5
+	BPF_JSET                       = 0x40
+	BPF_K                          = 0x0
+	BPF_LD                         = 0x0
+	BPF_LDX                        = 0x1
+	BPF_LEN                        = 0x80
+	BPF_LSH                        = 0x60
+	BPF_MAJOR_VERSION              = 0x1
+	BPF_MAXBUFSIZE                 = 0x80000
+	BPF_MAXINSNS                   = 0x200
+	BPF_MEM                        = 0x60
+	BPF_MEMWORDS                   = 0x10
+	BPF_MINBUFSIZE                 = 0x20
+	BPF_MINOR_VERSION              = 0x1
+	BPF_MISC                       = 0x7
+	BPF_MOD                        = 0x90
+	BPF_MSH                        = 0xa0
+	BPF_MUL                        = 0x20
+	BPF_NEG                        = 0x80
+	BPF_OR                         = 0x40
+	BPF_RELEASE                    = 0x30bb6
+	BPF_RET                        = 0x6
+	BPF_RSH                        = 0x70
+	BPF_ST                         = 0x2
+	BPF_STX                        = 0x3
+	BPF_SUB                        = 0x10
+	BPF_TAX                        = 0x0
+	BPF_TXA                        = 0x80
+	BPF_T_BINTIME                  = 0x2
+	BPF_T_BINTIME_FAST             = 0x102
+	BPF_T_BINTIME_MONOTONIC        = 0x202
+	BPF_T_BINTIME_MONOTONIC_FAST   = 0x302
+	BPF_T_FAST                     = 0x100
+	BPF_T_FLAG_MASK                = 0x300
+	BPF_T_FORMAT_MASK              = 0x3
+	BPF_T_MICROTIME                = 0x0
+	BPF_T_MICROTIME_FAST           = 0x100
+	BPF_T_MICROTIME_MONOTONIC      = 0x200
+	BPF_T_MICROTIME_MONOTONIC_FAST = 0x300
+	BPF_T_MONOTONIC                = 0x200
+	BPF_T_MONOTONIC_FAST           = 0x300
+	BPF_T_NANOTIME                 = 0x1
+	BPF_T_NANOTIME_FAST            = 0x101
+	BPF_T_NANOTIME_MONOTONIC       = 0x201
+	BPF_T_NANOTIME_MONOTONIC_FAST  = 0x301
+	BPF_T_NONE                     = 0x3
+	BPF_T_NORMAL                   = 0x0
+	BPF_W                          = 0x0
+	BPF_X                          = 0x8
+	BPF_XOR                        = 0xa0
+	BRKINT                         = 0x2
+	CAP_ACCEPT                     = 0x200000020000000
+	CAP_ACL_CHECK                  = 0x400000000010000
+	CAP_ACL_DELETE                 = 0x400000000020000
+	CAP_ACL_GET                    = 0x400000000040000
+	CAP_ACL_SET                    = 0x400000000080000
+	CAP_ALL0                       = 0x20007ffffffffff
+	CAP_ALL1                       = 0x4000000001fffff
+	CAP_BIND                       = 0x200000040000000
+	CAP_BINDAT                     = 0x200008000000400
+	CAP_CHFLAGSAT                  = 0x200000000001400
+	CAP_CONNECT                    = 0x200000080000000
+	CAP_CONNECTAT                  = 0x200010000000400
+	CAP_CREATE                     = 0x200000000000040
+	CAP_EVENT                      = 0x400000000000020
+	CAP_EXTATTR_DELETE             = 0x400000000001000
+	CAP_EXTATTR_GET                = 0x400000000002000
+	CAP_EXTATTR_LIST               = 0x400000000004000
+	CAP_EXTATTR_SET                = 0x400000000008000
+	CAP_FCHDIR                     = 0x200000000000800
+	CAP_FCHFLAGS                   = 0x200000000001000
+	CAP_FCHMOD                     = 0x200000000002000
+	CAP_FCHMODAT                   = 0x200000000002400
+	CAP_FCHOWN                     = 0x200000000004000
+	CAP_FCHOWNAT                   = 0x200000000004400
+	CAP_FCNTL                      = 0x200000000008000
+	CAP_FCNTL_ALL                  = 0x78
+	CAP_FCNTL_GETFL                = 0x8
+	CAP_FCNTL_GETOWN               = 0x20
+	CAP_FCNTL_SETFL                = 0x10
+	CAP_FCNTL_SETOWN               = 0x40
+	CAP_FEXECVE                    = 0x200000000000080
+	CAP_FLOCK                      = 0x200000000010000
+	CAP_FPATHCONF                  = 0x200000000020000
+	CAP_FSCK                       = 0x200000000040000
+	CAP_FSTAT                      = 0x200000000080000
+	CAP_FSTATAT                    = 0x200000000080400
+	CAP_FSTATFS                    = 0x200000000100000
+	CAP_FSYNC                      = 0x200000000000100
+	CAP_FTRUNCATE                  = 0x200000000000200
+	CAP_FUTIMES                    = 0x200000000200000
+	CAP_FUTIMESAT                  = 0x200000000200400
+	CAP_GETPEERNAME                = 0x200000100000000
+	CAP_GETSOCKNAME                = 0x200000200000000
+	CAP_GETSOCKOPT                 = 0x200000400000000
+	CAP_IOCTL                      = 0x400000000000080
+	CAP_IOCTLS_ALL                 = 0x7fffffff
+	CAP_KQUEUE                     = 0x400000000100040
+	CAP_KQUEUE_CHANGE              = 0x400000000100000
+	CAP_KQUEUE_EVENT               = 0x400000000000040
+	CAP_LINKAT_SOURCE              = 0x200020000000400
+	CAP_LINKAT_TARGET              = 0x200000000400400
+	CAP_LISTEN                     = 0x200000800000000
+	CAP_LOOKUP                     = 0x200000000000400
+	CAP_MAC_GET                    = 0x400000000000001
+	CAP_MAC_SET                    = 0x400000000000002
+	CAP_MKDIRAT                    = 0x200000000800400
+	CAP_MKFIFOAT                   = 0x200000001000400
+	CAP_MKNODAT                    = 0x200000002000400
+	CAP_MMAP                       = 0x200000000000010
+	CAP_MMAP_R                     = 0x20000000000001d
+	CAP_MMAP_RW                    = 0x20000000000001f
+	CAP_MMAP_RWX                   = 0x20000000000003f
+	CAP_MMAP_RX                    = 0x20000000000003d
+	CAP_MMAP_W                     = 0x20000000000001e
+	CAP_MMAP_WX                    = 0x20000000000003e
+	CAP_MMAP_X                     = 0x20000000000003c
+	CAP_PDGETPID                   = 0x400000000000200
+	CAP_PDKILL                     = 0x400000000000800
+	CAP_PDWAIT                     = 0x400000000000400
+	CAP_PEELOFF                    = 0x200001000000000
+	CAP_POLL_EVENT                 = 0x400000000000020
+	CAP_PREAD                      = 0x20000000000000d
+	CAP_PWRITE                     = 0x20000000000000e
+	CAP_READ                       = 0x200000000000001
+	CAP_RECV                       = 0x200000000000001
+	CAP_RENAMEAT_SOURCE            = 0x200000004000400
+	CAP_RENAMEAT_TARGET            = 0x200040000000400
+	CAP_RIGHTS_VERSION             = 0x0
+	CAP_RIGHTS_VERSION_00          = 0x0
+	CAP_SEEK                       = 0x20000000000000c
+	CAP_SEEK_TELL                  = 0x200000000000004
+	CAP_SEM_GETVALUE               = 0x400000000000004
+	CAP_SEM_POST                   = 0x400000000000008
+	CAP_SEM_WAIT                   = 0x400000000000010
+	CAP_SEND                       = 0x200000000000002
+	CAP_SETSOCKOPT                 = 0x200002000000000
+	CAP_SHUTDOWN                   = 0x200004000000000
+	CAP_SOCK_CLIENT                = 0x200007780000003
+	CAP_SOCK_SERVER                = 0x200007f60000003
+	CAP_SYMLINKAT                  = 0x200000008000400
+	CAP_TTYHOOK                    = 0x400000000000100
+	CAP_UNLINKAT                   = 0x200000010000400
+	CAP_UNUSED0_44                 = 0x200080000000000
+	CAP_UNUSED0_57                 = 0x300000000000000
+	CAP_UNUSED1_22                 = 0x400000000200000
+	CAP_UNUSED1_57                 = 0x500000000000000
+	CAP_WRITE                      = 0x200000000000002
+	CFLUSH                         = 0xf
+	CLOCAL                         = 0x8000
+	CLOCK_MONOTONIC                = 0x4
+	CLOCK_MONOTONIC_FAST           = 0xc
+	CLOCK_MONOTONIC_PRECISE        = 0xb
+	CLOCK_PROCESS_CPUTIME_ID       = 0xf
+	CLOCK_PROF                     = 0x2
+	CLOCK_REALTIME                 = 0x0
+	CLOCK_REALTIME_FAST            = 0xa
+	CLOCK_REALTIME_PRECISE         = 0x9
+	CLOCK_SECOND                   = 0xd
+	CLOCK_THREAD_CPUTIME_ID        = 0xe
+	CLOCK_UPTIME                   = 0x5
+	CLOCK_UPTIME_FAST              = 0x8
+	CLOCK_UPTIME_PRECISE           = 0x7
+	CLOCK_VIRTUAL                  = 0x1
+	CPUSTATES                      = 0x5
+	CP_IDLE                        = 0x4
+	CP_INTR                        = 0x3
+	CP_NICE                        = 0x1
+	CP_SYS                         = 0x2
+	CP_USER                        = 0x0
+	CREAD                          = 0x800
+	CRTSCTS                        = 0x30000
+	CS5                            = 0x0
+	CS6                            = 0x100
+	CS7                            = 0x200
+	CS8                            = 0x300
+	CSIZE                          = 0x300
+	CSTART                         = 0x11
+	CSTATUS                        = 0x14
+	CSTOP                          = 0x13
+	CSTOPB                         = 0x400
+	CSUSP                          = 0x1a
+	CTL_HW                         = 0x6
+	CTL_KERN                       = 0x1
+	CTL_MAXNAME                    = 0x18
+	CTL_NET                        = 0x4
+	DIOCGATTR                      = 0xc144648e
+	DIOCGDELETE                    = 0x80106488
+	DIOCGFLUSH                     = 0x20006487
+	DIOCGFRONTSTUFF                = 0x40086486
+	DIOCGFWHEADS                   = 0x40046483
+	DIOCGFWSECTORS                 = 0x40046482
+	DIOCGIDENT                     = 0x41006489
+	DIOCGMEDIASIZE                 = 0x40086481
+	DIOCGPHYSPATH                  = 0x4400648d
+	DIOCGPROVIDERNAME              = 0x4400648a
+	DIOCGSECTORSIZE                = 0x40046480
+	DIOCGSTRIPEOFFSET              = 0x4008648c
+	DIOCGSTRIPESIZE                = 0x4008648b
+	DIOCSKERNELDUMP                = 0x804c6490
+	DIOCSKERNELDUMP_FREEBSD11      = 0x80046485
+	DIOCZONECMD                    = 0xc06c648f
+	DLT_A429                       = 0xb8
+	DLT_A653_ICM                   = 0xb9
+	DLT_AIRONET_HEADER             = 0x78
+	DLT_AOS                        = 0xde
+	DLT_APPLE_IP_OVER_IEEE1394     = 0x8a
+	DLT_ARCNET                     = 0x7
+	DLT_ARCNET_LINUX               = 0x81
+	DLT_ATM_CLIP                   = 0x13
+	DLT_ATM_RFC1483                = 0xb
+	DLT_AURORA                     = 0x7e
+	DLT_AX25                       = 0x3
+	DLT_AX25_KISS                  = 0xca
+	DLT_BACNET_MS_TP               = 0xa5
+	DLT_BLUETOOTH_BREDR_BB         = 0xff
+	DLT_BLUETOOTH_HCI_H4           = 0xbb
+	DLT_BLUETOOTH_HCI_H4_WITH_PHDR = 0xc9
+	DLT_BLUETOOTH_LE_LL            = 0xfb
+	DLT_BLUETOOTH_LE_LL_WITH_PHDR  = 0x100
+	DLT_BLUETOOTH_LINUX_MONITOR    = 0xfe
+	DLT_CAN20B                     = 0xbe
+	DLT_CAN_SOCKETCAN              = 0xe3
+	DLT_CHAOS                      = 0x5
+	DLT_CHDLC                      = 0x68
+	DLT_CISCO_IOS                  = 0x76
+	DLT_CLASS_NETBSD_RAWAF         = 0x2240000
+	DLT_C_HDLC                     = 0x68
+	DLT_C_HDLC_WITH_DIR            = 0xcd
+	DLT_DBUS                       = 0xe7
+	DLT_DECT                       = 0xdd
+	DLT_DISPLAYPORT_AUX            = 0x113
+	DLT_DOCSIS                     = 0x8f
+	DLT_DOCSIS31_XRA31             = 0x111
+	DLT_DVB_CI                     = 0xeb
+	DLT_ECONET                     = 0x73
+	DLT_EN10MB                     = 0x1
+	DLT_EN3MB                      = 0x2
+	DLT_ENC                        = 0x6d
+	DLT_EPON                       = 0x103
+	DLT_ERF                        = 0xc5
+	DLT_ERF_ETH                    = 0xaf
+	DLT_ERF_POS                    = 0xb0
+	DLT_ETHERNET_MPACKET           = 0x112
+	DLT_FC_2                       = 0xe0
+	DLT_FC_2_WITH_FRAME_DELIMS     = 0xe1
+	DLT_FDDI                       = 0xa
+	DLT_FLEXRAY                    = 0xd2
+	DLT_FRELAY                     = 0x6b
+	DLT_FRELAY_WITH_DIR            = 0xce
+	DLT_GCOM_SERIAL                = 0xad
+	DLT_GCOM_T1E1                  = 0xac
+	DLT_GPF_F                      = 0xab
+	DLT_GPF_T                      = 0xaa
+	DLT_GPRS_LLC                   = 0xa9
+	DLT_GSMTAP_ABIS                = 0xda
+	DLT_GSMTAP_UM                  = 0xd9
+	DLT_IBM_SN                     = 0x92
+	DLT_IBM_SP                     = 0x91
+	DLT_IEEE802                    = 0x6
+	DLT_IEEE802_11                 = 0x69
+	DLT_IEEE802_11_RADIO           = 0x7f
+	DLT_IEEE802_11_RADIO_AVS       = 0xa3
+	DLT_IEEE802_15_4               = 0xc3
+	DLT_IEEE802_15_4_LINUX         = 0xbf
+	DLT_IEEE802_15_4_NOFCS         = 0xe6
+	DLT_IEEE802_15_4_NONASK_PHY    = 0xd7
+	DLT_IEEE802_16_MAC_CPS         = 0xbc
+	DLT_IEEE802_16_MAC_CPS_RADIO   = 0xc1
+	DLT_INFINIBAND                 = 0xf7
+	DLT_IPFILTER                   = 0x74
+	DLT_IPMB                       = 0xc7
+	DLT_IPMB_LINUX                 = 0xd1
+	DLT_IPMI_HPM_2                 = 0x104
+	DLT_IPNET                      = 0xe2
+	DLT_IPOIB                      = 0xf2
+	DLT_IPV4                       = 0xe4
+	DLT_IPV6                       = 0xe5
+	DLT_IP_OVER_FC                 = 0x7a
+	DLT_ISO_14443                  = 0x108
+	DLT_JUNIPER_ATM1               = 0x89
+	DLT_JUNIPER_ATM2               = 0x87
+	DLT_JUNIPER_ATM_CEMIC          = 0xee
+	DLT_JUNIPER_CHDLC              = 0xb5
+	DLT_JUNIPER_ES                 = 0x84
+	DLT_JUNIPER_ETHER              = 0xb2
+	DLT_JUNIPER_FIBRECHANNEL       = 0xea
+	DLT_JUNIPER_FRELAY             = 0xb4
+	DLT_JUNIPER_GGSN               = 0x85
+	DLT_JUNIPER_ISM                = 0xc2
+	DLT_JUNIPER_MFR                = 0x86
+	DLT_JUNIPER_MLFR               = 0x83
+	DLT_JUNIPER_MLPPP              = 0x82
+	DLT_JUNIPER_MONITOR            = 0xa4
+	DLT_JUNIPER_PIC_PEER           = 0xae
+	DLT_JUNIPER_PPP                = 0xb3
+	DLT_JUNIPER_PPPOE              = 0xa7
+	DLT_JUNIPER_PPPOE_ATM          = 0xa8
+	DLT_JUNIPER_SERVICES           = 0x88
+	DLT_JUNIPER_SRX_E2E            = 0xe9
+	DLT_JUNIPER_ST                 = 0xc8
+	DLT_JUNIPER_VP                 = 0xb7
+	DLT_JUNIPER_VS                 = 0xe8
+	DLT_LAPB_WITH_DIR              = 0xcf
+	DLT_LAPD                       = 0xcb
+	DLT_LIN                        = 0xd4
+	DLT_LINUX_EVDEV                = 0xd8
+	DLT_LINUX_IRDA                 = 0x90
+	DLT_LINUX_LAPD                 = 0xb1
+	DLT_LINUX_PPP_WITHDIRECTION    = 0xa6
+	DLT_LINUX_SLL                  = 0x71
+	DLT_LOOP                       = 0x6c
+	DLT_LORATAP                    = 0x10e
+	DLT_LTALK                      = 0x72
+	DLT_MATCHING_MAX               = 0x113
+	DLT_MATCHING_MIN               = 0x68
+	DLT_MFR                        = 0xb6
+	DLT_MOST                       = 0xd3
+	DLT_MPEG_2_TS                  = 0xf3
+	DLT_MPLS                       = 0xdb
+	DLT_MTP2                       = 0x8c
+	DLT_MTP2_WITH_PHDR             = 0x8b
+	DLT_MTP3                       = 0x8d
+	DLT_MUX27010                   = 0xec
+	DLT_NETANALYZER                = 0xf0
+	DLT_NETANALYZER_TRANSPARENT    = 0xf1
+	DLT_NETLINK                    = 0xfd
+	DLT_NFC_LLCP                   = 0xf5
+	DLT_NFLOG                      = 0xef
+	DLT_NG40                       = 0xf4
+	DLT_NORDIC_BLE                 = 0x110
+	DLT_NULL                       = 0x0
+	DLT_OPENFLOW                   = 0x10b
+	DLT_PCI_EXP                    = 0x7d
+	DLT_PFLOG                      = 0x75
+	DLT_PFSYNC                     = 0x79
+	DLT_PKTAP                      = 0x102
+	DLT_PPI                        = 0xc0
+	DLT_PPP                        = 0x9
+	DLT_PPP_BSDOS                  = 0xe
+	DLT_PPP_ETHER                  = 0x33
+	DLT_PPP_PPPD                   = 0xa6
+	DLT_PPP_SERIAL                 = 0x32
+	DLT_PPP_WITH_DIR               = 0xcc
+	DLT_PPP_WITH_DIRECTION         = 0xa6
+	DLT_PRISM_HEADER               = 0x77
+	DLT_PROFIBUS_DL                = 0x101
+	DLT_PRONET                     = 0x4
+	DLT_RAIF1                      = 0xc6
+	DLT_RAW                        = 0xc
+	DLT_RDS                        = 0x109
+	DLT_REDBACK_SMARTEDGE          = 0x20
+	DLT_RIO                        = 0x7c
+	DLT_RTAC_SERIAL                = 0xfa
+	DLT_SCCP                       = 0x8e
+	DLT_SCTP                       = 0xf8
+	DLT_SDLC                       = 0x10c
+	DLT_SITA                       = 0xc4
+	DLT_SLIP                       = 0x8
+	DLT_SLIP_BSDOS                 = 0xd
+	DLT_STANAG_5066_D_PDU          = 0xed
+	DLT_SUNATM                     = 0x7b
+	DLT_SYMANTEC_FIREWALL          = 0x63
+	DLT_TI_LLN_SNIFFER             = 0x10d
+	DLT_TZSP                       = 0x80
+	DLT_USB                        = 0xba
+	DLT_USBPCAP                    = 0xf9
+	DLT_USB_DARWIN                 = 0x10a
+	DLT_USB_FREEBSD                = 0xba
+	DLT_USB_LINUX                  = 0xbd
+	DLT_USB_LINUX_MMAPPED          = 0xdc
+	DLT_USER0                      = 0x93
+	DLT_USER1                      = 0x94
+	DLT_USER10                     = 0x9d
+	DLT_USER11                     = 0x9e
+	DLT_USER12                     = 0x9f
+	DLT_USER13                     = 0xa0
+	DLT_USER14                     = 0xa1
+	DLT_USER15                     = 0xa2
+	DLT_USER2                      = 0x95
+	DLT_USER3                      = 0x96
+	DLT_USER4                      = 0x97
+	DLT_USER5                      = 0x98
+	DLT_USER6                      = 0x99
+	DLT_USER7                      = 0x9a
+	DLT_USER8                      = 0x9b
+	DLT_USER9                      = 0x9c
+	DLT_VSOCK                      = 0x10f
+	DLT_WATTSTOPPER_DLM            = 0x107
+	DLT_WIHART                     = 0xdf
+	DLT_WIRESHARK_UPPER_PDU        = 0xfc
+	DLT_X2E_SERIAL                 = 0xd5
+	DLT_X2E_XORAYA                 = 0xd6
+	DLT_ZWAVE_R1_R2                = 0x105
+	DLT_ZWAVE_R3                   = 0x106
+	DT_BLK                         = 0x6
+	DT_CHR                         = 0x2
+	DT_DIR                         = 0x4
+	DT_FIFO                        = 0x1
+	DT_LNK                         = 0xa
+	DT_REG                         = 0x8
+	DT_SOCK                        = 0xc
+	DT_UNKNOWN                     = 0x0
+	DT_WHT                         = 0xe
+	ECHO                           = 0x8
+	ECHOCTL                        = 0x40
+	ECHOE                          = 0x2
+	ECHOK                          = 0x4
+	ECHOKE                         = 0x1
+	ECHONL                         = 0x10
+	ECHOPRT                        = 0x20
+	EVFILT_AIO                     = -0x3
+	EVFILT_EMPTY                   = -0xd
+	EVFILT_FS                      = -0x9
+	EVFILT_LIO                     = -0xa
+	EVFILT_PROC                    = -0x5
+	EVFILT_PROCDESC                = -0x8
+	EVFILT_READ                    = -0x1
+	EVFILT_SENDFILE                = -0xc
+	EVFILT_SIGNAL                  = -0x6
+	EVFILT_SYSCOUNT                = 0xd
+	EVFILT_TIMER                   = -0x7
+	EVFILT_USER                    = -0xb
+	EVFILT_VNODE                   = -0x4
+	EVFILT_WRITE                   = -0x2
+	EVNAMEMAP_NAME_SIZE            = 0x40
+	EV_ADD                         = 0x1
+	EV_CLEAR                       = 0x20
+	EV_DELETE                      = 0x2
+	EV_DISABLE                     = 0x8
+	EV_DISPATCH                    = 0x80
+	EV_DROP                        = 0x1000
+	EV_ENABLE                      = 0x4
+	EV_EOF                         = 0x8000
+	EV_ERROR                       = 0x4000
+	EV_FLAG1                       = 0x2000
+	EV_FLAG2                       = 0x4000
+	EV_FORCEONESHOT                = 0x100
+	EV_ONESHOT                     = 0x10
+	EV_RECEIPT                     = 0x40
+	EV_SYSFLAGS                    = 0xf000
+	EXTA                           = 0x4b00
+	EXTATTR_MAXNAMELEN             = 0xff
+	EXTATTR_NAMESPACE_EMPTY        = 0x0
+	EXTATTR_NAMESPACE_SYSTEM       = 0x2
+	EXTATTR_NAMESPACE_USER         = 0x1
+	EXTB                           = 0x9600
+	EXTPROC                        = 0x800
+	FD_CLOEXEC                     = 0x1
+	FD_SETSIZE                     = 0x400
+	FLUSHO                         = 0x800000
+	F_CANCEL                       = 0x5
+	F_DUP2FD                       = 0xa
+	F_DUP2FD_CLOEXEC               = 0x12
+	F_DUPFD                        = 0x0
+	F_DUPFD_CLOEXEC                = 0x11
+	F_GETFD                        = 0x1
+	F_GETFL                        = 0x3
+	F_GETLK                        = 0xb
+	F_GETOWN                       = 0x5
+	F_OGETLK                       = 0x7
+	F_OK                           = 0x0
+	F_OSETLK                       = 0x8
+	F_OSETLKW                      = 0x9
+	F_RDAHEAD                      = 0x10
+	F_RDLCK                        = 0x1
+	F_READAHEAD                    = 0xf
+	F_SETFD                        = 0x2
+	F_SETFL                        = 0x4
+	F_SETLK                        = 0xc
+	F_SETLKW                       = 0xd
+	F_SETLK_REMOTE                 = 0xe
+	F_SETOWN                       = 0x6
+	F_UNLCK                        = 0x2
+	F_UNLCKSYS                     = 0x4
+	F_WRLCK                        = 0x3
+	HUPCL                          = 0x4000
+	HW_MACHINE                     = 0x1
+	ICANON                         = 0x100
+	ICMP6_FILTER                   = 0x12
+	ICRNL                          = 0x100
+	IEXTEN                         = 0x400
+	IFAN_ARRIVAL                   = 0x0
+	IFAN_DEPARTURE                 = 0x1
+	IFCAP_WOL_MAGIC                = 0x2000
+	IFF_ALLMULTI                   = 0x200
+	IFF_ALTPHYS                    = 0x4000
+	IFF_BROADCAST                  = 0x2
+	IFF_CANTCHANGE                 = 0x218f52
+	IFF_CANTCONFIG                 = 0x10000
+	IFF_DEBUG                      = 0x4
+	IFF_DRV_OACTIVE                = 0x400
+	IFF_DRV_RUNNING                = 0x40
+	IFF_DYING                      = 0x200000
+	IFF_LINK0                      = 0x1000
+	IFF_LINK1                      = 0x2000
+	IFF_LINK2                      = 0x4000
+	IFF_LOOPBACK                   = 0x8
+	IFF_MONITOR                    = 0x40000
+	IFF_MULTICAST                  = 0x8000
+	IFF_NOARP                      = 0x80
+	IFF_NOGROUP                    = 0x800000
+	IFF_OACTIVE                    = 0x400
+	IFF_POINTOPOINT                = 0x10
+	IFF_PPROMISC                   = 0x20000
+	IFF_PROMISC                    = 0x100
+	IFF_RENAMING                   = 0x400000
+	IFF_RUNNING                    = 0x40
+	IFF_SIMPLEX                    = 0x800
+	IFF_STATICARP                  = 0x80000
+	IFF_UP                         = 0x1
+	IFNAMSIZ                       = 0x10
+	IFT_BRIDGE                     = 0xd1
+	IFT_CARP                       = 0xf8
+	IFT_IEEE1394                   = 0x90
+	IFT_INFINIBAND                 = 0xc7
+	IFT_L2VLAN                     = 0x87
+	IFT_L3IPVLAN                   = 0x88
+	IFT_PPP                        = 0x17
+	IFT_PROPVIRTUAL                = 0x35
+	IGNBRK                         = 0x1
+	IGNCR                          = 0x80
+	IGNPAR                         = 0x4
+	IMAXBEL                        = 0x2000
+	INLCR                          = 0x40
+	INPCK                          = 0x10
+	IN_CLASSA_HOST                 = 0xffffff
+	IN_CLASSA_MAX                  = 0x80
+	IN_CLASSA_NET                  = 0xff000000
+	IN_CLASSA_NSHIFT               = 0x18
+	IN_CLASSB_HOST                 = 0xffff
+	IN_CLASSB_MAX                  = 0x10000
+	IN_CLASSB_NET                  = 0xffff0000
+	IN_CLASSB_NSHIFT               = 0x10
+	IN_CLASSC_HOST                 = 0xff
+	IN_CLASSC_NET                  = 0xffffff00
+	IN_CLASSC_NSHIFT               = 0x8
+	IN_CLASSD_HOST                 = 0xfffffff
+	IN_CLASSD_NET                  = 0xf0000000
+	IN_CLASSD_NSHIFT               = 0x1c
+	IN_LOOPBACKNET                 = 0x7f
+	IN_RFC3021_MASK                = 0xfffffffe
+	IPPROTO_3PC                    = 0x22
+	IPPROTO_ADFS                   = 0x44
+	IPPROTO_AH                     = 0x33
+	IPPROTO_AHIP                   = 0x3d
+	IPPROTO_APES                   = 0x63
+	IPPROTO_ARGUS                  = 0xd
+	IPPROTO_AX25                   = 0x5d
+	IPPROTO_BHA                    = 0x31
+	IPPROTO_BLT                    = 0x1e
+	IPPROTO_BRSATMON               = 0x4c
+	IPPROTO_CARP                   = 0x70
+	IPPROTO_CFTP                   = 0x3e
+	IPPROTO_CHAOS                  = 0x10
+	IPPROTO_CMTP                   = 0x26
+	IPPROTO_CPHB                   = 0x49
+	IPPROTO_CPNX                   = 0x48
+	IPPROTO_DDP                    = 0x25
+	IPPROTO_DGP                    = 0x56
+	IPPROTO_DIVERT                 = 0x102
+	IPPROTO_DONE                   = 0x101
+	IPPROTO_DSTOPTS                = 0x3c
+	IPPROTO_EGP                    = 0x8
+	IPPROTO_EMCON                  = 0xe
+	IPPROTO_ENCAP                  = 0x62
+	IPPROTO_EON                    = 0x50
+	IPPROTO_ESP                    = 0x32
+	IPPROTO_ETHERIP                = 0x61
+	IPPROTO_FRAGMENT               = 0x2c
+	IPPROTO_GGP                    = 0x3
+	IPPROTO_GMTP                   = 0x64
+	IPPROTO_GRE                    = 0x2f
+	IPPROTO_HELLO                  = 0x3f
+	IPPROTO_HIP                    = 0x8b
+	IPPROTO_HMP                    = 0x14
+	IPPROTO_HOPOPTS                = 0x0
+	IPPROTO_ICMP                   = 0x1
+	IPPROTO_ICMPV6                 = 0x3a
+	IPPROTO_IDP                    = 0x16
+	IPPROTO_IDPR                   = 0x23
+	IPPROTO_IDRP                   = 0x2d
+	IPPROTO_IGMP                   = 0x2
+	IPPROTO_IGP                    = 0x55
+	IPPROTO_IGRP                   = 0x58
+	IPPROTO_IL                     = 0x28
+	IPPROTO_INLSP                  = 0x34
+	IPPROTO_INP                    = 0x20
+	IPPROTO_IP                     = 0x0
+	IPPROTO_IPCOMP                 = 0x6c
+	IPPROTO_IPCV                   = 0x47
+	IPPROTO_IPEIP                  = 0x5e
+	IPPROTO_IPIP                   = 0x4
+	IPPROTO_IPPC                   = 0x43
+	IPPROTO_IPV4                   = 0x4
+	IPPROTO_IPV6                   = 0x29
+	IPPROTO_IRTP                   = 0x1c
+	IPPROTO_KRYPTOLAN              = 0x41
+	IPPROTO_LARP                   = 0x5b
+	IPPROTO_LEAF1                  = 0x19
+	IPPROTO_LEAF2                  = 0x1a
+	IPPROTO_MAX                    = 0x100
+	IPPROTO_MEAS                   = 0x13
+	IPPROTO_MH                     = 0x87
+	IPPROTO_MHRP                   = 0x30
+	IPPROTO_MICP                   = 0x5f
+	IPPROTO_MOBILE                 = 0x37
+	IPPROTO_MPLS                   = 0x89
+	IPPROTO_MTP                    = 0x5c
+	IPPROTO_MUX                    = 0x12
+	IPPROTO_ND                     = 0x4d
+	IPPROTO_NHRP                   = 0x36
+	IPPROTO_NONE                   = 0x3b
+	IPPROTO_NSP                    = 0x1f
+	IPPROTO_NVPII                  = 0xb
+	IPPROTO_OLD_DIVERT             = 0xfe
+	IPPROTO_OSPFIGP                = 0x59
+	IPPROTO_PFSYNC                 = 0xf0
+	IPPROTO_PGM                    = 0x71
+	IPPROTO_PIGP                   = 0x9
+	IPPROTO_PIM                    = 0x67
+	IPPROTO_PRM                    = 0x15
+	IPPROTO_PUP                    = 0xc
+	IPPROTO_PVP                    = 0x4b
+	IPPROTO_RAW                    = 0xff
+	IPPROTO_RCCMON                 = 0xa
+	IPPROTO_RDP                    = 0x1b
+	IPPROTO_RESERVED_253           = 0xfd
+	IPPROTO_RESERVED_254           = 0xfe
+	IPPROTO_ROUTING                = 0x2b
+	IPPROTO_RSVP                   = 0x2e
+	IPPROTO_RVD                    = 0x42
+	IPPROTO_SATEXPAK               = 0x40
+	IPPROTO_SATMON                 = 0x45
+	IPPROTO_SCCSP                  = 0x60
+	IPPROTO_SCTP                   = 0x84
+	IPPROTO_SDRP                   = 0x2a
+	IPPROTO_SEND                   = 0x103
+	IPPROTO_SEP                    = 0x21
+	IPPROTO_SHIM6                  = 0x8c
+	IPPROTO_SKIP                   = 0x39
+	IPPROTO_SPACER                 = 0x7fff
+	IPPROTO_SRPC                   = 0x5a
+	IPPROTO_ST                     = 0x7
+	IPPROTO_SVMTP                  = 0x52
+	IPPROTO_SWIPE                  = 0x35
+	IPPROTO_TCF                    = 0x57
+	IPPROTO_TCP                    = 0x6
+	IPPROTO_TLSP                   = 0x38
+	IPPROTO_TP                     = 0x1d
+	IPPROTO_TPXX                   = 0x27
+	IPPROTO_TRUNK1                 = 0x17
+	IPPROTO_TRUNK2                 = 0x18
+	IPPROTO_TTP                    = 0x54
+	IPPROTO_UDP                    = 0x11
+	IPPROTO_UDPLITE                = 0x88
+	IPPROTO_VINES                  = 0x53
+	IPPROTO_VISA                   = 0x46
+	IPPROTO_VMTP                   = 0x51
+	IPPROTO_WBEXPAK                = 0x4f
+	IPPROTO_WBMON                  = 0x4e
+	IPPROTO_WSN                    = 0x4a
+	IPPROTO_XNET                   = 0xf
+	IPPROTO_XTP                    = 0x24
+	IPV6_AUTOFLOWLABEL             = 0x3b
+	IPV6_BINDANY                   = 0x40
+	IPV6_BINDMULTI                 = 0x41
+	IPV6_BINDV6ONLY                = 0x1b
+	IPV6_CHECKSUM                  = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS    = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP    = 0x1
+	IPV6_DEFHLIM                   = 0x40
+	IPV6_DONTFRAG                  = 0x3e
+	IPV6_DSTOPTS                   = 0x32
+	IPV6_FLOWID                    = 0x43
+	IPV6_FLOWINFO_MASK             = 0xffffff0f
+	IPV6_FLOWLABEL_LEN             = 0x14
+	IPV6_FLOWLABEL_MASK            = 0xffff0f00
+	IPV6_FLOWTYPE                  = 0x44
+	IPV6_FRAGTTL                   = 0x78
+	IPV6_FW_ADD                    = 0x1e
+	IPV6_FW_DEL                    = 0x1f
+	IPV6_FW_FLUSH                  = 0x20
+	IPV6_FW_GET                    = 0x22
+	IPV6_FW_ZERO                   = 0x21
+	IPV6_HLIMDEC                   = 0x1
+	IPV6_HOPLIMIT                  = 0x2f
+	IPV6_HOPOPTS                   = 0x31
+	IPV6_IPSEC_POLICY              = 0x1c
+	IPV6_JOIN_GROUP                = 0xc
+	IPV6_LEAVE_GROUP               = 0xd
+	IPV6_MAXHLIM                   = 0xff
+	IPV6_MAXOPTHDR                 = 0x800
+	IPV6_MAXPACKET                 = 0xffff
+	IPV6_MAX_GROUP_SRC_FILTER      = 0x200
+	IPV6_MAX_MEMBERSHIPS           = 0xfff
+	IPV6_MAX_SOCK_SRC_FILTER       = 0x80
+	IPV6_MMTU                      = 0x500
+	IPV6_MSFILTER                  = 0x4a
+	IPV6_MULTICAST_HOPS            = 0xa
+	IPV6_MULTICAST_IF              = 0x9
+	IPV6_MULTICAST_LOOP            = 0xb
+	IPV6_NEXTHOP                   = 0x30
+	IPV6_ORIGDSTADDR               = 0x48
+	IPV6_PATHMTU                   = 0x2c
+	IPV6_PKTINFO                   = 0x2e
+	IPV6_PORTRANGE                 = 0xe
+	IPV6_PORTRANGE_DEFAULT         = 0x0
+	IPV6_PORTRANGE_HIGH            = 0x1
+	IPV6_PORTRANGE_LOW             = 0x2
+	IPV6_PREFER_TEMPADDR           = 0x3f
+	IPV6_RECVDSTOPTS               = 0x28
+	IPV6_RECVFLOWID                = 0x46
+	IPV6_RECVHOPLIMIT              = 0x25
+	IPV6_RECVHOPOPTS               = 0x27
+	IPV6_RECVORIGDSTADDR           = 0x48
+	IPV6_RECVPATHMTU               = 0x2b
+	IPV6_RECVPKTINFO               = 0x24
+	IPV6_RECVRSSBUCKETID           = 0x47
+	IPV6_RECVRTHDR                 = 0x26
+	IPV6_RECVTCLASS                = 0x39
+	IPV6_RSSBUCKETID               = 0x45
+	IPV6_RSS_LISTEN_BUCKET         = 0x42
+	IPV6_RTHDR                     = 0x33
+	IPV6_RTHDRDSTOPTS              = 0x23
+	IPV6_RTHDR_LOOSE               = 0x0
+	IPV6_RTHDR_STRICT              = 0x1
+	IPV6_RTHDR_TYPE_0              = 0x0
+	IPV6_SOCKOPT_RESERVED1         = 0x3
+	IPV6_TCLASS                    = 0x3d
+	IPV6_UNICAST_HOPS              = 0x4
+	IPV6_USE_MIN_MTU               = 0x2a
+	IPV6_V6ONLY                    = 0x1b
+	IPV6_VERSION                   = 0x60
+	IPV6_VERSION_MASK              = 0xf0
+	IP_ADD_MEMBERSHIP              = 0xc
+	IP_ADD_SOURCE_MEMBERSHIP       = 0x46
+	IP_BINDANY                     = 0x18
+	IP_BINDMULTI                   = 0x19
+	IP_BLOCK_SOURCE                = 0x48
+	IP_DEFAULT_MULTICAST_LOOP      = 0x1
+	IP_DEFAULT_MULTICAST_TTL       = 0x1
+	IP_DF                          = 0x4000
+	IP_DONTFRAG                    = 0x43
+	IP_DROP_MEMBERSHIP             = 0xd
+	IP_DROP_SOURCE_MEMBERSHIP      = 0x47
+	IP_DUMMYNET3                   = 0x31
+	IP_DUMMYNET_CONFIGURE          = 0x3c
+	IP_DUMMYNET_DEL                = 0x3d
+	IP_DUMMYNET_FLUSH              = 0x3e
+	IP_DUMMYNET_GET                = 0x40
+	IP_FLOWID                      = 0x5a
+	IP_FLOWTYPE                    = 0x5b
+	IP_FW3                         = 0x30
+	IP_FW_ADD                      = 0x32
+	IP_FW_DEL                      = 0x33
+	IP_FW_FLUSH                    = 0x34
+	IP_FW_GET                      = 0x36
+	IP_FW_NAT_CFG                  = 0x38
+	IP_FW_NAT_DEL                  = 0x39
+	IP_FW_NAT_GET_CONFIG           = 0x3a
+	IP_FW_NAT_GET_LOG              = 0x3b
+	IP_FW_RESETLOG                 = 0x37
+	IP_FW_TABLE_ADD                = 0x28
+	IP_FW_TABLE_DEL                = 0x29
+	IP_FW_TABLE_FLUSH              = 0x2a
+	IP_FW_TABLE_GETSIZE            = 0x2b
+	IP_FW_TABLE_LIST               = 0x2c
+	IP_FW_ZERO                     = 0x35
+	IP_HDRINCL                     = 0x2
+	IP_IPSEC_POLICY                = 0x15
+	IP_MAXPACKET                   = 0xffff
+	IP_MAX_GROUP_SRC_FILTER        = 0x200
+	IP_MAX_MEMBERSHIPS             = 0xfff
+	IP_MAX_SOCK_MUTE_FILTER        = 0x80
+	IP_MAX_SOCK_SRC_FILTER         = 0x80
+	IP_MF                          = 0x2000
+	IP_MINTTL                      = 0x42
+	IP_MSFILTER                    = 0x4a
+	IP_MSS                         = 0x240
+	IP_MULTICAST_IF                = 0x9
+	IP_MULTICAST_LOOP              = 0xb
+	IP_MULTICAST_TTL               = 0xa
+	IP_MULTICAST_VIF               = 0xe
+	IP_OFFMASK                     = 0x1fff
+	IP_ONESBCAST                   = 0x17
+	IP_OPTIONS                     = 0x1
+	IP_ORIGDSTADDR                 = 0x1b
+	IP_PORTRANGE                   = 0x13
+	IP_PORTRANGE_DEFAULT           = 0x0
+	IP_PORTRANGE_HIGH              = 0x1
+	IP_PORTRANGE_LOW               = 0x2
+	IP_RECVDSTADDR                 = 0x7
+	IP_RECVFLOWID                  = 0x5d
+	IP_RECVIF                      = 0x14
+	IP_RECVOPTS                    = 0x5
+	IP_RECVORIGDSTADDR             = 0x1b
+	IP_RECVRETOPTS                 = 0x6
+	IP_RECVRSSBUCKETID             = 0x5e
+	IP_RECVTOS                     = 0x44
+	IP_RECVTTL                     = 0x41
+	IP_RETOPTS                     = 0x8
+	IP_RF                          = 0x8000
+	IP_RSSBUCKETID                 = 0x5c
+	IP_RSS_LISTEN_BUCKET           = 0x1a
+	IP_RSVP_OFF                    = 0x10
+	IP_RSVP_ON                     = 0xf
+	IP_RSVP_VIF_OFF                = 0x12
+	IP_RSVP_VIF_ON                 = 0x11
+	IP_SENDSRCADDR                 = 0x7
+	IP_TOS                         = 0x3
+	IP_TTL                         = 0x4
+	IP_UNBLOCK_SOURCE              = 0x49
+	ISIG                           = 0x80
+	ISTRIP                         = 0x20
+	IXANY                          = 0x800
+	IXOFF                          = 0x400
+	IXON                           = 0x200
+	KERN_HOSTNAME                  = 0xa
+	KERN_OSRELEASE                 = 0x2
+	KERN_OSTYPE                    = 0x1
+	KERN_VERSION                   = 0x4
+	LOCK_EX                        = 0x2
+	LOCK_NB                        = 0x4
+	LOCK_SH                        = 0x1
+	LOCK_UN                        = 0x8
+	MADV_AUTOSYNC                  = 0x7
+	MADV_CORE                      = 0x9
+	MADV_DONTNEED                  = 0x4
+	MADV_FREE                      = 0x5
+	MADV_NOCORE                    = 0x8
+	MADV_NORMAL                    = 0x0
+	MADV_NOSYNC                    = 0x6
+	MADV_PROTECT                   = 0xa
+	MADV_RANDOM                    = 0x1
+	MADV_SEQUENTIAL                = 0x2
+	MADV_WILLNEED                  = 0x3
+	MAP_ALIGNED_SUPER              = 0x1000000
+	MAP_ALIGNMENT_MASK             = -0x1000000
+	MAP_ALIGNMENT_SHIFT            = 0x18
+	MAP_ANON                       = 0x1000
+	MAP_ANONYMOUS                  = 0x1000
+	MAP_COPY                       = 0x2
+	MAP_EXCL                       = 0x4000
+	MAP_FILE                       = 0x0
+	MAP_FIXED                      = 0x10
+	MAP_GUARD                      = 0x2000
+	MAP_HASSEMAPHORE               = 0x200
+	MAP_NOCORE                     = 0x20000
+	MAP_NOSYNC                     = 0x800
+	MAP_PREFAULT_READ              = 0x40000
+	MAP_PRIVATE                    = 0x2
+	MAP_RESERVED0020               = 0x20
+	MAP_RESERVED0040               = 0x40
+	MAP_RESERVED0080               = 0x80
+	MAP_RESERVED0100               = 0x100
+	MAP_SHARED                     = 0x1
+	MAP_STACK                      = 0x400
+	MCAST_BLOCK_SOURCE             = 0x54
+	MCAST_EXCLUDE                  = 0x2
+	MCAST_INCLUDE                  = 0x1
+	MCAST_JOIN_GROUP               = 0x50
+	MCAST_JOIN_SOURCE_GROUP        = 0x52
+	MCAST_LEAVE_GROUP              = 0x51
+	MCAST_LEAVE_SOURCE_GROUP       = 0x53
+	MCAST_UNBLOCK_SOURCE           = 0x55
+	MCAST_UNDEFINED                = 0x0
+	MCL_CURRENT                    = 0x1
+	MCL_FUTURE                     = 0x2
+	MNT_ACLS                       = 0x8000000
+	MNT_ASYNC                      = 0x40
+	MNT_AUTOMOUNTED                = 0x200000000
+	MNT_BYFSID                     = 0x8000000
+	MNT_CMDFLAGS                   = 0xd0f0000
+	MNT_DEFEXPORTED                = 0x200
+	MNT_DELEXPORT                  = 0x20000
+	MNT_EXKERB                     = 0x800
+	MNT_EXPORTANON                 = 0x400
+	MNT_EXPORTED                   = 0x100
+	MNT_EXPUBLIC                   = 0x20000000
+	MNT_EXRDONLY                   = 0x80
+	MNT_FORCE                      = 0x80000
+	MNT_GJOURNAL                   = 0x2000000
+	MNT_IGNORE                     = 0x800000
+	MNT_LAZY                       = 0x3
+	MNT_LOCAL                      = 0x1000
+	MNT_MULTILABEL                 = 0x4000000
+	MNT_NFS4ACLS                   = 0x10
+	MNT_NOATIME                    = 0x10000000
+	MNT_NOCLUSTERR                 = 0x40000000
+	MNT_NOCLUSTERW                 = 0x80000000
+	MNT_NOEXEC                     = 0x4
+	MNT_NONBUSY                    = 0x4000000
+	MNT_NOSUID                     = 0x8
+	MNT_NOSYMFOLLOW                = 0x400000
+	MNT_NOWAIT                     = 0x2
+	MNT_QUOTA                      = 0x2000
+	MNT_RDONLY                     = 0x1
+	MNT_RELOAD                     = 0x40000
+	MNT_ROOTFS                     = 0x4000
+	MNT_SNAPSHOT                   = 0x1000000
+	MNT_SOFTDEP                    = 0x200000
+	MNT_SUIDDIR                    = 0x100000
+	MNT_SUJ                        = 0x100000000
+	MNT_SUSPEND                    = 0x4
+	MNT_SYNCHRONOUS                = 0x2
+	MNT_UNION                      = 0x20
+	MNT_UNTRUSTED                  = 0x800000000
+	MNT_UPDATE                     = 0x10000
+	MNT_UPDATEMASK                 = 0xad8d0807e
+	MNT_USER                       = 0x8000
+	MNT_VERIFIED                   = 0x400000000
+	MNT_VISFLAGMASK                = 0xffef0ffff
+	MNT_WAIT                       = 0x1
+	MSG_CMSG_CLOEXEC               = 0x40000
+	MSG_COMPAT                     = 0x8000
+	MSG_CTRUNC                     = 0x20
+	MSG_DONTROUTE                  = 0x4
+	MSG_DONTWAIT                   = 0x80
+	MSG_EOF                        = 0x100
+	MSG_EOR                        = 0x8
+	MSG_NBIO                       = 0x4000
+	MSG_NOSIGNAL                   = 0x20000
+	MSG_NOTIFICATION               = 0x2000
+	MSG_OOB                        = 0x1
+	MSG_PEEK                       = 0x2
+	MSG_TRUNC                      = 0x10
+	MSG_WAITALL                    = 0x40
+	MSG_WAITFORONE                 = 0x80000
+	MS_ASYNC                       = 0x1
+	MS_INVALIDATE                  = 0x2
+	MS_SYNC                        = 0x0
+	NAME_MAX                       = 0xff
+	NET_RT_DUMP                    = 0x1
+	NET_RT_FLAGS                   = 0x2
+	NET_RT_IFLIST                  = 0x3
+	NET_RT_IFLISTL                 = 0x5
+	NET_RT_IFMALIST                = 0x4
+	NFDBITS                        = 0x20
+	NOFLSH                         = 0x80000000
+	NOKERNINFO                     = 0x2000000
+	NOTE_ABSTIME                   = 0x10
+	NOTE_ATTRIB                    = 0x8
+	NOTE_CHILD                     = 0x4
+	NOTE_CLOSE                     = 0x100
+	NOTE_CLOSE_WRITE               = 0x200
+	NOTE_DELETE                    = 0x1
+	NOTE_EXEC                      = 0x20000000
+	NOTE_EXIT                      = 0x80000000
+	NOTE_EXTEND                    = 0x4
+	NOTE_FFAND                     = 0x40000000
+	NOTE_FFCOPY                    = 0xc0000000
+	NOTE_FFCTRLMASK                = 0xc0000000
+	NOTE_FFLAGSMASK                = 0xffffff
+	NOTE_FFNOP                     = 0x0
+	NOTE_FFOR                      = 0x80000000
+	NOTE_FILE_POLL                 = 0x2
+	NOTE_FORK                      = 0x40000000
+	NOTE_LINK                      = 0x10
+	NOTE_LOWAT                     = 0x1
+	NOTE_MSECONDS                  = 0x2
+	NOTE_NSECONDS                  = 0x8
+	NOTE_OPEN                      = 0x80
+	NOTE_PCTRLMASK                 = 0xf0000000
+	NOTE_PDATAMASK                 = 0xfffff
+	NOTE_READ                      = 0x400
+	NOTE_RENAME                    = 0x20
+	NOTE_REVOKE                    = 0x40
+	NOTE_SECONDS                   = 0x1
+	NOTE_TRACK                     = 0x1
+	NOTE_TRACKERR                  = 0x2
+	NOTE_TRIGGER                   = 0x1000000
+	NOTE_USECONDS                  = 0x4
+	NOTE_WRITE                     = 0x2
+	OCRNL                          = 0x10
+	ONLCR                          = 0x2
+	ONLRET                         = 0x40
+	ONOCR                          = 0x20
+	ONOEOT                         = 0x8
+	OPOST                          = 0x1
+	OXTABS                         = 0x4
+	O_ACCMODE                      = 0x3
+	O_APPEND                       = 0x8
+	O_ASYNC                        = 0x40
+	O_CLOEXEC                      = 0x100000
+	O_CREAT                        = 0x200
+	O_DIRECT                       = 0x10000
+	O_DIRECTORY                    = 0x20000
+	O_EXCL                         = 0x800
+	O_EXEC                         = 0x40000
+	O_EXLOCK                       = 0x20
+	O_FSYNC                        = 0x80
+	O_NDELAY                       = 0x4
+	O_NOCTTY                       = 0x8000
+	O_NOFOLLOW                     = 0x100
+	O_NONBLOCK                     = 0x4
+	O_RDONLY                       = 0x0
+	O_RDWR                         = 0x2
+	O_SHLOCK                       = 0x10
+	O_SYNC                         = 0x80
+	O_TRUNC                        = 0x400
+	O_TTY_INIT                     = 0x80000
+	O_VERIFY                       = 0x200000
+	O_WRONLY                       = 0x1
+	PARENB                         = 0x1000
+	PARMRK                         = 0x8
+	PARODD                         = 0x2000
+	PENDIN                         = 0x20000000
+	PRIO_PGRP                      = 0x1
+	PRIO_PROCESS                   = 0x0
+	PRIO_USER                      = 0x2
+	PROT_EXEC                      = 0x4
+	PROT_NONE                      = 0x0
+	PROT_READ                      = 0x1
+	PROT_WRITE                     = 0x2
+	RLIMIT_AS                      = 0xa
+	RLIMIT_CORE                    = 0x4
+	RLIMIT_CPU                     = 0x0
+	RLIMIT_DATA                    = 0x2
+	RLIMIT_FSIZE                   = 0x1
+	RLIMIT_MEMLOCK                 = 0x6
+	RLIMIT_NOFILE                  = 0x8
+	RLIMIT_NPROC                   = 0x7
+	RLIMIT_RSS                     = 0x5
+	RLIMIT_STACK                   = 0x3
+	RLIM_INFINITY                  = 0x7fffffffffffffff
+	RTAX_AUTHOR                    = 0x6
+	RTAX_BRD                       = 0x7
+	RTAX_DST                       = 0x0
+	RTAX_GATEWAY                   = 0x1
+	RTAX_GENMASK                   = 0x3
+	RTAX_IFA                       = 0x5
+	RTAX_IFP                       = 0x4
+	RTAX_MAX                       = 0x8
+	RTAX_NETMASK                   = 0x2
+	RTA_AUTHOR                     = 0x40
+	RTA_BRD                        = 0x80
+	RTA_DST                        = 0x1
+	RTA_GATEWAY                    = 0x2
+	RTA_GENMASK                    = 0x8
+	RTA_IFA                        = 0x20
+	RTA_IFP                        = 0x10
+	RTA_NETMASK                    = 0x4
+	RTF_BLACKHOLE                  = 0x1000
+	RTF_BROADCAST                  = 0x400000
+	RTF_DONE                       = 0x40
+	RTF_DYNAMIC                    = 0x10
+	RTF_FIXEDMTU                   = 0x80000
+	RTF_FMASK                      = 0x1004d808
+	RTF_GATEWAY                    = 0x2
+	RTF_GWFLAG_COMPAT              = 0x80000000
+	RTF_HOST                       = 0x4
+	RTF_LLDATA                     = 0x400
+	RTF_LLINFO                     = 0x400
+	RTF_LOCAL                      = 0x200000
+	RTF_MODIFIED                   = 0x20
+	RTF_MULTICAST                  = 0x800000
+	RTF_PINNED                     = 0x100000
+	RTF_PROTO1                     = 0x8000
+	RTF_PROTO2                     = 0x4000
+	RTF_PROTO3                     = 0x40000
+	RTF_REJECT                     = 0x8
+	RTF_RNH_LOCKED                 = 0x40000000
+	RTF_STATIC                     = 0x800
+	RTF_STICKY                     = 0x10000000
+	RTF_UP                         = 0x1
+	RTF_XRESOLVE                   = 0x200
+	RTM_ADD                        = 0x1
+	RTM_CHANGE                     = 0x3
+	RTM_DELADDR                    = 0xd
+	RTM_DELETE                     = 0x2
+	RTM_DELMADDR                   = 0x10
+	RTM_GET                        = 0x4
+	RTM_IEEE80211                  = 0x12
+	RTM_IFANNOUNCE                 = 0x11
+	RTM_IFINFO                     = 0xe
+	RTM_LOCK                       = 0x8
+	RTM_LOSING                     = 0x5
+	RTM_MISS                       = 0x7
+	RTM_NEWADDR                    = 0xc
+	RTM_NEWMADDR                   = 0xf
+	RTM_REDIRECT                   = 0x6
+	RTM_RESOLVE                    = 0xb
+	RTM_RTTUNIT                    = 0xf4240
+	RTM_VERSION                    = 0x5
+	RTV_EXPIRE                     = 0x4
+	RTV_HOPCOUNT                   = 0x2
+	RTV_MTU                        = 0x1
+	RTV_RPIPE                      = 0x8
+	RTV_RTT                        = 0x40
+	RTV_RTTVAR                     = 0x80
+	RTV_SPIPE                      = 0x10
+	RTV_SSTHRESH                   = 0x20
+	RTV_WEIGHT                     = 0x100
+	RT_ALL_FIBS                    = -0x1
+	RT_BLACKHOLE                   = 0x40
+	RT_DEFAULT_FIB                 = 0x0
+	RT_HAS_GW                      = 0x80
+	RT_HAS_HEADER                  = 0x10
+	RT_HAS_HEADER_BIT              = 0x4
+	RT_L2_ME                       = 0x4
+	RT_L2_ME_BIT                   = 0x2
+	RT_LLE_CACHE                   = 0x100
+	RT_MAY_LOOP                    = 0x8
+	RT_MAY_LOOP_BIT                = 0x3
+	RT_REJECT                      = 0x20
+	RUSAGE_CHILDREN                = -0x1
+	RUSAGE_SELF                    = 0x0
+	RUSAGE_THREAD                  = 0x1
+	SCM_BINTIME                    = 0x4
+	SCM_CREDS                      = 0x3
+	SCM_MONOTONIC                  = 0x6
+	SCM_REALTIME                   = 0x5
+	SCM_RIGHTS                     = 0x1
+	SCM_TIMESTAMP                  = 0x2
+	SCM_TIME_INFO                  = 0x7
+	SHUT_RD                        = 0x0
+	SHUT_RDWR                      = 0x2
+	SHUT_WR                        = 0x1
+	SIOCADDMULTI                   = 0x80206931
+	SIOCAIFADDR                    = 0x8040691a
+	SIOCAIFGROUP                   = 0x80246987
+	SIOCATMARK                     = 0x40047307
+	SIOCDELMULTI                   = 0x80206932
+	SIOCDIFADDR                    = 0x80206919
+	SIOCDIFGROUP                   = 0x80246989
+	SIOCDIFPHYADDR                 = 0x80206949
+	SIOCGDRVSPEC                   = 0xc01c697b
+	SIOCGETSGCNT                   = 0xc0147210
+	SIOCGETVIFCNT                  = 0xc014720f
+	SIOCGHIWAT                     = 0x40047301
+	SIOCGHWADDR                    = 0xc020693e
+	SIOCGI2C                       = 0xc020693d
+	SIOCGIFADDR                    = 0xc0206921
+	SIOCGIFBRDADDR                 = 0xc0206923
+	SIOCGIFCAP                     = 0xc020691f
+	SIOCGIFCONF                    = 0xc0086924
+	SIOCGIFDESCR                   = 0xc020692a
+	SIOCGIFDSTADDR                 = 0xc0206922
+	SIOCGIFFIB                     = 0xc020695c
+	SIOCGIFFLAGS                   = 0xc0206911
+	SIOCGIFGENERIC                 = 0xc020693a
+	SIOCGIFGMEMB                   = 0xc024698a
+	SIOCGIFGROUP                   = 0xc0246988
+	SIOCGIFINDEX                   = 0xc0206920
+	SIOCGIFMAC                     = 0xc0206926
+	SIOCGIFMEDIA                   = 0xc0286938
+	SIOCGIFMETRIC                  = 0xc0206917
+	SIOCGIFMTU                     = 0xc0206933
+	SIOCGIFNETMASK                 = 0xc0206925
+	SIOCGIFPDSTADDR                = 0xc0206948
+	SIOCGIFPHYS                    = 0xc0206935
+	SIOCGIFPSRCADDR                = 0xc0206947
+	SIOCGIFRSSHASH                 = 0xc0186997
+	SIOCGIFRSSKEY                  = 0xc0946996
+	SIOCGIFSTATUS                  = 0xc331693b
+	SIOCGIFXMEDIA                  = 0xc028698b
+	SIOCGLANPCP                    = 0xc0206998
+	SIOCGLOWAT                     = 0x40047303
+	SIOCGPGRP                      = 0x40047309
+	SIOCGPRIVATE_0                 = 0xc0206950
+	SIOCGPRIVATE_1                 = 0xc0206951
+	SIOCGTUNFIB                    = 0xc020695e
+	SIOCIFCREATE                   = 0xc020697a
+	SIOCIFCREATE2                  = 0xc020697c
+	SIOCIFDESTROY                  = 0x80206979
+	SIOCIFGCLONERS                 = 0xc00c6978
+	SIOCSDRVSPEC                   = 0x801c697b
+	SIOCSHIWAT                     = 0x80047300
+	SIOCSIFADDR                    = 0x8020690c
+	SIOCSIFBRDADDR                 = 0x80206913
+	SIOCSIFCAP                     = 0x8020691e
+	SIOCSIFDESCR                   = 0x80206929
+	SIOCSIFDSTADDR                 = 0x8020690e
+	SIOCSIFFIB                     = 0x8020695d
+	SIOCSIFFLAGS                   = 0x80206910
+	SIOCSIFGENERIC                 = 0x80206939
+	SIOCSIFLLADDR                  = 0x8020693c
+	SIOCSIFMAC                     = 0x80206927
+	SIOCSIFMEDIA                   = 0xc0206937
+	SIOCSIFMETRIC                  = 0x80206918
+	SIOCSIFMTU                     = 0x80206934
+	SIOCSIFNAME                    = 0x80206928
+	SIOCSIFNETMASK                 = 0x80206916
+	SIOCSIFPHYADDR                 = 0x80406946
+	SIOCSIFPHYS                    = 0x80206936
+	SIOCSIFRVNET                   = 0xc020695b
+	SIOCSIFVNET                    = 0xc020695a
+	SIOCSLANPCP                    = 0x80206999
+	SIOCSLOWAT                     = 0x80047302
+	SIOCSPGRP                      = 0x80047308
+	SIOCSTUNFIB                    = 0x8020695f
+	SOCK_CLOEXEC                   = 0x10000000
+	SOCK_DGRAM                     = 0x2
+	SOCK_MAXADDRLEN                = 0xff
+	SOCK_NONBLOCK                  = 0x20000000
+	SOCK_RAW                       = 0x3
+	SOCK_RDM                       = 0x4
+	SOCK_SEQPACKET                 = 0x5
+	SOCK_STREAM                    = 0x1
+	SOL_SOCKET                     = 0xffff
+	SOMAXCONN                      = 0x80
+	SO_ACCEPTCONN                  = 0x2
+	SO_ACCEPTFILTER                = 0x1000
+	SO_BINTIME                     = 0x2000
+	SO_BROADCAST                   = 0x20
+	SO_DEBUG                       = 0x1
+	SO_DOMAIN                      = 0x1019
+	SO_DONTROUTE                   = 0x10
+	SO_ERROR                       = 0x1007
+	SO_KEEPALIVE                   = 0x8
+	SO_LABEL                       = 0x1009
+	SO_LINGER                      = 0x80
+	SO_LISTENINCQLEN               = 0x1013
+	SO_LISTENQLEN                  = 0x1012
+	SO_LISTENQLIMIT                = 0x1011
+	SO_MAX_PACING_RATE             = 0x1018
+	SO_NOSIGPIPE                   = 0x800
+	SO_NO_DDP                      = 0x8000
+	SO_NO_OFFLOAD                  = 0x4000
+	SO_OOBINLINE                   = 0x100
+	SO_PEERLABEL                   = 0x1010
+	SO_PROTOCOL                    = 0x1016
+	SO_PROTOTYPE                   = 0x1016
+	SO_RCVBUF                      = 0x1002
+	SO_RCVLOWAT                    = 0x1004
+	SO_RCVTIMEO                    = 0x1006
+	SO_REUSEADDR                   = 0x4
+	SO_REUSEPORT                   = 0x200
+	SO_REUSEPORT_LB                = 0x10000
+	SO_SETFIB                      = 0x1014
+	SO_SNDBUF                      = 0x1001
+	SO_SNDLOWAT                    = 0x1003
+	SO_SNDTIMEO                    = 0x1005
+	SO_TIMESTAMP                   = 0x400
+	SO_TS_BINTIME                  = 0x1
+	SO_TS_CLOCK                    = 0x1017
+	SO_TS_CLOCK_MAX                = 0x3
+	SO_TS_DEFAULT                  = 0x0
+	SO_TS_MONOTONIC                = 0x3
+	SO_TS_REALTIME                 = 0x2
+	SO_TS_REALTIME_MICRO           = 0x0
+	SO_TYPE                        = 0x1008
+	SO_USELOOPBACK                 = 0x40
+	SO_USER_COOKIE                 = 0x1015
+	SO_VENDOR                      = 0x80000000
+	S_BLKSIZE                      = 0x200
+	S_IEXEC                        = 0x40
+	S_IFBLK                        = 0x6000
+	S_IFCHR                        = 0x2000
+	S_IFDIR                        = 0x4000
+	S_IFIFO                        = 0x1000
+	S_IFLNK                        = 0xa000
+	S_IFMT                         = 0xf000
+	S_IFREG                        = 0x8000
+	S_IFSOCK                       = 0xc000
+	S_IFWHT                        = 0xe000
+	S_IREAD                        = 0x100
+	S_IRGRP                        = 0x20
+	S_IROTH                        = 0x4
+	S_IRUSR                        = 0x100
+	S_IRWXG                        = 0x38
+	S_IRWXO                        = 0x7
+	S_IRWXU                        = 0x1c0
+	S_ISGID                        = 0x400
+	S_ISTXT                        = 0x200
+	S_ISUID                        = 0x800
+	S_ISVTX                        = 0x200
+	S_IWGRP                        = 0x10
+	S_IWOTH                        = 0x2
+	S_IWRITE                       = 0x80
+	S_IWUSR                        = 0x80
+	S_IXGRP                        = 0x8
+	S_IXOTH                        = 0x1
+	S_IXUSR                        = 0x40
+	TAB0                           = 0x0
+	TAB3                           = 0x4
+	TABDLY                         = 0x4
+	TCIFLUSH                       = 0x1
+	TCIOFF                         = 0x3
+	TCIOFLUSH                      = 0x3
+	TCION                          = 0x4
+	TCOFLUSH                       = 0x2
+	TCOOFF                         = 0x1
+	TCOON                          = 0x2
+	TCP_BBR_ACK_COMP_ALG           = 0x448
+	TCP_BBR_DRAIN_INC_EXTRA        = 0x43c
+	TCP_BBR_DRAIN_PG               = 0x42e
+	TCP_BBR_EXTRA_GAIN             = 0x449
+	TCP_BBR_IWINTSO                = 0x42b
+	TCP_BBR_LOWGAIN_FD             = 0x436
+	TCP_BBR_LOWGAIN_HALF           = 0x435
+	TCP_BBR_LOWGAIN_THRESH         = 0x434
+	TCP_BBR_MAX_RTO                = 0x439
+	TCP_BBR_MIN_RTO                = 0x438
+	TCP_BBR_ONE_RETRAN             = 0x431
+	TCP_BBR_PACE_CROSS             = 0x442
+	TCP_BBR_PACE_DEL_TAR           = 0x43f
+	TCP_BBR_PACE_PER_SEC           = 0x43e
+	TCP_BBR_PACE_SEG_MAX           = 0x440
+	TCP_BBR_PACE_SEG_MIN           = 0x441
+	TCP_BBR_PROBE_RTT_GAIN         = 0x44d
+	TCP_BBR_PROBE_RTT_INT          = 0x430
+	TCP_BBR_PROBE_RTT_LEN          = 0x44e
+	TCP_BBR_RACK_RTT_USE           = 0x44a
+	TCP_BBR_RECFORCE               = 0x42c
+	TCP_BBR_REC_OVER_HPTS          = 0x43a
+	TCP_BBR_RETRAN_WTSO            = 0x44b
+	TCP_BBR_RWND_IS_APP            = 0x42f
+	TCP_BBR_STARTUP_EXIT_EPOCH     = 0x43d
+	TCP_BBR_STARTUP_LOSS_EXIT      = 0x432
+	TCP_BBR_STARTUP_PG             = 0x42d
+	TCP_BBR_UNLIMITED              = 0x43b
+	TCP_BBR_USEDEL_RATE            = 0x437
+	TCP_BBR_USE_LOWGAIN            = 0x433
+	TCP_CA_NAME_MAX                = 0x10
+	TCP_CCALGOOPT                  = 0x41
+	TCP_CONGESTION                 = 0x40
+	TCP_DATA_AFTER_CLOSE           = 0x44c
+	TCP_DELACK                     = 0x48
+	TCP_FASTOPEN                   = 0x401
+	TCP_FASTOPEN_MAX_COOKIE_LEN    = 0x10
+	TCP_FASTOPEN_MIN_COOKIE_LEN    = 0x4
+	TCP_FASTOPEN_PSK_LEN           = 0x10
+	TCP_FUNCTION_BLK               = 0x2000
+	TCP_FUNCTION_NAME_LEN_MAX      = 0x20
+	TCP_INFO                       = 0x20
+	TCP_KEEPCNT                    = 0x400
+	TCP_KEEPIDLE                   = 0x100
+	TCP_KEEPINIT                   = 0x80
+	TCP_KEEPINTVL                  = 0x200
+	TCP_LOG                        = 0x22
+	TCP_LOGBUF                     = 0x23
+	TCP_LOGDUMP                    = 0x25
+	TCP_LOGDUMPID                  = 0x26
+	TCP_LOGID                      = 0x24
+	TCP_LOG_ID_LEN                 = 0x40
+	TCP_MAXBURST                   = 0x4
+	TCP_MAXHLEN                    = 0x3c
+	TCP_MAXOLEN                    = 0x28
+	TCP_MAXSEG                     = 0x2
+	TCP_MAXWIN                     = 0xffff
+	TCP_MAX_SACK                   = 0x4
+	TCP_MAX_WINSHIFT               = 0xe
+	TCP_MD5SIG                     = 0x10
+	TCP_MINMSS                     = 0xd8
+	TCP_MSS                        = 0x218
+	TCP_NODELAY                    = 0x1
+	TCP_NOOPT                      = 0x8
+	TCP_NOPUSH                     = 0x4
+	TCP_PCAP_IN                    = 0x1000
+	TCP_PCAP_OUT                   = 0x800
+	TCP_RACK_EARLY_RECOV           = 0x423
+	TCP_RACK_EARLY_SEG             = 0x424
+	TCP_RACK_IDLE_REDUCE_HIGH      = 0x444
+	TCP_RACK_MIN_PACE              = 0x445
+	TCP_RACK_MIN_PACE_SEG          = 0x446
+	TCP_RACK_MIN_TO                = 0x422
+	TCP_RACK_PACE_ALWAYS           = 0x41f
+	TCP_RACK_PACE_MAX_SEG          = 0x41e
+	TCP_RACK_PACE_REDUCE           = 0x41d
+	TCP_RACK_PKT_DELAY             = 0x428
+	TCP_RACK_PROP                  = 0x41b
+	TCP_RACK_PROP_RATE             = 0x420
+	TCP_RACK_PRR_SENDALOT          = 0x421
+	TCP_RACK_REORD_FADE            = 0x426
+	TCP_RACK_REORD_THRESH          = 0x425
+	TCP_RACK_SESS_CWV              = 0x42a
+	TCP_RACK_TLP_INC_VAR           = 0x429
+	TCP_RACK_TLP_REDUCE            = 0x41c
+	TCP_RACK_TLP_THRESH            = 0x427
+	TCP_RACK_TLP_USE               = 0x447
+	TCP_VENDOR                     = 0x80000000
+	TCSAFLUSH                      = 0x2
+	TIMER_ABSTIME                  = 0x1
+	TIMER_RELTIME                  = 0x0
+	TIOCCBRK                       = 0x2000747a
+	TIOCCDTR                       = 0x20007478
+	TIOCCONS                       = 0x80047462
+	TIOCDRAIN                      = 0x2000745e
+	TIOCEXCL                       = 0x2000740d
+	TIOCEXT                        = 0x80047460
+	TIOCFLUSH                      = 0x80047410
+	TIOCGDRAINWAIT                 = 0x40047456
+	TIOCGETA                       = 0x402c7413
+	TIOCGETD                       = 0x4004741a
+	TIOCGPGRP                      = 0x40047477
+	TIOCGPTN                       = 0x4004740f
+	TIOCGSID                       = 0x40047463
+	TIOCGWINSZ                     = 0x40087468
+	TIOCMBIC                       = 0x8004746b
+	TIOCMBIS                       = 0x8004746c
+	TIOCMGDTRWAIT                  = 0x4004745a
+	TIOCMGET                       = 0x4004746a
+	TIOCMSDTRWAIT                  = 0x8004745b
+	TIOCMSET                       = 0x8004746d
+	TIOCM_CAR                      = 0x40
+	TIOCM_CD                       = 0x40
+	TIOCM_CTS                      = 0x20
+	TIOCM_DCD                      = 0x40
+	TIOCM_DSR                      = 0x100
+	TIOCM_DTR                      = 0x2
+	TIOCM_LE                       = 0x1
+	TIOCM_RI                       = 0x80
+	TIOCM_RNG                      = 0x80
+	TIOCM_RTS                      = 0x4
+	TIOCM_SR                       = 0x10
+	TIOCM_ST                       = 0x8
+	TIOCNOTTY                      = 0x20007471
+	TIOCNXCL                       = 0x2000740e
+	TIOCOUTQ                       = 0x40047473
+	TIOCPKT                        = 0x80047470
+	TIOCPKT_DATA                   = 0x0
+	TIOCPKT_DOSTOP                 = 0x20
+	TIOCPKT_FLUSHREAD              = 0x1
+	TIOCPKT_FLUSHWRITE             = 0x2
+	TIOCPKT_IOCTL                  = 0x40
+	TIOCPKT_NOSTOP                 = 0x10
+	TIOCPKT_START                  = 0x8
+	TIOCPKT_STOP                   = 0x4
+	TIOCPTMASTER                   = 0x2000741c
+	TIOCSBRK                       = 0x2000747b
+	TIOCSCTTY                      = 0x20007461
+	TIOCSDRAINWAIT                 = 0x80047457
+	TIOCSDTR                       = 0x20007479
+	TIOCSETA                       = 0x802c7414
+	TIOCSETAF                      = 0x802c7416
+	TIOCSETAW                      = 0x802c7415
+	TIOCSETD                       = 0x8004741b
+	TIOCSIG                        = 0x2004745f
+	TIOCSPGRP                      = 0x80047476
+	TIOCSTART                      = 0x2000746e
+	TIOCSTAT                       = 0x20007465
+	TIOCSTI                        = 0x80017472
+	TIOCSTOP                       = 0x2000746f
+	TIOCSWINSZ                     = 0x80087467
+	TIOCTIMESTAMP                  = 0x40087459
+	TIOCUCNTL                      = 0x80047466
+	TOSTOP                         = 0x400000
+	UTIME_NOW                      = -0x1
+	UTIME_OMIT                     = -0x2
+	VDISCARD                       = 0xf
+	VDSUSP                         = 0xb
+	VEOF                           = 0x0
+	VEOL                           = 0x1
+	VEOL2                          = 0x2
+	VERASE                         = 0x3
+	VERASE2                        = 0x7
+	VINTR                          = 0x8
+	VKILL                          = 0x5
+	VLNEXT                         = 0xe
+	VMIN                           = 0x10
+	VM_BCACHE_SIZE_MAX             = 0x70e0000
+	VM_SWZONE_SIZE_MAX             = 0x2280000
+	VQUIT                          = 0x9
+	VREPRINT                       = 0x6
+	VSTART                         = 0xc
+	VSTATUS                        = 0x12
+	VSTOP                          = 0xd
+	VSUSP                          = 0xa
+	VTIME                          = 0x11
+	VWERASE                        = 0x4
+	WCONTINUED                     = 0x4
+	WCOREFLAG                      = 0x80
+	WEXITED                        = 0x10
+	WLINUXCLONE                    = 0x80000000
+	WNOHANG                        = 0x1
+	WNOWAIT                        = 0x8
+	WSTOPPED                       = 0x2
+	WTRAPPED                       = 0x20
+	WUNTRACED                      = 0x2
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADF           = syscall.Errno(0x9)
+	EBADMSG         = syscall.Errno(0x59)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x55)
+	ECAPMODE        = syscall.Errno(0x5e)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDOM            = syscall.Errno(0x21)
+	EDOOFUS         = syscall.Errno(0x58)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x52)
+	EILSEQ          = syscall.Errno(0x56)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x60)
+	ELOOP           = syscall.Errno(0x3e)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	EMULTIHOP       = syscall.Errno(0x5a)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x57)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOLINK         = syscall.Errno(0x5b)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x53)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCAPABLE     = syscall.Errno(0x5d)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTRECOVERABLE = syscall.Errno(0x5f)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x2d)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x2d)
+	EOVERFLOW       = syscall.Errno(0x54)
+	EOWNERDEAD      = syscall.Errno(0x60)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTO          = syscall.Errno(0x5c)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGLIBRT  = syscall.Signal(0x21)
+	SIGLWP    = syscall.Signal(0x20)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTHR    = syscall.Signal(0x20)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "EAGAIN", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "EOPNOTSUPP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "operation timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disc quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC prog. not avail"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EIDRM", "identifier removed"},
+	{83, "ENOMSG", "no message of desired type"},
+	{84, "EOVERFLOW", "value too large to be stored in data type"},
+	{85, "ECANCELED", "operation canceled"},
+	{86, "EILSEQ", "illegal byte sequence"},
+	{87, "ENOATTR", "attribute not found"},
+	{88, "EDOOFUS", "programming error"},
+	{89, "EBADMSG", "bad message"},
+	{90, "EMULTIHOP", "multihop attempted"},
+	{91, "ENOLINK", "link has been severed"},
+	{92, "EPROTO", "protocol error"},
+	{93, "ENOTCAPABLE", "capabilities insufficient"},
+	{94, "ECAPMODE", "not permitted in capability mode"},
+	{95, "ENOTRECOVERABLE", "state not recoverable"},
+	{96, "EOWNERDEAD", "previous owner died"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGIOT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "suspended (signal)"},
+	{18, "SIGTSTP", "suspended"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+	{32, "SIGTHR", "unknown signal"},
+	{33, "SIGLIBRT", "unknown signal"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_freebsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_freebsd_amd64.go
new file mode 100644
index 000000000..b8f7c3c93
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_freebsd_amd64.go
@@ -0,0 +1,1935 @@
+// mkerrors.sh -m64
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,freebsd
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -m64 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                   = 0x10
+	AF_ARP                         = 0x23
+	AF_ATM                         = 0x1e
+	AF_BLUETOOTH                   = 0x24
+	AF_CCITT                       = 0xa
+	AF_CHAOS                       = 0x5
+	AF_CNT                         = 0x15
+	AF_COIP                        = 0x14
+	AF_DATAKIT                     = 0x9
+	AF_DECnet                      = 0xc
+	AF_DLI                         = 0xd
+	AF_E164                        = 0x1a
+	AF_ECMA                        = 0x8
+	AF_HYLINK                      = 0xf
+	AF_IEEE80211                   = 0x25
+	AF_IMPLINK                     = 0x3
+	AF_INET                        = 0x2
+	AF_INET6                       = 0x1c
+	AF_INET6_SDP                   = 0x2a
+	AF_INET_SDP                    = 0x28
+	AF_IPX                         = 0x17
+	AF_ISDN                        = 0x1a
+	AF_ISO                         = 0x7
+	AF_LAT                         = 0xe
+	AF_LINK                        = 0x12
+	AF_LOCAL                       = 0x1
+	AF_MAX                         = 0x2a
+	AF_NATM                        = 0x1d
+	AF_NETBIOS                     = 0x6
+	AF_NETGRAPH                    = 0x20
+	AF_OSI                         = 0x7
+	AF_PUP                         = 0x4
+	AF_ROUTE                       = 0x11
+	AF_SCLUSTER                    = 0x22
+	AF_SIP                         = 0x18
+	AF_SLOW                        = 0x21
+	AF_SNA                         = 0xb
+	AF_UNIX                        = 0x1
+	AF_UNSPEC                      = 0x0
+	AF_VENDOR00                    = 0x27
+	AF_VENDOR01                    = 0x29
+	AF_VENDOR02                    = 0x2b
+	AF_VENDOR03                    = 0x2d
+	AF_VENDOR04                    = 0x2f
+	AF_VENDOR05                    = 0x31
+	AF_VENDOR06                    = 0x33
+	AF_VENDOR07                    = 0x35
+	AF_VENDOR08                    = 0x37
+	AF_VENDOR09                    = 0x39
+	AF_VENDOR10                    = 0x3b
+	AF_VENDOR11                    = 0x3d
+	AF_VENDOR12                    = 0x3f
+	AF_VENDOR13                    = 0x41
+	AF_VENDOR14                    = 0x43
+	AF_VENDOR15                    = 0x45
+	AF_VENDOR16                    = 0x47
+	AF_VENDOR17                    = 0x49
+	AF_VENDOR18                    = 0x4b
+	AF_VENDOR19                    = 0x4d
+	AF_VENDOR20                    = 0x4f
+	AF_VENDOR21                    = 0x51
+	AF_VENDOR22                    = 0x53
+	AF_VENDOR23                    = 0x55
+	AF_VENDOR24                    = 0x57
+	AF_VENDOR25                    = 0x59
+	AF_VENDOR26                    = 0x5b
+	AF_VENDOR27                    = 0x5d
+	AF_VENDOR28                    = 0x5f
+	AF_VENDOR29                    = 0x61
+	AF_VENDOR30                    = 0x63
+	AF_VENDOR31                    = 0x65
+	AF_VENDOR32                    = 0x67
+	AF_VENDOR33                    = 0x69
+	AF_VENDOR34                    = 0x6b
+	AF_VENDOR35                    = 0x6d
+	AF_VENDOR36                    = 0x6f
+	AF_VENDOR37                    = 0x71
+	AF_VENDOR38                    = 0x73
+	AF_VENDOR39                    = 0x75
+	AF_VENDOR40                    = 0x77
+	AF_VENDOR41                    = 0x79
+	AF_VENDOR42                    = 0x7b
+	AF_VENDOR43                    = 0x7d
+	AF_VENDOR44                    = 0x7f
+	AF_VENDOR45                    = 0x81
+	AF_VENDOR46                    = 0x83
+	AF_VENDOR47                    = 0x85
+	ALTWERASE                      = 0x200
+	B0                             = 0x0
+	B110                           = 0x6e
+	B115200                        = 0x1c200
+	B1200                          = 0x4b0
+	B134                           = 0x86
+	B14400                         = 0x3840
+	B150                           = 0x96
+	B1800                          = 0x708
+	B19200                         = 0x4b00
+	B200                           = 0xc8
+	B230400                        = 0x38400
+	B2400                          = 0x960
+	B28800                         = 0x7080
+	B300                           = 0x12c
+	B38400                         = 0x9600
+	B460800                        = 0x70800
+	B4800                          = 0x12c0
+	B50                            = 0x32
+	B57600                         = 0xe100
+	B600                           = 0x258
+	B7200                          = 0x1c20
+	B75                            = 0x4b
+	B76800                         = 0x12c00
+	B921600                        = 0xe1000
+	B9600                          = 0x2580
+	BIOCFEEDBACK                   = 0x8004427c
+	BIOCFLUSH                      = 0x20004268
+	BIOCGBLEN                      = 0x40044266
+	BIOCGDIRECTION                 = 0x40044276
+	BIOCGDLT                       = 0x4004426a
+	BIOCGDLTLIST                   = 0xc0104279
+	BIOCGETBUFMODE                 = 0x4004427d
+	BIOCGETIF                      = 0x4020426b
+	BIOCGETZMAX                    = 0x4008427f
+	BIOCGHDRCMPLT                  = 0x40044274
+	BIOCGRSIG                      = 0x40044272
+	BIOCGRTIMEOUT                  = 0x4010426e
+	BIOCGSEESENT                   = 0x40044276
+	BIOCGSTATS                     = 0x4008426f
+	BIOCGTSTAMP                    = 0x40044283
+	BIOCIMMEDIATE                  = 0x80044270
+	BIOCLOCK                       = 0x2000427a
+	BIOCPROMISC                    = 0x20004269
+	BIOCROTZBUF                    = 0x40184280
+	BIOCSBLEN                      = 0xc0044266
+	BIOCSDIRECTION                 = 0x80044277
+	BIOCSDLT                       = 0x80044278
+	BIOCSETBUFMODE                 = 0x8004427e
+	BIOCSETF                       = 0x80104267
+	BIOCSETFNR                     = 0x80104282
+	BIOCSETIF                      = 0x8020426c
+	BIOCSETWF                      = 0x8010427b
+	BIOCSETZBUF                    = 0x80184281
+	BIOCSHDRCMPLT                  = 0x80044275
+	BIOCSRSIG                      = 0x80044273
+	BIOCSRTIMEOUT                  = 0x8010426d
+	BIOCSSEESENT                   = 0x80044277
+	BIOCSTSTAMP                    = 0x80044284
+	BIOCVERSION                    = 0x40044271
+	BPF_A                          = 0x10
+	BPF_ABS                        = 0x20
+	BPF_ADD                        = 0x0
+	BPF_ALIGNMENT                  = 0x8
+	BPF_ALU                        = 0x4
+	BPF_AND                        = 0x50
+	BPF_B                          = 0x10
+	BPF_BUFMODE_BUFFER             = 0x1
+	BPF_BUFMODE_ZBUF               = 0x2
+	BPF_DIV                        = 0x30
+	BPF_H                          = 0x8
+	BPF_IMM                        = 0x0
+	BPF_IND                        = 0x40
+	BPF_JA                         = 0x0
+	BPF_JEQ                        = 0x10
+	BPF_JGE                        = 0x30
+	BPF_JGT                        = 0x20
+	BPF_JMP                        = 0x5
+	BPF_JSET                       = 0x40
+	BPF_K                          = 0x0
+	BPF_LD                         = 0x0
+	BPF_LDX                        = 0x1
+	BPF_LEN                        = 0x80
+	BPF_LSH                        = 0x60
+	BPF_MAJOR_VERSION              = 0x1
+	BPF_MAXBUFSIZE                 = 0x80000
+	BPF_MAXINSNS                   = 0x200
+	BPF_MEM                        = 0x60
+	BPF_MEMWORDS                   = 0x10
+	BPF_MINBUFSIZE                 = 0x20
+	BPF_MINOR_VERSION              = 0x1
+	BPF_MISC                       = 0x7
+	BPF_MOD                        = 0x90
+	BPF_MSH                        = 0xa0
+	BPF_MUL                        = 0x20
+	BPF_NEG                        = 0x80
+	BPF_OR                         = 0x40
+	BPF_RELEASE                    = 0x30bb6
+	BPF_RET                        = 0x6
+	BPF_RSH                        = 0x70
+	BPF_ST                         = 0x2
+	BPF_STX                        = 0x3
+	BPF_SUB                        = 0x10
+	BPF_TAX                        = 0x0
+	BPF_TXA                        = 0x80
+	BPF_T_BINTIME                  = 0x2
+	BPF_T_BINTIME_FAST             = 0x102
+	BPF_T_BINTIME_MONOTONIC        = 0x202
+	BPF_T_BINTIME_MONOTONIC_FAST   = 0x302
+	BPF_T_FAST                     = 0x100
+	BPF_T_FLAG_MASK                = 0x300
+	BPF_T_FORMAT_MASK              = 0x3
+	BPF_T_MICROTIME                = 0x0
+	BPF_T_MICROTIME_FAST           = 0x100
+	BPF_T_MICROTIME_MONOTONIC      = 0x200
+	BPF_T_MICROTIME_MONOTONIC_FAST = 0x300
+	BPF_T_MONOTONIC                = 0x200
+	BPF_T_MONOTONIC_FAST           = 0x300
+	BPF_T_NANOTIME                 = 0x1
+	BPF_T_NANOTIME_FAST            = 0x101
+	BPF_T_NANOTIME_MONOTONIC       = 0x201
+	BPF_T_NANOTIME_MONOTONIC_FAST  = 0x301
+	BPF_T_NONE                     = 0x3
+	BPF_T_NORMAL                   = 0x0
+	BPF_W                          = 0x0
+	BPF_X                          = 0x8
+	BPF_XOR                        = 0xa0
+	BRKINT                         = 0x2
+	CAP_ACCEPT                     = 0x200000020000000
+	CAP_ACL_CHECK                  = 0x400000000010000
+	CAP_ACL_DELETE                 = 0x400000000020000
+	CAP_ACL_GET                    = 0x400000000040000
+	CAP_ACL_SET                    = 0x400000000080000
+	CAP_ALL0                       = 0x20007ffffffffff
+	CAP_ALL1                       = 0x4000000001fffff
+	CAP_BIND                       = 0x200000040000000
+	CAP_BINDAT                     = 0x200008000000400
+	CAP_CHFLAGSAT                  = 0x200000000001400
+	CAP_CONNECT                    = 0x200000080000000
+	CAP_CONNECTAT                  = 0x200010000000400
+	CAP_CREATE                     = 0x200000000000040
+	CAP_EVENT                      = 0x400000000000020
+	CAP_EXTATTR_DELETE             = 0x400000000001000
+	CAP_EXTATTR_GET                = 0x400000000002000
+	CAP_EXTATTR_LIST               = 0x400000000004000
+	CAP_EXTATTR_SET                = 0x400000000008000
+	CAP_FCHDIR                     = 0x200000000000800
+	CAP_FCHFLAGS                   = 0x200000000001000
+	CAP_FCHMOD                     = 0x200000000002000
+	CAP_FCHMODAT                   = 0x200000000002400
+	CAP_FCHOWN                     = 0x200000000004000
+	CAP_FCHOWNAT                   = 0x200000000004400
+	CAP_FCNTL                      = 0x200000000008000
+	CAP_FCNTL_ALL                  = 0x78
+	CAP_FCNTL_GETFL                = 0x8
+	CAP_FCNTL_GETOWN               = 0x20
+	CAP_FCNTL_SETFL                = 0x10
+	CAP_FCNTL_SETOWN               = 0x40
+	CAP_FEXECVE                    = 0x200000000000080
+	CAP_FLOCK                      = 0x200000000010000
+	CAP_FPATHCONF                  = 0x200000000020000
+	CAP_FSCK                       = 0x200000000040000
+	CAP_FSTAT                      = 0x200000000080000
+	CAP_FSTATAT                    = 0x200000000080400
+	CAP_FSTATFS                    = 0x200000000100000
+	CAP_FSYNC                      = 0x200000000000100
+	CAP_FTRUNCATE                  = 0x200000000000200
+	CAP_FUTIMES                    = 0x200000000200000
+	CAP_FUTIMESAT                  = 0x200000000200400
+	CAP_GETPEERNAME                = 0x200000100000000
+	CAP_GETSOCKNAME                = 0x200000200000000
+	CAP_GETSOCKOPT                 = 0x200000400000000
+	CAP_IOCTL                      = 0x400000000000080
+	CAP_IOCTLS_ALL                 = 0x7fffffffffffffff
+	CAP_KQUEUE                     = 0x400000000100040
+	CAP_KQUEUE_CHANGE              = 0x400000000100000
+	CAP_KQUEUE_EVENT               = 0x400000000000040
+	CAP_LINKAT_SOURCE              = 0x200020000000400
+	CAP_LINKAT_TARGET              = 0x200000000400400
+	CAP_LISTEN                     = 0x200000800000000
+	CAP_LOOKUP                     = 0x200000000000400
+	CAP_MAC_GET                    = 0x400000000000001
+	CAP_MAC_SET                    = 0x400000000000002
+	CAP_MKDIRAT                    = 0x200000000800400
+	CAP_MKFIFOAT                   = 0x200000001000400
+	CAP_MKNODAT                    = 0x200000002000400
+	CAP_MMAP                       = 0x200000000000010
+	CAP_MMAP_R                     = 0x20000000000001d
+	CAP_MMAP_RW                    = 0x20000000000001f
+	CAP_MMAP_RWX                   = 0x20000000000003f
+	CAP_MMAP_RX                    = 0x20000000000003d
+	CAP_MMAP_W                     = 0x20000000000001e
+	CAP_MMAP_WX                    = 0x20000000000003e
+	CAP_MMAP_X                     = 0x20000000000003c
+	CAP_PDGETPID                   = 0x400000000000200
+	CAP_PDKILL                     = 0x400000000000800
+	CAP_PDWAIT                     = 0x400000000000400
+	CAP_PEELOFF                    = 0x200001000000000
+	CAP_POLL_EVENT                 = 0x400000000000020
+	CAP_PREAD                      = 0x20000000000000d
+	CAP_PWRITE                     = 0x20000000000000e
+	CAP_READ                       = 0x200000000000001
+	CAP_RECV                       = 0x200000000000001
+	CAP_RENAMEAT_SOURCE            = 0x200000004000400
+	CAP_RENAMEAT_TARGET            = 0x200040000000400
+	CAP_RIGHTS_VERSION             = 0x0
+	CAP_RIGHTS_VERSION_00          = 0x0
+	CAP_SEEK                       = 0x20000000000000c
+	CAP_SEEK_TELL                  = 0x200000000000004
+	CAP_SEM_GETVALUE               = 0x400000000000004
+	CAP_SEM_POST                   = 0x400000000000008
+	CAP_SEM_WAIT                   = 0x400000000000010
+	CAP_SEND                       = 0x200000000000002
+	CAP_SETSOCKOPT                 = 0x200002000000000
+	CAP_SHUTDOWN                   = 0x200004000000000
+	CAP_SOCK_CLIENT                = 0x200007780000003
+	CAP_SOCK_SERVER                = 0x200007f60000003
+	CAP_SYMLINKAT                  = 0x200000008000400
+	CAP_TTYHOOK                    = 0x400000000000100
+	CAP_UNLINKAT                   = 0x200000010000400
+	CAP_UNUSED0_44                 = 0x200080000000000
+	CAP_UNUSED0_57                 = 0x300000000000000
+	CAP_UNUSED1_22                 = 0x400000000200000
+	CAP_UNUSED1_57                 = 0x500000000000000
+	CAP_WRITE                      = 0x200000000000002
+	CFLUSH                         = 0xf
+	CLOCAL                         = 0x8000
+	CLOCK_MONOTONIC                = 0x4
+	CLOCK_MONOTONIC_FAST           = 0xc
+	CLOCK_MONOTONIC_PRECISE        = 0xb
+	CLOCK_PROCESS_CPUTIME_ID       = 0xf
+	CLOCK_PROF                     = 0x2
+	CLOCK_REALTIME                 = 0x0
+	CLOCK_REALTIME_FAST            = 0xa
+	CLOCK_REALTIME_PRECISE         = 0x9
+	CLOCK_SECOND                   = 0xd
+	CLOCK_THREAD_CPUTIME_ID        = 0xe
+	CLOCK_UPTIME                   = 0x5
+	CLOCK_UPTIME_FAST              = 0x8
+	CLOCK_UPTIME_PRECISE           = 0x7
+	CLOCK_VIRTUAL                  = 0x1
+	CPUSTATES                      = 0x5
+	CP_IDLE                        = 0x4
+	CP_INTR                        = 0x3
+	CP_NICE                        = 0x1
+	CP_SYS                         = 0x2
+	CP_USER                        = 0x0
+	CREAD                          = 0x800
+	CRTSCTS                        = 0x30000
+	CS5                            = 0x0
+	CS6                            = 0x100
+	CS7                            = 0x200
+	CS8                            = 0x300
+	CSIZE                          = 0x300
+	CSTART                         = 0x11
+	CSTATUS                        = 0x14
+	CSTOP                          = 0x13
+	CSTOPB                         = 0x400
+	CSUSP                          = 0x1a
+	CTL_HW                         = 0x6
+	CTL_KERN                       = 0x1
+	CTL_MAXNAME                    = 0x18
+	CTL_NET                        = 0x4
+	DIOCGATTR                      = 0xc148648e
+	DIOCGDELETE                    = 0x80106488
+	DIOCGFLUSH                     = 0x20006487
+	DIOCGFRONTSTUFF                = 0x40086486
+	DIOCGFWHEADS                   = 0x40046483
+	DIOCGFWSECTORS                 = 0x40046482
+	DIOCGIDENT                     = 0x41006489
+	DIOCGMEDIASIZE                 = 0x40086481
+	DIOCGPHYSPATH                  = 0x4400648d
+	DIOCGPROVIDERNAME              = 0x4400648a
+	DIOCGSECTORSIZE                = 0x40046480
+	DIOCGSTRIPEOFFSET              = 0x4008648c
+	DIOCGSTRIPESIZE                = 0x4008648b
+	DIOCSKERNELDUMP                = 0x80506490
+	DIOCSKERNELDUMP_FREEBSD11      = 0x80046485
+	DIOCZONECMD                    = 0xc080648f
+	DLT_A429                       = 0xb8
+	DLT_A653_ICM                   = 0xb9
+	DLT_AIRONET_HEADER             = 0x78
+	DLT_AOS                        = 0xde
+	DLT_APPLE_IP_OVER_IEEE1394     = 0x8a
+	DLT_ARCNET                     = 0x7
+	DLT_ARCNET_LINUX               = 0x81
+	DLT_ATM_CLIP                   = 0x13
+	DLT_ATM_RFC1483                = 0xb
+	DLT_AURORA                     = 0x7e
+	DLT_AX25                       = 0x3
+	DLT_AX25_KISS                  = 0xca
+	DLT_BACNET_MS_TP               = 0xa5
+	DLT_BLUETOOTH_BREDR_BB         = 0xff
+	DLT_BLUETOOTH_HCI_H4           = 0xbb
+	DLT_BLUETOOTH_HCI_H4_WITH_PHDR = 0xc9
+	DLT_BLUETOOTH_LE_LL            = 0xfb
+	DLT_BLUETOOTH_LE_LL_WITH_PHDR  = 0x100
+	DLT_BLUETOOTH_LINUX_MONITOR    = 0xfe
+	DLT_CAN20B                     = 0xbe
+	DLT_CAN_SOCKETCAN              = 0xe3
+	DLT_CHAOS                      = 0x5
+	DLT_CHDLC                      = 0x68
+	DLT_CISCO_IOS                  = 0x76
+	DLT_CLASS_NETBSD_RAWAF         = 0x2240000
+	DLT_C_HDLC                     = 0x68
+	DLT_C_HDLC_WITH_DIR            = 0xcd
+	DLT_DBUS                       = 0xe7
+	DLT_DECT                       = 0xdd
+	DLT_DISPLAYPORT_AUX            = 0x113
+	DLT_DOCSIS                     = 0x8f
+	DLT_DOCSIS31_XRA31             = 0x111
+	DLT_DVB_CI                     = 0xeb
+	DLT_ECONET                     = 0x73
+	DLT_EN10MB                     = 0x1
+	DLT_EN3MB                      = 0x2
+	DLT_ENC                        = 0x6d
+	DLT_EPON                       = 0x103
+	DLT_ERF                        = 0xc5
+	DLT_ERF_ETH                    = 0xaf
+	DLT_ERF_POS                    = 0xb0
+	DLT_ETHERNET_MPACKET           = 0x112
+	DLT_FC_2                       = 0xe0
+	DLT_FC_2_WITH_FRAME_DELIMS     = 0xe1
+	DLT_FDDI                       = 0xa
+	DLT_FLEXRAY                    = 0xd2
+	DLT_FRELAY                     = 0x6b
+	DLT_FRELAY_WITH_DIR            = 0xce
+	DLT_GCOM_SERIAL                = 0xad
+	DLT_GCOM_T1E1                  = 0xac
+	DLT_GPF_F                      = 0xab
+	DLT_GPF_T                      = 0xaa
+	DLT_GPRS_LLC                   = 0xa9
+	DLT_GSMTAP_ABIS                = 0xda
+	DLT_GSMTAP_UM                  = 0xd9
+	DLT_IBM_SN                     = 0x92
+	DLT_IBM_SP                     = 0x91
+	DLT_IEEE802                    = 0x6
+	DLT_IEEE802_11                 = 0x69
+	DLT_IEEE802_11_RADIO           = 0x7f
+	DLT_IEEE802_11_RADIO_AVS       = 0xa3
+	DLT_IEEE802_15_4               = 0xc3
+	DLT_IEEE802_15_4_LINUX         = 0xbf
+	DLT_IEEE802_15_4_NOFCS         = 0xe6
+	DLT_IEEE802_15_4_NONASK_PHY    = 0xd7
+	DLT_IEEE802_16_MAC_CPS         = 0xbc
+	DLT_IEEE802_16_MAC_CPS_RADIO   = 0xc1
+	DLT_INFINIBAND                 = 0xf7
+	DLT_IPFILTER                   = 0x74
+	DLT_IPMB                       = 0xc7
+	DLT_IPMB_LINUX                 = 0xd1
+	DLT_IPMI_HPM_2                 = 0x104
+	DLT_IPNET                      = 0xe2
+	DLT_IPOIB                      = 0xf2
+	DLT_IPV4                       = 0xe4
+	DLT_IPV6                       = 0xe5
+	DLT_IP_OVER_FC                 = 0x7a
+	DLT_ISO_14443                  = 0x108
+	DLT_JUNIPER_ATM1               = 0x89
+	DLT_JUNIPER_ATM2               = 0x87
+	DLT_JUNIPER_ATM_CEMIC          = 0xee
+	DLT_JUNIPER_CHDLC              = 0xb5
+	DLT_JUNIPER_ES                 = 0x84
+	DLT_JUNIPER_ETHER              = 0xb2
+	DLT_JUNIPER_FIBRECHANNEL       = 0xea
+	DLT_JUNIPER_FRELAY             = 0xb4
+	DLT_JUNIPER_GGSN               = 0x85
+	DLT_JUNIPER_ISM                = 0xc2
+	DLT_JUNIPER_MFR                = 0x86
+	DLT_JUNIPER_MLFR               = 0x83
+	DLT_JUNIPER_MLPPP              = 0x82
+	DLT_JUNIPER_MONITOR            = 0xa4
+	DLT_JUNIPER_PIC_PEER           = 0xae
+	DLT_JUNIPER_PPP                = 0xb3
+	DLT_JUNIPER_PPPOE              = 0xa7
+	DLT_JUNIPER_PPPOE_ATM          = 0xa8
+	DLT_JUNIPER_SERVICES           = 0x88
+	DLT_JUNIPER_SRX_E2E            = 0xe9
+	DLT_JUNIPER_ST                 = 0xc8
+	DLT_JUNIPER_VP                 = 0xb7
+	DLT_JUNIPER_VS                 = 0xe8
+	DLT_LAPB_WITH_DIR              = 0xcf
+	DLT_LAPD                       = 0xcb
+	DLT_LIN                        = 0xd4
+	DLT_LINUX_EVDEV                = 0xd8
+	DLT_LINUX_IRDA                 = 0x90
+	DLT_LINUX_LAPD                 = 0xb1
+	DLT_LINUX_PPP_WITHDIRECTION    = 0xa6
+	DLT_LINUX_SLL                  = 0x71
+	DLT_LOOP                       = 0x6c
+	DLT_LORATAP                    = 0x10e
+	DLT_LTALK                      = 0x72
+	DLT_MATCHING_MAX               = 0x113
+	DLT_MATCHING_MIN               = 0x68
+	DLT_MFR                        = 0xb6
+	DLT_MOST                       = 0xd3
+	DLT_MPEG_2_TS                  = 0xf3
+	DLT_MPLS                       = 0xdb
+	DLT_MTP2                       = 0x8c
+	DLT_MTP2_WITH_PHDR             = 0x8b
+	DLT_MTP3                       = 0x8d
+	DLT_MUX27010                   = 0xec
+	DLT_NETANALYZER                = 0xf0
+	DLT_NETANALYZER_TRANSPARENT    = 0xf1
+	DLT_NETLINK                    = 0xfd
+	DLT_NFC_LLCP                   = 0xf5
+	DLT_NFLOG                      = 0xef
+	DLT_NG40                       = 0xf4
+	DLT_NORDIC_BLE                 = 0x110
+	DLT_NULL                       = 0x0
+	DLT_OPENFLOW                   = 0x10b
+	DLT_PCI_EXP                    = 0x7d
+	DLT_PFLOG                      = 0x75
+	DLT_PFSYNC                     = 0x79
+	DLT_PKTAP                      = 0x102
+	DLT_PPI                        = 0xc0
+	DLT_PPP                        = 0x9
+	DLT_PPP_BSDOS                  = 0xe
+	DLT_PPP_ETHER                  = 0x33
+	DLT_PPP_PPPD                   = 0xa6
+	DLT_PPP_SERIAL                 = 0x32
+	DLT_PPP_WITH_DIR               = 0xcc
+	DLT_PPP_WITH_DIRECTION         = 0xa6
+	DLT_PRISM_HEADER               = 0x77
+	DLT_PROFIBUS_DL                = 0x101
+	DLT_PRONET                     = 0x4
+	DLT_RAIF1                      = 0xc6
+	DLT_RAW                        = 0xc
+	DLT_RDS                        = 0x109
+	DLT_REDBACK_SMARTEDGE          = 0x20
+	DLT_RIO                        = 0x7c
+	DLT_RTAC_SERIAL                = 0xfa
+	DLT_SCCP                       = 0x8e
+	DLT_SCTP                       = 0xf8
+	DLT_SDLC                       = 0x10c
+	DLT_SITA                       = 0xc4
+	DLT_SLIP                       = 0x8
+	DLT_SLIP_BSDOS                 = 0xd
+	DLT_STANAG_5066_D_PDU          = 0xed
+	DLT_SUNATM                     = 0x7b
+	DLT_SYMANTEC_FIREWALL          = 0x63
+	DLT_TI_LLN_SNIFFER             = 0x10d
+	DLT_TZSP                       = 0x80
+	DLT_USB                        = 0xba
+	DLT_USBPCAP                    = 0xf9
+	DLT_USB_DARWIN                 = 0x10a
+	DLT_USB_FREEBSD                = 0xba
+	DLT_USB_LINUX                  = 0xbd
+	DLT_USB_LINUX_MMAPPED          = 0xdc
+	DLT_USER0                      = 0x93
+	DLT_USER1                      = 0x94
+	DLT_USER10                     = 0x9d
+	DLT_USER11                     = 0x9e
+	DLT_USER12                     = 0x9f
+	DLT_USER13                     = 0xa0
+	DLT_USER14                     = 0xa1
+	DLT_USER15                     = 0xa2
+	DLT_USER2                      = 0x95
+	DLT_USER3                      = 0x96
+	DLT_USER4                      = 0x97
+	DLT_USER5                      = 0x98
+	DLT_USER6                      = 0x99
+	DLT_USER7                      = 0x9a
+	DLT_USER8                      = 0x9b
+	DLT_USER9                      = 0x9c
+	DLT_VSOCK                      = 0x10f
+	DLT_WATTSTOPPER_DLM            = 0x107
+	DLT_WIHART                     = 0xdf
+	DLT_WIRESHARK_UPPER_PDU        = 0xfc
+	DLT_X2E_SERIAL                 = 0xd5
+	DLT_X2E_XORAYA                 = 0xd6
+	DLT_ZWAVE_R1_R2                = 0x105
+	DLT_ZWAVE_R3                   = 0x106
+	DT_BLK                         = 0x6
+	DT_CHR                         = 0x2
+	DT_DIR                         = 0x4
+	DT_FIFO                        = 0x1
+	DT_LNK                         = 0xa
+	DT_REG                         = 0x8
+	DT_SOCK                        = 0xc
+	DT_UNKNOWN                     = 0x0
+	DT_WHT                         = 0xe
+	ECHO                           = 0x8
+	ECHOCTL                        = 0x40
+	ECHOE                          = 0x2
+	ECHOK                          = 0x4
+	ECHOKE                         = 0x1
+	ECHONL                         = 0x10
+	ECHOPRT                        = 0x20
+	EVFILT_AIO                     = -0x3
+	EVFILT_EMPTY                   = -0xd
+	EVFILT_FS                      = -0x9
+	EVFILT_LIO                     = -0xa
+	EVFILT_PROC                    = -0x5
+	EVFILT_PROCDESC                = -0x8
+	EVFILT_READ                    = -0x1
+	EVFILT_SENDFILE                = -0xc
+	EVFILT_SIGNAL                  = -0x6
+	EVFILT_SYSCOUNT                = 0xd
+	EVFILT_TIMER                   = -0x7
+	EVFILT_USER                    = -0xb
+	EVFILT_VNODE                   = -0x4
+	EVFILT_WRITE                   = -0x2
+	EVNAMEMAP_NAME_SIZE            = 0x40
+	EV_ADD                         = 0x1
+	EV_CLEAR                       = 0x20
+	EV_DELETE                      = 0x2
+	EV_DISABLE                     = 0x8
+	EV_DISPATCH                    = 0x80
+	EV_DROP                        = 0x1000
+	EV_ENABLE                      = 0x4
+	EV_EOF                         = 0x8000
+	EV_ERROR                       = 0x4000
+	EV_FLAG1                       = 0x2000
+	EV_FLAG2                       = 0x4000
+	EV_FORCEONESHOT                = 0x100
+	EV_ONESHOT                     = 0x10
+	EV_RECEIPT                     = 0x40
+	EV_SYSFLAGS                    = 0xf000
+	EXTA                           = 0x4b00
+	EXTATTR_MAXNAMELEN             = 0xff
+	EXTATTR_NAMESPACE_EMPTY        = 0x0
+	EXTATTR_NAMESPACE_SYSTEM       = 0x2
+	EXTATTR_NAMESPACE_USER         = 0x1
+	EXTB                           = 0x9600
+	EXTPROC                        = 0x800
+	FD_CLOEXEC                     = 0x1
+	FD_SETSIZE                     = 0x400
+	FLUSHO                         = 0x800000
+	F_CANCEL                       = 0x5
+	F_DUP2FD                       = 0xa
+	F_DUP2FD_CLOEXEC               = 0x12
+	F_DUPFD                        = 0x0
+	F_DUPFD_CLOEXEC                = 0x11
+	F_GETFD                        = 0x1
+	F_GETFL                        = 0x3
+	F_GETLK                        = 0xb
+	F_GETOWN                       = 0x5
+	F_OGETLK                       = 0x7
+	F_OK                           = 0x0
+	F_OSETLK                       = 0x8
+	F_OSETLKW                      = 0x9
+	F_RDAHEAD                      = 0x10
+	F_RDLCK                        = 0x1
+	F_READAHEAD                    = 0xf
+	F_SETFD                        = 0x2
+	F_SETFL                        = 0x4
+	F_SETLK                        = 0xc
+	F_SETLKW                       = 0xd
+	F_SETLK_REMOTE                 = 0xe
+	F_SETOWN                       = 0x6
+	F_UNLCK                        = 0x2
+	F_UNLCKSYS                     = 0x4
+	F_WRLCK                        = 0x3
+	HUPCL                          = 0x4000
+	HW_MACHINE                     = 0x1
+	ICANON                         = 0x100
+	ICMP6_FILTER                   = 0x12
+	ICRNL                          = 0x100
+	IEXTEN                         = 0x400
+	IFAN_ARRIVAL                   = 0x0
+	IFAN_DEPARTURE                 = 0x1
+	IFCAP_WOL_MAGIC                = 0x2000
+	IFF_ALLMULTI                   = 0x200
+	IFF_ALTPHYS                    = 0x4000
+	IFF_BROADCAST                  = 0x2
+	IFF_CANTCHANGE                 = 0x218f52
+	IFF_CANTCONFIG                 = 0x10000
+	IFF_DEBUG                      = 0x4
+	IFF_DRV_OACTIVE                = 0x400
+	IFF_DRV_RUNNING                = 0x40
+	IFF_DYING                      = 0x200000
+	IFF_LINK0                      = 0x1000
+	IFF_LINK1                      = 0x2000
+	IFF_LINK2                      = 0x4000
+	IFF_LOOPBACK                   = 0x8
+	IFF_MONITOR                    = 0x40000
+	IFF_MULTICAST                  = 0x8000
+	IFF_NOARP                      = 0x80
+	IFF_NOGROUP                    = 0x800000
+	IFF_OACTIVE                    = 0x400
+	IFF_POINTOPOINT                = 0x10
+	IFF_PPROMISC                   = 0x20000
+	IFF_PROMISC                    = 0x100
+	IFF_RENAMING                   = 0x400000
+	IFF_RUNNING                    = 0x40
+	IFF_SIMPLEX                    = 0x800
+	IFF_STATICARP                  = 0x80000
+	IFF_UP                         = 0x1
+	IFNAMSIZ                       = 0x10
+	IFT_BRIDGE                     = 0xd1
+	IFT_CARP                       = 0xf8
+	IFT_IEEE1394                   = 0x90
+	IFT_INFINIBAND                 = 0xc7
+	IFT_L2VLAN                     = 0x87
+	IFT_L3IPVLAN                   = 0x88
+	IFT_PPP                        = 0x17
+	IFT_PROPVIRTUAL                = 0x35
+	IGNBRK                         = 0x1
+	IGNCR                          = 0x80
+	IGNPAR                         = 0x4
+	IMAXBEL                        = 0x2000
+	INLCR                          = 0x40
+	INPCK                          = 0x10
+	IN_CLASSA_HOST                 = 0xffffff
+	IN_CLASSA_MAX                  = 0x80
+	IN_CLASSA_NET                  = 0xff000000
+	IN_CLASSA_NSHIFT               = 0x18
+	IN_CLASSB_HOST                 = 0xffff
+	IN_CLASSB_MAX                  = 0x10000
+	IN_CLASSB_NET                  = 0xffff0000
+	IN_CLASSB_NSHIFT               = 0x10
+	IN_CLASSC_HOST                 = 0xff
+	IN_CLASSC_NET                  = 0xffffff00
+	IN_CLASSC_NSHIFT               = 0x8
+	IN_CLASSD_HOST                 = 0xfffffff
+	IN_CLASSD_NET                  = 0xf0000000
+	IN_CLASSD_NSHIFT               = 0x1c
+	IN_LOOPBACKNET                 = 0x7f
+	IN_RFC3021_MASK                = 0xfffffffe
+	IPPROTO_3PC                    = 0x22
+	IPPROTO_ADFS                   = 0x44
+	IPPROTO_AH                     = 0x33
+	IPPROTO_AHIP                   = 0x3d
+	IPPROTO_APES                   = 0x63
+	IPPROTO_ARGUS                  = 0xd
+	IPPROTO_AX25                   = 0x5d
+	IPPROTO_BHA                    = 0x31
+	IPPROTO_BLT                    = 0x1e
+	IPPROTO_BRSATMON               = 0x4c
+	IPPROTO_CARP                   = 0x70
+	IPPROTO_CFTP                   = 0x3e
+	IPPROTO_CHAOS                  = 0x10
+	IPPROTO_CMTP                   = 0x26
+	IPPROTO_CPHB                   = 0x49
+	IPPROTO_CPNX                   = 0x48
+	IPPROTO_DDP                    = 0x25
+	IPPROTO_DGP                    = 0x56
+	IPPROTO_DIVERT                 = 0x102
+	IPPROTO_DONE                   = 0x101
+	IPPROTO_DSTOPTS                = 0x3c
+	IPPROTO_EGP                    = 0x8
+	IPPROTO_EMCON                  = 0xe
+	IPPROTO_ENCAP                  = 0x62
+	IPPROTO_EON                    = 0x50
+	IPPROTO_ESP                    = 0x32
+	IPPROTO_ETHERIP                = 0x61
+	IPPROTO_FRAGMENT               = 0x2c
+	IPPROTO_GGP                    = 0x3
+	IPPROTO_GMTP                   = 0x64
+	IPPROTO_GRE                    = 0x2f
+	IPPROTO_HELLO                  = 0x3f
+	IPPROTO_HIP                    = 0x8b
+	IPPROTO_HMP                    = 0x14
+	IPPROTO_HOPOPTS                = 0x0
+	IPPROTO_ICMP                   = 0x1
+	IPPROTO_ICMPV6                 = 0x3a
+	IPPROTO_IDP                    = 0x16
+	IPPROTO_IDPR                   = 0x23
+	IPPROTO_IDRP                   = 0x2d
+	IPPROTO_IGMP                   = 0x2
+	IPPROTO_IGP                    = 0x55
+	IPPROTO_IGRP                   = 0x58
+	IPPROTO_IL                     = 0x28
+	IPPROTO_INLSP                  = 0x34
+	IPPROTO_INP                    = 0x20
+	IPPROTO_IP                     = 0x0
+	IPPROTO_IPCOMP                 = 0x6c
+	IPPROTO_IPCV                   = 0x47
+	IPPROTO_IPEIP                  = 0x5e
+	IPPROTO_IPIP                   = 0x4
+	IPPROTO_IPPC                   = 0x43
+	IPPROTO_IPV4                   = 0x4
+	IPPROTO_IPV6                   = 0x29
+	IPPROTO_IRTP                   = 0x1c
+	IPPROTO_KRYPTOLAN              = 0x41
+	IPPROTO_LARP                   = 0x5b
+	IPPROTO_LEAF1                  = 0x19
+	IPPROTO_LEAF2                  = 0x1a
+	IPPROTO_MAX                    = 0x100
+	IPPROTO_MEAS                   = 0x13
+	IPPROTO_MH                     = 0x87
+	IPPROTO_MHRP                   = 0x30
+	IPPROTO_MICP                   = 0x5f
+	IPPROTO_MOBILE                 = 0x37
+	IPPROTO_MPLS                   = 0x89
+	IPPROTO_MTP                    = 0x5c
+	IPPROTO_MUX                    = 0x12
+	IPPROTO_ND                     = 0x4d
+	IPPROTO_NHRP                   = 0x36
+	IPPROTO_NONE                   = 0x3b
+	IPPROTO_NSP                    = 0x1f
+	IPPROTO_NVPII                  = 0xb
+	IPPROTO_OLD_DIVERT             = 0xfe
+	IPPROTO_OSPFIGP                = 0x59
+	IPPROTO_PFSYNC                 = 0xf0
+	IPPROTO_PGM                    = 0x71
+	IPPROTO_PIGP                   = 0x9
+	IPPROTO_PIM                    = 0x67
+	IPPROTO_PRM                    = 0x15
+	IPPROTO_PUP                    = 0xc
+	IPPROTO_PVP                    = 0x4b
+	IPPROTO_RAW                    = 0xff
+	IPPROTO_RCCMON                 = 0xa
+	IPPROTO_RDP                    = 0x1b
+	IPPROTO_RESERVED_253           = 0xfd
+	IPPROTO_RESERVED_254           = 0xfe
+	IPPROTO_ROUTING                = 0x2b
+	IPPROTO_RSVP                   = 0x2e
+	IPPROTO_RVD                    = 0x42
+	IPPROTO_SATEXPAK               = 0x40
+	IPPROTO_SATMON                 = 0x45
+	IPPROTO_SCCSP                  = 0x60
+	IPPROTO_SCTP                   = 0x84
+	IPPROTO_SDRP                   = 0x2a
+	IPPROTO_SEND                   = 0x103
+	IPPROTO_SEP                    = 0x21
+	IPPROTO_SHIM6                  = 0x8c
+	IPPROTO_SKIP                   = 0x39
+	IPPROTO_SPACER                 = 0x7fff
+	IPPROTO_SRPC                   = 0x5a
+	IPPROTO_ST                     = 0x7
+	IPPROTO_SVMTP                  = 0x52
+	IPPROTO_SWIPE                  = 0x35
+	IPPROTO_TCF                    = 0x57
+	IPPROTO_TCP                    = 0x6
+	IPPROTO_TLSP                   = 0x38
+	IPPROTO_TP                     = 0x1d
+	IPPROTO_TPXX                   = 0x27
+	IPPROTO_TRUNK1                 = 0x17
+	IPPROTO_TRUNK2                 = 0x18
+	IPPROTO_TTP                    = 0x54
+	IPPROTO_UDP                    = 0x11
+	IPPROTO_UDPLITE                = 0x88
+	IPPROTO_VINES                  = 0x53
+	IPPROTO_VISA                   = 0x46
+	IPPROTO_VMTP                   = 0x51
+	IPPROTO_WBEXPAK                = 0x4f
+	IPPROTO_WBMON                  = 0x4e
+	IPPROTO_WSN                    = 0x4a
+	IPPROTO_XNET                   = 0xf
+	IPPROTO_XTP                    = 0x24
+	IPV6_AUTOFLOWLABEL             = 0x3b
+	IPV6_BINDANY                   = 0x40
+	IPV6_BINDMULTI                 = 0x41
+	IPV6_BINDV6ONLY                = 0x1b
+	IPV6_CHECKSUM                  = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS    = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP    = 0x1
+	IPV6_DEFHLIM                   = 0x40
+	IPV6_DONTFRAG                  = 0x3e
+	IPV6_DSTOPTS                   = 0x32
+	IPV6_FLOWID                    = 0x43
+	IPV6_FLOWINFO_MASK             = 0xffffff0f
+	IPV6_FLOWLABEL_LEN             = 0x14
+	IPV6_FLOWLABEL_MASK            = 0xffff0f00
+	IPV6_FLOWTYPE                  = 0x44
+	IPV6_FRAGTTL                   = 0x78
+	IPV6_FW_ADD                    = 0x1e
+	IPV6_FW_DEL                    = 0x1f
+	IPV6_FW_FLUSH                  = 0x20
+	IPV6_FW_GET                    = 0x22
+	IPV6_FW_ZERO                   = 0x21
+	IPV6_HLIMDEC                   = 0x1
+	IPV6_HOPLIMIT                  = 0x2f
+	IPV6_HOPOPTS                   = 0x31
+	IPV6_IPSEC_POLICY              = 0x1c
+	IPV6_JOIN_GROUP                = 0xc
+	IPV6_LEAVE_GROUP               = 0xd
+	IPV6_MAXHLIM                   = 0xff
+	IPV6_MAXOPTHDR                 = 0x800
+	IPV6_MAXPACKET                 = 0xffff
+	IPV6_MAX_GROUP_SRC_FILTER      = 0x200
+	IPV6_MAX_MEMBERSHIPS           = 0xfff
+	IPV6_MAX_SOCK_SRC_FILTER       = 0x80
+	IPV6_MMTU                      = 0x500
+	IPV6_MSFILTER                  = 0x4a
+	IPV6_MULTICAST_HOPS            = 0xa
+	IPV6_MULTICAST_IF              = 0x9
+	IPV6_MULTICAST_LOOP            = 0xb
+	IPV6_NEXTHOP                   = 0x30
+	IPV6_ORIGDSTADDR               = 0x48
+	IPV6_PATHMTU                   = 0x2c
+	IPV6_PKTINFO                   = 0x2e
+	IPV6_PORTRANGE                 = 0xe
+	IPV6_PORTRANGE_DEFAULT         = 0x0
+	IPV6_PORTRANGE_HIGH            = 0x1
+	IPV6_PORTRANGE_LOW             = 0x2
+	IPV6_PREFER_TEMPADDR           = 0x3f
+	IPV6_RECVDSTOPTS               = 0x28
+	IPV6_RECVFLOWID                = 0x46
+	IPV6_RECVHOPLIMIT              = 0x25
+	IPV6_RECVHOPOPTS               = 0x27
+	IPV6_RECVORIGDSTADDR           = 0x48
+	IPV6_RECVPATHMTU               = 0x2b
+	IPV6_RECVPKTINFO               = 0x24
+	IPV6_RECVRSSBUCKETID           = 0x47
+	IPV6_RECVRTHDR                 = 0x26
+	IPV6_RECVTCLASS                = 0x39
+	IPV6_RSSBUCKETID               = 0x45
+	IPV6_RSS_LISTEN_BUCKET         = 0x42
+	IPV6_RTHDR                     = 0x33
+	IPV6_RTHDRDSTOPTS              = 0x23
+	IPV6_RTHDR_LOOSE               = 0x0
+	IPV6_RTHDR_STRICT              = 0x1
+	IPV6_RTHDR_TYPE_0              = 0x0
+	IPV6_SOCKOPT_RESERVED1         = 0x3
+	IPV6_TCLASS                    = 0x3d
+	IPV6_UNICAST_HOPS              = 0x4
+	IPV6_USE_MIN_MTU               = 0x2a
+	IPV6_V6ONLY                    = 0x1b
+	IPV6_VERSION                   = 0x60
+	IPV6_VERSION_MASK              = 0xf0
+	IP_ADD_MEMBERSHIP              = 0xc
+	IP_ADD_SOURCE_MEMBERSHIP       = 0x46
+	IP_BINDANY                     = 0x18
+	IP_BINDMULTI                   = 0x19
+	IP_BLOCK_SOURCE                = 0x48
+	IP_DEFAULT_MULTICAST_LOOP      = 0x1
+	IP_DEFAULT_MULTICAST_TTL       = 0x1
+	IP_DF                          = 0x4000
+	IP_DONTFRAG                    = 0x43
+	IP_DROP_MEMBERSHIP             = 0xd
+	IP_DROP_SOURCE_MEMBERSHIP      = 0x47
+	IP_DUMMYNET3                   = 0x31
+	IP_DUMMYNET_CONFIGURE          = 0x3c
+	IP_DUMMYNET_DEL                = 0x3d
+	IP_DUMMYNET_FLUSH              = 0x3e
+	IP_DUMMYNET_GET                = 0x40
+	IP_FLOWID                      = 0x5a
+	IP_FLOWTYPE                    = 0x5b
+	IP_FW3                         = 0x30
+	IP_FW_ADD                      = 0x32
+	IP_FW_DEL                      = 0x33
+	IP_FW_FLUSH                    = 0x34
+	IP_FW_GET                      = 0x36
+	IP_FW_NAT_CFG                  = 0x38
+	IP_FW_NAT_DEL                  = 0x39
+	IP_FW_NAT_GET_CONFIG           = 0x3a
+	IP_FW_NAT_GET_LOG              = 0x3b
+	IP_FW_RESETLOG                 = 0x37
+	IP_FW_TABLE_ADD                = 0x28
+	IP_FW_TABLE_DEL                = 0x29
+	IP_FW_TABLE_FLUSH              = 0x2a
+	IP_FW_TABLE_GETSIZE            = 0x2b
+	IP_FW_TABLE_LIST               = 0x2c
+	IP_FW_ZERO                     = 0x35
+	IP_HDRINCL                     = 0x2
+	IP_IPSEC_POLICY                = 0x15
+	IP_MAXPACKET                   = 0xffff
+	IP_MAX_GROUP_SRC_FILTER        = 0x200
+	IP_MAX_MEMBERSHIPS             = 0xfff
+	IP_MAX_SOCK_MUTE_FILTER        = 0x80
+	IP_MAX_SOCK_SRC_FILTER         = 0x80
+	IP_MF                          = 0x2000
+	IP_MINTTL                      = 0x42
+	IP_MSFILTER                    = 0x4a
+	IP_MSS                         = 0x240
+	IP_MULTICAST_IF                = 0x9
+	IP_MULTICAST_LOOP              = 0xb
+	IP_MULTICAST_TTL               = 0xa
+	IP_MULTICAST_VIF               = 0xe
+	IP_OFFMASK                     = 0x1fff
+	IP_ONESBCAST                   = 0x17
+	IP_OPTIONS                     = 0x1
+	IP_ORIGDSTADDR                 = 0x1b
+	IP_PORTRANGE                   = 0x13
+	IP_PORTRANGE_DEFAULT           = 0x0
+	IP_PORTRANGE_HIGH              = 0x1
+	IP_PORTRANGE_LOW               = 0x2
+	IP_RECVDSTADDR                 = 0x7
+	IP_RECVFLOWID                  = 0x5d
+	IP_RECVIF                      = 0x14
+	IP_RECVOPTS                    = 0x5
+	IP_RECVORIGDSTADDR             = 0x1b
+	IP_RECVRETOPTS                 = 0x6
+	IP_RECVRSSBUCKETID             = 0x5e
+	IP_RECVTOS                     = 0x44
+	IP_RECVTTL                     = 0x41
+	IP_RETOPTS                     = 0x8
+	IP_RF                          = 0x8000
+	IP_RSSBUCKETID                 = 0x5c
+	IP_RSS_LISTEN_BUCKET           = 0x1a
+	IP_RSVP_OFF                    = 0x10
+	IP_RSVP_ON                     = 0xf
+	IP_RSVP_VIF_OFF                = 0x12
+	IP_RSVP_VIF_ON                 = 0x11
+	IP_SENDSRCADDR                 = 0x7
+	IP_TOS                         = 0x3
+	IP_TTL                         = 0x4
+	IP_UNBLOCK_SOURCE              = 0x49
+	ISIG                           = 0x80
+	ISTRIP                         = 0x20
+	IXANY                          = 0x800
+	IXOFF                          = 0x400
+	IXON                           = 0x200
+	KERN_HOSTNAME                  = 0xa
+	KERN_OSRELEASE                 = 0x2
+	KERN_OSTYPE                    = 0x1
+	KERN_VERSION                   = 0x4
+	LOCK_EX                        = 0x2
+	LOCK_NB                        = 0x4
+	LOCK_SH                        = 0x1
+	LOCK_UN                        = 0x8
+	MADV_AUTOSYNC                  = 0x7
+	MADV_CORE                      = 0x9
+	MADV_DONTNEED                  = 0x4
+	MADV_FREE                      = 0x5
+	MADV_NOCORE                    = 0x8
+	MADV_NORMAL                    = 0x0
+	MADV_NOSYNC                    = 0x6
+	MADV_PROTECT                   = 0xa
+	MADV_RANDOM                    = 0x1
+	MADV_SEQUENTIAL                = 0x2
+	MADV_WILLNEED                  = 0x3
+	MAP_32BIT                      = 0x80000
+	MAP_ALIGNED_SUPER              = 0x1000000
+	MAP_ALIGNMENT_MASK             = -0x1000000
+	MAP_ALIGNMENT_SHIFT            = 0x18
+	MAP_ANON                       = 0x1000
+	MAP_ANONYMOUS                  = 0x1000
+	MAP_COPY                       = 0x2
+	MAP_EXCL                       = 0x4000
+	MAP_FILE                       = 0x0
+	MAP_FIXED                      = 0x10
+	MAP_GUARD                      = 0x2000
+	MAP_HASSEMAPHORE               = 0x200
+	MAP_NOCORE                     = 0x20000
+	MAP_NOSYNC                     = 0x800
+	MAP_PREFAULT_READ              = 0x40000
+	MAP_PRIVATE                    = 0x2
+	MAP_RESERVED0020               = 0x20
+	MAP_RESERVED0040               = 0x40
+	MAP_RESERVED0080               = 0x80
+	MAP_RESERVED0100               = 0x100
+	MAP_SHARED                     = 0x1
+	MAP_STACK                      = 0x400
+	MCAST_BLOCK_SOURCE             = 0x54
+	MCAST_EXCLUDE                  = 0x2
+	MCAST_INCLUDE                  = 0x1
+	MCAST_JOIN_GROUP               = 0x50
+	MCAST_JOIN_SOURCE_GROUP        = 0x52
+	MCAST_LEAVE_GROUP              = 0x51
+	MCAST_LEAVE_SOURCE_GROUP       = 0x53
+	MCAST_UNBLOCK_SOURCE           = 0x55
+	MCAST_UNDEFINED                = 0x0
+	MCL_CURRENT                    = 0x1
+	MCL_FUTURE                     = 0x2
+	MNT_ACLS                       = 0x8000000
+	MNT_ASYNC                      = 0x40
+	MNT_AUTOMOUNTED                = 0x200000000
+	MNT_BYFSID                     = 0x8000000
+	MNT_CMDFLAGS                   = 0xd0f0000
+	MNT_DEFEXPORTED                = 0x200
+	MNT_DELEXPORT                  = 0x20000
+	MNT_EXKERB                     = 0x800
+	MNT_EXPORTANON                 = 0x400
+	MNT_EXPORTED                   = 0x100
+	MNT_EXPUBLIC                   = 0x20000000
+	MNT_EXRDONLY                   = 0x80
+	MNT_FORCE                      = 0x80000
+	MNT_GJOURNAL                   = 0x2000000
+	MNT_IGNORE                     = 0x800000
+	MNT_LAZY                       = 0x3
+	MNT_LOCAL                      = 0x1000
+	MNT_MULTILABEL                 = 0x4000000
+	MNT_NFS4ACLS                   = 0x10
+	MNT_NOATIME                    = 0x10000000
+	MNT_NOCLUSTERR                 = 0x40000000
+	MNT_NOCLUSTERW                 = 0x80000000
+	MNT_NOEXEC                     = 0x4
+	MNT_NONBUSY                    = 0x4000000
+	MNT_NOSUID                     = 0x8
+	MNT_NOSYMFOLLOW                = 0x400000
+	MNT_NOWAIT                     = 0x2
+	MNT_QUOTA                      = 0x2000
+	MNT_RDONLY                     = 0x1
+	MNT_RELOAD                     = 0x40000
+	MNT_ROOTFS                     = 0x4000
+	MNT_SNAPSHOT                   = 0x1000000
+	MNT_SOFTDEP                    = 0x200000
+	MNT_SUIDDIR                    = 0x100000
+	MNT_SUJ                        = 0x100000000
+	MNT_SUSPEND                    = 0x4
+	MNT_SYNCHRONOUS                = 0x2
+	MNT_UNION                      = 0x20
+	MNT_UNTRUSTED                  = 0x800000000
+	MNT_UPDATE                     = 0x10000
+	MNT_UPDATEMASK                 = 0xad8d0807e
+	MNT_USER                       = 0x8000
+	MNT_VERIFIED                   = 0x400000000
+	MNT_VISFLAGMASK                = 0xffef0ffff
+	MNT_WAIT                       = 0x1
+	MSG_CMSG_CLOEXEC               = 0x40000
+	MSG_COMPAT                     = 0x8000
+	MSG_CTRUNC                     = 0x20
+	MSG_DONTROUTE                  = 0x4
+	MSG_DONTWAIT                   = 0x80
+	MSG_EOF                        = 0x100
+	MSG_EOR                        = 0x8
+	MSG_NBIO                       = 0x4000
+	MSG_NOSIGNAL                   = 0x20000
+	MSG_NOTIFICATION               = 0x2000
+	MSG_OOB                        = 0x1
+	MSG_PEEK                       = 0x2
+	MSG_TRUNC                      = 0x10
+	MSG_WAITALL                    = 0x40
+	MSG_WAITFORONE                 = 0x80000
+	MS_ASYNC                       = 0x1
+	MS_INVALIDATE                  = 0x2
+	MS_SYNC                        = 0x0
+	NAME_MAX                       = 0xff
+	NET_RT_DUMP                    = 0x1
+	NET_RT_FLAGS                   = 0x2
+	NET_RT_IFLIST                  = 0x3
+	NET_RT_IFLISTL                 = 0x5
+	NET_RT_IFMALIST                = 0x4
+	NFDBITS                        = 0x40
+	NOFLSH                         = 0x80000000
+	NOKERNINFO                     = 0x2000000
+	NOTE_ABSTIME                   = 0x10
+	NOTE_ATTRIB                    = 0x8
+	NOTE_CHILD                     = 0x4
+	NOTE_CLOSE                     = 0x100
+	NOTE_CLOSE_WRITE               = 0x200
+	NOTE_DELETE                    = 0x1
+	NOTE_EXEC                      = 0x20000000
+	NOTE_EXIT                      = 0x80000000
+	NOTE_EXTEND                    = 0x4
+	NOTE_FFAND                     = 0x40000000
+	NOTE_FFCOPY                    = 0xc0000000
+	NOTE_FFCTRLMASK                = 0xc0000000
+	NOTE_FFLAGSMASK                = 0xffffff
+	NOTE_FFNOP                     = 0x0
+	NOTE_FFOR                      = 0x80000000
+	NOTE_FILE_POLL                 = 0x2
+	NOTE_FORK                      = 0x40000000
+	NOTE_LINK                      = 0x10
+	NOTE_LOWAT                     = 0x1
+	NOTE_MSECONDS                  = 0x2
+	NOTE_NSECONDS                  = 0x8
+	NOTE_OPEN                      = 0x80
+	NOTE_PCTRLMASK                 = 0xf0000000
+	NOTE_PDATAMASK                 = 0xfffff
+	NOTE_READ                      = 0x400
+	NOTE_RENAME                    = 0x20
+	NOTE_REVOKE                    = 0x40
+	NOTE_SECONDS                   = 0x1
+	NOTE_TRACK                     = 0x1
+	NOTE_TRACKERR                  = 0x2
+	NOTE_TRIGGER                   = 0x1000000
+	NOTE_USECONDS                  = 0x4
+	NOTE_WRITE                     = 0x2
+	OCRNL                          = 0x10
+	ONLCR                          = 0x2
+	ONLRET                         = 0x40
+	ONOCR                          = 0x20
+	ONOEOT                         = 0x8
+	OPOST                          = 0x1
+	OXTABS                         = 0x4
+	O_ACCMODE                      = 0x3
+	O_APPEND                       = 0x8
+	O_ASYNC                        = 0x40
+	O_CLOEXEC                      = 0x100000
+	O_CREAT                        = 0x200
+	O_DIRECT                       = 0x10000
+	O_DIRECTORY                    = 0x20000
+	O_EXCL                         = 0x800
+	O_EXEC                         = 0x40000
+	O_EXLOCK                       = 0x20
+	O_FSYNC                        = 0x80
+	O_NDELAY                       = 0x4
+	O_NOCTTY                       = 0x8000
+	O_NOFOLLOW                     = 0x100
+	O_NONBLOCK                     = 0x4
+	O_RDONLY                       = 0x0
+	O_RDWR                         = 0x2
+	O_SHLOCK                       = 0x10
+	O_SYNC                         = 0x80
+	O_TRUNC                        = 0x400
+	O_TTY_INIT                     = 0x80000
+	O_VERIFY                       = 0x200000
+	O_WRONLY                       = 0x1
+	PARENB                         = 0x1000
+	PARMRK                         = 0x8
+	PARODD                         = 0x2000
+	PENDIN                         = 0x20000000
+	PRIO_PGRP                      = 0x1
+	PRIO_PROCESS                   = 0x0
+	PRIO_USER                      = 0x2
+	PROT_EXEC                      = 0x4
+	PROT_NONE                      = 0x0
+	PROT_READ                      = 0x1
+	PROT_WRITE                     = 0x2
+	RLIMIT_AS                      = 0xa
+	RLIMIT_CORE                    = 0x4
+	RLIMIT_CPU                     = 0x0
+	RLIMIT_DATA                    = 0x2
+	RLIMIT_FSIZE                   = 0x1
+	RLIMIT_MEMLOCK                 = 0x6
+	RLIMIT_NOFILE                  = 0x8
+	RLIMIT_NPROC                   = 0x7
+	RLIMIT_RSS                     = 0x5
+	RLIMIT_STACK                   = 0x3
+	RLIM_INFINITY                  = 0x7fffffffffffffff
+	RTAX_AUTHOR                    = 0x6
+	RTAX_BRD                       = 0x7
+	RTAX_DST                       = 0x0
+	RTAX_GATEWAY                   = 0x1
+	RTAX_GENMASK                   = 0x3
+	RTAX_IFA                       = 0x5
+	RTAX_IFP                       = 0x4
+	RTAX_MAX                       = 0x8
+	RTAX_NETMASK                   = 0x2
+	RTA_AUTHOR                     = 0x40
+	RTA_BRD                        = 0x80
+	RTA_DST                        = 0x1
+	RTA_GATEWAY                    = 0x2
+	RTA_GENMASK                    = 0x8
+	RTA_IFA                        = 0x20
+	RTA_IFP                        = 0x10
+	RTA_NETMASK                    = 0x4
+	RTF_BLACKHOLE                  = 0x1000
+	RTF_BROADCAST                  = 0x400000
+	RTF_DONE                       = 0x40
+	RTF_DYNAMIC                    = 0x10
+	RTF_FIXEDMTU                   = 0x80000
+	RTF_FMASK                      = 0x1004d808
+	RTF_GATEWAY                    = 0x2
+	RTF_GWFLAG_COMPAT              = 0x80000000
+	RTF_HOST                       = 0x4
+	RTF_LLDATA                     = 0x400
+	RTF_LLINFO                     = 0x400
+	RTF_LOCAL                      = 0x200000
+	RTF_MODIFIED                   = 0x20
+	RTF_MULTICAST                  = 0x800000
+	RTF_PINNED                     = 0x100000
+	RTF_PROTO1                     = 0x8000
+	RTF_PROTO2                     = 0x4000
+	RTF_PROTO3                     = 0x40000
+	RTF_REJECT                     = 0x8
+	RTF_RNH_LOCKED                 = 0x40000000
+	RTF_STATIC                     = 0x800
+	RTF_STICKY                     = 0x10000000
+	RTF_UP                         = 0x1
+	RTF_XRESOLVE                   = 0x200
+	RTM_ADD                        = 0x1
+	RTM_CHANGE                     = 0x3
+	RTM_DELADDR                    = 0xd
+	RTM_DELETE                     = 0x2
+	RTM_DELMADDR                   = 0x10
+	RTM_GET                        = 0x4
+	RTM_IEEE80211                  = 0x12
+	RTM_IFANNOUNCE                 = 0x11
+	RTM_IFINFO                     = 0xe
+	RTM_LOCK                       = 0x8
+	RTM_LOSING                     = 0x5
+	RTM_MISS                       = 0x7
+	RTM_NEWADDR                    = 0xc
+	RTM_NEWMADDR                   = 0xf
+	RTM_REDIRECT                   = 0x6
+	RTM_RESOLVE                    = 0xb
+	RTM_RTTUNIT                    = 0xf4240
+	RTM_VERSION                    = 0x5
+	RTV_EXPIRE                     = 0x4
+	RTV_HOPCOUNT                   = 0x2
+	RTV_MTU                        = 0x1
+	RTV_RPIPE                      = 0x8
+	RTV_RTT                        = 0x40
+	RTV_RTTVAR                     = 0x80
+	RTV_SPIPE                      = 0x10
+	RTV_SSTHRESH                   = 0x20
+	RTV_WEIGHT                     = 0x100
+	RT_ALL_FIBS                    = -0x1
+	RT_BLACKHOLE                   = 0x40
+	RT_DEFAULT_FIB                 = 0x0
+	RT_HAS_GW                      = 0x80
+	RT_HAS_HEADER                  = 0x10
+	RT_HAS_HEADER_BIT              = 0x4
+	RT_L2_ME                       = 0x4
+	RT_L2_ME_BIT                   = 0x2
+	RT_LLE_CACHE                   = 0x100
+	RT_MAY_LOOP                    = 0x8
+	RT_MAY_LOOP_BIT                = 0x3
+	RT_REJECT                      = 0x20
+	RUSAGE_CHILDREN                = -0x1
+	RUSAGE_SELF                    = 0x0
+	RUSAGE_THREAD                  = 0x1
+	SCM_BINTIME                    = 0x4
+	SCM_CREDS                      = 0x3
+	SCM_MONOTONIC                  = 0x6
+	SCM_REALTIME                   = 0x5
+	SCM_RIGHTS                     = 0x1
+	SCM_TIMESTAMP                  = 0x2
+	SCM_TIME_INFO                  = 0x7
+	SHUT_RD                        = 0x0
+	SHUT_RDWR                      = 0x2
+	SHUT_WR                        = 0x1
+	SIOCADDMULTI                   = 0x80206931
+	SIOCAIFADDR                    = 0x8040691a
+	SIOCAIFGROUP                   = 0x80286987
+	SIOCATMARK                     = 0x40047307
+	SIOCDELMULTI                   = 0x80206932
+	SIOCDIFADDR                    = 0x80206919
+	SIOCDIFGROUP                   = 0x80286989
+	SIOCDIFPHYADDR                 = 0x80206949
+	SIOCGDRVSPEC                   = 0xc028697b
+	SIOCGETSGCNT                   = 0xc0207210
+	SIOCGETVIFCNT                  = 0xc028720f
+	SIOCGHIWAT                     = 0x40047301
+	SIOCGHWADDR                    = 0xc020693e
+	SIOCGI2C                       = 0xc020693d
+	SIOCGIFADDR                    = 0xc0206921
+	SIOCGIFBRDADDR                 = 0xc0206923
+	SIOCGIFCAP                     = 0xc020691f
+	SIOCGIFCONF                    = 0xc0106924
+	SIOCGIFDESCR                   = 0xc020692a
+	SIOCGIFDSTADDR                 = 0xc0206922
+	SIOCGIFFIB                     = 0xc020695c
+	SIOCGIFFLAGS                   = 0xc0206911
+	SIOCGIFGENERIC                 = 0xc020693a
+	SIOCGIFGMEMB                   = 0xc028698a
+	SIOCGIFGROUP                   = 0xc0286988
+	SIOCGIFINDEX                   = 0xc0206920
+	SIOCGIFMAC                     = 0xc0206926
+	SIOCGIFMEDIA                   = 0xc0306938
+	SIOCGIFMETRIC                  = 0xc0206917
+	SIOCGIFMTU                     = 0xc0206933
+	SIOCGIFNETMASK                 = 0xc0206925
+	SIOCGIFPDSTADDR                = 0xc0206948
+	SIOCGIFPHYS                    = 0xc0206935
+	SIOCGIFPSRCADDR                = 0xc0206947
+	SIOCGIFRSSHASH                 = 0xc0186997
+	SIOCGIFRSSKEY                  = 0xc0946996
+	SIOCGIFSTATUS                  = 0xc331693b
+	SIOCGIFXMEDIA                  = 0xc030698b
+	SIOCGLANPCP                    = 0xc0206998
+	SIOCGLOWAT                     = 0x40047303
+	SIOCGPGRP                      = 0x40047309
+	SIOCGPRIVATE_0                 = 0xc0206950
+	SIOCGPRIVATE_1                 = 0xc0206951
+	SIOCGTUNFIB                    = 0xc020695e
+	SIOCIFCREATE                   = 0xc020697a
+	SIOCIFCREATE2                  = 0xc020697c
+	SIOCIFDESTROY                  = 0x80206979
+	SIOCIFGCLONERS                 = 0xc0106978
+	SIOCSDRVSPEC                   = 0x8028697b
+	SIOCSHIWAT                     = 0x80047300
+	SIOCSIFADDR                    = 0x8020690c
+	SIOCSIFBRDADDR                 = 0x80206913
+	SIOCSIFCAP                     = 0x8020691e
+	SIOCSIFDESCR                   = 0x80206929
+	SIOCSIFDSTADDR                 = 0x8020690e
+	SIOCSIFFIB                     = 0x8020695d
+	SIOCSIFFLAGS                   = 0x80206910
+	SIOCSIFGENERIC                 = 0x80206939
+	SIOCSIFLLADDR                  = 0x8020693c
+	SIOCSIFMAC                     = 0x80206927
+	SIOCSIFMEDIA                   = 0xc0206937
+	SIOCSIFMETRIC                  = 0x80206918
+	SIOCSIFMTU                     = 0x80206934
+	SIOCSIFNAME                    = 0x80206928
+	SIOCSIFNETMASK                 = 0x80206916
+	SIOCSIFPHYADDR                 = 0x80406946
+	SIOCSIFPHYS                    = 0x80206936
+	SIOCSIFRVNET                   = 0xc020695b
+	SIOCSIFVNET                    = 0xc020695a
+	SIOCSLANPCP                    = 0x80206999
+	SIOCSLOWAT                     = 0x80047302
+	SIOCSPGRP                      = 0x80047308
+	SIOCSTUNFIB                    = 0x8020695f
+	SOCK_CLOEXEC                   = 0x10000000
+	SOCK_DGRAM                     = 0x2
+	SOCK_MAXADDRLEN                = 0xff
+	SOCK_NONBLOCK                  = 0x20000000
+	SOCK_RAW                       = 0x3
+	SOCK_RDM                       = 0x4
+	SOCK_SEQPACKET                 = 0x5
+	SOCK_STREAM                    = 0x1
+	SOL_SOCKET                     = 0xffff
+	SOMAXCONN                      = 0x80
+	SO_ACCEPTCONN                  = 0x2
+	SO_ACCEPTFILTER                = 0x1000
+	SO_BINTIME                     = 0x2000
+	SO_BROADCAST                   = 0x20
+	SO_DEBUG                       = 0x1
+	SO_DOMAIN                      = 0x1019
+	SO_DONTROUTE                   = 0x10
+	SO_ERROR                       = 0x1007
+	SO_KEEPALIVE                   = 0x8
+	SO_LABEL                       = 0x1009
+	SO_LINGER                      = 0x80
+	SO_LISTENINCQLEN               = 0x1013
+	SO_LISTENQLEN                  = 0x1012
+	SO_LISTENQLIMIT                = 0x1011
+	SO_MAX_PACING_RATE             = 0x1018
+	SO_NOSIGPIPE                   = 0x800
+	SO_NO_DDP                      = 0x8000
+	SO_NO_OFFLOAD                  = 0x4000
+	SO_OOBINLINE                   = 0x100
+	SO_PEERLABEL                   = 0x1010
+	SO_PROTOCOL                    = 0x1016
+	SO_PROTOTYPE                   = 0x1016
+	SO_RCVBUF                      = 0x1002
+	SO_RCVLOWAT                    = 0x1004
+	SO_RCVTIMEO                    = 0x1006
+	SO_REUSEADDR                   = 0x4
+	SO_REUSEPORT                   = 0x200
+	SO_REUSEPORT_LB                = 0x10000
+	SO_SETFIB                      = 0x1014
+	SO_SNDBUF                      = 0x1001
+	SO_SNDLOWAT                    = 0x1003
+	SO_SNDTIMEO                    = 0x1005
+	SO_TIMESTAMP                   = 0x400
+	SO_TS_BINTIME                  = 0x1
+	SO_TS_CLOCK                    = 0x1017
+	SO_TS_CLOCK_MAX                = 0x3
+	SO_TS_DEFAULT                  = 0x0
+	SO_TS_MONOTONIC                = 0x3
+	SO_TS_REALTIME                 = 0x2
+	SO_TS_REALTIME_MICRO           = 0x0
+	SO_TYPE                        = 0x1008
+	SO_USELOOPBACK                 = 0x40
+	SO_USER_COOKIE                 = 0x1015
+	SO_VENDOR                      = 0x80000000
+	S_BLKSIZE                      = 0x200
+	S_IEXEC                        = 0x40
+	S_IFBLK                        = 0x6000
+	S_IFCHR                        = 0x2000
+	S_IFDIR                        = 0x4000
+	S_IFIFO                        = 0x1000
+	S_IFLNK                        = 0xa000
+	S_IFMT                         = 0xf000
+	S_IFREG                        = 0x8000
+	S_IFSOCK                       = 0xc000
+	S_IFWHT                        = 0xe000
+	S_IREAD                        = 0x100
+	S_IRGRP                        = 0x20
+	S_IROTH                        = 0x4
+	S_IRUSR                        = 0x100
+	S_IRWXG                        = 0x38
+	S_IRWXO                        = 0x7
+	S_IRWXU                        = 0x1c0
+	S_ISGID                        = 0x400
+	S_ISTXT                        = 0x200
+	S_ISUID                        = 0x800
+	S_ISVTX                        = 0x200
+	S_IWGRP                        = 0x10
+	S_IWOTH                        = 0x2
+	S_IWRITE                       = 0x80
+	S_IWUSR                        = 0x80
+	S_IXGRP                        = 0x8
+	S_IXOTH                        = 0x1
+	S_IXUSR                        = 0x40
+	TAB0                           = 0x0
+	TAB3                           = 0x4
+	TABDLY                         = 0x4
+	TCIFLUSH                       = 0x1
+	TCIOFF                         = 0x3
+	TCIOFLUSH                      = 0x3
+	TCION                          = 0x4
+	TCOFLUSH                       = 0x2
+	TCOOFF                         = 0x1
+	TCOON                          = 0x2
+	TCP_BBR_ACK_COMP_ALG           = 0x448
+	TCP_BBR_DRAIN_INC_EXTRA        = 0x43c
+	TCP_BBR_DRAIN_PG               = 0x42e
+	TCP_BBR_EXTRA_GAIN             = 0x449
+	TCP_BBR_IWINTSO                = 0x42b
+	TCP_BBR_LOWGAIN_FD             = 0x436
+	TCP_BBR_LOWGAIN_HALF           = 0x435
+	TCP_BBR_LOWGAIN_THRESH         = 0x434
+	TCP_BBR_MAX_RTO                = 0x439
+	TCP_BBR_MIN_RTO                = 0x438
+	TCP_BBR_ONE_RETRAN             = 0x431
+	TCP_BBR_PACE_CROSS             = 0x442
+	TCP_BBR_PACE_DEL_TAR           = 0x43f
+	TCP_BBR_PACE_PER_SEC           = 0x43e
+	TCP_BBR_PACE_SEG_MAX           = 0x440
+	TCP_BBR_PACE_SEG_MIN           = 0x441
+	TCP_BBR_PROBE_RTT_GAIN         = 0x44d
+	TCP_BBR_PROBE_RTT_INT          = 0x430
+	TCP_BBR_PROBE_RTT_LEN          = 0x44e
+	TCP_BBR_RACK_RTT_USE           = 0x44a
+	TCP_BBR_RECFORCE               = 0x42c
+	TCP_BBR_REC_OVER_HPTS          = 0x43a
+	TCP_BBR_RETRAN_WTSO            = 0x44b
+	TCP_BBR_RWND_IS_APP            = 0x42f
+	TCP_BBR_STARTUP_EXIT_EPOCH     = 0x43d
+	TCP_BBR_STARTUP_LOSS_EXIT      = 0x432
+	TCP_BBR_STARTUP_PG             = 0x42d
+	TCP_BBR_UNLIMITED              = 0x43b
+	TCP_BBR_USEDEL_RATE            = 0x437
+	TCP_BBR_USE_LOWGAIN            = 0x433
+	TCP_CA_NAME_MAX                = 0x10
+	TCP_CCALGOOPT                  = 0x41
+	TCP_CONGESTION                 = 0x40
+	TCP_DATA_AFTER_CLOSE           = 0x44c
+	TCP_DELACK                     = 0x48
+	TCP_FASTOPEN                   = 0x401
+	TCP_FASTOPEN_MAX_COOKIE_LEN    = 0x10
+	TCP_FASTOPEN_MIN_COOKIE_LEN    = 0x4
+	TCP_FASTOPEN_PSK_LEN           = 0x10
+	TCP_FUNCTION_BLK               = 0x2000
+	TCP_FUNCTION_NAME_LEN_MAX      = 0x20
+	TCP_INFO                       = 0x20
+	TCP_KEEPCNT                    = 0x400
+	TCP_KEEPIDLE                   = 0x100
+	TCP_KEEPINIT                   = 0x80
+	TCP_KEEPINTVL                  = 0x200
+	TCP_LOG                        = 0x22
+	TCP_LOGBUF                     = 0x23
+	TCP_LOGDUMP                    = 0x25
+	TCP_LOGDUMPID                  = 0x26
+	TCP_LOGID                      = 0x24
+	TCP_LOG_ID_LEN                 = 0x40
+	TCP_MAXBURST                   = 0x4
+	TCP_MAXHLEN                    = 0x3c
+	TCP_MAXOLEN                    = 0x28
+	TCP_MAXSEG                     = 0x2
+	TCP_MAXWIN                     = 0xffff
+	TCP_MAX_SACK                   = 0x4
+	TCP_MAX_WINSHIFT               = 0xe
+	TCP_MD5SIG                     = 0x10
+	TCP_MINMSS                     = 0xd8
+	TCP_MSS                        = 0x218
+	TCP_NODELAY                    = 0x1
+	TCP_NOOPT                      = 0x8
+	TCP_NOPUSH                     = 0x4
+	TCP_PCAP_IN                    = 0x1000
+	TCP_PCAP_OUT                   = 0x800
+	TCP_RACK_EARLY_RECOV           = 0x423
+	TCP_RACK_EARLY_SEG             = 0x424
+	TCP_RACK_IDLE_REDUCE_HIGH      = 0x444
+	TCP_RACK_MIN_PACE              = 0x445
+	TCP_RACK_MIN_PACE_SEG          = 0x446
+	TCP_RACK_MIN_TO                = 0x422
+	TCP_RACK_PACE_ALWAYS           = 0x41f
+	TCP_RACK_PACE_MAX_SEG          = 0x41e
+	TCP_RACK_PACE_REDUCE           = 0x41d
+	TCP_RACK_PKT_DELAY             = 0x428
+	TCP_RACK_PROP                  = 0x41b
+	TCP_RACK_PROP_RATE             = 0x420
+	TCP_RACK_PRR_SENDALOT          = 0x421
+	TCP_RACK_REORD_FADE            = 0x426
+	TCP_RACK_REORD_THRESH          = 0x425
+	TCP_RACK_SESS_CWV              = 0x42a
+	TCP_RACK_TLP_INC_VAR           = 0x429
+	TCP_RACK_TLP_REDUCE            = 0x41c
+	TCP_RACK_TLP_THRESH            = 0x427
+	TCP_RACK_TLP_USE               = 0x447
+	TCP_VENDOR                     = 0x80000000
+	TCSAFLUSH                      = 0x2
+	TIMER_ABSTIME                  = 0x1
+	TIMER_RELTIME                  = 0x0
+	TIOCCBRK                       = 0x2000747a
+	TIOCCDTR                       = 0x20007478
+	TIOCCONS                       = 0x80047462
+	TIOCDRAIN                      = 0x2000745e
+	TIOCEXCL                       = 0x2000740d
+	TIOCEXT                        = 0x80047460
+	TIOCFLUSH                      = 0x80047410
+	TIOCGDRAINWAIT                 = 0x40047456
+	TIOCGETA                       = 0x402c7413
+	TIOCGETD                       = 0x4004741a
+	TIOCGPGRP                      = 0x40047477
+	TIOCGPTN                       = 0x4004740f
+	TIOCGSID                       = 0x40047463
+	TIOCGWINSZ                     = 0x40087468
+	TIOCMBIC                       = 0x8004746b
+	TIOCMBIS                       = 0x8004746c
+	TIOCMGDTRWAIT                  = 0x4004745a
+	TIOCMGET                       = 0x4004746a
+	TIOCMSDTRWAIT                  = 0x8004745b
+	TIOCMSET                       = 0x8004746d
+	TIOCM_CAR                      = 0x40
+	TIOCM_CD                       = 0x40
+	TIOCM_CTS                      = 0x20
+	TIOCM_DCD                      = 0x40
+	TIOCM_DSR                      = 0x100
+	TIOCM_DTR                      = 0x2
+	TIOCM_LE                       = 0x1
+	TIOCM_RI                       = 0x80
+	TIOCM_RNG                      = 0x80
+	TIOCM_RTS                      = 0x4
+	TIOCM_SR                       = 0x10
+	TIOCM_ST                       = 0x8
+	TIOCNOTTY                      = 0x20007471
+	TIOCNXCL                       = 0x2000740e
+	TIOCOUTQ                       = 0x40047473
+	TIOCPKT                        = 0x80047470
+	TIOCPKT_DATA                   = 0x0
+	TIOCPKT_DOSTOP                 = 0x20
+	TIOCPKT_FLUSHREAD              = 0x1
+	TIOCPKT_FLUSHWRITE             = 0x2
+	TIOCPKT_IOCTL                  = 0x40
+	TIOCPKT_NOSTOP                 = 0x10
+	TIOCPKT_START                  = 0x8
+	TIOCPKT_STOP                   = 0x4
+	TIOCPTMASTER                   = 0x2000741c
+	TIOCSBRK                       = 0x2000747b
+	TIOCSCTTY                      = 0x20007461
+	TIOCSDRAINWAIT                 = 0x80047457
+	TIOCSDTR                       = 0x20007479
+	TIOCSETA                       = 0x802c7414
+	TIOCSETAF                      = 0x802c7416
+	TIOCSETAW                      = 0x802c7415
+	TIOCSETD                       = 0x8004741b
+	TIOCSIG                        = 0x2004745f
+	TIOCSPGRP                      = 0x80047476
+	TIOCSTART                      = 0x2000746e
+	TIOCSTAT                       = 0x20007465
+	TIOCSTI                        = 0x80017472
+	TIOCSTOP                       = 0x2000746f
+	TIOCSWINSZ                     = 0x80087467
+	TIOCTIMESTAMP                  = 0x40107459
+	TIOCUCNTL                      = 0x80047466
+	TOSTOP                         = 0x400000
+	UTIME_NOW                      = -0x1
+	UTIME_OMIT                     = -0x2
+	VDISCARD                       = 0xf
+	VDSUSP                         = 0xb
+	VEOF                           = 0x0
+	VEOL                           = 0x1
+	VEOL2                          = 0x2
+	VERASE                         = 0x3
+	VERASE2                        = 0x7
+	VINTR                          = 0x8
+	VKILL                          = 0x5
+	VLNEXT                         = 0xe
+	VMIN                           = 0x10
+	VQUIT                          = 0x9
+	VREPRINT                       = 0x6
+	VSTART                         = 0xc
+	VSTATUS                        = 0x12
+	VSTOP                          = 0xd
+	VSUSP                          = 0xa
+	VTIME                          = 0x11
+	VWERASE                        = 0x4
+	WCONTINUED                     = 0x4
+	WCOREFLAG                      = 0x80
+	WEXITED                        = 0x10
+	WLINUXCLONE                    = 0x80000000
+	WNOHANG                        = 0x1
+	WNOWAIT                        = 0x8
+	WSTOPPED                       = 0x2
+	WTRAPPED                       = 0x20
+	WUNTRACED                      = 0x2
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADF           = syscall.Errno(0x9)
+	EBADMSG         = syscall.Errno(0x59)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x55)
+	ECAPMODE        = syscall.Errno(0x5e)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDOM            = syscall.Errno(0x21)
+	EDOOFUS         = syscall.Errno(0x58)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x52)
+	EILSEQ          = syscall.Errno(0x56)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x60)
+	ELOOP           = syscall.Errno(0x3e)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	EMULTIHOP       = syscall.Errno(0x5a)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x57)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOLINK         = syscall.Errno(0x5b)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x53)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCAPABLE     = syscall.Errno(0x5d)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTRECOVERABLE = syscall.Errno(0x5f)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x2d)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x2d)
+	EOVERFLOW       = syscall.Errno(0x54)
+	EOWNERDEAD      = syscall.Errno(0x60)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTO          = syscall.Errno(0x5c)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGLIBRT  = syscall.Signal(0x21)
+	SIGLWP    = syscall.Signal(0x20)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTHR    = syscall.Signal(0x20)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "EAGAIN", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "EOPNOTSUPP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "operation timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disc quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC prog. not avail"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EIDRM", "identifier removed"},
+	{83, "ENOMSG", "no message of desired type"},
+	{84, "EOVERFLOW", "value too large to be stored in data type"},
+	{85, "ECANCELED", "operation canceled"},
+	{86, "EILSEQ", "illegal byte sequence"},
+	{87, "ENOATTR", "attribute not found"},
+	{88, "EDOOFUS", "programming error"},
+	{89, "EBADMSG", "bad message"},
+	{90, "EMULTIHOP", "multihop attempted"},
+	{91, "ENOLINK", "link has been severed"},
+	{92, "EPROTO", "protocol error"},
+	{93, "ENOTCAPABLE", "capabilities insufficient"},
+	{94, "ECAPMODE", "not permitted in capability mode"},
+	{95, "ENOTRECOVERABLE", "state not recoverable"},
+	{96, "EOWNERDEAD", "previous owner died"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGIOT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "suspended (signal)"},
+	{18, "SIGTSTP", "suspended"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+	{32, "SIGTHR", "unknown signal"},
+	{33, "SIGLIBRT", "unknown signal"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_freebsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_freebsd_arm.go
new file mode 100644
index 000000000..be14bb1a4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_freebsd_arm.go
@@ -0,0 +1,1825 @@
+// mkerrors.sh
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm,freebsd
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                   = 0x10
+	AF_ARP                         = 0x23
+	AF_ATM                         = 0x1e
+	AF_BLUETOOTH                   = 0x24
+	AF_CCITT                       = 0xa
+	AF_CHAOS                       = 0x5
+	AF_CNT                         = 0x15
+	AF_COIP                        = 0x14
+	AF_DATAKIT                     = 0x9
+	AF_DECnet                      = 0xc
+	AF_DLI                         = 0xd
+	AF_E164                        = 0x1a
+	AF_ECMA                        = 0x8
+	AF_HYLINK                      = 0xf
+	AF_IEEE80211                   = 0x25
+	AF_IMPLINK                     = 0x3
+	AF_INET                        = 0x2
+	AF_INET6                       = 0x1c
+	AF_INET6_SDP                   = 0x2a
+	AF_INET_SDP                    = 0x28
+	AF_IPX                         = 0x17
+	AF_ISDN                        = 0x1a
+	AF_ISO                         = 0x7
+	AF_LAT                         = 0xe
+	AF_LINK                        = 0x12
+	AF_LOCAL                       = 0x1
+	AF_MAX                         = 0x2a
+	AF_NATM                        = 0x1d
+	AF_NETBIOS                     = 0x6
+	AF_NETGRAPH                    = 0x20
+	AF_OSI                         = 0x7
+	AF_PUP                         = 0x4
+	AF_ROUTE                       = 0x11
+	AF_SCLUSTER                    = 0x22
+	AF_SIP                         = 0x18
+	AF_SLOW                        = 0x21
+	AF_SNA                         = 0xb
+	AF_UNIX                        = 0x1
+	AF_UNSPEC                      = 0x0
+	AF_VENDOR00                    = 0x27
+	AF_VENDOR01                    = 0x29
+	AF_VENDOR02                    = 0x2b
+	AF_VENDOR03                    = 0x2d
+	AF_VENDOR04                    = 0x2f
+	AF_VENDOR05                    = 0x31
+	AF_VENDOR06                    = 0x33
+	AF_VENDOR07                    = 0x35
+	AF_VENDOR08                    = 0x37
+	AF_VENDOR09                    = 0x39
+	AF_VENDOR10                    = 0x3b
+	AF_VENDOR11                    = 0x3d
+	AF_VENDOR12                    = 0x3f
+	AF_VENDOR13                    = 0x41
+	AF_VENDOR14                    = 0x43
+	AF_VENDOR15                    = 0x45
+	AF_VENDOR16                    = 0x47
+	AF_VENDOR17                    = 0x49
+	AF_VENDOR18                    = 0x4b
+	AF_VENDOR19                    = 0x4d
+	AF_VENDOR20                    = 0x4f
+	AF_VENDOR21                    = 0x51
+	AF_VENDOR22                    = 0x53
+	AF_VENDOR23                    = 0x55
+	AF_VENDOR24                    = 0x57
+	AF_VENDOR25                    = 0x59
+	AF_VENDOR26                    = 0x5b
+	AF_VENDOR27                    = 0x5d
+	AF_VENDOR28                    = 0x5f
+	AF_VENDOR29                    = 0x61
+	AF_VENDOR30                    = 0x63
+	AF_VENDOR31                    = 0x65
+	AF_VENDOR32                    = 0x67
+	AF_VENDOR33                    = 0x69
+	AF_VENDOR34                    = 0x6b
+	AF_VENDOR35                    = 0x6d
+	AF_VENDOR36                    = 0x6f
+	AF_VENDOR37                    = 0x71
+	AF_VENDOR38                    = 0x73
+	AF_VENDOR39                    = 0x75
+	AF_VENDOR40                    = 0x77
+	AF_VENDOR41                    = 0x79
+	AF_VENDOR42                    = 0x7b
+	AF_VENDOR43                    = 0x7d
+	AF_VENDOR44                    = 0x7f
+	AF_VENDOR45                    = 0x81
+	AF_VENDOR46                    = 0x83
+	AF_VENDOR47                    = 0x85
+	ALTWERASE                      = 0x200
+	B0                             = 0x0
+	B110                           = 0x6e
+	B115200                        = 0x1c200
+	B1200                          = 0x4b0
+	B134                           = 0x86
+	B14400                         = 0x3840
+	B150                           = 0x96
+	B1800                          = 0x708
+	B19200                         = 0x4b00
+	B200                           = 0xc8
+	B230400                        = 0x38400
+	B2400                          = 0x960
+	B28800                         = 0x7080
+	B300                           = 0x12c
+	B38400                         = 0x9600
+	B460800                        = 0x70800
+	B4800                          = 0x12c0
+	B50                            = 0x32
+	B57600                         = 0xe100
+	B600                           = 0x258
+	B7200                          = 0x1c20
+	B75                            = 0x4b
+	B76800                         = 0x12c00
+	B921600                        = 0xe1000
+	B9600                          = 0x2580
+	BIOCFEEDBACK                   = 0x8004427c
+	BIOCFLUSH                      = 0x20004268
+	BIOCGBLEN                      = 0x40044266
+	BIOCGDIRECTION                 = 0x40044276
+	BIOCGDLT                       = 0x4004426a
+	BIOCGDLTLIST                   = 0xc0084279
+	BIOCGETBUFMODE                 = 0x4004427d
+	BIOCGETIF                      = 0x4020426b
+	BIOCGETZMAX                    = 0x4004427f
+	BIOCGHDRCMPLT                  = 0x40044274
+	BIOCGRSIG                      = 0x40044272
+	BIOCGRTIMEOUT                  = 0x4010426e
+	BIOCGSEESENT                   = 0x40044276
+	BIOCGSTATS                     = 0x4008426f
+	BIOCGTSTAMP                    = 0x40044283
+	BIOCIMMEDIATE                  = 0x80044270
+	BIOCLOCK                       = 0x2000427a
+	BIOCPROMISC                    = 0x20004269
+	BIOCROTZBUF                    = 0x400c4280
+	BIOCSBLEN                      = 0xc0044266
+	BIOCSDIRECTION                 = 0x80044277
+	BIOCSDLT                       = 0x80044278
+	BIOCSETBUFMODE                 = 0x8004427e
+	BIOCSETF                       = 0x80084267
+	BIOCSETFNR                     = 0x80084282
+	BIOCSETIF                      = 0x8020426c
+	BIOCSETWF                      = 0x8008427b
+	BIOCSETZBUF                    = 0x800c4281
+	BIOCSHDRCMPLT                  = 0x80044275
+	BIOCSRSIG                      = 0x80044273
+	BIOCSRTIMEOUT                  = 0x8010426d
+	BIOCSSEESENT                   = 0x80044277
+	BIOCSTSTAMP                    = 0x80044284
+	BIOCVERSION                    = 0x40044271
+	BPF_A                          = 0x10
+	BPF_ABS                        = 0x20
+	BPF_ADD                        = 0x0
+	BPF_ALIGNMENT                  = 0x4
+	BPF_ALU                        = 0x4
+	BPF_AND                        = 0x50
+	BPF_B                          = 0x10
+	BPF_BUFMODE_BUFFER             = 0x1
+	BPF_BUFMODE_ZBUF               = 0x2
+	BPF_DIV                        = 0x30
+	BPF_H                          = 0x8
+	BPF_IMM                        = 0x0
+	BPF_IND                        = 0x40
+	BPF_JA                         = 0x0
+	BPF_JEQ                        = 0x10
+	BPF_JGE                        = 0x30
+	BPF_JGT                        = 0x20
+	BPF_JMP                        = 0x5
+	BPF_JSET                       = 0x40
+	BPF_K                          = 0x0
+	BPF_LD                         = 0x0
+	BPF_LDX                        = 0x1
+	BPF_LEN                        = 0x80
+	BPF_LSH                        = 0x60
+	BPF_MAJOR_VERSION              = 0x1
+	BPF_MAXBUFSIZE                 = 0x80000
+	BPF_MAXINSNS                   = 0x200
+	BPF_MEM                        = 0x60
+	BPF_MEMWORDS                   = 0x10
+	BPF_MINBUFSIZE                 = 0x20
+	BPF_MINOR_VERSION              = 0x1
+	BPF_MISC                       = 0x7
+	BPF_MOD                        = 0x90
+	BPF_MSH                        = 0xa0
+	BPF_MUL                        = 0x20
+	BPF_NEG                        = 0x80
+	BPF_OR                         = 0x40
+	BPF_RELEASE                    = 0x30bb6
+	BPF_RET                        = 0x6
+	BPF_RSH                        = 0x70
+	BPF_ST                         = 0x2
+	BPF_STX                        = 0x3
+	BPF_SUB                        = 0x10
+	BPF_TAX                        = 0x0
+	BPF_TXA                        = 0x80
+	BPF_T_BINTIME                  = 0x2
+	BPF_T_BINTIME_FAST             = 0x102
+	BPF_T_BINTIME_MONOTONIC        = 0x202
+	BPF_T_BINTIME_MONOTONIC_FAST   = 0x302
+	BPF_T_FAST                     = 0x100
+	BPF_T_FLAG_MASK                = 0x300
+	BPF_T_FORMAT_MASK              = 0x3
+	BPF_T_MICROTIME                = 0x0
+	BPF_T_MICROTIME_FAST           = 0x100
+	BPF_T_MICROTIME_MONOTONIC      = 0x200
+	BPF_T_MICROTIME_MONOTONIC_FAST = 0x300
+	BPF_T_MONOTONIC                = 0x200
+	BPF_T_MONOTONIC_FAST           = 0x300
+	BPF_T_NANOTIME                 = 0x1
+	BPF_T_NANOTIME_FAST            = 0x101
+	BPF_T_NANOTIME_MONOTONIC       = 0x201
+	BPF_T_NANOTIME_MONOTONIC_FAST  = 0x301
+	BPF_T_NONE                     = 0x3
+	BPF_T_NORMAL                   = 0x0
+	BPF_W                          = 0x0
+	BPF_X                          = 0x8
+	BPF_XOR                        = 0xa0
+	BRKINT                         = 0x2
+	CAP_ACCEPT                     = 0x200000020000000
+	CAP_ACL_CHECK                  = 0x400000000010000
+	CAP_ACL_DELETE                 = 0x400000000020000
+	CAP_ACL_GET                    = 0x400000000040000
+	CAP_ACL_SET                    = 0x400000000080000
+	CAP_ALL0                       = 0x20007ffffffffff
+	CAP_ALL1                       = 0x4000000001fffff
+	CAP_BIND                       = 0x200000040000000
+	CAP_BINDAT                     = 0x200008000000400
+	CAP_CHFLAGSAT                  = 0x200000000001400
+	CAP_CONNECT                    = 0x200000080000000
+	CAP_CONNECTAT                  = 0x200010000000400
+	CAP_CREATE                     = 0x200000000000040
+	CAP_EVENT                      = 0x400000000000020
+	CAP_EXTATTR_DELETE             = 0x400000000001000
+	CAP_EXTATTR_GET                = 0x400000000002000
+	CAP_EXTATTR_LIST               = 0x400000000004000
+	CAP_EXTATTR_SET                = 0x400000000008000
+	CAP_FCHDIR                     = 0x200000000000800
+	CAP_FCHFLAGS                   = 0x200000000001000
+	CAP_FCHMOD                     = 0x200000000002000
+	CAP_FCHMODAT                   = 0x200000000002400
+	CAP_FCHOWN                     = 0x200000000004000
+	CAP_FCHOWNAT                   = 0x200000000004400
+	CAP_FCNTL                      = 0x200000000008000
+	CAP_FCNTL_ALL                  = 0x78
+	CAP_FCNTL_GETFL                = 0x8
+	CAP_FCNTL_GETOWN               = 0x20
+	CAP_FCNTL_SETFL                = 0x10
+	CAP_FCNTL_SETOWN               = 0x40
+	CAP_FEXECVE                    = 0x200000000000080
+	CAP_FLOCK                      = 0x200000000010000
+	CAP_FPATHCONF                  = 0x200000000020000
+	CAP_FSCK                       = 0x200000000040000
+	CAP_FSTAT                      = 0x200000000080000
+	CAP_FSTATAT                    = 0x200000000080400
+	CAP_FSTATFS                    = 0x200000000100000
+	CAP_FSYNC                      = 0x200000000000100
+	CAP_FTRUNCATE                  = 0x200000000000200
+	CAP_FUTIMES                    = 0x200000000200000
+	CAP_FUTIMESAT                  = 0x200000000200400
+	CAP_GETPEERNAME                = 0x200000100000000
+	CAP_GETSOCKNAME                = 0x200000200000000
+	CAP_GETSOCKOPT                 = 0x200000400000000
+	CAP_IOCTL                      = 0x400000000000080
+	CAP_IOCTLS_ALL                 = 0x7fffffff
+	CAP_KQUEUE                     = 0x400000000100040
+	CAP_KQUEUE_CHANGE              = 0x400000000100000
+	CAP_KQUEUE_EVENT               = 0x400000000000040
+	CAP_LINKAT_SOURCE              = 0x200020000000400
+	CAP_LINKAT_TARGET              = 0x200000000400400
+	CAP_LISTEN                     = 0x200000800000000
+	CAP_LOOKUP                     = 0x200000000000400
+	CAP_MAC_GET                    = 0x400000000000001
+	CAP_MAC_SET                    = 0x400000000000002
+	CAP_MKDIRAT                    = 0x200000000800400
+	CAP_MKFIFOAT                   = 0x200000001000400
+	CAP_MKNODAT                    = 0x200000002000400
+	CAP_MMAP                       = 0x200000000000010
+	CAP_MMAP_R                     = 0x20000000000001d
+	CAP_MMAP_RW                    = 0x20000000000001f
+	CAP_MMAP_RWX                   = 0x20000000000003f
+	CAP_MMAP_RX                    = 0x20000000000003d
+	CAP_MMAP_W                     = 0x20000000000001e
+	CAP_MMAP_WX                    = 0x20000000000003e
+	CAP_MMAP_X                     = 0x20000000000003c
+	CAP_PDGETPID                   = 0x400000000000200
+	CAP_PDKILL                     = 0x400000000000800
+	CAP_PDWAIT                     = 0x400000000000400
+	CAP_PEELOFF                    = 0x200001000000000
+	CAP_POLL_EVENT                 = 0x400000000000020
+	CAP_PREAD                      = 0x20000000000000d
+	CAP_PWRITE                     = 0x20000000000000e
+	CAP_READ                       = 0x200000000000001
+	CAP_RECV                       = 0x200000000000001
+	CAP_RENAMEAT_SOURCE            = 0x200000004000400
+	CAP_RENAMEAT_TARGET            = 0x200040000000400
+	CAP_RIGHTS_VERSION             = 0x0
+	CAP_RIGHTS_VERSION_00          = 0x0
+	CAP_SEEK                       = 0x20000000000000c
+	CAP_SEEK_TELL                  = 0x200000000000004
+	CAP_SEM_GETVALUE               = 0x400000000000004
+	CAP_SEM_POST                   = 0x400000000000008
+	CAP_SEM_WAIT                   = 0x400000000000010
+	CAP_SEND                       = 0x200000000000002
+	CAP_SETSOCKOPT                 = 0x200002000000000
+	CAP_SHUTDOWN                   = 0x200004000000000
+	CAP_SOCK_CLIENT                = 0x200007780000003
+	CAP_SOCK_SERVER                = 0x200007f60000003
+	CAP_SYMLINKAT                  = 0x200000008000400
+	CAP_TTYHOOK                    = 0x400000000000100
+	CAP_UNLINKAT                   = 0x200000010000400
+	CAP_UNUSED0_44                 = 0x200080000000000
+	CAP_UNUSED0_57                 = 0x300000000000000
+	CAP_UNUSED1_22                 = 0x400000000200000
+	CAP_UNUSED1_57                 = 0x500000000000000
+	CAP_WRITE                      = 0x200000000000002
+	CFLUSH                         = 0xf
+	CLOCAL                         = 0x8000
+	CLOCK_MONOTONIC                = 0x4
+	CLOCK_MONOTONIC_FAST           = 0xc
+	CLOCK_MONOTONIC_PRECISE        = 0xb
+	CLOCK_PROCESS_CPUTIME_ID       = 0xf
+	CLOCK_PROF                     = 0x2
+	CLOCK_REALTIME                 = 0x0
+	CLOCK_REALTIME_FAST            = 0xa
+	CLOCK_REALTIME_PRECISE         = 0x9
+	CLOCK_SECOND                   = 0xd
+	CLOCK_THREAD_CPUTIME_ID        = 0xe
+	CLOCK_UPTIME                   = 0x5
+	CLOCK_UPTIME_FAST              = 0x8
+	CLOCK_UPTIME_PRECISE           = 0x7
+	CLOCK_VIRTUAL                  = 0x1
+	CPUSTATES                      = 0x5
+	CP_IDLE                        = 0x4
+	CP_INTR                        = 0x3
+	CP_NICE                        = 0x1
+	CP_SYS                         = 0x2
+	CP_USER                        = 0x0
+	CREAD                          = 0x800
+	CRTSCTS                        = 0x30000
+	CS5                            = 0x0
+	CS6                            = 0x100
+	CS7                            = 0x200
+	CS8                            = 0x300
+	CSIZE                          = 0x300
+	CSTART                         = 0x11
+	CSTATUS                        = 0x14
+	CSTOP                          = 0x13
+	CSTOPB                         = 0x400
+	CSUSP                          = 0x1a
+	CTL_HW                         = 0x6
+	CTL_KERN                       = 0x1
+	CTL_MAXNAME                    = 0x18
+	CTL_NET                        = 0x4
+	DIOCGATTR                      = 0xc144648e
+	DIOCGDELETE                    = 0x80106488
+	DIOCGFLUSH                     = 0x20006487
+	DIOCGFRONTSTUFF                = 0x40086486
+	DIOCGFWHEADS                   = 0x40046483
+	DIOCGFWSECTORS                 = 0x40046482
+	DIOCGIDENT                     = 0x41006489
+	DIOCGMEDIASIZE                 = 0x40086481
+	DIOCGPHYSPATH                  = 0x4400648d
+	DIOCGPROVIDERNAME              = 0x4400648a
+	DIOCGSECTORSIZE                = 0x40046480
+	DIOCGSTRIPEOFFSET              = 0x4008648c
+	DIOCGSTRIPESIZE                = 0x4008648b
+	DIOCSKERNELDUMP                = 0x804c6490
+	DIOCSKERNELDUMP_FREEBSD11      = 0x80046485
+	DIOCZONECMD                    = 0xc06c648f
+	DLT_A429                       = 0xb8
+	DLT_A653_ICM                   = 0xb9
+	DLT_AIRONET_HEADER             = 0x78
+	DLT_AOS                        = 0xde
+	DLT_APPLE_IP_OVER_IEEE1394     = 0x8a
+	DLT_ARCNET                     = 0x7
+	DLT_ARCNET_LINUX               = 0x81
+	DLT_ATM_CLIP                   = 0x13
+	DLT_ATM_RFC1483                = 0xb
+	DLT_AURORA                     = 0x7e
+	DLT_AX25                       = 0x3
+	DLT_AX25_KISS                  = 0xca
+	DLT_BACNET_MS_TP               = 0xa5
+	DLT_BLUETOOTH_BREDR_BB         = 0xff
+	DLT_BLUETOOTH_HCI_H4           = 0xbb
+	DLT_BLUETOOTH_HCI_H4_WITH_PHDR = 0xc9
+	DLT_BLUETOOTH_LE_LL            = 0xfb
+	DLT_BLUETOOTH_LE_LL_WITH_PHDR  = 0x100
+	DLT_BLUETOOTH_LINUX_MONITOR    = 0xfe
+	DLT_CAN20B                     = 0xbe
+	DLT_CAN_SOCKETCAN              = 0xe3
+	DLT_CHAOS                      = 0x5
+	DLT_CHDLC                      = 0x68
+	DLT_CISCO_IOS                  = 0x76
+	DLT_CLASS_NETBSD_RAWAF         = 0x2240000
+	DLT_C_HDLC                     = 0x68
+	DLT_C_HDLC_WITH_DIR            = 0xcd
+	DLT_DBUS                       = 0xe7
+	DLT_DECT                       = 0xdd
+	DLT_DOCSIS                     = 0x8f
+	DLT_DVB_CI                     = 0xeb
+	DLT_ECONET                     = 0x73
+	DLT_EN10MB                     = 0x1
+	DLT_EN3MB                      = 0x2
+	DLT_ENC                        = 0x6d
+	DLT_EPON                       = 0x103
+	DLT_ERF                        = 0xc5
+	DLT_ERF_ETH                    = 0xaf
+	DLT_ERF_POS                    = 0xb0
+	DLT_FC_2                       = 0xe0
+	DLT_FC_2_WITH_FRAME_DELIMS     = 0xe1
+	DLT_FDDI                       = 0xa
+	DLT_FLEXRAY                    = 0xd2
+	DLT_FRELAY                     = 0x6b
+	DLT_FRELAY_WITH_DIR            = 0xce
+	DLT_GCOM_SERIAL                = 0xad
+	DLT_GCOM_T1E1                  = 0xac
+	DLT_GPF_F                      = 0xab
+	DLT_GPF_T                      = 0xaa
+	DLT_GPRS_LLC                   = 0xa9
+	DLT_GSMTAP_ABIS                = 0xda
+	DLT_GSMTAP_UM                  = 0xd9
+	DLT_IBM_SN                     = 0x92
+	DLT_IBM_SP                     = 0x91
+	DLT_IEEE802                    = 0x6
+	DLT_IEEE802_11                 = 0x69
+	DLT_IEEE802_11_RADIO           = 0x7f
+	DLT_IEEE802_11_RADIO_AVS       = 0xa3
+	DLT_IEEE802_15_4               = 0xc3
+	DLT_IEEE802_15_4_LINUX         = 0xbf
+	DLT_IEEE802_15_4_NOFCS         = 0xe6
+	DLT_IEEE802_15_4_NONASK_PHY    = 0xd7
+	DLT_IEEE802_16_MAC_CPS         = 0xbc
+	DLT_IEEE802_16_MAC_CPS_RADIO   = 0xc1
+	DLT_INFINIBAND                 = 0xf7
+	DLT_IPFILTER                   = 0x74
+	DLT_IPMB                       = 0xc7
+	DLT_IPMB_LINUX                 = 0xd1
+	DLT_IPMI_HPM_2                 = 0x104
+	DLT_IPNET                      = 0xe2
+	DLT_IPOIB                      = 0xf2
+	DLT_IPV4                       = 0xe4
+	DLT_IPV6                       = 0xe5
+	DLT_IP_OVER_FC                 = 0x7a
+	DLT_ISO_14443                  = 0x108
+	DLT_JUNIPER_ATM1               = 0x89
+	DLT_JUNIPER_ATM2               = 0x87
+	DLT_JUNIPER_ATM_CEMIC          = 0xee
+	DLT_JUNIPER_CHDLC              = 0xb5
+	DLT_JUNIPER_ES                 = 0x84
+	DLT_JUNIPER_ETHER              = 0xb2
+	DLT_JUNIPER_FIBRECHANNEL       = 0xea
+	DLT_JUNIPER_FRELAY             = 0xb4
+	DLT_JUNIPER_GGSN               = 0x85
+	DLT_JUNIPER_ISM                = 0xc2
+	DLT_JUNIPER_MFR                = 0x86
+	DLT_JUNIPER_MLFR               = 0x83
+	DLT_JUNIPER_MLPPP              = 0x82
+	DLT_JUNIPER_MONITOR            = 0xa4
+	DLT_JUNIPER_PIC_PEER           = 0xae
+	DLT_JUNIPER_PPP                = 0xb3
+	DLT_JUNIPER_PPPOE              = 0xa7
+	DLT_JUNIPER_PPPOE_ATM          = 0xa8
+	DLT_JUNIPER_SERVICES           = 0x88
+	DLT_JUNIPER_SRX_E2E            = 0xe9
+	DLT_JUNIPER_ST                 = 0xc8
+	DLT_JUNIPER_VP                 = 0xb7
+	DLT_JUNIPER_VS                 = 0xe8
+	DLT_LAPB_WITH_DIR              = 0xcf
+	DLT_LAPD                       = 0xcb
+	DLT_LIN                        = 0xd4
+	DLT_LINUX_EVDEV                = 0xd8
+	DLT_LINUX_IRDA                 = 0x90
+	DLT_LINUX_LAPD                 = 0xb1
+	DLT_LINUX_PPP_WITHDIRECTION    = 0xa6
+	DLT_LINUX_SLL                  = 0x71
+	DLT_LOOP                       = 0x6c
+	DLT_LTALK                      = 0x72
+	DLT_MATCHING_MAX               = 0x109
+	DLT_MATCHING_MIN               = 0x68
+	DLT_MFR                        = 0xb6
+	DLT_MOST                       = 0xd3
+	DLT_MPEG_2_TS                  = 0xf3
+	DLT_MPLS                       = 0xdb
+	DLT_MTP2                       = 0x8c
+	DLT_MTP2_WITH_PHDR             = 0x8b
+	DLT_MTP3                       = 0x8d
+	DLT_MUX27010                   = 0xec
+	DLT_NETANALYZER                = 0xf0
+	DLT_NETANALYZER_TRANSPARENT    = 0xf1
+	DLT_NETLINK                    = 0xfd
+	DLT_NFC_LLCP                   = 0xf5
+	DLT_NFLOG                      = 0xef
+	DLT_NG40                       = 0xf4
+	DLT_NULL                       = 0x0
+	DLT_PCI_EXP                    = 0x7d
+	DLT_PFLOG                      = 0x75
+	DLT_PFSYNC                     = 0x79
+	DLT_PKTAP                      = 0x102
+	DLT_PPI                        = 0xc0
+	DLT_PPP                        = 0x9
+	DLT_PPP_BSDOS                  = 0xe
+	DLT_PPP_ETHER                  = 0x33
+	DLT_PPP_PPPD                   = 0xa6
+	DLT_PPP_SERIAL                 = 0x32
+	DLT_PPP_WITH_DIR               = 0xcc
+	DLT_PPP_WITH_DIRECTION         = 0xa6
+	DLT_PRISM_HEADER               = 0x77
+	DLT_PROFIBUS_DL                = 0x101
+	DLT_PRONET                     = 0x4
+	DLT_RAIF1                      = 0xc6
+	DLT_RAW                        = 0xc
+	DLT_RDS                        = 0x109
+	DLT_REDBACK_SMARTEDGE          = 0x20
+	DLT_RIO                        = 0x7c
+	DLT_RTAC_SERIAL                = 0xfa
+	DLT_SCCP                       = 0x8e
+	DLT_SCTP                       = 0xf8
+	DLT_SITA                       = 0xc4
+	DLT_SLIP                       = 0x8
+	DLT_SLIP_BSDOS                 = 0xd
+	DLT_STANAG_5066_D_PDU          = 0xed
+	DLT_SUNATM                     = 0x7b
+	DLT_SYMANTEC_FIREWALL          = 0x63
+	DLT_TZSP                       = 0x80
+	DLT_USB                        = 0xba
+	DLT_USBPCAP                    = 0xf9
+	DLT_USB_FREEBSD                = 0xba
+	DLT_USB_LINUX                  = 0xbd
+	DLT_USB_LINUX_MMAPPED          = 0xdc
+	DLT_USER0                      = 0x93
+	DLT_USER1                      = 0x94
+	DLT_USER10                     = 0x9d
+	DLT_USER11                     = 0x9e
+	DLT_USER12                     = 0x9f
+	DLT_USER13                     = 0xa0
+	DLT_USER14                     = 0xa1
+	DLT_USER15                     = 0xa2
+	DLT_USER2                      = 0x95
+	DLT_USER3                      = 0x96
+	DLT_USER4                      = 0x97
+	DLT_USER5                      = 0x98
+	DLT_USER6                      = 0x99
+	DLT_USER7                      = 0x9a
+	DLT_USER8                      = 0x9b
+	DLT_USER9                      = 0x9c
+	DLT_WATTSTOPPER_DLM            = 0x107
+	DLT_WIHART                     = 0xdf
+	DLT_WIRESHARK_UPPER_PDU        = 0xfc
+	DLT_X2E_SERIAL                 = 0xd5
+	DLT_X2E_XORAYA                 = 0xd6
+	DLT_ZWAVE_R1_R2                = 0x105
+	DLT_ZWAVE_R3                   = 0x106
+	DT_BLK                         = 0x6
+	DT_CHR                         = 0x2
+	DT_DIR                         = 0x4
+	DT_FIFO                        = 0x1
+	DT_LNK                         = 0xa
+	DT_REG                         = 0x8
+	DT_SOCK                        = 0xc
+	DT_UNKNOWN                     = 0x0
+	DT_WHT                         = 0xe
+	ECHO                           = 0x8
+	ECHOCTL                        = 0x40
+	ECHOE                          = 0x2
+	ECHOK                          = 0x4
+	ECHOKE                         = 0x1
+	ECHONL                         = 0x10
+	ECHOPRT                        = 0x20
+	EVFILT_AIO                     = -0x3
+	EVFILT_FS                      = -0x9
+	EVFILT_LIO                     = -0xa
+	EVFILT_PROC                    = -0x5
+	EVFILT_PROCDESC                = -0x8
+	EVFILT_READ                    = -0x1
+	EVFILT_SENDFILE                = -0xc
+	EVFILT_SIGNAL                  = -0x6
+	EVFILT_SYSCOUNT                = 0xc
+	EVFILT_TIMER                   = -0x7
+	EVFILT_USER                    = -0xb
+	EVFILT_VNODE                   = -0x4
+	EVFILT_WRITE                   = -0x2
+	EV_ADD                         = 0x1
+	EV_CLEAR                       = 0x20
+	EV_DELETE                      = 0x2
+	EV_DISABLE                     = 0x8
+	EV_DISPATCH                    = 0x80
+	EV_DROP                        = 0x1000
+	EV_ENABLE                      = 0x4
+	EV_EOF                         = 0x8000
+	EV_ERROR                       = 0x4000
+	EV_FLAG1                       = 0x2000
+	EV_FLAG2                       = 0x4000
+	EV_FORCEONESHOT                = 0x100
+	EV_ONESHOT                     = 0x10
+	EV_RECEIPT                     = 0x40
+	EV_SYSFLAGS                    = 0xf000
+	EXTA                           = 0x4b00
+	EXTATTR_NAMESPACE_EMPTY        = 0x0
+	EXTATTR_NAMESPACE_SYSTEM       = 0x2
+	EXTATTR_NAMESPACE_USER         = 0x1
+	EXTB                           = 0x9600
+	EXTPROC                        = 0x800
+	FD_CLOEXEC                     = 0x1
+	FD_SETSIZE                     = 0x400
+	FLUSHO                         = 0x800000
+	F_CANCEL                       = 0x5
+	F_DUP2FD                       = 0xa
+	F_DUP2FD_CLOEXEC               = 0x12
+	F_DUPFD                        = 0x0
+	F_DUPFD_CLOEXEC                = 0x11
+	F_GETFD                        = 0x1
+	F_GETFL                        = 0x3
+	F_GETLK                        = 0xb
+	F_GETOWN                       = 0x5
+	F_OGETLK                       = 0x7
+	F_OK                           = 0x0
+	F_OSETLK                       = 0x8
+	F_OSETLKW                      = 0x9
+	F_RDAHEAD                      = 0x10
+	F_RDLCK                        = 0x1
+	F_READAHEAD                    = 0xf
+	F_SETFD                        = 0x2
+	F_SETFL                        = 0x4
+	F_SETLK                        = 0xc
+	F_SETLKW                       = 0xd
+	F_SETLK_REMOTE                 = 0xe
+	F_SETOWN                       = 0x6
+	F_UNLCK                        = 0x2
+	F_UNLCKSYS                     = 0x4
+	F_WRLCK                        = 0x3
+	HUPCL                          = 0x4000
+	HW_MACHINE                     = 0x1
+	ICANON                         = 0x100
+	ICMP6_FILTER                   = 0x12
+	ICRNL                          = 0x100
+	IEXTEN                         = 0x400
+	IFAN_ARRIVAL                   = 0x0
+	IFAN_DEPARTURE                 = 0x1
+	IFF_ALLMULTI                   = 0x200
+	IFF_ALTPHYS                    = 0x4000
+	IFF_BROADCAST                  = 0x2
+	IFF_CANTCHANGE                 = 0x218f52
+	IFF_CANTCONFIG                 = 0x10000
+	IFF_DEBUG                      = 0x4
+	IFF_DRV_OACTIVE                = 0x400
+	IFF_DRV_RUNNING                = 0x40
+	IFF_DYING                      = 0x200000
+	IFF_LINK0                      = 0x1000
+	IFF_LINK1                      = 0x2000
+	IFF_LINK2                      = 0x4000
+	IFF_LOOPBACK                   = 0x8
+	IFF_MONITOR                    = 0x40000
+	IFF_MULTICAST                  = 0x8000
+	IFF_NOARP                      = 0x80
+	IFF_OACTIVE                    = 0x400
+	IFF_POINTOPOINT                = 0x10
+	IFF_PPROMISC                   = 0x20000
+	IFF_PROMISC                    = 0x100
+	IFF_RENAMING                   = 0x400000
+	IFF_RUNNING                    = 0x40
+	IFF_SIMPLEX                    = 0x800
+	IFF_STATICARP                  = 0x80000
+	IFF_UP                         = 0x1
+	IFNAMSIZ                       = 0x10
+	IFT_BRIDGE                     = 0xd1
+	IFT_CARP                       = 0xf8
+	IFT_IEEE1394                   = 0x90
+	IFT_INFINIBAND                 = 0xc7
+	IFT_L2VLAN                     = 0x87
+	IFT_L3IPVLAN                   = 0x88
+	IFT_PPP                        = 0x17
+	IFT_PROPVIRTUAL                = 0x35
+	IGNBRK                         = 0x1
+	IGNCR                          = 0x80
+	IGNPAR                         = 0x4
+	IMAXBEL                        = 0x2000
+	INLCR                          = 0x40
+	INPCK                          = 0x10
+	IN_CLASSA_HOST                 = 0xffffff
+	IN_CLASSA_MAX                  = 0x80
+	IN_CLASSA_NET                  = 0xff000000
+	IN_CLASSA_NSHIFT               = 0x18
+	IN_CLASSB_HOST                 = 0xffff
+	IN_CLASSB_MAX                  = 0x10000
+	IN_CLASSB_NET                  = 0xffff0000
+	IN_CLASSB_NSHIFT               = 0x10
+	IN_CLASSC_HOST                 = 0xff
+	IN_CLASSC_NET                  = 0xffffff00
+	IN_CLASSC_NSHIFT               = 0x8
+	IN_CLASSD_HOST                 = 0xfffffff
+	IN_CLASSD_NET                  = 0xf0000000
+	IN_CLASSD_NSHIFT               = 0x1c
+	IN_LOOPBACKNET                 = 0x7f
+	IN_RFC3021_MASK                = 0xfffffffe
+	IPPROTO_3PC                    = 0x22
+	IPPROTO_ADFS                   = 0x44
+	IPPROTO_AH                     = 0x33
+	IPPROTO_AHIP                   = 0x3d
+	IPPROTO_APES                   = 0x63
+	IPPROTO_ARGUS                  = 0xd
+	IPPROTO_AX25                   = 0x5d
+	IPPROTO_BHA                    = 0x31
+	IPPROTO_BLT                    = 0x1e
+	IPPROTO_BRSATMON               = 0x4c
+	IPPROTO_CARP                   = 0x70
+	IPPROTO_CFTP                   = 0x3e
+	IPPROTO_CHAOS                  = 0x10
+	IPPROTO_CMTP                   = 0x26
+	IPPROTO_CPHB                   = 0x49
+	IPPROTO_CPNX                   = 0x48
+	IPPROTO_DDP                    = 0x25
+	IPPROTO_DGP                    = 0x56
+	IPPROTO_DIVERT                 = 0x102
+	IPPROTO_DONE                   = 0x101
+	IPPROTO_DSTOPTS                = 0x3c
+	IPPROTO_EGP                    = 0x8
+	IPPROTO_EMCON                  = 0xe
+	IPPROTO_ENCAP                  = 0x62
+	IPPROTO_EON                    = 0x50
+	IPPROTO_ESP                    = 0x32
+	IPPROTO_ETHERIP                = 0x61
+	IPPROTO_FRAGMENT               = 0x2c
+	IPPROTO_GGP                    = 0x3
+	IPPROTO_GMTP                   = 0x64
+	IPPROTO_GRE                    = 0x2f
+	IPPROTO_HELLO                  = 0x3f
+	IPPROTO_HIP                    = 0x8b
+	IPPROTO_HMP                    = 0x14
+	IPPROTO_HOPOPTS                = 0x0
+	IPPROTO_ICMP                   = 0x1
+	IPPROTO_ICMPV6                 = 0x3a
+	IPPROTO_IDP                    = 0x16
+	IPPROTO_IDPR                   = 0x23
+	IPPROTO_IDRP                   = 0x2d
+	IPPROTO_IGMP                   = 0x2
+	IPPROTO_IGP                    = 0x55
+	IPPROTO_IGRP                   = 0x58
+	IPPROTO_IL                     = 0x28
+	IPPROTO_INLSP                  = 0x34
+	IPPROTO_INP                    = 0x20
+	IPPROTO_IP                     = 0x0
+	IPPROTO_IPCOMP                 = 0x6c
+	IPPROTO_IPCV                   = 0x47
+	IPPROTO_IPEIP                  = 0x5e
+	IPPROTO_IPIP                   = 0x4
+	IPPROTO_IPPC                   = 0x43
+	IPPROTO_IPV4                   = 0x4
+	IPPROTO_IPV6                   = 0x29
+	IPPROTO_IRTP                   = 0x1c
+	IPPROTO_KRYPTOLAN              = 0x41
+	IPPROTO_LARP                   = 0x5b
+	IPPROTO_LEAF1                  = 0x19
+	IPPROTO_LEAF2                  = 0x1a
+	IPPROTO_MAX                    = 0x100
+	IPPROTO_MEAS                   = 0x13
+	IPPROTO_MH                     = 0x87
+	IPPROTO_MHRP                   = 0x30
+	IPPROTO_MICP                   = 0x5f
+	IPPROTO_MOBILE                 = 0x37
+	IPPROTO_MPLS                   = 0x89
+	IPPROTO_MTP                    = 0x5c
+	IPPROTO_MUX                    = 0x12
+	IPPROTO_ND                     = 0x4d
+	IPPROTO_NHRP                   = 0x36
+	IPPROTO_NONE                   = 0x3b
+	IPPROTO_NSP                    = 0x1f
+	IPPROTO_NVPII                  = 0xb
+	IPPROTO_OLD_DIVERT             = 0xfe
+	IPPROTO_OSPFIGP                = 0x59
+	IPPROTO_PFSYNC                 = 0xf0
+	IPPROTO_PGM                    = 0x71
+	IPPROTO_PIGP                   = 0x9
+	IPPROTO_PIM                    = 0x67
+	IPPROTO_PRM                    = 0x15
+	IPPROTO_PUP                    = 0xc
+	IPPROTO_PVP                    = 0x4b
+	IPPROTO_RAW                    = 0xff
+	IPPROTO_RCCMON                 = 0xa
+	IPPROTO_RDP                    = 0x1b
+	IPPROTO_RESERVED_253           = 0xfd
+	IPPROTO_RESERVED_254           = 0xfe
+	IPPROTO_ROUTING                = 0x2b
+	IPPROTO_RSVP                   = 0x2e
+	IPPROTO_RVD                    = 0x42
+	IPPROTO_SATEXPAK               = 0x40
+	IPPROTO_SATMON                 = 0x45
+	IPPROTO_SCCSP                  = 0x60
+	IPPROTO_SCTP                   = 0x84
+	IPPROTO_SDRP                   = 0x2a
+	IPPROTO_SEND                   = 0x103
+	IPPROTO_SEP                    = 0x21
+	IPPROTO_SHIM6                  = 0x8c
+	IPPROTO_SKIP                   = 0x39
+	IPPROTO_SPACER                 = 0x7fff
+	IPPROTO_SRPC                   = 0x5a
+	IPPROTO_ST                     = 0x7
+	IPPROTO_SVMTP                  = 0x52
+	IPPROTO_SWIPE                  = 0x35
+	IPPROTO_TCF                    = 0x57
+	IPPROTO_TCP                    = 0x6
+	IPPROTO_TLSP                   = 0x38
+	IPPROTO_TP                     = 0x1d
+	IPPROTO_TPXX                   = 0x27
+	IPPROTO_TRUNK1                 = 0x17
+	IPPROTO_TRUNK2                 = 0x18
+	IPPROTO_TTP                    = 0x54
+	IPPROTO_UDP                    = 0x11
+	IPPROTO_UDPLITE                = 0x88
+	IPPROTO_VINES                  = 0x53
+	IPPROTO_VISA                   = 0x46
+	IPPROTO_VMTP                   = 0x51
+	IPPROTO_WBEXPAK                = 0x4f
+	IPPROTO_WBMON                  = 0x4e
+	IPPROTO_WSN                    = 0x4a
+	IPPROTO_XNET                   = 0xf
+	IPPROTO_XTP                    = 0x24
+	IPV6_AUTOFLOWLABEL             = 0x3b
+	IPV6_BINDANY                   = 0x40
+	IPV6_BINDMULTI                 = 0x41
+	IPV6_BINDV6ONLY                = 0x1b
+	IPV6_CHECKSUM                  = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS    = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP    = 0x1
+	IPV6_DEFHLIM                   = 0x40
+	IPV6_DONTFRAG                  = 0x3e
+	IPV6_DSTOPTS                   = 0x32
+	IPV6_FLOWID                    = 0x43
+	IPV6_FLOWINFO_MASK             = 0xffffff0f
+	IPV6_FLOWLABEL_MASK            = 0xffff0f00
+	IPV6_FLOWTYPE                  = 0x44
+	IPV6_FRAGTTL                   = 0x78
+	IPV6_FW_ADD                    = 0x1e
+	IPV6_FW_DEL                    = 0x1f
+	IPV6_FW_FLUSH                  = 0x20
+	IPV6_FW_GET                    = 0x22
+	IPV6_FW_ZERO                   = 0x21
+	IPV6_HLIMDEC                   = 0x1
+	IPV6_HOPLIMIT                  = 0x2f
+	IPV6_HOPOPTS                   = 0x31
+	IPV6_IPSEC_POLICY              = 0x1c
+	IPV6_JOIN_GROUP                = 0xc
+	IPV6_LEAVE_GROUP               = 0xd
+	IPV6_MAXHLIM                   = 0xff
+	IPV6_MAXOPTHDR                 = 0x800
+	IPV6_MAXPACKET                 = 0xffff
+	IPV6_MAX_GROUP_SRC_FILTER      = 0x200
+	IPV6_MAX_MEMBERSHIPS           = 0xfff
+	IPV6_MAX_SOCK_SRC_FILTER       = 0x80
+	IPV6_MIN_MEMBERSHIPS           = 0x1f
+	IPV6_MMTU                      = 0x500
+	IPV6_MSFILTER                  = 0x4a
+	IPV6_MULTICAST_HOPS            = 0xa
+	IPV6_MULTICAST_IF              = 0x9
+	IPV6_MULTICAST_LOOP            = 0xb
+	IPV6_NEXTHOP                   = 0x30
+	IPV6_PATHMTU                   = 0x2c
+	IPV6_PKTINFO                   = 0x2e
+	IPV6_PORTRANGE                 = 0xe
+	IPV6_PORTRANGE_DEFAULT         = 0x0
+	IPV6_PORTRANGE_HIGH            = 0x1
+	IPV6_PORTRANGE_LOW             = 0x2
+	IPV6_PREFER_TEMPADDR           = 0x3f
+	IPV6_RECVDSTOPTS               = 0x28
+	IPV6_RECVFLOWID                = 0x46
+	IPV6_RECVHOPLIMIT              = 0x25
+	IPV6_RECVHOPOPTS               = 0x27
+	IPV6_RECVPATHMTU               = 0x2b
+	IPV6_RECVPKTINFO               = 0x24
+	IPV6_RECVRSSBUCKETID           = 0x47
+	IPV6_RECVRTHDR                 = 0x26
+	IPV6_RECVTCLASS                = 0x39
+	IPV6_RSSBUCKETID               = 0x45
+	IPV6_RSS_LISTEN_BUCKET         = 0x42
+	IPV6_RTHDR                     = 0x33
+	IPV6_RTHDRDSTOPTS              = 0x23
+	IPV6_RTHDR_LOOSE               = 0x0
+	IPV6_RTHDR_STRICT              = 0x1
+	IPV6_RTHDR_TYPE_0              = 0x0
+	IPV6_SOCKOPT_RESERVED1         = 0x3
+	IPV6_TCLASS                    = 0x3d
+	IPV6_UNICAST_HOPS              = 0x4
+	IPV6_USE_MIN_MTU               = 0x2a
+	IPV6_V6ONLY                    = 0x1b
+	IPV6_VERSION                   = 0x60
+	IPV6_VERSION_MASK              = 0xf0
+	IP_ADD_MEMBERSHIP              = 0xc
+	IP_ADD_SOURCE_MEMBERSHIP       = 0x46
+	IP_BINDANY                     = 0x18
+	IP_BINDMULTI                   = 0x19
+	IP_BLOCK_SOURCE                = 0x48
+	IP_DEFAULT_MULTICAST_LOOP      = 0x1
+	IP_DEFAULT_MULTICAST_TTL       = 0x1
+	IP_DF                          = 0x4000
+	IP_DONTFRAG                    = 0x43
+	IP_DROP_MEMBERSHIP             = 0xd
+	IP_DROP_SOURCE_MEMBERSHIP      = 0x47
+	IP_DUMMYNET3                   = 0x31
+	IP_DUMMYNET_CONFIGURE          = 0x3c
+	IP_DUMMYNET_DEL                = 0x3d
+	IP_DUMMYNET_FLUSH              = 0x3e
+	IP_DUMMYNET_GET                = 0x40
+	IP_FLOWID                      = 0x5a
+	IP_FLOWTYPE                    = 0x5b
+	IP_FW3                         = 0x30
+	IP_FW_ADD                      = 0x32
+	IP_FW_DEL                      = 0x33
+	IP_FW_FLUSH                    = 0x34
+	IP_FW_GET                      = 0x36
+	IP_FW_NAT_CFG                  = 0x38
+	IP_FW_NAT_DEL                  = 0x39
+	IP_FW_NAT_GET_CONFIG           = 0x3a
+	IP_FW_NAT_GET_LOG              = 0x3b
+	IP_FW_RESETLOG                 = 0x37
+	IP_FW_TABLE_ADD                = 0x28
+	IP_FW_TABLE_DEL                = 0x29
+	IP_FW_TABLE_FLUSH              = 0x2a
+	IP_FW_TABLE_GETSIZE            = 0x2b
+	IP_FW_TABLE_LIST               = 0x2c
+	IP_FW_ZERO                     = 0x35
+	IP_HDRINCL                     = 0x2
+	IP_IPSEC_POLICY                = 0x15
+	IP_MAXPACKET                   = 0xffff
+	IP_MAX_GROUP_SRC_FILTER        = 0x200
+	IP_MAX_MEMBERSHIPS             = 0xfff
+	IP_MAX_SOCK_MUTE_FILTER        = 0x80
+	IP_MAX_SOCK_SRC_FILTER         = 0x80
+	IP_MAX_SOURCE_FILTER           = 0x400
+	IP_MF                          = 0x2000
+	IP_MINTTL                      = 0x42
+	IP_MIN_MEMBERSHIPS             = 0x1f
+	IP_MSFILTER                    = 0x4a
+	IP_MSS                         = 0x240
+	IP_MULTICAST_IF                = 0x9
+	IP_MULTICAST_LOOP              = 0xb
+	IP_MULTICAST_TTL               = 0xa
+	IP_MULTICAST_VIF               = 0xe
+	IP_OFFMASK                     = 0x1fff
+	IP_ONESBCAST                   = 0x17
+	IP_OPTIONS                     = 0x1
+	IP_PORTRANGE                   = 0x13
+	IP_PORTRANGE_DEFAULT           = 0x0
+	IP_PORTRANGE_HIGH              = 0x1
+	IP_PORTRANGE_LOW               = 0x2
+	IP_RECVDSTADDR                 = 0x7
+	IP_RECVFLOWID                  = 0x5d
+	IP_RECVIF                      = 0x14
+	IP_RECVOPTS                    = 0x5
+	IP_RECVRETOPTS                 = 0x6
+	IP_RECVRSSBUCKETID             = 0x5e
+	IP_RECVTOS                     = 0x44
+	IP_RECVTTL                     = 0x41
+	IP_RETOPTS                     = 0x8
+	IP_RF                          = 0x8000
+	IP_RSSBUCKETID                 = 0x5c
+	IP_RSS_LISTEN_BUCKET           = 0x1a
+	IP_RSVP_OFF                    = 0x10
+	IP_RSVP_ON                     = 0xf
+	IP_RSVP_VIF_OFF                = 0x12
+	IP_RSVP_VIF_ON                 = 0x11
+	IP_SENDSRCADDR                 = 0x7
+	IP_TOS                         = 0x3
+	IP_TTL                         = 0x4
+	IP_UNBLOCK_SOURCE              = 0x49
+	ISIG                           = 0x80
+	ISTRIP                         = 0x20
+	IXANY                          = 0x800
+	IXOFF                          = 0x400
+	IXON                           = 0x200
+	KERN_HOSTNAME                  = 0xa
+	KERN_OSRELEASE                 = 0x2
+	KERN_OSTYPE                    = 0x1
+	KERN_VERSION                   = 0x4
+	LOCK_EX                        = 0x2
+	LOCK_NB                        = 0x4
+	LOCK_SH                        = 0x1
+	LOCK_UN                        = 0x8
+	MADV_AUTOSYNC                  = 0x7
+	MADV_CORE                      = 0x9
+	MADV_DONTNEED                  = 0x4
+	MADV_FREE                      = 0x5
+	MADV_NOCORE                    = 0x8
+	MADV_NORMAL                    = 0x0
+	MADV_NOSYNC                    = 0x6
+	MADV_PROTECT                   = 0xa
+	MADV_RANDOM                    = 0x1
+	MADV_SEQUENTIAL                = 0x2
+	MADV_WILLNEED                  = 0x3
+	MAP_ALIGNED_SUPER              = 0x1000000
+	MAP_ALIGNMENT_MASK             = -0x1000000
+	MAP_ALIGNMENT_SHIFT            = 0x18
+	MAP_ANON                       = 0x1000
+	MAP_ANONYMOUS                  = 0x1000
+	MAP_COPY                       = 0x2
+	MAP_EXCL                       = 0x4000
+	MAP_FILE                       = 0x0
+	MAP_FIXED                      = 0x10
+	MAP_GUARD                      = 0x2000
+	MAP_HASSEMAPHORE               = 0x200
+	MAP_NOCORE                     = 0x20000
+	MAP_NOSYNC                     = 0x800
+	MAP_PREFAULT_READ              = 0x40000
+	MAP_PRIVATE                    = 0x2
+	MAP_RESERVED0020               = 0x20
+	MAP_RESERVED0040               = 0x40
+	MAP_RESERVED0080               = 0x80
+	MAP_RESERVED0100               = 0x100
+	MAP_SHARED                     = 0x1
+	MAP_STACK                      = 0x400
+	MCL_CURRENT                    = 0x1
+	MCL_FUTURE                     = 0x2
+	MNT_ACLS                       = 0x8000000
+	MNT_ASYNC                      = 0x40
+	MNT_AUTOMOUNTED                = 0x200000000
+	MNT_BYFSID                     = 0x8000000
+	MNT_CMDFLAGS                   = 0xd0f0000
+	MNT_DEFEXPORTED                = 0x200
+	MNT_DELEXPORT                  = 0x20000
+	MNT_EXKERB                     = 0x800
+	MNT_EXPORTANON                 = 0x400
+	MNT_EXPORTED                   = 0x100
+	MNT_EXPUBLIC                   = 0x20000000
+	MNT_EXRDONLY                   = 0x80
+	MNT_FORCE                      = 0x80000
+	MNT_GJOURNAL                   = 0x2000000
+	MNT_IGNORE                     = 0x800000
+	MNT_LAZY                       = 0x3
+	MNT_LOCAL                      = 0x1000
+	MNT_MULTILABEL                 = 0x4000000
+	MNT_NFS4ACLS                   = 0x10
+	MNT_NOATIME                    = 0x10000000
+	MNT_NOCLUSTERR                 = 0x40000000
+	MNT_NOCLUSTERW                 = 0x80000000
+	MNT_NOEXEC                     = 0x4
+	MNT_NONBUSY                    = 0x4000000
+	MNT_NOSUID                     = 0x8
+	MNT_NOSYMFOLLOW                = 0x400000
+	MNT_NOWAIT                     = 0x2
+	MNT_QUOTA                      = 0x2000
+	MNT_RDONLY                     = 0x1
+	MNT_RELOAD                     = 0x40000
+	MNT_ROOTFS                     = 0x4000
+	MNT_SNAPSHOT                   = 0x1000000
+	MNT_SOFTDEP                    = 0x200000
+	MNT_SUIDDIR                    = 0x100000
+	MNT_SUJ                        = 0x100000000
+	MNT_SUSPEND                    = 0x4
+	MNT_SYNCHRONOUS                = 0x2
+	MNT_UNION                      = 0x20
+	MNT_UPDATE                     = 0x10000
+	MNT_UPDATEMASK                 = 0x2d8d0807e
+	MNT_USER                       = 0x8000
+	MNT_VISFLAGMASK                = 0x3fef0ffff
+	MNT_WAIT                       = 0x1
+	MSG_CMSG_CLOEXEC               = 0x40000
+	MSG_COMPAT                     = 0x8000
+	MSG_CTRUNC                     = 0x20
+	MSG_DONTROUTE                  = 0x4
+	MSG_DONTWAIT                   = 0x80
+	MSG_EOF                        = 0x100
+	MSG_EOR                        = 0x8
+	MSG_NBIO                       = 0x4000
+	MSG_NOSIGNAL                   = 0x20000
+	MSG_NOTIFICATION               = 0x2000
+	MSG_OOB                        = 0x1
+	MSG_PEEK                       = 0x2
+	MSG_TRUNC                      = 0x10
+	MSG_WAITALL                    = 0x40
+	MSG_WAITFORONE                 = 0x80000
+	MS_ASYNC                       = 0x1
+	MS_INVALIDATE                  = 0x2
+	MS_SYNC                        = 0x0
+	NAME_MAX                       = 0xff
+	NET_RT_DUMP                    = 0x1
+	NET_RT_FLAGS                   = 0x2
+	NET_RT_IFLIST                  = 0x3
+	NET_RT_IFLISTL                 = 0x5
+	NET_RT_IFMALIST                = 0x4
+	NFDBITS                        = 0x20
+	NOFLSH                         = 0x80000000
+	NOKERNINFO                     = 0x2000000
+	NOTE_ATTRIB                    = 0x8
+	NOTE_CHILD                     = 0x4
+	NOTE_CLOSE                     = 0x100
+	NOTE_CLOSE_WRITE               = 0x200
+	NOTE_DELETE                    = 0x1
+	NOTE_EXEC                      = 0x20000000
+	NOTE_EXIT                      = 0x80000000
+	NOTE_EXTEND                    = 0x4
+	NOTE_FFAND                     = 0x40000000
+	NOTE_FFCOPY                    = 0xc0000000
+	NOTE_FFCTRLMASK                = 0xc0000000
+	NOTE_FFLAGSMASK                = 0xffffff
+	NOTE_FFNOP                     = 0x0
+	NOTE_FFOR                      = 0x80000000
+	NOTE_FILE_POLL                 = 0x2
+	NOTE_FORK                      = 0x40000000
+	NOTE_LINK                      = 0x10
+	NOTE_LOWAT                     = 0x1
+	NOTE_MSECONDS                  = 0x2
+	NOTE_NSECONDS                  = 0x8
+	NOTE_OPEN                      = 0x80
+	NOTE_PCTRLMASK                 = 0xf0000000
+	NOTE_PDATAMASK                 = 0xfffff
+	NOTE_READ                      = 0x400
+	NOTE_RENAME                    = 0x20
+	NOTE_REVOKE                    = 0x40
+	NOTE_SECONDS                   = 0x1
+	NOTE_TRACK                     = 0x1
+	NOTE_TRACKERR                  = 0x2
+	NOTE_TRIGGER                   = 0x1000000
+	NOTE_USECONDS                  = 0x4
+	NOTE_WRITE                     = 0x2
+	OCRNL                          = 0x10
+	ONLCR                          = 0x2
+	ONLRET                         = 0x40
+	ONOCR                          = 0x20
+	ONOEOT                         = 0x8
+	OPOST                          = 0x1
+	OXTABS                         = 0x4
+	O_ACCMODE                      = 0x3
+	O_APPEND                       = 0x8
+	O_ASYNC                        = 0x40
+	O_CLOEXEC                      = 0x100000
+	O_CREAT                        = 0x200
+	O_DIRECT                       = 0x10000
+	O_DIRECTORY                    = 0x20000
+	O_EXCL                         = 0x800
+	O_EXEC                         = 0x40000
+	O_EXLOCK                       = 0x20
+	O_FSYNC                        = 0x80
+	O_NDELAY                       = 0x4
+	O_NOCTTY                       = 0x8000
+	O_NOFOLLOW                     = 0x100
+	O_NONBLOCK                     = 0x4
+	O_RDONLY                       = 0x0
+	O_RDWR                         = 0x2
+	O_SHLOCK                       = 0x10
+	O_SYNC                         = 0x80
+	O_TRUNC                        = 0x400
+	O_TTY_INIT                     = 0x80000
+	O_VERIFY                       = 0x200000
+	O_WRONLY                       = 0x1
+	PARENB                         = 0x1000
+	PARMRK                         = 0x8
+	PARODD                         = 0x2000
+	PENDIN                         = 0x20000000
+	PRIO_PGRP                      = 0x1
+	PRIO_PROCESS                   = 0x0
+	PRIO_USER                      = 0x2
+	PROT_EXEC                      = 0x4
+	PROT_NONE                      = 0x0
+	PROT_READ                      = 0x1
+	PROT_WRITE                     = 0x2
+	RLIMIT_AS                      = 0xa
+	RLIMIT_CORE                    = 0x4
+	RLIMIT_CPU                     = 0x0
+	RLIMIT_DATA                    = 0x2
+	RLIMIT_FSIZE                   = 0x1
+	RLIMIT_MEMLOCK                 = 0x6
+	RLIMIT_NOFILE                  = 0x8
+	RLIMIT_NPROC                   = 0x7
+	RLIMIT_RSS                     = 0x5
+	RLIMIT_STACK                   = 0x3
+	RLIM_INFINITY                  = 0x7fffffffffffffff
+	RTAX_AUTHOR                    = 0x6
+	RTAX_BRD                       = 0x7
+	RTAX_DST                       = 0x0
+	RTAX_GATEWAY                   = 0x1
+	RTAX_GENMASK                   = 0x3
+	RTAX_IFA                       = 0x5
+	RTAX_IFP                       = 0x4
+	RTAX_MAX                       = 0x8
+	RTAX_NETMASK                   = 0x2
+	RTA_AUTHOR                     = 0x40
+	RTA_BRD                        = 0x80
+	RTA_DST                        = 0x1
+	RTA_GATEWAY                    = 0x2
+	RTA_GENMASK                    = 0x8
+	RTA_IFA                        = 0x20
+	RTA_IFP                        = 0x10
+	RTA_NETMASK                    = 0x4
+	RTF_BLACKHOLE                  = 0x1000
+	RTF_BROADCAST                  = 0x400000
+	RTF_DONE                       = 0x40
+	RTF_DYNAMIC                    = 0x10
+	RTF_FIXEDMTU                   = 0x80000
+	RTF_FMASK                      = 0x1004d808
+	RTF_GATEWAY                    = 0x2
+	RTF_GWFLAG_COMPAT              = 0x80000000
+	RTF_HOST                       = 0x4
+	RTF_LLDATA                     = 0x400
+	RTF_LLINFO                     = 0x400
+	RTF_LOCAL                      = 0x200000
+	RTF_MODIFIED                   = 0x20
+	RTF_MULTICAST                  = 0x800000
+	RTF_PINNED                     = 0x100000
+	RTF_PROTO1                     = 0x8000
+	RTF_PROTO2                     = 0x4000
+	RTF_PROTO3                     = 0x40000
+	RTF_REJECT                     = 0x8
+	RTF_RNH_LOCKED                 = 0x40000000
+	RTF_STATIC                     = 0x800
+	RTF_STICKY                     = 0x10000000
+	RTF_UP                         = 0x1
+	RTF_XRESOLVE                   = 0x200
+	RTM_ADD                        = 0x1
+	RTM_CHANGE                     = 0x3
+	RTM_DELADDR                    = 0xd
+	RTM_DELETE                     = 0x2
+	RTM_DELMADDR                   = 0x10
+	RTM_GET                        = 0x4
+	RTM_IEEE80211                  = 0x12
+	RTM_IFANNOUNCE                 = 0x11
+	RTM_IFINFO                     = 0xe
+	RTM_LOCK                       = 0x8
+	RTM_LOSING                     = 0x5
+	RTM_MISS                       = 0x7
+	RTM_NEWADDR                    = 0xc
+	RTM_NEWMADDR                   = 0xf
+	RTM_REDIRECT                   = 0x6
+	RTM_RESOLVE                    = 0xb
+	RTM_RTTUNIT                    = 0xf4240
+	RTM_VERSION                    = 0x5
+	RTV_EXPIRE                     = 0x4
+	RTV_HOPCOUNT                   = 0x2
+	RTV_MTU                        = 0x1
+	RTV_RPIPE                      = 0x8
+	RTV_RTT                        = 0x40
+	RTV_RTTVAR                     = 0x80
+	RTV_SPIPE                      = 0x10
+	RTV_SSTHRESH                   = 0x20
+	RTV_WEIGHT                     = 0x100
+	RT_ALL_FIBS                    = -0x1
+	RT_BLACKHOLE                   = 0x40
+	RT_CACHING_CONTEXT             = 0x1
+	RT_DEFAULT_FIB                 = 0x0
+	RT_HAS_GW                      = 0x80
+	RT_HAS_HEADER                  = 0x10
+	RT_HAS_HEADER_BIT              = 0x4
+	RT_L2_ME                       = 0x4
+	RT_L2_ME_BIT                   = 0x2
+	RT_LLE_CACHE                   = 0x100
+	RT_MAY_LOOP                    = 0x8
+	RT_MAY_LOOP_BIT                = 0x3
+	RT_NORTREF                     = 0x2
+	RT_REJECT                      = 0x20
+	RUSAGE_CHILDREN                = -0x1
+	RUSAGE_SELF                    = 0x0
+	RUSAGE_THREAD                  = 0x1
+	SCM_BINTIME                    = 0x4
+	SCM_CREDS                      = 0x3
+	SCM_RIGHTS                     = 0x1
+	SCM_TIMESTAMP                  = 0x2
+	SHUT_RD                        = 0x0
+	SHUT_RDWR                      = 0x2
+	SHUT_WR                        = 0x1
+	SIOCADDMULTI                   = 0x80206931
+	SIOCAIFADDR                    = 0x8040691a
+	SIOCAIFGROUP                   = 0x80246987
+	SIOCATMARK                     = 0x40047307
+	SIOCDELMULTI                   = 0x80206932
+	SIOCDIFADDR                    = 0x80206919
+	SIOCDIFGROUP                   = 0x80246989
+	SIOCDIFPHYADDR                 = 0x80206949
+	SIOCGDRVSPEC                   = 0xc01c697b
+	SIOCGETSGCNT                   = 0xc0147210
+	SIOCGETVIFCNT                  = 0xc014720f
+	SIOCGHIWAT                     = 0x40047301
+	SIOCGHWADDR                    = 0xc020693e
+	SIOCGI2C                       = 0xc020693d
+	SIOCGIFADDR                    = 0xc0206921
+	SIOCGIFBRDADDR                 = 0xc0206923
+	SIOCGIFCAP                     = 0xc020691f
+	SIOCGIFCONF                    = 0xc0086924
+	SIOCGIFDESCR                   = 0xc020692a
+	SIOCGIFDSTADDR                 = 0xc0206922
+	SIOCGIFFIB                     = 0xc020695c
+	SIOCGIFFLAGS                   = 0xc0206911
+	SIOCGIFGENERIC                 = 0xc020693a
+	SIOCGIFGMEMB                   = 0xc024698a
+	SIOCGIFGROUP                   = 0xc0246988
+	SIOCGIFINDEX                   = 0xc0206920
+	SIOCGIFMAC                     = 0xc0206926
+	SIOCGIFMEDIA                   = 0xc0286938
+	SIOCGIFMETRIC                  = 0xc0206917
+	SIOCGIFMTU                     = 0xc0206933
+	SIOCGIFNETMASK                 = 0xc0206925
+	SIOCGIFPDSTADDR                = 0xc0206948
+	SIOCGIFPHYS                    = 0xc0206935
+	SIOCGIFPSRCADDR                = 0xc0206947
+	SIOCGIFSTATUS                  = 0xc331693b
+	SIOCGIFXMEDIA                  = 0xc028698b
+	SIOCGLOWAT                     = 0x40047303
+	SIOCGPGRP                      = 0x40047309
+	SIOCGPRIVATE_0                 = 0xc0206950
+	SIOCGPRIVATE_1                 = 0xc0206951
+	SIOCGTUNFIB                    = 0xc020695e
+	SIOCIFCREATE                   = 0xc020697a
+	SIOCIFCREATE2                  = 0xc020697c
+	SIOCIFDESTROY                  = 0x80206979
+	SIOCIFGCLONERS                 = 0xc00c6978
+	SIOCSDRVSPEC                   = 0x801c697b
+	SIOCSHIWAT                     = 0x80047300
+	SIOCSIFADDR                    = 0x8020690c
+	SIOCSIFBRDADDR                 = 0x80206913
+	SIOCSIFCAP                     = 0x8020691e
+	SIOCSIFDESCR                   = 0x80206929
+	SIOCSIFDSTADDR                 = 0x8020690e
+	SIOCSIFFIB                     = 0x8020695d
+	SIOCSIFFLAGS                   = 0x80206910
+	SIOCSIFGENERIC                 = 0x80206939
+	SIOCSIFLLADDR                  = 0x8020693c
+	SIOCSIFMAC                     = 0x80206927
+	SIOCSIFMEDIA                   = 0xc0206937
+	SIOCSIFMETRIC                  = 0x80206918
+	SIOCSIFMTU                     = 0x80206934
+	SIOCSIFNAME                    = 0x80206928
+	SIOCSIFNETMASK                 = 0x80206916
+	SIOCSIFPHYADDR                 = 0x80406946
+	SIOCSIFPHYS                    = 0x80206936
+	SIOCSIFRVNET                   = 0xc020695b
+	SIOCSIFVNET                    = 0xc020695a
+	SIOCSLOWAT                     = 0x80047302
+	SIOCSPGRP                      = 0x80047308
+	SIOCSTUNFIB                    = 0x8020695f
+	SOCK_CLOEXEC                   = 0x10000000
+	SOCK_DGRAM                     = 0x2
+	SOCK_MAXADDRLEN                = 0xff
+	SOCK_NONBLOCK                  = 0x20000000
+	SOCK_RAW                       = 0x3
+	SOCK_RDM                       = 0x4
+	SOCK_SEQPACKET                 = 0x5
+	SOCK_STREAM                    = 0x1
+	SOL_SOCKET                     = 0xffff
+	SOMAXCONN                      = 0x80
+	SO_ACCEPTCONN                  = 0x2
+	SO_ACCEPTFILTER                = 0x1000
+	SO_BINTIME                     = 0x2000
+	SO_BROADCAST                   = 0x20
+	SO_DEBUG                       = 0x1
+	SO_DONTROUTE                   = 0x10
+	SO_ERROR                       = 0x1007
+	SO_KEEPALIVE                   = 0x8
+	SO_LABEL                       = 0x1009
+	SO_LINGER                      = 0x80
+	SO_LISTENINCQLEN               = 0x1013
+	SO_LISTENQLEN                  = 0x1012
+	SO_LISTENQLIMIT                = 0x1011
+	SO_NOSIGPIPE                   = 0x800
+	SO_NO_DDP                      = 0x8000
+	SO_NO_OFFLOAD                  = 0x4000
+	SO_OOBINLINE                   = 0x100
+	SO_PEERLABEL                   = 0x1010
+	SO_PROTOCOL                    = 0x1016
+	SO_PROTOTYPE                   = 0x1016
+	SO_RCVBUF                      = 0x1002
+	SO_RCVLOWAT                    = 0x1004
+	SO_RCVTIMEO                    = 0x1006
+	SO_REUSEADDR                   = 0x4
+	SO_REUSEPORT                   = 0x200
+	SO_SETFIB                      = 0x1014
+	SO_SNDBUF                      = 0x1001
+	SO_SNDLOWAT                    = 0x1003
+	SO_SNDTIMEO                    = 0x1005
+	SO_TIMESTAMP                   = 0x400
+	SO_TYPE                        = 0x1008
+	SO_USELOOPBACK                 = 0x40
+	SO_USER_COOKIE                 = 0x1015
+	SO_VENDOR                      = 0x80000000
+	S_BLKSIZE                      = 0x200
+	S_IEXEC                        = 0x40
+	S_IFBLK                        = 0x6000
+	S_IFCHR                        = 0x2000
+	S_IFDIR                        = 0x4000
+	S_IFIFO                        = 0x1000
+	S_IFLNK                        = 0xa000
+	S_IFMT                         = 0xf000
+	S_IFREG                        = 0x8000
+	S_IFSOCK                       = 0xc000
+	S_IFWHT                        = 0xe000
+	S_IREAD                        = 0x100
+	S_IRGRP                        = 0x20
+	S_IROTH                        = 0x4
+	S_IRUSR                        = 0x100
+	S_IRWXG                        = 0x38
+	S_IRWXO                        = 0x7
+	S_IRWXU                        = 0x1c0
+	S_ISGID                        = 0x400
+	S_ISTXT                        = 0x200
+	S_ISUID                        = 0x800
+	S_ISVTX                        = 0x200
+	S_IWGRP                        = 0x10
+	S_IWOTH                        = 0x2
+	S_IWRITE                       = 0x80
+	S_IWUSR                        = 0x80
+	S_IXGRP                        = 0x8
+	S_IXOTH                        = 0x1
+	S_IXUSR                        = 0x40
+	TAB0                           = 0x0
+	TAB3                           = 0x4
+	TABDLY                         = 0x4
+	TCIFLUSH                       = 0x1
+	TCIOFF                         = 0x3
+	TCIOFLUSH                      = 0x3
+	TCION                          = 0x4
+	TCOFLUSH                       = 0x2
+	TCOOFF                         = 0x1
+	TCOON                          = 0x2
+	TCP_CA_NAME_MAX                = 0x10
+	TCP_CCALGOOPT                  = 0x41
+	TCP_CONGESTION                 = 0x40
+	TCP_FASTOPEN                   = 0x401
+	TCP_FUNCTION_BLK               = 0x2000
+	TCP_FUNCTION_NAME_LEN_MAX      = 0x20
+	TCP_INFO                       = 0x20
+	TCP_KEEPCNT                    = 0x400
+	TCP_KEEPIDLE                   = 0x100
+	TCP_KEEPINIT                   = 0x80
+	TCP_KEEPINTVL                  = 0x200
+	TCP_MAXBURST                   = 0x4
+	TCP_MAXHLEN                    = 0x3c
+	TCP_MAXOLEN                    = 0x28
+	TCP_MAXSEG                     = 0x2
+	TCP_MAXWIN                     = 0xffff
+	TCP_MAX_SACK                   = 0x4
+	TCP_MAX_WINSHIFT               = 0xe
+	TCP_MD5SIG                     = 0x10
+	TCP_MINMSS                     = 0xd8
+	TCP_MSS                        = 0x218
+	TCP_NODELAY                    = 0x1
+	TCP_NOOPT                      = 0x8
+	TCP_NOPUSH                     = 0x4
+	TCP_PCAP_IN                    = 0x1000
+	TCP_PCAP_OUT                   = 0x800
+	TCP_VENDOR                     = 0x80000000
+	TCSAFLUSH                      = 0x2
+	TIOCCBRK                       = 0x2000747a
+	TIOCCDTR                       = 0x20007478
+	TIOCCONS                       = 0x80047462
+	TIOCDRAIN                      = 0x2000745e
+	TIOCEXCL                       = 0x2000740d
+	TIOCEXT                        = 0x80047460
+	TIOCFLUSH                      = 0x80047410
+	TIOCGDRAINWAIT                 = 0x40047456
+	TIOCGETA                       = 0x402c7413
+	TIOCGETD                       = 0x4004741a
+	TIOCGPGRP                      = 0x40047477
+	TIOCGPTN                       = 0x4004740f
+	TIOCGSID                       = 0x40047463
+	TIOCGWINSZ                     = 0x40087468
+	TIOCMBIC                       = 0x8004746b
+	TIOCMBIS                       = 0x8004746c
+	TIOCMGDTRWAIT                  = 0x4004745a
+	TIOCMGET                       = 0x4004746a
+	TIOCMSDTRWAIT                  = 0x8004745b
+	TIOCMSET                       = 0x8004746d
+	TIOCM_CAR                      = 0x40
+	TIOCM_CD                       = 0x40
+	TIOCM_CTS                      = 0x20
+	TIOCM_DCD                      = 0x40
+	TIOCM_DSR                      = 0x100
+	TIOCM_DTR                      = 0x2
+	TIOCM_LE                       = 0x1
+	TIOCM_RI                       = 0x80
+	TIOCM_RNG                      = 0x80
+	TIOCM_RTS                      = 0x4
+	TIOCM_SR                       = 0x10
+	TIOCM_ST                       = 0x8
+	TIOCNOTTY                      = 0x20007471
+	TIOCNXCL                       = 0x2000740e
+	TIOCOUTQ                       = 0x40047473
+	TIOCPKT                        = 0x80047470
+	TIOCPKT_DATA                   = 0x0
+	TIOCPKT_DOSTOP                 = 0x20
+	TIOCPKT_FLUSHREAD              = 0x1
+	TIOCPKT_FLUSHWRITE             = 0x2
+	TIOCPKT_IOCTL                  = 0x40
+	TIOCPKT_NOSTOP                 = 0x10
+	TIOCPKT_START                  = 0x8
+	TIOCPKT_STOP                   = 0x4
+	TIOCPTMASTER                   = 0x2000741c
+	TIOCSBRK                       = 0x2000747b
+	TIOCSCTTY                      = 0x20007461
+	TIOCSDRAINWAIT                 = 0x80047457
+	TIOCSDTR                       = 0x20007479
+	TIOCSETA                       = 0x802c7414
+	TIOCSETAF                      = 0x802c7416
+	TIOCSETAW                      = 0x802c7415
+	TIOCSETD                       = 0x8004741b
+	TIOCSIG                        = 0x2004745f
+	TIOCSPGRP                      = 0x80047476
+	TIOCSTART                      = 0x2000746e
+	TIOCSTAT                       = 0x20007465
+	TIOCSTI                        = 0x80017472
+	TIOCSTOP                       = 0x2000746f
+	TIOCSWINSZ                     = 0x80087467
+	TIOCTIMESTAMP                  = 0x40107459
+	TIOCUCNTL                      = 0x80047466
+	TOSTOP                         = 0x400000
+	VDISCARD                       = 0xf
+	VDSUSP                         = 0xb
+	VEOF                           = 0x0
+	VEOL                           = 0x1
+	VEOL2                          = 0x2
+	VERASE                         = 0x3
+	VERASE2                        = 0x7
+	VINTR                          = 0x8
+	VKILL                          = 0x5
+	VLNEXT                         = 0xe
+	VMIN                           = 0x10
+	VQUIT                          = 0x9
+	VREPRINT                       = 0x6
+	VSTART                         = 0xc
+	VSTATUS                        = 0x12
+	VSTOP                          = 0xd
+	VSUSP                          = 0xa
+	VTIME                          = 0x11
+	VWERASE                        = 0x4
+	WCONTINUED                     = 0x4
+	WCOREFLAG                      = 0x80
+	WEXITED                        = 0x10
+	WLINUXCLONE                    = 0x80000000
+	WNOHANG                        = 0x1
+	WNOWAIT                        = 0x8
+	WSTOPPED                       = 0x2
+	WTRAPPED                       = 0x20
+	WUNTRACED                      = 0x2
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADF           = syscall.Errno(0x9)
+	EBADMSG         = syscall.Errno(0x59)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x55)
+	ECAPMODE        = syscall.Errno(0x5e)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDOM            = syscall.Errno(0x21)
+	EDOOFUS         = syscall.Errno(0x58)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x52)
+	EILSEQ          = syscall.Errno(0x56)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x60)
+	ELOOP           = syscall.Errno(0x3e)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	EMULTIHOP       = syscall.Errno(0x5a)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x57)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOLINK         = syscall.Errno(0x5b)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x53)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCAPABLE     = syscall.Errno(0x5d)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTRECOVERABLE = syscall.Errno(0x5f)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x2d)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x2d)
+	EOVERFLOW       = syscall.Errno(0x54)
+	EOWNERDEAD      = syscall.Errno(0x60)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTO          = syscall.Errno(0x5c)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGLIBRT  = syscall.Signal(0x21)
+	SIGLWP    = syscall.Signal(0x20)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTHR    = syscall.Signal(0x20)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "EAGAIN", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "EOPNOTSUPP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "operation timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disc quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC prog. not avail"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EIDRM", "identifier removed"},
+	{83, "ENOMSG", "no message of desired type"},
+	{84, "EOVERFLOW", "value too large to be stored in data type"},
+	{85, "ECANCELED", "operation canceled"},
+	{86, "EILSEQ", "illegal byte sequence"},
+	{87, "ENOATTR", "attribute not found"},
+	{88, "EDOOFUS", "programming error"},
+	{89, "EBADMSG", "bad message"},
+	{90, "EMULTIHOP", "multihop attempted"},
+	{91, "ENOLINK", "link has been severed"},
+	{92, "EPROTO", "protocol error"},
+	{93, "ENOTCAPABLE", "capabilities insufficient"},
+	{94, "ECAPMODE", "not permitted in capability mode"},
+	{95, "ENOTRECOVERABLE", "state not recoverable"},
+	{96, "EOWNERDEAD", "previous owner died"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGIOT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "suspended (signal)"},
+	{18, "SIGTSTP", "suspended"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+	{32, "SIGTHR", "unknown signal"},
+	{33, "SIGLIBRT", "unknown signal"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_freebsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_freebsd_arm64.go
new file mode 100644
index 000000000..7ce9c0081
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_freebsd_arm64.go
@@ -0,0 +1,1936 @@
+// mkerrors.sh -m64
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm64,freebsd
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -m64 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                   = 0x10
+	AF_ARP                         = 0x23
+	AF_ATM                         = 0x1e
+	AF_BLUETOOTH                   = 0x24
+	AF_CCITT                       = 0xa
+	AF_CHAOS                       = 0x5
+	AF_CNT                         = 0x15
+	AF_COIP                        = 0x14
+	AF_DATAKIT                     = 0x9
+	AF_DECnet                      = 0xc
+	AF_DLI                         = 0xd
+	AF_E164                        = 0x1a
+	AF_ECMA                        = 0x8
+	AF_HYLINK                      = 0xf
+	AF_IEEE80211                   = 0x25
+	AF_IMPLINK                     = 0x3
+	AF_INET                        = 0x2
+	AF_INET6                       = 0x1c
+	AF_INET6_SDP                   = 0x2a
+	AF_INET_SDP                    = 0x28
+	AF_IPX                         = 0x17
+	AF_ISDN                        = 0x1a
+	AF_ISO                         = 0x7
+	AF_LAT                         = 0xe
+	AF_LINK                        = 0x12
+	AF_LOCAL                       = 0x1
+	AF_MAX                         = 0x2a
+	AF_NATM                        = 0x1d
+	AF_NETBIOS                     = 0x6
+	AF_NETGRAPH                    = 0x20
+	AF_OSI                         = 0x7
+	AF_PUP                         = 0x4
+	AF_ROUTE                       = 0x11
+	AF_SCLUSTER                    = 0x22
+	AF_SIP                         = 0x18
+	AF_SLOW                        = 0x21
+	AF_SNA                         = 0xb
+	AF_UNIX                        = 0x1
+	AF_UNSPEC                      = 0x0
+	AF_VENDOR00                    = 0x27
+	AF_VENDOR01                    = 0x29
+	AF_VENDOR02                    = 0x2b
+	AF_VENDOR03                    = 0x2d
+	AF_VENDOR04                    = 0x2f
+	AF_VENDOR05                    = 0x31
+	AF_VENDOR06                    = 0x33
+	AF_VENDOR07                    = 0x35
+	AF_VENDOR08                    = 0x37
+	AF_VENDOR09                    = 0x39
+	AF_VENDOR10                    = 0x3b
+	AF_VENDOR11                    = 0x3d
+	AF_VENDOR12                    = 0x3f
+	AF_VENDOR13                    = 0x41
+	AF_VENDOR14                    = 0x43
+	AF_VENDOR15                    = 0x45
+	AF_VENDOR16                    = 0x47
+	AF_VENDOR17                    = 0x49
+	AF_VENDOR18                    = 0x4b
+	AF_VENDOR19                    = 0x4d
+	AF_VENDOR20                    = 0x4f
+	AF_VENDOR21                    = 0x51
+	AF_VENDOR22                    = 0x53
+	AF_VENDOR23                    = 0x55
+	AF_VENDOR24                    = 0x57
+	AF_VENDOR25                    = 0x59
+	AF_VENDOR26                    = 0x5b
+	AF_VENDOR27                    = 0x5d
+	AF_VENDOR28                    = 0x5f
+	AF_VENDOR29                    = 0x61
+	AF_VENDOR30                    = 0x63
+	AF_VENDOR31                    = 0x65
+	AF_VENDOR32                    = 0x67
+	AF_VENDOR33                    = 0x69
+	AF_VENDOR34                    = 0x6b
+	AF_VENDOR35                    = 0x6d
+	AF_VENDOR36                    = 0x6f
+	AF_VENDOR37                    = 0x71
+	AF_VENDOR38                    = 0x73
+	AF_VENDOR39                    = 0x75
+	AF_VENDOR40                    = 0x77
+	AF_VENDOR41                    = 0x79
+	AF_VENDOR42                    = 0x7b
+	AF_VENDOR43                    = 0x7d
+	AF_VENDOR44                    = 0x7f
+	AF_VENDOR45                    = 0x81
+	AF_VENDOR46                    = 0x83
+	AF_VENDOR47                    = 0x85
+	ALTWERASE                      = 0x200
+	B0                             = 0x0
+	B110                           = 0x6e
+	B115200                        = 0x1c200
+	B1200                          = 0x4b0
+	B134                           = 0x86
+	B14400                         = 0x3840
+	B150                           = 0x96
+	B1800                          = 0x708
+	B19200                         = 0x4b00
+	B200                           = 0xc8
+	B230400                        = 0x38400
+	B2400                          = 0x960
+	B28800                         = 0x7080
+	B300                           = 0x12c
+	B38400                         = 0x9600
+	B460800                        = 0x70800
+	B4800                          = 0x12c0
+	B50                            = 0x32
+	B57600                         = 0xe100
+	B600                           = 0x258
+	B7200                          = 0x1c20
+	B75                            = 0x4b
+	B76800                         = 0x12c00
+	B921600                        = 0xe1000
+	B9600                          = 0x2580
+	BIOCFEEDBACK                   = 0x8004427c
+	BIOCFLUSH                      = 0x20004268
+	BIOCGBLEN                      = 0x40044266
+	BIOCGDIRECTION                 = 0x40044276
+	BIOCGDLT                       = 0x4004426a
+	BIOCGDLTLIST                   = 0xc0104279
+	BIOCGETBUFMODE                 = 0x4004427d
+	BIOCGETIF                      = 0x4020426b
+	BIOCGETZMAX                    = 0x4008427f
+	BIOCGHDRCMPLT                  = 0x40044274
+	BIOCGRSIG                      = 0x40044272
+	BIOCGRTIMEOUT                  = 0x4010426e
+	BIOCGSEESENT                   = 0x40044276
+	BIOCGSTATS                     = 0x4008426f
+	BIOCGTSTAMP                    = 0x40044283
+	BIOCIMMEDIATE                  = 0x80044270
+	BIOCLOCK                       = 0x2000427a
+	BIOCPROMISC                    = 0x20004269
+	BIOCROTZBUF                    = 0x40184280
+	BIOCSBLEN                      = 0xc0044266
+	BIOCSDIRECTION                 = 0x80044277
+	BIOCSDLT                       = 0x80044278
+	BIOCSETBUFMODE                 = 0x8004427e
+	BIOCSETF                       = 0x80104267
+	BIOCSETFNR                     = 0x80104282
+	BIOCSETIF                      = 0x8020426c
+	BIOCSETWF                      = 0x8010427b
+	BIOCSETZBUF                    = 0x80184281
+	BIOCSHDRCMPLT                  = 0x80044275
+	BIOCSRSIG                      = 0x80044273
+	BIOCSRTIMEOUT                  = 0x8010426d
+	BIOCSSEESENT                   = 0x80044277
+	BIOCSTSTAMP                    = 0x80044284
+	BIOCVERSION                    = 0x40044271
+	BPF_A                          = 0x10
+	BPF_ABS                        = 0x20
+	BPF_ADD                        = 0x0
+	BPF_ALIGNMENT                  = 0x8
+	BPF_ALU                        = 0x4
+	BPF_AND                        = 0x50
+	BPF_B                          = 0x10
+	BPF_BUFMODE_BUFFER             = 0x1
+	BPF_BUFMODE_ZBUF               = 0x2
+	BPF_DIV                        = 0x30
+	BPF_H                          = 0x8
+	BPF_IMM                        = 0x0
+	BPF_IND                        = 0x40
+	BPF_JA                         = 0x0
+	BPF_JEQ                        = 0x10
+	BPF_JGE                        = 0x30
+	BPF_JGT                        = 0x20
+	BPF_JMP                        = 0x5
+	BPF_JSET                       = 0x40
+	BPF_K                          = 0x0
+	BPF_LD                         = 0x0
+	BPF_LDX                        = 0x1
+	BPF_LEN                        = 0x80
+	BPF_LSH                        = 0x60
+	BPF_MAJOR_VERSION              = 0x1
+	BPF_MAXBUFSIZE                 = 0x80000
+	BPF_MAXINSNS                   = 0x200
+	BPF_MEM                        = 0x60
+	BPF_MEMWORDS                   = 0x10
+	BPF_MINBUFSIZE                 = 0x20
+	BPF_MINOR_VERSION              = 0x1
+	BPF_MISC                       = 0x7
+	BPF_MOD                        = 0x90
+	BPF_MSH                        = 0xa0
+	BPF_MUL                        = 0x20
+	BPF_NEG                        = 0x80
+	BPF_OR                         = 0x40
+	BPF_RELEASE                    = 0x30bb6
+	BPF_RET                        = 0x6
+	BPF_RSH                        = 0x70
+	BPF_ST                         = 0x2
+	BPF_STX                        = 0x3
+	BPF_SUB                        = 0x10
+	BPF_TAX                        = 0x0
+	BPF_TXA                        = 0x80
+	BPF_T_BINTIME                  = 0x2
+	BPF_T_BINTIME_FAST             = 0x102
+	BPF_T_BINTIME_MONOTONIC        = 0x202
+	BPF_T_BINTIME_MONOTONIC_FAST   = 0x302
+	BPF_T_FAST                     = 0x100
+	BPF_T_FLAG_MASK                = 0x300
+	BPF_T_FORMAT_MASK              = 0x3
+	BPF_T_MICROTIME                = 0x0
+	BPF_T_MICROTIME_FAST           = 0x100
+	BPF_T_MICROTIME_MONOTONIC      = 0x200
+	BPF_T_MICROTIME_MONOTONIC_FAST = 0x300
+	BPF_T_MONOTONIC                = 0x200
+	BPF_T_MONOTONIC_FAST           = 0x300
+	BPF_T_NANOTIME                 = 0x1
+	BPF_T_NANOTIME_FAST            = 0x101
+	BPF_T_NANOTIME_MONOTONIC       = 0x201
+	BPF_T_NANOTIME_MONOTONIC_FAST  = 0x301
+	BPF_T_NONE                     = 0x3
+	BPF_T_NORMAL                   = 0x0
+	BPF_W                          = 0x0
+	BPF_X                          = 0x8
+	BPF_XOR                        = 0xa0
+	BRKINT                         = 0x2
+	CAP_ACCEPT                     = 0x200000020000000
+	CAP_ACL_CHECK                  = 0x400000000010000
+	CAP_ACL_DELETE                 = 0x400000000020000
+	CAP_ACL_GET                    = 0x400000000040000
+	CAP_ACL_SET                    = 0x400000000080000
+	CAP_ALL0                       = 0x20007ffffffffff
+	CAP_ALL1                       = 0x4000000001fffff
+	CAP_BIND                       = 0x200000040000000
+	CAP_BINDAT                     = 0x200008000000400
+	CAP_CHFLAGSAT                  = 0x200000000001400
+	CAP_CONNECT                    = 0x200000080000000
+	CAP_CONNECTAT                  = 0x200010000000400
+	CAP_CREATE                     = 0x200000000000040
+	CAP_EVENT                      = 0x400000000000020
+	CAP_EXTATTR_DELETE             = 0x400000000001000
+	CAP_EXTATTR_GET                = 0x400000000002000
+	CAP_EXTATTR_LIST               = 0x400000000004000
+	CAP_EXTATTR_SET                = 0x400000000008000
+	CAP_FCHDIR                     = 0x200000000000800
+	CAP_FCHFLAGS                   = 0x200000000001000
+	CAP_FCHMOD                     = 0x200000000002000
+	CAP_FCHMODAT                   = 0x200000000002400
+	CAP_FCHOWN                     = 0x200000000004000
+	CAP_FCHOWNAT                   = 0x200000000004400
+	CAP_FCNTL                      = 0x200000000008000
+	CAP_FCNTL_ALL                  = 0x78
+	CAP_FCNTL_GETFL                = 0x8
+	CAP_FCNTL_GETOWN               = 0x20
+	CAP_FCNTL_SETFL                = 0x10
+	CAP_FCNTL_SETOWN               = 0x40
+	CAP_FEXECVE                    = 0x200000000000080
+	CAP_FLOCK                      = 0x200000000010000
+	CAP_FPATHCONF                  = 0x200000000020000
+	CAP_FSCK                       = 0x200000000040000
+	CAP_FSTAT                      = 0x200000000080000
+	CAP_FSTATAT                    = 0x200000000080400
+	CAP_FSTATFS                    = 0x200000000100000
+	CAP_FSYNC                      = 0x200000000000100
+	CAP_FTRUNCATE                  = 0x200000000000200
+	CAP_FUTIMES                    = 0x200000000200000
+	CAP_FUTIMESAT                  = 0x200000000200400
+	CAP_GETPEERNAME                = 0x200000100000000
+	CAP_GETSOCKNAME                = 0x200000200000000
+	CAP_GETSOCKOPT                 = 0x200000400000000
+	CAP_IOCTL                      = 0x400000000000080
+	CAP_IOCTLS_ALL                 = 0x7fffffffffffffff
+	CAP_KQUEUE                     = 0x400000000100040
+	CAP_KQUEUE_CHANGE              = 0x400000000100000
+	CAP_KQUEUE_EVENT               = 0x400000000000040
+	CAP_LINKAT_SOURCE              = 0x200020000000400
+	CAP_LINKAT_TARGET              = 0x200000000400400
+	CAP_LISTEN                     = 0x200000800000000
+	CAP_LOOKUP                     = 0x200000000000400
+	CAP_MAC_GET                    = 0x400000000000001
+	CAP_MAC_SET                    = 0x400000000000002
+	CAP_MKDIRAT                    = 0x200000000800400
+	CAP_MKFIFOAT                   = 0x200000001000400
+	CAP_MKNODAT                    = 0x200000002000400
+	CAP_MMAP                       = 0x200000000000010
+	CAP_MMAP_R                     = 0x20000000000001d
+	CAP_MMAP_RW                    = 0x20000000000001f
+	CAP_MMAP_RWX                   = 0x20000000000003f
+	CAP_MMAP_RX                    = 0x20000000000003d
+	CAP_MMAP_W                     = 0x20000000000001e
+	CAP_MMAP_WX                    = 0x20000000000003e
+	CAP_MMAP_X                     = 0x20000000000003c
+	CAP_PDGETPID                   = 0x400000000000200
+	CAP_PDKILL                     = 0x400000000000800
+	CAP_PDWAIT                     = 0x400000000000400
+	CAP_PEELOFF                    = 0x200001000000000
+	CAP_POLL_EVENT                 = 0x400000000000020
+	CAP_PREAD                      = 0x20000000000000d
+	CAP_PWRITE                     = 0x20000000000000e
+	CAP_READ                       = 0x200000000000001
+	CAP_RECV                       = 0x200000000000001
+	CAP_RENAMEAT_SOURCE            = 0x200000004000400
+	CAP_RENAMEAT_TARGET            = 0x200040000000400
+	CAP_RIGHTS_VERSION             = 0x0
+	CAP_RIGHTS_VERSION_00          = 0x0
+	CAP_SEEK                       = 0x20000000000000c
+	CAP_SEEK_TELL                  = 0x200000000000004
+	CAP_SEM_GETVALUE               = 0x400000000000004
+	CAP_SEM_POST                   = 0x400000000000008
+	CAP_SEM_WAIT                   = 0x400000000000010
+	CAP_SEND                       = 0x200000000000002
+	CAP_SETSOCKOPT                 = 0x200002000000000
+	CAP_SHUTDOWN                   = 0x200004000000000
+	CAP_SOCK_CLIENT                = 0x200007780000003
+	CAP_SOCK_SERVER                = 0x200007f60000003
+	CAP_SYMLINKAT                  = 0x200000008000400
+	CAP_TTYHOOK                    = 0x400000000000100
+	CAP_UNLINKAT                   = 0x200000010000400
+	CAP_UNUSED0_44                 = 0x200080000000000
+	CAP_UNUSED0_57                 = 0x300000000000000
+	CAP_UNUSED1_22                 = 0x400000000200000
+	CAP_UNUSED1_57                 = 0x500000000000000
+	CAP_WRITE                      = 0x200000000000002
+	CFLUSH                         = 0xf
+	CLOCAL                         = 0x8000
+	CLOCK_MONOTONIC                = 0x4
+	CLOCK_MONOTONIC_FAST           = 0xc
+	CLOCK_MONOTONIC_PRECISE        = 0xb
+	CLOCK_PROCESS_CPUTIME_ID       = 0xf
+	CLOCK_PROF                     = 0x2
+	CLOCK_REALTIME                 = 0x0
+	CLOCK_REALTIME_FAST            = 0xa
+	CLOCK_REALTIME_PRECISE         = 0x9
+	CLOCK_SECOND                   = 0xd
+	CLOCK_THREAD_CPUTIME_ID        = 0xe
+	CLOCK_UPTIME                   = 0x5
+	CLOCK_UPTIME_FAST              = 0x8
+	CLOCK_UPTIME_PRECISE           = 0x7
+	CLOCK_VIRTUAL                  = 0x1
+	CPUSTATES                      = 0x5
+	CP_IDLE                        = 0x4
+	CP_INTR                        = 0x3
+	CP_NICE                        = 0x1
+	CP_SYS                         = 0x2
+	CP_USER                        = 0x0
+	CREAD                          = 0x800
+	CRTSCTS                        = 0x30000
+	CS5                            = 0x0
+	CS6                            = 0x100
+	CS7                            = 0x200
+	CS8                            = 0x300
+	CSIZE                          = 0x300
+	CSTART                         = 0x11
+	CSTATUS                        = 0x14
+	CSTOP                          = 0x13
+	CSTOPB                         = 0x400
+	CSUSP                          = 0x1a
+	CTL_HW                         = 0x6
+	CTL_KERN                       = 0x1
+	CTL_MAXNAME                    = 0x18
+	CTL_NET                        = 0x4
+	DIOCGATTR                      = 0xc148648e
+	DIOCGDELETE                    = 0x80106488
+	DIOCGFLUSH                     = 0x20006487
+	DIOCGFRONTSTUFF                = 0x40086486
+	DIOCGFWHEADS                   = 0x40046483
+	DIOCGFWSECTORS                 = 0x40046482
+	DIOCGIDENT                     = 0x41006489
+	DIOCGMEDIASIZE                 = 0x40086481
+	DIOCGPHYSPATH                  = 0x4400648d
+	DIOCGPROVIDERNAME              = 0x4400648a
+	DIOCGSECTORSIZE                = 0x40046480
+	DIOCGSTRIPEOFFSET              = 0x4008648c
+	DIOCGSTRIPESIZE                = 0x4008648b
+	DIOCSKERNELDUMP                = 0x80506490
+	DIOCSKERNELDUMP_FREEBSD11      = 0x80046485
+	DIOCZONECMD                    = 0xc080648f
+	DLT_A429                       = 0xb8
+	DLT_A653_ICM                   = 0xb9
+	DLT_AIRONET_HEADER             = 0x78
+	DLT_AOS                        = 0xde
+	DLT_APPLE_IP_OVER_IEEE1394     = 0x8a
+	DLT_ARCNET                     = 0x7
+	DLT_ARCNET_LINUX               = 0x81
+	DLT_ATM_CLIP                   = 0x13
+	DLT_ATM_RFC1483                = 0xb
+	DLT_AURORA                     = 0x7e
+	DLT_AX25                       = 0x3
+	DLT_AX25_KISS                  = 0xca
+	DLT_BACNET_MS_TP               = 0xa5
+	DLT_BLUETOOTH_BREDR_BB         = 0xff
+	DLT_BLUETOOTH_HCI_H4           = 0xbb
+	DLT_BLUETOOTH_HCI_H4_WITH_PHDR = 0xc9
+	DLT_BLUETOOTH_LE_LL            = 0xfb
+	DLT_BLUETOOTH_LE_LL_WITH_PHDR  = 0x100
+	DLT_BLUETOOTH_LINUX_MONITOR    = 0xfe
+	DLT_CAN20B                     = 0xbe
+	DLT_CAN_SOCKETCAN              = 0xe3
+	DLT_CHAOS                      = 0x5
+	DLT_CHDLC                      = 0x68
+	DLT_CISCO_IOS                  = 0x76
+	DLT_CLASS_NETBSD_RAWAF         = 0x2240000
+	DLT_C_HDLC                     = 0x68
+	DLT_C_HDLC_WITH_DIR            = 0xcd
+	DLT_DBUS                       = 0xe7
+	DLT_DECT                       = 0xdd
+	DLT_DISPLAYPORT_AUX            = 0x113
+	DLT_DOCSIS                     = 0x8f
+	DLT_DOCSIS31_XRA31             = 0x111
+	DLT_DVB_CI                     = 0xeb
+	DLT_ECONET                     = 0x73
+	DLT_EN10MB                     = 0x1
+	DLT_EN3MB                      = 0x2
+	DLT_ENC                        = 0x6d
+	DLT_EPON                       = 0x103
+	DLT_ERF                        = 0xc5
+	DLT_ERF_ETH                    = 0xaf
+	DLT_ERF_POS                    = 0xb0
+	DLT_ETHERNET_MPACKET           = 0x112
+	DLT_FC_2                       = 0xe0
+	DLT_FC_2_WITH_FRAME_DELIMS     = 0xe1
+	DLT_FDDI                       = 0xa
+	DLT_FLEXRAY                    = 0xd2
+	DLT_FRELAY                     = 0x6b
+	DLT_FRELAY_WITH_DIR            = 0xce
+	DLT_GCOM_SERIAL                = 0xad
+	DLT_GCOM_T1E1                  = 0xac
+	DLT_GPF_F                      = 0xab
+	DLT_GPF_T                      = 0xaa
+	DLT_GPRS_LLC                   = 0xa9
+	DLT_GSMTAP_ABIS                = 0xda
+	DLT_GSMTAP_UM                  = 0xd9
+	DLT_IBM_SN                     = 0x92
+	DLT_IBM_SP                     = 0x91
+	DLT_IEEE802                    = 0x6
+	DLT_IEEE802_11                 = 0x69
+	DLT_IEEE802_11_RADIO           = 0x7f
+	DLT_IEEE802_11_RADIO_AVS       = 0xa3
+	DLT_IEEE802_15_4               = 0xc3
+	DLT_IEEE802_15_4_LINUX         = 0xbf
+	DLT_IEEE802_15_4_NOFCS         = 0xe6
+	DLT_IEEE802_15_4_NONASK_PHY    = 0xd7
+	DLT_IEEE802_16_MAC_CPS         = 0xbc
+	DLT_IEEE802_16_MAC_CPS_RADIO   = 0xc1
+	DLT_INFINIBAND                 = 0xf7
+	DLT_IPFILTER                   = 0x74
+	DLT_IPMB                       = 0xc7
+	DLT_IPMB_LINUX                 = 0xd1
+	DLT_IPMI_HPM_2                 = 0x104
+	DLT_IPNET                      = 0xe2
+	DLT_IPOIB                      = 0xf2
+	DLT_IPV4                       = 0xe4
+	DLT_IPV6                       = 0xe5
+	DLT_IP_OVER_FC                 = 0x7a
+	DLT_ISO_14443                  = 0x108
+	DLT_JUNIPER_ATM1               = 0x89
+	DLT_JUNIPER_ATM2               = 0x87
+	DLT_JUNIPER_ATM_CEMIC          = 0xee
+	DLT_JUNIPER_CHDLC              = 0xb5
+	DLT_JUNIPER_ES                 = 0x84
+	DLT_JUNIPER_ETHER              = 0xb2
+	DLT_JUNIPER_FIBRECHANNEL       = 0xea
+	DLT_JUNIPER_FRELAY             = 0xb4
+	DLT_JUNIPER_GGSN               = 0x85
+	DLT_JUNIPER_ISM                = 0xc2
+	DLT_JUNIPER_MFR                = 0x86
+	DLT_JUNIPER_MLFR               = 0x83
+	DLT_JUNIPER_MLPPP              = 0x82
+	DLT_JUNIPER_MONITOR            = 0xa4
+	DLT_JUNIPER_PIC_PEER           = 0xae
+	DLT_JUNIPER_PPP                = 0xb3
+	DLT_JUNIPER_PPPOE              = 0xa7
+	DLT_JUNIPER_PPPOE_ATM          = 0xa8
+	DLT_JUNIPER_SERVICES           = 0x88
+	DLT_JUNIPER_SRX_E2E            = 0xe9
+	DLT_JUNIPER_ST                 = 0xc8
+	DLT_JUNIPER_VP                 = 0xb7
+	DLT_JUNIPER_VS                 = 0xe8
+	DLT_LAPB_WITH_DIR              = 0xcf
+	DLT_LAPD                       = 0xcb
+	DLT_LIN                        = 0xd4
+	DLT_LINUX_EVDEV                = 0xd8
+	DLT_LINUX_IRDA                 = 0x90
+	DLT_LINUX_LAPD                 = 0xb1
+	DLT_LINUX_PPP_WITHDIRECTION    = 0xa6
+	DLT_LINUX_SLL                  = 0x71
+	DLT_LOOP                       = 0x6c
+	DLT_LORATAP                    = 0x10e
+	DLT_LTALK                      = 0x72
+	DLT_MATCHING_MAX               = 0x113
+	DLT_MATCHING_MIN               = 0x68
+	DLT_MFR                        = 0xb6
+	DLT_MOST                       = 0xd3
+	DLT_MPEG_2_TS                  = 0xf3
+	DLT_MPLS                       = 0xdb
+	DLT_MTP2                       = 0x8c
+	DLT_MTP2_WITH_PHDR             = 0x8b
+	DLT_MTP3                       = 0x8d
+	DLT_MUX27010                   = 0xec
+	DLT_NETANALYZER                = 0xf0
+	DLT_NETANALYZER_TRANSPARENT    = 0xf1
+	DLT_NETLINK                    = 0xfd
+	DLT_NFC_LLCP                   = 0xf5
+	DLT_NFLOG                      = 0xef
+	DLT_NG40                       = 0xf4
+	DLT_NORDIC_BLE                 = 0x110
+	DLT_NULL                       = 0x0
+	DLT_OPENFLOW                   = 0x10b
+	DLT_PCI_EXP                    = 0x7d
+	DLT_PFLOG                      = 0x75
+	DLT_PFSYNC                     = 0x79
+	DLT_PKTAP                      = 0x102
+	DLT_PPI                        = 0xc0
+	DLT_PPP                        = 0x9
+	DLT_PPP_BSDOS                  = 0xe
+	DLT_PPP_ETHER                  = 0x33
+	DLT_PPP_PPPD                   = 0xa6
+	DLT_PPP_SERIAL                 = 0x32
+	DLT_PPP_WITH_DIR               = 0xcc
+	DLT_PPP_WITH_DIRECTION         = 0xa6
+	DLT_PRISM_HEADER               = 0x77
+	DLT_PROFIBUS_DL                = 0x101
+	DLT_PRONET                     = 0x4
+	DLT_RAIF1                      = 0xc6
+	DLT_RAW                        = 0xc
+	DLT_RDS                        = 0x109
+	DLT_REDBACK_SMARTEDGE          = 0x20
+	DLT_RIO                        = 0x7c
+	DLT_RTAC_SERIAL                = 0xfa
+	DLT_SCCP                       = 0x8e
+	DLT_SCTP                       = 0xf8
+	DLT_SDLC                       = 0x10c
+	DLT_SITA                       = 0xc4
+	DLT_SLIP                       = 0x8
+	DLT_SLIP_BSDOS                 = 0xd
+	DLT_STANAG_5066_D_PDU          = 0xed
+	DLT_SUNATM                     = 0x7b
+	DLT_SYMANTEC_FIREWALL          = 0x63
+	DLT_TI_LLN_SNIFFER             = 0x10d
+	DLT_TZSP                       = 0x80
+	DLT_USB                        = 0xba
+	DLT_USBPCAP                    = 0xf9
+	DLT_USB_DARWIN                 = 0x10a
+	DLT_USB_FREEBSD                = 0xba
+	DLT_USB_LINUX                  = 0xbd
+	DLT_USB_LINUX_MMAPPED          = 0xdc
+	DLT_USER0                      = 0x93
+	DLT_USER1                      = 0x94
+	DLT_USER10                     = 0x9d
+	DLT_USER11                     = 0x9e
+	DLT_USER12                     = 0x9f
+	DLT_USER13                     = 0xa0
+	DLT_USER14                     = 0xa1
+	DLT_USER15                     = 0xa2
+	DLT_USER2                      = 0x95
+	DLT_USER3                      = 0x96
+	DLT_USER4                      = 0x97
+	DLT_USER5                      = 0x98
+	DLT_USER6                      = 0x99
+	DLT_USER7                      = 0x9a
+	DLT_USER8                      = 0x9b
+	DLT_USER9                      = 0x9c
+	DLT_VSOCK                      = 0x10f
+	DLT_WATTSTOPPER_DLM            = 0x107
+	DLT_WIHART                     = 0xdf
+	DLT_WIRESHARK_UPPER_PDU        = 0xfc
+	DLT_X2E_SERIAL                 = 0xd5
+	DLT_X2E_XORAYA                 = 0xd6
+	DLT_ZWAVE_R1_R2                = 0x105
+	DLT_ZWAVE_R3                   = 0x106
+	DT_BLK                         = 0x6
+	DT_CHR                         = 0x2
+	DT_DIR                         = 0x4
+	DT_FIFO                        = 0x1
+	DT_LNK                         = 0xa
+	DT_REG                         = 0x8
+	DT_SOCK                        = 0xc
+	DT_UNKNOWN                     = 0x0
+	DT_WHT                         = 0xe
+	ECHO                           = 0x8
+	ECHOCTL                        = 0x40
+	ECHOE                          = 0x2
+	ECHOK                          = 0x4
+	ECHOKE                         = 0x1
+	ECHONL                         = 0x10
+	ECHOPRT                        = 0x20
+	EVFILT_AIO                     = -0x3
+	EVFILT_EMPTY                   = -0xd
+	EVFILT_FS                      = -0x9
+	EVFILT_LIO                     = -0xa
+	EVFILT_PROC                    = -0x5
+	EVFILT_PROCDESC                = -0x8
+	EVFILT_READ                    = -0x1
+	EVFILT_SENDFILE                = -0xc
+	EVFILT_SIGNAL                  = -0x6
+	EVFILT_SYSCOUNT                = 0xd
+	EVFILT_TIMER                   = -0x7
+	EVFILT_USER                    = -0xb
+	EVFILT_VNODE                   = -0x4
+	EVFILT_WRITE                   = -0x2
+	EVNAMEMAP_NAME_SIZE            = 0x40
+	EV_ADD                         = 0x1
+	EV_CLEAR                       = 0x20
+	EV_DELETE                      = 0x2
+	EV_DISABLE                     = 0x8
+	EV_DISPATCH                    = 0x80
+	EV_DROP                        = 0x1000
+	EV_ENABLE                      = 0x4
+	EV_EOF                         = 0x8000
+	EV_ERROR                       = 0x4000
+	EV_FLAG1                       = 0x2000
+	EV_FLAG2                       = 0x4000
+	EV_FORCEONESHOT                = 0x100
+	EV_ONESHOT                     = 0x10
+	EV_RECEIPT                     = 0x40
+	EV_SYSFLAGS                    = 0xf000
+	EXTA                           = 0x4b00
+	EXTATTR_MAXNAMELEN             = 0xff
+	EXTATTR_NAMESPACE_EMPTY        = 0x0
+	EXTATTR_NAMESPACE_SYSTEM       = 0x2
+	EXTATTR_NAMESPACE_USER         = 0x1
+	EXTB                           = 0x9600
+	EXTPROC                        = 0x800
+	FD_CLOEXEC                     = 0x1
+	FD_SETSIZE                     = 0x400
+	FLUSHO                         = 0x800000
+	F_CANCEL                       = 0x5
+	F_DUP2FD                       = 0xa
+	F_DUP2FD_CLOEXEC               = 0x12
+	F_DUPFD                        = 0x0
+	F_DUPFD_CLOEXEC                = 0x11
+	F_GETFD                        = 0x1
+	F_GETFL                        = 0x3
+	F_GETLK                        = 0xb
+	F_GETOWN                       = 0x5
+	F_OGETLK                       = 0x7
+	F_OK                           = 0x0
+	F_OSETLK                       = 0x8
+	F_OSETLKW                      = 0x9
+	F_RDAHEAD                      = 0x10
+	F_RDLCK                        = 0x1
+	F_READAHEAD                    = 0xf
+	F_SETFD                        = 0x2
+	F_SETFL                        = 0x4
+	F_SETLK                        = 0xc
+	F_SETLKW                       = 0xd
+	F_SETLK_REMOTE                 = 0xe
+	F_SETOWN                       = 0x6
+	F_UNLCK                        = 0x2
+	F_UNLCKSYS                     = 0x4
+	F_WRLCK                        = 0x3
+	HUPCL                          = 0x4000
+	HW_MACHINE                     = 0x1
+	ICANON                         = 0x100
+	ICMP6_FILTER                   = 0x12
+	ICRNL                          = 0x100
+	IEXTEN                         = 0x400
+	IFAN_ARRIVAL                   = 0x0
+	IFAN_DEPARTURE                 = 0x1
+	IFCAP_WOL_MAGIC                = 0x2000
+	IFF_ALLMULTI                   = 0x200
+	IFF_ALTPHYS                    = 0x4000
+	IFF_BROADCAST                  = 0x2
+	IFF_CANTCHANGE                 = 0x218f52
+	IFF_CANTCONFIG                 = 0x10000
+	IFF_DEBUG                      = 0x4
+	IFF_DRV_OACTIVE                = 0x400
+	IFF_DRV_RUNNING                = 0x40
+	IFF_DYING                      = 0x200000
+	IFF_LINK0                      = 0x1000
+	IFF_LINK1                      = 0x2000
+	IFF_LINK2                      = 0x4000
+	IFF_LOOPBACK                   = 0x8
+	IFF_MONITOR                    = 0x40000
+	IFF_MULTICAST                  = 0x8000
+	IFF_NOARP                      = 0x80
+	IFF_NOGROUP                    = 0x800000
+	IFF_OACTIVE                    = 0x400
+	IFF_POINTOPOINT                = 0x10
+	IFF_PPROMISC                   = 0x20000
+	IFF_PROMISC                    = 0x100
+	IFF_RENAMING                   = 0x400000
+	IFF_RUNNING                    = 0x40
+	IFF_SIMPLEX                    = 0x800
+	IFF_STATICARP                  = 0x80000
+	IFF_UP                         = 0x1
+	IFNAMSIZ                       = 0x10
+	IFT_BRIDGE                     = 0xd1
+	IFT_CARP                       = 0xf8
+	IFT_IEEE1394                   = 0x90
+	IFT_INFINIBAND                 = 0xc7
+	IFT_L2VLAN                     = 0x87
+	IFT_L3IPVLAN                   = 0x88
+	IFT_PPP                        = 0x17
+	IFT_PROPVIRTUAL                = 0x35
+	IGNBRK                         = 0x1
+	IGNCR                          = 0x80
+	IGNPAR                         = 0x4
+	IMAXBEL                        = 0x2000
+	INLCR                          = 0x40
+	INPCK                          = 0x10
+	IN_CLASSA_HOST                 = 0xffffff
+	IN_CLASSA_MAX                  = 0x80
+	IN_CLASSA_NET                  = 0xff000000
+	IN_CLASSA_NSHIFT               = 0x18
+	IN_CLASSB_HOST                 = 0xffff
+	IN_CLASSB_MAX                  = 0x10000
+	IN_CLASSB_NET                  = 0xffff0000
+	IN_CLASSB_NSHIFT               = 0x10
+	IN_CLASSC_HOST                 = 0xff
+	IN_CLASSC_NET                  = 0xffffff00
+	IN_CLASSC_NSHIFT               = 0x8
+	IN_CLASSD_HOST                 = 0xfffffff
+	IN_CLASSD_NET                  = 0xf0000000
+	IN_CLASSD_NSHIFT               = 0x1c
+	IN_LOOPBACKNET                 = 0x7f
+	IN_RFC3021_MASK                = 0xfffffffe
+	IPPROTO_3PC                    = 0x22
+	IPPROTO_ADFS                   = 0x44
+	IPPROTO_AH                     = 0x33
+	IPPROTO_AHIP                   = 0x3d
+	IPPROTO_APES                   = 0x63
+	IPPROTO_ARGUS                  = 0xd
+	IPPROTO_AX25                   = 0x5d
+	IPPROTO_BHA                    = 0x31
+	IPPROTO_BLT                    = 0x1e
+	IPPROTO_BRSATMON               = 0x4c
+	IPPROTO_CARP                   = 0x70
+	IPPROTO_CFTP                   = 0x3e
+	IPPROTO_CHAOS                  = 0x10
+	IPPROTO_CMTP                   = 0x26
+	IPPROTO_CPHB                   = 0x49
+	IPPROTO_CPNX                   = 0x48
+	IPPROTO_DDP                    = 0x25
+	IPPROTO_DGP                    = 0x56
+	IPPROTO_DIVERT                 = 0x102
+	IPPROTO_DONE                   = 0x101
+	IPPROTO_DSTOPTS                = 0x3c
+	IPPROTO_EGP                    = 0x8
+	IPPROTO_EMCON                  = 0xe
+	IPPROTO_ENCAP                  = 0x62
+	IPPROTO_EON                    = 0x50
+	IPPROTO_ESP                    = 0x32
+	IPPROTO_ETHERIP                = 0x61
+	IPPROTO_FRAGMENT               = 0x2c
+	IPPROTO_GGP                    = 0x3
+	IPPROTO_GMTP                   = 0x64
+	IPPROTO_GRE                    = 0x2f
+	IPPROTO_HELLO                  = 0x3f
+	IPPROTO_HIP                    = 0x8b
+	IPPROTO_HMP                    = 0x14
+	IPPROTO_HOPOPTS                = 0x0
+	IPPROTO_ICMP                   = 0x1
+	IPPROTO_ICMPV6                 = 0x3a
+	IPPROTO_IDP                    = 0x16
+	IPPROTO_IDPR                   = 0x23
+	IPPROTO_IDRP                   = 0x2d
+	IPPROTO_IGMP                   = 0x2
+	IPPROTO_IGP                    = 0x55
+	IPPROTO_IGRP                   = 0x58
+	IPPROTO_IL                     = 0x28
+	IPPROTO_INLSP                  = 0x34
+	IPPROTO_INP                    = 0x20
+	IPPROTO_IP                     = 0x0
+	IPPROTO_IPCOMP                 = 0x6c
+	IPPROTO_IPCV                   = 0x47
+	IPPROTO_IPEIP                  = 0x5e
+	IPPROTO_IPIP                   = 0x4
+	IPPROTO_IPPC                   = 0x43
+	IPPROTO_IPV4                   = 0x4
+	IPPROTO_IPV6                   = 0x29
+	IPPROTO_IRTP                   = 0x1c
+	IPPROTO_KRYPTOLAN              = 0x41
+	IPPROTO_LARP                   = 0x5b
+	IPPROTO_LEAF1                  = 0x19
+	IPPROTO_LEAF2                  = 0x1a
+	IPPROTO_MAX                    = 0x100
+	IPPROTO_MEAS                   = 0x13
+	IPPROTO_MH                     = 0x87
+	IPPROTO_MHRP                   = 0x30
+	IPPROTO_MICP                   = 0x5f
+	IPPROTO_MOBILE                 = 0x37
+	IPPROTO_MPLS                   = 0x89
+	IPPROTO_MTP                    = 0x5c
+	IPPROTO_MUX                    = 0x12
+	IPPROTO_ND                     = 0x4d
+	IPPROTO_NHRP                   = 0x36
+	IPPROTO_NONE                   = 0x3b
+	IPPROTO_NSP                    = 0x1f
+	IPPROTO_NVPII                  = 0xb
+	IPPROTO_OLD_DIVERT             = 0xfe
+	IPPROTO_OSPFIGP                = 0x59
+	IPPROTO_PFSYNC                 = 0xf0
+	IPPROTO_PGM                    = 0x71
+	IPPROTO_PIGP                   = 0x9
+	IPPROTO_PIM                    = 0x67
+	IPPROTO_PRM                    = 0x15
+	IPPROTO_PUP                    = 0xc
+	IPPROTO_PVP                    = 0x4b
+	IPPROTO_RAW                    = 0xff
+	IPPROTO_RCCMON                 = 0xa
+	IPPROTO_RDP                    = 0x1b
+	IPPROTO_RESERVED_253           = 0xfd
+	IPPROTO_RESERVED_254           = 0xfe
+	IPPROTO_ROUTING                = 0x2b
+	IPPROTO_RSVP                   = 0x2e
+	IPPROTO_RVD                    = 0x42
+	IPPROTO_SATEXPAK               = 0x40
+	IPPROTO_SATMON                 = 0x45
+	IPPROTO_SCCSP                  = 0x60
+	IPPROTO_SCTP                   = 0x84
+	IPPROTO_SDRP                   = 0x2a
+	IPPROTO_SEND                   = 0x103
+	IPPROTO_SEP                    = 0x21
+	IPPROTO_SHIM6                  = 0x8c
+	IPPROTO_SKIP                   = 0x39
+	IPPROTO_SPACER                 = 0x7fff
+	IPPROTO_SRPC                   = 0x5a
+	IPPROTO_ST                     = 0x7
+	IPPROTO_SVMTP                  = 0x52
+	IPPROTO_SWIPE                  = 0x35
+	IPPROTO_TCF                    = 0x57
+	IPPROTO_TCP                    = 0x6
+	IPPROTO_TLSP                   = 0x38
+	IPPROTO_TP                     = 0x1d
+	IPPROTO_TPXX                   = 0x27
+	IPPROTO_TRUNK1                 = 0x17
+	IPPROTO_TRUNK2                 = 0x18
+	IPPROTO_TTP                    = 0x54
+	IPPROTO_UDP                    = 0x11
+	IPPROTO_UDPLITE                = 0x88
+	IPPROTO_VINES                  = 0x53
+	IPPROTO_VISA                   = 0x46
+	IPPROTO_VMTP                   = 0x51
+	IPPROTO_WBEXPAK                = 0x4f
+	IPPROTO_WBMON                  = 0x4e
+	IPPROTO_WSN                    = 0x4a
+	IPPROTO_XNET                   = 0xf
+	IPPROTO_XTP                    = 0x24
+	IPV6_AUTOFLOWLABEL             = 0x3b
+	IPV6_BINDANY                   = 0x40
+	IPV6_BINDMULTI                 = 0x41
+	IPV6_BINDV6ONLY                = 0x1b
+	IPV6_CHECKSUM                  = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS    = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP    = 0x1
+	IPV6_DEFHLIM                   = 0x40
+	IPV6_DONTFRAG                  = 0x3e
+	IPV6_DSTOPTS                   = 0x32
+	IPV6_FLOWID                    = 0x43
+	IPV6_FLOWINFO_MASK             = 0xffffff0f
+	IPV6_FLOWLABEL_LEN             = 0x14
+	IPV6_FLOWLABEL_MASK            = 0xffff0f00
+	IPV6_FLOWTYPE                  = 0x44
+	IPV6_FRAGTTL                   = 0x78
+	IPV6_FW_ADD                    = 0x1e
+	IPV6_FW_DEL                    = 0x1f
+	IPV6_FW_FLUSH                  = 0x20
+	IPV6_FW_GET                    = 0x22
+	IPV6_FW_ZERO                   = 0x21
+	IPV6_HLIMDEC                   = 0x1
+	IPV6_HOPLIMIT                  = 0x2f
+	IPV6_HOPOPTS                   = 0x31
+	IPV6_IPSEC_POLICY              = 0x1c
+	IPV6_JOIN_GROUP                = 0xc
+	IPV6_LEAVE_GROUP               = 0xd
+	IPV6_MAXHLIM                   = 0xff
+	IPV6_MAXOPTHDR                 = 0x800
+	IPV6_MAXPACKET                 = 0xffff
+	IPV6_MAX_GROUP_SRC_FILTER      = 0x200
+	IPV6_MAX_MEMBERSHIPS           = 0xfff
+	IPV6_MAX_SOCK_SRC_FILTER       = 0x80
+	IPV6_MMTU                      = 0x500
+	IPV6_MSFILTER                  = 0x4a
+	IPV6_MULTICAST_HOPS            = 0xa
+	IPV6_MULTICAST_IF              = 0x9
+	IPV6_MULTICAST_LOOP            = 0xb
+	IPV6_NEXTHOP                   = 0x30
+	IPV6_ORIGDSTADDR               = 0x48
+	IPV6_PATHMTU                   = 0x2c
+	IPV6_PKTINFO                   = 0x2e
+	IPV6_PORTRANGE                 = 0xe
+	IPV6_PORTRANGE_DEFAULT         = 0x0
+	IPV6_PORTRANGE_HIGH            = 0x1
+	IPV6_PORTRANGE_LOW             = 0x2
+	IPV6_PREFER_TEMPADDR           = 0x3f
+	IPV6_RECVDSTOPTS               = 0x28
+	IPV6_RECVFLOWID                = 0x46
+	IPV6_RECVHOPLIMIT              = 0x25
+	IPV6_RECVHOPOPTS               = 0x27
+	IPV6_RECVORIGDSTADDR           = 0x48
+	IPV6_RECVPATHMTU               = 0x2b
+	IPV6_RECVPKTINFO               = 0x24
+	IPV6_RECVRSSBUCKETID           = 0x47
+	IPV6_RECVRTHDR                 = 0x26
+	IPV6_RECVTCLASS                = 0x39
+	IPV6_RSSBUCKETID               = 0x45
+	IPV6_RSS_LISTEN_BUCKET         = 0x42
+	IPV6_RTHDR                     = 0x33
+	IPV6_RTHDRDSTOPTS              = 0x23
+	IPV6_RTHDR_LOOSE               = 0x0
+	IPV6_RTHDR_STRICT              = 0x1
+	IPV6_RTHDR_TYPE_0              = 0x0
+	IPV6_SOCKOPT_RESERVED1         = 0x3
+	IPV6_TCLASS                    = 0x3d
+	IPV6_UNICAST_HOPS              = 0x4
+	IPV6_USE_MIN_MTU               = 0x2a
+	IPV6_V6ONLY                    = 0x1b
+	IPV6_VERSION                   = 0x60
+	IPV6_VERSION_MASK              = 0xf0
+	IP_ADD_MEMBERSHIP              = 0xc
+	IP_ADD_SOURCE_MEMBERSHIP       = 0x46
+	IP_BINDANY                     = 0x18
+	IP_BINDMULTI                   = 0x19
+	IP_BLOCK_SOURCE                = 0x48
+	IP_DEFAULT_MULTICAST_LOOP      = 0x1
+	IP_DEFAULT_MULTICAST_TTL       = 0x1
+	IP_DF                          = 0x4000
+	IP_DONTFRAG                    = 0x43
+	IP_DROP_MEMBERSHIP             = 0xd
+	IP_DROP_SOURCE_MEMBERSHIP      = 0x47
+	IP_DUMMYNET3                   = 0x31
+	IP_DUMMYNET_CONFIGURE          = 0x3c
+	IP_DUMMYNET_DEL                = 0x3d
+	IP_DUMMYNET_FLUSH              = 0x3e
+	IP_DUMMYNET_GET                = 0x40
+	IP_FLOWID                      = 0x5a
+	IP_FLOWTYPE                    = 0x5b
+	IP_FW3                         = 0x30
+	IP_FW_ADD                      = 0x32
+	IP_FW_DEL                      = 0x33
+	IP_FW_FLUSH                    = 0x34
+	IP_FW_GET                      = 0x36
+	IP_FW_NAT_CFG                  = 0x38
+	IP_FW_NAT_DEL                  = 0x39
+	IP_FW_NAT_GET_CONFIG           = 0x3a
+	IP_FW_NAT_GET_LOG              = 0x3b
+	IP_FW_RESETLOG                 = 0x37
+	IP_FW_TABLE_ADD                = 0x28
+	IP_FW_TABLE_DEL                = 0x29
+	IP_FW_TABLE_FLUSH              = 0x2a
+	IP_FW_TABLE_GETSIZE            = 0x2b
+	IP_FW_TABLE_LIST               = 0x2c
+	IP_FW_ZERO                     = 0x35
+	IP_HDRINCL                     = 0x2
+	IP_IPSEC_POLICY                = 0x15
+	IP_MAXPACKET                   = 0xffff
+	IP_MAX_GROUP_SRC_FILTER        = 0x200
+	IP_MAX_MEMBERSHIPS             = 0xfff
+	IP_MAX_SOCK_MUTE_FILTER        = 0x80
+	IP_MAX_SOCK_SRC_FILTER         = 0x80
+	IP_MF                          = 0x2000
+	IP_MINTTL                      = 0x42
+	IP_MSFILTER                    = 0x4a
+	IP_MSS                         = 0x240
+	IP_MULTICAST_IF                = 0x9
+	IP_MULTICAST_LOOP              = 0xb
+	IP_MULTICAST_TTL               = 0xa
+	IP_MULTICAST_VIF               = 0xe
+	IP_OFFMASK                     = 0x1fff
+	IP_ONESBCAST                   = 0x17
+	IP_OPTIONS                     = 0x1
+	IP_ORIGDSTADDR                 = 0x1b
+	IP_PORTRANGE                   = 0x13
+	IP_PORTRANGE_DEFAULT           = 0x0
+	IP_PORTRANGE_HIGH              = 0x1
+	IP_PORTRANGE_LOW               = 0x2
+	IP_RECVDSTADDR                 = 0x7
+	IP_RECVFLOWID                  = 0x5d
+	IP_RECVIF                      = 0x14
+	IP_RECVOPTS                    = 0x5
+	IP_RECVORIGDSTADDR             = 0x1b
+	IP_RECVRETOPTS                 = 0x6
+	IP_RECVRSSBUCKETID             = 0x5e
+	IP_RECVTOS                     = 0x44
+	IP_RECVTTL                     = 0x41
+	IP_RETOPTS                     = 0x8
+	IP_RF                          = 0x8000
+	IP_RSSBUCKETID                 = 0x5c
+	IP_RSS_LISTEN_BUCKET           = 0x1a
+	IP_RSVP_OFF                    = 0x10
+	IP_RSVP_ON                     = 0xf
+	IP_RSVP_VIF_OFF                = 0x12
+	IP_RSVP_VIF_ON                 = 0x11
+	IP_SENDSRCADDR                 = 0x7
+	IP_TOS                         = 0x3
+	IP_TTL                         = 0x4
+	IP_UNBLOCK_SOURCE              = 0x49
+	ISIG                           = 0x80
+	ISTRIP                         = 0x20
+	IXANY                          = 0x800
+	IXOFF                          = 0x400
+	IXON                           = 0x200
+	KERN_HOSTNAME                  = 0xa
+	KERN_OSRELEASE                 = 0x2
+	KERN_OSTYPE                    = 0x1
+	KERN_VERSION                   = 0x4
+	LOCK_EX                        = 0x2
+	LOCK_NB                        = 0x4
+	LOCK_SH                        = 0x1
+	LOCK_UN                        = 0x8
+	MADV_AUTOSYNC                  = 0x7
+	MADV_CORE                      = 0x9
+	MADV_DONTNEED                  = 0x4
+	MADV_FREE                      = 0x5
+	MADV_NOCORE                    = 0x8
+	MADV_NORMAL                    = 0x0
+	MADV_NOSYNC                    = 0x6
+	MADV_PROTECT                   = 0xa
+	MADV_RANDOM                    = 0x1
+	MADV_SEQUENTIAL                = 0x2
+	MADV_WILLNEED                  = 0x3
+	MAP_32BIT                      = 0x80000
+	MAP_ALIGNED_SUPER              = 0x1000000
+	MAP_ALIGNMENT_MASK             = -0x1000000
+	MAP_ALIGNMENT_SHIFT            = 0x18
+	MAP_ANON                       = 0x1000
+	MAP_ANONYMOUS                  = 0x1000
+	MAP_COPY                       = 0x2
+	MAP_EXCL                       = 0x4000
+	MAP_FILE                       = 0x0
+	MAP_FIXED                      = 0x10
+	MAP_GUARD                      = 0x2000
+	MAP_HASSEMAPHORE               = 0x200
+	MAP_NOCORE                     = 0x20000
+	MAP_NOSYNC                     = 0x800
+	MAP_PREFAULT_READ              = 0x40000
+	MAP_PRIVATE                    = 0x2
+	MAP_RESERVED0020               = 0x20
+	MAP_RESERVED0040               = 0x40
+	MAP_RESERVED0080               = 0x80
+	MAP_RESERVED0100               = 0x100
+	MAP_SHARED                     = 0x1
+	MAP_STACK                      = 0x400
+	MCAST_BLOCK_SOURCE             = 0x54
+	MCAST_EXCLUDE                  = 0x2
+	MCAST_INCLUDE                  = 0x1
+	MCAST_JOIN_GROUP               = 0x50
+	MCAST_JOIN_SOURCE_GROUP        = 0x52
+	MCAST_LEAVE_GROUP              = 0x51
+	MCAST_LEAVE_SOURCE_GROUP       = 0x53
+	MCAST_UNBLOCK_SOURCE           = 0x55
+	MCAST_UNDEFINED                = 0x0
+	MCL_CURRENT                    = 0x1
+	MCL_FUTURE                     = 0x2
+	MNT_ACLS                       = 0x8000000
+	MNT_ASYNC                      = 0x40
+	MNT_AUTOMOUNTED                = 0x200000000
+	MNT_BYFSID                     = 0x8000000
+	MNT_CMDFLAGS                   = 0xd0f0000
+	MNT_DEFEXPORTED                = 0x200
+	MNT_DELEXPORT                  = 0x20000
+	MNT_EXKERB                     = 0x800
+	MNT_EXPORTANON                 = 0x400
+	MNT_EXPORTED                   = 0x100
+	MNT_EXPUBLIC                   = 0x20000000
+	MNT_EXRDONLY                   = 0x80
+	MNT_FORCE                      = 0x80000
+	MNT_GJOURNAL                   = 0x2000000
+	MNT_IGNORE                     = 0x800000
+	MNT_LAZY                       = 0x3
+	MNT_LOCAL                      = 0x1000
+	MNT_MULTILABEL                 = 0x4000000
+	MNT_NFS4ACLS                   = 0x10
+	MNT_NOATIME                    = 0x10000000
+	MNT_NOCLUSTERR                 = 0x40000000
+	MNT_NOCLUSTERW                 = 0x80000000
+	MNT_NOEXEC                     = 0x4
+	MNT_NONBUSY                    = 0x4000000
+	MNT_NOSUID                     = 0x8
+	MNT_NOSYMFOLLOW                = 0x400000
+	MNT_NOWAIT                     = 0x2
+	MNT_QUOTA                      = 0x2000
+	MNT_RDONLY                     = 0x1
+	MNT_RELOAD                     = 0x40000
+	MNT_ROOTFS                     = 0x4000
+	MNT_SNAPSHOT                   = 0x1000000
+	MNT_SOFTDEP                    = 0x200000
+	MNT_SUIDDIR                    = 0x100000
+	MNT_SUJ                        = 0x100000000
+	MNT_SUSPEND                    = 0x4
+	MNT_SYNCHRONOUS                = 0x2
+	MNT_UNION                      = 0x20
+	MNT_UNTRUSTED                  = 0x800000000
+	MNT_UPDATE                     = 0x10000
+	MNT_UPDATEMASK                 = 0xad8d0807e
+	MNT_USER                       = 0x8000
+	MNT_VERIFIED                   = 0x400000000
+	MNT_VISFLAGMASK                = 0xffef0ffff
+	MNT_WAIT                       = 0x1
+	MSG_CMSG_CLOEXEC               = 0x40000
+	MSG_COMPAT                     = 0x8000
+	MSG_CTRUNC                     = 0x20
+	MSG_DONTROUTE                  = 0x4
+	MSG_DONTWAIT                   = 0x80
+	MSG_EOF                        = 0x100
+	MSG_EOR                        = 0x8
+	MSG_NBIO                       = 0x4000
+	MSG_NOSIGNAL                   = 0x20000
+	MSG_NOTIFICATION               = 0x2000
+	MSG_OOB                        = 0x1
+	MSG_PEEK                       = 0x2
+	MSG_TRUNC                      = 0x10
+	MSG_WAITALL                    = 0x40
+	MSG_WAITFORONE                 = 0x80000
+	MS_ASYNC                       = 0x1
+	MS_INVALIDATE                  = 0x2
+	MS_SYNC                        = 0x0
+	NAME_MAX                       = 0xff
+	NET_RT_DUMP                    = 0x1
+	NET_RT_FLAGS                   = 0x2
+	NET_RT_IFLIST                  = 0x3
+	NET_RT_IFLISTL                 = 0x5
+	NET_RT_IFMALIST                = 0x4
+	NFDBITS                        = 0x40
+	NOFLSH                         = 0x80000000
+	NOKERNINFO                     = 0x2000000
+	NOTE_ABSTIME                   = 0x10
+	NOTE_ATTRIB                    = 0x8
+	NOTE_CHILD                     = 0x4
+	NOTE_CLOSE                     = 0x100
+	NOTE_CLOSE_WRITE               = 0x200
+	NOTE_DELETE                    = 0x1
+	NOTE_EXEC                      = 0x20000000
+	NOTE_EXIT                      = 0x80000000
+	NOTE_EXTEND                    = 0x4
+	NOTE_FFAND                     = 0x40000000
+	NOTE_FFCOPY                    = 0xc0000000
+	NOTE_FFCTRLMASK                = 0xc0000000
+	NOTE_FFLAGSMASK                = 0xffffff
+	NOTE_FFNOP                     = 0x0
+	NOTE_FFOR                      = 0x80000000
+	NOTE_FILE_POLL                 = 0x2
+	NOTE_FORK                      = 0x40000000
+	NOTE_LINK                      = 0x10
+	NOTE_LOWAT                     = 0x1
+	NOTE_MSECONDS                  = 0x2
+	NOTE_NSECONDS                  = 0x8
+	NOTE_OPEN                      = 0x80
+	NOTE_PCTRLMASK                 = 0xf0000000
+	NOTE_PDATAMASK                 = 0xfffff
+	NOTE_READ                      = 0x400
+	NOTE_RENAME                    = 0x20
+	NOTE_REVOKE                    = 0x40
+	NOTE_SECONDS                   = 0x1
+	NOTE_TRACK                     = 0x1
+	NOTE_TRACKERR                  = 0x2
+	NOTE_TRIGGER                   = 0x1000000
+	NOTE_USECONDS                  = 0x4
+	NOTE_WRITE                     = 0x2
+	OCRNL                          = 0x10
+	ONLCR                          = 0x2
+	ONLRET                         = 0x40
+	ONOCR                          = 0x20
+	ONOEOT                         = 0x8
+	OPOST                          = 0x1
+	OXTABS                         = 0x4
+	O_ACCMODE                      = 0x3
+	O_APPEND                       = 0x8
+	O_ASYNC                        = 0x40
+	O_CLOEXEC                      = 0x100000
+	O_CREAT                        = 0x200
+	O_DIRECT                       = 0x10000
+	O_DIRECTORY                    = 0x20000
+	O_EXCL                         = 0x800
+	O_EXEC                         = 0x40000
+	O_EXLOCK                       = 0x20
+	O_FSYNC                        = 0x80
+	O_NDELAY                       = 0x4
+	O_NOCTTY                       = 0x8000
+	O_NOFOLLOW                     = 0x100
+	O_NONBLOCK                     = 0x4
+	O_RDONLY                       = 0x0
+	O_RDWR                         = 0x2
+	O_SHLOCK                       = 0x10
+	O_SYNC                         = 0x80
+	O_TRUNC                        = 0x400
+	O_TTY_INIT                     = 0x80000
+	O_VERIFY                       = 0x200000
+	O_WRONLY                       = 0x1
+	PARENB                         = 0x1000
+	PARMRK                         = 0x8
+	PARODD                         = 0x2000
+	PENDIN                         = 0x20000000
+	PRIO_PGRP                      = 0x1
+	PRIO_PROCESS                   = 0x0
+	PRIO_USER                      = 0x2
+	PROT_EXEC                      = 0x4
+	PROT_NONE                      = 0x0
+	PROT_READ                      = 0x1
+	PROT_WRITE                     = 0x2
+	RLIMIT_AS                      = 0xa
+	RLIMIT_CORE                    = 0x4
+	RLIMIT_CPU                     = 0x0
+	RLIMIT_DATA                    = 0x2
+	RLIMIT_FSIZE                   = 0x1
+	RLIMIT_MEMLOCK                 = 0x6
+	RLIMIT_NOFILE                  = 0x8
+	RLIMIT_NPROC                   = 0x7
+	RLIMIT_RSS                     = 0x5
+	RLIMIT_STACK                   = 0x3
+	RLIM_INFINITY                  = 0x7fffffffffffffff
+	RTAX_AUTHOR                    = 0x6
+	RTAX_BRD                       = 0x7
+	RTAX_DST                       = 0x0
+	RTAX_GATEWAY                   = 0x1
+	RTAX_GENMASK                   = 0x3
+	RTAX_IFA                       = 0x5
+	RTAX_IFP                       = 0x4
+	RTAX_MAX                       = 0x8
+	RTAX_NETMASK                   = 0x2
+	RTA_AUTHOR                     = 0x40
+	RTA_BRD                        = 0x80
+	RTA_DST                        = 0x1
+	RTA_GATEWAY                    = 0x2
+	RTA_GENMASK                    = 0x8
+	RTA_IFA                        = 0x20
+	RTA_IFP                        = 0x10
+	RTA_NETMASK                    = 0x4
+	RTF_BLACKHOLE                  = 0x1000
+	RTF_BROADCAST                  = 0x400000
+	RTF_DONE                       = 0x40
+	RTF_DYNAMIC                    = 0x10
+	RTF_FIXEDMTU                   = 0x80000
+	RTF_FMASK                      = 0x1004d808
+	RTF_GATEWAY                    = 0x2
+	RTF_GWFLAG_COMPAT              = 0x80000000
+	RTF_HOST                       = 0x4
+	RTF_LLDATA                     = 0x400
+	RTF_LLINFO                     = 0x400
+	RTF_LOCAL                      = 0x200000
+	RTF_MODIFIED                   = 0x20
+	RTF_MULTICAST                  = 0x800000
+	RTF_PINNED                     = 0x100000
+	RTF_PROTO1                     = 0x8000
+	RTF_PROTO2                     = 0x4000
+	RTF_PROTO3                     = 0x40000
+	RTF_REJECT                     = 0x8
+	RTF_RNH_LOCKED                 = 0x40000000
+	RTF_STATIC                     = 0x800
+	RTF_STICKY                     = 0x10000000
+	RTF_UP                         = 0x1
+	RTF_XRESOLVE                   = 0x200
+	RTM_ADD                        = 0x1
+	RTM_CHANGE                     = 0x3
+	RTM_DELADDR                    = 0xd
+	RTM_DELETE                     = 0x2
+	RTM_DELMADDR                   = 0x10
+	RTM_GET                        = 0x4
+	RTM_IEEE80211                  = 0x12
+	RTM_IFANNOUNCE                 = 0x11
+	RTM_IFINFO                     = 0xe
+	RTM_LOCK                       = 0x8
+	RTM_LOSING                     = 0x5
+	RTM_MISS                       = 0x7
+	RTM_NEWADDR                    = 0xc
+	RTM_NEWMADDR                   = 0xf
+	RTM_REDIRECT                   = 0x6
+	RTM_RESOLVE                    = 0xb
+	RTM_RTTUNIT                    = 0xf4240
+	RTM_VERSION                    = 0x5
+	RTV_EXPIRE                     = 0x4
+	RTV_HOPCOUNT                   = 0x2
+	RTV_MTU                        = 0x1
+	RTV_RPIPE                      = 0x8
+	RTV_RTT                        = 0x40
+	RTV_RTTVAR                     = 0x80
+	RTV_SPIPE                      = 0x10
+	RTV_SSTHRESH                   = 0x20
+	RTV_WEIGHT                     = 0x100
+	RT_ALL_FIBS                    = -0x1
+	RT_BLACKHOLE                   = 0x40
+	RT_DEFAULT_FIB                 = 0x0
+	RT_HAS_GW                      = 0x80
+	RT_HAS_HEADER                  = 0x10
+	RT_HAS_HEADER_BIT              = 0x4
+	RT_L2_ME                       = 0x4
+	RT_L2_ME_BIT                   = 0x2
+	RT_LLE_CACHE                   = 0x100
+	RT_MAY_LOOP                    = 0x8
+	RT_MAY_LOOP_BIT                = 0x3
+	RT_REJECT                      = 0x20
+	RUSAGE_CHILDREN                = -0x1
+	RUSAGE_SELF                    = 0x0
+	RUSAGE_THREAD                  = 0x1
+	SCM_BINTIME                    = 0x4
+	SCM_CREDS                      = 0x3
+	SCM_MONOTONIC                  = 0x6
+	SCM_REALTIME                   = 0x5
+	SCM_RIGHTS                     = 0x1
+	SCM_TIMESTAMP                  = 0x2
+	SCM_TIME_INFO                  = 0x7
+	SHUT_RD                        = 0x0
+	SHUT_RDWR                      = 0x2
+	SHUT_WR                        = 0x1
+	SIOCADDMULTI                   = 0x80206931
+	SIOCAIFADDR                    = 0x8040691a
+	SIOCAIFGROUP                   = 0x80286987
+	SIOCATMARK                     = 0x40047307
+	SIOCDELMULTI                   = 0x80206932
+	SIOCDIFADDR                    = 0x80206919
+	SIOCDIFGROUP                   = 0x80286989
+	SIOCDIFPHYADDR                 = 0x80206949
+	SIOCGDRVSPEC                   = 0xc028697b
+	SIOCGETSGCNT                   = 0xc0207210
+	SIOCGETVIFCNT                  = 0xc028720f
+	SIOCGHIWAT                     = 0x40047301
+	SIOCGHWADDR                    = 0xc020693e
+	SIOCGI2C                       = 0xc020693d
+	SIOCGIFADDR                    = 0xc0206921
+	SIOCGIFBRDADDR                 = 0xc0206923
+	SIOCGIFCAP                     = 0xc020691f
+	SIOCGIFCONF                    = 0xc0106924
+	SIOCGIFDESCR                   = 0xc020692a
+	SIOCGIFDSTADDR                 = 0xc0206922
+	SIOCGIFFIB                     = 0xc020695c
+	SIOCGIFFLAGS                   = 0xc0206911
+	SIOCGIFGENERIC                 = 0xc020693a
+	SIOCGIFGMEMB                   = 0xc028698a
+	SIOCGIFGROUP                   = 0xc0286988
+	SIOCGIFINDEX                   = 0xc0206920
+	SIOCGIFMAC                     = 0xc0206926
+	SIOCGIFMEDIA                   = 0xc0306938
+	SIOCGIFMETRIC                  = 0xc0206917
+	SIOCGIFMTU                     = 0xc0206933
+	SIOCGIFNETMASK                 = 0xc0206925
+	SIOCGIFPDSTADDR                = 0xc0206948
+	SIOCGIFPHYS                    = 0xc0206935
+	SIOCGIFPSRCADDR                = 0xc0206947
+	SIOCGIFRSSHASH                 = 0xc0186997
+	SIOCGIFRSSKEY                  = 0xc0946996
+	SIOCGIFSTATUS                  = 0xc331693b
+	SIOCGIFXMEDIA                  = 0xc030698b
+	SIOCGLANPCP                    = 0xc0206998
+	SIOCGLOWAT                     = 0x40047303
+	SIOCGPGRP                      = 0x40047309
+	SIOCGPRIVATE_0                 = 0xc0206950
+	SIOCGPRIVATE_1                 = 0xc0206951
+	SIOCGTUNFIB                    = 0xc020695e
+	SIOCIFCREATE                   = 0xc020697a
+	SIOCIFCREATE2                  = 0xc020697c
+	SIOCIFDESTROY                  = 0x80206979
+	SIOCIFGCLONERS                 = 0xc0106978
+	SIOCSDRVSPEC                   = 0x8028697b
+	SIOCSHIWAT                     = 0x80047300
+	SIOCSIFADDR                    = 0x8020690c
+	SIOCSIFBRDADDR                 = 0x80206913
+	SIOCSIFCAP                     = 0x8020691e
+	SIOCSIFDESCR                   = 0x80206929
+	SIOCSIFDSTADDR                 = 0x8020690e
+	SIOCSIFFIB                     = 0x8020695d
+	SIOCSIFFLAGS                   = 0x80206910
+	SIOCSIFGENERIC                 = 0x80206939
+	SIOCSIFLLADDR                  = 0x8020693c
+	SIOCSIFMAC                     = 0x80206927
+	SIOCSIFMEDIA                   = 0xc0206937
+	SIOCSIFMETRIC                  = 0x80206918
+	SIOCSIFMTU                     = 0x80206934
+	SIOCSIFNAME                    = 0x80206928
+	SIOCSIFNETMASK                 = 0x80206916
+	SIOCSIFPHYADDR                 = 0x80406946
+	SIOCSIFPHYS                    = 0x80206936
+	SIOCSIFRVNET                   = 0xc020695b
+	SIOCSIFVNET                    = 0xc020695a
+	SIOCSLANPCP                    = 0x80206999
+	SIOCSLOWAT                     = 0x80047302
+	SIOCSPGRP                      = 0x80047308
+	SIOCSTUNFIB                    = 0x8020695f
+	SOCK_CLOEXEC                   = 0x10000000
+	SOCK_DGRAM                     = 0x2
+	SOCK_MAXADDRLEN                = 0xff
+	SOCK_NONBLOCK                  = 0x20000000
+	SOCK_RAW                       = 0x3
+	SOCK_RDM                       = 0x4
+	SOCK_SEQPACKET                 = 0x5
+	SOCK_STREAM                    = 0x1
+	SOL_SOCKET                     = 0xffff
+	SOMAXCONN                      = 0x80
+	SO_ACCEPTCONN                  = 0x2
+	SO_ACCEPTFILTER                = 0x1000
+	SO_BINTIME                     = 0x2000
+	SO_BROADCAST                   = 0x20
+	SO_DEBUG                       = 0x1
+	SO_DOMAIN                      = 0x1019
+	SO_DONTROUTE                   = 0x10
+	SO_ERROR                       = 0x1007
+	SO_KEEPALIVE                   = 0x8
+	SO_LABEL                       = 0x1009
+	SO_LINGER                      = 0x80
+	SO_LISTENINCQLEN               = 0x1013
+	SO_LISTENQLEN                  = 0x1012
+	SO_LISTENQLIMIT                = 0x1011
+	SO_MAX_PACING_RATE             = 0x1018
+	SO_NOSIGPIPE                   = 0x800
+	SO_NO_DDP                      = 0x8000
+	SO_NO_OFFLOAD                  = 0x4000
+	SO_OOBINLINE                   = 0x100
+	SO_PEERLABEL                   = 0x1010
+	SO_PROTOCOL                    = 0x1016
+	SO_PROTOTYPE                   = 0x1016
+	SO_RCVBUF                      = 0x1002
+	SO_RCVLOWAT                    = 0x1004
+	SO_RCVTIMEO                    = 0x1006
+	SO_REUSEADDR                   = 0x4
+	SO_REUSEPORT                   = 0x200
+	SO_REUSEPORT_LB                = 0x10000
+	SO_SETFIB                      = 0x1014
+	SO_SNDBUF                      = 0x1001
+	SO_SNDLOWAT                    = 0x1003
+	SO_SNDTIMEO                    = 0x1005
+	SO_TIMESTAMP                   = 0x400
+	SO_TS_BINTIME                  = 0x1
+	SO_TS_CLOCK                    = 0x1017
+	SO_TS_CLOCK_MAX                = 0x3
+	SO_TS_DEFAULT                  = 0x0
+	SO_TS_MONOTONIC                = 0x3
+	SO_TS_REALTIME                 = 0x2
+	SO_TS_REALTIME_MICRO           = 0x0
+	SO_TYPE                        = 0x1008
+	SO_USELOOPBACK                 = 0x40
+	SO_USER_COOKIE                 = 0x1015
+	SO_VENDOR                      = 0x80000000
+	S_BLKSIZE                      = 0x200
+	S_IEXEC                        = 0x40
+	S_IFBLK                        = 0x6000
+	S_IFCHR                        = 0x2000
+	S_IFDIR                        = 0x4000
+	S_IFIFO                        = 0x1000
+	S_IFLNK                        = 0xa000
+	S_IFMT                         = 0xf000
+	S_IFREG                        = 0x8000
+	S_IFSOCK                       = 0xc000
+	S_IFWHT                        = 0xe000
+	S_IREAD                        = 0x100
+	S_IRGRP                        = 0x20
+	S_IROTH                        = 0x4
+	S_IRUSR                        = 0x100
+	S_IRWXG                        = 0x38
+	S_IRWXO                        = 0x7
+	S_IRWXU                        = 0x1c0
+	S_ISGID                        = 0x400
+	S_ISTXT                        = 0x200
+	S_ISUID                        = 0x800
+	S_ISVTX                        = 0x200
+	S_IWGRP                        = 0x10
+	S_IWOTH                        = 0x2
+	S_IWRITE                       = 0x80
+	S_IWUSR                        = 0x80
+	S_IXGRP                        = 0x8
+	S_IXOTH                        = 0x1
+	S_IXUSR                        = 0x40
+	TAB0                           = 0x0
+	TAB3                           = 0x4
+	TABDLY                         = 0x4
+	TCIFLUSH                       = 0x1
+	TCIOFF                         = 0x3
+	TCIOFLUSH                      = 0x3
+	TCION                          = 0x4
+	TCOFLUSH                       = 0x2
+	TCOOFF                         = 0x1
+	TCOON                          = 0x2
+	TCP_BBR_ACK_COMP_ALG           = 0x448
+	TCP_BBR_DRAIN_INC_EXTRA        = 0x43c
+	TCP_BBR_DRAIN_PG               = 0x42e
+	TCP_BBR_EXTRA_GAIN             = 0x449
+	TCP_BBR_IWINTSO                = 0x42b
+	TCP_BBR_LOWGAIN_FD             = 0x436
+	TCP_BBR_LOWGAIN_HALF           = 0x435
+	TCP_BBR_LOWGAIN_THRESH         = 0x434
+	TCP_BBR_MAX_RTO                = 0x439
+	TCP_BBR_MIN_RTO                = 0x438
+	TCP_BBR_ONE_RETRAN             = 0x431
+	TCP_BBR_PACE_CROSS             = 0x442
+	TCP_BBR_PACE_DEL_TAR           = 0x43f
+	TCP_BBR_PACE_PER_SEC           = 0x43e
+	TCP_BBR_PACE_SEG_MAX           = 0x440
+	TCP_BBR_PACE_SEG_MIN           = 0x441
+	TCP_BBR_PROBE_RTT_GAIN         = 0x44d
+	TCP_BBR_PROBE_RTT_INT          = 0x430
+	TCP_BBR_PROBE_RTT_LEN          = 0x44e
+	TCP_BBR_RACK_RTT_USE           = 0x44a
+	TCP_BBR_RECFORCE               = 0x42c
+	TCP_BBR_REC_OVER_HPTS          = 0x43a
+	TCP_BBR_RETRAN_WTSO            = 0x44b
+	TCP_BBR_RWND_IS_APP            = 0x42f
+	TCP_BBR_STARTUP_EXIT_EPOCH     = 0x43d
+	TCP_BBR_STARTUP_LOSS_EXIT      = 0x432
+	TCP_BBR_STARTUP_PG             = 0x42d
+	TCP_BBR_UNLIMITED              = 0x43b
+	TCP_BBR_USEDEL_RATE            = 0x437
+	TCP_BBR_USE_LOWGAIN            = 0x433
+	TCP_CA_NAME_MAX                = 0x10
+	TCP_CCALGOOPT                  = 0x41
+	TCP_CONGESTION                 = 0x40
+	TCP_DATA_AFTER_CLOSE           = 0x44c
+	TCP_DELACK                     = 0x48
+	TCP_FASTOPEN                   = 0x401
+	TCP_FASTOPEN_MAX_COOKIE_LEN    = 0x10
+	TCP_FASTOPEN_MIN_COOKIE_LEN    = 0x4
+	TCP_FASTOPEN_PSK_LEN           = 0x10
+	TCP_FUNCTION_BLK               = 0x2000
+	TCP_FUNCTION_NAME_LEN_MAX      = 0x20
+	TCP_INFO                       = 0x20
+	TCP_KEEPCNT                    = 0x400
+	TCP_KEEPIDLE                   = 0x100
+	TCP_KEEPINIT                   = 0x80
+	TCP_KEEPINTVL                  = 0x200
+	TCP_LOG                        = 0x22
+	TCP_LOGBUF                     = 0x23
+	TCP_LOGDUMP                    = 0x25
+	TCP_LOGDUMPID                  = 0x26
+	TCP_LOGID                      = 0x24
+	TCP_LOG_ID_LEN                 = 0x40
+	TCP_MAXBURST                   = 0x4
+	TCP_MAXHLEN                    = 0x3c
+	TCP_MAXOLEN                    = 0x28
+	TCP_MAXSEG                     = 0x2
+	TCP_MAXWIN                     = 0xffff
+	TCP_MAX_SACK                   = 0x4
+	TCP_MAX_WINSHIFT               = 0xe
+	TCP_MD5SIG                     = 0x10
+	TCP_MINMSS                     = 0xd8
+	TCP_MSS                        = 0x218
+	TCP_NODELAY                    = 0x1
+	TCP_NOOPT                      = 0x8
+	TCP_NOPUSH                     = 0x4
+	TCP_PCAP_IN                    = 0x1000
+	TCP_PCAP_OUT                   = 0x800
+	TCP_RACK_EARLY_RECOV           = 0x423
+	TCP_RACK_EARLY_SEG             = 0x424
+	TCP_RACK_IDLE_REDUCE_HIGH      = 0x444
+	TCP_RACK_MIN_PACE              = 0x445
+	TCP_RACK_MIN_PACE_SEG          = 0x446
+	TCP_RACK_MIN_TO                = 0x422
+	TCP_RACK_PACE_ALWAYS           = 0x41f
+	TCP_RACK_PACE_MAX_SEG          = 0x41e
+	TCP_RACK_PACE_REDUCE           = 0x41d
+	TCP_RACK_PKT_DELAY             = 0x428
+	TCP_RACK_PROP                  = 0x41b
+	TCP_RACK_PROP_RATE             = 0x420
+	TCP_RACK_PRR_SENDALOT          = 0x421
+	TCP_RACK_REORD_FADE            = 0x426
+	TCP_RACK_REORD_THRESH          = 0x425
+	TCP_RACK_SESS_CWV              = 0x42a
+	TCP_RACK_TLP_INC_VAR           = 0x429
+	TCP_RACK_TLP_REDUCE            = 0x41c
+	TCP_RACK_TLP_THRESH            = 0x427
+	TCP_RACK_TLP_USE               = 0x447
+	TCP_VENDOR                     = 0x80000000
+	TCSAFLUSH                      = 0x2
+	TIMER_ABSTIME                  = 0x1
+	TIMER_RELTIME                  = 0x0
+	TIOCCBRK                       = 0x2000747a
+	TIOCCDTR                       = 0x20007478
+	TIOCCONS                       = 0x80047462
+	TIOCDRAIN                      = 0x2000745e
+	TIOCEXCL                       = 0x2000740d
+	TIOCEXT                        = 0x80047460
+	TIOCFLUSH                      = 0x80047410
+	TIOCGDRAINWAIT                 = 0x40047456
+	TIOCGETA                       = 0x402c7413
+	TIOCGETD                       = 0x4004741a
+	TIOCGPGRP                      = 0x40047477
+	TIOCGPTN                       = 0x4004740f
+	TIOCGSID                       = 0x40047463
+	TIOCGWINSZ                     = 0x40087468
+	TIOCMBIC                       = 0x8004746b
+	TIOCMBIS                       = 0x8004746c
+	TIOCMGDTRWAIT                  = 0x4004745a
+	TIOCMGET                       = 0x4004746a
+	TIOCMSDTRWAIT                  = 0x8004745b
+	TIOCMSET                       = 0x8004746d
+	TIOCM_CAR                      = 0x40
+	TIOCM_CD                       = 0x40
+	TIOCM_CTS                      = 0x20
+	TIOCM_DCD                      = 0x40
+	TIOCM_DSR                      = 0x100
+	TIOCM_DTR                      = 0x2
+	TIOCM_LE                       = 0x1
+	TIOCM_RI                       = 0x80
+	TIOCM_RNG                      = 0x80
+	TIOCM_RTS                      = 0x4
+	TIOCM_SR                       = 0x10
+	TIOCM_ST                       = 0x8
+	TIOCNOTTY                      = 0x20007471
+	TIOCNXCL                       = 0x2000740e
+	TIOCOUTQ                       = 0x40047473
+	TIOCPKT                        = 0x80047470
+	TIOCPKT_DATA                   = 0x0
+	TIOCPKT_DOSTOP                 = 0x20
+	TIOCPKT_FLUSHREAD              = 0x1
+	TIOCPKT_FLUSHWRITE             = 0x2
+	TIOCPKT_IOCTL                  = 0x40
+	TIOCPKT_NOSTOP                 = 0x10
+	TIOCPKT_START                  = 0x8
+	TIOCPKT_STOP                   = 0x4
+	TIOCPTMASTER                   = 0x2000741c
+	TIOCSBRK                       = 0x2000747b
+	TIOCSCTTY                      = 0x20007461
+	TIOCSDRAINWAIT                 = 0x80047457
+	TIOCSDTR                       = 0x20007479
+	TIOCSETA                       = 0x802c7414
+	TIOCSETAF                      = 0x802c7416
+	TIOCSETAW                      = 0x802c7415
+	TIOCSETD                       = 0x8004741b
+	TIOCSIG                        = 0x2004745f
+	TIOCSPGRP                      = 0x80047476
+	TIOCSTART                      = 0x2000746e
+	TIOCSTAT                       = 0x20007465
+	TIOCSTI                        = 0x80017472
+	TIOCSTOP                       = 0x2000746f
+	TIOCSWINSZ                     = 0x80087467
+	TIOCTIMESTAMP                  = 0x40107459
+	TIOCUCNTL                      = 0x80047466
+	TOSTOP                         = 0x400000
+	UTIME_NOW                      = -0x1
+	UTIME_OMIT                     = -0x2
+	VDISCARD                       = 0xf
+	VDSUSP                         = 0xb
+	VEOF                           = 0x0
+	VEOL                           = 0x1
+	VEOL2                          = 0x2
+	VERASE                         = 0x3
+	VERASE2                        = 0x7
+	VINTR                          = 0x8
+	VKILL                          = 0x5
+	VLNEXT                         = 0xe
+	VMIN                           = 0x10
+	VM_BCACHE_SIZE_MAX             = 0x19000000
+	VQUIT                          = 0x9
+	VREPRINT                       = 0x6
+	VSTART                         = 0xc
+	VSTATUS                        = 0x12
+	VSTOP                          = 0xd
+	VSUSP                          = 0xa
+	VTIME                          = 0x11
+	VWERASE                        = 0x4
+	WCONTINUED                     = 0x4
+	WCOREFLAG                      = 0x80
+	WEXITED                        = 0x10
+	WLINUXCLONE                    = 0x80000000
+	WNOHANG                        = 0x1
+	WNOWAIT                        = 0x8
+	WSTOPPED                       = 0x2
+	WTRAPPED                       = 0x20
+	WUNTRACED                      = 0x2
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADF           = syscall.Errno(0x9)
+	EBADMSG         = syscall.Errno(0x59)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x55)
+	ECAPMODE        = syscall.Errno(0x5e)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDOM            = syscall.Errno(0x21)
+	EDOOFUS         = syscall.Errno(0x58)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x52)
+	EILSEQ          = syscall.Errno(0x56)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x60)
+	ELOOP           = syscall.Errno(0x3e)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	EMULTIHOP       = syscall.Errno(0x5a)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x57)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOLINK         = syscall.Errno(0x5b)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x53)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCAPABLE     = syscall.Errno(0x5d)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTRECOVERABLE = syscall.Errno(0x5f)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x2d)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x2d)
+	EOVERFLOW       = syscall.Errno(0x54)
+	EOWNERDEAD      = syscall.Errno(0x60)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTO          = syscall.Errno(0x5c)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGLIBRT  = syscall.Signal(0x21)
+	SIGLWP    = syscall.Signal(0x20)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTHR    = syscall.Signal(0x20)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "EAGAIN", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "EOPNOTSUPP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "operation timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disc quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC prog. not avail"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EIDRM", "identifier removed"},
+	{83, "ENOMSG", "no message of desired type"},
+	{84, "EOVERFLOW", "value too large to be stored in data type"},
+	{85, "ECANCELED", "operation canceled"},
+	{86, "EILSEQ", "illegal byte sequence"},
+	{87, "ENOATTR", "attribute not found"},
+	{88, "EDOOFUS", "programming error"},
+	{89, "EBADMSG", "bad message"},
+	{90, "EMULTIHOP", "multihop attempted"},
+	{91, "ENOLINK", "link has been severed"},
+	{92, "EPROTO", "protocol error"},
+	{93, "ENOTCAPABLE", "capabilities insufficient"},
+	{94, "ECAPMODE", "not permitted in capability mode"},
+	{95, "ENOTRECOVERABLE", "state not recoverable"},
+	{96, "EOWNERDEAD", "previous owner died"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGIOT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "suspended (signal)"},
+	{18, "SIGTSTP", "suspended"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+	{32, "SIGTHR", "unknown signal"},
+	{33, "SIGLIBRT", "unknown signal"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux.go
new file mode 100644
index 000000000..79e032f4f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux.go
@@ -0,0 +1,2536 @@
+// Code generated by mkmerge.go; DO NOT EDIT.
+
+// +build linux
+
+package unix
+
+import "syscall"
+
+const (
+	AAFS_MAGIC                                  = 0x5a3c69f0
+	ADFS_SUPER_MAGIC                            = 0xadf5
+	AFFS_SUPER_MAGIC                            = 0xadff
+	AFS_FS_MAGIC                                = 0x6b414653
+	AFS_SUPER_MAGIC                             = 0x5346414f
+	AF_ALG                                      = 0x26
+	AF_APPLETALK                                = 0x5
+	AF_ASH                                      = 0x12
+	AF_ATMPVC                                   = 0x8
+	AF_ATMSVC                                   = 0x14
+	AF_AX25                                     = 0x3
+	AF_BLUETOOTH                                = 0x1f
+	AF_BRIDGE                                   = 0x7
+	AF_CAIF                                     = 0x25
+	AF_CAN                                      = 0x1d
+	AF_DECnet                                   = 0xc
+	AF_ECONET                                   = 0x13
+	AF_FILE                                     = 0x1
+	AF_IB                                       = 0x1b
+	AF_IEEE802154                               = 0x24
+	AF_INET                                     = 0x2
+	AF_INET6                                    = 0xa
+	AF_IPX                                      = 0x4
+	AF_IRDA                                     = 0x17
+	AF_ISDN                                     = 0x22
+	AF_IUCV                                     = 0x20
+	AF_KCM                                      = 0x29
+	AF_KEY                                      = 0xf
+	AF_LLC                                      = 0x1a
+	AF_LOCAL                                    = 0x1
+	AF_MAX                                      = 0x2d
+	AF_MPLS                                     = 0x1c
+	AF_NETBEUI                                  = 0xd
+	AF_NETLINK                                  = 0x10
+	AF_NETROM                                   = 0x6
+	AF_NFC                                      = 0x27
+	AF_PACKET                                   = 0x11
+	AF_PHONET                                   = 0x23
+	AF_PPPOX                                    = 0x18
+	AF_QIPCRTR                                  = 0x2a
+	AF_RDS                                      = 0x15
+	AF_ROSE                                     = 0xb
+	AF_ROUTE                                    = 0x10
+	AF_RXRPC                                    = 0x21
+	AF_SECURITY                                 = 0xe
+	AF_SMC                                      = 0x2b
+	AF_SNA                                      = 0x16
+	AF_TIPC                                     = 0x1e
+	AF_UNIX                                     = 0x1
+	AF_UNSPEC                                   = 0x0
+	AF_VSOCK                                    = 0x28
+	AF_WANPIPE                                  = 0x19
+	AF_X25                                      = 0x9
+	AF_XDP                                      = 0x2c
+	ALG_OP_DECRYPT                              = 0x0
+	ALG_OP_ENCRYPT                              = 0x1
+	ALG_SET_AEAD_ASSOCLEN                       = 0x4
+	ALG_SET_AEAD_AUTHSIZE                       = 0x5
+	ALG_SET_IV                                  = 0x2
+	ALG_SET_KEY                                 = 0x1
+	ALG_SET_OP                                  = 0x3
+	ANON_INODE_FS_MAGIC                         = 0x9041934
+	ARPHRD_6LOWPAN                              = 0x339
+	ARPHRD_ADAPT                                = 0x108
+	ARPHRD_APPLETLK                             = 0x8
+	ARPHRD_ARCNET                               = 0x7
+	ARPHRD_ASH                                  = 0x30d
+	ARPHRD_ATM                                  = 0x13
+	ARPHRD_AX25                                 = 0x3
+	ARPHRD_BIF                                  = 0x307
+	ARPHRD_CAIF                                 = 0x336
+	ARPHRD_CAN                                  = 0x118
+	ARPHRD_CHAOS                                = 0x5
+	ARPHRD_CISCO                                = 0x201
+	ARPHRD_CSLIP                                = 0x101
+	ARPHRD_CSLIP6                               = 0x103
+	ARPHRD_DDCMP                                = 0x205
+	ARPHRD_DLCI                                 = 0xf
+	ARPHRD_ECONET                               = 0x30e
+	ARPHRD_EETHER                               = 0x2
+	ARPHRD_ETHER                                = 0x1
+	ARPHRD_EUI64                                = 0x1b
+	ARPHRD_FCAL                                 = 0x311
+	ARPHRD_FCFABRIC                             = 0x313
+	ARPHRD_FCPL                                 = 0x312
+	ARPHRD_FCPP                                 = 0x310
+	ARPHRD_FDDI                                 = 0x306
+	ARPHRD_FRAD                                 = 0x302
+	ARPHRD_HDLC                                 = 0x201
+	ARPHRD_HIPPI                                = 0x30c
+	ARPHRD_HWX25                                = 0x110
+	ARPHRD_IEEE1394                             = 0x18
+	ARPHRD_IEEE802                              = 0x6
+	ARPHRD_IEEE80211                            = 0x321
+	ARPHRD_IEEE80211_PRISM                      = 0x322
+	ARPHRD_IEEE80211_RADIOTAP                   = 0x323
+	ARPHRD_IEEE802154                           = 0x324
+	ARPHRD_IEEE802154_MONITOR                   = 0x325
+	ARPHRD_IEEE802_TR                           = 0x320
+	ARPHRD_INFINIBAND                           = 0x20
+	ARPHRD_IP6GRE                               = 0x337
+	ARPHRD_IPDDP                                = 0x309
+	ARPHRD_IPGRE                                = 0x30a
+	ARPHRD_IRDA                                 = 0x30f
+	ARPHRD_LAPB                                 = 0x204
+	ARPHRD_LOCALTLK                             = 0x305
+	ARPHRD_LOOPBACK                             = 0x304
+	ARPHRD_METRICOM                             = 0x17
+	ARPHRD_NETLINK                              = 0x338
+	ARPHRD_NETROM                               = 0x0
+	ARPHRD_NONE                                 = 0xfffe
+	ARPHRD_PHONET                               = 0x334
+	ARPHRD_PHONET_PIPE                          = 0x335
+	ARPHRD_PIMREG                               = 0x30b
+	ARPHRD_PPP                                  = 0x200
+	ARPHRD_PRONET                               = 0x4
+	ARPHRD_RAWHDLC                              = 0x206
+	ARPHRD_RAWIP                                = 0x207
+	ARPHRD_ROSE                                 = 0x10e
+	ARPHRD_RSRVD                                = 0x104
+	ARPHRD_SIT                                  = 0x308
+	ARPHRD_SKIP                                 = 0x303
+	ARPHRD_SLIP                                 = 0x100
+	ARPHRD_SLIP6                                = 0x102
+	ARPHRD_TUNNEL                               = 0x300
+	ARPHRD_TUNNEL6                              = 0x301
+	ARPHRD_VOID                                 = 0xffff
+	ARPHRD_VSOCKMON                             = 0x33a
+	ARPHRD_X25                                  = 0x10f
+	AUTOFS_SUPER_MAGIC                          = 0x187
+	B0                                          = 0x0
+	B110                                        = 0x3
+	B1200                                       = 0x9
+	B134                                        = 0x4
+	B150                                        = 0x5
+	B1800                                       = 0xa
+	B19200                                      = 0xe
+	B200                                        = 0x6
+	B2400                                       = 0xb
+	B300                                        = 0x7
+	B38400                                      = 0xf
+	B4800                                       = 0xc
+	B50                                         = 0x1
+	B600                                        = 0x8
+	B75                                         = 0x2
+	B9600                                       = 0xd
+	BALLOON_KVM_MAGIC                           = 0x13661366
+	BDEVFS_MAGIC                                = 0x62646576
+	BINDERFS_SUPER_MAGIC                        = 0x6c6f6f70
+	BINFMTFS_MAGIC                              = 0x42494e4d
+	BPF_A                                       = 0x10
+	BPF_ABS                                     = 0x20
+	BPF_ADD                                     = 0x0
+	BPF_ALU                                     = 0x4
+	BPF_ALU64                                   = 0x7
+	BPF_AND                                     = 0x50
+	BPF_ARSH                                    = 0xc0
+	BPF_B                                       = 0x10
+	BPF_BUILD_ID_SIZE                           = 0x14
+	BPF_CALL                                    = 0x80
+	BPF_DIV                                     = 0x30
+	BPF_DW                                      = 0x18
+	BPF_END                                     = 0xd0
+	BPF_EXIT                                    = 0x90
+	BPF_FROM_BE                                 = 0x8
+	BPF_FROM_LE                                 = 0x0
+	BPF_FS_MAGIC                                = 0xcafe4a11
+	BPF_F_ALLOW_MULTI                           = 0x2
+	BPF_F_ALLOW_OVERRIDE                        = 0x1
+	BPF_F_ANY_ALIGNMENT                         = 0x2
+	BPF_F_QUERY_EFFECTIVE                       = 0x1
+	BPF_F_REPLACE                               = 0x4
+	BPF_F_STRICT_ALIGNMENT                      = 0x1
+	BPF_F_TEST_RND_HI32                         = 0x4
+	BPF_F_TEST_STATE_FREQ                       = 0x8
+	BPF_H                                       = 0x8
+	BPF_IMM                                     = 0x0
+	BPF_IND                                     = 0x40
+	BPF_JA                                      = 0x0
+	BPF_JEQ                                     = 0x10
+	BPF_JGE                                     = 0x30
+	BPF_JGT                                     = 0x20
+	BPF_JLE                                     = 0xb0
+	BPF_JLT                                     = 0xa0
+	BPF_JMP                                     = 0x5
+	BPF_JMP32                                   = 0x6
+	BPF_JNE                                     = 0x50
+	BPF_JSET                                    = 0x40
+	BPF_JSGE                                    = 0x70
+	BPF_JSGT                                    = 0x60
+	BPF_JSLE                                    = 0xd0
+	BPF_JSLT                                    = 0xc0
+	BPF_K                                       = 0x0
+	BPF_LD                                      = 0x0
+	BPF_LDX                                     = 0x1
+	BPF_LEN                                     = 0x80
+	BPF_LL_OFF                                  = -0x200000
+	BPF_LSH                                     = 0x60
+	BPF_MAJOR_VERSION                           = 0x1
+	BPF_MAXINSNS                                = 0x1000
+	BPF_MEM                                     = 0x60
+	BPF_MEMWORDS                                = 0x10
+	BPF_MINOR_VERSION                           = 0x1
+	BPF_MISC                                    = 0x7
+	BPF_MOD                                     = 0x90
+	BPF_MOV                                     = 0xb0
+	BPF_MSH                                     = 0xa0
+	BPF_MUL                                     = 0x20
+	BPF_NEG                                     = 0x80
+	BPF_NET_OFF                                 = -0x100000
+	BPF_OBJ_NAME_LEN                            = 0x10
+	BPF_OR                                      = 0x40
+	BPF_PSEUDO_CALL                             = 0x1
+	BPF_PSEUDO_MAP_FD                           = 0x1
+	BPF_PSEUDO_MAP_VALUE                        = 0x2
+	BPF_RET                                     = 0x6
+	BPF_RSH                                     = 0x70
+	BPF_ST                                      = 0x2
+	BPF_STX                                     = 0x3
+	BPF_SUB                                     = 0x10
+	BPF_TAG_SIZE                                = 0x8
+	BPF_TAX                                     = 0x0
+	BPF_TO_BE                                   = 0x8
+	BPF_TO_LE                                   = 0x0
+	BPF_TXA                                     = 0x80
+	BPF_W                                       = 0x0
+	BPF_X                                       = 0x8
+	BPF_XADD                                    = 0xc0
+	BPF_XOR                                     = 0xa0
+	BRKINT                                      = 0x2
+	BS0                                         = 0x0
+	BTRFS_SUPER_MAGIC                           = 0x9123683e
+	BTRFS_TEST_MAGIC                            = 0x73727279
+	CAN_BCM                                     = 0x2
+	CAN_EFF_FLAG                                = 0x80000000
+	CAN_EFF_ID_BITS                             = 0x1d
+	CAN_EFF_MASK                                = 0x1fffffff
+	CAN_ERR_ACK                                 = 0x20
+	CAN_ERR_BUSERROR                            = 0x80
+	CAN_ERR_BUSOFF                              = 0x40
+	CAN_ERR_CRTL                                = 0x4
+	CAN_ERR_CRTL_ACTIVE                         = 0x40
+	CAN_ERR_CRTL_RX_OVERFLOW                    = 0x1
+	CAN_ERR_CRTL_RX_PASSIVE                     = 0x10
+	CAN_ERR_CRTL_RX_WARNING                     = 0x4
+	CAN_ERR_CRTL_TX_OVERFLOW                    = 0x2
+	CAN_ERR_CRTL_TX_PASSIVE                     = 0x20
+	CAN_ERR_CRTL_TX_WARNING                     = 0x8
+	CAN_ERR_CRTL_UNSPEC                         = 0x0
+	CAN_ERR_DLC                                 = 0x8
+	CAN_ERR_FLAG                                = 0x20000000
+	CAN_ERR_LOSTARB                             = 0x2
+	CAN_ERR_LOSTARB_UNSPEC                      = 0x0
+	CAN_ERR_MASK                                = 0x1fffffff
+	CAN_ERR_PROT                                = 0x8
+	CAN_ERR_PROT_ACTIVE                         = 0x40
+	CAN_ERR_PROT_BIT                            = 0x1
+	CAN_ERR_PROT_BIT0                           = 0x8
+	CAN_ERR_PROT_BIT1                           = 0x10
+	CAN_ERR_PROT_FORM                           = 0x2
+	CAN_ERR_PROT_LOC_ACK                        = 0x19
+	CAN_ERR_PROT_LOC_ACK_DEL                    = 0x1b
+	CAN_ERR_PROT_LOC_CRC_DEL                    = 0x18
+	CAN_ERR_PROT_LOC_CRC_SEQ                    = 0x8
+	CAN_ERR_PROT_LOC_DATA                       = 0xa
+	CAN_ERR_PROT_LOC_DLC                        = 0xb
+	CAN_ERR_PROT_LOC_EOF                        = 0x1a
+	CAN_ERR_PROT_LOC_ID04_00                    = 0xe
+	CAN_ERR_PROT_LOC_ID12_05                    = 0xf
+	CAN_ERR_PROT_LOC_ID17_13                    = 0x7
+	CAN_ERR_PROT_LOC_ID20_18                    = 0x6
+	CAN_ERR_PROT_LOC_ID28_21                    = 0x2
+	CAN_ERR_PROT_LOC_IDE                        = 0x5
+	CAN_ERR_PROT_LOC_INTERM                     = 0x12
+	CAN_ERR_PROT_LOC_RES0                       = 0x9
+	CAN_ERR_PROT_LOC_RES1                       = 0xd
+	CAN_ERR_PROT_LOC_RTR                        = 0xc
+	CAN_ERR_PROT_LOC_SOF                        = 0x3
+	CAN_ERR_PROT_LOC_SRTR                       = 0x4
+	CAN_ERR_PROT_LOC_UNSPEC                     = 0x0
+	CAN_ERR_PROT_OVERLOAD                       = 0x20
+	CAN_ERR_PROT_STUFF                          = 0x4
+	CAN_ERR_PROT_TX                             = 0x80
+	CAN_ERR_PROT_UNSPEC                         = 0x0
+	CAN_ERR_RESTARTED                           = 0x100
+	CAN_ERR_TRX                                 = 0x10
+	CAN_ERR_TRX_CANH_NO_WIRE                    = 0x4
+	CAN_ERR_TRX_CANH_SHORT_TO_BAT               = 0x5
+	CAN_ERR_TRX_CANH_SHORT_TO_GND               = 0x7
+	CAN_ERR_TRX_CANH_SHORT_TO_VCC               = 0x6
+	CAN_ERR_TRX_CANL_NO_WIRE                    = 0x40
+	CAN_ERR_TRX_CANL_SHORT_TO_BAT               = 0x50
+	CAN_ERR_TRX_CANL_SHORT_TO_CANH              = 0x80
+	CAN_ERR_TRX_CANL_SHORT_TO_GND               = 0x70
+	CAN_ERR_TRX_CANL_SHORT_TO_VCC               = 0x60
+	CAN_ERR_TRX_UNSPEC                          = 0x0
+	CAN_ERR_TX_TIMEOUT                          = 0x1
+	CAN_INV_FILTER                              = 0x20000000
+	CAN_ISOTP                                   = 0x6
+	CAN_J1939                                   = 0x7
+	CAN_MAX_DLC                                 = 0x8
+	CAN_MAX_DLEN                                = 0x8
+	CAN_MCNET                                   = 0x5
+	CAN_MTU                                     = 0x10
+	CAN_NPROTO                                  = 0x8
+	CAN_RAW                                     = 0x1
+	CAN_RAW_FILTER_MAX                          = 0x200
+	CAN_RTR_FLAG                                = 0x40000000
+	CAN_SFF_ID_BITS                             = 0xb
+	CAN_SFF_MASK                                = 0x7ff
+	CAN_TP16                                    = 0x3
+	CAN_TP20                                    = 0x4
+	CAP_AUDIT_CONTROL                           = 0x1e
+	CAP_AUDIT_READ                              = 0x25
+	CAP_AUDIT_WRITE                             = 0x1d
+	CAP_BLOCK_SUSPEND                           = 0x24
+	CAP_BPF                                     = 0x27
+	CAP_CHOWN                                   = 0x0
+	CAP_DAC_OVERRIDE                            = 0x1
+	CAP_DAC_READ_SEARCH                         = 0x2
+	CAP_FOWNER                                  = 0x3
+	CAP_FSETID                                  = 0x4
+	CAP_IPC_LOCK                                = 0xe
+	CAP_IPC_OWNER                               = 0xf
+	CAP_KILL                                    = 0x5
+	CAP_LAST_CAP                                = 0x27
+	CAP_LEASE                                   = 0x1c
+	CAP_LINUX_IMMUTABLE                         = 0x9
+	CAP_MAC_ADMIN                               = 0x21
+	CAP_MAC_OVERRIDE                            = 0x20
+	CAP_MKNOD                                   = 0x1b
+	CAP_NET_ADMIN                               = 0xc
+	CAP_NET_BIND_SERVICE                        = 0xa
+	CAP_NET_BROADCAST                           = 0xb
+	CAP_NET_RAW                                 = 0xd
+	CAP_PERFMON                                 = 0x26
+	CAP_SETFCAP                                 = 0x1f
+	CAP_SETGID                                  = 0x6
+	CAP_SETPCAP                                 = 0x8
+	CAP_SETUID                                  = 0x7
+	CAP_SYSLOG                                  = 0x22
+	CAP_SYS_ADMIN                               = 0x15
+	CAP_SYS_BOOT                                = 0x16
+	CAP_SYS_CHROOT                              = 0x12
+	CAP_SYS_MODULE                              = 0x10
+	CAP_SYS_NICE                                = 0x17
+	CAP_SYS_PACCT                               = 0x14
+	CAP_SYS_PTRACE                              = 0x13
+	CAP_SYS_RAWIO                               = 0x11
+	CAP_SYS_RESOURCE                            = 0x18
+	CAP_SYS_TIME                                = 0x19
+	CAP_SYS_TTY_CONFIG                          = 0x1a
+	CAP_WAKE_ALARM                              = 0x23
+	CFLUSH                                      = 0xf
+	CGROUP2_SUPER_MAGIC                         = 0x63677270
+	CGROUP_SUPER_MAGIC                          = 0x27e0eb
+	CLOCK_BOOTTIME                              = 0x7
+	CLOCK_BOOTTIME_ALARM                        = 0x9
+	CLOCK_DEFAULT                               = 0x0
+	CLOCK_EXT                                   = 0x1
+	CLOCK_INT                                   = 0x2
+	CLOCK_MONOTONIC                             = 0x1
+	CLOCK_MONOTONIC_COARSE                      = 0x6
+	CLOCK_MONOTONIC_RAW                         = 0x4
+	CLOCK_PROCESS_CPUTIME_ID                    = 0x2
+	CLOCK_REALTIME                              = 0x0
+	CLOCK_REALTIME_ALARM                        = 0x8
+	CLOCK_REALTIME_COARSE                       = 0x5
+	CLOCK_TAI                                   = 0xb
+	CLOCK_THREAD_CPUTIME_ID                     = 0x3
+	CLOCK_TXFROMRX                              = 0x4
+	CLOCK_TXINT                                 = 0x3
+	CLONE_ARGS_SIZE_VER0                        = 0x40
+	CLONE_ARGS_SIZE_VER1                        = 0x50
+	CLONE_ARGS_SIZE_VER2                        = 0x58
+	CLONE_CHILD_CLEARTID                        = 0x200000
+	CLONE_CHILD_SETTID                          = 0x1000000
+	CLONE_CLEAR_SIGHAND                         = 0x100000000
+	CLONE_DETACHED                              = 0x400000
+	CLONE_FILES                                 = 0x400
+	CLONE_FS                                    = 0x200
+	CLONE_INTO_CGROUP                           = 0x200000000
+	CLONE_IO                                    = 0x80000000
+	CLONE_NEWCGROUP                             = 0x2000000
+	CLONE_NEWIPC                                = 0x8000000
+	CLONE_NEWNET                                = 0x40000000
+	CLONE_NEWNS                                 = 0x20000
+	CLONE_NEWPID                                = 0x20000000
+	CLONE_NEWTIME                               = 0x80
+	CLONE_NEWUSER                               = 0x10000000
+	CLONE_NEWUTS                                = 0x4000000
+	CLONE_PARENT                                = 0x8000
+	CLONE_PARENT_SETTID                         = 0x100000
+	CLONE_PIDFD                                 = 0x1000
+	CLONE_PTRACE                                = 0x2000
+	CLONE_SETTLS                                = 0x80000
+	CLONE_SIGHAND                               = 0x800
+	CLONE_SYSVSEM                               = 0x40000
+	CLONE_THREAD                                = 0x10000
+	CLONE_UNTRACED                              = 0x800000
+	CLONE_VFORK                                 = 0x4000
+	CLONE_VM                                    = 0x100
+	CMSPAR                                      = 0x40000000
+	CODA_SUPER_MAGIC                            = 0x73757245
+	CR0                                         = 0x0
+	CRAMFS_MAGIC                                = 0x28cd3d45
+	CRTSCTS                                     = 0x80000000
+	CRYPTO_MAX_NAME                             = 0x40
+	CRYPTO_MSG_MAX                              = 0x15
+	CRYPTO_NR_MSGTYPES                          = 0x6
+	CRYPTO_REPORT_MAXSIZE                       = 0x160
+	CS5                                         = 0x0
+	CSIGNAL                                     = 0xff
+	CSTART                                      = 0x11
+	CSTATUS                                     = 0x0
+	CSTOP                                       = 0x13
+	CSUSP                                       = 0x1a
+	DAXFS_MAGIC                                 = 0x64646178
+	DEBUGFS_MAGIC                               = 0x64626720
+	DEVLINK_CMD_ESWITCH_MODE_GET                = 0x1d
+	DEVLINK_CMD_ESWITCH_MODE_SET                = 0x1e
+	DEVLINK_GENL_MCGRP_CONFIG_NAME              = "config"
+	DEVLINK_GENL_NAME                           = "devlink"
+	DEVLINK_GENL_VERSION                        = 0x1
+	DEVLINK_SB_THRESHOLD_TO_ALPHA_MAX           = 0x14
+	DEVMEM_MAGIC                                = 0x454d444d
+	DEVPTS_SUPER_MAGIC                          = 0x1cd1
+	DMA_BUF_MAGIC                               = 0x444d4142
+	DM_ACTIVE_PRESENT_FLAG                      = 0x20
+	DM_BUFFER_FULL_FLAG                         = 0x100
+	DM_CONTROL_NODE                             = "control"
+	DM_DATA_OUT_FLAG                            = 0x10000
+	DM_DEFERRED_REMOVE                          = 0x20000
+	DM_DEV_ARM_POLL                             = 0xc138fd10
+	DM_DEV_CREATE                               = 0xc138fd03
+	DM_DEV_REMOVE                               = 0xc138fd04
+	DM_DEV_RENAME                               = 0xc138fd05
+	DM_DEV_SET_GEOMETRY                         = 0xc138fd0f
+	DM_DEV_STATUS                               = 0xc138fd07
+	DM_DEV_SUSPEND                              = 0xc138fd06
+	DM_DEV_WAIT                                 = 0xc138fd08
+	DM_DIR                                      = "mapper"
+	DM_GET_TARGET_VERSION                       = 0xc138fd11
+	DM_INACTIVE_PRESENT_FLAG                    = 0x40
+	DM_INTERNAL_SUSPEND_FLAG                    = 0x40000
+	DM_IOCTL                                    = 0xfd
+	DM_LIST_DEVICES                             = 0xc138fd02
+	DM_LIST_VERSIONS                            = 0xc138fd0d
+	DM_MAX_TYPE_NAME                            = 0x10
+	DM_NAME_LEN                                 = 0x80
+	DM_NOFLUSH_FLAG                             = 0x800
+	DM_PERSISTENT_DEV_FLAG                      = 0x8
+	DM_QUERY_INACTIVE_TABLE_FLAG                = 0x1000
+	DM_READONLY_FLAG                            = 0x1
+	DM_REMOVE_ALL                               = 0xc138fd01
+	DM_SECURE_DATA_FLAG                         = 0x8000
+	DM_SKIP_BDGET_FLAG                          = 0x200
+	DM_SKIP_LOCKFS_FLAG                         = 0x400
+	DM_STATUS_TABLE_FLAG                        = 0x10
+	DM_SUSPEND_FLAG                             = 0x2
+	DM_TABLE_CLEAR                              = 0xc138fd0a
+	DM_TABLE_DEPS                               = 0xc138fd0b
+	DM_TABLE_LOAD                               = 0xc138fd09
+	DM_TABLE_STATUS                             = 0xc138fd0c
+	DM_TARGET_MSG                               = 0xc138fd0e
+	DM_UEVENT_GENERATED_FLAG                    = 0x2000
+	DM_UUID_FLAG                                = 0x4000
+	DM_UUID_LEN                                 = 0x81
+	DM_VERSION                                  = 0xc138fd00
+	DM_VERSION_EXTRA                            = "-ioctl (2020-02-27)"
+	DM_VERSION_MAJOR                            = 0x4
+	DM_VERSION_MINOR                            = 0x2a
+	DM_VERSION_PATCHLEVEL                       = 0x0
+	DT_BLK                                      = 0x6
+	DT_CHR                                      = 0x2
+	DT_DIR                                      = 0x4
+	DT_FIFO                                     = 0x1
+	DT_LNK                                      = 0xa
+	DT_REG                                      = 0x8
+	DT_SOCK                                     = 0xc
+	DT_UNKNOWN                                  = 0x0
+	DT_WHT                                      = 0xe
+	ECHO                                        = 0x8
+	ECRYPTFS_SUPER_MAGIC                        = 0xf15f
+	EFD_SEMAPHORE                               = 0x1
+	EFIVARFS_MAGIC                              = 0xde5e81e4
+	EFS_SUPER_MAGIC                             = 0x414a53
+	ENCODING_DEFAULT                            = 0x0
+	ENCODING_FM_MARK                            = 0x3
+	ENCODING_FM_SPACE                           = 0x4
+	ENCODING_MANCHESTER                         = 0x5
+	ENCODING_NRZ                                = 0x1
+	ENCODING_NRZI                               = 0x2
+	EPOLLERR                                    = 0x8
+	EPOLLET                                     = 0x80000000
+	EPOLLEXCLUSIVE                              = 0x10000000
+	EPOLLHUP                                    = 0x10
+	EPOLLIN                                     = 0x1
+	EPOLLMSG                                    = 0x400
+	EPOLLONESHOT                                = 0x40000000
+	EPOLLOUT                                    = 0x4
+	EPOLLPRI                                    = 0x2
+	EPOLLRDBAND                                 = 0x80
+	EPOLLRDHUP                                  = 0x2000
+	EPOLLRDNORM                                 = 0x40
+	EPOLLWAKEUP                                 = 0x20000000
+	EPOLLWRBAND                                 = 0x200
+	EPOLLWRNORM                                 = 0x100
+	EPOLL_CTL_ADD                               = 0x1
+	EPOLL_CTL_DEL                               = 0x2
+	EPOLL_CTL_MOD                               = 0x3
+	EROFS_SUPER_MAGIC_V1                        = 0xe0f5e1e2
+	ETH_P_1588                                  = 0x88f7
+	ETH_P_8021AD                                = 0x88a8
+	ETH_P_8021AH                                = 0x88e7
+	ETH_P_8021Q                                 = 0x8100
+	ETH_P_80221                                 = 0x8917
+	ETH_P_802_2                                 = 0x4
+	ETH_P_802_3                                 = 0x1
+	ETH_P_802_3_MIN                             = 0x600
+	ETH_P_802_EX1                               = 0x88b5
+	ETH_P_AARP                                  = 0x80f3
+	ETH_P_AF_IUCV                               = 0xfbfb
+	ETH_P_ALL                                   = 0x3
+	ETH_P_AOE                                   = 0x88a2
+	ETH_P_ARCNET                                = 0x1a
+	ETH_P_ARP                                   = 0x806
+	ETH_P_ATALK                                 = 0x809b
+	ETH_P_ATMFATE                               = 0x8884
+	ETH_P_ATMMPOA                               = 0x884c
+	ETH_P_AX25                                  = 0x2
+	ETH_P_BATMAN                                = 0x4305
+	ETH_P_BPQ                                   = 0x8ff
+	ETH_P_CAIF                                  = 0xf7
+	ETH_P_CAN                                   = 0xc
+	ETH_P_CANFD                                 = 0xd
+	ETH_P_CONTROL                               = 0x16
+	ETH_P_CUST                                  = 0x6006
+	ETH_P_DDCMP                                 = 0x6
+	ETH_P_DEC                                   = 0x6000
+	ETH_P_DIAG                                  = 0x6005
+	ETH_P_DNA_DL                                = 0x6001
+	ETH_P_DNA_RC                                = 0x6002
+	ETH_P_DNA_RT                                = 0x6003
+	ETH_P_DSA                                   = 0x1b
+	ETH_P_DSA_8021Q                             = 0xdadb
+	ETH_P_ECONET                                = 0x18
+	ETH_P_EDSA                                  = 0xdada
+	ETH_P_ERSPAN                                = 0x88be
+	ETH_P_ERSPAN2                               = 0x22eb
+	ETH_P_FCOE                                  = 0x8906
+	ETH_P_FIP                                   = 0x8914
+	ETH_P_HDLC                                  = 0x19
+	ETH_P_HSR                                   = 0x892f
+	ETH_P_IBOE                                  = 0x8915
+	ETH_P_IEEE802154                            = 0xf6
+	ETH_P_IEEEPUP                               = 0xa00
+	ETH_P_IEEEPUPAT                             = 0xa01
+	ETH_P_IFE                                   = 0xed3e
+	ETH_P_IP                                    = 0x800
+	ETH_P_IPV6                                  = 0x86dd
+	ETH_P_IPX                                   = 0x8137
+	ETH_P_IRDA                                  = 0x17
+	ETH_P_LAT                                   = 0x6004
+	ETH_P_LINK_CTL                              = 0x886c
+	ETH_P_LLDP                                  = 0x88cc
+	ETH_P_LOCALTALK                             = 0x9
+	ETH_P_LOOP                                  = 0x60
+	ETH_P_LOOPBACK                              = 0x9000
+	ETH_P_MACSEC                                = 0x88e5
+	ETH_P_MAP                                   = 0xf9
+	ETH_P_MOBITEX                               = 0x15
+	ETH_P_MPLS_MC                               = 0x8848
+	ETH_P_MPLS_UC                               = 0x8847
+	ETH_P_MRP                                   = 0x88e3
+	ETH_P_MVRP                                  = 0x88f5
+	ETH_P_NCSI                                  = 0x88f8
+	ETH_P_NSH                                   = 0x894f
+	ETH_P_PAE                                   = 0x888e
+	ETH_P_PAUSE                                 = 0x8808
+	ETH_P_PHONET                                = 0xf5
+	ETH_P_PPPTALK                               = 0x10
+	ETH_P_PPP_DISC                              = 0x8863
+	ETH_P_PPP_MP                                = 0x8
+	ETH_P_PPP_SES                               = 0x8864
+	ETH_P_PREAUTH                               = 0x88c7
+	ETH_P_PRP                                   = 0x88fb
+	ETH_P_PUP                                   = 0x200
+	ETH_P_PUPAT                                 = 0x201
+	ETH_P_QINQ1                                 = 0x9100
+	ETH_P_QINQ2                                 = 0x9200
+	ETH_P_QINQ3                                 = 0x9300
+	ETH_P_RARP                                  = 0x8035
+	ETH_P_SCA                                   = 0x6007
+	ETH_P_SLOW                                  = 0x8809
+	ETH_P_SNAP                                  = 0x5
+	ETH_P_TDLS                                  = 0x890d
+	ETH_P_TEB                                   = 0x6558
+	ETH_P_TIPC                                  = 0x88ca
+	ETH_P_TRAILER                               = 0x1c
+	ETH_P_TR_802_2                              = 0x11
+	ETH_P_TSN                                   = 0x22f0
+	ETH_P_WAN_PPP                               = 0x7
+	ETH_P_WCCP                                  = 0x883e
+	ETH_P_X25                                   = 0x805
+	ETH_P_XDSA                                  = 0xf8
+	EXABYTE_ENABLE_NEST                         = 0xf0
+	EXT2_SUPER_MAGIC                            = 0xef53
+	EXT3_SUPER_MAGIC                            = 0xef53
+	EXT4_SUPER_MAGIC                            = 0xef53
+	EXTA                                        = 0xe
+	EXTB                                        = 0xf
+	F2FS_SUPER_MAGIC                            = 0xf2f52010
+	FALLOC_FL_COLLAPSE_RANGE                    = 0x8
+	FALLOC_FL_INSERT_RANGE                      = 0x20
+	FALLOC_FL_KEEP_SIZE                         = 0x1
+	FALLOC_FL_NO_HIDE_STALE                     = 0x4
+	FALLOC_FL_PUNCH_HOLE                        = 0x2
+	FALLOC_FL_UNSHARE_RANGE                     = 0x40
+	FALLOC_FL_ZERO_RANGE                        = 0x10
+	FANOTIFY_METADATA_VERSION                   = 0x3
+	FAN_ACCESS                                  = 0x1
+	FAN_ACCESS_PERM                             = 0x20000
+	FAN_ALLOW                                   = 0x1
+	FAN_ALL_CLASS_BITS                          = 0xc
+	FAN_ALL_EVENTS                              = 0x3b
+	FAN_ALL_INIT_FLAGS                          = 0x3f
+	FAN_ALL_MARK_FLAGS                          = 0xff
+	FAN_ALL_OUTGOING_EVENTS                     = 0x3403b
+	FAN_ALL_PERM_EVENTS                         = 0x30000
+	FAN_ATTRIB                                  = 0x4
+	FAN_AUDIT                                   = 0x10
+	FAN_CLASS_CONTENT                           = 0x4
+	FAN_CLASS_NOTIF                             = 0x0
+	FAN_CLASS_PRE_CONTENT                       = 0x8
+	FAN_CLOEXEC                                 = 0x1
+	FAN_CLOSE                                   = 0x18
+	FAN_CLOSE_NOWRITE                           = 0x10
+	FAN_CLOSE_WRITE                             = 0x8
+	FAN_CREATE                                  = 0x100
+	FAN_DELETE                                  = 0x200
+	FAN_DELETE_SELF                             = 0x400
+	FAN_DENY                                    = 0x2
+	FAN_DIR_MODIFY                              = 0x80000
+	FAN_ENABLE_AUDIT                            = 0x40
+	FAN_EVENT_INFO_TYPE_DFID_NAME               = 0x2
+	FAN_EVENT_INFO_TYPE_FID                     = 0x1
+	FAN_EVENT_METADATA_LEN                      = 0x18
+	FAN_EVENT_ON_CHILD                          = 0x8000000
+	FAN_MARK_ADD                                = 0x1
+	FAN_MARK_DONT_FOLLOW                        = 0x4
+	FAN_MARK_FILESYSTEM                         = 0x100
+	FAN_MARK_FLUSH                              = 0x80
+	FAN_MARK_IGNORED_MASK                       = 0x20
+	FAN_MARK_IGNORED_SURV_MODIFY                = 0x40
+	FAN_MARK_INODE                              = 0x0
+	FAN_MARK_MOUNT                              = 0x10
+	FAN_MARK_ONLYDIR                            = 0x8
+	FAN_MARK_REMOVE                             = 0x2
+	FAN_MODIFY                                  = 0x2
+	FAN_MOVE                                    = 0xc0
+	FAN_MOVED_FROM                              = 0x40
+	FAN_MOVED_TO                                = 0x80
+	FAN_MOVE_SELF                               = 0x800
+	FAN_NOFD                                    = -0x1
+	FAN_NONBLOCK                                = 0x2
+	FAN_ONDIR                                   = 0x40000000
+	FAN_OPEN                                    = 0x20
+	FAN_OPEN_EXEC                               = 0x1000
+	FAN_OPEN_EXEC_PERM                          = 0x40000
+	FAN_OPEN_PERM                               = 0x10000
+	FAN_Q_OVERFLOW                              = 0x4000
+	FAN_REPORT_FID                              = 0x200
+	FAN_REPORT_TID                              = 0x100
+	FAN_UNLIMITED_MARKS                         = 0x20
+	FAN_UNLIMITED_QUEUE                         = 0x10
+	FD_CLOEXEC                                  = 0x1
+	FD_SETSIZE                                  = 0x400
+	FF0                                         = 0x0
+	FIDEDUPERANGE                               = 0xc0189436
+	FSCRYPT_KEY_DESCRIPTOR_SIZE                 = 0x8
+	FSCRYPT_KEY_DESC_PREFIX                     = "fscrypt:"
+	FSCRYPT_KEY_DESC_PREFIX_SIZE                = 0x8
+	FSCRYPT_KEY_IDENTIFIER_SIZE                 = 0x10
+	FSCRYPT_KEY_REMOVAL_STATUS_FLAG_FILES_BUSY  = 0x1
+	FSCRYPT_KEY_REMOVAL_STATUS_FLAG_OTHER_USERS = 0x2
+	FSCRYPT_KEY_SPEC_TYPE_DESCRIPTOR            = 0x1
+	FSCRYPT_KEY_SPEC_TYPE_IDENTIFIER            = 0x2
+	FSCRYPT_KEY_STATUS_ABSENT                   = 0x1
+	FSCRYPT_KEY_STATUS_FLAG_ADDED_BY_SELF       = 0x1
+	FSCRYPT_KEY_STATUS_INCOMPLETELY_REMOVED     = 0x3
+	FSCRYPT_KEY_STATUS_PRESENT                  = 0x2
+	FSCRYPT_MAX_KEY_SIZE                        = 0x40
+	FSCRYPT_MODE_ADIANTUM                       = 0x9
+	FSCRYPT_MODE_AES_128_CBC                    = 0x5
+	FSCRYPT_MODE_AES_128_CTS                    = 0x6
+	FSCRYPT_MODE_AES_256_CTS                    = 0x4
+	FSCRYPT_MODE_AES_256_XTS                    = 0x1
+	FSCRYPT_POLICY_FLAGS_PAD_16                 = 0x2
+	FSCRYPT_POLICY_FLAGS_PAD_32                 = 0x3
+	FSCRYPT_POLICY_FLAGS_PAD_4                  = 0x0
+	FSCRYPT_POLICY_FLAGS_PAD_8                  = 0x1
+	FSCRYPT_POLICY_FLAGS_PAD_MASK               = 0x3
+	FSCRYPT_POLICY_FLAGS_VALID                  = 0x1f
+	FSCRYPT_POLICY_FLAG_DIRECT_KEY              = 0x4
+	FSCRYPT_POLICY_FLAG_IV_INO_LBLK_32          = 0x10
+	FSCRYPT_POLICY_FLAG_IV_INO_LBLK_64          = 0x8
+	FSCRYPT_POLICY_V1                           = 0x0
+	FSCRYPT_POLICY_V2                           = 0x2
+	FS_ENCRYPTION_MODE_ADIANTUM                 = 0x9
+	FS_ENCRYPTION_MODE_AES_128_CBC              = 0x5
+	FS_ENCRYPTION_MODE_AES_128_CTS              = 0x6
+	FS_ENCRYPTION_MODE_AES_256_CBC              = 0x3
+	FS_ENCRYPTION_MODE_AES_256_CTS              = 0x4
+	FS_ENCRYPTION_MODE_AES_256_GCM              = 0x2
+	FS_ENCRYPTION_MODE_AES_256_XTS              = 0x1
+	FS_ENCRYPTION_MODE_INVALID                  = 0x0
+	FS_ENCRYPTION_MODE_SPECK128_256_CTS         = 0x8
+	FS_ENCRYPTION_MODE_SPECK128_256_XTS         = 0x7
+	FS_IOC_ADD_ENCRYPTION_KEY                   = 0xc0506617
+	FS_IOC_GET_ENCRYPTION_KEY_STATUS            = 0xc080661a
+	FS_IOC_GET_ENCRYPTION_POLICY_EX             = 0xc0096616
+	FS_IOC_MEASURE_VERITY                       = 0xc0046686
+	FS_IOC_REMOVE_ENCRYPTION_KEY                = 0xc0406618
+	FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS      = 0xc0406619
+	FS_KEY_DESCRIPTOR_SIZE                      = 0x8
+	FS_KEY_DESC_PREFIX                          = "fscrypt:"
+	FS_KEY_DESC_PREFIX_SIZE                     = 0x8
+	FS_MAX_KEY_SIZE                             = 0x40
+	FS_POLICY_FLAGS_PAD_16                      = 0x2
+	FS_POLICY_FLAGS_PAD_32                      = 0x3
+	FS_POLICY_FLAGS_PAD_4                       = 0x0
+	FS_POLICY_FLAGS_PAD_8                       = 0x1
+	FS_POLICY_FLAGS_PAD_MASK                    = 0x3
+	FS_POLICY_FLAGS_VALID                       = 0x1f
+	FS_VERITY_FL                                = 0x100000
+	FS_VERITY_HASH_ALG_SHA256                   = 0x1
+	FS_VERITY_HASH_ALG_SHA512                   = 0x2
+	FUTEXFS_SUPER_MAGIC                         = 0xbad1dea
+	F_ADD_SEALS                                 = 0x409
+	F_DUPFD                                     = 0x0
+	F_DUPFD_CLOEXEC                             = 0x406
+	F_EXLCK                                     = 0x4
+	F_GETFD                                     = 0x1
+	F_GETFL                                     = 0x3
+	F_GETLEASE                                  = 0x401
+	F_GETOWN_EX                                 = 0x10
+	F_GETPIPE_SZ                                = 0x408
+	F_GETSIG                                    = 0xb
+	F_GET_FILE_RW_HINT                          = 0x40d
+	F_GET_RW_HINT                               = 0x40b
+	F_GET_SEALS                                 = 0x40a
+	F_LOCK                                      = 0x1
+	F_NOTIFY                                    = 0x402
+	F_OFD_GETLK                                 = 0x24
+	F_OFD_SETLK                                 = 0x25
+	F_OFD_SETLKW                                = 0x26
+	F_OK                                        = 0x0
+	F_SEAL_FUTURE_WRITE                         = 0x10
+	F_SEAL_GROW                                 = 0x4
+	F_SEAL_SEAL                                 = 0x1
+	F_SEAL_SHRINK                               = 0x2
+	F_SEAL_WRITE                                = 0x8
+	F_SETFD                                     = 0x2
+	F_SETFL                                     = 0x4
+	F_SETLEASE                                  = 0x400
+	F_SETOWN_EX                                 = 0xf
+	F_SETPIPE_SZ                                = 0x407
+	F_SETSIG                                    = 0xa
+	F_SET_FILE_RW_HINT                          = 0x40e
+	F_SET_RW_HINT                               = 0x40c
+	F_SHLCK                                     = 0x8
+	F_TEST                                      = 0x3
+	F_TLOCK                                     = 0x2
+	F_ULOCK                                     = 0x0
+	GENL_ADMIN_PERM                             = 0x1
+	GENL_CMD_CAP_DO                             = 0x2
+	GENL_CMD_CAP_DUMP                           = 0x4
+	GENL_CMD_CAP_HASPOL                         = 0x8
+	GENL_HDRLEN                                 = 0x4
+	GENL_ID_CTRL                                = 0x10
+	GENL_ID_PMCRAID                             = 0x12
+	GENL_ID_VFS_DQUOT                           = 0x11
+	GENL_MAX_ID                                 = 0x3ff
+	GENL_MIN_ID                                 = 0x10
+	GENL_NAMSIZ                                 = 0x10
+	GENL_START_ALLOC                            = 0x13
+	GENL_UNS_ADMIN_PERM                         = 0x10
+	GRND_INSECURE                               = 0x4
+	GRND_NONBLOCK                               = 0x1
+	GRND_RANDOM                                 = 0x2
+	HDIO_DRIVE_CMD                              = 0x31f
+	HDIO_DRIVE_CMD_AEB                          = 0x31e
+	HDIO_DRIVE_CMD_HDR_SIZE                     = 0x4
+	HDIO_DRIVE_HOB_HDR_SIZE                     = 0x8
+	HDIO_DRIVE_RESET                            = 0x31c
+	HDIO_DRIVE_TASK                             = 0x31e
+	HDIO_DRIVE_TASKFILE                         = 0x31d
+	HDIO_DRIVE_TASK_HDR_SIZE                    = 0x8
+	HDIO_GETGEO                                 = 0x301
+	HDIO_GET_32BIT                              = 0x309
+	HDIO_GET_ACOUSTIC                           = 0x30f
+	HDIO_GET_ADDRESS                            = 0x310
+	HDIO_GET_BUSSTATE                           = 0x31a
+	HDIO_GET_DMA                                = 0x30b
+	HDIO_GET_IDENTITY                           = 0x30d
+	HDIO_GET_KEEPSETTINGS                       = 0x308
+	HDIO_GET_MULTCOUNT                          = 0x304
+	HDIO_GET_NICE                               = 0x30c
+	HDIO_GET_NOWERR                             = 0x30a
+	HDIO_GET_QDMA                               = 0x305
+	HDIO_GET_UNMASKINTR                         = 0x302
+	HDIO_GET_WCACHE                             = 0x30e
+	HDIO_OBSOLETE_IDENTITY                      = 0x307
+	HDIO_SCAN_HWIF                              = 0x328
+	HDIO_SET_32BIT                              = 0x324
+	HDIO_SET_ACOUSTIC                           = 0x32c
+	HDIO_SET_ADDRESS                            = 0x32f
+	HDIO_SET_BUSSTATE                           = 0x32d
+	HDIO_SET_DMA                                = 0x326
+	HDIO_SET_KEEPSETTINGS                       = 0x323
+	HDIO_SET_MULTCOUNT                          = 0x321
+	HDIO_SET_NICE                               = 0x329
+	HDIO_SET_NOWERR                             = 0x325
+	HDIO_SET_PIO_MODE                           = 0x327
+	HDIO_SET_QDMA                               = 0x32e
+	HDIO_SET_UNMASKINTR                         = 0x322
+	HDIO_SET_WCACHE                             = 0x32b
+	HDIO_SET_XFER                               = 0x306
+	HDIO_TRISTATE_HWIF                          = 0x31b
+	HDIO_UNREGISTER_HWIF                        = 0x32a
+	HOSTFS_SUPER_MAGIC                          = 0xc0ffee
+	HPFS_SUPER_MAGIC                            = 0xf995e849
+	HUGETLBFS_MAGIC                             = 0x958458f6
+	IBSHIFT                                     = 0x10
+	ICMPV6_FILTER                               = 0x1
+	ICRNL                                       = 0x100
+	IFA_F_DADFAILED                             = 0x8
+	IFA_F_DEPRECATED                            = 0x20
+	IFA_F_HOMEADDRESS                           = 0x10
+	IFA_F_MANAGETEMPADDR                        = 0x100
+	IFA_F_MCAUTOJOIN                            = 0x400
+	IFA_F_NODAD                                 = 0x2
+	IFA_F_NOPREFIXROUTE                         = 0x200
+	IFA_F_OPTIMISTIC                            = 0x4
+	IFA_F_PERMANENT                             = 0x80
+	IFA_F_SECONDARY                             = 0x1
+	IFA_F_STABLE_PRIVACY                        = 0x800
+	IFA_F_TEMPORARY                             = 0x1
+	IFA_F_TENTATIVE                             = 0x40
+	IFA_MAX                                     = 0xa
+	IFF_ALLMULTI                                = 0x200
+	IFF_ATTACH_QUEUE                            = 0x200
+	IFF_AUTOMEDIA                               = 0x4000
+	IFF_BROADCAST                               = 0x2
+	IFF_DEBUG                                   = 0x4
+	IFF_DETACH_QUEUE                            = 0x400
+	IFF_DORMANT                                 = 0x20000
+	IFF_DYNAMIC                                 = 0x8000
+	IFF_ECHO                                    = 0x40000
+	IFF_LOOPBACK                                = 0x8
+	IFF_LOWER_UP                                = 0x10000
+	IFF_MASTER                                  = 0x400
+	IFF_MULTICAST                               = 0x1000
+	IFF_MULTI_QUEUE                             = 0x100
+	IFF_NAPI                                    = 0x10
+	IFF_NAPI_FRAGS                              = 0x20
+	IFF_NOARP                                   = 0x80
+	IFF_NOFILTER                                = 0x1000
+	IFF_NOTRAILERS                              = 0x20
+	IFF_NO_PI                                   = 0x1000
+	IFF_ONE_QUEUE                               = 0x2000
+	IFF_PERSIST                                 = 0x800
+	IFF_POINTOPOINT                             = 0x10
+	IFF_PORTSEL                                 = 0x2000
+	IFF_PROMISC                                 = 0x100
+	IFF_RUNNING                                 = 0x40
+	IFF_SLAVE                                   = 0x800
+	IFF_TAP                                     = 0x2
+	IFF_TUN                                     = 0x1
+	IFF_TUN_EXCL                                = 0x8000
+	IFF_UP                                      = 0x1
+	IFF_VNET_HDR                                = 0x4000
+	IFF_VOLATILE                                = 0x70c5a
+	IFNAMSIZ                                    = 0x10
+	IGNBRK                                      = 0x1
+	IGNCR                                       = 0x80
+	IGNPAR                                      = 0x4
+	IMAXBEL                                     = 0x2000
+	INLCR                                       = 0x40
+	INPCK                                       = 0x10
+	IN_ACCESS                                   = 0x1
+	IN_ALL_EVENTS                               = 0xfff
+	IN_ATTRIB                                   = 0x4
+	IN_CLASSA_HOST                              = 0xffffff
+	IN_CLASSA_MAX                               = 0x80
+	IN_CLASSA_NET                               = 0xff000000
+	IN_CLASSA_NSHIFT                            = 0x18
+	IN_CLASSB_HOST                              = 0xffff
+	IN_CLASSB_MAX                               = 0x10000
+	IN_CLASSB_NET                               = 0xffff0000
+	IN_CLASSB_NSHIFT                            = 0x10
+	IN_CLASSC_HOST                              = 0xff
+	IN_CLASSC_NET                               = 0xffffff00
+	IN_CLASSC_NSHIFT                            = 0x8
+	IN_CLOSE                                    = 0x18
+	IN_CLOSE_NOWRITE                            = 0x10
+	IN_CLOSE_WRITE                              = 0x8
+	IN_CREATE                                   = 0x100
+	IN_DELETE                                   = 0x200
+	IN_DELETE_SELF                              = 0x400
+	IN_DONT_FOLLOW                              = 0x2000000
+	IN_EXCL_UNLINK                              = 0x4000000
+	IN_IGNORED                                  = 0x8000
+	IN_ISDIR                                    = 0x40000000
+	IN_LOOPBACKNET                              = 0x7f
+	IN_MASK_ADD                                 = 0x20000000
+	IN_MASK_CREATE                              = 0x10000000
+	IN_MODIFY                                   = 0x2
+	IN_MOVE                                     = 0xc0
+	IN_MOVED_FROM                               = 0x40
+	IN_MOVED_TO                                 = 0x80
+	IN_MOVE_SELF                                = 0x800
+	IN_ONESHOT                                  = 0x80000000
+	IN_ONLYDIR                                  = 0x1000000
+	IN_OPEN                                     = 0x20
+	IN_Q_OVERFLOW                               = 0x4000
+	IN_UNMOUNT                                  = 0x2000
+	IPPROTO_AH                                  = 0x33
+	IPPROTO_BEETPH                              = 0x5e
+	IPPROTO_COMP                                = 0x6c
+	IPPROTO_DCCP                                = 0x21
+	IPPROTO_DSTOPTS                             = 0x3c
+	IPPROTO_EGP                                 = 0x8
+	IPPROTO_ENCAP                               = 0x62
+	IPPROTO_ESP                                 = 0x32
+	IPPROTO_ETHERNET                            = 0x8f
+	IPPROTO_FRAGMENT                            = 0x2c
+	IPPROTO_GRE                                 = 0x2f
+	IPPROTO_HOPOPTS                             = 0x0
+	IPPROTO_ICMP                                = 0x1
+	IPPROTO_ICMPV6                              = 0x3a
+	IPPROTO_IDP                                 = 0x16
+	IPPROTO_IGMP                                = 0x2
+	IPPROTO_IP                                  = 0x0
+	IPPROTO_IPIP                                = 0x4
+	IPPROTO_IPV6                                = 0x29
+	IPPROTO_L2TP                                = 0x73
+	IPPROTO_MH                                  = 0x87
+	IPPROTO_MPLS                                = 0x89
+	IPPROTO_MPTCP                               = 0x106
+	IPPROTO_MTP                                 = 0x5c
+	IPPROTO_NONE                                = 0x3b
+	IPPROTO_PIM                                 = 0x67
+	IPPROTO_PUP                                 = 0xc
+	IPPROTO_RAW                                 = 0xff
+	IPPROTO_ROUTING                             = 0x2b
+	IPPROTO_RSVP                                = 0x2e
+	IPPROTO_SCTP                                = 0x84
+	IPPROTO_TCP                                 = 0x6
+	IPPROTO_TP                                  = 0x1d
+	IPPROTO_UDP                                 = 0x11
+	IPPROTO_UDPLITE                             = 0x88
+	IPV6_2292DSTOPTS                            = 0x4
+	IPV6_2292HOPLIMIT                           = 0x8
+	IPV6_2292HOPOPTS                            = 0x3
+	IPV6_2292PKTINFO                            = 0x2
+	IPV6_2292PKTOPTIONS                         = 0x6
+	IPV6_2292RTHDR                              = 0x5
+	IPV6_ADDRFORM                               = 0x1
+	IPV6_ADDR_PREFERENCES                       = 0x48
+	IPV6_ADD_MEMBERSHIP                         = 0x14
+	IPV6_AUTHHDR                                = 0xa
+	IPV6_AUTOFLOWLABEL                          = 0x46
+	IPV6_CHECKSUM                               = 0x7
+	IPV6_DONTFRAG                               = 0x3e
+	IPV6_DROP_MEMBERSHIP                        = 0x15
+	IPV6_DSTOPTS                                = 0x3b
+	IPV6_FREEBIND                               = 0x4e
+	IPV6_HDRINCL                                = 0x24
+	IPV6_HOPLIMIT                               = 0x34
+	IPV6_HOPOPTS                                = 0x36
+	IPV6_IPSEC_POLICY                           = 0x22
+	IPV6_JOIN_ANYCAST                           = 0x1b
+	IPV6_JOIN_GROUP                             = 0x14
+	IPV6_LEAVE_ANYCAST                          = 0x1c
+	IPV6_LEAVE_GROUP                            = 0x15
+	IPV6_MINHOPCOUNT                            = 0x49
+	IPV6_MTU                                    = 0x18
+	IPV6_MTU_DISCOVER                           = 0x17
+	IPV6_MULTICAST_ALL                          = 0x1d
+	IPV6_MULTICAST_HOPS                         = 0x12
+	IPV6_MULTICAST_IF                           = 0x11
+	IPV6_MULTICAST_LOOP                         = 0x13
+	IPV6_NEXTHOP                                = 0x9
+	IPV6_ORIGDSTADDR                            = 0x4a
+	IPV6_PATHMTU                                = 0x3d
+	IPV6_PKTINFO                                = 0x32
+	IPV6_PMTUDISC_DO                            = 0x2
+	IPV6_PMTUDISC_DONT                          = 0x0
+	IPV6_PMTUDISC_INTERFACE                     = 0x4
+	IPV6_PMTUDISC_OMIT                          = 0x5
+	IPV6_PMTUDISC_PROBE                         = 0x3
+	IPV6_PMTUDISC_WANT                          = 0x1
+	IPV6_RECVDSTOPTS                            = 0x3a
+	IPV6_RECVERR                                = 0x19
+	IPV6_RECVFRAGSIZE                           = 0x4d
+	IPV6_RECVHOPLIMIT                           = 0x33
+	IPV6_RECVHOPOPTS                            = 0x35
+	IPV6_RECVORIGDSTADDR                        = 0x4a
+	IPV6_RECVPATHMTU                            = 0x3c
+	IPV6_RECVPKTINFO                            = 0x31
+	IPV6_RECVRTHDR                              = 0x38
+	IPV6_RECVTCLASS                             = 0x42
+	IPV6_ROUTER_ALERT                           = 0x16
+	IPV6_ROUTER_ALERT_ISOLATE                   = 0x1e
+	IPV6_RTHDR                                  = 0x39
+	IPV6_RTHDRDSTOPTS                           = 0x37
+	IPV6_RTHDR_LOOSE                            = 0x0
+	IPV6_RTHDR_STRICT                           = 0x1
+	IPV6_RTHDR_TYPE_0                           = 0x0
+	IPV6_RXDSTOPTS                              = 0x3b
+	IPV6_RXHOPOPTS                              = 0x36
+	IPV6_TCLASS                                 = 0x43
+	IPV6_TRANSPARENT                            = 0x4b
+	IPV6_UNICAST_HOPS                           = 0x10
+	IPV6_UNICAST_IF                             = 0x4c
+	IPV6_V6ONLY                                 = 0x1a
+	IPV6_XFRM_POLICY                            = 0x23
+	IP_ADD_MEMBERSHIP                           = 0x23
+	IP_ADD_SOURCE_MEMBERSHIP                    = 0x27
+	IP_BIND_ADDRESS_NO_PORT                     = 0x18
+	IP_BLOCK_SOURCE                             = 0x26
+	IP_CHECKSUM                                 = 0x17
+	IP_DEFAULT_MULTICAST_LOOP                   = 0x1
+	IP_DEFAULT_MULTICAST_TTL                    = 0x1
+	IP_DF                                       = 0x4000
+	IP_DROP_MEMBERSHIP                          = 0x24
+	IP_DROP_SOURCE_MEMBERSHIP                   = 0x28
+	IP_FREEBIND                                 = 0xf
+	IP_HDRINCL                                  = 0x3
+	IP_IPSEC_POLICY                             = 0x10
+	IP_MAXPACKET                                = 0xffff
+	IP_MAX_MEMBERSHIPS                          = 0x14
+	IP_MF                                       = 0x2000
+	IP_MINTTL                                   = 0x15
+	IP_MSFILTER                                 = 0x29
+	IP_MSS                                      = 0x240
+	IP_MTU                                      = 0xe
+	IP_MTU_DISCOVER                             = 0xa
+	IP_MULTICAST_ALL                            = 0x31
+	IP_MULTICAST_IF                             = 0x20
+	IP_MULTICAST_LOOP                           = 0x22
+	IP_MULTICAST_TTL                            = 0x21
+	IP_NODEFRAG                                 = 0x16
+	IP_OFFMASK                                  = 0x1fff
+	IP_OPTIONS                                  = 0x4
+	IP_ORIGDSTADDR                              = 0x14
+	IP_PASSSEC                                  = 0x12
+	IP_PKTINFO                                  = 0x8
+	IP_PKTOPTIONS                               = 0x9
+	IP_PMTUDISC                                 = 0xa
+	IP_PMTUDISC_DO                              = 0x2
+	IP_PMTUDISC_DONT                            = 0x0
+	IP_PMTUDISC_INTERFACE                       = 0x4
+	IP_PMTUDISC_OMIT                            = 0x5
+	IP_PMTUDISC_PROBE                           = 0x3
+	IP_PMTUDISC_WANT                            = 0x1
+	IP_RECVERR                                  = 0xb
+	IP_RECVFRAGSIZE                             = 0x19
+	IP_RECVOPTS                                 = 0x6
+	IP_RECVORIGDSTADDR                          = 0x14
+	IP_RECVRETOPTS                              = 0x7
+	IP_RECVTOS                                  = 0xd
+	IP_RECVTTL                                  = 0xc
+	IP_RETOPTS                                  = 0x7
+	IP_RF                                       = 0x8000
+	IP_ROUTER_ALERT                             = 0x5
+	IP_TOS                                      = 0x1
+	IP_TRANSPARENT                              = 0x13
+	IP_TTL                                      = 0x2
+	IP_UNBLOCK_SOURCE                           = 0x25
+	IP_UNICAST_IF                               = 0x32
+	IP_XFRM_POLICY                              = 0x11
+	ISOFS_SUPER_MAGIC                           = 0x9660
+	ISTRIP                                      = 0x20
+	IUTF8                                       = 0x4000
+	IXANY                                       = 0x800
+	JFFS2_SUPER_MAGIC                           = 0x72b6
+	KEXEC_ARCH_386                              = 0x30000
+	KEXEC_ARCH_68K                              = 0x40000
+	KEXEC_ARCH_AARCH64                          = 0xb70000
+	KEXEC_ARCH_ARM                              = 0x280000
+	KEXEC_ARCH_DEFAULT                          = 0x0
+	KEXEC_ARCH_IA_64                            = 0x320000
+	KEXEC_ARCH_MASK                             = 0xffff0000
+	KEXEC_ARCH_MIPS                             = 0x80000
+	KEXEC_ARCH_MIPS_LE                          = 0xa0000
+	KEXEC_ARCH_PARISC                           = 0xf0000
+	KEXEC_ARCH_PPC                              = 0x140000
+	KEXEC_ARCH_PPC64                            = 0x150000
+	KEXEC_ARCH_S390                             = 0x160000
+	KEXEC_ARCH_SH                               = 0x2a0000
+	KEXEC_ARCH_X86_64                           = 0x3e0000
+	KEXEC_FILE_NO_INITRAMFS                     = 0x4
+	KEXEC_FILE_ON_CRASH                         = 0x2
+	KEXEC_FILE_UNLOAD                           = 0x1
+	KEXEC_ON_CRASH                              = 0x1
+	KEXEC_PRESERVE_CONTEXT                      = 0x2
+	KEXEC_SEGMENT_MAX                           = 0x10
+	KEYCTL_ASSUME_AUTHORITY                     = 0x10
+	KEYCTL_CAPABILITIES                         = 0x1f
+	KEYCTL_CAPS0_BIG_KEY                        = 0x10
+	KEYCTL_CAPS0_CAPABILITIES                   = 0x1
+	KEYCTL_CAPS0_DIFFIE_HELLMAN                 = 0x4
+	KEYCTL_CAPS0_INVALIDATE                     = 0x20
+	KEYCTL_CAPS0_MOVE                           = 0x80
+	KEYCTL_CAPS0_PERSISTENT_KEYRINGS            = 0x2
+	KEYCTL_CAPS0_PUBLIC_KEY                     = 0x8
+	KEYCTL_CAPS0_RESTRICT_KEYRING               = 0x40
+	KEYCTL_CAPS1_NOTIFICATIONS                  = 0x4
+	KEYCTL_CAPS1_NS_KEYRING_NAME                = 0x1
+	KEYCTL_CAPS1_NS_KEY_TAG                     = 0x2
+	KEYCTL_CHOWN                                = 0x4
+	KEYCTL_CLEAR                                = 0x7
+	KEYCTL_DESCRIBE                             = 0x6
+	KEYCTL_DH_COMPUTE                           = 0x17
+	KEYCTL_GET_KEYRING_ID                       = 0x0
+	KEYCTL_GET_PERSISTENT                       = 0x16
+	KEYCTL_GET_SECURITY                         = 0x11
+	KEYCTL_INSTANTIATE                          = 0xc
+	KEYCTL_INSTANTIATE_IOV                      = 0x14
+	KEYCTL_INVALIDATE                           = 0x15
+	KEYCTL_JOIN_SESSION_KEYRING                 = 0x1
+	KEYCTL_LINK                                 = 0x8
+	KEYCTL_MOVE                                 = 0x1e
+	KEYCTL_MOVE_EXCL                            = 0x1
+	KEYCTL_NEGATE                               = 0xd
+	KEYCTL_PKEY_DECRYPT                         = 0x1a
+	KEYCTL_PKEY_ENCRYPT                         = 0x19
+	KEYCTL_PKEY_QUERY                           = 0x18
+	KEYCTL_PKEY_SIGN                            = 0x1b
+	KEYCTL_PKEY_VERIFY                          = 0x1c
+	KEYCTL_READ                                 = 0xb
+	KEYCTL_REJECT                               = 0x13
+	KEYCTL_RESTRICT_KEYRING                     = 0x1d
+	KEYCTL_REVOKE                               = 0x3
+	KEYCTL_SEARCH                               = 0xa
+	KEYCTL_SESSION_TO_PARENT                    = 0x12
+	KEYCTL_SETPERM                              = 0x5
+	KEYCTL_SET_REQKEY_KEYRING                   = 0xe
+	KEYCTL_SET_TIMEOUT                          = 0xf
+	KEYCTL_SUPPORTS_DECRYPT                     = 0x2
+	KEYCTL_SUPPORTS_ENCRYPT                     = 0x1
+	KEYCTL_SUPPORTS_SIGN                        = 0x4
+	KEYCTL_SUPPORTS_VERIFY                      = 0x8
+	KEYCTL_UNLINK                               = 0x9
+	KEYCTL_UPDATE                               = 0x2
+	KEYCTL_WATCH_KEY                            = 0x20
+	KEY_REQKEY_DEFL_DEFAULT                     = 0x0
+	KEY_REQKEY_DEFL_GROUP_KEYRING               = 0x6
+	KEY_REQKEY_DEFL_NO_CHANGE                   = -0x1
+	KEY_REQKEY_DEFL_PROCESS_KEYRING             = 0x2
+	KEY_REQKEY_DEFL_REQUESTOR_KEYRING           = 0x7
+	KEY_REQKEY_DEFL_SESSION_KEYRING             = 0x3
+	KEY_REQKEY_DEFL_THREAD_KEYRING              = 0x1
+	KEY_REQKEY_DEFL_USER_KEYRING                = 0x4
+	KEY_REQKEY_DEFL_USER_SESSION_KEYRING        = 0x5
+	KEY_SPEC_GROUP_KEYRING                      = -0x6
+	KEY_SPEC_PROCESS_KEYRING                    = -0x2
+	KEY_SPEC_REQKEY_AUTH_KEY                    = -0x7
+	KEY_SPEC_REQUESTOR_KEYRING                  = -0x8
+	KEY_SPEC_SESSION_KEYRING                    = -0x3
+	KEY_SPEC_THREAD_KEYRING                     = -0x1
+	KEY_SPEC_USER_KEYRING                       = -0x4
+	KEY_SPEC_USER_SESSION_KEYRING               = -0x5
+	LINUX_REBOOT_CMD_CAD_OFF                    = 0x0
+	LINUX_REBOOT_CMD_CAD_ON                     = 0x89abcdef
+	LINUX_REBOOT_CMD_HALT                       = 0xcdef0123
+	LINUX_REBOOT_CMD_KEXEC                      = 0x45584543
+	LINUX_REBOOT_CMD_POWER_OFF                  = 0x4321fedc
+	LINUX_REBOOT_CMD_RESTART                    = 0x1234567
+	LINUX_REBOOT_CMD_RESTART2                   = 0xa1b2c3d4
+	LINUX_REBOOT_CMD_SW_SUSPEND                 = 0xd000fce2
+	LINUX_REBOOT_MAGIC1                         = 0xfee1dead
+	LINUX_REBOOT_MAGIC2                         = 0x28121969
+	LOCK_EX                                     = 0x2
+	LOCK_NB                                     = 0x4
+	LOCK_SH                                     = 0x1
+	LOCK_UN                                     = 0x8
+	LOOP_CLR_FD                                 = 0x4c01
+	LOOP_CTL_ADD                                = 0x4c80
+	LOOP_CTL_GET_FREE                           = 0x4c82
+	LOOP_CTL_REMOVE                             = 0x4c81
+	LOOP_GET_STATUS                             = 0x4c03
+	LOOP_GET_STATUS64                           = 0x4c05
+	LOOP_SET_BLOCK_SIZE                         = 0x4c09
+	LOOP_SET_CAPACITY                           = 0x4c07
+	LOOP_SET_DIRECT_IO                          = 0x4c08
+	LOOP_SET_FD                                 = 0x4c00
+	LOOP_SET_STATUS                             = 0x4c02
+	LOOP_SET_STATUS64                           = 0x4c04
+	LOOP_SET_STATUS_CLEARABLE_FLAGS             = 0x4
+	LOOP_SET_STATUS_SETTABLE_FLAGS              = 0xc
+	LO_KEY_SIZE                                 = 0x20
+	LO_NAME_SIZE                                = 0x40
+	MADV_COLD                                   = 0x14
+	MADV_DODUMP                                 = 0x11
+	MADV_DOFORK                                 = 0xb
+	MADV_DONTDUMP                               = 0x10
+	MADV_DONTFORK                               = 0xa
+	MADV_DONTNEED                               = 0x4
+	MADV_FREE                                   = 0x8
+	MADV_HUGEPAGE                               = 0xe
+	MADV_HWPOISON                               = 0x64
+	MADV_KEEPONFORK                             = 0x13
+	MADV_MERGEABLE                              = 0xc
+	MADV_NOHUGEPAGE                             = 0xf
+	MADV_NORMAL                                 = 0x0
+	MADV_PAGEOUT                                = 0x15
+	MADV_RANDOM                                 = 0x1
+	MADV_REMOVE                                 = 0x9
+	MADV_SEQUENTIAL                             = 0x2
+	MADV_UNMERGEABLE                            = 0xd
+	MADV_WILLNEED                               = 0x3
+	MADV_WIPEONFORK                             = 0x12
+	MAP_FILE                                    = 0x0
+	MAP_FIXED                                   = 0x10
+	MAP_FIXED_NOREPLACE                         = 0x100000
+	MAP_HUGE_MASK                               = 0x3f
+	MAP_HUGE_SHIFT                              = 0x1a
+	MAP_PRIVATE                                 = 0x2
+	MAP_SHARED                                  = 0x1
+	MAP_SHARED_VALIDATE                         = 0x3
+	MAP_TYPE                                    = 0xf
+	MCAST_BLOCK_SOURCE                          = 0x2b
+	MCAST_EXCLUDE                               = 0x0
+	MCAST_INCLUDE                               = 0x1
+	MCAST_JOIN_GROUP                            = 0x2a
+	MCAST_JOIN_SOURCE_GROUP                     = 0x2e
+	MCAST_LEAVE_GROUP                           = 0x2d
+	MCAST_LEAVE_SOURCE_GROUP                    = 0x2f
+	MCAST_MSFILTER                              = 0x30
+	MCAST_UNBLOCK_SOURCE                        = 0x2c
+	MFD_ALLOW_SEALING                           = 0x2
+	MFD_CLOEXEC                                 = 0x1
+	MFD_HUGETLB                                 = 0x4
+	MFD_HUGE_16GB                               = -0x78000000
+	MFD_HUGE_16MB                               = 0x60000000
+	MFD_HUGE_1GB                                = 0x78000000
+	MFD_HUGE_1MB                                = 0x50000000
+	MFD_HUGE_256MB                              = 0x70000000
+	MFD_HUGE_2GB                                = 0x7c000000
+	MFD_HUGE_2MB                                = 0x54000000
+	MFD_HUGE_32MB                               = 0x64000000
+	MFD_HUGE_512KB                              = 0x4c000000
+	MFD_HUGE_512MB                              = 0x74000000
+	MFD_HUGE_64KB                               = 0x40000000
+	MFD_HUGE_8MB                                = 0x5c000000
+	MFD_HUGE_MASK                               = 0x3f
+	MFD_HUGE_SHIFT                              = 0x1a
+	MINIX2_SUPER_MAGIC                          = 0x2468
+	MINIX2_SUPER_MAGIC2                         = 0x2478
+	MINIX3_SUPER_MAGIC                          = 0x4d5a
+	MINIX_SUPER_MAGIC                           = 0x137f
+	MINIX_SUPER_MAGIC2                          = 0x138f
+	MNT_DETACH                                  = 0x2
+	MNT_EXPIRE                                  = 0x4
+	MNT_FORCE                                   = 0x1
+	MODULE_INIT_IGNORE_MODVERSIONS              = 0x1
+	MODULE_INIT_IGNORE_VERMAGIC                 = 0x2
+	MSDOS_SUPER_MAGIC                           = 0x4d44
+	MSG_BATCH                                   = 0x40000
+	MSG_CMSG_CLOEXEC                            = 0x40000000
+	MSG_CONFIRM                                 = 0x800
+	MSG_CTRUNC                                  = 0x8
+	MSG_DONTROUTE                               = 0x4
+	MSG_DONTWAIT                                = 0x40
+	MSG_EOR                                     = 0x80
+	MSG_ERRQUEUE                                = 0x2000
+	MSG_FASTOPEN                                = 0x20000000
+	MSG_FIN                                     = 0x200
+	MSG_MORE                                    = 0x8000
+	MSG_NOSIGNAL                                = 0x4000
+	MSG_OOB                                     = 0x1
+	MSG_PEEK                                    = 0x2
+	MSG_PROXY                                   = 0x10
+	MSG_RST                                     = 0x1000
+	MSG_SYN                                     = 0x400
+	MSG_TRUNC                                   = 0x20
+	MSG_TRYHARD                                 = 0x4
+	MSG_WAITALL                                 = 0x100
+	MSG_WAITFORONE                              = 0x10000
+	MSG_ZEROCOPY                                = 0x4000000
+	MS_ACTIVE                                   = 0x40000000
+	MS_ASYNC                                    = 0x1
+	MS_BIND                                     = 0x1000
+	MS_BORN                                     = 0x20000000
+	MS_DIRSYNC                                  = 0x80
+	MS_INVALIDATE                               = 0x2
+	MS_I_VERSION                                = 0x800000
+	MS_KERNMOUNT                                = 0x400000
+	MS_LAZYTIME                                 = 0x2000000
+	MS_MANDLOCK                                 = 0x40
+	MS_MGC_MSK                                  = 0xffff0000
+	MS_MGC_VAL                                  = 0xc0ed0000
+	MS_MOVE                                     = 0x2000
+	MS_NOATIME                                  = 0x400
+	MS_NODEV                                    = 0x4
+	MS_NODIRATIME                               = 0x800
+	MS_NOEXEC                                   = 0x8
+	MS_NOREMOTELOCK                             = 0x8000000
+	MS_NOSEC                                    = 0x10000000
+	MS_NOSUID                                   = 0x2
+	MS_NOUSER                                   = -0x80000000
+	MS_POSIXACL                                 = 0x10000
+	MS_PRIVATE                                  = 0x40000
+	MS_RDONLY                                   = 0x1
+	MS_REC                                      = 0x4000
+	MS_RELATIME                                 = 0x200000
+	MS_REMOUNT                                  = 0x20
+	MS_RMT_MASK                                 = 0x2800051
+	MS_SHARED                                   = 0x100000
+	MS_SILENT                                   = 0x8000
+	MS_SLAVE                                    = 0x80000
+	MS_STRICTATIME                              = 0x1000000
+	MS_SUBMOUNT                                 = 0x4000000
+	MS_SYNC                                     = 0x4
+	MS_SYNCHRONOUS                              = 0x10
+	MS_UNBINDABLE                               = 0x20000
+	MS_VERBOSE                                  = 0x8000
+	MTD_INODE_FS_MAGIC                          = 0x11307854
+	NAME_MAX                                    = 0xff
+	NCP_SUPER_MAGIC                             = 0x564c
+	NETLINK_ADD_MEMBERSHIP                      = 0x1
+	NETLINK_AUDIT                               = 0x9
+	NETLINK_BROADCAST_ERROR                     = 0x4
+	NETLINK_CAP_ACK                             = 0xa
+	NETLINK_CONNECTOR                           = 0xb
+	NETLINK_CRYPTO                              = 0x15
+	NETLINK_DNRTMSG                             = 0xe
+	NETLINK_DROP_MEMBERSHIP                     = 0x2
+	NETLINK_ECRYPTFS                            = 0x13
+	NETLINK_EXT_ACK                             = 0xb
+	NETLINK_FIB_LOOKUP                          = 0xa
+	NETLINK_FIREWALL                            = 0x3
+	NETLINK_GENERIC                             = 0x10
+	NETLINK_GET_STRICT_CHK                      = 0xc
+	NETLINK_INET_DIAG                           = 0x4
+	NETLINK_IP6_FW                              = 0xd
+	NETLINK_ISCSI                               = 0x8
+	NETLINK_KOBJECT_UEVENT                      = 0xf
+	NETLINK_LISTEN_ALL_NSID                     = 0x8
+	NETLINK_LIST_MEMBERSHIPS                    = 0x9
+	NETLINK_NETFILTER                           = 0xc
+	NETLINK_NFLOG                               = 0x5
+	NETLINK_NO_ENOBUFS                          = 0x5
+	NETLINK_PKTINFO                             = 0x3
+	NETLINK_RDMA                                = 0x14
+	NETLINK_ROUTE                               = 0x0
+	NETLINK_RX_RING                             = 0x6
+	NETLINK_SCSITRANSPORT                       = 0x12
+	NETLINK_SELINUX                             = 0x7
+	NETLINK_SMC                                 = 0x16
+	NETLINK_SOCK_DIAG                           = 0x4
+	NETLINK_TX_RING                             = 0x7
+	NETLINK_UNUSED                              = 0x1
+	NETLINK_USERSOCK                            = 0x2
+	NETLINK_XFRM                                = 0x6
+	NETNSA_MAX                                  = 0x5
+	NETNSA_NSID_NOT_ASSIGNED                    = -0x1
+	NFNETLINK_V0                                = 0x0
+	NFNLGRP_ACCT_QUOTA                          = 0x8
+	NFNLGRP_CONNTRACK_DESTROY                   = 0x3
+	NFNLGRP_CONNTRACK_EXP_DESTROY               = 0x6
+	NFNLGRP_CONNTRACK_EXP_NEW                   = 0x4
+	NFNLGRP_CONNTRACK_EXP_UPDATE                = 0x5
+	NFNLGRP_CONNTRACK_NEW                       = 0x1
+	NFNLGRP_CONNTRACK_UPDATE                    = 0x2
+	NFNLGRP_MAX                                 = 0x9
+	NFNLGRP_NFTABLES                            = 0x7
+	NFNLGRP_NFTRACE                             = 0x9
+	NFNLGRP_NONE                                = 0x0
+	NFNL_BATCH_MAX                              = 0x1
+	NFNL_MSG_BATCH_BEGIN                        = 0x10
+	NFNL_MSG_BATCH_END                          = 0x11
+	NFNL_NFA_NEST                               = 0x8000
+	NFNL_SUBSYS_ACCT                            = 0x7
+	NFNL_SUBSYS_COUNT                           = 0xc
+	NFNL_SUBSYS_CTHELPER                        = 0x9
+	NFNL_SUBSYS_CTNETLINK                       = 0x1
+	NFNL_SUBSYS_CTNETLINK_EXP                   = 0x2
+	NFNL_SUBSYS_CTNETLINK_TIMEOUT               = 0x8
+	NFNL_SUBSYS_IPSET                           = 0x6
+	NFNL_SUBSYS_NFTABLES                        = 0xa
+	NFNL_SUBSYS_NFT_COMPAT                      = 0xb
+	NFNL_SUBSYS_NONE                            = 0x0
+	NFNL_SUBSYS_OSF                             = 0x5
+	NFNL_SUBSYS_QUEUE                           = 0x3
+	NFNL_SUBSYS_ULOG                            = 0x4
+	NFS_SUPER_MAGIC                             = 0x6969
+	NILFS_SUPER_MAGIC                           = 0x3434
+	NL0                                         = 0x0
+	NL1                                         = 0x100
+	NLA_ALIGNTO                                 = 0x4
+	NLA_F_NESTED                                = 0x8000
+	NLA_F_NET_BYTEORDER                         = 0x4000
+	NLA_HDRLEN                                  = 0x4
+	NLMSG_ALIGNTO                               = 0x4
+	NLMSG_DONE                                  = 0x3
+	NLMSG_ERROR                                 = 0x2
+	NLMSG_HDRLEN                                = 0x10
+	NLMSG_MIN_TYPE                              = 0x10
+	NLMSG_NOOP                                  = 0x1
+	NLMSG_OVERRUN                               = 0x4
+	NLM_F_ACK                                   = 0x4
+	NLM_F_ACK_TLVS                              = 0x200
+	NLM_F_APPEND                                = 0x800
+	NLM_F_ATOMIC                                = 0x400
+	NLM_F_CAPPED                                = 0x100
+	NLM_F_CREATE                                = 0x400
+	NLM_F_DUMP                                  = 0x300
+	NLM_F_DUMP_FILTERED                         = 0x20
+	NLM_F_DUMP_INTR                             = 0x10
+	NLM_F_ECHO                                  = 0x8
+	NLM_F_EXCL                                  = 0x200
+	NLM_F_MATCH                                 = 0x200
+	NLM_F_MULTI                                 = 0x2
+	NLM_F_NONREC                                = 0x100
+	NLM_F_REPLACE                               = 0x100
+	NLM_F_REQUEST                               = 0x1
+	NLM_F_ROOT                                  = 0x100
+	NSFS_MAGIC                                  = 0x6e736673
+	OCFS2_SUPER_MAGIC                           = 0x7461636f
+	OCRNL                                       = 0x8
+	OFDEL                                       = 0x80
+	OFILL                                       = 0x40
+	ONLRET                                      = 0x20
+	ONOCR                                       = 0x10
+	OPENPROM_SUPER_MAGIC                        = 0x9fa1
+	OPOST                                       = 0x1
+	OVERLAYFS_SUPER_MAGIC                       = 0x794c7630
+	O_ACCMODE                                   = 0x3
+	O_RDONLY                                    = 0x0
+	O_RDWR                                      = 0x2
+	O_WRONLY                                    = 0x1
+	PACKET_ADD_MEMBERSHIP                       = 0x1
+	PACKET_AUXDATA                              = 0x8
+	PACKET_BROADCAST                            = 0x1
+	PACKET_COPY_THRESH                          = 0x7
+	PACKET_DROP_MEMBERSHIP                      = 0x2
+	PACKET_FANOUT                               = 0x12
+	PACKET_FANOUT_CBPF                          = 0x6
+	PACKET_FANOUT_CPU                           = 0x2
+	PACKET_FANOUT_DATA                          = 0x16
+	PACKET_FANOUT_EBPF                          = 0x7
+	PACKET_FANOUT_FLAG_DEFRAG                   = 0x8000
+	PACKET_FANOUT_FLAG_ROLLOVER                 = 0x1000
+	PACKET_FANOUT_FLAG_UNIQUEID                 = 0x2000
+	PACKET_FANOUT_HASH                          = 0x0
+	PACKET_FANOUT_LB                            = 0x1
+	PACKET_FANOUT_QM                            = 0x5
+	PACKET_FANOUT_RND                           = 0x4
+	PACKET_FANOUT_ROLLOVER                      = 0x3
+	PACKET_FASTROUTE                            = 0x6
+	PACKET_HDRLEN                               = 0xb
+	PACKET_HOST                                 = 0x0
+	PACKET_IGNORE_OUTGOING                      = 0x17
+	PACKET_KERNEL                               = 0x7
+	PACKET_LOOPBACK                             = 0x5
+	PACKET_LOSS                                 = 0xe
+	PACKET_MR_ALLMULTI                          = 0x2
+	PACKET_MR_MULTICAST                         = 0x0
+	PACKET_MR_PROMISC                           = 0x1
+	PACKET_MR_UNICAST                           = 0x3
+	PACKET_MULTICAST                            = 0x2
+	PACKET_ORIGDEV                              = 0x9
+	PACKET_OTHERHOST                            = 0x3
+	PACKET_OUTGOING                             = 0x4
+	PACKET_QDISC_BYPASS                         = 0x14
+	PACKET_RECV_OUTPUT                          = 0x3
+	PACKET_RESERVE                              = 0xc
+	PACKET_ROLLOVER_STATS                       = 0x15
+	PACKET_RX_RING                              = 0x5
+	PACKET_STATISTICS                           = 0x6
+	PACKET_TIMESTAMP                            = 0x11
+	PACKET_TX_HAS_OFF                           = 0x13
+	PACKET_TX_RING                              = 0xd
+	PACKET_TX_TIMESTAMP                         = 0x10
+	PACKET_USER                                 = 0x6
+	PACKET_VERSION                              = 0xa
+	PACKET_VNET_HDR                             = 0xf
+	PARITY_CRC16_PR0                            = 0x2
+	PARITY_CRC16_PR0_CCITT                      = 0x4
+	PARITY_CRC16_PR1                            = 0x3
+	PARITY_CRC16_PR1_CCITT                      = 0x5
+	PARITY_CRC32_PR0_CCITT                      = 0x6
+	PARITY_CRC32_PR1_CCITT                      = 0x7
+	PARITY_DEFAULT                              = 0x0
+	PARITY_NONE                                 = 0x1
+	PARMRK                                      = 0x8
+	PIPEFS_MAGIC                                = 0x50495045
+	PPC_CMM_MAGIC                               = 0xc7571590
+	PPPIOCGNPMODE                               = 0xc008744c
+	PPPIOCNEWUNIT                               = 0xc004743e
+	PRIO_PGRP                                   = 0x1
+	PRIO_PROCESS                                = 0x0
+	PRIO_USER                                   = 0x2
+	PROC_SUPER_MAGIC                            = 0x9fa0
+	PROT_EXEC                                   = 0x4
+	PROT_GROWSDOWN                              = 0x1000000
+	PROT_GROWSUP                                = 0x2000000
+	PROT_NONE                                   = 0x0
+	PROT_READ                                   = 0x1
+	PROT_WRITE                                  = 0x2
+	PR_CAPBSET_DROP                             = 0x18
+	PR_CAPBSET_READ                             = 0x17
+	PR_CAP_AMBIENT                              = 0x2f
+	PR_CAP_AMBIENT_CLEAR_ALL                    = 0x4
+	PR_CAP_AMBIENT_IS_SET                       = 0x1
+	PR_CAP_AMBIENT_LOWER                        = 0x3
+	PR_CAP_AMBIENT_RAISE                        = 0x2
+	PR_ENDIAN_BIG                               = 0x0
+	PR_ENDIAN_LITTLE                            = 0x1
+	PR_ENDIAN_PPC_LITTLE                        = 0x2
+	PR_FPEMU_NOPRINT                            = 0x1
+	PR_FPEMU_SIGFPE                             = 0x2
+	PR_FP_EXC_ASYNC                             = 0x2
+	PR_FP_EXC_DISABLED                          = 0x0
+	PR_FP_EXC_DIV                               = 0x10000
+	PR_FP_EXC_INV                               = 0x100000
+	PR_FP_EXC_NONRECOV                          = 0x1
+	PR_FP_EXC_OVF                               = 0x20000
+	PR_FP_EXC_PRECISE                           = 0x3
+	PR_FP_EXC_RES                               = 0x80000
+	PR_FP_EXC_SW_ENABLE                         = 0x80
+	PR_FP_EXC_UND                               = 0x40000
+	PR_FP_MODE_FR                               = 0x1
+	PR_FP_MODE_FRE                              = 0x2
+	PR_GET_CHILD_SUBREAPER                      = 0x25
+	PR_GET_DUMPABLE                             = 0x3
+	PR_GET_ENDIAN                               = 0x13
+	PR_GET_FPEMU                                = 0x9
+	PR_GET_FPEXC                                = 0xb
+	PR_GET_FP_MODE                              = 0x2e
+	PR_GET_IO_FLUSHER                           = 0x3a
+	PR_GET_KEEPCAPS                             = 0x7
+	PR_GET_NAME                                 = 0x10
+	PR_GET_NO_NEW_PRIVS                         = 0x27
+	PR_GET_PDEATHSIG                            = 0x2
+	PR_GET_SECCOMP                              = 0x15
+	PR_GET_SECUREBITS                           = 0x1b
+	PR_GET_SPECULATION_CTRL                     = 0x34
+	PR_GET_TAGGED_ADDR_CTRL                     = 0x38
+	PR_GET_THP_DISABLE                          = 0x2a
+	PR_GET_TID_ADDRESS                          = 0x28
+	PR_GET_TIMERSLACK                           = 0x1e
+	PR_GET_TIMING                               = 0xd
+	PR_GET_TSC                                  = 0x19
+	PR_GET_UNALIGN                              = 0x5
+	PR_MCE_KILL                                 = 0x21
+	PR_MCE_KILL_CLEAR                           = 0x0
+	PR_MCE_KILL_DEFAULT                         = 0x2
+	PR_MCE_KILL_EARLY                           = 0x1
+	PR_MCE_KILL_GET                             = 0x22
+	PR_MCE_KILL_LATE                            = 0x0
+	PR_MCE_KILL_SET                             = 0x1
+	PR_MPX_DISABLE_MANAGEMENT                   = 0x2c
+	PR_MPX_ENABLE_MANAGEMENT                    = 0x2b
+	PR_PAC_APDAKEY                              = 0x4
+	PR_PAC_APDBKEY                              = 0x8
+	PR_PAC_APGAKEY                              = 0x10
+	PR_PAC_APIAKEY                              = 0x1
+	PR_PAC_APIBKEY                              = 0x2
+	PR_PAC_RESET_KEYS                           = 0x36
+	PR_SET_CHILD_SUBREAPER                      = 0x24
+	PR_SET_DUMPABLE                             = 0x4
+	PR_SET_ENDIAN                               = 0x14
+	PR_SET_FPEMU                                = 0xa
+	PR_SET_FPEXC                                = 0xc
+	PR_SET_FP_MODE                              = 0x2d
+	PR_SET_IO_FLUSHER                           = 0x39
+	PR_SET_KEEPCAPS                             = 0x8
+	PR_SET_MM                                   = 0x23
+	PR_SET_MM_ARG_END                           = 0x9
+	PR_SET_MM_ARG_START                         = 0x8
+	PR_SET_MM_AUXV                              = 0xc
+	PR_SET_MM_BRK                               = 0x7
+	PR_SET_MM_END_CODE                          = 0x2
+	PR_SET_MM_END_DATA                          = 0x4
+	PR_SET_MM_ENV_END                           = 0xb
+	PR_SET_MM_ENV_START                         = 0xa
+	PR_SET_MM_EXE_FILE                          = 0xd
+	PR_SET_MM_MAP                               = 0xe
+	PR_SET_MM_MAP_SIZE                          = 0xf
+	PR_SET_MM_START_BRK                         = 0x6
+	PR_SET_MM_START_CODE                        = 0x1
+	PR_SET_MM_START_DATA                        = 0x3
+	PR_SET_MM_START_STACK                       = 0x5
+	PR_SET_NAME                                 = 0xf
+	PR_SET_NO_NEW_PRIVS                         = 0x26
+	PR_SET_PDEATHSIG                            = 0x1
+	PR_SET_PTRACER                              = 0x59616d61
+	PR_SET_SECCOMP                              = 0x16
+	PR_SET_SECUREBITS                           = 0x1c
+	PR_SET_SPECULATION_CTRL                     = 0x35
+	PR_SET_TAGGED_ADDR_CTRL                     = 0x37
+	PR_SET_THP_DISABLE                          = 0x29
+	PR_SET_TIMERSLACK                           = 0x1d
+	PR_SET_TIMING                               = 0xe
+	PR_SET_TSC                                  = 0x1a
+	PR_SET_UNALIGN                              = 0x6
+	PR_SPEC_DISABLE                             = 0x4
+	PR_SPEC_DISABLE_NOEXEC                      = 0x10
+	PR_SPEC_ENABLE                              = 0x2
+	PR_SPEC_FORCE_DISABLE                       = 0x8
+	PR_SPEC_INDIRECT_BRANCH                     = 0x1
+	PR_SPEC_NOT_AFFECTED                        = 0x0
+	PR_SPEC_PRCTL                               = 0x1
+	PR_SPEC_STORE_BYPASS                        = 0x0
+	PR_SVE_GET_VL                               = 0x33
+	PR_SVE_SET_VL                               = 0x32
+	PR_SVE_SET_VL_ONEXEC                        = 0x40000
+	PR_SVE_VL_INHERIT                           = 0x20000
+	PR_SVE_VL_LEN_MASK                          = 0xffff
+	PR_TAGGED_ADDR_ENABLE                       = 0x1
+	PR_TASK_PERF_EVENTS_DISABLE                 = 0x1f
+	PR_TASK_PERF_EVENTS_ENABLE                  = 0x20
+	PR_TIMING_STATISTICAL                       = 0x0
+	PR_TIMING_TIMESTAMP                         = 0x1
+	PR_TSC_ENABLE                               = 0x1
+	PR_TSC_SIGSEGV                              = 0x2
+	PR_UNALIGN_NOPRINT                          = 0x1
+	PR_UNALIGN_SIGBUS                           = 0x2
+	PSTOREFS_MAGIC                              = 0x6165676c
+	PTRACE_ATTACH                               = 0x10
+	PTRACE_CONT                                 = 0x7
+	PTRACE_DETACH                               = 0x11
+	PTRACE_EVENTMSG_SYSCALL_ENTRY               = 0x1
+	PTRACE_EVENTMSG_SYSCALL_EXIT                = 0x2
+	PTRACE_EVENT_CLONE                          = 0x3
+	PTRACE_EVENT_EXEC                           = 0x4
+	PTRACE_EVENT_EXIT                           = 0x6
+	PTRACE_EVENT_FORK                           = 0x1
+	PTRACE_EVENT_SECCOMP                        = 0x7
+	PTRACE_EVENT_STOP                           = 0x80
+	PTRACE_EVENT_VFORK                          = 0x2
+	PTRACE_EVENT_VFORK_DONE                     = 0x5
+	PTRACE_GETEVENTMSG                          = 0x4201
+	PTRACE_GETREGS                              = 0xc
+	PTRACE_GETREGSET                            = 0x4204
+	PTRACE_GETSIGINFO                           = 0x4202
+	PTRACE_GETSIGMASK                           = 0x420a
+	PTRACE_GET_SYSCALL_INFO                     = 0x420e
+	PTRACE_INTERRUPT                            = 0x4207
+	PTRACE_KILL                                 = 0x8
+	PTRACE_LISTEN                               = 0x4208
+	PTRACE_O_EXITKILL                           = 0x100000
+	PTRACE_O_MASK                               = 0x3000ff
+	PTRACE_O_SUSPEND_SECCOMP                    = 0x200000
+	PTRACE_O_TRACECLONE                         = 0x8
+	PTRACE_O_TRACEEXEC                          = 0x10
+	PTRACE_O_TRACEEXIT                          = 0x40
+	PTRACE_O_TRACEFORK                          = 0x2
+	PTRACE_O_TRACESECCOMP                       = 0x80
+	PTRACE_O_TRACESYSGOOD                       = 0x1
+	PTRACE_O_TRACEVFORK                         = 0x4
+	PTRACE_O_TRACEVFORKDONE                     = 0x20
+	PTRACE_PEEKDATA                             = 0x2
+	PTRACE_PEEKSIGINFO                          = 0x4209
+	PTRACE_PEEKSIGINFO_SHARED                   = 0x1
+	PTRACE_PEEKTEXT                             = 0x1
+	PTRACE_PEEKUSR                              = 0x3
+	PTRACE_POKEDATA                             = 0x5
+	PTRACE_POKETEXT                             = 0x4
+	PTRACE_POKEUSR                              = 0x6
+	PTRACE_SECCOMP_GET_FILTER                   = 0x420c
+	PTRACE_SECCOMP_GET_METADATA                 = 0x420d
+	PTRACE_SEIZE                                = 0x4206
+	PTRACE_SETOPTIONS                           = 0x4200
+	PTRACE_SETREGS                              = 0xd
+	PTRACE_SETREGSET                            = 0x4205
+	PTRACE_SETSIGINFO                           = 0x4203
+	PTRACE_SETSIGMASK                           = 0x420b
+	PTRACE_SINGLESTEP                           = 0x9
+	PTRACE_SYSCALL                              = 0x18
+	PTRACE_SYSCALL_INFO_ENTRY                   = 0x1
+	PTRACE_SYSCALL_INFO_EXIT                    = 0x2
+	PTRACE_SYSCALL_INFO_NONE                    = 0x0
+	PTRACE_SYSCALL_INFO_SECCOMP                 = 0x3
+	PTRACE_TRACEME                              = 0x0
+	QNX4_SUPER_MAGIC                            = 0x2f
+	QNX6_SUPER_MAGIC                            = 0x68191122
+	RAMFS_MAGIC                                 = 0x858458f6
+	RDTGROUP_SUPER_MAGIC                        = 0x7655821
+	REISERFS_SUPER_MAGIC                        = 0x52654973
+	RENAME_EXCHANGE                             = 0x2
+	RENAME_NOREPLACE                            = 0x1
+	RENAME_WHITEOUT                             = 0x4
+	RLIMIT_CORE                                 = 0x4
+	RLIMIT_CPU                                  = 0x0
+	RLIMIT_DATA                                 = 0x2
+	RLIMIT_FSIZE                                = 0x1
+	RLIMIT_LOCKS                                = 0xa
+	RLIMIT_MSGQUEUE                             = 0xc
+	RLIMIT_NICE                                 = 0xd
+	RLIMIT_RTPRIO                               = 0xe
+	RLIMIT_RTTIME                               = 0xf
+	RLIMIT_SIGPENDING                           = 0xb
+	RLIMIT_STACK                                = 0x3
+	RLIM_INFINITY                               = 0xffffffffffffffff
+	RTAX_ADVMSS                                 = 0x8
+	RTAX_CC_ALGO                                = 0x10
+	RTAX_CWND                                   = 0x7
+	RTAX_FASTOPEN_NO_COOKIE                     = 0x11
+	RTAX_FEATURES                               = 0xc
+	RTAX_FEATURE_ALLFRAG                        = 0x8
+	RTAX_FEATURE_ECN                            = 0x1
+	RTAX_FEATURE_MASK                           = 0xf
+	RTAX_FEATURE_SACK                           = 0x2
+	RTAX_FEATURE_TIMESTAMP                      = 0x4
+	RTAX_HOPLIMIT                               = 0xa
+	RTAX_INITCWND                               = 0xb
+	RTAX_INITRWND                               = 0xe
+	RTAX_LOCK                                   = 0x1
+	RTAX_MAX                                    = 0x11
+	RTAX_MTU                                    = 0x2
+	RTAX_QUICKACK                               = 0xf
+	RTAX_REORDERING                             = 0x9
+	RTAX_RTO_MIN                                = 0xd
+	RTAX_RTT                                    = 0x4
+	RTAX_RTTVAR                                 = 0x5
+	RTAX_SSTHRESH                               = 0x6
+	RTAX_UNSPEC                                 = 0x0
+	RTAX_WINDOW                                 = 0x3
+	RTA_ALIGNTO                                 = 0x4
+	RTA_MAX                                     = 0x1e
+	RTCF_DIRECTSRC                              = 0x4000000
+	RTCF_DOREDIRECT                             = 0x1000000
+	RTCF_LOG                                    = 0x2000000
+	RTCF_MASQ                                   = 0x400000
+	RTCF_NAT                                    = 0x800000
+	RTCF_VALVE                                  = 0x200000
+	RTC_AF                                      = 0x20
+	RTC_IRQF                                    = 0x80
+	RTC_MAX_FREQ                                = 0x2000
+	RTC_PF                                      = 0x40
+	RTC_UF                                      = 0x10
+	RTF_ADDRCLASSMASK                           = 0xf8000000
+	RTF_ADDRCONF                                = 0x40000
+	RTF_ALLONLINK                               = 0x20000
+	RTF_BROADCAST                               = 0x10000000
+	RTF_CACHE                                   = 0x1000000
+	RTF_DEFAULT                                 = 0x10000
+	RTF_DYNAMIC                                 = 0x10
+	RTF_FLOW                                    = 0x2000000
+	RTF_GATEWAY                                 = 0x2
+	RTF_HOST                                    = 0x4
+	RTF_INTERFACE                               = 0x40000000
+	RTF_IRTT                                    = 0x100
+	RTF_LINKRT                                  = 0x100000
+	RTF_LOCAL                                   = 0x80000000
+	RTF_MODIFIED                                = 0x20
+	RTF_MSS                                     = 0x40
+	RTF_MTU                                     = 0x40
+	RTF_MULTICAST                               = 0x20000000
+	RTF_NAT                                     = 0x8000000
+	RTF_NOFORWARD                               = 0x1000
+	RTF_NONEXTHOP                               = 0x200000
+	RTF_NOPMTUDISC                              = 0x4000
+	RTF_POLICY                                  = 0x4000000
+	RTF_REINSTATE                               = 0x8
+	RTF_REJECT                                  = 0x200
+	RTF_STATIC                                  = 0x400
+	RTF_THROW                                   = 0x2000
+	RTF_UP                                      = 0x1
+	RTF_WINDOW                                  = 0x80
+	RTF_XRESOLVE                                = 0x800
+	RTMGRP_DECnet_IFADDR                        = 0x1000
+	RTMGRP_DECnet_ROUTE                         = 0x4000
+	RTMGRP_IPV4_IFADDR                          = 0x10
+	RTMGRP_IPV4_MROUTE                          = 0x20
+	RTMGRP_IPV4_ROUTE                           = 0x40
+	RTMGRP_IPV4_RULE                            = 0x80
+	RTMGRP_IPV6_IFADDR                          = 0x100
+	RTMGRP_IPV6_IFINFO                          = 0x800
+	RTMGRP_IPV6_MROUTE                          = 0x200
+	RTMGRP_IPV6_PREFIX                          = 0x20000
+	RTMGRP_IPV6_ROUTE                           = 0x400
+	RTMGRP_LINK                                 = 0x1
+	RTMGRP_NEIGH                                = 0x4
+	RTMGRP_NOTIFY                               = 0x2
+	RTMGRP_TC                                   = 0x8
+	RTM_BASE                                    = 0x10
+	RTM_DELACTION                               = 0x31
+	RTM_DELADDR                                 = 0x15
+	RTM_DELADDRLABEL                            = 0x49
+	RTM_DELCHAIN                                = 0x65
+	RTM_DELLINK                                 = 0x11
+	RTM_DELLINKPROP                             = 0x6d
+	RTM_DELMDB                                  = 0x55
+	RTM_DELNEIGH                                = 0x1d
+	RTM_DELNETCONF                              = 0x51
+	RTM_DELNEXTHOP                              = 0x69
+	RTM_DELNSID                                 = 0x59
+	RTM_DELQDISC                                = 0x25
+	RTM_DELROUTE                                = 0x19
+	RTM_DELRULE                                 = 0x21
+	RTM_DELTCLASS                               = 0x29
+	RTM_DELTFILTER                              = 0x2d
+	RTM_DELVLAN                                 = 0x71
+	RTM_F_CLONED                                = 0x200
+	RTM_F_EQUALIZE                              = 0x400
+	RTM_F_FIB_MATCH                             = 0x2000
+	RTM_F_LOOKUP_TABLE                          = 0x1000
+	RTM_F_NOTIFY                                = 0x100
+	RTM_F_OFFLOAD                               = 0x4000
+	RTM_F_PREFIX                                = 0x800
+	RTM_F_TRAP                                  = 0x8000
+	RTM_GETACTION                               = 0x32
+	RTM_GETADDR                                 = 0x16
+	RTM_GETADDRLABEL                            = 0x4a
+	RTM_GETANYCAST                              = 0x3e
+	RTM_GETCHAIN                                = 0x66
+	RTM_GETDCB                                  = 0x4e
+	RTM_GETLINK                                 = 0x12
+	RTM_GETLINKPROP                             = 0x6e
+	RTM_GETMDB                                  = 0x56
+	RTM_GETMULTICAST                            = 0x3a
+	RTM_GETNEIGH                                = 0x1e
+	RTM_GETNEIGHTBL                             = 0x42
+	RTM_GETNETCONF                              = 0x52
+	RTM_GETNEXTHOP                              = 0x6a
+	RTM_GETNSID                                 = 0x5a
+	RTM_GETQDISC                                = 0x26
+	RTM_GETROUTE                                = 0x1a
+	RTM_GETRULE                                 = 0x22
+	RTM_GETSTATS                                = 0x5e
+	RTM_GETTCLASS                               = 0x2a
+	RTM_GETTFILTER                              = 0x2e
+	RTM_GETVLAN                                 = 0x72
+	RTM_MAX                                     = 0x73
+	RTM_NEWACTION                               = 0x30
+	RTM_NEWADDR                                 = 0x14
+	RTM_NEWADDRLABEL                            = 0x48
+	RTM_NEWCACHEREPORT                          = 0x60
+	RTM_NEWCHAIN                                = 0x64
+	RTM_NEWLINK                                 = 0x10
+	RTM_NEWLINKPROP                             = 0x6c
+	RTM_NEWMDB                                  = 0x54
+	RTM_NEWNDUSEROPT                            = 0x44
+	RTM_NEWNEIGH                                = 0x1c
+	RTM_NEWNEIGHTBL                             = 0x40
+	RTM_NEWNETCONF                              = 0x50
+	RTM_NEWNEXTHOP                              = 0x68
+	RTM_NEWNSID                                 = 0x58
+	RTM_NEWNVLAN                                = 0x70
+	RTM_NEWPREFIX                               = 0x34
+	RTM_NEWQDISC                                = 0x24
+	RTM_NEWROUTE                                = 0x18
+	RTM_NEWRULE                                 = 0x20
+	RTM_NEWSTATS                                = 0x5c
+	RTM_NEWTCLASS                               = 0x28
+	RTM_NEWTFILTER                              = 0x2c
+	RTM_NR_FAMILIES                             = 0x19
+	RTM_NR_MSGTYPES                             = 0x64
+	RTM_SETDCB                                  = 0x4f
+	RTM_SETLINK                                 = 0x13
+	RTM_SETNEIGHTBL                             = 0x43
+	RTNH_ALIGNTO                                = 0x4
+	RTNH_COMPARE_MASK                           = 0x19
+	RTNH_F_DEAD                                 = 0x1
+	RTNH_F_LINKDOWN                             = 0x10
+	RTNH_F_OFFLOAD                              = 0x8
+	RTNH_F_ONLINK                               = 0x4
+	RTNH_F_PERVASIVE                            = 0x2
+	RTNH_F_UNRESOLVED                           = 0x20
+	RTN_MAX                                     = 0xb
+	RTPROT_BABEL                                = 0x2a
+	RTPROT_BGP                                  = 0xba
+	RTPROT_BIRD                                 = 0xc
+	RTPROT_BOOT                                 = 0x3
+	RTPROT_DHCP                                 = 0x10
+	RTPROT_DNROUTED                             = 0xd
+	RTPROT_EIGRP                                = 0xc0
+	RTPROT_GATED                                = 0x8
+	RTPROT_ISIS                                 = 0xbb
+	RTPROT_KERNEL                               = 0x2
+	RTPROT_MROUTED                              = 0x11
+	RTPROT_MRT                                  = 0xa
+	RTPROT_NTK                                  = 0xf
+	RTPROT_OSPF                                 = 0xbc
+	RTPROT_RA                                   = 0x9
+	RTPROT_REDIRECT                             = 0x1
+	RTPROT_RIP                                  = 0xbd
+	RTPROT_STATIC                               = 0x4
+	RTPROT_UNSPEC                               = 0x0
+	RTPROT_XORP                                 = 0xe
+	RTPROT_ZEBRA                                = 0xb
+	RT_CLASS_DEFAULT                            = 0xfd
+	RT_CLASS_LOCAL                              = 0xff
+	RT_CLASS_MAIN                               = 0xfe
+	RT_CLASS_MAX                                = 0xff
+	RT_CLASS_UNSPEC                             = 0x0
+	RUSAGE_CHILDREN                             = -0x1
+	RUSAGE_SELF                                 = 0x0
+	RUSAGE_THREAD                               = 0x1
+	RWF_APPEND                                  = 0x10
+	RWF_DSYNC                                   = 0x2
+	RWF_HIPRI                                   = 0x1
+	RWF_NOWAIT                                  = 0x8
+	RWF_SUPPORTED                               = 0x1f
+	RWF_SYNC                                    = 0x4
+	RWF_WRITE_LIFE_NOT_SET                      = 0x0
+	SCM_CREDENTIALS                             = 0x2
+	SCM_RIGHTS                                  = 0x1
+	SCM_TIMESTAMP                               = 0x1d
+	SC_LOG_FLUSH                                = 0x100000
+	SECCOMP_MODE_DISABLED                       = 0x0
+	SECCOMP_MODE_FILTER                         = 0x2
+	SECCOMP_MODE_STRICT                         = 0x1
+	SECURITYFS_MAGIC                            = 0x73636673
+	SELINUX_MAGIC                               = 0xf97cff8c
+	SHUT_RD                                     = 0x0
+	SHUT_RDWR                                   = 0x2
+	SHUT_WR                                     = 0x1
+	SIOCADDDLCI                                 = 0x8980
+	SIOCADDMULTI                                = 0x8931
+	SIOCADDRT                                   = 0x890b
+	SIOCBONDCHANGEACTIVE                        = 0x8995
+	SIOCBONDENSLAVE                             = 0x8990
+	SIOCBONDINFOQUERY                           = 0x8994
+	SIOCBONDRELEASE                             = 0x8991
+	SIOCBONDSETHWADDR                           = 0x8992
+	SIOCBONDSLAVEINFOQUERY                      = 0x8993
+	SIOCBRADDBR                                 = 0x89a0
+	SIOCBRADDIF                                 = 0x89a2
+	SIOCBRDELBR                                 = 0x89a1
+	SIOCBRDELIF                                 = 0x89a3
+	SIOCDARP                                    = 0x8953
+	SIOCDELDLCI                                 = 0x8981
+	SIOCDELMULTI                                = 0x8932
+	SIOCDELRT                                   = 0x890c
+	SIOCDEVPRIVATE                              = 0x89f0
+	SIOCDIFADDR                                 = 0x8936
+	SIOCDRARP                                   = 0x8960
+	SIOCETHTOOL                                 = 0x8946
+	SIOCGARP                                    = 0x8954
+	SIOCGETLINKNAME                             = 0x89e0
+	SIOCGETNODEID                               = 0x89e1
+	SIOCGHWTSTAMP                               = 0x89b1
+	SIOCGIFADDR                                 = 0x8915
+	SIOCGIFBR                                   = 0x8940
+	SIOCGIFBRDADDR                              = 0x8919
+	SIOCGIFCONF                                 = 0x8912
+	SIOCGIFCOUNT                                = 0x8938
+	SIOCGIFDSTADDR                              = 0x8917
+	SIOCGIFENCAP                                = 0x8925
+	SIOCGIFFLAGS                                = 0x8913
+	SIOCGIFHWADDR                               = 0x8927
+	SIOCGIFINDEX                                = 0x8933
+	SIOCGIFMAP                                  = 0x8970
+	SIOCGIFMEM                                  = 0x891f
+	SIOCGIFMETRIC                               = 0x891d
+	SIOCGIFMTU                                  = 0x8921
+	SIOCGIFNAME                                 = 0x8910
+	SIOCGIFNETMASK                              = 0x891b
+	SIOCGIFPFLAGS                               = 0x8935
+	SIOCGIFSLAVE                                = 0x8929
+	SIOCGIFTXQLEN                               = 0x8942
+	SIOCGIFVLAN                                 = 0x8982
+	SIOCGMIIPHY                                 = 0x8947
+	SIOCGMIIREG                                 = 0x8948
+	SIOCGPPPCSTATS                              = 0x89f2
+	SIOCGPPPSTATS                               = 0x89f0
+	SIOCGPPPVER                                 = 0x89f1
+	SIOCGRARP                                   = 0x8961
+	SIOCGSKNS                                   = 0x894c
+	SIOCGSTAMP                                  = 0x8906
+	SIOCGSTAMPNS                                = 0x8907
+	SIOCGSTAMPNS_OLD                            = 0x8907
+	SIOCGSTAMP_OLD                              = 0x8906
+	SIOCOUTQNSD                                 = 0x894b
+	SIOCPROTOPRIVATE                            = 0x89e0
+	SIOCRTMSG                                   = 0x890d
+	SIOCSARP                                    = 0x8955
+	SIOCSHWTSTAMP                               = 0x89b0
+	SIOCSIFADDR                                 = 0x8916
+	SIOCSIFBR                                   = 0x8941
+	SIOCSIFBRDADDR                              = 0x891a
+	SIOCSIFDSTADDR                              = 0x8918
+	SIOCSIFENCAP                                = 0x8926
+	SIOCSIFFLAGS                                = 0x8914
+	SIOCSIFHWADDR                               = 0x8924
+	SIOCSIFHWBROADCAST                          = 0x8937
+	SIOCSIFLINK                                 = 0x8911
+	SIOCSIFMAP                                  = 0x8971
+	SIOCSIFMEM                                  = 0x8920
+	SIOCSIFMETRIC                               = 0x891e
+	SIOCSIFMTU                                  = 0x8922
+	SIOCSIFNAME                                 = 0x8923
+	SIOCSIFNETMASK                              = 0x891c
+	SIOCSIFPFLAGS                               = 0x8934
+	SIOCSIFSLAVE                                = 0x8930
+	SIOCSIFTXQLEN                               = 0x8943
+	SIOCSIFVLAN                                 = 0x8983
+	SIOCSMIIREG                                 = 0x8949
+	SIOCSRARP                                   = 0x8962
+	SIOCWANDEV                                  = 0x894a
+	SMACK_MAGIC                                 = 0x43415d53
+	SMART_AUTOSAVE                              = 0xd2
+	SMART_AUTO_OFFLINE                          = 0xdb
+	SMART_DISABLE                               = 0xd9
+	SMART_ENABLE                                = 0xd8
+	SMART_HCYL_PASS                             = 0xc2
+	SMART_IMMEDIATE_OFFLINE                     = 0xd4
+	SMART_LCYL_PASS                             = 0x4f
+	SMART_READ_LOG_SECTOR                       = 0xd5
+	SMART_READ_THRESHOLDS                       = 0xd1
+	SMART_READ_VALUES                           = 0xd0
+	SMART_SAVE                                  = 0xd3
+	SMART_STATUS                                = 0xda
+	SMART_WRITE_LOG_SECTOR                      = 0xd6
+	SMART_WRITE_THRESHOLDS                      = 0xd7
+	SMB_SUPER_MAGIC                             = 0x517b
+	SOCKFS_MAGIC                                = 0x534f434b
+	SOCK_DCCP                                   = 0x6
+	SOCK_IOC_TYPE                               = 0x89
+	SOCK_PACKET                                 = 0xa
+	SOCK_RAW                                    = 0x3
+	SOCK_RDM                                    = 0x4
+	SOCK_SEQPACKET                              = 0x5
+	SOL_AAL                                     = 0x109
+	SOL_ALG                                     = 0x117
+	SOL_ATM                                     = 0x108
+	SOL_CAIF                                    = 0x116
+	SOL_CAN_BASE                                = 0x64
+	SOL_CAN_RAW                                 = 0x65
+	SOL_DCCP                                    = 0x10d
+	SOL_DECNET                                  = 0x105
+	SOL_ICMPV6                                  = 0x3a
+	SOL_IP                                      = 0x0
+	SOL_IPV6                                    = 0x29
+	SOL_IRDA                                    = 0x10a
+	SOL_IUCV                                    = 0x115
+	SOL_KCM                                     = 0x119
+	SOL_LLC                                     = 0x10c
+	SOL_NETBEUI                                 = 0x10b
+	SOL_NETLINK                                 = 0x10e
+	SOL_NFC                                     = 0x118
+	SOL_PACKET                                  = 0x107
+	SOL_PNPIPE                                  = 0x113
+	SOL_PPPOL2TP                                = 0x111
+	SOL_RAW                                     = 0xff
+	SOL_RDS                                     = 0x114
+	SOL_RXRPC                                   = 0x110
+	SOL_TCP                                     = 0x6
+	SOL_TIPC                                    = 0x10f
+	SOL_TLS                                     = 0x11a
+	SOL_X25                                     = 0x106
+	SOL_XDP                                     = 0x11b
+	SOMAXCONN                                   = 0x1000
+	SO_ATTACH_FILTER                            = 0x1a
+	SO_DEBUG                                    = 0x1
+	SO_DETACH_BPF                               = 0x1b
+	SO_DETACH_FILTER                            = 0x1b
+	SO_EE_CODE_TXTIME_INVALID_PARAM             = 0x1
+	SO_EE_CODE_TXTIME_MISSED                    = 0x2
+	SO_EE_CODE_ZEROCOPY_COPIED                  = 0x1
+	SO_EE_ORIGIN_ICMP                           = 0x2
+	SO_EE_ORIGIN_ICMP6                          = 0x3
+	SO_EE_ORIGIN_LOCAL                          = 0x1
+	SO_EE_ORIGIN_NONE                           = 0x0
+	SO_EE_ORIGIN_TIMESTAMPING                   = 0x4
+	SO_EE_ORIGIN_TXSTATUS                       = 0x4
+	SO_EE_ORIGIN_TXTIME                         = 0x6
+	SO_EE_ORIGIN_ZEROCOPY                       = 0x5
+	SO_GET_FILTER                               = 0x1a
+	SO_NO_CHECK                                 = 0xb
+	SO_PEERNAME                                 = 0x1c
+	SO_PRIORITY                                 = 0xc
+	SO_TIMESTAMP                                = 0x1d
+	SO_TIMESTAMP_OLD                            = 0x1d
+	SO_VM_SOCKETS_BUFFER_MAX_SIZE               = 0x2
+	SO_VM_SOCKETS_BUFFER_MIN_SIZE               = 0x1
+	SO_VM_SOCKETS_BUFFER_SIZE                   = 0x0
+	SO_VM_SOCKETS_CONNECT_TIMEOUT               = 0x6
+	SO_VM_SOCKETS_NONBLOCK_TXRX                 = 0x7
+	SO_VM_SOCKETS_PEER_HOST_VM_ID               = 0x3
+	SO_VM_SOCKETS_TRUSTED                       = 0x5
+	SPLICE_F_GIFT                               = 0x8
+	SPLICE_F_MORE                               = 0x4
+	SPLICE_F_MOVE                               = 0x1
+	SPLICE_F_NONBLOCK                           = 0x2
+	SQUASHFS_MAGIC                              = 0x73717368
+	STACK_END_MAGIC                             = 0x57ac6e9d
+	STATX_ALL                                   = 0xfff
+	STATX_ATIME                                 = 0x20
+	STATX_ATTR_APPEND                           = 0x20
+	STATX_ATTR_AUTOMOUNT                        = 0x1000
+	STATX_ATTR_COMPRESSED                       = 0x4
+	STATX_ATTR_DAX                              = 0x2000
+	STATX_ATTR_ENCRYPTED                        = 0x800
+	STATX_ATTR_IMMUTABLE                        = 0x10
+	STATX_ATTR_MOUNT_ROOT                       = 0x2000
+	STATX_ATTR_NODUMP                           = 0x40
+	STATX_ATTR_VERITY                           = 0x100000
+	STATX_BASIC_STATS                           = 0x7ff
+	STATX_BLOCKS                                = 0x400
+	STATX_BTIME                                 = 0x800
+	STATX_CTIME                                 = 0x80
+	STATX_GID                                   = 0x10
+	STATX_INO                                   = 0x100
+	STATX_MNT_ID                                = 0x1000
+	STATX_MODE                                  = 0x2
+	STATX_MTIME                                 = 0x40
+	STATX_NLINK                                 = 0x4
+	STATX_SIZE                                  = 0x200
+	STATX_TYPE                                  = 0x1
+	STATX_UID                                   = 0x8
+	STATX__RESERVED                             = 0x80000000
+	SYNC_FILE_RANGE_WAIT_AFTER                  = 0x4
+	SYNC_FILE_RANGE_WAIT_BEFORE                 = 0x1
+	SYNC_FILE_RANGE_WRITE                       = 0x2
+	SYNC_FILE_RANGE_WRITE_AND_WAIT              = 0x7
+	SYSFS_MAGIC                                 = 0x62656572
+	S_BLKSIZE                                   = 0x200
+	S_IEXEC                                     = 0x40
+	S_IFBLK                                     = 0x6000
+	S_IFCHR                                     = 0x2000
+	S_IFDIR                                     = 0x4000
+	S_IFIFO                                     = 0x1000
+	S_IFLNK                                     = 0xa000
+	S_IFMT                                      = 0xf000
+	S_IFREG                                     = 0x8000
+	S_IFSOCK                                    = 0xc000
+	S_IREAD                                     = 0x100
+	S_IRGRP                                     = 0x20
+	S_IROTH                                     = 0x4
+	S_IRUSR                                     = 0x100
+	S_IRWXG                                     = 0x38
+	S_IRWXO                                     = 0x7
+	S_IRWXU                                     = 0x1c0
+	S_ISGID                                     = 0x400
+	S_ISUID                                     = 0x800
+	S_ISVTX                                     = 0x200
+	S_IWGRP                                     = 0x10
+	S_IWOTH                                     = 0x2
+	S_IWRITE                                    = 0x80
+	S_IWUSR                                     = 0x80
+	S_IXGRP                                     = 0x8
+	S_IXOTH                                     = 0x1
+	S_IXUSR                                     = 0x40
+	TAB0                                        = 0x0
+	TASKSTATS_CMD_ATTR_MAX                      = 0x4
+	TASKSTATS_CMD_MAX                           = 0x2
+	TASKSTATS_GENL_NAME                         = "TASKSTATS"
+	TASKSTATS_GENL_VERSION                      = 0x1
+	TASKSTATS_TYPE_MAX                          = 0x6
+	TASKSTATS_VERSION                           = 0xa
+	TCIFLUSH                                    = 0x0
+	TCIOFF                                      = 0x2
+	TCIOFLUSH                                   = 0x2
+	TCION                                       = 0x3
+	TCOFLUSH                                    = 0x1
+	TCOOFF                                      = 0x0
+	TCOON                                       = 0x1
+	TCP_CC_INFO                                 = 0x1a
+	TCP_CM_INQ                                  = 0x24
+	TCP_CONGESTION                              = 0xd
+	TCP_COOKIE_IN_ALWAYS                        = 0x1
+	TCP_COOKIE_MAX                              = 0x10
+	TCP_COOKIE_MIN                              = 0x8
+	TCP_COOKIE_OUT_NEVER                        = 0x2
+	TCP_COOKIE_PAIR_SIZE                        = 0x20
+	TCP_COOKIE_TRANSACTIONS                     = 0xf
+	TCP_CORK                                    = 0x3
+	TCP_DEFER_ACCEPT                            = 0x9
+	TCP_FASTOPEN                                = 0x17
+	TCP_FASTOPEN_CONNECT                        = 0x1e
+	TCP_FASTOPEN_KEY                            = 0x21
+	TCP_FASTOPEN_NO_COOKIE                      = 0x22
+	TCP_INFO                                    = 0xb
+	TCP_INQ                                     = 0x24
+	TCP_KEEPCNT                                 = 0x6
+	TCP_KEEPIDLE                                = 0x4
+	TCP_KEEPINTVL                               = 0x5
+	TCP_LINGER2                                 = 0x8
+	TCP_MAXSEG                                  = 0x2
+	TCP_MAXWIN                                  = 0xffff
+	TCP_MAX_WINSHIFT                            = 0xe
+	TCP_MD5SIG                                  = 0xe
+	TCP_MD5SIG_EXT                              = 0x20
+	TCP_MD5SIG_FLAG_PREFIX                      = 0x1
+	TCP_MD5SIG_MAXKEYLEN                        = 0x50
+	TCP_MSS                                     = 0x200
+	TCP_MSS_DEFAULT                             = 0x218
+	TCP_MSS_DESIRED                             = 0x4c4
+	TCP_NODELAY                                 = 0x1
+	TCP_NOTSENT_LOWAT                           = 0x19
+	TCP_QUEUE_SEQ                               = 0x15
+	TCP_QUICKACK                                = 0xc
+	TCP_REPAIR                                  = 0x13
+	TCP_REPAIR_OFF                              = 0x0
+	TCP_REPAIR_OFF_NO_WP                        = -0x1
+	TCP_REPAIR_ON                               = 0x1
+	TCP_REPAIR_OPTIONS                          = 0x16
+	TCP_REPAIR_QUEUE                            = 0x14
+	TCP_REPAIR_WINDOW                           = 0x1d
+	TCP_SAVED_SYN                               = 0x1c
+	TCP_SAVE_SYN                                = 0x1b
+	TCP_SYNCNT                                  = 0x7
+	TCP_S_DATA_IN                               = 0x4
+	TCP_S_DATA_OUT                              = 0x8
+	TCP_THIN_DUPACK                             = 0x11
+	TCP_THIN_LINEAR_TIMEOUTS                    = 0x10
+	TCP_TIMESTAMP                               = 0x18
+	TCP_TX_DELAY                                = 0x25
+	TCP_ULP                                     = 0x1f
+	TCP_USER_TIMEOUT                            = 0x12
+	TCP_WINDOW_CLAMP                            = 0xa
+	TCP_ZEROCOPY_RECEIVE                        = 0x23
+	TFD_TIMER_ABSTIME                           = 0x1
+	TFD_TIMER_CANCEL_ON_SET                     = 0x2
+	TIMER_ABSTIME                               = 0x1
+	TIOCM_DTR                                   = 0x2
+	TIOCM_LE                                    = 0x1
+	TIOCM_RTS                                   = 0x4
+	TIOCPKT_DATA                                = 0x0
+	TIOCPKT_DOSTOP                              = 0x20
+	TIOCPKT_FLUSHREAD                           = 0x1
+	TIOCPKT_FLUSHWRITE                          = 0x2
+	TIOCPKT_IOCTL                               = 0x40
+	TIOCPKT_NOSTOP                              = 0x10
+	TIOCPKT_START                               = 0x8
+	TIOCPKT_STOP                                = 0x4
+	TIPC_ADDR_ID                                = 0x3
+	TIPC_ADDR_MCAST                             = 0x1
+	TIPC_ADDR_NAME                              = 0x2
+	TIPC_ADDR_NAMESEQ                           = 0x1
+	TIPC_AEAD_ALG_NAME                          = 0x20
+	TIPC_AEAD_KEYLEN_MAX                        = 0x24
+	TIPC_AEAD_KEYLEN_MIN                        = 0x14
+	TIPC_AEAD_KEY_SIZE_MAX                      = 0x48
+	TIPC_CFG_SRV                                = 0x0
+	TIPC_CLUSTER_BITS                           = 0xc
+	TIPC_CLUSTER_MASK                           = 0xfff000
+	TIPC_CLUSTER_OFFSET                         = 0xc
+	TIPC_CLUSTER_SIZE                           = 0xfff
+	TIPC_CONN_SHUTDOWN                          = 0x5
+	TIPC_CONN_TIMEOUT                           = 0x82
+	TIPC_CRITICAL_IMPORTANCE                    = 0x3
+	TIPC_DESTNAME                               = 0x3
+	TIPC_DEST_DROPPABLE                         = 0x81
+	TIPC_ERRINFO                                = 0x1
+	TIPC_ERR_NO_NAME                            = 0x1
+	TIPC_ERR_NO_NODE                            = 0x3
+	TIPC_ERR_NO_PORT                            = 0x2
+	TIPC_ERR_OVERLOAD                           = 0x4
+	TIPC_GROUP_JOIN                             = 0x87
+	TIPC_GROUP_LEAVE                            = 0x88
+	TIPC_GROUP_LOOPBACK                         = 0x1
+	TIPC_GROUP_MEMBER_EVTS                      = 0x2
+	TIPC_HIGH_IMPORTANCE                        = 0x2
+	TIPC_IMPORTANCE                             = 0x7f
+	TIPC_LINK_STATE                             = 0x2
+	TIPC_LOW_IMPORTANCE                         = 0x0
+	TIPC_MAX_BEARER_NAME                        = 0x20
+	TIPC_MAX_IF_NAME                            = 0x10
+	TIPC_MAX_LINK_NAME                          = 0x44
+	TIPC_MAX_MEDIA_NAME                         = 0x10
+	TIPC_MAX_USER_MSG_SIZE                      = 0x101d0
+	TIPC_MCAST_BROADCAST                        = 0x85
+	TIPC_MCAST_REPLICAST                        = 0x86
+	TIPC_MEDIUM_IMPORTANCE                      = 0x1
+	TIPC_NODEID_LEN                             = 0x10
+	TIPC_NODELAY                                = 0x8a
+	TIPC_NODE_BITS                              = 0xc
+	TIPC_NODE_MASK                              = 0xfff
+	TIPC_NODE_OFFSET                            = 0x0
+	TIPC_NODE_RECVQ_DEPTH                       = 0x83
+	TIPC_NODE_SIZE                              = 0xfff
+	TIPC_NODE_STATE                             = 0x0
+	TIPC_OK                                     = 0x0
+	TIPC_PUBLISHED                              = 0x1
+	TIPC_RESERVED_TYPES                         = 0x40
+	TIPC_RETDATA                                = 0x2
+	TIPC_SERVICE_ADDR                           = 0x2
+	TIPC_SERVICE_RANGE                          = 0x1
+	TIPC_SOCKET_ADDR                            = 0x3
+	TIPC_SOCK_RECVQ_DEPTH                       = 0x84
+	TIPC_SOCK_RECVQ_USED                        = 0x89
+	TIPC_SRC_DROPPABLE                          = 0x80
+	TIPC_SUBSCR_TIMEOUT                         = 0x3
+	TIPC_SUB_CANCEL                             = 0x4
+	TIPC_SUB_PORTS                              = 0x1
+	TIPC_SUB_SERVICE                            = 0x2
+	TIPC_TOP_SRV                                = 0x1
+	TIPC_WAIT_FOREVER                           = 0xffffffff
+	TIPC_WITHDRAWN                              = 0x2
+	TIPC_ZONE_BITS                              = 0x8
+	TIPC_ZONE_CLUSTER_MASK                      = 0xfffff000
+	TIPC_ZONE_MASK                              = 0xff000000
+	TIPC_ZONE_OFFSET                            = 0x18
+	TIPC_ZONE_SCOPE                             = 0x1
+	TIPC_ZONE_SIZE                              = 0xff
+	TMPFS_MAGIC                                 = 0x1021994
+	TPACKET_ALIGNMENT                           = 0x10
+	TPACKET_HDRLEN                              = 0x34
+	TP_STATUS_AVAILABLE                         = 0x0
+	TP_STATUS_BLK_TMO                           = 0x20
+	TP_STATUS_COPY                              = 0x2
+	TP_STATUS_CSUMNOTREADY                      = 0x8
+	TP_STATUS_CSUM_VALID                        = 0x80
+	TP_STATUS_KERNEL                            = 0x0
+	TP_STATUS_LOSING                            = 0x4
+	TP_STATUS_SENDING                           = 0x2
+	TP_STATUS_SEND_REQUEST                      = 0x1
+	TP_STATUS_TS_RAW_HARDWARE                   = 0x80000000
+	TP_STATUS_TS_SOFTWARE                       = 0x20000000
+	TP_STATUS_TS_SYS_HARDWARE                   = 0x40000000
+	TP_STATUS_USER                              = 0x1
+	TP_STATUS_VLAN_TPID_VALID                   = 0x40
+	TP_STATUS_VLAN_VALID                        = 0x10
+	TP_STATUS_WRONG_FORMAT                      = 0x4
+	TRACEFS_MAGIC                               = 0x74726163
+	TS_COMM_LEN                                 = 0x20
+	UDF_SUPER_MAGIC                             = 0x15013346
+	UMOUNT_NOFOLLOW                             = 0x8
+	USBDEVICE_SUPER_MAGIC                       = 0x9fa2
+	UTIME_NOW                                   = 0x3fffffff
+	UTIME_OMIT                                  = 0x3ffffffe
+	V9FS_MAGIC                                  = 0x1021997
+	VERASE                                      = 0x2
+	VINTR                                       = 0x0
+	VKILL                                       = 0x3
+	VLNEXT                                      = 0xf
+	VMADDR_CID_ANY                              = 0xffffffff
+	VMADDR_CID_HOST                             = 0x2
+	VMADDR_CID_HYPERVISOR                       = 0x0
+	VMADDR_CID_LOCAL                            = 0x1
+	VMADDR_PORT_ANY                             = 0xffffffff
+	VM_SOCKETS_INVALID_VERSION                  = 0xffffffff
+	VQUIT                                       = 0x1
+	VT0                                         = 0x0
+	WALL                                        = 0x40000000
+	WCLONE                                      = 0x80000000
+	WCONTINUED                                  = 0x8
+	WDIOC_SETPRETIMEOUT                         = 0xc0045708
+	WDIOC_SETTIMEOUT                            = 0xc0045706
+	WEXITED                                     = 0x4
+	WIN_ACKMEDIACHANGE                          = 0xdb
+	WIN_CHECKPOWERMODE1                         = 0xe5
+	WIN_CHECKPOWERMODE2                         = 0x98
+	WIN_DEVICE_RESET                            = 0x8
+	WIN_DIAGNOSE                                = 0x90
+	WIN_DOORLOCK                                = 0xde
+	WIN_DOORUNLOCK                              = 0xdf
+	WIN_DOWNLOAD_MICROCODE                      = 0x92
+	WIN_FLUSH_CACHE                             = 0xe7
+	WIN_FLUSH_CACHE_EXT                         = 0xea
+	WIN_FORMAT                                  = 0x50
+	WIN_GETMEDIASTATUS                          = 0xda
+	WIN_IDENTIFY                                = 0xec
+	WIN_IDENTIFY_DMA                            = 0xee
+	WIN_IDLEIMMEDIATE                           = 0xe1
+	WIN_INIT                                    = 0x60
+	WIN_MEDIAEJECT                              = 0xed
+	WIN_MULTREAD                                = 0xc4
+	WIN_MULTREAD_EXT                            = 0x29
+	WIN_MULTWRITE                               = 0xc5
+	WIN_MULTWRITE_EXT                           = 0x39
+	WIN_NOP                                     = 0x0
+	WIN_PACKETCMD                               = 0xa0
+	WIN_PIDENTIFY                               = 0xa1
+	WIN_POSTBOOT                                = 0xdc
+	WIN_PREBOOT                                 = 0xdd
+	WIN_QUEUED_SERVICE                          = 0xa2
+	WIN_READ                                    = 0x20
+	WIN_READDMA                                 = 0xc8
+	WIN_READDMA_EXT                             = 0x25
+	WIN_READDMA_ONCE                            = 0xc9
+	WIN_READDMA_QUEUED                          = 0xc7
+	WIN_READDMA_QUEUED_EXT                      = 0x26
+	WIN_READ_BUFFER                             = 0xe4
+	WIN_READ_EXT                                = 0x24
+	WIN_READ_LONG                               = 0x22
+	WIN_READ_LONG_ONCE                          = 0x23
+	WIN_READ_NATIVE_MAX                         = 0xf8
+	WIN_READ_NATIVE_MAX_EXT                     = 0x27
+	WIN_READ_ONCE                               = 0x21
+	WIN_RECAL                                   = 0x10
+	WIN_RESTORE                                 = 0x10
+	WIN_SECURITY_DISABLE                        = 0xf6
+	WIN_SECURITY_ERASE_PREPARE                  = 0xf3
+	WIN_SECURITY_ERASE_UNIT                     = 0xf4
+	WIN_SECURITY_FREEZE_LOCK                    = 0xf5
+	WIN_SECURITY_SET_PASS                       = 0xf1
+	WIN_SECURITY_UNLOCK                         = 0xf2
+	WIN_SEEK                                    = 0x70
+	WIN_SETFEATURES                             = 0xef
+	WIN_SETIDLE1                                = 0xe3
+	WIN_SETIDLE2                                = 0x97
+	WIN_SETMULT                                 = 0xc6
+	WIN_SET_MAX                                 = 0xf9
+	WIN_SET_MAX_EXT                             = 0x37
+	WIN_SLEEPNOW1                               = 0xe6
+	WIN_SLEEPNOW2                               = 0x99
+	WIN_SMART                                   = 0xb0
+	WIN_SPECIFY                                 = 0x91
+	WIN_SRST                                    = 0x8
+	WIN_STANDBY                                 = 0xe2
+	WIN_STANDBY2                                = 0x96
+	WIN_STANDBYNOW1                             = 0xe0
+	WIN_STANDBYNOW2                             = 0x94
+	WIN_VERIFY                                  = 0x40
+	WIN_VERIFY_EXT                              = 0x42
+	WIN_VERIFY_ONCE                             = 0x41
+	WIN_WRITE                                   = 0x30
+	WIN_WRITEDMA                                = 0xca
+	WIN_WRITEDMA_EXT                            = 0x35
+	WIN_WRITEDMA_ONCE                           = 0xcb
+	WIN_WRITEDMA_QUEUED                         = 0xcc
+	WIN_WRITEDMA_QUEUED_EXT                     = 0x36
+	WIN_WRITE_BUFFER                            = 0xe8
+	WIN_WRITE_EXT                               = 0x34
+	WIN_WRITE_LONG                              = 0x32
+	WIN_WRITE_LONG_ONCE                         = 0x33
+	WIN_WRITE_ONCE                              = 0x31
+	WIN_WRITE_SAME                              = 0xe9
+	WIN_WRITE_VERIFY                            = 0x3c
+	WNOHANG                                     = 0x1
+	WNOTHREAD                                   = 0x20000000
+	WNOWAIT                                     = 0x1000000
+	WSTOPPED                                    = 0x2
+	WUNTRACED                                   = 0x2
+	XATTR_CREATE                                = 0x1
+	XATTR_REPLACE                               = 0x2
+	XDP_COPY                                    = 0x2
+	XDP_FLAGS_DRV_MODE                          = 0x4
+	XDP_FLAGS_HW_MODE                           = 0x8
+	XDP_FLAGS_MASK                              = 0x1f
+	XDP_FLAGS_MODES                             = 0xe
+	XDP_FLAGS_REPLACE                           = 0x10
+	XDP_FLAGS_SKB_MODE                          = 0x2
+	XDP_FLAGS_UPDATE_IF_NOEXIST                 = 0x1
+	XDP_MMAP_OFFSETS                            = 0x1
+	XDP_OPTIONS                                 = 0x8
+	XDP_OPTIONS_ZEROCOPY                        = 0x1
+	XDP_PACKET_HEADROOM                         = 0x100
+	XDP_PGOFF_RX_RING                           = 0x0
+	XDP_PGOFF_TX_RING                           = 0x80000000
+	XDP_RING_NEED_WAKEUP                        = 0x1
+	XDP_RX_RING                                 = 0x2
+	XDP_SHARED_UMEM                             = 0x1
+	XDP_STATISTICS                              = 0x7
+	XDP_TX_RING                                 = 0x3
+	XDP_UMEM_COMPLETION_RING                    = 0x6
+	XDP_UMEM_FILL_RING                          = 0x5
+	XDP_UMEM_PGOFF_COMPLETION_RING              = 0x180000000
+	XDP_UMEM_PGOFF_FILL_RING                    = 0x100000000
+	XDP_UMEM_REG                                = 0x4
+	XDP_UMEM_UNALIGNED_CHUNK_FLAG               = 0x1
+	XDP_USE_NEED_WAKEUP                         = 0x8
+	XDP_ZEROCOPY                                = 0x4
+	XENFS_SUPER_MAGIC                           = 0xabba1974
+	XFS_SUPER_MAGIC                             = 0x58465342
+	Z3FOLD_MAGIC                                = 0x33
+	ZONEFS_MAGIC                                = 0x5a4f4653
+	ZSMALLOC_MAGIC                              = 0x58295829
+)
+
+// Errors
+const (
+	E2BIG       = syscall.Errno(0x7)
+	EACCES      = syscall.Errno(0xd)
+	EAGAIN      = syscall.Errno(0xb)
+	EBADF       = syscall.Errno(0x9)
+	EBUSY       = syscall.Errno(0x10)
+	ECHILD      = syscall.Errno(0xa)
+	EDOM        = syscall.Errno(0x21)
+	EEXIST      = syscall.Errno(0x11)
+	EFAULT      = syscall.Errno(0xe)
+	EFBIG       = syscall.Errno(0x1b)
+	EINTR       = syscall.Errno(0x4)
+	EINVAL      = syscall.Errno(0x16)
+	EIO         = syscall.Errno(0x5)
+	EISDIR      = syscall.Errno(0x15)
+	EMFILE      = syscall.Errno(0x18)
+	EMLINK      = syscall.Errno(0x1f)
+	ENFILE      = syscall.Errno(0x17)
+	ENODEV      = syscall.Errno(0x13)
+	ENOENT      = syscall.Errno(0x2)
+	ENOEXEC     = syscall.Errno(0x8)
+	ENOMEM      = syscall.Errno(0xc)
+	ENOSPC      = syscall.Errno(0x1c)
+	ENOTBLK     = syscall.Errno(0xf)
+	ENOTDIR     = syscall.Errno(0x14)
+	ENOTTY      = syscall.Errno(0x19)
+	ENXIO       = syscall.Errno(0x6)
+	EPERM       = syscall.Errno(0x1)
+	EPIPE       = syscall.Errno(0x20)
+	ERANGE      = syscall.Errno(0x22)
+	EROFS       = syscall.Errno(0x1e)
+	ESPIPE      = syscall.Errno(0x1d)
+	ESRCH       = syscall.Errno(0x3)
+	ETXTBSY     = syscall.Errno(0x1a)
+	EWOULDBLOCK = syscall.Errno(0xb)
+	EXDEV       = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT = syscall.Signal(0x6)
+	SIGALRM = syscall.Signal(0xe)
+	SIGFPE  = syscall.Signal(0x8)
+	SIGHUP  = syscall.Signal(0x1)
+	SIGILL  = syscall.Signal(0x4)
+	SIGINT  = syscall.Signal(0x2)
+	SIGIOT  = syscall.Signal(0x6)
+	SIGKILL = syscall.Signal(0x9)
+	SIGPIPE = syscall.Signal(0xd)
+	SIGQUIT = syscall.Signal(0x3)
+	SIGSEGV = syscall.Signal(0xb)
+	SIGTERM = syscall.Signal(0xf)
+	SIGTRAP = syscall.Signal(0x5)
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_386.go
new file mode 100644
index 000000000..dd282c08b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_386.go
@@ -0,0 +1,790 @@
+// mkerrors.sh -Wall -Werror -static -I/tmp/include -m32
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build 386,linux
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include -m32 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	B1000000                         = 0x1008
+	B115200                          = 0x1002
+	B1152000                         = 0x1009
+	B1500000                         = 0x100a
+	B2000000                         = 0x100b
+	B230400                          = 0x1003
+	B2500000                         = 0x100c
+	B3000000                         = 0x100d
+	B3500000                         = 0x100e
+	B4000000                         = 0x100f
+	B460800                          = 0x1004
+	B500000                          = 0x1005
+	B57600                           = 0x1001
+	B576000                          = 0x1006
+	B921600                          = 0x1007
+	BLKBSZGET                        = 0x80041270
+	BLKBSZSET                        = 0x40041271
+	BLKFLSBUF                        = 0x1261
+	BLKFRAGET                        = 0x1265
+	BLKFRASET                        = 0x1264
+	BLKGETSIZE                       = 0x1260
+	BLKGETSIZE64                     = 0x80041272
+	BLKPBSZGET                       = 0x127b
+	BLKRAGET                         = 0x1263
+	BLKRASET                         = 0x1262
+	BLKROGET                         = 0x125e
+	BLKROSET                         = 0x125d
+	BLKRRPART                        = 0x125f
+	BLKSECTGET                       = 0x1267
+	BLKSECTSET                       = 0x1266
+	BLKSSZGET                        = 0x1268
+	BOTHER                           = 0x1000
+	BS1                              = 0x2000
+	BSDLY                            = 0x2000
+	CBAUD                            = 0x100f
+	CBAUDEX                          = 0x1000
+	CIBAUD                           = 0x100f0000
+	CLOCAL                           = 0x800
+	CR1                              = 0x200
+	CR2                              = 0x400
+	CR3                              = 0x600
+	CRDLY                            = 0x600
+	CREAD                            = 0x80
+	CS6                              = 0x10
+	CS7                              = 0x20
+	CS8                              = 0x30
+	CSIZE                            = 0x30
+	CSTOPB                           = 0x40
+	ECHOCTL                          = 0x200
+	ECHOE                            = 0x10
+	ECHOK                            = 0x20
+	ECHOKE                           = 0x800
+	ECHONL                           = 0x40
+	ECHOPRT                          = 0x400
+	EFD_CLOEXEC                      = 0x80000
+	EFD_NONBLOCK                     = 0x800
+	EPOLL_CLOEXEC                    = 0x80000
+	EXTPROC                          = 0x10000
+	FF1                              = 0x8000
+	FFDLY                            = 0x8000
+	FICLONE                          = 0x40049409
+	FICLONERANGE                     = 0x4020940d
+	FLUSHO                           = 0x1000
+	FP_XSTATE_MAGIC2                 = 0x46505845
+	FS_IOC_ENABLE_VERITY             = 0x40806685
+	FS_IOC_GETFLAGS                  = 0x80046601
+	FS_IOC_GET_ENCRYPTION_NONCE      = 0x8010661b
+	FS_IOC_GET_ENCRYPTION_POLICY     = 0x400c6615
+	FS_IOC_GET_ENCRYPTION_PWSALT     = 0x40106614
+	FS_IOC_SETFLAGS                  = 0x40046602
+	FS_IOC_SET_ENCRYPTION_POLICY     = 0x800c6613
+	F_GETLK                          = 0xc
+	F_GETLK64                        = 0xc
+	F_GETOWN                         = 0x9
+	F_RDLCK                          = 0x0
+	F_SETLK                          = 0xd
+	F_SETLK64                        = 0xd
+	F_SETLKW                         = 0xe
+	F_SETLKW64                       = 0xe
+	F_SETOWN                         = 0x8
+	F_UNLCK                          = 0x2
+	F_WRLCK                          = 0x1
+	HUPCL                            = 0x400
+	ICANON                           = 0x2
+	IEXTEN                           = 0x8000
+	IN_CLOEXEC                       = 0x80000
+	IN_NONBLOCK                      = 0x800
+	IOCTL_VM_SOCKETS_GET_LOCAL_CID   = 0x7b9
+	ISIG                             = 0x1
+	IUCLC                            = 0x200
+	IXOFF                            = 0x1000
+	IXON                             = 0x400
+	MAP_32BIT                        = 0x40
+	MAP_ANON                         = 0x20
+	MAP_ANONYMOUS                    = 0x20
+	MAP_DENYWRITE                    = 0x800
+	MAP_EXECUTABLE                   = 0x1000
+	MAP_GROWSDOWN                    = 0x100
+	MAP_HUGETLB                      = 0x40000
+	MAP_LOCKED                       = 0x2000
+	MAP_NONBLOCK                     = 0x10000
+	MAP_NORESERVE                    = 0x4000
+	MAP_POPULATE                     = 0x8000
+	MAP_STACK                        = 0x20000
+	MAP_SYNC                         = 0x80000
+	MCL_CURRENT                      = 0x1
+	MCL_FUTURE                       = 0x2
+	MCL_ONFAULT                      = 0x4
+	NFDBITS                          = 0x20
+	NLDLY                            = 0x100
+	NOFLSH                           = 0x80
+	NS_GET_NSTYPE                    = 0xb703
+	NS_GET_OWNER_UID                 = 0xb704
+	NS_GET_PARENT                    = 0xb702
+	NS_GET_USERNS                    = 0xb701
+	OLCUC                            = 0x2
+	ONLCR                            = 0x4
+	O_APPEND                         = 0x400
+	O_ASYNC                          = 0x2000
+	O_CLOEXEC                        = 0x80000
+	O_CREAT                          = 0x40
+	O_DIRECT                         = 0x4000
+	O_DIRECTORY                      = 0x10000
+	O_DSYNC                          = 0x1000
+	O_EXCL                           = 0x80
+	O_FSYNC                          = 0x101000
+	O_LARGEFILE                      = 0x8000
+	O_NDELAY                         = 0x800
+	O_NOATIME                        = 0x40000
+	O_NOCTTY                         = 0x100
+	O_NOFOLLOW                       = 0x20000
+	O_NONBLOCK                       = 0x800
+	O_PATH                           = 0x200000
+	O_RSYNC                          = 0x101000
+	O_SYNC                           = 0x101000
+	O_TMPFILE                        = 0x410000
+	O_TRUNC                          = 0x200
+	PARENB                           = 0x100
+	PARODD                           = 0x200
+	PENDIN                           = 0x4000
+	PERF_EVENT_IOC_DISABLE           = 0x2401
+	PERF_EVENT_IOC_ENABLE            = 0x2400
+	PERF_EVENT_IOC_ID                = 0x80042407
+	PERF_EVENT_IOC_MODIFY_ATTRIBUTES = 0x4004240b
+	PERF_EVENT_IOC_PAUSE_OUTPUT      = 0x40042409
+	PERF_EVENT_IOC_PERIOD            = 0x40082404
+	PERF_EVENT_IOC_QUERY_BPF         = 0xc004240a
+	PERF_EVENT_IOC_REFRESH           = 0x2402
+	PERF_EVENT_IOC_RESET             = 0x2403
+	PERF_EVENT_IOC_SET_BPF           = 0x40042408
+	PERF_EVENT_IOC_SET_FILTER        = 0x40042406
+	PERF_EVENT_IOC_SET_OUTPUT        = 0x2405
+	PPPIOCATTACH                     = 0x4004743d
+	PPPIOCATTCHAN                    = 0x40047438
+	PPPIOCCONNECT                    = 0x4004743a
+	PPPIOCDETACH                     = 0x4004743c
+	PPPIOCDISCONN                    = 0x7439
+	PPPIOCGASYNCMAP                  = 0x80047458
+	PPPIOCGCHAN                      = 0x80047437
+	PPPIOCGDEBUG                     = 0x80047441
+	PPPIOCGFLAGS                     = 0x8004745a
+	PPPIOCGIDLE                      = 0x8008743f
+	PPPIOCGIDLE32                    = 0x8008743f
+	PPPIOCGIDLE64                    = 0x8010743f
+	PPPIOCGL2TPSTATS                 = 0x80487436
+	PPPIOCGMRU                       = 0x80047453
+	PPPIOCGRASYNCMAP                 = 0x80047455
+	PPPIOCGUNIT                      = 0x80047456
+	PPPIOCGXASYNCMAP                 = 0x80207450
+	PPPIOCSACTIVE                    = 0x40087446
+	PPPIOCSASYNCMAP                  = 0x40047457
+	PPPIOCSCOMPRESS                  = 0x400c744d
+	PPPIOCSDEBUG                     = 0x40047440
+	PPPIOCSFLAGS                     = 0x40047459
+	PPPIOCSMAXCID                    = 0x40047451
+	PPPIOCSMRRU                      = 0x4004743b
+	PPPIOCSMRU                       = 0x40047452
+	PPPIOCSNPMODE                    = 0x4008744b
+	PPPIOCSPASS                      = 0x40087447
+	PPPIOCSRASYNCMAP                 = 0x40047454
+	PPPIOCSXASYNCMAP                 = 0x4020744f
+	PPPIOCXFERUNIT                   = 0x744e
+	PR_SET_PTRACER_ANY               = 0xffffffff
+	PTRACE_GETFPREGS                 = 0xe
+	PTRACE_GETFPXREGS                = 0x12
+	PTRACE_GET_THREAD_AREA           = 0x19
+	PTRACE_OLDSETOPTIONS             = 0x15
+	PTRACE_SETFPREGS                 = 0xf
+	PTRACE_SETFPXREGS                = 0x13
+	PTRACE_SET_THREAD_AREA           = 0x1a
+	PTRACE_SINGLEBLOCK               = 0x21
+	PTRACE_SYSEMU                    = 0x1f
+	PTRACE_SYSEMU_SINGLESTEP         = 0x20
+	RLIMIT_AS                        = 0x9
+	RLIMIT_MEMLOCK                   = 0x8
+	RLIMIT_NOFILE                    = 0x7
+	RLIMIT_NPROC                     = 0x6
+	RLIMIT_RSS                       = 0x5
+	RNDADDENTROPY                    = 0x40085203
+	RNDADDTOENTCNT                   = 0x40045201
+	RNDCLEARPOOL                     = 0x5206
+	RNDGETENTCNT                     = 0x80045200
+	RNDGETPOOL                       = 0x80085202
+	RNDRESEEDCRNG                    = 0x5207
+	RNDZAPENTCNT                     = 0x5204
+	RTC_AIE_OFF                      = 0x7002
+	RTC_AIE_ON                       = 0x7001
+	RTC_ALM_READ                     = 0x80247008
+	RTC_ALM_SET                      = 0x40247007
+	RTC_EPOCH_READ                   = 0x8004700d
+	RTC_EPOCH_SET                    = 0x4004700e
+	RTC_IRQP_READ                    = 0x8004700b
+	RTC_IRQP_SET                     = 0x4004700c
+	RTC_PIE_OFF                      = 0x7006
+	RTC_PIE_ON                       = 0x7005
+	RTC_PLL_GET                      = 0x801c7011
+	RTC_PLL_SET                      = 0x401c7012
+	RTC_RD_TIME                      = 0x80247009
+	RTC_SET_TIME                     = 0x4024700a
+	RTC_UIE_OFF                      = 0x7004
+	RTC_UIE_ON                       = 0x7003
+	RTC_VL_CLR                       = 0x7014
+	RTC_VL_READ                      = 0x80047013
+	RTC_WIE_OFF                      = 0x7010
+	RTC_WIE_ON                       = 0x700f
+	RTC_WKALM_RD                     = 0x80287010
+	RTC_WKALM_SET                    = 0x4028700f
+	SCM_TIMESTAMPING                 = 0x25
+	SCM_TIMESTAMPING_OPT_STATS       = 0x36
+	SCM_TIMESTAMPING_PKTINFO         = 0x3a
+	SCM_TIMESTAMPNS                  = 0x23
+	SCM_TXTIME                       = 0x3d
+	SCM_WIFI_STATUS                  = 0x29
+	SFD_CLOEXEC                      = 0x80000
+	SFD_NONBLOCK                     = 0x800
+	SIOCATMARK                       = 0x8905
+	SIOCGPGRP                        = 0x8904
+	SIOCGSTAMPNS_NEW                 = 0x80108907
+	SIOCGSTAMP_NEW                   = 0x80108906
+	SIOCINQ                          = 0x541b
+	SIOCOUTQ                         = 0x5411
+	SIOCSPGRP                        = 0x8902
+	SOCK_CLOEXEC                     = 0x80000
+	SOCK_DGRAM                       = 0x2
+	SOCK_NONBLOCK                    = 0x800
+	SOCK_STREAM                      = 0x1
+	SOL_SOCKET                       = 0x1
+	SO_ACCEPTCONN                    = 0x1e
+	SO_ATTACH_BPF                    = 0x32
+	SO_ATTACH_REUSEPORT_CBPF         = 0x33
+	SO_ATTACH_REUSEPORT_EBPF         = 0x34
+	SO_BINDTODEVICE                  = 0x19
+	SO_BINDTOIFINDEX                 = 0x3e
+	SO_BPF_EXTENSIONS                = 0x30
+	SO_BROADCAST                     = 0x6
+	SO_BSDCOMPAT                     = 0xe
+	SO_BUSY_POLL                     = 0x2e
+	SO_CNX_ADVICE                    = 0x35
+	SO_COOKIE                        = 0x39
+	SO_DETACH_REUSEPORT_BPF          = 0x44
+	SO_DOMAIN                        = 0x27
+	SO_DONTROUTE                     = 0x5
+	SO_ERROR                         = 0x4
+	SO_INCOMING_CPU                  = 0x31
+	SO_INCOMING_NAPI_ID              = 0x38
+	SO_KEEPALIVE                     = 0x9
+	SO_LINGER                        = 0xd
+	SO_LOCK_FILTER                   = 0x2c
+	SO_MARK                          = 0x24
+	SO_MAX_PACING_RATE               = 0x2f
+	SO_MEMINFO                       = 0x37
+	SO_NOFCS                         = 0x2b
+	SO_OOBINLINE                     = 0xa
+	SO_PASSCRED                      = 0x10
+	SO_PASSSEC                       = 0x22
+	SO_PEEK_OFF                      = 0x2a
+	SO_PEERCRED                      = 0x11
+	SO_PEERGROUPS                    = 0x3b
+	SO_PEERSEC                       = 0x1f
+	SO_PROTOCOL                      = 0x26
+	SO_RCVBUF                        = 0x8
+	SO_RCVBUFFORCE                   = 0x21
+	SO_RCVLOWAT                      = 0x12
+	SO_RCVTIMEO                      = 0x14
+	SO_RCVTIMEO_NEW                  = 0x42
+	SO_RCVTIMEO_OLD                  = 0x14
+	SO_REUSEADDR                     = 0x2
+	SO_REUSEPORT                     = 0xf
+	SO_RXQ_OVFL                      = 0x28
+	SO_SECURITY_AUTHENTICATION       = 0x16
+	SO_SECURITY_ENCRYPTION_NETWORK   = 0x18
+	SO_SECURITY_ENCRYPTION_TRANSPORT = 0x17
+	SO_SELECT_ERR_QUEUE              = 0x2d
+	SO_SNDBUF                        = 0x7
+	SO_SNDBUFFORCE                   = 0x20
+	SO_SNDLOWAT                      = 0x13
+	SO_SNDTIMEO                      = 0x15
+	SO_SNDTIMEO_NEW                  = 0x43
+	SO_SNDTIMEO_OLD                  = 0x15
+	SO_TIMESTAMPING                  = 0x25
+	SO_TIMESTAMPING_NEW              = 0x41
+	SO_TIMESTAMPING_OLD              = 0x25
+	SO_TIMESTAMPNS                   = 0x23
+	SO_TIMESTAMPNS_NEW               = 0x40
+	SO_TIMESTAMPNS_OLD               = 0x23
+	SO_TIMESTAMP_NEW                 = 0x3f
+	SO_TXTIME                        = 0x3d
+	SO_TYPE                          = 0x3
+	SO_WIFI_STATUS                   = 0x29
+	SO_ZEROCOPY                      = 0x3c
+	TAB1                             = 0x800
+	TAB2                             = 0x1000
+	TAB3                             = 0x1800
+	TABDLY                           = 0x1800
+	TCFLSH                           = 0x540b
+	TCGETA                           = 0x5405
+	TCGETS                           = 0x5401
+	TCGETS2                          = 0x802c542a
+	TCGETX                           = 0x5432
+	TCSAFLUSH                        = 0x2
+	TCSBRK                           = 0x5409
+	TCSBRKP                          = 0x5425
+	TCSETA                           = 0x5406
+	TCSETAF                          = 0x5408
+	TCSETAW                          = 0x5407
+	TCSETS                           = 0x5402
+	TCSETS2                          = 0x402c542b
+	TCSETSF                          = 0x5404
+	TCSETSF2                         = 0x402c542d
+	TCSETSW                          = 0x5403
+	TCSETSW2                         = 0x402c542c
+	TCSETX                           = 0x5433
+	TCSETXF                          = 0x5434
+	TCSETXW                          = 0x5435
+	TCXONC                           = 0x540a
+	TFD_CLOEXEC                      = 0x80000
+	TFD_NONBLOCK                     = 0x800
+	TIOCCBRK                         = 0x5428
+	TIOCCONS                         = 0x541d
+	TIOCEXCL                         = 0x540c
+	TIOCGDEV                         = 0x80045432
+	TIOCGETD                         = 0x5424
+	TIOCGEXCL                        = 0x80045440
+	TIOCGICOUNT                      = 0x545d
+	TIOCGISO7816                     = 0x80285442
+	TIOCGLCKTRMIOS                   = 0x5456
+	TIOCGPGRP                        = 0x540f
+	TIOCGPKT                         = 0x80045438
+	TIOCGPTLCK                       = 0x80045439
+	TIOCGPTN                         = 0x80045430
+	TIOCGPTPEER                      = 0x5441
+	TIOCGRS485                       = 0x542e
+	TIOCGSERIAL                      = 0x541e
+	TIOCGSID                         = 0x5429
+	TIOCGSOFTCAR                     = 0x5419
+	TIOCGWINSZ                       = 0x5413
+	TIOCINQ                          = 0x541b
+	TIOCLINUX                        = 0x541c
+	TIOCMBIC                         = 0x5417
+	TIOCMBIS                         = 0x5416
+	TIOCMGET                         = 0x5415
+	TIOCMIWAIT                       = 0x545c
+	TIOCMSET                         = 0x5418
+	TIOCM_CAR                        = 0x40
+	TIOCM_CD                         = 0x40
+	TIOCM_CTS                        = 0x20
+	TIOCM_DSR                        = 0x100
+	TIOCM_RI                         = 0x80
+	TIOCM_RNG                        = 0x80
+	TIOCM_SR                         = 0x10
+	TIOCM_ST                         = 0x8
+	TIOCNOTTY                        = 0x5422
+	TIOCNXCL                         = 0x540d
+	TIOCOUTQ                         = 0x5411
+	TIOCPKT                          = 0x5420
+	TIOCSBRK                         = 0x5427
+	TIOCSCTTY                        = 0x540e
+	TIOCSERCONFIG                    = 0x5453
+	TIOCSERGETLSR                    = 0x5459
+	TIOCSERGETMULTI                  = 0x545a
+	TIOCSERGSTRUCT                   = 0x5458
+	TIOCSERGWILD                     = 0x5454
+	TIOCSERSETMULTI                  = 0x545b
+	TIOCSERSWILD                     = 0x5455
+	TIOCSER_TEMT                     = 0x1
+	TIOCSETD                         = 0x5423
+	TIOCSIG                          = 0x40045436
+	TIOCSISO7816                     = 0xc0285443
+	TIOCSLCKTRMIOS                   = 0x5457
+	TIOCSPGRP                        = 0x5410
+	TIOCSPTLCK                       = 0x40045431
+	TIOCSRS485                       = 0x542f
+	TIOCSSERIAL                      = 0x541f
+	TIOCSSOFTCAR                     = 0x541a
+	TIOCSTI                          = 0x5412
+	TIOCSWINSZ                       = 0x5414
+	TIOCVHANGUP                      = 0x5437
+	TOSTOP                           = 0x100
+	TUNATTACHFILTER                  = 0x400854d5
+	TUNDETACHFILTER                  = 0x400854d6
+	TUNGETDEVNETNS                   = 0x54e3
+	TUNGETFEATURES                   = 0x800454cf
+	TUNGETFILTER                     = 0x800854db
+	TUNGETIFF                        = 0x800454d2
+	TUNGETSNDBUF                     = 0x800454d3
+	TUNGETVNETBE                     = 0x800454df
+	TUNGETVNETHDRSZ                  = 0x800454d7
+	TUNGETVNETLE                     = 0x800454dd
+	TUNSETCARRIER                    = 0x400454e2
+	TUNSETDEBUG                      = 0x400454c9
+	TUNSETFILTEREBPF                 = 0x800454e1
+	TUNSETGROUP                      = 0x400454ce
+	TUNSETIFF                        = 0x400454ca
+	TUNSETIFINDEX                    = 0x400454da
+	TUNSETLINK                       = 0x400454cd
+	TUNSETNOCSUM                     = 0x400454c8
+	TUNSETOFFLOAD                    = 0x400454d0
+	TUNSETOWNER                      = 0x400454cc
+	TUNSETPERSIST                    = 0x400454cb
+	TUNSETQUEUE                      = 0x400454d9
+	TUNSETSNDBUF                     = 0x400454d4
+	TUNSETSTEERINGEBPF               = 0x800454e0
+	TUNSETTXFILTER                   = 0x400454d1
+	TUNSETVNETBE                     = 0x400454de
+	TUNSETVNETHDRSZ                  = 0x400454d8
+	TUNSETVNETLE                     = 0x400454dc
+	UBI_IOCATT                       = 0x40186f40
+	UBI_IOCDET                       = 0x40046f41
+	UBI_IOCEBCH                      = 0x40044f02
+	UBI_IOCEBER                      = 0x40044f01
+	UBI_IOCEBISMAP                   = 0x80044f05
+	UBI_IOCEBMAP                     = 0x40084f03
+	UBI_IOCEBUNMAP                   = 0x40044f04
+	UBI_IOCMKVOL                     = 0x40986f00
+	UBI_IOCRMVOL                     = 0x40046f01
+	UBI_IOCRNVOL                     = 0x51106f03
+	UBI_IOCRPEB                      = 0x40046f04
+	UBI_IOCRSVOL                     = 0x400c6f02
+	UBI_IOCSETVOLPROP                = 0x40104f06
+	UBI_IOCSPEB                      = 0x40046f05
+	UBI_IOCVOLCRBLK                  = 0x40804f07
+	UBI_IOCVOLRMBLK                  = 0x4f08
+	UBI_IOCVOLUP                     = 0x40084f00
+	VDISCARD                         = 0xd
+	VEOF                             = 0x4
+	VEOL                             = 0xb
+	VEOL2                            = 0x10
+	VMIN                             = 0x6
+	VREPRINT                         = 0xc
+	VSTART                           = 0x8
+	VSTOP                            = 0x9
+	VSUSP                            = 0xa
+	VSWTC                            = 0x7
+	VT1                              = 0x4000
+	VTDLY                            = 0x4000
+	VTIME                            = 0x5
+	VWERASE                          = 0xe
+	WDIOC_GETBOOTSTATUS              = 0x80045702
+	WDIOC_GETPRETIMEOUT              = 0x80045709
+	WDIOC_GETSTATUS                  = 0x80045701
+	WDIOC_GETSUPPORT                 = 0x80285700
+	WDIOC_GETTEMP                    = 0x80045703
+	WDIOC_GETTIMELEFT                = 0x8004570a
+	WDIOC_GETTIMEOUT                 = 0x80045707
+	WDIOC_KEEPALIVE                  = 0x80045705
+	WDIOC_SETOPTIONS                 = 0x80045704
+	WORDSIZE                         = 0x20
+	X86_FXSR_MAGIC                   = 0x0
+	XCASE                            = 0x4
+	XTABS                            = 0x1800
+)
+
+// Errors
+const (
+	EADDRINUSE      = syscall.Errno(0x62)
+	EADDRNOTAVAIL   = syscall.Errno(0x63)
+	EADV            = syscall.Errno(0x44)
+	EAFNOSUPPORT    = syscall.Errno(0x61)
+	EALREADY        = syscall.Errno(0x72)
+	EBADE           = syscall.Errno(0x34)
+	EBADFD          = syscall.Errno(0x4d)
+	EBADMSG         = syscall.Errno(0x4a)
+	EBADR           = syscall.Errno(0x35)
+	EBADRQC         = syscall.Errno(0x38)
+	EBADSLT         = syscall.Errno(0x39)
+	EBFONT          = syscall.Errno(0x3b)
+	ECANCELED       = syscall.Errno(0x7d)
+	ECHRNG          = syscall.Errno(0x2c)
+	ECOMM           = syscall.Errno(0x46)
+	ECONNABORTED    = syscall.Errno(0x67)
+	ECONNREFUSED    = syscall.Errno(0x6f)
+	ECONNRESET      = syscall.Errno(0x68)
+	EDEADLK         = syscall.Errno(0x23)
+	EDEADLOCK       = syscall.Errno(0x23)
+	EDESTADDRREQ    = syscall.Errno(0x59)
+	EDOTDOT         = syscall.Errno(0x49)
+	EDQUOT          = syscall.Errno(0x7a)
+	EHOSTDOWN       = syscall.Errno(0x70)
+	EHOSTUNREACH    = syscall.Errno(0x71)
+	EHWPOISON       = syscall.Errno(0x85)
+	EIDRM           = syscall.Errno(0x2b)
+	EILSEQ          = syscall.Errno(0x54)
+	EINPROGRESS     = syscall.Errno(0x73)
+	EISCONN         = syscall.Errno(0x6a)
+	EISNAM          = syscall.Errno(0x78)
+	EKEYEXPIRED     = syscall.Errno(0x7f)
+	EKEYREJECTED    = syscall.Errno(0x81)
+	EKEYREVOKED     = syscall.Errno(0x80)
+	EL2HLT          = syscall.Errno(0x33)
+	EL2NSYNC        = syscall.Errno(0x2d)
+	EL3HLT          = syscall.Errno(0x2e)
+	EL3RST          = syscall.Errno(0x2f)
+	ELIBACC         = syscall.Errno(0x4f)
+	ELIBBAD         = syscall.Errno(0x50)
+	ELIBEXEC        = syscall.Errno(0x53)
+	ELIBMAX         = syscall.Errno(0x52)
+	ELIBSCN         = syscall.Errno(0x51)
+	ELNRNG          = syscall.Errno(0x30)
+	ELOOP           = syscall.Errno(0x28)
+	EMEDIUMTYPE     = syscall.Errno(0x7c)
+	EMSGSIZE        = syscall.Errno(0x5a)
+	EMULTIHOP       = syscall.Errno(0x48)
+	ENAMETOOLONG    = syscall.Errno(0x24)
+	ENAVAIL         = syscall.Errno(0x77)
+	ENETDOWN        = syscall.Errno(0x64)
+	ENETRESET       = syscall.Errno(0x66)
+	ENETUNREACH     = syscall.Errno(0x65)
+	ENOANO          = syscall.Errno(0x37)
+	ENOBUFS         = syscall.Errno(0x69)
+	ENOCSI          = syscall.Errno(0x32)
+	ENODATA         = syscall.Errno(0x3d)
+	ENOKEY          = syscall.Errno(0x7e)
+	ENOLCK          = syscall.Errno(0x25)
+	ENOLINK         = syscall.Errno(0x43)
+	ENOMEDIUM       = syscall.Errno(0x7b)
+	ENOMSG          = syscall.Errno(0x2a)
+	ENONET          = syscall.Errno(0x40)
+	ENOPKG          = syscall.Errno(0x41)
+	ENOPROTOOPT     = syscall.Errno(0x5c)
+	ENOSR           = syscall.Errno(0x3f)
+	ENOSTR          = syscall.Errno(0x3c)
+	ENOSYS          = syscall.Errno(0x26)
+	ENOTCONN        = syscall.Errno(0x6b)
+	ENOTEMPTY       = syscall.Errno(0x27)
+	ENOTNAM         = syscall.Errno(0x76)
+	ENOTRECOVERABLE = syscall.Errno(0x83)
+	ENOTSOCK        = syscall.Errno(0x58)
+	ENOTSUP         = syscall.Errno(0x5f)
+	ENOTUNIQ        = syscall.Errno(0x4c)
+	EOPNOTSUPP      = syscall.Errno(0x5f)
+	EOVERFLOW       = syscall.Errno(0x4b)
+	EOWNERDEAD      = syscall.Errno(0x82)
+	EPFNOSUPPORT    = syscall.Errno(0x60)
+	EPROTO          = syscall.Errno(0x47)
+	EPROTONOSUPPORT = syscall.Errno(0x5d)
+	EPROTOTYPE      = syscall.Errno(0x5b)
+	EREMCHG         = syscall.Errno(0x4e)
+	EREMOTE         = syscall.Errno(0x42)
+	EREMOTEIO       = syscall.Errno(0x79)
+	ERESTART        = syscall.Errno(0x55)
+	ERFKILL         = syscall.Errno(0x84)
+	ESHUTDOWN       = syscall.Errno(0x6c)
+	ESOCKTNOSUPPORT = syscall.Errno(0x5e)
+	ESRMNT          = syscall.Errno(0x45)
+	ESTALE          = syscall.Errno(0x74)
+	ESTRPIPE        = syscall.Errno(0x56)
+	ETIME           = syscall.Errno(0x3e)
+	ETIMEDOUT       = syscall.Errno(0x6e)
+	ETOOMANYREFS    = syscall.Errno(0x6d)
+	EUCLEAN         = syscall.Errno(0x75)
+	EUNATCH         = syscall.Errno(0x31)
+	EUSERS          = syscall.Errno(0x57)
+	EXFULL          = syscall.Errno(0x36)
+)
+
+// Signals
+const (
+	SIGBUS    = syscall.Signal(0x7)
+	SIGCHLD   = syscall.Signal(0x11)
+	SIGCLD    = syscall.Signal(0x11)
+	SIGCONT   = syscall.Signal(0x12)
+	SIGIO     = syscall.Signal(0x1d)
+	SIGPOLL   = syscall.Signal(0x1d)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGPWR    = syscall.Signal(0x1e)
+	SIGSTKFLT = syscall.Signal(0x10)
+	SIGSTOP   = syscall.Signal(0x13)
+	SIGSYS    = syscall.Signal(0x1f)
+	SIGTSTP   = syscall.Signal(0x14)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x17)
+	SIGUSR1   = syscall.Signal(0xa)
+	SIGUSR2   = syscall.Signal(0xc)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "no such device or address"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EAGAIN", "resource temporarily unavailable"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device or resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "invalid cross-device link"},
+	{19, "ENODEV", "no such device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "numerical result out of range"},
+	{35, "EDEADLK", "resource deadlock avoided"},
+	{36, "ENAMETOOLONG", "file name too long"},
+	{37, "ENOLCK", "no locks available"},
+	{38, "ENOSYS", "function not implemented"},
+	{39, "ENOTEMPTY", "directory not empty"},
+	{40, "ELOOP", "too many levels of symbolic links"},
+	{42, "ENOMSG", "no message of desired type"},
+	{43, "EIDRM", "identifier removed"},
+	{44, "ECHRNG", "channel number out of range"},
+	{45, "EL2NSYNC", "level 2 not synchronized"},
+	{46, "EL3HLT", "level 3 halted"},
+	{47, "EL3RST", "level 3 reset"},
+	{48, "ELNRNG", "link number out of range"},
+	{49, "EUNATCH", "protocol driver not attached"},
+	{50, "ENOCSI", "no CSI structure available"},
+	{51, "EL2HLT", "level 2 halted"},
+	{52, "EBADE", "invalid exchange"},
+	{53, "EBADR", "invalid request descriptor"},
+	{54, "EXFULL", "exchange full"},
+	{55, "ENOANO", "no anode"},
+	{56, "EBADRQC", "invalid request code"},
+	{57, "EBADSLT", "invalid slot"},
+	{59, "EBFONT", "bad font file format"},
+	{60, "ENOSTR", "device not a stream"},
+	{61, "ENODATA", "no data available"},
+	{62, "ETIME", "timer expired"},
+	{63, "ENOSR", "out of streams resources"},
+	{64, "ENONET", "machine is not on the network"},
+	{65, "ENOPKG", "package not installed"},
+	{66, "EREMOTE", "object is remote"},
+	{67, "ENOLINK", "link has been severed"},
+	{68, "EADV", "advertise error"},
+	{69, "ESRMNT", "srmount error"},
+	{70, "ECOMM", "communication error on send"},
+	{71, "EPROTO", "protocol error"},
+	{72, "EMULTIHOP", "multihop attempted"},
+	{73, "EDOTDOT", "RFS specific error"},
+	{74, "EBADMSG", "bad message"},
+	{75, "EOVERFLOW", "value too large for defined data type"},
+	{76, "ENOTUNIQ", "name not unique on network"},
+	{77, "EBADFD", "file descriptor in bad state"},
+	{78, "EREMCHG", "remote address changed"},
+	{79, "ELIBACC", "can not access a needed shared library"},
+	{80, "ELIBBAD", "accessing a corrupted shared library"},
+	{81, "ELIBSCN", ".lib section in a.out corrupted"},
+	{82, "ELIBMAX", "attempting to link in too many shared libraries"},
+	{83, "ELIBEXEC", "cannot exec a shared library directly"},
+	{84, "EILSEQ", "invalid or incomplete multibyte or wide character"},
+	{85, "ERESTART", "interrupted system call should be restarted"},
+	{86, "ESTRPIPE", "streams pipe error"},
+	{87, "EUSERS", "too many users"},
+	{88, "ENOTSOCK", "socket operation on non-socket"},
+	{89, "EDESTADDRREQ", "destination address required"},
+	{90, "EMSGSIZE", "message too long"},
+	{91, "EPROTOTYPE", "protocol wrong type for socket"},
+	{92, "ENOPROTOOPT", "protocol not available"},
+	{93, "EPROTONOSUPPORT", "protocol not supported"},
+	{94, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{95, "ENOTSUP", "operation not supported"},
+	{96, "EPFNOSUPPORT", "protocol family not supported"},
+	{97, "EAFNOSUPPORT", "address family not supported by protocol"},
+	{98, "EADDRINUSE", "address already in use"},
+	{99, "EADDRNOTAVAIL", "cannot assign requested address"},
+	{100, "ENETDOWN", "network is down"},
+	{101, "ENETUNREACH", "network is unreachable"},
+	{102, "ENETRESET", "network dropped connection on reset"},
+	{103, "ECONNABORTED", "software caused connection abort"},
+	{104, "ECONNRESET", "connection reset by peer"},
+	{105, "ENOBUFS", "no buffer space available"},
+	{106, "EISCONN", "transport endpoint is already connected"},
+	{107, "ENOTCONN", "transport endpoint is not connected"},
+	{108, "ESHUTDOWN", "cannot send after transport endpoint shutdown"},
+	{109, "ETOOMANYREFS", "too many references: cannot splice"},
+	{110, "ETIMEDOUT", "connection timed out"},
+	{111, "ECONNREFUSED", "connection refused"},
+	{112, "EHOSTDOWN", "host is down"},
+	{113, "EHOSTUNREACH", "no route to host"},
+	{114, "EALREADY", "operation already in progress"},
+	{115, "EINPROGRESS", "operation now in progress"},
+	{116, "ESTALE", "stale file handle"},
+	{117, "EUCLEAN", "structure needs cleaning"},
+	{118, "ENOTNAM", "not a XENIX named type file"},
+	{119, "ENAVAIL", "no XENIX semaphores available"},
+	{120, "EISNAM", "is a named type file"},
+	{121, "EREMOTEIO", "remote I/O error"},
+	{122, "EDQUOT", "disk quota exceeded"},
+	{123, "ENOMEDIUM", "no medium found"},
+	{124, "EMEDIUMTYPE", "wrong medium type"},
+	{125, "ECANCELED", "operation canceled"},
+	{126, "ENOKEY", "required key not available"},
+	{127, "EKEYEXPIRED", "key has expired"},
+	{128, "EKEYREVOKED", "key has been revoked"},
+	{129, "EKEYREJECTED", "key was rejected by service"},
+	{130, "EOWNERDEAD", "owner died"},
+	{131, "ENOTRECOVERABLE", "state not recoverable"},
+	{132, "ERFKILL", "operation not possible due to RF-kill"},
+	{133, "EHWPOISON", "memory page has hardware error"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/breakpoint trap"},
+	{6, "SIGABRT", "aborted"},
+	{7, "SIGBUS", "bus error"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGUSR1", "user defined signal 1"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGUSR2", "user defined signal 2"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGSTKFLT", "stack fault"},
+	{17, "SIGCHLD", "child exited"},
+	{18, "SIGCONT", "continued"},
+	{19, "SIGSTOP", "stopped (signal)"},
+	{20, "SIGTSTP", "stopped"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGURG", "urgent I/O condition"},
+	{24, "SIGXCPU", "CPU time limit exceeded"},
+	{25, "SIGXFSZ", "file size limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window changed"},
+	{29, "SIGIO", "I/O possible"},
+	{30, "SIGPWR", "power failure"},
+	{31, "SIGSYS", "bad system call"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_amd64.go
new file mode 100644
index 000000000..82fc93c7b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_amd64.go
@@ -0,0 +1,790 @@
+// mkerrors.sh -Wall -Werror -static -I/tmp/include -m64
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,linux
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include -m64 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	B1000000                         = 0x1008
+	B115200                          = 0x1002
+	B1152000                         = 0x1009
+	B1500000                         = 0x100a
+	B2000000                         = 0x100b
+	B230400                          = 0x1003
+	B2500000                         = 0x100c
+	B3000000                         = 0x100d
+	B3500000                         = 0x100e
+	B4000000                         = 0x100f
+	B460800                          = 0x1004
+	B500000                          = 0x1005
+	B57600                           = 0x1001
+	B576000                          = 0x1006
+	B921600                          = 0x1007
+	BLKBSZGET                        = 0x80081270
+	BLKBSZSET                        = 0x40081271
+	BLKFLSBUF                        = 0x1261
+	BLKFRAGET                        = 0x1265
+	BLKFRASET                        = 0x1264
+	BLKGETSIZE                       = 0x1260
+	BLKGETSIZE64                     = 0x80081272
+	BLKPBSZGET                       = 0x127b
+	BLKRAGET                         = 0x1263
+	BLKRASET                         = 0x1262
+	BLKROGET                         = 0x125e
+	BLKROSET                         = 0x125d
+	BLKRRPART                        = 0x125f
+	BLKSECTGET                       = 0x1267
+	BLKSECTSET                       = 0x1266
+	BLKSSZGET                        = 0x1268
+	BOTHER                           = 0x1000
+	BS1                              = 0x2000
+	BSDLY                            = 0x2000
+	CBAUD                            = 0x100f
+	CBAUDEX                          = 0x1000
+	CIBAUD                           = 0x100f0000
+	CLOCAL                           = 0x800
+	CR1                              = 0x200
+	CR2                              = 0x400
+	CR3                              = 0x600
+	CRDLY                            = 0x600
+	CREAD                            = 0x80
+	CS6                              = 0x10
+	CS7                              = 0x20
+	CS8                              = 0x30
+	CSIZE                            = 0x30
+	CSTOPB                           = 0x40
+	ECHOCTL                          = 0x200
+	ECHOE                            = 0x10
+	ECHOK                            = 0x20
+	ECHOKE                           = 0x800
+	ECHONL                           = 0x40
+	ECHOPRT                          = 0x400
+	EFD_CLOEXEC                      = 0x80000
+	EFD_NONBLOCK                     = 0x800
+	EPOLL_CLOEXEC                    = 0x80000
+	EXTPROC                          = 0x10000
+	FF1                              = 0x8000
+	FFDLY                            = 0x8000
+	FICLONE                          = 0x40049409
+	FICLONERANGE                     = 0x4020940d
+	FLUSHO                           = 0x1000
+	FP_XSTATE_MAGIC2                 = 0x46505845
+	FS_IOC_ENABLE_VERITY             = 0x40806685
+	FS_IOC_GETFLAGS                  = 0x80086601
+	FS_IOC_GET_ENCRYPTION_NONCE      = 0x8010661b
+	FS_IOC_GET_ENCRYPTION_POLICY     = 0x400c6615
+	FS_IOC_GET_ENCRYPTION_PWSALT     = 0x40106614
+	FS_IOC_SETFLAGS                  = 0x40086602
+	FS_IOC_SET_ENCRYPTION_POLICY     = 0x800c6613
+	F_GETLK                          = 0x5
+	F_GETLK64                        = 0x5
+	F_GETOWN                         = 0x9
+	F_RDLCK                          = 0x0
+	F_SETLK                          = 0x6
+	F_SETLK64                        = 0x6
+	F_SETLKW                         = 0x7
+	F_SETLKW64                       = 0x7
+	F_SETOWN                         = 0x8
+	F_UNLCK                          = 0x2
+	F_WRLCK                          = 0x1
+	HUPCL                            = 0x400
+	ICANON                           = 0x2
+	IEXTEN                           = 0x8000
+	IN_CLOEXEC                       = 0x80000
+	IN_NONBLOCK                      = 0x800
+	IOCTL_VM_SOCKETS_GET_LOCAL_CID   = 0x7b9
+	ISIG                             = 0x1
+	IUCLC                            = 0x200
+	IXOFF                            = 0x1000
+	IXON                             = 0x400
+	MAP_32BIT                        = 0x40
+	MAP_ANON                         = 0x20
+	MAP_ANONYMOUS                    = 0x20
+	MAP_DENYWRITE                    = 0x800
+	MAP_EXECUTABLE                   = 0x1000
+	MAP_GROWSDOWN                    = 0x100
+	MAP_HUGETLB                      = 0x40000
+	MAP_LOCKED                       = 0x2000
+	MAP_NONBLOCK                     = 0x10000
+	MAP_NORESERVE                    = 0x4000
+	MAP_POPULATE                     = 0x8000
+	MAP_STACK                        = 0x20000
+	MAP_SYNC                         = 0x80000
+	MCL_CURRENT                      = 0x1
+	MCL_FUTURE                       = 0x2
+	MCL_ONFAULT                      = 0x4
+	NFDBITS                          = 0x40
+	NLDLY                            = 0x100
+	NOFLSH                           = 0x80
+	NS_GET_NSTYPE                    = 0xb703
+	NS_GET_OWNER_UID                 = 0xb704
+	NS_GET_PARENT                    = 0xb702
+	NS_GET_USERNS                    = 0xb701
+	OLCUC                            = 0x2
+	ONLCR                            = 0x4
+	O_APPEND                         = 0x400
+	O_ASYNC                          = 0x2000
+	O_CLOEXEC                        = 0x80000
+	O_CREAT                          = 0x40
+	O_DIRECT                         = 0x4000
+	O_DIRECTORY                      = 0x10000
+	O_DSYNC                          = 0x1000
+	O_EXCL                           = 0x80
+	O_FSYNC                          = 0x101000
+	O_LARGEFILE                      = 0x0
+	O_NDELAY                         = 0x800
+	O_NOATIME                        = 0x40000
+	O_NOCTTY                         = 0x100
+	O_NOFOLLOW                       = 0x20000
+	O_NONBLOCK                       = 0x800
+	O_PATH                           = 0x200000
+	O_RSYNC                          = 0x101000
+	O_SYNC                           = 0x101000
+	O_TMPFILE                        = 0x410000
+	O_TRUNC                          = 0x200
+	PARENB                           = 0x100
+	PARODD                           = 0x200
+	PENDIN                           = 0x4000
+	PERF_EVENT_IOC_DISABLE           = 0x2401
+	PERF_EVENT_IOC_ENABLE            = 0x2400
+	PERF_EVENT_IOC_ID                = 0x80082407
+	PERF_EVENT_IOC_MODIFY_ATTRIBUTES = 0x4008240b
+	PERF_EVENT_IOC_PAUSE_OUTPUT      = 0x40042409
+	PERF_EVENT_IOC_PERIOD            = 0x40082404
+	PERF_EVENT_IOC_QUERY_BPF         = 0xc008240a
+	PERF_EVENT_IOC_REFRESH           = 0x2402
+	PERF_EVENT_IOC_RESET             = 0x2403
+	PERF_EVENT_IOC_SET_BPF           = 0x40042408
+	PERF_EVENT_IOC_SET_FILTER        = 0x40082406
+	PERF_EVENT_IOC_SET_OUTPUT        = 0x2405
+	PPPIOCATTACH                     = 0x4004743d
+	PPPIOCATTCHAN                    = 0x40047438
+	PPPIOCCONNECT                    = 0x4004743a
+	PPPIOCDETACH                     = 0x4004743c
+	PPPIOCDISCONN                    = 0x7439
+	PPPIOCGASYNCMAP                  = 0x80047458
+	PPPIOCGCHAN                      = 0x80047437
+	PPPIOCGDEBUG                     = 0x80047441
+	PPPIOCGFLAGS                     = 0x8004745a
+	PPPIOCGIDLE                      = 0x8010743f
+	PPPIOCGIDLE32                    = 0x8008743f
+	PPPIOCGIDLE64                    = 0x8010743f
+	PPPIOCGL2TPSTATS                 = 0x80487436
+	PPPIOCGMRU                       = 0x80047453
+	PPPIOCGRASYNCMAP                 = 0x80047455
+	PPPIOCGUNIT                      = 0x80047456
+	PPPIOCGXASYNCMAP                 = 0x80207450
+	PPPIOCSACTIVE                    = 0x40107446
+	PPPIOCSASYNCMAP                  = 0x40047457
+	PPPIOCSCOMPRESS                  = 0x4010744d
+	PPPIOCSDEBUG                     = 0x40047440
+	PPPIOCSFLAGS                     = 0x40047459
+	PPPIOCSMAXCID                    = 0x40047451
+	PPPIOCSMRRU                      = 0x4004743b
+	PPPIOCSMRU                       = 0x40047452
+	PPPIOCSNPMODE                    = 0x4008744b
+	PPPIOCSPASS                      = 0x40107447
+	PPPIOCSRASYNCMAP                 = 0x40047454
+	PPPIOCSXASYNCMAP                 = 0x4020744f
+	PPPIOCXFERUNIT                   = 0x744e
+	PR_SET_PTRACER_ANY               = 0xffffffffffffffff
+	PTRACE_ARCH_PRCTL                = 0x1e
+	PTRACE_GETFPREGS                 = 0xe
+	PTRACE_GETFPXREGS                = 0x12
+	PTRACE_GET_THREAD_AREA           = 0x19
+	PTRACE_OLDSETOPTIONS             = 0x15
+	PTRACE_SETFPREGS                 = 0xf
+	PTRACE_SETFPXREGS                = 0x13
+	PTRACE_SET_THREAD_AREA           = 0x1a
+	PTRACE_SINGLEBLOCK               = 0x21
+	PTRACE_SYSEMU                    = 0x1f
+	PTRACE_SYSEMU_SINGLESTEP         = 0x20
+	RLIMIT_AS                        = 0x9
+	RLIMIT_MEMLOCK                   = 0x8
+	RLIMIT_NOFILE                    = 0x7
+	RLIMIT_NPROC                     = 0x6
+	RLIMIT_RSS                       = 0x5
+	RNDADDENTROPY                    = 0x40085203
+	RNDADDTOENTCNT                   = 0x40045201
+	RNDCLEARPOOL                     = 0x5206
+	RNDGETENTCNT                     = 0x80045200
+	RNDGETPOOL                       = 0x80085202
+	RNDRESEEDCRNG                    = 0x5207
+	RNDZAPENTCNT                     = 0x5204
+	RTC_AIE_OFF                      = 0x7002
+	RTC_AIE_ON                       = 0x7001
+	RTC_ALM_READ                     = 0x80247008
+	RTC_ALM_SET                      = 0x40247007
+	RTC_EPOCH_READ                   = 0x8008700d
+	RTC_EPOCH_SET                    = 0x4008700e
+	RTC_IRQP_READ                    = 0x8008700b
+	RTC_IRQP_SET                     = 0x4008700c
+	RTC_PIE_OFF                      = 0x7006
+	RTC_PIE_ON                       = 0x7005
+	RTC_PLL_GET                      = 0x80207011
+	RTC_PLL_SET                      = 0x40207012
+	RTC_RD_TIME                      = 0x80247009
+	RTC_SET_TIME                     = 0x4024700a
+	RTC_UIE_OFF                      = 0x7004
+	RTC_UIE_ON                       = 0x7003
+	RTC_VL_CLR                       = 0x7014
+	RTC_VL_READ                      = 0x80047013
+	RTC_WIE_OFF                      = 0x7010
+	RTC_WIE_ON                       = 0x700f
+	RTC_WKALM_RD                     = 0x80287010
+	RTC_WKALM_SET                    = 0x4028700f
+	SCM_TIMESTAMPING                 = 0x25
+	SCM_TIMESTAMPING_OPT_STATS       = 0x36
+	SCM_TIMESTAMPING_PKTINFO         = 0x3a
+	SCM_TIMESTAMPNS                  = 0x23
+	SCM_TXTIME                       = 0x3d
+	SCM_WIFI_STATUS                  = 0x29
+	SFD_CLOEXEC                      = 0x80000
+	SFD_NONBLOCK                     = 0x800
+	SIOCATMARK                       = 0x8905
+	SIOCGPGRP                        = 0x8904
+	SIOCGSTAMPNS_NEW                 = 0x80108907
+	SIOCGSTAMP_NEW                   = 0x80108906
+	SIOCINQ                          = 0x541b
+	SIOCOUTQ                         = 0x5411
+	SIOCSPGRP                        = 0x8902
+	SOCK_CLOEXEC                     = 0x80000
+	SOCK_DGRAM                       = 0x2
+	SOCK_NONBLOCK                    = 0x800
+	SOCK_STREAM                      = 0x1
+	SOL_SOCKET                       = 0x1
+	SO_ACCEPTCONN                    = 0x1e
+	SO_ATTACH_BPF                    = 0x32
+	SO_ATTACH_REUSEPORT_CBPF         = 0x33
+	SO_ATTACH_REUSEPORT_EBPF         = 0x34
+	SO_BINDTODEVICE                  = 0x19
+	SO_BINDTOIFINDEX                 = 0x3e
+	SO_BPF_EXTENSIONS                = 0x30
+	SO_BROADCAST                     = 0x6
+	SO_BSDCOMPAT                     = 0xe
+	SO_BUSY_POLL                     = 0x2e
+	SO_CNX_ADVICE                    = 0x35
+	SO_COOKIE                        = 0x39
+	SO_DETACH_REUSEPORT_BPF          = 0x44
+	SO_DOMAIN                        = 0x27
+	SO_DONTROUTE                     = 0x5
+	SO_ERROR                         = 0x4
+	SO_INCOMING_CPU                  = 0x31
+	SO_INCOMING_NAPI_ID              = 0x38
+	SO_KEEPALIVE                     = 0x9
+	SO_LINGER                        = 0xd
+	SO_LOCK_FILTER                   = 0x2c
+	SO_MARK                          = 0x24
+	SO_MAX_PACING_RATE               = 0x2f
+	SO_MEMINFO                       = 0x37
+	SO_NOFCS                         = 0x2b
+	SO_OOBINLINE                     = 0xa
+	SO_PASSCRED                      = 0x10
+	SO_PASSSEC                       = 0x22
+	SO_PEEK_OFF                      = 0x2a
+	SO_PEERCRED                      = 0x11
+	SO_PEERGROUPS                    = 0x3b
+	SO_PEERSEC                       = 0x1f
+	SO_PROTOCOL                      = 0x26
+	SO_RCVBUF                        = 0x8
+	SO_RCVBUFFORCE                   = 0x21
+	SO_RCVLOWAT                      = 0x12
+	SO_RCVTIMEO                      = 0x14
+	SO_RCVTIMEO_NEW                  = 0x42
+	SO_RCVTIMEO_OLD                  = 0x14
+	SO_REUSEADDR                     = 0x2
+	SO_REUSEPORT                     = 0xf
+	SO_RXQ_OVFL                      = 0x28
+	SO_SECURITY_AUTHENTICATION       = 0x16
+	SO_SECURITY_ENCRYPTION_NETWORK   = 0x18
+	SO_SECURITY_ENCRYPTION_TRANSPORT = 0x17
+	SO_SELECT_ERR_QUEUE              = 0x2d
+	SO_SNDBUF                        = 0x7
+	SO_SNDBUFFORCE                   = 0x20
+	SO_SNDLOWAT                      = 0x13
+	SO_SNDTIMEO                      = 0x15
+	SO_SNDTIMEO_NEW                  = 0x43
+	SO_SNDTIMEO_OLD                  = 0x15
+	SO_TIMESTAMPING                  = 0x25
+	SO_TIMESTAMPING_NEW              = 0x41
+	SO_TIMESTAMPING_OLD              = 0x25
+	SO_TIMESTAMPNS                   = 0x23
+	SO_TIMESTAMPNS_NEW               = 0x40
+	SO_TIMESTAMPNS_OLD               = 0x23
+	SO_TIMESTAMP_NEW                 = 0x3f
+	SO_TXTIME                        = 0x3d
+	SO_TYPE                          = 0x3
+	SO_WIFI_STATUS                   = 0x29
+	SO_ZEROCOPY                      = 0x3c
+	TAB1                             = 0x800
+	TAB2                             = 0x1000
+	TAB3                             = 0x1800
+	TABDLY                           = 0x1800
+	TCFLSH                           = 0x540b
+	TCGETA                           = 0x5405
+	TCGETS                           = 0x5401
+	TCGETS2                          = 0x802c542a
+	TCGETX                           = 0x5432
+	TCSAFLUSH                        = 0x2
+	TCSBRK                           = 0x5409
+	TCSBRKP                          = 0x5425
+	TCSETA                           = 0x5406
+	TCSETAF                          = 0x5408
+	TCSETAW                          = 0x5407
+	TCSETS                           = 0x5402
+	TCSETS2                          = 0x402c542b
+	TCSETSF                          = 0x5404
+	TCSETSF2                         = 0x402c542d
+	TCSETSW                          = 0x5403
+	TCSETSW2                         = 0x402c542c
+	TCSETX                           = 0x5433
+	TCSETXF                          = 0x5434
+	TCSETXW                          = 0x5435
+	TCXONC                           = 0x540a
+	TFD_CLOEXEC                      = 0x80000
+	TFD_NONBLOCK                     = 0x800
+	TIOCCBRK                         = 0x5428
+	TIOCCONS                         = 0x541d
+	TIOCEXCL                         = 0x540c
+	TIOCGDEV                         = 0x80045432
+	TIOCGETD                         = 0x5424
+	TIOCGEXCL                        = 0x80045440
+	TIOCGICOUNT                      = 0x545d
+	TIOCGISO7816                     = 0x80285442
+	TIOCGLCKTRMIOS                   = 0x5456
+	TIOCGPGRP                        = 0x540f
+	TIOCGPKT                         = 0x80045438
+	TIOCGPTLCK                       = 0x80045439
+	TIOCGPTN                         = 0x80045430
+	TIOCGPTPEER                      = 0x5441
+	TIOCGRS485                       = 0x542e
+	TIOCGSERIAL                      = 0x541e
+	TIOCGSID                         = 0x5429
+	TIOCGSOFTCAR                     = 0x5419
+	TIOCGWINSZ                       = 0x5413
+	TIOCINQ                          = 0x541b
+	TIOCLINUX                        = 0x541c
+	TIOCMBIC                         = 0x5417
+	TIOCMBIS                         = 0x5416
+	TIOCMGET                         = 0x5415
+	TIOCMIWAIT                       = 0x545c
+	TIOCMSET                         = 0x5418
+	TIOCM_CAR                        = 0x40
+	TIOCM_CD                         = 0x40
+	TIOCM_CTS                        = 0x20
+	TIOCM_DSR                        = 0x100
+	TIOCM_RI                         = 0x80
+	TIOCM_RNG                        = 0x80
+	TIOCM_SR                         = 0x10
+	TIOCM_ST                         = 0x8
+	TIOCNOTTY                        = 0x5422
+	TIOCNXCL                         = 0x540d
+	TIOCOUTQ                         = 0x5411
+	TIOCPKT                          = 0x5420
+	TIOCSBRK                         = 0x5427
+	TIOCSCTTY                        = 0x540e
+	TIOCSERCONFIG                    = 0x5453
+	TIOCSERGETLSR                    = 0x5459
+	TIOCSERGETMULTI                  = 0x545a
+	TIOCSERGSTRUCT                   = 0x5458
+	TIOCSERGWILD                     = 0x5454
+	TIOCSERSETMULTI                  = 0x545b
+	TIOCSERSWILD                     = 0x5455
+	TIOCSER_TEMT                     = 0x1
+	TIOCSETD                         = 0x5423
+	TIOCSIG                          = 0x40045436
+	TIOCSISO7816                     = 0xc0285443
+	TIOCSLCKTRMIOS                   = 0x5457
+	TIOCSPGRP                        = 0x5410
+	TIOCSPTLCK                       = 0x40045431
+	TIOCSRS485                       = 0x542f
+	TIOCSSERIAL                      = 0x541f
+	TIOCSSOFTCAR                     = 0x541a
+	TIOCSTI                          = 0x5412
+	TIOCSWINSZ                       = 0x5414
+	TIOCVHANGUP                      = 0x5437
+	TOSTOP                           = 0x100
+	TUNATTACHFILTER                  = 0x401054d5
+	TUNDETACHFILTER                  = 0x401054d6
+	TUNGETDEVNETNS                   = 0x54e3
+	TUNGETFEATURES                   = 0x800454cf
+	TUNGETFILTER                     = 0x801054db
+	TUNGETIFF                        = 0x800454d2
+	TUNGETSNDBUF                     = 0x800454d3
+	TUNGETVNETBE                     = 0x800454df
+	TUNGETVNETHDRSZ                  = 0x800454d7
+	TUNGETVNETLE                     = 0x800454dd
+	TUNSETCARRIER                    = 0x400454e2
+	TUNSETDEBUG                      = 0x400454c9
+	TUNSETFILTEREBPF                 = 0x800454e1
+	TUNSETGROUP                      = 0x400454ce
+	TUNSETIFF                        = 0x400454ca
+	TUNSETIFINDEX                    = 0x400454da
+	TUNSETLINK                       = 0x400454cd
+	TUNSETNOCSUM                     = 0x400454c8
+	TUNSETOFFLOAD                    = 0x400454d0
+	TUNSETOWNER                      = 0x400454cc
+	TUNSETPERSIST                    = 0x400454cb
+	TUNSETQUEUE                      = 0x400454d9
+	TUNSETSNDBUF                     = 0x400454d4
+	TUNSETSTEERINGEBPF               = 0x800454e0
+	TUNSETTXFILTER                   = 0x400454d1
+	TUNSETVNETBE                     = 0x400454de
+	TUNSETVNETHDRSZ                  = 0x400454d8
+	TUNSETVNETLE                     = 0x400454dc
+	UBI_IOCATT                       = 0x40186f40
+	UBI_IOCDET                       = 0x40046f41
+	UBI_IOCEBCH                      = 0x40044f02
+	UBI_IOCEBER                      = 0x40044f01
+	UBI_IOCEBISMAP                   = 0x80044f05
+	UBI_IOCEBMAP                     = 0x40084f03
+	UBI_IOCEBUNMAP                   = 0x40044f04
+	UBI_IOCMKVOL                     = 0x40986f00
+	UBI_IOCRMVOL                     = 0x40046f01
+	UBI_IOCRNVOL                     = 0x51106f03
+	UBI_IOCRPEB                      = 0x40046f04
+	UBI_IOCRSVOL                     = 0x400c6f02
+	UBI_IOCSETVOLPROP                = 0x40104f06
+	UBI_IOCSPEB                      = 0x40046f05
+	UBI_IOCVOLCRBLK                  = 0x40804f07
+	UBI_IOCVOLRMBLK                  = 0x4f08
+	UBI_IOCVOLUP                     = 0x40084f00
+	VDISCARD                         = 0xd
+	VEOF                             = 0x4
+	VEOL                             = 0xb
+	VEOL2                            = 0x10
+	VMIN                             = 0x6
+	VREPRINT                         = 0xc
+	VSTART                           = 0x8
+	VSTOP                            = 0x9
+	VSUSP                            = 0xa
+	VSWTC                            = 0x7
+	VT1                              = 0x4000
+	VTDLY                            = 0x4000
+	VTIME                            = 0x5
+	VWERASE                          = 0xe
+	WDIOC_GETBOOTSTATUS              = 0x80045702
+	WDIOC_GETPRETIMEOUT              = 0x80045709
+	WDIOC_GETSTATUS                  = 0x80045701
+	WDIOC_GETSUPPORT                 = 0x80285700
+	WDIOC_GETTEMP                    = 0x80045703
+	WDIOC_GETTIMELEFT                = 0x8004570a
+	WDIOC_GETTIMEOUT                 = 0x80045707
+	WDIOC_KEEPALIVE                  = 0x80045705
+	WDIOC_SETOPTIONS                 = 0x80045704
+	WORDSIZE                         = 0x40
+	XCASE                            = 0x4
+	XTABS                            = 0x1800
+)
+
+// Errors
+const (
+	EADDRINUSE      = syscall.Errno(0x62)
+	EADDRNOTAVAIL   = syscall.Errno(0x63)
+	EADV            = syscall.Errno(0x44)
+	EAFNOSUPPORT    = syscall.Errno(0x61)
+	EALREADY        = syscall.Errno(0x72)
+	EBADE           = syscall.Errno(0x34)
+	EBADFD          = syscall.Errno(0x4d)
+	EBADMSG         = syscall.Errno(0x4a)
+	EBADR           = syscall.Errno(0x35)
+	EBADRQC         = syscall.Errno(0x38)
+	EBADSLT         = syscall.Errno(0x39)
+	EBFONT          = syscall.Errno(0x3b)
+	ECANCELED       = syscall.Errno(0x7d)
+	ECHRNG          = syscall.Errno(0x2c)
+	ECOMM           = syscall.Errno(0x46)
+	ECONNABORTED    = syscall.Errno(0x67)
+	ECONNREFUSED    = syscall.Errno(0x6f)
+	ECONNRESET      = syscall.Errno(0x68)
+	EDEADLK         = syscall.Errno(0x23)
+	EDEADLOCK       = syscall.Errno(0x23)
+	EDESTADDRREQ    = syscall.Errno(0x59)
+	EDOTDOT         = syscall.Errno(0x49)
+	EDQUOT          = syscall.Errno(0x7a)
+	EHOSTDOWN       = syscall.Errno(0x70)
+	EHOSTUNREACH    = syscall.Errno(0x71)
+	EHWPOISON       = syscall.Errno(0x85)
+	EIDRM           = syscall.Errno(0x2b)
+	EILSEQ          = syscall.Errno(0x54)
+	EINPROGRESS     = syscall.Errno(0x73)
+	EISCONN         = syscall.Errno(0x6a)
+	EISNAM          = syscall.Errno(0x78)
+	EKEYEXPIRED     = syscall.Errno(0x7f)
+	EKEYREJECTED    = syscall.Errno(0x81)
+	EKEYREVOKED     = syscall.Errno(0x80)
+	EL2HLT          = syscall.Errno(0x33)
+	EL2NSYNC        = syscall.Errno(0x2d)
+	EL3HLT          = syscall.Errno(0x2e)
+	EL3RST          = syscall.Errno(0x2f)
+	ELIBACC         = syscall.Errno(0x4f)
+	ELIBBAD         = syscall.Errno(0x50)
+	ELIBEXEC        = syscall.Errno(0x53)
+	ELIBMAX         = syscall.Errno(0x52)
+	ELIBSCN         = syscall.Errno(0x51)
+	ELNRNG          = syscall.Errno(0x30)
+	ELOOP           = syscall.Errno(0x28)
+	EMEDIUMTYPE     = syscall.Errno(0x7c)
+	EMSGSIZE        = syscall.Errno(0x5a)
+	EMULTIHOP       = syscall.Errno(0x48)
+	ENAMETOOLONG    = syscall.Errno(0x24)
+	ENAVAIL         = syscall.Errno(0x77)
+	ENETDOWN        = syscall.Errno(0x64)
+	ENETRESET       = syscall.Errno(0x66)
+	ENETUNREACH     = syscall.Errno(0x65)
+	ENOANO          = syscall.Errno(0x37)
+	ENOBUFS         = syscall.Errno(0x69)
+	ENOCSI          = syscall.Errno(0x32)
+	ENODATA         = syscall.Errno(0x3d)
+	ENOKEY          = syscall.Errno(0x7e)
+	ENOLCK          = syscall.Errno(0x25)
+	ENOLINK         = syscall.Errno(0x43)
+	ENOMEDIUM       = syscall.Errno(0x7b)
+	ENOMSG          = syscall.Errno(0x2a)
+	ENONET          = syscall.Errno(0x40)
+	ENOPKG          = syscall.Errno(0x41)
+	ENOPROTOOPT     = syscall.Errno(0x5c)
+	ENOSR           = syscall.Errno(0x3f)
+	ENOSTR          = syscall.Errno(0x3c)
+	ENOSYS          = syscall.Errno(0x26)
+	ENOTCONN        = syscall.Errno(0x6b)
+	ENOTEMPTY       = syscall.Errno(0x27)
+	ENOTNAM         = syscall.Errno(0x76)
+	ENOTRECOVERABLE = syscall.Errno(0x83)
+	ENOTSOCK        = syscall.Errno(0x58)
+	ENOTSUP         = syscall.Errno(0x5f)
+	ENOTUNIQ        = syscall.Errno(0x4c)
+	EOPNOTSUPP      = syscall.Errno(0x5f)
+	EOVERFLOW       = syscall.Errno(0x4b)
+	EOWNERDEAD      = syscall.Errno(0x82)
+	EPFNOSUPPORT    = syscall.Errno(0x60)
+	EPROTO          = syscall.Errno(0x47)
+	EPROTONOSUPPORT = syscall.Errno(0x5d)
+	EPROTOTYPE      = syscall.Errno(0x5b)
+	EREMCHG         = syscall.Errno(0x4e)
+	EREMOTE         = syscall.Errno(0x42)
+	EREMOTEIO       = syscall.Errno(0x79)
+	ERESTART        = syscall.Errno(0x55)
+	ERFKILL         = syscall.Errno(0x84)
+	ESHUTDOWN       = syscall.Errno(0x6c)
+	ESOCKTNOSUPPORT = syscall.Errno(0x5e)
+	ESRMNT          = syscall.Errno(0x45)
+	ESTALE          = syscall.Errno(0x74)
+	ESTRPIPE        = syscall.Errno(0x56)
+	ETIME           = syscall.Errno(0x3e)
+	ETIMEDOUT       = syscall.Errno(0x6e)
+	ETOOMANYREFS    = syscall.Errno(0x6d)
+	EUCLEAN         = syscall.Errno(0x75)
+	EUNATCH         = syscall.Errno(0x31)
+	EUSERS          = syscall.Errno(0x57)
+	EXFULL          = syscall.Errno(0x36)
+)
+
+// Signals
+const (
+	SIGBUS    = syscall.Signal(0x7)
+	SIGCHLD   = syscall.Signal(0x11)
+	SIGCLD    = syscall.Signal(0x11)
+	SIGCONT   = syscall.Signal(0x12)
+	SIGIO     = syscall.Signal(0x1d)
+	SIGPOLL   = syscall.Signal(0x1d)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGPWR    = syscall.Signal(0x1e)
+	SIGSTKFLT = syscall.Signal(0x10)
+	SIGSTOP   = syscall.Signal(0x13)
+	SIGSYS    = syscall.Signal(0x1f)
+	SIGTSTP   = syscall.Signal(0x14)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x17)
+	SIGUSR1   = syscall.Signal(0xa)
+	SIGUSR2   = syscall.Signal(0xc)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "no such device or address"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EAGAIN", "resource temporarily unavailable"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device or resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "invalid cross-device link"},
+	{19, "ENODEV", "no such device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "numerical result out of range"},
+	{35, "EDEADLK", "resource deadlock avoided"},
+	{36, "ENAMETOOLONG", "file name too long"},
+	{37, "ENOLCK", "no locks available"},
+	{38, "ENOSYS", "function not implemented"},
+	{39, "ENOTEMPTY", "directory not empty"},
+	{40, "ELOOP", "too many levels of symbolic links"},
+	{42, "ENOMSG", "no message of desired type"},
+	{43, "EIDRM", "identifier removed"},
+	{44, "ECHRNG", "channel number out of range"},
+	{45, "EL2NSYNC", "level 2 not synchronized"},
+	{46, "EL3HLT", "level 3 halted"},
+	{47, "EL3RST", "level 3 reset"},
+	{48, "ELNRNG", "link number out of range"},
+	{49, "EUNATCH", "protocol driver not attached"},
+	{50, "ENOCSI", "no CSI structure available"},
+	{51, "EL2HLT", "level 2 halted"},
+	{52, "EBADE", "invalid exchange"},
+	{53, "EBADR", "invalid request descriptor"},
+	{54, "EXFULL", "exchange full"},
+	{55, "ENOANO", "no anode"},
+	{56, "EBADRQC", "invalid request code"},
+	{57, "EBADSLT", "invalid slot"},
+	{59, "EBFONT", "bad font file format"},
+	{60, "ENOSTR", "device not a stream"},
+	{61, "ENODATA", "no data available"},
+	{62, "ETIME", "timer expired"},
+	{63, "ENOSR", "out of streams resources"},
+	{64, "ENONET", "machine is not on the network"},
+	{65, "ENOPKG", "package not installed"},
+	{66, "EREMOTE", "object is remote"},
+	{67, "ENOLINK", "link has been severed"},
+	{68, "EADV", "advertise error"},
+	{69, "ESRMNT", "srmount error"},
+	{70, "ECOMM", "communication error on send"},
+	{71, "EPROTO", "protocol error"},
+	{72, "EMULTIHOP", "multihop attempted"},
+	{73, "EDOTDOT", "RFS specific error"},
+	{74, "EBADMSG", "bad message"},
+	{75, "EOVERFLOW", "value too large for defined data type"},
+	{76, "ENOTUNIQ", "name not unique on network"},
+	{77, "EBADFD", "file descriptor in bad state"},
+	{78, "EREMCHG", "remote address changed"},
+	{79, "ELIBACC", "can not access a needed shared library"},
+	{80, "ELIBBAD", "accessing a corrupted shared library"},
+	{81, "ELIBSCN", ".lib section in a.out corrupted"},
+	{82, "ELIBMAX", "attempting to link in too many shared libraries"},
+	{83, "ELIBEXEC", "cannot exec a shared library directly"},
+	{84, "EILSEQ", "invalid or incomplete multibyte or wide character"},
+	{85, "ERESTART", "interrupted system call should be restarted"},
+	{86, "ESTRPIPE", "streams pipe error"},
+	{87, "EUSERS", "too many users"},
+	{88, "ENOTSOCK", "socket operation on non-socket"},
+	{89, "EDESTADDRREQ", "destination address required"},
+	{90, "EMSGSIZE", "message too long"},
+	{91, "EPROTOTYPE", "protocol wrong type for socket"},
+	{92, "ENOPROTOOPT", "protocol not available"},
+	{93, "EPROTONOSUPPORT", "protocol not supported"},
+	{94, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{95, "ENOTSUP", "operation not supported"},
+	{96, "EPFNOSUPPORT", "protocol family not supported"},
+	{97, "EAFNOSUPPORT", "address family not supported by protocol"},
+	{98, "EADDRINUSE", "address already in use"},
+	{99, "EADDRNOTAVAIL", "cannot assign requested address"},
+	{100, "ENETDOWN", "network is down"},
+	{101, "ENETUNREACH", "network is unreachable"},
+	{102, "ENETRESET", "network dropped connection on reset"},
+	{103, "ECONNABORTED", "software caused connection abort"},
+	{104, "ECONNRESET", "connection reset by peer"},
+	{105, "ENOBUFS", "no buffer space available"},
+	{106, "EISCONN", "transport endpoint is already connected"},
+	{107, "ENOTCONN", "transport endpoint is not connected"},
+	{108, "ESHUTDOWN", "cannot send after transport endpoint shutdown"},
+	{109, "ETOOMANYREFS", "too many references: cannot splice"},
+	{110, "ETIMEDOUT", "connection timed out"},
+	{111, "ECONNREFUSED", "connection refused"},
+	{112, "EHOSTDOWN", "host is down"},
+	{113, "EHOSTUNREACH", "no route to host"},
+	{114, "EALREADY", "operation already in progress"},
+	{115, "EINPROGRESS", "operation now in progress"},
+	{116, "ESTALE", "stale file handle"},
+	{117, "EUCLEAN", "structure needs cleaning"},
+	{118, "ENOTNAM", "not a XENIX named type file"},
+	{119, "ENAVAIL", "no XENIX semaphores available"},
+	{120, "EISNAM", "is a named type file"},
+	{121, "EREMOTEIO", "remote I/O error"},
+	{122, "EDQUOT", "disk quota exceeded"},
+	{123, "ENOMEDIUM", "no medium found"},
+	{124, "EMEDIUMTYPE", "wrong medium type"},
+	{125, "ECANCELED", "operation canceled"},
+	{126, "ENOKEY", "required key not available"},
+	{127, "EKEYEXPIRED", "key has expired"},
+	{128, "EKEYREVOKED", "key has been revoked"},
+	{129, "EKEYREJECTED", "key was rejected by service"},
+	{130, "EOWNERDEAD", "owner died"},
+	{131, "ENOTRECOVERABLE", "state not recoverable"},
+	{132, "ERFKILL", "operation not possible due to RF-kill"},
+	{133, "EHWPOISON", "memory page has hardware error"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/breakpoint trap"},
+	{6, "SIGABRT", "aborted"},
+	{7, "SIGBUS", "bus error"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGUSR1", "user defined signal 1"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGUSR2", "user defined signal 2"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGSTKFLT", "stack fault"},
+	{17, "SIGCHLD", "child exited"},
+	{18, "SIGCONT", "continued"},
+	{19, "SIGSTOP", "stopped (signal)"},
+	{20, "SIGTSTP", "stopped"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGURG", "urgent I/O condition"},
+	{24, "SIGXCPU", "CPU time limit exceeded"},
+	{25, "SIGXFSZ", "file size limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window changed"},
+	{29, "SIGIO", "I/O possible"},
+	{30, "SIGPWR", "power failure"},
+	{31, "SIGSYS", "bad system call"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_arm.go
new file mode 100644
index 000000000..fe7094f27
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_arm.go
@@ -0,0 +1,796 @@
+// mkerrors.sh -Wall -Werror -static -I/tmp/include
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm,linux
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	B1000000                         = 0x1008
+	B115200                          = 0x1002
+	B1152000                         = 0x1009
+	B1500000                         = 0x100a
+	B2000000                         = 0x100b
+	B230400                          = 0x1003
+	B2500000                         = 0x100c
+	B3000000                         = 0x100d
+	B3500000                         = 0x100e
+	B4000000                         = 0x100f
+	B460800                          = 0x1004
+	B500000                          = 0x1005
+	B57600                           = 0x1001
+	B576000                          = 0x1006
+	B921600                          = 0x1007
+	BLKBSZGET                        = 0x80041270
+	BLKBSZSET                        = 0x40041271
+	BLKFLSBUF                        = 0x1261
+	BLKFRAGET                        = 0x1265
+	BLKFRASET                        = 0x1264
+	BLKGETSIZE                       = 0x1260
+	BLKGETSIZE64                     = 0x80041272
+	BLKPBSZGET                       = 0x127b
+	BLKRAGET                         = 0x1263
+	BLKRASET                         = 0x1262
+	BLKROGET                         = 0x125e
+	BLKROSET                         = 0x125d
+	BLKRRPART                        = 0x125f
+	BLKSECTGET                       = 0x1267
+	BLKSECTSET                       = 0x1266
+	BLKSSZGET                        = 0x1268
+	BOTHER                           = 0x1000
+	BS1                              = 0x2000
+	BSDLY                            = 0x2000
+	CBAUD                            = 0x100f
+	CBAUDEX                          = 0x1000
+	CIBAUD                           = 0x100f0000
+	CLOCAL                           = 0x800
+	CR1                              = 0x200
+	CR2                              = 0x400
+	CR3                              = 0x600
+	CRDLY                            = 0x600
+	CREAD                            = 0x80
+	CS6                              = 0x10
+	CS7                              = 0x20
+	CS8                              = 0x30
+	CSIZE                            = 0x30
+	CSTOPB                           = 0x40
+	ECHOCTL                          = 0x200
+	ECHOE                            = 0x10
+	ECHOK                            = 0x20
+	ECHOKE                           = 0x800
+	ECHONL                           = 0x40
+	ECHOPRT                          = 0x400
+	EFD_CLOEXEC                      = 0x80000
+	EFD_NONBLOCK                     = 0x800
+	EPOLL_CLOEXEC                    = 0x80000
+	EXTPROC                          = 0x10000
+	FF1                              = 0x8000
+	FFDLY                            = 0x8000
+	FICLONE                          = 0x40049409
+	FICLONERANGE                     = 0x4020940d
+	FLUSHO                           = 0x1000
+	FS_IOC_ENABLE_VERITY             = 0x40806685
+	FS_IOC_GETFLAGS                  = 0x80046601
+	FS_IOC_GET_ENCRYPTION_NONCE      = 0x8010661b
+	FS_IOC_GET_ENCRYPTION_POLICY     = 0x400c6615
+	FS_IOC_GET_ENCRYPTION_PWSALT     = 0x40106614
+	FS_IOC_SETFLAGS                  = 0x40046602
+	FS_IOC_SET_ENCRYPTION_POLICY     = 0x800c6613
+	F_GETLK                          = 0xc
+	F_GETLK64                        = 0xc
+	F_GETOWN                         = 0x9
+	F_RDLCK                          = 0x0
+	F_SETLK                          = 0xd
+	F_SETLK64                        = 0xd
+	F_SETLKW                         = 0xe
+	F_SETLKW64                       = 0xe
+	F_SETOWN                         = 0x8
+	F_UNLCK                          = 0x2
+	F_WRLCK                          = 0x1
+	HUPCL                            = 0x400
+	ICANON                           = 0x2
+	IEXTEN                           = 0x8000
+	IN_CLOEXEC                       = 0x80000
+	IN_NONBLOCK                      = 0x800
+	IOCTL_VM_SOCKETS_GET_LOCAL_CID   = 0x7b9
+	ISIG                             = 0x1
+	IUCLC                            = 0x200
+	IXOFF                            = 0x1000
+	IXON                             = 0x400
+	MAP_ANON                         = 0x20
+	MAP_ANONYMOUS                    = 0x20
+	MAP_DENYWRITE                    = 0x800
+	MAP_EXECUTABLE                   = 0x1000
+	MAP_GROWSDOWN                    = 0x100
+	MAP_HUGETLB                      = 0x40000
+	MAP_LOCKED                       = 0x2000
+	MAP_NONBLOCK                     = 0x10000
+	MAP_NORESERVE                    = 0x4000
+	MAP_POPULATE                     = 0x8000
+	MAP_STACK                        = 0x20000
+	MAP_SYNC                         = 0x80000
+	MCL_CURRENT                      = 0x1
+	MCL_FUTURE                       = 0x2
+	MCL_ONFAULT                      = 0x4
+	NFDBITS                          = 0x20
+	NLDLY                            = 0x100
+	NOFLSH                           = 0x80
+	NS_GET_NSTYPE                    = 0xb703
+	NS_GET_OWNER_UID                 = 0xb704
+	NS_GET_PARENT                    = 0xb702
+	NS_GET_USERNS                    = 0xb701
+	OLCUC                            = 0x2
+	ONLCR                            = 0x4
+	O_APPEND                         = 0x400
+	O_ASYNC                          = 0x2000
+	O_CLOEXEC                        = 0x80000
+	O_CREAT                          = 0x40
+	O_DIRECT                         = 0x10000
+	O_DIRECTORY                      = 0x4000
+	O_DSYNC                          = 0x1000
+	O_EXCL                           = 0x80
+	O_FSYNC                          = 0x101000
+	O_LARGEFILE                      = 0x20000
+	O_NDELAY                         = 0x800
+	O_NOATIME                        = 0x40000
+	O_NOCTTY                         = 0x100
+	O_NOFOLLOW                       = 0x8000
+	O_NONBLOCK                       = 0x800
+	O_PATH                           = 0x200000
+	O_RSYNC                          = 0x101000
+	O_SYNC                           = 0x101000
+	O_TMPFILE                        = 0x404000
+	O_TRUNC                          = 0x200
+	PARENB                           = 0x100
+	PARODD                           = 0x200
+	PENDIN                           = 0x4000
+	PERF_EVENT_IOC_DISABLE           = 0x2401
+	PERF_EVENT_IOC_ENABLE            = 0x2400
+	PERF_EVENT_IOC_ID                = 0x80042407
+	PERF_EVENT_IOC_MODIFY_ATTRIBUTES = 0x4004240b
+	PERF_EVENT_IOC_PAUSE_OUTPUT      = 0x40042409
+	PERF_EVENT_IOC_PERIOD            = 0x40082404
+	PERF_EVENT_IOC_QUERY_BPF         = 0xc004240a
+	PERF_EVENT_IOC_REFRESH           = 0x2402
+	PERF_EVENT_IOC_RESET             = 0x2403
+	PERF_EVENT_IOC_SET_BPF           = 0x40042408
+	PERF_EVENT_IOC_SET_FILTER        = 0x40042406
+	PERF_EVENT_IOC_SET_OUTPUT        = 0x2405
+	PPPIOCATTACH                     = 0x4004743d
+	PPPIOCATTCHAN                    = 0x40047438
+	PPPIOCCONNECT                    = 0x4004743a
+	PPPIOCDETACH                     = 0x4004743c
+	PPPIOCDISCONN                    = 0x7439
+	PPPIOCGASYNCMAP                  = 0x80047458
+	PPPIOCGCHAN                      = 0x80047437
+	PPPIOCGDEBUG                     = 0x80047441
+	PPPIOCGFLAGS                     = 0x8004745a
+	PPPIOCGIDLE                      = 0x8008743f
+	PPPIOCGIDLE32                    = 0x8008743f
+	PPPIOCGIDLE64                    = 0x8010743f
+	PPPIOCGL2TPSTATS                 = 0x80487436
+	PPPIOCGMRU                       = 0x80047453
+	PPPIOCGRASYNCMAP                 = 0x80047455
+	PPPIOCGUNIT                      = 0x80047456
+	PPPIOCGXASYNCMAP                 = 0x80207450
+	PPPIOCSACTIVE                    = 0x40087446
+	PPPIOCSASYNCMAP                  = 0x40047457
+	PPPIOCSCOMPRESS                  = 0x400c744d
+	PPPIOCSDEBUG                     = 0x40047440
+	PPPIOCSFLAGS                     = 0x40047459
+	PPPIOCSMAXCID                    = 0x40047451
+	PPPIOCSMRRU                      = 0x4004743b
+	PPPIOCSMRU                       = 0x40047452
+	PPPIOCSNPMODE                    = 0x4008744b
+	PPPIOCSPASS                      = 0x40087447
+	PPPIOCSRASYNCMAP                 = 0x40047454
+	PPPIOCSXASYNCMAP                 = 0x4020744f
+	PPPIOCXFERUNIT                   = 0x744e
+	PR_SET_PTRACER_ANY               = 0xffffffff
+	PTRACE_GETCRUNCHREGS             = 0x19
+	PTRACE_GETFDPIC                  = 0x1f
+	PTRACE_GETFDPIC_EXEC             = 0x0
+	PTRACE_GETFDPIC_INTERP           = 0x1
+	PTRACE_GETFPREGS                 = 0xe
+	PTRACE_GETHBPREGS                = 0x1d
+	PTRACE_GETVFPREGS                = 0x1b
+	PTRACE_GETWMMXREGS               = 0x12
+	PTRACE_GET_THREAD_AREA           = 0x16
+	PTRACE_OLDSETOPTIONS             = 0x15
+	PTRACE_SETCRUNCHREGS             = 0x1a
+	PTRACE_SETFPREGS                 = 0xf
+	PTRACE_SETHBPREGS                = 0x1e
+	PTRACE_SETVFPREGS                = 0x1c
+	PTRACE_SETWMMXREGS               = 0x13
+	PTRACE_SET_SYSCALL               = 0x17
+	PT_DATA_ADDR                     = 0x10004
+	PT_TEXT_ADDR                     = 0x10000
+	PT_TEXT_END_ADDR                 = 0x10008
+	RLIMIT_AS                        = 0x9
+	RLIMIT_MEMLOCK                   = 0x8
+	RLIMIT_NOFILE                    = 0x7
+	RLIMIT_NPROC                     = 0x6
+	RLIMIT_RSS                       = 0x5
+	RNDADDENTROPY                    = 0x40085203
+	RNDADDTOENTCNT                   = 0x40045201
+	RNDCLEARPOOL                     = 0x5206
+	RNDGETENTCNT                     = 0x80045200
+	RNDGETPOOL                       = 0x80085202
+	RNDRESEEDCRNG                    = 0x5207
+	RNDZAPENTCNT                     = 0x5204
+	RTC_AIE_OFF                      = 0x7002
+	RTC_AIE_ON                       = 0x7001
+	RTC_ALM_READ                     = 0x80247008
+	RTC_ALM_SET                      = 0x40247007
+	RTC_EPOCH_READ                   = 0x8004700d
+	RTC_EPOCH_SET                    = 0x4004700e
+	RTC_IRQP_READ                    = 0x8004700b
+	RTC_IRQP_SET                     = 0x4004700c
+	RTC_PIE_OFF                      = 0x7006
+	RTC_PIE_ON                       = 0x7005
+	RTC_PLL_GET                      = 0x801c7011
+	RTC_PLL_SET                      = 0x401c7012
+	RTC_RD_TIME                      = 0x80247009
+	RTC_SET_TIME                     = 0x4024700a
+	RTC_UIE_OFF                      = 0x7004
+	RTC_UIE_ON                       = 0x7003
+	RTC_VL_CLR                       = 0x7014
+	RTC_VL_READ                      = 0x80047013
+	RTC_WIE_OFF                      = 0x7010
+	RTC_WIE_ON                       = 0x700f
+	RTC_WKALM_RD                     = 0x80287010
+	RTC_WKALM_SET                    = 0x4028700f
+	SCM_TIMESTAMPING                 = 0x25
+	SCM_TIMESTAMPING_OPT_STATS       = 0x36
+	SCM_TIMESTAMPING_PKTINFO         = 0x3a
+	SCM_TIMESTAMPNS                  = 0x23
+	SCM_TXTIME                       = 0x3d
+	SCM_WIFI_STATUS                  = 0x29
+	SFD_CLOEXEC                      = 0x80000
+	SFD_NONBLOCK                     = 0x800
+	SIOCATMARK                       = 0x8905
+	SIOCGPGRP                        = 0x8904
+	SIOCGSTAMPNS_NEW                 = 0x80108907
+	SIOCGSTAMP_NEW                   = 0x80108906
+	SIOCINQ                          = 0x541b
+	SIOCOUTQ                         = 0x5411
+	SIOCSPGRP                        = 0x8902
+	SOCK_CLOEXEC                     = 0x80000
+	SOCK_DGRAM                       = 0x2
+	SOCK_NONBLOCK                    = 0x800
+	SOCK_STREAM                      = 0x1
+	SOL_SOCKET                       = 0x1
+	SO_ACCEPTCONN                    = 0x1e
+	SO_ATTACH_BPF                    = 0x32
+	SO_ATTACH_REUSEPORT_CBPF         = 0x33
+	SO_ATTACH_REUSEPORT_EBPF         = 0x34
+	SO_BINDTODEVICE                  = 0x19
+	SO_BINDTOIFINDEX                 = 0x3e
+	SO_BPF_EXTENSIONS                = 0x30
+	SO_BROADCAST                     = 0x6
+	SO_BSDCOMPAT                     = 0xe
+	SO_BUSY_POLL                     = 0x2e
+	SO_CNX_ADVICE                    = 0x35
+	SO_COOKIE                        = 0x39
+	SO_DETACH_REUSEPORT_BPF          = 0x44
+	SO_DOMAIN                        = 0x27
+	SO_DONTROUTE                     = 0x5
+	SO_ERROR                         = 0x4
+	SO_INCOMING_CPU                  = 0x31
+	SO_INCOMING_NAPI_ID              = 0x38
+	SO_KEEPALIVE                     = 0x9
+	SO_LINGER                        = 0xd
+	SO_LOCK_FILTER                   = 0x2c
+	SO_MARK                          = 0x24
+	SO_MAX_PACING_RATE               = 0x2f
+	SO_MEMINFO                       = 0x37
+	SO_NOFCS                         = 0x2b
+	SO_OOBINLINE                     = 0xa
+	SO_PASSCRED                      = 0x10
+	SO_PASSSEC                       = 0x22
+	SO_PEEK_OFF                      = 0x2a
+	SO_PEERCRED                      = 0x11
+	SO_PEERGROUPS                    = 0x3b
+	SO_PEERSEC                       = 0x1f
+	SO_PROTOCOL                      = 0x26
+	SO_RCVBUF                        = 0x8
+	SO_RCVBUFFORCE                   = 0x21
+	SO_RCVLOWAT                      = 0x12
+	SO_RCVTIMEO                      = 0x14
+	SO_RCVTIMEO_NEW                  = 0x42
+	SO_RCVTIMEO_OLD                  = 0x14
+	SO_REUSEADDR                     = 0x2
+	SO_REUSEPORT                     = 0xf
+	SO_RXQ_OVFL                      = 0x28
+	SO_SECURITY_AUTHENTICATION       = 0x16
+	SO_SECURITY_ENCRYPTION_NETWORK   = 0x18
+	SO_SECURITY_ENCRYPTION_TRANSPORT = 0x17
+	SO_SELECT_ERR_QUEUE              = 0x2d
+	SO_SNDBUF                        = 0x7
+	SO_SNDBUFFORCE                   = 0x20
+	SO_SNDLOWAT                      = 0x13
+	SO_SNDTIMEO                      = 0x15
+	SO_SNDTIMEO_NEW                  = 0x43
+	SO_SNDTIMEO_OLD                  = 0x15
+	SO_TIMESTAMPING                  = 0x25
+	SO_TIMESTAMPING_NEW              = 0x41
+	SO_TIMESTAMPING_OLD              = 0x25
+	SO_TIMESTAMPNS                   = 0x23
+	SO_TIMESTAMPNS_NEW               = 0x40
+	SO_TIMESTAMPNS_OLD               = 0x23
+	SO_TIMESTAMP_NEW                 = 0x3f
+	SO_TXTIME                        = 0x3d
+	SO_TYPE                          = 0x3
+	SO_WIFI_STATUS                   = 0x29
+	SO_ZEROCOPY                      = 0x3c
+	TAB1                             = 0x800
+	TAB2                             = 0x1000
+	TAB3                             = 0x1800
+	TABDLY                           = 0x1800
+	TCFLSH                           = 0x540b
+	TCGETA                           = 0x5405
+	TCGETS                           = 0x5401
+	TCGETS2                          = 0x802c542a
+	TCGETX                           = 0x5432
+	TCSAFLUSH                        = 0x2
+	TCSBRK                           = 0x5409
+	TCSBRKP                          = 0x5425
+	TCSETA                           = 0x5406
+	TCSETAF                          = 0x5408
+	TCSETAW                          = 0x5407
+	TCSETS                           = 0x5402
+	TCSETS2                          = 0x402c542b
+	TCSETSF                          = 0x5404
+	TCSETSF2                         = 0x402c542d
+	TCSETSW                          = 0x5403
+	TCSETSW2                         = 0x402c542c
+	TCSETX                           = 0x5433
+	TCSETXF                          = 0x5434
+	TCSETXW                          = 0x5435
+	TCXONC                           = 0x540a
+	TFD_CLOEXEC                      = 0x80000
+	TFD_NONBLOCK                     = 0x800
+	TIOCCBRK                         = 0x5428
+	TIOCCONS                         = 0x541d
+	TIOCEXCL                         = 0x540c
+	TIOCGDEV                         = 0x80045432
+	TIOCGETD                         = 0x5424
+	TIOCGEXCL                        = 0x80045440
+	TIOCGICOUNT                      = 0x545d
+	TIOCGISO7816                     = 0x80285442
+	TIOCGLCKTRMIOS                   = 0x5456
+	TIOCGPGRP                        = 0x540f
+	TIOCGPKT                         = 0x80045438
+	TIOCGPTLCK                       = 0x80045439
+	TIOCGPTN                         = 0x80045430
+	TIOCGPTPEER                      = 0x5441
+	TIOCGRS485                       = 0x542e
+	TIOCGSERIAL                      = 0x541e
+	TIOCGSID                         = 0x5429
+	TIOCGSOFTCAR                     = 0x5419
+	TIOCGWINSZ                       = 0x5413
+	TIOCINQ                          = 0x541b
+	TIOCLINUX                        = 0x541c
+	TIOCMBIC                         = 0x5417
+	TIOCMBIS                         = 0x5416
+	TIOCMGET                         = 0x5415
+	TIOCMIWAIT                       = 0x545c
+	TIOCMSET                         = 0x5418
+	TIOCM_CAR                        = 0x40
+	TIOCM_CD                         = 0x40
+	TIOCM_CTS                        = 0x20
+	TIOCM_DSR                        = 0x100
+	TIOCM_RI                         = 0x80
+	TIOCM_RNG                        = 0x80
+	TIOCM_SR                         = 0x10
+	TIOCM_ST                         = 0x8
+	TIOCNOTTY                        = 0x5422
+	TIOCNXCL                         = 0x540d
+	TIOCOUTQ                         = 0x5411
+	TIOCPKT                          = 0x5420
+	TIOCSBRK                         = 0x5427
+	TIOCSCTTY                        = 0x540e
+	TIOCSERCONFIG                    = 0x5453
+	TIOCSERGETLSR                    = 0x5459
+	TIOCSERGETMULTI                  = 0x545a
+	TIOCSERGSTRUCT                   = 0x5458
+	TIOCSERGWILD                     = 0x5454
+	TIOCSERSETMULTI                  = 0x545b
+	TIOCSERSWILD                     = 0x5455
+	TIOCSER_TEMT                     = 0x1
+	TIOCSETD                         = 0x5423
+	TIOCSIG                          = 0x40045436
+	TIOCSISO7816                     = 0xc0285443
+	TIOCSLCKTRMIOS                   = 0x5457
+	TIOCSPGRP                        = 0x5410
+	TIOCSPTLCK                       = 0x40045431
+	TIOCSRS485                       = 0x542f
+	TIOCSSERIAL                      = 0x541f
+	TIOCSSOFTCAR                     = 0x541a
+	TIOCSTI                          = 0x5412
+	TIOCSWINSZ                       = 0x5414
+	TIOCVHANGUP                      = 0x5437
+	TOSTOP                           = 0x100
+	TUNATTACHFILTER                  = 0x400854d5
+	TUNDETACHFILTER                  = 0x400854d6
+	TUNGETDEVNETNS                   = 0x54e3
+	TUNGETFEATURES                   = 0x800454cf
+	TUNGETFILTER                     = 0x800854db
+	TUNGETIFF                        = 0x800454d2
+	TUNGETSNDBUF                     = 0x800454d3
+	TUNGETVNETBE                     = 0x800454df
+	TUNGETVNETHDRSZ                  = 0x800454d7
+	TUNGETVNETLE                     = 0x800454dd
+	TUNSETCARRIER                    = 0x400454e2
+	TUNSETDEBUG                      = 0x400454c9
+	TUNSETFILTEREBPF                 = 0x800454e1
+	TUNSETGROUP                      = 0x400454ce
+	TUNSETIFF                        = 0x400454ca
+	TUNSETIFINDEX                    = 0x400454da
+	TUNSETLINK                       = 0x400454cd
+	TUNSETNOCSUM                     = 0x400454c8
+	TUNSETOFFLOAD                    = 0x400454d0
+	TUNSETOWNER                      = 0x400454cc
+	TUNSETPERSIST                    = 0x400454cb
+	TUNSETQUEUE                      = 0x400454d9
+	TUNSETSNDBUF                     = 0x400454d4
+	TUNSETSTEERINGEBPF               = 0x800454e0
+	TUNSETTXFILTER                   = 0x400454d1
+	TUNSETVNETBE                     = 0x400454de
+	TUNSETVNETHDRSZ                  = 0x400454d8
+	TUNSETVNETLE                     = 0x400454dc
+	UBI_IOCATT                       = 0x40186f40
+	UBI_IOCDET                       = 0x40046f41
+	UBI_IOCEBCH                      = 0x40044f02
+	UBI_IOCEBER                      = 0x40044f01
+	UBI_IOCEBISMAP                   = 0x80044f05
+	UBI_IOCEBMAP                     = 0x40084f03
+	UBI_IOCEBUNMAP                   = 0x40044f04
+	UBI_IOCMKVOL                     = 0x40986f00
+	UBI_IOCRMVOL                     = 0x40046f01
+	UBI_IOCRNVOL                     = 0x51106f03
+	UBI_IOCRPEB                      = 0x40046f04
+	UBI_IOCRSVOL                     = 0x400c6f02
+	UBI_IOCSETVOLPROP                = 0x40104f06
+	UBI_IOCSPEB                      = 0x40046f05
+	UBI_IOCVOLCRBLK                  = 0x40804f07
+	UBI_IOCVOLRMBLK                  = 0x4f08
+	UBI_IOCVOLUP                     = 0x40084f00
+	VDISCARD                         = 0xd
+	VEOF                             = 0x4
+	VEOL                             = 0xb
+	VEOL2                            = 0x10
+	VMIN                             = 0x6
+	VREPRINT                         = 0xc
+	VSTART                           = 0x8
+	VSTOP                            = 0x9
+	VSUSP                            = 0xa
+	VSWTC                            = 0x7
+	VT1                              = 0x4000
+	VTDLY                            = 0x4000
+	VTIME                            = 0x5
+	VWERASE                          = 0xe
+	WDIOC_GETBOOTSTATUS              = 0x80045702
+	WDIOC_GETPRETIMEOUT              = 0x80045709
+	WDIOC_GETSTATUS                  = 0x80045701
+	WDIOC_GETSUPPORT                 = 0x80285700
+	WDIOC_GETTEMP                    = 0x80045703
+	WDIOC_GETTIMELEFT                = 0x8004570a
+	WDIOC_GETTIMEOUT                 = 0x80045707
+	WDIOC_KEEPALIVE                  = 0x80045705
+	WDIOC_SETOPTIONS                 = 0x80045704
+	WORDSIZE                         = 0x20
+	XCASE                            = 0x4
+	XTABS                            = 0x1800
+)
+
+// Errors
+const (
+	EADDRINUSE      = syscall.Errno(0x62)
+	EADDRNOTAVAIL   = syscall.Errno(0x63)
+	EADV            = syscall.Errno(0x44)
+	EAFNOSUPPORT    = syscall.Errno(0x61)
+	EALREADY        = syscall.Errno(0x72)
+	EBADE           = syscall.Errno(0x34)
+	EBADFD          = syscall.Errno(0x4d)
+	EBADMSG         = syscall.Errno(0x4a)
+	EBADR           = syscall.Errno(0x35)
+	EBADRQC         = syscall.Errno(0x38)
+	EBADSLT         = syscall.Errno(0x39)
+	EBFONT          = syscall.Errno(0x3b)
+	ECANCELED       = syscall.Errno(0x7d)
+	ECHRNG          = syscall.Errno(0x2c)
+	ECOMM           = syscall.Errno(0x46)
+	ECONNABORTED    = syscall.Errno(0x67)
+	ECONNREFUSED    = syscall.Errno(0x6f)
+	ECONNRESET      = syscall.Errno(0x68)
+	EDEADLK         = syscall.Errno(0x23)
+	EDEADLOCK       = syscall.Errno(0x23)
+	EDESTADDRREQ    = syscall.Errno(0x59)
+	EDOTDOT         = syscall.Errno(0x49)
+	EDQUOT          = syscall.Errno(0x7a)
+	EHOSTDOWN       = syscall.Errno(0x70)
+	EHOSTUNREACH    = syscall.Errno(0x71)
+	EHWPOISON       = syscall.Errno(0x85)
+	EIDRM           = syscall.Errno(0x2b)
+	EILSEQ          = syscall.Errno(0x54)
+	EINPROGRESS     = syscall.Errno(0x73)
+	EISCONN         = syscall.Errno(0x6a)
+	EISNAM          = syscall.Errno(0x78)
+	EKEYEXPIRED     = syscall.Errno(0x7f)
+	EKEYREJECTED    = syscall.Errno(0x81)
+	EKEYREVOKED     = syscall.Errno(0x80)
+	EL2HLT          = syscall.Errno(0x33)
+	EL2NSYNC        = syscall.Errno(0x2d)
+	EL3HLT          = syscall.Errno(0x2e)
+	EL3RST          = syscall.Errno(0x2f)
+	ELIBACC         = syscall.Errno(0x4f)
+	ELIBBAD         = syscall.Errno(0x50)
+	ELIBEXEC        = syscall.Errno(0x53)
+	ELIBMAX         = syscall.Errno(0x52)
+	ELIBSCN         = syscall.Errno(0x51)
+	ELNRNG          = syscall.Errno(0x30)
+	ELOOP           = syscall.Errno(0x28)
+	EMEDIUMTYPE     = syscall.Errno(0x7c)
+	EMSGSIZE        = syscall.Errno(0x5a)
+	EMULTIHOP       = syscall.Errno(0x48)
+	ENAMETOOLONG    = syscall.Errno(0x24)
+	ENAVAIL         = syscall.Errno(0x77)
+	ENETDOWN        = syscall.Errno(0x64)
+	ENETRESET       = syscall.Errno(0x66)
+	ENETUNREACH     = syscall.Errno(0x65)
+	ENOANO          = syscall.Errno(0x37)
+	ENOBUFS         = syscall.Errno(0x69)
+	ENOCSI          = syscall.Errno(0x32)
+	ENODATA         = syscall.Errno(0x3d)
+	ENOKEY          = syscall.Errno(0x7e)
+	ENOLCK          = syscall.Errno(0x25)
+	ENOLINK         = syscall.Errno(0x43)
+	ENOMEDIUM       = syscall.Errno(0x7b)
+	ENOMSG          = syscall.Errno(0x2a)
+	ENONET          = syscall.Errno(0x40)
+	ENOPKG          = syscall.Errno(0x41)
+	ENOPROTOOPT     = syscall.Errno(0x5c)
+	ENOSR           = syscall.Errno(0x3f)
+	ENOSTR          = syscall.Errno(0x3c)
+	ENOSYS          = syscall.Errno(0x26)
+	ENOTCONN        = syscall.Errno(0x6b)
+	ENOTEMPTY       = syscall.Errno(0x27)
+	ENOTNAM         = syscall.Errno(0x76)
+	ENOTRECOVERABLE = syscall.Errno(0x83)
+	ENOTSOCK        = syscall.Errno(0x58)
+	ENOTSUP         = syscall.Errno(0x5f)
+	ENOTUNIQ        = syscall.Errno(0x4c)
+	EOPNOTSUPP      = syscall.Errno(0x5f)
+	EOVERFLOW       = syscall.Errno(0x4b)
+	EOWNERDEAD      = syscall.Errno(0x82)
+	EPFNOSUPPORT    = syscall.Errno(0x60)
+	EPROTO          = syscall.Errno(0x47)
+	EPROTONOSUPPORT = syscall.Errno(0x5d)
+	EPROTOTYPE      = syscall.Errno(0x5b)
+	EREMCHG         = syscall.Errno(0x4e)
+	EREMOTE         = syscall.Errno(0x42)
+	EREMOTEIO       = syscall.Errno(0x79)
+	ERESTART        = syscall.Errno(0x55)
+	ERFKILL         = syscall.Errno(0x84)
+	ESHUTDOWN       = syscall.Errno(0x6c)
+	ESOCKTNOSUPPORT = syscall.Errno(0x5e)
+	ESRMNT          = syscall.Errno(0x45)
+	ESTALE          = syscall.Errno(0x74)
+	ESTRPIPE        = syscall.Errno(0x56)
+	ETIME           = syscall.Errno(0x3e)
+	ETIMEDOUT       = syscall.Errno(0x6e)
+	ETOOMANYREFS    = syscall.Errno(0x6d)
+	EUCLEAN         = syscall.Errno(0x75)
+	EUNATCH         = syscall.Errno(0x31)
+	EUSERS          = syscall.Errno(0x57)
+	EXFULL          = syscall.Errno(0x36)
+)
+
+// Signals
+const (
+	SIGBUS    = syscall.Signal(0x7)
+	SIGCHLD   = syscall.Signal(0x11)
+	SIGCLD    = syscall.Signal(0x11)
+	SIGCONT   = syscall.Signal(0x12)
+	SIGIO     = syscall.Signal(0x1d)
+	SIGPOLL   = syscall.Signal(0x1d)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGPWR    = syscall.Signal(0x1e)
+	SIGSTKFLT = syscall.Signal(0x10)
+	SIGSTOP   = syscall.Signal(0x13)
+	SIGSYS    = syscall.Signal(0x1f)
+	SIGTSTP   = syscall.Signal(0x14)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x17)
+	SIGUSR1   = syscall.Signal(0xa)
+	SIGUSR2   = syscall.Signal(0xc)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "no such device or address"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EAGAIN", "resource temporarily unavailable"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device or resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "invalid cross-device link"},
+	{19, "ENODEV", "no such device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "numerical result out of range"},
+	{35, "EDEADLK", "resource deadlock avoided"},
+	{36, "ENAMETOOLONG", "file name too long"},
+	{37, "ENOLCK", "no locks available"},
+	{38, "ENOSYS", "function not implemented"},
+	{39, "ENOTEMPTY", "directory not empty"},
+	{40, "ELOOP", "too many levels of symbolic links"},
+	{42, "ENOMSG", "no message of desired type"},
+	{43, "EIDRM", "identifier removed"},
+	{44, "ECHRNG", "channel number out of range"},
+	{45, "EL2NSYNC", "level 2 not synchronized"},
+	{46, "EL3HLT", "level 3 halted"},
+	{47, "EL3RST", "level 3 reset"},
+	{48, "ELNRNG", "link number out of range"},
+	{49, "EUNATCH", "protocol driver not attached"},
+	{50, "ENOCSI", "no CSI structure available"},
+	{51, "EL2HLT", "level 2 halted"},
+	{52, "EBADE", "invalid exchange"},
+	{53, "EBADR", "invalid request descriptor"},
+	{54, "EXFULL", "exchange full"},
+	{55, "ENOANO", "no anode"},
+	{56, "EBADRQC", "invalid request code"},
+	{57, "EBADSLT", "invalid slot"},
+	{59, "EBFONT", "bad font file format"},
+	{60, "ENOSTR", "device not a stream"},
+	{61, "ENODATA", "no data available"},
+	{62, "ETIME", "timer expired"},
+	{63, "ENOSR", "out of streams resources"},
+	{64, "ENONET", "machine is not on the network"},
+	{65, "ENOPKG", "package not installed"},
+	{66, "EREMOTE", "object is remote"},
+	{67, "ENOLINK", "link has been severed"},
+	{68, "EADV", "advertise error"},
+	{69, "ESRMNT", "srmount error"},
+	{70, "ECOMM", "communication error on send"},
+	{71, "EPROTO", "protocol error"},
+	{72, "EMULTIHOP", "multihop attempted"},
+	{73, "EDOTDOT", "RFS specific error"},
+	{74, "EBADMSG", "bad message"},
+	{75, "EOVERFLOW", "value too large for defined data type"},
+	{76, "ENOTUNIQ", "name not unique on network"},
+	{77, "EBADFD", "file descriptor in bad state"},
+	{78, "EREMCHG", "remote address changed"},
+	{79, "ELIBACC", "can not access a needed shared library"},
+	{80, "ELIBBAD", "accessing a corrupted shared library"},
+	{81, "ELIBSCN", ".lib section in a.out corrupted"},
+	{82, "ELIBMAX", "attempting to link in too many shared libraries"},
+	{83, "ELIBEXEC", "cannot exec a shared library directly"},
+	{84, "EILSEQ", "invalid or incomplete multibyte or wide character"},
+	{85, "ERESTART", "interrupted system call should be restarted"},
+	{86, "ESTRPIPE", "streams pipe error"},
+	{87, "EUSERS", "too many users"},
+	{88, "ENOTSOCK", "socket operation on non-socket"},
+	{89, "EDESTADDRREQ", "destination address required"},
+	{90, "EMSGSIZE", "message too long"},
+	{91, "EPROTOTYPE", "protocol wrong type for socket"},
+	{92, "ENOPROTOOPT", "protocol not available"},
+	{93, "EPROTONOSUPPORT", "protocol not supported"},
+	{94, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{95, "ENOTSUP", "operation not supported"},
+	{96, "EPFNOSUPPORT", "protocol family not supported"},
+	{97, "EAFNOSUPPORT", "address family not supported by protocol"},
+	{98, "EADDRINUSE", "address already in use"},
+	{99, "EADDRNOTAVAIL", "cannot assign requested address"},
+	{100, "ENETDOWN", "network is down"},
+	{101, "ENETUNREACH", "network is unreachable"},
+	{102, "ENETRESET", "network dropped connection on reset"},
+	{103, "ECONNABORTED", "software caused connection abort"},
+	{104, "ECONNRESET", "connection reset by peer"},
+	{105, "ENOBUFS", "no buffer space available"},
+	{106, "EISCONN", "transport endpoint is already connected"},
+	{107, "ENOTCONN", "transport endpoint is not connected"},
+	{108, "ESHUTDOWN", "cannot send after transport endpoint shutdown"},
+	{109, "ETOOMANYREFS", "too many references: cannot splice"},
+	{110, "ETIMEDOUT", "connection timed out"},
+	{111, "ECONNREFUSED", "connection refused"},
+	{112, "EHOSTDOWN", "host is down"},
+	{113, "EHOSTUNREACH", "no route to host"},
+	{114, "EALREADY", "operation already in progress"},
+	{115, "EINPROGRESS", "operation now in progress"},
+	{116, "ESTALE", "stale file handle"},
+	{117, "EUCLEAN", "structure needs cleaning"},
+	{118, "ENOTNAM", "not a XENIX named type file"},
+	{119, "ENAVAIL", "no XENIX semaphores available"},
+	{120, "EISNAM", "is a named type file"},
+	{121, "EREMOTEIO", "remote I/O error"},
+	{122, "EDQUOT", "disk quota exceeded"},
+	{123, "ENOMEDIUM", "no medium found"},
+	{124, "EMEDIUMTYPE", "wrong medium type"},
+	{125, "ECANCELED", "operation canceled"},
+	{126, "ENOKEY", "required key not available"},
+	{127, "EKEYEXPIRED", "key has expired"},
+	{128, "EKEYREVOKED", "key has been revoked"},
+	{129, "EKEYREJECTED", "key was rejected by service"},
+	{130, "EOWNERDEAD", "owner died"},
+	{131, "ENOTRECOVERABLE", "state not recoverable"},
+	{132, "ERFKILL", "operation not possible due to RF-kill"},
+	{133, "EHWPOISON", "memory page has hardware error"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/breakpoint trap"},
+	{6, "SIGABRT", "aborted"},
+	{7, "SIGBUS", "bus error"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGUSR1", "user defined signal 1"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGUSR2", "user defined signal 2"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGSTKFLT", "stack fault"},
+	{17, "SIGCHLD", "child exited"},
+	{18, "SIGCONT", "continued"},
+	{19, "SIGSTOP", "stopped (signal)"},
+	{20, "SIGTSTP", "stopped"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGURG", "urgent I/O condition"},
+	{24, "SIGXCPU", "CPU time limit exceeded"},
+	{25, "SIGXFSZ", "file size limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window changed"},
+	{29, "SIGIO", "I/O possible"},
+	{30, "SIGPWR", "power failure"},
+	{31, "SIGSYS", "bad system call"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_arm64.go
new file mode 100644
index 000000000..3b6cc5880
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_arm64.go
@@ -0,0 +1,784 @@
+// mkerrors.sh -Wall -Werror -static -I/tmp/include -fsigned-char
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm64,linux
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include -fsigned-char _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	B1000000                         = 0x1008
+	B115200                          = 0x1002
+	B1152000                         = 0x1009
+	B1500000                         = 0x100a
+	B2000000                         = 0x100b
+	B230400                          = 0x1003
+	B2500000                         = 0x100c
+	B3000000                         = 0x100d
+	B3500000                         = 0x100e
+	B4000000                         = 0x100f
+	B460800                          = 0x1004
+	B500000                          = 0x1005
+	B57600                           = 0x1001
+	B576000                          = 0x1006
+	B921600                          = 0x1007
+	BLKBSZGET                        = 0x80081270
+	BLKBSZSET                        = 0x40081271
+	BLKFLSBUF                        = 0x1261
+	BLKFRAGET                        = 0x1265
+	BLKFRASET                        = 0x1264
+	BLKGETSIZE                       = 0x1260
+	BLKGETSIZE64                     = 0x80081272
+	BLKPBSZGET                       = 0x127b
+	BLKRAGET                         = 0x1263
+	BLKRASET                         = 0x1262
+	BLKROGET                         = 0x125e
+	BLKROSET                         = 0x125d
+	BLKRRPART                        = 0x125f
+	BLKSECTGET                       = 0x1267
+	BLKSECTSET                       = 0x1266
+	BLKSSZGET                        = 0x1268
+	BOTHER                           = 0x1000
+	BS1                              = 0x2000
+	BSDLY                            = 0x2000
+	CBAUD                            = 0x100f
+	CBAUDEX                          = 0x1000
+	CIBAUD                           = 0x100f0000
+	CLOCAL                           = 0x800
+	CR1                              = 0x200
+	CR2                              = 0x400
+	CR3                              = 0x600
+	CRDLY                            = 0x600
+	CREAD                            = 0x80
+	CS6                              = 0x10
+	CS7                              = 0x20
+	CS8                              = 0x30
+	CSIZE                            = 0x30
+	CSTOPB                           = 0x40
+	ECHOCTL                          = 0x200
+	ECHOE                            = 0x10
+	ECHOK                            = 0x20
+	ECHOKE                           = 0x800
+	ECHONL                           = 0x40
+	ECHOPRT                          = 0x400
+	EFD_CLOEXEC                      = 0x80000
+	EFD_NONBLOCK                     = 0x800
+	EPOLL_CLOEXEC                    = 0x80000
+	ESR_MAGIC                        = 0x45535201
+	EXTPROC                          = 0x10000
+	EXTRA_MAGIC                      = 0x45585401
+	FF1                              = 0x8000
+	FFDLY                            = 0x8000
+	FICLONE                          = 0x40049409
+	FICLONERANGE                     = 0x4020940d
+	FLUSHO                           = 0x1000
+	FPSIMD_MAGIC                     = 0x46508001
+	FS_IOC_ENABLE_VERITY             = 0x40806685
+	FS_IOC_GETFLAGS                  = 0x80086601
+	FS_IOC_GET_ENCRYPTION_NONCE      = 0x8010661b
+	FS_IOC_GET_ENCRYPTION_POLICY     = 0x400c6615
+	FS_IOC_GET_ENCRYPTION_PWSALT     = 0x40106614
+	FS_IOC_SETFLAGS                  = 0x40086602
+	FS_IOC_SET_ENCRYPTION_POLICY     = 0x800c6613
+	F_GETLK                          = 0x5
+	F_GETLK64                        = 0x5
+	F_GETOWN                         = 0x9
+	F_RDLCK                          = 0x0
+	F_SETLK                          = 0x6
+	F_SETLK64                        = 0x6
+	F_SETLKW                         = 0x7
+	F_SETLKW64                       = 0x7
+	F_SETOWN                         = 0x8
+	F_UNLCK                          = 0x2
+	F_WRLCK                          = 0x1
+	HUPCL                            = 0x400
+	ICANON                           = 0x2
+	IEXTEN                           = 0x8000
+	IN_CLOEXEC                       = 0x80000
+	IN_NONBLOCK                      = 0x800
+	IOCTL_VM_SOCKETS_GET_LOCAL_CID   = 0x7b9
+	ISIG                             = 0x1
+	IUCLC                            = 0x200
+	IXOFF                            = 0x1000
+	IXON                             = 0x400
+	MAP_ANON                         = 0x20
+	MAP_ANONYMOUS                    = 0x20
+	MAP_DENYWRITE                    = 0x800
+	MAP_EXECUTABLE                   = 0x1000
+	MAP_GROWSDOWN                    = 0x100
+	MAP_HUGETLB                      = 0x40000
+	MAP_LOCKED                       = 0x2000
+	MAP_NONBLOCK                     = 0x10000
+	MAP_NORESERVE                    = 0x4000
+	MAP_POPULATE                     = 0x8000
+	MAP_STACK                        = 0x20000
+	MAP_SYNC                         = 0x80000
+	MCL_CURRENT                      = 0x1
+	MCL_FUTURE                       = 0x2
+	MCL_ONFAULT                      = 0x4
+	NFDBITS                          = 0x40
+	NLDLY                            = 0x100
+	NOFLSH                           = 0x80
+	NS_GET_NSTYPE                    = 0xb703
+	NS_GET_OWNER_UID                 = 0xb704
+	NS_GET_PARENT                    = 0xb702
+	NS_GET_USERNS                    = 0xb701
+	OLCUC                            = 0x2
+	ONLCR                            = 0x4
+	O_APPEND                         = 0x400
+	O_ASYNC                          = 0x2000
+	O_CLOEXEC                        = 0x80000
+	O_CREAT                          = 0x40
+	O_DIRECT                         = 0x10000
+	O_DIRECTORY                      = 0x4000
+	O_DSYNC                          = 0x1000
+	O_EXCL                           = 0x80
+	O_FSYNC                          = 0x101000
+	O_LARGEFILE                      = 0x0
+	O_NDELAY                         = 0x800
+	O_NOATIME                        = 0x40000
+	O_NOCTTY                         = 0x100
+	O_NOFOLLOW                       = 0x8000
+	O_NONBLOCK                       = 0x800
+	O_PATH                           = 0x200000
+	O_RSYNC                          = 0x101000
+	O_SYNC                           = 0x101000
+	O_TMPFILE                        = 0x404000
+	O_TRUNC                          = 0x200
+	PARENB                           = 0x100
+	PARODD                           = 0x200
+	PENDIN                           = 0x4000
+	PERF_EVENT_IOC_DISABLE           = 0x2401
+	PERF_EVENT_IOC_ENABLE            = 0x2400
+	PERF_EVENT_IOC_ID                = 0x80082407
+	PERF_EVENT_IOC_MODIFY_ATTRIBUTES = 0x4008240b
+	PERF_EVENT_IOC_PAUSE_OUTPUT      = 0x40042409
+	PERF_EVENT_IOC_PERIOD            = 0x40082404
+	PERF_EVENT_IOC_QUERY_BPF         = 0xc008240a
+	PERF_EVENT_IOC_REFRESH           = 0x2402
+	PERF_EVENT_IOC_RESET             = 0x2403
+	PERF_EVENT_IOC_SET_BPF           = 0x40042408
+	PERF_EVENT_IOC_SET_FILTER        = 0x40082406
+	PERF_EVENT_IOC_SET_OUTPUT        = 0x2405
+	PPPIOCATTACH                     = 0x4004743d
+	PPPIOCATTCHAN                    = 0x40047438
+	PPPIOCCONNECT                    = 0x4004743a
+	PPPIOCDETACH                     = 0x4004743c
+	PPPIOCDISCONN                    = 0x7439
+	PPPIOCGASYNCMAP                  = 0x80047458
+	PPPIOCGCHAN                      = 0x80047437
+	PPPIOCGDEBUG                     = 0x80047441
+	PPPIOCGFLAGS                     = 0x8004745a
+	PPPIOCGIDLE                      = 0x8010743f
+	PPPIOCGIDLE32                    = 0x8008743f
+	PPPIOCGIDLE64                    = 0x8010743f
+	PPPIOCGL2TPSTATS                 = 0x80487436
+	PPPIOCGMRU                       = 0x80047453
+	PPPIOCGRASYNCMAP                 = 0x80047455
+	PPPIOCGUNIT                      = 0x80047456
+	PPPIOCGXASYNCMAP                 = 0x80207450
+	PPPIOCSACTIVE                    = 0x40107446
+	PPPIOCSASYNCMAP                  = 0x40047457
+	PPPIOCSCOMPRESS                  = 0x4010744d
+	PPPIOCSDEBUG                     = 0x40047440
+	PPPIOCSFLAGS                     = 0x40047459
+	PPPIOCSMAXCID                    = 0x40047451
+	PPPIOCSMRRU                      = 0x4004743b
+	PPPIOCSMRU                       = 0x40047452
+	PPPIOCSNPMODE                    = 0x4008744b
+	PPPIOCSPASS                      = 0x40107447
+	PPPIOCSRASYNCMAP                 = 0x40047454
+	PPPIOCSXASYNCMAP                 = 0x4020744f
+	PPPIOCXFERUNIT                   = 0x744e
+	PROT_BTI                         = 0x10
+	PR_SET_PTRACER_ANY               = 0xffffffffffffffff
+	PTRACE_SYSEMU                    = 0x1f
+	PTRACE_SYSEMU_SINGLESTEP         = 0x20
+	RLIMIT_AS                        = 0x9
+	RLIMIT_MEMLOCK                   = 0x8
+	RLIMIT_NOFILE                    = 0x7
+	RLIMIT_NPROC                     = 0x6
+	RLIMIT_RSS                       = 0x5
+	RNDADDENTROPY                    = 0x40085203
+	RNDADDTOENTCNT                   = 0x40045201
+	RNDCLEARPOOL                     = 0x5206
+	RNDGETENTCNT                     = 0x80045200
+	RNDGETPOOL                       = 0x80085202
+	RNDRESEEDCRNG                    = 0x5207
+	RNDZAPENTCNT                     = 0x5204
+	RTC_AIE_OFF                      = 0x7002
+	RTC_AIE_ON                       = 0x7001
+	RTC_ALM_READ                     = 0x80247008
+	RTC_ALM_SET                      = 0x40247007
+	RTC_EPOCH_READ                   = 0x8008700d
+	RTC_EPOCH_SET                    = 0x4008700e
+	RTC_IRQP_READ                    = 0x8008700b
+	RTC_IRQP_SET                     = 0x4008700c
+	RTC_PIE_OFF                      = 0x7006
+	RTC_PIE_ON                       = 0x7005
+	RTC_PLL_GET                      = 0x80207011
+	RTC_PLL_SET                      = 0x40207012
+	RTC_RD_TIME                      = 0x80247009
+	RTC_SET_TIME                     = 0x4024700a
+	RTC_UIE_OFF                      = 0x7004
+	RTC_UIE_ON                       = 0x7003
+	RTC_VL_CLR                       = 0x7014
+	RTC_VL_READ                      = 0x80047013
+	RTC_WIE_OFF                      = 0x7010
+	RTC_WIE_ON                       = 0x700f
+	RTC_WKALM_RD                     = 0x80287010
+	RTC_WKALM_SET                    = 0x4028700f
+	SCM_TIMESTAMPING                 = 0x25
+	SCM_TIMESTAMPING_OPT_STATS       = 0x36
+	SCM_TIMESTAMPING_PKTINFO         = 0x3a
+	SCM_TIMESTAMPNS                  = 0x23
+	SCM_TXTIME                       = 0x3d
+	SCM_WIFI_STATUS                  = 0x29
+	SFD_CLOEXEC                      = 0x80000
+	SFD_NONBLOCK                     = 0x800
+	SIOCATMARK                       = 0x8905
+	SIOCGPGRP                        = 0x8904
+	SIOCGSTAMPNS_NEW                 = 0x80108907
+	SIOCGSTAMP_NEW                   = 0x80108906
+	SIOCINQ                          = 0x541b
+	SIOCOUTQ                         = 0x5411
+	SIOCSPGRP                        = 0x8902
+	SOCK_CLOEXEC                     = 0x80000
+	SOCK_DGRAM                       = 0x2
+	SOCK_NONBLOCK                    = 0x800
+	SOCK_STREAM                      = 0x1
+	SOL_SOCKET                       = 0x1
+	SO_ACCEPTCONN                    = 0x1e
+	SO_ATTACH_BPF                    = 0x32
+	SO_ATTACH_REUSEPORT_CBPF         = 0x33
+	SO_ATTACH_REUSEPORT_EBPF         = 0x34
+	SO_BINDTODEVICE                  = 0x19
+	SO_BINDTOIFINDEX                 = 0x3e
+	SO_BPF_EXTENSIONS                = 0x30
+	SO_BROADCAST                     = 0x6
+	SO_BSDCOMPAT                     = 0xe
+	SO_BUSY_POLL                     = 0x2e
+	SO_CNX_ADVICE                    = 0x35
+	SO_COOKIE                        = 0x39
+	SO_DETACH_REUSEPORT_BPF          = 0x44
+	SO_DOMAIN                        = 0x27
+	SO_DONTROUTE                     = 0x5
+	SO_ERROR                         = 0x4
+	SO_INCOMING_CPU                  = 0x31
+	SO_INCOMING_NAPI_ID              = 0x38
+	SO_KEEPALIVE                     = 0x9
+	SO_LINGER                        = 0xd
+	SO_LOCK_FILTER                   = 0x2c
+	SO_MARK                          = 0x24
+	SO_MAX_PACING_RATE               = 0x2f
+	SO_MEMINFO                       = 0x37
+	SO_NOFCS                         = 0x2b
+	SO_OOBINLINE                     = 0xa
+	SO_PASSCRED                      = 0x10
+	SO_PASSSEC                       = 0x22
+	SO_PEEK_OFF                      = 0x2a
+	SO_PEERCRED                      = 0x11
+	SO_PEERGROUPS                    = 0x3b
+	SO_PEERSEC                       = 0x1f
+	SO_PROTOCOL                      = 0x26
+	SO_RCVBUF                        = 0x8
+	SO_RCVBUFFORCE                   = 0x21
+	SO_RCVLOWAT                      = 0x12
+	SO_RCVTIMEO                      = 0x14
+	SO_RCVTIMEO_NEW                  = 0x42
+	SO_RCVTIMEO_OLD                  = 0x14
+	SO_REUSEADDR                     = 0x2
+	SO_REUSEPORT                     = 0xf
+	SO_RXQ_OVFL                      = 0x28
+	SO_SECURITY_AUTHENTICATION       = 0x16
+	SO_SECURITY_ENCRYPTION_NETWORK   = 0x18
+	SO_SECURITY_ENCRYPTION_TRANSPORT = 0x17
+	SO_SELECT_ERR_QUEUE              = 0x2d
+	SO_SNDBUF                        = 0x7
+	SO_SNDBUFFORCE                   = 0x20
+	SO_SNDLOWAT                      = 0x13
+	SO_SNDTIMEO                      = 0x15
+	SO_SNDTIMEO_NEW                  = 0x43
+	SO_SNDTIMEO_OLD                  = 0x15
+	SO_TIMESTAMPING                  = 0x25
+	SO_TIMESTAMPING_NEW              = 0x41
+	SO_TIMESTAMPING_OLD              = 0x25
+	SO_TIMESTAMPNS                   = 0x23
+	SO_TIMESTAMPNS_NEW               = 0x40
+	SO_TIMESTAMPNS_OLD               = 0x23
+	SO_TIMESTAMP_NEW                 = 0x3f
+	SO_TXTIME                        = 0x3d
+	SO_TYPE                          = 0x3
+	SO_WIFI_STATUS                   = 0x29
+	SO_ZEROCOPY                      = 0x3c
+	SVE_MAGIC                        = 0x53564501
+	TAB1                             = 0x800
+	TAB2                             = 0x1000
+	TAB3                             = 0x1800
+	TABDLY                           = 0x1800
+	TCFLSH                           = 0x540b
+	TCGETA                           = 0x5405
+	TCGETS                           = 0x5401
+	TCGETS2                          = 0x802c542a
+	TCGETX                           = 0x5432
+	TCSAFLUSH                        = 0x2
+	TCSBRK                           = 0x5409
+	TCSBRKP                          = 0x5425
+	TCSETA                           = 0x5406
+	TCSETAF                          = 0x5408
+	TCSETAW                          = 0x5407
+	TCSETS                           = 0x5402
+	TCSETS2                          = 0x402c542b
+	TCSETSF                          = 0x5404
+	TCSETSF2                         = 0x402c542d
+	TCSETSW                          = 0x5403
+	TCSETSW2                         = 0x402c542c
+	TCSETX                           = 0x5433
+	TCSETXF                          = 0x5434
+	TCSETXW                          = 0x5435
+	TCXONC                           = 0x540a
+	TFD_CLOEXEC                      = 0x80000
+	TFD_NONBLOCK                     = 0x800
+	TIOCCBRK                         = 0x5428
+	TIOCCONS                         = 0x541d
+	TIOCEXCL                         = 0x540c
+	TIOCGDEV                         = 0x80045432
+	TIOCGETD                         = 0x5424
+	TIOCGEXCL                        = 0x80045440
+	TIOCGICOUNT                      = 0x545d
+	TIOCGISO7816                     = 0x80285442
+	TIOCGLCKTRMIOS                   = 0x5456
+	TIOCGPGRP                        = 0x540f
+	TIOCGPKT                         = 0x80045438
+	TIOCGPTLCK                       = 0x80045439
+	TIOCGPTN                         = 0x80045430
+	TIOCGPTPEER                      = 0x5441
+	TIOCGRS485                       = 0x542e
+	TIOCGSERIAL                      = 0x541e
+	TIOCGSID                         = 0x5429
+	TIOCGSOFTCAR                     = 0x5419
+	TIOCGWINSZ                       = 0x5413
+	TIOCINQ                          = 0x541b
+	TIOCLINUX                        = 0x541c
+	TIOCMBIC                         = 0x5417
+	TIOCMBIS                         = 0x5416
+	TIOCMGET                         = 0x5415
+	TIOCMIWAIT                       = 0x545c
+	TIOCMSET                         = 0x5418
+	TIOCM_CAR                        = 0x40
+	TIOCM_CD                         = 0x40
+	TIOCM_CTS                        = 0x20
+	TIOCM_DSR                        = 0x100
+	TIOCM_RI                         = 0x80
+	TIOCM_RNG                        = 0x80
+	TIOCM_SR                         = 0x10
+	TIOCM_ST                         = 0x8
+	TIOCNOTTY                        = 0x5422
+	TIOCNXCL                         = 0x540d
+	TIOCOUTQ                         = 0x5411
+	TIOCPKT                          = 0x5420
+	TIOCSBRK                         = 0x5427
+	TIOCSCTTY                        = 0x540e
+	TIOCSERCONFIG                    = 0x5453
+	TIOCSERGETLSR                    = 0x5459
+	TIOCSERGETMULTI                  = 0x545a
+	TIOCSERGSTRUCT                   = 0x5458
+	TIOCSERGWILD                     = 0x5454
+	TIOCSERSETMULTI                  = 0x545b
+	TIOCSERSWILD                     = 0x5455
+	TIOCSER_TEMT                     = 0x1
+	TIOCSETD                         = 0x5423
+	TIOCSIG                          = 0x40045436
+	TIOCSISO7816                     = 0xc0285443
+	TIOCSLCKTRMIOS                   = 0x5457
+	TIOCSPGRP                        = 0x5410
+	TIOCSPTLCK                       = 0x40045431
+	TIOCSRS485                       = 0x542f
+	TIOCSSERIAL                      = 0x541f
+	TIOCSSOFTCAR                     = 0x541a
+	TIOCSTI                          = 0x5412
+	TIOCSWINSZ                       = 0x5414
+	TIOCVHANGUP                      = 0x5437
+	TOSTOP                           = 0x100
+	TUNATTACHFILTER                  = 0x401054d5
+	TUNDETACHFILTER                  = 0x401054d6
+	TUNGETDEVNETNS                   = 0x54e3
+	TUNGETFEATURES                   = 0x800454cf
+	TUNGETFILTER                     = 0x801054db
+	TUNGETIFF                        = 0x800454d2
+	TUNGETSNDBUF                     = 0x800454d3
+	TUNGETVNETBE                     = 0x800454df
+	TUNGETVNETHDRSZ                  = 0x800454d7
+	TUNGETVNETLE                     = 0x800454dd
+	TUNSETCARRIER                    = 0x400454e2
+	TUNSETDEBUG                      = 0x400454c9
+	TUNSETFILTEREBPF                 = 0x800454e1
+	TUNSETGROUP                      = 0x400454ce
+	TUNSETIFF                        = 0x400454ca
+	TUNSETIFINDEX                    = 0x400454da
+	TUNSETLINK                       = 0x400454cd
+	TUNSETNOCSUM                     = 0x400454c8
+	TUNSETOFFLOAD                    = 0x400454d0
+	TUNSETOWNER                      = 0x400454cc
+	TUNSETPERSIST                    = 0x400454cb
+	TUNSETQUEUE                      = 0x400454d9
+	TUNSETSNDBUF                     = 0x400454d4
+	TUNSETSTEERINGEBPF               = 0x800454e0
+	TUNSETTXFILTER                   = 0x400454d1
+	TUNSETVNETBE                     = 0x400454de
+	TUNSETVNETHDRSZ                  = 0x400454d8
+	TUNSETVNETLE                     = 0x400454dc
+	UBI_IOCATT                       = 0x40186f40
+	UBI_IOCDET                       = 0x40046f41
+	UBI_IOCEBCH                      = 0x40044f02
+	UBI_IOCEBER                      = 0x40044f01
+	UBI_IOCEBISMAP                   = 0x80044f05
+	UBI_IOCEBMAP                     = 0x40084f03
+	UBI_IOCEBUNMAP                   = 0x40044f04
+	UBI_IOCMKVOL                     = 0x40986f00
+	UBI_IOCRMVOL                     = 0x40046f01
+	UBI_IOCRNVOL                     = 0x51106f03
+	UBI_IOCRPEB                      = 0x40046f04
+	UBI_IOCRSVOL                     = 0x400c6f02
+	UBI_IOCSETVOLPROP                = 0x40104f06
+	UBI_IOCSPEB                      = 0x40046f05
+	UBI_IOCVOLCRBLK                  = 0x40804f07
+	UBI_IOCVOLRMBLK                  = 0x4f08
+	UBI_IOCVOLUP                     = 0x40084f00
+	VDISCARD                         = 0xd
+	VEOF                             = 0x4
+	VEOL                             = 0xb
+	VEOL2                            = 0x10
+	VMIN                             = 0x6
+	VREPRINT                         = 0xc
+	VSTART                           = 0x8
+	VSTOP                            = 0x9
+	VSUSP                            = 0xa
+	VSWTC                            = 0x7
+	VT1                              = 0x4000
+	VTDLY                            = 0x4000
+	VTIME                            = 0x5
+	VWERASE                          = 0xe
+	WDIOC_GETBOOTSTATUS              = 0x80045702
+	WDIOC_GETPRETIMEOUT              = 0x80045709
+	WDIOC_GETSTATUS                  = 0x80045701
+	WDIOC_GETSUPPORT                 = 0x80285700
+	WDIOC_GETTEMP                    = 0x80045703
+	WDIOC_GETTIMELEFT                = 0x8004570a
+	WDIOC_GETTIMEOUT                 = 0x80045707
+	WDIOC_KEEPALIVE                  = 0x80045705
+	WDIOC_SETOPTIONS                 = 0x80045704
+	WORDSIZE                         = 0x40
+	XCASE                            = 0x4
+	XTABS                            = 0x1800
+)
+
+// Errors
+const (
+	EADDRINUSE      = syscall.Errno(0x62)
+	EADDRNOTAVAIL   = syscall.Errno(0x63)
+	EADV            = syscall.Errno(0x44)
+	EAFNOSUPPORT    = syscall.Errno(0x61)
+	EALREADY        = syscall.Errno(0x72)
+	EBADE           = syscall.Errno(0x34)
+	EBADFD          = syscall.Errno(0x4d)
+	EBADMSG         = syscall.Errno(0x4a)
+	EBADR           = syscall.Errno(0x35)
+	EBADRQC         = syscall.Errno(0x38)
+	EBADSLT         = syscall.Errno(0x39)
+	EBFONT          = syscall.Errno(0x3b)
+	ECANCELED       = syscall.Errno(0x7d)
+	ECHRNG          = syscall.Errno(0x2c)
+	ECOMM           = syscall.Errno(0x46)
+	ECONNABORTED    = syscall.Errno(0x67)
+	ECONNREFUSED    = syscall.Errno(0x6f)
+	ECONNRESET      = syscall.Errno(0x68)
+	EDEADLK         = syscall.Errno(0x23)
+	EDEADLOCK       = syscall.Errno(0x23)
+	EDESTADDRREQ    = syscall.Errno(0x59)
+	EDOTDOT         = syscall.Errno(0x49)
+	EDQUOT          = syscall.Errno(0x7a)
+	EHOSTDOWN       = syscall.Errno(0x70)
+	EHOSTUNREACH    = syscall.Errno(0x71)
+	EHWPOISON       = syscall.Errno(0x85)
+	EIDRM           = syscall.Errno(0x2b)
+	EILSEQ          = syscall.Errno(0x54)
+	EINPROGRESS     = syscall.Errno(0x73)
+	EISCONN         = syscall.Errno(0x6a)
+	EISNAM          = syscall.Errno(0x78)
+	EKEYEXPIRED     = syscall.Errno(0x7f)
+	EKEYREJECTED    = syscall.Errno(0x81)
+	EKEYREVOKED     = syscall.Errno(0x80)
+	EL2HLT          = syscall.Errno(0x33)
+	EL2NSYNC        = syscall.Errno(0x2d)
+	EL3HLT          = syscall.Errno(0x2e)
+	EL3RST          = syscall.Errno(0x2f)
+	ELIBACC         = syscall.Errno(0x4f)
+	ELIBBAD         = syscall.Errno(0x50)
+	ELIBEXEC        = syscall.Errno(0x53)
+	ELIBMAX         = syscall.Errno(0x52)
+	ELIBSCN         = syscall.Errno(0x51)
+	ELNRNG          = syscall.Errno(0x30)
+	ELOOP           = syscall.Errno(0x28)
+	EMEDIUMTYPE     = syscall.Errno(0x7c)
+	EMSGSIZE        = syscall.Errno(0x5a)
+	EMULTIHOP       = syscall.Errno(0x48)
+	ENAMETOOLONG    = syscall.Errno(0x24)
+	ENAVAIL         = syscall.Errno(0x77)
+	ENETDOWN        = syscall.Errno(0x64)
+	ENETRESET       = syscall.Errno(0x66)
+	ENETUNREACH     = syscall.Errno(0x65)
+	ENOANO          = syscall.Errno(0x37)
+	ENOBUFS         = syscall.Errno(0x69)
+	ENOCSI          = syscall.Errno(0x32)
+	ENODATA         = syscall.Errno(0x3d)
+	ENOKEY          = syscall.Errno(0x7e)
+	ENOLCK          = syscall.Errno(0x25)
+	ENOLINK         = syscall.Errno(0x43)
+	ENOMEDIUM       = syscall.Errno(0x7b)
+	ENOMSG          = syscall.Errno(0x2a)
+	ENONET          = syscall.Errno(0x40)
+	ENOPKG          = syscall.Errno(0x41)
+	ENOPROTOOPT     = syscall.Errno(0x5c)
+	ENOSR           = syscall.Errno(0x3f)
+	ENOSTR          = syscall.Errno(0x3c)
+	ENOSYS          = syscall.Errno(0x26)
+	ENOTCONN        = syscall.Errno(0x6b)
+	ENOTEMPTY       = syscall.Errno(0x27)
+	ENOTNAM         = syscall.Errno(0x76)
+	ENOTRECOVERABLE = syscall.Errno(0x83)
+	ENOTSOCK        = syscall.Errno(0x58)
+	ENOTSUP         = syscall.Errno(0x5f)
+	ENOTUNIQ        = syscall.Errno(0x4c)
+	EOPNOTSUPP      = syscall.Errno(0x5f)
+	EOVERFLOW       = syscall.Errno(0x4b)
+	EOWNERDEAD      = syscall.Errno(0x82)
+	EPFNOSUPPORT    = syscall.Errno(0x60)
+	EPROTO          = syscall.Errno(0x47)
+	EPROTONOSUPPORT = syscall.Errno(0x5d)
+	EPROTOTYPE      = syscall.Errno(0x5b)
+	EREMCHG         = syscall.Errno(0x4e)
+	EREMOTE         = syscall.Errno(0x42)
+	EREMOTEIO       = syscall.Errno(0x79)
+	ERESTART        = syscall.Errno(0x55)
+	ERFKILL         = syscall.Errno(0x84)
+	ESHUTDOWN       = syscall.Errno(0x6c)
+	ESOCKTNOSUPPORT = syscall.Errno(0x5e)
+	ESRMNT          = syscall.Errno(0x45)
+	ESTALE          = syscall.Errno(0x74)
+	ESTRPIPE        = syscall.Errno(0x56)
+	ETIME           = syscall.Errno(0x3e)
+	ETIMEDOUT       = syscall.Errno(0x6e)
+	ETOOMANYREFS    = syscall.Errno(0x6d)
+	EUCLEAN         = syscall.Errno(0x75)
+	EUNATCH         = syscall.Errno(0x31)
+	EUSERS          = syscall.Errno(0x57)
+	EXFULL          = syscall.Errno(0x36)
+)
+
+// Signals
+const (
+	SIGBUS    = syscall.Signal(0x7)
+	SIGCHLD   = syscall.Signal(0x11)
+	SIGCLD    = syscall.Signal(0x11)
+	SIGCONT   = syscall.Signal(0x12)
+	SIGIO     = syscall.Signal(0x1d)
+	SIGPOLL   = syscall.Signal(0x1d)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGPWR    = syscall.Signal(0x1e)
+	SIGSTKFLT = syscall.Signal(0x10)
+	SIGSTOP   = syscall.Signal(0x13)
+	SIGSYS    = syscall.Signal(0x1f)
+	SIGTSTP   = syscall.Signal(0x14)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x17)
+	SIGUSR1   = syscall.Signal(0xa)
+	SIGUSR2   = syscall.Signal(0xc)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "no such device or address"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EAGAIN", "resource temporarily unavailable"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device or resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "invalid cross-device link"},
+	{19, "ENODEV", "no such device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "numerical result out of range"},
+	{35, "EDEADLK", "resource deadlock avoided"},
+	{36, "ENAMETOOLONG", "file name too long"},
+	{37, "ENOLCK", "no locks available"},
+	{38, "ENOSYS", "function not implemented"},
+	{39, "ENOTEMPTY", "directory not empty"},
+	{40, "ELOOP", "too many levels of symbolic links"},
+	{42, "ENOMSG", "no message of desired type"},
+	{43, "EIDRM", "identifier removed"},
+	{44, "ECHRNG", "channel number out of range"},
+	{45, "EL2NSYNC", "level 2 not synchronized"},
+	{46, "EL3HLT", "level 3 halted"},
+	{47, "EL3RST", "level 3 reset"},
+	{48, "ELNRNG", "link number out of range"},
+	{49, "EUNATCH", "protocol driver not attached"},
+	{50, "ENOCSI", "no CSI structure available"},
+	{51, "EL2HLT", "level 2 halted"},
+	{52, "EBADE", "invalid exchange"},
+	{53, "EBADR", "invalid request descriptor"},
+	{54, "EXFULL", "exchange full"},
+	{55, "ENOANO", "no anode"},
+	{56, "EBADRQC", "invalid request code"},
+	{57, "EBADSLT", "invalid slot"},
+	{59, "EBFONT", "bad font file format"},
+	{60, "ENOSTR", "device not a stream"},
+	{61, "ENODATA", "no data available"},
+	{62, "ETIME", "timer expired"},
+	{63, "ENOSR", "out of streams resources"},
+	{64, "ENONET", "machine is not on the network"},
+	{65, "ENOPKG", "package not installed"},
+	{66, "EREMOTE", "object is remote"},
+	{67, "ENOLINK", "link has been severed"},
+	{68, "EADV", "advertise error"},
+	{69, "ESRMNT", "srmount error"},
+	{70, "ECOMM", "communication error on send"},
+	{71, "EPROTO", "protocol error"},
+	{72, "EMULTIHOP", "multihop attempted"},
+	{73, "EDOTDOT", "RFS specific error"},
+	{74, "EBADMSG", "bad message"},
+	{75, "EOVERFLOW", "value too large for defined data type"},
+	{76, "ENOTUNIQ", "name not unique on network"},
+	{77, "EBADFD", "file descriptor in bad state"},
+	{78, "EREMCHG", "remote address changed"},
+	{79, "ELIBACC", "can not access a needed shared library"},
+	{80, "ELIBBAD", "accessing a corrupted shared library"},
+	{81, "ELIBSCN", ".lib section in a.out corrupted"},
+	{82, "ELIBMAX", "attempting to link in too many shared libraries"},
+	{83, "ELIBEXEC", "cannot exec a shared library directly"},
+	{84, "EILSEQ", "invalid or incomplete multibyte or wide character"},
+	{85, "ERESTART", "interrupted system call should be restarted"},
+	{86, "ESTRPIPE", "streams pipe error"},
+	{87, "EUSERS", "too many users"},
+	{88, "ENOTSOCK", "socket operation on non-socket"},
+	{89, "EDESTADDRREQ", "destination address required"},
+	{90, "EMSGSIZE", "message too long"},
+	{91, "EPROTOTYPE", "protocol wrong type for socket"},
+	{92, "ENOPROTOOPT", "protocol not available"},
+	{93, "EPROTONOSUPPORT", "protocol not supported"},
+	{94, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{95, "ENOTSUP", "operation not supported"},
+	{96, "EPFNOSUPPORT", "protocol family not supported"},
+	{97, "EAFNOSUPPORT", "address family not supported by protocol"},
+	{98, "EADDRINUSE", "address already in use"},
+	{99, "EADDRNOTAVAIL", "cannot assign requested address"},
+	{100, "ENETDOWN", "network is down"},
+	{101, "ENETUNREACH", "network is unreachable"},
+	{102, "ENETRESET", "network dropped connection on reset"},
+	{103, "ECONNABORTED", "software caused connection abort"},
+	{104, "ECONNRESET", "connection reset by peer"},
+	{105, "ENOBUFS", "no buffer space available"},
+	{106, "EISCONN", "transport endpoint is already connected"},
+	{107, "ENOTCONN", "transport endpoint is not connected"},
+	{108, "ESHUTDOWN", "cannot send after transport endpoint shutdown"},
+	{109, "ETOOMANYREFS", "too many references: cannot splice"},
+	{110, "ETIMEDOUT", "connection timed out"},
+	{111, "ECONNREFUSED", "connection refused"},
+	{112, "EHOSTDOWN", "host is down"},
+	{113, "EHOSTUNREACH", "no route to host"},
+	{114, "EALREADY", "operation already in progress"},
+	{115, "EINPROGRESS", "operation now in progress"},
+	{116, "ESTALE", "stale file handle"},
+	{117, "EUCLEAN", "structure needs cleaning"},
+	{118, "ENOTNAM", "not a XENIX named type file"},
+	{119, "ENAVAIL", "no XENIX semaphores available"},
+	{120, "EISNAM", "is a named type file"},
+	{121, "EREMOTEIO", "remote I/O error"},
+	{122, "EDQUOT", "disk quota exceeded"},
+	{123, "ENOMEDIUM", "no medium found"},
+	{124, "EMEDIUMTYPE", "wrong medium type"},
+	{125, "ECANCELED", "operation canceled"},
+	{126, "ENOKEY", "required key not available"},
+	{127, "EKEYEXPIRED", "key has expired"},
+	{128, "EKEYREVOKED", "key has been revoked"},
+	{129, "EKEYREJECTED", "key was rejected by service"},
+	{130, "EOWNERDEAD", "owner died"},
+	{131, "ENOTRECOVERABLE", "state not recoverable"},
+	{132, "ERFKILL", "operation not possible due to RF-kill"},
+	{133, "EHWPOISON", "memory page has hardware error"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/breakpoint trap"},
+	{6, "SIGABRT", "aborted"},
+	{7, "SIGBUS", "bus error"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGUSR1", "user defined signal 1"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGUSR2", "user defined signal 2"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGSTKFLT", "stack fault"},
+	{17, "SIGCHLD", "child exited"},
+	{18, "SIGCONT", "continued"},
+	{19, "SIGSTOP", "stopped (signal)"},
+	{20, "SIGTSTP", "stopped"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGURG", "urgent I/O condition"},
+	{24, "SIGXCPU", "CPU time limit exceeded"},
+	{25, "SIGXFSZ", "file size limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window changed"},
+	{29, "SIGIO", "I/O possible"},
+	{30, "SIGPWR", "power failure"},
+	{31, "SIGSYS", "bad system call"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_mips.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_mips.go
new file mode 100644
index 000000000..ce3d9ae15
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_mips.go
@@ -0,0 +1,797 @@
+// mkerrors.sh -Wall -Werror -static -I/tmp/include
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build mips,linux
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	B1000000                         = 0x1008
+	B115200                          = 0x1002
+	B1152000                         = 0x1009
+	B1500000                         = 0x100a
+	B2000000                         = 0x100b
+	B230400                          = 0x1003
+	B2500000                         = 0x100c
+	B3000000                         = 0x100d
+	B3500000                         = 0x100e
+	B4000000                         = 0x100f
+	B460800                          = 0x1004
+	B500000                          = 0x1005
+	B57600                           = 0x1001
+	B576000                          = 0x1006
+	B921600                          = 0x1007
+	BLKBSZGET                        = 0x40041270
+	BLKBSZSET                        = 0x80041271
+	BLKFLSBUF                        = 0x20001261
+	BLKFRAGET                        = 0x20001265
+	BLKFRASET                        = 0x20001264
+	BLKGETSIZE                       = 0x20001260
+	BLKGETSIZE64                     = 0x40041272
+	BLKPBSZGET                       = 0x2000127b
+	BLKRAGET                         = 0x20001263
+	BLKRASET                         = 0x20001262
+	BLKROGET                         = 0x2000125e
+	BLKROSET                         = 0x2000125d
+	BLKRRPART                        = 0x2000125f
+	BLKSECTGET                       = 0x20001267
+	BLKSECTSET                       = 0x20001266
+	BLKSSZGET                        = 0x20001268
+	BOTHER                           = 0x1000
+	BS1                              = 0x2000
+	BSDLY                            = 0x2000
+	CBAUD                            = 0x100f
+	CBAUDEX                          = 0x1000
+	CIBAUD                           = 0x100f0000
+	CLOCAL                           = 0x800
+	CR1                              = 0x200
+	CR2                              = 0x400
+	CR3                              = 0x600
+	CRDLY                            = 0x600
+	CREAD                            = 0x80
+	CS6                              = 0x10
+	CS7                              = 0x20
+	CS8                              = 0x30
+	CSIZE                            = 0x30
+	CSTOPB                           = 0x40
+	ECHOCTL                          = 0x200
+	ECHOE                            = 0x10
+	ECHOK                            = 0x20
+	ECHOKE                           = 0x800
+	ECHONL                           = 0x40
+	ECHOPRT                          = 0x400
+	EFD_CLOEXEC                      = 0x80000
+	EFD_NONBLOCK                     = 0x80
+	EPOLL_CLOEXEC                    = 0x80000
+	EXTPROC                          = 0x10000
+	FF1                              = 0x8000
+	FFDLY                            = 0x8000
+	FICLONE                          = 0x80049409
+	FICLONERANGE                     = 0x8020940d
+	FLUSHO                           = 0x2000
+	FS_IOC_ENABLE_VERITY             = 0x80806685
+	FS_IOC_GETFLAGS                  = 0x40046601
+	FS_IOC_GET_ENCRYPTION_NONCE      = 0x4010661b
+	FS_IOC_GET_ENCRYPTION_POLICY     = 0x800c6615
+	FS_IOC_GET_ENCRYPTION_PWSALT     = 0x80106614
+	FS_IOC_SETFLAGS                  = 0x80046602
+	FS_IOC_SET_ENCRYPTION_POLICY     = 0x400c6613
+	F_GETLK                          = 0x21
+	F_GETLK64                        = 0x21
+	F_GETOWN                         = 0x17
+	F_RDLCK                          = 0x0
+	F_SETLK                          = 0x22
+	F_SETLK64                        = 0x22
+	F_SETLKW                         = 0x23
+	F_SETLKW64                       = 0x23
+	F_SETOWN                         = 0x18
+	F_UNLCK                          = 0x2
+	F_WRLCK                          = 0x1
+	HUPCL                            = 0x400
+	ICANON                           = 0x2
+	IEXTEN                           = 0x100
+	IN_CLOEXEC                       = 0x80000
+	IN_NONBLOCK                      = 0x80
+	IOCTL_VM_SOCKETS_GET_LOCAL_CID   = 0x200007b9
+	ISIG                             = 0x1
+	IUCLC                            = 0x200
+	IXOFF                            = 0x1000
+	IXON                             = 0x400
+	MAP_ANON                         = 0x800
+	MAP_ANONYMOUS                    = 0x800
+	MAP_DENYWRITE                    = 0x2000
+	MAP_EXECUTABLE                   = 0x4000
+	MAP_GROWSDOWN                    = 0x1000
+	MAP_HUGETLB                      = 0x80000
+	MAP_LOCKED                       = 0x8000
+	MAP_NONBLOCK                     = 0x20000
+	MAP_NORESERVE                    = 0x400
+	MAP_POPULATE                     = 0x10000
+	MAP_RENAME                       = 0x800
+	MAP_STACK                        = 0x40000
+	MCL_CURRENT                      = 0x1
+	MCL_FUTURE                       = 0x2
+	MCL_ONFAULT                      = 0x4
+	NFDBITS                          = 0x20
+	NLDLY                            = 0x100
+	NOFLSH                           = 0x80
+	NS_GET_NSTYPE                    = 0x2000b703
+	NS_GET_OWNER_UID                 = 0x2000b704
+	NS_GET_PARENT                    = 0x2000b702
+	NS_GET_USERNS                    = 0x2000b701
+	OLCUC                            = 0x2
+	ONLCR                            = 0x4
+	O_APPEND                         = 0x8
+	O_ASYNC                          = 0x1000
+	O_CLOEXEC                        = 0x80000
+	O_CREAT                          = 0x100
+	O_DIRECT                         = 0x8000
+	O_DIRECTORY                      = 0x10000
+	O_DSYNC                          = 0x10
+	O_EXCL                           = 0x400
+	O_FSYNC                          = 0x4010
+	O_LARGEFILE                      = 0x2000
+	O_NDELAY                         = 0x80
+	O_NOATIME                        = 0x40000
+	O_NOCTTY                         = 0x800
+	O_NOFOLLOW                       = 0x20000
+	O_NONBLOCK                       = 0x80
+	O_PATH                           = 0x200000
+	O_RSYNC                          = 0x4010
+	O_SYNC                           = 0x4010
+	O_TMPFILE                        = 0x410000
+	O_TRUNC                          = 0x200
+	PARENB                           = 0x100
+	PARODD                           = 0x200
+	PENDIN                           = 0x4000
+	PERF_EVENT_IOC_DISABLE           = 0x20002401
+	PERF_EVENT_IOC_ENABLE            = 0x20002400
+	PERF_EVENT_IOC_ID                = 0x40042407
+	PERF_EVENT_IOC_MODIFY_ATTRIBUTES = 0x8004240b
+	PERF_EVENT_IOC_PAUSE_OUTPUT      = 0x80042409
+	PERF_EVENT_IOC_PERIOD            = 0x80082404
+	PERF_EVENT_IOC_QUERY_BPF         = 0xc004240a
+	PERF_EVENT_IOC_REFRESH           = 0x20002402
+	PERF_EVENT_IOC_RESET             = 0x20002403
+	PERF_EVENT_IOC_SET_BPF           = 0x80042408
+	PERF_EVENT_IOC_SET_FILTER        = 0x80042406
+	PERF_EVENT_IOC_SET_OUTPUT        = 0x20002405
+	PPPIOCATTACH                     = 0x8004743d
+	PPPIOCATTCHAN                    = 0x80047438
+	PPPIOCCONNECT                    = 0x8004743a
+	PPPIOCDETACH                     = 0x8004743c
+	PPPIOCDISCONN                    = 0x20007439
+	PPPIOCGASYNCMAP                  = 0x40047458
+	PPPIOCGCHAN                      = 0x40047437
+	PPPIOCGDEBUG                     = 0x40047441
+	PPPIOCGFLAGS                     = 0x4004745a
+	PPPIOCGIDLE                      = 0x4008743f
+	PPPIOCGIDLE32                    = 0x4008743f
+	PPPIOCGIDLE64                    = 0x4010743f
+	PPPIOCGL2TPSTATS                 = 0x40487436
+	PPPIOCGMRU                       = 0x40047453
+	PPPIOCGRASYNCMAP                 = 0x40047455
+	PPPIOCGUNIT                      = 0x40047456
+	PPPIOCGXASYNCMAP                 = 0x40207450
+	PPPIOCSACTIVE                    = 0x80087446
+	PPPIOCSASYNCMAP                  = 0x80047457
+	PPPIOCSCOMPRESS                  = 0x800c744d
+	PPPIOCSDEBUG                     = 0x80047440
+	PPPIOCSFLAGS                     = 0x80047459
+	PPPIOCSMAXCID                    = 0x80047451
+	PPPIOCSMRRU                      = 0x8004743b
+	PPPIOCSMRU                       = 0x80047452
+	PPPIOCSNPMODE                    = 0x8008744b
+	PPPIOCSPASS                      = 0x80087447
+	PPPIOCSRASYNCMAP                 = 0x80047454
+	PPPIOCSXASYNCMAP                 = 0x8020744f
+	PPPIOCXFERUNIT                   = 0x2000744e
+	PR_SET_PTRACER_ANY               = 0xffffffff
+	PTRACE_GETFPREGS                 = 0xe
+	PTRACE_GET_THREAD_AREA           = 0x19
+	PTRACE_GET_THREAD_AREA_3264      = 0xc4
+	PTRACE_GET_WATCH_REGS            = 0xd0
+	PTRACE_OLDSETOPTIONS             = 0x15
+	PTRACE_PEEKDATA_3264             = 0xc1
+	PTRACE_PEEKTEXT_3264             = 0xc0
+	PTRACE_POKEDATA_3264             = 0xc3
+	PTRACE_POKETEXT_3264             = 0xc2
+	PTRACE_SETFPREGS                 = 0xf
+	PTRACE_SET_THREAD_AREA           = 0x1a
+	PTRACE_SET_WATCH_REGS            = 0xd1
+	RLIMIT_AS                        = 0x6
+	RLIMIT_MEMLOCK                   = 0x9
+	RLIMIT_NOFILE                    = 0x5
+	RLIMIT_NPROC                     = 0x8
+	RLIMIT_RSS                       = 0x7
+	RNDADDENTROPY                    = 0x80085203
+	RNDADDTOENTCNT                   = 0x80045201
+	RNDCLEARPOOL                     = 0x20005206
+	RNDGETENTCNT                     = 0x40045200
+	RNDGETPOOL                       = 0x40085202
+	RNDRESEEDCRNG                    = 0x20005207
+	RNDZAPENTCNT                     = 0x20005204
+	RTC_AIE_OFF                      = 0x20007002
+	RTC_AIE_ON                       = 0x20007001
+	RTC_ALM_READ                     = 0x40247008
+	RTC_ALM_SET                      = 0x80247007
+	RTC_EPOCH_READ                   = 0x4004700d
+	RTC_EPOCH_SET                    = 0x8004700e
+	RTC_IRQP_READ                    = 0x4004700b
+	RTC_IRQP_SET                     = 0x8004700c
+	RTC_PIE_OFF                      = 0x20007006
+	RTC_PIE_ON                       = 0x20007005
+	RTC_PLL_GET                      = 0x401c7011
+	RTC_PLL_SET                      = 0x801c7012
+	RTC_RD_TIME                      = 0x40247009
+	RTC_SET_TIME                     = 0x8024700a
+	RTC_UIE_OFF                      = 0x20007004
+	RTC_UIE_ON                       = 0x20007003
+	RTC_VL_CLR                       = 0x20007014
+	RTC_VL_READ                      = 0x40047013
+	RTC_WIE_OFF                      = 0x20007010
+	RTC_WIE_ON                       = 0x2000700f
+	RTC_WKALM_RD                     = 0x40287010
+	RTC_WKALM_SET                    = 0x8028700f
+	SCM_TIMESTAMPING                 = 0x25
+	SCM_TIMESTAMPING_OPT_STATS       = 0x36
+	SCM_TIMESTAMPING_PKTINFO         = 0x3a
+	SCM_TIMESTAMPNS                  = 0x23
+	SCM_TXTIME                       = 0x3d
+	SCM_WIFI_STATUS                  = 0x29
+	SFD_CLOEXEC                      = 0x80000
+	SFD_NONBLOCK                     = 0x80
+	SIOCATMARK                       = 0x40047307
+	SIOCGPGRP                        = 0x40047309
+	SIOCGSTAMPNS_NEW                 = 0x40108907
+	SIOCGSTAMP_NEW                   = 0x40108906
+	SIOCINQ                          = 0x467f
+	SIOCOUTQ                         = 0x7472
+	SIOCSPGRP                        = 0x80047308
+	SOCK_CLOEXEC                     = 0x80000
+	SOCK_DGRAM                       = 0x1
+	SOCK_NONBLOCK                    = 0x80
+	SOCK_STREAM                      = 0x2
+	SOL_SOCKET                       = 0xffff
+	SO_ACCEPTCONN                    = 0x1009
+	SO_ATTACH_BPF                    = 0x32
+	SO_ATTACH_REUSEPORT_CBPF         = 0x33
+	SO_ATTACH_REUSEPORT_EBPF         = 0x34
+	SO_BINDTODEVICE                  = 0x19
+	SO_BINDTOIFINDEX                 = 0x3e
+	SO_BPF_EXTENSIONS                = 0x30
+	SO_BROADCAST                     = 0x20
+	SO_BSDCOMPAT                     = 0xe
+	SO_BUSY_POLL                     = 0x2e
+	SO_CNX_ADVICE                    = 0x35
+	SO_COOKIE                        = 0x39
+	SO_DETACH_REUSEPORT_BPF          = 0x44
+	SO_DOMAIN                        = 0x1029
+	SO_DONTROUTE                     = 0x10
+	SO_ERROR                         = 0x1007
+	SO_INCOMING_CPU                  = 0x31
+	SO_INCOMING_NAPI_ID              = 0x38
+	SO_KEEPALIVE                     = 0x8
+	SO_LINGER                        = 0x80
+	SO_LOCK_FILTER                   = 0x2c
+	SO_MARK                          = 0x24
+	SO_MAX_PACING_RATE               = 0x2f
+	SO_MEMINFO                       = 0x37
+	SO_NOFCS                         = 0x2b
+	SO_OOBINLINE                     = 0x100
+	SO_PASSCRED                      = 0x11
+	SO_PASSSEC                       = 0x22
+	SO_PEEK_OFF                      = 0x2a
+	SO_PEERCRED                      = 0x12
+	SO_PEERGROUPS                    = 0x3b
+	SO_PEERSEC                       = 0x1e
+	SO_PROTOCOL                      = 0x1028
+	SO_RCVBUF                        = 0x1002
+	SO_RCVBUFFORCE                   = 0x21
+	SO_RCVLOWAT                      = 0x1004
+	SO_RCVTIMEO                      = 0x1006
+	SO_RCVTIMEO_NEW                  = 0x42
+	SO_RCVTIMEO_OLD                  = 0x1006
+	SO_REUSEADDR                     = 0x4
+	SO_REUSEPORT                     = 0x200
+	SO_RXQ_OVFL                      = 0x28
+	SO_SECURITY_AUTHENTICATION       = 0x16
+	SO_SECURITY_ENCRYPTION_NETWORK   = 0x18
+	SO_SECURITY_ENCRYPTION_TRANSPORT = 0x17
+	SO_SELECT_ERR_QUEUE              = 0x2d
+	SO_SNDBUF                        = 0x1001
+	SO_SNDBUFFORCE                   = 0x1f
+	SO_SNDLOWAT                      = 0x1003
+	SO_SNDTIMEO                      = 0x1005
+	SO_SNDTIMEO_NEW                  = 0x43
+	SO_SNDTIMEO_OLD                  = 0x1005
+	SO_STYLE                         = 0x1008
+	SO_TIMESTAMPING                  = 0x25
+	SO_TIMESTAMPING_NEW              = 0x41
+	SO_TIMESTAMPING_OLD              = 0x25
+	SO_TIMESTAMPNS                   = 0x23
+	SO_TIMESTAMPNS_NEW               = 0x40
+	SO_TIMESTAMPNS_OLD               = 0x23
+	SO_TIMESTAMP_NEW                 = 0x3f
+	SO_TXTIME                        = 0x3d
+	SO_TYPE                          = 0x1008
+	SO_WIFI_STATUS                   = 0x29
+	SO_ZEROCOPY                      = 0x3c
+	TAB1                             = 0x800
+	TAB2                             = 0x1000
+	TAB3                             = 0x1800
+	TABDLY                           = 0x1800
+	TCFLSH                           = 0x5407
+	TCGETA                           = 0x5401
+	TCGETS                           = 0x540d
+	TCGETS2                          = 0x4030542a
+	TCSAFLUSH                        = 0x5410
+	TCSBRK                           = 0x5405
+	TCSBRKP                          = 0x5486
+	TCSETA                           = 0x5402
+	TCSETAF                          = 0x5404
+	TCSETAW                          = 0x5403
+	TCSETS                           = 0x540e
+	TCSETS2                          = 0x8030542b
+	TCSETSF                          = 0x5410
+	TCSETSF2                         = 0x8030542d
+	TCSETSW                          = 0x540f
+	TCSETSW2                         = 0x8030542c
+	TCXONC                           = 0x5406
+	TFD_CLOEXEC                      = 0x80000
+	TFD_NONBLOCK                     = 0x80
+	TIOCCBRK                         = 0x5428
+	TIOCCONS                         = 0x80047478
+	TIOCEXCL                         = 0x740d
+	TIOCGDEV                         = 0x40045432
+	TIOCGETD                         = 0x7400
+	TIOCGETP                         = 0x7408
+	TIOCGEXCL                        = 0x40045440
+	TIOCGICOUNT                      = 0x5492
+	TIOCGISO7816                     = 0x40285442
+	TIOCGLCKTRMIOS                   = 0x548b
+	TIOCGLTC                         = 0x7474
+	TIOCGPGRP                        = 0x40047477
+	TIOCGPKT                         = 0x40045438
+	TIOCGPTLCK                       = 0x40045439
+	TIOCGPTN                         = 0x40045430
+	TIOCGPTPEER                      = 0x20005441
+	TIOCGRS485                       = 0x4020542e
+	TIOCGSERIAL                      = 0x5484
+	TIOCGSID                         = 0x7416
+	TIOCGSOFTCAR                     = 0x5481
+	TIOCGWINSZ                       = 0x40087468
+	TIOCINQ                          = 0x467f
+	TIOCLINUX                        = 0x5483
+	TIOCMBIC                         = 0x741c
+	TIOCMBIS                         = 0x741b
+	TIOCMGET                         = 0x741d
+	TIOCMIWAIT                       = 0x5491
+	TIOCMSET                         = 0x741a
+	TIOCM_CAR                        = 0x100
+	TIOCM_CD                         = 0x100
+	TIOCM_CTS                        = 0x40
+	TIOCM_DSR                        = 0x400
+	TIOCM_RI                         = 0x200
+	TIOCM_RNG                        = 0x200
+	TIOCM_SR                         = 0x20
+	TIOCM_ST                         = 0x10
+	TIOCNOTTY                        = 0x5471
+	TIOCNXCL                         = 0x740e
+	TIOCOUTQ                         = 0x7472
+	TIOCPKT                          = 0x5470
+	TIOCSBRK                         = 0x5427
+	TIOCSCTTY                        = 0x5480
+	TIOCSERCONFIG                    = 0x5488
+	TIOCSERGETLSR                    = 0x548e
+	TIOCSERGETMULTI                  = 0x548f
+	TIOCSERGSTRUCT                   = 0x548d
+	TIOCSERGWILD                     = 0x5489
+	TIOCSERSETMULTI                  = 0x5490
+	TIOCSERSWILD                     = 0x548a
+	TIOCSER_TEMT                     = 0x1
+	TIOCSETD                         = 0x7401
+	TIOCSETN                         = 0x740a
+	TIOCSETP                         = 0x7409
+	TIOCSIG                          = 0x80045436
+	TIOCSISO7816                     = 0xc0285443
+	TIOCSLCKTRMIOS                   = 0x548c
+	TIOCSLTC                         = 0x7475
+	TIOCSPGRP                        = 0x80047476
+	TIOCSPTLCK                       = 0x80045431
+	TIOCSRS485                       = 0xc020542f
+	TIOCSSERIAL                      = 0x5485
+	TIOCSSOFTCAR                     = 0x5482
+	TIOCSTI                          = 0x5472
+	TIOCSWINSZ                       = 0x80087467
+	TIOCVHANGUP                      = 0x5437
+	TOSTOP                           = 0x8000
+	TUNATTACHFILTER                  = 0x800854d5
+	TUNDETACHFILTER                  = 0x800854d6
+	TUNGETDEVNETNS                   = 0x200054e3
+	TUNGETFEATURES                   = 0x400454cf
+	TUNGETFILTER                     = 0x400854db
+	TUNGETIFF                        = 0x400454d2
+	TUNGETSNDBUF                     = 0x400454d3
+	TUNGETVNETBE                     = 0x400454df
+	TUNGETVNETHDRSZ                  = 0x400454d7
+	TUNGETVNETLE                     = 0x400454dd
+	TUNSETCARRIER                    = 0x800454e2
+	TUNSETDEBUG                      = 0x800454c9
+	TUNSETFILTEREBPF                 = 0x400454e1
+	TUNSETGROUP                      = 0x800454ce
+	TUNSETIFF                        = 0x800454ca
+	TUNSETIFINDEX                    = 0x800454da
+	TUNSETLINK                       = 0x800454cd
+	TUNSETNOCSUM                     = 0x800454c8
+	TUNSETOFFLOAD                    = 0x800454d0
+	TUNSETOWNER                      = 0x800454cc
+	TUNSETPERSIST                    = 0x800454cb
+	TUNSETQUEUE                      = 0x800454d9
+	TUNSETSNDBUF                     = 0x800454d4
+	TUNSETSTEERINGEBPF               = 0x400454e0
+	TUNSETTXFILTER                   = 0x800454d1
+	TUNSETVNETBE                     = 0x800454de
+	TUNSETVNETHDRSZ                  = 0x800454d8
+	TUNSETVNETLE                     = 0x800454dc
+	UBI_IOCATT                       = 0x80186f40
+	UBI_IOCDET                       = 0x80046f41
+	UBI_IOCEBCH                      = 0x80044f02
+	UBI_IOCEBER                      = 0x80044f01
+	UBI_IOCEBISMAP                   = 0x40044f05
+	UBI_IOCEBMAP                     = 0x80084f03
+	UBI_IOCEBUNMAP                   = 0x80044f04
+	UBI_IOCMKVOL                     = 0x80986f00
+	UBI_IOCRMVOL                     = 0x80046f01
+	UBI_IOCRNVOL                     = 0x91106f03
+	UBI_IOCRPEB                      = 0x80046f04
+	UBI_IOCRSVOL                     = 0x800c6f02
+	UBI_IOCSETVOLPROP                = 0x80104f06
+	UBI_IOCSPEB                      = 0x80046f05
+	UBI_IOCVOLCRBLK                  = 0x80804f07
+	UBI_IOCVOLRMBLK                  = 0x20004f08
+	UBI_IOCVOLUP                     = 0x80084f00
+	VDISCARD                         = 0xd
+	VEOF                             = 0x10
+	VEOL                             = 0x11
+	VEOL2                            = 0x6
+	VMIN                             = 0x4
+	VREPRINT                         = 0xc
+	VSTART                           = 0x8
+	VSTOP                            = 0x9
+	VSUSP                            = 0xa
+	VSWTC                            = 0x7
+	VSWTCH                           = 0x7
+	VT1                              = 0x4000
+	VTDLY                            = 0x4000
+	VTIME                            = 0x5
+	VWERASE                          = 0xe
+	WDIOC_GETBOOTSTATUS              = 0x40045702
+	WDIOC_GETPRETIMEOUT              = 0x40045709
+	WDIOC_GETSTATUS                  = 0x40045701
+	WDIOC_GETSUPPORT                 = 0x40285700
+	WDIOC_GETTEMP                    = 0x40045703
+	WDIOC_GETTIMELEFT                = 0x4004570a
+	WDIOC_GETTIMEOUT                 = 0x40045707
+	WDIOC_KEEPALIVE                  = 0x40045705
+	WDIOC_SETOPTIONS                 = 0x40045704
+	WORDSIZE                         = 0x20
+	XCASE                            = 0x4
+	XTABS                            = 0x1800
+)
+
+// Errors
+const (
+	EADDRINUSE      = syscall.Errno(0x7d)
+	EADDRNOTAVAIL   = syscall.Errno(0x7e)
+	EADV            = syscall.Errno(0x44)
+	EAFNOSUPPORT    = syscall.Errno(0x7c)
+	EALREADY        = syscall.Errno(0x95)
+	EBADE           = syscall.Errno(0x32)
+	EBADFD          = syscall.Errno(0x51)
+	EBADMSG         = syscall.Errno(0x4d)
+	EBADR           = syscall.Errno(0x33)
+	EBADRQC         = syscall.Errno(0x36)
+	EBADSLT         = syscall.Errno(0x37)
+	EBFONT          = syscall.Errno(0x3b)
+	ECANCELED       = syscall.Errno(0x9e)
+	ECHRNG          = syscall.Errno(0x25)
+	ECOMM           = syscall.Errno(0x46)
+	ECONNABORTED    = syscall.Errno(0x82)
+	ECONNREFUSED    = syscall.Errno(0x92)
+	ECONNRESET      = syscall.Errno(0x83)
+	EDEADLK         = syscall.Errno(0x2d)
+	EDEADLOCK       = syscall.Errno(0x38)
+	EDESTADDRREQ    = syscall.Errno(0x60)
+	EDOTDOT         = syscall.Errno(0x49)
+	EDQUOT          = syscall.Errno(0x46d)
+	EHOSTDOWN       = syscall.Errno(0x93)
+	EHOSTUNREACH    = syscall.Errno(0x94)
+	EHWPOISON       = syscall.Errno(0xa8)
+	EIDRM           = syscall.Errno(0x24)
+	EILSEQ          = syscall.Errno(0x58)
+	EINIT           = syscall.Errno(0x8d)
+	EINPROGRESS     = syscall.Errno(0x96)
+	EISCONN         = syscall.Errno(0x85)
+	EISNAM          = syscall.Errno(0x8b)
+	EKEYEXPIRED     = syscall.Errno(0xa2)
+	EKEYREJECTED    = syscall.Errno(0xa4)
+	EKEYREVOKED     = syscall.Errno(0xa3)
+	EL2HLT          = syscall.Errno(0x2c)
+	EL2NSYNC        = syscall.Errno(0x26)
+	EL3HLT          = syscall.Errno(0x27)
+	EL3RST          = syscall.Errno(0x28)
+	ELIBACC         = syscall.Errno(0x53)
+	ELIBBAD         = syscall.Errno(0x54)
+	ELIBEXEC        = syscall.Errno(0x57)
+	ELIBMAX         = syscall.Errno(0x56)
+	ELIBSCN         = syscall.Errno(0x55)
+	ELNRNG          = syscall.Errno(0x29)
+	ELOOP           = syscall.Errno(0x5a)
+	EMEDIUMTYPE     = syscall.Errno(0xa0)
+	EMSGSIZE        = syscall.Errno(0x61)
+	EMULTIHOP       = syscall.Errno(0x4a)
+	ENAMETOOLONG    = syscall.Errno(0x4e)
+	ENAVAIL         = syscall.Errno(0x8a)
+	ENETDOWN        = syscall.Errno(0x7f)
+	ENETRESET       = syscall.Errno(0x81)
+	ENETUNREACH     = syscall.Errno(0x80)
+	ENOANO          = syscall.Errno(0x35)
+	ENOBUFS         = syscall.Errno(0x84)
+	ENOCSI          = syscall.Errno(0x2b)
+	ENODATA         = syscall.Errno(0x3d)
+	ENOKEY          = syscall.Errno(0xa1)
+	ENOLCK          = syscall.Errno(0x2e)
+	ENOLINK         = syscall.Errno(0x43)
+	ENOMEDIUM       = syscall.Errno(0x9f)
+	ENOMSG          = syscall.Errno(0x23)
+	ENONET          = syscall.Errno(0x40)
+	ENOPKG          = syscall.Errno(0x41)
+	ENOPROTOOPT     = syscall.Errno(0x63)
+	ENOSR           = syscall.Errno(0x3f)
+	ENOSTR          = syscall.Errno(0x3c)
+	ENOSYS          = syscall.Errno(0x59)
+	ENOTCONN        = syscall.Errno(0x86)
+	ENOTEMPTY       = syscall.Errno(0x5d)
+	ENOTNAM         = syscall.Errno(0x89)
+	ENOTRECOVERABLE = syscall.Errno(0xa6)
+	ENOTSOCK        = syscall.Errno(0x5f)
+	ENOTSUP         = syscall.Errno(0x7a)
+	ENOTUNIQ        = syscall.Errno(0x50)
+	EOPNOTSUPP      = syscall.Errno(0x7a)
+	EOVERFLOW       = syscall.Errno(0x4f)
+	EOWNERDEAD      = syscall.Errno(0xa5)
+	EPFNOSUPPORT    = syscall.Errno(0x7b)
+	EPROTO          = syscall.Errno(0x47)
+	EPROTONOSUPPORT = syscall.Errno(0x78)
+	EPROTOTYPE      = syscall.Errno(0x62)
+	EREMCHG         = syscall.Errno(0x52)
+	EREMDEV         = syscall.Errno(0x8e)
+	EREMOTE         = syscall.Errno(0x42)
+	EREMOTEIO       = syscall.Errno(0x8c)
+	ERESTART        = syscall.Errno(0x5b)
+	ERFKILL         = syscall.Errno(0xa7)
+	ESHUTDOWN       = syscall.Errno(0x8f)
+	ESOCKTNOSUPPORT = syscall.Errno(0x79)
+	ESRMNT          = syscall.Errno(0x45)
+	ESTALE          = syscall.Errno(0x97)
+	ESTRPIPE        = syscall.Errno(0x5c)
+	ETIME           = syscall.Errno(0x3e)
+	ETIMEDOUT       = syscall.Errno(0x91)
+	ETOOMANYREFS    = syscall.Errno(0x90)
+	EUCLEAN         = syscall.Errno(0x87)
+	EUNATCH         = syscall.Errno(0x2a)
+	EUSERS          = syscall.Errno(0x5e)
+	EXFULL          = syscall.Errno(0x34)
+)
+
+// Signals
+const (
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x12)
+	SIGCLD    = syscall.Signal(0x12)
+	SIGCONT   = syscall.Signal(0x19)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGIO     = syscall.Signal(0x16)
+	SIGPOLL   = syscall.Signal(0x16)
+	SIGPROF   = syscall.Signal(0x1d)
+	SIGPWR    = syscall.Signal(0x13)
+	SIGSTOP   = syscall.Signal(0x17)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTSTP   = syscall.Signal(0x18)
+	SIGTTIN   = syscall.Signal(0x1a)
+	SIGTTOU   = syscall.Signal(0x1b)
+	SIGURG    = syscall.Signal(0x15)
+	SIGUSR1   = syscall.Signal(0x10)
+	SIGUSR2   = syscall.Signal(0x11)
+	SIGVTALRM = syscall.Signal(0x1c)
+	SIGWINCH  = syscall.Signal(0x14)
+	SIGXCPU   = syscall.Signal(0x1e)
+	SIGXFSZ   = syscall.Signal(0x1f)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "no such device or address"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EAGAIN", "resource temporarily unavailable"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device or resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "invalid cross-device link"},
+	{19, "ENODEV", "no such device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "numerical result out of range"},
+	{35, "ENOMSG", "no message of desired type"},
+	{36, "EIDRM", "identifier removed"},
+	{37, "ECHRNG", "channel number out of range"},
+	{38, "EL2NSYNC", "level 2 not synchronized"},
+	{39, "EL3HLT", "level 3 halted"},
+	{40, "EL3RST", "level 3 reset"},
+	{41, "ELNRNG", "link number out of range"},
+	{42, "EUNATCH", "protocol driver not attached"},
+	{43, "ENOCSI", "no CSI structure available"},
+	{44, "EL2HLT", "level 2 halted"},
+	{45, "EDEADLK", "resource deadlock avoided"},
+	{46, "ENOLCK", "no locks available"},
+	{50, "EBADE", "invalid exchange"},
+	{51, "EBADR", "invalid request descriptor"},
+	{52, "EXFULL", "exchange full"},
+	{53, "ENOANO", "no anode"},
+	{54, "EBADRQC", "invalid request code"},
+	{55, "EBADSLT", "invalid slot"},
+	{56, "EDEADLOCK", "file locking deadlock error"},
+	{59, "EBFONT", "bad font file format"},
+	{60, "ENOSTR", "device not a stream"},
+	{61, "ENODATA", "no data available"},
+	{62, "ETIME", "timer expired"},
+	{63, "ENOSR", "out of streams resources"},
+	{64, "ENONET", "machine is not on the network"},
+	{65, "ENOPKG", "package not installed"},
+	{66, "EREMOTE", "object is remote"},
+	{67, "ENOLINK", "link has been severed"},
+	{68, "EADV", "advertise error"},
+	{69, "ESRMNT", "srmount error"},
+	{70, "ECOMM", "communication error on send"},
+	{71, "EPROTO", "protocol error"},
+	{73, "EDOTDOT", "RFS specific error"},
+	{74, "EMULTIHOP", "multihop attempted"},
+	{77, "EBADMSG", "bad message"},
+	{78, "ENAMETOOLONG", "file name too long"},
+	{79, "EOVERFLOW", "value too large for defined data type"},
+	{80, "ENOTUNIQ", "name not unique on network"},
+	{81, "EBADFD", "file descriptor in bad state"},
+	{82, "EREMCHG", "remote address changed"},
+	{83, "ELIBACC", "can not access a needed shared library"},
+	{84, "ELIBBAD", "accessing a corrupted shared library"},
+	{85, "ELIBSCN", ".lib section in a.out corrupted"},
+	{86, "ELIBMAX", "attempting to link in too many shared libraries"},
+	{87, "ELIBEXEC", "cannot exec a shared library directly"},
+	{88, "EILSEQ", "invalid or incomplete multibyte or wide character"},
+	{89, "ENOSYS", "function not implemented"},
+	{90, "ELOOP", "too many levels of symbolic links"},
+	{91, "ERESTART", "interrupted system call should be restarted"},
+	{92, "ESTRPIPE", "streams pipe error"},
+	{93, "ENOTEMPTY", "directory not empty"},
+	{94, "EUSERS", "too many users"},
+	{95, "ENOTSOCK", "socket operation on non-socket"},
+	{96, "EDESTADDRREQ", "destination address required"},
+	{97, "EMSGSIZE", "message too long"},
+	{98, "EPROTOTYPE", "protocol wrong type for socket"},
+	{99, "ENOPROTOOPT", "protocol not available"},
+	{120, "EPROTONOSUPPORT", "protocol not supported"},
+	{121, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{122, "ENOTSUP", "operation not supported"},
+	{123, "EPFNOSUPPORT", "protocol family not supported"},
+	{124, "EAFNOSUPPORT", "address family not supported by protocol"},
+	{125, "EADDRINUSE", "address already in use"},
+	{126, "EADDRNOTAVAIL", "cannot assign requested address"},
+	{127, "ENETDOWN", "network is down"},
+	{128, "ENETUNREACH", "network is unreachable"},
+	{129, "ENETRESET", "network dropped connection on reset"},
+	{130, "ECONNABORTED", "software caused connection abort"},
+	{131, "ECONNRESET", "connection reset by peer"},
+	{132, "ENOBUFS", "no buffer space available"},
+	{133, "EISCONN", "transport endpoint is already connected"},
+	{134, "ENOTCONN", "transport endpoint is not connected"},
+	{135, "EUCLEAN", "structure needs cleaning"},
+	{137, "ENOTNAM", "not a XENIX named type file"},
+	{138, "ENAVAIL", "no XENIX semaphores available"},
+	{139, "EISNAM", "is a named type file"},
+	{140, "EREMOTEIO", "remote I/O error"},
+	{141, "EINIT", "unknown error 141"},
+	{142, "EREMDEV", "unknown error 142"},
+	{143, "ESHUTDOWN", "cannot send after transport endpoint shutdown"},
+	{144, "ETOOMANYREFS", "too many references: cannot splice"},
+	{145, "ETIMEDOUT", "connection timed out"},
+	{146, "ECONNREFUSED", "connection refused"},
+	{147, "EHOSTDOWN", "host is down"},
+	{148, "EHOSTUNREACH", "no route to host"},
+	{149, "EALREADY", "operation already in progress"},
+	{150, "EINPROGRESS", "operation now in progress"},
+	{151, "ESTALE", "stale file handle"},
+	{158, "ECANCELED", "operation canceled"},
+	{159, "ENOMEDIUM", "no medium found"},
+	{160, "EMEDIUMTYPE", "wrong medium type"},
+	{161, "ENOKEY", "required key not available"},
+	{162, "EKEYEXPIRED", "key has expired"},
+	{163, "EKEYREVOKED", "key has been revoked"},
+	{164, "EKEYREJECTED", "key was rejected by service"},
+	{165, "EOWNERDEAD", "owner died"},
+	{166, "ENOTRECOVERABLE", "state not recoverable"},
+	{167, "ERFKILL", "operation not possible due to RF-kill"},
+	{168, "EHWPOISON", "memory page has hardware error"},
+	{1133, "EDQUOT", "disk quota exceeded"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/breakpoint trap"},
+	{6, "SIGABRT", "aborted"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGUSR1", "user defined signal 1"},
+	{17, "SIGUSR2", "user defined signal 2"},
+	{18, "SIGCHLD", "child exited"},
+	{19, "SIGPWR", "power failure"},
+	{20, "SIGWINCH", "window changed"},
+	{21, "SIGURG", "urgent I/O condition"},
+	{22, "SIGIO", "I/O possible"},
+	{23, "SIGSTOP", "stopped (signal)"},
+	{24, "SIGTSTP", "stopped"},
+	{25, "SIGCONT", "continued"},
+	{26, "SIGTTIN", "stopped (tty input)"},
+	{27, "SIGTTOU", "stopped (tty output)"},
+	{28, "SIGVTALRM", "virtual timer expired"},
+	{29, "SIGPROF", "profiling timer expired"},
+	{30, "SIGXCPU", "CPU time limit exceeded"},
+	{31, "SIGXFSZ", "file size limit exceeded"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_mips64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_mips64.go
new file mode 100644
index 000000000..7a85215ce
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_mips64.go
@@ -0,0 +1,797 @@
+// mkerrors.sh -Wall -Werror -static -I/tmp/include
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build mips64,linux
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	B1000000                         = 0x1008
+	B115200                          = 0x1002
+	B1152000                         = 0x1009
+	B1500000                         = 0x100a
+	B2000000                         = 0x100b
+	B230400                          = 0x1003
+	B2500000                         = 0x100c
+	B3000000                         = 0x100d
+	B3500000                         = 0x100e
+	B4000000                         = 0x100f
+	B460800                          = 0x1004
+	B500000                          = 0x1005
+	B57600                           = 0x1001
+	B576000                          = 0x1006
+	B921600                          = 0x1007
+	BLKBSZGET                        = 0x40081270
+	BLKBSZSET                        = 0x80081271
+	BLKFLSBUF                        = 0x20001261
+	BLKFRAGET                        = 0x20001265
+	BLKFRASET                        = 0x20001264
+	BLKGETSIZE                       = 0x20001260
+	BLKGETSIZE64                     = 0x40081272
+	BLKPBSZGET                       = 0x2000127b
+	BLKRAGET                         = 0x20001263
+	BLKRASET                         = 0x20001262
+	BLKROGET                         = 0x2000125e
+	BLKROSET                         = 0x2000125d
+	BLKRRPART                        = 0x2000125f
+	BLKSECTGET                       = 0x20001267
+	BLKSECTSET                       = 0x20001266
+	BLKSSZGET                        = 0x20001268
+	BOTHER                           = 0x1000
+	BS1                              = 0x2000
+	BSDLY                            = 0x2000
+	CBAUD                            = 0x100f
+	CBAUDEX                          = 0x1000
+	CIBAUD                           = 0x100f0000
+	CLOCAL                           = 0x800
+	CR1                              = 0x200
+	CR2                              = 0x400
+	CR3                              = 0x600
+	CRDLY                            = 0x600
+	CREAD                            = 0x80
+	CS6                              = 0x10
+	CS7                              = 0x20
+	CS8                              = 0x30
+	CSIZE                            = 0x30
+	CSTOPB                           = 0x40
+	ECHOCTL                          = 0x200
+	ECHOE                            = 0x10
+	ECHOK                            = 0x20
+	ECHOKE                           = 0x800
+	ECHONL                           = 0x40
+	ECHOPRT                          = 0x400
+	EFD_CLOEXEC                      = 0x80000
+	EFD_NONBLOCK                     = 0x80
+	EPOLL_CLOEXEC                    = 0x80000
+	EXTPROC                          = 0x10000
+	FF1                              = 0x8000
+	FFDLY                            = 0x8000
+	FICLONE                          = 0x80049409
+	FICLONERANGE                     = 0x8020940d
+	FLUSHO                           = 0x2000
+	FS_IOC_ENABLE_VERITY             = 0x80806685
+	FS_IOC_GETFLAGS                  = 0x40086601
+	FS_IOC_GET_ENCRYPTION_NONCE      = 0x4010661b
+	FS_IOC_GET_ENCRYPTION_POLICY     = 0x800c6615
+	FS_IOC_GET_ENCRYPTION_PWSALT     = 0x80106614
+	FS_IOC_SETFLAGS                  = 0x80086602
+	FS_IOC_SET_ENCRYPTION_POLICY     = 0x400c6613
+	F_GETLK                          = 0xe
+	F_GETLK64                        = 0xe
+	F_GETOWN                         = 0x17
+	F_RDLCK                          = 0x0
+	F_SETLK                          = 0x6
+	F_SETLK64                        = 0x6
+	F_SETLKW                         = 0x7
+	F_SETLKW64                       = 0x7
+	F_SETOWN                         = 0x18
+	F_UNLCK                          = 0x2
+	F_WRLCK                          = 0x1
+	HUPCL                            = 0x400
+	ICANON                           = 0x2
+	IEXTEN                           = 0x100
+	IN_CLOEXEC                       = 0x80000
+	IN_NONBLOCK                      = 0x80
+	IOCTL_VM_SOCKETS_GET_LOCAL_CID   = 0x200007b9
+	ISIG                             = 0x1
+	IUCLC                            = 0x200
+	IXOFF                            = 0x1000
+	IXON                             = 0x400
+	MAP_ANON                         = 0x800
+	MAP_ANONYMOUS                    = 0x800
+	MAP_DENYWRITE                    = 0x2000
+	MAP_EXECUTABLE                   = 0x4000
+	MAP_GROWSDOWN                    = 0x1000
+	MAP_HUGETLB                      = 0x80000
+	MAP_LOCKED                       = 0x8000
+	MAP_NONBLOCK                     = 0x20000
+	MAP_NORESERVE                    = 0x400
+	MAP_POPULATE                     = 0x10000
+	MAP_RENAME                       = 0x800
+	MAP_STACK                        = 0x40000
+	MCL_CURRENT                      = 0x1
+	MCL_FUTURE                       = 0x2
+	MCL_ONFAULT                      = 0x4
+	NFDBITS                          = 0x40
+	NLDLY                            = 0x100
+	NOFLSH                           = 0x80
+	NS_GET_NSTYPE                    = 0x2000b703
+	NS_GET_OWNER_UID                 = 0x2000b704
+	NS_GET_PARENT                    = 0x2000b702
+	NS_GET_USERNS                    = 0x2000b701
+	OLCUC                            = 0x2
+	ONLCR                            = 0x4
+	O_APPEND                         = 0x8
+	O_ASYNC                          = 0x1000
+	O_CLOEXEC                        = 0x80000
+	O_CREAT                          = 0x100
+	O_DIRECT                         = 0x8000
+	O_DIRECTORY                      = 0x10000
+	O_DSYNC                          = 0x10
+	O_EXCL                           = 0x400
+	O_FSYNC                          = 0x4010
+	O_LARGEFILE                      = 0x0
+	O_NDELAY                         = 0x80
+	O_NOATIME                        = 0x40000
+	O_NOCTTY                         = 0x800
+	O_NOFOLLOW                       = 0x20000
+	O_NONBLOCK                       = 0x80
+	O_PATH                           = 0x200000
+	O_RSYNC                          = 0x4010
+	O_SYNC                           = 0x4010
+	O_TMPFILE                        = 0x410000
+	O_TRUNC                          = 0x200
+	PARENB                           = 0x100
+	PARODD                           = 0x200
+	PENDIN                           = 0x4000
+	PERF_EVENT_IOC_DISABLE           = 0x20002401
+	PERF_EVENT_IOC_ENABLE            = 0x20002400
+	PERF_EVENT_IOC_ID                = 0x40082407
+	PERF_EVENT_IOC_MODIFY_ATTRIBUTES = 0x8008240b
+	PERF_EVENT_IOC_PAUSE_OUTPUT      = 0x80042409
+	PERF_EVENT_IOC_PERIOD            = 0x80082404
+	PERF_EVENT_IOC_QUERY_BPF         = 0xc008240a
+	PERF_EVENT_IOC_REFRESH           = 0x20002402
+	PERF_EVENT_IOC_RESET             = 0x20002403
+	PERF_EVENT_IOC_SET_BPF           = 0x80042408
+	PERF_EVENT_IOC_SET_FILTER        = 0x80082406
+	PERF_EVENT_IOC_SET_OUTPUT        = 0x20002405
+	PPPIOCATTACH                     = 0x8004743d
+	PPPIOCATTCHAN                    = 0x80047438
+	PPPIOCCONNECT                    = 0x8004743a
+	PPPIOCDETACH                     = 0x8004743c
+	PPPIOCDISCONN                    = 0x20007439
+	PPPIOCGASYNCMAP                  = 0x40047458
+	PPPIOCGCHAN                      = 0x40047437
+	PPPIOCGDEBUG                     = 0x40047441
+	PPPIOCGFLAGS                     = 0x4004745a
+	PPPIOCGIDLE                      = 0x4010743f
+	PPPIOCGIDLE32                    = 0x4008743f
+	PPPIOCGIDLE64                    = 0x4010743f
+	PPPIOCGL2TPSTATS                 = 0x40487436
+	PPPIOCGMRU                       = 0x40047453
+	PPPIOCGRASYNCMAP                 = 0x40047455
+	PPPIOCGUNIT                      = 0x40047456
+	PPPIOCGXASYNCMAP                 = 0x40207450
+	PPPIOCSACTIVE                    = 0x80107446
+	PPPIOCSASYNCMAP                  = 0x80047457
+	PPPIOCSCOMPRESS                  = 0x8010744d
+	PPPIOCSDEBUG                     = 0x80047440
+	PPPIOCSFLAGS                     = 0x80047459
+	PPPIOCSMAXCID                    = 0x80047451
+	PPPIOCSMRRU                      = 0x8004743b
+	PPPIOCSMRU                       = 0x80047452
+	PPPIOCSNPMODE                    = 0x8008744b
+	PPPIOCSPASS                      = 0x80107447
+	PPPIOCSRASYNCMAP                 = 0x80047454
+	PPPIOCSXASYNCMAP                 = 0x8020744f
+	PPPIOCXFERUNIT                   = 0x2000744e
+	PR_SET_PTRACER_ANY               = 0xffffffffffffffff
+	PTRACE_GETFPREGS                 = 0xe
+	PTRACE_GET_THREAD_AREA           = 0x19
+	PTRACE_GET_THREAD_AREA_3264      = 0xc4
+	PTRACE_GET_WATCH_REGS            = 0xd0
+	PTRACE_OLDSETOPTIONS             = 0x15
+	PTRACE_PEEKDATA_3264             = 0xc1
+	PTRACE_PEEKTEXT_3264             = 0xc0
+	PTRACE_POKEDATA_3264             = 0xc3
+	PTRACE_POKETEXT_3264             = 0xc2
+	PTRACE_SETFPREGS                 = 0xf
+	PTRACE_SET_THREAD_AREA           = 0x1a
+	PTRACE_SET_WATCH_REGS            = 0xd1
+	RLIMIT_AS                        = 0x6
+	RLIMIT_MEMLOCK                   = 0x9
+	RLIMIT_NOFILE                    = 0x5
+	RLIMIT_NPROC                     = 0x8
+	RLIMIT_RSS                       = 0x7
+	RNDADDENTROPY                    = 0x80085203
+	RNDADDTOENTCNT                   = 0x80045201
+	RNDCLEARPOOL                     = 0x20005206
+	RNDGETENTCNT                     = 0x40045200
+	RNDGETPOOL                       = 0x40085202
+	RNDRESEEDCRNG                    = 0x20005207
+	RNDZAPENTCNT                     = 0x20005204
+	RTC_AIE_OFF                      = 0x20007002
+	RTC_AIE_ON                       = 0x20007001
+	RTC_ALM_READ                     = 0x40247008
+	RTC_ALM_SET                      = 0x80247007
+	RTC_EPOCH_READ                   = 0x4008700d
+	RTC_EPOCH_SET                    = 0x8008700e
+	RTC_IRQP_READ                    = 0x4008700b
+	RTC_IRQP_SET                     = 0x8008700c
+	RTC_PIE_OFF                      = 0x20007006
+	RTC_PIE_ON                       = 0x20007005
+	RTC_PLL_GET                      = 0x40207011
+	RTC_PLL_SET                      = 0x80207012
+	RTC_RD_TIME                      = 0x40247009
+	RTC_SET_TIME                     = 0x8024700a
+	RTC_UIE_OFF                      = 0x20007004
+	RTC_UIE_ON                       = 0x20007003
+	RTC_VL_CLR                       = 0x20007014
+	RTC_VL_READ                      = 0x40047013
+	RTC_WIE_OFF                      = 0x20007010
+	RTC_WIE_ON                       = 0x2000700f
+	RTC_WKALM_RD                     = 0x40287010
+	RTC_WKALM_SET                    = 0x8028700f
+	SCM_TIMESTAMPING                 = 0x25
+	SCM_TIMESTAMPING_OPT_STATS       = 0x36
+	SCM_TIMESTAMPING_PKTINFO         = 0x3a
+	SCM_TIMESTAMPNS                  = 0x23
+	SCM_TXTIME                       = 0x3d
+	SCM_WIFI_STATUS                  = 0x29
+	SFD_CLOEXEC                      = 0x80000
+	SFD_NONBLOCK                     = 0x80
+	SIOCATMARK                       = 0x40047307
+	SIOCGPGRP                        = 0x40047309
+	SIOCGSTAMPNS_NEW                 = 0x40108907
+	SIOCGSTAMP_NEW                   = 0x40108906
+	SIOCINQ                          = 0x467f
+	SIOCOUTQ                         = 0x7472
+	SIOCSPGRP                        = 0x80047308
+	SOCK_CLOEXEC                     = 0x80000
+	SOCK_DGRAM                       = 0x1
+	SOCK_NONBLOCK                    = 0x80
+	SOCK_STREAM                      = 0x2
+	SOL_SOCKET                       = 0xffff
+	SO_ACCEPTCONN                    = 0x1009
+	SO_ATTACH_BPF                    = 0x32
+	SO_ATTACH_REUSEPORT_CBPF         = 0x33
+	SO_ATTACH_REUSEPORT_EBPF         = 0x34
+	SO_BINDTODEVICE                  = 0x19
+	SO_BINDTOIFINDEX                 = 0x3e
+	SO_BPF_EXTENSIONS                = 0x30
+	SO_BROADCAST                     = 0x20
+	SO_BSDCOMPAT                     = 0xe
+	SO_BUSY_POLL                     = 0x2e
+	SO_CNX_ADVICE                    = 0x35
+	SO_COOKIE                        = 0x39
+	SO_DETACH_REUSEPORT_BPF          = 0x44
+	SO_DOMAIN                        = 0x1029
+	SO_DONTROUTE                     = 0x10
+	SO_ERROR                         = 0x1007
+	SO_INCOMING_CPU                  = 0x31
+	SO_INCOMING_NAPI_ID              = 0x38
+	SO_KEEPALIVE                     = 0x8
+	SO_LINGER                        = 0x80
+	SO_LOCK_FILTER                   = 0x2c
+	SO_MARK                          = 0x24
+	SO_MAX_PACING_RATE               = 0x2f
+	SO_MEMINFO                       = 0x37
+	SO_NOFCS                         = 0x2b
+	SO_OOBINLINE                     = 0x100
+	SO_PASSCRED                      = 0x11
+	SO_PASSSEC                       = 0x22
+	SO_PEEK_OFF                      = 0x2a
+	SO_PEERCRED                      = 0x12
+	SO_PEERGROUPS                    = 0x3b
+	SO_PEERSEC                       = 0x1e
+	SO_PROTOCOL                      = 0x1028
+	SO_RCVBUF                        = 0x1002
+	SO_RCVBUFFORCE                   = 0x21
+	SO_RCVLOWAT                      = 0x1004
+	SO_RCVTIMEO                      = 0x1006
+	SO_RCVTIMEO_NEW                  = 0x42
+	SO_RCVTIMEO_OLD                  = 0x1006
+	SO_REUSEADDR                     = 0x4
+	SO_REUSEPORT                     = 0x200
+	SO_RXQ_OVFL                      = 0x28
+	SO_SECURITY_AUTHENTICATION       = 0x16
+	SO_SECURITY_ENCRYPTION_NETWORK   = 0x18
+	SO_SECURITY_ENCRYPTION_TRANSPORT = 0x17
+	SO_SELECT_ERR_QUEUE              = 0x2d
+	SO_SNDBUF                        = 0x1001
+	SO_SNDBUFFORCE                   = 0x1f
+	SO_SNDLOWAT                      = 0x1003
+	SO_SNDTIMEO                      = 0x1005
+	SO_SNDTIMEO_NEW                  = 0x43
+	SO_SNDTIMEO_OLD                  = 0x1005
+	SO_STYLE                         = 0x1008
+	SO_TIMESTAMPING                  = 0x25
+	SO_TIMESTAMPING_NEW              = 0x41
+	SO_TIMESTAMPING_OLD              = 0x25
+	SO_TIMESTAMPNS                   = 0x23
+	SO_TIMESTAMPNS_NEW               = 0x40
+	SO_TIMESTAMPNS_OLD               = 0x23
+	SO_TIMESTAMP_NEW                 = 0x3f
+	SO_TXTIME                        = 0x3d
+	SO_TYPE                          = 0x1008
+	SO_WIFI_STATUS                   = 0x29
+	SO_ZEROCOPY                      = 0x3c
+	TAB1                             = 0x800
+	TAB2                             = 0x1000
+	TAB3                             = 0x1800
+	TABDLY                           = 0x1800
+	TCFLSH                           = 0x5407
+	TCGETA                           = 0x5401
+	TCGETS                           = 0x540d
+	TCGETS2                          = 0x4030542a
+	TCSAFLUSH                        = 0x5410
+	TCSBRK                           = 0x5405
+	TCSBRKP                          = 0x5486
+	TCSETA                           = 0x5402
+	TCSETAF                          = 0x5404
+	TCSETAW                          = 0x5403
+	TCSETS                           = 0x540e
+	TCSETS2                          = 0x8030542b
+	TCSETSF                          = 0x5410
+	TCSETSF2                         = 0x8030542d
+	TCSETSW                          = 0x540f
+	TCSETSW2                         = 0x8030542c
+	TCXONC                           = 0x5406
+	TFD_CLOEXEC                      = 0x80000
+	TFD_NONBLOCK                     = 0x80
+	TIOCCBRK                         = 0x5428
+	TIOCCONS                         = 0x80047478
+	TIOCEXCL                         = 0x740d
+	TIOCGDEV                         = 0x40045432
+	TIOCGETD                         = 0x7400
+	TIOCGETP                         = 0x7408
+	TIOCGEXCL                        = 0x40045440
+	TIOCGICOUNT                      = 0x5492
+	TIOCGISO7816                     = 0x40285442
+	TIOCGLCKTRMIOS                   = 0x548b
+	TIOCGLTC                         = 0x7474
+	TIOCGPGRP                        = 0x40047477
+	TIOCGPKT                         = 0x40045438
+	TIOCGPTLCK                       = 0x40045439
+	TIOCGPTN                         = 0x40045430
+	TIOCGPTPEER                      = 0x20005441
+	TIOCGRS485                       = 0x4020542e
+	TIOCGSERIAL                      = 0x5484
+	TIOCGSID                         = 0x7416
+	TIOCGSOFTCAR                     = 0x5481
+	TIOCGWINSZ                       = 0x40087468
+	TIOCINQ                          = 0x467f
+	TIOCLINUX                        = 0x5483
+	TIOCMBIC                         = 0x741c
+	TIOCMBIS                         = 0x741b
+	TIOCMGET                         = 0x741d
+	TIOCMIWAIT                       = 0x5491
+	TIOCMSET                         = 0x741a
+	TIOCM_CAR                        = 0x100
+	TIOCM_CD                         = 0x100
+	TIOCM_CTS                        = 0x40
+	TIOCM_DSR                        = 0x400
+	TIOCM_RI                         = 0x200
+	TIOCM_RNG                        = 0x200
+	TIOCM_SR                         = 0x20
+	TIOCM_ST                         = 0x10
+	TIOCNOTTY                        = 0x5471
+	TIOCNXCL                         = 0x740e
+	TIOCOUTQ                         = 0x7472
+	TIOCPKT                          = 0x5470
+	TIOCSBRK                         = 0x5427
+	TIOCSCTTY                        = 0x5480
+	TIOCSERCONFIG                    = 0x5488
+	TIOCSERGETLSR                    = 0x548e
+	TIOCSERGETMULTI                  = 0x548f
+	TIOCSERGSTRUCT                   = 0x548d
+	TIOCSERGWILD                     = 0x5489
+	TIOCSERSETMULTI                  = 0x5490
+	TIOCSERSWILD                     = 0x548a
+	TIOCSER_TEMT                     = 0x1
+	TIOCSETD                         = 0x7401
+	TIOCSETN                         = 0x740a
+	TIOCSETP                         = 0x7409
+	TIOCSIG                          = 0x80045436
+	TIOCSISO7816                     = 0xc0285443
+	TIOCSLCKTRMIOS                   = 0x548c
+	TIOCSLTC                         = 0x7475
+	TIOCSPGRP                        = 0x80047476
+	TIOCSPTLCK                       = 0x80045431
+	TIOCSRS485                       = 0xc020542f
+	TIOCSSERIAL                      = 0x5485
+	TIOCSSOFTCAR                     = 0x5482
+	TIOCSTI                          = 0x5472
+	TIOCSWINSZ                       = 0x80087467
+	TIOCVHANGUP                      = 0x5437
+	TOSTOP                           = 0x8000
+	TUNATTACHFILTER                  = 0x801054d5
+	TUNDETACHFILTER                  = 0x801054d6
+	TUNGETDEVNETNS                   = 0x200054e3
+	TUNGETFEATURES                   = 0x400454cf
+	TUNGETFILTER                     = 0x401054db
+	TUNGETIFF                        = 0x400454d2
+	TUNGETSNDBUF                     = 0x400454d3
+	TUNGETVNETBE                     = 0x400454df
+	TUNGETVNETHDRSZ                  = 0x400454d7
+	TUNGETVNETLE                     = 0x400454dd
+	TUNSETCARRIER                    = 0x800454e2
+	TUNSETDEBUG                      = 0x800454c9
+	TUNSETFILTEREBPF                 = 0x400454e1
+	TUNSETGROUP                      = 0x800454ce
+	TUNSETIFF                        = 0x800454ca
+	TUNSETIFINDEX                    = 0x800454da
+	TUNSETLINK                       = 0x800454cd
+	TUNSETNOCSUM                     = 0x800454c8
+	TUNSETOFFLOAD                    = 0x800454d0
+	TUNSETOWNER                      = 0x800454cc
+	TUNSETPERSIST                    = 0x800454cb
+	TUNSETQUEUE                      = 0x800454d9
+	TUNSETSNDBUF                     = 0x800454d4
+	TUNSETSTEERINGEBPF               = 0x400454e0
+	TUNSETTXFILTER                   = 0x800454d1
+	TUNSETVNETBE                     = 0x800454de
+	TUNSETVNETHDRSZ                  = 0x800454d8
+	TUNSETVNETLE                     = 0x800454dc
+	UBI_IOCATT                       = 0x80186f40
+	UBI_IOCDET                       = 0x80046f41
+	UBI_IOCEBCH                      = 0x80044f02
+	UBI_IOCEBER                      = 0x80044f01
+	UBI_IOCEBISMAP                   = 0x40044f05
+	UBI_IOCEBMAP                     = 0x80084f03
+	UBI_IOCEBUNMAP                   = 0x80044f04
+	UBI_IOCMKVOL                     = 0x80986f00
+	UBI_IOCRMVOL                     = 0x80046f01
+	UBI_IOCRNVOL                     = 0x91106f03
+	UBI_IOCRPEB                      = 0x80046f04
+	UBI_IOCRSVOL                     = 0x800c6f02
+	UBI_IOCSETVOLPROP                = 0x80104f06
+	UBI_IOCSPEB                      = 0x80046f05
+	UBI_IOCVOLCRBLK                  = 0x80804f07
+	UBI_IOCVOLRMBLK                  = 0x20004f08
+	UBI_IOCVOLUP                     = 0x80084f00
+	VDISCARD                         = 0xd
+	VEOF                             = 0x10
+	VEOL                             = 0x11
+	VEOL2                            = 0x6
+	VMIN                             = 0x4
+	VREPRINT                         = 0xc
+	VSTART                           = 0x8
+	VSTOP                            = 0x9
+	VSUSP                            = 0xa
+	VSWTC                            = 0x7
+	VSWTCH                           = 0x7
+	VT1                              = 0x4000
+	VTDLY                            = 0x4000
+	VTIME                            = 0x5
+	VWERASE                          = 0xe
+	WDIOC_GETBOOTSTATUS              = 0x40045702
+	WDIOC_GETPRETIMEOUT              = 0x40045709
+	WDIOC_GETSTATUS                  = 0x40045701
+	WDIOC_GETSUPPORT                 = 0x40285700
+	WDIOC_GETTEMP                    = 0x40045703
+	WDIOC_GETTIMELEFT                = 0x4004570a
+	WDIOC_GETTIMEOUT                 = 0x40045707
+	WDIOC_KEEPALIVE                  = 0x40045705
+	WDIOC_SETOPTIONS                 = 0x40045704
+	WORDSIZE                         = 0x40
+	XCASE                            = 0x4
+	XTABS                            = 0x1800
+)
+
+// Errors
+const (
+	EADDRINUSE      = syscall.Errno(0x7d)
+	EADDRNOTAVAIL   = syscall.Errno(0x7e)
+	EADV            = syscall.Errno(0x44)
+	EAFNOSUPPORT    = syscall.Errno(0x7c)
+	EALREADY        = syscall.Errno(0x95)
+	EBADE           = syscall.Errno(0x32)
+	EBADFD          = syscall.Errno(0x51)
+	EBADMSG         = syscall.Errno(0x4d)
+	EBADR           = syscall.Errno(0x33)
+	EBADRQC         = syscall.Errno(0x36)
+	EBADSLT         = syscall.Errno(0x37)
+	EBFONT          = syscall.Errno(0x3b)
+	ECANCELED       = syscall.Errno(0x9e)
+	ECHRNG          = syscall.Errno(0x25)
+	ECOMM           = syscall.Errno(0x46)
+	ECONNABORTED    = syscall.Errno(0x82)
+	ECONNREFUSED    = syscall.Errno(0x92)
+	ECONNRESET      = syscall.Errno(0x83)
+	EDEADLK         = syscall.Errno(0x2d)
+	EDEADLOCK       = syscall.Errno(0x38)
+	EDESTADDRREQ    = syscall.Errno(0x60)
+	EDOTDOT         = syscall.Errno(0x49)
+	EDQUOT          = syscall.Errno(0x46d)
+	EHOSTDOWN       = syscall.Errno(0x93)
+	EHOSTUNREACH    = syscall.Errno(0x94)
+	EHWPOISON       = syscall.Errno(0xa8)
+	EIDRM           = syscall.Errno(0x24)
+	EILSEQ          = syscall.Errno(0x58)
+	EINIT           = syscall.Errno(0x8d)
+	EINPROGRESS     = syscall.Errno(0x96)
+	EISCONN         = syscall.Errno(0x85)
+	EISNAM          = syscall.Errno(0x8b)
+	EKEYEXPIRED     = syscall.Errno(0xa2)
+	EKEYREJECTED    = syscall.Errno(0xa4)
+	EKEYREVOKED     = syscall.Errno(0xa3)
+	EL2HLT          = syscall.Errno(0x2c)
+	EL2NSYNC        = syscall.Errno(0x26)
+	EL3HLT          = syscall.Errno(0x27)
+	EL3RST          = syscall.Errno(0x28)
+	ELIBACC         = syscall.Errno(0x53)
+	ELIBBAD         = syscall.Errno(0x54)
+	ELIBEXEC        = syscall.Errno(0x57)
+	ELIBMAX         = syscall.Errno(0x56)
+	ELIBSCN         = syscall.Errno(0x55)
+	ELNRNG          = syscall.Errno(0x29)
+	ELOOP           = syscall.Errno(0x5a)
+	EMEDIUMTYPE     = syscall.Errno(0xa0)
+	EMSGSIZE        = syscall.Errno(0x61)
+	EMULTIHOP       = syscall.Errno(0x4a)
+	ENAMETOOLONG    = syscall.Errno(0x4e)
+	ENAVAIL         = syscall.Errno(0x8a)
+	ENETDOWN        = syscall.Errno(0x7f)
+	ENETRESET       = syscall.Errno(0x81)
+	ENETUNREACH     = syscall.Errno(0x80)
+	ENOANO          = syscall.Errno(0x35)
+	ENOBUFS         = syscall.Errno(0x84)
+	ENOCSI          = syscall.Errno(0x2b)
+	ENODATA         = syscall.Errno(0x3d)
+	ENOKEY          = syscall.Errno(0xa1)
+	ENOLCK          = syscall.Errno(0x2e)
+	ENOLINK         = syscall.Errno(0x43)
+	ENOMEDIUM       = syscall.Errno(0x9f)
+	ENOMSG          = syscall.Errno(0x23)
+	ENONET          = syscall.Errno(0x40)
+	ENOPKG          = syscall.Errno(0x41)
+	ENOPROTOOPT     = syscall.Errno(0x63)
+	ENOSR           = syscall.Errno(0x3f)
+	ENOSTR          = syscall.Errno(0x3c)
+	ENOSYS          = syscall.Errno(0x59)
+	ENOTCONN        = syscall.Errno(0x86)
+	ENOTEMPTY       = syscall.Errno(0x5d)
+	ENOTNAM         = syscall.Errno(0x89)
+	ENOTRECOVERABLE = syscall.Errno(0xa6)
+	ENOTSOCK        = syscall.Errno(0x5f)
+	ENOTSUP         = syscall.Errno(0x7a)
+	ENOTUNIQ        = syscall.Errno(0x50)
+	EOPNOTSUPP      = syscall.Errno(0x7a)
+	EOVERFLOW       = syscall.Errno(0x4f)
+	EOWNERDEAD      = syscall.Errno(0xa5)
+	EPFNOSUPPORT    = syscall.Errno(0x7b)
+	EPROTO          = syscall.Errno(0x47)
+	EPROTONOSUPPORT = syscall.Errno(0x78)
+	EPROTOTYPE      = syscall.Errno(0x62)
+	EREMCHG         = syscall.Errno(0x52)
+	EREMDEV         = syscall.Errno(0x8e)
+	EREMOTE         = syscall.Errno(0x42)
+	EREMOTEIO       = syscall.Errno(0x8c)
+	ERESTART        = syscall.Errno(0x5b)
+	ERFKILL         = syscall.Errno(0xa7)
+	ESHUTDOWN       = syscall.Errno(0x8f)
+	ESOCKTNOSUPPORT = syscall.Errno(0x79)
+	ESRMNT          = syscall.Errno(0x45)
+	ESTALE          = syscall.Errno(0x97)
+	ESTRPIPE        = syscall.Errno(0x5c)
+	ETIME           = syscall.Errno(0x3e)
+	ETIMEDOUT       = syscall.Errno(0x91)
+	ETOOMANYREFS    = syscall.Errno(0x90)
+	EUCLEAN         = syscall.Errno(0x87)
+	EUNATCH         = syscall.Errno(0x2a)
+	EUSERS          = syscall.Errno(0x5e)
+	EXFULL          = syscall.Errno(0x34)
+)
+
+// Signals
+const (
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x12)
+	SIGCLD    = syscall.Signal(0x12)
+	SIGCONT   = syscall.Signal(0x19)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGIO     = syscall.Signal(0x16)
+	SIGPOLL   = syscall.Signal(0x16)
+	SIGPROF   = syscall.Signal(0x1d)
+	SIGPWR    = syscall.Signal(0x13)
+	SIGSTOP   = syscall.Signal(0x17)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTSTP   = syscall.Signal(0x18)
+	SIGTTIN   = syscall.Signal(0x1a)
+	SIGTTOU   = syscall.Signal(0x1b)
+	SIGURG    = syscall.Signal(0x15)
+	SIGUSR1   = syscall.Signal(0x10)
+	SIGUSR2   = syscall.Signal(0x11)
+	SIGVTALRM = syscall.Signal(0x1c)
+	SIGWINCH  = syscall.Signal(0x14)
+	SIGXCPU   = syscall.Signal(0x1e)
+	SIGXFSZ   = syscall.Signal(0x1f)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "no such device or address"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EAGAIN", "resource temporarily unavailable"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device or resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "invalid cross-device link"},
+	{19, "ENODEV", "no such device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "numerical result out of range"},
+	{35, "ENOMSG", "no message of desired type"},
+	{36, "EIDRM", "identifier removed"},
+	{37, "ECHRNG", "channel number out of range"},
+	{38, "EL2NSYNC", "level 2 not synchronized"},
+	{39, "EL3HLT", "level 3 halted"},
+	{40, "EL3RST", "level 3 reset"},
+	{41, "ELNRNG", "link number out of range"},
+	{42, "EUNATCH", "protocol driver not attached"},
+	{43, "ENOCSI", "no CSI structure available"},
+	{44, "EL2HLT", "level 2 halted"},
+	{45, "EDEADLK", "resource deadlock avoided"},
+	{46, "ENOLCK", "no locks available"},
+	{50, "EBADE", "invalid exchange"},
+	{51, "EBADR", "invalid request descriptor"},
+	{52, "EXFULL", "exchange full"},
+	{53, "ENOANO", "no anode"},
+	{54, "EBADRQC", "invalid request code"},
+	{55, "EBADSLT", "invalid slot"},
+	{56, "EDEADLOCK", "file locking deadlock error"},
+	{59, "EBFONT", "bad font file format"},
+	{60, "ENOSTR", "device not a stream"},
+	{61, "ENODATA", "no data available"},
+	{62, "ETIME", "timer expired"},
+	{63, "ENOSR", "out of streams resources"},
+	{64, "ENONET", "machine is not on the network"},
+	{65, "ENOPKG", "package not installed"},
+	{66, "EREMOTE", "object is remote"},
+	{67, "ENOLINK", "link has been severed"},
+	{68, "EADV", "advertise error"},
+	{69, "ESRMNT", "srmount error"},
+	{70, "ECOMM", "communication error on send"},
+	{71, "EPROTO", "protocol error"},
+	{73, "EDOTDOT", "RFS specific error"},
+	{74, "EMULTIHOP", "multihop attempted"},
+	{77, "EBADMSG", "bad message"},
+	{78, "ENAMETOOLONG", "file name too long"},
+	{79, "EOVERFLOW", "value too large for defined data type"},
+	{80, "ENOTUNIQ", "name not unique on network"},
+	{81, "EBADFD", "file descriptor in bad state"},
+	{82, "EREMCHG", "remote address changed"},
+	{83, "ELIBACC", "can not access a needed shared library"},
+	{84, "ELIBBAD", "accessing a corrupted shared library"},
+	{85, "ELIBSCN", ".lib section in a.out corrupted"},
+	{86, "ELIBMAX", "attempting to link in too many shared libraries"},
+	{87, "ELIBEXEC", "cannot exec a shared library directly"},
+	{88, "EILSEQ", "invalid or incomplete multibyte or wide character"},
+	{89, "ENOSYS", "function not implemented"},
+	{90, "ELOOP", "too many levels of symbolic links"},
+	{91, "ERESTART", "interrupted system call should be restarted"},
+	{92, "ESTRPIPE", "streams pipe error"},
+	{93, "ENOTEMPTY", "directory not empty"},
+	{94, "EUSERS", "too many users"},
+	{95, "ENOTSOCK", "socket operation on non-socket"},
+	{96, "EDESTADDRREQ", "destination address required"},
+	{97, "EMSGSIZE", "message too long"},
+	{98, "EPROTOTYPE", "protocol wrong type for socket"},
+	{99, "ENOPROTOOPT", "protocol not available"},
+	{120, "EPROTONOSUPPORT", "protocol not supported"},
+	{121, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{122, "ENOTSUP", "operation not supported"},
+	{123, "EPFNOSUPPORT", "protocol family not supported"},
+	{124, "EAFNOSUPPORT", "address family not supported by protocol"},
+	{125, "EADDRINUSE", "address already in use"},
+	{126, "EADDRNOTAVAIL", "cannot assign requested address"},
+	{127, "ENETDOWN", "network is down"},
+	{128, "ENETUNREACH", "network is unreachable"},
+	{129, "ENETRESET", "network dropped connection on reset"},
+	{130, "ECONNABORTED", "software caused connection abort"},
+	{131, "ECONNRESET", "connection reset by peer"},
+	{132, "ENOBUFS", "no buffer space available"},
+	{133, "EISCONN", "transport endpoint is already connected"},
+	{134, "ENOTCONN", "transport endpoint is not connected"},
+	{135, "EUCLEAN", "structure needs cleaning"},
+	{137, "ENOTNAM", "not a XENIX named type file"},
+	{138, "ENAVAIL", "no XENIX semaphores available"},
+	{139, "EISNAM", "is a named type file"},
+	{140, "EREMOTEIO", "remote I/O error"},
+	{141, "EINIT", "unknown error 141"},
+	{142, "EREMDEV", "unknown error 142"},
+	{143, "ESHUTDOWN", "cannot send after transport endpoint shutdown"},
+	{144, "ETOOMANYREFS", "too many references: cannot splice"},
+	{145, "ETIMEDOUT", "connection timed out"},
+	{146, "ECONNREFUSED", "connection refused"},
+	{147, "EHOSTDOWN", "host is down"},
+	{148, "EHOSTUNREACH", "no route to host"},
+	{149, "EALREADY", "operation already in progress"},
+	{150, "EINPROGRESS", "operation now in progress"},
+	{151, "ESTALE", "stale file handle"},
+	{158, "ECANCELED", "operation canceled"},
+	{159, "ENOMEDIUM", "no medium found"},
+	{160, "EMEDIUMTYPE", "wrong medium type"},
+	{161, "ENOKEY", "required key not available"},
+	{162, "EKEYEXPIRED", "key has expired"},
+	{163, "EKEYREVOKED", "key has been revoked"},
+	{164, "EKEYREJECTED", "key was rejected by service"},
+	{165, "EOWNERDEAD", "owner died"},
+	{166, "ENOTRECOVERABLE", "state not recoverable"},
+	{167, "ERFKILL", "operation not possible due to RF-kill"},
+	{168, "EHWPOISON", "memory page has hardware error"},
+	{1133, "EDQUOT", "disk quota exceeded"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/breakpoint trap"},
+	{6, "SIGABRT", "aborted"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGUSR1", "user defined signal 1"},
+	{17, "SIGUSR2", "user defined signal 2"},
+	{18, "SIGCHLD", "child exited"},
+	{19, "SIGPWR", "power failure"},
+	{20, "SIGWINCH", "window changed"},
+	{21, "SIGURG", "urgent I/O condition"},
+	{22, "SIGIO", "I/O possible"},
+	{23, "SIGSTOP", "stopped (signal)"},
+	{24, "SIGTSTP", "stopped"},
+	{25, "SIGCONT", "continued"},
+	{26, "SIGTTIN", "stopped (tty input)"},
+	{27, "SIGTTOU", "stopped (tty output)"},
+	{28, "SIGVTALRM", "virtual timer expired"},
+	{29, "SIGPROF", "profiling timer expired"},
+	{30, "SIGXCPU", "CPU time limit exceeded"},
+	{31, "SIGXFSZ", "file size limit exceeded"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_mips64le.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_mips64le.go
new file mode 100644
index 000000000..07d4cc1bd
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_mips64le.go
@@ -0,0 +1,797 @@
+// mkerrors.sh -Wall -Werror -static -I/tmp/include
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build mips64le,linux
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	B1000000                         = 0x1008
+	B115200                          = 0x1002
+	B1152000                         = 0x1009
+	B1500000                         = 0x100a
+	B2000000                         = 0x100b
+	B230400                          = 0x1003
+	B2500000                         = 0x100c
+	B3000000                         = 0x100d
+	B3500000                         = 0x100e
+	B4000000                         = 0x100f
+	B460800                          = 0x1004
+	B500000                          = 0x1005
+	B57600                           = 0x1001
+	B576000                          = 0x1006
+	B921600                          = 0x1007
+	BLKBSZGET                        = 0x40081270
+	BLKBSZSET                        = 0x80081271
+	BLKFLSBUF                        = 0x20001261
+	BLKFRAGET                        = 0x20001265
+	BLKFRASET                        = 0x20001264
+	BLKGETSIZE                       = 0x20001260
+	BLKGETSIZE64                     = 0x40081272
+	BLKPBSZGET                       = 0x2000127b
+	BLKRAGET                         = 0x20001263
+	BLKRASET                         = 0x20001262
+	BLKROGET                         = 0x2000125e
+	BLKROSET                         = 0x2000125d
+	BLKRRPART                        = 0x2000125f
+	BLKSECTGET                       = 0x20001267
+	BLKSECTSET                       = 0x20001266
+	BLKSSZGET                        = 0x20001268
+	BOTHER                           = 0x1000
+	BS1                              = 0x2000
+	BSDLY                            = 0x2000
+	CBAUD                            = 0x100f
+	CBAUDEX                          = 0x1000
+	CIBAUD                           = 0x100f0000
+	CLOCAL                           = 0x800
+	CR1                              = 0x200
+	CR2                              = 0x400
+	CR3                              = 0x600
+	CRDLY                            = 0x600
+	CREAD                            = 0x80
+	CS6                              = 0x10
+	CS7                              = 0x20
+	CS8                              = 0x30
+	CSIZE                            = 0x30
+	CSTOPB                           = 0x40
+	ECHOCTL                          = 0x200
+	ECHOE                            = 0x10
+	ECHOK                            = 0x20
+	ECHOKE                           = 0x800
+	ECHONL                           = 0x40
+	ECHOPRT                          = 0x400
+	EFD_CLOEXEC                      = 0x80000
+	EFD_NONBLOCK                     = 0x80
+	EPOLL_CLOEXEC                    = 0x80000
+	EXTPROC                          = 0x10000
+	FF1                              = 0x8000
+	FFDLY                            = 0x8000
+	FICLONE                          = 0x80049409
+	FICLONERANGE                     = 0x8020940d
+	FLUSHO                           = 0x2000
+	FS_IOC_ENABLE_VERITY             = 0x80806685
+	FS_IOC_GETFLAGS                  = 0x40086601
+	FS_IOC_GET_ENCRYPTION_NONCE      = 0x4010661b
+	FS_IOC_GET_ENCRYPTION_POLICY     = 0x800c6615
+	FS_IOC_GET_ENCRYPTION_PWSALT     = 0x80106614
+	FS_IOC_SETFLAGS                  = 0x80086602
+	FS_IOC_SET_ENCRYPTION_POLICY     = 0x400c6613
+	F_GETLK                          = 0xe
+	F_GETLK64                        = 0xe
+	F_GETOWN                         = 0x17
+	F_RDLCK                          = 0x0
+	F_SETLK                          = 0x6
+	F_SETLK64                        = 0x6
+	F_SETLKW                         = 0x7
+	F_SETLKW64                       = 0x7
+	F_SETOWN                         = 0x18
+	F_UNLCK                          = 0x2
+	F_WRLCK                          = 0x1
+	HUPCL                            = 0x400
+	ICANON                           = 0x2
+	IEXTEN                           = 0x100
+	IN_CLOEXEC                       = 0x80000
+	IN_NONBLOCK                      = 0x80
+	IOCTL_VM_SOCKETS_GET_LOCAL_CID   = 0x200007b9
+	ISIG                             = 0x1
+	IUCLC                            = 0x200
+	IXOFF                            = 0x1000
+	IXON                             = 0x400
+	MAP_ANON                         = 0x800
+	MAP_ANONYMOUS                    = 0x800
+	MAP_DENYWRITE                    = 0x2000
+	MAP_EXECUTABLE                   = 0x4000
+	MAP_GROWSDOWN                    = 0x1000
+	MAP_HUGETLB                      = 0x80000
+	MAP_LOCKED                       = 0x8000
+	MAP_NONBLOCK                     = 0x20000
+	MAP_NORESERVE                    = 0x400
+	MAP_POPULATE                     = 0x10000
+	MAP_RENAME                       = 0x800
+	MAP_STACK                        = 0x40000
+	MCL_CURRENT                      = 0x1
+	MCL_FUTURE                       = 0x2
+	MCL_ONFAULT                      = 0x4
+	NFDBITS                          = 0x40
+	NLDLY                            = 0x100
+	NOFLSH                           = 0x80
+	NS_GET_NSTYPE                    = 0x2000b703
+	NS_GET_OWNER_UID                 = 0x2000b704
+	NS_GET_PARENT                    = 0x2000b702
+	NS_GET_USERNS                    = 0x2000b701
+	OLCUC                            = 0x2
+	ONLCR                            = 0x4
+	O_APPEND                         = 0x8
+	O_ASYNC                          = 0x1000
+	O_CLOEXEC                        = 0x80000
+	O_CREAT                          = 0x100
+	O_DIRECT                         = 0x8000
+	O_DIRECTORY                      = 0x10000
+	O_DSYNC                          = 0x10
+	O_EXCL                           = 0x400
+	O_FSYNC                          = 0x4010
+	O_LARGEFILE                      = 0x0
+	O_NDELAY                         = 0x80
+	O_NOATIME                        = 0x40000
+	O_NOCTTY                         = 0x800
+	O_NOFOLLOW                       = 0x20000
+	O_NONBLOCK                       = 0x80
+	O_PATH                           = 0x200000
+	O_RSYNC                          = 0x4010
+	O_SYNC                           = 0x4010
+	O_TMPFILE                        = 0x410000
+	O_TRUNC                          = 0x200
+	PARENB                           = 0x100
+	PARODD                           = 0x200
+	PENDIN                           = 0x4000
+	PERF_EVENT_IOC_DISABLE           = 0x20002401
+	PERF_EVENT_IOC_ENABLE            = 0x20002400
+	PERF_EVENT_IOC_ID                = 0x40082407
+	PERF_EVENT_IOC_MODIFY_ATTRIBUTES = 0x8008240b
+	PERF_EVENT_IOC_PAUSE_OUTPUT      = 0x80042409
+	PERF_EVENT_IOC_PERIOD            = 0x80082404
+	PERF_EVENT_IOC_QUERY_BPF         = 0xc008240a
+	PERF_EVENT_IOC_REFRESH           = 0x20002402
+	PERF_EVENT_IOC_RESET             = 0x20002403
+	PERF_EVENT_IOC_SET_BPF           = 0x80042408
+	PERF_EVENT_IOC_SET_FILTER        = 0x80082406
+	PERF_EVENT_IOC_SET_OUTPUT        = 0x20002405
+	PPPIOCATTACH                     = 0x8004743d
+	PPPIOCATTCHAN                    = 0x80047438
+	PPPIOCCONNECT                    = 0x8004743a
+	PPPIOCDETACH                     = 0x8004743c
+	PPPIOCDISCONN                    = 0x20007439
+	PPPIOCGASYNCMAP                  = 0x40047458
+	PPPIOCGCHAN                      = 0x40047437
+	PPPIOCGDEBUG                     = 0x40047441
+	PPPIOCGFLAGS                     = 0x4004745a
+	PPPIOCGIDLE                      = 0x4010743f
+	PPPIOCGIDLE32                    = 0x4008743f
+	PPPIOCGIDLE64                    = 0x4010743f
+	PPPIOCGL2TPSTATS                 = 0x40487436
+	PPPIOCGMRU                       = 0x40047453
+	PPPIOCGRASYNCMAP                 = 0x40047455
+	PPPIOCGUNIT                      = 0x40047456
+	PPPIOCGXASYNCMAP                 = 0x40207450
+	PPPIOCSACTIVE                    = 0x80107446
+	PPPIOCSASYNCMAP                  = 0x80047457
+	PPPIOCSCOMPRESS                  = 0x8010744d
+	PPPIOCSDEBUG                     = 0x80047440
+	PPPIOCSFLAGS                     = 0x80047459
+	PPPIOCSMAXCID                    = 0x80047451
+	PPPIOCSMRRU                      = 0x8004743b
+	PPPIOCSMRU                       = 0x80047452
+	PPPIOCSNPMODE                    = 0x8008744b
+	PPPIOCSPASS                      = 0x80107447
+	PPPIOCSRASYNCMAP                 = 0x80047454
+	PPPIOCSXASYNCMAP                 = 0x8020744f
+	PPPIOCXFERUNIT                   = 0x2000744e
+	PR_SET_PTRACER_ANY               = 0xffffffffffffffff
+	PTRACE_GETFPREGS                 = 0xe
+	PTRACE_GET_THREAD_AREA           = 0x19
+	PTRACE_GET_THREAD_AREA_3264      = 0xc4
+	PTRACE_GET_WATCH_REGS            = 0xd0
+	PTRACE_OLDSETOPTIONS             = 0x15
+	PTRACE_PEEKDATA_3264             = 0xc1
+	PTRACE_PEEKTEXT_3264             = 0xc0
+	PTRACE_POKEDATA_3264             = 0xc3
+	PTRACE_POKETEXT_3264             = 0xc2
+	PTRACE_SETFPREGS                 = 0xf
+	PTRACE_SET_THREAD_AREA           = 0x1a
+	PTRACE_SET_WATCH_REGS            = 0xd1
+	RLIMIT_AS                        = 0x6
+	RLIMIT_MEMLOCK                   = 0x9
+	RLIMIT_NOFILE                    = 0x5
+	RLIMIT_NPROC                     = 0x8
+	RLIMIT_RSS                       = 0x7
+	RNDADDENTROPY                    = 0x80085203
+	RNDADDTOENTCNT                   = 0x80045201
+	RNDCLEARPOOL                     = 0x20005206
+	RNDGETENTCNT                     = 0x40045200
+	RNDGETPOOL                       = 0x40085202
+	RNDRESEEDCRNG                    = 0x20005207
+	RNDZAPENTCNT                     = 0x20005204
+	RTC_AIE_OFF                      = 0x20007002
+	RTC_AIE_ON                       = 0x20007001
+	RTC_ALM_READ                     = 0x40247008
+	RTC_ALM_SET                      = 0x80247007
+	RTC_EPOCH_READ                   = 0x4008700d
+	RTC_EPOCH_SET                    = 0x8008700e
+	RTC_IRQP_READ                    = 0x4008700b
+	RTC_IRQP_SET                     = 0x8008700c
+	RTC_PIE_OFF                      = 0x20007006
+	RTC_PIE_ON                       = 0x20007005
+	RTC_PLL_GET                      = 0x40207011
+	RTC_PLL_SET                      = 0x80207012
+	RTC_RD_TIME                      = 0x40247009
+	RTC_SET_TIME                     = 0x8024700a
+	RTC_UIE_OFF                      = 0x20007004
+	RTC_UIE_ON                       = 0x20007003
+	RTC_VL_CLR                       = 0x20007014
+	RTC_VL_READ                      = 0x40047013
+	RTC_WIE_OFF                      = 0x20007010
+	RTC_WIE_ON                       = 0x2000700f
+	RTC_WKALM_RD                     = 0x40287010
+	RTC_WKALM_SET                    = 0x8028700f
+	SCM_TIMESTAMPING                 = 0x25
+	SCM_TIMESTAMPING_OPT_STATS       = 0x36
+	SCM_TIMESTAMPING_PKTINFO         = 0x3a
+	SCM_TIMESTAMPNS                  = 0x23
+	SCM_TXTIME                       = 0x3d
+	SCM_WIFI_STATUS                  = 0x29
+	SFD_CLOEXEC                      = 0x80000
+	SFD_NONBLOCK                     = 0x80
+	SIOCATMARK                       = 0x40047307
+	SIOCGPGRP                        = 0x40047309
+	SIOCGSTAMPNS_NEW                 = 0x40108907
+	SIOCGSTAMP_NEW                   = 0x40108906
+	SIOCINQ                          = 0x467f
+	SIOCOUTQ                         = 0x7472
+	SIOCSPGRP                        = 0x80047308
+	SOCK_CLOEXEC                     = 0x80000
+	SOCK_DGRAM                       = 0x1
+	SOCK_NONBLOCK                    = 0x80
+	SOCK_STREAM                      = 0x2
+	SOL_SOCKET                       = 0xffff
+	SO_ACCEPTCONN                    = 0x1009
+	SO_ATTACH_BPF                    = 0x32
+	SO_ATTACH_REUSEPORT_CBPF         = 0x33
+	SO_ATTACH_REUSEPORT_EBPF         = 0x34
+	SO_BINDTODEVICE                  = 0x19
+	SO_BINDTOIFINDEX                 = 0x3e
+	SO_BPF_EXTENSIONS                = 0x30
+	SO_BROADCAST                     = 0x20
+	SO_BSDCOMPAT                     = 0xe
+	SO_BUSY_POLL                     = 0x2e
+	SO_CNX_ADVICE                    = 0x35
+	SO_COOKIE                        = 0x39
+	SO_DETACH_REUSEPORT_BPF          = 0x44
+	SO_DOMAIN                        = 0x1029
+	SO_DONTROUTE                     = 0x10
+	SO_ERROR                         = 0x1007
+	SO_INCOMING_CPU                  = 0x31
+	SO_INCOMING_NAPI_ID              = 0x38
+	SO_KEEPALIVE                     = 0x8
+	SO_LINGER                        = 0x80
+	SO_LOCK_FILTER                   = 0x2c
+	SO_MARK                          = 0x24
+	SO_MAX_PACING_RATE               = 0x2f
+	SO_MEMINFO                       = 0x37
+	SO_NOFCS                         = 0x2b
+	SO_OOBINLINE                     = 0x100
+	SO_PASSCRED                      = 0x11
+	SO_PASSSEC                       = 0x22
+	SO_PEEK_OFF                      = 0x2a
+	SO_PEERCRED                      = 0x12
+	SO_PEERGROUPS                    = 0x3b
+	SO_PEERSEC                       = 0x1e
+	SO_PROTOCOL                      = 0x1028
+	SO_RCVBUF                        = 0x1002
+	SO_RCVBUFFORCE                   = 0x21
+	SO_RCVLOWAT                      = 0x1004
+	SO_RCVTIMEO                      = 0x1006
+	SO_RCVTIMEO_NEW                  = 0x42
+	SO_RCVTIMEO_OLD                  = 0x1006
+	SO_REUSEADDR                     = 0x4
+	SO_REUSEPORT                     = 0x200
+	SO_RXQ_OVFL                      = 0x28
+	SO_SECURITY_AUTHENTICATION       = 0x16
+	SO_SECURITY_ENCRYPTION_NETWORK   = 0x18
+	SO_SECURITY_ENCRYPTION_TRANSPORT = 0x17
+	SO_SELECT_ERR_QUEUE              = 0x2d
+	SO_SNDBUF                        = 0x1001
+	SO_SNDBUFFORCE                   = 0x1f
+	SO_SNDLOWAT                      = 0x1003
+	SO_SNDTIMEO                      = 0x1005
+	SO_SNDTIMEO_NEW                  = 0x43
+	SO_SNDTIMEO_OLD                  = 0x1005
+	SO_STYLE                         = 0x1008
+	SO_TIMESTAMPING                  = 0x25
+	SO_TIMESTAMPING_NEW              = 0x41
+	SO_TIMESTAMPING_OLD              = 0x25
+	SO_TIMESTAMPNS                   = 0x23
+	SO_TIMESTAMPNS_NEW               = 0x40
+	SO_TIMESTAMPNS_OLD               = 0x23
+	SO_TIMESTAMP_NEW                 = 0x3f
+	SO_TXTIME                        = 0x3d
+	SO_TYPE                          = 0x1008
+	SO_WIFI_STATUS                   = 0x29
+	SO_ZEROCOPY                      = 0x3c
+	TAB1                             = 0x800
+	TAB2                             = 0x1000
+	TAB3                             = 0x1800
+	TABDLY                           = 0x1800
+	TCFLSH                           = 0x5407
+	TCGETA                           = 0x5401
+	TCGETS                           = 0x540d
+	TCGETS2                          = 0x4030542a
+	TCSAFLUSH                        = 0x5410
+	TCSBRK                           = 0x5405
+	TCSBRKP                          = 0x5486
+	TCSETA                           = 0x5402
+	TCSETAF                          = 0x5404
+	TCSETAW                          = 0x5403
+	TCSETS                           = 0x540e
+	TCSETS2                          = 0x8030542b
+	TCSETSF                          = 0x5410
+	TCSETSF2                         = 0x8030542d
+	TCSETSW                          = 0x540f
+	TCSETSW2                         = 0x8030542c
+	TCXONC                           = 0x5406
+	TFD_CLOEXEC                      = 0x80000
+	TFD_NONBLOCK                     = 0x80
+	TIOCCBRK                         = 0x5428
+	TIOCCONS                         = 0x80047478
+	TIOCEXCL                         = 0x740d
+	TIOCGDEV                         = 0x40045432
+	TIOCGETD                         = 0x7400
+	TIOCGETP                         = 0x7408
+	TIOCGEXCL                        = 0x40045440
+	TIOCGICOUNT                      = 0x5492
+	TIOCGISO7816                     = 0x40285442
+	TIOCGLCKTRMIOS                   = 0x548b
+	TIOCGLTC                         = 0x7474
+	TIOCGPGRP                        = 0x40047477
+	TIOCGPKT                         = 0x40045438
+	TIOCGPTLCK                       = 0x40045439
+	TIOCGPTN                         = 0x40045430
+	TIOCGPTPEER                      = 0x20005441
+	TIOCGRS485                       = 0x4020542e
+	TIOCGSERIAL                      = 0x5484
+	TIOCGSID                         = 0x7416
+	TIOCGSOFTCAR                     = 0x5481
+	TIOCGWINSZ                       = 0x40087468
+	TIOCINQ                          = 0x467f
+	TIOCLINUX                        = 0x5483
+	TIOCMBIC                         = 0x741c
+	TIOCMBIS                         = 0x741b
+	TIOCMGET                         = 0x741d
+	TIOCMIWAIT                       = 0x5491
+	TIOCMSET                         = 0x741a
+	TIOCM_CAR                        = 0x100
+	TIOCM_CD                         = 0x100
+	TIOCM_CTS                        = 0x40
+	TIOCM_DSR                        = 0x400
+	TIOCM_RI                         = 0x200
+	TIOCM_RNG                        = 0x200
+	TIOCM_SR                         = 0x20
+	TIOCM_ST                         = 0x10
+	TIOCNOTTY                        = 0x5471
+	TIOCNXCL                         = 0x740e
+	TIOCOUTQ                         = 0x7472
+	TIOCPKT                          = 0x5470
+	TIOCSBRK                         = 0x5427
+	TIOCSCTTY                        = 0x5480
+	TIOCSERCONFIG                    = 0x5488
+	TIOCSERGETLSR                    = 0x548e
+	TIOCSERGETMULTI                  = 0x548f
+	TIOCSERGSTRUCT                   = 0x548d
+	TIOCSERGWILD                     = 0x5489
+	TIOCSERSETMULTI                  = 0x5490
+	TIOCSERSWILD                     = 0x548a
+	TIOCSER_TEMT                     = 0x1
+	TIOCSETD                         = 0x7401
+	TIOCSETN                         = 0x740a
+	TIOCSETP                         = 0x7409
+	TIOCSIG                          = 0x80045436
+	TIOCSISO7816                     = 0xc0285443
+	TIOCSLCKTRMIOS                   = 0x548c
+	TIOCSLTC                         = 0x7475
+	TIOCSPGRP                        = 0x80047476
+	TIOCSPTLCK                       = 0x80045431
+	TIOCSRS485                       = 0xc020542f
+	TIOCSSERIAL                      = 0x5485
+	TIOCSSOFTCAR                     = 0x5482
+	TIOCSTI                          = 0x5472
+	TIOCSWINSZ                       = 0x80087467
+	TIOCVHANGUP                      = 0x5437
+	TOSTOP                           = 0x8000
+	TUNATTACHFILTER                  = 0x801054d5
+	TUNDETACHFILTER                  = 0x801054d6
+	TUNGETDEVNETNS                   = 0x200054e3
+	TUNGETFEATURES                   = 0x400454cf
+	TUNGETFILTER                     = 0x401054db
+	TUNGETIFF                        = 0x400454d2
+	TUNGETSNDBUF                     = 0x400454d3
+	TUNGETVNETBE                     = 0x400454df
+	TUNGETVNETHDRSZ                  = 0x400454d7
+	TUNGETVNETLE                     = 0x400454dd
+	TUNSETCARRIER                    = 0x800454e2
+	TUNSETDEBUG                      = 0x800454c9
+	TUNSETFILTEREBPF                 = 0x400454e1
+	TUNSETGROUP                      = 0x800454ce
+	TUNSETIFF                        = 0x800454ca
+	TUNSETIFINDEX                    = 0x800454da
+	TUNSETLINK                       = 0x800454cd
+	TUNSETNOCSUM                     = 0x800454c8
+	TUNSETOFFLOAD                    = 0x800454d0
+	TUNSETOWNER                      = 0x800454cc
+	TUNSETPERSIST                    = 0x800454cb
+	TUNSETQUEUE                      = 0x800454d9
+	TUNSETSNDBUF                     = 0x800454d4
+	TUNSETSTEERINGEBPF               = 0x400454e0
+	TUNSETTXFILTER                   = 0x800454d1
+	TUNSETVNETBE                     = 0x800454de
+	TUNSETVNETHDRSZ                  = 0x800454d8
+	TUNSETVNETLE                     = 0x800454dc
+	UBI_IOCATT                       = 0x80186f40
+	UBI_IOCDET                       = 0x80046f41
+	UBI_IOCEBCH                      = 0x80044f02
+	UBI_IOCEBER                      = 0x80044f01
+	UBI_IOCEBISMAP                   = 0x40044f05
+	UBI_IOCEBMAP                     = 0x80084f03
+	UBI_IOCEBUNMAP                   = 0x80044f04
+	UBI_IOCMKVOL                     = 0x80986f00
+	UBI_IOCRMVOL                     = 0x80046f01
+	UBI_IOCRNVOL                     = 0x91106f03
+	UBI_IOCRPEB                      = 0x80046f04
+	UBI_IOCRSVOL                     = 0x800c6f02
+	UBI_IOCSETVOLPROP                = 0x80104f06
+	UBI_IOCSPEB                      = 0x80046f05
+	UBI_IOCVOLCRBLK                  = 0x80804f07
+	UBI_IOCVOLRMBLK                  = 0x20004f08
+	UBI_IOCVOLUP                     = 0x80084f00
+	VDISCARD                         = 0xd
+	VEOF                             = 0x10
+	VEOL                             = 0x11
+	VEOL2                            = 0x6
+	VMIN                             = 0x4
+	VREPRINT                         = 0xc
+	VSTART                           = 0x8
+	VSTOP                            = 0x9
+	VSUSP                            = 0xa
+	VSWTC                            = 0x7
+	VSWTCH                           = 0x7
+	VT1                              = 0x4000
+	VTDLY                            = 0x4000
+	VTIME                            = 0x5
+	VWERASE                          = 0xe
+	WDIOC_GETBOOTSTATUS              = 0x40045702
+	WDIOC_GETPRETIMEOUT              = 0x40045709
+	WDIOC_GETSTATUS                  = 0x40045701
+	WDIOC_GETSUPPORT                 = 0x40285700
+	WDIOC_GETTEMP                    = 0x40045703
+	WDIOC_GETTIMELEFT                = 0x4004570a
+	WDIOC_GETTIMEOUT                 = 0x40045707
+	WDIOC_KEEPALIVE                  = 0x40045705
+	WDIOC_SETOPTIONS                 = 0x40045704
+	WORDSIZE                         = 0x40
+	XCASE                            = 0x4
+	XTABS                            = 0x1800
+)
+
+// Errors
+const (
+	EADDRINUSE      = syscall.Errno(0x7d)
+	EADDRNOTAVAIL   = syscall.Errno(0x7e)
+	EADV            = syscall.Errno(0x44)
+	EAFNOSUPPORT    = syscall.Errno(0x7c)
+	EALREADY        = syscall.Errno(0x95)
+	EBADE           = syscall.Errno(0x32)
+	EBADFD          = syscall.Errno(0x51)
+	EBADMSG         = syscall.Errno(0x4d)
+	EBADR           = syscall.Errno(0x33)
+	EBADRQC         = syscall.Errno(0x36)
+	EBADSLT         = syscall.Errno(0x37)
+	EBFONT          = syscall.Errno(0x3b)
+	ECANCELED       = syscall.Errno(0x9e)
+	ECHRNG          = syscall.Errno(0x25)
+	ECOMM           = syscall.Errno(0x46)
+	ECONNABORTED    = syscall.Errno(0x82)
+	ECONNREFUSED    = syscall.Errno(0x92)
+	ECONNRESET      = syscall.Errno(0x83)
+	EDEADLK         = syscall.Errno(0x2d)
+	EDEADLOCK       = syscall.Errno(0x38)
+	EDESTADDRREQ    = syscall.Errno(0x60)
+	EDOTDOT         = syscall.Errno(0x49)
+	EDQUOT          = syscall.Errno(0x46d)
+	EHOSTDOWN       = syscall.Errno(0x93)
+	EHOSTUNREACH    = syscall.Errno(0x94)
+	EHWPOISON       = syscall.Errno(0xa8)
+	EIDRM           = syscall.Errno(0x24)
+	EILSEQ          = syscall.Errno(0x58)
+	EINIT           = syscall.Errno(0x8d)
+	EINPROGRESS     = syscall.Errno(0x96)
+	EISCONN         = syscall.Errno(0x85)
+	EISNAM          = syscall.Errno(0x8b)
+	EKEYEXPIRED     = syscall.Errno(0xa2)
+	EKEYREJECTED    = syscall.Errno(0xa4)
+	EKEYREVOKED     = syscall.Errno(0xa3)
+	EL2HLT          = syscall.Errno(0x2c)
+	EL2NSYNC        = syscall.Errno(0x26)
+	EL3HLT          = syscall.Errno(0x27)
+	EL3RST          = syscall.Errno(0x28)
+	ELIBACC         = syscall.Errno(0x53)
+	ELIBBAD         = syscall.Errno(0x54)
+	ELIBEXEC        = syscall.Errno(0x57)
+	ELIBMAX         = syscall.Errno(0x56)
+	ELIBSCN         = syscall.Errno(0x55)
+	ELNRNG          = syscall.Errno(0x29)
+	ELOOP           = syscall.Errno(0x5a)
+	EMEDIUMTYPE     = syscall.Errno(0xa0)
+	EMSGSIZE        = syscall.Errno(0x61)
+	EMULTIHOP       = syscall.Errno(0x4a)
+	ENAMETOOLONG    = syscall.Errno(0x4e)
+	ENAVAIL         = syscall.Errno(0x8a)
+	ENETDOWN        = syscall.Errno(0x7f)
+	ENETRESET       = syscall.Errno(0x81)
+	ENETUNREACH     = syscall.Errno(0x80)
+	ENOANO          = syscall.Errno(0x35)
+	ENOBUFS         = syscall.Errno(0x84)
+	ENOCSI          = syscall.Errno(0x2b)
+	ENODATA         = syscall.Errno(0x3d)
+	ENOKEY          = syscall.Errno(0xa1)
+	ENOLCK          = syscall.Errno(0x2e)
+	ENOLINK         = syscall.Errno(0x43)
+	ENOMEDIUM       = syscall.Errno(0x9f)
+	ENOMSG          = syscall.Errno(0x23)
+	ENONET          = syscall.Errno(0x40)
+	ENOPKG          = syscall.Errno(0x41)
+	ENOPROTOOPT     = syscall.Errno(0x63)
+	ENOSR           = syscall.Errno(0x3f)
+	ENOSTR          = syscall.Errno(0x3c)
+	ENOSYS          = syscall.Errno(0x59)
+	ENOTCONN        = syscall.Errno(0x86)
+	ENOTEMPTY       = syscall.Errno(0x5d)
+	ENOTNAM         = syscall.Errno(0x89)
+	ENOTRECOVERABLE = syscall.Errno(0xa6)
+	ENOTSOCK        = syscall.Errno(0x5f)
+	ENOTSUP         = syscall.Errno(0x7a)
+	ENOTUNIQ        = syscall.Errno(0x50)
+	EOPNOTSUPP      = syscall.Errno(0x7a)
+	EOVERFLOW       = syscall.Errno(0x4f)
+	EOWNERDEAD      = syscall.Errno(0xa5)
+	EPFNOSUPPORT    = syscall.Errno(0x7b)
+	EPROTO          = syscall.Errno(0x47)
+	EPROTONOSUPPORT = syscall.Errno(0x78)
+	EPROTOTYPE      = syscall.Errno(0x62)
+	EREMCHG         = syscall.Errno(0x52)
+	EREMDEV         = syscall.Errno(0x8e)
+	EREMOTE         = syscall.Errno(0x42)
+	EREMOTEIO       = syscall.Errno(0x8c)
+	ERESTART        = syscall.Errno(0x5b)
+	ERFKILL         = syscall.Errno(0xa7)
+	ESHUTDOWN       = syscall.Errno(0x8f)
+	ESOCKTNOSUPPORT = syscall.Errno(0x79)
+	ESRMNT          = syscall.Errno(0x45)
+	ESTALE          = syscall.Errno(0x97)
+	ESTRPIPE        = syscall.Errno(0x5c)
+	ETIME           = syscall.Errno(0x3e)
+	ETIMEDOUT       = syscall.Errno(0x91)
+	ETOOMANYREFS    = syscall.Errno(0x90)
+	EUCLEAN         = syscall.Errno(0x87)
+	EUNATCH         = syscall.Errno(0x2a)
+	EUSERS          = syscall.Errno(0x5e)
+	EXFULL          = syscall.Errno(0x34)
+)
+
+// Signals
+const (
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x12)
+	SIGCLD    = syscall.Signal(0x12)
+	SIGCONT   = syscall.Signal(0x19)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGIO     = syscall.Signal(0x16)
+	SIGPOLL   = syscall.Signal(0x16)
+	SIGPROF   = syscall.Signal(0x1d)
+	SIGPWR    = syscall.Signal(0x13)
+	SIGSTOP   = syscall.Signal(0x17)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTSTP   = syscall.Signal(0x18)
+	SIGTTIN   = syscall.Signal(0x1a)
+	SIGTTOU   = syscall.Signal(0x1b)
+	SIGURG    = syscall.Signal(0x15)
+	SIGUSR1   = syscall.Signal(0x10)
+	SIGUSR2   = syscall.Signal(0x11)
+	SIGVTALRM = syscall.Signal(0x1c)
+	SIGWINCH  = syscall.Signal(0x14)
+	SIGXCPU   = syscall.Signal(0x1e)
+	SIGXFSZ   = syscall.Signal(0x1f)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "no such device or address"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EAGAIN", "resource temporarily unavailable"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device or resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "invalid cross-device link"},
+	{19, "ENODEV", "no such device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "numerical result out of range"},
+	{35, "ENOMSG", "no message of desired type"},
+	{36, "EIDRM", "identifier removed"},
+	{37, "ECHRNG", "channel number out of range"},
+	{38, "EL2NSYNC", "level 2 not synchronized"},
+	{39, "EL3HLT", "level 3 halted"},
+	{40, "EL3RST", "level 3 reset"},
+	{41, "ELNRNG", "link number out of range"},
+	{42, "EUNATCH", "protocol driver not attached"},
+	{43, "ENOCSI", "no CSI structure available"},
+	{44, "EL2HLT", "level 2 halted"},
+	{45, "EDEADLK", "resource deadlock avoided"},
+	{46, "ENOLCK", "no locks available"},
+	{50, "EBADE", "invalid exchange"},
+	{51, "EBADR", "invalid request descriptor"},
+	{52, "EXFULL", "exchange full"},
+	{53, "ENOANO", "no anode"},
+	{54, "EBADRQC", "invalid request code"},
+	{55, "EBADSLT", "invalid slot"},
+	{56, "EDEADLOCK", "file locking deadlock error"},
+	{59, "EBFONT", "bad font file format"},
+	{60, "ENOSTR", "device not a stream"},
+	{61, "ENODATA", "no data available"},
+	{62, "ETIME", "timer expired"},
+	{63, "ENOSR", "out of streams resources"},
+	{64, "ENONET", "machine is not on the network"},
+	{65, "ENOPKG", "package not installed"},
+	{66, "EREMOTE", "object is remote"},
+	{67, "ENOLINK", "link has been severed"},
+	{68, "EADV", "advertise error"},
+	{69, "ESRMNT", "srmount error"},
+	{70, "ECOMM", "communication error on send"},
+	{71, "EPROTO", "protocol error"},
+	{73, "EDOTDOT", "RFS specific error"},
+	{74, "EMULTIHOP", "multihop attempted"},
+	{77, "EBADMSG", "bad message"},
+	{78, "ENAMETOOLONG", "file name too long"},
+	{79, "EOVERFLOW", "value too large for defined data type"},
+	{80, "ENOTUNIQ", "name not unique on network"},
+	{81, "EBADFD", "file descriptor in bad state"},
+	{82, "EREMCHG", "remote address changed"},
+	{83, "ELIBACC", "can not access a needed shared library"},
+	{84, "ELIBBAD", "accessing a corrupted shared library"},
+	{85, "ELIBSCN", ".lib section in a.out corrupted"},
+	{86, "ELIBMAX", "attempting to link in too many shared libraries"},
+	{87, "ELIBEXEC", "cannot exec a shared library directly"},
+	{88, "EILSEQ", "invalid or incomplete multibyte or wide character"},
+	{89, "ENOSYS", "function not implemented"},
+	{90, "ELOOP", "too many levels of symbolic links"},
+	{91, "ERESTART", "interrupted system call should be restarted"},
+	{92, "ESTRPIPE", "streams pipe error"},
+	{93, "ENOTEMPTY", "directory not empty"},
+	{94, "EUSERS", "too many users"},
+	{95, "ENOTSOCK", "socket operation on non-socket"},
+	{96, "EDESTADDRREQ", "destination address required"},
+	{97, "EMSGSIZE", "message too long"},
+	{98, "EPROTOTYPE", "protocol wrong type for socket"},
+	{99, "ENOPROTOOPT", "protocol not available"},
+	{120, "EPROTONOSUPPORT", "protocol not supported"},
+	{121, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{122, "ENOTSUP", "operation not supported"},
+	{123, "EPFNOSUPPORT", "protocol family not supported"},
+	{124, "EAFNOSUPPORT", "address family not supported by protocol"},
+	{125, "EADDRINUSE", "address already in use"},
+	{126, "EADDRNOTAVAIL", "cannot assign requested address"},
+	{127, "ENETDOWN", "network is down"},
+	{128, "ENETUNREACH", "network is unreachable"},
+	{129, "ENETRESET", "network dropped connection on reset"},
+	{130, "ECONNABORTED", "software caused connection abort"},
+	{131, "ECONNRESET", "connection reset by peer"},
+	{132, "ENOBUFS", "no buffer space available"},
+	{133, "EISCONN", "transport endpoint is already connected"},
+	{134, "ENOTCONN", "transport endpoint is not connected"},
+	{135, "EUCLEAN", "structure needs cleaning"},
+	{137, "ENOTNAM", "not a XENIX named type file"},
+	{138, "ENAVAIL", "no XENIX semaphores available"},
+	{139, "EISNAM", "is a named type file"},
+	{140, "EREMOTEIO", "remote I/O error"},
+	{141, "EINIT", "unknown error 141"},
+	{142, "EREMDEV", "unknown error 142"},
+	{143, "ESHUTDOWN", "cannot send after transport endpoint shutdown"},
+	{144, "ETOOMANYREFS", "too many references: cannot splice"},
+	{145, "ETIMEDOUT", "connection timed out"},
+	{146, "ECONNREFUSED", "connection refused"},
+	{147, "EHOSTDOWN", "host is down"},
+	{148, "EHOSTUNREACH", "no route to host"},
+	{149, "EALREADY", "operation already in progress"},
+	{150, "EINPROGRESS", "operation now in progress"},
+	{151, "ESTALE", "stale file handle"},
+	{158, "ECANCELED", "operation canceled"},
+	{159, "ENOMEDIUM", "no medium found"},
+	{160, "EMEDIUMTYPE", "wrong medium type"},
+	{161, "ENOKEY", "required key not available"},
+	{162, "EKEYEXPIRED", "key has expired"},
+	{163, "EKEYREVOKED", "key has been revoked"},
+	{164, "EKEYREJECTED", "key was rejected by service"},
+	{165, "EOWNERDEAD", "owner died"},
+	{166, "ENOTRECOVERABLE", "state not recoverable"},
+	{167, "ERFKILL", "operation not possible due to RF-kill"},
+	{168, "EHWPOISON", "memory page has hardware error"},
+	{1133, "EDQUOT", "disk quota exceeded"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/breakpoint trap"},
+	{6, "SIGABRT", "aborted"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGUSR1", "user defined signal 1"},
+	{17, "SIGUSR2", "user defined signal 2"},
+	{18, "SIGCHLD", "child exited"},
+	{19, "SIGPWR", "power failure"},
+	{20, "SIGWINCH", "window changed"},
+	{21, "SIGURG", "urgent I/O condition"},
+	{22, "SIGIO", "I/O possible"},
+	{23, "SIGSTOP", "stopped (signal)"},
+	{24, "SIGTSTP", "stopped"},
+	{25, "SIGCONT", "continued"},
+	{26, "SIGTTIN", "stopped (tty input)"},
+	{27, "SIGTTOU", "stopped (tty output)"},
+	{28, "SIGVTALRM", "virtual timer expired"},
+	{29, "SIGPROF", "profiling timer expired"},
+	{30, "SIGXCPU", "CPU time limit exceeded"},
+	{31, "SIGXFSZ", "file size limit exceeded"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_mipsle.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_mipsle.go
new file mode 100644
index 000000000..d4842ba1c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_mipsle.go
@@ -0,0 +1,797 @@
+// mkerrors.sh -Wall -Werror -static -I/tmp/include
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build mipsle,linux
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	B1000000                         = 0x1008
+	B115200                          = 0x1002
+	B1152000                         = 0x1009
+	B1500000                         = 0x100a
+	B2000000                         = 0x100b
+	B230400                          = 0x1003
+	B2500000                         = 0x100c
+	B3000000                         = 0x100d
+	B3500000                         = 0x100e
+	B4000000                         = 0x100f
+	B460800                          = 0x1004
+	B500000                          = 0x1005
+	B57600                           = 0x1001
+	B576000                          = 0x1006
+	B921600                          = 0x1007
+	BLKBSZGET                        = 0x40041270
+	BLKBSZSET                        = 0x80041271
+	BLKFLSBUF                        = 0x20001261
+	BLKFRAGET                        = 0x20001265
+	BLKFRASET                        = 0x20001264
+	BLKGETSIZE                       = 0x20001260
+	BLKGETSIZE64                     = 0x40041272
+	BLKPBSZGET                       = 0x2000127b
+	BLKRAGET                         = 0x20001263
+	BLKRASET                         = 0x20001262
+	BLKROGET                         = 0x2000125e
+	BLKROSET                         = 0x2000125d
+	BLKRRPART                        = 0x2000125f
+	BLKSECTGET                       = 0x20001267
+	BLKSECTSET                       = 0x20001266
+	BLKSSZGET                        = 0x20001268
+	BOTHER                           = 0x1000
+	BS1                              = 0x2000
+	BSDLY                            = 0x2000
+	CBAUD                            = 0x100f
+	CBAUDEX                          = 0x1000
+	CIBAUD                           = 0x100f0000
+	CLOCAL                           = 0x800
+	CR1                              = 0x200
+	CR2                              = 0x400
+	CR3                              = 0x600
+	CRDLY                            = 0x600
+	CREAD                            = 0x80
+	CS6                              = 0x10
+	CS7                              = 0x20
+	CS8                              = 0x30
+	CSIZE                            = 0x30
+	CSTOPB                           = 0x40
+	ECHOCTL                          = 0x200
+	ECHOE                            = 0x10
+	ECHOK                            = 0x20
+	ECHOKE                           = 0x800
+	ECHONL                           = 0x40
+	ECHOPRT                          = 0x400
+	EFD_CLOEXEC                      = 0x80000
+	EFD_NONBLOCK                     = 0x80
+	EPOLL_CLOEXEC                    = 0x80000
+	EXTPROC                          = 0x10000
+	FF1                              = 0x8000
+	FFDLY                            = 0x8000
+	FICLONE                          = 0x80049409
+	FICLONERANGE                     = 0x8020940d
+	FLUSHO                           = 0x2000
+	FS_IOC_ENABLE_VERITY             = 0x80806685
+	FS_IOC_GETFLAGS                  = 0x40046601
+	FS_IOC_GET_ENCRYPTION_NONCE      = 0x4010661b
+	FS_IOC_GET_ENCRYPTION_POLICY     = 0x800c6615
+	FS_IOC_GET_ENCRYPTION_PWSALT     = 0x80106614
+	FS_IOC_SETFLAGS                  = 0x80046602
+	FS_IOC_SET_ENCRYPTION_POLICY     = 0x400c6613
+	F_GETLK                          = 0x21
+	F_GETLK64                        = 0x21
+	F_GETOWN                         = 0x17
+	F_RDLCK                          = 0x0
+	F_SETLK                          = 0x22
+	F_SETLK64                        = 0x22
+	F_SETLKW                         = 0x23
+	F_SETLKW64                       = 0x23
+	F_SETOWN                         = 0x18
+	F_UNLCK                          = 0x2
+	F_WRLCK                          = 0x1
+	HUPCL                            = 0x400
+	ICANON                           = 0x2
+	IEXTEN                           = 0x100
+	IN_CLOEXEC                       = 0x80000
+	IN_NONBLOCK                      = 0x80
+	IOCTL_VM_SOCKETS_GET_LOCAL_CID   = 0x200007b9
+	ISIG                             = 0x1
+	IUCLC                            = 0x200
+	IXOFF                            = 0x1000
+	IXON                             = 0x400
+	MAP_ANON                         = 0x800
+	MAP_ANONYMOUS                    = 0x800
+	MAP_DENYWRITE                    = 0x2000
+	MAP_EXECUTABLE                   = 0x4000
+	MAP_GROWSDOWN                    = 0x1000
+	MAP_HUGETLB                      = 0x80000
+	MAP_LOCKED                       = 0x8000
+	MAP_NONBLOCK                     = 0x20000
+	MAP_NORESERVE                    = 0x400
+	MAP_POPULATE                     = 0x10000
+	MAP_RENAME                       = 0x800
+	MAP_STACK                        = 0x40000
+	MCL_CURRENT                      = 0x1
+	MCL_FUTURE                       = 0x2
+	MCL_ONFAULT                      = 0x4
+	NFDBITS                          = 0x20
+	NLDLY                            = 0x100
+	NOFLSH                           = 0x80
+	NS_GET_NSTYPE                    = 0x2000b703
+	NS_GET_OWNER_UID                 = 0x2000b704
+	NS_GET_PARENT                    = 0x2000b702
+	NS_GET_USERNS                    = 0x2000b701
+	OLCUC                            = 0x2
+	ONLCR                            = 0x4
+	O_APPEND                         = 0x8
+	O_ASYNC                          = 0x1000
+	O_CLOEXEC                        = 0x80000
+	O_CREAT                          = 0x100
+	O_DIRECT                         = 0x8000
+	O_DIRECTORY                      = 0x10000
+	O_DSYNC                          = 0x10
+	O_EXCL                           = 0x400
+	O_FSYNC                          = 0x4010
+	O_LARGEFILE                      = 0x2000
+	O_NDELAY                         = 0x80
+	O_NOATIME                        = 0x40000
+	O_NOCTTY                         = 0x800
+	O_NOFOLLOW                       = 0x20000
+	O_NONBLOCK                       = 0x80
+	O_PATH                           = 0x200000
+	O_RSYNC                          = 0x4010
+	O_SYNC                           = 0x4010
+	O_TMPFILE                        = 0x410000
+	O_TRUNC                          = 0x200
+	PARENB                           = 0x100
+	PARODD                           = 0x200
+	PENDIN                           = 0x4000
+	PERF_EVENT_IOC_DISABLE           = 0x20002401
+	PERF_EVENT_IOC_ENABLE            = 0x20002400
+	PERF_EVENT_IOC_ID                = 0x40042407
+	PERF_EVENT_IOC_MODIFY_ATTRIBUTES = 0x8004240b
+	PERF_EVENT_IOC_PAUSE_OUTPUT      = 0x80042409
+	PERF_EVENT_IOC_PERIOD            = 0x80082404
+	PERF_EVENT_IOC_QUERY_BPF         = 0xc004240a
+	PERF_EVENT_IOC_REFRESH           = 0x20002402
+	PERF_EVENT_IOC_RESET             = 0x20002403
+	PERF_EVENT_IOC_SET_BPF           = 0x80042408
+	PERF_EVENT_IOC_SET_FILTER        = 0x80042406
+	PERF_EVENT_IOC_SET_OUTPUT        = 0x20002405
+	PPPIOCATTACH                     = 0x8004743d
+	PPPIOCATTCHAN                    = 0x80047438
+	PPPIOCCONNECT                    = 0x8004743a
+	PPPIOCDETACH                     = 0x8004743c
+	PPPIOCDISCONN                    = 0x20007439
+	PPPIOCGASYNCMAP                  = 0x40047458
+	PPPIOCGCHAN                      = 0x40047437
+	PPPIOCGDEBUG                     = 0x40047441
+	PPPIOCGFLAGS                     = 0x4004745a
+	PPPIOCGIDLE                      = 0x4008743f
+	PPPIOCGIDLE32                    = 0x4008743f
+	PPPIOCGIDLE64                    = 0x4010743f
+	PPPIOCGL2TPSTATS                 = 0x40487436
+	PPPIOCGMRU                       = 0x40047453
+	PPPIOCGRASYNCMAP                 = 0x40047455
+	PPPIOCGUNIT                      = 0x40047456
+	PPPIOCGXASYNCMAP                 = 0x40207450
+	PPPIOCSACTIVE                    = 0x80087446
+	PPPIOCSASYNCMAP                  = 0x80047457
+	PPPIOCSCOMPRESS                  = 0x800c744d
+	PPPIOCSDEBUG                     = 0x80047440
+	PPPIOCSFLAGS                     = 0x80047459
+	PPPIOCSMAXCID                    = 0x80047451
+	PPPIOCSMRRU                      = 0x8004743b
+	PPPIOCSMRU                       = 0x80047452
+	PPPIOCSNPMODE                    = 0x8008744b
+	PPPIOCSPASS                      = 0x80087447
+	PPPIOCSRASYNCMAP                 = 0x80047454
+	PPPIOCSXASYNCMAP                 = 0x8020744f
+	PPPIOCXFERUNIT                   = 0x2000744e
+	PR_SET_PTRACER_ANY               = 0xffffffff
+	PTRACE_GETFPREGS                 = 0xe
+	PTRACE_GET_THREAD_AREA           = 0x19
+	PTRACE_GET_THREAD_AREA_3264      = 0xc4
+	PTRACE_GET_WATCH_REGS            = 0xd0
+	PTRACE_OLDSETOPTIONS             = 0x15
+	PTRACE_PEEKDATA_3264             = 0xc1
+	PTRACE_PEEKTEXT_3264             = 0xc0
+	PTRACE_POKEDATA_3264             = 0xc3
+	PTRACE_POKETEXT_3264             = 0xc2
+	PTRACE_SETFPREGS                 = 0xf
+	PTRACE_SET_THREAD_AREA           = 0x1a
+	PTRACE_SET_WATCH_REGS            = 0xd1
+	RLIMIT_AS                        = 0x6
+	RLIMIT_MEMLOCK                   = 0x9
+	RLIMIT_NOFILE                    = 0x5
+	RLIMIT_NPROC                     = 0x8
+	RLIMIT_RSS                       = 0x7
+	RNDADDENTROPY                    = 0x80085203
+	RNDADDTOENTCNT                   = 0x80045201
+	RNDCLEARPOOL                     = 0x20005206
+	RNDGETENTCNT                     = 0x40045200
+	RNDGETPOOL                       = 0x40085202
+	RNDRESEEDCRNG                    = 0x20005207
+	RNDZAPENTCNT                     = 0x20005204
+	RTC_AIE_OFF                      = 0x20007002
+	RTC_AIE_ON                       = 0x20007001
+	RTC_ALM_READ                     = 0x40247008
+	RTC_ALM_SET                      = 0x80247007
+	RTC_EPOCH_READ                   = 0x4004700d
+	RTC_EPOCH_SET                    = 0x8004700e
+	RTC_IRQP_READ                    = 0x4004700b
+	RTC_IRQP_SET                     = 0x8004700c
+	RTC_PIE_OFF                      = 0x20007006
+	RTC_PIE_ON                       = 0x20007005
+	RTC_PLL_GET                      = 0x401c7011
+	RTC_PLL_SET                      = 0x801c7012
+	RTC_RD_TIME                      = 0x40247009
+	RTC_SET_TIME                     = 0x8024700a
+	RTC_UIE_OFF                      = 0x20007004
+	RTC_UIE_ON                       = 0x20007003
+	RTC_VL_CLR                       = 0x20007014
+	RTC_VL_READ                      = 0x40047013
+	RTC_WIE_OFF                      = 0x20007010
+	RTC_WIE_ON                       = 0x2000700f
+	RTC_WKALM_RD                     = 0x40287010
+	RTC_WKALM_SET                    = 0x8028700f
+	SCM_TIMESTAMPING                 = 0x25
+	SCM_TIMESTAMPING_OPT_STATS       = 0x36
+	SCM_TIMESTAMPING_PKTINFO         = 0x3a
+	SCM_TIMESTAMPNS                  = 0x23
+	SCM_TXTIME                       = 0x3d
+	SCM_WIFI_STATUS                  = 0x29
+	SFD_CLOEXEC                      = 0x80000
+	SFD_NONBLOCK                     = 0x80
+	SIOCATMARK                       = 0x40047307
+	SIOCGPGRP                        = 0x40047309
+	SIOCGSTAMPNS_NEW                 = 0x40108907
+	SIOCGSTAMP_NEW                   = 0x40108906
+	SIOCINQ                          = 0x467f
+	SIOCOUTQ                         = 0x7472
+	SIOCSPGRP                        = 0x80047308
+	SOCK_CLOEXEC                     = 0x80000
+	SOCK_DGRAM                       = 0x1
+	SOCK_NONBLOCK                    = 0x80
+	SOCK_STREAM                      = 0x2
+	SOL_SOCKET                       = 0xffff
+	SO_ACCEPTCONN                    = 0x1009
+	SO_ATTACH_BPF                    = 0x32
+	SO_ATTACH_REUSEPORT_CBPF         = 0x33
+	SO_ATTACH_REUSEPORT_EBPF         = 0x34
+	SO_BINDTODEVICE                  = 0x19
+	SO_BINDTOIFINDEX                 = 0x3e
+	SO_BPF_EXTENSIONS                = 0x30
+	SO_BROADCAST                     = 0x20
+	SO_BSDCOMPAT                     = 0xe
+	SO_BUSY_POLL                     = 0x2e
+	SO_CNX_ADVICE                    = 0x35
+	SO_COOKIE                        = 0x39
+	SO_DETACH_REUSEPORT_BPF          = 0x44
+	SO_DOMAIN                        = 0x1029
+	SO_DONTROUTE                     = 0x10
+	SO_ERROR                         = 0x1007
+	SO_INCOMING_CPU                  = 0x31
+	SO_INCOMING_NAPI_ID              = 0x38
+	SO_KEEPALIVE                     = 0x8
+	SO_LINGER                        = 0x80
+	SO_LOCK_FILTER                   = 0x2c
+	SO_MARK                          = 0x24
+	SO_MAX_PACING_RATE               = 0x2f
+	SO_MEMINFO                       = 0x37
+	SO_NOFCS                         = 0x2b
+	SO_OOBINLINE                     = 0x100
+	SO_PASSCRED                      = 0x11
+	SO_PASSSEC                       = 0x22
+	SO_PEEK_OFF                      = 0x2a
+	SO_PEERCRED                      = 0x12
+	SO_PEERGROUPS                    = 0x3b
+	SO_PEERSEC                       = 0x1e
+	SO_PROTOCOL                      = 0x1028
+	SO_RCVBUF                        = 0x1002
+	SO_RCVBUFFORCE                   = 0x21
+	SO_RCVLOWAT                      = 0x1004
+	SO_RCVTIMEO                      = 0x1006
+	SO_RCVTIMEO_NEW                  = 0x42
+	SO_RCVTIMEO_OLD                  = 0x1006
+	SO_REUSEADDR                     = 0x4
+	SO_REUSEPORT                     = 0x200
+	SO_RXQ_OVFL                      = 0x28
+	SO_SECURITY_AUTHENTICATION       = 0x16
+	SO_SECURITY_ENCRYPTION_NETWORK   = 0x18
+	SO_SECURITY_ENCRYPTION_TRANSPORT = 0x17
+	SO_SELECT_ERR_QUEUE              = 0x2d
+	SO_SNDBUF                        = 0x1001
+	SO_SNDBUFFORCE                   = 0x1f
+	SO_SNDLOWAT                      = 0x1003
+	SO_SNDTIMEO                      = 0x1005
+	SO_SNDTIMEO_NEW                  = 0x43
+	SO_SNDTIMEO_OLD                  = 0x1005
+	SO_STYLE                         = 0x1008
+	SO_TIMESTAMPING                  = 0x25
+	SO_TIMESTAMPING_NEW              = 0x41
+	SO_TIMESTAMPING_OLD              = 0x25
+	SO_TIMESTAMPNS                   = 0x23
+	SO_TIMESTAMPNS_NEW               = 0x40
+	SO_TIMESTAMPNS_OLD               = 0x23
+	SO_TIMESTAMP_NEW                 = 0x3f
+	SO_TXTIME                        = 0x3d
+	SO_TYPE                          = 0x1008
+	SO_WIFI_STATUS                   = 0x29
+	SO_ZEROCOPY                      = 0x3c
+	TAB1                             = 0x800
+	TAB2                             = 0x1000
+	TAB3                             = 0x1800
+	TABDLY                           = 0x1800
+	TCFLSH                           = 0x5407
+	TCGETA                           = 0x5401
+	TCGETS                           = 0x540d
+	TCGETS2                          = 0x4030542a
+	TCSAFLUSH                        = 0x5410
+	TCSBRK                           = 0x5405
+	TCSBRKP                          = 0x5486
+	TCSETA                           = 0x5402
+	TCSETAF                          = 0x5404
+	TCSETAW                          = 0x5403
+	TCSETS                           = 0x540e
+	TCSETS2                          = 0x8030542b
+	TCSETSF                          = 0x5410
+	TCSETSF2                         = 0x8030542d
+	TCSETSW                          = 0x540f
+	TCSETSW2                         = 0x8030542c
+	TCXONC                           = 0x5406
+	TFD_CLOEXEC                      = 0x80000
+	TFD_NONBLOCK                     = 0x80
+	TIOCCBRK                         = 0x5428
+	TIOCCONS                         = 0x80047478
+	TIOCEXCL                         = 0x740d
+	TIOCGDEV                         = 0x40045432
+	TIOCGETD                         = 0x7400
+	TIOCGETP                         = 0x7408
+	TIOCGEXCL                        = 0x40045440
+	TIOCGICOUNT                      = 0x5492
+	TIOCGISO7816                     = 0x40285442
+	TIOCGLCKTRMIOS                   = 0x548b
+	TIOCGLTC                         = 0x7474
+	TIOCGPGRP                        = 0x40047477
+	TIOCGPKT                         = 0x40045438
+	TIOCGPTLCK                       = 0x40045439
+	TIOCGPTN                         = 0x40045430
+	TIOCGPTPEER                      = 0x20005441
+	TIOCGRS485                       = 0x4020542e
+	TIOCGSERIAL                      = 0x5484
+	TIOCGSID                         = 0x7416
+	TIOCGSOFTCAR                     = 0x5481
+	TIOCGWINSZ                       = 0x40087468
+	TIOCINQ                          = 0x467f
+	TIOCLINUX                        = 0x5483
+	TIOCMBIC                         = 0x741c
+	TIOCMBIS                         = 0x741b
+	TIOCMGET                         = 0x741d
+	TIOCMIWAIT                       = 0x5491
+	TIOCMSET                         = 0x741a
+	TIOCM_CAR                        = 0x100
+	TIOCM_CD                         = 0x100
+	TIOCM_CTS                        = 0x40
+	TIOCM_DSR                        = 0x400
+	TIOCM_RI                         = 0x200
+	TIOCM_RNG                        = 0x200
+	TIOCM_SR                         = 0x20
+	TIOCM_ST                         = 0x10
+	TIOCNOTTY                        = 0x5471
+	TIOCNXCL                         = 0x740e
+	TIOCOUTQ                         = 0x7472
+	TIOCPKT                          = 0x5470
+	TIOCSBRK                         = 0x5427
+	TIOCSCTTY                        = 0x5480
+	TIOCSERCONFIG                    = 0x5488
+	TIOCSERGETLSR                    = 0x548e
+	TIOCSERGETMULTI                  = 0x548f
+	TIOCSERGSTRUCT                   = 0x548d
+	TIOCSERGWILD                     = 0x5489
+	TIOCSERSETMULTI                  = 0x5490
+	TIOCSERSWILD                     = 0x548a
+	TIOCSER_TEMT                     = 0x1
+	TIOCSETD                         = 0x7401
+	TIOCSETN                         = 0x740a
+	TIOCSETP                         = 0x7409
+	TIOCSIG                          = 0x80045436
+	TIOCSISO7816                     = 0xc0285443
+	TIOCSLCKTRMIOS                   = 0x548c
+	TIOCSLTC                         = 0x7475
+	TIOCSPGRP                        = 0x80047476
+	TIOCSPTLCK                       = 0x80045431
+	TIOCSRS485                       = 0xc020542f
+	TIOCSSERIAL                      = 0x5485
+	TIOCSSOFTCAR                     = 0x5482
+	TIOCSTI                          = 0x5472
+	TIOCSWINSZ                       = 0x80087467
+	TIOCVHANGUP                      = 0x5437
+	TOSTOP                           = 0x8000
+	TUNATTACHFILTER                  = 0x800854d5
+	TUNDETACHFILTER                  = 0x800854d6
+	TUNGETDEVNETNS                   = 0x200054e3
+	TUNGETFEATURES                   = 0x400454cf
+	TUNGETFILTER                     = 0x400854db
+	TUNGETIFF                        = 0x400454d2
+	TUNGETSNDBUF                     = 0x400454d3
+	TUNGETVNETBE                     = 0x400454df
+	TUNGETVNETHDRSZ                  = 0x400454d7
+	TUNGETVNETLE                     = 0x400454dd
+	TUNSETCARRIER                    = 0x800454e2
+	TUNSETDEBUG                      = 0x800454c9
+	TUNSETFILTEREBPF                 = 0x400454e1
+	TUNSETGROUP                      = 0x800454ce
+	TUNSETIFF                        = 0x800454ca
+	TUNSETIFINDEX                    = 0x800454da
+	TUNSETLINK                       = 0x800454cd
+	TUNSETNOCSUM                     = 0x800454c8
+	TUNSETOFFLOAD                    = 0x800454d0
+	TUNSETOWNER                      = 0x800454cc
+	TUNSETPERSIST                    = 0x800454cb
+	TUNSETQUEUE                      = 0x800454d9
+	TUNSETSNDBUF                     = 0x800454d4
+	TUNSETSTEERINGEBPF               = 0x400454e0
+	TUNSETTXFILTER                   = 0x800454d1
+	TUNSETVNETBE                     = 0x800454de
+	TUNSETVNETHDRSZ                  = 0x800454d8
+	TUNSETVNETLE                     = 0x800454dc
+	UBI_IOCATT                       = 0x80186f40
+	UBI_IOCDET                       = 0x80046f41
+	UBI_IOCEBCH                      = 0x80044f02
+	UBI_IOCEBER                      = 0x80044f01
+	UBI_IOCEBISMAP                   = 0x40044f05
+	UBI_IOCEBMAP                     = 0x80084f03
+	UBI_IOCEBUNMAP                   = 0x80044f04
+	UBI_IOCMKVOL                     = 0x80986f00
+	UBI_IOCRMVOL                     = 0x80046f01
+	UBI_IOCRNVOL                     = 0x91106f03
+	UBI_IOCRPEB                      = 0x80046f04
+	UBI_IOCRSVOL                     = 0x800c6f02
+	UBI_IOCSETVOLPROP                = 0x80104f06
+	UBI_IOCSPEB                      = 0x80046f05
+	UBI_IOCVOLCRBLK                  = 0x80804f07
+	UBI_IOCVOLRMBLK                  = 0x20004f08
+	UBI_IOCVOLUP                     = 0x80084f00
+	VDISCARD                         = 0xd
+	VEOF                             = 0x10
+	VEOL                             = 0x11
+	VEOL2                            = 0x6
+	VMIN                             = 0x4
+	VREPRINT                         = 0xc
+	VSTART                           = 0x8
+	VSTOP                            = 0x9
+	VSUSP                            = 0xa
+	VSWTC                            = 0x7
+	VSWTCH                           = 0x7
+	VT1                              = 0x4000
+	VTDLY                            = 0x4000
+	VTIME                            = 0x5
+	VWERASE                          = 0xe
+	WDIOC_GETBOOTSTATUS              = 0x40045702
+	WDIOC_GETPRETIMEOUT              = 0x40045709
+	WDIOC_GETSTATUS                  = 0x40045701
+	WDIOC_GETSUPPORT                 = 0x40285700
+	WDIOC_GETTEMP                    = 0x40045703
+	WDIOC_GETTIMELEFT                = 0x4004570a
+	WDIOC_GETTIMEOUT                 = 0x40045707
+	WDIOC_KEEPALIVE                  = 0x40045705
+	WDIOC_SETOPTIONS                 = 0x40045704
+	WORDSIZE                         = 0x20
+	XCASE                            = 0x4
+	XTABS                            = 0x1800
+)
+
+// Errors
+const (
+	EADDRINUSE      = syscall.Errno(0x7d)
+	EADDRNOTAVAIL   = syscall.Errno(0x7e)
+	EADV            = syscall.Errno(0x44)
+	EAFNOSUPPORT    = syscall.Errno(0x7c)
+	EALREADY        = syscall.Errno(0x95)
+	EBADE           = syscall.Errno(0x32)
+	EBADFD          = syscall.Errno(0x51)
+	EBADMSG         = syscall.Errno(0x4d)
+	EBADR           = syscall.Errno(0x33)
+	EBADRQC         = syscall.Errno(0x36)
+	EBADSLT         = syscall.Errno(0x37)
+	EBFONT          = syscall.Errno(0x3b)
+	ECANCELED       = syscall.Errno(0x9e)
+	ECHRNG          = syscall.Errno(0x25)
+	ECOMM           = syscall.Errno(0x46)
+	ECONNABORTED    = syscall.Errno(0x82)
+	ECONNREFUSED    = syscall.Errno(0x92)
+	ECONNRESET      = syscall.Errno(0x83)
+	EDEADLK         = syscall.Errno(0x2d)
+	EDEADLOCK       = syscall.Errno(0x38)
+	EDESTADDRREQ    = syscall.Errno(0x60)
+	EDOTDOT         = syscall.Errno(0x49)
+	EDQUOT          = syscall.Errno(0x46d)
+	EHOSTDOWN       = syscall.Errno(0x93)
+	EHOSTUNREACH    = syscall.Errno(0x94)
+	EHWPOISON       = syscall.Errno(0xa8)
+	EIDRM           = syscall.Errno(0x24)
+	EILSEQ          = syscall.Errno(0x58)
+	EINIT           = syscall.Errno(0x8d)
+	EINPROGRESS     = syscall.Errno(0x96)
+	EISCONN         = syscall.Errno(0x85)
+	EISNAM          = syscall.Errno(0x8b)
+	EKEYEXPIRED     = syscall.Errno(0xa2)
+	EKEYREJECTED    = syscall.Errno(0xa4)
+	EKEYREVOKED     = syscall.Errno(0xa3)
+	EL2HLT          = syscall.Errno(0x2c)
+	EL2NSYNC        = syscall.Errno(0x26)
+	EL3HLT          = syscall.Errno(0x27)
+	EL3RST          = syscall.Errno(0x28)
+	ELIBACC         = syscall.Errno(0x53)
+	ELIBBAD         = syscall.Errno(0x54)
+	ELIBEXEC        = syscall.Errno(0x57)
+	ELIBMAX         = syscall.Errno(0x56)
+	ELIBSCN         = syscall.Errno(0x55)
+	ELNRNG          = syscall.Errno(0x29)
+	ELOOP           = syscall.Errno(0x5a)
+	EMEDIUMTYPE     = syscall.Errno(0xa0)
+	EMSGSIZE        = syscall.Errno(0x61)
+	EMULTIHOP       = syscall.Errno(0x4a)
+	ENAMETOOLONG    = syscall.Errno(0x4e)
+	ENAVAIL         = syscall.Errno(0x8a)
+	ENETDOWN        = syscall.Errno(0x7f)
+	ENETRESET       = syscall.Errno(0x81)
+	ENETUNREACH     = syscall.Errno(0x80)
+	ENOANO          = syscall.Errno(0x35)
+	ENOBUFS         = syscall.Errno(0x84)
+	ENOCSI          = syscall.Errno(0x2b)
+	ENODATA         = syscall.Errno(0x3d)
+	ENOKEY          = syscall.Errno(0xa1)
+	ENOLCK          = syscall.Errno(0x2e)
+	ENOLINK         = syscall.Errno(0x43)
+	ENOMEDIUM       = syscall.Errno(0x9f)
+	ENOMSG          = syscall.Errno(0x23)
+	ENONET          = syscall.Errno(0x40)
+	ENOPKG          = syscall.Errno(0x41)
+	ENOPROTOOPT     = syscall.Errno(0x63)
+	ENOSR           = syscall.Errno(0x3f)
+	ENOSTR          = syscall.Errno(0x3c)
+	ENOSYS          = syscall.Errno(0x59)
+	ENOTCONN        = syscall.Errno(0x86)
+	ENOTEMPTY       = syscall.Errno(0x5d)
+	ENOTNAM         = syscall.Errno(0x89)
+	ENOTRECOVERABLE = syscall.Errno(0xa6)
+	ENOTSOCK        = syscall.Errno(0x5f)
+	ENOTSUP         = syscall.Errno(0x7a)
+	ENOTUNIQ        = syscall.Errno(0x50)
+	EOPNOTSUPP      = syscall.Errno(0x7a)
+	EOVERFLOW       = syscall.Errno(0x4f)
+	EOWNERDEAD      = syscall.Errno(0xa5)
+	EPFNOSUPPORT    = syscall.Errno(0x7b)
+	EPROTO          = syscall.Errno(0x47)
+	EPROTONOSUPPORT = syscall.Errno(0x78)
+	EPROTOTYPE      = syscall.Errno(0x62)
+	EREMCHG         = syscall.Errno(0x52)
+	EREMDEV         = syscall.Errno(0x8e)
+	EREMOTE         = syscall.Errno(0x42)
+	EREMOTEIO       = syscall.Errno(0x8c)
+	ERESTART        = syscall.Errno(0x5b)
+	ERFKILL         = syscall.Errno(0xa7)
+	ESHUTDOWN       = syscall.Errno(0x8f)
+	ESOCKTNOSUPPORT = syscall.Errno(0x79)
+	ESRMNT          = syscall.Errno(0x45)
+	ESTALE          = syscall.Errno(0x97)
+	ESTRPIPE        = syscall.Errno(0x5c)
+	ETIME           = syscall.Errno(0x3e)
+	ETIMEDOUT       = syscall.Errno(0x91)
+	ETOOMANYREFS    = syscall.Errno(0x90)
+	EUCLEAN         = syscall.Errno(0x87)
+	EUNATCH         = syscall.Errno(0x2a)
+	EUSERS          = syscall.Errno(0x5e)
+	EXFULL          = syscall.Errno(0x34)
+)
+
+// Signals
+const (
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x12)
+	SIGCLD    = syscall.Signal(0x12)
+	SIGCONT   = syscall.Signal(0x19)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGIO     = syscall.Signal(0x16)
+	SIGPOLL   = syscall.Signal(0x16)
+	SIGPROF   = syscall.Signal(0x1d)
+	SIGPWR    = syscall.Signal(0x13)
+	SIGSTOP   = syscall.Signal(0x17)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTSTP   = syscall.Signal(0x18)
+	SIGTTIN   = syscall.Signal(0x1a)
+	SIGTTOU   = syscall.Signal(0x1b)
+	SIGURG    = syscall.Signal(0x15)
+	SIGUSR1   = syscall.Signal(0x10)
+	SIGUSR2   = syscall.Signal(0x11)
+	SIGVTALRM = syscall.Signal(0x1c)
+	SIGWINCH  = syscall.Signal(0x14)
+	SIGXCPU   = syscall.Signal(0x1e)
+	SIGXFSZ   = syscall.Signal(0x1f)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "no such device or address"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EAGAIN", "resource temporarily unavailable"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device or resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "invalid cross-device link"},
+	{19, "ENODEV", "no such device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "numerical result out of range"},
+	{35, "ENOMSG", "no message of desired type"},
+	{36, "EIDRM", "identifier removed"},
+	{37, "ECHRNG", "channel number out of range"},
+	{38, "EL2NSYNC", "level 2 not synchronized"},
+	{39, "EL3HLT", "level 3 halted"},
+	{40, "EL3RST", "level 3 reset"},
+	{41, "ELNRNG", "link number out of range"},
+	{42, "EUNATCH", "protocol driver not attached"},
+	{43, "ENOCSI", "no CSI structure available"},
+	{44, "EL2HLT", "level 2 halted"},
+	{45, "EDEADLK", "resource deadlock avoided"},
+	{46, "ENOLCK", "no locks available"},
+	{50, "EBADE", "invalid exchange"},
+	{51, "EBADR", "invalid request descriptor"},
+	{52, "EXFULL", "exchange full"},
+	{53, "ENOANO", "no anode"},
+	{54, "EBADRQC", "invalid request code"},
+	{55, "EBADSLT", "invalid slot"},
+	{56, "EDEADLOCK", "file locking deadlock error"},
+	{59, "EBFONT", "bad font file format"},
+	{60, "ENOSTR", "device not a stream"},
+	{61, "ENODATA", "no data available"},
+	{62, "ETIME", "timer expired"},
+	{63, "ENOSR", "out of streams resources"},
+	{64, "ENONET", "machine is not on the network"},
+	{65, "ENOPKG", "package not installed"},
+	{66, "EREMOTE", "object is remote"},
+	{67, "ENOLINK", "link has been severed"},
+	{68, "EADV", "advertise error"},
+	{69, "ESRMNT", "srmount error"},
+	{70, "ECOMM", "communication error on send"},
+	{71, "EPROTO", "protocol error"},
+	{73, "EDOTDOT", "RFS specific error"},
+	{74, "EMULTIHOP", "multihop attempted"},
+	{77, "EBADMSG", "bad message"},
+	{78, "ENAMETOOLONG", "file name too long"},
+	{79, "EOVERFLOW", "value too large for defined data type"},
+	{80, "ENOTUNIQ", "name not unique on network"},
+	{81, "EBADFD", "file descriptor in bad state"},
+	{82, "EREMCHG", "remote address changed"},
+	{83, "ELIBACC", "can not access a needed shared library"},
+	{84, "ELIBBAD", "accessing a corrupted shared library"},
+	{85, "ELIBSCN", ".lib section in a.out corrupted"},
+	{86, "ELIBMAX", "attempting to link in too many shared libraries"},
+	{87, "ELIBEXEC", "cannot exec a shared library directly"},
+	{88, "EILSEQ", "invalid or incomplete multibyte or wide character"},
+	{89, "ENOSYS", "function not implemented"},
+	{90, "ELOOP", "too many levels of symbolic links"},
+	{91, "ERESTART", "interrupted system call should be restarted"},
+	{92, "ESTRPIPE", "streams pipe error"},
+	{93, "ENOTEMPTY", "directory not empty"},
+	{94, "EUSERS", "too many users"},
+	{95, "ENOTSOCK", "socket operation on non-socket"},
+	{96, "EDESTADDRREQ", "destination address required"},
+	{97, "EMSGSIZE", "message too long"},
+	{98, "EPROTOTYPE", "protocol wrong type for socket"},
+	{99, "ENOPROTOOPT", "protocol not available"},
+	{120, "EPROTONOSUPPORT", "protocol not supported"},
+	{121, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{122, "ENOTSUP", "operation not supported"},
+	{123, "EPFNOSUPPORT", "protocol family not supported"},
+	{124, "EAFNOSUPPORT", "address family not supported by protocol"},
+	{125, "EADDRINUSE", "address already in use"},
+	{126, "EADDRNOTAVAIL", "cannot assign requested address"},
+	{127, "ENETDOWN", "network is down"},
+	{128, "ENETUNREACH", "network is unreachable"},
+	{129, "ENETRESET", "network dropped connection on reset"},
+	{130, "ECONNABORTED", "software caused connection abort"},
+	{131, "ECONNRESET", "connection reset by peer"},
+	{132, "ENOBUFS", "no buffer space available"},
+	{133, "EISCONN", "transport endpoint is already connected"},
+	{134, "ENOTCONN", "transport endpoint is not connected"},
+	{135, "EUCLEAN", "structure needs cleaning"},
+	{137, "ENOTNAM", "not a XENIX named type file"},
+	{138, "ENAVAIL", "no XENIX semaphores available"},
+	{139, "EISNAM", "is a named type file"},
+	{140, "EREMOTEIO", "remote I/O error"},
+	{141, "EINIT", "unknown error 141"},
+	{142, "EREMDEV", "unknown error 142"},
+	{143, "ESHUTDOWN", "cannot send after transport endpoint shutdown"},
+	{144, "ETOOMANYREFS", "too many references: cannot splice"},
+	{145, "ETIMEDOUT", "connection timed out"},
+	{146, "ECONNREFUSED", "connection refused"},
+	{147, "EHOSTDOWN", "host is down"},
+	{148, "EHOSTUNREACH", "no route to host"},
+	{149, "EALREADY", "operation already in progress"},
+	{150, "EINPROGRESS", "operation now in progress"},
+	{151, "ESTALE", "stale file handle"},
+	{158, "ECANCELED", "operation canceled"},
+	{159, "ENOMEDIUM", "no medium found"},
+	{160, "EMEDIUMTYPE", "wrong medium type"},
+	{161, "ENOKEY", "required key not available"},
+	{162, "EKEYEXPIRED", "key has expired"},
+	{163, "EKEYREVOKED", "key has been revoked"},
+	{164, "EKEYREJECTED", "key was rejected by service"},
+	{165, "EOWNERDEAD", "owner died"},
+	{166, "ENOTRECOVERABLE", "state not recoverable"},
+	{167, "ERFKILL", "operation not possible due to RF-kill"},
+	{168, "EHWPOISON", "memory page has hardware error"},
+	{1133, "EDQUOT", "disk quota exceeded"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/breakpoint trap"},
+	{6, "SIGABRT", "aborted"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGUSR1", "user defined signal 1"},
+	{17, "SIGUSR2", "user defined signal 2"},
+	{18, "SIGCHLD", "child exited"},
+	{19, "SIGPWR", "power failure"},
+	{20, "SIGWINCH", "window changed"},
+	{21, "SIGURG", "urgent I/O condition"},
+	{22, "SIGIO", "I/O possible"},
+	{23, "SIGSTOP", "stopped (signal)"},
+	{24, "SIGTSTP", "stopped"},
+	{25, "SIGCONT", "continued"},
+	{26, "SIGTTIN", "stopped (tty input)"},
+	{27, "SIGTTOU", "stopped (tty output)"},
+	{28, "SIGVTALRM", "virtual timer expired"},
+	{29, "SIGPROF", "profiling timer expired"},
+	{30, "SIGXCPU", "CPU time limit exceeded"},
+	{31, "SIGXFSZ", "file size limit exceeded"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64.go
new file mode 100644
index 000000000..941e20dac
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64.go
@@ -0,0 +1,853 @@
+// mkerrors.sh -Wall -Werror -static -I/tmp/include
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build ppc64,linux
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	B1000000                         = 0x17
+	B115200                          = 0x11
+	B1152000                         = 0x18
+	B1500000                         = 0x19
+	B2000000                         = 0x1a
+	B230400                          = 0x12
+	B2500000                         = 0x1b
+	B3000000                         = 0x1c
+	B3500000                         = 0x1d
+	B4000000                         = 0x1e
+	B460800                          = 0x13
+	B500000                          = 0x14
+	B57600                           = 0x10
+	B576000                          = 0x15
+	B921600                          = 0x16
+	BLKBSZGET                        = 0x40081270
+	BLKBSZSET                        = 0x80081271
+	BLKFLSBUF                        = 0x20001261
+	BLKFRAGET                        = 0x20001265
+	BLKFRASET                        = 0x20001264
+	BLKGETSIZE                       = 0x20001260
+	BLKGETSIZE64                     = 0x40081272
+	BLKPBSZGET                       = 0x2000127b
+	BLKRAGET                         = 0x20001263
+	BLKRASET                         = 0x20001262
+	BLKROGET                         = 0x2000125e
+	BLKROSET                         = 0x2000125d
+	BLKRRPART                        = 0x2000125f
+	BLKSECTGET                       = 0x20001267
+	BLKSECTSET                       = 0x20001266
+	BLKSSZGET                        = 0x20001268
+	BOTHER                           = 0x1f
+	BS1                              = 0x8000
+	BSDLY                            = 0x8000
+	CBAUD                            = 0xff
+	CBAUDEX                          = 0x0
+	CIBAUD                           = 0xff0000
+	CLOCAL                           = 0x8000
+	CR1                              = 0x1000
+	CR2                              = 0x2000
+	CR3                              = 0x3000
+	CRDLY                            = 0x3000
+	CREAD                            = 0x800
+	CS6                              = 0x100
+	CS7                              = 0x200
+	CS8                              = 0x300
+	CSIZE                            = 0x300
+	CSTOPB                           = 0x400
+	ECHOCTL                          = 0x40
+	ECHOE                            = 0x2
+	ECHOK                            = 0x4
+	ECHOKE                           = 0x1
+	ECHONL                           = 0x10
+	ECHOPRT                          = 0x20
+	EFD_CLOEXEC                      = 0x80000
+	EFD_NONBLOCK                     = 0x800
+	EPOLL_CLOEXEC                    = 0x80000
+	EXTPROC                          = 0x10000000
+	FF1                              = 0x4000
+	FFDLY                            = 0x4000
+	FICLONE                          = 0x80049409
+	FICLONERANGE                     = 0x8020940d
+	FLUSHO                           = 0x800000
+	FS_IOC_ENABLE_VERITY             = 0x80806685
+	FS_IOC_GETFLAGS                  = 0x40086601
+	FS_IOC_GET_ENCRYPTION_NONCE      = 0x4010661b
+	FS_IOC_GET_ENCRYPTION_POLICY     = 0x800c6615
+	FS_IOC_GET_ENCRYPTION_PWSALT     = 0x80106614
+	FS_IOC_SETFLAGS                  = 0x80086602
+	FS_IOC_SET_ENCRYPTION_POLICY     = 0x400c6613
+	F_GETLK                          = 0x5
+	F_GETLK64                        = 0xc
+	F_GETOWN                         = 0x9
+	F_RDLCK                          = 0x0
+	F_SETLK                          = 0x6
+	F_SETLK64                        = 0xd
+	F_SETLKW                         = 0x7
+	F_SETLKW64                       = 0xe
+	F_SETOWN                         = 0x8
+	F_UNLCK                          = 0x2
+	F_WRLCK                          = 0x1
+	HUPCL                            = 0x4000
+	ICANON                           = 0x100
+	IEXTEN                           = 0x400
+	IN_CLOEXEC                       = 0x80000
+	IN_NONBLOCK                      = 0x800
+	IOCTL_VM_SOCKETS_GET_LOCAL_CID   = 0x200007b9
+	ISIG                             = 0x80
+	IUCLC                            = 0x1000
+	IXOFF                            = 0x400
+	IXON                             = 0x200
+	MAP_ANON                         = 0x20
+	MAP_ANONYMOUS                    = 0x20
+	MAP_DENYWRITE                    = 0x800
+	MAP_EXECUTABLE                   = 0x1000
+	MAP_GROWSDOWN                    = 0x100
+	MAP_HUGETLB                      = 0x40000
+	MAP_LOCKED                       = 0x80
+	MAP_NONBLOCK                     = 0x10000
+	MAP_NORESERVE                    = 0x40
+	MAP_POPULATE                     = 0x8000
+	MAP_STACK                        = 0x20000
+	MAP_SYNC                         = 0x80000
+	MCL_CURRENT                      = 0x2000
+	MCL_FUTURE                       = 0x4000
+	MCL_ONFAULT                      = 0x8000
+	NFDBITS                          = 0x40
+	NL2                              = 0x200
+	NL3                              = 0x300
+	NLDLY                            = 0x300
+	NOFLSH                           = 0x80000000
+	NS_GET_NSTYPE                    = 0x2000b703
+	NS_GET_OWNER_UID                 = 0x2000b704
+	NS_GET_PARENT                    = 0x2000b702
+	NS_GET_USERNS                    = 0x2000b701
+	OLCUC                            = 0x4
+	ONLCR                            = 0x2
+	O_APPEND                         = 0x400
+	O_ASYNC                          = 0x2000
+	O_CLOEXEC                        = 0x80000
+	O_CREAT                          = 0x40
+	O_DIRECT                         = 0x20000
+	O_DIRECTORY                      = 0x4000
+	O_DSYNC                          = 0x1000
+	O_EXCL                           = 0x80
+	O_FSYNC                          = 0x101000
+	O_LARGEFILE                      = 0x0
+	O_NDELAY                         = 0x800
+	O_NOATIME                        = 0x40000
+	O_NOCTTY                         = 0x100
+	O_NOFOLLOW                       = 0x8000
+	O_NONBLOCK                       = 0x800
+	O_PATH                           = 0x200000
+	O_RSYNC                          = 0x101000
+	O_SYNC                           = 0x101000
+	O_TMPFILE                        = 0x404000
+	O_TRUNC                          = 0x200
+	PARENB                           = 0x1000
+	PARODD                           = 0x2000
+	PENDIN                           = 0x20000000
+	PERF_EVENT_IOC_DISABLE           = 0x20002401
+	PERF_EVENT_IOC_ENABLE            = 0x20002400
+	PERF_EVENT_IOC_ID                = 0x40082407
+	PERF_EVENT_IOC_MODIFY_ATTRIBUTES = 0x8008240b
+	PERF_EVENT_IOC_PAUSE_OUTPUT      = 0x80042409
+	PERF_EVENT_IOC_PERIOD            = 0x80082404
+	PERF_EVENT_IOC_QUERY_BPF         = 0xc008240a
+	PERF_EVENT_IOC_REFRESH           = 0x20002402
+	PERF_EVENT_IOC_RESET             = 0x20002403
+	PERF_EVENT_IOC_SET_BPF           = 0x80042408
+	PERF_EVENT_IOC_SET_FILTER        = 0x80082406
+	PERF_EVENT_IOC_SET_OUTPUT        = 0x20002405
+	PPPIOCATTACH                     = 0x8004743d
+	PPPIOCATTCHAN                    = 0x80047438
+	PPPIOCCONNECT                    = 0x8004743a
+	PPPIOCDETACH                     = 0x8004743c
+	PPPIOCDISCONN                    = 0x20007439
+	PPPIOCGASYNCMAP                  = 0x40047458
+	PPPIOCGCHAN                      = 0x40047437
+	PPPIOCGDEBUG                     = 0x40047441
+	PPPIOCGFLAGS                     = 0x4004745a
+	PPPIOCGIDLE                      = 0x4010743f
+	PPPIOCGIDLE32                    = 0x4008743f
+	PPPIOCGIDLE64                    = 0x4010743f
+	PPPIOCGL2TPSTATS                 = 0x40487436
+	PPPIOCGMRU                       = 0x40047453
+	PPPIOCGRASYNCMAP                 = 0x40047455
+	PPPIOCGUNIT                      = 0x40047456
+	PPPIOCGXASYNCMAP                 = 0x40207450
+	PPPIOCSACTIVE                    = 0x80107446
+	PPPIOCSASYNCMAP                  = 0x80047457
+	PPPIOCSCOMPRESS                  = 0x8010744d
+	PPPIOCSDEBUG                     = 0x80047440
+	PPPIOCSFLAGS                     = 0x80047459
+	PPPIOCSMAXCID                    = 0x80047451
+	PPPIOCSMRRU                      = 0x8004743b
+	PPPIOCSMRU                       = 0x80047452
+	PPPIOCSNPMODE                    = 0x8008744b
+	PPPIOCSPASS                      = 0x80107447
+	PPPIOCSRASYNCMAP                 = 0x80047454
+	PPPIOCSXASYNCMAP                 = 0x8020744f
+	PPPIOCXFERUNIT                   = 0x2000744e
+	PROT_SAO                         = 0x10
+	PR_SET_PTRACER_ANY               = 0xffffffffffffffff
+	PTRACE_GETEVRREGS                = 0x14
+	PTRACE_GETFPREGS                 = 0xe
+	PTRACE_GETREGS64                 = 0x16
+	PTRACE_GETVRREGS                 = 0x12
+	PTRACE_GETVSRREGS                = 0x1b
+	PTRACE_GET_DEBUGREG              = 0x19
+	PTRACE_SETEVRREGS                = 0x15
+	PTRACE_SETFPREGS                 = 0xf
+	PTRACE_SETREGS64                 = 0x17
+	PTRACE_SETVRREGS                 = 0x13
+	PTRACE_SETVSRREGS                = 0x1c
+	PTRACE_SET_DEBUGREG              = 0x1a
+	PTRACE_SINGLEBLOCK               = 0x100
+	PTRACE_SYSEMU                    = 0x1d
+	PTRACE_SYSEMU_SINGLESTEP         = 0x1e
+	PT_CCR                           = 0x26
+	PT_CTR                           = 0x23
+	PT_DAR                           = 0x29
+	PT_DSCR                          = 0x2c
+	PT_DSISR                         = 0x2a
+	PT_FPR0                          = 0x30
+	PT_FPSCR                         = 0x50
+	PT_LNK                           = 0x24
+	PT_MSR                           = 0x21
+	PT_NIP                           = 0x20
+	PT_ORIG_R3                       = 0x22
+	PT_R0                            = 0x0
+	PT_R1                            = 0x1
+	PT_R10                           = 0xa
+	PT_R11                           = 0xb
+	PT_R12                           = 0xc
+	PT_R13                           = 0xd
+	PT_R14                           = 0xe
+	PT_R15                           = 0xf
+	PT_R16                           = 0x10
+	PT_R17                           = 0x11
+	PT_R18                           = 0x12
+	PT_R19                           = 0x13
+	PT_R2                            = 0x2
+	PT_R20                           = 0x14
+	PT_R21                           = 0x15
+	PT_R22                           = 0x16
+	PT_R23                           = 0x17
+	PT_R24                           = 0x18
+	PT_R25                           = 0x19
+	PT_R26                           = 0x1a
+	PT_R27                           = 0x1b
+	PT_R28                           = 0x1c
+	PT_R29                           = 0x1d
+	PT_R3                            = 0x3
+	PT_R30                           = 0x1e
+	PT_R31                           = 0x1f
+	PT_R4                            = 0x4
+	PT_R5                            = 0x5
+	PT_R6                            = 0x6
+	PT_R7                            = 0x7
+	PT_R8                            = 0x8
+	PT_R9                            = 0x9
+	PT_REGS_COUNT                    = 0x2c
+	PT_RESULT                        = 0x2b
+	PT_SOFTE                         = 0x27
+	PT_TRAP                          = 0x28
+	PT_VR0                           = 0x52
+	PT_VRSAVE                        = 0x94
+	PT_VSCR                          = 0x93
+	PT_VSR0                          = 0x96
+	PT_VSR31                         = 0xd4
+	PT_XER                           = 0x25
+	RLIMIT_AS                        = 0x9
+	RLIMIT_MEMLOCK                   = 0x8
+	RLIMIT_NOFILE                    = 0x7
+	RLIMIT_NPROC                     = 0x6
+	RLIMIT_RSS                       = 0x5
+	RNDADDENTROPY                    = 0x80085203
+	RNDADDTOENTCNT                   = 0x80045201
+	RNDCLEARPOOL                     = 0x20005206
+	RNDGETENTCNT                     = 0x40045200
+	RNDGETPOOL                       = 0x40085202
+	RNDRESEEDCRNG                    = 0x20005207
+	RNDZAPENTCNT                     = 0x20005204
+	RTC_AIE_OFF                      = 0x20007002
+	RTC_AIE_ON                       = 0x20007001
+	RTC_ALM_READ                     = 0x40247008
+	RTC_ALM_SET                      = 0x80247007
+	RTC_EPOCH_READ                   = 0x4008700d
+	RTC_EPOCH_SET                    = 0x8008700e
+	RTC_IRQP_READ                    = 0x4008700b
+	RTC_IRQP_SET                     = 0x8008700c
+	RTC_PIE_OFF                      = 0x20007006
+	RTC_PIE_ON                       = 0x20007005
+	RTC_PLL_GET                      = 0x40207011
+	RTC_PLL_SET                      = 0x80207012
+	RTC_RD_TIME                      = 0x40247009
+	RTC_SET_TIME                     = 0x8024700a
+	RTC_UIE_OFF                      = 0x20007004
+	RTC_UIE_ON                       = 0x20007003
+	RTC_VL_CLR                       = 0x20007014
+	RTC_VL_READ                      = 0x40047013
+	RTC_WIE_OFF                      = 0x20007010
+	RTC_WIE_ON                       = 0x2000700f
+	RTC_WKALM_RD                     = 0x40287010
+	RTC_WKALM_SET                    = 0x8028700f
+	SCM_TIMESTAMPING                 = 0x25
+	SCM_TIMESTAMPING_OPT_STATS       = 0x36
+	SCM_TIMESTAMPING_PKTINFO         = 0x3a
+	SCM_TIMESTAMPNS                  = 0x23
+	SCM_TXTIME                       = 0x3d
+	SCM_WIFI_STATUS                  = 0x29
+	SFD_CLOEXEC                      = 0x80000
+	SFD_NONBLOCK                     = 0x800
+	SIOCATMARK                       = 0x8905
+	SIOCGPGRP                        = 0x8904
+	SIOCGSTAMPNS_NEW                 = 0x40108907
+	SIOCGSTAMP_NEW                   = 0x40108906
+	SIOCINQ                          = 0x4004667f
+	SIOCOUTQ                         = 0x40047473
+	SIOCSPGRP                        = 0x8902
+	SOCK_CLOEXEC                     = 0x80000
+	SOCK_DGRAM                       = 0x2
+	SOCK_NONBLOCK                    = 0x800
+	SOCK_STREAM                      = 0x1
+	SOL_SOCKET                       = 0x1
+	SO_ACCEPTCONN                    = 0x1e
+	SO_ATTACH_BPF                    = 0x32
+	SO_ATTACH_REUSEPORT_CBPF         = 0x33
+	SO_ATTACH_REUSEPORT_EBPF         = 0x34
+	SO_BINDTODEVICE                  = 0x19
+	SO_BINDTOIFINDEX                 = 0x3e
+	SO_BPF_EXTENSIONS                = 0x30
+	SO_BROADCAST                     = 0x6
+	SO_BSDCOMPAT                     = 0xe
+	SO_BUSY_POLL                     = 0x2e
+	SO_CNX_ADVICE                    = 0x35
+	SO_COOKIE                        = 0x39
+	SO_DETACH_REUSEPORT_BPF          = 0x44
+	SO_DOMAIN                        = 0x27
+	SO_DONTROUTE                     = 0x5
+	SO_ERROR                         = 0x4
+	SO_INCOMING_CPU                  = 0x31
+	SO_INCOMING_NAPI_ID              = 0x38
+	SO_KEEPALIVE                     = 0x9
+	SO_LINGER                        = 0xd
+	SO_LOCK_FILTER                   = 0x2c
+	SO_MARK                          = 0x24
+	SO_MAX_PACING_RATE               = 0x2f
+	SO_MEMINFO                       = 0x37
+	SO_NOFCS                         = 0x2b
+	SO_OOBINLINE                     = 0xa
+	SO_PASSCRED                      = 0x14
+	SO_PASSSEC                       = 0x22
+	SO_PEEK_OFF                      = 0x2a
+	SO_PEERCRED                      = 0x15
+	SO_PEERGROUPS                    = 0x3b
+	SO_PEERSEC                       = 0x1f
+	SO_PROTOCOL                      = 0x26
+	SO_RCVBUF                        = 0x8
+	SO_RCVBUFFORCE                   = 0x21
+	SO_RCVLOWAT                      = 0x10
+	SO_RCVTIMEO                      = 0x12
+	SO_RCVTIMEO_NEW                  = 0x42
+	SO_RCVTIMEO_OLD                  = 0x12
+	SO_REUSEADDR                     = 0x2
+	SO_REUSEPORT                     = 0xf
+	SO_RXQ_OVFL                      = 0x28
+	SO_SECURITY_AUTHENTICATION       = 0x16
+	SO_SECURITY_ENCRYPTION_NETWORK   = 0x18
+	SO_SECURITY_ENCRYPTION_TRANSPORT = 0x17
+	SO_SELECT_ERR_QUEUE              = 0x2d
+	SO_SNDBUF                        = 0x7
+	SO_SNDBUFFORCE                   = 0x20
+	SO_SNDLOWAT                      = 0x11
+	SO_SNDTIMEO                      = 0x13
+	SO_SNDTIMEO_NEW                  = 0x43
+	SO_SNDTIMEO_OLD                  = 0x13
+	SO_TIMESTAMPING                  = 0x25
+	SO_TIMESTAMPING_NEW              = 0x41
+	SO_TIMESTAMPING_OLD              = 0x25
+	SO_TIMESTAMPNS                   = 0x23
+	SO_TIMESTAMPNS_NEW               = 0x40
+	SO_TIMESTAMPNS_OLD               = 0x23
+	SO_TIMESTAMP_NEW                 = 0x3f
+	SO_TXTIME                        = 0x3d
+	SO_TYPE                          = 0x3
+	SO_WIFI_STATUS                   = 0x29
+	SO_ZEROCOPY                      = 0x3c
+	TAB1                             = 0x400
+	TAB2                             = 0x800
+	TAB3                             = 0xc00
+	TABDLY                           = 0xc00
+	TCFLSH                           = 0x2000741f
+	TCGETA                           = 0x40147417
+	TCGETS                           = 0x402c7413
+	TCSAFLUSH                        = 0x2
+	TCSBRK                           = 0x2000741d
+	TCSBRKP                          = 0x5425
+	TCSETA                           = 0x80147418
+	TCSETAF                          = 0x8014741c
+	TCSETAW                          = 0x80147419
+	TCSETS                           = 0x802c7414
+	TCSETSF                          = 0x802c7416
+	TCSETSW                          = 0x802c7415
+	TCXONC                           = 0x2000741e
+	TFD_CLOEXEC                      = 0x80000
+	TFD_NONBLOCK                     = 0x800
+	TIOCCBRK                         = 0x5428
+	TIOCCONS                         = 0x541d
+	TIOCEXCL                         = 0x540c
+	TIOCGDEV                         = 0x40045432
+	TIOCGETC                         = 0x40067412
+	TIOCGETD                         = 0x5424
+	TIOCGETP                         = 0x40067408
+	TIOCGEXCL                        = 0x40045440
+	TIOCGICOUNT                      = 0x545d
+	TIOCGISO7816                     = 0x40285442
+	TIOCGLCKTRMIOS                   = 0x5456
+	TIOCGLTC                         = 0x40067474
+	TIOCGPGRP                        = 0x40047477
+	TIOCGPKT                         = 0x40045438
+	TIOCGPTLCK                       = 0x40045439
+	TIOCGPTN                         = 0x40045430
+	TIOCGPTPEER                      = 0x20005441
+	TIOCGRS485                       = 0x542e
+	TIOCGSERIAL                      = 0x541e
+	TIOCGSID                         = 0x5429
+	TIOCGSOFTCAR                     = 0x5419
+	TIOCGWINSZ                       = 0x40087468
+	TIOCINQ                          = 0x4004667f
+	TIOCLINUX                        = 0x541c
+	TIOCMBIC                         = 0x5417
+	TIOCMBIS                         = 0x5416
+	TIOCMGET                         = 0x5415
+	TIOCMIWAIT                       = 0x545c
+	TIOCMSET                         = 0x5418
+	TIOCM_CAR                        = 0x40
+	TIOCM_CD                         = 0x40
+	TIOCM_CTS                        = 0x20
+	TIOCM_DSR                        = 0x100
+	TIOCM_LOOP                       = 0x8000
+	TIOCM_OUT1                       = 0x2000
+	TIOCM_OUT2                       = 0x4000
+	TIOCM_RI                         = 0x80
+	TIOCM_RNG                        = 0x80
+	TIOCM_SR                         = 0x10
+	TIOCM_ST                         = 0x8
+	TIOCNOTTY                        = 0x5422
+	TIOCNXCL                         = 0x540d
+	TIOCOUTQ                         = 0x40047473
+	TIOCPKT                          = 0x5420
+	TIOCSBRK                         = 0x5427
+	TIOCSCTTY                        = 0x540e
+	TIOCSERCONFIG                    = 0x5453
+	TIOCSERGETLSR                    = 0x5459
+	TIOCSERGETMULTI                  = 0x545a
+	TIOCSERGSTRUCT                   = 0x5458
+	TIOCSERGWILD                     = 0x5454
+	TIOCSERSETMULTI                  = 0x545b
+	TIOCSERSWILD                     = 0x5455
+	TIOCSER_TEMT                     = 0x1
+	TIOCSETC                         = 0x80067411
+	TIOCSETD                         = 0x5423
+	TIOCSETN                         = 0x8006740a
+	TIOCSETP                         = 0x80067409
+	TIOCSIG                          = 0x80045436
+	TIOCSISO7816                     = 0xc0285443
+	TIOCSLCKTRMIOS                   = 0x5457
+	TIOCSLTC                         = 0x80067475
+	TIOCSPGRP                        = 0x80047476
+	TIOCSPTLCK                       = 0x80045431
+	TIOCSRS485                       = 0x542f
+	TIOCSSERIAL                      = 0x541f
+	TIOCSSOFTCAR                     = 0x541a
+	TIOCSTART                        = 0x2000746e
+	TIOCSTI                          = 0x5412
+	TIOCSTOP                         = 0x2000746f
+	TIOCSWINSZ                       = 0x80087467
+	TIOCVHANGUP                      = 0x5437
+	TOSTOP                           = 0x400000
+	TUNATTACHFILTER                  = 0x801054d5
+	TUNDETACHFILTER                  = 0x801054d6
+	TUNGETDEVNETNS                   = 0x200054e3
+	TUNGETFEATURES                   = 0x400454cf
+	TUNGETFILTER                     = 0x401054db
+	TUNGETIFF                        = 0x400454d2
+	TUNGETSNDBUF                     = 0x400454d3
+	TUNGETVNETBE                     = 0x400454df
+	TUNGETVNETHDRSZ                  = 0x400454d7
+	TUNGETVNETLE                     = 0x400454dd
+	TUNSETCARRIER                    = 0x800454e2
+	TUNSETDEBUG                      = 0x800454c9
+	TUNSETFILTEREBPF                 = 0x400454e1
+	TUNSETGROUP                      = 0x800454ce
+	TUNSETIFF                        = 0x800454ca
+	TUNSETIFINDEX                    = 0x800454da
+	TUNSETLINK                       = 0x800454cd
+	TUNSETNOCSUM                     = 0x800454c8
+	TUNSETOFFLOAD                    = 0x800454d0
+	TUNSETOWNER                      = 0x800454cc
+	TUNSETPERSIST                    = 0x800454cb
+	TUNSETQUEUE                      = 0x800454d9
+	TUNSETSNDBUF                     = 0x800454d4
+	TUNSETSTEERINGEBPF               = 0x400454e0
+	TUNSETTXFILTER                   = 0x800454d1
+	TUNSETVNETBE                     = 0x800454de
+	TUNSETVNETHDRSZ                  = 0x800454d8
+	TUNSETVNETLE                     = 0x800454dc
+	UBI_IOCATT                       = 0x80186f40
+	UBI_IOCDET                       = 0x80046f41
+	UBI_IOCEBCH                      = 0x80044f02
+	UBI_IOCEBER                      = 0x80044f01
+	UBI_IOCEBISMAP                   = 0x40044f05
+	UBI_IOCEBMAP                     = 0x80084f03
+	UBI_IOCEBUNMAP                   = 0x80044f04
+	UBI_IOCMKVOL                     = 0x80986f00
+	UBI_IOCRMVOL                     = 0x80046f01
+	UBI_IOCRNVOL                     = 0x91106f03
+	UBI_IOCRPEB                      = 0x80046f04
+	UBI_IOCRSVOL                     = 0x800c6f02
+	UBI_IOCSETVOLPROP                = 0x80104f06
+	UBI_IOCSPEB                      = 0x80046f05
+	UBI_IOCVOLCRBLK                  = 0x80804f07
+	UBI_IOCVOLRMBLK                  = 0x20004f08
+	UBI_IOCVOLUP                     = 0x80084f00
+	VDISCARD                         = 0x10
+	VEOF                             = 0x4
+	VEOL                             = 0x6
+	VEOL2                            = 0x8
+	VMIN                             = 0x5
+	VREPRINT                         = 0xb
+	VSTART                           = 0xd
+	VSTOP                            = 0xe
+	VSUSP                            = 0xc
+	VSWTC                            = 0x9
+	VT1                              = 0x10000
+	VTDLY                            = 0x10000
+	VTIME                            = 0x7
+	VWERASE                          = 0xa
+	WDIOC_GETBOOTSTATUS              = 0x40045702
+	WDIOC_GETPRETIMEOUT              = 0x40045709
+	WDIOC_GETSTATUS                  = 0x40045701
+	WDIOC_GETSUPPORT                 = 0x40285700
+	WDIOC_GETTEMP                    = 0x40045703
+	WDIOC_GETTIMELEFT                = 0x4004570a
+	WDIOC_GETTIMEOUT                 = 0x40045707
+	WDIOC_KEEPALIVE                  = 0x40045705
+	WDIOC_SETOPTIONS                 = 0x40045704
+	WORDSIZE                         = 0x40
+	XCASE                            = 0x4000
+	XTABS                            = 0xc00
+)
+
+// Errors
+const (
+	EADDRINUSE      = syscall.Errno(0x62)
+	EADDRNOTAVAIL   = syscall.Errno(0x63)
+	EADV            = syscall.Errno(0x44)
+	EAFNOSUPPORT    = syscall.Errno(0x61)
+	EALREADY        = syscall.Errno(0x72)
+	EBADE           = syscall.Errno(0x34)
+	EBADFD          = syscall.Errno(0x4d)
+	EBADMSG         = syscall.Errno(0x4a)
+	EBADR           = syscall.Errno(0x35)
+	EBADRQC         = syscall.Errno(0x38)
+	EBADSLT         = syscall.Errno(0x39)
+	EBFONT          = syscall.Errno(0x3b)
+	ECANCELED       = syscall.Errno(0x7d)
+	ECHRNG          = syscall.Errno(0x2c)
+	ECOMM           = syscall.Errno(0x46)
+	ECONNABORTED    = syscall.Errno(0x67)
+	ECONNREFUSED    = syscall.Errno(0x6f)
+	ECONNRESET      = syscall.Errno(0x68)
+	EDEADLK         = syscall.Errno(0x23)
+	EDEADLOCK       = syscall.Errno(0x3a)
+	EDESTADDRREQ    = syscall.Errno(0x59)
+	EDOTDOT         = syscall.Errno(0x49)
+	EDQUOT          = syscall.Errno(0x7a)
+	EHOSTDOWN       = syscall.Errno(0x70)
+	EHOSTUNREACH    = syscall.Errno(0x71)
+	EHWPOISON       = syscall.Errno(0x85)
+	EIDRM           = syscall.Errno(0x2b)
+	EILSEQ          = syscall.Errno(0x54)
+	EINPROGRESS     = syscall.Errno(0x73)
+	EISCONN         = syscall.Errno(0x6a)
+	EISNAM          = syscall.Errno(0x78)
+	EKEYEXPIRED     = syscall.Errno(0x7f)
+	EKEYREJECTED    = syscall.Errno(0x81)
+	EKEYREVOKED     = syscall.Errno(0x80)
+	EL2HLT          = syscall.Errno(0x33)
+	EL2NSYNC        = syscall.Errno(0x2d)
+	EL3HLT          = syscall.Errno(0x2e)
+	EL3RST          = syscall.Errno(0x2f)
+	ELIBACC         = syscall.Errno(0x4f)
+	ELIBBAD         = syscall.Errno(0x50)
+	ELIBEXEC        = syscall.Errno(0x53)
+	ELIBMAX         = syscall.Errno(0x52)
+	ELIBSCN         = syscall.Errno(0x51)
+	ELNRNG          = syscall.Errno(0x30)
+	ELOOP           = syscall.Errno(0x28)
+	EMEDIUMTYPE     = syscall.Errno(0x7c)
+	EMSGSIZE        = syscall.Errno(0x5a)
+	EMULTIHOP       = syscall.Errno(0x48)
+	ENAMETOOLONG    = syscall.Errno(0x24)
+	ENAVAIL         = syscall.Errno(0x77)
+	ENETDOWN        = syscall.Errno(0x64)
+	ENETRESET       = syscall.Errno(0x66)
+	ENETUNREACH     = syscall.Errno(0x65)
+	ENOANO          = syscall.Errno(0x37)
+	ENOBUFS         = syscall.Errno(0x69)
+	ENOCSI          = syscall.Errno(0x32)
+	ENODATA         = syscall.Errno(0x3d)
+	ENOKEY          = syscall.Errno(0x7e)
+	ENOLCK          = syscall.Errno(0x25)
+	ENOLINK         = syscall.Errno(0x43)
+	ENOMEDIUM       = syscall.Errno(0x7b)
+	ENOMSG          = syscall.Errno(0x2a)
+	ENONET          = syscall.Errno(0x40)
+	ENOPKG          = syscall.Errno(0x41)
+	ENOPROTOOPT     = syscall.Errno(0x5c)
+	ENOSR           = syscall.Errno(0x3f)
+	ENOSTR          = syscall.Errno(0x3c)
+	ENOSYS          = syscall.Errno(0x26)
+	ENOTCONN        = syscall.Errno(0x6b)
+	ENOTEMPTY       = syscall.Errno(0x27)
+	ENOTNAM         = syscall.Errno(0x76)
+	ENOTRECOVERABLE = syscall.Errno(0x83)
+	ENOTSOCK        = syscall.Errno(0x58)
+	ENOTSUP         = syscall.Errno(0x5f)
+	ENOTUNIQ        = syscall.Errno(0x4c)
+	EOPNOTSUPP      = syscall.Errno(0x5f)
+	EOVERFLOW       = syscall.Errno(0x4b)
+	EOWNERDEAD      = syscall.Errno(0x82)
+	EPFNOSUPPORT    = syscall.Errno(0x60)
+	EPROTO          = syscall.Errno(0x47)
+	EPROTONOSUPPORT = syscall.Errno(0x5d)
+	EPROTOTYPE      = syscall.Errno(0x5b)
+	EREMCHG         = syscall.Errno(0x4e)
+	EREMOTE         = syscall.Errno(0x42)
+	EREMOTEIO       = syscall.Errno(0x79)
+	ERESTART        = syscall.Errno(0x55)
+	ERFKILL         = syscall.Errno(0x84)
+	ESHUTDOWN       = syscall.Errno(0x6c)
+	ESOCKTNOSUPPORT = syscall.Errno(0x5e)
+	ESRMNT          = syscall.Errno(0x45)
+	ESTALE          = syscall.Errno(0x74)
+	ESTRPIPE        = syscall.Errno(0x56)
+	ETIME           = syscall.Errno(0x3e)
+	ETIMEDOUT       = syscall.Errno(0x6e)
+	ETOOMANYREFS    = syscall.Errno(0x6d)
+	EUCLEAN         = syscall.Errno(0x75)
+	EUNATCH         = syscall.Errno(0x31)
+	EUSERS          = syscall.Errno(0x57)
+	EXFULL          = syscall.Errno(0x36)
+)
+
+// Signals
+const (
+	SIGBUS    = syscall.Signal(0x7)
+	SIGCHLD   = syscall.Signal(0x11)
+	SIGCLD    = syscall.Signal(0x11)
+	SIGCONT   = syscall.Signal(0x12)
+	SIGIO     = syscall.Signal(0x1d)
+	SIGPOLL   = syscall.Signal(0x1d)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGPWR    = syscall.Signal(0x1e)
+	SIGSTKFLT = syscall.Signal(0x10)
+	SIGSTOP   = syscall.Signal(0x13)
+	SIGSYS    = syscall.Signal(0x1f)
+	SIGTSTP   = syscall.Signal(0x14)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x17)
+	SIGUSR1   = syscall.Signal(0xa)
+	SIGUSR2   = syscall.Signal(0xc)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "no such device or address"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EAGAIN", "resource temporarily unavailable"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device or resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "invalid cross-device link"},
+	{19, "ENODEV", "no such device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "numerical result out of range"},
+	{35, "EDEADLK", "resource deadlock avoided"},
+	{36, "ENAMETOOLONG", "file name too long"},
+	{37, "ENOLCK", "no locks available"},
+	{38, "ENOSYS", "function not implemented"},
+	{39, "ENOTEMPTY", "directory not empty"},
+	{40, "ELOOP", "too many levels of symbolic links"},
+	{42, "ENOMSG", "no message of desired type"},
+	{43, "EIDRM", "identifier removed"},
+	{44, "ECHRNG", "channel number out of range"},
+	{45, "EL2NSYNC", "level 2 not synchronized"},
+	{46, "EL3HLT", "level 3 halted"},
+	{47, "EL3RST", "level 3 reset"},
+	{48, "ELNRNG", "link number out of range"},
+	{49, "EUNATCH", "protocol driver not attached"},
+	{50, "ENOCSI", "no CSI structure available"},
+	{51, "EL2HLT", "level 2 halted"},
+	{52, "EBADE", "invalid exchange"},
+	{53, "EBADR", "invalid request descriptor"},
+	{54, "EXFULL", "exchange full"},
+	{55, "ENOANO", "no anode"},
+	{56, "EBADRQC", "invalid request code"},
+	{57, "EBADSLT", "invalid slot"},
+	{58, "EDEADLOCK", "file locking deadlock error"},
+	{59, "EBFONT", "bad font file format"},
+	{60, "ENOSTR", "device not a stream"},
+	{61, "ENODATA", "no data available"},
+	{62, "ETIME", "timer expired"},
+	{63, "ENOSR", "out of streams resources"},
+	{64, "ENONET", "machine is not on the network"},
+	{65, "ENOPKG", "package not installed"},
+	{66, "EREMOTE", "object is remote"},
+	{67, "ENOLINK", "link has been severed"},
+	{68, "EADV", "advertise error"},
+	{69, "ESRMNT", "srmount error"},
+	{70, "ECOMM", "communication error on send"},
+	{71, "EPROTO", "protocol error"},
+	{72, "EMULTIHOP", "multihop attempted"},
+	{73, "EDOTDOT", "RFS specific error"},
+	{74, "EBADMSG", "bad message"},
+	{75, "EOVERFLOW", "value too large for defined data type"},
+	{76, "ENOTUNIQ", "name not unique on network"},
+	{77, "EBADFD", "file descriptor in bad state"},
+	{78, "EREMCHG", "remote address changed"},
+	{79, "ELIBACC", "can not access a needed shared library"},
+	{80, "ELIBBAD", "accessing a corrupted shared library"},
+	{81, "ELIBSCN", ".lib section in a.out corrupted"},
+	{82, "ELIBMAX", "attempting to link in too many shared libraries"},
+	{83, "ELIBEXEC", "cannot exec a shared library directly"},
+	{84, "EILSEQ", "invalid or incomplete multibyte or wide character"},
+	{85, "ERESTART", "interrupted system call should be restarted"},
+	{86, "ESTRPIPE", "streams pipe error"},
+	{87, "EUSERS", "too many users"},
+	{88, "ENOTSOCK", "socket operation on non-socket"},
+	{89, "EDESTADDRREQ", "destination address required"},
+	{90, "EMSGSIZE", "message too long"},
+	{91, "EPROTOTYPE", "protocol wrong type for socket"},
+	{92, "ENOPROTOOPT", "protocol not available"},
+	{93, "EPROTONOSUPPORT", "protocol not supported"},
+	{94, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{95, "ENOTSUP", "operation not supported"},
+	{96, "EPFNOSUPPORT", "protocol family not supported"},
+	{97, "EAFNOSUPPORT", "address family not supported by protocol"},
+	{98, "EADDRINUSE", "address already in use"},
+	{99, "EADDRNOTAVAIL", "cannot assign requested address"},
+	{100, "ENETDOWN", "network is down"},
+	{101, "ENETUNREACH", "network is unreachable"},
+	{102, "ENETRESET", "network dropped connection on reset"},
+	{103, "ECONNABORTED", "software caused connection abort"},
+	{104, "ECONNRESET", "connection reset by peer"},
+	{105, "ENOBUFS", "no buffer space available"},
+	{106, "EISCONN", "transport endpoint is already connected"},
+	{107, "ENOTCONN", "transport endpoint is not connected"},
+	{108, "ESHUTDOWN", "cannot send after transport endpoint shutdown"},
+	{109, "ETOOMANYREFS", "too many references: cannot splice"},
+	{110, "ETIMEDOUT", "connection timed out"},
+	{111, "ECONNREFUSED", "connection refused"},
+	{112, "EHOSTDOWN", "host is down"},
+	{113, "EHOSTUNREACH", "no route to host"},
+	{114, "EALREADY", "operation already in progress"},
+	{115, "EINPROGRESS", "operation now in progress"},
+	{116, "ESTALE", "stale file handle"},
+	{117, "EUCLEAN", "structure needs cleaning"},
+	{118, "ENOTNAM", "not a XENIX named type file"},
+	{119, "ENAVAIL", "no XENIX semaphores available"},
+	{120, "EISNAM", "is a named type file"},
+	{121, "EREMOTEIO", "remote I/O error"},
+	{122, "EDQUOT", "disk quota exceeded"},
+	{123, "ENOMEDIUM", "no medium found"},
+	{124, "EMEDIUMTYPE", "wrong medium type"},
+	{125, "ECANCELED", "operation canceled"},
+	{126, "ENOKEY", "required key not available"},
+	{127, "EKEYEXPIRED", "key has expired"},
+	{128, "EKEYREVOKED", "key has been revoked"},
+	{129, "EKEYREJECTED", "key was rejected by service"},
+	{130, "EOWNERDEAD", "owner died"},
+	{131, "ENOTRECOVERABLE", "state not recoverable"},
+	{132, "ERFKILL", "operation not possible due to RF-kill"},
+	{133, "EHWPOISON", "memory page has hardware error"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/breakpoint trap"},
+	{6, "SIGABRT", "aborted"},
+	{7, "SIGBUS", "bus error"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGUSR1", "user defined signal 1"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGUSR2", "user defined signal 2"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGSTKFLT", "stack fault"},
+	{17, "SIGCHLD", "child exited"},
+	{18, "SIGCONT", "continued"},
+	{19, "SIGSTOP", "stopped (signal)"},
+	{20, "SIGTSTP", "stopped"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGURG", "urgent I/O condition"},
+	{24, "SIGXCPU", "CPU time limit exceeded"},
+	{25, "SIGXFSZ", "file size limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window changed"},
+	{29, "SIGIO", "I/O possible"},
+	{30, "SIGPWR", "power failure"},
+	{31, "SIGSYS", "bad system call"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64le.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64le.go
new file mode 100644
index 000000000..63d3bc566
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64le.go
@@ -0,0 +1,853 @@
+// mkerrors.sh -Wall -Werror -static -I/tmp/include
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build ppc64le,linux
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	B1000000                         = 0x17
+	B115200                          = 0x11
+	B1152000                         = 0x18
+	B1500000                         = 0x19
+	B2000000                         = 0x1a
+	B230400                          = 0x12
+	B2500000                         = 0x1b
+	B3000000                         = 0x1c
+	B3500000                         = 0x1d
+	B4000000                         = 0x1e
+	B460800                          = 0x13
+	B500000                          = 0x14
+	B57600                           = 0x10
+	B576000                          = 0x15
+	B921600                          = 0x16
+	BLKBSZGET                        = 0x40081270
+	BLKBSZSET                        = 0x80081271
+	BLKFLSBUF                        = 0x20001261
+	BLKFRAGET                        = 0x20001265
+	BLKFRASET                        = 0x20001264
+	BLKGETSIZE                       = 0x20001260
+	BLKGETSIZE64                     = 0x40081272
+	BLKPBSZGET                       = 0x2000127b
+	BLKRAGET                         = 0x20001263
+	BLKRASET                         = 0x20001262
+	BLKROGET                         = 0x2000125e
+	BLKROSET                         = 0x2000125d
+	BLKRRPART                        = 0x2000125f
+	BLKSECTGET                       = 0x20001267
+	BLKSECTSET                       = 0x20001266
+	BLKSSZGET                        = 0x20001268
+	BOTHER                           = 0x1f
+	BS1                              = 0x8000
+	BSDLY                            = 0x8000
+	CBAUD                            = 0xff
+	CBAUDEX                          = 0x0
+	CIBAUD                           = 0xff0000
+	CLOCAL                           = 0x8000
+	CR1                              = 0x1000
+	CR2                              = 0x2000
+	CR3                              = 0x3000
+	CRDLY                            = 0x3000
+	CREAD                            = 0x800
+	CS6                              = 0x100
+	CS7                              = 0x200
+	CS8                              = 0x300
+	CSIZE                            = 0x300
+	CSTOPB                           = 0x400
+	ECHOCTL                          = 0x40
+	ECHOE                            = 0x2
+	ECHOK                            = 0x4
+	ECHOKE                           = 0x1
+	ECHONL                           = 0x10
+	ECHOPRT                          = 0x20
+	EFD_CLOEXEC                      = 0x80000
+	EFD_NONBLOCK                     = 0x800
+	EPOLL_CLOEXEC                    = 0x80000
+	EXTPROC                          = 0x10000000
+	FF1                              = 0x4000
+	FFDLY                            = 0x4000
+	FICLONE                          = 0x80049409
+	FICLONERANGE                     = 0x8020940d
+	FLUSHO                           = 0x800000
+	FS_IOC_ENABLE_VERITY             = 0x80806685
+	FS_IOC_GETFLAGS                  = 0x40086601
+	FS_IOC_GET_ENCRYPTION_NONCE      = 0x4010661b
+	FS_IOC_GET_ENCRYPTION_POLICY     = 0x800c6615
+	FS_IOC_GET_ENCRYPTION_PWSALT     = 0x80106614
+	FS_IOC_SETFLAGS                  = 0x80086602
+	FS_IOC_SET_ENCRYPTION_POLICY     = 0x400c6613
+	F_GETLK                          = 0x5
+	F_GETLK64                        = 0xc
+	F_GETOWN                         = 0x9
+	F_RDLCK                          = 0x0
+	F_SETLK                          = 0x6
+	F_SETLK64                        = 0xd
+	F_SETLKW                         = 0x7
+	F_SETLKW64                       = 0xe
+	F_SETOWN                         = 0x8
+	F_UNLCK                          = 0x2
+	F_WRLCK                          = 0x1
+	HUPCL                            = 0x4000
+	ICANON                           = 0x100
+	IEXTEN                           = 0x400
+	IN_CLOEXEC                       = 0x80000
+	IN_NONBLOCK                      = 0x800
+	IOCTL_VM_SOCKETS_GET_LOCAL_CID   = 0x200007b9
+	ISIG                             = 0x80
+	IUCLC                            = 0x1000
+	IXOFF                            = 0x400
+	IXON                             = 0x200
+	MAP_ANON                         = 0x20
+	MAP_ANONYMOUS                    = 0x20
+	MAP_DENYWRITE                    = 0x800
+	MAP_EXECUTABLE                   = 0x1000
+	MAP_GROWSDOWN                    = 0x100
+	MAP_HUGETLB                      = 0x40000
+	MAP_LOCKED                       = 0x80
+	MAP_NONBLOCK                     = 0x10000
+	MAP_NORESERVE                    = 0x40
+	MAP_POPULATE                     = 0x8000
+	MAP_STACK                        = 0x20000
+	MAP_SYNC                         = 0x80000
+	MCL_CURRENT                      = 0x2000
+	MCL_FUTURE                       = 0x4000
+	MCL_ONFAULT                      = 0x8000
+	NFDBITS                          = 0x40
+	NL2                              = 0x200
+	NL3                              = 0x300
+	NLDLY                            = 0x300
+	NOFLSH                           = 0x80000000
+	NS_GET_NSTYPE                    = 0x2000b703
+	NS_GET_OWNER_UID                 = 0x2000b704
+	NS_GET_PARENT                    = 0x2000b702
+	NS_GET_USERNS                    = 0x2000b701
+	OLCUC                            = 0x4
+	ONLCR                            = 0x2
+	O_APPEND                         = 0x400
+	O_ASYNC                          = 0x2000
+	O_CLOEXEC                        = 0x80000
+	O_CREAT                          = 0x40
+	O_DIRECT                         = 0x20000
+	O_DIRECTORY                      = 0x4000
+	O_DSYNC                          = 0x1000
+	O_EXCL                           = 0x80
+	O_FSYNC                          = 0x101000
+	O_LARGEFILE                      = 0x0
+	O_NDELAY                         = 0x800
+	O_NOATIME                        = 0x40000
+	O_NOCTTY                         = 0x100
+	O_NOFOLLOW                       = 0x8000
+	O_NONBLOCK                       = 0x800
+	O_PATH                           = 0x200000
+	O_RSYNC                          = 0x101000
+	O_SYNC                           = 0x101000
+	O_TMPFILE                        = 0x404000
+	O_TRUNC                          = 0x200
+	PARENB                           = 0x1000
+	PARODD                           = 0x2000
+	PENDIN                           = 0x20000000
+	PERF_EVENT_IOC_DISABLE           = 0x20002401
+	PERF_EVENT_IOC_ENABLE            = 0x20002400
+	PERF_EVENT_IOC_ID                = 0x40082407
+	PERF_EVENT_IOC_MODIFY_ATTRIBUTES = 0x8008240b
+	PERF_EVENT_IOC_PAUSE_OUTPUT      = 0x80042409
+	PERF_EVENT_IOC_PERIOD            = 0x80082404
+	PERF_EVENT_IOC_QUERY_BPF         = 0xc008240a
+	PERF_EVENT_IOC_REFRESH           = 0x20002402
+	PERF_EVENT_IOC_RESET             = 0x20002403
+	PERF_EVENT_IOC_SET_BPF           = 0x80042408
+	PERF_EVENT_IOC_SET_FILTER        = 0x80082406
+	PERF_EVENT_IOC_SET_OUTPUT        = 0x20002405
+	PPPIOCATTACH                     = 0x8004743d
+	PPPIOCATTCHAN                    = 0x80047438
+	PPPIOCCONNECT                    = 0x8004743a
+	PPPIOCDETACH                     = 0x8004743c
+	PPPIOCDISCONN                    = 0x20007439
+	PPPIOCGASYNCMAP                  = 0x40047458
+	PPPIOCGCHAN                      = 0x40047437
+	PPPIOCGDEBUG                     = 0x40047441
+	PPPIOCGFLAGS                     = 0x4004745a
+	PPPIOCGIDLE                      = 0x4010743f
+	PPPIOCGIDLE32                    = 0x4008743f
+	PPPIOCGIDLE64                    = 0x4010743f
+	PPPIOCGL2TPSTATS                 = 0x40487436
+	PPPIOCGMRU                       = 0x40047453
+	PPPIOCGRASYNCMAP                 = 0x40047455
+	PPPIOCGUNIT                      = 0x40047456
+	PPPIOCGXASYNCMAP                 = 0x40207450
+	PPPIOCSACTIVE                    = 0x80107446
+	PPPIOCSASYNCMAP                  = 0x80047457
+	PPPIOCSCOMPRESS                  = 0x8010744d
+	PPPIOCSDEBUG                     = 0x80047440
+	PPPIOCSFLAGS                     = 0x80047459
+	PPPIOCSMAXCID                    = 0x80047451
+	PPPIOCSMRRU                      = 0x8004743b
+	PPPIOCSMRU                       = 0x80047452
+	PPPIOCSNPMODE                    = 0x8008744b
+	PPPIOCSPASS                      = 0x80107447
+	PPPIOCSRASYNCMAP                 = 0x80047454
+	PPPIOCSXASYNCMAP                 = 0x8020744f
+	PPPIOCXFERUNIT                   = 0x2000744e
+	PROT_SAO                         = 0x10
+	PR_SET_PTRACER_ANY               = 0xffffffffffffffff
+	PTRACE_GETEVRREGS                = 0x14
+	PTRACE_GETFPREGS                 = 0xe
+	PTRACE_GETREGS64                 = 0x16
+	PTRACE_GETVRREGS                 = 0x12
+	PTRACE_GETVSRREGS                = 0x1b
+	PTRACE_GET_DEBUGREG              = 0x19
+	PTRACE_SETEVRREGS                = 0x15
+	PTRACE_SETFPREGS                 = 0xf
+	PTRACE_SETREGS64                 = 0x17
+	PTRACE_SETVRREGS                 = 0x13
+	PTRACE_SETVSRREGS                = 0x1c
+	PTRACE_SET_DEBUGREG              = 0x1a
+	PTRACE_SINGLEBLOCK               = 0x100
+	PTRACE_SYSEMU                    = 0x1d
+	PTRACE_SYSEMU_SINGLESTEP         = 0x1e
+	PT_CCR                           = 0x26
+	PT_CTR                           = 0x23
+	PT_DAR                           = 0x29
+	PT_DSCR                          = 0x2c
+	PT_DSISR                         = 0x2a
+	PT_FPR0                          = 0x30
+	PT_FPSCR                         = 0x50
+	PT_LNK                           = 0x24
+	PT_MSR                           = 0x21
+	PT_NIP                           = 0x20
+	PT_ORIG_R3                       = 0x22
+	PT_R0                            = 0x0
+	PT_R1                            = 0x1
+	PT_R10                           = 0xa
+	PT_R11                           = 0xb
+	PT_R12                           = 0xc
+	PT_R13                           = 0xd
+	PT_R14                           = 0xe
+	PT_R15                           = 0xf
+	PT_R16                           = 0x10
+	PT_R17                           = 0x11
+	PT_R18                           = 0x12
+	PT_R19                           = 0x13
+	PT_R2                            = 0x2
+	PT_R20                           = 0x14
+	PT_R21                           = 0x15
+	PT_R22                           = 0x16
+	PT_R23                           = 0x17
+	PT_R24                           = 0x18
+	PT_R25                           = 0x19
+	PT_R26                           = 0x1a
+	PT_R27                           = 0x1b
+	PT_R28                           = 0x1c
+	PT_R29                           = 0x1d
+	PT_R3                            = 0x3
+	PT_R30                           = 0x1e
+	PT_R31                           = 0x1f
+	PT_R4                            = 0x4
+	PT_R5                            = 0x5
+	PT_R6                            = 0x6
+	PT_R7                            = 0x7
+	PT_R8                            = 0x8
+	PT_R9                            = 0x9
+	PT_REGS_COUNT                    = 0x2c
+	PT_RESULT                        = 0x2b
+	PT_SOFTE                         = 0x27
+	PT_TRAP                          = 0x28
+	PT_VR0                           = 0x52
+	PT_VRSAVE                        = 0x94
+	PT_VSCR                          = 0x93
+	PT_VSR0                          = 0x96
+	PT_VSR31                         = 0xd4
+	PT_XER                           = 0x25
+	RLIMIT_AS                        = 0x9
+	RLIMIT_MEMLOCK                   = 0x8
+	RLIMIT_NOFILE                    = 0x7
+	RLIMIT_NPROC                     = 0x6
+	RLIMIT_RSS                       = 0x5
+	RNDADDENTROPY                    = 0x80085203
+	RNDADDTOENTCNT                   = 0x80045201
+	RNDCLEARPOOL                     = 0x20005206
+	RNDGETENTCNT                     = 0x40045200
+	RNDGETPOOL                       = 0x40085202
+	RNDRESEEDCRNG                    = 0x20005207
+	RNDZAPENTCNT                     = 0x20005204
+	RTC_AIE_OFF                      = 0x20007002
+	RTC_AIE_ON                       = 0x20007001
+	RTC_ALM_READ                     = 0x40247008
+	RTC_ALM_SET                      = 0x80247007
+	RTC_EPOCH_READ                   = 0x4008700d
+	RTC_EPOCH_SET                    = 0x8008700e
+	RTC_IRQP_READ                    = 0x4008700b
+	RTC_IRQP_SET                     = 0x8008700c
+	RTC_PIE_OFF                      = 0x20007006
+	RTC_PIE_ON                       = 0x20007005
+	RTC_PLL_GET                      = 0x40207011
+	RTC_PLL_SET                      = 0x80207012
+	RTC_RD_TIME                      = 0x40247009
+	RTC_SET_TIME                     = 0x8024700a
+	RTC_UIE_OFF                      = 0x20007004
+	RTC_UIE_ON                       = 0x20007003
+	RTC_VL_CLR                       = 0x20007014
+	RTC_VL_READ                      = 0x40047013
+	RTC_WIE_OFF                      = 0x20007010
+	RTC_WIE_ON                       = 0x2000700f
+	RTC_WKALM_RD                     = 0x40287010
+	RTC_WKALM_SET                    = 0x8028700f
+	SCM_TIMESTAMPING                 = 0x25
+	SCM_TIMESTAMPING_OPT_STATS       = 0x36
+	SCM_TIMESTAMPING_PKTINFO         = 0x3a
+	SCM_TIMESTAMPNS                  = 0x23
+	SCM_TXTIME                       = 0x3d
+	SCM_WIFI_STATUS                  = 0x29
+	SFD_CLOEXEC                      = 0x80000
+	SFD_NONBLOCK                     = 0x800
+	SIOCATMARK                       = 0x8905
+	SIOCGPGRP                        = 0x8904
+	SIOCGSTAMPNS_NEW                 = 0x40108907
+	SIOCGSTAMP_NEW                   = 0x40108906
+	SIOCINQ                          = 0x4004667f
+	SIOCOUTQ                         = 0x40047473
+	SIOCSPGRP                        = 0x8902
+	SOCK_CLOEXEC                     = 0x80000
+	SOCK_DGRAM                       = 0x2
+	SOCK_NONBLOCK                    = 0x800
+	SOCK_STREAM                      = 0x1
+	SOL_SOCKET                       = 0x1
+	SO_ACCEPTCONN                    = 0x1e
+	SO_ATTACH_BPF                    = 0x32
+	SO_ATTACH_REUSEPORT_CBPF         = 0x33
+	SO_ATTACH_REUSEPORT_EBPF         = 0x34
+	SO_BINDTODEVICE                  = 0x19
+	SO_BINDTOIFINDEX                 = 0x3e
+	SO_BPF_EXTENSIONS                = 0x30
+	SO_BROADCAST                     = 0x6
+	SO_BSDCOMPAT                     = 0xe
+	SO_BUSY_POLL                     = 0x2e
+	SO_CNX_ADVICE                    = 0x35
+	SO_COOKIE                        = 0x39
+	SO_DETACH_REUSEPORT_BPF          = 0x44
+	SO_DOMAIN                        = 0x27
+	SO_DONTROUTE                     = 0x5
+	SO_ERROR                         = 0x4
+	SO_INCOMING_CPU                  = 0x31
+	SO_INCOMING_NAPI_ID              = 0x38
+	SO_KEEPALIVE                     = 0x9
+	SO_LINGER                        = 0xd
+	SO_LOCK_FILTER                   = 0x2c
+	SO_MARK                          = 0x24
+	SO_MAX_PACING_RATE               = 0x2f
+	SO_MEMINFO                       = 0x37
+	SO_NOFCS                         = 0x2b
+	SO_OOBINLINE                     = 0xa
+	SO_PASSCRED                      = 0x14
+	SO_PASSSEC                       = 0x22
+	SO_PEEK_OFF                      = 0x2a
+	SO_PEERCRED                      = 0x15
+	SO_PEERGROUPS                    = 0x3b
+	SO_PEERSEC                       = 0x1f
+	SO_PROTOCOL                      = 0x26
+	SO_RCVBUF                        = 0x8
+	SO_RCVBUFFORCE                   = 0x21
+	SO_RCVLOWAT                      = 0x10
+	SO_RCVTIMEO                      = 0x12
+	SO_RCVTIMEO_NEW                  = 0x42
+	SO_RCVTIMEO_OLD                  = 0x12
+	SO_REUSEADDR                     = 0x2
+	SO_REUSEPORT                     = 0xf
+	SO_RXQ_OVFL                      = 0x28
+	SO_SECURITY_AUTHENTICATION       = 0x16
+	SO_SECURITY_ENCRYPTION_NETWORK   = 0x18
+	SO_SECURITY_ENCRYPTION_TRANSPORT = 0x17
+	SO_SELECT_ERR_QUEUE              = 0x2d
+	SO_SNDBUF                        = 0x7
+	SO_SNDBUFFORCE                   = 0x20
+	SO_SNDLOWAT                      = 0x11
+	SO_SNDTIMEO                      = 0x13
+	SO_SNDTIMEO_NEW                  = 0x43
+	SO_SNDTIMEO_OLD                  = 0x13
+	SO_TIMESTAMPING                  = 0x25
+	SO_TIMESTAMPING_NEW              = 0x41
+	SO_TIMESTAMPING_OLD              = 0x25
+	SO_TIMESTAMPNS                   = 0x23
+	SO_TIMESTAMPNS_NEW               = 0x40
+	SO_TIMESTAMPNS_OLD               = 0x23
+	SO_TIMESTAMP_NEW                 = 0x3f
+	SO_TXTIME                        = 0x3d
+	SO_TYPE                          = 0x3
+	SO_WIFI_STATUS                   = 0x29
+	SO_ZEROCOPY                      = 0x3c
+	TAB1                             = 0x400
+	TAB2                             = 0x800
+	TAB3                             = 0xc00
+	TABDLY                           = 0xc00
+	TCFLSH                           = 0x2000741f
+	TCGETA                           = 0x40147417
+	TCGETS                           = 0x402c7413
+	TCSAFLUSH                        = 0x2
+	TCSBRK                           = 0x2000741d
+	TCSBRKP                          = 0x5425
+	TCSETA                           = 0x80147418
+	TCSETAF                          = 0x8014741c
+	TCSETAW                          = 0x80147419
+	TCSETS                           = 0x802c7414
+	TCSETSF                          = 0x802c7416
+	TCSETSW                          = 0x802c7415
+	TCXONC                           = 0x2000741e
+	TFD_CLOEXEC                      = 0x80000
+	TFD_NONBLOCK                     = 0x800
+	TIOCCBRK                         = 0x5428
+	TIOCCONS                         = 0x541d
+	TIOCEXCL                         = 0x540c
+	TIOCGDEV                         = 0x40045432
+	TIOCGETC                         = 0x40067412
+	TIOCGETD                         = 0x5424
+	TIOCGETP                         = 0x40067408
+	TIOCGEXCL                        = 0x40045440
+	TIOCGICOUNT                      = 0x545d
+	TIOCGISO7816                     = 0x40285442
+	TIOCGLCKTRMIOS                   = 0x5456
+	TIOCGLTC                         = 0x40067474
+	TIOCGPGRP                        = 0x40047477
+	TIOCGPKT                         = 0x40045438
+	TIOCGPTLCK                       = 0x40045439
+	TIOCGPTN                         = 0x40045430
+	TIOCGPTPEER                      = 0x20005441
+	TIOCGRS485                       = 0x542e
+	TIOCGSERIAL                      = 0x541e
+	TIOCGSID                         = 0x5429
+	TIOCGSOFTCAR                     = 0x5419
+	TIOCGWINSZ                       = 0x40087468
+	TIOCINQ                          = 0x4004667f
+	TIOCLINUX                        = 0x541c
+	TIOCMBIC                         = 0x5417
+	TIOCMBIS                         = 0x5416
+	TIOCMGET                         = 0x5415
+	TIOCMIWAIT                       = 0x545c
+	TIOCMSET                         = 0x5418
+	TIOCM_CAR                        = 0x40
+	TIOCM_CD                         = 0x40
+	TIOCM_CTS                        = 0x20
+	TIOCM_DSR                        = 0x100
+	TIOCM_LOOP                       = 0x8000
+	TIOCM_OUT1                       = 0x2000
+	TIOCM_OUT2                       = 0x4000
+	TIOCM_RI                         = 0x80
+	TIOCM_RNG                        = 0x80
+	TIOCM_SR                         = 0x10
+	TIOCM_ST                         = 0x8
+	TIOCNOTTY                        = 0x5422
+	TIOCNXCL                         = 0x540d
+	TIOCOUTQ                         = 0x40047473
+	TIOCPKT                          = 0x5420
+	TIOCSBRK                         = 0x5427
+	TIOCSCTTY                        = 0x540e
+	TIOCSERCONFIG                    = 0x5453
+	TIOCSERGETLSR                    = 0x5459
+	TIOCSERGETMULTI                  = 0x545a
+	TIOCSERGSTRUCT                   = 0x5458
+	TIOCSERGWILD                     = 0x5454
+	TIOCSERSETMULTI                  = 0x545b
+	TIOCSERSWILD                     = 0x5455
+	TIOCSER_TEMT                     = 0x1
+	TIOCSETC                         = 0x80067411
+	TIOCSETD                         = 0x5423
+	TIOCSETN                         = 0x8006740a
+	TIOCSETP                         = 0x80067409
+	TIOCSIG                          = 0x80045436
+	TIOCSISO7816                     = 0xc0285443
+	TIOCSLCKTRMIOS                   = 0x5457
+	TIOCSLTC                         = 0x80067475
+	TIOCSPGRP                        = 0x80047476
+	TIOCSPTLCK                       = 0x80045431
+	TIOCSRS485                       = 0x542f
+	TIOCSSERIAL                      = 0x541f
+	TIOCSSOFTCAR                     = 0x541a
+	TIOCSTART                        = 0x2000746e
+	TIOCSTI                          = 0x5412
+	TIOCSTOP                         = 0x2000746f
+	TIOCSWINSZ                       = 0x80087467
+	TIOCVHANGUP                      = 0x5437
+	TOSTOP                           = 0x400000
+	TUNATTACHFILTER                  = 0x801054d5
+	TUNDETACHFILTER                  = 0x801054d6
+	TUNGETDEVNETNS                   = 0x200054e3
+	TUNGETFEATURES                   = 0x400454cf
+	TUNGETFILTER                     = 0x401054db
+	TUNGETIFF                        = 0x400454d2
+	TUNGETSNDBUF                     = 0x400454d3
+	TUNGETVNETBE                     = 0x400454df
+	TUNGETVNETHDRSZ                  = 0x400454d7
+	TUNGETVNETLE                     = 0x400454dd
+	TUNSETCARRIER                    = 0x800454e2
+	TUNSETDEBUG                      = 0x800454c9
+	TUNSETFILTEREBPF                 = 0x400454e1
+	TUNSETGROUP                      = 0x800454ce
+	TUNSETIFF                        = 0x800454ca
+	TUNSETIFINDEX                    = 0x800454da
+	TUNSETLINK                       = 0x800454cd
+	TUNSETNOCSUM                     = 0x800454c8
+	TUNSETOFFLOAD                    = 0x800454d0
+	TUNSETOWNER                      = 0x800454cc
+	TUNSETPERSIST                    = 0x800454cb
+	TUNSETQUEUE                      = 0x800454d9
+	TUNSETSNDBUF                     = 0x800454d4
+	TUNSETSTEERINGEBPF               = 0x400454e0
+	TUNSETTXFILTER                   = 0x800454d1
+	TUNSETVNETBE                     = 0x800454de
+	TUNSETVNETHDRSZ                  = 0x800454d8
+	TUNSETVNETLE                     = 0x800454dc
+	UBI_IOCATT                       = 0x80186f40
+	UBI_IOCDET                       = 0x80046f41
+	UBI_IOCEBCH                      = 0x80044f02
+	UBI_IOCEBER                      = 0x80044f01
+	UBI_IOCEBISMAP                   = 0x40044f05
+	UBI_IOCEBMAP                     = 0x80084f03
+	UBI_IOCEBUNMAP                   = 0x80044f04
+	UBI_IOCMKVOL                     = 0x80986f00
+	UBI_IOCRMVOL                     = 0x80046f01
+	UBI_IOCRNVOL                     = 0x91106f03
+	UBI_IOCRPEB                      = 0x80046f04
+	UBI_IOCRSVOL                     = 0x800c6f02
+	UBI_IOCSETVOLPROP                = 0x80104f06
+	UBI_IOCSPEB                      = 0x80046f05
+	UBI_IOCVOLCRBLK                  = 0x80804f07
+	UBI_IOCVOLRMBLK                  = 0x20004f08
+	UBI_IOCVOLUP                     = 0x80084f00
+	VDISCARD                         = 0x10
+	VEOF                             = 0x4
+	VEOL                             = 0x6
+	VEOL2                            = 0x8
+	VMIN                             = 0x5
+	VREPRINT                         = 0xb
+	VSTART                           = 0xd
+	VSTOP                            = 0xe
+	VSUSP                            = 0xc
+	VSWTC                            = 0x9
+	VT1                              = 0x10000
+	VTDLY                            = 0x10000
+	VTIME                            = 0x7
+	VWERASE                          = 0xa
+	WDIOC_GETBOOTSTATUS              = 0x40045702
+	WDIOC_GETPRETIMEOUT              = 0x40045709
+	WDIOC_GETSTATUS                  = 0x40045701
+	WDIOC_GETSUPPORT                 = 0x40285700
+	WDIOC_GETTEMP                    = 0x40045703
+	WDIOC_GETTIMELEFT                = 0x4004570a
+	WDIOC_GETTIMEOUT                 = 0x40045707
+	WDIOC_KEEPALIVE                  = 0x40045705
+	WDIOC_SETOPTIONS                 = 0x40045704
+	WORDSIZE                         = 0x40
+	XCASE                            = 0x4000
+	XTABS                            = 0xc00
+)
+
+// Errors
+const (
+	EADDRINUSE      = syscall.Errno(0x62)
+	EADDRNOTAVAIL   = syscall.Errno(0x63)
+	EADV            = syscall.Errno(0x44)
+	EAFNOSUPPORT    = syscall.Errno(0x61)
+	EALREADY        = syscall.Errno(0x72)
+	EBADE           = syscall.Errno(0x34)
+	EBADFD          = syscall.Errno(0x4d)
+	EBADMSG         = syscall.Errno(0x4a)
+	EBADR           = syscall.Errno(0x35)
+	EBADRQC         = syscall.Errno(0x38)
+	EBADSLT         = syscall.Errno(0x39)
+	EBFONT          = syscall.Errno(0x3b)
+	ECANCELED       = syscall.Errno(0x7d)
+	ECHRNG          = syscall.Errno(0x2c)
+	ECOMM           = syscall.Errno(0x46)
+	ECONNABORTED    = syscall.Errno(0x67)
+	ECONNREFUSED    = syscall.Errno(0x6f)
+	ECONNRESET      = syscall.Errno(0x68)
+	EDEADLK         = syscall.Errno(0x23)
+	EDEADLOCK       = syscall.Errno(0x3a)
+	EDESTADDRREQ    = syscall.Errno(0x59)
+	EDOTDOT         = syscall.Errno(0x49)
+	EDQUOT          = syscall.Errno(0x7a)
+	EHOSTDOWN       = syscall.Errno(0x70)
+	EHOSTUNREACH    = syscall.Errno(0x71)
+	EHWPOISON       = syscall.Errno(0x85)
+	EIDRM           = syscall.Errno(0x2b)
+	EILSEQ          = syscall.Errno(0x54)
+	EINPROGRESS     = syscall.Errno(0x73)
+	EISCONN         = syscall.Errno(0x6a)
+	EISNAM          = syscall.Errno(0x78)
+	EKEYEXPIRED     = syscall.Errno(0x7f)
+	EKEYREJECTED    = syscall.Errno(0x81)
+	EKEYREVOKED     = syscall.Errno(0x80)
+	EL2HLT          = syscall.Errno(0x33)
+	EL2NSYNC        = syscall.Errno(0x2d)
+	EL3HLT          = syscall.Errno(0x2e)
+	EL3RST          = syscall.Errno(0x2f)
+	ELIBACC         = syscall.Errno(0x4f)
+	ELIBBAD         = syscall.Errno(0x50)
+	ELIBEXEC        = syscall.Errno(0x53)
+	ELIBMAX         = syscall.Errno(0x52)
+	ELIBSCN         = syscall.Errno(0x51)
+	ELNRNG          = syscall.Errno(0x30)
+	ELOOP           = syscall.Errno(0x28)
+	EMEDIUMTYPE     = syscall.Errno(0x7c)
+	EMSGSIZE        = syscall.Errno(0x5a)
+	EMULTIHOP       = syscall.Errno(0x48)
+	ENAMETOOLONG    = syscall.Errno(0x24)
+	ENAVAIL         = syscall.Errno(0x77)
+	ENETDOWN        = syscall.Errno(0x64)
+	ENETRESET       = syscall.Errno(0x66)
+	ENETUNREACH     = syscall.Errno(0x65)
+	ENOANO          = syscall.Errno(0x37)
+	ENOBUFS         = syscall.Errno(0x69)
+	ENOCSI          = syscall.Errno(0x32)
+	ENODATA         = syscall.Errno(0x3d)
+	ENOKEY          = syscall.Errno(0x7e)
+	ENOLCK          = syscall.Errno(0x25)
+	ENOLINK         = syscall.Errno(0x43)
+	ENOMEDIUM       = syscall.Errno(0x7b)
+	ENOMSG          = syscall.Errno(0x2a)
+	ENONET          = syscall.Errno(0x40)
+	ENOPKG          = syscall.Errno(0x41)
+	ENOPROTOOPT     = syscall.Errno(0x5c)
+	ENOSR           = syscall.Errno(0x3f)
+	ENOSTR          = syscall.Errno(0x3c)
+	ENOSYS          = syscall.Errno(0x26)
+	ENOTCONN        = syscall.Errno(0x6b)
+	ENOTEMPTY       = syscall.Errno(0x27)
+	ENOTNAM         = syscall.Errno(0x76)
+	ENOTRECOVERABLE = syscall.Errno(0x83)
+	ENOTSOCK        = syscall.Errno(0x58)
+	ENOTSUP         = syscall.Errno(0x5f)
+	ENOTUNIQ        = syscall.Errno(0x4c)
+	EOPNOTSUPP      = syscall.Errno(0x5f)
+	EOVERFLOW       = syscall.Errno(0x4b)
+	EOWNERDEAD      = syscall.Errno(0x82)
+	EPFNOSUPPORT    = syscall.Errno(0x60)
+	EPROTO          = syscall.Errno(0x47)
+	EPROTONOSUPPORT = syscall.Errno(0x5d)
+	EPROTOTYPE      = syscall.Errno(0x5b)
+	EREMCHG         = syscall.Errno(0x4e)
+	EREMOTE         = syscall.Errno(0x42)
+	EREMOTEIO       = syscall.Errno(0x79)
+	ERESTART        = syscall.Errno(0x55)
+	ERFKILL         = syscall.Errno(0x84)
+	ESHUTDOWN       = syscall.Errno(0x6c)
+	ESOCKTNOSUPPORT = syscall.Errno(0x5e)
+	ESRMNT          = syscall.Errno(0x45)
+	ESTALE          = syscall.Errno(0x74)
+	ESTRPIPE        = syscall.Errno(0x56)
+	ETIME           = syscall.Errno(0x3e)
+	ETIMEDOUT       = syscall.Errno(0x6e)
+	ETOOMANYREFS    = syscall.Errno(0x6d)
+	EUCLEAN         = syscall.Errno(0x75)
+	EUNATCH         = syscall.Errno(0x31)
+	EUSERS          = syscall.Errno(0x57)
+	EXFULL          = syscall.Errno(0x36)
+)
+
+// Signals
+const (
+	SIGBUS    = syscall.Signal(0x7)
+	SIGCHLD   = syscall.Signal(0x11)
+	SIGCLD    = syscall.Signal(0x11)
+	SIGCONT   = syscall.Signal(0x12)
+	SIGIO     = syscall.Signal(0x1d)
+	SIGPOLL   = syscall.Signal(0x1d)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGPWR    = syscall.Signal(0x1e)
+	SIGSTKFLT = syscall.Signal(0x10)
+	SIGSTOP   = syscall.Signal(0x13)
+	SIGSYS    = syscall.Signal(0x1f)
+	SIGTSTP   = syscall.Signal(0x14)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x17)
+	SIGUSR1   = syscall.Signal(0xa)
+	SIGUSR2   = syscall.Signal(0xc)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "no such device or address"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EAGAIN", "resource temporarily unavailable"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device or resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "invalid cross-device link"},
+	{19, "ENODEV", "no such device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "numerical result out of range"},
+	{35, "EDEADLK", "resource deadlock avoided"},
+	{36, "ENAMETOOLONG", "file name too long"},
+	{37, "ENOLCK", "no locks available"},
+	{38, "ENOSYS", "function not implemented"},
+	{39, "ENOTEMPTY", "directory not empty"},
+	{40, "ELOOP", "too many levels of symbolic links"},
+	{42, "ENOMSG", "no message of desired type"},
+	{43, "EIDRM", "identifier removed"},
+	{44, "ECHRNG", "channel number out of range"},
+	{45, "EL2NSYNC", "level 2 not synchronized"},
+	{46, "EL3HLT", "level 3 halted"},
+	{47, "EL3RST", "level 3 reset"},
+	{48, "ELNRNG", "link number out of range"},
+	{49, "EUNATCH", "protocol driver not attached"},
+	{50, "ENOCSI", "no CSI structure available"},
+	{51, "EL2HLT", "level 2 halted"},
+	{52, "EBADE", "invalid exchange"},
+	{53, "EBADR", "invalid request descriptor"},
+	{54, "EXFULL", "exchange full"},
+	{55, "ENOANO", "no anode"},
+	{56, "EBADRQC", "invalid request code"},
+	{57, "EBADSLT", "invalid slot"},
+	{58, "EDEADLOCK", "file locking deadlock error"},
+	{59, "EBFONT", "bad font file format"},
+	{60, "ENOSTR", "device not a stream"},
+	{61, "ENODATA", "no data available"},
+	{62, "ETIME", "timer expired"},
+	{63, "ENOSR", "out of streams resources"},
+	{64, "ENONET", "machine is not on the network"},
+	{65, "ENOPKG", "package not installed"},
+	{66, "EREMOTE", "object is remote"},
+	{67, "ENOLINK", "link has been severed"},
+	{68, "EADV", "advertise error"},
+	{69, "ESRMNT", "srmount error"},
+	{70, "ECOMM", "communication error on send"},
+	{71, "EPROTO", "protocol error"},
+	{72, "EMULTIHOP", "multihop attempted"},
+	{73, "EDOTDOT", "RFS specific error"},
+	{74, "EBADMSG", "bad message"},
+	{75, "EOVERFLOW", "value too large for defined data type"},
+	{76, "ENOTUNIQ", "name not unique on network"},
+	{77, "EBADFD", "file descriptor in bad state"},
+	{78, "EREMCHG", "remote address changed"},
+	{79, "ELIBACC", "can not access a needed shared library"},
+	{80, "ELIBBAD", "accessing a corrupted shared library"},
+	{81, "ELIBSCN", ".lib section in a.out corrupted"},
+	{82, "ELIBMAX", "attempting to link in too many shared libraries"},
+	{83, "ELIBEXEC", "cannot exec a shared library directly"},
+	{84, "EILSEQ", "invalid or incomplete multibyte or wide character"},
+	{85, "ERESTART", "interrupted system call should be restarted"},
+	{86, "ESTRPIPE", "streams pipe error"},
+	{87, "EUSERS", "too many users"},
+	{88, "ENOTSOCK", "socket operation on non-socket"},
+	{89, "EDESTADDRREQ", "destination address required"},
+	{90, "EMSGSIZE", "message too long"},
+	{91, "EPROTOTYPE", "protocol wrong type for socket"},
+	{92, "ENOPROTOOPT", "protocol not available"},
+	{93, "EPROTONOSUPPORT", "protocol not supported"},
+	{94, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{95, "ENOTSUP", "operation not supported"},
+	{96, "EPFNOSUPPORT", "protocol family not supported"},
+	{97, "EAFNOSUPPORT", "address family not supported by protocol"},
+	{98, "EADDRINUSE", "address already in use"},
+	{99, "EADDRNOTAVAIL", "cannot assign requested address"},
+	{100, "ENETDOWN", "network is down"},
+	{101, "ENETUNREACH", "network is unreachable"},
+	{102, "ENETRESET", "network dropped connection on reset"},
+	{103, "ECONNABORTED", "software caused connection abort"},
+	{104, "ECONNRESET", "connection reset by peer"},
+	{105, "ENOBUFS", "no buffer space available"},
+	{106, "EISCONN", "transport endpoint is already connected"},
+	{107, "ENOTCONN", "transport endpoint is not connected"},
+	{108, "ESHUTDOWN", "cannot send after transport endpoint shutdown"},
+	{109, "ETOOMANYREFS", "too many references: cannot splice"},
+	{110, "ETIMEDOUT", "connection timed out"},
+	{111, "ECONNREFUSED", "connection refused"},
+	{112, "EHOSTDOWN", "host is down"},
+	{113, "EHOSTUNREACH", "no route to host"},
+	{114, "EALREADY", "operation already in progress"},
+	{115, "EINPROGRESS", "operation now in progress"},
+	{116, "ESTALE", "stale file handle"},
+	{117, "EUCLEAN", "structure needs cleaning"},
+	{118, "ENOTNAM", "not a XENIX named type file"},
+	{119, "ENAVAIL", "no XENIX semaphores available"},
+	{120, "EISNAM", "is a named type file"},
+	{121, "EREMOTEIO", "remote I/O error"},
+	{122, "EDQUOT", "disk quota exceeded"},
+	{123, "ENOMEDIUM", "no medium found"},
+	{124, "EMEDIUMTYPE", "wrong medium type"},
+	{125, "ECANCELED", "operation canceled"},
+	{126, "ENOKEY", "required key not available"},
+	{127, "EKEYEXPIRED", "key has expired"},
+	{128, "EKEYREVOKED", "key has been revoked"},
+	{129, "EKEYREJECTED", "key was rejected by service"},
+	{130, "EOWNERDEAD", "owner died"},
+	{131, "ENOTRECOVERABLE", "state not recoverable"},
+	{132, "ERFKILL", "operation not possible due to RF-kill"},
+	{133, "EHWPOISON", "memory page has hardware error"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/breakpoint trap"},
+	{6, "SIGABRT", "aborted"},
+	{7, "SIGBUS", "bus error"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGUSR1", "user defined signal 1"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGUSR2", "user defined signal 2"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGSTKFLT", "stack fault"},
+	{17, "SIGCHLD", "child exited"},
+	{18, "SIGCONT", "continued"},
+	{19, "SIGSTOP", "stopped (signal)"},
+	{20, "SIGTSTP", "stopped"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGURG", "urgent I/O condition"},
+	{24, "SIGXCPU", "CPU time limit exceeded"},
+	{25, "SIGXFSZ", "file size limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window changed"},
+	{29, "SIGIO", "I/O possible"},
+	{30, "SIGPWR", "power failure"},
+	{31, "SIGSYS", "bad system call"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_riscv64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_riscv64.go
new file mode 100644
index 000000000..490bee1ab
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_riscv64.go
@@ -0,0 +1,777 @@
+// mkerrors.sh -Wall -Werror -static -I/tmp/include
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build riscv64,linux
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	B1000000                         = 0x1008
+	B115200                          = 0x1002
+	B1152000                         = 0x1009
+	B1500000                         = 0x100a
+	B2000000                         = 0x100b
+	B230400                          = 0x1003
+	B2500000                         = 0x100c
+	B3000000                         = 0x100d
+	B3500000                         = 0x100e
+	B4000000                         = 0x100f
+	B460800                          = 0x1004
+	B500000                          = 0x1005
+	B57600                           = 0x1001
+	B576000                          = 0x1006
+	B921600                          = 0x1007
+	BLKBSZGET                        = 0x80081270
+	BLKBSZSET                        = 0x40081271
+	BLKFLSBUF                        = 0x1261
+	BLKFRAGET                        = 0x1265
+	BLKFRASET                        = 0x1264
+	BLKGETSIZE                       = 0x1260
+	BLKGETSIZE64                     = 0x80081272
+	BLKPBSZGET                       = 0x127b
+	BLKRAGET                         = 0x1263
+	BLKRASET                         = 0x1262
+	BLKROGET                         = 0x125e
+	BLKROSET                         = 0x125d
+	BLKRRPART                        = 0x125f
+	BLKSECTGET                       = 0x1267
+	BLKSECTSET                       = 0x1266
+	BLKSSZGET                        = 0x1268
+	BOTHER                           = 0x1000
+	BS1                              = 0x2000
+	BSDLY                            = 0x2000
+	CBAUD                            = 0x100f
+	CBAUDEX                          = 0x1000
+	CIBAUD                           = 0x100f0000
+	CLOCAL                           = 0x800
+	CR1                              = 0x200
+	CR2                              = 0x400
+	CR3                              = 0x600
+	CRDLY                            = 0x600
+	CREAD                            = 0x80
+	CS6                              = 0x10
+	CS7                              = 0x20
+	CS8                              = 0x30
+	CSIZE                            = 0x30
+	CSTOPB                           = 0x40
+	ECHOCTL                          = 0x200
+	ECHOE                            = 0x10
+	ECHOK                            = 0x20
+	ECHOKE                           = 0x800
+	ECHONL                           = 0x40
+	ECHOPRT                          = 0x400
+	EFD_CLOEXEC                      = 0x80000
+	EFD_NONBLOCK                     = 0x800
+	EPOLL_CLOEXEC                    = 0x80000
+	EXTPROC                          = 0x10000
+	FF1                              = 0x8000
+	FFDLY                            = 0x8000
+	FICLONE                          = 0x40049409
+	FICLONERANGE                     = 0x4020940d
+	FLUSHO                           = 0x1000
+	FS_IOC_ENABLE_VERITY             = 0x40806685
+	FS_IOC_GETFLAGS                  = 0x80086601
+	FS_IOC_GET_ENCRYPTION_NONCE      = 0x8010661b
+	FS_IOC_GET_ENCRYPTION_POLICY     = 0x400c6615
+	FS_IOC_GET_ENCRYPTION_PWSALT     = 0x40106614
+	FS_IOC_SETFLAGS                  = 0x40086602
+	FS_IOC_SET_ENCRYPTION_POLICY     = 0x800c6613
+	F_GETLK                          = 0x5
+	F_GETLK64                        = 0x5
+	F_GETOWN                         = 0x9
+	F_RDLCK                          = 0x0
+	F_SETLK                          = 0x6
+	F_SETLK64                        = 0x6
+	F_SETLKW                         = 0x7
+	F_SETLKW64                       = 0x7
+	F_SETOWN                         = 0x8
+	F_UNLCK                          = 0x2
+	F_WRLCK                          = 0x1
+	HUPCL                            = 0x400
+	ICANON                           = 0x2
+	IEXTEN                           = 0x8000
+	IN_CLOEXEC                       = 0x80000
+	IN_NONBLOCK                      = 0x800
+	IOCTL_VM_SOCKETS_GET_LOCAL_CID   = 0x7b9
+	ISIG                             = 0x1
+	IUCLC                            = 0x200
+	IXOFF                            = 0x1000
+	IXON                             = 0x400
+	MAP_ANON                         = 0x20
+	MAP_ANONYMOUS                    = 0x20
+	MAP_DENYWRITE                    = 0x800
+	MAP_EXECUTABLE                   = 0x1000
+	MAP_GROWSDOWN                    = 0x100
+	MAP_HUGETLB                      = 0x40000
+	MAP_LOCKED                       = 0x2000
+	MAP_NONBLOCK                     = 0x10000
+	MAP_NORESERVE                    = 0x4000
+	MAP_POPULATE                     = 0x8000
+	MAP_STACK                        = 0x20000
+	MAP_SYNC                         = 0x80000
+	MCL_CURRENT                      = 0x1
+	MCL_FUTURE                       = 0x2
+	MCL_ONFAULT                      = 0x4
+	NFDBITS                          = 0x40
+	NLDLY                            = 0x100
+	NOFLSH                           = 0x80
+	NS_GET_NSTYPE                    = 0xb703
+	NS_GET_OWNER_UID                 = 0xb704
+	NS_GET_PARENT                    = 0xb702
+	NS_GET_USERNS                    = 0xb701
+	OLCUC                            = 0x2
+	ONLCR                            = 0x4
+	O_APPEND                         = 0x400
+	O_ASYNC                          = 0x2000
+	O_CLOEXEC                        = 0x80000
+	O_CREAT                          = 0x40
+	O_DIRECT                         = 0x4000
+	O_DIRECTORY                      = 0x10000
+	O_DSYNC                          = 0x1000
+	O_EXCL                           = 0x80
+	O_FSYNC                          = 0x101000
+	O_LARGEFILE                      = 0x0
+	O_NDELAY                         = 0x800
+	O_NOATIME                        = 0x40000
+	O_NOCTTY                         = 0x100
+	O_NOFOLLOW                       = 0x20000
+	O_NONBLOCK                       = 0x800
+	O_PATH                           = 0x200000
+	O_RSYNC                          = 0x101000
+	O_SYNC                           = 0x101000
+	O_TMPFILE                        = 0x410000
+	O_TRUNC                          = 0x200
+	PARENB                           = 0x100
+	PARODD                           = 0x200
+	PENDIN                           = 0x4000
+	PERF_EVENT_IOC_DISABLE           = 0x2401
+	PERF_EVENT_IOC_ENABLE            = 0x2400
+	PERF_EVENT_IOC_ID                = 0x80082407
+	PERF_EVENT_IOC_MODIFY_ATTRIBUTES = 0x4008240b
+	PERF_EVENT_IOC_PAUSE_OUTPUT      = 0x40042409
+	PERF_EVENT_IOC_PERIOD            = 0x40082404
+	PERF_EVENT_IOC_QUERY_BPF         = 0xc008240a
+	PERF_EVENT_IOC_REFRESH           = 0x2402
+	PERF_EVENT_IOC_RESET             = 0x2403
+	PERF_EVENT_IOC_SET_BPF           = 0x40042408
+	PERF_EVENT_IOC_SET_FILTER        = 0x40082406
+	PERF_EVENT_IOC_SET_OUTPUT        = 0x2405
+	PPPIOCATTACH                     = 0x4004743d
+	PPPIOCATTCHAN                    = 0x40047438
+	PPPIOCCONNECT                    = 0x4004743a
+	PPPIOCDETACH                     = 0x4004743c
+	PPPIOCDISCONN                    = 0x7439
+	PPPIOCGASYNCMAP                  = 0x80047458
+	PPPIOCGCHAN                      = 0x80047437
+	PPPIOCGDEBUG                     = 0x80047441
+	PPPIOCGFLAGS                     = 0x8004745a
+	PPPIOCGIDLE                      = 0x8010743f
+	PPPIOCGIDLE32                    = 0x8008743f
+	PPPIOCGIDLE64                    = 0x8010743f
+	PPPIOCGL2TPSTATS                 = 0x80487436
+	PPPIOCGMRU                       = 0x80047453
+	PPPIOCGRASYNCMAP                 = 0x80047455
+	PPPIOCGUNIT                      = 0x80047456
+	PPPIOCGXASYNCMAP                 = 0x80207450
+	PPPIOCSACTIVE                    = 0x40107446
+	PPPIOCSASYNCMAP                  = 0x40047457
+	PPPIOCSCOMPRESS                  = 0x4010744d
+	PPPIOCSDEBUG                     = 0x40047440
+	PPPIOCSFLAGS                     = 0x40047459
+	PPPIOCSMAXCID                    = 0x40047451
+	PPPIOCSMRRU                      = 0x4004743b
+	PPPIOCSMRU                       = 0x40047452
+	PPPIOCSNPMODE                    = 0x4008744b
+	PPPIOCSPASS                      = 0x40107447
+	PPPIOCSRASYNCMAP                 = 0x40047454
+	PPPIOCSXASYNCMAP                 = 0x4020744f
+	PPPIOCXFERUNIT                   = 0x744e
+	PR_SET_PTRACER_ANY               = 0xffffffffffffffff
+	RLIMIT_AS                        = 0x9
+	RLIMIT_MEMLOCK                   = 0x8
+	RLIMIT_NOFILE                    = 0x7
+	RLIMIT_NPROC                     = 0x6
+	RLIMIT_RSS                       = 0x5
+	RNDADDENTROPY                    = 0x40085203
+	RNDADDTOENTCNT                   = 0x40045201
+	RNDCLEARPOOL                     = 0x5206
+	RNDGETENTCNT                     = 0x80045200
+	RNDGETPOOL                       = 0x80085202
+	RNDRESEEDCRNG                    = 0x5207
+	RNDZAPENTCNT                     = 0x5204
+	RTC_AIE_OFF                      = 0x7002
+	RTC_AIE_ON                       = 0x7001
+	RTC_ALM_READ                     = 0x80247008
+	RTC_ALM_SET                      = 0x40247007
+	RTC_EPOCH_READ                   = 0x8008700d
+	RTC_EPOCH_SET                    = 0x4008700e
+	RTC_IRQP_READ                    = 0x8008700b
+	RTC_IRQP_SET                     = 0x4008700c
+	RTC_PIE_OFF                      = 0x7006
+	RTC_PIE_ON                       = 0x7005
+	RTC_PLL_GET                      = 0x80207011
+	RTC_PLL_SET                      = 0x40207012
+	RTC_RD_TIME                      = 0x80247009
+	RTC_SET_TIME                     = 0x4024700a
+	RTC_UIE_OFF                      = 0x7004
+	RTC_UIE_ON                       = 0x7003
+	RTC_VL_CLR                       = 0x7014
+	RTC_VL_READ                      = 0x80047013
+	RTC_WIE_OFF                      = 0x7010
+	RTC_WIE_ON                       = 0x700f
+	RTC_WKALM_RD                     = 0x80287010
+	RTC_WKALM_SET                    = 0x4028700f
+	SCM_TIMESTAMPING                 = 0x25
+	SCM_TIMESTAMPING_OPT_STATS       = 0x36
+	SCM_TIMESTAMPING_PKTINFO         = 0x3a
+	SCM_TIMESTAMPNS                  = 0x23
+	SCM_TXTIME                       = 0x3d
+	SCM_WIFI_STATUS                  = 0x29
+	SFD_CLOEXEC                      = 0x80000
+	SFD_NONBLOCK                     = 0x800
+	SIOCATMARK                       = 0x8905
+	SIOCGPGRP                        = 0x8904
+	SIOCGSTAMPNS_NEW                 = 0x80108907
+	SIOCGSTAMP_NEW                   = 0x80108906
+	SIOCINQ                          = 0x541b
+	SIOCOUTQ                         = 0x5411
+	SIOCSPGRP                        = 0x8902
+	SOCK_CLOEXEC                     = 0x80000
+	SOCK_DGRAM                       = 0x2
+	SOCK_NONBLOCK                    = 0x800
+	SOCK_STREAM                      = 0x1
+	SOL_SOCKET                       = 0x1
+	SO_ACCEPTCONN                    = 0x1e
+	SO_ATTACH_BPF                    = 0x32
+	SO_ATTACH_REUSEPORT_CBPF         = 0x33
+	SO_ATTACH_REUSEPORT_EBPF         = 0x34
+	SO_BINDTODEVICE                  = 0x19
+	SO_BINDTOIFINDEX                 = 0x3e
+	SO_BPF_EXTENSIONS                = 0x30
+	SO_BROADCAST                     = 0x6
+	SO_BSDCOMPAT                     = 0xe
+	SO_BUSY_POLL                     = 0x2e
+	SO_CNX_ADVICE                    = 0x35
+	SO_COOKIE                        = 0x39
+	SO_DETACH_REUSEPORT_BPF          = 0x44
+	SO_DOMAIN                        = 0x27
+	SO_DONTROUTE                     = 0x5
+	SO_ERROR                         = 0x4
+	SO_INCOMING_CPU                  = 0x31
+	SO_INCOMING_NAPI_ID              = 0x38
+	SO_KEEPALIVE                     = 0x9
+	SO_LINGER                        = 0xd
+	SO_LOCK_FILTER                   = 0x2c
+	SO_MARK                          = 0x24
+	SO_MAX_PACING_RATE               = 0x2f
+	SO_MEMINFO                       = 0x37
+	SO_NOFCS                         = 0x2b
+	SO_OOBINLINE                     = 0xa
+	SO_PASSCRED                      = 0x10
+	SO_PASSSEC                       = 0x22
+	SO_PEEK_OFF                      = 0x2a
+	SO_PEERCRED                      = 0x11
+	SO_PEERGROUPS                    = 0x3b
+	SO_PEERSEC                       = 0x1f
+	SO_PROTOCOL                      = 0x26
+	SO_RCVBUF                        = 0x8
+	SO_RCVBUFFORCE                   = 0x21
+	SO_RCVLOWAT                      = 0x12
+	SO_RCVTIMEO                      = 0x14
+	SO_RCVTIMEO_NEW                  = 0x42
+	SO_RCVTIMEO_OLD                  = 0x14
+	SO_REUSEADDR                     = 0x2
+	SO_REUSEPORT                     = 0xf
+	SO_RXQ_OVFL                      = 0x28
+	SO_SECURITY_AUTHENTICATION       = 0x16
+	SO_SECURITY_ENCRYPTION_NETWORK   = 0x18
+	SO_SECURITY_ENCRYPTION_TRANSPORT = 0x17
+	SO_SELECT_ERR_QUEUE              = 0x2d
+	SO_SNDBUF                        = 0x7
+	SO_SNDBUFFORCE                   = 0x20
+	SO_SNDLOWAT                      = 0x13
+	SO_SNDTIMEO                      = 0x15
+	SO_SNDTIMEO_NEW                  = 0x43
+	SO_SNDTIMEO_OLD                  = 0x15
+	SO_TIMESTAMPING                  = 0x25
+	SO_TIMESTAMPING_NEW              = 0x41
+	SO_TIMESTAMPING_OLD              = 0x25
+	SO_TIMESTAMPNS                   = 0x23
+	SO_TIMESTAMPNS_NEW               = 0x40
+	SO_TIMESTAMPNS_OLD               = 0x23
+	SO_TIMESTAMP_NEW                 = 0x3f
+	SO_TXTIME                        = 0x3d
+	SO_TYPE                          = 0x3
+	SO_WIFI_STATUS                   = 0x29
+	SO_ZEROCOPY                      = 0x3c
+	TAB1                             = 0x800
+	TAB2                             = 0x1000
+	TAB3                             = 0x1800
+	TABDLY                           = 0x1800
+	TCFLSH                           = 0x540b
+	TCGETA                           = 0x5405
+	TCGETS                           = 0x5401
+	TCGETS2                          = 0x802c542a
+	TCGETX                           = 0x5432
+	TCSAFLUSH                        = 0x2
+	TCSBRK                           = 0x5409
+	TCSBRKP                          = 0x5425
+	TCSETA                           = 0x5406
+	TCSETAF                          = 0x5408
+	TCSETAW                          = 0x5407
+	TCSETS                           = 0x5402
+	TCSETS2                          = 0x402c542b
+	TCSETSF                          = 0x5404
+	TCSETSF2                         = 0x402c542d
+	TCSETSW                          = 0x5403
+	TCSETSW2                         = 0x402c542c
+	TCSETX                           = 0x5433
+	TCSETXF                          = 0x5434
+	TCSETXW                          = 0x5435
+	TCXONC                           = 0x540a
+	TFD_CLOEXEC                      = 0x80000
+	TFD_NONBLOCK                     = 0x800
+	TIOCCBRK                         = 0x5428
+	TIOCCONS                         = 0x541d
+	TIOCEXCL                         = 0x540c
+	TIOCGDEV                         = 0x80045432
+	TIOCGETD                         = 0x5424
+	TIOCGEXCL                        = 0x80045440
+	TIOCGICOUNT                      = 0x545d
+	TIOCGISO7816                     = 0x80285442
+	TIOCGLCKTRMIOS                   = 0x5456
+	TIOCGPGRP                        = 0x540f
+	TIOCGPKT                         = 0x80045438
+	TIOCGPTLCK                       = 0x80045439
+	TIOCGPTN                         = 0x80045430
+	TIOCGPTPEER                      = 0x5441
+	TIOCGRS485                       = 0x542e
+	TIOCGSERIAL                      = 0x541e
+	TIOCGSID                         = 0x5429
+	TIOCGSOFTCAR                     = 0x5419
+	TIOCGWINSZ                       = 0x5413
+	TIOCINQ                          = 0x541b
+	TIOCLINUX                        = 0x541c
+	TIOCMBIC                         = 0x5417
+	TIOCMBIS                         = 0x5416
+	TIOCMGET                         = 0x5415
+	TIOCMIWAIT                       = 0x545c
+	TIOCMSET                         = 0x5418
+	TIOCM_CAR                        = 0x40
+	TIOCM_CD                         = 0x40
+	TIOCM_CTS                        = 0x20
+	TIOCM_DSR                        = 0x100
+	TIOCM_RI                         = 0x80
+	TIOCM_RNG                        = 0x80
+	TIOCM_SR                         = 0x10
+	TIOCM_ST                         = 0x8
+	TIOCNOTTY                        = 0x5422
+	TIOCNXCL                         = 0x540d
+	TIOCOUTQ                         = 0x5411
+	TIOCPKT                          = 0x5420
+	TIOCSBRK                         = 0x5427
+	TIOCSCTTY                        = 0x540e
+	TIOCSERCONFIG                    = 0x5453
+	TIOCSERGETLSR                    = 0x5459
+	TIOCSERGETMULTI                  = 0x545a
+	TIOCSERGSTRUCT                   = 0x5458
+	TIOCSERGWILD                     = 0x5454
+	TIOCSERSETMULTI                  = 0x545b
+	TIOCSERSWILD                     = 0x5455
+	TIOCSER_TEMT                     = 0x1
+	TIOCSETD                         = 0x5423
+	TIOCSIG                          = 0x40045436
+	TIOCSISO7816                     = 0xc0285443
+	TIOCSLCKTRMIOS                   = 0x5457
+	TIOCSPGRP                        = 0x5410
+	TIOCSPTLCK                       = 0x40045431
+	TIOCSRS485                       = 0x542f
+	TIOCSSERIAL                      = 0x541f
+	TIOCSSOFTCAR                     = 0x541a
+	TIOCSTI                          = 0x5412
+	TIOCSWINSZ                       = 0x5414
+	TIOCVHANGUP                      = 0x5437
+	TOSTOP                           = 0x100
+	TUNATTACHFILTER                  = 0x401054d5
+	TUNDETACHFILTER                  = 0x401054d6
+	TUNGETDEVNETNS                   = 0x54e3
+	TUNGETFEATURES                   = 0x800454cf
+	TUNGETFILTER                     = 0x801054db
+	TUNGETIFF                        = 0x800454d2
+	TUNGETSNDBUF                     = 0x800454d3
+	TUNGETVNETBE                     = 0x800454df
+	TUNGETVNETHDRSZ                  = 0x800454d7
+	TUNGETVNETLE                     = 0x800454dd
+	TUNSETCARRIER                    = 0x400454e2
+	TUNSETDEBUG                      = 0x400454c9
+	TUNSETFILTEREBPF                 = 0x800454e1
+	TUNSETGROUP                      = 0x400454ce
+	TUNSETIFF                        = 0x400454ca
+	TUNSETIFINDEX                    = 0x400454da
+	TUNSETLINK                       = 0x400454cd
+	TUNSETNOCSUM                     = 0x400454c8
+	TUNSETOFFLOAD                    = 0x400454d0
+	TUNSETOWNER                      = 0x400454cc
+	TUNSETPERSIST                    = 0x400454cb
+	TUNSETQUEUE                      = 0x400454d9
+	TUNSETSNDBUF                     = 0x400454d4
+	TUNSETSTEERINGEBPF               = 0x800454e0
+	TUNSETTXFILTER                   = 0x400454d1
+	TUNSETVNETBE                     = 0x400454de
+	TUNSETVNETHDRSZ                  = 0x400454d8
+	TUNSETVNETLE                     = 0x400454dc
+	UBI_IOCATT                       = 0x40186f40
+	UBI_IOCDET                       = 0x40046f41
+	UBI_IOCEBCH                      = 0x40044f02
+	UBI_IOCEBER                      = 0x40044f01
+	UBI_IOCEBISMAP                   = 0x80044f05
+	UBI_IOCEBMAP                     = 0x40084f03
+	UBI_IOCEBUNMAP                   = 0x40044f04
+	UBI_IOCMKVOL                     = 0x40986f00
+	UBI_IOCRMVOL                     = 0x40046f01
+	UBI_IOCRNVOL                     = 0x51106f03
+	UBI_IOCRPEB                      = 0x40046f04
+	UBI_IOCRSVOL                     = 0x400c6f02
+	UBI_IOCSETVOLPROP                = 0x40104f06
+	UBI_IOCSPEB                      = 0x40046f05
+	UBI_IOCVOLCRBLK                  = 0x40804f07
+	UBI_IOCVOLRMBLK                  = 0x4f08
+	UBI_IOCVOLUP                     = 0x40084f00
+	VDISCARD                         = 0xd
+	VEOF                             = 0x4
+	VEOL                             = 0xb
+	VEOL2                            = 0x10
+	VMIN                             = 0x6
+	VREPRINT                         = 0xc
+	VSTART                           = 0x8
+	VSTOP                            = 0x9
+	VSUSP                            = 0xa
+	VSWTC                            = 0x7
+	VT1                              = 0x4000
+	VTDLY                            = 0x4000
+	VTIME                            = 0x5
+	VWERASE                          = 0xe
+	WDIOC_GETBOOTSTATUS              = 0x80045702
+	WDIOC_GETPRETIMEOUT              = 0x80045709
+	WDIOC_GETSTATUS                  = 0x80045701
+	WDIOC_GETSUPPORT                 = 0x80285700
+	WDIOC_GETTEMP                    = 0x80045703
+	WDIOC_GETTIMELEFT                = 0x8004570a
+	WDIOC_GETTIMEOUT                 = 0x80045707
+	WDIOC_KEEPALIVE                  = 0x80045705
+	WDIOC_SETOPTIONS                 = 0x80045704
+	WORDSIZE                         = 0x40
+	XCASE                            = 0x4
+	XTABS                            = 0x1800
+)
+
+// Errors
+const (
+	EADDRINUSE      = syscall.Errno(0x62)
+	EADDRNOTAVAIL   = syscall.Errno(0x63)
+	EADV            = syscall.Errno(0x44)
+	EAFNOSUPPORT    = syscall.Errno(0x61)
+	EALREADY        = syscall.Errno(0x72)
+	EBADE           = syscall.Errno(0x34)
+	EBADFD          = syscall.Errno(0x4d)
+	EBADMSG         = syscall.Errno(0x4a)
+	EBADR           = syscall.Errno(0x35)
+	EBADRQC         = syscall.Errno(0x38)
+	EBADSLT         = syscall.Errno(0x39)
+	EBFONT          = syscall.Errno(0x3b)
+	ECANCELED       = syscall.Errno(0x7d)
+	ECHRNG          = syscall.Errno(0x2c)
+	ECOMM           = syscall.Errno(0x46)
+	ECONNABORTED    = syscall.Errno(0x67)
+	ECONNREFUSED    = syscall.Errno(0x6f)
+	ECONNRESET      = syscall.Errno(0x68)
+	EDEADLK         = syscall.Errno(0x23)
+	EDEADLOCK       = syscall.Errno(0x23)
+	EDESTADDRREQ    = syscall.Errno(0x59)
+	EDOTDOT         = syscall.Errno(0x49)
+	EDQUOT          = syscall.Errno(0x7a)
+	EHOSTDOWN       = syscall.Errno(0x70)
+	EHOSTUNREACH    = syscall.Errno(0x71)
+	EHWPOISON       = syscall.Errno(0x85)
+	EIDRM           = syscall.Errno(0x2b)
+	EILSEQ          = syscall.Errno(0x54)
+	EINPROGRESS     = syscall.Errno(0x73)
+	EISCONN         = syscall.Errno(0x6a)
+	EISNAM          = syscall.Errno(0x78)
+	EKEYEXPIRED     = syscall.Errno(0x7f)
+	EKEYREJECTED    = syscall.Errno(0x81)
+	EKEYREVOKED     = syscall.Errno(0x80)
+	EL2HLT          = syscall.Errno(0x33)
+	EL2NSYNC        = syscall.Errno(0x2d)
+	EL3HLT          = syscall.Errno(0x2e)
+	EL3RST          = syscall.Errno(0x2f)
+	ELIBACC         = syscall.Errno(0x4f)
+	ELIBBAD         = syscall.Errno(0x50)
+	ELIBEXEC        = syscall.Errno(0x53)
+	ELIBMAX         = syscall.Errno(0x52)
+	ELIBSCN         = syscall.Errno(0x51)
+	ELNRNG          = syscall.Errno(0x30)
+	ELOOP           = syscall.Errno(0x28)
+	EMEDIUMTYPE     = syscall.Errno(0x7c)
+	EMSGSIZE        = syscall.Errno(0x5a)
+	EMULTIHOP       = syscall.Errno(0x48)
+	ENAMETOOLONG    = syscall.Errno(0x24)
+	ENAVAIL         = syscall.Errno(0x77)
+	ENETDOWN        = syscall.Errno(0x64)
+	ENETRESET       = syscall.Errno(0x66)
+	ENETUNREACH     = syscall.Errno(0x65)
+	ENOANO          = syscall.Errno(0x37)
+	ENOBUFS         = syscall.Errno(0x69)
+	ENOCSI          = syscall.Errno(0x32)
+	ENODATA         = syscall.Errno(0x3d)
+	ENOKEY          = syscall.Errno(0x7e)
+	ENOLCK          = syscall.Errno(0x25)
+	ENOLINK         = syscall.Errno(0x43)
+	ENOMEDIUM       = syscall.Errno(0x7b)
+	ENOMSG          = syscall.Errno(0x2a)
+	ENONET          = syscall.Errno(0x40)
+	ENOPKG          = syscall.Errno(0x41)
+	ENOPROTOOPT     = syscall.Errno(0x5c)
+	ENOSR           = syscall.Errno(0x3f)
+	ENOSTR          = syscall.Errno(0x3c)
+	ENOSYS          = syscall.Errno(0x26)
+	ENOTCONN        = syscall.Errno(0x6b)
+	ENOTEMPTY       = syscall.Errno(0x27)
+	ENOTNAM         = syscall.Errno(0x76)
+	ENOTRECOVERABLE = syscall.Errno(0x83)
+	ENOTSOCK        = syscall.Errno(0x58)
+	ENOTSUP         = syscall.Errno(0x5f)
+	ENOTUNIQ        = syscall.Errno(0x4c)
+	EOPNOTSUPP      = syscall.Errno(0x5f)
+	EOVERFLOW       = syscall.Errno(0x4b)
+	EOWNERDEAD      = syscall.Errno(0x82)
+	EPFNOSUPPORT    = syscall.Errno(0x60)
+	EPROTO          = syscall.Errno(0x47)
+	EPROTONOSUPPORT = syscall.Errno(0x5d)
+	EPROTOTYPE      = syscall.Errno(0x5b)
+	EREMCHG         = syscall.Errno(0x4e)
+	EREMOTE         = syscall.Errno(0x42)
+	EREMOTEIO       = syscall.Errno(0x79)
+	ERESTART        = syscall.Errno(0x55)
+	ERFKILL         = syscall.Errno(0x84)
+	ESHUTDOWN       = syscall.Errno(0x6c)
+	ESOCKTNOSUPPORT = syscall.Errno(0x5e)
+	ESRMNT          = syscall.Errno(0x45)
+	ESTALE          = syscall.Errno(0x74)
+	ESTRPIPE        = syscall.Errno(0x56)
+	ETIME           = syscall.Errno(0x3e)
+	ETIMEDOUT       = syscall.Errno(0x6e)
+	ETOOMANYREFS    = syscall.Errno(0x6d)
+	EUCLEAN         = syscall.Errno(0x75)
+	EUNATCH         = syscall.Errno(0x31)
+	EUSERS          = syscall.Errno(0x57)
+	EXFULL          = syscall.Errno(0x36)
+)
+
+// Signals
+const (
+	SIGBUS    = syscall.Signal(0x7)
+	SIGCHLD   = syscall.Signal(0x11)
+	SIGCLD    = syscall.Signal(0x11)
+	SIGCONT   = syscall.Signal(0x12)
+	SIGIO     = syscall.Signal(0x1d)
+	SIGPOLL   = syscall.Signal(0x1d)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGPWR    = syscall.Signal(0x1e)
+	SIGSTKFLT = syscall.Signal(0x10)
+	SIGSTOP   = syscall.Signal(0x13)
+	SIGSYS    = syscall.Signal(0x1f)
+	SIGTSTP   = syscall.Signal(0x14)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x17)
+	SIGUSR1   = syscall.Signal(0xa)
+	SIGUSR2   = syscall.Signal(0xc)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "no such device or address"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EAGAIN", "resource temporarily unavailable"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device or resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "invalid cross-device link"},
+	{19, "ENODEV", "no such device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "numerical result out of range"},
+	{35, "EDEADLK", "resource deadlock avoided"},
+	{36, "ENAMETOOLONG", "file name too long"},
+	{37, "ENOLCK", "no locks available"},
+	{38, "ENOSYS", "function not implemented"},
+	{39, "ENOTEMPTY", "directory not empty"},
+	{40, "ELOOP", "too many levels of symbolic links"},
+	{42, "ENOMSG", "no message of desired type"},
+	{43, "EIDRM", "identifier removed"},
+	{44, "ECHRNG", "channel number out of range"},
+	{45, "EL2NSYNC", "level 2 not synchronized"},
+	{46, "EL3HLT", "level 3 halted"},
+	{47, "EL3RST", "level 3 reset"},
+	{48, "ELNRNG", "link number out of range"},
+	{49, "EUNATCH", "protocol driver not attached"},
+	{50, "ENOCSI", "no CSI structure available"},
+	{51, "EL2HLT", "level 2 halted"},
+	{52, "EBADE", "invalid exchange"},
+	{53, "EBADR", "invalid request descriptor"},
+	{54, "EXFULL", "exchange full"},
+	{55, "ENOANO", "no anode"},
+	{56, "EBADRQC", "invalid request code"},
+	{57, "EBADSLT", "invalid slot"},
+	{59, "EBFONT", "bad font file format"},
+	{60, "ENOSTR", "device not a stream"},
+	{61, "ENODATA", "no data available"},
+	{62, "ETIME", "timer expired"},
+	{63, "ENOSR", "out of streams resources"},
+	{64, "ENONET", "machine is not on the network"},
+	{65, "ENOPKG", "package not installed"},
+	{66, "EREMOTE", "object is remote"},
+	{67, "ENOLINK", "link has been severed"},
+	{68, "EADV", "advertise error"},
+	{69, "ESRMNT", "srmount error"},
+	{70, "ECOMM", "communication error on send"},
+	{71, "EPROTO", "protocol error"},
+	{72, "EMULTIHOP", "multihop attempted"},
+	{73, "EDOTDOT", "RFS specific error"},
+	{74, "EBADMSG", "bad message"},
+	{75, "EOVERFLOW", "value too large for defined data type"},
+	{76, "ENOTUNIQ", "name not unique on network"},
+	{77, "EBADFD", "file descriptor in bad state"},
+	{78, "EREMCHG", "remote address changed"},
+	{79, "ELIBACC", "can not access a needed shared library"},
+	{80, "ELIBBAD", "accessing a corrupted shared library"},
+	{81, "ELIBSCN", ".lib section in a.out corrupted"},
+	{82, "ELIBMAX", "attempting to link in too many shared libraries"},
+	{83, "ELIBEXEC", "cannot exec a shared library directly"},
+	{84, "EILSEQ", "invalid or incomplete multibyte or wide character"},
+	{85, "ERESTART", "interrupted system call should be restarted"},
+	{86, "ESTRPIPE", "streams pipe error"},
+	{87, "EUSERS", "too many users"},
+	{88, "ENOTSOCK", "socket operation on non-socket"},
+	{89, "EDESTADDRREQ", "destination address required"},
+	{90, "EMSGSIZE", "message too long"},
+	{91, "EPROTOTYPE", "protocol wrong type for socket"},
+	{92, "ENOPROTOOPT", "protocol not available"},
+	{93, "EPROTONOSUPPORT", "protocol not supported"},
+	{94, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{95, "ENOTSUP", "operation not supported"},
+	{96, "EPFNOSUPPORT", "protocol family not supported"},
+	{97, "EAFNOSUPPORT", "address family not supported by protocol"},
+	{98, "EADDRINUSE", "address already in use"},
+	{99, "EADDRNOTAVAIL", "cannot assign requested address"},
+	{100, "ENETDOWN", "network is down"},
+	{101, "ENETUNREACH", "network is unreachable"},
+	{102, "ENETRESET", "network dropped connection on reset"},
+	{103, "ECONNABORTED", "software caused connection abort"},
+	{104, "ECONNRESET", "connection reset by peer"},
+	{105, "ENOBUFS", "no buffer space available"},
+	{106, "EISCONN", "transport endpoint is already connected"},
+	{107, "ENOTCONN", "transport endpoint is not connected"},
+	{108, "ESHUTDOWN", "cannot send after transport endpoint shutdown"},
+	{109, "ETOOMANYREFS", "too many references: cannot splice"},
+	{110, "ETIMEDOUT", "connection timed out"},
+	{111, "ECONNREFUSED", "connection refused"},
+	{112, "EHOSTDOWN", "host is down"},
+	{113, "EHOSTUNREACH", "no route to host"},
+	{114, "EALREADY", "operation already in progress"},
+	{115, "EINPROGRESS", "operation now in progress"},
+	{116, "ESTALE", "stale file handle"},
+	{117, "EUCLEAN", "structure needs cleaning"},
+	{118, "ENOTNAM", "not a XENIX named type file"},
+	{119, "ENAVAIL", "no XENIX semaphores available"},
+	{120, "EISNAM", "is a named type file"},
+	{121, "EREMOTEIO", "remote I/O error"},
+	{122, "EDQUOT", "disk quota exceeded"},
+	{123, "ENOMEDIUM", "no medium found"},
+	{124, "EMEDIUMTYPE", "wrong medium type"},
+	{125, "ECANCELED", "operation canceled"},
+	{126, "ENOKEY", "required key not available"},
+	{127, "EKEYEXPIRED", "key has expired"},
+	{128, "EKEYREVOKED", "key has been revoked"},
+	{129, "EKEYREJECTED", "key was rejected by service"},
+	{130, "EOWNERDEAD", "owner died"},
+	{131, "ENOTRECOVERABLE", "state not recoverable"},
+	{132, "ERFKILL", "operation not possible due to RF-kill"},
+	{133, "EHWPOISON", "memory page has hardware error"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/breakpoint trap"},
+	{6, "SIGABRT", "aborted"},
+	{7, "SIGBUS", "bus error"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGUSR1", "user defined signal 1"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGUSR2", "user defined signal 2"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGSTKFLT", "stack fault"},
+	{17, "SIGCHLD", "child exited"},
+	{18, "SIGCONT", "continued"},
+	{19, "SIGSTOP", "stopped (signal)"},
+	{20, "SIGTSTP", "stopped"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGURG", "urgent I/O condition"},
+	{24, "SIGXCPU", "CPU time limit exceeded"},
+	{25, "SIGXFSZ", "file size limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window changed"},
+	{29, "SIGIO", "I/O possible"},
+	{30, "SIGPWR", "power failure"},
+	{31, "SIGSYS", "bad system call"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_s390x.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_s390x.go
new file mode 100644
index 000000000..467b8218e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_s390x.go
@@ -0,0 +1,850 @@
+// mkerrors.sh -Wall -Werror -static -I/tmp/include -fsigned-char
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build s390x,linux
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include -fsigned-char _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	B1000000                         = 0x1008
+	B115200                          = 0x1002
+	B1152000                         = 0x1009
+	B1500000                         = 0x100a
+	B2000000                         = 0x100b
+	B230400                          = 0x1003
+	B2500000                         = 0x100c
+	B3000000                         = 0x100d
+	B3500000                         = 0x100e
+	B4000000                         = 0x100f
+	B460800                          = 0x1004
+	B500000                          = 0x1005
+	B57600                           = 0x1001
+	B576000                          = 0x1006
+	B921600                          = 0x1007
+	BLKBSZGET                        = 0x80081270
+	BLKBSZSET                        = 0x40081271
+	BLKFLSBUF                        = 0x1261
+	BLKFRAGET                        = 0x1265
+	BLKFRASET                        = 0x1264
+	BLKGETSIZE                       = 0x1260
+	BLKGETSIZE64                     = 0x80081272
+	BLKPBSZGET                       = 0x127b
+	BLKRAGET                         = 0x1263
+	BLKRASET                         = 0x1262
+	BLKROGET                         = 0x125e
+	BLKROSET                         = 0x125d
+	BLKRRPART                        = 0x125f
+	BLKSECTGET                       = 0x1267
+	BLKSECTSET                       = 0x1266
+	BLKSSZGET                        = 0x1268
+	BOTHER                           = 0x1000
+	BS1                              = 0x2000
+	BSDLY                            = 0x2000
+	CBAUD                            = 0x100f
+	CBAUDEX                          = 0x1000
+	CIBAUD                           = 0x100f0000
+	CLOCAL                           = 0x800
+	CR1                              = 0x200
+	CR2                              = 0x400
+	CR3                              = 0x600
+	CRDLY                            = 0x600
+	CREAD                            = 0x80
+	CS6                              = 0x10
+	CS7                              = 0x20
+	CS8                              = 0x30
+	CSIZE                            = 0x30
+	CSTOPB                           = 0x40
+	ECHOCTL                          = 0x200
+	ECHOE                            = 0x10
+	ECHOK                            = 0x20
+	ECHOKE                           = 0x800
+	ECHONL                           = 0x40
+	ECHOPRT                          = 0x400
+	EFD_CLOEXEC                      = 0x80000
+	EFD_NONBLOCK                     = 0x800
+	EPOLL_CLOEXEC                    = 0x80000
+	EXTPROC                          = 0x10000
+	FF1                              = 0x8000
+	FFDLY                            = 0x8000
+	FICLONE                          = 0x40049409
+	FICLONERANGE                     = 0x4020940d
+	FLUSHO                           = 0x1000
+	FS_IOC_ENABLE_VERITY             = 0x40806685
+	FS_IOC_GETFLAGS                  = 0x80086601
+	FS_IOC_GET_ENCRYPTION_NONCE      = 0x8010661b
+	FS_IOC_GET_ENCRYPTION_POLICY     = 0x400c6615
+	FS_IOC_GET_ENCRYPTION_PWSALT     = 0x40106614
+	FS_IOC_SETFLAGS                  = 0x40086602
+	FS_IOC_SET_ENCRYPTION_POLICY     = 0x800c6613
+	F_GETLK                          = 0x5
+	F_GETLK64                        = 0x5
+	F_GETOWN                         = 0x9
+	F_RDLCK                          = 0x0
+	F_SETLK                          = 0x6
+	F_SETLK64                        = 0x6
+	F_SETLKW                         = 0x7
+	F_SETLKW64                       = 0x7
+	F_SETOWN                         = 0x8
+	F_UNLCK                          = 0x2
+	F_WRLCK                          = 0x1
+	HUPCL                            = 0x400
+	ICANON                           = 0x2
+	IEXTEN                           = 0x8000
+	IN_CLOEXEC                       = 0x80000
+	IN_NONBLOCK                      = 0x800
+	IOCTL_VM_SOCKETS_GET_LOCAL_CID   = 0x7b9
+	ISIG                             = 0x1
+	IUCLC                            = 0x200
+	IXOFF                            = 0x1000
+	IXON                             = 0x400
+	MAP_ANON                         = 0x20
+	MAP_ANONYMOUS                    = 0x20
+	MAP_DENYWRITE                    = 0x800
+	MAP_EXECUTABLE                   = 0x1000
+	MAP_GROWSDOWN                    = 0x100
+	MAP_HUGETLB                      = 0x40000
+	MAP_LOCKED                       = 0x2000
+	MAP_NONBLOCK                     = 0x10000
+	MAP_NORESERVE                    = 0x4000
+	MAP_POPULATE                     = 0x8000
+	MAP_STACK                        = 0x20000
+	MAP_SYNC                         = 0x80000
+	MCL_CURRENT                      = 0x1
+	MCL_FUTURE                       = 0x2
+	MCL_ONFAULT                      = 0x4
+	NFDBITS                          = 0x40
+	NLDLY                            = 0x100
+	NOFLSH                           = 0x80
+	NS_GET_NSTYPE                    = 0xb703
+	NS_GET_OWNER_UID                 = 0xb704
+	NS_GET_PARENT                    = 0xb702
+	NS_GET_USERNS                    = 0xb701
+	OLCUC                            = 0x2
+	ONLCR                            = 0x4
+	O_APPEND                         = 0x400
+	O_ASYNC                          = 0x2000
+	O_CLOEXEC                        = 0x80000
+	O_CREAT                          = 0x40
+	O_DIRECT                         = 0x4000
+	O_DIRECTORY                      = 0x10000
+	O_DSYNC                          = 0x1000
+	O_EXCL                           = 0x80
+	O_FSYNC                          = 0x101000
+	O_LARGEFILE                      = 0x0
+	O_NDELAY                         = 0x800
+	O_NOATIME                        = 0x40000
+	O_NOCTTY                         = 0x100
+	O_NOFOLLOW                       = 0x20000
+	O_NONBLOCK                       = 0x800
+	O_PATH                           = 0x200000
+	O_RSYNC                          = 0x101000
+	O_SYNC                           = 0x101000
+	O_TMPFILE                        = 0x410000
+	O_TRUNC                          = 0x200
+	PARENB                           = 0x100
+	PARODD                           = 0x200
+	PENDIN                           = 0x4000
+	PERF_EVENT_IOC_DISABLE           = 0x2401
+	PERF_EVENT_IOC_ENABLE            = 0x2400
+	PERF_EVENT_IOC_ID                = 0x80082407
+	PERF_EVENT_IOC_MODIFY_ATTRIBUTES = 0x4008240b
+	PERF_EVENT_IOC_PAUSE_OUTPUT      = 0x40042409
+	PERF_EVENT_IOC_PERIOD            = 0x40082404
+	PERF_EVENT_IOC_QUERY_BPF         = 0xc008240a
+	PERF_EVENT_IOC_REFRESH           = 0x2402
+	PERF_EVENT_IOC_RESET             = 0x2403
+	PERF_EVENT_IOC_SET_BPF           = 0x40042408
+	PERF_EVENT_IOC_SET_FILTER        = 0x40082406
+	PERF_EVENT_IOC_SET_OUTPUT        = 0x2405
+	PPPIOCATTACH                     = 0x4004743d
+	PPPIOCATTCHAN                    = 0x40047438
+	PPPIOCCONNECT                    = 0x4004743a
+	PPPIOCDETACH                     = 0x4004743c
+	PPPIOCDISCONN                    = 0x7439
+	PPPIOCGASYNCMAP                  = 0x80047458
+	PPPIOCGCHAN                      = 0x80047437
+	PPPIOCGDEBUG                     = 0x80047441
+	PPPIOCGFLAGS                     = 0x8004745a
+	PPPIOCGIDLE                      = 0x8010743f
+	PPPIOCGIDLE32                    = 0x8008743f
+	PPPIOCGIDLE64                    = 0x8010743f
+	PPPIOCGL2TPSTATS                 = 0x80487436
+	PPPIOCGMRU                       = 0x80047453
+	PPPIOCGRASYNCMAP                 = 0x80047455
+	PPPIOCGUNIT                      = 0x80047456
+	PPPIOCGXASYNCMAP                 = 0x80207450
+	PPPIOCSACTIVE                    = 0x40107446
+	PPPIOCSASYNCMAP                  = 0x40047457
+	PPPIOCSCOMPRESS                  = 0x4010744d
+	PPPIOCSDEBUG                     = 0x40047440
+	PPPIOCSFLAGS                     = 0x40047459
+	PPPIOCSMAXCID                    = 0x40047451
+	PPPIOCSMRRU                      = 0x4004743b
+	PPPIOCSMRU                       = 0x40047452
+	PPPIOCSNPMODE                    = 0x4008744b
+	PPPIOCSPASS                      = 0x40107447
+	PPPIOCSRASYNCMAP                 = 0x40047454
+	PPPIOCSXASYNCMAP                 = 0x4020744f
+	PPPIOCXFERUNIT                   = 0x744e
+	PR_SET_PTRACER_ANY               = 0xffffffffffffffff
+	PTRACE_DISABLE_TE                = 0x5010
+	PTRACE_ENABLE_TE                 = 0x5009
+	PTRACE_GET_LAST_BREAK            = 0x5006
+	PTRACE_OLDSETOPTIONS             = 0x15
+	PTRACE_PEEKDATA_AREA             = 0x5003
+	PTRACE_PEEKTEXT_AREA             = 0x5002
+	PTRACE_PEEKUSR_AREA              = 0x5000
+	PTRACE_PEEK_SYSTEM_CALL          = 0x5007
+	PTRACE_POKEDATA_AREA             = 0x5005
+	PTRACE_POKETEXT_AREA             = 0x5004
+	PTRACE_POKEUSR_AREA              = 0x5001
+	PTRACE_POKE_SYSTEM_CALL          = 0x5008
+	PTRACE_PROT                      = 0x15
+	PTRACE_SINGLEBLOCK               = 0xc
+	PTRACE_TE_ABORT_RAND             = 0x5011
+	PT_ACR0                          = 0x90
+	PT_ACR1                          = 0x94
+	PT_ACR10                         = 0xb8
+	PT_ACR11                         = 0xbc
+	PT_ACR12                         = 0xc0
+	PT_ACR13                         = 0xc4
+	PT_ACR14                         = 0xc8
+	PT_ACR15                         = 0xcc
+	PT_ACR2                          = 0x98
+	PT_ACR3                          = 0x9c
+	PT_ACR4                          = 0xa0
+	PT_ACR5                          = 0xa4
+	PT_ACR6                          = 0xa8
+	PT_ACR7                          = 0xac
+	PT_ACR8                          = 0xb0
+	PT_ACR9                          = 0xb4
+	PT_CR_10                         = 0x168
+	PT_CR_11                         = 0x170
+	PT_CR_9                          = 0x160
+	PT_ENDREGS                       = 0x1af
+	PT_FPC                           = 0xd8
+	PT_FPR0                          = 0xe0
+	PT_FPR1                          = 0xe8
+	PT_FPR10                         = 0x130
+	PT_FPR11                         = 0x138
+	PT_FPR12                         = 0x140
+	PT_FPR13                         = 0x148
+	PT_FPR14                         = 0x150
+	PT_FPR15                         = 0x158
+	PT_FPR2                          = 0xf0
+	PT_FPR3                          = 0xf8
+	PT_FPR4                          = 0x100
+	PT_FPR5                          = 0x108
+	PT_FPR6                          = 0x110
+	PT_FPR7                          = 0x118
+	PT_FPR8                          = 0x120
+	PT_FPR9                          = 0x128
+	PT_GPR0                          = 0x10
+	PT_GPR1                          = 0x18
+	PT_GPR10                         = 0x60
+	PT_GPR11                         = 0x68
+	PT_GPR12                         = 0x70
+	PT_GPR13                         = 0x78
+	PT_GPR14                         = 0x80
+	PT_GPR15                         = 0x88
+	PT_GPR2                          = 0x20
+	PT_GPR3                          = 0x28
+	PT_GPR4                          = 0x30
+	PT_GPR5                          = 0x38
+	PT_GPR6                          = 0x40
+	PT_GPR7                          = 0x48
+	PT_GPR8                          = 0x50
+	PT_GPR9                          = 0x58
+	PT_IEEE_IP                       = 0x1a8
+	PT_LASTOFF                       = 0x1a8
+	PT_ORIGGPR2                      = 0xd0
+	PT_PSWADDR                       = 0x8
+	PT_PSWMASK                       = 0x0
+	RLIMIT_AS                        = 0x9
+	RLIMIT_MEMLOCK                   = 0x8
+	RLIMIT_NOFILE                    = 0x7
+	RLIMIT_NPROC                     = 0x6
+	RLIMIT_RSS                       = 0x5
+	RNDADDENTROPY                    = 0x40085203
+	RNDADDTOENTCNT                   = 0x40045201
+	RNDCLEARPOOL                     = 0x5206
+	RNDGETENTCNT                     = 0x80045200
+	RNDGETPOOL                       = 0x80085202
+	RNDRESEEDCRNG                    = 0x5207
+	RNDZAPENTCNT                     = 0x5204
+	RTC_AIE_OFF                      = 0x7002
+	RTC_AIE_ON                       = 0x7001
+	RTC_ALM_READ                     = 0x80247008
+	RTC_ALM_SET                      = 0x40247007
+	RTC_EPOCH_READ                   = 0x8008700d
+	RTC_EPOCH_SET                    = 0x4008700e
+	RTC_IRQP_READ                    = 0x8008700b
+	RTC_IRQP_SET                     = 0x4008700c
+	RTC_PIE_OFF                      = 0x7006
+	RTC_PIE_ON                       = 0x7005
+	RTC_PLL_GET                      = 0x80207011
+	RTC_PLL_SET                      = 0x40207012
+	RTC_RD_TIME                      = 0x80247009
+	RTC_SET_TIME                     = 0x4024700a
+	RTC_UIE_OFF                      = 0x7004
+	RTC_UIE_ON                       = 0x7003
+	RTC_VL_CLR                       = 0x7014
+	RTC_VL_READ                      = 0x80047013
+	RTC_WIE_OFF                      = 0x7010
+	RTC_WIE_ON                       = 0x700f
+	RTC_WKALM_RD                     = 0x80287010
+	RTC_WKALM_SET                    = 0x4028700f
+	SCM_TIMESTAMPING                 = 0x25
+	SCM_TIMESTAMPING_OPT_STATS       = 0x36
+	SCM_TIMESTAMPING_PKTINFO         = 0x3a
+	SCM_TIMESTAMPNS                  = 0x23
+	SCM_TXTIME                       = 0x3d
+	SCM_WIFI_STATUS                  = 0x29
+	SFD_CLOEXEC                      = 0x80000
+	SFD_NONBLOCK                     = 0x800
+	SIOCATMARK                       = 0x8905
+	SIOCGPGRP                        = 0x8904
+	SIOCGSTAMPNS_NEW                 = 0x80108907
+	SIOCGSTAMP_NEW                   = 0x80108906
+	SIOCINQ                          = 0x541b
+	SIOCOUTQ                         = 0x5411
+	SIOCSPGRP                        = 0x8902
+	SOCK_CLOEXEC                     = 0x80000
+	SOCK_DGRAM                       = 0x2
+	SOCK_NONBLOCK                    = 0x800
+	SOCK_STREAM                      = 0x1
+	SOL_SOCKET                       = 0x1
+	SO_ACCEPTCONN                    = 0x1e
+	SO_ATTACH_BPF                    = 0x32
+	SO_ATTACH_REUSEPORT_CBPF         = 0x33
+	SO_ATTACH_REUSEPORT_EBPF         = 0x34
+	SO_BINDTODEVICE                  = 0x19
+	SO_BINDTOIFINDEX                 = 0x3e
+	SO_BPF_EXTENSIONS                = 0x30
+	SO_BROADCAST                     = 0x6
+	SO_BSDCOMPAT                     = 0xe
+	SO_BUSY_POLL                     = 0x2e
+	SO_CNX_ADVICE                    = 0x35
+	SO_COOKIE                        = 0x39
+	SO_DETACH_REUSEPORT_BPF          = 0x44
+	SO_DOMAIN                        = 0x27
+	SO_DONTROUTE                     = 0x5
+	SO_ERROR                         = 0x4
+	SO_INCOMING_CPU                  = 0x31
+	SO_INCOMING_NAPI_ID              = 0x38
+	SO_KEEPALIVE                     = 0x9
+	SO_LINGER                        = 0xd
+	SO_LOCK_FILTER                   = 0x2c
+	SO_MARK                          = 0x24
+	SO_MAX_PACING_RATE               = 0x2f
+	SO_MEMINFO                       = 0x37
+	SO_NOFCS                         = 0x2b
+	SO_OOBINLINE                     = 0xa
+	SO_PASSCRED                      = 0x10
+	SO_PASSSEC                       = 0x22
+	SO_PEEK_OFF                      = 0x2a
+	SO_PEERCRED                      = 0x11
+	SO_PEERGROUPS                    = 0x3b
+	SO_PEERSEC                       = 0x1f
+	SO_PROTOCOL                      = 0x26
+	SO_RCVBUF                        = 0x8
+	SO_RCVBUFFORCE                   = 0x21
+	SO_RCVLOWAT                      = 0x12
+	SO_RCVTIMEO                      = 0x14
+	SO_RCVTIMEO_NEW                  = 0x42
+	SO_RCVTIMEO_OLD                  = 0x14
+	SO_REUSEADDR                     = 0x2
+	SO_REUSEPORT                     = 0xf
+	SO_RXQ_OVFL                      = 0x28
+	SO_SECURITY_AUTHENTICATION       = 0x16
+	SO_SECURITY_ENCRYPTION_NETWORK   = 0x18
+	SO_SECURITY_ENCRYPTION_TRANSPORT = 0x17
+	SO_SELECT_ERR_QUEUE              = 0x2d
+	SO_SNDBUF                        = 0x7
+	SO_SNDBUFFORCE                   = 0x20
+	SO_SNDLOWAT                      = 0x13
+	SO_SNDTIMEO                      = 0x15
+	SO_SNDTIMEO_NEW                  = 0x43
+	SO_SNDTIMEO_OLD                  = 0x15
+	SO_TIMESTAMPING                  = 0x25
+	SO_TIMESTAMPING_NEW              = 0x41
+	SO_TIMESTAMPING_OLD              = 0x25
+	SO_TIMESTAMPNS                   = 0x23
+	SO_TIMESTAMPNS_NEW               = 0x40
+	SO_TIMESTAMPNS_OLD               = 0x23
+	SO_TIMESTAMP_NEW                 = 0x3f
+	SO_TXTIME                        = 0x3d
+	SO_TYPE                          = 0x3
+	SO_WIFI_STATUS                   = 0x29
+	SO_ZEROCOPY                      = 0x3c
+	TAB1                             = 0x800
+	TAB2                             = 0x1000
+	TAB3                             = 0x1800
+	TABDLY                           = 0x1800
+	TCFLSH                           = 0x540b
+	TCGETA                           = 0x5405
+	TCGETS                           = 0x5401
+	TCGETS2                          = 0x802c542a
+	TCGETX                           = 0x5432
+	TCSAFLUSH                        = 0x2
+	TCSBRK                           = 0x5409
+	TCSBRKP                          = 0x5425
+	TCSETA                           = 0x5406
+	TCSETAF                          = 0x5408
+	TCSETAW                          = 0x5407
+	TCSETS                           = 0x5402
+	TCSETS2                          = 0x402c542b
+	TCSETSF                          = 0x5404
+	TCSETSF2                         = 0x402c542d
+	TCSETSW                          = 0x5403
+	TCSETSW2                         = 0x402c542c
+	TCSETX                           = 0x5433
+	TCSETXF                          = 0x5434
+	TCSETXW                          = 0x5435
+	TCXONC                           = 0x540a
+	TFD_CLOEXEC                      = 0x80000
+	TFD_NONBLOCK                     = 0x800
+	TIOCCBRK                         = 0x5428
+	TIOCCONS                         = 0x541d
+	TIOCEXCL                         = 0x540c
+	TIOCGDEV                         = 0x80045432
+	TIOCGETD                         = 0x5424
+	TIOCGEXCL                        = 0x80045440
+	TIOCGICOUNT                      = 0x545d
+	TIOCGISO7816                     = 0x80285442
+	TIOCGLCKTRMIOS                   = 0x5456
+	TIOCGPGRP                        = 0x540f
+	TIOCGPKT                         = 0x80045438
+	TIOCGPTLCK                       = 0x80045439
+	TIOCGPTN                         = 0x80045430
+	TIOCGPTPEER                      = 0x5441
+	TIOCGRS485                       = 0x542e
+	TIOCGSERIAL                      = 0x541e
+	TIOCGSID                         = 0x5429
+	TIOCGSOFTCAR                     = 0x5419
+	TIOCGWINSZ                       = 0x5413
+	TIOCINQ                          = 0x541b
+	TIOCLINUX                        = 0x541c
+	TIOCMBIC                         = 0x5417
+	TIOCMBIS                         = 0x5416
+	TIOCMGET                         = 0x5415
+	TIOCMIWAIT                       = 0x545c
+	TIOCMSET                         = 0x5418
+	TIOCM_CAR                        = 0x40
+	TIOCM_CD                         = 0x40
+	TIOCM_CTS                        = 0x20
+	TIOCM_DSR                        = 0x100
+	TIOCM_RI                         = 0x80
+	TIOCM_RNG                        = 0x80
+	TIOCM_SR                         = 0x10
+	TIOCM_ST                         = 0x8
+	TIOCNOTTY                        = 0x5422
+	TIOCNXCL                         = 0x540d
+	TIOCOUTQ                         = 0x5411
+	TIOCPKT                          = 0x5420
+	TIOCSBRK                         = 0x5427
+	TIOCSCTTY                        = 0x540e
+	TIOCSERCONFIG                    = 0x5453
+	TIOCSERGETLSR                    = 0x5459
+	TIOCSERGETMULTI                  = 0x545a
+	TIOCSERGSTRUCT                   = 0x5458
+	TIOCSERGWILD                     = 0x5454
+	TIOCSERSETMULTI                  = 0x545b
+	TIOCSERSWILD                     = 0x5455
+	TIOCSER_TEMT                     = 0x1
+	TIOCSETD                         = 0x5423
+	TIOCSIG                          = 0x40045436
+	TIOCSISO7816                     = 0xc0285443
+	TIOCSLCKTRMIOS                   = 0x5457
+	TIOCSPGRP                        = 0x5410
+	TIOCSPTLCK                       = 0x40045431
+	TIOCSRS485                       = 0x542f
+	TIOCSSERIAL                      = 0x541f
+	TIOCSSOFTCAR                     = 0x541a
+	TIOCSTI                          = 0x5412
+	TIOCSWINSZ                       = 0x5414
+	TIOCVHANGUP                      = 0x5437
+	TOSTOP                           = 0x100
+	TUNATTACHFILTER                  = 0x401054d5
+	TUNDETACHFILTER                  = 0x401054d6
+	TUNGETDEVNETNS                   = 0x54e3
+	TUNGETFEATURES                   = 0x800454cf
+	TUNGETFILTER                     = 0x801054db
+	TUNGETIFF                        = 0x800454d2
+	TUNGETSNDBUF                     = 0x800454d3
+	TUNGETVNETBE                     = 0x800454df
+	TUNGETVNETHDRSZ                  = 0x800454d7
+	TUNGETVNETLE                     = 0x800454dd
+	TUNSETCARRIER                    = 0x400454e2
+	TUNSETDEBUG                      = 0x400454c9
+	TUNSETFILTEREBPF                 = 0x800454e1
+	TUNSETGROUP                      = 0x400454ce
+	TUNSETIFF                        = 0x400454ca
+	TUNSETIFINDEX                    = 0x400454da
+	TUNSETLINK                       = 0x400454cd
+	TUNSETNOCSUM                     = 0x400454c8
+	TUNSETOFFLOAD                    = 0x400454d0
+	TUNSETOWNER                      = 0x400454cc
+	TUNSETPERSIST                    = 0x400454cb
+	TUNSETQUEUE                      = 0x400454d9
+	TUNSETSNDBUF                     = 0x400454d4
+	TUNSETSTEERINGEBPF               = 0x800454e0
+	TUNSETTXFILTER                   = 0x400454d1
+	TUNSETVNETBE                     = 0x400454de
+	TUNSETVNETHDRSZ                  = 0x400454d8
+	TUNSETVNETLE                     = 0x400454dc
+	UBI_IOCATT                       = 0x40186f40
+	UBI_IOCDET                       = 0x40046f41
+	UBI_IOCEBCH                      = 0x40044f02
+	UBI_IOCEBER                      = 0x40044f01
+	UBI_IOCEBISMAP                   = 0x80044f05
+	UBI_IOCEBMAP                     = 0x40084f03
+	UBI_IOCEBUNMAP                   = 0x40044f04
+	UBI_IOCMKVOL                     = 0x40986f00
+	UBI_IOCRMVOL                     = 0x40046f01
+	UBI_IOCRNVOL                     = 0x51106f03
+	UBI_IOCRPEB                      = 0x40046f04
+	UBI_IOCRSVOL                     = 0x400c6f02
+	UBI_IOCSETVOLPROP                = 0x40104f06
+	UBI_IOCSPEB                      = 0x40046f05
+	UBI_IOCVOLCRBLK                  = 0x40804f07
+	UBI_IOCVOLRMBLK                  = 0x4f08
+	UBI_IOCVOLUP                     = 0x40084f00
+	VDISCARD                         = 0xd
+	VEOF                             = 0x4
+	VEOL                             = 0xb
+	VEOL2                            = 0x10
+	VMIN                             = 0x6
+	VREPRINT                         = 0xc
+	VSTART                           = 0x8
+	VSTOP                            = 0x9
+	VSUSP                            = 0xa
+	VSWTC                            = 0x7
+	VT1                              = 0x4000
+	VTDLY                            = 0x4000
+	VTIME                            = 0x5
+	VWERASE                          = 0xe
+	WDIOC_GETBOOTSTATUS              = 0x80045702
+	WDIOC_GETPRETIMEOUT              = 0x80045709
+	WDIOC_GETSTATUS                  = 0x80045701
+	WDIOC_GETSUPPORT                 = 0x80285700
+	WDIOC_GETTEMP                    = 0x80045703
+	WDIOC_GETTIMELEFT                = 0x8004570a
+	WDIOC_GETTIMEOUT                 = 0x80045707
+	WDIOC_KEEPALIVE                  = 0x80045705
+	WDIOC_SETOPTIONS                 = 0x80045704
+	WORDSIZE                         = 0x40
+	XCASE                            = 0x4
+	XTABS                            = 0x1800
+)
+
+// Errors
+const (
+	EADDRINUSE      = syscall.Errno(0x62)
+	EADDRNOTAVAIL   = syscall.Errno(0x63)
+	EADV            = syscall.Errno(0x44)
+	EAFNOSUPPORT    = syscall.Errno(0x61)
+	EALREADY        = syscall.Errno(0x72)
+	EBADE           = syscall.Errno(0x34)
+	EBADFD          = syscall.Errno(0x4d)
+	EBADMSG         = syscall.Errno(0x4a)
+	EBADR           = syscall.Errno(0x35)
+	EBADRQC         = syscall.Errno(0x38)
+	EBADSLT         = syscall.Errno(0x39)
+	EBFONT          = syscall.Errno(0x3b)
+	ECANCELED       = syscall.Errno(0x7d)
+	ECHRNG          = syscall.Errno(0x2c)
+	ECOMM           = syscall.Errno(0x46)
+	ECONNABORTED    = syscall.Errno(0x67)
+	ECONNREFUSED    = syscall.Errno(0x6f)
+	ECONNRESET      = syscall.Errno(0x68)
+	EDEADLK         = syscall.Errno(0x23)
+	EDEADLOCK       = syscall.Errno(0x23)
+	EDESTADDRREQ    = syscall.Errno(0x59)
+	EDOTDOT         = syscall.Errno(0x49)
+	EDQUOT          = syscall.Errno(0x7a)
+	EHOSTDOWN       = syscall.Errno(0x70)
+	EHOSTUNREACH    = syscall.Errno(0x71)
+	EHWPOISON       = syscall.Errno(0x85)
+	EIDRM           = syscall.Errno(0x2b)
+	EILSEQ          = syscall.Errno(0x54)
+	EINPROGRESS     = syscall.Errno(0x73)
+	EISCONN         = syscall.Errno(0x6a)
+	EISNAM          = syscall.Errno(0x78)
+	EKEYEXPIRED     = syscall.Errno(0x7f)
+	EKEYREJECTED    = syscall.Errno(0x81)
+	EKEYREVOKED     = syscall.Errno(0x80)
+	EL2HLT          = syscall.Errno(0x33)
+	EL2NSYNC        = syscall.Errno(0x2d)
+	EL3HLT          = syscall.Errno(0x2e)
+	EL3RST          = syscall.Errno(0x2f)
+	ELIBACC         = syscall.Errno(0x4f)
+	ELIBBAD         = syscall.Errno(0x50)
+	ELIBEXEC        = syscall.Errno(0x53)
+	ELIBMAX         = syscall.Errno(0x52)
+	ELIBSCN         = syscall.Errno(0x51)
+	ELNRNG          = syscall.Errno(0x30)
+	ELOOP           = syscall.Errno(0x28)
+	EMEDIUMTYPE     = syscall.Errno(0x7c)
+	EMSGSIZE        = syscall.Errno(0x5a)
+	EMULTIHOP       = syscall.Errno(0x48)
+	ENAMETOOLONG    = syscall.Errno(0x24)
+	ENAVAIL         = syscall.Errno(0x77)
+	ENETDOWN        = syscall.Errno(0x64)
+	ENETRESET       = syscall.Errno(0x66)
+	ENETUNREACH     = syscall.Errno(0x65)
+	ENOANO          = syscall.Errno(0x37)
+	ENOBUFS         = syscall.Errno(0x69)
+	ENOCSI          = syscall.Errno(0x32)
+	ENODATA         = syscall.Errno(0x3d)
+	ENOKEY          = syscall.Errno(0x7e)
+	ENOLCK          = syscall.Errno(0x25)
+	ENOLINK         = syscall.Errno(0x43)
+	ENOMEDIUM       = syscall.Errno(0x7b)
+	ENOMSG          = syscall.Errno(0x2a)
+	ENONET          = syscall.Errno(0x40)
+	ENOPKG          = syscall.Errno(0x41)
+	ENOPROTOOPT     = syscall.Errno(0x5c)
+	ENOSR           = syscall.Errno(0x3f)
+	ENOSTR          = syscall.Errno(0x3c)
+	ENOSYS          = syscall.Errno(0x26)
+	ENOTCONN        = syscall.Errno(0x6b)
+	ENOTEMPTY       = syscall.Errno(0x27)
+	ENOTNAM         = syscall.Errno(0x76)
+	ENOTRECOVERABLE = syscall.Errno(0x83)
+	ENOTSOCK        = syscall.Errno(0x58)
+	ENOTSUP         = syscall.Errno(0x5f)
+	ENOTUNIQ        = syscall.Errno(0x4c)
+	EOPNOTSUPP      = syscall.Errno(0x5f)
+	EOVERFLOW       = syscall.Errno(0x4b)
+	EOWNERDEAD      = syscall.Errno(0x82)
+	EPFNOSUPPORT    = syscall.Errno(0x60)
+	EPROTO          = syscall.Errno(0x47)
+	EPROTONOSUPPORT = syscall.Errno(0x5d)
+	EPROTOTYPE      = syscall.Errno(0x5b)
+	EREMCHG         = syscall.Errno(0x4e)
+	EREMOTE         = syscall.Errno(0x42)
+	EREMOTEIO       = syscall.Errno(0x79)
+	ERESTART        = syscall.Errno(0x55)
+	ERFKILL         = syscall.Errno(0x84)
+	ESHUTDOWN       = syscall.Errno(0x6c)
+	ESOCKTNOSUPPORT = syscall.Errno(0x5e)
+	ESRMNT          = syscall.Errno(0x45)
+	ESTALE          = syscall.Errno(0x74)
+	ESTRPIPE        = syscall.Errno(0x56)
+	ETIME           = syscall.Errno(0x3e)
+	ETIMEDOUT       = syscall.Errno(0x6e)
+	ETOOMANYREFS    = syscall.Errno(0x6d)
+	EUCLEAN         = syscall.Errno(0x75)
+	EUNATCH         = syscall.Errno(0x31)
+	EUSERS          = syscall.Errno(0x57)
+	EXFULL          = syscall.Errno(0x36)
+)
+
+// Signals
+const (
+	SIGBUS    = syscall.Signal(0x7)
+	SIGCHLD   = syscall.Signal(0x11)
+	SIGCLD    = syscall.Signal(0x11)
+	SIGCONT   = syscall.Signal(0x12)
+	SIGIO     = syscall.Signal(0x1d)
+	SIGPOLL   = syscall.Signal(0x1d)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGPWR    = syscall.Signal(0x1e)
+	SIGSTKFLT = syscall.Signal(0x10)
+	SIGSTOP   = syscall.Signal(0x13)
+	SIGSYS    = syscall.Signal(0x1f)
+	SIGTSTP   = syscall.Signal(0x14)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x17)
+	SIGUSR1   = syscall.Signal(0xa)
+	SIGUSR2   = syscall.Signal(0xc)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "no such device or address"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EAGAIN", "resource temporarily unavailable"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device or resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "invalid cross-device link"},
+	{19, "ENODEV", "no such device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "numerical result out of range"},
+	{35, "EDEADLK", "resource deadlock avoided"},
+	{36, "ENAMETOOLONG", "file name too long"},
+	{37, "ENOLCK", "no locks available"},
+	{38, "ENOSYS", "function not implemented"},
+	{39, "ENOTEMPTY", "directory not empty"},
+	{40, "ELOOP", "too many levels of symbolic links"},
+	{42, "ENOMSG", "no message of desired type"},
+	{43, "EIDRM", "identifier removed"},
+	{44, "ECHRNG", "channel number out of range"},
+	{45, "EL2NSYNC", "level 2 not synchronized"},
+	{46, "EL3HLT", "level 3 halted"},
+	{47, "EL3RST", "level 3 reset"},
+	{48, "ELNRNG", "link number out of range"},
+	{49, "EUNATCH", "protocol driver not attached"},
+	{50, "ENOCSI", "no CSI structure available"},
+	{51, "EL2HLT", "level 2 halted"},
+	{52, "EBADE", "invalid exchange"},
+	{53, "EBADR", "invalid request descriptor"},
+	{54, "EXFULL", "exchange full"},
+	{55, "ENOANO", "no anode"},
+	{56, "EBADRQC", "invalid request code"},
+	{57, "EBADSLT", "invalid slot"},
+	{59, "EBFONT", "bad font file format"},
+	{60, "ENOSTR", "device not a stream"},
+	{61, "ENODATA", "no data available"},
+	{62, "ETIME", "timer expired"},
+	{63, "ENOSR", "out of streams resources"},
+	{64, "ENONET", "machine is not on the network"},
+	{65, "ENOPKG", "package not installed"},
+	{66, "EREMOTE", "object is remote"},
+	{67, "ENOLINK", "link has been severed"},
+	{68, "EADV", "advertise error"},
+	{69, "ESRMNT", "srmount error"},
+	{70, "ECOMM", "communication error on send"},
+	{71, "EPROTO", "protocol error"},
+	{72, "EMULTIHOP", "multihop attempted"},
+	{73, "EDOTDOT", "RFS specific error"},
+	{74, "EBADMSG", "bad message"},
+	{75, "EOVERFLOW", "value too large for defined data type"},
+	{76, "ENOTUNIQ", "name not unique on network"},
+	{77, "EBADFD", "file descriptor in bad state"},
+	{78, "EREMCHG", "remote address changed"},
+	{79, "ELIBACC", "can not access a needed shared library"},
+	{80, "ELIBBAD", "accessing a corrupted shared library"},
+	{81, "ELIBSCN", ".lib section in a.out corrupted"},
+	{82, "ELIBMAX", "attempting to link in too many shared libraries"},
+	{83, "ELIBEXEC", "cannot exec a shared library directly"},
+	{84, "EILSEQ", "invalid or incomplete multibyte or wide character"},
+	{85, "ERESTART", "interrupted system call should be restarted"},
+	{86, "ESTRPIPE", "streams pipe error"},
+	{87, "EUSERS", "too many users"},
+	{88, "ENOTSOCK", "socket operation on non-socket"},
+	{89, "EDESTADDRREQ", "destination address required"},
+	{90, "EMSGSIZE", "message too long"},
+	{91, "EPROTOTYPE", "protocol wrong type for socket"},
+	{92, "ENOPROTOOPT", "protocol not available"},
+	{93, "EPROTONOSUPPORT", "protocol not supported"},
+	{94, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{95, "ENOTSUP", "operation not supported"},
+	{96, "EPFNOSUPPORT", "protocol family not supported"},
+	{97, "EAFNOSUPPORT", "address family not supported by protocol"},
+	{98, "EADDRINUSE", "address already in use"},
+	{99, "EADDRNOTAVAIL", "cannot assign requested address"},
+	{100, "ENETDOWN", "network is down"},
+	{101, "ENETUNREACH", "network is unreachable"},
+	{102, "ENETRESET", "network dropped connection on reset"},
+	{103, "ECONNABORTED", "software caused connection abort"},
+	{104, "ECONNRESET", "connection reset by peer"},
+	{105, "ENOBUFS", "no buffer space available"},
+	{106, "EISCONN", "transport endpoint is already connected"},
+	{107, "ENOTCONN", "transport endpoint is not connected"},
+	{108, "ESHUTDOWN", "cannot send after transport endpoint shutdown"},
+	{109, "ETOOMANYREFS", "too many references: cannot splice"},
+	{110, "ETIMEDOUT", "connection timed out"},
+	{111, "ECONNREFUSED", "connection refused"},
+	{112, "EHOSTDOWN", "host is down"},
+	{113, "EHOSTUNREACH", "no route to host"},
+	{114, "EALREADY", "operation already in progress"},
+	{115, "EINPROGRESS", "operation now in progress"},
+	{116, "ESTALE", "stale file handle"},
+	{117, "EUCLEAN", "structure needs cleaning"},
+	{118, "ENOTNAM", "not a XENIX named type file"},
+	{119, "ENAVAIL", "no XENIX semaphores available"},
+	{120, "EISNAM", "is a named type file"},
+	{121, "EREMOTEIO", "remote I/O error"},
+	{122, "EDQUOT", "disk quota exceeded"},
+	{123, "ENOMEDIUM", "no medium found"},
+	{124, "EMEDIUMTYPE", "wrong medium type"},
+	{125, "ECANCELED", "operation canceled"},
+	{126, "ENOKEY", "required key not available"},
+	{127, "EKEYEXPIRED", "key has expired"},
+	{128, "EKEYREVOKED", "key has been revoked"},
+	{129, "EKEYREJECTED", "key was rejected by service"},
+	{130, "EOWNERDEAD", "owner died"},
+	{131, "ENOTRECOVERABLE", "state not recoverable"},
+	{132, "ERFKILL", "operation not possible due to RF-kill"},
+	{133, "EHWPOISON", "memory page has hardware error"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/breakpoint trap"},
+	{6, "SIGABRT", "aborted"},
+	{7, "SIGBUS", "bus error"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGUSR1", "user defined signal 1"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGUSR2", "user defined signal 2"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGSTKFLT", "stack fault"},
+	{17, "SIGCHLD", "child exited"},
+	{18, "SIGCONT", "continued"},
+	{19, "SIGSTOP", "stopped (signal)"},
+	{20, "SIGTSTP", "stopped"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGURG", "urgent I/O condition"},
+	{24, "SIGXCPU", "CPU time limit exceeded"},
+	{25, "SIGXFSZ", "file size limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window changed"},
+	{29, "SIGIO", "I/O possible"},
+	{30, "SIGPWR", "power failure"},
+	{31, "SIGSYS", "bad system call"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_sparc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_sparc64.go
new file mode 100644
index 000000000..79fbafbcf
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_linux_sparc64.go
@@ -0,0 +1,847 @@
+// mkerrors.sh -Wall -Werror -static -I/tmp/include
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build sparc64,linux
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	ASI_LEON_DFLUSH                  = 0x11
+	ASI_LEON_IFLUSH                  = 0x10
+	ASI_LEON_MMUFLUSH                = 0x18
+	B1000000                         = 0x1008
+	B115200                          = 0x1002
+	B1152000                         = 0x1009
+	B1500000                         = 0x100a
+	B2000000                         = 0x100b
+	B230400                          = 0x1003
+	B2500000                         = 0x100c
+	B3000000                         = 0x100d
+	B3500000                         = 0x100e
+	B4000000                         = 0x100f
+	B460800                          = 0x1004
+	B500000                          = 0x1005
+	B57600                           = 0x1001
+	B576000                          = 0x1006
+	B921600                          = 0x1007
+	BLKBSZGET                        = 0x40081270
+	BLKBSZSET                        = 0x80081271
+	BLKFLSBUF                        = 0x20001261
+	BLKFRAGET                        = 0x20001265
+	BLKFRASET                        = 0x20001264
+	BLKGETSIZE                       = 0x20001260
+	BLKGETSIZE64                     = 0x40081272
+	BLKPBSZGET                       = 0x2000127b
+	BLKRAGET                         = 0x20001263
+	BLKRASET                         = 0x20001262
+	BLKROGET                         = 0x2000125e
+	BLKROSET                         = 0x2000125d
+	BLKRRPART                        = 0x2000125f
+	BLKSECTGET                       = 0x20001267
+	BLKSECTSET                       = 0x20001266
+	BLKSSZGET                        = 0x20001268
+	BOTHER                           = 0x1000
+	BS1                              = 0x2000
+	BSDLY                            = 0x2000
+	CBAUD                            = 0x100f
+	CBAUDEX                          = 0x1000
+	CIBAUD                           = 0x100f0000
+	CLOCAL                           = 0x800
+	CR1                              = 0x200
+	CR2                              = 0x400
+	CR3                              = 0x600
+	CRDLY                            = 0x600
+	CREAD                            = 0x80
+	CS6                              = 0x10
+	CS7                              = 0x20
+	CS8                              = 0x30
+	CSIZE                            = 0x30
+	CSTOPB                           = 0x40
+	ECHOCTL                          = 0x200
+	ECHOE                            = 0x10
+	ECHOK                            = 0x20
+	ECHOKE                           = 0x800
+	ECHONL                           = 0x40
+	ECHOPRT                          = 0x400
+	EFD_CLOEXEC                      = 0x400000
+	EFD_NONBLOCK                     = 0x4000
+	EMT_TAGOVF                       = 0x1
+	EPOLL_CLOEXEC                    = 0x400000
+	EXTPROC                          = 0x10000
+	FF1                              = 0x8000
+	FFDLY                            = 0x8000
+	FICLONE                          = 0x80049409
+	FICLONERANGE                     = 0x8020940d
+	FLUSHO                           = 0x1000
+	FS_IOC_ENABLE_VERITY             = 0x80806685
+	FS_IOC_GETFLAGS                  = 0x40086601
+	FS_IOC_GET_ENCRYPTION_NONCE      = 0x4010661b
+	FS_IOC_GET_ENCRYPTION_POLICY     = 0x800c6615
+	FS_IOC_GET_ENCRYPTION_PWSALT     = 0x80106614
+	FS_IOC_SETFLAGS                  = 0x80086602
+	FS_IOC_SET_ENCRYPTION_POLICY     = 0x400c6613
+	F_GETLK                          = 0x7
+	F_GETLK64                        = 0x7
+	F_GETOWN                         = 0x5
+	F_RDLCK                          = 0x1
+	F_SETLK                          = 0x8
+	F_SETLK64                        = 0x8
+	F_SETLKW                         = 0x9
+	F_SETLKW64                       = 0x9
+	F_SETOWN                         = 0x6
+	F_UNLCK                          = 0x3
+	F_WRLCK                          = 0x2
+	HUPCL                            = 0x400
+	ICANON                           = 0x2
+	IEXTEN                           = 0x8000
+	IN_CLOEXEC                       = 0x400000
+	IN_NONBLOCK                      = 0x4000
+	IOCTL_VM_SOCKETS_GET_LOCAL_CID   = 0x200007b9
+	ISIG                             = 0x1
+	IUCLC                            = 0x200
+	IXOFF                            = 0x1000
+	IXON                             = 0x400
+	MAP_ANON                         = 0x20
+	MAP_ANONYMOUS                    = 0x20
+	MAP_DENYWRITE                    = 0x800
+	MAP_EXECUTABLE                   = 0x1000
+	MAP_GROWSDOWN                    = 0x200
+	MAP_HUGETLB                      = 0x40000
+	MAP_LOCKED                       = 0x100
+	MAP_NONBLOCK                     = 0x10000
+	MAP_NORESERVE                    = 0x40
+	MAP_POPULATE                     = 0x8000
+	MAP_RENAME                       = 0x20
+	MAP_STACK                        = 0x20000
+	MAP_SYNC                         = 0x80000
+	MCL_CURRENT                      = 0x2000
+	MCL_FUTURE                       = 0x4000
+	MCL_ONFAULT                      = 0x8000
+	NFDBITS                          = 0x40
+	NLDLY                            = 0x100
+	NOFLSH                           = 0x80
+	NS_GET_NSTYPE                    = 0x2000b703
+	NS_GET_OWNER_UID                 = 0x2000b704
+	NS_GET_PARENT                    = 0x2000b702
+	NS_GET_USERNS                    = 0x2000b701
+	OLCUC                            = 0x2
+	ONLCR                            = 0x4
+	O_APPEND                         = 0x8
+	O_ASYNC                          = 0x40
+	O_CLOEXEC                        = 0x400000
+	O_CREAT                          = 0x200
+	O_DIRECT                         = 0x100000
+	O_DIRECTORY                      = 0x10000
+	O_DSYNC                          = 0x2000
+	O_EXCL                           = 0x800
+	O_FSYNC                          = 0x802000
+	O_LARGEFILE                      = 0x0
+	O_NDELAY                         = 0x4004
+	O_NOATIME                        = 0x200000
+	O_NOCTTY                         = 0x8000
+	O_NOFOLLOW                       = 0x20000
+	O_NONBLOCK                       = 0x4000
+	O_PATH                           = 0x1000000
+	O_RSYNC                          = 0x802000
+	O_SYNC                           = 0x802000
+	O_TMPFILE                        = 0x2010000
+	O_TRUNC                          = 0x400
+	PARENB                           = 0x100
+	PARODD                           = 0x200
+	PENDIN                           = 0x4000
+	PERF_EVENT_IOC_DISABLE           = 0x20002401
+	PERF_EVENT_IOC_ENABLE            = 0x20002400
+	PERF_EVENT_IOC_ID                = 0x40082407
+	PERF_EVENT_IOC_MODIFY_ATTRIBUTES = 0x8008240b
+	PERF_EVENT_IOC_PAUSE_OUTPUT      = 0x80042409
+	PERF_EVENT_IOC_PERIOD            = 0x80082404
+	PERF_EVENT_IOC_QUERY_BPF         = 0xc008240a
+	PERF_EVENT_IOC_REFRESH           = 0x20002402
+	PERF_EVENT_IOC_RESET             = 0x20002403
+	PERF_EVENT_IOC_SET_BPF           = 0x80042408
+	PERF_EVENT_IOC_SET_FILTER        = 0x80082406
+	PERF_EVENT_IOC_SET_OUTPUT        = 0x20002405
+	PPPIOCATTACH                     = 0x8004743d
+	PPPIOCATTCHAN                    = 0x80047438
+	PPPIOCCONNECT                    = 0x8004743a
+	PPPIOCDETACH                     = 0x8004743c
+	PPPIOCDISCONN                    = 0x20007439
+	PPPIOCGASYNCMAP                  = 0x40047458
+	PPPIOCGCHAN                      = 0x40047437
+	PPPIOCGDEBUG                     = 0x40047441
+	PPPIOCGFLAGS                     = 0x4004745a
+	PPPIOCGIDLE                      = 0x4010743f
+	PPPIOCGIDLE32                    = 0x4008743f
+	PPPIOCGIDLE64                    = 0x4010743f
+	PPPIOCGL2TPSTATS                 = 0x40487436
+	PPPIOCGMRU                       = 0x40047453
+	PPPIOCGRASYNCMAP                 = 0x40047455
+	PPPIOCGUNIT                      = 0x40047456
+	PPPIOCGXASYNCMAP                 = 0x40207450
+	PPPIOCSACTIVE                    = 0x80107446
+	PPPIOCSASYNCMAP                  = 0x80047457
+	PPPIOCSCOMPRESS                  = 0x8010744d
+	PPPIOCSDEBUG                     = 0x80047440
+	PPPIOCSFLAGS                     = 0x80047459
+	PPPIOCSMAXCID                    = 0x80047451
+	PPPIOCSMRRU                      = 0x8004743b
+	PPPIOCSMRU                       = 0x80047452
+	PPPIOCSNPMODE                    = 0x8008744b
+	PPPIOCSPASS                      = 0x80107447
+	PPPIOCSRASYNCMAP                 = 0x80047454
+	PPPIOCSXASYNCMAP                 = 0x8020744f
+	PPPIOCXFERUNIT                   = 0x2000744e
+	PR_SET_PTRACER_ANY               = 0xffffffffffffffff
+	PTRACE_GETFPAREGS                = 0x14
+	PTRACE_GETFPREGS                 = 0xe
+	PTRACE_GETFPREGS64               = 0x19
+	PTRACE_GETREGS64                 = 0x16
+	PTRACE_READDATA                  = 0x10
+	PTRACE_READTEXT                  = 0x12
+	PTRACE_SETFPAREGS                = 0x15
+	PTRACE_SETFPREGS                 = 0xf
+	PTRACE_SETFPREGS64               = 0x1a
+	PTRACE_SETREGS64                 = 0x17
+	PTRACE_SPARC_DETACH              = 0xb
+	PTRACE_WRITEDATA                 = 0x11
+	PTRACE_WRITETEXT                 = 0x13
+	PT_FP                            = 0x48
+	PT_G0                            = 0x10
+	PT_G1                            = 0x14
+	PT_G2                            = 0x18
+	PT_G3                            = 0x1c
+	PT_G4                            = 0x20
+	PT_G5                            = 0x24
+	PT_G6                            = 0x28
+	PT_G7                            = 0x2c
+	PT_I0                            = 0x30
+	PT_I1                            = 0x34
+	PT_I2                            = 0x38
+	PT_I3                            = 0x3c
+	PT_I4                            = 0x40
+	PT_I5                            = 0x44
+	PT_I6                            = 0x48
+	PT_I7                            = 0x4c
+	PT_NPC                           = 0x8
+	PT_PC                            = 0x4
+	PT_PSR                           = 0x0
+	PT_REGS_MAGIC                    = 0x57ac6c00
+	PT_TNPC                          = 0x90
+	PT_TPC                           = 0x88
+	PT_TSTATE                        = 0x80
+	PT_V9_FP                         = 0x70
+	PT_V9_G0                         = 0x0
+	PT_V9_G1                         = 0x8
+	PT_V9_G2                         = 0x10
+	PT_V9_G3                         = 0x18
+	PT_V9_G4                         = 0x20
+	PT_V9_G5                         = 0x28
+	PT_V9_G6                         = 0x30
+	PT_V9_G7                         = 0x38
+	PT_V9_I0                         = 0x40
+	PT_V9_I1                         = 0x48
+	PT_V9_I2                         = 0x50
+	PT_V9_I3                         = 0x58
+	PT_V9_I4                         = 0x60
+	PT_V9_I5                         = 0x68
+	PT_V9_I6                         = 0x70
+	PT_V9_I7                         = 0x78
+	PT_V9_MAGIC                      = 0x9c
+	PT_V9_TNPC                       = 0x90
+	PT_V9_TPC                        = 0x88
+	PT_V9_TSTATE                     = 0x80
+	PT_V9_Y                          = 0x98
+	PT_WIM                           = 0x10
+	PT_Y                             = 0xc
+	RLIMIT_AS                        = 0x9
+	RLIMIT_MEMLOCK                   = 0x8
+	RLIMIT_NOFILE                    = 0x6
+	RLIMIT_NPROC                     = 0x7
+	RLIMIT_RSS                       = 0x5
+	RNDADDENTROPY                    = 0x80085203
+	RNDADDTOENTCNT                   = 0x80045201
+	RNDCLEARPOOL                     = 0x20005206
+	RNDGETENTCNT                     = 0x40045200
+	RNDGETPOOL                       = 0x40085202
+	RNDRESEEDCRNG                    = 0x20005207
+	RNDZAPENTCNT                     = 0x20005204
+	RTC_AIE_OFF                      = 0x20007002
+	RTC_AIE_ON                       = 0x20007001
+	RTC_ALM_READ                     = 0x40247008
+	RTC_ALM_SET                      = 0x80247007
+	RTC_EPOCH_READ                   = 0x4008700d
+	RTC_EPOCH_SET                    = 0x8008700e
+	RTC_IRQP_READ                    = 0x4008700b
+	RTC_IRQP_SET                     = 0x8008700c
+	RTC_PIE_OFF                      = 0x20007006
+	RTC_PIE_ON                       = 0x20007005
+	RTC_PLL_GET                      = 0x40207011
+	RTC_PLL_SET                      = 0x80207012
+	RTC_RD_TIME                      = 0x40247009
+	RTC_SET_TIME                     = 0x8024700a
+	RTC_UIE_OFF                      = 0x20007004
+	RTC_UIE_ON                       = 0x20007003
+	RTC_VL_CLR                       = 0x20007014
+	RTC_VL_READ                      = 0x40047013
+	RTC_WIE_OFF                      = 0x20007010
+	RTC_WIE_ON                       = 0x2000700f
+	RTC_WKALM_RD                     = 0x40287010
+	RTC_WKALM_SET                    = 0x8028700f
+	SCM_TIMESTAMPING                 = 0x23
+	SCM_TIMESTAMPING_OPT_STATS       = 0x38
+	SCM_TIMESTAMPING_PKTINFO         = 0x3c
+	SCM_TIMESTAMPNS                  = 0x21
+	SCM_TXTIME                       = 0x3f
+	SCM_WIFI_STATUS                  = 0x25
+	SFD_CLOEXEC                      = 0x400000
+	SFD_NONBLOCK                     = 0x4000
+	SIOCATMARK                       = 0x8905
+	SIOCGPGRP                        = 0x8904
+	SIOCGSTAMPNS_NEW                 = 0x40108907
+	SIOCGSTAMP_NEW                   = 0x40108906
+	SIOCINQ                          = 0x4004667f
+	SIOCOUTQ                         = 0x40047473
+	SIOCSPGRP                        = 0x8902
+	SOCK_CLOEXEC                     = 0x400000
+	SOCK_DGRAM                       = 0x2
+	SOCK_NONBLOCK                    = 0x4000
+	SOCK_STREAM                      = 0x1
+	SOL_SOCKET                       = 0xffff
+	SO_ACCEPTCONN                    = 0x8000
+	SO_ATTACH_BPF                    = 0x34
+	SO_ATTACH_REUSEPORT_CBPF         = 0x35
+	SO_ATTACH_REUSEPORT_EBPF         = 0x36
+	SO_BINDTODEVICE                  = 0xd
+	SO_BINDTOIFINDEX                 = 0x41
+	SO_BPF_EXTENSIONS                = 0x32
+	SO_BROADCAST                     = 0x20
+	SO_BSDCOMPAT                     = 0x400
+	SO_BUSY_POLL                     = 0x30
+	SO_CNX_ADVICE                    = 0x37
+	SO_COOKIE                        = 0x3b
+	SO_DETACH_REUSEPORT_BPF          = 0x47
+	SO_DOMAIN                        = 0x1029
+	SO_DONTROUTE                     = 0x10
+	SO_ERROR                         = 0x1007
+	SO_INCOMING_CPU                  = 0x33
+	SO_INCOMING_NAPI_ID              = 0x3a
+	SO_KEEPALIVE                     = 0x8
+	SO_LINGER                        = 0x80
+	SO_LOCK_FILTER                   = 0x28
+	SO_MARK                          = 0x22
+	SO_MAX_PACING_RATE               = 0x31
+	SO_MEMINFO                       = 0x39
+	SO_NOFCS                         = 0x27
+	SO_OOBINLINE                     = 0x100
+	SO_PASSCRED                      = 0x2
+	SO_PASSSEC                       = 0x1f
+	SO_PEEK_OFF                      = 0x26
+	SO_PEERCRED                      = 0x40
+	SO_PEERGROUPS                    = 0x3d
+	SO_PEERSEC                       = 0x1e
+	SO_PROTOCOL                      = 0x1028
+	SO_RCVBUF                        = 0x1002
+	SO_RCVBUFFORCE                   = 0x100b
+	SO_RCVLOWAT                      = 0x800
+	SO_RCVTIMEO                      = 0x2000
+	SO_RCVTIMEO_NEW                  = 0x44
+	SO_RCVTIMEO_OLD                  = 0x2000
+	SO_REUSEADDR                     = 0x4
+	SO_REUSEPORT                     = 0x200
+	SO_RXQ_OVFL                      = 0x24
+	SO_SECURITY_AUTHENTICATION       = 0x5001
+	SO_SECURITY_ENCRYPTION_NETWORK   = 0x5004
+	SO_SECURITY_ENCRYPTION_TRANSPORT = 0x5002
+	SO_SELECT_ERR_QUEUE              = 0x29
+	SO_SNDBUF                        = 0x1001
+	SO_SNDBUFFORCE                   = 0x100a
+	SO_SNDLOWAT                      = 0x1000
+	SO_SNDTIMEO                      = 0x4000
+	SO_SNDTIMEO_NEW                  = 0x45
+	SO_SNDTIMEO_OLD                  = 0x4000
+	SO_TIMESTAMPING                  = 0x23
+	SO_TIMESTAMPING_NEW              = 0x43
+	SO_TIMESTAMPING_OLD              = 0x23
+	SO_TIMESTAMPNS                   = 0x21
+	SO_TIMESTAMPNS_NEW               = 0x42
+	SO_TIMESTAMPNS_OLD               = 0x21
+	SO_TIMESTAMP_NEW                 = 0x46
+	SO_TXTIME                        = 0x3f
+	SO_TYPE                          = 0x1008
+	SO_WIFI_STATUS                   = 0x25
+	SO_ZEROCOPY                      = 0x3e
+	TAB1                             = 0x800
+	TAB2                             = 0x1000
+	TAB3                             = 0x1800
+	TABDLY                           = 0x1800
+	TCFLSH                           = 0x20005407
+	TCGETA                           = 0x40125401
+	TCGETS                           = 0x40245408
+	TCGETS2                          = 0x402c540c
+	TCSAFLUSH                        = 0x2
+	TCSBRK                           = 0x20005405
+	TCSBRKP                          = 0x5425
+	TCSETA                           = 0x80125402
+	TCSETAF                          = 0x80125404
+	TCSETAW                          = 0x80125403
+	TCSETS                           = 0x80245409
+	TCSETS2                          = 0x802c540d
+	TCSETSF                          = 0x8024540b
+	TCSETSF2                         = 0x802c540f
+	TCSETSW                          = 0x8024540a
+	TCSETSW2                         = 0x802c540e
+	TCXONC                           = 0x20005406
+	TFD_CLOEXEC                      = 0x400000
+	TFD_NONBLOCK                     = 0x4000
+	TIOCCBRK                         = 0x2000747a
+	TIOCCONS                         = 0x20007424
+	TIOCEXCL                         = 0x2000740d
+	TIOCGDEV                         = 0x40045432
+	TIOCGETD                         = 0x40047400
+	TIOCGEXCL                        = 0x40045440
+	TIOCGICOUNT                      = 0x545d
+	TIOCGISO7816                     = 0x40285443
+	TIOCGLCKTRMIOS                   = 0x5456
+	TIOCGPGRP                        = 0x40047483
+	TIOCGPKT                         = 0x40045438
+	TIOCGPTLCK                       = 0x40045439
+	TIOCGPTN                         = 0x40047486
+	TIOCGPTPEER                      = 0x20007489
+	TIOCGRS485                       = 0x40205441
+	TIOCGSERIAL                      = 0x541e
+	TIOCGSID                         = 0x40047485
+	TIOCGSOFTCAR                     = 0x40047464
+	TIOCGWINSZ                       = 0x40087468
+	TIOCINQ                          = 0x4004667f
+	TIOCLINUX                        = 0x541c
+	TIOCMBIC                         = 0x8004746b
+	TIOCMBIS                         = 0x8004746c
+	TIOCMGET                         = 0x4004746a
+	TIOCMIWAIT                       = 0x545c
+	TIOCMSET                         = 0x8004746d
+	TIOCM_CAR                        = 0x40
+	TIOCM_CD                         = 0x40
+	TIOCM_CTS                        = 0x20
+	TIOCM_DSR                        = 0x100
+	TIOCM_RI                         = 0x80
+	TIOCM_RNG                        = 0x80
+	TIOCM_SR                         = 0x10
+	TIOCM_ST                         = 0x8
+	TIOCNOTTY                        = 0x20007471
+	TIOCNXCL                         = 0x2000740e
+	TIOCOUTQ                         = 0x40047473
+	TIOCPKT                          = 0x80047470
+	TIOCSBRK                         = 0x2000747b
+	TIOCSCTTY                        = 0x20007484
+	TIOCSERCONFIG                    = 0x5453
+	TIOCSERGETLSR                    = 0x5459
+	TIOCSERGETMULTI                  = 0x545a
+	TIOCSERGSTRUCT                   = 0x5458
+	TIOCSERGWILD                     = 0x5454
+	TIOCSERSETMULTI                  = 0x545b
+	TIOCSERSWILD                     = 0x5455
+	TIOCSETD                         = 0x80047401
+	TIOCSIG                          = 0x80047488
+	TIOCSISO7816                     = 0xc0285444
+	TIOCSLCKTRMIOS                   = 0x5457
+	TIOCSPGRP                        = 0x80047482
+	TIOCSPTLCK                       = 0x80047487
+	TIOCSRS485                       = 0xc0205442
+	TIOCSSERIAL                      = 0x541f
+	TIOCSSOFTCAR                     = 0x80047465
+	TIOCSTART                        = 0x2000746e
+	TIOCSTI                          = 0x80017472
+	TIOCSTOP                         = 0x2000746f
+	TIOCSWINSZ                       = 0x80087467
+	TIOCVHANGUP                      = 0x20005437
+	TOSTOP                           = 0x100
+	TUNATTACHFILTER                  = 0x801054d5
+	TUNDETACHFILTER                  = 0x801054d6
+	TUNGETDEVNETNS                   = 0x200054e3
+	TUNGETFEATURES                   = 0x400454cf
+	TUNGETFILTER                     = 0x401054db
+	TUNGETIFF                        = 0x400454d2
+	TUNGETSNDBUF                     = 0x400454d3
+	TUNGETVNETBE                     = 0x400454df
+	TUNGETVNETHDRSZ                  = 0x400454d7
+	TUNGETVNETLE                     = 0x400454dd
+	TUNSETCARRIER                    = 0x800454e2
+	TUNSETDEBUG                      = 0x800454c9
+	TUNSETFILTEREBPF                 = 0x400454e1
+	TUNSETGROUP                      = 0x800454ce
+	TUNSETIFF                        = 0x800454ca
+	TUNSETIFINDEX                    = 0x800454da
+	TUNSETLINK                       = 0x800454cd
+	TUNSETNOCSUM                     = 0x800454c8
+	TUNSETOFFLOAD                    = 0x800454d0
+	TUNSETOWNER                      = 0x800454cc
+	TUNSETPERSIST                    = 0x800454cb
+	TUNSETQUEUE                      = 0x800454d9
+	TUNSETSNDBUF                     = 0x800454d4
+	TUNSETSTEERINGEBPF               = 0x400454e0
+	TUNSETTXFILTER                   = 0x800454d1
+	TUNSETVNETBE                     = 0x800454de
+	TUNSETVNETHDRSZ                  = 0x800454d8
+	TUNSETVNETLE                     = 0x800454dc
+	UBI_IOCATT                       = 0x80186f40
+	UBI_IOCDET                       = 0x80046f41
+	UBI_IOCEBCH                      = 0x80044f02
+	UBI_IOCEBER                      = 0x80044f01
+	UBI_IOCEBISMAP                   = 0x40044f05
+	UBI_IOCEBMAP                     = 0x80084f03
+	UBI_IOCEBUNMAP                   = 0x80044f04
+	UBI_IOCMKVOL                     = 0x80986f00
+	UBI_IOCRMVOL                     = 0x80046f01
+	UBI_IOCRNVOL                     = 0x91106f03
+	UBI_IOCRPEB                      = 0x80046f04
+	UBI_IOCRSVOL                     = 0x800c6f02
+	UBI_IOCSETVOLPROP                = 0x80104f06
+	UBI_IOCSPEB                      = 0x80046f05
+	UBI_IOCVOLCRBLK                  = 0x80804f07
+	UBI_IOCVOLRMBLK                  = 0x20004f08
+	UBI_IOCVOLUP                     = 0x80084f00
+	VDISCARD                         = 0xd
+	VEOF                             = 0x4
+	VEOL                             = 0xb
+	VEOL2                            = 0x10
+	VMIN                             = 0x6
+	VREPRINT                         = 0xc
+	VSTART                           = 0x8
+	VSTOP                            = 0x9
+	VSUSP                            = 0xa
+	VSWTC                            = 0x7
+	VT1                              = 0x4000
+	VTDLY                            = 0x4000
+	VTIME                            = 0x5
+	VWERASE                          = 0xe
+	WDIOC_GETBOOTSTATUS              = 0x40045702
+	WDIOC_GETPRETIMEOUT              = 0x40045709
+	WDIOC_GETSTATUS                  = 0x40045701
+	WDIOC_GETSUPPORT                 = 0x40285700
+	WDIOC_GETTEMP                    = 0x40045703
+	WDIOC_GETTIMELEFT                = 0x4004570a
+	WDIOC_GETTIMEOUT                 = 0x40045707
+	WDIOC_KEEPALIVE                  = 0x40045705
+	WDIOC_SETOPTIONS                 = 0x40045704
+	WORDSIZE                         = 0x40
+	XCASE                            = 0x4
+	XTABS                            = 0x1800
+	__TIOCFLUSH                      = 0x80047410
+)
+
+// Errors
+const (
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EADV            = syscall.Errno(0x53)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EALREADY        = syscall.Errno(0x25)
+	EBADE           = syscall.Errno(0x66)
+	EBADFD          = syscall.Errno(0x5d)
+	EBADMSG         = syscall.Errno(0x4c)
+	EBADR           = syscall.Errno(0x67)
+	EBADRQC         = syscall.Errno(0x6a)
+	EBADSLT         = syscall.Errno(0x6b)
+	EBFONT          = syscall.Errno(0x6d)
+	ECANCELED       = syscall.Errno(0x7f)
+	ECHRNG          = syscall.Errno(0x5e)
+	ECOMM           = syscall.Errno(0x55)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0x4e)
+	EDEADLOCK       = syscall.Errno(0x6c)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDOTDOT         = syscall.Errno(0x58)
+	EDQUOT          = syscall.Errno(0x45)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EHWPOISON       = syscall.Errno(0x87)
+	EIDRM           = syscall.Errno(0x4d)
+	EILSEQ          = syscall.Errno(0x7a)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EISCONN         = syscall.Errno(0x38)
+	EISNAM          = syscall.Errno(0x78)
+	EKEYEXPIRED     = syscall.Errno(0x81)
+	EKEYREJECTED    = syscall.Errno(0x83)
+	EKEYREVOKED     = syscall.Errno(0x82)
+	EL2HLT          = syscall.Errno(0x65)
+	EL2NSYNC        = syscall.Errno(0x5f)
+	EL3HLT          = syscall.Errno(0x60)
+	EL3RST          = syscall.Errno(0x61)
+	ELIBACC         = syscall.Errno(0x72)
+	ELIBBAD         = syscall.Errno(0x70)
+	ELIBEXEC        = syscall.Errno(0x6e)
+	ELIBMAX         = syscall.Errno(0x7b)
+	ELIBSCN         = syscall.Errno(0x7c)
+	ELNRNG          = syscall.Errno(0x62)
+	ELOOP           = syscall.Errno(0x3e)
+	EMEDIUMTYPE     = syscall.Errno(0x7e)
+	EMSGSIZE        = syscall.Errno(0x28)
+	EMULTIHOP       = syscall.Errno(0x57)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENAVAIL         = syscall.Errno(0x77)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENOANO          = syscall.Errno(0x69)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENOCSI          = syscall.Errno(0x64)
+	ENODATA         = syscall.Errno(0x6f)
+	ENOKEY          = syscall.Errno(0x80)
+	ENOLCK          = syscall.Errno(0x4f)
+	ENOLINK         = syscall.Errno(0x52)
+	ENOMEDIUM       = syscall.Errno(0x7d)
+	ENOMSG          = syscall.Errno(0x4b)
+	ENONET          = syscall.Errno(0x50)
+	ENOPKG          = syscall.Errno(0x71)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSR           = syscall.Errno(0x4a)
+	ENOSTR          = syscall.Errno(0x48)
+	ENOSYS          = syscall.Errno(0x5a)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTNAM         = syscall.Errno(0x76)
+	ENOTRECOVERABLE = syscall.Errno(0x85)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x2d)
+	ENOTUNIQ        = syscall.Errno(0x73)
+	EOPNOTSUPP      = syscall.Errno(0x2d)
+	EOVERFLOW       = syscall.Errno(0x5c)
+	EOWNERDEAD      = syscall.Errno(0x84)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROTO          = syscall.Errno(0x56)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	EREMCHG         = syscall.Errno(0x59)
+	EREMOTE         = syscall.Errno(0x47)
+	EREMOTEIO       = syscall.Errno(0x79)
+	ERESTART        = syscall.Errno(0x74)
+	ERFKILL         = syscall.Errno(0x86)
+	ERREMOTE        = syscall.Errno(0x51)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESRMNT          = syscall.Errno(0x54)
+	ESTALE          = syscall.Errno(0x46)
+	ESTRPIPE        = syscall.Errno(0x5b)
+	ETIME           = syscall.Errno(0x49)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	EUCLEAN         = syscall.Errno(0x75)
+	EUNATCH         = syscall.Errno(0x63)
+	EUSERS          = syscall.Errno(0x44)
+	EXFULL          = syscall.Errno(0x68)
+)
+
+// Signals
+const (
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCLD    = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGIO     = syscall.Signal(0x17)
+	SIGLOST   = syscall.Signal(0x1d)
+	SIGPOLL   = syscall.Signal(0x17)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGPWR    = syscall.Signal(0x1d)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "no such device or address"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EAGAIN", "resource temporarily unavailable"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device or resource busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "invalid cross-device link"},
+	{19, "ENODEV", "no such device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "numerical result out of range"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "ENOTSUP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "cannot assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "transport endpoint is already connected"},
+	{57, "ENOTCONN", "transport endpoint is not connected"},
+	{58, "ESHUTDOWN", "cannot send after transport endpoint shutdown"},
+	{59, "ETOOMANYREFS", "too many references: cannot splice"},
+	{60, "ETIMEDOUT", "connection timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disk quota exceeded"},
+	{70, "ESTALE", "stale file handle"},
+	{71, "EREMOTE", "object is remote"},
+	{72, "ENOSTR", "device not a stream"},
+	{73, "ETIME", "timer expired"},
+	{74, "ENOSR", "out of streams resources"},
+	{75, "ENOMSG", "no message of desired type"},
+	{76, "EBADMSG", "bad message"},
+	{77, "EIDRM", "identifier removed"},
+	{78, "EDEADLK", "resource deadlock avoided"},
+	{79, "ENOLCK", "no locks available"},
+	{80, "ENONET", "machine is not on the network"},
+	{81, "ERREMOTE", "unknown error 81"},
+	{82, "ENOLINK", "link has been severed"},
+	{83, "EADV", "advertise error"},
+	{84, "ESRMNT", "srmount error"},
+	{85, "ECOMM", "communication error on send"},
+	{86, "EPROTO", "protocol error"},
+	{87, "EMULTIHOP", "multihop attempted"},
+	{88, "EDOTDOT", "RFS specific error"},
+	{89, "EREMCHG", "remote address changed"},
+	{90, "ENOSYS", "function not implemented"},
+	{91, "ESTRPIPE", "streams pipe error"},
+	{92, "EOVERFLOW", "value too large for defined data type"},
+	{93, "EBADFD", "file descriptor in bad state"},
+	{94, "ECHRNG", "channel number out of range"},
+	{95, "EL2NSYNC", "level 2 not synchronized"},
+	{96, "EL3HLT", "level 3 halted"},
+	{97, "EL3RST", "level 3 reset"},
+	{98, "ELNRNG", "link number out of range"},
+	{99, "EUNATCH", "protocol driver not attached"},
+	{100, "ENOCSI", "no CSI structure available"},
+	{101, "EL2HLT", "level 2 halted"},
+	{102, "EBADE", "invalid exchange"},
+	{103, "EBADR", "invalid request descriptor"},
+	{104, "EXFULL", "exchange full"},
+	{105, "ENOANO", "no anode"},
+	{106, "EBADRQC", "invalid request code"},
+	{107, "EBADSLT", "invalid slot"},
+	{108, "EDEADLOCK", "file locking deadlock error"},
+	{109, "EBFONT", "bad font file format"},
+	{110, "ELIBEXEC", "cannot exec a shared library directly"},
+	{111, "ENODATA", "no data available"},
+	{112, "ELIBBAD", "accessing a corrupted shared library"},
+	{113, "ENOPKG", "package not installed"},
+	{114, "ELIBACC", "can not access a needed shared library"},
+	{115, "ENOTUNIQ", "name not unique on network"},
+	{116, "ERESTART", "interrupted system call should be restarted"},
+	{117, "EUCLEAN", "structure needs cleaning"},
+	{118, "ENOTNAM", "not a XENIX named type file"},
+	{119, "ENAVAIL", "no XENIX semaphores available"},
+	{120, "EISNAM", "is a named type file"},
+	{121, "EREMOTEIO", "remote I/O error"},
+	{122, "EILSEQ", "invalid or incomplete multibyte or wide character"},
+	{123, "ELIBMAX", "attempting to link in too many shared libraries"},
+	{124, "ELIBSCN", ".lib section in a.out corrupted"},
+	{125, "ENOMEDIUM", "no medium found"},
+	{126, "EMEDIUMTYPE", "wrong medium type"},
+	{127, "ECANCELED", "operation canceled"},
+	{128, "ENOKEY", "required key not available"},
+	{129, "EKEYEXPIRED", "key has expired"},
+	{130, "EKEYREVOKED", "key has been revoked"},
+	{131, "EKEYREJECTED", "key was rejected by service"},
+	{132, "EOWNERDEAD", "owner died"},
+	{133, "ENOTRECOVERABLE", "state not recoverable"},
+	{134, "ERFKILL", "operation not possible due to RF-kill"},
+	{135, "EHWPOISON", "memory page has hardware error"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/breakpoint trap"},
+	{6, "SIGABRT", "aborted"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "stopped (signal)"},
+	{18, "SIGTSTP", "stopped"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "CPU time limit exceeded"},
+	{25, "SIGXFSZ", "file size limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window changed"},
+	{29, "SIGLOST", "power failure"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_netbsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_netbsd_386.go
new file mode 100644
index 000000000..20f3a5799
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_netbsd_386.go
@@ -0,0 +1,1779 @@
+// mkerrors.sh -m32
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build 386,netbsd
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -m32 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                      = 0x10
+	AF_ARP                            = 0x1c
+	AF_BLUETOOTH                      = 0x1f
+	AF_CCITT                          = 0xa
+	AF_CHAOS                          = 0x5
+	AF_CNT                            = 0x15
+	AF_COIP                           = 0x14
+	AF_DATAKIT                        = 0x9
+	AF_DECnet                         = 0xc
+	AF_DLI                            = 0xd
+	AF_E164                           = 0x1a
+	AF_ECMA                           = 0x8
+	AF_HYLINK                         = 0xf
+	AF_IEEE80211                      = 0x20
+	AF_IMPLINK                        = 0x3
+	AF_INET                           = 0x2
+	AF_INET6                          = 0x18
+	AF_IPX                            = 0x17
+	AF_ISDN                           = 0x1a
+	AF_ISO                            = 0x7
+	AF_LAT                            = 0xe
+	AF_LINK                           = 0x12
+	AF_LOCAL                          = 0x1
+	AF_MAX                            = 0x23
+	AF_MPLS                           = 0x21
+	AF_NATM                           = 0x1b
+	AF_NS                             = 0x6
+	AF_OROUTE                         = 0x11
+	AF_OSI                            = 0x7
+	AF_PUP                            = 0x4
+	AF_ROUTE                          = 0x22
+	AF_SNA                            = 0xb
+	AF_UNIX                           = 0x1
+	AF_UNSPEC                         = 0x0
+	ARPHRD_ARCNET                     = 0x7
+	ARPHRD_ETHER                      = 0x1
+	ARPHRD_FRELAY                     = 0xf
+	ARPHRD_IEEE1394                   = 0x18
+	ARPHRD_IEEE802                    = 0x6
+	ARPHRD_STRIP                      = 0x17
+	B0                                = 0x0
+	B110                              = 0x6e
+	B115200                           = 0x1c200
+	B1200                             = 0x4b0
+	B134                              = 0x86
+	B14400                            = 0x3840
+	B150                              = 0x96
+	B1800                             = 0x708
+	B19200                            = 0x4b00
+	B200                              = 0xc8
+	B230400                           = 0x38400
+	B2400                             = 0x960
+	B28800                            = 0x7080
+	B300                              = 0x12c
+	B38400                            = 0x9600
+	B460800                           = 0x70800
+	B4800                             = 0x12c0
+	B50                               = 0x32
+	B57600                            = 0xe100
+	B600                              = 0x258
+	B7200                             = 0x1c20
+	B75                               = 0x4b
+	B76800                            = 0x12c00
+	B921600                           = 0xe1000
+	B9600                             = 0x2580
+	BIOCFEEDBACK                      = 0x8004427d
+	BIOCFLUSH                         = 0x20004268
+	BIOCGBLEN                         = 0x40044266
+	BIOCGDLT                          = 0x4004426a
+	BIOCGDLTLIST                      = 0xc0084277
+	BIOCGETIF                         = 0x4090426b
+	BIOCGFEEDBACK                     = 0x4004427c
+	BIOCGHDRCMPLT                     = 0x40044274
+	BIOCGRTIMEOUT                     = 0x400c427b
+	BIOCGSEESENT                      = 0x40044278
+	BIOCGSTATS                        = 0x4080426f
+	BIOCGSTATSOLD                     = 0x4008426f
+	BIOCIMMEDIATE                     = 0x80044270
+	BIOCPROMISC                       = 0x20004269
+	BIOCSBLEN                         = 0xc0044266
+	BIOCSDLT                          = 0x80044276
+	BIOCSETF                          = 0x80084267
+	BIOCSETIF                         = 0x8090426c
+	BIOCSFEEDBACK                     = 0x8004427d
+	BIOCSHDRCMPLT                     = 0x80044275
+	BIOCSRTIMEOUT                     = 0x800c427a
+	BIOCSSEESENT                      = 0x80044279
+	BIOCSTCPF                         = 0x80084272
+	BIOCSUDPF                         = 0x80084273
+	BIOCVERSION                       = 0x40044271
+	BPF_A                             = 0x10
+	BPF_ABS                           = 0x20
+	BPF_ADD                           = 0x0
+	BPF_ALIGNMENT                     = 0x4
+	BPF_ALIGNMENT32                   = 0x4
+	BPF_ALU                           = 0x4
+	BPF_AND                           = 0x50
+	BPF_B                             = 0x10
+	BPF_DFLTBUFSIZE                   = 0x100000
+	BPF_DIV                           = 0x30
+	BPF_H                             = 0x8
+	BPF_IMM                           = 0x0
+	BPF_IND                           = 0x40
+	BPF_JA                            = 0x0
+	BPF_JEQ                           = 0x10
+	BPF_JGE                           = 0x30
+	BPF_JGT                           = 0x20
+	BPF_JMP                           = 0x5
+	BPF_JSET                          = 0x40
+	BPF_K                             = 0x0
+	BPF_LD                            = 0x0
+	BPF_LDX                           = 0x1
+	BPF_LEN                           = 0x80
+	BPF_LSH                           = 0x60
+	BPF_MAJOR_VERSION                 = 0x1
+	BPF_MAXBUFSIZE                    = 0x1000000
+	BPF_MAXINSNS                      = 0x200
+	BPF_MEM                           = 0x60
+	BPF_MEMWORDS                      = 0x10
+	BPF_MINBUFSIZE                    = 0x20
+	BPF_MINOR_VERSION                 = 0x1
+	BPF_MISC                          = 0x7
+	BPF_MSH                           = 0xa0
+	BPF_MUL                           = 0x20
+	BPF_NEG                           = 0x80
+	BPF_OR                            = 0x40
+	BPF_RELEASE                       = 0x30bb6
+	BPF_RET                           = 0x6
+	BPF_RSH                           = 0x70
+	BPF_ST                            = 0x2
+	BPF_STX                           = 0x3
+	BPF_SUB                           = 0x10
+	BPF_TAX                           = 0x0
+	BPF_TXA                           = 0x80
+	BPF_W                             = 0x0
+	BPF_X                             = 0x8
+	BRKINT                            = 0x2
+	CFLUSH                            = 0xf
+	CLOCAL                            = 0x8000
+	CLONE_CSIGNAL                     = 0xff
+	CLONE_FILES                       = 0x400
+	CLONE_FS                          = 0x200
+	CLONE_PID                         = 0x1000
+	CLONE_PTRACE                      = 0x2000
+	CLONE_SIGHAND                     = 0x800
+	CLONE_VFORK                       = 0x4000
+	CLONE_VM                          = 0x100
+	CPUSTATES                         = 0x5
+	CP_IDLE                           = 0x4
+	CP_INTR                           = 0x3
+	CP_NICE                           = 0x1
+	CP_SYS                            = 0x2
+	CP_USER                           = 0x0
+	CREAD                             = 0x800
+	CRTSCTS                           = 0x10000
+	CS5                               = 0x0
+	CS6                               = 0x100
+	CS7                               = 0x200
+	CS8                               = 0x300
+	CSIZE                             = 0x300
+	CSTART                            = 0x11
+	CSTATUS                           = 0x14
+	CSTOP                             = 0x13
+	CSTOPB                            = 0x400
+	CSUSP                             = 0x1a
+	CTL_HW                            = 0x6
+	CTL_KERN                          = 0x1
+	CTL_MAXNAME                       = 0xc
+	CTL_NET                           = 0x4
+	CTL_QUERY                         = -0x2
+	DIOCBSFLUSH                       = 0x20006478
+	DLT_A429                          = 0xb8
+	DLT_A653_ICM                      = 0xb9
+	DLT_AIRONET_HEADER                = 0x78
+	DLT_AOS                           = 0xde
+	DLT_APPLE_IP_OVER_IEEE1394        = 0x8a
+	DLT_ARCNET                        = 0x7
+	DLT_ARCNET_LINUX                  = 0x81
+	DLT_ATM_CLIP                      = 0x13
+	DLT_ATM_RFC1483                   = 0xb
+	DLT_AURORA                        = 0x7e
+	DLT_AX25                          = 0x3
+	DLT_AX25_KISS                     = 0xca
+	DLT_BACNET_MS_TP                  = 0xa5
+	DLT_BLUETOOTH_HCI_H4              = 0xbb
+	DLT_BLUETOOTH_HCI_H4_WITH_PHDR    = 0xc9
+	DLT_CAN20B                        = 0xbe
+	DLT_CAN_SOCKETCAN                 = 0xe3
+	DLT_CHAOS                         = 0x5
+	DLT_CISCO_IOS                     = 0x76
+	DLT_C_HDLC                        = 0x68
+	DLT_C_HDLC_WITH_DIR               = 0xcd
+	DLT_DECT                          = 0xdd
+	DLT_DOCSIS                        = 0x8f
+	DLT_ECONET                        = 0x73
+	DLT_EN10MB                        = 0x1
+	DLT_EN3MB                         = 0x2
+	DLT_ENC                           = 0x6d
+	DLT_ERF                           = 0xc5
+	DLT_ERF_ETH                       = 0xaf
+	DLT_ERF_POS                       = 0xb0
+	DLT_FC_2                          = 0xe0
+	DLT_FC_2_WITH_FRAME_DELIMS        = 0xe1
+	DLT_FDDI                          = 0xa
+	DLT_FLEXRAY                       = 0xd2
+	DLT_FRELAY                        = 0x6b
+	DLT_FRELAY_WITH_DIR               = 0xce
+	DLT_GCOM_SERIAL                   = 0xad
+	DLT_GCOM_T1E1                     = 0xac
+	DLT_GPF_F                         = 0xab
+	DLT_GPF_T                         = 0xaa
+	DLT_GPRS_LLC                      = 0xa9
+	DLT_GSMTAP_ABIS                   = 0xda
+	DLT_GSMTAP_UM                     = 0xd9
+	DLT_HDLC                          = 0x10
+	DLT_HHDLC                         = 0x79
+	DLT_HIPPI                         = 0xf
+	DLT_IBM_SN                        = 0x92
+	DLT_IBM_SP                        = 0x91
+	DLT_IEEE802                       = 0x6
+	DLT_IEEE802_11                    = 0x69
+	DLT_IEEE802_11_RADIO              = 0x7f
+	DLT_IEEE802_11_RADIO_AVS          = 0xa3
+	DLT_IEEE802_15_4                  = 0xc3
+	DLT_IEEE802_15_4_LINUX            = 0xbf
+	DLT_IEEE802_15_4_NONASK_PHY       = 0xd7
+	DLT_IEEE802_16_MAC_CPS            = 0xbc
+	DLT_IEEE802_16_MAC_CPS_RADIO      = 0xc1
+	DLT_IPMB                          = 0xc7
+	DLT_IPMB_LINUX                    = 0xd1
+	DLT_IPNET                         = 0xe2
+	DLT_IPV4                          = 0xe4
+	DLT_IPV6                          = 0xe5
+	DLT_IP_OVER_FC                    = 0x7a
+	DLT_JUNIPER_ATM1                  = 0x89
+	DLT_JUNIPER_ATM2                  = 0x87
+	DLT_JUNIPER_CHDLC                 = 0xb5
+	DLT_JUNIPER_ES                    = 0x84
+	DLT_JUNIPER_ETHER                 = 0xb2
+	DLT_JUNIPER_FRELAY                = 0xb4
+	DLT_JUNIPER_GGSN                  = 0x85
+	DLT_JUNIPER_ISM                   = 0xc2
+	DLT_JUNIPER_MFR                   = 0x86
+	DLT_JUNIPER_MLFR                  = 0x83
+	DLT_JUNIPER_MLPPP                 = 0x82
+	DLT_JUNIPER_MONITOR               = 0xa4
+	DLT_JUNIPER_PIC_PEER              = 0xae
+	DLT_JUNIPER_PPP                   = 0xb3
+	DLT_JUNIPER_PPPOE                 = 0xa7
+	DLT_JUNIPER_PPPOE_ATM             = 0xa8
+	DLT_JUNIPER_SERVICES              = 0x88
+	DLT_JUNIPER_ST                    = 0xc8
+	DLT_JUNIPER_VP                    = 0xb7
+	DLT_LAPB_WITH_DIR                 = 0xcf
+	DLT_LAPD                          = 0xcb
+	DLT_LIN                           = 0xd4
+	DLT_LINUX_EVDEV                   = 0xd8
+	DLT_LINUX_IRDA                    = 0x90
+	DLT_LINUX_LAPD                    = 0xb1
+	DLT_LINUX_SLL                     = 0x71
+	DLT_LOOP                          = 0x6c
+	DLT_LTALK                         = 0x72
+	DLT_MFR                           = 0xb6
+	DLT_MOST                          = 0xd3
+	DLT_MPLS                          = 0xdb
+	DLT_MTP2                          = 0x8c
+	DLT_MTP2_WITH_PHDR                = 0x8b
+	DLT_MTP3                          = 0x8d
+	DLT_NULL                          = 0x0
+	DLT_PCI_EXP                       = 0x7d
+	DLT_PFLOG                         = 0x75
+	DLT_PFSYNC                        = 0x12
+	DLT_PPI                           = 0xc0
+	DLT_PPP                           = 0x9
+	DLT_PPP_BSDOS                     = 0xe
+	DLT_PPP_ETHER                     = 0x33
+	DLT_PPP_PPPD                      = 0xa6
+	DLT_PPP_SERIAL                    = 0x32
+	DLT_PPP_WITH_DIR                  = 0xcc
+	DLT_PRISM_HEADER                  = 0x77
+	DLT_PRONET                        = 0x4
+	DLT_RAIF1                         = 0xc6
+	DLT_RAW                           = 0xc
+	DLT_RAWAF_MASK                    = 0x2240000
+	DLT_RIO                           = 0x7c
+	DLT_SCCP                          = 0x8e
+	DLT_SITA                          = 0xc4
+	DLT_SLIP                          = 0x8
+	DLT_SLIP_BSDOS                    = 0xd
+	DLT_SUNATM                        = 0x7b
+	DLT_SYMANTEC_FIREWALL             = 0x63
+	DLT_TZSP                          = 0x80
+	DLT_USB                           = 0xba
+	DLT_USB_LINUX                     = 0xbd
+	DLT_USB_LINUX_MMAPPED             = 0xdc
+	DLT_WIHART                        = 0xdf
+	DLT_X2E_SERIAL                    = 0xd5
+	DLT_X2E_XORAYA                    = 0xd6
+	DT_BLK                            = 0x6
+	DT_CHR                            = 0x2
+	DT_DIR                            = 0x4
+	DT_FIFO                           = 0x1
+	DT_LNK                            = 0xa
+	DT_REG                            = 0x8
+	DT_SOCK                           = 0xc
+	DT_UNKNOWN                        = 0x0
+	DT_WHT                            = 0xe
+	ECHO                              = 0x8
+	ECHOCTL                           = 0x40
+	ECHOE                             = 0x2
+	ECHOK                             = 0x4
+	ECHOKE                            = 0x1
+	ECHONL                            = 0x10
+	ECHOPRT                           = 0x20
+	EMUL_LINUX                        = 0x1
+	EMUL_LINUX32                      = 0x5
+	EMUL_MAXID                        = 0x6
+	EN_SW_CTL_INF                     = 0x1000
+	EN_SW_CTL_PREC                    = 0x300
+	EN_SW_CTL_ROUND                   = 0xc00
+	EN_SW_DATACHAIN                   = 0x80
+	EN_SW_DENORM                      = 0x2
+	EN_SW_INVOP                       = 0x1
+	EN_SW_OVERFLOW                    = 0x8
+	EN_SW_PRECLOSS                    = 0x20
+	EN_SW_UNDERFLOW                   = 0x10
+	EN_SW_ZERODIV                     = 0x4
+	ETHERCAP_JUMBO_MTU                = 0x4
+	ETHERCAP_VLAN_HWTAGGING           = 0x2
+	ETHERCAP_VLAN_MTU                 = 0x1
+	ETHERMIN                          = 0x2e
+	ETHERMTU                          = 0x5dc
+	ETHERMTU_JUMBO                    = 0x2328
+	ETHERTYPE_8023                    = 0x4
+	ETHERTYPE_AARP                    = 0x80f3
+	ETHERTYPE_ACCTON                  = 0x8390
+	ETHERTYPE_AEONIC                  = 0x8036
+	ETHERTYPE_ALPHA                   = 0x814a
+	ETHERTYPE_AMBER                   = 0x6008
+	ETHERTYPE_AMOEBA                  = 0x8145
+	ETHERTYPE_APOLLO                  = 0x80f7
+	ETHERTYPE_APOLLODOMAIN            = 0x8019
+	ETHERTYPE_APPLETALK               = 0x809b
+	ETHERTYPE_APPLITEK                = 0x80c7
+	ETHERTYPE_ARGONAUT                = 0x803a
+	ETHERTYPE_ARP                     = 0x806
+	ETHERTYPE_AT                      = 0x809b
+	ETHERTYPE_ATALK                   = 0x809b
+	ETHERTYPE_ATOMIC                  = 0x86df
+	ETHERTYPE_ATT                     = 0x8069
+	ETHERTYPE_ATTSTANFORD             = 0x8008
+	ETHERTYPE_AUTOPHON                = 0x806a
+	ETHERTYPE_AXIS                    = 0x8856
+	ETHERTYPE_BCLOOP                  = 0x9003
+	ETHERTYPE_BOFL                    = 0x8102
+	ETHERTYPE_CABLETRON               = 0x7034
+	ETHERTYPE_CHAOS                   = 0x804
+	ETHERTYPE_COMDESIGN               = 0x806c
+	ETHERTYPE_COMPUGRAPHIC            = 0x806d
+	ETHERTYPE_COUNTERPOINT            = 0x8062
+	ETHERTYPE_CRONUS                  = 0x8004
+	ETHERTYPE_CRONUSVLN               = 0x8003
+	ETHERTYPE_DCA                     = 0x1234
+	ETHERTYPE_DDE                     = 0x807b
+	ETHERTYPE_DEBNI                   = 0xaaaa
+	ETHERTYPE_DECAM                   = 0x8048
+	ETHERTYPE_DECCUST                 = 0x6006
+	ETHERTYPE_DECDIAG                 = 0x6005
+	ETHERTYPE_DECDNS                  = 0x803c
+	ETHERTYPE_DECDTS                  = 0x803e
+	ETHERTYPE_DECEXPER                = 0x6000
+	ETHERTYPE_DECLAST                 = 0x8041
+	ETHERTYPE_DECLTM                  = 0x803f
+	ETHERTYPE_DECMUMPS                = 0x6009
+	ETHERTYPE_DECNETBIOS              = 0x8040
+	ETHERTYPE_DELTACON                = 0x86de
+	ETHERTYPE_DIDDLE                  = 0x4321
+	ETHERTYPE_DLOG1                   = 0x660
+	ETHERTYPE_DLOG2                   = 0x661
+	ETHERTYPE_DN                      = 0x6003
+	ETHERTYPE_DOGFIGHT                = 0x1989
+	ETHERTYPE_DSMD                    = 0x8039
+	ETHERTYPE_ECMA                    = 0x803
+	ETHERTYPE_ENCRYPT                 = 0x803d
+	ETHERTYPE_ES                      = 0x805d
+	ETHERTYPE_EXCELAN                 = 0x8010
+	ETHERTYPE_EXPERDATA               = 0x8049
+	ETHERTYPE_FLIP                    = 0x8146
+	ETHERTYPE_FLOWCONTROL             = 0x8808
+	ETHERTYPE_FRARP                   = 0x808
+	ETHERTYPE_GENDYN                  = 0x8068
+	ETHERTYPE_HAYES                   = 0x8130
+	ETHERTYPE_HIPPI_FP                = 0x8180
+	ETHERTYPE_HITACHI                 = 0x8820
+	ETHERTYPE_HP                      = 0x8005
+	ETHERTYPE_IEEEPUP                 = 0xa00
+	ETHERTYPE_IEEEPUPAT               = 0xa01
+	ETHERTYPE_IMLBL                   = 0x4c42
+	ETHERTYPE_IMLBLDIAG               = 0x424c
+	ETHERTYPE_IP                      = 0x800
+	ETHERTYPE_IPAS                    = 0x876c
+	ETHERTYPE_IPV6                    = 0x86dd
+	ETHERTYPE_IPX                     = 0x8137
+	ETHERTYPE_IPXNEW                  = 0x8037
+	ETHERTYPE_KALPANA                 = 0x8582
+	ETHERTYPE_LANBRIDGE               = 0x8038
+	ETHERTYPE_LANPROBE                = 0x8888
+	ETHERTYPE_LAT                     = 0x6004
+	ETHERTYPE_LBACK                   = 0x9000
+	ETHERTYPE_LITTLE                  = 0x8060
+	ETHERTYPE_LOGICRAFT               = 0x8148
+	ETHERTYPE_LOOPBACK                = 0x9000
+	ETHERTYPE_MATRA                   = 0x807a
+	ETHERTYPE_MAX                     = 0xffff
+	ETHERTYPE_MERIT                   = 0x807c
+	ETHERTYPE_MICP                    = 0x873a
+	ETHERTYPE_MOPDL                   = 0x6001
+	ETHERTYPE_MOPRC                   = 0x6002
+	ETHERTYPE_MOTOROLA                = 0x818d
+	ETHERTYPE_MPLS                    = 0x8847
+	ETHERTYPE_MPLS_MCAST              = 0x8848
+	ETHERTYPE_MUMPS                   = 0x813f
+	ETHERTYPE_NBPCC                   = 0x3c04
+	ETHERTYPE_NBPCLAIM                = 0x3c09
+	ETHERTYPE_NBPCLREQ                = 0x3c05
+	ETHERTYPE_NBPCLRSP                = 0x3c06
+	ETHERTYPE_NBPCREQ                 = 0x3c02
+	ETHERTYPE_NBPCRSP                 = 0x3c03
+	ETHERTYPE_NBPDG                   = 0x3c07
+	ETHERTYPE_NBPDGB                  = 0x3c08
+	ETHERTYPE_NBPDLTE                 = 0x3c0a
+	ETHERTYPE_NBPRAR                  = 0x3c0c
+	ETHERTYPE_NBPRAS                  = 0x3c0b
+	ETHERTYPE_NBPRST                  = 0x3c0d
+	ETHERTYPE_NBPSCD                  = 0x3c01
+	ETHERTYPE_NBPVCD                  = 0x3c00
+	ETHERTYPE_NBS                     = 0x802
+	ETHERTYPE_NCD                     = 0x8149
+	ETHERTYPE_NESTAR                  = 0x8006
+	ETHERTYPE_NETBEUI                 = 0x8191
+	ETHERTYPE_NOVELL                  = 0x8138
+	ETHERTYPE_NS                      = 0x600
+	ETHERTYPE_NSAT                    = 0x601
+	ETHERTYPE_NSCOMPAT                = 0x807
+	ETHERTYPE_NTRAILER                = 0x10
+	ETHERTYPE_OS9                     = 0x7007
+	ETHERTYPE_OS9NET                  = 0x7009
+	ETHERTYPE_PACER                   = 0x80c6
+	ETHERTYPE_PAE                     = 0x888e
+	ETHERTYPE_PCS                     = 0x4242
+	ETHERTYPE_PLANNING                = 0x8044
+	ETHERTYPE_PPP                     = 0x880b
+	ETHERTYPE_PPPOE                   = 0x8864
+	ETHERTYPE_PPPOEDISC               = 0x8863
+	ETHERTYPE_PRIMENTS                = 0x7031
+	ETHERTYPE_PUP                     = 0x200
+	ETHERTYPE_PUPAT                   = 0x200
+	ETHERTYPE_RACAL                   = 0x7030
+	ETHERTYPE_RATIONAL                = 0x8150
+	ETHERTYPE_RAWFR                   = 0x6559
+	ETHERTYPE_RCL                     = 0x1995
+	ETHERTYPE_RDP                     = 0x8739
+	ETHERTYPE_RETIX                   = 0x80f2
+	ETHERTYPE_REVARP                  = 0x8035
+	ETHERTYPE_SCA                     = 0x6007
+	ETHERTYPE_SECTRA                  = 0x86db
+	ETHERTYPE_SECUREDATA              = 0x876d
+	ETHERTYPE_SGITW                   = 0x817e
+	ETHERTYPE_SG_BOUNCE               = 0x8016
+	ETHERTYPE_SG_DIAG                 = 0x8013
+	ETHERTYPE_SG_NETGAMES             = 0x8014
+	ETHERTYPE_SG_RESV                 = 0x8015
+	ETHERTYPE_SIMNET                  = 0x5208
+	ETHERTYPE_SLOWPROTOCOLS           = 0x8809
+	ETHERTYPE_SNA                     = 0x80d5
+	ETHERTYPE_SNMP                    = 0x814c
+	ETHERTYPE_SONIX                   = 0xfaf5
+	ETHERTYPE_SPIDER                  = 0x809f
+	ETHERTYPE_SPRITE                  = 0x500
+	ETHERTYPE_STP                     = 0x8181
+	ETHERTYPE_TALARIS                 = 0x812b
+	ETHERTYPE_TALARISMC               = 0x852b
+	ETHERTYPE_TCPCOMP                 = 0x876b
+	ETHERTYPE_TCPSM                   = 0x9002
+	ETHERTYPE_TEC                     = 0x814f
+	ETHERTYPE_TIGAN                   = 0x802f
+	ETHERTYPE_TRAIL                   = 0x1000
+	ETHERTYPE_TRANSETHER              = 0x6558
+	ETHERTYPE_TYMSHARE                = 0x802e
+	ETHERTYPE_UBBST                   = 0x7005
+	ETHERTYPE_UBDEBUG                 = 0x900
+	ETHERTYPE_UBDIAGLOOP              = 0x7002
+	ETHERTYPE_UBDL                    = 0x7000
+	ETHERTYPE_UBNIU                   = 0x7001
+	ETHERTYPE_UBNMC                   = 0x7003
+	ETHERTYPE_VALID                   = 0x1600
+	ETHERTYPE_VARIAN                  = 0x80dd
+	ETHERTYPE_VAXELN                  = 0x803b
+	ETHERTYPE_VEECO                   = 0x8067
+	ETHERTYPE_VEXP                    = 0x805b
+	ETHERTYPE_VGLAB                   = 0x8131
+	ETHERTYPE_VINES                   = 0xbad
+	ETHERTYPE_VINESECHO               = 0xbaf
+	ETHERTYPE_VINESLOOP               = 0xbae
+	ETHERTYPE_VITAL                   = 0xff00
+	ETHERTYPE_VLAN                    = 0x8100
+	ETHERTYPE_VLTLMAN                 = 0x8080
+	ETHERTYPE_VPROD                   = 0x805c
+	ETHERTYPE_VURESERVED              = 0x8147
+	ETHERTYPE_WATERLOO                = 0x8130
+	ETHERTYPE_WELLFLEET               = 0x8103
+	ETHERTYPE_X25                     = 0x805
+	ETHERTYPE_X75                     = 0x801
+	ETHERTYPE_XNSSM                   = 0x9001
+	ETHERTYPE_XTP                     = 0x817d
+	ETHER_ADDR_LEN                    = 0x6
+	ETHER_CRC_LEN                     = 0x4
+	ETHER_CRC_POLY_BE                 = 0x4c11db6
+	ETHER_CRC_POLY_LE                 = 0xedb88320
+	ETHER_HDR_LEN                     = 0xe
+	ETHER_MAX_LEN                     = 0x5ee
+	ETHER_MAX_LEN_JUMBO               = 0x233a
+	ETHER_MIN_LEN                     = 0x40
+	ETHER_PPPOE_ENCAP_LEN             = 0x8
+	ETHER_TYPE_LEN                    = 0x2
+	ETHER_VLAN_ENCAP_LEN              = 0x4
+	EVFILT_AIO                        = 0x2
+	EVFILT_PROC                       = 0x4
+	EVFILT_READ                       = 0x0
+	EVFILT_SIGNAL                     = 0x5
+	EVFILT_SYSCOUNT                   = 0x7
+	EVFILT_TIMER                      = 0x6
+	EVFILT_VNODE                      = 0x3
+	EVFILT_WRITE                      = 0x1
+	EV_ADD                            = 0x1
+	EV_CLEAR                          = 0x20
+	EV_DELETE                         = 0x2
+	EV_DISABLE                        = 0x8
+	EV_ENABLE                         = 0x4
+	EV_EOF                            = 0x8000
+	EV_ERROR                          = 0x4000
+	EV_FLAG1                          = 0x2000
+	EV_ONESHOT                        = 0x10
+	EV_SYSFLAGS                       = 0xf000
+	EXTA                              = 0x4b00
+	EXTATTR_CMD_START                 = 0x1
+	EXTATTR_CMD_STOP                  = 0x2
+	EXTATTR_NAMESPACE_SYSTEM          = 0x2
+	EXTATTR_NAMESPACE_USER            = 0x1
+	EXTB                              = 0x9600
+	EXTPROC                           = 0x800
+	FD_CLOEXEC                        = 0x1
+	FD_SETSIZE                        = 0x100
+	FLUSHO                            = 0x800000
+	F_CLOSEM                          = 0xa
+	F_DUPFD                           = 0x0
+	F_DUPFD_CLOEXEC                   = 0xc
+	F_FSCTL                           = -0x80000000
+	F_FSDIRMASK                       = 0x70000000
+	F_FSIN                            = 0x10000000
+	F_FSINOUT                         = 0x30000000
+	F_FSOUT                           = 0x20000000
+	F_FSPRIV                          = 0x8000
+	F_FSVOID                          = 0x40000000
+	F_GETFD                           = 0x1
+	F_GETFL                           = 0x3
+	F_GETLK                           = 0x7
+	F_GETNOSIGPIPE                    = 0xd
+	F_GETOWN                          = 0x5
+	F_MAXFD                           = 0xb
+	F_OK                              = 0x0
+	F_PARAM_MASK                      = 0xfff
+	F_PARAM_MAX                       = 0xfff
+	F_RDLCK                           = 0x1
+	F_SETFD                           = 0x2
+	F_SETFL                           = 0x4
+	F_SETLK                           = 0x8
+	F_SETLKW                          = 0x9
+	F_SETNOSIGPIPE                    = 0xe
+	F_SETOWN                          = 0x6
+	F_UNLCK                           = 0x2
+	F_WRLCK                           = 0x3
+	HUPCL                             = 0x4000
+	HW_MACHINE                        = 0x1
+	ICANON                            = 0x100
+	ICMP6_FILTER                      = 0x12
+	ICRNL                             = 0x100
+	IEXTEN                            = 0x400
+	IFAN_ARRIVAL                      = 0x0
+	IFAN_DEPARTURE                    = 0x1
+	IFA_ROUTE                         = 0x1
+	IFF_ALLMULTI                      = 0x200
+	IFF_BROADCAST                     = 0x2
+	IFF_CANTCHANGE                    = 0x8f52
+	IFF_DEBUG                         = 0x4
+	IFF_LINK0                         = 0x1000
+	IFF_LINK1                         = 0x2000
+	IFF_LINK2                         = 0x4000
+	IFF_LOOPBACK                      = 0x8
+	IFF_MULTICAST                     = 0x8000
+	IFF_NOARP                         = 0x80
+	IFF_NOTRAILERS                    = 0x20
+	IFF_OACTIVE                       = 0x400
+	IFF_POINTOPOINT                   = 0x10
+	IFF_PROMISC                       = 0x100
+	IFF_RUNNING                       = 0x40
+	IFF_SIMPLEX                       = 0x800
+	IFF_UP                            = 0x1
+	IFNAMSIZ                          = 0x10
+	IFT_1822                          = 0x2
+	IFT_A12MPPSWITCH                  = 0x82
+	IFT_AAL2                          = 0xbb
+	IFT_AAL5                          = 0x31
+	IFT_ADSL                          = 0x5e
+	IFT_AFLANE8023                    = 0x3b
+	IFT_AFLANE8025                    = 0x3c
+	IFT_ARAP                          = 0x58
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ASYNC                         = 0x54
+	IFT_ATM                           = 0x25
+	IFT_ATMDXI                        = 0x69
+	IFT_ATMFUNI                       = 0x6a
+	IFT_ATMIMA                        = 0x6b
+	IFT_ATMLOGICAL                    = 0x50
+	IFT_ATMRADIO                      = 0xbd
+	IFT_ATMSUBINTERFACE               = 0x86
+	IFT_ATMVCIENDPT                   = 0xc2
+	IFT_ATMVIRTUAL                    = 0x95
+	IFT_BGPPOLICYACCOUNTING           = 0xa2
+	IFT_BRIDGE                        = 0xd1
+	IFT_BSC                           = 0x53
+	IFT_CARP                          = 0xf8
+	IFT_CCTEMUL                       = 0x3d
+	IFT_CEPT                          = 0x13
+	IFT_CES                           = 0x85
+	IFT_CHANNEL                       = 0x46
+	IFT_CNR                           = 0x55
+	IFT_COFFEE                        = 0x84
+	IFT_COMPOSITELINK                 = 0x9b
+	IFT_DCN                           = 0x8d
+	IFT_DIGITALPOWERLINE              = 0x8a
+	IFT_DIGITALWRAPPEROVERHEADCHANNEL = 0xba
+	IFT_DLSW                          = 0x4a
+	IFT_DOCSCABLEDOWNSTREAM           = 0x80
+	IFT_DOCSCABLEMACLAYER             = 0x7f
+	IFT_DOCSCABLEUPSTREAM             = 0x81
+	IFT_DOCSCABLEUPSTREAMCHANNEL      = 0xcd
+	IFT_DS0                           = 0x51
+	IFT_DS0BUNDLE                     = 0x52
+	IFT_DS1FDL                        = 0xaa
+	IFT_DS3                           = 0x1e
+	IFT_DTM                           = 0x8c
+	IFT_DVBASILN                      = 0xac
+	IFT_DVBASIOUT                     = 0xad
+	IFT_DVBRCCDOWNSTREAM              = 0x93
+	IFT_DVBRCCMACLAYER                = 0x92
+	IFT_DVBRCCUPSTREAM                = 0x94
+	IFT_ECONET                        = 0xce
+	IFT_EON                           = 0x19
+	IFT_EPLRS                         = 0x57
+	IFT_ESCON                         = 0x49
+	IFT_ETHER                         = 0x6
+	IFT_FAITH                         = 0xf2
+	IFT_FAST                          = 0x7d
+	IFT_FASTETHER                     = 0x3e
+	IFT_FASTETHERFX                   = 0x45
+	IFT_FDDI                          = 0xf
+	IFT_FIBRECHANNEL                  = 0x38
+	IFT_FRAMERELAYINTERCONNECT        = 0x3a
+	IFT_FRAMERELAYMPI                 = 0x5c
+	IFT_FRDLCIENDPT                   = 0xc1
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_FRF16MFRBUNDLE                = 0xa3
+	IFT_FRFORWARD                     = 0x9e
+	IFT_G703AT2MB                     = 0x43
+	IFT_G703AT64K                     = 0x42
+	IFT_GIF                           = 0xf0
+	IFT_GIGABITETHERNET               = 0x75
+	IFT_GR303IDT                      = 0xb2
+	IFT_GR303RDT                      = 0xb1
+	IFT_H323GATEKEEPER                = 0xa4
+	IFT_H323PROXY                     = 0xa5
+	IFT_HDH1822                       = 0x3
+	IFT_HDLC                          = 0x76
+	IFT_HDSL2                         = 0xa8
+	IFT_HIPERLAN2                     = 0xb7
+	IFT_HIPPI                         = 0x2f
+	IFT_HIPPIINTERFACE                = 0x39
+	IFT_HOSTPAD                       = 0x5a
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IBM370PARCHAN                 = 0x48
+	IFT_IDSL                          = 0x9a
+	IFT_IEEE1394                      = 0x90
+	IFT_IEEE80211                     = 0x47
+	IFT_IEEE80212                     = 0x37
+	IFT_IEEE8023ADLAG                 = 0xa1
+	IFT_IFGSN                         = 0x91
+	IFT_IMT                           = 0xbe
+	IFT_INFINIBAND                    = 0xc7
+	IFT_INTERLEAVE                    = 0x7c
+	IFT_IP                            = 0x7e
+	IFT_IPFORWARD                     = 0x8e
+	IFT_IPOVERATM                     = 0x72
+	IFT_IPOVERCDLC                    = 0x6d
+	IFT_IPOVERCLAW                    = 0x6e
+	IFT_IPSWITCH                      = 0x4e
+	IFT_ISDN                          = 0x3f
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISDNS                         = 0x4b
+	IFT_ISDNU                         = 0x4c
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88025CRFPINT               = 0x62
+	IFT_ISO88025DTR                   = 0x56
+	IFT_ISO88025FIBER                 = 0x73
+	IFT_ISO88026                      = 0xa
+	IFT_ISUP                          = 0xb3
+	IFT_L2VLAN                        = 0x87
+	IFT_L3IPVLAN                      = 0x88
+	IFT_L3IPXVLAN                     = 0x89
+	IFT_LAPB                          = 0x10
+	IFT_LAPD                          = 0x4d
+	IFT_LAPF                          = 0x77
+	IFT_LINEGROUP                     = 0xd2
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MEDIAMAILOVERIP               = 0x8b
+	IFT_MFSIGLINK                     = 0xa7
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_MPC                           = 0x71
+	IFT_MPLS                          = 0xa6
+	IFT_MPLSTUNNEL                    = 0x96
+	IFT_MSDSL                         = 0x8f
+	IFT_MVL                           = 0xbf
+	IFT_MYRINET                       = 0x63
+	IFT_NFAS                          = 0xaf
+	IFT_NSIP                          = 0x1b
+	IFT_OPTICALCHANNEL                = 0xc3
+	IFT_OPTICALTRANSPORT              = 0xc4
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PFLOG                         = 0xf5
+	IFT_PFSYNC                        = 0xf6
+	IFT_PLC                           = 0xae
+	IFT_PON155                        = 0xcf
+	IFT_PON622                        = 0xd0
+	IFT_POS                           = 0xab
+	IFT_PPP                           = 0x17
+	IFT_PPPMULTILINKBUNDLE            = 0x6c
+	IFT_PROPATM                       = 0xc5
+	IFT_PROPBWAP2MP                   = 0xb8
+	IFT_PROPCNLS                      = 0x59
+	IFT_PROPDOCSWIRELESSDOWNSTREAM    = 0xb5
+	IFT_PROPDOCSWIRELESSMACLAYER      = 0xb4
+	IFT_PROPDOCSWIRELESSUPSTREAM      = 0xb6
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPVIRTUAL                   = 0x35
+	IFT_PROPWIRELESSP2P               = 0x9d
+	IFT_PTPSERIAL                     = 0x16
+	IFT_PVC                           = 0xf1
+	IFT_Q2931                         = 0xc9
+	IFT_QLLC                          = 0x44
+	IFT_RADIOMAC                      = 0xbc
+	IFT_RADSL                         = 0x5f
+	IFT_REACHDSL                      = 0xc0
+	IFT_RFC1483                       = 0x9f
+	IFT_RS232                         = 0x21
+	IFT_RSRB                          = 0x4f
+	IFT_SDLC                          = 0x11
+	IFT_SDSL                          = 0x60
+	IFT_SHDSL                         = 0xa9
+	IFT_SIP                           = 0x1f
+	IFT_SIPSIG                        = 0xcc
+	IFT_SIPTG                         = 0xcb
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETOVERHEADCHANNEL          = 0xb9
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_SRP                           = 0x97
+	IFT_SS7SIGLINK                    = 0x9c
+	IFT_STACKTOSTACK                  = 0x6f
+	IFT_STARLAN                       = 0xb
+	IFT_STF                           = 0xd7
+	IFT_T1                            = 0x12
+	IFT_TDLC                          = 0x74
+	IFT_TELINK                        = 0xc8
+	IFT_TERMPAD                       = 0x5b
+	IFT_TR008                         = 0xb0
+	IFT_TRANSPHDLC                    = 0x7b
+	IFT_TUNNEL                        = 0x83
+	IFT_ULTRA                         = 0x1d
+	IFT_USB                           = 0xa0
+	IFT_V11                           = 0x40
+	IFT_V35                           = 0x2d
+	IFT_V36                           = 0x41
+	IFT_V37                           = 0x78
+	IFT_VDSL                          = 0x61
+	IFT_VIRTUALIPADDRESS              = 0x70
+	IFT_VIRTUALTG                     = 0xca
+	IFT_VOICEDID                      = 0xd5
+	IFT_VOICEEM                       = 0x64
+	IFT_VOICEEMFGD                    = 0xd3
+	IFT_VOICEENCAP                    = 0x67
+	IFT_VOICEFGDEANA                  = 0xd4
+	IFT_VOICEFXO                      = 0x65
+	IFT_VOICEFXS                      = 0x66
+	IFT_VOICEOVERATM                  = 0x98
+	IFT_VOICEOVERCABLE                = 0xc6
+	IFT_VOICEOVERFRAMERELAY           = 0x99
+	IFT_VOICEOVERIP                   = 0x68
+	IFT_X213                          = 0x5d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25HUNTGROUP                  = 0x7a
+	IFT_X25MLP                        = 0x79
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+	IGNBRK                            = 0x1
+	IGNCR                             = 0x80
+	IGNPAR                            = 0x4
+	IMAXBEL                           = 0x2000
+	INLCR                             = 0x40
+	INPCK                             = 0x10
+	IN_CLASSA_HOST                    = 0xffffff
+	IN_CLASSA_MAX                     = 0x80
+	IN_CLASSA_NET                     = 0xff000000
+	IN_CLASSA_NSHIFT                  = 0x18
+	IN_CLASSB_HOST                    = 0xffff
+	IN_CLASSB_MAX                     = 0x10000
+	IN_CLASSB_NET                     = 0xffff0000
+	IN_CLASSB_NSHIFT                  = 0x10
+	IN_CLASSC_HOST                    = 0xff
+	IN_CLASSC_NET                     = 0xffffff00
+	IN_CLASSC_NSHIFT                  = 0x8
+	IN_CLASSD_HOST                    = 0xfffffff
+	IN_CLASSD_NET                     = 0xf0000000
+	IN_CLASSD_NSHIFT                  = 0x1c
+	IN_LOOPBACKNET                    = 0x7f
+	IPPROTO_AH                        = 0x33
+	IPPROTO_CARP                      = 0x70
+	IPPROTO_DONE                      = 0x101
+	IPPROTO_DSTOPTS                   = 0x3c
+	IPPROTO_EGP                       = 0x8
+	IPPROTO_ENCAP                     = 0x62
+	IPPROTO_EON                       = 0x50
+	IPPROTO_ESP                       = 0x32
+	IPPROTO_ETHERIP                   = 0x61
+	IPPROTO_FRAGMENT                  = 0x2c
+	IPPROTO_GGP                       = 0x3
+	IPPROTO_GRE                       = 0x2f
+	IPPROTO_HOPOPTS                   = 0x0
+	IPPROTO_ICMP                      = 0x1
+	IPPROTO_ICMPV6                    = 0x3a
+	IPPROTO_IDP                       = 0x16
+	IPPROTO_IGMP                      = 0x2
+	IPPROTO_IP                        = 0x0
+	IPPROTO_IPCOMP                    = 0x6c
+	IPPROTO_IPIP                      = 0x4
+	IPPROTO_IPV4                      = 0x4
+	IPPROTO_IPV6                      = 0x29
+	IPPROTO_IPV6_ICMP                 = 0x3a
+	IPPROTO_MAX                       = 0x100
+	IPPROTO_MAXID                     = 0x34
+	IPPROTO_MOBILE                    = 0x37
+	IPPROTO_NONE                      = 0x3b
+	IPPROTO_PFSYNC                    = 0xf0
+	IPPROTO_PIM                       = 0x67
+	IPPROTO_PUP                       = 0xc
+	IPPROTO_RAW                       = 0xff
+	IPPROTO_ROUTING                   = 0x2b
+	IPPROTO_RSVP                      = 0x2e
+	IPPROTO_TCP                       = 0x6
+	IPPROTO_TP                        = 0x1d
+	IPPROTO_UDP                       = 0x11
+	IPPROTO_VRRP                      = 0x70
+	IPV6_CHECKSUM                     = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS       = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP       = 0x1
+	IPV6_DEFHLIM                      = 0x40
+	IPV6_DONTFRAG                     = 0x3e
+	IPV6_DSTOPTS                      = 0x32
+	IPV6_FAITH                        = 0x1d
+	IPV6_FLOWINFO_MASK                = 0xffffff0f
+	IPV6_FLOWLABEL_MASK               = 0xffff0f00
+	IPV6_FRAGTTL                      = 0x78
+	IPV6_HLIMDEC                      = 0x1
+	IPV6_HOPLIMIT                     = 0x2f
+	IPV6_HOPOPTS                      = 0x31
+	IPV6_IPSEC_POLICY                 = 0x1c
+	IPV6_JOIN_GROUP                   = 0xc
+	IPV6_LEAVE_GROUP                  = 0xd
+	IPV6_MAXHLIM                      = 0xff
+	IPV6_MAXPACKET                    = 0xffff
+	IPV6_MMTU                         = 0x500
+	IPV6_MULTICAST_HOPS               = 0xa
+	IPV6_MULTICAST_IF                 = 0x9
+	IPV6_MULTICAST_LOOP               = 0xb
+	IPV6_NEXTHOP                      = 0x30
+	IPV6_PATHMTU                      = 0x2c
+	IPV6_PKTINFO                      = 0x2e
+	IPV6_PORTRANGE                    = 0xe
+	IPV6_PORTRANGE_DEFAULT            = 0x0
+	IPV6_PORTRANGE_HIGH               = 0x1
+	IPV6_PORTRANGE_LOW                = 0x2
+	IPV6_RECVDSTOPTS                  = 0x28
+	IPV6_RECVHOPLIMIT                 = 0x25
+	IPV6_RECVHOPOPTS                  = 0x27
+	IPV6_RECVPATHMTU                  = 0x2b
+	IPV6_RECVPKTINFO                  = 0x24
+	IPV6_RECVRTHDR                    = 0x26
+	IPV6_RECVTCLASS                   = 0x39
+	IPV6_RTHDR                        = 0x33
+	IPV6_RTHDRDSTOPTS                 = 0x23
+	IPV6_RTHDR_LOOSE                  = 0x0
+	IPV6_RTHDR_STRICT                 = 0x1
+	IPV6_RTHDR_TYPE_0                 = 0x0
+	IPV6_SOCKOPT_RESERVED1            = 0x3
+	IPV6_TCLASS                       = 0x3d
+	IPV6_UNICAST_HOPS                 = 0x4
+	IPV6_USE_MIN_MTU                  = 0x2a
+	IPV6_V6ONLY                       = 0x1b
+	IPV6_VERSION                      = 0x60
+	IPV6_VERSION_MASK                 = 0xf0
+	IP_ADD_MEMBERSHIP                 = 0xc
+	IP_DEFAULT_MULTICAST_LOOP         = 0x1
+	IP_DEFAULT_MULTICAST_TTL          = 0x1
+	IP_DF                             = 0x4000
+	IP_DROP_MEMBERSHIP                = 0xd
+	IP_EF                             = 0x8000
+	IP_ERRORMTU                       = 0x15
+	IP_HDRINCL                        = 0x2
+	IP_IPSEC_POLICY                   = 0x16
+	IP_MAXPACKET                      = 0xffff
+	IP_MAX_MEMBERSHIPS                = 0x14
+	IP_MF                             = 0x2000
+	IP_MINFRAGSIZE                    = 0x45
+	IP_MINTTL                         = 0x18
+	IP_MSS                            = 0x240
+	IP_MULTICAST_IF                   = 0x9
+	IP_MULTICAST_LOOP                 = 0xb
+	IP_MULTICAST_TTL                  = 0xa
+	IP_OFFMASK                        = 0x1fff
+	IP_OPTIONS                        = 0x1
+	IP_PORTRANGE                      = 0x13
+	IP_PORTRANGE_DEFAULT              = 0x0
+	IP_PORTRANGE_HIGH                 = 0x1
+	IP_PORTRANGE_LOW                  = 0x2
+	IP_RECVDSTADDR                    = 0x7
+	IP_RECVIF                         = 0x14
+	IP_RECVOPTS                       = 0x5
+	IP_RECVRETOPTS                    = 0x6
+	IP_RECVTTL                        = 0x17
+	IP_RETOPTS                        = 0x8
+	IP_RF                             = 0x8000
+	IP_TOS                            = 0x3
+	IP_TTL                            = 0x4
+	ISIG                              = 0x80
+	ISTRIP                            = 0x20
+	IXANY                             = 0x800
+	IXOFF                             = 0x400
+	IXON                              = 0x200
+	KERN_HOSTNAME                     = 0xa
+	KERN_OSRELEASE                    = 0x2
+	KERN_OSTYPE                       = 0x1
+	KERN_VERSION                      = 0x4
+	LOCK_EX                           = 0x2
+	LOCK_NB                           = 0x4
+	LOCK_SH                           = 0x1
+	LOCK_UN                           = 0x8
+	MADV_DONTNEED                     = 0x4
+	MADV_FREE                         = 0x6
+	MADV_NORMAL                       = 0x0
+	MADV_RANDOM                       = 0x1
+	MADV_SEQUENTIAL                   = 0x2
+	MADV_SPACEAVAIL                   = 0x5
+	MADV_WILLNEED                     = 0x3
+	MAP_ALIGNMENT_16MB                = 0x18000000
+	MAP_ALIGNMENT_1TB                 = 0x28000000
+	MAP_ALIGNMENT_256TB               = 0x30000000
+	MAP_ALIGNMENT_4GB                 = 0x20000000
+	MAP_ALIGNMENT_64KB                = 0x10000000
+	MAP_ALIGNMENT_64PB                = 0x38000000
+	MAP_ALIGNMENT_MASK                = -0x1000000
+	MAP_ALIGNMENT_SHIFT               = 0x18
+	MAP_ANON                          = 0x1000
+	MAP_FILE                          = 0x0
+	MAP_FIXED                         = 0x10
+	MAP_HASSEMAPHORE                  = 0x200
+	MAP_INHERIT                       = 0x80
+	MAP_INHERIT_COPY                  = 0x1
+	MAP_INHERIT_DEFAULT               = 0x1
+	MAP_INHERIT_DONATE_COPY           = 0x3
+	MAP_INHERIT_NONE                  = 0x2
+	MAP_INHERIT_SHARE                 = 0x0
+	MAP_NORESERVE                     = 0x40
+	MAP_PRIVATE                       = 0x2
+	MAP_RENAME                        = 0x20
+	MAP_SHARED                        = 0x1
+	MAP_STACK                         = 0x2000
+	MAP_TRYFIXED                      = 0x400
+	MAP_WIRED                         = 0x800
+	MCL_CURRENT                       = 0x1
+	MCL_FUTURE                        = 0x2
+	MNT_ASYNC                         = 0x40
+	MNT_BASIC_FLAGS                   = 0xe782807f
+	MNT_DEFEXPORTED                   = 0x200
+	MNT_DISCARD                       = 0x800000
+	MNT_EXKERB                        = 0x800
+	MNT_EXNORESPORT                   = 0x8000000
+	MNT_EXPORTANON                    = 0x400
+	MNT_EXPORTED                      = 0x100
+	MNT_EXPUBLIC                      = 0x10000000
+	MNT_EXRDONLY                      = 0x80
+	MNT_EXTATTR                       = 0x1000000
+	MNT_FORCE                         = 0x80000
+	MNT_GETARGS                       = 0x400000
+	MNT_IGNORE                        = 0x100000
+	MNT_LAZY                          = 0x3
+	MNT_LOCAL                         = 0x1000
+	MNT_LOG                           = 0x2000000
+	MNT_NOATIME                       = 0x4000000
+	MNT_NOCOREDUMP                    = 0x8000
+	MNT_NODEV                         = 0x10
+	MNT_NODEVMTIME                    = 0x40000000
+	MNT_NOEXEC                        = 0x4
+	MNT_NOSUID                        = 0x8
+	MNT_NOWAIT                        = 0x2
+	MNT_OP_FLAGS                      = 0x4d0000
+	MNT_QUOTA                         = 0x2000
+	MNT_RDONLY                        = 0x1
+	MNT_RELATIME                      = 0x20000
+	MNT_RELOAD                        = 0x40000
+	MNT_ROOTFS                        = 0x4000
+	MNT_SOFTDEP                       = 0x80000000
+	MNT_SYMPERM                       = 0x20000000
+	MNT_SYNCHRONOUS                   = 0x2
+	MNT_UNION                         = 0x20
+	MNT_UPDATE                        = 0x10000
+	MNT_VISFLAGMASK                   = 0xff90ffff
+	MNT_WAIT                          = 0x1
+	MSG_BCAST                         = 0x100
+	MSG_CMSG_CLOEXEC                  = 0x800
+	MSG_CONTROLMBUF                   = 0x2000000
+	MSG_CTRUNC                        = 0x20
+	MSG_DONTROUTE                     = 0x4
+	MSG_DONTWAIT                      = 0x80
+	MSG_EOR                           = 0x8
+	MSG_IOVUSRSPACE                   = 0x4000000
+	MSG_LENUSRSPACE                   = 0x8000000
+	MSG_MCAST                         = 0x200
+	MSG_NAMEMBUF                      = 0x1000000
+	MSG_NBIO                          = 0x1000
+	MSG_NOSIGNAL                      = 0x400
+	MSG_OOB                           = 0x1
+	MSG_PEEK                          = 0x2
+	MSG_TRUNC                         = 0x10
+	MSG_USERFLAGS                     = 0xffffff
+	MSG_WAITALL                       = 0x40
+	MS_ASYNC                          = 0x1
+	MS_INVALIDATE                     = 0x2
+	MS_SYNC                           = 0x4
+	NAME_MAX                          = 0x1ff
+	NET_RT_DUMP                       = 0x1
+	NET_RT_FLAGS                      = 0x2
+	NET_RT_IFLIST                     = 0x5
+	NET_RT_MAXID                      = 0x6
+	NET_RT_OIFLIST                    = 0x4
+	NET_RT_OOIFLIST                   = 0x3
+	NFDBITS                           = 0x20
+	NOFLSH                            = 0x80000000
+	NOTE_ATTRIB                       = 0x8
+	NOTE_CHILD                        = 0x4
+	NOTE_DELETE                       = 0x1
+	NOTE_EXEC                         = 0x20000000
+	NOTE_EXIT                         = 0x80000000
+	NOTE_EXTEND                       = 0x4
+	NOTE_FORK                         = 0x40000000
+	NOTE_LINK                         = 0x10
+	NOTE_LOWAT                        = 0x1
+	NOTE_PCTRLMASK                    = 0xf0000000
+	NOTE_PDATAMASK                    = 0xfffff
+	NOTE_RENAME                       = 0x20
+	NOTE_REVOKE                       = 0x40
+	NOTE_TRACK                        = 0x1
+	NOTE_TRACKERR                     = 0x2
+	NOTE_WRITE                        = 0x2
+	OCRNL                             = 0x10
+	OFIOGETBMAP                       = 0xc004667a
+	ONLCR                             = 0x2
+	ONLRET                            = 0x40
+	ONOCR                             = 0x20
+	ONOEOT                            = 0x8
+	OPOST                             = 0x1
+	O_ACCMODE                         = 0x3
+	O_ALT_IO                          = 0x40000
+	O_APPEND                          = 0x8
+	O_ASYNC                           = 0x40
+	O_CLOEXEC                         = 0x400000
+	O_CREAT                           = 0x200
+	O_DIRECT                          = 0x80000
+	O_DIRECTORY                       = 0x200000
+	O_DSYNC                           = 0x10000
+	O_EXCL                            = 0x800
+	O_EXLOCK                          = 0x20
+	O_FSYNC                           = 0x80
+	O_NDELAY                          = 0x4
+	O_NOCTTY                          = 0x8000
+	O_NOFOLLOW                        = 0x100
+	O_NONBLOCK                        = 0x4
+	O_NOSIGPIPE                       = 0x1000000
+	O_RDONLY                          = 0x0
+	O_RDWR                            = 0x2
+	O_RSYNC                           = 0x20000
+	O_SHLOCK                          = 0x10
+	O_SYNC                            = 0x80
+	O_TRUNC                           = 0x400
+	O_WRONLY                          = 0x1
+	PARENB                            = 0x1000
+	PARMRK                            = 0x8
+	PARODD                            = 0x2000
+	PENDIN                            = 0x20000000
+	PRIO_PGRP                         = 0x1
+	PRIO_PROCESS                      = 0x0
+	PRIO_USER                         = 0x2
+	PRI_IOFLUSH                       = 0x7c
+	PROT_EXEC                         = 0x4
+	PROT_NONE                         = 0x0
+	PROT_READ                         = 0x1
+	PROT_WRITE                        = 0x2
+	RLIMIT_AS                         = 0xa
+	RLIMIT_CORE                       = 0x4
+	RLIMIT_CPU                        = 0x0
+	RLIMIT_DATA                       = 0x2
+	RLIMIT_FSIZE                      = 0x1
+	RLIMIT_MEMLOCK                    = 0x6
+	RLIMIT_NOFILE                     = 0x8
+	RLIMIT_NPROC                      = 0x7
+	RLIMIT_RSS                        = 0x5
+	RLIMIT_STACK                      = 0x3
+	RLIM_INFINITY                     = 0x7fffffffffffffff
+	RTAX_AUTHOR                       = 0x6
+	RTAX_BRD                          = 0x7
+	RTAX_DST                          = 0x0
+	RTAX_GATEWAY                      = 0x1
+	RTAX_GENMASK                      = 0x3
+	RTAX_IFA                          = 0x5
+	RTAX_IFP                          = 0x4
+	RTAX_MAX                          = 0x9
+	RTAX_NETMASK                      = 0x2
+	RTAX_TAG                          = 0x8
+	RTA_AUTHOR                        = 0x40
+	RTA_BRD                           = 0x80
+	RTA_DST                           = 0x1
+	RTA_GATEWAY                       = 0x2
+	RTA_GENMASK                       = 0x8
+	RTA_IFA                           = 0x20
+	RTA_IFP                           = 0x10
+	RTA_NETMASK                       = 0x4
+	RTA_TAG                           = 0x100
+	RTF_ANNOUNCE                      = 0x20000
+	RTF_BLACKHOLE                     = 0x1000
+	RTF_CLONED                        = 0x2000
+	RTF_CLONING                       = 0x100
+	RTF_DONE                          = 0x40
+	RTF_DYNAMIC                       = 0x10
+	RTF_GATEWAY                       = 0x2
+	RTF_HOST                          = 0x4
+	RTF_LLINFO                        = 0x400
+	RTF_MASK                          = 0x80
+	RTF_MODIFIED                      = 0x20
+	RTF_PROTO1                        = 0x8000
+	RTF_PROTO2                        = 0x4000
+	RTF_REJECT                        = 0x8
+	RTF_SRC                           = 0x10000
+	RTF_STATIC                        = 0x800
+	RTF_UP                            = 0x1
+	RTF_XRESOLVE                      = 0x200
+	RTM_ADD                           = 0x1
+	RTM_CHANGE                        = 0x3
+	RTM_CHGADDR                       = 0x15
+	RTM_DELADDR                       = 0xd
+	RTM_DELETE                        = 0x2
+	RTM_GET                           = 0x4
+	RTM_IEEE80211                     = 0x11
+	RTM_IFANNOUNCE                    = 0x10
+	RTM_IFINFO                        = 0x14
+	RTM_LLINFO_UPD                    = 0x13
+	RTM_LOCK                          = 0x8
+	RTM_LOSING                        = 0x5
+	RTM_MISS                          = 0x7
+	RTM_NEWADDR                       = 0xc
+	RTM_OIFINFO                       = 0xf
+	RTM_OLDADD                        = 0x9
+	RTM_OLDDEL                        = 0xa
+	RTM_OOIFINFO                      = 0xe
+	RTM_REDIRECT                      = 0x6
+	RTM_RESOLVE                       = 0xb
+	RTM_RTTUNIT                       = 0xf4240
+	RTM_SETGATE                       = 0x12
+	RTM_VERSION                       = 0x4
+	RTV_EXPIRE                        = 0x4
+	RTV_HOPCOUNT                      = 0x2
+	RTV_MTU                           = 0x1
+	RTV_RPIPE                         = 0x8
+	RTV_RTT                           = 0x40
+	RTV_RTTVAR                        = 0x80
+	RTV_SPIPE                         = 0x10
+	RTV_SSTHRESH                      = 0x20
+	RUSAGE_CHILDREN                   = -0x1
+	RUSAGE_SELF                       = 0x0
+	SCM_CREDS                         = 0x4
+	SCM_RIGHTS                        = 0x1
+	SCM_TIMESTAMP                     = 0x8
+	SHUT_RD                           = 0x0
+	SHUT_RDWR                         = 0x2
+	SHUT_WR                           = 0x1
+	SIOCADDMULTI                      = 0x80906931
+	SIOCADDRT                         = 0x8030720a
+	SIOCAIFADDR                       = 0x8040691a
+	SIOCALIFADDR                      = 0x8118691c
+	SIOCATMARK                        = 0x40047307
+	SIOCDELMULTI                      = 0x80906932
+	SIOCDELRT                         = 0x8030720b
+	SIOCDIFADDR                       = 0x80906919
+	SIOCDIFPHYADDR                    = 0x80906949
+	SIOCDLIFADDR                      = 0x8118691e
+	SIOCGDRVSPEC                      = 0xc01c697b
+	SIOCGETPFSYNC                     = 0xc09069f8
+	SIOCGETSGCNT                      = 0xc0147534
+	SIOCGETVIFCNT                     = 0xc0147533
+	SIOCGHIWAT                        = 0x40047301
+	SIOCGIFADDR                       = 0xc0906921
+	SIOCGIFADDRPREF                   = 0xc0946920
+	SIOCGIFALIAS                      = 0xc040691b
+	SIOCGIFBRDADDR                    = 0xc0906923
+	SIOCGIFCAP                        = 0xc0206976
+	SIOCGIFCONF                       = 0xc0086926
+	SIOCGIFDATA                       = 0xc0946985
+	SIOCGIFDLT                        = 0xc0906977
+	SIOCGIFDSTADDR                    = 0xc0906922
+	SIOCGIFFLAGS                      = 0xc0906911
+	SIOCGIFGENERIC                    = 0xc090693a
+	SIOCGIFMEDIA                      = 0xc0286936
+	SIOCGIFMETRIC                     = 0xc0906917
+	SIOCGIFMTU                        = 0xc090697e
+	SIOCGIFNETMASK                    = 0xc0906925
+	SIOCGIFPDSTADDR                   = 0xc0906948
+	SIOCGIFPSRCADDR                   = 0xc0906947
+	SIOCGLIFADDR                      = 0xc118691d
+	SIOCGLIFPHYADDR                   = 0xc118694b
+	SIOCGLINKSTR                      = 0xc01c6987
+	SIOCGLOWAT                        = 0x40047303
+	SIOCGPGRP                         = 0x40047309
+	SIOCGVH                           = 0xc0906983
+	SIOCIFCREATE                      = 0x8090697a
+	SIOCIFDESTROY                     = 0x80906979
+	SIOCIFGCLONERS                    = 0xc00c6978
+	SIOCINITIFADDR                    = 0xc0446984
+	SIOCSDRVSPEC                      = 0x801c697b
+	SIOCSETPFSYNC                     = 0x809069f7
+	SIOCSHIWAT                        = 0x80047300
+	SIOCSIFADDR                       = 0x8090690c
+	SIOCSIFADDRPREF                   = 0x8094691f
+	SIOCSIFBRDADDR                    = 0x80906913
+	SIOCSIFCAP                        = 0x80206975
+	SIOCSIFDSTADDR                    = 0x8090690e
+	SIOCSIFFLAGS                      = 0x80906910
+	SIOCSIFGENERIC                    = 0x80906939
+	SIOCSIFMEDIA                      = 0xc0906935
+	SIOCSIFMETRIC                     = 0x80906918
+	SIOCSIFMTU                        = 0x8090697f
+	SIOCSIFNETMASK                    = 0x80906916
+	SIOCSIFPHYADDR                    = 0x80406946
+	SIOCSLIFPHYADDR                   = 0x8118694a
+	SIOCSLINKSTR                      = 0x801c6988
+	SIOCSLOWAT                        = 0x80047302
+	SIOCSPGRP                         = 0x80047308
+	SIOCSVH                           = 0xc0906982
+	SIOCZIFDATA                       = 0xc0946986
+	SOCK_CLOEXEC                      = 0x10000000
+	SOCK_DGRAM                        = 0x2
+	SOCK_FLAGS_MASK                   = 0xf0000000
+	SOCK_NONBLOCK                     = 0x20000000
+	SOCK_NOSIGPIPE                    = 0x40000000
+	SOCK_RAW                          = 0x3
+	SOCK_RDM                          = 0x4
+	SOCK_SEQPACKET                    = 0x5
+	SOCK_STREAM                       = 0x1
+	SOL_SOCKET                        = 0xffff
+	SOMAXCONN                         = 0x80
+	SO_ACCEPTCONN                     = 0x2
+	SO_ACCEPTFILTER                   = 0x1000
+	SO_BROADCAST                      = 0x20
+	SO_DEBUG                          = 0x1
+	SO_DONTROUTE                      = 0x10
+	SO_ERROR                          = 0x1007
+	SO_KEEPALIVE                      = 0x8
+	SO_LINGER                         = 0x80
+	SO_NOHEADER                       = 0x100a
+	SO_NOSIGPIPE                      = 0x800
+	SO_OOBINLINE                      = 0x100
+	SO_OVERFLOWED                     = 0x1009
+	SO_RCVBUF                         = 0x1002
+	SO_RCVLOWAT                       = 0x1004
+	SO_RCVTIMEO                       = 0x100c
+	SO_REUSEADDR                      = 0x4
+	SO_REUSEPORT                      = 0x200
+	SO_SNDBUF                         = 0x1001
+	SO_SNDLOWAT                       = 0x1003
+	SO_SNDTIMEO                       = 0x100b
+	SO_TIMESTAMP                      = 0x2000
+	SO_TYPE                           = 0x1008
+	SO_USELOOPBACK                    = 0x40
+	SYSCTL_VERSION                    = 0x1000000
+	SYSCTL_VERS_0                     = 0x0
+	SYSCTL_VERS_1                     = 0x1000000
+	SYSCTL_VERS_MASK                  = 0xff000000
+	S_ARCH1                           = 0x10000
+	S_ARCH2                           = 0x20000
+	S_BLKSIZE                         = 0x200
+	S_IEXEC                           = 0x40
+	S_IFBLK                           = 0x6000
+	S_IFCHR                           = 0x2000
+	S_IFDIR                           = 0x4000
+	S_IFIFO                           = 0x1000
+	S_IFLNK                           = 0xa000
+	S_IFMT                            = 0xf000
+	S_IFREG                           = 0x8000
+	S_IFSOCK                          = 0xc000
+	S_IFWHT                           = 0xe000
+	S_IREAD                           = 0x100
+	S_IRGRP                           = 0x20
+	S_IROTH                           = 0x4
+	S_IRUSR                           = 0x100
+	S_IRWXG                           = 0x38
+	S_IRWXO                           = 0x7
+	S_IRWXU                           = 0x1c0
+	S_ISGID                           = 0x400
+	S_ISTXT                           = 0x200
+	S_ISUID                           = 0x800
+	S_ISVTX                           = 0x200
+	S_IWGRP                           = 0x10
+	S_IWOTH                           = 0x2
+	S_IWRITE                          = 0x80
+	S_IWUSR                           = 0x80
+	S_IXGRP                           = 0x8
+	S_IXOTH                           = 0x1
+	S_IXUSR                           = 0x40
+	S_LOGIN_SET                       = 0x1
+	TCIFLUSH                          = 0x1
+	TCIOFLUSH                         = 0x3
+	TCOFLUSH                          = 0x2
+	TCP_CONGCTL                       = 0x20
+	TCP_KEEPCNT                       = 0x6
+	TCP_KEEPIDLE                      = 0x3
+	TCP_KEEPINIT                      = 0x7
+	TCP_KEEPINTVL                     = 0x5
+	TCP_MAXBURST                      = 0x4
+	TCP_MAXSEG                        = 0x2
+	TCP_MAXWIN                        = 0xffff
+	TCP_MAX_WINSHIFT                  = 0xe
+	TCP_MD5SIG                        = 0x10
+	TCP_MINMSS                        = 0xd8
+	TCP_MSS                           = 0x218
+	TCP_NODELAY                       = 0x1
+	TCSAFLUSH                         = 0x2
+	TIOCCBRK                          = 0x2000747a
+	TIOCCDTR                          = 0x20007478
+	TIOCCONS                          = 0x80047462
+	TIOCDCDTIMESTAMP                  = 0x400c7458
+	TIOCDRAIN                         = 0x2000745e
+	TIOCEXCL                          = 0x2000740d
+	TIOCEXT                           = 0x80047460
+	TIOCFLAG_CDTRCTS                  = 0x10
+	TIOCFLAG_CLOCAL                   = 0x2
+	TIOCFLAG_CRTSCTS                  = 0x4
+	TIOCFLAG_MDMBUF                   = 0x8
+	TIOCFLAG_SOFTCAR                  = 0x1
+	TIOCFLUSH                         = 0x80047410
+	TIOCGETA                          = 0x402c7413
+	TIOCGETD                          = 0x4004741a
+	TIOCGFLAGS                        = 0x4004745d
+	TIOCGLINED                        = 0x40207442
+	TIOCGPGRP                         = 0x40047477
+	TIOCGQSIZE                        = 0x40047481
+	TIOCGRANTPT                       = 0x20007447
+	TIOCGSID                          = 0x40047463
+	TIOCGSIZE                         = 0x40087468
+	TIOCGWINSZ                        = 0x40087468
+	TIOCMBIC                          = 0x8004746b
+	TIOCMBIS                          = 0x8004746c
+	TIOCMGET                          = 0x4004746a
+	TIOCMSET                          = 0x8004746d
+	TIOCM_CAR                         = 0x40
+	TIOCM_CD                          = 0x40
+	TIOCM_CTS                         = 0x20
+	TIOCM_DSR                         = 0x100
+	TIOCM_DTR                         = 0x2
+	TIOCM_LE                          = 0x1
+	TIOCM_RI                          = 0x80
+	TIOCM_RNG                         = 0x80
+	TIOCM_RTS                         = 0x4
+	TIOCM_SR                          = 0x10
+	TIOCM_ST                          = 0x8
+	TIOCNOTTY                         = 0x20007471
+	TIOCNXCL                          = 0x2000740e
+	TIOCOUTQ                          = 0x40047473
+	TIOCPKT                           = 0x80047470
+	TIOCPKT_DATA                      = 0x0
+	TIOCPKT_DOSTOP                    = 0x20
+	TIOCPKT_FLUSHREAD                 = 0x1
+	TIOCPKT_FLUSHWRITE                = 0x2
+	TIOCPKT_IOCTL                     = 0x40
+	TIOCPKT_NOSTOP                    = 0x10
+	TIOCPKT_START                     = 0x8
+	TIOCPKT_STOP                      = 0x4
+	TIOCPTMGET                        = 0x40287446
+	TIOCPTSNAME                       = 0x40287448
+	TIOCRCVFRAME                      = 0x80047445
+	TIOCREMOTE                        = 0x80047469
+	TIOCSBRK                          = 0x2000747b
+	TIOCSCTTY                         = 0x20007461
+	TIOCSDTR                          = 0x20007479
+	TIOCSETA                          = 0x802c7414
+	TIOCSETAF                         = 0x802c7416
+	TIOCSETAW                         = 0x802c7415
+	TIOCSETD                          = 0x8004741b
+	TIOCSFLAGS                        = 0x8004745c
+	TIOCSIG                           = 0x2000745f
+	TIOCSLINED                        = 0x80207443
+	TIOCSPGRP                         = 0x80047476
+	TIOCSQSIZE                        = 0x80047480
+	TIOCSSIZE                         = 0x80087467
+	TIOCSTART                         = 0x2000746e
+	TIOCSTAT                          = 0x80047465
+	TIOCSTI                           = 0x80017472
+	TIOCSTOP                          = 0x2000746f
+	TIOCSWINSZ                        = 0x80087467
+	TIOCUCNTL                         = 0x80047466
+	TIOCXMTFRAME                      = 0x80047444
+	TOSTOP                            = 0x400000
+	VDISCARD                          = 0xf
+	VDSUSP                            = 0xb
+	VEOF                              = 0x0
+	VEOL                              = 0x1
+	VEOL2                             = 0x2
+	VERASE                            = 0x3
+	VINTR                             = 0x8
+	VKILL                             = 0x5
+	VLNEXT                            = 0xe
+	VMIN                              = 0x10
+	VQUIT                             = 0x9
+	VREPRINT                          = 0x6
+	VSTART                            = 0xc
+	VSTATUS                           = 0x12
+	VSTOP                             = 0xd
+	VSUSP                             = 0xa
+	VTIME                             = 0x11
+	VWERASE                           = 0x4
+	WALL                              = 0x8
+	WALLSIG                           = 0x8
+	WALTSIG                           = 0x4
+	WCLONE                            = 0x4
+	WCOREFLAG                         = 0x80
+	WNOHANG                           = 0x1
+	WNOWAIT                           = 0x10000
+	WNOZOMBIE                         = 0x20000
+	WOPTSCHECKED                      = 0x40000
+	WSTOPPED                          = 0x7f
+	WUNTRACED                         = 0x2
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADF           = syscall.Errno(0x9)
+	EBADMSG         = syscall.Errno(0x58)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x57)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDOM            = syscall.Errno(0x21)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x52)
+	EILSEQ          = syscall.Errno(0x55)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x60)
+	ELOOP           = syscall.Errno(0x3e)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	EMULTIHOP       = syscall.Errno(0x5e)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x5d)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODATA         = syscall.Errno(0x59)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOLINK         = syscall.Errno(0x5f)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x53)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSR           = syscall.Errno(0x5a)
+	ENOSTR          = syscall.Errno(0x5b)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x56)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x2d)
+	EOVERFLOW       = syscall.Errno(0x54)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTO          = syscall.Errno(0x60)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIME           = syscall.Errno(0x5c)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGPWR    = syscall.Signal(0x20)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large or too small"},
+	{35, "EAGAIN", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol option not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "EOPNOTSUPP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "connection timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disc quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC prog. not avail"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EIDRM", "identifier removed"},
+	{83, "ENOMSG", "no message of desired type"},
+	{84, "EOVERFLOW", "value too large to be stored in data type"},
+	{85, "EILSEQ", "illegal byte sequence"},
+	{86, "ENOTSUP", "not supported"},
+	{87, "ECANCELED", "operation Canceled"},
+	{88, "EBADMSG", "bad or Corrupt message"},
+	{89, "ENODATA", "no message available"},
+	{90, "ENOSR", "no STREAM resources"},
+	{91, "ENOSTR", "not a STREAM"},
+	{92, "ETIME", "STREAM ioctl timeout"},
+	{93, "ENOATTR", "attribute not found"},
+	{94, "EMULTIHOP", "multihop attempted"},
+	{95, "ENOLINK", "link has been severed"},
+	{96, "ELAST", "protocol error"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGIOT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "stopped (signal)"},
+	{18, "SIGTSTP", "stopped"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+	{32, "SIGPWR", "power fail/restart"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_netbsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_netbsd_amd64.go
new file mode 100644
index 000000000..90b8fcd29
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_netbsd_amd64.go
@@ -0,0 +1,1769 @@
+// mkerrors.sh -m64
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,netbsd
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -m64 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                      = 0x10
+	AF_ARP                            = 0x1c
+	AF_BLUETOOTH                      = 0x1f
+	AF_CCITT                          = 0xa
+	AF_CHAOS                          = 0x5
+	AF_CNT                            = 0x15
+	AF_COIP                           = 0x14
+	AF_DATAKIT                        = 0x9
+	AF_DECnet                         = 0xc
+	AF_DLI                            = 0xd
+	AF_E164                           = 0x1a
+	AF_ECMA                           = 0x8
+	AF_HYLINK                         = 0xf
+	AF_IEEE80211                      = 0x20
+	AF_IMPLINK                        = 0x3
+	AF_INET                           = 0x2
+	AF_INET6                          = 0x18
+	AF_IPX                            = 0x17
+	AF_ISDN                           = 0x1a
+	AF_ISO                            = 0x7
+	AF_LAT                            = 0xe
+	AF_LINK                           = 0x12
+	AF_LOCAL                          = 0x1
+	AF_MAX                            = 0x23
+	AF_MPLS                           = 0x21
+	AF_NATM                           = 0x1b
+	AF_NS                             = 0x6
+	AF_OROUTE                         = 0x11
+	AF_OSI                            = 0x7
+	AF_PUP                            = 0x4
+	AF_ROUTE                          = 0x22
+	AF_SNA                            = 0xb
+	AF_UNIX                           = 0x1
+	AF_UNSPEC                         = 0x0
+	ARPHRD_ARCNET                     = 0x7
+	ARPHRD_ETHER                      = 0x1
+	ARPHRD_FRELAY                     = 0xf
+	ARPHRD_IEEE1394                   = 0x18
+	ARPHRD_IEEE802                    = 0x6
+	ARPHRD_STRIP                      = 0x17
+	B0                                = 0x0
+	B110                              = 0x6e
+	B115200                           = 0x1c200
+	B1200                             = 0x4b0
+	B134                              = 0x86
+	B14400                            = 0x3840
+	B150                              = 0x96
+	B1800                             = 0x708
+	B19200                            = 0x4b00
+	B200                              = 0xc8
+	B230400                           = 0x38400
+	B2400                             = 0x960
+	B28800                            = 0x7080
+	B300                              = 0x12c
+	B38400                            = 0x9600
+	B460800                           = 0x70800
+	B4800                             = 0x12c0
+	B50                               = 0x32
+	B57600                            = 0xe100
+	B600                              = 0x258
+	B7200                             = 0x1c20
+	B75                               = 0x4b
+	B76800                            = 0x12c00
+	B921600                           = 0xe1000
+	B9600                             = 0x2580
+	BIOCFEEDBACK                      = 0x8004427d
+	BIOCFLUSH                         = 0x20004268
+	BIOCGBLEN                         = 0x40044266
+	BIOCGDLT                          = 0x4004426a
+	BIOCGDLTLIST                      = 0xc0104277
+	BIOCGETIF                         = 0x4090426b
+	BIOCGFEEDBACK                     = 0x4004427c
+	BIOCGHDRCMPLT                     = 0x40044274
+	BIOCGRTIMEOUT                     = 0x4010427b
+	BIOCGSEESENT                      = 0x40044278
+	BIOCGSTATS                        = 0x4080426f
+	BIOCGSTATSOLD                     = 0x4008426f
+	BIOCIMMEDIATE                     = 0x80044270
+	BIOCPROMISC                       = 0x20004269
+	BIOCSBLEN                         = 0xc0044266
+	BIOCSDLT                          = 0x80044276
+	BIOCSETF                          = 0x80104267
+	BIOCSETIF                         = 0x8090426c
+	BIOCSFEEDBACK                     = 0x8004427d
+	BIOCSHDRCMPLT                     = 0x80044275
+	BIOCSRTIMEOUT                     = 0x8010427a
+	BIOCSSEESENT                      = 0x80044279
+	BIOCSTCPF                         = 0x80104272
+	BIOCSUDPF                         = 0x80104273
+	BIOCVERSION                       = 0x40044271
+	BPF_A                             = 0x10
+	BPF_ABS                           = 0x20
+	BPF_ADD                           = 0x0
+	BPF_ALIGNMENT                     = 0x8
+	BPF_ALIGNMENT32                   = 0x4
+	BPF_ALU                           = 0x4
+	BPF_AND                           = 0x50
+	BPF_B                             = 0x10
+	BPF_DFLTBUFSIZE                   = 0x100000
+	BPF_DIV                           = 0x30
+	BPF_H                             = 0x8
+	BPF_IMM                           = 0x0
+	BPF_IND                           = 0x40
+	BPF_JA                            = 0x0
+	BPF_JEQ                           = 0x10
+	BPF_JGE                           = 0x30
+	BPF_JGT                           = 0x20
+	BPF_JMP                           = 0x5
+	BPF_JSET                          = 0x40
+	BPF_K                             = 0x0
+	BPF_LD                            = 0x0
+	BPF_LDX                           = 0x1
+	BPF_LEN                           = 0x80
+	BPF_LSH                           = 0x60
+	BPF_MAJOR_VERSION                 = 0x1
+	BPF_MAXBUFSIZE                    = 0x1000000
+	BPF_MAXINSNS                      = 0x200
+	BPF_MEM                           = 0x60
+	BPF_MEMWORDS                      = 0x10
+	BPF_MINBUFSIZE                    = 0x20
+	BPF_MINOR_VERSION                 = 0x1
+	BPF_MISC                          = 0x7
+	BPF_MSH                           = 0xa0
+	BPF_MUL                           = 0x20
+	BPF_NEG                           = 0x80
+	BPF_OR                            = 0x40
+	BPF_RELEASE                       = 0x30bb6
+	BPF_RET                           = 0x6
+	BPF_RSH                           = 0x70
+	BPF_ST                            = 0x2
+	BPF_STX                           = 0x3
+	BPF_SUB                           = 0x10
+	BPF_TAX                           = 0x0
+	BPF_TXA                           = 0x80
+	BPF_W                             = 0x0
+	BPF_X                             = 0x8
+	BRKINT                            = 0x2
+	CFLUSH                            = 0xf
+	CLOCAL                            = 0x8000
+	CLONE_CSIGNAL                     = 0xff
+	CLONE_FILES                       = 0x400
+	CLONE_FS                          = 0x200
+	CLONE_PID                         = 0x1000
+	CLONE_PTRACE                      = 0x2000
+	CLONE_SIGHAND                     = 0x800
+	CLONE_VFORK                       = 0x4000
+	CLONE_VM                          = 0x100
+	CPUSTATES                         = 0x5
+	CP_IDLE                           = 0x4
+	CP_INTR                           = 0x3
+	CP_NICE                           = 0x1
+	CP_SYS                            = 0x2
+	CP_USER                           = 0x0
+	CREAD                             = 0x800
+	CRTSCTS                           = 0x10000
+	CS5                               = 0x0
+	CS6                               = 0x100
+	CS7                               = 0x200
+	CS8                               = 0x300
+	CSIZE                             = 0x300
+	CSTART                            = 0x11
+	CSTATUS                           = 0x14
+	CSTOP                             = 0x13
+	CSTOPB                            = 0x400
+	CSUSP                             = 0x1a
+	CTL_HW                            = 0x6
+	CTL_KERN                          = 0x1
+	CTL_MAXNAME                       = 0xc
+	CTL_NET                           = 0x4
+	CTL_QUERY                         = -0x2
+	DIOCBSFLUSH                       = 0x20006478
+	DLT_A429                          = 0xb8
+	DLT_A653_ICM                      = 0xb9
+	DLT_AIRONET_HEADER                = 0x78
+	DLT_AOS                           = 0xde
+	DLT_APPLE_IP_OVER_IEEE1394        = 0x8a
+	DLT_ARCNET                        = 0x7
+	DLT_ARCNET_LINUX                  = 0x81
+	DLT_ATM_CLIP                      = 0x13
+	DLT_ATM_RFC1483                   = 0xb
+	DLT_AURORA                        = 0x7e
+	DLT_AX25                          = 0x3
+	DLT_AX25_KISS                     = 0xca
+	DLT_BACNET_MS_TP                  = 0xa5
+	DLT_BLUETOOTH_HCI_H4              = 0xbb
+	DLT_BLUETOOTH_HCI_H4_WITH_PHDR    = 0xc9
+	DLT_CAN20B                        = 0xbe
+	DLT_CAN_SOCKETCAN                 = 0xe3
+	DLT_CHAOS                         = 0x5
+	DLT_CISCO_IOS                     = 0x76
+	DLT_C_HDLC                        = 0x68
+	DLT_C_HDLC_WITH_DIR               = 0xcd
+	DLT_DECT                          = 0xdd
+	DLT_DOCSIS                        = 0x8f
+	DLT_ECONET                        = 0x73
+	DLT_EN10MB                        = 0x1
+	DLT_EN3MB                         = 0x2
+	DLT_ENC                           = 0x6d
+	DLT_ERF                           = 0xc5
+	DLT_ERF_ETH                       = 0xaf
+	DLT_ERF_POS                       = 0xb0
+	DLT_FC_2                          = 0xe0
+	DLT_FC_2_WITH_FRAME_DELIMS        = 0xe1
+	DLT_FDDI                          = 0xa
+	DLT_FLEXRAY                       = 0xd2
+	DLT_FRELAY                        = 0x6b
+	DLT_FRELAY_WITH_DIR               = 0xce
+	DLT_GCOM_SERIAL                   = 0xad
+	DLT_GCOM_T1E1                     = 0xac
+	DLT_GPF_F                         = 0xab
+	DLT_GPF_T                         = 0xaa
+	DLT_GPRS_LLC                      = 0xa9
+	DLT_GSMTAP_ABIS                   = 0xda
+	DLT_GSMTAP_UM                     = 0xd9
+	DLT_HDLC                          = 0x10
+	DLT_HHDLC                         = 0x79
+	DLT_HIPPI                         = 0xf
+	DLT_IBM_SN                        = 0x92
+	DLT_IBM_SP                        = 0x91
+	DLT_IEEE802                       = 0x6
+	DLT_IEEE802_11                    = 0x69
+	DLT_IEEE802_11_RADIO              = 0x7f
+	DLT_IEEE802_11_RADIO_AVS          = 0xa3
+	DLT_IEEE802_15_4                  = 0xc3
+	DLT_IEEE802_15_4_LINUX            = 0xbf
+	DLT_IEEE802_15_4_NONASK_PHY       = 0xd7
+	DLT_IEEE802_16_MAC_CPS            = 0xbc
+	DLT_IEEE802_16_MAC_CPS_RADIO      = 0xc1
+	DLT_IPMB                          = 0xc7
+	DLT_IPMB_LINUX                    = 0xd1
+	DLT_IPNET                         = 0xe2
+	DLT_IPV4                          = 0xe4
+	DLT_IPV6                          = 0xe5
+	DLT_IP_OVER_FC                    = 0x7a
+	DLT_JUNIPER_ATM1                  = 0x89
+	DLT_JUNIPER_ATM2                  = 0x87
+	DLT_JUNIPER_CHDLC                 = 0xb5
+	DLT_JUNIPER_ES                    = 0x84
+	DLT_JUNIPER_ETHER                 = 0xb2
+	DLT_JUNIPER_FRELAY                = 0xb4
+	DLT_JUNIPER_GGSN                  = 0x85
+	DLT_JUNIPER_ISM                   = 0xc2
+	DLT_JUNIPER_MFR                   = 0x86
+	DLT_JUNIPER_MLFR                  = 0x83
+	DLT_JUNIPER_MLPPP                 = 0x82
+	DLT_JUNIPER_MONITOR               = 0xa4
+	DLT_JUNIPER_PIC_PEER              = 0xae
+	DLT_JUNIPER_PPP                   = 0xb3
+	DLT_JUNIPER_PPPOE                 = 0xa7
+	DLT_JUNIPER_PPPOE_ATM             = 0xa8
+	DLT_JUNIPER_SERVICES              = 0x88
+	DLT_JUNIPER_ST                    = 0xc8
+	DLT_JUNIPER_VP                    = 0xb7
+	DLT_LAPB_WITH_DIR                 = 0xcf
+	DLT_LAPD                          = 0xcb
+	DLT_LIN                           = 0xd4
+	DLT_LINUX_EVDEV                   = 0xd8
+	DLT_LINUX_IRDA                    = 0x90
+	DLT_LINUX_LAPD                    = 0xb1
+	DLT_LINUX_SLL                     = 0x71
+	DLT_LOOP                          = 0x6c
+	DLT_LTALK                         = 0x72
+	DLT_MFR                           = 0xb6
+	DLT_MOST                          = 0xd3
+	DLT_MPLS                          = 0xdb
+	DLT_MTP2                          = 0x8c
+	DLT_MTP2_WITH_PHDR                = 0x8b
+	DLT_MTP3                          = 0x8d
+	DLT_NULL                          = 0x0
+	DLT_PCI_EXP                       = 0x7d
+	DLT_PFLOG                         = 0x75
+	DLT_PFSYNC                        = 0x12
+	DLT_PPI                           = 0xc0
+	DLT_PPP                           = 0x9
+	DLT_PPP_BSDOS                     = 0xe
+	DLT_PPP_ETHER                     = 0x33
+	DLT_PPP_PPPD                      = 0xa6
+	DLT_PPP_SERIAL                    = 0x32
+	DLT_PPP_WITH_DIR                  = 0xcc
+	DLT_PRISM_HEADER                  = 0x77
+	DLT_PRONET                        = 0x4
+	DLT_RAIF1                         = 0xc6
+	DLT_RAW                           = 0xc
+	DLT_RAWAF_MASK                    = 0x2240000
+	DLT_RIO                           = 0x7c
+	DLT_SCCP                          = 0x8e
+	DLT_SITA                          = 0xc4
+	DLT_SLIP                          = 0x8
+	DLT_SLIP_BSDOS                    = 0xd
+	DLT_SUNATM                        = 0x7b
+	DLT_SYMANTEC_FIREWALL             = 0x63
+	DLT_TZSP                          = 0x80
+	DLT_USB                           = 0xba
+	DLT_USB_LINUX                     = 0xbd
+	DLT_USB_LINUX_MMAPPED             = 0xdc
+	DLT_WIHART                        = 0xdf
+	DLT_X2E_SERIAL                    = 0xd5
+	DLT_X2E_XORAYA                    = 0xd6
+	DT_BLK                            = 0x6
+	DT_CHR                            = 0x2
+	DT_DIR                            = 0x4
+	DT_FIFO                           = 0x1
+	DT_LNK                            = 0xa
+	DT_REG                            = 0x8
+	DT_SOCK                           = 0xc
+	DT_UNKNOWN                        = 0x0
+	DT_WHT                            = 0xe
+	ECHO                              = 0x8
+	ECHOCTL                           = 0x40
+	ECHOE                             = 0x2
+	ECHOK                             = 0x4
+	ECHOKE                            = 0x1
+	ECHONL                            = 0x10
+	ECHOPRT                           = 0x20
+	EMUL_LINUX                        = 0x1
+	EMUL_LINUX32                      = 0x5
+	EMUL_MAXID                        = 0x6
+	ETHERCAP_JUMBO_MTU                = 0x4
+	ETHERCAP_VLAN_HWTAGGING           = 0x2
+	ETHERCAP_VLAN_MTU                 = 0x1
+	ETHERMIN                          = 0x2e
+	ETHERMTU                          = 0x5dc
+	ETHERMTU_JUMBO                    = 0x2328
+	ETHERTYPE_8023                    = 0x4
+	ETHERTYPE_AARP                    = 0x80f3
+	ETHERTYPE_ACCTON                  = 0x8390
+	ETHERTYPE_AEONIC                  = 0x8036
+	ETHERTYPE_ALPHA                   = 0x814a
+	ETHERTYPE_AMBER                   = 0x6008
+	ETHERTYPE_AMOEBA                  = 0x8145
+	ETHERTYPE_APOLLO                  = 0x80f7
+	ETHERTYPE_APOLLODOMAIN            = 0x8019
+	ETHERTYPE_APPLETALK               = 0x809b
+	ETHERTYPE_APPLITEK                = 0x80c7
+	ETHERTYPE_ARGONAUT                = 0x803a
+	ETHERTYPE_ARP                     = 0x806
+	ETHERTYPE_AT                      = 0x809b
+	ETHERTYPE_ATALK                   = 0x809b
+	ETHERTYPE_ATOMIC                  = 0x86df
+	ETHERTYPE_ATT                     = 0x8069
+	ETHERTYPE_ATTSTANFORD             = 0x8008
+	ETHERTYPE_AUTOPHON                = 0x806a
+	ETHERTYPE_AXIS                    = 0x8856
+	ETHERTYPE_BCLOOP                  = 0x9003
+	ETHERTYPE_BOFL                    = 0x8102
+	ETHERTYPE_CABLETRON               = 0x7034
+	ETHERTYPE_CHAOS                   = 0x804
+	ETHERTYPE_COMDESIGN               = 0x806c
+	ETHERTYPE_COMPUGRAPHIC            = 0x806d
+	ETHERTYPE_COUNTERPOINT            = 0x8062
+	ETHERTYPE_CRONUS                  = 0x8004
+	ETHERTYPE_CRONUSVLN               = 0x8003
+	ETHERTYPE_DCA                     = 0x1234
+	ETHERTYPE_DDE                     = 0x807b
+	ETHERTYPE_DEBNI                   = 0xaaaa
+	ETHERTYPE_DECAM                   = 0x8048
+	ETHERTYPE_DECCUST                 = 0x6006
+	ETHERTYPE_DECDIAG                 = 0x6005
+	ETHERTYPE_DECDNS                  = 0x803c
+	ETHERTYPE_DECDTS                  = 0x803e
+	ETHERTYPE_DECEXPER                = 0x6000
+	ETHERTYPE_DECLAST                 = 0x8041
+	ETHERTYPE_DECLTM                  = 0x803f
+	ETHERTYPE_DECMUMPS                = 0x6009
+	ETHERTYPE_DECNETBIOS              = 0x8040
+	ETHERTYPE_DELTACON                = 0x86de
+	ETHERTYPE_DIDDLE                  = 0x4321
+	ETHERTYPE_DLOG1                   = 0x660
+	ETHERTYPE_DLOG2                   = 0x661
+	ETHERTYPE_DN                      = 0x6003
+	ETHERTYPE_DOGFIGHT                = 0x1989
+	ETHERTYPE_DSMD                    = 0x8039
+	ETHERTYPE_ECMA                    = 0x803
+	ETHERTYPE_ENCRYPT                 = 0x803d
+	ETHERTYPE_ES                      = 0x805d
+	ETHERTYPE_EXCELAN                 = 0x8010
+	ETHERTYPE_EXPERDATA               = 0x8049
+	ETHERTYPE_FLIP                    = 0x8146
+	ETHERTYPE_FLOWCONTROL             = 0x8808
+	ETHERTYPE_FRARP                   = 0x808
+	ETHERTYPE_GENDYN                  = 0x8068
+	ETHERTYPE_HAYES                   = 0x8130
+	ETHERTYPE_HIPPI_FP                = 0x8180
+	ETHERTYPE_HITACHI                 = 0x8820
+	ETHERTYPE_HP                      = 0x8005
+	ETHERTYPE_IEEEPUP                 = 0xa00
+	ETHERTYPE_IEEEPUPAT               = 0xa01
+	ETHERTYPE_IMLBL                   = 0x4c42
+	ETHERTYPE_IMLBLDIAG               = 0x424c
+	ETHERTYPE_IP                      = 0x800
+	ETHERTYPE_IPAS                    = 0x876c
+	ETHERTYPE_IPV6                    = 0x86dd
+	ETHERTYPE_IPX                     = 0x8137
+	ETHERTYPE_IPXNEW                  = 0x8037
+	ETHERTYPE_KALPANA                 = 0x8582
+	ETHERTYPE_LANBRIDGE               = 0x8038
+	ETHERTYPE_LANPROBE                = 0x8888
+	ETHERTYPE_LAT                     = 0x6004
+	ETHERTYPE_LBACK                   = 0x9000
+	ETHERTYPE_LITTLE                  = 0x8060
+	ETHERTYPE_LOGICRAFT               = 0x8148
+	ETHERTYPE_LOOPBACK                = 0x9000
+	ETHERTYPE_MATRA                   = 0x807a
+	ETHERTYPE_MAX                     = 0xffff
+	ETHERTYPE_MERIT                   = 0x807c
+	ETHERTYPE_MICP                    = 0x873a
+	ETHERTYPE_MOPDL                   = 0x6001
+	ETHERTYPE_MOPRC                   = 0x6002
+	ETHERTYPE_MOTOROLA                = 0x818d
+	ETHERTYPE_MPLS                    = 0x8847
+	ETHERTYPE_MPLS_MCAST              = 0x8848
+	ETHERTYPE_MUMPS                   = 0x813f
+	ETHERTYPE_NBPCC                   = 0x3c04
+	ETHERTYPE_NBPCLAIM                = 0x3c09
+	ETHERTYPE_NBPCLREQ                = 0x3c05
+	ETHERTYPE_NBPCLRSP                = 0x3c06
+	ETHERTYPE_NBPCREQ                 = 0x3c02
+	ETHERTYPE_NBPCRSP                 = 0x3c03
+	ETHERTYPE_NBPDG                   = 0x3c07
+	ETHERTYPE_NBPDGB                  = 0x3c08
+	ETHERTYPE_NBPDLTE                 = 0x3c0a
+	ETHERTYPE_NBPRAR                  = 0x3c0c
+	ETHERTYPE_NBPRAS                  = 0x3c0b
+	ETHERTYPE_NBPRST                  = 0x3c0d
+	ETHERTYPE_NBPSCD                  = 0x3c01
+	ETHERTYPE_NBPVCD                  = 0x3c00
+	ETHERTYPE_NBS                     = 0x802
+	ETHERTYPE_NCD                     = 0x8149
+	ETHERTYPE_NESTAR                  = 0x8006
+	ETHERTYPE_NETBEUI                 = 0x8191
+	ETHERTYPE_NOVELL                  = 0x8138
+	ETHERTYPE_NS                      = 0x600
+	ETHERTYPE_NSAT                    = 0x601
+	ETHERTYPE_NSCOMPAT                = 0x807
+	ETHERTYPE_NTRAILER                = 0x10
+	ETHERTYPE_OS9                     = 0x7007
+	ETHERTYPE_OS9NET                  = 0x7009
+	ETHERTYPE_PACER                   = 0x80c6
+	ETHERTYPE_PAE                     = 0x888e
+	ETHERTYPE_PCS                     = 0x4242
+	ETHERTYPE_PLANNING                = 0x8044
+	ETHERTYPE_PPP                     = 0x880b
+	ETHERTYPE_PPPOE                   = 0x8864
+	ETHERTYPE_PPPOEDISC               = 0x8863
+	ETHERTYPE_PRIMENTS                = 0x7031
+	ETHERTYPE_PUP                     = 0x200
+	ETHERTYPE_PUPAT                   = 0x200
+	ETHERTYPE_RACAL                   = 0x7030
+	ETHERTYPE_RATIONAL                = 0x8150
+	ETHERTYPE_RAWFR                   = 0x6559
+	ETHERTYPE_RCL                     = 0x1995
+	ETHERTYPE_RDP                     = 0x8739
+	ETHERTYPE_RETIX                   = 0x80f2
+	ETHERTYPE_REVARP                  = 0x8035
+	ETHERTYPE_SCA                     = 0x6007
+	ETHERTYPE_SECTRA                  = 0x86db
+	ETHERTYPE_SECUREDATA              = 0x876d
+	ETHERTYPE_SGITW                   = 0x817e
+	ETHERTYPE_SG_BOUNCE               = 0x8016
+	ETHERTYPE_SG_DIAG                 = 0x8013
+	ETHERTYPE_SG_NETGAMES             = 0x8014
+	ETHERTYPE_SG_RESV                 = 0x8015
+	ETHERTYPE_SIMNET                  = 0x5208
+	ETHERTYPE_SLOWPROTOCOLS           = 0x8809
+	ETHERTYPE_SNA                     = 0x80d5
+	ETHERTYPE_SNMP                    = 0x814c
+	ETHERTYPE_SONIX                   = 0xfaf5
+	ETHERTYPE_SPIDER                  = 0x809f
+	ETHERTYPE_SPRITE                  = 0x500
+	ETHERTYPE_STP                     = 0x8181
+	ETHERTYPE_TALARIS                 = 0x812b
+	ETHERTYPE_TALARISMC               = 0x852b
+	ETHERTYPE_TCPCOMP                 = 0x876b
+	ETHERTYPE_TCPSM                   = 0x9002
+	ETHERTYPE_TEC                     = 0x814f
+	ETHERTYPE_TIGAN                   = 0x802f
+	ETHERTYPE_TRAIL                   = 0x1000
+	ETHERTYPE_TRANSETHER              = 0x6558
+	ETHERTYPE_TYMSHARE                = 0x802e
+	ETHERTYPE_UBBST                   = 0x7005
+	ETHERTYPE_UBDEBUG                 = 0x900
+	ETHERTYPE_UBDIAGLOOP              = 0x7002
+	ETHERTYPE_UBDL                    = 0x7000
+	ETHERTYPE_UBNIU                   = 0x7001
+	ETHERTYPE_UBNMC                   = 0x7003
+	ETHERTYPE_VALID                   = 0x1600
+	ETHERTYPE_VARIAN                  = 0x80dd
+	ETHERTYPE_VAXELN                  = 0x803b
+	ETHERTYPE_VEECO                   = 0x8067
+	ETHERTYPE_VEXP                    = 0x805b
+	ETHERTYPE_VGLAB                   = 0x8131
+	ETHERTYPE_VINES                   = 0xbad
+	ETHERTYPE_VINESECHO               = 0xbaf
+	ETHERTYPE_VINESLOOP               = 0xbae
+	ETHERTYPE_VITAL                   = 0xff00
+	ETHERTYPE_VLAN                    = 0x8100
+	ETHERTYPE_VLTLMAN                 = 0x8080
+	ETHERTYPE_VPROD                   = 0x805c
+	ETHERTYPE_VURESERVED              = 0x8147
+	ETHERTYPE_WATERLOO                = 0x8130
+	ETHERTYPE_WELLFLEET               = 0x8103
+	ETHERTYPE_X25                     = 0x805
+	ETHERTYPE_X75                     = 0x801
+	ETHERTYPE_XNSSM                   = 0x9001
+	ETHERTYPE_XTP                     = 0x817d
+	ETHER_ADDR_LEN                    = 0x6
+	ETHER_CRC_LEN                     = 0x4
+	ETHER_CRC_POLY_BE                 = 0x4c11db6
+	ETHER_CRC_POLY_LE                 = 0xedb88320
+	ETHER_HDR_LEN                     = 0xe
+	ETHER_MAX_LEN                     = 0x5ee
+	ETHER_MAX_LEN_JUMBO               = 0x233a
+	ETHER_MIN_LEN                     = 0x40
+	ETHER_PPPOE_ENCAP_LEN             = 0x8
+	ETHER_TYPE_LEN                    = 0x2
+	ETHER_VLAN_ENCAP_LEN              = 0x4
+	EVFILT_AIO                        = 0x2
+	EVFILT_PROC                       = 0x4
+	EVFILT_READ                       = 0x0
+	EVFILT_SIGNAL                     = 0x5
+	EVFILT_SYSCOUNT                   = 0x7
+	EVFILT_TIMER                      = 0x6
+	EVFILT_VNODE                      = 0x3
+	EVFILT_WRITE                      = 0x1
+	EV_ADD                            = 0x1
+	EV_CLEAR                          = 0x20
+	EV_DELETE                         = 0x2
+	EV_DISABLE                        = 0x8
+	EV_ENABLE                         = 0x4
+	EV_EOF                            = 0x8000
+	EV_ERROR                          = 0x4000
+	EV_FLAG1                          = 0x2000
+	EV_ONESHOT                        = 0x10
+	EV_SYSFLAGS                       = 0xf000
+	EXTA                              = 0x4b00
+	EXTATTR_CMD_START                 = 0x1
+	EXTATTR_CMD_STOP                  = 0x2
+	EXTATTR_NAMESPACE_SYSTEM          = 0x2
+	EXTATTR_NAMESPACE_USER            = 0x1
+	EXTB                              = 0x9600
+	EXTPROC                           = 0x800
+	FD_CLOEXEC                        = 0x1
+	FD_SETSIZE                        = 0x100
+	FLUSHO                            = 0x800000
+	F_CLOSEM                          = 0xa
+	F_DUPFD                           = 0x0
+	F_DUPFD_CLOEXEC                   = 0xc
+	F_FSCTL                           = -0x80000000
+	F_FSDIRMASK                       = 0x70000000
+	F_FSIN                            = 0x10000000
+	F_FSINOUT                         = 0x30000000
+	F_FSOUT                           = 0x20000000
+	F_FSPRIV                          = 0x8000
+	F_FSVOID                          = 0x40000000
+	F_GETFD                           = 0x1
+	F_GETFL                           = 0x3
+	F_GETLK                           = 0x7
+	F_GETNOSIGPIPE                    = 0xd
+	F_GETOWN                          = 0x5
+	F_MAXFD                           = 0xb
+	F_OK                              = 0x0
+	F_PARAM_MASK                      = 0xfff
+	F_PARAM_MAX                       = 0xfff
+	F_RDLCK                           = 0x1
+	F_SETFD                           = 0x2
+	F_SETFL                           = 0x4
+	F_SETLK                           = 0x8
+	F_SETLKW                          = 0x9
+	F_SETNOSIGPIPE                    = 0xe
+	F_SETOWN                          = 0x6
+	F_UNLCK                           = 0x2
+	F_WRLCK                           = 0x3
+	HUPCL                             = 0x4000
+	HW_MACHINE                        = 0x1
+	ICANON                            = 0x100
+	ICMP6_FILTER                      = 0x12
+	ICRNL                             = 0x100
+	IEXTEN                            = 0x400
+	IFAN_ARRIVAL                      = 0x0
+	IFAN_DEPARTURE                    = 0x1
+	IFA_ROUTE                         = 0x1
+	IFF_ALLMULTI                      = 0x200
+	IFF_BROADCAST                     = 0x2
+	IFF_CANTCHANGE                    = 0x8f52
+	IFF_DEBUG                         = 0x4
+	IFF_LINK0                         = 0x1000
+	IFF_LINK1                         = 0x2000
+	IFF_LINK2                         = 0x4000
+	IFF_LOOPBACK                      = 0x8
+	IFF_MULTICAST                     = 0x8000
+	IFF_NOARP                         = 0x80
+	IFF_NOTRAILERS                    = 0x20
+	IFF_OACTIVE                       = 0x400
+	IFF_POINTOPOINT                   = 0x10
+	IFF_PROMISC                       = 0x100
+	IFF_RUNNING                       = 0x40
+	IFF_SIMPLEX                       = 0x800
+	IFF_UP                            = 0x1
+	IFNAMSIZ                          = 0x10
+	IFT_1822                          = 0x2
+	IFT_A12MPPSWITCH                  = 0x82
+	IFT_AAL2                          = 0xbb
+	IFT_AAL5                          = 0x31
+	IFT_ADSL                          = 0x5e
+	IFT_AFLANE8023                    = 0x3b
+	IFT_AFLANE8025                    = 0x3c
+	IFT_ARAP                          = 0x58
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ASYNC                         = 0x54
+	IFT_ATM                           = 0x25
+	IFT_ATMDXI                        = 0x69
+	IFT_ATMFUNI                       = 0x6a
+	IFT_ATMIMA                        = 0x6b
+	IFT_ATMLOGICAL                    = 0x50
+	IFT_ATMRADIO                      = 0xbd
+	IFT_ATMSUBINTERFACE               = 0x86
+	IFT_ATMVCIENDPT                   = 0xc2
+	IFT_ATMVIRTUAL                    = 0x95
+	IFT_BGPPOLICYACCOUNTING           = 0xa2
+	IFT_BRIDGE                        = 0xd1
+	IFT_BSC                           = 0x53
+	IFT_CARP                          = 0xf8
+	IFT_CCTEMUL                       = 0x3d
+	IFT_CEPT                          = 0x13
+	IFT_CES                           = 0x85
+	IFT_CHANNEL                       = 0x46
+	IFT_CNR                           = 0x55
+	IFT_COFFEE                        = 0x84
+	IFT_COMPOSITELINK                 = 0x9b
+	IFT_DCN                           = 0x8d
+	IFT_DIGITALPOWERLINE              = 0x8a
+	IFT_DIGITALWRAPPEROVERHEADCHANNEL = 0xba
+	IFT_DLSW                          = 0x4a
+	IFT_DOCSCABLEDOWNSTREAM           = 0x80
+	IFT_DOCSCABLEMACLAYER             = 0x7f
+	IFT_DOCSCABLEUPSTREAM             = 0x81
+	IFT_DOCSCABLEUPSTREAMCHANNEL      = 0xcd
+	IFT_DS0                           = 0x51
+	IFT_DS0BUNDLE                     = 0x52
+	IFT_DS1FDL                        = 0xaa
+	IFT_DS3                           = 0x1e
+	IFT_DTM                           = 0x8c
+	IFT_DVBASILN                      = 0xac
+	IFT_DVBASIOUT                     = 0xad
+	IFT_DVBRCCDOWNSTREAM              = 0x93
+	IFT_DVBRCCMACLAYER                = 0x92
+	IFT_DVBRCCUPSTREAM                = 0x94
+	IFT_ECONET                        = 0xce
+	IFT_EON                           = 0x19
+	IFT_EPLRS                         = 0x57
+	IFT_ESCON                         = 0x49
+	IFT_ETHER                         = 0x6
+	IFT_FAITH                         = 0xf2
+	IFT_FAST                          = 0x7d
+	IFT_FASTETHER                     = 0x3e
+	IFT_FASTETHERFX                   = 0x45
+	IFT_FDDI                          = 0xf
+	IFT_FIBRECHANNEL                  = 0x38
+	IFT_FRAMERELAYINTERCONNECT        = 0x3a
+	IFT_FRAMERELAYMPI                 = 0x5c
+	IFT_FRDLCIENDPT                   = 0xc1
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_FRF16MFRBUNDLE                = 0xa3
+	IFT_FRFORWARD                     = 0x9e
+	IFT_G703AT2MB                     = 0x43
+	IFT_G703AT64K                     = 0x42
+	IFT_GIF                           = 0xf0
+	IFT_GIGABITETHERNET               = 0x75
+	IFT_GR303IDT                      = 0xb2
+	IFT_GR303RDT                      = 0xb1
+	IFT_H323GATEKEEPER                = 0xa4
+	IFT_H323PROXY                     = 0xa5
+	IFT_HDH1822                       = 0x3
+	IFT_HDLC                          = 0x76
+	IFT_HDSL2                         = 0xa8
+	IFT_HIPERLAN2                     = 0xb7
+	IFT_HIPPI                         = 0x2f
+	IFT_HIPPIINTERFACE                = 0x39
+	IFT_HOSTPAD                       = 0x5a
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IBM370PARCHAN                 = 0x48
+	IFT_IDSL                          = 0x9a
+	IFT_IEEE1394                      = 0x90
+	IFT_IEEE80211                     = 0x47
+	IFT_IEEE80212                     = 0x37
+	IFT_IEEE8023ADLAG                 = 0xa1
+	IFT_IFGSN                         = 0x91
+	IFT_IMT                           = 0xbe
+	IFT_INFINIBAND                    = 0xc7
+	IFT_INTERLEAVE                    = 0x7c
+	IFT_IP                            = 0x7e
+	IFT_IPFORWARD                     = 0x8e
+	IFT_IPOVERATM                     = 0x72
+	IFT_IPOVERCDLC                    = 0x6d
+	IFT_IPOVERCLAW                    = 0x6e
+	IFT_IPSWITCH                      = 0x4e
+	IFT_ISDN                          = 0x3f
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISDNS                         = 0x4b
+	IFT_ISDNU                         = 0x4c
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88025CRFPINT               = 0x62
+	IFT_ISO88025DTR                   = 0x56
+	IFT_ISO88025FIBER                 = 0x73
+	IFT_ISO88026                      = 0xa
+	IFT_ISUP                          = 0xb3
+	IFT_L2VLAN                        = 0x87
+	IFT_L3IPVLAN                      = 0x88
+	IFT_L3IPXVLAN                     = 0x89
+	IFT_LAPB                          = 0x10
+	IFT_LAPD                          = 0x4d
+	IFT_LAPF                          = 0x77
+	IFT_LINEGROUP                     = 0xd2
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MEDIAMAILOVERIP               = 0x8b
+	IFT_MFSIGLINK                     = 0xa7
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_MPC                           = 0x71
+	IFT_MPLS                          = 0xa6
+	IFT_MPLSTUNNEL                    = 0x96
+	IFT_MSDSL                         = 0x8f
+	IFT_MVL                           = 0xbf
+	IFT_MYRINET                       = 0x63
+	IFT_NFAS                          = 0xaf
+	IFT_NSIP                          = 0x1b
+	IFT_OPTICALCHANNEL                = 0xc3
+	IFT_OPTICALTRANSPORT              = 0xc4
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PFLOG                         = 0xf5
+	IFT_PFSYNC                        = 0xf6
+	IFT_PLC                           = 0xae
+	IFT_PON155                        = 0xcf
+	IFT_PON622                        = 0xd0
+	IFT_POS                           = 0xab
+	IFT_PPP                           = 0x17
+	IFT_PPPMULTILINKBUNDLE            = 0x6c
+	IFT_PROPATM                       = 0xc5
+	IFT_PROPBWAP2MP                   = 0xb8
+	IFT_PROPCNLS                      = 0x59
+	IFT_PROPDOCSWIRELESSDOWNSTREAM    = 0xb5
+	IFT_PROPDOCSWIRELESSMACLAYER      = 0xb4
+	IFT_PROPDOCSWIRELESSUPSTREAM      = 0xb6
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPVIRTUAL                   = 0x35
+	IFT_PROPWIRELESSP2P               = 0x9d
+	IFT_PTPSERIAL                     = 0x16
+	IFT_PVC                           = 0xf1
+	IFT_Q2931                         = 0xc9
+	IFT_QLLC                          = 0x44
+	IFT_RADIOMAC                      = 0xbc
+	IFT_RADSL                         = 0x5f
+	IFT_REACHDSL                      = 0xc0
+	IFT_RFC1483                       = 0x9f
+	IFT_RS232                         = 0x21
+	IFT_RSRB                          = 0x4f
+	IFT_SDLC                          = 0x11
+	IFT_SDSL                          = 0x60
+	IFT_SHDSL                         = 0xa9
+	IFT_SIP                           = 0x1f
+	IFT_SIPSIG                        = 0xcc
+	IFT_SIPTG                         = 0xcb
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETOVERHEADCHANNEL          = 0xb9
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_SRP                           = 0x97
+	IFT_SS7SIGLINK                    = 0x9c
+	IFT_STACKTOSTACK                  = 0x6f
+	IFT_STARLAN                       = 0xb
+	IFT_STF                           = 0xd7
+	IFT_T1                            = 0x12
+	IFT_TDLC                          = 0x74
+	IFT_TELINK                        = 0xc8
+	IFT_TERMPAD                       = 0x5b
+	IFT_TR008                         = 0xb0
+	IFT_TRANSPHDLC                    = 0x7b
+	IFT_TUNNEL                        = 0x83
+	IFT_ULTRA                         = 0x1d
+	IFT_USB                           = 0xa0
+	IFT_V11                           = 0x40
+	IFT_V35                           = 0x2d
+	IFT_V36                           = 0x41
+	IFT_V37                           = 0x78
+	IFT_VDSL                          = 0x61
+	IFT_VIRTUALIPADDRESS              = 0x70
+	IFT_VIRTUALTG                     = 0xca
+	IFT_VOICEDID                      = 0xd5
+	IFT_VOICEEM                       = 0x64
+	IFT_VOICEEMFGD                    = 0xd3
+	IFT_VOICEENCAP                    = 0x67
+	IFT_VOICEFGDEANA                  = 0xd4
+	IFT_VOICEFXO                      = 0x65
+	IFT_VOICEFXS                      = 0x66
+	IFT_VOICEOVERATM                  = 0x98
+	IFT_VOICEOVERCABLE                = 0xc6
+	IFT_VOICEOVERFRAMERELAY           = 0x99
+	IFT_VOICEOVERIP                   = 0x68
+	IFT_X213                          = 0x5d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25HUNTGROUP                  = 0x7a
+	IFT_X25MLP                        = 0x79
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+	IGNBRK                            = 0x1
+	IGNCR                             = 0x80
+	IGNPAR                            = 0x4
+	IMAXBEL                           = 0x2000
+	INLCR                             = 0x40
+	INPCK                             = 0x10
+	IN_CLASSA_HOST                    = 0xffffff
+	IN_CLASSA_MAX                     = 0x80
+	IN_CLASSA_NET                     = 0xff000000
+	IN_CLASSA_NSHIFT                  = 0x18
+	IN_CLASSB_HOST                    = 0xffff
+	IN_CLASSB_MAX                     = 0x10000
+	IN_CLASSB_NET                     = 0xffff0000
+	IN_CLASSB_NSHIFT                  = 0x10
+	IN_CLASSC_HOST                    = 0xff
+	IN_CLASSC_NET                     = 0xffffff00
+	IN_CLASSC_NSHIFT                  = 0x8
+	IN_CLASSD_HOST                    = 0xfffffff
+	IN_CLASSD_NET                     = 0xf0000000
+	IN_CLASSD_NSHIFT                  = 0x1c
+	IN_LOOPBACKNET                    = 0x7f
+	IPPROTO_AH                        = 0x33
+	IPPROTO_CARP                      = 0x70
+	IPPROTO_DONE                      = 0x101
+	IPPROTO_DSTOPTS                   = 0x3c
+	IPPROTO_EGP                       = 0x8
+	IPPROTO_ENCAP                     = 0x62
+	IPPROTO_EON                       = 0x50
+	IPPROTO_ESP                       = 0x32
+	IPPROTO_ETHERIP                   = 0x61
+	IPPROTO_FRAGMENT                  = 0x2c
+	IPPROTO_GGP                       = 0x3
+	IPPROTO_GRE                       = 0x2f
+	IPPROTO_HOPOPTS                   = 0x0
+	IPPROTO_ICMP                      = 0x1
+	IPPROTO_ICMPV6                    = 0x3a
+	IPPROTO_IDP                       = 0x16
+	IPPROTO_IGMP                      = 0x2
+	IPPROTO_IP                        = 0x0
+	IPPROTO_IPCOMP                    = 0x6c
+	IPPROTO_IPIP                      = 0x4
+	IPPROTO_IPV4                      = 0x4
+	IPPROTO_IPV6                      = 0x29
+	IPPROTO_IPV6_ICMP                 = 0x3a
+	IPPROTO_MAX                       = 0x100
+	IPPROTO_MAXID                     = 0x34
+	IPPROTO_MOBILE                    = 0x37
+	IPPROTO_NONE                      = 0x3b
+	IPPROTO_PFSYNC                    = 0xf0
+	IPPROTO_PIM                       = 0x67
+	IPPROTO_PUP                       = 0xc
+	IPPROTO_RAW                       = 0xff
+	IPPROTO_ROUTING                   = 0x2b
+	IPPROTO_RSVP                      = 0x2e
+	IPPROTO_TCP                       = 0x6
+	IPPROTO_TP                        = 0x1d
+	IPPROTO_UDP                       = 0x11
+	IPPROTO_VRRP                      = 0x70
+	IPV6_CHECKSUM                     = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS       = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP       = 0x1
+	IPV6_DEFHLIM                      = 0x40
+	IPV6_DONTFRAG                     = 0x3e
+	IPV6_DSTOPTS                      = 0x32
+	IPV6_FAITH                        = 0x1d
+	IPV6_FLOWINFO_MASK                = 0xffffff0f
+	IPV6_FLOWLABEL_MASK               = 0xffff0f00
+	IPV6_FRAGTTL                      = 0x78
+	IPV6_HLIMDEC                      = 0x1
+	IPV6_HOPLIMIT                     = 0x2f
+	IPV6_HOPOPTS                      = 0x31
+	IPV6_IPSEC_POLICY                 = 0x1c
+	IPV6_JOIN_GROUP                   = 0xc
+	IPV6_LEAVE_GROUP                  = 0xd
+	IPV6_MAXHLIM                      = 0xff
+	IPV6_MAXPACKET                    = 0xffff
+	IPV6_MMTU                         = 0x500
+	IPV6_MULTICAST_HOPS               = 0xa
+	IPV6_MULTICAST_IF                 = 0x9
+	IPV6_MULTICAST_LOOP               = 0xb
+	IPV6_NEXTHOP                      = 0x30
+	IPV6_PATHMTU                      = 0x2c
+	IPV6_PKTINFO                      = 0x2e
+	IPV6_PORTRANGE                    = 0xe
+	IPV6_PORTRANGE_DEFAULT            = 0x0
+	IPV6_PORTRANGE_HIGH               = 0x1
+	IPV6_PORTRANGE_LOW                = 0x2
+	IPV6_RECVDSTOPTS                  = 0x28
+	IPV6_RECVHOPLIMIT                 = 0x25
+	IPV6_RECVHOPOPTS                  = 0x27
+	IPV6_RECVPATHMTU                  = 0x2b
+	IPV6_RECVPKTINFO                  = 0x24
+	IPV6_RECVRTHDR                    = 0x26
+	IPV6_RECVTCLASS                   = 0x39
+	IPV6_RTHDR                        = 0x33
+	IPV6_RTHDRDSTOPTS                 = 0x23
+	IPV6_RTHDR_LOOSE                  = 0x0
+	IPV6_RTHDR_STRICT                 = 0x1
+	IPV6_RTHDR_TYPE_0                 = 0x0
+	IPV6_SOCKOPT_RESERVED1            = 0x3
+	IPV6_TCLASS                       = 0x3d
+	IPV6_UNICAST_HOPS                 = 0x4
+	IPV6_USE_MIN_MTU                  = 0x2a
+	IPV6_V6ONLY                       = 0x1b
+	IPV6_VERSION                      = 0x60
+	IPV6_VERSION_MASK                 = 0xf0
+	IP_ADD_MEMBERSHIP                 = 0xc
+	IP_DEFAULT_MULTICAST_LOOP         = 0x1
+	IP_DEFAULT_MULTICAST_TTL          = 0x1
+	IP_DF                             = 0x4000
+	IP_DROP_MEMBERSHIP                = 0xd
+	IP_EF                             = 0x8000
+	IP_ERRORMTU                       = 0x15
+	IP_HDRINCL                        = 0x2
+	IP_IPSEC_POLICY                   = 0x16
+	IP_MAXPACKET                      = 0xffff
+	IP_MAX_MEMBERSHIPS                = 0x14
+	IP_MF                             = 0x2000
+	IP_MINFRAGSIZE                    = 0x45
+	IP_MINTTL                         = 0x18
+	IP_MSS                            = 0x240
+	IP_MULTICAST_IF                   = 0x9
+	IP_MULTICAST_LOOP                 = 0xb
+	IP_MULTICAST_TTL                  = 0xa
+	IP_OFFMASK                        = 0x1fff
+	IP_OPTIONS                        = 0x1
+	IP_PORTRANGE                      = 0x13
+	IP_PORTRANGE_DEFAULT              = 0x0
+	IP_PORTRANGE_HIGH                 = 0x1
+	IP_PORTRANGE_LOW                  = 0x2
+	IP_RECVDSTADDR                    = 0x7
+	IP_RECVIF                         = 0x14
+	IP_RECVOPTS                       = 0x5
+	IP_RECVRETOPTS                    = 0x6
+	IP_RECVTTL                        = 0x17
+	IP_RETOPTS                        = 0x8
+	IP_RF                             = 0x8000
+	IP_TOS                            = 0x3
+	IP_TTL                            = 0x4
+	ISIG                              = 0x80
+	ISTRIP                            = 0x20
+	IXANY                             = 0x800
+	IXOFF                             = 0x400
+	IXON                              = 0x200
+	KERN_HOSTNAME                     = 0xa
+	KERN_OSRELEASE                    = 0x2
+	KERN_OSTYPE                       = 0x1
+	KERN_VERSION                      = 0x4
+	LOCK_EX                           = 0x2
+	LOCK_NB                           = 0x4
+	LOCK_SH                           = 0x1
+	LOCK_UN                           = 0x8
+	MADV_DONTNEED                     = 0x4
+	MADV_FREE                         = 0x6
+	MADV_NORMAL                       = 0x0
+	MADV_RANDOM                       = 0x1
+	MADV_SEQUENTIAL                   = 0x2
+	MADV_SPACEAVAIL                   = 0x5
+	MADV_WILLNEED                     = 0x3
+	MAP_ALIGNMENT_16MB                = 0x18000000
+	MAP_ALIGNMENT_1TB                 = 0x28000000
+	MAP_ALIGNMENT_256TB               = 0x30000000
+	MAP_ALIGNMENT_4GB                 = 0x20000000
+	MAP_ALIGNMENT_64KB                = 0x10000000
+	MAP_ALIGNMENT_64PB                = 0x38000000
+	MAP_ALIGNMENT_MASK                = -0x1000000
+	MAP_ALIGNMENT_SHIFT               = 0x18
+	MAP_ANON                          = 0x1000
+	MAP_FILE                          = 0x0
+	MAP_FIXED                         = 0x10
+	MAP_HASSEMAPHORE                  = 0x200
+	MAP_INHERIT                       = 0x80
+	MAP_INHERIT_COPY                  = 0x1
+	MAP_INHERIT_DEFAULT               = 0x1
+	MAP_INHERIT_DONATE_COPY           = 0x3
+	MAP_INHERIT_NONE                  = 0x2
+	MAP_INHERIT_SHARE                 = 0x0
+	MAP_NORESERVE                     = 0x40
+	MAP_PRIVATE                       = 0x2
+	MAP_RENAME                        = 0x20
+	MAP_SHARED                        = 0x1
+	MAP_STACK                         = 0x2000
+	MAP_TRYFIXED                      = 0x400
+	MAP_WIRED                         = 0x800
+	MCL_CURRENT                       = 0x1
+	MCL_FUTURE                        = 0x2
+	MNT_ASYNC                         = 0x40
+	MNT_BASIC_FLAGS                   = 0xe782807f
+	MNT_DEFEXPORTED                   = 0x200
+	MNT_DISCARD                       = 0x800000
+	MNT_EXKERB                        = 0x800
+	MNT_EXNORESPORT                   = 0x8000000
+	MNT_EXPORTANON                    = 0x400
+	MNT_EXPORTED                      = 0x100
+	MNT_EXPUBLIC                      = 0x10000000
+	MNT_EXRDONLY                      = 0x80
+	MNT_EXTATTR                       = 0x1000000
+	MNT_FORCE                         = 0x80000
+	MNT_GETARGS                       = 0x400000
+	MNT_IGNORE                        = 0x100000
+	MNT_LAZY                          = 0x3
+	MNT_LOCAL                         = 0x1000
+	MNT_LOG                           = 0x2000000
+	MNT_NOATIME                       = 0x4000000
+	MNT_NOCOREDUMP                    = 0x8000
+	MNT_NODEV                         = 0x10
+	MNT_NODEVMTIME                    = 0x40000000
+	MNT_NOEXEC                        = 0x4
+	MNT_NOSUID                        = 0x8
+	MNT_NOWAIT                        = 0x2
+	MNT_OP_FLAGS                      = 0x4d0000
+	MNT_QUOTA                         = 0x2000
+	MNT_RDONLY                        = 0x1
+	MNT_RELATIME                      = 0x20000
+	MNT_RELOAD                        = 0x40000
+	MNT_ROOTFS                        = 0x4000
+	MNT_SOFTDEP                       = 0x80000000
+	MNT_SYMPERM                       = 0x20000000
+	MNT_SYNCHRONOUS                   = 0x2
+	MNT_UNION                         = 0x20
+	MNT_UPDATE                        = 0x10000
+	MNT_VISFLAGMASK                   = 0xff90ffff
+	MNT_WAIT                          = 0x1
+	MSG_BCAST                         = 0x100
+	MSG_CMSG_CLOEXEC                  = 0x800
+	MSG_CONTROLMBUF                   = 0x2000000
+	MSG_CTRUNC                        = 0x20
+	MSG_DONTROUTE                     = 0x4
+	MSG_DONTWAIT                      = 0x80
+	MSG_EOR                           = 0x8
+	MSG_IOVUSRSPACE                   = 0x4000000
+	MSG_LENUSRSPACE                   = 0x8000000
+	MSG_MCAST                         = 0x200
+	MSG_NAMEMBUF                      = 0x1000000
+	MSG_NBIO                          = 0x1000
+	MSG_NOSIGNAL                      = 0x400
+	MSG_OOB                           = 0x1
+	MSG_PEEK                          = 0x2
+	MSG_TRUNC                         = 0x10
+	MSG_USERFLAGS                     = 0xffffff
+	MSG_WAITALL                       = 0x40
+	MS_ASYNC                          = 0x1
+	MS_INVALIDATE                     = 0x2
+	MS_SYNC                           = 0x4
+	NAME_MAX                          = 0x1ff
+	NET_RT_DUMP                       = 0x1
+	NET_RT_FLAGS                      = 0x2
+	NET_RT_IFLIST                     = 0x5
+	NET_RT_MAXID                      = 0x6
+	NET_RT_OIFLIST                    = 0x4
+	NET_RT_OOIFLIST                   = 0x3
+	NFDBITS                           = 0x20
+	NOFLSH                            = 0x80000000
+	NOTE_ATTRIB                       = 0x8
+	NOTE_CHILD                        = 0x4
+	NOTE_DELETE                       = 0x1
+	NOTE_EXEC                         = 0x20000000
+	NOTE_EXIT                         = 0x80000000
+	NOTE_EXTEND                       = 0x4
+	NOTE_FORK                         = 0x40000000
+	NOTE_LINK                         = 0x10
+	NOTE_LOWAT                        = 0x1
+	NOTE_PCTRLMASK                    = 0xf0000000
+	NOTE_PDATAMASK                    = 0xfffff
+	NOTE_RENAME                       = 0x20
+	NOTE_REVOKE                       = 0x40
+	NOTE_TRACK                        = 0x1
+	NOTE_TRACKERR                     = 0x2
+	NOTE_WRITE                        = 0x2
+	OCRNL                             = 0x10
+	OFIOGETBMAP                       = 0xc004667a
+	ONLCR                             = 0x2
+	ONLRET                            = 0x40
+	ONOCR                             = 0x20
+	ONOEOT                            = 0x8
+	OPOST                             = 0x1
+	O_ACCMODE                         = 0x3
+	O_ALT_IO                          = 0x40000
+	O_APPEND                          = 0x8
+	O_ASYNC                           = 0x40
+	O_CLOEXEC                         = 0x400000
+	O_CREAT                           = 0x200
+	O_DIRECT                          = 0x80000
+	O_DIRECTORY                       = 0x200000
+	O_DSYNC                           = 0x10000
+	O_EXCL                            = 0x800
+	O_EXLOCK                          = 0x20
+	O_FSYNC                           = 0x80
+	O_NDELAY                          = 0x4
+	O_NOCTTY                          = 0x8000
+	O_NOFOLLOW                        = 0x100
+	O_NONBLOCK                        = 0x4
+	O_NOSIGPIPE                       = 0x1000000
+	O_RDONLY                          = 0x0
+	O_RDWR                            = 0x2
+	O_RSYNC                           = 0x20000
+	O_SHLOCK                          = 0x10
+	O_SYNC                            = 0x80
+	O_TRUNC                           = 0x400
+	O_WRONLY                          = 0x1
+	PARENB                            = 0x1000
+	PARMRK                            = 0x8
+	PARODD                            = 0x2000
+	PENDIN                            = 0x20000000
+	PRIO_PGRP                         = 0x1
+	PRIO_PROCESS                      = 0x0
+	PRIO_USER                         = 0x2
+	PRI_IOFLUSH                       = 0x7c
+	PROT_EXEC                         = 0x4
+	PROT_NONE                         = 0x0
+	PROT_READ                         = 0x1
+	PROT_WRITE                        = 0x2
+	RLIMIT_AS                         = 0xa
+	RLIMIT_CORE                       = 0x4
+	RLIMIT_CPU                        = 0x0
+	RLIMIT_DATA                       = 0x2
+	RLIMIT_FSIZE                      = 0x1
+	RLIMIT_MEMLOCK                    = 0x6
+	RLIMIT_NOFILE                     = 0x8
+	RLIMIT_NPROC                      = 0x7
+	RLIMIT_RSS                        = 0x5
+	RLIMIT_STACK                      = 0x3
+	RLIM_INFINITY                     = 0x7fffffffffffffff
+	RTAX_AUTHOR                       = 0x6
+	RTAX_BRD                          = 0x7
+	RTAX_DST                          = 0x0
+	RTAX_GATEWAY                      = 0x1
+	RTAX_GENMASK                      = 0x3
+	RTAX_IFA                          = 0x5
+	RTAX_IFP                          = 0x4
+	RTAX_MAX                          = 0x9
+	RTAX_NETMASK                      = 0x2
+	RTAX_TAG                          = 0x8
+	RTA_AUTHOR                        = 0x40
+	RTA_BRD                           = 0x80
+	RTA_DST                           = 0x1
+	RTA_GATEWAY                       = 0x2
+	RTA_GENMASK                       = 0x8
+	RTA_IFA                           = 0x20
+	RTA_IFP                           = 0x10
+	RTA_NETMASK                       = 0x4
+	RTA_TAG                           = 0x100
+	RTF_ANNOUNCE                      = 0x20000
+	RTF_BLACKHOLE                     = 0x1000
+	RTF_CLONED                        = 0x2000
+	RTF_CLONING                       = 0x100
+	RTF_DONE                          = 0x40
+	RTF_DYNAMIC                       = 0x10
+	RTF_GATEWAY                       = 0x2
+	RTF_HOST                          = 0x4
+	RTF_LLINFO                        = 0x400
+	RTF_MASK                          = 0x80
+	RTF_MODIFIED                      = 0x20
+	RTF_PROTO1                        = 0x8000
+	RTF_PROTO2                        = 0x4000
+	RTF_REJECT                        = 0x8
+	RTF_SRC                           = 0x10000
+	RTF_STATIC                        = 0x800
+	RTF_UP                            = 0x1
+	RTF_XRESOLVE                      = 0x200
+	RTM_ADD                           = 0x1
+	RTM_CHANGE                        = 0x3
+	RTM_CHGADDR                       = 0x15
+	RTM_DELADDR                       = 0xd
+	RTM_DELETE                        = 0x2
+	RTM_GET                           = 0x4
+	RTM_IEEE80211                     = 0x11
+	RTM_IFANNOUNCE                    = 0x10
+	RTM_IFINFO                        = 0x14
+	RTM_LLINFO_UPD                    = 0x13
+	RTM_LOCK                          = 0x8
+	RTM_LOSING                        = 0x5
+	RTM_MISS                          = 0x7
+	RTM_NEWADDR                       = 0xc
+	RTM_OIFINFO                       = 0xf
+	RTM_OLDADD                        = 0x9
+	RTM_OLDDEL                        = 0xa
+	RTM_OOIFINFO                      = 0xe
+	RTM_REDIRECT                      = 0x6
+	RTM_RESOLVE                       = 0xb
+	RTM_RTTUNIT                       = 0xf4240
+	RTM_SETGATE                       = 0x12
+	RTM_VERSION                       = 0x4
+	RTV_EXPIRE                        = 0x4
+	RTV_HOPCOUNT                      = 0x2
+	RTV_MTU                           = 0x1
+	RTV_RPIPE                         = 0x8
+	RTV_RTT                           = 0x40
+	RTV_RTTVAR                        = 0x80
+	RTV_SPIPE                         = 0x10
+	RTV_SSTHRESH                      = 0x20
+	RUSAGE_CHILDREN                   = -0x1
+	RUSAGE_SELF                       = 0x0
+	SCM_CREDS                         = 0x4
+	SCM_RIGHTS                        = 0x1
+	SCM_TIMESTAMP                     = 0x8
+	SHUT_RD                           = 0x0
+	SHUT_RDWR                         = 0x2
+	SHUT_WR                           = 0x1
+	SIOCADDMULTI                      = 0x80906931
+	SIOCADDRT                         = 0x8038720a
+	SIOCAIFADDR                       = 0x8040691a
+	SIOCALIFADDR                      = 0x8118691c
+	SIOCATMARK                        = 0x40047307
+	SIOCDELMULTI                      = 0x80906932
+	SIOCDELRT                         = 0x8038720b
+	SIOCDIFADDR                       = 0x80906919
+	SIOCDIFPHYADDR                    = 0x80906949
+	SIOCDLIFADDR                      = 0x8118691e
+	SIOCGDRVSPEC                      = 0xc028697b
+	SIOCGETPFSYNC                     = 0xc09069f8
+	SIOCGETSGCNT                      = 0xc0207534
+	SIOCGETVIFCNT                     = 0xc0287533
+	SIOCGHIWAT                        = 0x40047301
+	SIOCGIFADDR                       = 0xc0906921
+	SIOCGIFADDRPREF                   = 0xc0986920
+	SIOCGIFALIAS                      = 0xc040691b
+	SIOCGIFBRDADDR                    = 0xc0906923
+	SIOCGIFCAP                        = 0xc0206976
+	SIOCGIFCONF                       = 0xc0106926
+	SIOCGIFDATA                       = 0xc0986985
+	SIOCGIFDLT                        = 0xc0906977
+	SIOCGIFDSTADDR                    = 0xc0906922
+	SIOCGIFFLAGS                      = 0xc0906911
+	SIOCGIFGENERIC                    = 0xc090693a
+	SIOCGIFMEDIA                      = 0xc0306936
+	SIOCGIFMETRIC                     = 0xc0906917
+	SIOCGIFMTU                        = 0xc090697e
+	SIOCGIFNETMASK                    = 0xc0906925
+	SIOCGIFPDSTADDR                   = 0xc0906948
+	SIOCGIFPSRCADDR                   = 0xc0906947
+	SIOCGLIFADDR                      = 0xc118691d
+	SIOCGLIFPHYADDR                   = 0xc118694b
+	SIOCGLINKSTR                      = 0xc0286987
+	SIOCGLOWAT                        = 0x40047303
+	SIOCGPGRP                         = 0x40047309
+	SIOCGVH                           = 0xc0906983
+	SIOCIFCREATE                      = 0x8090697a
+	SIOCIFDESTROY                     = 0x80906979
+	SIOCIFGCLONERS                    = 0xc0106978
+	SIOCINITIFADDR                    = 0xc0706984
+	SIOCSDRVSPEC                      = 0x8028697b
+	SIOCSETPFSYNC                     = 0x809069f7
+	SIOCSHIWAT                        = 0x80047300
+	SIOCSIFADDR                       = 0x8090690c
+	SIOCSIFADDRPREF                   = 0x8098691f
+	SIOCSIFBRDADDR                    = 0x80906913
+	SIOCSIFCAP                        = 0x80206975
+	SIOCSIFDSTADDR                    = 0x8090690e
+	SIOCSIFFLAGS                      = 0x80906910
+	SIOCSIFGENERIC                    = 0x80906939
+	SIOCSIFMEDIA                      = 0xc0906935
+	SIOCSIFMETRIC                     = 0x80906918
+	SIOCSIFMTU                        = 0x8090697f
+	SIOCSIFNETMASK                    = 0x80906916
+	SIOCSIFPHYADDR                    = 0x80406946
+	SIOCSLIFPHYADDR                   = 0x8118694a
+	SIOCSLINKSTR                      = 0x80286988
+	SIOCSLOWAT                        = 0x80047302
+	SIOCSPGRP                         = 0x80047308
+	SIOCSVH                           = 0xc0906982
+	SIOCZIFDATA                       = 0xc0986986
+	SOCK_CLOEXEC                      = 0x10000000
+	SOCK_DGRAM                        = 0x2
+	SOCK_FLAGS_MASK                   = 0xf0000000
+	SOCK_NONBLOCK                     = 0x20000000
+	SOCK_NOSIGPIPE                    = 0x40000000
+	SOCK_RAW                          = 0x3
+	SOCK_RDM                          = 0x4
+	SOCK_SEQPACKET                    = 0x5
+	SOCK_STREAM                       = 0x1
+	SOL_SOCKET                        = 0xffff
+	SOMAXCONN                         = 0x80
+	SO_ACCEPTCONN                     = 0x2
+	SO_ACCEPTFILTER                   = 0x1000
+	SO_BROADCAST                      = 0x20
+	SO_DEBUG                          = 0x1
+	SO_DONTROUTE                      = 0x10
+	SO_ERROR                          = 0x1007
+	SO_KEEPALIVE                      = 0x8
+	SO_LINGER                         = 0x80
+	SO_NOHEADER                       = 0x100a
+	SO_NOSIGPIPE                      = 0x800
+	SO_OOBINLINE                      = 0x100
+	SO_OVERFLOWED                     = 0x1009
+	SO_RCVBUF                         = 0x1002
+	SO_RCVLOWAT                       = 0x1004
+	SO_RCVTIMEO                       = 0x100c
+	SO_REUSEADDR                      = 0x4
+	SO_REUSEPORT                      = 0x200
+	SO_SNDBUF                         = 0x1001
+	SO_SNDLOWAT                       = 0x1003
+	SO_SNDTIMEO                       = 0x100b
+	SO_TIMESTAMP                      = 0x2000
+	SO_TYPE                           = 0x1008
+	SO_USELOOPBACK                    = 0x40
+	SYSCTL_VERSION                    = 0x1000000
+	SYSCTL_VERS_0                     = 0x0
+	SYSCTL_VERS_1                     = 0x1000000
+	SYSCTL_VERS_MASK                  = 0xff000000
+	S_ARCH1                           = 0x10000
+	S_ARCH2                           = 0x20000
+	S_BLKSIZE                         = 0x200
+	S_IEXEC                           = 0x40
+	S_IFBLK                           = 0x6000
+	S_IFCHR                           = 0x2000
+	S_IFDIR                           = 0x4000
+	S_IFIFO                           = 0x1000
+	S_IFLNK                           = 0xa000
+	S_IFMT                            = 0xf000
+	S_IFREG                           = 0x8000
+	S_IFSOCK                          = 0xc000
+	S_IFWHT                           = 0xe000
+	S_IREAD                           = 0x100
+	S_IRGRP                           = 0x20
+	S_IROTH                           = 0x4
+	S_IRUSR                           = 0x100
+	S_IRWXG                           = 0x38
+	S_IRWXO                           = 0x7
+	S_IRWXU                           = 0x1c0
+	S_ISGID                           = 0x400
+	S_ISTXT                           = 0x200
+	S_ISUID                           = 0x800
+	S_ISVTX                           = 0x200
+	S_IWGRP                           = 0x10
+	S_IWOTH                           = 0x2
+	S_IWRITE                          = 0x80
+	S_IWUSR                           = 0x80
+	S_IXGRP                           = 0x8
+	S_IXOTH                           = 0x1
+	S_IXUSR                           = 0x40
+	S_LOGIN_SET                       = 0x1
+	TCIFLUSH                          = 0x1
+	TCIOFLUSH                         = 0x3
+	TCOFLUSH                          = 0x2
+	TCP_CONGCTL                       = 0x20
+	TCP_KEEPCNT                       = 0x6
+	TCP_KEEPIDLE                      = 0x3
+	TCP_KEEPINIT                      = 0x7
+	TCP_KEEPINTVL                     = 0x5
+	TCP_MAXBURST                      = 0x4
+	TCP_MAXSEG                        = 0x2
+	TCP_MAXWIN                        = 0xffff
+	TCP_MAX_WINSHIFT                  = 0xe
+	TCP_MD5SIG                        = 0x10
+	TCP_MINMSS                        = 0xd8
+	TCP_MSS                           = 0x218
+	TCP_NODELAY                       = 0x1
+	TCSAFLUSH                         = 0x2
+	TIOCCBRK                          = 0x2000747a
+	TIOCCDTR                          = 0x20007478
+	TIOCCONS                          = 0x80047462
+	TIOCDCDTIMESTAMP                  = 0x40107458
+	TIOCDRAIN                         = 0x2000745e
+	TIOCEXCL                          = 0x2000740d
+	TIOCEXT                           = 0x80047460
+	TIOCFLAG_CDTRCTS                  = 0x10
+	TIOCFLAG_CLOCAL                   = 0x2
+	TIOCFLAG_CRTSCTS                  = 0x4
+	TIOCFLAG_MDMBUF                   = 0x8
+	TIOCFLAG_SOFTCAR                  = 0x1
+	TIOCFLUSH                         = 0x80047410
+	TIOCGETA                          = 0x402c7413
+	TIOCGETD                          = 0x4004741a
+	TIOCGFLAGS                        = 0x4004745d
+	TIOCGLINED                        = 0x40207442
+	TIOCGPGRP                         = 0x40047477
+	TIOCGQSIZE                        = 0x40047481
+	TIOCGRANTPT                       = 0x20007447
+	TIOCGSID                          = 0x40047463
+	TIOCGSIZE                         = 0x40087468
+	TIOCGWINSZ                        = 0x40087468
+	TIOCMBIC                          = 0x8004746b
+	TIOCMBIS                          = 0x8004746c
+	TIOCMGET                          = 0x4004746a
+	TIOCMSET                          = 0x8004746d
+	TIOCM_CAR                         = 0x40
+	TIOCM_CD                          = 0x40
+	TIOCM_CTS                         = 0x20
+	TIOCM_DSR                         = 0x100
+	TIOCM_DTR                         = 0x2
+	TIOCM_LE                          = 0x1
+	TIOCM_RI                          = 0x80
+	TIOCM_RNG                         = 0x80
+	TIOCM_RTS                         = 0x4
+	TIOCM_SR                          = 0x10
+	TIOCM_ST                          = 0x8
+	TIOCNOTTY                         = 0x20007471
+	TIOCNXCL                          = 0x2000740e
+	TIOCOUTQ                          = 0x40047473
+	TIOCPKT                           = 0x80047470
+	TIOCPKT_DATA                      = 0x0
+	TIOCPKT_DOSTOP                    = 0x20
+	TIOCPKT_FLUSHREAD                 = 0x1
+	TIOCPKT_FLUSHWRITE                = 0x2
+	TIOCPKT_IOCTL                     = 0x40
+	TIOCPKT_NOSTOP                    = 0x10
+	TIOCPKT_START                     = 0x8
+	TIOCPKT_STOP                      = 0x4
+	TIOCPTMGET                        = 0x40287446
+	TIOCPTSNAME                       = 0x40287448
+	TIOCRCVFRAME                      = 0x80087445
+	TIOCREMOTE                        = 0x80047469
+	TIOCSBRK                          = 0x2000747b
+	TIOCSCTTY                         = 0x20007461
+	TIOCSDTR                          = 0x20007479
+	TIOCSETA                          = 0x802c7414
+	TIOCSETAF                         = 0x802c7416
+	TIOCSETAW                         = 0x802c7415
+	TIOCSETD                          = 0x8004741b
+	TIOCSFLAGS                        = 0x8004745c
+	TIOCSIG                           = 0x2000745f
+	TIOCSLINED                        = 0x80207443
+	TIOCSPGRP                         = 0x80047476
+	TIOCSQSIZE                        = 0x80047480
+	TIOCSSIZE                         = 0x80087467
+	TIOCSTART                         = 0x2000746e
+	TIOCSTAT                          = 0x80047465
+	TIOCSTI                           = 0x80017472
+	TIOCSTOP                          = 0x2000746f
+	TIOCSWINSZ                        = 0x80087467
+	TIOCUCNTL                         = 0x80047466
+	TIOCXMTFRAME                      = 0x80087444
+	TOSTOP                            = 0x400000
+	VDISCARD                          = 0xf
+	VDSUSP                            = 0xb
+	VEOF                              = 0x0
+	VEOL                              = 0x1
+	VEOL2                             = 0x2
+	VERASE                            = 0x3
+	VINTR                             = 0x8
+	VKILL                             = 0x5
+	VLNEXT                            = 0xe
+	VMIN                              = 0x10
+	VQUIT                             = 0x9
+	VREPRINT                          = 0x6
+	VSTART                            = 0xc
+	VSTATUS                           = 0x12
+	VSTOP                             = 0xd
+	VSUSP                             = 0xa
+	VTIME                             = 0x11
+	VWERASE                           = 0x4
+	WALL                              = 0x8
+	WALLSIG                           = 0x8
+	WALTSIG                           = 0x4
+	WCLONE                            = 0x4
+	WCOREFLAG                         = 0x80
+	WNOHANG                           = 0x1
+	WNOWAIT                           = 0x10000
+	WNOZOMBIE                         = 0x20000
+	WOPTSCHECKED                      = 0x40000
+	WSTOPPED                          = 0x7f
+	WUNTRACED                         = 0x2
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADF           = syscall.Errno(0x9)
+	EBADMSG         = syscall.Errno(0x58)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x57)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDOM            = syscall.Errno(0x21)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x52)
+	EILSEQ          = syscall.Errno(0x55)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x60)
+	ELOOP           = syscall.Errno(0x3e)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	EMULTIHOP       = syscall.Errno(0x5e)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x5d)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODATA         = syscall.Errno(0x59)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOLINK         = syscall.Errno(0x5f)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x53)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSR           = syscall.Errno(0x5a)
+	ENOSTR          = syscall.Errno(0x5b)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x56)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x2d)
+	EOVERFLOW       = syscall.Errno(0x54)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTO          = syscall.Errno(0x60)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIME           = syscall.Errno(0x5c)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGPWR    = syscall.Signal(0x20)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large or too small"},
+	{35, "EAGAIN", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol option not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "EOPNOTSUPP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "connection timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disc quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC prog. not avail"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EIDRM", "identifier removed"},
+	{83, "ENOMSG", "no message of desired type"},
+	{84, "EOVERFLOW", "value too large to be stored in data type"},
+	{85, "EILSEQ", "illegal byte sequence"},
+	{86, "ENOTSUP", "not supported"},
+	{87, "ECANCELED", "operation Canceled"},
+	{88, "EBADMSG", "bad or Corrupt message"},
+	{89, "ENODATA", "no message available"},
+	{90, "ENOSR", "no STREAM resources"},
+	{91, "ENOSTR", "not a STREAM"},
+	{92, "ETIME", "STREAM ioctl timeout"},
+	{93, "ENOATTR", "attribute not found"},
+	{94, "EMULTIHOP", "multihop attempted"},
+	{95, "ENOLINK", "link has been severed"},
+	{96, "ELAST", "protocol error"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGIOT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "stopped (signal)"},
+	{18, "SIGTSTP", "stopped"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+	{32, "SIGPWR", "power fail/restart"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_netbsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_netbsd_arm.go
new file mode 100644
index 000000000..c5c03993b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_netbsd_arm.go
@@ -0,0 +1,1758 @@
+// mkerrors.sh -marm
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm,netbsd
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -marm _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                      = 0x10
+	AF_ARP                            = 0x1c
+	AF_BLUETOOTH                      = 0x1f
+	AF_CCITT                          = 0xa
+	AF_CHAOS                          = 0x5
+	AF_CNT                            = 0x15
+	AF_COIP                           = 0x14
+	AF_DATAKIT                        = 0x9
+	AF_DECnet                         = 0xc
+	AF_DLI                            = 0xd
+	AF_E164                           = 0x1a
+	AF_ECMA                           = 0x8
+	AF_HYLINK                         = 0xf
+	AF_IEEE80211                      = 0x20
+	AF_IMPLINK                        = 0x3
+	AF_INET                           = 0x2
+	AF_INET6                          = 0x18
+	AF_IPX                            = 0x17
+	AF_ISDN                           = 0x1a
+	AF_ISO                            = 0x7
+	AF_LAT                            = 0xe
+	AF_LINK                           = 0x12
+	AF_LOCAL                          = 0x1
+	AF_MAX                            = 0x23
+	AF_MPLS                           = 0x21
+	AF_NATM                           = 0x1b
+	AF_NS                             = 0x6
+	AF_OROUTE                         = 0x11
+	AF_OSI                            = 0x7
+	AF_PUP                            = 0x4
+	AF_ROUTE                          = 0x22
+	AF_SNA                            = 0xb
+	AF_UNIX                           = 0x1
+	AF_UNSPEC                         = 0x0
+	ARPHRD_ARCNET                     = 0x7
+	ARPHRD_ETHER                      = 0x1
+	ARPHRD_FRELAY                     = 0xf
+	ARPHRD_IEEE1394                   = 0x18
+	ARPHRD_IEEE802                    = 0x6
+	ARPHRD_STRIP                      = 0x17
+	B0                                = 0x0
+	B110                              = 0x6e
+	B115200                           = 0x1c200
+	B1200                             = 0x4b0
+	B134                              = 0x86
+	B14400                            = 0x3840
+	B150                              = 0x96
+	B1800                             = 0x708
+	B19200                            = 0x4b00
+	B200                              = 0xc8
+	B230400                           = 0x38400
+	B2400                             = 0x960
+	B28800                            = 0x7080
+	B300                              = 0x12c
+	B38400                            = 0x9600
+	B460800                           = 0x70800
+	B4800                             = 0x12c0
+	B50                               = 0x32
+	B57600                            = 0xe100
+	B600                              = 0x258
+	B7200                             = 0x1c20
+	B75                               = 0x4b
+	B76800                            = 0x12c00
+	B921600                           = 0xe1000
+	B9600                             = 0x2580
+	BIOCFEEDBACK                      = 0x8004427d
+	BIOCFLUSH                         = 0x20004268
+	BIOCGBLEN                         = 0x40044266
+	BIOCGDLT                          = 0x4004426a
+	BIOCGDLTLIST                      = 0xc0084277
+	BIOCGETIF                         = 0x4090426b
+	BIOCGFEEDBACK                     = 0x4004427c
+	BIOCGHDRCMPLT                     = 0x40044274
+	BIOCGRTIMEOUT                     = 0x400c427b
+	BIOCGSEESENT                      = 0x40044278
+	BIOCGSTATS                        = 0x4080426f
+	BIOCGSTATSOLD                     = 0x4008426f
+	BIOCIMMEDIATE                     = 0x80044270
+	BIOCPROMISC                       = 0x20004269
+	BIOCSBLEN                         = 0xc0044266
+	BIOCSDLT                          = 0x80044276
+	BIOCSETF                          = 0x80084267
+	BIOCSETIF                         = 0x8090426c
+	BIOCSFEEDBACK                     = 0x8004427d
+	BIOCSHDRCMPLT                     = 0x80044275
+	BIOCSRTIMEOUT                     = 0x800c427a
+	BIOCSSEESENT                      = 0x80044279
+	BIOCSTCPF                         = 0x80084272
+	BIOCSUDPF                         = 0x80084273
+	BIOCVERSION                       = 0x40044271
+	BPF_A                             = 0x10
+	BPF_ABS                           = 0x20
+	BPF_ADD                           = 0x0
+	BPF_ALIGNMENT                     = 0x4
+	BPF_ALIGNMENT32                   = 0x4
+	BPF_ALU                           = 0x4
+	BPF_AND                           = 0x50
+	BPF_B                             = 0x10
+	BPF_DFLTBUFSIZE                   = 0x100000
+	BPF_DIV                           = 0x30
+	BPF_H                             = 0x8
+	BPF_IMM                           = 0x0
+	BPF_IND                           = 0x40
+	BPF_JA                            = 0x0
+	BPF_JEQ                           = 0x10
+	BPF_JGE                           = 0x30
+	BPF_JGT                           = 0x20
+	BPF_JMP                           = 0x5
+	BPF_JSET                          = 0x40
+	BPF_K                             = 0x0
+	BPF_LD                            = 0x0
+	BPF_LDX                           = 0x1
+	BPF_LEN                           = 0x80
+	BPF_LSH                           = 0x60
+	BPF_MAJOR_VERSION                 = 0x1
+	BPF_MAXBUFSIZE                    = 0x1000000
+	BPF_MAXINSNS                      = 0x200
+	BPF_MEM                           = 0x60
+	BPF_MEMWORDS                      = 0x10
+	BPF_MINBUFSIZE                    = 0x20
+	BPF_MINOR_VERSION                 = 0x1
+	BPF_MISC                          = 0x7
+	BPF_MSH                           = 0xa0
+	BPF_MUL                           = 0x20
+	BPF_NEG                           = 0x80
+	BPF_OR                            = 0x40
+	BPF_RELEASE                       = 0x30bb6
+	BPF_RET                           = 0x6
+	BPF_RSH                           = 0x70
+	BPF_ST                            = 0x2
+	BPF_STX                           = 0x3
+	BPF_SUB                           = 0x10
+	BPF_TAX                           = 0x0
+	BPF_TXA                           = 0x80
+	BPF_W                             = 0x0
+	BPF_X                             = 0x8
+	BRKINT                            = 0x2
+	CFLUSH                            = 0xf
+	CLOCAL                            = 0x8000
+	CPUSTATES                         = 0x5
+	CP_IDLE                           = 0x4
+	CP_INTR                           = 0x3
+	CP_NICE                           = 0x1
+	CP_SYS                            = 0x2
+	CP_USER                           = 0x0
+	CREAD                             = 0x800
+	CRTSCTS                           = 0x10000
+	CS5                               = 0x0
+	CS6                               = 0x100
+	CS7                               = 0x200
+	CS8                               = 0x300
+	CSIZE                             = 0x300
+	CSTART                            = 0x11
+	CSTATUS                           = 0x14
+	CSTOP                             = 0x13
+	CSTOPB                            = 0x400
+	CSUSP                             = 0x1a
+	CTL_HW                            = 0x6
+	CTL_KERN                          = 0x1
+	CTL_MAXNAME                       = 0xc
+	CTL_NET                           = 0x4
+	CTL_QUERY                         = -0x2
+	DIOCBSFLUSH                       = 0x20006478
+	DLT_A429                          = 0xb8
+	DLT_A653_ICM                      = 0xb9
+	DLT_AIRONET_HEADER                = 0x78
+	DLT_AOS                           = 0xde
+	DLT_APPLE_IP_OVER_IEEE1394        = 0x8a
+	DLT_ARCNET                        = 0x7
+	DLT_ARCNET_LINUX                  = 0x81
+	DLT_ATM_CLIP                      = 0x13
+	DLT_ATM_RFC1483                   = 0xb
+	DLT_AURORA                        = 0x7e
+	DLT_AX25                          = 0x3
+	DLT_AX25_KISS                     = 0xca
+	DLT_BACNET_MS_TP                  = 0xa5
+	DLT_BLUETOOTH_HCI_H4              = 0xbb
+	DLT_BLUETOOTH_HCI_H4_WITH_PHDR    = 0xc9
+	DLT_CAN20B                        = 0xbe
+	DLT_CAN_SOCKETCAN                 = 0xe3
+	DLT_CHAOS                         = 0x5
+	DLT_CISCO_IOS                     = 0x76
+	DLT_C_HDLC                        = 0x68
+	DLT_C_HDLC_WITH_DIR               = 0xcd
+	DLT_DECT                          = 0xdd
+	DLT_DOCSIS                        = 0x8f
+	DLT_ECONET                        = 0x73
+	DLT_EN10MB                        = 0x1
+	DLT_EN3MB                         = 0x2
+	DLT_ENC                           = 0x6d
+	DLT_ERF                           = 0xc5
+	DLT_ERF_ETH                       = 0xaf
+	DLT_ERF_POS                       = 0xb0
+	DLT_FC_2                          = 0xe0
+	DLT_FC_2_WITH_FRAME_DELIMS        = 0xe1
+	DLT_FDDI                          = 0xa
+	DLT_FLEXRAY                       = 0xd2
+	DLT_FRELAY                        = 0x6b
+	DLT_FRELAY_WITH_DIR               = 0xce
+	DLT_GCOM_SERIAL                   = 0xad
+	DLT_GCOM_T1E1                     = 0xac
+	DLT_GPF_F                         = 0xab
+	DLT_GPF_T                         = 0xaa
+	DLT_GPRS_LLC                      = 0xa9
+	DLT_GSMTAP_ABIS                   = 0xda
+	DLT_GSMTAP_UM                     = 0xd9
+	DLT_HDLC                          = 0x10
+	DLT_HHDLC                         = 0x79
+	DLT_HIPPI                         = 0xf
+	DLT_IBM_SN                        = 0x92
+	DLT_IBM_SP                        = 0x91
+	DLT_IEEE802                       = 0x6
+	DLT_IEEE802_11                    = 0x69
+	DLT_IEEE802_11_RADIO              = 0x7f
+	DLT_IEEE802_11_RADIO_AVS          = 0xa3
+	DLT_IEEE802_15_4                  = 0xc3
+	DLT_IEEE802_15_4_LINUX            = 0xbf
+	DLT_IEEE802_15_4_NONASK_PHY       = 0xd7
+	DLT_IEEE802_16_MAC_CPS            = 0xbc
+	DLT_IEEE802_16_MAC_CPS_RADIO      = 0xc1
+	DLT_IPMB                          = 0xc7
+	DLT_IPMB_LINUX                    = 0xd1
+	DLT_IPNET                         = 0xe2
+	DLT_IPV4                          = 0xe4
+	DLT_IPV6                          = 0xe5
+	DLT_IP_OVER_FC                    = 0x7a
+	DLT_JUNIPER_ATM1                  = 0x89
+	DLT_JUNIPER_ATM2                  = 0x87
+	DLT_JUNIPER_CHDLC                 = 0xb5
+	DLT_JUNIPER_ES                    = 0x84
+	DLT_JUNIPER_ETHER                 = 0xb2
+	DLT_JUNIPER_FRELAY                = 0xb4
+	DLT_JUNIPER_GGSN                  = 0x85
+	DLT_JUNIPER_ISM                   = 0xc2
+	DLT_JUNIPER_MFR                   = 0x86
+	DLT_JUNIPER_MLFR                  = 0x83
+	DLT_JUNIPER_MLPPP                 = 0x82
+	DLT_JUNIPER_MONITOR               = 0xa4
+	DLT_JUNIPER_PIC_PEER              = 0xae
+	DLT_JUNIPER_PPP                   = 0xb3
+	DLT_JUNIPER_PPPOE                 = 0xa7
+	DLT_JUNIPER_PPPOE_ATM             = 0xa8
+	DLT_JUNIPER_SERVICES              = 0x88
+	DLT_JUNIPER_ST                    = 0xc8
+	DLT_JUNIPER_VP                    = 0xb7
+	DLT_LAPB_WITH_DIR                 = 0xcf
+	DLT_LAPD                          = 0xcb
+	DLT_LIN                           = 0xd4
+	DLT_LINUX_EVDEV                   = 0xd8
+	DLT_LINUX_IRDA                    = 0x90
+	DLT_LINUX_LAPD                    = 0xb1
+	DLT_LINUX_SLL                     = 0x71
+	DLT_LOOP                          = 0x6c
+	DLT_LTALK                         = 0x72
+	DLT_MFR                           = 0xb6
+	DLT_MOST                          = 0xd3
+	DLT_MPLS                          = 0xdb
+	DLT_MTP2                          = 0x8c
+	DLT_MTP2_WITH_PHDR                = 0x8b
+	DLT_MTP3                          = 0x8d
+	DLT_NULL                          = 0x0
+	DLT_PCI_EXP                       = 0x7d
+	DLT_PFLOG                         = 0x75
+	DLT_PFSYNC                        = 0x12
+	DLT_PPI                           = 0xc0
+	DLT_PPP                           = 0x9
+	DLT_PPP_BSDOS                     = 0xe
+	DLT_PPP_ETHER                     = 0x33
+	DLT_PPP_PPPD                      = 0xa6
+	DLT_PPP_SERIAL                    = 0x32
+	DLT_PPP_WITH_DIR                  = 0xcc
+	DLT_PRISM_HEADER                  = 0x77
+	DLT_PRONET                        = 0x4
+	DLT_RAIF1                         = 0xc6
+	DLT_RAW                           = 0xc
+	DLT_RAWAF_MASK                    = 0x2240000
+	DLT_RIO                           = 0x7c
+	DLT_SCCP                          = 0x8e
+	DLT_SITA                          = 0xc4
+	DLT_SLIP                          = 0x8
+	DLT_SLIP_BSDOS                    = 0xd
+	DLT_SUNATM                        = 0x7b
+	DLT_SYMANTEC_FIREWALL             = 0x63
+	DLT_TZSP                          = 0x80
+	DLT_USB                           = 0xba
+	DLT_USB_LINUX                     = 0xbd
+	DLT_USB_LINUX_MMAPPED             = 0xdc
+	DLT_WIHART                        = 0xdf
+	DLT_X2E_SERIAL                    = 0xd5
+	DLT_X2E_XORAYA                    = 0xd6
+	DT_BLK                            = 0x6
+	DT_CHR                            = 0x2
+	DT_DIR                            = 0x4
+	DT_FIFO                           = 0x1
+	DT_LNK                            = 0xa
+	DT_REG                            = 0x8
+	DT_SOCK                           = 0xc
+	DT_UNKNOWN                        = 0x0
+	DT_WHT                            = 0xe
+	ECHO                              = 0x8
+	ECHOCTL                           = 0x40
+	ECHOE                             = 0x2
+	ECHOK                             = 0x4
+	ECHOKE                            = 0x1
+	ECHONL                            = 0x10
+	ECHOPRT                           = 0x20
+	EMUL_LINUX                        = 0x1
+	EMUL_LINUX32                      = 0x5
+	EMUL_MAXID                        = 0x6
+	ETHERCAP_JUMBO_MTU                = 0x4
+	ETHERCAP_VLAN_HWTAGGING           = 0x2
+	ETHERCAP_VLAN_MTU                 = 0x1
+	ETHERMIN                          = 0x2e
+	ETHERMTU                          = 0x5dc
+	ETHERMTU_JUMBO                    = 0x2328
+	ETHERTYPE_8023                    = 0x4
+	ETHERTYPE_AARP                    = 0x80f3
+	ETHERTYPE_ACCTON                  = 0x8390
+	ETHERTYPE_AEONIC                  = 0x8036
+	ETHERTYPE_ALPHA                   = 0x814a
+	ETHERTYPE_AMBER                   = 0x6008
+	ETHERTYPE_AMOEBA                  = 0x8145
+	ETHERTYPE_APOLLO                  = 0x80f7
+	ETHERTYPE_APOLLODOMAIN            = 0x8019
+	ETHERTYPE_APPLETALK               = 0x809b
+	ETHERTYPE_APPLITEK                = 0x80c7
+	ETHERTYPE_ARGONAUT                = 0x803a
+	ETHERTYPE_ARP                     = 0x806
+	ETHERTYPE_AT                      = 0x809b
+	ETHERTYPE_ATALK                   = 0x809b
+	ETHERTYPE_ATOMIC                  = 0x86df
+	ETHERTYPE_ATT                     = 0x8069
+	ETHERTYPE_ATTSTANFORD             = 0x8008
+	ETHERTYPE_AUTOPHON                = 0x806a
+	ETHERTYPE_AXIS                    = 0x8856
+	ETHERTYPE_BCLOOP                  = 0x9003
+	ETHERTYPE_BOFL                    = 0x8102
+	ETHERTYPE_CABLETRON               = 0x7034
+	ETHERTYPE_CHAOS                   = 0x804
+	ETHERTYPE_COMDESIGN               = 0x806c
+	ETHERTYPE_COMPUGRAPHIC            = 0x806d
+	ETHERTYPE_COUNTERPOINT            = 0x8062
+	ETHERTYPE_CRONUS                  = 0x8004
+	ETHERTYPE_CRONUSVLN               = 0x8003
+	ETHERTYPE_DCA                     = 0x1234
+	ETHERTYPE_DDE                     = 0x807b
+	ETHERTYPE_DEBNI                   = 0xaaaa
+	ETHERTYPE_DECAM                   = 0x8048
+	ETHERTYPE_DECCUST                 = 0x6006
+	ETHERTYPE_DECDIAG                 = 0x6005
+	ETHERTYPE_DECDNS                  = 0x803c
+	ETHERTYPE_DECDTS                  = 0x803e
+	ETHERTYPE_DECEXPER                = 0x6000
+	ETHERTYPE_DECLAST                 = 0x8041
+	ETHERTYPE_DECLTM                  = 0x803f
+	ETHERTYPE_DECMUMPS                = 0x6009
+	ETHERTYPE_DECNETBIOS              = 0x8040
+	ETHERTYPE_DELTACON                = 0x86de
+	ETHERTYPE_DIDDLE                  = 0x4321
+	ETHERTYPE_DLOG1                   = 0x660
+	ETHERTYPE_DLOG2                   = 0x661
+	ETHERTYPE_DN                      = 0x6003
+	ETHERTYPE_DOGFIGHT                = 0x1989
+	ETHERTYPE_DSMD                    = 0x8039
+	ETHERTYPE_ECMA                    = 0x803
+	ETHERTYPE_ENCRYPT                 = 0x803d
+	ETHERTYPE_ES                      = 0x805d
+	ETHERTYPE_EXCELAN                 = 0x8010
+	ETHERTYPE_EXPERDATA               = 0x8049
+	ETHERTYPE_FLIP                    = 0x8146
+	ETHERTYPE_FLOWCONTROL             = 0x8808
+	ETHERTYPE_FRARP                   = 0x808
+	ETHERTYPE_GENDYN                  = 0x8068
+	ETHERTYPE_HAYES                   = 0x8130
+	ETHERTYPE_HIPPI_FP                = 0x8180
+	ETHERTYPE_HITACHI                 = 0x8820
+	ETHERTYPE_HP                      = 0x8005
+	ETHERTYPE_IEEEPUP                 = 0xa00
+	ETHERTYPE_IEEEPUPAT               = 0xa01
+	ETHERTYPE_IMLBL                   = 0x4c42
+	ETHERTYPE_IMLBLDIAG               = 0x424c
+	ETHERTYPE_IP                      = 0x800
+	ETHERTYPE_IPAS                    = 0x876c
+	ETHERTYPE_IPV6                    = 0x86dd
+	ETHERTYPE_IPX                     = 0x8137
+	ETHERTYPE_IPXNEW                  = 0x8037
+	ETHERTYPE_KALPANA                 = 0x8582
+	ETHERTYPE_LANBRIDGE               = 0x8038
+	ETHERTYPE_LANPROBE                = 0x8888
+	ETHERTYPE_LAT                     = 0x6004
+	ETHERTYPE_LBACK                   = 0x9000
+	ETHERTYPE_LITTLE                  = 0x8060
+	ETHERTYPE_LOGICRAFT               = 0x8148
+	ETHERTYPE_LOOPBACK                = 0x9000
+	ETHERTYPE_MATRA                   = 0x807a
+	ETHERTYPE_MAX                     = 0xffff
+	ETHERTYPE_MERIT                   = 0x807c
+	ETHERTYPE_MICP                    = 0x873a
+	ETHERTYPE_MOPDL                   = 0x6001
+	ETHERTYPE_MOPRC                   = 0x6002
+	ETHERTYPE_MOTOROLA                = 0x818d
+	ETHERTYPE_MPLS                    = 0x8847
+	ETHERTYPE_MPLS_MCAST              = 0x8848
+	ETHERTYPE_MUMPS                   = 0x813f
+	ETHERTYPE_NBPCC                   = 0x3c04
+	ETHERTYPE_NBPCLAIM                = 0x3c09
+	ETHERTYPE_NBPCLREQ                = 0x3c05
+	ETHERTYPE_NBPCLRSP                = 0x3c06
+	ETHERTYPE_NBPCREQ                 = 0x3c02
+	ETHERTYPE_NBPCRSP                 = 0x3c03
+	ETHERTYPE_NBPDG                   = 0x3c07
+	ETHERTYPE_NBPDGB                  = 0x3c08
+	ETHERTYPE_NBPDLTE                 = 0x3c0a
+	ETHERTYPE_NBPRAR                  = 0x3c0c
+	ETHERTYPE_NBPRAS                  = 0x3c0b
+	ETHERTYPE_NBPRST                  = 0x3c0d
+	ETHERTYPE_NBPSCD                  = 0x3c01
+	ETHERTYPE_NBPVCD                  = 0x3c00
+	ETHERTYPE_NBS                     = 0x802
+	ETHERTYPE_NCD                     = 0x8149
+	ETHERTYPE_NESTAR                  = 0x8006
+	ETHERTYPE_NETBEUI                 = 0x8191
+	ETHERTYPE_NOVELL                  = 0x8138
+	ETHERTYPE_NS                      = 0x600
+	ETHERTYPE_NSAT                    = 0x601
+	ETHERTYPE_NSCOMPAT                = 0x807
+	ETHERTYPE_NTRAILER                = 0x10
+	ETHERTYPE_OS9                     = 0x7007
+	ETHERTYPE_OS9NET                  = 0x7009
+	ETHERTYPE_PACER                   = 0x80c6
+	ETHERTYPE_PAE                     = 0x888e
+	ETHERTYPE_PCS                     = 0x4242
+	ETHERTYPE_PLANNING                = 0x8044
+	ETHERTYPE_PPP                     = 0x880b
+	ETHERTYPE_PPPOE                   = 0x8864
+	ETHERTYPE_PPPOEDISC               = 0x8863
+	ETHERTYPE_PRIMENTS                = 0x7031
+	ETHERTYPE_PUP                     = 0x200
+	ETHERTYPE_PUPAT                   = 0x200
+	ETHERTYPE_RACAL                   = 0x7030
+	ETHERTYPE_RATIONAL                = 0x8150
+	ETHERTYPE_RAWFR                   = 0x6559
+	ETHERTYPE_RCL                     = 0x1995
+	ETHERTYPE_RDP                     = 0x8739
+	ETHERTYPE_RETIX                   = 0x80f2
+	ETHERTYPE_REVARP                  = 0x8035
+	ETHERTYPE_SCA                     = 0x6007
+	ETHERTYPE_SECTRA                  = 0x86db
+	ETHERTYPE_SECUREDATA              = 0x876d
+	ETHERTYPE_SGITW                   = 0x817e
+	ETHERTYPE_SG_BOUNCE               = 0x8016
+	ETHERTYPE_SG_DIAG                 = 0x8013
+	ETHERTYPE_SG_NETGAMES             = 0x8014
+	ETHERTYPE_SG_RESV                 = 0x8015
+	ETHERTYPE_SIMNET                  = 0x5208
+	ETHERTYPE_SLOWPROTOCOLS           = 0x8809
+	ETHERTYPE_SNA                     = 0x80d5
+	ETHERTYPE_SNMP                    = 0x814c
+	ETHERTYPE_SONIX                   = 0xfaf5
+	ETHERTYPE_SPIDER                  = 0x809f
+	ETHERTYPE_SPRITE                  = 0x500
+	ETHERTYPE_STP                     = 0x8181
+	ETHERTYPE_TALARIS                 = 0x812b
+	ETHERTYPE_TALARISMC               = 0x852b
+	ETHERTYPE_TCPCOMP                 = 0x876b
+	ETHERTYPE_TCPSM                   = 0x9002
+	ETHERTYPE_TEC                     = 0x814f
+	ETHERTYPE_TIGAN                   = 0x802f
+	ETHERTYPE_TRAIL                   = 0x1000
+	ETHERTYPE_TRANSETHER              = 0x6558
+	ETHERTYPE_TYMSHARE                = 0x802e
+	ETHERTYPE_UBBST                   = 0x7005
+	ETHERTYPE_UBDEBUG                 = 0x900
+	ETHERTYPE_UBDIAGLOOP              = 0x7002
+	ETHERTYPE_UBDL                    = 0x7000
+	ETHERTYPE_UBNIU                   = 0x7001
+	ETHERTYPE_UBNMC                   = 0x7003
+	ETHERTYPE_VALID                   = 0x1600
+	ETHERTYPE_VARIAN                  = 0x80dd
+	ETHERTYPE_VAXELN                  = 0x803b
+	ETHERTYPE_VEECO                   = 0x8067
+	ETHERTYPE_VEXP                    = 0x805b
+	ETHERTYPE_VGLAB                   = 0x8131
+	ETHERTYPE_VINES                   = 0xbad
+	ETHERTYPE_VINESECHO               = 0xbaf
+	ETHERTYPE_VINESLOOP               = 0xbae
+	ETHERTYPE_VITAL                   = 0xff00
+	ETHERTYPE_VLAN                    = 0x8100
+	ETHERTYPE_VLTLMAN                 = 0x8080
+	ETHERTYPE_VPROD                   = 0x805c
+	ETHERTYPE_VURESERVED              = 0x8147
+	ETHERTYPE_WATERLOO                = 0x8130
+	ETHERTYPE_WELLFLEET               = 0x8103
+	ETHERTYPE_X25                     = 0x805
+	ETHERTYPE_X75                     = 0x801
+	ETHERTYPE_XNSSM                   = 0x9001
+	ETHERTYPE_XTP                     = 0x817d
+	ETHER_ADDR_LEN                    = 0x6
+	ETHER_CRC_LEN                     = 0x4
+	ETHER_CRC_POLY_BE                 = 0x4c11db6
+	ETHER_CRC_POLY_LE                 = 0xedb88320
+	ETHER_HDR_LEN                     = 0xe
+	ETHER_MAX_LEN                     = 0x5ee
+	ETHER_MAX_LEN_JUMBO               = 0x233a
+	ETHER_MIN_LEN                     = 0x40
+	ETHER_PPPOE_ENCAP_LEN             = 0x8
+	ETHER_TYPE_LEN                    = 0x2
+	ETHER_VLAN_ENCAP_LEN              = 0x4
+	EVFILT_AIO                        = 0x2
+	EVFILT_PROC                       = 0x4
+	EVFILT_READ                       = 0x0
+	EVFILT_SIGNAL                     = 0x5
+	EVFILT_SYSCOUNT                   = 0x7
+	EVFILT_TIMER                      = 0x6
+	EVFILT_VNODE                      = 0x3
+	EVFILT_WRITE                      = 0x1
+	EV_ADD                            = 0x1
+	EV_CLEAR                          = 0x20
+	EV_DELETE                         = 0x2
+	EV_DISABLE                        = 0x8
+	EV_ENABLE                         = 0x4
+	EV_EOF                            = 0x8000
+	EV_ERROR                          = 0x4000
+	EV_FLAG1                          = 0x2000
+	EV_ONESHOT                        = 0x10
+	EV_SYSFLAGS                       = 0xf000
+	EXTA                              = 0x4b00
+	EXTATTR_CMD_START                 = 0x1
+	EXTATTR_CMD_STOP                  = 0x2
+	EXTATTR_NAMESPACE_SYSTEM          = 0x2
+	EXTATTR_NAMESPACE_USER            = 0x1
+	EXTB                              = 0x9600
+	EXTPROC                           = 0x800
+	FD_CLOEXEC                        = 0x1
+	FD_SETSIZE                        = 0x100
+	FLUSHO                            = 0x800000
+	F_CLOSEM                          = 0xa
+	F_DUPFD                           = 0x0
+	F_DUPFD_CLOEXEC                   = 0xc
+	F_FSCTL                           = -0x80000000
+	F_FSDIRMASK                       = 0x70000000
+	F_FSIN                            = 0x10000000
+	F_FSINOUT                         = 0x30000000
+	F_FSOUT                           = 0x20000000
+	F_FSPRIV                          = 0x8000
+	F_FSVOID                          = 0x40000000
+	F_GETFD                           = 0x1
+	F_GETFL                           = 0x3
+	F_GETLK                           = 0x7
+	F_GETNOSIGPIPE                    = 0xd
+	F_GETOWN                          = 0x5
+	F_MAXFD                           = 0xb
+	F_OK                              = 0x0
+	F_PARAM_MASK                      = 0xfff
+	F_PARAM_MAX                       = 0xfff
+	F_RDLCK                           = 0x1
+	F_SETFD                           = 0x2
+	F_SETFL                           = 0x4
+	F_SETLK                           = 0x8
+	F_SETLKW                          = 0x9
+	F_SETNOSIGPIPE                    = 0xe
+	F_SETOWN                          = 0x6
+	F_UNLCK                           = 0x2
+	F_WRLCK                           = 0x3
+	HUPCL                             = 0x4000
+	HW_MACHINE                        = 0x1
+	ICANON                            = 0x100
+	ICMP6_FILTER                      = 0x12
+	ICRNL                             = 0x100
+	IEXTEN                            = 0x400
+	IFAN_ARRIVAL                      = 0x0
+	IFAN_DEPARTURE                    = 0x1
+	IFA_ROUTE                         = 0x1
+	IFF_ALLMULTI                      = 0x200
+	IFF_BROADCAST                     = 0x2
+	IFF_CANTCHANGE                    = 0x8f52
+	IFF_DEBUG                         = 0x4
+	IFF_LINK0                         = 0x1000
+	IFF_LINK1                         = 0x2000
+	IFF_LINK2                         = 0x4000
+	IFF_LOOPBACK                      = 0x8
+	IFF_MULTICAST                     = 0x8000
+	IFF_NOARP                         = 0x80
+	IFF_NOTRAILERS                    = 0x20
+	IFF_OACTIVE                       = 0x400
+	IFF_POINTOPOINT                   = 0x10
+	IFF_PROMISC                       = 0x100
+	IFF_RUNNING                       = 0x40
+	IFF_SIMPLEX                       = 0x800
+	IFF_UP                            = 0x1
+	IFNAMSIZ                          = 0x10
+	IFT_1822                          = 0x2
+	IFT_A12MPPSWITCH                  = 0x82
+	IFT_AAL2                          = 0xbb
+	IFT_AAL5                          = 0x31
+	IFT_ADSL                          = 0x5e
+	IFT_AFLANE8023                    = 0x3b
+	IFT_AFLANE8025                    = 0x3c
+	IFT_ARAP                          = 0x58
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ASYNC                         = 0x54
+	IFT_ATM                           = 0x25
+	IFT_ATMDXI                        = 0x69
+	IFT_ATMFUNI                       = 0x6a
+	IFT_ATMIMA                        = 0x6b
+	IFT_ATMLOGICAL                    = 0x50
+	IFT_ATMRADIO                      = 0xbd
+	IFT_ATMSUBINTERFACE               = 0x86
+	IFT_ATMVCIENDPT                   = 0xc2
+	IFT_ATMVIRTUAL                    = 0x95
+	IFT_BGPPOLICYACCOUNTING           = 0xa2
+	IFT_BRIDGE                        = 0xd1
+	IFT_BSC                           = 0x53
+	IFT_CARP                          = 0xf8
+	IFT_CCTEMUL                       = 0x3d
+	IFT_CEPT                          = 0x13
+	IFT_CES                           = 0x85
+	IFT_CHANNEL                       = 0x46
+	IFT_CNR                           = 0x55
+	IFT_COFFEE                        = 0x84
+	IFT_COMPOSITELINK                 = 0x9b
+	IFT_DCN                           = 0x8d
+	IFT_DIGITALPOWERLINE              = 0x8a
+	IFT_DIGITALWRAPPEROVERHEADCHANNEL = 0xba
+	IFT_DLSW                          = 0x4a
+	IFT_DOCSCABLEDOWNSTREAM           = 0x80
+	IFT_DOCSCABLEMACLAYER             = 0x7f
+	IFT_DOCSCABLEUPSTREAM             = 0x81
+	IFT_DOCSCABLEUPSTREAMCHANNEL      = 0xcd
+	IFT_DS0                           = 0x51
+	IFT_DS0BUNDLE                     = 0x52
+	IFT_DS1FDL                        = 0xaa
+	IFT_DS3                           = 0x1e
+	IFT_DTM                           = 0x8c
+	IFT_DVBASILN                      = 0xac
+	IFT_DVBASIOUT                     = 0xad
+	IFT_DVBRCCDOWNSTREAM              = 0x93
+	IFT_DVBRCCMACLAYER                = 0x92
+	IFT_DVBRCCUPSTREAM                = 0x94
+	IFT_ECONET                        = 0xce
+	IFT_EON                           = 0x19
+	IFT_EPLRS                         = 0x57
+	IFT_ESCON                         = 0x49
+	IFT_ETHER                         = 0x6
+	IFT_FAITH                         = 0xf2
+	IFT_FAST                          = 0x7d
+	IFT_FASTETHER                     = 0x3e
+	IFT_FASTETHERFX                   = 0x45
+	IFT_FDDI                          = 0xf
+	IFT_FIBRECHANNEL                  = 0x38
+	IFT_FRAMERELAYINTERCONNECT        = 0x3a
+	IFT_FRAMERELAYMPI                 = 0x5c
+	IFT_FRDLCIENDPT                   = 0xc1
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_FRF16MFRBUNDLE                = 0xa3
+	IFT_FRFORWARD                     = 0x9e
+	IFT_G703AT2MB                     = 0x43
+	IFT_G703AT64K                     = 0x42
+	IFT_GIF                           = 0xf0
+	IFT_GIGABITETHERNET               = 0x75
+	IFT_GR303IDT                      = 0xb2
+	IFT_GR303RDT                      = 0xb1
+	IFT_H323GATEKEEPER                = 0xa4
+	IFT_H323PROXY                     = 0xa5
+	IFT_HDH1822                       = 0x3
+	IFT_HDLC                          = 0x76
+	IFT_HDSL2                         = 0xa8
+	IFT_HIPERLAN2                     = 0xb7
+	IFT_HIPPI                         = 0x2f
+	IFT_HIPPIINTERFACE                = 0x39
+	IFT_HOSTPAD                       = 0x5a
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IBM370PARCHAN                 = 0x48
+	IFT_IDSL                          = 0x9a
+	IFT_IEEE1394                      = 0x90
+	IFT_IEEE80211                     = 0x47
+	IFT_IEEE80212                     = 0x37
+	IFT_IEEE8023ADLAG                 = 0xa1
+	IFT_IFGSN                         = 0x91
+	IFT_IMT                           = 0xbe
+	IFT_INFINIBAND                    = 0xc7
+	IFT_INTERLEAVE                    = 0x7c
+	IFT_IP                            = 0x7e
+	IFT_IPFORWARD                     = 0x8e
+	IFT_IPOVERATM                     = 0x72
+	IFT_IPOVERCDLC                    = 0x6d
+	IFT_IPOVERCLAW                    = 0x6e
+	IFT_IPSWITCH                      = 0x4e
+	IFT_ISDN                          = 0x3f
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISDNS                         = 0x4b
+	IFT_ISDNU                         = 0x4c
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88025CRFPINT               = 0x62
+	IFT_ISO88025DTR                   = 0x56
+	IFT_ISO88025FIBER                 = 0x73
+	IFT_ISO88026                      = 0xa
+	IFT_ISUP                          = 0xb3
+	IFT_L2VLAN                        = 0x87
+	IFT_L3IPVLAN                      = 0x88
+	IFT_L3IPXVLAN                     = 0x89
+	IFT_LAPB                          = 0x10
+	IFT_LAPD                          = 0x4d
+	IFT_LAPF                          = 0x77
+	IFT_LINEGROUP                     = 0xd2
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MEDIAMAILOVERIP               = 0x8b
+	IFT_MFSIGLINK                     = 0xa7
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_MPC                           = 0x71
+	IFT_MPLS                          = 0xa6
+	IFT_MPLSTUNNEL                    = 0x96
+	IFT_MSDSL                         = 0x8f
+	IFT_MVL                           = 0xbf
+	IFT_MYRINET                       = 0x63
+	IFT_NFAS                          = 0xaf
+	IFT_NSIP                          = 0x1b
+	IFT_OPTICALCHANNEL                = 0xc3
+	IFT_OPTICALTRANSPORT              = 0xc4
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PFLOG                         = 0xf5
+	IFT_PFSYNC                        = 0xf6
+	IFT_PLC                           = 0xae
+	IFT_PON155                        = 0xcf
+	IFT_PON622                        = 0xd0
+	IFT_POS                           = 0xab
+	IFT_PPP                           = 0x17
+	IFT_PPPMULTILINKBUNDLE            = 0x6c
+	IFT_PROPATM                       = 0xc5
+	IFT_PROPBWAP2MP                   = 0xb8
+	IFT_PROPCNLS                      = 0x59
+	IFT_PROPDOCSWIRELESSDOWNSTREAM    = 0xb5
+	IFT_PROPDOCSWIRELESSMACLAYER      = 0xb4
+	IFT_PROPDOCSWIRELESSUPSTREAM      = 0xb6
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPVIRTUAL                   = 0x35
+	IFT_PROPWIRELESSP2P               = 0x9d
+	IFT_PTPSERIAL                     = 0x16
+	IFT_PVC                           = 0xf1
+	IFT_Q2931                         = 0xc9
+	IFT_QLLC                          = 0x44
+	IFT_RADIOMAC                      = 0xbc
+	IFT_RADSL                         = 0x5f
+	IFT_REACHDSL                      = 0xc0
+	IFT_RFC1483                       = 0x9f
+	IFT_RS232                         = 0x21
+	IFT_RSRB                          = 0x4f
+	IFT_SDLC                          = 0x11
+	IFT_SDSL                          = 0x60
+	IFT_SHDSL                         = 0xa9
+	IFT_SIP                           = 0x1f
+	IFT_SIPSIG                        = 0xcc
+	IFT_SIPTG                         = 0xcb
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETOVERHEADCHANNEL          = 0xb9
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_SRP                           = 0x97
+	IFT_SS7SIGLINK                    = 0x9c
+	IFT_STACKTOSTACK                  = 0x6f
+	IFT_STARLAN                       = 0xb
+	IFT_STF                           = 0xd7
+	IFT_T1                            = 0x12
+	IFT_TDLC                          = 0x74
+	IFT_TELINK                        = 0xc8
+	IFT_TERMPAD                       = 0x5b
+	IFT_TR008                         = 0xb0
+	IFT_TRANSPHDLC                    = 0x7b
+	IFT_TUNNEL                        = 0x83
+	IFT_ULTRA                         = 0x1d
+	IFT_USB                           = 0xa0
+	IFT_V11                           = 0x40
+	IFT_V35                           = 0x2d
+	IFT_V36                           = 0x41
+	IFT_V37                           = 0x78
+	IFT_VDSL                          = 0x61
+	IFT_VIRTUALIPADDRESS              = 0x70
+	IFT_VIRTUALTG                     = 0xca
+	IFT_VOICEDID                      = 0xd5
+	IFT_VOICEEM                       = 0x64
+	IFT_VOICEEMFGD                    = 0xd3
+	IFT_VOICEENCAP                    = 0x67
+	IFT_VOICEFGDEANA                  = 0xd4
+	IFT_VOICEFXO                      = 0x65
+	IFT_VOICEFXS                      = 0x66
+	IFT_VOICEOVERATM                  = 0x98
+	IFT_VOICEOVERCABLE                = 0xc6
+	IFT_VOICEOVERFRAMERELAY           = 0x99
+	IFT_VOICEOVERIP                   = 0x68
+	IFT_X213                          = 0x5d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25HUNTGROUP                  = 0x7a
+	IFT_X25MLP                        = 0x79
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+	IGNBRK                            = 0x1
+	IGNCR                             = 0x80
+	IGNPAR                            = 0x4
+	IMAXBEL                           = 0x2000
+	INLCR                             = 0x40
+	INPCK                             = 0x10
+	IN_CLASSA_HOST                    = 0xffffff
+	IN_CLASSA_MAX                     = 0x80
+	IN_CLASSA_NET                     = 0xff000000
+	IN_CLASSA_NSHIFT                  = 0x18
+	IN_CLASSB_HOST                    = 0xffff
+	IN_CLASSB_MAX                     = 0x10000
+	IN_CLASSB_NET                     = 0xffff0000
+	IN_CLASSB_NSHIFT                  = 0x10
+	IN_CLASSC_HOST                    = 0xff
+	IN_CLASSC_NET                     = 0xffffff00
+	IN_CLASSC_NSHIFT                  = 0x8
+	IN_CLASSD_HOST                    = 0xfffffff
+	IN_CLASSD_NET                     = 0xf0000000
+	IN_CLASSD_NSHIFT                  = 0x1c
+	IN_LOOPBACKNET                    = 0x7f
+	IPPROTO_AH                        = 0x33
+	IPPROTO_CARP                      = 0x70
+	IPPROTO_DONE                      = 0x101
+	IPPROTO_DSTOPTS                   = 0x3c
+	IPPROTO_EGP                       = 0x8
+	IPPROTO_ENCAP                     = 0x62
+	IPPROTO_EON                       = 0x50
+	IPPROTO_ESP                       = 0x32
+	IPPROTO_ETHERIP                   = 0x61
+	IPPROTO_FRAGMENT                  = 0x2c
+	IPPROTO_GGP                       = 0x3
+	IPPROTO_GRE                       = 0x2f
+	IPPROTO_HOPOPTS                   = 0x0
+	IPPROTO_ICMP                      = 0x1
+	IPPROTO_ICMPV6                    = 0x3a
+	IPPROTO_IDP                       = 0x16
+	IPPROTO_IGMP                      = 0x2
+	IPPROTO_IP                        = 0x0
+	IPPROTO_IPCOMP                    = 0x6c
+	IPPROTO_IPIP                      = 0x4
+	IPPROTO_IPV4                      = 0x4
+	IPPROTO_IPV6                      = 0x29
+	IPPROTO_IPV6_ICMP                 = 0x3a
+	IPPROTO_MAX                       = 0x100
+	IPPROTO_MAXID                     = 0x34
+	IPPROTO_MOBILE                    = 0x37
+	IPPROTO_NONE                      = 0x3b
+	IPPROTO_PFSYNC                    = 0xf0
+	IPPROTO_PIM                       = 0x67
+	IPPROTO_PUP                       = 0xc
+	IPPROTO_RAW                       = 0xff
+	IPPROTO_ROUTING                   = 0x2b
+	IPPROTO_RSVP                      = 0x2e
+	IPPROTO_TCP                       = 0x6
+	IPPROTO_TP                        = 0x1d
+	IPPROTO_UDP                       = 0x11
+	IPPROTO_VRRP                      = 0x70
+	IPV6_CHECKSUM                     = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS       = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP       = 0x1
+	IPV6_DEFHLIM                      = 0x40
+	IPV6_DONTFRAG                     = 0x3e
+	IPV6_DSTOPTS                      = 0x32
+	IPV6_FAITH                        = 0x1d
+	IPV6_FLOWINFO_MASK                = 0xffffff0f
+	IPV6_FLOWLABEL_MASK               = 0xffff0f00
+	IPV6_FRAGTTL                      = 0x78
+	IPV6_HLIMDEC                      = 0x1
+	IPV6_HOPLIMIT                     = 0x2f
+	IPV6_HOPOPTS                      = 0x31
+	IPV6_IPSEC_POLICY                 = 0x1c
+	IPV6_JOIN_GROUP                   = 0xc
+	IPV6_LEAVE_GROUP                  = 0xd
+	IPV6_MAXHLIM                      = 0xff
+	IPV6_MAXPACKET                    = 0xffff
+	IPV6_MMTU                         = 0x500
+	IPV6_MULTICAST_HOPS               = 0xa
+	IPV6_MULTICAST_IF                 = 0x9
+	IPV6_MULTICAST_LOOP               = 0xb
+	IPV6_NEXTHOP                      = 0x30
+	IPV6_PATHMTU                      = 0x2c
+	IPV6_PKTINFO                      = 0x2e
+	IPV6_PORTRANGE                    = 0xe
+	IPV6_PORTRANGE_DEFAULT            = 0x0
+	IPV6_PORTRANGE_HIGH               = 0x1
+	IPV6_PORTRANGE_LOW                = 0x2
+	IPV6_RECVDSTOPTS                  = 0x28
+	IPV6_RECVHOPLIMIT                 = 0x25
+	IPV6_RECVHOPOPTS                  = 0x27
+	IPV6_RECVPATHMTU                  = 0x2b
+	IPV6_RECVPKTINFO                  = 0x24
+	IPV6_RECVRTHDR                    = 0x26
+	IPV6_RECVTCLASS                   = 0x39
+	IPV6_RTHDR                        = 0x33
+	IPV6_RTHDRDSTOPTS                 = 0x23
+	IPV6_RTHDR_LOOSE                  = 0x0
+	IPV6_RTHDR_STRICT                 = 0x1
+	IPV6_RTHDR_TYPE_0                 = 0x0
+	IPV6_SOCKOPT_RESERVED1            = 0x3
+	IPV6_TCLASS                       = 0x3d
+	IPV6_UNICAST_HOPS                 = 0x4
+	IPV6_USE_MIN_MTU                  = 0x2a
+	IPV6_V6ONLY                       = 0x1b
+	IPV6_VERSION                      = 0x60
+	IPV6_VERSION_MASK                 = 0xf0
+	IP_ADD_MEMBERSHIP                 = 0xc
+	IP_DEFAULT_MULTICAST_LOOP         = 0x1
+	IP_DEFAULT_MULTICAST_TTL          = 0x1
+	IP_DF                             = 0x4000
+	IP_DROP_MEMBERSHIP                = 0xd
+	IP_EF                             = 0x8000
+	IP_ERRORMTU                       = 0x15
+	IP_HDRINCL                        = 0x2
+	IP_IPSEC_POLICY                   = 0x16
+	IP_MAXPACKET                      = 0xffff
+	IP_MAX_MEMBERSHIPS                = 0x14
+	IP_MF                             = 0x2000
+	IP_MINFRAGSIZE                    = 0x45
+	IP_MINTTL                         = 0x18
+	IP_MSS                            = 0x240
+	IP_MULTICAST_IF                   = 0x9
+	IP_MULTICAST_LOOP                 = 0xb
+	IP_MULTICAST_TTL                  = 0xa
+	IP_OFFMASK                        = 0x1fff
+	IP_OPTIONS                        = 0x1
+	IP_PORTRANGE                      = 0x13
+	IP_PORTRANGE_DEFAULT              = 0x0
+	IP_PORTRANGE_HIGH                 = 0x1
+	IP_PORTRANGE_LOW                  = 0x2
+	IP_RECVDSTADDR                    = 0x7
+	IP_RECVIF                         = 0x14
+	IP_RECVOPTS                       = 0x5
+	IP_RECVRETOPTS                    = 0x6
+	IP_RECVTTL                        = 0x17
+	IP_RETOPTS                        = 0x8
+	IP_RF                             = 0x8000
+	IP_TOS                            = 0x3
+	IP_TTL                            = 0x4
+	ISIG                              = 0x80
+	ISTRIP                            = 0x20
+	IXANY                             = 0x800
+	IXOFF                             = 0x400
+	IXON                              = 0x200
+	KERN_HOSTNAME                     = 0xa
+	KERN_OSRELEASE                    = 0x2
+	KERN_OSTYPE                       = 0x1
+	KERN_VERSION                      = 0x4
+	LOCK_EX                           = 0x2
+	LOCK_NB                           = 0x4
+	LOCK_SH                           = 0x1
+	LOCK_UN                           = 0x8
+	MADV_DONTNEED                     = 0x4
+	MADV_FREE                         = 0x6
+	MADV_NORMAL                       = 0x0
+	MADV_RANDOM                       = 0x1
+	MADV_SEQUENTIAL                   = 0x2
+	MADV_SPACEAVAIL                   = 0x5
+	MADV_WILLNEED                     = 0x3
+	MAP_ALIGNMENT_16MB                = 0x18000000
+	MAP_ALIGNMENT_1TB                 = 0x28000000
+	MAP_ALIGNMENT_256TB               = 0x30000000
+	MAP_ALIGNMENT_4GB                 = 0x20000000
+	MAP_ALIGNMENT_64KB                = 0x10000000
+	MAP_ALIGNMENT_64PB                = 0x38000000
+	MAP_ALIGNMENT_MASK                = -0x1000000
+	MAP_ALIGNMENT_SHIFT               = 0x18
+	MAP_ANON                          = 0x1000
+	MAP_FILE                          = 0x0
+	MAP_FIXED                         = 0x10
+	MAP_HASSEMAPHORE                  = 0x200
+	MAP_INHERIT                       = 0x80
+	MAP_INHERIT_COPY                  = 0x1
+	MAP_INHERIT_DEFAULT               = 0x1
+	MAP_INHERIT_DONATE_COPY           = 0x3
+	MAP_INHERIT_NONE                  = 0x2
+	MAP_INHERIT_SHARE                 = 0x0
+	MAP_NORESERVE                     = 0x40
+	MAP_PRIVATE                       = 0x2
+	MAP_RENAME                        = 0x20
+	MAP_SHARED                        = 0x1
+	MAP_STACK                         = 0x2000
+	MAP_TRYFIXED                      = 0x400
+	MAP_WIRED                         = 0x800
+	MNT_ASYNC                         = 0x40
+	MNT_BASIC_FLAGS                   = 0xe782807f
+	MNT_DEFEXPORTED                   = 0x200
+	MNT_DISCARD                       = 0x800000
+	MNT_EXKERB                        = 0x800
+	MNT_EXNORESPORT                   = 0x8000000
+	MNT_EXPORTANON                    = 0x400
+	MNT_EXPORTED                      = 0x100
+	MNT_EXPUBLIC                      = 0x10000000
+	MNT_EXRDONLY                      = 0x80
+	MNT_EXTATTR                       = 0x1000000
+	MNT_FORCE                         = 0x80000
+	MNT_GETARGS                       = 0x400000
+	MNT_IGNORE                        = 0x100000
+	MNT_LAZY                          = 0x3
+	MNT_LOCAL                         = 0x1000
+	MNT_LOG                           = 0x2000000
+	MNT_NOATIME                       = 0x4000000
+	MNT_NOCOREDUMP                    = 0x8000
+	MNT_NODEV                         = 0x10
+	MNT_NODEVMTIME                    = 0x40000000
+	MNT_NOEXEC                        = 0x4
+	MNT_NOSUID                        = 0x8
+	MNT_NOWAIT                        = 0x2
+	MNT_OP_FLAGS                      = 0x4d0000
+	MNT_QUOTA                         = 0x2000
+	MNT_RDONLY                        = 0x1
+	MNT_RELATIME                      = 0x20000
+	MNT_RELOAD                        = 0x40000
+	MNT_ROOTFS                        = 0x4000
+	MNT_SOFTDEP                       = 0x80000000
+	MNT_SYMPERM                       = 0x20000000
+	MNT_SYNCHRONOUS                   = 0x2
+	MNT_UNION                         = 0x20
+	MNT_UPDATE                        = 0x10000
+	MNT_VISFLAGMASK                   = 0xff90ffff
+	MNT_WAIT                          = 0x1
+	MSG_BCAST                         = 0x100
+	MSG_CMSG_CLOEXEC                  = 0x800
+	MSG_CONTROLMBUF                   = 0x2000000
+	MSG_CTRUNC                        = 0x20
+	MSG_DONTROUTE                     = 0x4
+	MSG_DONTWAIT                      = 0x80
+	MSG_EOR                           = 0x8
+	MSG_IOVUSRSPACE                   = 0x4000000
+	MSG_LENUSRSPACE                   = 0x8000000
+	MSG_MCAST                         = 0x200
+	MSG_NAMEMBUF                      = 0x1000000
+	MSG_NBIO                          = 0x1000
+	MSG_NOSIGNAL                      = 0x400
+	MSG_OOB                           = 0x1
+	MSG_PEEK                          = 0x2
+	MSG_TRUNC                         = 0x10
+	MSG_USERFLAGS                     = 0xffffff
+	MSG_WAITALL                       = 0x40
+	MS_ASYNC                          = 0x1
+	MS_INVALIDATE                     = 0x2
+	MS_SYNC                           = 0x4
+	NAME_MAX                          = 0x1ff
+	NET_RT_DUMP                       = 0x1
+	NET_RT_FLAGS                      = 0x2
+	NET_RT_IFLIST                     = 0x5
+	NET_RT_MAXID                      = 0x6
+	NET_RT_OIFLIST                    = 0x4
+	NET_RT_OOIFLIST                   = 0x3
+	NFDBITS                           = 0x20
+	NOFLSH                            = 0x80000000
+	NOTE_ATTRIB                       = 0x8
+	NOTE_CHILD                        = 0x4
+	NOTE_DELETE                       = 0x1
+	NOTE_EXEC                         = 0x20000000
+	NOTE_EXIT                         = 0x80000000
+	NOTE_EXTEND                       = 0x4
+	NOTE_FORK                         = 0x40000000
+	NOTE_LINK                         = 0x10
+	NOTE_LOWAT                        = 0x1
+	NOTE_PCTRLMASK                    = 0xf0000000
+	NOTE_PDATAMASK                    = 0xfffff
+	NOTE_RENAME                       = 0x20
+	NOTE_REVOKE                       = 0x40
+	NOTE_TRACK                        = 0x1
+	NOTE_TRACKERR                     = 0x2
+	NOTE_WRITE                        = 0x2
+	OCRNL                             = 0x10
+	OFIOGETBMAP                       = 0xc004667a
+	ONLCR                             = 0x2
+	ONLRET                            = 0x40
+	ONOCR                             = 0x20
+	ONOEOT                            = 0x8
+	OPOST                             = 0x1
+	O_ACCMODE                         = 0x3
+	O_ALT_IO                          = 0x40000
+	O_APPEND                          = 0x8
+	O_ASYNC                           = 0x40
+	O_CLOEXEC                         = 0x400000
+	O_CREAT                           = 0x200
+	O_DIRECT                          = 0x80000
+	O_DIRECTORY                       = 0x200000
+	O_DSYNC                           = 0x10000
+	O_EXCL                            = 0x800
+	O_EXLOCK                          = 0x20
+	O_FSYNC                           = 0x80
+	O_NDELAY                          = 0x4
+	O_NOCTTY                          = 0x8000
+	O_NOFOLLOW                        = 0x100
+	O_NONBLOCK                        = 0x4
+	O_NOSIGPIPE                       = 0x1000000
+	O_RDONLY                          = 0x0
+	O_RDWR                            = 0x2
+	O_RSYNC                           = 0x20000
+	O_SHLOCK                          = 0x10
+	O_SYNC                            = 0x80
+	O_TRUNC                           = 0x400
+	O_WRONLY                          = 0x1
+	PARENB                            = 0x1000
+	PARMRK                            = 0x8
+	PARODD                            = 0x2000
+	PENDIN                            = 0x20000000
+	PROT_EXEC                         = 0x4
+	PROT_NONE                         = 0x0
+	PROT_READ                         = 0x1
+	PROT_WRITE                        = 0x2
+	PRI_IOFLUSH                       = 0x7c
+	PRIO_PGRP                         = 0x1
+	PRIO_PROCESS                      = 0x0
+	PRIO_USER                         = 0x2
+	RLIMIT_AS                         = 0xa
+	RLIMIT_CORE                       = 0x4
+	RLIMIT_CPU                        = 0x0
+	RLIMIT_DATA                       = 0x2
+	RLIMIT_FSIZE                      = 0x1
+	RLIMIT_MEMLOCK                    = 0x6
+	RLIMIT_NOFILE                     = 0x8
+	RLIMIT_NPROC                      = 0x7
+	RLIMIT_RSS                        = 0x5
+	RLIMIT_STACK                      = 0x3
+	RLIM_INFINITY                     = 0x7fffffffffffffff
+	RTAX_AUTHOR                       = 0x6
+	RTAX_BRD                          = 0x7
+	RTAX_DST                          = 0x0
+	RTAX_GATEWAY                      = 0x1
+	RTAX_GENMASK                      = 0x3
+	RTAX_IFA                          = 0x5
+	RTAX_IFP                          = 0x4
+	RTAX_MAX                          = 0x9
+	RTAX_NETMASK                      = 0x2
+	RTAX_TAG                          = 0x8
+	RTA_AUTHOR                        = 0x40
+	RTA_BRD                           = 0x80
+	RTA_DST                           = 0x1
+	RTA_GATEWAY                       = 0x2
+	RTA_GENMASK                       = 0x8
+	RTA_IFA                           = 0x20
+	RTA_IFP                           = 0x10
+	RTA_NETMASK                       = 0x4
+	RTA_TAG                           = 0x100
+	RTF_ANNOUNCE                      = 0x20000
+	RTF_BLACKHOLE                     = 0x1000
+	RTF_CLONED                        = 0x2000
+	RTF_CLONING                       = 0x100
+	RTF_DONE                          = 0x40
+	RTF_DYNAMIC                       = 0x10
+	RTF_GATEWAY                       = 0x2
+	RTF_HOST                          = 0x4
+	RTF_LLINFO                        = 0x400
+	RTF_MASK                          = 0x80
+	RTF_MODIFIED                      = 0x20
+	RTF_PROTO1                        = 0x8000
+	RTF_PROTO2                        = 0x4000
+	RTF_REJECT                        = 0x8
+	RTF_SRC                           = 0x10000
+	RTF_STATIC                        = 0x800
+	RTF_UP                            = 0x1
+	RTF_XRESOLVE                      = 0x200
+	RTM_ADD                           = 0x1
+	RTM_CHANGE                        = 0x3
+	RTM_CHGADDR                       = 0x15
+	RTM_DELADDR                       = 0xd
+	RTM_DELETE                        = 0x2
+	RTM_GET                           = 0x4
+	RTM_IEEE80211                     = 0x11
+	RTM_IFANNOUNCE                    = 0x10
+	RTM_IFINFO                        = 0x14
+	RTM_LLINFO_UPD                    = 0x13
+	RTM_LOCK                          = 0x8
+	RTM_LOSING                        = 0x5
+	RTM_MISS                          = 0x7
+	RTM_NEWADDR                       = 0xc
+	RTM_OIFINFO                       = 0xf
+	RTM_OLDADD                        = 0x9
+	RTM_OLDDEL                        = 0xa
+	RTM_OOIFINFO                      = 0xe
+	RTM_REDIRECT                      = 0x6
+	RTM_RESOLVE                       = 0xb
+	RTM_RTTUNIT                       = 0xf4240
+	RTM_SETGATE                       = 0x12
+	RTM_VERSION                       = 0x4
+	RTV_EXPIRE                        = 0x4
+	RTV_HOPCOUNT                      = 0x2
+	RTV_MTU                           = 0x1
+	RTV_RPIPE                         = 0x8
+	RTV_RTT                           = 0x40
+	RTV_RTTVAR                        = 0x80
+	RTV_SPIPE                         = 0x10
+	RTV_SSTHRESH                      = 0x20
+	RUSAGE_CHILDREN                   = -0x1
+	RUSAGE_SELF                       = 0x0
+	SCM_CREDS                         = 0x4
+	SCM_RIGHTS                        = 0x1
+	SCM_TIMESTAMP                     = 0x8
+	SHUT_RD                           = 0x0
+	SHUT_RDWR                         = 0x2
+	SHUT_WR                           = 0x1
+	SIOCADDMULTI                      = 0x80906931
+	SIOCADDRT                         = 0x8030720a
+	SIOCAIFADDR                       = 0x8040691a
+	SIOCALIFADDR                      = 0x8118691c
+	SIOCATMARK                        = 0x40047307
+	SIOCDELMULTI                      = 0x80906932
+	SIOCDELRT                         = 0x8030720b
+	SIOCDIFADDR                       = 0x80906919
+	SIOCDIFPHYADDR                    = 0x80906949
+	SIOCDLIFADDR                      = 0x8118691e
+	SIOCGDRVSPEC                      = 0xc01c697b
+	SIOCGETPFSYNC                     = 0xc09069f8
+	SIOCGETSGCNT                      = 0xc0147534
+	SIOCGETVIFCNT                     = 0xc0147533
+	SIOCGHIWAT                        = 0x40047301
+	SIOCGIFADDR                       = 0xc0906921
+	SIOCGIFADDRPREF                   = 0xc0946920
+	SIOCGIFALIAS                      = 0xc040691b
+	SIOCGIFBRDADDR                    = 0xc0906923
+	SIOCGIFCAP                        = 0xc0206976
+	SIOCGIFCONF                       = 0xc0086926
+	SIOCGIFDATA                       = 0xc0946985
+	SIOCGIFDLT                        = 0xc0906977
+	SIOCGIFDSTADDR                    = 0xc0906922
+	SIOCGIFFLAGS                      = 0xc0906911
+	SIOCGIFGENERIC                    = 0xc090693a
+	SIOCGIFMEDIA                      = 0xc0286936
+	SIOCGIFMETRIC                     = 0xc0906917
+	SIOCGIFMTU                        = 0xc090697e
+	SIOCGIFNETMASK                    = 0xc0906925
+	SIOCGIFPDSTADDR                   = 0xc0906948
+	SIOCGIFPSRCADDR                   = 0xc0906947
+	SIOCGLIFADDR                      = 0xc118691d
+	SIOCGLIFPHYADDR                   = 0xc118694b
+	SIOCGLINKSTR                      = 0xc01c6987
+	SIOCGLOWAT                        = 0x40047303
+	SIOCGPGRP                         = 0x40047309
+	SIOCGVH                           = 0xc0906983
+	SIOCIFCREATE                      = 0x8090697a
+	SIOCIFDESTROY                     = 0x80906979
+	SIOCIFGCLONERS                    = 0xc00c6978
+	SIOCINITIFADDR                    = 0xc0446984
+	SIOCSDRVSPEC                      = 0x801c697b
+	SIOCSETPFSYNC                     = 0x809069f7
+	SIOCSHIWAT                        = 0x80047300
+	SIOCSIFADDR                       = 0x8090690c
+	SIOCSIFADDRPREF                   = 0x8094691f
+	SIOCSIFBRDADDR                    = 0x80906913
+	SIOCSIFCAP                        = 0x80206975
+	SIOCSIFDSTADDR                    = 0x8090690e
+	SIOCSIFFLAGS                      = 0x80906910
+	SIOCSIFGENERIC                    = 0x80906939
+	SIOCSIFMEDIA                      = 0xc0906935
+	SIOCSIFMETRIC                     = 0x80906918
+	SIOCSIFMTU                        = 0x8090697f
+	SIOCSIFNETMASK                    = 0x80906916
+	SIOCSIFPHYADDR                    = 0x80406946
+	SIOCSLIFPHYADDR                   = 0x8118694a
+	SIOCSLINKSTR                      = 0x801c6988
+	SIOCSLOWAT                        = 0x80047302
+	SIOCSPGRP                         = 0x80047308
+	SIOCSVH                           = 0xc0906982
+	SIOCZIFDATA                       = 0xc0946986
+	SOCK_CLOEXEC                      = 0x10000000
+	SOCK_DGRAM                        = 0x2
+	SOCK_FLAGS_MASK                   = 0xf0000000
+	SOCK_NONBLOCK                     = 0x20000000
+	SOCK_NOSIGPIPE                    = 0x40000000
+	SOCK_RAW                          = 0x3
+	SOCK_RDM                          = 0x4
+	SOCK_SEQPACKET                    = 0x5
+	SOCK_STREAM                       = 0x1
+	SOL_SOCKET                        = 0xffff
+	SOMAXCONN                         = 0x80
+	SO_ACCEPTCONN                     = 0x2
+	SO_ACCEPTFILTER                   = 0x1000
+	SO_BROADCAST                      = 0x20
+	SO_DEBUG                          = 0x1
+	SO_DONTROUTE                      = 0x10
+	SO_ERROR                          = 0x1007
+	SO_KEEPALIVE                      = 0x8
+	SO_LINGER                         = 0x80
+	SO_NOHEADER                       = 0x100a
+	SO_NOSIGPIPE                      = 0x800
+	SO_OOBINLINE                      = 0x100
+	SO_OVERFLOWED                     = 0x1009
+	SO_RCVBUF                         = 0x1002
+	SO_RCVLOWAT                       = 0x1004
+	SO_RCVTIMEO                       = 0x100c
+	SO_REUSEADDR                      = 0x4
+	SO_REUSEPORT                      = 0x200
+	SO_SNDBUF                         = 0x1001
+	SO_SNDLOWAT                       = 0x1003
+	SO_SNDTIMEO                       = 0x100b
+	SO_TIMESTAMP                      = 0x2000
+	SO_TYPE                           = 0x1008
+	SO_USELOOPBACK                    = 0x40
+	SYSCTL_VERSION                    = 0x1000000
+	SYSCTL_VERS_0                     = 0x0
+	SYSCTL_VERS_1                     = 0x1000000
+	SYSCTL_VERS_MASK                  = 0xff000000
+	S_ARCH1                           = 0x10000
+	S_ARCH2                           = 0x20000
+	S_BLKSIZE                         = 0x200
+	S_IEXEC                           = 0x40
+	S_IFBLK                           = 0x6000
+	S_IFCHR                           = 0x2000
+	S_IFDIR                           = 0x4000
+	S_IFIFO                           = 0x1000
+	S_IFLNK                           = 0xa000
+	S_IFMT                            = 0xf000
+	S_IFREG                           = 0x8000
+	S_IFSOCK                          = 0xc000
+	S_IFWHT                           = 0xe000
+	S_IREAD                           = 0x100
+	S_IRGRP                           = 0x20
+	S_IROTH                           = 0x4
+	S_IRUSR                           = 0x100
+	S_IRWXG                           = 0x38
+	S_IRWXO                           = 0x7
+	S_IRWXU                           = 0x1c0
+	S_ISGID                           = 0x400
+	S_ISTXT                           = 0x200
+	S_ISUID                           = 0x800
+	S_ISVTX                           = 0x200
+	S_IWGRP                           = 0x10
+	S_IWOTH                           = 0x2
+	S_IWRITE                          = 0x80
+	S_IWUSR                           = 0x80
+	S_IXGRP                           = 0x8
+	S_IXOTH                           = 0x1
+	S_IXUSR                           = 0x40
+	TCIFLUSH                          = 0x1
+	TCIOFLUSH                         = 0x3
+	TCOFLUSH                          = 0x2
+	TCP_CONGCTL                       = 0x20
+	TCP_KEEPCNT                       = 0x6
+	TCP_KEEPIDLE                      = 0x3
+	TCP_KEEPINIT                      = 0x7
+	TCP_KEEPINTVL                     = 0x5
+	TCP_MAXBURST                      = 0x4
+	TCP_MAXSEG                        = 0x2
+	TCP_MAXWIN                        = 0xffff
+	TCP_MAX_WINSHIFT                  = 0xe
+	TCP_MD5SIG                        = 0x10
+	TCP_MINMSS                        = 0xd8
+	TCP_MSS                           = 0x218
+	TCP_NODELAY                       = 0x1
+	TCSAFLUSH                         = 0x2
+	TIOCCBRK                          = 0x2000747a
+	TIOCCDTR                          = 0x20007478
+	TIOCCONS                          = 0x80047462
+	TIOCDCDTIMESTAMP                  = 0x400c7458
+	TIOCDRAIN                         = 0x2000745e
+	TIOCEXCL                          = 0x2000740d
+	TIOCEXT                           = 0x80047460
+	TIOCFLAG_CDTRCTS                  = 0x10
+	TIOCFLAG_CLOCAL                   = 0x2
+	TIOCFLAG_CRTSCTS                  = 0x4
+	TIOCFLAG_MDMBUF                   = 0x8
+	TIOCFLAG_SOFTCAR                  = 0x1
+	TIOCFLUSH                         = 0x80047410
+	TIOCGETA                          = 0x402c7413
+	TIOCGETD                          = 0x4004741a
+	TIOCGFLAGS                        = 0x4004745d
+	TIOCGLINED                        = 0x40207442
+	TIOCGPGRP                         = 0x40047477
+	TIOCGQSIZE                        = 0x40047481
+	TIOCGRANTPT                       = 0x20007447
+	TIOCGSID                          = 0x40047463
+	TIOCGSIZE                         = 0x40087468
+	TIOCGWINSZ                        = 0x40087468
+	TIOCMBIC                          = 0x8004746b
+	TIOCMBIS                          = 0x8004746c
+	TIOCMGET                          = 0x4004746a
+	TIOCMSET                          = 0x8004746d
+	TIOCM_CAR                         = 0x40
+	TIOCM_CD                          = 0x40
+	TIOCM_CTS                         = 0x20
+	TIOCM_DSR                         = 0x100
+	TIOCM_DTR                         = 0x2
+	TIOCM_LE                          = 0x1
+	TIOCM_RI                          = 0x80
+	TIOCM_RNG                         = 0x80
+	TIOCM_RTS                         = 0x4
+	TIOCM_SR                          = 0x10
+	TIOCM_ST                          = 0x8
+	TIOCNOTTY                         = 0x20007471
+	TIOCNXCL                          = 0x2000740e
+	TIOCOUTQ                          = 0x40047473
+	TIOCPKT                           = 0x80047470
+	TIOCPKT_DATA                      = 0x0
+	TIOCPKT_DOSTOP                    = 0x20
+	TIOCPKT_FLUSHREAD                 = 0x1
+	TIOCPKT_FLUSHWRITE                = 0x2
+	TIOCPKT_IOCTL                     = 0x40
+	TIOCPKT_NOSTOP                    = 0x10
+	TIOCPKT_START                     = 0x8
+	TIOCPKT_STOP                      = 0x4
+	TIOCPTMGET                        = 0x48087446
+	TIOCPTSNAME                       = 0x48087448
+	TIOCRCVFRAME                      = 0x80047445
+	TIOCREMOTE                        = 0x80047469
+	TIOCSBRK                          = 0x2000747b
+	TIOCSCTTY                         = 0x20007461
+	TIOCSDTR                          = 0x20007479
+	TIOCSETA                          = 0x802c7414
+	TIOCSETAF                         = 0x802c7416
+	TIOCSETAW                         = 0x802c7415
+	TIOCSETD                          = 0x8004741b
+	TIOCSFLAGS                        = 0x8004745c
+	TIOCSIG                           = 0x2000745f
+	TIOCSLINED                        = 0x80207443
+	TIOCSPGRP                         = 0x80047476
+	TIOCSQSIZE                        = 0x80047480
+	TIOCSSIZE                         = 0x80087467
+	TIOCSTART                         = 0x2000746e
+	TIOCSTAT                          = 0x80047465
+	TIOCSTI                           = 0x80017472
+	TIOCSTOP                          = 0x2000746f
+	TIOCSWINSZ                        = 0x80087467
+	TIOCUCNTL                         = 0x80047466
+	TIOCXMTFRAME                      = 0x80047444
+	TOSTOP                            = 0x400000
+	VDISCARD                          = 0xf
+	VDSUSP                            = 0xb
+	VEOF                              = 0x0
+	VEOL                              = 0x1
+	VEOL2                             = 0x2
+	VERASE                            = 0x3
+	VINTR                             = 0x8
+	VKILL                             = 0x5
+	VLNEXT                            = 0xe
+	VMIN                              = 0x10
+	VQUIT                             = 0x9
+	VREPRINT                          = 0x6
+	VSTART                            = 0xc
+	VSTATUS                           = 0x12
+	VSTOP                             = 0xd
+	VSUSP                             = 0xa
+	VTIME                             = 0x11
+	VWERASE                           = 0x4
+	WALL                              = 0x8
+	WALLSIG                           = 0x8
+	WALTSIG                           = 0x4
+	WCLONE                            = 0x4
+	WCOREFLAG                         = 0x80
+	WNOHANG                           = 0x1
+	WNOWAIT                           = 0x10000
+	WNOZOMBIE                         = 0x20000
+	WOPTSCHECKED                      = 0x40000
+	WSTOPPED                          = 0x7f
+	WUNTRACED                         = 0x2
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADF           = syscall.Errno(0x9)
+	EBADMSG         = syscall.Errno(0x58)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x57)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDOM            = syscall.Errno(0x21)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x52)
+	EILSEQ          = syscall.Errno(0x55)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x60)
+	ELOOP           = syscall.Errno(0x3e)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	EMULTIHOP       = syscall.Errno(0x5e)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x5d)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODATA         = syscall.Errno(0x59)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOLINK         = syscall.Errno(0x5f)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x53)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSR           = syscall.Errno(0x5a)
+	ENOSTR          = syscall.Errno(0x5b)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x56)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x2d)
+	EOVERFLOW       = syscall.Errno(0x54)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTO          = syscall.Errno(0x60)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIME           = syscall.Errno(0x5c)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGPWR    = syscall.Signal(0x20)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large or too small"},
+	{35, "EAGAIN", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol option not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "EOPNOTSUPP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "connection timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disc quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC prog. not avail"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EIDRM", "identifier removed"},
+	{83, "ENOMSG", "no message of desired type"},
+	{84, "EOVERFLOW", "value too large to be stored in data type"},
+	{85, "EILSEQ", "illegal byte sequence"},
+	{86, "ENOTSUP", "not supported"},
+	{87, "ECANCELED", "operation Canceled"},
+	{88, "EBADMSG", "bad or Corrupt message"},
+	{89, "ENODATA", "no message available"},
+	{90, "ENOSR", "no STREAM resources"},
+	{91, "ENOSTR", "not a STREAM"},
+	{92, "ETIME", "STREAM ioctl timeout"},
+	{93, "ENOATTR", "attribute not found"},
+	{94, "EMULTIHOP", "multihop attempted"},
+	{95, "ENOLINK", "link has been severed"},
+	{96, "ELAST", "protocol error"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGIOT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "stopped (signal)"},
+	{18, "SIGTSTP", "stopped"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+	{32, "SIGPWR", "power fail/restart"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_netbsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_netbsd_arm64.go
new file mode 100644
index 000000000..14dd3c1d1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_netbsd_arm64.go
@@ -0,0 +1,1769 @@
+// mkerrors.sh -m64
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm64,netbsd
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -m64 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                      = 0x10
+	AF_ARP                            = 0x1c
+	AF_BLUETOOTH                      = 0x1f
+	AF_CCITT                          = 0xa
+	AF_CHAOS                          = 0x5
+	AF_CNT                            = 0x15
+	AF_COIP                           = 0x14
+	AF_DATAKIT                        = 0x9
+	AF_DECnet                         = 0xc
+	AF_DLI                            = 0xd
+	AF_E164                           = 0x1a
+	AF_ECMA                           = 0x8
+	AF_HYLINK                         = 0xf
+	AF_IEEE80211                      = 0x20
+	AF_IMPLINK                        = 0x3
+	AF_INET                           = 0x2
+	AF_INET6                          = 0x18
+	AF_IPX                            = 0x17
+	AF_ISDN                           = 0x1a
+	AF_ISO                            = 0x7
+	AF_LAT                            = 0xe
+	AF_LINK                           = 0x12
+	AF_LOCAL                          = 0x1
+	AF_MAX                            = 0x23
+	AF_MPLS                           = 0x21
+	AF_NATM                           = 0x1b
+	AF_NS                             = 0x6
+	AF_OROUTE                         = 0x11
+	AF_OSI                            = 0x7
+	AF_PUP                            = 0x4
+	AF_ROUTE                          = 0x22
+	AF_SNA                            = 0xb
+	AF_UNIX                           = 0x1
+	AF_UNSPEC                         = 0x0
+	ARPHRD_ARCNET                     = 0x7
+	ARPHRD_ETHER                      = 0x1
+	ARPHRD_FRELAY                     = 0xf
+	ARPHRD_IEEE1394                   = 0x18
+	ARPHRD_IEEE802                    = 0x6
+	ARPHRD_STRIP                      = 0x17
+	B0                                = 0x0
+	B110                              = 0x6e
+	B115200                           = 0x1c200
+	B1200                             = 0x4b0
+	B134                              = 0x86
+	B14400                            = 0x3840
+	B150                              = 0x96
+	B1800                             = 0x708
+	B19200                            = 0x4b00
+	B200                              = 0xc8
+	B230400                           = 0x38400
+	B2400                             = 0x960
+	B28800                            = 0x7080
+	B300                              = 0x12c
+	B38400                            = 0x9600
+	B460800                           = 0x70800
+	B4800                             = 0x12c0
+	B50                               = 0x32
+	B57600                            = 0xe100
+	B600                              = 0x258
+	B7200                             = 0x1c20
+	B75                               = 0x4b
+	B76800                            = 0x12c00
+	B921600                           = 0xe1000
+	B9600                             = 0x2580
+	BIOCFEEDBACK                      = 0x8004427d
+	BIOCFLUSH                         = 0x20004268
+	BIOCGBLEN                         = 0x40044266
+	BIOCGDLT                          = 0x4004426a
+	BIOCGDLTLIST                      = 0xc0104277
+	BIOCGETIF                         = 0x4090426b
+	BIOCGFEEDBACK                     = 0x4004427c
+	BIOCGHDRCMPLT                     = 0x40044274
+	BIOCGRTIMEOUT                     = 0x4010427b
+	BIOCGSEESENT                      = 0x40044278
+	BIOCGSTATS                        = 0x4080426f
+	BIOCGSTATSOLD                     = 0x4008426f
+	BIOCIMMEDIATE                     = 0x80044270
+	BIOCPROMISC                       = 0x20004269
+	BIOCSBLEN                         = 0xc0044266
+	BIOCSDLT                          = 0x80044276
+	BIOCSETF                          = 0x80104267
+	BIOCSETIF                         = 0x8090426c
+	BIOCSFEEDBACK                     = 0x8004427d
+	BIOCSHDRCMPLT                     = 0x80044275
+	BIOCSRTIMEOUT                     = 0x8010427a
+	BIOCSSEESENT                      = 0x80044279
+	BIOCSTCPF                         = 0x80104272
+	BIOCSUDPF                         = 0x80104273
+	BIOCVERSION                       = 0x40044271
+	BPF_A                             = 0x10
+	BPF_ABS                           = 0x20
+	BPF_ADD                           = 0x0
+	BPF_ALIGNMENT                     = 0x8
+	BPF_ALIGNMENT32                   = 0x4
+	BPF_ALU                           = 0x4
+	BPF_AND                           = 0x50
+	BPF_B                             = 0x10
+	BPF_DFLTBUFSIZE                   = 0x100000
+	BPF_DIV                           = 0x30
+	BPF_H                             = 0x8
+	BPF_IMM                           = 0x0
+	BPF_IND                           = 0x40
+	BPF_JA                            = 0x0
+	BPF_JEQ                           = 0x10
+	BPF_JGE                           = 0x30
+	BPF_JGT                           = 0x20
+	BPF_JMP                           = 0x5
+	BPF_JSET                          = 0x40
+	BPF_K                             = 0x0
+	BPF_LD                            = 0x0
+	BPF_LDX                           = 0x1
+	BPF_LEN                           = 0x80
+	BPF_LSH                           = 0x60
+	BPF_MAJOR_VERSION                 = 0x1
+	BPF_MAXBUFSIZE                    = 0x1000000
+	BPF_MAXINSNS                      = 0x200
+	BPF_MEM                           = 0x60
+	BPF_MEMWORDS                      = 0x10
+	BPF_MINBUFSIZE                    = 0x20
+	BPF_MINOR_VERSION                 = 0x1
+	BPF_MISC                          = 0x7
+	BPF_MSH                           = 0xa0
+	BPF_MUL                           = 0x20
+	BPF_NEG                           = 0x80
+	BPF_OR                            = 0x40
+	BPF_RELEASE                       = 0x30bb6
+	BPF_RET                           = 0x6
+	BPF_RSH                           = 0x70
+	BPF_ST                            = 0x2
+	BPF_STX                           = 0x3
+	BPF_SUB                           = 0x10
+	BPF_TAX                           = 0x0
+	BPF_TXA                           = 0x80
+	BPF_W                             = 0x0
+	BPF_X                             = 0x8
+	BRKINT                            = 0x2
+	CFLUSH                            = 0xf
+	CLOCAL                            = 0x8000
+	CLONE_CSIGNAL                     = 0xff
+	CLONE_FILES                       = 0x400
+	CLONE_FS                          = 0x200
+	CLONE_PID                         = 0x1000
+	CLONE_PTRACE                      = 0x2000
+	CLONE_SIGHAND                     = 0x800
+	CLONE_VFORK                       = 0x4000
+	CLONE_VM                          = 0x100
+	CPUSTATES                         = 0x5
+	CP_IDLE                           = 0x4
+	CP_INTR                           = 0x3
+	CP_NICE                           = 0x1
+	CP_SYS                            = 0x2
+	CP_USER                           = 0x0
+	CREAD                             = 0x800
+	CRTSCTS                           = 0x10000
+	CS5                               = 0x0
+	CS6                               = 0x100
+	CS7                               = 0x200
+	CS8                               = 0x300
+	CSIZE                             = 0x300
+	CSTART                            = 0x11
+	CSTATUS                           = 0x14
+	CSTOP                             = 0x13
+	CSTOPB                            = 0x400
+	CSUSP                             = 0x1a
+	CTL_HW                            = 0x6
+	CTL_KERN                          = 0x1
+	CTL_MAXNAME                       = 0xc
+	CTL_NET                           = 0x4
+	CTL_QUERY                         = -0x2
+	DIOCBSFLUSH                       = 0x20006478
+	DLT_A429                          = 0xb8
+	DLT_A653_ICM                      = 0xb9
+	DLT_AIRONET_HEADER                = 0x78
+	DLT_AOS                           = 0xde
+	DLT_APPLE_IP_OVER_IEEE1394        = 0x8a
+	DLT_ARCNET                        = 0x7
+	DLT_ARCNET_LINUX                  = 0x81
+	DLT_ATM_CLIP                      = 0x13
+	DLT_ATM_RFC1483                   = 0xb
+	DLT_AURORA                        = 0x7e
+	DLT_AX25                          = 0x3
+	DLT_AX25_KISS                     = 0xca
+	DLT_BACNET_MS_TP                  = 0xa5
+	DLT_BLUETOOTH_HCI_H4              = 0xbb
+	DLT_BLUETOOTH_HCI_H4_WITH_PHDR    = 0xc9
+	DLT_CAN20B                        = 0xbe
+	DLT_CAN_SOCKETCAN                 = 0xe3
+	DLT_CHAOS                         = 0x5
+	DLT_CISCO_IOS                     = 0x76
+	DLT_C_HDLC                        = 0x68
+	DLT_C_HDLC_WITH_DIR               = 0xcd
+	DLT_DECT                          = 0xdd
+	DLT_DOCSIS                        = 0x8f
+	DLT_ECONET                        = 0x73
+	DLT_EN10MB                        = 0x1
+	DLT_EN3MB                         = 0x2
+	DLT_ENC                           = 0x6d
+	DLT_ERF                           = 0xc5
+	DLT_ERF_ETH                       = 0xaf
+	DLT_ERF_POS                       = 0xb0
+	DLT_FC_2                          = 0xe0
+	DLT_FC_2_WITH_FRAME_DELIMS        = 0xe1
+	DLT_FDDI                          = 0xa
+	DLT_FLEXRAY                       = 0xd2
+	DLT_FRELAY                        = 0x6b
+	DLT_FRELAY_WITH_DIR               = 0xce
+	DLT_GCOM_SERIAL                   = 0xad
+	DLT_GCOM_T1E1                     = 0xac
+	DLT_GPF_F                         = 0xab
+	DLT_GPF_T                         = 0xaa
+	DLT_GPRS_LLC                      = 0xa9
+	DLT_GSMTAP_ABIS                   = 0xda
+	DLT_GSMTAP_UM                     = 0xd9
+	DLT_HDLC                          = 0x10
+	DLT_HHDLC                         = 0x79
+	DLT_HIPPI                         = 0xf
+	DLT_IBM_SN                        = 0x92
+	DLT_IBM_SP                        = 0x91
+	DLT_IEEE802                       = 0x6
+	DLT_IEEE802_11                    = 0x69
+	DLT_IEEE802_11_RADIO              = 0x7f
+	DLT_IEEE802_11_RADIO_AVS          = 0xa3
+	DLT_IEEE802_15_4                  = 0xc3
+	DLT_IEEE802_15_4_LINUX            = 0xbf
+	DLT_IEEE802_15_4_NONASK_PHY       = 0xd7
+	DLT_IEEE802_16_MAC_CPS            = 0xbc
+	DLT_IEEE802_16_MAC_CPS_RADIO      = 0xc1
+	DLT_IPMB                          = 0xc7
+	DLT_IPMB_LINUX                    = 0xd1
+	DLT_IPNET                         = 0xe2
+	DLT_IPV4                          = 0xe4
+	DLT_IPV6                          = 0xe5
+	DLT_IP_OVER_FC                    = 0x7a
+	DLT_JUNIPER_ATM1                  = 0x89
+	DLT_JUNIPER_ATM2                  = 0x87
+	DLT_JUNIPER_CHDLC                 = 0xb5
+	DLT_JUNIPER_ES                    = 0x84
+	DLT_JUNIPER_ETHER                 = 0xb2
+	DLT_JUNIPER_FRELAY                = 0xb4
+	DLT_JUNIPER_GGSN                  = 0x85
+	DLT_JUNIPER_ISM                   = 0xc2
+	DLT_JUNIPER_MFR                   = 0x86
+	DLT_JUNIPER_MLFR                  = 0x83
+	DLT_JUNIPER_MLPPP                 = 0x82
+	DLT_JUNIPER_MONITOR               = 0xa4
+	DLT_JUNIPER_PIC_PEER              = 0xae
+	DLT_JUNIPER_PPP                   = 0xb3
+	DLT_JUNIPER_PPPOE                 = 0xa7
+	DLT_JUNIPER_PPPOE_ATM             = 0xa8
+	DLT_JUNIPER_SERVICES              = 0x88
+	DLT_JUNIPER_ST                    = 0xc8
+	DLT_JUNIPER_VP                    = 0xb7
+	DLT_LAPB_WITH_DIR                 = 0xcf
+	DLT_LAPD                          = 0xcb
+	DLT_LIN                           = 0xd4
+	DLT_LINUX_EVDEV                   = 0xd8
+	DLT_LINUX_IRDA                    = 0x90
+	DLT_LINUX_LAPD                    = 0xb1
+	DLT_LINUX_SLL                     = 0x71
+	DLT_LOOP                          = 0x6c
+	DLT_LTALK                         = 0x72
+	DLT_MFR                           = 0xb6
+	DLT_MOST                          = 0xd3
+	DLT_MPLS                          = 0xdb
+	DLT_MTP2                          = 0x8c
+	DLT_MTP2_WITH_PHDR                = 0x8b
+	DLT_MTP3                          = 0x8d
+	DLT_NULL                          = 0x0
+	DLT_PCI_EXP                       = 0x7d
+	DLT_PFLOG                         = 0x75
+	DLT_PFSYNC                        = 0x12
+	DLT_PPI                           = 0xc0
+	DLT_PPP                           = 0x9
+	DLT_PPP_BSDOS                     = 0xe
+	DLT_PPP_ETHER                     = 0x33
+	DLT_PPP_PPPD                      = 0xa6
+	DLT_PPP_SERIAL                    = 0x32
+	DLT_PPP_WITH_DIR                  = 0xcc
+	DLT_PRISM_HEADER                  = 0x77
+	DLT_PRONET                        = 0x4
+	DLT_RAIF1                         = 0xc6
+	DLT_RAW                           = 0xc
+	DLT_RAWAF_MASK                    = 0x2240000
+	DLT_RIO                           = 0x7c
+	DLT_SCCP                          = 0x8e
+	DLT_SITA                          = 0xc4
+	DLT_SLIP                          = 0x8
+	DLT_SLIP_BSDOS                    = 0xd
+	DLT_SUNATM                        = 0x7b
+	DLT_SYMANTEC_FIREWALL             = 0x63
+	DLT_TZSP                          = 0x80
+	DLT_USB                           = 0xba
+	DLT_USB_LINUX                     = 0xbd
+	DLT_USB_LINUX_MMAPPED             = 0xdc
+	DLT_WIHART                        = 0xdf
+	DLT_X2E_SERIAL                    = 0xd5
+	DLT_X2E_XORAYA                    = 0xd6
+	DT_BLK                            = 0x6
+	DT_CHR                            = 0x2
+	DT_DIR                            = 0x4
+	DT_FIFO                           = 0x1
+	DT_LNK                            = 0xa
+	DT_REG                            = 0x8
+	DT_SOCK                           = 0xc
+	DT_UNKNOWN                        = 0x0
+	DT_WHT                            = 0xe
+	ECHO                              = 0x8
+	ECHOCTL                           = 0x40
+	ECHOE                             = 0x2
+	ECHOK                             = 0x4
+	ECHOKE                            = 0x1
+	ECHONL                            = 0x10
+	ECHOPRT                           = 0x20
+	EMUL_LINUX                        = 0x1
+	EMUL_LINUX32                      = 0x5
+	EMUL_MAXID                        = 0x6
+	ETHERCAP_JUMBO_MTU                = 0x4
+	ETHERCAP_VLAN_HWTAGGING           = 0x2
+	ETHERCAP_VLAN_MTU                 = 0x1
+	ETHERMIN                          = 0x2e
+	ETHERMTU                          = 0x5dc
+	ETHERMTU_JUMBO                    = 0x2328
+	ETHERTYPE_8023                    = 0x4
+	ETHERTYPE_AARP                    = 0x80f3
+	ETHERTYPE_ACCTON                  = 0x8390
+	ETHERTYPE_AEONIC                  = 0x8036
+	ETHERTYPE_ALPHA                   = 0x814a
+	ETHERTYPE_AMBER                   = 0x6008
+	ETHERTYPE_AMOEBA                  = 0x8145
+	ETHERTYPE_APOLLO                  = 0x80f7
+	ETHERTYPE_APOLLODOMAIN            = 0x8019
+	ETHERTYPE_APPLETALK               = 0x809b
+	ETHERTYPE_APPLITEK                = 0x80c7
+	ETHERTYPE_ARGONAUT                = 0x803a
+	ETHERTYPE_ARP                     = 0x806
+	ETHERTYPE_AT                      = 0x809b
+	ETHERTYPE_ATALK                   = 0x809b
+	ETHERTYPE_ATOMIC                  = 0x86df
+	ETHERTYPE_ATT                     = 0x8069
+	ETHERTYPE_ATTSTANFORD             = 0x8008
+	ETHERTYPE_AUTOPHON                = 0x806a
+	ETHERTYPE_AXIS                    = 0x8856
+	ETHERTYPE_BCLOOP                  = 0x9003
+	ETHERTYPE_BOFL                    = 0x8102
+	ETHERTYPE_CABLETRON               = 0x7034
+	ETHERTYPE_CHAOS                   = 0x804
+	ETHERTYPE_COMDESIGN               = 0x806c
+	ETHERTYPE_COMPUGRAPHIC            = 0x806d
+	ETHERTYPE_COUNTERPOINT            = 0x8062
+	ETHERTYPE_CRONUS                  = 0x8004
+	ETHERTYPE_CRONUSVLN               = 0x8003
+	ETHERTYPE_DCA                     = 0x1234
+	ETHERTYPE_DDE                     = 0x807b
+	ETHERTYPE_DEBNI                   = 0xaaaa
+	ETHERTYPE_DECAM                   = 0x8048
+	ETHERTYPE_DECCUST                 = 0x6006
+	ETHERTYPE_DECDIAG                 = 0x6005
+	ETHERTYPE_DECDNS                  = 0x803c
+	ETHERTYPE_DECDTS                  = 0x803e
+	ETHERTYPE_DECEXPER                = 0x6000
+	ETHERTYPE_DECLAST                 = 0x8041
+	ETHERTYPE_DECLTM                  = 0x803f
+	ETHERTYPE_DECMUMPS                = 0x6009
+	ETHERTYPE_DECNETBIOS              = 0x8040
+	ETHERTYPE_DELTACON                = 0x86de
+	ETHERTYPE_DIDDLE                  = 0x4321
+	ETHERTYPE_DLOG1                   = 0x660
+	ETHERTYPE_DLOG2                   = 0x661
+	ETHERTYPE_DN                      = 0x6003
+	ETHERTYPE_DOGFIGHT                = 0x1989
+	ETHERTYPE_DSMD                    = 0x8039
+	ETHERTYPE_ECMA                    = 0x803
+	ETHERTYPE_ENCRYPT                 = 0x803d
+	ETHERTYPE_ES                      = 0x805d
+	ETHERTYPE_EXCELAN                 = 0x8010
+	ETHERTYPE_EXPERDATA               = 0x8049
+	ETHERTYPE_FLIP                    = 0x8146
+	ETHERTYPE_FLOWCONTROL             = 0x8808
+	ETHERTYPE_FRARP                   = 0x808
+	ETHERTYPE_GENDYN                  = 0x8068
+	ETHERTYPE_HAYES                   = 0x8130
+	ETHERTYPE_HIPPI_FP                = 0x8180
+	ETHERTYPE_HITACHI                 = 0x8820
+	ETHERTYPE_HP                      = 0x8005
+	ETHERTYPE_IEEEPUP                 = 0xa00
+	ETHERTYPE_IEEEPUPAT               = 0xa01
+	ETHERTYPE_IMLBL                   = 0x4c42
+	ETHERTYPE_IMLBLDIAG               = 0x424c
+	ETHERTYPE_IP                      = 0x800
+	ETHERTYPE_IPAS                    = 0x876c
+	ETHERTYPE_IPV6                    = 0x86dd
+	ETHERTYPE_IPX                     = 0x8137
+	ETHERTYPE_IPXNEW                  = 0x8037
+	ETHERTYPE_KALPANA                 = 0x8582
+	ETHERTYPE_LANBRIDGE               = 0x8038
+	ETHERTYPE_LANPROBE                = 0x8888
+	ETHERTYPE_LAT                     = 0x6004
+	ETHERTYPE_LBACK                   = 0x9000
+	ETHERTYPE_LITTLE                  = 0x8060
+	ETHERTYPE_LOGICRAFT               = 0x8148
+	ETHERTYPE_LOOPBACK                = 0x9000
+	ETHERTYPE_MATRA                   = 0x807a
+	ETHERTYPE_MAX                     = 0xffff
+	ETHERTYPE_MERIT                   = 0x807c
+	ETHERTYPE_MICP                    = 0x873a
+	ETHERTYPE_MOPDL                   = 0x6001
+	ETHERTYPE_MOPRC                   = 0x6002
+	ETHERTYPE_MOTOROLA                = 0x818d
+	ETHERTYPE_MPLS                    = 0x8847
+	ETHERTYPE_MPLS_MCAST              = 0x8848
+	ETHERTYPE_MUMPS                   = 0x813f
+	ETHERTYPE_NBPCC                   = 0x3c04
+	ETHERTYPE_NBPCLAIM                = 0x3c09
+	ETHERTYPE_NBPCLREQ                = 0x3c05
+	ETHERTYPE_NBPCLRSP                = 0x3c06
+	ETHERTYPE_NBPCREQ                 = 0x3c02
+	ETHERTYPE_NBPCRSP                 = 0x3c03
+	ETHERTYPE_NBPDG                   = 0x3c07
+	ETHERTYPE_NBPDGB                  = 0x3c08
+	ETHERTYPE_NBPDLTE                 = 0x3c0a
+	ETHERTYPE_NBPRAR                  = 0x3c0c
+	ETHERTYPE_NBPRAS                  = 0x3c0b
+	ETHERTYPE_NBPRST                  = 0x3c0d
+	ETHERTYPE_NBPSCD                  = 0x3c01
+	ETHERTYPE_NBPVCD                  = 0x3c00
+	ETHERTYPE_NBS                     = 0x802
+	ETHERTYPE_NCD                     = 0x8149
+	ETHERTYPE_NESTAR                  = 0x8006
+	ETHERTYPE_NETBEUI                 = 0x8191
+	ETHERTYPE_NOVELL                  = 0x8138
+	ETHERTYPE_NS                      = 0x600
+	ETHERTYPE_NSAT                    = 0x601
+	ETHERTYPE_NSCOMPAT                = 0x807
+	ETHERTYPE_NTRAILER                = 0x10
+	ETHERTYPE_OS9                     = 0x7007
+	ETHERTYPE_OS9NET                  = 0x7009
+	ETHERTYPE_PACER                   = 0x80c6
+	ETHERTYPE_PAE                     = 0x888e
+	ETHERTYPE_PCS                     = 0x4242
+	ETHERTYPE_PLANNING                = 0x8044
+	ETHERTYPE_PPP                     = 0x880b
+	ETHERTYPE_PPPOE                   = 0x8864
+	ETHERTYPE_PPPOEDISC               = 0x8863
+	ETHERTYPE_PRIMENTS                = 0x7031
+	ETHERTYPE_PUP                     = 0x200
+	ETHERTYPE_PUPAT                   = 0x200
+	ETHERTYPE_RACAL                   = 0x7030
+	ETHERTYPE_RATIONAL                = 0x8150
+	ETHERTYPE_RAWFR                   = 0x6559
+	ETHERTYPE_RCL                     = 0x1995
+	ETHERTYPE_RDP                     = 0x8739
+	ETHERTYPE_RETIX                   = 0x80f2
+	ETHERTYPE_REVARP                  = 0x8035
+	ETHERTYPE_SCA                     = 0x6007
+	ETHERTYPE_SECTRA                  = 0x86db
+	ETHERTYPE_SECUREDATA              = 0x876d
+	ETHERTYPE_SGITW                   = 0x817e
+	ETHERTYPE_SG_BOUNCE               = 0x8016
+	ETHERTYPE_SG_DIAG                 = 0x8013
+	ETHERTYPE_SG_NETGAMES             = 0x8014
+	ETHERTYPE_SG_RESV                 = 0x8015
+	ETHERTYPE_SIMNET                  = 0x5208
+	ETHERTYPE_SLOWPROTOCOLS           = 0x8809
+	ETHERTYPE_SNA                     = 0x80d5
+	ETHERTYPE_SNMP                    = 0x814c
+	ETHERTYPE_SONIX                   = 0xfaf5
+	ETHERTYPE_SPIDER                  = 0x809f
+	ETHERTYPE_SPRITE                  = 0x500
+	ETHERTYPE_STP                     = 0x8181
+	ETHERTYPE_TALARIS                 = 0x812b
+	ETHERTYPE_TALARISMC               = 0x852b
+	ETHERTYPE_TCPCOMP                 = 0x876b
+	ETHERTYPE_TCPSM                   = 0x9002
+	ETHERTYPE_TEC                     = 0x814f
+	ETHERTYPE_TIGAN                   = 0x802f
+	ETHERTYPE_TRAIL                   = 0x1000
+	ETHERTYPE_TRANSETHER              = 0x6558
+	ETHERTYPE_TYMSHARE                = 0x802e
+	ETHERTYPE_UBBST                   = 0x7005
+	ETHERTYPE_UBDEBUG                 = 0x900
+	ETHERTYPE_UBDIAGLOOP              = 0x7002
+	ETHERTYPE_UBDL                    = 0x7000
+	ETHERTYPE_UBNIU                   = 0x7001
+	ETHERTYPE_UBNMC                   = 0x7003
+	ETHERTYPE_VALID                   = 0x1600
+	ETHERTYPE_VARIAN                  = 0x80dd
+	ETHERTYPE_VAXELN                  = 0x803b
+	ETHERTYPE_VEECO                   = 0x8067
+	ETHERTYPE_VEXP                    = 0x805b
+	ETHERTYPE_VGLAB                   = 0x8131
+	ETHERTYPE_VINES                   = 0xbad
+	ETHERTYPE_VINESECHO               = 0xbaf
+	ETHERTYPE_VINESLOOP               = 0xbae
+	ETHERTYPE_VITAL                   = 0xff00
+	ETHERTYPE_VLAN                    = 0x8100
+	ETHERTYPE_VLTLMAN                 = 0x8080
+	ETHERTYPE_VPROD                   = 0x805c
+	ETHERTYPE_VURESERVED              = 0x8147
+	ETHERTYPE_WATERLOO                = 0x8130
+	ETHERTYPE_WELLFLEET               = 0x8103
+	ETHERTYPE_X25                     = 0x805
+	ETHERTYPE_X75                     = 0x801
+	ETHERTYPE_XNSSM                   = 0x9001
+	ETHERTYPE_XTP                     = 0x817d
+	ETHER_ADDR_LEN                    = 0x6
+	ETHER_CRC_LEN                     = 0x4
+	ETHER_CRC_POLY_BE                 = 0x4c11db6
+	ETHER_CRC_POLY_LE                 = 0xedb88320
+	ETHER_HDR_LEN                     = 0xe
+	ETHER_MAX_LEN                     = 0x5ee
+	ETHER_MAX_LEN_JUMBO               = 0x233a
+	ETHER_MIN_LEN                     = 0x40
+	ETHER_PPPOE_ENCAP_LEN             = 0x8
+	ETHER_TYPE_LEN                    = 0x2
+	ETHER_VLAN_ENCAP_LEN              = 0x4
+	EVFILT_AIO                        = 0x2
+	EVFILT_PROC                       = 0x4
+	EVFILT_READ                       = 0x0
+	EVFILT_SIGNAL                     = 0x5
+	EVFILT_SYSCOUNT                   = 0x7
+	EVFILT_TIMER                      = 0x6
+	EVFILT_VNODE                      = 0x3
+	EVFILT_WRITE                      = 0x1
+	EV_ADD                            = 0x1
+	EV_CLEAR                          = 0x20
+	EV_DELETE                         = 0x2
+	EV_DISABLE                        = 0x8
+	EV_ENABLE                         = 0x4
+	EV_EOF                            = 0x8000
+	EV_ERROR                          = 0x4000
+	EV_FLAG1                          = 0x2000
+	EV_ONESHOT                        = 0x10
+	EV_SYSFLAGS                       = 0xf000
+	EXTA                              = 0x4b00
+	EXTATTR_CMD_START                 = 0x1
+	EXTATTR_CMD_STOP                  = 0x2
+	EXTATTR_NAMESPACE_SYSTEM          = 0x2
+	EXTATTR_NAMESPACE_USER            = 0x1
+	EXTB                              = 0x9600
+	EXTPROC                           = 0x800
+	FD_CLOEXEC                        = 0x1
+	FD_SETSIZE                        = 0x100
+	FLUSHO                            = 0x800000
+	F_CLOSEM                          = 0xa
+	F_DUPFD                           = 0x0
+	F_DUPFD_CLOEXEC                   = 0xc
+	F_FSCTL                           = -0x80000000
+	F_FSDIRMASK                       = 0x70000000
+	F_FSIN                            = 0x10000000
+	F_FSINOUT                         = 0x30000000
+	F_FSOUT                           = 0x20000000
+	F_FSPRIV                          = 0x8000
+	F_FSVOID                          = 0x40000000
+	F_GETFD                           = 0x1
+	F_GETFL                           = 0x3
+	F_GETLK                           = 0x7
+	F_GETNOSIGPIPE                    = 0xd
+	F_GETOWN                          = 0x5
+	F_MAXFD                           = 0xb
+	F_OK                              = 0x0
+	F_PARAM_MASK                      = 0xfff
+	F_PARAM_MAX                       = 0xfff
+	F_RDLCK                           = 0x1
+	F_SETFD                           = 0x2
+	F_SETFL                           = 0x4
+	F_SETLK                           = 0x8
+	F_SETLKW                          = 0x9
+	F_SETNOSIGPIPE                    = 0xe
+	F_SETOWN                          = 0x6
+	F_UNLCK                           = 0x2
+	F_WRLCK                           = 0x3
+	HUPCL                             = 0x4000
+	HW_MACHINE                        = 0x1
+	ICANON                            = 0x100
+	ICMP6_FILTER                      = 0x12
+	ICRNL                             = 0x100
+	IEXTEN                            = 0x400
+	IFAN_ARRIVAL                      = 0x0
+	IFAN_DEPARTURE                    = 0x1
+	IFA_ROUTE                         = 0x1
+	IFF_ALLMULTI                      = 0x200
+	IFF_BROADCAST                     = 0x2
+	IFF_CANTCHANGE                    = 0x8f52
+	IFF_DEBUG                         = 0x4
+	IFF_LINK0                         = 0x1000
+	IFF_LINK1                         = 0x2000
+	IFF_LINK2                         = 0x4000
+	IFF_LOOPBACK                      = 0x8
+	IFF_MULTICAST                     = 0x8000
+	IFF_NOARP                         = 0x80
+	IFF_NOTRAILERS                    = 0x20
+	IFF_OACTIVE                       = 0x400
+	IFF_POINTOPOINT                   = 0x10
+	IFF_PROMISC                       = 0x100
+	IFF_RUNNING                       = 0x40
+	IFF_SIMPLEX                       = 0x800
+	IFF_UP                            = 0x1
+	IFNAMSIZ                          = 0x10
+	IFT_1822                          = 0x2
+	IFT_A12MPPSWITCH                  = 0x82
+	IFT_AAL2                          = 0xbb
+	IFT_AAL5                          = 0x31
+	IFT_ADSL                          = 0x5e
+	IFT_AFLANE8023                    = 0x3b
+	IFT_AFLANE8025                    = 0x3c
+	IFT_ARAP                          = 0x58
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ASYNC                         = 0x54
+	IFT_ATM                           = 0x25
+	IFT_ATMDXI                        = 0x69
+	IFT_ATMFUNI                       = 0x6a
+	IFT_ATMIMA                        = 0x6b
+	IFT_ATMLOGICAL                    = 0x50
+	IFT_ATMRADIO                      = 0xbd
+	IFT_ATMSUBINTERFACE               = 0x86
+	IFT_ATMVCIENDPT                   = 0xc2
+	IFT_ATMVIRTUAL                    = 0x95
+	IFT_BGPPOLICYACCOUNTING           = 0xa2
+	IFT_BRIDGE                        = 0xd1
+	IFT_BSC                           = 0x53
+	IFT_CARP                          = 0xf8
+	IFT_CCTEMUL                       = 0x3d
+	IFT_CEPT                          = 0x13
+	IFT_CES                           = 0x85
+	IFT_CHANNEL                       = 0x46
+	IFT_CNR                           = 0x55
+	IFT_COFFEE                        = 0x84
+	IFT_COMPOSITELINK                 = 0x9b
+	IFT_DCN                           = 0x8d
+	IFT_DIGITALPOWERLINE              = 0x8a
+	IFT_DIGITALWRAPPEROVERHEADCHANNEL = 0xba
+	IFT_DLSW                          = 0x4a
+	IFT_DOCSCABLEDOWNSTREAM           = 0x80
+	IFT_DOCSCABLEMACLAYER             = 0x7f
+	IFT_DOCSCABLEUPSTREAM             = 0x81
+	IFT_DOCSCABLEUPSTREAMCHANNEL      = 0xcd
+	IFT_DS0                           = 0x51
+	IFT_DS0BUNDLE                     = 0x52
+	IFT_DS1FDL                        = 0xaa
+	IFT_DS3                           = 0x1e
+	IFT_DTM                           = 0x8c
+	IFT_DVBASILN                      = 0xac
+	IFT_DVBASIOUT                     = 0xad
+	IFT_DVBRCCDOWNSTREAM              = 0x93
+	IFT_DVBRCCMACLAYER                = 0x92
+	IFT_DVBRCCUPSTREAM                = 0x94
+	IFT_ECONET                        = 0xce
+	IFT_EON                           = 0x19
+	IFT_EPLRS                         = 0x57
+	IFT_ESCON                         = 0x49
+	IFT_ETHER                         = 0x6
+	IFT_FAITH                         = 0xf2
+	IFT_FAST                          = 0x7d
+	IFT_FASTETHER                     = 0x3e
+	IFT_FASTETHERFX                   = 0x45
+	IFT_FDDI                          = 0xf
+	IFT_FIBRECHANNEL                  = 0x38
+	IFT_FRAMERELAYINTERCONNECT        = 0x3a
+	IFT_FRAMERELAYMPI                 = 0x5c
+	IFT_FRDLCIENDPT                   = 0xc1
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_FRF16MFRBUNDLE                = 0xa3
+	IFT_FRFORWARD                     = 0x9e
+	IFT_G703AT2MB                     = 0x43
+	IFT_G703AT64K                     = 0x42
+	IFT_GIF                           = 0xf0
+	IFT_GIGABITETHERNET               = 0x75
+	IFT_GR303IDT                      = 0xb2
+	IFT_GR303RDT                      = 0xb1
+	IFT_H323GATEKEEPER                = 0xa4
+	IFT_H323PROXY                     = 0xa5
+	IFT_HDH1822                       = 0x3
+	IFT_HDLC                          = 0x76
+	IFT_HDSL2                         = 0xa8
+	IFT_HIPERLAN2                     = 0xb7
+	IFT_HIPPI                         = 0x2f
+	IFT_HIPPIINTERFACE                = 0x39
+	IFT_HOSTPAD                       = 0x5a
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IBM370PARCHAN                 = 0x48
+	IFT_IDSL                          = 0x9a
+	IFT_IEEE1394                      = 0x90
+	IFT_IEEE80211                     = 0x47
+	IFT_IEEE80212                     = 0x37
+	IFT_IEEE8023ADLAG                 = 0xa1
+	IFT_IFGSN                         = 0x91
+	IFT_IMT                           = 0xbe
+	IFT_INFINIBAND                    = 0xc7
+	IFT_INTERLEAVE                    = 0x7c
+	IFT_IP                            = 0x7e
+	IFT_IPFORWARD                     = 0x8e
+	IFT_IPOVERATM                     = 0x72
+	IFT_IPOVERCDLC                    = 0x6d
+	IFT_IPOVERCLAW                    = 0x6e
+	IFT_IPSWITCH                      = 0x4e
+	IFT_ISDN                          = 0x3f
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISDNS                         = 0x4b
+	IFT_ISDNU                         = 0x4c
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88025CRFPINT               = 0x62
+	IFT_ISO88025DTR                   = 0x56
+	IFT_ISO88025FIBER                 = 0x73
+	IFT_ISO88026                      = 0xa
+	IFT_ISUP                          = 0xb3
+	IFT_L2VLAN                        = 0x87
+	IFT_L3IPVLAN                      = 0x88
+	IFT_L3IPXVLAN                     = 0x89
+	IFT_LAPB                          = 0x10
+	IFT_LAPD                          = 0x4d
+	IFT_LAPF                          = 0x77
+	IFT_LINEGROUP                     = 0xd2
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MEDIAMAILOVERIP               = 0x8b
+	IFT_MFSIGLINK                     = 0xa7
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_MPC                           = 0x71
+	IFT_MPLS                          = 0xa6
+	IFT_MPLSTUNNEL                    = 0x96
+	IFT_MSDSL                         = 0x8f
+	IFT_MVL                           = 0xbf
+	IFT_MYRINET                       = 0x63
+	IFT_NFAS                          = 0xaf
+	IFT_NSIP                          = 0x1b
+	IFT_OPTICALCHANNEL                = 0xc3
+	IFT_OPTICALTRANSPORT              = 0xc4
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PFLOG                         = 0xf5
+	IFT_PFSYNC                        = 0xf6
+	IFT_PLC                           = 0xae
+	IFT_PON155                        = 0xcf
+	IFT_PON622                        = 0xd0
+	IFT_POS                           = 0xab
+	IFT_PPP                           = 0x17
+	IFT_PPPMULTILINKBUNDLE            = 0x6c
+	IFT_PROPATM                       = 0xc5
+	IFT_PROPBWAP2MP                   = 0xb8
+	IFT_PROPCNLS                      = 0x59
+	IFT_PROPDOCSWIRELESSDOWNSTREAM    = 0xb5
+	IFT_PROPDOCSWIRELESSMACLAYER      = 0xb4
+	IFT_PROPDOCSWIRELESSUPSTREAM      = 0xb6
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPVIRTUAL                   = 0x35
+	IFT_PROPWIRELESSP2P               = 0x9d
+	IFT_PTPSERIAL                     = 0x16
+	IFT_PVC                           = 0xf1
+	IFT_Q2931                         = 0xc9
+	IFT_QLLC                          = 0x44
+	IFT_RADIOMAC                      = 0xbc
+	IFT_RADSL                         = 0x5f
+	IFT_REACHDSL                      = 0xc0
+	IFT_RFC1483                       = 0x9f
+	IFT_RS232                         = 0x21
+	IFT_RSRB                          = 0x4f
+	IFT_SDLC                          = 0x11
+	IFT_SDSL                          = 0x60
+	IFT_SHDSL                         = 0xa9
+	IFT_SIP                           = 0x1f
+	IFT_SIPSIG                        = 0xcc
+	IFT_SIPTG                         = 0xcb
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETOVERHEADCHANNEL          = 0xb9
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_SRP                           = 0x97
+	IFT_SS7SIGLINK                    = 0x9c
+	IFT_STACKTOSTACK                  = 0x6f
+	IFT_STARLAN                       = 0xb
+	IFT_STF                           = 0xd7
+	IFT_T1                            = 0x12
+	IFT_TDLC                          = 0x74
+	IFT_TELINK                        = 0xc8
+	IFT_TERMPAD                       = 0x5b
+	IFT_TR008                         = 0xb0
+	IFT_TRANSPHDLC                    = 0x7b
+	IFT_TUNNEL                        = 0x83
+	IFT_ULTRA                         = 0x1d
+	IFT_USB                           = 0xa0
+	IFT_V11                           = 0x40
+	IFT_V35                           = 0x2d
+	IFT_V36                           = 0x41
+	IFT_V37                           = 0x78
+	IFT_VDSL                          = 0x61
+	IFT_VIRTUALIPADDRESS              = 0x70
+	IFT_VIRTUALTG                     = 0xca
+	IFT_VOICEDID                      = 0xd5
+	IFT_VOICEEM                       = 0x64
+	IFT_VOICEEMFGD                    = 0xd3
+	IFT_VOICEENCAP                    = 0x67
+	IFT_VOICEFGDEANA                  = 0xd4
+	IFT_VOICEFXO                      = 0x65
+	IFT_VOICEFXS                      = 0x66
+	IFT_VOICEOVERATM                  = 0x98
+	IFT_VOICEOVERCABLE                = 0xc6
+	IFT_VOICEOVERFRAMERELAY           = 0x99
+	IFT_VOICEOVERIP                   = 0x68
+	IFT_X213                          = 0x5d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25HUNTGROUP                  = 0x7a
+	IFT_X25MLP                        = 0x79
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+	IGNBRK                            = 0x1
+	IGNCR                             = 0x80
+	IGNPAR                            = 0x4
+	IMAXBEL                           = 0x2000
+	INLCR                             = 0x40
+	INPCK                             = 0x10
+	IN_CLASSA_HOST                    = 0xffffff
+	IN_CLASSA_MAX                     = 0x80
+	IN_CLASSA_NET                     = 0xff000000
+	IN_CLASSA_NSHIFT                  = 0x18
+	IN_CLASSB_HOST                    = 0xffff
+	IN_CLASSB_MAX                     = 0x10000
+	IN_CLASSB_NET                     = 0xffff0000
+	IN_CLASSB_NSHIFT                  = 0x10
+	IN_CLASSC_HOST                    = 0xff
+	IN_CLASSC_NET                     = 0xffffff00
+	IN_CLASSC_NSHIFT                  = 0x8
+	IN_CLASSD_HOST                    = 0xfffffff
+	IN_CLASSD_NET                     = 0xf0000000
+	IN_CLASSD_NSHIFT                  = 0x1c
+	IN_LOOPBACKNET                    = 0x7f
+	IPPROTO_AH                        = 0x33
+	IPPROTO_CARP                      = 0x70
+	IPPROTO_DONE                      = 0x101
+	IPPROTO_DSTOPTS                   = 0x3c
+	IPPROTO_EGP                       = 0x8
+	IPPROTO_ENCAP                     = 0x62
+	IPPROTO_EON                       = 0x50
+	IPPROTO_ESP                       = 0x32
+	IPPROTO_ETHERIP                   = 0x61
+	IPPROTO_FRAGMENT                  = 0x2c
+	IPPROTO_GGP                       = 0x3
+	IPPROTO_GRE                       = 0x2f
+	IPPROTO_HOPOPTS                   = 0x0
+	IPPROTO_ICMP                      = 0x1
+	IPPROTO_ICMPV6                    = 0x3a
+	IPPROTO_IDP                       = 0x16
+	IPPROTO_IGMP                      = 0x2
+	IPPROTO_IP                        = 0x0
+	IPPROTO_IPCOMP                    = 0x6c
+	IPPROTO_IPIP                      = 0x4
+	IPPROTO_IPV4                      = 0x4
+	IPPROTO_IPV6                      = 0x29
+	IPPROTO_IPV6_ICMP                 = 0x3a
+	IPPROTO_MAX                       = 0x100
+	IPPROTO_MAXID                     = 0x34
+	IPPROTO_MOBILE                    = 0x37
+	IPPROTO_NONE                      = 0x3b
+	IPPROTO_PFSYNC                    = 0xf0
+	IPPROTO_PIM                       = 0x67
+	IPPROTO_PUP                       = 0xc
+	IPPROTO_RAW                       = 0xff
+	IPPROTO_ROUTING                   = 0x2b
+	IPPROTO_RSVP                      = 0x2e
+	IPPROTO_TCP                       = 0x6
+	IPPROTO_TP                        = 0x1d
+	IPPROTO_UDP                       = 0x11
+	IPPROTO_VRRP                      = 0x70
+	IPV6_CHECKSUM                     = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS       = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP       = 0x1
+	IPV6_DEFHLIM                      = 0x40
+	IPV6_DONTFRAG                     = 0x3e
+	IPV6_DSTOPTS                      = 0x32
+	IPV6_FAITH                        = 0x1d
+	IPV6_FLOWINFO_MASK                = 0xffffff0f
+	IPV6_FLOWLABEL_MASK               = 0xffff0f00
+	IPV6_FRAGTTL                      = 0x78
+	IPV6_HLIMDEC                      = 0x1
+	IPV6_HOPLIMIT                     = 0x2f
+	IPV6_HOPOPTS                      = 0x31
+	IPV6_IPSEC_POLICY                 = 0x1c
+	IPV6_JOIN_GROUP                   = 0xc
+	IPV6_LEAVE_GROUP                  = 0xd
+	IPV6_MAXHLIM                      = 0xff
+	IPV6_MAXPACKET                    = 0xffff
+	IPV6_MMTU                         = 0x500
+	IPV6_MULTICAST_HOPS               = 0xa
+	IPV6_MULTICAST_IF                 = 0x9
+	IPV6_MULTICAST_LOOP               = 0xb
+	IPV6_NEXTHOP                      = 0x30
+	IPV6_PATHMTU                      = 0x2c
+	IPV6_PKTINFO                      = 0x2e
+	IPV6_PORTRANGE                    = 0xe
+	IPV6_PORTRANGE_DEFAULT            = 0x0
+	IPV6_PORTRANGE_HIGH               = 0x1
+	IPV6_PORTRANGE_LOW                = 0x2
+	IPV6_RECVDSTOPTS                  = 0x28
+	IPV6_RECVHOPLIMIT                 = 0x25
+	IPV6_RECVHOPOPTS                  = 0x27
+	IPV6_RECVPATHMTU                  = 0x2b
+	IPV6_RECVPKTINFO                  = 0x24
+	IPV6_RECVRTHDR                    = 0x26
+	IPV6_RECVTCLASS                   = 0x39
+	IPV6_RTHDR                        = 0x33
+	IPV6_RTHDRDSTOPTS                 = 0x23
+	IPV6_RTHDR_LOOSE                  = 0x0
+	IPV6_RTHDR_STRICT                 = 0x1
+	IPV6_RTHDR_TYPE_0                 = 0x0
+	IPV6_SOCKOPT_RESERVED1            = 0x3
+	IPV6_TCLASS                       = 0x3d
+	IPV6_UNICAST_HOPS                 = 0x4
+	IPV6_USE_MIN_MTU                  = 0x2a
+	IPV6_V6ONLY                       = 0x1b
+	IPV6_VERSION                      = 0x60
+	IPV6_VERSION_MASK                 = 0xf0
+	IP_ADD_MEMBERSHIP                 = 0xc
+	IP_DEFAULT_MULTICAST_LOOP         = 0x1
+	IP_DEFAULT_MULTICAST_TTL          = 0x1
+	IP_DF                             = 0x4000
+	IP_DROP_MEMBERSHIP                = 0xd
+	IP_EF                             = 0x8000
+	IP_ERRORMTU                       = 0x15
+	IP_HDRINCL                        = 0x2
+	IP_IPSEC_POLICY                   = 0x16
+	IP_MAXPACKET                      = 0xffff
+	IP_MAX_MEMBERSHIPS                = 0x14
+	IP_MF                             = 0x2000
+	IP_MINFRAGSIZE                    = 0x45
+	IP_MINTTL                         = 0x18
+	IP_MSS                            = 0x240
+	IP_MULTICAST_IF                   = 0x9
+	IP_MULTICAST_LOOP                 = 0xb
+	IP_MULTICAST_TTL                  = 0xa
+	IP_OFFMASK                        = 0x1fff
+	IP_OPTIONS                        = 0x1
+	IP_PORTRANGE                      = 0x13
+	IP_PORTRANGE_DEFAULT              = 0x0
+	IP_PORTRANGE_HIGH                 = 0x1
+	IP_PORTRANGE_LOW                  = 0x2
+	IP_RECVDSTADDR                    = 0x7
+	IP_RECVIF                         = 0x14
+	IP_RECVOPTS                       = 0x5
+	IP_RECVRETOPTS                    = 0x6
+	IP_RECVTTL                        = 0x17
+	IP_RETOPTS                        = 0x8
+	IP_RF                             = 0x8000
+	IP_TOS                            = 0x3
+	IP_TTL                            = 0x4
+	ISIG                              = 0x80
+	ISTRIP                            = 0x20
+	IXANY                             = 0x800
+	IXOFF                             = 0x400
+	IXON                              = 0x200
+	KERN_HOSTNAME                     = 0xa
+	KERN_OSRELEASE                    = 0x2
+	KERN_OSTYPE                       = 0x1
+	KERN_VERSION                      = 0x4
+	LOCK_EX                           = 0x2
+	LOCK_NB                           = 0x4
+	LOCK_SH                           = 0x1
+	LOCK_UN                           = 0x8
+	MADV_DONTNEED                     = 0x4
+	MADV_FREE                         = 0x6
+	MADV_NORMAL                       = 0x0
+	MADV_RANDOM                       = 0x1
+	MADV_SEQUENTIAL                   = 0x2
+	MADV_SPACEAVAIL                   = 0x5
+	MADV_WILLNEED                     = 0x3
+	MAP_ALIGNMENT_16MB                = 0x18000000
+	MAP_ALIGNMENT_1TB                 = 0x28000000
+	MAP_ALIGNMENT_256TB               = 0x30000000
+	MAP_ALIGNMENT_4GB                 = 0x20000000
+	MAP_ALIGNMENT_64KB                = 0x10000000
+	MAP_ALIGNMENT_64PB                = 0x38000000
+	MAP_ALIGNMENT_MASK                = -0x1000000
+	MAP_ALIGNMENT_SHIFT               = 0x18
+	MAP_ANON                          = 0x1000
+	MAP_FILE                          = 0x0
+	MAP_FIXED                         = 0x10
+	MAP_HASSEMAPHORE                  = 0x200
+	MAP_INHERIT                       = 0x80
+	MAP_INHERIT_COPY                  = 0x1
+	MAP_INHERIT_DEFAULT               = 0x1
+	MAP_INHERIT_DONATE_COPY           = 0x3
+	MAP_INHERIT_NONE                  = 0x2
+	MAP_INHERIT_SHARE                 = 0x0
+	MAP_NORESERVE                     = 0x40
+	MAP_PRIVATE                       = 0x2
+	MAP_RENAME                        = 0x20
+	MAP_SHARED                        = 0x1
+	MAP_STACK                         = 0x2000
+	MAP_TRYFIXED                      = 0x400
+	MAP_WIRED                         = 0x800
+	MCL_CURRENT                       = 0x1
+	MCL_FUTURE                        = 0x2
+	MNT_ASYNC                         = 0x40
+	MNT_BASIC_FLAGS                   = 0xe782807f
+	MNT_DEFEXPORTED                   = 0x200
+	MNT_DISCARD                       = 0x800000
+	MNT_EXKERB                        = 0x800
+	MNT_EXNORESPORT                   = 0x8000000
+	MNT_EXPORTANON                    = 0x400
+	MNT_EXPORTED                      = 0x100
+	MNT_EXPUBLIC                      = 0x10000000
+	MNT_EXRDONLY                      = 0x80
+	MNT_EXTATTR                       = 0x1000000
+	MNT_FORCE                         = 0x80000
+	MNT_GETARGS                       = 0x400000
+	MNT_IGNORE                        = 0x100000
+	MNT_LAZY                          = 0x3
+	MNT_LOCAL                         = 0x1000
+	MNT_LOG                           = 0x2000000
+	MNT_NOATIME                       = 0x4000000
+	MNT_NOCOREDUMP                    = 0x8000
+	MNT_NODEV                         = 0x10
+	MNT_NODEVMTIME                    = 0x40000000
+	MNT_NOEXEC                        = 0x4
+	MNT_NOSUID                        = 0x8
+	MNT_NOWAIT                        = 0x2
+	MNT_OP_FLAGS                      = 0x4d0000
+	MNT_QUOTA                         = 0x2000
+	MNT_RDONLY                        = 0x1
+	MNT_RELATIME                      = 0x20000
+	MNT_RELOAD                        = 0x40000
+	MNT_ROOTFS                        = 0x4000
+	MNT_SOFTDEP                       = 0x80000000
+	MNT_SYMPERM                       = 0x20000000
+	MNT_SYNCHRONOUS                   = 0x2
+	MNT_UNION                         = 0x20
+	MNT_UPDATE                        = 0x10000
+	MNT_VISFLAGMASK                   = 0xff90ffff
+	MNT_WAIT                          = 0x1
+	MSG_BCAST                         = 0x100
+	MSG_CMSG_CLOEXEC                  = 0x800
+	MSG_CONTROLMBUF                   = 0x2000000
+	MSG_CTRUNC                        = 0x20
+	MSG_DONTROUTE                     = 0x4
+	MSG_DONTWAIT                      = 0x80
+	MSG_EOR                           = 0x8
+	MSG_IOVUSRSPACE                   = 0x4000000
+	MSG_LENUSRSPACE                   = 0x8000000
+	MSG_MCAST                         = 0x200
+	MSG_NAMEMBUF                      = 0x1000000
+	MSG_NBIO                          = 0x1000
+	MSG_NOSIGNAL                      = 0x400
+	MSG_OOB                           = 0x1
+	MSG_PEEK                          = 0x2
+	MSG_TRUNC                         = 0x10
+	MSG_USERFLAGS                     = 0xffffff
+	MSG_WAITALL                       = 0x40
+	MS_ASYNC                          = 0x1
+	MS_INVALIDATE                     = 0x2
+	MS_SYNC                           = 0x4
+	NAME_MAX                          = 0x1ff
+	NET_RT_DUMP                       = 0x1
+	NET_RT_FLAGS                      = 0x2
+	NET_RT_IFLIST                     = 0x5
+	NET_RT_MAXID                      = 0x6
+	NET_RT_OIFLIST                    = 0x4
+	NET_RT_OOIFLIST                   = 0x3
+	NFDBITS                           = 0x20
+	NOFLSH                            = 0x80000000
+	NOTE_ATTRIB                       = 0x8
+	NOTE_CHILD                        = 0x4
+	NOTE_DELETE                       = 0x1
+	NOTE_EXEC                         = 0x20000000
+	NOTE_EXIT                         = 0x80000000
+	NOTE_EXTEND                       = 0x4
+	NOTE_FORK                         = 0x40000000
+	NOTE_LINK                         = 0x10
+	NOTE_LOWAT                        = 0x1
+	NOTE_PCTRLMASK                    = 0xf0000000
+	NOTE_PDATAMASK                    = 0xfffff
+	NOTE_RENAME                       = 0x20
+	NOTE_REVOKE                       = 0x40
+	NOTE_TRACK                        = 0x1
+	NOTE_TRACKERR                     = 0x2
+	NOTE_WRITE                        = 0x2
+	OCRNL                             = 0x10
+	OFIOGETBMAP                       = 0xc004667a
+	ONLCR                             = 0x2
+	ONLRET                            = 0x40
+	ONOCR                             = 0x20
+	ONOEOT                            = 0x8
+	OPOST                             = 0x1
+	O_ACCMODE                         = 0x3
+	O_ALT_IO                          = 0x40000
+	O_APPEND                          = 0x8
+	O_ASYNC                           = 0x40
+	O_CLOEXEC                         = 0x400000
+	O_CREAT                           = 0x200
+	O_DIRECT                          = 0x80000
+	O_DIRECTORY                       = 0x200000
+	O_DSYNC                           = 0x10000
+	O_EXCL                            = 0x800
+	O_EXLOCK                          = 0x20
+	O_FSYNC                           = 0x80
+	O_NDELAY                          = 0x4
+	O_NOCTTY                          = 0x8000
+	O_NOFOLLOW                        = 0x100
+	O_NONBLOCK                        = 0x4
+	O_NOSIGPIPE                       = 0x1000000
+	O_RDONLY                          = 0x0
+	O_RDWR                            = 0x2
+	O_RSYNC                           = 0x20000
+	O_SHLOCK                          = 0x10
+	O_SYNC                            = 0x80
+	O_TRUNC                           = 0x400
+	O_WRONLY                          = 0x1
+	PARENB                            = 0x1000
+	PARMRK                            = 0x8
+	PARODD                            = 0x2000
+	PENDIN                            = 0x20000000
+	PRIO_PGRP                         = 0x1
+	PRIO_PROCESS                      = 0x0
+	PRIO_USER                         = 0x2
+	PRI_IOFLUSH                       = 0x7c
+	PROT_EXEC                         = 0x4
+	PROT_NONE                         = 0x0
+	PROT_READ                         = 0x1
+	PROT_WRITE                        = 0x2
+	RLIMIT_AS                         = 0xa
+	RLIMIT_CORE                       = 0x4
+	RLIMIT_CPU                        = 0x0
+	RLIMIT_DATA                       = 0x2
+	RLIMIT_FSIZE                      = 0x1
+	RLIMIT_MEMLOCK                    = 0x6
+	RLIMIT_NOFILE                     = 0x8
+	RLIMIT_NPROC                      = 0x7
+	RLIMIT_RSS                        = 0x5
+	RLIMIT_STACK                      = 0x3
+	RLIM_INFINITY                     = 0x7fffffffffffffff
+	RTAX_AUTHOR                       = 0x6
+	RTAX_BRD                          = 0x7
+	RTAX_DST                          = 0x0
+	RTAX_GATEWAY                      = 0x1
+	RTAX_GENMASK                      = 0x3
+	RTAX_IFA                          = 0x5
+	RTAX_IFP                          = 0x4
+	RTAX_MAX                          = 0x9
+	RTAX_NETMASK                      = 0x2
+	RTAX_TAG                          = 0x8
+	RTA_AUTHOR                        = 0x40
+	RTA_BRD                           = 0x80
+	RTA_DST                           = 0x1
+	RTA_GATEWAY                       = 0x2
+	RTA_GENMASK                       = 0x8
+	RTA_IFA                           = 0x20
+	RTA_IFP                           = 0x10
+	RTA_NETMASK                       = 0x4
+	RTA_TAG                           = 0x100
+	RTF_ANNOUNCE                      = 0x20000
+	RTF_BLACKHOLE                     = 0x1000
+	RTF_CLONED                        = 0x2000
+	RTF_CLONING                       = 0x100
+	RTF_DONE                          = 0x40
+	RTF_DYNAMIC                       = 0x10
+	RTF_GATEWAY                       = 0x2
+	RTF_HOST                          = 0x4
+	RTF_LLINFO                        = 0x400
+	RTF_MASK                          = 0x80
+	RTF_MODIFIED                      = 0x20
+	RTF_PROTO1                        = 0x8000
+	RTF_PROTO2                        = 0x4000
+	RTF_REJECT                        = 0x8
+	RTF_SRC                           = 0x10000
+	RTF_STATIC                        = 0x800
+	RTF_UP                            = 0x1
+	RTF_XRESOLVE                      = 0x200
+	RTM_ADD                           = 0x1
+	RTM_CHANGE                        = 0x3
+	RTM_CHGADDR                       = 0x15
+	RTM_DELADDR                       = 0xd
+	RTM_DELETE                        = 0x2
+	RTM_GET                           = 0x4
+	RTM_IEEE80211                     = 0x11
+	RTM_IFANNOUNCE                    = 0x10
+	RTM_IFINFO                        = 0x14
+	RTM_LLINFO_UPD                    = 0x13
+	RTM_LOCK                          = 0x8
+	RTM_LOSING                        = 0x5
+	RTM_MISS                          = 0x7
+	RTM_NEWADDR                       = 0xc
+	RTM_OIFINFO                       = 0xf
+	RTM_OLDADD                        = 0x9
+	RTM_OLDDEL                        = 0xa
+	RTM_OOIFINFO                      = 0xe
+	RTM_REDIRECT                      = 0x6
+	RTM_RESOLVE                       = 0xb
+	RTM_RTTUNIT                       = 0xf4240
+	RTM_SETGATE                       = 0x12
+	RTM_VERSION                       = 0x4
+	RTV_EXPIRE                        = 0x4
+	RTV_HOPCOUNT                      = 0x2
+	RTV_MTU                           = 0x1
+	RTV_RPIPE                         = 0x8
+	RTV_RTT                           = 0x40
+	RTV_RTTVAR                        = 0x80
+	RTV_SPIPE                         = 0x10
+	RTV_SSTHRESH                      = 0x20
+	RUSAGE_CHILDREN                   = -0x1
+	RUSAGE_SELF                       = 0x0
+	SCM_CREDS                         = 0x4
+	SCM_RIGHTS                        = 0x1
+	SCM_TIMESTAMP                     = 0x8
+	SHUT_RD                           = 0x0
+	SHUT_RDWR                         = 0x2
+	SHUT_WR                           = 0x1
+	SIOCADDMULTI                      = 0x80906931
+	SIOCADDRT                         = 0x8038720a
+	SIOCAIFADDR                       = 0x8040691a
+	SIOCALIFADDR                      = 0x8118691c
+	SIOCATMARK                        = 0x40047307
+	SIOCDELMULTI                      = 0x80906932
+	SIOCDELRT                         = 0x8038720b
+	SIOCDIFADDR                       = 0x80906919
+	SIOCDIFPHYADDR                    = 0x80906949
+	SIOCDLIFADDR                      = 0x8118691e
+	SIOCGDRVSPEC                      = 0xc028697b
+	SIOCGETPFSYNC                     = 0xc09069f8
+	SIOCGETSGCNT                      = 0xc0207534
+	SIOCGETVIFCNT                     = 0xc0287533
+	SIOCGHIWAT                        = 0x40047301
+	SIOCGIFADDR                       = 0xc0906921
+	SIOCGIFADDRPREF                   = 0xc0986920
+	SIOCGIFALIAS                      = 0xc040691b
+	SIOCGIFBRDADDR                    = 0xc0906923
+	SIOCGIFCAP                        = 0xc0206976
+	SIOCGIFCONF                       = 0xc0106926
+	SIOCGIFDATA                       = 0xc0986985
+	SIOCGIFDLT                        = 0xc0906977
+	SIOCGIFDSTADDR                    = 0xc0906922
+	SIOCGIFFLAGS                      = 0xc0906911
+	SIOCGIFGENERIC                    = 0xc090693a
+	SIOCGIFMEDIA                      = 0xc0306936
+	SIOCGIFMETRIC                     = 0xc0906917
+	SIOCGIFMTU                        = 0xc090697e
+	SIOCGIFNETMASK                    = 0xc0906925
+	SIOCGIFPDSTADDR                   = 0xc0906948
+	SIOCGIFPSRCADDR                   = 0xc0906947
+	SIOCGLIFADDR                      = 0xc118691d
+	SIOCGLIFPHYADDR                   = 0xc118694b
+	SIOCGLINKSTR                      = 0xc0286987
+	SIOCGLOWAT                        = 0x40047303
+	SIOCGPGRP                         = 0x40047309
+	SIOCGVH                           = 0xc0906983
+	SIOCIFCREATE                      = 0x8090697a
+	SIOCIFDESTROY                     = 0x80906979
+	SIOCIFGCLONERS                    = 0xc0106978
+	SIOCINITIFADDR                    = 0xc0706984
+	SIOCSDRVSPEC                      = 0x8028697b
+	SIOCSETPFSYNC                     = 0x809069f7
+	SIOCSHIWAT                        = 0x80047300
+	SIOCSIFADDR                       = 0x8090690c
+	SIOCSIFADDRPREF                   = 0x8098691f
+	SIOCSIFBRDADDR                    = 0x80906913
+	SIOCSIFCAP                        = 0x80206975
+	SIOCSIFDSTADDR                    = 0x8090690e
+	SIOCSIFFLAGS                      = 0x80906910
+	SIOCSIFGENERIC                    = 0x80906939
+	SIOCSIFMEDIA                      = 0xc0906935
+	SIOCSIFMETRIC                     = 0x80906918
+	SIOCSIFMTU                        = 0x8090697f
+	SIOCSIFNETMASK                    = 0x80906916
+	SIOCSIFPHYADDR                    = 0x80406946
+	SIOCSLIFPHYADDR                   = 0x8118694a
+	SIOCSLINKSTR                      = 0x80286988
+	SIOCSLOWAT                        = 0x80047302
+	SIOCSPGRP                         = 0x80047308
+	SIOCSVH                           = 0xc0906982
+	SIOCZIFDATA                       = 0xc0986986
+	SOCK_CLOEXEC                      = 0x10000000
+	SOCK_DGRAM                        = 0x2
+	SOCK_FLAGS_MASK                   = 0xf0000000
+	SOCK_NONBLOCK                     = 0x20000000
+	SOCK_NOSIGPIPE                    = 0x40000000
+	SOCK_RAW                          = 0x3
+	SOCK_RDM                          = 0x4
+	SOCK_SEQPACKET                    = 0x5
+	SOCK_STREAM                       = 0x1
+	SOL_SOCKET                        = 0xffff
+	SOMAXCONN                         = 0x80
+	SO_ACCEPTCONN                     = 0x2
+	SO_ACCEPTFILTER                   = 0x1000
+	SO_BROADCAST                      = 0x20
+	SO_DEBUG                          = 0x1
+	SO_DONTROUTE                      = 0x10
+	SO_ERROR                          = 0x1007
+	SO_KEEPALIVE                      = 0x8
+	SO_LINGER                         = 0x80
+	SO_NOHEADER                       = 0x100a
+	SO_NOSIGPIPE                      = 0x800
+	SO_OOBINLINE                      = 0x100
+	SO_OVERFLOWED                     = 0x1009
+	SO_RCVBUF                         = 0x1002
+	SO_RCVLOWAT                       = 0x1004
+	SO_RCVTIMEO                       = 0x100c
+	SO_REUSEADDR                      = 0x4
+	SO_REUSEPORT                      = 0x200
+	SO_SNDBUF                         = 0x1001
+	SO_SNDLOWAT                       = 0x1003
+	SO_SNDTIMEO                       = 0x100b
+	SO_TIMESTAMP                      = 0x2000
+	SO_TYPE                           = 0x1008
+	SO_USELOOPBACK                    = 0x40
+	SYSCTL_VERSION                    = 0x1000000
+	SYSCTL_VERS_0                     = 0x0
+	SYSCTL_VERS_1                     = 0x1000000
+	SYSCTL_VERS_MASK                  = 0xff000000
+	S_ARCH1                           = 0x10000
+	S_ARCH2                           = 0x20000
+	S_BLKSIZE                         = 0x200
+	S_IEXEC                           = 0x40
+	S_IFBLK                           = 0x6000
+	S_IFCHR                           = 0x2000
+	S_IFDIR                           = 0x4000
+	S_IFIFO                           = 0x1000
+	S_IFLNK                           = 0xa000
+	S_IFMT                            = 0xf000
+	S_IFREG                           = 0x8000
+	S_IFSOCK                          = 0xc000
+	S_IFWHT                           = 0xe000
+	S_IREAD                           = 0x100
+	S_IRGRP                           = 0x20
+	S_IROTH                           = 0x4
+	S_IRUSR                           = 0x100
+	S_IRWXG                           = 0x38
+	S_IRWXO                           = 0x7
+	S_IRWXU                           = 0x1c0
+	S_ISGID                           = 0x400
+	S_ISTXT                           = 0x200
+	S_ISUID                           = 0x800
+	S_ISVTX                           = 0x200
+	S_IWGRP                           = 0x10
+	S_IWOTH                           = 0x2
+	S_IWRITE                          = 0x80
+	S_IWUSR                           = 0x80
+	S_IXGRP                           = 0x8
+	S_IXOTH                           = 0x1
+	S_IXUSR                           = 0x40
+	S_LOGIN_SET                       = 0x1
+	TCIFLUSH                          = 0x1
+	TCIOFLUSH                         = 0x3
+	TCOFLUSH                          = 0x2
+	TCP_CONGCTL                       = 0x20
+	TCP_KEEPCNT                       = 0x6
+	TCP_KEEPIDLE                      = 0x3
+	TCP_KEEPINIT                      = 0x7
+	TCP_KEEPINTVL                     = 0x5
+	TCP_MAXBURST                      = 0x4
+	TCP_MAXSEG                        = 0x2
+	TCP_MAXWIN                        = 0xffff
+	TCP_MAX_WINSHIFT                  = 0xe
+	TCP_MD5SIG                        = 0x10
+	TCP_MINMSS                        = 0xd8
+	TCP_MSS                           = 0x218
+	TCP_NODELAY                       = 0x1
+	TCSAFLUSH                         = 0x2
+	TIOCCBRK                          = 0x2000747a
+	TIOCCDTR                          = 0x20007478
+	TIOCCONS                          = 0x80047462
+	TIOCDCDTIMESTAMP                  = 0x40107458
+	TIOCDRAIN                         = 0x2000745e
+	TIOCEXCL                          = 0x2000740d
+	TIOCEXT                           = 0x80047460
+	TIOCFLAG_CDTRCTS                  = 0x10
+	TIOCFLAG_CLOCAL                   = 0x2
+	TIOCFLAG_CRTSCTS                  = 0x4
+	TIOCFLAG_MDMBUF                   = 0x8
+	TIOCFLAG_SOFTCAR                  = 0x1
+	TIOCFLUSH                         = 0x80047410
+	TIOCGETA                          = 0x402c7413
+	TIOCGETD                          = 0x4004741a
+	TIOCGFLAGS                        = 0x4004745d
+	TIOCGLINED                        = 0x40207442
+	TIOCGPGRP                         = 0x40047477
+	TIOCGQSIZE                        = 0x40047481
+	TIOCGRANTPT                       = 0x20007447
+	TIOCGSID                          = 0x40047463
+	TIOCGSIZE                         = 0x40087468
+	TIOCGWINSZ                        = 0x40087468
+	TIOCMBIC                          = 0x8004746b
+	TIOCMBIS                          = 0x8004746c
+	TIOCMGET                          = 0x4004746a
+	TIOCMSET                          = 0x8004746d
+	TIOCM_CAR                         = 0x40
+	TIOCM_CD                          = 0x40
+	TIOCM_CTS                         = 0x20
+	TIOCM_DSR                         = 0x100
+	TIOCM_DTR                         = 0x2
+	TIOCM_LE                          = 0x1
+	TIOCM_RI                          = 0x80
+	TIOCM_RNG                         = 0x80
+	TIOCM_RTS                         = 0x4
+	TIOCM_SR                          = 0x10
+	TIOCM_ST                          = 0x8
+	TIOCNOTTY                         = 0x20007471
+	TIOCNXCL                          = 0x2000740e
+	TIOCOUTQ                          = 0x40047473
+	TIOCPKT                           = 0x80047470
+	TIOCPKT_DATA                      = 0x0
+	TIOCPKT_DOSTOP                    = 0x20
+	TIOCPKT_FLUSHREAD                 = 0x1
+	TIOCPKT_FLUSHWRITE                = 0x2
+	TIOCPKT_IOCTL                     = 0x40
+	TIOCPKT_NOSTOP                    = 0x10
+	TIOCPKT_START                     = 0x8
+	TIOCPKT_STOP                      = 0x4
+	TIOCPTMGET                        = 0x40287446
+	TIOCPTSNAME                       = 0x40287448
+	TIOCRCVFRAME                      = 0x80087445
+	TIOCREMOTE                        = 0x80047469
+	TIOCSBRK                          = 0x2000747b
+	TIOCSCTTY                         = 0x20007461
+	TIOCSDTR                          = 0x20007479
+	TIOCSETA                          = 0x802c7414
+	TIOCSETAF                         = 0x802c7416
+	TIOCSETAW                         = 0x802c7415
+	TIOCSETD                          = 0x8004741b
+	TIOCSFLAGS                        = 0x8004745c
+	TIOCSIG                           = 0x2000745f
+	TIOCSLINED                        = 0x80207443
+	TIOCSPGRP                         = 0x80047476
+	TIOCSQSIZE                        = 0x80047480
+	TIOCSSIZE                         = 0x80087467
+	TIOCSTART                         = 0x2000746e
+	TIOCSTAT                          = 0x80047465
+	TIOCSTI                           = 0x80017472
+	TIOCSTOP                          = 0x2000746f
+	TIOCSWINSZ                        = 0x80087467
+	TIOCUCNTL                         = 0x80047466
+	TIOCXMTFRAME                      = 0x80087444
+	TOSTOP                            = 0x400000
+	VDISCARD                          = 0xf
+	VDSUSP                            = 0xb
+	VEOF                              = 0x0
+	VEOL                              = 0x1
+	VEOL2                             = 0x2
+	VERASE                            = 0x3
+	VINTR                             = 0x8
+	VKILL                             = 0x5
+	VLNEXT                            = 0xe
+	VMIN                              = 0x10
+	VQUIT                             = 0x9
+	VREPRINT                          = 0x6
+	VSTART                            = 0xc
+	VSTATUS                           = 0x12
+	VSTOP                             = 0xd
+	VSUSP                             = 0xa
+	VTIME                             = 0x11
+	VWERASE                           = 0x4
+	WALL                              = 0x8
+	WALLSIG                           = 0x8
+	WALTSIG                           = 0x4
+	WCLONE                            = 0x4
+	WCOREFLAG                         = 0x80
+	WNOHANG                           = 0x1
+	WNOWAIT                           = 0x10000
+	WNOZOMBIE                         = 0x20000
+	WOPTSCHECKED                      = 0x40000
+	WSTOPPED                          = 0x7f
+	WUNTRACED                         = 0x2
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADF           = syscall.Errno(0x9)
+	EBADMSG         = syscall.Errno(0x58)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x57)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDOM            = syscall.Errno(0x21)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x52)
+	EILSEQ          = syscall.Errno(0x55)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x60)
+	ELOOP           = syscall.Errno(0x3e)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	EMULTIHOP       = syscall.Errno(0x5e)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x5d)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODATA         = syscall.Errno(0x59)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOLINK         = syscall.Errno(0x5f)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x53)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSR           = syscall.Errno(0x5a)
+	ENOSTR          = syscall.Errno(0x5b)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x56)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x2d)
+	EOVERFLOW       = syscall.Errno(0x54)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTO          = syscall.Errno(0x60)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIME           = syscall.Errno(0x5c)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGPWR    = syscall.Signal(0x20)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large or too small"},
+	{35, "EAGAIN", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol option not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "EOPNOTSUPP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "connection timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disc quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC prog. not avail"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EIDRM", "identifier removed"},
+	{83, "ENOMSG", "no message of desired type"},
+	{84, "EOVERFLOW", "value too large to be stored in data type"},
+	{85, "EILSEQ", "illegal byte sequence"},
+	{86, "ENOTSUP", "not supported"},
+	{87, "ECANCELED", "operation Canceled"},
+	{88, "EBADMSG", "bad or Corrupt message"},
+	{89, "ENODATA", "no message available"},
+	{90, "ENOSR", "no STREAM resources"},
+	{91, "ENOSTR", "not a STREAM"},
+	{92, "ETIME", "STREAM ioctl timeout"},
+	{93, "ENOATTR", "attribute not found"},
+	{94, "EMULTIHOP", "multihop attempted"},
+	{95, "ENOLINK", "link has been severed"},
+	{96, "ELAST", "protocol error"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGIOT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "stopped (signal)"},
+	{18, "SIGTSTP", "stopped"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+	{32, "SIGPWR", "power fail/restart"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_386.go
new file mode 100644
index 000000000..c865a10df
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_386.go
@@ -0,0 +1,1664 @@
+// mkerrors.sh -m32
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build 386,openbsd
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -m32 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                      = 0x10
+	AF_BLUETOOTH                      = 0x20
+	AF_CCITT                          = 0xa
+	AF_CHAOS                          = 0x5
+	AF_CNT                            = 0x15
+	AF_COIP                           = 0x14
+	AF_DATAKIT                        = 0x9
+	AF_DECnet                         = 0xc
+	AF_DLI                            = 0xd
+	AF_E164                           = 0x1a
+	AF_ECMA                           = 0x8
+	AF_ENCAP                          = 0x1c
+	AF_HYLINK                         = 0xf
+	AF_IMPLINK                        = 0x3
+	AF_INET                           = 0x2
+	AF_INET6                          = 0x18
+	AF_IPX                            = 0x17
+	AF_ISDN                           = 0x1a
+	AF_ISO                            = 0x7
+	AF_KEY                            = 0x1e
+	AF_LAT                            = 0xe
+	AF_LINK                           = 0x12
+	AF_LOCAL                          = 0x1
+	AF_MAX                            = 0x24
+	AF_MPLS                           = 0x21
+	AF_NATM                           = 0x1b
+	AF_NS                             = 0x6
+	AF_OSI                            = 0x7
+	AF_PUP                            = 0x4
+	AF_ROUTE                          = 0x11
+	AF_SIP                            = 0x1d
+	AF_SNA                            = 0xb
+	AF_UNIX                           = 0x1
+	AF_UNSPEC                         = 0x0
+	ARPHRD_ETHER                      = 0x1
+	ARPHRD_FRELAY                     = 0xf
+	ARPHRD_IEEE1394                   = 0x18
+	ARPHRD_IEEE802                    = 0x6
+	B0                                = 0x0
+	B110                              = 0x6e
+	B115200                           = 0x1c200
+	B1200                             = 0x4b0
+	B134                              = 0x86
+	B14400                            = 0x3840
+	B150                              = 0x96
+	B1800                             = 0x708
+	B19200                            = 0x4b00
+	B200                              = 0xc8
+	B230400                           = 0x38400
+	B2400                             = 0x960
+	B28800                            = 0x7080
+	B300                              = 0x12c
+	B38400                            = 0x9600
+	B4800                             = 0x12c0
+	B50                               = 0x32
+	B57600                            = 0xe100
+	B600                              = 0x258
+	B7200                             = 0x1c20
+	B75                               = 0x4b
+	B76800                            = 0x12c00
+	B9600                             = 0x2580
+	BIOCFLUSH                         = 0x20004268
+	BIOCGBLEN                         = 0x40044266
+	BIOCGDIRFILT                      = 0x4004427c
+	BIOCGDLT                          = 0x4004426a
+	BIOCGDLTLIST                      = 0xc008427b
+	BIOCGETIF                         = 0x4020426b
+	BIOCGFILDROP                      = 0x40044278
+	BIOCGHDRCMPLT                     = 0x40044274
+	BIOCGRSIG                         = 0x40044273
+	BIOCGRTIMEOUT                     = 0x400c426e
+	BIOCGSTATS                        = 0x4008426f
+	BIOCIMMEDIATE                     = 0x80044270
+	BIOCLOCK                          = 0x20004276
+	BIOCPROMISC                       = 0x20004269
+	BIOCSBLEN                         = 0xc0044266
+	BIOCSDIRFILT                      = 0x8004427d
+	BIOCSDLT                          = 0x8004427a
+	BIOCSETF                          = 0x80084267
+	BIOCSETIF                         = 0x8020426c
+	BIOCSETWF                         = 0x80084277
+	BIOCSFILDROP                      = 0x80044279
+	BIOCSHDRCMPLT                     = 0x80044275
+	BIOCSRSIG                         = 0x80044272
+	BIOCSRTIMEOUT                     = 0x800c426d
+	BIOCVERSION                       = 0x40044271
+	BPF_A                             = 0x10
+	BPF_ABS                           = 0x20
+	BPF_ADD                           = 0x0
+	BPF_ALIGNMENT                     = 0x4
+	BPF_ALU                           = 0x4
+	BPF_AND                           = 0x50
+	BPF_B                             = 0x10
+	BPF_DIRECTION_IN                  = 0x1
+	BPF_DIRECTION_OUT                 = 0x2
+	BPF_DIV                           = 0x30
+	BPF_H                             = 0x8
+	BPF_IMM                           = 0x0
+	BPF_IND                           = 0x40
+	BPF_JA                            = 0x0
+	BPF_JEQ                           = 0x10
+	BPF_JGE                           = 0x30
+	BPF_JGT                           = 0x20
+	BPF_JMP                           = 0x5
+	BPF_JSET                          = 0x40
+	BPF_K                             = 0x0
+	BPF_LD                            = 0x0
+	BPF_LDX                           = 0x1
+	BPF_LEN                           = 0x80
+	BPF_LSH                           = 0x60
+	BPF_MAJOR_VERSION                 = 0x1
+	BPF_MAXBUFSIZE                    = 0x200000
+	BPF_MAXINSNS                      = 0x200
+	BPF_MEM                           = 0x60
+	BPF_MEMWORDS                      = 0x10
+	BPF_MINBUFSIZE                    = 0x20
+	BPF_MINOR_VERSION                 = 0x1
+	BPF_MISC                          = 0x7
+	BPF_MSH                           = 0xa0
+	BPF_MUL                           = 0x20
+	BPF_NEG                           = 0x80
+	BPF_OR                            = 0x40
+	BPF_RELEASE                       = 0x30bb6
+	BPF_RET                           = 0x6
+	BPF_RSH                           = 0x70
+	BPF_ST                            = 0x2
+	BPF_STX                           = 0x3
+	BPF_SUB                           = 0x10
+	BPF_TAX                           = 0x0
+	BPF_TXA                           = 0x80
+	BPF_W                             = 0x0
+	BPF_X                             = 0x8
+	BRKINT                            = 0x2
+	CFLUSH                            = 0xf
+	CLOCAL                            = 0x8000
+	CPUSTATES                         = 0x6
+	CP_IDLE                           = 0x5
+	CP_INTR                           = 0x4
+	CP_NICE                           = 0x1
+	CP_SPIN                           = 0x3
+	CP_SYS                            = 0x2
+	CP_USER                           = 0x0
+	CREAD                             = 0x800
+	CRTSCTS                           = 0x10000
+	CS5                               = 0x0
+	CS6                               = 0x100
+	CS7                               = 0x200
+	CS8                               = 0x300
+	CSIZE                             = 0x300
+	CSTART                            = 0x11
+	CSTATUS                           = 0xff
+	CSTOP                             = 0x13
+	CSTOPB                            = 0x400
+	CSUSP                             = 0x1a
+	CTL_HW                            = 0x6
+	CTL_KERN                          = 0x1
+	CTL_MAXNAME                       = 0xc
+	CTL_NET                           = 0x4
+	DIOCOSFPFLUSH                     = 0x2000444e
+	DLT_ARCNET                        = 0x7
+	DLT_ATM_RFC1483                   = 0xb
+	DLT_AX25                          = 0x3
+	DLT_CHAOS                         = 0x5
+	DLT_C_HDLC                        = 0x68
+	DLT_EN10MB                        = 0x1
+	DLT_EN3MB                         = 0x2
+	DLT_ENC                           = 0xd
+	DLT_FDDI                          = 0xa
+	DLT_IEEE802                       = 0x6
+	DLT_IEEE802_11                    = 0x69
+	DLT_IEEE802_11_RADIO              = 0x7f
+	DLT_LOOP                          = 0xc
+	DLT_MPLS                          = 0xdb
+	DLT_NULL                          = 0x0
+	DLT_PFLOG                         = 0x75
+	DLT_PFSYNC                        = 0x12
+	DLT_PPP                           = 0x9
+	DLT_PPP_BSDOS                     = 0x10
+	DLT_PPP_ETHER                     = 0x33
+	DLT_PPP_SERIAL                    = 0x32
+	DLT_PRONET                        = 0x4
+	DLT_RAW                           = 0xe
+	DLT_SLIP                          = 0x8
+	DLT_SLIP_BSDOS                    = 0xf
+	DT_BLK                            = 0x6
+	DT_CHR                            = 0x2
+	DT_DIR                            = 0x4
+	DT_FIFO                           = 0x1
+	DT_LNK                            = 0xa
+	DT_REG                            = 0x8
+	DT_SOCK                           = 0xc
+	DT_UNKNOWN                        = 0x0
+	ECHO                              = 0x8
+	ECHOCTL                           = 0x40
+	ECHOE                             = 0x2
+	ECHOK                             = 0x4
+	ECHOKE                            = 0x1
+	ECHONL                            = 0x10
+	ECHOPRT                           = 0x20
+	EMT_TAGOVF                        = 0x1
+	EMUL_ENABLED                      = 0x1
+	EMUL_NATIVE                       = 0x2
+	ENDRUNDISC                        = 0x9
+	ETHERMIN                          = 0x2e
+	ETHERMTU                          = 0x5dc
+	ETHERTYPE_8023                    = 0x4
+	ETHERTYPE_AARP                    = 0x80f3
+	ETHERTYPE_ACCTON                  = 0x8390
+	ETHERTYPE_AEONIC                  = 0x8036
+	ETHERTYPE_ALPHA                   = 0x814a
+	ETHERTYPE_AMBER                   = 0x6008
+	ETHERTYPE_AMOEBA                  = 0x8145
+	ETHERTYPE_AOE                     = 0x88a2
+	ETHERTYPE_APOLLO                  = 0x80f7
+	ETHERTYPE_APOLLODOMAIN            = 0x8019
+	ETHERTYPE_APPLETALK               = 0x809b
+	ETHERTYPE_APPLITEK                = 0x80c7
+	ETHERTYPE_ARGONAUT                = 0x803a
+	ETHERTYPE_ARP                     = 0x806
+	ETHERTYPE_AT                      = 0x809b
+	ETHERTYPE_ATALK                   = 0x809b
+	ETHERTYPE_ATOMIC                  = 0x86df
+	ETHERTYPE_ATT                     = 0x8069
+	ETHERTYPE_ATTSTANFORD             = 0x8008
+	ETHERTYPE_AUTOPHON                = 0x806a
+	ETHERTYPE_AXIS                    = 0x8856
+	ETHERTYPE_BCLOOP                  = 0x9003
+	ETHERTYPE_BOFL                    = 0x8102
+	ETHERTYPE_CABLETRON               = 0x7034
+	ETHERTYPE_CHAOS                   = 0x804
+	ETHERTYPE_COMDESIGN               = 0x806c
+	ETHERTYPE_COMPUGRAPHIC            = 0x806d
+	ETHERTYPE_COUNTERPOINT            = 0x8062
+	ETHERTYPE_CRONUS                  = 0x8004
+	ETHERTYPE_CRONUSVLN               = 0x8003
+	ETHERTYPE_DCA                     = 0x1234
+	ETHERTYPE_DDE                     = 0x807b
+	ETHERTYPE_DEBNI                   = 0xaaaa
+	ETHERTYPE_DECAM                   = 0x8048
+	ETHERTYPE_DECCUST                 = 0x6006
+	ETHERTYPE_DECDIAG                 = 0x6005
+	ETHERTYPE_DECDNS                  = 0x803c
+	ETHERTYPE_DECDTS                  = 0x803e
+	ETHERTYPE_DECEXPER                = 0x6000
+	ETHERTYPE_DECLAST                 = 0x8041
+	ETHERTYPE_DECLTM                  = 0x803f
+	ETHERTYPE_DECMUMPS                = 0x6009
+	ETHERTYPE_DECNETBIOS              = 0x8040
+	ETHERTYPE_DELTACON                = 0x86de
+	ETHERTYPE_DIDDLE                  = 0x4321
+	ETHERTYPE_DLOG1                   = 0x660
+	ETHERTYPE_DLOG2                   = 0x661
+	ETHERTYPE_DN                      = 0x6003
+	ETHERTYPE_DOGFIGHT                = 0x1989
+	ETHERTYPE_DSMD                    = 0x8039
+	ETHERTYPE_ECMA                    = 0x803
+	ETHERTYPE_ENCRYPT                 = 0x803d
+	ETHERTYPE_ES                      = 0x805d
+	ETHERTYPE_EXCELAN                 = 0x8010
+	ETHERTYPE_EXPERDATA               = 0x8049
+	ETHERTYPE_FLIP                    = 0x8146
+	ETHERTYPE_FLOWCONTROL             = 0x8808
+	ETHERTYPE_FRARP                   = 0x808
+	ETHERTYPE_GENDYN                  = 0x8068
+	ETHERTYPE_HAYES                   = 0x8130
+	ETHERTYPE_HIPPI_FP                = 0x8180
+	ETHERTYPE_HITACHI                 = 0x8820
+	ETHERTYPE_HP                      = 0x8005
+	ETHERTYPE_IEEEPUP                 = 0xa00
+	ETHERTYPE_IEEEPUPAT               = 0xa01
+	ETHERTYPE_IMLBL                   = 0x4c42
+	ETHERTYPE_IMLBLDIAG               = 0x424c
+	ETHERTYPE_IP                      = 0x800
+	ETHERTYPE_IPAS                    = 0x876c
+	ETHERTYPE_IPV6                    = 0x86dd
+	ETHERTYPE_IPX                     = 0x8137
+	ETHERTYPE_IPXNEW                  = 0x8037
+	ETHERTYPE_KALPANA                 = 0x8582
+	ETHERTYPE_LANBRIDGE               = 0x8038
+	ETHERTYPE_LANPROBE                = 0x8888
+	ETHERTYPE_LAT                     = 0x6004
+	ETHERTYPE_LBACK                   = 0x9000
+	ETHERTYPE_LITTLE                  = 0x8060
+	ETHERTYPE_LLDP                    = 0x88cc
+	ETHERTYPE_LOGICRAFT               = 0x8148
+	ETHERTYPE_LOOPBACK                = 0x9000
+	ETHERTYPE_MATRA                   = 0x807a
+	ETHERTYPE_MAX                     = 0xffff
+	ETHERTYPE_MERIT                   = 0x807c
+	ETHERTYPE_MICP                    = 0x873a
+	ETHERTYPE_MOPDL                   = 0x6001
+	ETHERTYPE_MOPRC                   = 0x6002
+	ETHERTYPE_MOTOROLA                = 0x818d
+	ETHERTYPE_MPLS                    = 0x8847
+	ETHERTYPE_MPLS_MCAST              = 0x8848
+	ETHERTYPE_MUMPS                   = 0x813f
+	ETHERTYPE_NBPCC                   = 0x3c04
+	ETHERTYPE_NBPCLAIM                = 0x3c09
+	ETHERTYPE_NBPCLREQ                = 0x3c05
+	ETHERTYPE_NBPCLRSP                = 0x3c06
+	ETHERTYPE_NBPCREQ                 = 0x3c02
+	ETHERTYPE_NBPCRSP                 = 0x3c03
+	ETHERTYPE_NBPDG                   = 0x3c07
+	ETHERTYPE_NBPDGB                  = 0x3c08
+	ETHERTYPE_NBPDLTE                 = 0x3c0a
+	ETHERTYPE_NBPRAR                  = 0x3c0c
+	ETHERTYPE_NBPRAS                  = 0x3c0b
+	ETHERTYPE_NBPRST                  = 0x3c0d
+	ETHERTYPE_NBPSCD                  = 0x3c01
+	ETHERTYPE_NBPVCD                  = 0x3c00
+	ETHERTYPE_NBS                     = 0x802
+	ETHERTYPE_NCD                     = 0x8149
+	ETHERTYPE_NESTAR                  = 0x8006
+	ETHERTYPE_NETBEUI                 = 0x8191
+	ETHERTYPE_NOVELL                  = 0x8138
+	ETHERTYPE_NS                      = 0x600
+	ETHERTYPE_NSAT                    = 0x601
+	ETHERTYPE_NSCOMPAT                = 0x807
+	ETHERTYPE_NTRAILER                = 0x10
+	ETHERTYPE_OS9                     = 0x7007
+	ETHERTYPE_OS9NET                  = 0x7009
+	ETHERTYPE_PACER                   = 0x80c6
+	ETHERTYPE_PAE                     = 0x888e
+	ETHERTYPE_PCS                     = 0x4242
+	ETHERTYPE_PLANNING                = 0x8044
+	ETHERTYPE_PPP                     = 0x880b
+	ETHERTYPE_PPPOE                   = 0x8864
+	ETHERTYPE_PPPOEDISC               = 0x8863
+	ETHERTYPE_PRIMENTS                = 0x7031
+	ETHERTYPE_PUP                     = 0x200
+	ETHERTYPE_PUPAT                   = 0x200
+	ETHERTYPE_QINQ                    = 0x88a8
+	ETHERTYPE_RACAL                   = 0x7030
+	ETHERTYPE_RATIONAL                = 0x8150
+	ETHERTYPE_RAWFR                   = 0x6559
+	ETHERTYPE_RCL                     = 0x1995
+	ETHERTYPE_RDP                     = 0x8739
+	ETHERTYPE_RETIX                   = 0x80f2
+	ETHERTYPE_REVARP                  = 0x8035
+	ETHERTYPE_SCA                     = 0x6007
+	ETHERTYPE_SECTRA                  = 0x86db
+	ETHERTYPE_SECUREDATA              = 0x876d
+	ETHERTYPE_SGITW                   = 0x817e
+	ETHERTYPE_SG_BOUNCE               = 0x8016
+	ETHERTYPE_SG_DIAG                 = 0x8013
+	ETHERTYPE_SG_NETGAMES             = 0x8014
+	ETHERTYPE_SG_RESV                 = 0x8015
+	ETHERTYPE_SIMNET                  = 0x5208
+	ETHERTYPE_SLOW                    = 0x8809
+	ETHERTYPE_SNA                     = 0x80d5
+	ETHERTYPE_SNMP                    = 0x814c
+	ETHERTYPE_SONIX                   = 0xfaf5
+	ETHERTYPE_SPIDER                  = 0x809f
+	ETHERTYPE_SPRITE                  = 0x500
+	ETHERTYPE_STP                     = 0x8181
+	ETHERTYPE_TALARIS                 = 0x812b
+	ETHERTYPE_TALARISMC               = 0x852b
+	ETHERTYPE_TCPCOMP                 = 0x876b
+	ETHERTYPE_TCPSM                   = 0x9002
+	ETHERTYPE_TEC                     = 0x814f
+	ETHERTYPE_TIGAN                   = 0x802f
+	ETHERTYPE_TRAIL                   = 0x1000
+	ETHERTYPE_TRANSETHER              = 0x6558
+	ETHERTYPE_TYMSHARE                = 0x802e
+	ETHERTYPE_UBBST                   = 0x7005
+	ETHERTYPE_UBDEBUG                 = 0x900
+	ETHERTYPE_UBDIAGLOOP              = 0x7002
+	ETHERTYPE_UBDL                    = 0x7000
+	ETHERTYPE_UBNIU                   = 0x7001
+	ETHERTYPE_UBNMC                   = 0x7003
+	ETHERTYPE_VALID                   = 0x1600
+	ETHERTYPE_VARIAN                  = 0x80dd
+	ETHERTYPE_VAXELN                  = 0x803b
+	ETHERTYPE_VEECO                   = 0x8067
+	ETHERTYPE_VEXP                    = 0x805b
+	ETHERTYPE_VGLAB                   = 0x8131
+	ETHERTYPE_VINES                   = 0xbad
+	ETHERTYPE_VINESECHO               = 0xbaf
+	ETHERTYPE_VINESLOOP               = 0xbae
+	ETHERTYPE_VITAL                   = 0xff00
+	ETHERTYPE_VLAN                    = 0x8100
+	ETHERTYPE_VLTLMAN                 = 0x8080
+	ETHERTYPE_VPROD                   = 0x805c
+	ETHERTYPE_VURESERVED              = 0x8147
+	ETHERTYPE_WATERLOO                = 0x8130
+	ETHERTYPE_WELLFLEET               = 0x8103
+	ETHERTYPE_X25                     = 0x805
+	ETHERTYPE_X75                     = 0x801
+	ETHERTYPE_XNSSM                   = 0x9001
+	ETHERTYPE_XTP                     = 0x817d
+	ETHER_ADDR_LEN                    = 0x6
+	ETHER_ALIGN                       = 0x2
+	ETHER_CRC_LEN                     = 0x4
+	ETHER_CRC_POLY_BE                 = 0x4c11db6
+	ETHER_CRC_POLY_LE                 = 0xedb88320
+	ETHER_HDR_LEN                     = 0xe
+	ETHER_MAX_DIX_LEN                 = 0x600
+	ETHER_MAX_LEN                     = 0x5ee
+	ETHER_MIN_LEN                     = 0x40
+	ETHER_TYPE_LEN                    = 0x2
+	ETHER_VLAN_ENCAP_LEN              = 0x4
+	EVFILT_AIO                        = -0x3
+	EVFILT_PROC                       = -0x5
+	EVFILT_READ                       = -0x1
+	EVFILT_SIGNAL                     = -0x6
+	EVFILT_SYSCOUNT                   = 0x7
+	EVFILT_TIMER                      = -0x7
+	EVFILT_VNODE                      = -0x4
+	EVFILT_WRITE                      = -0x2
+	EV_ADD                            = 0x1
+	EV_CLEAR                          = 0x20
+	EV_DELETE                         = 0x2
+	EV_DISABLE                        = 0x8
+	EV_ENABLE                         = 0x4
+	EV_EOF                            = 0x8000
+	EV_ERROR                          = 0x4000
+	EV_FLAG1                          = 0x2000
+	EV_ONESHOT                        = 0x10
+	EV_SYSFLAGS                       = 0xf000
+	EXTA                              = 0x4b00
+	EXTB                              = 0x9600
+	EXTPROC                           = 0x800
+	FD_CLOEXEC                        = 0x1
+	FD_SETSIZE                        = 0x400
+	FLUSHO                            = 0x800000
+	F_DUPFD                           = 0x0
+	F_DUPFD_CLOEXEC                   = 0xa
+	F_GETFD                           = 0x1
+	F_GETFL                           = 0x3
+	F_GETLK                           = 0x7
+	F_GETOWN                          = 0x5
+	F_OK                              = 0x0
+	F_RDLCK                           = 0x1
+	F_SETFD                           = 0x2
+	F_SETFL                           = 0x4
+	F_SETLK                           = 0x8
+	F_SETLKW                          = 0x9
+	F_SETOWN                          = 0x6
+	F_UNLCK                           = 0x2
+	F_WRLCK                           = 0x3
+	HUPCL                             = 0x4000
+	HW_MACHINE                        = 0x1
+	ICANON                            = 0x100
+	ICMP6_FILTER                      = 0x12
+	ICRNL                             = 0x100
+	IEXTEN                            = 0x400
+	IFAN_ARRIVAL                      = 0x0
+	IFAN_DEPARTURE                    = 0x1
+	IFA_ROUTE                         = 0x1
+	IFF_ALLMULTI                      = 0x200
+	IFF_BROADCAST                     = 0x2
+	IFF_CANTCHANGE                    = 0x8e52
+	IFF_DEBUG                         = 0x4
+	IFF_LINK0                         = 0x1000
+	IFF_LINK1                         = 0x2000
+	IFF_LINK2                         = 0x4000
+	IFF_LOOPBACK                      = 0x8
+	IFF_MULTICAST                     = 0x8000
+	IFF_NOARP                         = 0x80
+	IFF_NOTRAILERS                    = 0x20
+	IFF_OACTIVE                       = 0x400
+	IFF_POINTOPOINT                   = 0x10
+	IFF_PROMISC                       = 0x100
+	IFF_RUNNING                       = 0x40
+	IFF_SIMPLEX                       = 0x800
+	IFF_UP                            = 0x1
+	IFNAMSIZ                          = 0x10
+	IFT_1822                          = 0x2
+	IFT_A12MPPSWITCH                  = 0x82
+	IFT_AAL2                          = 0xbb
+	IFT_AAL5                          = 0x31
+	IFT_ADSL                          = 0x5e
+	IFT_AFLANE8023                    = 0x3b
+	IFT_AFLANE8025                    = 0x3c
+	IFT_ARAP                          = 0x58
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ASYNC                         = 0x54
+	IFT_ATM                           = 0x25
+	IFT_ATMDXI                        = 0x69
+	IFT_ATMFUNI                       = 0x6a
+	IFT_ATMIMA                        = 0x6b
+	IFT_ATMLOGICAL                    = 0x50
+	IFT_ATMRADIO                      = 0xbd
+	IFT_ATMSUBINTERFACE               = 0x86
+	IFT_ATMVCIENDPT                   = 0xc2
+	IFT_ATMVIRTUAL                    = 0x95
+	IFT_BGPPOLICYACCOUNTING           = 0xa2
+	IFT_BLUETOOTH                     = 0xf8
+	IFT_BRIDGE                        = 0xd1
+	IFT_BSC                           = 0x53
+	IFT_CARP                          = 0xf7
+	IFT_CCTEMUL                       = 0x3d
+	IFT_CEPT                          = 0x13
+	IFT_CES                           = 0x85
+	IFT_CHANNEL                       = 0x46
+	IFT_CNR                           = 0x55
+	IFT_COFFEE                        = 0x84
+	IFT_COMPOSITELINK                 = 0x9b
+	IFT_DCN                           = 0x8d
+	IFT_DIGITALPOWERLINE              = 0x8a
+	IFT_DIGITALWRAPPEROVERHEADCHANNEL = 0xba
+	IFT_DLSW                          = 0x4a
+	IFT_DOCSCABLEDOWNSTREAM           = 0x80
+	IFT_DOCSCABLEMACLAYER             = 0x7f
+	IFT_DOCSCABLEUPSTREAM             = 0x81
+	IFT_DOCSCABLEUPSTREAMCHANNEL      = 0xcd
+	IFT_DS0                           = 0x51
+	IFT_DS0BUNDLE                     = 0x52
+	IFT_DS1FDL                        = 0xaa
+	IFT_DS3                           = 0x1e
+	IFT_DTM                           = 0x8c
+	IFT_DUMMY                         = 0xf1
+	IFT_DVBASILN                      = 0xac
+	IFT_DVBASIOUT                     = 0xad
+	IFT_DVBRCCDOWNSTREAM              = 0x93
+	IFT_DVBRCCMACLAYER                = 0x92
+	IFT_DVBRCCUPSTREAM                = 0x94
+	IFT_ECONET                        = 0xce
+	IFT_ENC                           = 0xf4
+	IFT_EON                           = 0x19
+	IFT_EPLRS                         = 0x57
+	IFT_ESCON                         = 0x49
+	IFT_ETHER                         = 0x6
+	IFT_FAITH                         = 0xf3
+	IFT_FAST                          = 0x7d
+	IFT_FASTETHER                     = 0x3e
+	IFT_FASTETHERFX                   = 0x45
+	IFT_FDDI                          = 0xf
+	IFT_FIBRECHANNEL                  = 0x38
+	IFT_FRAMERELAYINTERCONNECT        = 0x3a
+	IFT_FRAMERELAYMPI                 = 0x5c
+	IFT_FRDLCIENDPT                   = 0xc1
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_FRF16MFRBUNDLE                = 0xa3
+	IFT_FRFORWARD                     = 0x9e
+	IFT_G703AT2MB                     = 0x43
+	IFT_G703AT64K                     = 0x42
+	IFT_GIF                           = 0xf0
+	IFT_GIGABITETHERNET               = 0x75
+	IFT_GR303IDT                      = 0xb2
+	IFT_GR303RDT                      = 0xb1
+	IFT_H323GATEKEEPER                = 0xa4
+	IFT_H323PROXY                     = 0xa5
+	IFT_HDH1822                       = 0x3
+	IFT_HDLC                          = 0x76
+	IFT_HDSL2                         = 0xa8
+	IFT_HIPERLAN2                     = 0xb7
+	IFT_HIPPI                         = 0x2f
+	IFT_HIPPIINTERFACE                = 0x39
+	IFT_HOSTPAD                       = 0x5a
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IBM370PARCHAN                 = 0x48
+	IFT_IDSL                          = 0x9a
+	IFT_IEEE1394                      = 0x90
+	IFT_IEEE80211                     = 0x47
+	IFT_IEEE80212                     = 0x37
+	IFT_IEEE8023ADLAG                 = 0xa1
+	IFT_IFGSN                         = 0x91
+	IFT_IMT                           = 0xbe
+	IFT_INFINIBAND                    = 0xc7
+	IFT_INTERLEAVE                    = 0x7c
+	IFT_IP                            = 0x7e
+	IFT_IPFORWARD                     = 0x8e
+	IFT_IPOVERATM                     = 0x72
+	IFT_IPOVERCDLC                    = 0x6d
+	IFT_IPOVERCLAW                    = 0x6e
+	IFT_IPSWITCH                      = 0x4e
+	IFT_ISDN                          = 0x3f
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISDNS                         = 0x4b
+	IFT_ISDNU                         = 0x4c
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88025CRFPINT               = 0x62
+	IFT_ISO88025DTR                   = 0x56
+	IFT_ISO88025FIBER                 = 0x73
+	IFT_ISO88026                      = 0xa
+	IFT_ISUP                          = 0xb3
+	IFT_L2VLAN                        = 0x87
+	IFT_L3IPVLAN                      = 0x88
+	IFT_L3IPXVLAN                     = 0x89
+	IFT_LAPB                          = 0x10
+	IFT_LAPD                          = 0x4d
+	IFT_LAPF                          = 0x77
+	IFT_LINEGROUP                     = 0xd2
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MEDIAMAILOVERIP               = 0x8b
+	IFT_MFSIGLINK                     = 0xa7
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_MPC                           = 0x71
+	IFT_MPLS                          = 0xa6
+	IFT_MPLSTUNNEL                    = 0x96
+	IFT_MSDSL                         = 0x8f
+	IFT_MVL                           = 0xbf
+	IFT_MYRINET                       = 0x63
+	IFT_NFAS                          = 0xaf
+	IFT_NSIP                          = 0x1b
+	IFT_OPTICALCHANNEL                = 0xc3
+	IFT_OPTICALTRANSPORT              = 0xc4
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PFLOG                         = 0xf5
+	IFT_PFLOW                         = 0xf9
+	IFT_PFSYNC                        = 0xf6
+	IFT_PLC                           = 0xae
+	IFT_PON155                        = 0xcf
+	IFT_PON622                        = 0xd0
+	IFT_POS                           = 0xab
+	IFT_PPP                           = 0x17
+	IFT_PPPMULTILINKBUNDLE            = 0x6c
+	IFT_PROPATM                       = 0xc5
+	IFT_PROPBWAP2MP                   = 0xb8
+	IFT_PROPCNLS                      = 0x59
+	IFT_PROPDOCSWIRELESSDOWNSTREAM    = 0xb5
+	IFT_PROPDOCSWIRELESSMACLAYER      = 0xb4
+	IFT_PROPDOCSWIRELESSUPSTREAM      = 0xb6
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPVIRTUAL                   = 0x35
+	IFT_PROPWIRELESSP2P               = 0x9d
+	IFT_PTPSERIAL                     = 0x16
+	IFT_PVC                           = 0xf2
+	IFT_Q2931                         = 0xc9
+	IFT_QLLC                          = 0x44
+	IFT_RADIOMAC                      = 0xbc
+	IFT_RADSL                         = 0x5f
+	IFT_REACHDSL                      = 0xc0
+	IFT_RFC1483                       = 0x9f
+	IFT_RS232                         = 0x21
+	IFT_RSRB                          = 0x4f
+	IFT_SDLC                          = 0x11
+	IFT_SDSL                          = 0x60
+	IFT_SHDSL                         = 0xa9
+	IFT_SIP                           = 0x1f
+	IFT_SIPSIG                        = 0xcc
+	IFT_SIPTG                         = 0xcb
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETOVERHEADCHANNEL          = 0xb9
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_SRP                           = 0x97
+	IFT_SS7SIGLINK                    = 0x9c
+	IFT_STACKTOSTACK                  = 0x6f
+	IFT_STARLAN                       = 0xb
+	IFT_T1                            = 0x12
+	IFT_TDLC                          = 0x74
+	IFT_TELINK                        = 0xc8
+	IFT_TERMPAD                       = 0x5b
+	IFT_TR008                         = 0xb0
+	IFT_TRANSPHDLC                    = 0x7b
+	IFT_TUNNEL                        = 0x83
+	IFT_ULTRA                         = 0x1d
+	IFT_USB                           = 0xa0
+	IFT_V11                           = 0x40
+	IFT_V35                           = 0x2d
+	IFT_V36                           = 0x41
+	IFT_V37                           = 0x78
+	IFT_VDSL                          = 0x61
+	IFT_VIRTUALIPADDRESS              = 0x70
+	IFT_VIRTUALTG                     = 0xca
+	IFT_VOICEDID                      = 0xd5
+	IFT_VOICEEM                       = 0x64
+	IFT_VOICEEMFGD                    = 0xd3
+	IFT_VOICEENCAP                    = 0x67
+	IFT_VOICEFGDEANA                  = 0xd4
+	IFT_VOICEFXO                      = 0x65
+	IFT_VOICEFXS                      = 0x66
+	IFT_VOICEOVERATM                  = 0x98
+	IFT_VOICEOVERCABLE                = 0xc6
+	IFT_VOICEOVERFRAMERELAY           = 0x99
+	IFT_VOICEOVERIP                   = 0x68
+	IFT_X213                          = 0x5d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25HUNTGROUP                  = 0x7a
+	IFT_X25MLP                        = 0x79
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+	IGNBRK                            = 0x1
+	IGNCR                             = 0x80
+	IGNPAR                            = 0x4
+	IMAXBEL                           = 0x2000
+	INLCR                             = 0x40
+	INPCK                             = 0x10
+	IN_CLASSA_HOST                    = 0xffffff
+	IN_CLASSA_MAX                     = 0x80
+	IN_CLASSA_NET                     = 0xff000000
+	IN_CLASSA_NSHIFT                  = 0x18
+	IN_CLASSB_HOST                    = 0xffff
+	IN_CLASSB_MAX                     = 0x10000
+	IN_CLASSB_NET                     = 0xffff0000
+	IN_CLASSB_NSHIFT                  = 0x10
+	IN_CLASSC_HOST                    = 0xff
+	IN_CLASSC_NET                     = 0xffffff00
+	IN_CLASSC_NSHIFT                  = 0x8
+	IN_CLASSD_HOST                    = 0xfffffff
+	IN_CLASSD_NET                     = 0xf0000000
+	IN_CLASSD_NSHIFT                  = 0x1c
+	IN_LOOPBACKNET                    = 0x7f
+	IN_RFC3021_HOST                   = 0x1
+	IN_RFC3021_NET                    = 0xfffffffe
+	IN_RFC3021_NSHIFT                 = 0x1f
+	IPPROTO_AH                        = 0x33
+	IPPROTO_CARP                      = 0x70
+	IPPROTO_DIVERT                    = 0x102
+	IPPROTO_DIVERT_INIT               = 0x2
+	IPPROTO_DIVERT_RESP               = 0x1
+	IPPROTO_DONE                      = 0x101
+	IPPROTO_DSTOPTS                   = 0x3c
+	IPPROTO_EGP                       = 0x8
+	IPPROTO_ENCAP                     = 0x62
+	IPPROTO_EON                       = 0x50
+	IPPROTO_ESP                       = 0x32
+	IPPROTO_ETHERIP                   = 0x61
+	IPPROTO_FRAGMENT                  = 0x2c
+	IPPROTO_GGP                       = 0x3
+	IPPROTO_GRE                       = 0x2f
+	IPPROTO_HOPOPTS                   = 0x0
+	IPPROTO_ICMP                      = 0x1
+	IPPROTO_ICMPV6                    = 0x3a
+	IPPROTO_IDP                       = 0x16
+	IPPROTO_IGMP                      = 0x2
+	IPPROTO_IP                        = 0x0
+	IPPROTO_IPCOMP                    = 0x6c
+	IPPROTO_IPIP                      = 0x4
+	IPPROTO_IPV4                      = 0x4
+	IPPROTO_IPV6                      = 0x29
+	IPPROTO_MAX                       = 0x100
+	IPPROTO_MAXID                     = 0x103
+	IPPROTO_MOBILE                    = 0x37
+	IPPROTO_MPLS                      = 0x89
+	IPPROTO_NONE                      = 0x3b
+	IPPROTO_PFSYNC                    = 0xf0
+	IPPROTO_PIM                       = 0x67
+	IPPROTO_PUP                       = 0xc
+	IPPROTO_RAW                       = 0xff
+	IPPROTO_ROUTING                   = 0x2b
+	IPPROTO_RSVP                      = 0x2e
+	IPPROTO_TCP                       = 0x6
+	IPPROTO_TP                        = 0x1d
+	IPPROTO_UDP                       = 0x11
+	IPV6_AUTH_LEVEL                   = 0x35
+	IPV6_AUTOFLOWLABEL                = 0x3b
+	IPV6_CHECKSUM                     = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS       = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP       = 0x1
+	IPV6_DEFHLIM                      = 0x40
+	IPV6_DONTFRAG                     = 0x3e
+	IPV6_DSTOPTS                      = 0x32
+	IPV6_ESP_NETWORK_LEVEL            = 0x37
+	IPV6_ESP_TRANS_LEVEL              = 0x36
+	IPV6_FAITH                        = 0x1d
+	IPV6_FLOWINFO_MASK                = 0xffffff0f
+	IPV6_FLOWLABEL_MASK               = 0xffff0f00
+	IPV6_FRAGTTL                      = 0x78
+	IPV6_HLIMDEC                      = 0x1
+	IPV6_HOPLIMIT                     = 0x2f
+	IPV6_HOPOPTS                      = 0x31
+	IPV6_IPCOMP_LEVEL                 = 0x3c
+	IPV6_JOIN_GROUP                   = 0xc
+	IPV6_LEAVE_GROUP                  = 0xd
+	IPV6_MAXHLIM                      = 0xff
+	IPV6_MAXPACKET                    = 0xffff
+	IPV6_MMTU                         = 0x500
+	IPV6_MULTICAST_HOPS               = 0xa
+	IPV6_MULTICAST_IF                 = 0x9
+	IPV6_MULTICAST_LOOP               = 0xb
+	IPV6_NEXTHOP                      = 0x30
+	IPV6_OPTIONS                      = 0x1
+	IPV6_PATHMTU                      = 0x2c
+	IPV6_PIPEX                        = 0x3f
+	IPV6_PKTINFO                      = 0x2e
+	IPV6_PORTRANGE                    = 0xe
+	IPV6_PORTRANGE_DEFAULT            = 0x0
+	IPV6_PORTRANGE_HIGH               = 0x1
+	IPV6_PORTRANGE_LOW                = 0x2
+	IPV6_RECVDSTOPTS                  = 0x28
+	IPV6_RECVDSTPORT                  = 0x40
+	IPV6_RECVHOPLIMIT                 = 0x25
+	IPV6_RECVHOPOPTS                  = 0x27
+	IPV6_RECVPATHMTU                  = 0x2b
+	IPV6_RECVPKTINFO                  = 0x24
+	IPV6_RECVRTHDR                    = 0x26
+	IPV6_RECVTCLASS                   = 0x39
+	IPV6_RTABLE                       = 0x1021
+	IPV6_RTHDR                        = 0x33
+	IPV6_RTHDRDSTOPTS                 = 0x23
+	IPV6_RTHDR_LOOSE                  = 0x0
+	IPV6_RTHDR_STRICT                 = 0x1
+	IPV6_RTHDR_TYPE_0                 = 0x0
+	IPV6_SOCKOPT_RESERVED1            = 0x3
+	IPV6_TCLASS                       = 0x3d
+	IPV6_UNICAST_HOPS                 = 0x4
+	IPV6_USE_MIN_MTU                  = 0x2a
+	IPV6_V6ONLY                       = 0x1b
+	IPV6_VERSION                      = 0x60
+	IPV6_VERSION_MASK                 = 0xf0
+	IP_ADD_MEMBERSHIP                 = 0xc
+	IP_AUTH_LEVEL                     = 0x14
+	IP_DEFAULT_MULTICAST_LOOP         = 0x1
+	IP_DEFAULT_MULTICAST_TTL          = 0x1
+	IP_DF                             = 0x4000
+	IP_DIVERTFL                       = 0x1022
+	IP_DROP_MEMBERSHIP                = 0xd
+	IP_ESP_NETWORK_LEVEL              = 0x16
+	IP_ESP_TRANS_LEVEL                = 0x15
+	IP_HDRINCL                        = 0x2
+	IP_IPCOMP_LEVEL                   = 0x1d
+	IP_IPSECFLOWINFO                  = 0x24
+	IP_IPSEC_LOCAL_AUTH               = 0x1b
+	IP_IPSEC_LOCAL_CRED               = 0x19
+	IP_IPSEC_LOCAL_ID                 = 0x17
+	IP_IPSEC_REMOTE_AUTH              = 0x1c
+	IP_IPSEC_REMOTE_CRED              = 0x1a
+	IP_IPSEC_REMOTE_ID                = 0x18
+	IP_MAXPACKET                      = 0xffff
+	IP_MAX_MEMBERSHIPS                = 0xfff
+	IP_MF                             = 0x2000
+	IP_MINTTL                         = 0x20
+	IP_MIN_MEMBERSHIPS                = 0xf
+	IP_MSS                            = 0x240
+	IP_MULTICAST_IF                   = 0x9
+	IP_MULTICAST_LOOP                 = 0xb
+	IP_MULTICAST_TTL                  = 0xa
+	IP_OFFMASK                        = 0x1fff
+	IP_OPTIONS                        = 0x1
+	IP_PIPEX                          = 0x22
+	IP_PORTRANGE                      = 0x13
+	IP_PORTRANGE_DEFAULT              = 0x0
+	IP_PORTRANGE_HIGH                 = 0x1
+	IP_PORTRANGE_LOW                  = 0x2
+	IP_RECVDSTADDR                    = 0x7
+	IP_RECVDSTPORT                    = 0x21
+	IP_RECVIF                         = 0x1e
+	IP_RECVOPTS                       = 0x5
+	IP_RECVRETOPTS                    = 0x6
+	IP_RECVRTABLE                     = 0x23
+	IP_RECVTTL                        = 0x1f
+	IP_RETOPTS                        = 0x8
+	IP_RF                             = 0x8000
+	IP_RTABLE                         = 0x1021
+	IP_TOS                            = 0x3
+	IP_TTL                            = 0x4
+	ISIG                              = 0x80
+	ISTRIP                            = 0x20
+	IXANY                             = 0x800
+	IXOFF                             = 0x400
+	IXON                              = 0x200
+	KERN_HOSTNAME                     = 0xa
+	KERN_OSRELEASE                    = 0x2
+	KERN_OSTYPE                       = 0x1
+	KERN_VERSION                      = 0x4
+	LCNT_OVERLOAD_FLUSH               = 0x6
+	LOCK_EX                           = 0x2
+	LOCK_NB                           = 0x4
+	LOCK_SH                           = 0x1
+	LOCK_UN                           = 0x8
+	MADV_DONTNEED                     = 0x4
+	MADV_FREE                         = 0x6
+	MADV_NORMAL                       = 0x0
+	MADV_RANDOM                       = 0x1
+	MADV_SEQUENTIAL                   = 0x2
+	MADV_SPACEAVAIL                   = 0x5
+	MADV_WILLNEED                     = 0x3
+	MAP_ANON                          = 0x1000
+	MAP_ANONYMOUS                     = 0x1000
+	MAP_CONCEAL                       = 0x8000
+	MAP_COPY                          = 0x2
+	MAP_FILE                          = 0x0
+	MAP_FIXED                         = 0x10
+	MAP_FLAGMASK                      = 0xfff7
+	MAP_HASSEMAPHORE                  = 0x0
+	MAP_INHERIT                       = 0x0
+	MAP_INHERIT_COPY                  = 0x1
+	MAP_INHERIT_NONE                  = 0x2
+	MAP_INHERIT_SHARE                 = 0x0
+	MAP_NOEXTEND                      = 0x100
+	MAP_NORESERVE                     = 0x40
+	MAP_PRIVATE                       = 0x2
+	MAP_RENAME                        = 0x20
+	MAP_SHARED                        = 0x1
+	MAP_STACK                         = 0x4000
+	MAP_TRYFIXED                      = 0x0
+	MCL_CURRENT                       = 0x1
+	MCL_FUTURE                        = 0x2
+	MNT_ASYNC                         = 0x40
+	MNT_DEFEXPORTED                   = 0x200
+	MNT_DELEXPORT                     = 0x20000
+	MNT_DOOMED                        = 0x8000000
+	MNT_EXPORTANON                    = 0x400
+	MNT_EXPORTED                      = 0x100
+	MNT_EXRDONLY                      = 0x80
+	MNT_FORCE                         = 0x80000
+	MNT_LAZY                          = 0x3
+	MNT_LOCAL                         = 0x1000
+	MNT_NOATIME                       = 0x8000
+	MNT_NODEV                         = 0x10
+	MNT_NOEXEC                        = 0x4
+	MNT_NOSUID                        = 0x8
+	MNT_NOWAIT                        = 0x2
+	MNT_QUOTA                         = 0x2000
+	MNT_RDONLY                        = 0x1
+	MNT_RELOAD                        = 0x40000
+	MNT_ROOTFS                        = 0x4000
+	MNT_SOFTDEP                       = 0x4000000
+	MNT_SYNCHRONOUS                   = 0x2
+	MNT_UPDATE                        = 0x10000
+	MNT_VISFLAGMASK                   = 0x400ffff
+	MNT_WAIT                          = 0x1
+	MNT_WANTRDWR                      = 0x2000000
+	MNT_WXALLOWED                     = 0x800
+	MSG_BCAST                         = 0x100
+	MSG_CTRUNC                        = 0x20
+	MSG_DONTROUTE                     = 0x4
+	MSG_DONTWAIT                      = 0x80
+	MSG_EOR                           = 0x8
+	MSG_MCAST                         = 0x200
+	MSG_NOSIGNAL                      = 0x400
+	MSG_OOB                           = 0x1
+	MSG_PEEK                          = 0x2
+	MSG_TRUNC                         = 0x10
+	MSG_WAITALL                       = 0x40
+	MS_ASYNC                          = 0x1
+	MS_INVALIDATE                     = 0x4
+	MS_SYNC                           = 0x2
+	NAME_MAX                          = 0xff
+	NET_RT_DUMP                       = 0x1
+	NET_RT_FLAGS                      = 0x2
+	NET_RT_IFLIST                     = 0x3
+	NET_RT_MAXID                      = 0x6
+	NET_RT_STATS                      = 0x4
+	NET_RT_TABLE                      = 0x5
+	NFDBITS                           = 0x20
+	NOFLSH                            = 0x80000000
+	NOTE_ATTRIB                       = 0x8
+	NOTE_CHILD                        = 0x4
+	NOTE_DELETE                       = 0x1
+	NOTE_EOF                          = 0x2
+	NOTE_EXEC                         = 0x20000000
+	NOTE_EXIT                         = 0x80000000
+	NOTE_EXTEND                       = 0x4
+	NOTE_FORK                         = 0x40000000
+	NOTE_LINK                         = 0x10
+	NOTE_LOWAT                        = 0x1
+	NOTE_PCTRLMASK                    = 0xf0000000
+	NOTE_PDATAMASK                    = 0xfffff
+	NOTE_RENAME                       = 0x20
+	NOTE_REVOKE                       = 0x40
+	NOTE_TRACK                        = 0x1
+	NOTE_TRACKERR                     = 0x2
+	NOTE_TRUNCATE                     = 0x80
+	NOTE_WRITE                        = 0x2
+	OCRNL                             = 0x10
+	ONLCR                             = 0x2
+	ONLRET                            = 0x80
+	ONOCR                             = 0x40
+	ONOEOT                            = 0x8
+	OPOST                             = 0x1
+	O_ACCMODE                         = 0x3
+	O_APPEND                          = 0x8
+	O_ASYNC                           = 0x40
+	O_CLOEXEC                         = 0x10000
+	O_CREAT                           = 0x200
+	O_DIRECTORY                       = 0x20000
+	O_DSYNC                           = 0x80
+	O_EXCL                            = 0x800
+	O_EXLOCK                          = 0x20
+	O_FSYNC                           = 0x80
+	O_NDELAY                          = 0x4
+	O_NOCTTY                          = 0x8000
+	O_NOFOLLOW                        = 0x100
+	O_NONBLOCK                        = 0x4
+	O_RDONLY                          = 0x0
+	O_RDWR                            = 0x2
+	O_RSYNC                           = 0x80
+	O_SHLOCK                          = 0x10
+	O_SYNC                            = 0x80
+	O_TRUNC                           = 0x400
+	O_WRONLY                          = 0x1
+	PARENB                            = 0x1000
+	PARMRK                            = 0x8
+	PARODD                            = 0x2000
+	PENDIN                            = 0x20000000
+	PF_FLUSH                          = 0x1
+	PRIO_PGRP                         = 0x1
+	PRIO_PROCESS                      = 0x0
+	PRIO_USER                         = 0x2
+	PROT_EXEC                         = 0x4
+	PROT_NONE                         = 0x0
+	PROT_READ                         = 0x1
+	PROT_WRITE                        = 0x2
+	PT_MASK                           = 0x3ff000
+	RLIMIT_CORE                       = 0x4
+	RLIMIT_CPU                        = 0x0
+	RLIMIT_DATA                       = 0x2
+	RLIMIT_FSIZE                      = 0x1
+	RLIMIT_NOFILE                     = 0x8
+	RLIMIT_STACK                      = 0x3
+	RLIM_INFINITY                     = 0x7fffffffffffffff
+	RTAX_AUTHOR                       = 0x6
+	RTAX_BRD                          = 0x7
+	RTAX_DST                          = 0x0
+	RTAX_GATEWAY                      = 0x1
+	RTAX_GENMASK                      = 0x3
+	RTAX_IFA                          = 0x5
+	RTAX_IFP                          = 0x4
+	RTAX_LABEL                        = 0xa
+	RTAX_MAX                          = 0xb
+	RTAX_NETMASK                      = 0x2
+	RTAX_SRC                          = 0x8
+	RTAX_SRCMASK                      = 0x9
+	RTA_AUTHOR                        = 0x40
+	RTA_BRD                           = 0x80
+	RTA_DST                           = 0x1
+	RTA_GATEWAY                       = 0x2
+	RTA_GENMASK                       = 0x8
+	RTA_IFA                           = 0x20
+	RTA_IFP                           = 0x10
+	RTA_LABEL                         = 0x400
+	RTA_NETMASK                       = 0x4
+	RTA_SRC                           = 0x100
+	RTA_SRCMASK                       = 0x200
+	RTF_ANNOUNCE                      = 0x4000
+	RTF_BLACKHOLE                     = 0x1000
+	RTF_CLONED                        = 0x10000
+	RTF_CLONING                       = 0x100
+	RTF_DONE                          = 0x40
+	RTF_DYNAMIC                       = 0x10
+	RTF_FMASK                         = 0x10f808
+	RTF_GATEWAY                       = 0x2
+	RTF_HOST                          = 0x4
+	RTF_LLINFO                        = 0x400
+	RTF_MASK                          = 0x80
+	RTF_MODIFIED                      = 0x20
+	RTF_MPATH                         = 0x40000
+	RTF_MPLS                          = 0x100000
+	RTF_PERMANENT_ARP                 = 0x2000
+	RTF_PROTO1                        = 0x8000
+	RTF_PROTO2                        = 0x4000
+	RTF_PROTO3                        = 0x2000
+	RTF_REJECT                        = 0x8
+	RTF_SOURCE                        = 0x20000
+	RTF_STATIC                        = 0x800
+	RTF_TUNNEL                        = 0x100000
+	RTF_UP                            = 0x1
+	RTF_USETRAILERS                   = 0x8000
+	RTF_XRESOLVE                      = 0x200
+	RTM_ADD                           = 0x1
+	RTM_CHANGE                        = 0x3
+	RTM_DELADDR                       = 0xd
+	RTM_DELETE                        = 0x2
+	RTM_DESYNC                        = 0x10
+	RTM_GET                           = 0x4
+	RTM_IFANNOUNCE                    = 0xf
+	RTM_IFINFO                        = 0xe
+	RTM_LOCK                          = 0x8
+	RTM_LOSING                        = 0x5
+	RTM_MAXSIZE                       = 0x800
+	RTM_MISS                          = 0x7
+	RTM_NEWADDR                       = 0xc
+	RTM_REDIRECT                      = 0x6
+	RTM_RESOLVE                       = 0xb
+	RTM_RTTUNIT                       = 0xf4240
+	RTM_VERSION                       = 0x5
+	RTV_EXPIRE                        = 0x4
+	RTV_HOPCOUNT                      = 0x2
+	RTV_MTU                           = 0x1
+	RTV_RPIPE                         = 0x8
+	RTV_RTT                           = 0x40
+	RTV_RTTVAR                        = 0x80
+	RTV_SPIPE                         = 0x10
+	RTV_SSTHRESH                      = 0x20
+	RT_TABLEID_MAX                    = 0xff
+	RUSAGE_CHILDREN                   = -0x1
+	RUSAGE_SELF                       = 0x0
+	RUSAGE_THREAD                     = 0x1
+	SCM_RIGHTS                        = 0x1
+	SCM_TIMESTAMP                     = 0x4
+	SHUT_RD                           = 0x0
+	SHUT_RDWR                         = 0x2
+	SHUT_WR                           = 0x1
+	SIOCADDMULTI                      = 0x80206931
+	SIOCAIFADDR                       = 0x8040691a
+	SIOCAIFGROUP                      = 0x80246987
+	SIOCALIFADDR                      = 0x8218691c
+	SIOCATMARK                        = 0x40047307
+	SIOCBRDGADD                       = 0x8054693c
+	SIOCBRDGADDS                      = 0x80546941
+	SIOCBRDGARL                       = 0x806e694d
+	SIOCBRDGDADDR                     = 0x81286947
+	SIOCBRDGDEL                       = 0x8054693d
+	SIOCBRDGDELS                      = 0x80546942
+	SIOCBRDGFLUSH                     = 0x80546948
+	SIOCBRDGFRL                       = 0x806e694e
+	SIOCBRDGGCACHE                    = 0xc0146941
+	SIOCBRDGGFD                       = 0xc0146952
+	SIOCBRDGGHT                       = 0xc0146951
+	SIOCBRDGGIFFLGS                   = 0xc054693e
+	SIOCBRDGGMA                       = 0xc0146953
+	SIOCBRDGGPARAM                    = 0xc03c6958
+	SIOCBRDGGPRI                      = 0xc0146950
+	SIOCBRDGGRL                       = 0xc028694f
+	SIOCBRDGGSIFS                     = 0xc054693c
+	SIOCBRDGGTO                       = 0xc0146946
+	SIOCBRDGIFS                       = 0xc0546942
+	SIOCBRDGRTS                       = 0xc0186943
+	SIOCBRDGSADDR                     = 0xc1286944
+	SIOCBRDGSCACHE                    = 0x80146940
+	SIOCBRDGSFD                       = 0x80146952
+	SIOCBRDGSHT                       = 0x80146951
+	SIOCBRDGSIFCOST                   = 0x80546955
+	SIOCBRDGSIFFLGS                   = 0x8054693f
+	SIOCBRDGSIFPRIO                   = 0x80546954
+	SIOCBRDGSMA                       = 0x80146953
+	SIOCBRDGSPRI                      = 0x80146950
+	SIOCBRDGSPROTO                    = 0x8014695a
+	SIOCBRDGSTO                       = 0x80146945
+	SIOCBRDGSTXHC                     = 0x80146959
+	SIOCDELMULTI                      = 0x80206932
+	SIOCDIFADDR                       = 0x80206919
+	SIOCDIFGROUP                      = 0x80246989
+	SIOCDIFPHYADDR                    = 0x80206949
+	SIOCDLIFADDR                      = 0x8218691e
+	SIOCGETKALIVE                     = 0xc01869a4
+	SIOCGETLABEL                      = 0x8020699a
+	SIOCGETPFLOW                      = 0xc02069fe
+	SIOCGETPFSYNC                     = 0xc02069f8
+	SIOCGETSGCNT                      = 0xc0147534
+	SIOCGETVIFCNT                     = 0xc0147533
+	SIOCGETVLAN                       = 0xc0206990
+	SIOCGHIWAT                        = 0x40047301
+	SIOCGIFADDR                       = 0xc0206921
+	SIOCGIFASYNCMAP                   = 0xc020697c
+	SIOCGIFBRDADDR                    = 0xc0206923
+	SIOCGIFCONF                       = 0xc0086924
+	SIOCGIFDATA                       = 0xc020691b
+	SIOCGIFDESCR                      = 0xc0206981
+	SIOCGIFDSTADDR                    = 0xc0206922
+	SIOCGIFFLAGS                      = 0xc0206911
+	SIOCGIFGATTR                      = 0xc024698b
+	SIOCGIFGENERIC                    = 0xc020693a
+	SIOCGIFGMEMB                      = 0xc024698a
+	SIOCGIFGROUP                      = 0xc0246988
+	SIOCGIFHARDMTU                    = 0xc02069a5
+	SIOCGIFMEDIA                      = 0xc0286936
+	SIOCGIFMETRIC                     = 0xc0206917
+	SIOCGIFMTU                        = 0xc020697e
+	SIOCGIFNETMASK                    = 0xc0206925
+	SIOCGIFPDSTADDR                   = 0xc0206948
+	SIOCGIFPRIORITY                   = 0xc020699c
+	SIOCGIFPSRCADDR                   = 0xc0206947
+	SIOCGIFRDOMAIN                    = 0xc02069a0
+	SIOCGIFRTLABEL                    = 0xc0206983
+	SIOCGIFTIMESLOT                   = 0xc0206986
+	SIOCGIFXFLAGS                     = 0xc020699e
+	SIOCGLIFADDR                      = 0xc218691d
+	SIOCGLIFPHYADDR                   = 0xc218694b
+	SIOCGLIFPHYRTABLE                 = 0xc02069a2
+	SIOCGLIFPHYTTL                    = 0xc02069a9
+	SIOCGLOWAT                        = 0x40047303
+	SIOCGPGRP                         = 0x40047309
+	SIOCGSPPPPARAMS                   = 0xc0206994
+	SIOCGVH                           = 0xc02069f6
+	SIOCGVNETID                       = 0xc02069a7
+	SIOCIFCREATE                      = 0x8020697a
+	SIOCIFDESTROY                     = 0x80206979
+	SIOCIFGCLONERS                    = 0xc00c6978
+	SIOCSETKALIVE                     = 0x801869a3
+	SIOCSETLABEL                      = 0x80206999
+	SIOCSETPFLOW                      = 0x802069fd
+	SIOCSETPFSYNC                     = 0x802069f7
+	SIOCSETVLAN                       = 0x8020698f
+	SIOCSHIWAT                        = 0x80047300
+	SIOCSIFADDR                       = 0x8020690c
+	SIOCSIFASYNCMAP                   = 0x8020697d
+	SIOCSIFBRDADDR                    = 0x80206913
+	SIOCSIFDESCR                      = 0x80206980
+	SIOCSIFDSTADDR                    = 0x8020690e
+	SIOCSIFFLAGS                      = 0x80206910
+	SIOCSIFGATTR                      = 0x8024698c
+	SIOCSIFGENERIC                    = 0x80206939
+	SIOCSIFLLADDR                     = 0x8020691f
+	SIOCSIFMEDIA                      = 0xc0206935
+	SIOCSIFMETRIC                     = 0x80206918
+	SIOCSIFMTU                        = 0x8020697f
+	SIOCSIFNETMASK                    = 0x80206916
+	SIOCSIFPHYADDR                    = 0x80406946
+	SIOCSIFPRIORITY                   = 0x8020699b
+	SIOCSIFRDOMAIN                    = 0x8020699f
+	SIOCSIFRTLABEL                    = 0x80206982
+	SIOCSIFTIMESLOT                   = 0x80206985
+	SIOCSIFXFLAGS                     = 0x8020699d
+	SIOCSLIFPHYADDR                   = 0x8218694a
+	SIOCSLIFPHYRTABLE                 = 0x802069a1
+	SIOCSLIFPHYTTL                    = 0x802069a8
+	SIOCSLOWAT                        = 0x80047302
+	SIOCSPGRP                         = 0x80047308
+	SIOCSSPPPPARAMS                   = 0x80206993
+	SIOCSVH                           = 0xc02069f5
+	SIOCSVNETID                       = 0x802069a6
+	SOCK_DGRAM                        = 0x2
+	SOCK_RAW                          = 0x3
+	SOCK_RDM                          = 0x4
+	SOCK_SEQPACKET                    = 0x5
+	SOCK_STREAM                       = 0x1
+	SOL_SOCKET                        = 0xffff
+	SOMAXCONN                         = 0x80
+	SO_ACCEPTCONN                     = 0x2
+	SO_BINDANY                        = 0x1000
+	SO_BROADCAST                      = 0x20
+	SO_DEBUG                          = 0x1
+	SO_DONTROUTE                      = 0x10
+	SO_ERROR                          = 0x1007
+	SO_KEEPALIVE                      = 0x8
+	SO_LINGER                         = 0x80
+	SO_NETPROC                        = 0x1020
+	SO_OOBINLINE                      = 0x100
+	SO_PEERCRED                       = 0x1022
+	SO_RCVBUF                         = 0x1002
+	SO_RCVLOWAT                       = 0x1004
+	SO_RCVTIMEO                       = 0x1006
+	SO_REUSEADDR                      = 0x4
+	SO_REUSEPORT                      = 0x200
+	SO_RTABLE                         = 0x1021
+	SO_SNDBUF                         = 0x1001
+	SO_SNDLOWAT                       = 0x1003
+	SO_SNDTIMEO                       = 0x1005
+	SO_SPLICE                         = 0x1023
+	SO_TIMESTAMP                      = 0x800
+	SO_TYPE                           = 0x1008
+	SO_USELOOPBACK                    = 0x40
+	S_BLKSIZE                         = 0x200
+	S_IEXEC                           = 0x40
+	S_IFBLK                           = 0x6000
+	S_IFCHR                           = 0x2000
+	S_IFDIR                           = 0x4000
+	S_IFIFO                           = 0x1000
+	S_IFLNK                           = 0xa000
+	S_IFMT                            = 0xf000
+	S_IFREG                           = 0x8000
+	S_IFSOCK                          = 0xc000
+	S_IREAD                           = 0x100
+	S_IRGRP                           = 0x20
+	S_IROTH                           = 0x4
+	S_IRUSR                           = 0x100
+	S_IRWXG                           = 0x38
+	S_IRWXO                           = 0x7
+	S_IRWXU                           = 0x1c0
+	S_ISGID                           = 0x400
+	S_ISTXT                           = 0x200
+	S_ISUID                           = 0x800
+	S_ISVTX                           = 0x200
+	S_IWGRP                           = 0x10
+	S_IWOTH                           = 0x2
+	S_IWRITE                          = 0x80
+	S_IWUSR                           = 0x80
+	S_IXGRP                           = 0x8
+	S_IXOTH                           = 0x1
+	S_IXUSR                           = 0x40
+	TCIFLUSH                          = 0x1
+	TCIOFLUSH                         = 0x3
+	TCOFLUSH                          = 0x2
+	TCP_MAXBURST                      = 0x4
+	TCP_MAXSEG                        = 0x2
+	TCP_MAXWIN                        = 0xffff
+	TCP_MAX_SACK                      = 0x3
+	TCP_MAX_WINSHIFT                  = 0xe
+	TCP_MD5SIG                        = 0x4
+	TCP_MSS                           = 0x200
+	TCP_NODELAY                       = 0x1
+	TCP_NOPUSH                        = 0x10
+	TCP_NSTATES                       = 0xb
+	TCP_SACK_ENABLE                   = 0x8
+	TCSAFLUSH                         = 0x2
+	TIOCCBRK                          = 0x2000747a
+	TIOCCDTR                          = 0x20007478
+	TIOCCONS                          = 0x80047462
+	TIOCDRAIN                         = 0x2000745e
+	TIOCEXCL                          = 0x2000740d
+	TIOCEXT                           = 0x80047460
+	TIOCFLAG_CLOCAL                   = 0x2
+	TIOCFLAG_CRTSCTS                  = 0x4
+	TIOCFLAG_MDMBUF                   = 0x8
+	TIOCFLAG_PPS                      = 0x10
+	TIOCFLAG_SOFTCAR                  = 0x1
+	TIOCFLUSH                         = 0x80047410
+	TIOCGETA                          = 0x402c7413
+	TIOCGETD                          = 0x4004741a
+	TIOCGFLAGS                        = 0x4004745d
+	TIOCGPGRP                         = 0x40047477
+	TIOCGSID                          = 0x40047463
+	TIOCGTSTAMP                       = 0x400c745b
+	TIOCGWINSZ                        = 0x40087468
+	TIOCMBIC                          = 0x8004746b
+	TIOCMBIS                          = 0x8004746c
+	TIOCMGET                          = 0x4004746a
+	TIOCMODG                          = 0x4004746a
+	TIOCMODS                          = 0x8004746d
+	TIOCMSET                          = 0x8004746d
+	TIOCM_CAR                         = 0x40
+	TIOCM_CD                          = 0x40
+	TIOCM_CTS                         = 0x20
+	TIOCM_DSR                         = 0x100
+	TIOCM_DTR                         = 0x2
+	TIOCM_LE                          = 0x1
+	TIOCM_RI                          = 0x80
+	TIOCM_RNG                         = 0x80
+	TIOCM_RTS                         = 0x4
+	TIOCM_SR                          = 0x10
+	TIOCM_ST                          = 0x8
+	TIOCNOTTY                         = 0x20007471
+	TIOCNXCL                          = 0x2000740e
+	TIOCOUTQ                          = 0x40047473
+	TIOCPKT                           = 0x80047470
+	TIOCPKT_DATA                      = 0x0
+	TIOCPKT_DOSTOP                    = 0x20
+	TIOCPKT_FLUSHREAD                 = 0x1
+	TIOCPKT_FLUSHWRITE                = 0x2
+	TIOCPKT_IOCTL                     = 0x40
+	TIOCPKT_NOSTOP                    = 0x10
+	TIOCPKT_START                     = 0x8
+	TIOCPKT_STOP                      = 0x4
+	TIOCREMOTE                        = 0x80047469
+	TIOCSBRK                          = 0x2000747b
+	TIOCSCTTY                         = 0x20007461
+	TIOCSDTR                          = 0x20007479
+	TIOCSETA                          = 0x802c7414
+	TIOCSETAF                         = 0x802c7416
+	TIOCSETAW                         = 0x802c7415
+	TIOCSETD                          = 0x8004741b
+	TIOCSFLAGS                        = 0x8004745c
+	TIOCSIG                           = 0x8004745f
+	TIOCSPGRP                         = 0x80047476
+	TIOCSTART                         = 0x2000746e
+	TIOCSTAT                          = 0x80047465
+	TIOCSTI                           = 0x80017472
+	TIOCSTOP                          = 0x2000746f
+	TIOCSTSTAMP                       = 0x8008745a
+	TIOCSWINSZ                        = 0x80087467
+	TIOCUCNTL                         = 0x80047466
+	TOSTOP                            = 0x400000
+	VDISCARD                          = 0xf
+	VDSUSP                            = 0xb
+	VEOF                              = 0x0
+	VEOL                              = 0x1
+	VEOL2                             = 0x2
+	VERASE                            = 0x3
+	VINTR                             = 0x8
+	VKILL                             = 0x5
+	VLNEXT                            = 0xe
+	VMIN                              = 0x10
+	VQUIT                             = 0x9
+	VREPRINT                          = 0x6
+	VSTART                            = 0xc
+	VSTATUS                           = 0x12
+	VSTOP                             = 0xd
+	VSUSP                             = 0xa
+	VTIME                             = 0x11
+	VWERASE                           = 0x4
+	WALTSIG                           = 0x4
+	WCONTINUED                        = 0x8
+	WCOREFLAG                         = 0x80
+	WNOHANG                           = 0x1
+	WSTOPPED                          = 0x7f
+	WUNTRACED                         = 0x2
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADF           = syscall.Errno(0x9)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x58)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDOM            = syscall.Errno(0x21)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x59)
+	EILSEQ          = syscall.Errno(0x54)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EIPSEC          = syscall.Errno(0x52)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x5b)
+	ELOOP           = syscall.Errno(0x3e)
+	EMEDIUMTYPE     = syscall.Errno(0x56)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x53)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOMEDIUM       = syscall.Errno(0x55)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x5a)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x5b)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x2d)
+	EOVERFLOW       = syscall.Errno(0x57)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTHR    = syscall.Signal(0x20)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "EWOULDBLOCK", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "EOPNOTSUPP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "operation timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disk quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC program not available"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EIPSEC", "IPsec processing failure"},
+	{83, "ENOATTR", "attribute not found"},
+	{84, "EILSEQ", "illegal byte sequence"},
+	{85, "ENOMEDIUM", "no medium found"},
+	{86, "EMEDIUMTYPE", "wrong medium type"},
+	{87, "EOVERFLOW", "value too large to be stored in data type"},
+	{88, "ECANCELED", "operation canceled"},
+	{89, "EIDRM", "identifier removed"},
+	{90, "ENOMSG", "no message of desired type"},
+	{91, "ELAST", "not supported"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGABRT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "suspended (signal)"},
+	{18, "SIGTSTP", "suspended"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+	{32, "SIGTHR", "thread AST"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_amd64.go
new file mode 100644
index 000000000..9db6b2fb6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_amd64.go
@@ -0,0 +1,1774 @@
+// mkerrors.sh -m64
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,openbsd
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -m64 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                      = 0x10
+	AF_BLUETOOTH                      = 0x20
+	AF_CCITT                          = 0xa
+	AF_CHAOS                          = 0x5
+	AF_CNT                            = 0x15
+	AF_COIP                           = 0x14
+	AF_DATAKIT                        = 0x9
+	AF_DECnet                         = 0xc
+	AF_DLI                            = 0xd
+	AF_E164                           = 0x1a
+	AF_ECMA                           = 0x8
+	AF_ENCAP                          = 0x1c
+	AF_HYLINK                         = 0xf
+	AF_IMPLINK                        = 0x3
+	AF_INET                           = 0x2
+	AF_INET6                          = 0x18
+	AF_IPX                            = 0x17
+	AF_ISDN                           = 0x1a
+	AF_ISO                            = 0x7
+	AF_KEY                            = 0x1e
+	AF_LAT                            = 0xe
+	AF_LINK                           = 0x12
+	AF_LOCAL                          = 0x1
+	AF_MAX                            = 0x24
+	AF_MPLS                           = 0x21
+	AF_NATM                           = 0x1b
+	AF_NS                             = 0x6
+	AF_OSI                            = 0x7
+	AF_PUP                            = 0x4
+	AF_ROUTE                          = 0x11
+	AF_SIP                            = 0x1d
+	AF_SNA                            = 0xb
+	AF_UNIX                           = 0x1
+	AF_UNSPEC                         = 0x0
+	ALTWERASE                         = 0x200
+	ARPHRD_ETHER                      = 0x1
+	ARPHRD_FRELAY                     = 0xf
+	ARPHRD_IEEE1394                   = 0x18
+	ARPHRD_IEEE802                    = 0x6
+	B0                                = 0x0
+	B110                              = 0x6e
+	B115200                           = 0x1c200
+	B1200                             = 0x4b0
+	B134                              = 0x86
+	B14400                            = 0x3840
+	B150                              = 0x96
+	B1800                             = 0x708
+	B19200                            = 0x4b00
+	B200                              = 0xc8
+	B230400                           = 0x38400
+	B2400                             = 0x960
+	B28800                            = 0x7080
+	B300                              = 0x12c
+	B38400                            = 0x9600
+	B4800                             = 0x12c0
+	B50                               = 0x32
+	B57600                            = 0xe100
+	B600                              = 0x258
+	B7200                             = 0x1c20
+	B75                               = 0x4b
+	B76800                            = 0x12c00
+	B9600                             = 0x2580
+	BIOCFLUSH                         = 0x20004268
+	BIOCGBLEN                         = 0x40044266
+	BIOCGDIRFILT                      = 0x4004427c
+	BIOCGDLT                          = 0x4004426a
+	BIOCGDLTLIST                      = 0xc010427b
+	BIOCGETIF                         = 0x4020426b
+	BIOCGFILDROP                      = 0x40044278
+	BIOCGHDRCMPLT                     = 0x40044274
+	BIOCGRSIG                         = 0x40044273
+	BIOCGRTIMEOUT                     = 0x4010426e
+	BIOCGSTATS                        = 0x4008426f
+	BIOCIMMEDIATE                     = 0x80044270
+	BIOCLOCK                          = 0x20004276
+	BIOCPROMISC                       = 0x20004269
+	BIOCSBLEN                         = 0xc0044266
+	BIOCSDIRFILT                      = 0x8004427d
+	BIOCSDLT                          = 0x8004427a
+	BIOCSETF                          = 0x80104267
+	BIOCSETIF                         = 0x8020426c
+	BIOCSETWF                         = 0x80104277
+	BIOCSFILDROP                      = 0x80044279
+	BIOCSHDRCMPLT                     = 0x80044275
+	BIOCSRSIG                         = 0x80044272
+	BIOCSRTIMEOUT                     = 0x8010426d
+	BIOCVERSION                       = 0x40044271
+	BPF_A                             = 0x10
+	BPF_ABS                           = 0x20
+	BPF_ADD                           = 0x0
+	BPF_ALIGNMENT                     = 0x4
+	BPF_ALU                           = 0x4
+	BPF_AND                           = 0x50
+	BPF_B                             = 0x10
+	BPF_DIRECTION_IN                  = 0x1
+	BPF_DIRECTION_OUT                 = 0x2
+	BPF_DIV                           = 0x30
+	BPF_H                             = 0x8
+	BPF_IMM                           = 0x0
+	BPF_IND                           = 0x40
+	BPF_JA                            = 0x0
+	BPF_JEQ                           = 0x10
+	BPF_JGE                           = 0x30
+	BPF_JGT                           = 0x20
+	BPF_JMP                           = 0x5
+	BPF_JSET                          = 0x40
+	BPF_K                             = 0x0
+	BPF_LD                            = 0x0
+	BPF_LDX                           = 0x1
+	BPF_LEN                           = 0x80
+	BPF_LSH                           = 0x60
+	BPF_MAJOR_VERSION                 = 0x1
+	BPF_MAXBUFSIZE                    = 0x200000
+	BPF_MAXINSNS                      = 0x200
+	BPF_MEM                           = 0x60
+	BPF_MEMWORDS                      = 0x10
+	BPF_MINBUFSIZE                    = 0x20
+	BPF_MINOR_VERSION                 = 0x1
+	BPF_MISC                          = 0x7
+	BPF_MSH                           = 0xa0
+	BPF_MUL                           = 0x20
+	BPF_NEG                           = 0x80
+	BPF_OR                            = 0x40
+	BPF_RELEASE                       = 0x30bb6
+	BPF_RET                           = 0x6
+	BPF_RSH                           = 0x70
+	BPF_ST                            = 0x2
+	BPF_STX                           = 0x3
+	BPF_SUB                           = 0x10
+	BPF_TAX                           = 0x0
+	BPF_TXA                           = 0x80
+	BPF_W                             = 0x0
+	BPF_X                             = 0x8
+	BRKINT                            = 0x2
+	CFLUSH                            = 0xf
+	CLOCAL                            = 0x8000
+	CLOCK_BOOTTIME                    = 0x6
+	CLOCK_MONOTONIC                   = 0x3
+	CLOCK_PROCESS_CPUTIME_ID          = 0x2
+	CLOCK_REALTIME                    = 0x0
+	CLOCK_THREAD_CPUTIME_ID           = 0x4
+	CLOCK_UPTIME                      = 0x5
+	CPUSTATES                         = 0x6
+	CP_IDLE                           = 0x5
+	CP_INTR                           = 0x4
+	CP_NICE                           = 0x1
+	CP_SPIN                           = 0x3
+	CP_SYS                            = 0x2
+	CP_USER                           = 0x0
+	CREAD                             = 0x800
+	CRTSCTS                           = 0x10000
+	CS5                               = 0x0
+	CS6                               = 0x100
+	CS7                               = 0x200
+	CS8                               = 0x300
+	CSIZE                             = 0x300
+	CSTART                            = 0x11
+	CSTATUS                           = 0xff
+	CSTOP                             = 0x13
+	CSTOPB                            = 0x400
+	CSUSP                             = 0x1a
+	CTL_HW                            = 0x6
+	CTL_KERN                          = 0x1
+	CTL_MAXNAME                       = 0xc
+	CTL_NET                           = 0x4
+	DIOCOSFPFLUSH                     = 0x2000444e
+	DLT_ARCNET                        = 0x7
+	DLT_ATM_RFC1483                   = 0xb
+	DLT_AX25                          = 0x3
+	DLT_CHAOS                         = 0x5
+	DLT_C_HDLC                        = 0x68
+	DLT_EN10MB                        = 0x1
+	DLT_EN3MB                         = 0x2
+	DLT_ENC                           = 0xd
+	DLT_FDDI                          = 0xa
+	DLT_IEEE802                       = 0x6
+	DLT_IEEE802_11                    = 0x69
+	DLT_IEEE802_11_RADIO              = 0x7f
+	DLT_LOOP                          = 0xc
+	DLT_MPLS                          = 0xdb
+	DLT_NULL                          = 0x0
+	DLT_OPENFLOW                      = 0x10b
+	DLT_PFLOG                         = 0x75
+	DLT_PFSYNC                        = 0x12
+	DLT_PPP                           = 0x9
+	DLT_PPP_BSDOS                     = 0x10
+	DLT_PPP_ETHER                     = 0x33
+	DLT_PPP_SERIAL                    = 0x32
+	DLT_PRONET                        = 0x4
+	DLT_RAW                           = 0xe
+	DLT_SLIP                          = 0x8
+	DLT_SLIP_BSDOS                    = 0xf
+	DLT_USBPCAP                       = 0xf9
+	DLT_USER0                         = 0x93
+	DLT_USER1                         = 0x94
+	DLT_USER10                        = 0x9d
+	DLT_USER11                        = 0x9e
+	DLT_USER12                        = 0x9f
+	DLT_USER13                        = 0xa0
+	DLT_USER14                        = 0xa1
+	DLT_USER15                        = 0xa2
+	DLT_USER2                         = 0x95
+	DLT_USER3                         = 0x96
+	DLT_USER4                         = 0x97
+	DLT_USER5                         = 0x98
+	DLT_USER6                         = 0x99
+	DLT_USER7                         = 0x9a
+	DLT_USER8                         = 0x9b
+	DLT_USER9                         = 0x9c
+	DT_BLK                            = 0x6
+	DT_CHR                            = 0x2
+	DT_DIR                            = 0x4
+	DT_FIFO                           = 0x1
+	DT_LNK                            = 0xa
+	DT_REG                            = 0x8
+	DT_SOCK                           = 0xc
+	DT_UNKNOWN                        = 0x0
+	ECHO                              = 0x8
+	ECHOCTL                           = 0x40
+	ECHOE                             = 0x2
+	ECHOK                             = 0x4
+	ECHOKE                            = 0x1
+	ECHONL                            = 0x10
+	ECHOPRT                           = 0x20
+	EMT_TAGOVF                        = 0x1
+	EMUL_ENABLED                      = 0x1
+	EMUL_NATIVE                       = 0x2
+	ENDRUNDISC                        = 0x9
+	ETHERMIN                          = 0x2e
+	ETHERMTU                          = 0x5dc
+	ETHERTYPE_8023                    = 0x4
+	ETHERTYPE_AARP                    = 0x80f3
+	ETHERTYPE_ACCTON                  = 0x8390
+	ETHERTYPE_AEONIC                  = 0x8036
+	ETHERTYPE_ALPHA                   = 0x814a
+	ETHERTYPE_AMBER                   = 0x6008
+	ETHERTYPE_AMOEBA                  = 0x8145
+	ETHERTYPE_AOE                     = 0x88a2
+	ETHERTYPE_APOLLO                  = 0x80f7
+	ETHERTYPE_APOLLODOMAIN            = 0x8019
+	ETHERTYPE_APPLETALK               = 0x809b
+	ETHERTYPE_APPLITEK                = 0x80c7
+	ETHERTYPE_ARGONAUT                = 0x803a
+	ETHERTYPE_ARP                     = 0x806
+	ETHERTYPE_AT                      = 0x809b
+	ETHERTYPE_ATALK                   = 0x809b
+	ETHERTYPE_ATOMIC                  = 0x86df
+	ETHERTYPE_ATT                     = 0x8069
+	ETHERTYPE_ATTSTANFORD             = 0x8008
+	ETHERTYPE_AUTOPHON                = 0x806a
+	ETHERTYPE_AXIS                    = 0x8856
+	ETHERTYPE_BCLOOP                  = 0x9003
+	ETHERTYPE_BOFL                    = 0x8102
+	ETHERTYPE_CABLETRON               = 0x7034
+	ETHERTYPE_CHAOS                   = 0x804
+	ETHERTYPE_COMDESIGN               = 0x806c
+	ETHERTYPE_COMPUGRAPHIC            = 0x806d
+	ETHERTYPE_COUNTERPOINT            = 0x8062
+	ETHERTYPE_CRONUS                  = 0x8004
+	ETHERTYPE_CRONUSVLN               = 0x8003
+	ETHERTYPE_DCA                     = 0x1234
+	ETHERTYPE_DDE                     = 0x807b
+	ETHERTYPE_DEBNI                   = 0xaaaa
+	ETHERTYPE_DECAM                   = 0x8048
+	ETHERTYPE_DECCUST                 = 0x6006
+	ETHERTYPE_DECDIAG                 = 0x6005
+	ETHERTYPE_DECDNS                  = 0x803c
+	ETHERTYPE_DECDTS                  = 0x803e
+	ETHERTYPE_DECEXPER                = 0x6000
+	ETHERTYPE_DECLAST                 = 0x8041
+	ETHERTYPE_DECLTM                  = 0x803f
+	ETHERTYPE_DECMUMPS                = 0x6009
+	ETHERTYPE_DECNETBIOS              = 0x8040
+	ETHERTYPE_DELTACON                = 0x86de
+	ETHERTYPE_DIDDLE                  = 0x4321
+	ETHERTYPE_DLOG1                   = 0x660
+	ETHERTYPE_DLOG2                   = 0x661
+	ETHERTYPE_DN                      = 0x6003
+	ETHERTYPE_DOGFIGHT                = 0x1989
+	ETHERTYPE_DSMD                    = 0x8039
+	ETHERTYPE_ECMA                    = 0x803
+	ETHERTYPE_ENCRYPT                 = 0x803d
+	ETHERTYPE_ES                      = 0x805d
+	ETHERTYPE_EXCELAN                 = 0x8010
+	ETHERTYPE_EXPERDATA               = 0x8049
+	ETHERTYPE_FLIP                    = 0x8146
+	ETHERTYPE_FLOWCONTROL             = 0x8808
+	ETHERTYPE_FRARP                   = 0x808
+	ETHERTYPE_GENDYN                  = 0x8068
+	ETHERTYPE_HAYES                   = 0x8130
+	ETHERTYPE_HIPPI_FP                = 0x8180
+	ETHERTYPE_HITACHI                 = 0x8820
+	ETHERTYPE_HP                      = 0x8005
+	ETHERTYPE_IEEEPUP                 = 0xa00
+	ETHERTYPE_IEEEPUPAT               = 0xa01
+	ETHERTYPE_IMLBL                   = 0x4c42
+	ETHERTYPE_IMLBLDIAG               = 0x424c
+	ETHERTYPE_IP                      = 0x800
+	ETHERTYPE_IPAS                    = 0x876c
+	ETHERTYPE_IPV6                    = 0x86dd
+	ETHERTYPE_IPX                     = 0x8137
+	ETHERTYPE_IPXNEW                  = 0x8037
+	ETHERTYPE_KALPANA                 = 0x8582
+	ETHERTYPE_LANBRIDGE               = 0x8038
+	ETHERTYPE_LANPROBE                = 0x8888
+	ETHERTYPE_LAT                     = 0x6004
+	ETHERTYPE_LBACK                   = 0x9000
+	ETHERTYPE_LITTLE                  = 0x8060
+	ETHERTYPE_LLDP                    = 0x88cc
+	ETHERTYPE_LOGICRAFT               = 0x8148
+	ETHERTYPE_LOOPBACK                = 0x9000
+	ETHERTYPE_MATRA                   = 0x807a
+	ETHERTYPE_MAX                     = 0xffff
+	ETHERTYPE_MERIT                   = 0x807c
+	ETHERTYPE_MICP                    = 0x873a
+	ETHERTYPE_MOPDL                   = 0x6001
+	ETHERTYPE_MOPRC                   = 0x6002
+	ETHERTYPE_MOTOROLA                = 0x818d
+	ETHERTYPE_MPLS                    = 0x8847
+	ETHERTYPE_MPLS_MCAST              = 0x8848
+	ETHERTYPE_MUMPS                   = 0x813f
+	ETHERTYPE_NBPCC                   = 0x3c04
+	ETHERTYPE_NBPCLAIM                = 0x3c09
+	ETHERTYPE_NBPCLREQ                = 0x3c05
+	ETHERTYPE_NBPCLRSP                = 0x3c06
+	ETHERTYPE_NBPCREQ                 = 0x3c02
+	ETHERTYPE_NBPCRSP                 = 0x3c03
+	ETHERTYPE_NBPDG                   = 0x3c07
+	ETHERTYPE_NBPDGB                  = 0x3c08
+	ETHERTYPE_NBPDLTE                 = 0x3c0a
+	ETHERTYPE_NBPRAR                  = 0x3c0c
+	ETHERTYPE_NBPRAS                  = 0x3c0b
+	ETHERTYPE_NBPRST                  = 0x3c0d
+	ETHERTYPE_NBPSCD                  = 0x3c01
+	ETHERTYPE_NBPVCD                  = 0x3c00
+	ETHERTYPE_NBS                     = 0x802
+	ETHERTYPE_NCD                     = 0x8149
+	ETHERTYPE_NESTAR                  = 0x8006
+	ETHERTYPE_NETBEUI                 = 0x8191
+	ETHERTYPE_NOVELL                  = 0x8138
+	ETHERTYPE_NS                      = 0x600
+	ETHERTYPE_NSAT                    = 0x601
+	ETHERTYPE_NSCOMPAT                = 0x807
+	ETHERTYPE_NTRAILER                = 0x10
+	ETHERTYPE_OS9                     = 0x7007
+	ETHERTYPE_OS9NET                  = 0x7009
+	ETHERTYPE_PACER                   = 0x80c6
+	ETHERTYPE_PAE                     = 0x888e
+	ETHERTYPE_PCS                     = 0x4242
+	ETHERTYPE_PLANNING                = 0x8044
+	ETHERTYPE_PPP                     = 0x880b
+	ETHERTYPE_PPPOE                   = 0x8864
+	ETHERTYPE_PPPOEDISC               = 0x8863
+	ETHERTYPE_PRIMENTS                = 0x7031
+	ETHERTYPE_PUP                     = 0x200
+	ETHERTYPE_PUPAT                   = 0x200
+	ETHERTYPE_QINQ                    = 0x88a8
+	ETHERTYPE_RACAL                   = 0x7030
+	ETHERTYPE_RATIONAL                = 0x8150
+	ETHERTYPE_RAWFR                   = 0x6559
+	ETHERTYPE_RCL                     = 0x1995
+	ETHERTYPE_RDP                     = 0x8739
+	ETHERTYPE_RETIX                   = 0x80f2
+	ETHERTYPE_REVARP                  = 0x8035
+	ETHERTYPE_SCA                     = 0x6007
+	ETHERTYPE_SECTRA                  = 0x86db
+	ETHERTYPE_SECUREDATA              = 0x876d
+	ETHERTYPE_SGITW                   = 0x817e
+	ETHERTYPE_SG_BOUNCE               = 0x8016
+	ETHERTYPE_SG_DIAG                 = 0x8013
+	ETHERTYPE_SG_NETGAMES             = 0x8014
+	ETHERTYPE_SG_RESV                 = 0x8015
+	ETHERTYPE_SIMNET                  = 0x5208
+	ETHERTYPE_SLOW                    = 0x8809
+	ETHERTYPE_SNA                     = 0x80d5
+	ETHERTYPE_SNMP                    = 0x814c
+	ETHERTYPE_SONIX                   = 0xfaf5
+	ETHERTYPE_SPIDER                  = 0x809f
+	ETHERTYPE_SPRITE                  = 0x500
+	ETHERTYPE_STP                     = 0x8181
+	ETHERTYPE_TALARIS                 = 0x812b
+	ETHERTYPE_TALARISMC               = 0x852b
+	ETHERTYPE_TCPCOMP                 = 0x876b
+	ETHERTYPE_TCPSM                   = 0x9002
+	ETHERTYPE_TEC                     = 0x814f
+	ETHERTYPE_TIGAN                   = 0x802f
+	ETHERTYPE_TRAIL                   = 0x1000
+	ETHERTYPE_TRANSETHER              = 0x6558
+	ETHERTYPE_TYMSHARE                = 0x802e
+	ETHERTYPE_UBBST                   = 0x7005
+	ETHERTYPE_UBDEBUG                 = 0x900
+	ETHERTYPE_UBDIAGLOOP              = 0x7002
+	ETHERTYPE_UBDL                    = 0x7000
+	ETHERTYPE_UBNIU                   = 0x7001
+	ETHERTYPE_UBNMC                   = 0x7003
+	ETHERTYPE_VALID                   = 0x1600
+	ETHERTYPE_VARIAN                  = 0x80dd
+	ETHERTYPE_VAXELN                  = 0x803b
+	ETHERTYPE_VEECO                   = 0x8067
+	ETHERTYPE_VEXP                    = 0x805b
+	ETHERTYPE_VGLAB                   = 0x8131
+	ETHERTYPE_VINES                   = 0xbad
+	ETHERTYPE_VINESECHO               = 0xbaf
+	ETHERTYPE_VINESLOOP               = 0xbae
+	ETHERTYPE_VITAL                   = 0xff00
+	ETHERTYPE_VLAN                    = 0x8100
+	ETHERTYPE_VLTLMAN                 = 0x8080
+	ETHERTYPE_VPROD                   = 0x805c
+	ETHERTYPE_VURESERVED              = 0x8147
+	ETHERTYPE_WATERLOO                = 0x8130
+	ETHERTYPE_WELLFLEET               = 0x8103
+	ETHERTYPE_X25                     = 0x805
+	ETHERTYPE_X75                     = 0x801
+	ETHERTYPE_XNSSM                   = 0x9001
+	ETHERTYPE_XTP                     = 0x817d
+	ETHER_ADDR_LEN                    = 0x6
+	ETHER_ALIGN                       = 0x2
+	ETHER_CRC_LEN                     = 0x4
+	ETHER_CRC_POLY_BE                 = 0x4c11db6
+	ETHER_CRC_POLY_LE                 = 0xedb88320
+	ETHER_HDR_LEN                     = 0xe
+	ETHER_MAX_DIX_LEN                 = 0x600
+	ETHER_MAX_HARDMTU_LEN             = 0xff9b
+	ETHER_MAX_LEN                     = 0x5ee
+	ETHER_MIN_LEN                     = 0x40
+	ETHER_TYPE_LEN                    = 0x2
+	ETHER_VLAN_ENCAP_LEN              = 0x4
+	EVFILT_AIO                        = -0x3
+	EVFILT_DEVICE                     = -0x8
+	EVFILT_PROC                       = -0x5
+	EVFILT_READ                       = -0x1
+	EVFILT_SIGNAL                     = -0x6
+	EVFILT_SYSCOUNT                   = 0x8
+	EVFILT_TIMER                      = -0x7
+	EVFILT_VNODE                      = -0x4
+	EVFILT_WRITE                      = -0x2
+	EVL_ENCAPLEN                      = 0x4
+	EVL_PRIO_BITS                     = 0xd
+	EVL_PRIO_MAX                      = 0x7
+	EVL_VLID_MASK                     = 0xfff
+	EVL_VLID_MAX                      = 0xffe
+	EVL_VLID_MIN                      = 0x1
+	EVL_VLID_NULL                     = 0x0
+	EV_ADD                            = 0x1
+	EV_CLEAR                          = 0x20
+	EV_DELETE                         = 0x2
+	EV_DISABLE                        = 0x8
+	EV_DISPATCH                       = 0x80
+	EV_ENABLE                         = 0x4
+	EV_EOF                            = 0x8000
+	EV_ERROR                          = 0x4000
+	EV_FLAG1                          = 0x2000
+	EV_ONESHOT                        = 0x10
+	EV_RECEIPT                        = 0x40
+	EV_SYSFLAGS                       = 0xf000
+	EXTA                              = 0x4b00
+	EXTB                              = 0x9600
+	EXTPROC                           = 0x800
+	FD_CLOEXEC                        = 0x1
+	FD_SETSIZE                        = 0x400
+	FLUSHO                            = 0x800000
+	F_DUPFD                           = 0x0
+	F_DUPFD_CLOEXEC                   = 0xa
+	F_GETFD                           = 0x1
+	F_GETFL                           = 0x3
+	F_GETLK                           = 0x7
+	F_GETOWN                          = 0x5
+	F_ISATTY                          = 0xb
+	F_OK                              = 0x0
+	F_RDLCK                           = 0x1
+	F_SETFD                           = 0x2
+	F_SETFL                           = 0x4
+	F_SETLK                           = 0x8
+	F_SETLKW                          = 0x9
+	F_SETOWN                          = 0x6
+	F_UNLCK                           = 0x2
+	F_WRLCK                           = 0x3
+	HUPCL                             = 0x4000
+	HW_MACHINE                        = 0x1
+	ICANON                            = 0x100
+	ICMP6_FILTER                      = 0x12
+	ICRNL                             = 0x100
+	IEXTEN                            = 0x400
+	IFAN_ARRIVAL                      = 0x0
+	IFAN_DEPARTURE                    = 0x1
+	IFF_ALLMULTI                      = 0x200
+	IFF_BROADCAST                     = 0x2
+	IFF_CANTCHANGE                    = 0x8e52
+	IFF_DEBUG                         = 0x4
+	IFF_LINK0                         = 0x1000
+	IFF_LINK1                         = 0x2000
+	IFF_LINK2                         = 0x4000
+	IFF_LOOPBACK                      = 0x8
+	IFF_MULTICAST                     = 0x8000
+	IFF_NOARP                         = 0x80
+	IFF_OACTIVE                       = 0x400
+	IFF_POINTOPOINT                   = 0x10
+	IFF_PROMISC                       = 0x100
+	IFF_RUNNING                       = 0x40
+	IFF_SIMPLEX                       = 0x800
+	IFF_STATICARP                     = 0x20
+	IFF_UP                            = 0x1
+	IFNAMSIZ                          = 0x10
+	IFT_1822                          = 0x2
+	IFT_A12MPPSWITCH                  = 0x82
+	IFT_AAL2                          = 0xbb
+	IFT_AAL5                          = 0x31
+	IFT_ADSL                          = 0x5e
+	IFT_AFLANE8023                    = 0x3b
+	IFT_AFLANE8025                    = 0x3c
+	IFT_ARAP                          = 0x58
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ASYNC                         = 0x54
+	IFT_ATM                           = 0x25
+	IFT_ATMDXI                        = 0x69
+	IFT_ATMFUNI                       = 0x6a
+	IFT_ATMIMA                        = 0x6b
+	IFT_ATMLOGICAL                    = 0x50
+	IFT_ATMRADIO                      = 0xbd
+	IFT_ATMSUBINTERFACE               = 0x86
+	IFT_ATMVCIENDPT                   = 0xc2
+	IFT_ATMVIRTUAL                    = 0x95
+	IFT_BGPPOLICYACCOUNTING           = 0xa2
+	IFT_BLUETOOTH                     = 0xf8
+	IFT_BRIDGE                        = 0xd1
+	IFT_BSC                           = 0x53
+	IFT_CARP                          = 0xf7
+	IFT_CCTEMUL                       = 0x3d
+	IFT_CEPT                          = 0x13
+	IFT_CES                           = 0x85
+	IFT_CHANNEL                       = 0x46
+	IFT_CNR                           = 0x55
+	IFT_COFFEE                        = 0x84
+	IFT_COMPOSITELINK                 = 0x9b
+	IFT_DCN                           = 0x8d
+	IFT_DIGITALPOWERLINE              = 0x8a
+	IFT_DIGITALWRAPPEROVERHEADCHANNEL = 0xba
+	IFT_DLSW                          = 0x4a
+	IFT_DOCSCABLEDOWNSTREAM           = 0x80
+	IFT_DOCSCABLEMACLAYER             = 0x7f
+	IFT_DOCSCABLEUPSTREAM             = 0x81
+	IFT_DOCSCABLEUPSTREAMCHANNEL      = 0xcd
+	IFT_DS0                           = 0x51
+	IFT_DS0BUNDLE                     = 0x52
+	IFT_DS1FDL                        = 0xaa
+	IFT_DS3                           = 0x1e
+	IFT_DTM                           = 0x8c
+	IFT_DUMMY                         = 0xf1
+	IFT_DVBASILN                      = 0xac
+	IFT_DVBASIOUT                     = 0xad
+	IFT_DVBRCCDOWNSTREAM              = 0x93
+	IFT_DVBRCCMACLAYER                = 0x92
+	IFT_DVBRCCUPSTREAM                = 0x94
+	IFT_ECONET                        = 0xce
+	IFT_ENC                           = 0xf4
+	IFT_EON                           = 0x19
+	IFT_EPLRS                         = 0x57
+	IFT_ESCON                         = 0x49
+	IFT_ETHER                         = 0x6
+	IFT_FAITH                         = 0xf3
+	IFT_FAST                          = 0x7d
+	IFT_FASTETHER                     = 0x3e
+	IFT_FASTETHERFX                   = 0x45
+	IFT_FDDI                          = 0xf
+	IFT_FIBRECHANNEL                  = 0x38
+	IFT_FRAMERELAYINTERCONNECT        = 0x3a
+	IFT_FRAMERELAYMPI                 = 0x5c
+	IFT_FRDLCIENDPT                   = 0xc1
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_FRF16MFRBUNDLE                = 0xa3
+	IFT_FRFORWARD                     = 0x9e
+	IFT_G703AT2MB                     = 0x43
+	IFT_G703AT64K                     = 0x42
+	IFT_GIF                           = 0xf0
+	IFT_GIGABITETHERNET               = 0x75
+	IFT_GR303IDT                      = 0xb2
+	IFT_GR303RDT                      = 0xb1
+	IFT_H323GATEKEEPER                = 0xa4
+	IFT_H323PROXY                     = 0xa5
+	IFT_HDH1822                       = 0x3
+	IFT_HDLC                          = 0x76
+	IFT_HDSL2                         = 0xa8
+	IFT_HIPERLAN2                     = 0xb7
+	IFT_HIPPI                         = 0x2f
+	IFT_HIPPIINTERFACE                = 0x39
+	IFT_HOSTPAD                       = 0x5a
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IBM370PARCHAN                 = 0x48
+	IFT_IDSL                          = 0x9a
+	IFT_IEEE1394                      = 0x90
+	IFT_IEEE80211                     = 0x47
+	IFT_IEEE80212                     = 0x37
+	IFT_IEEE8023ADLAG                 = 0xa1
+	IFT_IFGSN                         = 0x91
+	IFT_IMT                           = 0xbe
+	IFT_INFINIBAND                    = 0xc7
+	IFT_INTERLEAVE                    = 0x7c
+	IFT_IP                            = 0x7e
+	IFT_IPFORWARD                     = 0x8e
+	IFT_IPOVERATM                     = 0x72
+	IFT_IPOVERCDLC                    = 0x6d
+	IFT_IPOVERCLAW                    = 0x6e
+	IFT_IPSWITCH                      = 0x4e
+	IFT_ISDN                          = 0x3f
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISDNS                         = 0x4b
+	IFT_ISDNU                         = 0x4c
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88025CRFPINT               = 0x62
+	IFT_ISO88025DTR                   = 0x56
+	IFT_ISO88025FIBER                 = 0x73
+	IFT_ISO88026                      = 0xa
+	IFT_ISUP                          = 0xb3
+	IFT_L2VLAN                        = 0x87
+	IFT_L3IPVLAN                      = 0x88
+	IFT_L3IPXVLAN                     = 0x89
+	IFT_LAPB                          = 0x10
+	IFT_LAPD                          = 0x4d
+	IFT_LAPF                          = 0x77
+	IFT_LINEGROUP                     = 0xd2
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MBIM                          = 0xfa
+	IFT_MEDIAMAILOVERIP               = 0x8b
+	IFT_MFSIGLINK                     = 0xa7
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_MPC                           = 0x71
+	IFT_MPLS                          = 0xa6
+	IFT_MPLSTUNNEL                    = 0x96
+	IFT_MSDSL                         = 0x8f
+	IFT_MVL                           = 0xbf
+	IFT_MYRINET                       = 0x63
+	IFT_NFAS                          = 0xaf
+	IFT_NSIP                          = 0x1b
+	IFT_OPTICALCHANNEL                = 0xc3
+	IFT_OPTICALTRANSPORT              = 0xc4
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PFLOG                         = 0xf5
+	IFT_PFLOW                         = 0xf9
+	IFT_PFSYNC                        = 0xf6
+	IFT_PLC                           = 0xae
+	IFT_PON155                        = 0xcf
+	IFT_PON622                        = 0xd0
+	IFT_POS                           = 0xab
+	IFT_PPP                           = 0x17
+	IFT_PPPMULTILINKBUNDLE            = 0x6c
+	IFT_PROPATM                       = 0xc5
+	IFT_PROPBWAP2MP                   = 0xb8
+	IFT_PROPCNLS                      = 0x59
+	IFT_PROPDOCSWIRELESSDOWNSTREAM    = 0xb5
+	IFT_PROPDOCSWIRELESSMACLAYER      = 0xb4
+	IFT_PROPDOCSWIRELESSUPSTREAM      = 0xb6
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPVIRTUAL                   = 0x35
+	IFT_PROPWIRELESSP2P               = 0x9d
+	IFT_PTPSERIAL                     = 0x16
+	IFT_PVC                           = 0xf2
+	IFT_Q2931                         = 0xc9
+	IFT_QLLC                          = 0x44
+	IFT_RADIOMAC                      = 0xbc
+	IFT_RADSL                         = 0x5f
+	IFT_REACHDSL                      = 0xc0
+	IFT_RFC1483                       = 0x9f
+	IFT_RS232                         = 0x21
+	IFT_RSRB                          = 0x4f
+	IFT_SDLC                          = 0x11
+	IFT_SDSL                          = 0x60
+	IFT_SHDSL                         = 0xa9
+	IFT_SIP                           = 0x1f
+	IFT_SIPSIG                        = 0xcc
+	IFT_SIPTG                         = 0xcb
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETOVERHEADCHANNEL          = 0xb9
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_SRP                           = 0x97
+	IFT_SS7SIGLINK                    = 0x9c
+	IFT_STACKTOSTACK                  = 0x6f
+	IFT_STARLAN                       = 0xb
+	IFT_T1                            = 0x12
+	IFT_TDLC                          = 0x74
+	IFT_TELINK                        = 0xc8
+	IFT_TERMPAD                       = 0x5b
+	IFT_TR008                         = 0xb0
+	IFT_TRANSPHDLC                    = 0x7b
+	IFT_TUNNEL                        = 0x83
+	IFT_ULTRA                         = 0x1d
+	IFT_USB                           = 0xa0
+	IFT_V11                           = 0x40
+	IFT_V35                           = 0x2d
+	IFT_V36                           = 0x41
+	IFT_V37                           = 0x78
+	IFT_VDSL                          = 0x61
+	IFT_VIRTUALIPADDRESS              = 0x70
+	IFT_VIRTUALTG                     = 0xca
+	IFT_VOICEDID                      = 0xd5
+	IFT_VOICEEM                       = 0x64
+	IFT_VOICEEMFGD                    = 0xd3
+	IFT_VOICEENCAP                    = 0x67
+	IFT_VOICEFGDEANA                  = 0xd4
+	IFT_VOICEFXO                      = 0x65
+	IFT_VOICEFXS                      = 0x66
+	IFT_VOICEOVERATM                  = 0x98
+	IFT_VOICEOVERCABLE                = 0xc6
+	IFT_VOICEOVERFRAMERELAY           = 0x99
+	IFT_VOICEOVERIP                   = 0x68
+	IFT_X213                          = 0x5d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25HUNTGROUP                  = 0x7a
+	IFT_X25MLP                        = 0x79
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+	IGNBRK                            = 0x1
+	IGNCR                             = 0x80
+	IGNPAR                            = 0x4
+	IMAXBEL                           = 0x2000
+	INLCR                             = 0x40
+	INPCK                             = 0x10
+	IN_CLASSA_HOST                    = 0xffffff
+	IN_CLASSA_MAX                     = 0x80
+	IN_CLASSA_NET                     = 0xff000000
+	IN_CLASSA_NSHIFT                  = 0x18
+	IN_CLASSB_HOST                    = 0xffff
+	IN_CLASSB_MAX                     = 0x10000
+	IN_CLASSB_NET                     = 0xffff0000
+	IN_CLASSB_NSHIFT                  = 0x10
+	IN_CLASSC_HOST                    = 0xff
+	IN_CLASSC_NET                     = 0xffffff00
+	IN_CLASSC_NSHIFT                  = 0x8
+	IN_CLASSD_HOST                    = 0xfffffff
+	IN_CLASSD_NET                     = 0xf0000000
+	IN_CLASSD_NSHIFT                  = 0x1c
+	IN_LOOPBACKNET                    = 0x7f
+	IN_RFC3021_HOST                   = 0x1
+	IN_RFC3021_NET                    = 0xfffffffe
+	IN_RFC3021_NSHIFT                 = 0x1f
+	IPPROTO_AH                        = 0x33
+	IPPROTO_CARP                      = 0x70
+	IPPROTO_DIVERT                    = 0x102
+	IPPROTO_DONE                      = 0x101
+	IPPROTO_DSTOPTS                   = 0x3c
+	IPPROTO_EGP                       = 0x8
+	IPPROTO_ENCAP                     = 0x62
+	IPPROTO_EON                       = 0x50
+	IPPROTO_ESP                       = 0x32
+	IPPROTO_ETHERIP                   = 0x61
+	IPPROTO_FRAGMENT                  = 0x2c
+	IPPROTO_GGP                       = 0x3
+	IPPROTO_GRE                       = 0x2f
+	IPPROTO_HOPOPTS                   = 0x0
+	IPPROTO_ICMP                      = 0x1
+	IPPROTO_ICMPV6                    = 0x3a
+	IPPROTO_IDP                       = 0x16
+	IPPROTO_IGMP                      = 0x2
+	IPPROTO_IP                        = 0x0
+	IPPROTO_IPCOMP                    = 0x6c
+	IPPROTO_IPIP                      = 0x4
+	IPPROTO_IPV4                      = 0x4
+	IPPROTO_IPV6                      = 0x29
+	IPPROTO_MAX                       = 0x100
+	IPPROTO_MAXID                     = 0x103
+	IPPROTO_MOBILE                    = 0x37
+	IPPROTO_MPLS                      = 0x89
+	IPPROTO_NONE                      = 0x3b
+	IPPROTO_PFSYNC                    = 0xf0
+	IPPROTO_PIM                       = 0x67
+	IPPROTO_PUP                       = 0xc
+	IPPROTO_RAW                       = 0xff
+	IPPROTO_ROUTING                   = 0x2b
+	IPPROTO_RSVP                      = 0x2e
+	IPPROTO_TCP                       = 0x6
+	IPPROTO_TP                        = 0x1d
+	IPPROTO_UDP                       = 0x11
+	IPV6_AUTH_LEVEL                   = 0x35
+	IPV6_AUTOFLOWLABEL                = 0x3b
+	IPV6_CHECKSUM                     = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS       = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP       = 0x1
+	IPV6_DEFHLIM                      = 0x40
+	IPV6_DONTFRAG                     = 0x3e
+	IPV6_DSTOPTS                      = 0x32
+	IPV6_ESP_NETWORK_LEVEL            = 0x37
+	IPV6_ESP_TRANS_LEVEL              = 0x36
+	IPV6_FAITH                        = 0x1d
+	IPV6_FLOWINFO_MASK                = 0xffffff0f
+	IPV6_FLOWLABEL_MASK               = 0xffff0f00
+	IPV6_FRAGTTL                      = 0x78
+	IPV6_HLIMDEC                      = 0x1
+	IPV6_HOPLIMIT                     = 0x2f
+	IPV6_HOPOPTS                      = 0x31
+	IPV6_IPCOMP_LEVEL                 = 0x3c
+	IPV6_JOIN_GROUP                   = 0xc
+	IPV6_LEAVE_GROUP                  = 0xd
+	IPV6_MAXHLIM                      = 0xff
+	IPV6_MAXPACKET                    = 0xffff
+	IPV6_MINHOPCOUNT                  = 0x41
+	IPV6_MMTU                         = 0x500
+	IPV6_MULTICAST_HOPS               = 0xa
+	IPV6_MULTICAST_IF                 = 0x9
+	IPV6_MULTICAST_LOOP               = 0xb
+	IPV6_NEXTHOP                      = 0x30
+	IPV6_OPTIONS                      = 0x1
+	IPV6_PATHMTU                      = 0x2c
+	IPV6_PIPEX                        = 0x3f
+	IPV6_PKTINFO                      = 0x2e
+	IPV6_PORTRANGE                    = 0xe
+	IPV6_PORTRANGE_DEFAULT            = 0x0
+	IPV6_PORTRANGE_HIGH               = 0x1
+	IPV6_PORTRANGE_LOW                = 0x2
+	IPV6_RECVDSTOPTS                  = 0x28
+	IPV6_RECVDSTPORT                  = 0x40
+	IPV6_RECVHOPLIMIT                 = 0x25
+	IPV6_RECVHOPOPTS                  = 0x27
+	IPV6_RECVPATHMTU                  = 0x2b
+	IPV6_RECVPKTINFO                  = 0x24
+	IPV6_RECVRTHDR                    = 0x26
+	IPV6_RECVTCLASS                   = 0x39
+	IPV6_RTABLE                       = 0x1021
+	IPV6_RTHDR                        = 0x33
+	IPV6_RTHDRDSTOPTS                 = 0x23
+	IPV6_RTHDR_LOOSE                  = 0x0
+	IPV6_RTHDR_STRICT                 = 0x1
+	IPV6_RTHDR_TYPE_0                 = 0x0
+	IPV6_SOCKOPT_RESERVED1            = 0x3
+	IPV6_TCLASS                       = 0x3d
+	IPV6_UNICAST_HOPS                 = 0x4
+	IPV6_USE_MIN_MTU                  = 0x2a
+	IPV6_V6ONLY                       = 0x1b
+	IPV6_VERSION                      = 0x60
+	IPV6_VERSION_MASK                 = 0xf0
+	IP_ADD_MEMBERSHIP                 = 0xc
+	IP_AUTH_LEVEL                     = 0x14
+	IP_DEFAULT_MULTICAST_LOOP         = 0x1
+	IP_DEFAULT_MULTICAST_TTL          = 0x1
+	IP_DF                             = 0x4000
+	IP_DROP_MEMBERSHIP                = 0xd
+	IP_ESP_NETWORK_LEVEL              = 0x16
+	IP_ESP_TRANS_LEVEL                = 0x15
+	IP_HDRINCL                        = 0x2
+	IP_IPCOMP_LEVEL                   = 0x1d
+	IP_IPDEFTTL                       = 0x25
+	IP_IPSECFLOWINFO                  = 0x24
+	IP_IPSEC_LOCAL_AUTH               = 0x1b
+	IP_IPSEC_LOCAL_CRED               = 0x19
+	IP_IPSEC_LOCAL_ID                 = 0x17
+	IP_IPSEC_REMOTE_AUTH              = 0x1c
+	IP_IPSEC_REMOTE_CRED              = 0x1a
+	IP_IPSEC_REMOTE_ID                = 0x18
+	IP_MAXPACKET                      = 0xffff
+	IP_MAX_MEMBERSHIPS                = 0xfff
+	IP_MF                             = 0x2000
+	IP_MINTTL                         = 0x20
+	IP_MIN_MEMBERSHIPS                = 0xf
+	IP_MSS                            = 0x240
+	IP_MULTICAST_IF                   = 0x9
+	IP_MULTICAST_LOOP                 = 0xb
+	IP_MULTICAST_TTL                  = 0xa
+	IP_OFFMASK                        = 0x1fff
+	IP_OPTIONS                        = 0x1
+	IP_PIPEX                          = 0x22
+	IP_PORTRANGE                      = 0x13
+	IP_PORTRANGE_DEFAULT              = 0x0
+	IP_PORTRANGE_HIGH                 = 0x1
+	IP_PORTRANGE_LOW                  = 0x2
+	IP_RECVDSTADDR                    = 0x7
+	IP_RECVDSTPORT                    = 0x21
+	IP_RECVIF                         = 0x1e
+	IP_RECVOPTS                       = 0x5
+	IP_RECVRETOPTS                    = 0x6
+	IP_RECVRTABLE                     = 0x23
+	IP_RECVTTL                        = 0x1f
+	IP_RETOPTS                        = 0x8
+	IP_RF                             = 0x8000
+	IP_RTABLE                         = 0x1021
+	IP_SENDSRCADDR                    = 0x7
+	IP_TOS                            = 0x3
+	IP_TTL                            = 0x4
+	ISIG                              = 0x80
+	ISTRIP                            = 0x20
+	IUCLC                             = 0x1000
+	IXANY                             = 0x800
+	IXOFF                             = 0x400
+	IXON                              = 0x200
+	KERN_HOSTNAME                     = 0xa
+	KERN_OSRELEASE                    = 0x2
+	KERN_OSTYPE                       = 0x1
+	KERN_VERSION                      = 0x4
+	LCNT_OVERLOAD_FLUSH               = 0x6
+	LOCK_EX                           = 0x2
+	LOCK_NB                           = 0x4
+	LOCK_SH                           = 0x1
+	LOCK_UN                           = 0x8
+	MADV_DONTNEED                     = 0x4
+	MADV_FREE                         = 0x6
+	MADV_NORMAL                       = 0x0
+	MADV_RANDOM                       = 0x1
+	MADV_SEQUENTIAL                   = 0x2
+	MADV_SPACEAVAIL                   = 0x5
+	MADV_WILLNEED                     = 0x3
+	MAP_ANON                          = 0x1000
+	MAP_ANONYMOUS                     = 0x1000
+	MAP_CONCEAL                       = 0x8000
+	MAP_COPY                          = 0x2
+	MAP_FILE                          = 0x0
+	MAP_FIXED                         = 0x10
+	MAP_FLAGMASK                      = 0xfff7
+	MAP_HASSEMAPHORE                  = 0x0
+	MAP_INHERIT                       = 0x0
+	MAP_INHERIT_COPY                  = 0x1
+	MAP_INHERIT_NONE                  = 0x2
+	MAP_INHERIT_SHARE                 = 0x0
+	MAP_INHERIT_ZERO                  = 0x3
+	MAP_NOEXTEND                      = 0x0
+	MAP_NORESERVE                     = 0x0
+	MAP_PRIVATE                       = 0x2
+	MAP_RENAME                        = 0x0
+	MAP_SHARED                        = 0x1
+	MAP_STACK                         = 0x4000
+	MAP_TRYFIXED                      = 0x0
+	MCL_CURRENT                       = 0x1
+	MCL_FUTURE                        = 0x2
+	MNT_ASYNC                         = 0x40
+	MNT_DEFEXPORTED                   = 0x200
+	MNT_DELEXPORT                     = 0x20000
+	MNT_DOOMED                        = 0x8000000
+	MNT_EXPORTANON                    = 0x400
+	MNT_EXPORTED                      = 0x100
+	MNT_EXRDONLY                      = 0x80
+	MNT_FORCE                         = 0x80000
+	MNT_LAZY                          = 0x3
+	MNT_LOCAL                         = 0x1000
+	MNT_NOATIME                       = 0x8000
+	MNT_NODEV                         = 0x10
+	MNT_NOEXEC                        = 0x4
+	MNT_NOPERM                        = 0x20
+	MNT_NOSUID                        = 0x8
+	MNT_NOWAIT                        = 0x2
+	MNT_QUOTA                         = 0x2000
+	MNT_RDONLY                        = 0x1
+	MNT_RELOAD                        = 0x40000
+	MNT_ROOTFS                        = 0x4000
+	MNT_SOFTDEP                       = 0x4000000
+	MNT_STALLED                       = 0x100000
+	MNT_SYNCHRONOUS                   = 0x2
+	MNT_UPDATE                        = 0x10000
+	MNT_VISFLAGMASK                   = 0x400ffff
+	MNT_WAIT                          = 0x1
+	MNT_WANTRDWR                      = 0x2000000
+	MNT_WXALLOWED                     = 0x800
+	MSG_BCAST                         = 0x100
+	MSG_CMSG_CLOEXEC                  = 0x800
+	MSG_CTRUNC                        = 0x20
+	MSG_DONTROUTE                     = 0x4
+	MSG_DONTWAIT                      = 0x80
+	MSG_EOR                           = 0x8
+	MSG_MCAST                         = 0x200
+	MSG_NOSIGNAL                      = 0x400
+	MSG_OOB                           = 0x1
+	MSG_PEEK                          = 0x2
+	MSG_TRUNC                         = 0x10
+	MSG_WAITALL                       = 0x40
+	MS_ASYNC                          = 0x1
+	MS_INVALIDATE                     = 0x4
+	MS_SYNC                           = 0x2
+	NAME_MAX                          = 0xff
+	NET_RT_DUMP                       = 0x1
+	NET_RT_FLAGS                      = 0x2
+	NET_RT_IFLIST                     = 0x3
+	NET_RT_IFNAMES                    = 0x6
+	NET_RT_MAXID                      = 0x7
+	NET_RT_STATS                      = 0x4
+	NET_RT_TABLE                      = 0x5
+	NFDBITS                           = 0x20
+	NOFLSH                            = 0x80000000
+	NOKERNINFO                        = 0x2000000
+	NOTE_ATTRIB                       = 0x8
+	NOTE_CHANGE                       = 0x1
+	NOTE_CHILD                        = 0x4
+	NOTE_DELETE                       = 0x1
+	NOTE_EOF                          = 0x2
+	NOTE_EXEC                         = 0x20000000
+	NOTE_EXIT                         = 0x80000000
+	NOTE_EXTEND                       = 0x4
+	NOTE_FORK                         = 0x40000000
+	NOTE_LINK                         = 0x10
+	NOTE_LOWAT                        = 0x1
+	NOTE_PCTRLMASK                    = 0xf0000000
+	NOTE_PDATAMASK                    = 0xfffff
+	NOTE_RENAME                       = 0x20
+	NOTE_REVOKE                       = 0x40
+	NOTE_TRACK                        = 0x1
+	NOTE_TRACKERR                     = 0x2
+	NOTE_TRUNCATE                     = 0x80
+	NOTE_WRITE                        = 0x2
+	OCRNL                             = 0x10
+	OLCUC                             = 0x20
+	ONLCR                             = 0x2
+	ONLRET                            = 0x80
+	ONOCR                             = 0x40
+	ONOEOT                            = 0x8
+	OPOST                             = 0x1
+	OXTABS                            = 0x4
+	O_ACCMODE                         = 0x3
+	O_APPEND                          = 0x8
+	O_ASYNC                           = 0x40
+	O_CLOEXEC                         = 0x10000
+	O_CREAT                           = 0x200
+	O_DIRECTORY                       = 0x20000
+	O_DSYNC                           = 0x80
+	O_EXCL                            = 0x800
+	O_EXLOCK                          = 0x20
+	O_FSYNC                           = 0x80
+	O_NDELAY                          = 0x4
+	O_NOCTTY                          = 0x8000
+	O_NOFOLLOW                        = 0x100
+	O_NONBLOCK                        = 0x4
+	O_RDONLY                          = 0x0
+	O_RDWR                            = 0x2
+	O_RSYNC                           = 0x80
+	O_SHLOCK                          = 0x10
+	O_SYNC                            = 0x80
+	O_TRUNC                           = 0x400
+	O_WRONLY                          = 0x1
+	PARENB                            = 0x1000
+	PARMRK                            = 0x8
+	PARODD                            = 0x2000
+	PENDIN                            = 0x20000000
+	PF_FLUSH                          = 0x1
+	PRIO_PGRP                         = 0x1
+	PRIO_PROCESS                      = 0x0
+	PRIO_USER                         = 0x2
+	PROT_EXEC                         = 0x4
+	PROT_NONE                         = 0x0
+	PROT_READ                         = 0x1
+	PROT_WRITE                        = 0x2
+	RLIMIT_CORE                       = 0x4
+	RLIMIT_CPU                        = 0x0
+	RLIMIT_DATA                       = 0x2
+	RLIMIT_FSIZE                      = 0x1
+	RLIMIT_MEMLOCK                    = 0x6
+	RLIMIT_NOFILE                     = 0x8
+	RLIMIT_NPROC                      = 0x7
+	RLIMIT_RSS                        = 0x5
+	RLIMIT_STACK                      = 0x3
+	RLIM_INFINITY                     = 0x7fffffffffffffff
+	RTAX_AUTHOR                       = 0x6
+	RTAX_BFD                          = 0xb
+	RTAX_BRD                          = 0x7
+	RTAX_DNS                          = 0xc
+	RTAX_DST                          = 0x0
+	RTAX_GATEWAY                      = 0x1
+	RTAX_GENMASK                      = 0x3
+	RTAX_IFA                          = 0x5
+	RTAX_IFP                          = 0x4
+	RTAX_LABEL                        = 0xa
+	RTAX_MAX                          = 0xf
+	RTAX_NETMASK                      = 0x2
+	RTAX_SEARCH                       = 0xe
+	RTAX_SRC                          = 0x8
+	RTAX_SRCMASK                      = 0x9
+	RTAX_STATIC                       = 0xd
+	RTA_AUTHOR                        = 0x40
+	RTA_BFD                           = 0x800
+	RTA_BRD                           = 0x80
+	RTA_DNS                           = 0x1000
+	RTA_DST                           = 0x1
+	RTA_GATEWAY                       = 0x2
+	RTA_GENMASK                       = 0x8
+	RTA_IFA                           = 0x20
+	RTA_IFP                           = 0x10
+	RTA_LABEL                         = 0x400
+	RTA_NETMASK                       = 0x4
+	RTA_SEARCH                        = 0x4000
+	RTA_SRC                           = 0x100
+	RTA_SRCMASK                       = 0x200
+	RTA_STATIC                        = 0x2000
+	RTF_ANNOUNCE                      = 0x4000
+	RTF_BFD                           = 0x1000000
+	RTF_BLACKHOLE                     = 0x1000
+	RTF_BROADCAST                     = 0x400000
+	RTF_CACHED                        = 0x20000
+	RTF_CLONED                        = 0x10000
+	RTF_CLONING                       = 0x100
+	RTF_CONNECTED                     = 0x800000
+	RTF_DONE                          = 0x40
+	RTF_DYNAMIC                       = 0x10
+	RTF_FMASK                         = 0x110fc08
+	RTF_GATEWAY                       = 0x2
+	RTF_HOST                          = 0x4
+	RTF_LLINFO                        = 0x400
+	RTF_LOCAL                         = 0x200000
+	RTF_MODIFIED                      = 0x20
+	RTF_MPATH                         = 0x40000
+	RTF_MPLS                          = 0x100000
+	RTF_MULTICAST                     = 0x200
+	RTF_PERMANENT_ARP                 = 0x2000
+	RTF_PROTO1                        = 0x8000
+	RTF_PROTO2                        = 0x4000
+	RTF_PROTO3                        = 0x2000
+	RTF_REJECT                        = 0x8
+	RTF_STATIC                        = 0x800
+	RTF_UP                            = 0x1
+	RTF_USETRAILERS                   = 0x8000
+	RTM_ADD                           = 0x1
+	RTM_BFD                           = 0x12
+	RTM_CHANGE                        = 0x3
+	RTM_DELADDR                       = 0xd
+	RTM_DELETE                        = 0x2
+	RTM_DESYNC                        = 0x10
+	RTM_GET                           = 0x4
+	RTM_IFANNOUNCE                    = 0xf
+	RTM_IFINFO                        = 0xe
+	RTM_INVALIDATE                    = 0x11
+	RTM_LOCK                          = 0x8
+	RTM_LOSING                        = 0x5
+	RTM_MAXSIZE                       = 0x800
+	RTM_MISS                          = 0x7
+	RTM_NEWADDR                       = 0xc
+	RTM_PROPOSAL                      = 0x13
+	RTM_REDIRECT                      = 0x6
+	RTM_RESOLVE                       = 0xb
+	RTM_RTTUNIT                       = 0xf4240
+	RTM_VERSION                       = 0x5
+	RTV_EXPIRE                        = 0x4
+	RTV_HOPCOUNT                      = 0x2
+	RTV_MTU                           = 0x1
+	RTV_RPIPE                         = 0x8
+	RTV_RTT                           = 0x40
+	RTV_RTTVAR                        = 0x80
+	RTV_SPIPE                         = 0x10
+	RTV_SSTHRESH                      = 0x20
+	RT_TABLEID_BITS                   = 0x8
+	RT_TABLEID_MASK                   = 0xff
+	RT_TABLEID_MAX                    = 0xff
+	RUSAGE_CHILDREN                   = -0x1
+	RUSAGE_SELF                       = 0x0
+	RUSAGE_THREAD                     = 0x1
+	SCM_RIGHTS                        = 0x1
+	SCM_TIMESTAMP                     = 0x4
+	SHUT_RD                           = 0x0
+	SHUT_RDWR                         = 0x2
+	SHUT_WR                           = 0x1
+	SIOCADDMULTI                      = 0x80206931
+	SIOCAIFADDR                       = 0x8040691a
+	SIOCAIFGROUP                      = 0x80286987
+	SIOCATMARK                        = 0x40047307
+	SIOCBRDGADD                       = 0x8060693c
+	SIOCBRDGADDL                      = 0x80606949
+	SIOCBRDGADDS                      = 0x80606941
+	SIOCBRDGARL                       = 0x808c694d
+	SIOCBRDGDADDR                     = 0x81286947
+	SIOCBRDGDEL                       = 0x8060693d
+	SIOCBRDGDELS                      = 0x80606942
+	SIOCBRDGFLUSH                     = 0x80606948
+	SIOCBRDGFRL                       = 0x808c694e
+	SIOCBRDGGCACHE                    = 0xc0186941
+	SIOCBRDGGFD                       = 0xc0186952
+	SIOCBRDGGHT                       = 0xc0186951
+	SIOCBRDGGIFFLGS                   = 0xc060693e
+	SIOCBRDGGMA                       = 0xc0186953
+	SIOCBRDGGPARAM                    = 0xc0406958
+	SIOCBRDGGPRI                      = 0xc0186950
+	SIOCBRDGGRL                       = 0xc030694f
+	SIOCBRDGGTO                       = 0xc0186946
+	SIOCBRDGIFS                       = 0xc0606942
+	SIOCBRDGRTS                       = 0xc0206943
+	SIOCBRDGSADDR                     = 0xc1286944
+	SIOCBRDGSCACHE                    = 0x80186940
+	SIOCBRDGSFD                       = 0x80186952
+	SIOCBRDGSHT                       = 0x80186951
+	SIOCBRDGSIFCOST                   = 0x80606955
+	SIOCBRDGSIFFLGS                   = 0x8060693f
+	SIOCBRDGSIFPRIO                   = 0x80606954
+	SIOCBRDGSIFPROT                   = 0x8060694a
+	SIOCBRDGSMA                       = 0x80186953
+	SIOCBRDGSPRI                      = 0x80186950
+	SIOCBRDGSPROTO                    = 0x8018695a
+	SIOCBRDGSTO                       = 0x80186945
+	SIOCBRDGSTXHC                     = 0x80186959
+	SIOCDELMULTI                      = 0x80206932
+	SIOCDIFADDR                       = 0x80206919
+	SIOCDIFGROUP                      = 0x80286989
+	SIOCDIFPARENT                     = 0x802069b4
+	SIOCDIFPHYADDR                    = 0x80206949
+	SIOCDVNETID                       = 0x802069af
+	SIOCGETKALIVE                     = 0xc01869a4
+	SIOCGETLABEL                      = 0x8020699a
+	SIOCGETMPWCFG                     = 0xc02069ae
+	SIOCGETPFLOW                      = 0xc02069fe
+	SIOCGETPFSYNC                     = 0xc02069f8
+	SIOCGETSGCNT                      = 0xc0207534
+	SIOCGETVIFCNT                     = 0xc0287533
+	SIOCGETVLAN                       = 0xc0206990
+	SIOCGIFADDR                       = 0xc0206921
+	SIOCGIFBRDADDR                    = 0xc0206923
+	SIOCGIFCONF                       = 0xc0106924
+	SIOCGIFDATA                       = 0xc020691b
+	SIOCGIFDESCR                      = 0xc0206981
+	SIOCGIFDSTADDR                    = 0xc0206922
+	SIOCGIFFLAGS                      = 0xc0206911
+	SIOCGIFGATTR                      = 0xc028698b
+	SIOCGIFGENERIC                    = 0xc020693a
+	SIOCGIFGMEMB                      = 0xc028698a
+	SIOCGIFGROUP                      = 0xc0286988
+	SIOCGIFHARDMTU                    = 0xc02069a5
+	SIOCGIFLLPRIO                     = 0xc02069b6
+	SIOCGIFMEDIA                      = 0xc0406938
+	SIOCGIFMETRIC                     = 0xc0206917
+	SIOCGIFMTU                        = 0xc020697e
+	SIOCGIFNETMASK                    = 0xc0206925
+	SIOCGIFPAIR                       = 0xc02069b1
+	SIOCGIFPARENT                     = 0xc02069b3
+	SIOCGIFPRIORITY                   = 0xc020699c
+	SIOCGIFRDOMAIN                    = 0xc02069a0
+	SIOCGIFRTLABEL                    = 0xc0206983
+	SIOCGIFRXR                        = 0x802069aa
+	SIOCGIFXFLAGS                     = 0xc020699e
+	SIOCGLIFPHYADDR                   = 0xc218694b
+	SIOCGLIFPHYDF                     = 0xc02069c2
+	SIOCGLIFPHYRTABLE                 = 0xc02069a2
+	SIOCGLIFPHYTTL                    = 0xc02069a9
+	SIOCGPGRP                         = 0x40047309
+	SIOCGSPPPPARAMS                   = 0xc0206994
+	SIOCGUMBINFO                      = 0xc02069be
+	SIOCGUMBPARAM                     = 0xc02069c0
+	SIOCGVH                           = 0xc02069f6
+	SIOCGVNETFLOWID                   = 0xc02069c4
+	SIOCGVNETID                       = 0xc02069a7
+	SIOCIFAFATTACH                    = 0x801169ab
+	SIOCIFAFDETACH                    = 0x801169ac
+	SIOCIFCREATE                      = 0x8020697a
+	SIOCIFDESTROY                     = 0x80206979
+	SIOCIFGCLONERS                    = 0xc0106978
+	SIOCSETKALIVE                     = 0x801869a3
+	SIOCSETLABEL                      = 0x80206999
+	SIOCSETMPWCFG                     = 0x802069ad
+	SIOCSETPFLOW                      = 0x802069fd
+	SIOCSETPFSYNC                     = 0x802069f7
+	SIOCSETVLAN                       = 0x8020698f
+	SIOCSIFADDR                       = 0x8020690c
+	SIOCSIFBRDADDR                    = 0x80206913
+	SIOCSIFDESCR                      = 0x80206980
+	SIOCSIFDSTADDR                    = 0x8020690e
+	SIOCSIFFLAGS                      = 0x80206910
+	SIOCSIFGATTR                      = 0x8028698c
+	SIOCSIFGENERIC                    = 0x80206939
+	SIOCSIFLLADDR                     = 0x8020691f
+	SIOCSIFLLPRIO                     = 0x802069b5
+	SIOCSIFMEDIA                      = 0xc0206937
+	SIOCSIFMETRIC                     = 0x80206918
+	SIOCSIFMTU                        = 0x8020697f
+	SIOCSIFNETMASK                    = 0x80206916
+	SIOCSIFPAIR                       = 0x802069b0
+	SIOCSIFPARENT                     = 0x802069b2
+	SIOCSIFPRIORITY                   = 0x8020699b
+	SIOCSIFRDOMAIN                    = 0x8020699f
+	SIOCSIFRTLABEL                    = 0x80206982
+	SIOCSIFXFLAGS                     = 0x8020699d
+	SIOCSLIFPHYADDR                   = 0x8218694a
+	SIOCSLIFPHYDF                     = 0x802069c1
+	SIOCSLIFPHYRTABLE                 = 0x802069a1
+	SIOCSLIFPHYTTL                    = 0x802069a8
+	SIOCSPGRP                         = 0x80047308
+	SIOCSSPPPPARAMS                   = 0x80206993
+	SIOCSUMBPARAM                     = 0x802069bf
+	SIOCSVH                           = 0xc02069f5
+	SIOCSVNETFLOWID                   = 0x802069c3
+	SIOCSVNETID                       = 0x802069a6
+	SIOCSWGDPID                       = 0xc018695b
+	SIOCSWGMAXFLOW                    = 0xc0186960
+	SIOCSWGMAXGROUP                   = 0xc018695d
+	SIOCSWSDPID                       = 0x8018695c
+	SIOCSWSPORTNO                     = 0xc060695f
+	SOCK_CLOEXEC                      = 0x8000
+	SOCK_DGRAM                        = 0x2
+	SOCK_DNS                          = 0x1000
+	SOCK_NONBLOCK                     = 0x4000
+	SOCK_RAW                          = 0x3
+	SOCK_RDM                          = 0x4
+	SOCK_SEQPACKET                    = 0x5
+	SOCK_STREAM                       = 0x1
+	SOL_SOCKET                        = 0xffff
+	SOMAXCONN                         = 0x80
+	SO_ACCEPTCONN                     = 0x2
+	SO_BINDANY                        = 0x1000
+	SO_BROADCAST                      = 0x20
+	SO_DEBUG                          = 0x1
+	SO_DONTROUTE                      = 0x10
+	SO_ERROR                          = 0x1007
+	SO_KEEPALIVE                      = 0x8
+	SO_LINGER                         = 0x80
+	SO_NETPROC                        = 0x1020
+	SO_OOBINLINE                      = 0x100
+	SO_PEERCRED                       = 0x1022
+	SO_RCVBUF                         = 0x1002
+	SO_RCVLOWAT                       = 0x1004
+	SO_RCVTIMEO                       = 0x1006
+	SO_REUSEADDR                      = 0x4
+	SO_REUSEPORT                      = 0x200
+	SO_RTABLE                         = 0x1021
+	SO_SNDBUF                         = 0x1001
+	SO_SNDLOWAT                       = 0x1003
+	SO_SNDTIMEO                       = 0x1005
+	SO_SPLICE                         = 0x1023
+	SO_TIMESTAMP                      = 0x800
+	SO_TYPE                           = 0x1008
+	SO_USELOOPBACK                    = 0x40
+	SO_ZEROIZE                        = 0x2000
+	S_BLKSIZE                         = 0x200
+	S_IEXEC                           = 0x40
+	S_IFBLK                           = 0x6000
+	S_IFCHR                           = 0x2000
+	S_IFDIR                           = 0x4000
+	S_IFIFO                           = 0x1000
+	S_IFLNK                           = 0xa000
+	S_IFMT                            = 0xf000
+	S_IFREG                           = 0x8000
+	S_IFSOCK                          = 0xc000
+	S_IREAD                           = 0x100
+	S_IRGRP                           = 0x20
+	S_IROTH                           = 0x4
+	S_IRUSR                           = 0x100
+	S_IRWXG                           = 0x38
+	S_IRWXO                           = 0x7
+	S_IRWXU                           = 0x1c0
+	S_ISGID                           = 0x400
+	S_ISTXT                           = 0x200
+	S_ISUID                           = 0x800
+	S_ISVTX                           = 0x200
+	S_IWGRP                           = 0x10
+	S_IWOTH                           = 0x2
+	S_IWRITE                          = 0x80
+	S_IWUSR                           = 0x80
+	S_IXGRP                           = 0x8
+	S_IXOTH                           = 0x1
+	S_IXUSR                           = 0x40
+	TCIFLUSH                          = 0x1
+	TCIOFF                            = 0x3
+	TCIOFLUSH                         = 0x3
+	TCION                             = 0x4
+	TCOFLUSH                          = 0x2
+	TCOOFF                            = 0x1
+	TCOON                             = 0x2
+	TCP_MAXBURST                      = 0x4
+	TCP_MAXSEG                        = 0x2
+	TCP_MAXWIN                        = 0xffff
+	TCP_MAX_SACK                      = 0x3
+	TCP_MAX_WINSHIFT                  = 0xe
+	TCP_MD5SIG                        = 0x4
+	TCP_MSS                           = 0x200
+	TCP_NODELAY                       = 0x1
+	TCP_NOPUSH                        = 0x10
+	TCP_SACK_ENABLE                   = 0x8
+	TCSAFLUSH                         = 0x2
+	TIOCCBRK                          = 0x2000747a
+	TIOCCDTR                          = 0x20007478
+	TIOCCHKVERAUTH                    = 0x2000741e
+	TIOCCLRVERAUTH                    = 0x2000741d
+	TIOCCONS                          = 0x80047462
+	TIOCDRAIN                         = 0x2000745e
+	TIOCEXCL                          = 0x2000740d
+	TIOCEXT                           = 0x80047460
+	TIOCFLAG_CLOCAL                   = 0x2
+	TIOCFLAG_CRTSCTS                  = 0x4
+	TIOCFLAG_MDMBUF                   = 0x8
+	TIOCFLAG_PPS                      = 0x10
+	TIOCFLAG_SOFTCAR                  = 0x1
+	TIOCFLUSH                         = 0x80047410
+	TIOCGETA                          = 0x402c7413
+	TIOCGETD                          = 0x4004741a
+	TIOCGFLAGS                        = 0x4004745d
+	TIOCGPGRP                         = 0x40047477
+	TIOCGSID                          = 0x40047463
+	TIOCGTSTAMP                       = 0x4010745b
+	TIOCGWINSZ                        = 0x40087468
+	TIOCMBIC                          = 0x8004746b
+	TIOCMBIS                          = 0x8004746c
+	TIOCMGET                          = 0x4004746a
+	TIOCMODG                          = 0x4004746a
+	TIOCMODS                          = 0x8004746d
+	TIOCMSET                          = 0x8004746d
+	TIOCM_CAR                         = 0x40
+	TIOCM_CD                          = 0x40
+	TIOCM_CTS                         = 0x20
+	TIOCM_DSR                         = 0x100
+	TIOCM_DTR                         = 0x2
+	TIOCM_LE                          = 0x1
+	TIOCM_RI                          = 0x80
+	TIOCM_RNG                         = 0x80
+	TIOCM_RTS                         = 0x4
+	TIOCM_SR                          = 0x10
+	TIOCM_ST                          = 0x8
+	TIOCNOTTY                         = 0x20007471
+	TIOCNXCL                          = 0x2000740e
+	TIOCOUTQ                          = 0x40047473
+	TIOCPKT                           = 0x80047470
+	TIOCPKT_DATA                      = 0x0
+	TIOCPKT_DOSTOP                    = 0x20
+	TIOCPKT_FLUSHREAD                 = 0x1
+	TIOCPKT_FLUSHWRITE                = 0x2
+	TIOCPKT_IOCTL                     = 0x40
+	TIOCPKT_NOSTOP                    = 0x10
+	TIOCPKT_START                     = 0x8
+	TIOCPKT_STOP                      = 0x4
+	TIOCREMOTE                        = 0x80047469
+	TIOCSBRK                          = 0x2000747b
+	TIOCSCTTY                         = 0x20007461
+	TIOCSDTR                          = 0x20007479
+	TIOCSETA                          = 0x802c7414
+	TIOCSETAF                         = 0x802c7416
+	TIOCSETAW                         = 0x802c7415
+	TIOCSETD                          = 0x8004741b
+	TIOCSETVERAUTH                    = 0x8004741c
+	TIOCSFLAGS                        = 0x8004745c
+	TIOCSIG                           = 0x8004745f
+	TIOCSPGRP                         = 0x80047476
+	TIOCSTART                         = 0x2000746e
+	TIOCSTAT                          = 0x20007465
+	TIOCSTI                           = 0x80017472
+	TIOCSTOP                          = 0x2000746f
+	TIOCSTSTAMP                       = 0x8008745a
+	TIOCSWINSZ                        = 0x80087467
+	TIOCUCNTL                         = 0x80047466
+	TIOCUCNTL_CBRK                    = 0x7a
+	TIOCUCNTL_SBRK                    = 0x7b
+	TOSTOP                            = 0x400000
+	UTIME_NOW                         = -0x2
+	UTIME_OMIT                        = -0x1
+	VDISCARD                          = 0xf
+	VDSUSP                            = 0xb
+	VEOF                              = 0x0
+	VEOL                              = 0x1
+	VEOL2                             = 0x2
+	VERASE                            = 0x3
+	VINTR                             = 0x8
+	VKILL                             = 0x5
+	VLNEXT                            = 0xe
+	VMIN                              = 0x10
+	VM_ANONMIN                        = 0x7
+	VM_LOADAVG                        = 0x2
+	VM_MAXID                          = 0xc
+	VM_MAXSLP                         = 0xa
+	VM_METER                          = 0x1
+	VM_NKMEMPAGES                     = 0x6
+	VM_PSSTRINGS                      = 0x3
+	VM_SWAPENCRYPT                    = 0x5
+	VM_USPACE                         = 0xb
+	VM_UVMEXP                         = 0x4
+	VM_VNODEMIN                       = 0x9
+	VM_VTEXTMIN                       = 0x8
+	VQUIT                             = 0x9
+	VREPRINT                          = 0x6
+	VSTART                            = 0xc
+	VSTATUS                           = 0x12
+	VSTOP                             = 0xd
+	VSUSP                             = 0xa
+	VTIME                             = 0x11
+	VWERASE                           = 0x4
+	WALTSIG                           = 0x4
+	WCONTINUED                        = 0x8
+	WCOREFLAG                         = 0x80
+	WNOHANG                           = 0x1
+	WUNTRACED                         = 0x2
+	XCASE                             = 0x1000000
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADF           = syscall.Errno(0x9)
+	EBADMSG         = syscall.Errno(0x5c)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x58)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDOM            = syscall.Errno(0x21)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x59)
+	EILSEQ          = syscall.Errno(0x54)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EIPSEC          = syscall.Errno(0x52)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x5f)
+	ELOOP           = syscall.Errno(0x3e)
+	EMEDIUMTYPE     = syscall.Errno(0x56)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x53)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOMEDIUM       = syscall.Errno(0x55)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x5a)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTRECOVERABLE = syscall.Errno(0x5d)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x5b)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x2d)
+	EOVERFLOW       = syscall.Errno(0x57)
+	EOWNERDEAD      = syscall.Errno(0x5e)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTO          = syscall.Errno(0x5f)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTHR    = syscall.Signal(0x20)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "EAGAIN", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "EOPNOTSUPP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "operation timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disk quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC program not available"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EIPSEC", "IPsec processing failure"},
+	{83, "ENOATTR", "attribute not found"},
+	{84, "EILSEQ", "illegal byte sequence"},
+	{85, "ENOMEDIUM", "no medium found"},
+	{86, "EMEDIUMTYPE", "wrong medium type"},
+	{87, "EOVERFLOW", "value too large to be stored in data type"},
+	{88, "ECANCELED", "operation canceled"},
+	{89, "EIDRM", "identifier removed"},
+	{90, "ENOMSG", "no message of desired type"},
+	{91, "ENOTSUP", "not supported"},
+	{92, "EBADMSG", "bad message"},
+	{93, "ENOTRECOVERABLE", "state not recoverable"},
+	{94, "EOWNERDEAD", "previous owner died"},
+	{95, "ELAST", "protocol error"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGABRT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "suspended (signal)"},
+	{18, "SIGTSTP", "suspended"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+	{32, "SIGTHR", "thread AST"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_arm.go
new file mode 100644
index 000000000..7072526a6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_arm.go
@@ -0,0 +1,1666 @@
+// mkerrors.sh
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm,openbsd
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                      = 0x10
+	AF_BLUETOOTH                      = 0x20
+	AF_CCITT                          = 0xa
+	AF_CHAOS                          = 0x5
+	AF_CNT                            = 0x15
+	AF_COIP                           = 0x14
+	AF_DATAKIT                        = 0x9
+	AF_DECnet                         = 0xc
+	AF_DLI                            = 0xd
+	AF_E164                           = 0x1a
+	AF_ECMA                           = 0x8
+	AF_ENCAP                          = 0x1c
+	AF_HYLINK                         = 0xf
+	AF_IMPLINK                        = 0x3
+	AF_INET                           = 0x2
+	AF_INET6                          = 0x18
+	AF_IPX                            = 0x17
+	AF_ISDN                           = 0x1a
+	AF_ISO                            = 0x7
+	AF_KEY                            = 0x1e
+	AF_LAT                            = 0xe
+	AF_LINK                           = 0x12
+	AF_LOCAL                          = 0x1
+	AF_MAX                            = 0x24
+	AF_MPLS                           = 0x21
+	AF_NATM                           = 0x1b
+	AF_NS                             = 0x6
+	AF_OSI                            = 0x7
+	AF_PUP                            = 0x4
+	AF_ROUTE                          = 0x11
+	AF_SIP                            = 0x1d
+	AF_SNA                            = 0xb
+	AF_UNIX                           = 0x1
+	AF_UNSPEC                         = 0x0
+	ARPHRD_ETHER                      = 0x1
+	ARPHRD_FRELAY                     = 0xf
+	ARPHRD_IEEE1394                   = 0x18
+	ARPHRD_IEEE802                    = 0x6
+	B0                                = 0x0
+	B110                              = 0x6e
+	B115200                           = 0x1c200
+	B1200                             = 0x4b0
+	B134                              = 0x86
+	B14400                            = 0x3840
+	B150                              = 0x96
+	B1800                             = 0x708
+	B19200                            = 0x4b00
+	B200                              = 0xc8
+	B230400                           = 0x38400
+	B2400                             = 0x960
+	B28800                            = 0x7080
+	B300                              = 0x12c
+	B38400                            = 0x9600
+	B4800                             = 0x12c0
+	B50                               = 0x32
+	B57600                            = 0xe100
+	B600                              = 0x258
+	B7200                             = 0x1c20
+	B75                               = 0x4b
+	B76800                            = 0x12c00
+	B9600                             = 0x2580
+	BIOCFLUSH                         = 0x20004268
+	BIOCGBLEN                         = 0x40044266
+	BIOCGDIRFILT                      = 0x4004427c
+	BIOCGDLT                          = 0x4004426a
+	BIOCGDLTLIST                      = 0xc008427b
+	BIOCGETIF                         = 0x4020426b
+	BIOCGFILDROP                      = 0x40044278
+	BIOCGHDRCMPLT                     = 0x40044274
+	BIOCGRSIG                         = 0x40044273
+	BIOCGRTIMEOUT                     = 0x400c426e
+	BIOCGSTATS                        = 0x4008426f
+	BIOCIMMEDIATE                     = 0x80044270
+	BIOCLOCK                          = 0x20004276
+	BIOCPROMISC                       = 0x20004269
+	BIOCSBLEN                         = 0xc0044266
+	BIOCSDIRFILT                      = 0x8004427d
+	BIOCSDLT                          = 0x8004427a
+	BIOCSETF                          = 0x80084267
+	BIOCSETIF                         = 0x8020426c
+	BIOCSETWF                         = 0x80084277
+	BIOCSFILDROP                      = 0x80044279
+	BIOCSHDRCMPLT                     = 0x80044275
+	BIOCSRSIG                         = 0x80044272
+	BIOCSRTIMEOUT                     = 0x800c426d
+	BIOCVERSION                       = 0x40044271
+	BPF_A                             = 0x10
+	BPF_ABS                           = 0x20
+	BPF_ADD                           = 0x0
+	BPF_ALIGNMENT                     = 0x4
+	BPF_ALU                           = 0x4
+	BPF_AND                           = 0x50
+	BPF_B                             = 0x10
+	BPF_DIRECTION_IN                  = 0x1
+	BPF_DIRECTION_OUT                 = 0x2
+	BPF_DIV                           = 0x30
+	BPF_H                             = 0x8
+	BPF_IMM                           = 0x0
+	BPF_IND                           = 0x40
+	BPF_JA                            = 0x0
+	BPF_JEQ                           = 0x10
+	BPF_JGE                           = 0x30
+	BPF_JGT                           = 0x20
+	BPF_JMP                           = 0x5
+	BPF_JSET                          = 0x40
+	BPF_K                             = 0x0
+	BPF_LD                            = 0x0
+	BPF_LDX                           = 0x1
+	BPF_LEN                           = 0x80
+	BPF_LSH                           = 0x60
+	BPF_MAJOR_VERSION                 = 0x1
+	BPF_MAXBUFSIZE                    = 0x200000
+	BPF_MAXINSNS                      = 0x200
+	BPF_MEM                           = 0x60
+	BPF_MEMWORDS                      = 0x10
+	BPF_MINBUFSIZE                    = 0x20
+	BPF_MINOR_VERSION                 = 0x1
+	BPF_MISC                          = 0x7
+	BPF_MSH                           = 0xa0
+	BPF_MUL                           = 0x20
+	BPF_NEG                           = 0x80
+	BPF_OR                            = 0x40
+	BPF_RELEASE                       = 0x30bb6
+	BPF_RET                           = 0x6
+	BPF_RSH                           = 0x70
+	BPF_ST                            = 0x2
+	BPF_STX                           = 0x3
+	BPF_SUB                           = 0x10
+	BPF_TAX                           = 0x0
+	BPF_TXA                           = 0x80
+	BPF_W                             = 0x0
+	BPF_X                             = 0x8
+	BRKINT                            = 0x2
+	CFLUSH                            = 0xf
+	CLOCAL                            = 0x8000
+	CPUSTATES                         = 0x6
+	CP_IDLE                           = 0x5
+	CP_INTR                           = 0x4
+	CP_NICE                           = 0x1
+	CP_SPIN                           = 0x3
+	CP_SYS                            = 0x2
+	CP_USER                           = 0x0
+	CREAD                             = 0x800
+	CRTSCTS                           = 0x10000
+	CS5                               = 0x0
+	CS6                               = 0x100
+	CS7                               = 0x200
+	CS8                               = 0x300
+	CSIZE                             = 0x300
+	CSTART                            = 0x11
+	CSTATUS                           = 0xff
+	CSTOP                             = 0x13
+	CSTOPB                            = 0x400
+	CSUSP                             = 0x1a
+	CTL_HW                            = 0x6
+	CTL_KERN                          = 0x1
+	CTL_MAXNAME                       = 0xc
+	CTL_NET                           = 0x4
+	DIOCOSFPFLUSH                     = 0x2000444e
+	DLT_ARCNET                        = 0x7
+	DLT_ATM_RFC1483                   = 0xb
+	DLT_AX25                          = 0x3
+	DLT_CHAOS                         = 0x5
+	DLT_C_HDLC                        = 0x68
+	DLT_EN10MB                        = 0x1
+	DLT_EN3MB                         = 0x2
+	DLT_ENC                           = 0xd
+	DLT_FDDI                          = 0xa
+	DLT_IEEE802                       = 0x6
+	DLT_IEEE802_11                    = 0x69
+	DLT_IEEE802_11_RADIO              = 0x7f
+	DLT_LOOP                          = 0xc
+	DLT_MPLS                          = 0xdb
+	DLT_NULL                          = 0x0
+	DLT_PFLOG                         = 0x75
+	DLT_PFSYNC                        = 0x12
+	DLT_PPP                           = 0x9
+	DLT_PPP_BSDOS                     = 0x10
+	DLT_PPP_ETHER                     = 0x33
+	DLT_PPP_SERIAL                    = 0x32
+	DLT_PRONET                        = 0x4
+	DLT_RAW                           = 0xe
+	DLT_SLIP                          = 0x8
+	DLT_SLIP_BSDOS                    = 0xf
+	DT_BLK                            = 0x6
+	DT_CHR                            = 0x2
+	DT_DIR                            = 0x4
+	DT_FIFO                           = 0x1
+	DT_LNK                            = 0xa
+	DT_REG                            = 0x8
+	DT_SOCK                           = 0xc
+	DT_UNKNOWN                        = 0x0
+	ECHO                              = 0x8
+	ECHOCTL                           = 0x40
+	ECHOE                             = 0x2
+	ECHOK                             = 0x4
+	ECHOKE                            = 0x1
+	ECHONL                            = 0x10
+	ECHOPRT                           = 0x20
+	EMT_TAGOVF                        = 0x1
+	EMUL_ENABLED                      = 0x1
+	EMUL_NATIVE                       = 0x2
+	ENDRUNDISC                        = 0x9
+	ETHERMIN                          = 0x2e
+	ETHERMTU                          = 0x5dc
+	ETHERTYPE_8023                    = 0x4
+	ETHERTYPE_AARP                    = 0x80f3
+	ETHERTYPE_ACCTON                  = 0x8390
+	ETHERTYPE_AEONIC                  = 0x8036
+	ETHERTYPE_ALPHA                   = 0x814a
+	ETHERTYPE_AMBER                   = 0x6008
+	ETHERTYPE_AMOEBA                  = 0x8145
+	ETHERTYPE_AOE                     = 0x88a2
+	ETHERTYPE_APOLLO                  = 0x80f7
+	ETHERTYPE_APOLLODOMAIN            = 0x8019
+	ETHERTYPE_APPLETALK               = 0x809b
+	ETHERTYPE_APPLITEK                = 0x80c7
+	ETHERTYPE_ARGONAUT                = 0x803a
+	ETHERTYPE_ARP                     = 0x806
+	ETHERTYPE_AT                      = 0x809b
+	ETHERTYPE_ATALK                   = 0x809b
+	ETHERTYPE_ATOMIC                  = 0x86df
+	ETHERTYPE_ATT                     = 0x8069
+	ETHERTYPE_ATTSTANFORD             = 0x8008
+	ETHERTYPE_AUTOPHON                = 0x806a
+	ETHERTYPE_AXIS                    = 0x8856
+	ETHERTYPE_BCLOOP                  = 0x9003
+	ETHERTYPE_BOFL                    = 0x8102
+	ETHERTYPE_CABLETRON               = 0x7034
+	ETHERTYPE_CHAOS                   = 0x804
+	ETHERTYPE_COMDESIGN               = 0x806c
+	ETHERTYPE_COMPUGRAPHIC            = 0x806d
+	ETHERTYPE_COUNTERPOINT            = 0x8062
+	ETHERTYPE_CRONUS                  = 0x8004
+	ETHERTYPE_CRONUSVLN               = 0x8003
+	ETHERTYPE_DCA                     = 0x1234
+	ETHERTYPE_DDE                     = 0x807b
+	ETHERTYPE_DEBNI                   = 0xaaaa
+	ETHERTYPE_DECAM                   = 0x8048
+	ETHERTYPE_DECCUST                 = 0x6006
+	ETHERTYPE_DECDIAG                 = 0x6005
+	ETHERTYPE_DECDNS                  = 0x803c
+	ETHERTYPE_DECDTS                  = 0x803e
+	ETHERTYPE_DECEXPER                = 0x6000
+	ETHERTYPE_DECLAST                 = 0x8041
+	ETHERTYPE_DECLTM                  = 0x803f
+	ETHERTYPE_DECMUMPS                = 0x6009
+	ETHERTYPE_DECNETBIOS              = 0x8040
+	ETHERTYPE_DELTACON                = 0x86de
+	ETHERTYPE_DIDDLE                  = 0x4321
+	ETHERTYPE_DLOG1                   = 0x660
+	ETHERTYPE_DLOG2                   = 0x661
+	ETHERTYPE_DN                      = 0x6003
+	ETHERTYPE_DOGFIGHT                = 0x1989
+	ETHERTYPE_DSMD                    = 0x8039
+	ETHERTYPE_ECMA                    = 0x803
+	ETHERTYPE_ENCRYPT                 = 0x803d
+	ETHERTYPE_ES                      = 0x805d
+	ETHERTYPE_EXCELAN                 = 0x8010
+	ETHERTYPE_EXPERDATA               = 0x8049
+	ETHERTYPE_FLIP                    = 0x8146
+	ETHERTYPE_FLOWCONTROL             = 0x8808
+	ETHERTYPE_FRARP                   = 0x808
+	ETHERTYPE_GENDYN                  = 0x8068
+	ETHERTYPE_HAYES                   = 0x8130
+	ETHERTYPE_HIPPI_FP                = 0x8180
+	ETHERTYPE_HITACHI                 = 0x8820
+	ETHERTYPE_HP                      = 0x8005
+	ETHERTYPE_IEEEPUP                 = 0xa00
+	ETHERTYPE_IEEEPUPAT               = 0xa01
+	ETHERTYPE_IMLBL                   = 0x4c42
+	ETHERTYPE_IMLBLDIAG               = 0x424c
+	ETHERTYPE_IP                      = 0x800
+	ETHERTYPE_IPAS                    = 0x876c
+	ETHERTYPE_IPV6                    = 0x86dd
+	ETHERTYPE_IPX                     = 0x8137
+	ETHERTYPE_IPXNEW                  = 0x8037
+	ETHERTYPE_KALPANA                 = 0x8582
+	ETHERTYPE_LANBRIDGE               = 0x8038
+	ETHERTYPE_LANPROBE                = 0x8888
+	ETHERTYPE_LAT                     = 0x6004
+	ETHERTYPE_LBACK                   = 0x9000
+	ETHERTYPE_LITTLE                  = 0x8060
+	ETHERTYPE_LLDP                    = 0x88cc
+	ETHERTYPE_LOGICRAFT               = 0x8148
+	ETHERTYPE_LOOPBACK                = 0x9000
+	ETHERTYPE_MATRA                   = 0x807a
+	ETHERTYPE_MAX                     = 0xffff
+	ETHERTYPE_MERIT                   = 0x807c
+	ETHERTYPE_MICP                    = 0x873a
+	ETHERTYPE_MOPDL                   = 0x6001
+	ETHERTYPE_MOPRC                   = 0x6002
+	ETHERTYPE_MOTOROLA                = 0x818d
+	ETHERTYPE_MPLS                    = 0x8847
+	ETHERTYPE_MPLS_MCAST              = 0x8848
+	ETHERTYPE_MUMPS                   = 0x813f
+	ETHERTYPE_NBPCC                   = 0x3c04
+	ETHERTYPE_NBPCLAIM                = 0x3c09
+	ETHERTYPE_NBPCLREQ                = 0x3c05
+	ETHERTYPE_NBPCLRSP                = 0x3c06
+	ETHERTYPE_NBPCREQ                 = 0x3c02
+	ETHERTYPE_NBPCRSP                 = 0x3c03
+	ETHERTYPE_NBPDG                   = 0x3c07
+	ETHERTYPE_NBPDGB                  = 0x3c08
+	ETHERTYPE_NBPDLTE                 = 0x3c0a
+	ETHERTYPE_NBPRAR                  = 0x3c0c
+	ETHERTYPE_NBPRAS                  = 0x3c0b
+	ETHERTYPE_NBPRST                  = 0x3c0d
+	ETHERTYPE_NBPSCD                  = 0x3c01
+	ETHERTYPE_NBPVCD                  = 0x3c00
+	ETHERTYPE_NBS                     = 0x802
+	ETHERTYPE_NCD                     = 0x8149
+	ETHERTYPE_NESTAR                  = 0x8006
+	ETHERTYPE_NETBEUI                 = 0x8191
+	ETHERTYPE_NOVELL                  = 0x8138
+	ETHERTYPE_NS                      = 0x600
+	ETHERTYPE_NSAT                    = 0x601
+	ETHERTYPE_NSCOMPAT                = 0x807
+	ETHERTYPE_NTRAILER                = 0x10
+	ETHERTYPE_OS9                     = 0x7007
+	ETHERTYPE_OS9NET                  = 0x7009
+	ETHERTYPE_PACER                   = 0x80c6
+	ETHERTYPE_PAE                     = 0x888e
+	ETHERTYPE_PCS                     = 0x4242
+	ETHERTYPE_PLANNING                = 0x8044
+	ETHERTYPE_PPP                     = 0x880b
+	ETHERTYPE_PPPOE                   = 0x8864
+	ETHERTYPE_PPPOEDISC               = 0x8863
+	ETHERTYPE_PRIMENTS                = 0x7031
+	ETHERTYPE_PUP                     = 0x200
+	ETHERTYPE_PUPAT                   = 0x200
+	ETHERTYPE_QINQ                    = 0x88a8
+	ETHERTYPE_RACAL                   = 0x7030
+	ETHERTYPE_RATIONAL                = 0x8150
+	ETHERTYPE_RAWFR                   = 0x6559
+	ETHERTYPE_RCL                     = 0x1995
+	ETHERTYPE_RDP                     = 0x8739
+	ETHERTYPE_RETIX                   = 0x80f2
+	ETHERTYPE_REVARP                  = 0x8035
+	ETHERTYPE_SCA                     = 0x6007
+	ETHERTYPE_SECTRA                  = 0x86db
+	ETHERTYPE_SECUREDATA              = 0x876d
+	ETHERTYPE_SGITW                   = 0x817e
+	ETHERTYPE_SG_BOUNCE               = 0x8016
+	ETHERTYPE_SG_DIAG                 = 0x8013
+	ETHERTYPE_SG_NETGAMES             = 0x8014
+	ETHERTYPE_SG_RESV                 = 0x8015
+	ETHERTYPE_SIMNET                  = 0x5208
+	ETHERTYPE_SLOW                    = 0x8809
+	ETHERTYPE_SNA                     = 0x80d5
+	ETHERTYPE_SNMP                    = 0x814c
+	ETHERTYPE_SONIX                   = 0xfaf5
+	ETHERTYPE_SPIDER                  = 0x809f
+	ETHERTYPE_SPRITE                  = 0x500
+	ETHERTYPE_STP                     = 0x8181
+	ETHERTYPE_TALARIS                 = 0x812b
+	ETHERTYPE_TALARISMC               = 0x852b
+	ETHERTYPE_TCPCOMP                 = 0x876b
+	ETHERTYPE_TCPSM                   = 0x9002
+	ETHERTYPE_TEC                     = 0x814f
+	ETHERTYPE_TIGAN                   = 0x802f
+	ETHERTYPE_TRAIL                   = 0x1000
+	ETHERTYPE_TRANSETHER              = 0x6558
+	ETHERTYPE_TYMSHARE                = 0x802e
+	ETHERTYPE_UBBST                   = 0x7005
+	ETHERTYPE_UBDEBUG                 = 0x900
+	ETHERTYPE_UBDIAGLOOP              = 0x7002
+	ETHERTYPE_UBDL                    = 0x7000
+	ETHERTYPE_UBNIU                   = 0x7001
+	ETHERTYPE_UBNMC                   = 0x7003
+	ETHERTYPE_VALID                   = 0x1600
+	ETHERTYPE_VARIAN                  = 0x80dd
+	ETHERTYPE_VAXELN                  = 0x803b
+	ETHERTYPE_VEECO                   = 0x8067
+	ETHERTYPE_VEXP                    = 0x805b
+	ETHERTYPE_VGLAB                   = 0x8131
+	ETHERTYPE_VINES                   = 0xbad
+	ETHERTYPE_VINESECHO               = 0xbaf
+	ETHERTYPE_VINESLOOP               = 0xbae
+	ETHERTYPE_VITAL                   = 0xff00
+	ETHERTYPE_VLAN                    = 0x8100
+	ETHERTYPE_VLTLMAN                 = 0x8080
+	ETHERTYPE_VPROD                   = 0x805c
+	ETHERTYPE_VURESERVED              = 0x8147
+	ETHERTYPE_WATERLOO                = 0x8130
+	ETHERTYPE_WELLFLEET               = 0x8103
+	ETHERTYPE_X25                     = 0x805
+	ETHERTYPE_X75                     = 0x801
+	ETHERTYPE_XNSSM                   = 0x9001
+	ETHERTYPE_XTP                     = 0x817d
+	ETHER_ADDR_LEN                    = 0x6
+	ETHER_ALIGN                       = 0x2
+	ETHER_CRC_LEN                     = 0x4
+	ETHER_CRC_POLY_BE                 = 0x4c11db6
+	ETHER_CRC_POLY_LE                 = 0xedb88320
+	ETHER_HDR_LEN                     = 0xe
+	ETHER_MAX_DIX_LEN                 = 0x600
+	ETHER_MAX_LEN                     = 0x5ee
+	ETHER_MIN_LEN                     = 0x40
+	ETHER_TYPE_LEN                    = 0x2
+	ETHER_VLAN_ENCAP_LEN              = 0x4
+	EVFILT_AIO                        = -0x3
+	EVFILT_PROC                       = -0x5
+	EVFILT_READ                       = -0x1
+	EVFILT_SIGNAL                     = -0x6
+	EVFILT_SYSCOUNT                   = 0x7
+	EVFILT_TIMER                      = -0x7
+	EVFILT_VNODE                      = -0x4
+	EVFILT_WRITE                      = -0x2
+	EV_ADD                            = 0x1
+	EV_CLEAR                          = 0x20
+	EV_DELETE                         = 0x2
+	EV_DISABLE                        = 0x8
+	EV_ENABLE                         = 0x4
+	EV_EOF                            = 0x8000
+	EV_ERROR                          = 0x4000
+	EV_FLAG1                          = 0x2000
+	EV_ONESHOT                        = 0x10
+	EV_SYSFLAGS                       = 0xf000
+	EXTA                              = 0x4b00
+	EXTB                              = 0x9600
+	EXTPROC                           = 0x800
+	FD_CLOEXEC                        = 0x1
+	FD_SETSIZE                        = 0x400
+	FLUSHO                            = 0x800000
+	F_DUPFD                           = 0x0
+	F_DUPFD_CLOEXEC                   = 0xa
+	F_GETFD                           = 0x1
+	F_GETFL                           = 0x3
+	F_GETLK                           = 0x7
+	F_GETOWN                          = 0x5
+	F_RDLCK                           = 0x1
+	F_SETFD                           = 0x2
+	F_SETFL                           = 0x4
+	F_SETLK                           = 0x8
+	F_SETLKW                          = 0x9
+	F_SETOWN                          = 0x6
+	F_UNLCK                           = 0x2
+	F_WRLCK                           = 0x3
+	HUPCL                             = 0x4000
+	HW_MACHINE                        = 0x1
+	ICANON                            = 0x100
+	ICMP6_FILTER                      = 0x12
+	ICRNL                             = 0x100
+	IEXTEN                            = 0x400
+	IFAN_ARRIVAL                      = 0x0
+	IFAN_DEPARTURE                    = 0x1
+	IFA_ROUTE                         = 0x1
+	IFF_ALLMULTI                      = 0x200
+	IFF_BROADCAST                     = 0x2
+	IFF_CANTCHANGE                    = 0x8e52
+	IFF_DEBUG                         = 0x4
+	IFF_LINK0                         = 0x1000
+	IFF_LINK1                         = 0x2000
+	IFF_LINK2                         = 0x4000
+	IFF_LOOPBACK                      = 0x8
+	IFF_MULTICAST                     = 0x8000
+	IFF_NOARP                         = 0x80
+	IFF_NOTRAILERS                    = 0x20
+	IFF_OACTIVE                       = 0x400
+	IFF_POINTOPOINT                   = 0x10
+	IFF_PROMISC                       = 0x100
+	IFF_RUNNING                       = 0x40
+	IFF_SIMPLEX                       = 0x800
+	IFF_UP                            = 0x1
+	IFNAMSIZ                          = 0x10
+	IFT_1822                          = 0x2
+	IFT_A12MPPSWITCH                  = 0x82
+	IFT_AAL2                          = 0xbb
+	IFT_AAL5                          = 0x31
+	IFT_ADSL                          = 0x5e
+	IFT_AFLANE8023                    = 0x3b
+	IFT_AFLANE8025                    = 0x3c
+	IFT_ARAP                          = 0x58
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ASYNC                         = 0x54
+	IFT_ATM                           = 0x25
+	IFT_ATMDXI                        = 0x69
+	IFT_ATMFUNI                       = 0x6a
+	IFT_ATMIMA                        = 0x6b
+	IFT_ATMLOGICAL                    = 0x50
+	IFT_ATMRADIO                      = 0xbd
+	IFT_ATMSUBINTERFACE               = 0x86
+	IFT_ATMVCIENDPT                   = 0xc2
+	IFT_ATMVIRTUAL                    = 0x95
+	IFT_BGPPOLICYACCOUNTING           = 0xa2
+	IFT_BLUETOOTH                     = 0xf8
+	IFT_BRIDGE                        = 0xd1
+	IFT_BSC                           = 0x53
+	IFT_CARP                          = 0xf7
+	IFT_CCTEMUL                       = 0x3d
+	IFT_CEPT                          = 0x13
+	IFT_CES                           = 0x85
+	IFT_CHANNEL                       = 0x46
+	IFT_CNR                           = 0x55
+	IFT_COFFEE                        = 0x84
+	IFT_COMPOSITELINK                 = 0x9b
+	IFT_DCN                           = 0x8d
+	IFT_DIGITALPOWERLINE              = 0x8a
+	IFT_DIGITALWRAPPEROVERHEADCHANNEL = 0xba
+	IFT_DLSW                          = 0x4a
+	IFT_DOCSCABLEDOWNSTREAM           = 0x80
+	IFT_DOCSCABLEMACLAYER             = 0x7f
+	IFT_DOCSCABLEUPSTREAM             = 0x81
+	IFT_DOCSCABLEUPSTREAMCHANNEL      = 0xcd
+	IFT_DS0                           = 0x51
+	IFT_DS0BUNDLE                     = 0x52
+	IFT_DS1FDL                        = 0xaa
+	IFT_DS3                           = 0x1e
+	IFT_DTM                           = 0x8c
+	IFT_DUMMY                         = 0xf1
+	IFT_DVBASILN                      = 0xac
+	IFT_DVBASIOUT                     = 0xad
+	IFT_DVBRCCDOWNSTREAM              = 0x93
+	IFT_DVBRCCMACLAYER                = 0x92
+	IFT_DVBRCCUPSTREAM                = 0x94
+	IFT_ECONET                        = 0xce
+	IFT_ENC                           = 0xf4
+	IFT_EON                           = 0x19
+	IFT_EPLRS                         = 0x57
+	IFT_ESCON                         = 0x49
+	IFT_ETHER                         = 0x6
+	IFT_FAITH                         = 0xf3
+	IFT_FAST                          = 0x7d
+	IFT_FASTETHER                     = 0x3e
+	IFT_FASTETHERFX                   = 0x45
+	IFT_FDDI                          = 0xf
+	IFT_FIBRECHANNEL                  = 0x38
+	IFT_FRAMERELAYINTERCONNECT        = 0x3a
+	IFT_FRAMERELAYMPI                 = 0x5c
+	IFT_FRDLCIENDPT                   = 0xc1
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_FRF16MFRBUNDLE                = 0xa3
+	IFT_FRFORWARD                     = 0x9e
+	IFT_G703AT2MB                     = 0x43
+	IFT_G703AT64K                     = 0x42
+	IFT_GIF                           = 0xf0
+	IFT_GIGABITETHERNET               = 0x75
+	IFT_GR303IDT                      = 0xb2
+	IFT_GR303RDT                      = 0xb1
+	IFT_H323GATEKEEPER                = 0xa4
+	IFT_H323PROXY                     = 0xa5
+	IFT_HDH1822                       = 0x3
+	IFT_HDLC                          = 0x76
+	IFT_HDSL2                         = 0xa8
+	IFT_HIPERLAN2                     = 0xb7
+	IFT_HIPPI                         = 0x2f
+	IFT_HIPPIINTERFACE                = 0x39
+	IFT_HOSTPAD                       = 0x5a
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IBM370PARCHAN                 = 0x48
+	IFT_IDSL                          = 0x9a
+	IFT_IEEE1394                      = 0x90
+	IFT_IEEE80211                     = 0x47
+	IFT_IEEE80212                     = 0x37
+	IFT_IEEE8023ADLAG                 = 0xa1
+	IFT_IFGSN                         = 0x91
+	IFT_IMT                           = 0xbe
+	IFT_INFINIBAND                    = 0xc7
+	IFT_INTERLEAVE                    = 0x7c
+	IFT_IP                            = 0x7e
+	IFT_IPFORWARD                     = 0x8e
+	IFT_IPOVERATM                     = 0x72
+	IFT_IPOVERCDLC                    = 0x6d
+	IFT_IPOVERCLAW                    = 0x6e
+	IFT_IPSWITCH                      = 0x4e
+	IFT_ISDN                          = 0x3f
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISDNS                         = 0x4b
+	IFT_ISDNU                         = 0x4c
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88025CRFPINT               = 0x62
+	IFT_ISO88025DTR                   = 0x56
+	IFT_ISO88025FIBER                 = 0x73
+	IFT_ISO88026                      = 0xa
+	IFT_ISUP                          = 0xb3
+	IFT_L2VLAN                        = 0x87
+	IFT_L3IPVLAN                      = 0x88
+	IFT_L3IPXVLAN                     = 0x89
+	IFT_LAPB                          = 0x10
+	IFT_LAPD                          = 0x4d
+	IFT_LAPF                          = 0x77
+	IFT_LINEGROUP                     = 0xd2
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MEDIAMAILOVERIP               = 0x8b
+	IFT_MFSIGLINK                     = 0xa7
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_MPC                           = 0x71
+	IFT_MPLS                          = 0xa6
+	IFT_MPLSTUNNEL                    = 0x96
+	IFT_MSDSL                         = 0x8f
+	IFT_MVL                           = 0xbf
+	IFT_MYRINET                       = 0x63
+	IFT_NFAS                          = 0xaf
+	IFT_NSIP                          = 0x1b
+	IFT_OPTICALCHANNEL                = 0xc3
+	IFT_OPTICALTRANSPORT              = 0xc4
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PFLOG                         = 0xf5
+	IFT_PFLOW                         = 0xf9
+	IFT_PFSYNC                        = 0xf6
+	IFT_PLC                           = 0xae
+	IFT_PON155                        = 0xcf
+	IFT_PON622                        = 0xd0
+	IFT_POS                           = 0xab
+	IFT_PPP                           = 0x17
+	IFT_PPPMULTILINKBUNDLE            = 0x6c
+	IFT_PROPATM                       = 0xc5
+	IFT_PROPBWAP2MP                   = 0xb8
+	IFT_PROPCNLS                      = 0x59
+	IFT_PROPDOCSWIRELESSDOWNSTREAM    = 0xb5
+	IFT_PROPDOCSWIRELESSMACLAYER      = 0xb4
+	IFT_PROPDOCSWIRELESSUPSTREAM      = 0xb6
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPVIRTUAL                   = 0x35
+	IFT_PROPWIRELESSP2P               = 0x9d
+	IFT_PTPSERIAL                     = 0x16
+	IFT_PVC                           = 0xf2
+	IFT_Q2931                         = 0xc9
+	IFT_QLLC                          = 0x44
+	IFT_RADIOMAC                      = 0xbc
+	IFT_RADSL                         = 0x5f
+	IFT_REACHDSL                      = 0xc0
+	IFT_RFC1483                       = 0x9f
+	IFT_RS232                         = 0x21
+	IFT_RSRB                          = 0x4f
+	IFT_SDLC                          = 0x11
+	IFT_SDSL                          = 0x60
+	IFT_SHDSL                         = 0xa9
+	IFT_SIP                           = 0x1f
+	IFT_SIPSIG                        = 0xcc
+	IFT_SIPTG                         = 0xcb
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETOVERHEADCHANNEL          = 0xb9
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_SRP                           = 0x97
+	IFT_SS7SIGLINK                    = 0x9c
+	IFT_STACKTOSTACK                  = 0x6f
+	IFT_STARLAN                       = 0xb
+	IFT_T1                            = 0x12
+	IFT_TDLC                          = 0x74
+	IFT_TELINK                        = 0xc8
+	IFT_TERMPAD                       = 0x5b
+	IFT_TR008                         = 0xb0
+	IFT_TRANSPHDLC                    = 0x7b
+	IFT_TUNNEL                        = 0x83
+	IFT_ULTRA                         = 0x1d
+	IFT_USB                           = 0xa0
+	IFT_V11                           = 0x40
+	IFT_V35                           = 0x2d
+	IFT_V36                           = 0x41
+	IFT_V37                           = 0x78
+	IFT_VDSL                          = 0x61
+	IFT_VIRTUALIPADDRESS              = 0x70
+	IFT_VIRTUALTG                     = 0xca
+	IFT_VOICEDID                      = 0xd5
+	IFT_VOICEEM                       = 0x64
+	IFT_VOICEEMFGD                    = 0xd3
+	IFT_VOICEENCAP                    = 0x67
+	IFT_VOICEFGDEANA                  = 0xd4
+	IFT_VOICEFXO                      = 0x65
+	IFT_VOICEFXS                      = 0x66
+	IFT_VOICEOVERATM                  = 0x98
+	IFT_VOICEOVERCABLE                = 0xc6
+	IFT_VOICEOVERFRAMERELAY           = 0x99
+	IFT_VOICEOVERIP                   = 0x68
+	IFT_X213                          = 0x5d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25HUNTGROUP                  = 0x7a
+	IFT_X25MLP                        = 0x79
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+	IGNBRK                            = 0x1
+	IGNCR                             = 0x80
+	IGNPAR                            = 0x4
+	IMAXBEL                           = 0x2000
+	INLCR                             = 0x40
+	INPCK                             = 0x10
+	IN_CLASSA_HOST                    = 0xffffff
+	IN_CLASSA_MAX                     = 0x80
+	IN_CLASSA_NET                     = 0xff000000
+	IN_CLASSA_NSHIFT                  = 0x18
+	IN_CLASSB_HOST                    = 0xffff
+	IN_CLASSB_MAX                     = 0x10000
+	IN_CLASSB_NET                     = 0xffff0000
+	IN_CLASSB_NSHIFT                  = 0x10
+	IN_CLASSC_HOST                    = 0xff
+	IN_CLASSC_NET                     = 0xffffff00
+	IN_CLASSC_NSHIFT                  = 0x8
+	IN_CLASSD_HOST                    = 0xfffffff
+	IN_CLASSD_NET                     = 0xf0000000
+	IN_CLASSD_NSHIFT                  = 0x1c
+	IN_LOOPBACKNET                    = 0x7f
+	IN_RFC3021_HOST                   = 0x1
+	IN_RFC3021_NET                    = 0xfffffffe
+	IN_RFC3021_NSHIFT                 = 0x1f
+	IPPROTO_AH                        = 0x33
+	IPPROTO_CARP                      = 0x70
+	IPPROTO_DIVERT                    = 0x102
+	IPPROTO_DIVERT_INIT               = 0x2
+	IPPROTO_DIVERT_RESP               = 0x1
+	IPPROTO_DONE                      = 0x101
+	IPPROTO_DSTOPTS                   = 0x3c
+	IPPROTO_EGP                       = 0x8
+	IPPROTO_ENCAP                     = 0x62
+	IPPROTO_EON                       = 0x50
+	IPPROTO_ESP                       = 0x32
+	IPPROTO_ETHERIP                   = 0x61
+	IPPROTO_FRAGMENT                  = 0x2c
+	IPPROTO_GGP                       = 0x3
+	IPPROTO_GRE                       = 0x2f
+	IPPROTO_HOPOPTS                   = 0x0
+	IPPROTO_ICMP                      = 0x1
+	IPPROTO_ICMPV6                    = 0x3a
+	IPPROTO_IDP                       = 0x16
+	IPPROTO_IGMP                      = 0x2
+	IPPROTO_IP                        = 0x0
+	IPPROTO_IPCOMP                    = 0x6c
+	IPPROTO_IPIP                      = 0x4
+	IPPROTO_IPV4                      = 0x4
+	IPPROTO_IPV6                      = 0x29
+	IPPROTO_MAX                       = 0x100
+	IPPROTO_MAXID                     = 0x103
+	IPPROTO_MOBILE                    = 0x37
+	IPPROTO_MPLS                      = 0x89
+	IPPROTO_NONE                      = 0x3b
+	IPPROTO_PFSYNC                    = 0xf0
+	IPPROTO_PIM                       = 0x67
+	IPPROTO_PUP                       = 0xc
+	IPPROTO_RAW                       = 0xff
+	IPPROTO_ROUTING                   = 0x2b
+	IPPROTO_RSVP                      = 0x2e
+	IPPROTO_TCP                       = 0x6
+	IPPROTO_TP                        = 0x1d
+	IPPROTO_UDP                       = 0x11
+	IPV6_AUTH_LEVEL                   = 0x35
+	IPV6_AUTOFLOWLABEL                = 0x3b
+	IPV6_CHECKSUM                     = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS       = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP       = 0x1
+	IPV6_DEFHLIM                      = 0x40
+	IPV6_DONTFRAG                     = 0x3e
+	IPV6_DSTOPTS                      = 0x32
+	IPV6_ESP_NETWORK_LEVEL            = 0x37
+	IPV6_ESP_TRANS_LEVEL              = 0x36
+	IPV6_FAITH                        = 0x1d
+	IPV6_FLOWINFO_MASK                = 0xffffff0f
+	IPV6_FLOWLABEL_MASK               = 0xffff0f00
+	IPV6_FRAGTTL                      = 0x78
+	IPV6_HLIMDEC                      = 0x1
+	IPV6_HOPLIMIT                     = 0x2f
+	IPV6_HOPOPTS                      = 0x31
+	IPV6_IPCOMP_LEVEL                 = 0x3c
+	IPV6_JOIN_GROUP                   = 0xc
+	IPV6_LEAVE_GROUP                  = 0xd
+	IPV6_MAXHLIM                      = 0xff
+	IPV6_MAXPACKET                    = 0xffff
+	IPV6_MMTU                         = 0x500
+	IPV6_MULTICAST_HOPS               = 0xa
+	IPV6_MULTICAST_IF                 = 0x9
+	IPV6_MULTICAST_LOOP               = 0xb
+	IPV6_NEXTHOP                      = 0x30
+	IPV6_OPTIONS                      = 0x1
+	IPV6_PATHMTU                      = 0x2c
+	IPV6_PIPEX                        = 0x3f
+	IPV6_PKTINFO                      = 0x2e
+	IPV6_PORTRANGE                    = 0xe
+	IPV6_PORTRANGE_DEFAULT            = 0x0
+	IPV6_PORTRANGE_HIGH               = 0x1
+	IPV6_PORTRANGE_LOW                = 0x2
+	IPV6_RECVDSTOPTS                  = 0x28
+	IPV6_RECVDSTPORT                  = 0x40
+	IPV6_RECVHOPLIMIT                 = 0x25
+	IPV6_RECVHOPOPTS                  = 0x27
+	IPV6_RECVPATHMTU                  = 0x2b
+	IPV6_RECVPKTINFO                  = 0x24
+	IPV6_RECVRTHDR                    = 0x26
+	IPV6_RECVTCLASS                   = 0x39
+	IPV6_RTABLE                       = 0x1021
+	IPV6_RTHDR                        = 0x33
+	IPV6_RTHDRDSTOPTS                 = 0x23
+	IPV6_RTHDR_LOOSE                  = 0x0
+	IPV6_RTHDR_STRICT                 = 0x1
+	IPV6_RTHDR_TYPE_0                 = 0x0
+	IPV6_SOCKOPT_RESERVED1            = 0x3
+	IPV6_TCLASS                       = 0x3d
+	IPV6_UNICAST_HOPS                 = 0x4
+	IPV6_USE_MIN_MTU                  = 0x2a
+	IPV6_V6ONLY                       = 0x1b
+	IPV6_VERSION                      = 0x60
+	IPV6_VERSION_MASK                 = 0xf0
+	IP_ADD_MEMBERSHIP                 = 0xc
+	IP_AUTH_LEVEL                     = 0x14
+	IP_DEFAULT_MULTICAST_LOOP         = 0x1
+	IP_DEFAULT_MULTICAST_TTL          = 0x1
+	IP_DF                             = 0x4000
+	IP_DIVERTFL                       = 0x1022
+	IP_DROP_MEMBERSHIP                = 0xd
+	IP_ESP_NETWORK_LEVEL              = 0x16
+	IP_ESP_TRANS_LEVEL                = 0x15
+	IP_HDRINCL                        = 0x2
+	IP_IPCOMP_LEVEL                   = 0x1d
+	IP_IPSECFLOWINFO                  = 0x24
+	IP_IPSEC_LOCAL_AUTH               = 0x1b
+	IP_IPSEC_LOCAL_CRED               = 0x19
+	IP_IPSEC_LOCAL_ID                 = 0x17
+	IP_IPSEC_REMOTE_AUTH              = 0x1c
+	IP_IPSEC_REMOTE_CRED              = 0x1a
+	IP_IPSEC_REMOTE_ID                = 0x18
+	IP_MAXPACKET                      = 0xffff
+	IP_MAX_MEMBERSHIPS                = 0xfff
+	IP_MF                             = 0x2000
+	IP_MINTTL                         = 0x20
+	IP_MIN_MEMBERSHIPS                = 0xf
+	IP_MSS                            = 0x240
+	IP_MULTICAST_IF                   = 0x9
+	IP_MULTICAST_LOOP                 = 0xb
+	IP_MULTICAST_TTL                  = 0xa
+	IP_OFFMASK                        = 0x1fff
+	IP_OPTIONS                        = 0x1
+	IP_PIPEX                          = 0x22
+	IP_PORTRANGE                      = 0x13
+	IP_PORTRANGE_DEFAULT              = 0x0
+	IP_PORTRANGE_HIGH                 = 0x1
+	IP_PORTRANGE_LOW                  = 0x2
+	IP_RECVDSTADDR                    = 0x7
+	IP_RECVDSTPORT                    = 0x21
+	IP_RECVIF                         = 0x1e
+	IP_RECVOPTS                       = 0x5
+	IP_RECVRETOPTS                    = 0x6
+	IP_RECVRTABLE                     = 0x23
+	IP_RECVTTL                        = 0x1f
+	IP_RETOPTS                        = 0x8
+	IP_RF                             = 0x8000
+	IP_RTABLE                         = 0x1021
+	IP_TOS                            = 0x3
+	IP_TTL                            = 0x4
+	ISIG                              = 0x80
+	ISTRIP                            = 0x20
+	IXANY                             = 0x800
+	IXOFF                             = 0x400
+	IXON                              = 0x200
+	KERN_HOSTNAME                     = 0xa
+	KERN_OSRELEASE                    = 0x2
+	KERN_OSTYPE                       = 0x1
+	KERN_VERSION                      = 0x4
+	LCNT_OVERLOAD_FLUSH               = 0x6
+	LOCK_EX                           = 0x2
+	LOCK_NB                           = 0x4
+	LOCK_SH                           = 0x1
+	LOCK_UN                           = 0x8
+	MADV_DONTNEED                     = 0x4
+	MADV_FREE                         = 0x6
+	MADV_NORMAL                       = 0x0
+	MADV_RANDOM                       = 0x1
+	MADV_SEQUENTIAL                   = 0x2
+	MADV_SPACEAVAIL                   = 0x5
+	MADV_WILLNEED                     = 0x3
+	MAP_ANON                          = 0x1000
+	MAP_ANONYMOUS                     = 0x1000
+	MAP_CONCEAL                       = 0x8000
+	MAP_COPY                          = 0x2
+	MAP_FILE                          = 0x0
+	MAP_FIXED                         = 0x10
+	MAP_FLAGMASK                      = 0xfff7
+	MAP_HASSEMAPHORE                  = 0x0
+	MAP_INHERIT                       = 0x0
+	MAP_INHERIT_COPY                  = 0x1
+	MAP_INHERIT_NONE                  = 0x2
+	MAP_INHERIT_SHARE                 = 0x0
+	MAP_INHERIT_ZERO                  = 0x3
+	MAP_NOEXTEND                      = 0x0
+	MAP_NORESERVE                     = 0x0
+	MAP_PRIVATE                       = 0x2
+	MAP_RENAME                        = 0x0
+	MAP_SHARED                        = 0x1
+	MAP_STACK                         = 0x4000
+	MAP_TRYFIXED                      = 0x0
+	MCL_CURRENT                       = 0x1
+	MCL_FUTURE                        = 0x2
+	MNT_ASYNC                         = 0x40
+	MNT_DEFEXPORTED                   = 0x200
+	MNT_DELEXPORT                     = 0x20000
+	MNT_DOOMED                        = 0x8000000
+	MNT_EXPORTANON                    = 0x400
+	MNT_EXPORTED                      = 0x100
+	MNT_EXRDONLY                      = 0x80
+	MNT_FORCE                         = 0x80000
+	MNT_LAZY                          = 0x3
+	MNT_LOCAL                         = 0x1000
+	MNT_NOATIME                       = 0x8000
+	MNT_NODEV                         = 0x10
+	MNT_NOEXEC                        = 0x4
+	MNT_NOSUID                        = 0x8
+	MNT_NOWAIT                        = 0x2
+	MNT_QUOTA                         = 0x2000
+	MNT_RDONLY                        = 0x1
+	MNT_RELOAD                        = 0x40000
+	MNT_ROOTFS                        = 0x4000
+	MNT_SOFTDEP                       = 0x4000000
+	MNT_SYNCHRONOUS                   = 0x2
+	MNT_UPDATE                        = 0x10000
+	MNT_VISFLAGMASK                   = 0x400ffff
+	MNT_WAIT                          = 0x1
+	MNT_WANTRDWR                      = 0x2000000
+	MNT_WXALLOWED                     = 0x800
+	MSG_BCAST                         = 0x100
+	MSG_CMSG_CLOEXEC                  = 0x800
+	MSG_CTRUNC                        = 0x20
+	MSG_DONTROUTE                     = 0x4
+	MSG_DONTWAIT                      = 0x80
+	MSG_EOR                           = 0x8
+	MSG_MCAST                         = 0x200
+	MSG_NOSIGNAL                      = 0x400
+	MSG_OOB                           = 0x1
+	MSG_PEEK                          = 0x2
+	MSG_TRUNC                         = 0x10
+	MSG_WAITALL                       = 0x40
+	MS_ASYNC                          = 0x1
+	MS_INVALIDATE                     = 0x4
+	MS_SYNC                           = 0x2
+	NAME_MAX                          = 0xff
+	NET_RT_DUMP                       = 0x1
+	NET_RT_FLAGS                      = 0x2
+	NET_RT_IFLIST                     = 0x3
+	NET_RT_MAXID                      = 0x6
+	NET_RT_STATS                      = 0x4
+	NET_RT_TABLE                      = 0x5
+	NFDBITS                           = 0x20
+	NOFLSH                            = 0x80000000
+	NOTE_ATTRIB                       = 0x8
+	NOTE_CHILD                        = 0x4
+	NOTE_DELETE                       = 0x1
+	NOTE_EOF                          = 0x2
+	NOTE_EXEC                         = 0x20000000
+	NOTE_EXIT                         = 0x80000000
+	NOTE_EXTEND                       = 0x4
+	NOTE_FORK                         = 0x40000000
+	NOTE_LINK                         = 0x10
+	NOTE_LOWAT                        = 0x1
+	NOTE_PCTRLMASK                    = 0xf0000000
+	NOTE_PDATAMASK                    = 0xfffff
+	NOTE_RENAME                       = 0x20
+	NOTE_REVOKE                       = 0x40
+	NOTE_TRACK                        = 0x1
+	NOTE_TRACKERR                     = 0x2
+	NOTE_TRUNCATE                     = 0x80
+	NOTE_WRITE                        = 0x2
+	OCRNL                             = 0x10
+	ONLCR                             = 0x2
+	ONLRET                            = 0x80
+	ONOCR                             = 0x40
+	ONOEOT                            = 0x8
+	OPOST                             = 0x1
+	O_ACCMODE                         = 0x3
+	O_APPEND                          = 0x8
+	O_ASYNC                           = 0x40
+	O_CLOEXEC                         = 0x10000
+	O_CREAT                           = 0x200
+	O_DIRECTORY                       = 0x20000
+	O_DSYNC                           = 0x80
+	O_EXCL                            = 0x800
+	O_EXLOCK                          = 0x20
+	O_FSYNC                           = 0x80
+	O_NDELAY                          = 0x4
+	O_NOCTTY                          = 0x8000
+	O_NOFOLLOW                        = 0x100
+	O_NONBLOCK                        = 0x4
+	O_RDONLY                          = 0x0
+	O_RDWR                            = 0x2
+	O_RSYNC                           = 0x80
+	O_SHLOCK                          = 0x10
+	O_SYNC                            = 0x80
+	O_TRUNC                           = 0x400
+	O_WRONLY                          = 0x1
+	PARENB                            = 0x1000
+	PARMRK                            = 0x8
+	PARODD                            = 0x2000
+	PENDIN                            = 0x20000000
+	PF_FLUSH                          = 0x1
+	PRIO_PGRP                         = 0x1
+	PRIO_PROCESS                      = 0x0
+	PRIO_USER                         = 0x2
+	PROT_EXEC                         = 0x4
+	PROT_NONE                         = 0x0
+	PROT_READ                         = 0x1
+	PROT_WRITE                        = 0x2
+	RLIMIT_CORE                       = 0x4
+	RLIMIT_CPU                        = 0x0
+	RLIMIT_DATA                       = 0x2
+	RLIMIT_FSIZE                      = 0x1
+	RLIMIT_NOFILE                     = 0x8
+	RLIMIT_STACK                      = 0x3
+	RLIM_INFINITY                     = 0x7fffffffffffffff
+	RTAX_AUTHOR                       = 0x6
+	RTAX_BRD                          = 0x7
+	RTAX_DST                          = 0x0
+	RTAX_GATEWAY                      = 0x1
+	RTAX_GENMASK                      = 0x3
+	RTAX_IFA                          = 0x5
+	RTAX_IFP                          = 0x4
+	RTAX_LABEL                        = 0xa
+	RTAX_MAX                          = 0xb
+	RTAX_NETMASK                      = 0x2
+	RTAX_SRC                          = 0x8
+	RTAX_SRCMASK                      = 0x9
+	RTA_AUTHOR                        = 0x40
+	RTA_BRD                           = 0x80
+	RTA_DST                           = 0x1
+	RTA_GATEWAY                       = 0x2
+	RTA_GENMASK                       = 0x8
+	RTA_IFA                           = 0x20
+	RTA_IFP                           = 0x10
+	RTA_LABEL                         = 0x400
+	RTA_NETMASK                       = 0x4
+	RTA_SRC                           = 0x100
+	RTA_SRCMASK                       = 0x200
+	RTF_ANNOUNCE                      = 0x4000
+	RTF_BLACKHOLE                     = 0x1000
+	RTF_BROADCAST                     = 0x400000
+	RTF_CLONED                        = 0x10000
+	RTF_CLONING                       = 0x100
+	RTF_DONE                          = 0x40
+	RTF_DYNAMIC                       = 0x10
+	RTF_FMASK                         = 0x70f808
+	RTF_GATEWAY                       = 0x2
+	RTF_HOST                          = 0x4
+	RTF_LLINFO                        = 0x400
+	RTF_LOCAL                         = 0x200000
+	RTF_MASK                          = 0x80
+	RTF_MODIFIED                      = 0x20
+	RTF_MPATH                         = 0x40000
+	RTF_MPLS                          = 0x100000
+	RTF_PERMANENT_ARP                 = 0x2000
+	RTF_PROTO1                        = 0x8000
+	RTF_PROTO2                        = 0x4000
+	RTF_PROTO3                        = 0x2000
+	RTF_REJECT                        = 0x8
+	RTF_STATIC                        = 0x800
+	RTF_UP                            = 0x1
+	RTF_USETRAILERS                   = 0x8000
+	RTF_XRESOLVE                      = 0x200
+	RTM_ADD                           = 0x1
+	RTM_CHANGE                        = 0x3
+	RTM_DELADDR                       = 0xd
+	RTM_DELETE                        = 0x2
+	RTM_DESYNC                        = 0x10
+	RTM_GET                           = 0x4
+	RTM_IFANNOUNCE                    = 0xf
+	RTM_IFINFO                        = 0xe
+	RTM_LOCK                          = 0x8
+	RTM_LOSING                        = 0x5
+	RTM_MAXSIZE                       = 0x800
+	RTM_MISS                          = 0x7
+	RTM_NEWADDR                       = 0xc
+	RTM_REDIRECT                      = 0x6
+	RTM_RESOLVE                       = 0xb
+	RTM_RTTUNIT                       = 0xf4240
+	RTM_VERSION                       = 0x5
+	RTV_EXPIRE                        = 0x4
+	RTV_HOPCOUNT                      = 0x2
+	RTV_MTU                           = 0x1
+	RTV_RPIPE                         = 0x8
+	RTV_RTT                           = 0x40
+	RTV_RTTVAR                        = 0x80
+	RTV_SPIPE                         = 0x10
+	RTV_SSTHRESH                      = 0x20
+	RT_TABLEID_MAX                    = 0xff
+	RUSAGE_CHILDREN                   = -0x1
+	RUSAGE_SELF                       = 0x0
+	RUSAGE_THREAD                     = 0x1
+	SCM_RIGHTS                        = 0x1
+	SCM_TIMESTAMP                     = 0x4
+	SHUT_RD                           = 0x0
+	SHUT_RDWR                         = 0x2
+	SHUT_WR                           = 0x1
+	SIOCADDMULTI                      = 0x80206931
+	SIOCAIFADDR                       = 0x8040691a
+	SIOCAIFGROUP                      = 0x80246987
+	SIOCALIFADDR                      = 0x8218691c
+	SIOCATMARK                        = 0x40047307
+	SIOCBRDGADD                       = 0x8054693c
+	SIOCBRDGADDS                      = 0x80546941
+	SIOCBRDGARL                       = 0x806e694d
+	SIOCBRDGDADDR                     = 0x81286947
+	SIOCBRDGDEL                       = 0x8054693d
+	SIOCBRDGDELS                      = 0x80546942
+	SIOCBRDGFLUSH                     = 0x80546948
+	SIOCBRDGFRL                       = 0x806e694e
+	SIOCBRDGGCACHE                    = 0xc0146941
+	SIOCBRDGGFD                       = 0xc0146952
+	SIOCBRDGGHT                       = 0xc0146951
+	SIOCBRDGGIFFLGS                   = 0xc054693e
+	SIOCBRDGGMA                       = 0xc0146953
+	SIOCBRDGGPARAM                    = 0xc03c6958
+	SIOCBRDGGPRI                      = 0xc0146950
+	SIOCBRDGGRL                       = 0xc028694f
+	SIOCBRDGGSIFS                     = 0xc054693c
+	SIOCBRDGGTO                       = 0xc0146946
+	SIOCBRDGIFS                       = 0xc0546942
+	SIOCBRDGRTS                       = 0xc0186943
+	SIOCBRDGSADDR                     = 0xc1286944
+	SIOCBRDGSCACHE                    = 0x80146940
+	SIOCBRDGSFD                       = 0x80146952
+	SIOCBRDGSHT                       = 0x80146951
+	SIOCBRDGSIFCOST                   = 0x80546955
+	SIOCBRDGSIFFLGS                   = 0x8054693f
+	SIOCBRDGSIFPRIO                   = 0x80546954
+	SIOCBRDGSMA                       = 0x80146953
+	SIOCBRDGSPRI                      = 0x80146950
+	SIOCBRDGSPROTO                    = 0x8014695a
+	SIOCBRDGSTO                       = 0x80146945
+	SIOCBRDGSTXHC                     = 0x80146959
+	SIOCDELMULTI                      = 0x80206932
+	SIOCDIFADDR                       = 0x80206919
+	SIOCDIFGROUP                      = 0x80246989
+	SIOCDIFPHYADDR                    = 0x80206949
+	SIOCDLIFADDR                      = 0x8218691e
+	SIOCGETKALIVE                     = 0xc01869a4
+	SIOCGETLABEL                      = 0x8020699a
+	SIOCGETPFLOW                      = 0xc02069fe
+	SIOCGETPFSYNC                     = 0xc02069f8
+	SIOCGETSGCNT                      = 0xc0147534
+	SIOCGETVIFCNT                     = 0xc0147533
+	SIOCGETVLAN                       = 0xc0206990
+	SIOCGHIWAT                        = 0x40047301
+	SIOCGIFADDR                       = 0xc0206921
+	SIOCGIFASYNCMAP                   = 0xc020697c
+	SIOCGIFBRDADDR                    = 0xc0206923
+	SIOCGIFCONF                       = 0xc0086924
+	SIOCGIFDATA                       = 0xc020691b
+	SIOCGIFDESCR                      = 0xc0206981
+	SIOCGIFDSTADDR                    = 0xc0206922
+	SIOCGIFFLAGS                      = 0xc0206911
+	SIOCGIFGATTR                      = 0xc024698b
+	SIOCGIFGENERIC                    = 0xc020693a
+	SIOCGIFGMEMB                      = 0xc024698a
+	SIOCGIFGROUP                      = 0xc0246988
+	SIOCGIFHARDMTU                    = 0xc02069a5
+	SIOCGIFMEDIA                      = 0xc0286936
+	SIOCGIFMETRIC                     = 0xc0206917
+	SIOCGIFMTU                        = 0xc020697e
+	SIOCGIFNETMASK                    = 0xc0206925
+	SIOCGIFPDSTADDR                   = 0xc0206948
+	SIOCGIFPRIORITY                   = 0xc020699c
+	SIOCGIFPSRCADDR                   = 0xc0206947
+	SIOCGIFRDOMAIN                    = 0xc02069a0
+	SIOCGIFRTLABEL                    = 0xc0206983
+	SIOCGIFRXR                        = 0x802069aa
+	SIOCGIFTIMESLOT                   = 0xc0206986
+	SIOCGIFXFLAGS                     = 0xc020699e
+	SIOCGLIFADDR                      = 0xc218691d
+	SIOCGLIFPHYADDR                   = 0xc218694b
+	SIOCGLIFPHYRTABLE                 = 0xc02069a2
+	SIOCGLIFPHYTTL                    = 0xc02069a9
+	SIOCGLOWAT                        = 0x40047303
+	SIOCGPGRP                         = 0x40047309
+	SIOCGSPPPPARAMS                   = 0xc0206994
+	SIOCGVH                           = 0xc02069f6
+	SIOCGVNETID                       = 0xc02069a7
+	SIOCIFCREATE                      = 0x8020697a
+	SIOCIFDESTROY                     = 0x80206979
+	SIOCIFGCLONERS                    = 0xc00c6978
+	SIOCSETKALIVE                     = 0x801869a3
+	SIOCSETLABEL                      = 0x80206999
+	SIOCSETPFLOW                      = 0x802069fd
+	SIOCSETPFSYNC                     = 0x802069f7
+	SIOCSETVLAN                       = 0x8020698f
+	SIOCSHIWAT                        = 0x80047300
+	SIOCSIFADDR                       = 0x8020690c
+	SIOCSIFASYNCMAP                   = 0x8020697d
+	SIOCSIFBRDADDR                    = 0x80206913
+	SIOCSIFDESCR                      = 0x80206980
+	SIOCSIFDSTADDR                    = 0x8020690e
+	SIOCSIFFLAGS                      = 0x80206910
+	SIOCSIFGATTR                      = 0x8024698c
+	SIOCSIFGENERIC                    = 0x80206939
+	SIOCSIFLLADDR                     = 0x8020691f
+	SIOCSIFMEDIA                      = 0xc0206935
+	SIOCSIFMETRIC                     = 0x80206918
+	SIOCSIFMTU                        = 0x8020697f
+	SIOCSIFNETMASK                    = 0x80206916
+	SIOCSIFPHYADDR                    = 0x80406946
+	SIOCSIFPRIORITY                   = 0x8020699b
+	SIOCSIFRDOMAIN                    = 0x8020699f
+	SIOCSIFRTLABEL                    = 0x80206982
+	SIOCSIFTIMESLOT                   = 0x80206985
+	SIOCSIFXFLAGS                     = 0x8020699d
+	SIOCSLIFPHYADDR                   = 0x8218694a
+	SIOCSLIFPHYRTABLE                 = 0x802069a1
+	SIOCSLIFPHYTTL                    = 0x802069a8
+	SIOCSLOWAT                        = 0x80047302
+	SIOCSPGRP                         = 0x80047308
+	SIOCSSPPPPARAMS                   = 0x80206993
+	SIOCSVH                           = 0xc02069f5
+	SIOCSVNETID                       = 0x802069a6
+	SOCK_CLOEXEC                      = 0x8000
+	SOCK_DGRAM                        = 0x2
+	SOCK_NONBLOCK                     = 0x4000
+	SOCK_RAW                          = 0x3
+	SOCK_RDM                          = 0x4
+	SOCK_SEQPACKET                    = 0x5
+	SOCK_STREAM                       = 0x1
+	SOL_SOCKET                        = 0xffff
+	SOMAXCONN                         = 0x80
+	SO_ACCEPTCONN                     = 0x2
+	SO_BINDANY                        = 0x1000
+	SO_BROADCAST                      = 0x20
+	SO_DEBUG                          = 0x1
+	SO_DONTROUTE                      = 0x10
+	SO_ERROR                          = 0x1007
+	SO_KEEPALIVE                      = 0x8
+	SO_LINGER                         = 0x80
+	SO_NETPROC                        = 0x1020
+	SO_OOBINLINE                      = 0x100
+	SO_PEERCRED                       = 0x1022
+	SO_RCVBUF                         = 0x1002
+	SO_RCVLOWAT                       = 0x1004
+	SO_RCVTIMEO                       = 0x1006
+	SO_REUSEADDR                      = 0x4
+	SO_REUSEPORT                      = 0x200
+	SO_RTABLE                         = 0x1021
+	SO_SNDBUF                         = 0x1001
+	SO_SNDLOWAT                       = 0x1003
+	SO_SNDTIMEO                       = 0x1005
+	SO_SPLICE                         = 0x1023
+	SO_TIMESTAMP                      = 0x800
+	SO_TYPE                           = 0x1008
+	SO_USELOOPBACK                    = 0x40
+	S_BLKSIZE                         = 0x200
+	S_IEXEC                           = 0x40
+	S_IFBLK                           = 0x6000
+	S_IFCHR                           = 0x2000
+	S_IFDIR                           = 0x4000
+	S_IFIFO                           = 0x1000
+	S_IFLNK                           = 0xa000
+	S_IFMT                            = 0xf000
+	S_IFREG                           = 0x8000
+	S_IFSOCK                          = 0xc000
+	S_IREAD                           = 0x100
+	S_IRGRP                           = 0x20
+	S_IROTH                           = 0x4
+	S_IRUSR                           = 0x100
+	S_IRWXG                           = 0x38
+	S_IRWXO                           = 0x7
+	S_IRWXU                           = 0x1c0
+	S_ISGID                           = 0x400
+	S_ISTXT                           = 0x200
+	S_ISUID                           = 0x800
+	S_ISVTX                           = 0x200
+	S_IWGRP                           = 0x10
+	S_IWOTH                           = 0x2
+	S_IWRITE                          = 0x80
+	S_IWUSR                           = 0x80
+	S_IXGRP                           = 0x8
+	S_IXOTH                           = 0x1
+	S_IXUSR                           = 0x40
+	TCIFLUSH                          = 0x1
+	TCIOFLUSH                         = 0x3
+	TCOFLUSH                          = 0x2
+	TCP_MAXBURST                      = 0x4
+	TCP_MAXSEG                        = 0x2
+	TCP_MAXWIN                        = 0xffff
+	TCP_MAX_SACK                      = 0x3
+	TCP_MAX_WINSHIFT                  = 0xe
+	TCP_MD5SIG                        = 0x4
+	TCP_MSS                           = 0x200
+	TCP_NODELAY                       = 0x1
+	TCP_NOPUSH                        = 0x10
+	TCP_NSTATES                       = 0xb
+	TCP_SACK_ENABLE                   = 0x8
+	TCSAFLUSH                         = 0x2
+	TIOCCBRK                          = 0x2000747a
+	TIOCCDTR                          = 0x20007478
+	TIOCCONS                          = 0x80047462
+	TIOCDRAIN                         = 0x2000745e
+	TIOCEXCL                          = 0x2000740d
+	TIOCEXT                           = 0x80047460
+	TIOCFLAG_CLOCAL                   = 0x2
+	TIOCFLAG_CRTSCTS                  = 0x4
+	TIOCFLAG_MDMBUF                   = 0x8
+	TIOCFLAG_PPS                      = 0x10
+	TIOCFLAG_SOFTCAR                  = 0x1
+	TIOCFLUSH                         = 0x80047410
+	TIOCGETA                          = 0x402c7413
+	TIOCGETD                          = 0x4004741a
+	TIOCGFLAGS                        = 0x4004745d
+	TIOCGPGRP                         = 0x40047477
+	TIOCGSID                          = 0x40047463
+	TIOCGTSTAMP                       = 0x400c745b
+	TIOCGWINSZ                        = 0x40087468
+	TIOCMBIC                          = 0x8004746b
+	TIOCMBIS                          = 0x8004746c
+	TIOCMGET                          = 0x4004746a
+	TIOCMODG                          = 0x4004746a
+	TIOCMODS                          = 0x8004746d
+	TIOCMSET                          = 0x8004746d
+	TIOCM_CAR                         = 0x40
+	TIOCM_CD                          = 0x40
+	TIOCM_CTS                         = 0x20
+	TIOCM_DSR                         = 0x100
+	TIOCM_DTR                         = 0x2
+	TIOCM_LE                          = 0x1
+	TIOCM_RI                          = 0x80
+	TIOCM_RNG                         = 0x80
+	TIOCM_RTS                         = 0x4
+	TIOCM_SR                          = 0x10
+	TIOCM_ST                          = 0x8
+	TIOCNOTTY                         = 0x20007471
+	TIOCNXCL                          = 0x2000740e
+	TIOCOUTQ                          = 0x40047473
+	TIOCPKT                           = 0x80047470
+	TIOCPKT_DATA                      = 0x0
+	TIOCPKT_DOSTOP                    = 0x20
+	TIOCPKT_FLUSHREAD                 = 0x1
+	TIOCPKT_FLUSHWRITE                = 0x2
+	TIOCPKT_IOCTL                     = 0x40
+	TIOCPKT_NOSTOP                    = 0x10
+	TIOCPKT_START                     = 0x8
+	TIOCPKT_STOP                      = 0x4
+	TIOCREMOTE                        = 0x80047469
+	TIOCSBRK                          = 0x2000747b
+	TIOCSCTTY                         = 0x20007461
+	TIOCSDTR                          = 0x20007479
+	TIOCSETA                          = 0x802c7414
+	TIOCSETAF                         = 0x802c7416
+	TIOCSETAW                         = 0x802c7415
+	TIOCSETD                          = 0x8004741b
+	TIOCSFLAGS                        = 0x8004745c
+	TIOCSIG                           = 0x8004745f
+	TIOCSPGRP                         = 0x80047476
+	TIOCSTART                         = 0x2000746e
+	TIOCSTAT                          = 0x80047465
+	TIOCSTI                           = 0x80017472
+	TIOCSTOP                          = 0x2000746f
+	TIOCSTSTAMP                       = 0x8008745a
+	TIOCSWINSZ                        = 0x80087467
+	TIOCUCNTL                         = 0x80047466
+	TOSTOP                            = 0x400000
+	VDISCARD                          = 0xf
+	VDSUSP                            = 0xb
+	VEOF                              = 0x0
+	VEOL                              = 0x1
+	VEOL2                             = 0x2
+	VERASE                            = 0x3
+	VINTR                             = 0x8
+	VKILL                             = 0x5
+	VLNEXT                            = 0xe
+	VMIN                              = 0x10
+	VQUIT                             = 0x9
+	VREPRINT                          = 0x6
+	VSTART                            = 0xc
+	VSTATUS                           = 0x12
+	VSTOP                             = 0xd
+	VSUSP                             = 0xa
+	VTIME                             = 0x11
+	VWERASE                           = 0x4
+	WALTSIG                           = 0x4
+	WCONTINUED                        = 0x8
+	WCOREFLAG                         = 0x80
+	WNOHANG                           = 0x1
+	WUNTRACED                         = 0x2
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADF           = syscall.Errno(0x9)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x58)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDOM            = syscall.Errno(0x21)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x59)
+	EILSEQ          = syscall.Errno(0x54)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EIPSEC          = syscall.Errno(0x52)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x5b)
+	ELOOP           = syscall.Errno(0x3e)
+	EMEDIUMTYPE     = syscall.Errno(0x56)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x53)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOMEDIUM       = syscall.Errno(0x55)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x5a)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x5b)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x2d)
+	EOVERFLOW       = syscall.Errno(0x57)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTHR    = syscall.Signal(0x20)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "EWOULDBLOCK", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "EOPNOTSUPP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "operation timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disk quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC program not available"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EIPSEC", "IPsec processing failure"},
+	{83, "ENOATTR", "attribute not found"},
+	{84, "EILSEQ", "illegal byte sequence"},
+	{85, "ENOMEDIUM", "no medium found"},
+	{86, "EMEDIUMTYPE", "wrong medium type"},
+	{87, "EOVERFLOW", "value too large to be stored in data type"},
+	{88, "ECANCELED", "operation canceled"},
+	{89, "EIDRM", "identifier removed"},
+	{90, "ENOMSG", "no message of desired type"},
+	{91, "ELAST", "not supported"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGABRT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "suspended (signal)"},
+	{18, "SIGTSTP", "suspended"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+	{32, "SIGTHR", "thread AST"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_arm64.go
new file mode 100644
index 000000000..ac5efbe5a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_arm64.go
@@ -0,0 +1,1797 @@
+// mkerrors.sh -m64
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm64,openbsd
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -m64 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                      = 0x10
+	AF_BLUETOOTH                      = 0x20
+	AF_CCITT                          = 0xa
+	AF_CHAOS                          = 0x5
+	AF_CNT                            = 0x15
+	AF_COIP                           = 0x14
+	AF_DATAKIT                        = 0x9
+	AF_DECnet                         = 0xc
+	AF_DLI                            = 0xd
+	AF_E164                           = 0x1a
+	AF_ECMA                           = 0x8
+	AF_ENCAP                          = 0x1c
+	AF_HYLINK                         = 0xf
+	AF_IMPLINK                        = 0x3
+	AF_INET                           = 0x2
+	AF_INET6                          = 0x18
+	AF_IPX                            = 0x17
+	AF_ISDN                           = 0x1a
+	AF_ISO                            = 0x7
+	AF_KEY                            = 0x1e
+	AF_LAT                            = 0xe
+	AF_LINK                           = 0x12
+	AF_LOCAL                          = 0x1
+	AF_MAX                            = 0x24
+	AF_MPLS                           = 0x21
+	AF_NATM                           = 0x1b
+	AF_NS                             = 0x6
+	AF_OSI                            = 0x7
+	AF_PUP                            = 0x4
+	AF_ROUTE                          = 0x11
+	AF_SIP                            = 0x1d
+	AF_SNA                            = 0xb
+	AF_UNIX                           = 0x1
+	AF_UNSPEC                         = 0x0
+	ALTWERASE                         = 0x200
+	ARPHRD_ETHER                      = 0x1
+	ARPHRD_FRELAY                     = 0xf
+	ARPHRD_IEEE1394                   = 0x18
+	ARPHRD_IEEE802                    = 0x6
+	B0                                = 0x0
+	B110                              = 0x6e
+	B115200                           = 0x1c200
+	B1200                             = 0x4b0
+	B134                              = 0x86
+	B14400                            = 0x3840
+	B150                              = 0x96
+	B1800                             = 0x708
+	B19200                            = 0x4b00
+	B200                              = 0xc8
+	B230400                           = 0x38400
+	B2400                             = 0x960
+	B28800                            = 0x7080
+	B300                              = 0x12c
+	B38400                            = 0x9600
+	B4800                             = 0x12c0
+	B50                               = 0x32
+	B57600                            = 0xe100
+	B600                              = 0x258
+	B7200                             = 0x1c20
+	B75                               = 0x4b
+	B76800                            = 0x12c00
+	B9600                             = 0x2580
+	BIOCFLUSH                         = 0x20004268
+	BIOCGBLEN                         = 0x40044266
+	BIOCGDIRFILT                      = 0x4004427c
+	BIOCGDLT                          = 0x4004426a
+	BIOCGDLTLIST                      = 0xc010427b
+	BIOCGETIF                         = 0x4020426b
+	BIOCGFILDROP                      = 0x40044278
+	BIOCGHDRCMPLT                     = 0x40044274
+	BIOCGRSIG                         = 0x40044273
+	BIOCGRTIMEOUT                     = 0x4010426e
+	BIOCGSTATS                        = 0x4008426f
+	BIOCIMMEDIATE                     = 0x80044270
+	BIOCLOCK                          = 0x20004276
+	BIOCPROMISC                       = 0x20004269
+	BIOCSBLEN                         = 0xc0044266
+	BIOCSDIRFILT                      = 0x8004427d
+	BIOCSDLT                          = 0x8004427a
+	BIOCSETF                          = 0x80104267
+	BIOCSETIF                         = 0x8020426c
+	BIOCSETWF                         = 0x80104277
+	BIOCSFILDROP                      = 0x80044279
+	BIOCSHDRCMPLT                     = 0x80044275
+	BIOCSRSIG                         = 0x80044272
+	BIOCSRTIMEOUT                     = 0x8010426d
+	BIOCVERSION                       = 0x40044271
+	BPF_A                             = 0x10
+	BPF_ABS                           = 0x20
+	BPF_ADD                           = 0x0
+	BPF_ALIGNMENT                     = 0x4
+	BPF_ALU                           = 0x4
+	BPF_AND                           = 0x50
+	BPF_B                             = 0x10
+	BPF_DIRECTION_IN                  = 0x1
+	BPF_DIRECTION_OUT                 = 0x2
+	BPF_DIV                           = 0x30
+	BPF_FILDROP_CAPTURE               = 0x1
+	BPF_FILDROP_DROP                  = 0x2
+	BPF_FILDROP_PASS                  = 0x0
+	BPF_H                             = 0x8
+	BPF_IMM                           = 0x0
+	BPF_IND                           = 0x40
+	BPF_JA                            = 0x0
+	BPF_JEQ                           = 0x10
+	BPF_JGE                           = 0x30
+	BPF_JGT                           = 0x20
+	BPF_JMP                           = 0x5
+	BPF_JSET                          = 0x40
+	BPF_K                             = 0x0
+	BPF_LD                            = 0x0
+	BPF_LDX                           = 0x1
+	BPF_LEN                           = 0x80
+	BPF_LSH                           = 0x60
+	BPF_MAJOR_VERSION                 = 0x1
+	BPF_MAXBUFSIZE                    = 0x200000
+	BPF_MAXINSNS                      = 0x200
+	BPF_MEM                           = 0x60
+	BPF_MEMWORDS                      = 0x10
+	BPF_MINBUFSIZE                    = 0x20
+	BPF_MINOR_VERSION                 = 0x1
+	BPF_MISC                          = 0x7
+	BPF_MSH                           = 0xa0
+	BPF_MUL                           = 0x20
+	BPF_NEG                           = 0x80
+	BPF_OR                            = 0x40
+	BPF_RELEASE                       = 0x30bb6
+	BPF_RET                           = 0x6
+	BPF_RSH                           = 0x70
+	BPF_ST                            = 0x2
+	BPF_STX                           = 0x3
+	BPF_SUB                           = 0x10
+	BPF_TAX                           = 0x0
+	BPF_TXA                           = 0x80
+	BPF_W                             = 0x0
+	BPF_X                             = 0x8
+	BRKINT                            = 0x2
+	CFLUSH                            = 0xf
+	CLOCAL                            = 0x8000
+	CLOCK_BOOTTIME                    = 0x6
+	CLOCK_MONOTONIC                   = 0x3
+	CLOCK_PROCESS_CPUTIME_ID          = 0x2
+	CLOCK_REALTIME                    = 0x0
+	CLOCK_THREAD_CPUTIME_ID           = 0x4
+	CLOCK_UPTIME                      = 0x5
+	CPUSTATES                         = 0x6
+	CP_IDLE                           = 0x5
+	CP_INTR                           = 0x4
+	CP_NICE                           = 0x1
+	CP_SPIN                           = 0x3
+	CP_SYS                            = 0x2
+	CP_USER                           = 0x0
+	CREAD                             = 0x800
+	CRTSCTS                           = 0x10000
+	CS5                               = 0x0
+	CS6                               = 0x100
+	CS7                               = 0x200
+	CS8                               = 0x300
+	CSIZE                             = 0x300
+	CSTART                            = 0x11
+	CSTATUS                           = 0xff
+	CSTOP                             = 0x13
+	CSTOPB                            = 0x400
+	CSUSP                             = 0x1a
+	CTL_HW                            = 0x6
+	CTL_KERN                          = 0x1
+	CTL_MAXNAME                       = 0xc
+	CTL_NET                           = 0x4
+	DIOCOSFPFLUSH                     = 0x2000444e
+	DLT_ARCNET                        = 0x7
+	DLT_ATM_RFC1483                   = 0xb
+	DLT_AX25                          = 0x3
+	DLT_CHAOS                         = 0x5
+	DLT_C_HDLC                        = 0x68
+	DLT_EN10MB                        = 0x1
+	DLT_EN3MB                         = 0x2
+	DLT_ENC                           = 0xd
+	DLT_FDDI                          = 0xa
+	DLT_IEEE802                       = 0x6
+	DLT_IEEE802_11                    = 0x69
+	DLT_IEEE802_11_RADIO              = 0x7f
+	DLT_LOOP                          = 0xc
+	DLT_MPLS                          = 0xdb
+	DLT_NULL                          = 0x0
+	DLT_OPENFLOW                      = 0x10b
+	DLT_PFLOG                         = 0x75
+	DLT_PFSYNC                        = 0x12
+	DLT_PPP                           = 0x9
+	DLT_PPP_BSDOS                     = 0x10
+	DLT_PPP_ETHER                     = 0x33
+	DLT_PPP_SERIAL                    = 0x32
+	DLT_PRONET                        = 0x4
+	DLT_RAW                           = 0xe
+	DLT_SLIP                          = 0x8
+	DLT_SLIP_BSDOS                    = 0xf
+	DLT_USBPCAP                       = 0xf9
+	DLT_USER0                         = 0x93
+	DLT_USER1                         = 0x94
+	DLT_USER10                        = 0x9d
+	DLT_USER11                        = 0x9e
+	DLT_USER12                        = 0x9f
+	DLT_USER13                        = 0xa0
+	DLT_USER14                        = 0xa1
+	DLT_USER15                        = 0xa2
+	DLT_USER2                         = 0x95
+	DLT_USER3                         = 0x96
+	DLT_USER4                         = 0x97
+	DLT_USER5                         = 0x98
+	DLT_USER6                         = 0x99
+	DLT_USER7                         = 0x9a
+	DLT_USER8                         = 0x9b
+	DLT_USER9                         = 0x9c
+	DT_BLK                            = 0x6
+	DT_CHR                            = 0x2
+	DT_DIR                            = 0x4
+	DT_FIFO                           = 0x1
+	DT_LNK                            = 0xa
+	DT_REG                            = 0x8
+	DT_SOCK                           = 0xc
+	DT_UNKNOWN                        = 0x0
+	ECHO                              = 0x8
+	ECHOCTL                           = 0x40
+	ECHOE                             = 0x2
+	ECHOK                             = 0x4
+	ECHOKE                            = 0x1
+	ECHONL                            = 0x10
+	ECHOPRT                           = 0x20
+	EMT_TAGOVF                        = 0x1
+	EMUL_ENABLED                      = 0x1
+	EMUL_NATIVE                       = 0x2
+	ENDRUNDISC                        = 0x9
+	ETHERMIN                          = 0x2e
+	ETHERMTU                          = 0x5dc
+	ETHERTYPE_8023                    = 0x4
+	ETHERTYPE_AARP                    = 0x80f3
+	ETHERTYPE_ACCTON                  = 0x8390
+	ETHERTYPE_AEONIC                  = 0x8036
+	ETHERTYPE_ALPHA                   = 0x814a
+	ETHERTYPE_AMBER                   = 0x6008
+	ETHERTYPE_AMOEBA                  = 0x8145
+	ETHERTYPE_AOE                     = 0x88a2
+	ETHERTYPE_APOLLO                  = 0x80f7
+	ETHERTYPE_APOLLODOMAIN            = 0x8019
+	ETHERTYPE_APPLETALK               = 0x809b
+	ETHERTYPE_APPLITEK                = 0x80c7
+	ETHERTYPE_ARGONAUT                = 0x803a
+	ETHERTYPE_ARP                     = 0x806
+	ETHERTYPE_AT                      = 0x809b
+	ETHERTYPE_ATALK                   = 0x809b
+	ETHERTYPE_ATOMIC                  = 0x86df
+	ETHERTYPE_ATT                     = 0x8069
+	ETHERTYPE_ATTSTANFORD             = 0x8008
+	ETHERTYPE_AUTOPHON                = 0x806a
+	ETHERTYPE_AXIS                    = 0x8856
+	ETHERTYPE_BCLOOP                  = 0x9003
+	ETHERTYPE_BOFL                    = 0x8102
+	ETHERTYPE_CABLETRON               = 0x7034
+	ETHERTYPE_CHAOS                   = 0x804
+	ETHERTYPE_COMDESIGN               = 0x806c
+	ETHERTYPE_COMPUGRAPHIC            = 0x806d
+	ETHERTYPE_COUNTERPOINT            = 0x8062
+	ETHERTYPE_CRONUS                  = 0x8004
+	ETHERTYPE_CRONUSVLN               = 0x8003
+	ETHERTYPE_DCA                     = 0x1234
+	ETHERTYPE_DDE                     = 0x807b
+	ETHERTYPE_DEBNI                   = 0xaaaa
+	ETHERTYPE_DECAM                   = 0x8048
+	ETHERTYPE_DECCUST                 = 0x6006
+	ETHERTYPE_DECDIAG                 = 0x6005
+	ETHERTYPE_DECDNS                  = 0x803c
+	ETHERTYPE_DECDTS                  = 0x803e
+	ETHERTYPE_DECEXPER                = 0x6000
+	ETHERTYPE_DECLAST                 = 0x8041
+	ETHERTYPE_DECLTM                  = 0x803f
+	ETHERTYPE_DECMUMPS                = 0x6009
+	ETHERTYPE_DECNETBIOS              = 0x8040
+	ETHERTYPE_DELTACON                = 0x86de
+	ETHERTYPE_DIDDLE                  = 0x4321
+	ETHERTYPE_DLOG1                   = 0x660
+	ETHERTYPE_DLOG2                   = 0x661
+	ETHERTYPE_DN                      = 0x6003
+	ETHERTYPE_DOGFIGHT                = 0x1989
+	ETHERTYPE_DSMD                    = 0x8039
+	ETHERTYPE_ECMA                    = 0x803
+	ETHERTYPE_ENCRYPT                 = 0x803d
+	ETHERTYPE_ES                      = 0x805d
+	ETHERTYPE_EXCELAN                 = 0x8010
+	ETHERTYPE_EXPERDATA               = 0x8049
+	ETHERTYPE_FLIP                    = 0x8146
+	ETHERTYPE_FLOWCONTROL             = 0x8808
+	ETHERTYPE_FRARP                   = 0x808
+	ETHERTYPE_GENDYN                  = 0x8068
+	ETHERTYPE_HAYES                   = 0x8130
+	ETHERTYPE_HIPPI_FP                = 0x8180
+	ETHERTYPE_HITACHI                 = 0x8820
+	ETHERTYPE_HP                      = 0x8005
+	ETHERTYPE_IEEEPUP                 = 0xa00
+	ETHERTYPE_IEEEPUPAT               = 0xa01
+	ETHERTYPE_IMLBL                   = 0x4c42
+	ETHERTYPE_IMLBLDIAG               = 0x424c
+	ETHERTYPE_IP                      = 0x800
+	ETHERTYPE_IPAS                    = 0x876c
+	ETHERTYPE_IPV6                    = 0x86dd
+	ETHERTYPE_IPX                     = 0x8137
+	ETHERTYPE_IPXNEW                  = 0x8037
+	ETHERTYPE_KALPANA                 = 0x8582
+	ETHERTYPE_LANBRIDGE               = 0x8038
+	ETHERTYPE_LANPROBE                = 0x8888
+	ETHERTYPE_LAT                     = 0x6004
+	ETHERTYPE_LBACK                   = 0x9000
+	ETHERTYPE_LITTLE                  = 0x8060
+	ETHERTYPE_LLDP                    = 0x88cc
+	ETHERTYPE_LOGICRAFT               = 0x8148
+	ETHERTYPE_LOOPBACK                = 0x9000
+	ETHERTYPE_MATRA                   = 0x807a
+	ETHERTYPE_MAX                     = 0xffff
+	ETHERTYPE_MERIT                   = 0x807c
+	ETHERTYPE_MICP                    = 0x873a
+	ETHERTYPE_MOPDL                   = 0x6001
+	ETHERTYPE_MOPRC                   = 0x6002
+	ETHERTYPE_MOTOROLA                = 0x818d
+	ETHERTYPE_MPLS                    = 0x8847
+	ETHERTYPE_MPLS_MCAST              = 0x8848
+	ETHERTYPE_MUMPS                   = 0x813f
+	ETHERTYPE_NBPCC                   = 0x3c04
+	ETHERTYPE_NBPCLAIM                = 0x3c09
+	ETHERTYPE_NBPCLREQ                = 0x3c05
+	ETHERTYPE_NBPCLRSP                = 0x3c06
+	ETHERTYPE_NBPCREQ                 = 0x3c02
+	ETHERTYPE_NBPCRSP                 = 0x3c03
+	ETHERTYPE_NBPDG                   = 0x3c07
+	ETHERTYPE_NBPDGB                  = 0x3c08
+	ETHERTYPE_NBPDLTE                 = 0x3c0a
+	ETHERTYPE_NBPRAR                  = 0x3c0c
+	ETHERTYPE_NBPRAS                  = 0x3c0b
+	ETHERTYPE_NBPRST                  = 0x3c0d
+	ETHERTYPE_NBPSCD                  = 0x3c01
+	ETHERTYPE_NBPVCD                  = 0x3c00
+	ETHERTYPE_NBS                     = 0x802
+	ETHERTYPE_NCD                     = 0x8149
+	ETHERTYPE_NESTAR                  = 0x8006
+	ETHERTYPE_NETBEUI                 = 0x8191
+	ETHERTYPE_NOVELL                  = 0x8138
+	ETHERTYPE_NS                      = 0x600
+	ETHERTYPE_NSAT                    = 0x601
+	ETHERTYPE_NSCOMPAT                = 0x807
+	ETHERTYPE_NTRAILER                = 0x10
+	ETHERTYPE_OS9                     = 0x7007
+	ETHERTYPE_OS9NET                  = 0x7009
+	ETHERTYPE_PACER                   = 0x80c6
+	ETHERTYPE_PAE                     = 0x888e
+	ETHERTYPE_PBB                     = 0x88e7
+	ETHERTYPE_PCS                     = 0x4242
+	ETHERTYPE_PLANNING                = 0x8044
+	ETHERTYPE_PPP                     = 0x880b
+	ETHERTYPE_PPPOE                   = 0x8864
+	ETHERTYPE_PPPOEDISC               = 0x8863
+	ETHERTYPE_PRIMENTS                = 0x7031
+	ETHERTYPE_PUP                     = 0x200
+	ETHERTYPE_PUPAT                   = 0x200
+	ETHERTYPE_QINQ                    = 0x88a8
+	ETHERTYPE_RACAL                   = 0x7030
+	ETHERTYPE_RATIONAL                = 0x8150
+	ETHERTYPE_RAWFR                   = 0x6559
+	ETHERTYPE_RCL                     = 0x1995
+	ETHERTYPE_RDP                     = 0x8739
+	ETHERTYPE_RETIX                   = 0x80f2
+	ETHERTYPE_REVARP                  = 0x8035
+	ETHERTYPE_SCA                     = 0x6007
+	ETHERTYPE_SECTRA                  = 0x86db
+	ETHERTYPE_SECUREDATA              = 0x876d
+	ETHERTYPE_SGITW                   = 0x817e
+	ETHERTYPE_SG_BOUNCE               = 0x8016
+	ETHERTYPE_SG_DIAG                 = 0x8013
+	ETHERTYPE_SG_NETGAMES             = 0x8014
+	ETHERTYPE_SG_RESV                 = 0x8015
+	ETHERTYPE_SIMNET                  = 0x5208
+	ETHERTYPE_SLOW                    = 0x8809
+	ETHERTYPE_SNA                     = 0x80d5
+	ETHERTYPE_SNMP                    = 0x814c
+	ETHERTYPE_SONIX                   = 0xfaf5
+	ETHERTYPE_SPIDER                  = 0x809f
+	ETHERTYPE_SPRITE                  = 0x500
+	ETHERTYPE_STP                     = 0x8181
+	ETHERTYPE_TALARIS                 = 0x812b
+	ETHERTYPE_TALARISMC               = 0x852b
+	ETHERTYPE_TCPCOMP                 = 0x876b
+	ETHERTYPE_TCPSM                   = 0x9002
+	ETHERTYPE_TEC                     = 0x814f
+	ETHERTYPE_TIGAN                   = 0x802f
+	ETHERTYPE_TRAIL                   = 0x1000
+	ETHERTYPE_TRANSETHER              = 0x6558
+	ETHERTYPE_TYMSHARE                = 0x802e
+	ETHERTYPE_UBBST                   = 0x7005
+	ETHERTYPE_UBDEBUG                 = 0x900
+	ETHERTYPE_UBDIAGLOOP              = 0x7002
+	ETHERTYPE_UBDL                    = 0x7000
+	ETHERTYPE_UBNIU                   = 0x7001
+	ETHERTYPE_UBNMC                   = 0x7003
+	ETHERTYPE_VALID                   = 0x1600
+	ETHERTYPE_VARIAN                  = 0x80dd
+	ETHERTYPE_VAXELN                  = 0x803b
+	ETHERTYPE_VEECO                   = 0x8067
+	ETHERTYPE_VEXP                    = 0x805b
+	ETHERTYPE_VGLAB                   = 0x8131
+	ETHERTYPE_VINES                   = 0xbad
+	ETHERTYPE_VINESECHO               = 0xbaf
+	ETHERTYPE_VINESLOOP               = 0xbae
+	ETHERTYPE_VITAL                   = 0xff00
+	ETHERTYPE_VLAN                    = 0x8100
+	ETHERTYPE_VLTLMAN                 = 0x8080
+	ETHERTYPE_VPROD                   = 0x805c
+	ETHERTYPE_VURESERVED              = 0x8147
+	ETHERTYPE_WATERLOO                = 0x8130
+	ETHERTYPE_WELLFLEET               = 0x8103
+	ETHERTYPE_X25                     = 0x805
+	ETHERTYPE_X75                     = 0x801
+	ETHERTYPE_XNSSM                   = 0x9001
+	ETHERTYPE_XTP                     = 0x817d
+	ETHER_ADDR_LEN                    = 0x6
+	ETHER_ALIGN                       = 0x2
+	ETHER_CRC_LEN                     = 0x4
+	ETHER_CRC_POLY_BE                 = 0x4c11db6
+	ETHER_CRC_POLY_LE                 = 0xedb88320
+	ETHER_HDR_LEN                     = 0xe
+	ETHER_MAX_DIX_LEN                 = 0x600
+	ETHER_MAX_HARDMTU_LEN             = 0xff9b
+	ETHER_MAX_LEN                     = 0x5ee
+	ETHER_MIN_LEN                     = 0x40
+	ETHER_TYPE_LEN                    = 0x2
+	ETHER_VLAN_ENCAP_LEN              = 0x4
+	EVFILT_AIO                        = -0x3
+	EVFILT_DEVICE                     = -0x8
+	EVFILT_PROC                       = -0x5
+	EVFILT_READ                       = -0x1
+	EVFILT_SIGNAL                     = -0x6
+	EVFILT_SYSCOUNT                   = 0x8
+	EVFILT_TIMER                      = -0x7
+	EVFILT_VNODE                      = -0x4
+	EVFILT_WRITE                      = -0x2
+	EVL_ENCAPLEN                      = 0x4
+	EVL_PRIO_BITS                     = 0xd
+	EVL_PRIO_MAX                      = 0x7
+	EVL_VLID_MASK                     = 0xfff
+	EVL_VLID_MAX                      = 0xffe
+	EVL_VLID_MIN                      = 0x1
+	EVL_VLID_NULL                     = 0x0
+	EV_ADD                            = 0x1
+	EV_CLEAR                          = 0x20
+	EV_DELETE                         = 0x2
+	EV_DISABLE                        = 0x8
+	EV_DISPATCH                       = 0x80
+	EV_ENABLE                         = 0x4
+	EV_EOF                            = 0x8000
+	EV_ERROR                          = 0x4000
+	EV_FLAG1                          = 0x2000
+	EV_ONESHOT                        = 0x10
+	EV_RECEIPT                        = 0x40
+	EV_SYSFLAGS                       = 0xf000
+	EXTA                              = 0x4b00
+	EXTB                              = 0x9600
+	EXTPROC                           = 0x800
+	FD_CLOEXEC                        = 0x1
+	FD_SETSIZE                        = 0x400
+	FLUSHO                            = 0x800000
+	F_DUPFD                           = 0x0
+	F_DUPFD_CLOEXEC                   = 0xa
+	F_GETFD                           = 0x1
+	F_GETFL                           = 0x3
+	F_GETLK                           = 0x7
+	F_GETOWN                          = 0x5
+	F_ISATTY                          = 0xb
+	F_OK                              = 0x0
+	F_RDLCK                           = 0x1
+	F_SETFD                           = 0x2
+	F_SETFL                           = 0x4
+	F_SETLK                           = 0x8
+	F_SETLKW                          = 0x9
+	F_SETOWN                          = 0x6
+	F_UNLCK                           = 0x2
+	F_WRLCK                           = 0x3
+	HUPCL                             = 0x4000
+	HW_MACHINE                        = 0x1
+	ICANON                            = 0x100
+	ICMP6_FILTER                      = 0x12
+	ICRNL                             = 0x100
+	IEXTEN                            = 0x400
+	IFAN_ARRIVAL                      = 0x0
+	IFAN_DEPARTURE                    = 0x1
+	IFF_ALLMULTI                      = 0x200
+	IFF_BROADCAST                     = 0x2
+	IFF_CANTCHANGE                    = 0x8e52
+	IFF_DEBUG                         = 0x4
+	IFF_LINK0                         = 0x1000
+	IFF_LINK1                         = 0x2000
+	IFF_LINK2                         = 0x4000
+	IFF_LOOPBACK                      = 0x8
+	IFF_MULTICAST                     = 0x8000
+	IFF_NOARP                         = 0x80
+	IFF_OACTIVE                       = 0x400
+	IFF_POINTOPOINT                   = 0x10
+	IFF_PROMISC                       = 0x100
+	IFF_RUNNING                       = 0x40
+	IFF_SIMPLEX                       = 0x800
+	IFF_STATICARP                     = 0x20
+	IFF_UP                            = 0x1
+	IFNAMSIZ                          = 0x10
+	IFT_1822                          = 0x2
+	IFT_A12MPPSWITCH                  = 0x82
+	IFT_AAL2                          = 0xbb
+	IFT_AAL5                          = 0x31
+	IFT_ADSL                          = 0x5e
+	IFT_AFLANE8023                    = 0x3b
+	IFT_AFLANE8025                    = 0x3c
+	IFT_ARAP                          = 0x58
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ASYNC                         = 0x54
+	IFT_ATM                           = 0x25
+	IFT_ATMDXI                        = 0x69
+	IFT_ATMFUNI                       = 0x6a
+	IFT_ATMIMA                        = 0x6b
+	IFT_ATMLOGICAL                    = 0x50
+	IFT_ATMRADIO                      = 0xbd
+	IFT_ATMSUBINTERFACE               = 0x86
+	IFT_ATMVCIENDPT                   = 0xc2
+	IFT_ATMVIRTUAL                    = 0x95
+	IFT_BGPPOLICYACCOUNTING           = 0xa2
+	IFT_BLUETOOTH                     = 0xf8
+	IFT_BRIDGE                        = 0xd1
+	IFT_BSC                           = 0x53
+	IFT_CARP                          = 0xf7
+	IFT_CCTEMUL                       = 0x3d
+	IFT_CEPT                          = 0x13
+	IFT_CES                           = 0x85
+	IFT_CHANNEL                       = 0x46
+	IFT_CNR                           = 0x55
+	IFT_COFFEE                        = 0x84
+	IFT_COMPOSITELINK                 = 0x9b
+	IFT_DCN                           = 0x8d
+	IFT_DIGITALPOWERLINE              = 0x8a
+	IFT_DIGITALWRAPPEROVERHEADCHANNEL = 0xba
+	IFT_DLSW                          = 0x4a
+	IFT_DOCSCABLEDOWNSTREAM           = 0x80
+	IFT_DOCSCABLEMACLAYER             = 0x7f
+	IFT_DOCSCABLEUPSTREAM             = 0x81
+	IFT_DOCSCABLEUPSTREAMCHANNEL      = 0xcd
+	IFT_DS0                           = 0x51
+	IFT_DS0BUNDLE                     = 0x52
+	IFT_DS1FDL                        = 0xaa
+	IFT_DS3                           = 0x1e
+	IFT_DTM                           = 0x8c
+	IFT_DUMMY                         = 0xf1
+	IFT_DVBASILN                      = 0xac
+	IFT_DVBASIOUT                     = 0xad
+	IFT_DVBRCCDOWNSTREAM              = 0x93
+	IFT_DVBRCCMACLAYER                = 0x92
+	IFT_DVBRCCUPSTREAM                = 0x94
+	IFT_ECONET                        = 0xce
+	IFT_ENC                           = 0xf4
+	IFT_EON                           = 0x19
+	IFT_EPLRS                         = 0x57
+	IFT_ESCON                         = 0x49
+	IFT_ETHER                         = 0x6
+	IFT_FAITH                         = 0xf3
+	IFT_FAST                          = 0x7d
+	IFT_FASTETHER                     = 0x3e
+	IFT_FASTETHERFX                   = 0x45
+	IFT_FDDI                          = 0xf
+	IFT_FIBRECHANNEL                  = 0x38
+	IFT_FRAMERELAYINTERCONNECT        = 0x3a
+	IFT_FRAMERELAYMPI                 = 0x5c
+	IFT_FRDLCIENDPT                   = 0xc1
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_FRF16MFRBUNDLE                = 0xa3
+	IFT_FRFORWARD                     = 0x9e
+	IFT_G703AT2MB                     = 0x43
+	IFT_G703AT64K                     = 0x42
+	IFT_GIF                           = 0xf0
+	IFT_GIGABITETHERNET               = 0x75
+	IFT_GR303IDT                      = 0xb2
+	IFT_GR303RDT                      = 0xb1
+	IFT_H323GATEKEEPER                = 0xa4
+	IFT_H323PROXY                     = 0xa5
+	IFT_HDH1822                       = 0x3
+	IFT_HDLC                          = 0x76
+	IFT_HDSL2                         = 0xa8
+	IFT_HIPERLAN2                     = 0xb7
+	IFT_HIPPI                         = 0x2f
+	IFT_HIPPIINTERFACE                = 0x39
+	IFT_HOSTPAD                       = 0x5a
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IBM370PARCHAN                 = 0x48
+	IFT_IDSL                          = 0x9a
+	IFT_IEEE1394                      = 0x90
+	IFT_IEEE80211                     = 0x47
+	IFT_IEEE80212                     = 0x37
+	IFT_IEEE8023ADLAG                 = 0xa1
+	IFT_IFGSN                         = 0x91
+	IFT_IMT                           = 0xbe
+	IFT_INFINIBAND                    = 0xc7
+	IFT_INTERLEAVE                    = 0x7c
+	IFT_IP                            = 0x7e
+	IFT_IPFORWARD                     = 0x8e
+	IFT_IPOVERATM                     = 0x72
+	IFT_IPOVERCDLC                    = 0x6d
+	IFT_IPOVERCLAW                    = 0x6e
+	IFT_IPSWITCH                      = 0x4e
+	IFT_ISDN                          = 0x3f
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISDNS                         = 0x4b
+	IFT_ISDNU                         = 0x4c
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88025CRFPINT               = 0x62
+	IFT_ISO88025DTR                   = 0x56
+	IFT_ISO88025FIBER                 = 0x73
+	IFT_ISO88026                      = 0xa
+	IFT_ISUP                          = 0xb3
+	IFT_L2VLAN                        = 0x87
+	IFT_L3IPVLAN                      = 0x88
+	IFT_L3IPXVLAN                     = 0x89
+	IFT_LAPB                          = 0x10
+	IFT_LAPD                          = 0x4d
+	IFT_LAPF                          = 0x77
+	IFT_LINEGROUP                     = 0xd2
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MBIM                          = 0xfa
+	IFT_MEDIAMAILOVERIP               = 0x8b
+	IFT_MFSIGLINK                     = 0xa7
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_MPC                           = 0x71
+	IFT_MPLS                          = 0xa6
+	IFT_MPLSTUNNEL                    = 0x96
+	IFT_MSDSL                         = 0x8f
+	IFT_MVL                           = 0xbf
+	IFT_MYRINET                       = 0x63
+	IFT_NFAS                          = 0xaf
+	IFT_NSIP                          = 0x1b
+	IFT_OPTICALCHANNEL                = 0xc3
+	IFT_OPTICALTRANSPORT              = 0xc4
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PFLOG                         = 0xf5
+	IFT_PFLOW                         = 0xf9
+	IFT_PFSYNC                        = 0xf6
+	IFT_PLC                           = 0xae
+	IFT_PON155                        = 0xcf
+	IFT_PON622                        = 0xd0
+	IFT_POS                           = 0xab
+	IFT_PPP                           = 0x17
+	IFT_PPPMULTILINKBUNDLE            = 0x6c
+	IFT_PROPATM                       = 0xc5
+	IFT_PROPBWAP2MP                   = 0xb8
+	IFT_PROPCNLS                      = 0x59
+	IFT_PROPDOCSWIRELESSDOWNSTREAM    = 0xb5
+	IFT_PROPDOCSWIRELESSMACLAYER      = 0xb4
+	IFT_PROPDOCSWIRELESSUPSTREAM      = 0xb6
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPVIRTUAL                   = 0x35
+	IFT_PROPWIRELESSP2P               = 0x9d
+	IFT_PTPSERIAL                     = 0x16
+	IFT_PVC                           = 0xf2
+	IFT_Q2931                         = 0xc9
+	IFT_QLLC                          = 0x44
+	IFT_RADIOMAC                      = 0xbc
+	IFT_RADSL                         = 0x5f
+	IFT_REACHDSL                      = 0xc0
+	IFT_RFC1483                       = 0x9f
+	IFT_RS232                         = 0x21
+	IFT_RSRB                          = 0x4f
+	IFT_SDLC                          = 0x11
+	IFT_SDSL                          = 0x60
+	IFT_SHDSL                         = 0xa9
+	IFT_SIP                           = 0x1f
+	IFT_SIPSIG                        = 0xcc
+	IFT_SIPTG                         = 0xcb
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETOVERHEADCHANNEL          = 0xb9
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_SRP                           = 0x97
+	IFT_SS7SIGLINK                    = 0x9c
+	IFT_STACKTOSTACK                  = 0x6f
+	IFT_STARLAN                       = 0xb
+	IFT_T1                            = 0x12
+	IFT_TDLC                          = 0x74
+	IFT_TELINK                        = 0xc8
+	IFT_TERMPAD                       = 0x5b
+	IFT_TR008                         = 0xb0
+	IFT_TRANSPHDLC                    = 0x7b
+	IFT_TUNNEL                        = 0x83
+	IFT_ULTRA                         = 0x1d
+	IFT_USB                           = 0xa0
+	IFT_V11                           = 0x40
+	IFT_V35                           = 0x2d
+	IFT_V36                           = 0x41
+	IFT_V37                           = 0x78
+	IFT_VDSL                          = 0x61
+	IFT_VIRTUALIPADDRESS              = 0x70
+	IFT_VIRTUALTG                     = 0xca
+	IFT_VOICEDID                      = 0xd5
+	IFT_VOICEEM                       = 0x64
+	IFT_VOICEEMFGD                    = 0xd3
+	IFT_VOICEENCAP                    = 0x67
+	IFT_VOICEFGDEANA                  = 0xd4
+	IFT_VOICEFXO                      = 0x65
+	IFT_VOICEFXS                      = 0x66
+	IFT_VOICEOVERATM                  = 0x98
+	IFT_VOICEOVERCABLE                = 0xc6
+	IFT_VOICEOVERFRAMERELAY           = 0x99
+	IFT_VOICEOVERIP                   = 0x68
+	IFT_X213                          = 0x5d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25HUNTGROUP                  = 0x7a
+	IFT_X25MLP                        = 0x79
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+	IGNBRK                            = 0x1
+	IGNCR                             = 0x80
+	IGNPAR                            = 0x4
+	IMAXBEL                           = 0x2000
+	INLCR                             = 0x40
+	INPCK                             = 0x10
+	IN_CLASSA_HOST                    = 0xffffff
+	IN_CLASSA_MAX                     = 0x80
+	IN_CLASSA_NET                     = 0xff000000
+	IN_CLASSA_NSHIFT                  = 0x18
+	IN_CLASSB_HOST                    = 0xffff
+	IN_CLASSB_MAX                     = 0x10000
+	IN_CLASSB_NET                     = 0xffff0000
+	IN_CLASSB_NSHIFT                  = 0x10
+	IN_CLASSC_HOST                    = 0xff
+	IN_CLASSC_NET                     = 0xffffff00
+	IN_CLASSC_NSHIFT                  = 0x8
+	IN_CLASSD_HOST                    = 0xfffffff
+	IN_CLASSD_NET                     = 0xf0000000
+	IN_CLASSD_NSHIFT                  = 0x1c
+	IN_LOOPBACKNET                    = 0x7f
+	IN_RFC3021_HOST                   = 0x1
+	IN_RFC3021_NET                    = 0xfffffffe
+	IN_RFC3021_NSHIFT                 = 0x1f
+	IPPROTO_AH                        = 0x33
+	IPPROTO_CARP                      = 0x70
+	IPPROTO_DIVERT                    = 0x102
+	IPPROTO_DONE                      = 0x101
+	IPPROTO_DSTOPTS                   = 0x3c
+	IPPROTO_EGP                       = 0x8
+	IPPROTO_ENCAP                     = 0x62
+	IPPROTO_EON                       = 0x50
+	IPPROTO_ESP                       = 0x32
+	IPPROTO_ETHERIP                   = 0x61
+	IPPROTO_FRAGMENT                  = 0x2c
+	IPPROTO_GGP                       = 0x3
+	IPPROTO_GRE                       = 0x2f
+	IPPROTO_HOPOPTS                   = 0x0
+	IPPROTO_ICMP                      = 0x1
+	IPPROTO_ICMPV6                    = 0x3a
+	IPPROTO_IDP                       = 0x16
+	IPPROTO_IGMP                      = 0x2
+	IPPROTO_IP                        = 0x0
+	IPPROTO_IPCOMP                    = 0x6c
+	IPPROTO_IPIP                      = 0x4
+	IPPROTO_IPV4                      = 0x4
+	IPPROTO_IPV6                      = 0x29
+	IPPROTO_MAX                       = 0x100
+	IPPROTO_MAXID                     = 0x103
+	IPPROTO_MOBILE                    = 0x37
+	IPPROTO_MPLS                      = 0x89
+	IPPROTO_NONE                      = 0x3b
+	IPPROTO_PFSYNC                    = 0xf0
+	IPPROTO_PIM                       = 0x67
+	IPPROTO_PUP                       = 0xc
+	IPPROTO_RAW                       = 0xff
+	IPPROTO_ROUTING                   = 0x2b
+	IPPROTO_RSVP                      = 0x2e
+	IPPROTO_TCP                       = 0x6
+	IPPROTO_TP                        = 0x1d
+	IPPROTO_UDP                       = 0x11
+	IPV6_AUTH_LEVEL                   = 0x35
+	IPV6_AUTOFLOWLABEL                = 0x3b
+	IPV6_CHECKSUM                     = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS       = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP       = 0x1
+	IPV6_DEFHLIM                      = 0x40
+	IPV6_DONTFRAG                     = 0x3e
+	IPV6_DSTOPTS                      = 0x32
+	IPV6_ESP_NETWORK_LEVEL            = 0x37
+	IPV6_ESP_TRANS_LEVEL              = 0x36
+	IPV6_FAITH                        = 0x1d
+	IPV6_FLOWINFO_MASK                = 0xffffff0f
+	IPV6_FLOWLABEL_MASK               = 0xffff0f00
+	IPV6_FRAGTTL                      = 0x78
+	IPV6_HLIMDEC                      = 0x1
+	IPV6_HOPLIMIT                     = 0x2f
+	IPV6_HOPOPTS                      = 0x31
+	IPV6_IPCOMP_LEVEL                 = 0x3c
+	IPV6_JOIN_GROUP                   = 0xc
+	IPV6_LEAVE_GROUP                  = 0xd
+	IPV6_MAXHLIM                      = 0xff
+	IPV6_MAXPACKET                    = 0xffff
+	IPV6_MINHOPCOUNT                  = 0x41
+	IPV6_MMTU                         = 0x500
+	IPV6_MULTICAST_HOPS               = 0xa
+	IPV6_MULTICAST_IF                 = 0x9
+	IPV6_MULTICAST_LOOP               = 0xb
+	IPV6_NEXTHOP                      = 0x30
+	IPV6_OPTIONS                      = 0x1
+	IPV6_PATHMTU                      = 0x2c
+	IPV6_PIPEX                        = 0x3f
+	IPV6_PKTINFO                      = 0x2e
+	IPV6_PORTRANGE                    = 0xe
+	IPV6_PORTRANGE_DEFAULT            = 0x0
+	IPV6_PORTRANGE_HIGH               = 0x1
+	IPV6_PORTRANGE_LOW                = 0x2
+	IPV6_RECVDSTOPTS                  = 0x28
+	IPV6_RECVDSTPORT                  = 0x40
+	IPV6_RECVHOPLIMIT                 = 0x25
+	IPV6_RECVHOPOPTS                  = 0x27
+	IPV6_RECVPATHMTU                  = 0x2b
+	IPV6_RECVPKTINFO                  = 0x24
+	IPV6_RECVRTHDR                    = 0x26
+	IPV6_RECVTCLASS                   = 0x39
+	IPV6_RTABLE                       = 0x1021
+	IPV6_RTHDR                        = 0x33
+	IPV6_RTHDRDSTOPTS                 = 0x23
+	IPV6_RTHDR_LOOSE                  = 0x0
+	IPV6_RTHDR_STRICT                 = 0x1
+	IPV6_RTHDR_TYPE_0                 = 0x0
+	IPV6_SOCKOPT_RESERVED1            = 0x3
+	IPV6_TCLASS                       = 0x3d
+	IPV6_UNICAST_HOPS                 = 0x4
+	IPV6_USE_MIN_MTU                  = 0x2a
+	IPV6_V6ONLY                       = 0x1b
+	IPV6_VERSION                      = 0x60
+	IPV6_VERSION_MASK                 = 0xf0
+	IP_ADD_MEMBERSHIP                 = 0xc
+	IP_AUTH_LEVEL                     = 0x14
+	IP_DEFAULT_MULTICAST_LOOP         = 0x1
+	IP_DEFAULT_MULTICAST_TTL          = 0x1
+	IP_DF                             = 0x4000
+	IP_DROP_MEMBERSHIP                = 0xd
+	IP_ESP_NETWORK_LEVEL              = 0x16
+	IP_ESP_TRANS_LEVEL                = 0x15
+	IP_HDRINCL                        = 0x2
+	IP_IPCOMP_LEVEL                   = 0x1d
+	IP_IPDEFTTL                       = 0x25
+	IP_IPSECFLOWINFO                  = 0x24
+	IP_IPSEC_LOCAL_AUTH               = 0x1b
+	IP_IPSEC_LOCAL_CRED               = 0x19
+	IP_IPSEC_LOCAL_ID                 = 0x17
+	IP_IPSEC_REMOTE_AUTH              = 0x1c
+	IP_IPSEC_REMOTE_CRED              = 0x1a
+	IP_IPSEC_REMOTE_ID                = 0x18
+	IP_MAXPACKET                      = 0xffff
+	IP_MAX_MEMBERSHIPS                = 0xfff
+	IP_MF                             = 0x2000
+	IP_MINTTL                         = 0x20
+	IP_MIN_MEMBERSHIPS                = 0xf
+	IP_MSS                            = 0x240
+	IP_MULTICAST_IF                   = 0x9
+	IP_MULTICAST_LOOP                 = 0xb
+	IP_MULTICAST_TTL                  = 0xa
+	IP_OFFMASK                        = 0x1fff
+	IP_OPTIONS                        = 0x1
+	IP_PIPEX                          = 0x22
+	IP_PORTRANGE                      = 0x13
+	IP_PORTRANGE_DEFAULT              = 0x0
+	IP_PORTRANGE_HIGH                 = 0x1
+	IP_PORTRANGE_LOW                  = 0x2
+	IP_RECVDSTADDR                    = 0x7
+	IP_RECVDSTPORT                    = 0x21
+	IP_RECVIF                         = 0x1e
+	IP_RECVOPTS                       = 0x5
+	IP_RECVRETOPTS                    = 0x6
+	IP_RECVRTABLE                     = 0x23
+	IP_RECVTTL                        = 0x1f
+	IP_RETOPTS                        = 0x8
+	IP_RF                             = 0x8000
+	IP_RTABLE                         = 0x1021
+	IP_SENDSRCADDR                    = 0x7
+	IP_TOS                            = 0x3
+	IP_TTL                            = 0x4
+	ISIG                              = 0x80
+	ISTRIP                            = 0x20
+	IUCLC                             = 0x1000
+	IXANY                             = 0x800
+	IXOFF                             = 0x400
+	IXON                              = 0x200
+	KERN_HOSTNAME                     = 0xa
+	KERN_OSRELEASE                    = 0x2
+	KERN_OSTYPE                       = 0x1
+	KERN_VERSION                      = 0x4
+	LCNT_OVERLOAD_FLUSH               = 0x6
+	LOCK_EX                           = 0x2
+	LOCK_NB                           = 0x4
+	LOCK_SH                           = 0x1
+	LOCK_UN                           = 0x8
+	MADV_DONTNEED                     = 0x4
+	MADV_FREE                         = 0x6
+	MADV_NORMAL                       = 0x0
+	MADV_RANDOM                       = 0x1
+	MADV_SEQUENTIAL                   = 0x2
+	MADV_SPACEAVAIL                   = 0x5
+	MADV_WILLNEED                     = 0x3
+	MAP_ANON                          = 0x1000
+	MAP_ANONYMOUS                     = 0x1000
+	MAP_CONCEAL                       = 0x8000
+	MAP_COPY                          = 0x2
+	MAP_FILE                          = 0x0
+	MAP_FIXED                         = 0x10
+	MAP_FLAGMASK                      = 0xfff7
+	MAP_HASSEMAPHORE                  = 0x0
+	MAP_INHERIT                       = 0x0
+	MAP_INHERIT_COPY                  = 0x1
+	MAP_INHERIT_NONE                  = 0x2
+	MAP_INHERIT_SHARE                 = 0x0
+	MAP_INHERIT_ZERO                  = 0x3
+	MAP_NOEXTEND                      = 0x0
+	MAP_NORESERVE                     = 0x0
+	MAP_PRIVATE                       = 0x2
+	MAP_RENAME                        = 0x0
+	MAP_SHARED                        = 0x1
+	MAP_STACK                         = 0x4000
+	MAP_TRYFIXED                      = 0x0
+	MCL_CURRENT                       = 0x1
+	MCL_FUTURE                        = 0x2
+	MNT_ASYNC                         = 0x40
+	MNT_DEFEXPORTED                   = 0x200
+	MNT_DELEXPORT                     = 0x20000
+	MNT_DOOMED                        = 0x8000000
+	MNT_EXPORTANON                    = 0x400
+	MNT_EXPORTED                      = 0x100
+	MNT_EXRDONLY                      = 0x80
+	MNT_FORCE                         = 0x80000
+	MNT_LAZY                          = 0x3
+	MNT_LOCAL                         = 0x1000
+	MNT_NOATIME                       = 0x8000
+	MNT_NODEV                         = 0x10
+	MNT_NOEXEC                        = 0x4
+	MNT_NOPERM                        = 0x20
+	MNT_NOSUID                        = 0x8
+	MNT_NOWAIT                        = 0x2
+	MNT_QUOTA                         = 0x2000
+	MNT_RDONLY                        = 0x1
+	MNT_RELOAD                        = 0x40000
+	MNT_ROOTFS                        = 0x4000
+	MNT_SOFTDEP                       = 0x4000000
+	MNT_STALLED                       = 0x100000
+	MNT_SWAPPABLE                     = 0x200000
+	MNT_SYNCHRONOUS                   = 0x2
+	MNT_UPDATE                        = 0x10000
+	MNT_VISFLAGMASK                   = 0x400ffff
+	MNT_WAIT                          = 0x1
+	MNT_WANTRDWR                      = 0x2000000
+	MNT_WXALLOWED                     = 0x800
+	MSG_BCAST                         = 0x100
+	MSG_CMSG_CLOEXEC                  = 0x800
+	MSG_CTRUNC                        = 0x20
+	MSG_DONTROUTE                     = 0x4
+	MSG_DONTWAIT                      = 0x80
+	MSG_EOR                           = 0x8
+	MSG_MCAST                         = 0x200
+	MSG_NOSIGNAL                      = 0x400
+	MSG_OOB                           = 0x1
+	MSG_PEEK                          = 0x2
+	MSG_TRUNC                         = 0x10
+	MSG_WAITALL                       = 0x40
+	MS_ASYNC                          = 0x1
+	MS_INVALIDATE                     = 0x4
+	MS_SYNC                           = 0x2
+	NAME_MAX                          = 0xff
+	NET_RT_DUMP                       = 0x1
+	NET_RT_FLAGS                      = 0x2
+	NET_RT_IFLIST                     = 0x3
+	NET_RT_IFNAMES                    = 0x6
+	NET_RT_MAXID                      = 0x7
+	NET_RT_STATS                      = 0x4
+	NET_RT_TABLE                      = 0x5
+	NFDBITS                           = 0x20
+	NOFLSH                            = 0x80000000
+	NOKERNINFO                        = 0x2000000
+	NOTE_ATTRIB                       = 0x8
+	NOTE_CHANGE                       = 0x1
+	NOTE_CHILD                        = 0x4
+	NOTE_DELETE                       = 0x1
+	NOTE_EOF                          = 0x2
+	NOTE_EXEC                         = 0x20000000
+	NOTE_EXIT                         = 0x80000000
+	NOTE_EXTEND                       = 0x4
+	NOTE_FORK                         = 0x40000000
+	NOTE_LINK                         = 0x10
+	NOTE_LOWAT                        = 0x1
+	NOTE_PCTRLMASK                    = 0xf0000000
+	NOTE_PDATAMASK                    = 0xfffff
+	NOTE_RENAME                       = 0x20
+	NOTE_REVOKE                       = 0x40
+	NOTE_TRACK                        = 0x1
+	NOTE_TRACKERR                     = 0x2
+	NOTE_TRUNCATE                     = 0x80
+	NOTE_WRITE                        = 0x2
+	OCRNL                             = 0x10
+	OLCUC                             = 0x20
+	ONLCR                             = 0x2
+	ONLRET                            = 0x80
+	ONOCR                             = 0x40
+	ONOEOT                            = 0x8
+	OPOST                             = 0x1
+	OXTABS                            = 0x4
+	O_ACCMODE                         = 0x3
+	O_APPEND                          = 0x8
+	O_ASYNC                           = 0x40
+	O_CLOEXEC                         = 0x10000
+	O_CREAT                           = 0x200
+	O_DIRECTORY                       = 0x20000
+	O_DSYNC                           = 0x80
+	O_EXCL                            = 0x800
+	O_EXLOCK                          = 0x20
+	O_FSYNC                           = 0x80
+	O_NDELAY                          = 0x4
+	O_NOCTTY                          = 0x8000
+	O_NOFOLLOW                        = 0x100
+	O_NONBLOCK                        = 0x4
+	O_RDONLY                          = 0x0
+	O_RDWR                            = 0x2
+	O_RSYNC                           = 0x80
+	O_SHLOCK                          = 0x10
+	O_SYNC                            = 0x80
+	O_TRUNC                           = 0x400
+	O_WRONLY                          = 0x1
+	PARENB                            = 0x1000
+	PARMRK                            = 0x8
+	PARODD                            = 0x2000
+	PENDIN                            = 0x20000000
+	PF_FLUSH                          = 0x1
+	PRIO_PGRP                         = 0x1
+	PRIO_PROCESS                      = 0x0
+	PRIO_USER                         = 0x2
+	PROT_EXEC                         = 0x4
+	PROT_NONE                         = 0x0
+	PROT_READ                         = 0x1
+	PROT_WRITE                        = 0x2
+	RLIMIT_CORE                       = 0x4
+	RLIMIT_CPU                        = 0x0
+	RLIMIT_DATA                       = 0x2
+	RLIMIT_FSIZE                      = 0x1
+	RLIMIT_MEMLOCK                    = 0x6
+	RLIMIT_NOFILE                     = 0x8
+	RLIMIT_NPROC                      = 0x7
+	RLIMIT_RSS                        = 0x5
+	RLIMIT_STACK                      = 0x3
+	RLIM_INFINITY                     = 0x7fffffffffffffff
+	RTAX_AUTHOR                       = 0x6
+	RTAX_BFD                          = 0xb
+	RTAX_BRD                          = 0x7
+	RTAX_DNS                          = 0xc
+	RTAX_DST                          = 0x0
+	RTAX_GATEWAY                      = 0x1
+	RTAX_GENMASK                      = 0x3
+	RTAX_IFA                          = 0x5
+	RTAX_IFP                          = 0x4
+	RTAX_LABEL                        = 0xa
+	RTAX_MAX                          = 0xf
+	RTAX_NETMASK                      = 0x2
+	RTAX_SEARCH                       = 0xe
+	RTAX_SRC                          = 0x8
+	RTAX_SRCMASK                      = 0x9
+	RTAX_STATIC                       = 0xd
+	RTA_AUTHOR                        = 0x40
+	RTA_BFD                           = 0x800
+	RTA_BRD                           = 0x80
+	RTA_DNS                           = 0x1000
+	RTA_DST                           = 0x1
+	RTA_GATEWAY                       = 0x2
+	RTA_GENMASK                       = 0x8
+	RTA_IFA                           = 0x20
+	RTA_IFP                           = 0x10
+	RTA_LABEL                         = 0x400
+	RTA_NETMASK                       = 0x4
+	RTA_SEARCH                        = 0x4000
+	RTA_SRC                           = 0x100
+	RTA_SRCMASK                       = 0x200
+	RTA_STATIC                        = 0x2000
+	RTF_ANNOUNCE                      = 0x4000
+	RTF_BFD                           = 0x1000000
+	RTF_BLACKHOLE                     = 0x1000
+	RTF_BROADCAST                     = 0x400000
+	RTF_CACHED                        = 0x20000
+	RTF_CLONED                        = 0x10000
+	RTF_CLONING                       = 0x100
+	RTF_CONNECTED                     = 0x800000
+	RTF_DONE                          = 0x40
+	RTF_DYNAMIC                       = 0x10
+	RTF_FMASK                         = 0x110fc08
+	RTF_GATEWAY                       = 0x2
+	RTF_HOST                          = 0x4
+	RTF_LLINFO                        = 0x400
+	RTF_LOCAL                         = 0x200000
+	RTF_MODIFIED                      = 0x20
+	RTF_MPATH                         = 0x40000
+	RTF_MPLS                          = 0x100000
+	RTF_MULTICAST                     = 0x200
+	RTF_PERMANENT_ARP                 = 0x2000
+	RTF_PROTO1                        = 0x8000
+	RTF_PROTO2                        = 0x4000
+	RTF_PROTO3                        = 0x2000
+	RTF_REJECT                        = 0x8
+	RTF_STATIC                        = 0x800
+	RTF_UP                            = 0x1
+	RTF_USETRAILERS                   = 0x8000
+	RTM_80211INFO                     = 0x15
+	RTM_ADD                           = 0x1
+	RTM_BFD                           = 0x12
+	RTM_CHANGE                        = 0x3
+	RTM_CHGADDRATTR                   = 0x14
+	RTM_DELADDR                       = 0xd
+	RTM_DELETE                        = 0x2
+	RTM_DESYNC                        = 0x10
+	RTM_GET                           = 0x4
+	RTM_IFANNOUNCE                    = 0xf
+	RTM_IFINFO                        = 0xe
+	RTM_INVALIDATE                    = 0x11
+	RTM_LOSING                        = 0x5
+	RTM_MAXSIZE                       = 0x800
+	RTM_MISS                          = 0x7
+	RTM_NEWADDR                       = 0xc
+	RTM_PROPOSAL                      = 0x13
+	RTM_REDIRECT                      = 0x6
+	RTM_RESOLVE                       = 0xb
+	RTM_RTTUNIT                       = 0xf4240
+	RTM_VERSION                       = 0x5
+	RTV_EXPIRE                        = 0x4
+	RTV_HOPCOUNT                      = 0x2
+	RTV_MTU                           = 0x1
+	RTV_RPIPE                         = 0x8
+	RTV_RTT                           = 0x40
+	RTV_RTTVAR                        = 0x80
+	RTV_SPIPE                         = 0x10
+	RTV_SSTHRESH                      = 0x20
+	RT_TABLEID_BITS                   = 0x8
+	RT_TABLEID_MASK                   = 0xff
+	RT_TABLEID_MAX                    = 0xff
+	RUSAGE_CHILDREN                   = -0x1
+	RUSAGE_SELF                       = 0x0
+	RUSAGE_THREAD                     = 0x1
+	SCM_RIGHTS                        = 0x1
+	SCM_TIMESTAMP                     = 0x4
+	SHUT_RD                           = 0x0
+	SHUT_RDWR                         = 0x2
+	SHUT_WR                           = 0x1
+	SIOCADDMULTI                      = 0x80206931
+	SIOCAIFADDR                       = 0x8040691a
+	SIOCAIFGROUP                      = 0x80286987
+	SIOCATMARK                        = 0x40047307
+	SIOCBRDGADD                       = 0x8060693c
+	SIOCBRDGADDL                      = 0x80606949
+	SIOCBRDGADDS                      = 0x80606941
+	SIOCBRDGARL                       = 0x808c694d
+	SIOCBRDGDADDR                     = 0x81286947
+	SIOCBRDGDEL                       = 0x8060693d
+	SIOCBRDGDELS                      = 0x80606942
+	SIOCBRDGFLUSH                     = 0x80606948
+	SIOCBRDGFRL                       = 0x808c694e
+	SIOCBRDGGCACHE                    = 0xc0186941
+	SIOCBRDGGFD                       = 0xc0186952
+	SIOCBRDGGHT                       = 0xc0186951
+	SIOCBRDGGIFFLGS                   = 0xc060693e
+	SIOCBRDGGMA                       = 0xc0186953
+	SIOCBRDGGPARAM                    = 0xc0406958
+	SIOCBRDGGPRI                      = 0xc0186950
+	SIOCBRDGGRL                       = 0xc030694f
+	SIOCBRDGGTO                       = 0xc0186946
+	SIOCBRDGIFS                       = 0xc0606942
+	SIOCBRDGRTS                       = 0xc0206943
+	SIOCBRDGSADDR                     = 0xc1286944
+	SIOCBRDGSCACHE                    = 0x80186940
+	SIOCBRDGSFD                       = 0x80186952
+	SIOCBRDGSHT                       = 0x80186951
+	SIOCBRDGSIFCOST                   = 0x80606955
+	SIOCBRDGSIFFLGS                   = 0x8060693f
+	SIOCBRDGSIFPRIO                   = 0x80606954
+	SIOCBRDGSIFPROT                   = 0x8060694a
+	SIOCBRDGSMA                       = 0x80186953
+	SIOCBRDGSPRI                      = 0x80186950
+	SIOCBRDGSPROTO                    = 0x8018695a
+	SIOCBRDGSTO                       = 0x80186945
+	SIOCBRDGSTXHC                     = 0x80186959
+	SIOCDELLABEL                      = 0x80206997
+	SIOCDELMULTI                      = 0x80206932
+	SIOCDIFADDR                       = 0x80206919
+	SIOCDIFGROUP                      = 0x80286989
+	SIOCDIFPARENT                     = 0x802069b4
+	SIOCDIFPHYADDR                    = 0x80206949
+	SIOCDPWE3NEIGHBOR                 = 0x802069de
+	SIOCDVNETID                       = 0x802069af
+	SIOCGETKALIVE                     = 0xc01869a4
+	SIOCGETLABEL                      = 0x8020699a
+	SIOCGETMPWCFG                     = 0xc02069ae
+	SIOCGETPFLOW                      = 0xc02069fe
+	SIOCGETPFSYNC                     = 0xc02069f8
+	SIOCGETSGCNT                      = 0xc0207534
+	SIOCGETVIFCNT                     = 0xc0287533
+	SIOCGETVLAN                       = 0xc0206990
+	SIOCGIFADDR                       = 0xc0206921
+	SIOCGIFBRDADDR                    = 0xc0206923
+	SIOCGIFCONF                       = 0xc0106924
+	SIOCGIFDATA                       = 0xc020691b
+	SIOCGIFDESCR                      = 0xc0206981
+	SIOCGIFDSTADDR                    = 0xc0206922
+	SIOCGIFFLAGS                      = 0xc0206911
+	SIOCGIFGATTR                      = 0xc028698b
+	SIOCGIFGENERIC                    = 0xc020693a
+	SIOCGIFGLIST                      = 0xc028698d
+	SIOCGIFGMEMB                      = 0xc028698a
+	SIOCGIFGROUP                      = 0xc0286988
+	SIOCGIFHARDMTU                    = 0xc02069a5
+	SIOCGIFLLPRIO                     = 0xc02069b6
+	SIOCGIFMEDIA                      = 0xc0406938
+	SIOCGIFMETRIC                     = 0xc0206917
+	SIOCGIFMTU                        = 0xc020697e
+	SIOCGIFNETMASK                    = 0xc0206925
+	SIOCGIFPAIR                       = 0xc02069b1
+	SIOCGIFPARENT                     = 0xc02069b3
+	SIOCGIFPRIORITY                   = 0xc020699c
+	SIOCGIFRDOMAIN                    = 0xc02069a0
+	SIOCGIFRTLABEL                    = 0xc0206983
+	SIOCGIFRXR                        = 0x802069aa
+	SIOCGIFSFFPAGE                    = 0xc1126939
+	SIOCGIFXFLAGS                     = 0xc020699e
+	SIOCGLIFPHYADDR                   = 0xc218694b
+	SIOCGLIFPHYDF                     = 0xc02069c2
+	SIOCGLIFPHYECN                    = 0xc02069c8
+	SIOCGLIFPHYRTABLE                 = 0xc02069a2
+	SIOCGLIFPHYTTL                    = 0xc02069a9
+	SIOCGPGRP                         = 0x40047309
+	SIOCGPWE3                         = 0xc0206998
+	SIOCGPWE3CTRLWORD                 = 0xc02069dc
+	SIOCGPWE3FAT                      = 0xc02069dd
+	SIOCGPWE3NEIGHBOR                 = 0xc21869de
+	SIOCGSPPPPARAMS                   = 0xc0206994
+	SIOCGTXHPRIO                      = 0xc02069c6
+	SIOCGUMBINFO                      = 0xc02069be
+	SIOCGUMBPARAM                     = 0xc02069c0
+	SIOCGVH                           = 0xc02069f6
+	SIOCGVNETFLOWID                   = 0xc02069c4
+	SIOCGVNETID                       = 0xc02069a7
+	SIOCIFAFATTACH                    = 0x801169ab
+	SIOCIFAFDETACH                    = 0x801169ac
+	SIOCIFCREATE                      = 0x8020697a
+	SIOCIFDESTROY                     = 0x80206979
+	SIOCIFGCLONERS                    = 0xc0106978
+	SIOCSETKALIVE                     = 0x801869a3
+	SIOCSETLABEL                      = 0x80206999
+	SIOCSETMPWCFG                     = 0x802069ad
+	SIOCSETPFLOW                      = 0x802069fd
+	SIOCSETPFSYNC                     = 0x802069f7
+	SIOCSETVLAN                       = 0x8020698f
+	SIOCSIFADDR                       = 0x8020690c
+	SIOCSIFBRDADDR                    = 0x80206913
+	SIOCSIFDESCR                      = 0x80206980
+	SIOCSIFDSTADDR                    = 0x8020690e
+	SIOCSIFFLAGS                      = 0x80206910
+	SIOCSIFGATTR                      = 0x8028698c
+	SIOCSIFGENERIC                    = 0x80206939
+	SIOCSIFLLADDR                     = 0x8020691f
+	SIOCSIFLLPRIO                     = 0x802069b5
+	SIOCSIFMEDIA                      = 0xc0206937
+	SIOCSIFMETRIC                     = 0x80206918
+	SIOCSIFMTU                        = 0x8020697f
+	SIOCSIFNETMASK                    = 0x80206916
+	SIOCSIFPAIR                       = 0x802069b0
+	SIOCSIFPARENT                     = 0x802069b2
+	SIOCSIFPRIORITY                   = 0x8020699b
+	SIOCSIFRDOMAIN                    = 0x8020699f
+	SIOCSIFRTLABEL                    = 0x80206982
+	SIOCSIFXFLAGS                     = 0x8020699d
+	SIOCSLIFPHYADDR                   = 0x8218694a
+	SIOCSLIFPHYDF                     = 0x802069c1
+	SIOCSLIFPHYECN                    = 0x802069c7
+	SIOCSLIFPHYRTABLE                 = 0x802069a1
+	SIOCSLIFPHYTTL                    = 0x802069a8
+	SIOCSPGRP                         = 0x80047308
+	SIOCSPWE3CTRLWORD                 = 0x802069dc
+	SIOCSPWE3FAT                      = 0x802069dd
+	SIOCSPWE3NEIGHBOR                 = 0x821869de
+	SIOCSSPPPPARAMS                   = 0x80206993
+	SIOCSTXHPRIO                      = 0x802069c5
+	SIOCSUMBPARAM                     = 0x802069bf
+	SIOCSVH                           = 0xc02069f5
+	SIOCSVNETFLOWID                   = 0x802069c3
+	SIOCSVNETID                       = 0x802069a6
+	SIOCSWGDPID                       = 0xc018695b
+	SIOCSWGMAXFLOW                    = 0xc0186960
+	SIOCSWGMAXGROUP                   = 0xc018695d
+	SIOCSWSDPID                       = 0x8018695c
+	SIOCSWSPORTNO                     = 0xc060695f
+	SOCK_CLOEXEC                      = 0x8000
+	SOCK_DGRAM                        = 0x2
+	SOCK_DNS                          = 0x1000
+	SOCK_NONBLOCK                     = 0x4000
+	SOCK_RAW                          = 0x3
+	SOCK_RDM                          = 0x4
+	SOCK_SEQPACKET                    = 0x5
+	SOCK_STREAM                       = 0x1
+	SOL_SOCKET                        = 0xffff
+	SOMAXCONN                         = 0x80
+	SO_ACCEPTCONN                     = 0x2
+	SO_BINDANY                        = 0x1000
+	SO_BROADCAST                      = 0x20
+	SO_DEBUG                          = 0x1
+	SO_DONTROUTE                      = 0x10
+	SO_ERROR                          = 0x1007
+	SO_KEEPALIVE                      = 0x8
+	SO_LINGER                         = 0x80
+	SO_NETPROC                        = 0x1020
+	SO_OOBINLINE                      = 0x100
+	SO_PEERCRED                       = 0x1022
+	SO_RCVBUF                         = 0x1002
+	SO_RCVLOWAT                       = 0x1004
+	SO_RCVTIMEO                       = 0x1006
+	SO_REUSEADDR                      = 0x4
+	SO_REUSEPORT                      = 0x200
+	SO_RTABLE                         = 0x1021
+	SO_SNDBUF                         = 0x1001
+	SO_SNDLOWAT                       = 0x1003
+	SO_SNDTIMEO                       = 0x1005
+	SO_SPLICE                         = 0x1023
+	SO_TIMESTAMP                      = 0x800
+	SO_TYPE                           = 0x1008
+	SO_USELOOPBACK                    = 0x40
+	SO_ZEROIZE                        = 0x2000
+	S_BLKSIZE                         = 0x200
+	S_IEXEC                           = 0x40
+	S_IFBLK                           = 0x6000
+	S_IFCHR                           = 0x2000
+	S_IFDIR                           = 0x4000
+	S_IFIFO                           = 0x1000
+	S_IFLNK                           = 0xa000
+	S_IFMT                            = 0xf000
+	S_IFREG                           = 0x8000
+	S_IFSOCK                          = 0xc000
+	S_IREAD                           = 0x100
+	S_IRGRP                           = 0x20
+	S_IROTH                           = 0x4
+	S_IRUSR                           = 0x100
+	S_IRWXG                           = 0x38
+	S_IRWXO                           = 0x7
+	S_IRWXU                           = 0x1c0
+	S_ISGID                           = 0x400
+	S_ISTXT                           = 0x200
+	S_ISUID                           = 0x800
+	S_ISVTX                           = 0x200
+	S_IWGRP                           = 0x10
+	S_IWOTH                           = 0x2
+	S_IWRITE                          = 0x80
+	S_IWUSR                           = 0x80
+	S_IXGRP                           = 0x8
+	S_IXOTH                           = 0x1
+	S_IXUSR                           = 0x40
+	TCIFLUSH                          = 0x1
+	TCIOFF                            = 0x3
+	TCIOFLUSH                         = 0x3
+	TCION                             = 0x4
+	TCOFLUSH                          = 0x2
+	TCOOFF                            = 0x1
+	TCOON                             = 0x2
+	TCP_MAXBURST                      = 0x4
+	TCP_MAXSEG                        = 0x2
+	TCP_MAXWIN                        = 0xffff
+	TCP_MAX_SACK                      = 0x3
+	TCP_MAX_WINSHIFT                  = 0xe
+	TCP_MD5SIG                        = 0x4
+	TCP_MSS                           = 0x200
+	TCP_NODELAY                       = 0x1
+	TCP_NOPUSH                        = 0x10
+	TCP_SACK_ENABLE                   = 0x8
+	TCSAFLUSH                         = 0x2
+	TIMER_ABSTIME                     = 0x1
+	TIMER_RELTIME                     = 0x0
+	TIOCCBRK                          = 0x2000747a
+	TIOCCDTR                          = 0x20007478
+	TIOCCHKVERAUTH                    = 0x2000741e
+	TIOCCLRVERAUTH                    = 0x2000741d
+	TIOCCONS                          = 0x80047462
+	TIOCDRAIN                         = 0x2000745e
+	TIOCEXCL                          = 0x2000740d
+	TIOCEXT                           = 0x80047460
+	TIOCFLAG_CLOCAL                   = 0x2
+	TIOCFLAG_CRTSCTS                  = 0x4
+	TIOCFLAG_MDMBUF                   = 0x8
+	TIOCFLAG_PPS                      = 0x10
+	TIOCFLAG_SOFTCAR                  = 0x1
+	TIOCFLUSH                         = 0x80047410
+	TIOCGETA                          = 0x402c7413
+	TIOCGETD                          = 0x4004741a
+	TIOCGFLAGS                        = 0x4004745d
+	TIOCGPGRP                         = 0x40047477
+	TIOCGSID                          = 0x40047463
+	TIOCGTSTAMP                       = 0x4010745b
+	TIOCGWINSZ                        = 0x40087468
+	TIOCMBIC                          = 0x8004746b
+	TIOCMBIS                          = 0x8004746c
+	TIOCMGET                          = 0x4004746a
+	TIOCMODG                          = 0x4004746a
+	TIOCMODS                          = 0x8004746d
+	TIOCMSET                          = 0x8004746d
+	TIOCM_CAR                         = 0x40
+	TIOCM_CD                          = 0x40
+	TIOCM_CTS                         = 0x20
+	TIOCM_DSR                         = 0x100
+	TIOCM_DTR                         = 0x2
+	TIOCM_LE                          = 0x1
+	TIOCM_RI                          = 0x80
+	TIOCM_RNG                         = 0x80
+	TIOCM_RTS                         = 0x4
+	TIOCM_SR                          = 0x10
+	TIOCM_ST                          = 0x8
+	TIOCNOTTY                         = 0x20007471
+	TIOCNXCL                          = 0x2000740e
+	TIOCOUTQ                          = 0x40047473
+	TIOCPKT                           = 0x80047470
+	TIOCPKT_DATA                      = 0x0
+	TIOCPKT_DOSTOP                    = 0x20
+	TIOCPKT_FLUSHREAD                 = 0x1
+	TIOCPKT_FLUSHWRITE                = 0x2
+	TIOCPKT_IOCTL                     = 0x40
+	TIOCPKT_NOSTOP                    = 0x10
+	TIOCPKT_START                     = 0x8
+	TIOCPKT_STOP                      = 0x4
+	TIOCREMOTE                        = 0x80047469
+	TIOCSBRK                          = 0x2000747b
+	TIOCSCTTY                         = 0x20007461
+	TIOCSDTR                          = 0x20007479
+	TIOCSETA                          = 0x802c7414
+	TIOCSETAF                         = 0x802c7416
+	TIOCSETAW                         = 0x802c7415
+	TIOCSETD                          = 0x8004741b
+	TIOCSETVERAUTH                    = 0x8004741c
+	TIOCSFLAGS                        = 0x8004745c
+	TIOCSIG                           = 0x8004745f
+	TIOCSPGRP                         = 0x80047476
+	TIOCSTART                         = 0x2000746e
+	TIOCSTAT                          = 0x20007465
+	TIOCSTOP                          = 0x2000746f
+	TIOCSTSTAMP                       = 0x8008745a
+	TIOCSWINSZ                        = 0x80087467
+	TIOCUCNTL                         = 0x80047466
+	TIOCUCNTL_CBRK                    = 0x7a
+	TIOCUCNTL_SBRK                    = 0x7b
+	TOSTOP                            = 0x400000
+	UTIME_NOW                         = -0x2
+	UTIME_OMIT                        = -0x1
+	VDISCARD                          = 0xf
+	VDSUSP                            = 0xb
+	VEOF                              = 0x0
+	VEOL                              = 0x1
+	VEOL2                             = 0x2
+	VERASE                            = 0x3
+	VINTR                             = 0x8
+	VKILL                             = 0x5
+	VLNEXT                            = 0xe
+	VMIN                              = 0x10
+	VM_ANONMIN                        = 0x7
+	VM_LOADAVG                        = 0x2
+	VM_MALLOC_CONF                    = 0xc
+	VM_MAXID                          = 0xd
+	VM_MAXSLP                         = 0xa
+	VM_METER                          = 0x1
+	VM_NKMEMPAGES                     = 0x6
+	VM_PSSTRINGS                      = 0x3
+	VM_SWAPENCRYPT                    = 0x5
+	VM_USPACE                         = 0xb
+	VM_UVMEXP                         = 0x4
+	VM_VNODEMIN                       = 0x9
+	VM_VTEXTMIN                       = 0x8
+	VQUIT                             = 0x9
+	VREPRINT                          = 0x6
+	VSTART                            = 0xc
+	VSTATUS                           = 0x12
+	VSTOP                             = 0xd
+	VSUSP                             = 0xa
+	VTIME                             = 0x11
+	VWERASE                           = 0x4
+	WALTSIG                           = 0x4
+	WCONTINUED                        = 0x8
+	WCOREFLAG                         = 0x80
+	WNOHANG                           = 0x1
+	WUNTRACED                         = 0x2
+	XCASE                             = 0x1000000
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADF           = syscall.Errno(0x9)
+	EBADMSG         = syscall.Errno(0x5c)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x58)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDOM            = syscall.Errno(0x21)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x59)
+	EILSEQ          = syscall.Errno(0x54)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EIPSEC          = syscall.Errno(0x52)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x5f)
+	ELOOP           = syscall.Errno(0x3e)
+	EMEDIUMTYPE     = syscall.Errno(0x56)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x53)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOMEDIUM       = syscall.Errno(0x55)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x5a)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTRECOVERABLE = syscall.Errno(0x5d)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x5b)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x2d)
+	EOVERFLOW       = syscall.Errno(0x57)
+	EOWNERDEAD      = syscall.Errno(0x5e)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTO          = syscall.Errno(0x5f)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTHR    = syscall.Signal(0x20)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "EAGAIN", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "EOPNOTSUPP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "operation timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disk quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC program not available"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EIPSEC", "IPsec processing failure"},
+	{83, "ENOATTR", "attribute not found"},
+	{84, "EILSEQ", "illegal byte sequence"},
+	{85, "ENOMEDIUM", "no medium found"},
+	{86, "EMEDIUMTYPE", "wrong medium type"},
+	{87, "EOVERFLOW", "value too large to be stored in data type"},
+	{88, "ECANCELED", "operation canceled"},
+	{89, "EIDRM", "identifier removed"},
+	{90, "ENOMSG", "no message of desired type"},
+	{91, "ENOTSUP", "not supported"},
+	{92, "EBADMSG", "bad message"},
+	{93, "ENOTRECOVERABLE", "state not recoverable"},
+	{94, "EOWNERDEAD", "previous owner died"},
+	{95, "ELAST", "protocol error"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGABRT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "suspended (signal)"},
+	{18, "SIGTSTP", "suspended"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+	{32, "SIGTHR", "thread AST"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_mips64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_mips64.go
new file mode 100644
index 000000000..a74639a46
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_openbsd_mips64.go
@@ -0,0 +1,1862 @@
+// mkerrors.sh -m64
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build mips64,openbsd
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -m64 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_APPLETALK                      = 0x10
+	AF_BLUETOOTH                      = 0x20
+	AF_CCITT                          = 0xa
+	AF_CHAOS                          = 0x5
+	AF_CNT                            = 0x15
+	AF_COIP                           = 0x14
+	AF_DATAKIT                        = 0x9
+	AF_DECnet                         = 0xc
+	AF_DLI                            = 0xd
+	AF_E164                           = 0x1a
+	AF_ECMA                           = 0x8
+	AF_ENCAP                          = 0x1c
+	AF_HYLINK                         = 0xf
+	AF_IMPLINK                        = 0x3
+	AF_INET                           = 0x2
+	AF_INET6                          = 0x18
+	AF_IPX                            = 0x17
+	AF_ISDN                           = 0x1a
+	AF_ISO                            = 0x7
+	AF_KEY                            = 0x1e
+	AF_LAT                            = 0xe
+	AF_LINK                           = 0x12
+	AF_LOCAL                          = 0x1
+	AF_MAX                            = 0x24
+	AF_MPLS                           = 0x21
+	AF_NATM                           = 0x1b
+	AF_NS                             = 0x6
+	AF_OSI                            = 0x7
+	AF_PUP                            = 0x4
+	AF_ROUTE                          = 0x11
+	AF_SIP                            = 0x1d
+	AF_SNA                            = 0xb
+	AF_UNIX                           = 0x1
+	AF_UNSPEC                         = 0x0
+	ALTWERASE                         = 0x200
+	ARPHRD_ETHER                      = 0x1
+	ARPHRD_FRELAY                     = 0xf
+	ARPHRD_IEEE1394                   = 0x18
+	ARPHRD_IEEE802                    = 0x6
+	B0                                = 0x0
+	B110                              = 0x6e
+	B115200                           = 0x1c200
+	B1200                             = 0x4b0
+	B134                              = 0x86
+	B14400                            = 0x3840
+	B150                              = 0x96
+	B1800                             = 0x708
+	B19200                            = 0x4b00
+	B200                              = 0xc8
+	B230400                           = 0x38400
+	B2400                             = 0x960
+	B28800                            = 0x7080
+	B300                              = 0x12c
+	B38400                            = 0x9600
+	B4800                             = 0x12c0
+	B50                               = 0x32
+	B57600                            = 0xe100
+	B600                              = 0x258
+	B7200                             = 0x1c20
+	B75                               = 0x4b
+	B76800                            = 0x12c00
+	B9600                             = 0x2580
+	BIOCFLUSH                         = 0x20004268
+	BIOCGBLEN                         = 0x40044266
+	BIOCGDIRFILT                      = 0x4004427c
+	BIOCGDLT                          = 0x4004426a
+	BIOCGDLTLIST                      = 0xc010427b
+	BIOCGETIF                         = 0x4020426b
+	BIOCGFILDROP                      = 0x40044278
+	BIOCGHDRCMPLT                     = 0x40044274
+	BIOCGRSIG                         = 0x40044273
+	BIOCGRTIMEOUT                     = 0x4010426e
+	BIOCGSTATS                        = 0x4008426f
+	BIOCIMMEDIATE                     = 0x80044270
+	BIOCLOCK                          = 0x20004276
+	BIOCPROMISC                       = 0x20004269
+	BIOCSBLEN                         = 0xc0044266
+	BIOCSDIRFILT                      = 0x8004427d
+	BIOCSDLT                          = 0x8004427a
+	BIOCSETF                          = 0x80104267
+	BIOCSETIF                         = 0x8020426c
+	BIOCSETWF                         = 0x80104277
+	BIOCSFILDROP                      = 0x80044279
+	BIOCSHDRCMPLT                     = 0x80044275
+	BIOCSRSIG                         = 0x80044272
+	BIOCSRTIMEOUT                     = 0x8010426d
+	BIOCVERSION                       = 0x40044271
+	BPF_A                             = 0x10
+	BPF_ABS                           = 0x20
+	BPF_ADD                           = 0x0
+	BPF_ALIGNMENT                     = 0x4
+	BPF_ALU                           = 0x4
+	BPF_AND                           = 0x50
+	BPF_B                             = 0x10
+	BPF_DIRECTION_IN                  = 0x1
+	BPF_DIRECTION_OUT                 = 0x2
+	BPF_DIV                           = 0x30
+	BPF_FILDROP_CAPTURE               = 0x1
+	BPF_FILDROP_DROP                  = 0x2
+	BPF_FILDROP_PASS                  = 0x0
+	BPF_H                             = 0x8
+	BPF_IMM                           = 0x0
+	BPF_IND                           = 0x40
+	BPF_JA                            = 0x0
+	BPF_JEQ                           = 0x10
+	BPF_JGE                           = 0x30
+	BPF_JGT                           = 0x20
+	BPF_JMP                           = 0x5
+	BPF_JSET                          = 0x40
+	BPF_K                             = 0x0
+	BPF_LD                            = 0x0
+	BPF_LDX                           = 0x1
+	BPF_LEN                           = 0x80
+	BPF_LSH                           = 0x60
+	BPF_MAJOR_VERSION                 = 0x1
+	BPF_MAXBUFSIZE                    = 0x200000
+	BPF_MAXINSNS                      = 0x200
+	BPF_MEM                           = 0x60
+	BPF_MEMWORDS                      = 0x10
+	BPF_MINBUFSIZE                    = 0x20
+	BPF_MINOR_VERSION                 = 0x1
+	BPF_MISC                          = 0x7
+	BPF_MSH                           = 0xa0
+	BPF_MUL                           = 0x20
+	BPF_NEG                           = 0x80
+	BPF_OR                            = 0x40
+	BPF_RELEASE                       = 0x30bb6
+	BPF_RET                           = 0x6
+	BPF_RSH                           = 0x70
+	BPF_ST                            = 0x2
+	BPF_STX                           = 0x3
+	BPF_SUB                           = 0x10
+	BPF_TAX                           = 0x0
+	BPF_TXA                           = 0x80
+	BPF_W                             = 0x0
+	BPF_X                             = 0x8
+	BRKINT                            = 0x2
+	CFLUSH                            = 0xf
+	CLOCAL                            = 0x8000
+	CLOCK_BOOTTIME                    = 0x6
+	CLOCK_MONOTONIC                   = 0x3
+	CLOCK_PROCESS_CPUTIME_ID          = 0x2
+	CLOCK_REALTIME                    = 0x0
+	CLOCK_THREAD_CPUTIME_ID           = 0x4
+	CLOCK_UPTIME                      = 0x5
+	CPUSTATES                         = 0x6
+	CP_IDLE                           = 0x5
+	CP_INTR                           = 0x4
+	CP_NICE                           = 0x1
+	CP_SPIN                           = 0x3
+	CP_SYS                            = 0x2
+	CP_USER                           = 0x0
+	CREAD                             = 0x800
+	CRTSCTS                           = 0x10000
+	CS5                               = 0x0
+	CS6                               = 0x100
+	CS7                               = 0x200
+	CS8                               = 0x300
+	CSIZE                             = 0x300
+	CSTART                            = 0x11
+	CSTATUS                           = 0xff
+	CSTOP                             = 0x13
+	CSTOPB                            = 0x400
+	CSUSP                             = 0x1a
+	CTL_HW                            = 0x6
+	CTL_KERN                          = 0x1
+	CTL_MAXNAME                       = 0xc
+	CTL_NET                           = 0x4
+	DIOCADDQUEUE                      = 0xc110445d
+	DIOCADDRULE                       = 0xcd604404
+	DIOCADDSTATE                      = 0xc1084425
+	DIOCCHANGERULE                    = 0xcd60441a
+	DIOCCLRIFFLAG                     = 0xc028445a
+	DIOCCLRSRCNODES                   = 0x20004455
+	DIOCCLRSTATES                     = 0xc0e04412
+	DIOCCLRSTATUS                     = 0xc0284416
+	DIOCGETLIMIT                      = 0xc0084427
+	DIOCGETQSTATS                     = 0xc1204460
+	DIOCGETQUEUE                      = 0xc110445f
+	DIOCGETQUEUES                     = 0xc110445e
+	DIOCGETRULE                       = 0xcd604407
+	DIOCGETRULES                      = 0xcd604406
+	DIOCGETRULESET                    = 0xc444443b
+	DIOCGETRULESETS                   = 0xc444443a
+	DIOCGETSRCNODES                   = 0xc0104454
+	DIOCGETSTATE                      = 0xc1084413
+	DIOCGETSTATES                     = 0xc0104419
+	DIOCGETSTATUS                     = 0xc1e84415
+	DIOCGETSYNFLWATS                  = 0xc0084463
+	DIOCGETTIMEOUT                    = 0xc008441e
+	DIOCIGETIFACES                    = 0xc0284457
+	DIOCKILLSRCNODES                  = 0xc080445b
+	DIOCKILLSTATES                    = 0xc0e04429
+	DIOCNATLOOK                       = 0xc0504417
+	DIOCOSFPADD                       = 0xc088444f
+	DIOCOSFPFLUSH                     = 0x2000444e
+	DIOCOSFPGET                       = 0xc0884450
+	DIOCRADDADDRS                     = 0xc4504443
+	DIOCRADDTABLES                    = 0xc450443d
+	DIOCRCLRADDRS                     = 0xc4504442
+	DIOCRCLRASTATS                    = 0xc4504448
+	DIOCRCLRTABLES                    = 0xc450443c
+	DIOCRCLRTSTATS                    = 0xc4504441
+	DIOCRDELADDRS                     = 0xc4504444
+	DIOCRDELTABLES                    = 0xc450443e
+	DIOCRGETADDRS                     = 0xc4504446
+	DIOCRGETASTATS                    = 0xc4504447
+	DIOCRGETTABLES                    = 0xc450443f
+	DIOCRGETTSTATS                    = 0xc4504440
+	DIOCRINADEFINE                    = 0xc450444d
+	DIOCRSETADDRS                     = 0xc4504445
+	DIOCRSETTFLAGS                    = 0xc450444a
+	DIOCRTSTADDRS                     = 0xc4504449
+	DIOCSETDEBUG                      = 0xc0044418
+	DIOCSETHOSTID                     = 0xc0044456
+	DIOCSETIFFLAG                     = 0xc0284459
+	DIOCSETLIMIT                      = 0xc0084428
+	DIOCSETREASS                      = 0xc004445c
+	DIOCSETSTATUSIF                   = 0xc0284414
+	DIOCSETSYNCOOKIES                 = 0xc0014462
+	DIOCSETSYNFLWATS                  = 0xc0084461
+	DIOCSETTIMEOUT                    = 0xc008441d
+	DIOCSTART                         = 0x20004401
+	DIOCSTOP                          = 0x20004402
+	DIOCXBEGIN                        = 0xc0104451
+	DIOCXCOMMIT                       = 0xc0104452
+	DIOCXROLLBACK                     = 0xc0104453
+	DLT_ARCNET                        = 0x7
+	DLT_ATM_RFC1483                   = 0xb
+	DLT_AX25                          = 0x3
+	DLT_CHAOS                         = 0x5
+	DLT_C_HDLC                        = 0x68
+	DLT_EN10MB                        = 0x1
+	DLT_EN3MB                         = 0x2
+	DLT_ENC                           = 0xd
+	DLT_FDDI                          = 0xa
+	DLT_IEEE802                       = 0x6
+	DLT_IEEE802_11                    = 0x69
+	DLT_IEEE802_11_RADIO              = 0x7f
+	DLT_LOOP                          = 0xc
+	DLT_MPLS                          = 0xdb
+	DLT_NULL                          = 0x0
+	DLT_OPENFLOW                      = 0x10b
+	DLT_PFLOG                         = 0x75
+	DLT_PFSYNC                        = 0x12
+	DLT_PPP                           = 0x9
+	DLT_PPP_BSDOS                     = 0x10
+	DLT_PPP_ETHER                     = 0x33
+	DLT_PPP_SERIAL                    = 0x32
+	DLT_PRONET                        = 0x4
+	DLT_RAW                           = 0xe
+	DLT_SLIP                          = 0x8
+	DLT_SLIP_BSDOS                    = 0xf
+	DLT_USBPCAP                       = 0xf9
+	DLT_USER0                         = 0x93
+	DLT_USER1                         = 0x94
+	DLT_USER10                        = 0x9d
+	DLT_USER11                        = 0x9e
+	DLT_USER12                        = 0x9f
+	DLT_USER13                        = 0xa0
+	DLT_USER14                        = 0xa1
+	DLT_USER15                        = 0xa2
+	DLT_USER2                         = 0x95
+	DLT_USER3                         = 0x96
+	DLT_USER4                         = 0x97
+	DLT_USER5                         = 0x98
+	DLT_USER6                         = 0x99
+	DLT_USER7                         = 0x9a
+	DLT_USER8                         = 0x9b
+	DLT_USER9                         = 0x9c
+	DT_BLK                            = 0x6
+	DT_CHR                            = 0x2
+	DT_DIR                            = 0x4
+	DT_FIFO                           = 0x1
+	DT_LNK                            = 0xa
+	DT_REG                            = 0x8
+	DT_SOCK                           = 0xc
+	DT_UNKNOWN                        = 0x0
+	ECHO                              = 0x8
+	ECHOCTL                           = 0x40
+	ECHOE                             = 0x2
+	ECHOK                             = 0x4
+	ECHOKE                            = 0x1
+	ECHONL                            = 0x10
+	ECHOPRT                           = 0x20
+	EMT_TAGOVF                        = 0x1
+	EMUL_ENABLED                      = 0x1
+	EMUL_NATIVE                       = 0x2
+	ENDRUNDISC                        = 0x9
+	ETHERMIN                          = 0x2e
+	ETHERMTU                          = 0x5dc
+	ETHERTYPE_8023                    = 0x4
+	ETHERTYPE_AARP                    = 0x80f3
+	ETHERTYPE_ACCTON                  = 0x8390
+	ETHERTYPE_AEONIC                  = 0x8036
+	ETHERTYPE_ALPHA                   = 0x814a
+	ETHERTYPE_AMBER                   = 0x6008
+	ETHERTYPE_AMOEBA                  = 0x8145
+	ETHERTYPE_AOE                     = 0x88a2
+	ETHERTYPE_APOLLO                  = 0x80f7
+	ETHERTYPE_APOLLODOMAIN            = 0x8019
+	ETHERTYPE_APPLETALK               = 0x809b
+	ETHERTYPE_APPLITEK                = 0x80c7
+	ETHERTYPE_ARGONAUT                = 0x803a
+	ETHERTYPE_ARP                     = 0x806
+	ETHERTYPE_AT                      = 0x809b
+	ETHERTYPE_ATALK                   = 0x809b
+	ETHERTYPE_ATOMIC                  = 0x86df
+	ETHERTYPE_ATT                     = 0x8069
+	ETHERTYPE_ATTSTANFORD             = 0x8008
+	ETHERTYPE_AUTOPHON                = 0x806a
+	ETHERTYPE_AXIS                    = 0x8856
+	ETHERTYPE_BCLOOP                  = 0x9003
+	ETHERTYPE_BOFL                    = 0x8102
+	ETHERTYPE_CABLETRON               = 0x7034
+	ETHERTYPE_CHAOS                   = 0x804
+	ETHERTYPE_COMDESIGN               = 0x806c
+	ETHERTYPE_COMPUGRAPHIC            = 0x806d
+	ETHERTYPE_COUNTERPOINT            = 0x8062
+	ETHERTYPE_CRONUS                  = 0x8004
+	ETHERTYPE_CRONUSVLN               = 0x8003
+	ETHERTYPE_DCA                     = 0x1234
+	ETHERTYPE_DDE                     = 0x807b
+	ETHERTYPE_DEBNI                   = 0xaaaa
+	ETHERTYPE_DECAM                   = 0x8048
+	ETHERTYPE_DECCUST                 = 0x6006
+	ETHERTYPE_DECDIAG                 = 0x6005
+	ETHERTYPE_DECDNS                  = 0x803c
+	ETHERTYPE_DECDTS                  = 0x803e
+	ETHERTYPE_DECEXPER                = 0x6000
+	ETHERTYPE_DECLAST                 = 0x8041
+	ETHERTYPE_DECLTM                  = 0x803f
+	ETHERTYPE_DECMUMPS                = 0x6009
+	ETHERTYPE_DECNETBIOS              = 0x8040
+	ETHERTYPE_DELTACON                = 0x86de
+	ETHERTYPE_DIDDLE                  = 0x4321
+	ETHERTYPE_DLOG1                   = 0x660
+	ETHERTYPE_DLOG2                   = 0x661
+	ETHERTYPE_DN                      = 0x6003
+	ETHERTYPE_DOGFIGHT                = 0x1989
+	ETHERTYPE_DSMD                    = 0x8039
+	ETHERTYPE_ECMA                    = 0x803
+	ETHERTYPE_ENCRYPT                 = 0x803d
+	ETHERTYPE_ES                      = 0x805d
+	ETHERTYPE_EXCELAN                 = 0x8010
+	ETHERTYPE_EXPERDATA               = 0x8049
+	ETHERTYPE_FLIP                    = 0x8146
+	ETHERTYPE_FLOWCONTROL             = 0x8808
+	ETHERTYPE_FRARP                   = 0x808
+	ETHERTYPE_GENDYN                  = 0x8068
+	ETHERTYPE_HAYES                   = 0x8130
+	ETHERTYPE_HIPPI_FP                = 0x8180
+	ETHERTYPE_HITACHI                 = 0x8820
+	ETHERTYPE_HP                      = 0x8005
+	ETHERTYPE_IEEEPUP                 = 0xa00
+	ETHERTYPE_IEEEPUPAT               = 0xa01
+	ETHERTYPE_IMLBL                   = 0x4c42
+	ETHERTYPE_IMLBLDIAG               = 0x424c
+	ETHERTYPE_IP                      = 0x800
+	ETHERTYPE_IPAS                    = 0x876c
+	ETHERTYPE_IPV6                    = 0x86dd
+	ETHERTYPE_IPX                     = 0x8137
+	ETHERTYPE_IPXNEW                  = 0x8037
+	ETHERTYPE_KALPANA                 = 0x8582
+	ETHERTYPE_LANBRIDGE               = 0x8038
+	ETHERTYPE_LANPROBE                = 0x8888
+	ETHERTYPE_LAT                     = 0x6004
+	ETHERTYPE_LBACK                   = 0x9000
+	ETHERTYPE_LITTLE                  = 0x8060
+	ETHERTYPE_LLDP                    = 0x88cc
+	ETHERTYPE_LOGICRAFT               = 0x8148
+	ETHERTYPE_LOOPBACK                = 0x9000
+	ETHERTYPE_MACSEC                  = 0x88e5
+	ETHERTYPE_MATRA                   = 0x807a
+	ETHERTYPE_MAX                     = 0xffff
+	ETHERTYPE_MERIT                   = 0x807c
+	ETHERTYPE_MICP                    = 0x873a
+	ETHERTYPE_MOPDL                   = 0x6001
+	ETHERTYPE_MOPRC                   = 0x6002
+	ETHERTYPE_MOTOROLA                = 0x818d
+	ETHERTYPE_MPLS                    = 0x8847
+	ETHERTYPE_MPLS_MCAST              = 0x8848
+	ETHERTYPE_MUMPS                   = 0x813f
+	ETHERTYPE_NBPCC                   = 0x3c04
+	ETHERTYPE_NBPCLAIM                = 0x3c09
+	ETHERTYPE_NBPCLREQ                = 0x3c05
+	ETHERTYPE_NBPCLRSP                = 0x3c06
+	ETHERTYPE_NBPCREQ                 = 0x3c02
+	ETHERTYPE_NBPCRSP                 = 0x3c03
+	ETHERTYPE_NBPDG                   = 0x3c07
+	ETHERTYPE_NBPDGB                  = 0x3c08
+	ETHERTYPE_NBPDLTE                 = 0x3c0a
+	ETHERTYPE_NBPRAR                  = 0x3c0c
+	ETHERTYPE_NBPRAS                  = 0x3c0b
+	ETHERTYPE_NBPRST                  = 0x3c0d
+	ETHERTYPE_NBPSCD                  = 0x3c01
+	ETHERTYPE_NBPVCD                  = 0x3c00
+	ETHERTYPE_NBS                     = 0x802
+	ETHERTYPE_NCD                     = 0x8149
+	ETHERTYPE_NESTAR                  = 0x8006
+	ETHERTYPE_NETBEUI                 = 0x8191
+	ETHERTYPE_NOVELL                  = 0x8138
+	ETHERTYPE_NS                      = 0x600
+	ETHERTYPE_NSAT                    = 0x601
+	ETHERTYPE_NSCOMPAT                = 0x807
+	ETHERTYPE_NTRAILER                = 0x10
+	ETHERTYPE_OS9                     = 0x7007
+	ETHERTYPE_OS9NET                  = 0x7009
+	ETHERTYPE_PACER                   = 0x80c6
+	ETHERTYPE_PAE                     = 0x888e
+	ETHERTYPE_PBB                     = 0x88e7
+	ETHERTYPE_PCS                     = 0x4242
+	ETHERTYPE_PLANNING                = 0x8044
+	ETHERTYPE_PPP                     = 0x880b
+	ETHERTYPE_PPPOE                   = 0x8864
+	ETHERTYPE_PPPOEDISC               = 0x8863
+	ETHERTYPE_PRIMENTS                = 0x7031
+	ETHERTYPE_PUP                     = 0x200
+	ETHERTYPE_PUPAT                   = 0x200
+	ETHERTYPE_QINQ                    = 0x88a8
+	ETHERTYPE_RACAL                   = 0x7030
+	ETHERTYPE_RATIONAL                = 0x8150
+	ETHERTYPE_RAWFR                   = 0x6559
+	ETHERTYPE_RCL                     = 0x1995
+	ETHERTYPE_RDP                     = 0x8739
+	ETHERTYPE_RETIX                   = 0x80f2
+	ETHERTYPE_REVARP                  = 0x8035
+	ETHERTYPE_SCA                     = 0x6007
+	ETHERTYPE_SECTRA                  = 0x86db
+	ETHERTYPE_SECUREDATA              = 0x876d
+	ETHERTYPE_SGITW                   = 0x817e
+	ETHERTYPE_SG_BOUNCE               = 0x8016
+	ETHERTYPE_SG_DIAG                 = 0x8013
+	ETHERTYPE_SG_NETGAMES             = 0x8014
+	ETHERTYPE_SG_RESV                 = 0x8015
+	ETHERTYPE_SIMNET                  = 0x5208
+	ETHERTYPE_SLOW                    = 0x8809
+	ETHERTYPE_SNA                     = 0x80d5
+	ETHERTYPE_SNMP                    = 0x814c
+	ETHERTYPE_SONIX                   = 0xfaf5
+	ETHERTYPE_SPIDER                  = 0x809f
+	ETHERTYPE_SPRITE                  = 0x500
+	ETHERTYPE_STP                     = 0x8181
+	ETHERTYPE_TALARIS                 = 0x812b
+	ETHERTYPE_TALARISMC               = 0x852b
+	ETHERTYPE_TCPCOMP                 = 0x876b
+	ETHERTYPE_TCPSM                   = 0x9002
+	ETHERTYPE_TEC                     = 0x814f
+	ETHERTYPE_TIGAN                   = 0x802f
+	ETHERTYPE_TRAIL                   = 0x1000
+	ETHERTYPE_TRANSETHER              = 0x6558
+	ETHERTYPE_TYMSHARE                = 0x802e
+	ETHERTYPE_UBBST                   = 0x7005
+	ETHERTYPE_UBDEBUG                 = 0x900
+	ETHERTYPE_UBDIAGLOOP              = 0x7002
+	ETHERTYPE_UBDL                    = 0x7000
+	ETHERTYPE_UBNIU                   = 0x7001
+	ETHERTYPE_UBNMC                   = 0x7003
+	ETHERTYPE_VALID                   = 0x1600
+	ETHERTYPE_VARIAN                  = 0x80dd
+	ETHERTYPE_VAXELN                  = 0x803b
+	ETHERTYPE_VEECO                   = 0x8067
+	ETHERTYPE_VEXP                    = 0x805b
+	ETHERTYPE_VGLAB                   = 0x8131
+	ETHERTYPE_VINES                   = 0xbad
+	ETHERTYPE_VINESECHO               = 0xbaf
+	ETHERTYPE_VINESLOOP               = 0xbae
+	ETHERTYPE_VITAL                   = 0xff00
+	ETHERTYPE_VLAN                    = 0x8100
+	ETHERTYPE_VLTLMAN                 = 0x8080
+	ETHERTYPE_VPROD                   = 0x805c
+	ETHERTYPE_VURESERVED              = 0x8147
+	ETHERTYPE_WATERLOO                = 0x8130
+	ETHERTYPE_WELLFLEET               = 0x8103
+	ETHERTYPE_X25                     = 0x805
+	ETHERTYPE_X75                     = 0x801
+	ETHERTYPE_XNSSM                   = 0x9001
+	ETHERTYPE_XTP                     = 0x817d
+	ETHER_ADDR_LEN                    = 0x6
+	ETHER_ALIGN                       = 0x2
+	ETHER_CRC_LEN                     = 0x4
+	ETHER_CRC_POLY_BE                 = 0x4c11db6
+	ETHER_CRC_POLY_LE                 = 0xedb88320
+	ETHER_HDR_LEN                     = 0xe
+	ETHER_MAX_DIX_LEN                 = 0x600
+	ETHER_MAX_HARDMTU_LEN             = 0xff9b
+	ETHER_MAX_LEN                     = 0x5ee
+	ETHER_MIN_LEN                     = 0x40
+	ETHER_TYPE_LEN                    = 0x2
+	ETHER_VLAN_ENCAP_LEN              = 0x4
+	EVFILT_AIO                        = -0x3
+	EVFILT_DEVICE                     = -0x8
+	EVFILT_PROC                       = -0x5
+	EVFILT_READ                       = -0x1
+	EVFILT_SIGNAL                     = -0x6
+	EVFILT_SYSCOUNT                   = 0x8
+	EVFILT_TIMER                      = -0x7
+	EVFILT_VNODE                      = -0x4
+	EVFILT_WRITE                      = -0x2
+	EVL_ENCAPLEN                      = 0x4
+	EVL_PRIO_BITS                     = 0xd
+	EVL_PRIO_MAX                      = 0x7
+	EVL_VLID_MASK                     = 0xfff
+	EVL_VLID_MAX                      = 0xffe
+	EVL_VLID_MIN                      = 0x1
+	EVL_VLID_NULL                     = 0x0
+	EV_ADD                            = 0x1
+	EV_CLEAR                          = 0x20
+	EV_DELETE                         = 0x2
+	EV_DISABLE                        = 0x8
+	EV_DISPATCH                       = 0x80
+	EV_ENABLE                         = 0x4
+	EV_EOF                            = 0x8000
+	EV_ERROR                          = 0x4000
+	EV_FLAG1                          = 0x2000
+	EV_ONESHOT                        = 0x10
+	EV_RECEIPT                        = 0x40
+	EV_SYSFLAGS                       = 0xf000
+	EXTA                              = 0x4b00
+	EXTB                              = 0x9600
+	EXTPROC                           = 0x800
+	FD_CLOEXEC                        = 0x1
+	FD_SETSIZE                        = 0x400
+	FLUSHO                            = 0x800000
+	F_DUPFD                           = 0x0
+	F_DUPFD_CLOEXEC                   = 0xa
+	F_GETFD                           = 0x1
+	F_GETFL                           = 0x3
+	F_GETLK                           = 0x7
+	F_GETOWN                          = 0x5
+	F_ISATTY                          = 0xb
+	F_OK                              = 0x0
+	F_RDLCK                           = 0x1
+	F_SETFD                           = 0x2
+	F_SETFL                           = 0x4
+	F_SETLK                           = 0x8
+	F_SETLKW                          = 0x9
+	F_SETOWN                          = 0x6
+	F_UNLCK                           = 0x2
+	F_WRLCK                           = 0x3
+	HUPCL                             = 0x4000
+	HW_MACHINE                        = 0x1
+	ICANON                            = 0x100
+	ICMP6_FILTER                      = 0x12
+	ICRNL                             = 0x100
+	IEXTEN                            = 0x400
+	IFAN_ARRIVAL                      = 0x0
+	IFAN_DEPARTURE                    = 0x1
+	IFF_ALLMULTI                      = 0x200
+	IFF_BROADCAST                     = 0x2
+	IFF_CANTCHANGE                    = 0x8e52
+	IFF_DEBUG                         = 0x4
+	IFF_LINK0                         = 0x1000
+	IFF_LINK1                         = 0x2000
+	IFF_LINK2                         = 0x4000
+	IFF_LOOPBACK                      = 0x8
+	IFF_MULTICAST                     = 0x8000
+	IFF_NOARP                         = 0x80
+	IFF_OACTIVE                       = 0x400
+	IFF_POINTOPOINT                   = 0x10
+	IFF_PROMISC                       = 0x100
+	IFF_RUNNING                       = 0x40
+	IFF_SIMPLEX                       = 0x800
+	IFF_STATICARP                     = 0x20
+	IFF_UP                            = 0x1
+	IFNAMSIZ                          = 0x10
+	IFT_1822                          = 0x2
+	IFT_A12MPPSWITCH                  = 0x82
+	IFT_AAL2                          = 0xbb
+	IFT_AAL5                          = 0x31
+	IFT_ADSL                          = 0x5e
+	IFT_AFLANE8023                    = 0x3b
+	IFT_AFLANE8025                    = 0x3c
+	IFT_ARAP                          = 0x58
+	IFT_ARCNET                        = 0x23
+	IFT_ARCNETPLUS                    = 0x24
+	IFT_ASYNC                         = 0x54
+	IFT_ATM                           = 0x25
+	IFT_ATMDXI                        = 0x69
+	IFT_ATMFUNI                       = 0x6a
+	IFT_ATMIMA                        = 0x6b
+	IFT_ATMLOGICAL                    = 0x50
+	IFT_ATMRADIO                      = 0xbd
+	IFT_ATMSUBINTERFACE               = 0x86
+	IFT_ATMVCIENDPT                   = 0xc2
+	IFT_ATMVIRTUAL                    = 0x95
+	IFT_BGPPOLICYACCOUNTING           = 0xa2
+	IFT_BLUETOOTH                     = 0xf8
+	IFT_BRIDGE                        = 0xd1
+	IFT_BSC                           = 0x53
+	IFT_CARP                          = 0xf7
+	IFT_CCTEMUL                       = 0x3d
+	IFT_CEPT                          = 0x13
+	IFT_CES                           = 0x85
+	IFT_CHANNEL                       = 0x46
+	IFT_CNR                           = 0x55
+	IFT_COFFEE                        = 0x84
+	IFT_COMPOSITELINK                 = 0x9b
+	IFT_DCN                           = 0x8d
+	IFT_DIGITALPOWERLINE              = 0x8a
+	IFT_DIGITALWRAPPEROVERHEADCHANNEL = 0xba
+	IFT_DLSW                          = 0x4a
+	IFT_DOCSCABLEDOWNSTREAM           = 0x80
+	IFT_DOCSCABLEMACLAYER             = 0x7f
+	IFT_DOCSCABLEUPSTREAM             = 0x81
+	IFT_DOCSCABLEUPSTREAMCHANNEL      = 0xcd
+	IFT_DS0                           = 0x51
+	IFT_DS0BUNDLE                     = 0x52
+	IFT_DS1FDL                        = 0xaa
+	IFT_DS3                           = 0x1e
+	IFT_DTM                           = 0x8c
+	IFT_DUMMY                         = 0xf1
+	IFT_DVBASILN                      = 0xac
+	IFT_DVBASIOUT                     = 0xad
+	IFT_DVBRCCDOWNSTREAM              = 0x93
+	IFT_DVBRCCMACLAYER                = 0x92
+	IFT_DVBRCCUPSTREAM                = 0x94
+	IFT_ECONET                        = 0xce
+	IFT_ENC                           = 0xf4
+	IFT_EON                           = 0x19
+	IFT_EPLRS                         = 0x57
+	IFT_ESCON                         = 0x49
+	IFT_ETHER                         = 0x6
+	IFT_FAITH                         = 0xf3
+	IFT_FAST                          = 0x7d
+	IFT_FASTETHER                     = 0x3e
+	IFT_FASTETHERFX                   = 0x45
+	IFT_FDDI                          = 0xf
+	IFT_FIBRECHANNEL                  = 0x38
+	IFT_FRAMERELAYINTERCONNECT        = 0x3a
+	IFT_FRAMERELAYMPI                 = 0x5c
+	IFT_FRDLCIENDPT                   = 0xc1
+	IFT_FRELAY                        = 0x20
+	IFT_FRELAYDCE                     = 0x2c
+	IFT_FRF16MFRBUNDLE                = 0xa3
+	IFT_FRFORWARD                     = 0x9e
+	IFT_G703AT2MB                     = 0x43
+	IFT_G703AT64K                     = 0x42
+	IFT_GIF                           = 0xf0
+	IFT_GIGABITETHERNET               = 0x75
+	IFT_GR303IDT                      = 0xb2
+	IFT_GR303RDT                      = 0xb1
+	IFT_H323GATEKEEPER                = 0xa4
+	IFT_H323PROXY                     = 0xa5
+	IFT_HDH1822                       = 0x3
+	IFT_HDLC                          = 0x76
+	IFT_HDSL2                         = 0xa8
+	IFT_HIPERLAN2                     = 0xb7
+	IFT_HIPPI                         = 0x2f
+	IFT_HIPPIINTERFACE                = 0x39
+	IFT_HOSTPAD                       = 0x5a
+	IFT_HSSI                          = 0x2e
+	IFT_HY                            = 0xe
+	IFT_IBM370PARCHAN                 = 0x48
+	IFT_IDSL                          = 0x9a
+	IFT_IEEE1394                      = 0x90
+	IFT_IEEE80211                     = 0x47
+	IFT_IEEE80212                     = 0x37
+	IFT_IEEE8023ADLAG                 = 0xa1
+	IFT_IFGSN                         = 0x91
+	IFT_IMT                           = 0xbe
+	IFT_INFINIBAND                    = 0xc7
+	IFT_INTERLEAVE                    = 0x7c
+	IFT_IP                            = 0x7e
+	IFT_IPFORWARD                     = 0x8e
+	IFT_IPOVERATM                     = 0x72
+	IFT_IPOVERCDLC                    = 0x6d
+	IFT_IPOVERCLAW                    = 0x6e
+	IFT_IPSWITCH                      = 0x4e
+	IFT_ISDN                          = 0x3f
+	IFT_ISDNBASIC                     = 0x14
+	IFT_ISDNPRIMARY                   = 0x15
+	IFT_ISDNS                         = 0x4b
+	IFT_ISDNU                         = 0x4c
+	IFT_ISO88022LLC                   = 0x29
+	IFT_ISO88023                      = 0x7
+	IFT_ISO88024                      = 0x8
+	IFT_ISO88025                      = 0x9
+	IFT_ISO88025CRFPINT               = 0x62
+	IFT_ISO88025DTR                   = 0x56
+	IFT_ISO88025FIBER                 = 0x73
+	IFT_ISO88026                      = 0xa
+	IFT_ISUP                          = 0xb3
+	IFT_L2VLAN                        = 0x87
+	IFT_L3IPVLAN                      = 0x88
+	IFT_L3IPXVLAN                     = 0x89
+	IFT_LAPB                          = 0x10
+	IFT_LAPD                          = 0x4d
+	IFT_LAPF                          = 0x77
+	IFT_LINEGROUP                     = 0xd2
+	IFT_LOCALTALK                     = 0x2a
+	IFT_LOOP                          = 0x18
+	IFT_MBIM                          = 0xfa
+	IFT_MEDIAMAILOVERIP               = 0x8b
+	IFT_MFSIGLINK                     = 0xa7
+	IFT_MIOX25                        = 0x26
+	IFT_MODEM                         = 0x30
+	IFT_MPC                           = 0x71
+	IFT_MPLS                          = 0xa6
+	IFT_MPLSTUNNEL                    = 0x96
+	IFT_MSDSL                         = 0x8f
+	IFT_MVL                           = 0xbf
+	IFT_MYRINET                       = 0x63
+	IFT_NFAS                          = 0xaf
+	IFT_NSIP                          = 0x1b
+	IFT_OPTICALCHANNEL                = 0xc3
+	IFT_OPTICALTRANSPORT              = 0xc4
+	IFT_OTHER                         = 0x1
+	IFT_P10                           = 0xc
+	IFT_P80                           = 0xd
+	IFT_PARA                          = 0x22
+	IFT_PFLOG                         = 0xf5
+	IFT_PFLOW                         = 0xf9
+	IFT_PFSYNC                        = 0xf6
+	IFT_PLC                           = 0xae
+	IFT_PON155                        = 0xcf
+	IFT_PON622                        = 0xd0
+	IFT_POS                           = 0xab
+	IFT_PPP                           = 0x17
+	IFT_PPPMULTILINKBUNDLE            = 0x6c
+	IFT_PROPATM                       = 0xc5
+	IFT_PROPBWAP2MP                   = 0xb8
+	IFT_PROPCNLS                      = 0x59
+	IFT_PROPDOCSWIRELESSDOWNSTREAM    = 0xb5
+	IFT_PROPDOCSWIRELESSMACLAYER      = 0xb4
+	IFT_PROPDOCSWIRELESSUPSTREAM      = 0xb6
+	IFT_PROPMUX                       = 0x36
+	IFT_PROPVIRTUAL                   = 0x35
+	IFT_PROPWIRELESSP2P               = 0x9d
+	IFT_PTPSERIAL                     = 0x16
+	IFT_PVC                           = 0xf2
+	IFT_Q2931                         = 0xc9
+	IFT_QLLC                          = 0x44
+	IFT_RADIOMAC                      = 0xbc
+	IFT_RADSL                         = 0x5f
+	IFT_REACHDSL                      = 0xc0
+	IFT_RFC1483                       = 0x9f
+	IFT_RS232                         = 0x21
+	IFT_RSRB                          = 0x4f
+	IFT_SDLC                          = 0x11
+	IFT_SDSL                          = 0x60
+	IFT_SHDSL                         = 0xa9
+	IFT_SIP                           = 0x1f
+	IFT_SIPSIG                        = 0xcc
+	IFT_SIPTG                         = 0xcb
+	IFT_SLIP                          = 0x1c
+	IFT_SMDSDXI                       = 0x2b
+	IFT_SMDSICIP                      = 0x34
+	IFT_SONET                         = 0x27
+	IFT_SONETOVERHEADCHANNEL          = 0xb9
+	IFT_SONETPATH                     = 0x32
+	IFT_SONETVT                       = 0x33
+	IFT_SRP                           = 0x97
+	IFT_SS7SIGLINK                    = 0x9c
+	IFT_STACKTOSTACK                  = 0x6f
+	IFT_STARLAN                       = 0xb
+	IFT_T1                            = 0x12
+	IFT_TDLC                          = 0x74
+	IFT_TELINK                        = 0xc8
+	IFT_TERMPAD                       = 0x5b
+	IFT_TR008                         = 0xb0
+	IFT_TRANSPHDLC                    = 0x7b
+	IFT_TUNNEL                        = 0x83
+	IFT_ULTRA                         = 0x1d
+	IFT_USB                           = 0xa0
+	IFT_V11                           = 0x40
+	IFT_V35                           = 0x2d
+	IFT_V36                           = 0x41
+	IFT_V37                           = 0x78
+	IFT_VDSL                          = 0x61
+	IFT_VIRTUALIPADDRESS              = 0x70
+	IFT_VIRTUALTG                     = 0xca
+	IFT_VOICEDID                      = 0xd5
+	IFT_VOICEEM                       = 0x64
+	IFT_VOICEEMFGD                    = 0xd3
+	IFT_VOICEENCAP                    = 0x67
+	IFT_VOICEFGDEANA                  = 0xd4
+	IFT_VOICEFXO                      = 0x65
+	IFT_VOICEFXS                      = 0x66
+	IFT_VOICEOVERATM                  = 0x98
+	IFT_VOICEOVERCABLE                = 0xc6
+	IFT_VOICEOVERFRAMERELAY           = 0x99
+	IFT_VOICEOVERIP                   = 0x68
+	IFT_X213                          = 0x5d
+	IFT_X25                           = 0x5
+	IFT_X25DDN                        = 0x4
+	IFT_X25HUNTGROUP                  = 0x7a
+	IFT_X25MLP                        = 0x79
+	IFT_X25PLE                        = 0x28
+	IFT_XETHER                        = 0x1a
+	IGNBRK                            = 0x1
+	IGNCR                             = 0x80
+	IGNPAR                            = 0x4
+	IMAXBEL                           = 0x2000
+	INLCR                             = 0x40
+	INPCK                             = 0x10
+	IN_CLASSA_HOST                    = 0xffffff
+	IN_CLASSA_MAX                     = 0x80
+	IN_CLASSA_NET                     = 0xff000000
+	IN_CLASSA_NSHIFT                  = 0x18
+	IN_CLASSB_HOST                    = 0xffff
+	IN_CLASSB_MAX                     = 0x10000
+	IN_CLASSB_NET                     = 0xffff0000
+	IN_CLASSB_NSHIFT                  = 0x10
+	IN_CLASSC_HOST                    = 0xff
+	IN_CLASSC_NET                     = 0xffffff00
+	IN_CLASSC_NSHIFT                  = 0x8
+	IN_CLASSD_HOST                    = 0xfffffff
+	IN_CLASSD_NET                     = 0xf0000000
+	IN_CLASSD_NSHIFT                  = 0x1c
+	IN_LOOPBACKNET                    = 0x7f
+	IN_RFC3021_HOST                   = 0x1
+	IN_RFC3021_NET                    = 0xfffffffe
+	IN_RFC3021_NSHIFT                 = 0x1f
+	IPPROTO_AH                        = 0x33
+	IPPROTO_CARP                      = 0x70
+	IPPROTO_DIVERT                    = 0x102
+	IPPROTO_DONE                      = 0x101
+	IPPROTO_DSTOPTS                   = 0x3c
+	IPPROTO_EGP                       = 0x8
+	IPPROTO_ENCAP                     = 0x62
+	IPPROTO_EON                       = 0x50
+	IPPROTO_ESP                       = 0x32
+	IPPROTO_ETHERIP                   = 0x61
+	IPPROTO_FRAGMENT                  = 0x2c
+	IPPROTO_GGP                       = 0x3
+	IPPROTO_GRE                       = 0x2f
+	IPPROTO_HOPOPTS                   = 0x0
+	IPPROTO_ICMP                      = 0x1
+	IPPROTO_ICMPV6                    = 0x3a
+	IPPROTO_IDP                       = 0x16
+	IPPROTO_IGMP                      = 0x2
+	IPPROTO_IP                        = 0x0
+	IPPROTO_IPCOMP                    = 0x6c
+	IPPROTO_IPIP                      = 0x4
+	IPPROTO_IPV4                      = 0x4
+	IPPROTO_IPV6                      = 0x29
+	IPPROTO_MAX                       = 0x100
+	IPPROTO_MAXID                     = 0x103
+	IPPROTO_MOBILE                    = 0x37
+	IPPROTO_MPLS                      = 0x89
+	IPPROTO_NONE                      = 0x3b
+	IPPROTO_PFSYNC                    = 0xf0
+	IPPROTO_PIM                       = 0x67
+	IPPROTO_PUP                       = 0xc
+	IPPROTO_RAW                       = 0xff
+	IPPROTO_ROUTING                   = 0x2b
+	IPPROTO_RSVP                      = 0x2e
+	IPPROTO_TCP                       = 0x6
+	IPPROTO_TP                        = 0x1d
+	IPPROTO_UDP                       = 0x11
+	IPPROTO_UDPLITE                   = 0x88
+	IPV6_AUTH_LEVEL                   = 0x35
+	IPV6_AUTOFLOWLABEL                = 0x3b
+	IPV6_CHECKSUM                     = 0x1a
+	IPV6_DEFAULT_MULTICAST_HOPS       = 0x1
+	IPV6_DEFAULT_MULTICAST_LOOP       = 0x1
+	IPV6_DEFHLIM                      = 0x40
+	IPV6_DONTFRAG                     = 0x3e
+	IPV6_DSTOPTS                      = 0x32
+	IPV6_ESP_NETWORK_LEVEL            = 0x37
+	IPV6_ESP_TRANS_LEVEL              = 0x36
+	IPV6_FAITH                        = 0x1d
+	IPV6_FLOWINFO_MASK                = 0xfffffff
+	IPV6_FLOWLABEL_MASK               = 0xfffff
+	IPV6_FRAGTTL                      = 0x78
+	IPV6_HLIMDEC                      = 0x1
+	IPV6_HOPLIMIT                     = 0x2f
+	IPV6_HOPOPTS                      = 0x31
+	IPV6_IPCOMP_LEVEL                 = 0x3c
+	IPV6_JOIN_GROUP                   = 0xc
+	IPV6_LEAVE_GROUP                  = 0xd
+	IPV6_MAXHLIM                      = 0xff
+	IPV6_MAXPACKET                    = 0xffff
+	IPV6_MINHOPCOUNT                  = 0x41
+	IPV6_MMTU                         = 0x500
+	IPV6_MULTICAST_HOPS               = 0xa
+	IPV6_MULTICAST_IF                 = 0x9
+	IPV6_MULTICAST_LOOP               = 0xb
+	IPV6_NEXTHOP                      = 0x30
+	IPV6_OPTIONS                      = 0x1
+	IPV6_PATHMTU                      = 0x2c
+	IPV6_PIPEX                        = 0x3f
+	IPV6_PKTINFO                      = 0x2e
+	IPV6_PORTRANGE                    = 0xe
+	IPV6_PORTRANGE_DEFAULT            = 0x0
+	IPV6_PORTRANGE_HIGH               = 0x1
+	IPV6_PORTRANGE_LOW                = 0x2
+	IPV6_RECVDSTOPTS                  = 0x28
+	IPV6_RECVDSTPORT                  = 0x40
+	IPV6_RECVHOPLIMIT                 = 0x25
+	IPV6_RECVHOPOPTS                  = 0x27
+	IPV6_RECVPATHMTU                  = 0x2b
+	IPV6_RECVPKTINFO                  = 0x24
+	IPV6_RECVRTHDR                    = 0x26
+	IPV6_RECVTCLASS                   = 0x39
+	IPV6_RTABLE                       = 0x1021
+	IPV6_RTHDR                        = 0x33
+	IPV6_RTHDRDSTOPTS                 = 0x23
+	IPV6_RTHDR_LOOSE                  = 0x0
+	IPV6_RTHDR_STRICT                 = 0x1
+	IPV6_RTHDR_TYPE_0                 = 0x0
+	IPV6_SOCKOPT_RESERVED1            = 0x3
+	IPV6_TCLASS                       = 0x3d
+	IPV6_UNICAST_HOPS                 = 0x4
+	IPV6_USE_MIN_MTU                  = 0x2a
+	IPV6_V6ONLY                       = 0x1b
+	IPV6_VERSION                      = 0x60
+	IPV6_VERSION_MASK                 = 0xf0
+	IP_ADD_MEMBERSHIP                 = 0xc
+	IP_AUTH_LEVEL                     = 0x14
+	IP_DEFAULT_MULTICAST_LOOP         = 0x1
+	IP_DEFAULT_MULTICAST_TTL          = 0x1
+	IP_DF                             = 0x4000
+	IP_DROP_MEMBERSHIP                = 0xd
+	IP_ESP_NETWORK_LEVEL              = 0x16
+	IP_ESP_TRANS_LEVEL                = 0x15
+	IP_HDRINCL                        = 0x2
+	IP_IPCOMP_LEVEL                   = 0x1d
+	IP_IPDEFTTL                       = 0x25
+	IP_IPSECFLOWINFO                  = 0x24
+	IP_IPSEC_LOCAL_AUTH               = 0x1b
+	IP_IPSEC_LOCAL_CRED               = 0x19
+	IP_IPSEC_LOCAL_ID                 = 0x17
+	IP_IPSEC_REMOTE_AUTH              = 0x1c
+	IP_IPSEC_REMOTE_CRED              = 0x1a
+	IP_IPSEC_REMOTE_ID                = 0x18
+	IP_MAXPACKET                      = 0xffff
+	IP_MAX_MEMBERSHIPS                = 0xfff
+	IP_MF                             = 0x2000
+	IP_MINTTL                         = 0x20
+	IP_MIN_MEMBERSHIPS                = 0xf
+	IP_MSS                            = 0x240
+	IP_MULTICAST_IF                   = 0x9
+	IP_MULTICAST_LOOP                 = 0xb
+	IP_MULTICAST_TTL                  = 0xa
+	IP_OFFMASK                        = 0x1fff
+	IP_OPTIONS                        = 0x1
+	IP_PIPEX                          = 0x22
+	IP_PORTRANGE                      = 0x13
+	IP_PORTRANGE_DEFAULT              = 0x0
+	IP_PORTRANGE_HIGH                 = 0x1
+	IP_PORTRANGE_LOW                  = 0x2
+	IP_RECVDSTADDR                    = 0x7
+	IP_RECVDSTPORT                    = 0x21
+	IP_RECVIF                         = 0x1e
+	IP_RECVOPTS                       = 0x5
+	IP_RECVRETOPTS                    = 0x6
+	IP_RECVRTABLE                     = 0x23
+	IP_RECVTTL                        = 0x1f
+	IP_RETOPTS                        = 0x8
+	IP_RF                             = 0x8000
+	IP_RTABLE                         = 0x1021
+	IP_SENDSRCADDR                    = 0x7
+	IP_TOS                            = 0x3
+	IP_TTL                            = 0x4
+	ISIG                              = 0x80
+	ISTRIP                            = 0x20
+	IUCLC                             = 0x1000
+	IXANY                             = 0x800
+	IXOFF                             = 0x400
+	IXON                              = 0x200
+	KERN_HOSTNAME                     = 0xa
+	KERN_OSRELEASE                    = 0x2
+	KERN_OSTYPE                       = 0x1
+	KERN_VERSION                      = 0x4
+	LCNT_OVERLOAD_FLUSH               = 0x6
+	LOCK_EX                           = 0x2
+	LOCK_NB                           = 0x4
+	LOCK_SH                           = 0x1
+	LOCK_UN                           = 0x8
+	MADV_DONTNEED                     = 0x4
+	MADV_FREE                         = 0x6
+	MADV_NORMAL                       = 0x0
+	MADV_RANDOM                       = 0x1
+	MADV_SEQUENTIAL                   = 0x2
+	MADV_SPACEAVAIL                   = 0x5
+	MADV_WILLNEED                     = 0x3
+	MAP_ANON                          = 0x1000
+	MAP_ANONYMOUS                     = 0x1000
+	MAP_CONCEAL                       = 0x8000
+	MAP_COPY                          = 0x2
+	MAP_FILE                          = 0x0
+	MAP_FIXED                         = 0x10
+	MAP_FLAGMASK                      = 0xfff7
+	MAP_HASSEMAPHORE                  = 0x0
+	MAP_INHERIT                       = 0x0
+	MAP_INHERIT_COPY                  = 0x1
+	MAP_INHERIT_NONE                  = 0x2
+	MAP_INHERIT_SHARE                 = 0x0
+	MAP_INHERIT_ZERO                  = 0x3
+	MAP_NOEXTEND                      = 0x0
+	MAP_NORESERVE                     = 0x0
+	MAP_PRIVATE                       = 0x2
+	MAP_RENAME                        = 0x0
+	MAP_SHARED                        = 0x1
+	MAP_STACK                         = 0x4000
+	MAP_TRYFIXED                      = 0x0
+	MCL_CURRENT                       = 0x1
+	MCL_FUTURE                        = 0x2
+	MNT_ASYNC                         = 0x40
+	MNT_DEFEXPORTED                   = 0x200
+	MNT_DELEXPORT                     = 0x20000
+	MNT_DOOMED                        = 0x8000000
+	MNT_EXPORTANON                    = 0x400
+	MNT_EXPORTED                      = 0x100
+	MNT_EXRDONLY                      = 0x80
+	MNT_FORCE                         = 0x80000
+	MNT_LAZY                          = 0x3
+	MNT_LOCAL                         = 0x1000
+	MNT_NOATIME                       = 0x8000
+	MNT_NODEV                         = 0x10
+	MNT_NOEXEC                        = 0x4
+	MNT_NOPERM                        = 0x20
+	MNT_NOSUID                        = 0x8
+	MNT_NOWAIT                        = 0x2
+	MNT_QUOTA                         = 0x2000
+	MNT_RDONLY                        = 0x1
+	MNT_RELOAD                        = 0x40000
+	MNT_ROOTFS                        = 0x4000
+	MNT_SOFTDEP                       = 0x4000000
+	MNT_STALLED                       = 0x100000
+	MNT_SWAPPABLE                     = 0x200000
+	MNT_SYNCHRONOUS                   = 0x2
+	MNT_UPDATE                        = 0x10000
+	MNT_VISFLAGMASK                   = 0x400ffff
+	MNT_WAIT                          = 0x1
+	MNT_WANTRDWR                      = 0x2000000
+	MNT_WXALLOWED                     = 0x800
+	MSG_BCAST                         = 0x100
+	MSG_CMSG_CLOEXEC                  = 0x800
+	MSG_CTRUNC                        = 0x20
+	MSG_DONTROUTE                     = 0x4
+	MSG_DONTWAIT                      = 0x80
+	MSG_EOR                           = 0x8
+	MSG_MCAST                         = 0x200
+	MSG_NOSIGNAL                      = 0x400
+	MSG_OOB                           = 0x1
+	MSG_PEEK                          = 0x2
+	MSG_TRUNC                         = 0x10
+	MSG_WAITALL                       = 0x40
+	MS_ASYNC                          = 0x1
+	MS_INVALIDATE                     = 0x4
+	MS_SYNC                           = 0x2
+	NAME_MAX                          = 0xff
+	NET_RT_DUMP                       = 0x1
+	NET_RT_FLAGS                      = 0x2
+	NET_RT_IFLIST                     = 0x3
+	NET_RT_IFNAMES                    = 0x6
+	NET_RT_MAXID                      = 0x7
+	NET_RT_STATS                      = 0x4
+	NET_RT_TABLE                      = 0x5
+	NFDBITS                           = 0x20
+	NOFLSH                            = 0x80000000
+	NOKERNINFO                        = 0x2000000
+	NOTE_ATTRIB                       = 0x8
+	NOTE_CHANGE                       = 0x1
+	NOTE_CHILD                        = 0x4
+	NOTE_DELETE                       = 0x1
+	NOTE_EOF                          = 0x2
+	NOTE_EXEC                         = 0x20000000
+	NOTE_EXIT                         = 0x80000000
+	NOTE_EXTEND                       = 0x4
+	NOTE_FORK                         = 0x40000000
+	NOTE_LINK                         = 0x10
+	NOTE_LOWAT                        = 0x1
+	NOTE_PCTRLMASK                    = 0xf0000000
+	NOTE_PDATAMASK                    = 0xfffff
+	NOTE_RENAME                       = 0x20
+	NOTE_REVOKE                       = 0x40
+	NOTE_TRACK                        = 0x1
+	NOTE_TRACKERR                     = 0x2
+	NOTE_TRUNCATE                     = 0x80
+	NOTE_WRITE                        = 0x2
+	OCRNL                             = 0x10
+	OLCUC                             = 0x20
+	ONLCR                             = 0x2
+	ONLRET                            = 0x80
+	ONOCR                             = 0x40
+	ONOEOT                            = 0x8
+	OPOST                             = 0x1
+	OXTABS                            = 0x4
+	O_ACCMODE                         = 0x3
+	O_APPEND                          = 0x8
+	O_ASYNC                           = 0x40
+	O_CLOEXEC                         = 0x10000
+	O_CREAT                           = 0x200
+	O_DIRECTORY                       = 0x20000
+	O_DSYNC                           = 0x80
+	O_EXCL                            = 0x800
+	O_EXLOCK                          = 0x20
+	O_FSYNC                           = 0x80
+	O_NDELAY                          = 0x4
+	O_NOCTTY                          = 0x8000
+	O_NOFOLLOW                        = 0x100
+	O_NONBLOCK                        = 0x4
+	O_RDONLY                          = 0x0
+	O_RDWR                            = 0x2
+	O_RSYNC                           = 0x80
+	O_SHLOCK                          = 0x10
+	O_SYNC                            = 0x80
+	O_TRUNC                           = 0x400
+	O_WRONLY                          = 0x1
+	PARENB                            = 0x1000
+	PARMRK                            = 0x8
+	PARODD                            = 0x2000
+	PENDIN                            = 0x20000000
+	PF_FLUSH                          = 0x1
+	PRIO_PGRP                         = 0x1
+	PRIO_PROCESS                      = 0x0
+	PRIO_USER                         = 0x2
+	PROT_EXEC                         = 0x4
+	PROT_NONE                         = 0x0
+	PROT_READ                         = 0x1
+	PROT_WRITE                        = 0x2
+	RLIMIT_CORE                       = 0x4
+	RLIMIT_CPU                        = 0x0
+	RLIMIT_DATA                       = 0x2
+	RLIMIT_FSIZE                      = 0x1
+	RLIMIT_MEMLOCK                    = 0x6
+	RLIMIT_NOFILE                     = 0x8
+	RLIMIT_NPROC                      = 0x7
+	RLIMIT_RSS                        = 0x5
+	RLIMIT_STACK                      = 0x3
+	RLIM_INFINITY                     = 0x7fffffffffffffff
+	RTAX_AUTHOR                       = 0x6
+	RTAX_BFD                          = 0xb
+	RTAX_BRD                          = 0x7
+	RTAX_DNS                          = 0xc
+	RTAX_DST                          = 0x0
+	RTAX_GATEWAY                      = 0x1
+	RTAX_GENMASK                      = 0x3
+	RTAX_IFA                          = 0x5
+	RTAX_IFP                          = 0x4
+	RTAX_LABEL                        = 0xa
+	RTAX_MAX                          = 0xf
+	RTAX_NETMASK                      = 0x2
+	RTAX_SEARCH                       = 0xe
+	RTAX_SRC                          = 0x8
+	RTAX_SRCMASK                      = 0x9
+	RTAX_STATIC                       = 0xd
+	RTA_AUTHOR                        = 0x40
+	RTA_BFD                           = 0x800
+	RTA_BRD                           = 0x80
+	RTA_DNS                           = 0x1000
+	RTA_DST                           = 0x1
+	RTA_GATEWAY                       = 0x2
+	RTA_GENMASK                       = 0x8
+	RTA_IFA                           = 0x20
+	RTA_IFP                           = 0x10
+	RTA_LABEL                         = 0x400
+	RTA_NETMASK                       = 0x4
+	RTA_SEARCH                        = 0x4000
+	RTA_SRC                           = 0x100
+	RTA_SRCMASK                       = 0x200
+	RTA_STATIC                        = 0x2000
+	RTF_ANNOUNCE                      = 0x4000
+	RTF_BFD                           = 0x1000000
+	RTF_BLACKHOLE                     = 0x1000
+	RTF_BROADCAST                     = 0x400000
+	RTF_CACHED                        = 0x20000
+	RTF_CLONED                        = 0x10000
+	RTF_CLONING                       = 0x100
+	RTF_CONNECTED                     = 0x800000
+	RTF_DONE                          = 0x40
+	RTF_DYNAMIC                       = 0x10
+	RTF_FMASK                         = 0x110fc08
+	RTF_GATEWAY                       = 0x2
+	RTF_HOST                          = 0x4
+	RTF_LLINFO                        = 0x400
+	RTF_LOCAL                         = 0x200000
+	RTF_MODIFIED                      = 0x20
+	RTF_MPATH                         = 0x40000
+	RTF_MPLS                          = 0x100000
+	RTF_MULTICAST                     = 0x200
+	RTF_PERMANENT_ARP                 = 0x2000
+	RTF_PROTO1                        = 0x8000
+	RTF_PROTO2                        = 0x4000
+	RTF_PROTO3                        = 0x2000
+	RTF_REJECT                        = 0x8
+	RTF_STATIC                        = 0x800
+	RTF_UP                            = 0x1
+	RTF_USETRAILERS                   = 0x8000
+	RTM_80211INFO                     = 0x15
+	RTM_ADD                           = 0x1
+	RTM_BFD                           = 0x12
+	RTM_CHANGE                        = 0x3
+	RTM_CHGADDRATTR                   = 0x14
+	RTM_DELADDR                       = 0xd
+	RTM_DELETE                        = 0x2
+	RTM_DESYNC                        = 0x10
+	RTM_GET                           = 0x4
+	RTM_IFANNOUNCE                    = 0xf
+	RTM_IFINFO                        = 0xe
+	RTM_INVALIDATE                    = 0x11
+	RTM_LOSING                        = 0x5
+	RTM_MAXSIZE                       = 0x800
+	RTM_MISS                          = 0x7
+	RTM_NEWADDR                       = 0xc
+	RTM_PROPOSAL                      = 0x13
+	RTM_REDIRECT                      = 0x6
+	RTM_RESOLVE                       = 0xb
+	RTM_RTTUNIT                       = 0xf4240
+	RTM_VERSION                       = 0x5
+	RTV_EXPIRE                        = 0x4
+	RTV_HOPCOUNT                      = 0x2
+	RTV_MTU                           = 0x1
+	RTV_RPIPE                         = 0x8
+	RTV_RTT                           = 0x40
+	RTV_RTTVAR                        = 0x80
+	RTV_SPIPE                         = 0x10
+	RTV_SSTHRESH                      = 0x20
+	RT_TABLEID_BITS                   = 0x8
+	RT_TABLEID_MASK                   = 0xff
+	RT_TABLEID_MAX                    = 0xff
+	RUSAGE_CHILDREN                   = -0x1
+	RUSAGE_SELF                       = 0x0
+	RUSAGE_THREAD                     = 0x1
+	SCM_RIGHTS                        = 0x1
+	SCM_TIMESTAMP                     = 0x4
+	SHUT_RD                           = 0x0
+	SHUT_RDWR                         = 0x2
+	SHUT_WR                           = 0x1
+	SIOCADDMULTI                      = 0x80206931
+	SIOCAIFADDR                       = 0x8040691a
+	SIOCAIFGROUP                      = 0x80286987
+	SIOCATMARK                        = 0x40047307
+	SIOCBRDGADD                       = 0x8060693c
+	SIOCBRDGADDL                      = 0x80606949
+	SIOCBRDGADDS                      = 0x80606941
+	SIOCBRDGARL                       = 0x808c694d
+	SIOCBRDGDADDR                     = 0x81286947
+	SIOCBRDGDEL                       = 0x8060693d
+	SIOCBRDGDELS                      = 0x80606942
+	SIOCBRDGFLUSH                     = 0x80606948
+	SIOCBRDGFRL                       = 0x808c694e
+	SIOCBRDGGCACHE                    = 0xc0186941
+	SIOCBRDGGFD                       = 0xc0186952
+	SIOCBRDGGHT                       = 0xc0186951
+	SIOCBRDGGIFFLGS                   = 0xc060693e
+	SIOCBRDGGMA                       = 0xc0186953
+	SIOCBRDGGPARAM                    = 0xc0406958
+	SIOCBRDGGPRI                      = 0xc0186950
+	SIOCBRDGGRL                       = 0xc030694f
+	SIOCBRDGGTO                       = 0xc0186946
+	SIOCBRDGIFS                       = 0xc0606942
+	SIOCBRDGRTS                       = 0xc0206943
+	SIOCBRDGSADDR                     = 0xc1286944
+	SIOCBRDGSCACHE                    = 0x80186940
+	SIOCBRDGSFD                       = 0x80186952
+	SIOCBRDGSHT                       = 0x80186951
+	SIOCBRDGSIFCOST                   = 0x80606955
+	SIOCBRDGSIFFLGS                   = 0x8060693f
+	SIOCBRDGSIFPRIO                   = 0x80606954
+	SIOCBRDGSIFPROT                   = 0x8060694a
+	SIOCBRDGSMA                       = 0x80186953
+	SIOCBRDGSPRI                      = 0x80186950
+	SIOCBRDGSPROTO                    = 0x8018695a
+	SIOCBRDGSTO                       = 0x80186945
+	SIOCBRDGSTXHC                     = 0x80186959
+	SIOCDELLABEL                      = 0x80206997
+	SIOCDELMULTI                      = 0x80206932
+	SIOCDIFADDR                       = 0x80206919
+	SIOCDIFGROUP                      = 0x80286989
+	SIOCDIFPARENT                     = 0x802069b4
+	SIOCDIFPHYADDR                    = 0x80206949
+	SIOCDPWE3NEIGHBOR                 = 0x802069de
+	SIOCDVNETID                       = 0x802069af
+	SIOCGETKALIVE                     = 0xc01869a4
+	SIOCGETLABEL                      = 0x8020699a
+	SIOCGETMPWCFG                     = 0xc02069ae
+	SIOCGETPFLOW                      = 0xc02069fe
+	SIOCGETPFSYNC                     = 0xc02069f8
+	SIOCGETSGCNT                      = 0xc0207534
+	SIOCGETVIFCNT                     = 0xc0287533
+	SIOCGETVLAN                       = 0xc0206990
+	SIOCGIFADDR                       = 0xc0206921
+	SIOCGIFBRDADDR                    = 0xc0206923
+	SIOCGIFCONF                       = 0xc0106924
+	SIOCGIFDATA                       = 0xc020691b
+	SIOCGIFDESCR                      = 0xc0206981
+	SIOCGIFDSTADDR                    = 0xc0206922
+	SIOCGIFFLAGS                      = 0xc0206911
+	SIOCGIFGATTR                      = 0xc028698b
+	SIOCGIFGENERIC                    = 0xc020693a
+	SIOCGIFGLIST                      = 0xc028698d
+	SIOCGIFGMEMB                      = 0xc028698a
+	SIOCGIFGROUP                      = 0xc0286988
+	SIOCGIFHARDMTU                    = 0xc02069a5
+	SIOCGIFLLPRIO                     = 0xc02069b6
+	SIOCGIFMEDIA                      = 0xc0406938
+	SIOCGIFMETRIC                     = 0xc0206917
+	SIOCGIFMTU                        = 0xc020697e
+	SIOCGIFNETMASK                    = 0xc0206925
+	SIOCGIFPAIR                       = 0xc02069b1
+	SIOCGIFPARENT                     = 0xc02069b3
+	SIOCGIFPRIORITY                   = 0xc020699c
+	SIOCGIFRDOMAIN                    = 0xc02069a0
+	SIOCGIFRTLABEL                    = 0xc0206983
+	SIOCGIFRXR                        = 0x802069aa
+	SIOCGIFSFFPAGE                    = 0xc1126939
+	SIOCGIFXFLAGS                     = 0xc020699e
+	SIOCGLIFPHYADDR                   = 0xc218694b
+	SIOCGLIFPHYDF                     = 0xc02069c2
+	SIOCGLIFPHYECN                    = 0xc02069c8
+	SIOCGLIFPHYRTABLE                 = 0xc02069a2
+	SIOCGLIFPHYTTL                    = 0xc02069a9
+	SIOCGPGRP                         = 0x40047309
+	SIOCGPWE3                         = 0xc0206998
+	SIOCGPWE3CTRLWORD                 = 0xc02069dc
+	SIOCGPWE3FAT                      = 0xc02069dd
+	SIOCGPWE3NEIGHBOR                 = 0xc21869de
+	SIOCGRXHPRIO                      = 0xc02069db
+	SIOCGSPPPPARAMS                   = 0xc0206994
+	SIOCGTXHPRIO                      = 0xc02069c6
+	SIOCGUMBINFO                      = 0xc02069be
+	SIOCGUMBPARAM                     = 0xc02069c0
+	SIOCGVH                           = 0xc02069f6
+	SIOCGVNETFLOWID                   = 0xc02069c4
+	SIOCGVNETID                       = 0xc02069a7
+	SIOCIFAFATTACH                    = 0x801169ab
+	SIOCIFAFDETACH                    = 0x801169ac
+	SIOCIFCREATE                      = 0x8020697a
+	SIOCIFDESTROY                     = 0x80206979
+	SIOCIFGCLONERS                    = 0xc0106978
+	SIOCSETKALIVE                     = 0x801869a3
+	SIOCSETLABEL                      = 0x80206999
+	SIOCSETMPWCFG                     = 0x802069ad
+	SIOCSETPFLOW                      = 0x802069fd
+	SIOCSETPFSYNC                     = 0x802069f7
+	SIOCSETVLAN                       = 0x8020698f
+	SIOCSIFADDR                       = 0x8020690c
+	SIOCSIFBRDADDR                    = 0x80206913
+	SIOCSIFDESCR                      = 0x80206980
+	SIOCSIFDSTADDR                    = 0x8020690e
+	SIOCSIFFLAGS                      = 0x80206910
+	SIOCSIFGATTR                      = 0x8028698c
+	SIOCSIFGENERIC                    = 0x80206939
+	SIOCSIFLLADDR                     = 0x8020691f
+	SIOCSIFLLPRIO                     = 0x802069b5
+	SIOCSIFMEDIA                      = 0xc0206937
+	SIOCSIFMETRIC                     = 0x80206918
+	SIOCSIFMTU                        = 0x8020697f
+	SIOCSIFNETMASK                    = 0x80206916
+	SIOCSIFPAIR                       = 0x802069b0
+	SIOCSIFPARENT                     = 0x802069b2
+	SIOCSIFPRIORITY                   = 0x8020699b
+	SIOCSIFRDOMAIN                    = 0x8020699f
+	SIOCSIFRTLABEL                    = 0x80206982
+	SIOCSIFXFLAGS                     = 0x8020699d
+	SIOCSLIFPHYADDR                   = 0x8218694a
+	SIOCSLIFPHYDF                     = 0x802069c1
+	SIOCSLIFPHYECN                    = 0x802069c7
+	SIOCSLIFPHYRTABLE                 = 0x802069a1
+	SIOCSLIFPHYTTL                    = 0x802069a8
+	SIOCSPGRP                         = 0x80047308
+	SIOCSPWE3CTRLWORD                 = 0x802069dc
+	SIOCSPWE3FAT                      = 0x802069dd
+	SIOCSPWE3NEIGHBOR                 = 0x821869de
+	SIOCSRXHPRIO                      = 0x802069db
+	SIOCSSPPPPARAMS                   = 0x80206993
+	SIOCSTXHPRIO                      = 0x802069c5
+	SIOCSUMBPARAM                     = 0x802069bf
+	SIOCSVH                           = 0xc02069f5
+	SIOCSVNETFLOWID                   = 0x802069c3
+	SIOCSVNETID                       = 0x802069a6
+	SIOCSWGDPID                       = 0xc018695b
+	SIOCSWGMAXFLOW                    = 0xc0186960
+	SIOCSWGMAXGROUP                   = 0xc018695d
+	SIOCSWSDPID                       = 0x8018695c
+	SIOCSWSPORTNO                     = 0xc060695f
+	SOCK_CLOEXEC                      = 0x8000
+	SOCK_DGRAM                        = 0x2
+	SOCK_DNS                          = 0x1000
+	SOCK_NONBLOCK                     = 0x4000
+	SOCK_RAW                          = 0x3
+	SOCK_RDM                          = 0x4
+	SOCK_SEQPACKET                    = 0x5
+	SOCK_STREAM                       = 0x1
+	SOL_SOCKET                        = 0xffff
+	SOMAXCONN                         = 0x80
+	SO_ACCEPTCONN                     = 0x2
+	SO_BINDANY                        = 0x1000
+	SO_BROADCAST                      = 0x20
+	SO_DEBUG                          = 0x1
+	SO_DOMAIN                         = 0x1024
+	SO_DONTROUTE                      = 0x10
+	SO_ERROR                          = 0x1007
+	SO_KEEPALIVE                      = 0x8
+	SO_LINGER                         = 0x80
+	SO_NETPROC                        = 0x1020
+	SO_OOBINLINE                      = 0x100
+	SO_PEERCRED                       = 0x1022
+	SO_PROTOCOL                       = 0x1025
+	SO_RCVBUF                         = 0x1002
+	SO_RCVLOWAT                       = 0x1004
+	SO_RCVTIMEO                       = 0x1006
+	SO_REUSEADDR                      = 0x4
+	SO_REUSEPORT                      = 0x200
+	SO_RTABLE                         = 0x1021
+	SO_SNDBUF                         = 0x1001
+	SO_SNDLOWAT                       = 0x1003
+	SO_SNDTIMEO                       = 0x1005
+	SO_SPLICE                         = 0x1023
+	SO_TIMESTAMP                      = 0x800
+	SO_TYPE                           = 0x1008
+	SO_USELOOPBACK                    = 0x40
+	SO_ZEROIZE                        = 0x2000
+	S_BLKSIZE                         = 0x200
+	S_IEXEC                           = 0x40
+	S_IFBLK                           = 0x6000
+	S_IFCHR                           = 0x2000
+	S_IFDIR                           = 0x4000
+	S_IFIFO                           = 0x1000
+	S_IFLNK                           = 0xa000
+	S_IFMT                            = 0xf000
+	S_IFREG                           = 0x8000
+	S_IFSOCK                          = 0xc000
+	S_IREAD                           = 0x100
+	S_IRGRP                           = 0x20
+	S_IROTH                           = 0x4
+	S_IRUSR                           = 0x100
+	S_IRWXG                           = 0x38
+	S_IRWXO                           = 0x7
+	S_IRWXU                           = 0x1c0
+	S_ISGID                           = 0x400
+	S_ISTXT                           = 0x200
+	S_ISUID                           = 0x800
+	S_ISVTX                           = 0x200
+	S_IWGRP                           = 0x10
+	S_IWOTH                           = 0x2
+	S_IWRITE                          = 0x80
+	S_IWUSR                           = 0x80
+	S_IXGRP                           = 0x8
+	S_IXOTH                           = 0x1
+	S_IXUSR                           = 0x40
+	TCIFLUSH                          = 0x1
+	TCIOFF                            = 0x3
+	TCIOFLUSH                         = 0x3
+	TCION                             = 0x4
+	TCOFLUSH                          = 0x2
+	TCOOFF                            = 0x1
+	TCOON                             = 0x2
+	TCP_MAXBURST                      = 0x4
+	TCP_MAXSEG                        = 0x2
+	TCP_MAXWIN                        = 0xffff
+	TCP_MAX_SACK                      = 0x3
+	TCP_MAX_WINSHIFT                  = 0xe
+	TCP_MD5SIG                        = 0x4
+	TCP_MSS                           = 0x200
+	TCP_NODELAY                       = 0x1
+	TCP_NOPUSH                        = 0x10
+	TCP_SACKHOLE_LIMIT                = 0x80
+	TCP_SACK_ENABLE                   = 0x8
+	TCSAFLUSH                         = 0x2
+	TIMER_ABSTIME                     = 0x1
+	TIMER_RELTIME                     = 0x0
+	TIOCCBRK                          = 0x2000747a
+	TIOCCDTR                          = 0x20007478
+	TIOCCHKVERAUTH                    = 0x2000741e
+	TIOCCLRVERAUTH                    = 0x2000741d
+	TIOCCONS                          = 0x80047462
+	TIOCDRAIN                         = 0x2000745e
+	TIOCEXCL                          = 0x2000740d
+	TIOCEXT                           = 0x80047460
+	TIOCFLAG_CLOCAL                   = 0x2
+	TIOCFLAG_CRTSCTS                  = 0x4
+	TIOCFLAG_MDMBUF                   = 0x8
+	TIOCFLAG_PPS                      = 0x10
+	TIOCFLAG_SOFTCAR                  = 0x1
+	TIOCFLUSH                         = 0x80047410
+	TIOCGETA                          = 0x402c7413
+	TIOCGETD                          = 0x4004741a
+	TIOCGFLAGS                        = 0x4004745d
+	TIOCGPGRP                         = 0x40047477
+	TIOCGSID                          = 0x40047463
+	TIOCGTSTAMP                       = 0x4010745b
+	TIOCGWINSZ                        = 0x40087468
+	TIOCMBIC                          = 0x8004746b
+	TIOCMBIS                          = 0x8004746c
+	TIOCMGET                          = 0x4004746a
+	TIOCMODG                          = 0x4004746a
+	TIOCMODS                          = 0x8004746d
+	TIOCMSET                          = 0x8004746d
+	TIOCM_CAR                         = 0x40
+	TIOCM_CD                          = 0x40
+	TIOCM_CTS                         = 0x20
+	TIOCM_DSR                         = 0x100
+	TIOCM_DTR                         = 0x2
+	TIOCM_LE                          = 0x1
+	TIOCM_RI                          = 0x80
+	TIOCM_RNG                         = 0x80
+	TIOCM_RTS                         = 0x4
+	TIOCM_SR                          = 0x10
+	TIOCM_ST                          = 0x8
+	TIOCNOTTY                         = 0x20007471
+	TIOCNXCL                          = 0x2000740e
+	TIOCOUTQ                          = 0x40047473
+	TIOCPKT                           = 0x80047470
+	TIOCPKT_DATA                      = 0x0
+	TIOCPKT_DOSTOP                    = 0x20
+	TIOCPKT_FLUSHREAD                 = 0x1
+	TIOCPKT_FLUSHWRITE                = 0x2
+	TIOCPKT_IOCTL                     = 0x40
+	TIOCPKT_NOSTOP                    = 0x10
+	TIOCPKT_START                     = 0x8
+	TIOCPKT_STOP                      = 0x4
+	TIOCREMOTE                        = 0x80047469
+	TIOCSBRK                          = 0x2000747b
+	TIOCSCTTY                         = 0x20007461
+	TIOCSDTR                          = 0x20007479
+	TIOCSETA                          = 0x802c7414
+	TIOCSETAF                         = 0x802c7416
+	TIOCSETAW                         = 0x802c7415
+	TIOCSETD                          = 0x8004741b
+	TIOCSETVERAUTH                    = 0x8004741c
+	TIOCSFLAGS                        = 0x8004745c
+	TIOCSIG                           = 0x8004745f
+	TIOCSPGRP                         = 0x80047476
+	TIOCSTART                         = 0x2000746e
+	TIOCSTAT                          = 0x20007465
+	TIOCSTOP                          = 0x2000746f
+	TIOCSTSTAMP                       = 0x8008745a
+	TIOCSWINSZ                        = 0x80087467
+	TIOCUCNTL                         = 0x80047466
+	TIOCUCNTL_CBRK                    = 0x7a
+	TIOCUCNTL_SBRK                    = 0x7b
+	TOSTOP                            = 0x400000
+	UTIME_NOW                         = -0x2
+	UTIME_OMIT                        = -0x1
+	VDISCARD                          = 0xf
+	VDSUSP                            = 0xb
+	VEOF                              = 0x0
+	VEOL                              = 0x1
+	VEOL2                             = 0x2
+	VERASE                            = 0x3
+	VINTR                             = 0x8
+	VKILL                             = 0x5
+	VLNEXT                            = 0xe
+	VMIN                              = 0x10
+	VM_ANONMIN                        = 0x7
+	VM_LOADAVG                        = 0x2
+	VM_MALLOC_CONF                    = 0xc
+	VM_MAXID                          = 0xd
+	VM_MAXSLP                         = 0xa
+	VM_METER                          = 0x1
+	VM_NKMEMPAGES                     = 0x6
+	VM_PSSTRINGS                      = 0x3
+	VM_SWAPENCRYPT                    = 0x5
+	VM_USPACE                         = 0xb
+	VM_UVMEXP                         = 0x4
+	VM_VNODEMIN                       = 0x9
+	VM_VTEXTMIN                       = 0x8
+	VQUIT                             = 0x9
+	VREPRINT                          = 0x6
+	VSTART                            = 0xc
+	VSTATUS                           = 0x12
+	VSTOP                             = 0xd
+	VSUSP                             = 0xa
+	VTIME                             = 0x11
+	VWERASE                           = 0x4
+	WALTSIG                           = 0x4
+	WCONTINUED                        = 0x8
+	WCOREFLAG                         = 0x80
+	WNOHANG                           = 0x1
+	WUNTRACED                         = 0x2
+	XCASE                             = 0x1000000
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x30)
+	EADDRNOTAVAIL   = syscall.Errno(0x31)
+	EAFNOSUPPORT    = syscall.Errno(0x2f)
+	EAGAIN          = syscall.Errno(0x23)
+	EALREADY        = syscall.Errno(0x25)
+	EAUTH           = syscall.Errno(0x50)
+	EBADF           = syscall.Errno(0x9)
+	EBADMSG         = syscall.Errno(0x5c)
+	EBADRPC         = syscall.Errno(0x48)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x58)
+	ECHILD          = syscall.Errno(0xa)
+	ECONNABORTED    = syscall.Errno(0x35)
+	ECONNREFUSED    = syscall.Errno(0x3d)
+	ECONNRESET      = syscall.Errno(0x36)
+	EDEADLK         = syscall.Errno(0xb)
+	EDESTADDRREQ    = syscall.Errno(0x27)
+	EDOM            = syscall.Errno(0x21)
+	EDQUOT          = syscall.Errno(0x45)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EFTYPE          = syscall.Errno(0x4f)
+	EHOSTDOWN       = syscall.Errno(0x40)
+	EHOSTUNREACH    = syscall.Errno(0x41)
+	EIDRM           = syscall.Errno(0x59)
+	EILSEQ          = syscall.Errno(0x54)
+	EINPROGRESS     = syscall.Errno(0x24)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EIPSEC          = syscall.Errno(0x52)
+	EISCONN         = syscall.Errno(0x38)
+	EISDIR          = syscall.Errno(0x15)
+	ELAST           = syscall.Errno(0x5f)
+	ELOOP           = syscall.Errno(0x3e)
+	EMEDIUMTYPE     = syscall.Errno(0x56)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x28)
+	ENAMETOOLONG    = syscall.Errno(0x3f)
+	ENEEDAUTH       = syscall.Errno(0x51)
+	ENETDOWN        = syscall.Errno(0x32)
+	ENETRESET       = syscall.Errno(0x34)
+	ENETUNREACH     = syscall.Errno(0x33)
+	ENFILE          = syscall.Errno(0x17)
+	ENOATTR         = syscall.Errno(0x53)
+	ENOBUFS         = syscall.Errno(0x37)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x4d)
+	ENOMEDIUM       = syscall.Errno(0x55)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x5a)
+	ENOPROTOOPT     = syscall.Errno(0x2a)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSYS          = syscall.Errno(0x4e)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x39)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x42)
+	ENOTRECOVERABLE = syscall.Errno(0x5d)
+	ENOTSOCK        = syscall.Errno(0x26)
+	ENOTSUP         = syscall.Errno(0x5b)
+	ENOTTY          = syscall.Errno(0x19)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x2d)
+	EOVERFLOW       = syscall.Errno(0x57)
+	EOWNERDEAD      = syscall.Errno(0x5e)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x2e)
+	EPIPE           = syscall.Errno(0x20)
+	EPROCLIM        = syscall.Errno(0x43)
+	EPROCUNAVAIL    = syscall.Errno(0x4c)
+	EPROGMISMATCH   = syscall.Errno(0x4b)
+	EPROGUNAVAIL    = syscall.Errno(0x4a)
+	EPROTO          = syscall.Errno(0x5f)
+	EPROTONOSUPPORT = syscall.Errno(0x2b)
+	EPROTOTYPE      = syscall.Errno(0x29)
+	ERANGE          = syscall.Errno(0x22)
+	EREMOTE         = syscall.Errno(0x47)
+	EROFS           = syscall.Errno(0x1e)
+	ERPCMISMATCH    = syscall.Errno(0x49)
+	ESHUTDOWN       = syscall.Errno(0x3a)
+	ESOCKTNOSUPPORT = syscall.Errno(0x2c)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESTALE          = syscall.Errno(0x46)
+	ETIMEDOUT       = syscall.Errno(0x3c)
+	ETOOMANYREFS    = syscall.Errno(0x3b)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUSERS          = syscall.Errno(0x44)
+	EWOULDBLOCK     = syscall.Errno(0x23)
+	EXDEV           = syscall.Errno(0x12)
+)
+
+// Signals
+const (
+	SIGABRT   = syscall.Signal(0x6)
+	SIGALRM   = syscall.Signal(0xe)
+	SIGBUS    = syscall.Signal(0xa)
+	SIGCHLD   = syscall.Signal(0x14)
+	SIGCONT   = syscall.Signal(0x13)
+	SIGEMT    = syscall.Signal(0x7)
+	SIGFPE    = syscall.Signal(0x8)
+	SIGHUP    = syscall.Signal(0x1)
+	SIGILL    = syscall.Signal(0x4)
+	SIGINFO   = syscall.Signal(0x1d)
+	SIGINT    = syscall.Signal(0x2)
+	SIGIO     = syscall.Signal(0x17)
+	SIGIOT    = syscall.Signal(0x6)
+	SIGKILL   = syscall.Signal(0x9)
+	SIGPIPE   = syscall.Signal(0xd)
+	SIGPROF   = syscall.Signal(0x1b)
+	SIGQUIT   = syscall.Signal(0x3)
+	SIGSEGV   = syscall.Signal(0xb)
+	SIGSTOP   = syscall.Signal(0x11)
+	SIGSYS    = syscall.Signal(0xc)
+	SIGTERM   = syscall.Signal(0xf)
+	SIGTHR    = syscall.Signal(0x20)
+	SIGTRAP   = syscall.Signal(0x5)
+	SIGTSTP   = syscall.Signal(0x12)
+	SIGTTIN   = syscall.Signal(0x15)
+	SIGTTOU   = syscall.Signal(0x16)
+	SIGURG    = syscall.Signal(0x10)
+	SIGUSR1   = syscall.Signal(0x1e)
+	SIGUSR2   = syscall.Signal(0x1f)
+	SIGVTALRM = syscall.Signal(0x1a)
+	SIGWINCH  = syscall.Signal(0x1c)
+	SIGXCPU   = syscall.Signal(0x18)
+	SIGXFSZ   = syscall.Signal(0x19)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "operation not permitted"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "input/output error"},
+	{6, "ENXIO", "device not configured"},
+	{7, "E2BIG", "argument list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file descriptor"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EDEADLK", "resource deadlock avoided"},
+	{12, "ENOMEM", "cannot allocate memory"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "operation not supported by device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "too many open files in system"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "numerical argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "EAGAIN", "resource temporarily unavailable"},
+	{36, "EINPROGRESS", "operation now in progress"},
+	{37, "EALREADY", "operation already in progress"},
+	{38, "ENOTSOCK", "socket operation on non-socket"},
+	{39, "EDESTADDRREQ", "destination address required"},
+	{40, "EMSGSIZE", "message too long"},
+	{41, "EPROTOTYPE", "protocol wrong type for socket"},
+	{42, "ENOPROTOOPT", "protocol not available"},
+	{43, "EPROTONOSUPPORT", "protocol not supported"},
+	{44, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{45, "EOPNOTSUPP", "operation not supported"},
+	{46, "EPFNOSUPPORT", "protocol family not supported"},
+	{47, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{48, "EADDRINUSE", "address already in use"},
+	{49, "EADDRNOTAVAIL", "can't assign requested address"},
+	{50, "ENETDOWN", "network is down"},
+	{51, "ENETUNREACH", "network is unreachable"},
+	{52, "ENETRESET", "network dropped connection on reset"},
+	{53, "ECONNABORTED", "software caused connection abort"},
+	{54, "ECONNRESET", "connection reset by peer"},
+	{55, "ENOBUFS", "no buffer space available"},
+	{56, "EISCONN", "socket is already connected"},
+	{57, "ENOTCONN", "socket is not connected"},
+	{58, "ESHUTDOWN", "can't send after socket shutdown"},
+	{59, "ETOOMANYREFS", "too many references: can't splice"},
+	{60, "ETIMEDOUT", "operation timed out"},
+	{61, "ECONNREFUSED", "connection refused"},
+	{62, "ELOOP", "too many levels of symbolic links"},
+	{63, "ENAMETOOLONG", "file name too long"},
+	{64, "EHOSTDOWN", "host is down"},
+	{65, "EHOSTUNREACH", "no route to host"},
+	{66, "ENOTEMPTY", "directory not empty"},
+	{67, "EPROCLIM", "too many processes"},
+	{68, "EUSERS", "too many users"},
+	{69, "EDQUOT", "disk quota exceeded"},
+	{70, "ESTALE", "stale NFS file handle"},
+	{71, "EREMOTE", "too many levels of remote in path"},
+	{72, "EBADRPC", "RPC struct is bad"},
+	{73, "ERPCMISMATCH", "RPC version wrong"},
+	{74, "EPROGUNAVAIL", "RPC program not available"},
+	{75, "EPROGMISMATCH", "program version wrong"},
+	{76, "EPROCUNAVAIL", "bad procedure for program"},
+	{77, "ENOLCK", "no locks available"},
+	{78, "ENOSYS", "function not implemented"},
+	{79, "EFTYPE", "inappropriate file type or format"},
+	{80, "EAUTH", "authentication error"},
+	{81, "ENEEDAUTH", "need authenticator"},
+	{82, "EIPSEC", "IPsec processing failure"},
+	{83, "ENOATTR", "attribute not found"},
+	{84, "EILSEQ", "illegal byte sequence"},
+	{85, "ENOMEDIUM", "no medium found"},
+	{86, "EMEDIUMTYPE", "wrong medium type"},
+	{87, "EOVERFLOW", "value too large to be stored in data type"},
+	{88, "ECANCELED", "operation canceled"},
+	{89, "EIDRM", "identifier removed"},
+	{90, "ENOMSG", "no message of desired type"},
+	{91, "ENOTSUP", "not supported"},
+	{92, "EBADMSG", "bad message"},
+	{93, "ENOTRECOVERABLE", "state not recoverable"},
+	{94, "EOWNERDEAD", "previous owner died"},
+	{95, "ELAST", "protocol error"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal instruction"},
+	{5, "SIGTRAP", "trace/BPT trap"},
+	{6, "SIGABRT", "abort trap"},
+	{7, "SIGEMT", "EMT trap"},
+	{8, "SIGFPE", "floating point exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus error"},
+	{11, "SIGSEGV", "segmentation fault"},
+	{12, "SIGSYS", "bad system call"},
+	{13, "SIGPIPE", "broken pipe"},
+	{14, "SIGALRM", "alarm clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGURG", "urgent I/O condition"},
+	{17, "SIGSTOP", "suspended (signal)"},
+	{18, "SIGTSTP", "suspended"},
+	{19, "SIGCONT", "continued"},
+	{20, "SIGCHLD", "child exited"},
+	{21, "SIGTTIN", "stopped (tty input)"},
+	{22, "SIGTTOU", "stopped (tty output)"},
+	{23, "SIGIO", "I/O possible"},
+	{24, "SIGXCPU", "cputime limit exceeded"},
+	{25, "SIGXFSZ", "filesize limit exceeded"},
+	{26, "SIGVTALRM", "virtual timer expired"},
+	{27, "SIGPROF", "profiling timer expired"},
+	{28, "SIGWINCH", "window size changes"},
+	{29, "SIGINFO", "information request"},
+	{30, "SIGUSR1", "user defined signal 1"},
+	{31, "SIGUSR2", "user defined signal 2"},
+	{32, "SIGTHR", "thread AST"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_solaris_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_solaris_amd64.go
new file mode 100644
index 000000000..46e054ccb
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zerrors_solaris_amd64.go
@@ -0,0 +1,1533 @@
+// mkerrors.sh -m64
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,solaris
+
+// Code generated by cmd/cgo -godefs; DO NOT EDIT.
+// cgo -godefs -- -m64 _const.go
+
+package unix
+
+import "syscall"
+
+const (
+	AF_802                        = 0x12
+	AF_APPLETALK                  = 0x10
+	AF_CCITT                      = 0xa
+	AF_CHAOS                      = 0x5
+	AF_DATAKIT                    = 0x9
+	AF_DECnet                     = 0xc
+	AF_DLI                        = 0xd
+	AF_ECMA                       = 0x8
+	AF_FILE                       = 0x1
+	AF_GOSIP                      = 0x16
+	AF_HYLINK                     = 0xf
+	AF_IMPLINK                    = 0x3
+	AF_INET                       = 0x2
+	AF_INET6                      = 0x1a
+	AF_INET_OFFLOAD               = 0x1e
+	AF_IPX                        = 0x17
+	AF_KEY                        = 0x1b
+	AF_LAT                        = 0xe
+	AF_LINK                       = 0x19
+	AF_LOCAL                      = 0x1
+	AF_MAX                        = 0x20
+	AF_NBS                        = 0x7
+	AF_NCA                        = 0x1c
+	AF_NIT                        = 0x11
+	AF_NS                         = 0x6
+	AF_OSI                        = 0x13
+	AF_OSINET                     = 0x15
+	AF_PACKET                     = 0x20
+	AF_POLICY                     = 0x1d
+	AF_PUP                        = 0x4
+	AF_ROUTE                      = 0x18
+	AF_SNA                        = 0xb
+	AF_TRILL                      = 0x1f
+	AF_UNIX                       = 0x1
+	AF_UNSPEC                     = 0x0
+	AF_X25                        = 0x14
+	ARPHRD_ARCNET                 = 0x7
+	ARPHRD_ATM                    = 0x10
+	ARPHRD_AX25                   = 0x3
+	ARPHRD_CHAOS                  = 0x5
+	ARPHRD_EETHER                 = 0x2
+	ARPHRD_ETHER                  = 0x1
+	ARPHRD_FC                     = 0x12
+	ARPHRD_FRAME                  = 0xf
+	ARPHRD_HDLC                   = 0x11
+	ARPHRD_IB                     = 0x20
+	ARPHRD_IEEE802                = 0x6
+	ARPHRD_IPATM                  = 0x13
+	ARPHRD_METRICOM               = 0x17
+	ARPHRD_TUNNEL                 = 0x1f
+	B0                            = 0x0
+	B110                          = 0x3
+	B115200                       = 0x12
+	B1200                         = 0x9
+	B134                          = 0x4
+	B150                          = 0x5
+	B153600                       = 0x13
+	B1800                         = 0xa
+	B19200                        = 0xe
+	B200                          = 0x6
+	B230400                       = 0x14
+	B2400                         = 0xb
+	B300                          = 0x7
+	B307200                       = 0x15
+	B38400                        = 0xf
+	B460800                       = 0x16
+	B4800                         = 0xc
+	B50                           = 0x1
+	B57600                        = 0x10
+	B600                          = 0x8
+	B75                           = 0x2
+	B76800                        = 0x11
+	B921600                       = 0x17
+	B9600                         = 0xd
+	BIOCFLUSH                     = 0x20004268
+	BIOCGBLEN                     = 0x40044266
+	BIOCGDLT                      = 0x4004426a
+	BIOCGDLTLIST                  = -0x3fefbd89
+	BIOCGDLTLIST32                = -0x3ff7bd89
+	BIOCGETIF                     = 0x4020426b
+	BIOCGETLIF                    = 0x4078426b
+	BIOCGHDRCMPLT                 = 0x40044274
+	BIOCGRTIMEOUT                 = 0x4010427b
+	BIOCGRTIMEOUT32               = 0x4008427b
+	BIOCGSEESENT                  = 0x40044278
+	BIOCGSTATS                    = 0x4080426f
+	BIOCGSTATSOLD                 = 0x4008426f
+	BIOCIMMEDIATE                 = -0x7ffbbd90
+	BIOCPROMISC                   = 0x20004269
+	BIOCSBLEN                     = -0x3ffbbd9a
+	BIOCSDLT                      = -0x7ffbbd8a
+	BIOCSETF                      = -0x7fefbd99
+	BIOCSETF32                    = -0x7ff7bd99
+	BIOCSETIF                     = -0x7fdfbd94
+	BIOCSETLIF                    = -0x7f87bd94
+	BIOCSHDRCMPLT                 = -0x7ffbbd8b
+	BIOCSRTIMEOUT                 = -0x7fefbd86
+	BIOCSRTIMEOUT32               = -0x7ff7bd86
+	BIOCSSEESENT                  = -0x7ffbbd87
+	BIOCSTCPF                     = -0x7fefbd8e
+	BIOCSUDPF                     = -0x7fefbd8d
+	BIOCVERSION                   = 0x40044271
+	BPF_A                         = 0x10
+	BPF_ABS                       = 0x20
+	BPF_ADD                       = 0x0
+	BPF_ALIGNMENT                 = 0x4
+	BPF_ALU                       = 0x4
+	BPF_AND                       = 0x50
+	BPF_B                         = 0x10
+	BPF_DFLTBUFSIZE               = 0x100000
+	BPF_DIV                       = 0x30
+	BPF_H                         = 0x8
+	BPF_IMM                       = 0x0
+	BPF_IND                       = 0x40
+	BPF_JA                        = 0x0
+	BPF_JEQ                       = 0x10
+	BPF_JGE                       = 0x30
+	BPF_JGT                       = 0x20
+	BPF_JMP                       = 0x5
+	BPF_JSET                      = 0x40
+	BPF_K                         = 0x0
+	BPF_LD                        = 0x0
+	BPF_LDX                       = 0x1
+	BPF_LEN                       = 0x80
+	BPF_LSH                       = 0x60
+	BPF_MAJOR_VERSION             = 0x1
+	BPF_MAXBUFSIZE                = 0x1000000
+	BPF_MAXINSNS                  = 0x200
+	BPF_MEM                       = 0x60
+	BPF_MEMWORDS                  = 0x10
+	BPF_MINBUFSIZE                = 0x20
+	BPF_MINOR_VERSION             = 0x1
+	BPF_MISC                      = 0x7
+	BPF_MSH                       = 0xa0
+	BPF_MUL                       = 0x20
+	BPF_NEG                       = 0x80
+	BPF_OR                        = 0x40
+	BPF_RELEASE                   = 0x30bb6
+	BPF_RET                       = 0x6
+	BPF_RSH                       = 0x70
+	BPF_ST                        = 0x2
+	BPF_STX                       = 0x3
+	BPF_SUB                       = 0x10
+	BPF_TAX                       = 0x0
+	BPF_TXA                       = 0x80
+	BPF_W                         = 0x0
+	BPF_X                         = 0x8
+	BRKINT                        = 0x2
+	BS0                           = 0x0
+	BS1                           = 0x2000
+	BSDLY                         = 0x2000
+	CBAUD                         = 0xf
+	CFLUSH                        = 0xf
+	CIBAUD                        = 0xf0000
+	CLOCAL                        = 0x800
+	CLOCK_HIGHRES                 = 0x4
+	CLOCK_LEVEL                   = 0xa
+	CLOCK_MONOTONIC               = 0x4
+	CLOCK_PROCESS_CPUTIME_ID      = 0x5
+	CLOCK_PROF                    = 0x2
+	CLOCK_REALTIME                = 0x3
+	CLOCK_THREAD_CPUTIME_ID       = 0x2
+	CLOCK_VIRTUAL                 = 0x1
+	CR0                           = 0x0
+	CR1                           = 0x200
+	CR2                           = 0x400
+	CR3                           = 0x600
+	CRDLY                         = 0x600
+	CREAD                         = 0x80
+	CRTSCTS                       = 0x80000000
+	CS5                           = 0x0
+	CS6                           = 0x10
+	CS7                           = 0x20
+	CS8                           = 0x30
+	CSIZE                         = 0x30
+	CSTART                        = 0x11
+	CSTATUS                       = 0x14
+	CSTOP                         = 0x13
+	CSTOPB                        = 0x40
+	CSUSP                         = 0x1a
+	CSWTCH                        = 0x1a
+	DLT_AIRONET_HEADER            = 0x78
+	DLT_APPLE_IP_OVER_IEEE1394    = 0x8a
+	DLT_ARCNET                    = 0x7
+	DLT_ARCNET_LINUX              = 0x81
+	DLT_ATM_CLIP                  = 0x13
+	DLT_ATM_RFC1483               = 0xb
+	DLT_AURORA                    = 0x7e
+	DLT_AX25                      = 0x3
+	DLT_BACNET_MS_TP              = 0xa5
+	DLT_CHAOS                     = 0x5
+	DLT_CISCO_IOS                 = 0x76
+	DLT_C_HDLC                    = 0x68
+	DLT_DOCSIS                    = 0x8f
+	DLT_ECONET                    = 0x73
+	DLT_EN10MB                    = 0x1
+	DLT_EN3MB                     = 0x2
+	DLT_ENC                       = 0x6d
+	DLT_ERF_ETH                   = 0xaf
+	DLT_ERF_POS                   = 0xb0
+	DLT_FDDI                      = 0xa
+	DLT_FRELAY                    = 0x6b
+	DLT_GCOM_SERIAL               = 0xad
+	DLT_GCOM_T1E1                 = 0xac
+	DLT_GPF_F                     = 0xab
+	DLT_GPF_T                     = 0xaa
+	DLT_GPRS_LLC                  = 0xa9
+	DLT_HDLC                      = 0x10
+	DLT_HHDLC                     = 0x79
+	DLT_HIPPI                     = 0xf
+	DLT_IBM_SN                    = 0x92
+	DLT_IBM_SP                    = 0x91
+	DLT_IEEE802                   = 0x6
+	DLT_IEEE802_11                = 0x69
+	DLT_IEEE802_11_RADIO          = 0x7f
+	DLT_IEEE802_11_RADIO_AVS      = 0xa3
+	DLT_IPNET                     = 0xe2
+	DLT_IPOIB                     = 0xa2
+	DLT_IP_OVER_FC                = 0x7a
+	DLT_JUNIPER_ATM1              = 0x89
+	DLT_JUNIPER_ATM2              = 0x87
+	DLT_JUNIPER_CHDLC             = 0xb5
+	DLT_JUNIPER_ES                = 0x84
+	DLT_JUNIPER_ETHER             = 0xb2
+	DLT_JUNIPER_FRELAY            = 0xb4
+	DLT_JUNIPER_GGSN              = 0x85
+	DLT_JUNIPER_MFR               = 0x86
+	DLT_JUNIPER_MLFR              = 0x83
+	DLT_JUNIPER_MLPPP             = 0x82
+	DLT_JUNIPER_MONITOR           = 0xa4
+	DLT_JUNIPER_PIC_PEER          = 0xae
+	DLT_JUNIPER_PPP               = 0xb3
+	DLT_JUNIPER_PPPOE             = 0xa7
+	DLT_JUNIPER_PPPOE_ATM         = 0xa8
+	DLT_JUNIPER_SERVICES          = 0x88
+	DLT_LINUX_IRDA                = 0x90
+	DLT_LINUX_LAPD                = 0xb1
+	DLT_LINUX_SLL                 = 0x71
+	DLT_LOOP                      = 0x6c
+	DLT_LTALK                     = 0x72
+	DLT_MTP2                      = 0x8c
+	DLT_MTP2_WITH_PHDR            = 0x8b
+	DLT_MTP3                      = 0x8d
+	DLT_NULL                      = 0x0
+	DLT_PCI_EXP                   = 0x7d
+	DLT_PFLOG                     = 0x75
+	DLT_PFSYNC                    = 0x12
+	DLT_PPP                       = 0x9
+	DLT_PPP_BSDOS                 = 0xe
+	DLT_PPP_PPPD                  = 0xa6
+	DLT_PRISM_HEADER              = 0x77
+	DLT_PRONET                    = 0x4
+	DLT_RAW                       = 0xc
+	DLT_RAWAF_MASK                = 0x2240000
+	DLT_RIO                       = 0x7c
+	DLT_SCCP                      = 0x8e
+	DLT_SLIP                      = 0x8
+	DLT_SLIP_BSDOS                = 0xd
+	DLT_SUNATM                    = 0x7b
+	DLT_SYMANTEC_FIREWALL         = 0x63
+	DLT_TZSP                      = 0x80
+	ECHO                          = 0x8
+	ECHOCTL                       = 0x200
+	ECHOE                         = 0x10
+	ECHOK                         = 0x20
+	ECHOKE                        = 0x800
+	ECHONL                        = 0x40
+	ECHOPRT                       = 0x400
+	EMPTY_SET                     = 0x0
+	EMT_CPCOVF                    = 0x1
+	EQUALITY_CHECK                = 0x0
+	EXTA                          = 0xe
+	EXTB                          = 0xf
+	FD_CLOEXEC                    = 0x1
+	FD_NFDBITS                    = 0x40
+	FD_SETSIZE                    = 0x10000
+	FF0                           = 0x0
+	FF1                           = 0x8000
+	FFDLY                         = 0x8000
+	FLUSHALL                      = 0x1
+	FLUSHDATA                     = 0x0
+	FLUSHO                        = 0x2000
+	F_ALLOCSP                     = 0xa
+	F_ALLOCSP64                   = 0xa
+	F_BADFD                       = 0x2e
+	F_BLKSIZE                     = 0x13
+	F_BLOCKS                      = 0x12
+	F_CHKFL                       = 0x8
+	F_COMPAT                      = 0x8
+	F_DUP2FD                      = 0x9
+	F_DUP2FD_CLOEXEC              = 0x24
+	F_DUPFD                       = 0x0
+	F_DUPFD_CLOEXEC               = 0x25
+	F_FLOCK                       = 0x35
+	F_FLOCK64                     = 0x35
+	F_FLOCKW                      = 0x36
+	F_FLOCKW64                    = 0x36
+	F_FREESP                      = 0xb
+	F_FREESP64                    = 0xb
+	F_GETFD                       = 0x1
+	F_GETFL                       = 0x3
+	F_GETLK                       = 0xe
+	F_GETLK64                     = 0xe
+	F_GETOWN                      = 0x17
+	F_GETXFL                      = 0x2d
+	F_HASREMOTELOCKS              = 0x1a
+	F_ISSTREAM                    = 0xd
+	F_MANDDNY                     = 0x10
+	F_MDACC                       = 0x20
+	F_NODNY                       = 0x0
+	F_NPRIV                       = 0x10
+	F_OFD_GETLK                   = 0x2f
+	F_OFD_GETLK64                 = 0x2f
+	F_OFD_SETLK                   = 0x30
+	F_OFD_SETLK64                 = 0x30
+	F_OFD_SETLKW                  = 0x31
+	F_OFD_SETLKW64                = 0x31
+	F_PRIV                        = 0xf
+	F_QUOTACTL                    = 0x11
+	F_RDACC                       = 0x1
+	F_RDDNY                       = 0x1
+	F_RDLCK                       = 0x1
+	F_REVOKE                      = 0x19
+	F_RMACC                       = 0x4
+	F_RMDNY                       = 0x4
+	F_RWACC                       = 0x3
+	F_RWDNY                       = 0x3
+	F_SETFD                       = 0x2
+	F_SETFL                       = 0x4
+	F_SETLK                       = 0x6
+	F_SETLK64                     = 0x6
+	F_SETLK64_NBMAND              = 0x2a
+	F_SETLKW                      = 0x7
+	F_SETLKW64                    = 0x7
+	F_SETLK_NBMAND                = 0x2a
+	F_SETOWN                      = 0x18
+	F_SHARE                       = 0x28
+	F_SHARE_NBMAND                = 0x2b
+	F_UNLCK                       = 0x3
+	F_UNLKSYS                     = 0x4
+	F_UNSHARE                     = 0x29
+	F_WRACC                       = 0x2
+	F_WRDNY                       = 0x2
+	F_WRLCK                       = 0x2
+	HUPCL                         = 0x400
+	IBSHIFT                       = 0x10
+	ICANON                        = 0x2
+	ICRNL                         = 0x100
+	IEXTEN                        = 0x8000
+	IFF_ADDRCONF                  = 0x80000
+	IFF_ALLMULTI                  = 0x200
+	IFF_ANYCAST                   = 0x400000
+	IFF_BROADCAST                 = 0x2
+	IFF_CANTCHANGE                = 0x7f203003b5a
+	IFF_COS_ENABLED               = 0x200000000
+	IFF_DEBUG                     = 0x4
+	IFF_DEPRECATED                = 0x40000
+	IFF_DHCPRUNNING               = 0x4000
+	IFF_DUPLICATE                 = 0x4000000000
+	IFF_FAILED                    = 0x10000000
+	IFF_FIXEDMTU                  = 0x1000000000
+	IFF_INACTIVE                  = 0x40000000
+	IFF_INTELLIGENT               = 0x400
+	IFF_IPMP                      = 0x8000000000
+	IFF_IPMP_CANTCHANGE           = 0x10000000
+	IFF_IPMP_INVALID              = 0x1ec200080
+	IFF_IPV4                      = 0x1000000
+	IFF_IPV6                      = 0x2000000
+	IFF_L3PROTECT                 = 0x40000000000
+	IFF_LOOPBACK                  = 0x8
+	IFF_MULTICAST                 = 0x800
+	IFF_MULTI_BCAST               = 0x1000
+	IFF_NOACCEPT                  = 0x4000000
+	IFF_NOARP                     = 0x80
+	IFF_NOFAILOVER                = 0x8000000
+	IFF_NOLINKLOCAL               = 0x20000000000
+	IFF_NOLOCAL                   = 0x20000
+	IFF_NONUD                     = 0x200000
+	IFF_NORTEXCH                  = 0x800000
+	IFF_NOTRAILERS                = 0x20
+	IFF_NOXMIT                    = 0x10000
+	IFF_OFFLINE                   = 0x80000000
+	IFF_POINTOPOINT               = 0x10
+	IFF_PREFERRED                 = 0x400000000
+	IFF_PRIVATE                   = 0x8000
+	IFF_PROMISC                   = 0x100
+	IFF_ROUTER                    = 0x100000
+	IFF_RUNNING                   = 0x40
+	IFF_STANDBY                   = 0x20000000
+	IFF_TEMPORARY                 = 0x800000000
+	IFF_UNNUMBERED                = 0x2000
+	IFF_UP                        = 0x1
+	IFF_VIRTUAL                   = 0x2000000000
+	IFF_VRRP                      = 0x10000000000
+	IFF_XRESOLV                   = 0x100000000
+	IFNAMSIZ                      = 0x10
+	IFT_1822                      = 0x2
+	IFT_6TO4                      = 0xca
+	IFT_AAL5                      = 0x31
+	IFT_ARCNET                    = 0x23
+	IFT_ARCNETPLUS                = 0x24
+	IFT_ATM                       = 0x25
+	IFT_CEPT                      = 0x13
+	IFT_DS3                       = 0x1e
+	IFT_EON                       = 0x19
+	IFT_ETHER                     = 0x6
+	IFT_FDDI                      = 0xf
+	IFT_FRELAY                    = 0x20
+	IFT_FRELAYDCE                 = 0x2c
+	IFT_HDH1822                   = 0x3
+	IFT_HIPPI                     = 0x2f
+	IFT_HSSI                      = 0x2e
+	IFT_HY                        = 0xe
+	IFT_IB                        = 0xc7
+	IFT_IPV4                      = 0xc8
+	IFT_IPV6                      = 0xc9
+	IFT_ISDNBASIC                 = 0x14
+	IFT_ISDNPRIMARY               = 0x15
+	IFT_ISO88022LLC               = 0x29
+	IFT_ISO88023                  = 0x7
+	IFT_ISO88024                  = 0x8
+	IFT_ISO88025                  = 0x9
+	IFT_ISO88026                  = 0xa
+	IFT_LAPB                      = 0x10
+	IFT_LOCALTALK                 = 0x2a
+	IFT_LOOP                      = 0x18
+	IFT_MIOX25                    = 0x26
+	IFT_MODEM                     = 0x30
+	IFT_NSIP                      = 0x1b
+	IFT_OTHER                     = 0x1
+	IFT_P10                       = 0xc
+	IFT_P80                       = 0xd
+	IFT_PARA                      = 0x22
+	IFT_PPP                       = 0x17
+	IFT_PROPMUX                   = 0x36
+	IFT_PROPVIRTUAL               = 0x35
+	IFT_PTPSERIAL                 = 0x16
+	IFT_RS232                     = 0x21
+	IFT_SDLC                      = 0x11
+	IFT_SIP                       = 0x1f
+	IFT_SLIP                      = 0x1c
+	IFT_SMDSDXI                   = 0x2b
+	IFT_SMDSICIP                  = 0x34
+	IFT_SONET                     = 0x27
+	IFT_SONETPATH                 = 0x32
+	IFT_SONETVT                   = 0x33
+	IFT_STARLAN                   = 0xb
+	IFT_T1                        = 0x12
+	IFT_ULTRA                     = 0x1d
+	IFT_V35                       = 0x2d
+	IFT_X25                       = 0x5
+	IFT_X25DDN                    = 0x4
+	IFT_X25PLE                    = 0x28
+	IFT_XETHER                    = 0x1a
+	IGNBRK                        = 0x1
+	IGNCR                         = 0x80
+	IGNPAR                        = 0x4
+	IMAXBEL                       = 0x2000
+	INLCR                         = 0x40
+	INPCK                         = 0x10
+	IN_AUTOCONF_MASK              = 0xffff0000
+	IN_AUTOCONF_NET               = 0xa9fe0000
+	IN_CLASSA_HOST                = 0xffffff
+	IN_CLASSA_MAX                 = 0x80
+	IN_CLASSA_NET                 = 0xff000000
+	IN_CLASSA_NSHIFT              = 0x18
+	IN_CLASSB_HOST                = 0xffff
+	IN_CLASSB_MAX                 = 0x10000
+	IN_CLASSB_NET                 = 0xffff0000
+	IN_CLASSB_NSHIFT              = 0x10
+	IN_CLASSC_HOST                = 0xff
+	IN_CLASSC_NET                 = 0xffffff00
+	IN_CLASSC_NSHIFT              = 0x8
+	IN_CLASSD_HOST                = 0xfffffff
+	IN_CLASSD_NET                 = 0xf0000000
+	IN_CLASSD_NSHIFT              = 0x1c
+	IN_CLASSE_NET                 = 0xffffffff
+	IN_LOOPBACKNET                = 0x7f
+	IN_PRIVATE12_MASK             = 0xfff00000
+	IN_PRIVATE12_NET              = 0xac100000
+	IN_PRIVATE16_MASK             = 0xffff0000
+	IN_PRIVATE16_NET              = 0xc0a80000
+	IN_PRIVATE8_MASK              = 0xff000000
+	IN_PRIVATE8_NET               = 0xa000000
+	IPPROTO_AH                    = 0x33
+	IPPROTO_DSTOPTS               = 0x3c
+	IPPROTO_EGP                   = 0x8
+	IPPROTO_ENCAP                 = 0x4
+	IPPROTO_EON                   = 0x50
+	IPPROTO_ESP                   = 0x32
+	IPPROTO_FRAGMENT              = 0x2c
+	IPPROTO_GGP                   = 0x3
+	IPPROTO_HELLO                 = 0x3f
+	IPPROTO_HOPOPTS               = 0x0
+	IPPROTO_ICMP                  = 0x1
+	IPPROTO_ICMPV6                = 0x3a
+	IPPROTO_IDP                   = 0x16
+	IPPROTO_IGMP                  = 0x2
+	IPPROTO_IP                    = 0x0
+	IPPROTO_IPV6                  = 0x29
+	IPPROTO_MAX                   = 0x100
+	IPPROTO_ND                    = 0x4d
+	IPPROTO_NONE                  = 0x3b
+	IPPROTO_OSPF                  = 0x59
+	IPPROTO_PIM                   = 0x67
+	IPPROTO_PUP                   = 0xc
+	IPPROTO_RAW                   = 0xff
+	IPPROTO_ROUTING               = 0x2b
+	IPPROTO_RSVP                  = 0x2e
+	IPPROTO_SCTP                  = 0x84
+	IPPROTO_TCP                   = 0x6
+	IPPROTO_UDP                   = 0x11
+	IPV6_ADD_MEMBERSHIP           = 0x9
+	IPV6_BOUND_IF                 = 0x41
+	IPV6_CHECKSUM                 = 0x18
+	IPV6_DONTFRAG                 = 0x21
+	IPV6_DROP_MEMBERSHIP          = 0xa
+	IPV6_DSTOPTS                  = 0xf
+	IPV6_FLOWINFO_FLOWLABEL       = 0xffff0f00
+	IPV6_FLOWINFO_TCLASS          = 0xf00f
+	IPV6_HOPLIMIT                 = 0xc
+	IPV6_HOPOPTS                  = 0xe
+	IPV6_JOIN_GROUP               = 0x9
+	IPV6_LEAVE_GROUP              = 0xa
+	IPV6_MULTICAST_HOPS           = 0x7
+	IPV6_MULTICAST_IF             = 0x6
+	IPV6_MULTICAST_LOOP           = 0x8
+	IPV6_NEXTHOP                  = 0xd
+	IPV6_PAD1_OPT                 = 0x0
+	IPV6_PATHMTU                  = 0x25
+	IPV6_PKTINFO                  = 0xb
+	IPV6_PREFER_SRC_CGA           = 0x20
+	IPV6_PREFER_SRC_CGADEFAULT    = 0x10
+	IPV6_PREFER_SRC_CGAMASK       = 0x30
+	IPV6_PREFER_SRC_COA           = 0x2
+	IPV6_PREFER_SRC_DEFAULT       = 0x15
+	IPV6_PREFER_SRC_HOME          = 0x1
+	IPV6_PREFER_SRC_MASK          = 0x3f
+	IPV6_PREFER_SRC_MIPDEFAULT    = 0x1
+	IPV6_PREFER_SRC_MIPMASK       = 0x3
+	IPV6_PREFER_SRC_NONCGA        = 0x10
+	IPV6_PREFER_SRC_PUBLIC        = 0x4
+	IPV6_PREFER_SRC_TMP           = 0x8
+	IPV6_PREFER_SRC_TMPDEFAULT    = 0x4
+	IPV6_PREFER_SRC_TMPMASK       = 0xc
+	IPV6_RECVDSTOPTS              = 0x28
+	IPV6_RECVHOPLIMIT             = 0x13
+	IPV6_RECVHOPOPTS              = 0x14
+	IPV6_RECVPATHMTU              = 0x24
+	IPV6_RECVPKTINFO              = 0x12
+	IPV6_RECVRTHDR                = 0x16
+	IPV6_RECVRTHDRDSTOPTS         = 0x17
+	IPV6_RECVTCLASS               = 0x19
+	IPV6_RTHDR                    = 0x10
+	IPV6_RTHDRDSTOPTS             = 0x11
+	IPV6_RTHDR_TYPE_0             = 0x0
+	IPV6_SEC_OPT                  = 0x22
+	IPV6_SRC_PREFERENCES          = 0x23
+	IPV6_TCLASS                   = 0x26
+	IPV6_UNICAST_HOPS             = 0x5
+	IPV6_UNSPEC_SRC               = 0x42
+	IPV6_USE_MIN_MTU              = 0x20
+	IPV6_V6ONLY                   = 0x27
+	IP_ADD_MEMBERSHIP             = 0x13
+	IP_ADD_SOURCE_MEMBERSHIP      = 0x17
+	IP_BLOCK_SOURCE               = 0x15
+	IP_BOUND_IF                   = 0x41
+	IP_BROADCAST                  = 0x106
+	IP_BROADCAST_TTL              = 0x43
+	IP_DEFAULT_MULTICAST_LOOP     = 0x1
+	IP_DEFAULT_MULTICAST_TTL      = 0x1
+	IP_DF                         = 0x4000
+	IP_DHCPINIT_IF                = 0x45
+	IP_DONTFRAG                   = 0x1b
+	IP_DONTROUTE                  = 0x105
+	IP_DROP_MEMBERSHIP            = 0x14
+	IP_DROP_SOURCE_MEMBERSHIP     = 0x18
+	IP_HDRINCL                    = 0x2
+	IP_MAXPACKET                  = 0xffff
+	IP_MF                         = 0x2000
+	IP_MSS                        = 0x240
+	IP_MULTICAST_IF               = 0x10
+	IP_MULTICAST_LOOP             = 0x12
+	IP_MULTICAST_TTL              = 0x11
+	IP_NEXTHOP                    = 0x19
+	IP_OPTIONS                    = 0x1
+	IP_PKTINFO                    = 0x1a
+	IP_RECVDSTADDR                = 0x7
+	IP_RECVIF                     = 0x9
+	IP_RECVOPTS                   = 0x5
+	IP_RECVPKTINFO                = 0x1a
+	IP_RECVRETOPTS                = 0x6
+	IP_RECVSLLA                   = 0xa
+	IP_RECVTTL                    = 0xb
+	IP_RETOPTS                    = 0x8
+	IP_REUSEADDR                  = 0x104
+	IP_SEC_OPT                    = 0x22
+	IP_TOS                        = 0x3
+	IP_TTL                        = 0x4
+	IP_UNBLOCK_SOURCE             = 0x16
+	IP_UNSPEC_SRC                 = 0x42
+	ISIG                          = 0x1
+	ISTRIP                        = 0x20
+	IUCLC                         = 0x200
+	IXANY                         = 0x800
+	IXOFF                         = 0x1000
+	IXON                          = 0x400
+	LOCK_EX                       = 0x2
+	LOCK_NB                       = 0x4
+	LOCK_SH                       = 0x1
+	LOCK_UN                       = 0x8
+	MADV_ACCESS_DEFAULT           = 0x6
+	MADV_ACCESS_LWP               = 0x7
+	MADV_ACCESS_MANY              = 0x8
+	MADV_DONTNEED                 = 0x4
+	MADV_FREE                     = 0x5
+	MADV_NORMAL                   = 0x0
+	MADV_PURGE                    = 0x9
+	MADV_RANDOM                   = 0x1
+	MADV_SEQUENTIAL               = 0x2
+	MADV_WILLNEED                 = 0x3
+	MAP_32BIT                     = 0x80
+	MAP_ALIGN                     = 0x200
+	MAP_ANON                      = 0x100
+	MAP_ANONYMOUS                 = 0x100
+	MAP_FILE                      = 0x0
+	MAP_FIXED                     = 0x10
+	MAP_INITDATA                  = 0x800
+	MAP_NORESERVE                 = 0x40
+	MAP_PRIVATE                   = 0x2
+	MAP_RENAME                    = 0x20
+	MAP_SHARED                    = 0x1
+	MAP_TEXT                      = 0x400
+	MAP_TYPE                      = 0xf
+	MCL_CURRENT                   = 0x1
+	MCL_FUTURE                    = 0x2
+	MSG_CTRUNC                    = 0x10
+	MSG_DONTROUTE                 = 0x4
+	MSG_DONTWAIT                  = 0x80
+	MSG_DUPCTRL                   = 0x800
+	MSG_EOR                       = 0x8
+	MSG_MAXIOVLEN                 = 0x10
+	MSG_NOTIFICATION              = 0x100
+	MSG_OOB                       = 0x1
+	MSG_PEEK                      = 0x2
+	MSG_TRUNC                     = 0x20
+	MSG_WAITALL                   = 0x40
+	MSG_XPG4_2                    = 0x8000
+	MS_ASYNC                      = 0x1
+	MS_INVALIDATE                 = 0x2
+	MS_OLDSYNC                    = 0x0
+	MS_SYNC                       = 0x4
+	M_FLUSH                       = 0x86
+	NAME_MAX                      = 0xff
+	NEWDEV                        = 0x1
+	NFDBITS                       = 0x40
+	NL0                           = 0x0
+	NL1                           = 0x100
+	NLDLY                         = 0x100
+	NOFLSH                        = 0x80
+	OCRNL                         = 0x8
+	OFDEL                         = 0x80
+	OFILL                         = 0x40
+	OLCUC                         = 0x2
+	OLDDEV                        = 0x0
+	ONBITSMAJOR                   = 0x7
+	ONBITSMINOR                   = 0x8
+	ONLCR                         = 0x4
+	ONLRET                        = 0x20
+	ONOCR                         = 0x10
+	OPENFAIL                      = -0x1
+	OPOST                         = 0x1
+	O_ACCMODE                     = 0x600003
+	O_APPEND                      = 0x8
+	O_CLOEXEC                     = 0x800000
+	O_CREAT                       = 0x100
+	O_DSYNC                       = 0x40
+	O_EXCL                        = 0x400
+	O_EXEC                        = 0x400000
+	O_LARGEFILE                   = 0x2000
+	O_NDELAY                      = 0x4
+	O_NOCTTY                      = 0x800
+	O_NOFOLLOW                    = 0x20000
+	O_NOLINKS                     = 0x40000
+	O_NONBLOCK                    = 0x80
+	O_RDONLY                      = 0x0
+	O_RDWR                        = 0x2
+	O_RSYNC                       = 0x8000
+	O_SEARCH                      = 0x200000
+	O_SIOCGIFCONF                 = -0x3ff796ec
+	O_SIOCGLIFCONF                = -0x3fef9688
+	O_SYNC                        = 0x10
+	O_TRUNC                       = 0x200
+	O_WRONLY                      = 0x1
+	O_XATTR                       = 0x4000
+	PARENB                        = 0x100
+	PAREXT                        = 0x100000
+	PARMRK                        = 0x8
+	PARODD                        = 0x200
+	PENDIN                        = 0x4000
+	PRIO_PGRP                     = 0x1
+	PRIO_PROCESS                  = 0x0
+	PRIO_USER                     = 0x2
+	PROT_EXEC                     = 0x4
+	PROT_NONE                     = 0x0
+	PROT_READ                     = 0x1
+	PROT_WRITE                    = 0x2
+	RLIMIT_AS                     = 0x6
+	RLIMIT_CORE                   = 0x4
+	RLIMIT_CPU                    = 0x0
+	RLIMIT_DATA                   = 0x2
+	RLIMIT_FSIZE                  = 0x1
+	RLIMIT_NOFILE                 = 0x5
+	RLIMIT_STACK                  = 0x3
+	RLIM_INFINITY                 = -0x3
+	RTAX_AUTHOR                   = 0x6
+	RTAX_BRD                      = 0x7
+	RTAX_DST                      = 0x0
+	RTAX_GATEWAY                  = 0x1
+	RTAX_GENMASK                  = 0x3
+	RTAX_IFA                      = 0x5
+	RTAX_IFP                      = 0x4
+	RTAX_MAX                      = 0x9
+	RTAX_NETMASK                  = 0x2
+	RTAX_SRC                      = 0x8
+	RTA_AUTHOR                    = 0x40
+	RTA_BRD                       = 0x80
+	RTA_DST                       = 0x1
+	RTA_GATEWAY                   = 0x2
+	RTA_GENMASK                   = 0x8
+	RTA_IFA                       = 0x20
+	RTA_IFP                       = 0x10
+	RTA_NETMASK                   = 0x4
+	RTA_NUMBITS                   = 0x9
+	RTA_SRC                       = 0x100
+	RTF_BLACKHOLE                 = 0x1000
+	RTF_CLONING                   = 0x100
+	RTF_DONE                      = 0x40
+	RTF_DYNAMIC                   = 0x10
+	RTF_GATEWAY                   = 0x2
+	RTF_HOST                      = 0x4
+	RTF_INDIRECT                  = 0x40000
+	RTF_KERNEL                    = 0x80000
+	RTF_LLINFO                    = 0x400
+	RTF_MASK                      = 0x80
+	RTF_MODIFIED                  = 0x20
+	RTF_MULTIRT                   = 0x10000
+	RTF_PRIVATE                   = 0x2000
+	RTF_PROTO1                    = 0x8000
+	RTF_PROTO2                    = 0x4000
+	RTF_REJECT                    = 0x8
+	RTF_SETSRC                    = 0x20000
+	RTF_STATIC                    = 0x800
+	RTF_UP                        = 0x1
+	RTF_XRESOLVE                  = 0x200
+	RTF_ZONE                      = 0x100000
+	RTM_ADD                       = 0x1
+	RTM_CHANGE                    = 0x3
+	RTM_CHGADDR                   = 0xf
+	RTM_DELADDR                   = 0xd
+	RTM_DELETE                    = 0x2
+	RTM_FREEADDR                  = 0x10
+	RTM_GET                       = 0x4
+	RTM_IFINFO                    = 0xe
+	RTM_LOCK                      = 0x8
+	RTM_LOSING                    = 0x5
+	RTM_MISS                      = 0x7
+	RTM_NEWADDR                   = 0xc
+	RTM_OLDADD                    = 0x9
+	RTM_OLDDEL                    = 0xa
+	RTM_REDIRECT                  = 0x6
+	RTM_RESOLVE                   = 0xb
+	RTM_VERSION                   = 0x3
+	RTV_EXPIRE                    = 0x4
+	RTV_HOPCOUNT                  = 0x2
+	RTV_MTU                       = 0x1
+	RTV_RPIPE                     = 0x8
+	RTV_RTT                       = 0x40
+	RTV_RTTVAR                    = 0x80
+	RTV_SPIPE                     = 0x10
+	RTV_SSTHRESH                  = 0x20
+	RT_AWARE                      = 0x1
+	RUSAGE_CHILDREN               = -0x1
+	RUSAGE_SELF                   = 0x0
+	SCM_RIGHTS                    = 0x1010
+	SCM_TIMESTAMP                 = 0x1013
+	SCM_UCRED                     = 0x1012
+	SHUT_RD                       = 0x0
+	SHUT_RDWR                     = 0x2
+	SHUT_WR                       = 0x1
+	SIG2STR_MAX                   = 0x20
+	SIOCADDMULTI                  = -0x7fdf96cf
+	SIOCADDRT                     = -0x7fcf8df6
+	SIOCATMARK                    = 0x40047307
+	SIOCDARP                      = -0x7fdb96e0
+	SIOCDELMULTI                  = -0x7fdf96ce
+	SIOCDELRT                     = -0x7fcf8df5
+	SIOCDXARP                     = -0x7fff9658
+	SIOCGARP                      = -0x3fdb96e1
+	SIOCGDSTINFO                  = -0x3fff965c
+	SIOCGENADDR                   = -0x3fdf96ab
+	SIOCGENPSTATS                 = -0x3fdf96c7
+	SIOCGETLSGCNT                 = -0x3fef8deb
+	SIOCGETNAME                   = 0x40107334
+	SIOCGETPEER                   = 0x40107335
+	SIOCGETPROP                   = -0x3fff8f44
+	SIOCGETSGCNT                  = -0x3feb8deb
+	SIOCGETSYNC                   = -0x3fdf96d3
+	SIOCGETVIFCNT                 = -0x3feb8dec
+	SIOCGHIWAT                    = 0x40047301
+	SIOCGIFADDR                   = -0x3fdf96f3
+	SIOCGIFBRDADDR                = -0x3fdf96e9
+	SIOCGIFCONF                   = -0x3ff796a4
+	SIOCGIFDSTADDR                = -0x3fdf96f1
+	SIOCGIFFLAGS                  = -0x3fdf96ef
+	SIOCGIFHWADDR                 = -0x3fdf9647
+	SIOCGIFINDEX                  = -0x3fdf96a6
+	SIOCGIFMEM                    = -0x3fdf96ed
+	SIOCGIFMETRIC                 = -0x3fdf96e5
+	SIOCGIFMTU                    = -0x3fdf96ea
+	SIOCGIFMUXID                  = -0x3fdf96a8
+	SIOCGIFNETMASK                = -0x3fdf96e7
+	SIOCGIFNUM                    = 0x40046957
+	SIOCGIP6ADDRPOLICY            = -0x3fff965e
+	SIOCGIPMSFILTER               = -0x3ffb964c
+	SIOCGLIFADDR                  = -0x3f87968f
+	SIOCGLIFBINDING               = -0x3f879666
+	SIOCGLIFBRDADDR               = -0x3f879685
+	SIOCGLIFCONF                  = -0x3fef965b
+	SIOCGLIFDADSTATE              = -0x3f879642
+	SIOCGLIFDSTADDR               = -0x3f87968d
+	SIOCGLIFFLAGS                 = -0x3f87968b
+	SIOCGLIFGROUPINFO             = -0x3f4b9663
+	SIOCGLIFGROUPNAME             = -0x3f879664
+	SIOCGLIFHWADDR                = -0x3f879640
+	SIOCGLIFINDEX                 = -0x3f87967b
+	SIOCGLIFLNKINFO               = -0x3f879674
+	SIOCGLIFMETRIC                = -0x3f879681
+	SIOCGLIFMTU                   = -0x3f879686
+	SIOCGLIFMUXID                 = -0x3f87967d
+	SIOCGLIFNETMASK               = -0x3f879683
+	SIOCGLIFNUM                   = -0x3ff3967e
+	SIOCGLIFSRCOF                 = -0x3fef964f
+	SIOCGLIFSUBNET                = -0x3f879676
+	SIOCGLIFTOKEN                 = -0x3f879678
+	SIOCGLIFUSESRC                = -0x3f879651
+	SIOCGLIFZONE                  = -0x3f879656
+	SIOCGLOWAT                    = 0x40047303
+	SIOCGMSFILTER                 = -0x3ffb964e
+	SIOCGPGRP                     = 0x40047309
+	SIOCGSTAMP                    = -0x3fef9646
+	SIOCGXARP                     = -0x3fff9659
+	SIOCIFDETACH                  = -0x7fdf96c8
+	SIOCILB                       = -0x3ffb9645
+	SIOCLIFADDIF                  = -0x3f879691
+	SIOCLIFDELND                  = -0x7f879673
+	SIOCLIFGETND                  = -0x3f879672
+	SIOCLIFREMOVEIF               = -0x7f879692
+	SIOCLIFSETND                  = -0x7f879671
+	SIOCLOWER                     = -0x7fdf96d7
+	SIOCSARP                      = -0x7fdb96e2
+	SIOCSCTPGOPT                  = -0x3fef9653
+	SIOCSCTPPEELOFF               = -0x3ffb9652
+	SIOCSCTPSOPT                  = -0x7fef9654
+	SIOCSENABLESDP                = -0x3ffb9649
+	SIOCSETPROP                   = -0x7ffb8f43
+	SIOCSETSYNC                   = -0x7fdf96d4
+	SIOCSHIWAT                    = -0x7ffb8d00
+	SIOCSIFADDR                   = -0x7fdf96f4
+	SIOCSIFBRDADDR                = -0x7fdf96e8
+	SIOCSIFDSTADDR                = -0x7fdf96f2
+	SIOCSIFFLAGS                  = -0x7fdf96f0
+	SIOCSIFINDEX                  = -0x7fdf96a5
+	SIOCSIFMEM                    = -0x7fdf96ee
+	SIOCSIFMETRIC                 = -0x7fdf96e4
+	SIOCSIFMTU                    = -0x7fdf96eb
+	SIOCSIFMUXID                  = -0x7fdf96a7
+	SIOCSIFNAME                   = -0x7fdf96b7
+	SIOCSIFNETMASK                = -0x7fdf96e6
+	SIOCSIP6ADDRPOLICY            = -0x7fff965d
+	SIOCSIPMSFILTER               = -0x7ffb964b
+	SIOCSLGETREQ                  = -0x3fdf96b9
+	SIOCSLIFADDR                  = -0x7f879690
+	SIOCSLIFBRDADDR               = -0x7f879684
+	SIOCSLIFDSTADDR               = -0x7f87968e
+	SIOCSLIFFLAGS                 = -0x7f87968c
+	SIOCSLIFGROUPNAME             = -0x7f879665
+	SIOCSLIFINDEX                 = -0x7f87967a
+	SIOCSLIFLNKINFO               = -0x7f879675
+	SIOCSLIFMETRIC                = -0x7f879680
+	SIOCSLIFMTU                   = -0x7f879687
+	SIOCSLIFMUXID                 = -0x7f87967c
+	SIOCSLIFNAME                  = -0x3f87967f
+	SIOCSLIFNETMASK               = -0x7f879682
+	SIOCSLIFPREFIX                = -0x3f879641
+	SIOCSLIFSUBNET                = -0x7f879677
+	SIOCSLIFTOKEN                 = -0x7f879679
+	SIOCSLIFUSESRC                = -0x7f879650
+	SIOCSLIFZONE                  = -0x7f879655
+	SIOCSLOWAT                    = -0x7ffb8cfe
+	SIOCSLSTAT                    = -0x7fdf96b8
+	SIOCSMSFILTER                 = -0x7ffb964d
+	SIOCSPGRP                     = -0x7ffb8cf8
+	SIOCSPROMISC                  = -0x7ffb96d0
+	SIOCSQPTR                     = -0x3ffb9648
+	SIOCSSDSTATS                  = -0x3fdf96d2
+	SIOCSSESTATS                  = -0x3fdf96d1
+	SIOCSXARP                     = -0x7fff965a
+	SIOCTMYADDR                   = -0x3ff79670
+	SIOCTMYSITE                   = -0x3ff7966e
+	SIOCTONLINK                   = -0x3ff7966f
+	SIOCUPPER                     = -0x7fdf96d8
+	SIOCX25RCV                    = -0x3fdf96c4
+	SIOCX25TBL                    = -0x3fdf96c3
+	SIOCX25XMT                    = -0x3fdf96c5
+	SIOCXPROTO                    = 0x20007337
+	SOCK_CLOEXEC                  = 0x80000
+	SOCK_DGRAM                    = 0x1
+	SOCK_NDELAY                   = 0x200000
+	SOCK_NONBLOCK                 = 0x100000
+	SOCK_RAW                      = 0x4
+	SOCK_RDM                      = 0x5
+	SOCK_SEQPACKET                = 0x6
+	SOCK_STREAM                   = 0x2
+	SOCK_TYPE_MASK                = 0xffff
+	SOL_FILTER                    = 0xfffc
+	SOL_PACKET                    = 0xfffd
+	SOL_ROUTE                     = 0xfffe
+	SOL_SOCKET                    = 0xffff
+	SOMAXCONN                     = 0x80
+	SO_ACCEPTCONN                 = 0x2
+	SO_ALL                        = 0x3f
+	SO_ALLZONES                   = 0x1014
+	SO_ANON_MLP                   = 0x100a
+	SO_ATTACH_FILTER              = 0x40000001
+	SO_BAND                       = 0x4000
+	SO_BROADCAST                  = 0x20
+	SO_COPYOPT                    = 0x80000
+	SO_DEBUG                      = 0x1
+	SO_DELIM                      = 0x8000
+	SO_DETACH_FILTER              = 0x40000002
+	SO_DGRAM_ERRIND               = 0x200
+	SO_DOMAIN                     = 0x100c
+	SO_DONTLINGER                 = -0x81
+	SO_DONTROUTE                  = 0x10
+	SO_ERROPT                     = 0x40000
+	SO_ERROR                      = 0x1007
+	SO_EXCLBIND                   = 0x1015
+	SO_HIWAT                      = 0x10
+	SO_ISNTTY                     = 0x800
+	SO_ISTTY                      = 0x400
+	SO_KEEPALIVE                  = 0x8
+	SO_LINGER                     = 0x80
+	SO_LOWAT                      = 0x20
+	SO_MAC_EXEMPT                 = 0x100b
+	SO_MAC_IMPLICIT               = 0x1016
+	SO_MAXBLK                     = 0x100000
+	SO_MAXPSZ                     = 0x8
+	SO_MINPSZ                     = 0x4
+	SO_MREADOFF                   = 0x80
+	SO_MREADON                    = 0x40
+	SO_NDELOFF                    = 0x200
+	SO_NDELON                     = 0x100
+	SO_NODELIM                    = 0x10000
+	SO_OOBINLINE                  = 0x100
+	SO_PROTOTYPE                  = 0x1009
+	SO_RCVBUF                     = 0x1002
+	SO_RCVLOWAT                   = 0x1004
+	SO_RCVPSH                     = 0x100d
+	SO_RCVTIMEO                   = 0x1006
+	SO_READOPT                    = 0x1
+	SO_RECVUCRED                  = 0x400
+	SO_REUSEADDR                  = 0x4
+	SO_SECATTR                    = 0x1011
+	SO_SNDBUF                     = 0x1001
+	SO_SNDLOWAT                   = 0x1003
+	SO_SNDTIMEO                   = 0x1005
+	SO_STRHOLD                    = 0x20000
+	SO_TAIL                       = 0x200000
+	SO_TIMESTAMP                  = 0x1013
+	SO_TONSTOP                    = 0x2000
+	SO_TOSTOP                     = 0x1000
+	SO_TYPE                       = 0x1008
+	SO_USELOOPBACK                = 0x40
+	SO_VRRP                       = 0x1017
+	SO_WROFF                      = 0x2
+	S_ENFMT                       = 0x400
+	S_IAMB                        = 0x1ff
+	S_IEXEC                       = 0x40
+	S_IFBLK                       = 0x6000
+	S_IFCHR                       = 0x2000
+	S_IFDIR                       = 0x4000
+	S_IFDOOR                      = 0xd000
+	S_IFIFO                       = 0x1000
+	S_IFLNK                       = 0xa000
+	S_IFMT                        = 0xf000
+	S_IFNAM                       = 0x5000
+	S_IFPORT                      = 0xe000
+	S_IFREG                       = 0x8000
+	S_IFSOCK                      = 0xc000
+	S_INSEM                       = 0x1
+	S_INSHD                       = 0x2
+	S_IREAD                       = 0x100
+	S_IRGRP                       = 0x20
+	S_IROTH                       = 0x4
+	S_IRUSR                       = 0x100
+	S_IRWXG                       = 0x38
+	S_IRWXO                       = 0x7
+	S_IRWXU                       = 0x1c0
+	S_ISGID                       = 0x400
+	S_ISUID                       = 0x800
+	S_ISVTX                       = 0x200
+	S_IWGRP                       = 0x10
+	S_IWOTH                       = 0x2
+	S_IWRITE                      = 0x80
+	S_IWUSR                       = 0x80
+	S_IXGRP                       = 0x8
+	S_IXOTH                       = 0x1
+	S_IXUSR                       = 0x40
+	TAB0                          = 0x0
+	TAB1                          = 0x800
+	TAB2                          = 0x1000
+	TAB3                          = 0x1800
+	TABDLY                        = 0x1800
+	TCFLSH                        = 0x5407
+	TCGETA                        = 0x5401
+	TCGETS                        = 0x540d
+	TCIFLUSH                      = 0x0
+	TCIOFF                        = 0x2
+	TCIOFLUSH                     = 0x2
+	TCION                         = 0x3
+	TCOFLUSH                      = 0x1
+	TCOOFF                        = 0x0
+	TCOON                         = 0x1
+	TCP_ABORT_THRESHOLD           = 0x11
+	TCP_ANONPRIVBIND              = 0x20
+	TCP_CONN_ABORT_THRESHOLD      = 0x13
+	TCP_CONN_NOTIFY_THRESHOLD     = 0x12
+	TCP_CORK                      = 0x18
+	TCP_EXCLBIND                  = 0x21
+	TCP_INIT_CWND                 = 0x15
+	TCP_KEEPALIVE                 = 0x8
+	TCP_KEEPALIVE_ABORT_THRESHOLD = 0x17
+	TCP_KEEPALIVE_THRESHOLD       = 0x16
+	TCP_KEEPCNT                   = 0x23
+	TCP_KEEPIDLE                  = 0x22
+	TCP_KEEPINTVL                 = 0x24
+	TCP_LINGER2                   = 0x1c
+	TCP_MAXSEG                    = 0x2
+	TCP_MSS                       = 0x218
+	TCP_NODELAY                   = 0x1
+	TCP_NOTIFY_THRESHOLD          = 0x10
+	TCP_RECVDSTADDR               = 0x14
+	TCP_RTO_INITIAL               = 0x19
+	TCP_RTO_MAX                   = 0x1b
+	TCP_RTO_MIN                   = 0x1a
+	TCSAFLUSH                     = 0x5410
+	TCSBRK                        = 0x5405
+	TCSETA                        = 0x5402
+	TCSETAF                       = 0x5404
+	TCSETAW                       = 0x5403
+	TCSETS                        = 0x540e
+	TCSETSF                       = 0x5410
+	TCSETSW                       = 0x540f
+	TCXONC                        = 0x5406
+	TIOC                          = 0x5400
+	TIOCCBRK                      = 0x747a
+	TIOCCDTR                      = 0x7478
+	TIOCCILOOP                    = 0x746c
+	TIOCEXCL                      = 0x740d
+	TIOCFLUSH                     = 0x7410
+	TIOCGETC                      = 0x7412
+	TIOCGETD                      = 0x7400
+	TIOCGETP                      = 0x7408
+	TIOCGLTC                      = 0x7474
+	TIOCGPGRP                     = 0x7414
+	TIOCGPPS                      = 0x547d
+	TIOCGPPSEV                    = 0x547f
+	TIOCGSID                      = 0x7416
+	TIOCGSOFTCAR                  = 0x5469
+	TIOCGWINSZ                    = 0x5468
+	TIOCHPCL                      = 0x7402
+	TIOCKBOF                      = 0x5409
+	TIOCKBON                      = 0x5408
+	TIOCLBIC                      = 0x747e
+	TIOCLBIS                      = 0x747f
+	TIOCLGET                      = 0x747c
+	TIOCLSET                      = 0x747d
+	TIOCMBIC                      = 0x741c
+	TIOCMBIS                      = 0x741b
+	TIOCMGET                      = 0x741d
+	TIOCMSET                      = 0x741a
+	TIOCM_CAR                     = 0x40
+	TIOCM_CD                      = 0x40
+	TIOCM_CTS                     = 0x20
+	TIOCM_DSR                     = 0x100
+	TIOCM_DTR                     = 0x2
+	TIOCM_LE                      = 0x1
+	TIOCM_RI                      = 0x80
+	TIOCM_RNG                     = 0x80
+	TIOCM_RTS                     = 0x4
+	TIOCM_SR                      = 0x10
+	TIOCM_ST                      = 0x8
+	TIOCNOTTY                     = 0x7471
+	TIOCNXCL                      = 0x740e
+	TIOCOUTQ                      = 0x7473
+	TIOCREMOTE                    = 0x741e
+	TIOCSBRK                      = 0x747b
+	TIOCSCTTY                     = 0x7484
+	TIOCSDTR                      = 0x7479
+	TIOCSETC                      = 0x7411
+	TIOCSETD                      = 0x7401
+	TIOCSETN                      = 0x740a
+	TIOCSETP                      = 0x7409
+	TIOCSIGNAL                    = 0x741f
+	TIOCSILOOP                    = 0x746d
+	TIOCSLTC                      = 0x7475
+	TIOCSPGRP                     = 0x7415
+	TIOCSPPS                      = 0x547e
+	TIOCSSOFTCAR                  = 0x546a
+	TIOCSTART                     = 0x746e
+	TIOCSTI                       = 0x7417
+	TIOCSTOP                      = 0x746f
+	TIOCSWINSZ                    = 0x5467
+	TOSTOP                        = 0x100
+	UTIME_NOW                     = -0x1
+	UTIME_OMIT                    = -0x2
+	VCEOF                         = 0x8
+	VCEOL                         = 0x9
+	VDISCARD                      = 0xd
+	VDSUSP                        = 0xb
+	VEOF                          = 0x4
+	VEOL                          = 0x5
+	VEOL2                         = 0x6
+	VERASE                        = 0x2
+	VERASE2                       = 0x11
+	VINTR                         = 0x0
+	VKILL                         = 0x3
+	VLNEXT                        = 0xf
+	VMIN                          = 0x4
+	VQUIT                         = 0x1
+	VREPRINT                      = 0xc
+	VSTART                        = 0x8
+	VSTATUS                       = 0x10
+	VSTOP                         = 0x9
+	VSUSP                         = 0xa
+	VSWTCH                        = 0x7
+	VT0                           = 0x0
+	VT1                           = 0x4000
+	VTDLY                         = 0x4000
+	VTIME                         = 0x5
+	VWERASE                       = 0xe
+	WCONTFLG                      = 0xffff
+	WCONTINUED                    = 0x8
+	WCOREFLG                      = 0x80
+	WEXITED                       = 0x1
+	WNOHANG                       = 0x40
+	WNOWAIT                       = 0x80
+	WOPTMASK                      = 0xcf
+	WRAP                          = 0x20000
+	WSIGMASK                      = 0x7f
+	WSTOPFLG                      = 0x7f
+	WSTOPPED                      = 0x4
+	WTRAPPED                      = 0x2
+	WUNTRACED                     = 0x4
+	XCASE                         = 0x4
+	XTABS                         = 0x1800
+)
+
+// Errors
+const (
+	E2BIG           = syscall.Errno(0x7)
+	EACCES          = syscall.Errno(0xd)
+	EADDRINUSE      = syscall.Errno(0x7d)
+	EADDRNOTAVAIL   = syscall.Errno(0x7e)
+	EADV            = syscall.Errno(0x44)
+	EAFNOSUPPORT    = syscall.Errno(0x7c)
+	EAGAIN          = syscall.Errno(0xb)
+	EALREADY        = syscall.Errno(0x95)
+	EBADE           = syscall.Errno(0x32)
+	EBADF           = syscall.Errno(0x9)
+	EBADFD          = syscall.Errno(0x51)
+	EBADMSG         = syscall.Errno(0x4d)
+	EBADR           = syscall.Errno(0x33)
+	EBADRQC         = syscall.Errno(0x36)
+	EBADSLT         = syscall.Errno(0x37)
+	EBFONT          = syscall.Errno(0x39)
+	EBUSY           = syscall.Errno(0x10)
+	ECANCELED       = syscall.Errno(0x2f)
+	ECHILD          = syscall.Errno(0xa)
+	ECHRNG          = syscall.Errno(0x25)
+	ECOMM           = syscall.Errno(0x46)
+	ECONNABORTED    = syscall.Errno(0x82)
+	ECONNREFUSED    = syscall.Errno(0x92)
+	ECONNRESET      = syscall.Errno(0x83)
+	EDEADLK         = syscall.Errno(0x2d)
+	EDEADLOCK       = syscall.Errno(0x38)
+	EDESTADDRREQ    = syscall.Errno(0x60)
+	EDOM            = syscall.Errno(0x21)
+	EDQUOT          = syscall.Errno(0x31)
+	EEXIST          = syscall.Errno(0x11)
+	EFAULT          = syscall.Errno(0xe)
+	EFBIG           = syscall.Errno(0x1b)
+	EHOSTDOWN       = syscall.Errno(0x93)
+	EHOSTUNREACH    = syscall.Errno(0x94)
+	EIDRM           = syscall.Errno(0x24)
+	EILSEQ          = syscall.Errno(0x58)
+	EINPROGRESS     = syscall.Errno(0x96)
+	EINTR           = syscall.Errno(0x4)
+	EINVAL          = syscall.Errno(0x16)
+	EIO             = syscall.Errno(0x5)
+	EISCONN         = syscall.Errno(0x85)
+	EISDIR          = syscall.Errno(0x15)
+	EL2HLT          = syscall.Errno(0x2c)
+	EL2NSYNC        = syscall.Errno(0x26)
+	EL3HLT          = syscall.Errno(0x27)
+	EL3RST          = syscall.Errno(0x28)
+	ELIBACC         = syscall.Errno(0x53)
+	ELIBBAD         = syscall.Errno(0x54)
+	ELIBEXEC        = syscall.Errno(0x57)
+	ELIBMAX         = syscall.Errno(0x56)
+	ELIBSCN         = syscall.Errno(0x55)
+	ELNRNG          = syscall.Errno(0x29)
+	ELOCKUNMAPPED   = syscall.Errno(0x48)
+	ELOOP           = syscall.Errno(0x5a)
+	EMFILE          = syscall.Errno(0x18)
+	EMLINK          = syscall.Errno(0x1f)
+	EMSGSIZE        = syscall.Errno(0x61)
+	EMULTIHOP       = syscall.Errno(0x4a)
+	ENAMETOOLONG    = syscall.Errno(0x4e)
+	ENETDOWN        = syscall.Errno(0x7f)
+	ENETRESET       = syscall.Errno(0x81)
+	ENETUNREACH     = syscall.Errno(0x80)
+	ENFILE          = syscall.Errno(0x17)
+	ENOANO          = syscall.Errno(0x35)
+	ENOBUFS         = syscall.Errno(0x84)
+	ENOCSI          = syscall.Errno(0x2b)
+	ENODATA         = syscall.Errno(0x3d)
+	ENODEV          = syscall.Errno(0x13)
+	ENOENT          = syscall.Errno(0x2)
+	ENOEXEC         = syscall.Errno(0x8)
+	ENOLCK          = syscall.Errno(0x2e)
+	ENOLINK         = syscall.Errno(0x43)
+	ENOMEM          = syscall.Errno(0xc)
+	ENOMSG          = syscall.Errno(0x23)
+	ENONET          = syscall.Errno(0x40)
+	ENOPKG          = syscall.Errno(0x41)
+	ENOPROTOOPT     = syscall.Errno(0x63)
+	ENOSPC          = syscall.Errno(0x1c)
+	ENOSR           = syscall.Errno(0x3f)
+	ENOSTR          = syscall.Errno(0x3c)
+	ENOSYS          = syscall.Errno(0x59)
+	ENOTACTIVE      = syscall.Errno(0x49)
+	ENOTBLK         = syscall.Errno(0xf)
+	ENOTCONN        = syscall.Errno(0x86)
+	ENOTDIR         = syscall.Errno(0x14)
+	ENOTEMPTY       = syscall.Errno(0x5d)
+	ENOTRECOVERABLE = syscall.Errno(0x3b)
+	ENOTSOCK        = syscall.Errno(0x5f)
+	ENOTSUP         = syscall.Errno(0x30)
+	ENOTTY          = syscall.Errno(0x19)
+	ENOTUNIQ        = syscall.Errno(0x50)
+	ENXIO           = syscall.Errno(0x6)
+	EOPNOTSUPP      = syscall.Errno(0x7a)
+	EOVERFLOW       = syscall.Errno(0x4f)
+	EOWNERDEAD      = syscall.Errno(0x3a)
+	EPERM           = syscall.Errno(0x1)
+	EPFNOSUPPORT    = syscall.Errno(0x7b)
+	EPIPE           = syscall.Errno(0x20)
+	EPROTO          = syscall.Errno(0x47)
+	EPROTONOSUPPORT = syscall.Errno(0x78)
+	EPROTOTYPE      = syscall.Errno(0x62)
+	ERANGE          = syscall.Errno(0x22)
+	EREMCHG         = syscall.Errno(0x52)
+	EREMOTE         = syscall.Errno(0x42)
+	ERESTART        = syscall.Errno(0x5b)
+	EROFS           = syscall.Errno(0x1e)
+	ESHUTDOWN       = syscall.Errno(0x8f)
+	ESOCKTNOSUPPORT = syscall.Errno(0x79)
+	ESPIPE          = syscall.Errno(0x1d)
+	ESRCH           = syscall.Errno(0x3)
+	ESRMNT          = syscall.Errno(0x45)
+	ESTALE          = syscall.Errno(0x97)
+	ESTRPIPE        = syscall.Errno(0x5c)
+	ETIME           = syscall.Errno(0x3e)
+	ETIMEDOUT       = syscall.Errno(0x91)
+	ETOOMANYREFS    = syscall.Errno(0x90)
+	ETXTBSY         = syscall.Errno(0x1a)
+	EUNATCH         = syscall.Errno(0x2a)
+	EUSERS          = syscall.Errno(0x5e)
+	EWOULDBLOCK     = syscall.Errno(0xb)
+	EXDEV           = syscall.Errno(0x12)
+	EXFULL          = syscall.Errno(0x34)
+)
+
+// Signals
+const (
+	SIGABRT    = syscall.Signal(0x6)
+	SIGALRM    = syscall.Signal(0xe)
+	SIGBUS     = syscall.Signal(0xa)
+	SIGCANCEL  = syscall.Signal(0x24)
+	SIGCHLD    = syscall.Signal(0x12)
+	SIGCLD     = syscall.Signal(0x12)
+	SIGCONT    = syscall.Signal(0x19)
+	SIGEMT     = syscall.Signal(0x7)
+	SIGFPE     = syscall.Signal(0x8)
+	SIGFREEZE  = syscall.Signal(0x22)
+	SIGHUP     = syscall.Signal(0x1)
+	SIGILL     = syscall.Signal(0x4)
+	SIGINFO    = syscall.Signal(0x29)
+	SIGINT     = syscall.Signal(0x2)
+	SIGIO      = syscall.Signal(0x16)
+	SIGIOT     = syscall.Signal(0x6)
+	SIGJVM1    = syscall.Signal(0x27)
+	SIGJVM2    = syscall.Signal(0x28)
+	SIGKILL    = syscall.Signal(0x9)
+	SIGLOST    = syscall.Signal(0x25)
+	SIGLWP     = syscall.Signal(0x21)
+	SIGPIPE    = syscall.Signal(0xd)
+	SIGPOLL    = syscall.Signal(0x16)
+	SIGPROF    = syscall.Signal(0x1d)
+	SIGPWR     = syscall.Signal(0x13)
+	SIGQUIT    = syscall.Signal(0x3)
+	SIGSEGV    = syscall.Signal(0xb)
+	SIGSTOP    = syscall.Signal(0x17)
+	SIGSYS     = syscall.Signal(0xc)
+	SIGTERM    = syscall.Signal(0xf)
+	SIGTHAW    = syscall.Signal(0x23)
+	SIGTRAP    = syscall.Signal(0x5)
+	SIGTSTP    = syscall.Signal(0x18)
+	SIGTTIN    = syscall.Signal(0x1a)
+	SIGTTOU    = syscall.Signal(0x1b)
+	SIGURG     = syscall.Signal(0x15)
+	SIGUSR1    = syscall.Signal(0x10)
+	SIGUSR2    = syscall.Signal(0x11)
+	SIGVTALRM  = syscall.Signal(0x1c)
+	SIGWAITING = syscall.Signal(0x20)
+	SIGWINCH   = syscall.Signal(0x14)
+	SIGXCPU    = syscall.Signal(0x1e)
+	SIGXFSZ    = syscall.Signal(0x1f)
+	SIGXRES    = syscall.Signal(0x26)
+)
+
+// Error table
+var errorList = [...]struct {
+	num  syscall.Errno
+	name string
+	desc string
+}{
+	{1, "EPERM", "not owner"},
+	{2, "ENOENT", "no such file or directory"},
+	{3, "ESRCH", "no such process"},
+	{4, "EINTR", "interrupted system call"},
+	{5, "EIO", "I/O error"},
+	{6, "ENXIO", "no such device or address"},
+	{7, "E2BIG", "arg list too long"},
+	{8, "ENOEXEC", "exec format error"},
+	{9, "EBADF", "bad file number"},
+	{10, "ECHILD", "no child processes"},
+	{11, "EAGAIN", "resource temporarily unavailable"},
+	{12, "ENOMEM", "not enough space"},
+	{13, "EACCES", "permission denied"},
+	{14, "EFAULT", "bad address"},
+	{15, "ENOTBLK", "block device required"},
+	{16, "EBUSY", "device busy"},
+	{17, "EEXIST", "file exists"},
+	{18, "EXDEV", "cross-device link"},
+	{19, "ENODEV", "no such device"},
+	{20, "ENOTDIR", "not a directory"},
+	{21, "EISDIR", "is a directory"},
+	{22, "EINVAL", "invalid argument"},
+	{23, "ENFILE", "file table overflow"},
+	{24, "EMFILE", "too many open files"},
+	{25, "ENOTTY", "inappropriate ioctl for device"},
+	{26, "ETXTBSY", "text file busy"},
+	{27, "EFBIG", "file too large"},
+	{28, "ENOSPC", "no space left on device"},
+	{29, "ESPIPE", "illegal seek"},
+	{30, "EROFS", "read-only file system"},
+	{31, "EMLINK", "too many links"},
+	{32, "EPIPE", "broken pipe"},
+	{33, "EDOM", "argument out of domain"},
+	{34, "ERANGE", "result too large"},
+	{35, "ENOMSG", "no message of desired type"},
+	{36, "EIDRM", "identifier removed"},
+	{37, "ECHRNG", "channel number out of range"},
+	{38, "EL2NSYNC", "level 2 not synchronized"},
+	{39, "EL3HLT", "level 3 halted"},
+	{40, "EL3RST", "level 3 reset"},
+	{41, "ELNRNG", "link number out of range"},
+	{42, "EUNATCH", "protocol driver not attached"},
+	{43, "ENOCSI", "no CSI structure available"},
+	{44, "EL2HLT", "level 2 halted"},
+	{45, "EDEADLK", "deadlock situation detected/avoided"},
+	{46, "ENOLCK", "no record locks available"},
+	{47, "ECANCELED", "operation canceled"},
+	{48, "ENOTSUP", "operation not supported"},
+	{49, "EDQUOT", "disc quota exceeded"},
+	{50, "EBADE", "bad exchange descriptor"},
+	{51, "EBADR", "bad request descriptor"},
+	{52, "EXFULL", "message tables full"},
+	{53, "ENOANO", "anode table overflow"},
+	{54, "EBADRQC", "bad request code"},
+	{55, "EBADSLT", "invalid slot"},
+	{56, "EDEADLOCK", "file locking deadlock"},
+	{57, "EBFONT", "bad font file format"},
+	{58, "EOWNERDEAD", "owner of the lock died"},
+	{59, "ENOTRECOVERABLE", "lock is not recoverable"},
+	{60, "ENOSTR", "not a stream device"},
+	{61, "ENODATA", "no data available"},
+	{62, "ETIME", "timer expired"},
+	{63, "ENOSR", "out of stream resources"},
+	{64, "ENONET", "machine is not on the network"},
+	{65, "ENOPKG", "package not installed"},
+	{66, "EREMOTE", "object is remote"},
+	{67, "ENOLINK", "link has been severed"},
+	{68, "EADV", "advertise error"},
+	{69, "ESRMNT", "srmount error"},
+	{70, "ECOMM", "communication error on send"},
+	{71, "EPROTO", "protocol error"},
+	{72, "ELOCKUNMAPPED", "locked lock was unmapped "},
+	{73, "ENOTACTIVE", "facility is not active"},
+	{74, "EMULTIHOP", "multihop attempted"},
+	{77, "EBADMSG", "not a data message"},
+	{78, "ENAMETOOLONG", "file name too long"},
+	{79, "EOVERFLOW", "value too large for defined data type"},
+	{80, "ENOTUNIQ", "name not unique on network"},
+	{81, "EBADFD", "file descriptor in bad state"},
+	{82, "EREMCHG", "remote address changed"},
+	{83, "ELIBACC", "can not access a needed shared library"},
+	{84, "ELIBBAD", "accessing a corrupted shared library"},
+	{85, "ELIBSCN", ".lib section in a.out corrupted"},
+	{86, "ELIBMAX", "attempting to link in more shared libraries than system limit"},
+	{87, "ELIBEXEC", "can not exec a shared library directly"},
+	{88, "EILSEQ", "illegal byte sequence"},
+	{89, "ENOSYS", "operation not applicable"},
+	{90, "ELOOP", "number of symbolic links encountered during path name traversal exceeds MAXSYMLINKS"},
+	{91, "ERESTART", "error 91"},
+	{92, "ESTRPIPE", "error 92"},
+	{93, "ENOTEMPTY", "directory not empty"},
+	{94, "EUSERS", "too many users"},
+	{95, "ENOTSOCK", "socket operation on non-socket"},
+	{96, "EDESTADDRREQ", "destination address required"},
+	{97, "EMSGSIZE", "message too long"},
+	{98, "EPROTOTYPE", "protocol wrong type for socket"},
+	{99, "ENOPROTOOPT", "option not supported by protocol"},
+	{120, "EPROTONOSUPPORT", "protocol not supported"},
+	{121, "ESOCKTNOSUPPORT", "socket type not supported"},
+	{122, "EOPNOTSUPP", "operation not supported on transport endpoint"},
+	{123, "EPFNOSUPPORT", "protocol family not supported"},
+	{124, "EAFNOSUPPORT", "address family not supported by protocol family"},
+	{125, "EADDRINUSE", "address already in use"},
+	{126, "EADDRNOTAVAIL", "cannot assign requested address"},
+	{127, "ENETDOWN", "network is down"},
+	{128, "ENETUNREACH", "network is unreachable"},
+	{129, "ENETRESET", "network dropped connection because of reset"},
+	{130, "ECONNABORTED", "software caused connection abort"},
+	{131, "ECONNRESET", "connection reset by peer"},
+	{132, "ENOBUFS", "no buffer space available"},
+	{133, "EISCONN", "transport endpoint is already connected"},
+	{134, "ENOTCONN", "transport endpoint is not connected"},
+	{143, "ESHUTDOWN", "cannot send after socket shutdown"},
+	{144, "ETOOMANYREFS", "too many references: cannot splice"},
+	{145, "ETIMEDOUT", "connection timed out"},
+	{146, "ECONNREFUSED", "connection refused"},
+	{147, "EHOSTDOWN", "host is down"},
+	{148, "EHOSTUNREACH", "no route to host"},
+	{149, "EALREADY", "operation already in progress"},
+	{150, "EINPROGRESS", "operation now in progress"},
+	{151, "ESTALE", "stale NFS file handle"},
+}
+
+// Signal table
+var signalList = [...]struct {
+	num  syscall.Signal
+	name string
+	desc string
+}{
+	{1, "SIGHUP", "hangup"},
+	{2, "SIGINT", "interrupt"},
+	{3, "SIGQUIT", "quit"},
+	{4, "SIGILL", "illegal Instruction"},
+	{5, "SIGTRAP", "trace/Breakpoint Trap"},
+	{6, "SIGABRT", "abort"},
+	{7, "SIGEMT", "emulation Trap"},
+	{8, "SIGFPE", "arithmetic Exception"},
+	{9, "SIGKILL", "killed"},
+	{10, "SIGBUS", "bus Error"},
+	{11, "SIGSEGV", "segmentation Fault"},
+	{12, "SIGSYS", "bad System Call"},
+	{13, "SIGPIPE", "broken Pipe"},
+	{14, "SIGALRM", "alarm Clock"},
+	{15, "SIGTERM", "terminated"},
+	{16, "SIGUSR1", "user Signal 1"},
+	{17, "SIGUSR2", "user Signal 2"},
+	{18, "SIGCHLD", "child Status Changed"},
+	{19, "SIGPWR", "power-Fail/Restart"},
+	{20, "SIGWINCH", "window Size Change"},
+	{21, "SIGURG", "urgent Socket Condition"},
+	{22, "SIGIO", "pollable Event"},
+	{23, "SIGSTOP", "stopped (signal)"},
+	{24, "SIGTSTP", "stopped (user)"},
+	{25, "SIGCONT", "continued"},
+	{26, "SIGTTIN", "stopped (tty input)"},
+	{27, "SIGTTOU", "stopped (tty output)"},
+	{28, "SIGVTALRM", "virtual Timer Expired"},
+	{29, "SIGPROF", "profiling Timer Expired"},
+	{30, "SIGXCPU", "cpu Limit Exceeded"},
+	{31, "SIGXFSZ", "file Size Limit Exceeded"},
+	{32, "SIGWAITING", "no runnable lwp"},
+	{33, "SIGLWP", "inter-lwp signal"},
+	{34, "SIGFREEZE", "checkpoint Freeze"},
+	{35, "SIGTHAW", "checkpoint Thaw"},
+	{36, "SIGCANCEL", "thread Cancellation"},
+	{37, "SIGLOST", "resource Lost"},
+	{38, "SIGXRES", "resource Control Exceeded"},
+	{39, "SIGJVM1", "reserved for JVM 1"},
+	{40, "SIGJVM2", "reserved for JVM 2"},
+	{41, "SIGINFO", "information Request"},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_armnn_linux.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_armnn_linux.go
new file mode 100644
index 000000000..89c5920e0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_armnn_linux.go
@@ -0,0 +1,41 @@
+// Code generated by linux/mkall.go generatePtracePair("arm", "arm64"). DO NOT EDIT.
+
+// +build linux
+// +build arm arm64
+
+package unix
+
+import "unsafe"
+
+// PtraceRegsArm is the registers used by arm binaries.
+type PtraceRegsArm struct {
+	Uregs [18]uint32
+}
+
+// PtraceGetRegsArm fetches the registers used by arm binaries.
+func PtraceGetRegsArm(pid int, regsout *PtraceRegsArm) error {
+	return ptrace(PTRACE_GETREGS, pid, 0, uintptr(unsafe.Pointer(regsout)))
+}
+
+// PtraceSetRegsArm sets the registers used by arm binaries.
+func PtraceSetRegsArm(pid int, regs *PtraceRegsArm) error {
+	return ptrace(PTRACE_SETREGS, pid, 0, uintptr(unsafe.Pointer(regs)))
+}
+
+// PtraceRegsArm64 is the registers used by arm64 binaries.
+type PtraceRegsArm64 struct {
+	Regs   [31]uint64
+	Sp     uint64
+	Pc     uint64
+	Pstate uint64
+}
+
+// PtraceGetRegsArm64 fetches the registers used by arm64 binaries.
+func PtraceGetRegsArm64(pid int, regsout *PtraceRegsArm64) error {
+	return ptrace(PTRACE_GETREGS, pid, 0, uintptr(unsafe.Pointer(regsout)))
+}
+
+// PtraceSetRegsArm64 sets the registers used by arm64 binaries.
+func PtraceSetRegsArm64(pid int, regs *PtraceRegsArm64) error {
+	return ptrace(PTRACE_SETREGS, pid, 0, uintptr(unsafe.Pointer(regs)))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_linux_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_linux_arm64.go
new file mode 100644
index 000000000..6cb6d688a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_linux_arm64.go
@@ -0,0 +1,17 @@
+// Code generated by linux/mkall.go generatePtraceRegSet("arm64"). DO NOT EDIT.
+
+package unix
+
+import "unsafe"
+
+// PtraceGetRegSetArm64 fetches the registers used by arm64 binaries.
+func PtraceGetRegSetArm64(pid, addr int, regsout *PtraceRegsArm64) error {
+	iovec := Iovec{(*byte)(unsafe.Pointer(regsout)), uint64(unsafe.Sizeof(*regsout))}
+	return ptrace(PTRACE_GETREGSET, pid, uintptr(addr), uintptr(unsafe.Pointer(&iovec)))
+}
+
+// PtraceSetRegSetArm64 sets the registers used by arm64 binaries.
+func PtraceSetRegSetArm64(pid, addr int, regs *PtraceRegsArm64) error {
+	iovec := Iovec{(*byte)(unsafe.Pointer(regs)), uint64(unsafe.Sizeof(*regs))}
+	return ptrace(PTRACE_SETREGSET, pid, uintptr(addr), uintptr(unsafe.Pointer(&iovec)))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_mipsnn_linux.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_mipsnn_linux.go
new file mode 100644
index 000000000..24b841eec
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_mipsnn_linux.go
@@ -0,0 +1,50 @@
+// Code generated by linux/mkall.go generatePtracePair("mips", "mips64"). DO NOT EDIT.
+
+// +build linux
+// +build mips mips64
+
+package unix
+
+import "unsafe"
+
+// PtraceRegsMips is the registers used by mips binaries.
+type PtraceRegsMips struct {
+	Regs     [32]uint64
+	Lo       uint64
+	Hi       uint64
+	Epc      uint64
+	Badvaddr uint64
+	Status   uint64
+	Cause    uint64
+}
+
+// PtraceGetRegsMips fetches the registers used by mips binaries.
+func PtraceGetRegsMips(pid int, regsout *PtraceRegsMips) error {
+	return ptrace(PTRACE_GETREGS, pid, 0, uintptr(unsafe.Pointer(regsout)))
+}
+
+// PtraceSetRegsMips sets the registers used by mips binaries.
+func PtraceSetRegsMips(pid int, regs *PtraceRegsMips) error {
+	return ptrace(PTRACE_SETREGS, pid, 0, uintptr(unsafe.Pointer(regs)))
+}
+
+// PtraceRegsMips64 is the registers used by mips64 binaries.
+type PtraceRegsMips64 struct {
+	Regs     [32]uint64
+	Lo       uint64
+	Hi       uint64
+	Epc      uint64
+	Badvaddr uint64
+	Status   uint64
+	Cause    uint64
+}
+
+// PtraceGetRegsMips64 fetches the registers used by mips64 binaries.
+func PtraceGetRegsMips64(pid int, regsout *PtraceRegsMips64) error {
+	return ptrace(PTRACE_GETREGS, pid, 0, uintptr(unsafe.Pointer(regsout)))
+}
+
+// PtraceSetRegsMips64 sets the registers used by mips64 binaries.
+func PtraceSetRegsMips64(pid int, regs *PtraceRegsMips64) error {
+	return ptrace(PTRACE_SETREGS, pid, 0, uintptr(unsafe.Pointer(regs)))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_mipsnnle_linux.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_mipsnnle_linux.go
new file mode 100644
index 000000000..47b048956
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_mipsnnle_linux.go
@@ -0,0 +1,50 @@
+// Code generated by linux/mkall.go generatePtracePair("mipsle", "mips64le"). DO NOT EDIT.
+
+// +build linux
+// +build mipsle mips64le
+
+package unix
+
+import "unsafe"
+
+// PtraceRegsMipsle is the registers used by mipsle binaries.
+type PtraceRegsMipsle struct {
+	Regs     [32]uint64
+	Lo       uint64
+	Hi       uint64
+	Epc      uint64
+	Badvaddr uint64
+	Status   uint64
+	Cause    uint64
+}
+
+// PtraceGetRegsMipsle fetches the registers used by mipsle binaries.
+func PtraceGetRegsMipsle(pid int, regsout *PtraceRegsMipsle) error {
+	return ptrace(PTRACE_GETREGS, pid, 0, uintptr(unsafe.Pointer(regsout)))
+}
+
+// PtraceSetRegsMipsle sets the registers used by mipsle binaries.
+func PtraceSetRegsMipsle(pid int, regs *PtraceRegsMipsle) error {
+	return ptrace(PTRACE_SETREGS, pid, 0, uintptr(unsafe.Pointer(regs)))
+}
+
+// PtraceRegsMips64le is the registers used by mips64le binaries.
+type PtraceRegsMips64le struct {
+	Regs     [32]uint64
+	Lo       uint64
+	Hi       uint64
+	Epc      uint64
+	Badvaddr uint64
+	Status   uint64
+	Cause    uint64
+}
+
+// PtraceGetRegsMips64le fetches the registers used by mips64le binaries.
+func PtraceGetRegsMips64le(pid int, regsout *PtraceRegsMips64le) error {
+	return ptrace(PTRACE_GETREGS, pid, 0, uintptr(unsafe.Pointer(regsout)))
+}
+
+// PtraceSetRegsMips64le sets the registers used by mips64le binaries.
+func PtraceSetRegsMips64le(pid int, regs *PtraceRegsMips64le) error {
+	return ptrace(PTRACE_SETREGS, pid, 0, uintptr(unsafe.Pointer(regs)))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_x86_linux.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_x86_linux.go
new file mode 100644
index 000000000..ea5d9cb53
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zptrace_x86_linux.go
@@ -0,0 +1,80 @@
+// Code generated by linux/mkall.go generatePtracePair("386", "amd64"). DO NOT EDIT.
+
+// +build linux
+// +build 386 amd64
+
+package unix
+
+import "unsafe"
+
+// PtraceRegs386 is the registers used by 386 binaries.
+type PtraceRegs386 struct {
+	Ebx      int32
+	Ecx      int32
+	Edx      int32
+	Esi      int32
+	Edi      int32
+	Ebp      int32
+	Eax      int32
+	Xds      int32
+	Xes      int32
+	Xfs      int32
+	Xgs      int32
+	Orig_eax int32
+	Eip      int32
+	Xcs      int32
+	Eflags   int32
+	Esp      int32
+	Xss      int32
+}
+
+// PtraceGetRegs386 fetches the registers used by 386 binaries.
+func PtraceGetRegs386(pid int, regsout *PtraceRegs386) error {
+	return ptrace(PTRACE_GETREGS, pid, 0, uintptr(unsafe.Pointer(regsout)))
+}
+
+// PtraceSetRegs386 sets the registers used by 386 binaries.
+func PtraceSetRegs386(pid int, regs *PtraceRegs386) error {
+	return ptrace(PTRACE_SETREGS, pid, 0, uintptr(unsafe.Pointer(regs)))
+}
+
+// PtraceRegsAmd64 is the registers used by amd64 binaries.
+type PtraceRegsAmd64 struct {
+	R15      uint64
+	R14      uint64
+	R13      uint64
+	R12      uint64
+	Rbp      uint64
+	Rbx      uint64
+	R11      uint64
+	R10      uint64
+	R9       uint64
+	R8       uint64
+	Rax      uint64
+	Rcx      uint64
+	Rdx      uint64
+	Rsi      uint64
+	Rdi      uint64
+	Orig_rax uint64
+	Rip      uint64
+	Cs       uint64
+	Eflags   uint64
+	Rsp      uint64
+	Ss       uint64
+	Fs_base  uint64
+	Gs_base  uint64
+	Ds       uint64
+	Es       uint64
+	Fs       uint64
+	Gs       uint64
+}
+
+// PtraceGetRegsAmd64 fetches the registers used by amd64 binaries.
+func PtraceGetRegsAmd64(pid int, regsout *PtraceRegsAmd64) error {
+	return ptrace(PTRACE_GETREGS, pid, 0, uintptr(unsafe.Pointer(regsout)))
+}
+
+// PtraceSetRegsAmd64 sets the registers used by amd64 binaries.
+func PtraceSetRegsAmd64(pid int, regs *PtraceRegsAmd64) error {
+	return ptrace(PTRACE_SETREGS, pid, 0, uintptr(unsafe.Pointer(regs)))
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_aix_ppc.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_aix_ppc.go
new file mode 100644
index 000000000..ed657ff1b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_aix_ppc.go
@@ -0,0 +1,1484 @@
+// go run mksyscall_aix_ppc.go -aix -tags aix,ppc syscall_aix.go syscall_aix_ppc.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build aix,ppc
+
+package unix
+
+/*
+#include <stdint.h>
+#include <stddef.h>
+int utimes(uintptr_t, uintptr_t);
+int utimensat(int, uintptr_t, uintptr_t, int);
+int getcwd(uintptr_t, size_t);
+int accept(int, uintptr_t, uintptr_t);
+int getdirent(int, uintptr_t, size_t);
+int wait4(int, uintptr_t, int, uintptr_t);
+int ioctl(int, int, uintptr_t);
+int fcntl(uintptr_t, int, uintptr_t);
+int acct(uintptr_t);
+int chdir(uintptr_t);
+int chroot(uintptr_t);
+int close(int);
+int dup(int);
+void exit(int);
+int faccessat(int, uintptr_t, unsigned int, int);
+int fchdir(int);
+int fchmod(int, unsigned int);
+int fchmodat(int, uintptr_t, unsigned int, int);
+int fchownat(int, uintptr_t, int, int, int);
+int fdatasync(int);
+int fsync(int);
+int getpgid(int);
+int getpgrp();
+int getpid();
+int getppid();
+int getpriority(int, int);
+int getrusage(int, uintptr_t);
+int getsid(int);
+int kill(int, int);
+int syslog(int, uintptr_t, size_t);
+int mkdir(int, uintptr_t, unsigned int);
+int mkdirat(int, uintptr_t, unsigned int);
+int mkfifo(uintptr_t, unsigned int);
+int mknod(uintptr_t, unsigned int, int);
+int mknodat(int, uintptr_t, unsigned int, int);
+int nanosleep(uintptr_t, uintptr_t);
+int open64(uintptr_t, int, unsigned int);
+int openat(int, uintptr_t, int, unsigned int);
+int read(int, uintptr_t, size_t);
+int readlink(uintptr_t, uintptr_t, size_t);
+int renameat(int, uintptr_t, int, uintptr_t);
+int setdomainname(uintptr_t, size_t);
+int sethostname(uintptr_t, size_t);
+int setpgid(int, int);
+int setsid();
+int settimeofday(uintptr_t);
+int setuid(int);
+int setgid(int);
+int setpriority(int, int, int);
+int statx(int, uintptr_t, int, int, uintptr_t);
+int sync();
+uintptr_t times(uintptr_t);
+int umask(int);
+int uname(uintptr_t);
+int unlink(uintptr_t);
+int unlinkat(int, uintptr_t, int);
+int ustat(int, uintptr_t);
+int write(int, uintptr_t, size_t);
+int dup2(int, int);
+int posix_fadvise64(int, long long, long long, int);
+int fchown(int, int, int);
+int fstat(int, uintptr_t);
+int fstatat(int, uintptr_t, uintptr_t, int);
+int fstatfs(int, uintptr_t);
+int ftruncate(int, long long);
+int getegid();
+int geteuid();
+int getgid();
+int getuid();
+int lchown(uintptr_t, int, int);
+int listen(int, int);
+int lstat(uintptr_t, uintptr_t);
+int pause();
+int pread64(int, uintptr_t, size_t, long long);
+int pwrite64(int, uintptr_t, size_t, long long);
+#define c_select select
+int select(int, uintptr_t, uintptr_t, uintptr_t, uintptr_t);
+int pselect(int, uintptr_t, uintptr_t, uintptr_t, uintptr_t, uintptr_t);
+int setregid(int, int);
+int setreuid(int, int);
+int shutdown(int, int);
+long long splice(int, uintptr_t, int, uintptr_t, int, int);
+int stat(uintptr_t, uintptr_t);
+int statfs(uintptr_t, uintptr_t);
+int truncate(uintptr_t, long long);
+int bind(int, uintptr_t, uintptr_t);
+int connect(int, uintptr_t, uintptr_t);
+int getgroups(int, uintptr_t);
+int setgroups(int, uintptr_t);
+int getsockopt(int, int, int, uintptr_t, uintptr_t);
+int setsockopt(int, int, int, uintptr_t, uintptr_t);
+int socket(int, int, int);
+int socketpair(int, int, int, uintptr_t);
+int getpeername(int, uintptr_t, uintptr_t);
+int getsockname(int, uintptr_t, uintptr_t);
+int recvfrom(int, uintptr_t, size_t, int, uintptr_t, uintptr_t);
+int sendto(int, uintptr_t, size_t, int, uintptr_t, uintptr_t);
+int nrecvmsg(int, uintptr_t, int);
+int nsendmsg(int, uintptr_t, int);
+int munmap(uintptr_t, uintptr_t);
+int madvise(uintptr_t, size_t, int);
+int mprotect(uintptr_t, size_t, int);
+int mlock(uintptr_t, size_t);
+int mlockall(int);
+int msync(uintptr_t, size_t, int);
+int munlock(uintptr_t, size_t);
+int munlockall();
+int pipe(uintptr_t);
+int poll(uintptr_t, int, int);
+int gettimeofday(uintptr_t, uintptr_t);
+int time(uintptr_t);
+int utime(uintptr_t, uintptr_t);
+unsigned long long getsystemcfg(int);
+int umount(uintptr_t);
+int getrlimit64(int, uintptr_t);
+int setrlimit64(int, uintptr_t);
+long long lseek64(int, long long, int);
+uintptr_t mmap(uintptr_t, uintptr_t, int, int, int, long long);
+
+*/
+import "C"
+import (
+	"unsafe"
+)
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, times *[2]Timeval) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.utimes(C.uintptr_t(_p0), C.uintptr_t(uintptr(unsafe.Pointer(times))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flag int) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.utimensat(C.int(dirfd), C.uintptr_t(_p0), C.uintptr_t(uintptr(unsafe.Pointer(times))), C.int(flag))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getcwd(buf []byte) (err error) {
+	var _p0 *byte
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	var _p1 int
+	_p1 = len(buf)
+	r0, er := C.getcwd(C.uintptr_t(uintptr(unsafe.Pointer(_p0))), C.size_t(_p1))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, er := C.accept(C.int(s), C.uintptr_t(uintptr(unsafe.Pointer(rsa))), C.uintptr_t(uintptr(unsafe.Pointer(addrlen))))
+	fd = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getdirent(fd int, buf []byte) (n int, err error) {
+	var _p0 *byte
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	var _p1 int
+	_p1 = len(buf)
+	r0, er := C.getdirent(C.int(fd), C.uintptr_t(uintptr(unsafe.Pointer(_p0))), C.size_t(_p1))
+	n = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid Pid_t, status *_C_int, options int, rusage *Rusage) (wpid Pid_t, err error) {
+	r0, er := C.wait4(C.int(pid), C.uintptr_t(uintptr(unsafe.Pointer(status))), C.int(options), C.uintptr_t(uintptr(unsafe.Pointer(rusage))))
+	wpid = Pid_t(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	r0, er := C.ioctl(C.int(fd), C.int(req), C.uintptr_t(arg))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func FcntlInt(fd uintptr, cmd int, arg int) (r int, err error) {
+	r0, er := C.fcntl(C.uintptr_t(fd), C.int(cmd), C.uintptr_t(arg))
+	r = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func FcntlFlock(fd uintptr, cmd int, lk *Flock_t) (err error) {
+	r0, er := C.fcntl(C.uintptr_t(fd), C.int(cmd), C.uintptr_t(uintptr(unsafe.Pointer(lk))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fcntl(fd int, cmd int, arg int) (val int, err error) {
+	r0, er := C.fcntl(C.uintptr_t(fd), C.int(cmd), C.uintptr_t(arg))
+	val = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Acct(path string) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.acct(C.uintptr_t(_p0))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.chdir(C.uintptr_t(_p0))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.chroot(C.uintptr_t(_p0))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	r0, er := C.close(C.int(fd))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(oldfd int) (fd int, err error) {
+	r0, er := C.dup(C.int(oldfd))
+	fd = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	C.exit(C.int(code))
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.faccessat(C.int(dirfd), C.uintptr_t(_p0), C.uint(mode), C.int(flags))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	r0, er := C.fchdir(C.int(fd))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	r0, er := C.fchmod(C.int(fd), C.uint(mode))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.fchmodat(C.int(dirfd), C.uintptr_t(_p0), C.uint(mode), C.int(flags))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.fchownat(C.int(dirfd), C.uintptr_t(_p0), C.int(uid), C.int(gid), C.int(flags))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fdatasync(fd int) (err error) {
+	r0, er := C.fdatasync(C.int(fd))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	r0, er := C.fsync(C.int(fd))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, er := C.getpgid(C.int(pid))
+	pgid = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pid int) {
+	r0, _ := C.getpgrp()
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _ := C.getpid()
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _ := C.getppid()
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, er := C.getpriority(C.int(which), C.int(who))
+	prio = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	r0, er := C.getrusage(C.int(who), C.uintptr_t(uintptr(unsafe.Pointer(rusage))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, er := C.getsid(C.int(pid))
+	sid = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, sig Signal) (err error) {
+	r0, er := C.kill(C.int(pid), C.int(sig))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Klogctl(typ int, buf []byte) (n int, err error) {
+	var _p0 *byte
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	var _p1 int
+	_p1 = len(buf)
+	r0, er := C.syslog(C.int(typ), C.uintptr_t(uintptr(unsafe.Pointer(_p0))), C.size_t(_p1))
+	n = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(dirfd int, path string, mode uint32) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.mkdir(C.int(dirfd), C.uintptr_t(_p0), C.uint(mode))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.mkdirat(C.int(dirfd), C.uintptr_t(_p0), C.uint(mode))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.mkfifo(C.uintptr_t(_p0), C.uint(mode))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.mknod(C.uintptr_t(_p0), C.uint(mode), C.int(dev))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknodat(dirfd int, path string, mode uint32, dev int) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.mknodat(C.int(dirfd), C.uintptr_t(_p0), C.uint(mode), C.int(dev))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	r0, er := C.nanosleep(C.uintptr_t(uintptr(unsafe.Pointer(time))), C.uintptr_t(uintptr(unsafe.Pointer(leftover))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.open64(C.uintptr_t(_p0), C.int(mode), C.uint(perm))
+	fd = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, flags int, mode uint32) (fd int, err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.openat(C.int(dirfd), C.uintptr_t(_p0), C.int(flags), C.uint(mode))
+	fd = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	var _p1 int
+	_p1 = len(p)
+	r0, er := C.read(C.int(fd), C.uintptr_t(uintptr(unsafe.Pointer(_p0))), C.size_t(_p1))
+	n = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	var _p1 *byte
+	if len(buf) > 0 {
+		_p1 = &buf[0]
+	}
+	var _p2 int
+	_p2 = len(buf)
+	r0, er := C.readlink(C.uintptr_t(_p0), C.uintptr_t(uintptr(unsafe.Pointer(_p1))), C.size_t(_p2))
+	n = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(oldpath)))
+	_p1 := uintptr(unsafe.Pointer(C.CString(newpath)))
+	r0, er := C.renameat(C.int(olddirfd), C.uintptr_t(_p0), C.int(newdirfd), C.uintptr_t(_p1))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setdomainname(p []byte) (err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	var _p1 int
+	_p1 = len(p)
+	r0, er := C.setdomainname(C.uintptr_t(uintptr(unsafe.Pointer(_p0))), C.size_t(_p1))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sethostname(p []byte) (err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	var _p1 int
+	_p1 = len(p)
+	r0, er := C.sethostname(C.uintptr_t(uintptr(unsafe.Pointer(_p0))), C.size_t(_p1))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	r0, er := C.setpgid(C.int(pid), C.int(pgid))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, er := C.setsid()
+	pid = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tv *Timeval) (err error) {
+	r0, er := C.settimeofday(C.uintptr_t(uintptr(unsafe.Pointer(tv))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	r0, er := C.setuid(C.int(uid))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(uid int) (err error) {
+	r0, er := C.setgid(C.int(uid))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	r0, er := C.setpriority(C.int(which), C.int(who), C.int(prio))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statx(dirfd int, path string, flags int, mask int, stat *Statx_t) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.statx(C.int(dirfd), C.uintptr_t(_p0), C.int(flags), C.int(mask), C.uintptr_t(uintptr(unsafe.Pointer(stat))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() {
+	C.sync()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Times(tms *Tms) (ticks uintptr, err error) {
+	r0, er := C.times(C.uintptr_t(uintptr(unsafe.Pointer(tms))))
+	ticks = uintptr(r0)
+	if uintptr(r0) == ^uintptr(0) && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(mask int) (oldmask int) {
+	r0, _ := C.umask(C.int(mask))
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Uname(buf *Utsname) (err error) {
+	r0, er := C.uname(C.uintptr_t(uintptr(unsafe.Pointer(buf))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.unlink(C.uintptr_t(_p0))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.unlinkat(C.int(dirfd), C.uintptr_t(_p0), C.int(flags))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ustat(dev int, ubuf *Ustat_t) (err error) {
+	r0, er := C.ustat(C.int(dev), C.uintptr_t(uintptr(unsafe.Pointer(ubuf))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	var _p1 int
+	_p1 = len(p)
+	r0, er := C.write(C.int(fd), C.uintptr_t(uintptr(unsafe.Pointer(_p0))), C.size_t(_p1))
+	n = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, p *byte, np int) (n int, err error) {
+	r0, er := C.read(C.int(fd), C.uintptr_t(uintptr(unsafe.Pointer(p))), C.size_t(np))
+	n = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, p *byte, np int) (n int, err error) {
+	r0, er := C.write(C.int(fd), C.uintptr_t(uintptr(unsafe.Pointer(p))), C.size_t(np))
+	n = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(oldfd int, newfd int) (err error) {
+	r0, er := C.dup2(C.int(oldfd), C.int(newfd))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	r0, er := C.posix_fadvise64(C.int(fd), C.longlong(offset), C.longlong(length), C.int(advice))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	r0, er := C.fchown(C.int(fd), C.int(uid), C.int(gid))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstat(fd int, stat *Stat_t) (err error) {
+	r0, er := C.fstat(C.int(fd), C.uintptr_t(uintptr(unsafe.Pointer(stat))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.fstatat(C.int(dirfd), C.uintptr_t(_p0), C.uintptr_t(uintptr(unsafe.Pointer(stat))), C.int(flags))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, buf *Statfs_t) (err error) {
+	r0, er := C.fstatfs(C.int(fd), C.uintptr_t(uintptr(unsafe.Pointer(buf))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	r0, er := C.ftruncate(C.int(fd), C.longlong(length))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _ := C.getegid()
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (euid int) {
+	r0, _ := C.geteuid()
+	euid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _ := C.getgid()
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _ := C.getuid()
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.lchown(C.uintptr_t(_p0), C.int(uid), C.int(gid))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, n int) (err error) {
+	r0, er := C.listen(C.int(s), C.int(n))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func lstat(path string, stat *Stat_t) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.lstat(C.uintptr_t(_p0), C.uintptr_t(uintptr(unsafe.Pointer(stat))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pause() (err error) {
+	r0, er := C.pause()
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	var _p1 int
+	_p1 = len(p)
+	r0, er := C.pread64(C.int(fd), C.uintptr_t(uintptr(unsafe.Pointer(_p0))), C.size_t(_p1), C.longlong(offset))
+	n = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	var _p1 int
+	_p1 = len(p)
+	r0, er := C.pwrite64(C.int(fd), C.uintptr_t(uintptr(unsafe.Pointer(_p0))), C.size_t(_p1), C.longlong(offset))
+	n = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, er := C.c_select(C.int(nfd), C.uintptr_t(uintptr(unsafe.Pointer(r))), C.uintptr_t(uintptr(unsafe.Pointer(w))), C.uintptr_t(uintptr(unsafe.Pointer(e))), C.uintptr_t(uintptr(unsafe.Pointer(timeout))))
+	n = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pselect(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timespec, sigmask *Sigset_t) (n int, err error) {
+	r0, er := C.pselect(C.int(nfd), C.uintptr_t(uintptr(unsafe.Pointer(r))), C.uintptr_t(uintptr(unsafe.Pointer(w))), C.uintptr_t(uintptr(unsafe.Pointer(e))), C.uintptr_t(uintptr(unsafe.Pointer(timeout))), C.uintptr_t(uintptr(unsafe.Pointer(sigmask))))
+	n = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	r0, er := C.setregid(C.int(rgid), C.int(egid))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	r0, er := C.setreuid(C.int(ruid), C.int(euid))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(fd int, how int) (err error) {
+	r0, er := C.shutdown(C.int(fd), C.int(how))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error) {
+	r0, er := C.splice(C.int(rfd), C.uintptr_t(uintptr(unsafe.Pointer(roff))), C.int(wfd), C.uintptr_t(uintptr(unsafe.Pointer(woff))), C.int(len), C.int(flags))
+	n = int64(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func stat(path string, statptr *Stat_t) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.stat(C.uintptr_t(_p0), C.uintptr_t(uintptr(unsafe.Pointer(statptr))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, buf *Statfs_t) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.statfs(C.uintptr_t(_p0), C.uintptr_t(uintptr(unsafe.Pointer(buf))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.truncate(C.uintptr_t(_p0), C.longlong(length))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	r0, er := C.bind(C.int(s), C.uintptr_t(uintptr(addr)), C.uintptr_t(uintptr(addrlen)))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	r0, er := C.connect(C.int(s), C.uintptr_t(uintptr(addr)), C.uintptr_t(uintptr(addrlen)))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(n int, list *_Gid_t) (nn int, err error) {
+	r0, er := C.getgroups(C.int(n), C.uintptr_t(uintptr(unsafe.Pointer(list))))
+	nn = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(n int, list *_Gid_t) (err error) {
+	r0, er := C.setgroups(C.int(n), C.uintptr_t(uintptr(unsafe.Pointer(list))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	r0, er := C.getsockopt(C.int(s), C.int(level), C.int(name), C.uintptr_t(uintptr(val)), C.uintptr_t(uintptr(unsafe.Pointer(vallen))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	r0, er := C.setsockopt(C.int(s), C.int(level), C.int(name), C.uintptr_t(uintptr(val)), C.uintptr_t(vallen))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, er := C.socket(C.int(domain), C.int(typ), C.int(proto))
+	fd = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	r0, er := C.socketpair(C.int(domain), C.int(typ), C.int(proto), C.uintptr_t(uintptr(unsafe.Pointer(fd))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	r0, er := C.getpeername(C.int(fd), C.uintptr_t(uintptr(unsafe.Pointer(rsa))), C.uintptr_t(uintptr(unsafe.Pointer(addrlen))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	r0, er := C.getsockname(C.int(fd), C.uintptr_t(uintptr(unsafe.Pointer(rsa))), C.uintptr_t(uintptr(unsafe.Pointer(addrlen))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	var _p1 int
+	_p1 = len(p)
+	r0, er := C.recvfrom(C.int(fd), C.uintptr_t(uintptr(unsafe.Pointer(_p0))), C.size_t(_p1), C.int(flags), C.uintptr_t(uintptr(unsafe.Pointer(from))), C.uintptr_t(uintptr(unsafe.Pointer(fromlen))))
+	n = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 *byte
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	var _p1 int
+	_p1 = len(buf)
+	r0, er := C.sendto(C.int(s), C.uintptr_t(uintptr(unsafe.Pointer(_p0))), C.size_t(_p1), C.int(flags), C.uintptr_t(uintptr(to)), C.uintptr_t(uintptr(addrlen)))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, er := C.nrecvmsg(C.int(s), C.uintptr_t(uintptr(unsafe.Pointer(msg))), C.int(flags))
+	n = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, er := C.nsendmsg(C.int(s), C.uintptr_t(uintptr(unsafe.Pointer(msg))), C.int(flags))
+	n = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	r0, er := C.munmap(C.uintptr_t(addr), C.uintptr_t(length))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, advice int) (err error) {
+	var _p0 *byte
+	if len(b) > 0 {
+		_p0 = &b[0]
+	}
+	var _p1 int
+	_p1 = len(b)
+	r0, er := C.madvise(C.uintptr_t(uintptr(unsafe.Pointer(_p0))), C.size_t(_p1), C.int(advice))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 *byte
+	if len(b) > 0 {
+		_p0 = &b[0]
+	}
+	var _p1 int
+	_p1 = len(b)
+	r0, er := C.mprotect(C.uintptr_t(uintptr(unsafe.Pointer(_p0))), C.size_t(_p1), C.int(prot))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 *byte
+	if len(b) > 0 {
+		_p0 = &b[0]
+	}
+	var _p1 int
+	_p1 = len(b)
+	r0, er := C.mlock(C.uintptr_t(uintptr(unsafe.Pointer(_p0))), C.size_t(_p1))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	r0, er := C.mlockall(C.int(flags))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 *byte
+	if len(b) > 0 {
+		_p0 = &b[0]
+	}
+	var _p1 int
+	_p1 = len(b)
+	r0, er := C.msync(C.uintptr_t(uintptr(unsafe.Pointer(_p0))), C.size_t(_p1), C.int(flags))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 *byte
+	if len(b) > 0 {
+		_p0 = &b[0]
+	}
+	var _p1 int
+	_p1 = len(b)
+	r0, er := C.munlock(C.uintptr_t(uintptr(unsafe.Pointer(_p0))), C.size_t(_p1))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	r0, er := C.munlockall()
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe(p *[2]_C_int) (err error) {
+	r0, er := C.pipe(C.uintptr_t(uintptr(unsafe.Pointer(p))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, er := C.poll(C.uintptr_t(uintptr(unsafe.Pointer(fds))), C.int(nfds), C.int(timeout))
+	n = int(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func gettimeofday(tv *Timeval, tzp *Timezone) (err error) {
+	r0, er := C.gettimeofday(C.uintptr_t(uintptr(unsafe.Pointer(tv))), C.uintptr_t(uintptr(unsafe.Pointer(tzp))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Time(t *Time_t) (tt Time_t, err error) {
+	r0, er := C.time(C.uintptr_t(uintptr(unsafe.Pointer(t))))
+	tt = Time_t(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Utime(path string, buf *Utimbuf) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(path)))
+	r0, er := C.utime(C.uintptr_t(_p0), C.uintptr_t(uintptr(unsafe.Pointer(buf))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsystemcfg(label int) (n uint64) {
+	r0, _ := C.getsystemcfg(C.int(label))
+	n = uint64(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func umount(target string) (err error) {
+	_p0 := uintptr(unsafe.Pointer(C.CString(target)))
+	r0, er := C.umount(C.uintptr_t(_p0))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(resource int, rlim *Rlimit) (err error) {
+	r0, er := C.getrlimit64(C.int(resource), C.uintptr_t(uintptr(unsafe.Pointer(rlim))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(resource int, rlim *Rlimit) (err error) {
+	r0, er := C.setrlimit64(C.int(resource), C.uintptr_t(uintptr(unsafe.Pointer(rlim))))
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (off int64, err error) {
+	r0, er := C.lseek64(C.int(fd), C.longlong(offset), C.int(whence))
+	off = int64(r0)
+	if r0 == -1 && er != nil {
+		err = er
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error) {
+	r0, er := C.mmap(C.uintptr_t(addr), C.uintptr_t(length), C.int(prot), C.int(flags), C.int(fd), C.longlong(offset))
+	xaddr = uintptr(r0)
+	if uintptr(r0) == ^uintptr(0) && er != nil {
+		err = er
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_aix_ppc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_aix_ppc64.go
new file mode 100644
index 000000000..664b293b4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_aix_ppc64.go
@@ -0,0 +1,1442 @@
+// go run mksyscall_aix_ppc64.go -aix -tags aix,ppc64 syscall_aix.go syscall_aix_ppc64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build aix,ppc64
+
+package unix
+
+import (
+	"unsafe"
+)
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callutimes(uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flag int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callutimensat(dirfd, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), flag)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getcwd(buf []byte) (err error) {
+	var _p0 *byte
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	_, e1 := callgetcwd(uintptr(unsafe.Pointer(_p0)), len(buf))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, e1 := callaccept(s, uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getdirent(fd int, buf []byte) (n int, err error) {
+	var _p0 *byte
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	r0, e1 := callgetdirent(fd, uintptr(unsafe.Pointer(_p0)), len(buf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid Pid_t, status *_C_int, options int, rusage *Rusage) (wpid Pid_t, err error) {
+	r0, e1 := callwait4(int(pid), uintptr(unsafe.Pointer(status)), options, uintptr(unsafe.Pointer(rusage)))
+	wpid = Pid_t(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, e1 := callioctl(fd, int(req), arg)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func FcntlInt(fd uintptr, cmd int, arg int) (r int, err error) {
+	r0, e1 := callfcntl(fd, cmd, uintptr(arg))
+	r = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func FcntlFlock(fd uintptr, cmd int, lk *Flock_t) (err error) {
+	_, e1 := callfcntl(fd, cmd, uintptr(unsafe.Pointer(lk)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fcntl(fd int, cmd int, arg int) (val int, err error) {
+	r0, e1 := callfcntl(uintptr(fd), cmd, uintptr(arg))
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Acct(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callacct(uintptr(unsafe.Pointer(_p0)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callchdir(uintptr(unsafe.Pointer(_p0)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callchroot(uintptr(unsafe.Pointer(_p0)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, e1 := callclose(fd)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(oldfd int) (fd int, err error) {
+	r0, e1 := calldup(oldfd)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	callexit(code)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callfaccessat(dirfd, uintptr(unsafe.Pointer(_p0)), mode, flags)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, e1 := callfchdir(fd)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, e1 := callfchmod(fd, mode)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callfchmodat(dirfd, uintptr(unsafe.Pointer(_p0)), mode, flags)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callfchownat(dirfd, uintptr(unsafe.Pointer(_p0)), uid, gid, flags)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fdatasync(fd int) (err error) {
+	_, e1 := callfdatasync(fd)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, e1 := callfsync(fd)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, e1 := callgetpgid(pid)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pid int) {
+	r0, _ := callgetpgrp()
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _ := callgetpid()
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _ := callgetppid()
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, e1 := callgetpriority(which, who)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, e1 := callgetrusage(who, uintptr(unsafe.Pointer(rusage)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, e1 := callgetsid(pid)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, sig Signal) (err error) {
+	_, e1 := callkill(pid, int(sig))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Klogctl(typ int, buf []byte) (n int, err error) {
+	var _p0 *byte
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	r0, e1 := callsyslog(typ, uintptr(unsafe.Pointer(_p0)), len(buf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callmkdir(dirfd, uintptr(unsafe.Pointer(_p0)), mode)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callmkdirat(dirfd, uintptr(unsafe.Pointer(_p0)), mode)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callmkfifo(uintptr(unsafe.Pointer(_p0)), mode)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callmknod(uintptr(unsafe.Pointer(_p0)), mode, dev)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknodat(dirfd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callmknodat(dirfd, uintptr(unsafe.Pointer(_p0)), mode, dev)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, e1 := callnanosleep(uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, e1 := callopen64(uintptr(unsafe.Pointer(_p0)), mode, perm)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, flags int, mode uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, e1 := callopenat(dirfd, uintptr(unsafe.Pointer(_p0)), flags, mode)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	r0, e1 := callread(fd, uintptr(unsafe.Pointer(_p0)), len(p))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	if len(buf) > 0 {
+		_p1 = &buf[0]
+	}
+	r0, e1 := callreadlink(uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), len(buf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, e1 := callrenameat(olddirfd, uintptr(unsafe.Pointer(_p0)), newdirfd, uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setdomainname(p []byte) (err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	_, e1 := callsetdomainname(uintptr(unsafe.Pointer(_p0)), len(p))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sethostname(p []byte) (err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	_, e1 := callsethostname(uintptr(unsafe.Pointer(_p0)), len(p))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, e1 := callsetpgid(pid, pgid)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, e1 := callsetsid()
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tv *Timeval) (err error) {
+	_, e1 := callsettimeofday(uintptr(unsafe.Pointer(tv)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, e1 := callsetuid(uid)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(uid int) (err error) {
+	_, e1 := callsetgid(uid)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, e1 := callsetpriority(which, who, prio)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statx(dirfd int, path string, flags int, mask int, stat *Statx_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callstatx(dirfd, uintptr(unsafe.Pointer(_p0)), flags, mask, uintptr(unsafe.Pointer(stat)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() {
+	callsync()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Times(tms *Tms) (ticks uintptr, err error) {
+	r0, e1 := calltimes(uintptr(unsafe.Pointer(tms)))
+	ticks = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(mask int) (oldmask int) {
+	r0, _ := callumask(mask)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Uname(buf *Utsname) (err error) {
+	_, e1 := calluname(uintptr(unsafe.Pointer(buf)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callunlink(uintptr(unsafe.Pointer(_p0)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callunlinkat(dirfd, uintptr(unsafe.Pointer(_p0)), flags)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ustat(dev int, ubuf *Ustat_t) (err error) {
+	_, e1 := callustat(dev, uintptr(unsafe.Pointer(ubuf)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	r0, e1 := callwrite(fd, uintptr(unsafe.Pointer(_p0)), len(p))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, p *byte, np int) (n int, err error) {
+	r0, e1 := callread(fd, uintptr(unsafe.Pointer(p)), np)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, p *byte, np int) (n int, err error) {
+	r0, e1 := callwrite(fd, uintptr(unsafe.Pointer(p)), np)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(oldfd int, newfd int) (err error) {
+	_, e1 := calldup2(oldfd, newfd)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, e1 := callposix_fadvise64(fd, offset, length, advice)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, e1 := callfchown(fd, uid, gid)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstat(fd int, stat *Stat_t) (err error) {
+	_, e1 := callfstat(fd, uintptr(unsafe.Pointer(stat)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callfstatat(dirfd, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), flags)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, buf *Statfs_t) (err error) {
+	_, e1 := callfstatfs(fd, uintptr(unsafe.Pointer(buf)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, e1 := callftruncate(fd, length)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _ := callgetegid()
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (euid int) {
+	r0, _ := callgeteuid()
+	euid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _ := callgetgid()
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _ := callgetuid()
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := calllchown(uintptr(unsafe.Pointer(_p0)), uid, gid)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, n int) (err error) {
+	_, e1 := calllisten(s, n)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := calllstat(uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pause() (err error) {
+	_, e1 := callpause()
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	r0, e1 := callpread64(fd, uintptr(unsafe.Pointer(_p0)), len(p), offset)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	r0, e1 := callpwrite64(fd, uintptr(unsafe.Pointer(_p0)), len(p), offset)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, e1 := callselect(nfd, uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pselect(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timespec, sigmask *Sigset_t) (n int, err error) {
+	r0, e1 := callpselect(nfd, uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), uintptr(unsafe.Pointer(sigmask)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, e1 := callsetregid(rgid, egid)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, e1 := callsetreuid(ruid, euid)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(fd int, how int) (err error) {
+	_, e1 := callshutdown(fd, how)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error) {
+	r0, e1 := callsplice(rfd, uintptr(unsafe.Pointer(roff)), wfd, uintptr(unsafe.Pointer(woff)), len, flags)
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func stat(path string, statptr *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callstat(uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(statptr)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, buf *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callstatfs(uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := calltruncate(uintptr(unsafe.Pointer(_p0)), length)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, e1 := callbind(s, uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, e1 := callconnect(s, uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(n int, list *_Gid_t) (nn int, err error) {
+	r0, e1 := callgetgroups(n, uintptr(unsafe.Pointer(list)))
+	nn = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(n int, list *_Gid_t) (err error) {
+	_, e1 := callsetgroups(n, uintptr(unsafe.Pointer(list)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, e1 := callgetsockopt(s, level, name, uintptr(val), uintptr(unsafe.Pointer(vallen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, e1 := callsetsockopt(s, level, name, uintptr(val), vallen)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, e1 := callsocket(domain, typ, proto)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, e1 := callsocketpair(domain, typ, proto, uintptr(unsafe.Pointer(fd)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, e1 := callgetpeername(fd, uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, e1 := callgetsockname(fd, uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	r0, e1 := callrecvfrom(fd, uintptr(unsafe.Pointer(_p0)), len(p), flags, uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 *byte
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	_, e1 := callsendto(s, uintptr(unsafe.Pointer(_p0)), len(buf), flags, uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, e1 := callnrecvmsg(s, uintptr(unsafe.Pointer(msg)), flags)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, e1 := callnsendmsg(s, uintptr(unsafe.Pointer(msg)), flags)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, e1 := callmunmap(addr, length)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, advice int) (err error) {
+	var _p0 *byte
+	if len(b) > 0 {
+		_p0 = &b[0]
+	}
+	_, e1 := callmadvise(uintptr(unsafe.Pointer(_p0)), len(b), advice)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 *byte
+	if len(b) > 0 {
+		_p0 = &b[0]
+	}
+	_, e1 := callmprotect(uintptr(unsafe.Pointer(_p0)), len(b), prot)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 *byte
+	if len(b) > 0 {
+		_p0 = &b[0]
+	}
+	_, e1 := callmlock(uintptr(unsafe.Pointer(_p0)), len(b))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, e1 := callmlockall(flags)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 *byte
+	if len(b) > 0 {
+		_p0 = &b[0]
+	}
+	_, e1 := callmsync(uintptr(unsafe.Pointer(_p0)), len(b), flags)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 *byte
+	if len(b) > 0 {
+		_p0 = &b[0]
+	}
+	_, e1 := callmunlock(uintptr(unsafe.Pointer(_p0)), len(b))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, e1 := callmunlockall()
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe(p *[2]_C_int) (err error) {
+	_, e1 := callpipe(uintptr(unsafe.Pointer(p)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, e1 := callpoll(uintptr(unsafe.Pointer(fds)), nfds, timeout)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func gettimeofday(tv *Timeval, tzp *Timezone) (err error) {
+	_, e1 := callgettimeofday(uintptr(unsafe.Pointer(tv)), uintptr(unsafe.Pointer(tzp)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Time(t *Time_t) (tt Time_t, err error) {
+	r0, e1 := calltime(uintptr(unsafe.Pointer(t)))
+	tt = Time_t(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Utime(path string, buf *Utimbuf) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, e1 := callutime(uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsystemcfg(label int) (n uint64) {
+	r0, _ := callgetsystemcfg(label)
+	n = uint64(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func umount(target string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(target)
+	if err != nil {
+		return
+	}
+	_, e1 := callumount(uintptr(unsafe.Pointer(_p0)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(resource int, rlim *Rlimit) (err error) {
+	_, e1 := callgetrlimit(resource, uintptr(unsafe.Pointer(rlim)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(resource int, rlim *Rlimit) (err error) {
+	_, e1 := callsetrlimit(resource, uintptr(unsafe.Pointer(rlim)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (off int64, err error) {
+	r0, e1 := calllseek(fd, offset, whence)
+	off = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error) {
+	r0, e1 := callmmap64(addr, length, prot, flags, fd, offset)
+	xaddr = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_aix_ppc64_gc.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_aix_ppc64_gc.go
new file mode 100644
index 000000000..4b3a8ad7b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_aix_ppc64_gc.go
@@ -0,0 +1,1192 @@
+// go run mksyscall_aix_ppc64.go -aix -tags aix,ppc64 syscall_aix.go syscall_aix_ppc64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build aix,ppc64
+// +build !gccgo
+
+package unix
+
+import (
+	"unsafe"
+)
+
+//go:cgo_import_dynamic libc_utimes utimes "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_utimensat utimensat "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getcwd getcwd "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_accept accept "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getdirent getdirent "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_wait4 wait4 "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_ioctl ioctl "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_fcntl fcntl "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_acct acct "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_chdir chdir "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_chroot chroot "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_close close "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_dup dup "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_exit exit "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_faccessat faccessat "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_fchdir fchdir "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_fchmod fchmod "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_fchmodat fchmodat "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_fchownat fchownat "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_fdatasync fdatasync "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_fsync fsync "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getpgid getpgid "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getpgrp getpgrp "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getpid getpid "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getppid getppid "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getpriority getpriority "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getrusage getrusage "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getsid getsid "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_kill kill "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_syslog syslog "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_mkdir mkdir "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_mkdirat mkdirat "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_mkfifo mkfifo "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_mknod mknod "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_mknodat mknodat "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_nanosleep nanosleep "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_open64 open64 "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_openat openat "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_read read "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_readlink readlink "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_renameat renameat "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_setdomainname setdomainname "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_sethostname sethostname "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_setpgid setpgid "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_setsid setsid "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_settimeofday settimeofday "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_setuid setuid "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_setgid setgid "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_setpriority setpriority "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_statx statx "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_sync sync "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_times times "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_umask umask "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_uname uname "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_unlink unlink "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_unlinkat unlinkat "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_ustat ustat "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_write write "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_dup2 dup2 "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_posix_fadvise64 posix_fadvise64 "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_fchown fchown "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_fstat fstat "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_fstatat fstatat "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_fstatfs fstatfs "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_ftruncate ftruncate "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getegid getegid "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_geteuid geteuid "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getgid getgid "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getuid getuid "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_lchown lchown "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_listen listen "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_lstat lstat "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_pause pause "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_pread64 pread64 "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_pwrite64 pwrite64 "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_select select "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_pselect pselect "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_setregid setregid "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_setreuid setreuid "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_shutdown shutdown "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_splice splice "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_stat stat "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_statfs statfs "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_truncate truncate "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_bind bind "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_connect connect "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getgroups getgroups "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_setgroups setgroups "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getsockopt getsockopt "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_setsockopt setsockopt "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_socket socket "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_socketpair socketpair "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getpeername getpeername "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getsockname getsockname "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_recvfrom recvfrom "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_sendto sendto "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_nrecvmsg nrecvmsg "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_nsendmsg nsendmsg "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_munmap munmap "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_madvise madvise "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_mprotect mprotect "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_mlock mlock "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_mlockall mlockall "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_msync msync "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_munlock munlock "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_munlockall munlockall "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_pipe pipe "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_poll poll "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_gettimeofday gettimeofday "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_time time "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_utime utime "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getsystemcfg getsystemcfg "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_umount umount "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_getrlimit getrlimit "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_setrlimit setrlimit "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_lseek lseek "libc.a/shr_64.o"
+//go:cgo_import_dynamic libc_mmap64 mmap64 "libc.a/shr_64.o"
+
+//go:linkname libc_utimes libc_utimes
+//go:linkname libc_utimensat libc_utimensat
+//go:linkname libc_getcwd libc_getcwd
+//go:linkname libc_accept libc_accept
+//go:linkname libc_getdirent libc_getdirent
+//go:linkname libc_wait4 libc_wait4
+//go:linkname libc_ioctl libc_ioctl
+//go:linkname libc_fcntl libc_fcntl
+//go:linkname libc_acct libc_acct
+//go:linkname libc_chdir libc_chdir
+//go:linkname libc_chroot libc_chroot
+//go:linkname libc_close libc_close
+//go:linkname libc_dup libc_dup
+//go:linkname libc_exit libc_exit
+//go:linkname libc_faccessat libc_faccessat
+//go:linkname libc_fchdir libc_fchdir
+//go:linkname libc_fchmod libc_fchmod
+//go:linkname libc_fchmodat libc_fchmodat
+//go:linkname libc_fchownat libc_fchownat
+//go:linkname libc_fdatasync libc_fdatasync
+//go:linkname libc_fsync libc_fsync
+//go:linkname libc_getpgid libc_getpgid
+//go:linkname libc_getpgrp libc_getpgrp
+//go:linkname libc_getpid libc_getpid
+//go:linkname libc_getppid libc_getppid
+//go:linkname libc_getpriority libc_getpriority
+//go:linkname libc_getrusage libc_getrusage
+//go:linkname libc_getsid libc_getsid
+//go:linkname libc_kill libc_kill
+//go:linkname libc_syslog libc_syslog
+//go:linkname libc_mkdir libc_mkdir
+//go:linkname libc_mkdirat libc_mkdirat
+//go:linkname libc_mkfifo libc_mkfifo
+//go:linkname libc_mknod libc_mknod
+//go:linkname libc_mknodat libc_mknodat
+//go:linkname libc_nanosleep libc_nanosleep
+//go:linkname libc_open64 libc_open64
+//go:linkname libc_openat libc_openat
+//go:linkname libc_read libc_read
+//go:linkname libc_readlink libc_readlink
+//go:linkname libc_renameat libc_renameat
+//go:linkname libc_setdomainname libc_setdomainname
+//go:linkname libc_sethostname libc_sethostname
+//go:linkname libc_setpgid libc_setpgid
+//go:linkname libc_setsid libc_setsid
+//go:linkname libc_settimeofday libc_settimeofday
+//go:linkname libc_setuid libc_setuid
+//go:linkname libc_setgid libc_setgid
+//go:linkname libc_setpriority libc_setpriority
+//go:linkname libc_statx libc_statx
+//go:linkname libc_sync libc_sync
+//go:linkname libc_times libc_times
+//go:linkname libc_umask libc_umask
+//go:linkname libc_uname libc_uname
+//go:linkname libc_unlink libc_unlink
+//go:linkname libc_unlinkat libc_unlinkat
+//go:linkname libc_ustat libc_ustat
+//go:linkname libc_write libc_write
+//go:linkname libc_dup2 libc_dup2
+//go:linkname libc_posix_fadvise64 libc_posix_fadvise64
+//go:linkname libc_fchown libc_fchown
+//go:linkname libc_fstat libc_fstat
+//go:linkname libc_fstatat libc_fstatat
+//go:linkname libc_fstatfs libc_fstatfs
+//go:linkname libc_ftruncate libc_ftruncate
+//go:linkname libc_getegid libc_getegid
+//go:linkname libc_geteuid libc_geteuid
+//go:linkname libc_getgid libc_getgid
+//go:linkname libc_getuid libc_getuid
+//go:linkname libc_lchown libc_lchown
+//go:linkname libc_listen libc_listen
+//go:linkname libc_lstat libc_lstat
+//go:linkname libc_pause libc_pause
+//go:linkname libc_pread64 libc_pread64
+//go:linkname libc_pwrite64 libc_pwrite64
+//go:linkname libc_select libc_select
+//go:linkname libc_pselect libc_pselect
+//go:linkname libc_setregid libc_setregid
+//go:linkname libc_setreuid libc_setreuid
+//go:linkname libc_shutdown libc_shutdown
+//go:linkname libc_splice libc_splice
+//go:linkname libc_stat libc_stat
+//go:linkname libc_statfs libc_statfs
+//go:linkname libc_truncate libc_truncate
+//go:linkname libc_bind libc_bind
+//go:linkname libc_connect libc_connect
+//go:linkname libc_getgroups libc_getgroups
+//go:linkname libc_setgroups libc_setgroups
+//go:linkname libc_getsockopt libc_getsockopt
+//go:linkname libc_setsockopt libc_setsockopt
+//go:linkname libc_socket libc_socket
+//go:linkname libc_socketpair libc_socketpair
+//go:linkname libc_getpeername libc_getpeername
+//go:linkname libc_getsockname libc_getsockname
+//go:linkname libc_recvfrom libc_recvfrom
+//go:linkname libc_sendto libc_sendto
+//go:linkname libc_nrecvmsg libc_nrecvmsg
+//go:linkname libc_nsendmsg libc_nsendmsg
+//go:linkname libc_munmap libc_munmap
+//go:linkname libc_madvise libc_madvise
+//go:linkname libc_mprotect libc_mprotect
+//go:linkname libc_mlock libc_mlock
+//go:linkname libc_mlockall libc_mlockall
+//go:linkname libc_msync libc_msync
+//go:linkname libc_munlock libc_munlock
+//go:linkname libc_munlockall libc_munlockall
+//go:linkname libc_pipe libc_pipe
+//go:linkname libc_poll libc_poll
+//go:linkname libc_gettimeofday libc_gettimeofday
+//go:linkname libc_time libc_time
+//go:linkname libc_utime libc_utime
+//go:linkname libc_getsystemcfg libc_getsystemcfg
+//go:linkname libc_umount libc_umount
+//go:linkname libc_getrlimit libc_getrlimit
+//go:linkname libc_setrlimit libc_setrlimit
+//go:linkname libc_lseek libc_lseek
+//go:linkname libc_mmap64 libc_mmap64
+
+type syscallFunc uintptr
+
+var (
+	libc_utimes,
+	libc_utimensat,
+	libc_getcwd,
+	libc_accept,
+	libc_getdirent,
+	libc_wait4,
+	libc_ioctl,
+	libc_fcntl,
+	libc_acct,
+	libc_chdir,
+	libc_chroot,
+	libc_close,
+	libc_dup,
+	libc_exit,
+	libc_faccessat,
+	libc_fchdir,
+	libc_fchmod,
+	libc_fchmodat,
+	libc_fchownat,
+	libc_fdatasync,
+	libc_fsync,
+	libc_getpgid,
+	libc_getpgrp,
+	libc_getpid,
+	libc_getppid,
+	libc_getpriority,
+	libc_getrusage,
+	libc_getsid,
+	libc_kill,
+	libc_syslog,
+	libc_mkdir,
+	libc_mkdirat,
+	libc_mkfifo,
+	libc_mknod,
+	libc_mknodat,
+	libc_nanosleep,
+	libc_open64,
+	libc_openat,
+	libc_read,
+	libc_readlink,
+	libc_renameat,
+	libc_setdomainname,
+	libc_sethostname,
+	libc_setpgid,
+	libc_setsid,
+	libc_settimeofday,
+	libc_setuid,
+	libc_setgid,
+	libc_setpriority,
+	libc_statx,
+	libc_sync,
+	libc_times,
+	libc_umask,
+	libc_uname,
+	libc_unlink,
+	libc_unlinkat,
+	libc_ustat,
+	libc_write,
+	libc_dup2,
+	libc_posix_fadvise64,
+	libc_fchown,
+	libc_fstat,
+	libc_fstatat,
+	libc_fstatfs,
+	libc_ftruncate,
+	libc_getegid,
+	libc_geteuid,
+	libc_getgid,
+	libc_getuid,
+	libc_lchown,
+	libc_listen,
+	libc_lstat,
+	libc_pause,
+	libc_pread64,
+	libc_pwrite64,
+	libc_select,
+	libc_pselect,
+	libc_setregid,
+	libc_setreuid,
+	libc_shutdown,
+	libc_splice,
+	libc_stat,
+	libc_statfs,
+	libc_truncate,
+	libc_bind,
+	libc_connect,
+	libc_getgroups,
+	libc_setgroups,
+	libc_getsockopt,
+	libc_setsockopt,
+	libc_socket,
+	libc_socketpair,
+	libc_getpeername,
+	libc_getsockname,
+	libc_recvfrom,
+	libc_sendto,
+	libc_nrecvmsg,
+	libc_nsendmsg,
+	libc_munmap,
+	libc_madvise,
+	libc_mprotect,
+	libc_mlock,
+	libc_mlockall,
+	libc_msync,
+	libc_munlock,
+	libc_munlockall,
+	libc_pipe,
+	libc_poll,
+	libc_gettimeofday,
+	libc_time,
+	libc_utime,
+	libc_getsystemcfg,
+	libc_umount,
+	libc_getrlimit,
+	libc_setrlimit,
+	libc_lseek,
+	libc_mmap64 syscallFunc
+)
+
+// Implemented in runtime/syscall_aix.go.
+func rawSyscall6(trap, nargs, a1, a2, a3, a4, a5, a6 uintptr) (r1, r2 uintptr, err Errno)
+func syscall6(trap, nargs, a1, a2, a3, a4, a5, a6 uintptr) (r1, r2 uintptr, err Errno)
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callutimes(_p0 uintptr, times uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_utimes)), 2, _p0, times, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callutimensat(dirfd int, _p0 uintptr, times uintptr, flag int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_utimensat)), 4, uintptr(dirfd), _p0, times, uintptr(flag), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetcwd(_p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_getcwd)), 2, _p0, uintptr(_lenp0), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callaccept(s int, rsa uintptr, addrlen uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_accept)), 3, uintptr(s), rsa, addrlen, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetdirent(fd int, _p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_getdirent)), 3, uintptr(fd), _p0, uintptr(_lenp0), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callwait4(pid int, status uintptr, options int, rusage uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_wait4)), 4, uintptr(pid), status, uintptr(options), rusage, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callioctl(fd int, req int, arg uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_ioctl)), 3, uintptr(fd), uintptr(req), arg, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfcntl(fd uintptr, cmd int, arg uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_fcntl)), 3, fd, uintptr(cmd), arg, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callacct(_p0 uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_acct)), 1, _p0, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callchdir(_p0 uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_chdir)), 1, _p0, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callchroot(_p0 uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_chroot)), 1, _p0, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callclose(fd int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_close)), 1, uintptr(fd), 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calldup(oldfd int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_dup)), 1, uintptr(oldfd), 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callexit(code int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_exit)), 1, uintptr(code), 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfaccessat(dirfd int, _p0 uintptr, mode uint32, flags int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_faccessat)), 4, uintptr(dirfd), _p0, uintptr(mode), uintptr(flags), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfchdir(fd int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_fchdir)), 1, uintptr(fd), 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfchmod(fd int, mode uint32) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_fchmod)), 2, uintptr(fd), uintptr(mode), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfchmodat(dirfd int, _p0 uintptr, mode uint32, flags int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_fchmodat)), 4, uintptr(dirfd), _p0, uintptr(mode), uintptr(flags), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfchownat(dirfd int, _p0 uintptr, uid int, gid int, flags int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_fchownat)), 5, uintptr(dirfd), _p0, uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfdatasync(fd int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_fdatasync)), 1, uintptr(fd), 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfsync(fd int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_fsync)), 1, uintptr(fd), 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetpgid(pid int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_getpgid)), 1, uintptr(pid), 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetpgrp() (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_getpgrp)), 0, 0, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetpid() (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_getpid)), 0, 0, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetppid() (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_getppid)), 0, 0, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetpriority(which int, who int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_getpriority)), 2, uintptr(which), uintptr(who), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetrusage(who int, rusage uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_getrusage)), 2, uintptr(who), rusage, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetsid(pid int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_getsid)), 1, uintptr(pid), 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callkill(pid int, sig int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_kill)), 2, uintptr(pid), uintptr(sig), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsyslog(typ int, _p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_syslog)), 3, uintptr(typ), _p0, uintptr(_lenp0), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmkdir(dirfd int, _p0 uintptr, mode uint32) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_mkdir)), 3, uintptr(dirfd), _p0, uintptr(mode), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmkdirat(dirfd int, _p0 uintptr, mode uint32) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_mkdirat)), 3, uintptr(dirfd), _p0, uintptr(mode), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmkfifo(_p0 uintptr, mode uint32) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_mkfifo)), 2, _p0, uintptr(mode), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmknod(_p0 uintptr, mode uint32, dev int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_mknod)), 3, _p0, uintptr(mode), uintptr(dev), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmknodat(dirfd int, _p0 uintptr, mode uint32, dev int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_mknodat)), 4, uintptr(dirfd), _p0, uintptr(mode), uintptr(dev), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callnanosleep(time uintptr, leftover uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_nanosleep)), 2, time, leftover, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callopen64(_p0 uintptr, mode int, perm uint32) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_open64)), 3, _p0, uintptr(mode), uintptr(perm), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callopenat(dirfd int, _p0 uintptr, flags int, mode uint32) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_openat)), 4, uintptr(dirfd), _p0, uintptr(flags), uintptr(mode), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callread(fd int, _p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_read)), 3, uintptr(fd), _p0, uintptr(_lenp0), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callreadlink(_p0 uintptr, _p1 uintptr, _lenp1 int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_readlink)), 3, _p0, _p1, uintptr(_lenp1), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callrenameat(olddirfd int, _p0 uintptr, newdirfd int, _p1 uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_renameat)), 4, uintptr(olddirfd), _p0, uintptr(newdirfd), _p1, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetdomainname(_p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_setdomainname)), 2, _p0, uintptr(_lenp0), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsethostname(_p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_sethostname)), 2, _p0, uintptr(_lenp0), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetpgid(pid int, pgid int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_setpgid)), 2, uintptr(pid), uintptr(pgid), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetsid() (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_setsid)), 0, 0, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsettimeofday(tv uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_settimeofday)), 1, tv, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetuid(uid int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_setuid)), 1, uintptr(uid), 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetgid(uid int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_setgid)), 1, uintptr(uid), 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetpriority(which int, who int, prio int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_setpriority)), 3, uintptr(which), uintptr(who), uintptr(prio), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callstatx(dirfd int, _p0 uintptr, flags int, mask int, stat uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_statx)), 5, uintptr(dirfd), _p0, uintptr(flags), uintptr(mask), stat, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsync() (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_sync)), 0, 0, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calltimes(tms uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_times)), 1, tms, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callumask(mask int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_umask)), 1, uintptr(mask), 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calluname(buf uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_uname)), 1, buf, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callunlink(_p0 uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_unlink)), 1, _p0, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callunlinkat(dirfd int, _p0 uintptr, flags int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_unlinkat)), 3, uintptr(dirfd), _p0, uintptr(flags), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callustat(dev int, ubuf uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_ustat)), 2, uintptr(dev), ubuf, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callwrite(fd int, _p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_write)), 3, uintptr(fd), _p0, uintptr(_lenp0), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calldup2(oldfd int, newfd int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_dup2)), 2, uintptr(oldfd), uintptr(newfd), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callposix_fadvise64(fd int, offset int64, length int64, advice int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_posix_fadvise64)), 4, uintptr(fd), uintptr(offset), uintptr(length), uintptr(advice), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfchown(fd int, uid int, gid int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_fchown)), 3, uintptr(fd), uintptr(uid), uintptr(gid), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfstat(fd int, stat uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_fstat)), 2, uintptr(fd), stat, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfstatat(dirfd int, _p0 uintptr, stat uintptr, flags int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_fstatat)), 4, uintptr(dirfd), _p0, stat, uintptr(flags), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfstatfs(fd int, buf uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_fstatfs)), 2, uintptr(fd), buf, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callftruncate(fd int, length int64) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_ftruncate)), 2, uintptr(fd), uintptr(length), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetegid() (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_getegid)), 0, 0, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgeteuid() (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_geteuid)), 0, 0, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetgid() (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_getgid)), 0, 0, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetuid() (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_getuid)), 0, 0, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calllchown(_p0 uintptr, uid int, gid int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_lchown)), 3, _p0, uintptr(uid), uintptr(gid), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calllisten(s int, n int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_listen)), 2, uintptr(s), uintptr(n), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calllstat(_p0 uintptr, stat uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_lstat)), 2, _p0, stat, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callpause() (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_pause)), 0, 0, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callpread64(fd int, _p0 uintptr, _lenp0 int, offset int64) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_pread64)), 4, uintptr(fd), _p0, uintptr(_lenp0), uintptr(offset), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callpwrite64(fd int, _p0 uintptr, _lenp0 int, offset int64) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_pwrite64)), 4, uintptr(fd), _p0, uintptr(_lenp0), uintptr(offset), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callselect(nfd int, r uintptr, w uintptr, e uintptr, timeout uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_select)), 5, uintptr(nfd), r, w, e, timeout, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callpselect(nfd int, r uintptr, w uintptr, e uintptr, timeout uintptr, sigmask uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_pselect)), 6, uintptr(nfd), r, w, e, timeout, sigmask)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetregid(rgid int, egid int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_setregid)), 2, uintptr(rgid), uintptr(egid), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetreuid(ruid int, euid int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_setreuid)), 2, uintptr(ruid), uintptr(euid), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callshutdown(fd int, how int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_shutdown)), 2, uintptr(fd), uintptr(how), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsplice(rfd int, roff uintptr, wfd int, woff uintptr, len int, flags int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_splice)), 6, uintptr(rfd), roff, uintptr(wfd), woff, uintptr(len), uintptr(flags))
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callstat(_p0 uintptr, statptr uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_stat)), 2, _p0, statptr, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callstatfs(_p0 uintptr, buf uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_statfs)), 2, _p0, buf, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calltruncate(_p0 uintptr, length int64) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_truncate)), 2, _p0, uintptr(length), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callbind(s int, addr uintptr, addrlen uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_bind)), 3, uintptr(s), addr, addrlen, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callconnect(s int, addr uintptr, addrlen uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_connect)), 3, uintptr(s), addr, addrlen, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetgroups(n int, list uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_getgroups)), 2, uintptr(n), list, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetgroups(n int, list uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_setgroups)), 2, uintptr(n), list, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetsockopt(s int, level int, name int, val uintptr, vallen uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_getsockopt)), 5, uintptr(s), uintptr(level), uintptr(name), val, vallen, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetsockopt(s int, level int, name int, val uintptr, vallen uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_setsockopt)), 5, uintptr(s), uintptr(level), uintptr(name), val, vallen, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsocket(domain int, typ int, proto int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_socket)), 3, uintptr(domain), uintptr(typ), uintptr(proto), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsocketpair(domain int, typ int, proto int, fd uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_socketpair)), 4, uintptr(domain), uintptr(typ), uintptr(proto), fd, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetpeername(fd int, rsa uintptr, addrlen uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_getpeername)), 3, uintptr(fd), rsa, addrlen, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetsockname(fd int, rsa uintptr, addrlen uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_getsockname)), 3, uintptr(fd), rsa, addrlen, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callrecvfrom(fd int, _p0 uintptr, _lenp0 int, flags int, from uintptr, fromlen uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_recvfrom)), 6, uintptr(fd), _p0, uintptr(_lenp0), uintptr(flags), from, fromlen)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsendto(s int, _p0 uintptr, _lenp0 int, flags int, to uintptr, addrlen uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_sendto)), 6, uintptr(s), _p0, uintptr(_lenp0), uintptr(flags), to, addrlen)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callnrecvmsg(s int, msg uintptr, flags int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_nrecvmsg)), 3, uintptr(s), msg, uintptr(flags), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callnsendmsg(s int, msg uintptr, flags int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_nsendmsg)), 3, uintptr(s), msg, uintptr(flags), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmunmap(addr uintptr, length uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_munmap)), 2, addr, length, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmadvise(_p0 uintptr, _lenp0 int, advice int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_madvise)), 3, _p0, uintptr(_lenp0), uintptr(advice), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmprotect(_p0 uintptr, _lenp0 int, prot int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_mprotect)), 3, _p0, uintptr(_lenp0), uintptr(prot), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmlock(_p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_mlock)), 2, _p0, uintptr(_lenp0), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmlockall(flags int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_mlockall)), 1, uintptr(flags), 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmsync(_p0 uintptr, _lenp0 int, flags int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_msync)), 3, _p0, uintptr(_lenp0), uintptr(flags), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmunlock(_p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_munlock)), 2, _p0, uintptr(_lenp0), 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmunlockall() (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_munlockall)), 0, 0, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callpipe(p uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_pipe)), 1, p, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callpoll(fds uintptr, nfds int, timeout int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_poll)), 3, fds, uintptr(nfds), uintptr(timeout), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgettimeofday(tv uintptr, tzp uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_gettimeofday)), 2, tv, tzp, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calltime(t uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_time)), 1, t, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callutime(_p0 uintptr, buf uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_utime)), 2, _p0, buf, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetsystemcfg(label int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_getsystemcfg)), 1, uintptr(label), 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callumount(_p0 uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_umount)), 1, _p0, 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetrlimit(resource int, rlim uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_getrlimit)), 2, uintptr(resource), rlim, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetrlimit(resource int, rlim uintptr) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = rawSyscall6(uintptr(unsafe.Pointer(&libc_setrlimit)), 2, uintptr(resource), rlim, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calllseek(fd int, offset int64, whence int) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_lseek)), 3, uintptr(fd), uintptr(offset), uintptr(whence), 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmmap64(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (r1 uintptr, e1 Errno) {
+	r1, _, e1 = syscall6(uintptr(unsafe.Pointer(&libc_mmap64)), 6, addr, length, uintptr(prot), uintptr(flags), uintptr(fd), uintptr(offset))
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_aix_ppc64_gccgo.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_aix_ppc64_gccgo.go
new file mode 100644
index 000000000..cde4dbc5f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_aix_ppc64_gccgo.go
@@ -0,0 +1,1070 @@
+// go run mksyscall_aix_ppc64.go -aix -tags aix,ppc64 syscall_aix.go syscall_aix_ppc64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build aix,ppc64
+// +build gccgo
+
+package unix
+
+/*
+#include <stdint.h>
+int utimes(uintptr_t, uintptr_t);
+int utimensat(int, uintptr_t, uintptr_t, int);
+int getcwd(uintptr_t, size_t);
+int accept(int, uintptr_t, uintptr_t);
+int getdirent(int, uintptr_t, size_t);
+int wait4(int, uintptr_t, int, uintptr_t);
+int ioctl(int, int, uintptr_t);
+int fcntl(uintptr_t, int, uintptr_t);
+int acct(uintptr_t);
+int chdir(uintptr_t);
+int chroot(uintptr_t);
+int close(int);
+int dup(int);
+void exit(int);
+int faccessat(int, uintptr_t, unsigned int, int);
+int fchdir(int);
+int fchmod(int, unsigned int);
+int fchmodat(int, uintptr_t, unsigned int, int);
+int fchownat(int, uintptr_t, int, int, int);
+int fdatasync(int);
+int fsync(int);
+int getpgid(int);
+int getpgrp();
+int getpid();
+int getppid();
+int getpriority(int, int);
+int getrusage(int, uintptr_t);
+int getsid(int);
+int kill(int, int);
+int syslog(int, uintptr_t, size_t);
+int mkdir(int, uintptr_t, unsigned int);
+int mkdirat(int, uintptr_t, unsigned int);
+int mkfifo(uintptr_t, unsigned int);
+int mknod(uintptr_t, unsigned int, int);
+int mknodat(int, uintptr_t, unsigned int, int);
+int nanosleep(uintptr_t, uintptr_t);
+int open64(uintptr_t, int, unsigned int);
+int openat(int, uintptr_t, int, unsigned int);
+int read(int, uintptr_t, size_t);
+int readlink(uintptr_t, uintptr_t, size_t);
+int renameat(int, uintptr_t, int, uintptr_t);
+int setdomainname(uintptr_t, size_t);
+int sethostname(uintptr_t, size_t);
+int setpgid(int, int);
+int setsid();
+int settimeofday(uintptr_t);
+int setuid(int);
+int setgid(int);
+int setpriority(int, int, int);
+int statx(int, uintptr_t, int, int, uintptr_t);
+int sync();
+uintptr_t times(uintptr_t);
+int umask(int);
+int uname(uintptr_t);
+int unlink(uintptr_t);
+int unlinkat(int, uintptr_t, int);
+int ustat(int, uintptr_t);
+int write(int, uintptr_t, size_t);
+int dup2(int, int);
+int posix_fadvise64(int, long long, long long, int);
+int fchown(int, int, int);
+int fstat(int, uintptr_t);
+int fstatat(int, uintptr_t, uintptr_t, int);
+int fstatfs(int, uintptr_t);
+int ftruncate(int, long long);
+int getegid();
+int geteuid();
+int getgid();
+int getuid();
+int lchown(uintptr_t, int, int);
+int listen(int, int);
+int lstat(uintptr_t, uintptr_t);
+int pause();
+int pread64(int, uintptr_t, size_t, long long);
+int pwrite64(int, uintptr_t, size_t, long long);
+#define c_select select
+int select(int, uintptr_t, uintptr_t, uintptr_t, uintptr_t);
+int pselect(int, uintptr_t, uintptr_t, uintptr_t, uintptr_t, uintptr_t);
+int setregid(int, int);
+int setreuid(int, int);
+int shutdown(int, int);
+long long splice(int, uintptr_t, int, uintptr_t, int, int);
+int stat(uintptr_t, uintptr_t);
+int statfs(uintptr_t, uintptr_t);
+int truncate(uintptr_t, long long);
+int bind(int, uintptr_t, uintptr_t);
+int connect(int, uintptr_t, uintptr_t);
+int getgroups(int, uintptr_t);
+int setgroups(int, uintptr_t);
+int getsockopt(int, int, int, uintptr_t, uintptr_t);
+int setsockopt(int, int, int, uintptr_t, uintptr_t);
+int socket(int, int, int);
+int socketpair(int, int, int, uintptr_t);
+int getpeername(int, uintptr_t, uintptr_t);
+int getsockname(int, uintptr_t, uintptr_t);
+int recvfrom(int, uintptr_t, size_t, int, uintptr_t, uintptr_t);
+int sendto(int, uintptr_t, size_t, int, uintptr_t, uintptr_t);
+int nrecvmsg(int, uintptr_t, int);
+int nsendmsg(int, uintptr_t, int);
+int munmap(uintptr_t, uintptr_t);
+int madvise(uintptr_t, size_t, int);
+int mprotect(uintptr_t, size_t, int);
+int mlock(uintptr_t, size_t);
+int mlockall(int);
+int msync(uintptr_t, size_t, int);
+int munlock(uintptr_t, size_t);
+int munlockall();
+int pipe(uintptr_t);
+int poll(uintptr_t, int, int);
+int gettimeofday(uintptr_t, uintptr_t);
+int time(uintptr_t);
+int utime(uintptr_t, uintptr_t);
+unsigned long long getsystemcfg(int);
+int umount(uintptr_t);
+int getrlimit(int, uintptr_t);
+int setrlimit(int, uintptr_t);
+long long lseek(int, long long, int);
+uintptr_t mmap64(uintptr_t, uintptr_t, int, int, int, long long);
+
+*/
+import "C"
+import (
+	"syscall"
+)
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callutimes(_p0 uintptr, times uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.utimes(C.uintptr_t(_p0), C.uintptr_t(times)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callutimensat(dirfd int, _p0 uintptr, times uintptr, flag int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.utimensat(C.int(dirfd), C.uintptr_t(_p0), C.uintptr_t(times), C.int(flag)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetcwd(_p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getcwd(C.uintptr_t(_p0), C.size_t(_lenp0)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callaccept(s int, rsa uintptr, addrlen uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.accept(C.int(s), C.uintptr_t(rsa), C.uintptr_t(addrlen)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetdirent(fd int, _p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getdirent(C.int(fd), C.uintptr_t(_p0), C.size_t(_lenp0)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callwait4(pid int, status uintptr, options int, rusage uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.wait4(C.int(pid), C.uintptr_t(status), C.int(options), C.uintptr_t(rusage)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callioctl(fd int, req int, arg uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.ioctl(C.int(fd), C.int(req), C.uintptr_t(arg)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfcntl(fd uintptr, cmd int, arg uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.fcntl(C.uintptr_t(fd), C.int(cmd), C.uintptr_t(arg)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callacct(_p0 uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.acct(C.uintptr_t(_p0)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callchdir(_p0 uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.chdir(C.uintptr_t(_p0)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callchroot(_p0 uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.chroot(C.uintptr_t(_p0)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callclose(fd int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.close(C.int(fd)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calldup(oldfd int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.dup(C.int(oldfd)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callexit(code int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.exit(C.int(code)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfaccessat(dirfd int, _p0 uintptr, mode uint32, flags int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.faccessat(C.int(dirfd), C.uintptr_t(_p0), C.uint(mode), C.int(flags)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfchdir(fd int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.fchdir(C.int(fd)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfchmod(fd int, mode uint32) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.fchmod(C.int(fd), C.uint(mode)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfchmodat(dirfd int, _p0 uintptr, mode uint32, flags int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.fchmodat(C.int(dirfd), C.uintptr_t(_p0), C.uint(mode), C.int(flags)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfchownat(dirfd int, _p0 uintptr, uid int, gid int, flags int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.fchownat(C.int(dirfd), C.uintptr_t(_p0), C.int(uid), C.int(gid), C.int(flags)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfdatasync(fd int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.fdatasync(C.int(fd)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfsync(fd int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.fsync(C.int(fd)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetpgid(pid int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getpgid(C.int(pid)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetpgrp() (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getpgrp())
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetpid() (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getpid())
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetppid() (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getppid())
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetpriority(which int, who int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getpriority(C.int(which), C.int(who)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetrusage(who int, rusage uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getrusage(C.int(who), C.uintptr_t(rusage)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetsid(pid int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getsid(C.int(pid)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callkill(pid int, sig int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.kill(C.int(pid), C.int(sig)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsyslog(typ int, _p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.syslog(C.int(typ), C.uintptr_t(_p0), C.size_t(_lenp0)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmkdir(dirfd int, _p0 uintptr, mode uint32) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.mkdir(C.int(dirfd), C.uintptr_t(_p0), C.uint(mode)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmkdirat(dirfd int, _p0 uintptr, mode uint32) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.mkdirat(C.int(dirfd), C.uintptr_t(_p0), C.uint(mode)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmkfifo(_p0 uintptr, mode uint32) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.mkfifo(C.uintptr_t(_p0), C.uint(mode)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmknod(_p0 uintptr, mode uint32, dev int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.mknod(C.uintptr_t(_p0), C.uint(mode), C.int(dev)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmknodat(dirfd int, _p0 uintptr, mode uint32, dev int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.mknodat(C.int(dirfd), C.uintptr_t(_p0), C.uint(mode), C.int(dev)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callnanosleep(time uintptr, leftover uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.nanosleep(C.uintptr_t(time), C.uintptr_t(leftover)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callopen64(_p0 uintptr, mode int, perm uint32) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.open64(C.uintptr_t(_p0), C.int(mode), C.uint(perm)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callopenat(dirfd int, _p0 uintptr, flags int, mode uint32) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.openat(C.int(dirfd), C.uintptr_t(_p0), C.int(flags), C.uint(mode)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callread(fd int, _p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.read(C.int(fd), C.uintptr_t(_p0), C.size_t(_lenp0)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callreadlink(_p0 uintptr, _p1 uintptr, _lenp1 int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.readlink(C.uintptr_t(_p0), C.uintptr_t(_p1), C.size_t(_lenp1)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callrenameat(olddirfd int, _p0 uintptr, newdirfd int, _p1 uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.renameat(C.int(olddirfd), C.uintptr_t(_p0), C.int(newdirfd), C.uintptr_t(_p1)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetdomainname(_p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.setdomainname(C.uintptr_t(_p0), C.size_t(_lenp0)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsethostname(_p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.sethostname(C.uintptr_t(_p0), C.size_t(_lenp0)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetpgid(pid int, pgid int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.setpgid(C.int(pid), C.int(pgid)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetsid() (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.setsid())
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsettimeofday(tv uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.settimeofday(C.uintptr_t(tv)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetuid(uid int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.setuid(C.int(uid)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetgid(uid int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.setgid(C.int(uid)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetpriority(which int, who int, prio int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.setpriority(C.int(which), C.int(who), C.int(prio)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callstatx(dirfd int, _p0 uintptr, flags int, mask int, stat uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.statx(C.int(dirfd), C.uintptr_t(_p0), C.int(flags), C.int(mask), C.uintptr_t(stat)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsync() (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.sync())
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calltimes(tms uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.times(C.uintptr_t(tms)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callumask(mask int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.umask(C.int(mask)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calluname(buf uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.uname(C.uintptr_t(buf)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callunlink(_p0 uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.unlink(C.uintptr_t(_p0)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callunlinkat(dirfd int, _p0 uintptr, flags int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.unlinkat(C.int(dirfd), C.uintptr_t(_p0), C.int(flags)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callustat(dev int, ubuf uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.ustat(C.int(dev), C.uintptr_t(ubuf)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callwrite(fd int, _p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.write(C.int(fd), C.uintptr_t(_p0), C.size_t(_lenp0)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calldup2(oldfd int, newfd int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.dup2(C.int(oldfd), C.int(newfd)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callposix_fadvise64(fd int, offset int64, length int64, advice int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.posix_fadvise64(C.int(fd), C.longlong(offset), C.longlong(length), C.int(advice)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfchown(fd int, uid int, gid int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.fchown(C.int(fd), C.int(uid), C.int(gid)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfstat(fd int, stat uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.fstat(C.int(fd), C.uintptr_t(stat)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfstatat(dirfd int, _p0 uintptr, stat uintptr, flags int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.fstatat(C.int(dirfd), C.uintptr_t(_p0), C.uintptr_t(stat), C.int(flags)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callfstatfs(fd int, buf uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.fstatfs(C.int(fd), C.uintptr_t(buf)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callftruncate(fd int, length int64) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.ftruncate(C.int(fd), C.longlong(length)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetegid() (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getegid())
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgeteuid() (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.geteuid())
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetgid() (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getgid())
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetuid() (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getuid())
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calllchown(_p0 uintptr, uid int, gid int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.lchown(C.uintptr_t(_p0), C.int(uid), C.int(gid)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calllisten(s int, n int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.listen(C.int(s), C.int(n)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calllstat(_p0 uintptr, stat uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.lstat(C.uintptr_t(_p0), C.uintptr_t(stat)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callpause() (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.pause())
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callpread64(fd int, _p0 uintptr, _lenp0 int, offset int64) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.pread64(C.int(fd), C.uintptr_t(_p0), C.size_t(_lenp0), C.longlong(offset)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callpwrite64(fd int, _p0 uintptr, _lenp0 int, offset int64) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.pwrite64(C.int(fd), C.uintptr_t(_p0), C.size_t(_lenp0), C.longlong(offset)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callselect(nfd int, r uintptr, w uintptr, e uintptr, timeout uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.c_select(C.int(nfd), C.uintptr_t(r), C.uintptr_t(w), C.uintptr_t(e), C.uintptr_t(timeout)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callpselect(nfd int, r uintptr, w uintptr, e uintptr, timeout uintptr, sigmask uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.pselect(C.int(nfd), C.uintptr_t(r), C.uintptr_t(w), C.uintptr_t(e), C.uintptr_t(timeout), C.uintptr_t(sigmask)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetregid(rgid int, egid int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.setregid(C.int(rgid), C.int(egid)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetreuid(ruid int, euid int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.setreuid(C.int(ruid), C.int(euid)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callshutdown(fd int, how int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.shutdown(C.int(fd), C.int(how)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsplice(rfd int, roff uintptr, wfd int, woff uintptr, len int, flags int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.splice(C.int(rfd), C.uintptr_t(roff), C.int(wfd), C.uintptr_t(woff), C.int(len), C.int(flags)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callstat(_p0 uintptr, statptr uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.stat(C.uintptr_t(_p0), C.uintptr_t(statptr)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callstatfs(_p0 uintptr, buf uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.statfs(C.uintptr_t(_p0), C.uintptr_t(buf)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calltruncate(_p0 uintptr, length int64) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.truncate(C.uintptr_t(_p0), C.longlong(length)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callbind(s int, addr uintptr, addrlen uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.bind(C.int(s), C.uintptr_t(addr), C.uintptr_t(addrlen)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callconnect(s int, addr uintptr, addrlen uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.connect(C.int(s), C.uintptr_t(addr), C.uintptr_t(addrlen)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetgroups(n int, list uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getgroups(C.int(n), C.uintptr_t(list)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetgroups(n int, list uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.setgroups(C.int(n), C.uintptr_t(list)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetsockopt(s int, level int, name int, val uintptr, vallen uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getsockopt(C.int(s), C.int(level), C.int(name), C.uintptr_t(val), C.uintptr_t(vallen)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetsockopt(s int, level int, name int, val uintptr, vallen uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.setsockopt(C.int(s), C.int(level), C.int(name), C.uintptr_t(val), C.uintptr_t(vallen)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsocket(domain int, typ int, proto int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.socket(C.int(domain), C.int(typ), C.int(proto)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsocketpair(domain int, typ int, proto int, fd uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.socketpair(C.int(domain), C.int(typ), C.int(proto), C.uintptr_t(fd)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetpeername(fd int, rsa uintptr, addrlen uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getpeername(C.int(fd), C.uintptr_t(rsa), C.uintptr_t(addrlen)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetsockname(fd int, rsa uintptr, addrlen uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getsockname(C.int(fd), C.uintptr_t(rsa), C.uintptr_t(addrlen)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callrecvfrom(fd int, _p0 uintptr, _lenp0 int, flags int, from uintptr, fromlen uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.recvfrom(C.int(fd), C.uintptr_t(_p0), C.size_t(_lenp0), C.int(flags), C.uintptr_t(from), C.uintptr_t(fromlen)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsendto(s int, _p0 uintptr, _lenp0 int, flags int, to uintptr, addrlen uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.sendto(C.int(s), C.uintptr_t(_p0), C.size_t(_lenp0), C.int(flags), C.uintptr_t(to), C.uintptr_t(addrlen)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callnrecvmsg(s int, msg uintptr, flags int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.nrecvmsg(C.int(s), C.uintptr_t(msg), C.int(flags)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callnsendmsg(s int, msg uintptr, flags int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.nsendmsg(C.int(s), C.uintptr_t(msg), C.int(flags)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmunmap(addr uintptr, length uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.munmap(C.uintptr_t(addr), C.uintptr_t(length)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmadvise(_p0 uintptr, _lenp0 int, advice int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.madvise(C.uintptr_t(_p0), C.size_t(_lenp0), C.int(advice)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmprotect(_p0 uintptr, _lenp0 int, prot int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.mprotect(C.uintptr_t(_p0), C.size_t(_lenp0), C.int(prot)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmlock(_p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.mlock(C.uintptr_t(_p0), C.size_t(_lenp0)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmlockall(flags int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.mlockall(C.int(flags)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmsync(_p0 uintptr, _lenp0 int, flags int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.msync(C.uintptr_t(_p0), C.size_t(_lenp0), C.int(flags)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmunlock(_p0 uintptr, _lenp0 int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.munlock(C.uintptr_t(_p0), C.size_t(_lenp0)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmunlockall() (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.munlockall())
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callpipe(p uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.pipe(C.uintptr_t(p)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callpoll(fds uintptr, nfds int, timeout int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.poll(C.uintptr_t(fds), C.int(nfds), C.int(timeout)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgettimeofday(tv uintptr, tzp uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.gettimeofday(C.uintptr_t(tv), C.uintptr_t(tzp)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calltime(t uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.time(C.uintptr_t(t)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callutime(_p0 uintptr, buf uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.utime(C.uintptr_t(_p0), C.uintptr_t(buf)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetsystemcfg(label int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getsystemcfg(C.int(label)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callumount(_p0 uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.umount(C.uintptr_t(_p0)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callgetrlimit(resource int, rlim uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.getrlimit(C.int(resource), C.uintptr_t(rlim)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callsetrlimit(resource int, rlim uintptr) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.setrlimit(C.int(resource), C.uintptr_t(rlim)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func calllseek(fd int, offset int64, whence int) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.lseek(C.int(fd), C.longlong(offset), C.int(whence)))
+	e1 = syscall.GetErrno()
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func callmmap64(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (r1 uintptr, e1 Errno) {
+	r1 = uintptr(C.mmap64(C.uintptr_t(addr), C.uintptr_t(length), C.int(prot), C.int(flags), C.int(fd), C.longlong(offset)))
+	e1 = syscall.GetErrno()
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_386.1_13.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_386.1_13.go
new file mode 100644
index 000000000..e263fbdb8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_386.1_13.go
@@ -0,0 +1,41 @@
+// go run mksyscall.go -l32 -tags darwin,386,go1.13 syscall_darwin.1_13.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build darwin,386,go1.13
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func closedir(dir uintptr) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_closedir_trampoline), uintptr(dir), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_closedir_trampoline()
+
+//go:linkname libc_closedir libc_closedir
+//go:cgo_import_dynamic libc_closedir closedir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readdir_r(dir uintptr, entry *Dirent, result **Dirent) (res Errno) {
+	r0, _, _ := syscall_syscall(funcPC(libc_readdir_r_trampoline), uintptr(dir), uintptr(unsafe.Pointer(entry)), uintptr(unsafe.Pointer(result)))
+	res = Errno(r0)
+	return
+}
+
+func libc_readdir_r_trampoline()
+
+//go:linkname libc_readdir_r libc_readdir_r
+//go:cgo_import_dynamic libc_readdir_r readdir_r "/usr/lib/libSystem.B.dylib"
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_386.1_13.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_386.1_13.s
new file mode 100644
index 000000000..00da1ebfc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_386.1_13.s
@@ -0,0 +1,12 @@
+// go run mkasm_darwin.go 386
+// Code generated by the command above; DO NOT EDIT.
+
+// +build go1.13
+
+#include "textflag.h"
+TEXT ·libc_fdopendir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fdopendir(SB)
+TEXT ·libc_closedir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_closedir(SB)
+TEXT ·libc_readdir_r_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_readdir_r(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_386.go
new file mode 100644
index 000000000..bd13b3856
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_386.go
@@ -0,0 +1,2574 @@
+// go run mksyscall.go -l32 -tags darwin,386,go1.12 syscall_bsd.go syscall_darwin.go syscall_darwin_386.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build darwin,386,go1.12
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_getgroups_trampoline), uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getgroups_trampoline()
+
+//go:linkname libc_getgroups libc_getgroups
+//go:cgo_import_dynamic libc_getgroups getgroups "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setgroups_trampoline), uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setgroups_trampoline()
+
+//go:linkname libc_setgroups libc_setgroups
+//go:cgo_import_dynamic libc_setgroups setgroups "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_wait4_trampoline), uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_wait4_trampoline()
+
+//go:linkname libc_wait4 libc_wait4
+//go:cgo_import_dynamic libc_wait4 wait4 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_accept_trampoline), uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_accept_trampoline()
+
+//go:linkname libc_accept libc_accept
+//go:cgo_import_dynamic libc_accept accept "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_bind_trampoline), uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_bind_trampoline()
+
+//go:linkname libc_bind libc_bind
+//go:cgo_import_dynamic libc_bind bind "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_connect_trampoline), uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_connect_trampoline()
+
+//go:linkname libc_connect libc_connect
+//go:cgo_import_dynamic libc_connect connect "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_socket_trampoline), uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_socket_trampoline()
+
+//go:linkname libc_socket libc_socket
+//go:cgo_import_dynamic libc_socket socket "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := syscall_syscall6(funcPC(libc_getsockopt_trampoline), uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getsockopt_trampoline()
+
+//go:linkname libc_getsockopt libc_getsockopt
+//go:cgo_import_dynamic libc_getsockopt getsockopt "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := syscall_syscall6(funcPC(libc_setsockopt_trampoline), uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setsockopt_trampoline()
+
+//go:linkname libc_setsockopt libc_setsockopt
+//go:cgo_import_dynamic libc_setsockopt setsockopt "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_getpeername_trampoline), uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getpeername_trampoline()
+
+//go:linkname libc_getpeername libc_getpeername
+//go:cgo_import_dynamic libc_getpeername getpeername "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_getsockname_trampoline), uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getsockname_trampoline()
+
+//go:linkname libc_getsockname libc_getsockname
+//go:cgo_import_dynamic libc_getsockname getsockname "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_shutdown_trampoline), uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_shutdown_trampoline()
+
+//go:linkname libc_shutdown libc_shutdown
+//go:cgo_import_dynamic libc_shutdown shutdown "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := syscall_rawSyscall6(funcPC(libc_socketpair_trampoline), uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_socketpair_trampoline()
+
+//go:linkname libc_socketpair libc_socketpair
+//go:cgo_import_dynamic libc_socketpair socketpair "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_recvfrom_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_recvfrom_trampoline()
+
+//go:linkname libc_recvfrom libc_recvfrom
+//go:cgo_import_dynamic libc_recvfrom recvfrom "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_sendto_trampoline), uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sendto_trampoline()
+
+//go:linkname libc_sendto libc_sendto
+//go:cgo_import_dynamic libc_sendto sendto "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_recvmsg_trampoline), uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_recvmsg_trampoline()
+
+//go:linkname libc_recvmsg libc_recvmsg
+//go:cgo_import_dynamic libc_recvmsg recvmsg "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_sendmsg_trampoline), uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sendmsg_trampoline()
+
+//go:linkname libc_sendmsg libc_sendmsg
+//go:cgo_import_dynamic libc_sendmsg sendmsg "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_kevent_trampoline), uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_kevent_trampoline()
+
+//go:linkname libc_kevent libc_kevent
+//go:cgo_import_dynamic libc_kevent kevent "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_utimes_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_utimes_trampoline()
+
+//go:linkname libc_utimes libc_utimes
+//go:cgo_import_dynamic libc_utimes utimes "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_futimes_trampoline), uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_futimes_trampoline()
+
+//go:linkname libc_futimes libc_futimes
+//go:cgo_import_dynamic libc_futimes futimes "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_poll_trampoline), uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_poll_trampoline()
+
+//go:linkname libc_poll libc_poll
+//go:cgo_import_dynamic libc_poll poll "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_madvise_trampoline), uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_madvise_trampoline()
+
+//go:linkname libc_madvise libc_madvise
+//go:cgo_import_dynamic libc_madvise madvise "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mlock_trampoline), uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mlock_trampoline()
+
+//go:linkname libc_mlock libc_mlock
+//go:cgo_import_dynamic libc_mlock mlock "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_mlockall_trampoline), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mlockall_trampoline()
+
+//go:linkname libc_mlockall libc_mlockall
+//go:cgo_import_dynamic libc_mlockall mlockall "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mprotect_trampoline), uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mprotect_trampoline()
+
+//go:linkname libc_mprotect libc_mprotect
+//go:cgo_import_dynamic libc_mprotect mprotect "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_msync_trampoline), uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_msync_trampoline()
+
+//go:linkname libc_msync libc_msync
+//go:cgo_import_dynamic libc_msync msync "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_munlock_trampoline), uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_munlock_trampoline()
+
+//go:linkname libc_munlock libc_munlock
+//go:cgo_import_dynamic libc_munlock munlock "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_munlockall_trampoline), 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_munlockall_trampoline()
+
+//go:linkname libc_munlockall libc_munlockall
+//go:cgo_import_dynamic libc_munlockall munlockall "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe() (r int, w int, err error) {
+	r0, r1, e1 := syscall_rawSyscall(funcPC(libc_pipe_trampoline), 0, 0, 0)
+	r = int(r0)
+	w = int(r1)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_pipe_trampoline()
+
+//go:linkname libc_pipe libc_pipe
+//go:cgo_import_dynamic libc_pipe pipe "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getxattr(path string, attr string, dest *byte, size int, position uint32, options int) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_getxattr_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(unsafe.Pointer(dest)), uintptr(size), uintptr(position), uintptr(options))
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getxattr_trampoline()
+
+//go:linkname libc_getxattr libc_getxattr
+//go:cgo_import_dynamic libc_getxattr getxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fgetxattr(fd int, attr string, dest *byte, size int, position uint32, options int) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_fgetxattr_trampoline), uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(dest)), uintptr(size), uintptr(position), uintptr(options))
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fgetxattr_trampoline()
+
+//go:linkname libc_fgetxattr libc_fgetxattr
+//go:cgo_import_dynamic libc_fgetxattr fgetxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setxattr(path string, attr string, data *byte, size int, position uint32, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_setxattr_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(unsafe.Pointer(data)), uintptr(size), uintptr(position), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setxattr_trampoline()
+
+//go:linkname libc_setxattr libc_setxattr
+//go:cgo_import_dynamic libc_setxattr setxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fsetxattr(fd int, attr string, data *byte, size int, position uint32, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fsetxattr_trampoline), uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(data)), uintptr(size), uintptr(position), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fsetxattr_trampoline()
+
+//go:linkname libc_fsetxattr libc_fsetxattr
+//go:cgo_import_dynamic libc_fsetxattr fsetxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func removexattr(path string, attr string, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_removexattr_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_removexattr_trampoline()
+
+//go:linkname libc_removexattr libc_removexattr
+//go:cgo_import_dynamic libc_removexattr removexattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fremovexattr(fd int, attr string, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_fremovexattr_trampoline), uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fremovexattr_trampoline()
+
+//go:linkname libc_fremovexattr libc_fremovexattr
+//go:cgo_import_dynamic libc_fremovexattr fremovexattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func listxattr(path string, dest *byte, size int, options int) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_listxattr_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(dest)), uintptr(size), uintptr(options), 0, 0)
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_listxattr_trampoline()
+
+//go:linkname libc_listxattr libc_listxattr
+//go:cgo_import_dynamic libc_listxattr listxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func flistxattr(fd int, dest *byte, size int, options int) (sz int, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_flistxattr_trampoline), uintptr(fd), uintptr(unsafe.Pointer(dest)), uintptr(size), uintptr(options), 0, 0)
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_flistxattr_trampoline()
+
+//go:linkname libc_flistxattr libc_flistxattr
+//go:cgo_import_dynamic libc_flistxattr flistxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setattrlist(path *byte, list unsafe.Pointer, buf unsafe.Pointer, size uintptr, options int) (err error) {
+	_, _, e1 := syscall_syscall6(funcPC(libc_setattrlist_trampoline), uintptr(unsafe.Pointer(path)), uintptr(list), uintptr(buf), uintptr(size), uintptr(options), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setattrlist_trampoline()
+
+//go:linkname libc_setattrlist libc_setattrlist
+//go:cgo_import_dynamic libc_setattrlist setattrlist "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fcntl(fd int, cmd int, arg int) (val int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_fcntl_trampoline), uintptr(fd), uintptr(cmd), uintptr(arg))
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fcntl_trampoline()
+
+//go:linkname libc_fcntl libc_fcntl
+//go:cgo_import_dynamic libc_fcntl fcntl "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kill(pid int, signum int, posix int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_kill_trampoline), uintptr(pid), uintptr(signum), uintptr(posix))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_kill_trampoline()
+
+//go:linkname libc_kill libc_kill
+//go:cgo_import_dynamic libc_kill kill "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_ioctl_trampoline), uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_ioctl_trampoline()
+
+//go:linkname libc_ioctl libc_ioctl
+//go:cgo_import_dynamic libc_ioctl ioctl "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_sysctl_trampoline), uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sysctl_trampoline()
+
+//go:linkname libc_sysctl libc_sysctl
+//go:cgo_import_dynamic libc_sysctl sysctl "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(infd int, outfd int, offset int64, len *int64, hdtr unsafe.Pointer, flags int) (err error) {
+	_, _, e1 := syscall_syscall9(funcPC(libc_sendfile_trampoline), uintptr(infd), uintptr(outfd), uintptr(offset), uintptr(offset>>32), uintptr(unsafe.Pointer(len)), uintptr(hdtr), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sendfile_trampoline()
+
+//go:linkname libc_sendfile libc_sendfile
+//go:cgo_import_dynamic libc_sendfile sendfile "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_access_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_access_trampoline()
+
+//go:linkname libc_access libc_access
+//go:cgo_import_dynamic libc_access access "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_adjtime_trampoline), uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_adjtime_trampoline()
+
+//go:linkname libc_adjtime libc_adjtime
+//go:cgo_import_dynamic libc_adjtime adjtime "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chdir_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chdir_trampoline()
+
+//go:linkname libc_chdir libc_chdir
+//go:cgo_import_dynamic libc_chdir chdir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chflags_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chflags_trampoline()
+
+//go:linkname libc_chflags libc_chflags
+//go:cgo_import_dynamic libc_chflags chflags "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chmod_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chmod_trampoline()
+
+//go:linkname libc_chmod libc_chmod
+//go:cgo_import_dynamic libc_chmod chmod "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chown_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chown_trampoline()
+
+//go:linkname libc_chown libc_chown
+//go:cgo_import_dynamic libc_chown chown "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chroot_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chroot_trampoline()
+
+//go:linkname libc_chroot libc_chroot
+//go:cgo_import_dynamic libc_chroot chroot "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ClockGettime(clockid int32, time *Timespec) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_clock_gettime_trampoline), uintptr(clockid), uintptr(unsafe.Pointer(time)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_clock_gettime_trampoline()
+
+//go:linkname libc_clock_gettime libc_clock_gettime
+//go:cgo_import_dynamic libc_clock_gettime clock_gettime "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_close_trampoline), uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_close_trampoline()
+
+//go:linkname libc_close libc_close
+//go:cgo_import_dynamic libc_close close "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Clonefile(src string, dst string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(src)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(dst)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_clonefile_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_clonefile_trampoline()
+
+//go:linkname libc_clonefile libc_clonefile
+//go:cgo_import_dynamic libc_clonefile clonefile "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Clonefileat(srcDirfd int, src string, dstDirfd int, dst string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(src)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(dst)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_clonefileat_trampoline), uintptr(srcDirfd), uintptr(unsafe.Pointer(_p0)), uintptr(dstDirfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_clonefileat_trampoline()
+
+//go:linkname libc_clonefileat libc_clonefileat
+//go:cgo_import_dynamic libc_clonefileat clonefileat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_dup_trampoline), uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_dup_trampoline()
+
+//go:linkname libc_dup libc_dup
+//go:cgo_import_dynamic libc_dup dup "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_dup2_trampoline), uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_dup2_trampoline()
+
+//go:linkname libc_dup2 libc_dup2
+//go:cgo_import_dynamic libc_dup2 dup2 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exchangedata(path1 string, path2 string, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path1)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(path2)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_exchangedata_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_exchangedata_trampoline()
+
+//go:linkname libc_exchangedata libc_exchangedata
+//go:cgo_import_dynamic libc_exchangedata exchangedata "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	syscall_syscall(funcPC(libc_exit_trampoline), uintptr(code), 0, 0)
+	return
+}
+
+func libc_exit_trampoline()
+
+//go:linkname libc_exit libc_exit
+//go:cgo_import_dynamic libc_exit exit "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_faccessat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_faccessat_trampoline()
+
+//go:linkname libc_faccessat libc_faccessat
+//go:cgo_import_dynamic libc_faccessat faccessat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fchdir_trampoline), uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchdir_trampoline()
+
+//go:linkname libc_fchdir libc_fchdir
+//go:cgo_import_dynamic libc_fchdir fchdir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fchflags_trampoline), uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchflags_trampoline()
+
+//go:linkname libc_fchflags libc_fchflags
+//go:cgo_import_dynamic libc_fchflags fchflags "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fchmod_trampoline), uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchmod_trampoline()
+
+//go:linkname libc_fchmod libc_fchmod
+//go:cgo_import_dynamic libc_fchmod fchmod "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fchmodat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchmodat_trampoline()
+
+//go:linkname libc_fchmodat libc_fchmodat
+//go:cgo_import_dynamic libc_fchmodat fchmodat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fchown_trampoline), uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchown_trampoline()
+
+//go:linkname libc_fchown libc_fchown
+//go:cgo_import_dynamic libc_fchown fchown "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fchownat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchownat_trampoline()
+
+//go:linkname libc_fchownat libc_fchownat
+//go:cgo_import_dynamic libc_fchownat fchownat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fclonefileat(srcDirfd int, dstDirfd int, dst string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(dst)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fclonefileat_trampoline), uintptr(srcDirfd), uintptr(dstDirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fclonefileat_trampoline()
+
+//go:linkname libc_fclonefileat libc_fclonefileat
+//go:cgo_import_dynamic libc_fclonefileat fclonefileat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_flock_trampoline), uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_flock_trampoline()
+
+//go:linkname libc_flock libc_flock
+//go:cgo_import_dynamic libc_flock flock "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_fpathconf_trampoline), uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fpathconf_trampoline()
+
+//go:linkname libc_fpathconf libc_fpathconf
+//go:cgo_import_dynamic libc_fpathconf fpathconf "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fsync_trampoline), uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fsync_trampoline()
+
+//go:linkname libc_fsync libc_fsync
+//go:cgo_import_dynamic libc_fsync fsync "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_ftruncate_trampoline), uintptr(fd), uintptr(length), uintptr(length>>32))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_ftruncate_trampoline()
+
+//go:linkname libc_ftruncate libc_ftruncate
+//go:cgo_import_dynamic libc_ftruncate ftruncate "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_getcwd_trampoline), uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getcwd_trampoline()
+
+//go:linkname libc_getcwd libc_getcwd
+//go:cgo_import_dynamic libc_getcwd getcwd "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdtablesize() (size int) {
+	r0, _, _ := syscall_syscall(funcPC(libc_getdtablesize_trampoline), 0, 0, 0)
+	size = int(r0)
+	return
+}
+
+func libc_getdtablesize_trampoline()
+
+//go:linkname libc_getdtablesize libc_getdtablesize
+//go:cgo_import_dynamic libc_getdtablesize getdtablesize "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getegid_trampoline), 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+func libc_getegid_trampoline()
+
+//go:linkname libc_getegid libc_getegid
+//go:cgo_import_dynamic libc_getegid getegid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_geteuid_trampoline), 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+func libc_geteuid_trampoline()
+
+//go:linkname libc_geteuid libc_geteuid
+//go:cgo_import_dynamic libc_geteuid geteuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getgid_trampoline), 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+func libc_getgid_trampoline()
+
+//go:linkname libc_getgid libc_getgid
+//go:cgo_import_dynamic libc_getgid getgid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_getpgid_trampoline), uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getpgid_trampoline()
+
+//go:linkname libc_getpgid libc_getpgid
+//go:cgo_import_dynamic libc_getpgid getpgid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getpgrp_trampoline), 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+func libc_getpgrp_trampoline()
+
+//go:linkname libc_getpgrp libc_getpgrp
+//go:cgo_import_dynamic libc_getpgrp getpgrp "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getpid_trampoline), 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+func libc_getpid_trampoline()
+
+//go:linkname libc_getpid libc_getpid
+//go:cgo_import_dynamic libc_getpid getpid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getppid_trampoline), 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+func libc_getppid_trampoline()
+
+//go:linkname libc_getppid libc_getppid
+//go:cgo_import_dynamic libc_getppid getppid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_getpriority_trampoline), uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getpriority_trampoline()
+
+//go:linkname libc_getpriority libc_getpriority
+//go:cgo_import_dynamic libc_getpriority getpriority "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_getrlimit_trampoline), uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getrlimit_trampoline()
+
+//go:linkname libc_getrlimit libc_getrlimit
+//go:cgo_import_dynamic libc_getrlimit getrlimit "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_getrusage_trampoline), uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getrusage_trampoline()
+
+//go:linkname libc_getrusage libc_getrusage
+//go:cgo_import_dynamic libc_getrusage getrusage "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_getsid_trampoline), uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getsid_trampoline()
+
+//go:linkname libc_getsid libc_getsid
+//go:cgo_import_dynamic libc_getsid getsid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tp *Timeval) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_gettimeofday_trampoline), uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_gettimeofday_trampoline()
+
+//go:linkname libc_gettimeofday libc_gettimeofday
+//go:cgo_import_dynamic libc_gettimeofday gettimeofday "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getuid_trampoline), 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+func libc_getuid_trampoline()
+
+//go:linkname libc_getuid libc_getuid
+//go:cgo_import_dynamic libc_getuid getuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_issetugid_trampoline), 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+func libc_issetugid_trampoline()
+
+//go:linkname libc_issetugid libc_issetugid
+//go:cgo_import_dynamic libc_issetugid issetugid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_kqueue_trampoline), 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_kqueue_trampoline()
+
+//go:linkname libc_kqueue libc_kqueue
+//go:cgo_import_dynamic libc_kqueue kqueue "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_lchown_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_lchown_trampoline()
+
+//go:linkname libc_lchown libc_lchown
+//go:cgo_import_dynamic libc_lchown lchown "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_link_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_link_trampoline()
+
+//go:linkname libc_link libc_link
+//go:cgo_import_dynamic libc_link link "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_linkat_trampoline), uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_linkat_trampoline()
+
+//go:linkname libc_linkat libc_linkat
+//go:cgo_import_dynamic libc_linkat linkat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_listen_trampoline), uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_listen_trampoline()
+
+//go:linkname libc_listen libc_listen
+//go:cgo_import_dynamic libc_listen listen "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mkdir_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mkdir_trampoline()
+
+//go:linkname libc_mkdir libc_mkdir
+//go:cgo_import_dynamic libc_mkdir mkdir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mkdirat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mkdirat_trampoline()
+
+//go:linkname libc_mkdirat libc_mkdirat
+//go:cgo_import_dynamic libc_mkdirat mkdirat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mkfifo_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mkfifo_trampoline()
+
+//go:linkname libc_mkfifo libc_mkfifo
+//go:cgo_import_dynamic libc_mkfifo mkfifo "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mknod_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mknod_trampoline()
+
+//go:linkname libc_mknod libc_mknod
+//go:cgo_import_dynamic libc_mknod mknod "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_open_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_open_trampoline()
+
+//go:linkname libc_open libc_open
+//go:cgo_import_dynamic libc_open open "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_openat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_openat_trampoline()
+
+//go:linkname libc_openat libc_openat
+//go:cgo_import_dynamic libc_openat openat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_pathconf_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_pathconf_trampoline()
+
+//go:linkname libc_pathconf libc_pathconf
+//go:cgo_import_dynamic libc_pathconf pathconf "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_pread_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), uintptr(offset>>32), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_pread_trampoline()
+
+//go:linkname libc_pread libc_pread
+//go:cgo_import_dynamic libc_pread pread "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_pwrite_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), uintptr(offset>>32), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_pwrite_trampoline()
+
+//go:linkname libc_pwrite libc_pwrite
+//go:cgo_import_dynamic libc_pwrite pwrite "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_read_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_read_trampoline()
+
+//go:linkname libc_read libc_read
+//go:cgo_import_dynamic libc_read read "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_readlink_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_readlink_trampoline()
+
+//go:linkname libc_readlink libc_readlink
+//go:cgo_import_dynamic libc_readlink readlink "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_readlinkat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_readlinkat_trampoline()
+
+//go:linkname libc_readlinkat libc_readlinkat
+//go:cgo_import_dynamic libc_readlinkat readlinkat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_rename_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_rename_trampoline()
+
+//go:linkname libc_rename libc_rename
+//go:cgo_import_dynamic libc_rename rename "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_renameat_trampoline), uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_renameat_trampoline()
+
+//go:linkname libc_renameat libc_renameat
+//go:cgo_import_dynamic libc_renameat renameat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_revoke_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_revoke_trampoline()
+
+//go:linkname libc_revoke libc_revoke
+//go:cgo_import_dynamic libc_revoke revoke "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_rmdir_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_rmdir_trampoline()
+
+//go:linkname libc_rmdir libc_rmdir
+//go:cgo_import_dynamic libc_rmdir rmdir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, r1, e1 := syscall_syscall6(funcPC(libc_lseek_trampoline), uintptr(fd), uintptr(offset), uintptr(offset>>32), uintptr(whence), 0, 0)
+	newoffset = int64(int64(r1)<<32 | int64(r0))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_lseek_trampoline()
+
+//go:linkname libc_lseek libc_lseek
+//go:cgo_import_dynamic libc_lseek lseek "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_select_trampoline), uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_select_trampoline()
+
+//go:linkname libc_select libc_select
+//go:cgo_import_dynamic libc_select select "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_setegid_trampoline), uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setegid_trampoline()
+
+//go:linkname libc_setegid libc_setegid
+//go:cgo_import_dynamic libc_setegid setegid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_seteuid_trampoline), uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_seteuid_trampoline()
+
+//go:linkname libc_seteuid libc_seteuid
+//go:cgo_import_dynamic libc_seteuid seteuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setgid_trampoline), uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setgid_trampoline()
+
+//go:linkname libc_setgid libc_setgid
+//go:cgo_import_dynamic libc_setgid setgid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setlogin(name string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_setlogin_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setlogin_trampoline()
+
+//go:linkname libc_setlogin libc_setlogin
+//go:cgo_import_dynamic libc_setlogin setlogin "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setpgid_trampoline), uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setpgid_trampoline()
+
+//go:linkname libc_setpgid libc_setpgid
+//go:cgo_import_dynamic libc_setpgid setpgid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_setpriority_trampoline), uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setpriority_trampoline()
+
+//go:linkname libc_setpriority libc_setpriority
+//go:cgo_import_dynamic libc_setpriority setpriority "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setprivexec(flag int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_setprivexec_trampoline), uintptr(flag), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setprivexec_trampoline()
+
+//go:linkname libc_setprivexec libc_setprivexec
+//go:cgo_import_dynamic libc_setprivexec setprivexec "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setregid_trampoline), uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setregid_trampoline()
+
+//go:linkname libc_setregid libc_setregid
+//go:cgo_import_dynamic libc_setregid setregid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setreuid_trampoline), uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setreuid_trampoline()
+
+//go:linkname libc_setreuid libc_setreuid
+//go:cgo_import_dynamic libc_setreuid setreuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setrlimit_trampoline), uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setrlimit_trampoline()
+
+//go:linkname libc_setrlimit libc_setrlimit
+//go:cgo_import_dynamic libc_setrlimit setrlimit "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_setsid_trampoline), 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setsid_trampoline()
+
+//go:linkname libc_setsid libc_setsid
+//go:cgo_import_dynamic libc_setsid setsid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_settimeofday_trampoline), uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_settimeofday_trampoline()
+
+//go:linkname libc_settimeofday libc_settimeofday
+//go:cgo_import_dynamic libc_settimeofday settimeofday "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setuid_trampoline), uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setuid_trampoline()
+
+//go:linkname libc_setuid libc_setuid
+//go:cgo_import_dynamic libc_setuid setuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_symlink_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_symlink_trampoline()
+
+//go:linkname libc_symlink libc_symlink
+//go:cgo_import_dynamic libc_symlink symlink "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_symlinkat_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_symlinkat_trampoline()
+
+//go:linkname libc_symlinkat libc_symlinkat
+//go:cgo_import_dynamic libc_symlinkat symlinkat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_sync_trampoline), 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sync_trampoline()
+
+//go:linkname libc_sync libc_sync
+//go:cgo_import_dynamic libc_sync sync "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_truncate_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(length), uintptr(length>>32))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_truncate_trampoline()
+
+//go:linkname libc_truncate libc_truncate
+//go:cgo_import_dynamic libc_truncate truncate "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := syscall_syscall(funcPC(libc_umask_trampoline), uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+func libc_umask_trampoline()
+
+//go:linkname libc_umask libc_umask
+//go:cgo_import_dynamic libc_umask umask "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Undelete(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_undelete_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_undelete_trampoline()
+
+//go:linkname libc_undelete libc_undelete
+//go:cgo_import_dynamic libc_undelete undelete "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_unlink_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_unlink_trampoline()
+
+//go:linkname libc_unlink libc_unlink
+//go:cgo_import_dynamic libc_unlink unlink "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_unlinkat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_unlinkat_trampoline()
+
+//go:linkname libc_unlinkat libc_unlinkat
+//go:cgo_import_dynamic libc_unlinkat unlinkat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_unmount_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_unmount_trampoline()
+
+//go:linkname libc_unmount libc_unmount
+//go:cgo_import_dynamic libc_unmount unmount "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_write_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_write_trampoline()
+
+//go:linkname libc_write libc_write
+//go:cgo_import_dynamic libc_write write "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := syscall_syscall9(funcPC(libc_mmap_trampoline), uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), uintptr(pos), uintptr(pos>>32), 0, 0)
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mmap_trampoline()
+
+//go:linkname libc_mmap libc_mmap
+//go:cgo_import_dynamic libc_mmap mmap "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_munmap_trampoline), uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_munmap_trampoline()
+
+//go:linkname libc_munmap libc_munmap
+//go:cgo_import_dynamic libc_munmap munmap "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_read_trampoline), uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_write_trampoline), uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ptrace(request int, pid int, addr uintptr, data uintptr) (err error) {
+	_, _, e1 := syscall_syscall6(funcPC(libc_ptrace_trampoline), uintptr(request), uintptr(pid), uintptr(addr), uintptr(data), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_ptrace_trampoline()
+
+//go:linkname libc_ptrace libc_ptrace
+//go:cgo_import_dynamic libc_ptrace ptrace "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fstat64_trampoline), uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fstat64_trampoline()
+
+//go:linkname libc_fstat64 libc_fstat64
+//go:cgo_import_dynamic libc_fstat64 fstat64 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fstatat64_trampoline), uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fstatat64_trampoline()
+
+//go:linkname libc_fstatat64 libc_fstatat64
+//go:cgo_import_dynamic libc_fstatat64 fstatat64 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, stat *Statfs_t) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fstatfs64_trampoline), uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fstatfs64_trampoline()
+
+//go:linkname libc_fstatfs64 libc_fstatfs64
+//go:cgo_import_dynamic libc_fstatfs64 fstatfs64 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getfsstat(buf unsafe.Pointer, size uintptr, flags int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_getfsstat64_trampoline), uintptr(buf), uintptr(size), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getfsstat64_trampoline()
+
+//go:linkname libc_getfsstat64 libc_getfsstat64
+//go:cgo_import_dynamic libc_getfsstat64 getfsstat64 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_lstat64_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_lstat64_trampoline()
+
+//go:linkname libc_lstat64 libc_lstat64
+//go:cgo_import_dynamic libc_lstat64 lstat64 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_stat64_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_stat64_trampoline()
+
+//go:linkname libc_stat64 libc_stat64
+//go:cgo_import_dynamic libc_stat64 stat64 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, stat *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_statfs64_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_statfs64_trampoline()
+
+//go:linkname libc_statfs64 libc_statfs64
+//go:cgo_import_dynamic libc_statfs64 statfs64 "/usr/lib/libSystem.B.dylib"
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_386.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_386.s
new file mode 100644
index 000000000..d5fb53fd1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_386.s
@@ -0,0 +1,290 @@
+// go run mkasm_darwin.go 386
+// Code generated by the command above; DO NOT EDIT.
+
+// +build go1.12
+
+#include "textflag.h"
+TEXT ·libc_getgroups_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getgroups(SB)
+TEXT ·libc_setgroups_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setgroups(SB)
+TEXT ·libc_wait4_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_wait4(SB)
+TEXT ·libc_accept_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_accept(SB)
+TEXT ·libc_bind_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_bind(SB)
+TEXT ·libc_connect_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_connect(SB)
+TEXT ·libc_socket_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_socket(SB)
+TEXT ·libc_getsockopt_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getsockopt(SB)
+TEXT ·libc_setsockopt_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setsockopt(SB)
+TEXT ·libc_getpeername_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpeername(SB)
+TEXT ·libc_getsockname_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getsockname(SB)
+TEXT ·libc_shutdown_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_shutdown(SB)
+TEXT ·libc_socketpair_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_socketpair(SB)
+TEXT ·libc_recvfrom_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_recvfrom(SB)
+TEXT ·libc_sendto_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sendto(SB)
+TEXT ·libc_recvmsg_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_recvmsg(SB)
+TEXT ·libc_sendmsg_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sendmsg(SB)
+TEXT ·libc_kevent_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_kevent(SB)
+TEXT ·libc_utimes_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_utimes(SB)
+TEXT ·libc_futimes_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_futimes(SB)
+TEXT ·libc_poll_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_poll(SB)
+TEXT ·libc_madvise_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_madvise(SB)
+TEXT ·libc_mlock_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mlock(SB)
+TEXT ·libc_mlockall_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mlockall(SB)
+TEXT ·libc_mprotect_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mprotect(SB)
+TEXT ·libc_msync_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_msync(SB)
+TEXT ·libc_munlock_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_munlock(SB)
+TEXT ·libc_munlockall_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_munlockall(SB)
+TEXT ·libc_pipe_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_pipe(SB)
+TEXT ·libc_getxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getxattr(SB)
+TEXT ·libc_fgetxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fgetxattr(SB)
+TEXT ·libc_setxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setxattr(SB)
+TEXT ·libc_fsetxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fsetxattr(SB)
+TEXT ·libc_removexattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_removexattr(SB)
+TEXT ·libc_fremovexattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fremovexattr(SB)
+TEXT ·libc_listxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_listxattr(SB)
+TEXT ·libc_flistxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_flistxattr(SB)
+TEXT ·libc_setattrlist_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setattrlist(SB)
+TEXT ·libc_fcntl_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fcntl(SB)
+TEXT ·libc_kill_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_kill(SB)
+TEXT ·libc_ioctl_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_ioctl(SB)
+TEXT ·libc_sysctl_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sysctl(SB)
+TEXT ·libc_sendfile_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sendfile(SB)
+TEXT ·libc_access_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_access(SB)
+TEXT ·libc_adjtime_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_adjtime(SB)
+TEXT ·libc_chdir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chdir(SB)
+TEXT ·libc_chflags_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chflags(SB)
+TEXT ·libc_chmod_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chmod(SB)
+TEXT ·libc_chown_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chown(SB)
+TEXT ·libc_chroot_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chroot(SB)
+TEXT ·libc_clock_gettime_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_clock_gettime(SB)
+TEXT ·libc_close_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_close(SB)
+TEXT ·libc_clonefile_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_clonefile(SB)
+TEXT ·libc_clonefileat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_clonefileat(SB)
+TEXT ·libc_dup_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_dup(SB)
+TEXT ·libc_dup2_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_dup2(SB)
+TEXT ·libc_exchangedata_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_exchangedata(SB)
+TEXT ·libc_exit_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_exit(SB)
+TEXT ·libc_faccessat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_faccessat(SB)
+TEXT ·libc_fchdir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchdir(SB)
+TEXT ·libc_fchflags_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchflags(SB)
+TEXT ·libc_fchmod_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchmod(SB)
+TEXT ·libc_fchmodat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchmodat(SB)
+TEXT ·libc_fchown_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchown(SB)
+TEXT ·libc_fchownat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchownat(SB)
+TEXT ·libc_fclonefileat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fclonefileat(SB)
+TEXT ·libc_flock_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_flock(SB)
+TEXT ·libc_fpathconf_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fpathconf(SB)
+TEXT ·libc_fsync_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fsync(SB)
+TEXT ·libc_ftruncate_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_ftruncate(SB)
+TEXT ·libc_getcwd_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getcwd(SB)
+TEXT ·libc_getdtablesize_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getdtablesize(SB)
+TEXT ·libc_getegid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getegid(SB)
+TEXT ·libc_geteuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_geteuid(SB)
+TEXT ·libc_getgid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getgid(SB)
+TEXT ·libc_getpgid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpgid(SB)
+TEXT ·libc_getpgrp_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpgrp(SB)
+TEXT ·libc_getpid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpid(SB)
+TEXT ·libc_getppid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getppid(SB)
+TEXT ·libc_getpriority_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpriority(SB)
+TEXT ·libc_getrlimit_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getrlimit(SB)
+TEXT ·libc_getrusage_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getrusage(SB)
+TEXT ·libc_getsid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getsid(SB)
+TEXT ·libc_gettimeofday_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_gettimeofday(SB)
+TEXT ·libc_getuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getuid(SB)
+TEXT ·libc_issetugid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_issetugid(SB)
+TEXT ·libc_kqueue_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_kqueue(SB)
+TEXT ·libc_lchown_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_lchown(SB)
+TEXT ·libc_link_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_link(SB)
+TEXT ·libc_linkat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_linkat(SB)
+TEXT ·libc_listen_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_listen(SB)
+TEXT ·libc_mkdir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mkdir(SB)
+TEXT ·libc_mkdirat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mkdirat(SB)
+TEXT ·libc_mkfifo_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mkfifo(SB)
+TEXT ·libc_mknod_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mknod(SB)
+TEXT ·libc_open_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_open(SB)
+TEXT ·libc_openat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_openat(SB)
+TEXT ·libc_pathconf_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_pathconf(SB)
+TEXT ·libc_pread_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_pread(SB)
+TEXT ·libc_pwrite_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_pwrite(SB)
+TEXT ·libc_read_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_read(SB)
+TEXT ·libc_readlink_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_readlink(SB)
+TEXT ·libc_readlinkat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_readlinkat(SB)
+TEXT ·libc_rename_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_rename(SB)
+TEXT ·libc_renameat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_renameat(SB)
+TEXT ·libc_revoke_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_revoke(SB)
+TEXT ·libc_rmdir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_rmdir(SB)
+TEXT ·libc_lseek_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_lseek(SB)
+TEXT ·libc_select_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_select(SB)
+TEXT ·libc_setegid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setegid(SB)
+TEXT ·libc_seteuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_seteuid(SB)
+TEXT ·libc_setgid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setgid(SB)
+TEXT ·libc_setlogin_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setlogin(SB)
+TEXT ·libc_setpgid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setpgid(SB)
+TEXT ·libc_setpriority_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setpriority(SB)
+TEXT ·libc_setprivexec_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setprivexec(SB)
+TEXT ·libc_setregid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setregid(SB)
+TEXT ·libc_setreuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setreuid(SB)
+TEXT ·libc_setrlimit_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setrlimit(SB)
+TEXT ·libc_setsid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setsid(SB)
+TEXT ·libc_settimeofday_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_settimeofday(SB)
+TEXT ·libc_setuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setuid(SB)
+TEXT ·libc_symlink_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_symlink(SB)
+TEXT ·libc_symlinkat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_symlinkat(SB)
+TEXT ·libc_sync_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sync(SB)
+TEXT ·libc_truncate_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_truncate(SB)
+TEXT ·libc_umask_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_umask(SB)
+TEXT ·libc_undelete_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_undelete(SB)
+TEXT ·libc_unlink_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_unlink(SB)
+TEXT ·libc_unlinkat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_unlinkat(SB)
+TEXT ·libc_unmount_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_unmount(SB)
+TEXT ·libc_write_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_write(SB)
+TEXT ·libc_mmap_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mmap(SB)
+TEXT ·libc_munmap_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_munmap(SB)
+TEXT ·libc_ptrace_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_ptrace(SB)
+TEXT ·libc_fstat64_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fstat64(SB)
+TEXT ·libc_fstatat64_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fstatat64(SB)
+TEXT ·libc_fstatfs64_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fstatfs64(SB)
+TEXT ·libc_getfsstat64_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getfsstat64(SB)
+TEXT ·libc_lstat64_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_lstat64(SB)
+TEXT ·libc_stat64_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_stat64(SB)
+TEXT ·libc_statfs64_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_statfs64(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_amd64.1_13.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_amd64.1_13.go
new file mode 100644
index 000000000..314042a9d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_amd64.1_13.go
@@ -0,0 +1,41 @@
+// go run mksyscall.go -tags darwin,amd64,go1.13 syscall_darwin.1_13.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build darwin,amd64,go1.13
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func closedir(dir uintptr) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_closedir_trampoline), uintptr(dir), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_closedir_trampoline()
+
+//go:linkname libc_closedir libc_closedir
+//go:cgo_import_dynamic libc_closedir closedir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readdir_r(dir uintptr, entry *Dirent, result **Dirent) (res Errno) {
+	r0, _, _ := syscall_syscall(funcPC(libc_readdir_r_trampoline), uintptr(dir), uintptr(unsafe.Pointer(entry)), uintptr(unsafe.Pointer(result)))
+	res = Errno(r0)
+	return
+}
+
+func libc_readdir_r_trampoline()
+
+//go:linkname libc_readdir_r libc_readdir_r
+//go:cgo_import_dynamic libc_readdir_r readdir_r "/usr/lib/libSystem.B.dylib"
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_amd64.1_13.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_amd64.1_13.s
new file mode 100644
index 000000000..d671e8311
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_amd64.1_13.s
@@ -0,0 +1,12 @@
+// go run mkasm_darwin.go amd64
+// Code generated by the command above; DO NOT EDIT.
+
+// +build go1.13
+
+#include "textflag.h"
+TEXT ·libc_fdopendir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fdopendir(SB)
+TEXT ·libc_closedir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_closedir(SB)
+TEXT ·libc_readdir_r_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_readdir_r(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_amd64.go
new file mode 100644
index 000000000..d81696f9e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_amd64.go
@@ -0,0 +1,2574 @@
+// go run mksyscall.go -tags darwin,amd64,go1.12 syscall_bsd.go syscall_darwin.go syscall_darwin_amd64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build darwin,amd64,go1.12
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_getgroups_trampoline), uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getgroups_trampoline()
+
+//go:linkname libc_getgroups libc_getgroups
+//go:cgo_import_dynamic libc_getgroups getgroups "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setgroups_trampoline), uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setgroups_trampoline()
+
+//go:linkname libc_setgroups libc_setgroups
+//go:cgo_import_dynamic libc_setgroups setgroups "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_wait4_trampoline), uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_wait4_trampoline()
+
+//go:linkname libc_wait4 libc_wait4
+//go:cgo_import_dynamic libc_wait4 wait4 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_accept_trampoline), uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_accept_trampoline()
+
+//go:linkname libc_accept libc_accept
+//go:cgo_import_dynamic libc_accept accept "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_bind_trampoline), uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_bind_trampoline()
+
+//go:linkname libc_bind libc_bind
+//go:cgo_import_dynamic libc_bind bind "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_connect_trampoline), uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_connect_trampoline()
+
+//go:linkname libc_connect libc_connect
+//go:cgo_import_dynamic libc_connect connect "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_socket_trampoline), uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_socket_trampoline()
+
+//go:linkname libc_socket libc_socket
+//go:cgo_import_dynamic libc_socket socket "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := syscall_syscall6(funcPC(libc_getsockopt_trampoline), uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getsockopt_trampoline()
+
+//go:linkname libc_getsockopt libc_getsockopt
+//go:cgo_import_dynamic libc_getsockopt getsockopt "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := syscall_syscall6(funcPC(libc_setsockopt_trampoline), uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setsockopt_trampoline()
+
+//go:linkname libc_setsockopt libc_setsockopt
+//go:cgo_import_dynamic libc_setsockopt setsockopt "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_getpeername_trampoline), uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getpeername_trampoline()
+
+//go:linkname libc_getpeername libc_getpeername
+//go:cgo_import_dynamic libc_getpeername getpeername "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_getsockname_trampoline), uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getsockname_trampoline()
+
+//go:linkname libc_getsockname libc_getsockname
+//go:cgo_import_dynamic libc_getsockname getsockname "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_shutdown_trampoline), uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_shutdown_trampoline()
+
+//go:linkname libc_shutdown libc_shutdown
+//go:cgo_import_dynamic libc_shutdown shutdown "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := syscall_rawSyscall6(funcPC(libc_socketpair_trampoline), uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_socketpair_trampoline()
+
+//go:linkname libc_socketpair libc_socketpair
+//go:cgo_import_dynamic libc_socketpair socketpair "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_recvfrom_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_recvfrom_trampoline()
+
+//go:linkname libc_recvfrom libc_recvfrom
+//go:cgo_import_dynamic libc_recvfrom recvfrom "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_sendto_trampoline), uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sendto_trampoline()
+
+//go:linkname libc_sendto libc_sendto
+//go:cgo_import_dynamic libc_sendto sendto "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_recvmsg_trampoline), uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_recvmsg_trampoline()
+
+//go:linkname libc_recvmsg libc_recvmsg
+//go:cgo_import_dynamic libc_recvmsg recvmsg "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_sendmsg_trampoline), uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sendmsg_trampoline()
+
+//go:linkname libc_sendmsg libc_sendmsg
+//go:cgo_import_dynamic libc_sendmsg sendmsg "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_kevent_trampoline), uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_kevent_trampoline()
+
+//go:linkname libc_kevent libc_kevent
+//go:cgo_import_dynamic libc_kevent kevent "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_utimes_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_utimes_trampoline()
+
+//go:linkname libc_utimes libc_utimes
+//go:cgo_import_dynamic libc_utimes utimes "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_futimes_trampoline), uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_futimes_trampoline()
+
+//go:linkname libc_futimes libc_futimes
+//go:cgo_import_dynamic libc_futimes futimes "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_poll_trampoline), uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_poll_trampoline()
+
+//go:linkname libc_poll libc_poll
+//go:cgo_import_dynamic libc_poll poll "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_madvise_trampoline), uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_madvise_trampoline()
+
+//go:linkname libc_madvise libc_madvise
+//go:cgo_import_dynamic libc_madvise madvise "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mlock_trampoline), uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mlock_trampoline()
+
+//go:linkname libc_mlock libc_mlock
+//go:cgo_import_dynamic libc_mlock mlock "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_mlockall_trampoline), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mlockall_trampoline()
+
+//go:linkname libc_mlockall libc_mlockall
+//go:cgo_import_dynamic libc_mlockall mlockall "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mprotect_trampoline), uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mprotect_trampoline()
+
+//go:linkname libc_mprotect libc_mprotect
+//go:cgo_import_dynamic libc_mprotect mprotect "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_msync_trampoline), uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_msync_trampoline()
+
+//go:linkname libc_msync libc_msync
+//go:cgo_import_dynamic libc_msync msync "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_munlock_trampoline), uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_munlock_trampoline()
+
+//go:linkname libc_munlock libc_munlock
+//go:cgo_import_dynamic libc_munlock munlock "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_munlockall_trampoline), 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_munlockall_trampoline()
+
+//go:linkname libc_munlockall libc_munlockall
+//go:cgo_import_dynamic libc_munlockall munlockall "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe() (r int, w int, err error) {
+	r0, r1, e1 := syscall_rawSyscall(funcPC(libc_pipe_trampoline), 0, 0, 0)
+	r = int(r0)
+	w = int(r1)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_pipe_trampoline()
+
+//go:linkname libc_pipe libc_pipe
+//go:cgo_import_dynamic libc_pipe pipe "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getxattr(path string, attr string, dest *byte, size int, position uint32, options int) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_getxattr_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(unsafe.Pointer(dest)), uintptr(size), uintptr(position), uintptr(options))
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getxattr_trampoline()
+
+//go:linkname libc_getxattr libc_getxattr
+//go:cgo_import_dynamic libc_getxattr getxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fgetxattr(fd int, attr string, dest *byte, size int, position uint32, options int) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_fgetxattr_trampoline), uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(dest)), uintptr(size), uintptr(position), uintptr(options))
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fgetxattr_trampoline()
+
+//go:linkname libc_fgetxattr libc_fgetxattr
+//go:cgo_import_dynamic libc_fgetxattr fgetxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setxattr(path string, attr string, data *byte, size int, position uint32, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_setxattr_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(unsafe.Pointer(data)), uintptr(size), uintptr(position), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setxattr_trampoline()
+
+//go:linkname libc_setxattr libc_setxattr
+//go:cgo_import_dynamic libc_setxattr setxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fsetxattr(fd int, attr string, data *byte, size int, position uint32, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fsetxattr_trampoline), uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(data)), uintptr(size), uintptr(position), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fsetxattr_trampoline()
+
+//go:linkname libc_fsetxattr libc_fsetxattr
+//go:cgo_import_dynamic libc_fsetxattr fsetxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func removexattr(path string, attr string, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_removexattr_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_removexattr_trampoline()
+
+//go:linkname libc_removexattr libc_removexattr
+//go:cgo_import_dynamic libc_removexattr removexattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fremovexattr(fd int, attr string, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_fremovexattr_trampoline), uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fremovexattr_trampoline()
+
+//go:linkname libc_fremovexattr libc_fremovexattr
+//go:cgo_import_dynamic libc_fremovexattr fremovexattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func listxattr(path string, dest *byte, size int, options int) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_listxattr_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(dest)), uintptr(size), uintptr(options), 0, 0)
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_listxattr_trampoline()
+
+//go:linkname libc_listxattr libc_listxattr
+//go:cgo_import_dynamic libc_listxattr listxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func flistxattr(fd int, dest *byte, size int, options int) (sz int, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_flistxattr_trampoline), uintptr(fd), uintptr(unsafe.Pointer(dest)), uintptr(size), uintptr(options), 0, 0)
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_flistxattr_trampoline()
+
+//go:linkname libc_flistxattr libc_flistxattr
+//go:cgo_import_dynamic libc_flistxattr flistxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setattrlist(path *byte, list unsafe.Pointer, buf unsafe.Pointer, size uintptr, options int) (err error) {
+	_, _, e1 := syscall_syscall6(funcPC(libc_setattrlist_trampoline), uintptr(unsafe.Pointer(path)), uintptr(list), uintptr(buf), uintptr(size), uintptr(options), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setattrlist_trampoline()
+
+//go:linkname libc_setattrlist libc_setattrlist
+//go:cgo_import_dynamic libc_setattrlist setattrlist "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fcntl(fd int, cmd int, arg int) (val int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_fcntl_trampoline), uintptr(fd), uintptr(cmd), uintptr(arg))
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fcntl_trampoline()
+
+//go:linkname libc_fcntl libc_fcntl
+//go:cgo_import_dynamic libc_fcntl fcntl "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kill(pid int, signum int, posix int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_kill_trampoline), uintptr(pid), uintptr(signum), uintptr(posix))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_kill_trampoline()
+
+//go:linkname libc_kill libc_kill
+//go:cgo_import_dynamic libc_kill kill "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_ioctl_trampoline), uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_ioctl_trampoline()
+
+//go:linkname libc_ioctl libc_ioctl
+//go:cgo_import_dynamic libc_ioctl ioctl "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_sysctl_trampoline), uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sysctl_trampoline()
+
+//go:linkname libc_sysctl libc_sysctl
+//go:cgo_import_dynamic libc_sysctl sysctl "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(infd int, outfd int, offset int64, len *int64, hdtr unsafe.Pointer, flags int) (err error) {
+	_, _, e1 := syscall_syscall6(funcPC(libc_sendfile_trampoline), uintptr(infd), uintptr(outfd), uintptr(offset), uintptr(unsafe.Pointer(len)), uintptr(hdtr), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sendfile_trampoline()
+
+//go:linkname libc_sendfile libc_sendfile
+//go:cgo_import_dynamic libc_sendfile sendfile "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_access_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_access_trampoline()
+
+//go:linkname libc_access libc_access
+//go:cgo_import_dynamic libc_access access "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_adjtime_trampoline), uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_adjtime_trampoline()
+
+//go:linkname libc_adjtime libc_adjtime
+//go:cgo_import_dynamic libc_adjtime adjtime "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chdir_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chdir_trampoline()
+
+//go:linkname libc_chdir libc_chdir
+//go:cgo_import_dynamic libc_chdir chdir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chflags_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chflags_trampoline()
+
+//go:linkname libc_chflags libc_chflags
+//go:cgo_import_dynamic libc_chflags chflags "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chmod_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chmod_trampoline()
+
+//go:linkname libc_chmod libc_chmod
+//go:cgo_import_dynamic libc_chmod chmod "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chown_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chown_trampoline()
+
+//go:linkname libc_chown libc_chown
+//go:cgo_import_dynamic libc_chown chown "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chroot_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chroot_trampoline()
+
+//go:linkname libc_chroot libc_chroot
+//go:cgo_import_dynamic libc_chroot chroot "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ClockGettime(clockid int32, time *Timespec) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_clock_gettime_trampoline), uintptr(clockid), uintptr(unsafe.Pointer(time)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_clock_gettime_trampoline()
+
+//go:linkname libc_clock_gettime libc_clock_gettime
+//go:cgo_import_dynamic libc_clock_gettime clock_gettime "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_close_trampoline), uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_close_trampoline()
+
+//go:linkname libc_close libc_close
+//go:cgo_import_dynamic libc_close close "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Clonefile(src string, dst string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(src)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(dst)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_clonefile_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_clonefile_trampoline()
+
+//go:linkname libc_clonefile libc_clonefile
+//go:cgo_import_dynamic libc_clonefile clonefile "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Clonefileat(srcDirfd int, src string, dstDirfd int, dst string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(src)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(dst)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_clonefileat_trampoline), uintptr(srcDirfd), uintptr(unsafe.Pointer(_p0)), uintptr(dstDirfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_clonefileat_trampoline()
+
+//go:linkname libc_clonefileat libc_clonefileat
+//go:cgo_import_dynamic libc_clonefileat clonefileat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_dup_trampoline), uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_dup_trampoline()
+
+//go:linkname libc_dup libc_dup
+//go:cgo_import_dynamic libc_dup dup "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_dup2_trampoline), uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_dup2_trampoline()
+
+//go:linkname libc_dup2 libc_dup2
+//go:cgo_import_dynamic libc_dup2 dup2 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exchangedata(path1 string, path2 string, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path1)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(path2)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_exchangedata_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_exchangedata_trampoline()
+
+//go:linkname libc_exchangedata libc_exchangedata
+//go:cgo_import_dynamic libc_exchangedata exchangedata "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	syscall_syscall(funcPC(libc_exit_trampoline), uintptr(code), 0, 0)
+	return
+}
+
+func libc_exit_trampoline()
+
+//go:linkname libc_exit libc_exit
+//go:cgo_import_dynamic libc_exit exit "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_faccessat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_faccessat_trampoline()
+
+//go:linkname libc_faccessat libc_faccessat
+//go:cgo_import_dynamic libc_faccessat faccessat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fchdir_trampoline), uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchdir_trampoline()
+
+//go:linkname libc_fchdir libc_fchdir
+//go:cgo_import_dynamic libc_fchdir fchdir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fchflags_trampoline), uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchflags_trampoline()
+
+//go:linkname libc_fchflags libc_fchflags
+//go:cgo_import_dynamic libc_fchflags fchflags "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fchmod_trampoline), uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchmod_trampoline()
+
+//go:linkname libc_fchmod libc_fchmod
+//go:cgo_import_dynamic libc_fchmod fchmod "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fchmodat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchmodat_trampoline()
+
+//go:linkname libc_fchmodat libc_fchmodat
+//go:cgo_import_dynamic libc_fchmodat fchmodat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fchown_trampoline), uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchown_trampoline()
+
+//go:linkname libc_fchown libc_fchown
+//go:cgo_import_dynamic libc_fchown fchown "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fchownat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchownat_trampoline()
+
+//go:linkname libc_fchownat libc_fchownat
+//go:cgo_import_dynamic libc_fchownat fchownat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fclonefileat(srcDirfd int, dstDirfd int, dst string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(dst)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fclonefileat_trampoline), uintptr(srcDirfd), uintptr(dstDirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fclonefileat_trampoline()
+
+//go:linkname libc_fclonefileat libc_fclonefileat
+//go:cgo_import_dynamic libc_fclonefileat fclonefileat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_flock_trampoline), uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_flock_trampoline()
+
+//go:linkname libc_flock libc_flock
+//go:cgo_import_dynamic libc_flock flock "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_fpathconf_trampoline), uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fpathconf_trampoline()
+
+//go:linkname libc_fpathconf libc_fpathconf
+//go:cgo_import_dynamic libc_fpathconf fpathconf "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fsync_trampoline), uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fsync_trampoline()
+
+//go:linkname libc_fsync libc_fsync
+//go:cgo_import_dynamic libc_fsync fsync "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_ftruncate_trampoline), uintptr(fd), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_ftruncate_trampoline()
+
+//go:linkname libc_ftruncate libc_ftruncate
+//go:cgo_import_dynamic libc_ftruncate ftruncate "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_getcwd_trampoline), uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getcwd_trampoline()
+
+//go:linkname libc_getcwd libc_getcwd
+//go:cgo_import_dynamic libc_getcwd getcwd "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdtablesize() (size int) {
+	r0, _, _ := syscall_syscall(funcPC(libc_getdtablesize_trampoline), 0, 0, 0)
+	size = int(r0)
+	return
+}
+
+func libc_getdtablesize_trampoline()
+
+//go:linkname libc_getdtablesize libc_getdtablesize
+//go:cgo_import_dynamic libc_getdtablesize getdtablesize "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getegid_trampoline), 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+func libc_getegid_trampoline()
+
+//go:linkname libc_getegid libc_getegid
+//go:cgo_import_dynamic libc_getegid getegid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_geteuid_trampoline), 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+func libc_geteuid_trampoline()
+
+//go:linkname libc_geteuid libc_geteuid
+//go:cgo_import_dynamic libc_geteuid geteuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getgid_trampoline), 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+func libc_getgid_trampoline()
+
+//go:linkname libc_getgid libc_getgid
+//go:cgo_import_dynamic libc_getgid getgid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_getpgid_trampoline), uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getpgid_trampoline()
+
+//go:linkname libc_getpgid libc_getpgid
+//go:cgo_import_dynamic libc_getpgid getpgid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getpgrp_trampoline), 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+func libc_getpgrp_trampoline()
+
+//go:linkname libc_getpgrp libc_getpgrp
+//go:cgo_import_dynamic libc_getpgrp getpgrp "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getpid_trampoline), 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+func libc_getpid_trampoline()
+
+//go:linkname libc_getpid libc_getpid
+//go:cgo_import_dynamic libc_getpid getpid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getppid_trampoline), 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+func libc_getppid_trampoline()
+
+//go:linkname libc_getppid libc_getppid
+//go:cgo_import_dynamic libc_getppid getppid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_getpriority_trampoline), uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getpriority_trampoline()
+
+//go:linkname libc_getpriority libc_getpriority
+//go:cgo_import_dynamic libc_getpriority getpriority "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_getrlimit_trampoline), uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getrlimit_trampoline()
+
+//go:linkname libc_getrlimit libc_getrlimit
+//go:cgo_import_dynamic libc_getrlimit getrlimit "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_getrusage_trampoline), uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getrusage_trampoline()
+
+//go:linkname libc_getrusage libc_getrusage
+//go:cgo_import_dynamic libc_getrusage getrusage "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_getsid_trampoline), uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getsid_trampoline()
+
+//go:linkname libc_getsid libc_getsid
+//go:cgo_import_dynamic libc_getsid getsid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tp *Timeval) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_gettimeofday_trampoline), uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_gettimeofday_trampoline()
+
+//go:linkname libc_gettimeofday libc_gettimeofday
+//go:cgo_import_dynamic libc_gettimeofday gettimeofday "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getuid_trampoline), 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+func libc_getuid_trampoline()
+
+//go:linkname libc_getuid libc_getuid
+//go:cgo_import_dynamic libc_getuid getuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_issetugid_trampoline), 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+func libc_issetugid_trampoline()
+
+//go:linkname libc_issetugid libc_issetugid
+//go:cgo_import_dynamic libc_issetugid issetugid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_kqueue_trampoline), 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_kqueue_trampoline()
+
+//go:linkname libc_kqueue libc_kqueue
+//go:cgo_import_dynamic libc_kqueue kqueue "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_lchown_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_lchown_trampoline()
+
+//go:linkname libc_lchown libc_lchown
+//go:cgo_import_dynamic libc_lchown lchown "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_link_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_link_trampoline()
+
+//go:linkname libc_link libc_link
+//go:cgo_import_dynamic libc_link link "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_linkat_trampoline), uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_linkat_trampoline()
+
+//go:linkname libc_linkat libc_linkat
+//go:cgo_import_dynamic libc_linkat linkat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_listen_trampoline), uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_listen_trampoline()
+
+//go:linkname libc_listen libc_listen
+//go:cgo_import_dynamic libc_listen listen "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mkdir_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mkdir_trampoline()
+
+//go:linkname libc_mkdir libc_mkdir
+//go:cgo_import_dynamic libc_mkdir mkdir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mkdirat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mkdirat_trampoline()
+
+//go:linkname libc_mkdirat libc_mkdirat
+//go:cgo_import_dynamic libc_mkdirat mkdirat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mkfifo_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mkfifo_trampoline()
+
+//go:linkname libc_mkfifo libc_mkfifo
+//go:cgo_import_dynamic libc_mkfifo mkfifo "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mknod_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mknod_trampoline()
+
+//go:linkname libc_mknod libc_mknod
+//go:cgo_import_dynamic libc_mknod mknod "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_open_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_open_trampoline()
+
+//go:linkname libc_open libc_open
+//go:cgo_import_dynamic libc_open open "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_openat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_openat_trampoline()
+
+//go:linkname libc_openat libc_openat
+//go:cgo_import_dynamic libc_openat openat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_pathconf_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_pathconf_trampoline()
+
+//go:linkname libc_pathconf libc_pathconf
+//go:cgo_import_dynamic libc_pathconf pathconf "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_pread_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_pread_trampoline()
+
+//go:linkname libc_pread libc_pread
+//go:cgo_import_dynamic libc_pread pread "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_pwrite_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_pwrite_trampoline()
+
+//go:linkname libc_pwrite libc_pwrite
+//go:cgo_import_dynamic libc_pwrite pwrite "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_read_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_read_trampoline()
+
+//go:linkname libc_read libc_read
+//go:cgo_import_dynamic libc_read read "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_readlink_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_readlink_trampoline()
+
+//go:linkname libc_readlink libc_readlink
+//go:cgo_import_dynamic libc_readlink readlink "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_readlinkat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_readlinkat_trampoline()
+
+//go:linkname libc_readlinkat libc_readlinkat
+//go:cgo_import_dynamic libc_readlinkat readlinkat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_rename_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_rename_trampoline()
+
+//go:linkname libc_rename libc_rename
+//go:cgo_import_dynamic libc_rename rename "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_renameat_trampoline), uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_renameat_trampoline()
+
+//go:linkname libc_renameat libc_renameat
+//go:cgo_import_dynamic libc_renameat renameat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_revoke_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_revoke_trampoline()
+
+//go:linkname libc_revoke libc_revoke
+//go:cgo_import_dynamic libc_revoke revoke "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_rmdir_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_rmdir_trampoline()
+
+//go:linkname libc_rmdir libc_rmdir
+//go:cgo_import_dynamic libc_rmdir rmdir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_lseek_trampoline), uintptr(fd), uintptr(offset), uintptr(whence))
+	newoffset = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_lseek_trampoline()
+
+//go:linkname libc_lseek libc_lseek
+//go:cgo_import_dynamic libc_lseek lseek "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_select_trampoline), uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_select_trampoline()
+
+//go:linkname libc_select libc_select
+//go:cgo_import_dynamic libc_select select "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_setegid_trampoline), uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setegid_trampoline()
+
+//go:linkname libc_setegid libc_setegid
+//go:cgo_import_dynamic libc_setegid setegid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_seteuid_trampoline), uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_seteuid_trampoline()
+
+//go:linkname libc_seteuid libc_seteuid
+//go:cgo_import_dynamic libc_seteuid seteuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setgid_trampoline), uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setgid_trampoline()
+
+//go:linkname libc_setgid libc_setgid
+//go:cgo_import_dynamic libc_setgid setgid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setlogin(name string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_setlogin_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setlogin_trampoline()
+
+//go:linkname libc_setlogin libc_setlogin
+//go:cgo_import_dynamic libc_setlogin setlogin "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setpgid_trampoline), uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setpgid_trampoline()
+
+//go:linkname libc_setpgid libc_setpgid
+//go:cgo_import_dynamic libc_setpgid setpgid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_setpriority_trampoline), uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setpriority_trampoline()
+
+//go:linkname libc_setpriority libc_setpriority
+//go:cgo_import_dynamic libc_setpriority setpriority "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setprivexec(flag int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_setprivexec_trampoline), uintptr(flag), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setprivexec_trampoline()
+
+//go:linkname libc_setprivexec libc_setprivexec
+//go:cgo_import_dynamic libc_setprivexec setprivexec "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setregid_trampoline), uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setregid_trampoline()
+
+//go:linkname libc_setregid libc_setregid
+//go:cgo_import_dynamic libc_setregid setregid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setreuid_trampoline), uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setreuid_trampoline()
+
+//go:linkname libc_setreuid libc_setreuid
+//go:cgo_import_dynamic libc_setreuid setreuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setrlimit_trampoline), uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setrlimit_trampoline()
+
+//go:linkname libc_setrlimit libc_setrlimit
+//go:cgo_import_dynamic libc_setrlimit setrlimit "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_setsid_trampoline), 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setsid_trampoline()
+
+//go:linkname libc_setsid libc_setsid
+//go:cgo_import_dynamic libc_setsid setsid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_settimeofday_trampoline), uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_settimeofday_trampoline()
+
+//go:linkname libc_settimeofday libc_settimeofday
+//go:cgo_import_dynamic libc_settimeofday settimeofday "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setuid_trampoline), uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setuid_trampoline()
+
+//go:linkname libc_setuid libc_setuid
+//go:cgo_import_dynamic libc_setuid setuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_symlink_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_symlink_trampoline()
+
+//go:linkname libc_symlink libc_symlink
+//go:cgo_import_dynamic libc_symlink symlink "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_symlinkat_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_symlinkat_trampoline()
+
+//go:linkname libc_symlinkat libc_symlinkat
+//go:cgo_import_dynamic libc_symlinkat symlinkat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_sync_trampoline), 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sync_trampoline()
+
+//go:linkname libc_sync libc_sync
+//go:cgo_import_dynamic libc_sync sync "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_truncate_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_truncate_trampoline()
+
+//go:linkname libc_truncate libc_truncate
+//go:cgo_import_dynamic libc_truncate truncate "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := syscall_syscall(funcPC(libc_umask_trampoline), uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+func libc_umask_trampoline()
+
+//go:linkname libc_umask libc_umask
+//go:cgo_import_dynamic libc_umask umask "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Undelete(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_undelete_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_undelete_trampoline()
+
+//go:linkname libc_undelete libc_undelete
+//go:cgo_import_dynamic libc_undelete undelete "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_unlink_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_unlink_trampoline()
+
+//go:linkname libc_unlink libc_unlink
+//go:cgo_import_dynamic libc_unlink unlink "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_unlinkat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_unlinkat_trampoline()
+
+//go:linkname libc_unlinkat libc_unlinkat
+//go:cgo_import_dynamic libc_unlinkat unlinkat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_unmount_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_unmount_trampoline()
+
+//go:linkname libc_unmount libc_unmount
+//go:cgo_import_dynamic libc_unmount unmount "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_write_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_write_trampoline()
+
+//go:linkname libc_write libc_write
+//go:cgo_import_dynamic libc_write write "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_mmap_trampoline), uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), uintptr(pos))
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mmap_trampoline()
+
+//go:linkname libc_mmap libc_mmap
+//go:cgo_import_dynamic libc_mmap mmap "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_munmap_trampoline), uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_munmap_trampoline()
+
+//go:linkname libc_munmap libc_munmap
+//go:cgo_import_dynamic libc_munmap munmap "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_read_trampoline), uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_write_trampoline), uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ptrace(request int, pid int, addr uintptr, data uintptr) (err error) {
+	_, _, e1 := syscall_syscall6(funcPC(libc_ptrace_trampoline), uintptr(request), uintptr(pid), uintptr(addr), uintptr(data), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_ptrace_trampoline()
+
+//go:linkname libc_ptrace libc_ptrace
+//go:cgo_import_dynamic libc_ptrace ptrace "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fstat64_trampoline), uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fstat64_trampoline()
+
+//go:linkname libc_fstat64 libc_fstat64
+//go:cgo_import_dynamic libc_fstat64 fstat64 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fstatat64_trampoline), uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fstatat64_trampoline()
+
+//go:linkname libc_fstatat64 libc_fstatat64
+//go:cgo_import_dynamic libc_fstatat64 fstatat64 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, stat *Statfs_t) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fstatfs64_trampoline), uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fstatfs64_trampoline()
+
+//go:linkname libc_fstatfs64 libc_fstatfs64
+//go:cgo_import_dynamic libc_fstatfs64 fstatfs64 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getfsstat(buf unsafe.Pointer, size uintptr, flags int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_getfsstat64_trampoline), uintptr(buf), uintptr(size), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getfsstat64_trampoline()
+
+//go:linkname libc_getfsstat64 libc_getfsstat64
+//go:cgo_import_dynamic libc_getfsstat64 getfsstat64 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_lstat64_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_lstat64_trampoline()
+
+//go:linkname libc_lstat64 libc_lstat64
+//go:cgo_import_dynamic libc_lstat64 lstat64 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_stat64_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_stat64_trampoline()
+
+//go:linkname libc_stat64 libc_stat64
+//go:cgo_import_dynamic libc_stat64 stat64 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, stat *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_statfs64_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_statfs64_trampoline()
+
+//go:linkname libc_statfs64 libc_statfs64
+//go:cgo_import_dynamic libc_statfs64 statfs64 "/usr/lib/libSystem.B.dylib"
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_amd64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_amd64.s
new file mode 100644
index 000000000..887fd5f4e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_amd64.s
@@ -0,0 +1,290 @@
+// go run mkasm_darwin.go amd64
+// Code generated by the command above; DO NOT EDIT.
+
+// +build go1.12
+
+#include "textflag.h"
+TEXT ·libc_getgroups_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getgroups(SB)
+TEXT ·libc_setgroups_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setgroups(SB)
+TEXT ·libc_wait4_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_wait4(SB)
+TEXT ·libc_accept_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_accept(SB)
+TEXT ·libc_bind_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_bind(SB)
+TEXT ·libc_connect_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_connect(SB)
+TEXT ·libc_socket_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_socket(SB)
+TEXT ·libc_getsockopt_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getsockopt(SB)
+TEXT ·libc_setsockopt_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setsockopt(SB)
+TEXT ·libc_getpeername_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpeername(SB)
+TEXT ·libc_getsockname_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getsockname(SB)
+TEXT ·libc_shutdown_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_shutdown(SB)
+TEXT ·libc_socketpair_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_socketpair(SB)
+TEXT ·libc_recvfrom_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_recvfrom(SB)
+TEXT ·libc_sendto_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sendto(SB)
+TEXT ·libc_recvmsg_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_recvmsg(SB)
+TEXT ·libc_sendmsg_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sendmsg(SB)
+TEXT ·libc_kevent_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_kevent(SB)
+TEXT ·libc_utimes_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_utimes(SB)
+TEXT ·libc_futimes_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_futimes(SB)
+TEXT ·libc_poll_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_poll(SB)
+TEXT ·libc_madvise_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_madvise(SB)
+TEXT ·libc_mlock_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mlock(SB)
+TEXT ·libc_mlockall_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mlockall(SB)
+TEXT ·libc_mprotect_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mprotect(SB)
+TEXT ·libc_msync_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_msync(SB)
+TEXT ·libc_munlock_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_munlock(SB)
+TEXT ·libc_munlockall_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_munlockall(SB)
+TEXT ·libc_pipe_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_pipe(SB)
+TEXT ·libc_getxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getxattr(SB)
+TEXT ·libc_fgetxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fgetxattr(SB)
+TEXT ·libc_setxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setxattr(SB)
+TEXT ·libc_fsetxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fsetxattr(SB)
+TEXT ·libc_removexattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_removexattr(SB)
+TEXT ·libc_fremovexattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fremovexattr(SB)
+TEXT ·libc_listxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_listxattr(SB)
+TEXT ·libc_flistxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_flistxattr(SB)
+TEXT ·libc_setattrlist_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setattrlist(SB)
+TEXT ·libc_fcntl_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fcntl(SB)
+TEXT ·libc_kill_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_kill(SB)
+TEXT ·libc_ioctl_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_ioctl(SB)
+TEXT ·libc_sysctl_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sysctl(SB)
+TEXT ·libc_sendfile_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sendfile(SB)
+TEXT ·libc_access_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_access(SB)
+TEXT ·libc_adjtime_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_adjtime(SB)
+TEXT ·libc_chdir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chdir(SB)
+TEXT ·libc_chflags_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chflags(SB)
+TEXT ·libc_chmod_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chmod(SB)
+TEXT ·libc_chown_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chown(SB)
+TEXT ·libc_chroot_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chroot(SB)
+TEXT ·libc_clock_gettime_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_clock_gettime(SB)
+TEXT ·libc_close_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_close(SB)
+TEXT ·libc_clonefile_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_clonefile(SB)
+TEXT ·libc_clonefileat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_clonefileat(SB)
+TEXT ·libc_dup_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_dup(SB)
+TEXT ·libc_dup2_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_dup2(SB)
+TEXT ·libc_exchangedata_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_exchangedata(SB)
+TEXT ·libc_exit_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_exit(SB)
+TEXT ·libc_faccessat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_faccessat(SB)
+TEXT ·libc_fchdir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchdir(SB)
+TEXT ·libc_fchflags_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchflags(SB)
+TEXT ·libc_fchmod_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchmod(SB)
+TEXT ·libc_fchmodat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchmodat(SB)
+TEXT ·libc_fchown_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchown(SB)
+TEXT ·libc_fchownat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchownat(SB)
+TEXT ·libc_fclonefileat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fclonefileat(SB)
+TEXT ·libc_flock_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_flock(SB)
+TEXT ·libc_fpathconf_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fpathconf(SB)
+TEXT ·libc_fsync_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fsync(SB)
+TEXT ·libc_ftruncate_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_ftruncate(SB)
+TEXT ·libc_getcwd_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getcwd(SB)
+TEXT ·libc_getdtablesize_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getdtablesize(SB)
+TEXT ·libc_getegid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getegid(SB)
+TEXT ·libc_geteuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_geteuid(SB)
+TEXT ·libc_getgid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getgid(SB)
+TEXT ·libc_getpgid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpgid(SB)
+TEXT ·libc_getpgrp_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpgrp(SB)
+TEXT ·libc_getpid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpid(SB)
+TEXT ·libc_getppid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getppid(SB)
+TEXT ·libc_getpriority_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpriority(SB)
+TEXT ·libc_getrlimit_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getrlimit(SB)
+TEXT ·libc_getrusage_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getrusage(SB)
+TEXT ·libc_getsid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getsid(SB)
+TEXT ·libc_gettimeofday_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_gettimeofday(SB)
+TEXT ·libc_getuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getuid(SB)
+TEXT ·libc_issetugid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_issetugid(SB)
+TEXT ·libc_kqueue_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_kqueue(SB)
+TEXT ·libc_lchown_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_lchown(SB)
+TEXT ·libc_link_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_link(SB)
+TEXT ·libc_linkat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_linkat(SB)
+TEXT ·libc_listen_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_listen(SB)
+TEXT ·libc_mkdir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mkdir(SB)
+TEXT ·libc_mkdirat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mkdirat(SB)
+TEXT ·libc_mkfifo_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mkfifo(SB)
+TEXT ·libc_mknod_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mknod(SB)
+TEXT ·libc_open_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_open(SB)
+TEXT ·libc_openat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_openat(SB)
+TEXT ·libc_pathconf_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_pathconf(SB)
+TEXT ·libc_pread_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_pread(SB)
+TEXT ·libc_pwrite_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_pwrite(SB)
+TEXT ·libc_read_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_read(SB)
+TEXT ·libc_readlink_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_readlink(SB)
+TEXT ·libc_readlinkat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_readlinkat(SB)
+TEXT ·libc_rename_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_rename(SB)
+TEXT ·libc_renameat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_renameat(SB)
+TEXT ·libc_revoke_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_revoke(SB)
+TEXT ·libc_rmdir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_rmdir(SB)
+TEXT ·libc_lseek_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_lseek(SB)
+TEXT ·libc_select_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_select(SB)
+TEXT ·libc_setegid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setegid(SB)
+TEXT ·libc_seteuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_seteuid(SB)
+TEXT ·libc_setgid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setgid(SB)
+TEXT ·libc_setlogin_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setlogin(SB)
+TEXT ·libc_setpgid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setpgid(SB)
+TEXT ·libc_setpriority_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setpriority(SB)
+TEXT ·libc_setprivexec_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setprivexec(SB)
+TEXT ·libc_setregid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setregid(SB)
+TEXT ·libc_setreuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setreuid(SB)
+TEXT ·libc_setrlimit_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setrlimit(SB)
+TEXT ·libc_setsid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setsid(SB)
+TEXT ·libc_settimeofday_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_settimeofday(SB)
+TEXT ·libc_setuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setuid(SB)
+TEXT ·libc_symlink_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_symlink(SB)
+TEXT ·libc_symlinkat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_symlinkat(SB)
+TEXT ·libc_sync_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sync(SB)
+TEXT ·libc_truncate_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_truncate(SB)
+TEXT ·libc_umask_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_umask(SB)
+TEXT ·libc_undelete_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_undelete(SB)
+TEXT ·libc_unlink_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_unlink(SB)
+TEXT ·libc_unlinkat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_unlinkat(SB)
+TEXT ·libc_unmount_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_unmount(SB)
+TEXT ·libc_write_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_write(SB)
+TEXT ·libc_mmap_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mmap(SB)
+TEXT ·libc_munmap_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_munmap(SB)
+TEXT ·libc_ptrace_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_ptrace(SB)
+TEXT ·libc_fstat64_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fstat64(SB)
+TEXT ·libc_fstatat64_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fstatat64(SB)
+TEXT ·libc_fstatfs64_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fstatfs64(SB)
+TEXT ·libc_getfsstat64_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getfsstat64(SB)
+TEXT ·libc_lstat64_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_lstat64(SB)
+TEXT ·libc_stat64_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_stat64(SB)
+TEXT ·libc_statfs64_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_statfs64(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm.1_13.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm.1_13.go
new file mode 100644
index 000000000..f519ce9af
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm.1_13.go
@@ -0,0 +1,41 @@
+// go run mksyscall.go -l32 -tags darwin,arm,go1.13 syscall_darwin.1_13.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build darwin,arm,go1.13
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func closedir(dir uintptr) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_closedir_trampoline), uintptr(dir), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_closedir_trampoline()
+
+//go:linkname libc_closedir libc_closedir
+//go:cgo_import_dynamic libc_closedir closedir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readdir_r(dir uintptr, entry *Dirent, result **Dirent) (res Errno) {
+	r0, _, _ := syscall_syscall(funcPC(libc_readdir_r_trampoline), uintptr(dir), uintptr(unsafe.Pointer(entry)), uintptr(unsafe.Pointer(result)))
+	res = Errno(r0)
+	return
+}
+
+func libc_readdir_r_trampoline()
+
+//go:linkname libc_readdir_r libc_readdir_r
+//go:cgo_import_dynamic libc_readdir_r readdir_r "/usr/lib/libSystem.B.dylib"
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm.1_13.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm.1_13.s
new file mode 100644
index 000000000..488e55707
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm.1_13.s
@@ -0,0 +1,12 @@
+// go run mkasm_darwin.go arm
+// Code generated by the command above; DO NOT EDIT.
+
+// +build go1.13
+
+#include "textflag.h"
+TEXT ·libc_fdopendir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fdopendir(SB)
+TEXT ·libc_closedir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_closedir(SB)
+TEXT ·libc_readdir_r_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_readdir_r(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm.go
new file mode 100644
index 000000000..d6b5249c2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm.go
@@ -0,0 +1,2559 @@
+// go run mksyscall.go -l32 -tags darwin,arm,go1.12 syscall_bsd.go syscall_darwin.go syscall_darwin_arm.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build darwin,arm,go1.12
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_getgroups_trampoline), uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getgroups_trampoline()
+
+//go:linkname libc_getgroups libc_getgroups
+//go:cgo_import_dynamic libc_getgroups getgroups "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setgroups_trampoline), uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setgroups_trampoline()
+
+//go:linkname libc_setgroups libc_setgroups
+//go:cgo_import_dynamic libc_setgroups setgroups "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_wait4_trampoline), uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_wait4_trampoline()
+
+//go:linkname libc_wait4 libc_wait4
+//go:cgo_import_dynamic libc_wait4 wait4 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_accept_trampoline), uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_accept_trampoline()
+
+//go:linkname libc_accept libc_accept
+//go:cgo_import_dynamic libc_accept accept "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_bind_trampoline), uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_bind_trampoline()
+
+//go:linkname libc_bind libc_bind
+//go:cgo_import_dynamic libc_bind bind "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_connect_trampoline), uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_connect_trampoline()
+
+//go:linkname libc_connect libc_connect
+//go:cgo_import_dynamic libc_connect connect "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_socket_trampoline), uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_socket_trampoline()
+
+//go:linkname libc_socket libc_socket
+//go:cgo_import_dynamic libc_socket socket "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := syscall_syscall6(funcPC(libc_getsockopt_trampoline), uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getsockopt_trampoline()
+
+//go:linkname libc_getsockopt libc_getsockopt
+//go:cgo_import_dynamic libc_getsockopt getsockopt "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := syscall_syscall6(funcPC(libc_setsockopt_trampoline), uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setsockopt_trampoline()
+
+//go:linkname libc_setsockopt libc_setsockopt
+//go:cgo_import_dynamic libc_setsockopt setsockopt "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_getpeername_trampoline), uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getpeername_trampoline()
+
+//go:linkname libc_getpeername libc_getpeername
+//go:cgo_import_dynamic libc_getpeername getpeername "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_getsockname_trampoline), uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getsockname_trampoline()
+
+//go:linkname libc_getsockname libc_getsockname
+//go:cgo_import_dynamic libc_getsockname getsockname "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_shutdown_trampoline), uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_shutdown_trampoline()
+
+//go:linkname libc_shutdown libc_shutdown
+//go:cgo_import_dynamic libc_shutdown shutdown "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := syscall_rawSyscall6(funcPC(libc_socketpair_trampoline), uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_socketpair_trampoline()
+
+//go:linkname libc_socketpair libc_socketpair
+//go:cgo_import_dynamic libc_socketpair socketpair "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_recvfrom_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_recvfrom_trampoline()
+
+//go:linkname libc_recvfrom libc_recvfrom
+//go:cgo_import_dynamic libc_recvfrom recvfrom "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_sendto_trampoline), uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sendto_trampoline()
+
+//go:linkname libc_sendto libc_sendto
+//go:cgo_import_dynamic libc_sendto sendto "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_recvmsg_trampoline), uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_recvmsg_trampoline()
+
+//go:linkname libc_recvmsg libc_recvmsg
+//go:cgo_import_dynamic libc_recvmsg recvmsg "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_sendmsg_trampoline), uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sendmsg_trampoline()
+
+//go:linkname libc_sendmsg libc_sendmsg
+//go:cgo_import_dynamic libc_sendmsg sendmsg "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_kevent_trampoline), uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_kevent_trampoline()
+
+//go:linkname libc_kevent libc_kevent
+//go:cgo_import_dynamic libc_kevent kevent "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_utimes_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_utimes_trampoline()
+
+//go:linkname libc_utimes libc_utimes
+//go:cgo_import_dynamic libc_utimes utimes "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_futimes_trampoline), uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_futimes_trampoline()
+
+//go:linkname libc_futimes libc_futimes
+//go:cgo_import_dynamic libc_futimes futimes "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_poll_trampoline), uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_poll_trampoline()
+
+//go:linkname libc_poll libc_poll
+//go:cgo_import_dynamic libc_poll poll "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_madvise_trampoline), uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_madvise_trampoline()
+
+//go:linkname libc_madvise libc_madvise
+//go:cgo_import_dynamic libc_madvise madvise "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mlock_trampoline), uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mlock_trampoline()
+
+//go:linkname libc_mlock libc_mlock
+//go:cgo_import_dynamic libc_mlock mlock "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_mlockall_trampoline), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mlockall_trampoline()
+
+//go:linkname libc_mlockall libc_mlockall
+//go:cgo_import_dynamic libc_mlockall mlockall "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mprotect_trampoline), uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mprotect_trampoline()
+
+//go:linkname libc_mprotect libc_mprotect
+//go:cgo_import_dynamic libc_mprotect mprotect "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_msync_trampoline), uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_msync_trampoline()
+
+//go:linkname libc_msync libc_msync
+//go:cgo_import_dynamic libc_msync msync "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_munlock_trampoline), uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_munlock_trampoline()
+
+//go:linkname libc_munlock libc_munlock
+//go:cgo_import_dynamic libc_munlock munlock "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_munlockall_trampoline), 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_munlockall_trampoline()
+
+//go:linkname libc_munlockall libc_munlockall
+//go:cgo_import_dynamic libc_munlockall munlockall "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe() (r int, w int, err error) {
+	r0, r1, e1 := syscall_rawSyscall(funcPC(libc_pipe_trampoline), 0, 0, 0)
+	r = int(r0)
+	w = int(r1)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_pipe_trampoline()
+
+//go:linkname libc_pipe libc_pipe
+//go:cgo_import_dynamic libc_pipe pipe "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getxattr(path string, attr string, dest *byte, size int, position uint32, options int) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_getxattr_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(unsafe.Pointer(dest)), uintptr(size), uintptr(position), uintptr(options))
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getxattr_trampoline()
+
+//go:linkname libc_getxattr libc_getxattr
+//go:cgo_import_dynamic libc_getxattr getxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fgetxattr(fd int, attr string, dest *byte, size int, position uint32, options int) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_fgetxattr_trampoline), uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(dest)), uintptr(size), uintptr(position), uintptr(options))
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fgetxattr_trampoline()
+
+//go:linkname libc_fgetxattr libc_fgetxattr
+//go:cgo_import_dynamic libc_fgetxattr fgetxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setxattr(path string, attr string, data *byte, size int, position uint32, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_setxattr_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(unsafe.Pointer(data)), uintptr(size), uintptr(position), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setxattr_trampoline()
+
+//go:linkname libc_setxattr libc_setxattr
+//go:cgo_import_dynamic libc_setxattr setxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fsetxattr(fd int, attr string, data *byte, size int, position uint32, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fsetxattr_trampoline), uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(data)), uintptr(size), uintptr(position), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fsetxattr_trampoline()
+
+//go:linkname libc_fsetxattr libc_fsetxattr
+//go:cgo_import_dynamic libc_fsetxattr fsetxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func removexattr(path string, attr string, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_removexattr_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_removexattr_trampoline()
+
+//go:linkname libc_removexattr libc_removexattr
+//go:cgo_import_dynamic libc_removexattr removexattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fremovexattr(fd int, attr string, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_fremovexattr_trampoline), uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fremovexattr_trampoline()
+
+//go:linkname libc_fremovexattr libc_fremovexattr
+//go:cgo_import_dynamic libc_fremovexattr fremovexattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func listxattr(path string, dest *byte, size int, options int) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_listxattr_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(dest)), uintptr(size), uintptr(options), 0, 0)
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_listxattr_trampoline()
+
+//go:linkname libc_listxattr libc_listxattr
+//go:cgo_import_dynamic libc_listxattr listxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func flistxattr(fd int, dest *byte, size int, options int) (sz int, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_flistxattr_trampoline), uintptr(fd), uintptr(unsafe.Pointer(dest)), uintptr(size), uintptr(options), 0, 0)
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_flistxattr_trampoline()
+
+//go:linkname libc_flistxattr libc_flistxattr
+//go:cgo_import_dynamic libc_flistxattr flistxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setattrlist(path *byte, list unsafe.Pointer, buf unsafe.Pointer, size uintptr, options int) (err error) {
+	_, _, e1 := syscall_syscall6(funcPC(libc_setattrlist_trampoline), uintptr(unsafe.Pointer(path)), uintptr(list), uintptr(buf), uintptr(size), uintptr(options), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setattrlist_trampoline()
+
+//go:linkname libc_setattrlist libc_setattrlist
+//go:cgo_import_dynamic libc_setattrlist setattrlist "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fcntl(fd int, cmd int, arg int) (val int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_fcntl_trampoline), uintptr(fd), uintptr(cmd), uintptr(arg))
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fcntl_trampoline()
+
+//go:linkname libc_fcntl libc_fcntl
+//go:cgo_import_dynamic libc_fcntl fcntl "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kill(pid int, signum int, posix int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_kill_trampoline), uintptr(pid), uintptr(signum), uintptr(posix))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_kill_trampoline()
+
+//go:linkname libc_kill libc_kill
+//go:cgo_import_dynamic libc_kill kill "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_ioctl_trampoline), uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_ioctl_trampoline()
+
+//go:linkname libc_ioctl libc_ioctl
+//go:cgo_import_dynamic libc_ioctl ioctl "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_sysctl_trampoline), uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sysctl_trampoline()
+
+//go:linkname libc_sysctl libc_sysctl
+//go:cgo_import_dynamic libc_sysctl sysctl "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(infd int, outfd int, offset int64, len *int64, hdtr unsafe.Pointer, flags int) (err error) {
+	_, _, e1 := syscall_syscall9(funcPC(libc_sendfile_trampoline), uintptr(infd), uintptr(outfd), uintptr(offset), uintptr(offset>>32), uintptr(unsafe.Pointer(len)), uintptr(hdtr), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sendfile_trampoline()
+
+//go:linkname libc_sendfile libc_sendfile
+//go:cgo_import_dynamic libc_sendfile sendfile "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_access_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_access_trampoline()
+
+//go:linkname libc_access libc_access
+//go:cgo_import_dynamic libc_access access "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_adjtime_trampoline), uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_adjtime_trampoline()
+
+//go:linkname libc_adjtime libc_adjtime
+//go:cgo_import_dynamic libc_adjtime adjtime "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chdir_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chdir_trampoline()
+
+//go:linkname libc_chdir libc_chdir
+//go:cgo_import_dynamic libc_chdir chdir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chflags_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chflags_trampoline()
+
+//go:linkname libc_chflags libc_chflags
+//go:cgo_import_dynamic libc_chflags chflags "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chmod_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chmod_trampoline()
+
+//go:linkname libc_chmod libc_chmod
+//go:cgo_import_dynamic libc_chmod chmod "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chown_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chown_trampoline()
+
+//go:linkname libc_chown libc_chown
+//go:cgo_import_dynamic libc_chown chown "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chroot_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chroot_trampoline()
+
+//go:linkname libc_chroot libc_chroot
+//go:cgo_import_dynamic libc_chroot chroot "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ClockGettime(clockid int32, time *Timespec) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_clock_gettime_trampoline), uintptr(clockid), uintptr(unsafe.Pointer(time)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_clock_gettime_trampoline()
+
+//go:linkname libc_clock_gettime libc_clock_gettime
+//go:cgo_import_dynamic libc_clock_gettime clock_gettime "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_close_trampoline), uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_close_trampoline()
+
+//go:linkname libc_close libc_close
+//go:cgo_import_dynamic libc_close close "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Clonefile(src string, dst string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(src)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(dst)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_clonefile_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_clonefile_trampoline()
+
+//go:linkname libc_clonefile libc_clonefile
+//go:cgo_import_dynamic libc_clonefile clonefile "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Clonefileat(srcDirfd int, src string, dstDirfd int, dst string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(src)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(dst)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_clonefileat_trampoline), uintptr(srcDirfd), uintptr(unsafe.Pointer(_p0)), uintptr(dstDirfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_clonefileat_trampoline()
+
+//go:linkname libc_clonefileat libc_clonefileat
+//go:cgo_import_dynamic libc_clonefileat clonefileat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_dup_trampoline), uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_dup_trampoline()
+
+//go:linkname libc_dup libc_dup
+//go:cgo_import_dynamic libc_dup dup "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_dup2_trampoline), uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_dup2_trampoline()
+
+//go:linkname libc_dup2 libc_dup2
+//go:cgo_import_dynamic libc_dup2 dup2 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exchangedata(path1 string, path2 string, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path1)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(path2)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_exchangedata_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_exchangedata_trampoline()
+
+//go:linkname libc_exchangedata libc_exchangedata
+//go:cgo_import_dynamic libc_exchangedata exchangedata "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	syscall_syscall(funcPC(libc_exit_trampoline), uintptr(code), 0, 0)
+	return
+}
+
+func libc_exit_trampoline()
+
+//go:linkname libc_exit libc_exit
+//go:cgo_import_dynamic libc_exit exit "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_faccessat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_faccessat_trampoline()
+
+//go:linkname libc_faccessat libc_faccessat
+//go:cgo_import_dynamic libc_faccessat faccessat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fchdir_trampoline), uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchdir_trampoline()
+
+//go:linkname libc_fchdir libc_fchdir
+//go:cgo_import_dynamic libc_fchdir fchdir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fchflags_trampoline), uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchflags_trampoline()
+
+//go:linkname libc_fchflags libc_fchflags
+//go:cgo_import_dynamic libc_fchflags fchflags "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fchmod_trampoline), uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchmod_trampoline()
+
+//go:linkname libc_fchmod libc_fchmod
+//go:cgo_import_dynamic libc_fchmod fchmod "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fchmodat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchmodat_trampoline()
+
+//go:linkname libc_fchmodat libc_fchmodat
+//go:cgo_import_dynamic libc_fchmodat fchmodat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fchown_trampoline), uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchown_trampoline()
+
+//go:linkname libc_fchown libc_fchown
+//go:cgo_import_dynamic libc_fchown fchown "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fchownat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchownat_trampoline()
+
+//go:linkname libc_fchownat libc_fchownat
+//go:cgo_import_dynamic libc_fchownat fchownat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fclonefileat(srcDirfd int, dstDirfd int, dst string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(dst)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fclonefileat_trampoline), uintptr(srcDirfd), uintptr(dstDirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fclonefileat_trampoline()
+
+//go:linkname libc_fclonefileat libc_fclonefileat
+//go:cgo_import_dynamic libc_fclonefileat fclonefileat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_flock_trampoline), uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_flock_trampoline()
+
+//go:linkname libc_flock libc_flock
+//go:cgo_import_dynamic libc_flock flock "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_fpathconf_trampoline), uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fpathconf_trampoline()
+
+//go:linkname libc_fpathconf libc_fpathconf
+//go:cgo_import_dynamic libc_fpathconf fpathconf "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fsync_trampoline), uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fsync_trampoline()
+
+//go:linkname libc_fsync libc_fsync
+//go:cgo_import_dynamic libc_fsync fsync "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_ftruncate_trampoline), uintptr(fd), uintptr(length), uintptr(length>>32))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_ftruncate_trampoline()
+
+//go:linkname libc_ftruncate libc_ftruncate
+//go:cgo_import_dynamic libc_ftruncate ftruncate "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_getcwd_trampoline), uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getcwd_trampoline()
+
+//go:linkname libc_getcwd libc_getcwd
+//go:cgo_import_dynamic libc_getcwd getcwd "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdtablesize() (size int) {
+	r0, _, _ := syscall_syscall(funcPC(libc_getdtablesize_trampoline), 0, 0, 0)
+	size = int(r0)
+	return
+}
+
+func libc_getdtablesize_trampoline()
+
+//go:linkname libc_getdtablesize libc_getdtablesize
+//go:cgo_import_dynamic libc_getdtablesize getdtablesize "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getegid_trampoline), 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+func libc_getegid_trampoline()
+
+//go:linkname libc_getegid libc_getegid
+//go:cgo_import_dynamic libc_getegid getegid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_geteuid_trampoline), 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+func libc_geteuid_trampoline()
+
+//go:linkname libc_geteuid libc_geteuid
+//go:cgo_import_dynamic libc_geteuid geteuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getgid_trampoline), 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+func libc_getgid_trampoline()
+
+//go:linkname libc_getgid libc_getgid
+//go:cgo_import_dynamic libc_getgid getgid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_getpgid_trampoline), uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getpgid_trampoline()
+
+//go:linkname libc_getpgid libc_getpgid
+//go:cgo_import_dynamic libc_getpgid getpgid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getpgrp_trampoline), 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+func libc_getpgrp_trampoline()
+
+//go:linkname libc_getpgrp libc_getpgrp
+//go:cgo_import_dynamic libc_getpgrp getpgrp "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getpid_trampoline), 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+func libc_getpid_trampoline()
+
+//go:linkname libc_getpid libc_getpid
+//go:cgo_import_dynamic libc_getpid getpid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getppid_trampoline), 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+func libc_getppid_trampoline()
+
+//go:linkname libc_getppid libc_getppid
+//go:cgo_import_dynamic libc_getppid getppid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_getpriority_trampoline), uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getpriority_trampoline()
+
+//go:linkname libc_getpriority libc_getpriority
+//go:cgo_import_dynamic libc_getpriority getpriority "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_getrlimit_trampoline), uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getrlimit_trampoline()
+
+//go:linkname libc_getrlimit libc_getrlimit
+//go:cgo_import_dynamic libc_getrlimit getrlimit "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_getrusage_trampoline), uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getrusage_trampoline()
+
+//go:linkname libc_getrusage libc_getrusage
+//go:cgo_import_dynamic libc_getrusage getrusage "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_getsid_trampoline), uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getsid_trampoline()
+
+//go:linkname libc_getsid libc_getsid
+//go:cgo_import_dynamic libc_getsid getsid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tp *Timeval) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_gettimeofday_trampoline), uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_gettimeofday_trampoline()
+
+//go:linkname libc_gettimeofday libc_gettimeofday
+//go:cgo_import_dynamic libc_gettimeofday gettimeofday "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getuid_trampoline), 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+func libc_getuid_trampoline()
+
+//go:linkname libc_getuid libc_getuid
+//go:cgo_import_dynamic libc_getuid getuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_issetugid_trampoline), 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+func libc_issetugid_trampoline()
+
+//go:linkname libc_issetugid libc_issetugid
+//go:cgo_import_dynamic libc_issetugid issetugid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_kqueue_trampoline), 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_kqueue_trampoline()
+
+//go:linkname libc_kqueue libc_kqueue
+//go:cgo_import_dynamic libc_kqueue kqueue "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_lchown_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_lchown_trampoline()
+
+//go:linkname libc_lchown libc_lchown
+//go:cgo_import_dynamic libc_lchown lchown "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_link_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_link_trampoline()
+
+//go:linkname libc_link libc_link
+//go:cgo_import_dynamic libc_link link "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_linkat_trampoline), uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_linkat_trampoline()
+
+//go:linkname libc_linkat libc_linkat
+//go:cgo_import_dynamic libc_linkat linkat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_listen_trampoline), uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_listen_trampoline()
+
+//go:linkname libc_listen libc_listen
+//go:cgo_import_dynamic libc_listen listen "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mkdir_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mkdir_trampoline()
+
+//go:linkname libc_mkdir libc_mkdir
+//go:cgo_import_dynamic libc_mkdir mkdir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mkdirat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mkdirat_trampoline()
+
+//go:linkname libc_mkdirat libc_mkdirat
+//go:cgo_import_dynamic libc_mkdirat mkdirat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mkfifo_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mkfifo_trampoline()
+
+//go:linkname libc_mkfifo libc_mkfifo
+//go:cgo_import_dynamic libc_mkfifo mkfifo "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mknod_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mknod_trampoline()
+
+//go:linkname libc_mknod libc_mknod
+//go:cgo_import_dynamic libc_mknod mknod "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_open_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_open_trampoline()
+
+//go:linkname libc_open libc_open
+//go:cgo_import_dynamic libc_open open "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_openat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_openat_trampoline()
+
+//go:linkname libc_openat libc_openat
+//go:cgo_import_dynamic libc_openat openat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_pathconf_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_pathconf_trampoline()
+
+//go:linkname libc_pathconf libc_pathconf
+//go:cgo_import_dynamic libc_pathconf pathconf "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_pread_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), uintptr(offset>>32), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_pread_trampoline()
+
+//go:linkname libc_pread libc_pread
+//go:cgo_import_dynamic libc_pread pread "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_pwrite_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), uintptr(offset>>32), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_pwrite_trampoline()
+
+//go:linkname libc_pwrite libc_pwrite
+//go:cgo_import_dynamic libc_pwrite pwrite "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_read_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_read_trampoline()
+
+//go:linkname libc_read libc_read
+//go:cgo_import_dynamic libc_read read "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_readlink_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_readlink_trampoline()
+
+//go:linkname libc_readlink libc_readlink
+//go:cgo_import_dynamic libc_readlink readlink "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_readlinkat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_readlinkat_trampoline()
+
+//go:linkname libc_readlinkat libc_readlinkat
+//go:cgo_import_dynamic libc_readlinkat readlinkat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_rename_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_rename_trampoline()
+
+//go:linkname libc_rename libc_rename
+//go:cgo_import_dynamic libc_rename rename "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_renameat_trampoline), uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_renameat_trampoline()
+
+//go:linkname libc_renameat libc_renameat
+//go:cgo_import_dynamic libc_renameat renameat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_revoke_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_revoke_trampoline()
+
+//go:linkname libc_revoke libc_revoke
+//go:cgo_import_dynamic libc_revoke revoke "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_rmdir_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_rmdir_trampoline()
+
+//go:linkname libc_rmdir libc_rmdir
+//go:cgo_import_dynamic libc_rmdir rmdir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, r1, e1 := syscall_syscall6(funcPC(libc_lseek_trampoline), uintptr(fd), uintptr(offset), uintptr(offset>>32), uintptr(whence), 0, 0)
+	newoffset = int64(int64(r1)<<32 | int64(r0))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_lseek_trampoline()
+
+//go:linkname libc_lseek libc_lseek
+//go:cgo_import_dynamic libc_lseek lseek "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_select_trampoline), uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_select_trampoline()
+
+//go:linkname libc_select libc_select
+//go:cgo_import_dynamic libc_select select "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_setegid_trampoline), uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setegid_trampoline()
+
+//go:linkname libc_setegid libc_setegid
+//go:cgo_import_dynamic libc_setegid setegid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_seteuid_trampoline), uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_seteuid_trampoline()
+
+//go:linkname libc_seteuid libc_seteuid
+//go:cgo_import_dynamic libc_seteuid seteuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setgid_trampoline), uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setgid_trampoline()
+
+//go:linkname libc_setgid libc_setgid
+//go:cgo_import_dynamic libc_setgid setgid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setlogin(name string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_setlogin_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setlogin_trampoline()
+
+//go:linkname libc_setlogin libc_setlogin
+//go:cgo_import_dynamic libc_setlogin setlogin "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setpgid_trampoline), uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setpgid_trampoline()
+
+//go:linkname libc_setpgid libc_setpgid
+//go:cgo_import_dynamic libc_setpgid setpgid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_setpriority_trampoline), uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setpriority_trampoline()
+
+//go:linkname libc_setpriority libc_setpriority
+//go:cgo_import_dynamic libc_setpriority setpriority "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setprivexec(flag int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_setprivexec_trampoline), uintptr(flag), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setprivexec_trampoline()
+
+//go:linkname libc_setprivexec libc_setprivexec
+//go:cgo_import_dynamic libc_setprivexec setprivexec "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setregid_trampoline), uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setregid_trampoline()
+
+//go:linkname libc_setregid libc_setregid
+//go:cgo_import_dynamic libc_setregid setregid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setreuid_trampoline), uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setreuid_trampoline()
+
+//go:linkname libc_setreuid libc_setreuid
+//go:cgo_import_dynamic libc_setreuid setreuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setrlimit_trampoline), uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setrlimit_trampoline()
+
+//go:linkname libc_setrlimit libc_setrlimit
+//go:cgo_import_dynamic libc_setrlimit setrlimit "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_setsid_trampoline), 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setsid_trampoline()
+
+//go:linkname libc_setsid libc_setsid
+//go:cgo_import_dynamic libc_setsid setsid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_settimeofday_trampoline), uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_settimeofday_trampoline()
+
+//go:linkname libc_settimeofday libc_settimeofday
+//go:cgo_import_dynamic libc_settimeofday settimeofday "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setuid_trampoline), uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setuid_trampoline()
+
+//go:linkname libc_setuid libc_setuid
+//go:cgo_import_dynamic libc_setuid setuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_symlink_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_symlink_trampoline()
+
+//go:linkname libc_symlink libc_symlink
+//go:cgo_import_dynamic libc_symlink symlink "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_symlinkat_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_symlinkat_trampoline()
+
+//go:linkname libc_symlinkat libc_symlinkat
+//go:cgo_import_dynamic libc_symlinkat symlinkat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_sync_trampoline), 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sync_trampoline()
+
+//go:linkname libc_sync libc_sync
+//go:cgo_import_dynamic libc_sync sync "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_truncate_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(length), uintptr(length>>32))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_truncate_trampoline()
+
+//go:linkname libc_truncate libc_truncate
+//go:cgo_import_dynamic libc_truncate truncate "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := syscall_syscall(funcPC(libc_umask_trampoline), uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+func libc_umask_trampoline()
+
+//go:linkname libc_umask libc_umask
+//go:cgo_import_dynamic libc_umask umask "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Undelete(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_undelete_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_undelete_trampoline()
+
+//go:linkname libc_undelete libc_undelete
+//go:cgo_import_dynamic libc_undelete undelete "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_unlink_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_unlink_trampoline()
+
+//go:linkname libc_unlink libc_unlink
+//go:cgo_import_dynamic libc_unlink unlink "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_unlinkat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_unlinkat_trampoline()
+
+//go:linkname libc_unlinkat libc_unlinkat
+//go:cgo_import_dynamic libc_unlinkat unlinkat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_unmount_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_unmount_trampoline()
+
+//go:linkname libc_unmount libc_unmount
+//go:cgo_import_dynamic libc_unmount unmount "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_write_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_write_trampoline()
+
+//go:linkname libc_write libc_write
+//go:cgo_import_dynamic libc_write write "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := syscall_syscall9(funcPC(libc_mmap_trampoline), uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), uintptr(pos), uintptr(pos>>32), 0, 0)
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mmap_trampoline()
+
+//go:linkname libc_mmap libc_mmap
+//go:cgo_import_dynamic libc_mmap mmap "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_munmap_trampoline), uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_munmap_trampoline()
+
+//go:linkname libc_munmap libc_munmap
+//go:cgo_import_dynamic libc_munmap munmap "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_read_trampoline), uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_write_trampoline), uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fstat_trampoline), uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fstat_trampoline()
+
+//go:linkname libc_fstat libc_fstat
+//go:cgo_import_dynamic libc_fstat fstat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fstatat_trampoline), uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fstatat_trampoline()
+
+//go:linkname libc_fstatat libc_fstatat
+//go:cgo_import_dynamic libc_fstatat fstatat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, stat *Statfs_t) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fstatfs_trampoline), uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fstatfs_trampoline()
+
+//go:linkname libc_fstatfs libc_fstatfs
+//go:cgo_import_dynamic libc_fstatfs fstatfs "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getfsstat(buf unsafe.Pointer, size uintptr, flags int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_getfsstat_trampoline), uintptr(buf), uintptr(size), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getfsstat_trampoline()
+
+//go:linkname libc_getfsstat libc_getfsstat
+//go:cgo_import_dynamic libc_getfsstat getfsstat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_lstat_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_lstat_trampoline()
+
+//go:linkname libc_lstat libc_lstat
+//go:cgo_import_dynamic libc_lstat lstat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_stat_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_stat_trampoline()
+
+//go:linkname libc_stat libc_stat
+//go:cgo_import_dynamic libc_stat stat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, stat *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_statfs_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_statfs_trampoline()
+
+//go:linkname libc_statfs libc_statfs
+//go:cgo_import_dynamic libc_statfs statfs "/usr/lib/libSystem.B.dylib"
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm.s
new file mode 100644
index 000000000..5eec5f1d9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm.s
@@ -0,0 +1,288 @@
+// go run mkasm_darwin.go arm
+// Code generated by the command above; DO NOT EDIT.
+
+// +build go1.12
+
+#include "textflag.h"
+TEXT ·libc_getgroups_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getgroups(SB)
+TEXT ·libc_setgroups_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setgroups(SB)
+TEXT ·libc_wait4_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_wait4(SB)
+TEXT ·libc_accept_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_accept(SB)
+TEXT ·libc_bind_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_bind(SB)
+TEXT ·libc_connect_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_connect(SB)
+TEXT ·libc_socket_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_socket(SB)
+TEXT ·libc_getsockopt_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getsockopt(SB)
+TEXT ·libc_setsockopt_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setsockopt(SB)
+TEXT ·libc_getpeername_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpeername(SB)
+TEXT ·libc_getsockname_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getsockname(SB)
+TEXT ·libc_shutdown_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_shutdown(SB)
+TEXT ·libc_socketpair_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_socketpair(SB)
+TEXT ·libc_recvfrom_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_recvfrom(SB)
+TEXT ·libc_sendto_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sendto(SB)
+TEXT ·libc_recvmsg_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_recvmsg(SB)
+TEXT ·libc_sendmsg_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sendmsg(SB)
+TEXT ·libc_kevent_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_kevent(SB)
+TEXT ·libc_utimes_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_utimes(SB)
+TEXT ·libc_futimes_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_futimes(SB)
+TEXT ·libc_poll_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_poll(SB)
+TEXT ·libc_madvise_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_madvise(SB)
+TEXT ·libc_mlock_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mlock(SB)
+TEXT ·libc_mlockall_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mlockall(SB)
+TEXT ·libc_mprotect_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mprotect(SB)
+TEXT ·libc_msync_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_msync(SB)
+TEXT ·libc_munlock_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_munlock(SB)
+TEXT ·libc_munlockall_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_munlockall(SB)
+TEXT ·libc_pipe_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_pipe(SB)
+TEXT ·libc_getxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getxattr(SB)
+TEXT ·libc_fgetxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fgetxattr(SB)
+TEXT ·libc_setxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setxattr(SB)
+TEXT ·libc_fsetxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fsetxattr(SB)
+TEXT ·libc_removexattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_removexattr(SB)
+TEXT ·libc_fremovexattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fremovexattr(SB)
+TEXT ·libc_listxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_listxattr(SB)
+TEXT ·libc_flistxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_flistxattr(SB)
+TEXT ·libc_setattrlist_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setattrlist(SB)
+TEXT ·libc_fcntl_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fcntl(SB)
+TEXT ·libc_kill_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_kill(SB)
+TEXT ·libc_ioctl_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_ioctl(SB)
+TEXT ·libc_sysctl_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sysctl(SB)
+TEXT ·libc_sendfile_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sendfile(SB)
+TEXT ·libc_access_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_access(SB)
+TEXT ·libc_adjtime_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_adjtime(SB)
+TEXT ·libc_chdir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chdir(SB)
+TEXT ·libc_chflags_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chflags(SB)
+TEXT ·libc_chmod_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chmod(SB)
+TEXT ·libc_chown_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chown(SB)
+TEXT ·libc_chroot_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chroot(SB)
+TEXT ·libc_clock_gettime_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_clock_gettime(SB)
+TEXT ·libc_close_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_close(SB)
+TEXT ·libc_clonefile_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_clonefile(SB)
+TEXT ·libc_clonefileat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_clonefileat(SB)
+TEXT ·libc_dup_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_dup(SB)
+TEXT ·libc_dup2_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_dup2(SB)
+TEXT ·libc_exchangedata_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_exchangedata(SB)
+TEXT ·libc_exit_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_exit(SB)
+TEXT ·libc_faccessat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_faccessat(SB)
+TEXT ·libc_fchdir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchdir(SB)
+TEXT ·libc_fchflags_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchflags(SB)
+TEXT ·libc_fchmod_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchmod(SB)
+TEXT ·libc_fchmodat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchmodat(SB)
+TEXT ·libc_fchown_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchown(SB)
+TEXT ·libc_fchownat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchownat(SB)
+TEXT ·libc_fclonefileat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fclonefileat(SB)
+TEXT ·libc_flock_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_flock(SB)
+TEXT ·libc_fpathconf_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fpathconf(SB)
+TEXT ·libc_fsync_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fsync(SB)
+TEXT ·libc_ftruncate_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_ftruncate(SB)
+TEXT ·libc_getcwd_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getcwd(SB)
+TEXT ·libc_getdtablesize_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getdtablesize(SB)
+TEXT ·libc_getegid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getegid(SB)
+TEXT ·libc_geteuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_geteuid(SB)
+TEXT ·libc_getgid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getgid(SB)
+TEXT ·libc_getpgid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpgid(SB)
+TEXT ·libc_getpgrp_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpgrp(SB)
+TEXT ·libc_getpid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpid(SB)
+TEXT ·libc_getppid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getppid(SB)
+TEXT ·libc_getpriority_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpriority(SB)
+TEXT ·libc_getrlimit_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getrlimit(SB)
+TEXT ·libc_getrusage_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getrusage(SB)
+TEXT ·libc_getsid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getsid(SB)
+TEXT ·libc_gettimeofday_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_gettimeofday(SB)
+TEXT ·libc_getuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getuid(SB)
+TEXT ·libc_issetugid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_issetugid(SB)
+TEXT ·libc_kqueue_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_kqueue(SB)
+TEXT ·libc_lchown_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_lchown(SB)
+TEXT ·libc_link_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_link(SB)
+TEXT ·libc_linkat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_linkat(SB)
+TEXT ·libc_listen_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_listen(SB)
+TEXT ·libc_mkdir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mkdir(SB)
+TEXT ·libc_mkdirat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mkdirat(SB)
+TEXT ·libc_mkfifo_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mkfifo(SB)
+TEXT ·libc_mknod_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mknod(SB)
+TEXT ·libc_open_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_open(SB)
+TEXT ·libc_openat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_openat(SB)
+TEXT ·libc_pathconf_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_pathconf(SB)
+TEXT ·libc_pread_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_pread(SB)
+TEXT ·libc_pwrite_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_pwrite(SB)
+TEXT ·libc_read_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_read(SB)
+TEXT ·libc_readlink_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_readlink(SB)
+TEXT ·libc_readlinkat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_readlinkat(SB)
+TEXT ·libc_rename_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_rename(SB)
+TEXT ·libc_renameat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_renameat(SB)
+TEXT ·libc_revoke_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_revoke(SB)
+TEXT ·libc_rmdir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_rmdir(SB)
+TEXT ·libc_lseek_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_lseek(SB)
+TEXT ·libc_select_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_select(SB)
+TEXT ·libc_setegid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setegid(SB)
+TEXT ·libc_seteuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_seteuid(SB)
+TEXT ·libc_setgid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setgid(SB)
+TEXT ·libc_setlogin_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setlogin(SB)
+TEXT ·libc_setpgid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setpgid(SB)
+TEXT ·libc_setpriority_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setpriority(SB)
+TEXT ·libc_setprivexec_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setprivexec(SB)
+TEXT ·libc_setregid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setregid(SB)
+TEXT ·libc_setreuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setreuid(SB)
+TEXT ·libc_setrlimit_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setrlimit(SB)
+TEXT ·libc_setsid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setsid(SB)
+TEXT ·libc_settimeofday_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_settimeofday(SB)
+TEXT ·libc_setuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setuid(SB)
+TEXT ·libc_symlink_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_symlink(SB)
+TEXT ·libc_symlinkat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_symlinkat(SB)
+TEXT ·libc_sync_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sync(SB)
+TEXT ·libc_truncate_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_truncate(SB)
+TEXT ·libc_umask_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_umask(SB)
+TEXT ·libc_undelete_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_undelete(SB)
+TEXT ·libc_unlink_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_unlink(SB)
+TEXT ·libc_unlinkat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_unlinkat(SB)
+TEXT ·libc_unmount_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_unmount(SB)
+TEXT ·libc_write_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_write(SB)
+TEXT ·libc_mmap_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mmap(SB)
+TEXT ·libc_munmap_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_munmap(SB)
+TEXT ·libc_fstat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fstat(SB)
+TEXT ·libc_fstatat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fstatat(SB)
+TEXT ·libc_fstatfs_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fstatfs(SB)
+TEXT ·libc_getfsstat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getfsstat(SB)
+TEXT ·libc_lstat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_lstat(SB)
+TEXT ·libc_stat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_stat(SB)
+TEXT ·libc_statfs_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_statfs(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm64.1_13.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm64.1_13.go
new file mode 100644
index 000000000..d64e6c806
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm64.1_13.go
@@ -0,0 +1,41 @@
+// go run mksyscall.go -tags darwin,arm64,go1.13 syscall_darwin.1_13.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build darwin,arm64,go1.13
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func closedir(dir uintptr) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_closedir_trampoline), uintptr(dir), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_closedir_trampoline()
+
+//go:linkname libc_closedir libc_closedir
+//go:cgo_import_dynamic libc_closedir closedir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readdir_r(dir uintptr, entry *Dirent, result **Dirent) (res Errno) {
+	r0, _, _ := syscall_syscall(funcPC(libc_readdir_r_trampoline), uintptr(dir), uintptr(unsafe.Pointer(entry)), uintptr(unsafe.Pointer(result)))
+	res = Errno(r0)
+	return
+}
+
+func libc_readdir_r_trampoline()
+
+//go:linkname libc_readdir_r libc_readdir_r
+//go:cgo_import_dynamic libc_readdir_r readdir_r "/usr/lib/libSystem.B.dylib"
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm64.1_13.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm64.1_13.s
new file mode 100644
index 000000000..b29dabb0f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm64.1_13.s
@@ -0,0 +1,12 @@
+// go run mkasm_darwin.go arm64
+// Code generated by the command above; DO NOT EDIT.
+
+// +build go1.13
+
+#include "textflag.h"
+TEXT ·libc_fdopendir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fdopendir(SB)
+TEXT ·libc_closedir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_closedir(SB)
+TEXT ·libc_readdir_r_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_readdir_r(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm64.go
new file mode 100644
index 000000000..08638436c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm64.go
@@ -0,0 +1,2559 @@
+// go run mksyscall.go -tags darwin,arm64,go1.12 syscall_bsd.go syscall_darwin.go syscall_darwin_arm64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build darwin,arm64,go1.12
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_getgroups_trampoline), uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getgroups_trampoline()
+
+//go:linkname libc_getgroups libc_getgroups
+//go:cgo_import_dynamic libc_getgroups getgroups "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setgroups_trampoline), uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setgroups_trampoline()
+
+//go:linkname libc_setgroups libc_setgroups
+//go:cgo_import_dynamic libc_setgroups setgroups "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_wait4_trampoline), uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_wait4_trampoline()
+
+//go:linkname libc_wait4 libc_wait4
+//go:cgo_import_dynamic libc_wait4 wait4 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_accept_trampoline), uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_accept_trampoline()
+
+//go:linkname libc_accept libc_accept
+//go:cgo_import_dynamic libc_accept accept "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_bind_trampoline), uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_bind_trampoline()
+
+//go:linkname libc_bind libc_bind
+//go:cgo_import_dynamic libc_bind bind "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_connect_trampoline), uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_connect_trampoline()
+
+//go:linkname libc_connect libc_connect
+//go:cgo_import_dynamic libc_connect connect "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_socket_trampoline), uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_socket_trampoline()
+
+//go:linkname libc_socket libc_socket
+//go:cgo_import_dynamic libc_socket socket "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := syscall_syscall6(funcPC(libc_getsockopt_trampoline), uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getsockopt_trampoline()
+
+//go:linkname libc_getsockopt libc_getsockopt
+//go:cgo_import_dynamic libc_getsockopt getsockopt "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := syscall_syscall6(funcPC(libc_setsockopt_trampoline), uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setsockopt_trampoline()
+
+//go:linkname libc_setsockopt libc_setsockopt
+//go:cgo_import_dynamic libc_setsockopt setsockopt "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_getpeername_trampoline), uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getpeername_trampoline()
+
+//go:linkname libc_getpeername libc_getpeername
+//go:cgo_import_dynamic libc_getpeername getpeername "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_getsockname_trampoline), uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getsockname_trampoline()
+
+//go:linkname libc_getsockname libc_getsockname
+//go:cgo_import_dynamic libc_getsockname getsockname "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_shutdown_trampoline), uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_shutdown_trampoline()
+
+//go:linkname libc_shutdown libc_shutdown
+//go:cgo_import_dynamic libc_shutdown shutdown "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := syscall_rawSyscall6(funcPC(libc_socketpair_trampoline), uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_socketpair_trampoline()
+
+//go:linkname libc_socketpair libc_socketpair
+//go:cgo_import_dynamic libc_socketpair socketpair "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_recvfrom_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_recvfrom_trampoline()
+
+//go:linkname libc_recvfrom libc_recvfrom
+//go:cgo_import_dynamic libc_recvfrom recvfrom "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_sendto_trampoline), uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sendto_trampoline()
+
+//go:linkname libc_sendto libc_sendto
+//go:cgo_import_dynamic libc_sendto sendto "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_recvmsg_trampoline), uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_recvmsg_trampoline()
+
+//go:linkname libc_recvmsg libc_recvmsg
+//go:cgo_import_dynamic libc_recvmsg recvmsg "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_sendmsg_trampoline), uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sendmsg_trampoline()
+
+//go:linkname libc_sendmsg libc_sendmsg
+//go:cgo_import_dynamic libc_sendmsg sendmsg "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_kevent_trampoline), uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_kevent_trampoline()
+
+//go:linkname libc_kevent libc_kevent
+//go:cgo_import_dynamic libc_kevent kevent "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_utimes_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_utimes_trampoline()
+
+//go:linkname libc_utimes libc_utimes
+//go:cgo_import_dynamic libc_utimes utimes "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_futimes_trampoline), uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_futimes_trampoline()
+
+//go:linkname libc_futimes libc_futimes
+//go:cgo_import_dynamic libc_futimes futimes "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_poll_trampoline), uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_poll_trampoline()
+
+//go:linkname libc_poll libc_poll
+//go:cgo_import_dynamic libc_poll poll "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_madvise_trampoline), uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_madvise_trampoline()
+
+//go:linkname libc_madvise libc_madvise
+//go:cgo_import_dynamic libc_madvise madvise "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mlock_trampoline), uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mlock_trampoline()
+
+//go:linkname libc_mlock libc_mlock
+//go:cgo_import_dynamic libc_mlock mlock "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_mlockall_trampoline), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mlockall_trampoline()
+
+//go:linkname libc_mlockall libc_mlockall
+//go:cgo_import_dynamic libc_mlockall mlockall "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mprotect_trampoline), uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mprotect_trampoline()
+
+//go:linkname libc_mprotect libc_mprotect
+//go:cgo_import_dynamic libc_mprotect mprotect "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_msync_trampoline), uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_msync_trampoline()
+
+//go:linkname libc_msync libc_msync
+//go:cgo_import_dynamic libc_msync msync "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_munlock_trampoline), uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_munlock_trampoline()
+
+//go:linkname libc_munlock libc_munlock
+//go:cgo_import_dynamic libc_munlock munlock "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_munlockall_trampoline), 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_munlockall_trampoline()
+
+//go:linkname libc_munlockall libc_munlockall
+//go:cgo_import_dynamic libc_munlockall munlockall "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe() (r int, w int, err error) {
+	r0, r1, e1 := syscall_rawSyscall(funcPC(libc_pipe_trampoline), 0, 0, 0)
+	r = int(r0)
+	w = int(r1)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_pipe_trampoline()
+
+//go:linkname libc_pipe libc_pipe
+//go:cgo_import_dynamic libc_pipe pipe "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getxattr(path string, attr string, dest *byte, size int, position uint32, options int) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_getxattr_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(unsafe.Pointer(dest)), uintptr(size), uintptr(position), uintptr(options))
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getxattr_trampoline()
+
+//go:linkname libc_getxattr libc_getxattr
+//go:cgo_import_dynamic libc_getxattr getxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fgetxattr(fd int, attr string, dest *byte, size int, position uint32, options int) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_fgetxattr_trampoline), uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(dest)), uintptr(size), uintptr(position), uintptr(options))
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fgetxattr_trampoline()
+
+//go:linkname libc_fgetxattr libc_fgetxattr
+//go:cgo_import_dynamic libc_fgetxattr fgetxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setxattr(path string, attr string, data *byte, size int, position uint32, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_setxattr_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(unsafe.Pointer(data)), uintptr(size), uintptr(position), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setxattr_trampoline()
+
+//go:linkname libc_setxattr libc_setxattr
+//go:cgo_import_dynamic libc_setxattr setxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fsetxattr(fd int, attr string, data *byte, size int, position uint32, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fsetxattr_trampoline), uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(data)), uintptr(size), uintptr(position), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fsetxattr_trampoline()
+
+//go:linkname libc_fsetxattr libc_fsetxattr
+//go:cgo_import_dynamic libc_fsetxattr fsetxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func removexattr(path string, attr string, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_removexattr_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_removexattr_trampoline()
+
+//go:linkname libc_removexattr libc_removexattr
+//go:cgo_import_dynamic libc_removexattr removexattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fremovexattr(fd int, attr string, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_fremovexattr_trampoline), uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fremovexattr_trampoline()
+
+//go:linkname libc_fremovexattr libc_fremovexattr
+//go:cgo_import_dynamic libc_fremovexattr fremovexattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func listxattr(path string, dest *byte, size int, options int) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_listxattr_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(dest)), uintptr(size), uintptr(options), 0, 0)
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_listxattr_trampoline()
+
+//go:linkname libc_listxattr libc_listxattr
+//go:cgo_import_dynamic libc_listxattr listxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func flistxattr(fd int, dest *byte, size int, options int) (sz int, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_flistxattr_trampoline), uintptr(fd), uintptr(unsafe.Pointer(dest)), uintptr(size), uintptr(options), 0, 0)
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_flistxattr_trampoline()
+
+//go:linkname libc_flistxattr libc_flistxattr
+//go:cgo_import_dynamic libc_flistxattr flistxattr "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setattrlist(path *byte, list unsafe.Pointer, buf unsafe.Pointer, size uintptr, options int) (err error) {
+	_, _, e1 := syscall_syscall6(funcPC(libc_setattrlist_trampoline), uintptr(unsafe.Pointer(path)), uintptr(list), uintptr(buf), uintptr(size), uintptr(options), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setattrlist_trampoline()
+
+//go:linkname libc_setattrlist libc_setattrlist
+//go:cgo_import_dynamic libc_setattrlist setattrlist "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fcntl(fd int, cmd int, arg int) (val int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_fcntl_trampoline), uintptr(fd), uintptr(cmd), uintptr(arg))
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fcntl_trampoline()
+
+//go:linkname libc_fcntl libc_fcntl
+//go:cgo_import_dynamic libc_fcntl fcntl "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kill(pid int, signum int, posix int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_kill_trampoline), uintptr(pid), uintptr(signum), uintptr(posix))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_kill_trampoline()
+
+//go:linkname libc_kill libc_kill
+//go:cgo_import_dynamic libc_kill kill "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_ioctl_trampoline), uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_ioctl_trampoline()
+
+//go:linkname libc_ioctl libc_ioctl
+//go:cgo_import_dynamic libc_ioctl ioctl "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_sysctl_trampoline), uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sysctl_trampoline()
+
+//go:linkname libc_sysctl libc_sysctl
+//go:cgo_import_dynamic libc_sysctl sysctl "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(infd int, outfd int, offset int64, len *int64, hdtr unsafe.Pointer, flags int) (err error) {
+	_, _, e1 := syscall_syscall6(funcPC(libc_sendfile_trampoline), uintptr(infd), uintptr(outfd), uintptr(offset), uintptr(unsafe.Pointer(len)), uintptr(hdtr), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sendfile_trampoline()
+
+//go:linkname libc_sendfile libc_sendfile
+//go:cgo_import_dynamic libc_sendfile sendfile "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_access_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_access_trampoline()
+
+//go:linkname libc_access libc_access
+//go:cgo_import_dynamic libc_access access "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_adjtime_trampoline), uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_adjtime_trampoline()
+
+//go:linkname libc_adjtime libc_adjtime
+//go:cgo_import_dynamic libc_adjtime adjtime "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chdir_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chdir_trampoline()
+
+//go:linkname libc_chdir libc_chdir
+//go:cgo_import_dynamic libc_chdir chdir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chflags_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chflags_trampoline()
+
+//go:linkname libc_chflags libc_chflags
+//go:cgo_import_dynamic libc_chflags chflags "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chmod_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chmod_trampoline()
+
+//go:linkname libc_chmod libc_chmod
+//go:cgo_import_dynamic libc_chmod chmod "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chown_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chown_trampoline()
+
+//go:linkname libc_chown libc_chown
+//go:cgo_import_dynamic libc_chown chown "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_chroot_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_chroot_trampoline()
+
+//go:linkname libc_chroot libc_chroot
+//go:cgo_import_dynamic libc_chroot chroot "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ClockGettime(clockid int32, time *Timespec) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_clock_gettime_trampoline), uintptr(clockid), uintptr(unsafe.Pointer(time)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_clock_gettime_trampoline()
+
+//go:linkname libc_clock_gettime libc_clock_gettime
+//go:cgo_import_dynamic libc_clock_gettime clock_gettime "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_close_trampoline), uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_close_trampoline()
+
+//go:linkname libc_close libc_close
+//go:cgo_import_dynamic libc_close close "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Clonefile(src string, dst string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(src)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(dst)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_clonefile_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_clonefile_trampoline()
+
+//go:linkname libc_clonefile libc_clonefile
+//go:cgo_import_dynamic libc_clonefile clonefile "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Clonefileat(srcDirfd int, src string, dstDirfd int, dst string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(src)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(dst)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_clonefileat_trampoline), uintptr(srcDirfd), uintptr(unsafe.Pointer(_p0)), uintptr(dstDirfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_clonefileat_trampoline()
+
+//go:linkname libc_clonefileat libc_clonefileat
+//go:cgo_import_dynamic libc_clonefileat clonefileat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_dup_trampoline), uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_dup_trampoline()
+
+//go:linkname libc_dup libc_dup
+//go:cgo_import_dynamic libc_dup dup "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_dup2_trampoline), uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_dup2_trampoline()
+
+//go:linkname libc_dup2 libc_dup2
+//go:cgo_import_dynamic libc_dup2 dup2 "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exchangedata(path1 string, path2 string, options int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path1)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(path2)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_exchangedata_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(options))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_exchangedata_trampoline()
+
+//go:linkname libc_exchangedata libc_exchangedata
+//go:cgo_import_dynamic libc_exchangedata exchangedata "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	syscall_syscall(funcPC(libc_exit_trampoline), uintptr(code), 0, 0)
+	return
+}
+
+func libc_exit_trampoline()
+
+//go:linkname libc_exit libc_exit
+//go:cgo_import_dynamic libc_exit exit "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_faccessat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_faccessat_trampoline()
+
+//go:linkname libc_faccessat libc_faccessat
+//go:cgo_import_dynamic libc_faccessat faccessat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fchdir_trampoline), uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchdir_trampoline()
+
+//go:linkname libc_fchdir libc_fchdir
+//go:cgo_import_dynamic libc_fchdir fchdir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fchflags_trampoline), uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchflags_trampoline()
+
+//go:linkname libc_fchflags libc_fchflags
+//go:cgo_import_dynamic libc_fchflags fchflags "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fchmod_trampoline), uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchmod_trampoline()
+
+//go:linkname libc_fchmod libc_fchmod
+//go:cgo_import_dynamic libc_fchmod fchmod "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fchmodat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchmodat_trampoline()
+
+//go:linkname libc_fchmodat libc_fchmodat
+//go:cgo_import_dynamic libc_fchmodat fchmodat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fchown_trampoline), uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchown_trampoline()
+
+//go:linkname libc_fchown libc_fchown
+//go:cgo_import_dynamic libc_fchown fchown "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fchownat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fchownat_trampoline()
+
+//go:linkname libc_fchownat libc_fchownat
+//go:cgo_import_dynamic libc_fchownat fchownat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fclonefileat(srcDirfd int, dstDirfd int, dst string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(dst)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fclonefileat_trampoline), uintptr(srcDirfd), uintptr(dstDirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fclonefileat_trampoline()
+
+//go:linkname libc_fclonefileat libc_fclonefileat
+//go:cgo_import_dynamic libc_fclonefileat fclonefileat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_flock_trampoline), uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_flock_trampoline()
+
+//go:linkname libc_flock libc_flock
+//go:cgo_import_dynamic libc_flock flock "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_fpathconf_trampoline), uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fpathconf_trampoline()
+
+//go:linkname libc_fpathconf libc_fpathconf
+//go:cgo_import_dynamic libc_fpathconf fpathconf "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fsync_trampoline), uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fsync_trampoline()
+
+//go:linkname libc_fsync libc_fsync
+//go:cgo_import_dynamic libc_fsync fsync "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_ftruncate_trampoline), uintptr(fd), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_ftruncate_trampoline()
+
+//go:linkname libc_ftruncate libc_ftruncate
+//go:cgo_import_dynamic libc_ftruncate ftruncate "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_getcwd_trampoline), uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getcwd_trampoline()
+
+//go:linkname libc_getcwd libc_getcwd
+//go:cgo_import_dynamic libc_getcwd getcwd "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdtablesize() (size int) {
+	r0, _, _ := syscall_syscall(funcPC(libc_getdtablesize_trampoline), 0, 0, 0)
+	size = int(r0)
+	return
+}
+
+func libc_getdtablesize_trampoline()
+
+//go:linkname libc_getdtablesize libc_getdtablesize
+//go:cgo_import_dynamic libc_getdtablesize getdtablesize "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getegid_trampoline), 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+func libc_getegid_trampoline()
+
+//go:linkname libc_getegid libc_getegid
+//go:cgo_import_dynamic libc_getegid getegid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_geteuid_trampoline), 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+func libc_geteuid_trampoline()
+
+//go:linkname libc_geteuid libc_geteuid
+//go:cgo_import_dynamic libc_geteuid geteuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getgid_trampoline), 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+func libc_getgid_trampoline()
+
+//go:linkname libc_getgid libc_getgid
+//go:cgo_import_dynamic libc_getgid getgid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_getpgid_trampoline), uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getpgid_trampoline()
+
+//go:linkname libc_getpgid libc_getpgid
+//go:cgo_import_dynamic libc_getpgid getpgid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getpgrp_trampoline), 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+func libc_getpgrp_trampoline()
+
+//go:linkname libc_getpgrp libc_getpgrp
+//go:cgo_import_dynamic libc_getpgrp getpgrp "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getpid_trampoline), 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+func libc_getpid_trampoline()
+
+//go:linkname libc_getpid libc_getpid
+//go:cgo_import_dynamic libc_getpid getpid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getppid_trampoline), 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+func libc_getppid_trampoline()
+
+//go:linkname libc_getppid libc_getppid
+//go:cgo_import_dynamic libc_getppid getppid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_getpriority_trampoline), uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getpriority_trampoline()
+
+//go:linkname libc_getpriority libc_getpriority
+//go:cgo_import_dynamic libc_getpriority getpriority "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_getrlimit_trampoline), uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getrlimit_trampoline()
+
+//go:linkname libc_getrlimit libc_getrlimit
+//go:cgo_import_dynamic libc_getrlimit getrlimit "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_getrusage_trampoline), uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getrusage_trampoline()
+
+//go:linkname libc_getrusage libc_getrusage
+//go:cgo_import_dynamic libc_getrusage getrusage "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_getsid_trampoline), uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getsid_trampoline()
+
+//go:linkname libc_getsid libc_getsid
+//go:cgo_import_dynamic libc_getsid getsid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tp *Timeval) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_gettimeofday_trampoline), uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_gettimeofday_trampoline()
+
+//go:linkname libc_gettimeofday libc_gettimeofday
+//go:cgo_import_dynamic libc_gettimeofday gettimeofday "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_getuid_trampoline), 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+func libc_getuid_trampoline()
+
+//go:linkname libc_getuid libc_getuid
+//go:cgo_import_dynamic libc_getuid getuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := syscall_rawSyscall(funcPC(libc_issetugid_trampoline), 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+func libc_issetugid_trampoline()
+
+//go:linkname libc_issetugid libc_issetugid
+//go:cgo_import_dynamic libc_issetugid issetugid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_kqueue_trampoline), 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_kqueue_trampoline()
+
+//go:linkname libc_kqueue libc_kqueue
+//go:cgo_import_dynamic libc_kqueue kqueue "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_lchown_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_lchown_trampoline()
+
+//go:linkname libc_lchown libc_lchown
+//go:cgo_import_dynamic libc_lchown lchown "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_link_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_link_trampoline()
+
+//go:linkname libc_link libc_link
+//go:cgo_import_dynamic libc_link link "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_linkat_trampoline), uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_linkat_trampoline()
+
+//go:linkname libc_linkat libc_linkat
+//go:cgo_import_dynamic libc_linkat linkat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_listen_trampoline), uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_listen_trampoline()
+
+//go:linkname libc_listen libc_listen
+//go:cgo_import_dynamic libc_listen listen "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mkdir_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mkdir_trampoline()
+
+//go:linkname libc_mkdir libc_mkdir
+//go:cgo_import_dynamic libc_mkdir mkdir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mkdirat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mkdirat_trampoline()
+
+//go:linkname libc_mkdirat libc_mkdirat
+//go:cgo_import_dynamic libc_mkdirat mkdirat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mkfifo_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mkfifo_trampoline()
+
+//go:linkname libc_mkfifo libc_mkfifo
+//go:cgo_import_dynamic libc_mkfifo mkfifo "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_mknod_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mknod_trampoline()
+
+//go:linkname libc_mknod libc_mknod
+//go:cgo_import_dynamic libc_mknod mknod "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_open_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_open_trampoline()
+
+//go:linkname libc_open libc_open
+//go:cgo_import_dynamic libc_open open "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_openat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_openat_trampoline()
+
+//go:linkname libc_openat libc_openat
+//go:cgo_import_dynamic libc_openat openat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_pathconf_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_pathconf_trampoline()
+
+//go:linkname libc_pathconf libc_pathconf
+//go:cgo_import_dynamic libc_pathconf pathconf "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_pread_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_pread_trampoline()
+
+//go:linkname libc_pread libc_pread
+//go:cgo_import_dynamic libc_pread pread "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_pwrite_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_pwrite_trampoline()
+
+//go:linkname libc_pwrite libc_pwrite
+//go:cgo_import_dynamic libc_pwrite pwrite "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_read_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_read_trampoline()
+
+//go:linkname libc_read libc_read
+//go:cgo_import_dynamic libc_read read "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_readlink_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_readlink_trampoline()
+
+//go:linkname libc_readlink libc_readlink
+//go:cgo_import_dynamic libc_readlink readlink "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall6(funcPC(libc_readlinkat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_readlinkat_trampoline()
+
+//go:linkname libc_readlinkat libc_readlinkat
+//go:cgo_import_dynamic libc_readlinkat readlinkat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_rename_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_rename_trampoline()
+
+//go:linkname libc_rename libc_rename
+//go:cgo_import_dynamic libc_rename rename "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_renameat_trampoline), uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_renameat_trampoline()
+
+//go:linkname libc_renameat libc_renameat
+//go:cgo_import_dynamic libc_renameat renameat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_revoke_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_revoke_trampoline()
+
+//go:linkname libc_revoke libc_revoke
+//go:cgo_import_dynamic libc_revoke revoke "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_rmdir_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_rmdir_trampoline()
+
+//go:linkname libc_rmdir libc_rmdir
+//go:cgo_import_dynamic libc_rmdir rmdir "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_lseek_trampoline), uintptr(fd), uintptr(offset), uintptr(whence))
+	newoffset = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_lseek_trampoline()
+
+//go:linkname libc_lseek libc_lseek
+//go:cgo_import_dynamic libc_lseek lseek "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_select_trampoline), uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_select_trampoline()
+
+//go:linkname libc_select libc_select
+//go:cgo_import_dynamic libc_select select "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_setegid_trampoline), uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setegid_trampoline()
+
+//go:linkname libc_setegid libc_setegid
+//go:cgo_import_dynamic libc_setegid setegid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_seteuid_trampoline), uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_seteuid_trampoline()
+
+//go:linkname libc_seteuid libc_seteuid
+//go:cgo_import_dynamic libc_seteuid seteuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setgid_trampoline), uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setgid_trampoline()
+
+//go:linkname libc_setgid libc_setgid
+//go:cgo_import_dynamic libc_setgid setgid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setlogin(name string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_setlogin_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setlogin_trampoline()
+
+//go:linkname libc_setlogin libc_setlogin
+//go:cgo_import_dynamic libc_setlogin setlogin "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setpgid_trampoline), uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setpgid_trampoline()
+
+//go:linkname libc_setpgid libc_setpgid
+//go:cgo_import_dynamic libc_setpgid setpgid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_setpriority_trampoline), uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setpriority_trampoline()
+
+//go:linkname libc_setpriority libc_setpriority
+//go:cgo_import_dynamic libc_setpriority setpriority "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setprivexec(flag int) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_setprivexec_trampoline), uintptr(flag), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setprivexec_trampoline()
+
+//go:linkname libc_setprivexec libc_setprivexec
+//go:cgo_import_dynamic libc_setprivexec setprivexec "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setregid_trampoline), uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setregid_trampoline()
+
+//go:linkname libc_setregid libc_setregid
+//go:cgo_import_dynamic libc_setregid setregid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setreuid_trampoline), uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setreuid_trampoline()
+
+//go:linkname libc_setreuid libc_setreuid
+//go:cgo_import_dynamic libc_setreuid setreuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setrlimit_trampoline), uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setrlimit_trampoline()
+
+//go:linkname libc_setrlimit libc_setrlimit
+//go:cgo_import_dynamic libc_setrlimit setrlimit "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := syscall_rawSyscall(funcPC(libc_setsid_trampoline), 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setsid_trampoline()
+
+//go:linkname libc_setsid libc_setsid
+//go:cgo_import_dynamic libc_setsid setsid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_settimeofday_trampoline), uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_settimeofday_trampoline()
+
+//go:linkname libc_settimeofday libc_settimeofday
+//go:cgo_import_dynamic libc_settimeofday settimeofday "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := syscall_rawSyscall(funcPC(libc_setuid_trampoline), uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_setuid_trampoline()
+
+//go:linkname libc_setuid libc_setuid
+//go:cgo_import_dynamic libc_setuid setuid "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_symlink_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_symlink_trampoline()
+
+//go:linkname libc_symlink libc_symlink
+//go:cgo_import_dynamic libc_symlink symlink "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_symlinkat_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_symlinkat_trampoline()
+
+//go:linkname libc_symlinkat libc_symlinkat
+//go:cgo_import_dynamic libc_symlinkat symlinkat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_sync_trampoline), 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_sync_trampoline()
+
+//go:linkname libc_sync libc_sync
+//go:cgo_import_dynamic libc_sync sync "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_truncate_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_truncate_trampoline()
+
+//go:linkname libc_truncate libc_truncate
+//go:cgo_import_dynamic libc_truncate truncate "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := syscall_syscall(funcPC(libc_umask_trampoline), uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+func libc_umask_trampoline()
+
+//go:linkname libc_umask libc_umask
+//go:cgo_import_dynamic libc_umask umask "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Undelete(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_undelete_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_undelete_trampoline()
+
+//go:linkname libc_undelete libc_undelete
+//go:cgo_import_dynamic libc_undelete undelete "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_unlink_trampoline), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_unlink_trampoline()
+
+//go:linkname libc_unlink libc_unlink
+//go:cgo_import_dynamic libc_unlink unlink "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_unlinkat_trampoline), uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_unlinkat_trampoline()
+
+//go:linkname libc_unlinkat libc_unlinkat
+//go:cgo_import_dynamic libc_unlinkat unlinkat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_unmount_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_unmount_trampoline()
+
+//go:linkname libc_unmount libc_unmount
+//go:cgo_import_dynamic libc_unmount unmount "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := syscall_syscall(funcPC(libc_write_trampoline), uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_write_trampoline()
+
+//go:linkname libc_write libc_write
+//go:cgo_import_dynamic libc_write write "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := syscall_syscall6(funcPC(libc_mmap_trampoline), uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), uintptr(pos))
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_mmap_trampoline()
+
+//go:linkname libc_mmap libc_mmap
+//go:cgo_import_dynamic libc_mmap mmap "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_munmap_trampoline), uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_munmap_trampoline()
+
+//go:linkname libc_munmap libc_munmap
+//go:cgo_import_dynamic libc_munmap munmap "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_read_trampoline), uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_write_trampoline), uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fstat_trampoline), uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fstat_trampoline()
+
+//go:linkname libc_fstat libc_fstat
+//go:cgo_import_dynamic libc_fstat fstat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall6(funcPC(libc_fstatat_trampoline), uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fstatat_trampoline()
+
+//go:linkname libc_fstatat libc_fstatat
+//go:cgo_import_dynamic libc_fstatat fstatat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, stat *Statfs_t) (err error) {
+	_, _, e1 := syscall_syscall(funcPC(libc_fstatfs_trampoline), uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_fstatfs_trampoline()
+
+//go:linkname libc_fstatfs libc_fstatfs
+//go:cgo_import_dynamic libc_fstatfs fstatfs "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getfsstat(buf unsafe.Pointer, size uintptr, flags int) (n int, err error) {
+	r0, _, e1 := syscall_syscall(funcPC(libc_getfsstat_trampoline), uintptr(buf), uintptr(size), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_getfsstat_trampoline()
+
+//go:linkname libc_getfsstat libc_getfsstat
+//go:cgo_import_dynamic libc_getfsstat getfsstat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_lstat_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_lstat_trampoline()
+
+//go:linkname libc_lstat libc_lstat
+//go:cgo_import_dynamic libc_lstat lstat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_stat_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_stat_trampoline()
+
+//go:linkname libc_stat libc_stat
+//go:cgo_import_dynamic libc_stat stat "/usr/lib/libSystem.B.dylib"
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, stat *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := syscall_syscall(funcPC(libc_statfs_trampoline), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+func libc_statfs_trampoline()
+
+//go:linkname libc_statfs libc_statfs
+//go:cgo_import_dynamic libc_statfs statfs "/usr/lib/libSystem.B.dylib"
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm64.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm64.s
new file mode 100644
index 000000000..16aebee23
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_darwin_arm64.s
@@ -0,0 +1,288 @@
+// go run mkasm_darwin.go arm64
+// Code generated by the command above; DO NOT EDIT.
+
+// +build go1.12
+
+#include "textflag.h"
+TEXT ·libc_getgroups_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getgroups(SB)
+TEXT ·libc_setgroups_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setgroups(SB)
+TEXT ·libc_wait4_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_wait4(SB)
+TEXT ·libc_accept_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_accept(SB)
+TEXT ·libc_bind_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_bind(SB)
+TEXT ·libc_connect_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_connect(SB)
+TEXT ·libc_socket_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_socket(SB)
+TEXT ·libc_getsockopt_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getsockopt(SB)
+TEXT ·libc_setsockopt_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setsockopt(SB)
+TEXT ·libc_getpeername_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpeername(SB)
+TEXT ·libc_getsockname_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getsockname(SB)
+TEXT ·libc_shutdown_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_shutdown(SB)
+TEXT ·libc_socketpair_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_socketpair(SB)
+TEXT ·libc_recvfrom_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_recvfrom(SB)
+TEXT ·libc_sendto_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sendto(SB)
+TEXT ·libc_recvmsg_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_recvmsg(SB)
+TEXT ·libc_sendmsg_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sendmsg(SB)
+TEXT ·libc_kevent_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_kevent(SB)
+TEXT ·libc_utimes_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_utimes(SB)
+TEXT ·libc_futimes_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_futimes(SB)
+TEXT ·libc_poll_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_poll(SB)
+TEXT ·libc_madvise_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_madvise(SB)
+TEXT ·libc_mlock_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mlock(SB)
+TEXT ·libc_mlockall_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mlockall(SB)
+TEXT ·libc_mprotect_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mprotect(SB)
+TEXT ·libc_msync_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_msync(SB)
+TEXT ·libc_munlock_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_munlock(SB)
+TEXT ·libc_munlockall_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_munlockall(SB)
+TEXT ·libc_pipe_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_pipe(SB)
+TEXT ·libc_getxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getxattr(SB)
+TEXT ·libc_fgetxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fgetxattr(SB)
+TEXT ·libc_setxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setxattr(SB)
+TEXT ·libc_fsetxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fsetxattr(SB)
+TEXT ·libc_removexattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_removexattr(SB)
+TEXT ·libc_fremovexattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fremovexattr(SB)
+TEXT ·libc_listxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_listxattr(SB)
+TEXT ·libc_flistxattr_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_flistxattr(SB)
+TEXT ·libc_setattrlist_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setattrlist(SB)
+TEXT ·libc_fcntl_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fcntl(SB)
+TEXT ·libc_kill_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_kill(SB)
+TEXT ·libc_ioctl_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_ioctl(SB)
+TEXT ·libc_sysctl_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sysctl(SB)
+TEXT ·libc_sendfile_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sendfile(SB)
+TEXT ·libc_access_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_access(SB)
+TEXT ·libc_adjtime_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_adjtime(SB)
+TEXT ·libc_chdir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chdir(SB)
+TEXT ·libc_chflags_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chflags(SB)
+TEXT ·libc_chmod_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chmod(SB)
+TEXT ·libc_chown_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chown(SB)
+TEXT ·libc_chroot_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_chroot(SB)
+TEXT ·libc_clock_gettime_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_clock_gettime(SB)
+TEXT ·libc_close_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_close(SB)
+TEXT ·libc_clonefile_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_clonefile(SB)
+TEXT ·libc_clonefileat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_clonefileat(SB)
+TEXT ·libc_dup_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_dup(SB)
+TEXT ·libc_dup2_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_dup2(SB)
+TEXT ·libc_exchangedata_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_exchangedata(SB)
+TEXT ·libc_exit_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_exit(SB)
+TEXT ·libc_faccessat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_faccessat(SB)
+TEXT ·libc_fchdir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchdir(SB)
+TEXT ·libc_fchflags_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchflags(SB)
+TEXT ·libc_fchmod_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchmod(SB)
+TEXT ·libc_fchmodat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchmodat(SB)
+TEXT ·libc_fchown_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchown(SB)
+TEXT ·libc_fchownat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fchownat(SB)
+TEXT ·libc_fclonefileat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fclonefileat(SB)
+TEXT ·libc_flock_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_flock(SB)
+TEXT ·libc_fpathconf_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fpathconf(SB)
+TEXT ·libc_fsync_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fsync(SB)
+TEXT ·libc_ftruncate_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_ftruncate(SB)
+TEXT ·libc_getcwd_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getcwd(SB)
+TEXT ·libc_getdtablesize_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getdtablesize(SB)
+TEXT ·libc_getegid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getegid(SB)
+TEXT ·libc_geteuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_geteuid(SB)
+TEXT ·libc_getgid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getgid(SB)
+TEXT ·libc_getpgid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpgid(SB)
+TEXT ·libc_getpgrp_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpgrp(SB)
+TEXT ·libc_getpid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpid(SB)
+TEXT ·libc_getppid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getppid(SB)
+TEXT ·libc_getpriority_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getpriority(SB)
+TEXT ·libc_getrlimit_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getrlimit(SB)
+TEXT ·libc_getrusage_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getrusage(SB)
+TEXT ·libc_getsid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getsid(SB)
+TEXT ·libc_gettimeofday_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_gettimeofday(SB)
+TEXT ·libc_getuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getuid(SB)
+TEXT ·libc_issetugid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_issetugid(SB)
+TEXT ·libc_kqueue_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_kqueue(SB)
+TEXT ·libc_lchown_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_lchown(SB)
+TEXT ·libc_link_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_link(SB)
+TEXT ·libc_linkat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_linkat(SB)
+TEXT ·libc_listen_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_listen(SB)
+TEXT ·libc_mkdir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mkdir(SB)
+TEXT ·libc_mkdirat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mkdirat(SB)
+TEXT ·libc_mkfifo_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mkfifo(SB)
+TEXT ·libc_mknod_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mknod(SB)
+TEXT ·libc_open_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_open(SB)
+TEXT ·libc_openat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_openat(SB)
+TEXT ·libc_pathconf_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_pathconf(SB)
+TEXT ·libc_pread_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_pread(SB)
+TEXT ·libc_pwrite_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_pwrite(SB)
+TEXT ·libc_read_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_read(SB)
+TEXT ·libc_readlink_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_readlink(SB)
+TEXT ·libc_readlinkat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_readlinkat(SB)
+TEXT ·libc_rename_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_rename(SB)
+TEXT ·libc_renameat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_renameat(SB)
+TEXT ·libc_revoke_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_revoke(SB)
+TEXT ·libc_rmdir_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_rmdir(SB)
+TEXT ·libc_lseek_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_lseek(SB)
+TEXT ·libc_select_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_select(SB)
+TEXT ·libc_setegid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setegid(SB)
+TEXT ·libc_seteuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_seteuid(SB)
+TEXT ·libc_setgid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setgid(SB)
+TEXT ·libc_setlogin_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setlogin(SB)
+TEXT ·libc_setpgid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setpgid(SB)
+TEXT ·libc_setpriority_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setpriority(SB)
+TEXT ·libc_setprivexec_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setprivexec(SB)
+TEXT ·libc_setregid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setregid(SB)
+TEXT ·libc_setreuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setreuid(SB)
+TEXT ·libc_setrlimit_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setrlimit(SB)
+TEXT ·libc_setsid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setsid(SB)
+TEXT ·libc_settimeofday_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_settimeofday(SB)
+TEXT ·libc_setuid_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_setuid(SB)
+TEXT ·libc_symlink_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_symlink(SB)
+TEXT ·libc_symlinkat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_symlinkat(SB)
+TEXT ·libc_sync_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_sync(SB)
+TEXT ·libc_truncate_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_truncate(SB)
+TEXT ·libc_umask_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_umask(SB)
+TEXT ·libc_undelete_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_undelete(SB)
+TEXT ·libc_unlink_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_unlink(SB)
+TEXT ·libc_unlinkat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_unlinkat(SB)
+TEXT ·libc_unmount_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_unmount(SB)
+TEXT ·libc_write_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_write(SB)
+TEXT ·libc_mmap_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_mmap(SB)
+TEXT ·libc_munmap_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_munmap(SB)
+TEXT ·libc_fstat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fstat(SB)
+TEXT ·libc_fstatat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fstatat(SB)
+TEXT ·libc_fstatfs_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_fstatfs(SB)
+TEXT ·libc_getfsstat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_getfsstat(SB)
+TEXT ·libc_lstat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_lstat(SB)
+TEXT ·libc_stat_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_stat(SB)
+TEXT ·libc_statfs_trampoline(SB),NOSPLIT,$0-0
+	JMP	libc_statfs(SB)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_dragonfly_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_dragonfly_amd64.go
new file mode 100644
index 000000000..fe1fdd78d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_dragonfly_amd64.go
@@ -0,0 +1,1666 @@
+// go run mksyscall.go -dragonfly -tags dragonfly,amd64 syscall_bsd.go syscall_dragonfly.go syscall_dragonfly_amd64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build dragonfly,amd64
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := Syscall6(SYS_WAIT4, uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_KEVENT, uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS___SYSCTL, uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_FUTIMES, uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MADVISE, uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := Syscall(SYS_MLOCKALL, uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MPROTECT, uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MSYNC, uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MUNLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := Syscall(SYS_MUNLOCKALL, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe() (r int, w int, err error) {
+	r0, r1, e1 := RawSyscall(SYS_PIPE, 0, 0, 0)
+	r = int(r0)
+	w = int(r1)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func extpread(fd int, p []byte, flags int, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_EXTPREAD, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(offset), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func extpwrite(fd int, p []byte, flags int, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_EXTPWRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(offset), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS___GETCWD, uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_IOCTL, uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_ACCESS, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_ADJTIME, uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHFLAGS, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHMOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHROOT, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_CLOSE, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := Syscall(SYS_DUP, uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	Syscall(SYS_EXIT, uintptr(code), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FACCESSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHDIR, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHFLAGS, uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := Syscall(SYS_FCHMOD, uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHMODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHOWNAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_FLOCK, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := Syscall(SYS_FPATHCONF, uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, stat *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FSYNC, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), 0, uintptr(length))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdents(fd int, buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_GETDENTS, uintptr(fd), uintptr(_p0), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdirentries(fd int, buf []byte, basep *uintptr) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_GETDIRENTRIES, uintptr(fd), uintptr(_p0), uintptr(len(buf)), uintptr(unsafe.Pointer(basep)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdtablesize() (size int) {
+	r0, _, _ := Syscall(SYS_GETDTABLESIZE, 0, 0, 0)
+	size = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := RawSyscall(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETEUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := RawSyscall(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETPGID, uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := RawSyscall(SYS_GETPGRP, 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := RawSyscall(SYS_GETPID, 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := RawSyscall(SYS_GETPPID, 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := Syscall(SYS_GETPRIORITY, uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRUSAGE, uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETSID, uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := Syscall(SYS_ISSETUGID, 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, signum syscall.Signal) (err error) {
+	_, _, e1 := Syscall(SYS_KILL, uintptr(pid), uintptr(signum), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_KQUEUE, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_LINKAT, uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIR, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIRAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFO, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKNOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknodat(fd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_NANOSLEEP, uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_OPEN, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_OPENAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_PATHCONF, uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READLINK, uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RENAME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_REVOKE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RMDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, _, e1 := Syscall6(SYS_LSEEK, uintptr(fd), 0, uintptr(offset), uintptr(whence), 0, 0)
+	newoffset = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEGID, uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEUID, uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGID, uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setlogin(name string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SETLOGIN, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETPGID, uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := Syscall(SYS_SETPRIORITY, uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SETSID, 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETTIMEOFDAY, uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETUID, uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, stat *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINKAT, uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := Syscall(SYS_SYNC, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), 0, uintptr(length))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := Syscall(SYS_UMASK, uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Undelete(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNDELETE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINK, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNMOUNT, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := Syscall9(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), 0, uintptr(pos), 0, 0)
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_MUNMAP, uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(fd int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (nfd int, err error) {
+	r0, _, e1 := Syscall6(SYS_ACCEPT4, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_UTIMENSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_freebsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_freebsd_386.go
new file mode 100644
index 000000000..600f1d26d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_freebsd_386.go
@@ -0,0 +1,2015 @@
+// go run mksyscall.go -l32 -tags freebsd,386 syscall_bsd.go syscall_freebsd.go syscall_freebsd_386.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build freebsd,386
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := Syscall6(SYS_WAIT4, uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_KEVENT, uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_FUTIMES, uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MADVISE, uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := Syscall(SYS_MLOCKALL, uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MPROTECT, uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MSYNC, uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MUNLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := Syscall(SYS_MUNLOCKALL, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe2(p *[2]_C_int, flags int) (err error) {
+	_, _, e1 := RawSyscall(SYS_PIPE2, uintptr(unsafe.Pointer(p)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS___GETCWD, uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_IOCTL, uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS___SYSCTL, uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ptrace(request int, pid int, addr uintptr, data int) (err error) {
+	_, _, e1 := Syscall6(SYS_PTRACE, uintptr(request), uintptr(pid), uintptr(addr), uintptr(data), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_ACCESS, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_ADJTIME, uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func CapEnter() (err error) {
+	_, _, e1 := Syscall(SYS_CAP_ENTER, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func capRightsGet(version int, fd int, rightsp *CapRights) (err error) {
+	_, _, e1 := Syscall(SYS___CAP_RIGHTS_GET, uintptr(version), uintptr(fd), uintptr(unsafe.Pointer(rightsp)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func capRightsLimit(fd int, rightsp *CapRights) (err error) {
+	_, _, e1 := Syscall(SYS_CAP_RIGHTS_LIMIT, uintptr(fd), uintptr(unsafe.Pointer(rightsp)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHFLAGS, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHMOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHROOT, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_CLOSE, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := Syscall(SYS_DUP, uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	Syscall(SYS_EXIT, uintptr(code), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteFd(fd int, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListFd(fd int, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_FD, uintptr(fd), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteFile(file string, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListFile(file string, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteLink(link string, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListLink(link string, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall6(SYS_POSIX_FADVISE, uintptr(fd), uintptr(offset), uintptr(offset>>32), uintptr(length), uintptr(length>>32), uintptr(advice))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FACCESSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHDIR, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHFLAGS, uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := Syscall(SYS_FCHMOD, uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHMODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHOWNAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_FLOCK, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := Syscall(SYS_FPATHCONF, uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstat(fd int, stat *stat_freebsd11_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstat_freebsd12(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT_FREEBSD12, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatat(fd int, path string, stat *stat_freebsd11_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatat_freebsd12(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT_FREEBSD12, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatfs(fd int, stat *statfs_freebsd11_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatfs_freebsd12(fd int, stat *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS_FREEBSD12, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FSYNC, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), uintptr(length), uintptr(length>>32))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getdirentries(fd int, buf []byte, basep *uintptr) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_GETDIRENTRIES, uintptr(fd), uintptr(_p0), uintptr(len(buf)), uintptr(unsafe.Pointer(basep)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getdirentries_freebsd12(fd int, buf []byte, basep *uint64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_GETDIRENTRIES_FREEBSD12, uintptr(fd), uintptr(_p0), uintptr(len(buf)), uintptr(unsafe.Pointer(basep)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdtablesize() (size int) {
+	r0, _, _ := Syscall(SYS_GETDTABLESIZE, 0, 0, 0)
+	size = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := RawSyscall(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETEUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := RawSyscall(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETPGID, uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := RawSyscall(SYS_GETPGRP, 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := RawSyscall(SYS_GETPID, 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := RawSyscall(SYS_GETPPID, 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := Syscall(SYS_GETPRIORITY, uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRUSAGE, uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETSID, uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := Syscall(SYS_ISSETUGID, 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, signum syscall.Signal) (err error) {
+	_, _, e1 := Syscall(SYS_KILL, uintptr(pid), uintptr(signum), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_KQUEUE, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_LINKAT, uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func lstat(path string, stat *stat_freebsd11_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIR, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIRAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFO, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKNOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mknodat(fd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mknodat_freebsd12(fd int, path string, mode uint32, dev uint64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT_FREEBSD12, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), uintptr(dev>>32), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_NANOSLEEP, uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_OPEN, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(fdat int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_OPENAT, uintptr(fdat), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_PATHCONF, uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), uintptr(offset>>32), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), uintptr(offset>>32), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READLINK, uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_READLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RENAME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_REVOKE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RMDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, r1, e1 := Syscall6(SYS_LSEEK, uintptr(fd), uintptr(offset), uintptr(offset>>32), uintptr(whence), 0, 0)
+	newoffset = int64(int64(r1)<<32 | int64(r0))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEGID, uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEUID, uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGID, uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setlogin(name string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SETLOGIN, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETPGID, uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := Syscall(SYS_SETPRIORITY, uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SETSID, 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETTIMEOFDAY, uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETUID, uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func stat(path string, stat *stat_freebsd11_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func statfs(path string, stat *statfs_freebsd11_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func statfs_freebsd12(path string, stat *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS_FREEBSD12, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINKAT, uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := Syscall(SYS_SYNC, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), uintptr(length), uintptr(length>>32))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := Syscall(SYS_UMASK, uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Undelete(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNDELETE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINK, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNMOUNT, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := Syscall9(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), uintptr(pos), uintptr(pos>>32), 0, 0)
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_MUNMAP, uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(fd int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (nfd int, err error) {
+	r0, _, e1 := Syscall6(SYS_ACCEPT4, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_UTIMENSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_freebsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_freebsd_amd64.go
new file mode 100644
index 000000000..064934b0d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_freebsd_amd64.go
@@ -0,0 +1,2015 @@
+// go run mksyscall.go -tags freebsd,amd64 syscall_bsd.go syscall_freebsd.go syscall_freebsd_amd64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build freebsd,amd64
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := Syscall6(SYS_WAIT4, uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_KEVENT, uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_FUTIMES, uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MADVISE, uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := Syscall(SYS_MLOCKALL, uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MPROTECT, uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MSYNC, uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MUNLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := Syscall(SYS_MUNLOCKALL, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe2(p *[2]_C_int, flags int) (err error) {
+	_, _, e1 := RawSyscall(SYS_PIPE2, uintptr(unsafe.Pointer(p)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS___GETCWD, uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_IOCTL, uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS___SYSCTL, uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ptrace(request int, pid int, addr uintptr, data int) (err error) {
+	_, _, e1 := Syscall6(SYS_PTRACE, uintptr(request), uintptr(pid), uintptr(addr), uintptr(data), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_ACCESS, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_ADJTIME, uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func CapEnter() (err error) {
+	_, _, e1 := Syscall(SYS_CAP_ENTER, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func capRightsGet(version int, fd int, rightsp *CapRights) (err error) {
+	_, _, e1 := Syscall(SYS___CAP_RIGHTS_GET, uintptr(version), uintptr(fd), uintptr(unsafe.Pointer(rightsp)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func capRightsLimit(fd int, rightsp *CapRights) (err error) {
+	_, _, e1 := Syscall(SYS_CAP_RIGHTS_LIMIT, uintptr(fd), uintptr(unsafe.Pointer(rightsp)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHFLAGS, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHMOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHROOT, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_CLOSE, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := Syscall(SYS_DUP, uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	Syscall(SYS_EXIT, uintptr(code), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteFd(fd int, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListFd(fd int, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_FD, uintptr(fd), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteFile(file string, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListFile(file string, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteLink(link string, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListLink(link string, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall6(SYS_POSIX_FADVISE, uintptr(fd), uintptr(offset), uintptr(length), uintptr(advice), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FACCESSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHDIR, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHFLAGS, uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := Syscall(SYS_FCHMOD, uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHMODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHOWNAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_FLOCK, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := Syscall(SYS_FPATHCONF, uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstat(fd int, stat *stat_freebsd11_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstat_freebsd12(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT_FREEBSD12, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatat(fd int, path string, stat *stat_freebsd11_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatat_freebsd12(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT_FREEBSD12, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatfs(fd int, stat *statfs_freebsd11_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatfs_freebsd12(fd int, stat *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS_FREEBSD12, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FSYNC, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getdirentries(fd int, buf []byte, basep *uintptr) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_GETDIRENTRIES, uintptr(fd), uintptr(_p0), uintptr(len(buf)), uintptr(unsafe.Pointer(basep)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getdirentries_freebsd12(fd int, buf []byte, basep *uint64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_GETDIRENTRIES_FREEBSD12, uintptr(fd), uintptr(_p0), uintptr(len(buf)), uintptr(unsafe.Pointer(basep)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdtablesize() (size int) {
+	r0, _, _ := Syscall(SYS_GETDTABLESIZE, 0, 0, 0)
+	size = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := RawSyscall(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETEUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := RawSyscall(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETPGID, uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := RawSyscall(SYS_GETPGRP, 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := RawSyscall(SYS_GETPID, 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := RawSyscall(SYS_GETPPID, 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := Syscall(SYS_GETPRIORITY, uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRUSAGE, uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETSID, uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := Syscall(SYS_ISSETUGID, 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, signum syscall.Signal) (err error) {
+	_, _, e1 := Syscall(SYS_KILL, uintptr(pid), uintptr(signum), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_KQUEUE, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_LINKAT, uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func lstat(path string, stat *stat_freebsd11_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIR, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIRAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFO, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKNOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mknodat(fd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mknodat_freebsd12(fd int, path string, mode uint32, dev uint64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT_FREEBSD12, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_NANOSLEEP, uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_OPEN, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(fdat int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_OPENAT, uintptr(fdat), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_PATHCONF, uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READLINK, uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_READLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RENAME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_REVOKE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RMDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, _, e1 := Syscall(SYS_LSEEK, uintptr(fd), uintptr(offset), uintptr(whence))
+	newoffset = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEGID, uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEUID, uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGID, uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setlogin(name string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SETLOGIN, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETPGID, uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := Syscall(SYS_SETPRIORITY, uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SETSID, 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETTIMEOFDAY, uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETUID, uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func stat(path string, stat *stat_freebsd11_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func statfs(path string, stat *statfs_freebsd11_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func statfs_freebsd12(path string, stat *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS_FREEBSD12, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINKAT, uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := Syscall(SYS_SYNC, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := Syscall(SYS_UMASK, uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Undelete(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNDELETE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINK, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNMOUNT, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := Syscall6(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), uintptr(pos))
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_MUNMAP, uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(fd int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (nfd int, err error) {
+	r0, _, e1 := Syscall6(SYS_ACCEPT4, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_UTIMENSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_freebsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_freebsd_arm.go
new file mode 100644
index 000000000..31d2c4616
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_freebsd_arm.go
@@ -0,0 +1,2015 @@
+// go run mksyscall.go -l32 -arm -tags freebsd,arm syscall_bsd.go syscall_freebsd.go syscall_freebsd_arm.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build freebsd,arm
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := Syscall6(SYS_WAIT4, uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_KEVENT, uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_FUTIMES, uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MADVISE, uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := Syscall(SYS_MLOCKALL, uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MPROTECT, uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MSYNC, uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MUNLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := Syscall(SYS_MUNLOCKALL, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS___SYSCTL, uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe2(p *[2]_C_int, flags int) (err error) {
+	_, _, e1 := RawSyscall(SYS_PIPE2, uintptr(unsafe.Pointer(p)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS___GETCWD, uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_IOCTL, uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ptrace(request int, pid int, addr uintptr, data int) (err error) {
+	_, _, e1 := Syscall6(SYS_PTRACE, uintptr(request), uintptr(pid), uintptr(addr), uintptr(data), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_ACCESS, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_ADJTIME, uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func CapEnter() (err error) {
+	_, _, e1 := Syscall(SYS_CAP_ENTER, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func capRightsGet(version int, fd int, rightsp *CapRights) (err error) {
+	_, _, e1 := Syscall(SYS___CAP_RIGHTS_GET, uintptr(version), uintptr(fd), uintptr(unsafe.Pointer(rightsp)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func capRightsLimit(fd int, rightsp *CapRights) (err error) {
+	_, _, e1 := Syscall(SYS_CAP_RIGHTS_LIMIT, uintptr(fd), uintptr(unsafe.Pointer(rightsp)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHFLAGS, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHMOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHROOT, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_CLOSE, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := Syscall(SYS_DUP, uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	Syscall(SYS_EXIT, uintptr(code), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteFd(fd int, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListFd(fd int, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_FD, uintptr(fd), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteFile(file string, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListFile(file string, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteLink(link string, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListLink(link string, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall9(SYS_POSIX_FADVISE, uintptr(fd), 0, uintptr(offset), uintptr(offset>>32), uintptr(length), uintptr(length>>32), uintptr(advice), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FACCESSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHDIR, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHFLAGS, uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := Syscall(SYS_FCHMOD, uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHMODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHOWNAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_FLOCK, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := Syscall(SYS_FPATHCONF, uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstat(fd int, stat *stat_freebsd11_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstat_freebsd12(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT_FREEBSD12, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatat(fd int, path string, stat *stat_freebsd11_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatat_freebsd12(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT_FREEBSD12, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatfs(fd int, stat *statfs_freebsd11_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatfs_freebsd12(fd int, stat *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS_FREEBSD12, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FSYNC, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FTRUNCATE, uintptr(fd), 0, uintptr(length), uintptr(length>>32), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getdirentries(fd int, buf []byte, basep *uintptr) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_GETDIRENTRIES, uintptr(fd), uintptr(_p0), uintptr(len(buf)), uintptr(unsafe.Pointer(basep)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getdirentries_freebsd12(fd int, buf []byte, basep *uint64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_GETDIRENTRIES_FREEBSD12, uintptr(fd), uintptr(_p0), uintptr(len(buf)), uintptr(unsafe.Pointer(basep)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdtablesize() (size int) {
+	r0, _, _ := Syscall(SYS_GETDTABLESIZE, 0, 0, 0)
+	size = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := RawSyscall(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETEUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := RawSyscall(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETPGID, uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := RawSyscall(SYS_GETPGRP, 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := RawSyscall(SYS_GETPID, 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := RawSyscall(SYS_GETPPID, 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := Syscall(SYS_GETPRIORITY, uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRUSAGE, uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETSID, uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := Syscall(SYS_ISSETUGID, 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, signum syscall.Signal) (err error) {
+	_, _, e1 := Syscall(SYS_KILL, uintptr(pid), uintptr(signum), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_KQUEUE, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_LINKAT, uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func lstat(path string, stat *stat_freebsd11_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIR, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIRAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFO, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKNOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mknodat(fd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mknodat_freebsd12(fd int, path string, mode uint32, dev uint64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT_FREEBSD12, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_NANOSLEEP, uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_OPEN, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(fdat int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_OPENAT, uintptr(fdat), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_PATHCONF, uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), uintptr(offset>>32))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), uintptr(offset>>32))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READLINK, uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_READLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RENAME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_REVOKE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RMDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, r1, e1 := Syscall6(SYS_LSEEK, uintptr(fd), 0, uintptr(offset), uintptr(offset>>32), uintptr(whence), 0)
+	newoffset = int64(int64(r1)<<32 | int64(r0))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEGID, uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEUID, uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGID, uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setlogin(name string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SETLOGIN, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETPGID, uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := Syscall(SYS_SETPRIORITY, uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SETSID, 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETTIMEOFDAY, uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETUID, uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func stat(path string, stat *stat_freebsd11_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func statfs(path string, stat *statfs_freebsd11_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func statfs_freebsd12(path string, stat *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS_FREEBSD12, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINKAT, uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := Syscall(SYS_SYNC, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), 0, uintptr(length), uintptr(length>>32), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := Syscall(SYS_UMASK, uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Undelete(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNDELETE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINK, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNMOUNT, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := Syscall9(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), 0, uintptr(pos), uintptr(pos>>32), 0)
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_MUNMAP, uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(fd int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (nfd int, err error) {
+	r0, _, e1 := Syscall6(SYS_ACCEPT4, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_UTIMENSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_freebsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_freebsd_arm64.go
new file mode 100644
index 000000000..4adaaa561
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_freebsd_arm64.go
@@ -0,0 +1,2015 @@
+// go run mksyscall.go -tags freebsd,arm64 syscall_bsd.go syscall_freebsd.go syscall_freebsd_arm64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build freebsd,arm64
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := Syscall6(SYS_WAIT4, uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_KEVENT, uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_FUTIMES, uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MADVISE, uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := Syscall(SYS_MLOCKALL, uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MPROTECT, uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MSYNC, uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MUNLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := Syscall(SYS_MUNLOCKALL, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe2(p *[2]_C_int, flags int) (err error) {
+	_, _, e1 := RawSyscall(SYS_PIPE2, uintptr(unsafe.Pointer(p)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS___GETCWD, uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_IOCTL, uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS___SYSCTL, uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ptrace(request int, pid int, addr uintptr, data int) (err error) {
+	_, _, e1 := Syscall6(SYS_PTRACE, uintptr(request), uintptr(pid), uintptr(addr), uintptr(data), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_ACCESS, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_ADJTIME, uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func CapEnter() (err error) {
+	_, _, e1 := Syscall(SYS_CAP_ENTER, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func capRightsGet(version int, fd int, rightsp *CapRights) (err error) {
+	_, _, e1 := Syscall(SYS___CAP_RIGHTS_GET, uintptr(version), uintptr(fd), uintptr(unsafe.Pointer(rightsp)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func capRightsLimit(fd int, rightsp *CapRights) (err error) {
+	_, _, e1 := Syscall(SYS_CAP_RIGHTS_LIMIT, uintptr(fd), uintptr(unsafe.Pointer(rightsp)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHFLAGS, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHMOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHROOT, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_CLOSE, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := Syscall(SYS_DUP, uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	Syscall(SYS_EXIT, uintptr(code), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteFd(fd int, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListFd(fd int, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_FD, uintptr(fd), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteFile(file string, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListFile(file string, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteLink(link string, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListLink(link string, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall6(SYS_POSIX_FADVISE, uintptr(fd), uintptr(offset), uintptr(length), uintptr(advice), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FACCESSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHDIR, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHFLAGS, uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := Syscall(SYS_FCHMOD, uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHMODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHOWNAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_FLOCK, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := Syscall(SYS_FPATHCONF, uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstat(fd int, stat *stat_freebsd11_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstat_freebsd12(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT_FREEBSD12, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatat(fd int, path string, stat *stat_freebsd11_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatat_freebsd12(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT_FREEBSD12, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatfs(fd int, stat *statfs_freebsd11_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatfs_freebsd12(fd int, stat *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS_FREEBSD12, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FSYNC, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getdirentries(fd int, buf []byte, basep *uintptr) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_GETDIRENTRIES, uintptr(fd), uintptr(_p0), uintptr(len(buf)), uintptr(unsafe.Pointer(basep)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getdirentries_freebsd12(fd int, buf []byte, basep *uint64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_GETDIRENTRIES_FREEBSD12, uintptr(fd), uintptr(_p0), uintptr(len(buf)), uintptr(unsafe.Pointer(basep)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdtablesize() (size int) {
+	r0, _, _ := Syscall(SYS_GETDTABLESIZE, 0, 0, 0)
+	size = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := RawSyscall(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETEUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := RawSyscall(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETPGID, uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := RawSyscall(SYS_GETPGRP, 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := RawSyscall(SYS_GETPID, 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := RawSyscall(SYS_GETPPID, 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := Syscall(SYS_GETPRIORITY, uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRUSAGE, uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETSID, uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := Syscall(SYS_ISSETUGID, 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, signum syscall.Signal) (err error) {
+	_, _, e1 := Syscall(SYS_KILL, uintptr(pid), uintptr(signum), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_KQUEUE, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_LINKAT, uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func lstat(path string, stat *stat_freebsd11_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIR, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIRAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFO, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKNOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mknodat(fd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mknodat_freebsd12(fd int, path string, mode uint32, dev uint64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT_FREEBSD12, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_NANOSLEEP, uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_OPEN, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(fdat int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_OPENAT, uintptr(fdat), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_PATHCONF, uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READLINK, uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_READLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RENAME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_REVOKE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RMDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, _, e1 := Syscall(SYS_LSEEK, uintptr(fd), uintptr(offset), uintptr(whence))
+	newoffset = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEGID, uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEUID, uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGID, uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setlogin(name string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SETLOGIN, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETPGID, uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := Syscall(SYS_SETPRIORITY, uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SETSID, 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETTIMEOFDAY, uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETUID, uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func stat(path string, stat *stat_freebsd11_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func statfs(path string, stat *statfs_freebsd11_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func statfs_freebsd12(path string, stat *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS_FREEBSD12, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINKAT, uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := Syscall(SYS_SYNC, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := Syscall(SYS_UMASK, uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Undelete(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNDELETE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINK, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNMOUNT, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := Syscall6(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), uintptr(pos))
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_MUNMAP, uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(fd int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (nfd int, err error) {
+	r0, _, e1 := Syscall6(SYS_ACCEPT4, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_UTIMENSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_illumos_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_illumos_amd64.go
new file mode 100644
index 000000000..d3af083f4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_illumos_amd64.go
@@ -0,0 +1,114 @@
+// go run mksyscall_solaris.go -illumos -tags illumos,amd64 syscall_illumos.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build illumos,amd64
+
+package unix
+
+import (
+	"unsafe"
+)
+
+//go:cgo_import_dynamic libc_readv readv "libc.so"
+//go:cgo_import_dynamic libc_preadv preadv "libc.so"
+//go:cgo_import_dynamic libc_writev writev "libc.so"
+//go:cgo_import_dynamic libc_pwritev pwritev "libc.so"
+//go:cgo_import_dynamic libc_accept4 accept4 "libsocket.so"
+//go:cgo_import_dynamic libc_pipe2 pipe2 "libc.so"
+
+//go:linkname procreadv libc_readv
+//go:linkname procpreadv libc_preadv
+//go:linkname procwritev libc_writev
+//go:linkname procpwritev libc_pwritev
+//go:linkname procaccept4 libc_accept4
+//go:linkname procpipe2 libc_pipe2
+
+var (
+	procreadv,
+	procpreadv,
+	procwritev,
+	procpwritev,
+	procaccept4,
+	procpipe2 syscallFunc
+)
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readv(fd int, iovs []Iovec) (n int, err error) {
+	var _p0 *Iovec
+	if len(iovs) > 0 {
+		_p0 = &iovs[0]
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procreadv)), 3, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(len(iovs)), 0, 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func preadv(fd int, iovs []Iovec, off int64) (n int, err error) {
+	var _p0 *Iovec
+	if len(iovs) > 0 {
+		_p0 = &iovs[0]
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procpreadv)), 4, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(len(iovs)), uintptr(off), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writev(fd int, iovs []Iovec) (n int, err error) {
+	var _p0 *Iovec
+	if len(iovs) > 0 {
+		_p0 = &iovs[0]
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procwritev)), 3, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(len(iovs)), 0, 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pwritev(fd int, iovs []Iovec, off int64) (n int, err error) {
+	var _p0 *Iovec
+	if len(iovs) > 0 {
+		_p0 = &iovs[0]
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procpwritev)), 4, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(len(iovs)), uintptr(off), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procaccept4)), 4, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe2(p *[2]_C_int, flags int) (err error) {
+	_, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procpipe2)), 2, uintptr(unsafe.Pointer(p)), uintptr(flags), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux.go
new file mode 100644
index 000000000..2fbbbe5a8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux.go
@@ -0,0 +1,1933 @@
+// Code generated by mkmerge.go; DO NOT EDIT.
+
+// +build linux
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func FanotifyInit(flags uint, event_f_flags uint) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_FANOTIFY_INIT, uintptr(flags), uintptr(event_f_flags), 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fchmodat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_FCHMODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_IOCTL, uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(olddirfd int, oldpath string, newdirfd int, newpath string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_LINKAT, uintptr(olddirfd), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func openat(dirfd int, path string, flags int, mode uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_OPENAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags), uintptr(mode), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func openat2(dirfd int, path string, open_how *OpenHow, size int) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_OPENAT2, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(open_how)), uintptr(size), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ppoll(fds *PollFd, nfds int, timeout *Timespec, sigmask *Sigset_t) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_PPOLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(unsafe.Pointer(timeout)), uintptr(unsafe.Pointer(sigmask)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_READLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINKAT, uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_UTIMENSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_GETCWD, uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := Syscall6(SYS_WAIT4, uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func KeyctlInt(cmd int, arg2 int, arg3 int, arg4 int, arg5 int) (ret int, err error) {
+	r0, _, e1 := Syscall6(SYS_KEYCTL, uintptr(cmd), uintptr(arg2), uintptr(arg3), uintptr(arg4), uintptr(arg5), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func KeyctlBuffer(cmd int, arg2 int, buf []byte, arg5 int) (ret int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_KEYCTL, uintptr(cmd), uintptr(arg2), uintptr(_p0), uintptr(len(buf)), uintptr(arg5), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func keyctlJoin(cmd int, arg2 string) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(arg2)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_KEYCTL, uintptr(cmd), uintptr(unsafe.Pointer(_p0)), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func keyctlSearch(cmd int, arg2 int, arg3 string, arg4 string, arg5 int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(arg3)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(arg4)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_KEYCTL, uintptr(cmd), uintptr(arg2), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(arg5), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func keyctlIOV(cmd int, arg2 int, payload []Iovec, arg5 int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(payload) > 0 {
+		_p0 = unsafe.Pointer(&payload[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_KEYCTL, uintptr(cmd), uintptr(arg2), uintptr(_p0), uintptr(len(payload)), uintptr(arg5), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func keyctlDH(cmd int, arg2 *KeyctlDHParams, buf []byte) (ret int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_KEYCTL, uintptr(cmd), uintptr(unsafe.Pointer(arg2)), uintptr(_p0), uintptr(len(buf)), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func keyctlRestrictKeyringByType(cmd int, arg2 int, keyType string, restriction string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(keyType)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(restriction)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_KEYCTL, uintptr(cmd), uintptr(arg2), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func keyctlRestrictKeyring(cmd int, arg2 int) (err error) {
+	_, _, e1 := Syscall(SYS_KEYCTL, uintptr(cmd), uintptr(arg2), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ptrace(request int, pid int, addr uintptr, data uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_PTRACE, uintptr(request), uintptr(pid), uintptr(addr), uintptr(data), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func reboot(magic1 uint, magic2 uint, cmd int, arg string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(arg)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_REBOOT, uintptr(magic1), uintptr(magic2), uintptr(cmd), uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mount(source string, target string, fstype string, flags uintptr, data *byte) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(source)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(target)
+	if err != nil {
+		return
+	}
+	var _p2 *byte
+	_p2, err = BytePtrFromString(fstype)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MOUNT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(unsafe.Pointer(_p2)), uintptr(flags), uintptr(unsafe.Pointer(data)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Acct(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_ACCT, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func AddKey(keyType string, description string, payload []byte, ringid int) (id int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(keyType)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(description)
+	if err != nil {
+		return
+	}
+	var _p2 unsafe.Pointer
+	if len(payload) > 0 {
+		_p2 = unsafe.Pointer(&payload[0])
+	} else {
+		_p2 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_ADD_KEY, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(_p2), uintptr(len(payload)), uintptr(ringid), 0)
+	id = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtimex(buf *Timex) (state int, err error) {
+	r0, _, e1 := Syscall(SYS_ADJTIMEX, uintptr(unsafe.Pointer(buf)), 0, 0)
+	state = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Capget(hdr *CapUserHeader, data *CapUserData) (err error) {
+	_, _, e1 := RawSyscall(SYS_CAPGET, uintptr(unsafe.Pointer(hdr)), uintptr(unsafe.Pointer(data)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Capset(hdr *CapUserHeader, data *CapUserData) (err error) {
+	_, _, e1 := RawSyscall(SYS_CAPSET, uintptr(unsafe.Pointer(hdr)), uintptr(unsafe.Pointer(data)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHROOT, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ClockGetres(clockid int32, res *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_CLOCK_GETRES, uintptr(clockid), uintptr(unsafe.Pointer(res)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ClockGettime(clockid int32, time *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_CLOCK_GETTIME, uintptr(clockid), uintptr(unsafe.Pointer(time)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ClockNanosleep(clockid int32, flags int, request *Timespec, remain *Timespec) (err error) {
+	_, _, e1 := Syscall6(SYS_CLOCK_NANOSLEEP, uintptr(clockid), uintptr(flags), uintptr(unsafe.Pointer(request)), uintptr(unsafe.Pointer(remain)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_CLOSE, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func CopyFileRange(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_COPY_FILE_RANGE, uintptr(rfd), uintptr(unsafe.Pointer(roff)), uintptr(wfd), uintptr(unsafe.Pointer(woff)), uintptr(len), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func DeleteModule(name string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_DELETE_MODULE, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(oldfd int) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_DUP, uintptr(oldfd), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup3(oldfd int, newfd int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP3, uintptr(oldfd), uintptr(newfd), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollCreate1(flag int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_EPOLL_CREATE1, uintptr(flag), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollCtl(epfd int, op int, fd int, event *EpollEvent) (err error) {
+	_, _, e1 := RawSyscall6(SYS_EPOLL_CTL, uintptr(epfd), uintptr(op), uintptr(fd), uintptr(unsafe.Pointer(event)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Eventfd(initval uint, flags int) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_EVENTFD2, uintptr(initval), uintptr(flags), 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	SyscallNoError(SYS_EXIT_GROUP, uintptr(code), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHDIR, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := Syscall(SYS_FCHMOD, uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHOWNAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fdatasync(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FDATASYNC, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fgetxattr(fd int, attr string, dest []byte) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(dest) > 0 {
+		_p1 = unsafe.Pointer(&dest[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_FGETXATTR, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(dest)), 0, 0)
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func FinitModule(fd int, params string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(params)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_FINIT_MODULE, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flistxattr(fd int, dest []byte) (sz int, err error) {
+	var _p0 unsafe.Pointer
+	if len(dest) > 0 {
+		_p0 = unsafe.Pointer(&dest[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_FLISTXATTR, uintptr(fd), uintptr(_p0), uintptr(len(dest)))
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_FLOCK, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fremovexattr(fd int, attr string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_FREMOVEXATTR, uintptr(fd), uintptr(unsafe.Pointer(_p0)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsetxattr(fd int, attr string, dest []byte, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(dest) > 0 {
+		_p1 = unsafe.Pointer(&dest[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_FSETXATTR, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(dest)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FSYNC, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdents(fd int, buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_GETDENTS64, uintptr(fd), uintptr(_p0), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETPGID, uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _ := RawSyscallNoError(SYS_GETPID, 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _ := RawSyscallNoError(SYS_GETPPID, 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := Syscall(SYS_GETPRIORITY, uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrandom(buf []byte, flags int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_GETRANDOM, uintptr(_p0), uintptr(len(buf)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRUSAGE, uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETSID, uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettid() (tid int) {
+	r0, _ := RawSyscallNoError(SYS_GETTID, 0, 0, 0)
+	tid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getxattr(path string, attr string, dest []byte) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	var _p2 unsafe.Pointer
+	if len(dest) > 0 {
+		_p2 = unsafe.Pointer(&dest[0])
+	} else {
+		_p2 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_GETXATTR, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(_p2), uintptr(len(dest)), 0, 0)
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func InitModule(moduleImage []byte, params string) (err error) {
+	var _p0 unsafe.Pointer
+	if len(moduleImage) > 0 {
+		_p0 = unsafe.Pointer(&moduleImage[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(params)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_INIT_MODULE, uintptr(_p0), uintptr(len(moduleImage)), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func InotifyAddWatch(fd int, pathname string, mask uint32) (watchdesc int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(pathname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_INOTIFY_ADD_WATCH, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(mask))
+	watchdesc = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func InotifyInit1(flags int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_INOTIFY_INIT1, uintptr(flags), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func InotifyRmWatch(fd int, watchdesc uint32) (success int, err error) {
+	r0, _, e1 := RawSyscall(SYS_INOTIFY_RM_WATCH, uintptr(fd), uintptr(watchdesc), 0)
+	success = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, sig syscall.Signal) (err error) {
+	_, _, e1 := RawSyscall(SYS_KILL, uintptr(pid), uintptr(sig), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Klogctl(typ int, buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_SYSLOG, uintptr(typ), uintptr(_p0), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lgetxattr(path string, attr string, dest []byte) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	var _p2 unsafe.Pointer
+	if len(dest) > 0 {
+		_p2 = unsafe.Pointer(&dest[0])
+	} else {
+		_p2 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_LGETXATTR, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(_p2), uintptr(len(dest)), 0, 0)
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listxattr(path string, dest []byte) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(dest) > 0 {
+		_p1 = unsafe.Pointer(&dest[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_LISTXATTR, uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(dest)))
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Llistxattr(path string, dest []byte) (sz int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(dest) > 0 {
+		_p1 = unsafe.Pointer(&dest[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_LLISTXATTR, uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(dest)))
+	sz = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lremovexattr(path string, attr string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LREMOVEXATTR, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lsetxattr(path string, attr string, data []byte, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	var _p2 unsafe.Pointer
+	if len(data) > 0 {
+		_p2 = unsafe.Pointer(&data[0])
+	} else {
+		_p2 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_LSETXATTR, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(_p2), uintptr(len(data)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func MemfdCreate(name string, flags int) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_MEMFD_CREATE, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIRAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknodat(dirfd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_NANOSLEEP, uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func PerfEventOpen(attr *PerfEventAttr, pid int, cpu int, groupFd int, flags int) (fd int, err error) {
+	r0, _, e1 := Syscall6(SYS_PERF_EVENT_OPEN, uintptr(unsafe.Pointer(attr)), uintptr(pid), uintptr(cpu), uintptr(groupFd), uintptr(flags), 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func PivotRoot(newroot string, putold string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(newroot)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(putold)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_PIVOT_ROOT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func prlimit(pid int, resource int, newlimit *Rlimit, old *Rlimit) (err error) {
+	_, _, e1 := RawSyscall6(SYS_PRLIMIT64, uintptr(pid), uintptr(resource), uintptr(unsafe.Pointer(newlimit)), uintptr(unsafe.Pointer(old)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Prctl(option int, arg2 uintptr, arg3 uintptr, arg4 uintptr, arg5 uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_PRCTL, uintptr(option), uintptr(arg2), uintptr(arg3), uintptr(arg4), uintptr(arg5), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pselect(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timespec, sigmask *Sigset_t) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_PSELECT6, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), uintptr(unsafe.Pointer(sigmask)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Removexattr(path string, attr string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_REMOVEXATTR, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat2(olddirfd int, oldpath string, newdirfd int, newpath string, flags uint) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT2, uintptr(olddirfd), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func RequestKey(keyType string, description string, callback string, destRingid int) (id int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(keyType)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(description)
+	if err != nil {
+		return
+	}
+	var _p2 *byte
+	_p2, err = BytePtrFromString(callback)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_REQUEST_KEY, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(unsafe.Pointer(_p2)), uintptr(destRingid), 0, 0)
+	id = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setdomainname(p []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_SETDOMAINNAME, uintptr(_p0), uintptr(len(p)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sethostname(p []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_SETHOSTNAME, uintptr(_p0), uintptr(len(p)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETPGID, uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SETSID, 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setns(fd int, nstype int) (err error) {
+	_, _, e1 := Syscall(SYS_SETNS, uintptr(fd), uintptr(nstype), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := Syscall(SYS_SETPRIORITY, uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setxattr(path string, attr string, data []byte, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attr)
+	if err != nil {
+		return
+	}
+	var _p2 unsafe.Pointer
+	if len(data) > 0 {
+		_p2 = unsafe.Pointer(&data[0])
+	} else {
+		_p2 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SETXATTR, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(_p2), uintptr(len(data)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func signalfd(fd int, sigmask *Sigset_t, maskSize uintptr, flags int) (newfd int, err error) {
+	r0, _, e1 := Syscall6(SYS_SIGNALFD4, uintptr(fd), uintptr(unsafe.Pointer(sigmask)), uintptr(maskSize), uintptr(flags), 0, 0)
+	newfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statx(dirfd int, path string, flags int, mask int, stat *Statx_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_STATX, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags), uintptr(mask), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() {
+	SyscallNoError(SYS_SYNC, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Syncfs(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_SYNCFS, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sysinfo(info *Sysinfo_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SYSINFO, uintptr(unsafe.Pointer(info)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func TimerfdCreate(clockid int, flags int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_TIMERFD_CREATE, uintptr(clockid), uintptr(flags), 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func TimerfdGettime(fd int, currValue *ItimerSpec) (err error) {
+	_, _, e1 := RawSyscall(SYS_TIMERFD_GETTIME, uintptr(fd), uintptr(unsafe.Pointer(currValue)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func TimerfdSettime(fd int, flags int, newValue *ItimerSpec, oldValue *ItimerSpec) (err error) {
+	_, _, e1 := RawSyscall6(SYS_TIMERFD_SETTIME, uintptr(fd), uintptr(flags), uintptr(unsafe.Pointer(newValue)), uintptr(unsafe.Pointer(oldValue)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Tgkill(tgid int, tid int, sig syscall.Signal) (err error) {
+	_, _, e1 := RawSyscall(SYS_TGKILL, uintptr(tgid), uintptr(tid), uintptr(sig))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Times(tms *Tms) (ticks uintptr, err error) {
+	r0, _, e1 := RawSyscall(SYS_TIMES, uintptr(unsafe.Pointer(tms)), 0, 0)
+	ticks = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(mask int) (oldmask int) {
+	r0, _ := RawSyscallNoError(SYS_UMASK, uintptr(mask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Uname(buf *Utsname) (err error) {
+	_, _, e1 := RawSyscall(SYS_UNAME, uintptr(unsafe.Pointer(buf)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(target string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(target)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UMOUNT2, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unshare(flags int) (err error) {
+	_, _, e1 := Syscall(SYS_UNSHARE, uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func exitThread(code int) (err error) {
+	_, _, e1 := Syscall(SYS_EXIT, uintptr(code), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, p *byte, np int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(unsafe.Pointer(p)), uintptr(np))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, p *byte, np int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(unsafe.Pointer(p)), uintptr(np))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readv(fd int, iovs []Iovec) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(iovs) > 0 {
+		_p0 = unsafe.Pointer(&iovs[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READV, uintptr(fd), uintptr(_p0), uintptr(len(iovs)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writev(fd int, iovs []Iovec) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(iovs) > 0 {
+		_p0 = unsafe.Pointer(&iovs[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_WRITEV, uintptr(fd), uintptr(_p0), uintptr(len(iovs)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func preadv(fd int, iovs []Iovec, offs_l uintptr, offs_h uintptr) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(iovs) > 0 {
+		_p0 = unsafe.Pointer(&iovs[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREADV, uintptr(fd), uintptr(_p0), uintptr(len(iovs)), uintptr(offs_l), uintptr(offs_h), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pwritev(fd int, iovs []Iovec, offs_l uintptr, offs_h uintptr) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(iovs) > 0 {
+		_p0 = unsafe.Pointer(&iovs[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITEV, uintptr(fd), uintptr(_p0), uintptr(len(iovs)), uintptr(offs_l), uintptr(offs_h), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func preadv2(fd int, iovs []Iovec, offs_l uintptr, offs_h uintptr, flags int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(iovs) > 0 {
+		_p0 = unsafe.Pointer(&iovs[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREADV2, uintptr(fd), uintptr(_p0), uintptr(len(iovs)), uintptr(offs_l), uintptr(offs_h), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pwritev2(fd int, iovs []Iovec, offs_l uintptr, offs_h uintptr, flags int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(iovs) > 0 {
+		_p0 = unsafe.Pointer(&iovs[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITEV2, uintptr(fd), uintptr(_p0), uintptr(len(iovs)), uintptr(offs_l), uintptr(offs_h), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_MUNMAP, uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, advice int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MADVISE, uintptr(_p0), uintptr(len(b)), uintptr(advice))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MPROTECT, uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := Syscall(SYS_MLOCKALL, uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MSYNC, uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MUNLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := Syscall(SYS_MUNLOCKALL, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func faccessat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_FACCESSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat2(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FACCESSAT2, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func nameToHandleAt(dirFD int, pathname string, fh *fileHandle, mountID *_C_int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(pathname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_NAME_TO_HANDLE_AT, uintptr(dirFD), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(fh)), uintptr(unsafe.Pointer(mountID)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func openByHandleAt(mountFD int, fh *fileHandle, flags int) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_OPEN_BY_HANDLE_AT, uintptr(mountFD), uintptr(unsafe.Pointer(fh)), uintptr(flags))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ProcessVMReadv(pid int, localIov []Iovec, remoteIov []RemoteIovec, flags uint) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(localIov) > 0 {
+		_p0 = unsafe.Pointer(&localIov[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	var _p1 unsafe.Pointer
+	if len(remoteIov) > 0 {
+		_p1 = unsafe.Pointer(&remoteIov[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PROCESS_VM_READV, uintptr(pid), uintptr(_p0), uintptr(len(localIov)), uintptr(_p1), uintptr(len(remoteIov)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ProcessVMWritev(pid int, localIov []Iovec, remoteIov []RemoteIovec, flags uint) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(localIov) > 0 {
+		_p0 = unsafe.Pointer(&localIov[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	var _p1 unsafe.Pointer
+	if len(remoteIov) > 0 {
+		_p1 = unsafe.Pointer(&remoteIov[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PROCESS_VM_WRITEV, uintptr(pid), uintptr(_p0), uintptr(len(localIov)), uintptr(_p1), uintptr(len(remoteIov)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe2(p *[2]_C_int, flags int) (err error) {
+	_, _, e1 := RawSyscall(SYS_PIPE2, uintptr(unsafe.Pointer(p)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_386.go
new file mode 100644
index 000000000..19ebd3ff7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_386.go
@@ -0,0 +1,578 @@
+// go run mksyscall.go -l32 -tags linux,386 syscall_linux.go syscall_linux_386.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build linux,386
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fanotifyMark(fd int, flags uint, mask uint64, dirFd int, pathname *byte) (err error) {
+	_, _, e1 := Syscall6(SYS_FANOTIFY_MARK, uintptr(fd), uintptr(flags), uintptr(mask), uintptr(mask>>32), uintptr(dirFd), uintptr(unsafe.Pointer(pathname)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fallocate(fd int, mode uint32, off int64, len int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FALLOCATE, uintptr(fd), uintptr(mode), uintptr(off), uintptr(off>>32), uintptr(len), uintptr(len>>32))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Tee(rfd int, wfd int, len int, flags int) (n int64, err error) {
+	r0, r1, e1 := Syscall6(SYS_TEE, uintptr(rfd), uintptr(wfd), uintptr(len), uintptr(flags), 0, 0)
+	n = int64(int64(r1)<<32 | int64(r0))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe(p *[2]_C_int) (err error) {
+	_, _, e1 := RawSyscall(SYS_PIPE, uintptr(unsafe.Pointer(p)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func dup2(oldfd int, newfd int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(oldfd), uintptr(newfd), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollCreate(size int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_EPOLL_CREATE, uintptr(size), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(events) > 0 {
+		_p0 = unsafe.Pointer(&events[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_EPOLL_WAIT, uintptr(epfd), uintptr(_p0), uintptr(len(events)), uintptr(msec), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall6(SYS_FADVISE64_64, uintptr(fd), uintptr(offset), uintptr(offset>>32), uintptr(length), uintptr(length>>32), uintptr(advice))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN32, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT64, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT64, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE64, uintptr(fd), uintptr(length), uintptr(length>>32))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEGID32, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (euid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEUID32, 0, 0, 0)
+	euid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _ := RawSyscallNoError(SYS_GETGID32, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _ := RawSyscallNoError(SYS_GETUID32, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func InotifyInit() (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_INOTIFY_INIT, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ioperm(from int, num int, on int) (err error) {
+	_, _, e1 := Syscall(SYS_IOPERM, uintptr(from), uintptr(num), uintptr(on))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Iopl(level int) (err error) {
+	_, _, e1 := Syscall(SYS_IOPL, uintptr(level), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN32, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT64, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), uintptr(offset>>32), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), uintptr(offset>>32), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(olddirfd), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	r0, _, e1 := Syscall6(SYS_SENDFILE64, uintptr(outfd), uintptr(infd), uintptr(unsafe.Pointer(offset)), uintptr(count), 0, 0)
+	written = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsgid(gid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSGID32, uintptr(gid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsuid(uid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSUID32, uintptr(uid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID32, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID32, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID32, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID32, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SPLICE, uintptr(rfd), uintptr(unsafe.Pointer(roff)), uintptr(wfd), uintptr(unsafe.Pointer(woff)), uintptr(len), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT64, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func SyncFileRange(fd int, off int64, n int64, flags int) (err error) {
+	_, _, e1 := Syscall6(SYS_SYNC_FILE_RANGE, uintptr(fd), uintptr(off), uintptr(off>>32), uintptr(n), uintptr(n>>32), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE64, uintptr(unsafe.Pointer(_p0)), uintptr(length), uintptr(length>>32))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ustat(dev int, ubuf *Ustat_t) (err error) {
+	_, _, e1 := Syscall(SYS_USTAT, uintptr(dev), uintptr(unsafe.Pointer(ubuf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(n int, list *_Gid_t) (nn int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS32, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	nn = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(n int, list *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS32, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS__NEWSELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap2(addr uintptr, length uintptr, prot int, flags int, fd int, pageOffset uintptr) (xaddr uintptr, err error) {
+	r0, _, e1 := Syscall6(SYS_MMAP2, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flags), uintptr(fd), uintptr(pageOffset))
+	xaddr = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pause() (err error) {
+	_, _, e1 := Syscall(SYS_PAUSE, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getrlimit(resource int, rlim *rlimit32) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setrlimit(resource int, rlim *rlimit32) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimesat(dirfd int, path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_FUTIMESAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Time(t *Time_t) (tt Time_t, err error) {
+	r0, _, e1 := RawSyscall(SYS_TIME, uintptr(unsafe.Pointer(t)), 0, 0)
+	tt = Time_t(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Utime(path string, buf *Utimbuf) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_amd64.go
new file mode 100644
index 000000000..5c562182a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_amd64.go
@@ -0,0 +1,745 @@
+// go run mksyscall.go -tags linux,amd64 syscall_linux.go syscall_linux_amd64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build linux,amd64
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fanotifyMark(fd int, flags uint, mask uint64, dirFd int, pathname *byte) (err error) {
+	_, _, e1 := Syscall6(SYS_FANOTIFY_MARK, uintptr(fd), uintptr(flags), uintptr(mask), uintptr(dirFd), uintptr(unsafe.Pointer(pathname)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fallocate(fd int, mode uint32, off int64, len int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FALLOCATE, uintptr(fd), uintptr(mode), uintptr(off), uintptr(len), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Tee(rfd int, wfd int, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_TEE, uintptr(rfd), uintptr(wfd), uintptr(len), uintptr(flags), 0, 0)
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func dup2(oldfd int, newfd int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(oldfd), uintptr(newfd), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollCreate(size int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_EPOLL_CREATE, uintptr(size), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(events) > 0 {
+		_p0 = unsafe.Pointer(&events[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_EPOLL_WAIT, uintptr(epfd), uintptr(_p0), uintptr(len(events)), uintptr(msec), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall6(SYS_FADVISE64, uintptr(fd), uintptr(offset), uintptr(length), uintptr(advice), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_NEWFSTATAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, buf *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (euid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEUID, 0, 0, 0)
+	euid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _ := RawSyscallNoError(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _ := RawSyscallNoError(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func inotifyInit() (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_INOTIFY_INIT, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ioperm(from int, num int, on int) (err error) {
+	_, _, e1 := Syscall(SYS_IOPERM, uintptr(from), uintptr(num), uintptr(on))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Iopl(level int) (err error) {
+	_, _, e1 := Syscall(SYS_IOPL, uintptr(level), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, n int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(n), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pause() (err error) {
+	_, _, e1 := Syscall(SYS_PAUSE, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(olddirfd), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (off int64, err error) {
+	r0, _, e1 := Syscall(SYS_LSEEK, uintptr(fd), uintptr(offset), uintptr(whence))
+	off = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	r0, _, e1 := Syscall6(SYS_SENDFILE, uintptr(outfd), uintptr(infd), uintptr(unsafe.Pointer(offset)), uintptr(count), 0, 0)
+	written = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsgid(gid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSGID, uintptr(gid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsuid(uid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSUID, uintptr(uid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_SPLICE, uintptr(rfd), uintptr(unsafe.Pointer(roff)), uintptr(wfd), uintptr(unsafe.Pointer(woff)), uintptr(len), uintptr(flags))
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, buf *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func SyncFileRange(fd int, off int64, n int64, flags int) (err error) {
+	_, _, e1 := Syscall6(SYS_SYNC_FILE_RANGE, uintptr(fd), uintptr(off), uintptr(n), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ustat(dev int, ubuf *Ustat_t) (err error) {
+	_, _, e1 := Syscall(SYS_USTAT, uintptr(dev), uintptr(unsafe.Pointer(ubuf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error) {
+	r0, _, e1 := Syscall6(SYS_ACCEPT4, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(n int, list *_Gid_t) (nn int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	nn = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(n int, list *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error) {
+	r0, _, e1 := Syscall6(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flags), uintptr(fd), uintptr(offset))
+	xaddr = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimesat(dirfd int, path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_FUTIMESAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Utime(path string, buf *Utimbuf) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe(p *[2]_C_int) (err error) {
+	_, _, e1 := RawSyscall(SYS_PIPE, uintptr(unsafe.Pointer(p)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kexecFileLoad(kernelFd int, initrdFd int, cmdlineLen int, cmdline string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(cmdline)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_KEXEC_FILE_LOAD, uintptr(kernelFd), uintptr(initrdFd), uintptr(cmdlineLen), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_arm.go
new file mode 100644
index 000000000..dc69d99c6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_arm.go
@@ -0,0 +1,715 @@
+// go run mksyscall.go -l32 -arm -tags linux,arm syscall_linux.go syscall_linux_arm.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build linux,arm
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fanotifyMark(fd int, flags uint, mask uint64, dirFd int, pathname *byte) (err error) {
+	_, _, e1 := Syscall6(SYS_FANOTIFY_MARK, uintptr(fd), uintptr(flags), uintptr(mask), uintptr(mask>>32), uintptr(dirFd), uintptr(unsafe.Pointer(pathname)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fallocate(fd int, mode uint32, off int64, len int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FALLOCATE, uintptr(fd), uintptr(mode), uintptr(off), uintptr(off>>32), uintptr(len), uintptr(len>>32))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Tee(rfd int, wfd int, len int, flags int) (n int64, err error) {
+	r0, r1, e1 := Syscall6(SYS_TEE, uintptr(rfd), uintptr(wfd), uintptr(len), uintptr(flags), 0, 0)
+	n = int64(int64(r1)<<32 | int64(r0))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe(p *[2]_C_int) (err error) {
+	_, _, e1 := RawSyscall(SYS_PIPE, uintptr(unsafe.Pointer(p)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error) {
+	r0, _, e1 := Syscall6(SYS_ACCEPT4, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(n int, list *_Gid_t) (nn int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS32, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	nn = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(n int, list *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS32, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, flags int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(flags), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func dup2(oldfd int, newfd int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(oldfd), uintptr(newfd), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollCreate(size int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_EPOLL_CREATE, uintptr(size), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(events) > 0 {
+		_p0 = unsafe.Pointer(&events[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_EPOLL_WAIT, uintptr(epfd), uintptr(_p0), uintptr(len(events)), uintptr(msec), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN32, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT64, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT64, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEGID32, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (euid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEUID32, 0, 0, 0)
+	euid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _ := RawSyscallNoError(SYS_GETGID32, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _ := RawSyscallNoError(SYS_GETUID32, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func InotifyInit() (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_INOTIFY_INIT, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN32, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, n int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(n), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT64, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pause() (err error) {
+	_, _, e1 := Syscall(SYS_PAUSE, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(olddirfd), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	r0, _, e1 := Syscall6(SYS_SENDFILE64, uintptr(outfd), uintptr(infd), uintptr(unsafe.Pointer(offset)), uintptr(count), 0, 0)
+	written = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS__NEWSELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsgid(gid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSGID32, uintptr(gid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsuid(uid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSUID32, uintptr(uid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID32, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID32, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID32, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID32, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SPLICE, uintptr(rfd), uintptr(unsafe.Pointer(roff)), uintptr(wfd), uintptr(unsafe.Pointer(woff)), uintptr(len), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT64, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ustat(dev int, ubuf *Ustat_t) (err error) {
+	_, _, e1 := Syscall(SYS_USTAT, uintptr(dev), uintptr(unsafe.Pointer(ubuf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimesat(dirfd int, path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_FUTIMESAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD64, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), uintptr(offset>>32))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE64, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), uintptr(offset>>32))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_TRUNCATE64, uintptr(unsafe.Pointer(_p0)), 0, uintptr(length), uintptr(length>>32), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FTRUNCATE64, uintptr(fd), 0, uintptr(length), uintptr(length>>32), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap2(addr uintptr, length uintptr, prot int, flags int, fd int, pageOffset uintptr) (xaddr uintptr, err error) {
+	r0, _, e1 := Syscall6(SYS_MMAP2, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flags), uintptr(fd), uintptr(pageOffset))
+	xaddr = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getrlimit(resource int, rlim *rlimit32) (err error) {
+	_, _, e1 := RawSyscall(SYS_UGETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setrlimit(resource int, rlim *rlimit32) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func armSyncFileRange(fd int, flags int, off int64, n int64) (err error) {
+	_, _, e1 := Syscall6(SYS_ARM_SYNC_FILE_RANGE, uintptr(fd), uintptr(flags), uintptr(off), uintptr(off>>32), uintptr(n), uintptr(n>>32))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kexecFileLoad(kernelFd int, initrdFd int, cmdlineLen int, cmdline string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(cmdline)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_KEXEC_FILE_LOAD, uintptr(kernelFd), uintptr(initrdFd), uintptr(cmdlineLen), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_arm64.go
new file mode 100644
index 000000000..1b897dee0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_arm64.go
@@ -0,0 +1,602 @@
+// go run mksyscall.go -tags linux,arm64 syscall_linux.go syscall_linux_arm64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build linux,arm64
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fanotifyMark(fd int, flags uint, mask uint64, dirFd int, pathname *byte) (err error) {
+	_, _, e1 := Syscall6(SYS_FANOTIFY_MARK, uintptr(fd), uintptr(flags), uintptr(mask), uintptr(dirFd), uintptr(unsafe.Pointer(pathname)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fallocate(fd int, mode uint32, off int64, len int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FALLOCATE, uintptr(fd), uintptr(mode), uintptr(off), uintptr(len), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Tee(rfd int, wfd int, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_TEE, uintptr(rfd), uintptr(wfd), uintptr(len), uintptr(flags), 0, 0)
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(events) > 0 {
+		_p0 = unsafe.Pointer(&events[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_EPOLL_PWAIT, uintptr(epfd), uintptr(_p0), uintptr(len(events)), uintptr(msec), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall6(SYS_FADVISE64, uintptr(fd), uintptr(offset), uintptr(length), uintptr(advice), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, buf *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (euid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEUID, 0, 0, 0)
+	euid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _ := RawSyscallNoError(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _ := RawSyscallNoError(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, n int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(n), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(olddirfd), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (off int64, err error) {
+	r0, _, e1 := Syscall(SYS_LSEEK, uintptr(fd), uintptr(offset), uintptr(whence))
+	off = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	r0, _, e1 := Syscall6(SYS_SENDFILE, uintptr(outfd), uintptr(infd), uintptr(unsafe.Pointer(offset)), uintptr(count), 0, 0)
+	written = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsgid(gid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSGID, uintptr(gid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsuid(uid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSUID, uintptr(uid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_SPLICE, uintptr(rfd), uintptr(unsafe.Pointer(roff)), uintptr(wfd), uintptr(unsafe.Pointer(woff)), uintptr(len), uintptr(flags))
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, buf *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func SyncFileRange(fd int, off int64, n int64, flags int) (err error) {
+	_, _, e1 := Syscall6(SYS_SYNC_FILE_RANGE, uintptr(fd), uintptr(off), uintptr(n), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error) {
+	r0, _, e1 := Syscall6(SYS_ACCEPT4, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(n int, list *_Gid_t) (nn int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	nn = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(n int, list *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error) {
+	r0, _, e1 := Syscall6(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flags), uintptr(fd), uintptr(offset))
+	xaddr = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kexecFileLoad(kernelFd int, initrdFd int, cmdlineLen int, cmdline string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(cmdline)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_KEXEC_FILE_LOAD, uintptr(kernelFd), uintptr(initrdFd), uintptr(cmdlineLen), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_mips.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_mips.go
new file mode 100644
index 000000000..49186843a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_mips.go
@@ -0,0 +1,758 @@
+// go run mksyscall.go -b32 -arm -tags linux,mips syscall_linux.go syscall_linux_mipsx.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build linux,mips
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fanotifyMark(fd int, flags uint, mask uint64, dirFd int, pathname *byte) (err error) {
+	_, _, e1 := Syscall6(SYS_FANOTIFY_MARK, uintptr(fd), uintptr(flags), uintptr(mask>>32), uintptr(mask), uintptr(dirFd), uintptr(unsafe.Pointer(pathname)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fallocate(fd int, mode uint32, off int64, len int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FALLOCATE, uintptr(fd), uintptr(mode), uintptr(off>>32), uintptr(off), uintptr(len>>32), uintptr(len))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Tee(rfd int, wfd int, len int, flags int) (n int64, err error) {
+	r0, r1, e1 := Syscall6(SYS_TEE, uintptr(rfd), uintptr(wfd), uintptr(len), uintptr(flags), 0, 0)
+	n = int64(int64(r0)<<32 | int64(r1))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func dup2(oldfd int, newfd int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(oldfd), uintptr(newfd), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollCreate(size int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_EPOLL_CREATE, uintptr(size), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(events) > 0 {
+		_p0 = unsafe.Pointer(&events[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_EPOLL_WAIT, uintptr(epfd), uintptr(_p0), uintptr(len(events)), uintptr(msec), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall9(SYS_FADVISE64, uintptr(fd), 0, uintptr(offset>>32), uintptr(offset), uintptr(length>>32), uintptr(length), uintptr(advice), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FTRUNCATE64, uintptr(fd), 0, uintptr(length>>32), uintptr(length), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (euid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEUID, 0, 0, 0)
+	euid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _ := RawSyscallNoError(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _ := RawSyscallNoError(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, n int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(n), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD64, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset>>32), uintptr(offset))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE64, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset>>32), uintptr(offset))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(olddirfd), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS__NEWSELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	r0, _, e1 := Syscall6(SYS_SENDFILE64, uintptr(outfd), uintptr(infd), uintptr(unsafe.Pointer(offset)), uintptr(count), 0, 0)
+	written = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsgid(gid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSGID, uintptr(gid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsuid(uid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSUID, uintptr(uid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SPLICE, uintptr(rfd), uintptr(unsafe.Pointer(roff)), uintptr(wfd), uintptr(unsafe.Pointer(woff)), uintptr(len), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func SyncFileRange(fd int, off int64, n int64, flags int) (err error) {
+	_, _, e1 := Syscall9(SYS_SYNC_FILE_RANGE, uintptr(fd), 0, uintptr(off>>32), uintptr(off), uintptr(n>>32), uintptr(n), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_TRUNCATE64, uintptr(unsafe.Pointer(_p0)), 0, uintptr(length>>32), uintptr(length), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ustat(dev int, ubuf *Ustat_t) (err error) {
+	_, _, e1 := Syscall(SYS_USTAT, uintptr(dev), uintptr(unsafe.Pointer(ubuf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error) {
+	r0, _, e1 := Syscall6(SYS_ACCEPT4, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(n int, list *_Gid_t) (nn int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	nn = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(n int, list *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func InotifyInit() (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_INOTIFY_INIT, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ioperm(from int, num int, on int) (err error) {
+	_, _, e1 := Syscall(SYS_IOPERM, uintptr(from), uintptr(num), uintptr(on))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Iopl(level int) (err error) {
+	_, _, e1 := Syscall(SYS_IOPL, uintptr(level), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimesat(dirfd int, path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_FUTIMESAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Time(t *Time_t) (tt Time_t, err error) {
+	r0, _, e1 := RawSyscall(SYS_TIME, uintptr(unsafe.Pointer(t)), 0, 0)
+	tt = Time_t(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Utime(path string, buf *Utimbuf) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT64, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT64, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT64, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT64, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pause() (err error) {
+	_, _, e1 := Syscall(SYS_PAUSE, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe() (p1 int, p2 int, err error) {
+	r0, r1, e1 := RawSyscall(SYS_PIPE, 0, 0, 0)
+	p1 = int(r0)
+	p2 = int(r1)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap2(addr uintptr, length uintptr, prot int, flags int, fd int, pageOffset uintptr) (xaddr uintptr, err error) {
+	r0, _, e1 := Syscall6(SYS_MMAP2, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flags), uintptr(fd), uintptr(pageOffset))
+	xaddr = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getrlimit(resource int, rlim *rlimit32) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setrlimit(resource int, rlim *rlimit32) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_mips64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_mips64.go
new file mode 100644
index 000000000..9171d3bd2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_mips64.go
@@ -0,0 +1,729 @@
+// go run mksyscall.go -tags linux,mips64 syscall_linux.go syscall_linux_mips64x.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build linux,mips64
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fanotifyMark(fd int, flags uint, mask uint64, dirFd int, pathname *byte) (err error) {
+	_, _, e1 := Syscall6(SYS_FANOTIFY_MARK, uintptr(fd), uintptr(flags), uintptr(mask), uintptr(dirFd), uintptr(unsafe.Pointer(pathname)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fallocate(fd int, mode uint32, off int64, len int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FALLOCATE, uintptr(fd), uintptr(mode), uintptr(off), uintptr(len), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Tee(rfd int, wfd int, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_TEE, uintptr(rfd), uintptr(wfd), uintptr(len), uintptr(flags), 0, 0)
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func dup2(oldfd int, newfd int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(oldfd), uintptr(newfd), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollCreate(size int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_EPOLL_CREATE, uintptr(size), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(events) > 0 {
+		_p0 = unsafe.Pointer(&events[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_EPOLL_WAIT, uintptr(epfd), uintptr(_p0), uintptr(len(events)), uintptr(msec), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall6(SYS_FADVISE64, uintptr(fd), uintptr(offset), uintptr(length), uintptr(advice), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, buf *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (euid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEUID, 0, 0, 0)
+	euid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _ := RawSyscallNoError(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _ := RawSyscallNoError(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, n int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(n), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pause() (err error) {
+	_, _, e1 := Syscall(SYS_PAUSE, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(olddirfd), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (off int64, err error) {
+	r0, _, e1 := Syscall(SYS_LSEEK, uintptr(fd), uintptr(offset), uintptr(whence))
+	off = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	r0, _, e1 := Syscall6(SYS_SENDFILE, uintptr(outfd), uintptr(infd), uintptr(unsafe.Pointer(offset)), uintptr(count), 0, 0)
+	written = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsgid(gid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSGID, uintptr(gid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsuid(uid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSUID, uintptr(uid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_SPLICE, uintptr(rfd), uintptr(unsafe.Pointer(roff)), uintptr(wfd), uintptr(unsafe.Pointer(woff)), uintptr(len), uintptr(flags))
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, buf *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func SyncFileRange(fd int, off int64, n int64, flags int) (err error) {
+	_, _, e1 := Syscall6(SYS_SYNC_FILE_RANGE, uintptr(fd), uintptr(off), uintptr(n), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ustat(dev int, ubuf *Ustat_t) (err error) {
+	_, _, e1 := Syscall(SYS_USTAT, uintptr(dev), uintptr(unsafe.Pointer(ubuf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error) {
+	r0, _, e1 := Syscall6(SYS_ACCEPT4, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(n int, list *_Gid_t) (nn int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	nn = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(n int, list *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error) {
+	r0, _, e1 := Syscall6(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flags), uintptr(fd), uintptr(offset))
+	xaddr = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimesat(dirfd int, path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_FUTIMESAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Utime(path string, buf *Utimbuf) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstat(fd int, st *stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(st)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatat(dirfd int, path string, st *stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_NEWFSTATAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(st)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func lstat(path string, st *stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(st)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func stat(path string, st *stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(st)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_mips64le.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_mips64le.go
new file mode 100644
index 000000000..82286f04f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_mips64le.go
@@ -0,0 +1,729 @@
+// go run mksyscall.go -tags linux,mips64le syscall_linux.go syscall_linux_mips64x.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build linux,mips64le
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fanotifyMark(fd int, flags uint, mask uint64, dirFd int, pathname *byte) (err error) {
+	_, _, e1 := Syscall6(SYS_FANOTIFY_MARK, uintptr(fd), uintptr(flags), uintptr(mask), uintptr(dirFd), uintptr(unsafe.Pointer(pathname)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fallocate(fd int, mode uint32, off int64, len int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FALLOCATE, uintptr(fd), uintptr(mode), uintptr(off), uintptr(len), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Tee(rfd int, wfd int, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_TEE, uintptr(rfd), uintptr(wfd), uintptr(len), uintptr(flags), 0, 0)
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func dup2(oldfd int, newfd int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(oldfd), uintptr(newfd), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollCreate(size int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_EPOLL_CREATE, uintptr(size), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(events) > 0 {
+		_p0 = unsafe.Pointer(&events[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_EPOLL_WAIT, uintptr(epfd), uintptr(_p0), uintptr(len(events)), uintptr(msec), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall6(SYS_FADVISE64, uintptr(fd), uintptr(offset), uintptr(length), uintptr(advice), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, buf *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (euid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEUID, 0, 0, 0)
+	euid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _ := RawSyscallNoError(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _ := RawSyscallNoError(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, n int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(n), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pause() (err error) {
+	_, _, e1 := Syscall(SYS_PAUSE, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(olddirfd), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (off int64, err error) {
+	r0, _, e1 := Syscall(SYS_LSEEK, uintptr(fd), uintptr(offset), uintptr(whence))
+	off = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	r0, _, e1 := Syscall6(SYS_SENDFILE, uintptr(outfd), uintptr(infd), uintptr(unsafe.Pointer(offset)), uintptr(count), 0, 0)
+	written = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsgid(gid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSGID, uintptr(gid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsuid(uid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSUID, uintptr(uid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_SPLICE, uintptr(rfd), uintptr(unsafe.Pointer(roff)), uintptr(wfd), uintptr(unsafe.Pointer(woff)), uintptr(len), uintptr(flags))
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, buf *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func SyncFileRange(fd int, off int64, n int64, flags int) (err error) {
+	_, _, e1 := Syscall6(SYS_SYNC_FILE_RANGE, uintptr(fd), uintptr(off), uintptr(n), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ustat(dev int, ubuf *Ustat_t) (err error) {
+	_, _, e1 := Syscall(SYS_USTAT, uintptr(dev), uintptr(unsafe.Pointer(ubuf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error) {
+	r0, _, e1 := Syscall6(SYS_ACCEPT4, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(n int, list *_Gid_t) (nn int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	nn = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(n int, list *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error) {
+	r0, _, e1 := Syscall6(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flags), uintptr(fd), uintptr(offset))
+	xaddr = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimesat(dirfd int, path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_FUTIMESAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Utime(path string, buf *Utimbuf) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstat(fd int, st *stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(st)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fstatat(dirfd int, path string, st *stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_NEWFSTATAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(st)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func lstat(path string, st *stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(st)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func stat(path string, st *stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(st)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_mipsle.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_mipsle.go
new file mode 100644
index 000000000..15920621c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_mipsle.go
@@ -0,0 +1,758 @@
+// go run mksyscall.go -l32 -arm -tags linux,mipsle syscall_linux.go syscall_linux_mipsx.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build linux,mipsle
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fanotifyMark(fd int, flags uint, mask uint64, dirFd int, pathname *byte) (err error) {
+	_, _, e1 := Syscall6(SYS_FANOTIFY_MARK, uintptr(fd), uintptr(flags), uintptr(mask), uintptr(mask>>32), uintptr(dirFd), uintptr(unsafe.Pointer(pathname)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fallocate(fd int, mode uint32, off int64, len int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FALLOCATE, uintptr(fd), uintptr(mode), uintptr(off), uintptr(off>>32), uintptr(len), uintptr(len>>32))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Tee(rfd int, wfd int, len int, flags int) (n int64, err error) {
+	r0, r1, e1 := Syscall6(SYS_TEE, uintptr(rfd), uintptr(wfd), uintptr(len), uintptr(flags), 0, 0)
+	n = int64(int64(r1)<<32 | int64(r0))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func dup2(oldfd int, newfd int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(oldfd), uintptr(newfd), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollCreate(size int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_EPOLL_CREATE, uintptr(size), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(events) > 0 {
+		_p0 = unsafe.Pointer(&events[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_EPOLL_WAIT, uintptr(epfd), uintptr(_p0), uintptr(len(events)), uintptr(msec), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall9(SYS_FADVISE64, uintptr(fd), 0, uintptr(offset), uintptr(offset>>32), uintptr(length), uintptr(length>>32), uintptr(advice), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FTRUNCATE64, uintptr(fd), 0, uintptr(length), uintptr(length>>32), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (euid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEUID, 0, 0, 0)
+	euid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _ := RawSyscallNoError(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _ := RawSyscallNoError(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, n int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(n), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD64, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), uintptr(offset>>32))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE64, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), uintptr(offset>>32))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(olddirfd), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS__NEWSELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	r0, _, e1 := Syscall6(SYS_SENDFILE64, uintptr(outfd), uintptr(infd), uintptr(unsafe.Pointer(offset)), uintptr(count), 0, 0)
+	written = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsgid(gid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSGID, uintptr(gid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsuid(uid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSUID, uintptr(uid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SPLICE, uintptr(rfd), uintptr(unsafe.Pointer(roff)), uintptr(wfd), uintptr(unsafe.Pointer(woff)), uintptr(len), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func SyncFileRange(fd int, off int64, n int64, flags int) (err error) {
+	_, _, e1 := Syscall9(SYS_SYNC_FILE_RANGE, uintptr(fd), 0, uintptr(off), uintptr(off>>32), uintptr(n), uintptr(n>>32), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_TRUNCATE64, uintptr(unsafe.Pointer(_p0)), 0, uintptr(length), uintptr(length>>32), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ustat(dev int, ubuf *Ustat_t) (err error) {
+	_, _, e1 := Syscall(SYS_USTAT, uintptr(dev), uintptr(unsafe.Pointer(ubuf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error) {
+	r0, _, e1 := Syscall6(SYS_ACCEPT4, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(n int, list *_Gid_t) (nn int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	nn = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(n int, list *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func InotifyInit() (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_INOTIFY_INIT, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ioperm(from int, num int, on int) (err error) {
+	_, _, e1 := Syscall(SYS_IOPERM, uintptr(from), uintptr(num), uintptr(on))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Iopl(level int) (err error) {
+	_, _, e1 := Syscall(SYS_IOPL, uintptr(level), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimesat(dirfd int, path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_FUTIMESAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Time(t *Time_t) (tt Time_t, err error) {
+	r0, _, e1 := RawSyscall(SYS_TIME, uintptr(unsafe.Pointer(t)), 0, 0)
+	tt = Time_t(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Utime(path string, buf *Utimbuf) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT64, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT64, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT64, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT64, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pause() (err error) {
+	_, _, e1 := Syscall(SYS_PAUSE, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe() (p1 int, p2 int, err error) {
+	r0, r1, e1 := RawSyscall(SYS_PIPE, 0, 0, 0)
+	p1 = int(r0)
+	p2 = int(r1)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap2(addr uintptr, length uintptr, prot int, flags int, fd int, pageOffset uintptr) (xaddr uintptr, err error) {
+	r0, _, e1 := Syscall6(SYS_MMAP2, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flags), uintptr(fd), uintptr(pageOffset))
+	xaddr = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getrlimit(resource int, rlim *rlimit32) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setrlimit(resource int, rlim *rlimit32) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_ppc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_ppc64.go
new file mode 100644
index 000000000..73a42e2cc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_ppc64.go
@@ -0,0 +1,807 @@
+// go run mksyscall.go -tags linux,ppc64 syscall_linux.go syscall_linux_ppc64x.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build linux,ppc64
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fanotifyMark(fd int, flags uint, mask uint64, dirFd int, pathname *byte) (err error) {
+	_, _, e1 := Syscall6(SYS_FANOTIFY_MARK, uintptr(fd), uintptr(flags), uintptr(mask), uintptr(dirFd), uintptr(unsafe.Pointer(pathname)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fallocate(fd int, mode uint32, off int64, len int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FALLOCATE, uintptr(fd), uintptr(mode), uintptr(off), uintptr(len), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Tee(rfd int, wfd int, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_TEE, uintptr(rfd), uintptr(wfd), uintptr(len), uintptr(flags), 0, 0)
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func dup2(oldfd int, newfd int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(oldfd), uintptr(newfd), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollCreate(size int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_EPOLL_CREATE, uintptr(size), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(events) > 0 {
+		_p0 = unsafe.Pointer(&events[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_EPOLL_WAIT, uintptr(epfd), uintptr(_p0), uintptr(len(events)), uintptr(msec), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall6(SYS_FADVISE64, uintptr(fd), uintptr(offset), uintptr(length), uintptr(advice), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_NEWFSTATAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, buf *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (euid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEUID, 0, 0, 0)
+	euid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _ := RawSyscallNoError(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_UGETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _ := RawSyscallNoError(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func InotifyInit() (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_INOTIFY_INIT, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ioperm(from int, num int, on int) (err error) {
+	_, _, e1 := Syscall(SYS_IOPERM, uintptr(from), uintptr(num), uintptr(on))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Iopl(level int) (err error) {
+	_, _, e1 := Syscall(SYS_IOPL, uintptr(level), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, n int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(n), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pause() (err error) {
+	_, _, e1 := Syscall(SYS_PAUSE, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(olddirfd), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (off int64, err error) {
+	r0, _, e1 := Syscall(SYS_LSEEK, uintptr(fd), uintptr(offset), uintptr(whence))
+	off = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS__NEWSELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	r0, _, e1 := Syscall6(SYS_SENDFILE, uintptr(outfd), uintptr(infd), uintptr(unsafe.Pointer(offset)), uintptr(count), 0, 0)
+	written = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsgid(gid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSGID, uintptr(gid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsuid(uid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSUID, uintptr(uid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_SPLICE, uintptr(rfd), uintptr(unsafe.Pointer(roff)), uintptr(wfd), uintptr(unsafe.Pointer(woff)), uintptr(len), uintptr(flags))
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, buf *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ustat(dev int, ubuf *Ustat_t) (err error) {
+	_, _, e1 := Syscall(SYS_USTAT, uintptr(dev), uintptr(unsafe.Pointer(ubuf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error) {
+	r0, _, e1 := Syscall6(SYS_ACCEPT4, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(n int, list *_Gid_t) (nn int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	nn = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(n int, list *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error) {
+	r0, _, e1 := Syscall6(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flags), uintptr(fd), uintptr(offset))
+	xaddr = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimesat(dirfd int, path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_FUTIMESAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Time(t *Time_t) (tt Time_t, err error) {
+	r0, _, e1 := RawSyscall(SYS_TIME, uintptr(unsafe.Pointer(t)), 0, 0)
+	tt = Time_t(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Utime(path string, buf *Utimbuf) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe(p *[2]_C_int) (err error) {
+	_, _, e1 := RawSyscall(SYS_PIPE, uintptr(unsafe.Pointer(p)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func syncFileRange2(fd int, flags int, off int64, n int64) (err error) {
+	_, _, e1 := Syscall6(SYS_SYNC_FILE_RANGE2, uintptr(fd), uintptr(flags), uintptr(off), uintptr(n), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kexecFileLoad(kernelFd int, initrdFd int, cmdlineLen int, cmdline string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(cmdline)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_KEXEC_FILE_LOAD, uintptr(kernelFd), uintptr(initrdFd), uintptr(cmdlineLen), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_ppc64le.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_ppc64le.go
new file mode 100644
index 000000000..6b8559536
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_ppc64le.go
@@ -0,0 +1,807 @@
+// go run mksyscall.go -tags linux,ppc64le syscall_linux.go syscall_linux_ppc64x.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build linux,ppc64le
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fanotifyMark(fd int, flags uint, mask uint64, dirFd int, pathname *byte) (err error) {
+	_, _, e1 := Syscall6(SYS_FANOTIFY_MARK, uintptr(fd), uintptr(flags), uintptr(mask), uintptr(dirFd), uintptr(unsafe.Pointer(pathname)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fallocate(fd int, mode uint32, off int64, len int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FALLOCATE, uintptr(fd), uintptr(mode), uintptr(off), uintptr(len), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Tee(rfd int, wfd int, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_TEE, uintptr(rfd), uintptr(wfd), uintptr(len), uintptr(flags), 0, 0)
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func dup2(oldfd int, newfd int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(oldfd), uintptr(newfd), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollCreate(size int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_EPOLL_CREATE, uintptr(size), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(events) > 0 {
+		_p0 = unsafe.Pointer(&events[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_EPOLL_WAIT, uintptr(epfd), uintptr(_p0), uintptr(len(events)), uintptr(msec), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall6(SYS_FADVISE64, uintptr(fd), uintptr(offset), uintptr(length), uintptr(advice), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_NEWFSTATAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, buf *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (euid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEUID, 0, 0, 0)
+	euid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _ := RawSyscallNoError(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_UGETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _ := RawSyscallNoError(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func InotifyInit() (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_INOTIFY_INIT, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ioperm(from int, num int, on int) (err error) {
+	_, _, e1 := Syscall(SYS_IOPERM, uintptr(from), uintptr(num), uintptr(on))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Iopl(level int) (err error) {
+	_, _, e1 := Syscall(SYS_IOPL, uintptr(level), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, n int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(n), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pause() (err error) {
+	_, _, e1 := Syscall(SYS_PAUSE, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(olddirfd), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (off int64, err error) {
+	r0, _, e1 := Syscall(SYS_LSEEK, uintptr(fd), uintptr(offset), uintptr(whence))
+	off = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS__NEWSELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	r0, _, e1 := Syscall6(SYS_SENDFILE, uintptr(outfd), uintptr(infd), uintptr(unsafe.Pointer(offset)), uintptr(count), 0, 0)
+	written = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsgid(gid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSGID, uintptr(gid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsuid(uid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSUID, uintptr(uid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_SPLICE, uintptr(rfd), uintptr(unsafe.Pointer(roff)), uintptr(wfd), uintptr(unsafe.Pointer(woff)), uintptr(len), uintptr(flags))
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, buf *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ustat(dev int, ubuf *Ustat_t) (err error) {
+	_, _, e1 := Syscall(SYS_USTAT, uintptr(dev), uintptr(unsafe.Pointer(ubuf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error) {
+	r0, _, e1 := Syscall6(SYS_ACCEPT4, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(n int, list *_Gid_t) (nn int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	nn = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(n int, list *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error) {
+	r0, _, e1 := Syscall6(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flags), uintptr(fd), uintptr(offset))
+	xaddr = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimesat(dirfd int, path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_FUTIMESAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Time(t *Time_t) (tt Time_t, err error) {
+	r0, _, e1 := RawSyscall(SYS_TIME, uintptr(unsafe.Pointer(t)), 0, 0)
+	tt = Time_t(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Utime(path string, buf *Utimbuf) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe(p *[2]_C_int) (err error) {
+	_, _, e1 := RawSyscall(SYS_PIPE, uintptr(unsafe.Pointer(p)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func syncFileRange2(fd int, flags int, off int64, n int64) (err error) {
+	_, _, e1 := Syscall6(SYS_SYNC_FILE_RANGE2, uintptr(fd), uintptr(flags), uintptr(off), uintptr(n), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kexecFileLoad(kernelFd int, initrdFd int, cmdlineLen int, cmdline string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(cmdline)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_KEXEC_FILE_LOAD, uintptr(kernelFd), uintptr(initrdFd), uintptr(cmdlineLen), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_riscv64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_riscv64.go
new file mode 100644
index 000000000..b76133447
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_riscv64.go
@@ -0,0 +1,582 @@
+// go run mksyscall.go -tags linux,riscv64 syscall_linux.go syscall_linux_riscv64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build linux,riscv64
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fanotifyMark(fd int, flags uint, mask uint64, dirFd int, pathname *byte) (err error) {
+	_, _, e1 := Syscall6(SYS_FANOTIFY_MARK, uintptr(fd), uintptr(flags), uintptr(mask), uintptr(dirFd), uintptr(unsafe.Pointer(pathname)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fallocate(fd int, mode uint32, off int64, len int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FALLOCATE, uintptr(fd), uintptr(mode), uintptr(off), uintptr(len), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Tee(rfd int, wfd int, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_TEE, uintptr(rfd), uintptr(wfd), uintptr(len), uintptr(flags), 0, 0)
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(events) > 0 {
+		_p0 = unsafe.Pointer(&events[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_EPOLL_PWAIT, uintptr(epfd), uintptr(_p0), uintptr(len(events)), uintptr(msec), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall6(SYS_FADVISE64, uintptr(fd), uintptr(offset), uintptr(length), uintptr(advice), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, buf *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (euid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEUID, 0, 0, 0)
+	euid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _ := RawSyscallNoError(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _ := RawSyscallNoError(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, n int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(n), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (off int64, err error) {
+	r0, _, e1 := Syscall(SYS_LSEEK, uintptr(fd), uintptr(offset), uintptr(whence))
+	off = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	r0, _, e1 := Syscall6(SYS_SENDFILE, uintptr(outfd), uintptr(infd), uintptr(unsafe.Pointer(offset)), uintptr(count), 0, 0)
+	written = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsgid(gid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSGID, uintptr(gid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsuid(uid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSUID, uintptr(uid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_SPLICE, uintptr(rfd), uintptr(unsafe.Pointer(roff)), uintptr(wfd), uintptr(unsafe.Pointer(woff)), uintptr(len), uintptr(flags))
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, buf *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func SyncFileRange(fd int, off int64, n int64, flags int) (err error) {
+	_, _, e1 := Syscall6(SYS_SYNC_FILE_RANGE, uintptr(fd), uintptr(off), uintptr(n), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error) {
+	r0, _, e1 := Syscall6(SYS_ACCEPT4, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(n int, list *_Gid_t) (nn int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	nn = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(n int, list *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error) {
+	r0, _, e1 := Syscall6(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flags), uintptr(fd), uintptr(offset))
+	xaddr = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kexecFileLoad(kernelFd int, initrdFd int, cmdlineLen int, cmdline string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(cmdline)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_KEXEC_FILE_LOAD, uintptr(kernelFd), uintptr(initrdFd), uintptr(cmdlineLen), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_s390x.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_s390x.go
new file mode 100644
index 000000000..d7032ab1e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_s390x.go
@@ -0,0 +1,577 @@
+// go run mksyscall.go -tags linux,s390x syscall_linux.go syscall_linux_s390x.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build linux,s390x
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fanotifyMark(fd int, flags uint, mask uint64, dirFd int, pathname *byte) (err error) {
+	_, _, e1 := Syscall6(SYS_FANOTIFY_MARK, uintptr(fd), uintptr(flags), uintptr(mask), uintptr(dirFd), uintptr(unsafe.Pointer(pathname)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fallocate(fd int, mode uint32, off int64, len int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FALLOCATE, uintptr(fd), uintptr(mode), uintptr(off), uintptr(len), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Tee(rfd int, wfd int, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_TEE, uintptr(rfd), uintptr(wfd), uintptr(len), uintptr(flags), 0, 0)
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func dup2(oldfd int, newfd int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(oldfd), uintptr(newfd), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollCreate(size int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_EPOLL_CREATE, uintptr(size), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(events) > 0 {
+		_p0 = unsafe.Pointer(&events[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_EPOLL_WAIT, uintptr(epfd), uintptr(_p0), uintptr(len(events)), uintptr(msec), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall6(SYS_FADVISE64, uintptr(fd), uintptr(offset), uintptr(length), uintptr(advice), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_NEWFSTATAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, buf *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (euid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEUID, 0, 0, 0)
+	euid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _ := RawSyscallNoError(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _ := RawSyscallNoError(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func InotifyInit() (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_INOTIFY_INIT, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pause() (err error) {
+	_, _, e1 := Syscall(SYS_PAUSE, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(olddirfd), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (off int64, err error) {
+	r0, _, e1 := Syscall(SYS_LSEEK, uintptr(fd), uintptr(offset), uintptr(whence))
+	off = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	r0, _, e1 := Syscall6(SYS_SENDFILE, uintptr(outfd), uintptr(infd), uintptr(unsafe.Pointer(offset)), uintptr(count), 0, 0)
+	written = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsgid(gid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSGID, uintptr(gid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsuid(uid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSUID, uintptr(uid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_SPLICE, uintptr(rfd), uintptr(unsafe.Pointer(roff)), uintptr(wfd), uintptr(unsafe.Pointer(woff)), uintptr(len), uintptr(flags))
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, buf *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func SyncFileRange(fd int, off int64, n int64, flags int) (err error) {
+	_, _, e1 := Syscall6(SYS_SYNC_FILE_RANGE, uintptr(fd), uintptr(off), uintptr(n), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ustat(dev int, ubuf *Ustat_t) (err error) {
+	_, _, e1 := Syscall(SYS_USTAT, uintptr(dev), uintptr(unsafe.Pointer(ubuf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(n int, list *_Gid_t) (nn int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	nn = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(n int, list *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimesat(dirfd int, path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_FUTIMESAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Utime(path string, buf *Utimbuf) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kexecFileLoad(kernelFd int, initrdFd int, cmdlineLen int, cmdline string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(cmdline)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_KEXEC_FILE_LOAD, uintptr(kernelFd), uintptr(initrdFd), uintptr(cmdlineLen), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_sparc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_sparc64.go
new file mode 100644
index 000000000..bcbbdd906
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_linux_sparc64.go
@@ -0,0 +1,740 @@
+// go run mksyscall.go -tags linux,sparc64 syscall_linux.go syscall_linux_sparc64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build linux,sparc64
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fanotifyMark(fd int, flags uint, mask uint64, dirFd int, pathname *byte) (err error) {
+	_, _, e1 := Syscall6(SYS_FANOTIFY_MARK, uintptr(fd), uintptr(flags), uintptr(mask), uintptr(dirFd), uintptr(unsafe.Pointer(pathname)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fallocate(fd int, mode uint32, off int64, len int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FALLOCATE, uintptr(fd), uintptr(mode), uintptr(off), uintptr(len), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Tee(rfd int, wfd int, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_TEE, uintptr(rfd), uintptr(wfd), uintptr(len), uintptr(flags), 0, 0)
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(events) > 0 {
+		_p0 = unsafe.Pointer(&events[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_EPOLL_WAIT, uintptr(epfd), uintptr(_p0), uintptr(len(events)), uintptr(msec), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall6(SYS_FADVISE64, uintptr(fd), uintptr(offset), uintptr(length), uintptr(advice), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func dup2(oldfd int, newfd int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(oldfd), uintptr(newfd), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(dirfd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT64, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, buf *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (euid int) {
+	r0, _ := RawSyscallNoError(SYS_GETEUID, 0, 0, 0)
+	euid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _ := RawSyscallNoError(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _ := RawSyscallNoError(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func InotifyInit() (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_INOTIFY_INIT, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, n int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(n), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pause() (err error) {
+	_, _, e1 := Syscall(SYS_PAUSE, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE64, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(olddirfd), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (off int64, err error) {
+	r0, _, e1 := Syscall(SYS_LSEEK, uintptr(fd), uintptr(offset), uintptr(whence))
+	off = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	r0, _, e1 := Syscall6(SYS_SENDFILE, uintptr(outfd), uintptr(infd), uintptr(unsafe.Pointer(offset)), uintptr(count), 0, 0)
+	written = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsgid(gid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSGID, uintptr(gid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setfsuid(uid int) (prev int, err error) {
+	r0, _, e1 := Syscall(SYS_SETFSUID, uintptr(uid), 0, 0)
+	prev = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(resource int, rlim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(resource), uintptr(unsafe.Pointer(rlim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Splice(rfd int, roff *int64, wfd int, woff *int64, len int, flags int) (n int64, err error) {
+	r0, _, e1 := Syscall6(SYS_SPLICE, uintptr(rfd), uintptr(unsafe.Pointer(roff)), uintptr(wfd), uintptr(unsafe.Pointer(woff)), uintptr(len), uintptr(flags))
+	n = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, buf *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func SyncFileRange(fd int, off int64, n int64, flags int) (err error) {
+	_, _, e1 := Syscall6(SYS_SYNC_FILE_RANGE, uintptr(fd), uintptr(off), uintptr(n), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept4(s int, rsa *RawSockaddrAny, addrlen *_Socklen, flags int) (fd int, err error) {
+	r0, _, e1 := Syscall6(SYS_ACCEPT4, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), uintptr(flags), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(n int, list *_Gid_t) (nn int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	nn = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(n int, list *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(n), uintptr(unsafe.Pointer(list)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flags int, fd int, offset int64) (xaddr uintptr, err error) {
+	r0, _, e1 := Syscall6(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flags), uintptr(fd), uintptr(offset))
+	xaddr = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimesat(dirfd int, path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_FUTIMESAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Utime(path string, buf *Utimbuf) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe(p *[2]_C_int) (err error) {
+	_, _, e1 := RawSyscall(SYS_PIPE, uintptr(unsafe.Pointer(p)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_netbsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_netbsd_386.go
new file mode 100644
index 000000000..3bbd9e39c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_netbsd_386.go
@@ -0,0 +1,1851 @@
+// go run mksyscall.go -l32 -netbsd -tags netbsd,386 syscall_bsd.go syscall_netbsd.go syscall_netbsd_386.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build netbsd,386
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := Syscall6(SYS_WAIT4, uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_KEVENT, uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_FUTIMES, uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MADVISE, uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := Syscall(SYS_MLOCKALL, uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MPROTECT, uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MSYNC, uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MUNLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := Syscall(SYS_MUNLOCKALL, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe() (fd1 int, fd2 int, err error) {
+	r0, r1, e1 := RawSyscall(SYS_PIPE, 0, 0, 0)
+	fd1 = int(r0)
+	fd2 = int(r1)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdents(fd int, buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_GETDENTS, uintptr(fd), uintptr(_p0), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS___GETCWD, uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_IOCTL, uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS___SYSCTL, uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_ACCESS, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_ADJTIME, uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHFLAGS, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHMOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHROOT, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_CLOSE, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := Syscall(SYS_DUP, uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup3(from int, to int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP3, uintptr(from), uintptr(to), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	Syscall(SYS_EXIT, uintptr(code), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteFd(fd int, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListFd(fd int, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_FD, uintptr(fd), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteFile(file string, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListFile(file string, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteLink(link string, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListLink(link string, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FACCESSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall9(SYS_POSIX_FADVISE, uintptr(fd), 0, uintptr(offset), uintptr(offset>>32), 0, uintptr(length), uintptr(length>>32), uintptr(advice), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHDIR, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHFLAGS, uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := Syscall(SYS_FCHMOD, uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHMODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHOWNAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_FLOCK, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := Syscall(SYS_FPATHCONF, uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatvfs1(fd int, buf *Statvfs_t, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATVFS1, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FSYNC, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FTRUNCATE, uintptr(fd), 0, uintptr(length), uintptr(length>>32), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := RawSyscall(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETEUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := RawSyscall(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETPGID, uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := RawSyscall(SYS_GETPGRP, 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := RawSyscall(SYS_GETPID, 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := RawSyscall(SYS_GETPPID, 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := Syscall(SYS_GETPRIORITY, uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRUSAGE, uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETSID, uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := Syscall(SYS_ISSETUGID, 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, signum syscall.Signal) (err error) {
+	_, _, e1 := Syscall(SYS_KILL, uintptr(pid), uintptr(signum), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_KQUEUE, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_LINKAT, uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIR, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIRAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFO, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifoat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFOAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKNOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknodat(dirfd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_NANOSLEEP, uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_OPEN, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_OPENAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_PATHCONF, uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), uintptr(offset>>32))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), uintptr(offset>>32))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READLINK, uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_READLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RENAME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_REVOKE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RMDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, r1, e1 := Syscall6(SYS_LSEEK, uintptr(fd), 0, uintptr(offset), uintptr(offset>>32), uintptr(whence), 0)
+	newoffset = int64(int64(r1)<<32 | int64(r0))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEGID, uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEUID, uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGID, uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETPGID, uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := Syscall(SYS_SETPRIORITY, uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SETSID, 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETTIMEOFDAY, uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETUID, uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statvfs1(path string, buf *Statvfs_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATVFS1, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINKAT, uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := Syscall(SYS_SYNC, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), 0, uintptr(length), uintptr(length>>32), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := Syscall(SYS_UMASK, uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINK, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNMOUNT, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := Syscall9(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), 0, uintptr(pos), uintptr(pos>>32), 0)
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_MUNMAP, uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_UTIMENSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_netbsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_netbsd_amd64.go
new file mode 100644
index 000000000..d8cf5012c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_netbsd_amd64.go
@@ -0,0 +1,1851 @@
+// go run mksyscall.go -netbsd -tags netbsd,amd64 syscall_bsd.go syscall_netbsd.go syscall_netbsd_amd64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build netbsd,amd64
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := Syscall6(SYS_WAIT4, uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_KEVENT, uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_FUTIMES, uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MADVISE, uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := Syscall(SYS_MLOCKALL, uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MPROTECT, uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MSYNC, uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MUNLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := Syscall(SYS_MUNLOCKALL, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe() (fd1 int, fd2 int, err error) {
+	r0, r1, e1 := RawSyscall(SYS_PIPE, 0, 0, 0)
+	fd1 = int(r0)
+	fd2 = int(r1)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdents(fd int, buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_GETDENTS, uintptr(fd), uintptr(_p0), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS___GETCWD, uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_IOCTL, uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS___SYSCTL, uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_ACCESS, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_ADJTIME, uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHFLAGS, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHMOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHROOT, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_CLOSE, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := Syscall(SYS_DUP, uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup3(from int, to int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP3, uintptr(from), uintptr(to), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	Syscall(SYS_EXIT, uintptr(code), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteFd(fd int, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListFd(fd int, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_FD, uintptr(fd), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteFile(file string, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListFile(file string, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteLink(link string, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListLink(link string, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FACCESSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall6(SYS_POSIX_FADVISE, uintptr(fd), 0, uintptr(offset), 0, uintptr(length), uintptr(advice))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHDIR, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHFLAGS, uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := Syscall(SYS_FCHMOD, uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHMODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHOWNAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_FLOCK, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := Syscall(SYS_FPATHCONF, uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatvfs1(fd int, buf *Statvfs_t, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATVFS1, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FSYNC, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), 0, uintptr(length))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := RawSyscall(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETEUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := RawSyscall(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETPGID, uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := RawSyscall(SYS_GETPGRP, 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := RawSyscall(SYS_GETPID, 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := RawSyscall(SYS_GETPPID, 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := Syscall(SYS_GETPRIORITY, uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRUSAGE, uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETSID, uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := Syscall(SYS_ISSETUGID, 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, signum syscall.Signal) (err error) {
+	_, _, e1 := Syscall(SYS_KILL, uintptr(pid), uintptr(signum), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_KQUEUE, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_LINKAT, uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIR, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIRAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFO, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifoat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFOAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKNOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknodat(dirfd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_NANOSLEEP, uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_OPEN, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_OPENAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_PATHCONF, uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READLINK, uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_READLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RENAME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_REVOKE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RMDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, _, e1 := Syscall6(SYS_LSEEK, uintptr(fd), 0, uintptr(offset), uintptr(whence), 0, 0)
+	newoffset = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEGID, uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEUID, uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGID, uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETPGID, uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := Syscall(SYS_SETPRIORITY, uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SETSID, 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETTIMEOFDAY, uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETUID, uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statvfs1(path string, buf *Statvfs_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATVFS1, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINKAT, uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := Syscall(SYS_SYNC, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), 0, uintptr(length))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := Syscall(SYS_UMASK, uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINK, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNMOUNT, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := Syscall9(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), 0, uintptr(pos), 0, 0)
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_MUNMAP, uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_UTIMENSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_netbsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_netbsd_arm.go
new file mode 100644
index 000000000..1153fe69b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_netbsd_arm.go
@@ -0,0 +1,1851 @@
+// go run mksyscall.go -l32 -netbsd -arm -tags netbsd,arm syscall_bsd.go syscall_netbsd.go syscall_netbsd_arm.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build netbsd,arm
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := Syscall6(SYS_WAIT4, uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_KEVENT, uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_FUTIMES, uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MADVISE, uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := Syscall(SYS_MLOCKALL, uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MPROTECT, uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MSYNC, uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MUNLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := Syscall(SYS_MUNLOCKALL, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe() (fd1 int, fd2 int, err error) {
+	r0, r1, e1 := RawSyscall(SYS_PIPE, 0, 0, 0)
+	fd1 = int(r0)
+	fd2 = int(r1)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdents(fd int, buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_GETDENTS, uintptr(fd), uintptr(_p0), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS___GETCWD, uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_IOCTL, uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS___SYSCTL, uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_ACCESS, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_ADJTIME, uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHFLAGS, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHMOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHROOT, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_CLOSE, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := Syscall(SYS_DUP, uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup3(from int, to int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP3, uintptr(from), uintptr(to), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	Syscall(SYS_EXIT, uintptr(code), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteFd(fd int, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListFd(fd int, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_FD, uintptr(fd), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteFile(file string, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListFile(file string, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteLink(link string, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListLink(link string, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FACCESSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall9(SYS_POSIX_FADVISE, uintptr(fd), 0, uintptr(offset), uintptr(offset>>32), 0, uintptr(length), uintptr(length>>32), uintptr(advice), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHDIR, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHFLAGS, uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := Syscall(SYS_FCHMOD, uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHMODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHOWNAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_FLOCK, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := Syscall(SYS_FPATHCONF, uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatvfs1(fd int, buf *Statvfs_t, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATVFS1, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FSYNC, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FTRUNCATE, uintptr(fd), 0, uintptr(length), uintptr(length>>32), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := RawSyscall(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETEUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := RawSyscall(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETPGID, uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := RawSyscall(SYS_GETPGRP, 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := RawSyscall(SYS_GETPID, 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := RawSyscall(SYS_GETPPID, 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := Syscall(SYS_GETPRIORITY, uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRUSAGE, uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETSID, uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := Syscall(SYS_ISSETUGID, 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, signum syscall.Signal) (err error) {
+	_, _, e1 := Syscall(SYS_KILL, uintptr(pid), uintptr(signum), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_KQUEUE, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_LINKAT, uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIR, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIRAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFO, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifoat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFOAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKNOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknodat(dirfd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_NANOSLEEP, uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_OPEN, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_OPENAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_PATHCONF, uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), uintptr(offset>>32))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), uintptr(offset>>32))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READLINK, uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_READLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RENAME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_REVOKE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RMDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, r1, e1 := Syscall6(SYS_LSEEK, uintptr(fd), 0, uintptr(offset), uintptr(offset>>32), uintptr(whence), 0)
+	newoffset = int64(int64(r1)<<32 | int64(r0))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEGID, uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEUID, uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGID, uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETPGID, uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := Syscall(SYS_SETPRIORITY, uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SETSID, 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETTIMEOFDAY, uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETUID, uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statvfs1(path string, buf *Statvfs_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATVFS1, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINKAT, uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := Syscall(SYS_SYNC, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), 0, uintptr(length), uintptr(length>>32), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := Syscall(SYS_UMASK, uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINK, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNMOUNT, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := Syscall9(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), 0, uintptr(pos), uintptr(pos>>32), 0)
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_MUNMAP, uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_UTIMENSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_netbsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_netbsd_arm64.go
new file mode 100644
index 000000000..24b4ebb41
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_netbsd_arm64.go
@@ -0,0 +1,1851 @@
+// go run mksyscall.go -netbsd -tags netbsd,arm64 syscall_bsd.go syscall_netbsd.go syscall_netbsd_arm64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build netbsd,arm64
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := Syscall6(SYS_WAIT4, uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_KEVENT, uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_FUTIMES, uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MADVISE, uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := Syscall(SYS_MLOCKALL, uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MPROTECT, uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MSYNC, uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MUNLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := Syscall(SYS_MUNLOCKALL, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe() (fd1 int, fd2 int, err error) {
+	r0, r1, e1 := RawSyscall(SYS_PIPE, 0, 0, 0)
+	fd1 = int(r0)
+	fd2 = int(r1)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdents(fd int, buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_GETDENTS, uintptr(fd), uintptr(_p0), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS___GETCWD, uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_IOCTL, uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS___SYSCTL, uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_ACCESS, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_ADJTIME, uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHFLAGS, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHMOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHROOT, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_CLOSE, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := Syscall(SYS_DUP, uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup3(from int, to int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP3, uintptr(from), uintptr(to), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	Syscall(SYS_EXIT, uintptr(code), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetFd(fd int, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteFd(fd int, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_FD, uintptr(fd), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p0)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListFd(fd int, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_FD, uintptr(fd), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetFile(file string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteFile(file string, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListFile(file string, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(file)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_FILE, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrGetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_GET_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrSetLink(link string, attrnamespace int, attrname string, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_SET_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)), uintptr(data), uintptr(nbytes), 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrDeleteLink(link string, attrnamespace int, attrname string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(attrname)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_EXTATTR_DELETE_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ExtattrListLink(link string, attrnamespace int, data uintptr, nbytes int) (ret int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_EXTATTR_LIST_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(attrnamespace), uintptr(data), uintptr(nbytes), 0, 0)
+	ret = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FACCESSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fadvise(fd int, offset int64, length int64, advice int) (err error) {
+	_, _, e1 := Syscall6(SYS_POSIX_FADVISE, uintptr(fd), 0, uintptr(offset), 0, uintptr(length), uintptr(advice))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHDIR, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHFLAGS, uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := Syscall(SYS_FCHMOD, uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHMODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHOWNAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_FLOCK, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := Syscall(SYS_FPATHCONF, uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatvfs1(fd int, buf *Statvfs_t, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATVFS1, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FSYNC, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), 0, uintptr(length))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := RawSyscall(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETEUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := RawSyscall(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETPGID, uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := RawSyscall(SYS_GETPGRP, 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := RawSyscall(SYS_GETPID, 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := RawSyscall(SYS_GETPPID, 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := Syscall(SYS_GETPRIORITY, uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRUSAGE, uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETSID, uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := Syscall(SYS_ISSETUGID, 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, signum syscall.Signal) (err error) {
+	_, _, e1 := Syscall(SYS_KILL, uintptr(pid), uintptr(signum), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_KQUEUE, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_LINKAT, uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIR, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIRAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFO, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifoat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFOAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKNOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknodat(dirfd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_NANOSLEEP, uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_OPEN, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_OPENAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_PATHCONF, uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READLINK, uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_READLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RENAME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_REVOKE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RMDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, _, e1 := Syscall6(SYS_LSEEK, uintptr(fd), 0, uintptr(offset), uintptr(whence), 0, 0)
+	newoffset = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEGID, uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEUID, uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGID, uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETPGID, uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := Syscall(SYS_SETPRIORITY, uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SETSID, 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETTIMEOFDAY, uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETUID, uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statvfs1(path string, buf *Statvfs_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATVFS1, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINKAT, uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := Syscall(SYS_SYNC, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), 0, uintptr(length))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := Syscall(SYS_UMASK, uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINK, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNMOUNT, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := Syscall9(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), 0, uintptr(pos), 0, 0)
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_MUNMAP, uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_UTIMENSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_386.go
new file mode 100644
index 000000000..b44b31aeb
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_386.go
@@ -0,0 +1,1692 @@
+// go run mksyscall.go -l32 -openbsd -tags openbsd,386 syscall_bsd.go syscall_openbsd.go syscall_openbsd_386.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build openbsd,386
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := Syscall6(SYS_WAIT4, uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_KEVENT, uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_FUTIMES, uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MADVISE, uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := Syscall(SYS_MLOCKALL, uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MPROTECT, uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MSYNC, uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MUNLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := Syscall(SYS_MUNLOCKALL, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe2(p *[2]_C_int, flags int) (err error) {
+	_, _, e1 := RawSyscall(SYS_PIPE2, uintptr(unsafe.Pointer(p)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdents(fd int, buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_GETDENTS, uintptr(fd), uintptr(_p0), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS___GETCWD, uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_IOCTL, uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS___SYSCTL, uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ppoll(fds *PollFd, nfds int, timeout *Timespec, sigmask *Sigset_t) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_PPOLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(unsafe.Pointer(timeout)), uintptr(unsafe.Pointer(sigmask)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_ACCESS, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_ADJTIME, uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHFLAGS, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHMOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHROOT, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_CLOSE, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := Syscall(SYS_DUP, uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup3(from int, to int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP3, uintptr(from), uintptr(to), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	Syscall(SYS_EXIT, uintptr(code), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FACCESSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHDIR, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHFLAGS, uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := Syscall(SYS_FCHMOD, uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHMODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHOWNAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_FLOCK, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := Syscall(SYS_FPATHCONF, uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, stat *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FSYNC, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FTRUNCATE, uintptr(fd), 0, uintptr(length), uintptr(length>>32), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := RawSyscall(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETEUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := RawSyscall(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETPGID, uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := RawSyscall(SYS_GETPGRP, 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := RawSyscall(SYS_GETPID, 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := RawSyscall(SYS_GETPPID, 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := Syscall(SYS_GETPRIORITY, uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrtable() (rtable int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETRTABLE, 0, 0, 0)
+	rtable = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRUSAGE, uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETSID, uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := Syscall(SYS_ISSETUGID, 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, signum syscall.Signal) (err error) {
+	_, _, e1 := Syscall(SYS_KILL, uintptr(pid), uintptr(signum), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_KQUEUE, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_LINKAT, uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIR, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIRAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFO, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifoat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFOAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKNOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknodat(dirfd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_NANOSLEEP, uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_OPEN, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_OPENAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_PATHCONF, uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), uintptr(offset>>32))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), uintptr(offset>>32))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READLINK, uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_READLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RENAME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_REVOKE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RMDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, r1, e1 := Syscall6(SYS_LSEEK, uintptr(fd), 0, uintptr(offset), uintptr(offset>>32), uintptr(whence), 0)
+	newoffset = int64(int64(r1)<<32 | int64(r0))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEGID, uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEUID, uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGID, uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setlogin(name string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SETLOGIN, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETPGID, uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := Syscall(SYS_SETPRIORITY, uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrtable(rtable int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRTABLE, uintptr(rtable), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SETSID, 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETTIMEOFDAY, uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETUID, uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, stat *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINKAT, uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := Syscall(SYS_SYNC, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), 0, uintptr(length), uintptr(length>>32), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := Syscall(SYS_UMASK, uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINK, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNMOUNT, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := Syscall9(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), 0, uintptr(pos), uintptr(pos>>32), 0)
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_MUNMAP, uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_UTIMENSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_amd64.go
new file mode 100644
index 000000000..67f93ee76
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_amd64.go
@@ -0,0 +1,1692 @@
+// go run mksyscall.go -openbsd -tags openbsd,amd64 syscall_bsd.go syscall_openbsd.go syscall_openbsd_amd64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build openbsd,amd64
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := Syscall6(SYS_WAIT4, uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_KEVENT, uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_FUTIMES, uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MADVISE, uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := Syscall(SYS_MLOCKALL, uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MPROTECT, uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MSYNC, uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MUNLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := Syscall(SYS_MUNLOCKALL, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe2(p *[2]_C_int, flags int) (err error) {
+	_, _, e1 := RawSyscall(SYS_PIPE2, uintptr(unsafe.Pointer(p)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdents(fd int, buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_GETDENTS, uintptr(fd), uintptr(_p0), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS___GETCWD, uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_IOCTL, uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS___SYSCTL, uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ppoll(fds *PollFd, nfds int, timeout *Timespec, sigmask *Sigset_t) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_PPOLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(unsafe.Pointer(timeout)), uintptr(unsafe.Pointer(sigmask)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_ACCESS, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_ADJTIME, uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHFLAGS, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHMOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHROOT, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_CLOSE, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := Syscall(SYS_DUP, uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup3(from int, to int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP3, uintptr(from), uintptr(to), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	Syscall(SYS_EXIT, uintptr(code), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FACCESSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHDIR, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHFLAGS, uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := Syscall(SYS_FCHMOD, uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHMODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHOWNAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_FLOCK, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := Syscall(SYS_FPATHCONF, uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, stat *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FSYNC, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), 0, uintptr(length))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := RawSyscall(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETEUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := RawSyscall(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETPGID, uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := RawSyscall(SYS_GETPGRP, 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := RawSyscall(SYS_GETPID, 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := RawSyscall(SYS_GETPPID, 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := Syscall(SYS_GETPRIORITY, uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrtable() (rtable int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETRTABLE, 0, 0, 0)
+	rtable = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRUSAGE, uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETSID, uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := Syscall(SYS_ISSETUGID, 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, signum syscall.Signal) (err error) {
+	_, _, e1 := Syscall(SYS_KILL, uintptr(pid), uintptr(signum), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_KQUEUE, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_LINKAT, uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIR, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIRAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFO, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifoat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFOAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKNOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknodat(dirfd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_NANOSLEEP, uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_OPEN, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_OPENAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_PATHCONF, uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READLINK, uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_READLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RENAME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_REVOKE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RMDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, _, e1 := Syscall6(SYS_LSEEK, uintptr(fd), 0, uintptr(offset), uintptr(whence), 0, 0)
+	newoffset = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEGID, uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEUID, uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGID, uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setlogin(name string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SETLOGIN, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETPGID, uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := Syscall(SYS_SETPRIORITY, uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrtable(rtable int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRTABLE, uintptr(rtable), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SETSID, 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETTIMEOFDAY, uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETUID, uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, stat *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINKAT, uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := Syscall(SYS_SYNC, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), 0, uintptr(length))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := Syscall(SYS_UMASK, uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINK, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNMOUNT, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := Syscall9(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), 0, uintptr(pos), 0, 0)
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_MUNMAP, uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_UTIMENSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm.go
new file mode 100644
index 000000000..d7c878b1d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm.go
@@ -0,0 +1,1692 @@
+// go run mksyscall.go -l32 -openbsd -arm -tags openbsd,arm syscall_bsd.go syscall_openbsd.go syscall_openbsd_arm.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build openbsd,arm
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := Syscall6(SYS_WAIT4, uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_KEVENT, uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_FUTIMES, uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MADVISE, uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := Syscall(SYS_MLOCKALL, uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MPROTECT, uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MSYNC, uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MUNLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := Syscall(SYS_MUNLOCKALL, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe2(p *[2]_C_int, flags int) (err error) {
+	_, _, e1 := RawSyscall(SYS_PIPE2, uintptr(unsafe.Pointer(p)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdents(fd int, buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_GETDENTS, uintptr(fd), uintptr(_p0), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS___GETCWD, uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_IOCTL, uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS___SYSCTL, uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ppoll(fds *PollFd, nfds int, timeout *Timespec, sigmask *Sigset_t) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_PPOLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(unsafe.Pointer(timeout)), uintptr(unsafe.Pointer(sigmask)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_ACCESS, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_ADJTIME, uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHFLAGS, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHMOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHROOT, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_CLOSE, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := Syscall(SYS_DUP, uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup3(from int, to int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP3, uintptr(from), uintptr(to), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	Syscall(SYS_EXIT, uintptr(code), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FACCESSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHDIR, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHFLAGS, uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := Syscall(SYS_FCHMOD, uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHMODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHOWNAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_FLOCK, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := Syscall(SYS_FPATHCONF, uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, stat *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FSYNC, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall6(SYS_FTRUNCATE, uintptr(fd), 0, uintptr(length), uintptr(length>>32), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := RawSyscall(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETEUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := RawSyscall(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETPGID, uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := RawSyscall(SYS_GETPGRP, 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := RawSyscall(SYS_GETPID, 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := RawSyscall(SYS_GETPPID, 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := Syscall(SYS_GETPRIORITY, uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrtable() (rtable int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETRTABLE, 0, 0, 0)
+	rtable = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRUSAGE, uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETSID, uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := Syscall(SYS_ISSETUGID, 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, signum syscall.Signal) (err error) {
+	_, _, e1 := Syscall(SYS_KILL, uintptr(pid), uintptr(signum), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_KQUEUE, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_LINKAT, uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIR, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIRAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFO, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifoat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFOAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKNOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknodat(dirfd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_NANOSLEEP, uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_OPEN, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_OPENAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_PATHCONF, uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), uintptr(offset>>32))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), uintptr(offset>>32))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READLINK, uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_READLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RENAME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_REVOKE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RMDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, r1, e1 := Syscall6(SYS_LSEEK, uintptr(fd), 0, uintptr(offset), uintptr(offset>>32), uintptr(whence), 0)
+	newoffset = int64(int64(r1)<<32 | int64(r0))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEGID, uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEUID, uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGID, uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setlogin(name string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SETLOGIN, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETPGID, uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := Syscall(SYS_SETPRIORITY, uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrtable(rtable int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRTABLE, uintptr(rtable), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SETSID, 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETTIMEOFDAY, uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETUID, uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, stat *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINKAT, uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := Syscall(SYS_SYNC, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), 0, uintptr(length), uintptr(length>>32), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := Syscall(SYS_UMASK, uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINK, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNMOUNT, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := Syscall9(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), 0, uintptr(pos), uintptr(pos>>32), 0)
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_MUNMAP, uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_UTIMENSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm64.go
new file mode 100644
index 000000000..8facd695d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm64.go
@@ -0,0 +1,1692 @@
+// go run mksyscall.go -openbsd -tags openbsd,arm64 syscall_bsd.go syscall_openbsd.go syscall_openbsd_arm64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build openbsd,arm64
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := Syscall6(SYS_WAIT4, uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_KEVENT, uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_FUTIMES, uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MADVISE, uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := Syscall(SYS_MLOCKALL, uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MPROTECT, uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MSYNC, uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MUNLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := Syscall(SYS_MUNLOCKALL, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe2(p *[2]_C_int, flags int) (err error) {
+	_, _, e1 := RawSyscall(SYS_PIPE2, uintptr(unsafe.Pointer(p)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdents(fd int, buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_GETDENTS, uintptr(fd), uintptr(_p0), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS___GETCWD, uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_IOCTL, uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS___SYSCTL, uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ppoll(fds *PollFd, nfds int, timeout *Timespec, sigmask *Sigset_t) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_PPOLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(unsafe.Pointer(timeout)), uintptr(unsafe.Pointer(sigmask)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_ACCESS, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_ADJTIME, uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHFLAGS, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHMOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHROOT, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_CLOSE, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := Syscall(SYS_DUP, uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup3(from int, to int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP3, uintptr(from), uintptr(to), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	Syscall(SYS_EXIT, uintptr(code), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FACCESSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHDIR, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHFLAGS, uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := Syscall(SYS_FCHMOD, uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHMODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHOWNAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_FLOCK, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := Syscall(SYS_FPATHCONF, uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, stat *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FSYNC, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), 0, uintptr(length))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := RawSyscall(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETEUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := RawSyscall(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETPGID, uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := RawSyscall(SYS_GETPGRP, 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := RawSyscall(SYS_GETPID, 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := RawSyscall(SYS_GETPPID, 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := Syscall(SYS_GETPRIORITY, uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrtable() (rtable int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETRTABLE, 0, 0, 0)
+	rtable = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRUSAGE, uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETSID, uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := Syscall(SYS_ISSETUGID, 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, signum syscall.Signal) (err error) {
+	_, _, e1 := Syscall(SYS_KILL, uintptr(pid), uintptr(signum), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_KQUEUE, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_LINKAT, uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIR, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIRAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFO, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifoat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFOAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKNOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknodat(dirfd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_NANOSLEEP, uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_OPEN, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_OPENAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_PATHCONF, uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READLINK, uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_READLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RENAME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_REVOKE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RMDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, _, e1 := Syscall6(SYS_LSEEK, uintptr(fd), 0, uintptr(offset), uintptr(whence), 0, 0)
+	newoffset = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEGID, uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEUID, uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGID, uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setlogin(name string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SETLOGIN, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETPGID, uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := Syscall(SYS_SETPRIORITY, uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrtable(rtable int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRTABLE, uintptr(rtable), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SETSID, 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETTIMEOFDAY, uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETUID, uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, stat *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINKAT, uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := Syscall(SYS_SYNC, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), 0, uintptr(length))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := Syscall(SYS_UMASK, uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINK, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNMOUNT, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := Syscall9(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), 0, uintptr(pos), 0, 0)
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_MUNMAP, uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_UTIMENSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_mips64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_mips64.go
new file mode 100644
index 000000000..ec6bd5bb7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_openbsd_mips64.go
@@ -0,0 +1,1692 @@
+// go run mksyscall.go -openbsd -tags openbsd,mips64 syscall_bsd.go syscall_openbsd.go syscall_openbsd_mips64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build openbsd,mips64
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ syscall.Errno
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGROUPS, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error) {
+	r0, _, e1 := Syscall6(SYS_WAIT4, uintptr(pid), uintptr(unsafe.Pointer(wstatus)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_ACCEPT, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_BIND, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := Syscall(SYS_CONNECT, uintptr(s), uintptr(addr), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SOCKET, uintptr(domain), uintptr(typ), uintptr(proto))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := Syscall6(SYS_GETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := Syscall6(SYS_SETSOCKOPT, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETPEERNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETSOCKNAME, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_SHUTDOWN, uintptr(s), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := RawSyscall6(SYS_SOCKETPAIR, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_RECVFROM, uintptr(fd), uintptr(_p0), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS_SENDTO, uintptr(s), uintptr(_p0), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_RECVMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_SENDMSG, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func kevent(kq int, change unsafe.Pointer, nchange int, event unsafe.Pointer, nevent int, timeout *Timespec) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_KEVENT, uintptr(kq), uintptr(change), uintptr(nchange), uintptr(event), uintptr(nevent), uintptr(unsafe.Pointer(timeout)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, timeval *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UTIMES, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimes(fd int, timeval *[2]Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_FUTIMES, uintptr(fd), uintptr(unsafe.Pointer(timeval)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_POLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, behav int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MADVISE, uintptr(_p0), uintptr(len(b)), uintptr(behav))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := Syscall(SYS_MLOCKALL, uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MPROTECT, uintptr(_p0), uintptr(len(b)), uintptr(prot))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MSYNC, uintptr(_p0), uintptr(len(b)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 unsafe.Pointer
+	if len(b) > 0 {
+		_p0 = unsafe.Pointer(&b[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall(SYS_MUNLOCK, uintptr(_p0), uintptr(len(b)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := Syscall(SYS_MUNLOCKALL, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe2(p *[2]_C_int, flags int) (err error) {
+	_, _, e1 := RawSyscall(SYS_PIPE2, uintptr(unsafe.Pointer(p)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdents(fd int, buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_GETDENTS, uintptr(fd), uintptr(_p0), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(buf) > 0 {
+		_p0 = unsafe.Pointer(&buf[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS___GETCWD, uintptr(_p0), uintptr(len(buf)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_IOCTL, uintptr(fd), uintptr(req), uintptr(arg))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sysctl(mib []_C_int, old *byte, oldlen *uintptr, new *byte, newlen uintptr) (err error) {
+	var _p0 unsafe.Pointer
+	if len(mib) > 0 {
+		_p0 = unsafe.Pointer(&mib[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	_, _, e1 := Syscall6(SYS___SYSCTL, uintptr(_p0), uintptr(len(mib)), uintptr(unsafe.Pointer(old)), uintptr(unsafe.Pointer(oldlen)), uintptr(unsafe.Pointer(new)), uintptr(newlen))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ppoll(fds *PollFd, nfds int, timeout *Timespec, sigmask *Sigset_t) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_PPOLL, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(unsafe.Pointer(timeout)), uintptr(unsafe.Pointer(sigmask)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_ACCESS, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := Syscall(SYS_ADJTIME, uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chflags(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHFLAGS, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHMOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_CHROOT, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_CLOSE, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := Syscall(SYS_DUP, uintptr(fd), 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(from int, to int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP2, uintptr(from), uintptr(to), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup3(from int, to int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_DUP3, uintptr(from), uintptr(to), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	Syscall(SYS_EXIT, uintptr(code), 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FACCESSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHDIR, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchflags(fd int, flags int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHFLAGS, uintptr(fd), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := Syscall(SYS_FCHMOD, uintptr(fd), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHMODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := Syscall(SYS_FCHOWN, uintptr(fd), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FCHOWNAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := Syscall(SYS_FLOCK, uintptr(fd), uintptr(how), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := Syscall(SYS_FPATHCONF, uintptr(fd), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTAT, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_FSTATAT, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatfs(fd int, stat *Statfs_t) (err error) {
+	_, _, e1 := Syscall(SYS_FSTATFS, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := Syscall(SYS_FSYNC, uintptr(fd), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := Syscall(SYS_FTRUNCATE, uintptr(fd), 0, uintptr(length))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := RawSyscall(SYS_GETEGID, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETEUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := RawSyscall(SYS_GETGID, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETPGID, uintptr(pid), 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgrp int) {
+	r0, _, _ := RawSyscall(SYS_GETPGRP, 0, 0, 0)
+	pgrp = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := RawSyscall(SYS_GETPID, 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := RawSyscall(SYS_GETPPID, 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (prio int, err error) {
+	r0, _, e1 := Syscall(SYS_GETPRIORITY, uintptr(which), uintptr(who), 0)
+	prio = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrtable() (rtable int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETRTABLE, 0, 0, 0)
+	rtable = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETRUSAGE, uintptr(who), uintptr(unsafe.Pointer(rusage)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getsid(pid int) (sid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_GETSID, uintptr(pid), 0, 0)
+	sid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_GETTIMEOFDAY, uintptr(unsafe.Pointer(tv)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := RawSyscall(SYS_GETUID, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Issetugid() (tainted bool) {
+	r0, _, _ := Syscall(SYS_ISSETUGID, 0, 0, 0)
+	tainted = bool(r0 != 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, signum syscall.Signal) (err error) {
+	_, _, e1 := Syscall(SYS_KILL, uintptr(pid), uintptr(signum), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kqueue() (fd int, err error) {
+	r0, _, e1 := Syscall(SYS_KQUEUE, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LCHOWN, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Linkat(pathfd int, path string, linkfd int, link string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_LINKAT, uintptr(pathfd), uintptr(unsafe.Pointer(_p0)), uintptr(linkfd), uintptr(unsafe.Pointer(_p1)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := Syscall(SYS_LISTEN, uintptr(s), uintptr(backlog), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_LSTAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIR, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKDIRAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFO, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifoat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKFIFOAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_MKNOD, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknodat(dirfd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_MKNODAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, _, e1 := Syscall(SYS_NANOSLEEP, uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_OPEN, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm))
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall6(SYS_OPENAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := Syscall(SYS_PATHCONF, uintptr(unsafe.Pointer(_p0)), uintptr(name), 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PREAD, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_PWRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)), 0, uintptr(offset), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_READLINK, uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlinkat(dirfd int, path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 unsafe.Pointer
+	if len(buf) > 0 {
+		_p1 = unsafe.Pointer(&buf[0])
+	} else {
+		_p1 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall6(SYS_READLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(_p1), uintptr(len(buf)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RENAME, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(fromfd int, from string, tofd int, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_RENAMEAT, uintptr(fromfd), uintptr(unsafe.Pointer(_p0)), uintptr(tofd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Revoke(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_REVOKE, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_RMDIR, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, _, e1 := Syscall6(SYS_LSEEK, uintptr(fd), 0, uintptr(offset), uintptr(whence), 0, 0)
+	newoffset = int64(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := Syscall6(SYS_SELECT, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEGID, uintptr(egid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETEUID, uintptr(euid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETGID, uintptr(gid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setlogin(name string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SETLOGIN, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETPGID, uintptr(pid), uintptr(pgid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := Syscall(SYS_SETPRIORITY, uintptr(which), uintptr(who), uintptr(prio))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREGID, uintptr(rgid), uintptr(egid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETREUID, uintptr(ruid), uintptr(euid), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresgid(rgid int, egid int, sgid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESGID, uintptr(rgid), uintptr(egid), uintptr(sgid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setresuid(ruid int, euid int, suid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRESUID, uintptr(ruid), uintptr(euid), uintptr(suid))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRLIMIT, uintptr(which), uintptr(unsafe.Pointer(lim)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrtable(rtable int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETRTABLE, uintptr(rtable), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := RawSyscall(SYS_SETSID, 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Settimeofday(tp *Timeval) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETTIMEOFDAY, uintptr(unsafe.Pointer(tp)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := RawSyscall(SYS_SETUID, uintptr(uid), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STAT, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statfs(path string, stat *Statfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_STATFS, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINK, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlinkat(oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_SYMLINKAT, uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := Syscall(SYS_SYNC, 0, 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_TRUNCATE, uintptr(unsafe.Pointer(_p0)), 0, uintptr(length))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(newmask int) (oldmask int) {
+	r0, _, _ := Syscall(SYS_UMASK, uintptr(newmask), 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINK, uintptr(unsafe.Pointer(_p0)), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNLINKAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags))
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall(SYS_UNMOUNT, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 unsafe.Pointer
+	if len(p) > 0 {
+		_p0 = unsafe.Pointer(&p[0])
+	} else {
+		_p0 = unsafe.Pointer(&_zero)
+	}
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(_p0), uintptr(len(p)))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := Syscall9(SYS_MMAP, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), 0, uintptr(pos), 0, 0)
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := Syscall(SYS_MUNMAP, uintptr(addr), uintptr(length), 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func readlen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_READ, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func writelen(fd int, buf *byte, nbuf int) (n int, err error) {
+	r0, _, e1 := Syscall(SYS_WRITE, uintptr(fd), uintptr(unsafe.Pointer(buf)), uintptr(nbuf))
+	n = int(r0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(dirfd int, path string, times *[2]Timespec, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := Syscall6(SYS_UTIMENSAT, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_solaris_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_solaris_amd64.go
new file mode 100644
index 000000000..a96165d4b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsyscall_solaris_amd64.go
@@ -0,0 +1,1954 @@
+// go run mksyscall_solaris.go -tags solaris,amd64 syscall_solaris.go syscall_solaris_amd64.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build solaris,amd64
+
+package unix
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+//go:cgo_import_dynamic libc_pipe pipe "libc.so"
+//go:cgo_import_dynamic libc_getsockname getsockname "libsocket.so"
+//go:cgo_import_dynamic libc_getcwd getcwd "libc.so"
+//go:cgo_import_dynamic libc_getgroups getgroups "libc.so"
+//go:cgo_import_dynamic libc_setgroups setgroups "libc.so"
+//go:cgo_import_dynamic libc_wait4 wait4 "libc.so"
+//go:cgo_import_dynamic libc_gethostname gethostname "libc.so"
+//go:cgo_import_dynamic libc_utimes utimes "libc.so"
+//go:cgo_import_dynamic libc_utimensat utimensat "libc.so"
+//go:cgo_import_dynamic libc_fcntl fcntl "libc.so"
+//go:cgo_import_dynamic libc_futimesat futimesat "libc.so"
+//go:cgo_import_dynamic libc_accept accept "libsocket.so"
+//go:cgo_import_dynamic libc___xnet_recvmsg __xnet_recvmsg "libsocket.so"
+//go:cgo_import_dynamic libc___xnet_sendmsg __xnet_sendmsg "libsocket.so"
+//go:cgo_import_dynamic libc_acct acct "libc.so"
+//go:cgo_import_dynamic libc___makedev __makedev "libc.so"
+//go:cgo_import_dynamic libc___major __major "libc.so"
+//go:cgo_import_dynamic libc___minor __minor "libc.so"
+//go:cgo_import_dynamic libc_ioctl ioctl "libc.so"
+//go:cgo_import_dynamic libc_poll poll "libc.so"
+//go:cgo_import_dynamic libc_access access "libc.so"
+//go:cgo_import_dynamic libc_adjtime adjtime "libc.so"
+//go:cgo_import_dynamic libc_chdir chdir "libc.so"
+//go:cgo_import_dynamic libc_chmod chmod "libc.so"
+//go:cgo_import_dynamic libc_chown chown "libc.so"
+//go:cgo_import_dynamic libc_chroot chroot "libc.so"
+//go:cgo_import_dynamic libc_close close "libc.so"
+//go:cgo_import_dynamic libc_creat creat "libc.so"
+//go:cgo_import_dynamic libc_dup dup "libc.so"
+//go:cgo_import_dynamic libc_dup2 dup2 "libc.so"
+//go:cgo_import_dynamic libc_exit exit "libc.so"
+//go:cgo_import_dynamic libc_faccessat faccessat "libc.so"
+//go:cgo_import_dynamic libc_fchdir fchdir "libc.so"
+//go:cgo_import_dynamic libc_fchmod fchmod "libc.so"
+//go:cgo_import_dynamic libc_fchmodat fchmodat "libc.so"
+//go:cgo_import_dynamic libc_fchown fchown "libc.so"
+//go:cgo_import_dynamic libc_fchownat fchownat "libc.so"
+//go:cgo_import_dynamic libc_fdatasync fdatasync "libc.so"
+//go:cgo_import_dynamic libc_flock flock "libc.so"
+//go:cgo_import_dynamic libc_fpathconf fpathconf "libc.so"
+//go:cgo_import_dynamic libc_fstat fstat "libc.so"
+//go:cgo_import_dynamic libc_fstatat fstatat "libc.so"
+//go:cgo_import_dynamic libc_fstatvfs fstatvfs "libc.so"
+//go:cgo_import_dynamic libc_getdents getdents "libc.so"
+//go:cgo_import_dynamic libc_getgid getgid "libc.so"
+//go:cgo_import_dynamic libc_getpid getpid "libc.so"
+//go:cgo_import_dynamic libc_getpgid getpgid "libc.so"
+//go:cgo_import_dynamic libc_getpgrp getpgrp "libc.so"
+//go:cgo_import_dynamic libc_geteuid geteuid "libc.so"
+//go:cgo_import_dynamic libc_getegid getegid "libc.so"
+//go:cgo_import_dynamic libc_getppid getppid "libc.so"
+//go:cgo_import_dynamic libc_getpriority getpriority "libc.so"
+//go:cgo_import_dynamic libc_getrlimit getrlimit "libc.so"
+//go:cgo_import_dynamic libc_getrusage getrusage "libc.so"
+//go:cgo_import_dynamic libc_gettimeofday gettimeofday "libc.so"
+//go:cgo_import_dynamic libc_getuid getuid "libc.so"
+//go:cgo_import_dynamic libc_kill kill "libc.so"
+//go:cgo_import_dynamic libc_lchown lchown "libc.so"
+//go:cgo_import_dynamic libc_link link "libc.so"
+//go:cgo_import_dynamic libc___xnet_llisten __xnet_llisten "libsocket.so"
+//go:cgo_import_dynamic libc_lstat lstat "libc.so"
+//go:cgo_import_dynamic libc_madvise madvise "libc.so"
+//go:cgo_import_dynamic libc_mkdir mkdir "libc.so"
+//go:cgo_import_dynamic libc_mkdirat mkdirat "libc.so"
+//go:cgo_import_dynamic libc_mkfifo mkfifo "libc.so"
+//go:cgo_import_dynamic libc_mkfifoat mkfifoat "libc.so"
+//go:cgo_import_dynamic libc_mknod mknod "libc.so"
+//go:cgo_import_dynamic libc_mknodat mknodat "libc.so"
+//go:cgo_import_dynamic libc_mlock mlock "libc.so"
+//go:cgo_import_dynamic libc_mlockall mlockall "libc.so"
+//go:cgo_import_dynamic libc_mprotect mprotect "libc.so"
+//go:cgo_import_dynamic libc_msync msync "libc.so"
+//go:cgo_import_dynamic libc_munlock munlock "libc.so"
+//go:cgo_import_dynamic libc_munlockall munlockall "libc.so"
+//go:cgo_import_dynamic libc_nanosleep nanosleep "libc.so"
+//go:cgo_import_dynamic libc_open open "libc.so"
+//go:cgo_import_dynamic libc_openat openat "libc.so"
+//go:cgo_import_dynamic libc_pathconf pathconf "libc.so"
+//go:cgo_import_dynamic libc_pause pause "libc.so"
+//go:cgo_import_dynamic libc_pread pread "libc.so"
+//go:cgo_import_dynamic libc_pwrite pwrite "libc.so"
+//go:cgo_import_dynamic libc_read read "libc.so"
+//go:cgo_import_dynamic libc_readlink readlink "libc.so"
+//go:cgo_import_dynamic libc_rename rename "libc.so"
+//go:cgo_import_dynamic libc_renameat renameat "libc.so"
+//go:cgo_import_dynamic libc_rmdir rmdir "libc.so"
+//go:cgo_import_dynamic libc_lseek lseek "libc.so"
+//go:cgo_import_dynamic libc_select select "libc.so"
+//go:cgo_import_dynamic libc_setegid setegid "libc.so"
+//go:cgo_import_dynamic libc_seteuid seteuid "libc.so"
+//go:cgo_import_dynamic libc_setgid setgid "libc.so"
+//go:cgo_import_dynamic libc_sethostname sethostname "libc.so"
+//go:cgo_import_dynamic libc_setpgid setpgid "libc.so"
+//go:cgo_import_dynamic libc_setpriority setpriority "libc.so"
+//go:cgo_import_dynamic libc_setregid setregid "libc.so"
+//go:cgo_import_dynamic libc_setreuid setreuid "libc.so"
+//go:cgo_import_dynamic libc_setrlimit setrlimit "libc.so"
+//go:cgo_import_dynamic libc_setsid setsid "libc.so"
+//go:cgo_import_dynamic libc_setuid setuid "libc.so"
+//go:cgo_import_dynamic libc_shutdown shutdown "libsocket.so"
+//go:cgo_import_dynamic libc_stat stat "libc.so"
+//go:cgo_import_dynamic libc_statvfs statvfs "libc.so"
+//go:cgo_import_dynamic libc_symlink symlink "libc.so"
+//go:cgo_import_dynamic libc_sync sync "libc.so"
+//go:cgo_import_dynamic libc_times times "libc.so"
+//go:cgo_import_dynamic libc_truncate truncate "libc.so"
+//go:cgo_import_dynamic libc_fsync fsync "libc.so"
+//go:cgo_import_dynamic libc_ftruncate ftruncate "libc.so"
+//go:cgo_import_dynamic libc_umask umask "libc.so"
+//go:cgo_import_dynamic libc_uname uname "libc.so"
+//go:cgo_import_dynamic libc_umount umount "libc.so"
+//go:cgo_import_dynamic libc_unlink unlink "libc.so"
+//go:cgo_import_dynamic libc_unlinkat unlinkat "libc.so"
+//go:cgo_import_dynamic libc_ustat ustat "libc.so"
+//go:cgo_import_dynamic libc_utime utime "libc.so"
+//go:cgo_import_dynamic libc___xnet_bind __xnet_bind "libsocket.so"
+//go:cgo_import_dynamic libc___xnet_connect __xnet_connect "libsocket.so"
+//go:cgo_import_dynamic libc_mmap mmap "libc.so"
+//go:cgo_import_dynamic libc_munmap munmap "libc.so"
+//go:cgo_import_dynamic libc_sendfile sendfile "libsendfile.so"
+//go:cgo_import_dynamic libc___xnet_sendto __xnet_sendto "libsocket.so"
+//go:cgo_import_dynamic libc___xnet_socket __xnet_socket "libsocket.so"
+//go:cgo_import_dynamic libc___xnet_socketpair __xnet_socketpair "libsocket.so"
+//go:cgo_import_dynamic libc_write write "libc.so"
+//go:cgo_import_dynamic libc___xnet_getsockopt __xnet_getsockopt "libsocket.so"
+//go:cgo_import_dynamic libc_getpeername getpeername "libsocket.so"
+//go:cgo_import_dynamic libc_setsockopt setsockopt "libsocket.so"
+//go:cgo_import_dynamic libc_recvfrom recvfrom "libsocket.so"
+
+//go:linkname procpipe libc_pipe
+//go:linkname procgetsockname libc_getsockname
+//go:linkname procGetcwd libc_getcwd
+//go:linkname procgetgroups libc_getgroups
+//go:linkname procsetgroups libc_setgroups
+//go:linkname procwait4 libc_wait4
+//go:linkname procgethostname libc_gethostname
+//go:linkname procutimes libc_utimes
+//go:linkname procutimensat libc_utimensat
+//go:linkname procfcntl libc_fcntl
+//go:linkname procfutimesat libc_futimesat
+//go:linkname procaccept libc_accept
+//go:linkname proc__xnet_recvmsg libc___xnet_recvmsg
+//go:linkname proc__xnet_sendmsg libc___xnet_sendmsg
+//go:linkname procacct libc_acct
+//go:linkname proc__makedev libc___makedev
+//go:linkname proc__major libc___major
+//go:linkname proc__minor libc___minor
+//go:linkname procioctl libc_ioctl
+//go:linkname procpoll libc_poll
+//go:linkname procAccess libc_access
+//go:linkname procAdjtime libc_adjtime
+//go:linkname procChdir libc_chdir
+//go:linkname procChmod libc_chmod
+//go:linkname procChown libc_chown
+//go:linkname procChroot libc_chroot
+//go:linkname procClose libc_close
+//go:linkname procCreat libc_creat
+//go:linkname procDup libc_dup
+//go:linkname procDup2 libc_dup2
+//go:linkname procExit libc_exit
+//go:linkname procFaccessat libc_faccessat
+//go:linkname procFchdir libc_fchdir
+//go:linkname procFchmod libc_fchmod
+//go:linkname procFchmodat libc_fchmodat
+//go:linkname procFchown libc_fchown
+//go:linkname procFchownat libc_fchownat
+//go:linkname procFdatasync libc_fdatasync
+//go:linkname procFlock libc_flock
+//go:linkname procFpathconf libc_fpathconf
+//go:linkname procFstat libc_fstat
+//go:linkname procFstatat libc_fstatat
+//go:linkname procFstatvfs libc_fstatvfs
+//go:linkname procGetdents libc_getdents
+//go:linkname procGetgid libc_getgid
+//go:linkname procGetpid libc_getpid
+//go:linkname procGetpgid libc_getpgid
+//go:linkname procGetpgrp libc_getpgrp
+//go:linkname procGeteuid libc_geteuid
+//go:linkname procGetegid libc_getegid
+//go:linkname procGetppid libc_getppid
+//go:linkname procGetpriority libc_getpriority
+//go:linkname procGetrlimit libc_getrlimit
+//go:linkname procGetrusage libc_getrusage
+//go:linkname procGettimeofday libc_gettimeofday
+//go:linkname procGetuid libc_getuid
+//go:linkname procKill libc_kill
+//go:linkname procLchown libc_lchown
+//go:linkname procLink libc_link
+//go:linkname proc__xnet_llisten libc___xnet_llisten
+//go:linkname procLstat libc_lstat
+//go:linkname procMadvise libc_madvise
+//go:linkname procMkdir libc_mkdir
+//go:linkname procMkdirat libc_mkdirat
+//go:linkname procMkfifo libc_mkfifo
+//go:linkname procMkfifoat libc_mkfifoat
+//go:linkname procMknod libc_mknod
+//go:linkname procMknodat libc_mknodat
+//go:linkname procMlock libc_mlock
+//go:linkname procMlockall libc_mlockall
+//go:linkname procMprotect libc_mprotect
+//go:linkname procMsync libc_msync
+//go:linkname procMunlock libc_munlock
+//go:linkname procMunlockall libc_munlockall
+//go:linkname procNanosleep libc_nanosleep
+//go:linkname procOpen libc_open
+//go:linkname procOpenat libc_openat
+//go:linkname procPathconf libc_pathconf
+//go:linkname procPause libc_pause
+//go:linkname procPread libc_pread
+//go:linkname procPwrite libc_pwrite
+//go:linkname procread libc_read
+//go:linkname procReadlink libc_readlink
+//go:linkname procRename libc_rename
+//go:linkname procRenameat libc_renameat
+//go:linkname procRmdir libc_rmdir
+//go:linkname proclseek libc_lseek
+//go:linkname procSelect libc_select
+//go:linkname procSetegid libc_setegid
+//go:linkname procSeteuid libc_seteuid
+//go:linkname procSetgid libc_setgid
+//go:linkname procSethostname libc_sethostname
+//go:linkname procSetpgid libc_setpgid
+//go:linkname procSetpriority libc_setpriority
+//go:linkname procSetregid libc_setregid
+//go:linkname procSetreuid libc_setreuid
+//go:linkname procSetrlimit libc_setrlimit
+//go:linkname procSetsid libc_setsid
+//go:linkname procSetuid libc_setuid
+//go:linkname procshutdown libc_shutdown
+//go:linkname procStat libc_stat
+//go:linkname procStatvfs libc_statvfs
+//go:linkname procSymlink libc_symlink
+//go:linkname procSync libc_sync
+//go:linkname procTimes libc_times
+//go:linkname procTruncate libc_truncate
+//go:linkname procFsync libc_fsync
+//go:linkname procFtruncate libc_ftruncate
+//go:linkname procUmask libc_umask
+//go:linkname procUname libc_uname
+//go:linkname procumount libc_umount
+//go:linkname procUnlink libc_unlink
+//go:linkname procUnlinkat libc_unlinkat
+//go:linkname procUstat libc_ustat
+//go:linkname procUtime libc_utime
+//go:linkname proc__xnet_bind libc___xnet_bind
+//go:linkname proc__xnet_connect libc___xnet_connect
+//go:linkname procmmap libc_mmap
+//go:linkname procmunmap libc_munmap
+//go:linkname procsendfile libc_sendfile
+//go:linkname proc__xnet_sendto libc___xnet_sendto
+//go:linkname proc__xnet_socket libc___xnet_socket
+//go:linkname proc__xnet_socketpair libc___xnet_socketpair
+//go:linkname procwrite libc_write
+//go:linkname proc__xnet_getsockopt libc___xnet_getsockopt
+//go:linkname procgetpeername libc_getpeername
+//go:linkname procsetsockopt libc_setsockopt
+//go:linkname procrecvfrom libc_recvfrom
+
+var (
+	procpipe,
+	procgetsockname,
+	procGetcwd,
+	procgetgroups,
+	procsetgroups,
+	procwait4,
+	procgethostname,
+	procutimes,
+	procutimensat,
+	procfcntl,
+	procfutimesat,
+	procaccept,
+	proc__xnet_recvmsg,
+	proc__xnet_sendmsg,
+	procacct,
+	proc__makedev,
+	proc__major,
+	proc__minor,
+	procioctl,
+	procpoll,
+	procAccess,
+	procAdjtime,
+	procChdir,
+	procChmod,
+	procChown,
+	procChroot,
+	procClose,
+	procCreat,
+	procDup,
+	procDup2,
+	procExit,
+	procFaccessat,
+	procFchdir,
+	procFchmod,
+	procFchmodat,
+	procFchown,
+	procFchownat,
+	procFdatasync,
+	procFlock,
+	procFpathconf,
+	procFstat,
+	procFstatat,
+	procFstatvfs,
+	procGetdents,
+	procGetgid,
+	procGetpid,
+	procGetpgid,
+	procGetpgrp,
+	procGeteuid,
+	procGetegid,
+	procGetppid,
+	procGetpriority,
+	procGetrlimit,
+	procGetrusage,
+	procGettimeofday,
+	procGetuid,
+	procKill,
+	procLchown,
+	procLink,
+	proc__xnet_llisten,
+	procLstat,
+	procMadvise,
+	procMkdir,
+	procMkdirat,
+	procMkfifo,
+	procMkfifoat,
+	procMknod,
+	procMknodat,
+	procMlock,
+	procMlockall,
+	procMprotect,
+	procMsync,
+	procMunlock,
+	procMunlockall,
+	procNanosleep,
+	procOpen,
+	procOpenat,
+	procPathconf,
+	procPause,
+	procPread,
+	procPwrite,
+	procread,
+	procReadlink,
+	procRename,
+	procRenameat,
+	procRmdir,
+	proclseek,
+	procSelect,
+	procSetegid,
+	procSeteuid,
+	procSetgid,
+	procSethostname,
+	procSetpgid,
+	procSetpriority,
+	procSetregid,
+	procSetreuid,
+	procSetrlimit,
+	procSetsid,
+	procSetuid,
+	procshutdown,
+	procStat,
+	procStatvfs,
+	procSymlink,
+	procSync,
+	procTimes,
+	procTruncate,
+	procFsync,
+	procFtruncate,
+	procUmask,
+	procUname,
+	procumount,
+	procUnlink,
+	procUnlinkat,
+	procUstat,
+	procUtime,
+	proc__xnet_bind,
+	proc__xnet_connect,
+	procmmap,
+	procmunmap,
+	procsendfile,
+	proc__xnet_sendto,
+	proc__xnet_socket,
+	proc__xnet_socketpair,
+	procwrite,
+	proc__xnet_getsockopt,
+	procgetpeername,
+	procsetsockopt,
+	procrecvfrom syscallFunc
+)
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func pipe(p *[2]_C_int) (n int, err error) {
+	r0, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procpipe)), 1, uintptr(unsafe.Pointer(p)), 0, 0, 0, 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockname(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procgetsockname)), 3, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getcwd(buf []byte) (n int, err error) {
+	var _p0 *byte
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procGetcwd)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(len(buf)), 0, 0, 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getgroups(ngid int, gid *_Gid_t) (n int, err error) {
+	r0, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procgetgroups)), 2, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0, 0, 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setgroups(ngid int, gid *_Gid_t) (err error) {
+	_, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procsetgroups)), 2, uintptr(ngid), uintptr(unsafe.Pointer(gid)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func wait4(pid int32, statusp *_C_int, options int, rusage *Rusage) (wpid int32, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procwait4)), 4, uintptr(pid), uintptr(unsafe.Pointer(statusp)), uintptr(options), uintptr(unsafe.Pointer(rusage)), 0, 0)
+	wpid = int32(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func gethostname(buf []byte) (n int, err error) {
+	var _p0 *byte
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procgethostname)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(len(buf)), 0, 0, 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimes(path string, times *[2]Timeval) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procutimes)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func utimensat(fd int, path string, times *[2]Timespec, flag int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procutimensat)), 4, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(times)), uintptr(flag), 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func fcntl(fd int, cmd int, arg int) (val int, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procfcntl)), 3, uintptr(fd), uintptr(cmd), uintptr(arg), 0, 0, 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func futimesat(fildes int, path *byte, times *[2]Timeval) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procfutimesat)), 3, uintptr(fildes), uintptr(unsafe.Pointer(path)), uintptr(unsafe.Pointer(times)), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procaccept)), 3, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&proc__xnet_recvmsg)), 3, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags), 0, 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendmsg(s int, msg *Msghdr, flags int) (n int, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&proc__xnet_sendmsg)), 3, uintptr(s), uintptr(unsafe.Pointer(msg)), uintptr(flags), 0, 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func acct(path *byte) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procacct)), 1, uintptr(unsafe.Pointer(path)), 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func __makedev(version int, major uint, minor uint) (val uint64) {
+	r0, _, _ := sysvicall6(uintptr(unsafe.Pointer(&proc__makedev)), 3, uintptr(version), uintptr(major), uintptr(minor), 0, 0, 0)
+	val = uint64(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func __major(version int, dev uint64) (val uint) {
+	r0, _, _ := sysvicall6(uintptr(unsafe.Pointer(&proc__major)), 2, uintptr(version), uintptr(dev), 0, 0, 0, 0)
+	val = uint(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func __minor(version int, dev uint64) (val uint) {
+	r0, _, _ := sysvicall6(uintptr(unsafe.Pointer(&proc__minor)), 2, uintptr(version), uintptr(dev), 0, 0, 0, 0)
+	val = uint(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func ioctl(fd int, req uint, arg uintptr) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procioctl)), 3, uintptr(fd), uintptr(req), uintptr(arg), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func poll(fds *PollFd, nfds int, timeout int) (n int, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procpoll)), 3, uintptr(unsafe.Pointer(fds)), uintptr(nfds), uintptr(timeout), 0, 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Access(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procAccess)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Adjtime(delta *Timeval, olddelta *Timeval) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procAdjtime)), 2, uintptr(unsafe.Pointer(delta)), uintptr(unsafe.Pointer(olddelta)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procChdir)), 1, uintptr(unsafe.Pointer(_p0)), 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chmod(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procChmod)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procChown)), 3, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Chroot(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procChroot)), 1, uintptr(unsafe.Pointer(_p0)), 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Close(fd int) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procClose)), 1, uintptr(fd), 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Creat(path string, mode uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procCreat)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0, 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup(fd int) (nfd int, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procDup)), 1, uintptr(fd), 0, 0, 0, 0, 0)
+	nfd = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Dup2(oldfd int, newfd int) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procDup2)), 2, uintptr(oldfd), uintptr(newfd), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Exit(code int) {
+	sysvicall6(uintptr(unsafe.Pointer(&procExit)), 1, uintptr(code), 0, 0, 0, 0, 0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Faccessat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procFaccessat)), 4, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchdir(fd int) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procFchdir)), 1, uintptr(fd), 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmod(fd int, mode uint32) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procFchmod)), 2, uintptr(fd), uintptr(mode), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchmodat(dirfd int, path string, mode uint32, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procFchmodat)), 4, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchown(fd int, uid int, gid int) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procFchown)), 3, uintptr(fd), uintptr(uid), uintptr(gid), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fchownat(dirfd int, path string, uid int, gid int, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procFchownat)), 5, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), uintptr(flags), 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fdatasync(fd int) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procFdatasync)), 1, uintptr(fd), 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Flock(fd int, how int) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procFlock)), 2, uintptr(fd), uintptr(how), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fpathconf(fd int, name int) (val int, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procFpathconf)), 2, uintptr(fd), uintptr(name), 0, 0, 0, 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstat(fd int, stat *Stat_t) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procFstat)), 2, uintptr(fd), uintptr(unsafe.Pointer(stat)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatat(fd int, path string, stat *Stat_t, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procFstatat)), 4, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), uintptr(flags), 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fstatvfs(fd int, vfsstat *Statvfs_t) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procFstatvfs)), 2, uintptr(fd), uintptr(unsafe.Pointer(vfsstat)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getdents(fd int, buf []byte, basep *uintptr) (n int, err error) {
+	var _p0 *byte
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procGetdents)), 4, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(len(buf)), uintptr(unsafe.Pointer(basep)), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getgid() (gid int) {
+	r0, _, _ := rawSysvicall6(uintptr(unsafe.Pointer(&procGetgid)), 0, 0, 0, 0, 0, 0, 0)
+	gid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpid() (pid int) {
+	r0, _, _ := rawSysvicall6(uintptr(unsafe.Pointer(&procGetpid)), 0, 0, 0, 0, 0, 0, 0)
+	pid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgid(pid int) (pgid int, err error) {
+	r0, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procGetpgid)), 1, uintptr(pid), 0, 0, 0, 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpgrp() (pgid int, err error) {
+	r0, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procGetpgrp)), 0, 0, 0, 0, 0, 0, 0)
+	pgid = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Geteuid() (euid int) {
+	r0, _, _ := sysvicall6(uintptr(unsafe.Pointer(&procGeteuid)), 0, 0, 0, 0, 0, 0, 0)
+	euid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getegid() (egid int) {
+	r0, _, _ := sysvicall6(uintptr(unsafe.Pointer(&procGetegid)), 0, 0, 0, 0, 0, 0, 0)
+	egid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getppid() (ppid int) {
+	r0, _, _ := sysvicall6(uintptr(unsafe.Pointer(&procGetppid)), 0, 0, 0, 0, 0, 0, 0)
+	ppid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getpriority(which int, who int) (n int, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procGetpriority)), 2, uintptr(which), uintptr(who), 0, 0, 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procGetrlimit)), 2, uintptr(which), uintptr(unsafe.Pointer(lim)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getrusage(who int, rusage *Rusage) (err error) {
+	_, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procGetrusage)), 2, uintptr(who), uintptr(unsafe.Pointer(rusage)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Gettimeofday(tv *Timeval) (err error) {
+	_, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procGettimeofday)), 1, uintptr(unsafe.Pointer(tv)), 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Getuid() (uid int) {
+	r0, _, _ := rawSysvicall6(uintptr(unsafe.Pointer(&procGetuid)), 0, 0, 0, 0, 0, 0, 0)
+	uid = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Kill(pid int, signum syscall.Signal) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procKill)), 2, uintptr(pid), uintptr(signum), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lchown(path string, uid int, gid int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procLchown)), 3, uintptr(unsafe.Pointer(_p0)), uintptr(uid), uintptr(gid), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Link(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procLink)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Listen(s int, backlog int) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&proc__xnet_llisten)), 2, uintptr(s), uintptr(backlog), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Lstat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procLstat)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Madvise(b []byte, advice int) (err error) {
+	var _p0 *byte
+	if len(b) > 0 {
+		_p0 = &b[0]
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procMadvise)), 3, uintptr(unsafe.Pointer(_p0)), uintptr(len(b)), uintptr(advice), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdir(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procMkdir)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkdirat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procMkdirat)), 3, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifo(path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procMkfifo)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mkfifoat(dirfd int, path string, mode uint32) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procMkfifoat)), 3, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknod(path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procMknod)), 3, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mknodat(dirfd int, path string, mode uint32, dev int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procMknodat)), 4, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(dev), 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlock(b []byte) (err error) {
+	var _p0 *byte
+	if len(b) > 0 {
+		_p0 = &b[0]
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procMlock)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(len(b)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mlockall(flags int) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procMlockall)), 1, uintptr(flags), 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Mprotect(b []byte, prot int) (err error) {
+	var _p0 *byte
+	if len(b) > 0 {
+		_p0 = &b[0]
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procMprotect)), 3, uintptr(unsafe.Pointer(_p0)), uintptr(len(b)), uintptr(prot), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Msync(b []byte, flags int) (err error) {
+	var _p0 *byte
+	if len(b) > 0 {
+		_p0 = &b[0]
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procMsync)), 3, uintptr(unsafe.Pointer(_p0)), uintptr(len(b)), uintptr(flags), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlock(b []byte) (err error) {
+	var _p0 *byte
+	if len(b) > 0 {
+		_p0 = &b[0]
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procMunlock)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(len(b)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Munlockall() (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procMunlockall)), 0, 0, 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Nanosleep(time *Timespec, leftover *Timespec) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procNanosleep)), 2, uintptr(unsafe.Pointer(time)), uintptr(unsafe.Pointer(leftover)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Open(path string, mode int, perm uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procOpen)), 3, uintptr(unsafe.Pointer(_p0)), uintptr(mode), uintptr(perm), 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Openat(dirfd int, path string, flags int, mode uint32) (fd int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procOpenat)), 4, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags), uintptr(mode), 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pathconf(path string, name int) (val int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procPathconf)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(name), 0, 0, 0, 0)
+	val = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pause() (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procPause)), 0, 0, 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pread(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procPread)), 4, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Pwrite(fd int, p []byte, offset int64) (n int, err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procPwrite)), 4, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(len(p)), uintptr(offset), 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func read(fd int, p []byte) (n int, err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procread)), 3, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(len(p)), 0, 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Readlink(path string, buf []byte) (n int, err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	if len(buf) > 0 {
+		_p1 = &buf[0]
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procReadlink)), 3, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), uintptr(len(buf)), 0, 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rename(from string, to string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(from)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(to)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procRename)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Renameat(olddirfd int, oldpath string, newdirfd int, newpath string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(oldpath)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(newpath)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procRenameat)), 4, uintptr(olddirfd), uintptr(unsafe.Pointer(_p0)), uintptr(newdirfd), uintptr(unsafe.Pointer(_p1)), 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Rmdir(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procRmdir)), 1, uintptr(unsafe.Pointer(_p0)), 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seek(fd int, offset int64, whence int) (newoffset int64, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&proclseek)), 3, uintptr(fd), uintptr(offset), uintptr(whence), 0, 0, 0)
+	newoffset = int64(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Select(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timeval) (n int, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procSelect)), 5, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setegid(egid int) (err error) {
+	_, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procSetegid)), 1, uintptr(egid), 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Seteuid(euid int) (err error) {
+	_, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procSeteuid)), 1, uintptr(euid), 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setgid(gid int) (err error) {
+	_, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procSetgid)), 1, uintptr(gid), 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sethostname(p []byte) (err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procSethostname)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(len(p)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpgid(pid int, pgid int) (err error) {
+	_, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procSetpgid)), 2, uintptr(pid), uintptr(pgid), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setpriority(which int, who int, prio int) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procSetpriority)), 3, uintptr(which), uintptr(who), uintptr(prio), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setregid(rgid int, egid int) (err error) {
+	_, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procSetregid)), 2, uintptr(rgid), uintptr(egid), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setreuid(ruid int, euid int) (err error) {
+	_, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procSetreuid)), 2, uintptr(ruid), uintptr(euid), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setrlimit(which int, lim *Rlimit) (err error) {
+	_, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procSetrlimit)), 2, uintptr(which), uintptr(unsafe.Pointer(lim)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setsid() (pid int, err error) {
+	r0, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procSetsid)), 0, 0, 0, 0, 0, 0, 0)
+	pid = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Setuid(uid int) (err error) {
+	_, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procSetuid)), 1, uintptr(uid), 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Shutdown(s int, how int) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procshutdown)), 2, uintptr(s), uintptr(how), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Stat(path string, stat *Stat_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procStat)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(stat)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Statvfs(path string, vfsstat *Statvfs_t) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procStatvfs)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(vfsstat)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Symlink(path string, link string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = BytePtrFromString(link)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procSymlink)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(_p1)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Sync() (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procSync)), 0, 0, 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Times(tms *Tms) (ticks uintptr, err error) {
+	r0, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procTimes)), 1, uintptr(unsafe.Pointer(tms)), 0, 0, 0, 0, 0)
+	ticks = uintptr(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Truncate(path string, length int64) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procTruncate)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(length), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Fsync(fd int) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procFsync)), 1, uintptr(fd), 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ftruncate(fd int, length int64) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procFtruncate)), 2, uintptr(fd), uintptr(length), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Umask(mask int) (oldmask int) {
+	r0, _, _ := sysvicall6(uintptr(unsafe.Pointer(&procUmask)), 1, uintptr(mask), 0, 0, 0, 0, 0)
+	oldmask = int(r0)
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Uname(buf *Utsname) (err error) {
+	_, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procUname)), 1, uintptr(unsafe.Pointer(buf)), 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unmount(target string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(target)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procumount)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlink(path string) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procUnlink)), 1, uintptr(unsafe.Pointer(_p0)), 0, 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Unlinkat(dirfd int, path string, flags int) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procUnlinkat)), 3, uintptr(dirfd), uintptr(unsafe.Pointer(_p0)), uintptr(flags), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Ustat(dev int, ubuf *Ustat_t) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procUstat)), 2, uintptr(dev), uintptr(unsafe.Pointer(ubuf)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func Utime(path string, buf *Utimbuf) (err error) {
+	var _p0 *byte
+	_p0, err = BytePtrFromString(path)
+	if err != nil {
+		return
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procUtime)), 2, uintptr(unsafe.Pointer(_p0)), uintptr(unsafe.Pointer(buf)), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func bind(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&proc__xnet_bind)), 3, uintptr(s), uintptr(addr), uintptr(addrlen), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func connect(s int, addr unsafe.Pointer, addrlen _Socklen) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&proc__xnet_connect)), 3, uintptr(s), uintptr(addr), uintptr(addrlen), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func mmap(addr uintptr, length uintptr, prot int, flag int, fd int, pos int64) (ret uintptr, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procmmap)), 6, uintptr(addr), uintptr(length), uintptr(prot), uintptr(flag), uintptr(fd), uintptr(pos))
+	ret = uintptr(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func munmap(addr uintptr, length uintptr) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procmunmap)), 2, uintptr(addr), uintptr(length), 0, 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendfile(outfd int, infd int, offset *int64, count int) (written int, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procsendfile)), 4, uintptr(outfd), uintptr(infd), uintptr(unsafe.Pointer(offset)), uintptr(count), 0, 0)
+	written = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func sendto(s int, buf []byte, flags int, to unsafe.Pointer, addrlen _Socklen) (err error) {
+	var _p0 *byte
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&proc__xnet_sendto)), 6, uintptr(s), uintptr(unsafe.Pointer(_p0)), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(addrlen))
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socket(domain int, typ int, proto int) (fd int, err error) {
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&proc__xnet_socket)), 3, uintptr(domain), uintptr(typ), uintptr(proto), 0, 0, 0)
+	fd = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func socketpair(domain int, typ int, proto int, fd *[2]int32) (err error) {
+	_, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&proc__xnet_socketpair)), 4, uintptr(domain), uintptr(typ), uintptr(proto), uintptr(unsafe.Pointer(fd)), 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func write(fd int, p []byte) (n int, err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procwrite)), 3, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(len(p)), 0, 0, 0)
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getsockopt(s int, level int, name int, val unsafe.Pointer, vallen *_Socklen) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&proc__xnet_getsockopt)), 5, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(unsafe.Pointer(vallen)), 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func getpeername(fd int, rsa *RawSockaddrAny, addrlen *_Socklen) (err error) {
+	_, _, e1 := rawSysvicall6(uintptr(unsafe.Pointer(&procgetpeername)), 3, uintptr(fd), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)), 0, 0, 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func setsockopt(s int, level int, name int, val unsafe.Pointer, vallen uintptr) (err error) {
+	_, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procsetsockopt)), 5, uintptr(s), uintptr(level), uintptr(name), uintptr(val), uintptr(vallen), 0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
+
+// THIS FILE IS GENERATED BY THE COMMAND AT THE TOP; DO NOT EDIT
+
+func recvfrom(fd int, p []byte, flags int, from *RawSockaddrAny, fromlen *_Socklen) (n int, err error) {
+	var _p0 *byte
+	if len(p) > 0 {
+		_p0 = &p[0]
+	}
+	r0, _, e1 := sysvicall6(uintptr(unsafe.Pointer(&procrecvfrom)), 6, uintptr(fd), uintptr(unsafe.Pointer(_p0)), uintptr(len(p)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int(r0)
+	if e1 != 0 {
+		err = e1
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_386.go
new file mode 100644
index 000000000..102f1ab47
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_386.go
@@ -0,0 +1,273 @@
+// go run mksysctl_openbsd.go
+// Code generated by the command above; DO NOT EDIT.
+
+// +build 386,openbsd
+
+package unix
+
+type mibentry struct {
+	ctlname string
+	ctloid  []_C_int
+}
+
+var sysctlMib = []mibentry{
+	{"ddb.console", []_C_int{9, 6}},
+	{"ddb.log", []_C_int{9, 7}},
+	{"ddb.max_line", []_C_int{9, 3}},
+	{"ddb.max_width", []_C_int{9, 2}},
+	{"ddb.panic", []_C_int{9, 5}},
+	{"ddb.radix", []_C_int{9, 1}},
+	{"ddb.tab_stop_width", []_C_int{9, 4}},
+	{"ddb.trigger", []_C_int{9, 8}},
+	{"fs.posix.setuid", []_C_int{3, 1, 1}},
+	{"hw.allowpowerdown", []_C_int{6, 22}},
+	{"hw.byteorder", []_C_int{6, 4}},
+	{"hw.cpuspeed", []_C_int{6, 12}},
+	{"hw.diskcount", []_C_int{6, 10}},
+	{"hw.disknames", []_C_int{6, 8}},
+	{"hw.diskstats", []_C_int{6, 9}},
+	{"hw.machine", []_C_int{6, 1}},
+	{"hw.model", []_C_int{6, 2}},
+	{"hw.ncpu", []_C_int{6, 3}},
+	{"hw.ncpufound", []_C_int{6, 21}},
+	{"hw.ncpuonline", []_C_int{6, 25}},
+	{"hw.pagesize", []_C_int{6, 7}},
+	{"hw.physmem", []_C_int{6, 19}},
+	{"hw.product", []_C_int{6, 15}},
+	{"hw.serialno", []_C_int{6, 17}},
+	{"hw.setperf", []_C_int{6, 13}},
+	{"hw.usermem", []_C_int{6, 20}},
+	{"hw.uuid", []_C_int{6, 18}},
+	{"hw.vendor", []_C_int{6, 14}},
+	{"hw.version", []_C_int{6, 16}},
+	{"kern.arandom", []_C_int{1, 37}},
+	{"kern.argmax", []_C_int{1, 8}},
+	{"kern.boottime", []_C_int{1, 21}},
+	{"kern.bufcachepercent", []_C_int{1, 72}},
+	{"kern.ccpu", []_C_int{1, 45}},
+	{"kern.clockrate", []_C_int{1, 12}},
+	{"kern.consdev", []_C_int{1, 75}},
+	{"kern.cp_time", []_C_int{1, 40}},
+	{"kern.cp_time2", []_C_int{1, 71}},
+	{"kern.cryptodevallowsoft", []_C_int{1, 53}},
+	{"kern.domainname", []_C_int{1, 22}},
+	{"kern.file", []_C_int{1, 73}},
+	{"kern.forkstat", []_C_int{1, 42}},
+	{"kern.fscale", []_C_int{1, 46}},
+	{"kern.fsync", []_C_int{1, 33}},
+	{"kern.hostid", []_C_int{1, 11}},
+	{"kern.hostname", []_C_int{1, 10}},
+	{"kern.intrcnt.nintrcnt", []_C_int{1, 63, 1}},
+	{"kern.job_control", []_C_int{1, 19}},
+	{"kern.malloc.buckets", []_C_int{1, 39, 1}},
+	{"kern.malloc.kmemnames", []_C_int{1, 39, 3}},
+	{"kern.maxclusters", []_C_int{1, 67}},
+	{"kern.maxfiles", []_C_int{1, 7}},
+	{"kern.maxlocksperuid", []_C_int{1, 70}},
+	{"kern.maxpartitions", []_C_int{1, 23}},
+	{"kern.maxproc", []_C_int{1, 6}},
+	{"kern.maxthread", []_C_int{1, 25}},
+	{"kern.maxvnodes", []_C_int{1, 5}},
+	{"kern.mbstat", []_C_int{1, 59}},
+	{"kern.msgbuf", []_C_int{1, 48}},
+	{"kern.msgbufsize", []_C_int{1, 38}},
+	{"kern.nchstats", []_C_int{1, 41}},
+	{"kern.netlivelocks", []_C_int{1, 76}},
+	{"kern.nfiles", []_C_int{1, 56}},
+	{"kern.ngroups", []_C_int{1, 18}},
+	{"kern.nosuidcoredump", []_C_int{1, 32}},
+	{"kern.nprocs", []_C_int{1, 47}},
+	{"kern.nselcoll", []_C_int{1, 43}},
+	{"kern.nthreads", []_C_int{1, 26}},
+	{"kern.numvnodes", []_C_int{1, 58}},
+	{"kern.osrelease", []_C_int{1, 2}},
+	{"kern.osrevision", []_C_int{1, 3}},
+	{"kern.ostype", []_C_int{1, 1}},
+	{"kern.osversion", []_C_int{1, 27}},
+	{"kern.pool_debug", []_C_int{1, 77}},
+	{"kern.posix1version", []_C_int{1, 17}},
+	{"kern.proc", []_C_int{1, 66}},
+	{"kern.random", []_C_int{1, 31}},
+	{"kern.rawpartition", []_C_int{1, 24}},
+	{"kern.saved_ids", []_C_int{1, 20}},
+	{"kern.securelevel", []_C_int{1, 9}},
+	{"kern.seminfo", []_C_int{1, 61}},
+	{"kern.shminfo", []_C_int{1, 62}},
+	{"kern.somaxconn", []_C_int{1, 28}},
+	{"kern.sominconn", []_C_int{1, 29}},
+	{"kern.splassert", []_C_int{1, 54}},
+	{"kern.stackgap_random", []_C_int{1, 50}},
+	{"kern.sysvipc_info", []_C_int{1, 51}},
+	{"kern.sysvmsg", []_C_int{1, 34}},
+	{"kern.sysvsem", []_C_int{1, 35}},
+	{"kern.sysvshm", []_C_int{1, 36}},
+	{"kern.timecounter.choice", []_C_int{1, 69, 4}},
+	{"kern.timecounter.hardware", []_C_int{1, 69, 3}},
+	{"kern.timecounter.tick", []_C_int{1, 69, 1}},
+	{"kern.timecounter.timestepwarnings", []_C_int{1, 69, 2}},
+	{"kern.tty.maxptys", []_C_int{1, 44, 6}},
+	{"kern.tty.nptys", []_C_int{1, 44, 7}},
+	{"kern.tty.tk_cancc", []_C_int{1, 44, 4}},
+	{"kern.tty.tk_nin", []_C_int{1, 44, 1}},
+	{"kern.tty.tk_nout", []_C_int{1, 44, 2}},
+	{"kern.tty.tk_rawcc", []_C_int{1, 44, 3}},
+	{"kern.tty.ttyinfo", []_C_int{1, 44, 5}},
+	{"kern.ttycount", []_C_int{1, 57}},
+	{"kern.userasymcrypto", []_C_int{1, 60}},
+	{"kern.usercrypto", []_C_int{1, 52}},
+	{"kern.usermount", []_C_int{1, 30}},
+	{"kern.version", []_C_int{1, 4}},
+	{"kern.vnode", []_C_int{1, 13}},
+	{"kern.watchdog.auto", []_C_int{1, 64, 2}},
+	{"kern.watchdog.period", []_C_int{1, 64, 1}},
+	{"net.bpf.bufsize", []_C_int{4, 31, 1}},
+	{"net.bpf.maxbufsize", []_C_int{4, 31, 2}},
+	{"net.inet.ah.enable", []_C_int{4, 2, 51, 1}},
+	{"net.inet.ah.stats", []_C_int{4, 2, 51, 2}},
+	{"net.inet.carp.allow", []_C_int{4, 2, 112, 1}},
+	{"net.inet.carp.log", []_C_int{4, 2, 112, 3}},
+	{"net.inet.carp.preempt", []_C_int{4, 2, 112, 2}},
+	{"net.inet.carp.stats", []_C_int{4, 2, 112, 4}},
+	{"net.inet.divert.recvspace", []_C_int{4, 2, 258, 1}},
+	{"net.inet.divert.sendspace", []_C_int{4, 2, 258, 2}},
+	{"net.inet.divert.stats", []_C_int{4, 2, 258, 3}},
+	{"net.inet.esp.enable", []_C_int{4, 2, 50, 1}},
+	{"net.inet.esp.stats", []_C_int{4, 2, 50, 4}},
+	{"net.inet.esp.udpencap", []_C_int{4, 2, 50, 2}},
+	{"net.inet.esp.udpencap_port", []_C_int{4, 2, 50, 3}},
+	{"net.inet.etherip.allow", []_C_int{4, 2, 97, 1}},
+	{"net.inet.etherip.stats", []_C_int{4, 2, 97, 2}},
+	{"net.inet.gre.allow", []_C_int{4, 2, 47, 1}},
+	{"net.inet.gre.wccp", []_C_int{4, 2, 47, 2}},
+	{"net.inet.icmp.bmcastecho", []_C_int{4, 2, 1, 2}},
+	{"net.inet.icmp.errppslimit", []_C_int{4, 2, 1, 3}},
+	{"net.inet.icmp.maskrepl", []_C_int{4, 2, 1, 1}},
+	{"net.inet.icmp.rediraccept", []_C_int{4, 2, 1, 4}},
+	{"net.inet.icmp.redirtimeout", []_C_int{4, 2, 1, 5}},
+	{"net.inet.icmp.stats", []_C_int{4, 2, 1, 7}},
+	{"net.inet.icmp.tstamprepl", []_C_int{4, 2, 1, 6}},
+	{"net.inet.igmp.stats", []_C_int{4, 2, 2, 1}},
+	{"net.inet.ip.arpqueued", []_C_int{4, 2, 0, 36}},
+	{"net.inet.ip.encdebug", []_C_int{4, 2, 0, 12}},
+	{"net.inet.ip.forwarding", []_C_int{4, 2, 0, 1}},
+	{"net.inet.ip.ifq.congestion", []_C_int{4, 2, 0, 30, 4}},
+	{"net.inet.ip.ifq.drops", []_C_int{4, 2, 0, 30, 3}},
+	{"net.inet.ip.ifq.len", []_C_int{4, 2, 0, 30, 1}},
+	{"net.inet.ip.ifq.maxlen", []_C_int{4, 2, 0, 30, 2}},
+	{"net.inet.ip.maxqueue", []_C_int{4, 2, 0, 11}},
+	{"net.inet.ip.mforwarding", []_C_int{4, 2, 0, 31}},
+	{"net.inet.ip.mrtproto", []_C_int{4, 2, 0, 34}},
+	{"net.inet.ip.mrtstats", []_C_int{4, 2, 0, 35}},
+	{"net.inet.ip.mtu", []_C_int{4, 2, 0, 4}},
+	{"net.inet.ip.mtudisc", []_C_int{4, 2, 0, 27}},
+	{"net.inet.ip.mtudisctimeout", []_C_int{4, 2, 0, 28}},
+	{"net.inet.ip.multipath", []_C_int{4, 2, 0, 32}},
+	{"net.inet.ip.portfirst", []_C_int{4, 2, 0, 7}},
+	{"net.inet.ip.porthifirst", []_C_int{4, 2, 0, 9}},
+	{"net.inet.ip.porthilast", []_C_int{4, 2, 0, 10}},
+	{"net.inet.ip.portlast", []_C_int{4, 2, 0, 8}},
+	{"net.inet.ip.redirect", []_C_int{4, 2, 0, 2}},
+	{"net.inet.ip.sourceroute", []_C_int{4, 2, 0, 5}},
+	{"net.inet.ip.stats", []_C_int{4, 2, 0, 33}},
+	{"net.inet.ip.ttl", []_C_int{4, 2, 0, 3}},
+	{"net.inet.ipcomp.enable", []_C_int{4, 2, 108, 1}},
+	{"net.inet.ipcomp.stats", []_C_int{4, 2, 108, 2}},
+	{"net.inet.ipip.allow", []_C_int{4, 2, 4, 1}},
+	{"net.inet.ipip.stats", []_C_int{4, 2, 4, 2}},
+	{"net.inet.mobileip.allow", []_C_int{4, 2, 55, 1}},
+	{"net.inet.pfsync.stats", []_C_int{4, 2, 240, 1}},
+	{"net.inet.pim.stats", []_C_int{4, 2, 103, 1}},
+	{"net.inet.tcp.ackonpush", []_C_int{4, 2, 6, 13}},
+	{"net.inet.tcp.always_keepalive", []_C_int{4, 2, 6, 22}},
+	{"net.inet.tcp.baddynamic", []_C_int{4, 2, 6, 6}},
+	{"net.inet.tcp.drop", []_C_int{4, 2, 6, 19}},
+	{"net.inet.tcp.ecn", []_C_int{4, 2, 6, 14}},
+	{"net.inet.tcp.ident", []_C_int{4, 2, 6, 9}},
+	{"net.inet.tcp.keepidle", []_C_int{4, 2, 6, 3}},
+	{"net.inet.tcp.keepinittime", []_C_int{4, 2, 6, 2}},
+	{"net.inet.tcp.keepintvl", []_C_int{4, 2, 6, 4}},
+	{"net.inet.tcp.mssdflt", []_C_int{4, 2, 6, 11}},
+	{"net.inet.tcp.reasslimit", []_C_int{4, 2, 6, 18}},
+	{"net.inet.tcp.rfc1323", []_C_int{4, 2, 6, 1}},
+	{"net.inet.tcp.rfc3390", []_C_int{4, 2, 6, 17}},
+	{"net.inet.tcp.rstppslimit", []_C_int{4, 2, 6, 12}},
+	{"net.inet.tcp.sack", []_C_int{4, 2, 6, 10}},
+	{"net.inet.tcp.sackholelimit", []_C_int{4, 2, 6, 20}},
+	{"net.inet.tcp.slowhz", []_C_int{4, 2, 6, 5}},
+	{"net.inet.tcp.stats", []_C_int{4, 2, 6, 21}},
+	{"net.inet.tcp.synbucketlimit", []_C_int{4, 2, 6, 16}},
+	{"net.inet.tcp.syncachelimit", []_C_int{4, 2, 6, 15}},
+	{"net.inet.udp.baddynamic", []_C_int{4, 2, 17, 2}},
+	{"net.inet.udp.checksum", []_C_int{4, 2, 17, 1}},
+	{"net.inet.udp.recvspace", []_C_int{4, 2, 17, 3}},
+	{"net.inet.udp.sendspace", []_C_int{4, 2, 17, 4}},
+	{"net.inet.udp.stats", []_C_int{4, 2, 17, 5}},
+	{"net.inet6.divert.recvspace", []_C_int{4, 24, 86, 1}},
+	{"net.inet6.divert.sendspace", []_C_int{4, 24, 86, 2}},
+	{"net.inet6.divert.stats", []_C_int{4, 24, 86, 3}},
+	{"net.inet6.icmp6.errppslimit", []_C_int{4, 24, 30, 14}},
+	{"net.inet6.icmp6.mtudisc_hiwat", []_C_int{4, 24, 30, 16}},
+	{"net.inet6.icmp6.mtudisc_lowat", []_C_int{4, 24, 30, 17}},
+	{"net.inet6.icmp6.nd6_debug", []_C_int{4, 24, 30, 18}},
+	{"net.inet6.icmp6.nd6_delay", []_C_int{4, 24, 30, 8}},
+	{"net.inet6.icmp6.nd6_maxnudhint", []_C_int{4, 24, 30, 15}},
+	{"net.inet6.icmp6.nd6_mmaxtries", []_C_int{4, 24, 30, 10}},
+	{"net.inet6.icmp6.nd6_prune", []_C_int{4, 24, 30, 6}},
+	{"net.inet6.icmp6.nd6_umaxtries", []_C_int{4, 24, 30, 9}},
+	{"net.inet6.icmp6.nd6_useloopback", []_C_int{4, 24, 30, 11}},
+	{"net.inet6.icmp6.nodeinfo", []_C_int{4, 24, 30, 13}},
+	{"net.inet6.icmp6.rediraccept", []_C_int{4, 24, 30, 2}},
+	{"net.inet6.icmp6.redirtimeout", []_C_int{4, 24, 30, 3}},
+	{"net.inet6.ip6.accept_rtadv", []_C_int{4, 24, 17, 12}},
+	{"net.inet6.ip6.auto_flowlabel", []_C_int{4, 24, 17, 17}},
+	{"net.inet6.ip6.dad_count", []_C_int{4, 24, 17, 16}},
+	{"net.inet6.ip6.dad_pending", []_C_int{4, 24, 17, 49}},
+	{"net.inet6.ip6.defmcasthlim", []_C_int{4, 24, 17, 18}},
+	{"net.inet6.ip6.forwarding", []_C_int{4, 24, 17, 1}},
+	{"net.inet6.ip6.forwsrcrt", []_C_int{4, 24, 17, 5}},
+	{"net.inet6.ip6.hdrnestlimit", []_C_int{4, 24, 17, 15}},
+	{"net.inet6.ip6.hlim", []_C_int{4, 24, 17, 3}},
+	{"net.inet6.ip6.log_interval", []_C_int{4, 24, 17, 14}},
+	{"net.inet6.ip6.maxdynroutes", []_C_int{4, 24, 17, 48}},
+	{"net.inet6.ip6.maxfragpackets", []_C_int{4, 24, 17, 9}},
+	{"net.inet6.ip6.maxfrags", []_C_int{4, 24, 17, 41}},
+	{"net.inet6.ip6.maxifdefrouters", []_C_int{4, 24, 17, 47}},
+	{"net.inet6.ip6.maxifprefixes", []_C_int{4, 24, 17, 46}},
+	{"net.inet6.ip6.mforwarding", []_C_int{4, 24, 17, 42}},
+	{"net.inet6.ip6.mrtproto", []_C_int{4, 24, 17, 8}},
+	{"net.inet6.ip6.mtudisctimeout", []_C_int{4, 24, 17, 50}},
+	{"net.inet6.ip6.multicast_mtudisc", []_C_int{4, 24, 17, 44}},
+	{"net.inet6.ip6.multipath", []_C_int{4, 24, 17, 43}},
+	{"net.inet6.ip6.neighborgcthresh", []_C_int{4, 24, 17, 45}},
+	{"net.inet6.ip6.redirect", []_C_int{4, 24, 17, 2}},
+	{"net.inet6.ip6.rr_prune", []_C_int{4, 24, 17, 22}},
+	{"net.inet6.ip6.sourcecheck", []_C_int{4, 24, 17, 10}},
+	{"net.inet6.ip6.sourcecheck_logint", []_C_int{4, 24, 17, 11}},
+	{"net.inet6.ip6.use_deprecated", []_C_int{4, 24, 17, 21}},
+	{"net.inet6.ip6.v6only", []_C_int{4, 24, 17, 24}},
+	{"net.key.sadb_dump", []_C_int{4, 30, 1}},
+	{"net.key.spd_dump", []_C_int{4, 30, 2}},
+	{"net.mpls.ifq.congestion", []_C_int{4, 33, 3, 4}},
+	{"net.mpls.ifq.drops", []_C_int{4, 33, 3, 3}},
+	{"net.mpls.ifq.len", []_C_int{4, 33, 3, 1}},
+	{"net.mpls.ifq.maxlen", []_C_int{4, 33, 3, 2}},
+	{"net.mpls.mapttl_ip", []_C_int{4, 33, 5}},
+	{"net.mpls.mapttl_ip6", []_C_int{4, 33, 6}},
+	{"net.mpls.maxloop_inkernel", []_C_int{4, 33, 4}},
+	{"net.mpls.ttl", []_C_int{4, 33, 2}},
+	{"net.pflow.stats", []_C_int{4, 34, 1}},
+	{"net.pipex.enable", []_C_int{4, 35, 1}},
+	{"vm.anonmin", []_C_int{2, 7}},
+	{"vm.loadavg", []_C_int{2, 2}},
+	{"vm.maxslp", []_C_int{2, 10}},
+	{"vm.nkmempages", []_C_int{2, 6}},
+	{"vm.psstrings", []_C_int{2, 3}},
+	{"vm.swapencrypt.enable", []_C_int{2, 5, 0}},
+	{"vm.swapencrypt.keyscreated", []_C_int{2, 5, 1}},
+	{"vm.swapencrypt.keysdeleted", []_C_int{2, 5, 2}},
+	{"vm.uspace", []_C_int{2, 11}},
+	{"vm.uvmexp", []_C_int{2, 4}},
+	{"vm.vmmeter", []_C_int{2, 1}},
+	{"vm.vnodemin", []_C_int{2, 9}},
+	{"vm.vtextmin", []_C_int{2, 8}},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_amd64.go
new file mode 100644
index 000000000..4866fced8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_amd64.go
@@ -0,0 +1,271 @@
+// go run mksysctl_openbsd.go
+// Code generated by the command above; DO NOT EDIT.
+
+// +build amd64,openbsd
+
+package unix
+
+type mibentry struct {
+	ctlname string
+	ctloid  []_C_int
+}
+
+var sysctlMib = []mibentry{
+	{"ddb.console", []_C_int{9, 6}},
+	{"ddb.log", []_C_int{9, 7}},
+	{"ddb.max_line", []_C_int{9, 3}},
+	{"ddb.max_width", []_C_int{9, 2}},
+	{"ddb.panic", []_C_int{9, 5}},
+	{"ddb.profile", []_C_int{9, 9}},
+	{"ddb.radix", []_C_int{9, 1}},
+	{"ddb.tab_stop_width", []_C_int{9, 4}},
+	{"ddb.trigger", []_C_int{9, 8}},
+	{"fs.posix.setuid", []_C_int{3, 1, 1}},
+	{"hw.allowpowerdown", []_C_int{6, 22}},
+	{"hw.byteorder", []_C_int{6, 4}},
+	{"hw.cpuspeed", []_C_int{6, 12}},
+	{"hw.diskcount", []_C_int{6, 10}},
+	{"hw.disknames", []_C_int{6, 8}},
+	{"hw.diskstats", []_C_int{6, 9}},
+	{"hw.machine", []_C_int{6, 1}},
+	{"hw.model", []_C_int{6, 2}},
+	{"hw.ncpu", []_C_int{6, 3}},
+	{"hw.ncpufound", []_C_int{6, 21}},
+	{"hw.ncpuonline", []_C_int{6, 25}},
+	{"hw.pagesize", []_C_int{6, 7}},
+	{"hw.perfpolicy", []_C_int{6, 23}},
+	{"hw.physmem", []_C_int{6, 19}},
+	{"hw.product", []_C_int{6, 15}},
+	{"hw.serialno", []_C_int{6, 17}},
+	{"hw.setperf", []_C_int{6, 13}},
+	{"hw.usermem", []_C_int{6, 20}},
+	{"hw.uuid", []_C_int{6, 18}},
+	{"hw.vendor", []_C_int{6, 14}},
+	{"hw.version", []_C_int{6, 16}},
+	{"kern.allowkmem", []_C_int{1, 52}},
+	{"kern.argmax", []_C_int{1, 8}},
+	{"kern.boottime", []_C_int{1, 21}},
+	{"kern.bufcachepercent", []_C_int{1, 72}},
+	{"kern.ccpu", []_C_int{1, 45}},
+	{"kern.clockrate", []_C_int{1, 12}},
+	{"kern.consdev", []_C_int{1, 75}},
+	{"kern.cp_time", []_C_int{1, 40}},
+	{"kern.cp_time2", []_C_int{1, 71}},
+	{"kern.dnsjackport", []_C_int{1, 13}},
+	{"kern.domainname", []_C_int{1, 22}},
+	{"kern.file", []_C_int{1, 73}},
+	{"kern.forkstat", []_C_int{1, 42}},
+	{"kern.fscale", []_C_int{1, 46}},
+	{"kern.fsync", []_C_int{1, 33}},
+	{"kern.global_ptrace", []_C_int{1, 81}},
+	{"kern.hostid", []_C_int{1, 11}},
+	{"kern.hostname", []_C_int{1, 10}},
+	{"kern.intrcnt.nintrcnt", []_C_int{1, 63, 1}},
+	{"kern.job_control", []_C_int{1, 19}},
+	{"kern.malloc.buckets", []_C_int{1, 39, 1}},
+	{"kern.malloc.kmemnames", []_C_int{1, 39, 3}},
+	{"kern.maxclusters", []_C_int{1, 67}},
+	{"kern.maxfiles", []_C_int{1, 7}},
+	{"kern.maxlocksperuid", []_C_int{1, 70}},
+	{"kern.maxpartitions", []_C_int{1, 23}},
+	{"kern.maxproc", []_C_int{1, 6}},
+	{"kern.maxthread", []_C_int{1, 25}},
+	{"kern.maxvnodes", []_C_int{1, 5}},
+	{"kern.mbstat", []_C_int{1, 59}},
+	{"kern.msgbuf", []_C_int{1, 48}},
+	{"kern.msgbufsize", []_C_int{1, 38}},
+	{"kern.nchstats", []_C_int{1, 41}},
+	{"kern.netlivelocks", []_C_int{1, 76}},
+	{"kern.nfiles", []_C_int{1, 56}},
+	{"kern.ngroups", []_C_int{1, 18}},
+	{"kern.nosuidcoredump", []_C_int{1, 32}},
+	{"kern.nprocs", []_C_int{1, 47}},
+	{"kern.nselcoll", []_C_int{1, 43}},
+	{"kern.nthreads", []_C_int{1, 26}},
+	{"kern.numvnodes", []_C_int{1, 58}},
+	{"kern.osrelease", []_C_int{1, 2}},
+	{"kern.osrevision", []_C_int{1, 3}},
+	{"kern.ostype", []_C_int{1, 1}},
+	{"kern.osversion", []_C_int{1, 27}},
+	{"kern.pool_debug", []_C_int{1, 77}},
+	{"kern.posix1version", []_C_int{1, 17}},
+	{"kern.proc", []_C_int{1, 66}},
+	{"kern.rawpartition", []_C_int{1, 24}},
+	{"kern.saved_ids", []_C_int{1, 20}},
+	{"kern.securelevel", []_C_int{1, 9}},
+	{"kern.seminfo", []_C_int{1, 61}},
+	{"kern.shminfo", []_C_int{1, 62}},
+	{"kern.somaxconn", []_C_int{1, 28}},
+	{"kern.sominconn", []_C_int{1, 29}},
+	{"kern.splassert", []_C_int{1, 54}},
+	{"kern.stackgap_random", []_C_int{1, 50}},
+	{"kern.sysvipc_info", []_C_int{1, 51}},
+	{"kern.sysvmsg", []_C_int{1, 34}},
+	{"kern.sysvsem", []_C_int{1, 35}},
+	{"kern.sysvshm", []_C_int{1, 36}},
+	{"kern.timecounter.choice", []_C_int{1, 69, 4}},
+	{"kern.timecounter.hardware", []_C_int{1, 69, 3}},
+	{"kern.timecounter.tick", []_C_int{1, 69, 1}},
+	{"kern.timecounter.timestepwarnings", []_C_int{1, 69, 2}},
+	{"kern.tty.tk_cancc", []_C_int{1, 44, 4}},
+	{"kern.tty.tk_nin", []_C_int{1, 44, 1}},
+	{"kern.tty.tk_nout", []_C_int{1, 44, 2}},
+	{"kern.tty.tk_rawcc", []_C_int{1, 44, 3}},
+	{"kern.tty.ttyinfo", []_C_int{1, 44, 5}},
+	{"kern.ttycount", []_C_int{1, 57}},
+	{"kern.version", []_C_int{1, 4}},
+	{"kern.watchdog.auto", []_C_int{1, 64, 2}},
+	{"kern.watchdog.period", []_C_int{1, 64, 1}},
+	{"kern.wxabort", []_C_int{1, 74}},
+	{"net.bpf.bufsize", []_C_int{4, 31, 1}},
+	{"net.bpf.maxbufsize", []_C_int{4, 31, 2}},
+	{"net.inet.ah.enable", []_C_int{4, 2, 51, 1}},
+	{"net.inet.ah.stats", []_C_int{4, 2, 51, 2}},
+	{"net.inet.carp.allow", []_C_int{4, 2, 112, 1}},
+	{"net.inet.carp.log", []_C_int{4, 2, 112, 3}},
+	{"net.inet.carp.preempt", []_C_int{4, 2, 112, 2}},
+	{"net.inet.carp.stats", []_C_int{4, 2, 112, 4}},
+	{"net.inet.divert.recvspace", []_C_int{4, 2, 258, 1}},
+	{"net.inet.divert.sendspace", []_C_int{4, 2, 258, 2}},
+	{"net.inet.divert.stats", []_C_int{4, 2, 258, 3}},
+	{"net.inet.esp.enable", []_C_int{4, 2, 50, 1}},
+	{"net.inet.esp.stats", []_C_int{4, 2, 50, 4}},
+	{"net.inet.esp.udpencap", []_C_int{4, 2, 50, 2}},
+	{"net.inet.esp.udpencap_port", []_C_int{4, 2, 50, 3}},
+	{"net.inet.etherip.allow", []_C_int{4, 2, 97, 1}},
+	{"net.inet.etherip.stats", []_C_int{4, 2, 97, 2}},
+	{"net.inet.gre.allow", []_C_int{4, 2, 47, 1}},
+	{"net.inet.gre.wccp", []_C_int{4, 2, 47, 2}},
+	{"net.inet.icmp.bmcastecho", []_C_int{4, 2, 1, 2}},
+	{"net.inet.icmp.errppslimit", []_C_int{4, 2, 1, 3}},
+	{"net.inet.icmp.maskrepl", []_C_int{4, 2, 1, 1}},
+	{"net.inet.icmp.rediraccept", []_C_int{4, 2, 1, 4}},
+	{"net.inet.icmp.redirtimeout", []_C_int{4, 2, 1, 5}},
+	{"net.inet.icmp.stats", []_C_int{4, 2, 1, 7}},
+	{"net.inet.icmp.tstamprepl", []_C_int{4, 2, 1, 6}},
+	{"net.inet.igmp.stats", []_C_int{4, 2, 2, 1}},
+	{"net.inet.ip.arpdown", []_C_int{4, 2, 0, 40}},
+	{"net.inet.ip.arpqueued", []_C_int{4, 2, 0, 36}},
+	{"net.inet.ip.arptimeout", []_C_int{4, 2, 0, 39}},
+	{"net.inet.ip.encdebug", []_C_int{4, 2, 0, 12}},
+	{"net.inet.ip.forwarding", []_C_int{4, 2, 0, 1}},
+	{"net.inet.ip.ifq.congestion", []_C_int{4, 2, 0, 30, 4}},
+	{"net.inet.ip.ifq.drops", []_C_int{4, 2, 0, 30, 3}},
+	{"net.inet.ip.ifq.len", []_C_int{4, 2, 0, 30, 1}},
+	{"net.inet.ip.ifq.maxlen", []_C_int{4, 2, 0, 30, 2}},
+	{"net.inet.ip.maxqueue", []_C_int{4, 2, 0, 11}},
+	{"net.inet.ip.mforwarding", []_C_int{4, 2, 0, 31}},
+	{"net.inet.ip.mrtmfc", []_C_int{4, 2, 0, 37}},
+	{"net.inet.ip.mrtproto", []_C_int{4, 2, 0, 34}},
+	{"net.inet.ip.mrtstats", []_C_int{4, 2, 0, 35}},
+	{"net.inet.ip.mrtvif", []_C_int{4, 2, 0, 38}},
+	{"net.inet.ip.mtu", []_C_int{4, 2, 0, 4}},
+	{"net.inet.ip.mtudisc", []_C_int{4, 2, 0, 27}},
+	{"net.inet.ip.mtudisctimeout", []_C_int{4, 2, 0, 28}},
+	{"net.inet.ip.multipath", []_C_int{4, 2, 0, 32}},
+	{"net.inet.ip.portfirst", []_C_int{4, 2, 0, 7}},
+	{"net.inet.ip.porthifirst", []_C_int{4, 2, 0, 9}},
+	{"net.inet.ip.porthilast", []_C_int{4, 2, 0, 10}},
+	{"net.inet.ip.portlast", []_C_int{4, 2, 0, 8}},
+	{"net.inet.ip.redirect", []_C_int{4, 2, 0, 2}},
+	{"net.inet.ip.sourceroute", []_C_int{4, 2, 0, 5}},
+	{"net.inet.ip.stats", []_C_int{4, 2, 0, 33}},
+	{"net.inet.ip.ttl", []_C_int{4, 2, 0, 3}},
+	{"net.inet.ipcomp.enable", []_C_int{4, 2, 108, 1}},
+	{"net.inet.ipcomp.stats", []_C_int{4, 2, 108, 2}},
+	{"net.inet.ipip.allow", []_C_int{4, 2, 4, 1}},
+	{"net.inet.ipip.stats", []_C_int{4, 2, 4, 2}},
+	{"net.inet.mobileip.allow", []_C_int{4, 2, 55, 1}},
+	{"net.inet.pfsync.stats", []_C_int{4, 2, 240, 1}},
+	{"net.inet.tcp.ackonpush", []_C_int{4, 2, 6, 13}},
+	{"net.inet.tcp.always_keepalive", []_C_int{4, 2, 6, 22}},
+	{"net.inet.tcp.baddynamic", []_C_int{4, 2, 6, 6}},
+	{"net.inet.tcp.drop", []_C_int{4, 2, 6, 19}},
+	{"net.inet.tcp.ecn", []_C_int{4, 2, 6, 14}},
+	{"net.inet.tcp.ident", []_C_int{4, 2, 6, 9}},
+	{"net.inet.tcp.keepidle", []_C_int{4, 2, 6, 3}},
+	{"net.inet.tcp.keepinittime", []_C_int{4, 2, 6, 2}},
+	{"net.inet.tcp.keepintvl", []_C_int{4, 2, 6, 4}},
+	{"net.inet.tcp.mssdflt", []_C_int{4, 2, 6, 11}},
+	{"net.inet.tcp.reasslimit", []_C_int{4, 2, 6, 18}},
+	{"net.inet.tcp.rfc1323", []_C_int{4, 2, 6, 1}},
+	{"net.inet.tcp.rfc3390", []_C_int{4, 2, 6, 17}},
+	{"net.inet.tcp.rootonly", []_C_int{4, 2, 6, 24}},
+	{"net.inet.tcp.rstppslimit", []_C_int{4, 2, 6, 12}},
+	{"net.inet.tcp.sack", []_C_int{4, 2, 6, 10}},
+	{"net.inet.tcp.sackholelimit", []_C_int{4, 2, 6, 20}},
+	{"net.inet.tcp.slowhz", []_C_int{4, 2, 6, 5}},
+	{"net.inet.tcp.stats", []_C_int{4, 2, 6, 21}},
+	{"net.inet.tcp.synbucketlimit", []_C_int{4, 2, 6, 16}},
+	{"net.inet.tcp.syncachelimit", []_C_int{4, 2, 6, 15}},
+	{"net.inet.tcp.synhashsize", []_C_int{4, 2, 6, 25}},
+	{"net.inet.tcp.synuselimit", []_C_int{4, 2, 6, 23}},
+	{"net.inet.udp.baddynamic", []_C_int{4, 2, 17, 2}},
+	{"net.inet.udp.checksum", []_C_int{4, 2, 17, 1}},
+	{"net.inet.udp.recvspace", []_C_int{4, 2, 17, 3}},
+	{"net.inet.udp.rootonly", []_C_int{4, 2, 17, 6}},
+	{"net.inet.udp.sendspace", []_C_int{4, 2, 17, 4}},
+	{"net.inet.udp.stats", []_C_int{4, 2, 17, 5}},
+	{"net.inet6.divert.recvspace", []_C_int{4, 24, 86, 1}},
+	{"net.inet6.divert.sendspace", []_C_int{4, 24, 86, 2}},
+	{"net.inet6.divert.stats", []_C_int{4, 24, 86, 3}},
+	{"net.inet6.icmp6.errppslimit", []_C_int{4, 24, 30, 14}},
+	{"net.inet6.icmp6.mtudisc_hiwat", []_C_int{4, 24, 30, 16}},
+	{"net.inet6.icmp6.mtudisc_lowat", []_C_int{4, 24, 30, 17}},
+	{"net.inet6.icmp6.nd6_debug", []_C_int{4, 24, 30, 18}},
+	{"net.inet6.icmp6.nd6_delay", []_C_int{4, 24, 30, 8}},
+	{"net.inet6.icmp6.nd6_maxnudhint", []_C_int{4, 24, 30, 15}},
+	{"net.inet6.icmp6.nd6_mmaxtries", []_C_int{4, 24, 30, 10}},
+	{"net.inet6.icmp6.nd6_umaxtries", []_C_int{4, 24, 30, 9}},
+	{"net.inet6.icmp6.redirtimeout", []_C_int{4, 24, 30, 3}},
+	{"net.inet6.ip6.auto_flowlabel", []_C_int{4, 24, 17, 17}},
+	{"net.inet6.ip6.dad_count", []_C_int{4, 24, 17, 16}},
+	{"net.inet6.ip6.dad_pending", []_C_int{4, 24, 17, 49}},
+	{"net.inet6.ip6.defmcasthlim", []_C_int{4, 24, 17, 18}},
+	{"net.inet6.ip6.forwarding", []_C_int{4, 24, 17, 1}},
+	{"net.inet6.ip6.forwsrcrt", []_C_int{4, 24, 17, 5}},
+	{"net.inet6.ip6.hdrnestlimit", []_C_int{4, 24, 17, 15}},
+	{"net.inet6.ip6.hlim", []_C_int{4, 24, 17, 3}},
+	{"net.inet6.ip6.log_interval", []_C_int{4, 24, 17, 14}},
+	{"net.inet6.ip6.maxdynroutes", []_C_int{4, 24, 17, 48}},
+	{"net.inet6.ip6.maxfragpackets", []_C_int{4, 24, 17, 9}},
+	{"net.inet6.ip6.maxfrags", []_C_int{4, 24, 17, 41}},
+	{"net.inet6.ip6.mforwarding", []_C_int{4, 24, 17, 42}},
+	{"net.inet6.ip6.mrtmfc", []_C_int{4, 24, 17, 53}},
+	{"net.inet6.ip6.mrtmif", []_C_int{4, 24, 17, 52}},
+	{"net.inet6.ip6.mrtproto", []_C_int{4, 24, 17, 8}},
+	{"net.inet6.ip6.mtudisctimeout", []_C_int{4, 24, 17, 50}},
+	{"net.inet6.ip6.multicast_mtudisc", []_C_int{4, 24, 17, 44}},
+	{"net.inet6.ip6.multipath", []_C_int{4, 24, 17, 43}},
+	{"net.inet6.ip6.neighborgcthresh", []_C_int{4, 24, 17, 45}},
+	{"net.inet6.ip6.redirect", []_C_int{4, 24, 17, 2}},
+	{"net.inet6.ip6.soiikey", []_C_int{4, 24, 17, 54}},
+	{"net.inet6.ip6.sourcecheck", []_C_int{4, 24, 17, 10}},
+	{"net.inet6.ip6.sourcecheck_logint", []_C_int{4, 24, 17, 11}},
+	{"net.inet6.ip6.use_deprecated", []_C_int{4, 24, 17, 21}},
+	{"net.key.sadb_dump", []_C_int{4, 30, 1}},
+	{"net.key.spd_dump", []_C_int{4, 30, 2}},
+	{"net.mpls.ifq.congestion", []_C_int{4, 33, 3, 4}},
+	{"net.mpls.ifq.drops", []_C_int{4, 33, 3, 3}},
+	{"net.mpls.ifq.len", []_C_int{4, 33, 3, 1}},
+	{"net.mpls.ifq.maxlen", []_C_int{4, 33, 3, 2}},
+	{"net.mpls.mapttl_ip", []_C_int{4, 33, 5}},
+	{"net.mpls.mapttl_ip6", []_C_int{4, 33, 6}},
+	{"net.mpls.maxloop_inkernel", []_C_int{4, 33, 4}},
+	{"net.mpls.ttl", []_C_int{4, 33, 2}},
+	{"net.pflow.stats", []_C_int{4, 34, 1}},
+	{"net.pipex.enable", []_C_int{4, 35, 1}},
+	{"vm.anonmin", []_C_int{2, 7}},
+	{"vm.loadavg", []_C_int{2, 2}},
+	{"vm.maxslp", []_C_int{2, 10}},
+	{"vm.nkmempages", []_C_int{2, 6}},
+	{"vm.psstrings", []_C_int{2, 3}},
+	{"vm.swapencrypt.enable", []_C_int{2, 5, 0}},
+	{"vm.swapencrypt.keyscreated", []_C_int{2, 5, 1}},
+	{"vm.swapencrypt.keysdeleted", []_C_int{2, 5, 2}},
+	{"vm.uspace", []_C_int{2, 11}},
+	{"vm.uvmexp", []_C_int{2, 4}},
+	{"vm.vmmeter", []_C_int{2, 1}},
+	{"vm.vnodemin", []_C_int{2, 9}},
+	{"vm.vtextmin", []_C_int{2, 8}},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_arm.go
new file mode 100644
index 000000000..d3801eb24
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_arm.go
@@ -0,0 +1,273 @@
+// go run mksysctl_openbsd.go
+// Code generated by the command above; DO NOT EDIT.
+
+// +build arm,openbsd
+
+package unix
+
+type mibentry struct {
+	ctlname string
+	ctloid  []_C_int
+}
+
+var sysctlMib = []mibentry{
+	{"ddb.console", []_C_int{9, 6}},
+	{"ddb.log", []_C_int{9, 7}},
+	{"ddb.max_line", []_C_int{9, 3}},
+	{"ddb.max_width", []_C_int{9, 2}},
+	{"ddb.panic", []_C_int{9, 5}},
+	{"ddb.radix", []_C_int{9, 1}},
+	{"ddb.tab_stop_width", []_C_int{9, 4}},
+	{"ddb.trigger", []_C_int{9, 8}},
+	{"fs.posix.setuid", []_C_int{3, 1, 1}},
+	{"hw.allowpowerdown", []_C_int{6, 22}},
+	{"hw.byteorder", []_C_int{6, 4}},
+	{"hw.cpuspeed", []_C_int{6, 12}},
+	{"hw.diskcount", []_C_int{6, 10}},
+	{"hw.disknames", []_C_int{6, 8}},
+	{"hw.diskstats", []_C_int{6, 9}},
+	{"hw.machine", []_C_int{6, 1}},
+	{"hw.model", []_C_int{6, 2}},
+	{"hw.ncpu", []_C_int{6, 3}},
+	{"hw.ncpufound", []_C_int{6, 21}},
+	{"hw.ncpuonline", []_C_int{6, 25}},
+	{"hw.pagesize", []_C_int{6, 7}},
+	{"hw.physmem", []_C_int{6, 19}},
+	{"hw.product", []_C_int{6, 15}},
+	{"hw.serialno", []_C_int{6, 17}},
+	{"hw.setperf", []_C_int{6, 13}},
+	{"hw.usermem", []_C_int{6, 20}},
+	{"hw.uuid", []_C_int{6, 18}},
+	{"hw.vendor", []_C_int{6, 14}},
+	{"hw.version", []_C_int{6, 16}},
+	{"kern.arandom", []_C_int{1, 37}},
+	{"kern.argmax", []_C_int{1, 8}},
+	{"kern.boottime", []_C_int{1, 21}},
+	{"kern.bufcachepercent", []_C_int{1, 72}},
+	{"kern.ccpu", []_C_int{1, 45}},
+	{"kern.clockrate", []_C_int{1, 12}},
+	{"kern.consdev", []_C_int{1, 75}},
+	{"kern.cp_time", []_C_int{1, 40}},
+	{"kern.cp_time2", []_C_int{1, 71}},
+	{"kern.cryptodevallowsoft", []_C_int{1, 53}},
+	{"kern.domainname", []_C_int{1, 22}},
+	{"kern.file", []_C_int{1, 73}},
+	{"kern.forkstat", []_C_int{1, 42}},
+	{"kern.fscale", []_C_int{1, 46}},
+	{"kern.fsync", []_C_int{1, 33}},
+	{"kern.hostid", []_C_int{1, 11}},
+	{"kern.hostname", []_C_int{1, 10}},
+	{"kern.intrcnt.nintrcnt", []_C_int{1, 63, 1}},
+	{"kern.job_control", []_C_int{1, 19}},
+	{"kern.malloc.buckets", []_C_int{1, 39, 1}},
+	{"kern.malloc.kmemnames", []_C_int{1, 39, 3}},
+	{"kern.maxclusters", []_C_int{1, 67}},
+	{"kern.maxfiles", []_C_int{1, 7}},
+	{"kern.maxlocksperuid", []_C_int{1, 70}},
+	{"kern.maxpartitions", []_C_int{1, 23}},
+	{"kern.maxproc", []_C_int{1, 6}},
+	{"kern.maxthread", []_C_int{1, 25}},
+	{"kern.maxvnodes", []_C_int{1, 5}},
+	{"kern.mbstat", []_C_int{1, 59}},
+	{"kern.msgbuf", []_C_int{1, 48}},
+	{"kern.msgbufsize", []_C_int{1, 38}},
+	{"kern.nchstats", []_C_int{1, 41}},
+	{"kern.netlivelocks", []_C_int{1, 76}},
+	{"kern.nfiles", []_C_int{1, 56}},
+	{"kern.ngroups", []_C_int{1, 18}},
+	{"kern.nosuidcoredump", []_C_int{1, 32}},
+	{"kern.nprocs", []_C_int{1, 47}},
+	{"kern.nselcoll", []_C_int{1, 43}},
+	{"kern.nthreads", []_C_int{1, 26}},
+	{"kern.numvnodes", []_C_int{1, 58}},
+	{"kern.osrelease", []_C_int{1, 2}},
+	{"kern.osrevision", []_C_int{1, 3}},
+	{"kern.ostype", []_C_int{1, 1}},
+	{"kern.osversion", []_C_int{1, 27}},
+	{"kern.pool_debug", []_C_int{1, 77}},
+	{"kern.posix1version", []_C_int{1, 17}},
+	{"kern.proc", []_C_int{1, 66}},
+	{"kern.random", []_C_int{1, 31}},
+	{"kern.rawpartition", []_C_int{1, 24}},
+	{"kern.saved_ids", []_C_int{1, 20}},
+	{"kern.securelevel", []_C_int{1, 9}},
+	{"kern.seminfo", []_C_int{1, 61}},
+	{"kern.shminfo", []_C_int{1, 62}},
+	{"kern.somaxconn", []_C_int{1, 28}},
+	{"kern.sominconn", []_C_int{1, 29}},
+	{"kern.splassert", []_C_int{1, 54}},
+	{"kern.stackgap_random", []_C_int{1, 50}},
+	{"kern.sysvipc_info", []_C_int{1, 51}},
+	{"kern.sysvmsg", []_C_int{1, 34}},
+	{"kern.sysvsem", []_C_int{1, 35}},
+	{"kern.sysvshm", []_C_int{1, 36}},
+	{"kern.timecounter.choice", []_C_int{1, 69, 4}},
+	{"kern.timecounter.hardware", []_C_int{1, 69, 3}},
+	{"kern.timecounter.tick", []_C_int{1, 69, 1}},
+	{"kern.timecounter.timestepwarnings", []_C_int{1, 69, 2}},
+	{"kern.tty.maxptys", []_C_int{1, 44, 6}},
+	{"kern.tty.nptys", []_C_int{1, 44, 7}},
+	{"kern.tty.tk_cancc", []_C_int{1, 44, 4}},
+	{"kern.tty.tk_nin", []_C_int{1, 44, 1}},
+	{"kern.tty.tk_nout", []_C_int{1, 44, 2}},
+	{"kern.tty.tk_rawcc", []_C_int{1, 44, 3}},
+	{"kern.tty.ttyinfo", []_C_int{1, 44, 5}},
+	{"kern.ttycount", []_C_int{1, 57}},
+	{"kern.userasymcrypto", []_C_int{1, 60}},
+	{"kern.usercrypto", []_C_int{1, 52}},
+	{"kern.usermount", []_C_int{1, 30}},
+	{"kern.version", []_C_int{1, 4}},
+	{"kern.vnode", []_C_int{1, 13}},
+	{"kern.watchdog.auto", []_C_int{1, 64, 2}},
+	{"kern.watchdog.period", []_C_int{1, 64, 1}},
+	{"net.bpf.bufsize", []_C_int{4, 31, 1}},
+	{"net.bpf.maxbufsize", []_C_int{4, 31, 2}},
+	{"net.inet.ah.enable", []_C_int{4, 2, 51, 1}},
+	{"net.inet.ah.stats", []_C_int{4, 2, 51, 2}},
+	{"net.inet.carp.allow", []_C_int{4, 2, 112, 1}},
+	{"net.inet.carp.log", []_C_int{4, 2, 112, 3}},
+	{"net.inet.carp.preempt", []_C_int{4, 2, 112, 2}},
+	{"net.inet.carp.stats", []_C_int{4, 2, 112, 4}},
+	{"net.inet.divert.recvspace", []_C_int{4, 2, 258, 1}},
+	{"net.inet.divert.sendspace", []_C_int{4, 2, 258, 2}},
+	{"net.inet.divert.stats", []_C_int{4, 2, 258, 3}},
+	{"net.inet.esp.enable", []_C_int{4, 2, 50, 1}},
+	{"net.inet.esp.stats", []_C_int{4, 2, 50, 4}},
+	{"net.inet.esp.udpencap", []_C_int{4, 2, 50, 2}},
+	{"net.inet.esp.udpencap_port", []_C_int{4, 2, 50, 3}},
+	{"net.inet.etherip.allow", []_C_int{4, 2, 97, 1}},
+	{"net.inet.etherip.stats", []_C_int{4, 2, 97, 2}},
+	{"net.inet.gre.allow", []_C_int{4, 2, 47, 1}},
+	{"net.inet.gre.wccp", []_C_int{4, 2, 47, 2}},
+	{"net.inet.icmp.bmcastecho", []_C_int{4, 2, 1, 2}},
+	{"net.inet.icmp.errppslimit", []_C_int{4, 2, 1, 3}},
+	{"net.inet.icmp.maskrepl", []_C_int{4, 2, 1, 1}},
+	{"net.inet.icmp.rediraccept", []_C_int{4, 2, 1, 4}},
+	{"net.inet.icmp.redirtimeout", []_C_int{4, 2, 1, 5}},
+	{"net.inet.icmp.stats", []_C_int{4, 2, 1, 7}},
+	{"net.inet.icmp.tstamprepl", []_C_int{4, 2, 1, 6}},
+	{"net.inet.igmp.stats", []_C_int{4, 2, 2, 1}},
+	{"net.inet.ip.arpqueued", []_C_int{4, 2, 0, 36}},
+	{"net.inet.ip.encdebug", []_C_int{4, 2, 0, 12}},
+	{"net.inet.ip.forwarding", []_C_int{4, 2, 0, 1}},
+	{"net.inet.ip.ifq.congestion", []_C_int{4, 2, 0, 30, 4}},
+	{"net.inet.ip.ifq.drops", []_C_int{4, 2, 0, 30, 3}},
+	{"net.inet.ip.ifq.len", []_C_int{4, 2, 0, 30, 1}},
+	{"net.inet.ip.ifq.maxlen", []_C_int{4, 2, 0, 30, 2}},
+	{"net.inet.ip.maxqueue", []_C_int{4, 2, 0, 11}},
+	{"net.inet.ip.mforwarding", []_C_int{4, 2, 0, 31}},
+	{"net.inet.ip.mrtproto", []_C_int{4, 2, 0, 34}},
+	{"net.inet.ip.mrtstats", []_C_int{4, 2, 0, 35}},
+	{"net.inet.ip.mtu", []_C_int{4, 2, 0, 4}},
+	{"net.inet.ip.mtudisc", []_C_int{4, 2, 0, 27}},
+	{"net.inet.ip.mtudisctimeout", []_C_int{4, 2, 0, 28}},
+	{"net.inet.ip.multipath", []_C_int{4, 2, 0, 32}},
+	{"net.inet.ip.portfirst", []_C_int{4, 2, 0, 7}},
+	{"net.inet.ip.porthifirst", []_C_int{4, 2, 0, 9}},
+	{"net.inet.ip.porthilast", []_C_int{4, 2, 0, 10}},
+	{"net.inet.ip.portlast", []_C_int{4, 2, 0, 8}},
+	{"net.inet.ip.redirect", []_C_int{4, 2, 0, 2}},
+	{"net.inet.ip.sourceroute", []_C_int{4, 2, 0, 5}},
+	{"net.inet.ip.stats", []_C_int{4, 2, 0, 33}},
+	{"net.inet.ip.ttl", []_C_int{4, 2, 0, 3}},
+	{"net.inet.ipcomp.enable", []_C_int{4, 2, 108, 1}},
+	{"net.inet.ipcomp.stats", []_C_int{4, 2, 108, 2}},
+	{"net.inet.ipip.allow", []_C_int{4, 2, 4, 1}},
+	{"net.inet.ipip.stats", []_C_int{4, 2, 4, 2}},
+	{"net.inet.mobileip.allow", []_C_int{4, 2, 55, 1}},
+	{"net.inet.pfsync.stats", []_C_int{4, 2, 240, 1}},
+	{"net.inet.pim.stats", []_C_int{4, 2, 103, 1}},
+	{"net.inet.tcp.ackonpush", []_C_int{4, 2, 6, 13}},
+	{"net.inet.tcp.always_keepalive", []_C_int{4, 2, 6, 22}},
+	{"net.inet.tcp.baddynamic", []_C_int{4, 2, 6, 6}},
+	{"net.inet.tcp.drop", []_C_int{4, 2, 6, 19}},
+	{"net.inet.tcp.ecn", []_C_int{4, 2, 6, 14}},
+	{"net.inet.tcp.ident", []_C_int{4, 2, 6, 9}},
+	{"net.inet.tcp.keepidle", []_C_int{4, 2, 6, 3}},
+	{"net.inet.tcp.keepinittime", []_C_int{4, 2, 6, 2}},
+	{"net.inet.tcp.keepintvl", []_C_int{4, 2, 6, 4}},
+	{"net.inet.tcp.mssdflt", []_C_int{4, 2, 6, 11}},
+	{"net.inet.tcp.reasslimit", []_C_int{4, 2, 6, 18}},
+	{"net.inet.tcp.rfc1323", []_C_int{4, 2, 6, 1}},
+	{"net.inet.tcp.rfc3390", []_C_int{4, 2, 6, 17}},
+	{"net.inet.tcp.rstppslimit", []_C_int{4, 2, 6, 12}},
+	{"net.inet.tcp.sack", []_C_int{4, 2, 6, 10}},
+	{"net.inet.tcp.sackholelimit", []_C_int{4, 2, 6, 20}},
+	{"net.inet.tcp.slowhz", []_C_int{4, 2, 6, 5}},
+	{"net.inet.tcp.stats", []_C_int{4, 2, 6, 21}},
+	{"net.inet.tcp.synbucketlimit", []_C_int{4, 2, 6, 16}},
+	{"net.inet.tcp.syncachelimit", []_C_int{4, 2, 6, 15}},
+	{"net.inet.udp.baddynamic", []_C_int{4, 2, 17, 2}},
+	{"net.inet.udp.checksum", []_C_int{4, 2, 17, 1}},
+	{"net.inet.udp.recvspace", []_C_int{4, 2, 17, 3}},
+	{"net.inet.udp.sendspace", []_C_int{4, 2, 17, 4}},
+	{"net.inet.udp.stats", []_C_int{4, 2, 17, 5}},
+	{"net.inet6.divert.recvspace", []_C_int{4, 24, 86, 1}},
+	{"net.inet6.divert.sendspace", []_C_int{4, 24, 86, 2}},
+	{"net.inet6.divert.stats", []_C_int{4, 24, 86, 3}},
+	{"net.inet6.icmp6.errppslimit", []_C_int{4, 24, 30, 14}},
+	{"net.inet6.icmp6.mtudisc_hiwat", []_C_int{4, 24, 30, 16}},
+	{"net.inet6.icmp6.mtudisc_lowat", []_C_int{4, 24, 30, 17}},
+	{"net.inet6.icmp6.nd6_debug", []_C_int{4, 24, 30, 18}},
+	{"net.inet6.icmp6.nd6_delay", []_C_int{4, 24, 30, 8}},
+	{"net.inet6.icmp6.nd6_maxnudhint", []_C_int{4, 24, 30, 15}},
+	{"net.inet6.icmp6.nd6_mmaxtries", []_C_int{4, 24, 30, 10}},
+	{"net.inet6.icmp6.nd6_prune", []_C_int{4, 24, 30, 6}},
+	{"net.inet6.icmp6.nd6_umaxtries", []_C_int{4, 24, 30, 9}},
+	{"net.inet6.icmp6.nd6_useloopback", []_C_int{4, 24, 30, 11}},
+	{"net.inet6.icmp6.nodeinfo", []_C_int{4, 24, 30, 13}},
+	{"net.inet6.icmp6.rediraccept", []_C_int{4, 24, 30, 2}},
+	{"net.inet6.icmp6.redirtimeout", []_C_int{4, 24, 30, 3}},
+	{"net.inet6.ip6.accept_rtadv", []_C_int{4, 24, 17, 12}},
+	{"net.inet6.ip6.auto_flowlabel", []_C_int{4, 24, 17, 17}},
+	{"net.inet6.ip6.dad_count", []_C_int{4, 24, 17, 16}},
+	{"net.inet6.ip6.dad_pending", []_C_int{4, 24, 17, 49}},
+	{"net.inet6.ip6.defmcasthlim", []_C_int{4, 24, 17, 18}},
+	{"net.inet6.ip6.forwarding", []_C_int{4, 24, 17, 1}},
+	{"net.inet6.ip6.forwsrcrt", []_C_int{4, 24, 17, 5}},
+	{"net.inet6.ip6.hdrnestlimit", []_C_int{4, 24, 17, 15}},
+	{"net.inet6.ip6.hlim", []_C_int{4, 24, 17, 3}},
+	{"net.inet6.ip6.log_interval", []_C_int{4, 24, 17, 14}},
+	{"net.inet6.ip6.maxdynroutes", []_C_int{4, 24, 17, 48}},
+	{"net.inet6.ip6.maxfragpackets", []_C_int{4, 24, 17, 9}},
+	{"net.inet6.ip6.maxfrags", []_C_int{4, 24, 17, 41}},
+	{"net.inet6.ip6.maxifdefrouters", []_C_int{4, 24, 17, 47}},
+	{"net.inet6.ip6.maxifprefixes", []_C_int{4, 24, 17, 46}},
+	{"net.inet6.ip6.mforwarding", []_C_int{4, 24, 17, 42}},
+	{"net.inet6.ip6.mrtproto", []_C_int{4, 24, 17, 8}},
+	{"net.inet6.ip6.mtudisctimeout", []_C_int{4, 24, 17, 50}},
+	{"net.inet6.ip6.multicast_mtudisc", []_C_int{4, 24, 17, 44}},
+	{"net.inet6.ip6.multipath", []_C_int{4, 24, 17, 43}},
+	{"net.inet6.ip6.neighborgcthresh", []_C_int{4, 24, 17, 45}},
+	{"net.inet6.ip6.redirect", []_C_int{4, 24, 17, 2}},
+	{"net.inet6.ip6.rr_prune", []_C_int{4, 24, 17, 22}},
+	{"net.inet6.ip6.sourcecheck", []_C_int{4, 24, 17, 10}},
+	{"net.inet6.ip6.sourcecheck_logint", []_C_int{4, 24, 17, 11}},
+	{"net.inet6.ip6.use_deprecated", []_C_int{4, 24, 17, 21}},
+	{"net.inet6.ip6.v6only", []_C_int{4, 24, 17, 24}},
+	{"net.key.sadb_dump", []_C_int{4, 30, 1}},
+	{"net.key.spd_dump", []_C_int{4, 30, 2}},
+	{"net.mpls.ifq.congestion", []_C_int{4, 33, 3, 4}},
+	{"net.mpls.ifq.drops", []_C_int{4, 33, 3, 3}},
+	{"net.mpls.ifq.len", []_C_int{4, 33, 3, 1}},
+	{"net.mpls.ifq.maxlen", []_C_int{4, 33, 3, 2}},
+	{"net.mpls.mapttl_ip", []_C_int{4, 33, 5}},
+	{"net.mpls.mapttl_ip6", []_C_int{4, 33, 6}},
+	{"net.mpls.maxloop_inkernel", []_C_int{4, 33, 4}},
+	{"net.mpls.ttl", []_C_int{4, 33, 2}},
+	{"net.pflow.stats", []_C_int{4, 34, 1}},
+	{"net.pipex.enable", []_C_int{4, 35, 1}},
+	{"vm.anonmin", []_C_int{2, 7}},
+	{"vm.loadavg", []_C_int{2, 2}},
+	{"vm.maxslp", []_C_int{2, 10}},
+	{"vm.nkmempages", []_C_int{2, 6}},
+	{"vm.psstrings", []_C_int{2, 3}},
+	{"vm.swapencrypt.enable", []_C_int{2, 5, 0}},
+	{"vm.swapencrypt.keyscreated", []_C_int{2, 5, 1}},
+	{"vm.swapencrypt.keysdeleted", []_C_int{2, 5, 2}},
+	{"vm.uspace", []_C_int{2, 11}},
+	{"vm.uvmexp", []_C_int{2, 4}},
+	{"vm.vmmeter", []_C_int{2, 1}},
+	{"vm.vnodemin", []_C_int{2, 9}},
+	{"vm.vtextmin", []_C_int{2, 8}},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_arm64.go
new file mode 100644
index 000000000..ba4304fd2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_arm64.go
@@ -0,0 +1,275 @@
+// go run mksysctl_openbsd.go
+// Code generated by the command above; DO NOT EDIT.
+
+// +build arm64,openbsd
+
+package unix
+
+type mibentry struct {
+	ctlname string
+	ctloid  []_C_int
+}
+
+var sysctlMib = []mibentry{
+	{"ddb.console", []_C_int{9, 6}},
+	{"ddb.log", []_C_int{9, 7}},
+	{"ddb.max_line", []_C_int{9, 3}},
+	{"ddb.max_width", []_C_int{9, 2}},
+	{"ddb.panic", []_C_int{9, 5}},
+	{"ddb.profile", []_C_int{9, 9}},
+	{"ddb.radix", []_C_int{9, 1}},
+	{"ddb.tab_stop_width", []_C_int{9, 4}},
+	{"ddb.trigger", []_C_int{9, 8}},
+	{"fs.posix.setuid", []_C_int{3, 1, 1}},
+	{"hw.allowpowerdown", []_C_int{6, 22}},
+	{"hw.byteorder", []_C_int{6, 4}},
+	{"hw.cpuspeed", []_C_int{6, 12}},
+	{"hw.diskcount", []_C_int{6, 10}},
+	{"hw.disknames", []_C_int{6, 8}},
+	{"hw.diskstats", []_C_int{6, 9}},
+	{"hw.machine", []_C_int{6, 1}},
+	{"hw.model", []_C_int{6, 2}},
+	{"hw.ncpu", []_C_int{6, 3}},
+	{"hw.ncpufound", []_C_int{6, 21}},
+	{"hw.ncpuonline", []_C_int{6, 25}},
+	{"hw.pagesize", []_C_int{6, 7}},
+	{"hw.perfpolicy", []_C_int{6, 23}},
+	{"hw.physmem", []_C_int{6, 19}},
+	{"hw.product", []_C_int{6, 15}},
+	{"hw.serialno", []_C_int{6, 17}},
+	{"hw.setperf", []_C_int{6, 13}},
+	{"hw.smt", []_C_int{6, 24}},
+	{"hw.usermem", []_C_int{6, 20}},
+	{"hw.uuid", []_C_int{6, 18}},
+	{"hw.vendor", []_C_int{6, 14}},
+	{"hw.version", []_C_int{6, 16}},
+	{"kern.allowkmem", []_C_int{1, 52}},
+	{"kern.argmax", []_C_int{1, 8}},
+	{"kern.audio", []_C_int{1, 84}},
+	{"kern.boottime", []_C_int{1, 21}},
+	{"kern.bufcachepercent", []_C_int{1, 72}},
+	{"kern.ccpu", []_C_int{1, 45}},
+	{"kern.clockrate", []_C_int{1, 12}},
+	{"kern.consdev", []_C_int{1, 75}},
+	{"kern.cp_time", []_C_int{1, 40}},
+	{"kern.cp_time2", []_C_int{1, 71}},
+	{"kern.cpustats", []_C_int{1, 85}},
+	{"kern.domainname", []_C_int{1, 22}},
+	{"kern.file", []_C_int{1, 73}},
+	{"kern.forkstat", []_C_int{1, 42}},
+	{"kern.fscale", []_C_int{1, 46}},
+	{"kern.fsync", []_C_int{1, 33}},
+	{"kern.global_ptrace", []_C_int{1, 81}},
+	{"kern.hostid", []_C_int{1, 11}},
+	{"kern.hostname", []_C_int{1, 10}},
+	{"kern.intrcnt.nintrcnt", []_C_int{1, 63, 1}},
+	{"kern.job_control", []_C_int{1, 19}},
+	{"kern.malloc.buckets", []_C_int{1, 39, 1}},
+	{"kern.malloc.kmemnames", []_C_int{1, 39, 3}},
+	{"kern.maxclusters", []_C_int{1, 67}},
+	{"kern.maxfiles", []_C_int{1, 7}},
+	{"kern.maxlocksperuid", []_C_int{1, 70}},
+	{"kern.maxpartitions", []_C_int{1, 23}},
+	{"kern.maxproc", []_C_int{1, 6}},
+	{"kern.maxthread", []_C_int{1, 25}},
+	{"kern.maxvnodes", []_C_int{1, 5}},
+	{"kern.mbstat", []_C_int{1, 59}},
+	{"kern.msgbuf", []_C_int{1, 48}},
+	{"kern.msgbufsize", []_C_int{1, 38}},
+	{"kern.nchstats", []_C_int{1, 41}},
+	{"kern.netlivelocks", []_C_int{1, 76}},
+	{"kern.nfiles", []_C_int{1, 56}},
+	{"kern.ngroups", []_C_int{1, 18}},
+	{"kern.nosuidcoredump", []_C_int{1, 32}},
+	{"kern.nprocs", []_C_int{1, 47}},
+	{"kern.nselcoll", []_C_int{1, 43}},
+	{"kern.nthreads", []_C_int{1, 26}},
+	{"kern.numvnodes", []_C_int{1, 58}},
+	{"kern.osrelease", []_C_int{1, 2}},
+	{"kern.osrevision", []_C_int{1, 3}},
+	{"kern.ostype", []_C_int{1, 1}},
+	{"kern.osversion", []_C_int{1, 27}},
+	{"kern.pool_debug", []_C_int{1, 77}},
+	{"kern.posix1version", []_C_int{1, 17}},
+	{"kern.proc", []_C_int{1, 66}},
+	{"kern.rawpartition", []_C_int{1, 24}},
+	{"kern.saved_ids", []_C_int{1, 20}},
+	{"kern.securelevel", []_C_int{1, 9}},
+	{"kern.seminfo", []_C_int{1, 61}},
+	{"kern.shminfo", []_C_int{1, 62}},
+	{"kern.somaxconn", []_C_int{1, 28}},
+	{"kern.sominconn", []_C_int{1, 29}},
+	{"kern.splassert", []_C_int{1, 54}},
+	{"kern.stackgap_random", []_C_int{1, 50}},
+	{"kern.sysvipc_info", []_C_int{1, 51}},
+	{"kern.sysvmsg", []_C_int{1, 34}},
+	{"kern.sysvsem", []_C_int{1, 35}},
+	{"kern.sysvshm", []_C_int{1, 36}},
+	{"kern.timecounter.choice", []_C_int{1, 69, 4}},
+	{"kern.timecounter.hardware", []_C_int{1, 69, 3}},
+	{"kern.timecounter.tick", []_C_int{1, 69, 1}},
+	{"kern.timecounter.timestepwarnings", []_C_int{1, 69, 2}},
+	{"kern.tty.tk_cancc", []_C_int{1, 44, 4}},
+	{"kern.tty.tk_nin", []_C_int{1, 44, 1}},
+	{"kern.tty.tk_nout", []_C_int{1, 44, 2}},
+	{"kern.tty.tk_rawcc", []_C_int{1, 44, 3}},
+	{"kern.tty.ttyinfo", []_C_int{1, 44, 5}},
+	{"kern.ttycount", []_C_int{1, 57}},
+	{"kern.version", []_C_int{1, 4}},
+	{"kern.watchdog.auto", []_C_int{1, 64, 2}},
+	{"kern.watchdog.period", []_C_int{1, 64, 1}},
+	{"kern.witnesswatch", []_C_int{1, 53}},
+	{"kern.wxabort", []_C_int{1, 74}},
+	{"net.bpf.bufsize", []_C_int{4, 31, 1}},
+	{"net.bpf.maxbufsize", []_C_int{4, 31, 2}},
+	{"net.inet.ah.enable", []_C_int{4, 2, 51, 1}},
+	{"net.inet.ah.stats", []_C_int{4, 2, 51, 2}},
+	{"net.inet.carp.allow", []_C_int{4, 2, 112, 1}},
+	{"net.inet.carp.log", []_C_int{4, 2, 112, 3}},
+	{"net.inet.carp.preempt", []_C_int{4, 2, 112, 2}},
+	{"net.inet.carp.stats", []_C_int{4, 2, 112, 4}},
+	{"net.inet.divert.recvspace", []_C_int{4, 2, 258, 1}},
+	{"net.inet.divert.sendspace", []_C_int{4, 2, 258, 2}},
+	{"net.inet.divert.stats", []_C_int{4, 2, 258, 3}},
+	{"net.inet.esp.enable", []_C_int{4, 2, 50, 1}},
+	{"net.inet.esp.stats", []_C_int{4, 2, 50, 4}},
+	{"net.inet.esp.udpencap", []_C_int{4, 2, 50, 2}},
+	{"net.inet.esp.udpencap_port", []_C_int{4, 2, 50, 3}},
+	{"net.inet.etherip.allow", []_C_int{4, 2, 97, 1}},
+	{"net.inet.etherip.stats", []_C_int{4, 2, 97, 2}},
+	{"net.inet.gre.allow", []_C_int{4, 2, 47, 1}},
+	{"net.inet.gre.wccp", []_C_int{4, 2, 47, 2}},
+	{"net.inet.icmp.bmcastecho", []_C_int{4, 2, 1, 2}},
+	{"net.inet.icmp.errppslimit", []_C_int{4, 2, 1, 3}},
+	{"net.inet.icmp.maskrepl", []_C_int{4, 2, 1, 1}},
+	{"net.inet.icmp.rediraccept", []_C_int{4, 2, 1, 4}},
+	{"net.inet.icmp.redirtimeout", []_C_int{4, 2, 1, 5}},
+	{"net.inet.icmp.stats", []_C_int{4, 2, 1, 7}},
+	{"net.inet.icmp.tstamprepl", []_C_int{4, 2, 1, 6}},
+	{"net.inet.igmp.stats", []_C_int{4, 2, 2, 1}},
+	{"net.inet.ip.arpdown", []_C_int{4, 2, 0, 40}},
+	{"net.inet.ip.arpqueued", []_C_int{4, 2, 0, 36}},
+	{"net.inet.ip.arptimeout", []_C_int{4, 2, 0, 39}},
+	{"net.inet.ip.encdebug", []_C_int{4, 2, 0, 12}},
+	{"net.inet.ip.forwarding", []_C_int{4, 2, 0, 1}},
+	{"net.inet.ip.ifq.congestion", []_C_int{4, 2, 0, 30, 4}},
+	{"net.inet.ip.ifq.drops", []_C_int{4, 2, 0, 30, 3}},
+	{"net.inet.ip.ifq.len", []_C_int{4, 2, 0, 30, 1}},
+	{"net.inet.ip.ifq.maxlen", []_C_int{4, 2, 0, 30, 2}},
+	{"net.inet.ip.maxqueue", []_C_int{4, 2, 0, 11}},
+	{"net.inet.ip.mforwarding", []_C_int{4, 2, 0, 31}},
+	{"net.inet.ip.mrtmfc", []_C_int{4, 2, 0, 37}},
+	{"net.inet.ip.mrtproto", []_C_int{4, 2, 0, 34}},
+	{"net.inet.ip.mrtstats", []_C_int{4, 2, 0, 35}},
+	{"net.inet.ip.mrtvif", []_C_int{4, 2, 0, 38}},
+	{"net.inet.ip.mtu", []_C_int{4, 2, 0, 4}},
+	{"net.inet.ip.mtudisc", []_C_int{4, 2, 0, 27}},
+	{"net.inet.ip.mtudisctimeout", []_C_int{4, 2, 0, 28}},
+	{"net.inet.ip.multipath", []_C_int{4, 2, 0, 32}},
+	{"net.inet.ip.portfirst", []_C_int{4, 2, 0, 7}},
+	{"net.inet.ip.porthifirst", []_C_int{4, 2, 0, 9}},
+	{"net.inet.ip.porthilast", []_C_int{4, 2, 0, 10}},
+	{"net.inet.ip.portlast", []_C_int{4, 2, 0, 8}},
+	{"net.inet.ip.redirect", []_C_int{4, 2, 0, 2}},
+	{"net.inet.ip.sourceroute", []_C_int{4, 2, 0, 5}},
+	{"net.inet.ip.stats", []_C_int{4, 2, 0, 33}},
+	{"net.inet.ip.ttl", []_C_int{4, 2, 0, 3}},
+	{"net.inet.ipcomp.enable", []_C_int{4, 2, 108, 1}},
+	{"net.inet.ipcomp.stats", []_C_int{4, 2, 108, 2}},
+	{"net.inet.ipip.allow", []_C_int{4, 2, 4, 1}},
+	{"net.inet.ipip.stats", []_C_int{4, 2, 4, 2}},
+	{"net.inet.mobileip.allow", []_C_int{4, 2, 55, 1}},
+	{"net.inet.pfsync.stats", []_C_int{4, 2, 240, 1}},
+	{"net.inet.tcp.ackonpush", []_C_int{4, 2, 6, 13}},
+	{"net.inet.tcp.always_keepalive", []_C_int{4, 2, 6, 22}},
+	{"net.inet.tcp.baddynamic", []_C_int{4, 2, 6, 6}},
+	{"net.inet.tcp.drop", []_C_int{4, 2, 6, 19}},
+	{"net.inet.tcp.ecn", []_C_int{4, 2, 6, 14}},
+	{"net.inet.tcp.ident", []_C_int{4, 2, 6, 9}},
+	{"net.inet.tcp.keepidle", []_C_int{4, 2, 6, 3}},
+	{"net.inet.tcp.keepinittime", []_C_int{4, 2, 6, 2}},
+	{"net.inet.tcp.keepintvl", []_C_int{4, 2, 6, 4}},
+	{"net.inet.tcp.mssdflt", []_C_int{4, 2, 6, 11}},
+	{"net.inet.tcp.reasslimit", []_C_int{4, 2, 6, 18}},
+	{"net.inet.tcp.rfc1323", []_C_int{4, 2, 6, 1}},
+	{"net.inet.tcp.rfc3390", []_C_int{4, 2, 6, 17}},
+	{"net.inet.tcp.rootonly", []_C_int{4, 2, 6, 24}},
+	{"net.inet.tcp.rstppslimit", []_C_int{4, 2, 6, 12}},
+	{"net.inet.tcp.sack", []_C_int{4, 2, 6, 10}},
+	{"net.inet.tcp.sackholelimit", []_C_int{4, 2, 6, 20}},
+	{"net.inet.tcp.slowhz", []_C_int{4, 2, 6, 5}},
+	{"net.inet.tcp.stats", []_C_int{4, 2, 6, 21}},
+	{"net.inet.tcp.synbucketlimit", []_C_int{4, 2, 6, 16}},
+	{"net.inet.tcp.syncachelimit", []_C_int{4, 2, 6, 15}},
+	{"net.inet.tcp.synhashsize", []_C_int{4, 2, 6, 25}},
+	{"net.inet.tcp.synuselimit", []_C_int{4, 2, 6, 23}},
+	{"net.inet.udp.baddynamic", []_C_int{4, 2, 17, 2}},
+	{"net.inet.udp.checksum", []_C_int{4, 2, 17, 1}},
+	{"net.inet.udp.recvspace", []_C_int{4, 2, 17, 3}},
+	{"net.inet.udp.rootonly", []_C_int{4, 2, 17, 6}},
+	{"net.inet.udp.sendspace", []_C_int{4, 2, 17, 4}},
+	{"net.inet.udp.stats", []_C_int{4, 2, 17, 5}},
+	{"net.inet6.divert.recvspace", []_C_int{4, 24, 86, 1}},
+	{"net.inet6.divert.sendspace", []_C_int{4, 24, 86, 2}},
+	{"net.inet6.divert.stats", []_C_int{4, 24, 86, 3}},
+	{"net.inet6.icmp6.errppslimit", []_C_int{4, 24, 30, 14}},
+	{"net.inet6.icmp6.mtudisc_hiwat", []_C_int{4, 24, 30, 16}},
+	{"net.inet6.icmp6.mtudisc_lowat", []_C_int{4, 24, 30, 17}},
+	{"net.inet6.icmp6.nd6_debug", []_C_int{4, 24, 30, 18}},
+	{"net.inet6.icmp6.nd6_delay", []_C_int{4, 24, 30, 8}},
+	{"net.inet6.icmp6.nd6_maxnudhint", []_C_int{4, 24, 30, 15}},
+	{"net.inet6.icmp6.nd6_mmaxtries", []_C_int{4, 24, 30, 10}},
+	{"net.inet6.icmp6.nd6_umaxtries", []_C_int{4, 24, 30, 9}},
+	{"net.inet6.icmp6.redirtimeout", []_C_int{4, 24, 30, 3}},
+	{"net.inet6.ip6.auto_flowlabel", []_C_int{4, 24, 17, 17}},
+	{"net.inet6.ip6.dad_count", []_C_int{4, 24, 17, 16}},
+	{"net.inet6.ip6.dad_pending", []_C_int{4, 24, 17, 49}},
+	{"net.inet6.ip6.defmcasthlim", []_C_int{4, 24, 17, 18}},
+	{"net.inet6.ip6.forwarding", []_C_int{4, 24, 17, 1}},
+	{"net.inet6.ip6.forwsrcrt", []_C_int{4, 24, 17, 5}},
+	{"net.inet6.ip6.hdrnestlimit", []_C_int{4, 24, 17, 15}},
+	{"net.inet6.ip6.hlim", []_C_int{4, 24, 17, 3}},
+	{"net.inet6.ip6.log_interval", []_C_int{4, 24, 17, 14}},
+	{"net.inet6.ip6.maxdynroutes", []_C_int{4, 24, 17, 48}},
+	{"net.inet6.ip6.maxfragpackets", []_C_int{4, 24, 17, 9}},
+	{"net.inet6.ip6.maxfrags", []_C_int{4, 24, 17, 41}},
+	{"net.inet6.ip6.mforwarding", []_C_int{4, 24, 17, 42}},
+	{"net.inet6.ip6.mrtmfc", []_C_int{4, 24, 17, 53}},
+	{"net.inet6.ip6.mrtmif", []_C_int{4, 24, 17, 52}},
+	{"net.inet6.ip6.mrtproto", []_C_int{4, 24, 17, 8}},
+	{"net.inet6.ip6.mtudisctimeout", []_C_int{4, 24, 17, 50}},
+	{"net.inet6.ip6.multicast_mtudisc", []_C_int{4, 24, 17, 44}},
+	{"net.inet6.ip6.multipath", []_C_int{4, 24, 17, 43}},
+	{"net.inet6.ip6.neighborgcthresh", []_C_int{4, 24, 17, 45}},
+	{"net.inet6.ip6.redirect", []_C_int{4, 24, 17, 2}},
+	{"net.inet6.ip6.soiikey", []_C_int{4, 24, 17, 54}},
+	{"net.inet6.ip6.sourcecheck", []_C_int{4, 24, 17, 10}},
+	{"net.inet6.ip6.sourcecheck_logint", []_C_int{4, 24, 17, 11}},
+	{"net.inet6.ip6.use_deprecated", []_C_int{4, 24, 17, 21}},
+	{"net.key.sadb_dump", []_C_int{4, 30, 1}},
+	{"net.key.spd_dump", []_C_int{4, 30, 2}},
+	{"net.mpls.ifq.congestion", []_C_int{4, 33, 3, 4}},
+	{"net.mpls.ifq.drops", []_C_int{4, 33, 3, 3}},
+	{"net.mpls.ifq.len", []_C_int{4, 33, 3, 1}},
+	{"net.mpls.ifq.maxlen", []_C_int{4, 33, 3, 2}},
+	{"net.mpls.mapttl_ip", []_C_int{4, 33, 5}},
+	{"net.mpls.mapttl_ip6", []_C_int{4, 33, 6}},
+	{"net.mpls.maxloop_inkernel", []_C_int{4, 33, 4}},
+	{"net.mpls.ttl", []_C_int{4, 33, 2}},
+	{"net.pflow.stats", []_C_int{4, 34, 1}},
+	{"net.pipex.enable", []_C_int{4, 35, 1}},
+	{"vm.anonmin", []_C_int{2, 7}},
+	{"vm.loadavg", []_C_int{2, 2}},
+	{"vm.malloc_conf", []_C_int{2, 12}},
+	{"vm.maxslp", []_C_int{2, 10}},
+	{"vm.nkmempages", []_C_int{2, 6}},
+	{"vm.psstrings", []_C_int{2, 3}},
+	{"vm.swapencrypt.enable", []_C_int{2, 5, 0}},
+	{"vm.swapencrypt.keyscreated", []_C_int{2, 5, 1}},
+	{"vm.swapencrypt.keysdeleted", []_C_int{2, 5, 2}},
+	{"vm.uspace", []_C_int{2, 11}},
+	{"vm.uvmexp", []_C_int{2, 4}},
+	{"vm.vmmeter", []_C_int{2, 1}},
+	{"vm.vnodemin", []_C_int{2, 9}},
+	{"vm.vtextmin", []_C_int{2, 8}},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_mips64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_mips64.go
new file mode 100644
index 000000000..aca34b349
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysctl_openbsd_mips64.go
@@ -0,0 +1,279 @@
+// go run mksysctl_openbsd.go
+// Code generated by the command above; DO NOT EDIT.
+
+// +build mips64,openbsd
+
+package unix
+
+type mibentry struct {
+	ctlname string
+	ctloid  []_C_int
+}
+
+var sysctlMib = []mibentry{
+	{"ddb.console", []_C_int{9, 6}},
+	{"ddb.log", []_C_int{9, 7}},
+	{"ddb.max_line", []_C_int{9, 3}},
+	{"ddb.max_width", []_C_int{9, 2}},
+	{"ddb.panic", []_C_int{9, 5}},
+	{"ddb.profile", []_C_int{9, 9}},
+	{"ddb.radix", []_C_int{9, 1}},
+	{"ddb.tab_stop_width", []_C_int{9, 4}},
+	{"ddb.trigger", []_C_int{9, 8}},
+	{"fs.posix.setuid", []_C_int{3, 1, 1}},
+	{"hw.allowpowerdown", []_C_int{6, 22}},
+	{"hw.byteorder", []_C_int{6, 4}},
+	{"hw.cpuspeed", []_C_int{6, 12}},
+	{"hw.diskcount", []_C_int{6, 10}},
+	{"hw.disknames", []_C_int{6, 8}},
+	{"hw.diskstats", []_C_int{6, 9}},
+	{"hw.machine", []_C_int{6, 1}},
+	{"hw.model", []_C_int{6, 2}},
+	{"hw.ncpu", []_C_int{6, 3}},
+	{"hw.ncpufound", []_C_int{6, 21}},
+	{"hw.ncpuonline", []_C_int{6, 25}},
+	{"hw.pagesize", []_C_int{6, 7}},
+	{"hw.perfpolicy", []_C_int{6, 23}},
+	{"hw.physmem", []_C_int{6, 19}},
+	{"hw.product", []_C_int{6, 15}},
+	{"hw.serialno", []_C_int{6, 17}},
+	{"hw.setperf", []_C_int{6, 13}},
+	{"hw.smt", []_C_int{6, 24}},
+	{"hw.usermem", []_C_int{6, 20}},
+	{"hw.uuid", []_C_int{6, 18}},
+	{"hw.vendor", []_C_int{6, 14}},
+	{"hw.version", []_C_int{6, 16}},
+	{"kern.allowdt", []_C_int{1, 65}},
+	{"kern.allowkmem", []_C_int{1, 52}},
+	{"kern.argmax", []_C_int{1, 8}},
+	{"kern.audio", []_C_int{1, 84}},
+	{"kern.boottime", []_C_int{1, 21}},
+	{"kern.bufcachepercent", []_C_int{1, 72}},
+	{"kern.ccpu", []_C_int{1, 45}},
+	{"kern.clockrate", []_C_int{1, 12}},
+	{"kern.consbuf", []_C_int{1, 83}},
+	{"kern.consbufsize", []_C_int{1, 82}},
+	{"kern.consdev", []_C_int{1, 75}},
+	{"kern.cp_time", []_C_int{1, 40}},
+	{"kern.cp_time2", []_C_int{1, 71}},
+	{"kern.cpustats", []_C_int{1, 85}},
+	{"kern.domainname", []_C_int{1, 22}},
+	{"kern.file", []_C_int{1, 73}},
+	{"kern.forkstat", []_C_int{1, 42}},
+	{"kern.fscale", []_C_int{1, 46}},
+	{"kern.fsync", []_C_int{1, 33}},
+	{"kern.global_ptrace", []_C_int{1, 81}},
+	{"kern.hostid", []_C_int{1, 11}},
+	{"kern.hostname", []_C_int{1, 10}},
+	{"kern.intrcnt.nintrcnt", []_C_int{1, 63, 1}},
+	{"kern.job_control", []_C_int{1, 19}},
+	{"kern.malloc.buckets", []_C_int{1, 39, 1}},
+	{"kern.malloc.kmemnames", []_C_int{1, 39, 3}},
+	{"kern.maxclusters", []_C_int{1, 67}},
+	{"kern.maxfiles", []_C_int{1, 7}},
+	{"kern.maxlocksperuid", []_C_int{1, 70}},
+	{"kern.maxpartitions", []_C_int{1, 23}},
+	{"kern.maxproc", []_C_int{1, 6}},
+	{"kern.maxthread", []_C_int{1, 25}},
+	{"kern.maxvnodes", []_C_int{1, 5}},
+	{"kern.mbstat", []_C_int{1, 59}},
+	{"kern.msgbuf", []_C_int{1, 48}},
+	{"kern.msgbufsize", []_C_int{1, 38}},
+	{"kern.nchstats", []_C_int{1, 41}},
+	{"kern.netlivelocks", []_C_int{1, 76}},
+	{"kern.nfiles", []_C_int{1, 56}},
+	{"kern.ngroups", []_C_int{1, 18}},
+	{"kern.nosuidcoredump", []_C_int{1, 32}},
+	{"kern.nprocs", []_C_int{1, 47}},
+	{"kern.nselcoll", []_C_int{1, 43}},
+	{"kern.nthreads", []_C_int{1, 26}},
+	{"kern.numvnodes", []_C_int{1, 58}},
+	{"kern.osrelease", []_C_int{1, 2}},
+	{"kern.osrevision", []_C_int{1, 3}},
+	{"kern.ostype", []_C_int{1, 1}},
+	{"kern.osversion", []_C_int{1, 27}},
+	{"kern.pfstatus", []_C_int{1, 86}},
+	{"kern.pool_debug", []_C_int{1, 77}},
+	{"kern.posix1version", []_C_int{1, 17}},
+	{"kern.proc", []_C_int{1, 66}},
+	{"kern.rawpartition", []_C_int{1, 24}},
+	{"kern.saved_ids", []_C_int{1, 20}},
+	{"kern.securelevel", []_C_int{1, 9}},
+	{"kern.seminfo", []_C_int{1, 61}},
+	{"kern.shminfo", []_C_int{1, 62}},
+	{"kern.somaxconn", []_C_int{1, 28}},
+	{"kern.sominconn", []_C_int{1, 29}},
+	{"kern.splassert", []_C_int{1, 54}},
+	{"kern.stackgap_random", []_C_int{1, 50}},
+	{"kern.sysvipc_info", []_C_int{1, 51}},
+	{"kern.sysvmsg", []_C_int{1, 34}},
+	{"kern.sysvsem", []_C_int{1, 35}},
+	{"kern.sysvshm", []_C_int{1, 36}},
+	{"kern.timecounter.choice", []_C_int{1, 69, 4}},
+	{"kern.timecounter.hardware", []_C_int{1, 69, 3}},
+	{"kern.timecounter.tick", []_C_int{1, 69, 1}},
+	{"kern.timecounter.timestepwarnings", []_C_int{1, 69, 2}},
+	{"kern.timeout_stats", []_C_int{1, 87}},
+	{"kern.tty.tk_cancc", []_C_int{1, 44, 4}},
+	{"kern.tty.tk_nin", []_C_int{1, 44, 1}},
+	{"kern.tty.tk_nout", []_C_int{1, 44, 2}},
+	{"kern.tty.tk_rawcc", []_C_int{1, 44, 3}},
+	{"kern.tty.ttyinfo", []_C_int{1, 44, 5}},
+	{"kern.ttycount", []_C_int{1, 57}},
+	{"kern.utc_offset", []_C_int{1, 88}},
+	{"kern.version", []_C_int{1, 4}},
+	{"kern.watchdog.auto", []_C_int{1, 64, 2}},
+	{"kern.watchdog.period", []_C_int{1, 64, 1}},
+	{"kern.witnesswatch", []_C_int{1, 53}},
+	{"kern.wxabort", []_C_int{1, 74}},
+	{"net.bpf.bufsize", []_C_int{4, 31, 1}},
+	{"net.bpf.maxbufsize", []_C_int{4, 31, 2}},
+	{"net.inet.ah.enable", []_C_int{4, 2, 51, 1}},
+	{"net.inet.ah.stats", []_C_int{4, 2, 51, 2}},
+	{"net.inet.carp.allow", []_C_int{4, 2, 112, 1}},
+	{"net.inet.carp.log", []_C_int{4, 2, 112, 3}},
+	{"net.inet.carp.preempt", []_C_int{4, 2, 112, 2}},
+	{"net.inet.carp.stats", []_C_int{4, 2, 112, 4}},
+	{"net.inet.divert.recvspace", []_C_int{4, 2, 258, 1}},
+	{"net.inet.divert.sendspace", []_C_int{4, 2, 258, 2}},
+	{"net.inet.divert.stats", []_C_int{4, 2, 258, 3}},
+	{"net.inet.esp.enable", []_C_int{4, 2, 50, 1}},
+	{"net.inet.esp.stats", []_C_int{4, 2, 50, 4}},
+	{"net.inet.esp.udpencap", []_C_int{4, 2, 50, 2}},
+	{"net.inet.esp.udpencap_port", []_C_int{4, 2, 50, 3}},
+	{"net.inet.etherip.allow", []_C_int{4, 2, 97, 1}},
+	{"net.inet.etherip.stats", []_C_int{4, 2, 97, 2}},
+	{"net.inet.gre.allow", []_C_int{4, 2, 47, 1}},
+	{"net.inet.gre.wccp", []_C_int{4, 2, 47, 2}},
+	{"net.inet.icmp.bmcastecho", []_C_int{4, 2, 1, 2}},
+	{"net.inet.icmp.errppslimit", []_C_int{4, 2, 1, 3}},
+	{"net.inet.icmp.maskrepl", []_C_int{4, 2, 1, 1}},
+	{"net.inet.icmp.rediraccept", []_C_int{4, 2, 1, 4}},
+	{"net.inet.icmp.redirtimeout", []_C_int{4, 2, 1, 5}},
+	{"net.inet.icmp.stats", []_C_int{4, 2, 1, 7}},
+	{"net.inet.icmp.tstamprepl", []_C_int{4, 2, 1, 6}},
+	{"net.inet.igmp.stats", []_C_int{4, 2, 2, 1}},
+	{"net.inet.ip.arpdown", []_C_int{4, 2, 0, 40}},
+	{"net.inet.ip.arpqueued", []_C_int{4, 2, 0, 36}},
+	{"net.inet.ip.arptimeout", []_C_int{4, 2, 0, 39}},
+	{"net.inet.ip.encdebug", []_C_int{4, 2, 0, 12}},
+	{"net.inet.ip.forwarding", []_C_int{4, 2, 0, 1}},
+	{"net.inet.ip.ifq.congestion", []_C_int{4, 2, 0, 30, 4}},
+	{"net.inet.ip.ifq.drops", []_C_int{4, 2, 0, 30, 3}},
+	{"net.inet.ip.ifq.len", []_C_int{4, 2, 0, 30, 1}},
+	{"net.inet.ip.ifq.maxlen", []_C_int{4, 2, 0, 30, 2}},
+	{"net.inet.ip.maxqueue", []_C_int{4, 2, 0, 11}},
+	{"net.inet.ip.mforwarding", []_C_int{4, 2, 0, 31}},
+	{"net.inet.ip.mrtmfc", []_C_int{4, 2, 0, 37}},
+	{"net.inet.ip.mrtproto", []_C_int{4, 2, 0, 34}},
+	{"net.inet.ip.mrtstats", []_C_int{4, 2, 0, 35}},
+	{"net.inet.ip.mrtvif", []_C_int{4, 2, 0, 38}},
+	{"net.inet.ip.mtu", []_C_int{4, 2, 0, 4}},
+	{"net.inet.ip.mtudisc", []_C_int{4, 2, 0, 27}},
+	{"net.inet.ip.mtudisctimeout", []_C_int{4, 2, 0, 28}},
+	{"net.inet.ip.multipath", []_C_int{4, 2, 0, 32}},
+	{"net.inet.ip.portfirst", []_C_int{4, 2, 0, 7}},
+	{"net.inet.ip.porthifirst", []_C_int{4, 2, 0, 9}},
+	{"net.inet.ip.porthilast", []_C_int{4, 2, 0, 10}},
+	{"net.inet.ip.portlast", []_C_int{4, 2, 0, 8}},
+	{"net.inet.ip.redirect", []_C_int{4, 2, 0, 2}},
+	{"net.inet.ip.sourceroute", []_C_int{4, 2, 0, 5}},
+	{"net.inet.ip.stats", []_C_int{4, 2, 0, 33}},
+	{"net.inet.ip.ttl", []_C_int{4, 2, 0, 3}},
+	{"net.inet.ipcomp.enable", []_C_int{4, 2, 108, 1}},
+	{"net.inet.ipcomp.stats", []_C_int{4, 2, 108, 2}},
+	{"net.inet.ipip.allow", []_C_int{4, 2, 4, 1}},
+	{"net.inet.ipip.stats", []_C_int{4, 2, 4, 2}},
+	{"net.inet.pfsync.stats", []_C_int{4, 2, 240, 1}},
+	{"net.inet.tcp.ackonpush", []_C_int{4, 2, 6, 13}},
+	{"net.inet.tcp.always_keepalive", []_C_int{4, 2, 6, 22}},
+	{"net.inet.tcp.baddynamic", []_C_int{4, 2, 6, 6}},
+	{"net.inet.tcp.drop", []_C_int{4, 2, 6, 19}},
+	{"net.inet.tcp.ecn", []_C_int{4, 2, 6, 14}},
+	{"net.inet.tcp.ident", []_C_int{4, 2, 6, 9}},
+	{"net.inet.tcp.keepidle", []_C_int{4, 2, 6, 3}},
+	{"net.inet.tcp.keepinittime", []_C_int{4, 2, 6, 2}},
+	{"net.inet.tcp.keepintvl", []_C_int{4, 2, 6, 4}},
+	{"net.inet.tcp.mssdflt", []_C_int{4, 2, 6, 11}},
+	{"net.inet.tcp.reasslimit", []_C_int{4, 2, 6, 18}},
+	{"net.inet.tcp.rfc1323", []_C_int{4, 2, 6, 1}},
+	{"net.inet.tcp.rfc3390", []_C_int{4, 2, 6, 17}},
+	{"net.inet.tcp.rootonly", []_C_int{4, 2, 6, 24}},
+	{"net.inet.tcp.rstppslimit", []_C_int{4, 2, 6, 12}},
+	{"net.inet.tcp.sack", []_C_int{4, 2, 6, 10}},
+	{"net.inet.tcp.sackholelimit", []_C_int{4, 2, 6, 20}},
+	{"net.inet.tcp.slowhz", []_C_int{4, 2, 6, 5}},
+	{"net.inet.tcp.stats", []_C_int{4, 2, 6, 21}},
+	{"net.inet.tcp.synbucketlimit", []_C_int{4, 2, 6, 16}},
+	{"net.inet.tcp.syncachelimit", []_C_int{4, 2, 6, 15}},
+	{"net.inet.tcp.synhashsize", []_C_int{4, 2, 6, 25}},
+	{"net.inet.tcp.synuselimit", []_C_int{4, 2, 6, 23}},
+	{"net.inet.udp.baddynamic", []_C_int{4, 2, 17, 2}},
+	{"net.inet.udp.checksum", []_C_int{4, 2, 17, 1}},
+	{"net.inet.udp.recvspace", []_C_int{4, 2, 17, 3}},
+	{"net.inet.udp.rootonly", []_C_int{4, 2, 17, 6}},
+	{"net.inet.udp.sendspace", []_C_int{4, 2, 17, 4}},
+	{"net.inet.udp.stats", []_C_int{4, 2, 17, 5}},
+	{"net.inet6.divert.recvspace", []_C_int{4, 24, 86, 1}},
+	{"net.inet6.divert.sendspace", []_C_int{4, 24, 86, 2}},
+	{"net.inet6.divert.stats", []_C_int{4, 24, 86, 3}},
+	{"net.inet6.icmp6.errppslimit", []_C_int{4, 24, 30, 14}},
+	{"net.inet6.icmp6.mtudisc_hiwat", []_C_int{4, 24, 30, 16}},
+	{"net.inet6.icmp6.mtudisc_lowat", []_C_int{4, 24, 30, 17}},
+	{"net.inet6.icmp6.nd6_debug", []_C_int{4, 24, 30, 18}},
+	{"net.inet6.icmp6.nd6_delay", []_C_int{4, 24, 30, 8}},
+	{"net.inet6.icmp6.nd6_maxnudhint", []_C_int{4, 24, 30, 15}},
+	{"net.inet6.icmp6.nd6_mmaxtries", []_C_int{4, 24, 30, 10}},
+	{"net.inet6.icmp6.nd6_umaxtries", []_C_int{4, 24, 30, 9}},
+	{"net.inet6.icmp6.redirtimeout", []_C_int{4, 24, 30, 3}},
+	{"net.inet6.ip6.auto_flowlabel", []_C_int{4, 24, 17, 17}},
+	{"net.inet6.ip6.dad_count", []_C_int{4, 24, 17, 16}},
+	{"net.inet6.ip6.dad_pending", []_C_int{4, 24, 17, 49}},
+	{"net.inet6.ip6.defmcasthlim", []_C_int{4, 24, 17, 18}},
+	{"net.inet6.ip6.forwarding", []_C_int{4, 24, 17, 1}},
+	{"net.inet6.ip6.forwsrcrt", []_C_int{4, 24, 17, 5}},
+	{"net.inet6.ip6.hdrnestlimit", []_C_int{4, 24, 17, 15}},
+	{"net.inet6.ip6.hlim", []_C_int{4, 24, 17, 3}},
+	{"net.inet6.ip6.log_interval", []_C_int{4, 24, 17, 14}},
+	{"net.inet6.ip6.maxdynroutes", []_C_int{4, 24, 17, 48}},
+	{"net.inet6.ip6.maxfragpackets", []_C_int{4, 24, 17, 9}},
+	{"net.inet6.ip6.maxfrags", []_C_int{4, 24, 17, 41}},
+	{"net.inet6.ip6.mforwarding", []_C_int{4, 24, 17, 42}},
+	{"net.inet6.ip6.mrtmfc", []_C_int{4, 24, 17, 53}},
+	{"net.inet6.ip6.mrtmif", []_C_int{4, 24, 17, 52}},
+	{"net.inet6.ip6.mrtproto", []_C_int{4, 24, 17, 8}},
+	{"net.inet6.ip6.mtudisctimeout", []_C_int{4, 24, 17, 50}},
+	{"net.inet6.ip6.multicast_mtudisc", []_C_int{4, 24, 17, 44}},
+	{"net.inet6.ip6.multipath", []_C_int{4, 24, 17, 43}},
+	{"net.inet6.ip6.neighborgcthresh", []_C_int{4, 24, 17, 45}},
+	{"net.inet6.ip6.redirect", []_C_int{4, 24, 17, 2}},
+	{"net.inet6.ip6.soiikey", []_C_int{4, 24, 17, 54}},
+	{"net.inet6.ip6.sourcecheck", []_C_int{4, 24, 17, 10}},
+	{"net.inet6.ip6.sourcecheck_logint", []_C_int{4, 24, 17, 11}},
+	{"net.inet6.ip6.use_deprecated", []_C_int{4, 24, 17, 21}},
+	{"net.key.sadb_dump", []_C_int{4, 30, 1}},
+	{"net.key.spd_dump", []_C_int{4, 30, 2}},
+	{"net.mpls.ifq.congestion", []_C_int{4, 33, 3, 4}},
+	{"net.mpls.ifq.drops", []_C_int{4, 33, 3, 3}},
+	{"net.mpls.ifq.len", []_C_int{4, 33, 3, 1}},
+	{"net.mpls.ifq.maxlen", []_C_int{4, 33, 3, 2}},
+	{"net.mpls.mapttl_ip", []_C_int{4, 33, 5}},
+	{"net.mpls.mapttl_ip6", []_C_int{4, 33, 6}},
+	{"net.mpls.ttl", []_C_int{4, 33, 2}},
+	{"net.pflow.stats", []_C_int{4, 34, 1}},
+	{"net.pipex.enable", []_C_int{4, 35, 1}},
+	{"vm.anonmin", []_C_int{2, 7}},
+	{"vm.loadavg", []_C_int{2, 2}},
+	{"vm.malloc_conf", []_C_int{2, 12}},
+	{"vm.maxslp", []_C_int{2, 10}},
+	{"vm.nkmempages", []_C_int{2, 6}},
+	{"vm.psstrings", []_C_int{2, 3}},
+	{"vm.swapencrypt.enable", []_C_int{2, 5, 0}},
+	{"vm.swapencrypt.keyscreated", []_C_int{2, 5, 1}},
+	{"vm.swapencrypt.keysdeleted", []_C_int{2, 5, 2}},
+	{"vm.uspace", []_C_int{2, 11}},
+	{"vm.uvmexp", []_C_int{2, 4}},
+	{"vm.vmmeter", []_C_int{2, 1}},
+	{"vm.vnodemin", []_C_int{2, 9}},
+	{"vm.vtextmin", []_C_int{2, 8}},
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_dragonfly_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_dragonfly_amd64.go
new file mode 100644
index 000000000..464c9a983
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_dragonfly_amd64.go
@@ -0,0 +1,315 @@
+// go run mksysnum.go https://gitweb.dragonflybsd.org/dragonfly.git/blob_plain/HEAD:/sys/kern/syscalls.master
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,dragonfly
+
+package unix
+
+const (
+	// SYS_NOSYS = 0;  // { int nosys(void); } syscall nosys_args int
+	SYS_EXIT          = 1   // { void exit(int rval); }
+	SYS_FORK          = 2   // { int fork(void); }
+	SYS_READ          = 3   // { ssize_t read(int fd, void *buf, size_t nbyte); }
+	SYS_WRITE         = 4   // { ssize_t write(int fd, const void *buf, size_t nbyte); }
+	SYS_OPEN          = 5   // { int open(char *path, int flags, int mode); }
+	SYS_CLOSE         = 6   // { int close(int fd); }
+	SYS_WAIT4         = 7   // { int wait4(int pid, int *status, int options, struct rusage *rusage); } wait4 wait_args int
+	SYS_LINK          = 9   // { int link(char *path, char *link); }
+	SYS_UNLINK        = 10  // { int unlink(char *path); }
+	SYS_CHDIR         = 12  // { int chdir(char *path); }
+	SYS_FCHDIR        = 13  // { int fchdir(int fd); }
+	SYS_MKNOD         = 14  // { int mknod(char *path, int mode, int dev); }
+	SYS_CHMOD         = 15  // { int chmod(char *path, int mode); }
+	SYS_CHOWN         = 16  // { int chown(char *path, int uid, int gid); }
+	SYS_OBREAK        = 17  // { int obreak(char *nsize); } break obreak_args int
+	SYS_GETFSSTAT     = 18  // { int getfsstat(struct statfs *buf, long bufsize, int flags); }
+	SYS_GETPID        = 20  // { pid_t getpid(void); }
+	SYS_MOUNT         = 21  // { int mount(char *type, char *path, int flags, caddr_t data); }
+	SYS_UNMOUNT       = 22  // { int unmount(char *path, int flags); }
+	SYS_SETUID        = 23  // { int setuid(uid_t uid); }
+	SYS_GETUID        = 24  // { uid_t getuid(void); }
+	SYS_GETEUID       = 25  // { uid_t geteuid(void); }
+	SYS_PTRACE        = 26  // { int ptrace(int req, pid_t pid, caddr_t addr, int data); }
+	SYS_RECVMSG       = 27  // { int recvmsg(int s, struct msghdr *msg, int flags); }
+	SYS_SENDMSG       = 28  // { int sendmsg(int s, caddr_t msg, int flags); }
+	SYS_RECVFROM      = 29  // { int recvfrom(int s, caddr_t buf, size_t len, int flags, caddr_t from, int *fromlenaddr); }
+	SYS_ACCEPT        = 30  // { int accept(int s, caddr_t name, int *anamelen); }
+	SYS_GETPEERNAME   = 31  // { int getpeername(int fdes, caddr_t asa, int *alen); }
+	SYS_GETSOCKNAME   = 32  // { int getsockname(int fdes, caddr_t asa, int *alen); }
+	SYS_ACCESS        = 33  // { int access(char *path, int flags); }
+	SYS_CHFLAGS       = 34  // { int chflags(char *path, int flags); }
+	SYS_FCHFLAGS      = 35  // { int fchflags(int fd, int flags); }
+	SYS_SYNC          = 36  // { int sync(void); }
+	SYS_KILL          = 37  // { int kill(int pid, int signum); }
+	SYS_GETPPID       = 39  // { pid_t getppid(void); }
+	SYS_DUP           = 41  // { int dup(int fd); }
+	SYS_PIPE          = 42  // { int pipe(void); }
+	SYS_GETEGID       = 43  // { gid_t getegid(void); }
+	SYS_PROFIL        = 44  // { int profil(caddr_t samples, size_t size, size_t offset, u_int scale); }
+	SYS_KTRACE        = 45  // { int ktrace(const char *fname, int ops, int facs, int pid); }
+	SYS_GETGID        = 47  // { gid_t getgid(void); }
+	SYS_GETLOGIN      = 49  // { int getlogin(char *namebuf, u_int namelen); }
+	SYS_SETLOGIN      = 50  // { int setlogin(char *namebuf); }
+	SYS_ACCT          = 51  // { int acct(char *path); }
+	SYS_SIGALTSTACK   = 53  // { int sigaltstack(stack_t *ss, stack_t *oss); }
+	SYS_IOCTL         = 54  // { int ioctl(int fd, u_long com, caddr_t data); }
+	SYS_REBOOT        = 55  // { int reboot(int opt); }
+	SYS_REVOKE        = 56  // { int revoke(char *path); }
+	SYS_SYMLINK       = 57  // { int symlink(char *path, char *link); }
+	SYS_READLINK      = 58  // { int readlink(char *path, char *buf, int count); }
+	SYS_EXECVE        = 59  // { int execve(char *fname, char **argv, char **envv); }
+	SYS_UMASK         = 60  // { int umask(int newmask); } umask umask_args int
+	SYS_CHROOT        = 61  // { int chroot(char *path); }
+	SYS_MSYNC         = 65  // { int msync(void *addr, size_t len, int flags); }
+	SYS_VFORK         = 66  // { pid_t vfork(void); }
+	SYS_SBRK          = 69  // { int sbrk(int incr); }
+	SYS_SSTK          = 70  // { int sstk(int incr); }
+	SYS_MUNMAP        = 73  // { int munmap(void *addr, size_t len); }
+	SYS_MPROTECT      = 74  // { int mprotect(void *addr, size_t len, int prot); }
+	SYS_MADVISE       = 75  // { int madvise(void *addr, size_t len, int behav); }
+	SYS_MINCORE       = 78  // { int mincore(const void *addr, size_t len, char *vec); }
+	SYS_GETGROUPS     = 79  // { int getgroups(u_int gidsetsize, gid_t *gidset); }
+	SYS_SETGROUPS     = 80  // { int setgroups(u_int gidsetsize, gid_t *gidset); }
+	SYS_GETPGRP       = 81  // { int getpgrp(void); }
+	SYS_SETPGID       = 82  // { int setpgid(int pid, int pgid); }
+	SYS_SETITIMER     = 83  // { int setitimer(u_int which, struct itimerval *itv, struct itimerval *oitv); }
+	SYS_SWAPON        = 85  // { int swapon(char *name); }
+	SYS_GETITIMER     = 86  // { int getitimer(u_int which, struct itimerval *itv); }
+	SYS_GETDTABLESIZE = 89  // { int getdtablesize(void); }
+	SYS_DUP2          = 90  // { int dup2(int from, int to); }
+	SYS_FCNTL         = 92  // { int fcntl(int fd, int cmd, long arg); }
+	SYS_SELECT        = 93  // { int select(int nd, fd_set *in, fd_set *ou, fd_set *ex, struct timeval *tv); }
+	SYS_FSYNC         = 95  // { int fsync(int fd); }
+	SYS_SETPRIORITY   = 96  // { int setpriority(int which, int who, int prio); }
+	SYS_SOCKET        = 97  // { int socket(int domain, int type, int protocol); }
+	SYS_CONNECT       = 98  // { int connect(int s, caddr_t name, int namelen); }
+	SYS_GETPRIORITY   = 100 // { int getpriority(int which, int who); }
+	SYS_BIND          = 104 // { int bind(int s, caddr_t name, int namelen); }
+	SYS_SETSOCKOPT    = 105 // { int setsockopt(int s, int level, int name, caddr_t val, int valsize); }
+	SYS_LISTEN        = 106 // { int listen(int s, int backlog); }
+	SYS_GETTIMEOFDAY  = 116 // { int gettimeofday(struct timeval *tp, struct timezone *tzp); }
+	SYS_GETRUSAGE     = 117 // { int getrusage(int who, struct rusage *rusage); }
+	SYS_GETSOCKOPT    = 118 // { int getsockopt(int s, int level, int name, caddr_t val, int *avalsize); }
+	SYS_READV         = 120 // { int readv(int fd, struct iovec *iovp, u_int iovcnt); }
+	SYS_WRITEV        = 121 // { int writev(int fd, struct iovec *iovp, u_int iovcnt); }
+	SYS_SETTIMEOFDAY  = 122 // { int settimeofday(struct timeval *tv, struct timezone *tzp); }
+	SYS_FCHOWN        = 123 // { int fchown(int fd, int uid, int gid); }
+	SYS_FCHMOD        = 124 // { int fchmod(int fd, int mode); }
+	SYS_SETREUID      = 126 // { int setreuid(int ruid, int euid); }
+	SYS_SETREGID      = 127 // { int setregid(int rgid, int egid); }
+	SYS_RENAME        = 128 // { int rename(char *from, char *to); }
+	SYS_FLOCK         = 131 // { int flock(int fd, int how); }
+	SYS_MKFIFO        = 132 // { int mkfifo(char *path, int mode); }
+	SYS_SENDTO        = 133 // { int sendto(int s, caddr_t buf, size_t len, int flags, caddr_t to, int tolen); }
+	SYS_SHUTDOWN      = 134 // { int shutdown(int s, int how); }
+	SYS_SOCKETPAIR    = 135 // { int socketpair(int domain, int type, int protocol, int *rsv); }
+	SYS_MKDIR         = 136 // { int mkdir(char *path, int mode); }
+	SYS_RMDIR         = 137 // { int rmdir(char *path); }
+	SYS_UTIMES        = 138 // { int utimes(char *path, struct timeval *tptr); }
+	SYS_ADJTIME       = 140 // { int adjtime(struct timeval *delta, struct timeval *olddelta); }
+	SYS_SETSID        = 147 // { int setsid(void); }
+	SYS_QUOTACTL      = 148 // { int quotactl(char *path, int cmd, int uid, caddr_t arg); }
+	SYS_STATFS        = 157 // { int statfs(char *path, struct statfs *buf); }
+	SYS_FSTATFS       = 158 // { int fstatfs(int fd, struct statfs *buf); }
+	SYS_GETFH         = 161 // { int getfh(char *fname, struct fhandle *fhp); }
+	SYS_GETDOMAINNAME = 162 // { int getdomainname(char *domainname, int len); }
+	SYS_SETDOMAINNAME = 163 // { int setdomainname(char *domainname, int len); }
+	SYS_UNAME         = 164 // { int uname(struct utsname *name); }
+	SYS_SYSARCH       = 165 // { int sysarch(int op, char *parms); }
+	SYS_RTPRIO        = 166 // { int rtprio(int function, pid_t pid, struct rtprio *rtp); }
+	SYS_EXTPREAD      = 173 // { ssize_t extpread(int fd, void *buf, size_t nbyte, int flags, off_t offset); }
+	SYS_EXTPWRITE     = 174 // { ssize_t extpwrite(int fd, const void *buf, size_t nbyte, int flags, off_t offset); }
+	SYS_NTP_ADJTIME   = 176 // { int ntp_adjtime(struct timex *tp); }
+	SYS_SETGID        = 181 // { int setgid(gid_t gid); }
+	SYS_SETEGID       = 182 // { int setegid(gid_t egid); }
+	SYS_SETEUID       = 183 // { int seteuid(uid_t euid); }
+	SYS_PATHCONF      = 191 // { int pathconf(char *path, int name); }
+	SYS_FPATHCONF     = 192 // { int fpathconf(int fd, int name); }
+	SYS_GETRLIMIT     = 194 // { int getrlimit(u_int which, struct rlimit *rlp); } getrlimit __getrlimit_args int
+	SYS_SETRLIMIT     = 195 // { int setrlimit(u_int which, struct rlimit *rlp); } setrlimit __setrlimit_args int
+	SYS_MMAP          = 197 // { caddr_t mmap(caddr_t addr, size_t len, int prot, int flags, int fd, int pad, off_t pos); }
+	// SYS_NOSYS = 198;  // { int nosys(void); } __syscall __syscall_args int
+	SYS_LSEEK                  = 199 // { off_t lseek(int fd, int pad, off_t offset, int whence); }
+	SYS_TRUNCATE               = 200 // { int truncate(char *path, int pad, off_t length); }
+	SYS_FTRUNCATE              = 201 // { int ftruncate(int fd, int pad, off_t length); }
+	SYS___SYSCTL               = 202 // { int __sysctl(int *name, u_int namelen, void *old, size_t *oldlenp, void *new, size_t newlen); } __sysctl sysctl_args int
+	SYS_MLOCK                  = 203 // { int mlock(const void *addr, size_t len); }
+	SYS_MUNLOCK                = 204 // { int munlock(const void *addr, size_t len); }
+	SYS_UNDELETE               = 205 // { int undelete(char *path); }
+	SYS_FUTIMES                = 206 // { int futimes(int fd, struct timeval *tptr); }
+	SYS_GETPGID                = 207 // { int getpgid(pid_t pid); }
+	SYS_POLL                   = 209 // { int poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS___SEMCTL               = 220 // { int __semctl(int semid, int semnum, int cmd, union semun *arg); }
+	SYS_SEMGET                 = 221 // { int semget(key_t key, int nsems, int semflg); }
+	SYS_SEMOP                  = 222 // { int semop(int semid, struct sembuf *sops, u_int nsops); }
+	SYS_MSGCTL                 = 224 // { int msgctl(int msqid, int cmd, struct msqid_ds *buf); }
+	SYS_MSGGET                 = 225 // { int msgget(key_t key, int msgflg); }
+	SYS_MSGSND                 = 226 // { int msgsnd(int msqid, const void *msgp, size_t msgsz, int msgflg); }
+	SYS_MSGRCV                 = 227 // { int msgrcv(int msqid, void *msgp, size_t msgsz, long msgtyp, int msgflg); }
+	SYS_SHMAT                  = 228 // { caddr_t shmat(int shmid, const void *shmaddr, int shmflg); }
+	SYS_SHMCTL                 = 229 // { int shmctl(int shmid, int cmd, struct shmid_ds *buf); }
+	SYS_SHMDT                  = 230 // { int shmdt(const void *shmaddr); }
+	SYS_SHMGET                 = 231 // { int shmget(key_t key, size_t size, int shmflg); }
+	SYS_CLOCK_GETTIME          = 232 // { int clock_gettime(clockid_t clock_id, struct timespec *tp); }
+	SYS_CLOCK_SETTIME          = 233 // { int clock_settime(clockid_t clock_id, const struct timespec *tp); }
+	SYS_CLOCK_GETRES           = 234 // { int clock_getres(clockid_t clock_id, struct timespec *tp); }
+	SYS_NANOSLEEP              = 240 // { int nanosleep(const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS_MINHERIT               = 250 // { int minherit(void *addr, size_t len, int inherit); }
+	SYS_RFORK                  = 251 // { int rfork(int flags); }
+	SYS_OPENBSD_POLL           = 252 // { int openbsd_poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_ISSETUGID              = 253 // { int issetugid(void); }
+	SYS_LCHOWN                 = 254 // { int lchown(char *path, int uid, int gid); }
+	SYS_LCHMOD                 = 274 // { int lchmod(char *path, mode_t mode); }
+	SYS_LUTIMES                = 276 // { int lutimes(char *path, struct timeval *tptr); }
+	SYS_EXTPREADV              = 289 // { ssize_t extpreadv(int fd, struct iovec *iovp, u_int iovcnt, int flags, off_t offset); }
+	SYS_EXTPWRITEV             = 290 // { ssize_t extpwritev(int fd, struct iovec *iovp,u_int iovcnt, int flags, off_t offset); }
+	SYS_FHSTATFS               = 297 // { int fhstatfs(const struct fhandle *u_fhp, struct statfs *buf); }
+	SYS_FHOPEN                 = 298 // { int fhopen(const struct fhandle *u_fhp, int flags); }
+	SYS_MODNEXT                = 300 // { int modnext(int modid); }
+	SYS_MODSTAT                = 301 // { int modstat(int modid, struct module_stat* stat); }
+	SYS_MODFNEXT               = 302 // { int modfnext(int modid); }
+	SYS_MODFIND                = 303 // { int modfind(const char *name); }
+	SYS_KLDLOAD                = 304 // { int kldload(const char *file); }
+	SYS_KLDUNLOAD              = 305 // { int kldunload(int fileid); }
+	SYS_KLDFIND                = 306 // { int kldfind(const char *file); }
+	SYS_KLDNEXT                = 307 // { int kldnext(int fileid); }
+	SYS_KLDSTAT                = 308 // { int kldstat(int fileid, struct kld_file_stat* stat); }
+	SYS_KLDFIRSTMOD            = 309 // { int kldfirstmod(int fileid); }
+	SYS_GETSID                 = 310 // { int getsid(pid_t pid); }
+	SYS_SETRESUID              = 311 // { int setresuid(uid_t ruid, uid_t euid, uid_t suid); }
+	SYS_SETRESGID              = 312 // { int setresgid(gid_t rgid, gid_t egid, gid_t sgid); }
+	SYS_AIO_RETURN             = 314 // { int aio_return(struct aiocb *aiocbp); }
+	SYS_AIO_SUSPEND            = 315 // { int aio_suspend(struct aiocb * const * aiocbp, int nent, const struct timespec *timeout); }
+	SYS_AIO_CANCEL             = 316 // { int aio_cancel(int fd, struct aiocb *aiocbp); }
+	SYS_AIO_ERROR              = 317 // { int aio_error(struct aiocb *aiocbp); }
+	SYS_AIO_READ               = 318 // { int aio_read(struct aiocb *aiocbp); }
+	SYS_AIO_WRITE              = 319 // { int aio_write(struct aiocb *aiocbp); }
+	SYS_LIO_LISTIO             = 320 // { int lio_listio(int mode, struct aiocb * const *acb_list, int nent, struct sigevent *sig); }
+	SYS_YIELD                  = 321 // { int yield(void); }
+	SYS_MLOCKALL               = 324 // { int mlockall(int how); }
+	SYS_MUNLOCKALL             = 325 // { int munlockall(void); }
+	SYS___GETCWD               = 326 // { int __getcwd(u_char *buf, u_int buflen); }
+	SYS_SCHED_SETPARAM         = 327 // { int sched_setparam (pid_t pid, const struct sched_param *param); }
+	SYS_SCHED_GETPARAM         = 328 // { int sched_getparam (pid_t pid, struct sched_param *param); }
+	SYS_SCHED_SETSCHEDULER     = 329 // { int sched_setscheduler (pid_t pid, int policy, const struct sched_param *param); }
+	SYS_SCHED_GETSCHEDULER     = 330 // { int sched_getscheduler (pid_t pid); }
+	SYS_SCHED_YIELD            = 331 // { int sched_yield (void); }
+	SYS_SCHED_GET_PRIORITY_MAX = 332 // { int sched_get_priority_max (int policy); }
+	SYS_SCHED_GET_PRIORITY_MIN = 333 // { int sched_get_priority_min (int policy); }
+	SYS_SCHED_RR_GET_INTERVAL  = 334 // { int sched_rr_get_interval (pid_t pid, struct timespec *interval); }
+	SYS_UTRACE                 = 335 // { int utrace(const void *addr, size_t len); }
+	SYS_KLDSYM                 = 337 // { int kldsym(int fileid, int cmd, void *data); }
+	SYS_JAIL                   = 338 // { int jail(struct jail *jail); }
+	SYS_SIGPROCMASK            = 340 // { int sigprocmask(int how, const sigset_t *set, sigset_t *oset); }
+	SYS_SIGSUSPEND             = 341 // { int sigsuspend(const sigset_t *sigmask); }
+	SYS_SIGACTION              = 342 // { int sigaction(int sig, const struct sigaction *act, struct sigaction *oact); }
+	SYS_SIGPENDING             = 343 // { int sigpending(sigset_t *set); }
+	SYS_SIGRETURN              = 344 // { int sigreturn(ucontext_t *sigcntxp); }
+	SYS_SIGTIMEDWAIT           = 345 // { int sigtimedwait(const sigset_t *set,siginfo_t *info, const struct timespec *timeout); }
+	SYS_SIGWAITINFO            = 346 // { int sigwaitinfo(const sigset_t *set,siginfo_t *info); }
+	SYS___ACL_GET_FILE         = 347 // { int __acl_get_file(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_SET_FILE         = 348 // { int __acl_set_file(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_GET_FD           = 349 // { int __acl_get_fd(int filedes, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_SET_FD           = 350 // { int __acl_set_fd(int filedes, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_DELETE_FILE      = 351 // { int __acl_delete_file(const char *path, acl_type_t type); }
+	SYS___ACL_DELETE_FD        = 352 // { int __acl_delete_fd(int filedes, acl_type_t type); }
+	SYS___ACL_ACLCHECK_FILE    = 353 // { int __acl_aclcheck_file(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_ACLCHECK_FD      = 354 // { int __acl_aclcheck_fd(int filedes, acl_type_t type, struct acl *aclp); }
+	SYS_EXTATTRCTL             = 355 // { int extattrctl(const char *path, int cmd, const char *filename, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_FILE       = 356 // { int extattr_set_file(const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FILE       = 357 // { int extattr_get_file(const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FILE    = 358 // { int extattr_delete_file(const char *path, int attrnamespace, const char *attrname); }
+	SYS_AIO_WAITCOMPLETE       = 359 // { int aio_waitcomplete(struct aiocb **aiocbp, struct timespec *timeout); }
+	SYS_GETRESUID              = 360 // { int getresuid(uid_t *ruid, uid_t *euid, uid_t *suid); }
+	SYS_GETRESGID              = 361 // { int getresgid(gid_t *rgid, gid_t *egid, gid_t *sgid); }
+	SYS_KQUEUE                 = 362 // { int kqueue(void); }
+	SYS_KEVENT                 = 363 // { int kevent(int fd, const struct kevent *changelist, int nchanges, struct kevent *eventlist, int nevents, const struct timespec *timeout); }
+	SYS_KENV                   = 390 // { int kenv(int what, const char *name, char *value, int len); }
+	SYS_LCHFLAGS               = 391 // { int lchflags(char *path, int flags); }
+	SYS_UUIDGEN                = 392 // { int uuidgen(struct uuid *store, int count); }
+	SYS_SENDFILE               = 393 // { int sendfile(int fd, int s, off_t offset, size_t nbytes, struct sf_hdtr *hdtr, off_t *sbytes, int flags); }
+	SYS_VARSYM_SET             = 450 // { int varsym_set(int level, const char *name, const char *data); }
+	SYS_VARSYM_GET             = 451 // { int varsym_get(int mask, const char *wild, char *buf, int bufsize); }
+	SYS_VARSYM_LIST            = 452 // { int varsym_list(int level, char *buf, int maxsize, int *marker); }
+	SYS_EXEC_SYS_REGISTER      = 465 // { int exec_sys_register(void *entry); }
+	SYS_EXEC_SYS_UNREGISTER    = 466 // { int exec_sys_unregister(int id); }
+	SYS_SYS_CHECKPOINT         = 467 // { int sys_checkpoint(int type, int fd, pid_t pid, int retval); }
+	SYS_MOUNTCTL               = 468 // { int mountctl(const char *path, int op, int fd, const void *ctl, int ctllen, void *buf, int buflen); }
+	SYS_UMTX_SLEEP             = 469 // { int umtx_sleep(volatile const int *ptr, int value, int timeout); }
+	SYS_UMTX_WAKEUP            = 470 // { int umtx_wakeup(volatile const int *ptr, int count); }
+	SYS_JAIL_ATTACH            = 471 // { int jail_attach(int jid); }
+	SYS_SET_TLS_AREA           = 472 // { int set_tls_area(int which, struct tls_info *info, size_t infosize); }
+	SYS_GET_TLS_AREA           = 473 // { int get_tls_area(int which, struct tls_info *info, size_t infosize); }
+	SYS_CLOSEFROM              = 474 // { int closefrom(int fd); }
+	SYS_STAT                   = 475 // { int stat(const char *path, struct stat *ub); }
+	SYS_FSTAT                  = 476 // { int fstat(int fd, struct stat *sb); }
+	SYS_LSTAT                  = 477 // { int lstat(const char *path, struct stat *ub); }
+	SYS_FHSTAT                 = 478 // { int fhstat(const struct fhandle *u_fhp, struct stat *sb); }
+	SYS_GETDIRENTRIES          = 479 // { int getdirentries(int fd, char *buf, u_int count, long *basep); }
+	SYS_GETDENTS               = 480 // { int getdents(int fd, char *buf, size_t count); }
+	SYS_USCHED_SET             = 481 // { int usched_set(pid_t pid, int cmd, void *data, int bytes); }
+	SYS_EXTACCEPT              = 482 // { int extaccept(int s, int flags, caddr_t name, int *anamelen); }
+	SYS_EXTCONNECT             = 483 // { int extconnect(int s, int flags, caddr_t name, int namelen); }
+	SYS_MCONTROL               = 485 // { int mcontrol(void *addr, size_t len, int behav, off_t value); }
+	SYS_VMSPACE_CREATE         = 486 // { int vmspace_create(void *id, int type, void *data); }
+	SYS_VMSPACE_DESTROY        = 487 // { int vmspace_destroy(void *id); }
+	SYS_VMSPACE_CTL            = 488 // { int vmspace_ctl(void *id, int cmd, 		struct trapframe *tframe,	struct vextframe *vframe); }
+	SYS_VMSPACE_MMAP           = 489 // { int vmspace_mmap(void *id, void *addr, size_t len, int prot, int flags, int fd, off_t offset); }
+	SYS_VMSPACE_MUNMAP         = 490 // { int vmspace_munmap(void *id, void *addr,	size_t len); }
+	SYS_VMSPACE_MCONTROL       = 491 // { int vmspace_mcontrol(void *id, void *addr, 	size_t len, int behav, off_t value); }
+	SYS_VMSPACE_PREAD          = 492 // { ssize_t vmspace_pread(void *id, void *buf, size_t nbyte, int flags, off_t offset); }
+	SYS_VMSPACE_PWRITE         = 493 // { ssize_t vmspace_pwrite(void *id, const void *buf, size_t nbyte, int flags, off_t offset); }
+	SYS_EXTEXIT                = 494 // { void extexit(int how, int status, void *addr); }
+	SYS_LWP_CREATE             = 495 // { int lwp_create(struct lwp_params *params); }
+	SYS_LWP_GETTID             = 496 // { lwpid_t lwp_gettid(void); }
+	SYS_LWP_KILL               = 497 // { int lwp_kill(pid_t pid, lwpid_t tid, int signum); }
+	SYS_LWP_RTPRIO             = 498 // { int lwp_rtprio(int function, pid_t pid, lwpid_t tid, struct rtprio *rtp); }
+	SYS_PSELECT                = 499 // { int pselect(int nd, fd_set *in, fd_set *ou, fd_set *ex, const struct timespec *ts,    const sigset_t *sigmask); }
+	SYS_STATVFS                = 500 // { int statvfs(const char *path, struct statvfs *buf); }
+	SYS_FSTATVFS               = 501 // { int fstatvfs(int fd, struct statvfs *buf); }
+	SYS_FHSTATVFS              = 502 // { int fhstatvfs(const struct fhandle *u_fhp, struct statvfs *buf); }
+	SYS_GETVFSSTAT             = 503 // { int getvfsstat(struct statfs *buf,          struct statvfs *vbuf, long vbufsize, int flags); }
+	SYS_OPENAT                 = 504 // { int openat(int fd, char *path, int flags, int mode); }
+	SYS_FSTATAT                = 505 // { int fstatat(int fd, char *path, 	struct stat *sb, int flags); }
+	SYS_FCHMODAT               = 506 // { int fchmodat(int fd, char *path, int mode, int flags); }
+	SYS_FCHOWNAT               = 507 // { int fchownat(int fd, char *path, int uid, int gid, int flags); }
+	SYS_UNLINKAT               = 508 // { int unlinkat(int fd, char *path, int flags); }
+	SYS_FACCESSAT              = 509 // { int faccessat(int fd, char *path, int amode, int flags); }
+	SYS_MQ_OPEN                = 510 // { mqd_t mq_open(const char * name, int oflag, mode_t mode, struct mq_attr *attr); }
+	SYS_MQ_CLOSE               = 511 // { int mq_close(mqd_t mqdes); }
+	SYS_MQ_UNLINK              = 512 // { int mq_unlink(const char *name); }
+	SYS_MQ_GETATTR             = 513 // { int mq_getattr(mqd_t mqdes, struct mq_attr *mqstat); }
+	SYS_MQ_SETATTR             = 514 // { int mq_setattr(mqd_t mqdes, const struct mq_attr *mqstat, struct mq_attr *omqstat); }
+	SYS_MQ_NOTIFY              = 515 // { int mq_notify(mqd_t mqdes, const struct sigevent *notification); }
+	SYS_MQ_SEND                = 516 // { int mq_send(mqd_t mqdes, const char *msg_ptr, size_t msg_len, unsigned msg_prio); }
+	SYS_MQ_RECEIVE             = 517 // { ssize_t mq_receive(mqd_t mqdes, char *msg_ptr, size_t msg_len, unsigned *msg_prio); }
+	SYS_MQ_TIMEDSEND           = 518 // { int mq_timedsend(mqd_t mqdes, const char *msg_ptr, size_t msg_len, unsigned msg_prio, const struct timespec *abs_timeout); }
+	SYS_MQ_TIMEDRECEIVE        = 519 // { ssize_t mq_timedreceive(mqd_t mqdes, char *msg_ptr, size_t msg_len, unsigned *msg_prio, const struct timespec *abs_timeout); }
+	SYS_IOPRIO_SET             = 520 // { int ioprio_set(int which, int who, int prio); }
+	SYS_IOPRIO_GET             = 521 // { int ioprio_get(int which, int who); }
+	SYS_CHROOT_KERNEL          = 522 // { int chroot_kernel(char *path); }
+	SYS_RENAMEAT               = 523 // { int renameat(int oldfd, char *old, int newfd, char *new); }
+	SYS_MKDIRAT                = 524 // { int mkdirat(int fd, char *path, mode_t mode); }
+	SYS_MKFIFOAT               = 525 // { int mkfifoat(int fd, char *path, mode_t mode); }
+	SYS_MKNODAT                = 526 // { int mknodat(int fd, char *path, mode_t mode, dev_t dev); }
+	SYS_READLINKAT             = 527 // { int readlinkat(int fd, char *path, char *buf, size_t bufsize); }
+	SYS_SYMLINKAT              = 528 // { int symlinkat(char *path1, int fd, char *path2); }
+	SYS_SWAPOFF                = 529 // { int swapoff(char *name); }
+	SYS_VQUOTACTL              = 530 // { int vquotactl(const char *path, struct plistref *pref); }
+	SYS_LINKAT                 = 531 // { int linkat(int fd1, char *path1, int fd2, char *path2, int flags); }
+	SYS_EACCESS                = 532 // { int eaccess(char *path, int flags); }
+	SYS_LPATHCONF              = 533 // { int lpathconf(char *path, int name); }
+	SYS_VMM_GUEST_CTL          = 534 // { int vmm_guest_ctl(int op, struct vmm_guest_options *options); }
+	SYS_VMM_GUEST_SYNC_ADDR    = 535 // { int vmm_guest_sync_addr(long *dstaddr, long *srcaddr); }
+	SYS_PROCCTL                = 536 // { int procctl(idtype_t idtype, id_t id, int cmd, void *data); }
+	SYS_CHFLAGSAT              = 537 // { int chflagsat(int fd, const char *path, int flags, int atflags);}
+	SYS_PIPE2                  = 538 // { int pipe2(int *fildes, int flags); }
+	SYS_UTIMENSAT              = 539 // { int utimensat(int fd, const char *path, const struct timespec *ts, int flags); }
+	SYS_FUTIMENS               = 540 // { int futimens(int fd, const struct timespec *ts); }
+	SYS_ACCEPT4                = 541 // { int accept4(int s, caddr_t name, int *anamelen, int flags); }
+	SYS_LWP_SETNAME            = 542 // { int lwp_setname(lwpid_t tid, const char *name); }
+	SYS_PPOLL                  = 543 // { int ppoll(struct pollfd *fds, u_int nfds, const struct timespec *ts, const sigset_t *sigmask); }
+	SYS_LWP_SETAFFINITY        = 544 // { int lwp_setaffinity(pid_t pid, lwpid_t tid, const cpumask_t *mask); }
+	SYS_LWP_GETAFFINITY        = 545 // { int lwp_getaffinity(pid_t pid, lwpid_t tid, cpumask_t *mask); }
+	SYS_LWP_CREATE2            = 546 // { int lwp_create2(struct lwp_params *params, const cpumask_t *mask); }
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_freebsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_freebsd_386.go
new file mode 100644
index 000000000..9474974b6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_freebsd_386.go
@@ -0,0 +1,396 @@
+// go run mksysnum.go https://svn.freebsd.org/base/stable/11/sys/kern/syscalls.master
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build 386,freebsd
+
+package unix
+
+const (
+	// SYS_NOSYS = 0;  // { int nosys(void); } syscall nosys_args int
+	SYS_EXIT                     = 1   // { void sys_exit(int rval); } exit sys_exit_args void
+	SYS_FORK                     = 2   // { int fork(void); }
+	SYS_READ                     = 3   // { ssize_t read(int fd, void *buf, size_t nbyte); }
+	SYS_WRITE                    = 4   // { ssize_t write(int fd, const void *buf, size_t nbyte); }
+	SYS_OPEN                     = 5   // { int open(char *path, int flags, int mode); }
+	SYS_CLOSE                    = 6   // { int close(int fd); }
+	SYS_WAIT4                    = 7   // { int wait4(int pid, int *status, int options, struct rusage *rusage); }
+	SYS_LINK                     = 9   // { int link(char *path, char *link); }
+	SYS_UNLINK                   = 10  // { int unlink(char *path); }
+	SYS_CHDIR                    = 12  // { int chdir(char *path); }
+	SYS_FCHDIR                   = 13  // { int fchdir(int fd); }
+	SYS_MKNOD                    = 14  // { int mknod(char *path, int mode, int dev); }
+	SYS_CHMOD                    = 15  // { int chmod(char *path, int mode); }
+	SYS_CHOWN                    = 16  // { int chown(char *path, int uid, int gid); }
+	SYS_OBREAK                   = 17  // { int obreak(char *nsize); } break obreak_args int
+	SYS_GETPID                   = 20  // { pid_t getpid(void); }
+	SYS_MOUNT                    = 21  // { int mount(char *type, char *path, int flags, caddr_t data); }
+	SYS_UNMOUNT                  = 22  // { int unmount(char *path, int flags); }
+	SYS_SETUID                   = 23  // { int setuid(uid_t uid); }
+	SYS_GETUID                   = 24  // { uid_t getuid(void); }
+	SYS_GETEUID                  = 25  // { uid_t geteuid(void); }
+	SYS_PTRACE                   = 26  // { int ptrace(int req, pid_t pid, caddr_t addr, int data); }
+	SYS_RECVMSG                  = 27  // { int recvmsg(int s, struct msghdr *msg, int flags); }
+	SYS_SENDMSG                  = 28  // { int sendmsg(int s, struct msghdr *msg, int flags); }
+	SYS_RECVFROM                 = 29  // { int recvfrom(int s, caddr_t buf, size_t len, int flags, struct sockaddr * __restrict from, __socklen_t * __restrict fromlenaddr); }
+	SYS_ACCEPT                   = 30  // { int accept(int s, struct sockaddr * __restrict name, __socklen_t * __restrict anamelen); }
+	SYS_GETPEERNAME              = 31  // { int getpeername(int fdes, struct sockaddr * __restrict asa, __socklen_t * __restrict alen); }
+	SYS_GETSOCKNAME              = 32  // { int getsockname(int fdes, struct sockaddr * __restrict asa, __socklen_t * __restrict alen); }
+	SYS_ACCESS                   = 33  // { int access(char *path, int amode); }
+	SYS_CHFLAGS                  = 34  // { int chflags(const char *path, u_long flags); }
+	SYS_FCHFLAGS                 = 35  // { int fchflags(int fd, u_long flags); }
+	SYS_SYNC                     = 36  // { int sync(void); }
+	SYS_KILL                     = 37  // { int kill(int pid, int signum); }
+	SYS_GETPPID                  = 39  // { pid_t getppid(void); }
+	SYS_DUP                      = 41  // { int dup(u_int fd); }
+	SYS_PIPE                     = 42  // { int pipe(void); }
+	SYS_GETEGID                  = 43  // { gid_t getegid(void); }
+	SYS_PROFIL                   = 44  // { int profil(caddr_t samples, size_t size, size_t offset, u_int scale); }
+	SYS_KTRACE                   = 45  // { int ktrace(const char *fname, int ops, int facs, int pid); }
+	SYS_GETGID                   = 47  // { gid_t getgid(void); }
+	SYS_GETLOGIN                 = 49  // { int getlogin(char *namebuf, u_int namelen); }
+	SYS_SETLOGIN                 = 50  // { int setlogin(char *namebuf); }
+	SYS_ACCT                     = 51  // { int acct(char *path); }
+	SYS_SIGALTSTACK              = 53  // { int sigaltstack(stack_t *ss, stack_t *oss); }
+	SYS_IOCTL                    = 54  // { int ioctl(int fd, u_long com, caddr_t data); }
+	SYS_REBOOT                   = 55  // { int reboot(int opt); }
+	SYS_REVOKE                   = 56  // { int revoke(char *path); }
+	SYS_SYMLINK                  = 57  // { int symlink(char *path, char *link); }
+	SYS_READLINK                 = 58  // { ssize_t readlink(char *path, char *buf, size_t count); }
+	SYS_EXECVE                   = 59  // { int execve(char *fname, char **argv, char **envv); }
+	SYS_UMASK                    = 60  // { int umask(int newmask); } umask umask_args int
+	SYS_CHROOT                   = 61  // { int chroot(char *path); }
+	SYS_MSYNC                    = 65  // { int msync(void *addr, size_t len, int flags); }
+	SYS_VFORK                    = 66  // { int vfork(void); }
+	SYS_SBRK                     = 69  // { int sbrk(int incr); }
+	SYS_SSTK                     = 70  // { int sstk(int incr); }
+	SYS_OVADVISE                 = 72  // { int ovadvise(int anom); } vadvise ovadvise_args int
+	SYS_MUNMAP                   = 73  // { int munmap(void *addr, size_t len); }
+	SYS_MPROTECT                 = 74  // { int mprotect(const void *addr, size_t len, int prot); }
+	SYS_MADVISE                  = 75  // { int madvise(void *addr, size_t len, int behav); }
+	SYS_MINCORE                  = 78  // { int mincore(const void *addr, size_t len, char *vec); }
+	SYS_GETGROUPS                = 79  // { int getgroups(u_int gidsetsize, gid_t *gidset); }
+	SYS_SETGROUPS                = 80  // { int setgroups(u_int gidsetsize, gid_t *gidset); }
+	SYS_GETPGRP                  = 81  // { int getpgrp(void); }
+	SYS_SETPGID                  = 82  // { int setpgid(int pid, int pgid); }
+	SYS_SETITIMER                = 83  // { int setitimer(u_int which, struct itimerval *itv, struct itimerval *oitv); }
+	SYS_SWAPON                   = 85  // { int swapon(char *name); }
+	SYS_GETITIMER                = 86  // { int getitimer(u_int which, struct itimerval *itv); }
+	SYS_GETDTABLESIZE            = 89  // { int getdtablesize(void); }
+	SYS_DUP2                     = 90  // { int dup2(u_int from, u_int to); }
+	SYS_FCNTL                    = 92  // { int fcntl(int fd, int cmd, long arg); }
+	SYS_SELECT                   = 93  // { int select(int nd, fd_set *in, fd_set *ou, fd_set *ex, struct timeval *tv); }
+	SYS_FSYNC                    = 95  // { int fsync(int fd); }
+	SYS_SETPRIORITY              = 96  // { int setpriority(int which, int who, int prio); }
+	SYS_SOCKET                   = 97  // { int socket(int domain, int type, int protocol); }
+	SYS_CONNECT                  = 98  // { int connect(int s, caddr_t name, int namelen); }
+	SYS_GETPRIORITY              = 100 // { int getpriority(int which, int who); }
+	SYS_BIND                     = 104 // { int bind(int s, caddr_t name, int namelen); }
+	SYS_SETSOCKOPT               = 105 // { int setsockopt(int s, int level, int name, caddr_t val, int valsize); }
+	SYS_LISTEN                   = 106 // { int listen(int s, int backlog); }
+	SYS_GETTIMEOFDAY             = 116 // { int gettimeofday(struct timeval *tp, struct timezone *tzp); }
+	SYS_GETRUSAGE                = 117 // { int getrusage(int who, struct rusage *rusage); }
+	SYS_GETSOCKOPT               = 118 // { int getsockopt(int s, int level, int name, caddr_t val, int *avalsize); }
+	SYS_READV                    = 120 // { int readv(int fd, struct iovec *iovp, u_int iovcnt); }
+	SYS_WRITEV                   = 121 // { int writev(int fd, struct iovec *iovp, u_int iovcnt); }
+	SYS_SETTIMEOFDAY             = 122 // { int settimeofday(struct timeval *tv, struct timezone *tzp); }
+	SYS_FCHOWN                   = 123 // { int fchown(int fd, int uid, int gid); }
+	SYS_FCHMOD                   = 124 // { int fchmod(int fd, int mode); }
+	SYS_SETREUID                 = 126 // { int setreuid(int ruid, int euid); }
+	SYS_SETREGID                 = 127 // { int setregid(int rgid, int egid); }
+	SYS_RENAME                   = 128 // { int rename(char *from, char *to); }
+	SYS_FLOCK                    = 131 // { int flock(int fd, int how); }
+	SYS_MKFIFO                   = 132 // { int mkfifo(char *path, int mode); }
+	SYS_SENDTO                   = 133 // { int sendto(int s, caddr_t buf, size_t len, int flags, caddr_t to, int tolen); }
+	SYS_SHUTDOWN                 = 134 // { int shutdown(int s, int how); }
+	SYS_SOCKETPAIR               = 135 // { int socketpair(int domain, int type, int protocol, int *rsv); }
+	SYS_MKDIR                    = 136 // { int mkdir(char *path, int mode); }
+	SYS_RMDIR                    = 137 // { int rmdir(char *path); }
+	SYS_UTIMES                   = 138 // { int utimes(char *path, struct timeval *tptr); }
+	SYS_ADJTIME                  = 140 // { int adjtime(struct timeval *delta, struct timeval *olddelta); }
+	SYS_SETSID                   = 147 // { int setsid(void); }
+	SYS_QUOTACTL                 = 148 // { int quotactl(char *path, int cmd, int uid, caddr_t arg); }
+	SYS_NLM_SYSCALL              = 154 // { int nlm_syscall(int debug_level, int grace_period, int addr_count, char **addrs); }
+	SYS_NFSSVC                   = 155 // { int nfssvc(int flag, caddr_t argp); }
+	SYS_LGETFH                   = 160 // { int lgetfh(char *fname, struct fhandle *fhp); }
+	SYS_GETFH                    = 161 // { int getfh(char *fname, struct fhandle *fhp); }
+	SYS_SYSARCH                  = 165 // { int sysarch(int op, char *parms); }
+	SYS_RTPRIO                   = 166 // { int rtprio(int function, pid_t pid, struct rtprio *rtp); }
+	SYS_SEMSYS                   = 169 // { int semsys(int which, int a2, int a3, int a4, int a5); }
+	SYS_MSGSYS                   = 170 // { int msgsys(int which, int a2, int a3, int a4, int a5, int a6); }
+	SYS_SHMSYS                   = 171 // { int shmsys(int which, int a2, int a3, int a4); }
+	SYS_SETFIB                   = 175 // { int setfib(int fibnum); }
+	SYS_NTP_ADJTIME              = 176 // { int ntp_adjtime(struct timex *tp); }
+	SYS_SETGID                   = 181 // { int setgid(gid_t gid); }
+	SYS_SETEGID                  = 182 // { int setegid(gid_t egid); }
+	SYS_SETEUID                  = 183 // { int seteuid(uid_t euid); }
+	SYS_STAT                     = 188 // { int stat(char *path, struct stat *ub); }
+	SYS_FSTAT                    = 189 // { int fstat(int fd, struct stat *sb); }
+	SYS_LSTAT                    = 190 // { int lstat(char *path, struct stat *ub); }
+	SYS_PATHCONF                 = 191 // { int pathconf(char *path, int name); }
+	SYS_FPATHCONF                = 192 // { int fpathconf(int fd, int name); }
+	SYS_GETRLIMIT                = 194 // { int getrlimit(u_int which, struct rlimit *rlp); } getrlimit __getrlimit_args int
+	SYS_SETRLIMIT                = 195 // { int setrlimit(u_int which, struct rlimit *rlp); } setrlimit __setrlimit_args int
+	SYS_GETDIRENTRIES            = 196 // { int getdirentries(int fd, char *buf, u_int count, long *basep); }
+	SYS___SYSCTL                 = 202 // { int __sysctl(int *name, u_int namelen, void *old, size_t *oldlenp, void *new, size_t newlen); } __sysctl sysctl_args int
+	SYS_MLOCK                    = 203 // { int mlock(const void *addr, size_t len); }
+	SYS_MUNLOCK                  = 204 // { int munlock(const void *addr, size_t len); }
+	SYS_UNDELETE                 = 205 // { int undelete(char *path); }
+	SYS_FUTIMES                  = 206 // { int futimes(int fd, struct timeval *tptr); }
+	SYS_GETPGID                  = 207 // { int getpgid(pid_t pid); }
+	SYS_POLL                     = 209 // { int poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_SEMGET                   = 221 // { int semget(key_t key, int nsems, int semflg); }
+	SYS_SEMOP                    = 222 // { int semop(int semid, struct sembuf *sops, size_t nsops); }
+	SYS_MSGGET                   = 225 // { int msgget(key_t key, int msgflg); }
+	SYS_MSGSND                   = 226 // { int msgsnd(int msqid, const void *msgp, size_t msgsz, int msgflg); }
+	SYS_MSGRCV                   = 227 // { int msgrcv(int msqid, void *msgp, size_t msgsz, long msgtyp, int msgflg); }
+	SYS_SHMAT                    = 228 // { int shmat(int shmid, const void *shmaddr, int shmflg); }
+	SYS_SHMDT                    = 230 // { int shmdt(const void *shmaddr); }
+	SYS_SHMGET                   = 231 // { int shmget(key_t key, size_t size, int shmflg); }
+	SYS_CLOCK_GETTIME            = 232 // { int clock_gettime(clockid_t clock_id, struct timespec *tp); }
+	SYS_CLOCK_SETTIME            = 233 // { int clock_settime( clockid_t clock_id, const struct timespec *tp); }
+	SYS_CLOCK_GETRES             = 234 // { int clock_getres(clockid_t clock_id, struct timespec *tp); }
+	SYS_KTIMER_CREATE            = 235 // { int ktimer_create(clockid_t clock_id, struct sigevent *evp, int *timerid); }
+	SYS_KTIMER_DELETE            = 236 // { int ktimer_delete(int timerid); }
+	SYS_KTIMER_SETTIME           = 237 // { int ktimer_settime(int timerid, int flags, const struct itimerspec *value, struct itimerspec *ovalue); }
+	SYS_KTIMER_GETTIME           = 238 // { int ktimer_gettime(int timerid, struct itimerspec *value); }
+	SYS_KTIMER_GETOVERRUN        = 239 // { int ktimer_getoverrun(int timerid); }
+	SYS_NANOSLEEP                = 240 // { int nanosleep(const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS_FFCLOCK_GETCOUNTER       = 241 // { int ffclock_getcounter(ffcounter *ffcount); }
+	SYS_FFCLOCK_SETESTIMATE      = 242 // { int ffclock_setestimate( struct ffclock_estimate *cest); }
+	SYS_FFCLOCK_GETESTIMATE      = 243 // { int ffclock_getestimate( struct ffclock_estimate *cest); }
+	SYS_CLOCK_NANOSLEEP          = 244 // { int clock_nanosleep(clockid_t clock_id, int flags, const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS_CLOCK_GETCPUCLOCKID2     = 247 // { int clock_getcpuclockid2(id_t id,int which, clockid_t *clock_id); }
+	SYS_NTP_GETTIME              = 248 // { int ntp_gettime(struct ntptimeval *ntvp); }
+	SYS_MINHERIT                 = 250 // { int minherit(void *addr, size_t len, int inherit); }
+	SYS_RFORK                    = 251 // { int rfork(int flags); }
+	SYS_OPENBSD_POLL             = 252 // { int openbsd_poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_ISSETUGID                = 253 // { int issetugid(void); }
+	SYS_LCHOWN                   = 254 // { int lchown(char *path, int uid, int gid); }
+	SYS_AIO_READ                 = 255 // { int aio_read(struct aiocb *aiocbp); }
+	SYS_AIO_WRITE                = 256 // { int aio_write(struct aiocb *aiocbp); }
+	SYS_LIO_LISTIO               = 257 // { int lio_listio(int mode, struct aiocb * const *acb_list, int nent, struct sigevent *sig); }
+	SYS_GETDENTS                 = 272 // { int getdents(int fd, char *buf, size_t count); }
+	SYS_LCHMOD                   = 274 // { int lchmod(char *path, mode_t mode); }
+	SYS_LUTIMES                  = 276 // { int lutimes(char *path, struct timeval *tptr); }
+	SYS_NSTAT                    = 278 // { int nstat(char *path, struct nstat *ub); }
+	SYS_NFSTAT                   = 279 // { int nfstat(int fd, struct nstat *sb); }
+	SYS_NLSTAT                   = 280 // { int nlstat(char *path, struct nstat *ub); }
+	SYS_PREADV                   = 289 // { ssize_t preadv(int fd, struct iovec *iovp, u_int iovcnt, off_t offset); }
+	SYS_PWRITEV                  = 290 // { ssize_t pwritev(int fd, struct iovec *iovp, u_int iovcnt, off_t offset); }
+	SYS_FHOPEN                   = 298 // { int fhopen(const struct fhandle *u_fhp, int flags); }
+	SYS_FHSTAT                   = 299 // { int fhstat(const struct fhandle *u_fhp, struct stat *sb); }
+	SYS_MODNEXT                  = 300 // { int modnext(int modid); }
+	SYS_MODSTAT                  = 301 // { int modstat(int modid, struct module_stat *stat); }
+	SYS_MODFNEXT                 = 302 // { int modfnext(int modid); }
+	SYS_MODFIND                  = 303 // { int modfind(const char *name); }
+	SYS_KLDLOAD                  = 304 // { int kldload(const char *file); }
+	SYS_KLDUNLOAD                = 305 // { int kldunload(int fileid); }
+	SYS_KLDFIND                  = 306 // { int kldfind(const char *file); }
+	SYS_KLDNEXT                  = 307 // { int kldnext(int fileid); }
+	SYS_KLDSTAT                  = 308 // { int kldstat(int fileid, struct kld_file_stat* stat); }
+	SYS_KLDFIRSTMOD              = 309 // { int kldfirstmod(int fileid); }
+	SYS_GETSID                   = 310 // { int getsid(pid_t pid); }
+	SYS_SETRESUID                = 311 // { int setresuid(uid_t ruid, uid_t euid, uid_t suid); }
+	SYS_SETRESGID                = 312 // { int setresgid(gid_t rgid, gid_t egid, gid_t sgid); }
+	SYS_AIO_RETURN               = 314 // { ssize_t aio_return(struct aiocb *aiocbp); }
+	SYS_AIO_SUSPEND              = 315 // { int aio_suspend( struct aiocb * const * aiocbp, int nent, const struct timespec *timeout); }
+	SYS_AIO_CANCEL               = 316 // { int aio_cancel(int fd, struct aiocb *aiocbp); }
+	SYS_AIO_ERROR                = 317 // { int aio_error(struct aiocb *aiocbp); }
+	SYS_YIELD                    = 321 // { int yield(void); }
+	SYS_MLOCKALL                 = 324 // { int mlockall(int how); }
+	SYS_MUNLOCKALL               = 325 // { int munlockall(void); }
+	SYS___GETCWD                 = 326 // { int __getcwd(char *buf, u_int buflen); }
+	SYS_SCHED_SETPARAM           = 327 // { int sched_setparam (pid_t pid, const struct sched_param *param); }
+	SYS_SCHED_GETPARAM           = 328 // { int sched_getparam (pid_t pid, struct sched_param *param); }
+	SYS_SCHED_SETSCHEDULER       = 329 // { int sched_setscheduler (pid_t pid, int policy, const struct sched_param *param); }
+	SYS_SCHED_GETSCHEDULER       = 330 // { int sched_getscheduler (pid_t pid); }
+	SYS_SCHED_YIELD              = 331 // { int sched_yield (void); }
+	SYS_SCHED_GET_PRIORITY_MAX   = 332 // { int sched_get_priority_max (int policy); }
+	SYS_SCHED_GET_PRIORITY_MIN   = 333 // { int sched_get_priority_min (int policy); }
+	SYS_SCHED_RR_GET_INTERVAL    = 334 // { int sched_rr_get_interval (pid_t pid, struct timespec *interval); }
+	SYS_UTRACE                   = 335 // { int utrace(const void *addr, size_t len); }
+	SYS_KLDSYM                   = 337 // { int kldsym(int fileid, int cmd, void *data); }
+	SYS_JAIL                     = 338 // { int jail(struct jail *jail); }
+	SYS_SIGPROCMASK              = 340 // { int sigprocmask(int how, const sigset_t *set, sigset_t *oset); }
+	SYS_SIGSUSPEND               = 341 // { int sigsuspend(const sigset_t *sigmask); }
+	SYS_SIGPENDING               = 343 // { int sigpending(sigset_t *set); }
+	SYS_SIGTIMEDWAIT             = 345 // { int sigtimedwait(const sigset_t *set, siginfo_t *info, const struct timespec *timeout); }
+	SYS_SIGWAITINFO              = 346 // { int sigwaitinfo(const sigset_t *set, siginfo_t *info); }
+	SYS___ACL_GET_FILE           = 347 // { int __acl_get_file(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_SET_FILE           = 348 // { int __acl_set_file(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_GET_FD             = 349 // { int __acl_get_fd(int filedes, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_SET_FD             = 350 // { int __acl_set_fd(int filedes, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_DELETE_FILE        = 351 // { int __acl_delete_file(const char *path, acl_type_t type); }
+	SYS___ACL_DELETE_FD          = 352 // { int __acl_delete_fd(int filedes, acl_type_t type); }
+	SYS___ACL_ACLCHECK_FILE      = 353 // { int __acl_aclcheck_file(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_ACLCHECK_FD        = 354 // { int __acl_aclcheck_fd(int filedes, acl_type_t type, struct acl *aclp); }
+	SYS_EXTATTRCTL               = 355 // { int extattrctl(const char *path, int cmd, const char *filename, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_FILE         = 356 // { ssize_t extattr_set_file( const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FILE         = 357 // { ssize_t extattr_get_file( const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FILE      = 358 // { int extattr_delete_file(const char *path, int attrnamespace, const char *attrname); }
+	SYS_AIO_WAITCOMPLETE         = 359 // { ssize_t aio_waitcomplete( struct aiocb **aiocbp, struct timespec *timeout); }
+	SYS_GETRESUID                = 360 // { int getresuid(uid_t *ruid, uid_t *euid, uid_t *suid); }
+	SYS_GETRESGID                = 361 // { int getresgid(gid_t *rgid, gid_t *egid, gid_t *sgid); }
+	SYS_KQUEUE                   = 362 // { int kqueue(void); }
+	SYS_KEVENT                   = 363 // { int kevent(int fd, struct kevent *changelist, int nchanges, struct kevent *eventlist, int nevents, const struct timespec *timeout); }
+	SYS_EXTATTR_SET_FD           = 371 // { ssize_t extattr_set_fd(int fd, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FD           = 372 // { ssize_t extattr_get_fd(int fd, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FD        = 373 // { int extattr_delete_fd(int fd, int attrnamespace, const char *attrname); }
+	SYS___SETUGID                = 374 // { int __setugid(int flag); }
+	SYS_EACCESS                  = 376 // { int eaccess(char *path, int amode); }
+	SYS_NMOUNT                   = 378 // { int nmount(struct iovec *iovp, unsigned int iovcnt, int flags); }
+	SYS___MAC_GET_PROC           = 384 // { int __mac_get_proc(struct mac *mac_p); }
+	SYS___MAC_SET_PROC           = 385 // { int __mac_set_proc(struct mac *mac_p); }
+	SYS___MAC_GET_FD             = 386 // { int __mac_get_fd(int fd, struct mac *mac_p); }
+	SYS___MAC_GET_FILE           = 387 // { int __mac_get_file(const char *path_p, struct mac *mac_p); }
+	SYS___MAC_SET_FD             = 388 // { int __mac_set_fd(int fd, struct mac *mac_p); }
+	SYS___MAC_SET_FILE           = 389 // { int __mac_set_file(const char *path_p, struct mac *mac_p); }
+	SYS_KENV                     = 390 // { int kenv(int what, const char *name, char *value, int len); }
+	SYS_LCHFLAGS                 = 391 // { int lchflags(const char *path, u_long flags); }
+	SYS_UUIDGEN                  = 392 // { int uuidgen(struct uuid *store, int count); }
+	SYS_SENDFILE                 = 393 // { int sendfile(int fd, int s, off_t offset, size_t nbytes, struct sf_hdtr *hdtr, off_t *sbytes, int flags); }
+	SYS_MAC_SYSCALL              = 394 // { int mac_syscall(const char *policy, int call, void *arg); }
+	SYS_GETFSSTAT                = 395 // { int getfsstat(struct statfs *buf, long bufsize, int mode); }
+	SYS_STATFS                   = 396 // { int statfs(char *path, struct statfs *buf); }
+	SYS_FSTATFS                  = 397 // { int fstatfs(int fd, struct statfs *buf); }
+	SYS_FHSTATFS                 = 398 // { int fhstatfs(const struct fhandle *u_fhp, struct statfs *buf); }
+	SYS_KSEM_CLOSE               = 400 // { int ksem_close(semid_t id); }
+	SYS_KSEM_POST                = 401 // { int ksem_post(semid_t id); }
+	SYS_KSEM_WAIT                = 402 // { int ksem_wait(semid_t id); }
+	SYS_KSEM_TRYWAIT             = 403 // { int ksem_trywait(semid_t id); }
+	SYS_KSEM_INIT                = 404 // { int ksem_init(semid_t *idp, unsigned int value); }
+	SYS_KSEM_OPEN                = 405 // { int ksem_open(semid_t *idp, const char *name, int oflag, mode_t mode, unsigned int value); }
+	SYS_KSEM_UNLINK              = 406 // { int ksem_unlink(const char *name); }
+	SYS_KSEM_GETVALUE            = 407 // { int ksem_getvalue(semid_t id, int *val); }
+	SYS_KSEM_DESTROY             = 408 // { int ksem_destroy(semid_t id); }
+	SYS___MAC_GET_PID            = 409 // { int __mac_get_pid(pid_t pid, struct mac *mac_p); }
+	SYS___MAC_GET_LINK           = 410 // { int __mac_get_link(const char *path_p, struct mac *mac_p); }
+	SYS___MAC_SET_LINK           = 411 // { int __mac_set_link(const char *path_p, struct mac *mac_p); }
+	SYS_EXTATTR_SET_LINK         = 412 // { ssize_t extattr_set_link( const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_LINK         = 413 // { ssize_t extattr_get_link( const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_LINK      = 414 // { int extattr_delete_link( const char *path, int attrnamespace, const char *attrname); }
+	SYS___MAC_EXECVE             = 415 // { int __mac_execve(char *fname, char **argv, char **envv, struct mac *mac_p); }
+	SYS_SIGACTION                = 416 // { int sigaction(int sig, const struct sigaction *act, struct sigaction *oact); }
+	SYS_SIGRETURN                = 417 // { int sigreturn( const struct __ucontext *sigcntxp); }
+	SYS_GETCONTEXT               = 421 // { int getcontext(struct __ucontext *ucp); }
+	SYS_SETCONTEXT               = 422 // { int setcontext( const struct __ucontext *ucp); }
+	SYS_SWAPCONTEXT              = 423 // { int swapcontext(struct __ucontext *oucp, const struct __ucontext *ucp); }
+	SYS_SWAPOFF                  = 424 // { int swapoff(const char *name); }
+	SYS___ACL_GET_LINK           = 425 // { int __acl_get_link(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_SET_LINK           = 426 // { int __acl_set_link(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_DELETE_LINK        = 427 // { int __acl_delete_link(const char *path, acl_type_t type); }
+	SYS___ACL_ACLCHECK_LINK      = 428 // { int __acl_aclcheck_link(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS_SIGWAIT                  = 429 // { int sigwait(const sigset_t *set, int *sig); }
+	SYS_THR_CREATE               = 430 // { int thr_create(ucontext_t *ctx, long *id, int flags); }
+	SYS_THR_EXIT                 = 431 // { void thr_exit(long *state); }
+	SYS_THR_SELF                 = 432 // { int thr_self(long *id); }
+	SYS_THR_KILL                 = 433 // { int thr_kill(long id, int sig); }
+	SYS_JAIL_ATTACH              = 436 // { int jail_attach(int jid); }
+	SYS_EXTATTR_LIST_FD          = 437 // { ssize_t extattr_list_fd(int fd, int attrnamespace, void *data, size_t nbytes); }
+	SYS_EXTATTR_LIST_FILE        = 438 // { ssize_t extattr_list_file( const char *path, int attrnamespace, void *data, size_t nbytes); }
+	SYS_EXTATTR_LIST_LINK        = 439 // { ssize_t extattr_list_link( const char *path, int attrnamespace, void *data, size_t nbytes); }
+	SYS_KSEM_TIMEDWAIT           = 441 // { int ksem_timedwait(semid_t id, const struct timespec *abstime); }
+	SYS_THR_SUSPEND              = 442 // { int thr_suspend( const struct timespec *timeout); }
+	SYS_THR_WAKE                 = 443 // { int thr_wake(long id); }
+	SYS_KLDUNLOADF               = 444 // { int kldunloadf(int fileid, int flags); }
+	SYS_AUDIT                    = 445 // { int audit(const void *record, u_int length); }
+	SYS_AUDITON                  = 446 // { int auditon(int cmd, void *data, u_int length); }
+	SYS_GETAUID                  = 447 // { int getauid(uid_t *auid); }
+	SYS_SETAUID                  = 448 // { int setauid(uid_t *auid); }
+	SYS_GETAUDIT                 = 449 // { int getaudit(struct auditinfo *auditinfo); }
+	SYS_SETAUDIT                 = 450 // { int setaudit(struct auditinfo *auditinfo); }
+	SYS_GETAUDIT_ADDR            = 451 // { int getaudit_addr( struct auditinfo_addr *auditinfo_addr, u_int length); }
+	SYS_SETAUDIT_ADDR            = 452 // { int setaudit_addr( struct auditinfo_addr *auditinfo_addr, u_int length); }
+	SYS_AUDITCTL                 = 453 // { int auditctl(char *path); }
+	SYS__UMTX_OP                 = 454 // { int _umtx_op(void *obj, int op, u_long val, void *uaddr1, void *uaddr2); }
+	SYS_THR_NEW                  = 455 // { int thr_new(struct thr_param *param, int param_size); }
+	SYS_SIGQUEUE                 = 456 // { int sigqueue(pid_t pid, int signum, void *value); }
+	SYS_KMQ_OPEN                 = 457 // { int kmq_open(const char *path, int flags, mode_t mode, const struct mq_attr *attr); }
+	SYS_KMQ_SETATTR              = 458 // { int kmq_setattr(int mqd,		const struct mq_attr *attr,		struct mq_attr *oattr); }
+	SYS_KMQ_TIMEDRECEIVE         = 459 // { int kmq_timedreceive(int mqd,	char *msg_ptr, size_t msg_len,	unsigned *msg_prio,			const struct timespec *abs_timeout); }
+	SYS_KMQ_TIMEDSEND            = 460 // { int kmq_timedsend(int mqd,		const char *msg_ptr, size_t msg_len,unsigned msg_prio,			const struct timespec *abs_timeout);}
+	SYS_KMQ_NOTIFY               = 461 // { int kmq_notify(int mqd,		const struct sigevent *sigev); }
+	SYS_KMQ_UNLINK               = 462 // { int kmq_unlink(const char *path); }
+	SYS_ABORT2                   = 463 // { int abort2(const char *why, int nargs, void **args); }
+	SYS_THR_SET_NAME             = 464 // { int thr_set_name(long id, const char *name); }
+	SYS_AIO_FSYNC                = 465 // { int aio_fsync(int op, struct aiocb *aiocbp); }
+	SYS_RTPRIO_THREAD            = 466 // { int rtprio_thread(int function, lwpid_t lwpid, struct rtprio *rtp); }
+	SYS_SCTP_PEELOFF             = 471 // { int sctp_peeloff(int sd, uint32_t name); }
+	SYS_SCTP_GENERIC_SENDMSG     = 472 // { int sctp_generic_sendmsg(int sd, caddr_t msg, int mlen, caddr_t to, __socklen_t tolen, struct sctp_sndrcvinfo *sinfo, int flags); }
+	SYS_SCTP_GENERIC_SENDMSG_IOV = 473 // { int sctp_generic_sendmsg_iov(int sd, struct iovec *iov, int iovlen, caddr_t to, __socklen_t tolen, struct sctp_sndrcvinfo *sinfo, int flags); }
+	SYS_SCTP_GENERIC_RECVMSG     = 474 // { int sctp_generic_recvmsg(int sd, struct iovec *iov, int iovlen, struct sockaddr * from, __socklen_t *fromlenaddr, struct sctp_sndrcvinfo *sinfo, int *msg_flags); }
+	SYS_PREAD                    = 475 // { ssize_t pread(int fd, void *buf, size_t nbyte, off_t offset); }
+	SYS_PWRITE                   = 476 // { ssize_t pwrite(int fd, const void *buf, size_t nbyte, off_t offset); }
+	SYS_MMAP                     = 477 // { caddr_t mmap(caddr_t addr, size_t len, int prot, int flags, int fd, off_t pos); }
+	SYS_LSEEK                    = 478 // { off_t lseek(int fd, off_t offset, int whence); }
+	SYS_TRUNCATE                 = 479 // { int truncate(char *path, off_t length); }
+	SYS_FTRUNCATE                = 480 // { int ftruncate(int fd, off_t length); }
+	SYS_THR_KILL2                = 481 // { int thr_kill2(pid_t pid, long id, int sig); }
+	SYS_SHM_OPEN                 = 482 // { int shm_open(const char *path, int flags, mode_t mode); }
+	SYS_SHM_UNLINK               = 483 // { int shm_unlink(const char *path); }
+	SYS_CPUSET                   = 484 // { int cpuset(cpusetid_t *setid); }
+	SYS_CPUSET_SETID             = 485 // { int cpuset_setid(cpuwhich_t which, id_t id, cpusetid_t setid); }
+	SYS_CPUSET_GETID             = 486 // { int cpuset_getid(cpulevel_t level, cpuwhich_t which, id_t id, cpusetid_t *setid); }
+	SYS_CPUSET_GETAFFINITY       = 487 // { int cpuset_getaffinity(cpulevel_t level, cpuwhich_t which, id_t id, size_t cpusetsize, cpuset_t *mask); }
+	SYS_CPUSET_SETAFFINITY       = 488 // { int cpuset_setaffinity(cpulevel_t level, cpuwhich_t which, id_t id, size_t cpusetsize, const cpuset_t *mask); }
+	SYS_FACCESSAT                = 489 // { int faccessat(int fd, char *path, int amode, int flag); }
+	SYS_FCHMODAT                 = 490 // { int fchmodat(int fd, char *path, mode_t mode, int flag); }
+	SYS_FCHOWNAT                 = 491 // { int fchownat(int fd, char *path, uid_t uid, gid_t gid, int flag); }
+	SYS_FEXECVE                  = 492 // { int fexecve(int fd, char **argv, char **envv); }
+	SYS_FSTATAT                  = 493 // { int fstatat(int fd, char *path, struct stat *buf, int flag); }
+	SYS_FUTIMESAT                = 494 // { int futimesat(int fd, char *path, struct timeval *times); }
+	SYS_LINKAT                   = 495 // { int linkat(int fd1, char *path1, int fd2, char *path2, int flag); }
+	SYS_MKDIRAT                  = 496 // { int mkdirat(int fd, char *path, mode_t mode); }
+	SYS_MKFIFOAT                 = 497 // { int mkfifoat(int fd, char *path, mode_t mode); }
+	SYS_MKNODAT                  = 498 // { int mknodat(int fd, char *path, mode_t mode, dev_t dev); }
+	SYS_OPENAT                   = 499 // { int openat(int fd, char *path, int flag, mode_t mode); }
+	SYS_READLINKAT               = 500 // { int readlinkat(int fd, char *path, char *buf, size_t bufsize); }
+	SYS_RENAMEAT                 = 501 // { int renameat(int oldfd, char *old, int newfd, char *new); }
+	SYS_SYMLINKAT                = 502 // { int symlinkat(char *path1, int fd, char *path2); }
+	SYS_UNLINKAT                 = 503 // { int unlinkat(int fd, char *path, int flag); }
+	SYS_POSIX_OPENPT             = 504 // { int posix_openpt(int flags); }
+	SYS_GSSD_SYSCALL             = 505 // { int gssd_syscall(char *path); }
+	SYS_JAIL_GET                 = 506 // { int jail_get(struct iovec *iovp, unsigned int iovcnt, int flags); }
+	SYS_JAIL_SET                 = 507 // { int jail_set(struct iovec *iovp, unsigned int iovcnt, int flags); }
+	SYS_JAIL_REMOVE              = 508 // { int jail_remove(int jid); }
+	SYS_CLOSEFROM                = 509 // { int closefrom(int lowfd); }
+	SYS___SEMCTL                 = 510 // { int __semctl(int semid, int semnum, int cmd, union semun *arg); }
+	SYS_MSGCTL                   = 511 // { int msgctl(int msqid, int cmd, struct msqid_ds *buf); }
+	SYS_SHMCTL                   = 512 // { int shmctl(int shmid, int cmd, struct shmid_ds *buf); }
+	SYS_LPATHCONF                = 513 // { int lpathconf(char *path, int name); }
+	SYS___CAP_RIGHTS_GET         = 515 // { int __cap_rights_get(int version, int fd, cap_rights_t *rightsp); }
+	SYS_CAP_ENTER                = 516 // { int cap_enter(void); }
+	SYS_CAP_GETMODE              = 517 // { int cap_getmode(u_int *modep); }
+	SYS_PDFORK                   = 518 // { int pdfork(int *fdp, int flags); }
+	SYS_PDKILL                   = 519 // { int pdkill(int fd, int signum); }
+	SYS_PDGETPID                 = 520 // { int pdgetpid(int fd, pid_t *pidp); }
+	SYS_PSELECT                  = 522 // { int pselect(int nd, fd_set *in, fd_set *ou, fd_set *ex, const struct timespec *ts, const sigset_t *sm); }
+	SYS_GETLOGINCLASS            = 523 // { int getloginclass(char *namebuf, size_t namelen); }
+	SYS_SETLOGINCLASS            = 524 // { int setloginclass(const char *namebuf); }
+	SYS_RCTL_GET_RACCT           = 525 // { int rctl_get_racct(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_RCTL_GET_RULES           = 526 // { int rctl_get_rules(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_RCTL_GET_LIMITS          = 527 // { int rctl_get_limits(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_RCTL_ADD_RULE            = 528 // { int rctl_add_rule(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_RCTL_REMOVE_RULE         = 529 // { int rctl_remove_rule(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_POSIX_FALLOCATE          = 530 // { int posix_fallocate(int fd, off_t offset, off_t len); }
+	SYS_POSIX_FADVISE            = 531 // { int posix_fadvise(int fd, off_t offset, off_t len, int advice); }
+	SYS_WAIT6                    = 532 // { int wait6(idtype_t idtype, id_t id, int *status, int options, struct __wrusage *wrusage, siginfo_t *info); }
+	SYS_CAP_RIGHTS_LIMIT         = 533 // { int cap_rights_limit(int fd, cap_rights_t *rightsp); }
+	SYS_CAP_IOCTLS_LIMIT         = 534 // { int cap_ioctls_limit(int fd, const u_long *cmds, size_t ncmds); }
+	SYS_CAP_IOCTLS_GET           = 535 // { ssize_t cap_ioctls_get(int fd, u_long *cmds, size_t maxcmds); }
+	SYS_CAP_FCNTLS_LIMIT         = 536 // { int cap_fcntls_limit(int fd, uint32_t fcntlrights); }
+	SYS_CAP_FCNTLS_GET           = 537 // { int cap_fcntls_get(int fd, uint32_t *fcntlrightsp); }
+	SYS_BINDAT                   = 538 // { int bindat(int fd, int s, caddr_t name, int namelen); }
+	SYS_CONNECTAT                = 539 // { int connectat(int fd, int s, caddr_t name, int namelen); }
+	SYS_CHFLAGSAT                = 540 // { int chflagsat(int fd, const char *path, u_long flags, int atflag); }
+	SYS_ACCEPT4                  = 541 // { int accept4(int s, struct sockaddr * __restrict name, __socklen_t * __restrict anamelen, int flags); }
+	SYS_PIPE2                    = 542 // { int pipe2(int *fildes, int flags); }
+	SYS_AIO_MLOCK                = 543 // { int aio_mlock(struct aiocb *aiocbp); }
+	SYS_PROCCTL                  = 544 // { int procctl(idtype_t idtype, id_t id, int com, void *data); }
+	SYS_PPOLL                    = 545 // { int ppoll(struct pollfd *fds, u_int nfds, const struct timespec *ts, const sigset_t *set); }
+	SYS_FUTIMENS                 = 546 // { int futimens(int fd, struct timespec *times); }
+	SYS_UTIMENSAT                = 547 // { int utimensat(int fd, char *path, struct timespec *times, int flag); }
+	SYS_NUMA_GETAFFINITY         = 548 // { int numa_getaffinity(cpuwhich_t which, id_t id, struct vm_domain_policy_entry *policy); }
+	SYS_NUMA_SETAFFINITY         = 549 // { int numa_setaffinity(cpuwhich_t which, id_t id, const struct vm_domain_policy_entry *policy); }
+	SYS_FDATASYNC                = 550 // { int fdatasync(int fd); }
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_freebsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_freebsd_amd64.go
new file mode 100644
index 000000000..48a7beae7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_freebsd_amd64.go
@@ -0,0 +1,396 @@
+// go run mksysnum.go https://svn.freebsd.org/base/stable/11/sys/kern/syscalls.master
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,freebsd
+
+package unix
+
+const (
+	// SYS_NOSYS = 0;  // { int nosys(void); } syscall nosys_args int
+	SYS_EXIT                     = 1   // { void sys_exit(int rval); } exit sys_exit_args void
+	SYS_FORK                     = 2   // { int fork(void); }
+	SYS_READ                     = 3   // { ssize_t read(int fd, void *buf, size_t nbyte); }
+	SYS_WRITE                    = 4   // { ssize_t write(int fd, const void *buf, size_t nbyte); }
+	SYS_OPEN                     = 5   // { int open(char *path, int flags, int mode); }
+	SYS_CLOSE                    = 6   // { int close(int fd); }
+	SYS_WAIT4                    = 7   // { int wait4(int pid, int *status, int options, struct rusage *rusage); }
+	SYS_LINK                     = 9   // { int link(char *path, char *link); }
+	SYS_UNLINK                   = 10  // { int unlink(char *path); }
+	SYS_CHDIR                    = 12  // { int chdir(char *path); }
+	SYS_FCHDIR                   = 13  // { int fchdir(int fd); }
+	SYS_MKNOD                    = 14  // { int mknod(char *path, int mode, int dev); }
+	SYS_CHMOD                    = 15  // { int chmod(char *path, int mode); }
+	SYS_CHOWN                    = 16  // { int chown(char *path, int uid, int gid); }
+	SYS_OBREAK                   = 17  // { int obreak(char *nsize); } break obreak_args int
+	SYS_GETPID                   = 20  // { pid_t getpid(void); }
+	SYS_MOUNT                    = 21  // { int mount(char *type, char *path, int flags, caddr_t data); }
+	SYS_UNMOUNT                  = 22  // { int unmount(char *path, int flags); }
+	SYS_SETUID                   = 23  // { int setuid(uid_t uid); }
+	SYS_GETUID                   = 24  // { uid_t getuid(void); }
+	SYS_GETEUID                  = 25  // { uid_t geteuid(void); }
+	SYS_PTRACE                   = 26  // { int ptrace(int req, pid_t pid, caddr_t addr, int data); }
+	SYS_RECVMSG                  = 27  // { int recvmsg(int s, struct msghdr *msg, int flags); }
+	SYS_SENDMSG                  = 28  // { int sendmsg(int s, struct msghdr *msg, int flags); }
+	SYS_RECVFROM                 = 29  // { int recvfrom(int s, caddr_t buf, size_t len, int flags, struct sockaddr * __restrict from, __socklen_t * __restrict fromlenaddr); }
+	SYS_ACCEPT                   = 30  // { int accept(int s, struct sockaddr * __restrict name, __socklen_t * __restrict anamelen); }
+	SYS_GETPEERNAME              = 31  // { int getpeername(int fdes, struct sockaddr * __restrict asa, __socklen_t * __restrict alen); }
+	SYS_GETSOCKNAME              = 32  // { int getsockname(int fdes, struct sockaddr * __restrict asa, __socklen_t * __restrict alen); }
+	SYS_ACCESS                   = 33  // { int access(char *path, int amode); }
+	SYS_CHFLAGS                  = 34  // { int chflags(const char *path, u_long flags); }
+	SYS_FCHFLAGS                 = 35  // { int fchflags(int fd, u_long flags); }
+	SYS_SYNC                     = 36  // { int sync(void); }
+	SYS_KILL                     = 37  // { int kill(int pid, int signum); }
+	SYS_GETPPID                  = 39  // { pid_t getppid(void); }
+	SYS_DUP                      = 41  // { int dup(u_int fd); }
+	SYS_PIPE                     = 42  // { int pipe(void); }
+	SYS_GETEGID                  = 43  // { gid_t getegid(void); }
+	SYS_PROFIL                   = 44  // { int profil(caddr_t samples, size_t size, size_t offset, u_int scale); }
+	SYS_KTRACE                   = 45  // { int ktrace(const char *fname, int ops, int facs, int pid); }
+	SYS_GETGID                   = 47  // { gid_t getgid(void); }
+	SYS_GETLOGIN                 = 49  // { int getlogin(char *namebuf, u_int namelen); }
+	SYS_SETLOGIN                 = 50  // { int setlogin(char *namebuf); }
+	SYS_ACCT                     = 51  // { int acct(char *path); }
+	SYS_SIGALTSTACK              = 53  // { int sigaltstack(stack_t *ss, stack_t *oss); }
+	SYS_IOCTL                    = 54  // { int ioctl(int fd, u_long com, caddr_t data); }
+	SYS_REBOOT                   = 55  // { int reboot(int opt); }
+	SYS_REVOKE                   = 56  // { int revoke(char *path); }
+	SYS_SYMLINK                  = 57  // { int symlink(char *path, char *link); }
+	SYS_READLINK                 = 58  // { ssize_t readlink(char *path, char *buf, size_t count); }
+	SYS_EXECVE                   = 59  // { int execve(char *fname, char **argv, char **envv); }
+	SYS_UMASK                    = 60  // { int umask(int newmask); } umask umask_args int
+	SYS_CHROOT                   = 61  // { int chroot(char *path); }
+	SYS_MSYNC                    = 65  // { int msync(void *addr, size_t len, int flags); }
+	SYS_VFORK                    = 66  // { int vfork(void); }
+	SYS_SBRK                     = 69  // { int sbrk(int incr); }
+	SYS_SSTK                     = 70  // { int sstk(int incr); }
+	SYS_OVADVISE                 = 72  // { int ovadvise(int anom); } vadvise ovadvise_args int
+	SYS_MUNMAP                   = 73  // { int munmap(void *addr, size_t len); }
+	SYS_MPROTECT                 = 74  // { int mprotect(const void *addr, size_t len, int prot); }
+	SYS_MADVISE                  = 75  // { int madvise(void *addr, size_t len, int behav); }
+	SYS_MINCORE                  = 78  // { int mincore(const void *addr, size_t len, char *vec); }
+	SYS_GETGROUPS                = 79  // { int getgroups(u_int gidsetsize, gid_t *gidset); }
+	SYS_SETGROUPS                = 80  // { int setgroups(u_int gidsetsize, gid_t *gidset); }
+	SYS_GETPGRP                  = 81  // { int getpgrp(void); }
+	SYS_SETPGID                  = 82  // { int setpgid(int pid, int pgid); }
+	SYS_SETITIMER                = 83  // { int setitimer(u_int which, struct itimerval *itv, struct itimerval *oitv); }
+	SYS_SWAPON                   = 85  // { int swapon(char *name); }
+	SYS_GETITIMER                = 86  // { int getitimer(u_int which, struct itimerval *itv); }
+	SYS_GETDTABLESIZE            = 89  // { int getdtablesize(void); }
+	SYS_DUP2                     = 90  // { int dup2(u_int from, u_int to); }
+	SYS_FCNTL                    = 92  // { int fcntl(int fd, int cmd, long arg); }
+	SYS_SELECT                   = 93  // { int select(int nd, fd_set *in, fd_set *ou, fd_set *ex, struct timeval *tv); }
+	SYS_FSYNC                    = 95  // { int fsync(int fd); }
+	SYS_SETPRIORITY              = 96  // { int setpriority(int which, int who, int prio); }
+	SYS_SOCKET                   = 97  // { int socket(int domain, int type, int protocol); }
+	SYS_CONNECT                  = 98  // { int connect(int s, caddr_t name, int namelen); }
+	SYS_GETPRIORITY              = 100 // { int getpriority(int which, int who); }
+	SYS_BIND                     = 104 // { int bind(int s, caddr_t name, int namelen); }
+	SYS_SETSOCKOPT               = 105 // { int setsockopt(int s, int level, int name, caddr_t val, int valsize); }
+	SYS_LISTEN                   = 106 // { int listen(int s, int backlog); }
+	SYS_GETTIMEOFDAY             = 116 // { int gettimeofday(struct timeval *tp, struct timezone *tzp); }
+	SYS_GETRUSAGE                = 117 // { int getrusage(int who, struct rusage *rusage); }
+	SYS_GETSOCKOPT               = 118 // { int getsockopt(int s, int level, int name, caddr_t val, int *avalsize); }
+	SYS_READV                    = 120 // { int readv(int fd, struct iovec *iovp, u_int iovcnt); }
+	SYS_WRITEV                   = 121 // { int writev(int fd, struct iovec *iovp, u_int iovcnt); }
+	SYS_SETTIMEOFDAY             = 122 // { int settimeofday(struct timeval *tv, struct timezone *tzp); }
+	SYS_FCHOWN                   = 123 // { int fchown(int fd, int uid, int gid); }
+	SYS_FCHMOD                   = 124 // { int fchmod(int fd, int mode); }
+	SYS_SETREUID                 = 126 // { int setreuid(int ruid, int euid); }
+	SYS_SETREGID                 = 127 // { int setregid(int rgid, int egid); }
+	SYS_RENAME                   = 128 // { int rename(char *from, char *to); }
+	SYS_FLOCK                    = 131 // { int flock(int fd, int how); }
+	SYS_MKFIFO                   = 132 // { int mkfifo(char *path, int mode); }
+	SYS_SENDTO                   = 133 // { int sendto(int s, caddr_t buf, size_t len, int flags, caddr_t to, int tolen); }
+	SYS_SHUTDOWN                 = 134 // { int shutdown(int s, int how); }
+	SYS_SOCKETPAIR               = 135 // { int socketpair(int domain, int type, int protocol, int *rsv); }
+	SYS_MKDIR                    = 136 // { int mkdir(char *path, int mode); }
+	SYS_RMDIR                    = 137 // { int rmdir(char *path); }
+	SYS_UTIMES                   = 138 // { int utimes(char *path, struct timeval *tptr); }
+	SYS_ADJTIME                  = 140 // { int adjtime(struct timeval *delta, struct timeval *olddelta); }
+	SYS_SETSID                   = 147 // { int setsid(void); }
+	SYS_QUOTACTL                 = 148 // { int quotactl(char *path, int cmd, int uid, caddr_t arg); }
+	SYS_NLM_SYSCALL              = 154 // { int nlm_syscall(int debug_level, int grace_period, int addr_count, char **addrs); }
+	SYS_NFSSVC                   = 155 // { int nfssvc(int flag, caddr_t argp); }
+	SYS_LGETFH                   = 160 // { int lgetfh(char *fname, struct fhandle *fhp); }
+	SYS_GETFH                    = 161 // { int getfh(char *fname, struct fhandle *fhp); }
+	SYS_SYSARCH                  = 165 // { int sysarch(int op, char *parms); }
+	SYS_RTPRIO                   = 166 // { int rtprio(int function, pid_t pid, struct rtprio *rtp); }
+	SYS_SEMSYS                   = 169 // { int semsys(int which, int a2, int a3, int a4, int a5); }
+	SYS_MSGSYS                   = 170 // { int msgsys(int which, int a2, int a3, int a4, int a5, int a6); }
+	SYS_SHMSYS                   = 171 // { int shmsys(int which, int a2, int a3, int a4); }
+	SYS_SETFIB                   = 175 // { int setfib(int fibnum); }
+	SYS_NTP_ADJTIME              = 176 // { int ntp_adjtime(struct timex *tp); }
+	SYS_SETGID                   = 181 // { int setgid(gid_t gid); }
+	SYS_SETEGID                  = 182 // { int setegid(gid_t egid); }
+	SYS_SETEUID                  = 183 // { int seteuid(uid_t euid); }
+	SYS_STAT                     = 188 // { int stat(char *path, struct stat *ub); }
+	SYS_FSTAT                    = 189 // { int fstat(int fd, struct stat *sb); }
+	SYS_LSTAT                    = 190 // { int lstat(char *path, struct stat *ub); }
+	SYS_PATHCONF                 = 191 // { int pathconf(char *path, int name); }
+	SYS_FPATHCONF                = 192 // { int fpathconf(int fd, int name); }
+	SYS_GETRLIMIT                = 194 // { int getrlimit(u_int which, struct rlimit *rlp); } getrlimit __getrlimit_args int
+	SYS_SETRLIMIT                = 195 // { int setrlimit(u_int which, struct rlimit *rlp); } setrlimit __setrlimit_args int
+	SYS_GETDIRENTRIES            = 196 // { int getdirentries(int fd, char *buf, u_int count, long *basep); }
+	SYS___SYSCTL                 = 202 // { int __sysctl(int *name, u_int namelen, void *old, size_t *oldlenp, void *new, size_t newlen); } __sysctl sysctl_args int
+	SYS_MLOCK                    = 203 // { int mlock(const void *addr, size_t len); }
+	SYS_MUNLOCK                  = 204 // { int munlock(const void *addr, size_t len); }
+	SYS_UNDELETE                 = 205 // { int undelete(char *path); }
+	SYS_FUTIMES                  = 206 // { int futimes(int fd, struct timeval *tptr); }
+	SYS_GETPGID                  = 207 // { int getpgid(pid_t pid); }
+	SYS_POLL                     = 209 // { int poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_SEMGET                   = 221 // { int semget(key_t key, int nsems, int semflg); }
+	SYS_SEMOP                    = 222 // { int semop(int semid, struct sembuf *sops, size_t nsops); }
+	SYS_MSGGET                   = 225 // { int msgget(key_t key, int msgflg); }
+	SYS_MSGSND                   = 226 // { int msgsnd(int msqid, const void *msgp, size_t msgsz, int msgflg); }
+	SYS_MSGRCV                   = 227 // { int msgrcv(int msqid, void *msgp, size_t msgsz, long msgtyp, int msgflg); }
+	SYS_SHMAT                    = 228 // { int shmat(int shmid, const void *shmaddr, int shmflg); }
+	SYS_SHMDT                    = 230 // { int shmdt(const void *shmaddr); }
+	SYS_SHMGET                   = 231 // { int shmget(key_t key, size_t size, int shmflg); }
+	SYS_CLOCK_GETTIME            = 232 // { int clock_gettime(clockid_t clock_id, struct timespec *tp); }
+	SYS_CLOCK_SETTIME            = 233 // { int clock_settime( clockid_t clock_id, const struct timespec *tp); }
+	SYS_CLOCK_GETRES             = 234 // { int clock_getres(clockid_t clock_id, struct timespec *tp); }
+	SYS_KTIMER_CREATE            = 235 // { int ktimer_create(clockid_t clock_id, struct sigevent *evp, int *timerid); }
+	SYS_KTIMER_DELETE            = 236 // { int ktimer_delete(int timerid); }
+	SYS_KTIMER_SETTIME           = 237 // { int ktimer_settime(int timerid, int flags, const struct itimerspec *value, struct itimerspec *ovalue); }
+	SYS_KTIMER_GETTIME           = 238 // { int ktimer_gettime(int timerid, struct itimerspec *value); }
+	SYS_KTIMER_GETOVERRUN        = 239 // { int ktimer_getoverrun(int timerid); }
+	SYS_NANOSLEEP                = 240 // { int nanosleep(const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS_FFCLOCK_GETCOUNTER       = 241 // { int ffclock_getcounter(ffcounter *ffcount); }
+	SYS_FFCLOCK_SETESTIMATE      = 242 // { int ffclock_setestimate( struct ffclock_estimate *cest); }
+	SYS_FFCLOCK_GETESTIMATE      = 243 // { int ffclock_getestimate( struct ffclock_estimate *cest); }
+	SYS_CLOCK_NANOSLEEP          = 244 // { int clock_nanosleep(clockid_t clock_id, int flags, const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS_CLOCK_GETCPUCLOCKID2     = 247 // { int clock_getcpuclockid2(id_t id,int which, clockid_t *clock_id); }
+	SYS_NTP_GETTIME              = 248 // { int ntp_gettime(struct ntptimeval *ntvp); }
+	SYS_MINHERIT                 = 250 // { int minherit(void *addr, size_t len, int inherit); }
+	SYS_RFORK                    = 251 // { int rfork(int flags); }
+	SYS_OPENBSD_POLL             = 252 // { int openbsd_poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_ISSETUGID                = 253 // { int issetugid(void); }
+	SYS_LCHOWN                   = 254 // { int lchown(char *path, int uid, int gid); }
+	SYS_AIO_READ                 = 255 // { int aio_read(struct aiocb *aiocbp); }
+	SYS_AIO_WRITE                = 256 // { int aio_write(struct aiocb *aiocbp); }
+	SYS_LIO_LISTIO               = 257 // { int lio_listio(int mode, struct aiocb * const *acb_list, int nent, struct sigevent *sig); }
+	SYS_GETDENTS                 = 272 // { int getdents(int fd, char *buf, size_t count); }
+	SYS_LCHMOD                   = 274 // { int lchmod(char *path, mode_t mode); }
+	SYS_LUTIMES                  = 276 // { int lutimes(char *path, struct timeval *tptr); }
+	SYS_NSTAT                    = 278 // { int nstat(char *path, struct nstat *ub); }
+	SYS_NFSTAT                   = 279 // { int nfstat(int fd, struct nstat *sb); }
+	SYS_NLSTAT                   = 280 // { int nlstat(char *path, struct nstat *ub); }
+	SYS_PREADV                   = 289 // { ssize_t preadv(int fd, struct iovec *iovp, u_int iovcnt, off_t offset); }
+	SYS_PWRITEV                  = 290 // { ssize_t pwritev(int fd, struct iovec *iovp, u_int iovcnt, off_t offset); }
+	SYS_FHOPEN                   = 298 // { int fhopen(const struct fhandle *u_fhp, int flags); }
+	SYS_FHSTAT                   = 299 // { int fhstat(const struct fhandle *u_fhp, struct stat *sb); }
+	SYS_MODNEXT                  = 300 // { int modnext(int modid); }
+	SYS_MODSTAT                  = 301 // { int modstat(int modid, struct module_stat *stat); }
+	SYS_MODFNEXT                 = 302 // { int modfnext(int modid); }
+	SYS_MODFIND                  = 303 // { int modfind(const char *name); }
+	SYS_KLDLOAD                  = 304 // { int kldload(const char *file); }
+	SYS_KLDUNLOAD                = 305 // { int kldunload(int fileid); }
+	SYS_KLDFIND                  = 306 // { int kldfind(const char *file); }
+	SYS_KLDNEXT                  = 307 // { int kldnext(int fileid); }
+	SYS_KLDSTAT                  = 308 // { int kldstat(int fileid, struct kld_file_stat* stat); }
+	SYS_KLDFIRSTMOD              = 309 // { int kldfirstmod(int fileid); }
+	SYS_GETSID                   = 310 // { int getsid(pid_t pid); }
+	SYS_SETRESUID                = 311 // { int setresuid(uid_t ruid, uid_t euid, uid_t suid); }
+	SYS_SETRESGID                = 312 // { int setresgid(gid_t rgid, gid_t egid, gid_t sgid); }
+	SYS_AIO_RETURN               = 314 // { ssize_t aio_return(struct aiocb *aiocbp); }
+	SYS_AIO_SUSPEND              = 315 // { int aio_suspend( struct aiocb * const * aiocbp, int nent, const struct timespec *timeout); }
+	SYS_AIO_CANCEL               = 316 // { int aio_cancel(int fd, struct aiocb *aiocbp); }
+	SYS_AIO_ERROR                = 317 // { int aio_error(struct aiocb *aiocbp); }
+	SYS_YIELD                    = 321 // { int yield(void); }
+	SYS_MLOCKALL                 = 324 // { int mlockall(int how); }
+	SYS_MUNLOCKALL               = 325 // { int munlockall(void); }
+	SYS___GETCWD                 = 326 // { int __getcwd(char *buf, u_int buflen); }
+	SYS_SCHED_SETPARAM           = 327 // { int sched_setparam (pid_t pid, const struct sched_param *param); }
+	SYS_SCHED_GETPARAM           = 328 // { int sched_getparam (pid_t pid, struct sched_param *param); }
+	SYS_SCHED_SETSCHEDULER       = 329 // { int sched_setscheduler (pid_t pid, int policy, const struct sched_param *param); }
+	SYS_SCHED_GETSCHEDULER       = 330 // { int sched_getscheduler (pid_t pid); }
+	SYS_SCHED_YIELD              = 331 // { int sched_yield (void); }
+	SYS_SCHED_GET_PRIORITY_MAX   = 332 // { int sched_get_priority_max (int policy); }
+	SYS_SCHED_GET_PRIORITY_MIN   = 333 // { int sched_get_priority_min (int policy); }
+	SYS_SCHED_RR_GET_INTERVAL    = 334 // { int sched_rr_get_interval (pid_t pid, struct timespec *interval); }
+	SYS_UTRACE                   = 335 // { int utrace(const void *addr, size_t len); }
+	SYS_KLDSYM                   = 337 // { int kldsym(int fileid, int cmd, void *data); }
+	SYS_JAIL                     = 338 // { int jail(struct jail *jail); }
+	SYS_SIGPROCMASK              = 340 // { int sigprocmask(int how, const sigset_t *set, sigset_t *oset); }
+	SYS_SIGSUSPEND               = 341 // { int sigsuspend(const sigset_t *sigmask); }
+	SYS_SIGPENDING               = 343 // { int sigpending(sigset_t *set); }
+	SYS_SIGTIMEDWAIT             = 345 // { int sigtimedwait(const sigset_t *set, siginfo_t *info, const struct timespec *timeout); }
+	SYS_SIGWAITINFO              = 346 // { int sigwaitinfo(const sigset_t *set, siginfo_t *info); }
+	SYS___ACL_GET_FILE           = 347 // { int __acl_get_file(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_SET_FILE           = 348 // { int __acl_set_file(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_GET_FD             = 349 // { int __acl_get_fd(int filedes, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_SET_FD             = 350 // { int __acl_set_fd(int filedes, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_DELETE_FILE        = 351 // { int __acl_delete_file(const char *path, acl_type_t type); }
+	SYS___ACL_DELETE_FD          = 352 // { int __acl_delete_fd(int filedes, acl_type_t type); }
+	SYS___ACL_ACLCHECK_FILE      = 353 // { int __acl_aclcheck_file(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_ACLCHECK_FD        = 354 // { int __acl_aclcheck_fd(int filedes, acl_type_t type, struct acl *aclp); }
+	SYS_EXTATTRCTL               = 355 // { int extattrctl(const char *path, int cmd, const char *filename, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_FILE         = 356 // { ssize_t extattr_set_file( const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FILE         = 357 // { ssize_t extattr_get_file( const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FILE      = 358 // { int extattr_delete_file(const char *path, int attrnamespace, const char *attrname); }
+	SYS_AIO_WAITCOMPLETE         = 359 // { ssize_t aio_waitcomplete( struct aiocb **aiocbp, struct timespec *timeout); }
+	SYS_GETRESUID                = 360 // { int getresuid(uid_t *ruid, uid_t *euid, uid_t *suid); }
+	SYS_GETRESGID                = 361 // { int getresgid(gid_t *rgid, gid_t *egid, gid_t *sgid); }
+	SYS_KQUEUE                   = 362 // { int kqueue(void); }
+	SYS_KEVENT                   = 363 // { int kevent(int fd, struct kevent *changelist, int nchanges, struct kevent *eventlist, int nevents, const struct timespec *timeout); }
+	SYS_EXTATTR_SET_FD           = 371 // { ssize_t extattr_set_fd(int fd, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FD           = 372 // { ssize_t extattr_get_fd(int fd, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FD        = 373 // { int extattr_delete_fd(int fd, int attrnamespace, const char *attrname); }
+	SYS___SETUGID                = 374 // { int __setugid(int flag); }
+	SYS_EACCESS                  = 376 // { int eaccess(char *path, int amode); }
+	SYS_NMOUNT                   = 378 // { int nmount(struct iovec *iovp, unsigned int iovcnt, int flags); }
+	SYS___MAC_GET_PROC           = 384 // { int __mac_get_proc(struct mac *mac_p); }
+	SYS___MAC_SET_PROC           = 385 // { int __mac_set_proc(struct mac *mac_p); }
+	SYS___MAC_GET_FD             = 386 // { int __mac_get_fd(int fd, struct mac *mac_p); }
+	SYS___MAC_GET_FILE           = 387 // { int __mac_get_file(const char *path_p, struct mac *mac_p); }
+	SYS___MAC_SET_FD             = 388 // { int __mac_set_fd(int fd, struct mac *mac_p); }
+	SYS___MAC_SET_FILE           = 389 // { int __mac_set_file(const char *path_p, struct mac *mac_p); }
+	SYS_KENV                     = 390 // { int kenv(int what, const char *name, char *value, int len); }
+	SYS_LCHFLAGS                 = 391 // { int lchflags(const char *path, u_long flags); }
+	SYS_UUIDGEN                  = 392 // { int uuidgen(struct uuid *store, int count); }
+	SYS_SENDFILE                 = 393 // { int sendfile(int fd, int s, off_t offset, size_t nbytes, struct sf_hdtr *hdtr, off_t *sbytes, int flags); }
+	SYS_MAC_SYSCALL              = 394 // { int mac_syscall(const char *policy, int call, void *arg); }
+	SYS_GETFSSTAT                = 395 // { int getfsstat(struct statfs *buf, long bufsize, int mode); }
+	SYS_STATFS                   = 396 // { int statfs(char *path, struct statfs *buf); }
+	SYS_FSTATFS                  = 397 // { int fstatfs(int fd, struct statfs *buf); }
+	SYS_FHSTATFS                 = 398 // { int fhstatfs(const struct fhandle *u_fhp, struct statfs *buf); }
+	SYS_KSEM_CLOSE               = 400 // { int ksem_close(semid_t id); }
+	SYS_KSEM_POST                = 401 // { int ksem_post(semid_t id); }
+	SYS_KSEM_WAIT                = 402 // { int ksem_wait(semid_t id); }
+	SYS_KSEM_TRYWAIT             = 403 // { int ksem_trywait(semid_t id); }
+	SYS_KSEM_INIT                = 404 // { int ksem_init(semid_t *idp, unsigned int value); }
+	SYS_KSEM_OPEN                = 405 // { int ksem_open(semid_t *idp, const char *name, int oflag, mode_t mode, unsigned int value); }
+	SYS_KSEM_UNLINK              = 406 // { int ksem_unlink(const char *name); }
+	SYS_KSEM_GETVALUE            = 407 // { int ksem_getvalue(semid_t id, int *val); }
+	SYS_KSEM_DESTROY             = 408 // { int ksem_destroy(semid_t id); }
+	SYS___MAC_GET_PID            = 409 // { int __mac_get_pid(pid_t pid, struct mac *mac_p); }
+	SYS___MAC_GET_LINK           = 410 // { int __mac_get_link(const char *path_p, struct mac *mac_p); }
+	SYS___MAC_SET_LINK           = 411 // { int __mac_set_link(const char *path_p, struct mac *mac_p); }
+	SYS_EXTATTR_SET_LINK         = 412 // { ssize_t extattr_set_link( const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_LINK         = 413 // { ssize_t extattr_get_link( const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_LINK      = 414 // { int extattr_delete_link( const char *path, int attrnamespace, const char *attrname); }
+	SYS___MAC_EXECVE             = 415 // { int __mac_execve(char *fname, char **argv, char **envv, struct mac *mac_p); }
+	SYS_SIGACTION                = 416 // { int sigaction(int sig, const struct sigaction *act, struct sigaction *oact); }
+	SYS_SIGRETURN                = 417 // { int sigreturn( const struct __ucontext *sigcntxp); }
+	SYS_GETCONTEXT               = 421 // { int getcontext(struct __ucontext *ucp); }
+	SYS_SETCONTEXT               = 422 // { int setcontext( const struct __ucontext *ucp); }
+	SYS_SWAPCONTEXT              = 423 // { int swapcontext(struct __ucontext *oucp, const struct __ucontext *ucp); }
+	SYS_SWAPOFF                  = 424 // { int swapoff(const char *name); }
+	SYS___ACL_GET_LINK           = 425 // { int __acl_get_link(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_SET_LINK           = 426 // { int __acl_set_link(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_DELETE_LINK        = 427 // { int __acl_delete_link(const char *path, acl_type_t type); }
+	SYS___ACL_ACLCHECK_LINK      = 428 // { int __acl_aclcheck_link(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS_SIGWAIT                  = 429 // { int sigwait(const sigset_t *set, int *sig); }
+	SYS_THR_CREATE               = 430 // { int thr_create(ucontext_t *ctx, long *id, int flags); }
+	SYS_THR_EXIT                 = 431 // { void thr_exit(long *state); }
+	SYS_THR_SELF                 = 432 // { int thr_self(long *id); }
+	SYS_THR_KILL                 = 433 // { int thr_kill(long id, int sig); }
+	SYS_JAIL_ATTACH              = 436 // { int jail_attach(int jid); }
+	SYS_EXTATTR_LIST_FD          = 437 // { ssize_t extattr_list_fd(int fd, int attrnamespace, void *data, size_t nbytes); }
+	SYS_EXTATTR_LIST_FILE        = 438 // { ssize_t extattr_list_file( const char *path, int attrnamespace, void *data, size_t nbytes); }
+	SYS_EXTATTR_LIST_LINK        = 439 // { ssize_t extattr_list_link( const char *path, int attrnamespace, void *data, size_t nbytes); }
+	SYS_KSEM_TIMEDWAIT           = 441 // { int ksem_timedwait(semid_t id, const struct timespec *abstime); }
+	SYS_THR_SUSPEND              = 442 // { int thr_suspend( const struct timespec *timeout); }
+	SYS_THR_WAKE                 = 443 // { int thr_wake(long id); }
+	SYS_KLDUNLOADF               = 444 // { int kldunloadf(int fileid, int flags); }
+	SYS_AUDIT                    = 445 // { int audit(const void *record, u_int length); }
+	SYS_AUDITON                  = 446 // { int auditon(int cmd, void *data, u_int length); }
+	SYS_GETAUID                  = 447 // { int getauid(uid_t *auid); }
+	SYS_SETAUID                  = 448 // { int setauid(uid_t *auid); }
+	SYS_GETAUDIT                 = 449 // { int getaudit(struct auditinfo *auditinfo); }
+	SYS_SETAUDIT                 = 450 // { int setaudit(struct auditinfo *auditinfo); }
+	SYS_GETAUDIT_ADDR            = 451 // { int getaudit_addr( struct auditinfo_addr *auditinfo_addr, u_int length); }
+	SYS_SETAUDIT_ADDR            = 452 // { int setaudit_addr( struct auditinfo_addr *auditinfo_addr, u_int length); }
+	SYS_AUDITCTL                 = 453 // { int auditctl(char *path); }
+	SYS__UMTX_OP                 = 454 // { int _umtx_op(void *obj, int op, u_long val, void *uaddr1, void *uaddr2); }
+	SYS_THR_NEW                  = 455 // { int thr_new(struct thr_param *param, int param_size); }
+	SYS_SIGQUEUE                 = 456 // { int sigqueue(pid_t pid, int signum, void *value); }
+	SYS_KMQ_OPEN                 = 457 // { int kmq_open(const char *path, int flags, mode_t mode, const struct mq_attr *attr); }
+	SYS_KMQ_SETATTR              = 458 // { int kmq_setattr(int mqd,		const struct mq_attr *attr,		struct mq_attr *oattr); }
+	SYS_KMQ_TIMEDRECEIVE         = 459 // { int kmq_timedreceive(int mqd,	char *msg_ptr, size_t msg_len,	unsigned *msg_prio,			const struct timespec *abs_timeout); }
+	SYS_KMQ_TIMEDSEND            = 460 // { int kmq_timedsend(int mqd,		const char *msg_ptr, size_t msg_len,unsigned msg_prio,			const struct timespec *abs_timeout);}
+	SYS_KMQ_NOTIFY               = 461 // { int kmq_notify(int mqd,		const struct sigevent *sigev); }
+	SYS_KMQ_UNLINK               = 462 // { int kmq_unlink(const char *path); }
+	SYS_ABORT2                   = 463 // { int abort2(const char *why, int nargs, void **args); }
+	SYS_THR_SET_NAME             = 464 // { int thr_set_name(long id, const char *name); }
+	SYS_AIO_FSYNC                = 465 // { int aio_fsync(int op, struct aiocb *aiocbp); }
+	SYS_RTPRIO_THREAD            = 466 // { int rtprio_thread(int function, lwpid_t lwpid, struct rtprio *rtp); }
+	SYS_SCTP_PEELOFF             = 471 // { int sctp_peeloff(int sd, uint32_t name); }
+	SYS_SCTP_GENERIC_SENDMSG     = 472 // { int sctp_generic_sendmsg(int sd, caddr_t msg, int mlen, caddr_t to, __socklen_t tolen, struct sctp_sndrcvinfo *sinfo, int flags); }
+	SYS_SCTP_GENERIC_SENDMSG_IOV = 473 // { int sctp_generic_sendmsg_iov(int sd, struct iovec *iov, int iovlen, caddr_t to, __socklen_t tolen, struct sctp_sndrcvinfo *sinfo, int flags); }
+	SYS_SCTP_GENERIC_RECVMSG     = 474 // { int sctp_generic_recvmsg(int sd, struct iovec *iov, int iovlen, struct sockaddr * from, __socklen_t *fromlenaddr, struct sctp_sndrcvinfo *sinfo, int *msg_flags); }
+	SYS_PREAD                    = 475 // { ssize_t pread(int fd, void *buf, size_t nbyte, off_t offset); }
+	SYS_PWRITE                   = 476 // { ssize_t pwrite(int fd, const void *buf, size_t nbyte, off_t offset); }
+	SYS_MMAP                     = 477 // { caddr_t mmap(caddr_t addr, size_t len, int prot, int flags, int fd, off_t pos); }
+	SYS_LSEEK                    = 478 // { off_t lseek(int fd, off_t offset, int whence); }
+	SYS_TRUNCATE                 = 479 // { int truncate(char *path, off_t length); }
+	SYS_FTRUNCATE                = 480 // { int ftruncate(int fd, off_t length); }
+	SYS_THR_KILL2                = 481 // { int thr_kill2(pid_t pid, long id, int sig); }
+	SYS_SHM_OPEN                 = 482 // { int shm_open(const char *path, int flags, mode_t mode); }
+	SYS_SHM_UNLINK               = 483 // { int shm_unlink(const char *path); }
+	SYS_CPUSET                   = 484 // { int cpuset(cpusetid_t *setid); }
+	SYS_CPUSET_SETID             = 485 // { int cpuset_setid(cpuwhich_t which, id_t id, cpusetid_t setid); }
+	SYS_CPUSET_GETID             = 486 // { int cpuset_getid(cpulevel_t level, cpuwhich_t which, id_t id, cpusetid_t *setid); }
+	SYS_CPUSET_GETAFFINITY       = 487 // { int cpuset_getaffinity(cpulevel_t level, cpuwhich_t which, id_t id, size_t cpusetsize, cpuset_t *mask); }
+	SYS_CPUSET_SETAFFINITY       = 488 // { int cpuset_setaffinity(cpulevel_t level, cpuwhich_t which, id_t id, size_t cpusetsize, const cpuset_t *mask); }
+	SYS_FACCESSAT                = 489 // { int faccessat(int fd, char *path, int amode, int flag); }
+	SYS_FCHMODAT                 = 490 // { int fchmodat(int fd, char *path, mode_t mode, int flag); }
+	SYS_FCHOWNAT                 = 491 // { int fchownat(int fd, char *path, uid_t uid, gid_t gid, int flag); }
+	SYS_FEXECVE                  = 492 // { int fexecve(int fd, char **argv, char **envv); }
+	SYS_FSTATAT                  = 493 // { int fstatat(int fd, char *path, struct stat *buf, int flag); }
+	SYS_FUTIMESAT                = 494 // { int futimesat(int fd, char *path, struct timeval *times); }
+	SYS_LINKAT                   = 495 // { int linkat(int fd1, char *path1, int fd2, char *path2, int flag); }
+	SYS_MKDIRAT                  = 496 // { int mkdirat(int fd, char *path, mode_t mode); }
+	SYS_MKFIFOAT                 = 497 // { int mkfifoat(int fd, char *path, mode_t mode); }
+	SYS_MKNODAT                  = 498 // { int mknodat(int fd, char *path, mode_t mode, dev_t dev); }
+	SYS_OPENAT                   = 499 // { int openat(int fd, char *path, int flag, mode_t mode); }
+	SYS_READLINKAT               = 500 // { int readlinkat(int fd, char *path, char *buf, size_t bufsize); }
+	SYS_RENAMEAT                 = 501 // { int renameat(int oldfd, char *old, int newfd, char *new); }
+	SYS_SYMLINKAT                = 502 // { int symlinkat(char *path1, int fd, char *path2); }
+	SYS_UNLINKAT                 = 503 // { int unlinkat(int fd, char *path, int flag); }
+	SYS_POSIX_OPENPT             = 504 // { int posix_openpt(int flags); }
+	SYS_GSSD_SYSCALL             = 505 // { int gssd_syscall(char *path); }
+	SYS_JAIL_GET                 = 506 // { int jail_get(struct iovec *iovp, unsigned int iovcnt, int flags); }
+	SYS_JAIL_SET                 = 507 // { int jail_set(struct iovec *iovp, unsigned int iovcnt, int flags); }
+	SYS_JAIL_REMOVE              = 508 // { int jail_remove(int jid); }
+	SYS_CLOSEFROM                = 509 // { int closefrom(int lowfd); }
+	SYS___SEMCTL                 = 510 // { int __semctl(int semid, int semnum, int cmd, union semun *arg); }
+	SYS_MSGCTL                   = 511 // { int msgctl(int msqid, int cmd, struct msqid_ds *buf); }
+	SYS_SHMCTL                   = 512 // { int shmctl(int shmid, int cmd, struct shmid_ds *buf); }
+	SYS_LPATHCONF                = 513 // { int lpathconf(char *path, int name); }
+	SYS___CAP_RIGHTS_GET         = 515 // { int __cap_rights_get(int version, int fd, cap_rights_t *rightsp); }
+	SYS_CAP_ENTER                = 516 // { int cap_enter(void); }
+	SYS_CAP_GETMODE              = 517 // { int cap_getmode(u_int *modep); }
+	SYS_PDFORK                   = 518 // { int pdfork(int *fdp, int flags); }
+	SYS_PDKILL                   = 519 // { int pdkill(int fd, int signum); }
+	SYS_PDGETPID                 = 520 // { int pdgetpid(int fd, pid_t *pidp); }
+	SYS_PSELECT                  = 522 // { int pselect(int nd, fd_set *in, fd_set *ou, fd_set *ex, const struct timespec *ts, const sigset_t *sm); }
+	SYS_GETLOGINCLASS            = 523 // { int getloginclass(char *namebuf, size_t namelen); }
+	SYS_SETLOGINCLASS            = 524 // { int setloginclass(const char *namebuf); }
+	SYS_RCTL_GET_RACCT           = 525 // { int rctl_get_racct(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_RCTL_GET_RULES           = 526 // { int rctl_get_rules(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_RCTL_GET_LIMITS          = 527 // { int rctl_get_limits(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_RCTL_ADD_RULE            = 528 // { int rctl_add_rule(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_RCTL_REMOVE_RULE         = 529 // { int rctl_remove_rule(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_POSIX_FALLOCATE          = 530 // { int posix_fallocate(int fd, off_t offset, off_t len); }
+	SYS_POSIX_FADVISE            = 531 // { int posix_fadvise(int fd, off_t offset, off_t len, int advice); }
+	SYS_WAIT6                    = 532 // { int wait6(idtype_t idtype, id_t id, int *status, int options, struct __wrusage *wrusage, siginfo_t *info); }
+	SYS_CAP_RIGHTS_LIMIT         = 533 // { int cap_rights_limit(int fd, cap_rights_t *rightsp); }
+	SYS_CAP_IOCTLS_LIMIT         = 534 // { int cap_ioctls_limit(int fd, const u_long *cmds, size_t ncmds); }
+	SYS_CAP_IOCTLS_GET           = 535 // { ssize_t cap_ioctls_get(int fd, u_long *cmds, size_t maxcmds); }
+	SYS_CAP_FCNTLS_LIMIT         = 536 // { int cap_fcntls_limit(int fd, uint32_t fcntlrights); }
+	SYS_CAP_FCNTLS_GET           = 537 // { int cap_fcntls_get(int fd, uint32_t *fcntlrightsp); }
+	SYS_BINDAT                   = 538 // { int bindat(int fd, int s, caddr_t name, int namelen); }
+	SYS_CONNECTAT                = 539 // { int connectat(int fd, int s, caddr_t name, int namelen); }
+	SYS_CHFLAGSAT                = 540 // { int chflagsat(int fd, const char *path, u_long flags, int atflag); }
+	SYS_ACCEPT4                  = 541 // { int accept4(int s, struct sockaddr * __restrict name, __socklen_t * __restrict anamelen, int flags); }
+	SYS_PIPE2                    = 542 // { int pipe2(int *fildes, int flags); }
+	SYS_AIO_MLOCK                = 543 // { int aio_mlock(struct aiocb *aiocbp); }
+	SYS_PROCCTL                  = 544 // { int procctl(idtype_t idtype, id_t id, int com, void *data); }
+	SYS_PPOLL                    = 545 // { int ppoll(struct pollfd *fds, u_int nfds, const struct timespec *ts, const sigset_t *set); }
+	SYS_FUTIMENS                 = 546 // { int futimens(int fd, struct timespec *times); }
+	SYS_UTIMENSAT                = 547 // { int utimensat(int fd, char *path, struct timespec *times, int flag); }
+	SYS_NUMA_GETAFFINITY         = 548 // { int numa_getaffinity(cpuwhich_t which, id_t id, struct vm_domain_policy_entry *policy); }
+	SYS_NUMA_SETAFFINITY         = 549 // { int numa_setaffinity(cpuwhich_t which, id_t id, const struct vm_domain_policy_entry *policy); }
+	SYS_FDATASYNC                = 550 // { int fdatasync(int fd); }
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_freebsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_freebsd_arm.go
new file mode 100644
index 000000000..4a6dfd4a7
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_freebsd_arm.go
@@ -0,0 +1,396 @@
+// go run mksysnum.go https://svn.freebsd.org/base/stable/11/sys/kern/syscalls.master
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm,freebsd
+
+package unix
+
+const (
+	// SYS_NOSYS = 0;  // { int nosys(void); } syscall nosys_args int
+	SYS_EXIT                     = 1   // { void sys_exit(int rval); } exit sys_exit_args void
+	SYS_FORK                     = 2   // { int fork(void); }
+	SYS_READ                     = 3   // { ssize_t read(int fd, void *buf, size_t nbyte); }
+	SYS_WRITE                    = 4   // { ssize_t write(int fd, const void *buf, size_t nbyte); }
+	SYS_OPEN                     = 5   // { int open(char *path, int flags, int mode); }
+	SYS_CLOSE                    = 6   // { int close(int fd); }
+	SYS_WAIT4                    = 7   // { int wait4(int pid, int *status, int options, struct rusage *rusage); }
+	SYS_LINK                     = 9   // { int link(char *path, char *link); }
+	SYS_UNLINK                   = 10  // { int unlink(char *path); }
+	SYS_CHDIR                    = 12  // { int chdir(char *path); }
+	SYS_FCHDIR                   = 13  // { int fchdir(int fd); }
+	SYS_MKNOD                    = 14  // { int mknod(char *path, int mode, int dev); }
+	SYS_CHMOD                    = 15  // { int chmod(char *path, int mode); }
+	SYS_CHOWN                    = 16  // { int chown(char *path, int uid, int gid); }
+	SYS_OBREAK                   = 17  // { int obreak(char *nsize); } break obreak_args int
+	SYS_GETPID                   = 20  // { pid_t getpid(void); }
+	SYS_MOUNT                    = 21  // { int mount(char *type, char *path, int flags, caddr_t data); }
+	SYS_UNMOUNT                  = 22  // { int unmount(char *path, int flags); }
+	SYS_SETUID                   = 23  // { int setuid(uid_t uid); }
+	SYS_GETUID                   = 24  // { uid_t getuid(void); }
+	SYS_GETEUID                  = 25  // { uid_t geteuid(void); }
+	SYS_PTRACE                   = 26  // { int ptrace(int req, pid_t pid, caddr_t addr, int data); }
+	SYS_RECVMSG                  = 27  // { int recvmsg(int s, struct msghdr *msg, int flags); }
+	SYS_SENDMSG                  = 28  // { int sendmsg(int s, struct msghdr *msg, int flags); }
+	SYS_RECVFROM                 = 29  // { int recvfrom(int s, caddr_t buf, size_t len, int flags, struct sockaddr * __restrict from, __socklen_t * __restrict fromlenaddr); }
+	SYS_ACCEPT                   = 30  // { int accept(int s, struct sockaddr * __restrict name, __socklen_t * __restrict anamelen); }
+	SYS_GETPEERNAME              = 31  // { int getpeername(int fdes, struct sockaddr * __restrict asa, __socklen_t * __restrict alen); }
+	SYS_GETSOCKNAME              = 32  // { int getsockname(int fdes, struct sockaddr * __restrict asa, __socklen_t * __restrict alen); }
+	SYS_ACCESS                   = 33  // { int access(char *path, int amode); }
+	SYS_CHFLAGS                  = 34  // { int chflags(const char *path, u_long flags); }
+	SYS_FCHFLAGS                 = 35  // { int fchflags(int fd, u_long flags); }
+	SYS_SYNC                     = 36  // { int sync(void); }
+	SYS_KILL                     = 37  // { int kill(int pid, int signum); }
+	SYS_GETPPID                  = 39  // { pid_t getppid(void); }
+	SYS_DUP                      = 41  // { int dup(u_int fd); }
+	SYS_PIPE                     = 42  // { int pipe(void); }
+	SYS_GETEGID                  = 43  // { gid_t getegid(void); }
+	SYS_PROFIL                   = 44  // { int profil(caddr_t samples, size_t size, size_t offset, u_int scale); }
+	SYS_KTRACE                   = 45  // { int ktrace(const char *fname, int ops, int facs, int pid); }
+	SYS_GETGID                   = 47  // { gid_t getgid(void); }
+	SYS_GETLOGIN                 = 49  // { int getlogin(char *namebuf, u_int namelen); }
+	SYS_SETLOGIN                 = 50  // { int setlogin(char *namebuf); }
+	SYS_ACCT                     = 51  // { int acct(char *path); }
+	SYS_SIGALTSTACK              = 53  // { int sigaltstack(stack_t *ss, stack_t *oss); }
+	SYS_IOCTL                    = 54  // { int ioctl(int fd, u_long com, caddr_t data); }
+	SYS_REBOOT                   = 55  // { int reboot(int opt); }
+	SYS_REVOKE                   = 56  // { int revoke(char *path); }
+	SYS_SYMLINK                  = 57  // { int symlink(char *path, char *link); }
+	SYS_READLINK                 = 58  // { ssize_t readlink(char *path, char *buf, size_t count); }
+	SYS_EXECVE                   = 59  // { int execve(char *fname, char **argv, char **envv); }
+	SYS_UMASK                    = 60  // { int umask(int newmask); } umask umask_args int
+	SYS_CHROOT                   = 61  // { int chroot(char *path); }
+	SYS_MSYNC                    = 65  // { int msync(void *addr, size_t len, int flags); }
+	SYS_VFORK                    = 66  // { int vfork(void); }
+	SYS_SBRK                     = 69  // { int sbrk(int incr); }
+	SYS_SSTK                     = 70  // { int sstk(int incr); }
+	SYS_OVADVISE                 = 72  // { int ovadvise(int anom); } vadvise ovadvise_args int
+	SYS_MUNMAP                   = 73  // { int munmap(void *addr, size_t len); }
+	SYS_MPROTECT                 = 74  // { int mprotect(const void *addr, size_t len, int prot); }
+	SYS_MADVISE                  = 75  // { int madvise(void *addr, size_t len, int behav); }
+	SYS_MINCORE                  = 78  // { int mincore(const void *addr, size_t len, char *vec); }
+	SYS_GETGROUPS                = 79  // { int getgroups(u_int gidsetsize, gid_t *gidset); }
+	SYS_SETGROUPS                = 80  // { int setgroups(u_int gidsetsize, gid_t *gidset); }
+	SYS_GETPGRP                  = 81  // { int getpgrp(void); }
+	SYS_SETPGID                  = 82  // { int setpgid(int pid, int pgid); }
+	SYS_SETITIMER                = 83  // { int setitimer(u_int which, struct itimerval *itv, struct itimerval *oitv); }
+	SYS_SWAPON                   = 85  // { int swapon(char *name); }
+	SYS_GETITIMER                = 86  // { int getitimer(u_int which, struct itimerval *itv); }
+	SYS_GETDTABLESIZE            = 89  // { int getdtablesize(void); }
+	SYS_DUP2                     = 90  // { int dup2(u_int from, u_int to); }
+	SYS_FCNTL                    = 92  // { int fcntl(int fd, int cmd, long arg); }
+	SYS_SELECT                   = 93  // { int select(int nd, fd_set *in, fd_set *ou, fd_set *ex, struct timeval *tv); }
+	SYS_FSYNC                    = 95  // { int fsync(int fd); }
+	SYS_SETPRIORITY              = 96  // { int setpriority(int which, int who, int prio); }
+	SYS_SOCKET                   = 97  // { int socket(int domain, int type, int protocol); }
+	SYS_CONNECT                  = 98  // { int connect(int s, caddr_t name, int namelen); }
+	SYS_GETPRIORITY              = 100 // { int getpriority(int which, int who); }
+	SYS_BIND                     = 104 // { int bind(int s, caddr_t name, int namelen); }
+	SYS_SETSOCKOPT               = 105 // { int setsockopt(int s, int level, int name, caddr_t val, int valsize); }
+	SYS_LISTEN                   = 106 // { int listen(int s, int backlog); }
+	SYS_GETTIMEOFDAY             = 116 // { int gettimeofday(struct timeval *tp, struct timezone *tzp); }
+	SYS_GETRUSAGE                = 117 // { int getrusage(int who, struct rusage *rusage); }
+	SYS_GETSOCKOPT               = 118 // { int getsockopt(int s, int level, int name, caddr_t val, int *avalsize); }
+	SYS_READV                    = 120 // { int readv(int fd, struct iovec *iovp, u_int iovcnt); }
+	SYS_WRITEV                   = 121 // { int writev(int fd, struct iovec *iovp, u_int iovcnt); }
+	SYS_SETTIMEOFDAY             = 122 // { int settimeofday(struct timeval *tv, struct timezone *tzp); }
+	SYS_FCHOWN                   = 123 // { int fchown(int fd, int uid, int gid); }
+	SYS_FCHMOD                   = 124 // { int fchmod(int fd, int mode); }
+	SYS_SETREUID                 = 126 // { int setreuid(int ruid, int euid); }
+	SYS_SETREGID                 = 127 // { int setregid(int rgid, int egid); }
+	SYS_RENAME                   = 128 // { int rename(char *from, char *to); }
+	SYS_FLOCK                    = 131 // { int flock(int fd, int how); }
+	SYS_MKFIFO                   = 132 // { int mkfifo(char *path, int mode); }
+	SYS_SENDTO                   = 133 // { int sendto(int s, caddr_t buf, size_t len, int flags, caddr_t to, int tolen); }
+	SYS_SHUTDOWN                 = 134 // { int shutdown(int s, int how); }
+	SYS_SOCKETPAIR               = 135 // { int socketpair(int domain, int type, int protocol, int *rsv); }
+	SYS_MKDIR                    = 136 // { int mkdir(char *path, int mode); }
+	SYS_RMDIR                    = 137 // { int rmdir(char *path); }
+	SYS_UTIMES                   = 138 // { int utimes(char *path, struct timeval *tptr); }
+	SYS_ADJTIME                  = 140 // { int adjtime(struct timeval *delta, struct timeval *olddelta); }
+	SYS_SETSID                   = 147 // { int setsid(void); }
+	SYS_QUOTACTL                 = 148 // { int quotactl(char *path, int cmd, int uid, caddr_t arg); }
+	SYS_NLM_SYSCALL              = 154 // { int nlm_syscall(int debug_level, int grace_period, int addr_count, char **addrs); }
+	SYS_NFSSVC                   = 155 // { int nfssvc(int flag, caddr_t argp); }
+	SYS_LGETFH                   = 160 // { int lgetfh(char *fname, struct fhandle *fhp); }
+	SYS_GETFH                    = 161 // { int getfh(char *fname, struct fhandle *fhp); }
+	SYS_SYSARCH                  = 165 // { int sysarch(int op, char *parms); }
+	SYS_RTPRIO                   = 166 // { int rtprio(int function, pid_t pid, struct rtprio *rtp); }
+	SYS_SEMSYS                   = 169 // { int semsys(int which, int a2, int a3, int a4, int a5); }
+	SYS_MSGSYS                   = 170 // { int msgsys(int which, int a2, int a3, int a4, int a5, int a6); }
+	SYS_SHMSYS                   = 171 // { int shmsys(int which, int a2, int a3, int a4); }
+	SYS_SETFIB                   = 175 // { int setfib(int fibnum); }
+	SYS_NTP_ADJTIME              = 176 // { int ntp_adjtime(struct timex *tp); }
+	SYS_SETGID                   = 181 // { int setgid(gid_t gid); }
+	SYS_SETEGID                  = 182 // { int setegid(gid_t egid); }
+	SYS_SETEUID                  = 183 // { int seteuid(uid_t euid); }
+	SYS_STAT                     = 188 // { int stat(char *path, struct stat *ub); }
+	SYS_FSTAT                    = 189 // { int fstat(int fd, struct stat *sb); }
+	SYS_LSTAT                    = 190 // { int lstat(char *path, struct stat *ub); }
+	SYS_PATHCONF                 = 191 // { int pathconf(char *path, int name); }
+	SYS_FPATHCONF                = 192 // { int fpathconf(int fd, int name); }
+	SYS_GETRLIMIT                = 194 // { int getrlimit(u_int which, struct rlimit *rlp); } getrlimit __getrlimit_args int
+	SYS_SETRLIMIT                = 195 // { int setrlimit(u_int which, struct rlimit *rlp); } setrlimit __setrlimit_args int
+	SYS_GETDIRENTRIES            = 196 // { int getdirentries(int fd, char *buf, u_int count, long *basep); }
+	SYS___SYSCTL                 = 202 // { int __sysctl(int *name, u_int namelen, void *old, size_t *oldlenp, void *new, size_t newlen); } __sysctl sysctl_args int
+	SYS_MLOCK                    = 203 // { int mlock(const void *addr, size_t len); }
+	SYS_MUNLOCK                  = 204 // { int munlock(const void *addr, size_t len); }
+	SYS_UNDELETE                 = 205 // { int undelete(char *path); }
+	SYS_FUTIMES                  = 206 // { int futimes(int fd, struct timeval *tptr); }
+	SYS_GETPGID                  = 207 // { int getpgid(pid_t pid); }
+	SYS_POLL                     = 209 // { int poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_SEMGET                   = 221 // { int semget(key_t key, int nsems, int semflg); }
+	SYS_SEMOP                    = 222 // { int semop(int semid, struct sembuf *sops, size_t nsops); }
+	SYS_MSGGET                   = 225 // { int msgget(key_t key, int msgflg); }
+	SYS_MSGSND                   = 226 // { int msgsnd(int msqid, const void *msgp, size_t msgsz, int msgflg); }
+	SYS_MSGRCV                   = 227 // { int msgrcv(int msqid, void *msgp, size_t msgsz, long msgtyp, int msgflg); }
+	SYS_SHMAT                    = 228 // { int shmat(int shmid, const void *shmaddr, int shmflg); }
+	SYS_SHMDT                    = 230 // { int shmdt(const void *shmaddr); }
+	SYS_SHMGET                   = 231 // { int shmget(key_t key, size_t size, int shmflg); }
+	SYS_CLOCK_GETTIME            = 232 // { int clock_gettime(clockid_t clock_id, struct timespec *tp); }
+	SYS_CLOCK_SETTIME            = 233 // { int clock_settime( clockid_t clock_id, const struct timespec *tp); }
+	SYS_CLOCK_GETRES             = 234 // { int clock_getres(clockid_t clock_id, struct timespec *tp); }
+	SYS_KTIMER_CREATE            = 235 // { int ktimer_create(clockid_t clock_id, struct sigevent *evp, int *timerid); }
+	SYS_KTIMER_DELETE            = 236 // { int ktimer_delete(int timerid); }
+	SYS_KTIMER_SETTIME           = 237 // { int ktimer_settime(int timerid, int flags, const struct itimerspec *value, struct itimerspec *ovalue); }
+	SYS_KTIMER_GETTIME           = 238 // { int ktimer_gettime(int timerid, struct itimerspec *value); }
+	SYS_KTIMER_GETOVERRUN        = 239 // { int ktimer_getoverrun(int timerid); }
+	SYS_NANOSLEEP                = 240 // { int nanosleep(const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS_FFCLOCK_GETCOUNTER       = 241 // { int ffclock_getcounter(ffcounter *ffcount); }
+	SYS_FFCLOCK_SETESTIMATE      = 242 // { int ffclock_setestimate( struct ffclock_estimate *cest); }
+	SYS_FFCLOCK_GETESTIMATE      = 243 // { int ffclock_getestimate( struct ffclock_estimate *cest); }
+	SYS_CLOCK_NANOSLEEP          = 244 // { int clock_nanosleep(clockid_t clock_id, int flags, const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS_CLOCK_GETCPUCLOCKID2     = 247 // { int clock_getcpuclockid2(id_t id,int which, clockid_t *clock_id); }
+	SYS_NTP_GETTIME              = 248 // { int ntp_gettime(struct ntptimeval *ntvp); }
+	SYS_MINHERIT                 = 250 // { int minherit(void *addr, size_t len, int inherit); }
+	SYS_RFORK                    = 251 // { int rfork(int flags); }
+	SYS_OPENBSD_POLL             = 252 // { int openbsd_poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_ISSETUGID                = 253 // { int issetugid(void); }
+	SYS_LCHOWN                   = 254 // { int lchown(char *path, int uid, int gid); }
+	SYS_AIO_READ                 = 255 // { int aio_read(struct aiocb *aiocbp); }
+	SYS_AIO_WRITE                = 256 // { int aio_write(struct aiocb *aiocbp); }
+	SYS_LIO_LISTIO               = 257 // { int lio_listio(int mode, struct aiocb * const *acb_list, int nent, struct sigevent *sig); }
+	SYS_GETDENTS                 = 272 // { int getdents(int fd, char *buf, size_t count); }
+	SYS_LCHMOD                   = 274 // { int lchmod(char *path, mode_t mode); }
+	SYS_LUTIMES                  = 276 // { int lutimes(char *path, struct timeval *tptr); }
+	SYS_NSTAT                    = 278 // { int nstat(char *path, struct nstat *ub); }
+	SYS_NFSTAT                   = 279 // { int nfstat(int fd, struct nstat *sb); }
+	SYS_NLSTAT                   = 280 // { int nlstat(char *path, struct nstat *ub); }
+	SYS_PREADV                   = 289 // { ssize_t preadv(int fd, struct iovec *iovp, u_int iovcnt, off_t offset); }
+	SYS_PWRITEV                  = 290 // { ssize_t pwritev(int fd, struct iovec *iovp, u_int iovcnt, off_t offset); }
+	SYS_FHOPEN                   = 298 // { int fhopen(const struct fhandle *u_fhp, int flags); }
+	SYS_FHSTAT                   = 299 // { int fhstat(const struct fhandle *u_fhp, struct stat *sb); }
+	SYS_MODNEXT                  = 300 // { int modnext(int modid); }
+	SYS_MODSTAT                  = 301 // { int modstat(int modid, struct module_stat *stat); }
+	SYS_MODFNEXT                 = 302 // { int modfnext(int modid); }
+	SYS_MODFIND                  = 303 // { int modfind(const char *name); }
+	SYS_KLDLOAD                  = 304 // { int kldload(const char *file); }
+	SYS_KLDUNLOAD                = 305 // { int kldunload(int fileid); }
+	SYS_KLDFIND                  = 306 // { int kldfind(const char *file); }
+	SYS_KLDNEXT                  = 307 // { int kldnext(int fileid); }
+	SYS_KLDSTAT                  = 308 // { int kldstat(int fileid, struct kld_file_stat* stat); }
+	SYS_KLDFIRSTMOD              = 309 // { int kldfirstmod(int fileid); }
+	SYS_GETSID                   = 310 // { int getsid(pid_t pid); }
+	SYS_SETRESUID                = 311 // { int setresuid(uid_t ruid, uid_t euid, uid_t suid); }
+	SYS_SETRESGID                = 312 // { int setresgid(gid_t rgid, gid_t egid, gid_t sgid); }
+	SYS_AIO_RETURN               = 314 // { ssize_t aio_return(struct aiocb *aiocbp); }
+	SYS_AIO_SUSPEND              = 315 // { int aio_suspend( struct aiocb * const * aiocbp, int nent, const struct timespec *timeout); }
+	SYS_AIO_CANCEL               = 316 // { int aio_cancel(int fd, struct aiocb *aiocbp); }
+	SYS_AIO_ERROR                = 317 // { int aio_error(struct aiocb *aiocbp); }
+	SYS_YIELD                    = 321 // { int yield(void); }
+	SYS_MLOCKALL                 = 324 // { int mlockall(int how); }
+	SYS_MUNLOCKALL               = 325 // { int munlockall(void); }
+	SYS___GETCWD                 = 326 // { int __getcwd(char *buf, u_int buflen); }
+	SYS_SCHED_SETPARAM           = 327 // { int sched_setparam (pid_t pid, const struct sched_param *param); }
+	SYS_SCHED_GETPARAM           = 328 // { int sched_getparam (pid_t pid, struct sched_param *param); }
+	SYS_SCHED_SETSCHEDULER       = 329 // { int sched_setscheduler (pid_t pid, int policy, const struct sched_param *param); }
+	SYS_SCHED_GETSCHEDULER       = 330 // { int sched_getscheduler (pid_t pid); }
+	SYS_SCHED_YIELD              = 331 // { int sched_yield (void); }
+	SYS_SCHED_GET_PRIORITY_MAX   = 332 // { int sched_get_priority_max (int policy); }
+	SYS_SCHED_GET_PRIORITY_MIN   = 333 // { int sched_get_priority_min (int policy); }
+	SYS_SCHED_RR_GET_INTERVAL    = 334 // { int sched_rr_get_interval (pid_t pid, struct timespec *interval); }
+	SYS_UTRACE                   = 335 // { int utrace(const void *addr, size_t len); }
+	SYS_KLDSYM                   = 337 // { int kldsym(int fileid, int cmd, void *data); }
+	SYS_JAIL                     = 338 // { int jail(struct jail *jail); }
+	SYS_SIGPROCMASK              = 340 // { int sigprocmask(int how, const sigset_t *set, sigset_t *oset); }
+	SYS_SIGSUSPEND               = 341 // { int sigsuspend(const sigset_t *sigmask); }
+	SYS_SIGPENDING               = 343 // { int sigpending(sigset_t *set); }
+	SYS_SIGTIMEDWAIT             = 345 // { int sigtimedwait(const sigset_t *set, siginfo_t *info, const struct timespec *timeout); }
+	SYS_SIGWAITINFO              = 346 // { int sigwaitinfo(const sigset_t *set, siginfo_t *info); }
+	SYS___ACL_GET_FILE           = 347 // { int __acl_get_file(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_SET_FILE           = 348 // { int __acl_set_file(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_GET_FD             = 349 // { int __acl_get_fd(int filedes, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_SET_FD             = 350 // { int __acl_set_fd(int filedes, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_DELETE_FILE        = 351 // { int __acl_delete_file(const char *path, acl_type_t type); }
+	SYS___ACL_DELETE_FD          = 352 // { int __acl_delete_fd(int filedes, acl_type_t type); }
+	SYS___ACL_ACLCHECK_FILE      = 353 // { int __acl_aclcheck_file(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_ACLCHECK_FD        = 354 // { int __acl_aclcheck_fd(int filedes, acl_type_t type, struct acl *aclp); }
+	SYS_EXTATTRCTL               = 355 // { int extattrctl(const char *path, int cmd, const char *filename, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_FILE         = 356 // { ssize_t extattr_set_file( const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FILE         = 357 // { ssize_t extattr_get_file( const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FILE      = 358 // { int extattr_delete_file(const char *path, int attrnamespace, const char *attrname); }
+	SYS_AIO_WAITCOMPLETE         = 359 // { ssize_t aio_waitcomplete( struct aiocb **aiocbp, struct timespec *timeout); }
+	SYS_GETRESUID                = 360 // { int getresuid(uid_t *ruid, uid_t *euid, uid_t *suid); }
+	SYS_GETRESGID                = 361 // { int getresgid(gid_t *rgid, gid_t *egid, gid_t *sgid); }
+	SYS_KQUEUE                   = 362 // { int kqueue(void); }
+	SYS_KEVENT                   = 363 // { int kevent(int fd, struct kevent *changelist, int nchanges, struct kevent *eventlist, int nevents, const struct timespec *timeout); }
+	SYS_EXTATTR_SET_FD           = 371 // { ssize_t extattr_set_fd(int fd, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FD           = 372 // { ssize_t extattr_get_fd(int fd, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FD        = 373 // { int extattr_delete_fd(int fd, int attrnamespace, const char *attrname); }
+	SYS___SETUGID                = 374 // { int __setugid(int flag); }
+	SYS_EACCESS                  = 376 // { int eaccess(char *path, int amode); }
+	SYS_NMOUNT                   = 378 // { int nmount(struct iovec *iovp, unsigned int iovcnt, int flags); }
+	SYS___MAC_GET_PROC           = 384 // { int __mac_get_proc(struct mac *mac_p); }
+	SYS___MAC_SET_PROC           = 385 // { int __mac_set_proc(struct mac *mac_p); }
+	SYS___MAC_GET_FD             = 386 // { int __mac_get_fd(int fd, struct mac *mac_p); }
+	SYS___MAC_GET_FILE           = 387 // { int __mac_get_file(const char *path_p, struct mac *mac_p); }
+	SYS___MAC_SET_FD             = 388 // { int __mac_set_fd(int fd, struct mac *mac_p); }
+	SYS___MAC_SET_FILE           = 389 // { int __mac_set_file(const char *path_p, struct mac *mac_p); }
+	SYS_KENV                     = 390 // { int kenv(int what, const char *name, char *value, int len); }
+	SYS_LCHFLAGS                 = 391 // { int lchflags(const char *path, u_long flags); }
+	SYS_UUIDGEN                  = 392 // { int uuidgen(struct uuid *store, int count); }
+	SYS_SENDFILE                 = 393 // { int sendfile(int fd, int s, off_t offset, size_t nbytes, struct sf_hdtr *hdtr, off_t *sbytes, int flags); }
+	SYS_MAC_SYSCALL              = 394 // { int mac_syscall(const char *policy, int call, void *arg); }
+	SYS_GETFSSTAT                = 395 // { int getfsstat(struct statfs *buf, long bufsize, int mode); }
+	SYS_STATFS                   = 396 // { int statfs(char *path, struct statfs *buf); }
+	SYS_FSTATFS                  = 397 // { int fstatfs(int fd, struct statfs *buf); }
+	SYS_FHSTATFS                 = 398 // { int fhstatfs(const struct fhandle *u_fhp, struct statfs *buf); }
+	SYS_KSEM_CLOSE               = 400 // { int ksem_close(semid_t id); }
+	SYS_KSEM_POST                = 401 // { int ksem_post(semid_t id); }
+	SYS_KSEM_WAIT                = 402 // { int ksem_wait(semid_t id); }
+	SYS_KSEM_TRYWAIT             = 403 // { int ksem_trywait(semid_t id); }
+	SYS_KSEM_INIT                = 404 // { int ksem_init(semid_t *idp, unsigned int value); }
+	SYS_KSEM_OPEN                = 405 // { int ksem_open(semid_t *idp, const char *name, int oflag, mode_t mode, unsigned int value); }
+	SYS_KSEM_UNLINK              = 406 // { int ksem_unlink(const char *name); }
+	SYS_KSEM_GETVALUE            = 407 // { int ksem_getvalue(semid_t id, int *val); }
+	SYS_KSEM_DESTROY             = 408 // { int ksem_destroy(semid_t id); }
+	SYS___MAC_GET_PID            = 409 // { int __mac_get_pid(pid_t pid, struct mac *mac_p); }
+	SYS___MAC_GET_LINK           = 410 // { int __mac_get_link(const char *path_p, struct mac *mac_p); }
+	SYS___MAC_SET_LINK           = 411 // { int __mac_set_link(const char *path_p, struct mac *mac_p); }
+	SYS_EXTATTR_SET_LINK         = 412 // { ssize_t extattr_set_link( const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_LINK         = 413 // { ssize_t extattr_get_link( const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_LINK      = 414 // { int extattr_delete_link( const char *path, int attrnamespace, const char *attrname); }
+	SYS___MAC_EXECVE             = 415 // { int __mac_execve(char *fname, char **argv, char **envv, struct mac *mac_p); }
+	SYS_SIGACTION                = 416 // { int sigaction(int sig, const struct sigaction *act, struct sigaction *oact); }
+	SYS_SIGRETURN                = 417 // { int sigreturn( const struct __ucontext *sigcntxp); }
+	SYS_GETCONTEXT               = 421 // { int getcontext(struct __ucontext *ucp); }
+	SYS_SETCONTEXT               = 422 // { int setcontext( const struct __ucontext *ucp); }
+	SYS_SWAPCONTEXT              = 423 // { int swapcontext(struct __ucontext *oucp, const struct __ucontext *ucp); }
+	SYS_SWAPOFF                  = 424 // { int swapoff(const char *name); }
+	SYS___ACL_GET_LINK           = 425 // { int __acl_get_link(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_SET_LINK           = 426 // { int __acl_set_link(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_DELETE_LINK        = 427 // { int __acl_delete_link(const char *path, acl_type_t type); }
+	SYS___ACL_ACLCHECK_LINK      = 428 // { int __acl_aclcheck_link(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS_SIGWAIT                  = 429 // { int sigwait(const sigset_t *set, int *sig); }
+	SYS_THR_CREATE               = 430 // { int thr_create(ucontext_t *ctx, long *id, int flags); }
+	SYS_THR_EXIT                 = 431 // { void thr_exit(long *state); }
+	SYS_THR_SELF                 = 432 // { int thr_self(long *id); }
+	SYS_THR_KILL                 = 433 // { int thr_kill(long id, int sig); }
+	SYS_JAIL_ATTACH              = 436 // { int jail_attach(int jid); }
+	SYS_EXTATTR_LIST_FD          = 437 // { ssize_t extattr_list_fd(int fd, int attrnamespace, void *data, size_t nbytes); }
+	SYS_EXTATTR_LIST_FILE        = 438 // { ssize_t extattr_list_file( const char *path, int attrnamespace, void *data, size_t nbytes); }
+	SYS_EXTATTR_LIST_LINK        = 439 // { ssize_t extattr_list_link( const char *path, int attrnamespace, void *data, size_t nbytes); }
+	SYS_KSEM_TIMEDWAIT           = 441 // { int ksem_timedwait(semid_t id, const struct timespec *abstime); }
+	SYS_THR_SUSPEND              = 442 // { int thr_suspend( const struct timespec *timeout); }
+	SYS_THR_WAKE                 = 443 // { int thr_wake(long id); }
+	SYS_KLDUNLOADF               = 444 // { int kldunloadf(int fileid, int flags); }
+	SYS_AUDIT                    = 445 // { int audit(const void *record, u_int length); }
+	SYS_AUDITON                  = 446 // { int auditon(int cmd, void *data, u_int length); }
+	SYS_GETAUID                  = 447 // { int getauid(uid_t *auid); }
+	SYS_SETAUID                  = 448 // { int setauid(uid_t *auid); }
+	SYS_GETAUDIT                 = 449 // { int getaudit(struct auditinfo *auditinfo); }
+	SYS_SETAUDIT                 = 450 // { int setaudit(struct auditinfo *auditinfo); }
+	SYS_GETAUDIT_ADDR            = 451 // { int getaudit_addr( struct auditinfo_addr *auditinfo_addr, u_int length); }
+	SYS_SETAUDIT_ADDR            = 452 // { int setaudit_addr( struct auditinfo_addr *auditinfo_addr, u_int length); }
+	SYS_AUDITCTL                 = 453 // { int auditctl(char *path); }
+	SYS__UMTX_OP                 = 454 // { int _umtx_op(void *obj, int op, u_long val, void *uaddr1, void *uaddr2); }
+	SYS_THR_NEW                  = 455 // { int thr_new(struct thr_param *param, int param_size); }
+	SYS_SIGQUEUE                 = 456 // { int sigqueue(pid_t pid, int signum, void *value); }
+	SYS_KMQ_OPEN                 = 457 // { int kmq_open(const char *path, int flags, mode_t mode, const struct mq_attr *attr); }
+	SYS_KMQ_SETATTR              = 458 // { int kmq_setattr(int mqd,		const struct mq_attr *attr,		struct mq_attr *oattr); }
+	SYS_KMQ_TIMEDRECEIVE         = 459 // { int kmq_timedreceive(int mqd,	char *msg_ptr, size_t msg_len,	unsigned *msg_prio,			const struct timespec *abs_timeout); }
+	SYS_KMQ_TIMEDSEND            = 460 // { int kmq_timedsend(int mqd,		const char *msg_ptr, size_t msg_len,unsigned msg_prio,			const struct timespec *abs_timeout);}
+	SYS_KMQ_NOTIFY               = 461 // { int kmq_notify(int mqd,		const struct sigevent *sigev); }
+	SYS_KMQ_UNLINK               = 462 // { int kmq_unlink(const char *path); }
+	SYS_ABORT2                   = 463 // { int abort2(const char *why, int nargs, void **args); }
+	SYS_THR_SET_NAME             = 464 // { int thr_set_name(long id, const char *name); }
+	SYS_AIO_FSYNC                = 465 // { int aio_fsync(int op, struct aiocb *aiocbp); }
+	SYS_RTPRIO_THREAD            = 466 // { int rtprio_thread(int function, lwpid_t lwpid, struct rtprio *rtp); }
+	SYS_SCTP_PEELOFF             = 471 // { int sctp_peeloff(int sd, uint32_t name); }
+	SYS_SCTP_GENERIC_SENDMSG     = 472 // { int sctp_generic_sendmsg(int sd, caddr_t msg, int mlen, caddr_t to, __socklen_t tolen, struct sctp_sndrcvinfo *sinfo, int flags); }
+	SYS_SCTP_GENERIC_SENDMSG_IOV = 473 // { int sctp_generic_sendmsg_iov(int sd, struct iovec *iov, int iovlen, caddr_t to, __socklen_t tolen, struct sctp_sndrcvinfo *sinfo, int flags); }
+	SYS_SCTP_GENERIC_RECVMSG     = 474 // { int sctp_generic_recvmsg(int sd, struct iovec *iov, int iovlen, struct sockaddr * from, __socklen_t *fromlenaddr, struct sctp_sndrcvinfo *sinfo, int *msg_flags); }
+	SYS_PREAD                    = 475 // { ssize_t pread(int fd, void *buf, size_t nbyte, off_t offset); }
+	SYS_PWRITE                   = 476 // { ssize_t pwrite(int fd, const void *buf, size_t nbyte, off_t offset); }
+	SYS_MMAP                     = 477 // { caddr_t mmap(caddr_t addr, size_t len, int prot, int flags, int fd, off_t pos); }
+	SYS_LSEEK                    = 478 // { off_t lseek(int fd, off_t offset, int whence); }
+	SYS_TRUNCATE                 = 479 // { int truncate(char *path, off_t length); }
+	SYS_FTRUNCATE                = 480 // { int ftruncate(int fd, off_t length); }
+	SYS_THR_KILL2                = 481 // { int thr_kill2(pid_t pid, long id, int sig); }
+	SYS_SHM_OPEN                 = 482 // { int shm_open(const char *path, int flags, mode_t mode); }
+	SYS_SHM_UNLINK               = 483 // { int shm_unlink(const char *path); }
+	SYS_CPUSET                   = 484 // { int cpuset(cpusetid_t *setid); }
+	SYS_CPUSET_SETID             = 485 // { int cpuset_setid(cpuwhich_t which, id_t id, cpusetid_t setid); }
+	SYS_CPUSET_GETID             = 486 // { int cpuset_getid(cpulevel_t level, cpuwhich_t which, id_t id, cpusetid_t *setid); }
+	SYS_CPUSET_GETAFFINITY       = 487 // { int cpuset_getaffinity(cpulevel_t level, cpuwhich_t which, id_t id, size_t cpusetsize, cpuset_t *mask); }
+	SYS_CPUSET_SETAFFINITY       = 488 // { int cpuset_setaffinity(cpulevel_t level, cpuwhich_t which, id_t id, size_t cpusetsize, const cpuset_t *mask); }
+	SYS_FACCESSAT                = 489 // { int faccessat(int fd, char *path, int amode, int flag); }
+	SYS_FCHMODAT                 = 490 // { int fchmodat(int fd, char *path, mode_t mode, int flag); }
+	SYS_FCHOWNAT                 = 491 // { int fchownat(int fd, char *path, uid_t uid, gid_t gid, int flag); }
+	SYS_FEXECVE                  = 492 // { int fexecve(int fd, char **argv, char **envv); }
+	SYS_FSTATAT                  = 493 // { int fstatat(int fd, char *path, struct stat *buf, int flag); }
+	SYS_FUTIMESAT                = 494 // { int futimesat(int fd, char *path, struct timeval *times); }
+	SYS_LINKAT                   = 495 // { int linkat(int fd1, char *path1, int fd2, char *path2, int flag); }
+	SYS_MKDIRAT                  = 496 // { int mkdirat(int fd, char *path, mode_t mode); }
+	SYS_MKFIFOAT                 = 497 // { int mkfifoat(int fd, char *path, mode_t mode); }
+	SYS_MKNODAT                  = 498 // { int mknodat(int fd, char *path, mode_t mode, dev_t dev); }
+	SYS_OPENAT                   = 499 // { int openat(int fd, char *path, int flag, mode_t mode); }
+	SYS_READLINKAT               = 500 // { int readlinkat(int fd, char *path, char *buf, size_t bufsize); }
+	SYS_RENAMEAT                 = 501 // { int renameat(int oldfd, char *old, int newfd, char *new); }
+	SYS_SYMLINKAT                = 502 // { int symlinkat(char *path1, int fd, char *path2); }
+	SYS_UNLINKAT                 = 503 // { int unlinkat(int fd, char *path, int flag); }
+	SYS_POSIX_OPENPT             = 504 // { int posix_openpt(int flags); }
+	SYS_GSSD_SYSCALL             = 505 // { int gssd_syscall(char *path); }
+	SYS_JAIL_GET                 = 506 // { int jail_get(struct iovec *iovp, unsigned int iovcnt, int flags); }
+	SYS_JAIL_SET                 = 507 // { int jail_set(struct iovec *iovp, unsigned int iovcnt, int flags); }
+	SYS_JAIL_REMOVE              = 508 // { int jail_remove(int jid); }
+	SYS_CLOSEFROM                = 509 // { int closefrom(int lowfd); }
+	SYS___SEMCTL                 = 510 // { int __semctl(int semid, int semnum, int cmd, union semun *arg); }
+	SYS_MSGCTL                   = 511 // { int msgctl(int msqid, int cmd, struct msqid_ds *buf); }
+	SYS_SHMCTL                   = 512 // { int shmctl(int shmid, int cmd, struct shmid_ds *buf); }
+	SYS_LPATHCONF                = 513 // { int lpathconf(char *path, int name); }
+	SYS___CAP_RIGHTS_GET         = 515 // { int __cap_rights_get(int version, int fd, cap_rights_t *rightsp); }
+	SYS_CAP_ENTER                = 516 // { int cap_enter(void); }
+	SYS_CAP_GETMODE              = 517 // { int cap_getmode(u_int *modep); }
+	SYS_PDFORK                   = 518 // { int pdfork(int *fdp, int flags); }
+	SYS_PDKILL                   = 519 // { int pdkill(int fd, int signum); }
+	SYS_PDGETPID                 = 520 // { int pdgetpid(int fd, pid_t *pidp); }
+	SYS_PSELECT                  = 522 // { int pselect(int nd, fd_set *in, fd_set *ou, fd_set *ex, const struct timespec *ts, const sigset_t *sm); }
+	SYS_GETLOGINCLASS            = 523 // { int getloginclass(char *namebuf, size_t namelen); }
+	SYS_SETLOGINCLASS            = 524 // { int setloginclass(const char *namebuf); }
+	SYS_RCTL_GET_RACCT           = 525 // { int rctl_get_racct(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_RCTL_GET_RULES           = 526 // { int rctl_get_rules(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_RCTL_GET_LIMITS          = 527 // { int rctl_get_limits(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_RCTL_ADD_RULE            = 528 // { int rctl_add_rule(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_RCTL_REMOVE_RULE         = 529 // { int rctl_remove_rule(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_POSIX_FALLOCATE          = 530 // { int posix_fallocate(int fd, off_t offset, off_t len); }
+	SYS_POSIX_FADVISE            = 531 // { int posix_fadvise(int fd, off_t offset, off_t len, int advice); }
+	SYS_WAIT6                    = 532 // { int wait6(idtype_t idtype, id_t id, int *status, int options, struct __wrusage *wrusage, siginfo_t *info); }
+	SYS_CAP_RIGHTS_LIMIT         = 533 // { int cap_rights_limit(int fd, cap_rights_t *rightsp); }
+	SYS_CAP_IOCTLS_LIMIT         = 534 // { int cap_ioctls_limit(int fd, const u_long *cmds, size_t ncmds); }
+	SYS_CAP_IOCTLS_GET           = 535 // { ssize_t cap_ioctls_get(int fd, u_long *cmds, size_t maxcmds); }
+	SYS_CAP_FCNTLS_LIMIT         = 536 // { int cap_fcntls_limit(int fd, uint32_t fcntlrights); }
+	SYS_CAP_FCNTLS_GET           = 537 // { int cap_fcntls_get(int fd, uint32_t *fcntlrightsp); }
+	SYS_BINDAT                   = 538 // { int bindat(int fd, int s, caddr_t name, int namelen); }
+	SYS_CONNECTAT                = 539 // { int connectat(int fd, int s, caddr_t name, int namelen); }
+	SYS_CHFLAGSAT                = 540 // { int chflagsat(int fd, const char *path, u_long flags, int atflag); }
+	SYS_ACCEPT4                  = 541 // { int accept4(int s, struct sockaddr * __restrict name, __socklen_t * __restrict anamelen, int flags); }
+	SYS_PIPE2                    = 542 // { int pipe2(int *fildes, int flags); }
+	SYS_AIO_MLOCK                = 543 // { int aio_mlock(struct aiocb *aiocbp); }
+	SYS_PROCCTL                  = 544 // { int procctl(idtype_t idtype, id_t id, int com, void *data); }
+	SYS_PPOLL                    = 545 // { int ppoll(struct pollfd *fds, u_int nfds, const struct timespec *ts, const sigset_t *set); }
+	SYS_FUTIMENS                 = 546 // { int futimens(int fd, struct timespec *times); }
+	SYS_UTIMENSAT                = 547 // { int utimensat(int fd, char *path, struct timespec *times, int flag); }
+	SYS_NUMA_GETAFFINITY         = 548 // { int numa_getaffinity(cpuwhich_t which, id_t id, struct vm_domain_policy_entry *policy); }
+	SYS_NUMA_SETAFFINITY         = 549 // { int numa_setaffinity(cpuwhich_t which, id_t id, const struct vm_domain_policy_entry *policy); }
+	SYS_FDATASYNC                = 550 // { int fdatasync(int fd); }
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_freebsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_freebsd_arm64.go
new file mode 100644
index 000000000..3e51af8ed
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_freebsd_arm64.go
@@ -0,0 +1,396 @@
+// go run mksysnum.go https://svn.freebsd.org/base/stable/11/sys/kern/syscalls.master
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm64,freebsd
+
+package unix
+
+const (
+	// SYS_NOSYS = 0;  // { int nosys(void); } syscall nosys_args int
+	SYS_EXIT                     = 1   // { void sys_exit(int rval); } exit sys_exit_args void
+	SYS_FORK                     = 2   // { int fork(void); }
+	SYS_READ                     = 3   // { ssize_t read(int fd, void *buf, size_t nbyte); }
+	SYS_WRITE                    = 4   // { ssize_t write(int fd, const void *buf, size_t nbyte); }
+	SYS_OPEN                     = 5   // { int open(char *path, int flags, int mode); }
+	SYS_CLOSE                    = 6   // { int close(int fd); }
+	SYS_WAIT4                    = 7   // { int wait4(int pid, int *status, int options, struct rusage *rusage); }
+	SYS_LINK                     = 9   // { int link(char *path, char *link); }
+	SYS_UNLINK                   = 10  // { int unlink(char *path); }
+	SYS_CHDIR                    = 12  // { int chdir(char *path); }
+	SYS_FCHDIR                   = 13  // { int fchdir(int fd); }
+	SYS_MKNOD                    = 14  // { int mknod(char *path, int mode, int dev); }
+	SYS_CHMOD                    = 15  // { int chmod(char *path, int mode); }
+	SYS_CHOWN                    = 16  // { int chown(char *path, int uid, int gid); }
+	SYS_OBREAK                   = 17  // { int obreak(char *nsize); } break obreak_args int
+	SYS_GETPID                   = 20  // { pid_t getpid(void); }
+	SYS_MOUNT                    = 21  // { int mount(char *type, char *path, int flags, caddr_t data); }
+	SYS_UNMOUNT                  = 22  // { int unmount(char *path, int flags); }
+	SYS_SETUID                   = 23  // { int setuid(uid_t uid); }
+	SYS_GETUID                   = 24  // { uid_t getuid(void); }
+	SYS_GETEUID                  = 25  // { uid_t geteuid(void); }
+	SYS_PTRACE                   = 26  // { int ptrace(int req, pid_t pid, caddr_t addr, int data); }
+	SYS_RECVMSG                  = 27  // { int recvmsg(int s, struct msghdr *msg, int flags); }
+	SYS_SENDMSG                  = 28  // { int sendmsg(int s, struct msghdr *msg, int flags); }
+	SYS_RECVFROM                 = 29  // { int recvfrom(int s, caddr_t buf, size_t len, int flags, struct sockaddr * __restrict from, __socklen_t * __restrict fromlenaddr); }
+	SYS_ACCEPT                   = 30  // { int accept(int s, struct sockaddr * __restrict name, __socklen_t * __restrict anamelen); }
+	SYS_GETPEERNAME              = 31  // { int getpeername(int fdes, struct sockaddr * __restrict asa, __socklen_t * __restrict alen); }
+	SYS_GETSOCKNAME              = 32  // { int getsockname(int fdes, struct sockaddr * __restrict asa, __socklen_t * __restrict alen); }
+	SYS_ACCESS                   = 33  // { int access(char *path, int amode); }
+	SYS_CHFLAGS                  = 34  // { int chflags(const char *path, u_long flags); }
+	SYS_FCHFLAGS                 = 35  // { int fchflags(int fd, u_long flags); }
+	SYS_SYNC                     = 36  // { int sync(void); }
+	SYS_KILL                     = 37  // { int kill(int pid, int signum); }
+	SYS_GETPPID                  = 39  // { pid_t getppid(void); }
+	SYS_DUP                      = 41  // { int dup(u_int fd); }
+	SYS_PIPE                     = 42  // { int pipe(void); }
+	SYS_GETEGID                  = 43  // { gid_t getegid(void); }
+	SYS_PROFIL                   = 44  // { int profil(caddr_t samples, size_t size, size_t offset, u_int scale); }
+	SYS_KTRACE                   = 45  // { int ktrace(const char *fname, int ops, int facs, int pid); }
+	SYS_GETGID                   = 47  // { gid_t getgid(void); }
+	SYS_GETLOGIN                 = 49  // { int getlogin(char *namebuf, u_int namelen); }
+	SYS_SETLOGIN                 = 50  // { int setlogin(char *namebuf); }
+	SYS_ACCT                     = 51  // { int acct(char *path); }
+	SYS_SIGALTSTACK              = 53  // { int sigaltstack(stack_t *ss, stack_t *oss); }
+	SYS_IOCTL                    = 54  // { int ioctl(int fd, u_long com, caddr_t data); }
+	SYS_REBOOT                   = 55  // { int reboot(int opt); }
+	SYS_REVOKE                   = 56  // { int revoke(char *path); }
+	SYS_SYMLINK                  = 57  // { int symlink(char *path, char *link); }
+	SYS_READLINK                 = 58  // { ssize_t readlink(char *path, char *buf, size_t count); }
+	SYS_EXECVE                   = 59  // { int execve(char *fname, char **argv, char **envv); }
+	SYS_UMASK                    = 60  // { int umask(int newmask); } umask umask_args int
+	SYS_CHROOT                   = 61  // { int chroot(char *path); }
+	SYS_MSYNC                    = 65  // { int msync(void *addr, size_t len, int flags); }
+	SYS_VFORK                    = 66  // { int vfork(void); }
+	SYS_SBRK                     = 69  // { int sbrk(int incr); }
+	SYS_SSTK                     = 70  // { int sstk(int incr); }
+	SYS_OVADVISE                 = 72  // { int ovadvise(int anom); } vadvise ovadvise_args int
+	SYS_MUNMAP                   = 73  // { int munmap(void *addr, size_t len); }
+	SYS_MPROTECT                 = 74  // { int mprotect(const void *addr, size_t len, int prot); }
+	SYS_MADVISE                  = 75  // { int madvise(void *addr, size_t len, int behav); }
+	SYS_MINCORE                  = 78  // { int mincore(const void *addr, size_t len, char *vec); }
+	SYS_GETGROUPS                = 79  // { int getgroups(u_int gidsetsize, gid_t *gidset); }
+	SYS_SETGROUPS                = 80  // { int setgroups(u_int gidsetsize, gid_t *gidset); }
+	SYS_GETPGRP                  = 81  // { int getpgrp(void); }
+	SYS_SETPGID                  = 82  // { int setpgid(int pid, int pgid); }
+	SYS_SETITIMER                = 83  // { int setitimer(u_int which, struct itimerval *itv, struct itimerval *oitv); }
+	SYS_SWAPON                   = 85  // { int swapon(char *name); }
+	SYS_GETITIMER                = 86  // { int getitimer(u_int which, struct itimerval *itv); }
+	SYS_GETDTABLESIZE            = 89  // { int getdtablesize(void); }
+	SYS_DUP2                     = 90  // { int dup2(u_int from, u_int to); }
+	SYS_FCNTL                    = 92  // { int fcntl(int fd, int cmd, long arg); }
+	SYS_SELECT                   = 93  // { int select(int nd, fd_set *in, fd_set *ou, fd_set *ex, struct timeval *tv); }
+	SYS_FSYNC                    = 95  // { int fsync(int fd); }
+	SYS_SETPRIORITY              = 96  // { int setpriority(int which, int who, int prio); }
+	SYS_SOCKET                   = 97  // { int socket(int domain, int type, int protocol); }
+	SYS_CONNECT                  = 98  // { int connect(int s, caddr_t name, int namelen); }
+	SYS_GETPRIORITY              = 100 // { int getpriority(int which, int who); }
+	SYS_BIND                     = 104 // { int bind(int s, caddr_t name, int namelen); }
+	SYS_SETSOCKOPT               = 105 // { int setsockopt(int s, int level, int name, caddr_t val, int valsize); }
+	SYS_LISTEN                   = 106 // { int listen(int s, int backlog); }
+	SYS_GETTIMEOFDAY             = 116 // { int gettimeofday(struct timeval *tp, struct timezone *tzp); }
+	SYS_GETRUSAGE                = 117 // { int getrusage(int who, struct rusage *rusage); }
+	SYS_GETSOCKOPT               = 118 // { int getsockopt(int s, int level, int name, caddr_t val, int *avalsize); }
+	SYS_READV                    = 120 // { int readv(int fd, struct iovec *iovp, u_int iovcnt); }
+	SYS_WRITEV                   = 121 // { int writev(int fd, struct iovec *iovp, u_int iovcnt); }
+	SYS_SETTIMEOFDAY             = 122 // { int settimeofday(struct timeval *tv, struct timezone *tzp); }
+	SYS_FCHOWN                   = 123 // { int fchown(int fd, int uid, int gid); }
+	SYS_FCHMOD                   = 124 // { int fchmod(int fd, int mode); }
+	SYS_SETREUID                 = 126 // { int setreuid(int ruid, int euid); }
+	SYS_SETREGID                 = 127 // { int setregid(int rgid, int egid); }
+	SYS_RENAME                   = 128 // { int rename(char *from, char *to); }
+	SYS_FLOCK                    = 131 // { int flock(int fd, int how); }
+	SYS_MKFIFO                   = 132 // { int mkfifo(char *path, int mode); }
+	SYS_SENDTO                   = 133 // { int sendto(int s, caddr_t buf, size_t len, int flags, caddr_t to, int tolen); }
+	SYS_SHUTDOWN                 = 134 // { int shutdown(int s, int how); }
+	SYS_SOCKETPAIR               = 135 // { int socketpair(int domain, int type, int protocol, int *rsv); }
+	SYS_MKDIR                    = 136 // { int mkdir(char *path, int mode); }
+	SYS_RMDIR                    = 137 // { int rmdir(char *path); }
+	SYS_UTIMES                   = 138 // { int utimes(char *path, struct timeval *tptr); }
+	SYS_ADJTIME                  = 140 // { int adjtime(struct timeval *delta, struct timeval *olddelta); }
+	SYS_SETSID                   = 147 // { int setsid(void); }
+	SYS_QUOTACTL                 = 148 // { int quotactl(char *path, int cmd, int uid, caddr_t arg); }
+	SYS_NLM_SYSCALL              = 154 // { int nlm_syscall(int debug_level, int grace_period, int addr_count, char **addrs); }
+	SYS_NFSSVC                   = 155 // { int nfssvc(int flag, caddr_t argp); }
+	SYS_LGETFH                   = 160 // { int lgetfh(char *fname, struct fhandle *fhp); }
+	SYS_GETFH                    = 161 // { int getfh(char *fname, struct fhandle *fhp); }
+	SYS_SYSARCH                  = 165 // { int sysarch(int op, char *parms); }
+	SYS_RTPRIO                   = 166 // { int rtprio(int function, pid_t pid, struct rtprio *rtp); }
+	SYS_SEMSYS                   = 169 // { int semsys(int which, int a2, int a3, int a4, int a5); }
+	SYS_MSGSYS                   = 170 // { int msgsys(int which, int a2, int a3, int a4, int a5, int a6); }
+	SYS_SHMSYS                   = 171 // { int shmsys(int which, int a2, int a3, int a4); }
+	SYS_SETFIB                   = 175 // { int setfib(int fibnum); }
+	SYS_NTP_ADJTIME              = 176 // { int ntp_adjtime(struct timex *tp); }
+	SYS_SETGID                   = 181 // { int setgid(gid_t gid); }
+	SYS_SETEGID                  = 182 // { int setegid(gid_t egid); }
+	SYS_SETEUID                  = 183 // { int seteuid(uid_t euid); }
+	SYS_STAT                     = 188 // { int stat(char *path, struct stat *ub); }
+	SYS_FSTAT                    = 189 // { int fstat(int fd, struct stat *sb); }
+	SYS_LSTAT                    = 190 // { int lstat(char *path, struct stat *ub); }
+	SYS_PATHCONF                 = 191 // { int pathconf(char *path, int name); }
+	SYS_FPATHCONF                = 192 // { int fpathconf(int fd, int name); }
+	SYS_GETRLIMIT                = 194 // { int getrlimit(u_int which, struct rlimit *rlp); } getrlimit __getrlimit_args int
+	SYS_SETRLIMIT                = 195 // { int setrlimit(u_int which, struct rlimit *rlp); } setrlimit __setrlimit_args int
+	SYS_GETDIRENTRIES            = 196 // { int getdirentries(int fd, char *buf, u_int count, long *basep); }
+	SYS___SYSCTL                 = 202 // { int __sysctl(int *name, u_int namelen, void *old, size_t *oldlenp, void *new, size_t newlen); } __sysctl sysctl_args int
+	SYS_MLOCK                    = 203 // { int mlock(const void *addr, size_t len); }
+	SYS_MUNLOCK                  = 204 // { int munlock(const void *addr, size_t len); }
+	SYS_UNDELETE                 = 205 // { int undelete(char *path); }
+	SYS_FUTIMES                  = 206 // { int futimes(int fd, struct timeval *tptr); }
+	SYS_GETPGID                  = 207 // { int getpgid(pid_t pid); }
+	SYS_POLL                     = 209 // { int poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_SEMGET                   = 221 // { int semget(key_t key, int nsems, int semflg); }
+	SYS_SEMOP                    = 222 // { int semop(int semid, struct sembuf *sops, size_t nsops); }
+	SYS_MSGGET                   = 225 // { int msgget(key_t key, int msgflg); }
+	SYS_MSGSND                   = 226 // { int msgsnd(int msqid, const void *msgp, size_t msgsz, int msgflg); }
+	SYS_MSGRCV                   = 227 // { int msgrcv(int msqid, void *msgp, size_t msgsz, long msgtyp, int msgflg); }
+	SYS_SHMAT                    = 228 // { int shmat(int shmid, const void *shmaddr, int shmflg); }
+	SYS_SHMDT                    = 230 // { int shmdt(const void *shmaddr); }
+	SYS_SHMGET                   = 231 // { int shmget(key_t key, size_t size, int shmflg); }
+	SYS_CLOCK_GETTIME            = 232 // { int clock_gettime(clockid_t clock_id, struct timespec *tp); }
+	SYS_CLOCK_SETTIME            = 233 // { int clock_settime( clockid_t clock_id, const struct timespec *tp); }
+	SYS_CLOCK_GETRES             = 234 // { int clock_getres(clockid_t clock_id, struct timespec *tp); }
+	SYS_KTIMER_CREATE            = 235 // { int ktimer_create(clockid_t clock_id, struct sigevent *evp, int *timerid); }
+	SYS_KTIMER_DELETE            = 236 // { int ktimer_delete(int timerid); }
+	SYS_KTIMER_SETTIME           = 237 // { int ktimer_settime(int timerid, int flags, const struct itimerspec *value, struct itimerspec *ovalue); }
+	SYS_KTIMER_GETTIME           = 238 // { int ktimer_gettime(int timerid, struct itimerspec *value); }
+	SYS_KTIMER_GETOVERRUN        = 239 // { int ktimer_getoverrun(int timerid); }
+	SYS_NANOSLEEP                = 240 // { int nanosleep(const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS_FFCLOCK_GETCOUNTER       = 241 // { int ffclock_getcounter(ffcounter *ffcount); }
+	SYS_FFCLOCK_SETESTIMATE      = 242 // { int ffclock_setestimate( struct ffclock_estimate *cest); }
+	SYS_FFCLOCK_GETESTIMATE      = 243 // { int ffclock_getestimate( struct ffclock_estimate *cest); }
+	SYS_CLOCK_NANOSLEEP          = 244 // { int clock_nanosleep(clockid_t clock_id, int flags, const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS_CLOCK_GETCPUCLOCKID2     = 247 // { int clock_getcpuclockid2(id_t id,int which, clockid_t *clock_id); }
+	SYS_NTP_GETTIME              = 248 // { int ntp_gettime(struct ntptimeval *ntvp); }
+	SYS_MINHERIT                 = 250 // { int minherit(void *addr, size_t len, int inherit); }
+	SYS_RFORK                    = 251 // { int rfork(int flags); }
+	SYS_OPENBSD_POLL             = 252 // { int openbsd_poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_ISSETUGID                = 253 // { int issetugid(void); }
+	SYS_LCHOWN                   = 254 // { int lchown(char *path, int uid, int gid); }
+	SYS_AIO_READ                 = 255 // { int aio_read(struct aiocb *aiocbp); }
+	SYS_AIO_WRITE                = 256 // { int aio_write(struct aiocb *aiocbp); }
+	SYS_LIO_LISTIO               = 257 // { int lio_listio(int mode, struct aiocb * const *acb_list, int nent, struct sigevent *sig); }
+	SYS_GETDENTS                 = 272 // { int getdents(int fd, char *buf, size_t count); }
+	SYS_LCHMOD                   = 274 // { int lchmod(char *path, mode_t mode); }
+	SYS_LUTIMES                  = 276 // { int lutimes(char *path, struct timeval *tptr); }
+	SYS_NSTAT                    = 278 // { int nstat(char *path, struct nstat *ub); }
+	SYS_NFSTAT                   = 279 // { int nfstat(int fd, struct nstat *sb); }
+	SYS_NLSTAT                   = 280 // { int nlstat(char *path, struct nstat *ub); }
+	SYS_PREADV                   = 289 // { ssize_t preadv(int fd, struct iovec *iovp, u_int iovcnt, off_t offset); }
+	SYS_PWRITEV                  = 290 // { ssize_t pwritev(int fd, struct iovec *iovp, u_int iovcnt, off_t offset); }
+	SYS_FHOPEN                   = 298 // { int fhopen(const struct fhandle *u_fhp, int flags); }
+	SYS_FHSTAT                   = 299 // { int fhstat(const struct fhandle *u_fhp, struct stat *sb); }
+	SYS_MODNEXT                  = 300 // { int modnext(int modid); }
+	SYS_MODSTAT                  = 301 // { int modstat(int modid, struct module_stat *stat); }
+	SYS_MODFNEXT                 = 302 // { int modfnext(int modid); }
+	SYS_MODFIND                  = 303 // { int modfind(const char *name); }
+	SYS_KLDLOAD                  = 304 // { int kldload(const char *file); }
+	SYS_KLDUNLOAD                = 305 // { int kldunload(int fileid); }
+	SYS_KLDFIND                  = 306 // { int kldfind(const char *file); }
+	SYS_KLDNEXT                  = 307 // { int kldnext(int fileid); }
+	SYS_KLDSTAT                  = 308 // { int kldstat(int fileid, struct kld_file_stat* stat); }
+	SYS_KLDFIRSTMOD              = 309 // { int kldfirstmod(int fileid); }
+	SYS_GETSID                   = 310 // { int getsid(pid_t pid); }
+	SYS_SETRESUID                = 311 // { int setresuid(uid_t ruid, uid_t euid, uid_t suid); }
+	SYS_SETRESGID                = 312 // { int setresgid(gid_t rgid, gid_t egid, gid_t sgid); }
+	SYS_AIO_RETURN               = 314 // { ssize_t aio_return(struct aiocb *aiocbp); }
+	SYS_AIO_SUSPEND              = 315 // { int aio_suspend( struct aiocb * const * aiocbp, int nent, const struct timespec *timeout); }
+	SYS_AIO_CANCEL               = 316 // { int aio_cancel(int fd, struct aiocb *aiocbp); }
+	SYS_AIO_ERROR                = 317 // { int aio_error(struct aiocb *aiocbp); }
+	SYS_YIELD                    = 321 // { int yield(void); }
+	SYS_MLOCKALL                 = 324 // { int mlockall(int how); }
+	SYS_MUNLOCKALL               = 325 // { int munlockall(void); }
+	SYS___GETCWD                 = 326 // { int __getcwd(char *buf, u_int buflen); }
+	SYS_SCHED_SETPARAM           = 327 // { int sched_setparam (pid_t pid, const struct sched_param *param); }
+	SYS_SCHED_GETPARAM           = 328 // { int sched_getparam (pid_t pid, struct sched_param *param); }
+	SYS_SCHED_SETSCHEDULER       = 329 // { int sched_setscheduler (pid_t pid, int policy, const struct sched_param *param); }
+	SYS_SCHED_GETSCHEDULER       = 330 // { int sched_getscheduler (pid_t pid); }
+	SYS_SCHED_YIELD              = 331 // { int sched_yield (void); }
+	SYS_SCHED_GET_PRIORITY_MAX   = 332 // { int sched_get_priority_max (int policy); }
+	SYS_SCHED_GET_PRIORITY_MIN   = 333 // { int sched_get_priority_min (int policy); }
+	SYS_SCHED_RR_GET_INTERVAL    = 334 // { int sched_rr_get_interval (pid_t pid, struct timespec *interval); }
+	SYS_UTRACE                   = 335 // { int utrace(const void *addr, size_t len); }
+	SYS_KLDSYM                   = 337 // { int kldsym(int fileid, int cmd, void *data); }
+	SYS_JAIL                     = 338 // { int jail(struct jail *jail); }
+	SYS_SIGPROCMASK              = 340 // { int sigprocmask(int how, const sigset_t *set, sigset_t *oset); }
+	SYS_SIGSUSPEND               = 341 // { int sigsuspend(const sigset_t *sigmask); }
+	SYS_SIGPENDING               = 343 // { int sigpending(sigset_t *set); }
+	SYS_SIGTIMEDWAIT             = 345 // { int sigtimedwait(const sigset_t *set, siginfo_t *info, const struct timespec *timeout); }
+	SYS_SIGWAITINFO              = 346 // { int sigwaitinfo(const sigset_t *set, siginfo_t *info); }
+	SYS___ACL_GET_FILE           = 347 // { int __acl_get_file(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_SET_FILE           = 348 // { int __acl_set_file(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_GET_FD             = 349 // { int __acl_get_fd(int filedes, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_SET_FD             = 350 // { int __acl_set_fd(int filedes, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_DELETE_FILE        = 351 // { int __acl_delete_file(const char *path, acl_type_t type); }
+	SYS___ACL_DELETE_FD          = 352 // { int __acl_delete_fd(int filedes, acl_type_t type); }
+	SYS___ACL_ACLCHECK_FILE      = 353 // { int __acl_aclcheck_file(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_ACLCHECK_FD        = 354 // { int __acl_aclcheck_fd(int filedes, acl_type_t type, struct acl *aclp); }
+	SYS_EXTATTRCTL               = 355 // { int extattrctl(const char *path, int cmd, const char *filename, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_FILE         = 356 // { ssize_t extattr_set_file( const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FILE         = 357 // { ssize_t extattr_get_file( const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FILE      = 358 // { int extattr_delete_file(const char *path, int attrnamespace, const char *attrname); }
+	SYS_AIO_WAITCOMPLETE         = 359 // { ssize_t aio_waitcomplete( struct aiocb **aiocbp, struct timespec *timeout); }
+	SYS_GETRESUID                = 360 // { int getresuid(uid_t *ruid, uid_t *euid, uid_t *suid); }
+	SYS_GETRESGID                = 361 // { int getresgid(gid_t *rgid, gid_t *egid, gid_t *sgid); }
+	SYS_KQUEUE                   = 362 // { int kqueue(void); }
+	SYS_KEVENT                   = 363 // { int kevent(int fd, struct kevent *changelist, int nchanges, struct kevent *eventlist, int nevents, const struct timespec *timeout); }
+	SYS_EXTATTR_SET_FD           = 371 // { ssize_t extattr_set_fd(int fd, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FD           = 372 // { ssize_t extattr_get_fd(int fd, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FD        = 373 // { int extattr_delete_fd(int fd, int attrnamespace, const char *attrname); }
+	SYS___SETUGID                = 374 // { int __setugid(int flag); }
+	SYS_EACCESS                  = 376 // { int eaccess(char *path, int amode); }
+	SYS_NMOUNT                   = 378 // { int nmount(struct iovec *iovp, unsigned int iovcnt, int flags); }
+	SYS___MAC_GET_PROC           = 384 // { int __mac_get_proc(struct mac *mac_p); }
+	SYS___MAC_SET_PROC           = 385 // { int __mac_set_proc(struct mac *mac_p); }
+	SYS___MAC_GET_FD             = 386 // { int __mac_get_fd(int fd, struct mac *mac_p); }
+	SYS___MAC_GET_FILE           = 387 // { int __mac_get_file(const char *path_p, struct mac *mac_p); }
+	SYS___MAC_SET_FD             = 388 // { int __mac_set_fd(int fd, struct mac *mac_p); }
+	SYS___MAC_SET_FILE           = 389 // { int __mac_set_file(const char *path_p, struct mac *mac_p); }
+	SYS_KENV                     = 390 // { int kenv(int what, const char *name, char *value, int len); }
+	SYS_LCHFLAGS                 = 391 // { int lchflags(const char *path, u_long flags); }
+	SYS_UUIDGEN                  = 392 // { int uuidgen(struct uuid *store, int count); }
+	SYS_SENDFILE                 = 393 // { int sendfile(int fd, int s, off_t offset, size_t nbytes, struct sf_hdtr *hdtr, off_t *sbytes, int flags); }
+	SYS_MAC_SYSCALL              = 394 // { int mac_syscall(const char *policy, int call, void *arg); }
+	SYS_GETFSSTAT                = 395 // { int getfsstat(struct statfs *buf, long bufsize, int mode); }
+	SYS_STATFS                   = 396 // { int statfs(char *path, struct statfs *buf); }
+	SYS_FSTATFS                  = 397 // { int fstatfs(int fd, struct statfs *buf); }
+	SYS_FHSTATFS                 = 398 // { int fhstatfs(const struct fhandle *u_fhp, struct statfs *buf); }
+	SYS_KSEM_CLOSE               = 400 // { int ksem_close(semid_t id); }
+	SYS_KSEM_POST                = 401 // { int ksem_post(semid_t id); }
+	SYS_KSEM_WAIT                = 402 // { int ksem_wait(semid_t id); }
+	SYS_KSEM_TRYWAIT             = 403 // { int ksem_trywait(semid_t id); }
+	SYS_KSEM_INIT                = 404 // { int ksem_init(semid_t *idp, unsigned int value); }
+	SYS_KSEM_OPEN                = 405 // { int ksem_open(semid_t *idp, const char *name, int oflag, mode_t mode, unsigned int value); }
+	SYS_KSEM_UNLINK              = 406 // { int ksem_unlink(const char *name); }
+	SYS_KSEM_GETVALUE            = 407 // { int ksem_getvalue(semid_t id, int *val); }
+	SYS_KSEM_DESTROY             = 408 // { int ksem_destroy(semid_t id); }
+	SYS___MAC_GET_PID            = 409 // { int __mac_get_pid(pid_t pid, struct mac *mac_p); }
+	SYS___MAC_GET_LINK           = 410 // { int __mac_get_link(const char *path_p, struct mac *mac_p); }
+	SYS___MAC_SET_LINK           = 411 // { int __mac_set_link(const char *path_p, struct mac *mac_p); }
+	SYS_EXTATTR_SET_LINK         = 412 // { ssize_t extattr_set_link( const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_LINK         = 413 // { ssize_t extattr_get_link( const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_LINK      = 414 // { int extattr_delete_link( const char *path, int attrnamespace, const char *attrname); }
+	SYS___MAC_EXECVE             = 415 // { int __mac_execve(char *fname, char **argv, char **envv, struct mac *mac_p); }
+	SYS_SIGACTION                = 416 // { int sigaction(int sig, const struct sigaction *act, struct sigaction *oact); }
+	SYS_SIGRETURN                = 417 // { int sigreturn( const struct __ucontext *sigcntxp); }
+	SYS_GETCONTEXT               = 421 // { int getcontext(struct __ucontext *ucp); }
+	SYS_SETCONTEXT               = 422 // { int setcontext( const struct __ucontext *ucp); }
+	SYS_SWAPCONTEXT              = 423 // { int swapcontext(struct __ucontext *oucp, const struct __ucontext *ucp); }
+	SYS_SWAPOFF                  = 424 // { int swapoff(const char *name); }
+	SYS___ACL_GET_LINK           = 425 // { int __acl_get_link(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_SET_LINK           = 426 // { int __acl_set_link(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS___ACL_DELETE_LINK        = 427 // { int __acl_delete_link(const char *path, acl_type_t type); }
+	SYS___ACL_ACLCHECK_LINK      = 428 // { int __acl_aclcheck_link(const char *path, acl_type_t type, struct acl *aclp); }
+	SYS_SIGWAIT                  = 429 // { int sigwait(const sigset_t *set, int *sig); }
+	SYS_THR_CREATE               = 430 // { int thr_create(ucontext_t *ctx, long *id, int flags); }
+	SYS_THR_EXIT                 = 431 // { void thr_exit(long *state); }
+	SYS_THR_SELF                 = 432 // { int thr_self(long *id); }
+	SYS_THR_KILL                 = 433 // { int thr_kill(long id, int sig); }
+	SYS_JAIL_ATTACH              = 436 // { int jail_attach(int jid); }
+	SYS_EXTATTR_LIST_FD          = 437 // { ssize_t extattr_list_fd(int fd, int attrnamespace, void *data, size_t nbytes); }
+	SYS_EXTATTR_LIST_FILE        = 438 // { ssize_t extattr_list_file( const char *path, int attrnamespace, void *data, size_t nbytes); }
+	SYS_EXTATTR_LIST_LINK        = 439 // { ssize_t extattr_list_link( const char *path, int attrnamespace, void *data, size_t nbytes); }
+	SYS_KSEM_TIMEDWAIT           = 441 // { int ksem_timedwait(semid_t id, const struct timespec *abstime); }
+	SYS_THR_SUSPEND              = 442 // { int thr_suspend( const struct timespec *timeout); }
+	SYS_THR_WAKE                 = 443 // { int thr_wake(long id); }
+	SYS_KLDUNLOADF               = 444 // { int kldunloadf(int fileid, int flags); }
+	SYS_AUDIT                    = 445 // { int audit(const void *record, u_int length); }
+	SYS_AUDITON                  = 446 // { int auditon(int cmd, void *data, u_int length); }
+	SYS_GETAUID                  = 447 // { int getauid(uid_t *auid); }
+	SYS_SETAUID                  = 448 // { int setauid(uid_t *auid); }
+	SYS_GETAUDIT                 = 449 // { int getaudit(struct auditinfo *auditinfo); }
+	SYS_SETAUDIT                 = 450 // { int setaudit(struct auditinfo *auditinfo); }
+	SYS_GETAUDIT_ADDR            = 451 // { int getaudit_addr( struct auditinfo_addr *auditinfo_addr, u_int length); }
+	SYS_SETAUDIT_ADDR            = 452 // { int setaudit_addr( struct auditinfo_addr *auditinfo_addr, u_int length); }
+	SYS_AUDITCTL                 = 453 // { int auditctl(char *path); }
+	SYS__UMTX_OP                 = 454 // { int _umtx_op(void *obj, int op, u_long val, void *uaddr1, void *uaddr2); }
+	SYS_THR_NEW                  = 455 // { int thr_new(struct thr_param *param, int param_size); }
+	SYS_SIGQUEUE                 = 456 // { int sigqueue(pid_t pid, int signum, void *value); }
+	SYS_KMQ_OPEN                 = 457 // { int kmq_open(const char *path, int flags, mode_t mode, const struct mq_attr *attr); }
+	SYS_KMQ_SETATTR              = 458 // { int kmq_setattr(int mqd,		const struct mq_attr *attr,		struct mq_attr *oattr); }
+	SYS_KMQ_TIMEDRECEIVE         = 459 // { int kmq_timedreceive(int mqd,	char *msg_ptr, size_t msg_len,	unsigned *msg_prio,			const struct timespec *abs_timeout); }
+	SYS_KMQ_TIMEDSEND            = 460 // { int kmq_timedsend(int mqd,		const char *msg_ptr, size_t msg_len,unsigned msg_prio,			const struct timespec *abs_timeout);}
+	SYS_KMQ_NOTIFY               = 461 // { int kmq_notify(int mqd,		const struct sigevent *sigev); }
+	SYS_KMQ_UNLINK               = 462 // { int kmq_unlink(const char *path); }
+	SYS_ABORT2                   = 463 // { int abort2(const char *why, int nargs, void **args); }
+	SYS_THR_SET_NAME             = 464 // { int thr_set_name(long id, const char *name); }
+	SYS_AIO_FSYNC                = 465 // { int aio_fsync(int op, struct aiocb *aiocbp); }
+	SYS_RTPRIO_THREAD            = 466 // { int rtprio_thread(int function, lwpid_t lwpid, struct rtprio *rtp); }
+	SYS_SCTP_PEELOFF             = 471 // { int sctp_peeloff(int sd, uint32_t name); }
+	SYS_SCTP_GENERIC_SENDMSG     = 472 // { int sctp_generic_sendmsg(int sd, caddr_t msg, int mlen, caddr_t to, __socklen_t tolen, struct sctp_sndrcvinfo *sinfo, int flags); }
+	SYS_SCTP_GENERIC_SENDMSG_IOV = 473 // { int sctp_generic_sendmsg_iov(int sd, struct iovec *iov, int iovlen, caddr_t to, __socklen_t tolen, struct sctp_sndrcvinfo *sinfo, int flags); }
+	SYS_SCTP_GENERIC_RECVMSG     = 474 // { int sctp_generic_recvmsg(int sd, struct iovec *iov, int iovlen, struct sockaddr * from, __socklen_t *fromlenaddr, struct sctp_sndrcvinfo *sinfo, int *msg_flags); }
+	SYS_PREAD                    = 475 // { ssize_t pread(int fd, void *buf, size_t nbyte, off_t offset); }
+	SYS_PWRITE                   = 476 // { ssize_t pwrite(int fd, const void *buf, size_t nbyte, off_t offset); }
+	SYS_MMAP                     = 477 // { caddr_t mmap(caddr_t addr, size_t len, int prot, int flags, int fd, off_t pos); }
+	SYS_LSEEK                    = 478 // { off_t lseek(int fd, off_t offset, int whence); }
+	SYS_TRUNCATE                 = 479 // { int truncate(char *path, off_t length); }
+	SYS_FTRUNCATE                = 480 // { int ftruncate(int fd, off_t length); }
+	SYS_THR_KILL2                = 481 // { int thr_kill2(pid_t pid, long id, int sig); }
+	SYS_SHM_OPEN                 = 482 // { int shm_open(const char *path, int flags, mode_t mode); }
+	SYS_SHM_UNLINK               = 483 // { int shm_unlink(const char *path); }
+	SYS_CPUSET                   = 484 // { int cpuset(cpusetid_t *setid); }
+	SYS_CPUSET_SETID             = 485 // { int cpuset_setid(cpuwhich_t which, id_t id, cpusetid_t setid); }
+	SYS_CPUSET_GETID             = 486 // { int cpuset_getid(cpulevel_t level, cpuwhich_t which, id_t id, cpusetid_t *setid); }
+	SYS_CPUSET_GETAFFINITY       = 487 // { int cpuset_getaffinity(cpulevel_t level, cpuwhich_t which, id_t id, size_t cpusetsize, cpuset_t *mask); }
+	SYS_CPUSET_SETAFFINITY       = 488 // { int cpuset_setaffinity(cpulevel_t level, cpuwhich_t which, id_t id, size_t cpusetsize, const cpuset_t *mask); }
+	SYS_FACCESSAT                = 489 // { int faccessat(int fd, char *path, int amode, int flag); }
+	SYS_FCHMODAT                 = 490 // { int fchmodat(int fd, char *path, mode_t mode, int flag); }
+	SYS_FCHOWNAT                 = 491 // { int fchownat(int fd, char *path, uid_t uid, gid_t gid, int flag); }
+	SYS_FEXECVE                  = 492 // { int fexecve(int fd, char **argv, char **envv); }
+	SYS_FSTATAT                  = 493 // { int fstatat(int fd, char *path, struct stat *buf, int flag); }
+	SYS_FUTIMESAT                = 494 // { int futimesat(int fd, char *path, struct timeval *times); }
+	SYS_LINKAT                   = 495 // { int linkat(int fd1, char *path1, int fd2, char *path2, int flag); }
+	SYS_MKDIRAT                  = 496 // { int mkdirat(int fd, char *path, mode_t mode); }
+	SYS_MKFIFOAT                 = 497 // { int mkfifoat(int fd, char *path, mode_t mode); }
+	SYS_MKNODAT                  = 498 // { int mknodat(int fd, char *path, mode_t mode, dev_t dev); }
+	SYS_OPENAT                   = 499 // { int openat(int fd, char *path, int flag, mode_t mode); }
+	SYS_READLINKAT               = 500 // { int readlinkat(int fd, char *path, char *buf, size_t bufsize); }
+	SYS_RENAMEAT                 = 501 // { int renameat(int oldfd, char *old, int newfd, char *new); }
+	SYS_SYMLINKAT                = 502 // { int symlinkat(char *path1, int fd, char *path2); }
+	SYS_UNLINKAT                 = 503 // { int unlinkat(int fd, char *path, int flag); }
+	SYS_POSIX_OPENPT             = 504 // { int posix_openpt(int flags); }
+	SYS_GSSD_SYSCALL             = 505 // { int gssd_syscall(char *path); }
+	SYS_JAIL_GET                 = 506 // { int jail_get(struct iovec *iovp, unsigned int iovcnt, int flags); }
+	SYS_JAIL_SET                 = 507 // { int jail_set(struct iovec *iovp, unsigned int iovcnt, int flags); }
+	SYS_JAIL_REMOVE              = 508 // { int jail_remove(int jid); }
+	SYS_CLOSEFROM                = 509 // { int closefrom(int lowfd); }
+	SYS___SEMCTL                 = 510 // { int __semctl(int semid, int semnum, int cmd, union semun *arg); }
+	SYS_MSGCTL                   = 511 // { int msgctl(int msqid, int cmd, struct msqid_ds *buf); }
+	SYS_SHMCTL                   = 512 // { int shmctl(int shmid, int cmd, struct shmid_ds *buf); }
+	SYS_LPATHCONF                = 513 // { int lpathconf(char *path, int name); }
+	SYS___CAP_RIGHTS_GET         = 515 // { int __cap_rights_get(int version, int fd, cap_rights_t *rightsp); }
+	SYS_CAP_ENTER                = 516 // { int cap_enter(void); }
+	SYS_CAP_GETMODE              = 517 // { int cap_getmode(u_int *modep); }
+	SYS_PDFORK                   = 518 // { int pdfork(int *fdp, int flags); }
+	SYS_PDKILL                   = 519 // { int pdkill(int fd, int signum); }
+	SYS_PDGETPID                 = 520 // { int pdgetpid(int fd, pid_t *pidp); }
+	SYS_PSELECT                  = 522 // { int pselect(int nd, fd_set *in, fd_set *ou, fd_set *ex, const struct timespec *ts, const sigset_t *sm); }
+	SYS_GETLOGINCLASS            = 523 // { int getloginclass(char *namebuf, size_t namelen); }
+	SYS_SETLOGINCLASS            = 524 // { int setloginclass(const char *namebuf); }
+	SYS_RCTL_GET_RACCT           = 525 // { int rctl_get_racct(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_RCTL_GET_RULES           = 526 // { int rctl_get_rules(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_RCTL_GET_LIMITS          = 527 // { int rctl_get_limits(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_RCTL_ADD_RULE            = 528 // { int rctl_add_rule(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_RCTL_REMOVE_RULE         = 529 // { int rctl_remove_rule(const void *inbufp, size_t inbuflen, void *outbufp, size_t outbuflen); }
+	SYS_POSIX_FALLOCATE          = 530 // { int posix_fallocate(int fd, off_t offset, off_t len); }
+	SYS_POSIX_FADVISE            = 531 // { int posix_fadvise(int fd, off_t offset, off_t len, int advice); }
+	SYS_WAIT6                    = 532 // { int wait6(idtype_t idtype, id_t id, int *status, int options, struct __wrusage *wrusage, siginfo_t *info); }
+	SYS_CAP_RIGHTS_LIMIT         = 533 // { int cap_rights_limit(int fd, cap_rights_t *rightsp); }
+	SYS_CAP_IOCTLS_LIMIT         = 534 // { int cap_ioctls_limit(int fd, const u_long *cmds, size_t ncmds); }
+	SYS_CAP_IOCTLS_GET           = 535 // { ssize_t cap_ioctls_get(int fd, u_long *cmds, size_t maxcmds); }
+	SYS_CAP_FCNTLS_LIMIT         = 536 // { int cap_fcntls_limit(int fd, uint32_t fcntlrights); }
+	SYS_CAP_FCNTLS_GET           = 537 // { int cap_fcntls_get(int fd, uint32_t *fcntlrightsp); }
+	SYS_BINDAT                   = 538 // { int bindat(int fd, int s, caddr_t name, int namelen); }
+	SYS_CONNECTAT                = 539 // { int connectat(int fd, int s, caddr_t name, int namelen); }
+	SYS_CHFLAGSAT                = 540 // { int chflagsat(int fd, const char *path, u_long flags, int atflag); }
+	SYS_ACCEPT4                  = 541 // { int accept4(int s, struct sockaddr * __restrict name, __socklen_t * __restrict anamelen, int flags); }
+	SYS_PIPE2                    = 542 // { int pipe2(int *fildes, int flags); }
+	SYS_AIO_MLOCK                = 543 // { int aio_mlock(struct aiocb *aiocbp); }
+	SYS_PROCCTL                  = 544 // { int procctl(idtype_t idtype, id_t id, int com, void *data); }
+	SYS_PPOLL                    = 545 // { int ppoll(struct pollfd *fds, u_int nfds, const struct timespec *ts, const sigset_t *set); }
+	SYS_FUTIMENS                 = 546 // { int futimens(int fd, struct timespec *times); }
+	SYS_UTIMENSAT                = 547 // { int utimensat(int fd, char *path, struct timespec *times, int flag); }
+	SYS_NUMA_GETAFFINITY         = 548 // { int numa_getaffinity(cpuwhich_t which, id_t id, struct vm_domain_policy_entry *policy); }
+	SYS_NUMA_SETAFFINITY         = 549 // { int numa_setaffinity(cpuwhich_t which, id_t id, const struct vm_domain_policy_entry *policy); }
+	SYS_FDATASYNC                = 550 // { int fdatasync(int fd); }
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_386.go
new file mode 100644
index 000000000..a597e061c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_386.go
@@ -0,0 +1,437 @@
+// go run linux/mksysnum.go -Wall -Werror -static -I/tmp/include -m32 /tmp/include/asm/unistd.h
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build 386,linux
+
+package unix
+
+const (
+	SYS_RESTART_SYSCALL              = 0
+	SYS_EXIT                         = 1
+	SYS_FORK                         = 2
+	SYS_READ                         = 3
+	SYS_WRITE                        = 4
+	SYS_OPEN                         = 5
+	SYS_CLOSE                        = 6
+	SYS_WAITPID                      = 7
+	SYS_CREAT                        = 8
+	SYS_LINK                         = 9
+	SYS_UNLINK                       = 10
+	SYS_EXECVE                       = 11
+	SYS_CHDIR                        = 12
+	SYS_TIME                         = 13
+	SYS_MKNOD                        = 14
+	SYS_CHMOD                        = 15
+	SYS_LCHOWN                       = 16
+	SYS_BREAK                        = 17
+	SYS_OLDSTAT                      = 18
+	SYS_LSEEK                        = 19
+	SYS_GETPID                       = 20
+	SYS_MOUNT                        = 21
+	SYS_UMOUNT                       = 22
+	SYS_SETUID                       = 23
+	SYS_GETUID                       = 24
+	SYS_STIME                        = 25
+	SYS_PTRACE                       = 26
+	SYS_ALARM                        = 27
+	SYS_OLDFSTAT                     = 28
+	SYS_PAUSE                        = 29
+	SYS_UTIME                        = 30
+	SYS_STTY                         = 31
+	SYS_GTTY                         = 32
+	SYS_ACCESS                       = 33
+	SYS_NICE                         = 34
+	SYS_FTIME                        = 35
+	SYS_SYNC                         = 36
+	SYS_KILL                         = 37
+	SYS_RENAME                       = 38
+	SYS_MKDIR                        = 39
+	SYS_RMDIR                        = 40
+	SYS_DUP                          = 41
+	SYS_PIPE                         = 42
+	SYS_TIMES                        = 43
+	SYS_PROF                         = 44
+	SYS_BRK                          = 45
+	SYS_SETGID                       = 46
+	SYS_GETGID                       = 47
+	SYS_SIGNAL                       = 48
+	SYS_GETEUID                      = 49
+	SYS_GETEGID                      = 50
+	SYS_ACCT                         = 51
+	SYS_UMOUNT2                      = 52
+	SYS_LOCK                         = 53
+	SYS_IOCTL                        = 54
+	SYS_FCNTL                        = 55
+	SYS_MPX                          = 56
+	SYS_SETPGID                      = 57
+	SYS_ULIMIT                       = 58
+	SYS_OLDOLDUNAME                  = 59
+	SYS_UMASK                        = 60
+	SYS_CHROOT                       = 61
+	SYS_USTAT                        = 62
+	SYS_DUP2                         = 63
+	SYS_GETPPID                      = 64
+	SYS_GETPGRP                      = 65
+	SYS_SETSID                       = 66
+	SYS_SIGACTION                    = 67
+	SYS_SGETMASK                     = 68
+	SYS_SSETMASK                     = 69
+	SYS_SETREUID                     = 70
+	SYS_SETREGID                     = 71
+	SYS_SIGSUSPEND                   = 72
+	SYS_SIGPENDING                   = 73
+	SYS_SETHOSTNAME                  = 74
+	SYS_SETRLIMIT                    = 75
+	SYS_GETRLIMIT                    = 76
+	SYS_GETRUSAGE                    = 77
+	SYS_GETTIMEOFDAY                 = 78
+	SYS_SETTIMEOFDAY                 = 79
+	SYS_GETGROUPS                    = 80
+	SYS_SETGROUPS                    = 81
+	SYS_SELECT                       = 82
+	SYS_SYMLINK                      = 83
+	SYS_OLDLSTAT                     = 84
+	SYS_READLINK                     = 85
+	SYS_USELIB                       = 86
+	SYS_SWAPON                       = 87
+	SYS_REBOOT                       = 88
+	SYS_READDIR                      = 89
+	SYS_MMAP                         = 90
+	SYS_MUNMAP                       = 91
+	SYS_TRUNCATE                     = 92
+	SYS_FTRUNCATE                    = 93
+	SYS_FCHMOD                       = 94
+	SYS_FCHOWN                       = 95
+	SYS_GETPRIORITY                  = 96
+	SYS_SETPRIORITY                  = 97
+	SYS_PROFIL                       = 98
+	SYS_STATFS                       = 99
+	SYS_FSTATFS                      = 100
+	SYS_IOPERM                       = 101
+	SYS_SOCKETCALL                   = 102
+	SYS_SYSLOG                       = 103
+	SYS_SETITIMER                    = 104
+	SYS_GETITIMER                    = 105
+	SYS_STAT                         = 106
+	SYS_LSTAT                        = 107
+	SYS_FSTAT                        = 108
+	SYS_OLDUNAME                     = 109
+	SYS_IOPL                         = 110
+	SYS_VHANGUP                      = 111
+	SYS_IDLE                         = 112
+	SYS_VM86OLD                      = 113
+	SYS_WAIT4                        = 114
+	SYS_SWAPOFF                      = 115
+	SYS_SYSINFO                      = 116
+	SYS_IPC                          = 117
+	SYS_FSYNC                        = 118
+	SYS_SIGRETURN                    = 119
+	SYS_CLONE                        = 120
+	SYS_SETDOMAINNAME                = 121
+	SYS_UNAME                        = 122
+	SYS_MODIFY_LDT                   = 123
+	SYS_ADJTIMEX                     = 124
+	SYS_MPROTECT                     = 125
+	SYS_SIGPROCMASK                  = 126
+	SYS_CREATE_MODULE                = 127
+	SYS_INIT_MODULE                  = 128
+	SYS_DELETE_MODULE                = 129
+	SYS_GET_KERNEL_SYMS              = 130
+	SYS_QUOTACTL                     = 131
+	SYS_GETPGID                      = 132
+	SYS_FCHDIR                       = 133
+	SYS_BDFLUSH                      = 134
+	SYS_SYSFS                        = 135
+	SYS_PERSONALITY                  = 136
+	SYS_AFS_SYSCALL                  = 137
+	SYS_SETFSUID                     = 138
+	SYS_SETFSGID                     = 139
+	SYS__LLSEEK                      = 140
+	SYS_GETDENTS                     = 141
+	SYS__NEWSELECT                   = 142
+	SYS_FLOCK                        = 143
+	SYS_MSYNC                        = 144
+	SYS_READV                        = 145
+	SYS_WRITEV                       = 146
+	SYS_GETSID                       = 147
+	SYS_FDATASYNC                    = 148
+	SYS__SYSCTL                      = 149
+	SYS_MLOCK                        = 150
+	SYS_MUNLOCK                      = 151
+	SYS_MLOCKALL                     = 152
+	SYS_MUNLOCKALL                   = 153
+	SYS_SCHED_SETPARAM               = 154
+	SYS_SCHED_GETPARAM               = 155
+	SYS_SCHED_SETSCHEDULER           = 156
+	SYS_SCHED_GETSCHEDULER           = 157
+	SYS_SCHED_YIELD                  = 158
+	SYS_SCHED_GET_PRIORITY_MAX       = 159
+	SYS_SCHED_GET_PRIORITY_MIN       = 160
+	SYS_SCHED_RR_GET_INTERVAL        = 161
+	SYS_NANOSLEEP                    = 162
+	SYS_MREMAP                       = 163
+	SYS_SETRESUID                    = 164
+	SYS_GETRESUID                    = 165
+	SYS_VM86                         = 166
+	SYS_QUERY_MODULE                 = 167
+	SYS_POLL                         = 168
+	SYS_NFSSERVCTL                   = 169
+	SYS_SETRESGID                    = 170
+	SYS_GETRESGID                    = 171
+	SYS_PRCTL                        = 172
+	SYS_RT_SIGRETURN                 = 173
+	SYS_RT_SIGACTION                 = 174
+	SYS_RT_SIGPROCMASK               = 175
+	SYS_RT_SIGPENDING                = 176
+	SYS_RT_SIGTIMEDWAIT              = 177
+	SYS_RT_SIGQUEUEINFO              = 178
+	SYS_RT_SIGSUSPEND                = 179
+	SYS_PREAD64                      = 180
+	SYS_PWRITE64                     = 181
+	SYS_CHOWN                        = 182
+	SYS_GETCWD                       = 183
+	SYS_CAPGET                       = 184
+	SYS_CAPSET                       = 185
+	SYS_SIGALTSTACK                  = 186
+	SYS_SENDFILE                     = 187
+	SYS_GETPMSG                      = 188
+	SYS_PUTPMSG                      = 189
+	SYS_VFORK                        = 190
+	SYS_UGETRLIMIT                   = 191
+	SYS_MMAP2                        = 192
+	SYS_TRUNCATE64                   = 193
+	SYS_FTRUNCATE64                  = 194
+	SYS_STAT64                       = 195
+	SYS_LSTAT64                      = 196
+	SYS_FSTAT64                      = 197
+	SYS_LCHOWN32                     = 198
+	SYS_GETUID32                     = 199
+	SYS_GETGID32                     = 200
+	SYS_GETEUID32                    = 201
+	SYS_GETEGID32                    = 202
+	SYS_SETREUID32                   = 203
+	SYS_SETREGID32                   = 204
+	SYS_GETGROUPS32                  = 205
+	SYS_SETGROUPS32                  = 206
+	SYS_FCHOWN32                     = 207
+	SYS_SETRESUID32                  = 208
+	SYS_GETRESUID32                  = 209
+	SYS_SETRESGID32                  = 210
+	SYS_GETRESGID32                  = 211
+	SYS_CHOWN32                      = 212
+	SYS_SETUID32                     = 213
+	SYS_SETGID32                     = 214
+	SYS_SETFSUID32                   = 215
+	SYS_SETFSGID32                   = 216
+	SYS_PIVOT_ROOT                   = 217
+	SYS_MINCORE                      = 218
+	SYS_MADVISE                      = 219
+	SYS_GETDENTS64                   = 220
+	SYS_FCNTL64                      = 221
+	SYS_GETTID                       = 224
+	SYS_READAHEAD                    = 225
+	SYS_SETXATTR                     = 226
+	SYS_LSETXATTR                    = 227
+	SYS_FSETXATTR                    = 228
+	SYS_GETXATTR                     = 229
+	SYS_LGETXATTR                    = 230
+	SYS_FGETXATTR                    = 231
+	SYS_LISTXATTR                    = 232
+	SYS_LLISTXATTR                   = 233
+	SYS_FLISTXATTR                   = 234
+	SYS_REMOVEXATTR                  = 235
+	SYS_LREMOVEXATTR                 = 236
+	SYS_FREMOVEXATTR                 = 237
+	SYS_TKILL                        = 238
+	SYS_SENDFILE64                   = 239
+	SYS_FUTEX                        = 240
+	SYS_SCHED_SETAFFINITY            = 241
+	SYS_SCHED_GETAFFINITY            = 242
+	SYS_SET_THREAD_AREA              = 243
+	SYS_GET_THREAD_AREA              = 244
+	SYS_IO_SETUP                     = 245
+	SYS_IO_DESTROY                   = 246
+	SYS_IO_GETEVENTS                 = 247
+	SYS_IO_SUBMIT                    = 248
+	SYS_IO_CANCEL                    = 249
+	SYS_FADVISE64                    = 250
+	SYS_EXIT_GROUP                   = 252
+	SYS_LOOKUP_DCOOKIE               = 253
+	SYS_EPOLL_CREATE                 = 254
+	SYS_EPOLL_CTL                    = 255
+	SYS_EPOLL_WAIT                   = 256
+	SYS_REMAP_FILE_PAGES             = 257
+	SYS_SET_TID_ADDRESS              = 258
+	SYS_TIMER_CREATE                 = 259
+	SYS_TIMER_SETTIME                = 260
+	SYS_TIMER_GETTIME                = 261
+	SYS_TIMER_GETOVERRUN             = 262
+	SYS_TIMER_DELETE                 = 263
+	SYS_CLOCK_SETTIME                = 264
+	SYS_CLOCK_GETTIME                = 265
+	SYS_CLOCK_GETRES                 = 266
+	SYS_CLOCK_NANOSLEEP              = 267
+	SYS_STATFS64                     = 268
+	SYS_FSTATFS64                    = 269
+	SYS_TGKILL                       = 270
+	SYS_UTIMES                       = 271
+	SYS_FADVISE64_64                 = 272
+	SYS_VSERVER                      = 273
+	SYS_MBIND                        = 274
+	SYS_GET_MEMPOLICY                = 275
+	SYS_SET_MEMPOLICY                = 276
+	SYS_MQ_OPEN                      = 277
+	SYS_MQ_UNLINK                    = 278
+	SYS_MQ_TIMEDSEND                 = 279
+	SYS_MQ_TIMEDRECEIVE              = 280
+	SYS_MQ_NOTIFY                    = 281
+	SYS_MQ_GETSETATTR                = 282
+	SYS_KEXEC_LOAD                   = 283
+	SYS_WAITID                       = 284
+	SYS_ADD_KEY                      = 286
+	SYS_REQUEST_KEY                  = 287
+	SYS_KEYCTL                       = 288
+	SYS_IOPRIO_SET                   = 289
+	SYS_IOPRIO_GET                   = 290
+	SYS_INOTIFY_INIT                 = 291
+	SYS_INOTIFY_ADD_WATCH            = 292
+	SYS_INOTIFY_RM_WATCH             = 293
+	SYS_MIGRATE_PAGES                = 294
+	SYS_OPENAT                       = 295
+	SYS_MKDIRAT                      = 296
+	SYS_MKNODAT                      = 297
+	SYS_FCHOWNAT                     = 298
+	SYS_FUTIMESAT                    = 299
+	SYS_FSTATAT64                    = 300
+	SYS_UNLINKAT                     = 301
+	SYS_RENAMEAT                     = 302
+	SYS_LINKAT                       = 303
+	SYS_SYMLINKAT                    = 304
+	SYS_READLINKAT                   = 305
+	SYS_FCHMODAT                     = 306
+	SYS_FACCESSAT                    = 307
+	SYS_PSELECT6                     = 308
+	SYS_PPOLL                        = 309
+	SYS_UNSHARE                      = 310
+	SYS_SET_ROBUST_LIST              = 311
+	SYS_GET_ROBUST_LIST              = 312
+	SYS_SPLICE                       = 313
+	SYS_SYNC_FILE_RANGE              = 314
+	SYS_TEE                          = 315
+	SYS_VMSPLICE                     = 316
+	SYS_MOVE_PAGES                   = 317
+	SYS_GETCPU                       = 318
+	SYS_EPOLL_PWAIT                  = 319
+	SYS_UTIMENSAT                    = 320
+	SYS_SIGNALFD                     = 321
+	SYS_TIMERFD_CREATE               = 322
+	SYS_EVENTFD                      = 323
+	SYS_FALLOCATE                    = 324
+	SYS_TIMERFD_SETTIME              = 325
+	SYS_TIMERFD_GETTIME              = 326
+	SYS_SIGNALFD4                    = 327
+	SYS_EVENTFD2                     = 328
+	SYS_EPOLL_CREATE1                = 329
+	SYS_DUP3                         = 330
+	SYS_PIPE2                        = 331
+	SYS_INOTIFY_INIT1                = 332
+	SYS_PREADV                       = 333
+	SYS_PWRITEV                      = 334
+	SYS_RT_TGSIGQUEUEINFO            = 335
+	SYS_PERF_EVENT_OPEN              = 336
+	SYS_RECVMMSG                     = 337
+	SYS_FANOTIFY_INIT                = 338
+	SYS_FANOTIFY_MARK                = 339
+	SYS_PRLIMIT64                    = 340
+	SYS_NAME_TO_HANDLE_AT            = 341
+	SYS_OPEN_BY_HANDLE_AT            = 342
+	SYS_CLOCK_ADJTIME                = 343
+	SYS_SYNCFS                       = 344
+	SYS_SENDMMSG                     = 345
+	SYS_SETNS                        = 346
+	SYS_PROCESS_VM_READV             = 347
+	SYS_PROCESS_VM_WRITEV            = 348
+	SYS_KCMP                         = 349
+	SYS_FINIT_MODULE                 = 350
+	SYS_SCHED_SETATTR                = 351
+	SYS_SCHED_GETATTR                = 352
+	SYS_RENAMEAT2                    = 353
+	SYS_SECCOMP                      = 354
+	SYS_GETRANDOM                    = 355
+	SYS_MEMFD_CREATE                 = 356
+	SYS_BPF                          = 357
+	SYS_EXECVEAT                     = 358
+	SYS_SOCKET                       = 359
+	SYS_SOCKETPAIR                   = 360
+	SYS_BIND                         = 361
+	SYS_CONNECT                      = 362
+	SYS_LISTEN                       = 363
+	SYS_ACCEPT4                      = 364
+	SYS_GETSOCKOPT                   = 365
+	SYS_SETSOCKOPT                   = 366
+	SYS_GETSOCKNAME                  = 367
+	SYS_GETPEERNAME                  = 368
+	SYS_SENDTO                       = 369
+	SYS_SENDMSG                      = 370
+	SYS_RECVFROM                     = 371
+	SYS_RECVMSG                      = 372
+	SYS_SHUTDOWN                     = 373
+	SYS_USERFAULTFD                  = 374
+	SYS_MEMBARRIER                   = 375
+	SYS_MLOCK2                       = 376
+	SYS_COPY_FILE_RANGE              = 377
+	SYS_PREADV2                      = 378
+	SYS_PWRITEV2                     = 379
+	SYS_PKEY_MPROTECT                = 380
+	SYS_PKEY_ALLOC                   = 381
+	SYS_PKEY_FREE                    = 382
+	SYS_STATX                        = 383
+	SYS_ARCH_PRCTL                   = 384
+	SYS_IO_PGETEVENTS                = 385
+	SYS_RSEQ                         = 386
+	SYS_SEMGET                       = 393
+	SYS_SEMCTL                       = 394
+	SYS_SHMGET                       = 395
+	SYS_SHMCTL                       = 396
+	SYS_SHMAT                        = 397
+	SYS_SHMDT                        = 398
+	SYS_MSGGET                       = 399
+	SYS_MSGSND                       = 400
+	SYS_MSGRCV                       = 401
+	SYS_MSGCTL                       = 402
+	SYS_CLOCK_GETTIME64              = 403
+	SYS_CLOCK_SETTIME64              = 404
+	SYS_CLOCK_ADJTIME64              = 405
+	SYS_CLOCK_GETRES_TIME64          = 406
+	SYS_CLOCK_NANOSLEEP_TIME64       = 407
+	SYS_TIMER_GETTIME64              = 408
+	SYS_TIMER_SETTIME64              = 409
+	SYS_TIMERFD_GETTIME64            = 410
+	SYS_TIMERFD_SETTIME64            = 411
+	SYS_UTIMENSAT_TIME64             = 412
+	SYS_PSELECT6_TIME64              = 413
+	SYS_PPOLL_TIME64                 = 414
+	SYS_IO_PGETEVENTS_TIME64         = 416
+	SYS_RECVMMSG_TIME64              = 417
+	SYS_MQ_TIMEDSEND_TIME64          = 418
+	SYS_MQ_TIMEDRECEIVE_TIME64       = 419
+	SYS_SEMTIMEDOP_TIME64            = 420
+	SYS_RT_SIGTIMEDWAIT_TIME64       = 421
+	SYS_FUTEX_TIME64                 = 422
+	SYS_SCHED_RR_GET_INTERVAL_TIME64 = 423
+	SYS_PIDFD_SEND_SIGNAL            = 424
+	SYS_IO_URING_SETUP               = 425
+	SYS_IO_URING_ENTER               = 426
+	SYS_IO_URING_REGISTER            = 427
+	SYS_OPEN_TREE                    = 428
+	SYS_MOVE_MOUNT                   = 429
+	SYS_FSOPEN                       = 430
+	SYS_FSCONFIG                     = 431
+	SYS_FSMOUNT                      = 432
+	SYS_FSPICK                       = 433
+	SYS_PIDFD_OPEN                   = 434
+	SYS_CLONE3                       = 435
+	SYS_OPENAT2                      = 437
+	SYS_PIDFD_GETFD                  = 438
+	SYS_FACCESSAT2                   = 439
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_amd64.go
new file mode 100644
index 000000000..8c102e55a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_amd64.go
@@ -0,0 +1,359 @@
+// go run linux/mksysnum.go -Wall -Werror -static -I/tmp/include -m64 /tmp/include/asm/unistd.h
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,linux
+
+package unix
+
+const (
+	SYS_READ                   = 0
+	SYS_WRITE                  = 1
+	SYS_OPEN                   = 2
+	SYS_CLOSE                  = 3
+	SYS_STAT                   = 4
+	SYS_FSTAT                  = 5
+	SYS_LSTAT                  = 6
+	SYS_POLL                   = 7
+	SYS_LSEEK                  = 8
+	SYS_MMAP                   = 9
+	SYS_MPROTECT               = 10
+	SYS_MUNMAP                 = 11
+	SYS_BRK                    = 12
+	SYS_RT_SIGACTION           = 13
+	SYS_RT_SIGPROCMASK         = 14
+	SYS_RT_SIGRETURN           = 15
+	SYS_IOCTL                  = 16
+	SYS_PREAD64                = 17
+	SYS_PWRITE64               = 18
+	SYS_READV                  = 19
+	SYS_WRITEV                 = 20
+	SYS_ACCESS                 = 21
+	SYS_PIPE                   = 22
+	SYS_SELECT                 = 23
+	SYS_SCHED_YIELD            = 24
+	SYS_MREMAP                 = 25
+	SYS_MSYNC                  = 26
+	SYS_MINCORE                = 27
+	SYS_MADVISE                = 28
+	SYS_SHMGET                 = 29
+	SYS_SHMAT                  = 30
+	SYS_SHMCTL                 = 31
+	SYS_DUP                    = 32
+	SYS_DUP2                   = 33
+	SYS_PAUSE                  = 34
+	SYS_NANOSLEEP              = 35
+	SYS_GETITIMER              = 36
+	SYS_ALARM                  = 37
+	SYS_SETITIMER              = 38
+	SYS_GETPID                 = 39
+	SYS_SENDFILE               = 40
+	SYS_SOCKET                 = 41
+	SYS_CONNECT                = 42
+	SYS_ACCEPT                 = 43
+	SYS_SENDTO                 = 44
+	SYS_RECVFROM               = 45
+	SYS_SENDMSG                = 46
+	SYS_RECVMSG                = 47
+	SYS_SHUTDOWN               = 48
+	SYS_BIND                   = 49
+	SYS_LISTEN                 = 50
+	SYS_GETSOCKNAME            = 51
+	SYS_GETPEERNAME            = 52
+	SYS_SOCKETPAIR             = 53
+	SYS_SETSOCKOPT             = 54
+	SYS_GETSOCKOPT             = 55
+	SYS_CLONE                  = 56
+	SYS_FORK                   = 57
+	SYS_VFORK                  = 58
+	SYS_EXECVE                 = 59
+	SYS_EXIT                   = 60
+	SYS_WAIT4                  = 61
+	SYS_KILL                   = 62
+	SYS_UNAME                  = 63
+	SYS_SEMGET                 = 64
+	SYS_SEMOP                  = 65
+	SYS_SEMCTL                 = 66
+	SYS_SHMDT                  = 67
+	SYS_MSGGET                 = 68
+	SYS_MSGSND                 = 69
+	SYS_MSGRCV                 = 70
+	SYS_MSGCTL                 = 71
+	SYS_FCNTL                  = 72
+	SYS_FLOCK                  = 73
+	SYS_FSYNC                  = 74
+	SYS_FDATASYNC              = 75
+	SYS_TRUNCATE               = 76
+	SYS_FTRUNCATE              = 77
+	SYS_GETDENTS               = 78
+	SYS_GETCWD                 = 79
+	SYS_CHDIR                  = 80
+	SYS_FCHDIR                 = 81
+	SYS_RENAME                 = 82
+	SYS_MKDIR                  = 83
+	SYS_RMDIR                  = 84
+	SYS_CREAT                  = 85
+	SYS_LINK                   = 86
+	SYS_UNLINK                 = 87
+	SYS_SYMLINK                = 88
+	SYS_READLINK               = 89
+	SYS_CHMOD                  = 90
+	SYS_FCHMOD                 = 91
+	SYS_CHOWN                  = 92
+	SYS_FCHOWN                 = 93
+	SYS_LCHOWN                 = 94
+	SYS_UMASK                  = 95
+	SYS_GETTIMEOFDAY           = 96
+	SYS_GETRLIMIT              = 97
+	SYS_GETRUSAGE              = 98
+	SYS_SYSINFO                = 99
+	SYS_TIMES                  = 100
+	SYS_PTRACE                 = 101
+	SYS_GETUID                 = 102
+	SYS_SYSLOG                 = 103
+	SYS_GETGID                 = 104
+	SYS_SETUID                 = 105
+	SYS_SETGID                 = 106
+	SYS_GETEUID                = 107
+	SYS_GETEGID                = 108
+	SYS_SETPGID                = 109
+	SYS_GETPPID                = 110
+	SYS_GETPGRP                = 111
+	SYS_SETSID                 = 112
+	SYS_SETREUID               = 113
+	SYS_SETREGID               = 114
+	SYS_GETGROUPS              = 115
+	SYS_SETGROUPS              = 116
+	SYS_SETRESUID              = 117
+	SYS_GETRESUID              = 118
+	SYS_SETRESGID              = 119
+	SYS_GETRESGID              = 120
+	SYS_GETPGID                = 121
+	SYS_SETFSUID               = 122
+	SYS_SETFSGID               = 123
+	SYS_GETSID                 = 124
+	SYS_CAPGET                 = 125
+	SYS_CAPSET                 = 126
+	SYS_RT_SIGPENDING          = 127
+	SYS_RT_SIGTIMEDWAIT        = 128
+	SYS_RT_SIGQUEUEINFO        = 129
+	SYS_RT_SIGSUSPEND          = 130
+	SYS_SIGALTSTACK            = 131
+	SYS_UTIME                  = 132
+	SYS_MKNOD                  = 133
+	SYS_USELIB                 = 134
+	SYS_PERSONALITY            = 135
+	SYS_USTAT                  = 136
+	SYS_STATFS                 = 137
+	SYS_FSTATFS                = 138
+	SYS_SYSFS                  = 139
+	SYS_GETPRIORITY            = 140
+	SYS_SETPRIORITY            = 141
+	SYS_SCHED_SETPARAM         = 142
+	SYS_SCHED_GETPARAM         = 143
+	SYS_SCHED_SETSCHEDULER     = 144
+	SYS_SCHED_GETSCHEDULER     = 145
+	SYS_SCHED_GET_PRIORITY_MAX = 146
+	SYS_SCHED_GET_PRIORITY_MIN = 147
+	SYS_SCHED_RR_GET_INTERVAL  = 148
+	SYS_MLOCK                  = 149
+	SYS_MUNLOCK                = 150
+	SYS_MLOCKALL               = 151
+	SYS_MUNLOCKALL             = 152
+	SYS_VHANGUP                = 153
+	SYS_MODIFY_LDT             = 154
+	SYS_PIVOT_ROOT             = 155
+	SYS__SYSCTL                = 156
+	SYS_PRCTL                  = 157
+	SYS_ARCH_PRCTL             = 158
+	SYS_ADJTIMEX               = 159
+	SYS_SETRLIMIT              = 160
+	SYS_CHROOT                 = 161
+	SYS_SYNC                   = 162
+	SYS_ACCT                   = 163
+	SYS_SETTIMEOFDAY           = 164
+	SYS_MOUNT                  = 165
+	SYS_UMOUNT2                = 166
+	SYS_SWAPON                 = 167
+	SYS_SWAPOFF                = 168
+	SYS_REBOOT                 = 169
+	SYS_SETHOSTNAME            = 170
+	SYS_SETDOMAINNAME          = 171
+	SYS_IOPL                   = 172
+	SYS_IOPERM                 = 173
+	SYS_CREATE_MODULE          = 174
+	SYS_INIT_MODULE            = 175
+	SYS_DELETE_MODULE          = 176
+	SYS_GET_KERNEL_SYMS        = 177
+	SYS_QUERY_MODULE           = 178
+	SYS_QUOTACTL               = 179
+	SYS_NFSSERVCTL             = 180
+	SYS_GETPMSG                = 181
+	SYS_PUTPMSG                = 182
+	SYS_AFS_SYSCALL            = 183
+	SYS_TUXCALL                = 184
+	SYS_SECURITY               = 185
+	SYS_GETTID                 = 186
+	SYS_READAHEAD              = 187
+	SYS_SETXATTR               = 188
+	SYS_LSETXATTR              = 189
+	SYS_FSETXATTR              = 190
+	SYS_GETXATTR               = 191
+	SYS_LGETXATTR              = 192
+	SYS_FGETXATTR              = 193
+	SYS_LISTXATTR              = 194
+	SYS_LLISTXATTR             = 195
+	SYS_FLISTXATTR             = 196
+	SYS_REMOVEXATTR            = 197
+	SYS_LREMOVEXATTR           = 198
+	SYS_FREMOVEXATTR           = 199
+	SYS_TKILL                  = 200
+	SYS_TIME                   = 201
+	SYS_FUTEX                  = 202
+	SYS_SCHED_SETAFFINITY      = 203
+	SYS_SCHED_GETAFFINITY      = 204
+	SYS_SET_THREAD_AREA        = 205
+	SYS_IO_SETUP               = 206
+	SYS_IO_DESTROY             = 207
+	SYS_IO_GETEVENTS           = 208
+	SYS_IO_SUBMIT              = 209
+	SYS_IO_CANCEL              = 210
+	SYS_GET_THREAD_AREA        = 211
+	SYS_LOOKUP_DCOOKIE         = 212
+	SYS_EPOLL_CREATE           = 213
+	SYS_EPOLL_CTL_OLD          = 214
+	SYS_EPOLL_WAIT_OLD         = 215
+	SYS_REMAP_FILE_PAGES       = 216
+	SYS_GETDENTS64             = 217
+	SYS_SET_TID_ADDRESS        = 218
+	SYS_RESTART_SYSCALL        = 219
+	SYS_SEMTIMEDOP             = 220
+	SYS_FADVISE64              = 221
+	SYS_TIMER_CREATE           = 222
+	SYS_TIMER_SETTIME          = 223
+	SYS_TIMER_GETTIME          = 224
+	SYS_TIMER_GETOVERRUN       = 225
+	SYS_TIMER_DELETE           = 226
+	SYS_CLOCK_SETTIME          = 227
+	SYS_CLOCK_GETTIME          = 228
+	SYS_CLOCK_GETRES           = 229
+	SYS_CLOCK_NANOSLEEP        = 230
+	SYS_EXIT_GROUP             = 231
+	SYS_EPOLL_WAIT             = 232
+	SYS_EPOLL_CTL              = 233
+	SYS_TGKILL                 = 234
+	SYS_UTIMES                 = 235
+	SYS_VSERVER                = 236
+	SYS_MBIND                  = 237
+	SYS_SET_MEMPOLICY          = 238
+	SYS_GET_MEMPOLICY          = 239
+	SYS_MQ_OPEN                = 240
+	SYS_MQ_UNLINK              = 241
+	SYS_MQ_TIMEDSEND           = 242
+	SYS_MQ_TIMEDRECEIVE        = 243
+	SYS_MQ_NOTIFY              = 244
+	SYS_MQ_GETSETATTR          = 245
+	SYS_KEXEC_LOAD             = 246
+	SYS_WAITID                 = 247
+	SYS_ADD_KEY                = 248
+	SYS_REQUEST_KEY            = 249
+	SYS_KEYCTL                 = 250
+	SYS_IOPRIO_SET             = 251
+	SYS_IOPRIO_GET             = 252
+	SYS_INOTIFY_INIT           = 253
+	SYS_INOTIFY_ADD_WATCH      = 254
+	SYS_INOTIFY_RM_WATCH       = 255
+	SYS_MIGRATE_PAGES          = 256
+	SYS_OPENAT                 = 257
+	SYS_MKDIRAT                = 258
+	SYS_MKNODAT                = 259
+	SYS_FCHOWNAT               = 260
+	SYS_FUTIMESAT              = 261
+	SYS_NEWFSTATAT             = 262
+	SYS_UNLINKAT               = 263
+	SYS_RENAMEAT               = 264
+	SYS_LINKAT                 = 265
+	SYS_SYMLINKAT              = 266
+	SYS_READLINKAT             = 267
+	SYS_FCHMODAT               = 268
+	SYS_FACCESSAT              = 269
+	SYS_PSELECT6               = 270
+	SYS_PPOLL                  = 271
+	SYS_UNSHARE                = 272
+	SYS_SET_ROBUST_LIST        = 273
+	SYS_GET_ROBUST_LIST        = 274
+	SYS_SPLICE                 = 275
+	SYS_TEE                    = 276
+	SYS_SYNC_FILE_RANGE        = 277
+	SYS_VMSPLICE               = 278
+	SYS_MOVE_PAGES             = 279
+	SYS_UTIMENSAT              = 280
+	SYS_EPOLL_PWAIT            = 281
+	SYS_SIGNALFD               = 282
+	SYS_TIMERFD_CREATE         = 283
+	SYS_EVENTFD                = 284
+	SYS_FALLOCATE              = 285
+	SYS_TIMERFD_SETTIME        = 286
+	SYS_TIMERFD_GETTIME        = 287
+	SYS_ACCEPT4                = 288
+	SYS_SIGNALFD4              = 289
+	SYS_EVENTFD2               = 290
+	SYS_EPOLL_CREATE1          = 291
+	SYS_DUP3                   = 292
+	SYS_PIPE2                  = 293
+	SYS_INOTIFY_INIT1          = 294
+	SYS_PREADV                 = 295
+	SYS_PWRITEV                = 296
+	SYS_RT_TGSIGQUEUEINFO      = 297
+	SYS_PERF_EVENT_OPEN        = 298
+	SYS_RECVMMSG               = 299
+	SYS_FANOTIFY_INIT          = 300
+	SYS_FANOTIFY_MARK          = 301
+	SYS_PRLIMIT64              = 302
+	SYS_NAME_TO_HANDLE_AT      = 303
+	SYS_OPEN_BY_HANDLE_AT      = 304
+	SYS_CLOCK_ADJTIME          = 305
+	SYS_SYNCFS                 = 306
+	SYS_SENDMMSG               = 307
+	SYS_SETNS                  = 308
+	SYS_GETCPU                 = 309
+	SYS_PROCESS_VM_READV       = 310
+	SYS_PROCESS_VM_WRITEV      = 311
+	SYS_KCMP                   = 312
+	SYS_FINIT_MODULE           = 313
+	SYS_SCHED_SETATTR          = 314
+	SYS_SCHED_GETATTR          = 315
+	SYS_RENAMEAT2              = 316
+	SYS_SECCOMP                = 317
+	SYS_GETRANDOM              = 318
+	SYS_MEMFD_CREATE           = 319
+	SYS_KEXEC_FILE_LOAD        = 320
+	SYS_BPF                    = 321
+	SYS_EXECVEAT               = 322
+	SYS_USERFAULTFD            = 323
+	SYS_MEMBARRIER             = 324
+	SYS_MLOCK2                 = 325
+	SYS_COPY_FILE_RANGE        = 326
+	SYS_PREADV2                = 327
+	SYS_PWRITEV2               = 328
+	SYS_PKEY_MPROTECT          = 329
+	SYS_PKEY_ALLOC             = 330
+	SYS_PKEY_FREE              = 331
+	SYS_STATX                  = 332
+	SYS_IO_PGETEVENTS          = 333
+	SYS_RSEQ                   = 334
+	SYS_PIDFD_SEND_SIGNAL      = 424
+	SYS_IO_URING_SETUP         = 425
+	SYS_IO_URING_ENTER         = 426
+	SYS_IO_URING_REGISTER      = 427
+	SYS_OPEN_TREE              = 428
+	SYS_MOVE_MOUNT             = 429
+	SYS_FSOPEN                 = 430
+	SYS_FSCONFIG               = 431
+	SYS_FSMOUNT                = 432
+	SYS_FSPICK                 = 433
+	SYS_PIDFD_OPEN             = 434
+	SYS_CLONE3                 = 435
+	SYS_OPENAT2                = 437
+	SYS_PIDFD_GETFD            = 438
+	SYS_FACCESSAT2             = 439
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_arm.go
new file mode 100644
index 000000000..98f9b68fb
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_arm.go
@@ -0,0 +1,401 @@
+// go run linux/mksysnum.go -Wall -Werror -static -I/tmp/include /tmp/include/asm/unistd.h
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm,linux
+
+package unix
+
+const (
+	SYS_RESTART_SYSCALL              = 0
+	SYS_EXIT                         = 1
+	SYS_FORK                         = 2
+	SYS_READ                         = 3
+	SYS_WRITE                        = 4
+	SYS_OPEN                         = 5
+	SYS_CLOSE                        = 6
+	SYS_CREAT                        = 8
+	SYS_LINK                         = 9
+	SYS_UNLINK                       = 10
+	SYS_EXECVE                       = 11
+	SYS_CHDIR                        = 12
+	SYS_MKNOD                        = 14
+	SYS_CHMOD                        = 15
+	SYS_LCHOWN                       = 16
+	SYS_LSEEK                        = 19
+	SYS_GETPID                       = 20
+	SYS_MOUNT                        = 21
+	SYS_SETUID                       = 23
+	SYS_GETUID                       = 24
+	SYS_PTRACE                       = 26
+	SYS_PAUSE                        = 29
+	SYS_ACCESS                       = 33
+	SYS_NICE                         = 34
+	SYS_SYNC                         = 36
+	SYS_KILL                         = 37
+	SYS_RENAME                       = 38
+	SYS_MKDIR                        = 39
+	SYS_RMDIR                        = 40
+	SYS_DUP                          = 41
+	SYS_PIPE                         = 42
+	SYS_TIMES                        = 43
+	SYS_BRK                          = 45
+	SYS_SETGID                       = 46
+	SYS_GETGID                       = 47
+	SYS_GETEUID                      = 49
+	SYS_GETEGID                      = 50
+	SYS_ACCT                         = 51
+	SYS_UMOUNT2                      = 52
+	SYS_IOCTL                        = 54
+	SYS_FCNTL                        = 55
+	SYS_SETPGID                      = 57
+	SYS_UMASK                        = 60
+	SYS_CHROOT                       = 61
+	SYS_USTAT                        = 62
+	SYS_DUP2                         = 63
+	SYS_GETPPID                      = 64
+	SYS_GETPGRP                      = 65
+	SYS_SETSID                       = 66
+	SYS_SIGACTION                    = 67
+	SYS_SETREUID                     = 70
+	SYS_SETREGID                     = 71
+	SYS_SIGSUSPEND                   = 72
+	SYS_SIGPENDING                   = 73
+	SYS_SETHOSTNAME                  = 74
+	SYS_SETRLIMIT                    = 75
+	SYS_GETRUSAGE                    = 77
+	SYS_GETTIMEOFDAY                 = 78
+	SYS_SETTIMEOFDAY                 = 79
+	SYS_GETGROUPS                    = 80
+	SYS_SETGROUPS                    = 81
+	SYS_SYMLINK                      = 83
+	SYS_READLINK                     = 85
+	SYS_USELIB                       = 86
+	SYS_SWAPON                       = 87
+	SYS_REBOOT                       = 88
+	SYS_MUNMAP                       = 91
+	SYS_TRUNCATE                     = 92
+	SYS_FTRUNCATE                    = 93
+	SYS_FCHMOD                       = 94
+	SYS_FCHOWN                       = 95
+	SYS_GETPRIORITY                  = 96
+	SYS_SETPRIORITY                  = 97
+	SYS_STATFS                       = 99
+	SYS_FSTATFS                      = 100
+	SYS_SYSLOG                       = 103
+	SYS_SETITIMER                    = 104
+	SYS_GETITIMER                    = 105
+	SYS_STAT                         = 106
+	SYS_LSTAT                        = 107
+	SYS_FSTAT                        = 108
+	SYS_VHANGUP                      = 111
+	SYS_WAIT4                        = 114
+	SYS_SWAPOFF                      = 115
+	SYS_SYSINFO                      = 116
+	SYS_FSYNC                        = 118
+	SYS_SIGRETURN                    = 119
+	SYS_CLONE                        = 120
+	SYS_SETDOMAINNAME                = 121
+	SYS_UNAME                        = 122
+	SYS_ADJTIMEX                     = 124
+	SYS_MPROTECT                     = 125
+	SYS_SIGPROCMASK                  = 126
+	SYS_INIT_MODULE                  = 128
+	SYS_DELETE_MODULE                = 129
+	SYS_QUOTACTL                     = 131
+	SYS_GETPGID                      = 132
+	SYS_FCHDIR                       = 133
+	SYS_BDFLUSH                      = 134
+	SYS_SYSFS                        = 135
+	SYS_PERSONALITY                  = 136
+	SYS_SETFSUID                     = 138
+	SYS_SETFSGID                     = 139
+	SYS__LLSEEK                      = 140
+	SYS_GETDENTS                     = 141
+	SYS__NEWSELECT                   = 142
+	SYS_FLOCK                        = 143
+	SYS_MSYNC                        = 144
+	SYS_READV                        = 145
+	SYS_WRITEV                       = 146
+	SYS_GETSID                       = 147
+	SYS_FDATASYNC                    = 148
+	SYS__SYSCTL                      = 149
+	SYS_MLOCK                        = 150
+	SYS_MUNLOCK                      = 151
+	SYS_MLOCKALL                     = 152
+	SYS_MUNLOCKALL                   = 153
+	SYS_SCHED_SETPARAM               = 154
+	SYS_SCHED_GETPARAM               = 155
+	SYS_SCHED_SETSCHEDULER           = 156
+	SYS_SCHED_GETSCHEDULER           = 157
+	SYS_SCHED_YIELD                  = 158
+	SYS_SCHED_GET_PRIORITY_MAX       = 159
+	SYS_SCHED_GET_PRIORITY_MIN       = 160
+	SYS_SCHED_RR_GET_INTERVAL        = 161
+	SYS_NANOSLEEP                    = 162
+	SYS_MREMAP                       = 163
+	SYS_SETRESUID                    = 164
+	SYS_GETRESUID                    = 165
+	SYS_POLL                         = 168
+	SYS_NFSSERVCTL                   = 169
+	SYS_SETRESGID                    = 170
+	SYS_GETRESGID                    = 171
+	SYS_PRCTL                        = 172
+	SYS_RT_SIGRETURN                 = 173
+	SYS_RT_SIGACTION                 = 174
+	SYS_RT_SIGPROCMASK               = 175
+	SYS_RT_SIGPENDING                = 176
+	SYS_RT_SIGTIMEDWAIT              = 177
+	SYS_RT_SIGQUEUEINFO              = 178
+	SYS_RT_SIGSUSPEND                = 179
+	SYS_PREAD64                      = 180
+	SYS_PWRITE64                     = 181
+	SYS_CHOWN                        = 182
+	SYS_GETCWD                       = 183
+	SYS_CAPGET                       = 184
+	SYS_CAPSET                       = 185
+	SYS_SIGALTSTACK                  = 186
+	SYS_SENDFILE                     = 187
+	SYS_VFORK                        = 190
+	SYS_UGETRLIMIT                   = 191
+	SYS_MMAP2                        = 192
+	SYS_TRUNCATE64                   = 193
+	SYS_FTRUNCATE64                  = 194
+	SYS_STAT64                       = 195
+	SYS_LSTAT64                      = 196
+	SYS_FSTAT64                      = 197
+	SYS_LCHOWN32                     = 198
+	SYS_GETUID32                     = 199
+	SYS_GETGID32                     = 200
+	SYS_GETEUID32                    = 201
+	SYS_GETEGID32                    = 202
+	SYS_SETREUID32                   = 203
+	SYS_SETREGID32                   = 204
+	SYS_GETGROUPS32                  = 205
+	SYS_SETGROUPS32                  = 206
+	SYS_FCHOWN32                     = 207
+	SYS_SETRESUID32                  = 208
+	SYS_GETRESUID32                  = 209
+	SYS_SETRESGID32                  = 210
+	SYS_GETRESGID32                  = 211
+	SYS_CHOWN32                      = 212
+	SYS_SETUID32                     = 213
+	SYS_SETGID32                     = 214
+	SYS_SETFSUID32                   = 215
+	SYS_SETFSGID32                   = 216
+	SYS_GETDENTS64                   = 217
+	SYS_PIVOT_ROOT                   = 218
+	SYS_MINCORE                      = 219
+	SYS_MADVISE                      = 220
+	SYS_FCNTL64                      = 221
+	SYS_GETTID                       = 224
+	SYS_READAHEAD                    = 225
+	SYS_SETXATTR                     = 226
+	SYS_LSETXATTR                    = 227
+	SYS_FSETXATTR                    = 228
+	SYS_GETXATTR                     = 229
+	SYS_LGETXATTR                    = 230
+	SYS_FGETXATTR                    = 231
+	SYS_LISTXATTR                    = 232
+	SYS_LLISTXATTR                   = 233
+	SYS_FLISTXATTR                   = 234
+	SYS_REMOVEXATTR                  = 235
+	SYS_LREMOVEXATTR                 = 236
+	SYS_FREMOVEXATTR                 = 237
+	SYS_TKILL                        = 238
+	SYS_SENDFILE64                   = 239
+	SYS_FUTEX                        = 240
+	SYS_SCHED_SETAFFINITY            = 241
+	SYS_SCHED_GETAFFINITY            = 242
+	SYS_IO_SETUP                     = 243
+	SYS_IO_DESTROY                   = 244
+	SYS_IO_GETEVENTS                 = 245
+	SYS_IO_SUBMIT                    = 246
+	SYS_IO_CANCEL                    = 247
+	SYS_EXIT_GROUP                   = 248
+	SYS_LOOKUP_DCOOKIE               = 249
+	SYS_EPOLL_CREATE                 = 250
+	SYS_EPOLL_CTL                    = 251
+	SYS_EPOLL_WAIT                   = 252
+	SYS_REMAP_FILE_PAGES             = 253
+	SYS_SET_TID_ADDRESS              = 256
+	SYS_TIMER_CREATE                 = 257
+	SYS_TIMER_SETTIME                = 258
+	SYS_TIMER_GETTIME                = 259
+	SYS_TIMER_GETOVERRUN             = 260
+	SYS_TIMER_DELETE                 = 261
+	SYS_CLOCK_SETTIME                = 262
+	SYS_CLOCK_GETTIME                = 263
+	SYS_CLOCK_GETRES                 = 264
+	SYS_CLOCK_NANOSLEEP              = 265
+	SYS_STATFS64                     = 266
+	SYS_FSTATFS64                    = 267
+	SYS_TGKILL                       = 268
+	SYS_UTIMES                       = 269
+	SYS_ARM_FADVISE64_64             = 270
+	SYS_PCICONFIG_IOBASE             = 271
+	SYS_PCICONFIG_READ               = 272
+	SYS_PCICONFIG_WRITE              = 273
+	SYS_MQ_OPEN                      = 274
+	SYS_MQ_UNLINK                    = 275
+	SYS_MQ_TIMEDSEND                 = 276
+	SYS_MQ_TIMEDRECEIVE              = 277
+	SYS_MQ_NOTIFY                    = 278
+	SYS_MQ_GETSETATTR                = 279
+	SYS_WAITID                       = 280
+	SYS_SOCKET                       = 281
+	SYS_BIND                         = 282
+	SYS_CONNECT                      = 283
+	SYS_LISTEN                       = 284
+	SYS_ACCEPT                       = 285
+	SYS_GETSOCKNAME                  = 286
+	SYS_GETPEERNAME                  = 287
+	SYS_SOCKETPAIR                   = 288
+	SYS_SEND                         = 289
+	SYS_SENDTO                       = 290
+	SYS_RECV                         = 291
+	SYS_RECVFROM                     = 292
+	SYS_SHUTDOWN                     = 293
+	SYS_SETSOCKOPT                   = 294
+	SYS_GETSOCKOPT                   = 295
+	SYS_SENDMSG                      = 296
+	SYS_RECVMSG                      = 297
+	SYS_SEMOP                        = 298
+	SYS_SEMGET                       = 299
+	SYS_SEMCTL                       = 300
+	SYS_MSGSND                       = 301
+	SYS_MSGRCV                       = 302
+	SYS_MSGGET                       = 303
+	SYS_MSGCTL                       = 304
+	SYS_SHMAT                        = 305
+	SYS_SHMDT                        = 306
+	SYS_SHMGET                       = 307
+	SYS_SHMCTL                       = 308
+	SYS_ADD_KEY                      = 309
+	SYS_REQUEST_KEY                  = 310
+	SYS_KEYCTL                       = 311
+	SYS_SEMTIMEDOP                   = 312
+	SYS_VSERVER                      = 313
+	SYS_IOPRIO_SET                   = 314
+	SYS_IOPRIO_GET                   = 315
+	SYS_INOTIFY_INIT                 = 316
+	SYS_INOTIFY_ADD_WATCH            = 317
+	SYS_INOTIFY_RM_WATCH             = 318
+	SYS_MBIND                        = 319
+	SYS_GET_MEMPOLICY                = 320
+	SYS_SET_MEMPOLICY                = 321
+	SYS_OPENAT                       = 322
+	SYS_MKDIRAT                      = 323
+	SYS_MKNODAT                      = 324
+	SYS_FCHOWNAT                     = 325
+	SYS_FUTIMESAT                    = 326
+	SYS_FSTATAT64                    = 327
+	SYS_UNLINKAT                     = 328
+	SYS_RENAMEAT                     = 329
+	SYS_LINKAT                       = 330
+	SYS_SYMLINKAT                    = 331
+	SYS_READLINKAT                   = 332
+	SYS_FCHMODAT                     = 333
+	SYS_FACCESSAT                    = 334
+	SYS_PSELECT6                     = 335
+	SYS_PPOLL                        = 336
+	SYS_UNSHARE                      = 337
+	SYS_SET_ROBUST_LIST              = 338
+	SYS_GET_ROBUST_LIST              = 339
+	SYS_SPLICE                       = 340
+	SYS_ARM_SYNC_FILE_RANGE          = 341
+	SYS_TEE                          = 342
+	SYS_VMSPLICE                     = 343
+	SYS_MOVE_PAGES                   = 344
+	SYS_GETCPU                       = 345
+	SYS_EPOLL_PWAIT                  = 346
+	SYS_KEXEC_LOAD                   = 347
+	SYS_UTIMENSAT                    = 348
+	SYS_SIGNALFD                     = 349
+	SYS_TIMERFD_CREATE               = 350
+	SYS_EVENTFD                      = 351
+	SYS_FALLOCATE                    = 352
+	SYS_TIMERFD_SETTIME              = 353
+	SYS_TIMERFD_GETTIME              = 354
+	SYS_SIGNALFD4                    = 355
+	SYS_EVENTFD2                     = 356
+	SYS_EPOLL_CREATE1                = 357
+	SYS_DUP3                         = 358
+	SYS_PIPE2                        = 359
+	SYS_INOTIFY_INIT1                = 360
+	SYS_PREADV                       = 361
+	SYS_PWRITEV                      = 362
+	SYS_RT_TGSIGQUEUEINFO            = 363
+	SYS_PERF_EVENT_OPEN              = 364
+	SYS_RECVMMSG                     = 365
+	SYS_ACCEPT4                      = 366
+	SYS_FANOTIFY_INIT                = 367
+	SYS_FANOTIFY_MARK                = 368
+	SYS_PRLIMIT64                    = 369
+	SYS_NAME_TO_HANDLE_AT            = 370
+	SYS_OPEN_BY_HANDLE_AT            = 371
+	SYS_CLOCK_ADJTIME                = 372
+	SYS_SYNCFS                       = 373
+	SYS_SENDMMSG                     = 374
+	SYS_SETNS                        = 375
+	SYS_PROCESS_VM_READV             = 376
+	SYS_PROCESS_VM_WRITEV            = 377
+	SYS_KCMP                         = 378
+	SYS_FINIT_MODULE                 = 379
+	SYS_SCHED_SETATTR                = 380
+	SYS_SCHED_GETATTR                = 381
+	SYS_RENAMEAT2                    = 382
+	SYS_SECCOMP                      = 383
+	SYS_GETRANDOM                    = 384
+	SYS_MEMFD_CREATE                 = 385
+	SYS_BPF                          = 386
+	SYS_EXECVEAT                     = 387
+	SYS_USERFAULTFD                  = 388
+	SYS_MEMBARRIER                   = 389
+	SYS_MLOCK2                       = 390
+	SYS_COPY_FILE_RANGE              = 391
+	SYS_PREADV2                      = 392
+	SYS_PWRITEV2                     = 393
+	SYS_PKEY_MPROTECT                = 394
+	SYS_PKEY_ALLOC                   = 395
+	SYS_PKEY_FREE                    = 396
+	SYS_STATX                        = 397
+	SYS_RSEQ                         = 398
+	SYS_IO_PGETEVENTS                = 399
+	SYS_MIGRATE_PAGES                = 400
+	SYS_KEXEC_FILE_LOAD              = 401
+	SYS_CLOCK_GETTIME64              = 403
+	SYS_CLOCK_SETTIME64              = 404
+	SYS_CLOCK_ADJTIME64              = 405
+	SYS_CLOCK_GETRES_TIME64          = 406
+	SYS_CLOCK_NANOSLEEP_TIME64       = 407
+	SYS_TIMER_GETTIME64              = 408
+	SYS_TIMER_SETTIME64              = 409
+	SYS_TIMERFD_GETTIME64            = 410
+	SYS_TIMERFD_SETTIME64            = 411
+	SYS_UTIMENSAT_TIME64             = 412
+	SYS_PSELECT6_TIME64              = 413
+	SYS_PPOLL_TIME64                 = 414
+	SYS_IO_PGETEVENTS_TIME64         = 416
+	SYS_RECVMMSG_TIME64              = 417
+	SYS_MQ_TIMEDSEND_TIME64          = 418
+	SYS_MQ_TIMEDRECEIVE_TIME64       = 419
+	SYS_SEMTIMEDOP_TIME64            = 420
+	SYS_RT_SIGTIMEDWAIT_TIME64       = 421
+	SYS_FUTEX_TIME64                 = 422
+	SYS_SCHED_RR_GET_INTERVAL_TIME64 = 423
+	SYS_PIDFD_SEND_SIGNAL            = 424
+	SYS_IO_URING_SETUP               = 425
+	SYS_IO_URING_ENTER               = 426
+	SYS_IO_URING_REGISTER            = 427
+	SYS_OPEN_TREE                    = 428
+	SYS_MOVE_MOUNT                   = 429
+	SYS_FSOPEN                       = 430
+	SYS_FSCONFIG                     = 431
+	SYS_FSMOUNT                      = 432
+	SYS_FSPICK                       = 433
+	SYS_PIDFD_OPEN                   = 434
+	SYS_CLONE3                       = 435
+	SYS_OPENAT2                      = 437
+	SYS_PIDFD_GETFD                  = 438
+	SYS_FACCESSAT2                   = 439
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_arm64.go
new file mode 100644
index 000000000..4dabc33fb
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_arm64.go
@@ -0,0 +1,304 @@
+// go run linux/mksysnum.go -Wall -Werror -static -I/tmp/include -fsigned-char /tmp/include/asm/unistd.h
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm64,linux
+
+package unix
+
+const (
+	SYS_IO_SETUP               = 0
+	SYS_IO_DESTROY             = 1
+	SYS_IO_SUBMIT              = 2
+	SYS_IO_CANCEL              = 3
+	SYS_IO_GETEVENTS           = 4
+	SYS_SETXATTR               = 5
+	SYS_LSETXATTR              = 6
+	SYS_FSETXATTR              = 7
+	SYS_GETXATTR               = 8
+	SYS_LGETXATTR              = 9
+	SYS_FGETXATTR              = 10
+	SYS_LISTXATTR              = 11
+	SYS_LLISTXATTR             = 12
+	SYS_FLISTXATTR             = 13
+	SYS_REMOVEXATTR            = 14
+	SYS_LREMOVEXATTR           = 15
+	SYS_FREMOVEXATTR           = 16
+	SYS_GETCWD                 = 17
+	SYS_LOOKUP_DCOOKIE         = 18
+	SYS_EVENTFD2               = 19
+	SYS_EPOLL_CREATE1          = 20
+	SYS_EPOLL_CTL              = 21
+	SYS_EPOLL_PWAIT            = 22
+	SYS_DUP                    = 23
+	SYS_DUP3                   = 24
+	SYS_FCNTL                  = 25
+	SYS_INOTIFY_INIT1          = 26
+	SYS_INOTIFY_ADD_WATCH      = 27
+	SYS_INOTIFY_RM_WATCH       = 28
+	SYS_IOCTL                  = 29
+	SYS_IOPRIO_SET             = 30
+	SYS_IOPRIO_GET             = 31
+	SYS_FLOCK                  = 32
+	SYS_MKNODAT                = 33
+	SYS_MKDIRAT                = 34
+	SYS_UNLINKAT               = 35
+	SYS_SYMLINKAT              = 36
+	SYS_LINKAT                 = 37
+	SYS_RENAMEAT               = 38
+	SYS_UMOUNT2                = 39
+	SYS_MOUNT                  = 40
+	SYS_PIVOT_ROOT             = 41
+	SYS_NFSSERVCTL             = 42
+	SYS_STATFS                 = 43
+	SYS_FSTATFS                = 44
+	SYS_TRUNCATE               = 45
+	SYS_FTRUNCATE              = 46
+	SYS_FALLOCATE              = 47
+	SYS_FACCESSAT              = 48
+	SYS_CHDIR                  = 49
+	SYS_FCHDIR                 = 50
+	SYS_CHROOT                 = 51
+	SYS_FCHMOD                 = 52
+	SYS_FCHMODAT               = 53
+	SYS_FCHOWNAT               = 54
+	SYS_FCHOWN                 = 55
+	SYS_OPENAT                 = 56
+	SYS_CLOSE                  = 57
+	SYS_VHANGUP                = 58
+	SYS_PIPE2                  = 59
+	SYS_QUOTACTL               = 60
+	SYS_GETDENTS64             = 61
+	SYS_LSEEK                  = 62
+	SYS_READ                   = 63
+	SYS_WRITE                  = 64
+	SYS_READV                  = 65
+	SYS_WRITEV                 = 66
+	SYS_PREAD64                = 67
+	SYS_PWRITE64               = 68
+	SYS_PREADV                 = 69
+	SYS_PWRITEV                = 70
+	SYS_SENDFILE               = 71
+	SYS_PSELECT6               = 72
+	SYS_PPOLL                  = 73
+	SYS_SIGNALFD4              = 74
+	SYS_VMSPLICE               = 75
+	SYS_SPLICE                 = 76
+	SYS_TEE                    = 77
+	SYS_READLINKAT             = 78
+	SYS_FSTATAT                = 79
+	SYS_FSTAT                  = 80
+	SYS_SYNC                   = 81
+	SYS_FSYNC                  = 82
+	SYS_FDATASYNC              = 83
+	SYS_SYNC_FILE_RANGE        = 84
+	SYS_TIMERFD_CREATE         = 85
+	SYS_TIMERFD_SETTIME        = 86
+	SYS_TIMERFD_GETTIME        = 87
+	SYS_UTIMENSAT              = 88
+	SYS_ACCT                   = 89
+	SYS_CAPGET                 = 90
+	SYS_CAPSET                 = 91
+	SYS_PERSONALITY            = 92
+	SYS_EXIT                   = 93
+	SYS_EXIT_GROUP             = 94
+	SYS_WAITID                 = 95
+	SYS_SET_TID_ADDRESS        = 96
+	SYS_UNSHARE                = 97
+	SYS_FUTEX                  = 98
+	SYS_SET_ROBUST_LIST        = 99
+	SYS_GET_ROBUST_LIST        = 100
+	SYS_NANOSLEEP              = 101
+	SYS_GETITIMER              = 102
+	SYS_SETITIMER              = 103
+	SYS_KEXEC_LOAD             = 104
+	SYS_INIT_MODULE            = 105
+	SYS_DELETE_MODULE          = 106
+	SYS_TIMER_CREATE           = 107
+	SYS_TIMER_GETTIME          = 108
+	SYS_TIMER_GETOVERRUN       = 109
+	SYS_TIMER_SETTIME          = 110
+	SYS_TIMER_DELETE           = 111
+	SYS_CLOCK_SETTIME          = 112
+	SYS_CLOCK_GETTIME          = 113
+	SYS_CLOCK_GETRES           = 114
+	SYS_CLOCK_NANOSLEEP        = 115
+	SYS_SYSLOG                 = 116
+	SYS_PTRACE                 = 117
+	SYS_SCHED_SETPARAM         = 118
+	SYS_SCHED_SETSCHEDULER     = 119
+	SYS_SCHED_GETSCHEDULER     = 120
+	SYS_SCHED_GETPARAM         = 121
+	SYS_SCHED_SETAFFINITY      = 122
+	SYS_SCHED_GETAFFINITY      = 123
+	SYS_SCHED_YIELD            = 124
+	SYS_SCHED_GET_PRIORITY_MAX = 125
+	SYS_SCHED_GET_PRIORITY_MIN = 126
+	SYS_SCHED_RR_GET_INTERVAL  = 127
+	SYS_RESTART_SYSCALL        = 128
+	SYS_KILL                   = 129
+	SYS_TKILL                  = 130
+	SYS_TGKILL                 = 131
+	SYS_SIGALTSTACK            = 132
+	SYS_RT_SIGSUSPEND          = 133
+	SYS_RT_SIGACTION           = 134
+	SYS_RT_SIGPROCMASK         = 135
+	SYS_RT_SIGPENDING          = 136
+	SYS_RT_SIGTIMEDWAIT        = 137
+	SYS_RT_SIGQUEUEINFO        = 138
+	SYS_RT_SIGRETURN           = 139
+	SYS_SETPRIORITY            = 140
+	SYS_GETPRIORITY            = 141
+	SYS_REBOOT                 = 142
+	SYS_SETREGID               = 143
+	SYS_SETGID                 = 144
+	SYS_SETREUID               = 145
+	SYS_SETUID                 = 146
+	SYS_SETRESUID              = 147
+	SYS_GETRESUID              = 148
+	SYS_SETRESGID              = 149
+	SYS_GETRESGID              = 150
+	SYS_SETFSUID               = 151
+	SYS_SETFSGID               = 152
+	SYS_TIMES                  = 153
+	SYS_SETPGID                = 154
+	SYS_GETPGID                = 155
+	SYS_GETSID                 = 156
+	SYS_SETSID                 = 157
+	SYS_GETGROUPS              = 158
+	SYS_SETGROUPS              = 159
+	SYS_UNAME                  = 160
+	SYS_SETHOSTNAME            = 161
+	SYS_SETDOMAINNAME          = 162
+	SYS_GETRLIMIT              = 163
+	SYS_SETRLIMIT              = 164
+	SYS_GETRUSAGE              = 165
+	SYS_UMASK                  = 166
+	SYS_PRCTL                  = 167
+	SYS_GETCPU                 = 168
+	SYS_GETTIMEOFDAY           = 169
+	SYS_SETTIMEOFDAY           = 170
+	SYS_ADJTIMEX               = 171
+	SYS_GETPID                 = 172
+	SYS_GETPPID                = 173
+	SYS_GETUID                 = 174
+	SYS_GETEUID                = 175
+	SYS_GETGID                 = 176
+	SYS_GETEGID                = 177
+	SYS_GETTID                 = 178
+	SYS_SYSINFO                = 179
+	SYS_MQ_OPEN                = 180
+	SYS_MQ_UNLINK              = 181
+	SYS_MQ_TIMEDSEND           = 182
+	SYS_MQ_TIMEDRECEIVE        = 183
+	SYS_MQ_NOTIFY              = 184
+	SYS_MQ_GETSETATTR          = 185
+	SYS_MSGGET                 = 186
+	SYS_MSGCTL                 = 187
+	SYS_MSGRCV                 = 188
+	SYS_MSGSND                 = 189
+	SYS_SEMGET                 = 190
+	SYS_SEMCTL                 = 191
+	SYS_SEMTIMEDOP             = 192
+	SYS_SEMOP                  = 193
+	SYS_SHMGET                 = 194
+	SYS_SHMCTL                 = 195
+	SYS_SHMAT                  = 196
+	SYS_SHMDT                  = 197
+	SYS_SOCKET                 = 198
+	SYS_SOCKETPAIR             = 199
+	SYS_BIND                   = 200
+	SYS_LISTEN                 = 201
+	SYS_ACCEPT                 = 202
+	SYS_CONNECT                = 203
+	SYS_GETSOCKNAME            = 204
+	SYS_GETPEERNAME            = 205
+	SYS_SENDTO                 = 206
+	SYS_RECVFROM               = 207
+	SYS_SETSOCKOPT             = 208
+	SYS_GETSOCKOPT             = 209
+	SYS_SHUTDOWN               = 210
+	SYS_SENDMSG                = 211
+	SYS_RECVMSG                = 212
+	SYS_READAHEAD              = 213
+	SYS_BRK                    = 214
+	SYS_MUNMAP                 = 215
+	SYS_MREMAP                 = 216
+	SYS_ADD_KEY                = 217
+	SYS_REQUEST_KEY            = 218
+	SYS_KEYCTL                 = 219
+	SYS_CLONE                  = 220
+	SYS_EXECVE                 = 221
+	SYS_MMAP                   = 222
+	SYS_FADVISE64              = 223
+	SYS_SWAPON                 = 224
+	SYS_SWAPOFF                = 225
+	SYS_MPROTECT               = 226
+	SYS_MSYNC                  = 227
+	SYS_MLOCK                  = 228
+	SYS_MUNLOCK                = 229
+	SYS_MLOCKALL               = 230
+	SYS_MUNLOCKALL             = 231
+	SYS_MINCORE                = 232
+	SYS_MADVISE                = 233
+	SYS_REMAP_FILE_PAGES       = 234
+	SYS_MBIND                  = 235
+	SYS_GET_MEMPOLICY          = 236
+	SYS_SET_MEMPOLICY          = 237
+	SYS_MIGRATE_PAGES          = 238
+	SYS_MOVE_PAGES             = 239
+	SYS_RT_TGSIGQUEUEINFO      = 240
+	SYS_PERF_EVENT_OPEN        = 241
+	SYS_ACCEPT4                = 242
+	SYS_RECVMMSG               = 243
+	SYS_ARCH_SPECIFIC_SYSCALL  = 244
+	SYS_WAIT4                  = 260
+	SYS_PRLIMIT64              = 261
+	SYS_FANOTIFY_INIT          = 262
+	SYS_FANOTIFY_MARK          = 263
+	SYS_NAME_TO_HANDLE_AT      = 264
+	SYS_OPEN_BY_HANDLE_AT      = 265
+	SYS_CLOCK_ADJTIME          = 266
+	SYS_SYNCFS                 = 267
+	SYS_SETNS                  = 268
+	SYS_SENDMMSG               = 269
+	SYS_PROCESS_VM_READV       = 270
+	SYS_PROCESS_VM_WRITEV      = 271
+	SYS_KCMP                   = 272
+	SYS_FINIT_MODULE           = 273
+	SYS_SCHED_SETATTR          = 274
+	SYS_SCHED_GETATTR          = 275
+	SYS_RENAMEAT2              = 276
+	SYS_SECCOMP                = 277
+	SYS_GETRANDOM              = 278
+	SYS_MEMFD_CREATE           = 279
+	SYS_BPF                    = 280
+	SYS_EXECVEAT               = 281
+	SYS_USERFAULTFD            = 282
+	SYS_MEMBARRIER             = 283
+	SYS_MLOCK2                 = 284
+	SYS_COPY_FILE_RANGE        = 285
+	SYS_PREADV2                = 286
+	SYS_PWRITEV2               = 287
+	SYS_PKEY_MPROTECT          = 288
+	SYS_PKEY_ALLOC             = 289
+	SYS_PKEY_FREE              = 290
+	SYS_STATX                  = 291
+	SYS_IO_PGETEVENTS          = 292
+	SYS_RSEQ                   = 293
+	SYS_KEXEC_FILE_LOAD        = 294
+	SYS_PIDFD_SEND_SIGNAL      = 424
+	SYS_IO_URING_SETUP         = 425
+	SYS_IO_URING_ENTER         = 426
+	SYS_IO_URING_REGISTER      = 427
+	SYS_OPEN_TREE              = 428
+	SYS_MOVE_MOUNT             = 429
+	SYS_FSOPEN                 = 430
+	SYS_FSCONFIG               = 431
+	SYS_FSMOUNT                = 432
+	SYS_FSPICK                 = 433
+	SYS_PIDFD_OPEN             = 434
+	SYS_CLONE3                 = 435
+	SYS_OPENAT2                = 437
+	SYS_PIDFD_GETFD            = 438
+	SYS_FACCESSAT2             = 439
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_mips.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_mips.go
new file mode 100644
index 000000000..d5724e596
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_mips.go
@@ -0,0 +1,422 @@
+// go run linux/mksysnum.go -Wall -Werror -static -I/tmp/include /tmp/include/asm/unistd.h
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build mips,linux
+
+package unix
+
+const (
+	SYS_SYSCALL                      = 4000
+	SYS_EXIT                         = 4001
+	SYS_FORK                         = 4002
+	SYS_READ                         = 4003
+	SYS_WRITE                        = 4004
+	SYS_OPEN                         = 4005
+	SYS_CLOSE                        = 4006
+	SYS_WAITPID                      = 4007
+	SYS_CREAT                        = 4008
+	SYS_LINK                         = 4009
+	SYS_UNLINK                       = 4010
+	SYS_EXECVE                       = 4011
+	SYS_CHDIR                        = 4012
+	SYS_TIME                         = 4013
+	SYS_MKNOD                        = 4014
+	SYS_CHMOD                        = 4015
+	SYS_LCHOWN                       = 4016
+	SYS_BREAK                        = 4017
+	SYS_UNUSED18                     = 4018
+	SYS_LSEEK                        = 4019
+	SYS_GETPID                       = 4020
+	SYS_MOUNT                        = 4021
+	SYS_UMOUNT                       = 4022
+	SYS_SETUID                       = 4023
+	SYS_GETUID                       = 4024
+	SYS_STIME                        = 4025
+	SYS_PTRACE                       = 4026
+	SYS_ALARM                        = 4027
+	SYS_UNUSED28                     = 4028
+	SYS_PAUSE                        = 4029
+	SYS_UTIME                        = 4030
+	SYS_STTY                         = 4031
+	SYS_GTTY                         = 4032
+	SYS_ACCESS                       = 4033
+	SYS_NICE                         = 4034
+	SYS_FTIME                        = 4035
+	SYS_SYNC                         = 4036
+	SYS_KILL                         = 4037
+	SYS_RENAME                       = 4038
+	SYS_MKDIR                        = 4039
+	SYS_RMDIR                        = 4040
+	SYS_DUP                          = 4041
+	SYS_PIPE                         = 4042
+	SYS_TIMES                        = 4043
+	SYS_PROF                         = 4044
+	SYS_BRK                          = 4045
+	SYS_SETGID                       = 4046
+	SYS_GETGID                       = 4047
+	SYS_SIGNAL                       = 4048
+	SYS_GETEUID                      = 4049
+	SYS_GETEGID                      = 4050
+	SYS_ACCT                         = 4051
+	SYS_UMOUNT2                      = 4052
+	SYS_LOCK                         = 4053
+	SYS_IOCTL                        = 4054
+	SYS_FCNTL                        = 4055
+	SYS_MPX                          = 4056
+	SYS_SETPGID                      = 4057
+	SYS_ULIMIT                       = 4058
+	SYS_UNUSED59                     = 4059
+	SYS_UMASK                        = 4060
+	SYS_CHROOT                       = 4061
+	SYS_USTAT                        = 4062
+	SYS_DUP2                         = 4063
+	SYS_GETPPID                      = 4064
+	SYS_GETPGRP                      = 4065
+	SYS_SETSID                       = 4066
+	SYS_SIGACTION                    = 4067
+	SYS_SGETMASK                     = 4068
+	SYS_SSETMASK                     = 4069
+	SYS_SETREUID                     = 4070
+	SYS_SETREGID                     = 4071
+	SYS_SIGSUSPEND                   = 4072
+	SYS_SIGPENDING                   = 4073
+	SYS_SETHOSTNAME                  = 4074
+	SYS_SETRLIMIT                    = 4075
+	SYS_GETRLIMIT                    = 4076
+	SYS_GETRUSAGE                    = 4077
+	SYS_GETTIMEOFDAY                 = 4078
+	SYS_SETTIMEOFDAY                 = 4079
+	SYS_GETGROUPS                    = 4080
+	SYS_SETGROUPS                    = 4081
+	SYS_RESERVED82                   = 4082
+	SYS_SYMLINK                      = 4083
+	SYS_UNUSED84                     = 4084
+	SYS_READLINK                     = 4085
+	SYS_USELIB                       = 4086
+	SYS_SWAPON                       = 4087
+	SYS_REBOOT                       = 4088
+	SYS_READDIR                      = 4089
+	SYS_MMAP                         = 4090
+	SYS_MUNMAP                       = 4091
+	SYS_TRUNCATE                     = 4092
+	SYS_FTRUNCATE                    = 4093
+	SYS_FCHMOD                       = 4094
+	SYS_FCHOWN                       = 4095
+	SYS_GETPRIORITY                  = 4096
+	SYS_SETPRIORITY                  = 4097
+	SYS_PROFIL                       = 4098
+	SYS_STATFS                       = 4099
+	SYS_FSTATFS                      = 4100
+	SYS_IOPERM                       = 4101
+	SYS_SOCKETCALL                   = 4102
+	SYS_SYSLOG                       = 4103
+	SYS_SETITIMER                    = 4104
+	SYS_GETITIMER                    = 4105
+	SYS_STAT                         = 4106
+	SYS_LSTAT                        = 4107
+	SYS_FSTAT                        = 4108
+	SYS_UNUSED109                    = 4109
+	SYS_IOPL                         = 4110
+	SYS_VHANGUP                      = 4111
+	SYS_IDLE                         = 4112
+	SYS_VM86                         = 4113
+	SYS_WAIT4                        = 4114
+	SYS_SWAPOFF                      = 4115
+	SYS_SYSINFO                      = 4116
+	SYS_IPC                          = 4117
+	SYS_FSYNC                        = 4118
+	SYS_SIGRETURN                    = 4119
+	SYS_CLONE                        = 4120
+	SYS_SETDOMAINNAME                = 4121
+	SYS_UNAME                        = 4122
+	SYS_MODIFY_LDT                   = 4123
+	SYS_ADJTIMEX                     = 4124
+	SYS_MPROTECT                     = 4125
+	SYS_SIGPROCMASK                  = 4126
+	SYS_CREATE_MODULE                = 4127
+	SYS_INIT_MODULE                  = 4128
+	SYS_DELETE_MODULE                = 4129
+	SYS_GET_KERNEL_SYMS              = 4130
+	SYS_QUOTACTL                     = 4131
+	SYS_GETPGID                      = 4132
+	SYS_FCHDIR                       = 4133
+	SYS_BDFLUSH                      = 4134
+	SYS_SYSFS                        = 4135
+	SYS_PERSONALITY                  = 4136
+	SYS_AFS_SYSCALL                  = 4137
+	SYS_SETFSUID                     = 4138
+	SYS_SETFSGID                     = 4139
+	SYS__LLSEEK                      = 4140
+	SYS_GETDENTS                     = 4141
+	SYS__NEWSELECT                   = 4142
+	SYS_FLOCK                        = 4143
+	SYS_MSYNC                        = 4144
+	SYS_READV                        = 4145
+	SYS_WRITEV                       = 4146
+	SYS_CACHEFLUSH                   = 4147
+	SYS_CACHECTL                     = 4148
+	SYS_SYSMIPS                      = 4149
+	SYS_UNUSED150                    = 4150
+	SYS_GETSID                       = 4151
+	SYS_FDATASYNC                    = 4152
+	SYS__SYSCTL                      = 4153
+	SYS_MLOCK                        = 4154
+	SYS_MUNLOCK                      = 4155
+	SYS_MLOCKALL                     = 4156
+	SYS_MUNLOCKALL                   = 4157
+	SYS_SCHED_SETPARAM               = 4158
+	SYS_SCHED_GETPARAM               = 4159
+	SYS_SCHED_SETSCHEDULER           = 4160
+	SYS_SCHED_GETSCHEDULER           = 4161
+	SYS_SCHED_YIELD                  = 4162
+	SYS_SCHED_GET_PRIORITY_MAX       = 4163
+	SYS_SCHED_GET_PRIORITY_MIN       = 4164
+	SYS_SCHED_RR_GET_INTERVAL        = 4165
+	SYS_NANOSLEEP                    = 4166
+	SYS_MREMAP                       = 4167
+	SYS_ACCEPT                       = 4168
+	SYS_BIND                         = 4169
+	SYS_CONNECT                      = 4170
+	SYS_GETPEERNAME                  = 4171
+	SYS_GETSOCKNAME                  = 4172
+	SYS_GETSOCKOPT                   = 4173
+	SYS_LISTEN                       = 4174
+	SYS_RECV                         = 4175
+	SYS_RECVFROM                     = 4176
+	SYS_RECVMSG                      = 4177
+	SYS_SEND                         = 4178
+	SYS_SENDMSG                      = 4179
+	SYS_SENDTO                       = 4180
+	SYS_SETSOCKOPT                   = 4181
+	SYS_SHUTDOWN                     = 4182
+	SYS_SOCKET                       = 4183
+	SYS_SOCKETPAIR                   = 4184
+	SYS_SETRESUID                    = 4185
+	SYS_GETRESUID                    = 4186
+	SYS_QUERY_MODULE                 = 4187
+	SYS_POLL                         = 4188
+	SYS_NFSSERVCTL                   = 4189
+	SYS_SETRESGID                    = 4190
+	SYS_GETRESGID                    = 4191
+	SYS_PRCTL                        = 4192
+	SYS_RT_SIGRETURN                 = 4193
+	SYS_RT_SIGACTION                 = 4194
+	SYS_RT_SIGPROCMASK               = 4195
+	SYS_RT_SIGPENDING                = 4196
+	SYS_RT_SIGTIMEDWAIT              = 4197
+	SYS_RT_SIGQUEUEINFO              = 4198
+	SYS_RT_SIGSUSPEND                = 4199
+	SYS_PREAD64                      = 4200
+	SYS_PWRITE64                     = 4201
+	SYS_CHOWN                        = 4202
+	SYS_GETCWD                       = 4203
+	SYS_CAPGET                       = 4204
+	SYS_CAPSET                       = 4205
+	SYS_SIGALTSTACK                  = 4206
+	SYS_SENDFILE                     = 4207
+	SYS_GETPMSG                      = 4208
+	SYS_PUTPMSG                      = 4209
+	SYS_MMAP2                        = 4210
+	SYS_TRUNCATE64                   = 4211
+	SYS_FTRUNCATE64                  = 4212
+	SYS_STAT64                       = 4213
+	SYS_LSTAT64                      = 4214
+	SYS_FSTAT64                      = 4215
+	SYS_PIVOT_ROOT                   = 4216
+	SYS_MINCORE                      = 4217
+	SYS_MADVISE                      = 4218
+	SYS_GETDENTS64                   = 4219
+	SYS_FCNTL64                      = 4220
+	SYS_RESERVED221                  = 4221
+	SYS_GETTID                       = 4222
+	SYS_READAHEAD                    = 4223
+	SYS_SETXATTR                     = 4224
+	SYS_LSETXATTR                    = 4225
+	SYS_FSETXATTR                    = 4226
+	SYS_GETXATTR                     = 4227
+	SYS_LGETXATTR                    = 4228
+	SYS_FGETXATTR                    = 4229
+	SYS_LISTXATTR                    = 4230
+	SYS_LLISTXATTR                   = 4231
+	SYS_FLISTXATTR                   = 4232
+	SYS_REMOVEXATTR                  = 4233
+	SYS_LREMOVEXATTR                 = 4234
+	SYS_FREMOVEXATTR                 = 4235
+	SYS_TKILL                        = 4236
+	SYS_SENDFILE64                   = 4237
+	SYS_FUTEX                        = 4238
+	SYS_SCHED_SETAFFINITY            = 4239
+	SYS_SCHED_GETAFFINITY            = 4240
+	SYS_IO_SETUP                     = 4241
+	SYS_IO_DESTROY                   = 4242
+	SYS_IO_GETEVENTS                 = 4243
+	SYS_IO_SUBMIT                    = 4244
+	SYS_IO_CANCEL                    = 4245
+	SYS_EXIT_GROUP                   = 4246
+	SYS_LOOKUP_DCOOKIE               = 4247
+	SYS_EPOLL_CREATE                 = 4248
+	SYS_EPOLL_CTL                    = 4249
+	SYS_EPOLL_WAIT                   = 4250
+	SYS_REMAP_FILE_PAGES             = 4251
+	SYS_SET_TID_ADDRESS              = 4252
+	SYS_RESTART_SYSCALL              = 4253
+	SYS_FADVISE64                    = 4254
+	SYS_STATFS64                     = 4255
+	SYS_FSTATFS64                    = 4256
+	SYS_TIMER_CREATE                 = 4257
+	SYS_TIMER_SETTIME                = 4258
+	SYS_TIMER_GETTIME                = 4259
+	SYS_TIMER_GETOVERRUN             = 4260
+	SYS_TIMER_DELETE                 = 4261
+	SYS_CLOCK_SETTIME                = 4262
+	SYS_CLOCK_GETTIME                = 4263
+	SYS_CLOCK_GETRES                 = 4264
+	SYS_CLOCK_NANOSLEEP              = 4265
+	SYS_TGKILL                       = 4266
+	SYS_UTIMES                       = 4267
+	SYS_MBIND                        = 4268
+	SYS_GET_MEMPOLICY                = 4269
+	SYS_SET_MEMPOLICY                = 4270
+	SYS_MQ_OPEN                      = 4271
+	SYS_MQ_UNLINK                    = 4272
+	SYS_MQ_TIMEDSEND                 = 4273
+	SYS_MQ_TIMEDRECEIVE              = 4274
+	SYS_MQ_NOTIFY                    = 4275
+	SYS_MQ_GETSETATTR                = 4276
+	SYS_VSERVER                      = 4277
+	SYS_WAITID                       = 4278
+	SYS_ADD_KEY                      = 4280
+	SYS_REQUEST_KEY                  = 4281
+	SYS_KEYCTL                       = 4282
+	SYS_SET_THREAD_AREA              = 4283
+	SYS_INOTIFY_INIT                 = 4284
+	SYS_INOTIFY_ADD_WATCH            = 4285
+	SYS_INOTIFY_RM_WATCH             = 4286
+	SYS_MIGRATE_PAGES                = 4287
+	SYS_OPENAT                       = 4288
+	SYS_MKDIRAT                      = 4289
+	SYS_MKNODAT                      = 4290
+	SYS_FCHOWNAT                     = 4291
+	SYS_FUTIMESAT                    = 4292
+	SYS_FSTATAT64                    = 4293
+	SYS_UNLINKAT                     = 4294
+	SYS_RENAMEAT                     = 4295
+	SYS_LINKAT                       = 4296
+	SYS_SYMLINKAT                    = 4297
+	SYS_READLINKAT                   = 4298
+	SYS_FCHMODAT                     = 4299
+	SYS_FACCESSAT                    = 4300
+	SYS_PSELECT6                     = 4301
+	SYS_PPOLL                        = 4302
+	SYS_UNSHARE                      = 4303
+	SYS_SPLICE                       = 4304
+	SYS_SYNC_FILE_RANGE              = 4305
+	SYS_TEE                          = 4306
+	SYS_VMSPLICE                     = 4307
+	SYS_MOVE_PAGES                   = 4308
+	SYS_SET_ROBUST_LIST              = 4309
+	SYS_GET_ROBUST_LIST              = 4310
+	SYS_KEXEC_LOAD                   = 4311
+	SYS_GETCPU                       = 4312
+	SYS_EPOLL_PWAIT                  = 4313
+	SYS_IOPRIO_SET                   = 4314
+	SYS_IOPRIO_GET                   = 4315
+	SYS_UTIMENSAT                    = 4316
+	SYS_SIGNALFD                     = 4317
+	SYS_TIMERFD                      = 4318
+	SYS_EVENTFD                      = 4319
+	SYS_FALLOCATE                    = 4320
+	SYS_TIMERFD_CREATE               = 4321
+	SYS_TIMERFD_GETTIME              = 4322
+	SYS_TIMERFD_SETTIME              = 4323
+	SYS_SIGNALFD4                    = 4324
+	SYS_EVENTFD2                     = 4325
+	SYS_EPOLL_CREATE1                = 4326
+	SYS_DUP3                         = 4327
+	SYS_PIPE2                        = 4328
+	SYS_INOTIFY_INIT1                = 4329
+	SYS_PREADV                       = 4330
+	SYS_PWRITEV                      = 4331
+	SYS_RT_TGSIGQUEUEINFO            = 4332
+	SYS_PERF_EVENT_OPEN              = 4333
+	SYS_ACCEPT4                      = 4334
+	SYS_RECVMMSG                     = 4335
+	SYS_FANOTIFY_INIT                = 4336
+	SYS_FANOTIFY_MARK                = 4337
+	SYS_PRLIMIT64                    = 4338
+	SYS_NAME_TO_HANDLE_AT            = 4339
+	SYS_OPEN_BY_HANDLE_AT            = 4340
+	SYS_CLOCK_ADJTIME                = 4341
+	SYS_SYNCFS                       = 4342
+	SYS_SENDMMSG                     = 4343
+	SYS_SETNS                        = 4344
+	SYS_PROCESS_VM_READV             = 4345
+	SYS_PROCESS_VM_WRITEV            = 4346
+	SYS_KCMP                         = 4347
+	SYS_FINIT_MODULE                 = 4348
+	SYS_SCHED_SETATTR                = 4349
+	SYS_SCHED_GETATTR                = 4350
+	SYS_RENAMEAT2                    = 4351
+	SYS_SECCOMP                      = 4352
+	SYS_GETRANDOM                    = 4353
+	SYS_MEMFD_CREATE                 = 4354
+	SYS_BPF                          = 4355
+	SYS_EXECVEAT                     = 4356
+	SYS_USERFAULTFD                  = 4357
+	SYS_MEMBARRIER                   = 4358
+	SYS_MLOCK2                       = 4359
+	SYS_COPY_FILE_RANGE              = 4360
+	SYS_PREADV2                      = 4361
+	SYS_PWRITEV2                     = 4362
+	SYS_PKEY_MPROTECT                = 4363
+	SYS_PKEY_ALLOC                   = 4364
+	SYS_PKEY_FREE                    = 4365
+	SYS_STATX                        = 4366
+	SYS_RSEQ                         = 4367
+	SYS_IO_PGETEVENTS                = 4368
+	SYS_SEMGET                       = 4393
+	SYS_SEMCTL                       = 4394
+	SYS_SHMGET                       = 4395
+	SYS_SHMCTL                       = 4396
+	SYS_SHMAT                        = 4397
+	SYS_SHMDT                        = 4398
+	SYS_MSGGET                       = 4399
+	SYS_MSGSND                       = 4400
+	SYS_MSGRCV                       = 4401
+	SYS_MSGCTL                       = 4402
+	SYS_CLOCK_GETTIME64              = 4403
+	SYS_CLOCK_SETTIME64              = 4404
+	SYS_CLOCK_ADJTIME64              = 4405
+	SYS_CLOCK_GETRES_TIME64          = 4406
+	SYS_CLOCK_NANOSLEEP_TIME64       = 4407
+	SYS_TIMER_GETTIME64              = 4408
+	SYS_TIMER_SETTIME64              = 4409
+	SYS_TIMERFD_GETTIME64            = 4410
+	SYS_TIMERFD_SETTIME64            = 4411
+	SYS_UTIMENSAT_TIME64             = 4412
+	SYS_PSELECT6_TIME64              = 4413
+	SYS_PPOLL_TIME64                 = 4414
+	SYS_IO_PGETEVENTS_TIME64         = 4416
+	SYS_RECVMMSG_TIME64              = 4417
+	SYS_MQ_TIMEDSEND_TIME64          = 4418
+	SYS_MQ_TIMEDRECEIVE_TIME64       = 4419
+	SYS_SEMTIMEDOP_TIME64            = 4420
+	SYS_RT_SIGTIMEDWAIT_TIME64       = 4421
+	SYS_FUTEX_TIME64                 = 4422
+	SYS_SCHED_RR_GET_INTERVAL_TIME64 = 4423
+	SYS_PIDFD_SEND_SIGNAL            = 4424
+	SYS_IO_URING_SETUP               = 4425
+	SYS_IO_URING_ENTER               = 4426
+	SYS_IO_URING_REGISTER            = 4427
+	SYS_OPEN_TREE                    = 4428
+	SYS_MOVE_MOUNT                   = 4429
+	SYS_FSOPEN                       = 4430
+	SYS_FSCONFIG                     = 4431
+	SYS_FSMOUNT                      = 4432
+	SYS_FSPICK                       = 4433
+	SYS_PIDFD_OPEN                   = 4434
+	SYS_CLONE3                       = 4435
+	SYS_OPENAT2                      = 4437
+	SYS_PIDFD_GETFD                  = 4438
+	SYS_FACCESSAT2                   = 4439
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_mips64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_mips64.go
new file mode 100644
index 000000000..c1d824a4f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_mips64.go
@@ -0,0 +1,352 @@
+// go run linux/mksysnum.go -Wall -Werror -static -I/tmp/include /tmp/include/asm/unistd.h
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build mips64,linux
+
+package unix
+
+const (
+	SYS_READ                   = 5000
+	SYS_WRITE                  = 5001
+	SYS_OPEN                   = 5002
+	SYS_CLOSE                  = 5003
+	SYS_STAT                   = 5004
+	SYS_FSTAT                  = 5005
+	SYS_LSTAT                  = 5006
+	SYS_POLL                   = 5007
+	SYS_LSEEK                  = 5008
+	SYS_MMAP                   = 5009
+	SYS_MPROTECT               = 5010
+	SYS_MUNMAP                 = 5011
+	SYS_BRK                    = 5012
+	SYS_RT_SIGACTION           = 5013
+	SYS_RT_SIGPROCMASK         = 5014
+	SYS_IOCTL                  = 5015
+	SYS_PREAD64                = 5016
+	SYS_PWRITE64               = 5017
+	SYS_READV                  = 5018
+	SYS_WRITEV                 = 5019
+	SYS_ACCESS                 = 5020
+	SYS_PIPE                   = 5021
+	SYS__NEWSELECT             = 5022
+	SYS_SCHED_YIELD            = 5023
+	SYS_MREMAP                 = 5024
+	SYS_MSYNC                  = 5025
+	SYS_MINCORE                = 5026
+	SYS_MADVISE                = 5027
+	SYS_SHMGET                 = 5028
+	SYS_SHMAT                  = 5029
+	SYS_SHMCTL                 = 5030
+	SYS_DUP                    = 5031
+	SYS_DUP2                   = 5032
+	SYS_PAUSE                  = 5033
+	SYS_NANOSLEEP              = 5034
+	SYS_GETITIMER              = 5035
+	SYS_SETITIMER              = 5036
+	SYS_ALARM                  = 5037
+	SYS_GETPID                 = 5038
+	SYS_SENDFILE               = 5039
+	SYS_SOCKET                 = 5040
+	SYS_CONNECT                = 5041
+	SYS_ACCEPT                 = 5042
+	SYS_SENDTO                 = 5043
+	SYS_RECVFROM               = 5044
+	SYS_SENDMSG                = 5045
+	SYS_RECVMSG                = 5046
+	SYS_SHUTDOWN               = 5047
+	SYS_BIND                   = 5048
+	SYS_LISTEN                 = 5049
+	SYS_GETSOCKNAME            = 5050
+	SYS_GETPEERNAME            = 5051
+	SYS_SOCKETPAIR             = 5052
+	SYS_SETSOCKOPT             = 5053
+	SYS_GETSOCKOPT             = 5054
+	SYS_CLONE                  = 5055
+	SYS_FORK                   = 5056
+	SYS_EXECVE                 = 5057
+	SYS_EXIT                   = 5058
+	SYS_WAIT4                  = 5059
+	SYS_KILL                   = 5060
+	SYS_UNAME                  = 5061
+	SYS_SEMGET                 = 5062
+	SYS_SEMOP                  = 5063
+	SYS_SEMCTL                 = 5064
+	SYS_SHMDT                  = 5065
+	SYS_MSGGET                 = 5066
+	SYS_MSGSND                 = 5067
+	SYS_MSGRCV                 = 5068
+	SYS_MSGCTL                 = 5069
+	SYS_FCNTL                  = 5070
+	SYS_FLOCK                  = 5071
+	SYS_FSYNC                  = 5072
+	SYS_FDATASYNC              = 5073
+	SYS_TRUNCATE               = 5074
+	SYS_FTRUNCATE              = 5075
+	SYS_GETDENTS               = 5076
+	SYS_GETCWD                 = 5077
+	SYS_CHDIR                  = 5078
+	SYS_FCHDIR                 = 5079
+	SYS_RENAME                 = 5080
+	SYS_MKDIR                  = 5081
+	SYS_RMDIR                  = 5082
+	SYS_CREAT                  = 5083
+	SYS_LINK                   = 5084
+	SYS_UNLINK                 = 5085
+	SYS_SYMLINK                = 5086
+	SYS_READLINK               = 5087
+	SYS_CHMOD                  = 5088
+	SYS_FCHMOD                 = 5089
+	SYS_CHOWN                  = 5090
+	SYS_FCHOWN                 = 5091
+	SYS_LCHOWN                 = 5092
+	SYS_UMASK                  = 5093
+	SYS_GETTIMEOFDAY           = 5094
+	SYS_GETRLIMIT              = 5095
+	SYS_GETRUSAGE              = 5096
+	SYS_SYSINFO                = 5097
+	SYS_TIMES                  = 5098
+	SYS_PTRACE                 = 5099
+	SYS_GETUID                 = 5100
+	SYS_SYSLOG                 = 5101
+	SYS_GETGID                 = 5102
+	SYS_SETUID                 = 5103
+	SYS_SETGID                 = 5104
+	SYS_GETEUID                = 5105
+	SYS_GETEGID                = 5106
+	SYS_SETPGID                = 5107
+	SYS_GETPPID                = 5108
+	SYS_GETPGRP                = 5109
+	SYS_SETSID                 = 5110
+	SYS_SETREUID               = 5111
+	SYS_SETREGID               = 5112
+	SYS_GETGROUPS              = 5113
+	SYS_SETGROUPS              = 5114
+	SYS_SETRESUID              = 5115
+	SYS_GETRESUID              = 5116
+	SYS_SETRESGID              = 5117
+	SYS_GETRESGID              = 5118
+	SYS_GETPGID                = 5119
+	SYS_SETFSUID               = 5120
+	SYS_SETFSGID               = 5121
+	SYS_GETSID                 = 5122
+	SYS_CAPGET                 = 5123
+	SYS_CAPSET                 = 5124
+	SYS_RT_SIGPENDING          = 5125
+	SYS_RT_SIGTIMEDWAIT        = 5126
+	SYS_RT_SIGQUEUEINFO        = 5127
+	SYS_RT_SIGSUSPEND          = 5128
+	SYS_SIGALTSTACK            = 5129
+	SYS_UTIME                  = 5130
+	SYS_MKNOD                  = 5131
+	SYS_PERSONALITY            = 5132
+	SYS_USTAT                  = 5133
+	SYS_STATFS                 = 5134
+	SYS_FSTATFS                = 5135
+	SYS_SYSFS                  = 5136
+	SYS_GETPRIORITY            = 5137
+	SYS_SETPRIORITY            = 5138
+	SYS_SCHED_SETPARAM         = 5139
+	SYS_SCHED_GETPARAM         = 5140
+	SYS_SCHED_SETSCHEDULER     = 5141
+	SYS_SCHED_GETSCHEDULER     = 5142
+	SYS_SCHED_GET_PRIORITY_MAX = 5143
+	SYS_SCHED_GET_PRIORITY_MIN = 5144
+	SYS_SCHED_RR_GET_INTERVAL  = 5145
+	SYS_MLOCK                  = 5146
+	SYS_MUNLOCK                = 5147
+	SYS_MLOCKALL               = 5148
+	SYS_MUNLOCKALL             = 5149
+	SYS_VHANGUP                = 5150
+	SYS_PIVOT_ROOT             = 5151
+	SYS__SYSCTL                = 5152
+	SYS_PRCTL                  = 5153
+	SYS_ADJTIMEX               = 5154
+	SYS_SETRLIMIT              = 5155
+	SYS_CHROOT                 = 5156
+	SYS_SYNC                   = 5157
+	SYS_ACCT                   = 5158
+	SYS_SETTIMEOFDAY           = 5159
+	SYS_MOUNT                  = 5160
+	SYS_UMOUNT2                = 5161
+	SYS_SWAPON                 = 5162
+	SYS_SWAPOFF                = 5163
+	SYS_REBOOT                 = 5164
+	SYS_SETHOSTNAME            = 5165
+	SYS_SETDOMAINNAME          = 5166
+	SYS_CREATE_MODULE          = 5167
+	SYS_INIT_MODULE            = 5168
+	SYS_DELETE_MODULE          = 5169
+	SYS_GET_KERNEL_SYMS        = 5170
+	SYS_QUERY_MODULE           = 5171
+	SYS_QUOTACTL               = 5172
+	SYS_NFSSERVCTL             = 5173
+	SYS_GETPMSG                = 5174
+	SYS_PUTPMSG                = 5175
+	SYS_AFS_SYSCALL            = 5176
+	SYS_RESERVED177            = 5177
+	SYS_GETTID                 = 5178
+	SYS_READAHEAD              = 5179
+	SYS_SETXATTR               = 5180
+	SYS_LSETXATTR              = 5181
+	SYS_FSETXATTR              = 5182
+	SYS_GETXATTR               = 5183
+	SYS_LGETXATTR              = 5184
+	SYS_FGETXATTR              = 5185
+	SYS_LISTXATTR              = 5186
+	SYS_LLISTXATTR             = 5187
+	SYS_FLISTXATTR             = 5188
+	SYS_REMOVEXATTR            = 5189
+	SYS_LREMOVEXATTR           = 5190
+	SYS_FREMOVEXATTR           = 5191
+	SYS_TKILL                  = 5192
+	SYS_RESERVED193            = 5193
+	SYS_FUTEX                  = 5194
+	SYS_SCHED_SETAFFINITY      = 5195
+	SYS_SCHED_GETAFFINITY      = 5196
+	SYS_CACHEFLUSH             = 5197
+	SYS_CACHECTL               = 5198
+	SYS_SYSMIPS                = 5199
+	SYS_IO_SETUP               = 5200
+	SYS_IO_DESTROY             = 5201
+	SYS_IO_GETEVENTS           = 5202
+	SYS_IO_SUBMIT              = 5203
+	SYS_IO_CANCEL              = 5204
+	SYS_EXIT_GROUP             = 5205
+	SYS_LOOKUP_DCOOKIE         = 5206
+	SYS_EPOLL_CREATE           = 5207
+	SYS_EPOLL_CTL              = 5208
+	SYS_EPOLL_WAIT             = 5209
+	SYS_REMAP_FILE_PAGES       = 5210
+	SYS_RT_SIGRETURN           = 5211
+	SYS_SET_TID_ADDRESS        = 5212
+	SYS_RESTART_SYSCALL        = 5213
+	SYS_SEMTIMEDOP             = 5214
+	SYS_FADVISE64              = 5215
+	SYS_TIMER_CREATE           = 5216
+	SYS_TIMER_SETTIME          = 5217
+	SYS_TIMER_GETTIME          = 5218
+	SYS_TIMER_GETOVERRUN       = 5219
+	SYS_TIMER_DELETE           = 5220
+	SYS_CLOCK_SETTIME          = 5221
+	SYS_CLOCK_GETTIME          = 5222
+	SYS_CLOCK_GETRES           = 5223
+	SYS_CLOCK_NANOSLEEP        = 5224
+	SYS_TGKILL                 = 5225
+	SYS_UTIMES                 = 5226
+	SYS_MBIND                  = 5227
+	SYS_GET_MEMPOLICY          = 5228
+	SYS_SET_MEMPOLICY          = 5229
+	SYS_MQ_OPEN                = 5230
+	SYS_MQ_UNLINK              = 5231
+	SYS_MQ_TIMEDSEND           = 5232
+	SYS_MQ_TIMEDRECEIVE        = 5233
+	SYS_MQ_NOTIFY              = 5234
+	SYS_MQ_GETSETATTR          = 5235
+	SYS_VSERVER                = 5236
+	SYS_WAITID                 = 5237
+	SYS_ADD_KEY                = 5239
+	SYS_REQUEST_KEY            = 5240
+	SYS_KEYCTL                 = 5241
+	SYS_SET_THREAD_AREA        = 5242
+	SYS_INOTIFY_INIT           = 5243
+	SYS_INOTIFY_ADD_WATCH      = 5244
+	SYS_INOTIFY_RM_WATCH       = 5245
+	SYS_MIGRATE_PAGES          = 5246
+	SYS_OPENAT                 = 5247
+	SYS_MKDIRAT                = 5248
+	SYS_MKNODAT                = 5249
+	SYS_FCHOWNAT               = 5250
+	SYS_FUTIMESAT              = 5251
+	SYS_NEWFSTATAT             = 5252
+	SYS_UNLINKAT               = 5253
+	SYS_RENAMEAT               = 5254
+	SYS_LINKAT                 = 5255
+	SYS_SYMLINKAT              = 5256
+	SYS_READLINKAT             = 5257
+	SYS_FCHMODAT               = 5258
+	SYS_FACCESSAT              = 5259
+	SYS_PSELECT6               = 5260
+	SYS_PPOLL                  = 5261
+	SYS_UNSHARE                = 5262
+	SYS_SPLICE                 = 5263
+	SYS_SYNC_FILE_RANGE        = 5264
+	SYS_TEE                    = 5265
+	SYS_VMSPLICE               = 5266
+	SYS_MOVE_PAGES             = 5267
+	SYS_SET_ROBUST_LIST        = 5268
+	SYS_GET_ROBUST_LIST        = 5269
+	SYS_KEXEC_LOAD             = 5270
+	SYS_GETCPU                 = 5271
+	SYS_EPOLL_PWAIT            = 5272
+	SYS_IOPRIO_SET             = 5273
+	SYS_IOPRIO_GET             = 5274
+	SYS_UTIMENSAT              = 5275
+	SYS_SIGNALFD               = 5276
+	SYS_TIMERFD                = 5277
+	SYS_EVENTFD                = 5278
+	SYS_FALLOCATE              = 5279
+	SYS_TIMERFD_CREATE         = 5280
+	SYS_TIMERFD_GETTIME        = 5281
+	SYS_TIMERFD_SETTIME        = 5282
+	SYS_SIGNALFD4              = 5283
+	SYS_EVENTFD2               = 5284
+	SYS_EPOLL_CREATE1          = 5285
+	SYS_DUP3                   = 5286
+	SYS_PIPE2                  = 5287
+	SYS_INOTIFY_INIT1          = 5288
+	SYS_PREADV                 = 5289
+	SYS_PWRITEV                = 5290
+	SYS_RT_TGSIGQUEUEINFO      = 5291
+	SYS_PERF_EVENT_OPEN        = 5292
+	SYS_ACCEPT4                = 5293
+	SYS_RECVMMSG               = 5294
+	SYS_FANOTIFY_INIT          = 5295
+	SYS_FANOTIFY_MARK          = 5296
+	SYS_PRLIMIT64              = 5297
+	SYS_NAME_TO_HANDLE_AT      = 5298
+	SYS_OPEN_BY_HANDLE_AT      = 5299
+	SYS_CLOCK_ADJTIME          = 5300
+	SYS_SYNCFS                 = 5301
+	SYS_SENDMMSG               = 5302
+	SYS_SETNS                  = 5303
+	SYS_PROCESS_VM_READV       = 5304
+	SYS_PROCESS_VM_WRITEV      = 5305
+	SYS_KCMP                   = 5306
+	SYS_FINIT_MODULE           = 5307
+	SYS_GETDENTS64             = 5308
+	SYS_SCHED_SETATTR          = 5309
+	SYS_SCHED_GETATTR          = 5310
+	SYS_RENAMEAT2              = 5311
+	SYS_SECCOMP                = 5312
+	SYS_GETRANDOM              = 5313
+	SYS_MEMFD_CREATE           = 5314
+	SYS_BPF                    = 5315
+	SYS_EXECVEAT               = 5316
+	SYS_USERFAULTFD            = 5317
+	SYS_MEMBARRIER             = 5318
+	SYS_MLOCK2                 = 5319
+	SYS_COPY_FILE_RANGE        = 5320
+	SYS_PREADV2                = 5321
+	SYS_PWRITEV2               = 5322
+	SYS_PKEY_MPROTECT          = 5323
+	SYS_PKEY_ALLOC             = 5324
+	SYS_PKEY_FREE              = 5325
+	SYS_STATX                  = 5326
+	SYS_RSEQ                   = 5327
+	SYS_IO_PGETEVENTS          = 5328
+	SYS_PIDFD_SEND_SIGNAL      = 5424
+	SYS_IO_URING_SETUP         = 5425
+	SYS_IO_URING_ENTER         = 5426
+	SYS_IO_URING_REGISTER      = 5427
+	SYS_OPEN_TREE              = 5428
+	SYS_MOVE_MOUNT             = 5429
+	SYS_FSOPEN                 = 5430
+	SYS_FSCONFIG               = 5431
+	SYS_FSMOUNT                = 5432
+	SYS_FSPICK                 = 5433
+	SYS_PIDFD_OPEN             = 5434
+	SYS_CLONE3                 = 5435
+	SYS_OPENAT2                = 5437
+	SYS_PIDFD_GETFD            = 5438
+	SYS_FACCESSAT2             = 5439
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_mips64le.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_mips64le.go
new file mode 100644
index 000000000..598dd5d63
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_mips64le.go
@@ -0,0 +1,352 @@
+// go run linux/mksysnum.go -Wall -Werror -static -I/tmp/include /tmp/include/asm/unistd.h
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build mips64le,linux
+
+package unix
+
+const (
+	SYS_READ                   = 5000
+	SYS_WRITE                  = 5001
+	SYS_OPEN                   = 5002
+	SYS_CLOSE                  = 5003
+	SYS_STAT                   = 5004
+	SYS_FSTAT                  = 5005
+	SYS_LSTAT                  = 5006
+	SYS_POLL                   = 5007
+	SYS_LSEEK                  = 5008
+	SYS_MMAP                   = 5009
+	SYS_MPROTECT               = 5010
+	SYS_MUNMAP                 = 5011
+	SYS_BRK                    = 5012
+	SYS_RT_SIGACTION           = 5013
+	SYS_RT_SIGPROCMASK         = 5014
+	SYS_IOCTL                  = 5015
+	SYS_PREAD64                = 5016
+	SYS_PWRITE64               = 5017
+	SYS_READV                  = 5018
+	SYS_WRITEV                 = 5019
+	SYS_ACCESS                 = 5020
+	SYS_PIPE                   = 5021
+	SYS__NEWSELECT             = 5022
+	SYS_SCHED_YIELD            = 5023
+	SYS_MREMAP                 = 5024
+	SYS_MSYNC                  = 5025
+	SYS_MINCORE                = 5026
+	SYS_MADVISE                = 5027
+	SYS_SHMGET                 = 5028
+	SYS_SHMAT                  = 5029
+	SYS_SHMCTL                 = 5030
+	SYS_DUP                    = 5031
+	SYS_DUP2                   = 5032
+	SYS_PAUSE                  = 5033
+	SYS_NANOSLEEP              = 5034
+	SYS_GETITIMER              = 5035
+	SYS_SETITIMER              = 5036
+	SYS_ALARM                  = 5037
+	SYS_GETPID                 = 5038
+	SYS_SENDFILE               = 5039
+	SYS_SOCKET                 = 5040
+	SYS_CONNECT                = 5041
+	SYS_ACCEPT                 = 5042
+	SYS_SENDTO                 = 5043
+	SYS_RECVFROM               = 5044
+	SYS_SENDMSG                = 5045
+	SYS_RECVMSG                = 5046
+	SYS_SHUTDOWN               = 5047
+	SYS_BIND                   = 5048
+	SYS_LISTEN                 = 5049
+	SYS_GETSOCKNAME            = 5050
+	SYS_GETPEERNAME            = 5051
+	SYS_SOCKETPAIR             = 5052
+	SYS_SETSOCKOPT             = 5053
+	SYS_GETSOCKOPT             = 5054
+	SYS_CLONE                  = 5055
+	SYS_FORK                   = 5056
+	SYS_EXECVE                 = 5057
+	SYS_EXIT                   = 5058
+	SYS_WAIT4                  = 5059
+	SYS_KILL                   = 5060
+	SYS_UNAME                  = 5061
+	SYS_SEMGET                 = 5062
+	SYS_SEMOP                  = 5063
+	SYS_SEMCTL                 = 5064
+	SYS_SHMDT                  = 5065
+	SYS_MSGGET                 = 5066
+	SYS_MSGSND                 = 5067
+	SYS_MSGRCV                 = 5068
+	SYS_MSGCTL                 = 5069
+	SYS_FCNTL                  = 5070
+	SYS_FLOCK                  = 5071
+	SYS_FSYNC                  = 5072
+	SYS_FDATASYNC              = 5073
+	SYS_TRUNCATE               = 5074
+	SYS_FTRUNCATE              = 5075
+	SYS_GETDENTS               = 5076
+	SYS_GETCWD                 = 5077
+	SYS_CHDIR                  = 5078
+	SYS_FCHDIR                 = 5079
+	SYS_RENAME                 = 5080
+	SYS_MKDIR                  = 5081
+	SYS_RMDIR                  = 5082
+	SYS_CREAT                  = 5083
+	SYS_LINK                   = 5084
+	SYS_UNLINK                 = 5085
+	SYS_SYMLINK                = 5086
+	SYS_READLINK               = 5087
+	SYS_CHMOD                  = 5088
+	SYS_FCHMOD                 = 5089
+	SYS_CHOWN                  = 5090
+	SYS_FCHOWN                 = 5091
+	SYS_LCHOWN                 = 5092
+	SYS_UMASK                  = 5093
+	SYS_GETTIMEOFDAY           = 5094
+	SYS_GETRLIMIT              = 5095
+	SYS_GETRUSAGE              = 5096
+	SYS_SYSINFO                = 5097
+	SYS_TIMES                  = 5098
+	SYS_PTRACE                 = 5099
+	SYS_GETUID                 = 5100
+	SYS_SYSLOG                 = 5101
+	SYS_GETGID                 = 5102
+	SYS_SETUID                 = 5103
+	SYS_SETGID                 = 5104
+	SYS_GETEUID                = 5105
+	SYS_GETEGID                = 5106
+	SYS_SETPGID                = 5107
+	SYS_GETPPID                = 5108
+	SYS_GETPGRP                = 5109
+	SYS_SETSID                 = 5110
+	SYS_SETREUID               = 5111
+	SYS_SETREGID               = 5112
+	SYS_GETGROUPS              = 5113
+	SYS_SETGROUPS              = 5114
+	SYS_SETRESUID              = 5115
+	SYS_GETRESUID              = 5116
+	SYS_SETRESGID              = 5117
+	SYS_GETRESGID              = 5118
+	SYS_GETPGID                = 5119
+	SYS_SETFSUID               = 5120
+	SYS_SETFSGID               = 5121
+	SYS_GETSID                 = 5122
+	SYS_CAPGET                 = 5123
+	SYS_CAPSET                 = 5124
+	SYS_RT_SIGPENDING          = 5125
+	SYS_RT_SIGTIMEDWAIT        = 5126
+	SYS_RT_SIGQUEUEINFO        = 5127
+	SYS_RT_SIGSUSPEND          = 5128
+	SYS_SIGALTSTACK            = 5129
+	SYS_UTIME                  = 5130
+	SYS_MKNOD                  = 5131
+	SYS_PERSONALITY            = 5132
+	SYS_USTAT                  = 5133
+	SYS_STATFS                 = 5134
+	SYS_FSTATFS                = 5135
+	SYS_SYSFS                  = 5136
+	SYS_GETPRIORITY            = 5137
+	SYS_SETPRIORITY            = 5138
+	SYS_SCHED_SETPARAM         = 5139
+	SYS_SCHED_GETPARAM         = 5140
+	SYS_SCHED_SETSCHEDULER     = 5141
+	SYS_SCHED_GETSCHEDULER     = 5142
+	SYS_SCHED_GET_PRIORITY_MAX = 5143
+	SYS_SCHED_GET_PRIORITY_MIN = 5144
+	SYS_SCHED_RR_GET_INTERVAL  = 5145
+	SYS_MLOCK                  = 5146
+	SYS_MUNLOCK                = 5147
+	SYS_MLOCKALL               = 5148
+	SYS_MUNLOCKALL             = 5149
+	SYS_VHANGUP                = 5150
+	SYS_PIVOT_ROOT             = 5151
+	SYS__SYSCTL                = 5152
+	SYS_PRCTL                  = 5153
+	SYS_ADJTIMEX               = 5154
+	SYS_SETRLIMIT              = 5155
+	SYS_CHROOT                 = 5156
+	SYS_SYNC                   = 5157
+	SYS_ACCT                   = 5158
+	SYS_SETTIMEOFDAY           = 5159
+	SYS_MOUNT                  = 5160
+	SYS_UMOUNT2                = 5161
+	SYS_SWAPON                 = 5162
+	SYS_SWAPOFF                = 5163
+	SYS_REBOOT                 = 5164
+	SYS_SETHOSTNAME            = 5165
+	SYS_SETDOMAINNAME          = 5166
+	SYS_CREATE_MODULE          = 5167
+	SYS_INIT_MODULE            = 5168
+	SYS_DELETE_MODULE          = 5169
+	SYS_GET_KERNEL_SYMS        = 5170
+	SYS_QUERY_MODULE           = 5171
+	SYS_QUOTACTL               = 5172
+	SYS_NFSSERVCTL             = 5173
+	SYS_GETPMSG                = 5174
+	SYS_PUTPMSG                = 5175
+	SYS_AFS_SYSCALL            = 5176
+	SYS_RESERVED177            = 5177
+	SYS_GETTID                 = 5178
+	SYS_READAHEAD              = 5179
+	SYS_SETXATTR               = 5180
+	SYS_LSETXATTR              = 5181
+	SYS_FSETXATTR              = 5182
+	SYS_GETXATTR               = 5183
+	SYS_LGETXATTR              = 5184
+	SYS_FGETXATTR              = 5185
+	SYS_LISTXATTR              = 5186
+	SYS_LLISTXATTR             = 5187
+	SYS_FLISTXATTR             = 5188
+	SYS_REMOVEXATTR            = 5189
+	SYS_LREMOVEXATTR           = 5190
+	SYS_FREMOVEXATTR           = 5191
+	SYS_TKILL                  = 5192
+	SYS_RESERVED193            = 5193
+	SYS_FUTEX                  = 5194
+	SYS_SCHED_SETAFFINITY      = 5195
+	SYS_SCHED_GETAFFINITY      = 5196
+	SYS_CACHEFLUSH             = 5197
+	SYS_CACHECTL               = 5198
+	SYS_SYSMIPS                = 5199
+	SYS_IO_SETUP               = 5200
+	SYS_IO_DESTROY             = 5201
+	SYS_IO_GETEVENTS           = 5202
+	SYS_IO_SUBMIT              = 5203
+	SYS_IO_CANCEL              = 5204
+	SYS_EXIT_GROUP             = 5205
+	SYS_LOOKUP_DCOOKIE         = 5206
+	SYS_EPOLL_CREATE           = 5207
+	SYS_EPOLL_CTL              = 5208
+	SYS_EPOLL_WAIT             = 5209
+	SYS_REMAP_FILE_PAGES       = 5210
+	SYS_RT_SIGRETURN           = 5211
+	SYS_SET_TID_ADDRESS        = 5212
+	SYS_RESTART_SYSCALL        = 5213
+	SYS_SEMTIMEDOP             = 5214
+	SYS_FADVISE64              = 5215
+	SYS_TIMER_CREATE           = 5216
+	SYS_TIMER_SETTIME          = 5217
+	SYS_TIMER_GETTIME          = 5218
+	SYS_TIMER_GETOVERRUN       = 5219
+	SYS_TIMER_DELETE           = 5220
+	SYS_CLOCK_SETTIME          = 5221
+	SYS_CLOCK_GETTIME          = 5222
+	SYS_CLOCK_GETRES           = 5223
+	SYS_CLOCK_NANOSLEEP        = 5224
+	SYS_TGKILL                 = 5225
+	SYS_UTIMES                 = 5226
+	SYS_MBIND                  = 5227
+	SYS_GET_MEMPOLICY          = 5228
+	SYS_SET_MEMPOLICY          = 5229
+	SYS_MQ_OPEN                = 5230
+	SYS_MQ_UNLINK              = 5231
+	SYS_MQ_TIMEDSEND           = 5232
+	SYS_MQ_TIMEDRECEIVE        = 5233
+	SYS_MQ_NOTIFY              = 5234
+	SYS_MQ_GETSETATTR          = 5235
+	SYS_VSERVER                = 5236
+	SYS_WAITID                 = 5237
+	SYS_ADD_KEY                = 5239
+	SYS_REQUEST_KEY            = 5240
+	SYS_KEYCTL                 = 5241
+	SYS_SET_THREAD_AREA        = 5242
+	SYS_INOTIFY_INIT           = 5243
+	SYS_INOTIFY_ADD_WATCH      = 5244
+	SYS_INOTIFY_RM_WATCH       = 5245
+	SYS_MIGRATE_PAGES          = 5246
+	SYS_OPENAT                 = 5247
+	SYS_MKDIRAT                = 5248
+	SYS_MKNODAT                = 5249
+	SYS_FCHOWNAT               = 5250
+	SYS_FUTIMESAT              = 5251
+	SYS_NEWFSTATAT             = 5252
+	SYS_UNLINKAT               = 5253
+	SYS_RENAMEAT               = 5254
+	SYS_LINKAT                 = 5255
+	SYS_SYMLINKAT              = 5256
+	SYS_READLINKAT             = 5257
+	SYS_FCHMODAT               = 5258
+	SYS_FACCESSAT              = 5259
+	SYS_PSELECT6               = 5260
+	SYS_PPOLL                  = 5261
+	SYS_UNSHARE                = 5262
+	SYS_SPLICE                 = 5263
+	SYS_SYNC_FILE_RANGE        = 5264
+	SYS_TEE                    = 5265
+	SYS_VMSPLICE               = 5266
+	SYS_MOVE_PAGES             = 5267
+	SYS_SET_ROBUST_LIST        = 5268
+	SYS_GET_ROBUST_LIST        = 5269
+	SYS_KEXEC_LOAD             = 5270
+	SYS_GETCPU                 = 5271
+	SYS_EPOLL_PWAIT            = 5272
+	SYS_IOPRIO_SET             = 5273
+	SYS_IOPRIO_GET             = 5274
+	SYS_UTIMENSAT              = 5275
+	SYS_SIGNALFD               = 5276
+	SYS_TIMERFD                = 5277
+	SYS_EVENTFD                = 5278
+	SYS_FALLOCATE              = 5279
+	SYS_TIMERFD_CREATE         = 5280
+	SYS_TIMERFD_GETTIME        = 5281
+	SYS_TIMERFD_SETTIME        = 5282
+	SYS_SIGNALFD4              = 5283
+	SYS_EVENTFD2               = 5284
+	SYS_EPOLL_CREATE1          = 5285
+	SYS_DUP3                   = 5286
+	SYS_PIPE2                  = 5287
+	SYS_INOTIFY_INIT1          = 5288
+	SYS_PREADV                 = 5289
+	SYS_PWRITEV                = 5290
+	SYS_RT_TGSIGQUEUEINFO      = 5291
+	SYS_PERF_EVENT_OPEN        = 5292
+	SYS_ACCEPT4                = 5293
+	SYS_RECVMMSG               = 5294
+	SYS_FANOTIFY_INIT          = 5295
+	SYS_FANOTIFY_MARK          = 5296
+	SYS_PRLIMIT64              = 5297
+	SYS_NAME_TO_HANDLE_AT      = 5298
+	SYS_OPEN_BY_HANDLE_AT      = 5299
+	SYS_CLOCK_ADJTIME          = 5300
+	SYS_SYNCFS                 = 5301
+	SYS_SENDMMSG               = 5302
+	SYS_SETNS                  = 5303
+	SYS_PROCESS_VM_READV       = 5304
+	SYS_PROCESS_VM_WRITEV      = 5305
+	SYS_KCMP                   = 5306
+	SYS_FINIT_MODULE           = 5307
+	SYS_GETDENTS64             = 5308
+	SYS_SCHED_SETATTR          = 5309
+	SYS_SCHED_GETATTR          = 5310
+	SYS_RENAMEAT2              = 5311
+	SYS_SECCOMP                = 5312
+	SYS_GETRANDOM              = 5313
+	SYS_MEMFD_CREATE           = 5314
+	SYS_BPF                    = 5315
+	SYS_EXECVEAT               = 5316
+	SYS_USERFAULTFD            = 5317
+	SYS_MEMBARRIER             = 5318
+	SYS_MLOCK2                 = 5319
+	SYS_COPY_FILE_RANGE        = 5320
+	SYS_PREADV2                = 5321
+	SYS_PWRITEV2               = 5322
+	SYS_PKEY_MPROTECT          = 5323
+	SYS_PKEY_ALLOC             = 5324
+	SYS_PKEY_FREE              = 5325
+	SYS_STATX                  = 5326
+	SYS_RSEQ                   = 5327
+	SYS_IO_PGETEVENTS          = 5328
+	SYS_PIDFD_SEND_SIGNAL      = 5424
+	SYS_IO_URING_SETUP         = 5425
+	SYS_IO_URING_ENTER         = 5426
+	SYS_IO_URING_REGISTER      = 5427
+	SYS_OPEN_TREE              = 5428
+	SYS_MOVE_MOUNT             = 5429
+	SYS_FSOPEN                 = 5430
+	SYS_FSCONFIG               = 5431
+	SYS_FSMOUNT                = 5432
+	SYS_FSPICK                 = 5433
+	SYS_PIDFD_OPEN             = 5434
+	SYS_CLONE3                 = 5435
+	SYS_OPENAT2                = 5437
+	SYS_PIDFD_GETFD            = 5438
+	SYS_FACCESSAT2             = 5439
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_mipsle.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_mipsle.go
new file mode 100644
index 000000000..c36782d08
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_mipsle.go
@@ -0,0 +1,422 @@
+// go run linux/mksysnum.go -Wall -Werror -static -I/tmp/include /tmp/include/asm/unistd.h
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build mipsle,linux
+
+package unix
+
+const (
+	SYS_SYSCALL                      = 4000
+	SYS_EXIT                         = 4001
+	SYS_FORK                         = 4002
+	SYS_READ                         = 4003
+	SYS_WRITE                        = 4004
+	SYS_OPEN                         = 4005
+	SYS_CLOSE                        = 4006
+	SYS_WAITPID                      = 4007
+	SYS_CREAT                        = 4008
+	SYS_LINK                         = 4009
+	SYS_UNLINK                       = 4010
+	SYS_EXECVE                       = 4011
+	SYS_CHDIR                        = 4012
+	SYS_TIME                         = 4013
+	SYS_MKNOD                        = 4014
+	SYS_CHMOD                        = 4015
+	SYS_LCHOWN                       = 4016
+	SYS_BREAK                        = 4017
+	SYS_UNUSED18                     = 4018
+	SYS_LSEEK                        = 4019
+	SYS_GETPID                       = 4020
+	SYS_MOUNT                        = 4021
+	SYS_UMOUNT                       = 4022
+	SYS_SETUID                       = 4023
+	SYS_GETUID                       = 4024
+	SYS_STIME                        = 4025
+	SYS_PTRACE                       = 4026
+	SYS_ALARM                        = 4027
+	SYS_UNUSED28                     = 4028
+	SYS_PAUSE                        = 4029
+	SYS_UTIME                        = 4030
+	SYS_STTY                         = 4031
+	SYS_GTTY                         = 4032
+	SYS_ACCESS                       = 4033
+	SYS_NICE                         = 4034
+	SYS_FTIME                        = 4035
+	SYS_SYNC                         = 4036
+	SYS_KILL                         = 4037
+	SYS_RENAME                       = 4038
+	SYS_MKDIR                        = 4039
+	SYS_RMDIR                        = 4040
+	SYS_DUP                          = 4041
+	SYS_PIPE                         = 4042
+	SYS_TIMES                        = 4043
+	SYS_PROF                         = 4044
+	SYS_BRK                          = 4045
+	SYS_SETGID                       = 4046
+	SYS_GETGID                       = 4047
+	SYS_SIGNAL                       = 4048
+	SYS_GETEUID                      = 4049
+	SYS_GETEGID                      = 4050
+	SYS_ACCT                         = 4051
+	SYS_UMOUNT2                      = 4052
+	SYS_LOCK                         = 4053
+	SYS_IOCTL                        = 4054
+	SYS_FCNTL                        = 4055
+	SYS_MPX                          = 4056
+	SYS_SETPGID                      = 4057
+	SYS_ULIMIT                       = 4058
+	SYS_UNUSED59                     = 4059
+	SYS_UMASK                        = 4060
+	SYS_CHROOT                       = 4061
+	SYS_USTAT                        = 4062
+	SYS_DUP2                         = 4063
+	SYS_GETPPID                      = 4064
+	SYS_GETPGRP                      = 4065
+	SYS_SETSID                       = 4066
+	SYS_SIGACTION                    = 4067
+	SYS_SGETMASK                     = 4068
+	SYS_SSETMASK                     = 4069
+	SYS_SETREUID                     = 4070
+	SYS_SETREGID                     = 4071
+	SYS_SIGSUSPEND                   = 4072
+	SYS_SIGPENDING                   = 4073
+	SYS_SETHOSTNAME                  = 4074
+	SYS_SETRLIMIT                    = 4075
+	SYS_GETRLIMIT                    = 4076
+	SYS_GETRUSAGE                    = 4077
+	SYS_GETTIMEOFDAY                 = 4078
+	SYS_SETTIMEOFDAY                 = 4079
+	SYS_GETGROUPS                    = 4080
+	SYS_SETGROUPS                    = 4081
+	SYS_RESERVED82                   = 4082
+	SYS_SYMLINK                      = 4083
+	SYS_UNUSED84                     = 4084
+	SYS_READLINK                     = 4085
+	SYS_USELIB                       = 4086
+	SYS_SWAPON                       = 4087
+	SYS_REBOOT                       = 4088
+	SYS_READDIR                      = 4089
+	SYS_MMAP                         = 4090
+	SYS_MUNMAP                       = 4091
+	SYS_TRUNCATE                     = 4092
+	SYS_FTRUNCATE                    = 4093
+	SYS_FCHMOD                       = 4094
+	SYS_FCHOWN                       = 4095
+	SYS_GETPRIORITY                  = 4096
+	SYS_SETPRIORITY                  = 4097
+	SYS_PROFIL                       = 4098
+	SYS_STATFS                       = 4099
+	SYS_FSTATFS                      = 4100
+	SYS_IOPERM                       = 4101
+	SYS_SOCKETCALL                   = 4102
+	SYS_SYSLOG                       = 4103
+	SYS_SETITIMER                    = 4104
+	SYS_GETITIMER                    = 4105
+	SYS_STAT                         = 4106
+	SYS_LSTAT                        = 4107
+	SYS_FSTAT                        = 4108
+	SYS_UNUSED109                    = 4109
+	SYS_IOPL                         = 4110
+	SYS_VHANGUP                      = 4111
+	SYS_IDLE                         = 4112
+	SYS_VM86                         = 4113
+	SYS_WAIT4                        = 4114
+	SYS_SWAPOFF                      = 4115
+	SYS_SYSINFO                      = 4116
+	SYS_IPC                          = 4117
+	SYS_FSYNC                        = 4118
+	SYS_SIGRETURN                    = 4119
+	SYS_CLONE                        = 4120
+	SYS_SETDOMAINNAME                = 4121
+	SYS_UNAME                        = 4122
+	SYS_MODIFY_LDT                   = 4123
+	SYS_ADJTIMEX                     = 4124
+	SYS_MPROTECT                     = 4125
+	SYS_SIGPROCMASK                  = 4126
+	SYS_CREATE_MODULE                = 4127
+	SYS_INIT_MODULE                  = 4128
+	SYS_DELETE_MODULE                = 4129
+	SYS_GET_KERNEL_SYMS              = 4130
+	SYS_QUOTACTL                     = 4131
+	SYS_GETPGID                      = 4132
+	SYS_FCHDIR                       = 4133
+	SYS_BDFLUSH                      = 4134
+	SYS_SYSFS                        = 4135
+	SYS_PERSONALITY                  = 4136
+	SYS_AFS_SYSCALL                  = 4137
+	SYS_SETFSUID                     = 4138
+	SYS_SETFSGID                     = 4139
+	SYS__LLSEEK                      = 4140
+	SYS_GETDENTS                     = 4141
+	SYS__NEWSELECT                   = 4142
+	SYS_FLOCK                        = 4143
+	SYS_MSYNC                        = 4144
+	SYS_READV                        = 4145
+	SYS_WRITEV                       = 4146
+	SYS_CACHEFLUSH                   = 4147
+	SYS_CACHECTL                     = 4148
+	SYS_SYSMIPS                      = 4149
+	SYS_UNUSED150                    = 4150
+	SYS_GETSID                       = 4151
+	SYS_FDATASYNC                    = 4152
+	SYS__SYSCTL                      = 4153
+	SYS_MLOCK                        = 4154
+	SYS_MUNLOCK                      = 4155
+	SYS_MLOCKALL                     = 4156
+	SYS_MUNLOCKALL                   = 4157
+	SYS_SCHED_SETPARAM               = 4158
+	SYS_SCHED_GETPARAM               = 4159
+	SYS_SCHED_SETSCHEDULER           = 4160
+	SYS_SCHED_GETSCHEDULER           = 4161
+	SYS_SCHED_YIELD                  = 4162
+	SYS_SCHED_GET_PRIORITY_MAX       = 4163
+	SYS_SCHED_GET_PRIORITY_MIN       = 4164
+	SYS_SCHED_RR_GET_INTERVAL        = 4165
+	SYS_NANOSLEEP                    = 4166
+	SYS_MREMAP                       = 4167
+	SYS_ACCEPT                       = 4168
+	SYS_BIND                         = 4169
+	SYS_CONNECT                      = 4170
+	SYS_GETPEERNAME                  = 4171
+	SYS_GETSOCKNAME                  = 4172
+	SYS_GETSOCKOPT                   = 4173
+	SYS_LISTEN                       = 4174
+	SYS_RECV                         = 4175
+	SYS_RECVFROM                     = 4176
+	SYS_RECVMSG                      = 4177
+	SYS_SEND                         = 4178
+	SYS_SENDMSG                      = 4179
+	SYS_SENDTO                       = 4180
+	SYS_SETSOCKOPT                   = 4181
+	SYS_SHUTDOWN                     = 4182
+	SYS_SOCKET                       = 4183
+	SYS_SOCKETPAIR                   = 4184
+	SYS_SETRESUID                    = 4185
+	SYS_GETRESUID                    = 4186
+	SYS_QUERY_MODULE                 = 4187
+	SYS_POLL                         = 4188
+	SYS_NFSSERVCTL                   = 4189
+	SYS_SETRESGID                    = 4190
+	SYS_GETRESGID                    = 4191
+	SYS_PRCTL                        = 4192
+	SYS_RT_SIGRETURN                 = 4193
+	SYS_RT_SIGACTION                 = 4194
+	SYS_RT_SIGPROCMASK               = 4195
+	SYS_RT_SIGPENDING                = 4196
+	SYS_RT_SIGTIMEDWAIT              = 4197
+	SYS_RT_SIGQUEUEINFO              = 4198
+	SYS_RT_SIGSUSPEND                = 4199
+	SYS_PREAD64                      = 4200
+	SYS_PWRITE64                     = 4201
+	SYS_CHOWN                        = 4202
+	SYS_GETCWD                       = 4203
+	SYS_CAPGET                       = 4204
+	SYS_CAPSET                       = 4205
+	SYS_SIGALTSTACK                  = 4206
+	SYS_SENDFILE                     = 4207
+	SYS_GETPMSG                      = 4208
+	SYS_PUTPMSG                      = 4209
+	SYS_MMAP2                        = 4210
+	SYS_TRUNCATE64                   = 4211
+	SYS_FTRUNCATE64                  = 4212
+	SYS_STAT64                       = 4213
+	SYS_LSTAT64                      = 4214
+	SYS_FSTAT64                      = 4215
+	SYS_PIVOT_ROOT                   = 4216
+	SYS_MINCORE                      = 4217
+	SYS_MADVISE                      = 4218
+	SYS_GETDENTS64                   = 4219
+	SYS_FCNTL64                      = 4220
+	SYS_RESERVED221                  = 4221
+	SYS_GETTID                       = 4222
+	SYS_READAHEAD                    = 4223
+	SYS_SETXATTR                     = 4224
+	SYS_LSETXATTR                    = 4225
+	SYS_FSETXATTR                    = 4226
+	SYS_GETXATTR                     = 4227
+	SYS_LGETXATTR                    = 4228
+	SYS_FGETXATTR                    = 4229
+	SYS_LISTXATTR                    = 4230
+	SYS_LLISTXATTR                   = 4231
+	SYS_FLISTXATTR                   = 4232
+	SYS_REMOVEXATTR                  = 4233
+	SYS_LREMOVEXATTR                 = 4234
+	SYS_FREMOVEXATTR                 = 4235
+	SYS_TKILL                        = 4236
+	SYS_SENDFILE64                   = 4237
+	SYS_FUTEX                        = 4238
+	SYS_SCHED_SETAFFINITY            = 4239
+	SYS_SCHED_GETAFFINITY            = 4240
+	SYS_IO_SETUP                     = 4241
+	SYS_IO_DESTROY                   = 4242
+	SYS_IO_GETEVENTS                 = 4243
+	SYS_IO_SUBMIT                    = 4244
+	SYS_IO_CANCEL                    = 4245
+	SYS_EXIT_GROUP                   = 4246
+	SYS_LOOKUP_DCOOKIE               = 4247
+	SYS_EPOLL_CREATE                 = 4248
+	SYS_EPOLL_CTL                    = 4249
+	SYS_EPOLL_WAIT                   = 4250
+	SYS_REMAP_FILE_PAGES             = 4251
+	SYS_SET_TID_ADDRESS              = 4252
+	SYS_RESTART_SYSCALL              = 4253
+	SYS_FADVISE64                    = 4254
+	SYS_STATFS64                     = 4255
+	SYS_FSTATFS64                    = 4256
+	SYS_TIMER_CREATE                 = 4257
+	SYS_TIMER_SETTIME                = 4258
+	SYS_TIMER_GETTIME                = 4259
+	SYS_TIMER_GETOVERRUN             = 4260
+	SYS_TIMER_DELETE                 = 4261
+	SYS_CLOCK_SETTIME                = 4262
+	SYS_CLOCK_GETTIME                = 4263
+	SYS_CLOCK_GETRES                 = 4264
+	SYS_CLOCK_NANOSLEEP              = 4265
+	SYS_TGKILL                       = 4266
+	SYS_UTIMES                       = 4267
+	SYS_MBIND                        = 4268
+	SYS_GET_MEMPOLICY                = 4269
+	SYS_SET_MEMPOLICY                = 4270
+	SYS_MQ_OPEN                      = 4271
+	SYS_MQ_UNLINK                    = 4272
+	SYS_MQ_TIMEDSEND                 = 4273
+	SYS_MQ_TIMEDRECEIVE              = 4274
+	SYS_MQ_NOTIFY                    = 4275
+	SYS_MQ_GETSETATTR                = 4276
+	SYS_VSERVER                      = 4277
+	SYS_WAITID                       = 4278
+	SYS_ADD_KEY                      = 4280
+	SYS_REQUEST_KEY                  = 4281
+	SYS_KEYCTL                       = 4282
+	SYS_SET_THREAD_AREA              = 4283
+	SYS_INOTIFY_INIT                 = 4284
+	SYS_INOTIFY_ADD_WATCH            = 4285
+	SYS_INOTIFY_RM_WATCH             = 4286
+	SYS_MIGRATE_PAGES                = 4287
+	SYS_OPENAT                       = 4288
+	SYS_MKDIRAT                      = 4289
+	SYS_MKNODAT                      = 4290
+	SYS_FCHOWNAT                     = 4291
+	SYS_FUTIMESAT                    = 4292
+	SYS_FSTATAT64                    = 4293
+	SYS_UNLINKAT                     = 4294
+	SYS_RENAMEAT                     = 4295
+	SYS_LINKAT                       = 4296
+	SYS_SYMLINKAT                    = 4297
+	SYS_READLINKAT                   = 4298
+	SYS_FCHMODAT                     = 4299
+	SYS_FACCESSAT                    = 4300
+	SYS_PSELECT6                     = 4301
+	SYS_PPOLL                        = 4302
+	SYS_UNSHARE                      = 4303
+	SYS_SPLICE                       = 4304
+	SYS_SYNC_FILE_RANGE              = 4305
+	SYS_TEE                          = 4306
+	SYS_VMSPLICE                     = 4307
+	SYS_MOVE_PAGES                   = 4308
+	SYS_SET_ROBUST_LIST              = 4309
+	SYS_GET_ROBUST_LIST              = 4310
+	SYS_KEXEC_LOAD                   = 4311
+	SYS_GETCPU                       = 4312
+	SYS_EPOLL_PWAIT                  = 4313
+	SYS_IOPRIO_SET                   = 4314
+	SYS_IOPRIO_GET                   = 4315
+	SYS_UTIMENSAT                    = 4316
+	SYS_SIGNALFD                     = 4317
+	SYS_TIMERFD                      = 4318
+	SYS_EVENTFD                      = 4319
+	SYS_FALLOCATE                    = 4320
+	SYS_TIMERFD_CREATE               = 4321
+	SYS_TIMERFD_GETTIME              = 4322
+	SYS_TIMERFD_SETTIME              = 4323
+	SYS_SIGNALFD4                    = 4324
+	SYS_EVENTFD2                     = 4325
+	SYS_EPOLL_CREATE1                = 4326
+	SYS_DUP3                         = 4327
+	SYS_PIPE2                        = 4328
+	SYS_INOTIFY_INIT1                = 4329
+	SYS_PREADV                       = 4330
+	SYS_PWRITEV                      = 4331
+	SYS_RT_TGSIGQUEUEINFO            = 4332
+	SYS_PERF_EVENT_OPEN              = 4333
+	SYS_ACCEPT4                      = 4334
+	SYS_RECVMMSG                     = 4335
+	SYS_FANOTIFY_INIT                = 4336
+	SYS_FANOTIFY_MARK                = 4337
+	SYS_PRLIMIT64                    = 4338
+	SYS_NAME_TO_HANDLE_AT            = 4339
+	SYS_OPEN_BY_HANDLE_AT            = 4340
+	SYS_CLOCK_ADJTIME                = 4341
+	SYS_SYNCFS                       = 4342
+	SYS_SENDMMSG                     = 4343
+	SYS_SETNS                        = 4344
+	SYS_PROCESS_VM_READV             = 4345
+	SYS_PROCESS_VM_WRITEV            = 4346
+	SYS_KCMP                         = 4347
+	SYS_FINIT_MODULE                 = 4348
+	SYS_SCHED_SETATTR                = 4349
+	SYS_SCHED_GETATTR                = 4350
+	SYS_RENAMEAT2                    = 4351
+	SYS_SECCOMP                      = 4352
+	SYS_GETRANDOM                    = 4353
+	SYS_MEMFD_CREATE                 = 4354
+	SYS_BPF                          = 4355
+	SYS_EXECVEAT                     = 4356
+	SYS_USERFAULTFD                  = 4357
+	SYS_MEMBARRIER                   = 4358
+	SYS_MLOCK2                       = 4359
+	SYS_COPY_FILE_RANGE              = 4360
+	SYS_PREADV2                      = 4361
+	SYS_PWRITEV2                     = 4362
+	SYS_PKEY_MPROTECT                = 4363
+	SYS_PKEY_ALLOC                   = 4364
+	SYS_PKEY_FREE                    = 4365
+	SYS_STATX                        = 4366
+	SYS_RSEQ                         = 4367
+	SYS_IO_PGETEVENTS                = 4368
+	SYS_SEMGET                       = 4393
+	SYS_SEMCTL                       = 4394
+	SYS_SHMGET                       = 4395
+	SYS_SHMCTL                       = 4396
+	SYS_SHMAT                        = 4397
+	SYS_SHMDT                        = 4398
+	SYS_MSGGET                       = 4399
+	SYS_MSGSND                       = 4400
+	SYS_MSGRCV                       = 4401
+	SYS_MSGCTL                       = 4402
+	SYS_CLOCK_GETTIME64              = 4403
+	SYS_CLOCK_SETTIME64              = 4404
+	SYS_CLOCK_ADJTIME64              = 4405
+	SYS_CLOCK_GETRES_TIME64          = 4406
+	SYS_CLOCK_NANOSLEEP_TIME64       = 4407
+	SYS_TIMER_GETTIME64              = 4408
+	SYS_TIMER_SETTIME64              = 4409
+	SYS_TIMERFD_GETTIME64            = 4410
+	SYS_TIMERFD_SETTIME64            = 4411
+	SYS_UTIMENSAT_TIME64             = 4412
+	SYS_PSELECT6_TIME64              = 4413
+	SYS_PPOLL_TIME64                 = 4414
+	SYS_IO_PGETEVENTS_TIME64         = 4416
+	SYS_RECVMMSG_TIME64              = 4417
+	SYS_MQ_TIMEDSEND_TIME64          = 4418
+	SYS_MQ_TIMEDRECEIVE_TIME64       = 4419
+	SYS_SEMTIMEDOP_TIME64            = 4420
+	SYS_RT_SIGTIMEDWAIT_TIME64       = 4421
+	SYS_FUTEX_TIME64                 = 4422
+	SYS_SCHED_RR_GET_INTERVAL_TIME64 = 4423
+	SYS_PIDFD_SEND_SIGNAL            = 4424
+	SYS_IO_URING_SETUP               = 4425
+	SYS_IO_URING_ENTER               = 4426
+	SYS_IO_URING_REGISTER            = 4427
+	SYS_OPEN_TREE                    = 4428
+	SYS_MOVE_MOUNT                   = 4429
+	SYS_FSOPEN                       = 4430
+	SYS_FSCONFIG                     = 4431
+	SYS_FSMOUNT                      = 4432
+	SYS_FSPICK                       = 4433
+	SYS_PIDFD_OPEN                   = 4434
+	SYS_CLONE3                       = 4435
+	SYS_OPENAT2                      = 4437
+	SYS_PIDFD_GETFD                  = 4438
+	SYS_FACCESSAT2                   = 4439
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_ppc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_ppc64.go
new file mode 100644
index 000000000..9287538d3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_ppc64.go
@@ -0,0 +1,401 @@
+// go run linux/mksysnum.go -Wall -Werror -static -I/tmp/include /tmp/include/asm/unistd.h
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build ppc64,linux
+
+package unix
+
+const (
+	SYS_RESTART_SYSCALL        = 0
+	SYS_EXIT                   = 1
+	SYS_FORK                   = 2
+	SYS_READ                   = 3
+	SYS_WRITE                  = 4
+	SYS_OPEN                   = 5
+	SYS_CLOSE                  = 6
+	SYS_WAITPID                = 7
+	SYS_CREAT                  = 8
+	SYS_LINK                   = 9
+	SYS_UNLINK                 = 10
+	SYS_EXECVE                 = 11
+	SYS_CHDIR                  = 12
+	SYS_TIME                   = 13
+	SYS_MKNOD                  = 14
+	SYS_CHMOD                  = 15
+	SYS_LCHOWN                 = 16
+	SYS_BREAK                  = 17
+	SYS_OLDSTAT                = 18
+	SYS_LSEEK                  = 19
+	SYS_GETPID                 = 20
+	SYS_MOUNT                  = 21
+	SYS_UMOUNT                 = 22
+	SYS_SETUID                 = 23
+	SYS_GETUID                 = 24
+	SYS_STIME                  = 25
+	SYS_PTRACE                 = 26
+	SYS_ALARM                  = 27
+	SYS_OLDFSTAT               = 28
+	SYS_PAUSE                  = 29
+	SYS_UTIME                  = 30
+	SYS_STTY                   = 31
+	SYS_GTTY                   = 32
+	SYS_ACCESS                 = 33
+	SYS_NICE                   = 34
+	SYS_FTIME                  = 35
+	SYS_SYNC                   = 36
+	SYS_KILL                   = 37
+	SYS_RENAME                 = 38
+	SYS_MKDIR                  = 39
+	SYS_RMDIR                  = 40
+	SYS_DUP                    = 41
+	SYS_PIPE                   = 42
+	SYS_TIMES                  = 43
+	SYS_PROF                   = 44
+	SYS_BRK                    = 45
+	SYS_SETGID                 = 46
+	SYS_GETGID                 = 47
+	SYS_SIGNAL                 = 48
+	SYS_GETEUID                = 49
+	SYS_GETEGID                = 50
+	SYS_ACCT                   = 51
+	SYS_UMOUNT2                = 52
+	SYS_LOCK                   = 53
+	SYS_IOCTL                  = 54
+	SYS_FCNTL                  = 55
+	SYS_MPX                    = 56
+	SYS_SETPGID                = 57
+	SYS_ULIMIT                 = 58
+	SYS_OLDOLDUNAME            = 59
+	SYS_UMASK                  = 60
+	SYS_CHROOT                 = 61
+	SYS_USTAT                  = 62
+	SYS_DUP2                   = 63
+	SYS_GETPPID                = 64
+	SYS_GETPGRP                = 65
+	SYS_SETSID                 = 66
+	SYS_SIGACTION              = 67
+	SYS_SGETMASK               = 68
+	SYS_SSETMASK               = 69
+	SYS_SETREUID               = 70
+	SYS_SETREGID               = 71
+	SYS_SIGSUSPEND             = 72
+	SYS_SIGPENDING             = 73
+	SYS_SETHOSTNAME            = 74
+	SYS_SETRLIMIT              = 75
+	SYS_GETRLIMIT              = 76
+	SYS_GETRUSAGE              = 77
+	SYS_GETTIMEOFDAY           = 78
+	SYS_SETTIMEOFDAY           = 79
+	SYS_GETGROUPS              = 80
+	SYS_SETGROUPS              = 81
+	SYS_SELECT                 = 82
+	SYS_SYMLINK                = 83
+	SYS_OLDLSTAT               = 84
+	SYS_READLINK               = 85
+	SYS_USELIB                 = 86
+	SYS_SWAPON                 = 87
+	SYS_REBOOT                 = 88
+	SYS_READDIR                = 89
+	SYS_MMAP                   = 90
+	SYS_MUNMAP                 = 91
+	SYS_TRUNCATE               = 92
+	SYS_FTRUNCATE              = 93
+	SYS_FCHMOD                 = 94
+	SYS_FCHOWN                 = 95
+	SYS_GETPRIORITY            = 96
+	SYS_SETPRIORITY            = 97
+	SYS_PROFIL                 = 98
+	SYS_STATFS                 = 99
+	SYS_FSTATFS                = 100
+	SYS_IOPERM                 = 101
+	SYS_SOCKETCALL             = 102
+	SYS_SYSLOG                 = 103
+	SYS_SETITIMER              = 104
+	SYS_GETITIMER              = 105
+	SYS_STAT                   = 106
+	SYS_LSTAT                  = 107
+	SYS_FSTAT                  = 108
+	SYS_OLDUNAME               = 109
+	SYS_IOPL                   = 110
+	SYS_VHANGUP                = 111
+	SYS_IDLE                   = 112
+	SYS_VM86                   = 113
+	SYS_WAIT4                  = 114
+	SYS_SWAPOFF                = 115
+	SYS_SYSINFO                = 116
+	SYS_IPC                    = 117
+	SYS_FSYNC                  = 118
+	SYS_SIGRETURN              = 119
+	SYS_CLONE                  = 120
+	SYS_SETDOMAINNAME          = 121
+	SYS_UNAME                  = 122
+	SYS_MODIFY_LDT             = 123
+	SYS_ADJTIMEX               = 124
+	SYS_MPROTECT               = 125
+	SYS_SIGPROCMASK            = 126
+	SYS_CREATE_MODULE          = 127
+	SYS_INIT_MODULE            = 128
+	SYS_DELETE_MODULE          = 129
+	SYS_GET_KERNEL_SYMS        = 130
+	SYS_QUOTACTL               = 131
+	SYS_GETPGID                = 132
+	SYS_FCHDIR                 = 133
+	SYS_BDFLUSH                = 134
+	SYS_SYSFS                  = 135
+	SYS_PERSONALITY            = 136
+	SYS_AFS_SYSCALL            = 137
+	SYS_SETFSUID               = 138
+	SYS_SETFSGID               = 139
+	SYS__LLSEEK                = 140
+	SYS_GETDENTS               = 141
+	SYS__NEWSELECT             = 142
+	SYS_FLOCK                  = 143
+	SYS_MSYNC                  = 144
+	SYS_READV                  = 145
+	SYS_WRITEV                 = 146
+	SYS_GETSID                 = 147
+	SYS_FDATASYNC              = 148
+	SYS__SYSCTL                = 149
+	SYS_MLOCK                  = 150
+	SYS_MUNLOCK                = 151
+	SYS_MLOCKALL               = 152
+	SYS_MUNLOCKALL             = 153
+	SYS_SCHED_SETPARAM         = 154
+	SYS_SCHED_GETPARAM         = 155
+	SYS_SCHED_SETSCHEDULER     = 156
+	SYS_SCHED_GETSCHEDULER     = 157
+	SYS_SCHED_YIELD            = 158
+	SYS_SCHED_GET_PRIORITY_MAX = 159
+	SYS_SCHED_GET_PRIORITY_MIN = 160
+	SYS_SCHED_RR_GET_INTERVAL  = 161
+	SYS_NANOSLEEP              = 162
+	SYS_MREMAP                 = 163
+	SYS_SETRESUID              = 164
+	SYS_GETRESUID              = 165
+	SYS_QUERY_MODULE           = 166
+	SYS_POLL                   = 167
+	SYS_NFSSERVCTL             = 168
+	SYS_SETRESGID              = 169
+	SYS_GETRESGID              = 170
+	SYS_PRCTL                  = 171
+	SYS_RT_SIGRETURN           = 172
+	SYS_RT_SIGACTION           = 173
+	SYS_RT_SIGPROCMASK         = 174
+	SYS_RT_SIGPENDING          = 175
+	SYS_RT_SIGTIMEDWAIT        = 176
+	SYS_RT_SIGQUEUEINFO        = 177
+	SYS_RT_SIGSUSPEND          = 178
+	SYS_PREAD64                = 179
+	SYS_PWRITE64               = 180
+	SYS_CHOWN                  = 181
+	SYS_GETCWD                 = 182
+	SYS_CAPGET                 = 183
+	SYS_CAPSET                 = 184
+	SYS_SIGALTSTACK            = 185
+	SYS_SENDFILE               = 186
+	SYS_GETPMSG                = 187
+	SYS_PUTPMSG                = 188
+	SYS_VFORK                  = 189
+	SYS_UGETRLIMIT             = 190
+	SYS_READAHEAD              = 191
+	SYS_PCICONFIG_READ         = 198
+	SYS_PCICONFIG_WRITE        = 199
+	SYS_PCICONFIG_IOBASE       = 200
+	SYS_MULTIPLEXER            = 201
+	SYS_GETDENTS64             = 202
+	SYS_PIVOT_ROOT             = 203
+	SYS_MADVISE                = 205
+	SYS_MINCORE                = 206
+	SYS_GETTID                 = 207
+	SYS_TKILL                  = 208
+	SYS_SETXATTR               = 209
+	SYS_LSETXATTR              = 210
+	SYS_FSETXATTR              = 211
+	SYS_GETXATTR               = 212
+	SYS_LGETXATTR              = 213
+	SYS_FGETXATTR              = 214
+	SYS_LISTXATTR              = 215
+	SYS_LLISTXATTR             = 216
+	SYS_FLISTXATTR             = 217
+	SYS_REMOVEXATTR            = 218
+	SYS_LREMOVEXATTR           = 219
+	SYS_FREMOVEXATTR           = 220
+	SYS_FUTEX                  = 221
+	SYS_SCHED_SETAFFINITY      = 222
+	SYS_SCHED_GETAFFINITY      = 223
+	SYS_TUXCALL                = 225
+	SYS_IO_SETUP               = 227
+	SYS_IO_DESTROY             = 228
+	SYS_IO_GETEVENTS           = 229
+	SYS_IO_SUBMIT              = 230
+	SYS_IO_CANCEL              = 231
+	SYS_SET_TID_ADDRESS        = 232
+	SYS_FADVISE64              = 233
+	SYS_EXIT_GROUP             = 234
+	SYS_LOOKUP_DCOOKIE         = 235
+	SYS_EPOLL_CREATE           = 236
+	SYS_EPOLL_CTL              = 237
+	SYS_EPOLL_WAIT             = 238
+	SYS_REMAP_FILE_PAGES       = 239
+	SYS_TIMER_CREATE           = 240
+	SYS_TIMER_SETTIME          = 241
+	SYS_TIMER_GETTIME          = 242
+	SYS_TIMER_GETOVERRUN       = 243
+	SYS_TIMER_DELETE           = 244
+	SYS_CLOCK_SETTIME          = 245
+	SYS_CLOCK_GETTIME          = 246
+	SYS_CLOCK_GETRES           = 247
+	SYS_CLOCK_NANOSLEEP        = 248
+	SYS_SWAPCONTEXT            = 249
+	SYS_TGKILL                 = 250
+	SYS_UTIMES                 = 251
+	SYS_STATFS64               = 252
+	SYS_FSTATFS64              = 253
+	SYS_RTAS                   = 255
+	SYS_SYS_DEBUG_SETCONTEXT   = 256
+	SYS_MIGRATE_PAGES          = 258
+	SYS_MBIND                  = 259
+	SYS_GET_MEMPOLICY          = 260
+	SYS_SET_MEMPOLICY          = 261
+	SYS_MQ_OPEN                = 262
+	SYS_MQ_UNLINK              = 263
+	SYS_MQ_TIMEDSEND           = 264
+	SYS_MQ_TIMEDRECEIVE        = 265
+	SYS_MQ_NOTIFY              = 266
+	SYS_MQ_GETSETATTR          = 267
+	SYS_KEXEC_LOAD             = 268
+	SYS_ADD_KEY                = 269
+	SYS_REQUEST_KEY            = 270
+	SYS_KEYCTL                 = 271
+	SYS_WAITID                 = 272
+	SYS_IOPRIO_SET             = 273
+	SYS_IOPRIO_GET             = 274
+	SYS_INOTIFY_INIT           = 275
+	SYS_INOTIFY_ADD_WATCH      = 276
+	SYS_INOTIFY_RM_WATCH       = 277
+	SYS_SPU_RUN                = 278
+	SYS_SPU_CREATE             = 279
+	SYS_PSELECT6               = 280
+	SYS_PPOLL                  = 281
+	SYS_UNSHARE                = 282
+	SYS_SPLICE                 = 283
+	SYS_TEE                    = 284
+	SYS_VMSPLICE               = 285
+	SYS_OPENAT                 = 286
+	SYS_MKDIRAT                = 287
+	SYS_MKNODAT                = 288
+	SYS_FCHOWNAT               = 289
+	SYS_FUTIMESAT              = 290
+	SYS_NEWFSTATAT             = 291
+	SYS_UNLINKAT               = 292
+	SYS_RENAMEAT               = 293
+	SYS_LINKAT                 = 294
+	SYS_SYMLINKAT              = 295
+	SYS_READLINKAT             = 296
+	SYS_FCHMODAT               = 297
+	SYS_FACCESSAT              = 298
+	SYS_GET_ROBUST_LIST        = 299
+	SYS_SET_ROBUST_LIST        = 300
+	SYS_MOVE_PAGES             = 301
+	SYS_GETCPU                 = 302
+	SYS_EPOLL_PWAIT            = 303
+	SYS_UTIMENSAT              = 304
+	SYS_SIGNALFD               = 305
+	SYS_TIMERFD_CREATE         = 306
+	SYS_EVENTFD                = 307
+	SYS_SYNC_FILE_RANGE2       = 308
+	SYS_FALLOCATE              = 309
+	SYS_SUBPAGE_PROT           = 310
+	SYS_TIMERFD_SETTIME        = 311
+	SYS_TIMERFD_GETTIME        = 312
+	SYS_SIGNALFD4              = 313
+	SYS_EVENTFD2               = 314
+	SYS_EPOLL_CREATE1          = 315
+	SYS_DUP3                   = 316
+	SYS_PIPE2                  = 317
+	SYS_INOTIFY_INIT1          = 318
+	SYS_PERF_EVENT_OPEN        = 319
+	SYS_PREADV                 = 320
+	SYS_PWRITEV                = 321
+	SYS_RT_TGSIGQUEUEINFO      = 322
+	SYS_FANOTIFY_INIT          = 323
+	SYS_FANOTIFY_MARK          = 324
+	SYS_PRLIMIT64              = 325
+	SYS_SOCKET                 = 326
+	SYS_BIND                   = 327
+	SYS_CONNECT                = 328
+	SYS_LISTEN                 = 329
+	SYS_ACCEPT                 = 330
+	SYS_GETSOCKNAME            = 331
+	SYS_GETPEERNAME            = 332
+	SYS_SOCKETPAIR             = 333
+	SYS_SEND                   = 334
+	SYS_SENDTO                 = 335
+	SYS_RECV                   = 336
+	SYS_RECVFROM               = 337
+	SYS_SHUTDOWN               = 338
+	SYS_SETSOCKOPT             = 339
+	SYS_GETSOCKOPT             = 340
+	SYS_SENDMSG                = 341
+	SYS_RECVMSG                = 342
+	SYS_RECVMMSG               = 343
+	SYS_ACCEPT4                = 344
+	SYS_NAME_TO_HANDLE_AT      = 345
+	SYS_OPEN_BY_HANDLE_AT      = 346
+	SYS_CLOCK_ADJTIME          = 347
+	SYS_SYNCFS                 = 348
+	SYS_SENDMMSG               = 349
+	SYS_SETNS                  = 350
+	SYS_PROCESS_VM_READV       = 351
+	SYS_PROCESS_VM_WRITEV      = 352
+	SYS_FINIT_MODULE           = 353
+	SYS_KCMP                   = 354
+	SYS_SCHED_SETATTR          = 355
+	SYS_SCHED_GETATTR          = 356
+	SYS_RENAMEAT2              = 357
+	SYS_SECCOMP                = 358
+	SYS_GETRANDOM              = 359
+	SYS_MEMFD_CREATE           = 360
+	SYS_BPF                    = 361
+	SYS_EXECVEAT               = 362
+	SYS_SWITCH_ENDIAN          = 363
+	SYS_USERFAULTFD            = 364
+	SYS_MEMBARRIER             = 365
+	SYS_MLOCK2                 = 378
+	SYS_COPY_FILE_RANGE        = 379
+	SYS_PREADV2                = 380
+	SYS_PWRITEV2               = 381
+	SYS_KEXEC_FILE_LOAD        = 382
+	SYS_STATX                  = 383
+	SYS_PKEY_ALLOC             = 384
+	SYS_PKEY_FREE              = 385
+	SYS_PKEY_MPROTECT          = 386
+	SYS_RSEQ                   = 387
+	SYS_IO_PGETEVENTS          = 388
+	SYS_SEMTIMEDOP             = 392
+	SYS_SEMGET                 = 393
+	SYS_SEMCTL                 = 394
+	SYS_SHMGET                 = 395
+	SYS_SHMCTL                 = 396
+	SYS_SHMAT                  = 397
+	SYS_SHMDT                  = 398
+	SYS_MSGGET                 = 399
+	SYS_MSGSND                 = 400
+	SYS_MSGRCV                 = 401
+	SYS_MSGCTL                 = 402
+	SYS_PIDFD_SEND_SIGNAL      = 424
+	SYS_IO_URING_SETUP         = 425
+	SYS_IO_URING_ENTER         = 426
+	SYS_IO_URING_REGISTER      = 427
+	SYS_OPEN_TREE              = 428
+	SYS_MOVE_MOUNT             = 429
+	SYS_FSOPEN                 = 430
+	SYS_FSCONFIG               = 431
+	SYS_FSMOUNT                = 432
+	SYS_FSPICK                 = 433
+	SYS_PIDFD_OPEN             = 434
+	SYS_CLONE3                 = 435
+	SYS_OPENAT2                = 437
+	SYS_PIDFD_GETFD            = 438
+	SYS_FACCESSAT2             = 439
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_ppc64le.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_ppc64le.go
new file mode 100644
index 000000000..4dafad835
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_ppc64le.go
@@ -0,0 +1,401 @@
+// go run linux/mksysnum.go -Wall -Werror -static -I/tmp/include /tmp/include/asm/unistd.h
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build ppc64le,linux
+
+package unix
+
+const (
+	SYS_RESTART_SYSCALL        = 0
+	SYS_EXIT                   = 1
+	SYS_FORK                   = 2
+	SYS_READ                   = 3
+	SYS_WRITE                  = 4
+	SYS_OPEN                   = 5
+	SYS_CLOSE                  = 6
+	SYS_WAITPID                = 7
+	SYS_CREAT                  = 8
+	SYS_LINK                   = 9
+	SYS_UNLINK                 = 10
+	SYS_EXECVE                 = 11
+	SYS_CHDIR                  = 12
+	SYS_TIME                   = 13
+	SYS_MKNOD                  = 14
+	SYS_CHMOD                  = 15
+	SYS_LCHOWN                 = 16
+	SYS_BREAK                  = 17
+	SYS_OLDSTAT                = 18
+	SYS_LSEEK                  = 19
+	SYS_GETPID                 = 20
+	SYS_MOUNT                  = 21
+	SYS_UMOUNT                 = 22
+	SYS_SETUID                 = 23
+	SYS_GETUID                 = 24
+	SYS_STIME                  = 25
+	SYS_PTRACE                 = 26
+	SYS_ALARM                  = 27
+	SYS_OLDFSTAT               = 28
+	SYS_PAUSE                  = 29
+	SYS_UTIME                  = 30
+	SYS_STTY                   = 31
+	SYS_GTTY                   = 32
+	SYS_ACCESS                 = 33
+	SYS_NICE                   = 34
+	SYS_FTIME                  = 35
+	SYS_SYNC                   = 36
+	SYS_KILL                   = 37
+	SYS_RENAME                 = 38
+	SYS_MKDIR                  = 39
+	SYS_RMDIR                  = 40
+	SYS_DUP                    = 41
+	SYS_PIPE                   = 42
+	SYS_TIMES                  = 43
+	SYS_PROF                   = 44
+	SYS_BRK                    = 45
+	SYS_SETGID                 = 46
+	SYS_GETGID                 = 47
+	SYS_SIGNAL                 = 48
+	SYS_GETEUID                = 49
+	SYS_GETEGID                = 50
+	SYS_ACCT                   = 51
+	SYS_UMOUNT2                = 52
+	SYS_LOCK                   = 53
+	SYS_IOCTL                  = 54
+	SYS_FCNTL                  = 55
+	SYS_MPX                    = 56
+	SYS_SETPGID                = 57
+	SYS_ULIMIT                 = 58
+	SYS_OLDOLDUNAME            = 59
+	SYS_UMASK                  = 60
+	SYS_CHROOT                 = 61
+	SYS_USTAT                  = 62
+	SYS_DUP2                   = 63
+	SYS_GETPPID                = 64
+	SYS_GETPGRP                = 65
+	SYS_SETSID                 = 66
+	SYS_SIGACTION              = 67
+	SYS_SGETMASK               = 68
+	SYS_SSETMASK               = 69
+	SYS_SETREUID               = 70
+	SYS_SETREGID               = 71
+	SYS_SIGSUSPEND             = 72
+	SYS_SIGPENDING             = 73
+	SYS_SETHOSTNAME            = 74
+	SYS_SETRLIMIT              = 75
+	SYS_GETRLIMIT              = 76
+	SYS_GETRUSAGE              = 77
+	SYS_GETTIMEOFDAY           = 78
+	SYS_SETTIMEOFDAY           = 79
+	SYS_GETGROUPS              = 80
+	SYS_SETGROUPS              = 81
+	SYS_SELECT                 = 82
+	SYS_SYMLINK                = 83
+	SYS_OLDLSTAT               = 84
+	SYS_READLINK               = 85
+	SYS_USELIB                 = 86
+	SYS_SWAPON                 = 87
+	SYS_REBOOT                 = 88
+	SYS_READDIR                = 89
+	SYS_MMAP                   = 90
+	SYS_MUNMAP                 = 91
+	SYS_TRUNCATE               = 92
+	SYS_FTRUNCATE              = 93
+	SYS_FCHMOD                 = 94
+	SYS_FCHOWN                 = 95
+	SYS_GETPRIORITY            = 96
+	SYS_SETPRIORITY            = 97
+	SYS_PROFIL                 = 98
+	SYS_STATFS                 = 99
+	SYS_FSTATFS                = 100
+	SYS_IOPERM                 = 101
+	SYS_SOCKETCALL             = 102
+	SYS_SYSLOG                 = 103
+	SYS_SETITIMER              = 104
+	SYS_GETITIMER              = 105
+	SYS_STAT                   = 106
+	SYS_LSTAT                  = 107
+	SYS_FSTAT                  = 108
+	SYS_OLDUNAME               = 109
+	SYS_IOPL                   = 110
+	SYS_VHANGUP                = 111
+	SYS_IDLE                   = 112
+	SYS_VM86                   = 113
+	SYS_WAIT4                  = 114
+	SYS_SWAPOFF                = 115
+	SYS_SYSINFO                = 116
+	SYS_IPC                    = 117
+	SYS_FSYNC                  = 118
+	SYS_SIGRETURN              = 119
+	SYS_CLONE                  = 120
+	SYS_SETDOMAINNAME          = 121
+	SYS_UNAME                  = 122
+	SYS_MODIFY_LDT             = 123
+	SYS_ADJTIMEX               = 124
+	SYS_MPROTECT               = 125
+	SYS_SIGPROCMASK            = 126
+	SYS_CREATE_MODULE          = 127
+	SYS_INIT_MODULE            = 128
+	SYS_DELETE_MODULE          = 129
+	SYS_GET_KERNEL_SYMS        = 130
+	SYS_QUOTACTL               = 131
+	SYS_GETPGID                = 132
+	SYS_FCHDIR                 = 133
+	SYS_BDFLUSH                = 134
+	SYS_SYSFS                  = 135
+	SYS_PERSONALITY            = 136
+	SYS_AFS_SYSCALL            = 137
+	SYS_SETFSUID               = 138
+	SYS_SETFSGID               = 139
+	SYS__LLSEEK                = 140
+	SYS_GETDENTS               = 141
+	SYS__NEWSELECT             = 142
+	SYS_FLOCK                  = 143
+	SYS_MSYNC                  = 144
+	SYS_READV                  = 145
+	SYS_WRITEV                 = 146
+	SYS_GETSID                 = 147
+	SYS_FDATASYNC              = 148
+	SYS__SYSCTL                = 149
+	SYS_MLOCK                  = 150
+	SYS_MUNLOCK                = 151
+	SYS_MLOCKALL               = 152
+	SYS_MUNLOCKALL             = 153
+	SYS_SCHED_SETPARAM         = 154
+	SYS_SCHED_GETPARAM         = 155
+	SYS_SCHED_SETSCHEDULER     = 156
+	SYS_SCHED_GETSCHEDULER     = 157
+	SYS_SCHED_YIELD            = 158
+	SYS_SCHED_GET_PRIORITY_MAX = 159
+	SYS_SCHED_GET_PRIORITY_MIN = 160
+	SYS_SCHED_RR_GET_INTERVAL  = 161
+	SYS_NANOSLEEP              = 162
+	SYS_MREMAP                 = 163
+	SYS_SETRESUID              = 164
+	SYS_GETRESUID              = 165
+	SYS_QUERY_MODULE           = 166
+	SYS_POLL                   = 167
+	SYS_NFSSERVCTL             = 168
+	SYS_SETRESGID              = 169
+	SYS_GETRESGID              = 170
+	SYS_PRCTL                  = 171
+	SYS_RT_SIGRETURN           = 172
+	SYS_RT_SIGACTION           = 173
+	SYS_RT_SIGPROCMASK         = 174
+	SYS_RT_SIGPENDING          = 175
+	SYS_RT_SIGTIMEDWAIT        = 176
+	SYS_RT_SIGQUEUEINFO        = 177
+	SYS_RT_SIGSUSPEND          = 178
+	SYS_PREAD64                = 179
+	SYS_PWRITE64               = 180
+	SYS_CHOWN                  = 181
+	SYS_GETCWD                 = 182
+	SYS_CAPGET                 = 183
+	SYS_CAPSET                 = 184
+	SYS_SIGALTSTACK            = 185
+	SYS_SENDFILE               = 186
+	SYS_GETPMSG                = 187
+	SYS_PUTPMSG                = 188
+	SYS_VFORK                  = 189
+	SYS_UGETRLIMIT             = 190
+	SYS_READAHEAD              = 191
+	SYS_PCICONFIG_READ         = 198
+	SYS_PCICONFIG_WRITE        = 199
+	SYS_PCICONFIG_IOBASE       = 200
+	SYS_MULTIPLEXER            = 201
+	SYS_GETDENTS64             = 202
+	SYS_PIVOT_ROOT             = 203
+	SYS_MADVISE                = 205
+	SYS_MINCORE                = 206
+	SYS_GETTID                 = 207
+	SYS_TKILL                  = 208
+	SYS_SETXATTR               = 209
+	SYS_LSETXATTR              = 210
+	SYS_FSETXATTR              = 211
+	SYS_GETXATTR               = 212
+	SYS_LGETXATTR              = 213
+	SYS_FGETXATTR              = 214
+	SYS_LISTXATTR              = 215
+	SYS_LLISTXATTR             = 216
+	SYS_FLISTXATTR             = 217
+	SYS_REMOVEXATTR            = 218
+	SYS_LREMOVEXATTR           = 219
+	SYS_FREMOVEXATTR           = 220
+	SYS_FUTEX                  = 221
+	SYS_SCHED_SETAFFINITY      = 222
+	SYS_SCHED_GETAFFINITY      = 223
+	SYS_TUXCALL                = 225
+	SYS_IO_SETUP               = 227
+	SYS_IO_DESTROY             = 228
+	SYS_IO_GETEVENTS           = 229
+	SYS_IO_SUBMIT              = 230
+	SYS_IO_CANCEL              = 231
+	SYS_SET_TID_ADDRESS        = 232
+	SYS_FADVISE64              = 233
+	SYS_EXIT_GROUP             = 234
+	SYS_LOOKUP_DCOOKIE         = 235
+	SYS_EPOLL_CREATE           = 236
+	SYS_EPOLL_CTL              = 237
+	SYS_EPOLL_WAIT             = 238
+	SYS_REMAP_FILE_PAGES       = 239
+	SYS_TIMER_CREATE           = 240
+	SYS_TIMER_SETTIME          = 241
+	SYS_TIMER_GETTIME          = 242
+	SYS_TIMER_GETOVERRUN       = 243
+	SYS_TIMER_DELETE           = 244
+	SYS_CLOCK_SETTIME          = 245
+	SYS_CLOCK_GETTIME          = 246
+	SYS_CLOCK_GETRES           = 247
+	SYS_CLOCK_NANOSLEEP        = 248
+	SYS_SWAPCONTEXT            = 249
+	SYS_TGKILL                 = 250
+	SYS_UTIMES                 = 251
+	SYS_STATFS64               = 252
+	SYS_FSTATFS64              = 253
+	SYS_RTAS                   = 255
+	SYS_SYS_DEBUG_SETCONTEXT   = 256
+	SYS_MIGRATE_PAGES          = 258
+	SYS_MBIND                  = 259
+	SYS_GET_MEMPOLICY          = 260
+	SYS_SET_MEMPOLICY          = 261
+	SYS_MQ_OPEN                = 262
+	SYS_MQ_UNLINK              = 263
+	SYS_MQ_TIMEDSEND           = 264
+	SYS_MQ_TIMEDRECEIVE        = 265
+	SYS_MQ_NOTIFY              = 266
+	SYS_MQ_GETSETATTR          = 267
+	SYS_KEXEC_LOAD             = 268
+	SYS_ADD_KEY                = 269
+	SYS_REQUEST_KEY            = 270
+	SYS_KEYCTL                 = 271
+	SYS_WAITID                 = 272
+	SYS_IOPRIO_SET             = 273
+	SYS_IOPRIO_GET             = 274
+	SYS_INOTIFY_INIT           = 275
+	SYS_INOTIFY_ADD_WATCH      = 276
+	SYS_INOTIFY_RM_WATCH       = 277
+	SYS_SPU_RUN                = 278
+	SYS_SPU_CREATE             = 279
+	SYS_PSELECT6               = 280
+	SYS_PPOLL                  = 281
+	SYS_UNSHARE                = 282
+	SYS_SPLICE                 = 283
+	SYS_TEE                    = 284
+	SYS_VMSPLICE               = 285
+	SYS_OPENAT                 = 286
+	SYS_MKDIRAT                = 287
+	SYS_MKNODAT                = 288
+	SYS_FCHOWNAT               = 289
+	SYS_FUTIMESAT              = 290
+	SYS_NEWFSTATAT             = 291
+	SYS_UNLINKAT               = 292
+	SYS_RENAMEAT               = 293
+	SYS_LINKAT                 = 294
+	SYS_SYMLINKAT              = 295
+	SYS_READLINKAT             = 296
+	SYS_FCHMODAT               = 297
+	SYS_FACCESSAT              = 298
+	SYS_GET_ROBUST_LIST        = 299
+	SYS_SET_ROBUST_LIST        = 300
+	SYS_MOVE_PAGES             = 301
+	SYS_GETCPU                 = 302
+	SYS_EPOLL_PWAIT            = 303
+	SYS_UTIMENSAT              = 304
+	SYS_SIGNALFD               = 305
+	SYS_TIMERFD_CREATE         = 306
+	SYS_EVENTFD                = 307
+	SYS_SYNC_FILE_RANGE2       = 308
+	SYS_FALLOCATE              = 309
+	SYS_SUBPAGE_PROT           = 310
+	SYS_TIMERFD_SETTIME        = 311
+	SYS_TIMERFD_GETTIME        = 312
+	SYS_SIGNALFD4              = 313
+	SYS_EVENTFD2               = 314
+	SYS_EPOLL_CREATE1          = 315
+	SYS_DUP3                   = 316
+	SYS_PIPE2                  = 317
+	SYS_INOTIFY_INIT1          = 318
+	SYS_PERF_EVENT_OPEN        = 319
+	SYS_PREADV                 = 320
+	SYS_PWRITEV                = 321
+	SYS_RT_TGSIGQUEUEINFO      = 322
+	SYS_FANOTIFY_INIT          = 323
+	SYS_FANOTIFY_MARK          = 324
+	SYS_PRLIMIT64              = 325
+	SYS_SOCKET                 = 326
+	SYS_BIND                   = 327
+	SYS_CONNECT                = 328
+	SYS_LISTEN                 = 329
+	SYS_ACCEPT                 = 330
+	SYS_GETSOCKNAME            = 331
+	SYS_GETPEERNAME            = 332
+	SYS_SOCKETPAIR             = 333
+	SYS_SEND                   = 334
+	SYS_SENDTO                 = 335
+	SYS_RECV                   = 336
+	SYS_RECVFROM               = 337
+	SYS_SHUTDOWN               = 338
+	SYS_SETSOCKOPT             = 339
+	SYS_GETSOCKOPT             = 340
+	SYS_SENDMSG                = 341
+	SYS_RECVMSG                = 342
+	SYS_RECVMMSG               = 343
+	SYS_ACCEPT4                = 344
+	SYS_NAME_TO_HANDLE_AT      = 345
+	SYS_OPEN_BY_HANDLE_AT      = 346
+	SYS_CLOCK_ADJTIME          = 347
+	SYS_SYNCFS                 = 348
+	SYS_SENDMMSG               = 349
+	SYS_SETNS                  = 350
+	SYS_PROCESS_VM_READV       = 351
+	SYS_PROCESS_VM_WRITEV      = 352
+	SYS_FINIT_MODULE           = 353
+	SYS_KCMP                   = 354
+	SYS_SCHED_SETATTR          = 355
+	SYS_SCHED_GETATTR          = 356
+	SYS_RENAMEAT2              = 357
+	SYS_SECCOMP                = 358
+	SYS_GETRANDOM              = 359
+	SYS_MEMFD_CREATE           = 360
+	SYS_BPF                    = 361
+	SYS_EXECVEAT               = 362
+	SYS_SWITCH_ENDIAN          = 363
+	SYS_USERFAULTFD            = 364
+	SYS_MEMBARRIER             = 365
+	SYS_MLOCK2                 = 378
+	SYS_COPY_FILE_RANGE        = 379
+	SYS_PREADV2                = 380
+	SYS_PWRITEV2               = 381
+	SYS_KEXEC_FILE_LOAD        = 382
+	SYS_STATX                  = 383
+	SYS_PKEY_ALLOC             = 384
+	SYS_PKEY_FREE              = 385
+	SYS_PKEY_MPROTECT          = 386
+	SYS_RSEQ                   = 387
+	SYS_IO_PGETEVENTS          = 388
+	SYS_SEMTIMEDOP             = 392
+	SYS_SEMGET                 = 393
+	SYS_SEMCTL                 = 394
+	SYS_SHMGET                 = 395
+	SYS_SHMCTL                 = 396
+	SYS_SHMAT                  = 397
+	SYS_SHMDT                  = 398
+	SYS_MSGGET                 = 399
+	SYS_MSGSND                 = 400
+	SYS_MSGRCV                 = 401
+	SYS_MSGCTL                 = 402
+	SYS_PIDFD_SEND_SIGNAL      = 424
+	SYS_IO_URING_SETUP         = 425
+	SYS_IO_URING_ENTER         = 426
+	SYS_IO_URING_REGISTER      = 427
+	SYS_OPEN_TREE              = 428
+	SYS_MOVE_MOUNT             = 429
+	SYS_FSOPEN                 = 430
+	SYS_FSCONFIG               = 431
+	SYS_FSMOUNT                = 432
+	SYS_FSPICK                 = 433
+	SYS_PIDFD_OPEN             = 434
+	SYS_CLONE3                 = 435
+	SYS_OPENAT2                = 437
+	SYS_PIDFD_GETFD            = 438
+	SYS_FACCESSAT2             = 439
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_riscv64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_riscv64.go
new file mode 100644
index 000000000..6642cfccd
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_riscv64.go
@@ -0,0 +1,303 @@
+// go run linux/mksysnum.go -Wall -Werror -static -I/tmp/include /tmp/include/asm/unistd.h
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build riscv64,linux
+
+package unix
+
+const (
+	SYS_IO_SETUP               = 0
+	SYS_IO_DESTROY             = 1
+	SYS_IO_SUBMIT              = 2
+	SYS_IO_CANCEL              = 3
+	SYS_IO_GETEVENTS           = 4
+	SYS_SETXATTR               = 5
+	SYS_LSETXATTR              = 6
+	SYS_FSETXATTR              = 7
+	SYS_GETXATTR               = 8
+	SYS_LGETXATTR              = 9
+	SYS_FGETXATTR              = 10
+	SYS_LISTXATTR              = 11
+	SYS_LLISTXATTR             = 12
+	SYS_FLISTXATTR             = 13
+	SYS_REMOVEXATTR            = 14
+	SYS_LREMOVEXATTR           = 15
+	SYS_FREMOVEXATTR           = 16
+	SYS_GETCWD                 = 17
+	SYS_LOOKUP_DCOOKIE         = 18
+	SYS_EVENTFD2               = 19
+	SYS_EPOLL_CREATE1          = 20
+	SYS_EPOLL_CTL              = 21
+	SYS_EPOLL_PWAIT            = 22
+	SYS_DUP                    = 23
+	SYS_DUP3                   = 24
+	SYS_FCNTL                  = 25
+	SYS_INOTIFY_INIT1          = 26
+	SYS_INOTIFY_ADD_WATCH      = 27
+	SYS_INOTIFY_RM_WATCH       = 28
+	SYS_IOCTL                  = 29
+	SYS_IOPRIO_SET             = 30
+	SYS_IOPRIO_GET             = 31
+	SYS_FLOCK                  = 32
+	SYS_MKNODAT                = 33
+	SYS_MKDIRAT                = 34
+	SYS_UNLINKAT               = 35
+	SYS_SYMLINKAT              = 36
+	SYS_LINKAT                 = 37
+	SYS_UMOUNT2                = 39
+	SYS_MOUNT                  = 40
+	SYS_PIVOT_ROOT             = 41
+	SYS_NFSSERVCTL             = 42
+	SYS_STATFS                 = 43
+	SYS_FSTATFS                = 44
+	SYS_TRUNCATE               = 45
+	SYS_FTRUNCATE              = 46
+	SYS_FALLOCATE              = 47
+	SYS_FACCESSAT              = 48
+	SYS_CHDIR                  = 49
+	SYS_FCHDIR                 = 50
+	SYS_CHROOT                 = 51
+	SYS_FCHMOD                 = 52
+	SYS_FCHMODAT               = 53
+	SYS_FCHOWNAT               = 54
+	SYS_FCHOWN                 = 55
+	SYS_OPENAT                 = 56
+	SYS_CLOSE                  = 57
+	SYS_VHANGUP                = 58
+	SYS_PIPE2                  = 59
+	SYS_QUOTACTL               = 60
+	SYS_GETDENTS64             = 61
+	SYS_LSEEK                  = 62
+	SYS_READ                   = 63
+	SYS_WRITE                  = 64
+	SYS_READV                  = 65
+	SYS_WRITEV                 = 66
+	SYS_PREAD64                = 67
+	SYS_PWRITE64               = 68
+	SYS_PREADV                 = 69
+	SYS_PWRITEV                = 70
+	SYS_SENDFILE               = 71
+	SYS_PSELECT6               = 72
+	SYS_PPOLL                  = 73
+	SYS_SIGNALFD4              = 74
+	SYS_VMSPLICE               = 75
+	SYS_SPLICE                 = 76
+	SYS_TEE                    = 77
+	SYS_READLINKAT             = 78
+	SYS_FSTATAT                = 79
+	SYS_FSTAT                  = 80
+	SYS_SYNC                   = 81
+	SYS_FSYNC                  = 82
+	SYS_FDATASYNC              = 83
+	SYS_SYNC_FILE_RANGE        = 84
+	SYS_TIMERFD_CREATE         = 85
+	SYS_TIMERFD_SETTIME        = 86
+	SYS_TIMERFD_GETTIME        = 87
+	SYS_UTIMENSAT              = 88
+	SYS_ACCT                   = 89
+	SYS_CAPGET                 = 90
+	SYS_CAPSET                 = 91
+	SYS_PERSONALITY            = 92
+	SYS_EXIT                   = 93
+	SYS_EXIT_GROUP             = 94
+	SYS_WAITID                 = 95
+	SYS_SET_TID_ADDRESS        = 96
+	SYS_UNSHARE                = 97
+	SYS_FUTEX                  = 98
+	SYS_SET_ROBUST_LIST        = 99
+	SYS_GET_ROBUST_LIST        = 100
+	SYS_NANOSLEEP              = 101
+	SYS_GETITIMER              = 102
+	SYS_SETITIMER              = 103
+	SYS_KEXEC_LOAD             = 104
+	SYS_INIT_MODULE            = 105
+	SYS_DELETE_MODULE          = 106
+	SYS_TIMER_CREATE           = 107
+	SYS_TIMER_GETTIME          = 108
+	SYS_TIMER_GETOVERRUN       = 109
+	SYS_TIMER_SETTIME          = 110
+	SYS_TIMER_DELETE           = 111
+	SYS_CLOCK_SETTIME          = 112
+	SYS_CLOCK_GETTIME          = 113
+	SYS_CLOCK_GETRES           = 114
+	SYS_CLOCK_NANOSLEEP        = 115
+	SYS_SYSLOG                 = 116
+	SYS_PTRACE                 = 117
+	SYS_SCHED_SETPARAM         = 118
+	SYS_SCHED_SETSCHEDULER     = 119
+	SYS_SCHED_GETSCHEDULER     = 120
+	SYS_SCHED_GETPARAM         = 121
+	SYS_SCHED_SETAFFINITY      = 122
+	SYS_SCHED_GETAFFINITY      = 123
+	SYS_SCHED_YIELD            = 124
+	SYS_SCHED_GET_PRIORITY_MAX = 125
+	SYS_SCHED_GET_PRIORITY_MIN = 126
+	SYS_SCHED_RR_GET_INTERVAL  = 127
+	SYS_RESTART_SYSCALL        = 128
+	SYS_KILL                   = 129
+	SYS_TKILL                  = 130
+	SYS_TGKILL                 = 131
+	SYS_SIGALTSTACK            = 132
+	SYS_RT_SIGSUSPEND          = 133
+	SYS_RT_SIGACTION           = 134
+	SYS_RT_SIGPROCMASK         = 135
+	SYS_RT_SIGPENDING          = 136
+	SYS_RT_SIGTIMEDWAIT        = 137
+	SYS_RT_SIGQUEUEINFO        = 138
+	SYS_RT_SIGRETURN           = 139
+	SYS_SETPRIORITY            = 140
+	SYS_GETPRIORITY            = 141
+	SYS_REBOOT                 = 142
+	SYS_SETREGID               = 143
+	SYS_SETGID                 = 144
+	SYS_SETREUID               = 145
+	SYS_SETUID                 = 146
+	SYS_SETRESUID              = 147
+	SYS_GETRESUID              = 148
+	SYS_SETRESGID              = 149
+	SYS_GETRESGID              = 150
+	SYS_SETFSUID               = 151
+	SYS_SETFSGID               = 152
+	SYS_TIMES                  = 153
+	SYS_SETPGID                = 154
+	SYS_GETPGID                = 155
+	SYS_GETSID                 = 156
+	SYS_SETSID                 = 157
+	SYS_GETGROUPS              = 158
+	SYS_SETGROUPS              = 159
+	SYS_UNAME                  = 160
+	SYS_SETHOSTNAME            = 161
+	SYS_SETDOMAINNAME          = 162
+	SYS_GETRLIMIT              = 163
+	SYS_SETRLIMIT              = 164
+	SYS_GETRUSAGE              = 165
+	SYS_UMASK                  = 166
+	SYS_PRCTL                  = 167
+	SYS_GETCPU                 = 168
+	SYS_GETTIMEOFDAY           = 169
+	SYS_SETTIMEOFDAY           = 170
+	SYS_ADJTIMEX               = 171
+	SYS_GETPID                 = 172
+	SYS_GETPPID                = 173
+	SYS_GETUID                 = 174
+	SYS_GETEUID                = 175
+	SYS_GETGID                 = 176
+	SYS_GETEGID                = 177
+	SYS_GETTID                 = 178
+	SYS_SYSINFO                = 179
+	SYS_MQ_OPEN                = 180
+	SYS_MQ_UNLINK              = 181
+	SYS_MQ_TIMEDSEND           = 182
+	SYS_MQ_TIMEDRECEIVE        = 183
+	SYS_MQ_NOTIFY              = 184
+	SYS_MQ_GETSETATTR          = 185
+	SYS_MSGGET                 = 186
+	SYS_MSGCTL                 = 187
+	SYS_MSGRCV                 = 188
+	SYS_MSGSND                 = 189
+	SYS_SEMGET                 = 190
+	SYS_SEMCTL                 = 191
+	SYS_SEMTIMEDOP             = 192
+	SYS_SEMOP                  = 193
+	SYS_SHMGET                 = 194
+	SYS_SHMCTL                 = 195
+	SYS_SHMAT                  = 196
+	SYS_SHMDT                  = 197
+	SYS_SOCKET                 = 198
+	SYS_SOCKETPAIR             = 199
+	SYS_BIND                   = 200
+	SYS_LISTEN                 = 201
+	SYS_ACCEPT                 = 202
+	SYS_CONNECT                = 203
+	SYS_GETSOCKNAME            = 204
+	SYS_GETPEERNAME            = 205
+	SYS_SENDTO                 = 206
+	SYS_RECVFROM               = 207
+	SYS_SETSOCKOPT             = 208
+	SYS_GETSOCKOPT             = 209
+	SYS_SHUTDOWN               = 210
+	SYS_SENDMSG                = 211
+	SYS_RECVMSG                = 212
+	SYS_READAHEAD              = 213
+	SYS_BRK                    = 214
+	SYS_MUNMAP                 = 215
+	SYS_MREMAP                 = 216
+	SYS_ADD_KEY                = 217
+	SYS_REQUEST_KEY            = 218
+	SYS_KEYCTL                 = 219
+	SYS_CLONE                  = 220
+	SYS_EXECVE                 = 221
+	SYS_MMAP                   = 222
+	SYS_FADVISE64              = 223
+	SYS_SWAPON                 = 224
+	SYS_SWAPOFF                = 225
+	SYS_MPROTECT               = 226
+	SYS_MSYNC                  = 227
+	SYS_MLOCK                  = 228
+	SYS_MUNLOCK                = 229
+	SYS_MLOCKALL               = 230
+	SYS_MUNLOCKALL             = 231
+	SYS_MINCORE                = 232
+	SYS_MADVISE                = 233
+	SYS_REMAP_FILE_PAGES       = 234
+	SYS_MBIND                  = 235
+	SYS_GET_MEMPOLICY          = 236
+	SYS_SET_MEMPOLICY          = 237
+	SYS_MIGRATE_PAGES          = 238
+	SYS_MOVE_PAGES             = 239
+	SYS_RT_TGSIGQUEUEINFO      = 240
+	SYS_PERF_EVENT_OPEN        = 241
+	SYS_ACCEPT4                = 242
+	SYS_RECVMMSG               = 243
+	SYS_ARCH_SPECIFIC_SYSCALL  = 244
+	SYS_WAIT4                  = 260
+	SYS_PRLIMIT64              = 261
+	SYS_FANOTIFY_INIT          = 262
+	SYS_FANOTIFY_MARK          = 263
+	SYS_NAME_TO_HANDLE_AT      = 264
+	SYS_OPEN_BY_HANDLE_AT      = 265
+	SYS_CLOCK_ADJTIME          = 266
+	SYS_SYNCFS                 = 267
+	SYS_SETNS                  = 268
+	SYS_SENDMMSG               = 269
+	SYS_PROCESS_VM_READV       = 270
+	SYS_PROCESS_VM_WRITEV      = 271
+	SYS_KCMP                   = 272
+	SYS_FINIT_MODULE           = 273
+	SYS_SCHED_SETATTR          = 274
+	SYS_SCHED_GETATTR          = 275
+	SYS_RENAMEAT2              = 276
+	SYS_SECCOMP                = 277
+	SYS_GETRANDOM              = 278
+	SYS_MEMFD_CREATE           = 279
+	SYS_BPF                    = 280
+	SYS_EXECVEAT               = 281
+	SYS_USERFAULTFD            = 282
+	SYS_MEMBARRIER             = 283
+	SYS_MLOCK2                 = 284
+	SYS_COPY_FILE_RANGE        = 285
+	SYS_PREADV2                = 286
+	SYS_PWRITEV2               = 287
+	SYS_PKEY_MPROTECT          = 288
+	SYS_PKEY_ALLOC             = 289
+	SYS_PKEY_FREE              = 290
+	SYS_STATX                  = 291
+	SYS_IO_PGETEVENTS          = 292
+	SYS_RSEQ                   = 293
+	SYS_KEXEC_FILE_LOAD        = 294
+	SYS_PIDFD_SEND_SIGNAL      = 424
+	SYS_IO_URING_SETUP         = 425
+	SYS_IO_URING_ENTER         = 426
+	SYS_IO_URING_REGISTER      = 427
+	SYS_OPEN_TREE              = 428
+	SYS_MOVE_MOUNT             = 429
+	SYS_FSOPEN                 = 430
+	SYS_FSCONFIG               = 431
+	SYS_FSMOUNT                = 432
+	SYS_FSPICK                 = 433
+	SYS_PIDFD_OPEN             = 434
+	SYS_CLONE3                 = 435
+	SYS_OPENAT2                = 437
+	SYS_PIDFD_GETFD            = 438
+	SYS_FACCESSAT2             = 439
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_s390x.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_s390x.go
new file mode 100644
index 000000000..23367b946
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_s390x.go
@@ -0,0 +1,366 @@
+// go run linux/mksysnum.go -Wall -Werror -static -I/tmp/include -fsigned-char /tmp/include/asm/unistd.h
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build s390x,linux
+
+package unix
+
+const (
+	SYS_EXIT                   = 1
+	SYS_FORK                   = 2
+	SYS_READ                   = 3
+	SYS_WRITE                  = 4
+	SYS_OPEN                   = 5
+	SYS_CLOSE                  = 6
+	SYS_RESTART_SYSCALL        = 7
+	SYS_CREAT                  = 8
+	SYS_LINK                   = 9
+	SYS_UNLINK                 = 10
+	SYS_EXECVE                 = 11
+	SYS_CHDIR                  = 12
+	SYS_MKNOD                  = 14
+	SYS_CHMOD                  = 15
+	SYS_LSEEK                  = 19
+	SYS_GETPID                 = 20
+	SYS_MOUNT                  = 21
+	SYS_UMOUNT                 = 22
+	SYS_PTRACE                 = 26
+	SYS_ALARM                  = 27
+	SYS_PAUSE                  = 29
+	SYS_UTIME                  = 30
+	SYS_ACCESS                 = 33
+	SYS_NICE                   = 34
+	SYS_SYNC                   = 36
+	SYS_KILL                   = 37
+	SYS_RENAME                 = 38
+	SYS_MKDIR                  = 39
+	SYS_RMDIR                  = 40
+	SYS_DUP                    = 41
+	SYS_PIPE                   = 42
+	SYS_TIMES                  = 43
+	SYS_BRK                    = 45
+	SYS_SIGNAL                 = 48
+	SYS_ACCT                   = 51
+	SYS_UMOUNT2                = 52
+	SYS_IOCTL                  = 54
+	SYS_FCNTL                  = 55
+	SYS_SETPGID                = 57
+	SYS_UMASK                  = 60
+	SYS_CHROOT                 = 61
+	SYS_USTAT                  = 62
+	SYS_DUP2                   = 63
+	SYS_GETPPID                = 64
+	SYS_GETPGRP                = 65
+	SYS_SETSID                 = 66
+	SYS_SIGACTION              = 67
+	SYS_SIGSUSPEND             = 72
+	SYS_SIGPENDING             = 73
+	SYS_SETHOSTNAME            = 74
+	SYS_SETRLIMIT              = 75
+	SYS_GETRUSAGE              = 77
+	SYS_GETTIMEOFDAY           = 78
+	SYS_SETTIMEOFDAY           = 79
+	SYS_SYMLINK                = 83
+	SYS_READLINK               = 85
+	SYS_USELIB                 = 86
+	SYS_SWAPON                 = 87
+	SYS_REBOOT                 = 88
+	SYS_READDIR                = 89
+	SYS_MMAP                   = 90
+	SYS_MUNMAP                 = 91
+	SYS_TRUNCATE               = 92
+	SYS_FTRUNCATE              = 93
+	SYS_FCHMOD                 = 94
+	SYS_GETPRIORITY            = 96
+	SYS_SETPRIORITY            = 97
+	SYS_STATFS                 = 99
+	SYS_FSTATFS                = 100
+	SYS_SOCKETCALL             = 102
+	SYS_SYSLOG                 = 103
+	SYS_SETITIMER              = 104
+	SYS_GETITIMER              = 105
+	SYS_STAT                   = 106
+	SYS_LSTAT                  = 107
+	SYS_FSTAT                  = 108
+	SYS_LOOKUP_DCOOKIE         = 110
+	SYS_VHANGUP                = 111
+	SYS_IDLE                   = 112
+	SYS_WAIT4                  = 114
+	SYS_SWAPOFF                = 115
+	SYS_SYSINFO                = 116
+	SYS_IPC                    = 117
+	SYS_FSYNC                  = 118
+	SYS_SIGRETURN              = 119
+	SYS_CLONE                  = 120
+	SYS_SETDOMAINNAME          = 121
+	SYS_UNAME                  = 122
+	SYS_ADJTIMEX               = 124
+	SYS_MPROTECT               = 125
+	SYS_SIGPROCMASK            = 126
+	SYS_CREATE_MODULE          = 127
+	SYS_INIT_MODULE            = 128
+	SYS_DELETE_MODULE          = 129
+	SYS_GET_KERNEL_SYMS        = 130
+	SYS_QUOTACTL               = 131
+	SYS_GETPGID                = 132
+	SYS_FCHDIR                 = 133
+	SYS_BDFLUSH                = 134
+	SYS_SYSFS                  = 135
+	SYS_PERSONALITY            = 136
+	SYS_AFS_SYSCALL            = 137
+	SYS_GETDENTS               = 141
+	SYS_SELECT                 = 142
+	SYS_FLOCK                  = 143
+	SYS_MSYNC                  = 144
+	SYS_READV                  = 145
+	SYS_WRITEV                 = 146
+	SYS_GETSID                 = 147
+	SYS_FDATASYNC              = 148
+	SYS__SYSCTL                = 149
+	SYS_MLOCK                  = 150
+	SYS_MUNLOCK                = 151
+	SYS_MLOCKALL               = 152
+	SYS_MUNLOCKALL             = 153
+	SYS_SCHED_SETPARAM         = 154
+	SYS_SCHED_GETPARAM         = 155
+	SYS_SCHED_SETSCHEDULER     = 156
+	SYS_SCHED_GETSCHEDULER     = 157
+	SYS_SCHED_YIELD            = 158
+	SYS_SCHED_GET_PRIORITY_MAX = 159
+	SYS_SCHED_GET_PRIORITY_MIN = 160
+	SYS_SCHED_RR_GET_INTERVAL  = 161
+	SYS_NANOSLEEP              = 162
+	SYS_MREMAP                 = 163
+	SYS_QUERY_MODULE           = 167
+	SYS_POLL                   = 168
+	SYS_NFSSERVCTL             = 169
+	SYS_PRCTL                  = 172
+	SYS_RT_SIGRETURN           = 173
+	SYS_RT_SIGACTION           = 174
+	SYS_RT_SIGPROCMASK         = 175
+	SYS_RT_SIGPENDING          = 176
+	SYS_RT_SIGTIMEDWAIT        = 177
+	SYS_RT_SIGQUEUEINFO        = 178
+	SYS_RT_SIGSUSPEND          = 179
+	SYS_PREAD64                = 180
+	SYS_PWRITE64               = 181
+	SYS_GETCWD                 = 183
+	SYS_CAPGET                 = 184
+	SYS_CAPSET                 = 185
+	SYS_SIGALTSTACK            = 186
+	SYS_SENDFILE               = 187
+	SYS_GETPMSG                = 188
+	SYS_PUTPMSG                = 189
+	SYS_VFORK                  = 190
+	SYS_GETRLIMIT              = 191
+	SYS_LCHOWN                 = 198
+	SYS_GETUID                 = 199
+	SYS_GETGID                 = 200
+	SYS_GETEUID                = 201
+	SYS_GETEGID                = 202
+	SYS_SETREUID               = 203
+	SYS_SETREGID               = 204
+	SYS_GETGROUPS              = 205
+	SYS_SETGROUPS              = 206
+	SYS_FCHOWN                 = 207
+	SYS_SETRESUID              = 208
+	SYS_GETRESUID              = 209
+	SYS_SETRESGID              = 210
+	SYS_GETRESGID              = 211
+	SYS_CHOWN                  = 212
+	SYS_SETUID                 = 213
+	SYS_SETGID                 = 214
+	SYS_SETFSUID               = 215
+	SYS_SETFSGID               = 216
+	SYS_PIVOT_ROOT             = 217
+	SYS_MINCORE                = 218
+	SYS_MADVISE                = 219
+	SYS_GETDENTS64             = 220
+	SYS_READAHEAD              = 222
+	SYS_SETXATTR               = 224
+	SYS_LSETXATTR              = 225
+	SYS_FSETXATTR              = 226
+	SYS_GETXATTR               = 227
+	SYS_LGETXATTR              = 228
+	SYS_FGETXATTR              = 229
+	SYS_LISTXATTR              = 230
+	SYS_LLISTXATTR             = 231
+	SYS_FLISTXATTR             = 232
+	SYS_REMOVEXATTR            = 233
+	SYS_LREMOVEXATTR           = 234
+	SYS_FREMOVEXATTR           = 235
+	SYS_GETTID                 = 236
+	SYS_TKILL                  = 237
+	SYS_FUTEX                  = 238
+	SYS_SCHED_SETAFFINITY      = 239
+	SYS_SCHED_GETAFFINITY      = 240
+	SYS_TGKILL                 = 241
+	SYS_IO_SETUP               = 243
+	SYS_IO_DESTROY             = 244
+	SYS_IO_GETEVENTS           = 245
+	SYS_IO_SUBMIT              = 246
+	SYS_IO_CANCEL              = 247
+	SYS_EXIT_GROUP             = 248
+	SYS_EPOLL_CREATE           = 249
+	SYS_EPOLL_CTL              = 250
+	SYS_EPOLL_WAIT             = 251
+	SYS_SET_TID_ADDRESS        = 252
+	SYS_FADVISE64              = 253
+	SYS_TIMER_CREATE           = 254
+	SYS_TIMER_SETTIME          = 255
+	SYS_TIMER_GETTIME          = 256
+	SYS_TIMER_GETOVERRUN       = 257
+	SYS_TIMER_DELETE           = 258
+	SYS_CLOCK_SETTIME          = 259
+	SYS_CLOCK_GETTIME          = 260
+	SYS_CLOCK_GETRES           = 261
+	SYS_CLOCK_NANOSLEEP        = 262
+	SYS_STATFS64               = 265
+	SYS_FSTATFS64              = 266
+	SYS_REMAP_FILE_PAGES       = 267
+	SYS_MBIND                  = 268
+	SYS_GET_MEMPOLICY          = 269
+	SYS_SET_MEMPOLICY          = 270
+	SYS_MQ_OPEN                = 271
+	SYS_MQ_UNLINK              = 272
+	SYS_MQ_TIMEDSEND           = 273
+	SYS_MQ_TIMEDRECEIVE        = 274
+	SYS_MQ_NOTIFY              = 275
+	SYS_MQ_GETSETATTR          = 276
+	SYS_KEXEC_LOAD             = 277
+	SYS_ADD_KEY                = 278
+	SYS_REQUEST_KEY            = 279
+	SYS_KEYCTL                 = 280
+	SYS_WAITID                 = 281
+	SYS_IOPRIO_SET             = 282
+	SYS_IOPRIO_GET             = 283
+	SYS_INOTIFY_INIT           = 284
+	SYS_INOTIFY_ADD_WATCH      = 285
+	SYS_INOTIFY_RM_WATCH       = 286
+	SYS_MIGRATE_PAGES          = 287
+	SYS_OPENAT                 = 288
+	SYS_MKDIRAT                = 289
+	SYS_MKNODAT                = 290
+	SYS_FCHOWNAT               = 291
+	SYS_FUTIMESAT              = 292
+	SYS_NEWFSTATAT             = 293
+	SYS_UNLINKAT               = 294
+	SYS_RENAMEAT               = 295
+	SYS_LINKAT                 = 296
+	SYS_SYMLINKAT              = 297
+	SYS_READLINKAT             = 298
+	SYS_FCHMODAT               = 299
+	SYS_FACCESSAT              = 300
+	SYS_PSELECT6               = 301
+	SYS_PPOLL                  = 302
+	SYS_UNSHARE                = 303
+	SYS_SET_ROBUST_LIST        = 304
+	SYS_GET_ROBUST_LIST        = 305
+	SYS_SPLICE                 = 306
+	SYS_SYNC_FILE_RANGE        = 307
+	SYS_TEE                    = 308
+	SYS_VMSPLICE               = 309
+	SYS_MOVE_PAGES             = 310
+	SYS_GETCPU                 = 311
+	SYS_EPOLL_PWAIT            = 312
+	SYS_UTIMES                 = 313
+	SYS_FALLOCATE              = 314
+	SYS_UTIMENSAT              = 315
+	SYS_SIGNALFD               = 316
+	SYS_TIMERFD                = 317
+	SYS_EVENTFD                = 318
+	SYS_TIMERFD_CREATE         = 319
+	SYS_TIMERFD_SETTIME        = 320
+	SYS_TIMERFD_GETTIME        = 321
+	SYS_SIGNALFD4              = 322
+	SYS_EVENTFD2               = 323
+	SYS_INOTIFY_INIT1          = 324
+	SYS_PIPE2                  = 325
+	SYS_DUP3                   = 326
+	SYS_EPOLL_CREATE1          = 327
+	SYS_PREADV                 = 328
+	SYS_PWRITEV                = 329
+	SYS_RT_TGSIGQUEUEINFO      = 330
+	SYS_PERF_EVENT_OPEN        = 331
+	SYS_FANOTIFY_INIT          = 332
+	SYS_FANOTIFY_MARK          = 333
+	SYS_PRLIMIT64              = 334
+	SYS_NAME_TO_HANDLE_AT      = 335
+	SYS_OPEN_BY_HANDLE_AT      = 336
+	SYS_CLOCK_ADJTIME          = 337
+	SYS_SYNCFS                 = 338
+	SYS_SETNS                  = 339
+	SYS_PROCESS_VM_READV       = 340
+	SYS_PROCESS_VM_WRITEV      = 341
+	SYS_S390_RUNTIME_INSTR     = 342
+	SYS_KCMP                   = 343
+	SYS_FINIT_MODULE           = 344
+	SYS_SCHED_SETATTR          = 345
+	SYS_SCHED_GETATTR          = 346
+	SYS_RENAMEAT2              = 347
+	SYS_SECCOMP                = 348
+	SYS_GETRANDOM              = 349
+	SYS_MEMFD_CREATE           = 350
+	SYS_BPF                    = 351
+	SYS_S390_PCI_MMIO_WRITE    = 352
+	SYS_S390_PCI_MMIO_READ     = 353
+	SYS_EXECVEAT               = 354
+	SYS_USERFAULTFD            = 355
+	SYS_MEMBARRIER             = 356
+	SYS_RECVMMSG               = 357
+	SYS_SENDMMSG               = 358
+	SYS_SOCKET                 = 359
+	SYS_SOCKETPAIR             = 360
+	SYS_BIND                   = 361
+	SYS_CONNECT                = 362
+	SYS_LISTEN                 = 363
+	SYS_ACCEPT4                = 364
+	SYS_GETSOCKOPT             = 365
+	SYS_SETSOCKOPT             = 366
+	SYS_GETSOCKNAME            = 367
+	SYS_GETPEERNAME            = 368
+	SYS_SENDTO                 = 369
+	SYS_SENDMSG                = 370
+	SYS_RECVFROM               = 371
+	SYS_RECVMSG                = 372
+	SYS_SHUTDOWN               = 373
+	SYS_MLOCK2                 = 374
+	SYS_COPY_FILE_RANGE        = 375
+	SYS_PREADV2                = 376
+	SYS_PWRITEV2               = 377
+	SYS_S390_GUARDED_STORAGE   = 378
+	SYS_STATX                  = 379
+	SYS_S390_STHYI             = 380
+	SYS_KEXEC_FILE_LOAD        = 381
+	SYS_IO_PGETEVENTS          = 382
+	SYS_RSEQ                   = 383
+	SYS_PKEY_MPROTECT          = 384
+	SYS_PKEY_ALLOC             = 385
+	SYS_PKEY_FREE              = 386
+	SYS_SEMTIMEDOP             = 392
+	SYS_SEMGET                 = 393
+	SYS_SEMCTL                 = 394
+	SYS_SHMGET                 = 395
+	SYS_SHMCTL                 = 396
+	SYS_SHMAT                  = 397
+	SYS_SHMDT                  = 398
+	SYS_MSGGET                 = 399
+	SYS_MSGSND                 = 400
+	SYS_MSGRCV                 = 401
+	SYS_MSGCTL                 = 402
+	SYS_PIDFD_SEND_SIGNAL      = 424
+	SYS_IO_URING_SETUP         = 425
+	SYS_IO_URING_ENTER         = 426
+	SYS_IO_URING_REGISTER      = 427
+	SYS_OPEN_TREE              = 428
+	SYS_MOVE_MOUNT             = 429
+	SYS_FSOPEN                 = 430
+	SYS_FSCONFIG               = 431
+	SYS_FSMOUNT                = 432
+	SYS_FSPICK                 = 433
+	SYS_PIDFD_OPEN             = 434
+	SYS_CLONE3                 = 435
+	SYS_OPENAT2                = 437
+	SYS_PIDFD_GETFD            = 438
+	SYS_FACCESSAT2             = 439
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_sparc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_sparc64.go
new file mode 100644
index 000000000..083aa0204
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_linux_sparc64.go
@@ -0,0 +1,380 @@
+// go run linux/mksysnum.go -Wall -Werror -static -I/tmp/include /tmp/include/asm/unistd.h
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build sparc64,linux
+
+package unix
+
+const (
+	SYS_RESTART_SYSCALL        = 0
+	SYS_EXIT                   = 1
+	SYS_FORK                   = 2
+	SYS_READ                   = 3
+	SYS_WRITE                  = 4
+	SYS_OPEN                   = 5
+	SYS_CLOSE                  = 6
+	SYS_WAIT4                  = 7
+	SYS_CREAT                  = 8
+	SYS_LINK                   = 9
+	SYS_UNLINK                 = 10
+	SYS_EXECV                  = 11
+	SYS_CHDIR                  = 12
+	SYS_CHOWN                  = 13
+	SYS_MKNOD                  = 14
+	SYS_CHMOD                  = 15
+	SYS_LCHOWN                 = 16
+	SYS_BRK                    = 17
+	SYS_PERFCTR                = 18
+	SYS_LSEEK                  = 19
+	SYS_GETPID                 = 20
+	SYS_CAPGET                 = 21
+	SYS_CAPSET                 = 22
+	SYS_SETUID                 = 23
+	SYS_GETUID                 = 24
+	SYS_VMSPLICE               = 25
+	SYS_PTRACE                 = 26
+	SYS_ALARM                  = 27
+	SYS_SIGALTSTACK            = 28
+	SYS_PAUSE                  = 29
+	SYS_UTIME                  = 30
+	SYS_ACCESS                 = 33
+	SYS_NICE                   = 34
+	SYS_SYNC                   = 36
+	SYS_KILL                   = 37
+	SYS_STAT                   = 38
+	SYS_SENDFILE               = 39
+	SYS_LSTAT                  = 40
+	SYS_DUP                    = 41
+	SYS_PIPE                   = 42
+	SYS_TIMES                  = 43
+	SYS_UMOUNT2                = 45
+	SYS_SETGID                 = 46
+	SYS_GETGID                 = 47
+	SYS_SIGNAL                 = 48
+	SYS_GETEUID                = 49
+	SYS_GETEGID                = 50
+	SYS_ACCT                   = 51
+	SYS_MEMORY_ORDERING        = 52
+	SYS_IOCTL                  = 54
+	SYS_REBOOT                 = 55
+	SYS_SYMLINK                = 57
+	SYS_READLINK               = 58
+	SYS_EXECVE                 = 59
+	SYS_UMASK                  = 60
+	SYS_CHROOT                 = 61
+	SYS_FSTAT                  = 62
+	SYS_FSTAT64                = 63
+	SYS_GETPAGESIZE            = 64
+	SYS_MSYNC                  = 65
+	SYS_VFORK                  = 66
+	SYS_PREAD64                = 67
+	SYS_PWRITE64               = 68
+	SYS_MMAP                   = 71
+	SYS_MUNMAP                 = 73
+	SYS_MPROTECT               = 74
+	SYS_MADVISE                = 75
+	SYS_VHANGUP                = 76
+	SYS_MINCORE                = 78
+	SYS_GETGROUPS              = 79
+	SYS_SETGROUPS              = 80
+	SYS_GETPGRP                = 81
+	SYS_SETITIMER              = 83
+	SYS_SWAPON                 = 85
+	SYS_GETITIMER              = 86
+	SYS_SETHOSTNAME            = 88
+	SYS_DUP2                   = 90
+	SYS_FCNTL                  = 92
+	SYS_SELECT                 = 93
+	SYS_FSYNC                  = 95
+	SYS_SETPRIORITY            = 96
+	SYS_SOCKET                 = 97
+	SYS_CONNECT                = 98
+	SYS_ACCEPT                 = 99
+	SYS_GETPRIORITY            = 100
+	SYS_RT_SIGRETURN           = 101
+	SYS_RT_SIGACTION           = 102
+	SYS_RT_SIGPROCMASK         = 103
+	SYS_RT_SIGPENDING          = 104
+	SYS_RT_SIGTIMEDWAIT        = 105
+	SYS_RT_SIGQUEUEINFO        = 106
+	SYS_RT_SIGSUSPEND          = 107
+	SYS_SETRESUID              = 108
+	SYS_GETRESUID              = 109
+	SYS_SETRESGID              = 110
+	SYS_GETRESGID              = 111
+	SYS_RECVMSG                = 113
+	SYS_SENDMSG                = 114
+	SYS_GETTIMEOFDAY           = 116
+	SYS_GETRUSAGE              = 117
+	SYS_GETSOCKOPT             = 118
+	SYS_GETCWD                 = 119
+	SYS_READV                  = 120
+	SYS_WRITEV                 = 121
+	SYS_SETTIMEOFDAY           = 122
+	SYS_FCHOWN                 = 123
+	SYS_FCHMOD                 = 124
+	SYS_RECVFROM               = 125
+	SYS_SETREUID               = 126
+	SYS_SETREGID               = 127
+	SYS_RENAME                 = 128
+	SYS_TRUNCATE               = 129
+	SYS_FTRUNCATE              = 130
+	SYS_FLOCK                  = 131
+	SYS_LSTAT64                = 132
+	SYS_SENDTO                 = 133
+	SYS_SHUTDOWN               = 134
+	SYS_SOCKETPAIR             = 135
+	SYS_MKDIR                  = 136
+	SYS_RMDIR                  = 137
+	SYS_UTIMES                 = 138
+	SYS_STAT64                 = 139
+	SYS_SENDFILE64             = 140
+	SYS_GETPEERNAME            = 141
+	SYS_FUTEX                  = 142
+	SYS_GETTID                 = 143
+	SYS_GETRLIMIT              = 144
+	SYS_SETRLIMIT              = 145
+	SYS_PIVOT_ROOT             = 146
+	SYS_PRCTL                  = 147
+	SYS_PCICONFIG_READ         = 148
+	SYS_PCICONFIG_WRITE        = 149
+	SYS_GETSOCKNAME            = 150
+	SYS_INOTIFY_INIT           = 151
+	SYS_INOTIFY_ADD_WATCH      = 152
+	SYS_POLL                   = 153
+	SYS_GETDENTS64             = 154
+	SYS_INOTIFY_RM_WATCH       = 156
+	SYS_STATFS                 = 157
+	SYS_FSTATFS                = 158
+	SYS_UMOUNT                 = 159
+	SYS_SCHED_SET_AFFINITY     = 160
+	SYS_SCHED_GET_AFFINITY     = 161
+	SYS_GETDOMAINNAME          = 162
+	SYS_SETDOMAINNAME          = 163
+	SYS_UTRAP_INSTALL          = 164
+	SYS_QUOTACTL               = 165
+	SYS_SET_TID_ADDRESS        = 166
+	SYS_MOUNT                  = 167
+	SYS_USTAT                  = 168
+	SYS_SETXATTR               = 169
+	SYS_LSETXATTR              = 170
+	SYS_FSETXATTR              = 171
+	SYS_GETXATTR               = 172
+	SYS_LGETXATTR              = 173
+	SYS_GETDENTS               = 174
+	SYS_SETSID                 = 175
+	SYS_FCHDIR                 = 176
+	SYS_FGETXATTR              = 177
+	SYS_LISTXATTR              = 178
+	SYS_LLISTXATTR             = 179
+	SYS_FLISTXATTR             = 180
+	SYS_REMOVEXATTR            = 181
+	SYS_LREMOVEXATTR           = 182
+	SYS_SIGPENDING             = 183
+	SYS_QUERY_MODULE           = 184
+	SYS_SETPGID                = 185
+	SYS_FREMOVEXATTR           = 186
+	SYS_TKILL                  = 187
+	SYS_EXIT_GROUP             = 188
+	SYS_UNAME                  = 189
+	SYS_INIT_MODULE            = 190
+	SYS_PERSONALITY            = 191
+	SYS_REMAP_FILE_PAGES       = 192
+	SYS_EPOLL_CREATE           = 193
+	SYS_EPOLL_CTL              = 194
+	SYS_EPOLL_WAIT             = 195
+	SYS_IOPRIO_SET             = 196
+	SYS_GETPPID                = 197
+	SYS_SIGACTION              = 198
+	SYS_SGETMASK               = 199
+	SYS_SSETMASK               = 200
+	SYS_SIGSUSPEND             = 201
+	SYS_OLDLSTAT               = 202
+	SYS_USELIB                 = 203
+	SYS_READDIR                = 204
+	SYS_READAHEAD              = 205
+	SYS_SOCKETCALL             = 206
+	SYS_SYSLOG                 = 207
+	SYS_LOOKUP_DCOOKIE         = 208
+	SYS_FADVISE64              = 209
+	SYS_FADVISE64_64           = 210
+	SYS_TGKILL                 = 211
+	SYS_WAITPID                = 212
+	SYS_SWAPOFF                = 213
+	SYS_SYSINFO                = 214
+	SYS_IPC                    = 215
+	SYS_SIGRETURN              = 216
+	SYS_CLONE                  = 217
+	SYS_IOPRIO_GET             = 218
+	SYS_ADJTIMEX               = 219
+	SYS_SIGPROCMASK            = 220
+	SYS_CREATE_MODULE          = 221
+	SYS_DELETE_MODULE          = 222
+	SYS_GET_KERNEL_SYMS        = 223
+	SYS_GETPGID                = 224
+	SYS_BDFLUSH                = 225
+	SYS_SYSFS                  = 226
+	SYS_AFS_SYSCALL            = 227
+	SYS_SETFSUID               = 228
+	SYS_SETFSGID               = 229
+	SYS__NEWSELECT             = 230
+	SYS_SPLICE                 = 232
+	SYS_STIME                  = 233
+	SYS_STATFS64               = 234
+	SYS_FSTATFS64              = 235
+	SYS__LLSEEK                = 236
+	SYS_MLOCK                  = 237
+	SYS_MUNLOCK                = 238
+	SYS_MLOCKALL               = 239
+	SYS_MUNLOCKALL             = 240
+	SYS_SCHED_SETPARAM         = 241
+	SYS_SCHED_GETPARAM         = 242
+	SYS_SCHED_SETSCHEDULER     = 243
+	SYS_SCHED_GETSCHEDULER     = 244
+	SYS_SCHED_YIELD            = 245
+	SYS_SCHED_GET_PRIORITY_MAX = 246
+	SYS_SCHED_GET_PRIORITY_MIN = 247
+	SYS_SCHED_RR_GET_INTERVAL  = 248
+	SYS_NANOSLEEP              = 249
+	SYS_MREMAP                 = 250
+	SYS__SYSCTL                = 251
+	SYS_GETSID                 = 252
+	SYS_FDATASYNC              = 253
+	SYS_NFSSERVCTL             = 254
+	SYS_SYNC_FILE_RANGE        = 255
+	SYS_CLOCK_SETTIME          = 256
+	SYS_CLOCK_GETTIME          = 257
+	SYS_CLOCK_GETRES           = 258
+	SYS_CLOCK_NANOSLEEP        = 259
+	SYS_SCHED_GETAFFINITY      = 260
+	SYS_SCHED_SETAFFINITY      = 261
+	SYS_TIMER_SETTIME          = 262
+	SYS_TIMER_GETTIME          = 263
+	SYS_TIMER_GETOVERRUN       = 264
+	SYS_TIMER_DELETE           = 265
+	SYS_TIMER_CREATE           = 266
+	SYS_VSERVER                = 267
+	SYS_IO_SETUP               = 268
+	SYS_IO_DESTROY             = 269
+	SYS_IO_SUBMIT              = 270
+	SYS_IO_CANCEL              = 271
+	SYS_IO_GETEVENTS           = 272
+	SYS_MQ_OPEN                = 273
+	SYS_MQ_UNLINK              = 274
+	SYS_MQ_TIMEDSEND           = 275
+	SYS_MQ_TIMEDRECEIVE        = 276
+	SYS_MQ_NOTIFY              = 277
+	SYS_MQ_GETSETATTR          = 278
+	SYS_WAITID                 = 279
+	SYS_TEE                    = 280
+	SYS_ADD_KEY                = 281
+	SYS_REQUEST_KEY            = 282
+	SYS_KEYCTL                 = 283
+	SYS_OPENAT                 = 284
+	SYS_MKDIRAT                = 285
+	SYS_MKNODAT                = 286
+	SYS_FCHOWNAT               = 287
+	SYS_FUTIMESAT              = 288
+	SYS_FSTATAT64              = 289
+	SYS_UNLINKAT               = 290
+	SYS_RENAMEAT               = 291
+	SYS_LINKAT                 = 292
+	SYS_SYMLINKAT              = 293
+	SYS_READLINKAT             = 294
+	SYS_FCHMODAT               = 295
+	SYS_FACCESSAT              = 296
+	SYS_PSELECT6               = 297
+	SYS_PPOLL                  = 298
+	SYS_UNSHARE                = 299
+	SYS_SET_ROBUST_LIST        = 300
+	SYS_GET_ROBUST_LIST        = 301
+	SYS_MIGRATE_PAGES          = 302
+	SYS_MBIND                  = 303
+	SYS_GET_MEMPOLICY          = 304
+	SYS_SET_MEMPOLICY          = 305
+	SYS_KEXEC_LOAD             = 306
+	SYS_MOVE_PAGES             = 307
+	SYS_GETCPU                 = 308
+	SYS_EPOLL_PWAIT            = 309
+	SYS_UTIMENSAT              = 310
+	SYS_SIGNALFD               = 311
+	SYS_TIMERFD_CREATE         = 312
+	SYS_EVENTFD                = 313
+	SYS_FALLOCATE              = 314
+	SYS_TIMERFD_SETTIME        = 315
+	SYS_TIMERFD_GETTIME        = 316
+	SYS_SIGNALFD4              = 317
+	SYS_EVENTFD2               = 318
+	SYS_EPOLL_CREATE1          = 319
+	SYS_DUP3                   = 320
+	SYS_PIPE2                  = 321
+	SYS_INOTIFY_INIT1          = 322
+	SYS_ACCEPT4                = 323
+	SYS_PREADV                 = 324
+	SYS_PWRITEV                = 325
+	SYS_RT_TGSIGQUEUEINFO      = 326
+	SYS_PERF_EVENT_OPEN        = 327
+	SYS_RECVMMSG               = 328
+	SYS_FANOTIFY_INIT          = 329
+	SYS_FANOTIFY_MARK          = 330
+	SYS_PRLIMIT64              = 331
+	SYS_NAME_TO_HANDLE_AT      = 332
+	SYS_OPEN_BY_HANDLE_AT      = 333
+	SYS_CLOCK_ADJTIME          = 334
+	SYS_SYNCFS                 = 335
+	SYS_SENDMMSG               = 336
+	SYS_SETNS                  = 337
+	SYS_PROCESS_VM_READV       = 338
+	SYS_PROCESS_VM_WRITEV      = 339
+	SYS_KERN_FEATURES          = 340
+	SYS_KCMP                   = 341
+	SYS_FINIT_MODULE           = 342
+	SYS_SCHED_SETATTR          = 343
+	SYS_SCHED_GETATTR          = 344
+	SYS_RENAMEAT2              = 345
+	SYS_SECCOMP                = 346
+	SYS_GETRANDOM              = 347
+	SYS_MEMFD_CREATE           = 348
+	SYS_BPF                    = 349
+	SYS_EXECVEAT               = 350
+	SYS_MEMBARRIER             = 351
+	SYS_USERFAULTFD            = 352
+	SYS_BIND                   = 353
+	SYS_LISTEN                 = 354
+	SYS_SETSOCKOPT             = 355
+	SYS_MLOCK2                 = 356
+	SYS_COPY_FILE_RANGE        = 357
+	SYS_PREADV2                = 358
+	SYS_PWRITEV2               = 359
+	SYS_STATX                  = 360
+	SYS_IO_PGETEVENTS          = 361
+	SYS_PKEY_MPROTECT          = 362
+	SYS_PKEY_ALLOC             = 363
+	SYS_PKEY_FREE              = 364
+	SYS_RSEQ                   = 365
+	SYS_SEMTIMEDOP             = 392
+	SYS_SEMGET                 = 393
+	SYS_SEMCTL                 = 394
+	SYS_SHMGET                 = 395
+	SYS_SHMCTL                 = 396
+	SYS_SHMAT                  = 397
+	SYS_SHMDT                  = 398
+	SYS_MSGGET                 = 399
+	SYS_MSGSND                 = 400
+	SYS_MSGRCV                 = 401
+	SYS_MSGCTL                 = 402
+	SYS_PIDFD_SEND_SIGNAL      = 424
+	SYS_IO_URING_SETUP         = 425
+	SYS_IO_URING_ENTER         = 426
+	SYS_IO_URING_REGISTER      = 427
+	SYS_OPEN_TREE              = 428
+	SYS_MOVE_MOUNT             = 429
+	SYS_FSOPEN                 = 430
+	SYS_FSCONFIG               = 431
+	SYS_FSMOUNT                = 432
+	SYS_FSPICK                 = 433
+	SYS_PIDFD_OPEN             = 434
+	SYS_OPENAT2                = 437
+	SYS_PIDFD_GETFD            = 438
+	SYS_FACCESSAT2             = 439
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_netbsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_netbsd_386.go
new file mode 100644
index 000000000..e66a8c9d3
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_netbsd_386.go
@@ -0,0 +1,274 @@
+// go run mksysnum.go http://cvsweb.netbsd.org/bsdweb.cgi/~checkout~/src/sys/kern/syscalls.master
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build 386,netbsd
+
+package unix
+
+const (
+	SYS_EXIT                 = 1   // { void|sys||exit(int rval); }
+	SYS_FORK                 = 2   // { int|sys||fork(void); }
+	SYS_READ                 = 3   // { ssize_t|sys||read(int fd, void *buf, size_t nbyte); }
+	SYS_WRITE                = 4   // { ssize_t|sys||write(int fd, const void *buf, size_t nbyte); }
+	SYS_OPEN                 = 5   // { int|sys||open(const char *path, int flags, ... mode_t mode); }
+	SYS_CLOSE                = 6   // { int|sys||close(int fd); }
+	SYS_LINK                 = 9   // { int|sys||link(const char *path, const char *link); }
+	SYS_UNLINK               = 10  // { int|sys||unlink(const char *path); }
+	SYS_CHDIR                = 12  // { int|sys||chdir(const char *path); }
+	SYS_FCHDIR               = 13  // { int|sys||fchdir(int fd); }
+	SYS_CHMOD                = 15  // { int|sys||chmod(const char *path, mode_t mode); }
+	SYS_CHOWN                = 16  // { int|sys||chown(const char *path, uid_t uid, gid_t gid); }
+	SYS_BREAK                = 17  // { int|sys||obreak(char *nsize); }
+	SYS_GETPID               = 20  // { pid_t|sys||getpid_with_ppid(void); }
+	SYS_UNMOUNT              = 22  // { int|sys||unmount(const char *path, int flags); }
+	SYS_SETUID               = 23  // { int|sys||setuid(uid_t uid); }
+	SYS_GETUID               = 24  // { uid_t|sys||getuid_with_euid(void); }
+	SYS_GETEUID              = 25  // { uid_t|sys||geteuid(void); }
+	SYS_PTRACE               = 26  // { int|sys||ptrace(int req, pid_t pid, void *addr, int data); }
+	SYS_RECVMSG              = 27  // { ssize_t|sys||recvmsg(int s, struct msghdr *msg, int flags); }
+	SYS_SENDMSG              = 28  // { ssize_t|sys||sendmsg(int s, const struct msghdr *msg, int flags); }
+	SYS_RECVFROM             = 29  // { ssize_t|sys||recvfrom(int s, void *buf, size_t len, int flags, struct sockaddr *from, socklen_t *fromlenaddr); }
+	SYS_ACCEPT               = 30  // { int|sys||accept(int s, struct sockaddr *name, socklen_t *anamelen); }
+	SYS_GETPEERNAME          = 31  // { int|sys||getpeername(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_GETSOCKNAME          = 32  // { int|sys||getsockname(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_ACCESS               = 33  // { int|sys||access(const char *path, int flags); }
+	SYS_CHFLAGS              = 34  // { int|sys||chflags(const char *path, u_long flags); }
+	SYS_FCHFLAGS             = 35  // { int|sys||fchflags(int fd, u_long flags); }
+	SYS_SYNC                 = 36  // { void|sys||sync(void); }
+	SYS_KILL                 = 37  // { int|sys||kill(pid_t pid, int signum); }
+	SYS_GETPPID              = 39  // { pid_t|sys||getppid(void); }
+	SYS_DUP                  = 41  // { int|sys||dup(int fd); }
+	SYS_PIPE                 = 42  // { int|sys||pipe(void); }
+	SYS_GETEGID              = 43  // { gid_t|sys||getegid(void); }
+	SYS_PROFIL               = 44  // { int|sys||profil(char *samples, size_t size, u_long offset, u_int scale); }
+	SYS_KTRACE               = 45  // { int|sys||ktrace(const char *fname, int ops, int facs, pid_t pid); }
+	SYS_GETGID               = 47  // { gid_t|sys||getgid_with_egid(void); }
+	SYS___GETLOGIN           = 49  // { int|sys||__getlogin(char *namebuf, size_t namelen); }
+	SYS___SETLOGIN           = 50  // { int|sys||__setlogin(const char *namebuf); }
+	SYS_ACCT                 = 51  // { int|sys||acct(const char *path); }
+	SYS_IOCTL                = 54  // { int|sys||ioctl(int fd, u_long com, ... void *data); }
+	SYS_REVOKE               = 56  // { int|sys||revoke(const char *path); }
+	SYS_SYMLINK              = 57  // { int|sys||symlink(const char *path, const char *link); }
+	SYS_READLINK             = 58  // { ssize_t|sys||readlink(const char *path, char *buf, size_t count); }
+	SYS_EXECVE               = 59  // { int|sys||execve(const char *path, char * const *argp, char * const *envp); }
+	SYS_UMASK                = 60  // { mode_t|sys||umask(mode_t newmask); }
+	SYS_CHROOT               = 61  // { int|sys||chroot(const char *path); }
+	SYS_VFORK                = 66  // { int|sys||vfork(void); }
+	SYS_SBRK                 = 69  // { int|sys||sbrk(intptr_t incr); }
+	SYS_SSTK                 = 70  // { int|sys||sstk(int incr); }
+	SYS_VADVISE              = 72  // { int|sys||ovadvise(int anom); }
+	SYS_MUNMAP               = 73  // { int|sys||munmap(void *addr, size_t len); }
+	SYS_MPROTECT             = 74  // { int|sys||mprotect(void *addr, size_t len, int prot); }
+	SYS_MADVISE              = 75  // { int|sys||madvise(void *addr, size_t len, int behav); }
+	SYS_MINCORE              = 78  // { int|sys||mincore(void *addr, size_t len, char *vec); }
+	SYS_GETGROUPS            = 79  // { int|sys||getgroups(int gidsetsize, gid_t *gidset); }
+	SYS_SETGROUPS            = 80  // { int|sys||setgroups(int gidsetsize, const gid_t *gidset); }
+	SYS_GETPGRP              = 81  // { int|sys||getpgrp(void); }
+	SYS_SETPGID              = 82  // { int|sys||setpgid(pid_t pid, pid_t pgid); }
+	SYS_DUP2                 = 90  // { int|sys||dup2(int from, int to); }
+	SYS_FCNTL                = 92  // { int|sys||fcntl(int fd, int cmd, ... void *arg); }
+	SYS_FSYNC                = 95  // { int|sys||fsync(int fd); }
+	SYS_SETPRIORITY          = 96  // { int|sys||setpriority(int which, id_t who, int prio); }
+	SYS_CONNECT              = 98  // { int|sys||connect(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_GETPRIORITY          = 100 // { int|sys||getpriority(int which, id_t who); }
+	SYS_BIND                 = 104 // { int|sys||bind(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_SETSOCKOPT           = 105 // { int|sys||setsockopt(int s, int level, int name, const void *val, socklen_t valsize); }
+	SYS_LISTEN               = 106 // { int|sys||listen(int s, int backlog); }
+	SYS_GETSOCKOPT           = 118 // { int|sys||getsockopt(int s, int level, int name, void *val, socklen_t *avalsize); }
+	SYS_READV                = 120 // { ssize_t|sys||readv(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_WRITEV               = 121 // { ssize_t|sys||writev(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_FCHOWN               = 123 // { int|sys||fchown(int fd, uid_t uid, gid_t gid); }
+	SYS_FCHMOD               = 124 // { int|sys||fchmod(int fd, mode_t mode); }
+	SYS_SETREUID             = 126 // { int|sys||setreuid(uid_t ruid, uid_t euid); }
+	SYS_SETREGID             = 127 // { int|sys||setregid(gid_t rgid, gid_t egid); }
+	SYS_RENAME               = 128 // { int|sys||rename(const char *from, const char *to); }
+	SYS_FLOCK                = 131 // { int|sys||flock(int fd, int how); }
+	SYS_MKFIFO               = 132 // { int|sys||mkfifo(const char *path, mode_t mode); }
+	SYS_SENDTO               = 133 // { ssize_t|sys||sendto(int s, const void *buf, size_t len, int flags, const struct sockaddr *to, socklen_t tolen); }
+	SYS_SHUTDOWN             = 134 // { int|sys||shutdown(int s, int how); }
+	SYS_SOCKETPAIR           = 135 // { int|sys||socketpair(int domain, int type, int protocol, int *rsv); }
+	SYS_MKDIR                = 136 // { int|sys||mkdir(const char *path, mode_t mode); }
+	SYS_RMDIR                = 137 // { int|sys||rmdir(const char *path); }
+	SYS_SETSID               = 147 // { int|sys||setsid(void); }
+	SYS_SYSARCH              = 165 // { int|sys||sysarch(int op, void *parms); }
+	SYS_PREAD                = 173 // { ssize_t|sys||pread(int fd, void *buf, size_t nbyte, int PAD, off_t offset); }
+	SYS_PWRITE               = 174 // { ssize_t|sys||pwrite(int fd, const void *buf, size_t nbyte, int PAD, off_t offset); }
+	SYS_NTP_ADJTIME          = 176 // { int|sys||ntp_adjtime(struct timex *tp); }
+	SYS_SETGID               = 181 // { int|sys||setgid(gid_t gid); }
+	SYS_SETEGID              = 182 // { int|sys||setegid(gid_t egid); }
+	SYS_SETEUID              = 183 // { int|sys||seteuid(uid_t euid); }
+	SYS_PATHCONF             = 191 // { long|sys||pathconf(const char *path, int name); }
+	SYS_FPATHCONF            = 192 // { long|sys||fpathconf(int fd, int name); }
+	SYS_GETRLIMIT            = 194 // { int|sys||getrlimit(int which, struct rlimit *rlp); }
+	SYS_SETRLIMIT            = 195 // { int|sys||setrlimit(int which, const struct rlimit *rlp); }
+	SYS_MMAP                 = 197 // { void *|sys||mmap(void *addr, size_t len, int prot, int flags, int fd, long PAD, off_t pos); }
+	SYS_LSEEK                = 199 // { off_t|sys||lseek(int fd, int PAD, off_t offset, int whence); }
+	SYS_TRUNCATE             = 200 // { int|sys||truncate(const char *path, int PAD, off_t length); }
+	SYS_FTRUNCATE            = 201 // { int|sys||ftruncate(int fd, int PAD, off_t length); }
+	SYS___SYSCTL             = 202 // { int|sys||__sysctl(const int *name, u_int namelen, void *old, size_t *oldlenp, const void *new, size_t newlen); }
+	SYS_MLOCK                = 203 // { int|sys||mlock(const void *addr, size_t len); }
+	SYS_MUNLOCK              = 204 // { int|sys||munlock(const void *addr, size_t len); }
+	SYS_UNDELETE             = 205 // { int|sys||undelete(const char *path); }
+	SYS_GETPGID              = 207 // { pid_t|sys||getpgid(pid_t pid); }
+	SYS_REBOOT               = 208 // { int|sys||reboot(int opt, char *bootstr); }
+	SYS_POLL                 = 209 // { int|sys||poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_SEMGET               = 221 // { int|sys||semget(key_t key, int nsems, int semflg); }
+	SYS_SEMOP                = 222 // { int|sys||semop(int semid, struct sembuf *sops, size_t nsops); }
+	SYS_SEMCONFIG            = 223 // { int|sys||semconfig(int flag); }
+	SYS_MSGGET               = 225 // { int|sys||msgget(key_t key, int msgflg); }
+	SYS_MSGSND               = 226 // { int|sys||msgsnd(int msqid, const void *msgp, size_t msgsz, int msgflg); }
+	SYS_MSGRCV               = 227 // { ssize_t|sys||msgrcv(int msqid, void *msgp, size_t msgsz, long msgtyp, int msgflg); }
+	SYS_SHMAT                = 228 // { void *|sys||shmat(int shmid, const void *shmaddr, int shmflg); }
+	SYS_SHMDT                = 230 // { int|sys||shmdt(const void *shmaddr); }
+	SYS_SHMGET               = 231 // { int|sys||shmget(key_t key, size_t size, int shmflg); }
+	SYS_TIMER_CREATE         = 235 // { int|sys||timer_create(clockid_t clock_id, struct sigevent *evp, timer_t *timerid); }
+	SYS_TIMER_DELETE         = 236 // { int|sys||timer_delete(timer_t timerid); }
+	SYS_TIMER_GETOVERRUN     = 239 // { int|sys||timer_getoverrun(timer_t timerid); }
+	SYS_FDATASYNC            = 241 // { int|sys||fdatasync(int fd); }
+	SYS_MLOCKALL             = 242 // { int|sys||mlockall(int flags); }
+	SYS_MUNLOCKALL           = 243 // { int|sys||munlockall(void); }
+	SYS_SIGQUEUEINFO         = 245 // { int|sys||sigqueueinfo(pid_t pid, const siginfo_t *info); }
+	SYS_MODCTL               = 246 // { int|sys||modctl(int cmd, void *arg); }
+	SYS___POSIX_RENAME       = 270 // { int|sys||__posix_rename(const char *from, const char *to); }
+	SYS_SWAPCTL              = 271 // { int|sys||swapctl(int cmd, void *arg, int misc); }
+	SYS_MINHERIT             = 273 // { int|sys||minherit(void *addr, size_t len, int inherit); }
+	SYS_LCHMOD               = 274 // { int|sys||lchmod(const char *path, mode_t mode); }
+	SYS_LCHOWN               = 275 // { int|sys||lchown(const char *path, uid_t uid, gid_t gid); }
+	SYS_MSYNC                = 277 // { int|sys|13|msync(void *addr, size_t len, int flags); }
+	SYS___POSIX_CHOWN        = 283 // { int|sys||__posix_chown(const char *path, uid_t uid, gid_t gid); }
+	SYS___POSIX_FCHOWN       = 284 // { int|sys||__posix_fchown(int fd, uid_t uid, gid_t gid); }
+	SYS___POSIX_LCHOWN       = 285 // { int|sys||__posix_lchown(const char *path, uid_t uid, gid_t gid); }
+	SYS_GETSID               = 286 // { pid_t|sys||getsid(pid_t pid); }
+	SYS___CLONE              = 287 // { pid_t|sys||__clone(int flags, void *stack); }
+	SYS_FKTRACE              = 288 // { int|sys||fktrace(int fd, int ops, int facs, pid_t pid); }
+	SYS_PREADV               = 289 // { ssize_t|sys||preadv(int fd, const struct iovec *iovp, int iovcnt, int PAD, off_t offset); }
+	SYS_PWRITEV              = 290 // { ssize_t|sys||pwritev(int fd, const struct iovec *iovp, int iovcnt, int PAD, off_t offset); }
+	SYS___GETCWD             = 296 // { int|sys||__getcwd(char *bufp, size_t length); }
+	SYS_FCHROOT              = 297 // { int|sys||fchroot(int fd); }
+	SYS_LCHFLAGS             = 304 // { int|sys||lchflags(const char *path, u_long flags); }
+	SYS_ISSETUGID            = 305 // { int|sys||issetugid(void); }
+	SYS_UTRACE               = 306 // { int|sys||utrace(const char *label, void *addr, size_t len); }
+	SYS_GETCONTEXT           = 307 // { int|sys||getcontext(struct __ucontext *ucp); }
+	SYS_SETCONTEXT           = 308 // { int|sys||setcontext(const struct __ucontext *ucp); }
+	SYS__LWP_CREATE          = 309 // { int|sys||_lwp_create(const struct __ucontext *ucp, u_long flags, lwpid_t *new_lwp); }
+	SYS__LWP_EXIT            = 310 // { int|sys||_lwp_exit(void); }
+	SYS__LWP_SELF            = 311 // { lwpid_t|sys||_lwp_self(void); }
+	SYS__LWP_WAIT            = 312 // { int|sys||_lwp_wait(lwpid_t wait_for, lwpid_t *departed); }
+	SYS__LWP_SUSPEND         = 313 // { int|sys||_lwp_suspend(lwpid_t target); }
+	SYS__LWP_CONTINUE        = 314 // { int|sys||_lwp_continue(lwpid_t target); }
+	SYS__LWP_WAKEUP          = 315 // { int|sys||_lwp_wakeup(lwpid_t target); }
+	SYS__LWP_GETPRIVATE      = 316 // { void *|sys||_lwp_getprivate(void); }
+	SYS__LWP_SETPRIVATE      = 317 // { void|sys||_lwp_setprivate(void *ptr); }
+	SYS__LWP_KILL            = 318 // { int|sys||_lwp_kill(lwpid_t target, int signo); }
+	SYS__LWP_DETACH          = 319 // { int|sys||_lwp_detach(lwpid_t target); }
+	SYS__LWP_UNPARK          = 321 // { int|sys||_lwp_unpark(lwpid_t target, const void *hint); }
+	SYS__LWP_UNPARK_ALL      = 322 // { ssize_t|sys||_lwp_unpark_all(const lwpid_t *targets, size_t ntargets, const void *hint); }
+	SYS__LWP_SETNAME         = 323 // { int|sys||_lwp_setname(lwpid_t target, const char *name); }
+	SYS__LWP_GETNAME         = 324 // { int|sys||_lwp_getname(lwpid_t target, char *name, size_t len); }
+	SYS__LWP_CTL             = 325 // { int|sys||_lwp_ctl(int features, struct lwpctl **address); }
+	SYS___SIGACTION_SIGTRAMP = 340 // { int|sys||__sigaction_sigtramp(int signum, const struct sigaction *nsa, struct sigaction *osa, const void *tramp, int vers); }
+	SYS_PMC_GET_INFO         = 341 // { int|sys||pmc_get_info(int ctr, int op, void *args); }
+	SYS_PMC_CONTROL          = 342 // { int|sys||pmc_control(int ctr, int op, void *args); }
+	SYS_RASCTL               = 343 // { int|sys||rasctl(void *addr, size_t len, int op); }
+	SYS_KQUEUE               = 344 // { int|sys||kqueue(void); }
+	SYS__SCHED_SETPARAM      = 346 // { int|sys||_sched_setparam(pid_t pid, lwpid_t lid, int policy, const struct sched_param *params); }
+	SYS__SCHED_GETPARAM      = 347 // { int|sys||_sched_getparam(pid_t pid, lwpid_t lid, int *policy, struct sched_param *params); }
+	SYS__SCHED_SETAFFINITY   = 348 // { int|sys||_sched_setaffinity(pid_t pid, lwpid_t lid, size_t size, const cpuset_t *cpuset); }
+	SYS__SCHED_GETAFFINITY   = 349 // { int|sys||_sched_getaffinity(pid_t pid, lwpid_t lid, size_t size, cpuset_t *cpuset); }
+	SYS_SCHED_YIELD          = 350 // { int|sys||sched_yield(void); }
+	SYS_FSYNC_RANGE          = 354 // { int|sys||fsync_range(int fd, int flags, off_t start, off_t length); }
+	SYS_UUIDGEN              = 355 // { int|sys||uuidgen(struct uuid *store, int count); }
+	SYS_GETVFSSTAT           = 356 // { int|sys||getvfsstat(struct statvfs *buf, size_t bufsize, int flags); }
+	SYS_STATVFS1             = 357 // { int|sys||statvfs1(const char *path, struct statvfs *buf, int flags); }
+	SYS_FSTATVFS1            = 358 // { int|sys||fstatvfs1(int fd, struct statvfs *buf, int flags); }
+	SYS_EXTATTRCTL           = 360 // { int|sys||extattrctl(const char *path, int cmd, const char *filename, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_FILE     = 361 // { int|sys||extattr_set_file(const char *path, int attrnamespace, const char *attrname, const void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FILE     = 362 // { ssize_t|sys||extattr_get_file(const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FILE  = 363 // { int|sys||extattr_delete_file(const char *path, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_FD       = 364 // { int|sys||extattr_set_fd(int fd, int attrnamespace, const char *attrname, const void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FD       = 365 // { ssize_t|sys||extattr_get_fd(int fd, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FD    = 366 // { int|sys||extattr_delete_fd(int fd, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_LINK     = 367 // { int|sys||extattr_set_link(const char *path, int attrnamespace, const char *attrname, const void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_LINK     = 368 // { ssize_t|sys||extattr_get_link(const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_LINK  = 369 // { int|sys||extattr_delete_link(const char *path, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_LIST_FD      = 370 // { ssize_t|sys||extattr_list_fd(int fd, int attrnamespace, void *data, size_t nbytes); }
+	SYS_EXTATTR_LIST_FILE    = 371 // { ssize_t|sys||extattr_list_file(const char *path, int attrnamespace, void *data, size_t nbytes); }
+	SYS_EXTATTR_LIST_LINK    = 372 // { ssize_t|sys||extattr_list_link(const char *path, int attrnamespace, void *data, size_t nbytes); }
+	SYS_SETXATTR             = 375 // { int|sys||setxattr(const char *path, const char *name, const void *value, size_t size, int flags); }
+	SYS_LSETXATTR            = 376 // { int|sys||lsetxattr(const char *path, const char *name, const void *value, size_t size, int flags); }
+	SYS_FSETXATTR            = 377 // { int|sys||fsetxattr(int fd, const char *name, const void *value, size_t size, int flags); }
+	SYS_GETXATTR             = 378 // { int|sys||getxattr(const char *path, const char *name, void *value, size_t size); }
+	SYS_LGETXATTR            = 379 // { int|sys||lgetxattr(const char *path, const char *name, void *value, size_t size); }
+	SYS_FGETXATTR            = 380 // { int|sys||fgetxattr(int fd, const char *name, void *value, size_t size); }
+	SYS_LISTXATTR            = 381 // { int|sys||listxattr(const char *path, char *list, size_t size); }
+	SYS_LLISTXATTR           = 382 // { int|sys||llistxattr(const char *path, char *list, size_t size); }
+	SYS_FLISTXATTR           = 383 // { int|sys||flistxattr(int fd, char *list, size_t size); }
+	SYS_REMOVEXATTR          = 384 // { int|sys||removexattr(const char *path, const char *name); }
+	SYS_LREMOVEXATTR         = 385 // { int|sys||lremovexattr(const char *path, const char *name); }
+	SYS_FREMOVEXATTR         = 386 // { int|sys||fremovexattr(int fd, const char *name); }
+	SYS_GETDENTS             = 390 // { int|sys|30|getdents(int fd, char *buf, size_t count); }
+	SYS_SOCKET               = 394 // { int|sys|30|socket(int domain, int type, int protocol); }
+	SYS_GETFH                = 395 // { int|sys|30|getfh(const char *fname, void *fhp, size_t *fh_size); }
+	SYS_MOUNT                = 410 // { int|sys|50|mount(const char *type, const char *path, int flags, void *data, size_t data_len); }
+	SYS_MREMAP               = 411 // { void *|sys||mremap(void *old_address, size_t old_size, void *new_address, size_t new_size, int flags); }
+	SYS_PSET_CREATE          = 412 // { int|sys||pset_create(psetid_t *psid); }
+	SYS_PSET_DESTROY         = 413 // { int|sys||pset_destroy(psetid_t psid); }
+	SYS_PSET_ASSIGN          = 414 // { int|sys||pset_assign(psetid_t psid, cpuid_t cpuid, psetid_t *opsid); }
+	SYS__PSET_BIND           = 415 // { int|sys||_pset_bind(idtype_t idtype, id_t first_id, id_t second_id, psetid_t psid, psetid_t *opsid); }
+	SYS_POSIX_FADVISE        = 416 // { int|sys|50|posix_fadvise(int fd, int PAD, off_t offset, off_t len, int advice); }
+	SYS_SELECT               = 417 // { int|sys|50|select(int nd, fd_set *in, fd_set *ou, fd_set *ex, struct timeval *tv); }
+	SYS_GETTIMEOFDAY         = 418 // { int|sys|50|gettimeofday(struct timeval *tp, void *tzp); }
+	SYS_SETTIMEOFDAY         = 419 // { int|sys|50|settimeofday(const struct timeval *tv, const void *tzp); }
+	SYS_UTIMES               = 420 // { int|sys|50|utimes(const char *path, const struct timeval *tptr); }
+	SYS_ADJTIME              = 421 // { int|sys|50|adjtime(const struct timeval *delta, struct timeval *olddelta); }
+	SYS_FUTIMES              = 423 // { int|sys|50|futimes(int fd, const struct timeval *tptr); }
+	SYS_LUTIMES              = 424 // { int|sys|50|lutimes(const char *path, const struct timeval *tptr); }
+	SYS_SETITIMER            = 425 // { int|sys|50|setitimer(int which, const struct itimerval *itv, struct itimerval *oitv); }
+	SYS_GETITIMER            = 426 // { int|sys|50|getitimer(int which, struct itimerval *itv); }
+	SYS_CLOCK_GETTIME        = 427 // { int|sys|50|clock_gettime(clockid_t clock_id, struct timespec *tp); }
+	SYS_CLOCK_SETTIME        = 428 // { int|sys|50|clock_settime(clockid_t clock_id, const struct timespec *tp); }
+	SYS_CLOCK_GETRES         = 429 // { int|sys|50|clock_getres(clockid_t clock_id, struct timespec *tp); }
+	SYS_NANOSLEEP            = 430 // { int|sys|50|nanosleep(const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS___SIGTIMEDWAIT       = 431 // { int|sys|50|__sigtimedwait(const sigset_t *set, siginfo_t *info, struct timespec *timeout); }
+	SYS__LWP_PARK            = 434 // { int|sys|50|_lwp_park(const struct timespec *ts, lwpid_t unpark, const void *hint, const void *unparkhint); }
+	SYS_KEVENT               = 435 // { int|sys|50|kevent(int fd, const struct kevent *changelist, size_t nchanges, struct kevent *eventlist, size_t nevents, const struct timespec *timeout); }
+	SYS_PSELECT              = 436 // { int|sys|50|pselect(int nd, fd_set *in, fd_set *ou, fd_set *ex, const struct timespec *ts, const sigset_t *mask); }
+	SYS_POLLTS               = 437 // { int|sys|50|pollts(struct pollfd *fds, u_int nfds, const struct timespec *ts, const sigset_t *mask); }
+	SYS_STAT                 = 439 // { int|sys|50|stat(const char *path, struct stat *ub); }
+	SYS_FSTAT                = 440 // { int|sys|50|fstat(int fd, struct stat *sb); }
+	SYS_LSTAT                = 441 // { int|sys|50|lstat(const char *path, struct stat *ub); }
+	SYS___SEMCTL             = 442 // { int|sys|50|__semctl(int semid, int semnum, int cmd, ... union __semun *arg); }
+	SYS_SHMCTL               = 443 // { int|sys|50|shmctl(int shmid, int cmd, struct shmid_ds *buf); }
+	SYS_MSGCTL               = 444 // { int|sys|50|msgctl(int msqid, int cmd, struct msqid_ds *buf); }
+	SYS_GETRUSAGE            = 445 // { int|sys|50|getrusage(int who, struct rusage *rusage); }
+	SYS_TIMER_SETTIME        = 446 // { int|sys|50|timer_settime(timer_t timerid, int flags, const struct itimerspec *value, struct itimerspec *ovalue); }
+	SYS_TIMER_GETTIME        = 447 // { int|sys|50|timer_gettime(timer_t timerid, struct itimerspec *value); }
+	SYS_NTP_GETTIME          = 448 // { int|sys|50|ntp_gettime(struct ntptimeval *ntvp); }
+	SYS_WAIT4                = 449 // { int|sys|50|wait4(pid_t pid, int *status, int options, struct rusage *rusage); }
+	SYS_MKNOD                = 450 // { int|sys|50|mknod(const char *path, mode_t mode, dev_t dev); }
+	SYS_FHSTAT               = 451 // { int|sys|50|fhstat(const void *fhp, size_t fh_size, struct stat *sb); }
+	SYS_PIPE2                = 453 // { int|sys||pipe2(int *fildes, int flags); }
+	SYS_DUP3                 = 454 // { int|sys||dup3(int from, int to, int flags); }
+	SYS_KQUEUE1              = 455 // { int|sys||kqueue1(int flags); }
+	SYS_PACCEPT              = 456 // { int|sys||paccept(int s, struct sockaddr *name, socklen_t *anamelen, const sigset_t *mask, int flags); }
+	SYS_LINKAT               = 457 // { int|sys||linkat(int fd1, const char *name1, int fd2, const char *name2, int flags); }
+	SYS_RENAMEAT             = 458 // { int|sys||renameat(int fromfd, const char *from, int tofd, const char *to); }
+	SYS_MKFIFOAT             = 459 // { int|sys||mkfifoat(int fd, const char *path, mode_t mode); }
+	SYS_MKNODAT              = 460 // { int|sys||mknodat(int fd, const char *path, mode_t mode, uint32_t dev); }
+	SYS_MKDIRAT              = 461 // { int|sys||mkdirat(int fd, const char *path, mode_t mode); }
+	SYS_FACCESSAT            = 462 // { int|sys||faccessat(int fd, const char *path, int amode, int flag); }
+	SYS_FCHMODAT             = 463 // { int|sys||fchmodat(int fd, const char *path, mode_t mode, int flag); }
+	SYS_FCHOWNAT             = 464 // { int|sys||fchownat(int fd, const char *path, uid_t owner, gid_t group, int flag); }
+	SYS_FEXECVE              = 465 // { int|sys||fexecve(int fd, char * const *argp, char * const *envp); }
+	SYS_FSTATAT              = 466 // { int|sys||fstatat(int fd, const char *path, struct stat *buf, int flag); }
+	SYS_UTIMENSAT            = 467 // { int|sys||utimensat(int fd, const char *path, const struct timespec *tptr, int flag); }
+	SYS_OPENAT               = 468 // { int|sys||openat(int fd, const char *path, int oflags, ... mode_t mode); }
+	SYS_READLINKAT           = 469 // { int|sys||readlinkat(int fd, const char *path, char *buf, size_t bufsize); }
+	SYS_SYMLINKAT            = 470 // { int|sys||symlinkat(const char *path1, int fd, const char *path2); }
+	SYS_UNLINKAT             = 471 // { int|sys||unlinkat(int fd, const char *path, int flag); }
+	SYS_FUTIMENS             = 472 // { int|sys||futimens(int fd, const struct timespec *tptr); }
+	SYS___QUOTACTL           = 473 // { int|sys||__quotactl(const char *path, struct quotactl_args *args); }
+	SYS_POSIX_SPAWN          = 474 // { int|sys||posix_spawn(pid_t *pid, const char *path, const struct posix_spawn_file_actions *file_actions, const struct posix_spawnattr *attrp, char *const *argv, char *const *envp); }
+	SYS_RECVMMSG             = 475 // { int|sys||recvmmsg(int s, struct mmsghdr *mmsg, unsigned int vlen, unsigned int flags, struct timespec *timeout); }
+	SYS_SENDMMSG             = 476 // { int|sys||sendmmsg(int s, struct mmsghdr *mmsg, unsigned int vlen, unsigned int flags); }
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_netbsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_netbsd_amd64.go
new file mode 100644
index 000000000..42c788f24
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_netbsd_amd64.go
@@ -0,0 +1,274 @@
+// go run mksysnum.go http://cvsweb.netbsd.org/bsdweb.cgi/~checkout~/src/sys/kern/syscalls.master
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,netbsd
+
+package unix
+
+const (
+	SYS_EXIT                 = 1   // { void|sys||exit(int rval); }
+	SYS_FORK                 = 2   // { int|sys||fork(void); }
+	SYS_READ                 = 3   // { ssize_t|sys||read(int fd, void *buf, size_t nbyte); }
+	SYS_WRITE                = 4   // { ssize_t|sys||write(int fd, const void *buf, size_t nbyte); }
+	SYS_OPEN                 = 5   // { int|sys||open(const char *path, int flags, ... mode_t mode); }
+	SYS_CLOSE                = 6   // { int|sys||close(int fd); }
+	SYS_LINK                 = 9   // { int|sys||link(const char *path, const char *link); }
+	SYS_UNLINK               = 10  // { int|sys||unlink(const char *path); }
+	SYS_CHDIR                = 12  // { int|sys||chdir(const char *path); }
+	SYS_FCHDIR               = 13  // { int|sys||fchdir(int fd); }
+	SYS_CHMOD                = 15  // { int|sys||chmod(const char *path, mode_t mode); }
+	SYS_CHOWN                = 16  // { int|sys||chown(const char *path, uid_t uid, gid_t gid); }
+	SYS_BREAK                = 17  // { int|sys||obreak(char *nsize); }
+	SYS_GETPID               = 20  // { pid_t|sys||getpid_with_ppid(void); }
+	SYS_UNMOUNT              = 22  // { int|sys||unmount(const char *path, int flags); }
+	SYS_SETUID               = 23  // { int|sys||setuid(uid_t uid); }
+	SYS_GETUID               = 24  // { uid_t|sys||getuid_with_euid(void); }
+	SYS_GETEUID              = 25  // { uid_t|sys||geteuid(void); }
+	SYS_PTRACE               = 26  // { int|sys||ptrace(int req, pid_t pid, void *addr, int data); }
+	SYS_RECVMSG              = 27  // { ssize_t|sys||recvmsg(int s, struct msghdr *msg, int flags); }
+	SYS_SENDMSG              = 28  // { ssize_t|sys||sendmsg(int s, const struct msghdr *msg, int flags); }
+	SYS_RECVFROM             = 29  // { ssize_t|sys||recvfrom(int s, void *buf, size_t len, int flags, struct sockaddr *from, socklen_t *fromlenaddr); }
+	SYS_ACCEPT               = 30  // { int|sys||accept(int s, struct sockaddr *name, socklen_t *anamelen); }
+	SYS_GETPEERNAME          = 31  // { int|sys||getpeername(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_GETSOCKNAME          = 32  // { int|sys||getsockname(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_ACCESS               = 33  // { int|sys||access(const char *path, int flags); }
+	SYS_CHFLAGS              = 34  // { int|sys||chflags(const char *path, u_long flags); }
+	SYS_FCHFLAGS             = 35  // { int|sys||fchflags(int fd, u_long flags); }
+	SYS_SYNC                 = 36  // { void|sys||sync(void); }
+	SYS_KILL                 = 37  // { int|sys||kill(pid_t pid, int signum); }
+	SYS_GETPPID              = 39  // { pid_t|sys||getppid(void); }
+	SYS_DUP                  = 41  // { int|sys||dup(int fd); }
+	SYS_PIPE                 = 42  // { int|sys||pipe(void); }
+	SYS_GETEGID              = 43  // { gid_t|sys||getegid(void); }
+	SYS_PROFIL               = 44  // { int|sys||profil(char *samples, size_t size, u_long offset, u_int scale); }
+	SYS_KTRACE               = 45  // { int|sys||ktrace(const char *fname, int ops, int facs, pid_t pid); }
+	SYS_GETGID               = 47  // { gid_t|sys||getgid_with_egid(void); }
+	SYS___GETLOGIN           = 49  // { int|sys||__getlogin(char *namebuf, size_t namelen); }
+	SYS___SETLOGIN           = 50  // { int|sys||__setlogin(const char *namebuf); }
+	SYS_ACCT                 = 51  // { int|sys||acct(const char *path); }
+	SYS_IOCTL                = 54  // { int|sys||ioctl(int fd, u_long com, ... void *data); }
+	SYS_REVOKE               = 56  // { int|sys||revoke(const char *path); }
+	SYS_SYMLINK              = 57  // { int|sys||symlink(const char *path, const char *link); }
+	SYS_READLINK             = 58  // { ssize_t|sys||readlink(const char *path, char *buf, size_t count); }
+	SYS_EXECVE               = 59  // { int|sys||execve(const char *path, char * const *argp, char * const *envp); }
+	SYS_UMASK                = 60  // { mode_t|sys||umask(mode_t newmask); }
+	SYS_CHROOT               = 61  // { int|sys||chroot(const char *path); }
+	SYS_VFORK                = 66  // { int|sys||vfork(void); }
+	SYS_SBRK                 = 69  // { int|sys||sbrk(intptr_t incr); }
+	SYS_SSTK                 = 70  // { int|sys||sstk(int incr); }
+	SYS_VADVISE              = 72  // { int|sys||ovadvise(int anom); }
+	SYS_MUNMAP               = 73  // { int|sys||munmap(void *addr, size_t len); }
+	SYS_MPROTECT             = 74  // { int|sys||mprotect(void *addr, size_t len, int prot); }
+	SYS_MADVISE              = 75  // { int|sys||madvise(void *addr, size_t len, int behav); }
+	SYS_MINCORE              = 78  // { int|sys||mincore(void *addr, size_t len, char *vec); }
+	SYS_GETGROUPS            = 79  // { int|sys||getgroups(int gidsetsize, gid_t *gidset); }
+	SYS_SETGROUPS            = 80  // { int|sys||setgroups(int gidsetsize, const gid_t *gidset); }
+	SYS_GETPGRP              = 81  // { int|sys||getpgrp(void); }
+	SYS_SETPGID              = 82  // { int|sys||setpgid(pid_t pid, pid_t pgid); }
+	SYS_DUP2                 = 90  // { int|sys||dup2(int from, int to); }
+	SYS_FCNTL                = 92  // { int|sys||fcntl(int fd, int cmd, ... void *arg); }
+	SYS_FSYNC                = 95  // { int|sys||fsync(int fd); }
+	SYS_SETPRIORITY          = 96  // { int|sys||setpriority(int which, id_t who, int prio); }
+	SYS_CONNECT              = 98  // { int|sys||connect(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_GETPRIORITY          = 100 // { int|sys||getpriority(int which, id_t who); }
+	SYS_BIND                 = 104 // { int|sys||bind(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_SETSOCKOPT           = 105 // { int|sys||setsockopt(int s, int level, int name, const void *val, socklen_t valsize); }
+	SYS_LISTEN               = 106 // { int|sys||listen(int s, int backlog); }
+	SYS_GETSOCKOPT           = 118 // { int|sys||getsockopt(int s, int level, int name, void *val, socklen_t *avalsize); }
+	SYS_READV                = 120 // { ssize_t|sys||readv(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_WRITEV               = 121 // { ssize_t|sys||writev(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_FCHOWN               = 123 // { int|sys||fchown(int fd, uid_t uid, gid_t gid); }
+	SYS_FCHMOD               = 124 // { int|sys||fchmod(int fd, mode_t mode); }
+	SYS_SETREUID             = 126 // { int|sys||setreuid(uid_t ruid, uid_t euid); }
+	SYS_SETREGID             = 127 // { int|sys||setregid(gid_t rgid, gid_t egid); }
+	SYS_RENAME               = 128 // { int|sys||rename(const char *from, const char *to); }
+	SYS_FLOCK                = 131 // { int|sys||flock(int fd, int how); }
+	SYS_MKFIFO               = 132 // { int|sys||mkfifo(const char *path, mode_t mode); }
+	SYS_SENDTO               = 133 // { ssize_t|sys||sendto(int s, const void *buf, size_t len, int flags, const struct sockaddr *to, socklen_t tolen); }
+	SYS_SHUTDOWN             = 134 // { int|sys||shutdown(int s, int how); }
+	SYS_SOCKETPAIR           = 135 // { int|sys||socketpair(int domain, int type, int protocol, int *rsv); }
+	SYS_MKDIR                = 136 // { int|sys||mkdir(const char *path, mode_t mode); }
+	SYS_RMDIR                = 137 // { int|sys||rmdir(const char *path); }
+	SYS_SETSID               = 147 // { int|sys||setsid(void); }
+	SYS_SYSARCH              = 165 // { int|sys||sysarch(int op, void *parms); }
+	SYS_PREAD                = 173 // { ssize_t|sys||pread(int fd, void *buf, size_t nbyte, int PAD, off_t offset); }
+	SYS_PWRITE               = 174 // { ssize_t|sys||pwrite(int fd, const void *buf, size_t nbyte, int PAD, off_t offset); }
+	SYS_NTP_ADJTIME          = 176 // { int|sys||ntp_adjtime(struct timex *tp); }
+	SYS_SETGID               = 181 // { int|sys||setgid(gid_t gid); }
+	SYS_SETEGID              = 182 // { int|sys||setegid(gid_t egid); }
+	SYS_SETEUID              = 183 // { int|sys||seteuid(uid_t euid); }
+	SYS_PATHCONF             = 191 // { long|sys||pathconf(const char *path, int name); }
+	SYS_FPATHCONF            = 192 // { long|sys||fpathconf(int fd, int name); }
+	SYS_GETRLIMIT            = 194 // { int|sys||getrlimit(int which, struct rlimit *rlp); }
+	SYS_SETRLIMIT            = 195 // { int|sys||setrlimit(int which, const struct rlimit *rlp); }
+	SYS_MMAP                 = 197 // { void *|sys||mmap(void *addr, size_t len, int prot, int flags, int fd, long PAD, off_t pos); }
+	SYS_LSEEK                = 199 // { off_t|sys||lseek(int fd, int PAD, off_t offset, int whence); }
+	SYS_TRUNCATE             = 200 // { int|sys||truncate(const char *path, int PAD, off_t length); }
+	SYS_FTRUNCATE            = 201 // { int|sys||ftruncate(int fd, int PAD, off_t length); }
+	SYS___SYSCTL             = 202 // { int|sys||__sysctl(const int *name, u_int namelen, void *old, size_t *oldlenp, const void *new, size_t newlen); }
+	SYS_MLOCK                = 203 // { int|sys||mlock(const void *addr, size_t len); }
+	SYS_MUNLOCK              = 204 // { int|sys||munlock(const void *addr, size_t len); }
+	SYS_UNDELETE             = 205 // { int|sys||undelete(const char *path); }
+	SYS_GETPGID              = 207 // { pid_t|sys||getpgid(pid_t pid); }
+	SYS_REBOOT               = 208 // { int|sys||reboot(int opt, char *bootstr); }
+	SYS_POLL                 = 209 // { int|sys||poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_SEMGET               = 221 // { int|sys||semget(key_t key, int nsems, int semflg); }
+	SYS_SEMOP                = 222 // { int|sys||semop(int semid, struct sembuf *sops, size_t nsops); }
+	SYS_SEMCONFIG            = 223 // { int|sys||semconfig(int flag); }
+	SYS_MSGGET               = 225 // { int|sys||msgget(key_t key, int msgflg); }
+	SYS_MSGSND               = 226 // { int|sys||msgsnd(int msqid, const void *msgp, size_t msgsz, int msgflg); }
+	SYS_MSGRCV               = 227 // { ssize_t|sys||msgrcv(int msqid, void *msgp, size_t msgsz, long msgtyp, int msgflg); }
+	SYS_SHMAT                = 228 // { void *|sys||shmat(int shmid, const void *shmaddr, int shmflg); }
+	SYS_SHMDT                = 230 // { int|sys||shmdt(const void *shmaddr); }
+	SYS_SHMGET               = 231 // { int|sys||shmget(key_t key, size_t size, int shmflg); }
+	SYS_TIMER_CREATE         = 235 // { int|sys||timer_create(clockid_t clock_id, struct sigevent *evp, timer_t *timerid); }
+	SYS_TIMER_DELETE         = 236 // { int|sys||timer_delete(timer_t timerid); }
+	SYS_TIMER_GETOVERRUN     = 239 // { int|sys||timer_getoverrun(timer_t timerid); }
+	SYS_FDATASYNC            = 241 // { int|sys||fdatasync(int fd); }
+	SYS_MLOCKALL             = 242 // { int|sys||mlockall(int flags); }
+	SYS_MUNLOCKALL           = 243 // { int|sys||munlockall(void); }
+	SYS_SIGQUEUEINFO         = 245 // { int|sys||sigqueueinfo(pid_t pid, const siginfo_t *info); }
+	SYS_MODCTL               = 246 // { int|sys||modctl(int cmd, void *arg); }
+	SYS___POSIX_RENAME       = 270 // { int|sys||__posix_rename(const char *from, const char *to); }
+	SYS_SWAPCTL              = 271 // { int|sys||swapctl(int cmd, void *arg, int misc); }
+	SYS_MINHERIT             = 273 // { int|sys||minherit(void *addr, size_t len, int inherit); }
+	SYS_LCHMOD               = 274 // { int|sys||lchmod(const char *path, mode_t mode); }
+	SYS_LCHOWN               = 275 // { int|sys||lchown(const char *path, uid_t uid, gid_t gid); }
+	SYS_MSYNC                = 277 // { int|sys|13|msync(void *addr, size_t len, int flags); }
+	SYS___POSIX_CHOWN        = 283 // { int|sys||__posix_chown(const char *path, uid_t uid, gid_t gid); }
+	SYS___POSIX_FCHOWN       = 284 // { int|sys||__posix_fchown(int fd, uid_t uid, gid_t gid); }
+	SYS___POSIX_LCHOWN       = 285 // { int|sys||__posix_lchown(const char *path, uid_t uid, gid_t gid); }
+	SYS_GETSID               = 286 // { pid_t|sys||getsid(pid_t pid); }
+	SYS___CLONE              = 287 // { pid_t|sys||__clone(int flags, void *stack); }
+	SYS_FKTRACE              = 288 // { int|sys||fktrace(int fd, int ops, int facs, pid_t pid); }
+	SYS_PREADV               = 289 // { ssize_t|sys||preadv(int fd, const struct iovec *iovp, int iovcnt, int PAD, off_t offset); }
+	SYS_PWRITEV              = 290 // { ssize_t|sys||pwritev(int fd, const struct iovec *iovp, int iovcnt, int PAD, off_t offset); }
+	SYS___GETCWD             = 296 // { int|sys||__getcwd(char *bufp, size_t length); }
+	SYS_FCHROOT              = 297 // { int|sys||fchroot(int fd); }
+	SYS_LCHFLAGS             = 304 // { int|sys||lchflags(const char *path, u_long flags); }
+	SYS_ISSETUGID            = 305 // { int|sys||issetugid(void); }
+	SYS_UTRACE               = 306 // { int|sys||utrace(const char *label, void *addr, size_t len); }
+	SYS_GETCONTEXT           = 307 // { int|sys||getcontext(struct __ucontext *ucp); }
+	SYS_SETCONTEXT           = 308 // { int|sys||setcontext(const struct __ucontext *ucp); }
+	SYS__LWP_CREATE          = 309 // { int|sys||_lwp_create(const struct __ucontext *ucp, u_long flags, lwpid_t *new_lwp); }
+	SYS__LWP_EXIT            = 310 // { int|sys||_lwp_exit(void); }
+	SYS__LWP_SELF            = 311 // { lwpid_t|sys||_lwp_self(void); }
+	SYS__LWP_WAIT            = 312 // { int|sys||_lwp_wait(lwpid_t wait_for, lwpid_t *departed); }
+	SYS__LWP_SUSPEND         = 313 // { int|sys||_lwp_suspend(lwpid_t target); }
+	SYS__LWP_CONTINUE        = 314 // { int|sys||_lwp_continue(lwpid_t target); }
+	SYS__LWP_WAKEUP          = 315 // { int|sys||_lwp_wakeup(lwpid_t target); }
+	SYS__LWP_GETPRIVATE      = 316 // { void *|sys||_lwp_getprivate(void); }
+	SYS__LWP_SETPRIVATE      = 317 // { void|sys||_lwp_setprivate(void *ptr); }
+	SYS__LWP_KILL            = 318 // { int|sys||_lwp_kill(lwpid_t target, int signo); }
+	SYS__LWP_DETACH          = 319 // { int|sys||_lwp_detach(lwpid_t target); }
+	SYS__LWP_UNPARK          = 321 // { int|sys||_lwp_unpark(lwpid_t target, const void *hint); }
+	SYS__LWP_UNPARK_ALL      = 322 // { ssize_t|sys||_lwp_unpark_all(const lwpid_t *targets, size_t ntargets, const void *hint); }
+	SYS__LWP_SETNAME         = 323 // { int|sys||_lwp_setname(lwpid_t target, const char *name); }
+	SYS__LWP_GETNAME         = 324 // { int|sys||_lwp_getname(lwpid_t target, char *name, size_t len); }
+	SYS__LWP_CTL             = 325 // { int|sys||_lwp_ctl(int features, struct lwpctl **address); }
+	SYS___SIGACTION_SIGTRAMP = 340 // { int|sys||__sigaction_sigtramp(int signum, const struct sigaction *nsa, struct sigaction *osa, const void *tramp, int vers); }
+	SYS_PMC_GET_INFO         = 341 // { int|sys||pmc_get_info(int ctr, int op, void *args); }
+	SYS_PMC_CONTROL          = 342 // { int|sys||pmc_control(int ctr, int op, void *args); }
+	SYS_RASCTL               = 343 // { int|sys||rasctl(void *addr, size_t len, int op); }
+	SYS_KQUEUE               = 344 // { int|sys||kqueue(void); }
+	SYS__SCHED_SETPARAM      = 346 // { int|sys||_sched_setparam(pid_t pid, lwpid_t lid, int policy, const struct sched_param *params); }
+	SYS__SCHED_GETPARAM      = 347 // { int|sys||_sched_getparam(pid_t pid, lwpid_t lid, int *policy, struct sched_param *params); }
+	SYS__SCHED_SETAFFINITY   = 348 // { int|sys||_sched_setaffinity(pid_t pid, lwpid_t lid, size_t size, const cpuset_t *cpuset); }
+	SYS__SCHED_GETAFFINITY   = 349 // { int|sys||_sched_getaffinity(pid_t pid, lwpid_t lid, size_t size, cpuset_t *cpuset); }
+	SYS_SCHED_YIELD          = 350 // { int|sys||sched_yield(void); }
+	SYS_FSYNC_RANGE          = 354 // { int|sys||fsync_range(int fd, int flags, off_t start, off_t length); }
+	SYS_UUIDGEN              = 355 // { int|sys||uuidgen(struct uuid *store, int count); }
+	SYS_GETVFSSTAT           = 356 // { int|sys||getvfsstat(struct statvfs *buf, size_t bufsize, int flags); }
+	SYS_STATVFS1             = 357 // { int|sys||statvfs1(const char *path, struct statvfs *buf, int flags); }
+	SYS_FSTATVFS1            = 358 // { int|sys||fstatvfs1(int fd, struct statvfs *buf, int flags); }
+	SYS_EXTATTRCTL           = 360 // { int|sys||extattrctl(const char *path, int cmd, const char *filename, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_FILE     = 361 // { int|sys||extattr_set_file(const char *path, int attrnamespace, const char *attrname, const void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FILE     = 362 // { ssize_t|sys||extattr_get_file(const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FILE  = 363 // { int|sys||extattr_delete_file(const char *path, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_FD       = 364 // { int|sys||extattr_set_fd(int fd, int attrnamespace, const char *attrname, const void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FD       = 365 // { ssize_t|sys||extattr_get_fd(int fd, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FD    = 366 // { int|sys||extattr_delete_fd(int fd, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_LINK     = 367 // { int|sys||extattr_set_link(const char *path, int attrnamespace, const char *attrname, const void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_LINK     = 368 // { ssize_t|sys||extattr_get_link(const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_LINK  = 369 // { int|sys||extattr_delete_link(const char *path, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_LIST_FD      = 370 // { ssize_t|sys||extattr_list_fd(int fd, int attrnamespace, void *data, size_t nbytes); }
+	SYS_EXTATTR_LIST_FILE    = 371 // { ssize_t|sys||extattr_list_file(const char *path, int attrnamespace, void *data, size_t nbytes); }
+	SYS_EXTATTR_LIST_LINK    = 372 // { ssize_t|sys||extattr_list_link(const char *path, int attrnamespace, void *data, size_t nbytes); }
+	SYS_SETXATTR             = 375 // { int|sys||setxattr(const char *path, const char *name, const void *value, size_t size, int flags); }
+	SYS_LSETXATTR            = 376 // { int|sys||lsetxattr(const char *path, const char *name, const void *value, size_t size, int flags); }
+	SYS_FSETXATTR            = 377 // { int|sys||fsetxattr(int fd, const char *name, const void *value, size_t size, int flags); }
+	SYS_GETXATTR             = 378 // { int|sys||getxattr(const char *path, const char *name, void *value, size_t size); }
+	SYS_LGETXATTR            = 379 // { int|sys||lgetxattr(const char *path, const char *name, void *value, size_t size); }
+	SYS_FGETXATTR            = 380 // { int|sys||fgetxattr(int fd, const char *name, void *value, size_t size); }
+	SYS_LISTXATTR            = 381 // { int|sys||listxattr(const char *path, char *list, size_t size); }
+	SYS_LLISTXATTR           = 382 // { int|sys||llistxattr(const char *path, char *list, size_t size); }
+	SYS_FLISTXATTR           = 383 // { int|sys||flistxattr(int fd, char *list, size_t size); }
+	SYS_REMOVEXATTR          = 384 // { int|sys||removexattr(const char *path, const char *name); }
+	SYS_LREMOVEXATTR         = 385 // { int|sys||lremovexattr(const char *path, const char *name); }
+	SYS_FREMOVEXATTR         = 386 // { int|sys||fremovexattr(int fd, const char *name); }
+	SYS_GETDENTS             = 390 // { int|sys|30|getdents(int fd, char *buf, size_t count); }
+	SYS_SOCKET               = 394 // { int|sys|30|socket(int domain, int type, int protocol); }
+	SYS_GETFH                = 395 // { int|sys|30|getfh(const char *fname, void *fhp, size_t *fh_size); }
+	SYS_MOUNT                = 410 // { int|sys|50|mount(const char *type, const char *path, int flags, void *data, size_t data_len); }
+	SYS_MREMAP               = 411 // { void *|sys||mremap(void *old_address, size_t old_size, void *new_address, size_t new_size, int flags); }
+	SYS_PSET_CREATE          = 412 // { int|sys||pset_create(psetid_t *psid); }
+	SYS_PSET_DESTROY         = 413 // { int|sys||pset_destroy(psetid_t psid); }
+	SYS_PSET_ASSIGN          = 414 // { int|sys||pset_assign(psetid_t psid, cpuid_t cpuid, psetid_t *opsid); }
+	SYS__PSET_BIND           = 415 // { int|sys||_pset_bind(idtype_t idtype, id_t first_id, id_t second_id, psetid_t psid, psetid_t *opsid); }
+	SYS_POSIX_FADVISE        = 416 // { int|sys|50|posix_fadvise(int fd, int PAD, off_t offset, off_t len, int advice); }
+	SYS_SELECT               = 417 // { int|sys|50|select(int nd, fd_set *in, fd_set *ou, fd_set *ex, struct timeval *tv); }
+	SYS_GETTIMEOFDAY         = 418 // { int|sys|50|gettimeofday(struct timeval *tp, void *tzp); }
+	SYS_SETTIMEOFDAY         = 419 // { int|sys|50|settimeofday(const struct timeval *tv, const void *tzp); }
+	SYS_UTIMES               = 420 // { int|sys|50|utimes(const char *path, const struct timeval *tptr); }
+	SYS_ADJTIME              = 421 // { int|sys|50|adjtime(const struct timeval *delta, struct timeval *olddelta); }
+	SYS_FUTIMES              = 423 // { int|sys|50|futimes(int fd, const struct timeval *tptr); }
+	SYS_LUTIMES              = 424 // { int|sys|50|lutimes(const char *path, const struct timeval *tptr); }
+	SYS_SETITIMER            = 425 // { int|sys|50|setitimer(int which, const struct itimerval *itv, struct itimerval *oitv); }
+	SYS_GETITIMER            = 426 // { int|sys|50|getitimer(int which, struct itimerval *itv); }
+	SYS_CLOCK_GETTIME        = 427 // { int|sys|50|clock_gettime(clockid_t clock_id, struct timespec *tp); }
+	SYS_CLOCK_SETTIME        = 428 // { int|sys|50|clock_settime(clockid_t clock_id, const struct timespec *tp); }
+	SYS_CLOCK_GETRES         = 429 // { int|sys|50|clock_getres(clockid_t clock_id, struct timespec *tp); }
+	SYS_NANOSLEEP            = 430 // { int|sys|50|nanosleep(const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS___SIGTIMEDWAIT       = 431 // { int|sys|50|__sigtimedwait(const sigset_t *set, siginfo_t *info, struct timespec *timeout); }
+	SYS__LWP_PARK            = 434 // { int|sys|50|_lwp_park(const struct timespec *ts, lwpid_t unpark, const void *hint, const void *unparkhint); }
+	SYS_KEVENT               = 435 // { int|sys|50|kevent(int fd, const struct kevent *changelist, size_t nchanges, struct kevent *eventlist, size_t nevents, const struct timespec *timeout); }
+	SYS_PSELECT              = 436 // { int|sys|50|pselect(int nd, fd_set *in, fd_set *ou, fd_set *ex, const struct timespec *ts, const sigset_t *mask); }
+	SYS_POLLTS               = 437 // { int|sys|50|pollts(struct pollfd *fds, u_int nfds, const struct timespec *ts, const sigset_t *mask); }
+	SYS_STAT                 = 439 // { int|sys|50|stat(const char *path, struct stat *ub); }
+	SYS_FSTAT                = 440 // { int|sys|50|fstat(int fd, struct stat *sb); }
+	SYS_LSTAT                = 441 // { int|sys|50|lstat(const char *path, struct stat *ub); }
+	SYS___SEMCTL             = 442 // { int|sys|50|__semctl(int semid, int semnum, int cmd, ... union __semun *arg); }
+	SYS_SHMCTL               = 443 // { int|sys|50|shmctl(int shmid, int cmd, struct shmid_ds *buf); }
+	SYS_MSGCTL               = 444 // { int|sys|50|msgctl(int msqid, int cmd, struct msqid_ds *buf); }
+	SYS_GETRUSAGE            = 445 // { int|sys|50|getrusage(int who, struct rusage *rusage); }
+	SYS_TIMER_SETTIME        = 446 // { int|sys|50|timer_settime(timer_t timerid, int flags, const struct itimerspec *value, struct itimerspec *ovalue); }
+	SYS_TIMER_GETTIME        = 447 // { int|sys|50|timer_gettime(timer_t timerid, struct itimerspec *value); }
+	SYS_NTP_GETTIME          = 448 // { int|sys|50|ntp_gettime(struct ntptimeval *ntvp); }
+	SYS_WAIT4                = 449 // { int|sys|50|wait4(pid_t pid, int *status, int options, struct rusage *rusage); }
+	SYS_MKNOD                = 450 // { int|sys|50|mknod(const char *path, mode_t mode, dev_t dev); }
+	SYS_FHSTAT               = 451 // { int|sys|50|fhstat(const void *fhp, size_t fh_size, struct stat *sb); }
+	SYS_PIPE2                = 453 // { int|sys||pipe2(int *fildes, int flags); }
+	SYS_DUP3                 = 454 // { int|sys||dup3(int from, int to, int flags); }
+	SYS_KQUEUE1              = 455 // { int|sys||kqueue1(int flags); }
+	SYS_PACCEPT              = 456 // { int|sys||paccept(int s, struct sockaddr *name, socklen_t *anamelen, const sigset_t *mask, int flags); }
+	SYS_LINKAT               = 457 // { int|sys||linkat(int fd1, const char *name1, int fd2, const char *name2, int flags); }
+	SYS_RENAMEAT             = 458 // { int|sys||renameat(int fromfd, const char *from, int tofd, const char *to); }
+	SYS_MKFIFOAT             = 459 // { int|sys||mkfifoat(int fd, const char *path, mode_t mode); }
+	SYS_MKNODAT              = 460 // { int|sys||mknodat(int fd, const char *path, mode_t mode, uint32_t dev); }
+	SYS_MKDIRAT              = 461 // { int|sys||mkdirat(int fd, const char *path, mode_t mode); }
+	SYS_FACCESSAT            = 462 // { int|sys||faccessat(int fd, const char *path, int amode, int flag); }
+	SYS_FCHMODAT             = 463 // { int|sys||fchmodat(int fd, const char *path, mode_t mode, int flag); }
+	SYS_FCHOWNAT             = 464 // { int|sys||fchownat(int fd, const char *path, uid_t owner, gid_t group, int flag); }
+	SYS_FEXECVE              = 465 // { int|sys||fexecve(int fd, char * const *argp, char * const *envp); }
+	SYS_FSTATAT              = 466 // { int|sys||fstatat(int fd, const char *path, struct stat *buf, int flag); }
+	SYS_UTIMENSAT            = 467 // { int|sys||utimensat(int fd, const char *path, const struct timespec *tptr, int flag); }
+	SYS_OPENAT               = 468 // { int|sys||openat(int fd, const char *path, int oflags, ... mode_t mode); }
+	SYS_READLINKAT           = 469 // { int|sys||readlinkat(int fd, const char *path, char *buf, size_t bufsize); }
+	SYS_SYMLINKAT            = 470 // { int|sys||symlinkat(const char *path1, int fd, const char *path2); }
+	SYS_UNLINKAT             = 471 // { int|sys||unlinkat(int fd, const char *path, int flag); }
+	SYS_FUTIMENS             = 472 // { int|sys||futimens(int fd, const struct timespec *tptr); }
+	SYS___QUOTACTL           = 473 // { int|sys||__quotactl(const char *path, struct quotactl_args *args); }
+	SYS_POSIX_SPAWN          = 474 // { int|sys||posix_spawn(pid_t *pid, const char *path, const struct posix_spawn_file_actions *file_actions, const struct posix_spawnattr *attrp, char *const *argv, char *const *envp); }
+	SYS_RECVMMSG             = 475 // { int|sys||recvmmsg(int s, struct mmsghdr *mmsg, unsigned int vlen, unsigned int flags, struct timespec *timeout); }
+	SYS_SENDMMSG             = 476 // { int|sys||sendmmsg(int s, struct mmsghdr *mmsg, unsigned int vlen, unsigned int flags); }
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_netbsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_netbsd_arm.go
new file mode 100644
index 000000000..0a0757179
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_netbsd_arm.go
@@ -0,0 +1,274 @@
+// go run mksysnum.go http://cvsweb.netbsd.org/bsdweb.cgi/~checkout~/src/sys/kern/syscalls.master
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm,netbsd
+
+package unix
+
+const (
+	SYS_EXIT                 = 1   // { void|sys||exit(int rval); }
+	SYS_FORK                 = 2   // { int|sys||fork(void); }
+	SYS_READ                 = 3   // { ssize_t|sys||read(int fd, void *buf, size_t nbyte); }
+	SYS_WRITE                = 4   // { ssize_t|sys||write(int fd, const void *buf, size_t nbyte); }
+	SYS_OPEN                 = 5   // { int|sys||open(const char *path, int flags, ... mode_t mode); }
+	SYS_CLOSE                = 6   // { int|sys||close(int fd); }
+	SYS_LINK                 = 9   // { int|sys||link(const char *path, const char *link); }
+	SYS_UNLINK               = 10  // { int|sys||unlink(const char *path); }
+	SYS_CHDIR                = 12  // { int|sys||chdir(const char *path); }
+	SYS_FCHDIR               = 13  // { int|sys||fchdir(int fd); }
+	SYS_CHMOD                = 15  // { int|sys||chmod(const char *path, mode_t mode); }
+	SYS_CHOWN                = 16  // { int|sys||chown(const char *path, uid_t uid, gid_t gid); }
+	SYS_BREAK                = 17  // { int|sys||obreak(char *nsize); }
+	SYS_GETPID               = 20  // { pid_t|sys||getpid_with_ppid(void); }
+	SYS_UNMOUNT              = 22  // { int|sys||unmount(const char *path, int flags); }
+	SYS_SETUID               = 23  // { int|sys||setuid(uid_t uid); }
+	SYS_GETUID               = 24  // { uid_t|sys||getuid_with_euid(void); }
+	SYS_GETEUID              = 25  // { uid_t|sys||geteuid(void); }
+	SYS_PTRACE               = 26  // { int|sys||ptrace(int req, pid_t pid, void *addr, int data); }
+	SYS_RECVMSG              = 27  // { ssize_t|sys||recvmsg(int s, struct msghdr *msg, int flags); }
+	SYS_SENDMSG              = 28  // { ssize_t|sys||sendmsg(int s, const struct msghdr *msg, int flags); }
+	SYS_RECVFROM             = 29  // { ssize_t|sys||recvfrom(int s, void *buf, size_t len, int flags, struct sockaddr *from, socklen_t *fromlenaddr); }
+	SYS_ACCEPT               = 30  // { int|sys||accept(int s, struct sockaddr *name, socklen_t *anamelen); }
+	SYS_GETPEERNAME          = 31  // { int|sys||getpeername(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_GETSOCKNAME          = 32  // { int|sys||getsockname(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_ACCESS               = 33  // { int|sys||access(const char *path, int flags); }
+	SYS_CHFLAGS              = 34  // { int|sys||chflags(const char *path, u_long flags); }
+	SYS_FCHFLAGS             = 35  // { int|sys||fchflags(int fd, u_long flags); }
+	SYS_SYNC                 = 36  // { void|sys||sync(void); }
+	SYS_KILL                 = 37  // { int|sys||kill(pid_t pid, int signum); }
+	SYS_GETPPID              = 39  // { pid_t|sys||getppid(void); }
+	SYS_DUP                  = 41  // { int|sys||dup(int fd); }
+	SYS_PIPE                 = 42  // { int|sys||pipe(void); }
+	SYS_GETEGID              = 43  // { gid_t|sys||getegid(void); }
+	SYS_PROFIL               = 44  // { int|sys||profil(char *samples, size_t size, u_long offset, u_int scale); }
+	SYS_KTRACE               = 45  // { int|sys||ktrace(const char *fname, int ops, int facs, pid_t pid); }
+	SYS_GETGID               = 47  // { gid_t|sys||getgid_with_egid(void); }
+	SYS___GETLOGIN           = 49  // { int|sys||__getlogin(char *namebuf, size_t namelen); }
+	SYS___SETLOGIN           = 50  // { int|sys||__setlogin(const char *namebuf); }
+	SYS_ACCT                 = 51  // { int|sys||acct(const char *path); }
+	SYS_IOCTL                = 54  // { int|sys||ioctl(int fd, u_long com, ... void *data); }
+	SYS_REVOKE               = 56  // { int|sys||revoke(const char *path); }
+	SYS_SYMLINK              = 57  // { int|sys||symlink(const char *path, const char *link); }
+	SYS_READLINK             = 58  // { ssize_t|sys||readlink(const char *path, char *buf, size_t count); }
+	SYS_EXECVE               = 59  // { int|sys||execve(const char *path, char * const *argp, char * const *envp); }
+	SYS_UMASK                = 60  // { mode_t|sys||umask(mode_t newmask); }
+	SYS_CHROOT               = 61  // { int|sys||chroot(const char *path); }
+	SYS_VFORK                = 66  // { int|sys||vfork(void); }
+	SYS_SBRK                 = 69  // { int|sys||sbrk(intptr_t incr); }
+	SYS_SSTK                 = 70  // { int|sys||sstk(int incr); }
+	SYS_VADVISE              = 72  // { int|sys||ovadvise(int anom); }
+	SYS_MUNMAP               = 73  // { int|sys||munmap(void *addr, size_t len); }
+	SYS_MPROTECT             = 74  // { int|sys||mprotect(void *addr, size_t len, int prot); }
+	SYS_MADVISE              = 75  // { int|sys||madvise(void *addr, size_t len, int behav); }
+	SYS_MINCORE              = 78  // { int|sys||mincore(void *addr, size_t len, char *vec); }
+	SYS_GETGROUPS            = 79  // { int|sys||getgroups(int gidsetsize, gid_t *gidset); }
+	SYS_SETGROUPS            = 80  // { int|sys||setgroups(int gidsetsize, const gid_t *gidset); }
+	SYS_GETPGRP              = 81  // { int|sys||getpgrp(void); }
+	SYS_SETPGID              = 82  // { int|sys||setpgid(pid_t pid, pid_t pgid); }
+	SYS_DUP2                 = 90  // { int|sys||dup2(int from, int to); }
+	SYS_FCNTL                = 92  // { int|sys||fcntl(int fd, int cmd, ... void *arg); }
+	SYS_FSYNC                = 95  // { int|sys||fsync(int fd); }
+	SYS_SETPRIORITY          = 96  // { int|sys||setpriority(int which, id_t who, int prio); }
+	SYS_CONNECT              = 98  // { int|sys||connect(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_GETPRIORITY          = 100 // { int|sys||getpriority(int which, id_t who); }
+	SYS_BIND                 = 104 // { int|sys||bind(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_SETSOCKOPT           = 105 // { int|sys||setsockopt(int s, int level, int name, const void *val, socklen_t valsize); }
+	SYS_LISTEN               = 106 // { int|sys||listen(int s, int backlog); }
+	SYS_GETSOCKOPT           = 118 // { int|sys||getsockopt(int s, int level, int name, void *val, socklen_t *avalsize); }
+	SYS_READV                = 120 // { ssize_t|sys||readv(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_WRITEV               = 121 // { ssize_t|sys||writev(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_FCHOWN               = 123 // { int|sys||fchown(int fd, uid_t uid, gid_t gid); }
+	SYS_FCHMOD               = 124 // { int|sys||fchmod(int fd, mode_t mode); }
+	SYS_SETREUID             = 126 // { int|sys||setreuid(uid_t ruid, uid_t euid); }
+	SYS_SETREGID             = 127 // { int|sys||setregid(gid_t rgid, gid_t egid); }
+	SYS_RENAME               = 128 // { int|sys||rename(const char *from, const char *to); }
+	SYS_FLOCK                = 131 // { int|sys||flock(int fd, int how); }
+	SYS_MKFIFO               = 132 // { int|sys||mkfifo(const char *path, mode_t mode); }
+	SYS_SENDTO               = 133 // { ssize_t|sys||sendto(int s, const void *buf, size_t len, int flags, const struct sockaddr *to, socklen_t tolen); }
+	SYS_SHUTDOWN             = 134 // { int|sys||shutdown(int s, int how); }
+	SYS_SOCKETPAIR           = 135 // { int|sys||socketpair(int domain, int type, int protocol, int *rsv); }
+	SYS_MKDIR                = 136 // { int|sys||mkdir(const char *path, mode_t mode); }
+	SYS_RMDIR                = 137 // { int|sys||rmdir(const char *path); }
+	SYS_SETSID               = 147 // { int|sys||setsid(void); }
+	SYS_SYSARCH              = 165 // { int|sys||sysarch(int op, void *parms); }
+	SYS_PREAD                = 173 // { ssize_t|sys||pread(int fd, void *buf, size_t nbyte, int PAD, off_t offset); }
+	SYS_PWRITE               = 174 // { ssize_t|sys||pwrite(int fd, const void *buf, size_t nbyte, int PAD, off_t offset); }
+	SYS_NTP_ADJTIME          = 176 // { int|sys||ntp_adjtime(struct timex *tp); }
+	SYS_SETGID               = 181 // { int|sys||setgid(gid_t gid); }
+	SYS_SETEGID              = 182 // { int|sys||setegid(gid_t egid); }
+	SYS_SETEUID              = 183 // { int|sys||seteuid(uid_t euid); }
+	SYS_PATHCONF             = 191 // { long|sys||pathconf(const char *path, int name); }
+	SYS_FPATHCONF            = 192 // { long|sys||fpathconf(int fd, int name); }
+	SYS_GETRLIMIT            = 194 // { int|sys||getrlimit(int which, struct rlimit *rlp); }
+	SYS_SETRLIMIT            = 195 // { int|sys||setrlimit(int which, const struct rlimit *rlp); }
+	SYS_MMAP                 = 197 // { void *|sys||mmap(void *addr, size_t len, int prot, int flags, int fd, long PAD, off_t pos); }
+	SYS_LSEEK                = 199 // { off_t|sys||lseek(int fd, int PAD, off_t offset, int whence); }
+	SYS_TRUNCATE             = 200 // { int|sys||truncate(const char *path, int PAD, off_t length); }
+	SYS_FTRUNCATE            = 201 // { int|sys||ftruncate(int fd, int PAD, off_t length); }
+	SYS___SYSCTL             = 202 // { int|sys||__sysctl(const int *name, u_int namelen, void *old, size_t *oldlenp, const void *new, size_t newlen); }
+	SYS_MLOCK                = 203 // { int|sys||mlock(const void *addr, size_t len); }
+	SYS_MUNLOCK              = 204 // { int|sys||munlock(const void *addr, size_t len); }
+	SYS_UNDELETE             = 205 // { int|sys||undelete(const char *path); }
+	SYS_GETPGID              = 207 // { pid_t|sys||getpgid(pid_t pid); }
+	SYS_REBOOT               = 208 // { int|sys||reboot(int opt, char *bootstr); }
+	SYS_POLL                 = 209 // { int|sys||poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_SEMGET               = 221 // { int|sys||semget(key_t key, int nsems, int semflg); }
+	SYS_SEMOP                = 222 // { int|sys||semop(int semid, struct sembuf *sops, size_t nsops); }
+	SYS_SEMCONFIG            = 223 // { int|sys||semconfig(int flag); }
+	SYS_MSGGET               = 225 // { int|sys||msgget(key_t key, int msgflg); }
+	SYS_MSGSND               = 226 // { int|sys||msgsnd(int msqid, const void *msgp, size_t msgsz, int msgflg); }
+	SYS_MSGRCV               = 227 // { ssize_t|sys||msgrcv(int msqid, void *msgp, size_t msgsz, long msgtyp, int msgflg); }
+	SYS_SHMAT                = 228 // { void *|sys||shmat(int shmid, const void *shmaddr, int shmflg); }
+	SYS_SHMDT                = 230 // { int|sys||shmdt(const void *shmaddr); }
+	SYS_SHMGET               = 231 // { int|sys||shmget(key_t key, size_t size, int shmflg); }
+	SYS_TIMER_CREATE         = 235 // { int|sys||timer_create(clockid_t clock_id, struct sigevent *evp, timer_t *timerid); }
+	SYS_TIMER_DELETE         = 236 // { int|sys||timer_delete(timer_t timerid); }
+	SYS_TIMER_GETOVERRUN     = 239 // { int|sys||timer_getoverrun(timer_t timerid); }
+	SYS_FDATASYNC            = 241 // { int|sys||fdatasync(int fd); }
+	SYS_MLOCKALL             = 242 // { int|sys||mlockall(int flags); }
+	SYS_MUNLOCKALL           = 243 // { int|sys||munlockall(void); }
+	SYS_SIGQUEUEINFO         = 245 // { int|sys||sigqueueinfo(pid_t pid, const siginfo_t *info); }
+	SYS_MODCTL               = 246 // { int|sys||modctl(int cmd, void *arg); }
+	SYS___POSIX_RENAME       = 270 // { int|sys||__posix_rename(const char *from, const char *to); }
+	SYS_SWAPCTL              = 271 // { int|sys||swapctl(int cmd, void *arg, int misc); }
+	SYS_MINHERIT             = 273 // { int|sys||minherit(void *addr, size_t len, int inherit); }
+	SYS_LCHMOD               = 274 // { int|sys||lchmod(const char *path, mode_t mode); }
+	SYS_LCHOWN               = 275 // { int|sys||lchown(const char *path, uid_t uid, gid_t gid); }
+	SYS_MSYNC                = 277 // { int|sys|13|msync(void *addr, size_t len, int flags); }
+	SYS___POSIX_CHOWN        = 283 // { int|sys||__posix_chown(const char *path, uid_t uid, gid_t gid); }
+	SYS___POSIX_FCHOWN       = 284 // { int|sys||__posix_fchown(int fd, uid_t uid, gid_t gid); }
+	SYS___POSIX_LCHOWN       = 285 // { int|sys||__posix_lchown(const char *path, uid_t uid, gid_t gid); }
+	SYS_GETSID               = 286 // { pid_t|sys||getsid(pid_t pid); }
+	SYS___CLONE              = 287 // { pid_t|sys||__clone(int flags, void *stack); }
+	SYS_FKTRACE              = 288 // { int|sys||fktrace(int fd, int ops, int facs, pid_t pid); }
+	SYS_PREADV               = 289 // { ssize_t|sys||preadv(int fd, const struct iovec *iovp, int iovcnt, int PAD, off_t offset); }
+	SYS_PWRITEV              = 290 // { ssize_t|sys||pwritev(int fd, const struct iovec *iovp, int iovcnt, int PAD, off_t offset); }
+	SYS___GETCWD             = 296 // { int|sys||__getcwd(char *bufp, size_t length); }
+	SYS_FCHROOT              = 297 // { int|sys||fchroot(int fd); }
+	SYS_LCHFLAGS             = 304 // { int|sys||lchflags(const char *path, u_long flags); }
+	SYS_ISSETUGID            = 305 // { int|sys||issetugid(void); }
+	SYS_UTRACE               = 306 // { int|sys||utrace(const char *label, void *addr, size_t len); }
+	SYS_GETCONTEXT           = 307 // { int|sys||getcontext(struct __ucontext *ucp); }
+	SYS_SETCONTEXT           = 308 // { int|sys||setcontext(const struct __ucontext *ucp); }
+	SYS__LWP_CREATE          = 309 // { int|sys||_lwp_create(const struct __ucontext *ucp, u_long flags, lwpid_t *new_lwp); }
+	SYS__LWP_EXIT            = 310 // { int|sys||_lwp_exit(void); }
+	SYS__LWP_SELF            = 311 // { lwpid_t|sys||_lwp_self(void); }
+	SYS__LWP_WAIT            = 312 // { int|sys||_lwp_wait(lwpid_t wait_for, lwpid_t *departed); }
+	SYS__LWP_SUSPEND         = 313 // { int|sys||_lwp_suspend(lwpid_t target); }
+	SYS__LWP_CONTINUE        = 314 // { int|sys||_lwp_continue(lwpid_t target); }
+	SYS__LWP_WAKEUP          = 315 // { int|sys||_lwp_wakeup(lwpid_t target); }
+	SYS__LWP_GETPRIVATE      = 316 // { void *|sys||_lwp_getprivate(void); }
+	SYS__LWP_SETPRIVATE      = 317 // { void|sys||_lwp_setprivate(void *ptr); }
+	SYS__LWP_KILL            = 318 // { int|sys||_lwp_kill(lwpid_t target, int signo); }
+	SYS__LWP_DETACH          = 319 // { int|sys||_lwp_detach(lwpid_t target); }
+	SYS__LWP_UNPARK          = 321 // { int|sys||_lwp_unpark(lwpid_t target, const void *hint); }
+	SYS__LWP_UNPARK_ALL      = 322 // { ssize_t|sys||_lwp_unpark_all(const lwpid_t *targets, size_t ntargets, const void *hint); }
+	SYS__LWP_SETNAME         = 323 // { int|sys||_lwp_setname(lwpid_t target, const char *name); }
+	SYS__LWP_GETNAME         = 324 // { int|sys||_lwp_getname(lwpid_t target, char *name, size_t len); }
+	SYS__LWP_CTL             = 325 // { int|sys||_lwp_ctl(int features, struct lwpctl **address); }
+	SYS___SIGACTION_SIGTRAMP = 340 // { int|sys||__sigaction_sigtramp(int signum, const struct sigaction *nsa, struct sigaction *osa, const void *tramp, int vers); }
+	SYS_PMC_GET_INFO         = 341 // { int|sys||pmc_get_info(int ctr, int op, void *args); }
+	SYS_PMC_CONTROL          = 342 // { int|sys||pmc_control(int ctr, int op, void *args); }
+	SYS_RASCTL               = 343 // { int|sys||rasctl(void *addr, size_t len, int op); }
+	SYS_KQUEUE               = 344 // { int|sys||kqueue(void); }
+	SYS__SCHED_SETPARAM      = 346 // { int|sys||_sched_setparam(pid_t pid, lwpid_t lid, int policy, const struct sched_param *params); }
+	SYS__SCHED_GETPARAM      = 347 // { int|sys||_sched_getparam(pid_t pid, lwpid_t lid, int *policy, struct sched_param *params); }
+	SYS__SCHED_SETAFFINITY   = 348 // { int|sys||_sched_setaffinity(pid_t pid, lwpid_t lid, size_t size, const cpuset_t *cpuset); }
+	SYS__SCHED_GETAFFINITY   = 349 // { int|sys||_sched_getaffinity(pid_t pid, lwpid_t lid, size_t size, cpuset_t *cpuset); }
+	SYS_SCHED_YIELD          = 350 // { int|sys||sched_yield(void); }
+	SYS_FSYNC_RANGE          = 354 // { int|sys||fsync_range(int fd, int flags, off_t start, off_t length); }
+	SYS_UUIDGEN              = 355 // { int|sys||uuidgen(struct uuid *store, int count); }
+	SYS_GETVFSSTAT           = 356 // { int|sys||getvfsstat(struct statvfs *buf, size_t bufsize, int flags); }
+	SYS_STATVFS1             = 357 // { int|sys||statvfs1(const char *path, struct statvfs *buf, int flags); }
+	SYS_FSTATVFS1            = 358 // { int|sys||fstatvfs1(int fd, struct statvfs *buf, int flags); }
+	SYS_EXTATTRCTL           = 360 // { int|sys||extattrctl(const char *path, int cmd, const char *filename, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_FILE     = 361 // { int|sys||extattr_set_file(const char *path, int attrnamespace, const char *attrname, const void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FILE     = 362 // { ssize_t|sys||extattr_get_file(const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FILE  = 363 // { int|sys||extattr_delete_file(const char *path, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_FD       = 364 // { int|sys||extattr_set_fd(int fd, int attrnamespace, const char *attrname, const void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FD       = 365 // { ssize_t|sys||extattr_get_fd(int fd, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FD    = 366 // { int|sys||extattr_delete_fd(int fd, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_LINK     = 367 // { int|sys||extattr_set_link(const char *path, int attrnamespace, const char *attrname, const void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_LINK     = 368 // { ssize_t|sys||extattr_get_link(const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_LINK  = 369 // { int|sys||extattr_delete_link(const char *path, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_LIST_FD      = 370 // { ssize_t|sys||extattr_list_fd(int fd, int attrnamespace, void *data, size_t nbytes); }
+	SYS_EXTATTR_LIST_FILE    = 371 // { ssize_t|sys||extattr_list_file(const char *path, int attrnamespace, void *data, size_t nbytes); }
+	SYS_EXTATTR_LIST_LINK    = 372 // { ssize_t|sys||extattr_list_link(const char *path, int attrnamespace, void *data, size_t nbytes); }
+	SYS_SETXATTR             = 375 // { int|sys||setxattr(const char *path, const char *name, const void *value, size_t size, int flags); }
+	SYS_LSETXATTR            = 376 // { int|sys||lsetxattr(const char *path, const char *name, const void *value, size_t size, int flags); }
+	SYS_FSETXATTR            = 377 // { int|sys||fsetxattr(int fd, const char *name, const void *value, size_t size, int flags); }
+	SYS_GETXATTR             = 378 // { int|sys||getxattr(const char *path, const char *name, void *value, size_t size); }
+	SYS_LGETXATTR            = 379 // { int|sys||lgetxattr(const char *path, const char *name, void *value, size_t size); }
+	SYS_FGETXATTR            = 380 // { int|sys||fgetxattr(int fd, const char *name, void *value, size_t size); }
+	SYS_LISTXATTR            = 381 // { int|sys||listxattr(const char *path, char *list, size_t size); }
+	SYS_LLISTXATTR           = 382 // { int|sys||llistxattr(const char *path, char *list, size_t size); }
+	SYS_FLISTXATTR           = 383 // { int|sys||flistxattr(int fd, char *list, size_t size); }
+	SYS_REMOVEXATTR          = 384 // { int|sys||removexattr(const char *path, const char *name); }
+	SYS_LREMOVEXATTR         = 385 // { int|sys||lremovexattr(const char *path, const char *name); }
+	SYS_FREMOVEXATTR         = 386 // { int|sys||fremovexattr(int fd, const char *name); }
+	SYS_GETDENTS             = 390 // { int|sys|30|getdents(int fd, char *buf, size_t count); }
+	SYS_SOCKET               = 394 // { int|sys|30|socket(int domain, int type, int protocol); }
+	SYS_GETFH                = 395 // { int|sys|30|getfh(const char *fname, void *fhp, size_t *fh_size); }
+	SYS_MOUNT                = 410 // { int|sys|50|mount(const char *type, const char *path, int flags, void *data, size_t data_len); }
+	SYS_MREMAP               = 411 // { void *|sys||mremap(void *old_address, size_t old_size, void *new_address, size_t new_size, int flags); }
+	SYS_PSET_CREATE          = 412 // { int|sys||pset_create(psetid_t *psid); }
+	SYS_PSET_DESTROY         = 413 // { int|sys||pset_destroy(psetid_t psid); }
+	SYS_PSET_ASSIGN          = 414 // { int|sys||pset_assign(psetid_t psid, cpuid_t cpuid, psetid_t *opsid); }
+	SYS__PSET_BIND           = 415 // { int|sys||_pset_bind(idtype_t idtype, id_t first_id, id_t second_id, psetid_t psid, psetid_t *opsid); }
+	SYS_POSIX_FADVISE        = 416 // { int|sys|50|posix_fadvise(int fd, int PAD, off_t offset, off_t len, int advice); }
+	SYS_SELECT               = 417 // { int|sys|50|select(int nd, fd_set *in, fd_set *ou, fd_set *ex, struct timeval *tv); }
+	SYS_GETTIMEOFDAY         = 418 // { int|sys|50|gettimeofday(struct timeval *tp, void *tzp); }
+	SYS_SETTIMEOFDAY         = 419 // { int|sys|50|settimeofday(const struct timeval *tv, const void *tzp); }
+	SYS_UTIMES               = 420 // { int|sys|50|utimes(const char *path, const struct timeval *tptr); }
+	SYS_ADJTIME              = 421 // { int|sys|50|adjtime(const struct timeval *delta, struct timeval *olddelta); }
+	SYS_FUTIMES              = 423 // { int|sys|50|futimes(int fd, const struct timeval *tptr); }
+	SYS_LUTIMES              = 424 // { int|sys|50|lutimes(const char *path, const struct timeval *tptr); }
+	SYS_SETITIMER            = 425 // { int|sys|50|setitimer(int which, const struct itimerval *itv, struct itimerval *oitv); }
+	SYS_GETITIMER            = 426 // { int|sys|50|getitimer(int which, struct itimerval *itv); }
+	SYS_CLOCK_GETTIME        = 427 // { int|sys|50|clock_gettime(clockid_t clock_id, struct timespec *tp); }
+	SYS_CLOCK_SETTIME        = 428 // { int|sys|50|clock_settime(clockid_t clock_id, const struct timespec *tp); }
+	SYS_CLOCK_GETRES         = 429 // { int|sys|50|clock_getres(clockid_t clock_id, struct timespec *tp); }
+	SYS_NANOSLEEP            = 430 // { int|sys|50|nanosleep(const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS___SIGTIMEDWAIT       = 431 // { int|sys|50|__sigtimedwait(const sigset_t *set, siginfo_t *info, struct timespec *timeout); }
+	SYS__LWP_PARK            = 434 // { int|sys|50|_lwp_park(const struct timespec *ts, lwpid_t unpark, const void *hint, const void *unparkhint); }
+	SYS_KEVENT               = 435 // { int|sys|50|kevent(int fd, const struct kevent *changelist, size_t nchanges, struct kevent *eventlist, size_t nevents, const struct timespec *timeout); }
+	SYS_PSELECT              = 436 // { int|sys|50|pselect(int nd, fd_set *in, fd_set *ou, fd_set *ex, const struct timespec *ts, const sigset_t *mask); }
+	SYS_POLLTS               = 437 // { int|sys|50|pollts(struct pollfd *fds, u_int nfds, const struct timespec *ts, const sigset_t *mask); }
+	SYS_STAT                 = 439 // { int|sys|50|stat(const char *path, struct stat *ub); }
+	SYS_FSTAT                = 440 // { int|sys|50|fstat(int fd, struct stat *sb); }
+	SYS_LSTAT                = 441 // { int|sys|50|lstat(const char *path, struct stat *ub); }
+	SYS___SEMCTL             = 442 // { int|sys|50|__semctl(int semid, int semnum, int cmd, ... union __semun *arg); }
+	SYS_SHMCTL               = 443 // { int|sys|50|shmctl(int shmid, int cmd, struct shmid_ds *buf); }
+	SYS_MSGCTL               = 444 // { int|sys|50|msgctl(int msqid, int cmd, struct msqid_ds *buf); }
+	SYS_GETRUSAGE            = 445 // { int|sys|50|getrusage(int who, struct rusage *rusage); }
+	SYS_TIMER_SETTIME        = 446 // { int|sys|50|timer_settime(timer_t timerid, int flags, const struct itimerspec *value, struct itimerspec *ovalue); }
+	SYS_TIMER_GETTIME        = 447 // { int|sys|50|timer_gettime(timer_t timerid, struct itimerspec *value); }
+	SYS_NTP_GETTIME          = 448 // { int|sys|50|ntp_gettime(struct ntptimeval *ntvp); }
+	SYS_WAIT4                = 449 // { int|sys|50|wait4(pid_t pid, int *status, int options, struct rusage *rusage); }
+	SYS_MKNOD                = 450 // { int|sys|50|mknod(const char *path, mode_t mode, dev_t dev); }
+	SYS_FHSTAT               = 451 // { int|sys|50|fhstat(const void *fhp, size_t fh_size, struct stat *sb); }
+	SYS_PIPE2                = 453 // { int|sys||pipe2(int *fildes, int flags); }
+	SYS_DUP3                 = 454 // { int|sys||dup3(int from, int to, int flags); }
+	SYS_KQUEUE1              = 455 // { int|sys||kqueue1(int flags); }
+	SYS_PACCEPT              = 456 // { int|sys||paccept(int s, struct sockaddr *name, socklen_t *anamelen, const sigset_t *mask, int flags); }
+	SYS_LINKAT               = 457 // { int|sys||linkat(int fd1, const char *name1, int fd2, const char *name2, int flags); }
+	SYS_RENAMEAT             = 458 // { int|sys||renameat(int fromfd, const char *from, int tofd, const char *to); }
+	SYS_MKFIFOAT             = 459 // { int|sys||mkfifoat(int fd, const char *path, mode_t mode); }
+	SYS_MKNODAT              = 460 // { int|sys||mknodat(int fd, const char *path, mode_t mode, uint32_t dev); }
+	SYS_MKDIRAT              = 461 // { int|sys||mkdirat(int fd, const char *path, mode_t mode); }
+	SYS_FACCESSAT            = 462 // { int|sys||faccessat(int fd, const char *path, int amode, int flag); }
+	SYS_FCHMODAT             = 463 // { int|sys||fchmodat(int fd, const char *path, mode_t mode, int flag); }
+	SYS_FCHOWNAT             = 464 // { int|sys||fchownat(int fd, const char *path, uid_t owner, gid_t group, int flag); }
+	SYS_FEXECVE              = 465 // { int|sys||fexecve(int fd, char * const *argp, char * const *envp); }
+	SYS_FSTATAT              = 466 // { int|sys||fstatat(int fd, const char *path, struct stat *buf, int flag); }
+	SYS_UTIMENSAT            = 467 // { int|sys||utimensat(int fd, const char *path, const struct timespec *tptr, int flag); }
+	SYS_OPENAT               = 468 // { int|sys||openat(int fd, const char *path, int oflags, ... mode_t mode); }
+	SYS_READLINKAT           = 469 // { int|sys||readlinkat(int fd, const char *path, char *buf, size_t bufsize); }
+	SYS_SYMLINKAT            = 470 // { int|sys||symlinkat(const char *path1, int fd, const char *path2); }
+	SYS_UNLINKAT             = 471 // { int|sys||unlinkat(int fd, const char *path, int flag); }
+	SYS_FUTIMENS             = 472 // { int|sys||futimens(int fd, const struct timespec *tptr); }
+	SYS___QUOTACTL           = 473 // { int|sys||__quotactl(const char *path, struct quotactl_args *args); }
+	SYS_POSIX_SPAWN          = 474 // { int|sys||posix_spawn(pid_t *pid, const char *path, const struct posix_spawn_file_actions *file_actions, const struct posix_spawnattr *attrp, char *const *argv, char *const *envp); }
+	SYS_RECVMMSG             = 475 // { int|sys||recvmmsg(int s, struct mmsghdr *mmsg, unsigned int vlen, unsigned int flags, struct timespec *timeout); }
+	SYS_SENDMMSG             = 476 // { int|sys||sendmmsg(int s, struct mmsghdr *mmsg, unsigned int vlen, unsigned int flags); }
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_netbsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_netbsd_arm64.go
new file mode 100644
index 000000000..0291c0931
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_netbsd_arm64.go
@@ -0,0 +1,274 @@
+// go run mksysnum.go http://cvsweb.netbsd.org/bsdweb.cgi/~checkout~/src/sys/kern/syscalls.master
+// Code generated by the command above; DO NOT EDIT.
+
+// +build arm64,netbsd
+
+package unix
+
+const (
+	SYS_EXIT                 = 1   // { void|sys||exit(int rval); }
+	SYS_FORK                 = 2   // { int|sys||fork(void); }
+	SYS_READ                 = 3   // { ssize_t|sys||read(int fd, void *buf, size_t nbyte); }
+	SYS_WRITE                = 4   // { ssize_t|sys||write(int fd, const void *buf, size_t nbyte); }
+	SYS_OPEN                 = 5   // { int|sys||open(const char *path, int flags, ... mode_t mode); }
+	SYS_CLOSE                = 6   // { int|sys||close(int fd); }
+	SYS_LINK                 = 9   // { int|sys||link(const char *path, const char *link); }
+	SYS_UNLINK               = 10  // { int|sys||unlink(const char *path); }
+	SYS_CHDIR                = 12  // { int|sys||chdir(const char *path); }
+	SYS_FCHDIR               = 13  // { int|sys||fchdir(int fd); }
+	SYS_CHMOD                = 15  // { int|sys||chmod(const char *path, mode_t mode); }
+	SYS_CHOWN                = 16  // { int|sys||chown(const char *path, uid_t uid, gid_t gid); }
+	SYS_BREAK                = 17  // { int|sys||obreak(char *nsize); }
+	SYS_GETPID               = 20  // { pid_t|sys||getpid_with_ppid(void); }
+	SYS_UNMOUNT              = 22  // { int|sys||unmount(const char *path, int flags); }
+	SYS_SETUID               = 23  // { int|sys||setuid(uid_t uid); }
+	SYS_GETUID               = 24  // { uid_t|sys||getuid_with_euid(void); }
+	SYS_GETEUID              = 25  // { uid_t|sys||geteuid(void); }
+	SYS_PTRACE               = 26  // { int|sys||ptrace(int req, pid_t pid, void *addr, int data); }
+	SYS_RECVMSG              = 27  // { ssize_t|sys||recvmsg(int s, struct msghdr *msg, int flags); }
+	SYS_SENDMSG              = 28  // { ssize_t|sys||sendmsg(int s, const struct msghdr *msg, int flags); }
+	SYS_RECVFROM             = 29  // { ssize_t|sys||recvfrom(int s, void *buf, size_t len, int flags, struct sockaddr *from, socklen_t *fromlenaddr); }
+	SYS_ACCEPT               = 30  // { int|sys||accept(int s, struct sockaddr *name, socklen_t *anamelen); }
+	SYS_GETPEERNAME          = 31  // { int|sys||getpeername(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_GETSOCKNAME          = 32  // { int|sys||getsockname(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_ACCESS               = 33  // { int|sys||access(const char *path, int flags); }
+	SYS_CHFLAGS              = 34  // { int|sys||chflags(const char *path, u_long flags); }
+	SYS_FCHFLAGS             = 35  // { int|sys||fchflags(int fd, u_long flags); }
+	SYS_SYNC                 = 36  // { void|sys||sync(void); }
+	SYS_KILL                 = 37  // { int|sys||kill(pid_t pid, int signum); }
+	SYS_GETPPID              = 39  // { pid_t|sys||getppid(void); }
+	SYS_DUP                  = 41  // { int|sys||dup(int fd); }
+	SYS_PIPE                 = 42  // { int|sys||pipe(void); }
+	SYS_GETEGID              = 43  // { gid_t|sys||getegid(void); }
+	SYS_PROFIL               = 44  // { int|sys||profil(char *samples, size_t size, u_long offset, u_int scale); }
+	SYS_KTRACE               = 45  // { int|sys||ktrace(const char *fname, int ops, int facs, pid_t pid); }
+	SYS_GETGID               = 47  // { gid_t|sys||getgid_with_egid(void); }
+	SYS___GETLOGIN           = 49  // { int|sys||__getlogin(char *namebuf, size_t namelen); }
+	SYS___SETLOGIN           = 50  // { int|sys||__setlogin(const char *namebuf); }
+	SYS_ACCT                 = 51  // { int|sys||acct(const char *path); }
+	SYS_IOCTL                = 54  // { int|sys||ioctl(int fd, u_long com, ... void *data); }
+	SYS_REVOKE               = 56  // { int|sys||revoke(const char *path); }
+	SYS_SYMLINK              = 57  // { int|sys||symlink(const char *path, const char *link); }
+	SYS_READLINK             = 58  // { ssize_t|sys||readlink(const char *path, char *buf, size_t count); }
+	SYS_EXECVE               = 59  // { int|sys||execve(const char *path, char * const *argp, char * const *envp); }
+	SYS_UMASK                = 60  // { mode_t|sys||umask(mode_t newmask); }
+	SYS_CHROOT               = 61  // { int|sys||chroot(const char *path); }
+	SYS_VFORK                = 66  // { int|sys||vfork(void); }
+	SYS_SBRK                 = 69  // { int|sys||sbrk(intptr_t incr); }
+	SYS_SSTK                 = 70  // { int|sys||sstk(int incr); }
+	SYS_VADVISE              = 72  // { int|sys||ovadvise(int anom); }
+	SYS_MUNMAP               = 73  // { int|sys||munmap(void *addr, size_t len); }
+	SYS_MPROTECT             = 74  // { int|sys||mprotect(void *addr, size_t len, int prot); }
+	SYS_MADVISE              = 75  // { int|sys||madvise(void *addr, size_t len, int behav); }
+	SYS_MINCORE              = 78  // { int|sys||mincore(void *addr, size_t len, char *vec); }
+	SYS_GETGROUPS            = 79  // { int|sys||getgroups(int gidsetsize, gid_t *gidset); }
+	SYS_SETGROUPS            = 80  // { int|sys||setgroups(int gidsetsize, const gid_t *gidset); }
+	SYS_GETPGRP              = 81  // { int|sys||getpgrp(void); }
+	SYS_SETPGID              = 82  // { int|sys||setpgid(pid_t pid, pid_t pgid); }
+	SYS_DUP2                 = 90  // { int|sys||dup2(int from, int to); }
+	SYS_FCNTL                = 92  // { int|sys||fcntl(int fd, int cmd, ... void *arg); }
+	SYS_FSYNC                = 95  // { int|sys||fsync(int fd); }
+	SYS_SETPRIORITY          = 96  // { int|sys||setpriority(int which, id_t who, int prio); }
+	SYS_CONNECT              = 98  // { int|sys||connect(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_GETPRIORITY          = 100 // { int|sys||getpriority(int which, id_t who); }
+	SYS_BIND                 = 104 // { int|sys||bind(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_SETSOCKOPT           = 105 // { int|sys||setsockopt(int s, int level, int name, const void *val, socklen_t valsize); }
+	SYS_LISTEN               = 106 // { int|sys||listen(int s, int backlog); }
+	SYS_GETSOCKOPT           = 118 // { int|sys||getsockopt(int s, int level, int name, void *val, socklen_t *avalsize); }
+	SYS_READV                = 120 // { ssize_t|sys||readv(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_WRITEV               = 121 // { ssize_t|sys||writev(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_FCHOWN               = 123 // { int|sys||fchown(int fd, uid_t uid, gid_t gid); }
+	SYS_FCHMOD               = 124 // { int|sys||fchmod(int fd, mode_t mode); }
+	SYS_SETREUID             = 126 // { int|sys||setreuid(uid_t ruid, uid_t euid); }
+	SYS_SETREGID             = 127 // { int|sys||setregid(gid_t rgid, gid_t egid); }
+	SYS_RENAME               = 128 // { int|sys||rename(const char *from, const char *to); }
+	SYS_FLOCK                = 131 // { int|sys||flock(int fd, int how); }
+	SYS_MKFIFO               = 132 // { int|sys||mkfifo(const char *path, mode_t mode); }
+	SYS_SENDTO               = 133 // { ssize_t|sys||sendto(int s, const void *buf, size_t len, int flags, const struct sockaddr *to, socklen_t tolen); }
+	SYS_SHUTDOWN             = 134 // { int|sys||shutdown(int s, int how); }
+	SYS_SOCKETPAIR           = 135 // { int|sys||socketpair(int domain, int type, int protocol, int *rsv); }
+	SYS_MKDIR                = 136 // { int|sys||mkdir(const char *path, mode_t mode); }
+	SYS_RMDIR                = 137 // { int|sys||rmdir(const char *path); }
+	SYS_SETSID               = 147 // { int|sys||setsid(void); }
+	SYS_SYSARCH              = 165 // { int|sys||sysarch(int op, void *parms); }
+	SYS_PREAD                = 173 // { ssize_t|sys||pread(int fd, void *buf, size_t nbyte, int PAD, off_t offset); }
+	SYS_PWRITE               = 174 // { ssize_t|sys||pwrite(int fd, const void *buf, size_t nbyte, int PAD, off_t offset); }
+	SYS_NTP_ADJTIME          = 176 // { int|sys||ntp_adjtime(struct timex *tp); }
+	SYS_SETGID               = 181 // { int|sys||setgid(gid_t gid); }
+	SYS_SETEGID              = 182 // { int|sys||setegid(gid_t egid); }
+	SYS_SETEUID              = 183 // { int|sys||seteuid(uid_t euid); }
+	SYS_PATHCONF             = 191 // { long|sys||pathconf(const char *path, int name); }
+	SYS_FPATHCONF            = 192 // { long|sys||fpathconf(int fd, int name); }
+	SYS_GETRLIMIT            = 194 // { int|sys||getrlimit(int which, struct rlimit *rlp); }
+	SYS_SETRLIMIT            = 195 // { int|sys||setrlimit(int which, const struct rlimit *rlp); }
+	SYS_MMAP                 = 197 // { void *|sys||mmap(void *addr, size_t len, int prot, int flags, int fd, long PAD, off_t pos); }
+	SYS_LSEEK                = 199 // { off_t|sys||lseek(int fd, int PAD, off_t offset, int whence); }
+	SYS_TRUNCATE             = 200 // { int|sys||truncate(const char *path, int PAD, off_t length); }
+	SYS_FTRUNCATE            = 201 // { int|sys||ftruncate(int fd, int PAD, off_t length); }
+	SYS___SYSCTL             = 202 // { int|sys||__sysctl(const int *name, u_int namelen, void *old, size_t *oldlenp, const void *new, size_t newlen); }
+	SYS_MLOCK                = 203 // { int|sys||mlock(const void *addr, size_t len); }
+	SYS_MUNLOCK              = 204 // { int|sys||munlock(const void *addr, size_t len); }
+	SYS_UNDELETE             = 205 // { int|sys||undelete(const char *path); }
+	SYS_GETPGID              = 207 // { pid_t|sys||getpgid(pid_t pid); }
+	SYS_REBOOT               = 208 // { int|sys||reboot(int opt, char *bootstr); }
+	SYS_POLL                 = 209 // { int|sys||poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_SEMGET               = 221 // { int|sys||semget(key_t key, int nsems, int semflg); }
+	SYS_SEMOP                = 222 // { int|sys||semop(int semid, struct sembuf *sops, size_t nsops); }
+	SYS_SEMCONFIG            = 223 // { int|sys||semconfig(int flag); }
+	SYS_MSGGET               = 225 // { int|sys||msgget(key_t key, int msgflg); }
+	SYS_MSGSND               = 226 // { int|sys||msgsnd(int msqid, const void *msgp, size_t msgsz, int msgflg); }
+	SYS_MSGRCV               = 227 // { ssize_t|sys||msgrcv(int msqid, void *msgp, size_t msgsz, long msgtyp, int msgflg); }
+	SYS_SHMAT                = 228 // { void *|sys||shmat(int shmid, const void *shmaddr, int shmflg); }
+	SYS_SHMDT                = 230 // { int|sys||shmdt(const void *shmaddr); }
+	SYS_SHMGET               = 231 // { int|sys||shmget(key_t key, size_t size, int shmflg); }
+	SYS_TIMER_CREATE         = 235 // { int|sys||timer_create(clockid_t clock_id, struct sigevent *evp, timer_t *timerid); }
+	SYS_TIMER_DELETE         = 236 // { int|sys||timer_delete(timer_t timerid); }
+	SYS_TIMER_GETOVERRUN     = 239 // { int|sys||timer_getoverrun(timer_t timerid); }
+	SYS_FDATASYNC            = 241 // { int|sys||fdatasync(int fd); }
+	SYS_MLOCKALL             = 242 // { int|sys||mlockall(int flags); }
+	SYS_MUNLOCKALL           = 243 // { int|sys||munlockall(void); }
+	SYS_SIGQUEUEINFO         = 245 // { int|sys||sigqueueinfo(pid_t pid, const siginfo_t *info); }
+	SYS_MODCTL               = 246 // { int|sys||modctl(int cmd, void *arg); }
+	SYS___POSIX_RENAME       = 270 // { int|sys||__posix_rename(const char *from, const char *to); }
+	SYS_SWAPCTL              = 271 // { int|sys||swapctl(int cmd, void *arg, int misc); }
+	SYS_MINHERIT             = 273 // { int|sys||minherit(void *addr, size_t len, int inherit); }
+	SYS_LCHMOD               = 274 // { int|sys||lchmod(const char *path, mode_t mode); }
+	SYS_LCHOWN               = 275 // { int|sys||lchown(const char *path, uid_t uid, gid_t gid); }
+	SYS_MSYNC                = 277 // { int|sys|13|msync(void *addr, size_t len, int flags); }
+	SYS___POSIX_CHOWN        = 283 // { int|sys||__posix_chown(const char *path, uid_t uid, gid_t gid); }
+	SYS___POSIX_FCHOWN       = 284 // { int|sys||__posix_fchown(int fd, uid_t uid, gid_t gid); }
+	SYS___POSIX_LCHOWN       = 285 // { int|sys||__posix_lchown(const char *path, uid_t uid, gid_t gid); }
+	SYS_GETSID               = 286 // { pid_t|sys||getsid(pid_t pid); }
+	SYS___CLONE              = 287 // { pid_t|sys||__clone(int flags, void *stack); }
+	SYS_FKTRACE              = 288 // { int|sys||fktrace(int fd, int ops, int facs, pid_t pid); }
+	SYS_PREADV               = 289 // { ssize_t|sys||preadv(int fd, const struct iovec *iovp, int iovcnt, int PAD, off_t offset); }
+	SYS_PWRITEV              = 290 // { ssize_t|sys||pwritev(int fd, const struct iovec *iovp, int iovcnt, int PAD, off_t offset); }
+	SYS___GETCWD             = 296 // { int|sys||__getcwd(char *bufp, size_t length); }
+	SYS_FCHROOT              = 297 // { int|sys||fchroot(int fd); }
+	SYS_LCHFLAGS             = 304 // { int|sys||lchflags(const char *path, u_long flags); }
+	SYS_ISSETUGID            = 305 // { int|sys||issetugid(void); }
+	SYS_UTRACE               = 306 // { int|sys||utrace(const char *label, void *addr, size_t len); }
+	SYS_GETCONTEXT           = 307 // { int|sys||getcontext(struct __ucontext *ucp); }
+	SYS_SETCONTEXT           = 308 // { int|sys||setcontext(const struct __ucontext *ucp); }
+	SYS__LWP_CREATE          = 309 // { int|sys||_lwp_create(const struct __ucontext *ucp, u_long flags, lwpid_t *new_lwp); }
+	SYS__LWP_EXIT            = 310 // { int|sys||_lwp_exit(void); }
+	SYS__LWP_SELF            = 311 // { lwpid_t|sys||_lwp_self(void); }
+	SYS__LWP_WAIT            = 312 // { int|sys||_lwp_wait(lwpid_t wait_for, lwpid_t *departed); }
+	SYS__LWP_SUSPEND         = 313 // { int|sys||_lwp_suspend(lwpid_t target); }
+	SYS__LWP_CONTINUE        = 314 // { int|sys||_lwp_continue(lwpid_t target); }
+	SYS__LWP_WAKEUP          = 315 // { int|sys||_lwp_wakeup(lwpid_t target); }
+	SYS__LWP_GETPRIVATE      = 316 // { void *|sys||_lwp_getprivate(void); }
+	SYS__LWP_SETPRIVATE      = 317 // { void|sys||_lwp_setprivate(void *ptr); }
+	SYS__LWP_KILL            = 318 // { int|sys||_lwp_kill(lwpid_t target, int signo); }
+	SYS__LWP_DETACH          = 319 // { int|sys||_lwp_detach(lwpid_t target); }
+	SYS__LWP_UNPARK          = 321 // { int|sys||_lwp_unpark(lwpid_t target, const void *hint); }
+	SYS__LWP_UNPARK_ALL      = 322 // { ssize_t|sys||_lwp_unpark_all(const lwpid_t *targets, size_t ntargets, const void *hint); }
+	SYS__LWP_SETNAME         = 323 // { int|sys||_lwp_setname(lwpid_t target, const char *name); }
+	SYS__LWP_GETNAME         = 324 // { int|sys||_lwp_getname(lwpid_t target, char *name, size_t len); }
+	SYS__LWP_CTL             = 325 // { int|sys||_lwp_ctl(int features, struct lwpctl **address); }
+	SYS___SIGACTION_SIGTRAMP = 340 // { int|sys||__sigaction_sigtramp(int signum, const struct sigaction *nsa, struct sigaction *osa, const void *tramp, int vers); }
+	SYS_PMC_GET_INFO         = 341 // { int|sys||pmc_get_info(int ctr, int op, void *args); }
+	SYS_PMC_CONTROL          = 342 // { int|sys||pmc_control(int ctr, int op, void *args); }
+	SYS_RASCTL               = 343 // { int|sys||rasctl(void *addr, size_t len, int op); }
+	SYS_KQUEUE               = 344 // { int|sys||kqueue(void); }
+	SYS__SCHED_SETPARAM      = 346 // { int|sys||_sched_setparam(pid_t pid, lwpid_t lid, int policy, const struct sched_param *params); }
+	SYS__SCHED_GETPARAM      = 347 // { int|sys||_sched_getparam(pid_t pid, lwpid_t lid, int *policy, struct sched_param *params); }
+	SYS__SCHED_SETAFFINITY   = 348 // { int|sys||_sched_setaffinity(pid_t pid, lwpid_t lid, size_t size, const cpuset_t *cpuset); }
+	SYS__SCHED_GETAFFINITY   = 349 // { int|sys||_sched_getaffinity(pid_t pid, lwpid_t lid, size_t size, cpuset_t *cpuset); }
+	SYS_SCHED_YIELD          = 350 // { int|sys||sched_yield(void); }
+	SYS_FSYNC_RANGE          = 354 // { int|sys||fsync_range(int fd, int flags, off_t start, off_t length); }
+	SYS_UUIDGEN              = 355 // { int|sys||uuidgen(struct uuid *store, int count); }
+	SYS_GETVFSSTAT           = 356 // { int|sys||getvfsstat(struct statvfs *buf, size_t bufsize, int flags); }
+	SYS_STATVFS1             = 357 // { int|sys||statvfs1(const char *path, struct statvfs *buf, int flags); }
+	SYS_FSTATVFS1            = 358 // { int|sys||fstatvfs1(int fd, struct statvfs *buf, int flags); }
+	SYS_EXTATTRCTL           = 360 // { int|sys||extattrctl(const char *path, int cmd, const char *filename, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_FILE     = 361 // { int|sys||extattr_set_file(const char *path, int attrnamespace, const char *attrname, const void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FILE     = 362 // { ssize_t|sys||extattr_get_file(const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FILE  = 363 // { int|sys||extattr_delete_file(const char *path, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_FD       = 364 // { int|sys||extattr_set_fd(int fd, int attrnamespace, const char *attrname, const void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_FD       = 365 // { ssize_t|sys||extattr_get_fd(int fd, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_FD    = 366 // { int|sys||extattr_delete_fd(int fd, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_SET_LINK     = 367 // { int|sys||extattr_set_link(const char *path, int attrnamespace, const char *attrname, const void *data, size_t nbytes); }
+	SYS_EXTATTR_GET_LINK     = 368 // { ssize_t|sys||extattr_get_link(const char *path, int attrnamespace, const char *attrname, void *data, size_t nbytes); }
+	SYS_EXTATTR_DELETE_LINK  = 369 // { int|sys||extattr_delete_link(const char *path, int attrnamespace, const char *attrname); }
+	SYS_EXTATTR_LIST_FD      = 370 // { ssize_t|sys||extattr_list_fd(int fd, int attrnamespace, void *data, size_t nbytes); }
+	SYS_EXTATTR_LIST_FILE    = 371 // { ssize_t|sys||extattr_list_file(const char *path, int attrnamespace, void *data, size_t nbytes); }
+	SYS_EXTATTR_LIST_LINK    = 372 // { ssize_t|sys||extattr_list_link(const char *path, int attrnamespace, void *data, size_t nbytes); }
+	SYS_SETXATTR             = 375 // { int|sys||setxattr(const char *path, const char *name, const void *value, size_t size, int flags); }
+	SYS_LSETXATTR            = 376 // { int|sys||lsetxattr(const char *path, const char *name, const void *value, size_t size, int flags); }
+	SYS_FSETXATTR            = 377 // { int|sys||fsetxattr(int fd, const char *name, const void *value, size_t size, int flags); }
+	SYS_GETXATTR             = 378 // { int|sys||getxattr(const char *path, const char *name, void *value, size_t size); }
+	SYS_LGETXATTR            = 379 // { int|sys||lgetxattr(const char *path, const char *name, void *value, size_t size); }
+	SYS_FGETXATTR            = 380 // { int|sys||fgetxattr(int fd, const char *name, void *value, size_t size); }
+	SYS_LISTXATTR            = 381 // { int|sys||listxattr(const char *path, char *list, size_t size); }
+	SYS_LLISTXATTR           = 382 // { int|sys||llistxattr(const char *path, char *list, size_t size); }
+	SYS_FLISTXATTR           = 383 // { int|sys||flistxattr(int fd, char *list, size_t size); }
+	SYS_REMOVEXATTR          = 384 // { int|sys||removexattr(const char *path, const char *name); }
+	SYS_LREMOVEXATTR         = 385 // { int|sys||lremovexattr(const char *path, const char *name); }
+	SYS_FREMOVEXATTR         = 386 // { int|sys||fremovexattr(int fd, const char *name); }
+	SYS_GETDENTS             = 390 // { int|sys|30|getdents(int fd, char *buf, size_t count); }
+	SYS_SOCKET               = 394 // { int|sys|30|socket(int domain, int type, int protocol); }
+	SYS_GETFH                = 395 // { int|sys|30|getfh(const char *fname, void *fhp, size_t *fh_size); }
+	SYS_MOUNT                = 410 // { int|sys|50|mount(const char *type, const char *path, int flags, void *data, size_t data_len); }
+	SYS_MREMAP               = 411 // { void *|sys||mremap(void *old_address, size_t old_size, void *new_address, size_t new_size, int flags); }
+	SYS_PSET_CREATE          = 412 // { int|sys||pset_create(psetid_t *psid); }
+	SYS_PSET_DESTROY         = 413 // { int|sys||pset_destroy(psetid_t psid); }
+	SYS_PSET_ASSIGN          = 414 // { int|sys||pset_assign(psetid_t psid, cpuid_t cpuid, psetid_t *opsid); }
+	SYS__PSET_BIND           = 415 // { int|sys||_pset_bind(idtype_t idtype, id_t first_id, id_t second_id, psetid_t psid, psetid_t *opsid); }
+	SYS_POSIX_FADVISE        = 416 // { int|sys|50|posix_fadvise(int fd, int PAD, off_t offset, off_t len, int advice); }
+	SYS_SELECT               = 417 // { int|sys|50|select(int nd, fd_set *in, fd_set *ou, fd_set *ex, struct timeval *tv); }
+	SYS_GETTIMEOFDAY         = 418 // { int|sys|50|gettimeofday(struct timeval *tp, void *tzp); }
+	SYS_SETTIMEOFDAY         = 419 // { int|sys|50|settimeofday(const struct timeval *tv, const void *tzp); }
+	SYS_UTIMES               = 420 // { int|sys|50|utimes(const char *path, const struct timeval *tptr); }
+	SYS_ADJTIME              = 421 // { int|sys|50|adjtime(const struct timeval *delta, struct timeval *olddelta); }
+	SYS_FUTIMES              = 423 // { int|sys|50|futimes(int fd, const struct timeval *tptr); }
+	SYS_LUTIMES              = 424 // { int|sys|50|lutimes(const char *path, const struct timeval *tptr); }
+	SYS_SETITIMER            = 425 // { int|sys|50|setitimer(int which, const struct itimerval *itv, struct itimerval *oitv); }
+	SYS_GETITIMER            = 426 // { int|sys|50|getitimer(int which, struct itimerval *itv); }
+	SYS_CLOCK_GETTIME        = 427 // { int|sys|50|clock_gettime(clockid_t clock_id, struct timespec *tp); }
+	SYS_CLOCK_SETTIME        = 428 // { int|sys|50|clock_settime(clockid_t clock_id, const struct timespec *tp); }
+	SYS_CLOCK_GETRES         = 429 // { int|sys|50|clock_getres(clockid_t clock_id, struct timespec *tp); }
+	SYS_NANOSLEEP            = 430 // { int|sys|50|nanosleep(const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS___SIGTIMEDWAIT       = 431 // { int|sys|50|__sigtimedwait(const sigset_t *set, siginfo_t *info, struct timespec *timeout); }
+	SYS__LWP_PARK            = 434 // { int|sys|50|_lwp_park(const struct timespec *ts, lwpid_t unpark, const void *hint, const void *unparkhint); }
+	SYS_KEVENT               = 435 // { int|sys|50|kevent(int fd, const struct kevent *changelist, size_t nchanges, struct kevent *eventlist, size_t nevents, const struct timespec *timeout); }
+	SYS_PSELECT              = 436 // { int|sys|50|pselect(int nd, fd_set *in, fd_set *ou, fd_set *ex, const struct timespec *ts, const sigset_t *mask); }
+	SYS_POLLTS               = 437 // { int|sys|50|pollts(struct pollfd *fds, u_int nfds, const struct timespec *ts, const sigset_t *mask); }
+	SYS_STAT                 = 439 // { int|sys|50|stat(const char *path, struct stat *ub); }
+	SYS_FSTAT                = 440 // { int|sys|50|fstat(int fd, struct stat *sb); }
+	SYS_LSTAT                = 441 // { int|sys|50|lstat(const char *path, struct stat *ub); }
+	SYS___SEMCTL             = 442 // { int|sys|50|__semctl(int semid, int semnum, int cmd, ... union __semun *arg); }
+	SYS_SHMCTL               = 443 // { int|sys|50|shmctl(int shmid, int cmd, struct shmid_ds *buf); }
+	SYS_MSGCTL               = 444 // { int|sys|50|msgctl(int msqid, int cmd, struct msqid_ds *buf); }
+	SYS_GETRUSAGE            = 445 // { int|sys|50|getrusage(int who, struct rusage *rusage); }
+	SYS_TIMER_SETTIME        = 446 // { int|sys|50|timer_settime(timer_t timerid, int flags, const struct itimerspec *value, struct itimerspec *ovalue); }
+	SYS_TIMER_GETTIME        = 447 // { int|sys|50|timer_gettime(timer_t timerid, struct itimerspec *value); }
+	SYS_NTP_GETTIME          = 448 // { int|sys|50|ntp_gettime(struct ntptimeval *ntvp); }
+	SYS_WAIT4                = 449 // { int|sys|50|wait4(pid_t pid, int *status, int options, struct rusage *rusage); }
+	SYS_MKNOD                = 450 // { int|sys|50|mknod(const char *path, mode_t mode, dev_t dev); }
+	SYS_FHSTAT               = 451 // { int|sys|50|fhstat(const void *fhp, size_t fh_size, struct stat *sb); }
+	SYS_PIPE2                = 453 // { int|sys||pipe2(int *fildes, int flags); }
+	SYS_DUP3                 = 454 // { int|sys||dup3(int from, int to, int flags); }
+	SYS_KQUEUE1              = 455 // { int|sys||kqueue1(int flags); }
+	SYS_PACCEPT              = 456 // { int|sys||paccept(int s, struct sockaddr *name, socklen_t *anamelen, const sigset_t *mask, int flags); }
+	SYS_LINKAT               = 457 // { int|sys||linkat(int fd1, const char *name1, int fd2, const char *name2, int flags); }
+	SYS_RENAMEAT             = 458 // { int|sys||renameat(int fromfd, const char *from, int tofd, const char *to); }
+	SYS_MKFIFOAT             = 459 // { int|sys||mkfifoat(int fd, const char *path, mode_t mode); }
+	SYS_MKNODAT              = 460 // { int|sys||mknodat(int fd, const char *path, mode_t mode, uint32_t dev); }
+	SYS_MKDIRAT              = 461 // { int|sys||mkdirat(int fd, const char *path, mode_t mode); }
+	SYS_FACCESSAT            = 462 // { int|sys||faccessat(int fd, const char *path, int amode, int flag); }
+	SYS_FCHMODAT             = 463 // { int|sys||fchmodat(int fd, const char *path, mode_t mode, int flag); }
+	SYS_FCHOWNAT             = 464 // { int|sys||fchownat(int fd, const char *path, uid_t owner, gid_t group, int flag); }
+	SYS_FEXECVE              = 465 // { int|sys||fexecve(int fd, char * const *argp, char * const *envp); }
+	SYS_FSTATAT              = 466 // { int|sys||fstatat(int fd, const char *path, struct stat *buf, int flag); }
+	SYS_UTIMENSAT            = 467 // { int|sys||utimensat(int fd, const char *path, const struct timespec *tptr, int flag); }
+	SYS_OPENAT               = 468 // { int|sys||openat(int fd, const char *path, int oflags, ... mode_t mode); }
+	SYS_READLINKAT           = 469 // { int|sys||readlinkat(int fd, const char *path, char *buf, size_t bufsize); }
+	SYS_SYMLINKAT            = 470 // { int|sys||symlinkat(const char *path1, int fd, const char *path2); }
+	SYS_UNLINKAT             = 471 // { int|sys||unlinkat(int fd, const char *path, int flag); }
+	SYS_FUTIMENS             = 472 // { int|sys||futimens(int fd, const struct timespec *tptr); }
+	SYS___QUOTACTL           = 473 // { int|sys||__quotactl(const char *path, struct quotactl_args *args); }
+	SYS_POSIX_SPAWN          = 474 // { int|sys||posix_spawn(pid_t *pid, const char *path, const struct posix_spawn_file_actions *file_actions, const struct posix_spawnattr *attrp, char *const *argv, char *const *envp); }
+	SYS_RECVMMSG             = 475 // { int|sys||recvmmsg(int s, struct mmsghdr *mmsg, unsigned int vlen, unsigned int flags, struct timespec *timeout); }
+	SYS_SENDMMSG             = 476 // { int|sys||sendmmsg(int s, struct mmsghdr *mmsg, unsigned int vlen, unsigned int flags); }
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_386.go
new file mode 100644
index 000000000..b0207d1c9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_386.go
@@ -0,0 +1,218 @@
+// go run mksysnum.go https://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/sys/kern/syscalls.master
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build 386,openbsd
+
+package unix
+
+const (
+	SYS_EXIT           = 1   // { void sys_exit(int rval); }
+	SYS_FORK           = 2   // { int sys_fork(void); }
+	SYS_READ           = 3   // { ssize_t sys_read(int fd, void *buf, size_t nbyte); }
+	SYS_WRITE          = 4   // { ssize_t sys_write(int fd, const void *buf, size_t nbyte); }
+	SYS_OPEN           = 5   // { int sys_open(const char *path, int flags, ... mode_t mode); }
+	SYS_CLOSE          = 6   // { int sys_close(int fd); }
+	SYS_GETENTROPY     = 7   // { int sys_getentropy(void *buf, size_t nbyte); }
+	SYS___TFORK        = 8   // { int sys___tfork(const struct __tfork *param, size_t psize); }
+	SYS_LINK           = 9   // { int sys_link(const char *path, const char *link); }
+	SYS_UNLINK         = 10  // { int sys_unlink(const char *path); }
+	SYS_WAIT4          = 11  // { pid_t sys_wait4(pid_t pid, int *status, int options, struct rusage *rusage); }
+	SYS_CHDIR          = 12  // { int sys_chdir(const char *path); }
+	SYS_FCHDIR         = 13  // { int sys_fchdir(int fd); }
+	SYS_MKNOD          = 14  // { int sys_mknod(const char *path, mode_t mode, dev_t dev); }
+	SYS_CHMOD          = 15  // { int sys_chmod(const char *path, mode_t mode); }
+	SYS_CHOWN          = 16  // { int sys_chown(const char *path, uid_t uid, gid_t gid); }
+	SYS_OBREAK         = 17  // { int sys_obreak(char *nsize); } break
+	SYS_GETDTABLECOUNT = 18  // { int sys_getdtablecount(void); }
+	SYS_GETRUSAGE      = 19  // { int sys_getrusage(int who, struct rusage *rusage); }
+	SYS_GETPID         = 20  // { pid_t sys_getpid(void); }
+	SYS_MOUNT          = 21  // { int sys_mount(const char *type, const char *path, int flags, void *data); }
+	SYS_UNMOUNT        = 22  // { int sys_unmount(const char *path, int flags); }
+	SYS_SETUID         = 23  // { int sys_setuid(uid_t uid); }
+	SYS_GETUID         = 24  // { uid_t sys_getuid(void); }
+	SYS_GETEUID        = 25  // { uid_t sys_geteuid(void); }
+	SYS_PTRACE         = 26  // { int sys_ptrace(int req, pid_t pid, caddr_t addr, int data); }
+	SYS_RECVMSG        = 27  // { ssize_t sys_recvmsg(int s, struct msghdr *msg, int flags); }
+	SYS_SENDMSG        = 28  // { ssize_t sys_sendmsg(int s, const struct msghdr *msg, int flags); }
+	SYS_RECVFROM       = 29  // { ssize_t sys_recvfrom(int s, void *buf, size_t len, int flags, struct sockaddr *from, socklen_t *fromlenaddr); }
+	SYS_ACCEPT         = 30  // { int sys_accept(int s, struct sockaddr *name, socklen_t *anamelen); }
+	SYS_GETPEERNAME    = 31  // { int sys_getpeername(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_GETSOCKNAME    = 32  // { int sys_getsockname(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_ACCESS         = 33  // { int sys_access(const char *path, int amode); }
+	SYS_CHFLAGS        = 34  // { int sys_chflags(const char *path, u_int flags); }
+	SYS_FCHFLAGS       = 35  // { int sys_fchflags(int fd, u_int flags); }
+	SYS_SYNC           = 36  // { void sys_sync(void); }
+	SYS_STAT           = 38  // { int sys_stat(const char *path, struct stat *ub); }
+	SYS_GETPPID        = 39  // { pid_t sys_getppid(void); }
+	SYS_LSTAT          = 40  // { int sys_lstat(const char *path, struct stat *ub); }
+	SYS_DUP            = 41  // { int sys_dup(int fd); }
+	SYS_FSTATAT        = 42  // { int sys_fstatat(int fd, const char *path, struct stat *buf, int flag); }
+	SYS_GETEGID        = 43  // { gid_t sys_getegid(void); }
+	SYS_PROFIL         = 44  // { int sys_profil(caddr_t samples, size_t size, u_long offset, u_int scale); }
+	SYS_KTRACE         = 45  // { int sys_ktrace(const char *fname, int ops, int facs, pid_t pid); }
+	SYS_SIGACTION      = 46  // { int sys_sigaction(int signum, const struct sigaction *nsa, struct sigaction *osa); }
+	SYS_GETGID         = 47  // { gid_t sys_getgid(void); }
+	SYS_SIGPROCMASK    = 48  // { int sys_sigprocmask(int how, sigset_t mask); }
+	SYS_SETLOGIN       = 50  // { int sys_setlogin(const char *namebuf); }
+	SYS_ACCT           = 51  // { int sys_acct(const char *path); }
+	SYS_SIGPENDING     = 52  // { int sys_sigpending(void); }
+	SYS_FSTAT          = 53  // { int sys_fstat(int fd, struct stat *sb); }
+	SYS_IOCTL          = 54  // { int sys_ioctl(int fd, u_long com, ... void *data); }
+	SYS_REBOOT         = 55  // { int sys_reboot(int opt); }
+	SYS_REVOKE         = 56  // { int sys_revoke(const char *path); }
+	SYS_SYMLINK        = 57  // { int sys_symlink(const char *path, const char *link); }
+	SYS_READLINK       = 58  // { ssize_t sys_readlink(const char *path, char *buf, size_t count); }
+	SYS_EXECVE         = 59  // { int sys_execve(const char *path, char * const *argp, char * const *envp); }
+	SYS_UMASK          = 60  // { mode_t sys_umask(mode_t newmask); }
+	SYS_CHROOT         = 61  // { int sys_chroot(const char *path); }
+	SYS_GETFSSTAT      = 62  // { int sys_getfsstat(struct statfs *buf, size_t bufsize, int flags); }
+	SYS_STATFS         = 63  // { int sys_statfs(const char *path, struct statfs *buf); }
+	SYS_FSTATFS        = 64  // { int sys_fstatfs(int fd, struct statfs *buf); }
+	SYS_FHSTATFS       = 65  // { int sys_fhstatfs(const fhandle_t *fhp, struct statfs *buf); }
+	SYS_VFORK          = 66  // { int sys_vfork(void); }
+	SYS_GETTIMEOFDAY   = 67  // { int sys_gettimeofday(struct timeval *tp, struct timezone *tzp); }
+	SYS_SETTIMEOFDAY   = 68  // { int sys_settimeofday(const struct timeval *tv, const struct timezone *tzp); }
+	SYS_SETITIMER      = 69  // { int sys_setitimer(int which, const struct itimerval *itv, struct itimerval *oitv); }
+	SYS_GETITIMER      = 70  // { int sys_getitimer(int which, struct itimerval *itv); }
+	SYS_SELECT         = 71  // { int sys_select(int nd, fd_set *in, fd_set *ou, fd_set *ex, struct timeval *tv); }
+	SYS_KEVENT         = 72  // { int sys_kevent(int fd, const struct kevent *changelist, int nchanges, struct kevent *eventlist, int nevents, const struct timespec *timeout); }
+	SYS_MUNMAP         = 73  // { int sys_munmap(void *addr, size_t len); }
+	SYS_MPROTECT       = 74  // { int sys_mprotect(void *addr, size_t len, int prot); }
+	SYS_MADVISE        = 75  // { int sys_madvise(void *addr, size_t len, int behav); }
+	SYS_UTIMES         = 76  // { int sys_utimes(const char *path, const struct timeval *tptr); }
+	SYS_FUTIMES        = 77  // { int sys_futimes(int fd, const struct timeval *tptr); }
+	SYS_MINCORE        = 78  // { int sys_mincore(void *addr, size_t len, char *vec); }
+	SYS_GETGROUPS      = 79  // { int sys_getgroups(int gidsetsize, gid_t *gidset); }
+	SYS_SETGROUPS      = 80  // { int sys_setgroups(int gidsetsize, const gid_t *gidset); }
+	SYS_GETPGRP        = 81  // { int sys_getpgrp(void); }
+	SYS_SETPGID        = 82  // { int sys_setpgid(pid_t pid, pid_t pgid); }
+	SYS_FUTEX          = 83  // { int sys_futex(uint32_t *f, int op, int val, const struct timespec *timeout, uint32_t *g); }
+	SYS_UTIMENSAT      = 84  // { int sys_utimensat(int fd, const char *path, const struct timespec *times, int flag); }
+	SYS_FUTIMENS       = 85  // { int sys_futimens(int fd, const struct timespec *times); }
+	SYS_KBIND          = 86  // { int sys_kbind(const struct __kbind *param, size_t psize, int64_t proc_cookie); }
+	SYS_CLOCK_GETTIME  = 87  // { int sys_clock_gettime(clockid_t clock_id, struct timespec *tp); }
+	SYS_CLOCK_SETTIME  = 88  // { int sys_clock_settime(clockid_t clock_id, const struct timespec *tp); }
+	SYS_CLOCK_GETRES   = 89  // { int sys_clock_getres(clockid_t clock_id, struct timespec *tp); }
+	SYS_DUP2           = 90  // { int sys_dup2(int from, int to); }
+	SYS_NANOSLEEP      = 91  // { int sys_nanosleep(const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS_FCNTL          = 92  // { int sys_fcntl(int fd, int cmd, ... void *arg); }
+	SYS_ACCEPT4        = 93  // { int sys_accept4(int s, struct sockaddr *name, socklen_t *anamelen, int flags); }
+	SYS___THRSLEEP     = 94  // { int sys___thrsleep(const volatile void *ident, clockid_t clock_id, const struct timespec *tp, void *lock, const int *abort); }
+	SYS_FSYNC          = 95  // { int sys_fsync(int fd); }
+	SYS_SETPRIORITY    = 96  // { int sys_setpriority(int which, id_t who, int prio); }
+	SYS_SOCKET         = 97  // { int sys_socket(int domain, int type, int protocol); }
+	SYS_CONNECT        = 98  // { int sys_connect(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_GETDENTS       = 99  // { int sys_getdents(int fd, void *buf, size_t buflen); }
+	SYS_GETPRIORITY    = 100 // { int sys_getpriority(int which, id_t who); }
+	SYS_PIPE2          = 101 // { int sys_pipe2(int *fdp, int flags); }
+	SYS_DUP3           = 102 // { int sys_dup3(int from, int to, int flags); }
+	SYS_SIGRETURN      = 103 // { int sys_sigreturn(struct sigcontext *sigcntxp); }
+	SYS_BIND           = 104 // { int sys_bind(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_SETSOCKOPT     = 105 // { int sys_setsockopt(int s, int level, int name, const void *val, socklen_t valsize); }
+	SYS_LISTEN         = 106 // { int sys_listen(int s, int backlog); }
+	SYS_CHFLAGSAT      = 107 // { int sys_chflagsat(int fd, const char *path, u_int flags, int atflags); }
+	SYS_PLEDGE         = 108 // { int sys_pledge(const char *promises, const char *execpromises); }
+	SYS_PPOLL          = 109 // { int sys_ppoll(struct pollfd *fds, u_int nfds, const struct timespec *ts, const sigset_t *mask); }
+	SYS_PSELECT        = 110 // { int sys_pselect(int nd, fd_set *in, fd_set *ou, fd_set *ex, const struct timespec *ts, const sigset_t *mask); }
+	SYS_SIGSUSPEND     = 111 // { int sys_sigsuspend(int mask); }
+	SYS_SENDSYSLOG     = 112 // { int sys_sendsyslog(const char *buf, size_t nbyte, int flags); }
+	SYS_UNVEIL         = 114 // { int sys_unveil(const char *path, const char *permissions); }
+	SYS_GETSOCKOPT     = 118 // { int sys_getsockopt(int s, int level, int name, void *val, socklen_t *avalsize); }
+	SYS_THRKILL        = 119 // { int sys_thrkill(pid_t tid, int signum, void *tcb); }
+	SYS_READV          = 120 // { ssize_t sys_readv(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_WRITEV         = 121 // { ssize_t sys_writev(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_KILL           = 122 // { int sys_kill(int pid, int signum); }
+	SYS_FCHOWN         = 123 // { int sys_fchown(int fd, uid_t uid, gid_t gid); }
+	SYS_FCHMOD         = 124 // { int sys_fchmod(int fd, mode_t mode); }
+	SYS_SETREUID       = 126 // { int sys_setreuid(uid_t ruid, uid_t euid); }
+	SYS_SETREGID       = 127 // { int sys_setregid(gid_t rgid, gid_t egid); }
+	SYS_RENAME         = 128 // { int sys_rename(const char *from, const char *to); }
+	SYS_FLOCK          = 131 // { int sys_flock(int fd, int how); }
+	SYS_MKFIFO         = 132 // { int sys_mkfifo(const char *path, mode_t mode); }
+	SYS_SENDTO         = 133 // { ssize_t sys_sendto(int s, const void *buf, size_t len, int flags, const struct sockaddr *to, socklen_t tolen); }
+	SYS_SHUTDOWN       = 134 // { int sys_shutdown(int s, int how); }
+	SYS_SOCKETPAIR     = 135 // { int sys_socketpair(int domain, int type, int protocol, int *rsv); }
+	SYS_MKDIR          = 136 // { int sys_mkdir(const char *path, mode_t mode); }
+	SYS_RMDIR          = 137 // { int sys_rmdir(const char *path); }
+	SYS_ADJTIME        = 140 // { int sys_adjtime(const struct timeval *delta, struct timeval *olddelta); }
+	SYS_GETLOGIN_R     = 141 // { int sys_getlogin_r(char *namebuf, u_int namelen); }
+	SYS_SETSID         = 147 // { int sys_setsid(void); }
+	SYS_QUOTACTL       = 148 // { int sys_quotactl(const char *path, int cmd, int uid, char *arg); }
+	SYS_NFSSVC         = 155 // { int sys_nfssvc(int flag, void *argp); }
+	SYS_GETFH          = 161 // { int sys_getfh(const char *fname, fhandle_t *fhp); }
+	SYS_SYSARCH        = 165 // { int sys_sysarch(int op, void *parms); }
+	SYS_PREAD          = 173 // { ssize_t sys_pread(int fd, void *buf, size_t nbyte, int pad, off_t offset); }
+	SYS_PWRITE         = 174 // { ssize_t sys_pwrite(int fd, const void *buf, size_t nbyte, int pad, off_t offset); }
+	SYS_SETGID         = 181 // { int sys_setgid(gid_t gid); }
+	SYS_SETEGID        = 182 // { int sys_setegid(gid_t egid); }
+	SYS_SETEUID        = 183 // { int sys_seteuid(uid_t euid); }
+	SYS_PATHCONF       = 191 // { long sys_pathconf(const char *path, int name); }
+	SYS_FPATHCONF      = 192 // { long sys_fpathconf(int fd, int name); }
+	SYS_SWAPCTL        = 193 // { int sys_swapctl(int cmd, const void *arg, int misc); }
+	SYS_GETRLIMIT      = 194 // { int sys_getrlimit(int which, struct rlimit *rlp); }
+	SYS_SETRLIMIT      = 195 // { int sys_setrlimit(int which, const struct rlimit *rlp); }
+	SYS_MMAP           = 197 // { void *sys_mmap(void *addr, size_t len, int prot, int flags, int fd, long pad, off_t pos); }
+	SYS_LSEEK          = 199 // { off_t sys_lseek(int fd, int pad, off_t offset, int whence); }
+	SYS_TRUNCATE       = 200 // { int sys_truncate(const char *path, int pad, off_t length); }
+	SYS_FTRUNCATE      = 201 // { int sys_ftruncate(int fd, int pad, off_t length); }
+	SYS_SYSCTL         = 202 // { int sys_sysctl(const int *name, u_int namelen, void *old, size_t *oldlenp, void *new, size_t newlen); }
+	SYS_MLOCK          = 203 // { int sys_mlock(const void *addr, size_t len); }
+	SYS_MUNLOCK        = 204 // { int sys_munlock(const void *addr, size_t len); }
+	SYS_GETPGID        = 207 // { pid_t sys_getpgid(pid_t pid); }
+	SYS_UTRACE         = 209 // { int sys_utrace(const char *label, const void *addr, size_t len); }
+	SYS_SEMGET         = 221 // { int sys_semget(key_t key, int nsems, int semflg); }
+	SYS_MSGGET         = 225 // { int sys_msgget(key_t key, int msgflg); }
+	SYS_MSGSND         = 226 // { int sys_msgsnd(int msqid, const void *msgp, size_t msgsz, int msgflg); }
+	SYS_MSGRCV         = 227 // { int sys_msgrcv(int msqid, void *msgp, size_t msgsz, long msgtyp, int msgflg); }
+	SYS_SHMAT          = 228 // { void *sys_shmat(int shmid, const void *shmaddr, int shmflg); }
+	SYS_SHMDT          = 230 // { int sys_shmdt(const void *shmaddr); }
+	SYS_MINHERIT       = 250 // { int sys_minherit(void *addr, size_t len, int inherit); }
+	SYS_POLL           = 252 // { int sys_poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_ISSETUGID      = 253 // { int sys_issetugid(void); }
+	SYS_LCHOWN         = 254 // { int sys_lchown(const char *path, uid_t uid, gid_t gid); }
+	SYS_GETSID         = 255 // { pid_t sys_getsid(pid_t pid); }
+	SYS_MSYNC          = 256 // { int sys_msync(void *addr, size_t len, int flags); }
+	SYS_PIPE           = 263 // { int sys_pipe(int *fdp); }
+	SYS_FHOPEN         = 264 // { int sys_fhopen(const fhandle_t *fhp, int flags); }
+	SYS_PREADV         = 267 // { ssize_t sys_preadv(int fd, const struct iovec *iovp, int iovcnt, int pad, off_t offset); }
+	SYS_PWRITEV        = 268 // { ssize_t sys_pwritev(int fd, const struct iovec *iovp, int iovcnt, int pad, off_t offset); }
+	SYS_KQUEUE         = 269 // { int sys_kqueue(void); }
+	SYS_MLOCKALL       = 271 // { int sys_mlockall(int flags); }
+	SYS_MUNLOCKALL     = 272 // { int sys_munlockall(void); }
+	SYS_GETRESUID      = 281 // { int sys_getresuid(uid_t *ruid, uid_t *euid, uid_t *suid); }
+	SYS_SETRESUID      = 282 // { int sys_setresuid(uid_t ruid, uid_t euid, uid_t suid); }
+	SYS_GETRESGID      = 283 // { int sys_getresgid(gid_t *rgid, gid_t *egid, gid_t *sgid); }
+	SYS_SETRESGID      = 284 // { int sys_setresgid(gid_t rgid, gid_t egid, gid_t sgid); }
+	SYS_MQUERY         = 286 // { void *sys_mquery(void *addr, size_t len, int prot, int flags, int fd, long pad, off_t pos); }
+	SYS_CLOSEFROM      = 287 // { int sys_closefrom(int fd); }
+	SYS_SIGALTSTACK    = 288 // { int sys_sigaltstack(const struct sigaltstack *nss, struct sigaltstack *oss); }
+	SYS_SHMGET         = 289 // { int sys_shmget(key_t key, size_t size, int shmflg); }
+	SYS_SEMOP          = 290 // { int sys_semop(int semid, struct sembuf *sops, size_t nsops); }
+	SYS_FHSTAT         = 294 // { int sys_fhstat(const fhandle_t *fhp, struct stat *sb); }
+	SYS___SEMCTL       = 295 // { int sys___semctl(int semid, int semnum, int cmd, union semun *arg); }
+	SYS_SHMCTL         = 296 // { int sys_shmctl(int shmid, int cmd, struct shmid_ds *buf); }
+	SYS_MSGCTL         = 297 // { int sys_msgctl(int msqid, int cmd, struct msqid_ds *buf); }
+	SYS_SCHED_YIELD    = 298 // { int sys_sched_yield(void); }
+	SYS_GETTHRID       = 299 // { pid_t sys_getthrid(void); }
+	SYS___THRWAKEUP    = 301 // { int sys___thrwakeup(const volatile void *ident, int n); }
+	SYS___THREXIT      = 302 // { void sys___threxit(pid_t *notdead); }
+	SYS___THRSIGDIVERT = 303 // { int sys___thrsigdivert(sigset_t sigmask, siginfo_t *info, const struct timespec *timeout); }
+	SYS___GETCWD       = 304 // { int sys___getcwd(char *buf, size_t len); }
+	SYS_ADJFREQ        = 305 // { int sys_adjfreq(const int64_t *freq, int64_t *oldfreq); }
+	SYS_SETRTABLE      = 310 // { int sys_setrtable(int rtableid); }
+	SYS_GETRTABLE      = 311 // { int sys_getrtable(void); }
+	SYS_FACCESSAT      = 313 // { int sys_faccessat(int fd, const char *path, int amode, int flag); }
+	SYS_FCHMODAT       = 314 // { int sys_fchmodat(int fd, const char *path, mode_t mode, int flag); }
+	SYS_FCHOWNAT       = 315 // { int sys_fchownat(int fd, const char *path, uid_t uid, gid_t gid, int flag); }
+	SYS_LINKAT         = 317 // { int sys_linkat(int fd1, const char *path1, int fd2, const char *path2, int flag); }
+	SYS_MKDIRAT        = 318 // { int sys_mkdirat(int fd, const char *path, mode_t mode); }
+	SYS_MKFIFOAT       = 319 // { int sys_mkfifoat(int fd, const char *path, mode_t mode); }
+	SYS_MKNODAT        = 320 // { int sys_mknodat(int fd, const char *path, mode_t mode, dev_t dev); }
+	SYS_OPENAT         = 321 // { int sys_openat(int fd, const char *path, int flags, ... mode_t mode); }
+	SYS_READLINKAT     = 322 // { ssize_t sys_readlinkat(int fd, const char *path, char *buf, size_t count); }
+	SYS_RENAMEAT       = 323 // { int sys_renameat(int fromfd, const char *from, int tofd, const char *to); }
+	SYS_SYMLINKAT      = 324 // { int sys_symlinkat(const char *path, int fd, const char *link); }
+	SYS_UNLINKAT       = 325 // { int sys_unlinkat(int fd, const char *path, int flag); }
+	SYS___SET_TCB      = 329 // { void sys___set_tcb(void *tcb); }
+	SYS___GET_TCB      = 330 // { void *sys___get_tcb(void); }
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_amd64.go
new file mode 100644
index 000000000..f0dec6f0b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_amd64.go
@@ -0,0 +1,218 @@
+// go run mksysnum.go https://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/sys/kern/syscalls.master
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,openbsd
+
+package unix
+
+const (
+	SYS_EXIT           = 1   // { void sys_exit(int rval); }
+	SYS_FORK           = 2   // { int sys_fork(void); }
+	SYS_READ           = 3   // { ssize_t sys_read(int fd, void *buf, size_t nbyte); }
+	SYS_WRITE          = 4   // { ssize_t sys_write(int fd, const void *buf, size_t nbyte); }
+	SYS_OPEN           = 5   // { int sys_open(const char *path, int flags, ... mode_t mode); }
+	SYS_CLOSE          = 6   // { int sys_close(int fd); }
+	SYS_GETENTROPY     = 7   // { int sys_getentropy(void *buf, size_t nbyte); }
+	SYS___TFORK        = 8   // { int sys___tfork(const struct __tfork *param, size_t psize); }
+	SYS_LINK           = 9   // { int sys_link(const char *path, const char *link); }
+	SYS_UNLINK         = 10  // { int sys_unlink(const char *path); }
+	SYS_WAIT4          = 11  // { pid_t sys_wait4(pid_t pid, int *status, int options, struct rusage *rusage); }
+	SYS_CHDIR          = 12  // { int sys_chdir(const char *path); }
+	SYS_FCHDIR         = 13  // { int sys_fchdir(int fd); }
+	SYS_MKNOD          = 14  // { int sys_mknod(const char *path, mode_t mode, dev_t dev); }
+	SYS_CHMOD          = 15  // { int sys_chmod(const char *path, mode_t mode); }
+	SYS_CHOWN          = 16  // { int sys_chown(const char *path, uid_t uid, gid_t gid); }
+	SYS_OBREAK         = 17  // { int sys_obreak(char *nsize); } break
+	SYS_GETDTABLECOUNT = 18  // { int sys_getdtablecount(void); }
+	SYS_GETRUSAGE      = 19  // { int sys_getrusage(int who, struct rusage *rusage); }
+	SYS_GETPID         = 20  // { pid_t sys_getpid(void); }
+	SYS_MOUNT          = 21  // { int sys_mount(const char *type, const char *path, int flags, void *data); }
+	SYS_UNMOUNT        = 22  // { int sys_unmount(const char *path, int flags); }
+	SYS_SETUID         = 23  // { int sys_setuid(uid_t uid); }
+	SYS_GETUID         = 24  // { uid_t sys_getuid(void); }
+	SYS_GETEUID        = 25  // { uid_t sys_geteuid(void); }
+	SYS_PTRACE         = 26  // { int sys_ptrace(int req, pid_t pid, caddr_t addr, int data); }
+	SYS_RECVMSG        = 27  // { ssize_t sys_recvmsg(int s, struct msghdr *msg, int flags); }
+	SYS_SENDMSG        = 28  // { ssize_t sys_sendmsg(int s, const struct msghdr *msg, int flags); }
+	SYS_RECVFROM       = 29  // { ssize_t sys_recvfrom(int s, void *buf, size_t len, int flags, struct sockaddr *from, socklen_t *fromlenaddr); }
+	SYS_ACCEPT         = 30  // { int sys_accept(int s, struct sockaddr *name, socklen_t *anamelen); }
+	SYS_GETPEERNAME    = 31  // { int sys_getpeername(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_GETSOCKNAME    = 32  // { int sys_getsockname(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_ACCESS         = 33  // { int sys_access(const char *path, int amode); }
+	SYS_CHFLAGS        = 34  // { int sys_chflags(const char *path, u_int flags); }
+	SYS_FCHFLAGS       = 35  // { int sys_fchflags(int fd, u_int flags); }
+	SYS_SYNC           = 36  // { void sys_sync(void); }
+	SYS_STAT           = 38  // { int sys_stat(const char *path, struct stat *ub); }
+	SYS_GETPPID        = 39  // { pid_t sys_getppid(void); }
+	SYS_LSTAT          = 40  // { int sys_lstat(const char *path, struct stat *ub); }
+	SYS_DUP            = 41  // { int sys_dup(int fd); }
+	SYS_FSTATAT        = 42  // { int sys_fstatat(int fd, const char *path, struct stat *buf, int flag); }
+	SYS_GETEGID        = 43  // { gid_t sys_getegid(void); }
+	SYS_PROFIL         = 44  // { int sys_profil(caddr_t samples, size_t size, u_long offset, u_int scale); }
+	SYS_KTRACE         = 45  // { int sys_ktrace(const char *fname, int ops, int facs, pid_t pid); }
+	SYS_SIGACTION      = 46  // { int sys_sigaction(int signum, const struct sigaction *nsa, struct sigaction *osa); }
+	SYS_GETGID         = 47  // { gid_t sys_getgid(void); }
+	SYS_SIGPROCMASK    = 48  // { int sys_sigprocmask(int how, sigset_t mask); }
+	SYS_SETLOGIN       = 50  // { int sys_setlogin(const char *namebuf); }
+	SYS_ACCT           = 51  // { int sys_acct(const char *path); }
+	SYS_SIGPENDING     = 52  // { int sys_sigpending(void); }
+	SYS_FSTAT          = 53  // { int sys_fstat(int fd, struct stat *sb); }
+	SYS_IOCTL          = 54  // { int sys_ioctl(int fd, u_long com, ... void *data); }
+	SYS_REBOOT         = 55  // { int sys_reboot(int opt); }
+	SYS_REVOKE         = 56  // { int sys_revoke(const char *path); }
+	SYS_SYMLINK        = 57  // { int sys_symlink(const char *path, const char *link); }
+	SYS_READLINK       = 58  // { ssize_t sys_readlink(const char *path, char *buf, size_t count); }
+	SYS_EXECVE         = 59  // { int sys_execve(const char *path, char * const *argp, char * const *envp); }
+	SYS_UMASK          = 60  // { mode_t sys_umask(mode_t newmask); }
+	SYS_CHROOT         = 61  // { int sys_chroot(const char *path); }
+	SYS_GETFSSTAT      = 62  // { int sys_getfsstat(struct statfs *buf, size_t bufsize, int flags); }
+	SYS_STATFS         = 63  // { int sys_statfs(const char *path, struct statfs *buf); }
+	SYS_FSTATFS        = 64  // { int sys_fstatfs(int fd, struct statfs *buf); }
+	SYS_FHSTATFS       = 65  // { int sys_fhstatfs(const fhandle_t *fhp, struct statfs *buf); }
+	SYS_VFORK          = 66  // { int sys_vfork(void); }
+	SYS_GETTIMEOFDAY   = 67  // { int sys_gettimeofday(struct timeval *tp, struct timezone *tzp); }
+	SYS_SETTIMEOFDAY   = 68  // { int sys_settimeofday(const struct timeval *tv, const struct timezone *tzp); }
+	SYS_SETITIMER      = 69  // { int sys_setitimer(int which, const struct itimerval *itv, struct itimerval *oitv); }
+	SYS_GETITIMER      = 70  // { int sys_getitimer(int which, struct itimerval *itv); }
+	SYS_SELECT         = 71  // { int sys_select(int nd, fd_set *in, fd_set *ou, fd_set *ex, struct timeval *tv); }
+	SYS_KEVENT         = 72  // { int sys_kevent(int fd, const struct kevent *changelist, int nchanges, struct kevent *eventlist, int nevents, const struct timespec *timeout); }
+	SYS_MUNMAP         = 73  // { int sys_munmap(void *addr, size_t len); }
+	SYS_MPROTECT       = 74  // { int sys_mprotect(void *addr, size_t len, int prot); }
+	SYS_MADVISE        = 75  // { int sys_madvise(void *addr, size_t len, int behav); }
+	SYS_UTIMES         = 76  // { int sys_utimes(const char *path, const struct timeval *tptr); }
+	SYS_FUTIMES        = 77  // { int sys_futimes(int fd, const struct timeval *tptr); }
+	SYS_MINCORE        = 78  // { int sys_mincore(void *addr, size_t len, char *vec); }
+	SYS_GETGROUPS      = 79  // { int sys_getgroups(int gidsetsize, gid_t *gidset); }
+	SYS_SETGROUPS      = 80  // { int sys_setgroups(int gidsetsize, const gid_t *gidset); }
+	SYS_GETPGRP        = 81  // { int sys_getpgrp(void); }
+	SYS_SETPGID        = 82  // { int sys_setpgid(pid_t pid, pid_t pgid); }
+	SYS_FUTEX          = 83  // { int sys_futex(uint32_t *f, int op, int val, const struct timespec *timeout, uint32_t *g); }
+	SYS_UTIMENSAT      = 84  // { int sys_utimensat(int fd, const char *path, const struct timespec *times, int flag); }
+	SYS_FUTIMENS       = 85  // { int sys_futimens(int fd, const struct timespec *times); }
+	SYS_KBIND          = 86  // { int sys_kbind(const struct __kbind *param, size_t psize, int64_t proc_cookie); }
+	SYS_CLOCK_GETTIME  = 87  // { int sys_clock_gettime(clockid_t clock_id, struct timespec *tp); }
+	SYS_CLOCK_SETTIME  = 88  // { int sys_clock_settime(clockid_t clock_id, const struct timespec *tp); }
+	SYS_CLOCK_GETRES   = 89  // { int sys_clock_getres(clockid_t clock_id, struct timespec *tp); }
+	SYS_DUP2           = 90  // { int sys_dup2(int from, int to); }
+	SYS_NANOSLEEP      = 91  // { int sys_nanosleep(const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS_FCNTL          = 92  // { int sys_fcntl(int fd, int cmd, ... void *arg); }
+	SYS_ACCEPT4        = 93  // { int sys_accept4(int s, struct sockaddr *name, socklen_t *anamelen, int flags); }
+	SYS___THRSLEEP     = 94  // { int sys___thrsleep(const volatile void *ident, clockid_t clock_id, const struct timespec *tp, void *lock, const int *abort); }
+	SYS_FSYNC          = 95  // { int sys_fsync(int fd); }
+	SYS_SETPRIORITY    = 96  // { int sys_setpriority(int which, id_t who, int prio); }
+	SYS_SOCKET         = 97  // { int sys_socket(int domain, int type, int protocol); }
+	SYS_CONNECT        = 98  // { int sys_connect(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_GETDENTS       = 99  // { int sys_getdents(int fd, void *buf, size_t buflen); }
+	SYS_GETPRIORITY    = 100 // { int sys_getpriority(int which, id_t who); }
+	SYS_PIPE2          = 101 // { int sys_pipe2(int *fdp, int flags); }
+	SYS_DUP3           = 102 // { int sys_dup3(int from, int to, int flags); }
+	SYS_SIGRETURN      = 103 // { int sys_sigreturn(struct sigcontext *sigcntxp); }
+	SYS_BIND           = 104 // { int sys_bind(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_SETSOCKOPT     = 105 // { int sys_setsockopt(int s, int level, int name, const void *val, socklen_t valsize); }
+	SYS_LISTEN         = 106 // { int sys_listen(int s, int backlog); }
+	SYS_CHFLAGSAT      = 107 // { int sys_chflagsat(int fd, const char *path, u_int flags, int atflags); }
+	SYS_PLEDGE         = 108 // { int sys_pledge(const char *promises, const char *execpromises); }
+	SYS_PPOLL          = 109 // { int sys_ppoll(struct pollfd *fds, u_int nfds, const struct timespec *ts, const sigset_t *mask); }
+	SYS_PSELECT        = 110 // { int sys_pselect(int nd, fd_set *in, fd_set *ou, fd_set *ex, const struct timespec *ts, const sigset_t *mask); }
+	SYS_SIGSUSPEND     = 111 // { int sys_sigsuspend(int mask); }
+	SYS_SENDSYSLOG     = 112 // { int sys_sendsyslog(const char *buf, size_t nbyte, int flags); }
+	SYS_UNVEIL         = 114 // { int sys_unveil(const char *path, const char *permissions); }
+	SYS_GETSOCKOPT     = 118 // { int sys_getsockopt(int s, int level, int name, void *val, socklen_t *avalsize); }
+	SYS_THRKILL        = 119 // { int sys_thrkill(pid_t tid, int signum, void *tcb); }
+	SYS_READV          = 120 // { ssize_t sys_readv(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_WRITEV         = 121 // { ssize_t sys_writev(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_KILL           = 122 // { int sys_kill(int pid, int signum); }
+	SYS_FCHOWN         = 123 // { int sys_fchown(int fd, uid_t uid, gid_t gid); }
+	SYS_FCHMOD         = 124 // { int sys_fchmod(int fd, mode_t mode); }
+	SYS_SETREUID       = 126 // { int sys_setreuid(uid_t ruid, uid_t euid); }
+	SYS_SETREGID       = 127 // { int sys_setregid(gid_t rgid, gid_t egid); }
+	SYS_RENAME         = 128 // { int sys_rename(const char *from, const char *to); }
+	SYS_FLOCK          = 131 // { int sys_flock(int fd, int how); }
+	SYS_MKFIFO         = 132 // { int sys_mkfifo(const char *path, mode_t mode); }
+	SYS_SENDTO         = 133 // { ssize_t sys_sendto(int s, const void *buf, size_t len, int flags, const struct sockaddr *to, socklen_t tolen); }
+	SYS_SHUTDOWN       = 134 // { int sys_shutdown(int s, int how); }
+	SYS_SOCKETPAIR     = 135 // { int sys_socketpair(int domain, int type, int protocol, int *rsv); }
+	SYS_MKDIR          = 136 // { int sys_mkdir(const char *path, mode_t mode); }
+	SYS_RMDIR          = 137 // { int sys_rmdir(const char *path); }
+	SYS_ADJTIME        = 140 // { int sys_adjtime(const struct timeval *delta, struct timeval *olddelta); }
+	SYS_GETLOGIN_R     = 141 // { int sys_getlogin_r(char *namebuf, u_int namelen); }
+	SYS_SETSID         = 147 // { int sys_setsid(void); }
+	SYS_QUOTACTL       = 148 // { int sys_quotactl(const char *path, int cmd, int uid, char *arg); }
+	SYS_NFSSVC         = 155 // { int sys_nfssvc(int flag, void *argp); }
+	SYS_GETFH          = 161 // { int sys_getfh(const char *fname, fhandle_t *fhp); }
+	SYS_SYSARCH        = 165 // { int sys_sysarch(int op, void *parms); }
+	SYS_PREAD          = 173 // { ssize_t sys_pread(int fd, void *buf, size_t nbyte, int pad, off_t offset); }
+	SYS_PWRITE         = 174 // { ssize_t sys_pwrite(int fd, const void *buf, size_t nbyte, int pad, off_t offset); }
+	SYS_SETGID         = 181 // { int sys_setgid(gid_t gid); }
+	SYS_SETEGID        = 182 // { int sys_setegid(gid_t egid); }
+	SYS_SETEUID        = 183 // { int sys_seteuid(uid_t euid); }
+	SYS_PATHCONF       = 191 // { long sys_pathconf(const char *path, int name); }
+	SYS_FPATHCONF      = 192 // { long sys_fpathconf(int fd, int name); }
+	SYS_SWAPCTL        = 193 // { int sys_swapctl(int cmd, const void *arg, int misc); }
+	SYS_GETRLIMIT      = 194 // { int sys_getrlimit(int which, struct rlimit *rlp); }
+	SYS_SETRLIMIT      = 195 // { int sys_setrlimit(int which, const struct rlimit *rlp); }
+	SYS_MMAP           = 197 // { void *sys_mmap(void *addr, size_t len, int prot, int flags, int fd, long pad, off_t pos); }
+	SYS_LSEEK          = 199 // { off_t sys_lseek(int fd, int pad, off_t offset, int whence); }
+	SYS_TRUNCATE       = 200 // { int sys_truncate(const char *path, int pad, off_t length); }
+	SYS_FTRUNCATE      = 201 // { int sys_ftruncate(int fd, int pad, off_t length); }
+	SYS_SYSCTL         = 202 // { int sys_sysctl(const int *name, u_int namelen, void *old, size_t *oldlenp, void *new, size_t newlen); }
+	SYS_MLOCK          = 203 // { int sys_mlock(const void *addr, size_t len); }
+	SYS_MUNLOCK        = 204 // { int sys_munlock(const void *addr, size_t len); }
+	SYS_GETPGID        = 207 // { pid_t sys_getpgid(pid_t pid); }
+	SYS_UTRACE         = 209 // { int sys_utrace(const char *label, const void *addr, size_t len); }
+	SYS_SEMGET         = 221 // { int sys_semget(key_t key, int nsems, int semflg); }
+	SYS_MSGGET         = 225 // { int sys_msgget(key_t key, int msgflg); }
+	SYS_MSGSND         = 226 // { int sys_msgsnd(int msqid, const void *msgp, size_t msgsz, int msgflg); }
+	SYS_MSGRCV         = 227 // { int sys_msgrcv(int msqid, void *msgp, size_t msgsz, long msgtyp, int msgflg); }
+	SYS_SHMAT          = 228 // { void *sys_shmat(int shmid, const void *shmaddr, int shmflg); }
+	SYS_SHMDT          = 230 // { int sys_shmdt(const void *shmaddr); }
+	SYS_MINHERIT       = 250 // { int sys_minherit(void *addr, size_t len, int inherit); }
+	SYS_POLL           = 252 // { int sys_poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_ISSETUGID      = 253 // { int sys_issetugid(void); }
+	SYS_LCHOWN         = 254 // { int sys_lchown(const char *path, uid_t uid, gid_t gid); }
+	SYS_GETSID         = 255 // { pid_t sys_getsid(pid_t pid); }
+	SYS_MSYNC          = 256 // { int sys_msync(void *addr, size_t len, int flags); }
+	SYS_PIPE           = 263 // { int sys_pipe(int *fdp); }
+	SYS_FHOPEN         = 264 // { int sys_fhopen(const fhandle_t *fhp, int flags); }
+	SYS_PREADV         = 267 // { ssize_t sys_preadv(int fd, const struct iovec *iovp, int iovcnt, int pad, off_t offset); }
+	SYS_PWRITEV        = 268 // { ssize_t sys_pwritev(int fd, const struct iovec *iovp, int iovcnt, int pad, off_t offset); }
+	SYS_KQUEUE         = 269 // { int sys_kqueue(void); }
+	SYS_MLOCKALL       = 271 // { int sys_mlockall(int flags); }
+	SYS_MUNLOCKALL     = 272 // { int sys_munlockall(void); }
+	SYS_GETRESUID      = 281 // { int sys_getresuid(uid_t *ruid, uid_t *euid, uid_t *suid); }
+	SYS_SETRESUID      = 282 // { int sys_setresuid(uid_t ruid, uid_t euid, uid_t suid); }
+	SYS_GETRESGID      = 283 // { int sys_getresgid(gid_t *rgid, gid_t *egid, gid_t *sgid); }
+	SYS_SETRESGID      = 284 // { int sys_setresgid(gid_t rgid, gid_t egid, gid_t sgid); }
+	SYS_MQUERY         = 286 // { void *sys_mquery(void *addr, size_t len, int prot, int flags, int fd, long pad, off_t pos); }
+	SYS_CLOSEFROM      = 287 // { int sys_closefrom(int fd); }
+	SYS_SIGALTSTACK    = 288 // { int sys_sigaltstack(const struct sigaltstack *nss, struct sigaltstack *oss); }
+	SYS_SHMGET         = 289 // { int sys_shmget(key_t key, size_t size, int shmflg); }
+	SYS_SEMOP          = 290 // { int sys_semop(int semid, struct sembuf *sops, size_t nsops); }
+	SYS_FHSTAT         = 294 // { int sys_fhstat(const fhandle_t *fhp, struct stat *sb); }
+	SYS___SEMCTL       = 295 // { int sys___semctl(int semid, int semnum, int cmd, union semun *arg); }
+	SYS_SHMCTL         = 296 // { int sys_shmctl(int shmid, int cmd, struct shmid_ds *buf); }
+	SYS_MSGCTL         = 297 // { int sys_msgctl(int msqid, int cmd, struct msqid_ds *buf); }
+	SYS_SCHED_YIELD    = 298 // { int sys_sched_yield(void); }
+	SYS_GETTHRID       = 299 // { pid_t sys_getthrid(void); }
+	SYS___THRWAKEUP    = 301 // { int sys___thrwakeup(const volatile void *ident, int n); }
+	SYS___THREXIT      = 302 // { void sys___threxit(pid_t *notdead); }
+	SYS___THRSIGDIVERT = 303 // { int sys___thrsigdivert(sigset_t sigmask, siginfo_t *info, const struct timespec *timeout); }
+	SYS___GETCWD       = 304 // { int sys___getcwd(char *buf, size_t len); }
+	SYS_ADJFREQ        = 305 // { int sys_adjfreq(const int64_t *freq, int64_t *oldfreq); }
+	SYS_SETRTABLE      = 310 // { int sys_setrtable(int rtableid); }
+	SYS_GETRTABLE      = 311 // { int sys_getrtable(void); }
+	SYS_FACCESSAT      = 313 // { int sys_faccessat(int fd, const char *path, int amode, int flag); }
+	SYS_FCHMODAT       = 314 // { int sys_fchmodat(int fd, const char *path, mode_t mode, int flag); }
+	SYS_FCHOWNAT       = 315 // { int sys_fchownat(int fd, const char *path, uid_t uid, gid_t gid, int flag); }
+	SYS_LINKAT         = 317 // { int sys_linkat(int fd1, const char *path1, int fd2, const char *path2, int flag); }
+	SYS_MKDIRAT        = 318 // { int sys_mkdirat(int fd, const char *path, mode_t mode); }
+	SYS_MKFIFOAT       = 319 // { int sys_mkfifoat(int fd, const char *path, mode_t mode); }
+	SYS_MKNODAT        = 320 // { int sys_mknodat(int fd, const char *path, mode_t mode, dev_t dev); }
+	SYS_OPENAT         = 321 // { int sys_openat(int fd, const char *path, int flags, ... mode_t mode); }
+	SYS_READLINKAT     = 322 // { ssize_t sys_readlinkat(int fd, const char *path, char *buf, size_t count); }
+	SYS_RENAMEAT       = 323 // { int sys_renameat(int fromfd, const char *from, int tofd, const char *to); }
+	SYS_SYMLINKAT      = 324 // { int sys_symlinkat(const char *path, int fd, const char *link); }
+	SYS_UNLINKAT       = 325 // { int sys_unlinkat(int fd, const char *path, int flag); }
+	SYS___SET_TCB      = 329 // { void sys___set_tcb(void *tcb); }
+	SYS___GET_TCB      = 330 // { void *sys___get_tcb(void); }
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_arm.go
new file mode 100644
index 000000000..33d1dc540
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_arm.go
@@ -0,0 +1,218 @@
+// go run mksysnum.go https://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/sys/kern/syscalls.master
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm,openbsd
+
+package unix
+
+const (
+	SYS_EXIT           = 1   // { void sys_exit(int rval); }
+	SYS_FORK           = 2   // { int sys_fork(void); }
+	SYS_READ           = 3   // { ssize_t sys_read(int fd, void *buf, size_t nbyte); }
+	SYS_WRITE          = 4   // { ssize_t sys_write(int fd, const void *buf, size_t nbyte); }
+	SYS_OPEN           = 5   // { int sys_open(const char *path, int flags, ... mode_t mode); }
+	SYS_CLOSE          = 6   // { int sys_close(int fd); }
+	SYS_GETENTROPY     = 7   // { int sys_getentropy(void *buf, size_t nbyte); }
+	SYS___TFORK        = 8   // { int sys___tfork(const struct __tfork *param, size_t psize); }
+	SYS_LINK           = 9   // { int sys_link(const char *path, const char *link); }
+	SYS_UNLINK         = 10  // { int sys_unlink(const char *path); }
+	SYS_WAIT4          = 11  // { pid_t sys_wait4(pid_t pid, int *status, int options, struct rusage *rusage); }
+	SYS_CHDIR          = 12  // { int sys_chdir(const char *path); }
+	SYS_FCHDIR         = 13  // { int sys_fchdir(int fd); }
+	SYS_MKNOD          = 14  // { int sys_mknod(const char *path, mode_t mode, dev_t dev); }
+	SYS_CHMOD          = 15  // { int sys_chmod(const char *path, mode_t mode); }
+	SYS_CHOWN          = 16  // { int sys_chown(const char *path, uid_t uid, gid_t gid); }
+	SYS_OBREAK         = 17  // { int sys_obreak(char *nsize); } break
+	SYS_GETDTABLECOUNT = 18  // { int sys_getdtablecount(void); }
+	SYS_GETRUSAGE      = 19  // { int sys_getrusage(int who, struct rusage *rusage); }
+	SYS_GETPID         = 20  // { pid_t sys_getpid(void); }
+	SYS_MOUNT          = 21  // { int sys_mount(const char *type, const char *path, int flags, void *data); }
+	SYS_UNMOUNT        = 22  // { int sys_unmount(const char *path, int flags); }
+	SYS_SETUID         = 23  // { int sys_setuid(uid_t uid); }
+	SYS_GETUID         = 24  // { uid_t sys_getuid(void); }
+	SYS_GETEUID        = 25  // { uid_t sys_geteuid(void); }
+	SYS_PTRACE         = 26  // { int sys_ptrace(int req, pid_t pid, caddr_t addr, int data); }
+	SYS_RECVMSG        = 27  // { ssize_t sys_recvmsg(int s, struct msghdr *msg, int flags); }
+	SYS_SENDMSG        = 28  // { ssize_t sys_sendmsg(int s, const struct msghdr *msg, int flags); }
+	SYS_RECVFROM       = 29  // { ssize_t sys_recvfrom(int s, void *buf, size_t len, int flags, struct sockaddr *from, socklen_t *fromlenaddr); }
+	SYS_ACCEPT         = 30  // { int sys_accept(int s, struct sockaddr *name, socklen_t *anamelen); }
+	SYS_GETPEERNAME    = 31  // { int sys_getpeername(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_GETSOCKNAME    = 32  // { int sys_getsockname(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_ACCESS         = 33  // { int sys_access(const char *path, int amode); }
+	SYS_CHFLAGS        = 34  // { int sys_chflags(const char *path, u_int flags); }
+	SYS_FCHFLAGS       = 35  // { int sys_fchflags(int fd, u_int flags); }
+	SYS_SYNC           = 36  // { void sys_sync(void); }
+	SYS_STAT           = 38  // { int sys_stat(const char *path, struct stat *ub); }
+	SYS_GETPPID        = 39  // { pid_t sys_getppid(void); }
+	SYS_LSTAT          = 40  // { int sys_lstat(const char *path, struct stat *ub); }
+	SYS_DUP            = 41  // { int sys_dup(int fd); }
+	SYS_FSTATAT        = 42  // { int sys_fstatat(int fd, const char *path, struct stat *buf, int flag); }
+	SYS_GETEGID        = 43  // { gid_t sys_getegid(void); }
+	SYS_PROFIL         = 44  // { int sys_profil(caddr_t samples, size_t size, u_long offset, u_int scale); }
+	SYS_KTRACE         = 45  // { int sys_ktrace(const char *fname, int ops, int facs, pid_t pid); }
+	SYS_SIGACTION      = 46  // { int sys_sigaction(int signum, const struct sigaction *nsa, struct sigaction *osa); }
+	SYS_GETGID         = 47  // { gid_t sys_getgid(void); }
+	SYS_SIGPROCMASK    = 48  // { int sys_sigprocmask(int how, sigset_t mask); }
+	SYS_SETLOGIN       = 50  // { int sys_setlogin(const char *namebuf); }
+	SYS_ACCT           = 51  // { int sys_acct(const char *path); }
+	SYS_SIGPENDING     = 52  // { int sys_sigpending(void); }
+	SYS_FSTAT          = 53  // { int sys_fstat(int fd, struct stat *sb); }
+	SYS_IOCTL          = 54  // { int sys_ioctl(int fd, u_long com, ... void *data); }
+	SYS_REBOOT         = 55  // { int sys_reboot(int opt); }
+	SYS_REVOKE         = 56  // { int sys_revoke(const char *path); }
+	SYS_SYMLINK        = 57  // { int sys_symlink(const char *path, const char *link); }
+	SYS_READLINK       = 58  // { ssize_t sys_readlink(const char *path, char *buf, size_t count); }
+	SYS_EXECVE         = 59  // { int sys_execve(const char *path, char * const *argp, char * const *envp); }
+	SYS_UMASK          = 60  // { mode_t sys_umask(mode_t newmask); }
+	SYS_CHROOT         = 61  // { int sys_chroot(const char *path); }
+	SYS_GETFSSTAT      = 62  // { int sys_getfsstat(struct statfs *buf, size_t bufsize, int flags); }
+	SYS_STATFS         = 63  // { int sys_statfs(const char *path, struct statfs *buf); }
+	SYS_FSTATFS        = 64  // { int sys_fstatfs(int fd, struct statfs *buf); }
+	SYS_FHSTATFS       = 65  // { int sys_fhstatfs(const fhandle_t *fhp, struct statfs *buf); }
+	SYS_VFORK          = 66  // { int sys_vfork(void); }
+	SYS_GETTIMEOFDAY   = 67  // { int sys_gettimeofday(struct timeval *tp, struct timezone *tzp); }
+	SYS_SETTIMEOFDAY   = 68  // { int sys_settimeofday(const struct timeval *tv, const struct timezone *tzp); }
+	SYS_SETITIMER      = 69  // { int sys_setitimer(int which, const struct itimerval *itv, struct itimerval *oitv); }
+	SYS_GETITIMER      = 70  // { int sys_getitimer(int which, struct itimerval *itv); }
+	SYS_SELECT         = 71  // { int sys_select(int nd, fd_set *in, fd_set *ou, fd_set *ex, struct timeval *tv); }
+	SYS_KEVENT         = 72  // { int sys_kevent(int fd, const struct kevent *changelist, int nchanges, struct kevent *eventlist, int nevents, const struct timespec *timeout); }
+	SYS_MUNMAP         = 73  // { int sys_munmap(void *addr, size_t len); }
+	SYS_MPROTECT       = 74  // { int sys_mprotect(void *addr, size_t len, int prot); }
+	SYS_MADVISE        = 75  // { int sys_madvise(void *addr, size_t len, int behav); }
+	SYS_UTIMES         = 76  // { int sys_utimes(const char *path, const struct timeval *tptr); }
+	SYS_FUTIMES        = 77  // { int sys_futimes(int fd, const struct timeval *tptr); }
+	SYS_MINCORE        = 78  // { int sys_mincore(void *addr, size_t len, char *vec); }
+	SYS_GETGROUPS      = 79  // { int sys_getgroups(int gidsetsize, gid_t *gidset); }
+	SYS_SETGROUPS      = 80  // { int sys_setgroups(int gidsetsize, const gid_t *gidset); }
+	SYS_GETPGRP        = 81  // { int sys_getpgrp(void); }
+	SYS_SETPGID        = 82  // { int sys_setpgid(pid_t pid, pid_t pgid); }
+	SYS_FUTEX          = 83  // { int sys_futex(uint32_t *f, int op, int val, const struct timespec *timeout, uint32_t *g); }
+	SYS_UTIMENSAT      = 84  // { int sys_utimensat(int fd, const char *path, const struct timespec *times, int flag); }
+	SYS_FUTIMENS       = 85  // { int sys_futimens(int fd, const struct timespec *times); }
+	SYS_KBIND          = 86  // { int sys_kbind(const struct __kbind *param, size_t psize, int64_t proc_cookie); }
+	SYS_CLOCK_GETTIME  = 87  // { int sys_clock_gettime(clockid_t clock_id, struct timespec *tp); }
+	SYS_CLOCK_SETTIME  = 88  // { int sys_clock_settime(clockid_t clock_id, const struct timespec *tp); }
+	SYS_CLOCK_GETRES   = 89  // { int sys_clock_getres(clockid_t clock_id, struct timespec *tp); }
+	SYS_DUP2           = 90  // { int sys_dup2(int from, int to); }
+	SYS_NANOSLEEP      = 91  // { int sys_nanosleep(const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS_FCNTL          = 92  // { int sys_fcntl(int fd, int cmd, ... void *arg); }
+	SYS_ACCEPT4        = 93  // { int sys_accept4(int s, struct sockaddr *name, socklen_t *anamelen, int flags); }
+	SYS___THRSLEEP     = 94  // { int sys___thrsleep(const volatile void *ident, clockid_t clock_id, const struct timespec *tp, void *lock, const int *abort); }
+	SYS_FSYNC          = 95  // { int sys_fsync(int fd); }
+	SYS_SETPRIORITY    = 96  // { int sys_setpriority(int which, id_t who, int prio); }
+	SYS_SOCKET         = 97  // { int sys_socket(int domain, int type, int protocol); }
+	SYS_CONNECT        = 98  // { int sys_connect(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_GETDENTS       = 99  // { int sys_getdents(int fd, void *buf, size_t buflen); }
+	SYS_GETPRIORITY    = 100 // { int sys_getpriority(int which, id_t who); }
+	SYS_PIPE2          = 101 // { int sys_pipe2(int *fdp, int flags); }
+	SYS_DUP3           = 102 // { int sys_dup3(int from, int to, int flags); }
+	SYS_SIGRETURN      = 103 // { int sys_sigreturn(struct sigcontext *sigcntxp); }
+	SYS_BIND           = 104 // { int sys_bind(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_SETSOCKOPT     = 105 // { int sys_setsockopt(int s, int level, int name, const void *val, socklen_t valsize); }
+	SYS_LISTEN         = 106 // { int sys_listen(int s, int backlog); }
+	SYS_CHFLAGSAT      = 107 // { int sys_chflagsat(int fd, const char *path, u_int flags, int atflags); }
+	SYS_PLEDGE         = 108 // { int sys_pledge(const char *promises, const char *execpromises); }
+	SYS_PPOLL          = 109 // { int sys_ppoll(struct pollfd *fds, u_int nfds, const struct timespec *ts, const sigset_t *mask); }
+	SYS_PSELECT        = 110 // { int sys_pselect(int nd, fd_set *in, fd_set *ou, fd_set *ex, const struct timespec *ts, const sigset_t *mask); }
+	SYS_SIGSUSPEND     = 111 // { int sys_sigsuspend(int mask); }
+	SYS_SENDSYSLOG     = 112 // { int sys_sendsyslog(const char *buf, size_t nbyte, int flags); }
+	SYS_UNVEIL         = 114 // { int sys_unveil(const char *path, const char *permissions); }
+	SYS_GETSOCKOPT     = 118 // { int sys_getsockopt(int s, int level, int name, void *val, socklen_t *avalsize); }
+	SYS_THRKILL        = 119 // { int sys_thrkill(pid_t tid, int signum, void *tcb); }
+	SYS_READV          = 120 // { ssize_t sys_readv(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_WRITEV         = 121 // { ssize_t sys_writev(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_KILL           = 122 // { int sys_kill(int pid, int signum); }
+	SYS_FCHOWN         = 123 // { int sys_fchown(int fd, uid_t uid, gid_t gid); }
+	SYS_FCHMOD         = 124 // { int sys_fchmod(int fd, mode_t mode); }
+	SYS_SETREUID       = 126 // { int sys_setreuid(uid_t ruid, uid_t euid); }
+	SYS_SETREGID       = 127 // { int sys_setregid(gid_t rgid, gid_t egid); }
+	SYS_RENAME         = 128 // { int sys_rename(const char *from, const char *to); }
+	SYS_FLOCK          = 131 // { int sys_flock(int fd, int how); }
+	SYS_MKFIFO         = 132 // { int sys_mkfifo(const char *path, mode_t mode); }
+	SYS_SENDTO         = 133 // { ssize_t sys_sendto(int s, const void *buf, size_t len, int flags, const struct sockaddr *to, socklen_t tolen); }
+	SYS_SHUTDOWN       = 134 // { int sys_shutdown(int s, int how); }
+	SYS_SOCKETPAIR     = 135 // { int sys_socketpair(int domain, int type, int protocol, int *rsv); }
+	SYS_MKDIR          = 136 // { int sys_mkdir(const char *path, mode_t mode); }
+	SYS_RMDIR          = 137 // { int sys_rmdir(const char *path); }
+	SYS_ADJTIME        = 140 // { int sys_adjtime(const struct timeval *delta, struct timeval *olddelta); }
+	SYS_GETLOGIN_R     = 141 // { int sys_getlogin_r(char *namebuf, u_int namelen); }
+	SYS_SETSID         = 147 // { int sys_setsid(void); }
+	SYS_QUOTACTL       = 148 // { int sys_quotactl(const char *path, int cmd, int uid, char *arg); }
+	SYS_NFSSVC         = 155 // { int sys_nfssvc(int flag, void *argp); }
+	SYS_GETFH          = 161 // { int sys_getfh(const char *fname, fhandle_t *fhp); }
+	SYS_SYSARCH        = 165 // { int sys_sysarch(int op, void *parms); }
+	SYS_PREAD          = 173 // { ssize_t sys_pread(int fd, void *buf, size_t nbyte, int pad, off_t offset); }
+	SYS_PWRITE         = 174 // { ssize_t sys_pwrite(int fd, const void *buf, size_t nbyte, int pad, off_t offset); }
+	SYS_SETGID         = 181 // { int sys_setgid(gid_t gid); }
+	SYS_SETEGID        = 182 // { int sys_setegid(gid_t egid); }
+	SYS_SETEUID        = 183 // { int sys_seteuid(uid_t euid); }
+	SYS_PATHCONF       = 191 // { long sys_pathconf(const char *path, int name); }
+	SYS_FPATHCONF      = 192 // { long sys_fpathconf(int fd, int name); }
+	SYS_SWAPCTL        = 193 // { int sys_swapctl(int cmd, const void *arg, int misc); }
+	SYS_GETRLIMIT      = 194 // { int sys_getrlimit(int which, struct rlimit *rlp); }
+	SYS_SETRLIMIT      = 195 // { int sys_setrlimit(int which, const struct rlimit *rlp); }
+	SYS_MMAP           = 197 // { void *sys_mmap(void *addr, size_t len, int prot, int flags, int fd, long pad, off_t pos); }
+	SYS_LSEEK          = 199 // { off_t sys_lseek(int fd, int pad, off_t offset, int whence); }
+	SYS_TRUNCATE       = 200 // { int sys_truncate(const char *path, int pad, off_t length); }
+	SYS_FTRUNCATE      = 201 // { int sys_ftruncate(int fd, int pad, off_t length); }
+	SYS_SYSCTL         = 202 // { int sys_sysctl(const int *name, u_int namelen, void *old, size_t *oldlenp, void *new, size_t newlen); }
+	SYS_MLOCK          = 203 // { int sys_mlock(const void *addr, size_t len); }
+	SYS_MUNLOCK        = 204 // { int sys_munlock(const void *addr, size_t len); }
+	SYS_GETPGID        = 207 // { pid_t sys_getpgid(pid_t pid); }
+	SYS_UTRACE         = 209 // { int sys_utrace(const char *label, const void *addr, size_t len); }
+	SYS_SEMGET         = 221 // { int sys_semget(key_t key, int nsems, int semflg); }
+	SYS_MSGGET         = 225 // { int sys_msgget(key_t key, int msgflg); }
+	SYS_MSGSND         = 226 // { int sys_msgsnd(int msqid, const void *msgp, size_t msgsz, int msgflg); }
+	SYS_MSGRCV         = 227 // { int sys_msgrcv(int msqid, void *msgp, size_t msgsz, long msgtyp, int msgflg); }
+	SYS_SHMAT          = 228 // { void *sys_shmat(int shmid, const void *shmaddr, int shmflg); }
+	SYS_SHMDT          = 230 // { int sys_shmdt(const void *shmaddr); }
+	SYS_MINHERIT       = 250 // { int sys_minherit(void *addr, size_t len, int inherit); }
+	SYS_POLL           = 252 // { int sys_poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_ISSETUGID      = 253 // { int sys_issetugid(void); }
+	SYS_LCHOWN         = 254 // { int sys_lchown(const char *path, uid_t uid, gid_t gid); }
+	SYS_GETSID         = 255 // { pid_t sys_getsid(pid_t pid); }
+	SYS_MSYNC          = 256 // { int sys_msync(void *addr, size_t len, int flags); }
+	SYS_PIPE           = 263 // { int sys_pipe(int *fdp); }
+	SYS_FHOPEN         = 264 // { int sys_fhopen(const fhandle_t *fhp, int flags); }
+	SYS_PREADV         = 267 // { ssize_t sys_preadv(int fd, const struct iovec *iovp, int iovcnt, int pad, off_t offset); }
+	SYS_PWRITEV        = 268 // { ssize_t sys_pwritev(int fd, const struct iovec *iovp, int iovcnt, int pad, off_t offset); }
+	SYS_KQUEUE         = 269 // { int sys_kqueue(void); }
+	SYS_MLOCKALL       = 271 // { int sys_mlockall(int flags); }
+	SYS_MUNLOCKALL     = 272 // { int sys_munlockall(void); }
+	SYS_GETRESUID      = 281 // { int sys_getresuid(uid_t *ruid, uid_t *euid, uid_t *suid); }
+	SYS_SETRESUID      = 282 // { int sys_setresuid(uid_t ruid, uid_t euid, uid_t suid); }
+	SYS_GETRESGID      = 283 // { int sys_getresgid(gid_t *rgid, gid_t *egid, gid_t *sgid); }
+	SYS_SETRESGID      = 284 // { int sys_setresgid(gid_t rgid, gid_t egid, gid_t sgid); }
+	SYS_MQUERY         = 286 // { void *sys_mquery(void *addr, size_t len, int prot, int flags, int fd, long pad, off_t pos); }
+	SYS_CLOSEFROM      = 287 // { int sys_closefrom(int fd); }
+	SYS_SIGALTSTACK    = 288 // { int sys_sigaltstack(const struct sigaltstack *nss, struct sigaltstack *oss); }
+	SYS_SHMGET         = 289 // { int sys_shmget(key_t key, size_t size, int shmflg); }
+	SYS_SEMOP          = 290 // { int sys_semop(int semid, struct sembuf *sops, size_t nsops); }
+	SYS_FHSTAT         = 294 // { int sys_fhstat(const fhandle_t *fhp, struct stat *sb); }
+	SYS___SEMCTL       = 295 // { int sys___semctl(int semid, int semnum, int cmd, union semun *arg); }
+	SYS_SHMCTL         = 296 // { int sys_shmctl(int shmid, int cmd, struct shmid_ds *buf); }
+	SYS_MSGCTL         = 297 // { int sys_msgctl(int msqid, int cmd, struct msqid_ds *buf); }
+	SYS_SCHED_YIELD    = 298 // { int sys_sched_yield(void); }
+	SYS_GETTHRID       = 299 // { pid_t sys_getthrid(void); }
+	SYS___THRWAKEUP    = 301 // { int sys___thrwakeup(const volatile void *ident, int n); }
+	SYS___THREXIT      = 302 // { void sys___threxit(pid_t *notdead); }
+	SYS___THRSIGDIVERT = 303 // { int sys___thrsigdivert(sigset_t sigmask, siginfo_t *info, const struct timespec *timeout); }
+	SYS___GETCWD       = 304 // { int sys___getcwd(char *buf, size_t len); }
+	SYS_ADJFREQ        = 305 // { int sys_adjfreq(const int64_t *freq, int64_t *oldfreq); }
+	SYS_SETRTABLE      = 310 // { int sys_setrtable(int rtableid); }
+	SYS_GETRTABLE      = 311 // { int sys_getrtable(void); }
+	SYS_FACCESSAT      = 313 // { int sys_faccessat(int fd, const char *path, int amode, int flag); }
+	SYS_FCHMODAT       = 314 // { int sys_fchmodat(int fd, const char *path, mode_t mode, int flag); }
+	SYS_FCHOWNAT       = 315 // { int sys_fchownat(int fd, const char *path, uid_t uid, gid_t gid, int flag); }
+	SYS_LINKAT         = 317 // { int sys_linkat(int fd1, const char *path1, int fd2, const char *path2, int flag); }
+	SYS_MKDIRAT        = 318 // { int sys_mkdirat(int fd, const char *path, mode_t mode); }
+	SYS_MKFIFOAT       = 319 // { int sys_mkfifoat(int fd, const char *path, mode_t mode); }
+	SYS_MKNODAT        = 320 // { int sys_mknodat(int fd, const char *path, mode_t mode, dev_t dev); }
+	SYS_OPENAT         = 321 // { int sys_openat(int fd, const char *path, int flags, ... mode_t mode); }
+	SYS_READLINKAT     = 322 // { ssize_t sys_readlinkat(int fd, const char *path, char *buf, size_t count); }
+	SYS_RENAMEAT       = 323 // { int sys_renameat(int fromfd, const char *from, int tofd, const char *to); }
+	SYS_SYMLINKAT      = 324 // { int sys_symlinkat(const char *path, int fd, const char *link); }
+	SYS_UNLINKAT       = 325 // { int sys_unlinkat(int fd, const char *path, int flag); }
+	SYS___SET_TCB      = 329 // { void sys___set_tcb(void *tcb); }
+	SYS___GET_TCB      = 330 // { void *sys___get_tcb(void); }
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_arm64.go
new file mode 100644
index 000000000..fe2b689b6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_arm64.go
@@ -0,0 +1,217 @@
+// go run mksysnum.go https://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/sys/kern/syscalls.master
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm64,openbsd
+
+package unix
+
+const (
+	SYS_EXIT           = 1   // { void sys_exit(int rval); }
+	SYS_FORK           = 2   // { int sys_fork(void); }
+	SYS_READ           = 3   // { ssize_t sys_read(int fd, void *buf, size_t nbyte); }
+	SYS_WRITE          = 4   // { ssize_t sys_write(int fd, const void *buf, size_t nbyte); }
+	SYS_OPEN           = 5   // { int sys_open(const char *path, int flags, ... mode_t mode); }
+	SYS_CLOSE          = 6   // { int sys_close(int fd); }
+	SYS_GETENTROPY     = 7   // { int sys_getentropy(void *buf, size_t nbyte); }
+	SYS___TFORK        = 8   // { int sys___tfork(const struct __tfork *param, size_t psize); }
+	SYS_LINK           = 9   // { int sys_link(const char *path, const char *link); }
+	SYS_UNLINK         = 10  // { int sys_unlink(const char *path); }
+	SYS_WAIT4          = 11  // { pid_t sys_wait4(pid_t pid, int *status, int options, struct rusage *rusage); }
+	SYS_CHDIR          = 12  // { int sys_chdir(const char *path); }
+	SYS_FCHDIR         = 13  // { int sys_fchdir(int fd); }
+	SYS_MKNOD          = 14  // { int sys_mknod(const char *path, mode_t mode, dev_t dev); }
+	SYS_CHMOD          = 15  // { int sys_chmod(const char *path, mode_t mode); }
+	SYS_CHOWN          = 16  // { int sys_chown(const char *path, uid_t uid, gid_t gid); }
+	SYS_OBREAK         = 17  // { int sys_obreak(char *nsize); } break
+	SYS_GETDTABLECOUNT = 18  // { int sys_getdtablecount(void); }
+	SYS_GETRUSAGE      = 19  // { int sys_getrusage(int who, struct rusage *rusage); }
+	SYS_GETPID         = 20  // { pid_t sys_getpid(void); }
+	SYS_MOUNT          = 21  // { int sys_mount(const char *type, const char *path, int flags, void *data); }
+	SYS_UNMOUNT        = 22  // { int sys_unmount(const char *path, int flags); }
+	SYS_SETUID         = 23  // { int sys_setuid(uid_t uid); }
+	SYS_GETUID         = 24  // { uid_t sys_getuid(void); }
+	SYS_GETEUID        = 25  // { uid_t sys_geteuid(void); }
+	SYS_PTRACE         = 26  // { int sys_ptrace(int req, pid_t pid, caddr_t addr, int data); }
+	SYS_RECVMSG        = 27  // { ssize_t sys_recvmsg(int s, struct msghdr *msg, int flags); }
+	SYS_SENDMSG        = 28  // { ssize_t sys_sendmsg(int s, const struct msghdr *msg, int flags); }
+	SYS_RECVFROM       = 29  // { ssize_t sys_recvfrom(int s, void *buf, size_t len, int flags, struct sockaddr *from, socklen_t *fromlenaddr); }
+	SYS_ACCEPT         = 30  // { int sys_accept(int s, struct sockaddr *name, socklen_t *anamelen); }
+	SYS_GETPEERNAME    = 31  // { int sys_getpeername(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_GETSOCKNAME    = 32  // { int sys_getsockname(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_ACCESS         = 33  // { int sys_access(const char *path, int amode); }
+	SYS_CHFLAGS        = 34  // { int sys_chflags(const char *path, u_int flags); }
+	SYS_FCHFLAGS       = 35  // { int sys_fchflags(int fd, u_int flags); }
+	SYS_SYNC           = 36  // { void sys_sync(void); }
+	SYS_STAT           = 38  // { int sys_stat(const char *path, struct stat *ub); }
+	SYS_GETPPID        = 39  // { pid_t sys_getppid(void); }
+	SYS_LSTAT          = 40  // { int sys_lstat(const char *path, struct stat *ub); }
+	SYS_DUP            = 41  // { int sys_dup(int fd); }
+	SYS_FSTATAT        = 42  // { int sys_fstatat(int fd, const char *path, struct stat *buf, int flag); }
+	SYS_GETEGID        = 43  // { gid_t sys_getegid(void); }
+	SYS_PROFIL         = 44  // { int sys_profil(caddr_t samples, size_t size, u_long offset, u_int scale); }
+	SYS_KTRACE         = 45  // { int sys_ktrace(const char *fname, int ops, int facs, pid_t pid); }
+	SYS_SIGACTION      = 46  // { int sys_sigaction(int signum, const struct sigaction *nsa, struct sigaction *osa); }
+	SYS_GETGID         = 47  // { gid_t sys_getgid(void); }
+	SYS_SIGPROCMASK    = 48  // { int sys_sigprocmask(int how, sigset_t mask); }
+	SYS_SETLOGIN       = 50  // { int sys_setlogin(const char *namebuf); }
+	SYS_ACCT           = 51  // { int sys_acct(const char *path); }
+	SYS_SIGPENDING     = 52  // { int sys_sigpending(void); }
+	SYS_FSTAT          = 53  // { int sys_fstat(int fd, struct stat *sb); }
+	SYS_IOCTL          = 54  // { int sys_ioctl(int fd, u_long com, ... void *data); }
+	SYS_REBOOT         = 55  // { int sys_reboot(int opt); }
+	SYS_REVOKE         = 56  // { int sys_revoke(const char *path); }
+	SYS_SYMLINK        = 57  // { int sys_symlink(const char *path, const char *link); }
+	SYS_READLINK       = 58  // { ssize_t sys_readlink(const char *path, char *buf, size_t count); }
+	SYS_EXECVE         = 59  // { int sys_execve(const char *path, char * const *argp, char * const *envp); }
+	SYS_UMASK          = 60  // { mode_t sys_umask(mode_t newmask); }
+	SYS_CHROOT         = 61  // { int sys_chroot(const char *path); }
+	SYS_GETFSSTAT      = 62  // { int sys_getfsstat(struct statfs *buf, size_t bufsize, int flags); }
+	SYS_STATFS         = 63  // { int sys_statfs(const char *path, struct statfs *buf); }
+	SYS_FSTATFS        = 64  // { int sys_fstatfs(int fd, struct statfs *buf); }
+	SYS_FHSTATFS       = 65  // { int sys_fhstatfs(const fhandle_t *fhp, struct statfs *buf); }
+	SYS_VFORK          = 66  // { int sys_vfork(void); }
+	SYS_GETTIMEOFDAY   = 67  // { int sys_gettimeofday(struct timeval *tp, struct timezone *tzp); }
+	SYS_SETTIMEOFDAY   = 68  // { int sys_settimeofday(const struct timeval *tv, const struct timezone *tzp); }
+	SYS_SETITIMER      = 69  // { int sys_setitimer(int which, const struct itimerval *itv, struct itimerval *oitv); }
+	SYS_GETITIMER      = 70  // { int sys_getitimer(int which, struct itimerval *itv); }
+	SYS_SELECT         = 71  // { int sys_select(int nd, fd_set *in, fd_set *ou, fd_set *ex, struct timeval *tv); }
+	SYS_KEVENT         = 72  // { int sys_kevent(int fd, const struct kevent *changelist, int nchanges, struct kevent *eventlist, int nevents, const struct timespec *timeout); }
+	SYS_MUNMAP         = 73  // { int sys_munmap(void *addr, size_t len); }
+	SYS_MPROTECT       = 74  // { int sys_mprotect(void *addr, size_t len, int prot); }
+	SYS_MADVISE        = 75  // { int sys_madvise(void *addr, size_t len, int behav); }
+	SYS_UTIMES         = 76  // { int sys_utimes(const char *path, const struct timeval *tptr); }
+	SYS_FUTIMES        = 77  // { int sys_futimes(int fd, const struct timeval *tptr); }
+	SYS_GETGROUPS      = 79  // { int sys_getgroups(int gidsetsize, gid_t *gidset); }
+	SYS_SETGROUPS      = 80  // { int sys_setgroups(int gidsetsize, const gid_t *gidset); }
+	SYS_GETPGRP        = 81  // { int sys_getpgrp(void); }
+	SYS_SETPGID        = 82  // { int sys_setpgid(pid_t pid, pid_t pgid); }
+	SYS_FUTEX          = 83  // { int sys_futex(uint32_t *f, int op, int val, const struct timespec *timeout, uint32_t *g); }
+	SYS_UTIMENSAT      = 84  // { int sys_utimensat(int fd, const char *path, const struct timespec *times, int flag); }
+	SYS_FUTIMENS       = 85  // { int sys_futimens(int fd, const struct timespec *times); }
+	SYS_KBIND          = 86  // { int sys_kbind(const struct __kbind *param, size_t psize, int64_t proc_cookie); }
+	SYS_CLOCK_GETTIME  = 87  // { int sys_clock_gettime(clockid_t clock_id, struct timespec *tp); }
+	SYS_CLOCK_SETTIME  = 88  // { int sys_clock_settime(clockid_t clock_id, const struct timespec *tp); }
+	SYS_CLOCK_GETRES   = 89  // { int sys_clock_getres(clockid_t clock_id, struct timespec *tp); }
+	SYS_DUP2           = 90  // { int sys_dup2(int from, int to); }
+	SYS_NANOSLEEP      = 91  // { int sys_nanosleep(const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS_FCNTL          = 92  // { int sys_fcntl(int fd, int cmd, ... void *arg); }
+	SYS_ACCEPT4        = 93  // { int sys_accept4(int s, struct sockaddr *name, socklen_t *anamelen, int flags); }
+	SYS___THRSLEEP     = 94  // { int sys___thrsleep(const volatile void *ident, clockid_t clock_id, const struct timespec *tp, void *lock, const int *abort); }
+	SYS_FSYNC          = 95  // { int sys_fsync(int fd); }
+	SYS_SETPRIORITY    = 96  // { int sys_setpriority(int which, id_t who, int prio); }
+	SYS_SOCKET         = 97  // { int sys_socket(int domain, int type, int protocol); }
+	SYS_CONNECT        = 98  // { int sys_connect(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_GETDENTS       = 99  // { int sys_getdents(int fd, void *buf, size_t buflen); }
+	SYS_GETPRIORITY    = 100 // { int sys_getpriority(int which, id_t who); }
+	SYS_PIPE2          = 101 // { int sys_pipe2(int *fdp, int flags); }
+	SYS_DUP3           = 102 // { int sys_dup3(int from, int to, int flags); }
+	SYS_SIGRETURN      = 103 // { int sys_sigreturn(struct sigcontext *sigcntxp); }
+	SYS_BIND           = 104 // { int sys_bind(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_SETSOCKOPT     = 105 // { int sys_setsockopt(int s, int level, int name, const void *val, socklen_t valsize); }
+	SYS_LISTEN         = 106 // { int sys_listen(int s, int backlog); }
+	SYS_CHFLAGSAT      = 107 // { int sys_chflagsat(int fd, const char *path, u_int flags, int atflags); }
+	SYS_PLEDGE         = 108 // { int sys_pledge(const char *promises, const char *execpromises); }
+	SYS_PPOLL          = 109 // { int sys_ppoll(struct pollfd *fds, u_int nfds, const struct timespec *ts, const sigset_t *mask); }
+	SYS_PSELECT        = 110 // { int sys_pselect(int nd, fd_set *in, fd_set *ou, fd_set *ex, const struct timespec *ts, const sigset_t *mask); }
+	SYS_SIGSUSPEND     = 111 // { int sys_sigsuspend(int mask); }
+	SYS_SENDSYSLOG     = 112 // { int sys_sendsyslog(const char *buf, size_t nbyte, int flags); }
+	SYS_UNVEIL         = 114 // { int sys_unveil(const char *path, const char *permissions); }
+	SYS_GETSOCKOPT     = 118 // { int sys_getsockopt(int s, int level, int name, void *val, socklen_t *avalsize); }
+	SYS_THRKILL        = 119 // { int sys_thrkill(pid_t tid, int signum, void *tcb); }
+	SYS_READV          = 120 // { ssize_t sys_readv(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_WRITEV         = 121 // { ssize_t sys_writev(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_KILL           = 122 // { int sys_kill(int pid, int signum); }
+	SYS_FCHOWN         = 123 // { int sys_fchown(int fd, uid_t uid, gid_t gid); }
+	SYS_FCHMOD         = 124 // { int sys_fchmod(int fd, mode_t mode); }
+	SYS_SETREUID       = 126 // { int sys_setreuid(uid_t ruid, uid_t euid); }
+	SYS_SETREGID       = 127 // { int sys_setregid(gid_t rgid, gid_t egid); }
+	SYS_RENAME         = 128 // { int sys_rename(const char *from, const char *to); }
+	SYS_FLOCK          = 131 // { int sys_flock(int fd, int how); }
+	SYS_MKFIFO         = 132 // { int sys_mkfifo(const char *path, mode_t mode); }
+	SYS_SENDTO         = 133 // { ssize_t sys_sendto(int s, const void *buf, size_t len, int flags, const struct sockaddr *to, socklen_t tolen); }
+	SYS_SHUTDOWN       = 134 // { int sys_shutdown(int s, int how); }
+	SYS_SOCKETPAIR     = 135 // { int sys_socketpair(int domain, int type, int protocol, int *rsv); }
+	SYS_MKDIR          = 136 // { int sys_mkdir(const char *path, mode_t mode); }
+	SYS_RMDIR          = 137 // { int sys_rmdir(const char *path); }
+	SYS_ADJTIME        = 140 // { int sys_adjtime(const struct timeval *delta, struct timeval *olddelta); }
+	SYS_GETLOGIN_R     = 141 // { int sys_getlogin_r(char *namebuf, u_int namelen); }
+	SYS_SETSID         = 147 // { int sys_setsid(void); }
+	SYS_QUOTACTL       = 148 // { int sys_quotactl(const char *path, int cmd, int uid, char *arg); }
+	SYS_NFSSVC         = 155 // { int sys_nfssvc(int flag, void *argp); }
+	SYS_GETFH          = 161 // { int sys_getfh(const char *fname, fhandle_t *fhp); }
+	SYS_SYSARCH        = 165 // { int sys_sysarch(int op, void *parms); }
+	SYS_PREAD          = 173 // { ssize_t sys_pread(int fd, void *buf, size_t nbyte, int pad, off_t offset); }
+	SYS_PWRITE         = 174 // { ssize_t sys_pwrite(int fd, const void *buf, size_t nbyte, int pad, off_t offset); }
+	SYS_SETGID         = 181 // { int sys_setgid(gid_t gid); }
+	SYS_SETEGID        = 182 // { int sys_setegid(gid_t egid); }
+	SYS_SETEUID        = 183 // { int sys_seteuid(uid_t euid); }
+	SYS_PATHCONF       = 191 // { long sys_pathconf(const char *path, int name); }
+	SYS_FPATHCONF      = 192 // { long sys_fpathconf(int fd, int name); }
+	SYS_SWAPCTL        = 193 // { int sys_swapctl(int cmd, const void *arg, int misc); }
+	SYS_GETRLIMIT      = 194 // { int sys_getrlimit(int which, struct rlimit *rlp); }
+	SYS_SETRLIMIT      = 195 // { int sys_setrlimit(int which, const struct rlimit *rlp); }
+	SYS_MMAP           = 197 // { void *sys_mmap(void *addr, size_t len, int prot, int flags, int fd, long pad, off_t pos); }
+	SYS_LSEEK          = 199 // { off_t sys_lseek(int fd, int pad, off_t offset, int whence); }
+	SYS_TRUNCATE       = 200 // { int sys_truncate(const char *path, int pad, off_t length); }
+	SYS_FTRUNCATE      = 201 // { int sys_ftruncate(int fd, int pad, off_t length); }
+	SYS_SYSCTL         = 202 // { int sys_sysctl(const int *name, u_int namelen, void *old, size_t *oldlenp, void *new, size_t newlen); }
+	SYS_MLOCK          = 203 // { int sys_mlock(const void *addr, size_t len); }
+	SYS_MUNLOCK        = 204 // { int sys_munlock(const void *addr, size_t len); }
+	SYS_GETPGID        = 207 // { pid_t sys_getpgid(pid_t pid); }
+	SYS_UTRACE         = 209 // { int sys_utrace(const char *label, const void *addr, size_t len); }
+	SYS_SEMGET         = 221 // { int sys_semget(key_t key, int nsems, int semflg); }
+	SYS_MSGGET         = 225 // { int sys_msgget(key_t key, int msgflg); }
+	SYS_MSGSND         = 226 // { int sys_msgsnd(int msqid, const void *msgp, size_t msgsz, int msgflg); }
+	SYS_MSGRCV         = 227 // { int sys_msgrcv(int msqid, void *msgp, size_t msgsz, long msgtyp, int msgflg); }
+	SYS_SHMAT          = 228 // { void *sys_shmat(int shmid, const void *shmaddr, int shmflg); }
+	SYS_SHMDT          = 230 // { int sys_shmdt(const void *shmaddr); }
+	SYS_MINHERIT       = 250 // { int sys_minherit(void *addr, size_t len, int inherit); }
+	SYS_POLL           = 252 // { int sys_poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_ISSETUGID      = 253 // { int sys_issetugid(void); }
+	SYS_LCHOWN         = 254 // { int sys_lchown(const char *path, uid_t uid, gid_t gid); }
+	SYS_GETSID         = 255 // { pid_t sys_getsid(pid_t pid); }
+	SYS_MSYNC          = 256 // { int sys_msync(void *addr, size_t len, int flags); }
+	SYS_PIPE           = 263 // { int sys_pipe(int *fdp); }
+	SYS_FHOPEN         = 264 // { int sys_fhopen(const fhandle_t *fhp, int flags); }
+	SYS_PREADV         = 267 // { ssize_t sys_preadv(int fd, const struct iovec *iovp, int iovcnt, int pad, off_t offset); }
+	SYS_PWRITEV        = 268 // { ssize_t sys_pwritev(int fd, const struct iovec *iovp, int iovcnt, int pad, off_t offset); }
+	SYS_KQUEUE         = 269 // { int sys_kqueue(void); }
+	SYS_MLOCKALL       = 271 // { int sys_mlockall(int flags); }
+	SYS_MUNLOCKALL     = 272 // { int sys_munlockall(void); }
+	SYS_GETRESUID      = 281 // { int sys_getresuid(uid_t *ruid, uid_t *euid, uid_t *suid); }
+	SYS_SETRESUID      = 282 // { int sys_setresuid(uid_t ruid, uid_t euid, uid_t suid); }
+	SYS_GETRESGID      = 283 // { int sys_getresgid(gid_t *rgid, gid_t *egid, gid_t *sgid); }
+	SYS_SETRESGID      = 284 // { int sys_setresgid(gid_t rgid, gid_t egid, gid_t sgid); }
+	SYS_MQUERY         = 286 // { void *sys_mquery(void *addr, size_t len, int prot, int flags, int fd, long pad, off_t pos); }
+	SYS_CLOSEFROM      = 287 // { int sys_closefrom(int fd); }
+	SYS_SIGALTSTACK    = 288 // { int sys_sigaltstack(const struct sigaltstack *nss, struct sigaltstack *oss); }
+	SYS_SHMGET         = 289 // { int sys_shmget(key_t key, size_t size, int shmflg); }
+	SYS_SEMOP          = 290 // { int sys_semop(int semid, struct sembuf *sops, size_t nsops); }
+	SYS_FHSTAT         = 294 // { int sys_fhstat(const fhandle_t *fhp, struct stat *sb); }
+	SYS___SEMCTL       = 295 // { int sys___semctl(int semid, int semnum, int cmd, union semun *arg); }
+	SYS_SHMCTL         = 296 // { int sys_shmctl(int shmid, int cmd, struct shmid_ds *buf); }
+	SYS_MSGCTL         = 297 // { int sys_msgctl(int msqid, int cmd, struct msqid_ds *buf); }
+	SYS_SCHED_YIELD    = 298 // { int sys_sched_yield(void); }
+	SYS_GETTHRID       = 299 // { pid_t sys_getthrid(void); }
+	SYS___THRWAKEUP    = 301 // { int sys___thrwakeup(const volatile void *ident, int n); }
+	SYS___THREXIT      = 302 // { void sys___threxit(pid_t *notdead); }
+	SYS___THRSIGDIVERT = 303 // { int sys___thrsigdivert(sigset_t sigmask, siginfo_t *info, const struct timespec *timeout); }
+	SYS___GETCWD       = 304 // { int sys___getcwd(char *buf, size_t len); }
+	SYS_ADJFREQ        = 305 // { int sys_adjfreq(const int64_t *freq, int64_t *oldfreq); }
+	SYS_SETRTABLE      = 310 // { int sys_setrtable(int rtableid); }
+	SYS_GETRTABLE      = 311 // { int sys_getrtable(void); }
+	SYS_FACCESSAT      = 313 // { int sys_faccessat(int fd, const char *path, int amode, int flag); }
+	SYS_FCHMODAT       = 314 // { int sys_fchmodat(int fd, const char *path, mode_t mode, int flag); }
+	SYS_FCHOWNAT       = 315 // { int sys_fchownat(int fd, const char *path, uid_t uid, gid_t gid, int flag); }
+	SYS_LINKAT         = 317 // { int sys_linkat(int fd1, const char *path1, int fd2, const char *path2, int flag); }
+	SYS_MKDIRAT        = 318 // { int sys_mkdirat(int fd, const char *path, mode_t mode); }
+	SYS_MKFIFOAT       = 319 // { int sys_mkfifoat(int fd, const char *path, mode_t mode); }
+	SYS_MKNODAT        = 320 // { int sys_mknodat(int fd, const char *path, mode_t mode, dev_t dev); }
+	SYS_OPENAT         = 321 // { int sys_openat(int fd, const char *path, int flags, ... mode_t mode); }
+	SYS_READLINKAT     = 322 // { ssize_t sys_readlinkat(int fd, const char *path, char *buf, size_t count); }
+	SYS_RENAMEAT       = 323 // { int sys_renameat(int fromfd, const char *from, int tofd, const char *to); }
+	SYS_SYMLINKAT      = 324 // { int sys_symlinkat(const char *path, int fd, const char *link); }
+	SYS_UNLINKAT       = 325 // { int sys_unlinkat(int fd, const char *path, int flag); }
+	SYS___SET_TCB      = 329 // { void sys___set_tcb(void *tcb); }
+	SYS___GET_TCB      = 330 // { void *sys___get_tcb(void); }
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_mips64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_mips64.go
new file mode 100644
index 000000000..5c08d573b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/zsysnum_openbsd_mips64.go
@@ -0,0 +1,220 @@
+// go run mksysnum.go https://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/sys/kern/syscalls.master
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build mips64,openbsd
+
+package unix
+
+const (
+	SYS_EXIT           = 1   // { void sys_exit(int rval); }
+	SYS_FORK           = 2   // { int sys_fork(void); }
+	SYS_READ           = 3   // { ssize_t sys_read(int fd, void *buf, size_t nbyte); }
+	SYS_WRITE          = 4   // { ssize_t sys_write(int fd, const void *buf, size_t nbyte); }
+	SYS_OPEN           = 5   // { int sys_open(const char *path, int flags, ... mode_t mode); }
+	SYS_CLOSE          = 6   // { int sys_close(int fd); }
+	SYS_GETENTROPY     = 7   // { int sys_getentropy(void *buf, size_t nbyte); }
+	SYS___TFORK        = 8   // { int sys___tfork(const struct __tfork *param, size_t psize); }
+	SYS_LINK           = 9   // { int sys_link(const char *path, const char *link); }
+	SYS_UNLINK         = 10  // { int sys_unlink(const char *path); }
+	SYS_WAIT4          = 11  // { pid_t sys_wait4(pid_t pid, int *status, int options, struct rusage *rusage); }
+	SYS_CHDIR          = 12  // { int sys_chdir(const char *path); }
+	SYS_FCHDIR         = 13  // { int sys_fchdir(int fd); }
+	SYS_MKNOD          = 14  // { int sys_mknod(const char *path, mode_t mode, dev_t dev); }
+	SYS_CHMOD          = 15  // { int sys_chmod(const char *path, mode_t mode); }
+	SYS_CHOWN          = 16  // { int sys_chown(const char *path, uid_t uid, gid_t gid); }
+	SYS_OBREAK         = 17  // { int sys_obreak(char *nsize); } break
+	SYS_GETDTABLECOUNT = 18  // { int sys_getdtablecount(void); }
+	SYS_GETRUSAGE      = 19  // { int sys_getrusage(int who, struct rusage *rusage); }
+	SYS_GETPID         = 20  // { pid_t sys_getpid(void); }
+	SYS_MOUNT          = 21  // { int sys_mount(const char *type, const char *path, int flags, void *data); }
+	SYS_UNMOUNT        = 22  // { int sys_unmount(const char *path, int flags); }
+	SYS_SETUID         = 23  // { int sys_setuid(uid_t uid); }
+	SYS_GETUID         = 24  // { uid_t sys_getuid(void); }
+	SYS_GETEUID        = 25  // { uid_t sys_geteuid(void); }
+	SYS_PTRACE         = 26  // { int sys_ptrace(int req, pid_t pid, caddr_t addr, int data); }
+	SYS_RECVMSG        = 27  // { ssize_t sys_recvmsg(int s, struct msghdr *msg, int flags); }
+	SYS_SENDMSG        = 28  // { ssize_t sys_sendmsg(int s, const struct msghdr *msg, int flags); }
+	SYS_RECVFROM       = 29  // { ssize_t sys_recvfrom(int s, void *buf, size_t len, int flags, struct sockaddr *from, socklen_t *fromlenaddr); }
+	SYS_ACCEPT         = 30  // { int sys_accept(int s, struct sockaddr *name, socklen_t *anamelen); }
+	SYS_GETPEERNAME    = 31  // { int sys_getpeername(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_GETSOCKNAME    = 32  // { int sys_getsockname(int fdes, struct sockaddr *asa, socklen_t *alen); }
+	SYS_ACCESS         = 33  // { int sys_access(const char *path, int amode); }
+	SYS_CHFLAGS        = 34  // { int sys_chflags(const char *path, u_int flags); }
+	SYS_FCHFLAGS       = 35  // { int sys_fchflags(int fd, u_int flags); }
+	SYS_SYNC           = 36  // { void sys_sync(void); }
+	SYS_MSYSCALL       = 37  // { int sys_msyscall(void *addr, size_t len); }
+	SYS_STAT           = 38  // { int sys_stat(const char *path, struct stat *ub); }
+	SYS_GETPPID        = 39  // { pid_t sys_getppid(void); }
+	SYS_LSTAT          = 40  // { int sys_lstat(const char *path, struct stat *ub); }
+	SYS_DUP            = 41  // { int sys_dup(int fd); }
+	SYS_FSTATAT        = 42  // { int sys_fstatat(int fd, const char *path, struct stat *buf, int flag); }
+	SYS_GETEGID        = 43  // { gid_t sys_getegid(void); }
+	SYS_PROFIL         = 44  // { int sys_profil(caddr_t samples, size_t size, u_long offset, u_int scale); }
+	SYS_KTRACE         = 45  // { int sys_ktrace(const char *fname, int ops, int facs, pid_t pid); }
+	SYS_SIGACTION      = 46  // { int sys_sigaction(int signum, const struct sigaction *nsa, struct sigaction *osa); }
+	SYS_GETGID         = 47  // { gid_t sys_getgid(void); }
+	SYS_SIGPROCMASK    = 48  // { int sys_sigprocmask(int how, sigset_t mask); }
+	SYS_SETLOGIN       = 50  // { int sys_setlogin(const char *namebuf); }
+	SYS_ACCT           = 51  // { int sys_acct(const char *path); }
+	SYS_SIGPENDING     = 52  // { int sys_sigpending(void); }
+	SYS_FSTAT          = 53  // { int sys_fstat(int fd, struct stat *sb); }
+	SYS_IOCTL          = 54  // { int sys_ioctl(int fd, u_long com, ... void *data); }
+	SYS_REBOOT         = 55  // { int sys_reboot(int opt); }
+	SYS_REVOKE         = 56  // { int sys_revoke(const char *path); }
+	SYS_SYMLINK        = 57  // { int sys_symlink(const char *path, const char *link); }
+	SYS_READLINK       = 58  // { ssize_t sys_readlink(const char *path, char *buf, size_t count); }
+	SYS_EXECVE         = 59  // { int sys_execve(const char *path, char * const *argp, char * const *envp); }
+	SYS_UMASK          = 60  // { mode_t sys_umask(mode_t newmask); }
+	SYS_CHROOT         = 61  // { int sys_chroot(const char *path); }
+	SYS_GETFSSTAT      = 62  // { int sys_getfsstat(struct statfs *buf, size_t bufsize, int flags); }
+	SYS_STATFS         = 63  // { int sys_statfs(const char *path, struct statfs *buf); }
+	SYS_FSTATFS        = 64  // { int sys_fstatfs(int fd, struct statfs *buf); }
+	SYS_FHSTATFS       = 65  // { int sys_fhstatfs(const fhandle_t *fhp, struct statfs *buf); }
+	SYS_VFORK          = 66  // { int sys_vfork(void); }
+	SYS_GETTIMEOFDAY   = 67  // { int sys_gettimeofday(struct timeval *tp, struct timezone *tzp); }
+	SYS_SETTIMEOFDAY   = 68  // { int sys_settimeofday(const struct timeval *tv, const struct timezone *tzp); }
+	SYS_SETITIMER      = 69  // { int sys_setitimer(int which, const struct itimerval *itv, struct itimerval *oitv); }
+	SYS_GETITIMER      = 70  // { int sys_getitimer(int which, struct itimerval *itv); }
+	SYS_SELECT         = 71  // { int sys_select(int nd, fd_set *in, fd_set *ou, fd_set *ex, struct timeval *tv); }
+	SYS_KEVENT         = 72  // { int sys_kevent(int fd, const struct kevent *changelist, int nchanges, struct kevent *eventlist, int nevents, const struct timespec *timeout); }
+	SYS_MUNMAP         = 73  // { int sys_munmap(void *addr, size_t len); }
+	SYS_MPROTECT       = 74  // { int sys_mprotect(void *addr, size_t len, int prot); }
+	SYS_MADVISE        = 75  // { int sys_madvise(void *addr, size_t len, int behav); }
+	SYS_UTIMES         = 76  // { int sys_utimes(const char *path, const struct timeval *tptr); }
+	SYS_FUTIMES        = 77  // { int sys_futimes(int fd, const struct timeval *tptr); }
+	SYS_GETGROUPS      = 79  // { int sys_getgroups(int gidsetsize, gid_t *gidset); }
+	SYS_SETGROUPS      = 80  // { int sys_setgroups(int gidsetsize, const gid_t *gidset); }
+	SYS_GETPGRP        = 81  // { int sys_getpgrp(void); }
+	SYS_SETPGID        = 82  // { int sys_setpgid(pid_t pid, pid_t pgid); }
+	SYS_FUTEX          = 83  // { int sys_futex(uint32_t *f, int op, int val, const struct timespec *timeout, uint32_t *g); }
+	SYS_UTIMENSAT      = 84  // { int sys_utimensat(int fd, const char *path, const struct timespec *times, int flag); }
+	SYS_FUTIMENS       = 85  // { int sys_futimens(int fd, const struct timespec *times); }
+	SYS_KBIND          = 86  // { int sys_kbind(const struct __kbind *param, size_t psize, int64_t proc_cookie); }
+	SYS_CLOCK_GETTIME  = 87  // { int sys_clock_gettime(clockid_t clock_id, struct timespec *tp); }
+	SYS_CLOCK_SETTIME  = 88  // { int sys_clock_settime(clockid_t clock_id, const struct timespec *tp); }
+	SYS_CLOCK_GETRES   = 89  // { int sys_clock_getres(clockid_t clock_id, struct timespec *tp); }
+	SYS_DUP2           = 90  // { int sys_dup2(int from, int to); }
+	SYS_NANOSLEEP      = 91  // { int sys_nanosleep(const struct timespec *rqtp, struct timespec *rmtp); }
+	SYS_FCNTL          = 92  // { int sys_fcntl(int fd, int cmd, ... void *arg); }
+	SYS_ACCEPT4        = 93  // { int sys_accept4(int s, struct sockaddr *name, socklen_t *anamelen, int flags); }
+	SYS___THRSLEEP     = 94  // { int sys___thrsleep(const volatile void *ident, clockid_t clock_id, const struct timespec *tp, void *lock, const int *abort); }
+	SYS_FSYNC          = 95  // { int sys_fsync(int fd); }
+	SYS_SETPRIORITY    = 96  // { int sys_setpriority(int which, id_t who, int prio); }
+	SYS_SOCKET         = 97  // { int sys_socket(int domain, int type, int protocol); }
+	SYS_CONNECT        = 98  // { int sys_connect(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_GETDENTS       = 99  // { int sys_getdents(int fd, void *buf, size_t buflen); }
+	SYS_GETPRIORITY    = 100 // { int sys_getpriority(int which, id_t who); }
+	SYS_PIPE2          = 101 // { int sys_pipe2(int *fdp, int flags); }
+	SYS_DUP3           = 102 // { int sys_dup3(int from, int to, int flags); }
+	SYS_SIGRETURN      = 103 // { int sys_sigreturn(struct sigcontext *sigcntxp); }
+	SYS_BIND           = 104 // { int sys_bind(int s, const struct sockaddr *name, socklen_t namelen); }
+	SYS_SETSOCKOPT     = 105 // { int sys_setsockopt(int s, int level, int name, const void *val, socklen_t valsize); }
+	SYS_LISTEN         = 106 // { int sys_listen(int s, int backlog); }
+	SYS_CHFLAGSAT      = 107 // { int sys_chflagsat(int fd, const char *path, u_int flags, int atflags); }
+	SYS_PLEDGE         = 108 // { int sys_pledge(const char *promises, const char *execpromises); }
+	SYS_PPOLL          = 109 // { int sys_ppoll(struct pollfd *fds, u_int nfds, const struct timespec *ts, const sigset_t *mask); }
+	SYS_PSELECT        = 110 // { int sys_pselect(int nd, fd_set *in, fd_set *ou, fd_set *ex, const struct timespec *ts, const sigset_t *mask); }
+	SYS_SIGSUSPEND     = 111 // { int sys_sigsuspend(int mask); }
+	SYS_SENDSYSLOG     = 112 // { int sys_sendsyslog(const char *buf, size_t nbyte, int flags); }
+	SYS_UNVEIL         = 114 // { int sys_unveil(const char *path, const char *permissions); }
+	SYS___REALPATH     = 115 // { int sys___realpath(const char *pathname, char *resolved); }
+	SYS_GETSOCKOPT     = 118 // { int sys_getsockopt(int s, int level, int name, void *val, socklen_t *avalsize); }
+	SYS_THRKILL        = 119 // { int sys_thrkill(pid_t tid, int signum, void *tcb); }
+	SYS_READV          = 120 // { ssize_t sys_readv(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_WRITEV         = 121 // { ssize_t sys_writev(int fd, const struct iovec *iovp, int iovcnt); }
+	SYS_KILL           = 122 // { int sys_kill(int pid, int signum); }
+	SYS_FCHOWN         = 123 // { int sys_fchown(int fd, uid_t uid, gid_t gid); }
+	SYS_FCHMOD         = 124 // { int sys_fchmod(int fd, mode_t mode); }
+	SYS_SETREUID       = 126 // { int sys_setreuid(uid_t ruid, uid_t euid); }
+	SYS_SETREGID       = 127 // { int sys_setregid(gid_t rgid, gid_t egid); }
+	SYS_RENAME         = 128 // { int sys_rename(const char *from, const char *to); }
+	SYS_FLOCK          = 131 // { int sys_flock(int fd, int how); }
+	SYS_MKFIFO         = 132 // { int sys_mkfifo(const char *path, mode_t mode); }
+	SYS_SENDTO         = 133 // { ssize_t sys_sendto(int s, const void *buf, size_t len, int flags, const struct sockaddr *to, socklen_t tolen); }
+	SYS_SHUTDOWN       = 134 // { int sys_shutdown(int s, int how); }
+	SYS_SOCKETPAIR     = 135 // { int sys_socketpair(int domain, int type, int protocol, int *rsv); }
+	SYS_MKDIR          = 136 // { int sys_mkdir(const char *path, mode_t mode); }
+	SYS_RMDIR          = 137 // { int sys_rmdir(const char *path); }
+	SYS_ADJTIME        = 140 // { int sys_adjtime(const struct timeval *delta, struct timeval *olddelta); }
+	SYS_GETLOGIN_R     = 141 // { int sys_getlogin_r(char *namebuf, u_int namelen); }
+	SYS_SETSID         = 147 // { int sys_setsid(void); }
+	SYS_QUOTACTL       = 148 // { int sys_quotactl(const char *path, int cmd, int uid, char *arg); }
+	SYS_NFSSVC         = 155 // { int sys_nfssvc(int flag, void *argp); }
+	SYS_GETFH          = 161 // { int sys_getfh(const char *fname, fhandle_t *fhp); }
+	SYS___TMPFD        = 164 // { int sys___tmpfd(int flags); }
+	SYS_SYSARCH        = 165 // { int sys_sysarch(int op, void *parms); }
+	SYS_PREAD          = 173 // { ssize_t sys_pread(int fd, void *buf, size_t nbyte, int pad, off_t offset); }
+	SYS_PWRITE         = 174 // { ssize_t sys_pwrite(int fd, const void *buf, size_t nbyte, int pad, off_t offset); }
+	SYS_SETGID         = 181 // { int sys_setgid(gid_t gid); }
+	SYS_SETEGID        = 182 // { int sys_setegid(gid_t egid); }
+	SYS_SETEUID        = 183 // { int sys_seteuid(uid_t euid); }
+	SYS_PATHCONF       = 191 // { long sys_pathconf(const char *path, int name); }
+	SYS_FPATHCONF      = 192 // { long sys_fpathconf(int fd, int name); }
+	SYS_SWAPCTL        = 193 // { int sys_swapctl(int cmd, const void *arg, int misc); }
+	SYS_GETRLIMIT      = 194 // { int sys_getrlimit(int which, struct rlimit *rlp); }
+	SYS_SETRLIMIT      = 195 // { int sys_setrlimit(int which, const struct rlimit *rlp); }
+	SYS_MMAP           = 197 // { void *sys_mmap(void *addr, size_t len, int prot, int flags, int fd, long pad, off_t pos); }
+	SYS_LSEEK          = 199 // { off_t sys_lseek(int fd, int pad, off_t offset, int whence); }
+	SYS_TRUNCATE       = 200 // { int sys_truncate(const char *path, int pad, off_t length); }
+	SYS_FTRUNCATE      = 201 // { int sys_ftruncate(int fd, int pad, off_t length); }
+	SYS_SYSCTL         = 202 // { int sys_sysctl(const int *name, u_int namelen, void *old, size_t *oldlenp, void *new, size_t newlen); }
+	SYS_MLOCK          = 203 // { int sys_mlock(const void *addr, size_t len); }
+	SYS_MUNLOCK        = 204 // { int sys_munlock(const void *addr, size_t len); }
+	SYS_GETPGID        = 207 // { pid_t sys_getpgid(pid_t pid); }
+	SYS_UTRACE         = 209 // { int sys_utrace(const char *label, const void *addr, size_t len); }
+	SYS_SEMGET         = 221 // { int sys_semget(key_t key, int nsems, int semflg); }
+	SYS_MSGGET         = 225 // { int sys_msgget(key_t key, int msgflg); }
+	SYS_MSGSND         = 226 // { int sys_msgsnd(int msqid, const void *msgp, size_t msgsz, int msgflg); }
+	SYS_MSGRCV         = 227 // { int sys_msgrcv(int msqid, void *msgp, size_t msgsz, long msgtyp, int msgflg); }
+	SYS_SHMAT          = 228 // { void *sys_shmat(int shmid, const void *shmaddr, int shmflg); }
+	SYS_SHMDT          = 230 // { int sys_shmdt(const void *shmaddr); }
+	SYS_MINHERIT       = 250 // { int sys_minherit(void *addr, size_t len, int inherit); }
+	SYS_POLL           = 252 // { int sys_poll(struct pollfd *fds, u_int nfds, int timeout); }
+	SYS_ISSETUGID      = 253 // { int sys_issetugid(void); }
+	SYS_LCHOWN         = 254 // { int sys_lchown(const char *path, uid_t uid, gid_t gid); }
+	SYS_GETSID         = 255 // { pid_t sys_getsid(pid_t pid); }
+	SYS_MSYNC          = 256 // { int sys_msync(void *addr, size_t len, int flags); }
+	SYS_PIPE           = 263 // { int sys_pipe(int *fdp); }
+	SYS_FHOPEN         = 264 // { int sys_fhopen(const fhandle_t *fhp, int flags); }
+	SYS_PREADV         = 267 // { ssize_t sys_preadv(int fd, const struct iovec *iovp, int iovcnt, int pad, off_t offset); }
+	SYS_PWRITEV        = 268 // { ssize_t sys_pwritev(int fd, const struct iovec *iovp, int iovcnt, int pad, off_t offset); }
+	SYS_KQUEUE         = 269 // { int sys_kqueue(void); }
+	SYS_MLOCKALL       = 271 // { int sys_mlockall(int flags); }
+	SYS_MUNLOCKALL     = 272 // { int sys_munlockall(void); }
+	SYS_GETRESUID      = 281 // { int sys_getresuid(uid_t *ruid, uid_t *euid, uid_t *suid); }
+	SYS_SETRESUID      = 282 // { int sys_setresuid(uid_t ruid, uid_t euid, uid_t suid); }
+	SYS_GETRESGID      = 283 // { int sys_getresgid(gid_t *rgid, gid_t *egid, gid_t *sgid); }
+	SYS_SETRESGID      = 284 // { int sys_setresgid(gid_t rgid, gid_t egid, gid_t sgid); }
+	SYS_MQUERY         = 286 // { void *sys_mquery(void *addr, size_t len, int prot, int flags, int fd, long pad, off_t pos); }
+	SYS_CLOSEFROM      = 287 // { int sys_closefrom(int fd); }
+	SYS_SIGALTSTACK    = 288 // { int sys_sigaltstack(const struct sigaltstack *nss, struct sigaltstack *oss); }
+	SYS_SHMGET         = 289 // { int sys_shmget(key_t key, size_t size, int shmflg); }
+	SYS_SEMOP          = 290 // { int sys_semop(int semid, struct sembuf *sops, size_t nsops); }
+	SYS_FHSTAT         = 294 // { int sys_fhstat(const fhandle_t *fhp, struct stat *sb); }
+	SYS___SEMCTL       = 295 // { int sys___semctl(int semid, int semnum, int cmd, union semun *arg); }
+	SYS_SHMCTL         = 296 // { int sys_shmctl(int shmid, int cmd, struct shmid_ds *buf); }
+	SYS_MSGCTL         = 297 // { int sys_msgctl(int msqid, int cmd, struct msqid_ds *buf); }
+	SYS_SCHED_YIELD    = 298 // { int sys_sched_yield(void); }
+	SYS_GETTHRID       = 299 // { pid_t sys_getthrid(void); }
+	SYS___THRWAKEUP    = 301 // { int sys___thrwakeup(const volatile void *ident, int n); }
+	SYS___THREXIT      = 302 // { void sys___threxit(pid_t *notdead); }
+	SYS___THRSIGDIVERT = 303 // { int sys___thrsigdivert(sigset_t sigmask, siginfo_t *info, const struct timespec *timeout); }
+	SYS___GETCWD       = 304 // { int sys___getcwd(char *buf, size_t len); }
+	SYS_ADJFREQ        = 305 // { int sys_adjfreq(const int64_t *freq, int64_t *oldfreq); }
+	SYS_SETRTABLE      = 310 // { int sys_setrtable(int rtableid); }
+	SYS_GETRTABLE      = 311 // { int sys_getrtable(void); }
+	SYS_FACCESSAT      = 313 // { int sys_faccessat(int fd, const char *path, int amode, int flag); }
+	SYS_FCHMODAT       = 314 // { int sys_fchmodat(int fd, const char *path, mode_t mode, int flag); }
+	SYS_FCHOWNAT       = 315 // { int sys_fchownat(int fd, const char *path, uid_t uid, gid_t gid, int flag); }
+	SYS_LINKAT         = 317 // { int sys_linkat(int fd1, const char *path1, int fd2, const char *path2, int flag); }
+	SYS_MKDIRAT        = 318 // { int sys_mkdirat(int fd, const char *path, mode_t mode); }
+	SYS_MKFIFOAT       = 319 // { int sys_mkfifoat(int fd, const char *path, mode_t mode); }
+	SYS_MKNODAT        = 320 // { int sys_mknodat(int fd, const char *path, mode_t mode, dev_t dev); }
+	SYS_OPENAT         = 321 // { int sys_openat(int fd, const char *path, int flags, ... mode_t mode); }
+	SYS_READLINKAT     = 322 // { ssize_t sys_readlinkat(int fd, const char *path, char *buf, size_t count); }
+	SYS_RENAMEAT       = 323 // { int sys_renameat(int fromfd, const char *from, int tofd, const char *to); }
+	SYS_SYMLINKAT      = 324 // { int sys_symlinkat(const char *path, int fd, const char *link); }
+	SYS_UNLINKAT       = 325 // { int sys_unlinkat(int fd, const char *path, int flag); }
+	SYS___SET_TCB      = 329 // { void sys___set_tcb(void *tcb); }
+	SYS___GET_TCB      = 330 // { void *sys___get_tcb(void); }
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_aix_ppc.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_aix_ppc.go
new file mode 100644
index 000000000..2c1f815e6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_aix_ppc.go
@@ -0,0 +1,352 @@
+// cgo -godefs types_aix.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build ppc,aix
+
+package unix
+
+const (
+	SizeofPtr      = 0x4
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x4
+	SizeofLongLong = 0x8
+	PathMax        = 0x3ff
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int32
+	_C_long_long int64
+)
+
+type off64 int64
+type off int32
+type Mode_t uint32
+
+type Timespec struct {
+	Sec  int32
+	Nsec int32
+}
+
+type Timeval struct {
+	Sec  int32
+	Usec int32
+}
+
+type Timeval32 struct {
+	Sec  int32
+	Usec int32
+}
+
+type Timex struct{}
+
+type Time_t int32
+
+type Tms struct{}
+
+type Utimbuf struct {
+	Actime  int32
+	Modtime int32
+}
+
+type Timezone struct {
+	Minuteswest int32
+	Dsttime     int32
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int32
+	Ixrss    int32
+	Idrss    int32
+	Isrss    int32
+	Minflt   int32
+	Majflt   int32
+	Nswap    int32
+	Inblock  int32
+	Oublock  int32
+	Msgsnd   int32
+	Msgrcv   int32
+	Nsignals int32
+	Nvcsw    int32
+	Nivcsw   int32
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type Pid_t int32
+
+type _Gid_t uint32
+
+type dev_t uint32
+
+type Stat_t struct {
+	Dev      uint32
+	Ino      uint32
+	Mode     uint32
+	Nlink    int16
+	Flag     uint16
+	Uid      uint32
+	Gid      uint32
+	Rdev     uint32
+	Size     int32
+	Atim     Timespec
+	Mtim     Timespec
+	Ctim     Timespec
+	Blksize  int32
+	Blocks   int32
+	Vfstype  int32
+	Vfs      uint32
+	Type     uint32
+	Gen      uint32
+	Reserved [9]uint32
+}
+
+type StatxTimestamp struct{}
+
+type Statx_t struct{}
+
+type Dirent struct {
+	Offset uint32
+	Ino    uint32
+	Reclen uint16
+	Namlen uint16
+	Name   [256]uint8
+}
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]uint8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [1023]uint8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [120]uint8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]uint8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [1012]uint8
+}
+
+type _Socklen uint32
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x404
+	SizeofSockaddrUnix     = 0x401
+	SizeofSockaddrDatalink = 0x80
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofMsghdr           = 0x1c
+	SizeofCmsghdr          = 0xc
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	SizeofIfMsghdr = 0x10
+)
+
+type IfMsgHdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	Addrlen uint8
+	_       [1]byte
+}
+
+type FdSet struct {
+	Bits [2048]int32
+}
+
+type Utsname struct {
+	Sysname  [32]byte
+	Nodename [32]byte
+	Release  [32]byte
+	Version  [32]byte
+	Machine  [32]byte
+}
+
+type Ustat_t struct{}
+
+type Sigset_t struct {
+	Losigs uint32
+	Hisigs uint32
+}
+
+const (
+	AT_FDCWD            = -0x2
+	AT_REMOVEDIR        = 0x1
+	AT_SYMLINK_NOFOLLOW = 0x1
+)
+
+type Termios struct {
+	Iflag uint32
+	Oflag uint32
+	Cflag uint32
+	Lflag uint32
+	Cc    [16]uint8
+}
+
+type Termio struct {
+	Iflag uint16
+	Oflag uint16
+	Cflag uint16
+	Lflag uint16
+	Line  uint8
+	Cc    [8]uint8
+	_     [1]byte
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+type PollFd struct {
+	Fd      int32
+	Events  uint16
+	Revents uint16
+}
+
+const (
+	POLLERR    = 0x4000
+	POLLHUP    = 0x2000
+	POLLIN     = 0x1
+	POLLNVAL   = 0x8000
+	POLLOUT    = 0x2
+	POLLPRI    = 0x4
+	POLLRDBAND = 0x20
+	POLLRDNORM = 0x10
+	POLLWRBAND = 0x40
+	POLLWRNORM = 0x2
+)
+
+type Flock_t struct {
+	Type   int16
+	Whence int16
+	Sysid  uint32
+	Pid    int32
+	Vfs    int32
+	Start  int64
+	Len    int64
+}
+
+type Fsid_t struct {
+	Val [2]uint32
+}
+type Fsid64_t struct {
+	Val [2]uint64
+}
+
+type Statfs_t struct {
+	Version   int32
+	Type      int32
+	Bsize     uint32
+	Blocks    uint32
+	Bfree     uint32
+	Bavail    uint32
+	Files     uint32
+	Ffree     uint32
+	Fsid      Fsid_t
+	Vfstype   int32
+	Fsize     uint32
+	Vfsnumber int32
+	Vfsoff    int32
+	Vfslen    int32
+	Vfsvers   int32
+	Fname     [32]uint8
+	Fpack     [32]uint8
+	Name_max  int32
+}
+
+const RNDGETENTCNT = 0x80045200
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_aix_ppc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_aix_ppc64.go
new file mode 100644
index 000000000..b4a069ecb
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_aix_ppc64.go
@@ -0,0 +1,356 @@
+// cgo -godefs types_aix.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build ppc64,aix
+
+package unix
+
+const (
+	SizeofPtr      = 0x8
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x8
+	SizeofLongLong = 0x8
+	PathMax        = 0x3ff
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int64
+	_C_long_long int64
+)
+
+type off64 int64
+type off int64
+type Mode_t uint32
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int32
+	_    [4]byte
+}
+
+type Timeval32 struct {
+	Sec  int32
+	Usec int32
+}
+
+type Timex struct{}
+
+type Time_t int64
+
+type Tms struct{}
+
+type Utimbuf struct {
+	Actime  int64
+	Modtime int64
+}
+
+type Timezone struct {
+	Minuteswest int32
+	Dsttime     int32
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type Pid_t int32
+
+type _Gid_t uint32
+
+type dev_t uint64
+
+type Stat_t struct {
+	Dev      uint64
+	Ino      uint64
+	Mode     uint32
+	Nlink    int16
+	Flag     uint16
+	Uid      uint32
+	Gid      uint32
+	Rdev     uint64
+	Ssize    int32
+	Atim     Timespec
+	Mtim     Timespec
+	Ctim     Timespec
+	Blksize  int64
+	Blocks   int64
+	Vfstype  int32
+	Vfs      uint32
+	Type     uint32
+	Gen      uint32
+	Reserved [9]uint32
+	Padto_ll uint32
+	Size     int64
+}
+
+type StatxTimestamp struct{}
+
+type Statx_t struct{}
+
+type Dirent struct {
+	Offset uint64
+	Ino    uint64
+	Reclen uint16
+	Namlen uint16
+	Name   [256]uint8
+	_      [4]byte
+}
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]uint8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [1023]uint8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [120]uint8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]uint8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [1012]uint8
+}
+
+type _Socklen uint32
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x404
+	SizeofSockaddrUnix     = 0x401
+	SizeofSockaddrDatalink = 0x80
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofMsghdr           = 0x30
+	SizeofCmsghdr          = 0xc
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	SizeofIfMsghdr = 0x10
+)
+
+type IfMsgHdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	Addrlen uint8
+	_       [1]byte
+}
+
+type FdSet struct {
+	Bits [1024]int64
+}
+
+type Utsname struct {
+	Sysname  [32]byte
+	Nodename [32]byte
+	Release  [32]byte
+	Version  [32]byte
+	Machine  [32]byte
+}
+
+type Ustat_t struct{}
+
+type Sigset_t struct {
+	Set [4]uint64
+}
+
+const (
+	AT_FDCWD            = -0x2
+	AT_REMOVEDIR        = 0x1
+	AT_SYMLINK_NOFOLLOW = 0x1
+)
+
+type Termios struct {
+	Iflag uint32
+	Oflag uint32
+	Cflag uint32
+	Lflag uint32
+	Cc    [16]uint8
+}
+
+type Termio struct {
+	Iflag uint16
+	Oflag uint16
+	Cflag uint16
+	Lflag uint16
+	Line  uint8
+	Cc    [8]uint8
+	_     [1]byte
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+type PollFd struct {
+	Fd      int32
+	Events  uint16
+	Revents uint16
+}
+
+const (
+	POLLERR    = 0x4000
+	POLLHUP    = 0x2000
+	POLLIN     = 0x1
+	POLLNVAL   = 0x8000
+	POLLOUT    = 0x2
+	POLLPRI    = 0x4
+	POLLRDBAND = 0x20
+	POLLRDNORM = 0x10
+	POLLWRBAND = 0x40
+	POLLWRNORM = 0x2
+)
+
+type Flock_t struct {
+	Type   int16
+	Whence int16
+	Sysid  uint32
+	Pid    int32
+	Vfs    int32
+	Start  int64
+	Len    int64
+}
+
+type Fsid_t struct {
+	Val [2]uint32
+}
+type Fsid64_t struct {
+	Val [2]uint64
+}
+
+type Statfs_t struct {
+	Version   int32
+	Type      int32
+	Bsize     uint64
+	Blocks    uint64
+	Bfree     uint64
+	Bavail    uint64
+	Files     uint64
+	Ffree     uint64
+	Fsid      Fsid64_t
+	Vfstype   int32
+	Fsize     uint64
+	Vfsnumber int32
+	Vfsoff    int32
+	Vfslen    int32
+	Vfsvers   int32
+	Fname     [32]uint8
+	Fpack     [32]uint8
+	Name_max  int32
+	_         [4]byte
+}
+
+const RNDGETENTCNT = 0x80045200
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_darwin_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_darwin_386.go
new file mode 100644
index 000000000..6103f2150
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_darwin_386.go
@@ -0,0 +1,503 @@
+// cgo -godefs types_darwin.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build 386,darwin
+
+package unix
+
+const (
+	SizeofPtr      = 0x4
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x4
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int32
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int32
+	Nsec int32
+}
+
+type Timeval struct {
+	Sec  int32
+	Usec int32
+}
+
+type Timeval32 struct{}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int32
+	Ixrss    int32
+	Idrss    int32
+	Isrss    int32
+	Minflt   int32
+	Majflt   int32
+	Nswap    int32
+	Inblock  int32
+	Oublock  int32
+	Msgsnd   int32
+	Msgrcv   int32
+	Nsignals int32
+	Nvcsw    int32
+	Nivcsw   int32
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type _Gid_t uint32
+
+type Stat_t struct {
+	Dev     int32
+	Mode    uint16
+	Nlink   uint16
+	Ino     uint64
+	Uid     uint32
+	Gid     uint32
+	Rdev    int32
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Btim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize int32
+	Flags   uint32
+	Gen     uint32
+	Lspare  int32
+	Qspare  [2]int64
+}
+
+type Statfs_t struct {
+	Bsize       uint32
+	Iosize      int32
+	Blocks      uint64
+	Bfree       uint64
+	Bavail      uint64
+	Files       uint64
+	Ffree       uint64
+	Fsid        Fsid
+	Owner       uint32
+	Type        uint32
+	Flags       uint32
+	Fssubtype   uint32
+	Fstypename  [16]int8
+	Mntonname   [1024]int8
+	Mntfromname [1024]int8
+	Reserved    [8]uint32
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+}
+
+type Fstore_t struct {
+	Flags      uint32
+	Posmode    int32
+	Offset     int64
+	Length     int64
+	Bytesalloc int64
+}
+
+type Radvisory_t struct {
+	Offset int64
+	Count  int32
+}
+
+type Fbootstraptransfer_t struct {
+	Offset int64
+	Length uint32
+	Buffer *byte
+}
+
+type Log2phys_t struct {
+	Flags       uint32
+	Contigbytes int64
+	Devoffset   int64
+}
+
+type Fsid struct {
+	Val [2]int32
+}
+
+type Dirent struct {
+	Ino     uint64
+	Seekoff uint64
+	Reclen  uint16
+	Namlen  uint16
+	Type    uint8
+	Name    [1024]int8
+	_       [3]byte
+}
+
+const (
+	PathMax = 0x400
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [12]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet4Pktinfo struct {
+	Ifindex  uint32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x14
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x1c
+	SizeofCmsghdr          = 0xc
+	SizeofInet4Pktinfo     = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_TRACEME = 0x0
+	PTRACE_CONT    = 0x7
+	PTRACE_KILL    = 0x8
+)
+
+type Kevent_t struct {
+	Ident  uint32
+	Filter int16
+	Flags  uint16
+	Fflags uint32
+	Data   int32
+	Udata  *byte
+}
+
+type FdSet struct {
+	Bits [32]int32
+}
+
+const (
+	SizeofIfMsghdr    = 0x70
+	SizeofIfData      = 0x60
+	SizeofIfaMsghdr   = 0x14
+	SizeofIfmaMsghdr  = 0x10
+	SizeofIfmaMsghdr2 = 0x14
+	SizeofRtMsghdr    = 0x5c
+	SizeofRtMetrics   = 0x38
+)
+
+type IfMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+	Data    IfData
+}
+
+type IfData struct {
+	Type       uint8
+	Typelen    uint8
+	Physical   uint8
+	Addrlen    uint8
+	Hdrlen     uint8
+	Recvquota  uint8
+	Xmitquota  uint8
+	Unused1    uint8
+	Mtu        uint32
+	Metric     uint32
+	Baudrate   uint32
+	Ipackets   uint32
+	Ierrors    uint32
+	Opackets   uint32
+	Oerrors    uint32
+	Collisions uint32
+	Ibytes     uint32
+	Obytes     uint32
+	Imcasts    uint32
+	Omcasts    uint32
+	Iqdrops    uint32
+	Noproto    uint32
+	Recvtiming uint32
+	Xmittiming uint32
+	Lastchange Timeval
+	Unused2    uint32
+	Hwassist   uint32
+	Reserved1  uint32
+	Reserved2  uint32
+}
+
+type IfaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+	Metric  int32
+}
+
+type IfmaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+}
+
+type IfmaMsghdr2 struct {
+	Msglen   uint16
+	Version  uint8
+	Type     uint8
+	Addrs    int32
+	Flags    int32
+	Index    uint16
+	_        [2]byte
+	Refcount int32
+}
+
+type RtMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	_       [2]byte
+	Flags   int32
+	Addrs   int32
+	Pid     int32
+	Seq     int32
+	Errno   int32
+	Use     int32
+	Inits   uint32
+	Rmx     RtMetrics
+}
+
+type RtMetrics struct {
+	Locks    uint32
+	Mtu      uint32
+	Hopcount uint32
+	Expire   int32
+	Recvpipe uint32
+	Sendpipe uint32
+	Ssthresh uint32
+	Rtt      uint32
+	Rttvar   uint32
+	Pksent   uint32
+	Filler   [4]uint32
+}
+
+const (
+	SizeofBpfVersion = 0x4
+	SizeofBpfStat    = 0x8
+	SizeofBpfProgram = 0x8
+	SizeofBpfInsn    = 0x8
+	SizeofBpfHdr     = 0x14
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv uint32
+	Drop uint32
+}
+
+type BpfProgram struct {
+	Len   uint32
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp  Timeval
+	Caplen  uint32
+	Datalen uint32
+	Hdrlen  uint16
+	_       [2]byte
+}
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [20]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+const (
+	AT_FDCWD            = -0x2
+	AT_REMOVEDIR        = 0x80
+	AT_SYMLINK_FOLLOW   = 0x40
+	AT_SYMLINK_NOFOLLOW = 0x20
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR    = 0x8
+	POLLHUP    = 0x10
+	POLLIN     = 0x1
+	POLLNVAL   = 0x20
+	POLLOUT    = 0x4
+	POLLPRI    = 0x2
+	POLLRDBAND = 0x80
+	POLLRDNORM = 0x40
+	POLLWRBAND = 0x100
+	POLLWRNORM = 0x4
+)
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz      int32
+	Tick    int32
+	Tickadj int32
+	Stathz  int32
+	Profhz  int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_darwin_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_darwin_amd64.go
new file mode 100644
index 000000000..e6576d1c4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_darwin_amd64.go
@@ -0,0 +1,513 @@
+// cgo -godefs types_darwin.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,darwin
+
+package unix
+
+const (
+	SizeofPtr      = 0x8
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x8
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int64
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int32
+	_    [4]byte
+}
+
+type Timeval32 struct {
+	Sec  int32
+	Usec int32
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type _Gid_t uint32
+
+type Stat_t struct {
+	Dev     int32
+	Mode    uint16
+	Nlink   uint16
+	Ino     uint64
+	Uid     uint32
+	Gid     uint32
+	Rdev    int32
+	_       [4]byte
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Btim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize int32
+	Flags   uint32
+	Gen     uint32
+	Lspare  int32
+	Qspare  [2]int64
+}
+
+type Statfs_t struct {
+	Bsize       uint32
+	Iosize      int32
+	Blocks      uint64
+	Bfree       uint64
+	Bavail      uint64
+	Files       uint64
+	Ffree       uint64
+	Fsid        Fsid
+	Owner       uint32
+	Type        uint32
+	Flags       uint32
+	Fssubtype   uint32
+	Fstypename  [16]int8
+	Mntonname   [1024]int8
+	Mntfromname [1024]int8
+	Reserved    [8]uint32
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+}
+
+type Fstore_t struct {
+	Flags      uint32
+	Posmode    int32
+	Offset     int64
+	Length     int64
+	Bytesalloc int64
+}
+
+type Radvisory_t struct {
+	Offset int64
+	Count  int32
+	_      [4]byte
+}
+
+type Fbootstraptransfer_t struct {
+	Offset int64
+	Length uint64
+	Buffer *byte
+}
+
+type Log2phys_t struct {
+	Flags uint32
+	_     [8]byte
+	_     [8]byte
+}
+
+type Fsid struct {
+	Val [2]int32
+}
+
+type Dirent struct {
+	Ino     uint64
+	Seekoff uint64
+	Reclen  uint16
+	Namlen  uint16
+	Type    uint8
+	Name    [1024]int8
+	_       [3]byte
+}
+
+const (
+	PathMax = 0x400
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [12]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	_          [4]byte
+	Iov        *Iovec
+	Iovlen     int32
+	_          [4]byte
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet4Pktinfo struct {
+	Ifindex  uint32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x14
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x30
+	SizeofCmsghdr          = 0xc
+	SizeofInet4Pktinfo     = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_TRACEME = 0x0
+	PTRACE_CONT    = 0x7
+	PTRACE_KILL    = 0x8
+)
+
+type Kevent_t struct {
+	Ident  uint64
+	Filter int16
+	Flags  uint16
+	Fflags uint32
+	Data   int64
+	Udata  *byte
+}
+
+type FdSet struct {
+	Bits [32]int32
+}
+
+const (
+	SizeofIfMsghdr    = 0x70
+	SizeofIfData      = 0x60
+	SizeofIfaMsghdr   = 0x14
+	SizeofIfmaMsghdr  = 0x10
+	SizeofIfmaMsghdr2 = 0x14
+	SizeofRtMsghdr    = 0x5c
+	SizeofRtMetrics   = 0x38
+)
+
+type IfMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+	Data    IfData
+}
+
+type IfData struct {
+	Type       uint8
+	Typelen    uint8
+	Physical   uint8
+	Addrlen    uint8
+	Hdrlen     uint8
+	Recvquota  uint8
+	Xmitquota  uint8
+	Unused1    uint8
+	Mtu        uint32
+	Metric     uint32
+	Baudrate   uint32
+	Ipackets   uint32
+	Ierrors    uint32
+	Opackets   uint32
+	Oerrors    uint32
+	Collisions uint32
+	Ibytes     uint32
+	Obytes     uint32
+	Imcasts    uint32
+	Omcasts    uint32
+	Iqdrops    uint32
+	Noproto    uint32
+	Recvtiming uint32
+	Xmittiming uint32
+	Lastchange Timeval32
+	Unused2    uint32
+	Hwassist   uint32
+	Reserved1  uint32
+	Reserved2  uint32
+}
+
+type IfaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+	Metric  int32
+}
+
+type IfmaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+}
+
+type IfmaMsghdr2 struct {
+	Msglen   uint16
+	Version  uint8
+	Type     uint8
+	Addrs    int32
+	Flags    int32
+	Index    uint16
+	_        [2]byte
+	Refcount int32
+}
+
+type RtMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	_       [2]byte
+	Flags   int32
+	Addrs   int32
+	Pid     int32
+	Seq     int32
+	Errno   int32
+	Use     int32
+	Inits   uint32
+	Rmx     RtMetrics
+}
+
+type RtMetrics struct {
+	Locks    uint32
+	Mtu      uint32
+	Hopcount uint32
+	Expire   int32
+	Recvpipe uint32
+	Sendpipe uint32
+	Ssthresh uint32
+	Rtt      uint32
+	Rttvar   uint32
+	Pksent   uint32
+	Filler   [4]uint32
+}
+
+const (
+	SizeofBpfVersion = 0x4
+	SizeofBpfStat    = 0x8
+	SizeofBpfProgram = 0x10
+	SizeofBpfInsn    = 0x8
+	SizeofBpfHdr     = 0x14
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv uint32
+	Drop uint32
+}
+
+type BpfProgram struct {
+	Len   uint32
+	_     [4]byte
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp  Timeval32
+	Caplen  uint32
+	Datalen uint32
+	Hdrlen  uint16
+	_       [2]byte
+}
+
+type Termios struct {
+	Iflag  uint64
+	Oflag  uint64
+	Cflag  uint64
+	Lflag  uint64
+	Cc     [20]uint8
+	_      [4]byte
+	Ispeed uint64
+	Ospeed uint64
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+const (
+	AT_FDCWD            = -0x2
+	AT_REMOVEDIR        = 0x80
+	AT_SYMLINK_FOLLOW   = 0x40
+	AT_SYMLINK_NOFOLLOW = 0x20
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR    = 0x8
+	POLLHUP    = 0x10
+	POLLIN     = 0x1
+	POLLNVAL   = 0x20
+	POLLOUT    = 0x4
+	POLLPRI    = 0x2
+	POLLRDBAND = 0x80
+	POLLRDNORM = 0x40
+	POLLWRBAND = 0x100
+	POLLWRNORM = 0x4
+)
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz      int32
+	Tick    int32
+	Tickadj int32
+	Stathz  int32
+	Profhz  int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_darwin_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_darwin_arm.go
new file mode 100644
index 000000000..af9560fa1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_darwin_arm.go
@@ -0,0 +1,504 @@
+// NOTE: cgo can't generate struct Stat_t and struct Statfs_t yet
+// Created by cgo -godefs - DO NOT EDIT
+// cgo -godefs types_darwin.go
+
+// +build arm,darwin
+
+package unix
+
+const (
+	SizeofPtr      = 0x4
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x4
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int32
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int32
+	Nsec int32
+}
+
+type Timeval struct {
+	Sec  int32
+	Usec int32
+}
+
+type Timeval32 [0]byte
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int32
+	Ixrss    int32
+	Idrss    int32
+	Isrss    int32
+	Minflt   int32
+	Majflt   int32
+	Nswap    int32
+	Inblock  int32
+	Oublock  int32
+	Msgsnd   int32
+	Msgrcv   int32
+	Nsignals int32
+	Nvcsw    int32
+	Nivcsw   int32
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type _Gid_t uint32
+
+type Stat_t struct {
+	Dev     int32
+	Mode    uint16
+	Nlink   uint16
+	Ino     uint64
+	Uid     uint32
+	Gid     uint32
+	Rdev    int32
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Btim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize int32
+	Flags   uint32
+	Gen     uint32
+	Lspare  int32
+	Qspare  [2]int64
+}
+
+type Statfs_t struct {
+	Bsize       uint32
+	Iosize      int32
+	Blocks      uint64
+	Bfree       uint64
+	Bavail      uint64
+	Files       uint64
+	Ffree       uint64
+	Fsid        Fsid
+	Owner       uint32
+	Type        uint32
+	Flags       uint32
+	Fssubtype   uint32
+	Fstypename  [16]int8
+	Mntonname   [1024]int8
+	Mntfromname [1024]int8
+	Reserved    [8]uint32
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+}
+
+type Fstore_t struct {
+	Flags      uint32
+	Posmode    int32
+	Offset     int64
+	Length     int64
+	Bytesalloc int64
+}
+
+type Radvisory_t struct {
+	Offset int64
+	Count  int32
+}
+
+type Fbootstraptransfer_t struct {
+	Offset int64
+	Length uint32
+	Buffer *byte
+}
+
+type Log2phys_t struct {
+	Flags       uint32
+	Contigbytes int64
+	Devoffset   int64
+}
+
+type Fsid struct {
+	Val [2]int32
+}
+
+type Dirent struct {
+	Ino     uint64
+	Seekoff uint64
+	Reclen  uint16
+	Namlen  uint16
+	Type    uint8
+	Name    [1024]int8
+	_       [3]byte
+}
+
+const (
+	PathMax = 0x400
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [12]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet4Pktinfo struct {
+	Ifindex  uint32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x14
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x1c
+	SizeofCmsghdr          = 0xc
+	SizeofInet4Pktinfo     = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_TRACEME = 0x0
+	PTRACE_CONT    = 0x7
+	PTRACE_KILL    = 0x8
+)
+
+type Kevent_t struct {
+	Ident  uint32
+	Filter int16
+	Flags  uint16
+	Fflags uint32
+	Data   int32
+	Udata  *byte
+}
+
+type FdSet struct {
+	Bits [32]int32
+}
+
+const (
+	SizeofIfMsghdr    = 0x70
+	SizeofIfData      = 0x60
+	SizeofIfaMsghdr   = 0x14
+	SizeofIfmaMsghdr  = 0x10
+	SizeofIfmaMsghdr2 = 0x14
+	SizeofRtMsghdr    = 0x5c
+	SizeofRtMetrics   = 0x38
+)
+
+type IfMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+	Data    IfData
+}
+
+type IfData struct {
+	Type       uint8
+	Typelen    uint8
+	Physical   uint8
+	Addrlen    uint8
+	Hdrlen     uint8
+	Recvquota  uint8
+	Xmitquota  uint8
+	Unused1    uint8
+	Mtu        uint32
+	Metric     uint32
+	Baudrate   uint32
+	Ipackets   uint32
+	Ierrors    uint32
+	Opackets   uint32
+	Oerrors    uint32
+	Collisions uint32
+	Ibytes     uint32
+	Obytes     uint32
+	Imcasts    uint32
+	Omcasts    uint32
+	Iqdrops    uint32
+	Noproto    uint32
+	Recvtiming uint32
+	Xmittiming uint32
+	Lastchange Timeval
+	Unused2    uint32
+	Hwassist   uint32
+	Reserved1  uint32
+	Reserved2  uint32
+}
+
+type IfaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+	Metric  int32
+}
+
+type IfmaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+}
+
+type IfmaMsghdr2 struct {
+	Msglen   uint16
+	Version  uint8
+	Type     uint8
+	Addrs    int32
+	Flags    int32
+	Index    uint16
+	_        [2]byte
+	Refcount int32
+}
+
+type RtMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	_       [2]byte
+	Flags   int32
+	Addrs   int32
+	Pid     int32
+	Seq     int32
+	Errno   int32
+	Use     int32
+	Inits   uint32
+	Rmx     RtMetrics
+}
+
+type RtMetrics struct {
+	Locks    uint32
+	Mtu      uint32
+	Hopcount uint32
+	Expire   int32
+	Recvpipe uint32
+	Sendpipe uint32
+	Ssthresh uint32
+	Rtt      uint32
+	Rttvar   uint32
+	Pksent   uint32
+	Filler   [4]uint32
+}
+
+const (
+	SizeofBpfVersion = 0x4
+	SizeofBpfStat    = 0x8
+	SizeofBpfProgram = 0x8
+	SizeofBpfInsn    = 0x8
+	SizeofBpfHdr     = 0x14
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv uint32
+	Drop uint32
+}
+
+type BpfProgram struct {
+	Len   uint32
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp  Timeval
+	Caplen  uint32
+	Datalen uint32
+	Hdrlen  uint16
+	_       [2]byte
+}
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [20]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+const (
+	AT_FDCWD            = -0x2
+	AT_REMOVEDIR        = 0x80
+	AT_SYMLINK_FOLLOW   = 0x40
+	AT_SYMLINK_NOFOLLOW = 0x20
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR    = 0x8
+	POLLHUP    = 0x10
+	POLLIN     = 0x1
+	POLLNVAL   = 0x20
+	POLLOUT    = 0x4
+	POLLPRI    = 0x2
+	POLLRDBAND = 0x80
+	POLLRDNORM = 0x40
+	POLLWRBAND = 0x100
+	POLLWRNORM = 0x4
+)
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz      int32
+	Tick    int32
+	Tickadj int32
+	Stathz  int32
+	Profhz  int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_darwin_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_darwin_arm64.go
new file mode 100644
index 000000000..a09c0f942
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_darwin_arm64.go
@@ -0,0 +1,513 @@
+// cgo -godefs types_darwin.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm64,darwin
+
+package unix
+
+const (
+	SizeofPtr      = 0x8
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x8
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int64
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int32
+	_    [4]byte
+}
+
+type Timeval32 struct {
+	Sec  int32
+	Usec int32
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type _Gid_t uint32
+
+type Stat_t struct {
+	Dev     int32
+	Mode    uint16
+	Nlink   uint16
+	Ino     uint64
+	Uid     uint32
+	Gid     uint32
+	Rdev    int32
+	_       [4]byte
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Btim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize int32
+	Flags   uint32
+	Gen     uint32
+	Lspare  int32
+	Qspare  [2]int64
+}
+
+type Statfs_t struct {
+	Bsize       uint32
+	Iosize      int32
+	Blocks      uint64
+	Bfree       uint64
+	Bavail      uint64
+	Files       uint64
+	Ffree       uint64
+	Fsid        Fsid
+	Owner       uint32
+	Type        uint32
+	Flags       uint32
+	Fssubtype   uint32
+	Fstypename  [16]int8
+	Mntonname   [1024]int8
+	Mntfromname [1024]int8
+	Reserved    [8]uint32
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+}
+
+type Fstore_t struct {
+	Flags      uint32
+	Posmode    int32
+	Offset     int64
+	Length     int64
+	Bytesalloc int64
+}
+
+type Radvisory_t struct {
+	Offset int64
+	Count  int32
+	_      [4]byte
+}
+
+type Fbootstraptransfer_t struct {
+	Offset int64
+	Length uint64
+	Buffer *byte
+}
+
+type Log2phys_t struct {
+	Flags uint32
+	_     [8]byte
+	_     [8]byte
+}
+
+type Fsid struct {
+	Val [2]int32
+}
+
+type Dirent struct {
+	Ino     uint64
+	Seekoff uint64
+	Reclen  uint16
+	Namlen  uint16
+	Type    uint8
+	Name    [1024]int8
+	_       [3]byte
+}
+
+const (
+	PathMax = 0x400
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [12]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	_          [4]byte
+	Iov        *Iovec
+	Iovlen     int32
+	_          [4]byte
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet4Pktinfo struct {
+	Ifindex  uint32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x14
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x30
+	SizeofCmsghdr          = 0xc
+	SizeofInet4Pktinfo     = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_TRACEME = 0x0
+	PTRACE_CONT    = 0x7
+	PTRACE_KILL    = 0x8
+)
+
+type Kevent_t struct {
+	Ident  uint64
+	Filter int16
+	Flags  uint16
+	Fflags uint32
+	Data   int64
+	Udata  *byte
+}
+
+type FdSet struct {
+	Bits [32]int32
+}
+
+const (
+	SizeofIfMsghdr    = 0x70
+	SizeofIfData      = 0x60
+	SizeofIfaMsghdr   = 0x14
+	SizeofIfmaMsghdr  = 0x10
+	SizeofIfmaMsghdr2 = 0x14
+	SizeofRtMsghdr    = 0x5c
+	SizeofRtMetrics   = 0x38
+)
+
+type IfMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+	Data    IfData
+}
+
+type IfData struct {
+	Type       uint8
+	Typelen    uint8
+	Physical   uint8
+	Addrlen    uint8
+	Hdrlen     uint8
+	Recvquota  uint8
+	Xmitquota  uint8
+	Unused1    uint8
+	Mtu        uint32
+	Metric     uint32
+	Baudrate   uint32
+	Ipackets   uint32
+	Ierrors    uint32
+	Opackets   uint32
+	Oerrors    uint32
+	Collisions uint32
+	Ibytes     uint32
+	Obytes     uint32
+	Imcasts    uint32
+	Omcasts    uint32
+	Iqdrops    uint32
+	Noproto    uint32
+	Recvtiming uint32
+	Xmittiming uint32
+	Lastchange Timeval32
+	Unused2    uint32
+	Hwassist   uint32
+	Reserved1  uint32
+	Reserved2  uint32
+}
+
+type IfaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+	Metric  int32
+}
+
+type IfmaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+}
+
+type IfmaMsghdr2 struct {
+	Msglen   uint16
+	Version  uint8
+	Type     uint8
+	Addrs    int32
+	Flags    int32
+	Index    uint16
+	_        [2]byte
+	Refcount int32
+}
+
+type RtMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	_       [2]byte
+	Flags   int32
+	Addrs   int32
+	Pid     int32
+	Seq     int32
+	Errno   int32
+	Use     int32
+	Inits   uint32
+	Rmx     RtMetrics
+}
+
+type RtMetrics struct {
+	Locks    uint32
+	Mtu      uint32
+	Hopcount uint32
+	Expire   int32
+	Recvpipe uint32
+	Sendpipe uint32
+	Ssthresh uint32
+	Rtt      uint32
+	Rttvar   uint32
+	Pksent   uint32
+	Filler   [4]uint32
+}
+
+const (
+	SizeofBpfVersion = 0x4
+	SizeofBpfStat    = 0x8
+	SizeofBpfProgram = 0x10
+	SizeofBpfInsn    = 0x8
+	SizeofBpfHdr     = 0x14
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv uint32
+	Drop uint32
+}
+
+type BpfProgram struct {
+	Len   uint32
+	_     [4]byte
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp  Timeval32
+	Caplen  uint32
+	Datalen uint32
+	Hdrlen  uint16
+	_       [2]byte
+}
+
+type Termios struct {
+	Iflag  uint64
+	Oflag  uint64
+	Cflag  uint64
+	Lflag  uint64
+	Cc     [20]uint8
+	_      [4]byte
+	Ispeed uint64
+	Ospeed uint64
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+const (
+	AT_FDCWD            = -0x2
+	AT_REMOVEDIR        = 0x80
+	AT_SYMLINK_FOLLOW   = 0x40
+	AT_SYMLINK_NOFOLLOW = 0x20
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR    = 0x8
+	POLLHUP    = 0x10
+	POLLIN     = 0x1
+	POLLNVAL   = 0x20
+	POLLOUT    = 0x4
+	POLLPRI    = 0x2
+	POLLRDBAND = 0x80
+	POLLRDNORM = 0x40
+	POLLWRBAND = 0x100
+	POLLWRNORM = 0x4
+)
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz      int32
+	Tick    int32
+	Tickadj int32
+	Stathz  int32
+	Profhz  int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_dragonfly_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_dragonfly_amd64.go
new file mode 100644
index 000000000..71ea1d6d2
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_dragonfly_amd64.go
@@ -0,0 +1,479 @@
+// cgo -godefs types_dragonfly.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,dragonfly
+
+package unix
+
+const (
+	SizeofPtr      = 0x8
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x8
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int64
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Rlimit struct {
+	Cur int64
+	Max int64
+}
+
+type _Gid_t uint32
+
+type Stat_t struct {
+	Ino     uint64
+	Nlink   uint32
+	Dev     uint32
+	Mode    uint16
+	_1      uint16
+	Uid     uint32
+	Gid     uint32
+	Rdev    uint32
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize uint32
+	Flags   uint32
+	Gen     uint32
+	Lspare  int32
+	Qspare1 int64
+	Qspare2 int64
+}
+
+type Statfs_t struct {
+	Spare2      int64
+	Bsize       int64
+	Iosize      int64
+	Blocks      int64
+	Bfree       int64
+	Bavail      int64
+	Files       int64
+	Ffree       int64
+	Fsid        Fsid
+	Owner       uint32
+	Type        int32
+	Flags       int32
+	_           [4]byte
+	Syncwrites  int64
+	Asyncwrites int64
+	Fstypename  [16]int8
+	Mntonname   [80]int8
+	Syncreads   int64
+	Asyncreads  int64
+	Spares1     int16
+	Mntfromname [80]int8
+	Spares2     int16
+	_           [4]byte
+	Spare       [2]int64
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+}
+
+type Dirent struct {
+	Fileno  uint64
+	Namlen  uint16
+	Type    uint8
+	Unused1 uint8
+	Unused2 uint32
+	Name    [256]int8
+}
+
+type Fsid struct {
+	Val [2]int32
+}
+
+const (
+	PathMax = 0x400
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [12]int8
+	Rcf    uint16
+	Route  [16]uint16
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	_          [4]byte
+	Iov        *Iovec
+	Iovlen     int32
+	_          [4]byte
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x36
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x30
+	SizeofCmsghdr          = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_TRACEME = 0x0
+	PTRACE_CONT    = 0x7
+	PTRACE_KILL    = 0x8
+)
+
+type Kevent_t struct {
+	Ident  uint64
+	Filter int16
+	Flags  uint16
+	Fflags uint32
+	Data   int64
+	Udata  *byte
+}
+
+type FdSet struct {
+	Bits [16]uint64
+}
+
+const (
+	SizeofIfMsghdr         = 0xb0
+	SizeofIfData           = 0xa0
+	SizeofIfaMsghdr        = 0x14
+	SizeofIfmaMsghdr       = 0x10
+	SizeofIfAnnounceMsghdr = 0x18
+	SizeofRtMsghdr         = 0x98
+	SizeofRtMetrics        = 0x70
+)
+
+type IfMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+	Data    IfData
+}
+
+type IfData struct {
+	Type       uint8
+	Physical   uint8
+	Addrlen    uint8
+	Hdrlen     uint8
+	Recvquota  uint8
+	Xmitquota  uint8
+	_          [2]byte
+	Mtu        uint64
+	Metric     uint64
+	Link_state uint64
+	Baudrate   uint64
+	Ipackets   uint64
+	Ierrors    uint64
+	Opackets   uint64
+	Oerrors    uint64
+	Collisions uint64
+	Ibytes     uint64
+	Obytes     uint64
+	Imcasts    uint64
+	Omcasts    uint64
+	Iqdrops    uint64
+	Noproto    uint64
+	Hwassist   uint64
+	Oqdrops    uint64
+	Lastchange Timeval
+}
+
+type IfaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+	Metric  int32
+}
+
+type IfmaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+}
+
+type IfAnnounceMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	Name    [16]int8
+	What    uint16
+}
+
+type RtMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	_       [2]byte
+	Flags   int32
+	Addrs   int32
+	Pid     int32
+	Seq     int32
+	Errno   int32
+	Use     int32
+	Inits   uint64
+	Rmx     RtMetrics
+}
+
+type RtMetrics struct {
+	Locks     uint64
+	Mtu       uint64
+	Pksent    uint64
+	Expire    uint64
+	Sendpipe  uint64
+	Ssthresh  uint64
+	Rtt       uint64
+	Rttvar    uint64
+	Recvpipe  uint64
+	Hopcount  uint64
+	Mssopt    uint16
+	Pad       uint16
+	_         [4]byte
+	Msl       uint64
+	Iwmaxsegs uint64
+	Iwcapsegs uint64
+}
+
+const (
+	SizeofBpfVersion = 0x4
+	SizeofBpfStat    = 0x8
+	SizeofBpfProgram = 0x10
+	SizeofBpfInsn    = 0x8
+	SizeofBpfHdr     = 0x20
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv uint32
+	Drop uint32
+}
+
+type BpfProgram struct {
+	Len   uint32
+	_     [4]byte
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp  Timeval
+	Caplen  uint32
+	Datalen uint32
+	Hdrlen  uint16
+	_       [6]byte
+}
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [20]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+const (
+	AT_FDCWD            = 0xfffafdcd
+	AT_SYMLINK_NOFOLLOW = 0x1
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR    = 0x8
+	POLLHUP    = 0x10
+	POLLIN     = 0x1
+	POLLNVAL   = 0x20
+	POLLOUT    = 0x4
+	POLLPRI    = 0x2
+	POLLRDBAND = 0x80
+	POLLRDNORM = 0x40
+	POLLWRBAND = 0x100
+	POLLWRNORM = 0x4
+)
+
+type Utsname struct {
+	Sysname  [32]byte
+	Nodename [32]byte
+	Release  [32]byte
+	Version  [32]byte
+	Machine  [32]byte
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz      int32
+	Tick    int32
+	Tickadj int32
+	Stathz  int32
+	Profhz  int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_freebsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_freebsd_386.go
new file mode 100644
index 000000000..2a3ec615f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_freebsd_386.go
@@ -0,0 +1,709 @@
+// cgo -godefs types_freebsd.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build 386,freebsd
+
+package unix
+
+const (
+	SizeofPtr      = 0x4
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x4
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int32
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int32
+	Nsec int32
+}
+
+type Timeval struct {
+	Sec  int32
+	Usec int32
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int32
+	Ixrss    int32
+	Idrss    int32
+	Isrss    int32
+	Minflt   int32
+	Majflt   int32
+	Nswap    int32
+	Inblock  int32
+	Oublock  int32
+	Msgsnd   int32
+	Msgrcv   int32
+	Nsignals int32
+	Nvcsw    int32
+	Nivcsw   int32
+}
+
+type Rlimit struct {
+	Cur int64
+	Max int64
+}
+
+type _Gid_t uint32
+
+const (
+	_statfsVersion = 0x20140518
+	_dirblksiz     = 0x400
+)
+
+type Stat_t struct {
+	Dev     uint64
+	Ino     uint64
+	Nlink   uint64
+	Mode    uint16
+	_0      int16
+	Uid     uint32
+	Gid     uint32
+	_1      int32
+	Rdev    uint64
+	_       int32
+	Atim    Timespec
+	_       int32
+	Mtim    Timespec
+	_       int32
+	Ctim    Timespec
+	_       int32
+	Btim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize int32
+	Flags   uint32
+	Gen     uint64
+	Spare   [10]uint64
+}
+
+type stat_freebsd11_t struct {
+	Dev     uint32
+	Ino     uint32
+	Mode    uint16
+	Nlink   uint16
+	Uid     uint32
+	Gid     uint32
+	Rdev    uint32
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize int32
+	Flags   uint32
+	Gen     uint32
+	Lspare  int32
+	Btim    Timespec
+	_       [8]byte
+}
+
+type Statfs_t struct {
+	Version     uint32
+	Type        uint32
+	Flags       uint64
+	Bsize       uint64
+	Iosize      uint64
+	Blocks      uint64
+	Bfree       uint64
+	Bavail      int64
+	Files       uint64
+	Ffree       int64
+	Syncwrites  uint64
+	Asyncwrites uint64
+	Syncreads   uint64
+	Asyncreads  uint64
+	Spare       [10]uint64
+	Namemax     uint32
+	Owner       uint32
+	Fsid        Fsid
+	Charspare   [80]int8
+	Fstypename  [16]byte
+	Mntfromname [1024]byte
+	Mntonname   [1024]byte
+}
+
+type statfs_freebsd11_t struct {
+	Version     uint32
+	Type        uint32
+	Flags       uint64
+	Bsize       uint64
+	Iosize      uint64
+	Blocks      uint64
+	Bfree       uint64
+	Bavail      int64
+	Files       uint64
+	Ffree       int64
+	Syncwrites  uint64
+	Asyncwrites uint64
+	Syncreads   uint64
+	Asyncreads  uint64
+	Spare       [10]uint64
+	Namemax     uint32
+	Owner       uint32
+	Fsid        Fsid
+	Charspare   [80]int8
+	Fstypename  [16]byte
+	Mntfromname [88]byte
+	Mntonname   [88]byte
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+	Sysid  int32
+}
+
+type Dirent struct {
+	Fileno uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Pad0   uint8
+	Namlen uint16
+	Pad1   uint16
+	Name   [256]int8
+}
+
+type dirent_freebsd11 struct {
+	Fileno uint32
+	Reclen uint16
+	Type   uint8
+	Namlen uint8
+	Name   [256]int8
+}
+
+type Fsid struct {
+	Val [2]int32
+}
+
+const (
+	PathMax = 0x400
+)
+
+const (
+	FADV_NORMAL     = 0x0
+	FADV_RANDOM     = 0x1
+	FADV_SEQUENTIAL = 0x2
+	FADV_WILLNEED   = 0x3
+	FADV_DONTNEED   = 0x4
+	FADV_NOREUSE    = 0x5
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [46]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x36
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPMreqn          = 0xc
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x1c
+	SizeofCmsghdr          = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_ATTACH     = 0xa
+	PTRACE_CONT       = 0x7
+	PTRACE_DETACH     = 0xb
+	PTRACE_GETFPREGS  = 0x23
+	PTRACE_GETFSBASE  = 0x47
+	PTRACE_GETLWPLIST = 0xf
+	PTRACE_GETNUMLWPS = 0xe
+	PTRACE_GETREGS    = 0x21
+	PTRACE_GETXSTATE  = 0x45
+	PTRACE_IO         = 0xc
+	PTRACE_KILL       = 0x8
+	PTRACE_LWPEVENTS  = 0x18
+	PTRACE_LWPINFO    = 0xd
+	PTRACE_SETFPREGS  = 0x24
+	PTRACE_SETREGS    = 0x22
+	PTRACE_SINGLESTEP = 0x9
+	PTRACE_TRACEME    = 0x0
+)
+
+const (
+	PIOD_READ_D  = 0x1
+	PIOD_WRITE_D = 0x2
+	PIOD_READ_I  = 0x3
+	PIOD_WRITE_I = 0x4
+)
+
+const (
+	PL_FLAG_BORN   = 0x100
+	PL_FLAG_EXITED = 0x200
+	PL_FLAG_SI     = 0x20
+)
+
+const (
+	TRAP_BRKPT = 0x1
+	TRAP_TRACE = 0x2
+)
+
+type PtraceLwpInfoStruct struct {
+	Lwpid        int32
+	Event        int32
+	Flags        int32
+	Sigmask      Sigset_t
+	Siglist      Sigset_t
+	Siginfo      __Siginfo
+	Tdname       [20]int8
+	Child_pid    int32
+	Syscall_code uint32
+	Syscall_narg uint32
+}
+
+type __Siginfo struct {
+	Signo  int32
+	Errno  int32
+	Code   int32
+	Pid    int32
+	Uid    uint32
+	Status int32
+	Addr   *byte
+	Value  [4]byte
+	_      [32]byte
+}
+
+type Sigset_t struct {
+	Val [4]uint32
+}
+
+type Reg struct {
+	Fs     uint32
+	Es     uint32
+	Ds     uint32
+	Edi    uint32
+	Esi    uint32
+	Ebp    uint32
+	Isp    uint32
+	Ebx    uint32
+	Edx    uint32
+	Ecx    uint32
+	Eax    uint32
+	Trapno uint32
+	Err    uint32
+	Eip    uint32
+	Cs     uint32
+	Eflags uint32
+	Esp    uint32
+	Ss     uint32
+	Gs     uint32
+}
+
+type FpReg struct {
+	Env   [7]uint32
+	Acc   [8][10]uint8
+	Ex_sw uint32
+	Pad   [64]uint8
+}
+
+type PtraceIoDesc struct {
+	Op   int32
+	Offs *byte
+	Addr *byte
+	Len  uint32
+}
+
+type Kevent_t struct {
+	Ident  uint32
+	Filter int16
+	Flags  uint16
+	Fflags uint32
+	Data   int32
+	Udata  *byte
+}
+
+type FdSet struct {
+	Bits [32]uint32
+}
+
+const (
+	sizeofIfMsghdr         = 0xa8
+	SizeofIfMsghdr         = 0x60
+	sizeofIfData           = 0x98
+	SizeofIfData           = 0x50
+	SizeofIfaMsghdr        = 0x14
+	SizeofIfmaMsghdr       = 0x10
+	SizeofIfAnnounceMsghdr = 0x18
+	SizeofRtMsghdr         = 0x5c
+	SizeofRtMetrics        = 0x38
+)
+
+type ifMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       uint16
+	Data    ifData
+}
+
+type IfMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	Data    IfData
+}
+
+type ifData struct {
+	Type       uint8
+	Physical   uint8
+	Addrlen    uint8
+	Hdrlen     uint8
+	Link_state uint8
+	Vhid       uint8
+	Datalen    uint16
+	Mtu        uint32
+	Metric     uint32
+	Baudrate   uint64
+	Ipackets   uint64
+	Ierrors    uint64
+	Opackets   uint64
+	Oerrors    uint64
+	Collisions uint64
+	Ibytes     uint64
+	Obytes     uint64
+	Imcasts    uint64
+	Omcasts    uint64
+	Iqdrops    uint64
+	Oqdrops    uint64
+	Noproto    uint64
+	Hwassist   uint64
+	_          [8]byte
+	_          [16]byte
+}
+
+type IfData struct {
+	Type        uint8
+	Physical    uint8
+	Addrlen     uint8
+	Hdrlen      uint8
+	Link_state  uint8
+	Spare_char1 uint8
+	Spare_char2 uint8
+	Datalen     uint8
+	Mtu         uint32
+	Metric      uint32
+	Baudrate    uint32
+	Ipackets    uint32
+	Ierrors     uint32
+	Opackets    uint32
+	Oerrors     uint32
+	Collisions  uint32
+	Ibytes      uint32
+	Obytes      uint32
+	Imcasts     uint32
+	Omcasts     uint32
+	Iqdrops     uint32
+	Noproto     uint32
+	Hwassist    uint32
+	Epoch       int32
+	Lastchange  Timeval
+}
+
+type IfaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       uint16
+	Metric  int32
+}
+
+type IfmaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       uint16
+}
+
+type IfAnnounceMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	Name    [16]int8
+	What    uint16
+}
+
+type RtMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	_       uint16
+	Flags   int32
+	Addrs   int32
+	Pid     int32
+	Seq     int32
+	Errno   int32
+	Fmask   int32
+	Inits   uint32
+	Rmx     RtMetrics
+}
+
+type RtMetrics struct {
+	Locks    uint32
+	Mtu      uint32
+	Hopcount uint32
+	Expire   uint32
+	Recvpipe uint32
+	Sendpipe uint32
+	Ssthresh uint32
+	Rtt      uint32
+	Rttvar   uint32
+	Pksent   uint32
+	Weight   uint32
+	Filler   [3]uint32
+}
+
+const (
+	SizeofBpfVersion    = 0x4
+	SizeofBpfStat       = 0x8
+	SizeofBpfZbuf       = 0xc
+	SizeofBpfProgram    = 0x8
+	SizeofBpfInsn       = 0x8
+	SizeofBpfHdr        = 0x14
+	SizeofBpfZbufHeader = 0x20
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv uint32
+	Drop uint32
+}
+
+type BpfZbuf struct {
+	Bufa   *byte
+	Bufb   *byte
+	Buflen uint32
+}
+
+type BpfProgram struct {
+	Len   uint32
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp  Timeval
+	Caplen  uint32
+	Datalen uint32
+	Hdrlen  uint16
+	_       [2]byte
+}
+
+type BpfZbufHeader struct {
+	Kernel_gen uint32
+	Kernel_len uint32
+	User_gen   uint32
+	_          [5]uint32
+}
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [20]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+const (
+	AT_FDCWD            = -0x64
+	AT_REMOVEDIR        = 0x800
+	AT_SYMLINK_FOLLOW   = 0x400
+	AT_SYMLINK_NOFOLLOW = 0x200
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR      = 0x8
+	POLLHUP      = 0x10
+	POLLIN       = 0x1
+	POLLINIGNEOF = 0x2000
+	POLLNVAL     = 0x20
+	POLLOUT      = 0x4
+	POLLPRI      = 0x2
+	POLLRDBAND   = 0x80
+	POLLRDNORM   = 0x40
+	POLLWRBAND   = 0x100
+	POLLWRNORM   = 0x4
+)
+
+type CapRights struct {
+	Rights [2]uint64
+}
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz     int32
+	Tick   int32
+	Spare  int32
+	Stathz int32
+	Profhz int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_freebsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_freebsd_amd64.go
new file mode 100644
index 000000000..e11e95499
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_freebsd_amd64.go
@@ -0,0 +1,712 @@
+// cgo -godefs types_freebsd.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,freebsd
+
+package unix
+
+const (
+	SizeofPtr      = 0x8
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x8
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int64
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Rlimit struct {
+	Cur int64
+	Max int64
+}
+
+type _Gid_t uint32
+
+const (
+	_statfsVersion = 0x20140518
+	_dirblksiz     = 0x400
+)
+
+type Stat_t struct {
+	Dev     uint64
+	Ino     uint64
+	Nlink   uint64
+	Mode    uint16
+	_0      int16
+	Uid     uint32
+	Gid     uint32
+	_1      int32
+	Rdev    uint64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Btim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize int32
+	Flags   uint32
+	Gen     uint64
+	Spare   [10]uint64
+}
+
+type stat_freebsd11_t struct {
+	Dev     uint32
+	Ino     uint32
+	Mode    uint16
+	Nlink   uint16
+	Uid     uint32
+	Gid     uint32
+	Rdev    uint32
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize int32
+	Flags   uint32
+	Gen     uint32
+	Lspare  int32
+	Btim    Timespec
+}
+
+type Statfs_t struct {
+	Version     uint32
+	Type        uint32
+	Flags       uint64
+	Bsize       uint64
+	Iosize      uint64
+	Blocks      uint64
+	Bfree       uint64
+	Bavail      int64
+	Files       uint64
+	Ffree       int64
+	Syncwrites  uint64
+	Asyncwrites uint64
+	Syncreads   uint64
+	Asyncreads  uint64
+	Spare       [10]uint64
+	Namemax     uint32
+	Owner       uint32
+	Fsid        Fsid
+	Charspare   [80]int8
+	Fstypename  [16]byte
+	Mntfromname [1024]byte
+	Mntonname   [1024]byte
+}
+
+type statfs_freebsd11_t struct {
+	Version     uint32
+	Type        uint32
+	Flags       uint64
+	Bsize       uint64
+	Iosize      uint64
+	Blocks      uint64
+	Bfree       uint64
+	Bavail      int64
+	Files       uint64
+	Ffree       int64
+	Syncwrites  uint64
+	Asyncwrites uint64
+	Syncreads   uint64
+	Asyncreads  uint64
+	Spare       [10]uint64
+	Namemax     uint32
+	Owner       uint32
+	Fsid        Fsid
+	Charspare   [80]int8
+	Fstypename  [16]byte
+	Mntfromname [88]byte
+	Mntonname   [88]byte
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+	Sysid  int32
+	_      [4]byte
+}
+
+type Dirent struct {
+	Fileno uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Pad0   uint8
+	Namlen uint16
+	Pad1   uint16
+	Name   [256]int8
+}
+
+type dirent_freebsd11 struct {
+	Fileno uint32
+	Reclen uint16
+	Type   uint8
+	Namlen uint8
+	Name   [256]int8
+}
+
+type Fsid struct {
+	Val [2]int32
+}
+
+const (
+	PathMax = 0x400
+)
+
+const (
+	FADV_NORMAL     = 0x0
+	FADV_RANDOM     = 0x1
+	FADV_SEQUENTIAL = 0x2
+	FADV_WILLNEED   = 0x3
+	FADV_DONTNEED   = 0x4
+	FADV_NOREUSE    = 0x5
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [46]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x36
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPMreqn          = 0xc
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x30
+	SizeofCmsghdr          = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_ATTACH     = 0xa
+	PTRACE_CONT       = 0x7
+	PTRACE_DETACH     = 0xb
+	PTRACE_GETFPREGS  = 0x23
+	PTRACE_GETFSBASE  = 0x47
+	PTRACE_GETLWPLIST = 0xf
+	PTRACE_GETNUMLWPS = 0xe
+	PTRACE_GETREGS    = 0x21
+	PTRACE_GETXSTATE  = 0x45
+	PTRACE_IO         = 0xc
+	PTRACE_KILL       = 0x8
+	PTRACE_LWPEVENTS  = 0x18
+	PTRACE_LWPINFO    = 0xd
+	PTRACE_SETFPREGS  = 0x24
+	PTRACE_SETREGS    = 0x22
+	PTRACE_SINGLESTEP = 0x9
+	PTRACE_TRACEME    = 0x0
+)
+
+const (
+	PIOD_READ_D  = 0x1
+	PIOD_WRITE_D = 0x2
+	PIOD_READ_I  = 0x3
+	PIOD_WRITE_I = 0x4
+)
+
+const (
+	PL_FLAG_BORN   = 0x100
+	PL_FLAG_EXITED = 0x200
+	PL_FLAG_SI     = 0x20
+)
+
+const (
+	TRAP_BRKPT = 0x1
+	TRAP_TRACE = 0x2
+)
+
+type PtraceLwpInfoStruct struct {
+	Lwpid        int32
+	Event        int32
+	Flags        int32
+	Sigmask      Sigset_t
+	Siglist      Sigset_t
+	Siginfo      __Siginfo
+	Tdname       [20]int8
+	Child_pid    int32
+	Syscall_code uint32
+	Syscall_narg uint32
+}
+
+type __Siginfo struct {
+	Signo  int32
+	Errno  int32
+	Code   int32
+	Pid    int32
+	Uid    uint32
+	Status int32
+	Addr   *byte
+	Value  [8]byte
+	_      [40]byte
+}
+
+type Sigset_t struct {
+	Val [4]uint32
+}
+
+type Reg struct {
+	R15    int64
+	R14    int64
+	R13    int64
+	R12    int64
+	R11    int64
+	R10    int64
+	R9     int64
+	R8     int64
+	Rdi    int64
+	Rsi    int64
+	Rbp    int64
+	Rbx    int64
+	Rdx    int64
+	Rcx    int64
+	Rax    int64
+	Trapno uint32
+	Fs     uint16
+	Gs     uint16
+	Err    uint32
+	Es     uint16
+	Ds     uint16
+	Rip    int64
+	Cs     int64
+	Rflags int64
+	Rsp    int64
+	Ss     int64
+}
+
+type FpReg struct {
+	Env   [4]uint64
+	Acc   [8][16]uint8
+	Xacc  [16][16]uint8
+	Spare [12]uint64
+}
+
+type PtraceIoDesc struct {
+	Op   int32
+	Offs *byte
+	Addr *byte
+	Len  uint64
+}
+
+type Kevent_t struct {
+	Ident  uint64
+	Filter int16
+	Flags  uint16
+	Fflags uint32
+	Data   int64
+	Udata  *byte
+}
+
+type FdSet struct {
+	Bits [16]uint64
+}
+
+const (
+	sizeofIfMsghdr         = 0xa8
+	SizeofIfMsghdr         = 0xa8
+	sizeofIfData           = 0x98
+	SizeofIfData           = 0x98
+	SizeofIfaMsghdr        = 0x14
+	SizeofIfmaMsghdr       = 0x10
+	SizeofIfAnnounceMsghdr = 0x18
+	SizeofRtMsghdr         = 0x98
+	SizeofRtMetrics        = 0x70
+)
+
+type ifMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       uint16
+	Data    ifData
+}
+
+type IfMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	Data    IfData
+}
+
+type ifData struct {
+	Type       uint8
+	Physical   uint8
+	Addrlen    uint8
+	Hdrlen     uint8
+	Link_state uint8
+	Vhid       uint8
+	Datalen    uint16
+	Mtu        uint32
+	Metric     uint32
+	Baudrate   uint64
+	Ipackets   uint64
+	Ierrors    uint64
+	Opackets   uint64
+	Oerrors    uint64
+	Collisions uint64
+	Ibytes     uint64
+	Obytes     uint64
+	Imcasts    uint64
+	Omcasts    uint64
+	Iqdrops    uint64
+	Oqdrops    uint64
+	Noproto    uint64
+	Hwassist   uint64
+	_          [8]byte
+	_          [16]byte
+}
+
+type IfData struct {
+	Type        uint8
+	Physical    uint8
+	Addrlen     uint8
+	Hdrlen      uint8
+	Link_state  uint8
+	Spare_char1 uint8
+	Spare_char2 uint8
+	Datalen     uint8
+	Mtu         uint64
+	Metric      uint64
+	Baudrate    uint64
+	Ipackets    uint64
+	Ierrors     uint64
+	Opackets    uint64
+	Oerrors     uint64
+	Collisions  uint64
+	Ibytes      uint64
+	Obytes      uint64
+	Imcasts     uint64
+	Omcasts     uint64
+	Iqdrops     uint64
+	Noproto     uint64
+	Hwassist    uint64
+	Epoch       int64
+	Lastchange  Timeval
+}
+
+type IfaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       uint16
+	Metric  int32
+}
+
+type IfmaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       uint16
+}
+
+type IfAnnounceMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	Name    [16]int8
+	What    uint16
+}
+
+type RtMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	_       uint16
+	Flags   int32
+	Addrs   int32
+	Pid     int32
+	Seq     int32
+	Errno   int32
+	Fmask   int32
+	Inits   uint64
+	Rmx     RtMetrics
+}
+
+type RtMetrics struct {
+	Locks    uint64
+	Mtu      uint64
+	Hopcount uint64
+	Expire   uint64
+	Recvpipe uint64
+	Sendpipe uint64
+	Ssthresh uint64
+	Rtt      uint64
+	Rttvar   uint64
+	Pksent   uint64
+	Weight   uint64
+	Filler   [3]uint64
+}
+
+const (
+	SizeofBpfVersion    = 0x4
+	SizeofBpfStat       = 0x8
+	SizeofBpfZbuf       = 0x18
+	SizeofBpfProgram    = 0x10
+	SizeofBpfInsn       = 0x8
+	SizeofBpfHdr        = 0x20
+	SizeofBpfZbufHeader = 0x20
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv uint32
+	Drop uint32
+}
+
+type BpfZbuf struct {
+	Bufa   *byte
+	Bufb   *byte
+	Buflen uint64
+}
+
+type BpfProgram struct {
+	Len   uint32
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp  Timeval
+	Caplen  uint32
+	Datalen uint32
+	Hdrlen  uint16
+	_       [6]byte
+}
+
+type BpfZbufHeader struct {
+	Kernel_gen uint32
+	Kernel_len uint32
+	User_gen   uint32
+	_          [5]uint32
+}
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [20]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+const (
+	AT_FDCWD            = -0x64
+	AT_REMOVEDIR        = 0x800
+	AT_SYMLINK_FOLLOW   = 0x400
+	AT_SYMLINK_NOFOLLOW = 0x200
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR      = 0x8
+	POLLHUP      = 0x10
+	POLLIN       = 0x1
+	POLLINIGNEOF = 0x2000
+	POLLNVAL     = 0x20
+	POLLOUT      = 0x4
+	POLLPRI      = 0x2
+	POLLRDBAND   = 0x80
+	POLLRDNORM   = 0x40
+	POLLWRBAND   = 0x100
+	POLLWRNORM   = 0x4
+)
+
+type CapRights struct {
+	Rights [2]uint64
+}
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz     int32
+	Tick   int32
+	Spare  int32
+	Stathz int32
+	Profhz int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_freebsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_freebsd_arm.go
new file mode 100644
index 000000000..b91c2ae0f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_freebsd_arm.go
@@ -0,0 +1,693 @@
+// cgo -godefs -- -fsigned-char types_freebsd.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm,freebsd
+
+package unix
+
+const (
+	SizeofPtr      = 0x4
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x4
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int32
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int32
+	_    [4]byte
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int32
+	_    [4]byte
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int32
+	Ixrss    int32
+	Idrss    int32
+	Isrss    int32
+	Minflt   int32
+	Majflt   int32
+	Nswap    int32
+	Inblock  int32
+	Oublock  int32
+	Msgsnd   int32
+	Msgrcv   int32
+	Nsignals int32
+	Nvcsw    int32
+	Nivcsw   int32
+}
+
+type Rlimit struct {
+	Cur int64
+	Max int64
+}
+
+type _Gid_t uint32
+
+const (
+	_statfsVersion = 0x20140518
+	_dirblksiz     = 0x400
+)
+
+type Stat_t struct {
+	Dev     uint64
+	Ino     uint64
+	Nlink   uint64
+	Mode    uint16
+	_0      int16
+	Uid     uint32
+	Gid     uint32
+	_1      int32
+	Rdev    uint64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Btim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize int32
+	Flags   uint32
+	Gen     uint64
+	Spare   [10]uint64
+}
+
+type stat_freebsd11_t struct {
+	Dev     uint32
+	Ino     uint32
+	Mode    uint16
+	Nlink   uint16
+	Uid     uint32
+	Gid     uint32
+	Rdev    uint32
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize int32
+	Flags   uint32
+	Gen     uint32
+	Lspare  int32
+	Btim    Timespec
+}
+
+type Statfs_t struct {
+	Version     uint32
+	Type        uint32
+	Flags       uint64
+	Bsize       uint64
+	Iosize      uint64
+	Blocks      uint64
+	Bfree       uint64
+	Bavail      int64
+	Files       uint64
+	Ffree       int64
+	Syncwrites  uint64
+	Asyncwrites uint64
+	Syncreads   uint64
+	Asyncreads  uint64
+	Spare       [10]uint64
+	Namemax     uint32
+	Owner       uint32
+	Fsid        Fsid
+	Charspare   [80]int8
+	Fstypename  [16]byte
+	Mntfromname [1024]byte
+	Mntonname   [1024]byte
+}
+
+type statfs_freebsd11_t struct {
+	Version     uint32
+	Type        uint32
+	Flags       uint64
+	Bsize       uint64
+	Iosize      uint64
+	Blocks      uint64
+	Bfree       uint64
+	Bavail      int64
+	Files       uint64
+	Ffree       int64
+	Syncwrites  uint64
+	Asyncwrites uint64
+	Syncreads   uint64
+	Asyncreads  uint64
+	Spare       [10]uint64
+	Namemax     uint32
+	Owner       uint32
+	Fsid        Fsid
+	Charspare   [80]int8
+	Fstypename  [16]byte
+	Mntfromname [88]byte
+	Mntonname   [88]byte
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+	Sysid  int32
+	_      [4]byte
+}
+
+type Dirent struct {
+	Fileno uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Pad0   uint8
+	Namlen uint16
+	Pad1   uint16
+	Name   [256]int8
+}
+
+type dirent_freebsd11 struct {
+	Fileno uint32
+	Reclen uint16
+	Type   uint8
+	Namlen uint8
+	Name   [256]int8
+}
+
+type Fsid struct {
+	Val [2]int32
+}
+
+const (
+	PathMax = 0x400
+)
+
+const (
+	FADV_NORMAL     = 0x0
+	FADV_RANDOM     = 0x1
+	FADV_SEQUENTIAL = 0x2
+	FADV_WILLNEED   = 0x3
+	FADV_DONTNEED   = 0x4
+	FADV_NOREUSE    = 0x5
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [46]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x36
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPMreqn          = 0xc
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x1c
+	SizeofCmsghdr          = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_ATTACH     = 0xa
+	PTRACE_CONT       = 0x7
+	PTRACE_DETACH     = 0xb
+	PTRACE_GETFPREGS  = 0x23
+	PTRACE_GETFSBASE  = 0x47
+	PTRACE_GETLWPLIST = 0xf
+	PTRACE_GETNUMLWPS = 0xe
+	PTRACE_GETREGS    = 0x21
+	PTRACE_GETXSTATE  = 0x45
+	PTRACE_IO         = 0xc
+	PTRACE_KILL       = 0x8
+	PTRACE_LWPEVENTS  = 0x18
+	PTRACE_LWPINFO    = 0xd
+	PTRACE_SETFPREGS  = 0x24
+	PTRACE_SETREGS    = 0x22
+	PTRACE_SINGLESTEP = 0x9
+	PTRACE_TRACEME    = 0x0
+)
+
+const (
+	PIOD_READ_D  = 0x1
+	PIOD_WRITE_D = 0x2
+	PIOD_READ_I  = 0x3
+	PIOD_WRITE_I = 0x4
+)
+
+const (
+	PL_FLAG_BORN   = 0x100
+	PL_FLAG_EXITED = 0x200
+	PL_FLAG_SI     = 0x20
+)
+
+const (
+	TRAP_BRKPT = 0x1
+	TRAP_TRACE = 0x2
+)
+
+type PtraceLwpInfoStruct struct {
+	Lwpid        int32
+	Event        int32
+	Flags        int32
+	Sigmask      Sigset_t
+	Siglist      Sigset_t
+	Siginfo      __Siginfo
+	Tdname       [20]int8
+	Child_pid    int32
+	Syscall_code uint32
+	Syscall_narg uint32
+}
+
+type __Siginfo struct {
+	Signo    int32
+	Errno    int32
+	Code     int32
+	Pid      int32
+	Uid      uint32
+	Status   int32
+	Addr     *byte
+	Value    [4]byte
+	X_reason [32]byte
+}
+
+type Sigset_t struct {
+	Val [4]uint32
+}
+
+type Reg struct {
+	R      [13]uint32
+	R_sp   uint32
+	R_lr   uint32
+	R_pc   uint32
+	R_cpsr uint32
+}
+
+type FpReg struct {
+	Fpr_fpsr uint32
+	Fpr      [8][3]uint32
+}
+
+type PtraceIoDesc struct {
+	Op   int32
+	Offs *byte
+	Addr *byte
+	Len  uint32
+}
+
+type Kevent_t struct {
+	Ident  uint32
+	Filter int16
+	Flags  uint16
+	Fflags uint32
+	Data   int32
+	Udata  *byte
+}
+
+type FdSet struct {
+	Bits [32]uint32
+}
+
+const (
+	sizeofIfMsghdr         = 0xa8
+	SizeofIfMsghdr         = 0x70
+	sizeofIfData           = 0x98
+	SizeofIfData           = 0x60
+	SizeofIfaMsghdr        = 0x14
+	SizeofIfmaMsghdr       = 0x10
+	SizeofIfAnnounceMsghdr = 0x18
+	SizeofRtMsghdr         = 0x5c
+	SizeofRtMetrics        = 0x38
+)
+
+type ifMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+	Data    ifData
+}
+
+type IfMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+	Data    IfData
+}
+
+type ifData struct {
+	Type       uint8
+	Physical   uint8
+	Addrlen    uint8
+	Hdrlen     uint8
+	Link_state uint8
+	Vhid       uint8
+	Datalen    uint16
+	Mtu        uint32
+	Metric     uint32
+	Baudrate   uint64
+	Ipackets   uint64
+	Ierrors    uint64
+	Opackets   uint64
+	Oerrors    uint64
+	Collisions uint64
+	Ibytes     uint64
+	Obytes     uint64
+	Imcasts    uint64
+	Omcasts    uint64
+	Iqdrops    uint64
+	Oqdrops    uint64
+	Noproto    uint64
+	Hwassist   uint64
+	_          [8]byte
+	_          [16]byte
+}
+
+type IfData struct {
+	Type        uint8
+	Physical    uint8
+	Addrlen     uint8
+	Hdrlen      uint8
+	Link_state  uint8
+	Spare_char1 uint8
+	Spare_char2 uint8
+	Datalen     uint8
+	Mtu         uint32
+	Metric      uint32
+	Baudrate    uint32
+	Ipackets    uint32
+	Ierrors     uint32
+	Opackets    uint32
+	Oerrors     uint32
+	Collisions  uint32
+	Ibytes      uint32
+	Obytes      uint32
+	Imcasts     uint32
+	Omcasts     uint32
+	Iqdrops     uint32
+	Noproto     uint32
+	Hwassist    uint32
+	_           [4]byte
+	Epoch       int64
+	Lastchange  Timeval
+}
+
+type IfaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+	Metric  int32
+}
+
+type IfmaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+}
+
+type IfAnnounceMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	Name    [16]int8
+	What    uint16
+}
+
+type RtMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	_       [2]byte
+	Flags   int32
+	Addrs   int32
+	Pid     int32
+	Seq     int32
+	Errno   int32
+	Fmask   int32
+	Inits   uint32
+	Rmx     RtMetrics
+}
+
+type RtMetrics struct {
+	Locks    uint32
+	Mtu      uint32
+	Hopcount uint32
+	Expire   uint32
+	Recvpipe uint32
+	Sendpipe uint32
+	Ssthresh uint32
+	Rtt      uint32
+	Rttvar   uint32
+	Pksent   uint32
+	Weight   uint32
+	Filler   [3]uint32
+}
+
+const (
+	SizeofBpfVersion    = 0x4
+	SizeofBpfStat       = 0x8
+	SizeofBpfZbuf       = 0xc
+	SizeofBpfProgram    = 0x8
+	SizeofBpfInsn       = 0x8
+	SizeofBpfHdr        = 0x20
+	SizeofBpfZbufHeader = 0x20
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv uint32
+	Drop uint32
+}
+
+type BpfZbuf struct {
+	Bufa   *byte
+	Bufb   *byte
+	Buflen uint32
+}
+
+type BpfProgram struct {
+	Len   uint32
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp  Timeval
+	Caplen  uint32
+	Datalen uint32
+	Hdrlen  uint16
+	_       [6]byte
+}
+
+type BpfZbufHeader struct {
+	Kernel_gen uint32
+	Kernel_len uint32
+	User_gen   uint32
+	_          [5]uint32
+}
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [20]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+const (
+	AT_FDCWD            = -0x64
+	AT_REMOVEDIR        = 0x800
+	AT_SYMLINK_FOLLOW   = 0x400
+	AT_SYMLINK_NOFOLLOW = 0x200
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR      = 0x8
+	POLLHUP      = 0x10
+	POLLIN       = 0x1
+	POLLINIGNEOF = 0x2000
+	POLLNVAL     = 0x20
+	POLLOUT      = 0x4
+	POLLPRI      = 0x2
+	POLLRDBAND   = 0x80
+	POLLRDNORM   = 0x40
+	POLLWRBAND   = 0x100
+	POLLWRNORM   = 0x4
+)
+
+type CapRights struct {
+	Rights [2]uint64
+}
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz     int32
+	Tick   int32
+	Spare  int32
+	Stathz int32
+	Profhz int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_freebsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_freebsd_arm64.go
new file mode 100644
index 000000000..c6fe1d097
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_freebsd_arm64.go
@@ -0,0 +1,690 @@
+// cgo -godefs -- -fsigned-char types_freebsd.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm64,freebsd
+
+package unix
+
+const (
+	SizeofPtr      = 0x8
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x8
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int64
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Rlimit struct {
+	Cur int64
+	Max int64
+}
+
+type _Gid_t uint32
+
+const (
+	_statfsVersion = 0x20140518
+	_dirblksiz     = 0x400
+)
+
+type Stat_t struct {
+	Dev     uint64
+	Ino     uint64
+	Nlink   uint64
+	Mode    uint16
+	_0      int16
+	Uid     uint32
+	Gid     uint32
+	_1      int32
+	Rdev    uint64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Btim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize int32
+	Flags   uint32
+	Gen     uint64
+	Spare   [10]uint64
+}
+
+type stat_freebsd11_t struct {
+	Dev     uint32
+	Ino     uint32
+	Mode    uint16
+	Nlink   uint16
+	Uid     uint32
+	Gid     uint32
+	Rdev    uint32
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize int32
+	Flags   uint32
+	Gen     uint32
+	Lspare  int32
+	Btim    Timespec
+}
+
+type Statfs_t struct {
+	Version     uint32
+	Type        uint32
+	Flags       uint64
+	Bsize       uint64
+	Iosize      uint64
+	Blocks      uint64
+	Bfree       uint64
+	Bavail      int64
+	Files       uint64
+	Ffree       int64
+	Syncwrites  uint64
+	Asyncwrites uint64
+	Syncreads   uint64
+	Asyncreads  uint64
+	Spare       [10]uint64
+	Namemax     uint32
+	Owner       uint32
+	Fsid        Fsid
+	Charspare   [80]int8
+	Fstypename  [16]byte
+	Mntfromname [1024]byte
+	Mntonname   [1024]byte
+}
+
+type statfs_freebsd11_t struct {
+	Version     uint32
+	Type        uint32
+	Flags       uint64
+	Bsize       uint64
+	Iosize      uint64
+	Blocks      uint64
+	Bfree       uint64
+	Bavail      int64
+	Files       uint64
+	Ffree       int64
+	Syncwrites  uint64
+	Asyncwrites uint64
+	Syncreads   uint64
+	Asyncreads  uint64
+	Spare       [10]uint64
+	Namemax     uint32
+	Owner       uint32
+	Fsid        Fsid
+	Charspare   [80]int8
+	Fstypename  [16]byte
+	Mntfromname [88]byte
+	Mntonname   [88]byte
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+	Sysid  int32
+	_      [4]byte
+}
+
+type Dirent struct {
+	Fileno uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Pad0   uint8
+	Namlen uint16
+	Pad1   uint16
+	Name   [256]int8
+}
+
+type dirent_freebsd11 struct {
+	Fileno uint32
+	Reclen uint16
+	Type   uint8
+	Namlen uint8
+	Name   [256]int8
+}
+
+type Fsid struct {
+	Val [2]int32
+}
+
+const (
+	PathMax = 0x400
+)
+
+const (
+	FADV_NORMAL     = 0x0
+	FADV_RANDOM     = 0x1
+	FADV_SEQUENTIAL = 0x2
+	FADV_WILLNEED   = 0x3
+	FADV_DONTNEED   = 0x4
+	FADV_NOREUSE    = 0x5
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [46]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x36
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPMreqn          = 0xc
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x30
+	SizeofCmsghdr          = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_ATTACH     = 0xa
+	PTRACE_CONT       = 0x7
+	PTRACE_DETACH     = 0xb
+	PTRACE_GETFPREGS  = 0x23
+	PTRACE_GETLWPLIST = 0xf
+	PTRACE_GETNUMLWPS = 0xe
+	PTRACE_GETREGS    = 0x21
+	PTRACE_IO         = 0xc
+	PTRACE_KILL       = 0x8
+	PTRACE_LWPEVENTS  = 0x18
+	PTRACE_LWPINFO    = 0xd
+	PTRACE_SETFPREGS  = 0x24
+	PTRACE_SETREGS    = 0x22
+	PTRACE_SINGLESTEP = 0x9
+	PTRACE_TRACEME    = 0x0
+)
+
+const (
+	PIOD_READ_D  = 0x1
+	PIOD_WRITE_D = 0x2
+	PIOD_READ_I  = 0x3
+	PIOD_WRITE_I = 0x4
+)
+
+const (
+	PL_FLAG_BORN   = 0x100
+	PL_FLAG_EXITED = 0x200
+	PL_FLAG_SI     = 0x20
+)
+
+const (
+	TRAP_BRKPT = 0x1
+	TRAP_TRACE = 0x2
+)
+
+type PtraceLwpInfoStruct struct {
+	Lwpid        int32
+	Event        int32
+	Flags        int32
+	Sigmask      Sigset_t
+	Siglist      Sigset_t
+	Siginfo      __Siginfo
+	Tdname       [20]int8
+	Child_pid    int32
+	Syscall_code uint32
+	Syscall_narg uint32
+}
+
+type __Siginfo struct {
+	Signo  int32
+	Errno  int32
+	Code   int32
+	Pid    int32
+	Uid    uint32
+	Status int32
+	Addr   *byte
+	Value  [8]byte
+	_      [40]byte
+}
+
+type Sigset_t struct {
+	Val [4]uint32
+}
+
+type Reg struct {
+	X    [30]uint64
+	Lr   uint64
+	Sp   uint64
+	Elr  uint64
+	Spsr uint32
+	_    [4]byte
+}
+
+type FpReg struct {
+	Q  [32][16]uint8
+	Sr uint32
+	Cr uint32
+	_  [8]byte
+}
+
+type PtraceIoDesc struct {
+	Op   int32
+	Offs *byte
+	Addr *byte
+	Len  uint64
+}
+
+type Kevent_t struct {
+	Ident  uint64
+	Filter int16
+	Flags  uint16
+	Fflags uint32
+	Data   int64
+	Udata  *byte
+}
+
+type FdSet struct {
+	Bits [16]uint64
+}
+
+const (
+	sizeofIfMsghdr         = 0xa8
+	SizeofIfMsghdr         = 0xa8
+	sizeofIfData           = 0x98
+	SizeofIfData           = 0x98
+	SizeofIfaMsghdr        = 0x14
+	SizeofIfmaMsghdr       = 0x10
+	SizeofIfAnnounceMsghdr = 0x18
+	SizeofRtMsghdr         = 0x98
+	SizeofRtMetrics        = 0x70
+)
+
+type ifMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       uint16
+	Data    ifData
+}
+
+type IfMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	Data    IfData
+}
+
+type ifData struct {
+	Type       uint8
+	Physical   uint8
+	Addrlen    uint8
+	Hdrlen     uint8
+	Link_state uint8
+	Vhid       uint8
+	Datalen    uint16
+	Mtu        uint32
+	Metric     uint32
+	Baudrate   uint64
+	Ipackets   uint64
+	Ierrors    uint64
+	Opackets   uint64
+	Oerrors    uint64
+	Collisions uint64
+	Ibytes     uint64
+	Obytes     uint64
+	Imcasts    uint64
+	Omcasts    uint64
+	Iqdrops    uint64
+	Oqdrops    uint64
+	Noproto    uint64
+	Hwassist   uint64
+	_          [8]byte
+	_          [16]byte
+}
+
+type IfData struct {
+	Type        uint8
+	Physical    uint8
+	Addrlen     uint8
+	Hdrlen      uint8
+	Link_state  uint8
+	Spare_char1 uint8
+	Spare_char2 uint8
+	Datalen     uint8
+	Mtu         uint64
+	Metric      uint64
+	Baudrate    uint64
+	Ipackets    uint64
+	Ierrors     uint64
+	Opackets    uint64
+	Oerrors     uint64
+	Collisions  uint64
+	Ibytes      uint64
+	Obytes      uint64
+	Imcasts     uint64
+	Omcasts     uint64
+	Iqdrops     uint64
+	Noproto     uint64
+	Hwassist    uint64
+	Epoch       int64
+	Lastchange  Timeval
+}
+
+type IfaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       uint16
+	Metric  int32
+}
+
+type IfmaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       uint16
+}
+
+type IfAnnounceMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	Name    [16]int8
+	What    uint16
+}
+
+type RtMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	_       uint16
+	Flags   int32
+	Addrs   int32
+	Pid     int32
+	Seq     int32
+	Errno   int32
+	Fmask   int32
+	Inits   uint64
+	Rmx     RtMetrics
+}
+
+type RtMetrics struct {
+	Locks    uint64
+	Mtu      uint64
+	Hopcount uint64
+	Expire   uint64
+	Recvpipe uint64
+	Sendpipe uint64
+	Ssthresh uint64
+	Rtt      uint64
+	Rttvar   uint64
+	Pksent   uint64
+	Weight   uint64
+	Filler   [3]uint64
+}
+
+const (
+	SizeofBpfVersion    = 0x4
+	SizeofBpfStat       = 0x8
+	SizeofBpfZbuf       = 0x18
+	SizeofBpfProgram    = 0x10
+	SizeofBpfInsn       = 0x8
+	SizeofBpfHdr        = 0x20
+	SizeofBpfZbufHeader = 0x20
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv uint32
+	Drop uint32
+}
+
+type BpfZbuf struct {
+	Bufa   *byte
+	Bufb   *byte
+	Buflen uint64
+}
+
+type BpfProgram struct {
+	Len   uint32
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp  Timeval
+	Caplen  uint32
+	Datalen uint32
+	Hdrlen  uint16
+	_       [6]byte
+}
+
+type BpfZbufHeader struct {
+	Kernel_gen uint32
+	Kernel_len uint32
+	User_gen   uint32
+	_          [5]uint32
+}
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [20]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+const (
+	AT_FDCWD            = -0x64
+	AT_REMOVEDIR        = 0x800
+	AT_SYMLINK_FOLLOW   = 0x400
+	AT_SYMLINK_NOFOLLOW = 0x200
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR      = 0x8
+	POLLHUP      = 0x10
+	POLLIN       = 0x1
+	POLLINIGNEOF = 0x2000
+	POLLNVAL     = 0x20
+	POLLOUT      = 0x4
+	POLLPRI      = 0x2
+	POLLRDBAND   = 0x80
+	POLLRDNORM   = 0x40
+	POLLWRBAND   = 0x100
+	POLLWRNORM   = 0x4
+)
+
+type CapRights struct {
+	Rights [2]uint64
+}
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz     int32
+	Tick   int32
+	Spare  int32
+	Stathz int32
+	Profhz int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux.go
new file mode 100644
index 000000000..a92a5019a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux.go
@@ -0,0 +1,2569 @@
+// Code generated by mkmerge.go; DO NOT EDIT.
+
+// +build linux
+
+package unix
+
+const (
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLongLong = 0x8
+	PathMax        = 0x1000
+)
+
+type (
+	_C_short int16
+	_C_int   int32
+
+	_C_long_long int64
+)
+
+type ItimerSpec struct {
+	Interval Timespec
+	Value    Timespec
+}
+
+const (
+	TIME_OK    = 0x0
+	TIME_INS   = 0x1
+	TIME_DEL   = 0x2
+	TIME_OOP   = 0x3
+	TIME_WAIT  = 0x4
+	TIME_ERROR = 0x5
+	TIME_BAD   = 0x5
+)
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type _Gid_t uint32
+
+type StatxTimestamp struct {
+	Sec  int64
+	Nsec uint32
+	_    int32
+}
+
+type Statx_t struct {
+	Mask            uint32
+	Blksize         uint32
+	Attributes      uint64
+	Nlink           uint32
+	Uid             uint32
+	Gid             uint32
+	Mode            uint16
+	_               [1]uint16
+	Ino             uint64
+	Size            uint64
+	Blocks          uint64
+	Attributes_mask uint64
+	Atime           StatxTimestamp
+	Btime           StatxTimestamp
+	Ctime           StatxTimestamp
+	Mtime           StatxTimestamp
+	Rdev_major      uint32
+	Rdev_minor      uint32
+	Dev_major       uint32
+	Dev_minor       uint32
+	Mnt_id          uint64
+	_               uint64
+	_               [12]uint64
+}
+
+type Fsid struct {
+	Val [2]int32
+}
+
+type FileCloneRange struct {
+	Src_fd      int64
+	Src_offset  uint64
+	Src_length  uint64
+	Dest_offset uint64
+}
+
+type FileDedupeRange struct {
+	Src_offset uint64
+	Src_length uint64
+	Dest_count uint16
+	Reserved1  uint16
+	Reserved2  uint32
+}
+
+type FscryptPolicy struct {
+	Version                   uint8
+	Contents_encryption_mode  uint8
+	Filenames_encryption_mode uint8
+	Flags                     uint8
+	Master_key_descriptor     [8]uint8
+}
+
+type FscryptKey struct {
+	Mode uint32
+	Raw  [64]uint8
+	Size uint32
+}
+
+type FscryptPolicyV1 struct {
+	Version                   uint8
+	Contents_encryption_mode  uint8
+	Filenames_encryption_mode uint8
+	Flags                     uint8
+	Master_key_descriptor     [8]uint8
+}
+
+type FscryptPolicyV2 struct {
+	Version                   uint8
+	Contents_encryption_mode  uint8
+	Filenames_encryption_mode uint8
+	Flags                     uint8
+	_                         [4]uint8
+	Master_key_identifier     [16]uint8
+}
+
+type FscryptGetPolicyExArg struct {
+	Size   uint64
+	Policy [24]byte
+}
+
+type FscryptKeySpecifier struct {
+	Type uint32
+	_    uint32
+	U    [32]byte
+}
+
+type FscryptAddKeyArg struct {
+	Key_spec FscryptKeySpecifier
+	Raw_size uint32
+	Key_id   uint32
+	_        [8]uint32
+}
+
+type FscryptRemoveKeyArg struct {
+	Key_spec             FscryptKeySpecifier
+	Removal_status_flags uint32
+	_                    [5]uint32
+}
+
+type FscryptGetKeyStatusArg struct {
+	Key_spec     FscryptKeySpecifier
+	_            [6]uint32
+	Status       uint32
+	Status_flags uint32
+	User_count   uint32
+	_            [13]uint32
+}
+
+type DmIoctl struct {
+	Version      [3]uint32
+	Data_size    uint32
+	Data_start   uint32
+	Target_count uint32
+	Open_count   int32
+	Flags        uint32
+	Event_nr     uint32
+	_            uint32
+	Dev          uint64
+	Name         [128]byte
+	Uuid         [129]byte
+	Data         [7]byte
+}
+
+type DmTargetSpec struct {
+	Sector_start uint64
+	Length       uint64
+	Status       int32
+	Next         uint32
+	Target_type  [16]byte
+}
+
+type DmTargetDeps struct {
+	Count uint32
+	_     uint32
+}
+
+type DmTargetVersions struct {
+	Next    uint32
+	Version [3]uint32
+}
+
+type DmTargetMsg struct {
+	Sector uint64
+}
+
+const (
+	SizeofDmIoctl      = 0x138
+	SizeofDmTargetSpec = 0x28
+)
+
+type KeyctlDHParams struct {
+	Private int32
+	Prime   int32
+	Base    int32
+}
+
+const (
+	FADV_NORMAL     = 0x0
+	FADV_RANDOM     = 0x1
+	FADV_SEQUENTIAL = 0x2
+	FADV_WILLNEED   = 0x3
+)
+
+type RawSockaddrInet4 struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]uint8
+}
+
+type RawSockaddrInet6 struct {
+	Family   uint16
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Family uint16
+	Path   [108]int8
+}
+
+type RawSockaddrLinklayer struct {
+	Family   uint16
+	Protocol uint16
+	Ifindex  int32
+	Hatype   uint16
+	Pkttype  uint8
+	Halen    uint8
+	Addr     [8]uint8
+}
+
+type RawSockaddrNetlink struct {
+	Family uint16
+	Pad    uint16
+	Pid    uint32
+	Groups uint32
+}
+
+type RawSockaddrHCI struct {
+	Family  uint16
+	Dev     uint16
+	Channel uint16
+}
+
+type RawSockaddrL2 struct {
+	Family      uint16
+	Psm         uint16
+	Bdaddr      [6]uint8
+	Cid         uint16
+	Bdaddr_type uint8
+	_           [1]byte
+}
+
+type RawSockaddrRFCOMM struct {
+	Family  uint16
+	Bdaddr  [6]uint8
+	Channel uint8
+	_       [1]byte
+}
+
+type RawSockaddrCAN struct {
+	Family  uint16
+	Ifindex int32
+	Addr    [16]byte
+}
+
+type RawSockaddrALG struct {
+	Family uint16
+	Type   [14]uint8
+	Feat   uint32
+	Mask   uint32
+	Name   [64]uint8
+}
+
+type RawSockaddrVM struct {
+	Family    uint16
+	Reserved1 uint16
+	Port      uint32
+	Cid       uint32
+	Zero      [4]uint8
+}
+
+type RawSockaddrXDP struct {
+	Family         uint16
+	Flags          uint16
+	Ifindex        uint32
+	Queue_id       uint32
+	Shared_umem_fd uint32
+}
+
+type RawSockaddrPPPoX [0x1e]byte
+
+type RawSockaddrTIPC struct {
+	Family   uint16
+	Addrtype uint8
+	Scope    int8
+	Addr     [12]byte
+}
+
+type RawSockaddrL2TPIP struct {
+	Family  uint16
+	Unused  uint16
+	Addr    [4]byte /* in_addr */
+	Conn_id uint32
+	_       [4]uint8
+}
+
+type RawSockaddrL2TPIP6 struct {
+	Family   uint16
+	Unused   uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+	Conn_id  uint32
+}
+
+type RawSockaddrIUCV struct {
+	Family  uint16
+	Port    uint16
+	Addr    uint32
+	Nodeid  [8]int8
+	User_id [8]int8
+	Name    [8]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPMreqn struct {
+	Multiaddr [4]byte /* in_addr */
+	Address   [4]byte /* in_addr */
+	Ifindex   int32
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type PacketMreq struct {
+	Ifindex int32
+	Type    uint16
+	Alen    uint16
+	Address [8]uint8
+}
+
+type Inet4Pktinfo struct {
+	Ifindex  int32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Data [8]uint32
+}
+
+type Ucred struct {
+	Pid int32
+	Uid uint32
+	Gid uint32
+}
+
+type TCPInfo struct {
+	State          uint8
+	Ca_state       uint8
+	Retransmits    uint8
+	Probes         uint8
+	Backoff        uint8
+	Options        uint8
+	Rto            uint32
+	Ato            uint32
+	Snd_mss        uint32
+	Rcv_mss        uint32
+	Unacked        uint32
+	Sacked         uint32
+	Lost           uint32
+	Retrans        uint32
+	Fackets        uint32
+	Last_data_sent uint32
+	Last_ack_sent  uint32
+	Last_data_recv uint32
+	Last_ack_recv  uint32
+	Pmtu           uint32
+	Rcv_ssthresh   uint32
+	Rtt            uint32
+	Rttvar         uint32
+	Snd_ssthresh   uint32
+	Snd_cwnd       uint32
+	Advmss         uint32
+	Reordering     uint32
+	Rcv_rtt        uint32
+	Rcv_space      uint32
+	Total_retrans  uint32
+}
+
+type CanFilter struct {
+	Id   uint32
+	Mask uint32
+}
+
+const (
+	SizeofSockaddrInet4     = 0x10
+	SizeofSockaddrInet6     = 0x1c
+	SizeofSockaddrAny       = 0x70
+	SizeofSockaddrUnix      = 0x6e
+	SizeofSockaddrLinklayer = 0x14
+	SizeofSockaddrNetlink   = 0xc
+	SizeofSockaddrHCI       = 0x6
+	SizeofSockaddrL2        = 0xe
+	SizeofSockaddrRFCOMM    = 0xa
+	SizeofSockaddrCAN       = 0x18
+	SizeofSockaddrALG       = 0x58
+	SizeofSockaddrVM        = 0x10
+	SizeofSockaddrXDP       = 0x10
+	SizeofSockaddrPPPoX     = 0x1e
+	SizeofSockaddrTIPC      = 0x10
+	SizeofSockaddrL2TPIP    = 0x10
+	SizeofSockaddrL2TPIP6   = 0x20
+	SizeofSockaddrIUCV      = 0x20
+	SizeofLinger            = 0x8
+	SizeofIPMreq            = 0x8
+	SizeofIPMreqn           = 0xc
+	SizeofIPv6Mreq          = 0x14
+	SizeofPacketMreq        = 0x10
+	SizeofInet4Pktinfo      = 0xc
+	SizeofInet6Pktinfo      = 0x14
+	SizeofIPv6MTUInfo       = 0x20
+	SizeofICMPv6Filter      = 0x20
+	SizeofUcred             = 0xc
+	SizeofTCPInfo           = 0x68
+	SizeofCanFilter         = 0x8
+)
+
+const (
+	NDA_UNSPEC              = 0x0
+	NDA_DST                 = 0x1
+	NDA_LLADDR              = 0x2
+	NDA_CACHEINFO           = 0x3
+	NDA_PROBES              = 0x4
+	NDA_VLAN                = 0x5
+	NDA_PORT                = 0x6
+	NDA_VNI                 = 0x7
+	NDA_IFINDEX             = 0x8
+	NDA_MASTER              = 0x9
+	NDA_LINK_NETNSID        = 0xa
+	NDA_SRC_VNI             = 0xb
+	NTF_USE                 = 0x1
+	NTF_SELF                = 0x2
+	NTF_MASTER              = 0x4
+	NTF_PROXY               = 0x8
+	NTF_EXT_LEARNED         = 0x10
+	NTF_OFFLOADED           = 0x20
+	NTF_ROUTER              = 0x80
+	NUD_INCOMPLETE          = 0x1
+	NUD_REACHABLE           = 0x2
+	NUD_STALE               = 0x4
+	NUD_DELAY               = 0x8
+	NUD_PROBE               = 0x10
+	NUD_FAILED              = 0x20
+	NUD_NOARP               = 0x40
+	NUD_PERMANENT           = 0x80
+	NUD_NONE                = 0x0
+	IFA_UNSPEC              = 0x0
+	IFA_ADDRESS             = 0x1
+	IFA_LOCAL               = 0x2
+	IFA_LABEL               = 0x3
+	IFA_BROADCAST           = 0x4
+	IFA_ANYCAST             = 0x5
+	IFA_CACHEINFO           = 0x6
+	IFA_MULTICAST           = 0x7
+	IFA_FLAGS               = 0x8
+	IFA_RT_PRIORITY         = 0x9
+	IFA_TARGET_NETNSID      = 0xa
+	IFLA_UNSPEC             = 0x0
+	IFLA_ADDRESS            = 0x1
+	IFLA_BROADCAST          = 0x2
+	IFLA_IFNAME             = 0x3
+	IFLA_MTU                = 0x4
+	IFLA_LINK               = 0x5
+	IFLA_QDISC              = 0x6
+	IFLA_STATS              = 0x7
+	IFLA_COST               = 0x8
+	IFLA_PRIORITY           = 0x9
+	IFLA_MASTER             = 0xa
+	IFLA_WIRELESS           = 0xb
+	IFLA_PROTINFO           = 0xc
+	IFLA_TXQLEN             = 0xd
+	IFLA_MAP                = 0xe
+	IFLA_WEIGHT             = 0xf
+	IFLA_OPERSTATE          = 0x10
+	IFLA_LINKMODE           = 0x11
+	IFLA_LINKINFO           = 0x12
+	IFLA_NET_NS_PID         = 0x13
+	IFLA_IFALIAS            = 0x14
+	IFLA_NUM_VF             = 0x15
+	IFLA_VFINFO_LIST        = 0x16
+	IFLA_STATS64            = 0x17
+	IFLA_VF_PORTS           = 0x18
+	IFLA_PORT_SELF          = 0x19
+	IFLA_AF_SPEC            = 0x1a
+	IFLA_GROUP              = 0x1b
+	IFLA_NET_NS_FD          = 0x1c
+	IFLA_EXT_MASK           = 0x1d
+	IFLA_PROMISCUITY        = 0x1e
+	IFLA_NUM_TX_QUEUES      = 0x1f
+	IFLA_NUM_RX_QUEUES      = 0x20
+	IFLA_CARRIER            = 0x21
+	IFLA_PHYS_PORT_ID       = 0x22
+	IFLA_CARRIER_CHANGES    = 0x23
+	IFLA_PHYS_SWITCH_ID     = 0x24
+	IFLA_LINK_NETNSID       = 0x25
+	IFLA_PHYS_PORT_NAME     = 0x26
+	IFLA_PROTO_DOWN         = 0x27
+	IFLA_GSO_MAX_SEGS       = 0x28
+	IFLA_GSO_MAX_SIZE       = 0x29
+	IFLA_PAD                = 0x2a
+	IFLA_XDP                = 0x2b
+	IFLA_EVENT              = 0x2c
+	IFLA_NEW_NETNSID        = 0x2d
+	IFLA_IF_NETNSID         = 0x2e
+	IFLA_TARGET_NETNSID     = 0x2e
+	IFLA_CARRIER_UP_COUNT   = 0x2f
+	IFLA_CARRIER_DOWN_COUNT = 0x30
+	IFLA_NEW_IFINDEX        = 0x31
+	IFLA_MIN_MTU            = 0x32
+	IFLA_MAX_MTU            = 0x33
+	IFLA_MAX                = 0x36
+	IFLA_INFO_KIND          = 0x1
+	IFLA_INFO_DATA          = 0x2
+	IFLA_INFO_XSTATS        = 0x3
+	IFLA_INFO_SLAVE_KIND    = 0x4
+	IFLA_INFO_SLAVE_DATA    = 0x5
+	RT_SCOPE_UNIVERSE       = 0x0
+	RT_SCOPE_SITE           = 0xc8
+	RT_SCOPE_LINK           = 0xfd
+	RT_SCOPE_HOST           = 0xfe
+	RT_SCOPE_NOWHERE        = 0xff
+	RT_TABLE_UNSPEC         = 0x0
+	RT_TABLE_COMPAT         = 0xfc
+	RT_TABLE_DEFAULT        = 0xfd
+	RT_TABLE_MAIN           = 0xfe
+	RT_TABLE_LOCAL          = 0xff
+	RT_TABLE_MAX            = 0xffffffff
+	RTA_UNSPEC              = 0x0
+	RTA_DST                 = 0x1
+	RTA_SRC                 = 0x2
+	RTA_IIF                 = 0x3
+	RTA_OIF                 = 0x4
+	RTA_GATEWAY             = 0x5
+	RTA_PRIORITY            = 0x6
+	RTA_PREFSRC             = 0x7
+	RTA_METRICS             = 0x8
+	RTA_MULTIPATH           = 0x9
+	RTA_FLOW                = 0xb
+	RTA_CACHEINFO           = 0xc
+	RTA_TABLE               = 0xf
+	RTA_MARK                = 0x10
+	RTA_MFC_STATS           = 0x11
+	RTA_VIA                 = 0x12
+	RTA_NEWDST              = 0x13
+	RTA_PREF                = 0x14
+	RTA_ENCAP_TYPE          = 0x15
+	RTA_ENCAP               = 0x16
+	RTA_EXPIRES             = 0x17
+	RTA_PAD                 = 0x18
+	RTA_UID                 = 0x19
+	RTA_TTL_PROPAGATE       = 0x1a
+	RTA_IP_PROTO            = 0x1b
+	RTA_SPORT               = 0x1c
+	RTA_DPORT               = 0x1d
+	RTN_UNSPEC              = 0x0
+	RTN_UNICAST             = 0x1
+	RTN_LOCAL               = 0x2
+	RTN_BROADCAST           = 0x3
+	RTN_ANYCAST             = 0x4
+	RTN_MULTICAST           = 0x5
+	RTN_BLACKHOLE           = 0x6
+	RTN_UNREACHABLE         = 0x7
+	RTN_PROHIBIT            = 0x8
+	RTN_THROW               = 0x9
+	RTN_NAT                 = 0xa
+	RTN_XRESOLVE            = 0xb
+	SizeofNlMsghdr          = 0x10
+	SizeofNlMsgerr          = 0x14
+	SizeofRtGenmsg          = 0x1
+	SizeofNlAttr            = 0x4
+	SizeofRtAttr            = 0x4
+	SizeofIfInfomsg         = 0x10
+	SizeofIfAddrmsg         = 0x8
+	SizeofIfaCacheinfo      = 0x10
+	SizeofRtMsg             = 0xc
+	SizeofRtNexthop         = 0x8
+	SizeofNdUseroptmsg      = 0x10
+	SizeofNdMsg             = 0xc
+)
+
+type NlMsghdr struct {
+	Len   uint32
+	Type  uint16
+	Flags uint16
+	Seq   uint32
+	Pid   uint32
+}
+
+type NlMsgerr struct {
+	Error int32
+	Msg   NlMsghdr
+}
+
+type RtGenmsg struct {
+	Family uint8
+}
+
+type NlAttr struct {
+	Len  uint16
+	Type uint16
+}
+
+type RtAttr struct {
+	Len  uint16
+	Type uint16
+}
+
+type IfInfomsg struct {
+	Family uint8
+	_      uint8
+	Type   uint16
+	Index  int32
+	Flags  uint32
+	Change uint32
+}
+
+type IfAddrmsg struct {
+	Family    uint8
+	Prefixlen uint8
+	Flags     uint8
+	Scope     uint8
+	Index     uint32
+}
+
+type IfaCacheinfo struct {
+	Prefered uint32
+	Valid    uint32
+	Cstamp   uint32
+	Tstamp   uint32
+}
+
+type RtMsg struct {
+	Family   uint8
+	Dst_len  uint8
+	Src_len  uint8
+	Tos      uint8
+	Table    uint8
+	Protocol uint8
+	Scope    uint8
+	Type     uint8
+	Flags    uint32
+}
+
+type RtNexthop struct {
+	Len     uint16
+	Flags   uint8
+	Hops    uint8
+	Ifindex int32
+}
+
+type NdUseroptmsg struct {
+	Family    uint8
+	Pad1      uint8
+	Opts_len  uint16
+	Ifindex   int32
+	Icmp_type uint8
+	Icmp_code uint8
+	Pad2      uint16
+	Pad3      uint32
+}
+
+type NdMsg struct {
+	Family  uint8
+	Pad1    uint8
+	Pad2    uint16
+	Ifindex int32
+	State   uint16
+	Flags   uint8
+	Type    uint8
+}
+
+const (
+	SizeofSockFilter = 0x8
+)
+
+type SockFilter struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type SockFprog struct {
+	Len    uint16
+	Filter *SockFilter
+}
+
+type InotifyEvent struct {
+	Wd     int32
+	Mask   uint32
+	Cookie uint32
+	Len    uint32
+}
+
+const SizeofInotifyEvent = 0x10
+
+const SI_LOAD_SHIFT = 0x10
+
+type Utsname struct {
+	Sysname    [65]byte
+	Nodename   [65]byte
+	Release    [65]byte
+	Version    [65]byte
+	Machine    [65]byte
+	Domainname [65]byte
+}
+
+const (
+	AT_EMPTY_PATH   = 0x1000
+	AT_FDCWD        = -0x64
+	AT_NO_AUTOMOUNT = 0x800
+	AT_REMOVEDIR    = 0x200
+
+	AT_STATX_SYNC_AS_STAT = 0x0
+	AT_STATX_FORCE_SYNC   = 0x2000
+	AT_STATX_DONT_SYNC    = 0x4000
+
+	AT_SYMLINK_FOLLOW   = 0x400
+	AT_SYMLINK_NOFOLLOW = 0x100
+
+	AT_EACCESS = 0x200
+)
+
+type OpenHow struct {
+	Flags   uint64
+	Mode    uint64
+	Resolve uint64
+}
+
+const SizeofOpenHow = 0x18
+
+const (
+	RESOLVE_BENEATH       = 0x8
+	RESOLVE_IN_ROOT       = 0x10
+	RESOLVE_NO_MAGICLINKS = 0x2
+	RESOLVE_NO_SYMLINKS   = 0x4
+	RESOLVE_NO_XDEV       = 0x1
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLIN   = 0x1
+	POLLPRI  = 0x2
+	POLLOUT  = 0x4
+	POLLERR  = 0x8
+	POLLHUP  = 0x10
+	POLLNVAL = 0x20
+)
+
+type SignalfdSiginfo struct {
+	Signo     uint32
+	Errno     int32
+	Code      int32
+	Pid       uint32
+	Uid       uint32
+	Fd        int32
+	Tid       uint32
+	Band      uint32
+	Overrun   uint32
+	Trapno    uint32
+	Status    int32
+	Int       int32
+	Ptr       uint64
+	Utime     uint64
+	Stime     uint64
+	Addr      uint64
+	Addr_lsb  uint16
+	_         uint16
+	Syscall   int32
+	Call_addr uint64
+	Arch      uint32
+	_         [28]uint8
+}
+
+const PERF_IOC_FLAG_GROUP = 0x1
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+const (
+	TASKSTATS_CMD_UNSPEC                  = 0x0
+	TASKSTATS_CMD_GET                     = 0x1
+	TASKSTATS_CMD_NEW                     = 0x2
+	TASKSTATS_TYPE_UNSPEC                 = 0x0
+	TASKSTATS_TYPE_PID                    = 0x1
+	TASKSTATS_TYPE_TGID                   = 0x2
+	TASKSTATS_TYPE_STATS                  = 0x3
+	TASKSTATS_TYPE_AGGR_PID               = 0x4
+	TASKSTATS_TYPE_AGGR_TGID              = 0x5
+	TASKSTATS_TYPE_NULL                   = 0x6
+	TASKSTATS_CMD_ATTR_UNSPEC             = 0x0
+	TASKSTATS_CMD_ATTR_PID                = 0x1
+	TASKSTATS_CMD_ATTR_TGID               = 0x2
+	TASKSTATS_CMD_ATTR_REGISTER_CPUMASK   = 0x3
+	TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK = 0x4
+)
+
+type CGroupStats struct {
+	Sleeping        uint64
+	Running         uint64
+	Stopped         uint64
+	Uninterruptible uint64
+	Io_wait         uint64
+}
+
+const (
+	CGROUPSTATS_CMD_UNSPEC        = 0x3
+	CGROUPSTATS_CMD_GET           = 0x4
+	CGROUPSTATS_CMD_NEW           = 0x5
+	CGROUPSTATS_TYPE_UNSPEC       = 0x0
+	CGROUPSTATS_TYPE_CGROUP_STATS = 0x1
+	CGROUPSTATS_CMD_ATTR_UNSPEC   = 0x0
+	CGROUPSTATS_CMD_ATTR_FD       = 0x1
+)
+
+type Genlmsghdr struct {
+	Cmd      uint8
+	Version  uint8
+	Reserved uint16
+}
+
+const (
+	CTRL_CMD_UNSPEC            = 0x0
+	CTRL_CMD_NEWFAMILY         = 0x1
+	CTRL_CMD_DELFAMILY         = 0x2
+	CTRL_CMD_GETFAMILY         = 0x3
+	CTRL_CMD_NEWOPS            = 0x4
+	CTRL_CMD_DELOPS            = 0x5
+	CTRL_CMD_GETOPS            = 0x6
+	CTRL_CMD_NEWMCAST_GRP      = 0x7
+	CTRL_CMD_DELMCAST_GRP      = 0x8
+	CTRL_CMD_GETMCAST_GRP      = 0x9
+	CTRL_ATTR_UNSPEC           = 0x0
+	CTRL_ATTR_FAMILY_ID        = 0x1
+	CTRL_ATTR_FAMILY_NAME      = 0x2
+	CTRL_ATTR_VERSION          = 0x3
+	CTRL_ATTR_HDRSIZE          = 0x4
+	CTRL_ATTR_MAXATTR          = 0x5
+	CTRL_ATTR_OPS              = 0x6
+	CTRL_ATTR_MCAST_GROUPS     = 0x7
+	CTRL_ATTR_OP_UNSPEC        = 0x0
+	CTRL_ATTR_OP_ID            = 0x1
+	CTRL_ATTR_OP_FLAGS         = 0x2
+	CTRL_ATTR_MCAST_GRP_UNSPEC = 0x0
+	CTRL_ATTR_MCAST_GRP_NAME   = 0x1
+	CTRL_ATTR_MCAST_GRP_ID     = 0x2
+)
+
+const (
+	_CPU_SETSIZE = 0x400
+)
+
+const (
+	BDADDR_BREDR     = 0x0
+	BDADDR_LE_PUBLIC = 0x1
+	BDADDR_LE_RANDOM = 0x2
+)
+
+type PerfEventAttr struct {
+	Type               uint32
+	Size               uint32
+	Config             uint64
+	Sample             uint64
+	Sample_type        uint64
+	Read_format        uint64
+	Bits               uint64
+	Wakeup             uint32
+	Bp_type            uint32
+	Ext1               uint64
+	Ext2               uint64
+	Branch_sample_type uint64
+	Sample_regs_user   uint64
+	Sample_stack_user  uint32
+	Clockid            int32
+	Sample_regs_intr   uint64
+	Aux_watermark      uint32
+	Sample_max_stack   uint16
+	_                  uint16
+}
+
+type PerfEventMmapPage struct {
+	Version        uint32
+	Compat_version uint32
+	Lock           uint32
+	Index          uint32
+	Offset         int64
+	Time_enabled   uint64
+	Time_running   uint64
+	Capabilities   uint64
+	Pmc_width      uint16
+	Time_shift     uint16
+	Time_mult      uint32
+	Time_offset    uint64
+	Time_zero      uint64
+	Size           uint32
+	_              [948]uint8
+	Data_head      uint64
+	Data_tail      uint64
+	Data_offset    uint64
+	Data_size      uint64
+	Aux_head       uint64
+	Aux_tail       uint64
+	Aux_offset     uint64
+	Aux_size       uint64
+}
+
+const (
+	PerfBitDisabled               uint64 = CBitFieldMaskBit0
+	PerfBitInherit                       = CBitFieldMaskBit1
+	PerfBitPinned                        = CBitFieldMaskBit2
+	PerfBitExclusive                     = CBitFieldMaskBit3
+	PerfBitExcludeUser                   = CBitFieldMaskBit4
+	PerfBitExcludeKernel                 = CBitFieldMaskBit5
+	PerfBitExcludeHv                     = CBitFieldMaskBit6
+	PerfBitExcludeIdle                   = CBitFieldMaskBit7
+	PerfBitMmap                          = CBitFieldMaskBit8
+	PerfBitComm                          = CBitFieldMaskBit9
+	PerfBitFreq                          = CBitFieldMaskBit10
+	PerfBitInheritStat                   = CBitFieldMaskBit11
+	PerfBitEnableOnExec                  = CBitFieldMaskBit12
+	PerfBitTask                          = CBitFieldMaskBit13
+	PerfBitWatermark                     = CBitFieldMaskBit14
+	PerfBitPreciseIPBit1                 = CBitFieldMaskBit15
+	PerfBitPreciseIPBit2                 = CBitFieldMaskBit16
+	PerfBitMmapData                      = CBitFieldMaskBit17
+	PerfBitSampleIDAll                   = CBitFieldMaskBit18
+	PerfBitExcludeHost                   = CBitFieldMaskBit19
+	PerfBitExcludeGuest                  = CBitFieldMaskBit20
+	PerfBitExcludeCallchainKernel        = CBitFieldMaskBit21
+	PerfBitExcludeCallchainUser          = CBitFieldMaskBit22
+	PerfBitMmap2                         = CBitFieldMaskBit23
+	PerfBitCommExec                      = CBitFieldMaskBit24
+	PerfBitUseClockID                    = CBitFieldMaskBit25
+	PerfBitContextSwitch                 = CBitFieldMaskBit26
+)
+
+const (
+	PERF_TYPE_HARDWARE   = 0x0
+	PERF_TYPE_SOFTWARE   = 0x1
+	PERF_TYPE_TRACEPOINT = 0x2
+	PERF_TYPE_HW_CACHE   = 0x3
+	PERF_TYPE_RAW        = 0x4
+	PERF_TYPE_BREAKPOINT = 0x5
+
+	PERF_COUNT_HW_CPU_CYCLES              = 0x0
+	PERF_COUNT_HW_INSTRUCTIONS            = 0x1
+	PERF_COUNT_HW_CACHE_REFERENCES        = 0x2
+	PERF_COUNT_HW_CACHE_MISSES            = 0x3
+	PERF_COUNT_HW_BRANCH_INSTRUCTIONS     = 0x4
+	PERF_COUNT_HW_BRANCH_MISSES           = 0x5
+	PERF_COUNT_HW_BUS_CYCLES              = 0x6
+	PERF_COUNT_HW_STALLED_CYCLES_FRONTEND = 0x7
+	PERF_COUNT_HW_STALLED_CYCLES_BACKEND  = 0x8
+	PERF_COUNT_HW_REF_CPU_CYCLES          = 0x9
+
+	PERF_COUNT_HW_CACHE_L1D  = 0x0
+	PERF_COUNT_HW_CACHE_L1I  = 0x1
+	PERF_COUNT_HW_CACHE_LL   = 0x2
+	PERF_COUNT_HW_CACHE_DTLB = 0x3
+	PERF_COUNT_HW_CACHE_ITLB = 0x4
+	PERF_COUNT_HW_CACHE_BPU  = 0x5
+	PERF_COUNT_HW_CACHE_NODE = 0x6
+
+	PERF_COUNT_HW_CACHE_OP_READ     = 0x0
+	PERF_COUNT_HW_CACHE_OP_WRITE    = 0x1
+	PERF_COUNT_HW_CACHE_OP_PREFETCH = 0x2
+
+	PERF_COUNT_HW_CACHE_RESULT_ACCESS = 0x0
+	PERF_COUNT_HW_CACHE_RESULT_MISS   = 0x1
+
+	PERF_COUNT_SW_CPU_CLOCK        = 0x0
+	PERF_COUNT_SW_TASK_CLOCK       = 0x1
+	PERF_COUNT_SW_PAGE_FAULTS      = 0x2
+	PERF_COUNT_SW_CONTEXT_SWITCHES = 0x3
+	PERF_COUNT_SW_CPU_MIGRATIONS   = 0x4
+	PERF_COUNT_SW_PAGE_FAULTS_MIN  = 0x5
+	PERF_COUNT_SW_PAGE_FAULTS_MAJ  = 0x6
+	PERF_COUNT_SW_ALIGNMENT_FAULTS = 0x7
+	PERF_COUNT_SW_EMULATION_FAULTS = 0x8
+	PERF_COUNT_SW_DUMMY            = 0x9
+	PERF_COUNT_SW_BPF_OUTPUT       = 0xa
+
+	PERF_SAMPLE_IP           = 0x1
+	PERF_SAMPLE_TID          = 0x2
+	PERF_SAMPLE_TIME         = 0x4
+	PERF_SAMPLE_ADDR         = 0x8
+	PERF_SAMPLE_READ         = 0x10
+	PERF_SAMPLE_CALLCHAIN    = 0x20
+	PERF_SAMPLE_ID           = 0x40
+	PERF_SAMPLE_CPU          = 0x80
+	PERF_SAMPLE_PERIOD       = 0x100
+	PERF_SAMPLE_STREAM_ID    = 0x200
+	PERF_SAMPLE_RAW          = 0x400
+	PERF_SAMPLE_BRANCH_STACK = 0x800
+	PERF_SAMPLE_REGS_USER    = 0x1000
+	PERF_SAMPLE_STACK_USER   = 0x2000
+	PERF_SAMPLE_WEIGHT       = 0x4000
+	PERF_SAMPLE_DATA_SRC     = 0x8000
+	PERF_SAMPLE_IDENTIFIER   = 0x10000
+	PERF_SAMPLE_TRANSACTION  = 0x20000
+	PERF_SAMPLE_REGS_INTR    = 0x40000
+
+	PERF_SAMPLE_BRANCH_USER       = 0x1
+	PERF_SAMPLE_BRANCH_KERNEL     = 0x2
+	PERF_SAMPLE_BRANCH_HV         = 0x4
+	PERF_SAMPLE_BRANCH_ANY        = 0x8
+	PERF_SAMPLE_BRANCH_ANY_CALL   = 0x10
+	PERF_SAMPLE_BRANCH_ANY_RETURN = 0x20
+	PERF_SAMPLE_BRANCH_IND_CALL   = 0x40
+	PERF_SAMPLE_BRANCH_ABORT_TX   = 0x80
+	PERF_SAMPLE_BRANCH_IN_TX      = 0x100
+	PERF_SAMPLE_BRANCH_NO_TX      = 0x200
+	PERF_SAMPLE_BRANCH_COND       = 0x400
+	PERF_SAMPLE_BRANCH_CALL_STACK = 0x800
+	PERF_SAMPLE_BRANCH_IND_JUMP   = 0x1000
+	PERF_SAMPLE_BRANCH_CALL       = 0x2000
+	PERF_SAMPLE_BRANCH_NO_FLAGS   = 0x4000
+	PERF_SAMPLE_BRANCH_NO_CYCLES  = 0x8000
+	PERF_SAMPLE_BRANCH_TYPE_SAVE  = 0x10000
+
+	PERF_FORMAT_TOTAL_TIME_ENABLED = 0x1
+	PERF_FORMAT_TOTAL_TIME_RUNNING = 0x2
+	PERF_FORMAT_ID                 = 0x4
+	PERF_FORMAT_GROUP              = 0x8
+
+	PERF_RECORD_MMAP            = 0x1
+	PERF_RECORD_LOST            = 0x2
+	PERF_RECORD_COMM            = 0x3
+	PERF_RECORD_EXIT            = 0x4
+	PERF_RECORD_THROTTLE        = 0x5
+	PERF_RECORD_UNTHROTTLE      = 0x6
+	PERF_RECORD_FORK            = 0x7
+	PERF_RECORD_READ            = 0x8
+	PERF_RECORD_SAMPLE          = 0x9
+	PERF_RECORD_MMAP2           = 0xa
+	PERF_RECORD_AUX             = 0xb
+	PERF_RECORD_ITRACE_START    = 0xc
+	PERF_RECORD_LOST_SAMPLES    = 0xd
+	PERF_RECORD_SWITCH          = 0xe
+	PERF_RECORD_SWITCH_CPU_WIDE = 0xf
+	PERF_RECORD_NAMESPACES      = 0x10
+
+	PERF_CONTEXT_HV     = -0x20
+	PERF_CONTEXT_KERNEL = -0x80
+	PERF_CONTEXT_USER   = -0x200
+
+	PERF_CONTEXT_GUEST        = -0x800
+	PERF_CONTEXT_GUEST_KERNEL = -0x880
+	PERF_CONTEXT_GUEST_USER   = -0xa00
+
+	PERF_FLAG_FD_NO_GROUP = 0x1
+	PERF_FLAG_FD_OUTPUT   = 0x2
+	PERF_FLAG_PID_CGROUP  = 0x4
+	PERF_FLAG_FD_CLOEXEC  = 0x8
+)
+
+type TCPMD5Sig struct {
+	Addr      SockaddrStorage
+	Flags     uint8
+	Prefixlen uint8
+	Keylen    uint16
+	_         uint32
+	Key       [80]uint8
+}
+
+type HDDriveCmdHdr struct {
+	Command uint8
+	Number  uint8
+	Feature uint8
+	Count   uint8
+}
+
+type HDDriveID struct {
+	Config         uint16
+	Cyls           uint16
+	Reserved2      uint16
+	Heads          uint16
+	Track_bytes    uint16
+	Sector_bytes   uint16
+	Sectors        uint16
+	Vendor0        uint16
+	Vendor1        uint16
+	Vendor2        uint16
+	Serial_no      [20]uint8
+	Buf_type       uint16
+	Buf_size       uint16
+	Ecc_bytes      uint16
+	Fw_rev         [8]uint8
+	Model          [40]uint8
+	Max_multsect   uint8
+	Vendor3        uint8
+	Dword_io       uint16
+	Vendor4        uint8
+	Capability     uint8
+	Reserved50     uint16
+	Vendor5        uint8
+	TPIO           uint8
+	Vendor6        uint8
+	TDMA           uint8
+	Field_valid    uint16
+	Cur_cyls       uint16
+	Cur_heads      uint16
+	Cur_sectors    uint16
+	Cur_capacity0  uint16
+	Cur_capacity1  uint16
+	Multsect       uint8
+	Multsect_valid uint8
+	Lba_capacity   uint32
+	Dma_1word      uint16
+	Dma_mword      uint16
+	Eide_pio_modes uint16
+	Eide_dma_min   uint16
+	Eide_dma_time  uint16
+	Eide_pio       uint16
+	Eide_pio_iordy uint16
+	Words69_70     [2]uint16
+	Words71_74     [4]uint16
+	Queue_depth    uint16
+	Words76_79     [4]uint16
+	Major_rev_num  uint16
+	Minor_rev_num  uint16
+	Command_set_1  uint16
+	Command_set_2  uint16
+	Cfsse          uint16
+	Cfs_enable_1   uint16
+	Cfs_enable_2   uint16
+	Csf_default    uint16
+	Dma_ultra      uint16
+	Trseuc         uint16
+	TrsEuc         uint16
+	CurAPMvalues   uint16
+	Mprc           uint16
+	Hw_config      uint16
+	Acoustic       uint16
+	Msrqs          uint16
+	Sxfert         uint16
+	Sal            uint16
+	Spg            uint32
+	Lba_capacity_2 uint64
+	Words104_125   [22]uint16
+	Last_lun       uint16
+	Word127        uint16
+	Dlf            uint16
+	Csfo           uint16
+	Words130_155   [26]uint16
+	Word156        uint16
+	Words157_159   [3]uint16
+	Cfa_power      uint16
+	Words161_175   [15]uint16
+	Words176_205   [30]uint16
+	Words206_254   [49]uint16
+	Integrity_word uint16
+}
+
+const (
+	ST_MANDLOCK    = 0x40
+	ST_NOATIME     = 0x400
+	ST_NODEV       = 0x4
+	ST_NODIRATIME  = 0x800
+	ST_NOEXEC      = 0x8
+	ST_NOSUID      = 0x2
+	ST_RDONLY      = 0x1
+	ST_RELATIME    = 0x1000
+	ST_SYNCHRONOUS = 0x10
+)
+
+type Tpacket2Hdr struct {
+	Status    uint32
+	Len       uint32
+	Snaplen   uint32
+	Mac       uint16
+	Net       uint16
+	Sec       uint32
+	Nsec      uint32
+	Vlan_tci  uint16
+	Vlan_tpid uint16
+	_         [4]uint8
+}
+
+type Tpacket3Hdr struct {
+	Next_offset uint32
+	Sec         uint32
+	Nsec        uint32
+	Snaplen     uint32
+	Len         uint32
+	Status      uint32
+	Mac         uint16
+	Net         uint16
+	Hv1         TpacketHdrVariant1
+	_           [8]uint8
+}
+
+type TpacketHdrVariant1 struct {
+	Rxhash    uint32
+	Vlan_tci  uint32
+	Vlan_tpid uint16
+	_         uint16
+}
+
+type TpacketBlockDesc struct {
+	Version uint32
+	To_priv uint32
+	Hdr     [40]byte
+}
+
+type TpacketBDTS struct {
+	Sec  uint32
+	Usec uint32
+}
+
+type TpacketHdrV1 struct {
+	Block_status        uint32
+	Num_pkts            uint32
+	Offset_to_first_pkt uint32
+	Blk_len             uint32
+	Seq_num             uint64
+	Ts_first_pkt        TpacketBDTS
+	Ts_last_pkt         TpacketBDTS
+}
+
+type TpacketReq struct {
+	Block_size uint32
+	Block_nr   uint32
+	Frame_size uint32
+	Frame_nr   uint32
+}
+
+type TpacketReq3 struct {
+	Block_size       uint32
+	Block_nr         uint32
+	Frame_size       uint32
+	Frame_nr         uint32
+	Retire_blk_tov   uint32
+	Sizeof_priv      uint32
+	Feature_req_word uint32
+}
+
+type TpacketStats struct {
+	Packets uint32
+	Drops   uint32
+}
+
+type TpacketStatsV3 struct {
+	Packets      uint32
+	Drops        uint32
+	Freeze_q_cnt uint32
+}
+
+type TpacketAuxdata struct {
+	Status    uint32
+	Len       uint32
+	Snaplen   uint32
+	Mac       uint16
+	Net       uint16
+	Vlan_tci  uint16
+	Vlan_tpid uint16
+}
+
+const (
+	TPACKET_V1 = 0x0
+	TPACKET_V2 = 0x1
+	TPACKET_V3 = 0x2
+)
+
+const (
+	SizeofTpacket2Hdr = 0x20
+	SizeofTpacket3Hdr = 0x30
+
+	SizeofTpacketStats   = 0x8
+	SizeofTpacketStatsV3 = 0xc
+)
+
+const (
+	NF_INET_PRE_ROUTING  = 0x0
+	NF_INET_LOCAL_IN     = 0x1
+	NF_INET_FORWARD      = 0x2
+	NF_INET_LOCAL_OUT    = 0x3
+	NF_INET_POST_ROUTING = 0x4
+	NF_INET_NUMHOOKS     = 0x5
+)
+
+const (
+	NF_NETDEV_INGRESS  = 0x0
+	NF_NETDEV_NUMHOOKS = 0x1
+)
+
+const (
+	NFPROTO_UNSPEC   = 0x0
+	NFPROTO_INET     = 0x1
+	NFPROTO_IPV4     = 0x2
+	NFPROTO_ARP      = 0x3
+	NFPROTO_NETDEV   = 0x5
+	NFPROTO_BRIDGE   = 0x7
+	NFPROTO_IPV6     = 0xa
+	NFPROTO_DECNET   = 0xc
+	NFPROTO_NUMPROTO = 0xd
+)
+
+type Nfgenmsg struct {
+	Nfgen_family uint8
+	Version      uint8
+	Res_id       uint16
+}
+
+const (
+	NFNL_BATCH_UNSPEC = 0x0
+	NFNL_BATCH_GENID  = 0x1
+)
+
+const (
+	NFT_REG_VERDICT                   = 0x0
+	NFT_REG_1                         = 0x1
+	NFT_REG_2                         = 0x2
+	NFT_REG_3                         = 0x3
+	NFT_REG_4                         = 0x4
+	NFT_REG32_00                      = 0x8
+	NFT_REG32_01                      = 0x9
+	NFT_REG32_02                      = 0xa
+	NFT_REG32_03                      = 0xb
+	NFT_REG32_04                      = 0xc
+	NFT_REG32_05                      = 0xd
+	NFT_REG32_06                      = 0xe
+	NFT_REG32_07                      = 0xf
+	NFT_REG32_08                      = 0x10
+	NFT_REG32_09                      = 0x11
+	NFT_REG32_10                      = 0x12
+	NFT_REG32_11                      = 0x13
+	NFT_REG32_12                      = 0x14
+	NFT_REG32_13                      = 0x15
+	NFT_REG32_14                      = 0x16
+	NFT_REG32_15                      = 0x17
+	NFT_CONTINUE                      = -0x1
+	NFT_BREAK                         = -0x2
+	NFT_JUMP                          = -0x3
+	NFT_GOTO                          = -0x4
+	NFT_RETURN                        = -0x5
+	NFT_MSG_NEWTABLE                  = 0x0
+	NFT_MSG_GETTABLE                  = 0x1
+	NFT_MSG_DELTABLE                  = 0x2
+	NFT_MSG_NEWCHAIN                  = 0x3
+	NFT_MSG_GETCHAIN                  = 0x4
+	NFT_MSG_DELCHAIN                  = 0x5
+	NFT_MSG_NEWRULE                   = 0x6
+	NFT_MSG_GETRULE                   = 0x7
+	NFT_MSG_DELRULE                   = 0x8
+	NFT_MSG_NEWSET                    = 0x9
+	NFT_MSG_GETSET                    = 0xa
+	NFT_MSG_DELSET                    = 0xb
+	NFT_MSG_NEWSETELEM                = 0xc
+	NFT_MSG_GETSETELEM                = 0xd
+	NFT_MSG_DELSETELEM                = 0xe
+	NFT_MSG_NEWGEN                    = 0xf
+	NFT_MSG_GETGEN                    = 0x10
+	NFT_MSG_TRACE                     = 0x11
+	NFT_MSG_NEWOBJ                    = 0x12
+	NFT_MSG_GETOBJ                    = 0x13
+	NFT_MSG_DELOBJ                    = 0x14
+	NFT_MSG_GETOBJ_RESET              = 0x15
+	NFT_MSG_MAX                       = 0x19
+	NFTA_LIST_UNPEC                   = 0x0
+	NFTA_LIST_ELEM                    = 0x1
+	NFTA_HOOK_UNSPEC                  = 0x0
+	NFTA_HOOK_HOOKNUM                 = 0x1
+	NFTA_HOOK_PRIORITY                = 0x2
+	NFTA_HOOK_DEV                     = 0x3
+	NFT_TABLE_F_DORMANT               = 0x1
+	NFTA_TABLE_UNSPEC                 = 0x0
+	NFTA_TABLE_NAME                   = 0x1
+	NFTA_TABLE_FLAGS                  = 0x2
+	NFTA_TABLE_USE                    = 0x3
+	NFTA_CHAIN_UNSPEC                 = 0x0
+	NFTA_CHAIN_TABLE                  = 0x1
+	NFTA_CHAIN_HANDLE                 = 0x2
+	NFTA_CHAIN_NAME                   = 0x3
+	NFTA_CHAIN_HOOK                   = 0x4
+	NFTA_CHAIN_POLICY                 = 0x5
+	NFTA_CHAIN_USE                    = 0x6
+	NFTA_CHAIN_TYPE                   = 0x7
+	NFTA_CHAIN_COUNTERS               = 0x8
+	NFTA_CHAIN_PAD                    = 0x9
+	NFTA_RULE_UNSPEC                  = 0x0
+	NFTA_RULE_TABLE                   = 0x1
+	NFTA_RULE_CHAIN                   = 0x2
+	NFTA_RULE_HANDLE                  = 0x3
+	NFTA_RULE_EXPRESSIONS             = 0x4
+	NFTA_RULE_COMPAT                  = 0x5
+	NFTA_RULE_POSITION                = 0x6
+	NFTA_RULE_USERDATA                = 0x7
+	NFTA_RULE_PAD                     = 0x8
+	NFTA_RULE_ID                      = 0x9
+	NFT_RULE_COMPAT_F_INV             = 0x2
+	NFT_RULE_COMPAT_F_MASK            = 0x2
+	NFTA_RULE_COMPAT_UNSPEC           = 0x0
+	NFTA_RULE_COMPAT_PROTO            = 0x1
+	NFTA_RULE_COMPAT_FLAGS            = 0x2
+	NFT_SET_ANONYMOUS                 = 0x1
+	NFT_SET_CONSTANT                  = 0x2
+	NFT_SET_INTERVAL                  = 0x4
+	NFT_SET_MAP                       = 0x8
+	NFT_SET_TIMEOUT                   = 0x10
+	NFT_SET_EVAL                      = 0x20
+	NFT_SET_OBJECT                    = 0x40
+	NFT_SET_POL_PERFORMANCE           = 0x0
+	NFT_SET_POL_MEMORY                = 0x1
+	NFTA_SET_DESC_UNSPEC              = 0x0
+	NFTA_SET_DESC_SIZE                = 0x1
+	NFTA_SET_UNSPEC                   = 0x0
+	NFTA_SET_TABLE                    = 0x1
+	NFTA_SET_NAME                     = 0x2
+	NFTA_SET_FLAGS                    = 0x3
+	NFTA_SET_KEY_TYPE                 = 0x4
+	NFTA_SET_KEY_LEN                  = 0x5
+	NFTA_SET_DATA_TYPE                = 0x6
+	NFTA_SET_DATA_LEN                 = 0x7
+	NFTA_SET_POLICY                   = 0x8
+	NFTA_SET_DESC                     = 0x9
+	NFTA_SET_ID                       = 0xa
+	NFTA_SET_TIMEOUT                  = 0xb
+	NFTA_SET_GC_INTERVAL              = 0xc
+	NFTA_SET_USERDATA                 = 0xd
+	NFTA_SET_PAD                      = 0xe
+	NFTA_SET_OBJ_TYPE                 = 0xf
+	NFT_SET_ELEM_INTERVAL_END         = 0x1
+	NFTA_SET_ELEM_UNSPEC              = 0x0
+	NFTA_SET_ELEM_KEY                 = 0x1
+	NFTA_SET_ELEM_DATA                = 0x2
+	NFTA_SET_ELEM_FLAGS               = 0x3
+	NFTA_SET_ELEM_TIMEOUT             = 0x4
+	NFTA_SET_ELEM_EXPIRATION          = 0x5
+	NFTA_SET_ELEM_USERDATA            = 0x6
+	NFTA_SET_ELEM_EXPR                = 0x7
+	NFTA_SET_ELEM_PAD                 = 0x8
+	NFTA_SET_ELEM_OBJREF              = 0x9
+	NFTA_SET_ELEM_LIST_UNSPEC         = 0x0
+	NFTA_SET_ELEM_LIST_TABLE          = 0x1
+	NFTA_SET_ELEM_LIST_SET            = 0x2
+	NFTA_SET_ELEM_LIST_ELEMENTS       = 0x3
+	NFTA_SET_ELEM_LIST_SET_ID         = 0x4
+	NFT_DATA_VALUE                    = 0x0
+	NFT_DATA_VERDICT                  = 0xffffff00
+	NFTA_DATA_UNSPEC                  = 0x0
+	NFTA_DATA_VALUE                   = 0x1
+	NFTA_DATA_VERDICT                 = 0x2
+	NFTA_VERDICT_UNSPEC               = 0x0
+	NFTA_VERDICT_CODE                 = 0x1
+	NFTA_VERDICT_CHAIN                = 0x2
+	NFTA_EXPR_UNSPEC                  = 0x0
+	NFTA_EXPR_NAME                    = 0x1
+	NFTA_EXPR_DATA                    = 0x2
+	NFTA_IMMEDIATE_UNSPEC             = 0x0
+	NFTA_IMMEDIATE_DREG               = 0x1
+	NFTA_IMMEDIATE_DATA               = 0x2
+	NFTA_BITWISE_UNSPEC               = 0x0
+	NFTA_BITWISE_SREG                 = 0x1
+	NFTA_BITWISE_DREG                 = 0x2
+	NFTA_BITWISE_LEN                  = 0x3
+	NFTA_BITWISE_MASK                 = 0x4
+	NFTA_BITWISE_XOR                  = 0x5
+	NFT_BYTEORDER_NTOH                = 0x0
+	NFT_BYTEORDER_HTON                = 0x1
+	NFTA_BYTEORDER_UNSPEC             = 0x0
+	NFTA_BYTEORDER_SREG               = 0x1
+	NFTA_BYTEORDER_DREG               = 0x2
+	NFTA_BYTEORDER_OP                 = 0x3
+	NFTA_BYTEORDER_LEN                = 0x4
+	NFTA_BYTEORDER_SIZE               = 0x5
+	NFT_CMP_EQ                        = 0x0
+	NFT_CMP_NEQ                       = 0x1
+	NFT_CMP_LT                        = 0x2
+	NFT_CMP_LTE                       = 0x3
+	NFT_CMP_GT                        = 0x4
+	NFT_CMP_GTE                       = 0x5
+	NFTA_CMP_UNSPEC                   = 0x0
+	NFTA_CMP_SREG                     = 0x1
+	NFTA_CMP_OP                       = 0x2
+	NFTA_CMP_DATA                     = 0x3
+	NFT_RANGE_EQ                      = 0x0
+	NFT_RANGE_NEQ                     = 0x1
+	NFTA_RANGE_UNSPEC                 = 0x0
+	NFTA_RANGE_SREG                   = 0x1
+	NFTA_RANGE_OP                     = 0x2
+	NFTA_RANGE_FROM_DATA              = 0x3
+	NFTA_RANGE_TO_DATA                = 0x4
+	NFT_LOOKUP_F_INV                  = 0x1
+	NFTA_LOOKUP_UNSPEC                = 0x0
+	NFTA_LOOKUP_SET                   = 0x1
+	NFTA_LOOKUP_SREG                  = 0x2
+	NFTA_LOOKUP_DREG                  = 0x3
+	NFTA_LOOKUP_SET_ID                = 0x4
+	NFTA_LOOKUP_FLAGS                 = 0x5
+	NFT_DYNSET_OP_ADD                 = 0x0
+	NFT_DYNSET_OP_UPDATE              = 0x1
+	NFT_DYNSET_F_INV                  = 0x1
+	NFTA_DYNSET_UNSPEC                = 0x0
+	NFTA_DYNSET_SET_NAME              = 0x1
+	NFTA_DYNSET_SET_ID                = 0x2
+	NFTA_DYNSET_OP                    = 0x3
+	NFTA_DYNSET_SREG_KEY              = 0x4
+	NFTA_DYNSET_SREG_DATA             = 0x5
+	NFTA_DYNSET_TIMEOUT               = 0x6
+	NFTA_DYNSET_EXPR                  = 0x7
+	NFTA_DYNSET_PAD                   = 0x8
+	NFTA_DYNSET_FLAGS                 = 0x9
+	NFT_PAYLOAD_LL_HEADER             = 0x0
+	NFT_PAYLOAD_NETWORK_HEADER        = 0x1
+	NFT_PAYLOAD_TRANSPORT_HEADER      = 0x2
+	NFT_PAYLOAD_CSUM_NONE             = 0x0
+	NFT_PAYLOAD_CSUM_INET             = 0x1
+	NFT_PAYLOAD_L4CSUM_PSEUDOHDR      = 0x1
+	NFTA_PAYLOAD_UNSPEC               = 0x0
+	NFTA_PAYLOAD_DREG                 = 0x1
+	NFTA_PAYLOAD_BASE                 = 0x2
+	NFTA_PAYLOAD_OFFSET               = 0x3
+	NFTA_PAYLOAD_LEN                  = 0x4
+	NFTA_PAYLOAD_SREG                 = 0x5
+	NFTA_PAYLOAD_CSUM_TYPE            = 0x6
+	NFTA_PAYLOAD_CSUM_OFFSET          = 0x7
+	NFTA_PAYLOAD_CSUM_FLAGS           = 0x8
+	NFT_EXTHDR_F_PRESENT              = 0x1
+	NFT_EXTHDR_OP_IPV6                = 0x0
+	NFT_EXTHDR_OP_TCPOPT              = 0x1
+	NFTA_EXTHDR_UNSPEC                = 0x0
+	NFTA_EXTHDR_DREG                  = 0x1
+	NFTA_EXTHDR_TYPE                  = 0x2
+	NFTA_EXTHDR_OFFSET                = 0x3
+	NFTA_EXTHDR_LEN                   = 0x4
+	NFTA_EXTHDR_FLAGS                 = 0x5
+	NFTA_EXTHDR_OP                    = 0x6
+	NFTA_EXTHDR_SREG                  = 0x7
+	NFT_META_LEN                      = 0x0
+	NFT_META_PROTOCOL                 = 0x1
+	NFT_META_PRIORITY                 = 0x2
+	NFT_META_MARK                     = 0x3
+	NFT_META_IIF                      = 0x4
+	NFT_META_OIF                      = 0x5
+	NFT_META_IIFNAME                  = 0x6
+	NFT_META_OIFNAME                  = 0x7
+	NFT_META_IIFTYPE                  = 0x8
+	NFT_META_OIFTYPE                  = 0x9
+	NFT_META_SKUID                    = 0xa
+	NFT_META_SKGID                    = 0xb
+	NFT_META_NFTRACE                  = 0xc
+	NFT_META_RTCLASSID                = 0xd
+	NFT_META_SECMARK                  = 0xe
+	NFT_META_NFPROTO                  = 0xf
+	NFT_META_L4PROTO                  = 0x10
+	NFT_META_BRI_IIFNAME              = 0x11
+	NFT_META_BRI_OIFNAME              = 0x12
+	NFT_META_PKTTYPE                  = 0x13
+	NFT_META_CPU                      = 0x14
+	NFT_META_IIFGROUP                 = 0x15
+	NFT_META_OIFGROUP                 = 0x16
+	NFT_META_CGROUP                   = 0x17
+	NFT_META_PRANDOM                  = 0x18
+	NFT_RT_CLASSID                    = 0x0
+	NFT_RT_NEXTHOP4                   = 0x1
+	NFT_RT_NEXTHOP6                   = 0x2
+	NFT_RT_TCPMSS                     = 0x3
+	NFT_HASH_JENKINS                  = 0x0
+	NFT_HASH_SYM                      = 0x1
+	NFTA_HASH_UNSPEC                  = 0x0
+	NFTA_HASH_SREG                    = 0x1
+	NFTA_HASH_DREG                    = 0x2
+	NFTA_HASH_LEN                     = 0x3
+	NFTA_HASH_MODULUS                 = 0x4
+	NFTA_HASH_SEED                    = 0x5
+	NFTA_HASH_OFFSET                  = 0x6
+	NFTA_HASH_TYPE                    = 0x7
+	NFTA_META_UNSPEC                  = 0x0
+	NFTA_META_DREG                    = 0x1
+	NFTA_META_KEY                     = 0x2
+	NFTA_META_SREG                    = 0x3
+	NFTA_RT_UNSPEC                    = 0x0
+	NFTA_RT_DREG                      = 0x1
+	NFTA_RT_KEY                       = 0x2
+	NFT_CT_STATE                      = 0x0
+	NFT_CT_DIRECTION                  = 0x1
+	NFT_CT_STATUS                     = 0x2
+	NFT_CT_MARK                       = 0x3
+	NFT_CT_SECMARK                    = 0x4
+	NFT_CT_EXPIRATION                 = 0x5
+	NFT_CT_HELPER                     = 0x6
+	NFT_CT_L3PROTOCOL                 = 0x7
+	NFT_CT_SRC                        = 0x8
+	NFT_CT_DST                        = 0x9
+	NFT_CT_PROTOCOL                   = 0xa
+	NFT_CT_PROTO_SRC                  = 0xb
+	NFT_CT_PROTO_DST                  = 0xc
+	NFT_CT_LABELS                     = 0xd
+	NFT_CT_PKTS                       = 0xe
+	NFT_CT_BYTES                      = 0xf
+	NFT_CT_AVGPKT                     = 0x10
+	NFT_CT_ZONE                       = 0x11
+	NFT_CT_EVENTMASK                  = 0x12
+	NFTA_CT_UNSPEC                    = 0x0
+	NFTA_CT_DREG                      = 0x1
+	NFTA_CT_KEY                       = 0x2
+	NFTA_CT_DIRECTION                 = 0x3
+	NFTA_CT_SREG                      = 0x4
+	NFT_LIMIT_PKTS                    = 0x0
+	NFT_LIMIT_PKT_BYTES               = 0x1
+	NFT_LIMIT_F_INV                   = 0x1
+	NFTA_LIMIT_UNSPEC                 = 0x0
+	NFTA_LIMIT_RATE                   = 0x1
+	NFTA_LIMIT_UNIT                   = 0x2
+	NFTA_LIMIT_BURST                  = 0x3
+	NFTA_LIMIT_TYPE                   = 0x4
+	NFTA_LIMIT_FLAGS                  = 0x5
+	NFTA_LIMIT_PAD                    = 0x6
+	NFTA_COUNTER_UNSPEC               = 0x0
+	NFTA_COUNTER_BYTES                = 0x1
+	NFTA_COUNTER_PACKETS              = 0x2
+	NFTA_COUNTER_PAD                  = 0x3
+	NFTA_LOG_UNSPEC                   = 0x0
+	NFTA_LOG_GROUP                    = 0x1
+	NFTA_LOG_PREFIX                   = 0x2
+	NFTA_LOG_SNAPLEN                  = 0x3
+	NFTA_LOG_QTHRESHOLD               = 0x4
+	NFTA_LOG_LEVEL                    = 0x5
+	NFTA_LOG_FLAGS                    = 0x6
+	NFTA_QUEUE_UNSPEC                 = 0x0
+	NFTA_QUEUE_NUM                    = 0x1
+	NFTA_QUEUE_TOTAL                  = 0x2
+	NFTA_QUEUE_FLAGS                  = 0x3
+	NFTA_QUEUE_SREG_QNUM              = 0x4
+	NFT_QUOTA_F_INV                   = 0x1
+	NFT_QUOTA_F_DEPLETED              = 0x2
+	NFTA_QUOTA_UNSPEC                 = 0x0
+	NFTA_QUOTA_BYTES                  = 0x1
+	NFTA_QUOTA_FLAGS                  = 0x2
+	NFTA_QUOTA_PAD                    = 0x3
+	NFTA_QUOTA_CONSUMED               = 0x4
+	NFT_REJECT_ICMP_UNREACH           = 0x0
+	NFT_REJECT_TCP_RST                = 0x1
+	NFT_REJECT_ICMPX_UNREACH          = 0x2
+	NFT_REJECT_ICMPX_NO_ROUTE         = 0x0
+	NFT_REJECT_ICMPX_PORT_UNREACH     = 0x1
+	NFT_REJECT_ICMPX_HOST_UNREACH     = 0x2
+	NFT_REJECT_ICMPX_ADMIN_PROHIBITED = 0x3
+	NFTA_REJECT_UNSPEC                = 0x0
+	NFTA_REJECT_TYPE                  = 0x1
+	NFTA_REJECT_ICMP_CODE             = 0x2
+	NFT_NAT_SNAT                      = 0x0
+	NFT_NAT_DNAT                      = 0x1
+	NFTA_NAT_UNSPEC                   = 0x0
+	NFTA_NAT_TYPE                     = 0x1
+	NFTA_NAT_FAMILY                   = 0x2
+	NFTA_NAT_REG_ADDR_MIN             = 0x3
+	NFTA_NAT_REG_ADDR_MAX             = 0x4
+	NFTA_NAT_REG_PROTO_MIN            = 0x5
+	NFTA_NAT_REG_PROTO_MAX            = 0x6
+	NFTA_NAT_FLAGS                    = 0x7
+	NFTA_MASQ_UNSPEC                  = 0x0
+	NFTA_MASQ_FLAGS                   = 0x1
+	NFTA_MASQ_REG_PROTO_MIN           = 0x2
+	NFTA_MASQ_REG_PROTO_MAX           = 0x3
+	NFTA_REDIR_UNSPEC                 = 0x0
+	NFTA_REDIR_REG_PROTO_MIN          = 0x1
+	NFTA_REDIR_REG_PROTO_MAX          = 0x2
+	NFTA_REDIR_FLAGS                  = 0x3
+	NFTA_DUP_UNSPEC                   = 0x0
+	NFTA_DUP_SREG_ADDR                = 0x1
+	NFTA_DUP_SREG_DEV                 = 0x2
+	NFTA_FWD_UNSPEC                   = 0x0
+	NFTA_FWD_SREG_DEV                 = 0x1
+	NFTA_OBJREF_UNSPEC                = 0x0
+	NFTA_OBJREF_IMM_TYPE              = 0x1
+	NFTA_OBJREF_IMM_NAME              = 0x2
+	NFTA_OBJREF_SET_SREG              = 0x3
+	NFTA_OBJREF_SET_NAME              = 0x4
+	NFTA_OBJREF_SET_ID                = 0x5
+	NFTA_GEN_UNSPEC                   = 0x0
+	NFTA_GEN_ID                       = 0x1
+	NFTA_GEN_PROC_PID                 = 0x2
+	NFTA_GEN_PROC_NAME                = 0x3
+	NFTA_FIB_UNSPEC                   = 0x0
+	NFTA_FIB_DREG                     = 0x1
+	NFTA_FIB_RESULT                   = 0x2
+	NFTA_FIB_FLAGS                    = 0x3
+	NFT_FIB_RESULT_UNSPEC             = 0x0
+	NFT_FIB_RESULT_OIF                = 0x1
+	NFT_FIB_RESULT_OIFNAME            = 0x2
+	NFT_FIB_RESULT_ADDRTYPE           = 0x3
+	NFTA_FIB_F_SADDR                  = 0x1
+	NFTA_FIB_F_DADDR                  = 0x2
+	NFTA_FIB_F_MARK                   = 0x4
+	NFTA_FIB_F_IIF                    = 0x8
+	NFTA_FIB_F_OIF                    = 0x10
+	NFTA_FIB_F_PRESENT                = 0x20
+	NFTA_CT_HELPER_UNSPEC             = 0x0
+	NFTA_CT_HELPER_NAME               = 0x1
+	NFTA_CT_HELPER_L3PROTO            = 0x2
+	NFTA_CT_HELPER_L4PROTO            = 0x3
+	NFTA_OBJ_UNSPEC                   = 0x0
+	NFTA_OBJ_TABLE                    = 0x1
+	NFTA_OBJ_NAME                     = 0x2
+	NFTA_OBJ_TYPE                     = 0x3
+	NFTA_OBJ_DATA                     = 0x4
+	NFTA_OBJ_USE                      = 0x5
+	NFTA_TRACE_UNSPEC                 = 0x0
+	NFTA_TRACE_TABLE                  = 0x1
+	NFTA_TRACE_CHAIN                  = 0x2
+	NFTA_TRACE_RULE_HANDLE            = 0x3
+	NFTA_TRACE_TYPE                   = 0x4
+	NFTA_TRACE_VERDICT                = 0x5
+	NFTA_TRACE_ID                     = 0x6
+	NFTA_TRACE_LL_HEADER              = 0x7
+	NFTA_TRACE_NETWORK_HEADER         = 0x8
+	NFTA_TRACE_TRANSPORT_HEADER       = 0x9
+	NFTA_TRACE_IIF                    = 0xa
+	NFTA_TRACE_IIFTYPE                = 0xb
+	NFTA_TRACE_OIF                    = 0xc
+	NFTA_TRACE_OIFTYPE                = 0xd
+	NFTA_TRACE_MARK                   = 0xe
+	NFTA_TRACE_NFPROTO                = 0xf
+	NFTA_TRACE_POLICY                 = 0x10
+	NFTA_TRACE_PAD                    = 0x11
+	NFT_TRACETYPE_UNSPEC              = 0x0
+	NFT_TRACETYPE_POLICY              = 0x1
+	NFT_TRACETYPE_RETURN              = 0x2
+	NFT_TRACETYPE_RULE                = 0x3
+	NFTA_NG_UNSPEC                    = 0x0
+	NFTA_NG_DREG                      = 0x1
+	NFTA_NG_MODULUS                   = 0x2
+	NFTA_NG_TYPE                      = 0x3
+	NFTA_NG_OFFSET                    = 0x4
+	NFT_NG_INCREMENTAL                = 0x0
+	NFT_NG_RANDOM                     = 0x1
+)
+
+const (
+	NFTA_TARGET_UNSPEC = 0x0
+	NFTA_TARGET_NAME   = 0x1
+	NFTA_TARGET_REV    = 0x2
+	NFTA_TARGET_INFO   = 0x3
+	NFTA_MATCH_UNSPEC  = 0x0
+	NFTA_MATCH_NAME    = 0x1
+	NFTA_MATCH_REV     = 0x2
+	NFTA_MATCH_INFO    = 0x3
+	NFTA_COMPAT_UNSPEC = 0x0
+	NFTA_COMPAT_NAME   = 0x1
+	NFTA_COMPAT_REV    = 0x2
+	NFTA_COMPAT_TYPE   = 0x3
+)
+
+type RTCTime struct {
+	Sec   int32
+	Min   int32
+	Hour  int32
+	Mday  int32
+	Mon   int32
+	Year  int32
+	Wday  int32
+	Yday  int32
+	Isdst int32
+}
+
+type RTCWkAlrm struct {
+	Enabled uint8
+	Pending uint8
+	Time    RTCTime
+}
+
+type BlkpgIoctlArg struct {
+	Op      int32
+	Flags   int32
+	Datalen int32
+	Data    *byte
+}
+
+const (
+	BLKPG_ADD_PARTITION    = 0x1
+	BLKPG_DEL_PARTITION    = 0x2
+	BLKPG_RESIZE_PARTITION = 0x3
+)
+
+const (
+	NETNSA_NONE = 0x0
+	NETNSA_NSID = 0x1
+	NETNSA_PID  = 0x2
+	NETNSA_FD   = 0x3
+)
+
+type XDPRingOffset struct {
+	Producer uint64
+	Consumer uint64
+	Desc     uint64
+	Flags    uint64
+}
+
+type XDPMmapOffsets struct {
+	Rx XDPRingOffset
+	Tx XDPRingOffset
+	Fr XDPRingOffset
+	Cr XDPRingOffset
+}
+
+type XDPStatistics struct {
+	Rx_dropped       uint64
+	Rx_invalid_descs uint64
+	Tx_invalid_descs uint64
+}
+
+type XDPDesc struct {
+	Addr    uint64
+	Len     uint32
+	Options uint32
+}
+
+const (
+	NCSI_CMD_UNSPEC                 = 0x0
+	NCSI_CMD_PKG_INFO               = 0x1
+	NCSI_CMD_SET_INTERFACE          = 0x2
+	NCSI_CMD_CLEAR_INTERFACE        = 0x3
+	NCSI_ATTR_UNSPEC                = 0x0
+	NCSI_ATTR_IFINDEX               = 0x1
+	NCSI_ATTR_PACKAGE_LIST          = 0x2
+	NCSI_ATTR_PACKAGE_ID            = 0x3
+	NCSI_ATTR_CHANNEL_ID            = 0x4
+	NCSI_PKG_ATTR_UNSPEC            = 0x0
+	NCSI_PKG_ATTR                   = 0x1
+	NCSI_PKG_ATTR_ID                = 0x2
+	NCSI_PKG_ATTR_FORCED            = 0x3
+	NCSI_PKG_ATTR_CHANNEL_LIST      = 0x4
+	NCSI_CHANNEL_ATTR_UNSPEC        = 0x0
+	NCSI_CHANNEL_ATTR               = 0x1
+	NCSI_CHANNEL_ATTR_ID            = 0x2
+	NCSI_CHANNEL_ATTR_VERSION_MAJOR = 0x3
+	NCSI_CHANNEL_ATTR_VERSION_MINOR = 0x4
+	NCSI_CHANNEL_ATTR_VERSION_STR   = 0x5
+	NCSI_CHANNEL_ATTR_LINK_STATE    = 0x6
+	NCSI_CHANNEL_ATTR_ACTIVE        = 0x7
+	NCSI_CHANNEL_ATTR_FORCED        = 0x8
+	NCSI_CHANNEL_ATTR_VLAN_LIST     = 0x9
+	NCSI_CHANNEL_ATTR_VLAN_ID       = 0xa
+)
+
+type ScmTimestamping struct {
+	Ts [3]Timespec
+}
+
+const (
+	SOF_TIMESTAMPING_TX_HARDWARE  = 0x1
+	SOF_TIMESTAMPING_TX_SOFTWARE  = 0x2
+	SOF_TIMESTAMPING_RX_HARDWARE  = 0x4
+	SOF_TIMESTAMPING_RX_SOFTWARE  = 0x8
+	SOF_TIMESTAMPING_SOFTWARE     = 0x10
+	SOF_TIMESTAMPING_SYS_HARDWARE = 0x20
+	SOF_TIMESTAMPING_RAW_HARDWARE = 0x40
+	SOF_TIMESTAMPING_OPT_ID       = 0x80
+	SOF_TIMESTAMPING_TX_SCHED     = 0x100
+	SOF_TIMESTAMPING_TX_ACK       = 0x200
+	SOF_TIMESTAMPING_OPT_CMSG     = 0x400
+	SOF_TIMESTAMPING_OPT_TSONLY   = 0x800
+	SOF_TIMESTAMPING_OPT_STATS    = 0x1000
+	SOF_TIMESTAMPING_OPT_PKTINFO  = 0x2000
+	SOF_TIMESTAMPING_OPT_TX_SWHW  = 0x4000
+
+	SOF_TIMESTAMPING_LAST = 0x4000
+	SOF_TIMESTAMPING_MASK = 0x7fff
+
+	SCM_TSTAMP_SND   = 0x0
+	SCM_TSTAMP_SCHED = 0x1
+	SCM_TSTAMP_ACK   = 0x2
+)
+
+type SockExtendedErr struct {
+	Errno  uint32
+	Origin uint8
+	Type   uint8
+	Code   uint8
+	Pad    uint8
+	Info   uint32
+	Data   uint32
+}
+
+type FanotifyEventMetadata struct {
+	Event_len    uint32
+	Vers         uint8
+	Reserved     uint8
+	Metadata_len uint16
+	Mask         uint64
+	Fd           int32
+	Pid          int32
+}
+
+type FanotifyResponse struct {
+	Fd       int32
+	Response uint32
+}
+
+const (
+	CRYPTO_MSG_BASE      = 0x10
+	CRYPTO_MSG_NEWALG    = 0x10
+	CRYPTO_MSG_DELALG    = 0x11
+	CRYPTO_MSG_UPDATEALG = 0x12
+	CRYPTO_MSG_GETALG    = 0x13
+	CRYPTO_MSG_DELRNG    = 0x14
+	CRYPTO_MSG_GETSTAT   = 0x15
+)
+
+const (
+	CRYPTOCFGA_UNSPEC           = 0x0
+	CRYPTOCFGA_PRIORITY_VAL     = 0x1
+	CRYPTOCFGA_REPORT_LARVAL    = 0x2
+	CRYPTOCFGA_REPORT_HASH      = 0x3
+	CRYPTOCFGA_REPORT_BLKCIPHER = 0x4
+	CRYPTOCFGA_REPORT_AEAD      = 0x5
+	CRYPTOCFGA_REPORT_COMPRESS  = 0x6
+	CRYPTOCFGA_REPORT_RNG       = 0x7
+	CRYPTOCFGA_REPORT_CIPHER    = 0x8
+	CRYPTOCFGA_REPORT_AKCIPHER  = 0x9
+	CRYPTOCFGA_REPORT_KPP       = 0xa
+	CRYPTOCFGA_REPORT_ACOMP     = 0xb
+	CRYPTOCFGA_STAT_LARVAL      = 0xc
+	CRYPTOCFGA_STAT_HASH        = 0xd
+	CRYPTOCFGA_STAT_BLKCIPHER   = 0xe
+	CRYPTOCFGA_STAT_AEAD        = 0xf
+	CRYPTOCFGA_STAT_COMPRESS    = 0x10
+	CRYPTOCFGA_STAT_RNG         = 0x11
+	CRYPTOCFGA_STAT_CIPHER      = 0x12
+	CRYPTOCFGA_STAT_AKCIPHER    = 0x13
+	CRYPTOCFGA_STAT_KPP         = 0x14
+	CRYPTOCFGA_STAT_ACOMP       = 0x15
+)
+
+const (
+	BPF_REG_0                               = 0x0
+	BPF_REG_1                               = 0x1
+	BPF_REG_2                               = 0x2
+	BPF_REG_3                               = 0x3
+	BPF_REG_4                               = 0x4
+	BPF_REG_5                               = 0x5
+	BPF_REG_6                               = 0x6
+	BPF_REG_7                               = 0x7
+	BPF_REG_8                               = 0x8
+	BPF_REG_9                               = 0x9
+	BPF_REG_10                              = 0xa
+	BPF_MAP_CREATE                          = 0x0
+	BPF_MAP_LOOKUP_ELEM                     = 0x1
+	BPF_MAP_UPDATE_ELEM                     = 0x2
+	BPF_MAP_DELETE_ELEM                     = 0x3
+	BPF_MAP_GET_NEXT_KEY                    = 0x4
+	BPF_PROG_LOAD                           = 0x5
+	BPF_OBJ_PIN                             = 0x6
+	BPF_OBJ_GET                             = 0x7
+	BPF_PROG_ATTACH                         = 0x8
+	BPF_PROG_DETACH                         = 0x9
+	BPF_PROG_TEST_RUN                       = 0xa
+	BPF_PROG_GET_NEXT_ID                    = 0xb
+	BPF_MAP_GET_NEXT_ID                     = 0xc
+	BPF_PROG_GET_FD_BY_ID                   = 0xd
+	BPF_MAP_GET_FD_BY_ID                    = 0xe
+	BPF_OBJ_GET_INFO_BY_FD                  = 0xf
+	BPF_PROG_QUERY                          = 0x10
+	BPF_RAW_TRACEPOINT_OPEN                 = 0x11
+	BPF_BTF_LOAD                            = 0x12
+	BPF_BTF_GET_FD_BY_ID                    = 0x13
+	BPF_TASK_FD_QUERY                       = 0x14
+	BPF_MAP_LOOKUP_AND_DELETE_ELEM          = 0x15
+	BPF_MAP_FREEZE                          = 0x16
+	BPF_BTF_GET_NEXT_ID                     = 0x17
+	BPF_MAP_LOOKUP_BATCH                    = 0x18
+	BPF_MAP_LOOKUP_AND_DELETE_BATCH         = 0x19
+	BPF_MAP_UPDATE_BATCH                    = 0x1a
+	BPF_MAP_DELETE_BATCH                    = 0x1b
+	BPF_LINK_CREATE                         = 0x1c
+	BPF_LINK_UPDATE                         = 0x1d
+	BPF_LINK_GET_FD_BY_ID                   = 0x1e
+	BPF_LINK_GET_NEXT_ID                    = 0x1f
+	BPF_ENABLE_STATS                        = 0x20
+	BPF_ITER_CREATE                         = 0x21
+	BPF_MAP_TYPE_UNSPEC                     = 0x0
+	BPF_MAP_TYPE_HASH                       = 0x1
+	BPF_MAP_TYPE_ARRAY                      = 0x2
+	BPF_MAP_TYPE_PROG_ARRAY                 = 0x3
+	BPF_MAP_TYPE_PERF_EVENT_ARRAY           = 0x4
+	BPF_MAP_TYPE_PERCPU_HASH                = 0x5
+	BPF_MAP_TYPE_PERCPU_ARRAY               = 0x6
+	BPF_MAP_TYPE_STACK_TRACE                = 0x7
+	BPF_MAP_TYPE_CGROUP_ARRAY               = 0x8
+	BPF_MAP_TYPE_LRU_HASH                   = 0x9
+	BPF_MAP_TYPE_LRU_PERCPU_HASH            = 0xa
+	BPF_MAP_TYPE_LPM_TRIE                   = 0xb
+	BPF_MAP_TYPE_ARRAY_OF_MAPS              = 0xc
+	BPF_MAP_TYPE_HASH_OF_MAPS               = 0xd
+	BPF_MAP_TYPE_DEVMAP                     = 0xe
+	BPF_MAP_TYPE_SOCKMAP                    = 0xf
+	BPF_MAP_TYPE_CPUMAP                     = 0x10
+	BPF_MAP_TYPE_XSKMAP                     = 0x11
+	BPF_MAP_TYPE_SOCKHASH                   = 0x12
+	BPF_MAP_TYPE_CGROUP_STORAGE             = 0x13
+	BPF_MAP_TYPE_REUSEPORT_SOCKARRAY        = 0x14
+	BPF_MAP_TYPE_PERCPU_CGROUP_STORAGE      = 0x15
+	BPF_MAP_TYPE_QUEUE                      = 0x16
+	BPF_MAP_TYPE_STACK                      = 0x17
+	BPF_MAP_TYPE_SK_STORAGE                 = 0x18
+	BPF_MAP_TYPE_DEVMAP_HASH                = 0x19
+	BPF_MAP_TYPE_STRUCT_OPS                 = 0x1a
+	BPF_MAP_TYPE_RINGBUF                    = 0x1b
+	BPF_PROG_TYPE_UNSPEC                    = 0x0
+	BPF_PROG_TYPE_SOCKET_FILTER             = 0x1
+	BPF_PROG_TYPE_KPROBE                    = 0x2
+	BPF_PROG_TYPE_SCHED_CLS                 = 0x3
+	BPF_PROG_TYPE_SCHED_ACT                 = 0x4
+	BPF_PROG_TYPE_TRACEPOINT                = 0x5
+	BPF_PROG_TYPE_XDP                       = 0x6
+	BPF_PROG_TYPE_PERF_EVENT                = 0x7
+	BPF_PROG_TYPE_CGROUP_SKB                = 0x8
+	BPF_PROG_TYPE_CGROUP_SOCK               = 0x9
+	BPF_PROG_TYPE_LWT_IN                    = 0xa
+	BPF_PROG_TYPE_LWT_OUT                   = 0xb
+	BPF_PROG_TYPE_LWT_XMIT                  = 0xc
+	BPF_PROG_TYPE_SOCK_OPS                  = 0xd
+	BPF_PROG_TYPE_SK_SKB                    = 0xe
+	BPF_PROG_TYPE_CGROUP_DEVICE             = 0xf
+	BPF_PROG_TYPE_SK_MSG                    = 0x10
+	BPF_PROG_TYPE_RAW_TRACEPOINT            = 0x11
+	BPF_PROG_TYPE_CGROUP_SOCK_ADDR          = 0x12
+	BPF_PROG_TYPE_LWT_SEG6LOCAL             = 0x13
+	BPF_PROG_TYPE_LIRC_MODE2                = 0x14
+	BPF_PROG_TYPE_SK_REUSEPORT              = 0x15
+	BPF_PROG_TYPE_FLOW_DISSECTOR            = 0x16
+	BPF_PROG_TYPE_CGROUP_SYSCTL             = 0x17
+	BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE   = 0x18
+	BPF_PROG_TYPE_CGROUP_SOCKOPT            = 0x19
+	BPF_PROG_TYPE_TRACING                   = 0x1a
+	BPF_PROG_TYPE_STRUCT_OPS                = 0x1b
+	BPF_PROG_TYPE_EXT                       = 0x1c
+	BPF_PROG_TYPE_LSM                       = 0x1d
+	BPF_CGROUP_INET_INGRESS                 = 0x0
+	BPF_CGROUP_INET_EGRESS                  = 0x1
+	BPF_CGROUP_INET_SOCK_CREATE             = 0x2
+	BPF_CGROUP_SOCK_OPS                     = 0x3
+	BPF_SK_SKB_STREAM_PARSER                = 0x4
+	BPF_SK_SKB_STREAM_VERDICT               = 0x5
+	BPF_CGROUP_DEVICE                       = 0x6
+	BPF_SK_MSG_VERDICT                      = 0x7
+	BPF_CGROUP_INET4_BIND                   = 0x8
+	BPF_CGROUP_INET6_BIND                   = 0x9
+	BPF_CGROUP_INET4_CONNECT                = 0xa
+	BPF_CGROUP_INET6_CONNECT                = 0xb
+	BPF_CGROUP_INET4_POST_BIND              = 0xc
+	BPF_CGROUP_INET6_POST_BIND              = 0xd
+	BPF_CGROUP_UDP4_SENDMSG                 = 0xe
+	BPF_CGROUP_UDP6_SENDMSG                 = 0xf
+	BPF_LIRC_MODE2                          = 0x10
+	BPF_FLOW_DISSECTOR                      = 0x11
+	BPF_CGROUP_SYSCTL                       = 0x12
+	BPF_CGROUP_UDP4_RECVMSG                 = 0x13
+	BPF_CGROUP_UDP6_RECVMSG                 = 0x14
+	BPF_CGROUP_GETSOCKOPT                   = 0x15
+	BPF_CGROUP_SETSOCKOPT                   = 0x16
+	BPF_TRACE_RAW_TP                        = 0x17
+	BPF_TRACE_FENTRY                        = 0x18
+	BPF_TRACE_FEXIT                         = 0x19
+	BPF_MODIFY_RETURN                       = 0x1a
+	BPF_LSM_MAC                             = 0x1b
+	BPF_TRACE_ITER                          = 0x1c
+	BPF_CGROUP_INET4_GETPEERNAME            = 0x1d
+	BPF_CGROUP_INET6_GETPEERNAME            = 0x1e
+	BPF_CGROUP_INET4_GETSOCKNAME            = 0x1f
+	BPF_CGROUP_INET6_GETSOCKNAME            = 0x20
+	BPF_XDP_DEVMAP                          = 0x21
+	BPF_LINK_TYPE_UNSPEC                    = 0x0
+	BPF_LINK_TYPE_RAW_TRACEPOINT            = 0x1
+	BPF_LINK_TYPE_TRACING                   = 0x2
+	BPF_LINK_TYPE_CGROUP                    = 0x3
+	BPF_LINK_TYPE_ITER                      = 0x4
+	BPF_LINK_TYPE_NETNS                     = 0x5
+	BPF_ANY                                 = 0x0
+	BPF_NOEXIST                             = 0x1
+	BPF_EXIST                               = 0x2
+	BPF_F_LOCK                              = 0x4
+	BPF_F_NO_PREALLOC                       = 0x1
+	BPF_F_NO_COMMON_LRU                     = 0x2
+	BPF_F_NUMA_NODE                         = 0x4
+	BPF_F_RDONLY                            = 0x8
+	BPF_F_WRONLY                            = 0x10
+	BPF_F_STACK_BUILD_ID                    = 0x20
+	BPF_F_ZERO_SEED                         = 0x40
+	BPF_F_RDONLY_PROG                       = 0x80
+	BPF_F_WRONLY_PROG                       = 0x100
+	BPF_F_CLONE                             = 0x200
+	BPF_F_MMAPABLE                          = 0x400
+	BPF_STATS_RUN_TIME                      = 0x0
+	BPF_STACK_BUILD_ID_EMPTY                = 0x0
+	BPF_STACK_BUILD_ID_VALID                = 0x1
+	BPF_STACK_BUILD_ID_IP                   = 0x2
+	BPF_F_RECOMPUTE_CSUM                    = 0x1
+	BPF_F_INVALIDATE_HASH                   = 0x2
+	BPF_F_HDR_FIELD_MASK                    = 0xf
+	BPF_F_PSEUDO_HDR                        = 0x10
+	BPF_F_MARK_MANGLED_0                    = 0x20
+	BPF_F_MARK_ENFORCE                      = 0x40
+	BPF_F_INGRESS                           = 0x1
+	BPF_F_TUNINFO_IPV6                      = 0x1
+	BPF_F_SKIP_FIELD_MASK                   = 0xff
+	BPF_F_USER_STACK                        = 0x100
+	BPF_F_FAST_STACK_CMP                    = 0x200
+	BPF_F_REUSE_STACKID                     = 0x400
+	BPF_F_USER_BUILD_ID                     = 0x800
+	BPF_F_ZERO_CSUM_TX                      = 0x2
+	BPF_F_DONT_FRAGMENT                     = 0x4
+	BPF_F_SEQ_NUMBER                        = 0x8
+	BPF_F_INDEX_MASK                        = 0xffffffff
+	BPF_F_CURRENT_CPU                       = 0xffffffff
+	BPF_F_CTXLEN_MASK                       = 0xfffff00000000
+	BPF_F_CURRENT_NETNS                     = -0x1
+	BPF_CSUM_LEVEL_QUERY                    = 0x0
+	BPF_CSUM_LEVEL_INC                      = 0x1
+	BPF_CSUM_LEVEL_DEC                      = 0x2
+	BPF_CSUM_LEVEL_RESET                    = 0x3
+	BPF_F_ADJ_ROOM_FIXED_GSO                = 0x1
+	BPF_F_ADJ_ROOM_ENCAP_L3_IPV4            = 0x2
+	BPF_F_ADJ_ROOM_ENCAP_L3_IPV6            = 0x4
+	BPF_F_ADJ_ROOM_ENCAP_L4_GRE             = 0x8
+	BPF_F_ADJ_ROOM_ENCAP_L4_UDP             = 0x10
+	BPF_F_ADJ_ROOM_NO_CSUM_RESET            = 0x20
+	BPF_ADJ_ROOM_ENCAP_L2_MASK              = 0xff
+	BPF_ADJ_ROOM_ENCAP_L2_SHIFT             = 0x38
+	BPF_F_SYSCTL_BASE_NAME                  = 0x1
+	BPF_SK_STORAGE_GET_F_CREATE             = 0x1
+	BPF_F_GET_BRANCH_RECORDS_SIZE           = 0x1
+	BPF_RB_NO_WAKEUP                        = 0x1
+	BPF_RB_FORCE_WAKEUP                     = 0x2
+	BPF_RB_AVAIL_DATA                       = 0x0
+	BPF_RB_RING_SIZE                        = 0x1
+	BPF_RB_CONS_POS                         = 0x2
+	BPF_RB_PROD_POS                         = 0x3
+	BPF_RINGBUF_BUSY_BIT                    = 0x80000000
+	BPF_RINGBUF_DISCARD_BIT                 = 0x40000000
+	BPF_RINGBUF_HDR_SZ                      = 0x8
+	BPF_ADJ_ROOM_NET                        = 0x0
+	BPF_ADJ_ROOM_MAC                        = 0x1
+	BPF_HDR_START_MAC                       = 0x0
+	BPF_HDR_START_NET                       = 0x1
+	BPF_LWT_ENCAP_SEG6                      = 0x0
+	BPF_LWT_ENCAP_SEG6_INLINE               = 0x1
+	BPF_LWT_ENCAP_IP                        = 0x2
+	BPF_OK                                  = 0x0
+	BPF_DROP                                = 0x2
+	BPF_REDIRECT                            = 0x7
+	BPF_LWT_REROUTE                         = 0x80
+	BPF_SOCK_OPS_RTO_CB_FLAG                = 0x1
+	BPF_SOCK_OPS_RETRANS_CB_FLAG            = 0x2
+	BPF_SOCK_OPS_STATE_CB_FLAG              = 0x4
+	BPF_SOCK_OPS_RTT_CB_FLAG                = 0x8
+	BPF_SOCK_OPS_ALL_CB_FLAGS               = 0xf
+	BPF_SOCK_OPS_VOID                       = 0x0
+	BPF_SOCK_OPS_TIMEOUT_INIT               = 0x1
+	BPF_SOCK_OPS_RWND_INIT                  = 0x2
+	BPF_SOCK_OPS_TCP_CONNECT_CB             = 0x3
+	BPF_SOCK_OPS_ACTIVE_ESTABLISHED_CB      = 0x4
+	BPF_SOCK_OPS_PASSIVE_ESTABLISHED_CB     = 0x5
+	BPF_SOCK_OPS_NEEDS_ECN                  = 0x6
+	BPF_SOCK_OPS_BASE_RTT                   = 0x7
+	BPF_SOCK_OPS_RTO_CB                     = 0x8
+	BPF_SOCK_OPS_RETRANS_CB                 = 0x9
+	BPF_SOCK_OPS_STATE_CB                   = 0xa
+	BPF_SOCK_OPS_TCP_LISTEN_CB              = 0xb
+	BPF_SOCK_OPS_RTT_CB                     = 0xc
+	BPF_TCP_ESTABLISHED                     = 0x1
+	BPF_TCP_SYN_SENT                        = 0x2
+	BPF_TCP_SYN_RECV                        = 0x3
+	BPF_TCP_FIN_WAIT1                       = 0x4
+	BPF_TCP_FIN_WAIT2                       = 0x5
+	BPF_TCP_TIME_WAIT                       = 0x6
+	BPF_TCP_CLOSE                           = 0x7
+	BPF_TCP_CLOSE_WAIT                      = 0x8
+	BPF_TCP_LAST_ACK                        = 0x9
+	BPF_TCP_LISTEN                          = 0xa
+	BPF_TCP_CLOSING                         = 0xb
+	BPF_TCP_NEW_SYN_RECV                    = 0xc
+	BPF_TCP_MAX_STATES                      = 0xd
+	TCP_BPF_IW                              = 0x3e9
+	TCP_BPF_SNDCWND_CLAMP                   = 0x3ea
+	BPF_DEVCG_ACC_MKNOD                     = 0x1
+	BPF_DEVCG_ACC_READ                      = 0x2
+	BPF_DEVCG_ACC_WRITE                     = 0x4
+	BPF_DEVCG_DEV_BLOCK                     = 0x1
+	BPF_DEVCG_DEV_CHAR                      = 0x2
+	BPF_FIB_LOOKUP_DIRECT                   = 0x1
+	BPF_FIB_LOOKUP_OUTPUT                   = 0x2
+	BPF_FIB_LKUP_RET_SUCCESS                = 0x0
+	BPF_FIB_LKUP_RET_BLACKHOLE              = 0x1
+	BPF_FIB_LKUP_RET_UNREACHABLE            = 0x2
+	BPF_FIB_LKUP_RET_PROHIBIT               = 0x3
+	BPF_FIB_LKUP_RET_NOT_FWDED              = 0x4
+	BPF_FIB_LKUP_RET_FWD_DISABLED           = 0x5
+	BPF_FIB_LKUP_RET_UNSUPP_LWT             = 0x6
+	BPF_FIB_LKUP_RET_NO_NEIGH               = 0x7
+	BPF_FIB_LKUP_RET_FRAG_NEEDED            = 0x8
+	BPF_FD_TYPE_RAW_TRACEPOINT              = 0x0
+	BPF_FD_TYPE_TRACEPOINT                  = 0x1
+	BPF_FD_TYPE_KPROBE                      = 0x2
+	BPF_FD_TYPE_KRETPROBE                   = 0x3
+	BPF_FD_TYPE_UPROBE                      = 0x4
+	BPF_FD_TYPE_URETPROBE                   = 0x5
+	BPF_FLOW_DISSECTOR_F_PARSE_1ST_FRAG     = 0x1
+	BPF_FLOW_DISSECTOR_F_STOP_AT_FLOW_LABEL = 0x2
+	BPF_FLOW_DISSECTOR_F_STOP_AT_ENCAP      = 0x4
+)
+
+const (
+	RTNLGRP_NONE          = 0x0
+	RTNLGRP_LINK          = 0x1
+	RTNLGRP_NOTIFY        = 0x2
+	RTNLGRP_NEIGH         = 0x3
+	RTNLGRP_TC            = 0x4
+	RTNLGRP_IPV4_IFADDR   = 0x5
+	RTNLGRP_IPV4_MROUTE   = 0x6
+	RTNLGRP_IPV4_ROUTE    = 0x7
+	RTNLGRP_IPV4_RULE     = 0x8
+	RTNLGRP_IPV6_IFADDR   = 0x9
+	RTNLGRP_IPV6_MROUTE   = 0xa
+	RTNLGRP_IPV6_ROUTE    = 0xb
+	RTNLGRP_IPV6_IFINFO   = 0xc
+	RTNLGRP_DECnet_IFADDR = 0xd
+	RTNLGRP_NOP2          = 0xe
+	RTNLGRP_DECnet_ROUTE  = 0xf
+	RTNLGRP_DECnet_RULE   = 0x10
+	RTNLGRP_NOP4          = 0x11
+	RTNLGRP_IPV6_PREFIX   = 0x12
+	RTNLGRP_IPV6_RULE     = 0x13
+	RTNLGRP_ND_USEROPT    = 0x14
+	RTNLGRP_PHONET_IFADDR = 0x15
+	RTNLGRP_PHONET_ROUTE  = 0x16
+	RTNLGRP_DCB           = 0x17
+	RTNLGRP_IPV4_NETCONF  = 0x18
+	RTNLGRP_IPV6_NETCONF  = 0x19
+	RTNLGRP_MDB           = 0x1a
+	RTNLGRP_MPLS_ROUTE    = 0x1b
+	RTNLGRP_NSID          = 0x1c
+	RTNLGRP_MPLS_NETCONF  = 0x1d
+	RTNLGRP_IPV4_MROUTE_R = 0x1e
+	RTNLGRP_IPV6_MROUTE_R = 0x1f
+	RTNLGRP_NEXTHOP       = 0x20
+)
+
+type CapUserHeader struct {
+	Version uint32
+	Pid     int32
+}
+
+type CapUserData struct {
+	Effective   uint32
+	Permitted   uint32
+	Inheritable uint32
+}
+
+const (
+	LINUX_CAPABILITY_VERSION_1 = 0x19980330
+	LINUX_CAPABILITY_VERSION_2 = 0x20071026
+	LINUX_CAPABILITY_VERSION_3 = 0x20080522
+)
+
+const (
+	LO_FLAGS_READ_ONLY = 0x1
+	LO_FLAGS_AUTOCLEAR = 0x4
+	LO_FLAGS_PARTSCAN  = 0x8
+	LO_FLAGS_DIRECT_IO = 0x10
+)
+
+type LoopInfo64 struct {
+	Device           uint64
+	Inode            uint64
+	Rdevice          uint64
+	Offset           uint64
+	Sizelimit        uint64
+	Number           uint32
+	Encrypt_type     uint32
+	Encrypt_key_size uint32
+	Flags            uint32
+	File_name        [64]uint8
+	Crypt_name       [64]uint8
+	Encrypt_key      [32]uint8
+	Init             [2]uint64
+}
+
+type TIPCSocketAddr struct {
+	Ref  uint32
+	Node uint32
+}
+
+type TIPCServiceRange struct {
+	Type  uint32
+	Lower uint32
+	Upper uint32
+}
+
+type TIPCServiceName struct {
+	Type     uint32
+	Instance uint32
+	Domain   uint32
+}
+
+type TIPCEvent struct {
+	Event uint32
+	Lower uint32
+	Upper uint32
+	Port  TIPCSocketAddr
+	S     TIPCSubscr
+}
+
+type TIPCGroupReq struct {
+	Type     uint32
+	Instance uint32
+	Scope    uint32
+	Flags    uint32
+}
+
+const (
+	TIPC_CLUSTER_SCOPE = 0x2
+	TIPC_NODE_SCOPE    = 0x3
+)
+
+const (
+	SYSLOG_ACTION_CLOSE         = 0
+	SYSLOG_ACTION_OPEN          = 1
+	SYSLOG_ACTION_READ          = 2
+	SYSLOG_ACTION_READ_ALL      = 3
+	SYSLOG_ACTION_READ_CLEAR    = 4
+	SYSLOG_ACTION_CLEAR         = 5
+	SYSLOG_ACTION_CONSOLE_OFF   = 6
+	SYSLOG_ACTION_CONSOLE_ON    = 7
+	SYSLOG_ACTION_CONSOLE_LEVEL = 8
+	SYSLOG_ACTION_SIZE_UNREAD   = 9
+	SYSLOG_ACTION_SIZE_BUFFER   = 10
+)
+
+const (
+	DEVLINK_CMD_UNSPEC                        = 0x0
+	DEVLINK_CMD_GET                           = 0x1
+	DEVLINK_CMD_SET                           = 0x2
+	DEVLINK_CMD_NEW                           = 0x3
+	DEVLINK_CMD_DEL                           = 0x4
+	DEVLINK_CMD_PORT_GET                      = 0x5
+	DEVLINK_CMD_PORT_SET                      = 0x6
+	DEVLINK_CMD_PORT_NEW                      = 0x7
+	DEVLINK_CMD_PORT_DEL                      = 0x8
+	DEVLINK_CMD_PORT_SPLIT                    = 0x9
+	DEVLINK_CMD_PORT_UNSPLIT                  = 0xa
+	DEVLINK_CMD_SB_GET                        = 0xb
+	DEVLINK_CMD_SB_SET                        = 0xc
+	DEVLINK_CMD_SB_NEW                        = 0xd
+	DEVLINK_CMD_SB_DEL                        = 0xe
+	DEVLINK_CMD_SB_POOL_GET                   = 0xf
+	DEVLINK_CMD_SB_POOL_SET                   = 0x10
+	DEVLINK_CMD_SB_POOL_NEW                   = 0x11
+	DEVLINK_CMD_SB_POOL_DEL                   = 0x12
+	DEVLINK_CMD_SB_PORT_POOL_GET              = 0x13
+	DEVLINK_CMD_SB_PORT_POOL_SET              = 0x14
+	DEVLINK_CMD_SB_PORT_POOL_NEW              = 0x15
+	DEVLINK_CMD_SB_PORT_POOL_DEL              = 0x16
+	DEVLINK_CMD_SB_TC_POOL_BIND_GET           = 0x17
+	DEVLINK_CMD_SB_TC_POOL_BIND_SET           = 0x18
+	DEVLINK_CMD_SB_TC_POOL_BIND_NEW           = 0x19
+	DEVLINK_CMD_SB_TC_POOL_BIND_DEL           = 0x1a
+	DEVLINK_CMD_SB_OCC_SNAPSHOT               = 0x1b
+	DEVLINK_CMD_SB_OCC_MAX_CLEAR              = 0x1c
+	DEVLINK_CMD_ESWITCH_GET                   = 0x1d
+	DEVLINK_CMD_ESWITCH_SET                   = 0x1e
+	DEVLINK_CMD_DPIPE_TABLE_GET               = 0x1f
+	DEVLINK_CMD_DPIPE_ENTRIES_GET             = 0x20
+	DEVLINK_CMD_DPIPE_HEADERS_GET             = 0x21
+	DEVLINK_CMD_DPIPE_TABLE_COUNTERS_SET      = 0x22
+	DEVLINK_CMD_MAX                           = 0x48
+	DEVLINK_PORT_TYPE_NOTSET                  = 0x0
+	DEVLINK_PORT_TYPE_AUTO                    = 0x1
+	DEVLINK_PORT_TYPE_ETH                     = 0x2
+	DEVLINK_PORT_TYPE_IB                      = 0x3
+	DEVLINK_SB_POOL_TYPE_INGRESS              = 0x0
+	DEVLINK_SB_POOL_TYPE_EGRESS               = 0x1
+	DEVLINK_SB_THRESHOLD_TYPE_STATIC          = 0x0
+	DEVLINK_SB_THRESHOLD_TYPE_DYNAMIC         = 0x1
+	DEVLINK_ESWITCH_MODE_LEGACY               = 0x0
+	DEVLINK_ESWITCH_MODE_SWITCHDEV            = 0x1
+	DEVLINK_ESWITCH_INLINE_MODE_NONE          = 0x0
+	DEVLINK_ESWITCH_INLINE_MODE_LINK          = 0x1
+	DEVLINK_ESWITCH_INLINE_MODE_NETWORK       = 0x2
+	DEVLINK_ESWITCH_INLINE_MODE_TRANSPORT     = 0x3
+	DEVLINK_ESWITCH_ENCAP_MODE_NONE           = 0x0
+	DEVLINK_ESWITCH_ENCAP_MODE_BASIC          = 0x1
+	DEVLINK_ATTR_UNSPEC                       = 0x0
+	DEVLINK_ATTR_BUS_NAME                     = 0x1
+	DEVLINK_ATTR_DEV_NAME                     = 0x2
+	DEVLINK_ATTR_PORT_INDEX                   = 0x3
+	DEVLINK_ATTR_PORT_TYPE                    = 0x4
+	DEVLINK_ATTR_PORT_DESIRED_TYPE            = 0x5
+	DEVLINK_ATTR_PORT_NETDEV_IFINDEX          = 0x6
+	DEVLINK_ATTR_PORT_NETDEV_NAME             = 0x7
+	DEVLINK_ATTR_PORT_IBDEV_NAME              = 0x8
+	DEVLINK_ATTR_PORT_SPLIT_COUNT             = 0x9
+	DEVLINK_ATTR_PORT_SPLIT_GROUP             = 0xa
+	DEVLINK_ATTR_SB_INDEX                     = 0xb
+	DEVLINK_ATTR_SB_SIZE                      = 0xc
+	DEVLINK_ATTR_SB_INGRESS_POOL_COUNT        = 0xd
+	DEVLINK_ATTR_SB_EGRESS_POOL_COUNT         = 0xe
+	DEVLINK_ATTR_SB_INGRESS_TC_COUNT          = 0xf
+	DEVLINK_ATTR_SB_EGRESS_TC_COUNT           = 0x10
+	DEVLINK_ATTR_SB_POOL_INDEX                = 0x11
+	DEVLINK_ATTR_SB_POOL_TYPE                 = 0x12
+	DEVLINK_ATTR_SB_POOL_SIZE                 = 0x13
+	DEVLINK_ATTR_SB_POOL_THRESHOLD_TYPE       = 0x14
+	DEVLINK_ATTR_SB_THRESHOLD                 = 0x15
+	DEVLINK_ATTR_SB_TC_INDEX                  = 0x16
+	DEVLINK_ATTR_SB_OCC_CUR                   = 0x17
+	DEVLINK_ATTR_SB_OCC_MAX                   = 0x18
+	DEVLINK_ATTR_ESWITCH_MODE                 = 0x19
+	DEVLINK_ATTR_ESWITCH_INLINE_MODE          = 0x1a
+	DEVLINK_ATTR_DPIPE_TABLES                 = 0x1b
+	DEVLINK_ATTR_DPIPE_TABLE                  = 0x1c
+	DEVLINK_ATTR_DPIPE_TABLE_NAME             = 0x1d
+	DEVLINK_ATTR_DPIPE_TABLE_SIZE             = 0x1e
+	DEVLINK_ATTR_DPIPE_TABLE_MATCHES          = 0x1f
+	DEVLINK_ATTR_DPIPE_TABLE_ACTIONS          = 0x20
+	DEVLINK_ATTR_DPIPE_TABLE_COUNTERS_ENABLED = 0x21
+	DEVLINK_ATTR_DPIPE_ENTRIES                = 0x22
+	DEVLINK_ATTR_DPIPE_ENTRY                  = 0x23
+	DEVLINK_ATTR_DPIPE_ENTRY_INDEX            = 0x24
+	DEVLINK_ATTR_DPIPE_ENTRY_MATCH_VALUES     = 0x25
+	DEVLINK_ATTR_DPIPE_ENTRY_ACTION_VALUES    = 0x26
+	DEVLINK_ATTR_DPIPE_ENTRY_COUNTER          = 0x27
+	DEVLINK_ATTR_DPIPE_MATCH                  = 0x28
+	DEVLINK_ATTR_DPIPE_MATCH_VALUE            = 0x29
+	DEVLINK_ATTR_DPIPE_MATCH_TYPE             = 0x2a
+	DEVLINK_ATTR_DPIPE_ACTION                 = 0x2b
+	DEVLINK_ATTR_DPIPE_ACTION_VALUE           = 0x2c
+	DEVLINK_ATTR_DPIPE_ACTION_TYPE            = 0x2d
+	DEVLINK_ATTR_DPIPE_VALUE                  = 0x2e
+	DEVLINK_ATTR_DPIPE_VALUE_MASK             = 0x2f
+	DEVLINK_ATTR_DPIPE_VALUE_MAPPING          = 0x30
+	DEVLINK_ATTR_DPIPE_HEADERS                = 0x31
+	DEVLINK_ATTR_DPIPE_HEADER                 = 0x32
+	DEVLINK_ATTR_DPIPE_HEADER_NAME            = 0x33
+	DEVLINK_ATTR_DPIPE_HEADER_ID              = 0x34
+	DEVLINK_ATTR_DPIPE_HEADER_FIELDS          = 0x35
+	DEVLINK_ATTR_DPIPE_HEADER_GLOBAL          = 0x36
+	DEVLINK_ATTR_DPIPE_HEADER_INDEX           = 0x37
+	DEVLINK_ATTR_DPIPE_FIELD                  = 0x38
+	DEVLINK_ATTR_DPIPE_FIELD_NAME             = 0x39
+	DEVLINK_ATTR_DPIPE_FIELD_ID               = 0x3a
+	DEVLINK_ATTR_DPIPE_FIELD_BITWIDTH         = 0x3b
+	DEVLINK_ATTR_DPIPE_FIELD_MAPPING_TYPE     = 0x3c
+	DEVLINK_ATTR_PAD                          = 0x3d
+	DEVLINK_ATTR_ESWITCH_ENCAP_MODE           = 0x3e
+	DEVLINK_ATTR_MAX                          = 0x90
+	DEVLINK_DPIPE_FIELD_MAPPING_TYPE_NONE     = 0x0
+	DEVLINK_DPIPE_FIELD_MAPPING_TYPE_IFINDEX  = 0x1
+	DEVLINK_DPIPE_MATCH_TYPE_FIELD_EXACT      = 0x0
+	DEVLINK_DPIPE_ACTION_TYPE_FIELD_MODIFY    = 0x0
+	DEVLINK_DPIPE_FIELD_ETHERNET_DST_MAC      = 0x0
+	DEVLINK_DPIPE_FIELD_IPV4_DST_IP           = 0x0
+	DEVLINK_DPIPE_FIELD_IPV6_DST_IP           = 0x0
+	DEVLINK_DPIPE_HEADER_ETHERNET             = 0x0
+	DEVLINK_DPIPE_HEADER_IPV4                 = 0x1
+	DEVLINK_DPIPE_HEADER_IPV6                 = 0x2
+)
+
+type FsverityDigest struct {
+	Algorithm uint16
+	Size      uint16
+}
+
+type FsverityEnableArg struct {
+	Version        uint32
+	Hash_algorithm uint32
+	Block_size     uint32
+	Salt_size      uint32
+	Salt_ptr       uint64
+	Sig_size       uint32
+	_              uint32
+	Sig_ptr        uint64
+	_              [11]uint64
+}
+
+type Nhmsg struct {
+	Family   uint8
+	Scope    uint8
+	Protocol uint8
+	Resvd    uint8
+	Flags    uint32
+}
+
+type NexthopGrp struct {
+	Id     uint32
+	Weight uint8
+	Resvd1 uint8
+	Resvd2 uint16
+}
+
+const (
+	NHA_UNSPEC     = 0x0
+	NHA_ID         = 0x1
+	NHA_GROUP      = 0x2
+	NHA_GROUP_TYPE = 0x3
+	NHA_BLACKHOLE  = 0x4
+	NHA_OIF        = 0x5
+	NHA_GATEWAY    = 0x6
+	NHA_ENCAP_TYPE = 0x7
+	NHA_ENCAP      = 0x8
+	NHA_GROUPS     = 0x9
+	NHA_MASTER     = 0xa
+)
+
+const (
+	CAN_RAW_FILTER        = 0x1
+	CAN_RAW_ERR_FILTER    = 0x2
+	CAN_RAW_LOOPBACK      = 0x3
+	CAN_RAW_RECV_OWN_MSGS = 0x4
+	CAN_RAW_FD_FRAMES     = 0x5
+	CAN_RAW_JOIN_FILTERS  = 0x6
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_386.go
new file mode 100644
index 000000000..73509d896
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_386.go
@@ -0,0 +1,604 @@
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include -m32 linux/types.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build 386,linux
+
+package unix
+
+const (
+	SizeofPtr  = 0x4
+	SizeofLong = 0x4
+)
+
+type (
+	_C_long int32
+)
+
+type Timespec struct {
+	Sec  int32
+	Nsec int32
+}
+
+type Timeval struct {
+	Sec  int32
+	Usec int32
+}
+
+type Timex struct {
+	Modes     uint32
+	Offset    int32
+	Freq      int32
+	Maxerror  int32
+	Esterror  int32
+	Status    int32
+	Constant  int32
+	Precision int32
+	Tolerance int32
+	Time      Timeval
+	Tick      int32
+	Ppsfreq   int32
+	Jitter    int32
+	Shift     int32
+	Stabil    int32
+	Jitcnt    int32
+	Calcnt    int32
+	Errcnt    int32
+	Stbcnt    int32
+	Tai       int32
+	_         [44]byte
+}
+
+type Time_t int32
+
+type Tms struct {
+	Utime  int32
+	Stime  int32
+	Cutime int32
+	Cstime int32
+}
+
+type Utimbuf struct {
+	Actime  int32
+	Modtime int32
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int32
+	Ixrss    int32
+	Idrss    int32
+	Isrss    int32
+	Minflt   int32
+	Majflt   int32
+	Nswap    int32
+	Inblock  int32
+	Oublock  int32
+	Msgsnd   int32
+	Msgrcv   int32
+	Nsignals int32
+	Nvcsw    int32
+	Nivcsw   int32
+}
+
+type Stat_t struct {
+	Dev     uint64
+	_       uint16
+	_       uint32
+	Mode    uint32
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	Rdev    uint64
+	_       uint16
+	Size    int64
+	Blksize int32
+	Blocks  int64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Ino     uint64
+}
+
+type Dirent struct {
+	Ino    uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Name   [256]int8
+	_      [1]byte
+}
+
+type Flock_t struct {
+	Type   int16
+	Whence int16
+	Start  int64
+	Len    int64
+	Pid    int32
+}
+
+type DmNameList struct {
+	Dev  uint64
+	Next uint32
+}
+
+const (
+	FADV_DONTNEED = 0x4
+	FADV_NOREUSE  = 0x5
+)
+
+type RawSockaddr struct {
+	Family uint16
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [96]int8
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+const (
+	SizeofIovec   = 0x8
+	SizeofMsghdr  = 0x1c
+	SizeofCmsghdr = 0xc
+)
+
+const (
+	SizeofSockFprog = 0x8
+)
+
+type PtraceRegs struct {
+	Ebx      int32
+	Ecx      int32
+	Edx      int32
+	Esi      int32
+	Edi      int32
+	Ebp      int32
+	Eax      int32
+	Xds      int32
+	Xes      int32
+	Xfs      int32
+	Xgs      int32
+	Orig_eax int32
+	Eip      int32
+	Xcs      int32
+	Eflags   int32
+	Esp      int32
+	Xss      int32
+}
+
+type FdSet struct {
+	Bits [32]int32
+}
+
+type Sysinfo_t struct {
+	Uptime    int32
+	Loads     [3]uint32
+	Totalram  uint32
+	Freeram   uint32
+	Sharedram uint32
+	Bufferram uint32
+	Totalswap uint32
+	Freeswap  uint32
+	Procs     uint16
+	Pad       uint16
+	Totalhigh uint32
+	Freehigh  uint32
+	Unit      uint32
+	_         [8]int8
+}
+
+type Ustat_t struct {
+	Tfree  int32
+	Tinode uint32
+	Fname  [6]int8
+	Fpack  [6]int8
+}
+
+type EpollEvent struct {
+	Events uint32
+	Fd     int32
+	Pad    int32
+}
+
+const (
+	POLLRDHUP = 0x2000
+)
+
+type Sigset_t struct {
+	Val [32]uint32
+}
+
+const _C__NSIG = 0x41
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Line   uint8
+	Cc     [19]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Taskstats struct {
+	Version                   uint16
+	Ac_exitcode               uint32
+	Ac_flag                   uint8
+	Ac_nice                   uint8
+	_                         [4]byte
+	Cpu_count                 uint64
+	Cpu_delay_total           uint64
+	Blkio_count               uint64
+	Blkio_delay_total         uint64
+	Swapin_count              uint64
+	Swapin_delay_total        uint64
+	Cpu_run_real_total        uint64
+	Cpu_run_virtual_total     uint64
+	Ac_comm                   [32]int8
+	Ac_sched                  uint8
+	Ac_pad                    [3]uint8
+	_                         [4]byte
+	Ac_uid                    uint32
+	Ac_gid                    uint32
+	Ac_pid                    uint32
+	Ac_ppid                   uint32
+	Ac_btime                  uint32
+	_                         [4]byte
+	Ac_etime                  uint64
+	Ac_utime                  uint64
+	Ac_stime                  uint64
+	Ac_minflt                 uint64
+	Ac_majflt                 uint64
+	Coremem                   uint64
+	Virtmem                   uint64
+	Hiwater_rss               uint64
+	Hiwater_vm                uint64
+	Read_char                 uint64
+	Write_char                uint64
+	Read_syscalls             uint64
+	Write_syscalls            uint64
+	Read_bytes                uint64
+	Write_bytes               uint64
+	Cancelled_write_bytes     uint64
+	Nvcsw                     uint64
+	Nivcsw                    uint64
+	Ac_utimescaled            uint64
+	Ac_stimescaled            uint64
+	Cpu_scaled_run_real_total uint64
+	Freepages_count           uint64
+	Freepages_delay_total     uint64
+	Thrashing_count           uint64
+	Thrashing_delay_total     uint64
+	Ac_btime64                uint64
+}
+
+type cpuMask uint32
+
+const (
+	_NCPUBITS = 0x20
+)
+
+const (
+	CBitFieldMaskBit0  = 0x1
+	CBitFieldMaskBit1  = 0x2
+	CBitFieldMaskBit2  = 0x4
+	CBitFieldMaskBit3  = 0x8
+	CBitFieldMaskBit4  = 0x10
+	CBitFieldMaskBit5  = 0x20
+	CBitFieldMaskBit6  = 0x40
+	CBitFieldMaskBit7  = 0x80
+	CBitFieldMaskBit8  = 0x100
+	CBitFieldMaskBit9  = 0x200
+	CBitFieldMaskBit10 = 0x400
+	CBitFieldMaskBit11 = 0x800
+	CBitFieldMaskBit12 = 0x1000
+	CBitFieldMaskBit13 = 0x2000
+	CBitFieldMaskBit14 = 0x4000
+	CBitFieldMaskBit15 = 0x8000
+	CBitFieldMaskBit16 = 0x10000
+	CBitFieldMaskBit17 = 0x20000
+	CBitFieldMaskBit18 = 0x40000
+	CBitFieldMaskBit19 = 0x80000
+	CBitFieldMaskBit20 = 0x100000
+	CBitFieldMaskBit21 = 0x200000
+	CBitFieldMaskBit22 = 0x400000
+	CBitFieldMaskBit23 = 0x800000
+	CBitFieldMaskBit24 = 0x1000000
+	CBitFieldMaskBit25 = 0x2000000
+	CBitFieldMaskBit26 = 0x4000000
+	CBitFieldMaskBit27 = 0x8000000
+	CBitFieldMaskBit28 = 0x10000000
+	CBitFieldMaskBit29 = 0x20000000
+	CBitFieldMaskBit30 = 0x40000000
+	CBitFieldMaskBit31 = 0x80000000
+	CBitFieldMaskBit32 = 0x100000000
+	CBitFieldMaskBit33 = 0x200000000
+	CBitFieldMaskBit34 = 0x400000000
+	CBitFieldMaskBit35 = 0x800000000
+	CBitFieldMaskBit36 = 0x1000000000
+	CBitFieldMaskBit37 = 0x2000000000
+	CBitFieldMaskBit38 = 0x4000000000
+	CBitFieldMaskBit39 = 0x8000000000
+	CBitFieldMaskBit40 = 0x10000000000
+	CBitFieldMaskBit41 = 0x20000000000
+	CBitFieldMaskBit42 = 0x40000000000
+	CBitFieldMaskBit43 = 0x80000000000
+	CBitFieldMaskBit44 = 0x100000000000
+	CBitFieldMaskBit45 = 0x200000000000
+	CBitFieldMaskBit46 = 0x400000000000
+	CBitFieldMaskBit47 = 0x800000000000
+	CBitFieldMaskBit48 = 0x1000000000000
+	CBitFieldMaskBit49 = 0x2000000000000
+	CBitFieldMaskBit50 = 0x4000000000000
+	CBitFieldMaskBit51 = 0x8000000000000
+	CBitFieldMaskBit52 = 0x10000000000000
+	CBitFieldMaskBit53 = 0x20000000000000
+	CBitFieldMaskBit54 = 0x40000000000000
+	CBitFieldMaskBit55 = 0x80000000000000
+	CBitFieldMaskBit56 = 0x100000000000000
+	CBitFieldMaskBit57 = 0x200000000000000
+	CBitFieldMaskBit58 = 0x400000000000000
+	CBitFieldMaskBit59 = 0x800000000000000
+	CBitFieldMaskBit60 = 0x1000000000000000
+	CBitFieldMaskBit61 = 0x2000000000000000
+	CBitFieldMaskBit62 = 0x4000000000000000
+	CBitFieldMaskBit63 = 0x8000000000000000
+)
+
+type SockaddrStorage struct {
+	Family uint16
+	_      [122]int8
+	_      uint32
+}
+
+type HDGeometry struct {
+	Heads     uint8
+	Sectors   uint8
+	Cylinders uint16
+	Start     uint32
+}
+
+type Statfs_t struct {
+	Type    int32
+	Bsize   int32
+	Blocks  uint64
+	Bfree   uint64
+	Bavail  uint64
+	Files   uint64
+	Ffree   uint64
+	Fsid    Fsid
+	Namelen int32
+	Frsize  int32
+	Flags   int32
+	Spare   [4]int32
+}
+
+type TpacketHdr struct {
+	Status  uint32
+	Len     uint32
+	Snaplen uint32
+	Mac     uint16
+	Net     uint16
+	Sec     uint32
+	Usec    uint32
+}
+
+const (
+	SizeofTpacketHdr = 0x18
+)
+
+type RTCPLLInfo struct {
+	Ctrl    int32
+	Value   int32
+	Max     int32
+	Min     int32
+	Posmult int32
+	Negmult int32
+	Clock   int32
+}
+
+type BlkpgPartition struct {
+	Start   int64
+	Length  int64
+	Pno     int32
+	Devname [64]uint8
+	Volname [64]uint8
+}
+
+const (
+	BLKPG = 0x1269
+)
+
+type XDPUmemReg struct {
+	Addr     uint64
+	Len      uint64
+	Size     uint32
+	Headroom uint32
+	Flags    uint32
+}
+
+type CryptoUserAlg struct {
+	Name        [64]int8
+	Driver_name [64]int8
+	Module_name [64]int8
+	Type        uint32
+	Mask        uint32
+	Refcnt      uint32
+	Flags       uint32
+}
+
+type CryptoStatAEAD struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatAKCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Verify_cnt   uint64
+	Sign_cnt     uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCompress struct {
+	Type            [64]int8
+	Compress_cnt    uint64
+	Compress_tlen   uint64
+	Decompress_cnt  uint64
+	Decompress_tlen uint64
+	Err_cnt         uint64
+}
+
+type CryptoStatHash struct {
+	Type      [64]int8
+	Hash_cnt  uint64
+	Hash_tlen uint64
+	Err_cnt   uint64
+}
+
+type CryptoStatKPP struct {
+	Type                      [64]int8
+	Setsecret_cnt             uint64
+	Generate_public_key_cnt   uint64
+	Compute_shared_secret_cnt uint64
+	Err_cnt                   uint64
+}
+
+type CryptoStatRNG struct {
+	Type          [64]int8
+	Generate_cnt  uint64
+	Generate_tlen uint64
+	Seed_cnt      uint64
+	Err_cnt       uint64
+}
+
+type CryptoStatLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportHash struct {
+	Type       [64]int8
+	Blocksize  uint32
+	Digestsize uint32
+}
+
+type CryptoReportCipher struct {
+	Type        [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+}
+
+type CryptoReportBlkCipher struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportAEAD struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Maxauthsize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportComp struct {
+	Type [64]int8
+}
+
+type CryptoReportRNG struct {
+	Type     [64]int8
+	Seedsize uint32
+}
+
+type CryptoReportAKCipher struct {
+	Type [64]int8
+}
+
+type CryptoReportKPP struct {
+	Type [64]int8
+}
+
+type CryptoReportAcomp struct {
+	Type [64]int8
+}
+
+type LoopInfo struct {
+	Number           int32
+	Device           uint16
+	Inode            uint32
+	Rdevice          uint16
+	Offset           int32
+	Encrypt_type     int32
+	Encrypt_key_size int32
+	Flags            int32
+	Name             [64]int8
+	Encrypt_key      [32]uint8
+	Init             [2]uint32
+	Reserved         [4]int8
+}
+
+type TIPCSubscr struct {
+	Seq     TIPCServiceRange
+	Timeout uint32
+	Filter  uint32
+	Handle  [8]int8
+}
+
+type TIPCSIOCLNReq struct {
+	Peer     uint32
+	Id       uint32
+	Linkname [68]int8
+}
+
+type TIPCSIOCNodeIDReq struct {
+	Peer uint32
+	Id   [16]int8
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_amd64.go
new file mode 100644
index 000000000..45eb8738b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_amd64.go
@@ -0,0 +1,621 @@
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include -m64 linux/types.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,linux
+
+package unix
+
+const (
+	SizeofPtr  = 0x8
+	SizeofLong = 0x8
+)
+
+type (
+	_C_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Timex struct {
+	Modes     uint32
+	Offset    int64
+	Freq      int64
+	Maxerror  int64
+	Esterror  int64
+	Status    int32
+	Constant  int64
+	Precision int64
+	Tolerance int64
+	Time      Timeval
+	Tick      int64
+	Ppsfreq   int64
+	Jitter    int64
+	Shift     int32
+	Stabil    int64
+	Jitcnt    int64
+	Calcnt    int64
+	Errcnt    int64
+	Stbcnt    int64
+	Tai       int32
+	_         [44]byte
+}
+
+type Time_t int64
+
+type Tms struct {
+	Utime  int64
+	Stime  int64
+	Cutime int64
+	Cstime int64
+}
+
+type Utimbuf struct {
+	Actime  int64
+	Modtime int64
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Stat_t struct {
+	Dev     uint64
+	Ino     uint64
+	Nlink   uint64
+	Mode    uint32
+	Uid     uint32
+	Gid     uint32
+	_       int32
+	Rdev    uint64
+	Size    int64
+	Blksize int64
+	Blocks  int64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	_       [3]int64
+}
+
+type Dirent struct {
+	Ino    uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Name   [256]int8
+	_      [5]byte
+}
+
+type Flock_t struct {
+	Type   int16
+	Whence int16
+	Start  int64
+	Len    int64
+	Pid    int32
+	_      [4]byte
+}
+
+type DmNameList struct {
+	Dev  uint64
+	Next uint32
+	Name [0]byte
+	_    [4]byte
+}
+
+const (
+	FADV_DONTNEED = 0x4
+	FADV_NOREUSE  = 0x5
+)
+
+type RawSockaddr struct {
+	Family uint16
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [96]int8
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	_          [4]byte
+}
+
+type Cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+const (
+	SizeofIovec   = 0x10
+	SizeofMsghdr  = 0x38
+	SizeofCmsghdr = 0x10
+)
+
+const (
+	SizeofSockFprog = 0x10
+)
+
+type PtraceRegs struct {
+	R15      uint64
+	R14      uint64
+	R13      uint64
+	R12      uint64
+	Rbp      uint64
+	Rbx      uint64
+	R11      uint64
+	R10      uint64
+	R9       uint64
+	R8       uint64
+	Rax      uint64
+	Rcx      uint64
+	Rdx      uint64
+	Rsi      uint64
+	Rdi      uint64
+	Orig_rax uint64
+	Rip      uint64
+	Cs       uint64
+	Eflags   uint64
+	Rsp      uint64
+	Ss       uint64
+	Fs_base  uint64
+	Gs_base  uint64
+	Ds       uint64
+	Es       uint64
+	Fs       uint64
+	Gs       uint64
+}
+
+type FdSet struct {
+	Bits [16]int64
+}
+
+type Sysinfo_t struct {
+	Uptime    int64
+	Loads     [3]uint64
+	Totalram  uint64
+	Freeram   uint64
+	Sharedram uint64
+	Bufferram uint64
+	Totalswap uint64
+	Freeswap  uint64
+	Procs     uint16
+	Pad       uint16
+	Totalhigh uint64
+	Freehigh  uint64
+	Unit      uint32
+	_         [0]int8
+	_         [4]byte
+}
+
+type Ustat_t struct {
+	Tfree  int32
+	Tinode uint64
+	Fname  [6]int8
+	Fpack  [6]int8
+	_      [4]byte
+}
+
+type EpollEvent struct {
+	Events uint32
+	Fd     int32
+	Pad    int32
+}
+
+const (
+	POLLRDHUP = 0x2000
+)
+
+type Sigset_t struct {
+	Val [16]uint64
+}
+
+const _C__NSIG = 0x41
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Line   uint8
+	Cc     [19]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Taskstats struct {
+	Version                   uint16
+	Ac_exitcode               uint32
+	Ac_flag                   uint8
+	Ac_nice                   uint8
+	Cpu_count                 uint64
+	Cpu_delay_total           uint64
+	Blkio_count               uint64
+	Blkio_delay_total         uint64
+	Swapin_count              uint64
+	Swapin_delay_total        uint64
+	Cpu_run_real_total        uint64
+	Cpu_run_virtual_total     uint64
+	Ac_comm                   [32]int8
+	Ac_sched                  uint8
+	Ac_pad                    [3]uint8
+	_                         [4]byte
+	Ac_uid                    uint32
+	Ac_gid                    uint32
+	Ac_pid                    uint32
+	Ac_ppid                   uint32
+	Ac_btime                  uint32
+	Ac_etime                  uint64
+	Ac_utime                  uint64
+	Ac_stime                  uint64
+	Ac_minflt                 uint64
+	Ac_majflt                 uint64
+	Coremem                   uint64
+	Virtmem                   uint64
+	Hiwater_rss               uint64
+	Hiwater_vm                uint64
+	Read_char                 uint64
+	Write_char                uint64
+	Read_syscalls             uint64
+	Write_syscalls            uint64
+	Read_bytes                uint64
+	Write_bytes               uint64
+	Cancelled_write_bytes     uint64
+	Nvcsw                     uint64
+	Nivcsw                    uint64
+	Ac_utimescaled            uint64
+	Ac_stimescaled            uint64
+	Cpu_scaled_run_real_total uint64
+	Freepages_count           uint64
+	Freepages_delay_total     uint64
+	Thrashing_count           uint64
+	Thrashing_delay_total     uint64
+	Ac_btime64                uint64
+}
+
+type cpuMask uint64
+
+const (
+	_NCPUBITS = 0x40
+)
+
+const (
+	CBitFieldMaskBit0  = 0x1
+	CBitFieldMaskBit1  = 0x2
+	CBitFieldMaskBit2  = 0x4
+	CBitFieldMaskBit3  = 0x8
+	CBitFieldMaskBit4  = 0x10
+	CBitFieldMaskBit5  = 0x20
+	CBitFieldMaskBit6  = 0x40
+	CBitFieldMaskBit7  = 0x80
+	CBitFieldMaskBit8  = 0x100
+	CBitFieldMaskBit9  = 0x200
+	CBitFieldMaskBit10 = 0x400
+	CBitFieldMaskBit11 = 0x800
+	CBitFieldMaskBit12 = 0x1000
+	CBitFieldMaskBit13 = 0x2000
+	CBitFieldMaskBit14 = 0x4000
+	CBitFieldMaskBit15 = 0x8000
+	CBitFieldMaskBit16 = 0x10000
+	CBitFieldMaskBit17 = 0x20000
+	CBitFieldMaskBit18 = 0x40000
+	CBitFieldMaskBit19 = 0x80000
+	CBitFieldMaskBit20 = 0x100000
+	CBitFieldMaskBit21 = 0x200000
+	CBitFieldMaskBit22 = 0x400000
+	CBitFieldMaskBit23 = 0x800000
+	CBitFieldMaskBit24 = 0x1000000
+	CBitFieldMaskBit25 = 0x2000000
+	CBitFieldMaskBit26 = 0x4000000
+	CBitFieldMaskBit27 = 0x8000000
+	CBitFieldMaskBit28 = 0x10000000
+	CBitFieldMaskBit29 = 0x20000000
+	CBitFieldMaskBit30 = 0x40000000
+	CBitFieldMaskBit31 = 0x80000000
+	CBitFieldMaskBit32 = 0x100000000
+	CBitFieldMaskBit33 = 0x200000000
+	CBitFieldMaskBit34 = 0x400000000
+	CBitFieldMaskBit35 = 0x800000000
+	CBitFieldMaskBit36 = 0x1000000000
+	CBitFieldMaskBit37 = 0x2000000000
+	CBitFieldMaskBit38 = 0x4000000000
+	CBitFieldMaskBit39 = 0x8000000000
+	CBitFieldMaskBit40 = 0x10000000000
+	CBitFieldMaskBit41 = 0x20000000000
+	CBitFieldMaskBit42 = 0x40000000000
+	CBitFieldMaskBit43 = 0x80000000000
+	CBitFieldMaskBit44 = 0x100000000000
+	CBitFieldMaskBit45 = 0x200000000000
+	CBitFieldMaskBit46 = 0x400000000000
+	CBitFieldMaskBit47 = 0x800000000000
+	CBitFieldMaskBit48 = 0x1000000000000
+	CBitFieldMaskBit49 = 0x2000000000000
+	CBitFieldMaskBit50 = 0x4000000000000
+	CBitFieldMaskBit51 = 0x8000000000000
+	CBitFieldMaskBit52 = 0x10000000000000
+	CBitFieldMaskBit53 = 0x20000000000000
+	CBitFieldMaskBit54 = 0x40000000000000
+	CBitFieldMaskBit55 = 0x80000000000000
+	CBitFieldMaskBit56 = 0x100000000000000
+	CBitFieldMaskBit57 = 0x200000000000000
+	CBitFieldMaskBit58 = 0x400000000000000
+	CBitFieldMaskBit59 = 0x800000000000000
+	CBitFieldMaskBit60 = 0x1000000000000000
+	CBitFieldMaskBit61 = 0x2000000000000000
+	CBitFieldMaskBit62 = 0x4000000000000000
+	CBitFieldMaskBit63 = 0x8000000000000000
+)
+
+type SockaddrStorage struct {
+	Family uint16
+	_      [118]int8
+	_      uint64
+}
+
+type HDGeometry struct {
+	Heads     uint8
+	Sectors   uint8
+	Cylinders uint16
+	Start     uint64
+}
+
+type Statfs_t struct {
+	Type    int64
+	Bsize   int64
+	Blocks  uint64
+	Bfree   uint64
+	Bavail  uint64
+	Files   uint64
+	Ffree   uint64
+	Fsid    Fsid
+	Namelen int64
+	Frsize  int64
+	Flags   int64
+	Spare   [4]int64
+}
+
+type TpacketHdr struct {
+	Status  uint64
+	Len     uint32
+	Snaplen uint32
+	Mac     uint16
+	Net     uint16
+	Sec     uint32
+	Usec    uint32
+	_       [4]byte
+}
+
+const (
+	SizeofTpacketHdr = 0x20
+)
+
+type RTCPLLInfo struct {
+	Ctrl    int32
+	Value   int32
+	Max     int32
+	Min     int32
+	Posmult int32
+	Negmult int32
+	Clock   int64
+}
+
+type BlkpgPartition struct {
+	Start   int64
+	Length  int64
+	Pno     int32
+	Devname [64]uint8
+	Volname [64]uint8
+	_       [4]byte
+}
+
+const (
+	BLKPG = 0x1269
+)
+
+type XDPUmemReg struct {
+	Addr     uint64
+	Len      uint64
+	Size     uint32
+	Headroom uint32
+	Flags    uint32
+	_        [4]byte
+}
+
+type CryptoUserAlg struct {
+	Name        [64]int8
+	Driver_name [64]int8
+	Module_name [64]int8
+	Type        uint32
+	Mask        uint32
+	Refcnt      uint32
+	Flags       uint32
+}
+
+type CryptoStatAEAD struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatAKCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Verify_cnt   uint64
+	Sign_cnt     uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCompress struct {
+	Type            [64]int8
+	Compress_cnt    uint64
+	Compress_tlen   uint64
+	Decompress_cnt  uint64
+	Decompress_tlen uint64
+	Err_cnt         uint64
+}
+
+type CryptoStatHash struct {
+	Type      [64]int8
+	Hash_cnt  uint64
+	Hash_tlen uint64
+	Err_cnt   uint64
+}
+
+type CryptoStatKPP struct {
+	Type                      [64]int8
+	Setsecret_cnt             uint64
+	Generate_public_key_cnt   uint64
+	Compute_shared_secret_cnt uint64
+	Err_cnt                   uint64
+}
+
+type CryptoStatRNG struct {
+	Type          [64]int8
+	Generate_cnt  uint64
+	Generate_tlen uint64
+	Seed_cnt      uint64
+	Err_cnt       uint64
+}
+
+type CryptoStatLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportHash struct {
+	Type       [64]int8
+	Blocksize  uint32
+	Digestsize uint32
+}
+
+type CryptoReportCipher struct {
+	Type        [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+}
+
+type CryptoReportBlkCipher struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportAEAD struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Maxauthsize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportComp struct {
+	Type [64]int8
+}
+
+type CryptoReportRNG struct {
+	Type     [64]int8
+	Seedsize uint32
+}
+
+type CryptoReportAKCipher struct {
+	Type [64]int8
+}
+
+type CryptoReportKPP struct {
+	Type [64]int8
+}
+
+type CryptoReportAcomp struct {
+	Type [64]int8
+}
+
+type LoopInfo struct {
+	Number           int32
+	Device           uint64
+	Inode            uint64
+	Rdevice          uint64
+	Offset           int32
+	Encrypt_type     int32
+	Encrypt_key_size int32
+	Flags            int32
+	Name             [64]int8
+	Encrypt_key      [32]uint8
+	Init             [2]uint64
+	Reserved         [4]int8
+	_                [4]byte
+}
+
+type TIPCSubscr struct {
+	Seq     TIPCServiceRange
+	Timeout uint32
+	Filter  uint32
+	Handle  [8]int8
+}
+
+type TIPCSIOCLNReq struct {
+	Peer     uint32
+	Id       uint32
+	Linkname [68]int8
+}
+
+type TIPCSIOCNodeIDReq struct {
+	Peer uint32
+	Id   [16]int8
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_arm.go
new file mode 100644
index 000000000..8f6b453ab
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_arm.go
@@ -0,0 +1,598 @@
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include linux/types.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm,linux
+
+package unix
+
+const (
+	SizeofPtr  = 0x4
+	SizeofLong = 0x4
+)
+
+type (
+	_C_long int32
+)
+
+type Timespec struct {
+	Sec  int32
+	Nsec int32
+}
+
+type Timeval struct {
+	Sec  int32
+	Usec int32
+}
+
+type Timex struct {
+	Modes     uint32
+	Offset    int32
+	Freq      int32
+	Maxerror  int32
+	Esterror  int32
+	Status    int32
+	Constant  int32
+	Precision int32
+	Tolerance int32
+	Time      Timeval
+	Tick      int32
+	Ppsfreq   int32
+	Jitter    int32
+	Shift     int32
+	Stabil    int32
+	Jitcnt    int32
+	Calcnt    int32
+	Errcnt    int32
+	Stbcnt    int32
+	Tai       int32
+	_         [44]byte
+}
+
+type Time_t int32
+
+type Tms struct {
+	Utime  int32
+	Stime  int32
+	Cutime int32
+	Cstime int32
+}
+
+type Utimbuf struct {
+	Actime  int32
+	Modtime int32
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int32
+	Ixrss    int32
+	Idrss    int32
+	Isrss    int32
+	Minflt   int32
+	Majflt   int32
+	Nswap    int32
+	Inblock  int32
+	Oublock  int32
+	Msgsnd   int32
+	Msgrcv   int32
+	Nsignals int32
+	Nvcsw    int32
+	Nivcsw   int32
+}
+
+type Stat_t struct {
+	Dev     uint64
+	_       uint16
+	_       uint32
+	Mode    uint32
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	Rdev    uint64
+	_       uint16
+	_       [4]byte
+	Size    int64
+	Blksize int32
+	_       [4]byte
+	Blocks  int64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Ino     uint64
+}
+
+type Dirent struct {
+	Ino    uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Name   [256]uint8
+	_      [5]byte
+}
+
+type Flock_t struct {
+	Type   int16
+	Whence int16
+	_      [4]byte
+	Start  int64
+	Len    int64
+	Pid    int32
+	_      [4]byte
+}
+
+type DmNameList struct {
+	Dev  uint64
+	Next uint32
+	Name [0]byte
+	_    [4]byte
+}
+
+const (
+	FADV_DONTNEED = 0x4
+	FADV_NOREUSE  = 0x5
+)
+
+type RawSockaddr struct {
+	Family uint16
+	Data   [14]uint8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [96]uint8
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+const (
+	SizeofIovec   = 0x8
+	SizeofMsghdr  = 0x1c
+	SizeofCmsghdr = 0xc
+)
+
+const (
+	SizeofSockFprog = 0x8
+)
+
+type PtraceRegs struct {
+	Uregs [18]uint32
+}
+
+type FdSet struct {
+	Bits [32]int32
+}
+
+type Sysinfo_t struct {
+	Uptime    int32
+	Loads     [3]uint32
+	Totalram  uint32
+	Freeram   uint32
+	Sharedram uint32
+	Bufferram uint32
+	Totalswap uint32
+	Freeswap  uint32
+	Procs     uint16
+	Pad       uint16
+	Totalhigh uint32
+	Freehigh  uint32
+	Unit      uint32
+	_         [8]uint8
+}
+
+type Ustat_t struct {
+	Tfree  int32
+	Tinode uint32
+	Fname  [6]uint8
+	Fpack  [6]uint8
+}
+
+type EpollEvent struct {
+	Events uint32
+	PadFd  int32
+	Fd     int32
+	Pad    int32
+}
+
+const (
+	POLLRDHUP = 0x2000
+)
+
+type Sigset_t struct {
+	Val [32]uint32
+}
+
+const _C__NSIG = 0x41
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Line   uint8
+	Cc     [19]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Taskstats struct {
+	Version                   uint16
+	Ac_exitcode               uint32
+	Ac_flag                   uint8
+	Ac_nice                   uint8
+	_                         [4]byte
+	Cpu_count                 uint64
+	Cpu_delay_total           uint64
+	Blkio_count               uint64
+	Blkio_delay_total         uint64
+	Swapin_count              uint64
+	Swapin_delay_total        uint64
+	Cpu_run_real_total        uint64
+	Cpu_run_virtual_total     uint64
+	Ac_comm                   [32]uint8
+	Ac_sched                  uint8
+	Ac_pad                    [3]uint8
+	_                         [4]byte
+	Ac_uid                    uint32
+	Ac_gid                    uint32
+	Ac_pid                    uint32
+	Ac_ppid                   uint32
+	Ac_btime                  uint32
+	_                         [4]byte
+	Ac_etime                  uint64
+	Ac_utime                  uint64
+	Ac_stime                  uint64
+	Ac_minflt                 uint64
+	Ac_majflt                 uint64
+	Coremem                   uint64
+	Virtmem                   uint64
+	Hiwater_rss               uint64
+	Hiwater_vm                uint64
+	Read_char                 uint64
+	Write_char                uint64
+	Read_syscalls             uint64
+	Write_syscalls            uint64
+	Read_bytes                uint64
+	Write_bytes               uint64
+	Cancelled_write_bytes     uint64
+	Nvcsw                     uint64
+	Nivcsw                    uint64
+	Ac_utimescaled            uint64
+	Ac_stimescaled            uint64
+	Cpu_scaled_run_real_total uint64
+	Freepages_count           uint64
+	Freepages_delay_total     uint64
+	Thrashing_count           uint64
+	Thrashing_delay_total     uint64
+	Ac_btime64                uint64
+}
+
+type cpuMask uint32
+
+const (
+	_NCPUBITS = 0x20
+)
+
+const (
+	CBitFieldMaskBit0  = 0x1
+	CBitFieldMaskBit1  = 0x2
+	CBitFieldMaskBit2  = 0x4
+	CBitFieldMaskBit3  = 0x8
+	CBitFieldMaskBit4  = 0x10
+	CBitFieldMaskBit5  = 0x20
+	CBitFieldMaskBit6  = 0x40
+	CBitFieldMaskBit7  = 0x80
+	CBitFieldMaskBit8  = 0x100
+	CBitFieldMaskBit9  = 0x200
+	CBitFieldMaskBit10 = 0x400
+	CBitFieldMaskBit11 = 0x800
+	CBitFieldMaskBit12 = 0x1000
+	CBitFieldMaskBit13 = 0x2000
+	CBitFieldMaskBit14 = 0x4000
+	CBitFieldMaskBit15 = 0x8000
+	CBitFieldMaskBit16 = 0x10000
+	CBitFieldMaskBit17 = 0x20000
+	CBitFieldMaskBit18 = 0x40000
+	CBitFieldMaskBit19 = 0x80000
+	CBitFieldMaskBit20 = 0x100000
+	CBitFieldMaskBit21 = 0x200000
+	CBitFieldMaskBit22 = 0x400000
+	CBitFieldMaskBit23 = 0x800000
+	CBitFieldMaskBit24 = 0x1000000
+	CBitFieldMaskBit25 = 0x2000000
+	CBitFieldMaskBit26 = 0x4000000
+	CBitFieldMaskBit27 = 0x8000000
+	CBitFieldMaskBit28 = 0x10000000
+	CBitFieldMaskBit29 = 0x20000000
+	CBitFieldMaskBit30 = 0x40000000
+	CBitFieldMaskBit31 = 0x80000000
+	CBitFieldMaskBit32 = 0x100000000
+	CBitFieldMaskBit33 = 0x200000000
+	CBitFieldMaskBit34 = 0x400000000
+	CBitFieldMaskBit35 = 0x800000000
+	CBitFieldMaskBit36 = 0x1000000000
+	CBitFieldMaskBit37 = 0x2000000000
+	CBitFieldMaskBit38 = 0x4000000000
+	CBitFieldMaskBit39 = 0x8000000000
+	CBitFieldMaskBit40 = 0x10000000000
+	CBitFieldMaskBit41 = 0x20000000000
+	CBitFieldMaskBit42 = 0x40000000000
+	CBitFieldMaskBit43 = 0x80000000000
+	CBitFieldMaskBit44 = 0x100000000000
+	CBitFieldMaskBit45 = 0x200000000000
+	CBitFieldMaskBit46 = 0x400000000000
+	CBitFieldMaskBit47 = 0x800000000000
+	CBitFieldMaskBit48 = 0x1000000000000
+	CBitFieldMaskBit49 = 0x2000000000000
+	CBitFieldMaskBit50 = 0x4000000000000
+	CBitFieldMaskBit51 = 0x8000000000000
+	CBitFieldMaskBit52 = 0x10000000000000
+	CBitFieldMaskBit53 = 0x20000000000000
+	CBitFieldMaskBit54 = 0x40000000000000
+	CBitFieldMaskBit55 = 0x80000000000000
+	CBitFieldMaskBit56 = 0x100000000000000
+	CBitFieldMaskBit57 = 0x200000000000000
+	CBitFieldMaskBit58 = 0x400000000000000
+	CBitFieldMaskBit59 = 0x800000000000000
+	CBitFieldMaskBit60 = 0x1000000000000000
+	CBitFieldMaskBit61 = 0x2000000000000000
+	CBitFieldMaskBit62 = 0x4000000000000000
+	CBitFieldMaskBit63 = 0x8000000000000000
+)
+
+type SockaddrStorage struct {
+	Family uint16
+	_      [122]uint8
+	_      uint32
+}
+
+type HDGeometry struct {
+	Heads     uint8
+	Sectors   uint8
+	Cylinders uint16
+	Start     uint32
+}
+
+type Statfs_t struct {
+	Type    int32
+	Bsize   int32
+	Blocks  uint64
+	Bfree   uint64
+	Bavail  uint64
+	Files   uint64
+	Ffree   uint64
+	Fsid    Fsid
+	Namelen int32
+	Frsize  int32
+	Flags   int32
+	Spare   [4]int32
+	_       [4]byte
+}
+
+type TpacketHdr struct {
+	Status  uint32
+	Len     uint32
+	Snaplen uint32
+	Mac     uint16
+	Net     uint16
+	Sec     uint32
+	Usec    uint32
+}
+
+const (
+	SizeofTpacketHdr = 0x18
+)
+
+type RTCPLLInfo struct {
+	Ctrl    int32
+	Value   int32
+	Max     int32
+	Min     int32
+	Posmult int32
+	Negmult int32
+	Clock   int32
+}
+
+type BlkpgPartition struct {
+	Start   int64
+	Length  int64
+	Pno     int32
+	Devname [64]uint8
+	Volname [64]uint8
+	_       [4]byte
+}
+
+const (
+	BLKPG = 0x1269
+)
+
+type XDPUmemReg struct {
+	Addr     uint64
+	Len      uint64
+	Size     uint32
+	Headroom uint32
+	Flags    uint32
+	_        [4]byte
+}
+
+type CryptoUserAlg struct {
+	Name        [64]uint8
+	Driver_name [64]uint8
+	Module_name [64]uint8
+	Type        uint32
+	Mask        uint32
+	Refcnt      uint32
+	Flags       uint32
+}
+
+type CryptoStatAEAD struct {
+	Type         [64]uint8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatAKCipher struct {
+	Type         [64]uint8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Verify_cnt   uint64
+	Sign_cnt     uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCipher struct {
+	Type         [64]uint8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCompress struct {
+	Type            [64]uint8
+	Compress_cnt    uint64
+	Compress_tlen   uint64
+	Decompress_cnt  uint64
+	Decompress_tlen uint64
+	Err_cnt         uint64
+}
+
+type CryptoStatHash struct {
+	Type      [64]uint8
+	Hash_cnt  uint64
+	Hash_tlen uint64
+	Err_cnt   uint64
+}
+
+type CryptoStatKPP struct {
+	Type                      [64]uint8
+	Setsecret_cnt             uint64
+	Generate_public_key_cnt   uint64
+	Compute_shared_secret_cnt uint64
+	Err_cnt                   uint64
+}
+
+type CryptoStatRNG struct {
+	Type          [64]uint8
+	Generate_cnt  uint64
+	Generate_tlen uint64
+	Seed_cnt      uint64
+	Err_cnt       uint64
+}
+
+type CryptoStatLarval struct {
+	Type [64]uint8
+}
+
+type CryptoReportLarval struct {
+	Type [64]uint8
+}
+
+type CryptoReportHash struct {
+	Type       [64]uint8
+	Blocksize  uint32
+	Digestsize uint32
+}
+
+type CryptoReportCipher struct {
+	Type        [64]uint8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+}
+
+type CryptoReportBlkCipher struct {
+	Type        [64]uint8
+	Geniv       [64]uint8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportAEAD struct {
+	Type        [64]uint8
+	Geniv       [64]uint8
+	Blocksize   uint32
+	Maxauthsize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportComp struct {
+	Type [64]uint8
+}
+
+type CryptoReportRNG struct {
+	Type     [64]uint8
+	Seedsize uint32
+}
+
+type CryptoReportAKCipher struct {
+	Type [64]uint8
+}
+
+type CryptoReportKPP struct {
+	Type [64]uint8
+}
+
+type CryptoReportAcomp struct {
+	Type [64]uint8
+}
+
+type LoopInfo struct {
+	Number           int32
+	Device           uint16
+	Inode            uint32
+	Rdevice          uint16
+	Offset           int32
+	Encrypt_type     int32
+	Encrypt_key_size int32
+	Flags            int32
+	Name             [64]uint8
+	Encrypt_key      [32]uint8
+	Init             [2]uint32
+	Reserved         [4]uint8
+}
+
+type TIPCSubscr struct {
+	Seq     TIPCServiceRange
+	Timeout uint32
+	Filter  uint32
+	Handle  [8]uint8
+}
+
+type TIPCSIOCLNReq struct {
+	Peer     uint32
+	Id       uint32
+	Linkname [68]uint8
+}
+
+type TIPCSIOCNodeIDReq struct {
+	Peer uint32
+	Id   [16]uint8
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_arm64.go
new file mode 100644
index 000000000..b1e0c24f1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_arm64.go
@@ -0,0 +1,600 @@
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include -fsigned-char linux/types.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm64,linux
+
+package unix
+
+const (
+	SizeofPtr  = 0x8
+	SizeofLong = 0x8
+)
+
+type (
+	_C_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Timex struct {
+	Modes     uint32
+	Offset    int64
+	Freq      int64
+	Maxerror  int64
+	Esterror  int64
+	Status    int32
+	Constant  int64
+	Precision int64
+	Tolerance int64
+	Time      Timeval
+	Tick      int64
+	Ppsfreq   int64
+	Jitter    int64
+	Shift     int32
+	Stabil    int64
+	Jitcnt    int64
+	Calcnt    int64
+	Errcnt    int64
+	Stbcnt    int64
+	Tai       int32
+	_         [44]byte
+}
+
+type Time_t int64
+
+type Tms struct {
+	Utime  int64
+	Stime  int64
+	Cutime int64
+	Cstime int64
+}
+
+type Utimbuf struct {
+	Actime  int64
+	Modtime int64
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Stat_t struct {
+	Dev     uint64
+	Ino     uint64
+	Mode    uint32
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	Rdev    uint64
+	_       uint64
+	Size    int64
+	Blksize int32
+	_       int32
+	Blocks  int64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	_       [2]int32
+}
+
+type Dirent struct {
+	Ino    uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Name   [256]int8
+	_      [5]byte
+}
+
+type Flock_t struct {
+	Type   int16
+	Whence int16
+	Start  int64
+	Len    int64
+	Pid    int32
+	_      [4]byte
+}
+
+type DmNameList struct {
+	Dev  uint64
+	Next uint32
+	Name [0]byte
+	_    [4]byte
+}
+
+const (
+	FADV_DONTNEED = 0x4
+	FADV_NOREUSE  = 0x5
+)
+
+type RawSockaddr struct {
+	Family uint16
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [96]int8
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	_          [4]byte
+}
+
+type Cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+const (
+	SizeofIovec   = 0x10
+	SizeofMsghdr  = 0x38
+	SizeofCmsghdr = 0x10
+)
+
+const (
+	SizeofSockFprog = 0x10
+)
+
+type PtraceRegs struct {
+	Regs   [31]uint64
+	Sp     uint64
+	Pc     uint64
+	Pstate uint64
+}
+
+type FdSet struct {
+	Bits [16]int64
+}
+
+type Sysinfo_t struct {
+	Uptime    int64
+	Loads     [3]uint64
+	Totalram  uint64
+	Freeram   uint64
+	Sharedram uint64
+	Bufferram uint64
+	Totalswap uint64
+	Freeswap  uint64
+	Procs     uint16
+	Pad       uint16
+	Totalhigh uint64
+	Freehigh  uint64
+	Unit      uint32
+	_         [0]int8
+	_         [4]byte
+}
+
+type Ustat_t struct {
+	Tfree  int32
+	Tinode uint64
+	Fname  [6]int8
+	Fpack  [6]int8
+	_      [4]byte
+}
+
+type EpollEvent struct {
+	Events uint32
+	PadFd  int32
+	Fd     int32
+	Pad    int32
+}
+
+const (
+	POLLRDHUP = 0x2000
+)
+
+type Sigset_t struct {
+	Val [16]uint64
+}
+
+const _C__NSIG = 0x41
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Line   uint8
+	Cc     [19]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Taskstats struct {
+	Version                   uint16
+	Ac_exitcode               uint32
+	Ac_flag                   uint8
+	Ac_nice                   uint8
+	Cpu_count                 uint64
+	Cpu_delay_total           uint64
+	Blkio_count               uint64
+	Blkio_delay_total         uint64
+	Swapin_count              uint64
+	Swapin_delay_total        uint64
+	Cpu_run_real_total        uint64
+	Cpu_run_virtual_total     uint64
+	Ac_comm                   [32]int8
+	Ac_sched                  uint8
+	Ac_pad                    [3]uint8
+	_                         [4]byte
+	Ac_uid                    uint32
+	Ac_gid                    uint32
+	Ac_pid                    uint32
+	Ac_ppid                   uint32
+	Ac_btime                  uint32
+	Ac_etime                  uint64
+	Ac_utime                  uint64
+	Ac_stime                  uint64
+	Ac_minflt                 uint64
+	Ac_majflt                 uint64
+	Coremem                   uint64
+	Virtmem                   uint64
+	Hiwater_rss               uint64
+	Hiwater_vm                uint64
+	Read_char                 uint64
+	Write_char                uint64
+	Read_syscalls             uint64
+	Write_syscalls            uint64
+	Read_bytes                uint64
+	Write_bytes               uint64
+	Cancelled_write_bytes     uint64
+	Nvcsw                     uint64
+	Nivcsw                    uint64
+	Ac_utimescaled            uint64
+	Ac_stimescaled            uint64
+	Cpu_scaled_run_real_total uint64
+	Freepages_count           uint64
+	Freepages_delay_total     uint64
+	Thrashing_count           uint64
+	Thrashing_delay_total     uint64
+	Ac_btime64                uint64
+}
+
+type cpuMask uint64
+
+const (
+	_NCPUBITS = 0x40
+)
+
+const (
+	CBitFieldMaskBit0  = 0x1
+	CBitFieldMaskBit1  = 0x2
+	CBitFieldMaskBit2  = 0x4
+	CBitFieldMaskBit3  = 0x8
+	CBitFieldMaskBit4  = 0x10
+	CBitFieldMaskBit5  = 0x20
+	CBitFieldMaskBit6  = 0x40
+	CBitFieldMaskBit7  = 0x80
+	CBitFieldMaskBit8  = 0x100
+	CBitFieldMaskBit9  = 0x200
+	CBitFieldMaskBit10 = 0x400
+	CBitFieldMaskBit11 = 0x800
+	CBitFieldMaskBit12 = 0x1000
+	CBitFieldMaskBit13 = 0x2000
+	CBitFieldMaskBit14 = 0x4000
+	CBitFieldMaskBit15 = 0x8000
+	CBitFieldMaskBit16 = 0x10000
+	CBitFieldMaskBit17 = 0x20000
+	CBitFieldMaskBit18 = 0x40000
+	CBitFieldMaskBit19 = 0x80000
+	CBitFieldMaskBit20 = 0x100000
+	CBitFieldMaskBit21 = 0x200000
+	CBitFieldMaskBit22 = 0x400000
+	CBitFieldMaskBit23 = 0x800000
+	CBitFieldMaskBit24 = 0x1000000
+	CBitFieldMaskBit25 = 0x2000000
+	CBitFieldMaskBit26 = 0x4000000
+	CBitFieldMaskBit27 = 0x8000000
+	CBitFieldMaskBit28 = 0x10000000
+	CBitFieldMaskBit29 = 0x20000000
+	CBitFieldMaskBit30 = 0x40000000
+	CBitFieldMaskBit31 = 0x80000000
+	CBitFieldMaskBit32 = 0x100000000
+	CBitFieldMaskBit33 = 0x200000000
+	CBitFieldMaskBit34 = 0x400000000
+	CBitFieldMaskBit35 = 0x800000000
+	CBitFieldMaskBit36 = 0x1000000000
+	CBitFieldMaskBit37 = 0x2000000000
+	CBitFieldMaskBit38 = 0x4000000000
+	CBitFieldMaskBit39 = 0x8000000000
+	CBitFieldMaskBit40 = 0x10000000000
+	CBitFieldMaskBit41 = 0x20000000000
+	CBitFieldMaskBit42 = 0x40000000000
+	CBitFieldMaskBit43 = 0x80000000000
+	CBitFieldMaskBit44 = 0x100000000000
+	CBitFieldMaskBit45 = 0x200000000000
+	CBitFieldMaskBit46 = 0x400000000000
+	CBitFieldMaskBit47 = 0x800000000000
+	CBitFieldMaskBit48 = 0x1000000000000
+	CBitFieldMaskBit49 = 0x2000000000000
+	CBitFieldMaskBit50 = 0x4000000000000
+	CBitFieldMaskBit51 = 0x8000000000000
+	CBitFieldMaskBit52 = 0x10000000000000
+	CBitFieldMaskBit53 = 0x20000000000000
+	CBitFieldMaskBit54 = 0x40000000000000
+	CBitFieldMaskBit55 = 0x80000000000000
+	CBitFieldMaskBit56 = 0x100000000000000
+	CBitFieldMaskBit57 = 0x200000000000000
+	CBitFieldMaskBit58 = 0x400000000000000
+	CBitFieldMaskBit59 = 0x800000000000000
+	CBitFieldMaskBit60 = 0x1000000000000000
+	CBitFieldMaskBit61 = 0x2000000000000000
+	CBitFieldMaskBit62 = 0x4000000000000000
+	CBitFieldMaskBit63 = 0x8000000000000000
+)
+
+type SockaddrStorage struct {
+	Family uint16
+	_      [118]int8
+	_      uint64
+}
+
+type HDGeometry struct {
+	Heads     uint8
+	Sectors   uint8
+	Cylinders uint16
+	Start     uint64
+}
+
+type Statfs_t struct {
+	Type    int64
+	Bsize   int64
+	Blocks  uint64
+	Bfree   uint64
+	Bavail  uint64
+	Files   uint64
+	Ffree   uint64
+	Fsid    Fsid
+	Namelen int64
+	Frsize  int64
+	Flags   int64
+	Spare   [4]int64
+}
+
+type TpacketHdr struct {
+	Status  uint64
+	Len     uint32
+	Snaplen uint32
+	Mac     uint16
+	Net     uint16
+	Sec     uint32
+	Usec    uint32
+	_       [4]byte
+}
+
+const (
+	SizeofTpacketHdr = 0x20
+)
+
+type RTCPLLInfo struct {
+	Ctrl    int32
+	Value   int32
+	Max     int32
+	Min     int32
+	Posmult int32
+	Negmult int32
+	Clock   int64
+}
+
+type BlkpgPartition struct {
+	Start   int64
+	Length  int64
+	Pno     int32
+	Devname [64]uint8
+	Volname [64]uint8
+	_       [4]byte
+}
+
+const (
+	BLKPG = 0x1269
+)
+
+type XDPUmemReg struct {
+	Addr     uint64
+	Len      uint64
+	Size     uint32
+	Headroom uint32
+	Flags    uint32
+	_        [4]byte
+}
+
+type CryptoUserAlg struct {
+	Name        [64]int8
+	Driver_name [64]int8
+	Module_name [64]int8
+	Type        uint32
+	Mask        uint32
+	Refcnt      uint32
+	Flags       uint32
+}
+
+type CryptoStatAEAD struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatAKCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Verify_cnt   uint64
+	Sign_cnt     uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCompress struct {
+	Type            [64]int8
+	Compress_cnt    uint64
+	Compress_tlen   uint64
+	Decompress_cnt  uint64
+	Decompress_tlen uint64
+	Err_cnt         uint64
+}
+
+type CryptoStatHash struct {
+	Type      [64]int8
+	Hash_cnt  uint64
+	Hash_tlen uint64
+	Err_cnt   uint64
+}
+
+type CryptoStatKPP struct {
+	Type                      [64]int8
+	Setsecret_cnt             uint64
+	Generate_public_key_cnt   uint64
+	Compute_shared_secret_cnt uint64
+	Err_cnt                   uint64
+}
+
+type CryptoStatRNG struct {
+	Type          [64]int8
+	Generate_cnt  uint64
+	Generate_tlen uint64
+	Seed_cnt      uint64
+	Err_cnt       uint64
+}
+
+type CryptoStatLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportHash struct {
+	Type       [64]int8
+	Blocksize  uint32
+	Digestsize uint32
+}
+
+type CryptoReportCipher struct {
+	Type        [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+}
+
+type CryptoReportBlkCipher struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportAEAD struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Maxauthsize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportComp struct {
+	Type [64]int8
+}
+
+type CryptoReportRNG struct {
+	Type     [64]int8
+	Seedsize uint32
+}
+
+type CryptoReportAKCipher struct {
+	Type [64]int8
+}
+
+type CryptoReportKPP struct {
+	Type [64]int8
+}
+
+type CryptoReportAcomp struct {
+	Type [64]int8
+}
+
+type LoopInfo struct {
+	Number           int32
+	Device           uint32
+	Inode            uint64
+	Rdevice          uint32
+	Offset           int32
+	Encrypt_type     int32
+	Encrypt_key_size int32
+	Flags            int32
+	Name             [64]int8
+	Encrypt_key      [32]uint8
+	Init             [2]uint64
+	Reserved         [4]int8
+	_                [4]byte
+}
+
+type TIPCSubscr struct {
+	Seq     TIPCServiceRange
+	Timeout uint32
+	Filter  uint32
+	Handle  [8]int8
+}
+
+type TIPCSIOCLNReq struct {
+	Peer     uint32
+	Id       uint32
+	Linkname [68]int8
+}
+
+type TIPCSIOCNodeIDReq struct {
+	Peer uint32
+	Id   [16]int8
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_mips.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_mips.go
new file mode 100644
index 000000000..fb802c3ec
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_mips.go
@@ -0,0 +1,604 @@
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include linux/types.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build mips,linux
+
+package unix
+
+const (
+	SizeofPtr  = 0x4
+	SizeofLong = 0x4
+)
+
+type (
+	_C_long int32
+)
+
+type Timespec struct {
+	Sec  int32
+	Nsec int32
+}
+
+type Timeval struct {
+	Sec  int32
+	Usec int32
+}
+
+type Timex struct {
+	Modes     uint32
+	Offset    int32
+	Freq      int32
+	Maxerror  int32
+	Esterror  int32
+	Status    int32
+	Constant  int32
+	Precision int32
+	Tolerance int32
+	Time      Timeval
+	Tick      int32
+	Ppsfreq   int32
+	Jitter    int32
+	Shift     int32
+	Stabil    int32
+	Jitcnt    int32
+	Calcnt    int32
+	Errcnt    int32
+	Stbcnt    int32
+	Tai       int32
+	_         [44]byte
+}
+
+type Time_t int32
+
+type Tms struct {
+	Utime  int32
+	Stime  int32
+	Cutime int32
+	Cstime int32
+}
+
+type Utimbuf struct {
+	Actime  int32
+	Modtime int32
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int32
+	Ixrss    int32
+	Idrss    int32
+	Isrss    int32
+	Minflt   int32
+	Majflt   int32
+	Nswap    int32
+	Inblock  int32
+	Oublock  int32
+	Msgsnd   int32
+	Msgrcv   int32
+	Nsignals int32
+	Nvcsw    int32
+	Nivcsw   int32
+}
+
+type Stat_t struct {
+	Dev     uint32
+	Pad1    [3]int32
+	Ino     uint64
+	Mode    uint32
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	Rdev    uint32
+	Pad2    [3]int32
+	Size    int64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Blksize int32
+	Pad4    int32
+	Blocks  int64
+	Pad5    [14]int32
+}
+
+type Dirent struct {
+	Ino    uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Name   [256]int8
+	_      [5]byte
+}
+
+type Flock_t struct {
+	Type   int16
+	Whence int16
+	_      [4]byte
+	Start  int64
+	Len    int64
+	Pid    int32
+	_      [4]byte
+}
+
+type DmNameList struct {
+	Dev  uint64
+	Next uint32
+	Name [0]byte
+	_    [4]byte
+}
+
+const (
+	FADV_DONTNEED = 0x4
+	FADV_NOREUSE  = 0x5
+)
+
+type RawSockaddr struct {
+	Family uint16
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [96]int8
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+const (
+	SizeofIovec   = 0x8
+	SizeofMsghdr  = 0x1c
+	SizeofCmsghdr = 0xc
+)
+
+const (
+	SizeofSockFprog = 0x8
+)
+
+type PtraceRegs struct {
+	Regs     [32]uint64
+	Lo       uint64
+	Hi       uint64
+	Epc      uint64
+	Badvaddr uint64
+	Status   uint64
+	Cause    uint64
+}
+
+type FdSet struct {
+	Bits [32]int32
+}
+
+type Sysinfo_t struct {
+	Uptime    int32
+	Loads     [3]uint32
+	Totalram  uint32
+	Freeram   uint32
+	Sharedram uint32
+	Bufferram uint32
+	Totalswap uint32
+	Freeswap  uint32
+	Procs     uint16
+	Pad       uint16
+	Totalhigh uint32
+	Freehigh  uint32
+	Unit      uint32
+	_         [8]int8
+}
+
+type Ustat_t struct {
+	Tfree  int32
+	Tinode uint32
+	Fname  [6]int8
+	Fpack  [6]int8
+}
+
+type EpollEvent struct {
+	Events uint32
+	PadFd  int32
+	Fd     int32
+	Pad    int32
+}
+
+const (
+	POLLRDHUP = 0x2000
+)
+
+type Sigset_t struct {
+	Val [32]uint32
+}
+
+const _C__NSIG = 0x80
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Line   uint8
+	Cc     [23]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Taskstats struct {
+	Version                   uint16
+	Ac_exitcode               uint32
+	Ac_flag                   uint8
+	Ac_nice                   uint8
+	_                         [4]byte
+	Cpu_count                 uint64
+	Cpu_delay_total           uint64
+	Blkio_count               uint64
+	Blkio_delay_total         uint64
+	Swapin_count              uint64
+	Swapin_delay_total        uint64
+	Cpu_run_real_total        uint64
+	Cpu_run_virtual_total     uint64
+	Ac_comm                   [32]int8
+	Ac_sched                  uint8
+	Ac_pad                    [3]uint8
+	_                         [4]byte
+	Ac_uid                    uint32
+	Ac_gid                    uint32
+	Ac_pid                    uint32
+	Ac_ppid                   uint32
+	Ac_btime                  uint32
+	_                         [4]byte
+	Ac_etime                  uint64
+	Ac_utime                  uint64
+	Ac_stime                  uint64
+	Ac_minflt                 uint64
+	Ac_majflt                 uint64
+	Coremem                   uint64
+	Virtmem                   uint64
+	Hiwater_rss               uint64
+	Hiwater_vm                uint64
+	Read_char                 uint64
+	Write_char                uint64
+	Read_syscalls             uint64
+	Write_syscalls            uint64
+	Read_bytes                uint64
+	Write_bytes               uint64
+	Cancelled_write_bytes     uint64
+	Nvcsw                     uint64
+	Nivcsw                    uint64
+	Ac_utimescaled            uint64
+	Ac_stimescaled            uint64
+	Cpu_scaled_run_real_total uint64
+	Freepages_count           uint64
+	Freepages_delay_total     uint64
+	Thrashing_count           uint64
+	Thrashing_delay_total     uint64
+	Ac_btime64                uint64
+}
+
+type cpuMask uint32
+
+const (
+	_NCPUBITS = 0x20
+)
+
+const (
+	CBitFieldMaskBit0  = 0x8000000000000000
+	CBitFieldMaskBit1  = 0x4000000000000000
+	CBitFieldMaskBit2  = 0x2000000000000000
+	CBitFieldMaskBit3  = 0x1000000000000000
+	CBitFieldMaskBit4  = 0x800000000000000
+	CBitFieldMaskBit5  = 0x400000000000000
+	CBitFieldMaskBit6  = 0x200000000000000
+	CBitFieldMaskBit7  = 0x100000000000000
+	CBitFieldMaskBit8  = 0x80000000000000
+	CBitFieldMaskBit9  = 0x40000000000000
+	CBitFieldMaskBit10 = 0x20000000000000
+	CBitFieldMaskBit11 = 0x10000000000000
+	CBitFieldMaskBit12 = 0x8000000000000
+	CBitFieldMaskBit13 = 0x4000000000000
+	CBitFieldMaskBit14 = 0x2000000000000
+	CBitFieldMaskBit15 = 0x1000000000000
+	CBitFieldMaskBit16 = 0x800000000000
+	CBitFieldMaskBit17 = 0x400000000000
+	CBitFieldMaskBit18 = 0x200000000000
+	CBitFieldMaskBit19 = 0x100000000000
+	CBitFieldMaskBit20 = 0x80000000000
+	CBitFieldMaskBit21 = 0x40000000000
+	CBitFieldMaskBit22 = 0x20000000000
+	CBitFieldMaskBit23 = 0x10000000000
+	CBitFieldMaskBit24 = 0x8000000000
+	CBitFieldMaskBit25 = 0x4000000000
+	CBitFieldMaskBit26 = 0x2000000000
+	CBitFieldMaskBit27 = 0x1000000000
+	CBitFieldMaskBit28 = 0x800000000
+	CBitFieldMaskBit29 = 0x400000000
+	CBitFieldMaskBit30 = 0x200000000
+	CBitFieldMaskBit31 = 0x100000000
+	CBitFieldMaskBit32 = 0x80000000
+	CBitFieldMaskBit33 = 0x40000000
+	CBitFieldMaskBit34 = 0x20000000
+	CBitFieldMaskBit35 = 0x10000000
+	CBitFieldMaskBit36 = 0x8000000
+	CBitFieldMaskBit37 = 0x4000000
+	CBitFieldMaskBit38 = 0x2000000
+	CBitFieldMaskBit39 = 0x1000000
+	CBitFieldMaskBit40 = 0x800000
+	CBitFieldMaskBit41 = 0x400000
+	CBitFieldMaskBit42 = 0x200000
+	CBitFieldMaskBit43 = 0x100000
+	CBitFieldMaskBit44 = 0x80000
+	CBitFieldMaskBit45 = 0x40000
+	CBitFieldMaskBit46 = 0x20000
+	CBitFieldMaskBit47 = 0x10000
+	CBitFieldMaskBit48 = 0x8000
+	CBitFieldMaskBit49 = 0x4000
+	CBitFieldMaskBit50 = 0x2000
+	CBitFieldMaskBit51 = 0x1000
+	CBitFieldMaskBit52 = 0x800
+	CBitFieldMaskBit53 = 0x400
+	CBitFieldMaskBit54 = 0x200
+	CBitFieldMaskBit55 = 0x100
+	CBitFieldMaskBit56 = 0x80
+	CBitFieldMaskBit57 = 0x40
+	CBitFieldMaskBit58 = 0x20
+	CBitFieldMaskBit59 = 0x10
+	CBitFieldMaskBit60 = 0x8
+	CBitFieldMaskBit61 = 0x4
+	CBitFieldMaskBit62 = 0x2
+	CBitFieldMaskBit63 = 0x1
+)
+
+type SockaddrStorage struct {
+	Family uint16
+	_      [122]int8
+	_      uint32
+}
+
+type HDGeometry struct {
+	Heads     uint8
+	Sectors   uint8
+	Cylinders uint16
+	Start     uint32
+}
+
+type Statfs_t struct {
+	Type    int32
+	Bsize   int32
+	Frsize  int32
+	_       [4]byte
+	Blocks  uint64
+	Bfree   uint64
+	Files   uint64
+	Ffree   uint64
+	Bavail  uint64
+	Fsid    Fsid
+	Namelen int32
+	Flags   int32
+	Spare   [5]int32
+	_       [4]byte
+}
+
+type TpacketHdr struct {
+	Status  uint32
+	Len     uint32
+	Snaplen uint32
+	Mac     uint16
+	Net     uint16
+	Sec     uint32
+	Usec    uint32
+}
+
+const (
+	SizeofTpacketHdr = 0x18
+)
+
+type RTCPLLInfo struct {
+	Ctrl    int32
+	Value   int32
+	Max     int32
+	Min     int32
+	Posmult int32
+	Negmult int32
+	Clock   int32
+}
+
+type BlkpgPartition struct {
+	Start   int64
+	Length  int64
+	Pno     int32
+	Devname [64]uint8
+	Volname [64]uint8
+	_       [4]byte
+}
+
+const (
+	BLKPG = 0x20001269
+)
+
+type XDPUmemReg struct {
+	Addr     uint64
+	Len      uint64
+	Size     uint32
+	Headroom uint32
+	Flags    uint32
+	_        [4]byte
+}
+
+type CryptoUserAlg struct {
+	Name        [64]int8
+	Driver_name [64]int8
+	Module_name [64]int8
+	Type        uint32
+	Mask        uint32
+	Refcnt      uint32
+	Flags       uint32
+}
+
+type CryptoStatAEAD struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatAKCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Verify_cnt   uint64
+	Sign_cnt     uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCompress struct {
+	Type            [64]int8
+	Compress_cnt    uint64
+	Compress_tlen   uint64
+	Decompress_cnt  uint64
+	Decompress_tlen uint64
+	Err_cnt         uint64
+}
+
+type CryptoStatHash struct {
+	Type      [64]int8
+	Hash_cnt  uint64
+	Hash_tlen uint64
+	Err_cnt   uint64
+}
+
+type CryptoStatKPP struct {
+	Type                      [64]int8
+	Setsecret_cnt             uint64
+	Generate_public_key_cnt   uint64
+	Compute_shared_secret_cnt uint64
+	Err_cnt                   uint64
+}
+
+type CryptoStatRNG struct {
+	Type          [64]int8
+	Generate_cnt  uint64
+	Generate_tlen uint64
+	Seed_cnt      uint64
+	Err_cnt       uint64
+}
+
+type CryptoStatLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportHash struct {
+	Type       [64]int8
+	Blocksize  uint32
+	Digestsize uint32
+}
+
+type CryptoReportCipher struct {
+	Type        [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+}
+
+type CryptoReportBlkCipher struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportAEAD struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Maxauthsize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportComp struct {
+	Type [64]int8
+}
+
+type CryptoReportRNG struct {
+	Type     [64]int8
+	Seedsize uint32
+}
+
+type CryptoReportAKCipher struct {
+	Type [64]int8
+}
+
+type CryptoReportKPP struct {
+	Type [64]int8
+}
+
+type CryptoReportAcomp struct {
+	Type [64]int8
+}
+
+type LoopInfo struct {
+	Number           int32
+	Device           uint32
+	Inode            uint32
+	Rdevice          uint32
+	Offset           int32
+	Encrypt_type     int32
+	Encrypt_key_size int32
+	Flags            int32
+	Name             [64]int8
+	Encrypt_key      [32]uint8
+	Init             [2]uint32
+	Reserved         [4]int8
+}
+
+type TIPCSubscr struct {
+	Seq     TIPCServiceRange
+	Timeout uint32
+	Filter  uint32
+	Handle  [8]int8
+}
+
+type TIPCSIOCLNReq struct {
+	Peer     uint32
+	Id       uint32
+	Linkname [68]int8
+}
+
+type TIPCSIOCNodeIDReq struct {
+	Peer uint32
+	Id   [16]int8
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_mips64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_mips64.go
new file mode 100644
index 000000000..30abcf3bb
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_mips64.go
@@ -0,0 +1,603 @@
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include linux/types.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build mips64,linux
+
+package unix
+
+const (
+	SizeofPtr  = 0x8
+	SizeofLong = 0x8
+)
+
+type (
+	_C_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Timex struct {
+	Modes     uint32
+	Offset    int64
+	Freq      int64
+	Maxerror  int64
+	Esterror  int64
+	Status    int32
+	Constant  int64
+	Precision int64
+	Tolerance int64
+	Time      Timeval
+	Tick      int64
+	Ppsfreq   int64
+	Jitter    int64
+	Shift     int32
+	Stabil    int64
+	Jitcnt    int64
+	Calcnt    int64
+	Errcnt    int64
+	Stbcnt    int64
+	Tai       int32
+	_         [44]byte
+}
+
+type Time_t int64
+
+type Tms struct {
+	Utime  int64
+	Stime  int64
+	Cutime int64
+	Cstime int64
+}
+
+type Utimbuf struct {
+	Actime  int64
+	Modtime int64
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Stat_t struct {
+	Dev     uint32
+	Pad1    [3]uint32
+	Ino     uint64
+	Mode    uint32
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	Rdev    uint32
+	Pad2    [3]uint32
+	Size    int64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Blksize uint32
+	Pad4    uint32
+	Blocks  int64
+}
+
+type Dirent struct {
+	Ino    uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Name   [256]int8
+	_      [5]byte
+}
+
+type Flock_t struct {
+	Type   int16
+	Whence int16
+	Start  int64
+	Len    int64
+	Pid    int32
+	_      [4]byte
+}
+
+type DmNameList struct {
+	Dev  uint64
+	Next uint32
+	Name [0]byte
+	_    [4]byte
+}
+
+const (
+	FADV_DONTNEED = 0x4
+	FADV_NOREUSE  = 0x5
+)
+
+type RawSockaddr struct {
+	Family uint16
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [96]int8
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	_          [4]byte
+}
+
+type Cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+const (
+	SizeofIovec   = 0x10
+	SizeofMsghdr  = 0x38
+	SizeofCmsghdr = 0x10
+)
+
+const (
+	SizeofSockFprog = 0x10
+)
+
+type PtraceRegs struct {
+	Regs     [32]uint64
+	Lo       uint64
+	Hi       uint64
+	Epc      uint64
+	Badvaddr uint64
+	Status   uint64
+	Cause    uint64
+}
+
+type FdSet struct {
+	Bits [16]int64
+}
+
+type Sysinfo_t struct {
+	Uptime    int64
+	Loads     [3]uint64
+	Totalram  uint64
+	Freeram   uint64
+	Sharedram uint64
+	Bufferram uint64
+	Totalswap uint64
+	Freeswap  uint64
+	Procs     uint16
+	Pad       uint16
+	Totalhigh uint64
+	Freehigh  uint64
+	Unit      uint32
+	_         [0]int8
+	_         [4]byte
+}
+
+type Ustat_t struct {
+	Tfree  int32
+	Tinode uint64
+	Fname  [6]int8
+	Fpack  [6]int8
+	_      [4]byte
+}
+
+type EpollEvent struct {
+	Events uint32
+	_      int32
+	Fd     int32
+	Pad    int32
+}
+
+const (
+	POLLRDHUP = 0x2000
+)
+
+type Sigset_t struct {
+	Val [16]uint64
+}
+
+const _C__NSIG = 0x80
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Line   uint8
+	Cc     [23]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Taskstats struct {
+	Version                   uint16
+	Ac_exitcode               uint32
+	Ac_flag                   uint8
+	Ac_nice                   uint8
+	Cpu_count                 uint64
+	Cpu_delay_total           uint64
+	Blkio_count               uint64
+	Blkio_delay_total         uint64
+	Swapin_count              uint64
+	Swapin_delay_total        uint64
+	Cpu_run_real_total        uint64
+	Cpu_run_virtual_total     uint64
+	Ac_comm                   [32]int8
+	Ac_sched                  uint8
+	Ac_pad                    [3]uint8
+	_                         [4]byte
+	Ac_uid                    uint32
+	Ac_gid                    uint32
+	Ac_pid                    uint32
+	Ac_ppid                   uint32
+	Ac_btime                  uint32
+	Ac_etime                  uint64
+	Ac_utime                  uint64
+	Ac_stime                  uint64
+	Ac_minflt                 uint64
+	Ac_majflt                 uint64
+	Coremem                   uint64
+	Virtmem                   uint64
+	Hiwater_rss               uint64
+	Hiwater_vm                uint64
+	Read_char                 uint64
+	Write_char                uint64
+	Read_syscalls             uint64
+	Write_syscalls            uint64
+	Read_bytes                uint64
+	Write_bytes               uint64
+	Cancelled_write_bytes     uint64
+	Nvcsw                     uint64
+	Nivcsw                    uint64
+	Ac_utimescaled            uint64
+	Ac_stimescaled            uint64
+	Cpu_scaled_run_real_total uint64
+	Freepages_count           uint64
+	Freepages_delay_total     uint64
+	Thrashing_count           uint64
+	Thrashing_delay_total     uint64
+	Ac_btime64                uint64
+}
+
+type cpuMask uint64
+
+const (
+	_NCPUBITS = 0x40
+)
+
+const (
+	CBitFieldMaskBit0  = 0x8000000000000000
+	CBitFieldMaskBit1  = 0x4000000000000000
+	CBitFieldMaskBit2  = 0x2000000000000000
+	CBitFieldMaskBit3  = 0x1000000000000000
+	CBitFieldMaskBit4  = 0x800000000000000
+	CBitFieldMaskBit5  = 0x400000000000000
+	CBitFieldMaskBit6  = 0x200000000000000
+	CBitFieldMaskBit7  = 0x100000000000000
+	CBitFieldMaskBit8  = 0x80000000000000
+	CBitFieldMaskBit9  = 0x40000000000000
+	CBitFieldMaskBit10 = 0x20000000000000
+	CBitFieldMaskBit11 = 0x10000000000000
+	CBitFieldMaskBit12 = 0x8000000000000
+	CBitFieldMaskBit13 = 0x4000000000000
+	CBitFieldMaskBit14 = 0x2000000000000
+	CBitFieldMaskBit15 = 0x1000000000000
+	CBitFieldMaskBit16 = 0x800000000000
+	CBitFieldMaskBit17 = 0x400000000000
+	CBitFieldMaskBit18 = 0x200000000000
+	CBitFieldMaskBit19 = 0x100000000000
+	CBitFieldMaskBit20 = 0x80000000000
+	CBitFieldMaskBit21 = 0x40000000000
+	CBitFieldMaskBit22 = 0x20000000000
+	CBitFieldMaskBit23 = 0x10000000000
+	CBitFieldMaskBit24 = 0x8000000000
+	CBitFieldMaskBit25 = 0x4000000000
+	CBitFieldMaskBit26 = 0x2000000000
+	CBitFieldMaskBit27 = 0x1000000000
+	CBitFieldMaskBit28 = 0x800000000
+	CBitFieldMaskBit29 = 0x400000000
+	CBitFieldMaskBit30 = 0x200000000
+	CBitFieldMaskBit31 = 0x100000000
+	CBitFieldMaskBit32 = 0x80000000
+	CBitFieldMaskBit33 = 0x40000000
+	CBitFieldMaskBit34 = 0x20000000
+	CBitFieldMaskBit35 = 0x10000000
+	CBitFieldMaskBit36 = 0x8000000
+	CBitFieldMaskBit37 = 0x4000000
+	CBitFieldMaskBit38 = 0x2000000
+	CBitFieldMaskBit39 = 0x1000000
+	CBitFieldMaskBit40 = 0x800000
+	CBitFieldMaskBit41 = 0x400000
+	CBitFieldMaskBit42 = 0x200000
+	CBitFieldMaskBit43 = 0x100000
+	CBitFieldMaskBit44 = 0x80000
+	CBitFieldMaskBit45 = 0x40000
+	CBitFieldMaskBit46 = 0x20000
+	CBitFieldMaskBit47 = 0x10000
+	CBitFieldMaskBit48 = 0x8000
+	CBitFieldMaskBit49 = 0x4000
+	CBitFieldMaskBit50 = 0x2000
+	CBitFieldMaskBit51 = 0x1000
+	CBitFieldMaskBit52 = 0x800
+	CBitFieldMaskBit53 = 0x400
+	CBitFieldMaskBit54 = 0x200
+	CBitFieldMaskBit55 = 0x100
+	CBitFieldMaskBit56 = 0x80
+	CBitFieldMaskBit57 = 0x40
+	CBitFieldMaskBit58 = 0x20
+	CBitFieldMaskBit59 = 0x10
+	CBitFieldMaskBit60 = 0x8
+	CBitFieldMaskBit61 = 0x4
+	CBitFieldMaskBit62 = 0x2
+	CBitFieldMaskBit63 = 0x1
+)
+
+type SockaddrStorage struct {
+	Family uint16
+	_      [118]int8
+	_      uint64
+}
+
+type HDGeometry struct {
+	Heads     uint8
+	Sectors   uint8
+	Cylinders uint16
+	Start     uint64
+}
+
+type Statfs_t struct {
+	Type    int64
+	Bsize   int64
+	Frsize  int64
+	Blocks  uint64
+	Bfree   uint64
+	Files   uint64
+	Ffree   uint64
+	Bavail  uint64
+	Fsid    Fsid
+	Namelen int64
+	Flags   int64
+	Spare   [5]int64
+}
+
+type TpacketHdr struct {
+	Status  uint64
+	Len     uint32
+	Snaplen uint32
+	Mac     uint16
+	Net     uint16
+	Sec     uint32
+	Usec    uint32
+	_       [4]byte
+}
+
+const (
+	SizeofTpacketHdr = 0x20
+)
+
+type RTCPLLInfo struct {
+	Ctrl    int32
+	Value   int32
+	Max     int32
+	Min     int32
+	Posmult int32
+	Negmult int32
+	Clock   int64
+}
+
+type BlkpgPartition struct {
+	Start   int64
+	Length  int64
+	Pno     int32
+	Devname [64]uint8
+	Volname [64]uint8
+	_       [4]byte
+}
+
+const (
+	BLKPG = 0x20001269
+)
+
+type XDPUmemReg struct {
+	Addr     uint64
+	Len      uint64
+	Size     uint32
+	Headroom uint32
+	Flags    uint32
+	_        [4]byte
+}
+
+type CryptoUserAlg struct {
+	Name        [64]int8
+	Driver_name [64]int8
+	Module_name [64]int8
+	Type        uint32
+	Mask        uint32
+	Refcnt      uint32
+	Flags       uint32
+}
+
+type CryptoStatAEAD struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatAKCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Verify_cnt   uint64
+	Sign_cnt     uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCompress struct {
+	Type            [64]int8
+	Compress_cnt    uint64
+	Compress_tlen   uint64
+	Decompress_cnt  uint64
+	Decompress_tlen uint64
+	Err_cnt         uint64
+}
+
+type CryptoStatHash struct {
+	Type      [64]int8
+	Hash_cnt  uint64
+	Hash_tlen uint64
+	Err_cnt   uint64
+}
+
+type CryptoStatKPP struct {
+	Type                      [64]int8
+	Setsecret_cnt             uint64
+	Generate_public_key_cnt   uint64
+	Compute_shared_secret_cnt uint64
+	Err_cnt                   uint64
+}
+
+type CryptoStatRNG struct {
+	Type          [64]int8
+	Generate_cnt  uint64
+	Generate_tlen uint64
+	Seed_cnt      uint64
+	Err_cnt       uint64
+}
+
+type CryptoStatLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportHash struct {
+	Type       [64]int8
+	Blocksize  uint32
+	Digestsize uint32
+}
+
+type CryptoReportCipher struct {
+	Type        [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+}
+
+type CryptoReportBlkCipher struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportAEAD struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Maxauthsize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportComp struct {
+	Type [64]int8
+}
+
+type CryptoReportRNG struct {
+	Type     [64]int8
+	Seedsize uint32
+}
+
+type CryptoReportAKCipher struct {
+	Type [64]int8
+}
+
+type CryptoReportKPP struct {
+	Type [64]int8
+}
+
+type CryptoReportAcomp struct {
+	Type [64]int8
+}
+
+type LoopInfo struct {
+	Number           int32
+	Device           uint32
+	Inode            uint64
+	Rdevice          uint32
+	Offset           int32
+	Encrypt_type     int32
+	Encrypt_key_size int32
+	Flags            int32
+	Name             [64]int8
+	Encrypt_key      [32]uint8
+	Init             [2]uint64
+	Reserved         [4]int8
+	_                [4]byte
+}
+
+type TIPCSubscr struct {
+	Seq     TIPCServiceRange
+	Timeout uint32
+	Filter  uint32
+	Handle  [8]int8
+}
+
+type TIPCSIOCLNReq struct {
+	Peer     uint32
+	Id       uint32
+	Linkname [68]int8
+}
+
+type TIPCSIOCNodeIDReq struct {
+	Peer uint32
+	Id   [16]int8
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_mips64le.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_mips64le.go
new file mode 100644
index 000000000..99761aa9a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_mips64le.go
@@ -0,0 +1,603 @@
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include linux/types.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build mips64le,linux
+
+package unix
+
+const (
+	SizeofPtr  = 0x8
+	SizeofLong = 0x8
+)
+
+type (
+	_C_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Timex struct {
+	Modes     uint32
+	Offset    int64
+	Freq      int64
+	Maxerror  int64
+	Esterror  int64
+	Status    int32
+	Constant  int64
+	Precision int64
+	Tolerance int64
+	Time      Timeval
+	Tick      int64
+	Ppsfreq   int64
+	Jitter    int64
+	Shift     int32
+	Stabil    int64
+	Jitcnt    int64
+	Calcnt    int64
+	Errcnt    int64
+	Stbcnt    int64
+	Tai       int32
+	_         [44]byte
+}
+
+type Time_t int64
+
+type Tms struct {
+	Utime  int64
+	Stime  int64
+	Cutime int64
+	Cstime int64
+}
+
+type Utimbuf struct {
+	Actime  int64
+	Modtime int64
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Stat_t struct {
+	Dev     uint32
+	Pad1    [3]uint32
+	Ino     uint64
+	Mode    uint32
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	Rdev    uint32
+	Pad2    [3]uint32
+	Size    int64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Blksize uint32
+	Pad4    uint32
+	Blocks  int64
+}
+
+type Dirent struct {
+	Ino    uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Name   [256]int8
+	_      [5]byte
+}
+
+type Flock_t struct {
+	Type   int16
+	Whence int16
+	Start  int64
+	Len    int64
+	Pid    int32
+	_      [4]byte
+}
+
+type DmNameList struct {
+	Dev  uint64
+	Next uint32
+	Name [0]byte
+	_    [4]byte
+}
+
+const (
+	FADV_DONTNEED = 0x4
+	FADV_NOREUSE  = 0x5
+)
+
+type RawSockaddr struct {
+	Family uint16
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [96]int8
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	_          [4]byte
+}
+
+type Cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+const (
+	SizeofIovec   = 0x10
+	SizeofMsghdr  = 0x38
+	SizeofCmsghdr = 0x10
+)
+
+const (
+	SizeofSockFprog = 0x10
+)
+
+type PtraceRegs struct {
+	Regs     [32]uint64
+	Lo       uint64
+	Hi       uint64
+	Epc      uint64
+	Badvaddr uint64
+	Status   uint64
+	Cause    uint64
+}
+
+type FdSet struct {
+	Bits [16]int64
+}
+
+type Sysinfo_t struct {
+	Uptime    int64
+	Loads     [3]uint64
+	Totalram  uint64
+	Freeram   uint64
+	Sharedram uint64
+	Bufferram uint64
+	Totalswap uint64
+	Freeswap  uint64
+	Procs     uint16
+	Pad       uint16
+	Totalhigh uint64
+	Freehigh  uint64
+	Unit      uint32
+	_         [0]int8
+	_         [4]byte
+}
+
+type Ustat_t struct {
+	Tfree  int32
+	Tinode uint64
+	Fname  [6]int8
+	Fpack  [6]int8
+	_      [4]byte
+}
+
+type EpollEvent struct {
+	Events uint32
+	_      int32
+	Fd     int32
+	Pad    int32
+}
+
+const (
+	POLLRDHUP = 0x2000
+)
+
+type Sigset_t struct {
+	Val [16]uint64
+}
+
+const _C__NSIG = 0x80
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Line   uint8
+	Cc     [23]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Taskstats struct {
+	Version                   uint16
+	Ac_exitcode               uint32
+	Ac_flag                   uint8
+	Ac_nice                   uint8
+	Cpu_count                 uint64
+	Cpu_delay_total           uint64
+	Blkio_count               uint64
+	Blkio_delay_total         uint64
+	Swapin_count              uint64
+	Swapin_delay_total        uint64
+	Cpu_run_real_total        uint64
+	Cpu_run_virtual_total     uint64
+	Ac_comm                   [32]int8
+	Ac_sched                  uint8
+	Ac_pad                    [3]uint8
+	_                         [4]byte
+	Ac_uid                    uint32
+	Ac_gid                    uint32
+	Ac_pid                    uint32
+	Ac_ppid                   uint32
+	Ac_btime                  uint32
+	Ac_etime                  uint64
+	Ac_utime                  uint64
+	Ac_stime                  uint64
+	Ac_minflt                 uint64
+	Ac_majflt                 uint64
+	Coremem                   uint64
+	Virtmem                   uint64
+	Hiwater_rss               uint64
+	Hiwater_vm                uint64
+	Read_char                 uint64
+	Write_char                uint64
+	Read_syscalls             uint64
+	Write_syscalls            uint64
+	Read_bytes                uint64
+	Write_bytes               uint64
+	Cancelled_write_bytes     uint64
+	Nvcsw                     uint64
+	Nivcsw                    uint64
+	Ac_utimescaled            uint64
+	Ac_stimescaled            uint64
+	Cpu_scaled_run_real_total uint64
+	Freepages_count           uint64
+	Freepages_delay_total     uint64
+	Thrashing_count           uint64
+	Thrashing_delay_total     uint64
+	Ac_btime64                uint64
+}
+
+type cpuMask uint64
+
+const (
+	_NCPUBITS = 0x40
+)
+
+const (
+	CBitFieldMaskBit0  = 0x1
+	CBitFieldMaskBit1  = 0x2
+	CBitFieldMaskBit2  = 0x4
+	CBitFieldMaskBit3  = 0x8
+	CBitFieldMaskBit4  = 0x10
+	CBitFieldMaskBit5  = 0x20
+	CBitFieldMaskBit6  = 0x40
+	CBitFieldMaskBit7  = 0x80
+	CBitFieldMaskBit8  = 0x100
+	CBitFieldMaskBit9  = 0x200
+	CBitFieldMaskBit10 = 0x400
+	CBitFieldMaskBit11 = 0x800
+	CBitFieldMaskBit12 = 0x1000
+	CBitFieldMaskBit13 = 0x2000
+	CBitFieldMaskBit14 = 0x4000
+	CBitFieldMaskBit15 = 0x8000
+	CBitFieldMaskBit16 = 0x10000
+	CBitFieldMaskBit17 = 0x20000
+	CBitFieldMaskBit18 = 0x40000
+	CBitFieldMaskBit19 = 0x80000
+	CBitFieldMaskBit20 = 0x100000
+	CBitFieldMaskBit21 = 0x200000
+	CBitFieldMaskBit22 = 0x400000
+	CBitFieldMaskBit23 = 0x800000
+	CBitFieldMaskBit24 = 0x1000000
+	CBitFieldMaskBit25 = 0x2000000
+	CBitFieldMaskBit26 = 0x4000000
+	CBitFieldMaskBit27 = 0x8000000
+	CBitFieldMaskBit28 = 0x10000000
+	CBitFieldMaskBit29 = 0x20000000
+	CBitFieldMaskBit30 = 0x40000000
+	CBitFieldMaskBit31 = 0x80000000
+	CBitFieldMaskBit32 = 0x100000000
+	CBitFieldMaskBit33 = 0x200000000
+	CBitFieldMaskBit34 = 0x400000000
+	CBitFieldMaskBit35 = 0x800000000
+	CBitFieldMaskBit36 = 0x1000000000
+	CBitFieldMaskBit37 = 0x2000000000
+	CBitFieldMaskBit38 = 0x4000000000
+	CBitFieldMaskBit39 = 0x8000000000
+	CBitFieldMaskBit40 = 0x10000000000
+	CBitFieldMaskBit41 = 0x20000000000
+	CBitFieldMaskBit42 = 0x40000000000
+	CBitFieldMaskBit43 = 0x80000000000
+	CBitFieldMaskBit44 = 0x100000000000
+	CBitFieldMaskBit45 = 0x200000000000
+	CBitFieldMaskBit46 = 0x400000000000
+	CBitFieldMaskBit47 = 0x800000000000
+	CBitFieldMaskBit48 = 0x1000000000000
+	CBitFieldMaskBit49 = 0x2000000000000
+	CBitFieldMaskBit50 = 0x4000000000000
+	CBitFieldMaskBit51 = 0x8000000000000
+	CBitFieldMaskBit52 = 0x10000000000000
+	CBitFieldMaskBit53 = 0x20000000000000
+	CBitFieldMaskBit54 = 0x40000000000000
+	CBitFieldMaskBit55 = 0x80000000000000
+	CBitFieldMaskBit56 = 0x100000000000000
+	CBitFieldMaskBit57 = 0x200000000000000
+	CBitFieldMaskBit58 = 0x400000000000000
+	CBitFieldMaskBit59 = 0x800000000000000
+	CBitFieldMaskBit60 = 0x1000000000000000
+	CBitFieldMaskBit61 = 0x2000000000000000
+	CBitFieldMaskBit62 = 0x4000000000000000
+	CBitFieldMaskBit63 = 0x8000000000000000
+)
+
+type SockaddrStorage struct {
+	Family uint16
+	_      [118]int8
+	_      uint64
+}
+
+type HDGeometry struct {
+	Heads     uint8
+	Sectors   uint8
+	Cylinders uint16
+	Start     uint64
+}
+
+type Statfs_t struct {
+	Type    int64
+	Bsize   int64
+	Frsize  int64
+	Blocks  uint64
+	Bfree   uint64
+	Files   uint64
+	Ffree   uint64
+	Bavail  uint64
+	Fsid    Fsid
+	Namelen int64
+	Flags   int64
+	Spare   [5]int64
+}
+
+type TpacketHdr struct {
+	Status  uint64
+	Len     uint32
+	Snaplen uint32
+	Mac     uint16
+	Net     uint16
+	Sec     uint32
+	Usec    uint32
+	_       [4]byte
+}
+
+const (
+	SizeofTpacketHdr = 0x20
+)
+
+type RTCPLLInfo struct {
+	Ctrl    int32
+	Value   int32
+	Max     int32
+	Min     int32
+	Posmult int32
+	Negmult int32
+	Clock   int64
+}
+
+type BlkpgPartition struct {
+	Start   int64
+	Length  int64
+	Pno     int32
+	Devname [64]uint8
+	Volname [64]uint8
+	_       [4]byte
+}
+
+const (
+	BLKPG = 0x20001269
+)
+
+type XDPUmemReg struct {
+	Addr     uint64
+	Len      uint64
+	Size     uint32
+	Headroom uint32
+	Flags    uint32
+	_        [4]byte
+}
+
+type CryptoUserAlg struct {
+	Name        [64]int8
+	Driver_name [64]int8
+	Module_name [64]int8
+	Type        uint32
+	Mask        uint32
+	Refcnt      uint32
+	Flags       uint32
+}
+
+type CryptoStatAEAD struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatAKCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Verify_cnt   uint64
+	Sign_cnt     uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCompress struct {
+	Type            [64]int8
+	Compress_cnt    uint64
+	Compress_tlen   uint64
+	Decompress_cnt  uint64
+	Decompress_tlen uint64
+	Err_cnt         uint64
+}
+
+type CryptoStatHash struct {
+	Type      [64]int8
+	Hash_cnt  uint64
+	Hash_tlen uint64
+	Err_cnt   uint64
+}
+
+type CryptoStatKPP struct {
+	Type                      [64]int8
+	Setsecret_cnt             uint64
+	Generate_public_key_cnt   uint64
+	Compute_shared_secret_cnt uint64
+	Err_cnt                   uint64
+}
+
+type CryptoStatRNG struct {
+	Type          [64]int8
+	Generate_cnt  uint64
+	Generate_tlen uint64
+	Seed_cnt      uint64
+	Err_cnt       uint64
+}
+
+type CryptoStatLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportHash struct {
+	Type       [64]int8
+	Blocksize  uint32
+	Digestsize uint32
+}
+
+type CryptoReportCipher struct {
+	Type        [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+}
+
+type CryptoReportBlkCipher struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportAEAD struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Maxauthsize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportComp struct {
+	Type [64]int8
+}
+
+type CryptoReportRNG struct {
+	Type     [64]int8
+	Seedsize uint32
+}
+
+type CryptoReportAKCipher struct {
+	Type [64]int8
+}
+
+type CryptoReportKPP struct {
+	Type [64]int8
+}
+
+type CryptoReportAcomp struct {
+	Type [64]int8
+}
+
+type LoopInfo struct {
+	Number           int32
+	Device           uint32
+	Inode            uint64
+	Rdevice          uint32
+	Offset           int32
+	Encrypt_type     int32
+	Encrypt_key_size int32
+	Flags            int32
+	Name             [64]int8
+	Encrypt_key      [32]uint8
+	Init             [2]uint64
+	Reserved         [4]int8
+	_                [4]byte
+}
+
+type TIPCSubscr struct {
+	Seq     TIPCServiceRange
+	Timeout uint32
+	Filter  uint32
+	Handle  [8]int8
+}
+
+type TIPCSIOCLNReq struct {
+	Peer     uint32
+	Id       uint32
+	Linkname [68]int8
+}
+
+type TIPCSIOCNodeIDReq struct {
+	Peer uint32
+	Id   [16]int8
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_mipsle.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_mipsle.go
new file mode 100644
index 000000000..293690348
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_mipsle.go
@@ -0,0 +1,604 @@
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include linux/types.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build mipsle,linux
+
+package unix
+
+const (
+	SizeofPtr  = 0x4
+	SizeofLong = 0x4
+)
+
+type (
+	_C_long int32
+)
+
+type Timespec struct {
+	Sec  int32
+	Nsec int32
+}
+
+type Timeval struct {
+	Sec  int32
+	Usec int32
+}
+
+type Timex struct {
+	Modes     uint32
+	Offset    int32
+	Freq      int32
+	Maxerror  int32
+	Esterror  int32
+	Status    int32
+	Constant  int32
+	Precision int32
+	Tolerance int32
+	Time      Timeval
+	Tick      int32
+	Ppsfreq   int32
+	Jitter    int32
+	Shift     int32
+	Stabil    int32
+	Jitcnt    int32
+	Calcnt    int32
+	Errcnt    int32
+	Stbcnt    int32
+	Tai       int32
+	_         [44]byte
+}
+
+type Time_t int32
+
+type Tms struct {
+	Utime  int32
+	Stime  int32
+	Cutime int32
+	Cstime int32
+}
+
+type Utimbuf struct {
+	Actime  int32
+	Modtime int32
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int32
+	Ixrss    int32
+	Idrss    int32
+	Isrss    int32
+	Minflt   int32
+	Majflt   int32
+	Nswap    int32
+	Inblock  int32
+	Oublock  int32
+	Msgsnd   int32
+	Msgrcv   int32
+	Nsignals int32
+	Nvcsw    int32
+	Nivcsw   int32
+}
+
+type Stat_t struct {
+	Dev     uint32
+	Pad1    [3]int32
+	Ino     uint64
+	Mode    uint32
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	Rdev    uint32
+	Pad2    [3]int32
+	Size    int64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Blksize int32
+	Pad4    int32
+	Blocks  int64
+	Pad5    [14]int32
+}
+
+type Dirent struct {
+	Ino    uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Name   [256]int8
+	_      [5]byte
+}
+
+type Flock_t struct {
+	Type   int16
+	Whence int16
+	_      [4]byte
+	Start  int64
+	Len    int64
+	Pid    int32
+	_      [4]byte
+}
+
+type DmNameList struct {
+	Dev  uint64
+	Next uint32
+	Name [0]byte
+	_    [4]byte
+}
+
+const (
+	FADV_DONTNEED = 0x4
+	FADV_NOREUSE  = 0x5
+)
+
+type RawSockaddr struct {
+	Family uint16
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [96]int8
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+const (
+	SizeofIovec   = 0x8
+	SizeofMsghdr  = 0x1c
+	SizeofCmsghdr = 0xc
+)
+
+const (
+	SizeofSockFprog = 0x8
+)
+
+type PtraceRegs struct {
+	Regs     [32]uint64
+	Lo       uint64
+	Hi       uint64
+	Epc      uint64
+	Badvaddr uint64
+	Status   uint64
+	Cause    uint64
+}
+
+type FdSet struct {
+	Bits [32]int32
+}
+
+type Sysinfo_t struct {
+	Uptime    int32
+	Loads     [3]uint32
+	Totalram  uint32
+	Freeram   uint32
+	Sharedram uint32
+	Bufferram uint32
+	Totalswap uint32
+	Freeswap  uint32
+	Procs     uint16
+	Pad       uint16
+	Totalhigh uint32
+	Freehigh  uint32
+	Unit      uint32
+	_         [8]int8
+}
+
+type Ustat_t struct {
+	Tfree  int32
+	Tinode uint32
+	Fname  [6]int8
+	Fpack  [6]int8
+}
+
+type EpollEvent struct {
+	Events uint32
+	PadFd  int32
+	Fd     int32
+	Pad    int32
+}
+
+const (
+	POLLRDHUP = 0x2000
+)
+
+type Sigset_t struct {
+	Val [32]uint32
+}
+
+const _C__NSIG = 0x80
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Line   uint8
+	Cc     [23]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Taskstats struct {
+	Version                   uint16
+	Ac_exitcode               uint32
+	Ac_flag                   uint8
+	Ac_nice                   uint8
+	_                         [4]byte
+	Cpu_count                 uint64
+	Cpu_delay_total           uint64
+	Blkio_count               uint64
+	Blkio_delay_total         uint64
+	Swapin_count              uint64
+	Swapin_delay_total        uint64
+	Cpu_run_real_total        uint64
+	Cpu_run_virtual_total     uint64
+	Ac_comm                   [32]int8
+	Ac_sched                  uint8
+	Ac_pad                    [3]uint8
+	_                         [4]byte
+	Ac_uid                    uint32
+	Ac_gid                    uint32
+	Ac_pid                    uint32
+	Ac_ppid                   uint32
+	Ac_btime                  uint32
+	_                         [4]byte
+	Ac_etime                  uint64
+	Ac_utime                  uint64
+	Ac_stime                  uint64
+	Ac_minflt                 uint64
+	Ac_majflt                 uint64
+	Coremem                   uint64
+	Virtmem                   uint64
+	Hiwater_rss               uint64
+	Hiwater_vm                uint64
+	Read_char                 uint64
+	Write_char                uint64
+	Read_syscalls             uint64
+	Write_syscalls            uint64
+	Read_bytes                uint64
+	Write_bytes               uint64
+	Cancelled_write_bytes     uint64
+	Nvcsw                     uint64
+	Nivcsw                    uint64
+	Ac_utimescaled            uint64
+	Ac_stimescaled            uint64
+	Cpu_scaled_run_real_total uint64
+	Freepages_count           uint64
+	Freepages_delay_total     uint64
+	Thrashing_count           uint64
+	Thrashing_delay_total     uint64
+	Ac_btime64                uint64
+}
+
+type cpuMask uint32
+
+const (
+	_NCPUBITS = 0x20
+)
+
+const (
+	CBitFieldMaskBit0  = 0x1
+	CBitFieldMaskBit1  = 0x2
+	CBitFieldMaskBit2  = 0x4
+	CBitFieldMaskBit3  = 0x8
+	CBitFieldMaskBit4  = 0x10
+	CBitFieldMaskBit5  = 0x20
+	CBitFieldMaskBit6  = 0x40
+	CBitFieldMaskBit7  = 0x80
+	CBitFieldMaskBit8  = 0x100
+	CBitFieldMaskBit9  = 0x200
+	CBitFieldMaskBit10 = 0x400
+	CBitFieldMaskBit11 = 0x800
+	CBitFieldMaskBit12 = 0x1000
+	CBitFieldMaskBit13 = 0x2000
+	CBitFieldMaskBit14 = 0x4000
+	CBitFieldMaskBit15 = 0x8000
+	CBitFieldMaskBit16 = 0x10000
+	CBitFieldMaskBit17 = 0x20000
+	CBitFieldMaskBit18 = 0x40000
+	CBitFieldMaskBit19 = 0x80000
+	CBitFieldMaskBit20 = 0x100000
+	CBitFieldMaskBit21 = 0x200000
+	CBitFieldMaskBit22 = 0x400000
+	CBitFieldMaskBit23 = 0x800000
+	CBitFieldMaskBit24 = 0x1000000
+	CBitFieldMaskBit25 = 0x2000000
+	CBitFieldMaskBit26 = 0x4000000
+	CBitFieldMaskBit27 = 0x8000000
+	CBitFieldMaskBit28 = 0x10000000
+	CBitFieldMaskBit29 = 0x20000000
+	CBitFieldMaskBit30 = 0x40000000
+	CBitFieldMaskBit31 = 0x80000000
+	CBitFieldMaskBit32 = 0x100000000
+	CBitFieldMaskBit33 = 0x200000000
+	CBitFieldMaskBit34 = 0x400000000
+	CBitFieldMaskBit35 = 0x800000000
+	CBitFieldMaskBit36 = 0x1000000000
+	CBitFieldMaskBit37 = 0x2000000000
+	CBitFieldMaskBit38 = 0x4000000000
+	CBitFieldMaskBit39 = 0x8000000000
+	CBitFieldMaskBit40 = 0x10000000000
+	CBitFieldMaskBit41 = 0x20000000000
+	CBitFieldMaskBit42 = 0x40000000000
+	CBitFieldMaskBit43 = 0x80000000000
+	CBitFieldMaskBit44 = 0x100000000000
+	CBitFieldMaskBit45 = 0x200000000000
+	CBitFieldMaskBit46 = 0x400000000000
+	CBitFieldMaskBit47 = 0x800000000000
+	CBitFieldMaskBit48 = 0x1000000000000
+	CBitFieldMaskBit49 = 0x2000000000000
+	CBitFieldMaskBit50 = 0x4000000000000
+	CBitFieldMaskBit51 = 0x8000000000000
+	CBitFieldMaskBit52 = 0x10000000000000
+	CBitFieldMaskBit53 = 0x20000000000000
+	CBitFieldMaskBit54 = 0x40000000000000
+	CBitFieldMaskBit55 = 0x80000000000000
+	CBitFieldMaskBit56 = 0x100000000000000
+	CBitFieldMaskBit57 = 0x200000000000000
+	CBitFieldMaskBit58 = 0x400000000000000
+	CBitFieldMaskBit59 = 0x800000000000000
+	CBitFieldMaskBit60 = 0x1000000000000000
+	CBitFieldMaskBit61 = 0x2000000000000000
+	CBitFieldMaskBit62 = 0x4000000000000000
+	CBitFieldMaskBit63 = 0x8000000000000000
+)
+
+type SockaddrStorage struct {
+	Family uint16
+	_      [122]int8
+	_      uint32
+}
+
+type HDGeometry struct {
+	Heads     uint8
+	Sectors   uint8
+	Cylinders uint16
+	Start     uint32
+}
+
+type Statfs_t struct {
+	Type    int32
+	Bsize   int32
+	Frsize  int32
+	_       [4]byte
+	Blocks  uint64
+	Bfree   uint64
+	Files   uint64
+	Ffree   uint64
+	Bavail  uint64
+	Fsid    Fsid
+	Namelen int32
+	Flags   int32
+	Spare   [5]int32
+	_       [4]byte
+}
+
+type TpacketHdr struct {
+	Status  uint32
+	Len     uint32
+	Snaplen uint32
+	Mac     uint16
+	Net     uint16
+	Sec     uint32
+	Usec    uint32
+}
+
+const (
+	SizeofTpacketHdr = 0x18
+)
+
+type RTCPLLInfo struct {
+	Ctrl    int32
+	Value   int32
+	Max     int32
+	Min     int32
+	Posmult int32
+	Negmult int32
+	Clock   int32
+}
+
+type BlkpgPartition struct {
+	Start   int64
+	Length  int64
+	Pno     int32
+	Devname [64]uint8
+	Volname [64]uint8
+	_       [4]byte
+}
+
+const (
+	BLKPG = 0x20001269
+)
+
+type XDPUmemReg struct {
+	Addr     uint64
+	Len      uint64
+	Size     uint32
+	Headroom uint32
+	Flags    uint32
+	_        [4]byte
+}
+
+type CryptoUserAlg struct {
+	Name        [64]int8
+	Driver_name [64]int8
+	Module_name [64]int8
+	Type        uint32
+	Mask        uint32
+	Refcnt      uint32
+	Flags       uint32
+}
+
+type CryptoStatAEAD struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatAKCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Verify_cnt   uint64
+	Sign_cnt     uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCompress struct {
+	Type            [64]int8
+	Compress_cnt    uint64
+	Compress_tlen   uint64
+	Decompress_cnt  uint64
+	Decompress_tlen uint64
+	Err_cnt         uint64
+}
+
+type CryptoStatHash struct {
+	Type      [64]int8
+	Hash_cnt  uint64
+	Hash_tlen uint64
+	Err_cnt   uint64
+}
+
+type CryptoStatKPP struct {
+	Type                      [64]int8
+	Setsecret_cnt             uint64
+	Generate_public_key_cnt   uint64
+	Compute_shared_secret_cnt uint64
+	Err_cnt                   uint64
+}
+
+type CryptoStatRNG struct {
+	Type          [64]int8
+	Generate_cnt  uint64
+	Generate_tlen uint64
+	Seed_cnt      uint64
+	Err_cnt       uint64
+}
+
+type CryptoStatLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportHash struct {
+	Type       [64]int8
+	Blocksize  uint32
+	Digestsize uint32
+}
+
+type CryptoReportCipher struct {
+	Type        [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+}
+
+type CryptoReportBlkCipher struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportAEAD struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Maxauthsize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportComp struct {
+	Type [64]int8
+}
+
+type CryptoReportRNG struct {
+	Type     [64]int8
+	Seedsize uint32
+}
+
+type CryptoReportAKCipher struct {
+	Type [64]int8
+}
+
+type CryptoReportKPP struct {
+	Type [64]int8
+}
+
+type CryptoReportAcomp struct {
+	Type [64]int8
+}
+
+type LoopInfo struct {
+	Number           int32
+	Device           uint32
+	Inode            uint32
+	Rdevice          uint32
+	Offset           int32
+	Encrypt_type     int32
+	Encrypt_key_size int32
+	Flags            int32
+	Name             [64]int8
+	Encrypt_key      [32]uint8
+	Init             [2]uint32
+	Reserved         [4]int8
+}
+
+type TIPCSubscr struct {
+	Seq     TIPCServiceRange
+	Timeout uint32
+	Filter  uint32
+	Handle  [8]int8
+}
+
+type TIPCSIOCLNReq struct {
+	Peer     uint32
+	Id       uint32
+	Linkname [68]int8
+}
+
+type TIPCSIOCNodeIDReq struct {
+	Peer uint32
+	Id   [16]int8
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64.go
new file mode 100644
index 000000000..0ca856e55
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64.go
@@ -0,0 +1,610 @@
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include linux/types.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build ppc64,linux
+
+package unix
+
+const (
+	SizeofPtr  = 0x8
+	SizeofLong = 0x8
+)
+
+type (
+	_C_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Timex struct {
+	Modes     uint32
+	Offset    int64
+	Freq      int64
+	Maxerror  int64
+	Esterror  int64
+	Status    int32
+	Constant  int64
+	Precision int64
+	Tolerance int64
+	Time      Timeval
+	Tick      int64
+	Ppsfreq   int64
+	Jitter    int64
+	Shift     int32
+	Stabil    int64
+	Jitcnt    int64
+	Calcnt    int64
+	Errcnt    int64
+	Stbcnt    int64
+	Tai       int32
+	_         [44]byte
+}
+
+type Time_t int64
+
+type Tms struct {
+	Utime  int64
+	Stime  int64
+	Cutime int64
+	Cstime int64
+}
+
+type Utimbuf struct {
+	Actime  int64
+	Modtime int64
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Stat_t struct {
+	Dev     uint64
+	Ino     uint64
+	Nlink   uint64
+	Mode    uint32
+	Uid     uint32
+	Gid     uint32
+	_       int32
+	Rdev    uint64
+	Size    int64
+	Blksize int64
+	Blocks  int64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	_       uint64
+	_       uint64
+	_       uint64
+}
+
+type Dirent struct {
+	Ino    uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Name   [256]uint8
+	_      [5]byte
+}
+
+type Flock_t struct {
+	Type   int16
+	Whence int16
+	Start  int64
+	Len    int64
+	Pid    int32
+	_      [4]byte
+}
+
+type DmNameList struct {
+	Dev  uint64
+	Next uint32
+	Name [0]byte
+	_    [4]byte
+}
+
+const (
+	FADV_DONTNEED = 0x4
+	FADV_NOREUSE  = 0x5
+)
+
+type RawSockaddr struct {
+	Family uint16
+	Data   [14]uint8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [96]uint8
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	_          [4]byte
+}
+
+type Cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+const (
+	SizeofIovec   = 0x10
+	SizeofMsghdr  = 0x38
+	SizeofCmsghdr = 0x10
+)
+
+const (
+	SizeofSockFprog = 0x10
+)
+
+type PtraceRegs struct {
+	Gpr       [32]uint64
+	Nip       uint64
+	Msr       uint64
+	Orig_gpr3 uint64
+	Ctr       uint64
+	Link      uint64
+	Xer       uint64
+	Ccr       uint64
+	Softe     uint64
+	Trap      uint64
+	Dar       uint64
+	Dsisr     uint64
+	Result    uint64
+}
+
+type FdSet struct {
+	Bits [16]int64
+}
+
+type Sysinfo_t struct {
+	Uptime    int64
+	Loads     [3]uint64
+	Totalram  uint64
+	Freeram   uint64
+	Sharedram uint64
+	Bufferram uint64
+	Totalswap uint64
+	Freeswap  uint64
+	Procs     uint16
+	Pad       uint16
+	Totalhigh uint64
+	Freehigh  uint64
+	Unit      uint32
+	_         [0]uint8
+	_         [4]byte
+}
+
+type Ustat_t struct {
+	Tfree  int32
+	Tinode uint64
+	Fname  [6]uint8
+	Fpack  [6]uint8
+	_      [4]byte
+}
+
+type EpollEvent struct {
+	Events uint32
+	_      int32
+	Fd     int32
+	Pad    int32
+}
+
+const (
+	POLLRDHUP = 0x2000
+)
+
+type Sigset_t struct {
+	Val [16]uint64
+}
+
+const _C__NSIG = 0x41
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [19]uint8
+	Line   uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Taskstats struct {
+	Version                   uint16
+	Ac_exitcode               uint32
+	Ac_flag                   uint8
+	Ac_nice                   uint8
+	Cpu_count                 uint64
+	Cpu_delay_total           uint64
+	Blkio_count               uint64
+	Blkio_delay_total         uint64
+	Swapin_count              uint64
+	Swapin_delay_total        uint64
+	Cpu_run_real_total        uint64
+	Cpu_run_virtual_total     uint64
+	Ac_comm                   [32]uint8
+	Ac_sched                  uint8
+	Ac_pad                    [3]uint8
+	_                         [4]byte
+	Ac_uid                    uint32
+	Ac_gid                    uint32
+	Ac_pid                    uint32
+	Ac_ppid                   uint32
+	Ac_btime                  uint32
+	Ac_etime                  uint64
+	Ac_utime                  uint64
+	Ac_stime                  uint64
+	Ac_minflt                 uint64
+	Ac_majflt                 uint64
+	Coremem                   uint64
+	Virtmem                   uint64
+	Hiwater_rss               uint64
+	Hiwater_vm                uint64
+	Read_char                 uint64
+	Write_char                uint64
+	Read_syscalls             uint64
+	Write_syscalls            uint64
+	Read_bytes                uint64
+	Write_bytes               uint64
+	Cancelled_write_bytes     uint64
+	Nvcsw                     uint64
+	Nivcsw                    uint64
+	Ac_utimescaled            uint64
+	Ac_stimescaled            uint64
+	Cpu_scaled_run_real_total uint64
+	Freepages_count           uint64
+	Freepages_delay_total     uint64
+	Thrashing_count           uint64
+	Thrashing_delay_total     uint64
+	Ac_btime64                uint64
+}
+
+type cpuMask uint64
+
+const (
+	_NCPUBITS = 0x40
+)
+
+const (
+	CBitFieldMaskBit0  = 0x8000000000000000
+	CBitFieldMaskBit1  = 0x4000000000000000
+	CBitFieldMaskBit2  = 0x2000000000000000
+	CBitFieldMaskBit3  = 0x1000000000000000
+	CBitFieldMaskBit4  = 0x800000000000000
+	CBitFieldMaskBit5  = 0x400000000000000
+	CBitFieldMaskBit6  = 0x200000000000000
+	CBitFieldMaskBit7  = 0x100000000000000
+	CBitFieldMaskBit8  = 0x80000000000000
+	CBitFieldMaskBit9  = 0x40000000000000
+	CBitFieldMaskBit10 = 0x20000000000000
+	CBitFieldMaskBit11 = 0x10000000000000
+	CBitFieldMaskBit12 = 0x8000000000000
+	CBitFieldMaskBit13 = 0x4000000000000
+	CBitFieldMaskBit14 = 0x2000000000000
+	CBitFieldMaskBit15 = 0x1000000000000
+	CBitFieldMaskBit16 = 0x800000000000
+	CBitFieldMaskBit17 = 0x400000000000
+	CBitFieldMaskBit18 = 0x200000000000
+	CBitFieldMaskBit19 = 0x100000000000
+	CBitFieldMaskBit20 = 0x80000000000
+	CBitFieldMaskBit21 = 0x40000000000
+	CBitFieldMaskBit22 = 0x20000000000
+	CBitFieldMaskBit23 = 0x10000000000
+	CBitFieldMaskBit24 = 0x8000000000
+	CBitFieldMaskBit25 = 0x4000000000
+	CBitFieldMaskBit26 = 0x2000000000
+	CBitFieldMaskBit27 = 0x1000000000
+	CBitFieldMaskBit28 = 0x800000000
+	CBitFieldMaskBit29 = 0x400000000
+	CBitFieldMaskBit30 = 0x200000000
+	CBitFieldMaskBit31 = 0x100000000
+	CBitFieldMaskBit32 = 0x80000000
+	CBitFieldMaskBit33 = 0x40000000
+	CBitFieldMaskBit34 = 0x20000000
+	CBitFieldMaskBit35 = 0x10000000
+	CBitFieldMaskBit36 = 0x8000000
+	CBitFieldMaskBit37 = 0x4000000
+	CBitFieldMaskBit38 = 0x2000000
+	CBitFieldMaskBit39 = 0x1000000
+	CBitFieldMaskBit40 = 0x800000
+	CBitFieldMaskBit41 = 0x400000
+	CBitFieldMaskBit42 = 0x200000
+	CBitFieldMaskBit43 = 0x100000
+	CBitFieldMaskBit44 = 0x80000
+	CBitFieldMaskBit45 = 0x40000
+	CBitFieldMaskBit46 = 0x20000
+	CBitFieldMaskBit47 = 0x10000
+	CBitFieldMaskBit48 = 0x8000
+	CBitFieldMaskBit49 = 0x4000
+	CBitFieldMaskBit50 = 0x2000
+	CBitFieldMaskBit51 = 0x1000
+	CBitFieldMaskBit52 = 0x800
+	CBitFieldMaskBit53 = 0x400
+	CBitFieldMaskBit54 = 0x200
+	CBitFieldMaskBit55 = 0x100
+	CBitFieldMaskBit56 = 0x80
+	CBitFieldMaskBit57 = 0x40
+	CBitFieldMaskBit58 = 0x20
+	CBitFieldMaskBit59 = 0x10
+	CBitFieldMaskBit60 = 0x8
+	CBitFieldMaskBit61 = 0x4
+	CBitFieldMaskBit62 = 0x2
+	CBitFieldMaskBit63 = 0x1
+)
+
+type SockaddrStorage struct {
+	Family uint16
+	_      [118]uint8
+	_      uint64
+}
+
+type HDGeometry struct {
+	Heads     uint8
+	Sectors   uint8
+	Cylinders uint16
+	Start     uint64
+}
+
+type Statfs_t struct {
+	Type    int64
+	Bsize   int64
+	Blocks  uint64
+	Bfree   uint64
+	Bavail  uint64
+	Files   uint64
+	Ffree   uint64
+	Fsid    Fsid
+	Namelen int64
+	Frsize  int64
+	Flags   int64
+	Spare   [4]int64
+}
+
+type TpacketHdr struct {
+	Status  uint64
+	Len     uint32
+	Snaplen uint32
+	Mac     uint16
+	Net     uint16
+	Sec     uint32
+	Usec    uint32
+	_       [4]byte
+}
+
+const (
+	SizeofTpacketHdr = 0x20
+)
+
+type RTCPLLInfo struct {
+	Ctrl    int32
+	Value   int32
+	Max     int32
+	Min     int32
+	Posmult int32
+	Negmult int32
+	Clock   int64
+}
+
+type BlkpgPartition struct {
+	Start   int64
+	Length  int64
+	Pno     int32
+	Devname [64]uint8
+	Volname [64]uint8
+	_       [4]byte
+}
+
+const (
+	BLKPG = 0x20001269
+)
+
+type XDPUmemReg struct {
+	Addr     uint64
+	Len      uint64
+	Size     uint32
+	Headroom uint32
+	Flags    uint32
+	_        [4]byte
+}
+
+type CryptoUserAlg struct {
+	Name        [64]uint8
+	Driver_name [64]uint8
+	Module_name [64]uint8
+	Type        uint32
+	Mask        uint32
+	Refcnt      uint32
+	Flags       uint32
+}
+
+type CryptoStatAEAD struct {
+	Type         [64]uint8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatAKCipher struct {
+	Type         [64]uint8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Verify_cnt   uint64
+	Sign_cnt     uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCipher struct {
+	Type         [64]uint8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCompress struct {
+	Type            [64]uint8
+	Compress_cnt    uint64
+	Compress_tlen   uint64
+	Decompress_cnt  uint64
+	Decompress_tlen uint64
+	Err_cnt         uint64
+}
+
+type CryptoStatHash struct {
+	Type      [64]uint8
+	Hash_cnt  uint64
+	Hash_tlen uint64
+	Err_cnt   uint64
+}
+
+type CryptoStatKPP struct {
+	Type                      [64]uint8
+	Setsecret_cnt             uint64
+	Generate_public_key_cnt   uint64
+	Compute_shared_secret_cnt uint64
+	Err_cnt                   uint64
+}
+
+type CryptoStatRNG struct {
+	Type          [64]uint8
+	Generate_cnt  uint64
+	Generate_tlen uint64
+	Seed_cnt      uint64
+	Err_cnt       uint64
+}
+
+type CryptoStatLarval struct {
+	Type [64]uint8
+}
+
+type CryptoReportLarval struct {
+	Type [64]uint8
+}
+
+type CryptoReportHash struct {
+	Type       [64]uint8
+	Blocksize  uint32
+	Digestsize uint32
+}
+
+type CryptoReportCipher struct {
+	Type        [64]uint8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+}
+
+type CryptoReportBlkCipher struct {
+	Type        [64]uint8
+	Geniv       [64]uint8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportAEAD struct {
+	Type        [64]uint8
+	Geniv       [64]uint8
+	Blocksize   uint32
+	Maxauthsize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportComp struct {
+	Type [64]uint8
+}
+
+type CryptoReportRNG struct {
+	Type     [64]uint8
+	Seedsize uint32
+}
+
+type CryptoReportAKCipher struct {
+	Type [64]uint8
+}
+
+type CryptoReportKPP struct {
+	Type [64]uint8
+}
+
+type CryptoReportAcomp struct {
+	Type [64]uint8
+}
+
+type LoopInfo struct {
+	Number           int32
+	Device           uint64
+	Inode            uint64
+	Rdevice          uint64
+	Offset           int32
+	Encrypt_type     int32
+	Encrypt_key_size int32
+	Flags            int32
+	Name             [64]uint8
+	Encrypt_key      [32]uint8
+	Init             [2]uint64
+	Reserved         [4]uint8
+	_                [4]byte
+}
+
+type TIPCSubscr struct {
+	Seq     TIPCServiceRange
+	Timeout uint32
+	Filter  uint32
+	Handle  [8]uint8
+}
+
+type TIPCSIOCLNReq struct {
+	Peer     uint32
+	Id       uint32
+	Linkname [68]uint8
+}
+
+type TIPCSIOCNodeIDReq struct {
+	Peer uint32
+	Id   [16]uint8
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64le.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64le.go
new file mode 100644
index 000000000..f50f6482e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64le.go
@@ -0,0 +1,610 @@
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include linux/types.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build ppc64le,linux
+
+package unix
+
+const (
+	SizeofPtr  = 0x8
+	SizeofLong = 0x8
+)
+
+type (
+	_C_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Timex struct {
+	Modes     uint32
+	Offset    int64
+	Freq      int64
+	Maxerror  int64
+	Esterror  int64
+	Status    int32
+	Constant  int64
+	Precision int64
+	Tolerance int64
+	Time      Timeval
+	Tick      int64
+	Ppsfreq   int64
+	Jitter    int64
+	Shift     int32
+	Stabil    int64
+	Jitcnt    int64
+	Calcnt    int64
+	Errcnt    int64
+	Stbcnt    int64
+	Tai       int32
+	_         [44]byte
+}
+
+type Time_t int64
+
+type Tms struct {
+	Utime  int64
+	Stime  int64
+	Cutime int64
+	Cstime int64
+}
+
+type Utimbuf struct {
+	Actime  int64
+	Modtime int64
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Stat_t struct {
+	Dev     uint64
+	Ino     uint64
+	Nlink   uint64
+	Mode    uint32
+	Uid     uint32
+	Gid     uint32
+	_       int32
+	Rdev    uint64
+	Size    int64
+	Blksize int64
+	Blocks  int64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	_       uint64
+	_       uint64
+	_       uint64
+}
+
+type Dirent struct {
+	Ino    uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Name   [256]uint8
+	_      [5]byte
+}
+
+type Flock_t struct {
+	Type   int16
+	Whence int16
+	Start  int64
+	Len    int64
+	Pid    int32
+	_      [4]byte
+}
+
+type DmNameList struct {
+	Dev  uint64
+	Next uint32
+	Name [0]byte
+	_    [4]byte
+}
+
+const (
+	FADV_DONTNEED = 0x4
+	FADV_NOREUSE  = 0x5
+)
+
+type RawSockaddr struct {
+	Family uint16
+	Data   [14]uint8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [96]uint8
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	_          [4]byte
+}
+
+type Cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+const (
+	SizeofIovec   = 0x10
+	SizeofMsghdr  = 0x38
+	SizeofCmsghdr = 0x10
+)
+
+const (
+	SizeofSockFprog = 0x10
+)
+
+type PtraceRegs struct {
+	Gpr       [32]uint64
+	Nip       uint64
+	Msr       uint64
+	Orig_gpr3 uint64
+	Ctr       uint64
+	Link      uint64
+	Xer       uint64
+	Ccr       uint64
+	Softe     uint64
+	Trap      uint64
+	Dar       uint64
+	Dsisr     uint64
+	Result    uint64
+}
+
+type FdSet struct {
+	Bits [16]int64
+}
+
+type Sysinfo_t struct {
+	Uptime    int64
+	Loads     [3]uint64
+	Totalram  uint64
+	Freeram   uint64
+	Sharedram uint64
+	Bufferram uint64
+	Totalswap uint64
+	Freeswap  uint64
+	Procs     uint16
+	Pad       uint16
+	Totalhigh uint64
+	Freehigh  uint64
+	Unit      uint32
+	_         [0]uint8
+	_         [4]byte
+}
+
+type Ustat_t struct {
+	Tfree  int32
+	Tinode uint64
+	Fname  [6]uint8
+	Fpack  [6]uint8
+	_      [4]byte
+}
+
+type EpollEvent struct {
+	Events uint32
+	_      int32
+	Fd     int32
+	Pad    int32
+}
+
+const (
+	POLLRDHUP = 0x2000
+)
+
+type Sigset_t struct {
+	Val [16]uint64
+}
+
+const _C__NSIG = 0x41
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [19]uint8
+	Line   uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Taskstats struct {
+	Version                   uint16
+	Ac_exitcode               uint32
+	Ac_flag                   uint8
+	Ac_nice                   uint8
+	Cpu_count                 uint64
+	Cpu_delay_total           uint64
+	Blkio_count               uint64
+	Blkio_delay_total         uint64
+	Swapin_count              uint64
+	Swapin_delay_total        uint64
+	Cpu_run_real_total        uint64
+	Cpu_run_virtual_total     uint64
+	Ac_comm                   [32]uint8
+	Ac_sched                  uint8
+	Ac_pad                    [3]uint8
+	_                         [4]byte
+	Ac_uid                    uint32
+	Ac_gid                    uint32
+	Ac_pid                    uint32
+	Ac_ppid                   uint32
+	Ac_btime                  uint32
+	Ac_etime                  uint64
+	Ac_utime                  uint64
+	Ac_stime                  uint64
+	Ac_minflt                 uint64
+	Ac_majflt                 uint64
+	Coremem                   uint64
+	Virtmem                   uint64
+	Hiwater_rss               uint64
+	Hiwater_vm                uint64
+	Read_char                 uint64
+	Write_char                uint64
+	Read_syscalls             uint64
+	Write_syscalls            uint64
+	Read_bytes                uint64
+	Write_bytes               uint64
+	Cancelled_write_bytes     uint64
+	Nvcsw                     uint64
+	Nivcsw                    uint64
+	Ac_utimescaled            uint64
+	Ac_stimescaled            uint64
+	Cpu_scaled_run_real_total uint64
+	Freepages_count           uint64
+	Freepages_delay_total     uint64
+	Thrashing_count           uint64
+	Thrashing_delay_total     uint64
+	Ac_btime64                uint64
+}
+
+type cpuMask uint64
+
+const (
+	_NCPUBITS = 0x40
+)
+
+const (
+	CBitFieldMaskBit0  = 0x1
+	CBitFieldMaskBit1  = 0x2
+	CBitFieldMaskBit2  = 0x4
+	CBitFieldMaskBit3  = 0x8
+	CBitFieldMaskBit4  = 0x10
+	CBitFieldMaskBit5  = 0x20
+	CBitFieldMaskBit6  = 0x40
+	CBitFieldMaskBit7  = 0x80
+	CBitFieldMaskBit8  = 0x100
+	CBitFieldMaskBit9  = 0x200
+	CBitFieldMaskBit10 = 0x400
+	CBitFieldMaskBit11 = 0x800
+	CBitFieldMaskBit12 = 0x1000
+	CBitFieldMaskBit13 = 0x2000
+	CBitFieldMaskBit14 = 0x4000
+	CBitFieldMaskBit15 = 0x8000
+	CBitFieldMaskBit16 = 0x10000
+	CBitFieldMaskBit17 = 0x20000
+	CBitFieldMaskBit18 = 0x40000
+	CBitFieldMaskBit19 = 0x80000
+	CBitFieldMaskBit20 = 0x100000
+	CBitFieldMaskBit21 = 0x200000
+	CBitFieldMaskBit22 = 0x400000
+	CBitFieldMaskBit23 = 0x800000
+	CBitFieldMaskBit24 = 0x1000000
+	CBitFieldMaskBit25 = 0x2000000
+	CBitFieldMaskBit26 = 0x4000000
+	CBitFieldMaskBit27 = 0x8000000
+	CBitFieldMaskBit28 = 0x10000000
+	CBitFieldMaskBit29 = 0x20000000
+	CBitFieldMaskBit30 = 0x40000000
+	CBitFieldMaskBit31 = 0x80000000
+	CBitFieldMaskBit32 = 0x100000000
+	CBitFieldMaskBit33 = 0x200000000
+	CBitFieldMaskBit34 = 0x400000000
+	CBitFieldMaskBit35 = 0x800000000
+	CBitFieldMaskBit36 = 0x1000000000
+	CBitFieldMaskBit37 = 0x2000000000
+	CBitFieldMaskBit38 = 0x4000000000
+	CBitFieldMaskBit39 = 0x8000000000
+	CBitFieldMaskBit40 = 0x10000000000
+	CBitFieldMaskBit41 = 0x20000000000
+	CBitFieldMaskBit42 = 0x40000000000
+	CBitFieldMaskBit43 = 0x80000000000
+	CBitFieldMaskBit44 = 0x100000000000
+	CBitFieldMaskBit45 = 0x200000000000
+	CBitFieldMaskBit46 = 0x400000000000
+	CBitFieldMaskBit47 = 0x800000000000
+	CBitFieldMaskBit48 = 0x1000000000000
+	CBitFieldMaskBit49 = 0x2000000000000
+	CBitFieldMaskBit50 = 0x4000000000000
+	CBitFieldMaskBit51 = 0x8000000000000
+	CBitFieldMaskBit52 = 0x10000000000000
+	CBitFieldMaskBit53 = 0x20000000000000
+	CBitFieldMaskBit54 = 0x40000000000000
+	CBitFieldMaskBit55 = 0x80000000000000
+	CBitFieldMaskBit56 = 0x100000000000000
+	CBitFieldMaskBit57 = 0x200000000000000
+	CBitFieldMaskBit58 = 0x400000000000000
+	CBitFieldMaskBit59 = 0x800000000000000
+	CBitFieldMaskBit60 = 0x1000000000000000
+	CBitFieldMaskBit61 = 0x2000000000000000
+	CBitFieldMaskBit62 = 0x4000000000000000
+	CBitFieldMaskBit63 = 0x8000000000000000
+)
+
+type SockaddrStorage struct {
+	Family uint16
+	_      [118]uint8
+	_      uint64
+}
+
+type HDGeometry struct {
+	Heads     uint8
+	Sectors   uint8
+	Cylinders uint16
+	Start     uint64
+}
+
+type Statfs_t struct {
+	Type    int64
+	Bsize   int64
+	Blocks  uint64
+	Bfree   uint64
+	Bavail  uint64
+	Files   uint64
+	Ffree   uint64
+	Fsid    Fsid
+	Namelen int64
+	Frsize  int64
+	Flags   int64
+	Spare   [4]int64
+}
+
+type TpacketHdr struct {
+	Status  uint64
+	Len     uint32
+	Snaplen uint32
+	Mac     uint16
+	Net     uint16
+	Sec     uint32
+	Usec    uint32
+	_       [4]byte
+}
+
+const (
+	SizeofTpacketHdr = 0x20
+)
+
+type RTCPLLInfo struct {
+	Ctrl    int32
+	Value   int32
+	Max     int32
+	Min     int32
+	Posmult int32
+	Negmult int32
+	Clock   int64
+}
+
+type BlkpgPartition struct {
+	Start   int64
+	Length  int64
+	Pno     int32
+	Devname [64]uint8
+	Volname [64]uint8
+	_       [4]byte
+}
+
+const (
+	BLKPG = 0x20001269
+)
+
+type XDPUmemReg struct {
+	Addr     uint64
+	Len      uint64
+	Size     uint32
+	Headroom uint32
+	Flags    uint32
+	_        [4]byte
+}
+
+type CryptoUserAlg struct {
+	Name        [64]uint8
+	Driver_name [64]uint8
+	Module_name [64]uint8
+	Type        uint32
+	Mask        uint32
+	Refcnt      uint32
+	Flags       uint32
+}
+
+type CryptoStatAEAD struct {
+	Type         [64]uint8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatAKCipher struct {
+	Type         [64]uint8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Verify_cnt   uint64
+	Sign_cnt     uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCipher struct {
+	Type         [64]uint8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCompress struct {
+	Type            [64]uint8
+	Compress_cnt    uint64
+	Compress_tlen   uint64
+	Decompress_cnt  uint64
+	Decompress_tlen uint64
+	Err_cnt         uint64
+}
+
+type CryptoStatHash struct {
+	Type      [64]uint8
+	Hash_cnt  uint64
+	Hash_tlen uint64
+	Err_cnt   uint64
+}
+
+type CryptoStatKPP struct {
+	Type                      [64]uint8
+	Setsecret_cnt             uint64
+	Generate_public_key_cnt   uint64
+	Compute_shared_secret_cnt uint64
+	Err_cnt                   uint64
+}
+
+type CryptoStatRNG struct {
+	Type          [64]uint8
+	Generate_cnt  uint64
+	Generate_tlen uint64
+	Seed_cnt      uint64
+	Err_cnt       uint64
+}
+
+type CryptoStatLarval struct {
+	Type [64]uint8
+}
+
+type CryptoReportLarval struct {
+	Type [64]uint8
+}
+
+type CryptoReportHash struct {
+	Type       [64]uint8
+	Blocksize  uint32
+	Digestsize uint32
+}
+
+type CryptoReportCipher struct {
+	Type        [64]uint8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+}
+
+type CryptoReportBlkCipher struct {
+	Type        [64]uint8
+	Geniv       [64]uint8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportAEAD struct {
+	Type        [64]uint8
+	Geniv       [64]uint8
+	Blocksize   uint32
+	Maxauthsize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportComp struct {
+	Type [64]uint8
+}
+
+type CryptoReportRNG struct {
+	Type     [64]uint8
+	Seedsize uint32
+}
+
+type CryptoReportAKCipher struct {
+	Type [64]uint8
+}
+
+type CryptoReportKPP struct {
+	Type [64]uint8
+}
+
+type CryptoReportAcomp struct {
+	Type [64]uint8
+}
+
+type LoopInfo struct {
+	Number           int32
+	Device           uint64
+	Inode            uint64
+	Rdevice          uint64
+	Offset           int32
+	Encrypt_type     int32
+	Encrypt_key_size int32
+	Flags            int32
+	Name             [64]uint8
+	Encrypt_key      [32]uint8
+	Init             [2]uint64
+	Reserved         [4]uint8
+	_                [4]byte
+}
+
+type TIPCSubscr struct {
+	Seq     TIPCServiceRange
+	Timeout uint32
+	Filter  uint32
+	Handle  [8]uint8
+}
+
+type TIPCSIOCLNReq struct {
+	Peer     uint32
+	Id       uint32
+	Linkname [68]uint8
+}
+
+type TIPCSIOCNodeIDReq struct {
+	Peer uint32
+	Id   [16]uint8
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_riscv64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_riscv64.go
new file mode 100644
index 000000000..4d3ac8d7b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_riscv64.go
@@ -0,0 +1,628 @@
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include linux/types.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build riscv64,linux
+
+package unix
+
+const (
+	SizeofPtr  = 0x8
+	SizeofLong = 0x8
+)
+
+type (
+	_C_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Timex struct {
+	Modes     uint32
+	Offset    int64
+	Freq      int64
+	Maxerror  int64
+	Esterror  int64
+	Status    int32
+	Constant  int64
+	Precision int64
+	Tolerance int64
+	Time      Timeval
+	Tick      int64
+	Ppsfreq   int64
+	Jitter    int64
+	Shift     int32
+	Stabil    int64
+	Jitcnt    int64
+	Calcnt    int64
+	Errcnt    int64
+	Stbcnt    int64
+	Tai       int32
+	_         [44]byte
+}
+
+type Time_t int64
+
+type Tms struct {
+	Utime  int64
+	Stime  int64
+	Cutime int64
+	Cstime int64
+}
+
+type Utimbuf struct {
+	Actime  int64
+	Modtime int64
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Stat_t struct {
+	Dev     uint64
+	Ino     uint64
+	Mode    uint32
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	Rdev    uint64
+	_       uint64
+	Size    int64
+	Blksize int32
+	_       int32
+	Blocks  int64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	_       [2]int32
+}
+
+type Dirent struct {
+	Ino    uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Name   [256]uint8
+	_      [5]byte
+}
+
+type Flock_t struct {
+	Type   int16
+	Whence int16
+	Start  int64
+	Len    int64
+	Pid    int32
+	_      [4]byte
+}
+
+type DmNameList struct {
+	Dev  uint64
+	Next uint32
+	Name [0]byte
+	_    [4]byte
+}
+
+const (
+	FADV_DONTNEED = 0x4
+	FADV_NOREUSE  = 0x5
+)
+
+type RawSockaddr struct {
+	Family uint16
+	Data   [14]uint8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [96]uint8
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	_          [4]byte
+}
+
+type Cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+const (
+	SizeofIovec   = 0x10
+	SizeofMsghdr  = 0x38
+	SizeofCmsghdr = 0x10
+)
+
+const (
+	SizeofSockFprog = 0x10
+)
+
+type PtraceRegs struct {
+	Pc  uint64
+	Ra  uint64
+	Sp  uint64
+	Gp  uint64
+	Tp  uint64
+	T0  uint64
+	T1  uint64
+	T2  uint64
+	S0  uint64
+	S1  uint64
+	A0  uint64
+	A1  uint64
+	A2  uint64
+	A3  uint64
+	A4  uint64
+	A5  uint64
+	A6  uint64
+	A7  uint64
+	S2  uint64
+	S3  uint64
+	S4  uint64
+	S5  uint64
+	S6  uint64
+	S7  uint64
+	S8  uint64
+	S9  uint64
+	S10 uint64
+	S11 uint64
+	T3  uint64
+	T4  uint64
+	T5  uint64
+	T6  uint64
+}
+
+type FdSet struct {
+	Bits [16]int64
+}
+
+type Sysinfo_t struct {
+	Uptime    int64
+	Loads     [3]uint64
+	Totalram  uint64
+	Freeram   uint64
+	Sharedram uint64
+	Bufferram uint64
+	Totalswap uint64
+	Freeswap  uint64
+	Procs     uint16
+	Pad       uint16
+	Totalhigh uint64
+	Freehigh  uint64
+	Unit      uint32
+	_         [0]uint8
+	_         [4]byte
+}
+
+type Ustat_t struct {
+	Tfree  int32
+	Tinode uint64
+	Fname  [6]uint8
+	Fpack  [6]uint8
+	_      [4]byte
+}
+
+type EpollEvent struct {
+	Events uint32
+	_      int32
+	Fd     int32
+	Pad    int32
+}
+
+const (
+	POLLRDHUP = 0x2000
+)
+
+type Sigset_t struct {
+	Val [16]uint64
+}
+
+const _C__NSIG = 0x41
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Line   uint8
+	Cc     [19]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Taskstats struct {
+	Version                   uint16
+	Ac_exitcode               uint32
+	Ac_flag                   uint8
+	Ac_nice                   uint8
+	Cpu_count                 uint64
+	Cpu_delay_total           uint64
+	Blkio_count               uint64
+	Blkio_delay_total         uint64
+	Swapin_count              uint64
+	Swapin_delay_total        uint64
+	Cpu_run_real_total        uint64
+	Cpu_run_virtual_total     uint64
+	Ac_comm                   [32]uint8
+	Ac_sched                  uint8
+	Ac_pad                    [3]uint8
+	_                         [4]byte
+	Ac_uid                    uint32
+	Ac_gid                    uint32
+	Ac_pid                    uint32
+	Ac_ppid                   uint32
+	Ac_btime                  uint32
+	Ac_etime                  uint64
+	Ac_utime                  uint64
+	Ac_stime                  uint64
+	Ac_minflt                 uint64
+	Ac_majflt                 uint64
+	Coremem                   uint64
+	Virtmem                   uint64
+	Hiwater_rss               uint64
+	Hiwater_vm                uint64
+	Read_char                 uint64
+	Write_char                uint64
+	Read_syscalls             uint64
+	Write_syscalls            uint64
+	Read_bytes                uint64
+	Write_bytes               uint64
+	Cancelled_write_bytes     uint64
+	Nvcsw                     uint64
+	Nivcsw                    uint64
+	Ac_utimescaled            uint64
+	Ac_stimescaled            uint64
+	Cpu_scaled_run_real_total uint64
+	Freepages_count           uint64
+	Freepages_delay_total     uint64
+	Thrashing_count           uint64
+	Thrashing_delay_total     uint64
+	Ac_btime64                uint64
+}
+
+type cpuMask uint64
+
+const (
+	_NCPUBITS = 0x40
+)
+
+const (
+	CBitFieldMaskBit0  = 0x1
+	CBitFieldMaskBit1  = 0x2
+	CBitFieldMaskBit2  = 0x4
+	CBitFieldMaskBit3  = 0x8
+	CBitFieldMaskBit4  = 0x10
+	CBitFieldMaskBit5  = 0x20
+	CBitFieldMaskBit6  = 0x40
+	CBitFieldMaskBit7  = 0x80
+	CBitFieldMaskBit8  = 0x100
+	CBitFieldMaskBit9  = 0x200
+	CBitFieldMaskBit10 = 0x400
+	CBitFieldMaskBit11 = 0x800
+	CBitFieldMaskBit12 = 0x1000
+	CBitFieldMaskBit13 = 0x2000
+	CBitFieldMaskBit14 = 0x4000
+	CBitFieldMaskBit15 = 0x8000
+	CBitFieldMaskBit16 = 0x10000
+	CBitFieldMaskBit17 = 0x20000
+	CBitFieldMaskBit18 = 0x40000
+	CBitFieldMaskBit19 = 0x80000
+	CBitFieldMaskBit20 = 0x100000
+	CBitFieldMaskBit21 = 0x200000
+	CBitFieldMaskBit22 = 0x400000
+	CBitFieldMaskBit23 = 0x800000
+	CBitFieldMaskBit24 = 0x1000000
+	CBitFieldMaskBit25 = 0x2000000
+	CBitFieldMaskBit26 = 0x4000000
+	CBitFieldMaskBit27 = 0x8000000
+	CBitFieldMaskBit28 = 0x10000000
+	CBitFieldMaskBit29 = 0x20000000
+	CBitFieldMaskBit30 = 0x40000000
+	CBitFieldMaskBit31 = 0x80000000
+	CBitFieldMaskBit32 = 0x100000000
+	CBitFieldMaskBit33 = 0x200000000
+	CBitFieldMaskBit34 = 0x400000000
+	CBitFieldMaskBit35 = 0x800000000
+	CBitFieldMaskBit36 = 0x1000000000
+	CBitFieldMaskBit37 = 0x2000000000
+	CBitFieldMaskBit38 = 0x4000000000
+	CBitFieldMaskBit39 = 0x8000000000
+	CBitFieldMaskBit40 = 0x10000000000
+	CBitFieldMaskBit41 = 0x20000000000
+	CBitFieldMaskBit42 = 0x40000000000
+	CBitFieldMaskBit43 = 0x80000000000
+	CBitFieldMaskBit44 = 0x100000000000
+	CBitFieldMaskBit45 = 0x200000000000
+	CBitFieldMaskBit46 = 0x400000000000
+	CBitFieldMaskBit47 = 0x800000000000
+	CBitFieldMaskBit48 = 0x1000000000000
+	CBitFieldMaskBit49 = 0x2000000000000
+	CBitFieldMaskBit50 = 0x4000000000000
+	CBitFieldMaskBit51 = 0x8000000000000
+	CBitFieldMaskBit52 = 0x10000000000000
+	CBitFieldMaskBit53 = 0x20000000000000
+	CBitFieldMaskBit54 = 0x40000000000000
+	CBitFieldMaskBit55 = 0x80000000000000
+	CBitFieldMaskBit56 = 0x100000000000000
+	CBitFieldMaskBit57 = 0x200000000000000
+	CBitFieldMaskBit58 = 0x400000000000000
+	CBitFieldMaskBit59 = 0x800000000000000
+	CBitFieldMaskBit60 = 0x1000000000000000
+	CBitFieldMaskBit61 = 0x2000000000000000
+	CBitFieldMaskBit62 = 0x4000000000000000
+	CBitFieldMaskBit63 = 0x8000000000000000
+)
+
+type SockaddrStorage struct {
+	Family uint16
+	_      [118]uint8
+	_      uint64
+}
+
+type HDGeometry struct {
+	Heads     uint8
+	Sectors   uint8
+	Cylinders uint16
+	Start     uint64
+}
+
+type Statfs_t struct {
+	Type    int64
+	Bsize   int64
+	Blocks  uint64
+	Bfree   uint64
+	Bavail  uint64
+	Files   uint64
+	Ffree   uint64
+	Fsid    Fsid
+	Namelen int64
+	Frsize  int64
+	Flags   int64
+	Spare   [4]int64
+}
+
+type TpacketHdr struct {
+	Status  uint64
+	Len     uint32
+	Snaplen uint32
+	Mac     uint16
+	Net     uint16
+	Sec     uint32
+	Usec    uint32
+	_       [4]byte
+}
+
+const (
+	SizeofTpacketHdr = 0x20
+)
+
+type RTCPLLInfo struct {
+	Ctrl    int32
+	Value   int32
+	Max     int32
+	Min     int32
+	Posmult int32
+	Negmult int32
+	Clock   int64
+}
+
+type BlkpgPartition struct {
+	Start   int64
+	Length  int64
+	Pno     int32
+	Devname [64]uint8
+	Volname [64]uint8
+	_       [4]byte
+}
+
+const (
+	BLKPG = 0x1269
+)
+
+type XDPUmemReg struct {
+	Addr     uint64
+	Len      uint64
+	Size     uint32
+	Headroom uint32
+	Flags    uint32
+	_        [4]byte
+}
+
+type CryptoUserAlg struct {
+	Name        [64]uint8
+	Driver_name [64]uint8
+	Module_name [64]uint8
+	Type        uint32
+	Mask        uint32
+	Refcnt      uint32
+	Flags       uint32
+}
+
+type CryptoStatAEAD struct {
+	Type         [64]uint8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatAKCipher struct {
+	Type         [64]uint8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Verify_cnt   uint64
+	Sign_cnt     uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCipher struct {
+	Type         [64]uint8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCompress struct {
+	Type            [64]uint8
+	Compress_cnt    uint64
+	Compress_tlen   uint64
+	Decompress_cnt  uint64
+	Decompress_tlen uint64
+	Err_cnt         uint64
+}
+
+type CryptoStatHash struct {
+	Type      [64]uint8
+	Hash_cnt  uint64
+	Hash_tlen uint64
+	Err_cnt   uint64
+}
+
+type CryptoStatKPP struct {
+	Type                      [64]uint8
+	Setsecret_cnt             uint64
+	Generate_public_key_cnt   uint64
+	Compute_shared_secret_cnt uint64
+	Err_cnt                   uint64
+}
+
+type CryptoStatRNG struct {
+	Type          [64]uint8
+	Generate_cnt  uint64
+	Generate_tlen uint64
+	Seed_cnt      uint64
+	Err_cnt       uint64
+}
+
+type CryptoStatLarval struct {
+	Type [64]uint8
+}
+
+type CryptoReportLarval struct {
+	Type [64]uint8
+}
+
+type CryptoReportHash struct {
+	Type       [64]uint8
+	Blocksize  uint32
+	Digestsize uint32
+}
+
+type CryptoReportCipher struct {
+	Type        [64]uint8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+}
+
+type CryptoReportBlkCipher struct {
+	Type        [64]uint8
+	Geniv       [64]uint8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportAEAD struct {
+	Type        [64]uint8
+	Geniv       [64]uint8
+	Blocksize   uint32
+	Maxauthsize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportComp struct {
+	Type [64]uint8
+}
+
+type CryptoReportRNG struct {
+	Type     [64]uint8
+	Seedsize uint32
+}
+
+type CryptoReportAKCipher struct {
+	Type [64]uint8
+}
+
+type CryptoReportKPP struct {
+	Type [64]uint8
+}
+
+type CryptoReportAcomp struct {
+	Type [64]uint8
+}
+
+type LoopInfo struct {
+	Number           int32
+	Device           uint32
+	Inode            uint64
+	Rdevice          uint32
+	Offset           int32
+	Encrypt_type     int32
+	Encrypt_key_size int32
+	Flags            int32
+	Name             [64]uint8
+	Encrypt_key      [32]uint8
+	Init             [2]uint64
+	Reserved         [4]uint8
+	_                [4]byte
+}
+
+type TIPCSubscr struct {
+	Seq     TIPCServiceRange
+	Timeout uint32
+	Filter  uint32
+	Handle  [8]uint8
+}
+
+type TIPCSIOCLNReq struct {
+	Peer     uint32
+	Id       uint32
+	Linkname [68]uint8
+}
+
+type TIPCSIOCNodeIDReq struct {
+	Peer uint32
+	Id   [16]uint8
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_s390x.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_s390x.go
new file mode 100644
index 000000000..349f483a8
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_s390x.go
@@ -0,0 +1,624 @@
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include -fsigned-char linux/types.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build s390x,linux
+
+package unix
+
+const (
+	SizeofPtr  = 0x8
+	SizeofLong = 0x8
+)
+
+type (
+	_C_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Timex struct {
+	Modes     uint32
+	Offset    int64
+	Freq      int64
+	Maxerror  int64
+	Esterror  int64
+	Status    int32
+	Constant  int64
+	Precision int64
+	Tolerance int64
+	Time      Timeval
+	Tick      int64
+	Ppsfreq   int64
+	Jitter    int64
+	Shift     int32
+	Stabil    int64
+	Jitcnt    int64
+	Calcnt    int64
+	Errcnt    int64
+	Stbcnt    int64
+	Tai       int32
+	_         [44]byte
+}
+
+type Time_t int64
+
+type Tms struct {
+	Utime  int64
+	Stime  int64
+	Cutime int64
+	Cstime int64
+}
+
+type Utimbuf struct {
+	Actime  int64
+	Modtime int64
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Stat_t struct {
+	Dev     uint64
+	Ino     uint64
+	Nlink   uint64
+	Mode    uint32
+	Uid     uint32
+	Gid     uint32
+	_       int32
+	Rdev    uint64
+	Size    int64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Blksize int64
+	Blocks  int64
+	_       [3]int64
+}
+
+type Dirent struct {
+	Ino    uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Name   [256]int8
+	_      [5]byte
+}
+
+type Flock_t struct {
+	Type   int16
+	Whence int16
+	Start  int64
+	Len    int64
+	Pid    int32
+	_      [4]byte
+}
+
+type DmNameList struct {
+	Dev  uint64
+	Next uint32
+	Name [0]byte
+	_    [4]byte
+}
+
+const (
+	FADV_DONTNEED = 0x6
+	FADV_NOREUSE  = 0x7
+)
+
+type RawSockaddr struct {
+	Family uint16
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [96]int8
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	_          [4]byte
+}
+
+type Cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+const (
+	SizeofIovec   = 0x10
+	SizeofMsghdr  = 0x38
+	SizeofCmsghdr = 0x10
+)
+
+const (
+	SizeofSockFprog = 0x10
+)
+
+type PtraceRegs struct {
+	Psw                      PtracePsw
+	Gprs                     [16]uint64
+	Acrs                     [16]uint32
+	Orig_gpr2                uint64
+	Fp_regs                  PtraceFpregs
+	Per_info                 PtracePer
+	Ieee_instruction_pointer uint64
+}
+
+type PtracePsw struct {
+	Mask uint64
+	Addr uint64
+}
+
+type PtraceFpregs struct {
+	Fpc  uint32
+	Fprs [16]float64
+}
+
+type PtracePer struct {
+	_             [0]uint64
+	_             [32]byte
+	Starting_addr uint64
+	Ending_addr   uint64
+	Perc_atmid    uint16
+	Address       uint64
+	Access_id     uint8
+	_             [7]byte
+}
+
+type FdSet struct {
+	Bits [16]int64
+}
+
+type Sysinfo_t struct {
+	Uptime    int64
+	Loads     [3]uint64
+	Totalram  uint64
+	Freeram   uint64
+	Sharedram uint64
+	Bufferram uint64
+	Totalswap uint64
+	Freeswap  uint64
+	Procs     uint16
+	Pad       uint16
+	Totalhigh uint64
+	Freehigh  uint64
+	Unit      uint32
+	_         [0]int8
+	_         [4]byte
+}
+
+type Ustat_t struct {
+	Tfree  int32
+	Tinode uint64
+	Fname  [6]int8
+	Fpack  [6]int8
+	_      [4]byte
+}
+
+type EpollEvent struct {
+	Events uint32
+	_      int32
+	Fd     int32
+	Pad    int32
+}
+
+const (
+	POLLRDHUP = 0x2000
+)
+
+type Sigset_t struct {
+	Val [16]uint64
+}
+
+const _C__NSIG = 0x41
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Line   uint8
+	Cc     [19]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Taskstats struct {
+	Version                   uint16
+	Ac_exitcode               uint32
+	Ac_flag                   uint8
+	Ac_nice                   uint8
+	Cpu_count                 uint64
+	Cpu_delay_total           uint64
+	Blkio_count               uint64
+	Blkio_delay_total         uint64
+	Swapin_count              uint64
+	Swapin_delay_total        uint64
+	Cpu_run_real_total        uint64
+	Cpu_run_virtual_total     uint64
+	Ac_comm                   [32]int8
+	Ac_sched                  uint8
+	Ac_pad                    [3]uint8
+	_                         [4]byte
+	Ac_uid                    uint32
+	Ac_gid                    uint32
+	Ac_pid                    uint32
+	Ac_ppid                   uint32
+	Ac_btime                  uint32
+	Ac_etime                  uint64
+	Ac_utime                  uint64
+	Ac_stime                  uint64
+	Ac_minflt                 uint64
+	Ac_majflt                 uint64
+	Coremem                   uint64
+	Virtmem                   uint64
+	Hiwater_rss               uint64
+	Hiwater_vm                uint64
+	Read_char                 uint64
+	Write_char                uint64
+	Read_syscalls             uint64
+	Write_syscalls            uint64
+	Read_bytes                uint64
+	Write_bytes               uint64
+	Cancelled_write_bytes     uint64
+	Nvcsw                     uint64
+	Nivcsw                    uint64
+	Ac_utimescaled            uint64
+	Ac_stimescaled            uint64
+	Cpu_scaled_run_real_total uint64
+	Freepages_count           uint64
+	Freepages_delay_total     uint64
+	Thrashing_count           uint64
+	Thrashing_delay_total     uint64
+	Ac_btime64                uint64
+}
+
+type cpuMask uint64
+
+const (
+	_NCPUBITS = 0x40
+)
+
+const (
+	CBitFieldMaskBit0  = 0x8000000000000000
+	CBitFieldMaskBit1  = 0x4000000000000000
+	CBitFieldMaskBit2  = 0x2000000000000000
+	CBitFieldMaskBit3  = 0x1000000000000000
+	CBitFieldMaskBit4  = 0x800000000000000
+	CBitFieldMaskBit5  = 0x400000000000000
+	CBitFieldMaskBit6  = 0x200000000000000
+	CBitFieldMaskBit7  = 0x100000000000000
+	CBitFieldMaskBit8  = 0x80000000000000
+	CBitFieldMaskBit9  = 0x40000000000000
+	CBitFieldMaskBit10 = 0x20000000000000
+	CBitFieldMaskBit11 = 0x10000000000000
+	CBitFieldMaskBit12 = 0x8000000000000
+	CBitFieldMaskBit13 = 0x4000000000000
+	CBitFieldMaskBit14 = 0x2000000000000
+	CBitFieldMaskBit15 = 0x1000000000000
+	CBitFieldMaskBit16 = 0x800000000000
+	CBitFieldMaskBit17 = 0x400000000000
+	CBitFieldMaskBit18 = 0x200000000000
+	CBitFieldMaskBit19 = 0x100000000000
+	CBitFieldMaskBit20 = 0x80000000000
+	CBitFieldMaskBit21 = 0x40000000000
+	CBitFieldMaskBit22 = 0x20000000000
+	CBitFieldMaskBit23 = 0x10000000000
+	CBitFieldMaskBit24 = 0x8000000000
+	CBitFieldMaskBit25 = 0x4000000000
+	CBitFieldMaskBit26 = 0x2000000000
+	CBitFieldMaskBit27 = 0x1000000000
+	CBitFieldMaskBit28 = 0x800000000
+	CBitFieldMaskBit29 = 0x400000000
+	CBitFieldMaskBit30 = 0x200000000
+	CBitFieldMaskBit31 = 0x100000000
+	CBitFieldMaskBit32 = 0x80000000
+	CBitFieldMaskBit33 = 0x40000000
+	CBitFieldMaskBit34 = 0x20000000
+	CBitFieldMaskBit35 = 0x10000000
+	CBitFieldMaskBit36 = 0x8000000
+	CBitFieldMaskBit37 = 0x4000000
+	CBitFieldMaskBit38 = 0x2000000
+	CBitFieldMaskBit39 = 0x1000000
+	CBitFieldMaskBit40 = 0x800000
+	CBitFieldMaskBit41 = 0x400000
+	CBitFieldMaskBit42 = 0x200000
+	CBitFieldMaskBit43 = 0x100000
+	CBitFieldMaskBit44 = 0x80000
+	CBitFieldMaskBit45 = 0x40000
+	CBitFieldMaskBit46 = 0x20000
+	CBitFieldMaskBit47 = 0x10000
+	CBitFieldMaskBit48 = 0x8000
+	CBitFieldMaskBit49 = 0x4000
+	CBitFieldMaskBit50 = 0x2000
+	CBitFieldMaskBit51 = 0x1000
+	CBitFieldMaskBit52 = 0x800
+	CBitFieldMaskBit53 = 0x400
+	CBitFieldMaskBit54 = 0x200
+	CBitFieldMaskBit55 = 0x100
+	CBitFieldMaskBit56 = 0x80
+	CBitFieldMaskBit57 = 0x40
+	CBitFieldMaskBit58 = 0x20
+	CBitFieldMaskBit59 = 0x10
+	CBitFieldMaskBit60 = 0x8
+	CBitFieldMaskBit61 = 0x4
+	CBitFieldMaskBit62 = 0x2
+	CBitFieldMaskBit63 = 0x1
+)
+
+type SockaddrStorage struct {
+	Family uint16
+	_      [118]int8
+	_      uint64
+}
+
+type HDGeometry struct {
+	Heads     uint8
+	Sectors   uint8
+	Cylinders uint16
+	Start     uint64
+}
+
+type Statfs_t struct {
+	Type    uint32
+	Bsize   uint32
+	Blocks  uint64
+	Bfree   uint64
+	Bavail  uint64
+	Files   uint64
+	Ffree   uint64
+	Fsid    Fsid
+	Namelen uint32
+	Frsize  uint32
+	Flags   uint32
+	Spare   [4]uint32
+	_       [4]byte
+}
+
+type TpacketHdr struct {
+	Status  uint64
+	Len     uint32
+	Snaplen uint32
+	Mac     uint16
+	Net     uint16
+	Sec     uint32
+	Usec    uint32
+	_       [4]byte
+}
+
+const (
+	SizeofTpacketHdr = 0x20
+)
+
+type RTCPLLInfo struct {
+	Ctrl    int32
+	Value   int32
+	Max     int32
+	Min     int32
+	Posmult int32
+	Negmult int32
+	Clock   int64
+}
+
+type BlkpgPartition struct {
+	Start   int64
+	Length  int64
+	Pno     int32
+	Devname [64]uint8
+	Volname [64]uint8
+	_       [4]byte
+}
+
+const (
+	BLKPG = 0x1269
+)
+
+type XDPUmemReg struct {
+	Addr     uint64
+	Len      uint64
+	Size     uint32
+	Headroom uint32
+	Flags    uint32
+	_        [4]byte
+}
+
+type CryptoUserAlg struct {
+	Name        [64]int8
+	Driver_name [64]int8
+	Module_name [64]int8
+	Type        uint32
+	Mask        uint32
+	Refcnt      uint32
+	Flags       uint32
+}
+
+type CryptoStatAEAD struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatAKCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Verify_cnt   uint64
+	Sign_cnt     uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCompress struct {
+	Type            [64]int8
+	Compress_cnt    uint64
+	Compress_tlen   uint64
+	Decompress_cnt  uint64
+	Decompress_tlen uint64
+	Err_cnt         uint64
+}
+
+type CryptoStatHash struct {
+	Type      [64]int8
+	Hash_cnt  uint64
+	Hash_tlen uint64
+	Err_cnt   uint64
+}
+
+type CryptoStatKPP struct {
+	Type                      [64]int8
+	Setsecret_cnt             uint64
+	Generate_public_key_cnt   uint64
+	Compute_shared_secret_cnt uint64
+	Err_cnt                   uint64
+}
+
+type CryptoStatRNG struct {
+	Type          [64]int8
+	Generate_cnt  uint64
+	Generate_tlen uint64
+	Seed_cnt      uint64
+	Err_cnt       uint64
+}
+
+type CryptoStatLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportHash struct {
+	Type       [64]int8
+	Blocksize  uint32
+	Digestsize uint32
+}
+
+type CryptoReportCipher struct {
+	Type        [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+}
+
+type CryptoReportBlkCipher struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportAEAD struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Maxauthsize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportComp struct {
+	Type [64]int8
+}
+
+type CryptoReportRNG struct {
+	Type     [64]int8
+	Seedsize uint32
+}
+
+type CryptoReportAKCipher struct {
+	Type [64]int8
+}
+
+type CryptoReportKPP struct {
+	Type [64]int8
+}
+
+type CryptoReportAcomp struct {
+	Type [64]int8
+}
+
+type LoopInfo struct {
+	Number           int32
+	Device           uint16
+	Inode            uint64
+	Rdevice          uint16
+	Offset           int32
+	Encrypt_type     int32
+	Encrypt_key_size int32
+	Flags            int32
+	Name             [64]int8
+	Encrypt_key      [32]uint8
+	Init             [2]uint64
+	Reserved         [4]int8
+	_                [4]byte
+}
+
+type TIPCSubscr struct {
+	Seq     TIPCServiceRange
+	Timeout uint32
+	Filter  uint32
+	Handle  [8]int8
+}
+
+type TIPCSIOCLNReq struct {
+	Peer     uint32
+	Id       uint32
+	Linkname [68]int8
+}
+
+type TIPCSIOCNodeIDReq struct {
+	Peer uint32
+	Id   [16]int8
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_sparc64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_sparc64.go
new file mode 100644
index 000000000..80c73beaa
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_linux_sparc64.go
@@ -0,0 +1,605 @@
+// cgo -godefs -- -Wall -Werror -static -I/tmp/include linux/types.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build sparc64,linux
+
+package unix
+
+const (
+	SizeofPtr  = 0x8
+	SizeofLong = 0x8
+)
+
+type (
+	_C_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int32
+	_    [4]byte
+}
+
+type Timex struct {
+	Modes     uint32
+	Offset    int64
+	Freq      int64
+	Maxerror  int64
+	Esterror  int64
+	Status    int32
+	Constant  int64
+	Precision int64
+	Tolerance int64
+	Time      Timeval
+	Tick      int64
+	Ppsfreq   int64
+	Jitter    int64
+	Shift     int32
+	Stabil    int64
+	Jitcnt    int64
+	Calcnt    int64
+	Errcnt    int64
+	Stbcnt    int64
+	Tai       int32
+	_         [44]byte
+}
+
+type Time_t int64
+
+type Tms struct {
+	Utime  int64
+	Stime  int64
+	Cutime int64
+	Cstime int64
+}
+
+type Utimbuf struct {
+	Actime  int64
+	Modtime int64
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Stat_t struct {
+	Dev     uint64
+	_       uint16
+	Ino     uint64
+	Mode    uint32
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	Rdev    uint64
+	_       uint16
+	Size    int64
+	Blksize int64
+	Blocks  int64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	_       uint64
+	_       uint64
+}
+
+type Dirent struct {
+	Ino    uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Name   [256]int8
+	_      [5]byte
+}
+
+type Flock_t struct {
+	Type   int16
+	Whence int16
+	Start  int64
+	Len    int64
+	Pid    int32
+	_      int16
+	_      [2]byte
+}
+
+type DmNameList struct {
+	Dev  uint64
+	Next uint32
+	Name [0]byte
+	_    [4]byte
+}
+
+const (
+	FADV_DONTNEED = 0x4
+	FADV_NOREUSE  = 0x5
+)
+
+type RawSockaddr struct {
+	Family uint16
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [96]int8
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint64
+	Control    *byte
+	Controllen uint64
+	Flags      int32
+	_          [4]byte
+}
+
+type Cmsghdr struct {
+	Len   uint64
+	Level int32
+	Type  int32
+}
+
+const (
+	SizeofIovec   = 0x10
+	SizeofMsghdr  = 0x38
+	SizeofCmsghdr = 0x10
+)
+
+const (
+	SizeofSockFprog = 0x10
+)
+
+type PtraceRegs struct {
+	Regs   [16]uint64
+	Tstate uint64
+	Tpc    uint64
+	Tnpc   uint64
+	Y      uint32
+	Magic  uint32
+}
+
+type FdSet struct {
+	Bits [16]int64
+}
+
+type Sysinfo_t struct {
+	Uptime    int64
+	Loads     [3]uint64
+	Totalram  uint64
+	Freeram   uint64
+	Sharedram uint64
+	Bufferram uint64
+	Totalswap uint64
+	Freeswap  uint64
+	Procs     uint16
+	Pad       uint16
+	Totalhigh uint64
+	Freehigh  uint64
+	Unit      uint32
+	_         [0]int8
+	_         [4]byte
+}
+
+type Ustat_t struct {
+	Tfree  int32
+	Tinode uint64
+	Fname  [6]int8
+	Fpack  [6]int8
+	_      [4]byte
+}
+
+type EpollEvent struct {
+	Events uint32
+	_      int32
+	Fd     int32
+	Pad    int32
+}
+
+const (
+	POLLRDHUP = 0x800
+)
+
+type Sigset_t struct {
+	Val [16]uint64
+}
+
+const _C__NSIG = 0x41
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Line   uint8
+	Cc     [19]uint8
+	Ispeed uint32
+	Ospeed uint32
+}
+
+type Taskstats struct {
+	Version                   uint16
+	Ac_exitcode               uint32
+	Ac_flag                   uint8
+	Ac_nice                   uint8
+	Cpu_count                 uint64
+	Cpu_delay_total           uint64
+	Blkio_count               uint64
+	Blkio_delay_total         uint64
+	Swapin_count              uint64
+	Swapin_delay_total        uint64
+	Cpu_run_real_total        uint64
+	Cpu_run_virtual_total     uint64
+	Ac_comm                   [32]int8
+	Ac_sched                  uint8
+	Ac_pad                    [3]uint8
+	_                         [4]byte
+	Ac_uid                    uint32
+	Ac_gid                    uint32
+	Ac_pid                    uint32
+	Ac_ppid                   uint32
+	Ac_btime                  uint32
+	Ac_etime                  uint64
+	Ac_utime                  uint64
+	Ac_stime                  uint64
+	Ac_minflt                 uint64
+	Ac_majflt                 uint64
+	Coremem                   uint64
+	Virtmem                   uint64
+	Hiwater_rss               uint64
+	Hiwater_vm                uint64
+	Read_char                 uint64
+	Write_char                uint64
+	Read_syscalls             uint64
+	Write_syscalls            uint64
+	Read_bytes                uint64
+	Write_bytes               uint64
+	Cancelled_write_bytes     uint64
+	Nvcsw                     uint64
+	Nivcsw                    uint64
+	Ac_utimescaled            uint64
+	Ac_stimescaled            uint64
+	Cpu_scaled_run_real_total uint64
+	Freepages_count           uint64
+	Freepages_delay_total     uint64
+	Thrashing_count           uint64
+	Thrashing_delay_total     uint64
+	Ac_btime64                uint64
+}
+
+type cpuMask uint64
+
+const (
+	_NCPUBITS = 0x40
+)
+
+const (
+	CBitFieldMaskBit0  = 0x8000000000000000
+	CBitFieldMaskBit1  = 0x4000000000000000
+	CBitFieldMaskBit2  = 0x2000000000000000
+	CBitFieldMaskBit3  = 0x1000000000000000
+	CBitFieldMaskBit4  = 0x800000000000000
+	CBitFieldMaskBit5  = 0x400000000000000
+	CBitFieldMaskBit6  = 0x200000000000000
+	CBitFieldMaskBit7  = 0x100000000000000
+	CBitFieldMaskBit8  = 0x80000000000000
+	CBitFieldMaskBit9  = 0x40000000000000
+	CBitFieldMaskBit10 = 0x20000000000000
+	CBitFieldMaskBit11 = 0x10000000000000
+	CBitFieldMaskBit12 = 0x8000000000000
+	CBitFieldMaskBit13 = 0x4000000000000
+	CBitFieldMaskBit14 = 0x2000000000000
+	CBitFieldMaskBit15 = 0x1000000000000
+	CBitFieldMaskBit16 = 0x800000000000
+	CBitFieldMaskBit17 = 0x400000000000
+	CBitFieldMaskBit18 = 0x200000000000
+	CBitFieldMaskBit19 = 0x100000000000
+	CBitFieldMaskBit20 = 0x80000000000
+	CBitFieldMaskBit21 = 0x40000000000
+	CBitFieldMaskBit22 = 0x20000000000
+	CBitFieldMaskBit23 = 0x10000000000
+	CBitFieldMaskBit24 = 0x8000000000
+	CBitFieldMaskBit25 = 0x4000000000
+	CBitFieldMaskBit26 = 0x2000000000
+	CBitFieldMaskBit27 = 0x1000000000
+	CBitFieldMaskBit28 = 0x800000000
+	CBitFieldMaskBit29 = 0x400000000
+	CBitFieldMaskBit30 = 0x200000000
+	CBitFieldMaskBit31 = 0x100000000
+	CBitFieldMaskBit32 = 0x80000000
+	CBitFieldMaskBit33 = 0x40000000
+	CBitFieldMaskBit34 = 0x20000000
+	CBitFieldMaskBit35 = 0x10000000
+	CBitFieldMaskBit36 = 0x8000000
+	CBitFieldMaskBit37 = 0x4000000
+	CBitFieldMaskBit38 = 0x2000000
+	CBitFieldMaskBit39 = 0x1000000
+	CBitFieldMaskBit40 = 0x800000
+	CBitFieldMaskBit41 = 0x400000
+	CBitFieldMaskBit42 = 0x200000
+	CBitFieldMaskBit43 = 0x100000
+	CBitFieldMaskBit44 = 0x80000
+	CBitFieldMaskBit45 = 0x40000
+	CBitFieldMaskBit46 = 0x20000
+	CBitFieldMaskBit47 = 0x10000
+	CBitFieldMaskBit48 = 0x8000
+	CBitFieldMaskBit49 = 0x4000
+	CBitFieldMaskBit50 = 0x2000
+	CBitFieldMaskBit51 = 0x1000
+	CBitFieldMaskBit52 = 0x800
+	CBitFieldMaskBit53 = 0x400
+	CBitFieldMaskBit54 = 0x200
+	CBitFieldMaskBit55 = 0x100
+	CBitFieldMaskBit56 = 0x80
+	CBitFieldMaskBit57 = 0x40
+	CBitFieldMaskBit58 = 0x20
+	CBitFieldMaskBit59 = 0x10
+	CBitFieldMaskBit60 = 0x8
+	CBitFieldMaskBit61 = 0x4
+	CBitFieldMaskBit62 = 0x2
+	CBitFieldMaskBit63 = 0x1
+)
+
+type SockaddrStorage struct {
+	Family uint16
+	_      [118]int8
+	_      uint64
+}
+
+type HDGeometry struct {
+	Heads     uint8
+	Sectors   uint8
+	Cylinders uint16
+	Start     uint64
+}
+
+type Statfs_t struct {
+	Type    int64
+	Bsize   int64
+	Blocks  uint64
+	Bfree   uint64
+	Bavail  uint64
+	Files   uint64
+	Ffree   uint64
+	Fsid    Fsid
+	Namelen int64
+	Frsize  int64
+	Flags   int64
+	Spare   [4]int64
+}
+
+type TpacketHdr struct {
+	Status  uint64
+	Len     uint32
+	Snaplen uint32
+	Mac     uint16
+	Net     uint16
+	Sec     uint32
+	Usec    uint32
+	_       [4]byte
+}
+
+const (
+	SizeofTpacketHdr = 0x20
+)
+
+type RTCPLLInfo struct {
+	Ctrl    int32
+	Value   int32
+	Max     int32
+	Min     int32
+	Posmult int32
+	Negmult int32
+	Clock   int64
+}
+
+type BlkpgPartition struct {
+	Start   int64
+	Length  int64
+	Pno     int32
+	Devname [64]uint8
+	Volname [64]uint8
+	_       [4]byte
+}
+
+const (
+	BLKPG = 0x20001269
+)
+
+type XDPUmemReg struct {
+	Addr     uint64
+	Len      uint64
+	Size     uint32
+	Headroom uint32
+	Flags    uint32
+	_        [4]byte
+}
+
+type CryptoUserAlg struct {
+	Name        [64]int8
+	Driver_name [64]int8
+	Module_name [64]int8
+	Type        uint32
+	Mask        uint32
+	Refcnt      uint32
+	Flags       uint32
+}
+
+type CryptoStatAEAD struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatAKCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Verify_cnt   uint64
+	Sign_cnt     uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCipher struct {
+	Type         [64]int8
+	Encrypt_cnt  uint64
+	Encrypt_tlen uint64
+	Decrypt_cnt  uint64
+	Decrypt_tlen uint64
+	Err_cnt      uint64
+}
+
+type CryptoStatCompress struct {
+	Type            [64]int8
+	Compress_cnt    uint64
+	Compress_tlen   uint64
+	Decompress_cnt  uint64
+	Decompress_tlen uint64
+	Err_cnt         uint64
+}
+
+type CryptoStatHash struct {
+	Type      [64]int8
+	Hash_cnt  uint64
+	Hash_tlen uint64
+	Err_cnt   uint64
+}
+
+type CryptoStatKPP struct {
+	Type                      [64]int8
+	Setsecret_cnt             uint64
+	Generate_public_key_cnt   uint64
+	Compute_shared_secret_cnt uint64
+	Err_cnt                   uint64
+}
+
+type CryptoStatRNG struct {
+	Type          [64]int8
+	Generate_cnt  uint64
+	Generate_tlen uint64
+	Seed_cnt      uint64
+	Err_cnt       uint64
+}
+
+type CryptoStatLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportLarval struct {
+	Type [64]int8
+}
+
+type CryptoReportHash struct {
+	Type       [64]int8
+	Blocksize  uint32
+	Digestsize uint32
+}
+
+type CryptoReportCipher struct {
+	Type        [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+}
+
+type CryptoReportBlkCipher struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Min_keysize uint32
+	Max_keysize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportAEAD struct {
+	Type        [64]int8
+	Geniv       [64]int8
+	Blocksize   uint32
+	Maxauthsize uint32
+	Ivsize      uint32
+}
+
+type CryptoReportComp struct {
+	Type [64]int8
+}
+
+type CryptoReportRNG struct {
+	Type     [64]int8
+	Seedsize uint32
+}
+
+type CryptoReportAKCipher struct {
+	Type [64]int8
+}
+
+type CryptoReportKPP struct {
+	Type [64]int8
+}
+
+type CryptoReportAcomp struct {
+	Type [64]int8
+}
+
+type LoopInfo struct {
+	Number           int32
+	Device           uint32
+	Inode            uint64
+	Rdevice          uint32
+	Offset           int32
+	Encrypt_type     int32
+	Encrypt_key_size int32
+	Flags            int32
+	Name             [64]int8
+	Encrypt_key      [32]uint8
+	Init             [2]uint64
+	Reserved         [4]int8
+	_                [4]byte
+}
+
+type TIPCSubscr struct {
+	Seq     TIPCServiceRange
+	Timeout uint32
+	Filter  uint32
+	Handle  [8]int8
+}
+
+type TIPCSIOCLNReq struct {
+	Peer     uint32
+	Id       uint32
+	Linkname [68]int8
+}
+
+type TIPCSIOCNodeIDReq struct {
+	Peer uint32
+	Id   [16]int8
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_netbsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_netbsd_386.go
new file mode 100644
index 000000000..a89100c08
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_netbsd_386.go
@@ -0,0 +1,498 @@
+// cgo -godefs types_netbsd.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build 386,netbsd
+
+package unix
+
+const (
+	SizeofPtr      = 0x4
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x4
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int32
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int32
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int32
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int32
+	Ixrss    int32
+	Idrss    int32
+	Isrss    int32
+	Minflt   int32
+	Majflt   int32
+	Nswap    int32
+	Inblock  int32
+	Oublock  int32
+	Msgsnd   int32
+	Msgrcv   int32
+	Nsignals int32
+	Nvcsw    int32
+	Nivcsw   int32
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type _Gid_t uint32
+
+type Stat_t struct {
+	Dev     uint64
+	Mode    uint32
+	Ino     uint64
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	Rdev    uint64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Btim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize uint32
+	Flags   uint32
+	Gen     uint32
+	Spare   [2]uint32
+}
+
+type Statfs_t [0]byte
+
+type Statvfs_t struct {
+	Flag        uint32
+	Bsize       uint32
+	Frsize      uint32
+	Iosize      uint32
+	Blocks      uint64
+	Bfree       uint64
+	Bavail      uint64
+	Bresvd      uint64
+	Files       uint64
+	Ffree       uint64
+	Favail      uint64
+	Fresvd      uint64
+	Syncreads   uint64
+	Syncwrites  uint64
+	Asyncreads  uint64
+	Asyncwrites uint64
+	Fsidx       Fsid
+	Fsid        uint32
+	Namemax     uint32
+	Owner       uint32
+	Spare       [4]uint32
+	Fstypename  [32]byte
+	Mntonname   [1024]byte
+	Mntfromname [1024]byte
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+}
+
+type Dirent struct {
+	Fileno    uint64
+	Reclen    uint16
+	Namlen    uint16
+	Type      uint8
+	Name      [512]int8
+	Pad_cgo_0 [3]byte
+}
+
+type Fsid struct {
+	X__fsid_val [2]int32
+}
+
+const (
+	PathMax = 0x400
+)
+
+const (
+	ST_WAIT   = 0x1
+	ST_NOWAIT = 0x2
+)
+
+const (
+	FADV_NORMAL     = 0x0
+	FADV_RANDOM     = 0x1
+	FADV_SEQUENTIAL = 0x2
+	FADV_WILLNEED   = 0x3
+	FADV_DONTNEED   = 0x4
+	FADV_NOREUSE    = 0x5
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [12]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x14
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x1c
+	SizeofCmsghdr          = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_TRACEME = 0x0
+	PTRACE_CONT    = 0x7
+	PTRACE_KILL    = 0x8
+)
+
+type Kevent_t struct {
+	Ident  uint32
+	Filter uint32
+	Flags  uint32
+	Fflags uint32
+	Data   int64
+	Udata  int32
+}
+
+type FdSet struct {
+	Bits [8]uint32
+}
+
+const (
+	SizeofIfMsghdr         = 0x98
+	SizeofIfData           = 0x84
+	SizeofIfaMsghdr        = 0x18
+	SizeofIfAnnounceMsghdr = 0x18
+	SizeofRtMsghdr         = 0x78
+	SizeofRtMetrics        = 0x50
+)
+
+type IfMsghdr struct {
+	Msglen    uint16
+	Version   uint8
+	Type      uint8
+	Addrs     int32
+	Flags     int32
+	Index     uint16
+	Pad_cgo_0 [2]byte
+	Data      IfData
+	Pad_cgo_1 [4]byte
+}
+
+type IfData struct {
+	Type       uint8
+	Addrlen    uint8
+	Hdrlen     uint8
+	Pad_cgo_0  [1]byte
+	Link_state int32
+	Mtu        uint64
+	Metric     uint64
+	Baudrate   uint64
+	Ipackets   uint64
+	Ierrors    uint64
+	Opackets   uint64
+	Oerrors    uint64
+	Collisions uint64
+	Ibytes     uint64
+	Obytes     uint64
+	Imcasts    uint64
+	Omcasts    uint64
+	Iqdrops    uint64
+	Noproto    uint64
+	Lastchange Timespec
+}
+
+type IfaMsghdr struct {
+	Msglen    uint16
+	Version   uint8
+	Type      uint8
+	Addrs     int32
+	Flags     int32
+	Metric    int32
+	Index     uint16
+	Pad_cgo_0 [6]byte
+}
+
+type IfAnnounceMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	Name    [16]int8
+	What    uint16
+}
+
+type RtMsghdr struct {
+	Msglen    uint16
+	Version   uint8
+	Type      uint8
+	Index     uint16
+	Pad_cgo_0 [2]byte
+	Flags     int32
+	Addrs     int32
+	Pid       int32
+	Seq       int32
+	Errno     int32
+	Use       int32
+	Inits     int32
+	Pad_cgo_1 [4]byte
+	Rmx       RtMetrics
+}
+
+type RtMetrics struct {
+	Locks    uint64
+	Mtu      uint64
+	Hopcount uint64
+	Recvpipe uint64
+	Sendpipe uint64
+	Ssthresh uint64
+	Rtt      uint64
+	Rttvar   uint64
+	Expire   int64
+	Pksent   int64
+}
+
+type Mclpool [0]byte
+
+const (
+	SizeofBpfVersion = 0x4
+	SizeofBpfStat    = 0x80
+	SizeofBpfProgram = 0x8
+	SizeofBpfInsn    = 0x8
+	SizeofBpfHdr     = 0x14
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv    uint64
+	Drop    uint64
+	Capt    uint64
+	Padding [13]uint64
+}
+
+type BpfProgram struct {
+	Len   uint32
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp    BpfTimeval
+	Caplen    uint32
+	Datalen   uint32
+	Hdrlen    uint16
+	Pad_cgo_0 [2]byte
+}
+
+type BpfTimeval struct {
+	Sec  int32
+	Usec int32
+}
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [20]uint8
+	Ispeed int32
+	Ospeed int32
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+type Ptmget struct {
+	Cfd int32
+	Sfd int32
+	Cn  [1024]byte
+	Sn  [1024]byte
+}
+
+const (
+	AT_FDCWD            = -0x64
+	AT_SYMLINK_FOLLOW   = 0x400
+	AT_SYMLINK_NOFOLLOW = 0x200
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR    = 0x8
+	POLLHUP    = 0x10
+	POLLIN     = 0x1
+	POLLNVAL   = 0x20
+	POLLOUT    = 0x4
+	POLLPRI    = 0x2
+	POLLRDBAND = 0x80
+	POLLRDNORM = 0x40
+	POLLWRBAND = 0x100
+	POLLWRNORM = 0x4
+)
+
+type Sysctlnode struct {
+	Flags           uint32
+	Num             int32
+	Name            [32]int8
+	Ver             uint32
+	X__rsvd         uint32
+	Un              [16]byte
+	X_sysctl_size   [8]byte
+	X_sysctl_func   [8]byte
+	X_sysctl_parent [8]byte
+	X_sysctl_desc   [8]byte
+}
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz      int32
+	Tick    int32
+	Tickadj int32
+	Stathz  int32
+	Profhz  int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_netbsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_netbsd_amd64.go
new file mode 100644
index 000000000..289184e0b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_netbsd_amd64.go
@@ -0,0 +1,506 @@
+// cgo -godefs types_netbsd.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,netbsd
+
+package unix
+
+const (
+	SizeofPtr      = 0x8
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x8
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int64
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec       int64
+	Usec      int32
+	Pad_cgo_0 [4]byte
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type _Gid_t uint32
+
+type Stat_t struct {
+	Dev     uint64
+	Mode    uint32
+	_       [4]byte
+	Ino     uint64
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	_       [4]byte
+	Rdev    uint64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Btim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize uint32
+	Flags   uint32
+	Gen     uint32
+	Spare   [2]uint32
+	_       [4]byte
+}
+
+type Statfs_t [0]byte
+
+type Statvfs_t struct {
+	Flag        uint64
+	Bsize       uint64
+	Frsize      uint64
+	Iosize      uint64
+	Blocks      uint64
+	Bfree       uint64
+	Bavail      uint64
+	Bresvd      uint64
+	Files       uint64
+	Ffree       uint64
+	Favail      uint64
+	Fresvd      uint64
+	Syncreads   uint64
+	Syncwrites  uint64
+	Asyncreads  uint64
+	Asyncwrites uint64
+	Fsidx       Fsid
+	Fsid        uint64
+	Namemax     uint64
+	Owner       uint32
+	Spare       [4]uint32
+	Fstypename  [32]byte
+	Mntonname   [1024]byte
+	Mntfromname [1024]byte
+	_           [4]byte
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+}
+
+type Dirent struct {
+	Fileno    uint64
+	Reclen    uint16
+	Namlen    uint16
+	Type      uint8
+	Name      [512]int8
+	Pad_cgo_0 [3]byte
+}
+
+type Fsid struct {
+	X__fsid_val [2]int32
+}
+
+const (
+	PathMax = 0x400
+)
+
+const (
+	ST_WAIT   = 0x1
+	ST_NOWAIT = 0x2
+)
+
+const (
+	FADV_NORMAL     = 0x0
+	FADV_RANDOM     = 0x1
+	FADV_SEQUENTIAL = 0x2
+	FADV_WILLNEED   = 0x3
+	FADV_DONTNEED   = 0x4
+	FADV_NOREUSE    = 0x5
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [12]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *Iovec
+	Iovlen     int32
+	Pad_cgo_1  [4]byte
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x14
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x30
+	SizeofCmsghdr          = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_TRACEME = 0x0
+	PTRACE_CONT    = 0x7
+	PTRACE_KILL    = 0x8
+)
+
+type Kevent_t struct {
+	Ident     uint64
+	Filter    uint32
+	Flags     uint32
+	Fflags    uint32
+	Pad_cgo_0 [4]byte
+	Data      int64
+	Udata     int64
+}
+
+type FdSet struct {
+	Bits [8]uint32
+}
+
+const (
+	SizeofIfMsghdr         = 0x98
+	SizeofIfData           = 0x88
+	SizeofIfaMsghdr        = 0x18
+	SizeofIfAnnounceMsghdr = 0x18
+	SizeofRtMsghdr         = 0x78
+	SizeofRtMetrics        = 0x50
+)
+
+type IfMsghdr struct {
+	Msglen    uint16
+	Version   uint8
+	Type      uint8
+	Addrs     int32
+	Flags     int32
+	Index     uint16
+	Pad_cgo_0 [2]byte
+	Data      IfData
+}
+
+type IfData struct {
+	Type       uint8
+	Addrlen    uint8
+	Hdrlen     uint8
+	Pad_cgo_0  [1]byte
+	Link_state int32
+	Mtu        uint64
+	Metric     uint64
+	Baudrate   uint64
+	Ipackets   uint64
+	Ierrors    uint64
+	Opackets   uint64
+	Oerrors    uint64
+	Collisions uint64
+	Ibytes     uint64
+	Obytes     uint64
+	Imcasts    uint64
+	Omcasts    uint64
+	Iqdrops    uint64
+	Noproto    uint64
+	Lastchange Timespec
+}
+
+type IfaMsghdr struct {
+	Msglen    uint16
+	Version   uint8
+	Type      uint8
+	Addrs     int32
+	Flags     int32
+	Metric    int32
+	Index     uint16
+	Pad_cgo_0 [6]byte
+}
+
+type IfAnnounceMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	Name    [16]int8
+	What    uint16
+}
+
+type RtMsghdr struct {
+	Msglen    uint16
+	Version   uint8
+	Type      uint8
+	Index     uint16
+	Pad_cgo_0 [2]byte
+	Flags     int32
+	Addrs     int32
+	Pid       int32
+	Seq       int32
+	Errno     int32
+	Use       int32
+	Inits     int32
+	Pad_cgo_1 [4]byte
+	Rmx       RtMetrics
+}
+
+type RtMetrics struct {
+	Locks    uint64
+	Mtu      uint64
+	Hopcount uint64
+	Recvpipe uint64
+	Sendpipe uint64
+	Ssthresh uint64
+	Rtt      uint64
+	Rttvar   uint64
+	Expire   int64
+	Pksent   int64
+}
+
+type Mclpool [0]byte
+
+const (
+	SizeofBpfVersion = 0x4
+	SizeofBpfStat    = 0x80
+	SizeofBpfProgram = 0x10
+	SizeofBpfInsn    = 0x8
+	SizeofBpfHdr     = 0x20
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv    uint64
+	Drop    uint64
+	Capt    uint64
+	Padding [13]uint64
+}
+
+type BpfProgram struct {
+	Len       uint32
+	Pad_cgo_0 [4]byte
+	Insns     *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp    BpfTimeval
+	Caplen    uint32
+	Datalen   uint32
+	Hdrlen    uint16
+	Pad_cgo_0 [6]byte
+}
+
+type BpfTimeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [20]uint8
+	Ispeed int32
+	Ospeed int32
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+type Ptmget struct {
+	Cfd int32
+	Sfd int32
+	Cn  [1024]byte
+	Sn  [1024]byte
+}
+
+const (
+	AT_FDCWD            = -0x64
+	AT_SYMLINK_FOLLOW   = 0x400
+	AT_SYMLINK_NOFOLLOW = 0x200
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR    = 0x8
+	POLLHUP    = 0x10
+	POLLIN     = 0x1
+	POLLNVAL   = 0x20
+	POLLOUT    = 0x4
+	POLLPRI    = 0x2
+	POLLRDBAND = 0x80
+	POLLRDNORM = 0x40
+	POLLWRBAND = 0x100
+	POLLWRNORM = 0x4
+)
+
+type Sysctlnode struct {
+	Flags           uint32
+	Num             int32
+	Name            [32]int8
+	Ver             uint32
+	X__rsvd         uint32
+	Un              [16]byte
+	X_sysctl_size   [8]byte
+	X_sysctl_func   [8]byte
+	X_sysctl_parent [8]byte
+	X_sysctl_desc   [8]byte
+}
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz      int32
+	Tick    int32
+	Tickadj int32
+	Stathz  int32
+	Profhz  int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_netbsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_netbsd_arm.go
new file mode 100644
index 000000000..428c450e4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_netbsd_arm.go
@@ -0,0 +1,503 @@
+// cgo -godefs types_netbsd.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm,netbsd
+
+package unix
+
+const (
+	SizeofPtr      = 0x4
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x4
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int32
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec       int64
+	Nsec      int32
+	Pad_cgo_0 [4]byte
+}
+
+type Timeval struct {
+	Sec       int64
+	Usec      int32
+	Pad_cgo_0 [4]byte
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int32
+	Ixrss    int32
+	Idrss    int32
+	Isrss    int32
+	Minflt   int32
+	Majflt   int32
+	Nswap    int32
+	Inblock  int32
+	Oublock  int32
+	Msgsnd   int32
+	Msgrcv   int32
+	Nsignals int32
+	Nvcsw    int32
+	Nivcsw   int32
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type _Gid_t uint32
+
+type Stat_t struct {
+	Dev     uint64
+	Mode    uint32
+	_       [4]byte
+	Ino     uint64
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	_       [4]byte
+	Rdev    uint64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Btim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize uint32
+	Flags   uint32
+	Gen     uint32
+	Spare   [2]uint32
+	_       [4]byte
+}
+
+type Statfs_t [0]byte
+
+type Statvfs_t struct {
+	Flag        uint32
+	Bsize       uint32
+	Frsize      uint32
+	Iosize      uint32
+	Blocks      uint64
+	Bfree       uint64
+	Bavail      uint64
+	Bresvd      uint64
+	Files       uint64
+	Ffree       uint64
+	Favail      uint64
+	Fresvd      uint64
+	Syncreads   uint64
+	Syncwrites  uint64
+	Asyncreads  uint64
+	Asyncwrites uint64
+	Fsidx       Fsid
+	Fsid        uint32
+	Namemax     uint32
+	Owner       uint32
+	Spare       [4]uint32
+	Fstypename  [32]byte
+	Mntonname   [1024]byte
+	Mntfromname [1024]byte
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+}
+
+type Dirent struct {
+	Fileno    uint64
+	Reclen    uint16
+	Namlen    uint16
+	Type      uint8
+	Name      [512]int8
+	Pad_cgo_0 [3]byte
+}
+
+type Fsid struct {
+	X__fsid_val [2]int32
+}
+
+const (
+	PathMax = 0x400
+)
+
+const (
+	ST_WAIT   = 0x1
+	ST_NOWAIT = 0x2
+)
+
+const (
+	FADV_NORMAL     = 0x0
+	FADV_RANDOM     = 0x1
+	FADV_SEQUENTIAL = 0x2
+	FADV_WILLNEED   = 0x3
+	FADV_DONTNEED   = 0x4
+	FADV_NOREUSE    = 0x5
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [12]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     int32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x14
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x1c
+	SizeofCmsghdr          = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_TRACEME = 0x0
+	PTRACE_CONT    = 0x7
+	PTRACE_KILL    = 0x8
+)
+
+type Kevent_t struct {
+	Ident     uint32
+	Filter    uint32
+	Flags     uint32
+	Fflags    uint32
+	Data      int64
+	Udata     int32
+	Pad_cgo_0 [4]byte
+}
+
+type FdSet struct {
+	Bits [8]uint32
+}
+
+const (
+	SizeofIfMsghdr         = 0x98
+	SizeofIfData           = 0x88
+	SizeofIfaMsghdr        = 0x18
+	SizeofIfAnnounceMsghdr = 0x18
+	SizeofRtMsghdr         = 0x78
+	SizeofRtMetrics        = 0x50
+)
+
+type IfMsghdr struct {
+	Msglen    uint16
+	Version   uint8
+	Type      uint8
+	Addrs     int32
+	Flags     int32
+	Index     uint16
+	Pad_cgo_0 [2]byte
+	Data      IfData
+}
+
+type IfData struct {
+	Type       uint8
+	Addrlen    uint8
+	Hdrlen     uint8
+	Pad_cgo_0  [1]byte
+	Link_state int32
+	Mtu        uint64
+	Metric     uint64
+	Baudrate   uint64
+	Ipackets   uint64
+	Ierrors    uint64
+	Opackets   uint64
+	Oerrors    uint64
+	Collisions uint64
+	Ibytes     uint64
+	Obytes     uint64
+	Imcasts    uint64
+	Omcasts    uint64
+	Iqdrops    uint64
+	Noproto    uint64
+	Lastchange Timespec
+}
+
+type IfaMsghdr struct {
+	Msglen    uint16
+	Version   uint8
+	Type      uint8
+	Addrs     int32
+	Flags     int32
+	Metric    int32
+	Index     uint16
+	Pad_cgo_0 [6]byte
+}
+
+type IfAnnounceMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	Name    [16]int8
+	What    uint16
+}
+
+type RtMsghdr struct {
+	Msglen    uint16
+	Version   uint8
+	Type      uint8
+	Index     uint16
+	Pad_cgo_0 [2]byte
+	Flags     int32
+	Addrs     int32
+	Pid       int32
+	Seq       int32
+	Errno     int32
+	Use       int32
+	Inits     int32
+	Pad_cgo_1 [4]byte
+	Rmx       RtMetrics
+}
+
+type RtMetrics struct {
+	Locks    uint64
+	Mtu      uint64
+	Hopcount uint64
+	Recvpipe uint64
+	Sendpipe uint64
+	Ssthresh uint64
+	Rtt      uint64
+	Rttvar   uint64
+	Expire   int64
+	Pksent   int64
+}
+
+type Mclpool [0]byte
+
+const (
+	SizeofBpfVersion = 0x4
+	SizeofBpfStat    = 0x80
+	SizeofBpfProgram = 0x8
+	SizeofBpfInsn    = 0x8
+	SizeofBpfHdr     = 0x14
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv    uint64
+	Drop    uint64
+	Capt    uint64
+	Padding [13]uint64
+}
+
+type BpfProgram struct {
+	Len   uint32
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp    BpfTimeval
+	Caplen    uint32
+	Datalen   uint32
+	Hdrlen    uint16
+	Pad_cgo_0 [2]byte
+}
+
+type BpfTimeval struct {
+	Sec  int32
+	Usec int32
+}
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [20]uint8
+	Ispeed int32
+	Ospeed int32
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+type Ptmget struct {
+	Cfd int32
+	Sfd int32
+	Cn  [1024]byte
+	Sn  [1024]byte
+}
+
+const (
+	AT_FDCWD            = -0x64
+	AT_SYMLINK_FOLLOW   = 0x400
+	AT_SYMLINK_NOFOLLOW = 0x200
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR    = 0x8
+	POLLHUP    = 0x10
+	POLLIN     = 0x1
+	POLLNVAL   = 0x20
+	POLLOUT    = 0x4
+	POLLPRI    = 0x2
+	POLLRDBAND = 0x80
+	POLLRDNORM = 0x40
+	POLLWRBAND = 0x100
+	POLLWRNORM = 0x4
+)
+
+type Sysctlnode struct {
+	Flags           uint32
+	Num             int32
+	Name            [32]int8
+	Ver             uint32
+	X__rsvd         uint32
+	Un              [16]byte
+	X_sysctl_size   [8]byte
+	X_sysctl_func   [8]byte
+	X_sysctl_parent [8]byte
+	X_sysctl_desc   [8]byte
+}
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz      int32
+	Tick    int32
+	Tickadj int32
+	Stathz  int32
+	Profhz  int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_netbsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_netbsd_arm64.go
new file mode 100644
index 000000000..6f1f2842c
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_netbsd_arm64.go
@@ -0,0 +1,506 @@
+// cgo -godefs types_netbsd.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm64,netbsd
+
+package unix
+
+const (
+	SizeofPtr      = 0x8
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x8
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int64
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec       int64
+	Usec      int32
+	Pad_cgo_0 [4]byte
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type _Gid_t uint32
+
+type Stat_t struct {
+	Dev     uint64
+	Mode    uint32
+	_       [4]byte
+	Ino     uint64
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	_       [4]byte
+	Rdev    uint64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Btim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize uint32
+	Flags   uint32
+	Gen     uint32
+	Spare   [2]uint32
+	_       [4]byte
+}
+
+type Statfs_t [0]byte
+
+type Statvfs_t struct {
+	Flag        uint64
+	Bsize       uint64
+	Frsize      uint64
+	Iosize      uint64
+	Blocks      uint64
+	Bfree       uint64
+	Bavail      uint64
+	Bresvd      uint64
+	Files       uint64
+	Ffree       uint64
+	Favail      uint64
+	Fresvd      uint64
+	Syncreads   uint64
+	Syncwrites  uint64
+	Asyncreads  uint64
+	Asyncwrites uint64
+	Fsidx       Fsid
+	Fsid        uint64
+	Namemax     uint64
+	Owner       uint32
+	Spare       [4]uint32
+	Fstypename  [32]byte
+	Mntonname   [1024]byte
+	Mntfromname [1024]byte
+	_           [4]byte
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+}
+
+type Dirent struct {
+	Fileno    uint64
+	Reclen    uint16
+	Namlen    uint16
+	Type      uint8
+	Name      [512]int8
+	Pad_cgo_0 [3]byte
+}
+
+type Fsid struct {
+	X__fsid_val [2]int32
+}
+
+const (
+	PathMax = 0x400
+)
+
+const (
+	ST_WAIT   = 0x1
+	ST_NOWAIT = 0x2
+)
+
+const (
+	FADV_NORMAL     = 0x0
+	FADV_RANDOM     = 0x1
+	FADV_SEQUENTIAL = 0x2
+	FADV_WILLNEED   = 0x3
+	FADV_DONTNEED   = 0x4
+	FADV_NOREUSE    = 0x5
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [12]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Pad_cgo_0  [4]byte
+	Iov        *Iovec
+	Iovlen     int32
+	Pad_cgo_1  [4]byte
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x14
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x30
+	SizeofCmsghdr          = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_TRACEME = 0x0
+	PTRACE_CONT    = 0x7
+	PTRACE_KILL    = 0x8
+)
+
+type Kevent_t struct {
+	Ident     uint64
+	Filter    uint32
+	Flags     uint32
+	Fflags    uint32
+	Pad_cgo_0 [4]byte
+	Data      int64
+	Udata     int64
+}
+
+type FdSet struct {
+	Bits [8]uint32
+}
+
+const (
+	SizeofIfMsghdr         = 0x98
+	SizeofIfData           = 0x88
+	SizeofIfaMsghdr        = 0x18
+	SizeofIfAnnounceMsghdr = 0x18
+	SizeofRtMsghdr         = 0x78
+	SizeofRtMetrics        = 0x50
+)
+
+type IfMsghdr struct {
+	Msglen    uint16
+	Version   uint8
+	Type      uint8
+	Addrs     int32
+	Flags     int32
+	Index     uint16
+	Pad_cgo_0 [2]byte
+	Data      IfData
+}
+
+type IfData struct {
+	Type       uint8
+	Addrlen    uint8
+	Hdrlen     uint8
+	Pad_cgo_0  [1]byte
+	Link_state int32
+	Mtu        uint64
+	Metric     uint64
+	Baudrate   uint64
+	Ipackets   uint64
+	Ierrors    uint64
+	Opackets   uint64
+	Oerrors    uint64
+	Collisions uint64
+	Ibytes     uint64
+	Obytes     uint64
+	Imcasts    uint64
+	Omcasts    uint64
+	Iqdrops    uint64
+	Noproto    uint64
+	Lastchange Timespec
+}
+
+type IfaMsghdr struct {
+	Msglen    uint16
+	Version   uint8
+	Type      uint8
+	Addrs     int32
+	Flags     int32
+	Metric    int32
+	Index     uint16
+	Pad_cgo_0 [6]byte
+}
+
+type IfAnnounceMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	Name    [16]int8
+	What    uint16
+}
+
+type RtMsghdr struct {
+	Msglen    uint16
+	Version   uint8
+	Type      uint8
+	Index     uint16
+	Pad_cgo_0 [2]byte
+	Flags     int32
+	Addrs     int32
+	Pid       int32
+	Seq       int32
+	Errno     int32
+	Use       int32
+	Inits     int32
+	Pad_cgo_1 [4]byte
+	Rmx       RtMetrics
+}
+
+type RtMetrics struct {
+	Locks    uint64
+	Mtu      uint64
+	Hopcount uint64
+	Recvpipe uint64
+	Sendpipe uint64
+	Ssthresh uint64
+	Rtt      uint64
+	Rttvar   uint64
+	Expire   int64
+	Pksent   int64
+}
+
+type Mclpool [0]byte
+
+const (
+	SizeofBpfVersion = 0x4
+	SizeofBpfStat    = 0x80
+	SizeofBpfProgram = 0x10
+	SizeofBpfInsn    = 0x8
+	SizeofBpfHdr     = 0x20
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv    uint64
+	Drop    uint64
+	Capt    uint64
+	Padding [13]uint64
+}
+
+type BpfProgram struct {
+	Len       uint32
+	Pad_cgo_0 [4]byte
+	Insns     *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp    BpfTimeval
+	Caplen    uint32
+	Datalen   uint32
+	Hdrlen    uint16
+	Pad_cgo_0 [6]byte
+}
+
+type BpfTimeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [20]uint8
+	Ispeed int32
+	Ospeed int32
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+type Ptmget struct {
+	Cfd int32
+	Sfd int32
+	Cn  [1024]byte
+	Sn  [1024]byte
+}
+
+const (
+	AT_FDCWD            = -0x64
+	AT_SYMLINK_FOLLOW   = 0x400
+	AT_SYMLINK_NOFOLLOW = 0x200
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR    = 0x8
+	POLLHUP    = 0x10
+	POLLIN     = 0x1
+	POLLNVAL   = 0x20
+	POLLOUT    = 0x4
+	POLLPRI    = 0x2
+	POLLRDBAND = 0x80
+	POLLRDNORM = 0x40
+	POLLWRBAND = 0x100
+	POLLWRNORM = 0x4
+)
+
+type Sysctlnode struct {
+	Flags           uint32
+	Num             int32
+	Name            [32]int8
+	Ver             uint32
+	X__rsvd         uint32
+	Un              [16]byte
+	X_sysctl_size   [8]byte
+	X_sysctl_func   [8]byte
+	X_sysctl_parent [8]byte
+	X_sysctl_desc   [8]byte
+}
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz      int32
+	Tick    int32
+	Tickadj int32
+	Stathz  int32
+	Profhz  int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_386.go
new file mode 100644
index 000000000..61ea0019a
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_386.go
@@ -0,0 +1,571 @@
+// cgo -godefs types_openbsd.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build 386,openbsd
+
+package unix
+
+const (
+	SizeofPtr      = 0x4
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x4
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int32
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int32
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int32
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int32
+	Ixrss    int32
+	Idrss    int32
+	Isrss    int32
+	Minflt   int32
+	Majflt   int32
+	Nswap    int32
+	Inblock  int32
+	Oublock  int32
+	Msgsnd   int32
+	Msgrcv   int32
+	Nsignals int32
+	Nvcsw    int32
+	Nivcsw   int32
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type _Gid_t uint32
+
+type Stat_t struct {
+	Mode           uint32
+	Dev            int32
+	Ino            uint64
+	Nlink          uint32
+	Uid            uint32
+	Gid            uint32
+	Rdev           int32
+	Atim           Timespec
+	Mtim           Timespec
+	Ctim           Timespec
+	Size           int64
+	Blocks         int64
+	Blksize        uint32
+	Flags          uint32
+	Gen            uint32
+	X__st_birthtim Timespec
+}
+
+type Statfs_t struct {
+	F_flags       uint32
+	F_bsize       uint32
+	F_iosize      uint32
+	F_blocks      uint64
+	F_bfree       uint64
+	F_bavail      int64
+	F_files       uint64
+	F_ffree       uint64
+	F_favail      int64
+	F_syncwrites  uint64
+	F_syncreads   uint64
+	F_asyncwrites uint64
+	F_asyncreads  uint64
+	F_fsid        Fsid
+	F_namemax     uint32
+	F_owner       uint32
+	F_ctime       uint64
+	F_fstypename  [16]int8
+	F_mntonname   [90]int8
+	F_mntfromname [90]int8
+	F_mntfromspec [90]int8
+	Pad_cgo_0     [2]byte
+	Mount_info    [160]byte
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+}
+
+type Dirent struct {
+	Fileno       uint64
+	Off          int64
+	Reclen       uint16
+	Type         uint8
+	Namlen       uint8
+	X__d_padding [4]uint8
+	Name         [256]int8
+}
+
+type Fsid struct {
+	Val [2]int32
+}
+
+const (
+	PathMax = 0x400
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [24]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x20
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x1c
+	SizeofCmsghdr          = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_TRACEME = 0x0
+	PTRACE_CONT    = 0x7
+	PTRACE_KILL    = 0x8
+)
+
+type Kevent_t struct {
+	Ident  uint32
+	Filter int16
+	Flags  uint16
+	Fflags uint32
+	Data   int64
+	Udata  *byte
+}
+
+type FdSet struct {
+	Bits [32]uint32
+}
+
+const (
+	SizeofIfMsghdr         = 0xec
+	SizeofIfData           = 0xd4
+	SizeofIfaMsghdr        = 0x18
+	SizeofIfAnnounceMsghdr = 0x1a
+	SizeofRtMsghdr         = 0x60
+	SizeofRtMetrics        = 0x38
+)
+
+type IfMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Hdrlen  uint16
+	Index   uint16
+	Tableid uint16
+	Pad1    uint8
+	Pad2    uint8
+	Addrs   int32
+	Flags   int32
+	Xflags  int32
+	Data    IfData
+}
+
+type IfData struct {
+	Type         uint8
+	Addrlen      uint8
+	Hdrlen       uint8
+	Link_state   uint8
+	Mtu          uint32
+	Metric       uint32
+	Pad          uint32
+	Baudrate     uint64
+	Ipackets     uint64
+	Ierrors      uint64
+	Opackets     uint64
+	Oerrors      uint64
+	Collisions   uint64
+	Ibytes       uint64
+	Obytes       uint64
+	Imcasts      uint64
+	Omcasts      uint64
+	Iqdrops      uint64
+	Noproto      uint64
+	Capabilities uint32
+	Lastchange   Timeval
+	Mclpool      [7]Mclpool
+}
+
+type IfaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Hdrlen  uint16
+	Index   uint16
+	Tableid uint16
+	Pad1    uint8
+	Pad2    uint8
+	Addrs   int32
+	Flags   int32
+	Metric  int32
+}
+
+type IfAnnounceMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Hdrlen  uint16
+	Index   uint16
+	What    uint16
+	Name    [16]int8
+}
+
+type RtMsghdr struct {
+	Msglen   uint16
+	Version  uint8
+	Type     uint8
+	Hdrlen   uint16
+	Index    uint16
+	Tableid  uint16
+	Priority uint8
+	Mpls     uint8
+	Addrs    int32
+	Flags    int32
+	Fmask    int32
+	Pid      int32
+	Seq      int32
+	Errno    int32
+	Inits    uint32
+	Rmx      RtMetrics
+}
+
+type RtMetrics struct {
+	Pksent   uint64
+	Expire   int64
+	Locks    uint32
+	Mtu      uint32
+	Refcnt   uint32
+	Hopcount uint32
+	Recvpipe uint32
+	Sendpipe uint32
+	Ssthresh uint32
+	Rtt      uint32
+	Rttvar   uint32
+	Pad      uint32
+}
+
+type Mclpool struct {
+	Grown int32
+	Alive uint16
+	Hwm   uint16
+	Cwm   uint16
+	Lwm   uint16
+}
+
+const (
+	SizeofBpfVersion = 0x4
+	SizeofBpfStat    = 0x8
+	SizeofBpfProgram = 0x8
+	SizeofBpfInsn    = 0x8
+	SizeofBpfHdr     = 0x14
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv uint32
+	Drop uint32
+}
+
+type BpfProgram struct {
+	Len   uint32
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp    BpfTimeval
+	Caplen    uint32
+	Datalen   uint32
+	Hdrlen    uint16
+	Pad_cgo_0 [2]byte
+}
+
+type BpfTimeval struct {
+	Sec  uint32
+	Usec uint32
+}
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [20]uint8
+	Ispeed int32
+	Ospeed int32
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+const (
+	AT_FDCWD            = -0x64
+	AT_SYMLINK_FOLLOW   = 0x4
+	AT_SYMLINK_NOFOLLOW = 0x2
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR    = 0x8
+	POLLHUP    = 0x10
+	POLLIN     = 0x1
+	POLLNVAL   = 0x20
+	POLLOUT    = 0x4
+	POLLPRI    = 0x2
+	POLLRDBAND = 0x80
+	POLLRDNORM = 0x40
+	POLLWRBAND = 0x100
+	POLLWRNORM = 0x4
+)
+
+type Sigset_t uint32
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofUvmexp = 0x158
+
+type Uvmexp struct {
+	Pagesize           int32
+	Pagemask           int32
+	Pageshift          int32
+	Npages             int32
+	Free               int32
+	Active             int32
+	Inactive           int32
+	Paging             int32
+	Wired              int32
+	Zeropages          int32
+	Reserve_pagedaemon int32
+	Reserve_kernel     int32
+	Anonpages          int32
+	Vnodepages         int32
+	Vtextpages         int32
+	Freemin            int32
+	Freetarg           int32
+	Inactarg           int32
+	Wiredmax           int32
+	Anonmin            int32
+	Vtextmin           int32
+	Vnodemin           int32
+	Anonminpct         int32
+	Vtextminpct        int32
+	Vnodeminpct        int32
+	Nswapdev           int32
+	Swpages            int32
+	Swpginuse          int32
+	Swpgonly           int32
+	Nswget             int32
+	Nanon              int32
+	Nanonneeded        int32
+	Nfreeanon          int32
+	Faults             int32
+	Traps              int32
+	Intrs              int32
+	Swtch              int32
+	Softs              int32
+	Syscalls           int32
+	Pageins            int32
+	Obsolete_swapins   int32
+	Obsolete_swapouts  int32
+	Pgswapin           int32
+	Pgswapout          int32
+	Forks              int32
+	Forks_ppwait       int32
+	Forks_sharevm      int32
+	Pga_zerohit        int32
+	Pga_zeromiss       int32
+	Zeroaborts         int32
+	Fltnoram           int32
+	Fltnoanon          int32
+	Fltnoamap          int32
+	Fltpgwait          int32
+	Fltpgrele          int32
+	Fltrelck           int32
+	Fltrelckok         int32
+	Fltanget           int32
+	Fltanretry         int32
+	Fltamcopy          int32
+	Fltnamap           int32
+	Fltnomap           int32
+	Fltlget            int32
+	Fltget             int32
+	Flt_anon           int32
+	Flt_acow           int32
+	Flt_obj            int32
+	Flt_prcopy         int32
+	Flt_przero         int32
+	Pdwoke             int32
+	Pdrevs             int32
+	Pdswout            int32
+	Pdfreed            int32
+	Pdscans            int32
+	Pdanscan           int32
+	Pdobscan           int32
+	Pdreact            int32
+	Pdbusy             int32
+	Pdpageouts         int32
+	Pdpending          int32
+	Pddeact            int32
+	Pdreanon           int32
+	Pdrevnode          int32
+	Pdrevtext          int32
+	Fpswtch            int32
+	Kmapent            int32
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz      int32
+	Tick    int32
+	Tickadj int32
+	Stathz  int32
+	Profhz  int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_amd64.go
new file mode 100644
index 000000000..87a493f68
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_amd64.go
@@ -0,0 +1,571 @@
+// cgo -godefs types_openbsd.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,openbsd
+
+package unix
+
+const (
+	SizeofPtr      = 0x8
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x8
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int64
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type _Gid_t uint32
+
+type Stat_t struct {
+	Mode    uint32
+	Dev     int32
+	Ino     uint64
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	Rdev    int32
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize int32
+	Flags   uint32
+	Gen     uint32
+	_       [4]byte
+	_       Timespec
+}
+
+type Statfs_t struct {
+	F_flags       uint32
+	F_bsize       uint32
+	F_iosize      uint32
+	_             [4]byte
+	F_blocks      uint64
+	F_bfree       uint64
+	F_bavail      int64
+	F_files       uint64
+	F_ffree       uint64
+	F_favail      int64
+	F_syncwrites  uint64
+	F_syncreads   uint64
+	F_asyncwrites uint64
+	F_asyncreads  uint64
+	F_fsid        Fsid
+	F_namemax     uint32
+	F_owner       uint32
+	F_ctime       uint64
+	F_fstypename  [16]int8
+	F_mntonname   [90]int8
+	F_mntfromname [90]int8
+	F_mntfromspec [90]int8
+	_             [2]byte
+	Mount_info    [160]byte
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+}
+
+type Dirent struct {
+	Fileno uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Namlen uint8
+	_      [4]uint8
+	Name   [256]int8
+}
+
+type Fsid struct {
+	Val [2]int32
+}
+
+const (
+	PathMax = 0x400
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [24]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	_          [4]byte
+	Iov        *Iovec
+	Iovlen     uint32
+	_          [4]byte
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x20
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x30
+	SizeofCmsghdr          = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_TRACEME = 0x0
+	PTRACE_CONT    = 0x7
+	PTRACE_KILL    = 0x8
+)
+
+type Kevent_t struct {
+	Ident  uint64
+	Filter int16
+	Flags  uint16
+	Fflags uint32
+	Data   int64
+	Udata  *byte
+}
+
+type FdSet struct {
+	Bits [32]uint32
+}
+
+const (
+	SizeofIfMsghdr         = 0xa8
+	SizeofIfData           = 0x90
+	SizeofIfaMsghdr        = 0x18
+	SizeofIfAnnounceMsghdr = 0x1a
+	SizeofRtMsghdr         = 0x60
+	SizeofRtMetrics        = 0x38
+)
+
+type IfMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Hdrlen  uint16
+	Index   uint16
+	Tableid uint16
+	Pad1    uint8
+	Pad2    uint8
+	Addrs   int32
+	Flags   int32
+	Xflags  int32
+	Data    IfData
+}
+
+type IfData struct {
+	Type         uint8
+	Addrlen      uint8
+	Hdrlen       uint8
+	Link_state   uint8
+	Mtu          uint32
+	Metric       uint32
+	Rdomain      uint32
+	Baudrate     uint64
+	Ipackets     uint64
+	Ierrors      uint64
+	Opackets     uint64
+	Oerrors      uint64
+	Collisions   uint64
+	Ibytes       uint64
+	Obytes       uint64
+	Imcasts      uint64
+	Omcasts      uint64
+	Iqdrops      uint64
+	Oqdrops      uint64
+	Noproto      uint64
+	Capabilities uint32
+	_            [4]byte
+	Lastchange   Timeval
+}
+
+type IfaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Hdrlen  uint16
+	Index   uint16
+	Tableid uint16
+	Pad1    uint8
+	Pad2    uint8
+	Addrs   int32
+	Flags   int32
+	Metric  int32
+}
+
+type IfAnnounceMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Hdrlen  uint16
+	Index   uint16
+	What    uint16
+	Name    [16]int8
+}
+
+type RtMsghdr struct {
+	Msglen   uint16
+	Version  uint8
+	Type     uint8
+	Hdrlen   uint16
+	Index    uint16
+	Tableid  uint16
+	Priority uint8
+	Mpls     uint8
+	Addrs    int32
+	Flags    int32
+	Fmask    int32
+	Pid      int32
+	Seq      int32
+	Errno    int32
+	Inits    uint32
+	Rmx      RtMetrics
+}
+
+type RtMetrics struct {
+	Pksent   uint64
+	Expire   int64
+	Locks    uint32
+	Mtu      uint32
+	Refcnt   uint32
+	Hopcount uint32
+	Recvpipe uint32
+	Sendpipe uint32
+	Ssthresh uint32
+	Rtt      uint32
+	Rttvar   uint32
+	Pad      uint32
+}
+
+type Mclpool struct{}
+
+const (
+	SizeofBpfVersion = 0x4
+	SizeofBpfStat    = 0x8
+	SizeofBpfProgram = 0x10
+	SizeofBpfInsn    = 0x8
+	SizeofBpfHdr     = 0x14
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv uint32
+	Drop uint32
+}
+
+type BpfProgram struct {
+	Len   uint32
+	_     [4]byte
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp  BpfTimeval
+	Caplen  uint32
+	Datalen uint32
+	Hdrlen  uint16
+	_       [2]byte
+}
+
+type BpfTimeval struct {
+	Sec  uint32
+	Usec uint32
+}
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [20]uint8
+	Ispeed int32
+	Ospeed int32
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+const (
+	AT_FDCWD            = -0x64
+	AT_SYMLINK_FOLLOW   = 0x4
+	AT_SYMLINK_NOFOLLOW = 0x2
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR    = 0x8
+	POLLHUP    = 0x10
+	POLLIN     = 0x1
+	POLLNVAL   = 0x20
+	POLLOUT    = 0x4
+	POLLPRI    = 0x2
+	POLLRDBAND = 0x80
+	POLLRDNORM = 0x40
+	POLLWRBAND = 0x100
+	POLLWRNORM = 0x4
+)
+
+type Sigset_t uint32
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofUvmexp = 0x158
+
+type Uvmexp struct {
+	Pagesize           int32
+	Pagemask           int32
+	Pageshift          int32
+	Npages             int32
+	Free               int32
+	Active             int32
+	Inactive           int32
+	Paging             int32
+	Wired              int32
+	Zeropages          int32
+	Reserve_pagedaemon int32
+	Reserve_kernel     int32
+	Anonpages          int32
+	Vnodepages         int32
+	Vtextpages         int32
+	Freemin            int32
+	Freetarg           int32
+	Inactarg           int32
+	Wiredmax           int32
+	Anonmin            int32
+	Vtextmin           int32
+	Vnodemin           int32
+	Anonminpct         int32
+	Vtextminpct        int32
+	Vnodeminpct        int32
+	Nswapdev           int32
+	Swpages            int32
+	Swpginuse          int32
+	Swpgonly           int32
+	Nswget             int32
+	Nanon              int32
+	Nanonneeded        int32
+	Nfreeanon          int32
+	Faults             int32
+	Traps              int32
+	Intrs              int32
+	Swtch              int32
+	Softs              int32
+	Syscalls           int32
+	Pageins            int32
+	Obsolete_swapins   int32
+	Obsolete_swapouts  int32
+	Pgswapin           int32
+	Pgswapout          int32
+	Forks              int32
+	Forks_ppwait       int32
+	Forks_sharevm      int32
+	Pga_zerohit        int32
+	Pga_zeromiss       int32
+	Zeroaborts         int32
+	Fltnoram           int32
+	Fltnoanon          int32
+	Fltnoamap          int32
+	Fltpgwait          int32
+	Fltpgrele          int32
+	Fltrelck           int32
+	Fltrelckok         int32
+	Fltanget           int32
+	Fltanretry         int32
+	Fltamcopy          int32
+	Fltnamap           int32
+	Fltnomap           int32
+	Fltlget            int32
+	Fltget             int32
+	Flt_anon           int32
+	Flt_acow           int32
+	Flt_obj            int32
+	Flt_prcopy         int32
+	Flt_przero         int32
+	Pdwoke             int32
+	Pdrevs             int32
+	Pdswout            int32
+	Pdfreed            int32
+	Pdscans            int32
+	Pdanscan           int32
+	Pdobscan           int32
+	Pdreact            int32
+	Pdbusy             int32
+	Pdpageouts         int32
+	Pdpending          int32
+	Pddeact            int32
+	Pdreanon           int32
+	Pdrevnode          int32
+	Pdrevtext          int32
+	Fpswtch            int32
+	Kmapent            int32
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz      int32
+	Tick    int32
+	Tickadj int32
+	Stathz  int32
+	Profhz  int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_arm.go
new file mode 100644
index 000000000..d80836efa
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_arm.go
@@ -0,0 +1,572 @@
+// cgo -godefs -- -fsigned-char types_openbsd.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm,openbsd
+
+package unix
+
+const (
+	SizeofPtr      = 0x4
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x4
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int32
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int32
+	_    [4]byte
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int32
+	_    [4]byte
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int32
+	Ixrss    int32
+	Idrss    int32
+	Isrss    int32
+	Minflt   int32
+	Majflt   int32
+	Nswap    int32
+	Inblock  int32
+	Oublock  int32
+	Msgsnd   int32
+	Msgrcv   int32
+	Nsignals int32
+	Nvcsw    int32
+	Nivcsw   int32
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type _Gid_t uint32
+
+type Stat_t struct {
+	Mode    uint32
+	Dev     int32
+	Ino     uint64
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	Rdev    int32
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize int32
+	Flags   uint32
+	Gen     uint32
+	_       [4]byte
+	_       Timespec
+}
+
+type Statfs_t struct {
+	F_flags       uint32
+	F_bsize       uint32
+	F_iosize      uint32
+	_             [4]byte
+	F_blocks      uint64
+	F_bfree       uint64
+	F_bavail      int64
+	F_files       uint64
+	F_ffree       uint64
+	F_favail      int64
+	F_syncwrites  uint64
+	F_syncreads   uint64
+	F_asyncwrites uint64
+	F_asyncreads  uint64
+	F_fsid        Fsid
+	F_namemax     uint32
+	F_owner       uint32
+	F_ctime       uint64
+	F_fstypename  [16]int8
+	F_mntonname   [90]int8
+	F_mntfromname [90]int8
+	F_mntfromspec [90]int8
+	_             [2]byte
+	Mount_info    [160]byte
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+}
+
+type Dirent struct {
+	Fileno uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Namlen uint8
+	_      [4]uint8
+	Name   [256]int8
+}
+
+type Fsid struct {
+	Val [2]int32
+}
+
+const (
+	PathMax = 0x400
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [24]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint32
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x20
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x1c
+	SizeofCmsghdr          = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_TRACEME = 0x0
+	PTRACE_CONT    = 0x7
+	PTRACE_KILL    = 0x8
+)
+
+type Kevent_t struct {
+	Ident  uint32
+	Filter int16
+	Flags  uint16
+	Fflags uint32
+	_      [4]byte
+	Data   int64
+	Udata  *byte
+	_      [4]byte
+}
+
+type FdSet struct {
+	Bits [32]uint32
+}
+
+const (
+	SizeofIfMsghdr         = 0xa8
+	SizeofIfData           = 0x90
+	SizeofIfaMsghdr        = 0x18
+	SizeofIfAnnounceMsghdr = 0x1a
+	SizeofRtMsghdr         = 0x60
+	SizeofRtMetrics        = 0x38
+)
+
+type IfMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Hdrlen  uint16
+	Index   uint16
+	Tableid uint16
+	Pad1    uint8
+	Pad2    uint8
+	Addrs   int32
+	Flags   int32
+	Xflags  int32
+	Data    IfData
+}
+
+type IfData struct {
+	Type         uint8
+	Addrlen      uint8
+	Hdrlen       uint8
+	Link_state   uint8
+	Mtu          uint32
+	Metric       uint32
+	Rdomain      uint32
+	Baudrate     uint64
+	Ipackets     uint64
+	Ierrors      uint64
+	Opackets     uint64
+	Oerrors      uint64
+	Collisions   uint64
+	Ibytes       uint64
+	Obytes       uint64
+	Imcasts      uint64
+	Omcasts      uint64
+	Iqdrops      uint64
+	Oqdrops      uint64
+	Noproto      uint64
+	Capabilities uint32
+	_            [4]byte
+	Lastchange   Timeval
+}
+
+type IfaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Hdrlen  uint16
+	Index   uint16
+	Tableid uint16
+	Pad1    uint8
+	Pad2    uint8
+	Addrs   int32
+	Flags   int32
+	Metric  int32
+}
+
+type IfAnnounceMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Hdrlen  uint16
+	Index   uint16
+	What    uint16
+	Name    [16]int8
+}
+
+type RtMsghdr struct {
+	Msglen   uint16
+	Version  uint8
+	Type     uint8
+	Hdrlen   uint16
+	Index    uint16
+	Tableid  uint16
+	Priority uint8
+	Mpls     uint8
+	Addrs    int32
+	Flags    int32
+	Fmask    int32
+	Pid      int32
+	Seq      int32
+	Errno    int32
+	Inits    uint32
+	Rmx      RtMetrics
+}
+
+type RtMetrics struct {
+	Pksent   uint64
+	Expire   int64
+	Locks    uint32
+	Mtu      uint32
+	Refcnt   uint32
+	Hopcount uint32
+	Recvpipe uint32
+	Sendpipe uint32
+	Ssthresh uint32
+	Rtt      uint32
+	Rttvar   uint32
+	Pad      uint32
+}
+
+type Mclpool struct{}
+
+const (
+	SizeofBpfVersion = 0x4
+	SizeofBpfStat    = 0x8
+	SizeofBpfProgram = 0x8
+	SizeofBpfInsn    = 0x8
+	SizeofBpfHdr     = 0x14
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv uint32
+	Drop uint32
+}
+
+type BpfProgram struct {
+	Len   uint32
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp  BpfTimeval
+	Caplen  uint32
+	Datalen uint32
+	Hdrlen  uint16
+	_       [2]byte
+}
+
+type BpfTimeval struct {
+	Sec  uint32
+	Usec uint32
+}
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [20]uint8
+	Ispeed int32
+	Ospeed int32
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+const (
+	AT_FDCWD            = -0x64
+	AT_SYMLINK_FOLLOW   = 0x4
+	AT_SYMLINK_NOFOLLOW = 0x2
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR    = 0x8
+	POLLHUP    = 0x10
+	POLLIN     = 0x1
+	POLLNVAL   = 0x20
+	POLLOUT    = 0x4
+	POLLPRI    = 0x2
+	POLLRDBAND = 0x80
+	POLLRDNORM = 0x40
+	POLLWRBAND = 0x100
+	POLLWRNORM = 0x4
+)
+
+type Sigset_t uint32
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofUvmexp = 0x158
+
+type Uvmexp struct {
+	Pagesize           int32
+	Pagemask           int32
+	Pageshift          int32
+	Npages             int32
+	Free               int32
+	Active             int32
+	Inactive           int32
+	Paging             int32
+	Wired              int32
+	Zeropages          int32
+	Reserve_pagedaemon int32
+	Reserve_kernel     int32
+	Unused01           int32
+	Vnodepages         int32
+	Vtextpages         int32
+	Freemin            int32
+	Freetarg           int32
+	Inactarg           int32
+	Wiredmax           int32
+	Anonmin            int32
+	Vtextmin           int32
+	Vnodemin           int32
+	Anonminpct         int32
+	Vtextminpct        int32
+	Vnodeminpct        int32
+	Nswapdev           int32
+	Swpages            int32
+	Swpginuse          int32
+	Swpgonly           int32
+	Nswget             int32
+	Nanon              int32
+	Unused05           int32
+	Unused06           int32
+	Faults             int32
+	Traps              int32
+	Intrs              int32
+	Swtch              int32
+	Softs              int32
+	Syscalls           int32
+	Pageins            int32
+	Unused07           int32
+	Unused08           int32
+	Pgswapin           int32
+	Pgswapout          int32
+	Forks              int32
+	Forks_ppwait       int32
+	Forks_sharevm      int32
+	Pga_zerohit        int32
+	Pga_zeromiss       int32
+	Unused09           int32
+	Fltnoram           int32
+	Fltnoanon          int32
+	Fltnoamap          int32
+	Fltpgwait          int32
+	Fltpgrele          int32
+	Fltrelck           int32
+	Fltrelckok         int32
+	Fltanget           int32
+	Fltanretry         int32
+	Fltamcopy          int32
+	Fltnamap           int32
+	Fltnomap           int32
+	Fltlget            int32
+	Fltget             int32
+	Flt_anon           int32
+	Flt_acow           int32
+	Flt_obj            int32
+	Flt_prcopy         int32
+	Flt_przero         int32
+	Pdwoke             int32
+	Pdrevs             int32
+	Pdswout            int32
+	Pdfreed            int32
+	Pdscans            int32
+	Pdanscan           int32
+	Pdobscan           int32
+	Pdreact            int32
+	Pdbusy             int32
+	Pdpageouts         int32
+	Pdpending          int32
+	Pddeact            int32
+	Unused11           int32
+	Unused12           int32
+	Unused13           int32
+	Fpswtch            int32
+	Kmapent            int32
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz      int32
+	Tick    int32
+	Tickadj int32
+	Stathz  int32
+	Profhz  int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_arm64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_arm64.go
new file mode 100644
index 000000000..4e158746f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_arm64.go
@@ -0,0 +1,565 @@
+// cgo -godefs -- -fsigned-char types_openbsd.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build arm64,openbsd
+
+package unix
+
+const (
+	SizeofPtr      = 0x8
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x8
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int64
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type _Gid_t uint32
+
+type Stat_t struct {
+	Mode    uint32
+	Dev     int32
+	Ino     uint64
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	Rdev    int32
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize int32
+	Flags   uint32
+	Gen     uint32
+	_       Timespec
+}
+
+type Statfs_t struct {
+	F_flags       uint32
+	F_bsize       uint32
+	F_iosize      uint32
+	F_blocks      uint64
+	F_bfree       uint64
+	F_bavail      int64
+	F_files       uint64
+	F_ffree       uint64
+	F_favail      int64
+	F_syncwrites  uint64
+	F_syncreads   uint64
+	F_asyncwrites uint64
+	F_asyncreads  uint64
+	F_fsid        Fsid
+	F_namemax     uint32
+	F_owner       uint32
+	F_ctime       uint64
+	F_fstypename  [16]int8
+	F_mntonname   [90]int8
+	F_mntfromname [90]int8
+	F_mntfromspec [90]int8
+	_             [2]byte
+	Mount_info    [160]byte
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+}
+
+type Dirent struct {
+	Fileno uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Namlen uint8
+	_      [4]uint8
+	Name   [256]int8
+}
+
+type Fsid struct {
+	Val [2]int32
+}
+
+const (
+	PathMax = 0x400
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [24]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x20
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x30
+	SizeofCmsghdr          = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_TRACEME = 0x0
+	PTRACE_CONT    = 0x7
+	PTRACE_KILL    = 0x8
+)
+
+type Kevent_t struct {
+	Ident  uint64
+	Filter int16
+	Flags  uint16
+	Fflags uint32
+	Data   int64
+	Udata  *byte
+}
+
+type FdSet struct {
+	Bits [32]uint32
+}
+
+const (
+	SizeofIfMsghdr         = 0xa8
+	SizeofIfData           = 0x90
+	SizeofIfaMsghdr        = 0x18
+	SizeofIfAnnounceMsghdr = 0x1a
+	SizeofRtMsghdr         = 0x60
+	SizeofRtMetrics        = 0x38
+)
+
+type IfMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Hdrlen  uint16
+	Index   uint16
+	Tableid uint16
+	Pad1    uint8
+	Pad2    uint8
+	Addrs   int32
+	Flags   int32
+	Xflags  int32
+	Data    IfData
+}
+
+type IfData struct {
+	Type         uint8
+	Addrlen      uint8
+	Hdrlen       uint8
+	Link_state   uint8
+	Mtu          uint32
+	Metric       uint32
+	Rdomain      uint32
+	Baudrate     uint64
+	Ipackets     uint64
+	Ierrors      uint64
+	Opackets     uint64
+	Oerrors      uint64
+	Collisions   uint64
+	Ibytes       uint64
+	Obytes       uint64
+	Imcasts      uint64
+	Omcasts      uint64
+	Iqdrops      uint64
+	Oqdrops      uint64
+	Noproto      uint64
+	Capabilities uint32
+	Lastchange   Timeval
+}
+
+type IfaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Hdrlen  uint16
+	Index   uint16
+	Tableid uint16
+	Pad1    uint8
+	Pad2    uint8
+	Addrs   int32
+	Flags   int32
+	Metric  int32
+}
+
+type IfAnnounceMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Hdrlen  uint16
+	Index   uint16
+	What    uint16
+	Name    [16]int8
+}
+
+type RtMsghdr struct {
+	Msglen   uint16
+	Version  uint8
+	Type     uint8
+	Hdrlen   uint16
+	Index    uint16
+	Tableid  uint16
+	Priority uint8
+	Mpls     uint8
+	Addrs    int32
+	Flags    int32
+	Fmask    int32
+	Pid      int32
+	Seq      int32
+	Errno    int32
+	Inits    uint32
+	Rmx      RtMetrics
+}
+
+type RtMetrics struct {
+	Pksent   uint64
+	Expire   int64
+	Locks    uint32
+	Mtu      uint32
+	Refcnt   uint32
+	Hopcount uint32
+	Recvpipe uint32
+	Sendpipe uint32
+	Ssthresh uint32
+	Rtt      uint32
+	Rttvar   uint32
+	Pad      uint32
+}
+
+type Mclpool struct{}
+
+const (
+	SizeofBpfVersion = 0x4
+	SizeofBpfStat    = 0x8
+	SizeofBpfProgram = 0x10
+	SizeofBpfInsn    = 0x8
+	SizeofBpfHdr     = 0x14
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv uint32
+	Drop uint32
+}
+
+type BpfProgram struct {
+	Len   uint32
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp  BpfTimeval
+	Caplen  uint32
+	Datalen uint32
+	Hdrlen  uint16
+	_       [2]byte
+}
+
+type BpfTimeval struct {
+	Sec  uint32
+	Usec uint32
+}
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [20]uint8
+	Ispeed int32
+	Ospeed int32
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+const (
+	AT_FDCWD            = -0x64
+	AT_SYMLINK_FOLLOW   = 0x4
+	AT_SYMLINK_NOFOLLOW = 0x2
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR    = 0x8
+	POLLHUP    = 0x10
+	POLLIN     = 0x1
+	POLLNVAL   = 0x20
+	POLLOUT    = 0x4
+	POLLPRI    = 0x2
+	POLLRDBAND = 0x80
+	POLLRDNORM = 0x40
+	POLLWRBAND = 0x100
+	POLLWRNORM = 0x4
+)
+
+type Sigset_t uint32
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofUvmexp = 0x158
+
+type Uvmexp struct {
+	Pagesize           int32
+	Pagemask           int32
+	Pageshift          int32
+	Npages             int32
+	Free               int32
+	Active             int32
+	Inactive           int32
+	Paging             int32
+	Wired              int32
+	Zeropages          int32
+	Reserve_pagedaemon int32
+	Reserve_kernel     int32
+	Unused01           int32
+	Vnodepages         int32
+	Vtextpages         int32
+	Freemin            int32
+	Freetarg           int32
+	Inactarg           int32
+	Wiredmax           int32
+	Anonmin            int32
+	Vtextmin           int32
+	Vnodemin           int32
+	Anonminpct         int32
+	Vtextminpct        int32
+	Vnodeminpct        int32
+	Nswapdev           int32
+	Swpages            int32
+	Swpginuse          int32
+	Swpgonly           int32
+	Nswget             int32
+	Nanon              int32
+	Unused05           int32
+	Unused06           int32
+	Faults             int32
+	Traps              int32
+	Intrs              int32
+	Swtch              int32
+	Softs              int32
+	Syscalls           int32
+	Pageins            int32
+	Unused07           int32
+	Unused08           int32
+	Pgswapin           int32
+	Pgswapout          int32
+	Forks              int32
+	Forks_ppwait       int32
+	Forks_sharevm      int32
+	Pga_zerohit        int32
+	Pga_zeromiss       int32
+	Unused09           int32
+	Fltnoram           int32
+	Fltnoanon          int32
+	Fltnoamap          int32
+	Fltpgwait          int32
+	Fltpgrele          int32
+	Fltrelck           int32
+	Fltrelckok         int32
+	Fltanget           int32
+	Fltanretry         int32
+	Fltamcopy          int32
+	Fltnamap           int32
+	Fltnomap           int32
+	Fltlget            int32
+	Fltget             int32
+	Flt_anon           int32
+	Flt_acow           int32
+	Flt_obj            int32
+	Flt_prcopy         int32
+	Flt_przero         int32
+	Pdwoke             int32
+	Pdrevs             int32
+	Pdswout            int32
+	Pdfreed            int32
+	Pdscans            int32
+	Pdanscan           int32
+	Pdobscan           int32
+	Pdreact            int32
+	Pdbusy             int32
+	Pdpageouts         int32
+	Pdpending          int32
+	Pddeact            int32
+	Unused11           int32
+	Unused12           int32
+	Unused13           int32
+	Fpswtch            int32
+	Kmapent            int32
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz      int32
+	Tick    int32
+	Tickadj int32
+	Stathz  int32
+	Profhz  int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_mips64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_mips64.go
new file mode 100644
index 000000000..992a1f8c0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_openbsd_mips64.go
@@ -0,0 +1,565 @@
+// cgo -godefs -- -fsigned-char types_openbsd.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build mips64,openbsd
+
+package unix
+
+const (
+	SizeofPtr      = 0x8
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x8
+	SizeofLongLong = 0x8
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int64
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type _Gid_t uint32
+
+type Stat_t struct {
+	Mode    uint32
+	Dev     int32
+	Ino     uint64
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	Rdev    int32
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Size    int64
+	Blocks  int64
+	Blksize int32
+	Flags   uint32
+	Gen     uint32
+	_       Timespec
+}
+
+type Statfs_t struct {
+	F_flags       uint32
+	F_bsize       uint32
+	F_iosize      uint32
+	F_blocks      uint64
+	F_bfree       uint64
+	F_bavail      int64
+	F_files       uint64
+	F_ffree       uint64
+	F_favail      int64
+	F_syncwrites  uint64
+	F_syncreads   uint64
+	F_asyncwrites uint64
+	F_asyncreads  uint64
+	F_fsid        Fsid
+	F_namemax     uint32
+	F_owner       uint32
+	F_ctime       uint64
+	F_fstypename  [16]int8
+	F_mntonname   [90]int8
+	F_mntfromname [90]int8
+	F_mntfromspec [90]int8
+	_             [2]byte
+	Mount_info    [160]byte
+}
+
+type Flock_t struct {
+	Start  int64
+	Len    int64
+	Pid    int32
+	Type   int16
+	Whence int16
+}
+
+type Dirent struct {
+	Fileno uint64
+	Off    int64
+	Reclen uint16
+	Type   uint8
+	Namlen uint8
+	_      [4]uint8
+	Name   [256]int8
+}
+
+type Fsid struct {
+	Val [2]int32
+}
+
+const (
+	PathMax = 0x400
+)
+
+type RawSockaddrInet4 struct {
+	Len    uint8
+	Family uint8
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Len      uint8
+	Family   uint8
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Len    uint8
+	Family uint8
+	Path   [104]int8
+}
+
+type RawSockaddrDatalink struct {
+	Len    uint8
+	Family uint8
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [24]int8
+}
+
+type RawSockaddr struct {
+	Len    uint8
+	Family uint8
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [92]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *byte
+	Len  uint64
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name       *byte
+	Namelen    uint32
+	Iov        *Iovec
+	Iovlen     uint32
+	Control    *byte
+	Controllen uint32
+	Flags      int32
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	Filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x1c
+	SizeofSockaddrAny      = 0x6c
+	SizeofSockaddrUnix     = 0x6a
+	SizeofSockaddrDatalink = 0x20
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x30
+	SizeofCmsghdr          = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x20
+	SizeofICMPv6Filter     = 0x20
+)
+
+const (
+	PTRACE_TRACEME = 0x0
+	PTRACE_CONT    = 0x7
+	PTRACE_KILL    = 0x8
+)
+
+type Kevent_t struct {
+	Ident  uint64
+	Filter int16
+	Flags  uint16
+	Fflags uint32
+	Data   int64
+	Udata  *byte
+}
+
+type FdSet struct {
+	Bits [32]uint32
+}
+
+const (
+	SizeofIfMsghdr         = 0xa8
+	SizeofIfData           = 0x90
+	SizeofIfaMsghdr        = 0x18
+	SizeofIfAnnounceMsghdr = 0x1a
+	SizeofRtMsghdr         = 0x60
+	SizeofRtMetrics        = 0x38
+)
+
+type IfMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Hdrlen  uint16
+	Index   uint16
+	Tableid uint16
+	Pad1    uint8
+	Pad2    uint8
+	Addrs   int32
+	Flags   int32
+	Xflags  int32
+	Data    IfData
+}
+
+type IfData struct {
+	Type         uint8
+	Addrlen      uint8
+	Hdrlen       uint8
+	Link_state   uint8
+	Mtu          uint32
+	Metric       uint32
+	Rdomain      uint32
+	Baudrate     uint64
+	Ipackets     uint64
+	Ierrors      uint64
+	Opackets     uint64
+	Oerrors      uint64
+	Collisions   uint64
+	Ibytes       uint64
+	Obytes       uint64
+	Imcasts      uint64
+	Omcasts      uint64
+	Iqdrops      uint64
+	Oqdrops      uint64
+	Noproto      uint64
+	Capabilities uint32
+	Lastchange   Timeval
+}
+
+type IfaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Hdrlen  uint16
+	Index   uint16
+	Tableid uint16
+	Pad1    uint8
+	Pad2    uint8
+	Addrs   int32
+	Flags   int32
+	Metric  int32
+}
+
+type IfAnnounceMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Hdrlen  uint16
+	Index   uint16
+	What    uint16
+	Name    [16]int8
+}
+
+type RtMsghdr struct {
+	Msglen   uint16
+	Version  uint8
+	Type     uint8
+	Hdrlen   uint16
+	Index    uint16
+	Tableid  uint16
+	Priority uint8
+	Mpls     uint8
+	Addrs    int32
+	Flags    int32
+	Fmask    int32
+	Pid      int32
+	Seq      int32
+	Errno    int32
+	Inits    uint32
+	Rmx      RtMetrics
+}
+
+type RtMetrics struct {
+	Pksent   uint64
+	Expire   int64
+	Locks    uint32
+	Mtu      uint32
+	Refcnt   uint32
+	Hopcount uint32
+	Recvpipe uint32
+	Sendpipe uint32
+	Ssthresh uint32
+	Rtt      uint32
+	Rttvar   uint32
+	Pad      uint32
+}
+
+type Mclpool struct{}
+
+const (
+	SizeofBpfVersion = 0x4
+	SizeofBpfStat    = 0x8
+	SizeofBpfProgram = 0x10
+	SizeofBpfInsn    = 0x8
+	SizeofBpfHdr     = 0x14
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv uint32
+	Drop uint32
+}
+
+type BpfProgram struct {
+	Len   uint32
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfHdr struct {
+	Tstamp  BpfTimeval
+	Caplen  uint32
+	Datalen uint32
+	Hdrlen  uint16
+	_       [2]byte
+}
+
+type BpfTimeval struct {
+	Sec  uint32
+	Usec uint32
+}
+
+type Termios struct {
+	Iflag  uint32
+	Oflag  uint32
+	Cflag  uint32
+	Lflag  uint32
+	Cc     [20]uint8
+	Ispeed int32
+	Ospeed int32
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+const (
+	AT_FDCWD            = -0x64
+	AT_SYMLINK_FOLLOW   = 0x4
+	AT_SYMLINK_NOFOLLOW = 0x2
+)
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR    = 0x8
+	POLLHUP    = 0x10
+	POLLIN     = 0x1
+	POLLNVAL   = 0x20
+	POLLOUT    = 0x4
+	POLLPRI    = 0x2
+	POLLRDBAND = 0x80
+	POLLRDNORM = 0x40
+	POLLWRBAND = 0x100
+	POLLWRNORM = 0x4
+)
+
+type Sigset_t uint32
+
+type Utsname struct {
+	Sysname  [256]byte
+	Nodename [256]byte
+	Release  [256]byte
+	Version  [256]byte
+	Machine  [256]byte
+}
+
+const SizeofUvmexp = 0x158
+
+type Uvmexp struct {
+	Pagesize           int32
+	Pagemask           int32
+	Pageshift          int32
+	Npages             int32
+	Free               int32
+	Active             int32
+	Inactive           int32
+	Paging             int32
+	Wired              int32
+	Zeropages          int32
+	Reserve_pagedaemon int32
+	Reserve_kernel     int32
+	Unused01           int32
+	Vnodepages         int32
+	Vtextpages         int32
+	Freemin            int32
+	Freetarg           int32
+	Inactarg           int32
+	Wiredmax           int32
+	Anonmin            int32
+	Vtextmin           int32
+	Vnodemin           int32
+	Anonminpct         int32
+	Vtextminpct        int32
+	Vnodeminpct        int32
+	Nswapdev           int32
+	Swpages            int32
+	Swpginuse          int32
+	Swpgonly           int32
+	Nswget             int32
+	Nanon              int32
+	Unused05           int32
+	Unused06           int32
+	Faults             int32
+	Traps              int32
+	Intrs              int32
+	Swtch              int32
+	Softs              int32
+	Syscalls           int32
+	Pageins            int32
+	Unused07           int32
+	Unused08           int32
+	Pgswapin           int32
+	Pgswapout          int32
+	Forks              int32
+	Forks_ppwait       int32
+	Forks_sharevm      int32
+	Pga_zerohit        int32
+	Pga_zeromiss       int32
+	Unused09           int32
+	Fltnoram           int32
+	Fltnoanon          int32
+	Fltnoamap          int32
+	Fltpgwait          int32
+	Fltpgrele          int32
+	Fltrelck           int32
+	Fltrelckok         int32
+	Fltanget           int32
+	Fltanretry         int32
+	Fltamcopy          int32
+	Fltnamap           int32
+	Fltnomap           int32
+	Fltlget            int32
+	Fltget             int32
+	Flt_anon           int32
+	Flt_acow           int32
+	Flt_obj            int32
+	Flt_prcopy         int32
+	Flt_przero         int32
+	Pdwoke             int32
+	Pdrevs             int32
+	Pdswout            int32
+	Pdfreed            int32
+	Pdscans            int32
+	Pdanscan           int32
+	Pdobscan           int32
+	Pdreact            int32
+	Pdbusy             int32
+	Pdpageouts         int32
+	Pdpending          int32
+	Pddeact            int32
+	Unused11           int32
+	Unused12           int32
+	Unused13           int32
+	Fpswtch            int32
+	Kmapent            int32
+}
+
+const SizeofClockinfo = 0x14
+
+type Clockinfo struct {
+	Hz      int32
+	Tick    int32
+	Tickadj int32
+	Stathz  int32
+	Profhz  int32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_solaris_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_solaris_amd64.go
new file mode 100644
index 000000000..23ed9fe51
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/unix/ztypes_solaris_amd64.go
@@ -0,0 +1,449 @@
+// cgo -godefs types_solaris.go | go run mkpost.go
+// Code generated by the command above; see README.md. DO NOT EDIT.
+
+// +build amd64,solaris
+
+package unix
+
+const (
+	SizeofPtr      = 0x8
+	SizeofShort    = 0x2
+	SizeofInt      = 0x4
+	SizeofLong     = 0x8
+	SizeofLongLong = 0x8
+	PathMax        = 0x400
+	MaxHostNameLen = 0x100
+)
+
+type (
+	_C_short     int16
+	_C_int       int32
+	_C_long      int64
+	_C_long_long int64
+)
+
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+type Timeval struct {
+	Sec  int64
+	Usec int64
+}
+
+type Timeval32 struct {
+	Sec  int32
+	Usec int32
+}
+
+type Tms struct {
+	Utime  int64
+	Stime  int64
+	Cutime int64
+	Cstime int64
+}
+
+type Utimbuf struct {
+	Actime  int64
+	Modtime int64
+}
+
+type Rusage struct {
+	Utime    Timeval
+	Stime    Timeval
+	Maxrss   int64
+	Ixrss    int64
+	Idrss    int64
+	Isrss    int64
+	Minflt   int64
+	Majflt   int64
+	Nswap    int64
+	Inblock  int64
+	Oublock  int64
+	Msgsnd   int64
+	Msgrcv   int64
+	Nsignals int64
+	Nvcsw    int64
+	Nivcsw   int64
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type _Gid_t uint32
+
+type Stat_t struct {
+	Dev     uint64
+	Ino     uint64
+	Mode    uint32
+	Nlink   uint32
+	Uid     uint32
+	Gid     uint32
+	Rdev    uint64
+	Size    int64
+	Atim    Timespec
+	Mtim    Timespec
+	Ctim    Timespec
+	Blksize int32
+	_       [4]byte
+	Blocks  int64
+	Fstype  [16]int8
+}
+
+type Flock_t struct {
+	Type   int16
+	Whence int16
+	_      [4]byte
+	Start  int64
+	Len    int64
+	Sysid  int32
+	Pid    int32
+	Pad    [4]int64
+}
+
+type Dirent struct {
+	Ino    uint64
+	Off    int64
+	Reclen uint16
+	Name   [1]int8
+	_      [5]byte
+}
+
+type _Fsblkcnt_t uint64
+
+type Statvfs_t struct {
+	Bsize    uint64
+	Frsize   uint64
+	Blocks   uint64
+	Bfree    uint64
+	Bavail   uint64
+	Files    uint64
+	Ffree    uint64
+	Favail   uint64
+	Fsid     uint64
+	Basetype [16]int8
+	Flag     uint64
+	Namemax  uint64
+	Fstr     [32]int8
+}
+
+type RawSockaddrInet4 struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]int8
+}
+
+type RawSockaddrInet6 struct {
+	Family         uint16
+	Port           uint16
+	Flowinfo       uint32
+	Addr           [16]byte /* in6_addr */
+	Scope_id       uint32
+	X__sin6_src_id uint32
+}
+
+type RawSockaddrUnix struct {
+	Family uint16
+	Path   [108]int8
+}
+
+type RawSockaddrDatalink struct {
+	Family uint16
+	Index  uint16
+	Type   uint8
+	Nlen   uint8
+	Alen   uint8
+	Slen   uint8
+	Data   [244]int8
+}
+
+type RawSockaddr struct {
+	Family uint16
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [236]int8
+}
+
+type _Socklen uint32
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type Iovec struct {
+	Base *int8
+	Len  uint64
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+type Msghdr struct {
+	Name         *byte
+	Namelen      uint32
+	_            [4]byte
+	Iov          *Iovec
+	Iovlen       int32
+	_            [4]byte
+	Accrights    *int8
+	Accrightslen int32
+	_            [4]byte
+}
+
+type Cmsghdr struct {
+	Len   uint32
+	Level int32
+	Type  int32
+}
+
+type Inet4Pktinfo struct {
+	Ifindex  uint32
+	Spec_dst [4]byte /* in_addr */
+	Addr     [4]byte /* in_addr */
+}
+
+type Inet6Pktinfo struct {
+	Addr    [16]byte /* in6_addr */
+	Ifindex uint32
+}
+
+type IPv6MTUInfo struct {
+	Addr RawSockaddrInet6
+	Mtu  uint32
+}
+
+type ICMPv6Filter struct {
+	X__icmp6_filt [8]uint32
+}
+
+const (
+	SizeofSockaddrInet4    = 0x10
+	SizeofSockaddrInet6    = 0x20
+	SizeofSockaddrAny      = 0xfc
+	SizeofSockaddrUnix     = 0x6e
+	SizeofSockaddrDatalink = 0xfc
+	SizeofLinger           = 0x8
+	SizeofIPMreq           = 0x8
+	SizeofIPv6Mreq         = 0x14
+	SizeofMsghdr           = 0x30
+	SizeofCmsghdr          = 0xc
+	SizeofInet4Pktinfo     = 0xc
+	SizeofInet6Pktinfo     = 0x14
+	SizeofIPv6MTUInfo      = 0x24
+	SizeofICMPv6Filter     = 0x20
+)
+
+type FdSet struct {
+	Bits [1024]int64
+}
+
+type Utsname struct {
+	Sysname  [257]byte
+	Nodename [257]byte
+	Release  [257]byte
+	Version  [257]byte
+	Machine  [257]byte
+}
+
+type Ustat_t struct {
+	Tfree  int64
+	Tinode uint64
+	Fname  [6]int8
+	Fpack  [6]int8
+	_      [4]byte
+}
+
+const (
+	AT_FDCWD            = 0xffd19553
+	AT_SYMLINK_NOFOLLOW = 0x1000
+	AT_SYMLINK_FOLLOW   = 0x2000
+	AT_REMOVEDIR        = 0x1
+	AT_EACCESS          = 0x4
+)
+
+const (
+	SizeofIfMsghdr  = 0x54
+	SizeofIfData    = 0x44
+	SizeofIfaMsghdr = 0x14
+	SizeofRtMsghdr  = 0x4c
+	SizeofRtMetrics = 0x28
+)
+
+type IfMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+	Data    IfData
+}
+
+type IfData struct {
+	Type       uint8
+	Addrlen    uint8
+	Hdrlen     uint8
+	_          [1]byte
+	Mtu        uint32
+	Metric     uint32
+	Baudrate   uint32
+	Ipackets   uint32
+	Ierrors    uint32
+	Opackets   uint32
+	Oerrors    uint32
+	Collisions uint32
+	Ibytes     uint32
+	Obytes     uint32
+	Imcasts    uint32
+	Omcasts    uint32
+	Iqdrops    uint32
+	Noproto    uint32
+	Lastchange Timeval32
+}
+
+type IfaMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Addrs   int32
+	Flags   int32
+	Index   uint16
+	_       [2]byte
+	Metric  int32
+}
+
+type RtMsghdr struct {
+	Msglen  uint16
+	Version uint8
+	Type    uint8
+	Index   uint16
+	_       [2]byte
+	Flags   int32
+	Addrs   int32
+	Pid     int32
+	Seq     int32
+	Errno   int32
+	Use     int32
+	Inits   uint32
+	Rmx     RtMetrics
+}
+
+type RtMetrics struct {
+	Locks    uint32
+	Mtu      uint32
+	Hopcount uint32
+	Expire   uint32
+	Recvpipe uint32
+	Sendpipe uint32
+	Ssthresh uint32
+	Rtt      uint32
+	Rttvar   uint32
+	Pksent   uint32
+}
+
+const (
+	SizeofBpfVersion = 0x4
+	SizeofBpfStat    = 0x80
+	SizeofBpfProgram = 0x10
+	SizeofBpfInsn    = 0x8
+	SizeofBpfHdr     = 0x14
+)
+
+type BpfVersion struct {
+	Major uint16
+	Minor uint16
+}
+
+type BpfStat struct {
+	Recv    uint64
+	Drop    uint64
+	Capt    uint64
+	Padding [13]uint64
+}
+
+type BpfProgram struct {
+	Len   uint32
+	_     [4]byte
+	Insns *BpfInsn
+}
+
+type BpfInsn struct {
+	Code uint16
+	Jt   uint8
+	Jf   uint8
+	K    uint32
+}
+
+type BpfTimeval struct {
+	Sec  int32
+	Usec int32
+}
+
+type BpfHdr struct {
+	Tstamp  BpfTimeval
+	Caplen  uint32
+	Datalen uint32
+	Hdrlen  uint16
+	_       [2]byte
+}
+
+type Termios struct {
+	Iflag uint32
+	Oflag uint32
+	Cflag uint32
+	Lflag uint32
+	Cc    [19]uint8
+	_     [1]byte
+}
+
+type Termio struct {
+	Iflag uint16
+	Oflag uint16
+	Cflag uint16
+	Lflag uint16
+	Line  int8
+	Cc    [8]uint8
+	_     [1]byte
+}
+
+type Winsize struct {
+	Row    uint16
+	Col    uint16
+	Xpixel uint16
+	Ypixel uint16
+}
+
+type PollFd struct {
+	Fd      int32
+	Events  int16
+	Revents int16
+}
+
+const (
+	POLLERR    = 0x8
+	POLLHUP    = 0x10
+	POLLIN     = 0x1
+	POLLNVAL   = 0x20
+	POLLOUT    = 0x4
+	POLLPRI    = 0x2
+	POLLRDBAND = 0x80
+	POLLRDNORM = 0x40
+	POLLWRBAND = 0x100
+	POLLWRNORM = 0x4
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/aliases.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/aliases.go
new file mode 100644
index 000000000..af3af60db
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/aliases.go
@@ -0,0 +1,13 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build windows
+// +build go1.9
+
+package windows
+
+import "syscall"
+
+type Errno = syscall.Errno
+type SysProcAttr = syscall.SysProcAttr
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/dll_windows.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/dll_windows.go
new file mode 100644
index 000000000..82076fb74
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/dll_windows.go
@@ -0,0 +1,415 @@
+// Copyright 2011 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package windows
+
+import (
+	"sync"
+	"sync/atomic"
+	"syscall"
+	"unsafe"
+)
+
+// We need to use LoadLibrary and GetProcAddress from the Go runtime, because
+// the these symbols are loaded by the system linker and are required to
+// dynamically load additional symbols. Note that in the Go runtime, these
+// return syscall.Handle and syscall.Errno, but these are the same, in fact,
+// as windows.Handle and windows.Errno, and we intend to keep these the same.
+
+//go:linkname syscall_loadlibrary syscall.loadlibrary
+func syscall_loadlibrary(filename *uint16) (handle Handle, err Errno)
+
+//go:linkname syscall_getprocaddress syscall.getprocaddress
+func syscall_getprocaddress(handle Handle, procname *uint8) (proc uintptr, err Errno)
+
+// DLLError describes reasons for DLL load failures.
+type DLLError struct {
+	Err     error
+	ObjName string
+	Msg     string
+}
+
+func (e *DLLError) Error() string { return e.Msg }
+
+// A DLL implements access to a single DLL.
+type DLL struct {
+	Name   string
+	Handle Handle
+}
+
+// LoadDLL loads DLL file into memory.
+//
+// Warning: using LoadDLL without an absolute path name is subject to
+// DLL preloading attacks. To safely load a system DLL, use LazyDLL
+// with System set to true, or use LoadLibraryEx directly.
+func LoadDLL(name string) (dll *DLL, err error) {
+	namep, err := UTF16PtrFromString(name)
+	if err != nil {
+		return nil, err
+	}
+	h, e := syscall_loadlibrary(namep)
+	if e != 0 {
+		return nil, &DLLError{
+			Err:     e,
+			ObjName: name,
+			Msg:     "Failed to load " + name + ": " + e.Error(),
+		}
+	}
+	d := &DLL{
+		Name:   name,
+		Handle: h,
+	}
+	return d, nil
+}
+
+// MustLoadDLL is like LoadDLL but panics if load operation failes.
+func MustLoadDLL(name string) *DLL {
+	d, e := LoadDLL(name)
+	if e != nil {
+		panic(e)
+	}
+	return d
+}
+
+// FindProc searches DLL d for procedure named name and returns *Proc
+// if found. It returns an error if search fails.
+func (d *DLL) FindProc(name string) (proc *Proc, err error) {
+	namep, err := BytePtrFromString(name)
+	if err != nil {
+		return nil, err
+	}
+	a, e := syscall_getprocaddress(d.Handle, namep)
+	if e != 0 {
+		return nil, &DLLError{
+			Err:     e,
+			ObjName: name,
+			Msg:     "Failed to find " + name + " procedure in " + d.Name + ": " + e.Error(),
+		}
+	}
+	p := &Proc{
+		Dll:  d,
+		Name: name,
+		addr: a,
+	}
+	return p, nil
+}
+
+// MustFindProc is like FindProc but panics if search fails.
+func (d *DLL) MustFindProc(name string) *Proc {
+	p, e := d.FindProc(name)
+	if e != nil {
+		panic(e)
+	}
+	return p
+}
+
+// FindProcByOrdinal searches DLL d for procedure by ordinal and returns *Proc
+// if found. It returns an error if search fails.
+func (d *DLL) FindProcByOrdinal(ordinal uintptr) (proc *Proc, err error) {
+	a, e := GetProcAddressByOrdinal(d.Handle, ordinal)
+	name := "#" + itoa(int(ordinal))
+	if e != nil {
+		return nil, &DLLError{
+			Err:     e,
+			ObjName: name,
+			Msg:     "Failed to find " + name + " procedure in " + d.Name + ": " + e.Error(),
+		}
+	}
+	p := &Proc{
+		Dll:  d,
+		Name: name,
+		addr: a,
+	}
+	return p, nil
+}
+
+// MustFindProcByOrdinal is like FindProcByOrdinal but panics if search fails.
+func (d *DLL) MustFindProcByOrdinal(ordinal uintptr) *Proc {
+	p, e := d.FindProcByOrdinal(ordinal)
+	if e != nil {
+		panic(e)
+	}
+	return p
+}
+
+// Release unloads DLL d from memory.
+func (d *DLL) Release() (err error) {
+	return FreeLibrary(d.Handle)
+}
+
+// A Proc implements access to a procedure inside a DLL.
+type Proc struct {
+	Dll  *DLL
+	Name string
+	addr uintptr
+}
+
+// Addr returns the address of the procedure represented by p.
+// The return value can be passed to Syscall to run the procedure.
+func (p *Proc) Addr() uintptr {
+	return p.addr
+}
+
+//go:uintptrescapes
+
+// Call executes procedure p with arguments a. It will panic, if more than 15 arguments
+// are supplied.
+//
+// The returned error is always non-nil, constructed from the result of GetLastError.
+// Callers must inspect the primary return value to decide whether an error occurred
+// (according to the semantics of the specific function being called) before consulting
+// the error. The error will be guaranteed to contain windows.Errno.
+func (p *Proc) Call(a ...uintptr) (r1, r2 uintptr, lastErr error) {
+	switch len(a) {
+	case 0:
+		return syscall.Syscall(p.Addr(), uintptr(len(a)), 0, 0, 0)
+	case 1:
+		return syscall.Syscall(p.Addr(), uintptr(len(a)), a[0], 0, 0)
+	case 2:
+		return syscall.Syscall(p.Addr(), uintptr(len(a)), a[0], a[1], 0)
+	case 3:
+		return syscall.Syscall(p.Addr(), uintptr(len(a)), a[0], a[1], a[2])
+	case 4:
+		return syscall.Syscall6(p.Addr(), uintptr(len(a)), a[0], a[1], a[2], a[3], 0, 0)
+	case 5:
+		return syscall.Syscall6(p.Addr(), uintptr(len(a)), a[0], a[1], a[2], a[3], a[4], 0)
+	case 6:
+		return syscall.Syscall6(p.Addr(), uintptr(len(a)), a[0], a[1], a[2], a[3], a[4], a[5])
+	case 7:
+		return syscall.Syscall9(p.Addr(), uintptr(len(a)), a[0], a[1], a[2], a[3], a[4], a[5], a[6], 0, 0)
+	case 8:
+		return syscall.Syscall9(p.Addr(), uintptr(len(a)), a[0], a[1], a[2], a[3], a[4], a[5], a[6], a[7], 0)
+	case 9:
+		return syscall.Syscall9(p.Addr(), uintptr(len(a)), a[0], a[1], a[2], a[3], a[4], a[5], a[6], a[7], a[8])
+	case 10:
+		return syscall.Syscall12(p.Addr(), uintptr(len(a)), a[0], a[1], a[2], a[3], a[4], a[5], a[6], a[7], a[8], a[9], 0, 0)
+	case 11:
+		return syscall.Syscall12(p.Addr(), uintptr(len(a)), a[0], a[1], a[2], a[3], a[4], a[5], a[6], a[7], a[8], a[9], a[10], 0)
+	case 12:
+		return syscall.Syscall12(p.Addr(), uintptr(len(a)), a[0], a[1], a[2], a[3], a[4], a[5], a[6], a[7], a[8], a[9], a[10], a[11])
+	case 13:
+		return syscall.Syscall15(p.Addr(), uintptr(len(a)), a[0], a[1], a[2], a[3], a[4], a[5], a[6], a[7], a[8], a[9], a[10], a[11], a[12], 0, 0)
+	case 14:
+		return syscall.Syscall15(p.Addr(), uintptr(len(a)), a[0], a[1], a[2], a[3], a[4], a[5], a[6], a[7], a[8], a[9], a[10], a[11], a[12], a[13], 0)
+	case 15:
+		return syscall.Syscall15(p.Addr(), uintptr(len(a)), a[0], a[1], a[2], a[3], a[4], a[5], a[6], a[7], a[8], a[9], a[10], a[11], a[12], a[13], a[14])
+	default:
+		panic("Call " + p.Name + " with too many arguments " + itoa(len(a)) + ".")
+	}
+}
+
+// A LazyDLL implements access to a single DLL.
+// It will delay the load of the DLL until the first
+// call to its Handle method or to one of its
+// LazyProc's Addr method.
+type LazyDLL struct {
+	Name string
+
+	// System determines whether the DLL must be loaded from the
+	// Windows System directory, bypassing the normal DLL search
+	// path.
+	System bool
+
+	mu  sync.Mutex
+	dll *DLL // non nil once DLL is loaded
+}
+
+// Load loads DLL file d.Name into memory. It returns an error if fails.
+// Load will not try to load DLL, if it is already loaded into memory.
+func (d *LazyDLL) Load() error {
+	// Non-racy version of:
+	// if d.dll != nil {
+	if atomic.LoadPointer((*unsafe.Pointer)(unsafe.Pointer(&d.dll))) != nil {
+		return nil
+	}
+	d.mu.Lock()
+	defer d.mu.Unlock()
+	if d.dll != nil {
+		return nil
+	}
+
+	// kernel32.dll is special, since it's where LoadLibraryEx comes from.
+	// The kernel already special-cases its name, so it's always
+	// loaded from system32.
+	var dll *DLL
+	var err error
+	if d.Name == "kernel32.dll" {
+		dll, err = LoadDLL(d.Name)
+	} else {
+		dll, err = loadLibraryEx(d.Name, d.System)
+	}
+	if err != nil {
+		return err
+	}
+
+	// Non-racy version of:
+	// d.dll = dll
+	atomic.StorePointer((*unsafe.Pointer)(unsafe.Pointer(&d.dll)), unsafe.Pointer(dll))
+	return nil
+}
+
+// mustLoad is like Load but panics if search fails.
+func (d *LazyDLL) mustLoad() {
+	e := d.Load()
+	if e != nil {
+		panic(e)
+	}
+}
+
+// Handle returns d's module handle.
+func (d *LazyDLL) Handle() uintptr {
+	d.mustLoad()
+	return uintptr(d.dll.Handle)
+}
+
+// NewProc returns a LazyProc for accessing the named procedure in the DLL d.
+func (d *LazyDLL) NewProc(name string) *LazyProc {
+	return &LazyProc{l: d, Name: name}
+}
+
+// NewLazyDLL creates new LazyDLL associated with DLL file.
+func NewLazyDLL(name string) *LazyDLL {
+	return &LazyDLL{Name: name}
+}
+
+// NewLazySystemDLL is like NewLazyDLL, but will only
+// search Windows System directory for the DLL if name is
+// a base name (like "advapi32.dll").
+func NewLazySystemDLL(name string) *LazyDLL {
+	return &LazyDLL{Name: name, System: true}
+}
+
+// A LazyProc implements access to a procedure inside a LazyDLL.
+// It delays the lookup until the Addr method is called.
+type LazyProc struct {
+	Name string
+
+	mu   sync.Mutex
+	l    *LazyDLL
+	proc *Proc
+}
+
+// Find searches DLL for procedure named p.Name. It returns
+// an error if search fails. Find will not search procedure,
+// if it is already found and loaded into memory.
+func (p *LazyProc) Find() error {
+	// Non-racy version of:
+	// if p.proc == nil {
+	if atomic.LoadPointer((*unsafe.Pointer)(unsafe.Pointer(&p.proc))) == nil {
+		p.mu.Lock()
+		defer p.mu.Unlock()
+		if p.proc == nil {
+			e := p.l.Load()
+			if e != nil {
+				return e
+			}
+			proc, e := p.l.dll.FindProc(p.Name)
+			if e != nil {
+				return e
+			}
+			// Non-racy version of:
+			// p.proc = proc
+			atomic.StorePointer((*unsafe.Pointer)(unsafe.Pointer(&p.proc)), unsafe.Pointer(proc))
+		}
+	}
+	return nil
+}
+
+// mustFind is like Find but panics if search fails.
+func (p *LazyProc) mustFind() {
+	e := p.Find()
+	if e != nil {
+		panic(e)
+	}
+}
+
+// Addr returns the address of the procedure represented by p.
+// The return value can be passed to Syscall to run the procedure.
+// It will panic if the procedure cannot be found.
+func (p *LazyProc) Addr() uintptr {
+	p.mustFind()
+	return p.proc.Addr()
+}
+
+//go:uintptrescapes
+
+// Call executes procedure p with arguments a. It will panic, if more than 15 arguments
+// are supplied. It will also panic if the procedure cannot be found.
+//
+// The returned error is always non-nil, constructed from the result of GetLastError.
+// Callers must inspect the primary return value to decide whether an error occurred
+// (according to the semantics of the specific function being called) before consulting
+// the error. The error will be guaranteed to contain windows.Errno.
+func (p *LazyProc) Call(a ...uintptr) (r1, r2 uintptr, lastErr error) {
+	p.mustFind()
+	return p.proc.Call(a...)
+}
+
+var canDoSearchSystem32Once struct {
+	sync.Once
+	v bool
+}
+
+func initCanDoSearchSystem32() {
+	// https://msdn.microsoft.com/en-us/library/ms684179(v=vs.85).aspx says:
+	// "Windows 7, Windows Server 2008 R2, Windows Vista, and Windows
+	// Server 2008: The LOAD_LIBRARY_SEARCH_* flags are available on
+	// systems that have KB2533623 installed. To determine whether the
+	// flags are available, use GetProcAddress to get the address of the
+	// AddDllDirectory, RemoveDllDirectory, or SetDefaultDllDirectories
+	// function. If GetProcAddress succeeds, the LOAD_LIBRARY_SEARCH_*
+	// flags can be used with LoadLibraryEx."
+	canDoSearchSystem32Once.v = (modkernel32.NewProc("AddDllDirectory").Find() == nil)
+}
+
+func canDoSearchSystem32() bool {
+	canDoSearchSystem32Once.Do(initCanDoSearchSystem32)
+	return canDoSearchSystem32Once.v
+}
+
+func isBaseName(name string) bool {
+	for _, c := range name {
+		if c == ':' || c == '/' || c == '\\' {
+			return false
+		}
+	}
+	return true
+}
+
+// loadLibraryEx wraps the Windows LoadLibraryEx function.
+//
+// See https://msdn.microsoft.com/en-us/library/windows/desktop/ms684179(v=vs.85).aspx
+//
+// If name is not an absolute path, LoadLibraryEx searches for the DLL
+// in a variety of automatic locations unless constrained by flags.
+// See: https://msdn.microsoft.com/en-us/library/ff919712%28VS.85%29.aspx
+func loadLibraryEx(name string, system bool) (*DLL, error) {
+	loadDLL := name
+	var flags uintptr
+	if system {
+		if canDoSearchSystem32() {
+			const LOAD_LIBRARY_SEARCH_SYSTEM32 = 0x00000800
+			flags = LOAD_LIBRARY_SEARCH_SYSTEM32
+		} else if isBaseName(name) {
+			// WindowsXP or unpatched Windows machine
+			// trying to load "foo.dll" out of the system
+			// folder, but LoadLibraryEx doesn't support
+			// that yet on their system, so emulate it.
+			systemdir, err := GetSystemDirectory()
+			if err != nil {
+				return nil, err
+			}
+			loadDLL = systemdir + "\\" + name
+		}
+	}
+	h, err := LoadLibraryEx(loadDLL, 0, flags)
+	if err != nil {
+		return nil, err
+	}
+	return &DLL{Name: name, Handle: h}, nil
+}
+
+type errString string
+
+func (s errString) Error() string { return string(s) }
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/empty.s b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/empty.s
new file mode 100644
index 000000000..69309e4da
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/empty.s
@@ -0,0 +1,8 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build !go1.12
+
+// This file is here to allow bodyless functions with go:linkname for Go 1.11
+// and earlier (see https://golang.org/issue/23311).
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/env_windows.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/env_windows.go
new file mode 100644
index 000000000..92ac05ff4
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/env_windows.go
@@ -0,0 +1,54 @@
+// Copyright 2010 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Windows environment variables.
+
+package windows
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+func Getenv(key string) (value string, found bool) {
+	return syscall.Getenv(key)
+}
+
+func Setenv(key, value string) error {
+	return syscall.Setenv(key, value)
+}
+
+func Clearenv() {
+	syscall.Clearenv()
+}
+
+func Environ() []string {
+	return syscall.Environ()
+}
+
+// Returns a default environment associated with the token, rather than the current
+// process. If inheritExisting is true, then this environment also inherits the
+// environment of the current process.
+func (token Token) Environ(inheritExisting bool) (env []string, err error) {
+	var block *uint16
+	err = CreateEnvironmentBlock(&block, token, inheritExisting)
+	if err != nil {
+		return nil, err
+	}
+	defer DestroyEnvironmentBlock(block)
+	blockp := uintptr(unsafe.Pointer(block))
+	for {
+		entry := UTF16PtrToString((*uint16)(unsafe.Pointer(blockp)))
+		if len(entry) == 0 {
+			break
+		}
+		env = append(env, entry)
+		blockp += 2 * (uintptr(len(entry)) + 1)
+	}
+	return env, nil
+}
+
+func Unsetenv(key string) error {
+	return syscall.Unsetenv(key)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/eventlog.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/eventlog.go
new file mode 100644
index 000000000..40af946e1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/eventlog.go
@@ -0,0 +1,20 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build windows
+
+package windows
+
+const (
+	EVENTLOG_SUCCESS          = 0
+	EVENTLOG_ERROR_TYPE       = 1
+	EVENTLOG_WARNING_TYPE     = 2
+	EVENTLOG_INFORMATION_TYPE = 4
+	EVENTLOG_AUDIT_SUCCESS    = 8
+	EVENTLOG_AUDIT_FAILURE    = 16
+)
+
+//sys	RegisterEventSource(uncServerName *uint16, sourceName *uint16) (handle Handle, err error) [failretval==0] = advapi32.RegisterEventSourceW
+//sys	DeregisterEventSource(handle Handle) (err error) = advapi32.DeregisterEventSource
+//sys	ReportEvent(log Handle, etype uint16, category uint16, eventId uint32, usrSId uintptr, numStrings uint16, dataSize uint32, strings **uint16, rawData *byte) (err error) = advapi32.ReportEventW
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/exec_windows.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/exec_windows.go
new file mode 100644
index 000000000..3606c3a8b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/exec_windows.go
@@ -0,0 +1,97 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Fork, exec, wait, etc.
+
+package windows
+
+// EscapeArg rewrites command line argument s as prescribed
+// in http://msdn.microsoft.com/en-us/library/ms880421.
+// This function returns "" (2 double quotes) if s is empty.
+// Alternatively, these transformations are done:
+// - every back slash (\) is doubled, but only if immediately
+//   followed by double quote (");
+// - every double quote (") is escaped by back slash (\);
+// - finally, s is wrapped with double quotes (arg -> "arg"),
+//   but only if there is space or tab inside s.
+func EscapeArg(s string) string {
+	if len(s) == 0 {
+		return "\"\""
+	}
+	n := len(s)
+	hasSpace := false
+	for i := 0; i < len(s); i++ {
+		switch s[i] {
+		case '"', '\\':
+			n++
+		case ' ', '\t':
+			hasSpace = true
+		}
+	}
+	if hasSpace {
+		n += 2
+	}
+	if n == len(s) {
+		return s
+	}
+
+	qs := make([]byte, n)
+	j := 0
+	if hasSpace {
+		qs[j] = '"'
+		j++
+	}
+	slashes := 0
+	for i := 0; i < len(s); i++ {
+		switch s[i] {
+		default:
+			slashes = 0
+			qs[j] = s[i]
+		case '\\':
+			slashes++
+			qs[j] = s[i]
+		case '"':
+			for ; slashes > 0; slashes-- {
+				qs[j] = '\\'
+				j++
+			}
+			qs[j] = '\\'
+			j++
+			qs[j] = s[i]
+		}
+		j++
+	}
+	if hasSpace {
+		for ; slashes > 0; slashes-- {
+			qs[j] = '\\'
+			j++
+		}
+		qs[j] = '"'
+		j++
+	}
+	return string(qs[:j])
+}
+
+func CloseOnExec(fd Handle) {
+	SetHandleInformation(Handle(fd), HANDLE_FLAG_INHERIT, 0)
+}
+
+// FullPath retrieves the full path of the specified file.
+func FullPath(name string) (path string, err error) {
+	p, err := UTF16PtrFromString(name)
+	if err != nil {
+		return "", err
+	}
+	n := uint32(100)
+	for {
+		buf := make([]uint16, n)
+		n, err = GetFullPathName(p, uint32(len(buf)), &buf[0], nil)
+		if err != nil {
+			return "", err
+		}
+		if n <= uint32(len(buf)) {
+			return UTF16ToString(buf[:n]), nil
+		}
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/memory_windows.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/memory_windows.go
new file mode 100644
index 000000000..e409d76f0
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/memory_windows.go
@@ -0,0 +1,31 @@
+// Copyright 2017 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package windows
+
+const (
+	MEM_COMMIT      = 0x00001000
+	MEM_RESERVE     = 0x00002000
+	MEM_DECOMMIT    = 0x00004000
+	MEM_RELEASE     = 0x00008000
+	MEM_RESET       = 0x00080000
+	MEM_TOP_DOWN    = 0x00100000
+	MEM_WRITE_WATCH = 0x00200000
+	MEM_PHYSICAL    = 0x00400000
+	MEM_RESET_UNDO  = 0x01000000
+	MEM_LARGE_PAGES = 0x20000000
+
+	PAGE_NOACCESS          = 0x01
+	PAGE_READONLY          = 0x02
+	PAGE_READWRITE         = 0x04
+	PAGE_WRITECOPY         = 0x08
+	PAGE_EXECUTE_READ      = 0x20
+	PAGE_EXECUTE_READWRITE = 0x40
+	PAGE_EXECUTE_WRITECOPY = 0x80
+
+	QUOTA_LIMITS_HARDWS_MIN_DISABLE = 0x00000002
+	QUOTA_LIMITS_HARDWS_MIN_ENABLE  = 0x00000001
+	QUOTA_LIMITS_HARDWS_MAX_DISABLE = 0x00000008
+	QUOTA_LIMITS_HARDWS_MAX_ENABLE  = 0x00000004
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/mkerrors.bash b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/mkerrors.bash
new file mode 100644
index 000000000..2163843a1
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/mkerrors.bash
@@ -0,0 +1,63 @@
+#!/bin/bash
+
+# Copyright 2019 The Go Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+set -e
+shopt -s nullglob
+
+winerror="$(printf '%s\n' "/mnt/c/Program Files (x86)/Windows Kits/"/*/Include/*/shared/winerror.h | sort -Vr | head -n 1)"
+[[ -n $winerror ]] || { echo "Unable to find winerror.h" >&2; exit 1; }
+
+declare -A errors
+
+{
+	echo "// Code generated by 'mkerrors.bash'; DO NOT EDIT."
+	echo
+	echo "package windows"
+	echo "import \"syscall\""
+	echo "const ("
+
+	while read -r line; do
+		unset vtype
+		if [[ $line =~ ^#define\ +([A-Z0-9_]+k?)\ +([A-Z0-9_]+\()?([A-Z][A-Z0-9_]+k?)\)? ]]; then
+			key="${BASH_REMATCH[1]}"
+			value="${BASH_REMATCH[3]}"
+		elif [[ $line =~ ^#define\ +([A-Z0-9_]+k?)\ +([A-Z0-9_]+\()?((0x)?[0-9A-Fa-f]+)L?\)? ]]; then
+			key="${BASH_REMATCH[1]}"
+			value="${BASH_REMATCH[3]}"
+			vtype="${BASH_REMATCH[2]}"
+		elif [[ $line =~ ^#define\ +([A-Z0-9_]+k?)\ +\(\(([A-Z]+)\)((0x)?[0-9A-Fa-f]+)L?\) ]]; then
+			key="${BASH_REMATCH[1]}"
+			value="${BASH_REMATCH[3]}"
+			vtype="${BASH_REMATCH[2]}"
+		else
+			continue
+		fi
+		[[ -n $key && -n $value ]] || continue
+		[[ -z ${errors["$key"]} ]] || continue
+		errors["$key"]="$value"
+		if [[ -v vtype ]]; then
+			if [[ $key == FACILITY_* || $key == NO_ERROR ]]; then
+				vtype=""
+			elif [[ $vtype == *HANDLE* || $vtype == *HRESULT* ]]; then
+				vtype="Handle"
+			else
+				vtype="syscall.Errno"
+			fi
+			last_vtype="$vtype"
+		else
+			vtype=""
+			if [[ $last_vtype == Handle && $value == NO_ERROR ]]; then
+				value="S_OK"
+			elif [[ $last_vtype == syscall.Errno && $value == NO_ERROR ]]; then
+				value="ERROR_SUCCESS"
+			fi
+		fi
+
+		echo "$key $vtype = $value"
+	done < "$winerror"
+
+	echo ")"
+} | gofmt > "zerrors_windows.go"
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/mkknownfolderids.bash b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
new file mode 100644
index 000000000..ab8924e93
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
@@ -0,0 +1,27 @@
+#!/bin/bash
+
+# Copyright 2019 The Go Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+set -e
+shopt -s nullglob
+
+knownfolders="$(printf '%s\n' "/mnt/c/Program Files (x86)/Windows Kits/"/*/Include/*/um/KnownFolders.h | sort -Vr | head -n 1)"
+[[ -n $knownfolders ]] || { echo "Unable to find KnownFolders.h" >&2; exit 1; }
+
+{
+	echo "// Code generated by 'mkknownfolderids.bash'; DO NOT EDIT."
+	echo
+	echo "package windows"
+	echo "type KNOWNFOLDERID GUID"
+	echo "var ("
+	while read -r line; do
+		[[ $line =~ DEFINE_KNOWN_FOLDER\((FOLDERID_[^,]+),[\t\ ]*(0x[^,]+),[\t\ ]*(0x[^,]+),[\t\ ]*(0x[^,]+),[\t\ ]*(0x[^,]+),[\t\ ]*(0x[^,]+),[\t\ ]*(0x[^,]+),[\t\ ]*(0x[^,]+),[\t\ ]*(0x[^,]+),[\t\ ]*(0x[^,]+),[\t\ ]*(0x[^,]+),[\t\ ]*(0x[^,]+)\) ]] || continue
+		printf "%s = &KNOWNFOLDERID{0x%08x, 0x%04x, 0x%04x, [8]byte{0x%02x, 0x%02x, 0x%02x, 0x%02x, 0x%02x, 0x%02x, 0x%02x, 0x%02x}}\n" \
+			"${BASH_REMATCH[1]}" $(( "${BASH_REMATCH[2]}" )) $(( "${BASH_REMATCH[3]}" )) $(( "${BASH_REMATCH[4]}" )) \
+			$(( "${BASH_REMATCH[5]}" )) $(( "${BASH_REMATCH[6]}" )) $(( "${BASH_REMATCH[7]}" )) $(( "${BASH_REMATCH[8]}" )) \
+			$(( "${BASH_REMATCH[9]}" )) $(( "${BASH_REMATCH[10]}" )) $(( "${BASH_REMATCH[11]}" )) $(( "${BASH_REMATCH[12]}" ))
+	done < "$knownfolders"
+	echo ")"
+} | gofmt > "zknownfolderids_windows.go"
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/mksyscall.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/mksyscall.go
new file mode 100644
index 000000000..328e3b2ac
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/mksyscall.go
@@ -0,0 +1,9 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build generate
+
+package windows
+
+//go:generate go run golang.org/x/sys/windows/mkwinsyscall -output zsyscall_windows.go eventlog.go service.go syscall_windows.go security_windows.go
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/race.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/race.go
new file mode 100644
index 000000000..a74e3e24b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/race.go
@@ -0,0 +1,30 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build windows,race
+
+package windows
+
+import (
+	"runtime"
+	"unsafe"
+)
+
+const raceenabled = true
+
+func raceAcquire(addr unsafe.Pointer) {
+	runtime.RaceAcquire(addr)
+}
+
+func raceReleaseMerge(addr unsafe.Pointer) {
+	runtime.RaceReleaseMerge(addr)
+}
+
+func raceReadRange(addr unsafe.Pointer, len int) {
+	runtime.RaceReadRange(addr, len)
+}
+
+func raceWriteRange(addr unsafe.Pointer, len int) {
+	runtime.RaceWriteRange(addr, len)
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/race0.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/race0.go
new file mode 100644
index 000000000..e44a3cbf6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/race0.go
@@ -0,0 +1,25 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build windows,!race
+
+package windows
+
+import (
+	"unsafe"
+)
+
+const raceenabled = false
+
+func raceAcquire(addr unsafe.Pointer) {
+}
+
+func raceReleaseMerge(addr unsafe.Pointer) {
+}
+
+func raceReadRange(addr unsafe.Pointer, len int) {
+}
+
+func raceWriteRange(addr unsafe.Pointer, len int) {
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/security_windows.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/security_windows.go
new file mode 100644
index 000000000..9e3c44a85
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/security_windows.go
@@ -0,0 +1,1406 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package windows
+
+import (
+	"syscall"
+	"unsafe"
+
+	"golang.org/x/sys/internal/unsafeheader"
+)
+
+const (
+	NameUnknown          = 0
+	NameFullyQualifiedDN = 1
+	NameSamCompatible    = 2
+	NameDisplay          = 3
+	NameUniqueId         = 6
+	NameCanonical        = 7
+	NameUserPrincipal    = 8
+	NameCanonicalEx      = 9
+	NameServicePrincipal = 10
+	NameDnsDomain        = 12
+)
+
+// This function returns 1 byte BOOLEAN rather than the 4 byte BOOL.
+// http://blogs.msdn.com/b/drnick/archive/2007/12/19/windows-and-upn-format-credentials.aspx
+//sys	TranslateName(accName *uint16, accNameFormat uint32, desiredNameFormat uint32, translatedName *uint16, nSize *uint32) (err error) [failretval&0xff==0] = secur32.TranslateNameW
+//sys	GetUserNameEx(nameFormat uint32, nameBuffre *uint16, nSize *uint32) (err error) [failretval&0xff==0] = secur32.GetUserNameExW
+
+// TranslateAccountName converts a directory service
+// object name from one format to another.
+func TranslateAccountName(username string, from, to uint32, initSize int) (string, error) {
+	u, e := UTF16PtrFromString(username)
+	if e != nil {
+		return "", e
+	}
+	n := uint32(50)
+	for {
+		b := make([]uint16, n)
+		e = TranslateName(u, from, to, &b[0], &n)
+		if e == nil {
+			return UTF16ToString(b[:n]), nil
+		}
+		if e != ERROR_INSUFFICIENT_BUFFER {
+			return "", e
+		}
+		if n <= uint32(len(b)) {
+			return "", e
+		}
+	}
+}
+
+const (
+	// do not reorder
+	NetSetupUnknownStatus = iota
+	NetSetupUnjoined
+	NetSetupWorkgroupName
+	NetSetupDomainName
+)
+
+type UserInfo10 struct {
+	Name       *uint16
+	Comment    *uint16
+	UsrComment *uint16
+	FullName   *uint16
+}
+
+//sys	NetUserGetInfo(serverName *uint16, userName *uint16, level uint32, buf **byte) (neterr error) = netapi32.NetUserGetInfo
+//sys	NetGetJoinInformation(server *uint16, name **uint16, bufType *uint32) (neterr error) = netapi32.NetGetJoinInformation
+//sys	NetApiBufferFree(buf *byte) (neterr error) = netapi32.NetApiBufferFree
+
+const (
+	// do not reorder
+	SidTypeUser = 1 + iota
+	SidTypeGroup
+	SidTypeDomain
+	SidTypeAlias
+	SidTypeWellKnownGroup
+	SidTypeDeletedAccount
+	SidTypeInvalid
+	SidTypeUnknown
+	SidTypeComputer
+	SidTypeLabel
+)
+
+type SidIdentifierAuthority struct {
+	Value [6]byte
+}
+
+var (
+	SECURITY_NULL_SID_AUTHORITY        = SidIdentifierAuthority{[6]byte{0, 0, 0, 0, 0, 0}}
+	SECURITY_WORLD_SID_AUTHORITY       = SidIdentifierAuthority{[6]byte{0, 0, 0, 0, 0, 1}}
+	SECURITY_LOCAL_SID_AUTHORITY       = SidIdentifierAuthority{[6]byte{0, 0, 0, 0, 0, 2}}
+	SECURITY_CREATOR_SID_AUTHORITY     = SidIdentifierAuthority{[6]byte{0, 0, 0, 0, 0, 3}}
+	SECURITY_NON_UNIQUE_AUTHORITY      = SidIdentifierAuthority{[6]byte{0, 0, 0, 0, 0, 4}}
+	SECURITY_NT_AUTHORITY              = SidIdentifierAuthority{[6]byte{0, 0, 0, 0, 0, 5}}
+	SECURITY_MANDATORY_LABEL_AUTHORITY = SidIdentifierAuthority{[6]byte{0, 0, 0, 0, 0, 16}}
+)
+
+const (
+	SECURITY_NULL_RID                   = 0
+	SECURITY_WORLD_RID                  = 0
+	SECURITY_LOCAL_RID                  = 0
+	SECURITY_CREATOR_OWNER_RID          = 0
+	SECURITY_CREATOR_GROUP_RID          = 1
+	SECURITY_DIALUP_RID                 = 1
+	SECURITY_NETWORK_RID                = 2
+	SECURITY_BATCH_RID                  = 3
+	SECURITY_INTERACTIVE_RID            = 4
+	SECURITY_LOGON_IDS_RID              = 5
+	SECURITY_SERVICE_RID                = 6
+	SECURITY_LOCAL_SYSTEM_RID           = 18
+	SECURITY_BUILTIN_DOMAIN_RID         = 32
+	SECURITY_PRINCIPAL_SELF_RID         = 10
+	SECURITY_CREATOR_OWNER_SERVER_RID   = 0x2
+	SECURITY_CREATOR_GROUP_SERVER_RID   = 0x3
+	SECURITY_LOGON_IDS_RID_COUNT        = 0x3
+	SECURITY_ANONYMOUS_LOGON_RID        = 0x7
+	SECURITY_PROXY_RID                  = 0x8
+	SECURITY_ENTERPRISE_CONTROLLERS_RID = 0x9
+	SECURITY_SERVER_LOGON_RID           = SECURITY_ENTERPRISE_CONTROLLERS_RID
+	SECURITY_AUTHENTICATED_USER_RID     = 0xb
+	SECURITY_RESTRICTED_CODE_RID        = 0xc
+	SECURITY_NT_NON_UNIQUE_RID          = 0x15
+)
+
+// Predefined domain-relative RIDs for local groups.
+// See https://msdn.microsoft.com/en-us/library/windows/desktop/aa379649(v=vs.85).aspx
+const (
+	DOMAIN_ALIAS_RID_ADMINS                         = 0x220
+	DOMAIN_ALIAS_RID_USERS                          = 0x221
+	DOMAIN_ALIAS_RID_GUESTS                         = 0x222
+	DOMAIN_ALIAS_RID_POWER_USERS                    = 0x223
+	DOMAIN_ALIAS_RID_ACCOUNT_OPS                    = 0x224
+	DOMAIN_ALIAS_RID_SYSTEM_OPS                     = 0x225
+	DOMAIN_ALIAS_RID_PRINT_OPS                      = 0x226
+	DOMAIN_ALIAS_RID_BACKUP_OPS                     = 0x227
+	DOMAIN_ALIAS_RID_REPLICATOR                     = 0x228
+	DOMAIN_ALIAS_RID_RAS_SERVERS                    = 0x229
+	DOMAIN_ALIAS_RID_PREW2KCOMPACCESS               = 0x22a
+	DOMAIN_ALIAS_RID_REMOTE_DESKTOP_USERS           = 0x22b
+	DOMAIN_ALIAS_RID_NETWORK_CONFIGURATION_OPS      = 0x22c
+	DOMAIN_ALIAS_RID_INCOMING_FOREST_TRUST_BUILDERS = 0x22d
+	DOMAIN_ALIAS_RID_MONITORING_USERS               = 0x22e
+	DOMAIN_ALIAS_RID_LOGGING_USERS                  = 0x22f
+	DOMAIN_ALIAS_RID_AUTHORIZATIONACCESS            = 0x230
+	DOMAIN_ALIAS_RID_TS_LICENSE_SERVERS             = 0x231
+	DOMAIN_ALIAS_RID_DCOM_USERS                     = 0x232
+	DOMAIN_ALIAS_RID_IUSERS                         = 0x238
+	DOMAIN_ALIAS_RID_CRYPTO_OPERATORS               = 0x239
+	DOMAIN_ALIAS_RID_CACHEABLE_PRINCIPALS_GROUP     = 0x23b
+	DOMAIN_ALIAS_RID_NON_CACHEABLE_PRINCIPALS_GROUP = 0x23c
+	DOMAIN_ALIAS_RID_EVENT_LOG_READERS_GROUP        = 0x23d
+	DOMAIN_ALIAS_RID_CERTSVC_DCOM_ACCESS_GROUP      = 0x23e
+)
+
+//sys	LookupAccountSid(systemName *uint16, sid *SID, name *uint16, nameLen *uint32, refdDomainName *uint16, refdDomainNameLen *uint32, use *uint32) (err error) = advapi32.LookupAccountSidW
+//sys	LookupAccountName(systemName *uint16, accountName *uint16, sid *SID, sidLen *uint32, refdDomainName *uint16, refdDomainNameLen *uint32, use *uint32) (err error) = advapi32.LookupAccountNameW
+//sys	ConvertSidToStringSid(sid *SID, stringSid **uint16) (err error) = advapi32.ConvertSidToStringSidW
+//sys	ConvertStringSidToSid(stringSid *uint16, sid **SID) (err error) = advapi32.ConvertStringSidToSidW
+//sys	GetLengthSid(sid *SID) (len uint32) = advapi32.GetLengthSid
+//sys	CopySid(destSidLen uint32, destSid *SID, srcSid *SID) (err error) = advapi32.CopySid
+//sys	AllocateAndInitializeSid(identAuth *SidIdentifierAuthority, subAuth byte, subAuth0 uint32, subAuth1 uint32, subAuth2 uint32, subAuth3 uint32, subAuth4 uint32, subAuth5 uint32, subAuth6 uint32, subAuth7 uint32, sid **SID) (err error) = advapi32.AllocateAndInitializeSid
+//sys	createWellKnownSid(sidType WELL_KNOWN_SID_TYPE, domainSid *SID, sid *SID, sizeSid *uint32) (err error) = advapi32.CreateWellKnownSid
+//sys	isWellKnownSid(sid *SID, sidType WELL_KNOWN_SID_TYPE) (isWellKnown bool) = advapi32.IsWellKnownSid
+//sys	FreeSid(sid *SID) (err error) [failretval!=0] = advapi32.FreeSid
+//sys	EqualSid(sid1 *SID, sid2 *SID) (isEqual bool) = advapi32.EqualSid
+//sys	getSidIdentifierAuthority(sid *SID) (authority *SidIdentifierAuthority) = advapi32.GetSidIdentifierAuthority
+//sys	getSidSubAuthorityCount(sid *SID) (count *uint8) = advapi32.GetSidSubAuthorityCount
+//sys	getSidSubAuthority(sid *SID, index uint32) (subAuthority *uint32) = advapi32.GetSidSubAuthority
+//sys	isValidSid(sid *SID) (isValid bool) = advapi32.IsValidSid
+
+// The security identifier (SID) structure is a variable-length
+// structure used to uniquely identify users or groups.
+type SID struct{}
+
+// StringToSid converts a string-format security identifier
+// SID into a valid, functional SID.
+func StringToSid(s string) (*SID, error) {
+	var sid *SID
+	p, e := UTF16PtrFromString(s)
+	if e != nil {
+		return nil, e
+	}
+	e = ConvertStringSidToSid(p, &sid)
+	if e != nil {
+		return nil, e
+	}
+	defer LocalFree((Handle)(unsafe.Pointer(sid)))
+	return sid.Copy()
+}
+
+// LookupSID retrieves a security identifier SID for the account
+// and the name of the domain on which the account was found.
+// System specify target computer to search.
+func LookupSID(system, account string) (sid *SID, domain string, accType uint32, err error) {
+	if len(account) == 0 {
+		return nil, "", 0, syscall.EINVAL
+	}
+	acc, e := UTF16PtrFromString(account)
+	if e != nil {
+		return nil, "", 0, e
+	}
+	var sys *uint16
+	if len(system) > 0 {
+		sys, e = UTF16PtrFromString(system)
+		if e != nil {
+			return nil, "", 0, e
+		}
+	}
+	n := uint32(50)
+	dn := uint32(50)
+	for {
+		b := make([]byte, n)
+		db := make([]uint16, dn)
+		sid = (*SID)(unsafe.Pointer(&b[0]))
+		e = LookupAccountName(sys, acc, sid, &n, &db[0], &dn, &accType)
+		if e == nil {
+			return sid, UTF16ToString(db), accType, nil
+		}
+		if e != ERROR_INSUFFICIENT_BUFFER {
+			return nil, "", 0, e
+		}
+		if n <= uint32(len(b)) {
+			return nil, "", 0, e
+		}
+	}
+}
+
+// String converts SID to a string format suitable for display, storage, or transmission.
+func (sid *SID) String() string {
+	var s *uint16
+	e := ConvertSidToStringSid(sid, &s)
+	if e != nil {
+		return ""
+	}
+	defer LocalFree((Handle)(unsafe.Pointer(s)))
+	return UTF16ToString((*[256]uint16)(unsafe.Pointer(s))[:])
+}
+
+// Len returns the length, in bytes, of a valid security identifier SID.
+func (sid *SID) Len() int {
+	return int(GetLengthSid(sid))
+}
+
+// Copy creates a duplicate of security identifier SID.
+func (sid *SID) Copy() (*SID, error) {
+	b := make([]byte, sid.Len())
+	sid2 := (*SID)(unsafe.Pointer(&b[0]))
+	e := CopySid(uint32(len(b)), sid2, sid)
+	if e != nil {
+		return nil, e
+	}
+	return sid2, nil
+}
+
+// IdentifierAuthority returns the identifier authority of the SID.
+func (sid *SID) IdentifierAuthority() SidIdentifierAuthority {
+	return *getSidIdentifierAuthority(sid)
+}
+
+// SubAuthorityCount returns the number of sub-authorities in the SID.
+func (sid *SID) SubAuthorityCount() uint8 {
+	return *getSidSubAuthorityCount(sid)
+}
+
+// SubAuthority returns the sub-authority of the SID as specified by
+// the index, which must be less than sid.SubAuthorityCount().
+func (sid *SID) SubAuthority(idx uint32) uint32 {
+	if idx >= uint32(sid.SubAuthorityCount()) {
+		panic("sub-authority index out of range")
+	}
+	return *getSidSubAuthority(sid, idx)
+}
+
+// IsValid returns whether the SID has a valid revision and length.
+func (sid *SID) IsValid() bool {
+	return isValidSid(sid)
+}
+
+// Equals compares two SIDs for equality.
+func (sid *SID) Equals(sid2 *SID) bool {
+	return EqualSid(sid, sid2)
+}
+
+// IsWellKnown determines whether the SID matches the well-known sidType.
+func (sid *SID) IsWellKnown(sidType WELL_KNOWN_SID_TYPE) bool {
+	return isWellKnownSid(sid, sidType)
+}
+
+// LookupAccount retrieves the name of the account for this SID
+// and the name of the first domain on which this SID is found.
+// System specify target computer to search for.
+func (sid *SID) LookupAccount(system string) (account, domain string, accType uint32, err error) {
+	var sys *uint16
+	if len(system) > 0 {
+		sys, err = UTF16PtrFromString(system)
+		if err != nil {
+			return "", "", 0, err
+		}
+	}
+	n := uint32(50)
+	dn := uint32(50)
+	for {
+		b := make([]uint16, n)
+		db := make([]uint16, dn)
+		e := LookupAccountSid(sys, sid, &b[0], &n, &db[0], &dn, &accType)
+		if e == nil {
+			return UTF16ToString(b), UTF16ToString(db), accType, nil
+		}
+		if e != ERROR_INSUFFICIENT_BUFFER {
+			return "", "", 0, e
+		}
+		if n <= uint32(len(b)) {
+			return "", "", 0, e
+		}
+	}
+}
+
+// Various types of pre-specified SIDs that can be synthesized and compared at runtime.
+type WELL_KNOWN_SID_TYPE uint32
+
+const (
+	WinNullSid                                    = 0
+	WinWorldSid                                   = 1
+	WinLocalSid                                   = 2
+	WinCreatorOwnerSid                            = 3
+	WinCreatorGroupSid                            = 4
+	WinCreatorOwnerServerSid                      = 5
+	WinCreatorGroupServerSid                      = 6
+	WinNtAuthoritySid                             = 7
+	WinDialupSid                                  = 8
+	WinNetworkSid                                 = 9
+	WinBatchSid                                   = 10
+	WinInteractiveSid                             = 11
+	WinServiceSid                                 = 12
+	WinAnonymousSid                               = 13
+	WinProxySid                                   = 14
+	WinEnterpriseControllersSid                   = 15
+	WinSelfSid                                    = 16
+	WinAuthenticatedUserSid                       = 17
+	WinRestrictedCodeSid                          = 18
+	WinTerminalServerSid                          = 19
+	WinRemoteLogonIdSid                           = 20
+	WinLogonIdsSid                                = 21
+	WinLocalSystemSid                             = 22
+	WinLocalServiceSid                            = 23
+	WinNetworkServiceSid                          = 24
+	WinBuiltinDomainSid                           = 25
+	WinBuiltinAdministratorsSid                   = 26
+	WinBuiltinUsersSid                            = 27
+	WinBuiltinGuestsSid                           = 28
+	WinBuiltinPowerUsersSid                       = 29
+	WinBuiltinAccountOperatorsSid                 = 30
+	WinBuiltinSystemOperatorsSid                  = 31
+	WinBuiltinPrintOperatorsSid                   = 32
+	WinBuiltinBackupOperatorsSid                  = 33
+	WinBuiltinReplicatorSid                       = 34
+	WinBuiltinPreWindows2000CompatibleAccessSid   = 35
+	WinBuiltinRemoteDesktopUsersSid               = 36
+	WinBuiltinNetworkConfigurationOperatorsSid    = 37
+	WinAccountAdministratorSid                    = 38
+	WinAccountGuestSid                            = 39
+	WinAccountKrbtgtSid                           = 40
+	WinAccountDomainAdminsSid                     = 41
+	WinAccountDomainUsersSid                      = 42
+	WinAccountDomainGuestsSid                     = 43
+	WinAccountComputersSid                        = 44
+	WinAccountControllersSid                      = 45
+	WinAccountCertAdminsSid                       = 46
+	WinAccountSchemaAdminsSid                     = 47
+	WinAccountEnterpriseAdminsSid                 = 48
+	WinAccountPolicyAdminsSid                     = 49
+	WinAccountRasAndIasServersSid                 = 50
+	WinNTLMAuthenticationSid                      = 51
+	WinDigestAuthenticationSid                    = 52
+	WinSChannelAuthenticationSid                  = 53
+	WinThisOrganizationSid                        = 54
+	WinOtherOrganizationSid                       = 55
+	WinBuiltinIncomingForestTrustBuildersSid      = 56
+	WinBuiltinPerfMonitoringUsersSid              = 57
+	WinBuiltinPerfLoggingUsersSid                 = 58
+	WinBuiltinAuthorizationAccessSid              = 59
+	WinBuiltinTerminalServerLicenseServersSid     = 60
+	WinBuiltinDCOMUsersSid                        = 61
+	WinBuiltinIUsersSid                           = 62
+	WinIUserSid                                   = 63
+	WinBuiltinCryptoOperatorsSid                  = 64
+	WinUntrustedLabelSid                          = 65
+	WinLowLabelSid                                = 66
+	WinMediumLabelSid                             = 67
+	WinHighLabelSid                               = 68
+	WinSystemLabelSid                             = 69
+	WinWriteRestrictedCodeSid                     = 70
+	WinCreatorOwnerRightsSid                      = 71
+	WinCacheablePrincipalsGroupSid                = 72
+	WinNonCacheablePrincipalsGroupSid             = 73
+	WinEnterpriseReadonlyControllersSid           = 74
+	WinAccountReadonlyControllersSid              = 75
+	WinBuiltinEventLogReadersGroup                = 76
+	WinNewEnterpriseReadonlyControllersSid        = 77
+	WinBuiltinCertSvcDComAccessGroup              = 78
+	WinMediumPlusLabelSid                         = 79
+	WinLocalLogonSid                              = 80
+	WinConsoleLogonSid                            = 81
+	WinThisOrganizationCertificateSid             = 82
+	WinApplicationPackageAuthoritySid             = 83
+	WinBuiltinAnyPackageSid                       = 84
+	WinCapabilityInternetClientSid                = 85
+	WinCapabilityInternetClientServerSid          = 86
+	WinCapabilityPrivateNetworkClientServerSid    = 87
+	WinCapabilityPicturesLibrarySid               = 88
+	WinCapabilityVideosLibrarySid                 = 89
+	WinCapabilityMusicLibrarySid                  = 90
+	WinCapabilityDocumentsLibrarySid              = 91
+	WinCapabilitySharedUserCertificatesSid        = 92
+	WinCapabilityEnterpriseAuthenticationSid      = 93
+	WinCapabilityRemovableStorageSid              = 94
+	WinBuiltinRDSRemoteAccessServersSid           = 95
+	WinBuiltinRDSEndpointServersSid               = 96
+	WinBuiltinRDSManagementServersSid             = 97
+	WinUserModeDriversSid                         = 98
+	WinBuiltinHyperVAdminsSid                     = 99
+	WinAccountCloneableControllersSid             = 100
+	WinBuiltinAccessControlAssistanceOperatorsSid = 101
+	WinBuiltinRemoteManagementUsersSid            = 102
+	WinAuthenticationAuthorityAssertedSid         = 103
+	WinAuthenticationServiceAssertedSid           = 104
+	WinLocalAccountSid                            = 105
+	WinLocalAccountAndAdministratorSid            = 106
+	WinAccountProtectedUsersSid                   = 107
+	WinCapabilityAppointmentsSid                  = 108
+	WinCapabilityContactsSid                      = 109
+	WinAccountDefaultSystemManagedSid             = 110
+	WinBuiltinDefaultSystemManagedGroupSid        = 111
+	WinBuiltinStorageReplicaAdminsSid             = 112
+	WinAccountKeyAdminsSid                        = 113
+	WinAccountEnterpriseKeyAdminsSid              = 114
+	WinAuthenticationKeyTrustSid                  = 115
+	WinAuthenticationKeyPropertyMFASid            = 116
+	WinAuthenticationKeyPropertyAttestationSid    = 117
+	WinAuthenticationFreshKeyAuthSid              = 118
+	WinBuiltinDeviceOwnersSid                     = 119
+)
+
+// Creates a SID for a well-known predefined alias, generally using the constants of the form
+// Win*Sid, for the local machine.
+func CreateWellKnownSid(sidType WELL_KNOWN_SID_TYPE) (*SID, error) {
+	return CreateWellKnownDomainSid(sidType, nil)
+}
+
+// Creates a SID for a well-known predefined alias, generally using the constants of the form
+// Win*Sid, for the domain specified by the domainSid parameter.
+func CreateWellKnownDomainSid(sidType WELL_KNOWN_SID_TYPE, domainSid *SID) (*SID, error) {
+	n := uint32(50)
+	for {
+		b := make([]byte, n)
+		sid := (*SID)(unsafe.Pointer(&b[0]))
+		err := createWellKnownSid(sidType, domainSid, sid, &n)
+		if err == nil {
+			return sid, nil
+		}
+		if err != ERROR_INSUFFICIENT_BUFFER {
+			return nil, err
+		}
+		if n <= uint32(len(b)) {
+			return nil, err
+		}
+	}
+}
+
+const (
+	// do not reorder
+	TOKEN_ASSIGN_PRIMARY = 1 << iota
+	TOKEN_DUPLICATE
+	TOKEN_IMPERSONATE
+	TOKEN_QUERY
+	TOKEN_QUERY_SOURCE
+	TOKEN_ADJUST_PRIVILEGES
+	TOKEN_ADJUST_GROUPS
+	TOKEN_ADJUST_DEFAULT
+	TOKEN_ADJUST_SESSIONID
+
+	TOKEN_ALL_ACCESS = STANDARD_RIGHTS_REQUIRED |
+		TOKEN_ASSIGN_PRIMARY |
+		TOKEN_DUPLICATE |
+		TOKEN_IMPERSONATE |
+		TOKEN_QUERY |
+		TOKEN_QUERY_SOURCE |
+		TOKEN_ADJUST_PRIVILEGES |
+		TOKEN_ADJUST_GROUPS |
+		TOKEN_ADJUST_DEFAULT |
+		TOKEN_ADJUST_SESSIONID
+	TOKEN_READ  = STANDARD_RIGHTS_READ | TOKEN_QUERY
+	TOKEN_WRITE = STANDARD_RIGHTS_WRITE |
+		TOKEN_ADJUST_PRIVILEGES |
+		TOKEN_ADJUST_GROUPS |
+		TOKEN_ADJUST_DEFAULT
+	TOKEN_EXECUTE = STANDARD_RIGHTS_EXECUTE
+)
+
+const (
+	// do not reorder
+	TokenUser = 1 + iota
+	TokenGroups
+	TokenPrivileges
+	TokenOwner
+	TokenPrimaryGroup
+	TokenDefaultDacl
+	TokenSource
+	TokenType
+	TokenImpersonationLevel
+	TokenStatistics
+	TokenRestrictedSids
+	TokenSessionId
+	TokenGroupsAndPrivileges
+	TokenSessionReference
+	TokenSandBoxInert
+	TokenAuditPolicy
+	TokenOrigin
+	TokenElevationType
+	TokenLinkedToken
+	TokenElevation
+	TokenHasRestrictions
+	TokenAccessInformation
+	TokenVirtualizationAllowed
+	TokenVirtualizationEnabled
+	TokenIntegrityLevel
+	TokenUIAccess
+	TokenMandatoryPolicy
+	TokenLogonSid
+	MaxTokenInfoClass
+)
+
+// Group attributes inside of Tokengroups.Groups[i].Attributes
+const (
+	SE_GROUP_MANDATORY          = 0x00000001
+	SE_GROUP_ENABLED_BY_DEFAULT = 0x00000002
+	SE_GROUP_ENABLED            = 0x00000004
+	SE_GROUP_OWNER              = 0x00000008
+	SE_GROUP_USE_FOR_DENY_ONLY  = 0x00000010
+	SE_GROUP_INTEGRITY          = 0x00000020
+	SE_GROUP_INTEGRITY_ENABLED  = 0x00000040
+	SE_GROUP_LOGON_ID           = 0xC0000000
+	SE_GROUP_RESOURCE           = 0x20000000
+	SE_GROUP_VALID_ATTRIBUTES   = SE_GROUP_MANDATORY | SE_GROUP_ENABLED_BY_DEFAULT | SE_GROUP_ENABLED | SE_GROUP_OWNER | SE_GROUP_USE_FOR_DENY_ONLY | SE_GROUP_LOGON_ID | SE_GROUP_RESOURCE | SE_GROUP_INTEGRITY | SE_GROUP_INTEGRITY_ENABLED
+)
+
+// Privilege attributes
+const (
+	SE_PRIVILEGE_ENABLED_BY_DEFAULT = 0x00000001
+	SE_PRIVILEGE_ENABLED            = 0x00000002
+	SE_PRIVILEGE_REMOVED            = 0x00000004
+	SE_PRIVILEGE_USED_FOR_ACCESS    = 0x80000000
+	SE_PRIVILEGE_VALID_ATTRIBUTES   = SE_PRIVILEGE_ENABLED_BY_DEFAULT | SE_PRIVILEGE_ENABLED | SE_PRIVILEGE_REMOVED | SE_PRIVILEGE_USED_FOR_ACCESS
+)
+
+// Token types
+const (
+	TokenPrimary       = 1
+	TokenImpersonation = 2
+)
+
+// Impersonation levels
+const (
+	SecurityAnonymous      = 0
+	SecurityIdentification = 1
+	SecurityImpersonation  = 2
+	SecurityDelegation     = 3
+)
+
+type LUID struct {
+	LowPart  uint32
+	HighPart int32
+}
+
+type LUIDAndAttributes struct {
+	Luid       LUID
+	Attributes uint32
+}
+
+type SIDAndAttributes struct {
+	Sid        *SID
+	Attributes uint32
+}
+
+type Tokenuser struct {
+	User SIDAndAttributes
+}
+
+type Tokenprimarygroup struct {
+	PrimaryGroup *SID
+}
+
+type Tokengroups struct {
+	GroupCount uint32
+	Groups     [1]SIDAndAttributes // Use AllGroups() for iterating.
+}
+
+// AllGroups returns a slice that can be used to iterate over the groups in g.
+func (g *Tokengroups) AllGroups() []SIDAndAttributes {
+	return (*[(1 << 28) - 1]SIDAndAttributes)(unsafe.Pointer(&g.Groups[0]))[:g.GroupCount:g.GroupCount]
+}
+
+type Tokenprivileges struct {
+	PrivilegeCount uint32
+	Privileges     [1]LUIDAndAttributes // Use AllPrivileges() for iterating.
+}
+
+// AllPrivileges returns a slice that can be used to iterate over the privileges in p.
+func (p *Tokenprivileges) AllPrivileges() []LUIDAndAttributes {
+	return (*[(1 << 27) - 1]LUIDAndAttributes)(unsafe.Pointer(&p.Privileges[0]))[:p.PrivilegeCount:p.PrivilegeCount]
+}
+
+type Tokenmandatorylabel struct {
+	Label SIDAndAttributes
+}
+
+func (tml *Tokenmandatorylabel) Size() uint32 {
+	return uint32(unsafe.Sizeof(Tokenmandatorylabel{})) + GetLengthSid(tml.Label.Sid)
+}
+
+// Authorization Functions
+//sys	checkTokenMembership(tokenHandle Token, sidToCheck *SID, isMember *int32) (err error) = advapi32.CheckTokenMembership
+//sys	OpenProcessToken(process Handle, access uint32, token *Token) (err error) = advapi32.OpenProcessToken
+//sys	OpenThreadToken(thread Handle, access uint32, openAsSelf bool, token *Token) (err error) = advapi32.OpenThreadToken
+//sys	ImpersonateSelf(impersonationlevel uint32) (err error) = advapi32.ImpersonateSelf
+//sys	RevertToSelf() (err error) = advapi32.RevertToSelf
+//sys	SetThreadToken(thread *Handle, token Token) (err error) = advapi32.SetThreadToken
+//sys	LookupPrivilegeValue(systemname *uint16, name *uint16, luid *LUID) (err error) = advapi32.LookupPrivilegeValueW
+//sys	AdjustTokenPrivileges(token Token, disableAllPrivileges bool, newstate *Tokenprivileges, buflen uint32, prevstate *Tokenprivileges, returnlen *uint32) (err error) = advapi32.AdjustTokenPrivileges
+//sys	AdjustTokenGroups(token Token, resetToDefault bool, newstate *Tokengroups, buflen uint32, prevstate *Tokengroups, returnlen *uint32) (err error) = advapi32.AdjustTokenGroups
+//sys	GetTokenInformation(token Token, infoClass uint32, info *byte, infoLen uint32, returnedLen *uint32) (err error) = advapi32.GetTokenInformation
+//sys	SetTokenInformation(token Token, infoClass uint32, info *byte, infoLen uint32) (err error) = advapi32.SetTokenInformation
+//sys	DuplicateTokenEx(existingToken Token, desiredAccess uint32, tokenAttributes *SecurityAttributes, impersonationLevel uint32, tokenType uint32, newToken *Token) (err error) = advapi32.DuplicateTokenEx
+//sys	GetUserProfileDirectory(t Token, dir *uint16, dirLen *uint32) (err error) = userenv.GetUserProfileDirectoryW
+//sys	getSystemDirectory(dir *uint16, dirLen uint32) (len uint32, err error) = kernel32.GetSystemDirectoryW
+//sys	getWindowsDirectory(dir *uint16, dirLen uint32) (len uint32, err error) = kernel32.GetWindowsDirectoryW
+//sys	getSystemWindowsDirectory(dir *uint16, dirLen uint32) (len uint32, err error) = kernel32.GetSystemWindowsDirectoryW
+
+// An access token contains the security information for a logon session.
+// The system creates an access token when a user logs on, and every
+// process executed on behalf of the user has a copy of the token.
+// The token identifies the user, the user's groups, and the user's
+// privileges. The system uses the token to control access to securable
+// objects and to control the ability of the user to perform various
+// system-related operations on the local computer.
+type Token Handle
+
+// OpenCurrentProcessToken opens an access token associated with current
+// process with TOKEN_QUERY access. It is a real token that needs to be closed.
+//
+// Deprecated: Explicitly call OpenProcessToken(CurrentProcess(), ...)
+// with the desired access instead, or use GetCurrentProcessToken for a
+// TOKEN_QUERY token.
+func OpenCurrentProcessToken() (Token, error) {
+	var token Token
+	err := OpenProcessToken(CurrentProcess(), TOKEN_QUERY, &token)
+	return token, err
+}
+
+// GetCurrentProcessToken returns the access token associated with
+// the current process. It is a pseudo token that does not need
+// to be closed.
+func GetCurrentProcessToken() Token {
+	return Token(^uintptr(4 - 1))
+}
+
+// GetCurrentThreadToken return the access token associated with
+// the current thread. It is a pseudo token that does not need
+// to be closed.
+func GetCurrentThreadToken() Token {
+	return Token(^uintptr(5 - 1))
+}
+
+// GetCurrentThreadEffectiveToken returns the effective access token
+// associated with the current thread. It is a pseudo token that does
+// not need to be closed.
+func GetCurrentThreadEffectiveToken() Token {
+	return Token(^uintptr(6 - 1))
+}
+
+// Close releases access to access token.
+func (t Token) Close() error {
+	return CloseHandle(Handle(t))
+}
+
+// getInfo retrieves a specified type of information about an access token.
+func (t Token) getInfo(class uint32, initSize int) (unsafe.Pointer, error) {
+	n := uint32(initSize)
+	for {
+		b := make([]byte, n)
+		e := GetTokenInformation(t, class, &b[0], uint32(len(b)), &n)
+		if e == nil {
+			return unsafe.Pointer(&b[0]), nil
+		}
+		if e != ERROR_INSUFFICIENT_BUFFER {
+			return nil, e
+		}
+		if n <= uint32(len(b)) {
+			return nil, e
+		}
+	}
+}
+
+// GetTokenUser retrieves access token t user account information.
+func (t Token) GetTokenUser() (*Tokenuser, error) {
+	i, e := t.getInfo(TokenUser, 50)
+	if e != nil {
+		return nil, e
+	}
+	return (*Tokenuser)(i), nil
+}
+
+// GetTokenGroups retrieves group accounts associated with access token t.
+func (t Token) GetTokenGroups() (*Tokengroups, error) {
+	i, e := t.getInfo(TokenGroups, 50)
+	if e != nil {
+		return nil, e
+	}
+	return (*Tokengroups)(i), nil
+}
+
+// GetTokenPrimaryGroup retrieves access token t primary group information.
+// A pointer to a SID structure representing a group that will become
+// the primary group of any objects created by a process using this access token.
+func (t Token) GetTokenPrimaryGroup() (*Tokenprimarygroup, error) {
+	i, e := t.getInfo(TokenPrimaryGroup, 50)
+	if e != nil {
+		return nil, e
+	}
+	return (*Tokenprimarygroup)(i), nil
+}
+
+// GetUserProfileDirectory retrieves path to the
+// root directory of the access token t user's profile.
+func (t Token) GetUserProfileDirectory() (string, error) {
+	n := uint32(100)
+	for {
+		b := make([]uint16, n)
+		e := GetUserProfileDirectory(t, &b[0], &n)
+		if e == nil {
+			return UTF16ToString(b), nil
+		}
+		if e != ERROR_INSUFFICIENT_BUFFER {
+			return "", e
+		}
+		if n <= uint32(len(b)) {
+			return "", e
+		}
+	}
+}
+
+// IsElevated returns whether the current token is elevated from a UAC perspective.
+func (token Token) IsElevated() bool {
+	var isElevated uint32
+	var outLen uint32
+	err := GetTokenInformation(token, TokenElevation, (*byte)(unsafe.Pointer(&isElevated)), uint32(unsafe.Sizeof(isElevated)), &outLen)
+	if err != nil {
+		return false
+	}
+	return outLen == uint32(unsafe.Sizeof(isElevated)) && isElevated != 0
+}
+
+// GetLinkedToken returns the linked token, which may be an elevated UAC token.
+func (token Token) GetLinkedToken() (Token, error) {
+	var linkedToken Token
+	var outLen uint32
+	err := GetTokenInformation(token, TokenLinkedToken, (*byte)(unsafe.Pointer(&linkedToken)), uint32(unsafe.Sizeof(linkedToken)), &outLen)
+	if err != nil {
+		return Token(0), err
+	}
+	return linkedToken, nil
+}
+
+// GetSystemDirectory retrieves the path to current location of the system
+// directory, which is typically, though not always, `C:\Windows\System32`.
+func GetSystemDirectory() (string, error) {
+	n := uint32(MAX_PATH)
+	for {
+		b := make([]uint16, n)
+		l, e := getSystemDirectory(&b[0], n)
+		if e != nil {
+			return "", e
+		}
+		if l <= n {
+			return UTF16ToString(b[:l]), nil
+		}
+		n = l
+	}
+}
+
+// GetWindowsDirectory retrieves the path to current location of the Windows
+// directory, which is typically, though not always, `C:\Windows`. This may
+// be a private user directory in the case that the application is running
+// under a terminal server.
+func GetWindowsDirectory() (string, error) {
+	n := uint32(MAX_PATH)
+	for {
+		b := make([]uint16, n)
+		l, e := getWindowsDirectory(&b[0], n)
+		if e != nil {
+			return "", e
+		}
+		if l <= n {
+			return UTF16ToString(b[:l]), nil
+		}
+		n = l
+	}
+}
+
+// GetSystemWindowsDirectory retrieves the path to current location of the
+// Windows directory, which is typically, though not always, `C:\Windows`.
+func GetSystemWindowsDirectory() (string, error) {
+	n := uint32(MAX_PATH)
+	for {
+		b := make([]uint16, n)
+		l, e := getSystemWindowsDirectory(&b[0], n)
+		if e != nil {
+			return "", e
+		}
+		if l <= n {
+			return UTF16ToString(b[:l]), nil
+		}
+		n = l
+	}
+}
+
+// IsMember reports whether the access token t is a member of the provided SID.
+func (t Token) IsMember(sid *SID) (bool, error) {
+	var b int32
+	if e := checkTokenMembership(t, sid, &b); e != nil {
+		return false, e
+	}
+	return b != 0, nil
+}
+
+const (
+	WTS_CONSOLE_CONNECT        = 0x1
+	WTS_CONSOLE_DISCONNECT     = 0x2
+	WTS_REMOTE_CONNECT         = 0x3
+	WTS_REMOTE_DISCONNECT      = 0x4
+	WTS_SESSION_LOGON          = 0x5
+	WTS_SESSION_LOGOFF         = 0x6
+	WTS_SESSION_LOCK           = 0x7
+	WTS_SESSION_UNLOCK         = 0x8
+	WTS_SESSION_REMOTE_CONTROL = 0x9
+	WTS_SESSION_CREATE         = 0xa
+	WTS_SESSION_TERMINATE      = 0xb
+)
+
+const (
+	WTSActive       = 0
+	WTSConnected    = 1
+	WTSConnectQuery = 2
+	WTSShadow       = 3
+	WTSDisconnected = 4
+	WTSIdle         = 5
+	WTSListen       = 6
+	WTSReset        = 7
+	WTSDown         = 8
+	WTSInit         = 9
+)
+
+type WTSSESSION_NOTIFICATION struct {
+	Size      uint32
+	SessionID uint32
+}
+
+type WTS_SESSION_INFO struct {
+	SessionID         uint32
+	WindowStationName *uint16
+	State             uint32
+}
+
+//sys WTSQueryUserToken(session uint32, token *Token) (err error) = wtsapi32.WTSQueryUserToken
+//sys WTSEnumerateSessions(handle Handle, reserved uint32, version uint32, sessions **WTS_SESSION_INFO, count *uint32) (err error) = wtsapi32.WTSEnumerateSessionsW
+//sys WTSFreeMemory(ptr uintptr) = wtsapi32.WTSFreeMemory
+
+type ACL struct {
+	aclRevision byte
+	sbz1        byte
+	aclSize     uint16
+	aceCount    uint16
+	sbz2        uint16
+}
+
+type SECURITY_DESCRIPTOR struct {
+	revision byte
+	sbz1     byte
+	control  SECURITY_DESCRIPTOR_CONTROL
+	owner    *SID
+	group    *SID
+	sacl     *ACL
+	dacl     *ACL
+}
+
+type SecurityAttributes struct {
+	Length             uint32
+	SecurityDescriptor *SECURITY_DESCRIPTOR
+	InheritHandle      uint32
+}
+
+type SE_OBJECT_TYPE uint32
+
+// Constants for type SE_OBJECT_TYPE
+const (
+	SE_UNKNOWN_OBJECT_TYPE     = 0
+	SE_FILE_OBJECT             = 1
+	SE_SERVICE                 = 2
+	SE_PRINTER                 = 3
+	SE_REGISTRY_KEY            = 4
+	SE_LMSHARE                 = 5
+	SE_KERNEL_OBJECT           = 6
+	SE_WINDOW_OBJECT           = 7
+	SE_DS_OBJECT               = 8
+	SE_DS_OBJECT_ALL           = 9
+	SE_PROVIDER_DEFINED_OBJECT = 10
+	SE_WMIGUID_OBJECT          = 11
+	SE_REGISTRY_WOW64_32KEY    = 12
+	SE_REGISTRY_WOW64_64KEY    = 13
+)
+
+type SECURITY_INFORMATION uint32
+
+// Constants for type SECURITY_INFORMATION
+const (
+	OWNER_SECURITY_INFORMATION            = 0x00000001
+	GROUP_SECURITY_INFORMATION            = 0x00000002
+	DACL_SECURITY_INFORMATION             = 0x00000004
+	SACL_SECURITY_INFORMATION             = 0x00000008
+	LABEL_SECURITY_INFORMATION            = 0x00000010
+	ATTRIBUTE_SECURITY_INFORMATION        = 0x00000020
+	SCOPE_SECURITY_INFORMATION            = 0x00000040
+	BACKUP_SECURITY_INFORMATION           = 0x00010000
+	PROTECTED_DACL_SECURITY_INFORMATION   = 0x80000000
+	PROTECTED_SACL_SECURITY_INFORMATION   = 0x40000000
+	UNPROTECTED_DACL_SECURITY_INFORMATION = 0x20000000
+	UNPROTECTED_SACL_SECURITY_INFORMATION = 0x10000000
+)
+
+type SECURITY_DESCRIPTOR_CONTROL uint16
+
+// Constants for type SECURITY_DESCRIPTOR_CONTROL
+const (
+	SE_OWNER_DEFAULTED       = 0x0001
+	SE_GROUP_DEFAULTED       = 0x0002
+	SE_DACL_PRESENT          = 0x0004
+	SE_DACL_DEFAULTED        = 0x0008
+	SE_SACL_PRESENT          = 0x0010
+	SE_SACL_DEFAULTED        = 0x0020
+	SE_DACL_AUTO_INHERIT_REQ = 0x0100
+	SE_SACL_AUTO_INHERIT_REQ = 0x0200
+	SE_DACL_AUTO_INHERITED   = 0x0400
+	SE_SACL_AUTO_INHERITED   = 0x0800
+	SE_DACL_PROTECTED        = 0x1000
+	SE_SACL_PROTECTED        = 0x2000
+	SE_RM_CONTROL_VALID      = 0x4000
+	SE_SELF_RELATIVE         = 0x8000
+)
+
+type ACCESS_MASK uint32
+
+// Constants for type ACCESS_MASK
+const (
+	DELETE                   = 0x00010000
+	READ_CONTROL             = 0x00020000
+	WRITE_DAC                = 0x00040000
+	WRITE_OWNER              = 0x00080000
+	SYNCHRONIZE              = 0x00100000
+	STANDARD_RIGHTS_REQUIRED = 0x000F0000
+	STANDARD_RIGHTS_READ     = READ_CONTROL
+	STANDARD_RIGHTS_WRITE    = READ_CONTROL
+	STANDARD_RIGHTS_EXECUTE  = READ_CONTROL
+	STANDARD_RIGHTS_ALL      = 0x001F0000
+	SPECIFIC_RIGHTS_ALL      = 0x0000FFFF
+	ACCESS_SYSTEM_SECURITY   = 0x01000000
+	MAXIMUM_ALLOWED          = 0x02000000
+	GENERIC_READ             = 0x80000000
+	GENERIC_WRITE            = 0x40000000
+	GENERIC_EXECUTE          = 0x20000000
+	GENERIC_ALL              = 0x10000000
+)
+
+type ACCESS_MODE uint32
+
+// Constants for type ACCESS_MODE
+const (
+	NOT_USED_ACCESS   = 0
+	GRANT_ACCESS      = 1
+	SET_ACCESS        = 2
+	DENY_ACCESS       = 3
+	REVOKE_ACCESS     = 4
+	SET_AUDIT_SUCCESS = 5
+	SET_AUDIT_FAILURE = 6
+)
+
+// Constants for AceFlags and Inheritance fields
+const (
+	NO_INHERITANCE                     = 0x0
+	SUB_OBJECTS_ONLY_INHERIT           = 0x1
+	SUB_CONTAINERS_ONLY_INHERIT        = 0x2
+	SUB_CONTAINERS_AND_OBJECTS_INHERIT = 0x3
+	INHERIT_NO_PROPAGATE               = 0x4
+	INHERIT_ONLY                       = 0x8
+	INHERITED_ACCESS_ENTRY             = 0x10
+	INHERITED_PARENT                   = 0x10000000
+	INHERITED_GRANDPARENT              = 0x20000000
+	OBJECT_INHERIT_ACE                 = 0x1
+	CONTAINER_INHERIT_ACE              = 0x2
+	NO_PROPAGATE_INHERIT_ACE           = 0x4
+	INHERIT_ONLY_ACE                   = 0x8
+	INHERITED_ACE                      = 0x10
+	VALID_INHERIT_FLAGS                = 0x1F
+)
+
+type MULTIPLE_TRUSTEE_OPERATION uint32
+
+// Constants for MULTIPLE_TRUSTEE_OPERATION
+const (
+	NO_MULTIPLE_TRUSTEE    = 0
+	TRUSTEE_IS_IMPERSONATE = 1
+)
+
+type TRUSTEE_FORM uint32
+
+// Constants for TRUSTEE_FORM
+const (
+	TRUSTEE_IS_SID              = 0
+	TRUSTEE_IS_NAME             = 1
+	TRUSTEE_BAD_FORM            = 2
+	TRUSTEE_IS_OBJECTS_AND_SID  = 3
+	TRUSTEE_IS_OBJECTS_AND_NAME = 4
+)
+
+type TRUSTEE_TYPE uint32
+
+// Constants for TRUSTEE_TYPE
+const (
+	TRUSTEE_IS_UNKNOWN          = 0
+	TRUSTEE_IS_USER             = 1
+	TRUSTEE_IS_GROUP            = 2
+	TRUSTEE_IS_DOMAIN           = 3
+	TRUSTEE_IS_ALIAS            = 4
+	TRUSTEE_IS_WELL_KNOWN_GROUP = 5
+	TRUSTEE_IS_DELETED          = 6
+	TRUSTEE_IS_INVALID          = 7
+	TRUSTEE_IS_COMPUTER         = 8
+)
+
+// Constants for ObjectsPresent field
+const (
+	ACE_OBJECT_TYPE_PRESENT           = 0x1
+	ACE_INHERITED_OBJECT_TYPE_PRESENT = 0x2
+)
+
+type EXPLICIT_ACCESS struct {
+	AccessPermissions ACCESS_MASK
+	AccessMode        ACCESS_MODE
+	Inheritance       uint32
+	Trustee           TRUSTEE
+}
+
+// This type is the union inside of TRUSTEE and must be created using one of the TrusteeValueFrom* functions.
+type TrusteeValue uintptr
+
+func TrusteeValueFromString(str string) TrusteeValue {
+	return TrusteeValue(unsafe.Pointer(StringToUTF16Ptr(str)))
+}
+func TrusteeValueFromSID(sid *SID) TrusteeValue {
+	return TrusteeValue(unsafe.Pointer(sid))
+}
+func TrusteeValueFromObjectsAndSid(objectsAndSid *OBJECTS_AND_SID) TrusteeValue {
+	return TrusteeValue(unsafe.Pointer(objectsAndSid))
+}
+func TrusteeValueFromObjectsAndName(objectsAndName *OBJECTS_AND_NAME) TrusteeValue {
+	return TrusteeValue(unsafe.Pointer(objectsAndName))
+}
+
+type TRUSTEE struct {
+	MultipleTrustee          *TRUSTEE
+	MultipleTrusteeOperation MULTIPLE_TRUSTEE_OPERATION
+	TrusteeForm              TRUSTEE_FORM
+	TrusteeType              TRUSTEE_TYPE
+	TrusteeValue             TrusteeValue
+}
+
+type OBJECTS_AND_SID struct {
+	ObjectsPresent          uint32
+	ObjectTypeGuid          GUID
+	InheritedObjectTypeGuid GUID
+	Sid                     *SID
+}
+
+type OBJECTS_AND_NAME struct {
+	ObjectsPresent          uint32
+	ObjectType              SE_OBJECT_TYPE
+	ObjectTypeName          *uint16
+	InheritedObjectTypeName *uint16
+	Name                    *uint16
+}
+
+//sys	getSecurityInfo(handle Handle, objectType SE_OBJECT_TYPE, securityInformation SECURITY_INFORMATION, owner **SID, group **SID, dacl **ACL, sacl **ACL, sd **SECURITY_DESCRIPTOR) (ret error) = advapi32.GetSecurityInfo
+//sys	SetSecurityInfo(handle Handle, objectType SE_OBJECT_TYPE, securityInformation SECURITY_INFORMATION, owner *SID, group *SID, dacl *ACL, sacl *ACL) = advapi32.SetSecurityInfo
+//sys	getNamedSecurityInfo(objectName string, objectType SE_OBJECT_TYPE, securityInformation SECURITY_INFORMATION, owner **SID, group **SID, dacl **ACL, sacl **ACL, sd **SECURITY_DESCRIPTOR) (ret error) = advapi32.GetNamedSecurityInfoW
+//sys	SetNamedSecurityInfo(objectName string, objectType SE_OBJECT_TYPE, securityInformation SECURITY_INFORMATION, owner *SID, group *SID, dacl *ACL, sacl *ACL) (ret error) = advapi32.SetNamedSecurityInfoW
+
+//sys	buildSecurityDescriptor(owner *TRUSTEE, group *TRUSTEE, countAccessEntries uint32, accessEntries *EXPLICIT_ACCESS, countAuditEntries uint32, auditEntries *EXPLICIT_ACCESS, oldSecurityDescriptor *SECURITY_DESCRIPTOR, sizeNewSecurityDescriptor *uint32, newSecurityDescriptor **SECURITY_DESCRIPTOR) (ret error) = advapi32.BuildSecurityDescriptorW
+//sys	initializeSecurityDescriptor(absoluteSD *SECURITY_DESCRIPTOR, revision uint32) (err error) = advapi32.InitializeSecurityDescriptor
+
+//sys	getSecurityDescriptorControl(sd *SECURITY_DESCRIPTOR, control *SECURITY_DESCRIPTOR_CONTROL, revision *uint32) (err error) = advapi32.GetSecurityDescriptorControl
+//sys	getSecurityDescriptorDacl(sd *SECURITY_DESCRIPTOR, daclPresent *bool, dacl **ACL, daclDefaulted *bool) (err error) = advapi32.GetSecurityDescriptorDacl
+//sys	getSecurityDescriptorSacl(sd *SECURITY_DESCRIPTOR, saclPresent *bool, sacl **ACL, saclDefaulted *bool) (err error) = advapi32.GetSecurityDescriptorSacl
+//sys	getSecurityDescriptorOwner(sd *SECURITY_DESCRIPTOR, owner **SID, ownerDefaulted *bool) (err error) = advapi32.GetSecurityDescriptorOwner
+//sys	getSecurityDescriptorGroup(sd *SECURITY_DESCRIPTOR, group **SID, groupDefaulted *bool) (err error) = advapi32.GetSecurityDescriptorGroup
+//sys	getSecurityDescriptorLength(sd *SECURITY_DESCRIPTOR) (len uint32) = advapi32.GetSecurityDescriptorLength
+//sys	getSecurityDescriptorRMControl(sd *SECURITY_DESCRIPTOR, rmControl *uint8) (ret error) [failretval!=0] = advapi32.GetSecurityDescriptorRMControl
+//sys	isValidSecurityDescriptor(sd *SECURITY_DESCRIPTOR) (isValid bool) = advapi32.IsValidSecurityDescriptor
+
+//sys	setSecurityDescriptorControl(sd *SECURITY_DESCRIPTOR, controlBitsOfInterest SECURITY_DESCRIPTOR_CONTROL, controlBitsToSet SECURITY_DESCRIPTOR_CONTROL) (err error) = advapi32.SetSecurityDescriptorControl
+//sys	setSecurityDescriptorDacl(sd *SECURITY_DESCRIPTOR, daclPresent bool, dacl *ACL, daclDefaulted bool) (err error) = advapi32.SetSecurityDescriptorDacl
+//sys	setSecurityDescriptorSacl(sd *SECURITY_DESCRIPTOR, saclPresent bool, sacl *ACL, saclDefaulted bool) (err error) = advapi32.SetSecurityDescriptorSacl
+//sys	setSecurityDescriptorOwner(sd *SECURITY_DESCRIPTOR, owner *SID, ownerDefaulted bool) (err error) = advapi32.SetSecurityDescriptorOwner
+//sys	setSecurityDescriptorGroup(sd *SECURITY_DESCRIPTOR, group *SID, groupDefaulted bool) (err error) = advapi32.SetSecurityDescriptorGroup
+//sys	setSecurityDescriptorRMControl(sd *SECURITY_DESCRIPTOR, rmControl *uint8) = advapi32.SetSecurityDescriptorRMControl
+
+//sys	convertStringSecurityDescriptorToSecurityDescriptor(str string, revision uint32, sd **SECURITY_DESCRIPTOR, size *uint32) (err error) = advapi32.ConvertStringSecurityDescriptorToSecurityDescriptorW
+//sys	convertSecurityDescriptorToStringSecurityDescriptor(sd *SECURITY_DESCRIPTOR, revision uint32, securityInformation SECURITY_INFORMATION, str **uint16, strLen *uint32) (err error) = advapi32.ConvertSecurityDescriptorToStringSecurityDescriptorW
+
+//sys	makeAbsoluteSD(selfRelativeSD *SECURITY_DESCRIPTOR, absoluteSD *SECURITY_DESCRIPTOR, absoluteSDSize *uint32, dacl *ACL, daclSize *uint32, sacl *ACL, saclSize *uint32, owner *SID, ownerSize *uint32, group *SID, groupSize *uint32) (err error) = advapi32.MakeAbsoluteSD
+//sys	makeSelfRelativeSD(absoluteSD *SECURITY_DESCRIPTOR, selfRelativeSD *SECURITY_DESCRIPTOR, selfRelativeSDSize *uint32) (err error) = advapi32.MakeSelfRelativeSD
+
+//sys	setEntriesInAcl(countExplicitEntries uint32, explicitEntries *EXPLICIT_ACCESS, oldACL *ACL, newACL **ACL) (ret error) = advapi32.SetEntriesInAclW
+
+// Control returns the security descriptor control bits.
+func (sd *SECURITY_DESCRIPTOR) Control() (control SECURITY_DESCRIPTOR_CONTROL, revision uint32, err error) {
+	err = getSecurityDescriptorControl(sd, &control, &revision)
+	return
+}
+
+// SetControl sets the security descriptor control bits.
+func (sd *SECURITY_DESCRIPTOR) SetControl(controlBitsOfInterest SECURITY_DESCRIPTOR_CONTROL, controlBitsToSet SECURITY_DESCRIPTOR_CONTROL) error {
+	return setSecurityDescriptorControl(sd, controlBitsOfInterest, controlBitsToSet)
+}
+
+// RMControl returns the security descriptor resource manager control bits.
+func (sd *SECURITY_DESCRIPTOR) RMControl() (control uint8, err error) {
+	err = getSecurityDescriptorRMControl(sd, &control)
+	return
+}
+
+// SetRMControl sets the security descriptor resource manager control bits.
+func (sd *SECURITY_DESCRIPTOR) SetRMControl(rmControl uint8) {
+	setSecurityDescriptorRMControl(sd, &rmControl)
+}
+
+// DACL returns the security descriptor DACL and whether it was defaulted. The dacl return value may be nil
+// if a DACL exists but is an "empty DACL", meaning fully permissive. If the DACL does not exist, err returns
+// ERROR_OBJECT_NOT_FOUND.
+func (sd *SECURITY_DESCRIPTOR) DACL() (dacl *ACL, defaulted bool, err error) {
+	var present bool
+	err = getSecurityDescriptorDacl(sd, &present, &dacl, &defaulted)
+	if !present {
+		err = ERROR_OBJECT_NOT_FOUND
+	}
+	return
+}
+
+// SetDACL sets the absolute security descriptor DACL.
+func (absoluteSD *SECURITY_DESCRIPTOR) SetDACL(dacl *ACL, present, defaulted bool) error {
+	return setSecurityDescriptorDacl(absoluteSD, present, dacl, defaulted)
+}
+
+// SACL returns the security descriptor SACL and whether it was defaulted. The sacl return value may be nil
+// if a SACL exists but is an "empty SACL", meaning fully permissive. If the SACL does not exist, err returns
+// ERROR_OBJECT_NOT_FOUND.
+func (sd *SECURITY_DESCRIPTOR) SACL() (sacl *ACL, defaulted bool, err error) {
+	var present bool
+	err = getSecurityDescriptorSacl(sd, &present, &sacl, &defaulted)
+	if !present {
+		err = ERROR_OBJECT_NOT_FOUND
+	}
+	return
+}
+
+// SetSACL sets the absolute security descriptor SACL.
+func (absoluteSD *SECURITY_DESCRIPTOR) SetSACL(sacl *ACL, present, defaulted bool) error {
+	return setSecurityDescriptorSacl(absoluteSD, present, sacl, defaulted)
+}
+
+// Owner returns the security descriptor owner and whether it was defaulted.
+func (sd *SECURITY_DESCRIPTOR) Owner() (owner *SID, defaulted bool, err error) {
+	err = getSecurityDescriptorOwner(sd, &owner, &defaulted)
+	return
+}
+
+// SetOwner sets the absolute security descriptor owner.
+func (absoluteSD *SECURITY_DESCRIPTOR) SetOwner(owner *SID, defaulted bool) error {
+	return setSecurityDescriptorOwner(absoluteSD, owner, defaulted)
+}
+
+// Group returns the security descriptor group and whether it was defaulted.
+func (sd *SECURITY_DESCRIPTOR) Group() (group *SID, defaulted bool, err error) {
+	err = getSecurityDescriptorGroup(sd, &group, &defaulted)
+	return
+}
+
+// SetGroup sets the absolute security descriptor owner.
+func (absoluteSD *SECURITY_DESCRIPTOR) SetGroup(group *SID, defaulted bool) error {
+	return setSecurityDescriptorGroup(absoluteSD, group, defaulted)
+}
+
+// Length returns the length of the security descriptor.
+func (sd *SECURITY_DESCRIPTOR) Length() uint32 {
+	return getSecurityDescriptorLength(sd)
+}
+
+// IsValid returns whether the security descriptor is valid.
+func (sd *SECURITY_DESCRIPTOR) IsValid() bool {
+	return isValidSecurityDescriptor(sd)
+}
+
+// String returns the SDDL form of the security descriptor, with a function signature that can be
+// used with %v formatting directives.
+func (sd *SECURITY_DESCRIPTOR) String() string {
+	var sddl *uint16
+	err := convertSecurityDescriptorToStringSecurityDescriptor(sd, 1, 0xff, &sddl, nil)
+	if err != nil {
+		return ""
+	}
+	defer LocalFree(Handle(unsafe.Pointer(sddl)))
+	return UTF16PtrToString(sddl)
+}
+
+// ToAbsolute converts a self-relative security descriptor into an absolute one.
+func (selfRelativeSD *SECURITY_DESCRIPTOR) ToAbsolute() (absoluteSD *SECURITY_DESCRIPTOR, err error) {
+	control, _, err := selfRelativeSD.Control()
+	if err != nil {
+		return
+	}
+	if control&SE_SELF_RELATIVE == 0 {
+		err = ERROR_INVALID_PARAMETER
+		return
+	}
+	var absoluteSDSize, daclSize, saclSize, ownerSize, groupSize uint32
+	err = makeAbsoluteSD(selfRelativeSD, nil, &absoluteSDSize,
+		nil, &daclSize, nil, &saclSize, nil, &ownerSize, nil, &groupSize)
+	switch err {
+	case ERROR_INSUFFICIENT_BUFFER:
+	case nil:
+		// makeAbsoluteSD is expected to fail, but it succeeds.
+		return nil, ERROR_INTERNAL_ERROR
+	default:
+		return nil, err
+	}
+	if absoluteSDSize > 0 {
+		absoluteSD = (*SECURITY_DESCRIPTOR)(unsafe.Pointer(&make([]byte, absoluteSDSize)[0]))
+	}
+	var (
+		dacl  *ACL
+		sacl  *ACL
+		owner *SID
+		group *SID
+	)
+	if daclSize > 0 {
+		dacl = (*ACL)(unsafe.Pointer(&make([]byte, daclSize)[0]))
+	}
+	if saclSize > 0 {
+		sacl = (*ACL)(unsafe.Pointer(&make([]byte, saclSize)[0]))
+	}
+	if ownerSize > 0 {
+		owner = (*SID)(unsafe.Pointer(&make([]byte, ownerSize)[0]))
+	}
+	if groupSize > 0 {
+		group = (*SID)(unsafe.Pointer(&make([]byte, groupSize)[0]))
+	}
+	err = makeAbsoluteSD(selfRelativeSD, absoluteSD, &absoluteSDSize,
+		dacl, &daclSize, sacl, &saclSize, owner, &ownerSize, group, &groupSize)
+	return
+}
+
+// ToSelfRelative converts an absolute security descriptor into a self-relative one.
+func (absoluteSD *SECURITY_DESCRIPTOR) ToSelfRelative() (selfRelativeSD *SECURITY_DESCRIPTOR, err error) {
+	control, _, err := absoluteSD.Control()
+	if err != nil {
+		return
+	}
+	if control&SE_SELF_RELATIVE != 0 {
+		err = ERROR_INVALID_PARAMETER
+		return
+	}
+	var selfRelativeSDSize uint32
+	err = makeSelfRelativeSD(absoluteSD, nil, &selfRelativeSDSize)
+	switch err {
+	case ERROR_INSUFFICIENT_BUFFER:
+	case nil:
+		// makeSelfRelativeSD is expected to fail, but it succeeds.
+		return nil, ERROR_INTERNAL_ERROR
+	default:
+		return nil, err
+	}
+	if selfRelativeSDSize > 0 {
+		selfRelativeSD = (*SECURITY_DESCRIPTOR)(unsafe.Pointer(&make([]byte, selfRelativeSDSize)[0]))
+	}
+	err = makeSelfRelativeSD(absoluteSD, selfRelativeSD, &selfRelativeSDSize)
+	return
+}
+
+func (selfRelativeSD *SECURITY_DESCRIPTOR) copySelfRelativeSecurityDescriptor() *SECURITY_DESCRIPTOR {
+	sdLen := (int)(selfRelativeSD.Length())
+
+	var src []byte
+	h := (*unsafeheader.Slice)(unsafe.Pointer(&src))
+	h.Data = unsafe.Pointer(selfRelativeSD)
+	h.Len = sdLen
+	h.Cap = sdLen
+
+	dst := make([]byte, sdLen)
+	copy(dst, src)
+	return (*SECURITY_DESCRIPTOR)(unsafe.Pointer(&dst[0]))
+}
+
+// SecurityDescriptorFromString converts an SDDL string describing a security descriptor into a
+// self-relative security descriptor object allocated on the Go heap.
+func SecurityDescriptorFromString(sddl string) (sd *SECURITY_DESCRIPTOR, err error) {
+	var winHeapSD *SECURITY_DESCRIPTOR
+	err = convertStringSecurityDescriptorToSecurityDescriptor(sddl, 1, &winHeapSD, nil)
+	if err != nil {
+		return
+	}
+	defer LocalFree(Handle(unsafe.Pointer(winHeapSD)))
+	return winHeapSD.copySelfRelativeSecurityDescriptor(), nil
+}
+
+// GetSecurityInfo queries the security information for a given handle and returns the self-relative security
+// descriptor result on the Go heap.
+func GetSecurityInfo(handle Handle, objectType SE_OBJECT_TYPE, securityInformation SECURITY_INFORMATION) (sd *SECURITY_DESCRIPTOR, err error) {
+	var winHeapSD *SECURITY_DESCRIPTOR
+	err = getSecurityInfo(handle, objectType, securityInformation, nil, nil, nil, nil, &winHeapSD)
+	if err != nil {
+		return
+	}
+	defer LocalFree(Handle(unsafe.Pointer(winHeapSD)))
+	return winHeapSD.copySelfRelativeSecurityDescriptor(), nil
+}
+
+// GetNamedSecurityInfo queries the security information for a given named object and returns the self-relative security
+// descriptor result on the Go heap.
+func GetNamedSecurityInfo(objectName string, objectType SE_OBJECT_TYPE, securityInformation SECURITY_INFORMATION) (sd *SECURITY_DESCRIPTOR, err error) {
+	var winHeapSD *SECURITY_DESCRIPTOR
+	err = getNamedSecurityInfo(objectName, objectType, securityInformation, nil, nil, nil, nil, &winHeapSD)
+	if err != nil {
+		return
+	}
+	defer LocalFree(Handle(unsafe.Pointer(winHeapSD)))
+	return winHeapSD.copySelfRelativeSecurityDescriptor(), nil
+}
+
+// BuildSecurityDescriptor makes a new security descriptor using the input trustees, explicit access lists, and
+// prior security descriptor to be merged, any of which can be nil, returning the self-relative security descriptor
+// result on the Go heap.
+func BuildSecurityDescriptor(owner *TRUSTEE, group *TRUSTEE, accessEntries []EXPLICIT_ACCESS, auditEntries []EXPLICIT_ACCESS, mergedSecurityDescriptor *SECURITY_DESCRIPTOR) (sd *SECURITY_DESCRIPTOR, err error) {
+	var winHeapSD *SECURITY_DESCRIPTOR
+	var winHeapSDSize uint32
+	var firstAccessEntry *EXPLICIT_ACCESS
+	if len(accessEntries) > 0 {
+		firstAccessEntry = &accessEntries[0]
+	}
+	var firstAuditEntry *EXPLICIT_ACCESS
+	if len(auditEntries) > 0 {
+		firstAuditEntry = &auditEntries[0]
+	}
+	err = buildSecurityDescriptor(owner, group, uint32(len(accessEntries)), firstAccessEntry, uint32(len(auditEntries)), firstAuditEntry, mergedSecurityDescriptor, &winHeapSDSize, &winHeapSD)
+	if err != nil {
+		return
+	}
+	defer LocalFree(Handle(unsafe.Pointer(winHeapSD)))
+	return winHeapSD.copySelfRelativeSecurityDescriptor(), nil
+}
+
+// NewSecurityDescriptor creates and initializes a new absolute security descriptor.
+func NewSecurityDescriptor() (absoluteSD *SECURITY_DESCRIPTOR, err error) {
+	absoluteSD = &SECURITY_DESCRIPTOR{}
+	err = initializeSecurityDescriptor(absoluteSD, 1)
+	return
+}
+
+// ACLFromEntries returns a new ACL on the Go heap containing a list of explicit entries as well as those of another ACL.
+// Both explicitEntries and mergedACL are optional and can be nil.
+func ACLFromEntries(explicitEntries []EXPLICIT_ACCESS, mergedACL *ACL) (acl *ACL, err error) {
+	var firstExplicitEntry *EXPLICIT_ACCESS
+	if len(explicitEntries) > 0 {
+		firstExplicitEntry = &explicitEntries[0]
+	}
+	var winHeapACL *ACL
+	err = setEntriesInAcl(uint32(len(explicitEntries)), firstExplicitEntry, mergedACL, &winHeapACL)
+	if err != nil {
+		return
+	}
+	defer LocalFree(Handle(unsafe.Pointer(winHeapACL)))
+	aclBytes := make([]byte, winHeapACL.aclSize)
+	copy(aclBytes, (*[(1 << 31) - 1]byte)(unsafe.Pointer(winHeapACL))[:len(aclBytes):len(aclBytes)])
+	return (*ACL)(unsafe.Pointer(&aclBytes[0])), nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/service.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/service.go
new file mode 100644
index 000000000..f54ff90aa
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/service.go
@@ -0,0 +1,231 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build windows
+
+package windows
+
+const (
+	SC_MANAGER_CONNECT            = 1
+	SC_MANAGER_CREATE_SERVICE     = 2
+	SC_MANAGER_ENUMERATE_SERVICE  = 4
+	SC_MANAGER_LOCK               = 8
+	SC_MANAGER_QUERY_LOCK_STATUS  = 16
+	SC_MANAGER_MODIFY_BOOT_CONFIG = 32
+	SC_MANAGER_ALL_ACCESS         = 0xf003f
+)
+
+//sys	OpenSCManager(machineName *uint16, databaseName *uint16, access uint32) (handle Handle, err error) [failretval==0] = advapi32.OpenSCManagerW
+
+const (
+	SERVICE_KERNEL_DRIVER       = 1
+	SERVICE_FILE_SYSTEM_DRIVER  = 2
+	SERVICE_ADAPTER             = 4
+	SERVICE_RECOGNIZER_DRIVER   = 8
+	SERVICE_WIN32_OWN_PROCESS   = 16
+	SERVICE_WIN32_SHARE_PROCESS = 32
+	SERVICE_WIN32               = SERVICE_WIN32_OWN_PROCESS | SERVICE_WIN32_SHARE_PROCESS
+	SERVICE_INTERACTIVE_PROCESS = 256
+	SERVICE_DRIVER              = SERVICE_KERNEL_DRIVER | SERVICE_FILE_SYSTEM_DRIVER | SERVICE_RECOGNIZER_DRIVER
+	SERVICE_TYPE_ALL            = SERVICE_WIN32 | SERVICE_ADAPTER | SERVICE_DRIVER | SERVICE_INTERACTIVE_PROCESS
+
+	SERVICE_BOOT_START   = 0
+	SERVICE_SYSTEM_START = 1
+	SERVICE_AUTO_START   = 2
+	SERVICE_DEMAND_START = 3
+	SERVICE_DISABLED     = 4
+
+	SERVICE_ERROR_IGNORE   = 0
+	SERVICE_ERROR_NORMAL   = 1
+	SERVICE_ERROR_SEVERE   = 2
+	SERVICE_ERROR_CRITICAL = 3
+
+	SC_STATUS_PROCESS_INFO = 0
+
+	SC_ACTION_NONE        = 0
+	SC_ACTION_RESTART     = 1
+	SC_ACTION_REBOOT      = 2
+	SC_ACTION_RUN_COMMAND = 3
+
+	SERVICE_STOPPED          = 1
+	SERVICE_START_PENDING    = 2
+	SERVICE_STOP_PENDING     = 3
+	SERVICE_RUNNING          = 4
+	SERVICE_CONTINUE_PENDING = 5
+	SERVICE_PAUSE_PENDING    = 6
+	SERVICE_PAUSED           = 7
+	SERVICE_NO_CHANGE        = 0xffffffff
+
+	SERVICE_ACCEPT_STOP                  = 1
+	SERVICE_ACCEPT_PAUSE_CONTINUE        = 2
+	SERVICE_ACCEPT_SHUTDOWN              = 4
+	SERVICE_ACCEPT_PARAMCHANGE           = 8
+	SERVICE_ACCEPT_NETBINDCHANGE         = 16
+	SERVICE_ACCEPT_HARDWAREPROFILECHANGE = 32
+	SERVICE_ACCEPT_POWEREVENT            = 64
+	SERVICE_ACCEPT_SESSIONCHANGE         = 128
+	SERVICE_ACCEPT_PRESHUTDOWN           = 256
+
+	SERVICE_CONTROL_STOP                  = 1
+	SERVICE_CONTROL_PAUSE                 = 2
+	SERVICE_CONTROL_CONTINUE              = 3
+	SERVICE_CONTROL_INTERROGATE           = 4
+	SERVICE_CONTROL_SHUTDOWN              = 5
+	SERVICE_CONTROL_PARAMCHANGE           = 6
+	SERVICE_CONTROL_NETBINDADD            = 7
+	SERVICE_CONTROL_NETBINDREMOVE         = 8
+	SERVICE_CONTROL_NETBINDENABLE         = 9
+	SERVICE_CONTROL_NETBINDDISABLE        = 10
+	SERVICE_CONTROL_DEVICEEVENT           = 11
+	SERVICE_CONTROL_HARDWAREPROFILECHANGE = 12
+	SERVICE_CONTROL_POWEREVENT            = 13
+	SERVICE_CONTROL_SESSIONCHANGE         = 14
+	SERVICE_CONTROL_PRESHUTDOWN           = 15
+
+	SERVICE_ACTIVE    = 1
+	SERVICE_INACTIVE  = 2
+	SERVICE_STATE_ALL = 3
+
+	SERVICE_QUERY_CONFIG         = 1
+	SERVICE_CHANGE_CONFIG        = 2
+	SERVICE_QUERY_STATUS         = 4
+	SERVICE_ENUMERATE_DEPENDENTS = 8
+	SERVICE_START                = 16
+	SERVICE_STOP                 = 32
+	SERVICE_PAUSE_CONTINUE       = 64
+	SERVICE_INTERROGATE          = 128
+	SERVICE_USER_DEFINED_CONTROL = 256
+	SERVICE_ALL_ACCESS           = STANDARD_RIGHTS_REQUIRED | SERVICE_QUERY_CONFIG | SERVICE_CHANGE_CONFIG | SERVICE_QUERY_STATUS | SERVICE_ENUMERATE_DEPENDENTS | SERVICE_START | SERVICE_STOP | SERVICE_PAUSE_CONTINUE | SERVICE_INTERROGATE | SERVICE_USER_DEFINED_CONTROL
+
+	SERVICE_RUNS_IN_SYSTEM_PROCESS = 1
+
+	SERVICE_CONFIG_DESCRIPTION              = 1
+	SERVICE_CONFIG_FAILURE_ACTIONS          = 2
+	SERVICE_CONFIG_DELAYED_AUTO_START_INFO  = 3
+	SERVICE_CONFIG_FAILURE_ACTIONS_FLAG     = 4
+	SERVICE_CONFIG_SERVICE_SID_INFO         = 5
+	SERVICE_CONFIG_REQUIRED_PRIVILEGES_INFO = 6
+	SERVICE_CONFIG_PRESHUTDOWN_INFO         = 7
+	SERVICE_CONFIG_TRIGGER_INFO             = 8
+	SERVICE_CONFIG_PREFERRED_NODE           = 9
+	SERVICE_CONFIG_LAUNCH_PROTECTED         = 12
+
+	SERVICE_SID_TYPE_NONE         = 0
+	SERVICE_SID_TYPE_UNRESTRICTED = 1
+	SERVICE_SID_TYPE_RESTRICTED   = 2 | SERVICE_SID_TYPE_UNRESTRICTED
+
+	SC_ENUM_PROCESS_INFO = 0
+
+	SERVICE_NOTIFY_STATUS_CHANGE    = 2
+	SERVICE_NOTIFY_STOPPED          = 0x00000001
+	SERVICE_NOTIFY_START_PENDING    = 0x00000002
+	SERVICE_NOTIFY_STOP_PENDING     = 0x00000004
+	SERVICE_NOTIFY_RUNNING          = 0x00000008
+	SERVICE_NOTIFY_CONTINUE_PENDING = 0x00000010
+	SERVICE_NOTIFY_PAUSE_PENDING    = 0x00000020
+	SERVICE_NOTIFY_PAUSED           = 0x00000040
+	SERVICE_NOTIFY_CREATED          = 0x00000080
+	SERVICE_NOTIFY_DELETED          = 0x00000100
+	SERVICE_NOTIFY_DELETE_PENDING   = 0x00000200
+)
+
+type SERVICE_STATUS struct {
+	ServiceType             uint32
+	CurrentState            uint32
+	ControlsAccepted        uint32
+	Win32ExitCode           uint32
+	ServiceSpecificExitCode uint32
+	CheckPoint              uint32
+	WaitHint                uint32
+}
+
+type SERVICE_TABLE_ENTRY struct {
+	ServiceName *uint16
+	ServiceProc uintptr
+}
+
+type QUERY_SERVICE_CONFIG struct {
+	ServiceType      uint32
+	StartType        uint32
+	ErrorControl     uint32
+	BinaryPathName   *uint16
+	LoadOrderGroup   *uint16
+	TagId            uint32
+	Dependencies     *uint16
+	ServiceStartName *uint16
+	DisplayName      *uint16
+}
+
+type SERVICE_DESCRIPTION struct {
+	Description *uint16
+}
+
+type SERVICE_DELAYED_AUTO_START_INFO struct {
+	IsDelayedAutoStartUp uint32
+}
+
+type SERVICE_STATUS_PROCESS struct {
+	ServiceType             uint32
+	CurrentState            uint32
+	ControlsAccepted        uint32
+	Win32ExitCode           uint32
+	ServiceSpecificExitCode uint32
+	CheckPoint              uint32
+	WaitHint                uint32
+	ProcessId               uint32
+	ServiceFlags            uint32
+}
+
+type ENUM_SERVICE_STATUS_PROCESS struct {
+	ServiceName          *uint16
+	DisplayName          *uint16
+	ServiceStatusProcess SERVICE_STATUS_PROCESS
+}
+
+type SERVICE_NOTIFY struct {
+	Version               uint32
+	NotifyCallback        uintptr
+	Context               uintptr
+	NotificationStatus    uint32
+	ServiceStatus         SERVICE_STATUS_PROCESS
+	NotificationTriggered uint32
+	ServiceNames          *uint16
+}
+
+type SERVICE_FAILURE_ACTIONS struct {
+	ResetPeriod  uint32
+	RebootMsg    *uint16
+	Command      *uint16
+	ActionsCount uint32
+	Actions      *SC_ACTION
+}
+
+type SC_ACTION struct {
+	Type  uint32
+	Delay uint32
+}
+
+type QUERY_SERVICE_LOCK_STATUS struct {
+	IsLocked     uint32
+	LockOwner    *uint16
+	LockDuration uint32
+}
+
+//sys	CloseServiceHandle(handle Handle) (err error) = advapi32.CloseServiceHandle
+//sys	CreateService(mgr Handle, serviceName *uint16, displayName *uint16, access uint32, srvType uint32, startType uint32, errCtl uint32, pathName *uint16, loadOrderGroup *uint16, tagId *uint32, dependencies *uint16, serviceStartName *uint16, password *uint16) (handle Handle, err error) [failretval==0] = advapi32.CreateServiceW
+//sys	OpenService(mgr Handle, serviceName *uint16, access uint32) (handle Handle, err error) [failretval==0] = advapi32.OpenServiceW
+//sys	DeleteService(service Handle) (err error) = advapi32.DeleteService
+//sys	StartService(service Handle, numArgs uint32, argVectors **uint16) (err error) = advapi32.StartServiceW
+//sys	QueryServiceStatus(service Handle, status *SERVICE_STATUS) (err error) = advapi32.QueryServiceStatus
+//sys	QueryServiceLockStatus(mgr Handle, lockStatus *QUERY_SERVICE_LOCK_STATUS, bufSize uint32, bytesNeeded *uint32) (err error) = advapi32.QueryServiceLockStatusW
+//sys	ControlService(service Handle, control uint32, status *SERVICE_STATUS) (err error) = advapi32.ControlService
+//sys	StartServiceCtrlDispatcher(serviceTable *SERVICE_TABLE_ENTRY) (err error) = advapi32.StartServiceCtrlDispatcherW
+//sys	SetServiceStatus(service Handle, serviceStatus *SERVICE_STATUS) (err error) = advapi32.SetServiceStatus
+//sys	ChangeServiceConfig(service Handle, serviceType uint32, startType uint32, errorControl uint32, binaryPathName *uint16, loadOrderGroup *uint16, tagId *uint32, dependencies *uint16, serviceStartName *uint16, password *uint16, displayName *uint16) (err error) = advapi32.ChangeServiceConfigW
+//sys	QueryServiceConfig(service Handle, serviceConfig *QUERY_SERVICE_CONFIG, bufSize uint32, bytesNeeded *uint32) (err error) = advapi32.QueryServiceConfigW
+//sys	ChangeServiceConfig2(service Handle, infoLevel uint32, info *byte) (err error) = advapi32.ChangeServiceConfig2W
+//sys	QueryServiceConfig2(service Handle, infoLevel uint32, buff *byte, buffSize uint32, bytesNeeded *uint32) (err error) = advapi32.QueryServiceConfig2W
+//sys	EnumServicesStatusEx(mgr Handle, infoLevel uint32, serviceType uint32, serviceState uint32, services *byte, bufSize uint32, bytesNeeded *uint32, servicesReturned *uint32, resumeHandle *uint32, groupName *uint16) (err error) = advapi32.EnumServicesStatusExW
+//sys	QueryServiceStatusEx(service Handle, infoLevel uint32, buff *byte, buffSize uint32, bytesNeeded *uint32) (err error) = advapi32.QueryServiceStatusEx
+//sys	NotifyServiceStatusChange(service Handle, notifyMask uint32, notifier *SERVICE_NOTIFY) (ret error) = advapi32.NotifyServiceStatusChangeW
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/str.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/str.go
new file mode 100644
index 000000000..917cc2aae
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/str.go
@@ -0,0 +1,22 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build windows
+
+package windows
+
+func itoa(val int) string { // do it here rather than with fmt to avoid dependency
+	if val < 0 {
+		return "-" + itoa(-val)
+	}
+	var buf [32]byte // big enough for int64
+	i := len(buf) - 1
+	for val >= 10 {
+		buf[i] = byte(val%10 + '0')
+		i--
+		val /= 10
+	}
+	buf[i] = byte(val + '0')
+	return string(buf[i:])
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/syscall.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/syscall.go
new file mode 100644
index 000000000..af828a91b
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/syscall.go
@@ -0,0 +1,74 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build windows
+
+// Package windows contains an interface to the low-level operating system
+// primitives. OS details vary depending on the underlying system, and
+// by default, godoc will display the OS-specific documentation for the current
+// system. If you want godoc to display syscall documentation for another
+// system, set $GOOS and $GOARCH to the desired system. For example, if
+// you want to view documentation for freebsd/arm on linux/amd64, set $GOOS
+// to freebsd and $GOARCH to arm.
+//
+// The primary use of this package is inside other packages that provide a more
+// portable interface to the system, such as "os", "time" and "net".  Use
+// those packages rather than this one if you can.
+//
+// For details of the functions and data types in this package consult
+// the manuals for the appropriate operating system.
+//
+// These calls return err == nil to indicate success; otherwise
+// err represents an operating system error describing the failure and
+// holds a value of type syscall.Errno.
+package windows // import "golang.org/x/sys/windows"
+
+import (
+	"syscall"
+)
+
+// ByteSliceFromString returns a NUL-terminated slice of bytes
+// containing the text of s. If s contains a NUL byte at any
+// location, it returns (nil, syscall.EINVAL).
+func ByteSliceFromString(s string) ([]byte, error) {
+	for i := 0; i < len(s); i++ {
+		if s[i] == 0 {
+			return nil, syscall.EINVAL
+		}
+	}
+	a := make([]byte, len(s)+1)
+	copy(a, s)
+	return a, nil
+}
+
+// BytePtrFromString returns a pointer to a NUL-terminated array of
+// bytes containing the text of s. If s contains a NUL byte at any
+// location, it returns (nil, syscall.EINVAL).
+func BytePtrFromString(s string) (*byte, error) {
+	a, err := ByteSliceFromString(s)
+	if err != nil {
+		return nil, err
+	}
+	return &a[0], nil
+}
+
+// Single-word zero for use when we need a valid pointer to 0 bytes.
+// See mksyscall.pl.
+var _zero uintptr
+
+func (ts *Timespec) Unix() (sec int64, nsec int64) {
+	return int64(ts.Sec), int64(ts.Nsec)
+}
+
+func (tv *Timeval) Unix() (sec int64, nsec int64) {
+	return int64(tv.Sec), int64(tv.Usec) * 1000
+}
+
+func (ts *Timespec) Nano() int64 {
+	return int64(ts.Sec)*1e9 + int64(ts.Nsec)
+}
+
+func (tv *Timeval) Nano() int64 {
+	return int64(tv.Sec)*1e9 + int64(tv.Usec)*1000
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/syscall_windows.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/syscall_windows.go
new file mode 100644
index 000000000..2aa29e839
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/syscall_windows.go
@@ -0,0 +1,1490 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Windows system calls.
+
+package windows
+
+import (
+	errorspkg "errors"
+	"sync"
+	"syscall"
+	"time"
+	"unicode/utf16"
+	"unsafe"
+
+	"golang.org/x/sys/internal/unsafeheader"
+)
+
+type Handle uintptr
+
+const (
+	InvalidHandle = ^Handle(0)
+
+	// Flags for DefineDosDevice.
+	DDD_EXACT_MATCH_ON_REMOVE = 0x00000004
+	DDD_NO_BROADCAST_SYSTEM   = 0x00000008
+	DDD_RAW_TARGET_PATH       = 0x00000001
+	DDD_REMOVE_DEFINITION     = 0x00000002
+
+	// Return values for GetDriveType.
+	DRIVE_UNKNOWN     = 0
+	DRIVE_NO_ROOT_DIR = 1
+	DRIVE_REMOVABLE   = 2
+	DRIVE_FIXED       = 3
+	DRIVE_REMOTE      = 4
+	DRIVE_CDROM       = 5
+	DRIVE_RAMDISK     = 6
+
+	// File system flags from GetVolumeInformation and GetVolumeInformationByHandle.
+	FILE_CASE_SENSITIVE_SEARCH        = 0x00000001
+	FILE_CASE_PRESERVED_NAMES         = 0x00000002
+	FILE_FILE_COMPRESSION             = 0x00000010
+	FILE_DAX_VOLUME                   = 0x20000000
+	FILE_NAMED_STREAMS                = 0x00040000
+	FILE_PERSISTENT_ACLS              = 0x00000008
+	FILE_READ_ONLY_VOLUME             = 0x00080000
+	FILE_SEQUENTIAL_WRITE_ONCE        = 0x00100000
+	FILE_SUPPORTS_ENCRYPTION          = 0x00020000
+	FILE_SUPPORTS_EXTENDED_ATTRIBUTES = 0x00800000
+	FILE_SUPPORTS_HARD_LINKS          = 0x00400000
+	FILE_SUPPORTS_OBJECT_IDS          = 0x00010000
+	FILE_SUPPORTS_OPEN_BY_FILE_ID     = 0x01000000
+	FILE_SUPPORTS_REPARSE_POINTS      = 0x00000080
+	FILE_SUPPORTS_SPARSE_FILES        = 0x00000040
+	FILE_SUPPORTS_TRANSACTIONS        = 0x00200000
+	FILE_SUPPORTS_USN_JOURNAL         = 0x02000000
+	FILE_UNICODE_ON_DISK              = 0x00000004
+	FILE_VOLUME_IS_COMPRESSED         = 0x00008000
+	FILE_VOLUME_QUOTAS                = 0x00000020
+
+	// Flags for LockFileEx.
+	LOCKFILE_FAIL_IMMEDIATELY = 0x00000001
+	LOCKFILE_EXCLUSIVE_LOCK   = 0x00000002
+
+	// Return values of SleepEx and other APC functions
+	STATUS_USER_APC    = 0x000000C0
+	WAIT_IO_COMPLETION = STATUS_USER_APC
+)
+
+// StringToUTF16 is deprecated. Use UTF16FromString instead.
+// If s contains a NUL byte this function panics instead of
+// returning an error.
+func StringToUTF16(s string) []uint16 {
+	a, err := UTF16FromString(s)
+	if err != nil {
+		panic("windows: string with NUL passed to StringToUTF16")
+	}
+	return a
+}
+
+// UTF16FromString returns the UTF-16 encoding of the UTF-8 string
+// s, with a terminating NUL added. If s contains a NUL byte at any
+// location, it returns (nil, syscall.EINVAL).
+func UTF16FromString(s string) ([]uint16, error) {
+	for i := 0; i < len(s); i++ {
+		if s[i] == 0 {
+			return nil, syscall.EINVAL
+		}
+	}
+	return utf16.Encode([]rune(s + "\x00")), nil
+}
+
+// UTF16ToString returns the UTF-8 encoding of the UTF-16 sequence s,
+// with a terminating NUL removed.
+func UTF16ToString(s []uint16) string {
+	for i, v := range s {
+		if v == 0 {
+			s = s[0:i]
+			break
+		}
+	}
+	return string(utf16.Decode(s))
+}
+
+// StringToUTF16Ptr is deprecated. Use UTF16PtrFromString instead.
+// If s contains a NUL byte this function panics instead of
+// returning an error.
+func StringToUTF16Ptr(s string) *uint16 { return &StringToUTF16(s)[0] }
+
+// UTF16PtrFromString returns pointer to the UTF-16 encoding of
+// the UTF-8 string s, with a terminating NUL added. If s
+// contains a NUL byte at any location, it returns (nil, syscall.EINVAL).
+func UTF16PtrFromString(s string) (*uint16, error) {
+	a, err := UTF16FromString(s)
+	if err != nil {
+		return nil, err
+	}
+	return &a[0], nil
+}
+
+// UTF16PtrToString takes a pointer to a UTF-16 sequence and returns the corresponding UTF-8 encoded string.
+// If the pointer is nil, this returns the empty string. This assumes that the UTF-16 sequence is terminated
+// at a zero word; if the zero word is not present, the program may crash.
+func UTF16PtrToString(p *uint16) string {
+	if p == nil {
+		return ""
+	}
+	if *p == 0 {
+		return ""
+	}
+
+	// Find NUL terminator.
+	n := 0
+	for ptr := unsafe.Pointer(p); *(*uint16)(ptr) != 0; n++ {
+		ptr = unsafe.Pointer(uintptr(ptr) + unsafe.Sizeof(*p))
+	}
+
+	var s []uint16
+	h := (*unsafeheader.Slice)(unsafe.Pointer(&s))
+	h.Data = unsafe.Pointer(p)
+	h.Len = n
+	h.Cap = n
+
+	return string(utf16.Decode(s))
+}
+
+func Getpagesize() int { return 4096 }
+
+// NewCallback converts a Go function to a function pointer conforming to the stdcall calling convention.
+// This is useful when interoperating with Windows code requiring callbacks.
+// The argument is expected to be a function with with one uintptr-sized result. The function must not have arguments with size larger than the size of uintptr.
+func NewCallback(fn interface{}) uintptr {
+	return syscall.NewCallback(fn)
+}
+
+// NewCallbackCDecl converts a Go function to a function pointer conforming to the cdecl calling convention.
+// This is useful when interoperating with Windows code requiring callbacks.
+// The argument is expected to be a function with with one uintptr-sized result. The function must not have arguments with size larger than the size of uintptr.
+func NewCallbackCDecl(fn interface{}) uintptr {
+	return syscall.NewCallbackCDecl(fn)
+}
+
+// windows api calls
+
+//sys	GetLastError() (lasterr error)
+//sys	LoadLibrary(libname string) (handle Handle, err error) = LoadLibraryW
+//sys	LoadLibraryEx(libname string, zero Handle, flags uintptr) (handle Handle, err error) = LoadLibraryExW
+//sys	FreeLibrary(handle Handle) (err error)
+//sys	GetProcAddress(module Handle, procname string) (proc uintptr, err error)
+//sys	GetModuleFileName(module Handle, filename *uint16, size uint32) (n uint32, err error) = kernel32.GetModuleFileNameW
+//sys	GetModuleHandleEx(flags uint32, moduleName *uint16, module *Handle) (err error) = kernel32.GetModuleHandleExW
+//sys	GetVersion() (ver uint32, err error)
+//sys	FormatMessage(flags uint32, msgsrc uintptr, msgid uint32, langid uint32, buf []uint16, args *byte) (n uint32, err error) = FormatMessageW
+//sys	ExitProcess(exitcode uint32)
+//sys	IsWow64Process(handle Handle, isWow64 *bool) (err error) = IsWow64Process
+//sys	CreateFile(name *uint16, access uint32, mode uint32, sa *SecurityAttributes, createmode uint32, attrs uint32, templatefile Handle) (handle Handle, err error) [failretval==InvalidHandle] = CreateFileW
+//sys	ReadFile(handle Handle, buf []byte, done *uint32, overlapped *Overlapped) (err error)
+//sys	WriteFile(handle Handle, buf []byte, done *uint32, overlapped *Overlapped) (err error)
+//sys	GetOverlappedResult(handle Handle, overlapped *Overlapped, done *uint32, wait bool) (err error)
+//sys	SetFilePointer(handle Handle, lowoffset int32, highoffsetptr *int32, whence uint32) (newlowoffset uint32, err error) [failretval==0xffffffff]
+//sys	CloseHandle(handle Handle) (err error)
+//sys	GetStdHandle(stdhandle uint32) (handle Handle, err error) [failretval==InvalidHandle]
+//sys	SetStdHandle(stdhandle uint32, handle Handle) (err error)
+//sys	findFirstFile1(name *uint16, data *win32finddata1) (handle Handle, err error) [failretval==InvalidHandle] = FindFirstFileW
+//sys	findNextFile1(handle Handle, data *win32finddata1) (err error) = FindNextFileW
+//sys	FindClose(handle Handle) (err error)
+//sys	GetFileInformationByHandle(handle Handle, data *ByHandleFileInformation) (err error)
+//sys	GetFileInformationByHandleEx(handle Handle, class uint32, outBuffer *byte, outBufferLen uint32) (err error)
+//sys	GetCurrentDirectory(buflen uint32, buf *uint16) (n uint32, err error) = GetCurrentDirectoryW
+//sys	SetCurrentDirectory(path *uint16) (err error) = SetCurrentDirectoryW
+//sys	CreateDirectory(path *uint16, sa *SecurityAttributes) (err error) = CreateDirectoryW
+//sys	RemoveDirectory(path *uint16) (err error) = RemoveDirectoryW
+//sys	DeleteFile(path *uint16) (err error) = DeleteFileW
+//sys	MoveFile(from *uint16, to *uint16) (err error) = MoveFileW
+//sys	MoveFileEx(from *uint16, to *uint16, flags uint32) (err error) = MoveFileExW
+//sys	LockFileEx(file Handle, flags uint32, reserved uint32, bytesLow uint32, bytesHigh uint32, overlapped *Overlapped) (err error)
+//sys	UnlockFileEx(file Handle, reserved uint32, bytesLow uint32, bytesHigh uint32, overlapped *Overlapped) (err error)
+//sys	GetComputerName(buf *uint16, n *uint32) (err error) = GetComputerNameW
+//sys	GetComputerNameEx(nametype uint32, buf *uint16, n *uint32) (err error) = GetComputerNameExW
+//sys	SetEndOfFile(handle Handle) (err error)
+//sys	GetSystemTimeAsFileTime(time *Filetime)
+//sys	GetSystemTimePreciseAsFileTime(time *Filetime)
+//sys	GetTimeZoneInformation(tzi *Timezoneinformation) (rc uint32, err error) [failretval==0xffffffff]
+//sys	CreateIoCompletionPort(filehandle Handle, cphandle Handle, key uint32, threadcnt uint32) (handle Handle, err error)
+//sys	GetQueuedCompletionStatus(cphandle Handle, qty *uint32, key *uint32, overlapped **Overlapped, timeout uint32) (err error)
+//sys	PostQueuedCompletionStatus(cphandle Handle, qty uint32, key uint32, overlapped *Overlapped) (err error)
+//sys	CancelIo(s Handle) (err error)
+//sys	CancelIoEx(s Handle, o *Overlapped) (err error)
+//sys	CreateProcess(appName *uint16, commandLine *uint16, procSecurity *SecurityAttributes, threadSecurity *SecurityAttributes, inheritHandles bool, creationFlags uint32, env *uint16, currentDir *uint16, startupInfo *StartupInfo, outProcInfo *ProcessInformation) (err error) = CreateProcessW
+//sys	OpenProcess(desiredAccess uint32, inheritHandle bool, processId uint32) (handle Handle, err error)
+//sys	ShellExecute(hwnd Handle, verb *uint16, file *uint16, args *uint16, cwd *uint16, showCmd int32) (err error) [failretval<=32] = shell32.ShellExecuteW
+//sys	shGetKnownFolderPath(id *KNOWNFOLDERID, flags uint32, token Token, path **uint16) (ret error) = shell32.SHGetKnownFolderPath
+//sys	TerminateProcess(handle Handle, exitcode uint32) (err error)
+//sys	GetExitCodeProcess(handle Handle, exitcode *uint32) (err error)
+//sys	GetStartupInfo(startupInfo *StartupInfo) (err error) = GetStartupInfoW
+//sys	GetProcessTimes(handle Handle, creationTime *Filetime, exitTime *Filetime, kernelTime *Filetime, userTime *Filetime) (err error)
+//sys	DuplicateHandle(hSourceProcessHandle Handle, hSourceHandle Handle, hTargetProcessHandle Handle, lpTargetHandle *Handle, dwDesiredAccess uint32, bInheritHandle bool, dwOptions uint32) (err error)
+//sys	WaitForSingleObject(handle Handle, waitMilliseconds uint32) (event uint32, err error) [failretval==0xffffffff]
+//sys	waitForMultipleObjects(count uint32, handles uintptr, waitAll bool, waitMilliseconds uint32) (event uint32, err error) [failretval==0xffffffff] = WaitForMultipleObjects
+//sys	GetTempPath(buflen uint32, buf *uint16) (n uint32, err error) = GetTempPathW
+//sys	CreatePipe(readhandle *Handle, writehandle *Handle, sa *SecurityAttributes, size uint32) (err error)
+//sys	GetFileType(filehandle Handle) (n uint32, err error)
+//sys	CryptAcquireContext(provhandle *Handle, container *uint16, provider *uint16, provtype uint32, flags uint32) (err error) = advapi32.CryptAcquireContextW
+//sys	CryptReleaseContext(provhandle Handle, flags uint32) (err error) = advapi32.CryptReleaseContext
+//sys	CryptGenRandom(provhandle Handle, buflen uint32, buf *byte) (err error) = advapi32.CryptGenRandom
+//sys	GetEnvironmentStrings() (envs *uint16, err error) [failretval==nil] = kernel32.GetEnvironmentStringsW
+//sys	FreeEnvironmentStrings(envs *uint16) (err error) = kernel32.FreeEnvironmentStringsW
+//sys	GetEnvironmentVariable(name *uint16, buffer *uint16, size uint32) (n uint32, err error) = kernel32.GetEnvironmentVariableW
+//sys	SetEnvironmentVariable(name *uint16, value *uint16) (err error) = kernel32.SetEnvironmentVariableW
+//sys	CreateEnvironmentBlock(block **uint16, token Token, inheritExisting bool) (err error) = userenv.CreateEnvironmentBlock
+//sys	DestroyEnvironmentBlock(block *uint16) (err error) = userenv.DestroyEnvironmentBlock
+//sys	getTickCount64() (ms uint64) = kernel32.GetTickCount64
+//sys	SetFileTime(handle Handle, ctime *Filetime, atime *Filetime, wtime *Filetime) (err error)
+//sys	GetFileAttributes(name *uint16) (attrs uint32, err error) [failretval==INVALID_FILE_ATTRIBUTES] = kernel32.GetFileAttributesW
+//sys	SetFileAttributes(name *uint16, attrs uint32) (err error) = kernel32.SetFileAttributesW
+//sys	GetFileAttributesEx(name *uint16, level uint32, info *byte) (err error) = kernel32.GetFileAttributesExW
+//sys	GetCommandLine() (cmd *uint16) = kernel32.GetCommandLineW
+//sys	CommandLineToArgv(cmd *uint16, argc *int32) (argv *[8192]*[8192]uint16, err error) [failretval==nil] = shell32.CommandLineToArgvW
+//sys	LocalFree(hmem Handle) (handle Handle, err error) [failretval!=0]
+//sys	SetHandleInformation(handle Handle, mask uint32, flags uint32) (err error)
+//sys	FlushFileBuffers(handle Handle) (err error)
+//sys	GetFullPathName(path *uint16, buflen uint32, buf *uint16, fname **uint16) (n uint32, err error) = kernel32.GetFullPathNameW
+//sys	GetLongPathName(path *uint16, buf *uint16, buflen uint32) (n uint32, err error) = kernel32.GetLongPathNameW
+//sys	GetShortPathName(longpath *uint16, shortpath *uint16, buflen uint32) (n uint32, err error) = kernel32.GetShortPathNameW
+//sys	CreateFileMapping(fhandle Handle, sa *SecurityAttributes, prot uint32, maxSizeHigh uint32, maxSizeLow uint32, name *uint16) (handle Handle, err error) = kernel32.CreateFileMappingW
+//sys	MapViewOfFile(handle Handle, access uint32, offsetHigh uint32, offsetLow uint32, length uintptr) (addr uintptr, err error)
+//sys	UnmapViewOfFile(addr uintptr) (err error)
+//sys	FlushViewOfFile(addr uintptr, length uintptr) (err error)
+//sys	VirtualLock(addr uintptr, length uintptr) (err error)
+//sys	VirtualUnlock(addr uintptr, length uintptr) (err error)
+//sys	VirtualAlloc(address uintptr, size uintptr, alloctype uint32, protect uint32) (value uintptr, err error) = kernel32.VirtualAlloc
+//sys	VirtualFree(address uintptr, size uintptr, freetype uint32) (err error) = kernel32.VirtualFree
+//sys	VirtualProtect(address uintptr, size uintptr, newprotect uint32, oldprotect *uint32) (err error) = kernel32.VirtualProtect
+//sys	TransmitFile(s Handle, handle Handle, bytesToWrite uint32, bytsPerSend uint32, overlapped *Overlapped, transmitFileBuf *TransmitFileBuffers, flags uint32) (err error) = mswsock.TransmitFile
+//sys	ReadDirectoryChanges(handle Handle, buf *byte, buflen uint32, watchSubTree bool, mask uint32, retlen *uint32, overlapped *Overlapped, completionRoutine uintptr) (err error) = kernel32.ReadDirectoryChangesW
+//sys	CertOpenSystemStore(hprov Handle, name *uint16) (store Handle, err error) = crypt32.CertOpenSystemStoreW
+//sys   CertOpenStore(storeProvider uintptr, msgAndCertEncodingType uint32, cryptProv uintptr, flags uint32, para uintptr) (handle Handle, err error) [failretval==InvalidHandle] = crypt32.CertOpenStore
+//sys	CertEnumCertificatesInStore(store Handle, prevContext *CertContext) (context *CertContext, err error) [failretval==nil] = crypt32.CertEnumCertificatesInStore
+//sys   CertAddCertificateContextToStore(store Handle, certContext *CertContext, addDisposition uint32, storeContext **CertContext) (err error) = crypt32.CertAddCertificateContextToStore
+//sys	CertCloseStore(store Handle, flags uint32) (err error) = crypt32.CertCloseStore
+//sys   CertGetCertificateChain(engine Handle, leaf *CertContext, time *Filetime, additionalStore Handle, para *CertChainPara, flags uint32, reserved uintptr, chainCtx **CertChainContext) (err error) = crypt32.CertGetCertificateChain
+//sys   CertFreeCertificateChain(ctx *CertChainContext) = crypt32.CertFreeCertificateChain
+//sys   CertCreateCertificateContext(certEncodingType uint32, certEncoded *byte, encodedLen uint32) (context *CertContext, err error) [failretval==nil] = crypt32.CertCreateCertificateContext
+//sys   CertFreeCertificateContext(ctx *CertContext) (err error) = crypt32.CertFreeCertificateContext
+//sys   CertVerifyCertificateChainPolicy(policyOID uintptr, chain *CertChainContext, para *CertChainPolicyPara, status *CertChainPolicyStatus) (err error) = crypt32.CertVerifyCertificateChainPolicy
+//sys	RegOpenKeyEx(key Handle, subkey *uint16, options uint32, desiredAccess uint32, result *Handle) (regerrno error) = advapi32.RegOpenKeyExW
+//sys	RegCloseKey(key Handle) (regerrno error) = advapi32.RegCloseKey
+//sys	RegQueryInfoKey(key Handle, class *uint16, classLen *uint32, reserved *uint32, subkeysLen *uint32, maxSubkeyLen *uint32, maxClassLen *uint32, valuesLen *uint32, maxValueNameLen *uint32, maxValueLen *uint32, saLen *uint32, lastWriteTime *Filetime) (regerrno error) = advapi32.RegQueryInfoKeyW
+//sys	RegEnumKeyEx(key Handle, index uint32, name *uint16, nameLen *uint32, reserved *uint32, class *uint16, classLen *uint32, lastWriteTime *Filetime) (regerrno error) = advapi32.RegEnumKeyExW
+//sys	RegQueryValueEx(key Handle, name *uint16, reserved *uint32, valtype *uint32, buf *byte, buflen *uint32) (regerrno error) = advapi32.RegQueryValueExW
+//sys	GetCurrentProcessId() (pid uint32) = kernel32.GetCurrentProcessId
+//sys	GetConsoleMode(console Handle, mode *uint32) (err error) = kernel32.GetConsoleMode
+//sys	SetConsoleMode(console Handle, mode uint32) (err error) = kernel32.SetConsoleMode
+//sys	GetConsoleScreenBufferInfo(console Handle, info *ConsoleScreenBufferInfo) (err error) = kernel32.GetConsoleScreenBufferInfo
+//sys	WriteConsole(console Handle, buf *uint16, towrite uint32, written *uint32, reserved *byte) (err error) = kernel32.WriteConsoleW
+//sys	ReadConsole(console Handle, buf *uint16, toread uint32, read *uint32, inputControl *byte) (err error) = kernel32.ReadConsoleW
+//sys	CreateToolhelp32Snapshot(flags uint32, processId uint32) (handle Handle, err error) [failretval==InvalidHandle] = kernel32.CreateToolhelp32Snapshot
+//sys	Process32First(snapshot Handle, procEntry *ProcessEntry32) (err error) = kernel32.Process32FirstW
+//sys	Process32Next(snapshot Handle, procEntry *ProcessEntry32) (err error) = kernel32.Process32NextW
+//sys	Thread32First(snapshot Handle, threadEntry *ThreadEntry32) (err error)
+//sys	Thread32Next(snapshot Handle, threadEntry *ThreadEntry32) (err error)
+//sys	DeviceIoControl(handle Handle, ioControlCode uint32, inBuffer *byte, inBufferSize uint32, outBuffer *byte, outBufferSize uint32, bytesReturned *uint32, overlapped *Overlapped) (err error)
+// This function returns 1 byte BOOLEAN rather than the 4 byte BOOL.
+//sys	CreateSymbolicLink(symlinkfilename *uint16, targetfilename *uint16, flags uint32) (err error) [failretval&0xff==0] = CreateSymbolicLinkW
+//sys	CreateHardLink(filename *uint16, existingfilename *uint16, reserved uintptr) (err error) [failretval&0xff==0] = CreateHardLinkW
+//sys	GetCurrentThreadId() (id uint32)
+//sys	CreateEvent(eventAttrs *SecurityAttributes, manualReset uint32, initialState uint32, name *uint16) (handle Handle, err error) = kernel32.CreateEventW
+//sys	CreateEventEx(eventAttrs *SecurityAttributes, name *uint16, flags uint32, desiredAccess uint32) (handle Handle, err error) = kernel32.CreateEventExW
+//sys	OpenEvent(desiredAccess uint32, inheritHandle bool, name *uint16) (handle Handle, err error) = kernel32.OpenEventW
+//sys	SetEvent(event Handle) (err error) = kernel32.SetEvent
+//sys	ResetEvent(event Handle) (err error) = kernel32.ResetEvent
+//sys	PulseEvent(event Handle) (err error) = kernel32.PulseEvent
+//sys	CreateMutex(mutexAttrs *SecurityAttributes, initialOwner bool, name *uint16) (handle Handle, err error) = kernel32.CreateMutexW
+//sys	CreateMutexEx(mutexAttrs *SecurityAttributes, name *uint16, flags uint32, desiredAccess uint32) (handle Handle, err error) = kernel32.CreateMutexExW
+//sys	OpenMutex(desiredAccess uint32, inheritHandle bool, name *uint16) (handle Handle, err error) = kernel32.OpenMutexW
+//sys	ReleaseMutex(mutex Handle) (err error) = kernel32.ReleaseMutex
+//sys	SleepEx(milliseconds uint32, alertable bool) (ret uint32) = kernel32.SleepEx
+//sys	CreateJobObject(jobAttr *SecurityAttributes, name *uint16) (handle Handle, err error) = kernel32.CreateJobObjectW
+//sys	AssignProcessToJobObject(job Handle, process Handle) (err error) = kernel32.AssignProcessToJobObject
+//sys	TerminateJobObject(job Handle, exitCode uint32) (err error) = kernel32.TerminateJobObject
+//sys	SetErrorMode(mode uint32) (ret uint32) = kernel32.SetErrorMode
+//sys	ResumeThread(thread Handle) (ret uint32, err error) [failretval==0xffffffff] = kernel32.ResumeThread
+//sys	SetPriorityClass(process Handle, priorityClass uint32) (err error) = kernel32.SetPriorityClass
+//sys	GetPriorityClass(process Handle) (ret uint32, err error) = kernel32.GetPriorityClass
+//sys	QueryInformationJobObject(job Handle, JobObjectInformationClass int32, JobObjectInformation uintptr, JobObjectInformationLength uint32, retlen *uint32) (err error) = kernel32.QueryInformationJobObject
+//sys	SetInformationJobObject(job Handle, JobObjectInformationClass uint32, JobObjectInformation uintptr, JobObjectInformationLength uint32) (ret int, err error)
+//sys	GenerateConsoleCtrlEvent(ctrlEvent uint32, processGroupID uint32) (err error)
+//sys	GetProcessId(process Handle) (id uint32, err error)
+//sys	OpenThread(desiredAccess uint32, inheritHandle bool, threadId uint32) (handle Handle, err error)
+//sys	SetProcessPriorityBoost(process Handle, disable bool) (err error) = kernel32.SetProcessPriorityBoost
+//sys	GetProcessWorkingSetSizeEx(hProcess Handle, lpMinimumWorkingSetSize *uintptr, lpMaximumWorkingSetSize *uintptr, flags *uint32)
+//sys	SetProcessWorkingSetSizeEx(hProcess Handle, dwMinimumWorkingSetSize uintptr, dwMaximumWorkingSetSize uintptr, flags uint32) (err error)
+
+// Volume Management Functions
+//sys	DefineDosDevice(flags uint32, deviceName *uint16, targetPath *uint16) (err error) = DefineDosDeviceW
+//sys	DeleteVolumeMountPoint(volumeMountPoint *uint16) (err error) = DeleteVolumeMountPointW
+//sys	FindFirstVolume(volumeName *uint16, bufferLength uint32) (handle Handle, err error) [failretval==InvalidHandle] = FindFirstVolumeW
+//sys	FindFirstVolumeMountPoint(rootPathName *uint16, volumeMountPoint *uint16, bufferLength uint32) (handle Handle, err error) [failretval==InvalidHandle] = FindFirstVolumeMountPointW
+//sys	FindNextVolume(findVolume Handle, volumeName *uint16, bufferLength uint32) (err error) = FindNextVolumeW
+//sys	FindNextVolumeMountPoint(findVolumeMountPoint Handle, volumeMountPoint *uint16, bufferLength uint32) (err error) = FindNextVolumeMountPointW
+//sys	FindVolumeClose(findVolume Handle) (err error)
+//sys	FindVolumeMountPointClose(findVolumeMountPoint Handle) (err error)
+//sys	GetDiskFreeSpaceEx(directoryName *uint16, freeBytesAvailableToCaller *uint64, totalNumberOfBytes *uint64, totalNumberOfFreeBytes *uint64) (err error) = GetDiskFreeSpaceExW
+//sys	GetDriveType(rootPathName *uint16) (driveType uint32) = GetDriveTypeW
+//sys	GetLogicalDrives() (drivesBitMask uint32, err error) [failretval==0]
+//sys	GetLogicalDriveStrings(bufferLength uint32, buffer *uint16) (n uint32, err error) [failretval==0] = GetLogicalDriveStringsW
+//sys	GetVolumeInformation(rootPathName *uint16, volumeNameBuffer *uint16, volumeNameSize uint32, volumeNameSerialNumber *uint32, maximumComponentLength *uint32, fileSystemFlags *uint32, fileSystemNameBuffer *uint16, fileSystemNameSize uint32) (err error) = GetVolumeInformationW
+//sys	GetVolumeInformationByHandle(file Handle, volumeNameBuffer *uint16, volumeNameSize uint32, volumeNameSerialNumber *uint32, maximumComponentLength *uint32, fileSystemFlags *uint32, fileSystemNameBuffer *uint16, fileSystemNameSize uint32) (err error) = GetVolumeInformationByHandleW
+//sys	GetVolumeNameForVolumeMountPoint(volumeMountPoint *uint16, volumeName *uint16, bufferlength uint32) (err error) = GetVolumeNameForVolumeMountPointW
+//sys	GetVolumePathName(fileName *uint16, volumePathName *uint16, bufferLength uint32) (err error) = GetVolumePathNameW
+//sys	GetVolumePathNamesForVolumeName(volumeName *uint16, volumePathNames *uint16, bufferLength uint32, returnLength *uint32) (err error) = GetVolumePathNamesForVolumeNameW
+//sys	QueryDosDevice(deviceName *uint16, targetPath *uint16, max uint32) (n uint32, err error) [failretval==0] = QueryDosDeviceW
+//sys	SetVolumeLabel(rootPathName *uint16, volumeName *uint16) (err error) = SetVolumeLabelW
+//sys	SetVolumeMountPoint(volumeMountPoint *uint16, volumeName *uint16) (err error) = SetVolumeMountPointW
+//sys	MessageBox(hwnd Handle, text *uint16, caption *uint16, boxtype uint32) (ret int32, err error) [failretval==0] = user32.MessageBoxW
+//sys	ExitWindowsEx(flags uint32, reason uint32) (err error) = user32.ExitWindowsEx
+//sys	InitiateSystemShutdownEx(machineName *uint16, message *uint16, timeout uint32, forceAppsClosed bool, rebootAfterShutdown bool, reason uint32) (err error) = advapi32.InitiateSystemShutdownExW
+//sys	SetProcessShutdownParameters(level uint32, flags uint32) (err error) = kernel32.SetProcessShutdownParameters
+//sys	GetProcessShutdownParameters(level *uint32, flags *uint32) (err error) = kernel32.GetProcessShutdownParameters
+//sys	clsidFromString(lpsz *uint16, pclsid *GUID) (ret error) = ole32.CLSIDFromString
+//sys	stringFromGUID2(rguid *GUID, lpsz *uint16, cchMax int32) (chars int32) = ole32.StringFromGUID2
+//sys	coCreateGuid(pguid *GUID) (ret error) = ole32.CoCreateGuid
+//sys	CoTaskMemFree(address unsafe.Pointer) = ole32.CoTaskMemFree
+//sys	rtlGetVersion(info *OsVersionInfoEx) (ret error) = ntdll.RtlGetVersion
+//sys	rtlGetNtVersionNumbers(majorVersion *uint32, minorVersion *uint32, buildNumber *uint32) = ntdll.RtlGetNtVersionNumbers
+//sys	getProcessPreferredUILanguages(flags uint32, numLanguages *uint32, buf *uint16, bufSize *uint32) (err error) = kernel32.GetProcessPreferredUILanguages
+//sys	getThreadPreferredUILanguages(flags uint32, numLanguages *uint32, buf *uint16, bufSize *uint32) (err error) = kernel32.GetThreadPreferredUILanguages
+//sys	getUserPreferredUILanguages(flags uint32, numLanguages *uint32, buf *uint16, bufSize *uint32) (err error) = kernel32.GetUserPreferredUILanguages
+//sys	getSystemPreferredUILanguages(flags uint32, numLanguages *uint32, buf *uint16, bufSize *uint32) (err error) = kernel32.GetSystemPreferredUILanguages
+
+// Process Status API (PSAPI)
+//sys	EnumProcesses(processIds []uint32, bytesReturned *uint32) (err error) = psapi.EnumProcesses
+
+// syscall interface implementation for other packages
+
+// GetCurrentProcess returns the handle for the current process.
+// It is a pseudo handle that does not need to be closed.
+// The returned error is always nil.
+//
+// Deprecated: use CurrentProcess for the same Handle without the nil
+// error.
+func GetCurrentProcess() (Handle, error) {
+	return CurrentProcess(), nil
+}
+
+// CurrentProcess returns the handle for the current process.
+// It is a pseudo handle that does not need to be closed.
+func CurrentProcess() Handle { return Handle(^uintptr(1 - 1)) }
+
+// GetCurrentThread returns the handle for the current thread.
+// It is a pseudo handle that does not need to be closed.
+// The returned error is always nil.
+//
+// Deprecated: use CurrentThread for the same Handle without the nil
+// error.
+func GetCurrentThread() (Handle, error) {
+	return CurrentThread(), nil
+}
+
+// CurrentThread returns the handle for the current thread.
+// It is a pseudo handle that does not need to be closed.
+func CurrentThread() Handle { return Handle(^uintptr(2 - 1)) }
+
+// GetProcAddressByOrdinal retrieves the address of the exported
+// function from module by ordinal.
+func GetProcAddressByOrdinal(module Handle, ordinal uintptr) (proc uintptr, err error) {
+	r0, _, e1 := syscall.Syscall(procGetProcAddress.Addr(), 2, uintptr(module), ordinal, 0)
+	proc = uintptr(r0)
+	if proc == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func Exit(code int) { ExitProcess(uint32(code)) }
+
+func makeInheritSa() *SecurityAttributes {
+	var sa SecurityAttributes
+	sa.Length = uint32(unsafe.Sizeof(sa))
+	sa.InheritHandle = 1
+	return &sa
+}
+
+func Open(path string, mode int, perm uint32) (fd Handle, err error) {
+	if len(path) == 0 {
+		return InvalidHandle, ERROR_FILE_NOT_FOUND
+	}
+	pathp, err := UTF16PtrFromString(path)
+	if err != nil {
+		return InvalidHandle, err
+	}
+	var access uint32
+	switch mode & (O_RDONLY | O_WRONLY | O_RDWR) {
+	case O_RDONLY:
+		access = GENERIC_READ
+	case O_WRONLY:
+		access = GENERIC_WRITE
+	case O_RDWR:
+		access = GENERIC_READ | GENERIC_WRITE
+	}
+	if mode&O_CREAT != 0 {
+		access |= GENERIC_WRITE
+	}
+	if mode&O_APPEND != 0 {
+		access &^= GENERIC_WRITE
+		access |= FILE_APPEND_DATA
+	}
+	sharemode := uint32(FILE_SHARE_READ | FILE_SHARE_WRITE)
+	var sa *SecurityAttributes
+	if mode&O_CLOEXEC == 0 {
+		sa = makeInheritSa()
+	}
+	var createmode uint32
+	switch {
+	case mode&(O_CREAT|O_EXCL) == (O_CREAT | O_EXCL):
+		createmode = CREATE_NEW
+	case mode&(O_CREAT|O_TRUNC) == (O_CREAT | O_TRUNC):
+		createmode = CREATE_ALWAYS
+	case mode&O_CREAT == O_CREAT:
+		createmode = OPEN_ALWAYS
+	case mode&O_TRUNC == O_TRUNC:
+		createmode = TRUNCATE_EXISTING
+	default:
+		createmode = OPEN_EXISTING
+	}
+	var attrs uint32 = FILE_ATTRIBUTE_NORMAL
+	if perm&S_IWRITE == 0 {
+		attrs = FILE_ATTRIBUTE_READONLY
+	}
+	h, e := CreateFile(pathp, access, sharemode, sa, createmode, attrs, 0)
+	return h, e
+}
+
+func Read(fd Handle, p []byte) (n int, err error) {
+	var done uint32
+	e := ReadFile(fd, p, &done, nil)
+	if e != nil {
+		if e == ERROR_BROKEN_PIPE {
+			// NOTE(brainman): work around ERROR_BROKEN_PIPE is returned on reading EOF from stdin
+			return 0, nil
+		}
+		return 0, e
+	}
+	if raceenabled {
+		if done > 0 {
+			raceWriteRange(unsafe.Pointer(&p[0]), int(done))
+		}
+		raceAcquire(unsafe.Pointer(&ioSync))
+	}
+	return int(done), nil
+}
+
+func Write(fd Handle, p []byte) (n int, err error) {
+	if raceenabled {
+		raceReleaseMerge(unsafe.Pointer(&ioSync))
+	}
+	var done uint32
+	e := WriteFile(fd, p, &done, nil)
+	if e != nil {
+		return 0, e
+	}
+	if raceenabled && done > 0 {
+		raceReadRange(unsafe.Pointer(&p[0]), int(done))
+	}
+	return int(done), nil
+}
+
+var ioSync int64
+
+func Seek(fd Handle, offset int64, whence int) (newoffset int64, err error) {
+	var w uint32
+	switch whence {
+	case 0:
+		w = FILE_BEGIN
+	case 1:
+		w = FILE_CURRENT
+	case 2:
+		w = FILE_END
+	}
+	hi := int32(offset >> 32)
+	lo := int32(offset)
+	// use GetFileType to check pipe, pipe can't do seek
+	ft, _ := GetFileType(fd)
+	if ft == FILE_TYPE_PIPE {
+		return 0, syscall.EPIPE
+	}
+	rlo, e := SetFilePointer(fd, lo, &hi, w)
+	if e != nil {
+		return 0, e
+	}
+	return int64(hi)<<32 + int64(rlo), nil
+}
+
+func Close(fd Handle) (err error) {
+	return CloseHandle(fd)
+}
+
+var (
+	Stdin  = getStdHandle(STD_INPUT_HANDLE)
+	Stdout = getStdHandle(STD_OUTPUT_HANDLE)
+	Stderr = getStdHandle(STD_ERROR_HANDLE)
+)
+
+func getStdHandle(stdhandle uint32) (fd Handle) {
+	r, _ := GetStdHandle(stdhandle)
+	CloseOnExec(r)
+	return r
+}
+
+const ImplementsGetwd = true
+
+func Getwd() (wd string, err error) {
+	b := make([]uint16, 300)
+	n, e := GetCurrentDirectory(uint32(len(b)), &b[0])
+	if e != nil {
+		return "", e
+	}
+	return string(utf16.Decode(b[0:n])), nil
+}
+
+func Chdir(path string) (err error) {
+	pathp, err := UTF16PtrFromString(path)
+	if err != nil {
+		return err
+	}
+	return SetCurrentDirectory(pathp)
+}
+
+func Mkdir(path string, mode uint32) (err error) {
+	pathp, err := UTF16PtrFromString(path)
+	if err != nil {
+		return err
+	}
+	return CreateDirectory(pathp, nil)
+}
+
+func Rmdir(path string) (err error) {
+	pathp, err := UTF16PtrFromString(path)
+	if err != nil {
+		return err
+	}
+	return RemoveDirectory(pathp)
+}
+
+func Unlink(path string) (err error) {
+	pathp, err := UTF16PtrFromString(path)
+	if err != nil {
+		return err
+	}
+	return DeleteFile(pathp)
+}
+
+func Rename(oldpath, newpath string) (err error) {
+	from, err := UTF16PtrFromString(oldpath)
+	if err != nil {
+		return err
+	}
+	to, err := UTF16PtrFromString(newpath)
+	if err != nil {
+		return err
+	}
+	return MoveFileEx(from, to, MOVEFILE_REPLACE_EXISTING)
+}
+
+func ComputerName() (name string, err error) {
+	var n uint32 = MAX_COMPUTERNAME_LENGTH + 1
+	b := make([]uint16, n)
+	e := GetComputerName(&b[0], &n)
+	if e != nil {
+		return "", e
+	}
+	return string(utf16.Decode(b[0:n])), nil
+}
+
+func DurationSinceBoot() time.Duration {
+	return time.Duration(getTickCount64()) * time.Millisecond
+}
+
+func Ftruncate(fd Handle, length int64) (err error) {
+	curoffset, e := Seek(fd, 0, 1)
+	if e != nil {
+		return e
+	}
+	defer Seek(fd, curoffset, 0)
+	_, e = Seek(fd, length, 0)
+	if e != nil {
+		return e
+	}
+	e = SetEndOfFile(fd)
+	if e != nil {
+		return e
+	}
+	return nil
+}
+
+func Gettimeofday(tv *Timeval) (err error) {
+	var ft Filetime
+	GetSystemTimeAsFileTime(&ft)
+	*tv = NsecToTimeval(ft.Nanoseconds())
+	return nil
+}
+
+func Pipe(p []Handle) (err error) {
+	if len(p) != 2 {
+		return syscall.EINVAL
+	}
+	var r, w Handle
+	e := CreatePipe(&r, &w, makeInheritSa(), 0)
+	if e != nil {
+		return e
+	}
+	p[0] = r
+	p[1] = w
+	return nil
+}
+
+func Utimes(path string, tv []Timeval) (err error) {
+	if len(tv) != 2 {
+		return syscall.EINVAL
+	}
+	pathp, e := UTF16PtrFromString(path)
+	if e != nil {
+		return e
+	}
+	h, e := CreateFile(pathp,
+		FILE_WRITE_ATTRIBUTES, FILE_SHARE_WRITE, nil,
+		OPEN_EXISTING, FILE_FLAG_BACKUP_SEMANTICS, 0)
+	if e != nil {
+		return e
+	}
+	defer Close(h)
+	a := NsecToFiletime(tv[0].Nanoseconds())
+	w := NsecToFiletime(tv[1].Nanoseconds())
+	return SetFileTime(h, nil, &a, &w)
+}
+
+func UtimesNano(path string, ts []Timespec) (err error) {
+	if len(ts) != 2 {
+		return syscall.EINVAL
+	}
+	pathp, e := UTF16PtrFromString(path)
+	if e != nil {
+		return e
+	}
+	h, e := CreateFile(pathp,
+		FILE_WRITE_ATTRIBUTES, FILE_SHARE_WRITE, nil,
+		OPEN_EXISTING, FILE_FLAG_BACKUP_SEMANTICS, 0)
+	if e != nil {
+		return e
+	}
+	defer Close(h)
+	a := NsecToFiletime(TimespecToNsec(ts[0]))
+	w := NsecToFiletime(TimespecToNsec(ts[1]))
+	return SetFileTime(h, nil, &a, &w)
+}
+
+func Fsync(fd Handle) (err error) {
+	return FlushFileBuffers(fd)
+}
+
+func Chmod(path string, mode uint32) (err error) {
+	p, e := UTF16PtrFromString(path)
+	if e != nil {
+		return e
+	}
+	attrs, e := GetFileAttributes(p)
+	if e != nil {
+		return e
+	}
+	if mode&S_IWRITE != 0 {
+		attrs &^= FILE_ATTRIBUTE_READONLY
+	} else {
+		attrs |= FILE_ATTRIBUTE_READONLY
+	}
+	return SetFileAttributes(p, attrs)
+}
+
+func LoadGetSystemTimePreciseAsFileTime() error {
+	return procGetSystemTimePreciseAsFileTime.Find()
+}
+
+func LoadCancelIoEx() error {
+	return procCancelIoEx.Find()
+}
+
+func LoadSetFileCompletionNotificationModes() error {
+	return procSetFileCompletionNotificationModes.Find()
+}
+
+func WaitForMultipleObjects(handles []Handle, waitAll bool, waitMilliseconds uint32) (event uint32, err error) {
+	// Every other win32 array API takes arguments as "pointer, count", except for this function. So we
+	// can't declare it as a usual [] type, because mksyscall will use the opposite order. We therefore
+	// trivially stub this ourselves.
+
+	var handlePtr *Handle
+	if len(handles) > 0 {
+		handlePtr = &handles[0]
+	}
+	return waitForMultipleObjects(uint32(len(handles)), uintptr(unsafe.Pointer(handlePtr)), waitAll, waitMilliseconds)
+}
+
+// net api calls
+
+const socket_error = uintptr(^uint32(0))
+
+//sys	WSAStartup(verreq uint32, data *WSAData) (sockerr error) = ws2_32.WSAStartup
+//sys	WSACleanup() (err error) [failretval==socket_error] = ws2_32.WSACleanup
+//sys	WSAIoctl(s Handle, iocc uint32, inbuf *byte, cbif uint32, outbuf *byte, cbob uint32, cbbr *uint32, overlapped *Overlapped, completionRoutine uintptr) (err error) [failretval==socket_error] = ws2_32.WSAIoctl
+//sys	socket(af int32, typ int32, protocol int32) (handle Handle, err error) [failretval==InvalidHandle] = ws2_32.socket
+//sys	sendto(s Handle, buf []byte, flags int32, to unsafe.Pointer, tolen int32) (err error) [failretval==socket_error] = ws2_32.sendto
+//sys	recvfrom(s Handle, buf []byte, flags int32, from *RawSockaddrAny, fromlen *int32) (n int32, err error) [failretval==-1] = ws2_32.recvfrom
+//sys	Setsockopt(s Handle, level int32, optname int32, optval *byte, optlen int32) (err error) [failretval==socket_error] = ws2_32.setsockopt
+//sys	Getsockopt(s Handle, level int32, optname int32, optval *byte, optlen *int32) (err error) [failretval==socket_error] = ws2_32.getsockopt
+//sys	bind(s Handle, name unsafe.Pointer, namelen int32) (err error) [failretval==socket_error] = ws2_32.bind
+//sys	connect(s Handle, name unsafe.Pointer, namelen int32) (err error) [failretval==socket_error] = ws2_32.connect
+//sys	getsockname(s Handle, rsa *RawSockaddrAny, addrlen *int32) (err error) [failretval==socket_error] = ws2_32.getsockname
+//sys	getpeername(s Handle, rsa *RawSockaddrAny, addrlen *int32) (err error) [failretval==socket_error] = ws2_32.getpeername
+//sys	listen(s Handle, backlog int32) (err error) [failretval==socket_error] = ws2_32.listen
+//sys	shutdown(s Handle, how int32) (err error) [failretval==socket_error] = ws2_32.shutdown
+//sys	Closesocket(s Handle) (err error) [failretval==socket_error] = ws2_32.closesocket
+//sys	AcceptEx(ls Handle, as Handle, buf *byte, rxdatalen uint32, laddrlen uint32, raddrlen uint32, recvd *uint32, overlapped *Overlapped) (err error) = mswsock.AcceptEx
+//sys	GetAcceptExSockaddrs(buf *byte, rxdatalen uint32, laddrlen uint32, raddrlen uint32, lrsa **RawSockaddrAny, lrsalen *int32, rrsa **RawSockaddrAny, rrsalen *int32) = mswsock.GetAcceptExSockaddrs
+//sys	WSARecv(s Handle, bufs *WSABuf, bufcnt uint32, recvd *uint32, flags *uint32, overlapped *Overlapped, croutine *byte) (err error) [failretval==socket_error] = ws2_32.WSARecv
+//sys	WSASend(s Handle, bufs *WSABuf, bufcnt uint32, sent *uint32, flags uint32, overlapped *Overlapped, croutine *byte) (err error) [failretval==socket_error] = ws2_32.WSASend
+//sys	WSARecvFrom(s Handle, bufs *WSABuf, bufcnt uint32, recvd *uint32, flags *uint32,  from *RawSockaddrAny, fromlen *int32, overlapped *Overlapped, croutine *byte) (err error) [failretval==socket_error] = ws2_32.WSARecvFrom
+//sys	WSASendTo(s Handle, bufs *WSABuf, bufcnt uint32, sent *uint32, flags uint32, to *RawSockaddrAny, tolen int32,  overlapped *Overlapped, croutine *byte) (err error) [failretval==socket_error] = ws2_32.WSASendTo
+//sys	GetHostByName(name string) (h *Hostent, err error) [failretval==nil] = ws2_32.gethostbyname
+//sys	GetServByName(name string, proto string) (s *Servent, err error) [failretval==nil] = ws2_32.getservbyname
+//sys	Ntohs(netshort uint16) (u uint16) = ws2_32.ntohs
+//sys	GetProtoByName(name string) (p *Protoent, err error) [failretval==nil] = ws2_32.getprotobyname
+//sys	DnsQuery(name string, qtype uint16, options uint32, extra *byte, qrs **DNSRecord, pr *byte) (status error) = dnsapi.DnsQuery_W
+//sys	DnsRecordListFree(rl *DNSRecord, freetype uint32) = dnsapi.DnsRecordListFree
+//sys	DnsNameCompare(name1 *uint16, name2 *uint16) (same bool) = dnsapi.DnsNameCompare_W
+//sys	GetAddrInfoW(nodename *uint16, servicename *uint16, hints *AddrinfoW, result **AddrinfoW) (sockerr error) = ws2_32.GetAddrInfoW
+//sys	FreeAddrInfoW(addrinfo *AddrinfoW) = ws2_32.FreeAddrInfoW
+//sys	GetIfEntry(pIfRow *MibIfRow) (errcode error) = iphlpapi.GetIfEntry
+//sys	GetAdaptersInfo(ai *IpAdapterInfo, ol *uint32) (errcode error) = iphlpapi.GetAdaptersInfo
+//sys	SetFileCompletionNotificationModes(handle Handle, flags uint8) (err error) = kernel32.SetFileCompletionNotificationModes
+//sys	WSAEnumProtocols(protocols *int32, protocolBuffer *WSAProtocolInfo, bufferLength *uint32) (n int32, err error) [failretval==-1] = ws2_32.WSAEnumProtocolsW
+//sys	GetAdaptersAddresses(family uint32, flags uint32, reserved uintptr, adapterAddresses *IpAdapterAddresses, sizePointer *uint32) (errcode error) = iphlpapi.GetAdaptersAddresses
+//sys	GetACP() (acp uint32) = kernel32.GetACP
+//sys	MultiByteToWideChar(codePage uint32, dwFlags uint32, str *byte, nstr int32, wchar *uint16, nwchar int32) (nwrite int32, err error) = kernel32.MultiByteToWideChar
+
+// For testing: clients can set this flag to force
+// creation of IPv6 sockets to return EAFNOSUPPORT.
+var SocketDisableIPv6 bool
+
+type RawSockaddrInet4 struct {
+	Family uint16
+	Port   uint16
+	Addr   [4]byte /* in_addr */
+	Zero   [8]uint8
+}
+
+type RawSockaddrInet6 struct {
+	Family   uint16
+	Port     uint16
+	Flowinfo uint32
+	Addr     [16]byte /* in6_addr */
+	Scope_id uint32
+}
+
+type RawSockaddr struct {
+	Family uint16
+	Data   [14]int8
+}
+
+type RawSockaddrAny struct {
+	Addr RawSockaddr
+	Pad  [100]int8
+}
+
+type Sockaddr interface {
+	sockaddr() (ptr unsafe.Pointer, len int32, err error) // lowercase; only we can define Sockaddrs
+}
+
+type SockaddrInet4 struct {
+	Port int
+	Addr [4]byte
+	raw  RawSockaddrInet4
+}
+
+func (sa *SockaddrInet4) sockaddr() (unsafe.Pointer, int32, error) {
+	if sa.Port < 0 || sa.Port > 0xFFFF {
+		return nil, 0, syscall.EINVAL
+	}
+	sa.raw.Family = AF_INET
+	p := (*[2]byte)(unsafe.Pointer(&sa.raw.Port))
+	p[0] = byte(sa.Port >> 8)
+	p[1] = byte(sa.Port)
+	for i := 0; i < len(sa.Addr); i++ {
+		sa.raw.Addr[i] = sa.Addr[i]
+	}
+	return unsafe.Pointer(&sa.raw), int32(unsafe.Sizeof(sa.raw)), nil
+}
+
+type SockaddrInet6 struct {
+	Port   int
+	ZoneId uint32
+	Addr   [16]byte
+	raw    RawSockaddrInet6
+}
+
+func (sa *SockaddrInet6) sockaddr() (unsafe.Pointer, int32, error) {
+	if sa.Port < 0 || sa.Port > 0xFFFF {
+		return nil, 0, syscall.EINVAL
+	}
+	sa.raw.Family = AF_INET6
+	p := (*[2]byte)(unsafe.Pointer(&sa.raw.Port))
+	p[0] = byte(sa.Port >> 8)
+	p[1] = byte(sa.Port)
+	sa.raw.Scope_id = sa.ZoneId
+	for i := 0; i < len(sa.Addr); i++ {
+		sa.raw.Addr[i] = sa.Addr[i]
+	}
+	return unsafe.Pointer(&sa.raw), int32(unsafe.Sizeof(sa.raw)), nil
+}
+
+type RawSockaddrUnix struct {
+	Family uint16
+	Path   [UNIX_PATH_MAX]int8
+}
+
+type SockaddrUnix struct {
+	Name string
+	raw  RawSockaddrUnix
+}
+
+func (sa *SockaddrUnix) sockaddr() (unsafe.Pointer, int32, error) {
+	name := sa.Name
+	n := len(name)
+	if n > len(sa.raw.Path) {
+		return nil, 0, syscall.EINVAL
+	}
+	if n == len(sa.raw.Path) && name[0] != '@' {
+		return nil, 0, syscall.EINVAL
+	}
+	sa.raw.Family = AF_UNIX
+	for i := 0; i < n; i++ {
+		sa.raw.Path[i] = int8(name[i])
+	}
+	// length is family (uint16), name, NUL.
+	sl := int32(2)
+	if n > 0 {
+		sl += int32(n) + 1
+	}
+	if sa.raw.Path[0] == '@' {
+		sa.raw.Path[0] = 0
+		// Don't count trailing NUL for abstract address.
+		sl--
+	}
+
+	return unsafe.Pointer(&sa.raw), sl, nil
+}
+
+func (rsa *RawSockaddrAny) Sockaddr() (Sockaddr, error) {
+	switch rsa.Addr.Family {
+	case AF_UNIX:
+		pp := (*RawSockaddrUnix)(unsafe.Pointer(rsa))
+		sa := new(SockaddrUnix)
+		if pp.Path[0] == 0 {
+			// "Abstract" Unix domain socket.
+			// Rewrite leading NUL as @ for textual display.
+			// (This is the standard convention.)
+			// Not friendly to overwrite in place,
+			// but the callers below don't care.
+			pp.Path[0] = '@'
+		}
+
+		// Assume path ends at NUL.
+		// This is not technically the Linux semantics for
+		// abstract Unix domain sockets--they are supposed
+		// to be uninterpreted fixed-size binary blobs--but
+		// everyone uses this convention.
+		n := 0
+		for n < len(pp.Path) && pp.Path[n] != 0 {
+			n++
+		}
+		bytes := (*[len(pp.Path)]byte)(unsafe.Pointer(&pp.Path[0]))[0:n]
+		sa.Name = string(bytes)
+		return sa, nil
+
+	case AF_INET:
+		pp := (*RawSockaddrInet4)(unsafe.Pointer(rsa))
+		sa := new(SockaddrInet4)
+		p := (*[2]byte)(unsafe.Pointer(&pp.Port))
+		sa.Port = int(p[0])<<8 + int(p[1])
+		for i := 0; i < len(sa.Addr); i++ {
+			sa.Addr[i] = pp.Addr[i]
+		}
+		return sa, nil
+
+	case AF_INET6:
+		pp := (*RawSockaddrInet6)(unsafe.Pointer(rsa))
+		sa := new(SockaddrInet6)
+		p := (*[2]byte)(unsafe.Pointer(&pp.Port))
+		sa.Port = int(p[0])<<8 + int(p[1])
+		sa.ZoneId = pp.Scope_id
+		for i := 0; i < len(sa.Addr); i++ {
+			sa.Addr[i] = pp.Addr[i]
+		}
+		return sa, nil
+	}
+	return nil, syscall.EAFNOSUPPORT
+}
+
+func Socket(domain, typ, proto int) (fd Handle, err error) {
+	if domain == AF_INET6 && SocketDisableIPv6 {
+		return InvalidHandle, syscall.EAFNOSUPPORT
+	}
+	return socket(int32(domain), int32(typ), int32(proto))
+}
+
+func SetsockoptInt(fd Handle, level, opt int, value int) (err error) {
+	v := int32(value)
+	return Setsockopt(fd, int32(level), int32(opt), (*byte)(unsafe.Pointer(&v)), int32(unsafe.Sizeof(v)))
+}
+
+func Bind(fd Handle, sa Sockaddr) (err error) {
+	ptr, n, err := sa.sockaddr()
+	if err != nil {
+		return err
+	}
+	return bind(fd, ptr, n)
+}
+
+func Connect(fd Handle, sa Sockaddr) (err error) {
+	ptr, n, err := sa.sockaddr()
+	if err != nil {
+		return err
+	}
+	return connect(fd, ptr, n)
+}
+
+func Getsockname(fd Handle) (sa Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	l := int32(unsafe.Sizeof(rsa))
+	if err = getsockname(fd, &rsa, &l); err != nil {
+		return
+	}
+	return rsa.Sockaddr()
+}
+
+func Getpeername(fd Handle) (sa Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	l := int32(unsafe.Sizeof(rsa))
+	if err = getpeername(fd, &rsa, &l); err != nil {
+		return
+	}
+	return rsa.Sockaddr()
+}
+
+func Listen(s Handle, n int) (err error) {
+	return listen(s, int32(n))
+}
+
+func Shutdown(fd Handle, how int) (err error) {
+	return shutdown(fd, int32(how))
+}
+
+func WSASendto(s Handle, bufs *WSABuf, bufcnt uint32, sent *uint32, flags uint32, to Sockaddr, overlapped *Overlapped, croutine *byte) (err error) {
+	rsa, l, err := to.sockaddr()
+	if err != nil {
+		return err
+	}
+	return WSASendTo(s, bufs, bufcnt, sent, flags, (*RawSockaddrAny)(unsafe.Pointer(rsa)), l, overlapped, croutine)
+}
+
+func LoadGetAddrInfo() error {
+	return procGetAddrInfoW.Find()
+}
+
+var connectExFunc struct {
+	once sync.Once
+	addr uintptr
+	err  error
+}
+
+func LoadConnectEx() error {
+	connectExFunc.once.Do(func() {
+		var s Handle
+		s, connectExFunc.err = Socket(AF_INET, SOCK_STREAM, IPPROTO_TCP)
+		if connectExFunc.err != nil {
+			return
+		}
+		defer CloseHandle(s)
+		var n uint32
+		connectExFunc.err = WSAIoctl(s,
+			SIO_GET_EXTENSION_FUNCTION_POINTER,
+			(*byte)(unsafe.Pointer(&WSAID_CONNECTEX)),
+			uint32(unsafe.Sizeof(WSAID_CONNECTEX)),
+			(*byte)(unsafe.Pointer(&connectExFunc.addr)),
+			uint32(unsafe.Sizeof(connectExFunc.addr)),
+			&n, nil, 0)
+	})
+	return connectExFunc.err
+}
+
+func connectEx(s Handle, name unsafe.Pointer, namelen int32, sendBuf *byte, sendDataLen uint32, bytesSent *uint32, overlapped *Overlapped) (err error) {
+	r1, _, e1 := syscall.Syscall9(connectExFunc.addr, 7, uintptr(s), uintptr(name), uintptr(namelen), uintptr(unsafe.Pointer(sendBuf)), uintptr(sendDataLen), uintptr(unsafe.Pointer(bytesSent)), uintptr(unsafe.Pointer(overlapped)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = error(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func ConnectEx(fd Handle, sa Sockaddr, sendBuf *byte, sendDataLen uint32, bytesSent *uint32, overlapped *Overlapped) error {
+	err := LoadConnectEx()
+	if err != nil {
+		return errorspkg.New("failed to find ConnectEx: " + err.Error())
+	}
+	ptr, n, err := sa.sockaddr()
+	if err != nil {
+		return err
+	}
+	return connectEx(fd, ptr, n, sendBuf, sendDataLen, bytesSent, overlapped)
+}
+
+var sendRecvMsgFunc struct {
+	once     sync.Once
+	sendAddr uintptr
+	recvAddr uintptr
+	err      error
+}
+
+func loadWSASendRecvMsg() error {
+	sendRecvMsgFunc.once.Do(func() {
+		var s Handle
+		s, sendRecvMsgFunc.err = Socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP)
+		if sendRecvMsgFunc.err != nil {
+			return
+		}
+		defer CloseHandle(s)
+		var n uint32
+		sendRecvMsgFunc.err = WSAIoctl(s,
+			SIO_GET_EXTENSION_FUNCTION_POINTER,
+			(*byte)(unsafe.Pointer(&WSAID_WSARECVMSG)),
+			uint32(unsafe.Sizeof(WSAID_WSARECVMSG)),
+			(*byte)(unsafe.Pointer(&sendRecvMsgFunc.recvAddr)),
+			uint32(unsafe.Sizeof(sendRecvMsgFunc.recvAddr)),
+			&n, nil, 0)
+		if sendRecvMsgFunc.err != nil {
+			return
+		}
+		sendRecvMsgFunc.err = WSAIoctl(s,
+			SIO_GET_EXTENSION_FUNCTION_POINTER,
+			(*byte)(unsafe.Pointer(&WSAID_WSASENDMSG)),
+			uint32(unsafe.Sizeof(WSAID_WSASENDMSG)),
+			(*byte)(unsafe.Pointer(&sendRecvMsgFunc.sendAddr)),
+			uint32(unsafe.Sizeof(sendRecvMsgFunc.sendAddr)),
+			&n, nil, 0)
+	})
+	return sendRecvMsgFunc.err
+}
+
+func WSASendMsg(fd Handle, msg *WSAMsg, flags uint32, bytesSent *uint32, overlapped *Overlapped, croutine *byte) error {
+	err := loadWSASendRecvMsg()
+	if err != nil {
+		return err
+	}
+	r1, _, e1 := syscall.Syscall6(sendRecvMsgFunc.sendAddr, 6, uintptr(fd), uintptr(unsafe.Pointer(msg)), uintptr(flags), uintptr(unsafe.Pointer(bytesSent)), uintptr(unsafe.Pointer(overlapped)), uintptr(unsafe.Pointer(croutine)))
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return err
+}
+
+func WSARecvMsg(fd Handle, msg *WSAMsg, bytesReceived *uint32, overlapped *Overlapped, croutine *byte) error {
+	err := loadWSASendRecvMsg()
+	if err != nil {
+		return err
+	}
+	r1, _, e1 := syscall.Syscall6(sendRecvMsgFunc.recvAddr, 5, uintptr(fd), uintptr(unsafe.Pointer(msg)), uintptr(unsafe.Pointer(bytesReceived)), uintptr(unsafe.Pointer(overlapped)), uintptr(unsafe.Pointer(croutine)), 0)
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return err
+}
+
+// Invented structures to support what package os expects.
+type Rusage struct {
+	CreationTime Filetime
+	ExitTime     Filetime
+	KernelTime   Filetime
+	UserTime     Filetime
+}
+
+type WaitStatus struct {
+	ExitCode uint32
+}
+
+func (w WaitStatus) Exited() bool { return true }
+
+func (w WaitStatus) ExitStatus() int { return int(w.ExitCode) }
+
+func (w WaitStatus) Signal() Signal { return -1 }
+
+func (w WaitStatus) CoreDump() bool { return false }
+
+func (w WaitStatus) Stopped() bool { return false }
+
+func (w WaitStatus) Continued() bool { return false }
+
+func (w WaitStatus) StopSignal() Signal { return -1 }
+
+func (w WaitStatus) Signaled() bool { return false }
+
+func (w WaitStatus) TrapCause() int { return -1 }
+
+// Timespec is an invented structure on Windows, but here for
+// consistency with the corresponding package for other operating systems.
+type Timespec struct {
+	Sec  int64
+	Nsec int64
+}
+
+func TimespecToNsec(ts Timespec) int64 { return int64(ts.Sec)*1e9 + int64(ts.Nsec) }
+
+func NsecToTimespec(nsec int64) (ts Timespec) {
+	ts.Sec = nsec / 1e9
+	ts.Nsec = nsec % 1e9
+	return
+}
+
+// TODO(brainman): fix all needed for net
+
+func Accept(fd Handle) (nfd Handle, sa Sockaddr, err error) { return 0, nil, syscall.EWINDOWS }
+
+func Recvfrom(fd Handle, p []byte, flags int) (n int, from Sockaddr, err error) {
+	var rsa RawSockaddrAny
+	l := int32(unsafe.Sizeof(rsa))
+	n32, err := recvfrom(fd, p, int32(flags), &rsa, &l)
+	n = int(n32)
+	if err != nil {
+		return
+	}
+	from, err = rsa.Sockaddr()
+	return
+}
+
+func Sendto(fd Handle, p []byte, flags int, to Sockaddr) (err error) {
+	ptr, l, err := to.sockaddr()
+	if err != nil {
+		return err
+	}
+	return sendto(fd, p, int32(flags), ptr, l)
+}
+
+func SetsockoptTimeval(fd Handle, level, opt int, tv *Timeval) (err error) { return syscall.EWINDOWS }
+
+// The Linger struct is wrong but we only noticed after Go 1.
+// sysLinger is the real system call structure.
+
+// BUG(brainman): The definition of Linger is not appropriate for direct use
+// with Setsockopt and Getsockopt.
+// Use SetsockoptLinger instead.
+
+type Linger struct {
+	Onoff  int32
+	Linger int32
+}
+
+type sysLinger struct {
+	Onoff  uint16
+	Linger uint16
+}
+
+type IPMreq struct {
+	Multiaddr [4]byte /* in_addr */
+	Interface [4]byte /* in_addr */
+}
+
+type IPv6Mreq struct {
+	Multiaddr [16]byte /* in6_addr */
+	Interface uint32
+}
+
+func GetsockoptInt(fd Handle, level, opt int) (int, error) {
+	v := int32(0)
+	l := int32(unsafe.Sizeof(v))
+	err := Getsockopt(fd, int32(level), int32(opt), (*byte)(unsafe.Pointer(&v)), &l)
+	return int(v), err
+}
+
+func SetsockoptLinger(fd Handle, level, opt int, l *Linger) (err error) {
+	sys := sysLinger{Onoff: uint16(l.Onoff), Linger: uint16(l.Linger)}
+	return Setsockopt(fd, int32(level), int32(opt), (*byte)(unsafe.Pointer(&sys)), int32(unsafe.Sizeof(sys)))
+}
+
+func SetsockoptInet4Addr(fd Handle, level, opt int, value [4]byte) (err error) {
+	return Setsockopt(fd, int32(level), int32(opt), (*byte)(unsafe.Pointer(&value[0])), 4)
+}
+func SetsockoptIPMreq(fd Handle, level, opt int, mreq *IPMreq) (err error) {
+	return Setsockopt(fd, int32(level), int32(opt), (*byte)(unsafe.Pointer(mreq)), int32(unsafe.Sizeof(*mreq)))
+}
+func SetsockoptIPv6Mreq(fd Handle, level, opt int, mreq *IPv6Mreq) (err error) {
+	return syscall.EWINDOWS
+}
+
+func Getpid() (pid int) { return int(GetCurrentProcessId()) }
+
+func FindFirstFile(name *uint16, data *Win32finddata) (handle Handle, err error) {
+	// NOTE(rsc): The Win32finddata struct is wrong for the system call:
+	// the two paths are each one uint16 short. Use the correct struct,
+	// a win32finddata1, and then copy the results out.
+	// There is no loss of expressivity here, because the final
+	// uint16, if it is used, is supposed to be a NUL, and Go doesn't need that.
+	// For Go 1.1, we might avoid the allocation of win32finddata1 here
+	// by adding a final Bug [2]uint16 field to the struct and then
+	// adjusting the fields in the result directly.
+	var data1 win32finddata1
+	handle, err = findFirstFile1(name, &data1)
+	if err == nil {
+		copyFindData(data, &data1)
+	}
+	return
+}
+
+func FindNextFile(handle Handle, data *Win32finddata) (err error) {
+	var data1 win32finddata1
+	err = findNextFile1(handle, &data1)
+	if err == nil {
+		copyFindData(data, &data1)
+	}
+	return
+}
+
+func getProcessEntry(pid int) (*ProcessEntry32, error) {
+	snapshot, err := CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0)
+	if err != nil {
+		return nil, err
+	}
+	defer CloseHandle(snapshot)
+	var procEntry ProcessEntry32
+	procEntry.Size = uint32(unsafe.Sizeof(procEntry))
+	if err = Process32First(snapshot, &procEntry); err != nil {
+		return nil, err
+	}
+	for {
+		if procEntry.ProcessID == uint32(pid) {
+			return &procEntry, nil
+		}
+		err = Process32Next(snapshot, &procEntry)
+		if err != nil {
+			return nil, err
+		}
+	}
+}
+
+func Getppid() (ppid int) {
+	pe, err := getProcessEntry(Getpid())
+	if err != nil {
+		return -1
+	}
+	return int(pe.ParentProcessID)
+}
+
+// TODO(brainman): fix all needed for os
+func Fchdir(fd Handle) (err error)             { return syscall.EWINDOWS }
+func Link(oldpath, newpath string) (err error) { return syscall.EWINDOWS }
+func Symlink(path, link string) (err error)    { return syscall.EWINDOWS }
+
+func Fchmod(fd Handle, mode uint32) (err error)        { return syscall.EWINDOWS }
+func Chown(path string, uid int, gid int) (err error)  { return syscall.EWINDOWS }
+func Lchown(path string, uid int, gid int) (err error) { return syscall.EWINDOWS }
+func Fchown(fd Handle, uid int, gid int) (err error)   { return syscall.EWINDOWS }
+
+func Getuid() (uid int)                  { return -1 }
+func Geteuid() (euid int)                { return -1 }
+func Getgid() (gid int)                  { return -1 }
+func Getegid() (egid int)                { return -1 }
+func Getgroups() (gids []int, err error) { return nil, syscall.EWINDOWS }
+
+type Signal int
+
+func (s Signal) Signal() {}
+
+func (s Signal) String() string {
+	if 0 <= s && int(s) < len(signals) {
+		str := signals[s]
+		if str != "" {
+			return str
+		}
+	}
+	return "signal " + itoa(int(s))
+}
+
+func LoadCreateSymbolicLink() error {
+	return procCreateSymbolicLinkW.Find()
+}
+
+// Readlink returns the destination of the named symbolic link.
+func Readlink(path string, buf []byte) (n int, err error) {
+	fd, err := CreateFile(StringToUTF16Ptr(path), GENERIC_READ, 0, nil, OPEN_EXISTING,
+		FILE_FLAG_OPEN_REPARSE_POINT|FILE_FLAG_BACKUP_SEMANTICS, 0)
+	if err != nil {
+		return -1, err
+	}
+	defer CloseHandle(fd)
+
+	rdbbuf := make([]byte, MAXIMUM_REPARSE_DATA_BUFFER_SIZE)
+	var bytesReturned uint32
+	err = DeviceIoControl(fd, FSCTL_GET_REPARSE_POINT, nil, 0, &rdbbuf[0], uint32(len(rdbbuf)), &bytesReturned, nil)
+	if err != nil {
+		return -1, err
+	}
+
+	rdb := (*reparseDataBuffer)(unsafe.Pointer(&rdbbuf[0]))
+	var s string
+	switch rdb.ReparseTag {
+	case IO_REPARSE_TAG_SYMLINK:
+		data := (*symbolicLinkReparseBuffer)(unsafe.Pointer(&rdb.reparseBuffer))
+		p := (*[0xffff]uint16)(unsafe.Pointer(&data.PathBuffer[0]))
+		s = UTF16ToString(p[data.PrintNameOffset/2 : (data.PrintNameLength-data.PrintNameOffset)/2])
+	case IO_REPARSE_TAG_MOUNT_POINT:
+		data := (*mountPointReparseBuffer)(unsafe.Pointer(&rdb.reparseBuffer))
+		p := (*[0xffff]uint16)(unsafe.Pointer(&data.PathBuffer[0]))
+		s = UTF16ToString(p[data.PrintNameOffset/2 : (data.PrintNameLength-data.PrintNameOffset)/2])
+	default:
+		// the path is not a symlink or junction but another type of reparse
+		// point
+		return -1, syscall.ENOENT
+	}
+	n = copy(buf, []byte(s))
+
+	return n, nil
+}
+
+// GUIDFromString parses a string in the form of
+// "{XXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}" into a GUID.
+func GUIDFromString(str string) (GUID, error) {
+	guid := GUID{}
+	str16, err := syscall.UTF16PtrFromString(str)
+	if err != nil {
+		return guid, err
+	}
+	err = clsidFromString(str16, &guid)
+	if err != nil {
+		return guid, err
+	}
+	return guid, nil
+}
+
+// GenerateGUID creates a new random GUID.
+func GenerateGUID() (GUID, error) {
+	guid := GUID{}
+	err := coCreateGuid(&guid)
+	if err != nil {
+		return guid, err
+	}
+	return guid, nil
+}
+
+// String returns the canonical string form of the GUID,
+// in the form of "{XXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}".
+func (guid GUID) String() string {
+	var str [100]uint16
+	chars := stringFromGUID2(&guid, &str[0], int32(len(str)))
+	if chars <= 1 {
+		return ""
+	}
+	return string(utf16.Decode(str[:chars-1]))
+}
+
+// KnownFolderPath returns a well-known folder path for the current user, specified by one of
+// the FOLDERID_ constants, and chosen and optionally created based on a KF_ flag.
+func KnownFolderPath(folderID *KNOWNFOLDERID, flags uint32) (string, error) {
+	return Token(0).KnownFolderPath(folderID, flags)
+}
+
+// KnownFolderPath returns a well-known folder path for the user token, specified by one of
+// the FOLDERID_ constants, and chosen and optionally created based on a KF_ flag.
+func (t Token) KnownFolderPath(folderID *KNOWNFOLDERID, flags uint32) (string, error) {
+	var p *uint16
+	err := shGetKnownFolderPath(folderID, flags, t, &p)
+	if err != nil {
+		return "", err
+	}
+	defer CoTaskMemFree(unsafe.Pointer(p))
+	return UTF16PtrToString(p), nil
+}
+
+// RtlGetVersion returns the version of the underlying operating system, ignoring
+// manifest semantics but is affected by the application compatibility layer.
+func RtlGetVersion() *OsVersionInfoEx {
+	info := &OsVersionInfoEx{}
+	info.osVersionInfoSize = uint32(unsafe.Sizeof(*info))
+	// According to documentation, this function always succeeds.
+	// The function doesn't even check the validity of the
+	// osVersionInfoSize member. Disassembling ntdll.dll indicates
+	// that the documentation is indeed correct about that.
+	_ = rtlGetVersion(info)
+	return info
+}
+
+// RtlGetNtVersionNumbers returns the version of the underlying operating system,
+// ignoring manifest semantics and the application compatibility layer.
+func RtlGetNtVersionNumbers() (majorVersion, minorVersion, buildNumber uint32) {
+	rtlGetNtVersionNumbers(&majorVersion, &minorVersion, &buildNumber)
+	buildNumber &= 0xffff
+	return
+}
+
+// GetProcessPreferredUILanguages retrieves the process preferred UI languages.
+func GetProcessPreferredUILanguages(flags uint32) ([]string, error) {
+	return getUILanguages(flags, getProcessPreferredUILanguages)
+}
+
+// GetThreadPreferredUILanguages retrieves the thread preferred UI languages for the current thread.
+func GetThreadPreferredUILanguages(flags uint32) ([]string, error) {
+	return getUILanguages(flags, getThreadPreferredUILanguages)
+}
+
+// GetUserPreferredUILanguages retrieves information about the user preferred UI languages.
+func GetUserPreferredUILanguages(flags uint32) ([]string, error) {
+	return getUILanguages(flags, getUserPreferredUILanguages)
+}
+
+// GetSystemPreferredUILanguages retrieves the system preferred UI languages.
+func GetSystemPreferredUILanguages(flags uint32) ([]string, error) {
+	return getUILanguages(flags, getSystemPreferredUILanguages)
+}
+
+func getUILanguages(flags uint32, f func(flags uint32, numLanguages *uint32, buf *uint16, bufSize *uint32) error) ([]string, error) {
+	size := uint32(128)
+	for {
+		var numLanguages uint32
+		buf := make([]uint16, size)
+		err := f(flags, &numLanguages, &buf[0], &size)
+		if err == ERROR_INSUFFICIENT_BUFFER {
+			continue
+		}
+		if err != nil {
+			return nil, err
+		}
+		buf = buf[:size]
+		if numLanguages == 0 || len(buf) == 0 { // GetProcessPreferredUILanguages may return numLanguages==0 with "\0\0"
+			return []string{}, nil
+		}
+		if buf[len(buf)-1] == 0 {
+			buf = buf[:len(buf)-1] // remove terminating null
+		}
+		languages := make([]string, 0, numLanguages)
+		from := 0
+		for i, c := range buf {
+			if c == 0 {
+				languages = append(languages, string(utf16.Decode(buf[from:i])))
+				from = i + 1
+			}
+		}
+		return languages, nil
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/types_windows.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/types_windows.go
new file mode 100644
index 000000000..da1652e74
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/types_windows.go
@@ -0,0 +1,1774 @@
+// Copyright 2011 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package windows
+
+import (
+	"net"
+	"syscall"
+	"unsafe"
+)
+
+const (
+	// Invented values to support what package os expects.
+	O_RDONLY   = 0x00000
+	O_WRONLY   = 0x00001
+	O_RDWR     = 0x00002
+	O_CREAT    = 0x00040
+	O_EXCL     = 0x00080
+	O_NOCTTY   = 0x00100
+	O_TRUNC    = 0x00200
+	O_NONBLOCK = 0x00800
+	O_APPEND   = 0x00400
+	O_SYNC     = 0x01000
+	O_ASYNC    = 0x02000
+	O_CLOEXEC  = 0x80000
+)
+
+const (
+	// More invented values for signals
+	SIGHUP  = Signal(0x1)
+	SIGINT  = Signal(0x2)
+	SIGQUIT = Signal(0x3)
+	SIGILL  = Signal(0x4)
+	SIGTRAP = Signal(0x5)
+	SIGABRT = Signal(0x6)
+	SIGBUS  = Signal(0x7)
+	SIGFPE  = Signal(0x8)
+	SIGKILL = Signal(0x9)
+	SIGSEGV = Signal(0xb)
+	SIGPIPE = Signal(0xd)
+	SIGALRM = Signal(0xe)
+	SIGTERM = Signal(0xf)
+)
+
+var signals = [...]string{
+	1:  "hangup",
+	2:  "interrupt",
+	3:  "quit",
+	4:  "illegal instruction",
+	5:  "trace/breakpoint trap",
+	6:  "aborted",
+	7:  "bus error",
+	8:  "floating point exception",
+	9:  "killed",
+	10: "user defined signal 1",
+	11: "segmentation fault",
+	12: "user defined signal 2",
+	13: "broken pipe",
+	14: "alarm clock",
+	15: "terminated",
+}
+
+const (
+	FILE_LIST_DIRECTORY   = 0x00000001
+	FILE_APPEND_DATA      = 0x00000004
+	FILE_WRITE_ATTRIBUTES = 0x00000100
+
+	FILE_SHARE_READ   = 0x00000001
+	FILE_SHARE_WRITE  = 0x00000002
+	FILE_SHARE_DELETE = 0x00000004
+
+	FILE_ATTRIBUTE_READONLY              = 0x00000001
+	FILE_ATTRIBUTE_HIDDEN                = 0x00000002
+	FILE_ATTRIBUTE_SYSTEM                = 0x00000004
+	FILE_ATTRIBUTE_DIRECTORY             = 0x00000010
+	FILE_ATTRIBUTE_ARCHIVE               = 0x00000020
+	FILE_ATTRIBUTE_DEVICE                = 0x00000040
+	FILE_ATTRIBUTE_NORMAL                = 0x00000080
+	FILE_ATTRIBUTE_TEMPORARY             = 0x00000100
+	FILE_ATTRIBUTE_SPARSE_FILE           = 0x00000200
+	FILE_ATTRIBUTE_REPARSE_POINT         = 0x00000400
+	FILE_ATTRIBUTE_COMPRESSED            = 0x00000800
+	FILE_ATTRIBUTE_OFFLINE               = 0x00001000
+	FILE_ATTRIBUTE_NOT_CONTENT_INDEXED   = 0x00002000
+	FILE_ATTRIBUTE_ENCRYPTED             = 0x00004000
+	FILE_ATTRIBUTE_INTEGRITY_STREAM      = 0x00008000
+	FILE_ATTRIBUTE_VIRTUAL               = 0x00010000
+	FILE_ATTRIBUTE_NO_SCRUB_DATA         = 0x00020000
+	FILE_ATTRIBUTE_RECALL_ON_OPEN        = 0x00040000
+	FILE_ATTRIBUTE_RECALL_ON_DATA_ACCESS = 0x00400000
+
+	INVALID_FILE_ATTRIBUTES = 0xffffffff
+
+	CREATE_NEW        = 1
+	CREATE_ALWAYS     = 2
+	OPEN_EXISTING     = 3
+	OPEN_ALWAYS       = 4
+	TRUNCATE_EXISTING = 5
+
+	FILE_FLAG_OPEN_REQUIRING_OPLOCK = 0x00040000
+	FILE_FLAG_FIRST_PIPE_INSTANCE   = 0x00080000
+	FILE_FLAG_OPEN_NO_RECALL        = 0x00100000
+	FILE_FLAG_OPEN_REPARSE_POINT    = 0x00200000
+	FILE_FLAG_SESSION_AWARE         = 0x00800000
+	FILE_FLAG_POSIX_SEMANTICS       = 0x01000000
+	FILE_FLAG_BACKUP_SEMANTICS      = 0x02000000
+	FILE_FLAG_DELETE_ON_CLOSE       = 0x04000000
+	FILE_FLAG_SEQUENTIAL_SCAN       = 0x08000000
+	FILE_FLAG_RANDOM_ACCESS         = 0x10000000
+	FILE_FLAG_NO_BUFFERING          = 0x20000000
+	FILE_FLAG_OVERLAPPED            = 0x40000000
+	FILE_FLAG_WRITE_THROUGH         = 0x80000000
+
+	HANDLE_FLAG_INHERIT    = 0x00000001
+	STARTF_USESTDHANDLES   = 0x00000100
+	STARTF_USESHOWWINDOW   = 0x00000001
+	DUPLICATE_CLOSE_SOURCE = 0x00000001
+	DUPLICATE_SAME_ACCESS  = 0x00000002
+
+	STD_INPUT_HANDLE  = -10 & (1<<32 - 1)
+	STD_OUTPUT_HANDLE = -11 & (1<<32 - 1)
+	STD_ERROR_HANDLE  = -12 & (1<<32 - 1)
+
+	FILE_BEGIN   = 0
+	FILE_CURRENT = 1
+	FILE_END     = 2
+
+	LANG_ENGLISH       = 0x09
+	SUBLANG_ENGLISH_US = 0x01
+
+	FORMAT_MESSAGE_ALLOCATE_BUFFER = 256
+	FORMAT_MESSAGE_IGNORE_INSERTS  = 512
+	FORMAT_MESSAGE_FROM_STRING     = 1024
+	FORMAT_MESSAGE_FROM_HMODULE    = 2048
+	FORMAT_MESSAGE_FROM_SYSTEM     = 4096
+	FORMAT_MESSAGE_ARGUMENT_ARRAY  = 8192
+	FORMAT_MESSAGE_MAX_WIDTH_MASK  = 255
+
+	MAX_PATH      = 260
+	MAX_LONG_PATH = 32768
+
+	MAX_COMPUTERNAME_LENGTH = 15
+
+	TIME_ZONE_ID_UNKNOWN  = 0
+	TIME_ZONE_ID_STANDARD = 1
+
+	TIME_ZONE_ID_DAYLIGHT = 2
+	IGNORE                = 0
+	INFINITE              = 0xffffffff
+
+	WAIT_ABANDONED = 0x00000080
+	WAIT_OBJECT_0  = 0x00000000
+	WAIT_FAILED    = 0xFFFFFFFF
+
+	// Access rights for process.
+	PROCESS_CREATE_PROCESS            = 0x0080
+	PROCESS_CREATE_THREAD             = 0x0002
+	PROCESS_DUP_HANDLE                = 0x0040
+	PROCESS_QUERY_INFORMATION         = 0x0400
+	PROCESS_QUERY_LIMITED_INFORMATION = 0x1000
+	PROCESS_SET_INFORMATION           = 0x0200
+	PROCESS_SET_QUOTA                 = 0x0100
+	PROCESS_SUSPEND_RESUME            = 0x0800
+	PROCESS_TERMINATE                 = 0x0001
+	PROCESS_VM_OPERATION              = 0x0008
+	PROCESS_VM_READ                   = 0x0010
+	PROCESS_VM_WRITE                  = 0x0020
+
+	// Access rights for thread.
+	THREAD_DIRECT_IMPERSONATION      = 0x0200
+	THREAD_GET_CONTEXT               = 0x0008
+	THREAD_IMPERSONATE               = 0x0100
+	THREAD_QUERY_INFORMATION         = 0x0040
+	THREAD_QUERY_LIMITED_INFORMATION = 0x0800
+	THREAD_SET_CONTEXT               = 0x0010
+	THREAD_SET_INFORMATION           = 0x0020
+	THREAD_SET_LIMITED_INFORMATION   = 0x0400
+	THREAD_SET_THREAD_TOKEN          = 0x0080
+	THREAD_SUSPEND_RESUME            = 0x0002
+	THREAD_TERMINATE                 = 0x0001
+
+	FILE_MAP_COPY    = 0x01
+	FILE_MAP_WRITE   = 0x02
+	FILE_MAP_READ    = 0x04
+	FILE_MAP_EXECUTE = 0x20
+
+	CTRL_C_EVENT        = 0
+	CTRL_BREAK_EVENT    = 1
+	CTRL_CLOSE_EVENT    = 2
+	CTRL_LOGOFF_EVENT   = 5
+	CTRL_SHUTDOWN_EVENT = 6
+
+	// Windows reserves errors >= 1<<29 for application use.
+	APPLICATION_ERROR = 1 << 29
+)
+
+const (
+	// Process creation flags.
+	CREATE_BREAKAWAY_FROM_JOB        = 0x01000000
+	CREATE_DEFAULT_ERROR_MODE        = 0x04000000
+	CREATE_NEW_CONSOLE               = 0x00000010
+	CREATE_NEW_PROCESS_GROUP         = 0x00000200
+	CREATE_NO_WINDOW                 = 0x08000000
+	CREATE_PROTECTED_PROCESS         = 0x00040000
+	CREATE_PRESERVE_CODE_AUTHZ_LEVEL = 0x02000000
+	CREATE_SEPARATE_WOW_VDM          = 0x00000800
+	CREATE_SHARED_WOW_VDM            = 0x00001000
+	CREATE_SUSPENDED                 = 0x00000004
+	CREATE_UNICODE_ENVIRONMENT       = 0x00000400
+	DEBUG_ONLY_THIS_PROCESS          = 0x00000002
+	DEBUG_PROCESS                    = 0x00000001
+	DETACHED_PROCESS                 = 0x00000008
+	EXTENDED_STARTUPINFO_PRESENT     = 0x00080000
+	INHERIT_PARENT_AFFINITY          = 0x00010000
+)
+
+const (
+	// flags for CreateToolhelp32Snapshot
+	TH32CS_SNAPHEAPLIST = 0x01
+	TH32CS_SNAPPROCESS  = 0x02
+	TH32CS_SNAPTHREAD   = 0x04
+	TH32CS_SNAPMODULE   = 0x08
+	TH32CS_SNAPMODULE32 = 0x10
+	TH32CS_SNAPALL      = TH32CS_SNAPHEAPLIST | TH32CS_SNAPMODULE | TH32CS_SNAPPROCESS | TH32CS_SNAPTHREAD
+	TH32CS_INHERIT      = 0x80000000
+)
+
+const (
+	// filters for ReadDirectoryChangesW
+	FILE_NOTIFY_CHANGE_FILE_NAME   = 0x001
+	FILE_NOTIFY_CHANGE_DIR_NAME    = 0x002
+	FILE_NOTIFY_CHANGE_ATTRIBUTES  = 0x004
+	FILE_NOTIFY_CHANGE_SIZE        = 0x008
+	FILE_NOTIFY_CHANGE_LAST_WRITE  = 0x010
+	FILE_NOTIFY_CHANGE_LAST_ACCESS = 0x020
+	FILE_NOTIFY_CHANGE_CREATION    = 0x040
+	FILE_NOTIFY_CHANGE_SECURITY    = 0x100
+)
+
+const (
+	// do not reorder
+	FILE_ACTION_ADDED = iota + 1
+	FILE_ACTION_REMOVED
+	FILE_ACTION_MODIFIED
+	FILE_ACTION_RENAMED_OLD_NAME
+	FILE_ACTION_RENAMED_NEW_NAME
+)
+
+const (
+	// wincrypt.h
+	PROV_RSA_FULL                    = 1
+	PROV_RSA_SIG                     = 2
+	PROV_DSS                         = 3
+	PROV_FORTEZZA                    = 4
+	PROV_MS_EXCHANGE                 = 5
+	PROV_SSL                         = 6
+	PROV_RSA_SCHANNEL                = 12
+	PROV_DSS_DH                      = 13
+	PROV_EC_ECDSA_SIG                = 14
+	PROV_EC_ECNRA_SIG                = 15
+	PROV_EC_ECDSA_FULL               = 16
+	PROV_EC_ECNRA_FULL               = 17
+	PROV_DH_SCHANNEL                 = 18
+	PROV_SPYRUS_LYNKS                = 20
+	PROV_RNG                         = 21
+	PROV_INTEL_SEC                   = 22
+	PROV_REPLACE_OWF                 = 23
+	PROV_RSA_AES                     = 24
+	CRYPT_VERIFYCONTEXT              = 0xF0000000
+	CRYPT_NEWKEYSET                  = 0x00000008
+	CRYPT_DELETEKEYSET               = 0x00000010
+	CRYPT_MACHINE_KEYSET             = 0x00000020
+	CRYPT_SILENT                     = 0x00000040
+	CRYPT_DEFAULT_CONTAINER_OPTIONAL = 0x00000080
+
+	USAGE_MATCH_TYPE_AND = 0
+	USAGE_MATCH_TYPE_OR  = 1
+
+	/* msgAndCertEncodingType values for CertOpenStore function */
+	X509_ASN_ENCODING   = 0x00000001
+	PKCS_7_ASN_ENCODING = 0x00010000
+
+	/* storeProvider values for CertOpenStore function */
+	CERT_STORE_PROV_MSG               = 1
+	CERT_STORE_PROV_MEMORY            = 2
+	CERT_STORE_PROV_FILE              = 3
+	CERT_STORE_PROV_REG               = 4
+	CERT_STORE_PROV_PKCS7             = 5
+	CERT_STORE_PROV_SERIALIZED        = 6
+	CERT_STORE_PROV_FILENAME_A        = 7
+	CERT_STORE_PROV_FILENAME_W        = 8
+	CERT_STORE_PROV_FILENAME          = CERT_STORE_PROV_FILENAME_W
+	CERT_STORE_PROV_SYSTEM_A          = 9
+	CERT_STORE_PROV_SYSTEM_W          = 10
+	CERT_STORE_PROV_SYSTEM            = CERT_STORE_PROV_SYSTEM_W
+	CERT_STORE_PROV_COLLECTION        = 11
+	CERT_STORE_PROV_SYSTEM_REGISTRY_A = 12
+	CERT_STORE_PROV_SYSTEM_REGISTRY_W = 13
+	CERT_STORE_PROV_SYSTEM_REGISTRY   = CERT_STORE_PROV_SYSTEM_REGISTRY_W
+	CERT_STORE_PROV_PHYSICAL_W        = 14
+	CERT_STORE_PROV_PHYSICAL          = CERT_STORE_PROV_PHYSICAL_W
+	CERT_STORE_PROV_SMART_CARD_W      = 15
+	CERT_STORE_PROV_SMART_CARD        = CERT_STORE_PROV_SMART_CARD_W
+	CERT_STORE_PROV_LDAP_W            = 16
+	CERT_STORE_PROV_LDAP              = CERT_STORE_PROV_LDAP_W
+	CERT_STORE_PROV_PKCS12            = 17
+
+	/* store characteristics (low WORD of flag) for CertOpenStore function */
+	CERT_STORE_NO_CRYPT_RELEASE_FLAG            = 0x00000001
+	CERT_STORE_SET_LOCALIZED_NAME_FLAG          = 0x00000002
+	CERT_STORE_DEFER_CLOSE_UNTIL_LAST_FREE_FLAG = 0x00000004
+	CERT_STORE_DELETE_FLAG                      = 0x00000010
+	CERT_STORE_UNSAFE_PHYSICAL_FLAG             = 0x00000020
+	CERT_STORE_SHARE_STORE_FLAG                 = 0x00000040
+	CERT_STORE_SHARE_CONTEXT_FLAG               = 0x00000080
+	CERT_STORE_MANIFOLD_FLAG                    = 0x00000100
+	CERT_STORE_ENUM_ARCHIVED_FLAG               = 0x00000200
+	CERT_STORE_UPDATE_KEYID_FLAG                = 0x00000400
+	CERT_STORE_BACKUP_RESTORE_FLAG              = 0x00000800
+	CERT_STORE_MAXIMUM_ALLOWED_FLAG             = 0x00001000
+	CERT_STORE_CREATE_NEW_FLAG                  = 0x00002000
+	CERT_STORE_OPEN_EXISTING_FLAG               = 0x00004000
+	CERT_STORE_READONLY_FLAG                    = 0x00008000
+
+	/* store locations (high WORD of flag) for CertOpenStore function */
+	CERT_SYSTEM_STORE_CURRENT_USER               = 0x00010000
+	CERT_SYSTEM_STORE_LOCAL_MACHINE              = 0x00020000
+	CERT_SYSTEM_STORE_CURRENT_SERVICE            = 0x00040000
+	CERT_SYSTEM_STORE_SERVICES                   = 0x00050000
+	CERT_SYSTEM_STORE_USERS                      = 0x00060000
+	CERT_SYSTEM_STORE_CURRENT_USER_GROUP_POLICY  = 0x00070000
+	CERT_SYSTEM_STORE_LOCAL_MACHINE_GROUP_POLICY = 0x00080000
+	CERT_SYSTEM_STORE_LOCAL_MACHINE_ENTERPRISE   = 0x00090000
+	CERT_SYSTEM_STORE_UNPROTECTED_FLAG           = 0x40000000
+	CERT_SYSTEM_STORE_RELOCATE_FLAG              = 0x80000000
+
+	/* Miscellaneous high-WORD flags for CertOpenStore function */
+	CERT_REGISTRY_STORE_REMOTE_FLAG      = 0x00010000
+	CERT_REGISTRY_STORE_SERIALIZED_FLAG  = 0x00020000
+	CERT_REGISTRY_STORE_ROAMING_FLAG     = 0x00040000
+	CERT_REGISTRY_STORE_MY_IE_DIRTY_FLAG = 0x00080000
+	CERT_REGISTRY_STORE_LM_GPT_FLAG      = 0x01000000
+	CERT_REGISTRY_STORE_CLIENT_GPT_FLAG  = 0x80000000
+	CERT_FILE_STORE_COMMIT_ENABLE_FLAG   = 0x00010000
+	CERT_LDAP_STORE_SIGN_FLAG            = 0x00010000
+	CERT_LDAP_STORE_AREC_EXCLUSIVE_FLAG  = 0x00020000
+	CERT_LDAP_STORE_OPENED_FLAG          = 0x00040000
+	CERT_LDAP_STORE_UNBIND_FLAG          = 0x00080000
+
+	/* addDisposition values for CertAddCertificateContextToStore function */
+	CERT_STORE_ADD_NEW                                 = 1
+	CERT_STORE_ADD_USE_EXISTING                        = 2
+	CERT_STORE_ADD_REPLACE_EXISTING                    = 3
+	CERT_STORE_ADD_ALWAYS                              = 4
+	CERT_STORE_ADD_REPLACE_EXISTING_INHERIT_PROPERTIES = 5
+	CERT_STORE_ADD_NEWER                               = 6
+	CERT_STORE_ADD_NEWER_INHERIT_PROPERTIES            = 7
+
+	/* ErrorStatus values for CertTrustStatus struct */
+	CERT_TRUST_NO_ERROR                          = 0x00000000
+	CERT_TRUST_IS_NOT_TIME_VALID                 = 0x00000001
+	CERT_TRUST_IS_REVOKED                        = 0x00000004
+	CERT_TRUST_IS_NOT_SIGNATURE_VALID            = 0x00000008
+	CERT_TRUST_IS_NOT_VALID_FOR_USAGE            = 0x00000010
+	CERT_TRUST_IS_UNTRUSTED_ROOT                 = 0x00000020
+	CERT_TRUST_REVOCATION_STATUS_UNKNOWN         = 0x00000040
+	CERT_TRUST_IS_CYCLIC                         = 0x00000080
+	CERT_TRUST_INVALID_EXTENSION                 = 0x00000100
+	CERT_TRUST_INVALID_POLICY_CONSTRAINTS        = 0x00000200
+	CERT_TRUST_INVALID_BASIC_CONSTRAINTS         = 0x00000400
+	CERT_TRUST_INVALID_NAME_CONSTRAINTS          = 0x00000800
+	CERT_TRUST_HAS_NOT_SUPPORTED_NAME_CONSTRAINT = 0x00001000
+	CERT_TRUST_HAS_NOT_DEFINED_NAME_CONSTRAINT   = 0x00002000
+	CERT_TRUST_HAS_NOT_PERMITTED_NAME_CONSTRAINT = 0x00004000
+	CERT_TRUST_HAS_EXCLUDED_NAME_CONSTRAINT      = 0x00008000
+	CERT_TRUST_IS_PARTIAL_CHAIN                  = 0x00010000
+	CERT_TRUST_CTL_IS_NOT_TIME_VALID             = 0x00020000
+	CERT_TRUST_CTL_IS_NOT_SIGNATURE_VALID        = 0x00040000
+	CERT_TRUST_CTL_IS_NOT_VALID_FOR_USAGE        = 0x00080000
+	CERT_TRUST_HAS_WEAK_SIGNATURE                = 0x00100000
+	CERT_TRUST_IS_OFFLINE_REVOCATION             = 0x01000000
+	CERT_TRUST_NO_ISSUANCE_CHAIN_POLICY          = 0x02000000
+	CERT_TRUST_IS_EXPLICIT_DISTRUST              = 0x04000000
+	CERT_TRUST_HAS_NOT_SUPPORTED_CRITICAL_EXT    = 0x08000000
+
+	/* InfoStatus values for CertTrustStatus struct */
+	CERT_TRUST_HAS_EXACT_MATCH_ISSUER        = 0x00000001
+	CERT_TRUST_HAS_KEY_MATCH_ISSUER          = 0x00000002
+	CERT_TRUST_HAS_NAME_MATCH_ISSUER         = 0x00000004
+	CERT_TRUST_IS_SELF_SIGNED                = 0x00000008
+	CERT_TRUST_HAS_PREFERRED_ISSUER          = 0x00000100
+	CERT_TRUST_HAS_ISSUANCE_CHAIN_POLICY     = 0x00000400
+	CERT_TRUST_HAS_VALID_NAME_CONSTRAINTS    = 0x00000400
+	CERT_TRUST_IS_PEER_TRUSTED               = 0x00000800
+	CERT_TRUST_HAS_CRL_VALIDITY_EXTENDED     = 0x00001000
+	CERT_TRUST_IS_FROM_EXCLUSIVE_TRUST_STORE = 0x00002000
+	CERT_TRUST_IS_CA_TRUSTED                 = 0x00004000
+	CERT_TRUST_IS_COMPLEX_CHAIN              = 0x00010000
+
+	/* policyOID values for CertVerifyCertificateChainPolicy function */
+	CERT_CHAIN_POLICY_BASE              = 1
+	CERT_CHAIN_POLICY_AUTHENTICODE      = 2
+	CERT_CHAIN_POLICY_AUTHENTICODE_TS   = 3
+	CERT_CHAIN_POLICY_SSL               = 4
+	CERT_CHAIN_POLICY_BASIC_CONSTRAINTS = 5
+	CERT_CHAIN_POLICY_NT_AUTH           = 6
+	CERT_CHAIN_POLICY_MICROSOFT_ROOT    = 7
+	CERT_CHAIN_POLICY_EV                = 8
+	CERT_CHAIN_POLICY_SSL_F12           = 9
+
+	/* AuthType values for SSLExtraCertChainPolicyPara struct */
+	AUTHTYPE_CLIENT = 1
+	AUTHTYPE_SERVER = 2
+
+	/* Checks values for SSLExtraCertChainPolicyPara struct */
+	SECURITY_FLAG_IGNORE_REVOCATION        = 0x00000080
+	SECURITY_FLAG_IGNORE_UNKNOWN_CA        = 0x00000100
+	SECURITY_FLAG_IGNORE_WRONG_USAGE       = 0x00000200
+	SECURITY_FLAG_IGNORE_CERT_CN_INVALID   = 0x00001000
+	SECURITY_FLAG_IGNORE_CERT_DATE_INVALID = 0x00002000
+)
+
+const (
+	// flags for SetErrorMode
+	SEM_FAILCRITICALERRORS     = 0x0001
+	SEM_NOALIGNMENTFAULTEXCEPT = 0x0004
+	SEM_NOGPFAULTERRORBOX      = 0x0002
+	SEM_NOOPENFILEERRORBOX     = 0x8000
+)
+
+const (
+	// Priority class.
+	ABOVE_NORMAL_PRIORITY_CLASS   = 0x00008000
+	BELOW_NORMAL_PRIORITY_CLASS   = 0x00004000
+	HIGH_PRIORITY_CLASS           = 0x00000080
+	IDLE_PRIORITY_CLASS           = 0x00000040
+	NORMAL_PRIORITY_CLASS         = 0x00000020
+	PROCESS_MODE_BACKGROUND_BEGIN = 0x00100000
+	PROCESS_MODE_BACKGROUND_END   = 0x00200000
+	REALTIME_PRIORITY_CLASS       = 0x00000100
+)
+
+var (
+	OID_PKIX_KP_SERVER_AUTH = []byte("1.3.6.1.5.5.7.3.1\x00")
+	OID_SERVER_GATED_CRYPTO = []byte("1.3.6.1.4.1.311.10.3.3\x00")
+	OID_SGC_NETSCAPE        = []byte("2.16.840.1.113730.4.1\x00")
+)
+
+// Pointer represents a pointer to an arbitrary Windows type.
+//
+// Pointer-typed fields may point to one of many different types. It's
+// up to the caller to provide a pointer to the appropriate type, cast
+// to Pointer. The caller must obey the unsafe.Pointer rules while
+// doing so.
+type Pointer *struct{}
+
+// Invented values to support what package os expects.
+type Timeval struct {
+	Sec  int32
+	Usec int32
+}
+
+func (tv *Timeval) Nanoseconds() int64 {
+	return (int64(tv.Sec)*1e6 + int64(tv.Usec)) * 1e3
+}
+
+func NsecToTimeval(nsec int64) (tv Timeval) {
+	tv.Sec = int32(nsec / 1e9)
+	tv.Usec = int32(nsec % 1e9 / 1e3)
+	return
+}
+
+type Overlapped struct {
+	Internal     uintptr
+	InternalHigh uintptr
+	Offset       uint32
+	OffsetHigh   uint32
+	HEvent       Handle
+}
+
+type FileNotifyInformation struct {
+	NextEntryOffset uint32
+	Action          uint32
+	FileNameLength  uint32
+	FileName        uint16
+}
+
+type Filetime struct {
+	LowDateTime  uint32
+	HighDateTime uint32
+}
+
+// Nanoseconds returns Filetime ft in nanoseconds
+// since Epoch (00:00:00 UTC, January 1, 1970).
+func (ft *Filetime) Nanoseconds() int64 {
+	// 100-nanosecond intervals since January 1, 1601
+	nsec := int64(ft.HighDateTime)<<32 + int64(ft.LowDateTime)
+	// change starting time to the Epoch (00:00:00 UTC, January 1, 1970)
+	nsec -= 116444736000000000
+	// convert into nanoseconds
+	nsec *= 100
+	return nsec
+}
+
+func NsecToFiletime(nsec int64) (ft Filetime) {
+	// convert into 100-nanosecond
+	nsec /= 100
+	// change starting time to January 1, 1601
+	nsec += 116444736000000000
+	// split into high / low
+	ft.LowDateTime = uint32(nsec & 0xffffffff)
+	ft.HighDateTime = uint32(nsec >> 32 & 0xffffffff)
+	return ft
+}
+
+type Win32finddata struct {
+	FileAttributes    uint32
+	CreationTime      Filetime
+	LastAccessTime    Filetime
+	LastWriteTime     Filetime
+	FileSizeHigh      uint32
+	FileSizeLow       uint32
+	Reserved0         uint32
+	Reserved1         uint32
+	FileName          [MAX_PATH - 1]uint16
+	AlternateFileName [13]uint16
+}
+
+// This is the actual system call structure.
+// Win32finddata is what we committed to in Go 1.
+type win32finddata1 struct {
+	FileAttributes    uint32
+	CreationTime      Filetime
+	LastAccessTime    Filetime
+	LastWriteTime     Filetime
+	FileSizeHigh      uint32
+	FileSizeLow       uint32
+	Reserved0         uint32
+	Reserved1         uint32
+	FileName          [MAX_PATH]uint16
+	AlternateFileName [14]uint16
+}
+
+func copyFindData(dst *Win32finddata, src *win32finddata1) {
+	dst.FileAttributes = src.FileAttributes
+	dst.CreationTime = src.CreationTime
+	dst.LastAccessTime = src.LastAccessTime
+	dst.LastWriteTime = src.LastWriteTime
+	dst.FileSizeHigh = src.FileSizeHigh
+	dst.FileSizeLow = src.FileSizeLow
+	dst.Reserved0 = src.Reserved0
+	dst.Reserved1 = src.Reserved1
+
+	// The src is 1 element bigger than dst, but it must be NUL.
+	copy(dst.FileName[:], src.FileName[:])
+	copy(dst.AlternateFileName[:], src.AlternateFileName[:])
+}
+
+type ByHandleFileInformation struct {
+	FileAttributes     uint32
+	CreationTime       Filetime
+	LastAccessTime     Filetime
+	LastWriteTime      Filetime
+	VolumeSerialNumber uint32
+	FileSizeHigh       uint32
+	FileSizeLow        uint32
+	NumberOfLinks      uint32
+	FileIndexHigh      uint32
+	FileIndexLow       uint32
+}
+
+const (
+	GetFileExInfoStandard = 0
+	GetFileExMaxInfoLevel = 1
+)
+
+type Win32FileAttributeData struct {
+	FileAttributes uint32
+	CreationTime   Filetime
+	LastAccessTime Filetime
+	LastWriteTime  Filetime
+	FileSizeHigh   uint32
+	FileSizeLow    uint32
+}
+
+// ShowWindow constants
+const (
+	// winuser.h
+	SW_HIDE            = 0
+	SW_NORMAL          = 1
+	SW_SHOWNORMAL      = 1
+	SW_SHOWMINIMIZED   = 2
+	SW_SHOWMAXIMIZED   = 3
+	SW_MAXIMIZE        = 3
+	SW_SHOWNOACTIVATE  = 4
+	SW_SHOW            = 5
+	SW_MINIMIZE        = 6
+	SW_SHOWMINNOACTIVE = 7
+	SW_SHOWNA          = 8
+	SW_RESTORE         = 9
+	SW_SHOWDEFAULT     = 10
+	SW_FORCEMINIMIZE   = 11
+)
+
+type StartupInfo struct {
+	Cb            uint32
+	_             *uint16
+	Desktop       *uint16
+	Title         *uint16
+	X             uint32
+	Y             uint32
+	XSize         uint32
+	YSize         uint32
+	XCountChars   uint32
+	YCountChars   uint32
+	FillAttribute uint32
+	Flags         uint32
+	ShowWindow    uint16
+	_             uint16
+	_             *byte
+	StdInput      Handle
+	StdOutput     Handle
+	StdErr        Handle
+}
+
+type ProcessInformation struct {
+	Process   Handle
+	Thread    Handle
+	ProcessId uint32
+	ThreadId  uint32
+}
+
+type ProcessEntry32 struct {
+	Size            uint32
+	Usage           uint32
+	ProcessID       uint32
+	DefaultHeapID   uintptr
+	ModuleID        uint32
+	Threads         uint32
+	ParentProcessID uint32
+	PriClassBase    int32
+	Flags           uint32
+	ExeFile         [MAX_PATH]uint16
+}
+
+type ThreadEntry32 struct {
+	Size           uint32
+	Usage          uint32
+	ThreadID       uint32
+	OwnerProcessID uint32
+	BasePri        int32
+	DeltaPri       int32
+	Flags          uint32
+}
+
+type Systemtime struct {
+	Year         uint16
+	Month        uint16
+	DayOfWeek    uint16
+	Day          uint16
+	Hour         uint16
+	Minute       uint16
+	Second       uint16
+	Milliseconds uint16
+}
+
+type Timezoneinformation struct {
+	Bias         int32
+	StandardName [32]uint16
+	StandardDate Systemtime
+	StandardBias int32
+	DaylightName [32]uint16
+	DaylightDate Systemtime
+	DaylightBias int32
+}
+
+// Socket related.
+
+const (
+	AF_UNSPEC  = 0
+	AF_UNIX    = 1
+	AF_INET    = 2
+	AF_NETBIOS = 17
+	AF_INET6   = 23
+	AF_IRDA    = 26
+	AF_BTH     = 32
+
+	SOCK_STREAM    = 1
+	SOCK_DGRAM     = 2
+	SOCK_RAW       = 3
+	SOCK_RDM       = 4
+	SOCK_SEQPACKET = 5
+
+	IPPROTO_IP      = 0
+	IPPROTO_ICMP    = 1
+	IPPROTO_IGMP    = 2
+	BTHPROTO_RFCOMM = 3
+	IPPROTO_TCP     = 6
+	IPPROTO_UDP     = 17
+	IPPROTO_IPV6    = 41
+	IPPROTO_ICMPV6  = 58
+	IPPROTO_RM      = 113
+
+	SOL_SOCKET                = 0xffff
+	SO_REUSEADDR              = 4
+	SO_KEEPALIVE              = 8
+	SO_DONTROUTE              = 16
+	SO_BROADCAST              = 32
+	SO_LINGER                 = 128
+	SO_RCVBUF                 = 0x1002
+	SO_RCVTIMEO               = 0x1006
+	SO_SNDBUF                 = 0x1001
+	SO_UPDATE_ACCEPT_CONTEXT  = 0x700b
+	SO_UPDATE_CONNECT_CONTEXT = 0x7010
+
+	IOC_OUT                            = 0x40000000
+	IOC_IN                             = 0x80000000
+	IOC_VENDOR                         = 0x18000000
+	IOC_INOUT                          = IOC_IN | IOC_OUT
+	IOC_WS2                            = 0x08000000
+	SIO_GET_EXTENSION_FUNCTION_POINTER = IOC_INOUT | IOC_WS2 | 6
+	SIO_KEEPALIVE_VALS                 = IOC_IN | IOC_VENDOR | 4
+	SIO_UDP_CONNRESET                  = IOC_IN | IOC_VENDOR | 12
+
+	// cf. http://support.microsoft.com/default.aspx?scid=kb;en-us;257460
+
+	IP_TOS             = 0x3
+	IP_TTL             = 0x4
+	IP_MULTICAST_IF    = 0x9
+	IP_MULTICAST_TTL   = 0xa
+	IP_MULTICAST_LOOP  = 0xb
+	IP_ADD_MEMBERSHIP  = 0xc
+	IP_DROP_MEMBERSHIP = 0xd
+
+	IPV6_V6ONLY         = 0x1b
+	IPV6_UNICAST_HOPS   = 0x4
+	IPV6_MULTICAST_IF   = 0x9
+	IPV6_MULTICAST_HOPS = 0xa
+	IPV6_MULTICAST_LOOP = 0xb
+	IPV6_JOIN_GROUP     = 0xc
+	IPV6_LEAVE_GROUP    = 0xd
+
+	MSG_OOB       = 0x1
+	MSG_PEEK      = 0x2
+	MSG_DONTROUTE = 0x4
+	MSG_WAITALL   = 0x8
+
+	MSG_TRUNC  = 0x0100
+	MSG_CTRUNC = 0x0200
+	MSG_BCAST  = 0x0400
+	MSG_MCAST  = 0x0800
+
+	SOMAXCONN = 0x7fffffff
+
+	TCP_NODELAY = 1
+
+	SHUT_RD   = 0
+	SHUT_WR   = 1
+	SHUT_RDWR = 2
+
+	WSADESCRIPTION_LEN = 256
+	WSASYS_STATUS_LEN  = 128
+)
+
+type WSABuf struct {
+	Len uint32
+	Buf *byte
+}
+
+type WSAMsg struct {
+	Name        *syscall.RawSockaddrAny
+	Namelen     int32
+	Buffers     *WSABuf
+	BufferCount uint32
+	Control     WSABuf
+	Flags       uint32
+}
+
+// Invented values to support what package os expects.
+const (
+	S_IFMT   = 0x1f000
+	S_IFIFO  = 0x1000
+	S_IFCHR  = 0x2000
+	S_IFDIR  = 0x4000
+	S_IFBLK  = 0x6000
+	S_IFREG  = 0x8000
+	S_IFLNK  = 0xa000
+	S_IFSOCK = 0xc000
+	S_ISUID  = 0x800
+	S_ISGID  = 0x400
+	S_ISVTX  = 0x200
+	S_IRUSR  = 0x100
+	S_IWRITE = 0x80
+	S_IWUSR  = 0x80
+	S_IXUSR  = 0x40
+)
+
+const (
+	FILE_TYPE_CHAR    = 0x0002
+	FILE_TYPE_DISK    = 0x0001
+	FILE_TYPE_PIPE    = 0x0003
+	FILE_TYPE_REMOTE  = 0x8000
+	FILE_TYPE_UNKNOWN = 0x0000
+)
+
+type Hostent struct {
+	Name     *byte
+	Aliases  **byte
+	AddrType uint16
+	Length   uint16
+	AddrList **byte
+}
+
+type Protoent struct {
+	Name    *byte
+	Aliases **byte
+	Proto   uint16
+}
+
+const (
+	DNS_TYPE_A       = 0x0001
+	DNS_TYPE_NS      = 0x0002
+	DNS_TYPE_MD      = 0x0003
+	DNS_TYPE_MF      = 0x0004
+	DNS_TYPE_CNAME   = 0x0005
+	DNS_TYPE_SOA     = 0x0006
+	DNS_TYPE_MB      = 0x0007
+	DNS_TYPE_MG      = 0x0008
+	DNS_TYPE_MR      = 0x0009
+	DNS_TYPE_NULL    = 0x000a
+	DNS_TYPE_WKS     = 0x000b
+	DNS_TYPE_PTR     = 0x000c
+	DNS_TYPE_HINFO   = 0x000d
+	DNS_TYPE_MINFO   = 0x000e
+	DNS_TYPE_MX      = 0x000f
+	DNS_TYPE_TEXT    = 0x0010
+	DNS_TYPE_RP      = 0x0011
+	DNS_TYPE_AFSDB   = 0x0012
+	DNS_TYPE_X25     = 0x0013
+	DNS_TYPE_ISDN    = 0x0014
+	DNS_TYPE_RT      = 0x0015
+	DNS_TYPE_NSAP    = 0x0016
+	DNS_TYPE_NSAPPTR = 0x0017
+	DNS_TYPE_SIG     = 0x0018
+	DNS_TYPE_KEY     = 0x0019
+	DNS_TYPE_PX      = 0x001a
+	DNS_TYPE_GPOS    = 0x001b
+	DNS_TYPE_AAAA    = 0x001c
+	DNS_TYPE_LOC     = 0x001d
+	DNS_TYPE_NXT     = 0x001e
+	DNS_TYPE_EID     = 0x001f
+	DNS_TYPE_NIMLOC  = 0x0020
+	DNS_TYPE_SRV     = 0x0021
+	DNS_TYPE_ATMA    = 0x0022
+	DNS_TYPE_NAPTR   = 0x0023
+	DNS_TYPE_KX      = 0x0024
+	DNS_TYPE_CERT    = 0x0025
+	DNS_TYPE_A6      = 0x0026
+	DNS_TYPE_DNAME   = 0x0027
+	DNS_TYPE_SINK    = 0x0028
+	DNS_TYPE_OPT     = 0x0029
+	DNS_TYPE_DS      = 0x002B
+	DNS_TYPE_RRSIG   = 0x002E
+	DNS_TYPE_NSEC    = 0x002F
+	DNS_TYPE_DNSKEY  = 0x0030
+	DNS_TYPE_DHCID   = 0x0031
+	DNS_TYPE_UINFO   = 0x0064
+	DNS_TYPE_UID     = 0x0065
+	DNS_TYPE_GID     = 0x0066
+	DNS_TYPE_UNSPEC  = 0x0067
+	DNS_TYPE_ADDRS   = 0x00f8
+	DNS_TYPE_TKEY    = 0x00f9
+	DNS_TYPE_TSIG    = 0x00fa
+	DNS_TYPE_IXFR    = 0x00fb
+	DNS_TYPE_AXFR    = 0x00fc
+	DNS_TYPE_MAILB   = 0x00fd
+	DNS_TYPE_MAILA   = 0x00fe
+	DNS_TYPE_ALL     = 0x00ff
+	DNS_TYPE_ANY     = 0x00ff
+	DNS_TYPE_WINS    = 0xff01
+	DNS_TYPE_WINSR   = 0xff02
+	DNS_TYPE_NBSTAT  = 0xff01
+)
+
+const (
+	// flags inside DNSRecord.Dw
+	DnsSectionQuestion   = 0x0000
+	DnsSectionAnswer     = 0x0001
+	DnsSectionAuthority  = 0x0002
+	DnsSectionAdditional = 0x0003
+)
+
+type DNSSRVData struct {
+	Target   *uint16
+	Priority uint16
+	Weight   uint16
+	Port     uint16
+	Pad      uint16
+}
+
+type DNSPTRData struct {
+	Host *uint16
+}
+
+type DNSMXData struct {
+	NameExchange *uint16
+	Preference   uint16
+	Pad          uint16
+}
+
+type DNSTXTData struct {
+	StringCount uint16
+	StringArray [1]*uint16
+}
+
+type DNSRecord struct {
+	Next     *DNSRecord
+	Name     *uint16
+	Type     uint16
+	Length   uint16
+	Dw       uint32
+	Ttl      uint32
+	Reserved uint32
+	Data     [40]byte
+}
+
+const (
+	TF_DISCONNECT         = 1
+	TF_REUSE_SOCKET       = 2
+	TF_WRITE_BEHIND       = 4
+	TF_USE_DEFAULT_WORKER = 0
+	TF_USE_SYSTEM_THREAD  = 16
+	TF_USE_KERNEL_APC     = 32
+)
+
+type TransmitFileBuffers struct {
+	Head       uintptr
+	HeadLength uint32
+	Tail       uintptr
+	TailLength uint32
+}
+
+const (
+	IFF_UP           = 1
+	IFF_BROADCAST    = 2
+	IFF_LOOPBACK     = 4
+	IFF_POINTTOPOINT = 8
+	IFF_MULTICAST    = 16
+)
+
+const SIO_GET_INTERFACE_LIST = 0x4004747F
+
+// TODO(mattn): SockaddrGen is union of sockaddr/sockaddr_in/sockaddr_in6_old.
+// will be fixed to change variable type as suitable.
+
+type SockaddrGen [24]byte
+
+type InterfaceInfo struct {
+	Flags            uint32
+	Address          SockaddrGen
+	BroadcastAddress SockaddrGen
+	Netmask          SockaddrGen
+}
+
+type IpAddressString struct {
+	String [16]byte
+}
+
+type IpMaskString IpAddressString
+
+type IpAddrString struct {
+	Next      *IpAddrString
+	IpAddress IpAddressString
+	IpMask    IpMaskString
+	Context   uint32
+}
+
+const MAX_ADAPTER_NAME_LENGTH = 256
+const MAX_ADAPTER_DESCRIPTION_LENGTH = 128
+const MAX_ADAPTER_ADDRESS_LENGTH = 8
+
+type IpAdapterInfo struct {
+	Next                *IpAdapterInfo
+	ComboIndex          uint32
+	AdapterName         [MAX_ADAPTER_NAME_LENGTH + 4]byte
+	Description         [MAX_ADAPTER_DESCRIPTION_LENGTH + 4]byte
+	AddressLength       uint32
+	Address             [MAX_ADAPTER_ADDRESS_LENGTH]byte
+	Index               uint32
+	Type                uint32
+	DhcpEnabled         uint32
+	CurrentIpAddress    *IpAddrString
+	IpAddressList       IpAddrString
+	GatewayList         IpAddrString
+	DhcpServer          IpAddrString
+	HaveWins            bool
+	PrimaryWinsServer   IpAddrString
+	SecondaryWinsServer IpAddrString
+	LeaseObtained       int64
+	LeaseExpires        int64
+}
+
+const MAXLEN_PHYSADDR = 8
+const MAX_INTERFACE_NAME_LEN = 256
+const MAXLEN_IFDESCR = 256
+
+type MibIfRow struct {
+	Name            [MAX_INTERFACE_NAME_LEN]uint16
+	Index           uint32
+	Type            uint32
+	Mtu             uint32
+	Speed           uint32
+	PhysAddrLen     uint32
+	PhysAddr        [MAXLEN_PHYSADDR]byte
+	AdminStatus     uint32
+	OperStatus      uint32
+	LastChange      uint32
+	InOctets        uint32
+	InUcastPkts     uint32
+	InNUcastPkts    uint32
+	InDiscards      uint32
+	InErrors        uint32
+	InUnknownProtos uint32
+	OutOctets       uint32
+	OutUcastPkts    uint32
+	OutNUcastPkts   uint32
+	OutDiscards     uint32
+	OutErrors       uint32
+	OutQLen         uint32
+	DescrLen        uint32
+	Descr           [MAXLEN_IFDESCR]byte
+}
+
+type CertInfo struct {
+	// Not implemented
+}
+
+type CertContext struct {
+	EncodingType uint32
+	EncodedCert  *byte
+	Length       uint32
+	CertInfo     *CertInfo
+	Store        Handle
+}
+
+type CertChainContext struct {
+	Size                       uint32
+	TrustStatus                CertTrustStatus
+	ChainCount                 uint32
+	Chains                     **CertSimpleChain
+	LowerQualityChainCount     uint32
+	LowerQualityChains         **CertChainContext
+	HasRevocationFreshnessTime uint32
+	RevocationFreshnessTime    uint32
+}
+
+type CertTrustListInfo struct {
+	// Not implemented
+}
+
+type CertSimpleChain struct {
+	Size                       uint32
+	TrustStatus                CertTrustStatus
+	NumElements                uint32
+	Elements                   **CertChainElement
+	TrustListInfo              *CertTrustListInfo
+	HasRevocationFreshnessTime uint32
+	RevocationFreshnessTime    uint32
+}
+
+type CertChainElement struct {
+	Size              uint32
+	CertContext       *CertContext
+	TrustStatus       CertTrustStatus
+	RevocationInfo    *CertRevocationInfo
+	IssuanceUsage     *CertEnhKeyUsage
+	ApplicationUsage  *CertEnhKeyUsage
+	ExtendedErrorInfo *uint16
+}
+
+type CertRevocationCrlInfo struct {
+	// Not implemented
+}
+
+type CertRevocationInfo struct {
+	Size             uint32
+	RevocationResult uint32
+	RevocationOid    *byte
+	OidSpecificInfo  Pointer
+	HasFreshnessTime uint32
+	FreshnessTime    uint32
+	CrlInfo          *CertRevocationCrlInfo
+}
+
+type CertTrustStatus struct {
+	ErrorStatus uint32
+	InfoStatus  uint32
+}
+
+type CertUsageMatch struct {
+	Type  uint32
+	Usage CertEnhKeyUsage
+}
+
+type CertEnhKeyUsage struct {
+	Length           uint32
+	UsageIdentifiers **byte
+}
+
+type CertChainPara struct {
+	Size                         uint32
+	RequestedUsage               CertUsageMatch
+	RequstedIssuancePolicy       CertUsageMatch
+	URLRetrievalTimeout          uint32
+	CheckRevocationFreshnessTime uint32
+	RevocationFreshnessTime      uint32
+	CacheResync                  *Filetime
+}
+
+type CertChainPolicyPara struct {
+	Size            uint32
+	Flags           uint32
+	ExtraPolicyPara Pointer
+}
+
+type SSLExtraCertChainPolicyPara struct {
+	Size       uint32
+	AuthType   uint32
+	Checks     uint32
+	ServerName *uint16
+}
+
+type CertChainPolicyStatus struct {
+	Size              uint32
+	Error             uint32
+	ChainIndex        uint32
+	ElementIndex      uint32
+	ExtraPolicyStatus Pointer
+}
+
+const (
+	// do not reorder
+	HKEY_CLASSES_ROOT = 0x80000000 + iota
+	HKEY_CURRENT_USER
+	HKEY_LOCAL_MACHINE
+	HKEY_USERS
+	HKEY_PERFORMANCE_DATA
+	HKEY_CURRENT_CONFIG
+	HKEY_DYN_DATA
+
+	KEY_QUERY_VALUE        = 1
+	KEY_SET_VALUE          = 2
+	KEY_CREATE_SUB_KEY     = 4
+	KEY_ENUMERATE_SUB_KEYS = 8
+	KEY_NOTIFY             = 16
+	KEY_CREATE_LINK        = 32
+	KEY_WRITE              = 0x20006
+	KEY_EXECUTE            = 0x20019
+	KEY_READ               = 0x20019
+	KEY_WOW64_64KEY        = 0x0100
+	KEY_WOW64_32KEY        = 0x0200
+	KEY_ALL_ACCESS         = 0xf003f
+)
+
+const (
+	// do not reorder
+	REG_NONE = iota
+	REG_SZ
+	REG_EXPAND_SZ
+	REG_BINARY
+	REG_DWORD_LITTLE_ENDIAN
+	REG_DWORD_BIG_ENDIAN
+	REG_LINK
+	REG_MULTI_SZ
+	REG_RESOURCE_LIST
+	REG_FULL_RESOURCE_DESCRIPTOR
+	REG_RESOURCE_REQUIREMENTS_LIST
+	REG_QWORD_LITTLE_ENDIAN
+	REG_DWORD = REG_DWORD_LITTLE_ENDIAN
+	REG_QWORD = REG_QWORD_LITTLE_ENDIAN
+)
+
+const (
+	EVENT_MODIFY_STATE = 0x0002
+	EVENT_ALL_ACCESS   = STANDARD_RIGHTS_REQUIRED | SYNCHRONIZE | 0x3
+
+	MUTANT_QUERY_STATE = 0x0001
+	MUTANT_ALL_ACCESS  = STANDARD_RIGHTS_REQUIRED | SYNCHRONIZE | MUTANT_QUERY_STATE
+
+	SEMAPHORE_MODIFY_STATE = 0x0002
+	SEMAPHORE_ALL_ACCESS   = STANDARD_RIGHTS_REQUIRED | SYNCHRONIZE | 0x3
+
+	TIMER_QUERY_STATE  = 0x0001
+	TIMER_MODIFY_STATE = 0x0002
+	TIMER_ALL_ACCESS   = STANDARD_RIGHTS_REQUIRED | SYNCHRONIZE | TIMER_QUERY_STATE | TIMER_MODIFY_STATE
+
+	MUTEX_MODIFY_STATE = MUTANT_QUERY_STATE
+	MUTEX_ALL_ACCESS   = MUTANT_ALL_ACCESS
+
+	CREATE_EVENT_MANUAL_RESET  = 0x1
+	CREATE_EVENT_INITIAL_SET   = 0x2
+	CREATE_MUTEX_INITIAL_OWNER = 0x1
+)
+
+type AddrinfoW struct {
+	Flags     int32
+	Family    int32
+	Socktype  int32
+	Protocol  int32
+	Addrlen   uintptr
+	Canonname *uint16
+	Addr      uintptr
+	Next      *AddrinfoW
+}
+
+const (
+	AI_PASSIVE     = 1
+	AI_CANONNAME   = 2
+	AI_NUMERICHOST = 4
+)
+
+type GUID struct {
+	Data1 uint32
+	Data2 uint16
+	Data3 uint16
+	Data4 [8]byte
+}
+
+var WSAID_CONNECTEX = GUID{
+	0x25a207b9,
+	0xddf3,
+	0x4660,
+	[8]byte{0x8e, 0xe9, 0x76, 0xe5, 0x8c, 0x74, 0x06, 0x3e},
+}
+
+var WSAID_WSASENDMSG = GUID{
+	0xa441e712,
+	0x754f,
+	0x43ca,
+	[8]byte{0x84, 0xa7, 0x0d, 0xee, 0x44, 0xcf, 0x60, 0x6d},
+}
+
+var WSAID_WSARECVMSG = GUID{
+	0xf689d7c8,
+	0x6f1f,
+	0x436b,
+	[8]byte{0x8a, 0x53, 0xe5, 0x4f, 0xe3, 0x51, 0xc3, 0x22},
+}
+
+const (
+	FILE_SKIP_COMPLETION_PORT_ON_SUCCESS = 1
+	FILE_SKIP_SET_EVENT_ON_HANDLE        = 2
+)
+
+const (
+	WSAPROTOCOL_LEN    = 255
+	MAX_PROTOCOL_CHAIN = 7
+	BASE_PROTOCOL      = 1
+	LAYERED_PROTOCOL   = 0
+
+	XP1_CONNECTIONLESS           = 0x00000001
+	XP1_GUARANTEED_DELIVERY      = 0x00000002
+	XP1_GUARANTEED_ORDER         = 0x00000004
+	XP1_MESSAGE_ORIENTED         = 0x00000008
+	XP1_PSEUDO_STREAM            = 0x00000010
+	XP1_GRACEFUL_CLOSE           = 0x00000020
+	XP1_EXPEDITED_DATA           = 0x00000040
+	XP1_CONNECT_DATA             = 0x00000080
+	XP1_DISCONNECT_DATA          = 0x00000100
+	XP1_SUPPORT_BROADCAST        = 0x00000200
+	XP1_SUPPORT_MULTIPOINT       = 0x00000400
+	XP1_MULTIPOINT_CONTROL_PLANE = 0x00000800
+	XP1_MULTIPOINT_DATA_PLANE    = 0x00001000
+	XP1_QOS_SUPPORTED            = 0x00002000
+	XP1_UNI_SEND                 = 0x00008000
+	XP1_UNI_RECV                 = 0x00010000
+	XP1_IFS_HANDLES              = 0x00020000
+	XP1_PARTIAL_MESSAGE          = 0x00040000
+	XP1_SAN_SUPPORT_SDP          = 0x00080000
+
+	PFL_MULTIPLE_PROTO_ENTRIES  = 0x00000001
+	PFL_RECOMMENDED_PROTO_ENTRY = 0x00000002
+	PFL_HIDDEN                  = 0x00000004
+	PFL_MATCHES_PROTOCOL_ZERO   = 0x00000008
+	PFL_NETWORKDIRECT_PROVIDER  = 0x00000010
+)
+
+type WSAProtocolInfo struct {
+	ServiceFlags1     uint32
+	ServiceFlags2     uint32
+	ServiceFlags3     uint32
+	ServiceFlags4     uint32
+	ProviderFlags     uint32
+	ProviderId        GUID
+	CatalogEntryId    uint32
+	ProtocolChain     WSAProtocolChain
+	Version           int32
+	AddressFamily     int32
+	MaxSockAddr       int32
+	MinSockAddr       int32
+	SocketType        int32
+	Protocol          int32
+	ProtocolMaxOffset int32
+	NetworkByteOrder  int32
+	SecurityScheme    int32
+	MessageSize       uint32
+	ProviderReserved  uint32
+	ProtocolName      [WSAPROTOCOL_LEN + 1]uint16
+}
+
+type WSAProtocolChain struct {
+	ChainLen     int32
+	ChainEntries [MAX_PROTOCOL_CHAIN]uint32
+}
+
+type TCPKeepalive struct {
+	OnOff    uint32
+	Time     uint32
+	Interval uint32
+}
+
+type symbolicLinkReparseBuffer struct {
+	SubstituteNameOffset uint16
+	SubstituteNameLength uint16
+	PrintNameOffset      uint16
+	PrintNameLength      uint16
+	Flags                uint32
+	PathBuffer           [1]uint16
+}
+
+type mountPointReparseBuffer struct {
+	SubstituteNameOffset uint16
+	SubstituteNameLength uint16
+	PrintNameOffset      uint16
+	PrintNameLength      uint16
+	PathBuffer           [1]uint16
+}
+
+type reparseDataBuffer struct {
+	ReparseTag        uint32
+	ReparseDataLength uint16
+	Reserved          uint16
+
+	// GenericReparseBuffer
+	reparseBuffer byte
+}
+
+const (
+	FSCTL_GET_REPARSE_POINT          = 0x900A8
+	MAXIMUM_REPARSE_DATA_BUFFER_SIZE = 16 * 1024
+	IO_REPARSE_TAG_MOUNT_POINT       = 0xA0000003
+	IO_REPARSE_TAG_SYMLINK           = 0xA000000C
+	SYMBOLIC_LINK_FLAG_DIRECTORY     = 0x1
+)
+
+const (
+	ComputerNameNetBIOS                   = 0
+	ComputerNameDnsHostname               = 1
+	ComputerNameDnsDomain                 = 2
+	ComputerNameDnsFullyQualified         = 3
+	ComputerNamePhysicalNetBIOS           = 4
+	ComputerNamePhysicalDnsHostname       = 5
+	ComputerNamePhysicalDnsDomain         = 6
+	ComputerNamePhysicalDnsFullyQualified = 7
+	ComputerNameMax                       = 8
+)
+
+// For MessageBox()
+const (
+	MB_OK                   = 0x00000000
+	MB_OKCANCEL             = 0x00000001
+	MB_ABORTRETRYIGNORE     = 0x00000002
+	MB_YESNOCANCEL          = 0x00000003
+	MB_YESNO                = 0x00000004
+	MB_RETRYCANCEL          = 0x00000005
+	MB_CANCELTRYCONTINUE    = 0x00000006
+	MB_ICONHAND             = 0x00000010
+	MB_ICONQUESTION         = 0x00000020
+	MB_ICONEXCLAMATION      = 0x00000030
+	MB_ICONASTERISK         = 0x00000040
+	MB_USERICON             = 0x00000080
+	MB_ICONWARNING          = MB_ICONEXCLAMATION
+	MB_ICONERROR            = MB_ICONHAND
+	MB_ICONINFORMATION      = MB_ICONASTERISK
+	MB_ICONSTOP             = MB_ICONHAND
+	MB_DEFBUTTON1           = 0x00000000
+	MB_DEFBUTTON2           = 0x00000100
+	MB_DEFBUTTON3           = 0x00000200
+	MB_DEFBUTTON4           = 0x00000300
+	MB_APPLMODAL            = 0x00000000
+	MB_SYSTEMMODAL          = 0x00001000
+	MB_TASKMODAL            = 0x00002000
+	MB_HELP                 = 0x00004000
+	MB_NOFOCUS              = 0x00008000
+	MB_SETFOREGROUND        = 0x00010000
+	MB_DEFAULT_DESKTOP_ONLY = 0x00020000
+	MB_TOPMOST              = 0x00040000
+	MB_RIGHT                = 0x00080000
+	MB_RTLREADING           = 0x00100000
+	MB_SERVICE_NOTIFICATION = 0x00200000
+)
+
+const (
+	MOVEFILE_REPLACE_EXISTING      = 0x1
+	MOVEFILE_COPY_ALLOWED          = 0x2
+	MOVEFILE_DELAY_UNTIL_REBOOT    = 0x4
+	MOVEFILE_WRITE_THROUGH         = 0x8
+	MOVEFILE_CREATE_HARDLINK       = 0x10
+	MOVEFILE_FAIL_IF_NOT_TRACKABLE = 0x20
+)
+
+const GAA_FLAG_INCLUDE_PREFIX = 0x00000010
+
+const (
+	IF_TYPE_OTHER              = 1
+	IF_TYPE_ETHERNET_CSMACD    = 6
+	IF_TYPE_ISO88025_TOKENRING = 9
+	IF_TYPE_PPP                = 23
+	IF_TYPE_SOFTWARE_LOOPBACK  = 24
+	IF_TYPE_ATM                = 37
+	IF_TYPE_IEEE80211          = 71
+	IF_TYPE_TUNNEL             = 131
+	IF_TYPE_IEEE1394           = 144
+)
+
+type SocketAddress struct {
+	Sockaddr       *syscall.RawSockaddrAny
+	SockaddrLength int32
+}
+
+// IP returns an IPv4 or IPv6 address, or nil if the underlying SocketAddress is neither.
+func (addr *SocketAddress) IP() net.IP {
+	if uintptr(addr.SockaddrLength) >= unsafe.Sizeof(RawSockaddrInet4{}) && addr.Sockaddr.Addr.Family == AF_INET {
+		return (*RawSockaddrInet4)(unsafe.Pointer(addr.Sockaddr)).Addr[:]
+	} else if uintptr(addr.SockaddrLength) >= unsafe.Sizeof(RawSockaddrInet6{}) && addr.Sockaddr.Addr.Family == AF_INET6 {
+		return (*RawSockaddrInet6)(unsafe.Pointer(addr.Sockaddr)).Addr[:]
+	}
+	return nil
+}
+
+type IpAdapterUnicastAddress struct {
+	Length             uint32
+	Flags              uint32
+	Next               *IpAdapterUnicastAddress
+	Address            SocketAddress
+	PrefixOrigin       int32
+	SuffixOrigin       int32
+	DadState           int32
+	ValidLifetime      uint32
+	PreferredLifetime  uint32
+	LeaseLifetime      uint32
+	OnLinkPrefixLength uint8
+}
+
+type IpAdapterAnycastAddress struct {
+	Length  uint32
+	Flags   uint32
+	Next    *IpAdapterAnycastAddress
+	Address SocketAddress
+}
+
+type IpAdapterMulticastAddress struct {
+	Length  uint32
+	Flags   uint32
+	Next    *IpAdapterMulticastAddress
+	Address SocketAddress
+}
+
+type IpAdapterDnsServerAdapter struct {
+	Length   uint32
+	Reserved uint32
+	Next     *IpAdapterDnsServerAdapter
+	Address  SocketAddress
+}
+
+type IpAdapterPrefix struct {
+	Length       uint32
+	Flags        uint32
+	Next         *IpAdapterPrefix
+	Address      SocketAddress
+	PrefixLength uint32
+}
+
+type IpAdapterAddresses struct {
+	Length                uint32
+	IfIndex               uint32
+	Next                  *IpAdapterAddresses
+	AdapterName           *byte
+	FirstUnicastAddress   *IpAdapterUnicastAddress
+	FirstAnycastAddress   *IpAdapterAnycastAddress
+	FirstMulticastAddress *IpAdapterMulticastAddress
+	FirstDnsServerAddress *IpAdapterDnsServerAdapter
+	DnsSuffix             *uint16
+	Description           *uint16
+	FriendlyName          *uint16
+	PhysicalAddress       [syscall.MAX_ADAPTER_ADDRESS_LENGTH]byte
+	PhysicalAddressLength uint32
+	Flags                 uint32
+	Mtu                   uint32
+	IfType                uint32
+	OperStatus            uint32
+	Ipv6IfIndex           uint32
+	ZoneIndices           [16]uint32
+	FirstPrefix           *IpAdapterPrefix
+	/* more fields might be present here. */
+}
+
+const (
+	IfOperStatusUp             = 1
+	IfOperStatusDown           = 2
+	IfOperStatusTesting        = 3
+	IfOperStatusUnknown        = 4
+	IfOperStatusDormant        = 5
+	IfOperStatusNotPresent     = 6
+	IfOperStatusLowerLayerDown = 7
+)
+
+// Console related constants used for the mode parameter to SetConsoleMode. See
+// https://docs.microsoft.com/en-us/windows/console/setconsolemode for details.
+
+const (
+	ENABLE_PROCESSED_INPUT        = 0x1
+	ENABLE_LINE_INPUT             = 0x2
+	ENABLE_ECHO_INPUT             = 0x4
+	ENABLE_WINDOW_INPUT           = 0x8
+	ENABLE_MOUSE_INPUT            = 0x10
+	ENABLE_INSERT_MODE            = 0x20
+	ENABLE_QUICK_EDIT_MODE        = 0x40
+	ENABLE_EXTENDED_FLAGS         = 0x80
+	ENABLE_AUTO_POSITION          = 0x100
+	ENABLE_VIRTUAL_TERMINAL_INPUT = 0x200
+
+	ENABLE_PROCESSED_OUTPUT            = 0x1
+	ENABLE_WRAP_AT_EOL_OUTPUT          = 0x2
+	ENABLE_VIRTUAL_TERMINAL_PROCESSING = 0x4
+	DISABLE_NEWLINE_AUTO_RETURN        = 0x8
+	ENABLE_LVB_GRID_WORLDWIDE          = 0x10
+)
+
+type Coord struct {
+	X int16
+	Y int16
+}
+
+type SmallRect struct {
+	Left   int16
+	Top    int16
+	Right  int16
+	Bottom int16
+}
+
+// Used with GetConsoleScreenBuffer to retrieve information about a console
+// screen buffer. See
+// https://docs.microsoft.com/en-us/windows/console/console-screen-buffer-info-str
+// for details.
+
+type ConsoleScreenBufferInfo struct {
+	Size              Coord
+	CursorPosition    Coord
+	Attributes        uint16
+	Window            SmallRect
+	MaximumWindowSize Coord
+}
+
+const UNIX_PATH_MAX = 108 // defined in afunix.h
+
+const (
+	// flags for JOBOBJECT_BASIC_LIMIT_INFORMATION.LimitFlags
+	JOB_OBJECT_LIMIT_ACTIVE_PROCESS             = 0x00000008
+	JOB_OBJECT_LIMIT_AFFINITY                   = 0x00000010
+	JOB_OBJECT_LIMIT_BREAKAWAY_OK               = 0x00000800
+	JOB_OBJECT_LIMIT_DIE_ON_UNHANDLED_EXCEPTION = 0x00000400
+	JOB_OBJECT_LIMIT_JOB_MEMORY                 = 0x00000200
+	JOB_OBJECT_LIMIT_JOB_TIME                   = 0x00000004
+	JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE          = 0x00002000
+	JOB_OBJECT_LIMIT_PRESERVE_JOB_TIME          = 0x00000040
+	JOB_OBJECT_LIMIT_PRIORITY_CLASS             = 0x00000020
+	JOB_OBJECT_LIMIT_PROCESS_MEMORY             = 0x00000100
+	JOB_OBJECT_LIMIT_PROCESS_TIME               = 0x00000002
+	JOB_OBJECT_LIMIT_SCHEDULING_CLASS           = 0x00000080
+	JOB_OBJECT_LIMIT_SILENT_BREAKAWAY_OK        = 0x00001000
+	JOB_OBJECT_LIMIT_SUBSET_AFFINITY            = 0x00004000
+	JOB_OBJECT_LIMIT_WORKINGSET                 = 0x00000001
+)
+
+type IO_COUNTERS struct {
+	ReadOperationCount  uint64
+	WriteOperationCount uint64
+	OtherOperationCount uint64
+	ReadTransferCount   uint64
+	WriteTransferCount  uint64
+	OtherTransferCount  uint64
+}
+
+type JOBOBJECT_EXTENDED_LIMIT_INFORMATION struct {
+	BasicLimitInformation JOBOBJECT_BASIC_LIMIT_INFORMATION
+	IoInfo                IO_COUNTERS
+	ProcessMemoryLimit    uintptr
+	JobMemoryLimit        uintptr
+	PeakProcessMemoryUsed uintptr
+	PeakJobMemoryUsed     uintptr
+}
+
+const (
+	// UIRestrictionsClass
+	JOB_OBJECT_UILIMIT_DESKTOP          = 0x00000040
+	JOB_OBJECT_UILIMIT_DISPLAYSETTINGS  = 0x00000010
+	JOB_OBJECT_UILIMIT_EXITWINDOWS      = 0x00000080
+	JOB_OBJECT_UILIMIT_GLOBALATOMS      = 0x00000020
+	JOB_OBJECT_UILIMIT_HANDLES          = 0x00000001
+	JOB_OBJECT_UILIMIT_READCLIPBOARD    = 0x00000002
+	JOB_OBJECT_UILIMIT_SYSTEMPARAMETERS = 0x00000008
+	JOB_OBJECT_UILIMIT_WRITECLIPBOARD   = 0x00000004
+)
+
+type JOBOBJECT_BASIC_UI_RESTRICTIONS struct {
+	UIRestrictionsClass uint32
+}
+
+const (
+	// JobObjectInformationClass
+	JobObjectAssociateCompletionPortInformation = 7
+	JobObjectBasicLimitInformation              = 2
+	JobObjectBasicUIRestrictions                = 4
+	JobObjectCpuRateControlInformation          = 15
+	JobObjectEndOfJobTimeInformation            = 6
+	JobObjectExtendedLimitInformation           = 9
+	JobObjectGroupInformation                   = 11
+	JobObjectGroupInformationEx                 = 14
+	JobObjectLimitViolationInformation2         = 35
+	JobObjectNetRateControlInformation          = 32
+	JobObjectNotificationLimitInformation       = 12
+	JobObjectNotificationLimitInformation2      = 34
+	JobObjectSecurityLimitInformation           = 5
+)
+
+const (
+	KF_FLAG_DEFAULT                          = 0x00000000
+	KF_FLAG_FORCE_APP_DATA_REDIRECTION       = 0x00080000
+	KF_FLAG_RETURN_FILTER_REDIRECTION_TARGET = 0x00040000
+	KF_FLAG_FORCE_PACKAGE_REDIRECTION        = 0x00020000
+	KF_FLAG_NO_PACKAGE_REDIRECTION           = 0x00010000
+	KF_FLAG_FORCE_APPCONTAINER_REDIRECTION   = 0x00020000
+	KF_FLAG_NO_APPCONTAINER_REDIRECTION      = 0x00010000
+	KF_FLAG_CREATE                           = 0x00008000
+	KF_FLAG_DONT_VERIFY                      = 0x00004000
+	KF_FLAG_DONT_UNEXPAND                    = 0x00002000
+	KF_FLAG_NO_ALIAS                         = 0x00001000
+	KF_FLAG_INIT                             = 0x00000800
+	KF_FLAG_DEFAULT_PATH                     = 0x00000400
+	KF_FLAG_NOT_PARENT_RELATIVE              = 0x00000200
+	KF_FLAG_SIMPLE_IDLIST                    = 0x00000100
+	KF_FLAG_ALIAS_ONLY                       = 0x80000000
+)
+
+type OsVersionInfoEx struct {
+	osVersionInfoSize uint32
+	MajorVersion      uint32
+	MinorVersion      uint32
+	BuildNumber       uint32
+	PlatformId        uint32
+	CsdVersion        [128]uint16
+	ServicePackMajor  uint16
+	ServicePackMinor  uint16
+	SuiteMask         uint16
+	ProductType       byte
+	_                 byte
+}
+
+const (
+	EWX_LOGOFF          = 0x00000000
+	EWX_SHUTDOWN        = 0x00000001
+	EWX_REBOOT          = 0x00000002
+	EWX_FORCE           = 0x00000004
+	EWX_POWEROFF        = 0x00000008
+	EWX_FORCEIFHUNG     = 0x00000010
+	EWX_QUICKRESOLVE    = 0x00000020
+	EWX_RESTARTAPPS     = 0x00000040
+	EWX_HYBRID_SHUTDOWN = 0x00400000
+	EWX_BOOTOPTIONS     = 0x01000000
+
+	SHTDN_REASON_FLAG_COMMENT_REQUIRED          = 0x01000000
+	SHTDN_REASON_FLAG_DIRTY_PROBLEM_ID_REQUIRED = 0x02000000
+	SHTDN_REASON_FLAG_CLEAN_UI                  = 0x04000000
+	SHTDN_REASON_FLAG_DIRTY_UI                  = 0x08000000
+	SHTDN_REASON_FLAG_USER_DEFINED              = 0x40000000
+	SHTDN_REASON_FLAG_PLANNED                   = 0x80000000
+	SHTDN_REASON_MAJOR_OTHER                    = 0x00000000
+	SHTDN_REASON_MAJOR_NONE                     = 0x00000000
+	SHTDN_REASON_MAJOR_HARDWARE                 = 0x00010000
+	SHTDN_REASON_MAJOR_OPERATINGSYSTEM          = 0x00020000
+	SHTDN_REASON_MAJOR_SOFTWARE                 = 0x00030000
+	SHTDN_REASON_MAJOR_APPLICATION              = 0x00040000
+	SHTDN_REASON_MAJOR_SYSTEM                   = 0x00050000
+	SHTDN_REASON_MAJOR_POWER                    = 0x00060000
+	SHTDN_REASON_MAJOR_LEGACY_API               = 0x00070000
+	SHTDN_REASON_MINOR_OTHER                    = 0x00000000
+	SHTDN_REASON_MINOR_NONE                     = 0x000000ff
+	SHTDN_REASON_MINOR_MAINTENANCE              = 0x00000001
+	SHTDN_REASON_MINOR_INSTALLATION             = 0x00000002
+	SHTDN_REASON_MINOR_UPGRADE                  = 0x00000003
+	SHTDN_REASON_MINOR_RECONFIG                 = 0x00000004
+	SHTDN_REASON_MINOR_HUNG                     = 0x00000005
+	SHTDN_REASON_MINOR_UNSTABLE                 = 0x00000006
+	SHTDN_REASON_MINOR_DISK                     = 0x00000007
+	SHTDN_REASON_MINOR_PROCESSOR                = 0x00000008
+	SHTDN_REASON_MINOR_NETWORKCARD              = 0x00000009
+	SHTDN_REASON_MINOR_POWER_SUPPLY             = 0x0000000a
+	SHTDN_REASON_MINOR_CORDUNPLUGGED            = 0x0000000b
+	SHTDN_REASON_MINOR_ENVIRONMENT              = 0x0000000c
+	SHTDN_REASON_MINOR_HARDWARE_DRIVER          = 0x0000000d
+	SHTDN_REASON_MINOR_OTHERDRIVER              = 0x0000000e
+	SHTDN_REASON_MINOR_BLUESCREEN               = 0x0000000F
+	SHTDN_REASON_MINOR_SERVICEPACK              = 0x00000010
+	SHTDN_REASON_MINOR_HOTFIX                   = 0x00000011
+	SHTDN_REASON_MINOR_SECURITYFIX              = 0x00000012
+	SHTDN_REASON_MINOR_SECURITY                 = 0x00000013
+	SHTDN_REASON_MINOR_NETWORK_CONNECTIVITY     = 0x00000014
+	SHTDN_REASON_MINOR_WMI                      = 0x00000015
+	SHTDN_REASON_MINOR_SERVICEPACK_UNINSTALL    = 0x00000016
+	SHTDN_REASON_MINOR_HOTFIX_UNINSTALL         = 0x00000017
+	SHTDN_REASON_MINOR_SECURITYFIX_UNINSTALL    = 0x00000018
+	SHTDN_REASON_MINOR_MMC                      = 0x00000019
+	SHTDN_REASON_MINOR_SYSTEMRESTORE            = 0x0000001a
+	SHTDN_REASON_MINOR_TERMSRV                  = 0x00000020
+	SHTDN_REASON_MINOR_DC_PROMOTION             = 0x00000021
+	SHTDN_REASON_MINOR_DC_DEMOTION              = 0x00000022
+	SHTDN_REASON_UNKNOWN                        = SHTDN_REASON_MINOR_NONE
+	SHTDN_REASON_LEGACY_API                     = SHTDN_REASON_MAJOR_LEGACY_API | SHTDN_REASON_FLAG_PLANNED
+	SHTDN_REASON_VALID_BIT_MASK                 = 0xc0ffffff
+
+	SHUTDOWN_NORETRY = 0x1
+)
+
+// Flags used for GetModuleHandleEx
+const (
+	GET_MODULE_HANDLE_EX_FLAG_PIN                = 1
+	GET_MODULE_HANDLE_EX_FLAG_UNCHANGED_REFCOUNT = 2
+	GET_MODULE_HANDLE_EX_FLAG_FROM_ADDRESS       = 4
+)
+
+// MUI function flag values
+const (
+	MUI_LANGUAGE_ID                    = 0x4
+	MUI_LANGUAGE_NAME                  = 0x8
+	MUI_MERGE_SYSTEM_FALLBACK          = 0x10
+	MUI_MERGE_USER_FALLBACK            = 0x20
+	MUI_UI_FALLBACK                    = MUI_MERGE_SYSTEM_FALLBACK | MUI_MERGE_USER_FALLBACK
+	MUI_THREAD_LANGUAGES               = 0x40
+	MUI_CONSOLE_FILTER                 = 0x100
+	MUI_COMPLEX_SCRIPT_FILTER          = 0x200
+	MUI_RESET_FILTERS                  = 0x001
+	MUI_USER_PREFERRED_UI_LANGUAGES    = 0x10
+	MUI_USE_INSTALLED_LANGUAGES        = 0x20
+	MUI_USE_SEARCH_ALL_LANGUAGES       = 0x40
+	MUI_LANG_NEUTRAL_PE_FILE           = 0x100
+	MUI_NON_LANG_NEUTRAL_FILE          = 0x200
+	MUI_MACHINE_LANGUAGE_SETTINGS      = 0x400
+	MUI_FILETYPE_NOT_LANGUAGE_NEUTRAL  = 0x001
+	MUI_FILETYPE_LANGUAGE_NEUTRAL_MAIN = 0x002
+	MUI_FILETYPE_LANGUAGE_NEUTRAL_MUI  = 0x004
+	MUI_QUERY_TYPE                     = 0x001
+	MUI_QUERY_CHECKSUM                 = 0x002
+	MUI_QUERY_LANGUAGE_NAME            = 0x004
+	MUI_QUERY_RESOURCE_TYPES           = 0x008
+	MUI_FILEINFO_VERSION               = 0x001
+
+	MUI_FULL_LANGUAGE      = 0x01
+	MUI_PARTIAL_LANGUAGE   = 0x02
+	MUI_LIP_LANGUAGE       = 0x04
+	MUI_LANGUAGE_INSTALLED = 0x20
+	MUI_LANGUAGE_LICENSED  = 0x40
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/types_windows_386.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/types_windows_386.go
new file mode 100644
index 000000000..8bce3e2fc
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/types_windows_386.go
@@ -0,0 +1,35 @@
+// Copyright 2011 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package windows
+
+type WSAData struct {
+	Version      uint16
+	HighVersion  uint16
+	Description  [WSADESCRIPTION_LEN + 1]byte
+	SystemStatus [WSASYS_STATUS_LEN + 1]byte
+	MaxSockets   uint16
+	MaxUdpDg     uint16
+	VendorInfo   *byte
+}
+
+type Servent struct {
+	Name    *byte
+	Aliases **byte
+	Port    uint16
+	Proto   *byte
+}
+
+type JOBOBJECT_BASIC_LIMIT_INFORMATION struct {
+	PerProcessUserTimeLimit int64
+	PerJobUserTimeLimit     int64
+	LimitFlags              uint32
+	MinimumWorkingSetSize   uintptr
+	MaximumWorkingSetSize   uintptr
+	ActiveProcessLimit      uint32
+	Affinity                uintptr
+	PriorityClass           uint32
+	SchedulingClass         uint32
+	_                       uint32 // pad to 8 byte boundary
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/types_windows_amd64.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/types_windows_amd64.go
new file mode 100644
index 000000000..fdddc0c70
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/types_windows_amd64.go
@@ -0,0 +1,34 @@
+// Copyright 2011 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package windows
+
+type WSAData struct {
+	Version      uint16
+	HighVersion  uint16
+	MaxSockets   uint16
+	MaxUdpDg     uint16
+	VendorInfo   *byte
+	Description  [WSADESCRIPTION_LEN + 1]byte
+	SystemStatus [WSASYS_STATUS_LEN + 1]byte
+}
+
+type Servent struct {
+	Name    *byte
+	Aliases **byte
+	Proto   *byte
+	Port    uint16
+}
+
+type JOBOBJECT_BASIC_LIMIT_INFORMATION struct {
+	PerProcessUserTimeLimit int64
+	PerJobUserTimeLimit     int64
+	LimitFlags              uint32
+	MinimumWorkingSetSize   uintptr
+	MaximumWorkingSetSize   uintptr
+	ActiveProcessLimit      uint32
+	Affinity                uintptr
+	PriorityClass           uint32
+	SchedulingClass         uint32
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/types_windows_arm.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/types_windows_arm.go
new file mode 100644
index 000000000..321872c3e
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/types_windows_arm.go
@@ -0,0 +1,35 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package windows
+
+type WSAData struct {
+	Version      uint16
+	HighVersion  uint16
+	Description  [WSADESCRIPTION_LEN + 1]byte
+	SystemStatus [WSASYS_STATUS_LEN + 1]byte
+	MaxSockets   uint16
+	MaxUdpDg     uint16
+	VendorInfo   *byte
+}
+
+type Servent struct {
+	Name    *byte
+	Aliases **byte
+	Port    uint16
+	Proto   *byte
+}
+
+type JOBOBJECT_BASIC_LIMIT_INFORMATION struct {
+	PerProcessUserTimeLimit int64
+	PerJobUserTimeLimit     int64
+	LimitFlags              uint32
+	MinimumWorkingSetSize   uintptr
+	MaximumWorkingSetSize   uintptr
+	ActiveProcessLimit      uint32
+	Affinity                uintptr
+	PriorityClass           uint32
+	SchedulingClass         uint32
+	_                       uint32 // pad to 8 byte boundary
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/zerrors_windows.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/zerrors_windows.go
new file mode 100644
index 000000000..f02120035
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/zerrors_windows.go
@@ -0,0 +1,6853 @@
+// Code generated by 'mkerrors.bash'; DO NOT EDIT.
+
+package windows
+
+import "syscall"
+
+const (
+	FACILITY_NULL                                                                           = 0
+	FACILITY_RPC                                                                            = 1
+	FACILITY_DISPATCH                                                                       = 2
+	FACILITY_STORAGE                                                                        = 3
+	FACILITY_ITF                                                                            = 4
+	FACILITY_WIN32                                                                          = 7
+	FACILITY_WINDOWS                                                                        = 8
+	FACILITY_SSPI                                                                           = 9
+	FACILITY_SECURITY                                                                       = 9
+	FACILITY_CONTROL                                                                        = 10
+	FACILITY_CERT                                                                           = 11
+	FACILITY_INTERNET                                                                       = 12
+	FACILITY_MEDIASERVER                                                                    = 13
+	FACILITY_MSMQ                                                                           = 14
+	FACILITY_SETUPAPI                                                                       = 15
+	FACILITY_SCARD                                                                          = 16
+	FACILITY_COMPLUS                                                                        = 17
+	FACILITY_AAF                                                                            = 18
+	FACILITY_URT                                                                            = 19
+	FACILITY_ACS                                                                            = 20
+	FACILITY_DPLAY                                                                          = 21
+	FACILITY_UMI                                                                            = 22
+	FACILITY_SXS                                                                            = 23
+	FACILITY_WINDOWS_CE                                                                     = 24
+	FACILITY_HTTP                                                                           = 25
+	FACILITY_USERMODE_COMMONLOG                                                             = 26
+	FACILITY_WER                                                                            = 27
+	FACILITY_USERMODE_FILTER_MANAGER                                                        = 31
+	FACILITY_BACKGROUNDCOPY                                                                 = 32
+	FACILITY_CONFIGURATION                                                                  = 33
+	FACILITY_WIA                                                                            = 33
+	FACILITY_STATE_MANAGEMENT                                                               = 34
+	FACILITY_METADIRECTORY                                                                  = 35
+	FACILITY_WINDOWSUPDATE                                                                  = 36
+	FACILITY_DIRECTORYSERVICE                                                               = 37
+	FACILITY_GRAPHICS                                                                       = 38
+	FACILITY_SHELL                                                                          = 39
+	FACILITY_NAP                                                                            = 39
+	FACILITY_TPM_SERVICES                                                                   = 40
+	FACILITY_TPM_SOFTWARE                                                                   = 41
+	FACILITY_UI                                                                             = 42
+	FACILITY_XAML                                                                           = 43
+	FACILITY_ACTION_QUEUE                                                                   = 44
+	FACILITY_PLA                                                                            = 48
+	FACILITY_WINDOWS_SETUP                                                                  = 48
+	FACILITY_FVE                                                                            = 49
+	FACILITY_FWP                                                                            = 50
+	FACILITY_WINRM                                                                          = 51
+	FACILITY_NDIS                                                                           = 52
+	FACILITY_USERMODE_HYPERVISOR                                                            = 53
+	FACILITY_CMI                                                                            = 54
+	FACILITY_USERMODE_VIRTUALIZATION                                                        = 55
+	FACILITY_USERMODE_VOLMGR                                                                = 56
+	FACILITY_BCD                                                                            = 57
+	FACILITY_USERMODE_VHD                                                                   = 58
+	FACILITY_USERMODE_HNS                                                                   = 59
+	FACILITY_SDIAG                                                                          = 60
+	FACILITY_WEBSERVICES                                                                    = 61
+	FACILITY_WINPE                                                                          = 61
+	FACILITY_WPN                                                                            = 62
+	FACILITY_WINDOWS_STORE                                                                  = 63
+	FACILITY_INPUT                                                                          = 64
+	FACILITY_EAP                                                                            = 66
+	FACILITY_WINDOWS_DEFENDER                                                               = 80
+	FACILITY_OPC                                                                            = 81
+	FACILITY_XPS                                                                            = 82
+	FACILITY_MBN                                                                            = 84
+	FACILITY_POWERSHELL                                                                     = 84
+	FACILITY_RAS                                                                            = 83
+	FACILITY_P2P_INT                                                                        = 98
+	FACILITY_P2P                                                                            = 99
+	FACILITY_DAF                                                                            = 100
+	FACILITY_BLUETOOTH_ATT                                                                  = 101
+	FACILITY_AUDIO                                                                          = 102
+	FACILITY_STATEREPOSITORY                                                                = 103
+	FACILITY_VISUALCPP                                                                      = 109
+	FACILITY_SCRIPT                                                                         = 112
+	FACILITY_PARSE                                                                          = 113
+	FACILITY_BLB                                                                            = 120
+	FACILITY_BLB_CLI                                                                        = 121
+	FACILITY_WSBAPP                                                                         = 122
+	FACILITY_BLBUI                                                                          = 128
+	FACILITY_USN                                                                            = 129
+	FACILITY_USERMODE_VOLSNAP                                                               = 130
+	FACILITY_TIERING                                                                        = 131
+	FACILITY_WSB_ONLINE                                                                     = 133
+	FACILITY_ONLINE_ID                                                                      = 134
+	FACILITY_DEVICE_UPDATE_AGENT                                                            = 135
+	FACILITY_DRVSERVICING                                                                   = 136
+	FACILITY_DLS                                                                            = 153
+	FACILITY_DELIVERY_OPTIMIZATION                                                          = 208
+	FACILITY_USERMODE_SPACES                                                                = 231
+	FACILITY_USER_MODE_SECURITY_CORE                                                        = 232
+	FACILITY_USERMODE_LICENSING                                                             = 234
+	FACILITY_SOS                                                                            = 160
+	FACILITY_DEBUGGERS                                                                      = 176
+	FACILITY_SPP                                                                            = 256
+	FACILITY_RESTORE                                                                        = 256
+	FACILITY_DMSERVER                                                                       = 256
+	FACILITY_DEPLOYMENT_SERVICES_SERVER                                                     = 257
+	FACILITY_DEPLOYMENT_SERVICES_IMAGING                                                    = 258
+	FACILITY_DEPLOYMENT_SERVICES_MANAGEMENT                                                 = 259
+	FACILITY_DEPLOYMENT_SERVICES_UTIL                                                       = 260
+	FACILITY_DEPLOYMENT_SERVICES_BINLSVC                                                    = 261
+	FACILITY_DEPLOYMENT_SERVICES_PXE                                                        = 263
+	FACILITY_DEPLOYMENT_SERVICES_TFTP                                                       = 264
+	FACILITY_DEPLOYMENT_SERVICES_TRANSPORT_MANAGEMENT                                       = 272
+	FACILITY_DEPLOYMENT_SERVICES_DRIVER_PROVISIONING                                        = 278
+	FACILITY_DEPLOYMENT_SERVICES_MULTICAST_SERVER                                           = 289
+	FACILITY_DEPLOYMENT_SERVICES_MULTICAST_CLIENT                                           = 290
+	FACILITY_DEPLOYMENT_SERVICES_CONTENT_PROVIDER                                           = 293
+	FACILITY_LINGUISTIC_SERVICES                                                            = 305
+	FACILITY_AUDIOSTREAMING                                                                 = 1094
+	FACILITY_ACCELERATOR                                                                    = 1536
+	FACILITY_WMAAECMA                                                                       = 1996
+	FACILITY_DIRECTMUSIC                                                                    = 2168
+	FACILITY_DIRECT3D10                                                                     = 2169
+	FACILITY_DXGI                                                                           = 2170
+	FACILITY_DXGI_DDI                                                                       = 2171
+	FACILITY_DIRECT3D11                                                                     = 2172
+	FACILITY_DIRECT3D11_DEBUG                                                               = 2173
+	FACILITY_DIRECT3D12                                                                     = 2174
+	FACILITY_DIRECT3D12_DEBUG                                                               = 2175
+	FACILITY_LEAP                                                                           = 2184
+	FACILITY_AUDCLNT                                                                        = 2185
+	FACILITY_WINCODEC_DWRITE_DWM                                                            = 2200
+	FACILITY_WINML                                                                          = 2192
+	FACILITY_DIRECT2D                                                                       = 2201
+	FACILITY_DEFRAG                                                                         = 2304
+	FACILITY_USERMODE_SDBUS                                                                 = 2305
+	FACILITY_JSCRIPT                                                                        = 2306
+	FACILITY_PIDGENX                                                                        = 2561
+	FACILITY_EAS                                                                            = 85
+	FACILITY_WEB                                                                            = 885
+	FACILITY_WEB_SOCKET                                                                     = 886
+	FACILITY_MOBILE                                                                         = 1793
+	FACILITY_SQLITE                                                                         = 1967
+	FACILITY_UTC                                                                            = 1989
+	FACILITY_WEP                                                                            = 2049
+	FACILITY_SYNCENGINE                                                                     = 2050
+	FACILITY_XBOX                                                                           = 2339
+	FACILITY_PIX                                                                            = 2748
+	ERROR_SUCCESS                                                             syscall.Errno = 0
+	NO_ERROR                                                                                = 0
+	SEC_E_OK                                                                  Handle        = 0x00000000
+	ERROR_INVALID_FUNCTION                                                    syscall.Errno = 1
+	ERROR_FILE_NOT_FOUND                                                      syscall.Errno = 2
+	ERROR_PATH_NOT_FOUND                                                      syscall.Errno = 3
+	ERROR_TOO_MANY_OPEN_FILES                                                 syscall.Errno = 4
+	ERROR_ACCESS_DENIED                                                       syscall.Errno = 5
+	ERROR_INVALID_HANDLE                                                      syscall.Errno = 6
+	ERROR_ARENA_TRASHED                                                       syscall.Errno = 7
+	ERROR_NOT_ENOUGH_MEMORY                                                   syscall.Errno = 8
+	ERROR_INVALID_BLOCK                                                       syscall.Errno = 9
+	ERROR_BAD_ENVIRONMENT                                                     syscall.Errno = 10
+	ERROR_BAD_FORMAT                                                          syscall.Errno = 11
+	ERROR_INVALID_ACCESS                                                      syscall.Errno = 12
+	ERROR_INVALID_DATA                                                        syscall.Errno = 13
+	ERROR_OUTOFMEMORY                                                         syscall.Errno = 14
+	ERROR_INVALID_DRIVE                                                       syscall.Errno = 15
+	ERROR_CURRENT_DIRECTORY                                                   syscall.Errno = 16
+	ERROR_NOT_SAME_DEVICE                                                     syscall.Errno = 17
+	ERROR_NO_MORE_FILES                                                       syscall.Errno = 18
+	ERROR_WRITE_PROTECT                                                       syscall.Errno = 19
+	ERROR_BAD_UNIT                                                            syscall.Errno = 20
+	ERROR_NOT_READY                                                           syscall.Errno = 21
+	ERROR_BAD_COMMAND                                                         syscall.Errno = 22
+	ERROR_CRC                                                                 syscall.Errno = 23
+	ERROR_BAD_LENGTH                                                          syscall.Errno = 24
+	ERROR_SEEK                                                                syscall.Errno = 25
+	ERROR_NOT_DOS_DISK                                                        syscall.Errno = 26
+	ERROR_SECTOR_NOT_FOUND                                                    syscall.Errno = 27
+	ERROR_OUT_OF_PAPER                                                        syscall.Errno = 28
+	ERROR_WRITE_FAULT                                                         syscall.Errno = 29
+	ERROR_READ_FAULT                                                          syscall.Errno = 30
+	ERROR_GEN_FAILURE                                                         syscall.Errno = 31
+	ERROR_SHARING_VIOLATION                                                   syscall.Errno = 32
+	ERROR_LOCK_VIOLATION                                                      syscall.Errno = 33
+	ERROR_WRONG_DISK                                                          syscall.Errno = 34
+	ERROR_SHARING_BUFFER_EXCEEDED                                             syscall.Errno = 36
+	ERROR_HANDLE_EOF                                                          syscall.Errno = 38
+	ERROR_HANDLE_DISK_FULL                                                    syscall.Errno = 39
+	ERROR_NOT_SUPPORTED                                                       syscall.Errno = 50
+	ERROR_REM_NOT_LIST                                                        syscall.Errno = 51
+	ERROR_DUP_NAME                                                            syscall.Errno = 52
+	ERROR_BAD_NETPATH                                                         syscall.Errno = 53
+	ERROR_NETWORK_BUSY                                                        syscall.Errno = 54
+	ERROR_DEV_NOT_EXIST                                                       syscall.Errno = 55
+	ERROR_TOO_MANY_CMDS                                                       syscall.Errno = 56
+	ERROR_ADAP_HDW_ERR                                                        syscall.Errno = 57
+	ERROR_BAD_NET_RESP                                                        syscall.Errno = 58
+	ERROR_UNEXP_NET_ERR                                                       syscall.Errno = 59
+	ERROR_BAD_REM_ADAP                                                        syscall.Errno = 60
+	ERROR_PRINTQ_FULL                                                         syscall.Errno = 61
+	ERROR_NO_SPOOL_SPACE                                                      syscall.Errno = 62
+	ERROR_PRINT_CANCELLED                                                     syscall.Errno = 63
+	ERROR_NETNAME_DELETED                                                     syscall.Errno = 64
+	ERROR_NETWORK_ACCESS_DENIED                                               syscall.Errno = 65
+	ERROR_BAD_DEV_TYPE                                                        syscall.Errno = 66
+	ERROR_BAD_NET_NAME                                                        syscall.Errno = 67
+	ERROR_TOO_MANY_NAMES                                                      syscall.Errno = 68
+	ERROR_TOO_MANY_SESS                                                       syscall.Errno = 69
+	ERROR_SHARING_PAUSED                                                      syscall.Errno = 70
+	ERROR_REQ_NOT_ACCEP                                                       syscall.Errno = 71
+	ERROR_REDIR_PAUSED                                                        syscall.Errno = 72
+	ERROR_FILE_EXISTS                                                         syscall.Errno = 80
+	ERROR_CANNOT_MAKE                                                         syscall.Errno = 82
+	ERROR_FAIL_I24                                                            syscall.Errno = 83
+	ERROR_OUT_OF_STRUCTURES                                                   syscall.Errno = 84
+	ERROR_ALREADY_ASSIGNED                                                    syscall.Errno = 85
+	ERROR_INVALID_PASSWORD                                                    syscall.Errno = 86
+	ERROR_INVALID_PARAMETER                                                   syscall.Errno = 87
+	ERROR_NET_WRITE_FAULT                                                     syscall.Errno = 88
+	ERROR_NO_PROC_SLOTS                                                       syscall.Errno = 89
+	ERROR_TOO_MANY_SEMAPHORES                                                 syscall.Errno = 100
+	ERROR_EXCL_SEM_ALREADY_OWNED                                              syscall.Errno = 101
+	ERROR_SEM_IS_SET                                                          syscall.Errno = 102
+	ERROR_TOO_MANY_SEM_REQUESTS                                               syscall.Errno = 103
+	ERROR_INVALID_AT_INTERRUPT_TIME                                           syscall.Errno = 104
+	ERROR_SEM_OWNER_DIED                                                      syscall.Errno = 105
+	ERROR_SEM_USER_LIMIT                                                      syscall.Errno = 106
+	ERROR_DISK_CHANGE                                                         syscall.Errno = 107
+	ERROR_DRIVE_LOCKED                                                        syscall.Errno = 108
+	ERROR_BROKEN_PIPE                                                         syscall.Errno = 109
+	ERROR_OPEN_FAILED                                                         syscall.Errno = 110
+	ERROR_BUFFER_OVERFLOW                                                     syscall.Errno = 111
+	ERROR_DISK_FULL                                                           syscall.Errno = 112
+	ERROR_NO_MORE_SEARCH_HANDLES                                              syscall.Errno = 113
+	ERROR_INVALID_TARGET_HANDLE                                               syscall.Errno = 114
+	ERROR_INVALID_CATEGORY                                                    syscall.Errno = 117
+	ERROR_INVALID_VERIFY_SWITCH                                               syscall.Errno = 118
+	ERROR_BAD_DRIVER_LEVEL                                                    syscall.Errno = 119
+	ERROR_CALL_NOT_IMPLEMENTED                                                syscall.Errno = 120
+	ERROR_SEM_TIMEOUT                                                         syscall.Errno = 121
+	ERROR_INSUFFICIENT_BUFFER                                                 syscall.Errno = 122
+	ERROR_INVALID_NAME                                                        syscall.Errno = 123
+	ERROR_INVALID_LEVEL                                                       syscall.Errno = 124
+	ERROR_NO_VOLUME_LABEL                                                     syscall.Errno = 125
+	ERROR_MOD_NOT_FOUND                                                       syscall.Errno = 126
+	ERROR_PROC_NOT_FOUND                                                      syscall.Errno = 127
+	ERROR_WAIT_NO_CHILDREN                                                    syscall.Errno = 128
+	ERROR_CHILD_NOT_COMPLETE                                                  syscall.Errno = 129
+	ERROR_DIRECT_ACCESS_HANDLE                                                syscall.Errno = 130
+	ERROR_NEGATIVE_SEEK                                                       syscall.Errno = 131
+	ERROR_SEEK_ON_DEVICE                                                      syscall.Errno = 132
+	ERROR_IS_JOIN_TARGET                                                      syscall.Errno = 133
+	ERROR_IS_JOINED                                                           syscall.Errno = 134
+	ERROR_IS_SUBSTED                                                          syscall.Errno = 135
+	ERROR_NOT_JOINED                                                          syscall.Errno = 136
+	ERROR_NOT_SUBSTED                                                         syscall.Errno = 137
+	ERROR_JOIN_TO_JOIN                                                        syscall.Errno = 138
+	ERROR_SUBST_TO_SUBST                                                      syscall.Errno = 139
+	ERROR_JOIN_TO_SUBST                                                       syscall.Errno = 140
+	ERROR_SUBST_TO_JOIN                                                       syscall.Errno = 141
+	ERROR_BUSY_DRIVE                                                          syscall.Errno = 142
+	ERROR_SAME_DRIVE                                                          syscall.Errno = 143
+	ERROR_DIR_NOT_ROOT                                                        syscall.Errno = 144
+	ERROR_DIR_NOT_EMPTY                                                       syscall.Errno = 145
+	ERROR_IS_SUBST_PATH                                                       syscall.Errno = 146
+	ERROR_IS_JOIN_PATH                                                        syscall.Errno = 147
+	ERROR_PATH_BUSY                                                           syscall.Errno = 148
+	ERROR_IS_SUBST_TARGET                                                     syscall.Errno = 149
+	ERROR_SYSTEM_TRACE                                                        syscall.Errno = 150
+	ERROR_INVALID_EVENT_COUNT                                                 syscall.Errno = 151
+	ERROR_TOO_MANY_MUXWAITERS                                                 syscall.Errno = 152
+	ERROR_INVALID_LIST_FORMAT                                                 syscall.Errno = 153
+	ERROR_LABEL_TOO_LONG                                                      syscall.Errno = 154
+	ERROR_TOO_MANY_TCBS                                                       syscall.Errno = 155
+	ERROR_SIGNAL_REFUSED                                                      syscall.Errno = 156
+	ERROR_DISCARDED                                                           syscall.Errno = 157
+	ERROR_NOT_LOCKED                                                          syscall.Errno = 158
+	ERROR_BAD_THREADID_ADDR                                                   syscall.Errno = 159
+	ERROR_BAD_ARGUMENTS                                                       syscall.Errno = 160
+	ERROR_BAD_PATHNAME                                                        syscall.Errno = 161
+	ERROR_SIGNAL_PENDING                                                      syscall.Errno = 162
+	ERROR_MAX_THRDS_REACHED                                                   syscall.Errno = 164
+	ERROR_LOCK_FAILED                                                         syscall.Errno = 167
+	ERROR_BUSY                                                                syscall.Errno = 170
+	ERROR_DEVICE_SUPPORT_IN_PROGRESS                                          syscall.Errno = 171
+	ERROR_CANCEL_VIOLATION                                                    syscall.Errno = 173
+	ERROR_ATOMIC_LOCKS_NOT_SUPPORTED                                          syscall.Errno = 174
+	ERROR_INVALID_SEGMENT_NUMBER                                              syscall.Errno = 180
+	ERROR_INVALID_ORDINAL                                                     syscall.Errno = 182
+	ERROR_ALREADY_EXISTS                                                      syscall.Errno = 183
+	ERROR_INVALID_FLAG_NUMBER                                                 syscall.Errno = 186
+	ERROR_SEM_NOT_FOUND                                                       syscall.Errno = 187
+	ERROR_INVALID_STARTING_CODESEG                                            syscall.Errno = 188
+	ERROR_INVALID_STACKSEG                                                    syscall.Errno = 189
+	ERROR_INVALID_MODULETYPE                                                  syscall.Errno = 190
+	ERROR_INVALID_EXE_SIGNATURE                                               syscall.Errno = 191
+	ERROR_EXE_MARKED_INVALID                                                  syscall.Errno = 192
+	ERROR_BAD_EXE_FORMAT                                                      syscall.Errno = 193
+	ERROR_ITERATED_DATA_EXCEEDS_64k                                           syscall.Errno = 194
+	ERROR_INVALID_MINALLOCSIZE                                                syscall.Errno = 195
+	ERROR_DYNLINK_FROM_INVALID_RING                                           syscall.Errno = 196
+	ERROR_IOPL_NOT_ENABLED                                                    syscall.Errno = 197
+	ERROR_INVALID_SEGDPL                                                      syscall.Errno = 198
+	ERROR_AUTODATASEG_EXCEEDS_64k                                             syscall.Errno = 199
+	ERROR_RING2SEG_MUST_BE_MOVABLE                                            syscall.Errno = 200
+	ERROR_RELOC_CHAIN_XEEDS_SEGLIM                                            syscall.Errno = 201
+	ERROR_INFLOOP_IN_RELOC_CHAIN                                              syscall.Errno = 202
+	ERROR_ENVVAR_NOT_FOUND                                                    syscall.Errno = 203
+	ERROR_NO_SIGNAL_SENT                                                      syscall.Errno = 205
+	ERROR_FILENAME_EXCED_RANGE                                                syscall.Errno = 206
+	ERROR_RING2_STACK_IN_USE                                                  syscall.Errno = 207
+	ERROR_META_EXPANSION_TOO_LONG                                             syscall.Errno = 208
+	ERROR_INVALID_SIGNAL_NUMBER                                               syscall.Errno = 209
+	ERROR_THREAD_1_INACTIVE                                                   syscall.Errno = 210
+	ERROR_LOCKED                                                              syscall.Errno = 212
+	ERROR_TOO_MANY_MODULES                                                    syscall.Errno = 214
+	ERROR_NESTING_NOT_ALLOWED                                                 syscall.Errno = 215
+	ERROR_EXE_MACHINE_TYPE_MISMATCH                                           syscall.Errno = 216
+	ERROR_EXE_CANNOT_MODIFY_SIGNED_BINARY                                     syscall.Errno = 217
+	ERROR_EXE_CANNOT_MODIFY_STRONG_SIGNED_BINARY                              syscall.Errno = 218
+	ERROR_FILE_CHECKED_OUT                                                    syscall.Errno = 220
+	ERROR_CHECKOUT_REQUIRED                                                   syscall.Errno = 221
+	ERROR_BAD_FILE_TYPE                                                       syscall.Errno = 222
+	ERROR_FILE_TOO_LARGE                                                      syscall.Errno = 223
+	ERROR_FORMS_AUTH_REQUIRED                                                 syscall.Errno = 224
+	ERROR_VIRUS_INFECTED                                                      syscall.Errno = 225
+	ERROR_VIRUS_DELETED                                                       syscall.Errno = 226
+	ERROR_PIPE_LOCAL                                                          syscall.Errno = 229
+	ERROR_BAD_PIPE                                                            syscall.Errno = 230
+	ERROR_PIPE_BUSY                                                           syscall.Errno = 231
+	ERROR_NO_DATA                                                             syscall.Errno = 232
+	ERROR_PIPE_NOT_CONNECTED                                                  syscall.Errno = 233
+	ERROR_MORE_DATA                                                           syscall.Errno = 234
+	ERROR_NO_WORK_DONE                                                        syscall.Errno = 235
+	ERROR_VC_DISCONNECTED                                                     syscall.Errno = 240
+	ERROR_INVALID_EA_NAME                                                     syscall.Errno = 254
+	ERROR_EA_LIST_INCONSISTENT                                                syscall.Errno = 255
+	WAIT_TIMEOUT                                                              syscall.Errno = 258
+	ERROR_NO_MORE_ITEMS                                                       syscall.Errno = 259
+	ERROR_CANNOT_COPY                                                         syscall.Errno = 266
+	ERROR_DIRECTORY                                                           syscall.Errno = 267
+	ERROR_EAS_DIDNT_FIT                                                       syscall.Errno = 275
+	ERROR_EA_FILE_CORRUPT                                                     syscall.Errno = 276
+	ERROR_EA_TABLE_FULL                                                       syscall.Errno = 277
+	ERROR_INVALID_EA_HANDLE                                                   syscall.Errno = 278
+	ERROR_EAS_NOT_SUPPORTED                                                   syscall.Errno = 282
+	ERROR_NOT_OWNER                                                           syscall.Errno = 288
+	ERROR_TOO_MANY_POSTS                                                      syscall.Errno = 298
+	ERROR_PARTIAL_COPY                                                        syscall.Errno = 299
+	ERROR_OPLOCK_NOT_GRANTED                                                  syscall.Errno = 300
+	ERROR_INVALID_OPLOCK_PROTOCOL                                             syscall.Errno = 301
+	ERROR_DISK_TOO_FRAGMENTED                                                 syscall.Errno = 302
+	ERROR_DELETE_PENDING                                                      syscall.Errno = 303
+	ERROR_INCOMPATIBLE_WITH_GLOBAL_SHORT_NAME_REGISTRY_SETTING                syscall.Errno = 304
+	ERROR_SHORT_NAMES_NOT_ENABLED_ON_VOLUME                                   syscall.Errno = 305
+	ERROR_SECURITY_STREAM_IS_INCONSISTENT                                     syscall.Errno = 306
+	ERROR_INVALID_LOCK_RANGE                                                  syscall.Errno = 307
+	ERROR_IMAGE_SUBSYSTEM_NOT_PRESENT                                         syscall.Errno = 308
+	ERROR_NOTIFICATION_GUID_ALREADY_DEFINED                                   syscall.Errno = 309
+	ERROR_INVALID_EXCEPTION_HANDLER                                           syscall.Errno = 310
+	ERROR_DUPLICATE_PRIVILEGES                                                syscall.Errno = 311
+	ERROR_NO_RANGES_PROCESSED                                                 syscall.Errno = 312
+	ERROR_NOT_ALLOWED_ON_SYSTEM_FILE                                          syscall.Errno = 313
+	ERROR_DISK_RESOURCES_EXHAUSTED                                            syscall.Errno = 314
+	ERROR_INVALID_TOKEN                                                       syscall.Errno = 315
+	ERROR_DEVICE_FEATURE_NOT_SUPPORTED                                        syscall.Errno = 316
+	ERROR_MR_MID_NOT_FOUND                                                    syscall.Errno = 317
+	ERROR_SCOPE_NOT_FOUND                                                     syscall.Errno = 318
+	ERROR_UNDEFINED_SCOPE                                                     syscall.Errno = 319
+	ERROR_INVALID_CAP                                                         syscall.Errno = 320
+	ERROR_DEVICE_UNREACHABLE                                                  syscall.Errno = 321
+	ERROR_DEVICE_NO_RESOURCES                                                 syscall.Errno = 322
+	ERROR_DATA_CHECKSUM_ERROR                                                 syscall.Errno = 323
+	ERROR_INTERMIXED_KERNEL_EA_OPERATION                                      syscall.Errno = 324
+	ERROR_FILE_LEVEL_TRIM_NOT_SUPPORTED                                       syscall.Errno = 326
+	ERROR_OFFSET_ALIGNMENT_VIOLATION                                          syscall.Errno = 327
+	ERROR_INVALID_FIELD_IN_PARAMETER_LIST                                     syscall.Errno = 328
+	ERROR_OPERATION_IN_PROGRESS                                               syscall.Errno = 329
+	ERROR_BAD_DEVICE_PATH                                                     syscall.Errno = 330
+	ERROR_TOO_MANY_DESCRIPTORS                                                syscall.Errno = 331
+	ERROR_SCRUB_DATA_DISABLED                                                 syscall.Errno = 332
+	ERROR_NOT_REDUNDANT_STORAGE                                               syscall.Errno = 333
+	ERROR_RESIDENT_FILE_NOT_SUPPORTED                                         syscall.Errno = 334
+	ERROR_COMPRESSED_FILE_NOT_SUPPORTED                                       syscall.Errno = 335
+	ERROR_DIRECTORY_NOT_SUPPORTED                                             syscall.Errno = 336
+	ERROR_NOT_READ_FROM_COPY                                                  syscall.Errno = 337
+	ERROR_FT_WRITE_FAILURE                                                    syscall.Errno = 338
+	ERROR_FT_DI_SCAN_REQUIRED                                                 syscall.Errno = 339
+	ERROR_INVALID_KERNEL_INFO_VERSION                                         syscall.Errno = 340
+	ERROR_INVALID_PEP_INFO_VERSION                                            syscall.Errno = 341
+	ERROR_OBJECT_NOT_EXTERNALLY_BACKED                                        syscall.Errno = 342
+	ERROR_EXTERNAL_BACKING_PROVIDER_UNKNOWN                                   syscall.Errno = 343
+	ERROR_COMPRESSION_NOT_BENEFICIAL                                          syscall.Errno = 344
+	ERROR_STORAGE_TOPOLOGY_ID_MISMATCH                                        syscall.Errno = 345
+	ERROR_BLOCKED_BY_PARENTAL_CONTROLS                                        syscall.Errno = 346
+	ERROR_BLOCK_TOO_MANY_REFERENCES                                           syscall.Errno = 347
+	ERROR_MARKED_TO_DISALLOW_WRITES                                           syscall.Errno = 348
+	ERROR_ENCLAVE_FAILURE                                                     syscall.Errno = 349
+	ERROR_FAIL_NOACTION_REBOOT                                                syscall.Errno = 350
+	ERROR_FAIL_SHUTDOWN                                                       syscall.Errno = 351
+	ERROR_FAIL_RESTART                                                        syscall.Errno = 352
+	ERROR_MAX_SESSIONS_REACHED                                                syscall.Errno = 353
+	ERROR_NETWORK_ACCESS_DENIED_EDP                                           syscall.Errno = 354
+	ERROR_DEVICE_HINT_NAME_BUFFER_TOO_SMALL                                   syscall.Errno = 355
+	ERROR_EDP_POLICY_DENIES_OPERATION                                         syscall.Errno = 356
+	ERROR_EDP_DPL_POLICY_CANT_BE_SATISFIED                                    syscall.Errno = 357
+	ERROR_CLOUD_FILE_SYNC_ROOT_METADATA_CORRUPT                               syscall.Errno = 358
+	ERROR_DEVICE_IN_MAINTENANCE                                               syscall.Errno = 359
+	ERROR_NOT_SUPPORTED_ON_DAX                                                syscall.Errno = 360
+	ERROR_DAX_MAPPING_EXISTS                                                  syscall.Errno = 361
+	ERROR_CLOUD_FILE_PROVIDER_NOT_RUNNING                                     syscall.Errno = 362
+	ERROR_CLOUD_FILE_METADATA_CORRUPT                                         syscall.Errno = 363
+	ERROR_CLOUD_FILE_METADATA_TOO_LARGE                                       syscall.Errno = 364
+	ERROR_CLOUD_FILE_PROPERTY_BLOB_TOO_LARGE                                  syscall.Errno = 365
+	ERROR_CLOUD_FILE_PROPERTY_BLOB_CHECKSUM_MISMATCH                          syscall.Errno = 366
+	ERROR_CHILD_PROCESS_BLOCKED                                               syscall.Errno = 367
+	ERROR_STORAGE_LOST_DATA_PERSISTENCE                                       syscall.Errno = 368
+	ERROR_FILE_SYSTEM_VIRTUALIZATION_UNAVAILABLE                              syscall.Errno = 369
+	ERROR_FILE_SYSTEM_VIRTUALIZATION_METADATA_CORRUPT                         syscall.Errno = 370
+	ERROR_FILE_SYSTEM_VIRTUALIZATION_BUSY                                     syscall.Errno = 371
+	ERROR_FILE_SYSTEM_VIRTUALIZATION_PROVIDER_UNKNOWN                         syscall.Errno = 372
+	ERROR_GDI_HANDLE_LEAK                                                     syscall.Errno = 373
+	ERROR_CLOUD_FILE_TOO_MANY_PROPERTY_BLOBS                                  syscall.Errno = 374
+	ERROR_CLOUD_FILE_PROPERTY_VERSION_NOT_SUPPORTED                           syscall.Errno = 375
+	ERROR_NOT_A_CLOUD_FILE                                                    syscall.Errno = 376
+	ERROR_CLOUD_FILE_NOT_IN_SYNC                                              syscall.Errno = 377
+	ERROR_CLOUD_FILE_ALREADY_CONNECTED                                        syscall.Errno = 378
+	ERROR_CLOUD_FILE_NOT_SUPPORTED                                            syscall.Errno = 379
+	ERROR_CLOUD_FILE_INVALID_REQUEST                                          syscall.Errno = 380
+	ERROR_CLOUD_FILE_READ_ONLY_VOLUME                                         syscall.Errno = 381
+	ERROR_CLOUD_FILE_CONNECTED_PROVIDER_ONLY                                  syscall.Errno = 382
+	ERROR_CLOUD_FILE_VALIDATION_FAILED                                        syscall.Errno = 383
+	ERROR_SMB1_NOT_AVAILABLE                                                  syscall.Errno = 384
+	ERROR_FILE_SYSTEM_VIRTUALIZATION_INVALID_OPERATION                        syscall.Errno = 385
+	ERROR_CLOUD_FILE_AUTHENTICATION_FAILED                                    syscall.Errno = 386
+	ERROR_CLOUD_FILE_INSUFFICIENT_RESOURCES                                   syscall.Errno = 387
+	ERROR_CLOUD_FILE_NETWORK_UNAVAILABLE                                      syscall.Errno = 388
+	ERROR_CLOUD_FILE_UNSUCCESSFUL                                             syscall.Errno = 389
+	ERROR_CLOUD_FILE_NOT_UNDER_SYNC_ROOT                                      syscall.Errno = 390
+	ERROR_CLOUD_FILE_IN_USE                                                   syscall.Errno = 391
+	ERROR_CLOUD_FILE_PINNED                                                   syscall.Errno = 392
+	ERROR_CLOUD_FILE_REQUEST_ABORTED                                          syscall.Errno = 393
+	ERROR_CLOUD_FILE_PROPERTY_CORRUPT                                         syscall.Errno = 394
+	ERROR_CLOUD_FILE_ACCESS_DENIED                                            syscall.Errno = 395
+	ERROR_CLOUD_FILE_INCOMPATIBLE_HARDLINKS                                   syscall.Errno = 396
+	ERROR_CLOUD_FILE_PROPERTY_LOCK_CONFLICT                                   syscall.Errno = 397
+	ERROR_CLOUD_FILE_REQUEST_CANCELED                                         syscall.Errno = 398
+	ERROR_EXTERNAL_SYSKEY_NOT_SUPPORTED                                       syscall.Errno = 399
+	ERROR_THREAD_MODE_ALREADY_BACKGROUND                                      syscall.Errno = 400
+	ERROR_THREAD_MODE_NOT_BACKGROUND                                          syscall.Errno = 401
+	ERROR_PROCESS_MODE_ALREADY_BACKGROUND                                     syscall.Errno = 402
+	ERROR_PROCESS_MODE_NOT_BACKGROUND                                         syscall.Errno = 403
+	ERROR_CLOUD_FILE_PROVIDER_TERMINATED                                      syscall.Errno = 404
+	ERROR_NOT_A_CLOUD_SYNC_ROOT                                               syscall.Errno = 405
+	ERROR_FILE_PROTECTED_UNDER_DPL                                            syscall.Errno = 406
+	ERROR_VOLUME_NOT_CLUSTER_ALIGNED                                          syscall.Errno = 407
+	ERROR_NO_PHYSICALLY_ALIGNED_FREE_SPACE_FOUND                              syscall.Errno = 408
+	ERROR_APPX_FILE_NOT_ENCRYPTED                                             syscall.Errno = 409
+	ERROR_RWRAW_ENCRYPTED_FILE_NOT_ENCRYPTED                                  syscall.Errno = 410
+	ERROR_RWRAW_ENCRYPTED_INVALID_EDATAINFO_FILEOFFSET                        syscall.Errno = 411
+	ERROR_RWRAW_ENCRYPTED_INVALID_EDATAINFO_FILERANGE                         syscall.Errno = 412
+	ERROR_RWRAW_ENCRYPTED_INVALID_EDATAINFO_PARAMETER                         syscall.Errno = 413
+	ERROR_LINUX_SUBSYSTEM_NOT_PRESENT                                         syscall.Errno = 414
+	ERROR_FT_READ_FAILURE                                                     syscall.Errno = 415
+	ERROR_STORAGE_RESERVE_ID_INVALID                                          syscall.Errno = 416
+	ERROR_STORAGE_RESERVE_DOES_NOT_EXIST                                      syscall.Errno = 417
+	ERROR_STORAGE_RESERVE_ALREADY_EXISTS                                      syscall.Errno = 418
+	ERROR_STORAGE_RESERVE_NOT_EMPTY                                           syscall.Errno = 419
+	ERROR_NOT_A_DAX_VOLUME                                                    syscall.Errno = 420
+	ERROR_NOT_DAX_MAPPABLE                                                    syscall.Errno = 421
+	ERROR_TIME_CRITICAL_THREAD                                                syscall.Errno = 422
+	ERROR_DPL_NOT_SUPPORTED_FOR_USER                                          syscall.Errno = 423
+	ERROR_CASE_DIFFERING_NAMES_IN_DIR                                         syscall.Errno = 424
+	ERROR_CAPAUTHZ_NOT_DEVUNLOCKED                                            syscall.Errno = 450
+	ERROR_CAPAUTHZ_CHANGE_TYPE                                                syscall.Errno = 451
+	ERROR_CAPAUTHZ_NOT_PROVISIONED                                            syscall.Errno = 452
+	ERROR_CAPAUTHZ_NOT_AUTHORIZED                                             syscall.Errno = 453
+	ERROR_CAPAUTHZ_NO_POLICY                                                  syscall.Errno = 454
+	ERROR_CAPAUTHZ_DB_CORRUPTED                                               syscall.Errno = 455
+	ERROR_CAPAUTHZ_SCCD_INVALID_CATALOG                                       syscall.Errno = 456
+	ERROR_CAPAUTHZ_SCCD_NO_AUTH_ENTITY                                        syscall.Errno = 457
+	ERROR_CAPAUTHZ_SCCD_PARSE_ERROR                                           syscall.Errno = 458
+	ERROR_CAPAUTHZ_SCCD_DEV_MODE_REQUIRED                                     syscall.Errno = 459
+	ERROR_CAPAUTHZ_SCCD_NO_CAPABILITY_MATCH                                   syscall.Errno = 460
+	ERROR_PNP_QUERY_REMOVE_DEVICE_TIMEOUT                                     syscall.Errno = 480
+	ERROR_PNP_QUERY_REMOVE_RELATED_DEVICE_TIMEOUT                             syscall.Errno = 481
+	ERROR_PNP_QUERY_REMOVE_UNRELATED_DEVICE_TIMEOUT                           syscall.Errno = 482
+	ERROR_DEVICE_HARDWARE_ERROR                                               syscall.Errno = 483
+	ERROR_INVALID_ADDRESS                                                     syscall.Errno = 487
+	ERROR_VRF_CFG_ENABLED                                                     syscall.Errno = 1183
+	ERROR_PARTITION_TERMINATING                                               syscall.Errno = 1184
+	ERROR_USER_PROFILE_LOAD                                                   syscall.Errno = 500
+	ERROR_ARITHMETIC_OVERFLOW                                                 syscall.Errno = 534
+	ERROR_PIPE_CONNECTED                                                      syscall.Errno = 535
+	ERROR_PIPE_LISTENING                                                      syscall.Errno = 536
+	ERROR_VERIFIER_STOP                                                       syscall.Errno = 537
+	ERROR_ABIOS_ERROR                                                         syscall.Errno = 538
+	ERROR_WX86_WARNING                                                        syscall.Errno = 539
+	ERROR_WX86_ERROR                                                          syscall.Errno = 540
+	ERROR_TIMER_NOT_CANCELED                                                  syscall.Errno = 541
+	ERROR_UNWIND                                                              syscall.Errno = 542
+	ERROR_BAD_STACK                                                           syscall.Errno = 543
+	ERROR_INVALID_UNWIND_TARGET                                               syscall.Errno = 544
+	ERROR_INVALID_PORT_ATTRIBUTES                                             syscall.Errno = 545
+	ERROR_PORT_MESSAGE_TOO_LONG                                               syscall.Errno = 546
+	ERROR_INVALID_QUOTA_LOWER                                                 syscall.Errno = 547
+	ERROR_DEVICE_ALREADY_ATTACHED                                             syscall.Errno = 548
+	ERROR_INSTRUCTION_MISALIGNMENT                                            syscall.Errno = 549
+	ERROR_PROFILING_NOT_STARTED                                               syscall.Errno = 550
+	ERROR_PROFILING_NOT_STOPPED                                               syscall.Errno = 551
+	ERROR_COULD_NOT_INTERPRET                                                 syscall.Errno = 552
+	ERROR_PROFILING_AT_LIMIT                                                  syscall.Errno = 553
+	ERROR_CANT_WAIT                                                           syscall.Errno = 554
+	ERROR_CANT_TERMINATE_SELF                                                 syscall.Errno = 555
+	ERROR_UNEXPECTED_MM_CREATE_ERR                                            syscall.Errno = 556
+	ERROR_UNEXPECTED_MM_MAP_ERROR                                             syscall.Errno = 557
+	ERROR_UNEXPECTED_MM_EXTEND_ERR                                            syscall.Errno = 558
+	ERROR_BAD_FUNCTION_TABLE                                                  syscall.Errno = 559
+	ERROR_NO_GUID_TRANSLATION                                                 syscall.Errno = 560
+	ERROR_INVALID_LDT_SIZE                                                    syscall.Errno = 561
+	ERROR_INVALID_LDT_OFFSET                                                  syscall.Errno = 563
+	ERROR_INVALID_LDT_DESCRIPTOR                                              syscall.Errno = 564
+	ERROR_TOO_MANY_THREADS                                                    syscall.Errno = 565
+	ERROR_THREAD_NOT_IN_PROCESS                                               syscall.Errno = 566
+	ERROR_PAGEFILE_QUOTA_EXCEEDED                                             syscall.Errno = 567
+	ERROR_LOGON_SERVER_CONFLICT                                               syscall.Errno = 568
+	ERROR_SYNCHRONIZATION_REQUIRED                                            syscall.Errno = 569
+	ERROR_NET_OPEN_FAILED                                                     syscall.Errno = 570
+	ERROR_IO_PRIVILEGE_FAILED                                                 syscall.Errno = 571
+	ERROR_CONTROL_C_EXIT                                                      syscall.Errno = 572
+	ERROR_MISSING_SYSTEMFILE                                                  syscall.Errno = 573
+	ERROR_UNHANDLED_EXCEPTION                                                 syscall.Errno = 574
+	ERROR_APP_INIT_FAILURE                                                    syscall.Errno = 575
+	ERROR_PAGEFILE_CREATE_FAILED                                              syscall.Errno = 576
+	ERROR_INVALID_IMAGE_HASH                                                  syscall.Errno = 577
+	ERROR_NO_PAGEFILE                                                         syscall.Errno = 578
+	ERROR_ILLEGAL_FLOAT_CONTEXT                                               syscall.Errno = 579
+	ERROR_NO_EVENT_PAIR                                                       syscall.Errno = 580
+	ERROR_DOMAIN_CTRLR_CONFIG_ERROR                                           syscall.Errno = 581
+	ERROR_ILLEGAL_CHARACTER                                                   syscall.Errno = 582
+	ERROR_UNDEFINED_CHARACTER                                                 syscall.Errno = 583
+	ERROR_FLOPPY_VOLUME                                                       syscall.Errno = 584
+	ERROR_BIOS_FAILED_TO_CONNECT_INTERRUPT                                    syscall.Errno = 585
+	ERROR_BACKUP_CONTROLLER                                                   syscall.Errno = 586
+	ERROR_MUTANT_LIMIT_EXCEEDED                                               syscall.Errno = 587
+	ERROR_FS_DRIVER_REQUIRED                                                  syscall.Errno = 588
+	ERROR_CANNOT_LOAD_REGISTRY_FILE                                           syscall.Errno = 589
+	ERROR_DEBUG_ATTACH_FAILED                                                 syscall.Errno = 590
+	ERROR_SYSTEM_PROCESS_TERMINATED                                           syscall.Errno = 591
+	ERROR_DATA_NOT_ACCEPTED                                                   syscall.Errno = 592
+	ERROR_VDM_HARD_ERROR                                                      syscall.Errno = 593
+	ERROR_DRIVER_CANCEL_TIMEOUT                                               syscall.Errno = 594
+	ERROR_REPLY_MESSAGE_MISMATCH                                              syscall.Errno = 595
+	ERROR_LOST_WRITEBEHIND_DATA                                               syscall.Errno = 596
+	ERROR_CLIENT_SERVER_PARAMETERS_INVALID                                    syscall.Errno = 597
+	ERROR_NOT_TINY_STREAM                                                     syscall.Errno = 598
+	ERROR_STACK_OVERFLOW_READ                                                 syscall.Errno = 599
+	ERROR_CONVERT_TO_LARGE                                                    syscall.Errno = 600
+	ERROR_FOUND_OUT_OF_SCOPE                                                  syscall.Errno = 601
+	ERROR_ALLOCATE_BUCKET                                                     syscall.Errno = 602
+	ERROR_MARSHALL_OVERFLOW                                                   syscall.Errno = 603
+	ERROR_INVALID_VARIANT                                                     syscall.Errno = 604
+	ERROR_BAD_COMPRESSION_BUFFER                                              syscall.Errno = 605
+	ERROR_AUDIT_FAILED                                                        syscall.Errno = 606
+	ERROR_TIMER_RESOLUTION_NOT_SET                                            syscall.Errno = 607
+	ERROR_INSUFFICIENT_LOGON_INFO                                             syscall.Errno = 608
+	ERROR_BAD_DLL_ENTRYPOINT                                                  syscall.Errno = 609
+	ERROR_BAD_SERVICE_ENTRYPOINT                                              syscall.Errno = 610
+	ERROR_IP_ADDRESS_CONFLICT1                                                syscall.Errno = 611
+	ERROR_IP_ADDRESS_CONFLICT2                                                syscall.Errno = 612
+	ERROR_REGISTRY_QUOTA_LIMIT                                                syscall.Errno = 613
+	ERROR_NO_CALLBACK_ACTIVE                                                  syscall.Errno = 614
+	ERROR_PWD_TOO_SHORT                                                       syscall.Errno = 615
+	ERROR_PWD_TOO_RECENT                                                      syscall.Errno = 616
+	ERROR_PWD_HISTORY_CONFLICT                                                syscall.Errno = 617
+	ERROR_UNSUPPORTED_COMPRESSION                                             syscall.Errno = 618
+	ERROR_INVALID_HW_PROFILE                                                  syscall.Errno = 619
+	ERROR_INVALID_PLUGPLAY_DEVICE_PATH                                        syscall.Errno = 620
+	ERROR_QUOTA_LIST_INCONSISTENT                                             syscall.Errno = 621
+	ERROR_EVALUATION_EXPIRATION                                               syscall.Errno = 622
+	ERROR_ILLEGAL_DLL_RELOCATION                                              syscall.Errno = 623
+	ERROR_DLL_INIT_FAILED_LOGOFF                                              syscall.Errno = 624
+	ERROR_VALIDATE_CONTINUE                                                   syscall.Errno = 625
+	ERROR_NO_MORE_MATCHES                                                     syscall.Errno = 626
+	ERROR_RANGE_LIST_CONFLICT                                                 syscall.Errno = 627
+	ERROR_SERVER_SID_MISMATCH                                                 syscall.Errno = 628
+	ERROR_CANT_ENABLE_DENY_ONLY                                               syscall.Errno = 629
+	ERROR_FLOAT_MULTIPLE_FAULTS                                               syscall.Errno = 630
+	ERROR_FLOAT_MULTIPLE_TRAPS                                                syscall.Errno = 631
+	ERROR_NOINTERFACE                                                         syscall.Errno = 632
+	ERROR_DRIVER_FAILED_SLEEP                                                 syscall.Errno = 633
+	ERROR_CORRUPT_SYSTEM_FILE                                                 syscall.Errno = 634
+	ERROR_COMMITMENT_MINIMUM                                                  syscall.Errno = 635
+	ERROR_PNP_RESTART_ENUMERATION                                             syscall.Errno = 636
+	ERROR_SYSTEM_IMAGE_BAD_SIGNATURE                                          syscall.Errno = 637
+	ERROR_PNP_REBOOT_REQUIRED                                                 syscall.Errno = 638
+	ERROR_INSUFFICIENT_POWER                                                  syscall.Errno = 639
+	ERROR_MULTIPLE_FAULT_VIOLATION                                            syscall.Errno = 640
+	ERROR_SYSTEM_SHUTDOWN                                                     syscall.Errno = 641
+	ERROR_PORT_NOT_SET                                                        syscall.Errno = 642
+	ERROR_DS_VERSION_CHECK_FAILURE                                            syscall.Errno = 643
+	ERROR_RANGE_NOT_FOUND                                                     syscall.Errno = 644
+	ERROR_NOT_SAFE_MODE_DRIVER                                                syscall.Errno = 646
+	ERROR_FAILED_DRIVER_ENTRY                                                 syscall.Errno = 647
+	ERROR_DEVICE_ENUMERATION_ERROR                                            syscall.Errno = 648
+	ERROR_MOUNT_POINT_NOT_RESOLVED                                            syscall.Errno = 649
+	ERROR_INVALID_DEVICE_OBJECT_PARAMETER                                     syscall.Errno = 650
+	ERROR_MCA_OCCURED                                                         syscall.Errno = 651
+	ERROR_DRIVER_DATABASE_ERROR                                               syscall.Errno = 652
+	ERROR_SYSTEM_HIVE_TOO_LARGE                                               syscall.Errno = 653
+	ERROR_DRIVER_FAILED_PRIOR_UNLOAD                                          syscall.Errno = 654
+	ERROR_VOLSNAP_PREPARE_HIBERNATE                                           syscall.Errno = 655
+	ERROR_HIBERNATION_FAILURE                                                 syscall.Errno = 656
+	ERROR_PWD_TOO_LONG                                                        syscall.Errno = 657
+	ERROR_FILE_SYSTEM_LIMITATION                                              syscall.Errno = 665
+	ERROR_ASSERTION_FAILURE                                                   syscall.Errno = 668
+	ERROR_ACPI_ERROR                                                          syscall.Errno = 669
+	ERROR_WOW_ASSERTION                                                       syscall.Errno = 670
+	ERROR_PNP_BAD_MPS_TABLE                                                   syscall.Errno = 671
+	ERROR_PNP_TRANSLATION_FAILED                                              syscall.Errno = 672
+	ERROR_PNP_IRQ_TRANSLATION_FAILED                                          syscall.Errno = 673
+	ERROR_PNP_INVALID_ID                                                      syscall.Errno = 674
+	ERROR_WAKE_SYSTEM_DEBUGGER                                                syscall.Errno = 675
+	ERROR_HANDLES_CLOSED                                                      syscall.Errno = 676
+	ERROR_EXTRANEOUS_INFORMATION                                              syscall.Errno = 677
+	ERROR_RXACT_COMMIT_NECESSARY                                              syscall.Errno = 678
+	ERROR_MEDIA_CHECK                                                         syscall.Errno = 679
+	ERROR_GUID_SUBSTITUTION_MADE                                              syscall.Errno = 680
+	ERROR_STOPPED_ON_SYMLINK                                                  syscall.Errno = 681
+	ERROR_LONGJUMP                                                            syscall.Errno = 682
+	ERROR_PLUGPLAY_QUERY_VETOED                                               syscall.Errno = 683
+	ERROR_UNWIND_CONSOLIDATE                                                  syscall.Errno = 684
+	ERROR_REGISTRY_HIVE_RECOVERED                                             syscall.Errno = 685
+	ERROR_DLL_MIGHT_BE_INSECURE                                               syscall.Errno = 686
+	ERROR_DLL_MIGHT_BE_INCOMPATIBLE                                           syscall.Errno = 687
+	ERROR_DBG_EXCEPTION_NOT_HANDLED                                           syscall.Errno = 688
+	ERROR_DBG_REPLY_LATER                                                     syscall.Errno = 689
+	ERROR_DBG_UNABLE_TO_PROVIDE_HANDLE                                        syscall.Errno = 690
+	ERROR_DBG_TERMINATE_THREAD                                                syscall.Errno = 691
+	ERROR_DBG_TERMINATE_PROCESS                                               syscall.Errno = 692
+	ERROR_DBG_CONTROL_C                                                       syscall.Errno = 693
+	ERROR_DBG_PRINTEXCEPTION_C                                                syscall.Errno = 694
+	ERROR_DBG_RIPEXCEPTION                                                    syscall.Errno = 695
+	ERROR_DBG_CONTROL_BREAK                                                   syscall.Errno = 696
+	ERROR_DBG_COMMAND_EXCEPTION                                               syscall.Errno = 697
+	ERROR_OBJECT_NAME_EXISTS                                                  syscall.Errno = 698
+	ERROR_THREAD_WAS_SUSPENDED                                                syscall.Errno = 699
+	ERROR_IMAGE_NOT_AT_BASE                                                   syscall.Errno = 700
+	ERROR_RXACT_STATE_CREATED                                                 syscall.Errno = 701
+	ERROR_SEGMENT_NOTIFICATION                                                syscall.Errno = 702
+	ERROR_BAD_CURRENT_DIRECTORY                                               syscall.Errno = 703
+	ERROR_FT_READ_RECOVERY_FROM_BACKUP                                        syscall.Errno = 704
+	ERROR_FT_WRITE_RECOVERY                                                   syscall.Errno = 705
+	ERROR_IMAGE_MACHINE_TYPE_MISMATCH                                         syscall.Errno = 706
+	ERROR_RECEIVE_PARTIAL                                                     syscall.Errno = 707
+	ERROR_RECEIVE_EXPEDITED                                                   syscall.Errno = 708
+	ERROR_RECEIVE_PARTIAL_EXPEDITED                                           syscall.Errno = 709
+	ERROR_EVENT_DONE                                                          syscall.Errno = 710
+	ERROR_EVENT_PENDING                                                       syscall.Errno = 711
+	ERROR_CHECKING_FILE_SYSTEM                                                syscall.Errno = 712
+	ERROR_FATAL_APP_EXIT                                                      syscall.Errno = 713
+	ERROR_PREDEFINED_HANDLE                                                   syscall.Errno = 714
+	ERROR_WAS_UNLOCKED                                                        syscall.Errno = 715
+	ERROR_SERVICE_NOTIFICATION                                                syscall.Errno = 716
+	ERROR_WAS_LOCKED                                                          syscall.Errno = 717
+	ERROR_LOG_HARD_ERROR                                                      syscall.Errno = 718
+	ERROR_ALREADY_WIN32                                                       syscall.Errno = 719
+	ERROR_IMAGE_MACHINE_TYPE_MISMATCH_EXE                                     syscall.Errno = 720
+	ERROR_NO_YIELD_PERFORMED                                                  syscall.Errno = 721
+	ERROR_TIMER_RESUME_IGNORED                                                syscall.Errno = 722
+	ERROR_ARBITRATION_UNHANDLED                                               syscall.Errno = 723
+	ERROR_CARDBUS_NOT_SUPPORTED                                               syscall.Errno = 724
+	ERROR_MP_PROCESSOR_MISMATCH                                               syscall.Errno = 725
+	ERROR_HIBERNATED                                                          syscall.Errno = 726
+	ERROR_RESUME_HIBERNATION                                                  syscall.Errno = 727
+	ERROR_FIRMWARE_UPDATED                                                    syscall.Errno = 728
+	ERROR_DRIVERS_LEAKING_LOCKED_PAGES                                        syscall.Errno = 729
+	ERROR_WAKE_SYSTEM                                                         syscall.Errno = 730
+	ERROR_WAIT_1                                                              syscall.Errno = 731
+	ERROR_WAIT_2                                                              syscall.Errno = 732
+	ERROR_WAIT_3                                                              syscall.Errno = 733
+	ERROR_WAIT_63                                                             syscall.Errno = 734
+	ERROR_ABANDONED_WAIT_0                                                    syscall.Errno = 735
+	ERROR_ABANDONED_WAIT_63                                                   syscall.Errno = 736
+	ERROR_USER_APC                                                            syscall.Errno = 737
+	ERROR_KERNEL_APC                                                          syscall.Errno = 738
+	ERROR_ALERTED                                                             syscall.Errno = 739
+	ERROR_ELEVATION_REQUIRED                                                  syscall.Errno = 740
+	ERROR_REPARSE                                                             syscall.Errno = 741
+	ERROR_OPLOCK_BREAK_IN_PROGRESS                                            syscall.Errno = 742
+	ERROR_VOLUME_MOUNTED                                                      syscall.Errno = 743
+	ERROR_RXACT_COMMITTED                                                     syscall.Errno = 744
+	ERROR_NOTIFY_CLEANUP                                                      syscall.Errno = 745
+	ERROR_PRIMARY_TRANSPORT_CONNECT_FAILED                                    syscall.Errno = 746
+	ERROR_PAGE_FAULT_TRANSITION                                               syscall.Errno = 747
+	ERROR_PAGE_FAULT_DEMAND_ZERO                                              syscall.Errno = 748
+	ERROR_PAGE_FAULT_COPY_ON_WRITE                                            syscall.Errno = 749
+	ERROR_PAGE_FAULT_GUARD_PAGE                                               syscall.Errno = 750
+	ERROR_PAGE_FAULT_PAGING_FILE                                              syscall.Errno = 751
+	ERROR_CACHE_PAGE_LOCKED                                                   syscall.Errno = 752
+	ERROR_CRASH_DUMP                                                          syscall.Errno = 753
+	ERROR_BUFFER_ALL_ZEROS                                                    syscall.Errno = 754
+	ERROR_REPARSE_OBJECT                                                      syscall.Errno = 755
+	ERROR_RESOURCE_REQUIREMENTS_CHANGED                                       syscall.Errno = 756
+	ERROR_TRANSLATION_COMPLETE                                                syscall.Errno = 757
+	ERROR_NOTHING_TO_TERMINATE                                                syscall.Errno = 758
+	ERROR_PROCESS_NOT_IN_JOB                                                  syscall.Errno = 759
+	ERROR_PROCESS_IN_JOB                                                      syscall.Errno = 760
+	ERROR_VOLSNAP_HIBERNATE_READY                                             syscall.Errno = 761
+	ERROR_FSFILTER_OP_COMPLETED_SUCCESSFULLY                                  syscall.Errno = 762
+	ERROR_INTERRUPT_VECTOR_ALREADY_CONNECTED                                  syscall.Errno = 763
+	ERROR_INTERRUPT_STILL_CONNECTED                                           syscall.Errno = 764
+	ERROR_WAIT_FOR_OPLOCK                                                     syscall.Errno = 765
+	ERROR_DBG_EXCEPTION_HANDLED                                               syscall.Errno = 766
+	ERROR_DBG_CONTINUE                                                        syscall.Errno = 767
+	ERROR_CALLBACK_POP_STACK                                                  syscall.Errno = 768
+	ERROR_COMPRESSION_DISABLED                                                syscall.Errno = 769
+	ERROR_CANTFETCHBACKWARDS                                                  syscall.Errno = 770
+	ERROR_CANTSCROLLBACKWARDS                                                 syscall.Errno = 771
+	ERROR_ROWSNOTRELEASED                                                     syscall.Errno = 772
+	ERROR_BAD_ACCESSOR_FLAGS                                                  syscall.Errno = 773
+	ERROR_ERRORS_ENCOUNTERED                                                  syscall.Errno = 774
+	ERROR_NOT_CAPABLE                                                         syscall.Errno = 775
+	ERROR_REQUEST_OUT_OF_SEQUENCE                                             syscall.Errno = 776
+	ERROR_VERSION_PARSE_ERROR                                                 syscall.Errno = 777
+	ERROR_BADSTARTPOSITION                                                    syscall.Errno = 778
+	ERROR_MEMORY_HARDWARE                                                     syscall.Errno = 779
+	ERROR_DISK_REPAIR_DISABLED                                                syscall.Errno = 780
+	ERROR_INSUFFICIENT_RESOURCE_FOR_SPECIFIED_SHARED_SECTION_SIZE             syscall.Errno = 781
+	ERROR_SYSTEM_POWERSTATE_TRANSITION                                        syscall.Errno = 782
+	ERROR_SYSTEM_POWERSTATE_COMPLEX_TRANSITION                                syscall.Errno = 783
+	ERROR_MCA_EXCEPTION                                                       syscall.Errno = 784
+	ERROR_ACCESS_AUDIT_BY_POLICY                                              syscall.Errno = 785
+	ERROR_ACCESS_DISABLED_NO_SAFER_UI_BY_POLICY                               syscall.Errno = 786
+	ERROR_ABANDON_HIBERFILE                                                   syscall.Errno = 787
+	ERROR_LOST_WRITEBEHIND_DATA_NETWORK_DISCONNECTED                          syscall.Errno = 788
+	ERROR_LOST_WRITEBEHIND_DATA_NETWORK_SERVER_ERROR                          syscall.Errno = 789
+	ERROR_LOST_WRITEBEHIND_DATA_LOCAL_DISK_ERROR                              syscall.Errno = 790
+	ERROR_BAD_MCFG_TABLE                                                      syscall.Errno = 791
+	ERROR_DISK_REPAIR_REDIRECTED                                              syscall.Errno = 792
+	ERROR_DISK_REPAIR_UNSUCCESSFUL                                            syscall.Errno = 793
+	ERROR_CORRUPT_LOG_OVERFULL                                                syscall.Errno = 794
+	ERROR_CORRUPT_LOG_CORRUPTED                                               syscall.Errno = 795
+	ERROR_CORRUPT_LOG_UNAVAILABLE                                             syscall.Errno = 796
+	ERROR_CORRUPT_LOG_DELETED_FULL                                            syscall.Errno = 797
+	ERROR_CORRUPT_LOG_CLEARED                                                 syscall.Errno = 798
+	ERROR_ORPHAN_NAME_EXHAUSTED                                               syscall.Errno = 799
+	ERROR_OPLOCK_SWITCHED_TO_NEW_HANDLE                                       syscall.Errno = 800
+	ERROR_CANNOT_GRANT_REQUESTED_OPLOCK                                       syscall.Errno = 801
+	ERROR_CANNOT_BREAK_OPLOCK                                                 syscall.Errno = 802
+	ERROR_OPLOCK_HANDLE_CLOSED                                                syscall.Errno = 803
+	ERROR_NO_ACE_CONDITION                                                    syscall.Errno = 804
+	ERROR_INVALID_ACE_CONDITION                                               syscall.Errno = 805
+	ERROR_FILE_HANDLE_REVOKED                                                 syscall.Errno = 806
+	ERROR_IMAGE_AT_DIFFERENT_BASE                                             syscall.Errno = 807
+	ERROR_ENCRYPTED_IO_NOT_POSSIBLE                                           syscall.Errno = 808
+	ERROR_FILE_METADATA_OPTIMIZATION_IN_PROGRESS                              syscall.Errno = 809
+	ERROR_QUOTA_ACTIVITY                                                      syscall.Errno = 810
+	ERROR_HANDLE_REVOKED                                                      syscall.Errno = 811
+	ERROR_CALLBACK_INVOKE_INLINE                                              syscall.Errno = 812
+	ERROR_CPU_SET_INVALID                                                     syscall.Errno = 813
+	ERROR_ENCLAVE_NOT_TERMINATED                                              syscall.Errno = 814
+	ERROR_ENCLAVE_VIOLATION                                                   syscall.Errno = 815
+	ERROR_EA_ACCESS_DENIED                                                    syscall.Errno = 994
+	ERROR_OPERATION_ABORTED                                                   syscall.Errno = 995
+	ERROR_IO_INCOMPLETE                                                       syscall.Errno = 996
+	ERROR_IO_PENDING                                                          syscall.Errno = 997
+	ERROR_NOACCESS                                                            syscall.Errno = 998
+	ERROR_SWAPERROR                                                           syscall.Errno = 999
+	ERROR_STACK_OVERFLOW                                                      syscall.Errno = 1001
+	ERROR_INVALID_MESSAGE                                                     syscall.Errno = 1002
+	ERROR_CAN_NOT_COMPLETE                                                    syscall.Errno = 1003
+	ERROR_INVALID_FLAGS                                                       syscall.Errno = 1004
+	ERROR_UNRECOGNIZED_VOLUME                                                 syscall.Errno = 1005
+	ERROR_FILE_INVALID                                                        syscall.Errno = 1006
+	ERROR_FULLSCREEN_MODE                                                     syscall.Errno = 1007
+	ERROR_NO_TOKEN                                                            syscall.Errno = 1008
+	ERROR_BADDB                                                               syscall.Errno = 1009
+	ERROR_BADKEY                                                              syscall.Errno = 1010
+	ERROR_CANTOPEN                                                            syscall.Errno = 1011
+	ERROR_CANTREAD                                                            syscall.Errno = 1012
+	ERROR_CANTWRITE                                                           syscall.Errno = 1013
+	ERROR_REGISTRY_RECOVERED                                                  syscall.Errno = 1014
+	ERROR_REGISTRY_CORRUPT                                                    syscall.Errno = 1015
+	ERROR_REGISTRY_IO_FAILED                                                  syscall.Errno = 1016
+	ERROR_NOT_REGISTRY_FILE                                                   syscall.Errno = 1017
+	ERROR_KEY_DELETED                                                         syscall.Errno = 1018
+	ERROR_NO_LOG_SPACE                                                        syscall.Errno = 1019
+	ERROR_KEY_HAS_CHILDREN                                                    syscall.Errno = 1020
+	ERROR_CHILD_MUST_BE_VOLATILE                                              syscall.Errno = 1021
+	ERROR_NOTIFY_ENUM_DIR                                                     syscall.Errno = 1022
+	ERROR_DEPENDENT_SERVICES_RUNNING                                          syscall.Errno = 1051
+	ERROR_INVALID_SERVICE_CONTROL                                             syscall.Errno = 1052
+	ERROR_SERVICE_REQUEST_TIMEOUT                                             syscall.Errno = 1053
+	ERROR_SERVICE_NO_THREAD                                                   syscall.Errno = 1054
+	ERROR_SERVICE_DATABASE_LOCKED                                             syscall.Errno = 1055
+	ERROR_SERVICE_ALREADY_RUNNING                                             syscall.Errno = 1056
+	ERROR_INVALID_SERVICE_ACCOUNT                                             syscall.Errno = 1057
+	ERROR_SERVICE_DISABLED                                                    syscall.Errno = 1058
+	ERROR_CIRCULAR_DEPENDENCY                                                 syscall.Errno = 1059
+	ERROR_SERVICE_DOES_NOT_EXIST                                              syscall.Errno = 1060
+	ERROR_SERVICE_CANNOT_ACCEPT_CTRL                                          syscall.Errno = 1061
+	ERROR_SERVICE_NOT_ACTIVE                                                  syscall.Errno = 1062
+	ERROR_FAILED_SERVICE_CONTROLLER_CONNECT                                   syscall.Errno = 1063
+	ERROR_EXCEPTION_IN_SERVICE                                                syscall.Errno = 1064
+	ERROR_DATABASE_DOES_NOT_EXIST                                             syscall.Errno = 1065
+	ERROR_SERVICE_SPECIFIC_ERROR                                              syscall.Errno = 1066
+	ERROR_PROCESS_ABORTED                                                     syscall.Errno = 1067
+	ERROR_SERVICE_DEPENDENCY_FAIL                                             syscall.Errno = 1068
+	ERROR_SERVICE_LOGON_FAILED                                                syscall.Errno = 1069
+	ERROR_SERVICE_START_HANG                                                  syscall.Errno = 1070
+	ERROR_INVALID_SERVICE_LOCK                                                syscall.Errno = 1071
+	ERROR_SERVICE_MARKED_FOR_DELETE                                           syscall.Errno = 1072
+	ERROR_SERVICE_EXISTS                                                      syscall.Errno = 1073
+	ERROR_ALREADY_RUNNING_LKG                                                 syscall.Errno = 1074
+	ERROR_SERVICE_DEPENDENCY_DELETED                                          syscall.Errno = 1075
+	ERROR_BOOT_ALREADY_ACCEPTED                                               syscall.Errno = 1076
+	ERROR_SERVICE_NEVER_STARTED                                               syscall.Errno = 1077
+	ERROR_DUPLICATE_SERVICE_NAME                                              syscall.Errno = 1078
+	ERROR_DIFFERENT_SERVICE_ACCOUNT                                           syscall.Errno = 1079
+	ERROR_CANNOT_DETECT_DRIVER_FAILURE                                        syscall.Errno = 1080
+	ERROR_CANNOT_DETECT_PROCESS_ABORT                                         syscall.Errno = 1081
+	ERROR_NO_RECOVERY_PROGRAM                                                 syscall.Errno = 1082
+	ERROR_SERVICE_NOT_IN_EXE                                                  syscall.Errno = 1083
+	ERROR_NOT_SAFEBOOT_SERVICE                                                syscall.Errno = 1084
+	ERROR_END_OF_MEDIA                                                        syscall.Errno = 1100
+	ERROR_FILEMARK_DETECTED                                                   syscall.Errno = 1101
+	ERROR_BEGINNING_OF_MEDIA                                                  syscall.Errno = 1102
+	ERROR_SETMARK_DETECTED                                                    syscall.Errno = 1103
+	ERROR_NO_DATA_DETECTED                                                    syscall.Errno = 1104
+	ERROR_PARTITION_FAILURE                                                   syscall.Errno = 1105
+	ERROR_INVALID_BLOCK_LENGTH                                                syscall.Errno = 1106
+	ERROR_DEVICE_NOT_PARTITIONED                                              syscall.Errno = 1107
+	ERROR_UNABLE_TO_LOCK_MEDIA                                                syscall.Errno = 1108
+	ERROR_UNABLE_TO_UNLOAD_MEDIA                                              syscall.Errno = 1109
+	ERROR_MEDIA_CHANGED                                                       syscall.Errno = 1110
+	ERROR_BUS_RESET                                                           syscall.Errno = 1111
+	ERROR_NO_MEDIA_IN_DRIVE                                                   syscall.Errno = 1112
+	ERROR_NO_UNICODE_TRANSLATION                                              syscall.Errno = 1113
+	ERROR_DLL_INIT_FAILED                                                     syscall.Errno = 1114
+	ERROR_SHUTDOWN_IN_PROGRESS                                                syscall.Errno = 1115
+	ERROR_NO_SHUTDOWN_IN_PROGRESS                                             syscall.Errno = 1116
+	ERROR_IO_DEVICE                                                           syscall.Errno = 1117
+	ERROR_SERIAL_NO_DEVICE                                                    syscall.Errno = 1118
+	ERROR_IRQ_BUSY                                                            syscall.Errno = 1119
+	ERROR_MORE_WRITES                                                         syscall.Errno = 1120
+	ERROR_COUNTER_TIMEOUT                                                     syscall.Errno = 1121
+	ERROR_FLOPPY_ID_MARK_NOT_FOUND                                            syscall.Errno = 1122
+	ERROR_FLOPPY_WRONG_CYLINDER                                               syscall.Errno = 1123
+	ERROR_FLOPPY_UNKNOWN_ERROR                                                syscall.Errno = 1124
+	ERROR_FLOPPY_BAD_REGISTERS                                                syscall.Errno = 1125
+	ERROR_DISK_RECALIBRATE_FAILED                                             syscall.Errno = 1126
+	ERROR_DISK_OPERATION_FAILED                                               syscall.Errno = 1127
+	ERROR_DISK_RESET_FAILED                                                   syscall.Errno = 1128
+	ERROR_EOM_OVERFLOW                                                        syscall.Errno = 1129
+	ERROR_NOT_ENOUGH_SERVER_MEMORY                                            syscall.Errno = 1130
+	ERROR_POSSIBLE_DEADLOCK                                                   syscall.Errno = 1131
+	ERROR_MAPPED_ALIGNMENT                                                    syscall.Errno = 1132
+	ERROR_SET_POWER_STATE_VETOED                                              syscall.Errno = 1140
+	ERROR_SET_POWER_STATE_FAILED                                              syscall.Errno = 1141
+	ERROR_TOO_MANY_LINKS                                                      syscall.Errno = 1142
+	ERROR_OLD_WIN_VERSION                                                     syscall.Errno = 1150
+	ERROR_APP_WRONG_OS                                                        syscall.Errno = 1151
+	ERROR_SINGLE_INSTANCE_APP                                                 syscall.Errno = 1152
+	ERROR_RMODE_APP                                                           syscall.Errno = 1153
+	ERROR_INVALID_DLL                                                         syscall.Errno = 1154
+	ERROR_NO_ASSOCIATION                                                      syscall.Errno = 1155
+	ERROR_DDE_FAIL                                                            syscall.Errno = 1156
+	ERROR_DLL_NOT_FOUND                                                       syscall.Errno = 1157
+	ERROR_NO_MORE_USER_HANDLES                                                syscall.Errno = 1158
+	ERROR_MESSAGE_SYNC_ONLY                                                   syscall.Errno = 1159
+	ERROR_SOURCE_ELEMENT_EMPTY                                                syscall.Errno = 1160
+	ERROR_DESTINATION_ELEMENT_FULL                                            syscall.Errno = 1161
+	ERROR_ILLEGAL_ELEMENT_ADDRESS                                             syscall.Errno = 1162
+	ERROR_MAGAZINE_NOT_PRESENT                                                syscall.Errno = 1163
+	ERROR_DEVICE_REINITIALIZATION_NEEDED                                      syscall.Errno = 1164
+	ERROR_DEVICE_REQUIRES_CLEANING                                            syscall.Errno = 1165
+	ERROR_DEVICE_DOOR_OPEN                                                    syscall.Errno = 1166
+	ERROR_DEVICE_NOT_CONNECTED                                                syscall.Errno = 1167
+	ERROR_NOT_FOUND                                                           syscall.Errno = 1168
+	ERROR_NO_MATCH                                                            syscall.Errno = 1169
+	ERROR_SET_NOT_FOUND                                                       syscall.Errno = 1170
+	ERROR_POINT_NOT_FOUND                                                     syscall.Errno = 1171
+	ERROR_NO_TRACKING_SERVICE                                                 syscall.Errno = 1172
+	ERROR_NO_VOLUME_ID                                                        syscall.Errno = 1173
+	ERROR_UNABLE_TO_REMOVE_REPLACED                                           syscall.Errno = 1175
+	ERROR_UNABLE_TO_MOVE_REPLACEMENT                                          syscall.Errno = 1176
+	ERROR_UNABLE_TO_MOVE_REPLACEMENT_2                                        syscall.Errno = 1177
+	ERROR_JOURNAL_DELETE_IN_PROGRESS                                          syscall.Errno = 1178
+	ERROR_JOURNAL_NOT_ACTIVE                                                  syscall.Errno = 1179
+	ERROR_POTENTIAL_FILE_FOUND                                                syscall.Errno = 1180
+	ERROR_JOURNAL_ENTRY_DELETED                                               syscall.Errno = 1181
+	ERROR_SHUTDOWN_IS_SCHEDULED                                               syscall.Errno = 1190
+	ERROR_SHUTDOWN_USERS_LOGGED_ON                                            syscall.Errno = 1191
+	ERROR_BAD_DEVICE                                                          syscall.Errno = 1200
+	ERROR_CONNECTION_UNAVAIL                                                  syscall.Errno = 1201
+	ERROR_DEVICE_ALREADY_REMEMBERED                                           syscall.Errno = 1202
+	ERROR_NO_NET_OR_BAD_PATH                                                  syscall.Errno = 1203
+	ERROR_BAD_PROVIDER                                                        syscall.Errno = 1204
+	ERROR_CANNOT_OPEN_PROFILE                                                 syscall.Errno = 1205
+	ERROR_BAD_PROFILE                                                         syscall.Errno = 1206
+	ERROR_NOT_CONTAINER                                                       syscall.Errno = 1207
+	ERROR_EXTENDED_ERROR                                                      syscall.Errno = 1208
+	ERROR_INVALID_GROUPNAME                                                   syscall.Errno = 1209
+	ERROR_INVALID_COMPUTERNAME                                                syscall.Errno = 1210
+	ERROR_INVALID_EVENTNAME                                                   syscall.Errno = 1211
+	ERROR_INVALID_DOMAINNAME                                                  syscall.Errno = 1212
+	ERROR_INVALID_SERVICENAME                                                 syscall.Errno = 1213
+	ERROR_INVALID_NETNAME                                                     syscall.Errno = 1214
+	ERROR_INVALID_SHARENAME                                                   syscall.Errno = 1215
+	ERROR_INVALID_PASSWORDNAME                                                syscall.Errno = 1216
+	ERROR_INVALID_MESSAGENAME                                                 syscall.Errno = 1217
+	ERROR_INVALID_MESSAGEDEST                                                 syscall.Errno = 1218
+	ERROR_SESSION_CREDENTIAL_CONFLICT                                         syscall.Errno = 1219
+	ERROR_REMOTE_SESSION_LIMIT_EXCEEDED                                       syscall.Errno = 1220
+	ERROR_DUP_DOMAINNAME                                                      syscall.Errno = 1221
+	ERROR_NO_NETWORK                                                          syscall.Errno = 1222
+	ERROR_CANCELLED                                                           syscall.Errno = 1223
+	ERROR_USER_MAPPED_FILE                                                    syscall.Errno = 1224
+	ERROR_CONNECTION_REFUSED                                                  syscall.Errno = 1225
+	ERROR_GRACEFUL_DISCONNECT                                                 syscall.Errno = 1226
+	ERROR_ADDRESS_ALREADY_ASSOCIATED                                          syscall.Errno = 1227
+	ERROR_ADDRESS_NOT_ASSOCIATED                                              syscall.Errno = 1228
+	ERROR_CONNECTION_INVALID                                                  syscall.Errno = 1229
+	ERROR_CONNECTION_ACTIVE                                                   syscall.Errno = 1230
+	ERROR_NETWORK_UNREACHABLE                                                 syscall.Errno = 1231
+	ERROR_HOST_UNREACHABLE                                                    syscall.Errno = 1232
+	ERROR_PROTOCOL_UNREACHABLE                                                syscall.Errno = 1233
+	ERROR_PORT_UNREACHABLE                                                    syscall.Errno = 1234
+	ERROR_REQUEST_ABORTED                                                     syscall.Errno = 1235
+	ERROR_CONNECTION_ABORTED                                                  syscall.Errno = 1236
+	ERROR_RETRY                                                               syscall.Errno = 1237
+	ERROR_CONNECTION_COUNT_LIMIT                                              syscall.Errno = 1238
+	ERROR_LOGIN_TIME_RESTRICTION                                              syscall.Errno = 1239
+	ERROR_LOGIN_WKSTA_RESTRICTION                                             syscall.Errno = 1240
+	ERROR_INCORRECT_ADDRESS                                                   syscall.Errno = 1241
+	ERROR_ALREADY_REGISTERED                                                  syscall.Errno = 1242
+	ERROR_SERVICE_NOT_FOUND                                                   syscall.Errno = 1243
+	ERROR_NOT_AUTHENTICATED                                                   syscall.Errno = 1244
+	ERROR_NOT_LOGGED_ON                                                       syscall.Errno = 1245
+	ERROR_CONTINUE                                                            syscall.Errno = 1246
+	ERROR_ALREADY_INITIALIZED                                                 syscall.Errno = 1247
+	ERROR_NO_MORE_DEVICES                                                     syscall.Errno = 1248
+	ERROR_NO_SUCH_SITE                                                        syscall.Errno = 1249
+	ERROR_DOMAIN_CONTROLLER_EXISTS                                            syscall.Errno = 1250
+	ERROR_ONLY_IF_CONNECTED                                                   syscall.Errno = 1251
+	ERROR_OVERRIDE_NOCHANGES                                                  syscall.Errno = 1252
+	ERROR_BAD_USER_PROFILE                                                    syscall.Errno = 1253
+	ERROR_NOT_SUPPORTED_ON_SBS                                                syscall.Errno = 1254
+	ERROR_SERVER_SHUTDOWN_IN_PROGRESS                                         syscall.Errno = 1255
+	ERROR_HOST_DOWN                                                           syscall.Errno = 1256
+	ERROR_NON_ACCOUNT_SID                                                     syscall.Errno = 1257
+	ERROR_NON_DOMAIN_SID                                                      syscall.Errno = 1258
+	ERROR_APPHELP_BLOCK                                                       syscall.Errno = 1259
+	ERROR_ACCESS_DISABLED_BY_POLICY                                           syscall.Errno = 1260
+	ERROR_REG_NAT_CONSUMPTION                                                 syscall.Errno = 1261
+	ERROR_CSCSHARE_OFFLINE                                                    syscall.Errno = 1262
+	ERROR_PKINIT_FAILURE                                                      syscall.Errno = 1263
+	ERROR_SMARTCARD_SUBSYSTEM_FAILURE                                         syscall.Errno = 1264
+	ERROR_DOWNGRADE_DETECTED                                                  syscall.Errno = 1265
+	ERROR_MACHINE_LOCKED                                                      syscall.Errno = 1271
+	ERROR_SMB_GUEST_LOGON_BLOCKED                                             syscall.Errno = 1272
+	ERROR_CALLBACK_SUPPLIED_INVALID_DATA                                      syscall.Errno = 1273
+	ERROR_SYNC_FOREGROUND_REFRESH_REQUIRED                                    syscall.Errno = 1274
+	ERROR_DRIVER_BLOCKED                                                      syscall.Errno = 1275
+	ERROR_INVALID_IMPORT_OF_NON_DLL                                           syscall.Errno = 1276
+	ERROR_ACCESS_DISABLED_WEBBLADE                                            syscall.Errno = 1277
+	ERROR_ACCESS_DISABLED_WEBBLADE_TAMPER                                     syscall.Errno = 1278
+	ERROR_RECOVERY_FAILURE                                                    syscall.Errno = 1279
+	ERROR_ALREADY_FIBER                                                       syscall.Errno = 1280
+	ERROR_ALREADY_THREAD                                                      syscall.Errno = 1281
+	ERROR_STACK_BUFFER_OVERRUN                                                syscall.Errno = 1282
+	ERROR_PARAMETER_QUOTA_EXCEEDED                                            syscall.Errno = 1283
+	ERROR_DEBUGGER_INACTIVE                                                   syscall.Errno = 1284
+	ERROR_DELAY_LOAD_FAILED                                                   syscall.Errno = 1285
+	ERROR_VDM_DISALLOWED                                                      syscall.Errno = 1286
+	ERROR_UNIDENTIFIED_ERROR                                                  syscall.Errno = 1287
+	ERROR_INVALID_CRUNTIME_PARAMETER                                          syscall.Errno = 1288
+	ERROR_BEYOND_VDL                                                          syscall.Errno = 1289
+	ERROR_INCOMPATIBLE_SERVICE_SID_TYPE                                       syscall.Errno = 1290
+	ERROR_DRIVER_PROCESS_TERMINATED                                           syscall.Errno = 1291
+	ERROR_IMPLEMENTATION_LIMIT                                                syscall.Errno = 1292
+	ERROR_PROCESS_IS_PROTECTED                                                syscall.Errno = 1293
+	ERROR_SERVICE_NOTIFY_CLIENT_LAGGING                                       syscall.Errno = 1294
+	ERROR_DISK_QUOTA_EXCEEDED                                                 syscall.Errno = 1295
+	ERROR_CONTENT_BLOCKED                                                     syscall.Errno = 1296
+	ERROR_INCOMPATIBLE_SERVICE_PRIVILEGE                                      syscall.Errno = 1297
+	ERROR_APP_HANG                                                            syscall.Errno = 1298
+	ERROR_INVALID_LABEL                                                       syscall.Errno = 1299
+	ERROR_NOT_ALL_ASSIGNED                                                    syscall.Errno = 1300
+	ERROR_SOME_NOT_MAPPED                                                     syscall.Errno = 1301
+	ERROR_NO_QUOTAS_FOR_ACCOUNT                                               syscall.Errno = 1302
+	ERROR_LOCAL_USER_SESSION_KEY                                              syscall.Errno = 1303
+	ERROR_NULL_LM_PASSWORD                                                    syscall.Errno = 1304
+	ERROR_UNKNOWN_REVISION                                                    syscall.Errno = 1305
+	ERROR_REVISION_MISMATCH                                                   syscall.Errno = 1306
+	ERROR_INVALID_OWNER                                                       syscall.Errno = 1307
+	ERROR_INVALID_PRIMARY_GROUP                                               syscall.Errno = 1308
+	ERROR_NO_IMPERSONATION_TOKEN                                              syscall.Errno = 1309
+	ERROR_CANT_DISABLE_MANDATORY                                              syscall.Errno = 1310
+	ERROR_NO_LOGON_SERVERS                                                    syscall.Errno = 1311
+	ERROR_NO_SUCH_LOGON_SESSION                                               syscall.Errno = 1312
+	ERROR_NO_SUCH_PRIVILEGE                                                   syscall.Errno = 1313
+	ERROR_PRIVILEGE_NOT_HELD                                                  syscall.Errno = 1314
+	ERROR_INVALID_ACCOUNT_NAME                                                syscall.Errno = 1315
+	ERROR_USER_EXISTS                                                         syscall.Errno = 1316
+	ERROR_NO_SUCH_USER                                                        syscall.Errno = 1317
+	ERROR_GROUP_EXISTS                                                        syscall.Errno = 1318
+	ERROR_NO_SUCH_GROUP                                                       syscall.Errno = 1319
+	ERROR_MEMBER_IN_GROUP                                                     syscall.Errno = 1320
+	ERROR_MEMBER_NOT_IN_GROUP                                                 syscall.Errno = 1321
+	ERROR_LAST_ADMIN                                                          syscall.Errno = 1322
+	ERROR_WRONG_PASSWORD                                                      syscall.Errno = 1323
+	ERROR_ILL_FORMED_PASSWORD                                                 syscall.Errno = 1324
+	ERROR_PASSWORD_RESTRICTION                                                syscall.Errno = 1325
+	ERROR_LOGON_FAILURE                                                       syscall.Errno = 1326
+	ERROR_ACCOUNT_RESTRICTION                                                 syscall.Errno = 1327
+	ERROR_INVALID_LOGON_HOURS                                                 syscall.Errno = 1328
+	ERROR_INVALID_WORKSTATION                                                 syscall.Errno = 1329
+	ERROR_PASSWORD_EXPIRED                                                    syscall.Errno = 1330
+	ERROR_ACCOUNT_DISABLED                                                    syscall.Errno = 1331
+	ERROR_NONE_MAPPED                                                         syscall.Errno = 1332
+	ERROR_TOO_MANY_LUIDS_REQUESTED                                            syscall.Errno = 1333
+	ERROR_LUIDS_EXHAUSTED                                                     syscall.Errno = 1334
+	ERROR_INVALID_SUB_AUTHORITY                                               syscall.Errno = 1335
+	ERROR_INVALID_ACL                                                         syscall.Errno = 1336
+	ERROR_INVALID_SID                                                         syscall.Errno = 1337
+	ERROR_INVALID_SECURITY_DESCR                                              syscall.Errno = 1338
+	ERROR_BAD_INHERITANCE_ACL                                                 syscall.Errno = 1340
+	ERROR_SERVER_DISABLED                                                     syscall.Errno = 1341
+	ERROR_SERVER_NOT_DISABLED                                                 syscall.Errno = 1342
+	ERROR_INVALID_ID_AUTHORITY                                                syscall.Errno = 1343
+	ERROR_ALLOTTED_SPACE_EXCEEDED                                             syscall.Errno = 1344
+	ERROR_INVALID_GROUP_ATTRIBUTES                                            syscall.Errno = 1345
+	ERROR_BAD_IMPERSONATION_LEVEL                                             syscall.Errno = 1346
+	ERROR_CANT_OPEN_ANONYMOUS                                                 syscall.Errno = 1347
+	ERROR_BAD_VALIDATION_CLASS                                                syscall.Errno = 1348
+	ERROR_BAD_TOKEN_TYPE                                                      syscall.Errno = 1349
+	ERROR_NO_SECURITY_ON_OBJECT                                               syscall.Errno = 1350
+	ERROR_CANT_ACCESS_DOMAIN_INFO                                             syscall.Errno = 1351
+	ERROR_INVALID_SERVER_STATE                                                syscall.Errno = 1352
+	ERROR_INVALID_DOMAIN_STATE                                                syscall.Errno = 1353
+	ERROR_INVALID_DOMAIN_ROLE                                                 syscall.Errno = 1354
+	ERROR_NO_SUCH_DOMAIN                                                      syscall.Errno = 1355
+	ERROR_DOMAIN_EXISTS                                                       syscall.Errno = 1356
+	ERROR_DOMAIN_LIMIT_EXCEEDED                                               syscall.Errno = 1357
+	ERROR_INTERNAL_DB_CORRUPTION                                              syscall.Errno = 1358
+	ERROR_INTERNAL_ERROR                                                      syscall.Errno = 1359
+	ERROR_GENERIC_NOT_MAPPED                                                  syscall.Errno = 1360
+	ERROR_BAD_DESCRIPTOR_FORMAT                                               syscall.Errno = 1361
+	ERROR_NOT_LOGON_PROCESS                                                   syscall.Errno = 1362
+	ERROR_LOGON_SESSION_EXISTS                                                syscall.Errno = 1363
+	ERROR_NO_SUCH_PACKAGE                                                     syscall.Errno = 1364
+	ERROR_BAD_LOGON_SESSION_STATE                                             syscall.Errno = 1365
+	ERROR_LOGON_SESSION_COLLISION                                             syscall.Errno = 1366
+	ERROR_INVALID_LOGON_TYPE                                                  syscall.Errno = 1367
+	ERROR_CANNOT_IMPERSONATE                                                  syscall.Errno = 1368
+	ERROR_RXACT_INVALID_STATE                                                 syscall.Errno = 1369
+	ERROR_RXACT_COMMIT_FAILURE                                                syscall.Errno = 1370
+	ERROR_SPECIAL_ACCOUNT                                                     syscall.Errno = 1371
+	ERROR_SPECIAL_GROUP                                                       syscall.Errno = 1372
+	ERROR_SPECIAL_USER                                                        syscall.Errno = 1373
+	ERROR_MEMBERS_PRIMARY_GROUP                                               syscall.Errno = 1374
+	ERROR_TOKEN_ALREADY_IN_USE                                                syscall.Errno = 1375
+	ERROR_NO_SUCH_ALIAS                                                       syscall.Errno = 1376
+	ERROR_MEMBER_NOT_IN_ALIAS                                                 syscall.Errno = 1377
+	ERROR_MEMBER_IN_ALIAS                                                     syscall.Errno = 1378
+	ERROR_ALIAS_EXISTS                                                        syscall.Errno = 1379
+	ERROR_LOGON_NOT_GRANTED                                                   syscall.Errno = 1380
+	ERROR_TOO_MANY_SECRETS                                                    syscall.Errno = 1381
+	ERROR_SECRET_TOO_LONG                                                     syscall.Errno = 1382
+	ERROR_INTERNAL_DB_ERROR                                                   syscall.Errno = 1383
+	ERROR_TOO_MANY_CONTEXT_IDS                                                syscall.Errno = 1384
+	ERROR_LOGON_TYPE_NOT_GRANTED                                              syscall.Errno = 1385
+	ERROR_NT_CROSS_ENCRYPTION_REQUIRED                                        syscall.Errno = 1386
+	ERROR_NO_SUCH_MEMBER                                                      syscall.Errno = 1387
+	ERROR_INVALID_MEMBER                                                      syscall.Errno = 1388
+	ERROR_TOO_MANY_SIDS                                                       syscall.Errno = 1389
+	ERROR_LM_CROSS_ENCRYPTION_REQUIRED                                        syscall.Errno = 1390
+	ERROR_NO_INHERITANCE                                                      syscall.Errno = 1391
+	ERROR_FILE_CORRUPT                                                        syscall.Errno = 1392
+	ERROR_DISK_CORRUPT                                                        syscall.Errno = 1393
+	ERROR_NO_USER_SESSION_KEY                                                 syscall.Errno = 1394
+	ERROR_LICENSE_QUOTA_EXCEEDED                                              syscall.Errno = 1395
+	ERROR_WRONG_TARGET_NAME                                                   syscall.Errno = 1396
+	ERROR_MUTUAL_AUTH_FAILED                                                  syscall.Errno = 1397
+	ERROR_TIME_SKEW                                                           syscall.Errno = 1398
+	ERROR_CURRENT_DOMAIN_NOT_ALLOWED                                          syscall.Errno = 1399
+	ERROR_INVALID_WINDOW_HANDLE                                               syscall.Errno = 1400
+	ERROR_INVALID_MENU_HANDLE                                                 syscall.Errno = 1401
+	ERROR_INVALID_CURSOR_HANDLE                                               syscall.Errno = 1402
+	ERROR_INVALID_ACCEL_HANDLE                                                syscall.Errno = 1403
+	ERROR_INVALID_HOOK_HANDLE                                                 syscall.Errno = 1404
+	ERROR_INVALID_DWP_HANDLE                                                  syscall.Errno = 1405
+	ERROR_TLW_WITH_WSCHILD                                                    syscall.Errno = 1406
+	ERROR_CANNOT_FIND_WND_CLASS                                               syscall.Errno = 1407
+	ERROR_WINDOW_OF_OTHER_THREAD                                              syscall.Errno = 1408
+	ERROR_HOTKEY_ALREADY_REGISTERED                                           syscall.Errno = 1409
+	ERROR_CLASS_ALREADY_EXISTS                                                syscall.Errno = 1410
+	ERROR_CLASS_DOES_NOT_EXIST                                                syscall.Errno = 1411
+	ERROR_CLASS_HAS_WINDOWS                                                   syscall.Errno = 1412
+	ERROR_INVALID_INDEX                                                       syscall.Errno = 1413
+	ERROR_INVALID_ICON_HANDLE                                                 syscall.Errno = 1414
+	ERROR_PRIVATE_DIALOG_INDEX                                                syscall.Errno = 1415
+	ERROR_LISTBOX_ID_NOT_FOUND                                                syscall.Errno = 1416
+	ERROR_NO_WILDCARD_CHARACTERS                                              syscall.Errno = 1417
+	ERROR_CLIPBOARD_NOT_OPEN                                                  syscall.Errno = 1418
+	ERROR_HOTKEY_NOT_REGISTERED                                               syscall.Errno = 1419
+	ERROR_WINDOW_NOT_DIALOG                                                   syscall.Errno = 1420
+	ERROR_CONTROL_ID_NOT_FOUND                                                syscall.Errno = 1421
+	ERROR_INVALID_COMBOBOX_MESSAGE                                            syscall.Errno = 1422
+	ERROR_WINDOW_NOT_COMBOBOX                                                 syscall.Errno = 1423
+	ERROR_INVALID_EDIT_HEIGHT                                                 syscall.Errno = 1424
+	ERROR_DC_NOT_FOUND                                                        syscall.Errno = 1425
+	ERROR_INVALID_HOOK_FILTER                                                 syscall.Errno = 1426
+	ERROR_INVALID_FILTER_PROC                                                 syscall.Errno = 1427
+	ERROR_HOOK_NEEDS_HMOD                                                     syscall.Errno = 1428
+	ERROR_GLOBAL_ONLY_HOOK                                                    syscall.Errno = 1429
+	ERROR_JOURNAL_HOOK_SET                                                    syscall.Errno = 1430
+	ERROR_HOOK_NOT_INSTALLED                                                  syscall.Errno = 1431
+	ERROR_INVALID_LB_MESSAGE                                                  syscall.Errno = 1432
+	ERROR_SETCOUNT_ON_BAD_LB                                                  syscall.Errno = 1433
+	ERROR_LB_WITHOUT_TABSTOPS                                                 syscall.Errno = 1434
+	ERROR_DESTROY_OBJECT_OF_OTHER_THREAD                                      syscall.Errno = 1435
+	ERROR_CHILD_WINDOW_MENU                                                   syscall.Errno = 1436
+	ERROR_NO_SYSTEM_MENU                                                      syscall.Errno = 1437
+	ERROR_INVALID_MSGBOX_STYLE                                                syscall.Errno = 1438
+	ERROR_INVALID_SPI_VALUE                                                   syscall.Errno = 1439
+	ERROR_SCREEN_ALREADY_LOCKED                                               syscall.Errno = 1440
+	ERROR_HWNDS_HAVE_DIFF_PARENT                                              syscall.Errno = 1441
+	ERROR_NOT_CHILD_WINDOW                                                    syscall.Errno = 1442
+	ERROR_INVALID_GW_COMMAND                                                  syscall.Errno = 1443
+	ERROR_INVALID_THREAD_ID                                                   syscall.Errno = 1444
+	ERROR_NON_MDICHILD_WINDOW                                                 syscall.Errno = 1445
+	ERROR_POPUP_ALREADY_ACTIVE                                                syscall.Errno = 1446
+	ERROR_NO_SCROLLBARS                                                       syscall.Errno = 1447
+	ERROR_INVALID_SCROLLBAR_RANGE                                             syscall.Errno = 1448
+	ERROR_INVALID_SHOWWIN_COMMAND                                             syscall.Errno = 1449
+	ERROR_NO_SYSTEM_RESOURCES                                                 syscall.Errno = 1450
+	ERROR_NONPAGED_SYSTEM_RESOURCES                                           syscall.Errno = 1451
+	ERROR_PAGED_SYSTEM_RESOURCES                                              syscall.Errno = 1452
+	ERROR_WORKING_SET_QUOTA                                                   syscall.Errno = 1453
+	ERROR_PAGEFILE_QUOTA                                                      syscall.Errno = 1454
+	ERROR_COMMITMENT_LIMIT                                                    syscall.Errno = 1455
+	ERROR_MENU_ITEM_NOT_FOUND                                                 syscall.Errno = 1456
+	ERROR_INVALID_KEYBOARD_HANDLE                                             syscall.Errno = 1457
+	ERROR_HOOK_TYPE_NOT_ALLOWED                                               syscall.Errno = 1458
+	ERROR_REQUIRES_INTERACTIVE_WINDOWSTATION                                  syscall.Errno = 1459
+	ERROR_TIMEOUT                                                             syscall.Errno = 1460
+	ERROR_INVALID_MONITOR_HANDLE                                              syscall.Errno = 1461
+	ERROR_INCORRECT_SIZE                                                      syscall.Errno = 1462
+	ERROR_SYMLINK_CLASS_DISABLED                                              syscall.Errno = 1463
+	ERROR_SYMLINK_NOT_SUPPORTED                                               syscall.Errno = 1464
+	ERROR_XML_PARSE_ERROR                                                     syscall.Errno = 1465
+	ERROR_XMLDSIG_ERROR                                                       syscall.Errno = 1466
+	ERROR_RESTART_APPLICATION                                                 syscall.Errno = 1467
+	ERROR_WRONG_COMPARTMENT                                                   syscall.Errno = 1468
+	ERROR_AUTHIP_FAILURE                                                      syscall.Errno = 1469
+	ERROR_NO_NVRAM_RESOURCES                                                  syscall.Errno = 1470
+	ERROR_NOT_GUI_PROCESS                                                     syscall.Errno = 1471
+	ERROR_EVENTLOG_FILE_CORRUPT                                               syscall.Errno = 1500
+	ERROR_EVENTLOG_CANT_START                                                 syscall.Errno = 1501
+	ERROR_LOG_FILE_FULL                                                       syscall.Errno = 1502
+	ERROR_EVENTLOG_FILE_CHANGED                                               syscall.Errno = 1503
+	ERROR_CONTAINER_ASSIGNED                                                  syscall.Errno = 1504
+	ERROR_JOB_NO_CONTAINER                                                    syscall.Errno = 1505
+	ERROR_INVALID_TASK_NAME                                                   syscall.Errno = 1550
+	ERROR_INVALID_TASK_INDEX                                                  syscall.Errno = 1551
+	ERROR_THREAD_ALREADY_IN_TASK                                              syscall.Errno = 1552
+	ERROR_INSTALL_SERVICE_FAILURE                                             syscall.Errno = 1601
+	ERROR_INSTALL_USEREXIT                                                    syscall.Errno = 1602
+	ERROR_INSTALL_FAILURE                                                     syscall.Errno = 1603
+	ERROR_INSTALL_SUSPEND                                                     syscall.Errno = 1604
+	ERROR_UNKNOWN_PRODUCT                                                     syscall.Errno = 1605
+	ERROR_UNKNOWN_FEATURE                                                     syscall.Errno = 1606
+	ERROR_UNKNOWN_COMPONENT                                                   syscall.Errno = 1607
+	ERROR_UNKNOWN_PROPERTY                                                    syscall.Errno = 1608
+	ERROR_INVALID_HANDLE_STATE                                                syscall.Errno = 1609
+	ERROR_BAD_CONFIGURATION                                                   syscall.Errno = 1610
+	ERROR_INDEX_ABSENT                                                        syscall.Errno = 1611
+	ERROR_INSTALL_SOURCE_ABSENT                                               syscall.Errno = 1612
+	ERROR_INSTALL_PACKAGE_VERSION                                             syscall.Errno = 1613
+	ERROR_PRODUCT_UNINSTALLED                                                 syscall.Errno = 1614
+	ERROR_BAD_QUERY_SYNTAX                                                    syscall.Errno = 1615
+	ERROR_INVALID_FIELD                                                       syscall.Errno = 1616
+	ERROR_DEVICE_REMOVED                                                      syscall.Errno = 1617
+	ERROR_INSTALL_ALREADY_RUNNING                                             syscall.Errno = 1618
+	ERROR_INSTALL_PACKAGE_OPEN_FAILED                                         syscall.Errno = 1619
+	ERROR_INSTALL_PACKAGE_INVALID                                             syscall.Errno = 1620
+	ERROR_INSTALL_UI_FAILURE                                                  syscall.Errno = 1621
+	ERROR_INSTALL_LOG_FAILURE                                                 syscall.Errno = 1622
+	ERROR_INSTALL_LANGUAGE_UNSUPPORTED                                        syscall.Errno = 1623
+	ERROR_INSTALL_TRANSFORM_FAILURE                                           syscall.Errno = 1624
+	ERROR_INSTALL_PACKAGE_REJECTED                                            syscall.Errno = 1625
+	ERROR_FUNCTION_NOT_CALLED                                                 syscall.Errno = 1626
+	ERROR_FUNCTION_FAILED                                                     syscall.Errno = 1627
+	ERROR_INVALID_TABLE                                                       syscall.Errno = 1628
+	ERROR_DATATYPE_MISMATCH                                                   syscall.Errno = 1629
+	ERROR_UNSUPPORTED_TYPE                                                    syscall.Errno = 1630
+	ERROR_CREATE_FAILED                                                       syscall.Errno = 1631
+	ERROR_INSTALL_TEMP_UNWRITABLE                                             syscall.Errno = 1632
+	ERROR_INSTALL_PLATFORM_UNSUPPORTED                                        syscall.Errno = 1633
+	ERROR_INSTALL_NOTUSED                                                     syscall.Errno = 1634
+	ERROR_PATCH_PACKAGE_OPEN_FAILED                                           syscall.Errno = 1635
+	ERROR_PATCH_PACKAGE_INVALID                                               syscall.Errno = 1636
+	ERROR_PATCH_PACKAGE_UNSUPPORTED                                           syscall.Errno = 1637
+	ERROR_PRODUCT_VERSION                                                     syscall.Errno = 1638
+	ERROR_INVALID_COMMAND_LINE                                                syscall.Errno = 1639
+	ERROR_INSTALL_REMOTE_DISALLOWED                                           syscall.Errno = 1640
+	ERROR_SUCCESS_REBOOT_INITIATED                                            syscall.Errno = 1641
+	ERROR_PATCH_TARGET_NOT_FOUND                                              syscall.Errno = 1642
+	ERROR_PATCH_PACKAGE_REJECTED                                              syscall.Errno = 1643
+	ERROR_INSTALL_TRANSFORM_REJECTED                                          syscall.Errno = 1644
+	ERROR_INSTALL_REMOTE_PROHIBITED                                           syscall.Errno = 1645
+	ERROR_PATCH_REMOVAL_UNSUPPORTED                                           syscall.Errno = 1646
+	ERROR_UNKNOWN_PATCH                                                       syscall.Errno = 1647
+	ERROR_PATCH_NO_SEQUENCE                                                   syscall.Errno = 1648
+	ERROR_PATCH_REMOVAL_DISALLOWED                                            syscall.Errno = 1649
+	ERROR_INVALID_PATCH_XML                                                   syscall.Errno = 1650
+	ERROR_PATCH_MANAGED_ADVERTISED_PRODUCT                                    syscall.Errno = 1651
+	ERROR_INSTALL_SERVICE_SAFEBOOT                                            syscall.Errno = 1652
+	ERROR_FAIL_FAST_EXCEPTION                                                 syscall.Errno = 1653
+	ERROR_INSTALL_REJECTED                                                    syscall.Errno = 1654
+	ERROR_DYNAMIC_CODE_BLOCKED                                                syscall.Errno = 1655
+	ERROR_NOT_SAME_OBJECT                                                     syscall.Errno = 1656
+	ERROR_STRICT_CFG_VIOLATION                                                syscall.Errno = 1657
+	ERROR_SET_CONTEXT_DENIED                                                  syscall.Errno = 1660
+	ERROR_CROSS_PARTITION_VIOLATION                                           syscall.Errno = 1661
+	RPC_S_INVALID_STRING_BINDING                                              syscall.Errno = 1700
+	RPC_S_WRONG_KIND_OF_BINDING                                               syscall.Errno = 1701
+	RPC_S_INVALID_BINDING                                                     syscall.Errno = 1702
+	RPC_S_PROTSEQ_NOT_SUPPORTED                                               syscall.Errno = 1703
+	RPC_S_INVALID_RPC_PROTSEQ                                                 syscall.Errno = 1704
+	RPC_S_INVALID_STRING_UUID                                                 syscall.Errno = 1705
+	RPC_S_INVALID_ENDPOINT_FORMAT                                             syscall.Errno = 1706
+	RPC_S_INVALID_NET_ADDR                                                    syscall.Errno = 1707
+	RPC_S_NO_ENDPOINT_FOUND                                                   syscall.Errno = 1708
+	RPC_S_INVALID_TIMEOUT                                                     syscall.Errno = 1709
+	RPC_S_OBJECT_NOT_FOUND                                                    syscall.Errno = 1710
+	RPC_S_ALREADY_REGISTERED                                                  syscall.Errno = 1711
+	RPC_S_TYPE_ALREADY_REGISTERED                                             syscall.Errno = 1712
+	RPC_S_ALREADY_LISTENING                                                   syscall.Errno = 1713
+	RPC_S_NO_PROTSEQS_REGISTERED                                              syscall.Errno = 1714
+	RPC_S_NOT_LISTENING                                                       syscall.Errno = 1715
+	RPC_S_UNKNOWN_MGR_TYPE                                                    syscall.Errno = 1716
+	RPC_S_UNKNOWN_IF                                                          syscall.Errno = 1717
+	RPC_S_NO_BINDINGS                                                         syscall.Errno = 1718
+	RPC_S_NO_PROTSEQS                                                         syscall.Errno = 1719
+	RPC_S_CANT_CREATE_ENDPOINT                                                syscall.Errno = 1720
+	RPC_S_OUT_OF_RESOURCES                                                    syscall.Errno = 1721
+	RPC_S_SERVER_UNAVAILABLE                                                  syscall.Errno = 1722
+	RPC_S_SERVER_TOO_BUSY                                                     syscall.Errno = 1723
+	RPC_S_INVALID_NETWORK_OPTIONS                                             syscall.Errno = 1724
+	RPC_S_NO_CALL_ACTIVE                                                      syscall.Errno = 1725
+	RPC_S_CALL_FAILED                                                         syscall.Errno = 1726
+	RPC_S_CALL_FAILED_DNE                                                     syscall.Errno = 1727
+	RPC_S_PROTOCOL_ERROR                                                      syscall.Errno = 1728
+	RPC_S_PROXY_ACCESS_DENIED                                                 syscall.Errno = 1729
+	RPC_S_UNSUPPORTED_TRANS_SYN                                               syscall.Errno = 1730
+	RPC_S_UNSUPPORTED_TYPE                                                    syscall.Errno = 1732
+	RPC_S_INVALID_TAG                                                         syscall.Errno = 1733
+	RPC_S_INVALID_BOUND                                                       syscall.Errno = 1734
+	RPC_S_NO_ENTRY_NAME                                                       syscall.Errno = 1735
+	RPC_S_INVALID_NAME_SYNTAX                                                 syscall.Errno = 1736
+	RPC_S_UNSUPPORTED_NAME_SYNTAX                                             syscall.Errno = 1737
+	RPC_S_UUID_NO_ADDRESS                                                     syscall.Errno = 1739
+	RPC_S_DUPLICATE_ENDPOINT                                                  syscall.Errno = 1740
+	RPC_S_UNKNOWN_AUTHN_TYPE                                                  syscall.Errno = 1741
+	RPC_S_MAX_CALLS_TOO_SMALL                                                 syscall.Errno = 1742
+	RPC_S_STRING_TOO_LONG                                                     syscall.Errno = 1743
+	RPC_S_PROTSEQ_NOT_FOUND                                                   syscall.Errno = 1744
+	RPC_S_PROCNUM_OUT_OF_RANGE                                                syscall.Errno = 1745
+	RPC_S_BINDING_HAS_NO_AUTH                                                 syscall.Errno = 1746
+	RPC_S_UNKNOWN_AUTHN_SERVICE                                               syscall.Errno = 1747
+	RPC_S_UNKNOWN_AUTHN_LEVEL                                                 syscall.Errno = 1748
+	RPC_S_INVALID_AUTH_IDENTITY                                               syscall.Errno = 1749
+	RPC_S_UNKNOWN_AUTHZ_SERVICE                                               syscall.Errno = 1750
+	EPT_S_INVALID_ENTRY                                                       syscall.Errno = 1751
+	EPT_S_CANT_PERFORM_OP                                                     syscall.Errno = 1752
+	EPT_S_NOT_REGISTERED                                                      syscall.Errno = 1753
+	RPC_S_NOTHING_TO_EXPORT                                                   syscall.Errno = 1754
+	RPC_S_INCOMPLETE_NAME                                                     syscall.Errno = 1755
+	RPC_S_INVALID_VERS_OPTION                                                 syscall.Errno = 1756
+	RPC_S_NO_MORE_MEMBERS                                                     syscall.Errno = 1757
+	RPC_S_NOT_ALL_OBJS_UNEXPORTED                                             syscall.Errno = 1758
+	RPC_S_INTERFACE_NOT_FOUND                                                 syscall.Errno = 1759
+	RPC_S_ENTRY_ALREADY_EXISTS                                                syscall.Errno = 1760
+	RPC_S_ENTRY_NOT_FOUND                                                     syscall.Errno = 1761
+	RPC_S_NAME_SERVICE_UNAVAILABLE                                            syscall.Errno = 1762
+	RPC_S_INVALID_NAF_ID                                                      syscall.Errno = 1763
+	RPC_S_CANNOT_SUPPORT                                                      syscall.Errno = 1764
+	RPC_S_NO_CONTEXT_AVAILABLE                                                syscall.Errno = 1765
+	RPC_S_INTERNAL_ERROR                                                      syscall.Errno = 1766
+	RPC_S_ZERO_DIVIDE                                                         syscall.Errno = 1767
+	RPC_S_ADDRESS_ERROR                                                       syscall.Errno = 1768
+	RPC_S_FP_DIV_ZERO                                                         syscall.Errno = 1769
+	RPC_S_FP_UNDERFLOW                                                        syscall.Errno = 1770
+	RPC_S_FP_OVERFLOW                                                         syscall.Errno = 1771
+	RPC_X_NO_MORE_ENTRIES                                                     syscall.Errno = 1772
+	RPC_X_SS_CHAR_TRANS_OPEN_FAIL                                             syscall.Errno = 1773
+	RPC_X_SS_CHAR_TRANS_SHORT_FILE                                            syscall.Errno = 1774
+	RPC_X_SS_IN_NULL_CONTEXT                                                  syscall.Errno = 1775
+	RPC_X_SS_CONTEXT_DAMAGED                                                  syscall.Errno = 1777
+	RPC_X_SS_HANDLES_MISMATCH                                                 syscall.Errno = 1778
+	RPC_X_SS_CANNOT_GET_CALL_HANDLE                                           syscall.Errno = 1779
+	RPC_X_NULL_REF_POINTER                                                    syscall.Errno = 1780
+	RPC_X_ENUM_VALUE_OUT_OF_RANGE                                             syscall.Errno = 1781
+	RPC_X_BYTE_COUNT_TOO_SMALL                                                syscall.Errno = 1782
+	RPC_X_BAD_STUB_DATA                                                       syscall.Errno = 1783
+	ERROR_INVALID_USER_BUFFER                                                 syscall.Errno = 1784
+	ERROR_UNRECOGNIZED_MEDIA                                                  syscall.Errno = 1785
+	ERROR_NO_TRUST_LSA_SECRET                                                 syscall.Errno = 1786
+	ERROR_NO_TRUST_SAM_ACCOUNT                                                syscall.Errno = 1787
+	ERROR_TRUSTED_DOMAIN_FAILURE                                              syscall.Errno = 1788
+	ERROR_TRUSTED_RELATIONSHIP_FAILURE                                        syscall.Errno = 1789
+	ERROR_TRUST_FAILURE                                                       syscall.Errno = 1790
+	RPC_S_CALL_IN_PROGRESS                                                    syscall.Errno = 1791
+	ERROR_NETLOGON_NOT_STARTED                                                syscall.Errno = 1792
+	ERROR_ACCOUNT_EXPIRED                                                     syscall.Errno = 1793
+	ERROR_REDIRECTOR_HAS_OPEN_HANDLES                                         syscall.Errno = 1794
+	ERROR_PRINTER_DRIVER_ALREADY_INSTALLED                                    syscall.Errno = 1795
+	ERROR_UNKNOWN_PORT                                                        syscall.Errno = 1796
+	ERROR_UNKNOWN_PRINTER_DRIVER                                              syscall.Errno = 1797
+	ERROR_UNKNOWN_PRINTPROCESSOR                                              syscall.Errno = 1798
+	ERROR_INVALID_SEPARATOR_FILE                                              syscall.Errno = 1799
+	ERROR_INVALID_PRIORITY                                                    syscall.Errno = 1800
+	ERROR_INVALID_PRINTER_NAME                                                syscall.Errno = 1801
+	ERROR_PRINTER_ALREADY_EXISTS                                              syscall.Errno = 1802
+	ERROR_INVALID_PRINTER_COMMAND                                             syscall.Errno = 1803
+	ERROR_INVALID_DATATYPE                                                    syscall.Errno = 1804
+	ERROR_INVALID_ENVIRONMENT                                                 syscall.Errno = 1805
+	RPC_S_NO_MORE_BINDINGS                                                    syscall.Errno = 1806
+	ERROR_NOLOGON_INTERDOMAIN_TRUST_ACCOUNT                                   syscall.Errno = 1807
+	ERROR_NOLOGON_WORKSTATION_TRUST_ACCOUNT                                   syscall.Errno = 1808
+	ERROR_NOLOGON_SERVER_TRUST_ACCOUNT                                        syscall.Errno = 1809
+	ERROR_DOMAIN_TRUST_INCONSISTENT                                           syscall.Errno = 1810
+	ERROR_SERVER_HAS_OPEN_HANDLES                                             syscall.Errno = 1811
+	ERROR_RESOURCE_DATA_NOT_FOUND                                             syscall.Errno = 1812
+	ERROR_RESOURCE_TYPE_NOT_FOUND                                             syscall.Errno = 1813
+	ERROR_RESOURCE_NAME_NOT_FOUND                                             syscall.Errno = 1814
+	ERROR_RESOURCE_LANG_NOT_FOUND                                             syscall.Errno = 1815
+	ERROR_NOT_ENOUGH_QUOTA                                                    syscall.Errno = 1816
+	RPC_S_NO_INTERFACES                                                       syscall.Errno = 1817
+	RPC_S_CALL_CANCELLED                                                      syscall.Errno = 1818
+	RPC_S_BINDING_INCOMPLETE                                                  syscall.Errno = 1819
+	RPC_S_COMM_FAILURE                                                        syscall.Errno = 1820
+	RPC_S_UNSUPPORTED_AUTHN_LEVEL                                             syscall.Errno = 1821
+	RPC_S_NO_PRINC_NAME                                                       syscall.Errno = 1822
+	RPC_S_NOT_RPC_ERROR                                                       syscall.Errno = 1823
+	RPC_S_UUID_LOCAL_ONLY                                                     syscall.Errno = 1824
+	RPC_S_SEC_PKG_ERROR                                                       syscall.Errno = 1825
+	RPC_S_NOT_CANCELLED                                                       syscall.Errno = 1826
+	RPC_X_INVALID_ES_ACTION                                                   syscall.Errno = 1827
+	RPC_X_WRONG_ES_VERSION                                                    syscall.Errno = 1828
+	RPC_X_WRONG_STUB_VERSION                                                  syscall.Errno = 1829
+	RPC_X_INVALID_PIPE_OBJECT                                                 syscall.Errno = 1830
+	RPC_X_WRONG_PIPE_ORDER                                                    syscall.Errno = 1831
+	RPC_X_WRONG_PIPE_VERSION                                                  syscall.Errno = 1832
+	RPC_S_COOKIE_AUTH_FAILED                                                  syscall.Errno = 1833
+	RPC_S_DO_NOT_DISTURB                                                      syscall.Errno = 1834
+	RPC_S_SYSTEM_HANDLE_COUNT_EXCEEDED                                        syscall.Errno = 1835
+	RPC_S_SYSTEM_HANDLE_TYPE_MISMATCH                                         syscall.Errno = 1836
+	RPC_S_GROUP_MEMBER_NOT_FOUND                                              syscall.Errno = 1898
+	EPT_S_CANT_CREATE                                                         syscall.Errno = 1899
+	RPC_S_INVALID_OBJECT                                                      syscall.Errno = 1900
+	ERROR_INVALID_TIME                                                        syscall.Errno = 1901
+	ERROR_INVALID_FORM_NAME                                                   syscall.Errno = 1902
+	ERROR_INVALID_FORM_SIZE                                                   syscall.Errno = 1903
+	ERROR_ALREADY_WAITING                                                     syscall.Errno = 1904
+	ERROR_PRINTER_DELETED                                                     syscall.Errno = 1905
+	ERROR_INVALID_PRINTER_STATE                                               syscall.Errno = 1906
+	ERROR_PASSWORD_MUST_CHANGE                                                syscall.Errno = 1907
+	ERROR_DOMAIN_CONTROLLER_NOT_FOUND                                         syscall.Errno = 1908
+	ERROR_ACCOUNT_LOCKED_OUT                                                  syscall.Errno = 1909
+	OR_INVALID_OXID                                                           syscall.Errno = 1910
+	OR_INVALID_OID                                                            syscall.Errno = 1911
+	OR_INVALID_SET                                                            syscall.Errno = 1912
+	RPC_S_SEND_INCOMPLETE                                                     syscall.Errno = 1913
+	RPC_S_INVALID_ASYNC_HANDLE                                                syscall.Errno = 1914
+	RPC_S_INVALID_ASYNC_CALL                                                  syscall.Errno = 1915
+	RPC_X_PIPE_CLOSED                                                         syscall.Errno = 1916
+	RPC_X_PIPE_DISCIPLINE_ERROR                                               syscall.Errno = 1917
+	RPC_X_PIPE_EMPTY                                                          syscall.Errno = 1918
+	ERROR_NO_SITENAME                                                         syscall.Errno = 1919
+	ERROR_CANT_ACCESS_FILE                                                    syscall.Errno = 1920
+	ERROR_CANT_RESOLVE_FILENAME                                               syscall.Errno = 1921
+	RPC_S_ENTRY_TYPE_MISMATCH                                                 syscall.Errno = 1922
+	RPC_S_NOT_ALL_OBJS_EXPORTED                                               syscall.Errno = 1923
+	RPC_S_INTERFACE_NOT_EXPORTED                                              syscall.Errno = 1924
+	RPC_S_PROFILE_NOT_ADDED                                                   syscall.Errno = 1925
+	RPC_S_PRF_ELT_NOT_ADDED                                                   syscall.Errno = 1926
+	RPC_S_PRF_ELT_NOT_REMOVED                                                 syscall.Errno = 1927
+	RPC_S_GRP_ELT_NOT_ADDED                                                   syscall.Errno = 1928
+	RPC_S_GRP_ELT_NOT_REMOVED                                                 syscall.Errno = 1929
+	ERROR_KM_DRIVER_BLOCKED                                                   syscall.Errno = 1930
+	ERROR_CONTEXT_EXPIRED                                                     syscall.Errno = 1931
+	ERROR_PER_USER_TRUST_QUOTA_EXCEEDED                                       syscall.Errno = 1932
+	ERROR_ALL_USER_TRUST_QUOTA_EXCEEDED                                       syscall.Errno = 1933
+	ERROR_USER_DELETE_TRUST_QUOTA_EXCEEDED                                    syscall.Errno = 1934
+	ERROR_AUTHENTICATION_FIREWALL_FAILED                                      syscall.Errno = 1935
+	ERROR_REMOTE_PRINT_CONNECTIONS_BLOCKED                                    syscall.Errno = 1936
+	ERROR_NTLM_BLOCKED                                                        syscall.Errno = 1937
+	ERROR_PASSWORD_CHANGE_REQUIRED                                            syscall.Errno = 1938
+	ERROR_LOST_MODE_LOGON_RESTRICTION                                         syscall.Errno = 1939
+	ERROR_INVALID_PIXEL_FORMAT                                                syscall.Errno = 2000
+	ERROR_BAD_DRIVER                                                          syscall.Errno = 2001
+	ERROR_INVALID_WINDOW_STYLE                                                syscall.Errno = 2002
+	ERROR_METAFILE_NOT_SUPPORTED                                              syscall.Errno = 2003
+	ERROR_TRANSFORM_NOT_SUPPORTED                                             syscall.Errno = 2004
+	ERROR_CLIPPING_NOT_SUPPORTED                                              syscall.Errno = 2005
+	ERROR_INVALID_CMM                                                         syscall.Errno = 2010
+	ERROR_INVALID_PROFILE                                                     syscall.Errno = 2011
+	ERROR_TAG_NOT_FOUND                                                       syscall.Errno = 2012
+	ERROR_TAG_NOT_PRESENT                                                     syscall.Errno = 2013
+	ERROR_DUPLICATE_TAG                                                       syscall.Errno = 2014
+	ERROR_PROFILE_NOT_ASSOCIATED_WITH_DEVICE                                  syscall.Errno = 2015
+	ERROR_PROFILE_NOT_FOUND                                                   syscall.Errno = 2016
+	ERROR_INVALID_COLORSPACE                                                  syscall.Errno = 2017
+	ERROR_ICM_NOT_ENABLED                                                     syscall.Errno = 2018
+	ERROR_DELETING_ICM_XFORM                                                  syscall.Errno = 2019
+	ERROR_INVALID_TRANSFORM                                                   syscall.Errno = 2020
+	ERROR_COLORSPACE_MISMATCH                                                 syscall.Errno = 2021
+	ERROR_INVALID_COLORINDEX                                                  syscall.Errno = 2022
+	ERROR_PROFILE_DOES_NOT_MATCH_DEVICE                                       syscall.Errno = 2023
+	ERROR_CONNECTED_OTHER_PASSWORD                                            syscall.Errno = 2108
+	ERROR_CONNECTED_OTHER_PASSWORD_DEFAULT                                    syscall.Errno = 2109
+	ERROR_BAD_USERNAME                                                        syscall.Errno = 2202
+	ERROR_NOT_CONNECTED                                                       syscall.Errno = 2250
+	ERROR_OPEN_FILES                                                          syscall.Errno = 2401
+	ERROR_ACTIVE_CONNECTIONS                                                  syscall.Errno = 2402
+	ERROR_DEVICE_IN_USE                                                       syscall.Errno = 2404
+	ERROR_UNKNOWN_PRINT_MONITOR                                               syscall.Errno = 3000
+	ERROR_PRINTER_DRIVER_IN_USE                                               syscall.Errno = 3001
+	ERROR_SPOOL_FILE_NOT_FOUND                                                syscall.Errno = 3002
+	ERROR_SPL_NO_STARTDOC                                                     syscall.Errno = 3003
+	ERROR_SPL_NO_ADDJOB                                                       syscall.Errno = 3004
+	ERROR_PRINT_PROCESSOR_ALREADY_INSTALLED                                   syscall.Errno = 3005
+	ERROR_PRINT_MONITOR_ALREADY_INSTALLED                                     syscall.Errno = 3006
+	ERROR_INVALID_PRINT_MONITOR                                               syscall.Errno = 3007
+	ERROR_PRINT_MONITOR_IN_USE                                                syscall.Errno = 3008
+	ERROR_PRINTER_HAS_JOBS_QUEUED                                             syscall.Errno = 3009
+	ERROR_SUCCESS_REBOOT_REQUIRED                                             syscall.Errno = 3010
+	ERROR_SUCCESS_RESTART_REQUIRED                                            syscall.Errno = 3011
+	ERROR_PRINTER_NOT_FOUND                                                   syscall.Errno = 3012
+	ERROR_PRINTER_DRIVER_WARNED                                               syscall.Errno = 3013
+	ERROR_PRINTER_DRIVER_BLOCKED                                              syscall.Errno = 3014
+	ERROR_PRINTER_DRIVER_PACKAGE_IN_USE                                       syscall.Errno = 3015
+	ERROR_CORE_DRIVER_PACKAGE_NOT_FOUND                                       syscall.Errno = 3016
+	ERROR_FAIL_REBOOT_REQUIRED                                                syscall.Errno = 3017
+	ERROR_FAIL_REBOOT_INITIATED                                               syscall.Errno = 3018
+	ERROR_PRINTER_DRIVER_DOWNLOAD_NEEDED                                      syscall.Errno = 3019
+	ERROR_PRINT_JOB_RESTART_REQUIRED                                          syscall.Errno = 3020
+	ERROR_INVALID_PRINTER_DRIVER_MANIFEST                                     syscall.Errno = 3021
+	ERROR_PRINTER_NOT_SHAREABLE                                               syscall.Errno = 3022
+	ERROR_REQUEST_PAUSED                                                      syscall.Errno = 3050
+	ERROR_APPEXEC_CONDITION_NOT_SATISFIED                                     syscall.Errno = 3060
+	ERROR_APPEXEC_HANDLE_INVALIDATED                                          syscall.Errno = 3061
+	ERROR_APPEXEC_INVALID_HOST_GENERATION                                     syscall.Errno = 3062
+	ERROR_APPEXEC_UNEXPECTED_PROCESS_REGISTRATION                             syscall.Errno = 3063
+	ERROR_APPEXEC_INVALID_HOST_STATE                                          syscall.Errno = 3064
+	ERROR_APPEXEC_NO_DONOR                                                    syscall.Errno = 3065
+	ERROR_APPEXEC_HOST_ID_MISMATCH                                            syscall.Errno = 3066
+	ERROR_APPEXEC_UNKNOWN_USER                                                syscall.Errno = 3067
+	ERROR_IO_REISSUE_AS_CACHED                                                syscall.Errno = 3950
+	ERROR_WINS_INTERNAL                                                       syscall.Errno = 4000
+	ERROR_CAN_NOT_DEL_LOCAL_WINS                                              syscall.Errno = 4001
+	ERROR_STATIC_INIT                                                         syscall.Errno = 4002
+	ERROR_INC_BACKUP                                                          syscall.Errno = 4003
+	ERROR_FULL_BACKUP                                                         syscall.Errno = 4004
+	ERROR_REC_NON_EXISTENT                                                    syscall.Errno = 4005
+	ERROR_RPL_NOT_ALLOWED                                                     syscall.Errno = 4006
+	PEERDIST_ERROR_CONTENTINFO_VERSION_UNSUPPORTED                            syscall.Errno = 4050
+	PEERDIST_ERROR_CANNOT_PARSE_CONTENTINFO                                   syscall.Errno = 4051
+	PEERDIST_ERROR_MISSING_DATA                                               syscall.Errno = 4052
+	PEERDIST_ERROR_NO_MORE                                                    syscall.Errno = 4053
+	PEERDIST_ERROR_NOT_INITIALIZED                                            syscall.Errno = 4054
+	PEERDIST_ERROR_ALREADY_INITIALIZED                                        syscall.Errno = 4055
+	PEERDIST_ERROR_SHUTDOWN_IN_PROGRESS                                       syscall.Errno = 4056
+	PEERDIST_ERROR_INVALIDATED                                                syscall.Errno = 4057
+	PEERDIST_ERROR_ALREADY_EXISTS                                             syscall.Errno = 4058
+	PEERDIST_ERROR_OPERATION_NOTFOUND                                         syscall.Errno = 4059
+	PEERDIST_ERROR_ALREADY_COMPLETED                                          syscall.Errno = 4060
+	PEERDIST_ERROR_OUT_OF_BOUNDS                                              syscall.Errno = 4061
+	PEERDIST_ERROR_VERSION_UNSUPPORTED                                        syscall.Errno = 4062
+	PEERDIST_ERROR_INVALID_CONFIGURATION                                      syscall.Errno = 4063
+	PEERDIST_ERROR_NOT_LICENSED                                               syscall.Errno = 4064
+	PEERDIST_ERROR_SERVICE_UNAVAILABLE                                        syscall.Errno = 4065
+	PEERDIST_ERROR_TRUST_FAILURE                                              syscall.Errno = 4066
+	ERROR_DHCP_ADDRESS_CONFLICT                                               syscall.Errno = 4100
+	ERROR_WMI_GUID_NOT_FOUND                                                  syscall.Errno = 4200
+	ERROR_WMI_INSTANCE_NOT_FOUND                                              syscall.Errno = 4201
+	ERROR_WMI_ITEMID_NOT_FOUND                                                syscall.Errno = 4202
+	ERROR_WMI_TRY_AGAIN                                                       syscall.Errno = 4203
+	ERROR_WMI_DP_NOT_FOUND                                                    syscall.Errno = 4204
+	ERROR_WMI_UNRESOLVED_INSTANCE_REF                                         syscall.Errno = 4205
+	ERROR_WMI_ALREADY_ENABLED                                                 syscall.Errno = 4206
+	ERROR_WMI_GUID_DISCONNECTED                                               syscall.Errno = 4207
+	ERROR_WMI_SERVER_UNAVAILABLE                                              syscall.Errno = 4208
+	ERROR_WMI_DP_FAILED                                                       syscall.Errno = 4209
+	ERROR_WMI_INVALID_MOF                                                     syscall.Errno = 4210
+	ERROR_WMI_INVALID_REGINFO                                                 syscall.Errno = 4211
+	ERROR_WMI_ALREADY_DISABLED                                                syscall.Errno = 4212
+	ERROR_WMI_READ_ONLY                                                       syscall.Errno = 4213
+	ERROR_WMI_SET_FAILURE                                                     syscall.Errno = 4214
+	ERROR_NOT_APPCONTAINER                                                    syscall.Errno = 4250
+	ERROR_APPCONTAINER_REQUIRED                                               syscall.Errno = 4251
+	ERROR_NOT_SUPPORTED_IN_APPCONTAINER                                       syscall.Errno = 4252
+	ERROR_INVALID_PACKAGE_SID_LENGTH                                          syscall.Errno = 4253
+	ERROR_INVALID_MEDIA                                                       syscall.Errno = 4300
+	ERROR_INVALID_LIBRARY                                                     syscall.Errno = 4301
+	ERROR_INVALID_MEDIA_POOL                                                  syscall.Errno = 4302
+	ERROR_DRIVE_MEDIA_MISMATCH                                                syscall.Errno = 4303
+	ERROR_MEDIA_OFFLINE                                                       syscall.Errno = 4304
+	ERROR_LIBRARY_OFFLINE                                                     syscall.Errno = 4305
+	ERROR_EMPTY                                                               syscall.Errno = 4306
+	ERROR_NOT_EMPTY                                                           syscall.Errno = 4307
+	ERROR_MEDIA_UNAVAILABLE                                                   syscall.Errno = 4308
+	ERROR_RESOURCE_DISABLED                                                   syscall.Errno = 4309
+	ERROR_INVALID_CLEANER                                                     syscall.Errno = 4310
+	ERROR_UNABLE_TO_CLEAN                                                     syscall.Errno = 4311
+	ERROR_OBJECT_NOT_FOUND                                                    syscall.Errno = 4312
+	ERROR_DATABASE_FAILURE                                                    syscall.Errno = 4313
+	ERROR_DATABASE_FULL                                                       syscall.Errno = 4314
+	ERROR_MEDIA_INCOMPATIBLE                                                  syscall.Errno = 4315
+	ERROR_RESOURCE_NOT_PRESENT                                                syscall.Errno = 4316
+	ERROR_INVALID_OPERATION                                                   syscall.Errno = 4317
+	ERROR_MEDIA_NOT_AVAILABLE                                                 syscall.Errno = 4318
+	ERROR_DEVICE_NOT_AVAILABLE                                                syscall.Errno = 4319
+	ERROR_REQUEST_REFUSED                                                     syscall.Errno = 4320
+	ERROR_INVALID_DRIVE_OBJECT                                                syscall.Errno = 4321
+	ERROR_LIBRARY_FULL                                                        syscall.Errno = 4322
+	ERROR_MEDIUM_NOT_ACCESSIBLE                                               syscall.Errno = 4323
+	ERROR_UNABLE_TO_LOAD_MEDIUM                                               syscall.Errno = 4324
+	ERROR_UNABLE_TO_INVENTORY_DRIVE                                           syscall.Errno = 4325
+	ERROR_UNABLE_TO_INVENTORY_SLOT                                            syscall.Errno = 4326
+	ERROR_UNABLE_TO_INVENTORY_TRANSPORT                                       syscall.Errno = 4327
+	ERROR_TRANSPORT_FULL                                                      syscall.Errno = 4328
+	ERROR_CONTROLLING_IEPORT                                                  syscall.Errno = 4329
+	ERROR_UNABLE_TO_EJECT_MOUNTED_MEDIA                                       syscall.Errno = 4330
+	ERROR_CLEANER_SLOT_SET                                                    syscall.Errno = 4331
+	ERROR_CLEANER_SLOT_NOT_SET                                                syscall.Errno = 4332
+	ERROR_CLEANER_CARTRIDGE_SPENT                                             syscall.Errno = 4333
+	ERROR_UNEXPECTED_OMID                                                     syscall.Errno = 4334
+	ERROR_CANT_DELETE_LAST_ITEM                                               syscall.Errno = 4335
+	ERROR_MESSAGE_EXCEEDS_MAX_SIZE                                            syscall.Errno = 4336
+	ERROR_VOLUME_CONTAINS_SYS_FILES                                           syscall.Errno = 4337
+	ERROR_INDIGENOUS_TYPE                                                     syscall.Errno = 4338
+	ERROR_NO_SUPPORTING_DRIVES                                                syscall.Errno = 4339
+	ERROR_CLEANER_CARTRIDGE_INSTALLED                                         syscall.Errno = 4340
+	ERROR_IEPORT_FULL                                                         syscall.Errno = 4341
+	ERROR_FILE_OFFLINE                                                        syscall.Errno = 4350
+	ERROR_REMOTE_STORAGE_NOT_ACTIVE                                           syscall.Errno = 4351
+	ERROR_REMOTE_STORAGE_MEDIA_ERROR                                          syscall.Errno = 4352
+	ERROR_NOT_A_REPARSE_POINT                                                 syscall.Errno = 4390
+	ERROR_REPARSE_ATTRIBUTE_CONFLICT                                          syscall.Errno = 4391
+	ERROR_INVALID_REPARSE_DATA                                                syscall.Errno = 4392
+	ERROR_REPARSE_TAG_INVALID                                                 syscall.Errno = 4393
+	ERROR_REPARSE_TAG_MISMATCH                                                syscall.Errno = 4394
+	ERROR_REPARSE_POINT_ENCOUNTERED                                           syscall.Errno = 4395
+	ERROR_APP_DATA_NOT_FOUND                                                  syscall.Errno = 4400
+	ERROR_APP_DATA_EXPIRED                                                    syscall.Errno = 4401
+	ERROR_APP_DATA_CORRUPT                                                    syscall.Errno = 4402
+	ERROR_APP_DATA_LIMIT_EXCEEDED                                             syscall.Errno = 4403
+	ERROR_APP_DATA_REBOOT_REQUIRED                                            syscall.Errno = 4404
+	ERROR_SECUREBOOT_ROLLBACK_DETECTED                                        syscall.Errno = 4420
+	ERROR_SECUREBOOT_POLICY_VIOLATION                                         syscall.Errno = 4421
+	ERROR_SECUREBOOT_INVALID_POLICY                                           syscall.Errno = 4422
+	ERROR_SECUREBOOT_POLICY_PUBLISHER_NOT_FOUND                               syscall.Errno = 4423
+	ERROR_SECUREBOOT_POLICY_NOT_SIGNED                                        syscall.Errno = 4424
+	ERROR_SECUREBOOT_NOT_ENABLED                                              syscall.Errno = 4425
+	ERROR_SECUREBOOT_FILE_REPLACED                                            syscall.Errno = 4426
+	ERROR_SECUREBOOT_POLICY_NOT_AUTHORIZED                                    syscall.Errno = 4427
+	ERROR_SECUREBOOT_POLICY_UNKNOWN                                           syscall.Errno = 4428
+	ERROR_SECUREBOOT_POLICY_MISSING_ANTIROLLBACKVERSION                       syscall.Errno = 4429
+	ERROR_SECUREBOOT_PLATFORM_ID_MISMATCH                                     syscall.Errno = 4430
+	ERROR_SECUREBOOT_POLICY_ROLLBACK_DETECTED                                 syscall.Errno = 4431
+	ERROR_SECUREBOOT_POLICY_UPGRADE_MISMATCH                                  syscall.Errno = 4432
+	ERROR_SECUREBOOT_REQUIRED_POLICY_FILE_MISSING                             syscall.Errno = 4433
+	ERROR_SECUREBOOT_NOT_BASE_POLICY                                          syscall.Errno = 4434
+	ERROR_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY                                  syscall.Errno = 4435
+	ERROR_OFFLOAD_READ_FLT_NOT_SUPPORTED                                      syscall.Errno = 4440
+	ERROR_OFFLOAD_WRITE_FLT_NOT_SUPPORTED                                     syscall.Errno = 4441
+	ERROR_OFFLOAD_READ_FILE_NOT_SUPPORTED                                     syscall.Errno = 4442
+	ERROR_OFFLOAD_WRITE_FILE_NOT_SUPPORTED                                    syscall.Errno = 4443
+	ERROR_ALREADY_HAS_STREAM_ID                                               syscall.Errno = 4444
+	ERROR_SMR_GARBAGE_COLLECTION_REQUIRED                                     syscall.Errno = 4445
+	ERROR_WOF_WIM_HEADER_CORRUPT                                              syscall.Errno = 4446
+	ERROR_WOF_WIM_RESOURCE_TABLE_CORRUPT                                      syscall.Errno = 4447
+	ERROR_WOF_FILE_RESOURCE_TABLE_CORRUPT                                     syscall.Errno = 4448
+	ERROR_VOLUME_NOT_SIS_ENABLED                                              syscall.Errno = 4500
+	ERROR_SYSTEM_INTEGRITY_ROLLBACK_DETECTED                                  syscall.Errno = 4550
+	ERROR_SYSTEM_INTEGRITY_POLICY_VIOLATION                                   syscall.Errno = 4551
+	ERROR_SYSTEM_INTEGRITY_INVALID_POLICY                                     syscall.Errno = 4552
+	ERROR_SYSTEM_INTEGRITY_POLICY_NOT_SIGNED                                  syscall.Errno = 4553
+	ERROR_VSM_NOT_INITIALIZED                                                 syscall.Errno = 4560
+	ERROR_VSM_DMA_PROTECTION_NOT_IN_USE                                       syscall.Errno = 4561
+	ERROR_PLATFORM_MANIFEST_NOT_AUTHORIZED                                    syscall.Errno = 4570
+	ERROR_PLATFORM_MANIFEST_INVALID                                           syscall.Errno = 4571
+	ERROR_PLATFORM_MANIFEST_FILE_NOT_AUTHORIZED                               syscall.Errno = 4572
+	ERROR_PLATFORM_MANIFEST_CATALOG_NOT_AUTHORIZED                            syscall.Errno = 4573
+	ERROR_PLATFORM_MANIFEST_BINARY_ID_NOT_FOUND                               syscall.Errno = 4574
+	ERROR_PLATFORM_MANIFEST_NOT_ACTIVE                                        syscall.Errno = 4575
+	ERROR_PLATFORM_MANIFEST_NOT_SIGNED                                        syscall.Errno = 4576
+	ERROR_DEPENDENT_RESOURCE_EXISTS                                           syscall.Errno = 5001
+	ERROR_DEPENDENCY_NOT_FOUND                                                syscall.Errno = 5002
+	ERROR_DEPENDENCY_ALREADY_EXISTS                                           syscall.Errno = 5003
+	ERROR_RESOURCE_NOT_ONLINE                                                 syscall.Errno = 5004
+	ERROR_HOST_NODE_NOT_AVAILABLE                                             syscall.Errno = 5005
+	ERROR_RESOURCE_NOT_AVAILABLE                                              syscall.Errno = 5006
+	ERROR_RESOURCE_NOT_FOUND                                                  syscall.Errno = 5007
+	ERROR_SHUTDOWN_CLUSTER                                                    syscall.Errno = 5008
+	ERROR_CANT_EVICT_ACTIVE_NODE                                              syscall.Errno = 5009
+	ERROR_OBJECT_ALREADY_EXISTS                                               syscall.Errno = 5010
+	ERROR_OBJECT_IN_LIST                                                      syscall.Errno = 5011
+	ERROR_GROUP_NOT_AVAILABLE                                                 syscall.Errno = 5012
+	ERROR_GROUP_NOT_FOUND                                                     syscall.Errno = 5013
+	ERROR_GROUP_NOT_ONLINE                                                    syscall.Errno = 5014
+	ERROR_HOST_NODE_NOT_RESOURCE_OWNER                                        syscall.Errno = 5015
+	ERROR_HOST_NODE_NOT_GROUP_OWNER                                           syscall.Errno = 5016
+	ERROR_RESMON_CREATE_FAILED                                                syscall.Errno = 5017
+	ERROR_RESMON_ONLINE_FAILED                                                syscall.Errno = 5018
+	ERROR_RESOURCE_ONLINE                                                     syscall.Errno = 5019
+	ERROR_QUORUM_RESOURCE                                                     syscall.Errno = 5020
+	ERROR_NOT_QUORUM_CAPABLE                                                  syscall.Errno = 5021
+	ERROR_CLUSTER_SHUTTING_DOWN                                               syscall.Errno = 5022
+	ERROR_INVALID_STATE                                                       syscall.Errno = 5023
+	ERROR_RESOURCE_PROPERTIES_STORED                                          syscall.Errno = 5024
+	ERROR_NOT_QUORUM_CLASS                                                    syscall.Errno = 5025
+	ERROR_CORE_RESOURCE                                                       syscall.Errno = 5026
+	ERROR_QUORUM_RESOURCE_ONLINE_FAILED                                       syscall.Errno = 5027
+	ERROR_QUORUMLOG_OPEN_FAILED                                               syscall.Errno = 5028
+	ERROR_CLUSTERLOG_CORRUPT                                                  syscall.Errno = 5029
+	ERROR_CLUSTERLOG_RECORD_EXCEEDS_MAXSIZE                                   syscall.Errno = 5030
+	ERROR_CLUSTERLOG_EXCEEDS_MAXSIZE                                          syscall.Errno = 5031
+	ERROR_CLUSTERLOG_CHKPOINT_NOT_FOUND                                       syscall.Errno = 5032
+	ERROR_CLUSTERLOG_NOT_ENOUGH_SPACE                                         syscall.Errno = 5033
+	ERROR_QUORUM_OWNER_ALIVE                                                  syscall.Errno = 5034
+	ERROR_NETWORK_NOT_AVAILABLE                                               syscall.Errno = 5035
+	ERROR_NODE_NOT_AVAILABLE                                                  syscall.Errno = 5036
+	ERROR_ALL_NODES_NOT_AVAILABLE                                             syscall.Errno = 5037
+	ERROR_RESOURCE_FAILED                                                     syscall.Errno = 5038
+	ERROR_CLUSTER_INVALID_NODE                                                syscall.Errno = 5039
+	ERROR_CLUSTER_NODE_EXISTS                                                 syscall.Errno = 5040
+	ERROR_CLUSTER_JOIN_IN_PROGRESS                                            syscall.Errno = 5041
+	ERROR_CLUSTER_NODE_NOT_FOUND                                              syscall.Errno = 5042
+	ERROR_CLUSTER_LOCAL_NODE_NOT_FOUND                                        syscall.Errno = 5043
+	ERROR_CLUSTER_NETWORK_EXISTS                                              syscall.Errno = 5044
+	ERROR_CLUSTER_NETWORK_NOT_FOUND                                           syscall.Errno = 5045
+	ERROR_CLUSTER_NETINTERFACE_EXISTS                                         syscall.Errno = 5046
+	ERROR_CLUSTER_NETINTERFACE_NOT_FOUND                                      syscall.Errno = 5047
+	ERROR_CLUSTER_INVALID_REQUEST                                             syscall.Errno = 5048
+	ERROR_CLUSTER_INVALID_NETWORK_PROVIDER                                    syscall.Errno = 5049
+	ERROR_CLUSTER_NODE_DOWN                                                   syscall.Errno = 5050
+	ERROR_CLUSTER_NODE_UNREACHABLE                                            syscall.Errno = 5051
+	ERROR_CLUSTER_NODE_NOT_MEMBER                                             syscall.Errno = 5052
+	ERROR_CLUSTER_JOIN_NOT_IN_PROGRESS                                        syscall.Errno = 5053
+	ERROR_CLUSTER_INVALID_NETWORK                                             syscall.Errno = 5054
+	ERROR_CLUSTER_NODE_UP                                                     syscall.Errno = 5056
+	ERROR_CLUSTER_IPADDR_IN_USE                                               syscall.Errno = 5057
+	ERROR_CLUSTER_NODE_NOT_PAUSED                                             syscall.Errno = 5058
+	ERROR_CLUSTER_NO_SECURITY_CONTEXT                                         syscall.Errno = 5059
+	ERROR_CLUSTER_NETWORK_NOT_INTERNAL                                        syscall.Errno = 5060
+	ERROR_CLUSTER_NODE_ALREADY_UP                                             syscall.Errno = 5061
+	ERROR_CLUSTER_NODE_ALREADY_DOWN                                           syscall.Errno = 5062
+	ERROR_CLUSTER_NETWORK_ALREADY_ONLINE                                      syscall.Errno = 5063
+	ERROR_CLUSTER_NETWORK_ALREADY_OFFLINE                                     syscall.Errno = 5064
+	ERROR_CLUSTER_NODE_ALREADY_MEMBER                                         syscall.Errno = 5065
+	ERROR_CLUSTER_LAST_INTERNAL_NETWORK                                       syscall.Errno = 5066
+	ERROR_CLUSTER_NETWORK_HAS_DEPENDENTS                                      syscall.Errno = 5067
+	ERROR_INVALID_OPERATION_ON_QUORUM                                         syscall.Errno = 5068
+	ERROR_DEPENDENCY_NOT_ALLOWED                                              syscall.Errno = 5069
+	ERROR_CLUSTER_NODE_PAUSED                                                 syscall.Errno = 5070
+	ERROR_NODE_CANT_HOST_RESOURCE                                             syscall.Errno = 5071
+	ERROR_CLUSTER_NODE_NOT_READY                                              syscall.Errno = 5072
+	ERROR_CLUSTER_NODE_SHUTTING_DOWN                                          syscall.Errno = 5073
+	ERROR_CLUSTER_JOIN_ABORTED                                                syscall.Errno = 5074
+	ERROR_CLUSTER_INCOMPATIBLE_VERSIONS                                       syscall.Errno = 5075
+	ERROR_CLUSTER_MAXNUM_OF_RESOURCES_EXCEEDED                                syscall.Errno = 5076
+	ERROR_CLUSTER_SYSTEM_CONFIG_CHANGED                                       syscall.Errno = 5077
+	ERROR_CLUSTER_RESOURCE_TYPE_NOT_FOUND                                     syscall.Errno = 5078
+	ERROR_CLUSTER_RESTYPE_NOT_SUPPORTED                                       syscall.Errno = 5079
+	ERROR_CLUSTER_RESNAME_NOT_FOUND                                           syscall.Errno = 5080
+	ERROR_CLUSTER_NO_RPC_PACKAGES_REGISTERED                                  syscall.Errno = 5081
+	ERROR_CLUSTER_OWNER_NOT_IN_PREFLIST                                       syscall.Errno = 5082
+	ERROR_CLUSTER_DATABASE_SEQMISMATCH                                        syscall.Errno = 5083
+	ERROR_RESMON_INVALID_STATE                                                syscall.Errno = 5084
+	ERROR_CLUSTER_GUM_NOT_LOCKER                                              syscall.Errno = 5085
+	ERROR_QUORUM_DISK_NOT_FOUND                                               syscall.Errno = 5086
+	ERROR_DATABASE_BACKUP_CORRUPT                                             syscall.Errno = 5087
+	ERROR_CLUSTER_NODE_ALREADY_HAS_DFS_ROOT                                   syscall.Errno = 5088
+	ERROR_RESOURCE_PROPERTY_UNCHANGEABLE                                      syscall.Errno = 5089
+	ERROR_NO_ADMIN_ACCESS_POINT                                               syscall.Errno = 5090
+	ERROR_CLUSTER_MEMBERSHIP_INVALID_STATE                                    syscall.Errno = 5890
+	ERROR_CLUSTER_QUORUMLOG_NOT_FOUND                                         syscall.Errno = 5891
+	ERROR_CLUSTER_MEMBERSHIP_HALT                                             syscall.Errno = 5892
+	ERROR_CLUSTER_INSTANCE_ID_MISMATCH                                        syscall.Errno = 5893
+	ERROR_CLUSTER_NETWORK_NOT_FOUND_FOR_IP                                    syscall.Errno = 5894
+	ERROR_CLUSTER_PROPERTY_DATA_TYPE_MISMATCH                                 syscall.Errno = 5895
+	ERROR_CLUSTER_EVICT_WITHOUT_CLEANUP                                       syscall.Errno = 5896
+	ERROR_CLUSTER_PARAMETER_MISMATCH                                          syscall.Errno = 5897
+	ERROR_NODE_CANNOT_BE_CLUSTERED                                            syscall.Errno = 5898
+	ERROR_CLUSTER_WRONG_OS_VERSION                                            syscall.Errno = 5899
+	ERROR_CLUSTER_CANT_CREATE_DUP_CLUSTER_NAME                                syscall.Errno = 5900
+	ERROR_CLUSCFG_ALREADY_COMMITTED                                           syscall.Errno = 5901
+	ERROR_CLUSCFG_ROLLBACK_FAILED                                             syscall.Errno = 5902
+	ERROR_CLUSCFG_SYSTEM_DISK_DRIVE_LETTER_CONFLICT                           syscall.Errno = 5903
+	ERROR_CLUSTER_OLD_VERSION                                                 syscall.Errno = 5904
+	ERROR_CLUSTER_MISMATCHED_COMPUTER_ACCT_NAME                               syscall.Errno = 5905
+	ERROR_CLUSTER_NO_NET_ADAPTERS                                             syscall.Errno = 5906
+	ERROR_CLUSTER_POISONED                                                    syscall.Errno = 5907
+	ERROR_CLUSTER_GROUP_MOVING                                                syscall.Errno = 5908
+	ERROR_CLUSTER_RESOURCE_TYPE_BUSY                                          syscall.Errno = 5909
+	ERROR_RESOURCE_CALL_TIMED_OUT                                             syscall.Errno = 5910
+	ERROR_INVALID_CLUSTER_IPV6_ADDRESS                                        syscall.Errno = 5911
+	ERROR_CLUSTER_INTERNAL_INVALID_FUNCTION                                   syscall.Errno = 5912
+	ERROR_CLUSTER_PARAMETER_OUT_OF_BOUNDS                                     syscall.Errno = 5913
+	ERROR_CLUSTER_PARTIAL_SEND                                                syscall.Errno = 5914
+	ERROR_CLUSTER_REGISTRY_INVALID_FUNCTION                                   syscall.Errno = 5915
+	ERROR_CLUSTER_INVALID_STRING_TERMINATION                                  syscall.Errno = 5916
+	ERROR_CLUSTER_INVALID_STRING_FORMAT                                       syscall.Errno = 5917
+	ERROR_CLUSTER_DATABASE_TRANSACTION_IN_PROGRESS                            syscall.Errno = 5918
+	ERROR_CLUSTER_DATABASE_TRANSACTION_NOT_IN_PROGRESS                        syscall.Errno = 5919
+	ERROR_CLUSTER_NULL_DATA                                                   syscall.Errno = 5920
+	ERROR_CLUSTER_PARTIAL_READ                                                syscall.Errno = 5921
+	ERROR_CLUSTER_PARTIAL_WRITE                                               syscall.Errno = 5922
+	ERROR_CLUSTER_CANT_DESERIALIZE_DATA                                       syscall.Errno = 5923
+	ERROR_DEPENDENT_RESOURCE_PROPERTY_CONFLICT                                syscall.Errno = 5924
+	ERROR_CLUSTER_NO_QUORUM                                                   syscall.Errno = 5925
+	ERROR_CLUSTER_INVALID_IPV6_NETWORK                                        syscall.Errno = 5926
+	ERROR_CLUSTER_INVALID_IPV6_TUNNEL_NETWORK                                 syscall.Errno = 5927
+	ERROR_QUORUM_NOT_ALLOWED_IN_THIS_GROUP                                    syscall.Errno = 5928
+	ERROR_DEPENDENCY_TREE_TOO_COMPLEX                                         syscall.Errno = 5929
+	ERROR_EXCEPTION_IN_RESOURCE_CALL                                          syscall.Errno = 5930
+	ERROR_CLUSTER_RHS_FAILED_INITIALIZATION                                   syscall.Errno = 5931
+	ERROR_CLUSTER_NOT_INSTALLED                                               syscall.Errno = 5932
+	ERROR_CLUSTER_RESOURCES_MUST_BE_ONLINE_ON_THE_SAME_NODE                   syscall.Errno = 5933
+	ERROR_CLUSTER_MAX_NODES_IN_CLUSTER                                        syscall.Errno = 5934
+	ERROR_CLUSTER_TOO_MANY_NODES                                              syscall.Errno = 5935
+	ERROR_CLUSTER_OBJECT_ALREADY_USED                                         syscall.Errno = 5936
+	ERROR_NONCORE_GROUPS_FOUND                                                syscall.Errno = 5937
+	ERROR_FILE_SHARE_RESOURCE_CONFLICT                                        syscall.Errno = 5938
+	ERROR_CLUSTER_EVICT_INVALID_REQUEST                                       syscall.Errno = 5939
+	ERROR_CLUSTER_SINGLETON_RESOURCE                                          syscall.Errno = 5940
+	ERROR_CLUSTER_GROUP_SINGLETON_RESOURCE                                    syscall.Errno = 5941
+	ERROR_CLUSTER_RESOURCE_PROVIDER_FAILED                                    syscall.Errno = 5942
+	ERROR_CLUSTER_RESOURCE_CONFIGURATION_ERROR                                syscall.Errno = 5943
+	ERROR_CLUSTER_GROUP_BUSY                                                  syscall.Errno = 5944
+	ERROR_CLUSTER_NOT_SHARED_VOLUME                                           syscall.Errno = 5945
+	ERROR_CLUSTER_INVALID_SECURITY_DESCRIPTOR                                 syscall.Errno = 5946
+	ERROR_CLUSTER_SHARED_VOLUMES_IN_USE                                       syscall.Errno = 5947
+	ERROR_CLUSTER_USE_SHARED_VOLUMES_API                                      syscall.Errno = 5948
+	ERROR_CLUSTER_BACKUP_IN_PROGRESS                                          syscall.Errno = 5949
+	ERROR_NON_CSV_PATH                                                        syscall.Errno = 5950
+	ERROR_CSV_VOLUME_NOT_LOCAL                                                syscall.Errno = 5951
+	ERROR_CLUSTER_WATCHDOG_TERMINATING                                        syscall.Errno = 5952
+	ERROR_CLUSTER_RESOURCE_VETOED_MOVE_INCOMPATIBLE_NODES                     syscall.Errno = 5953
+	ERROR_CLUSTER_INVALID_NODE_WEIGHT                                         syscall.Errno = 5954
+	ERROR_CLUSTER_RESOURCE_VETOED_CALL                                        syscall.Errno = 5955
+	ERROR_RESMON_SYSTEM_RESOURCES_LACKING                                     syscall.Errno = 5956
+	ERROR_CLUSTER_RESOURCE_VETOED_MOVE_NOT_ENOUGH_RESOURCES_ON_DESTINATION    syscall.Errno = 5957
+	ERROR_CLUSTER_RESOURCE_VETOED_MOVE_NOT_ENOUGH_RESOURCES_ON_SOURCE         syscall.Errno = 5958
+	ERROR_CLUSTER_GROUP_QUEUED                                                syscall.Errno = 5959
+	ERROR_CLUSTER_RESOURCE_LOCKED_STATUS                                      syscall.Errno = 5960
+	ERROR_CLUSTER_SHARED_VOLUME_FAILOVER_NOT_ALLOWED                          syscall.Errno = 5961
+	ERROR_CLUSTER_NODE_DRAIN_IN_PROGRESS                                      syscall.Errno = 5962
+	ERROR_CLUSTER_DISK_NOT_CONNECTED                                          syscall.Errno = 5963
+	ERROR_DISK_NOT_CSV_CAPABLE                                                syscall.Errno = 5964
+	ERROR_RESOURCE_NOT_IN_AVAILABLE_STORAGE                                   syscall.Errno = 5965
+	ERROR_CLUSTER_SHARED_VOLUME_REDIRECTED                                    syscall.Errno = 5966
+	ERROR_CLUSTER_SHARED_VOLUME_NOT_REDIRECTED                                syscall.Errno = 5967
+	ERROR_CLUSTER_CANNOT_RETURN_PROPERTIES                                    syscall.Errno = 5968
+	ERROR_CLUSTER_RESOURCE_CONTAINS_UNSUPPORTED_DIFF_AREA_FOR_SHARED_VOLUMES  syscall.Errno = 5969
+	ERROR_CLUSTER_RESOURCE_IS_IN_MAINTENANCE_MODE                             syscall.Errno = 5970
+	ERROR_CLUSTER_AFFINITY_CONFLICT                                           syscall.Errno = 5971
+	ERROR_CLUSTER_RESOURCE_IS_REPLICA_VIRTUAL_MACHINE                         syscall.Errno = 5972
+	ERROR_CLUSTER_UPGRADE_INCOMPATIBLE_VERSIONS                               syscall.Errno = 5973
+	ERROR_CLUSTER_UPGRADE_FIX_QUORUM_NOT_SUPPORTED                            syscall.Errno = 5974
+	ERROR_CLUSTER_UPGRADE_RESTART_REQUIRED                                    syscall.Errno = 5975
+	ERROR_CLUSTER_UPGRADE_IN_PROGRESS                                         syscall.Errno = 5976
+	ERROR_CLUSTER_UPGRADE_INCOMPLETE                                          syscall.Errno = 5977
+	ERROR_CLUSTER_NODE_IN_GRACE_PERIOD                                        syscall.Errno = 5978
+	ERROR_CLUSTER_CSV_IO_PAUSE_TIMEOUT                                        syscall.Errno = 5979
+	ERROR_NODE_NOT_ACTIVE_CLUSTER_MEMBER                                      syscall.Errno = 5980
+	ERROR_CLUSTER_RESOURCE_NOT_MONITORED                                      syscall.Errno = 5981
+	ERROR_CLUSTER_RESOURCE_DOES_NOT_SUPPORT_UNMONITORED                       syscall.Errno = 5982
+	ERROR_CLUSTER_RESOURCE_IS_REPLICATED                                      syscall.Errno = 5983
+	ERROR_CLUSTER_NODE_ISOLATED                                               syscall.Errno = 5984
+	ERROR_CLUSTER_NODE_QUARANTINED                                            syscall.Errno = 5985
+	ERROR_CLUSTER_DATABASE_UPDATE_CONDITION_FAILED                            syscall.Errno = 5986
+	ERROR_CLUSTER_SPACE_DEGRADED                                              syscall.Errno = 5987
+	ERROR_CLUSTER_TOKEN_DELEGATION_NOT_SUPPORTED                              syscall.Errno = 5988
+	ERROR_CLUSTER_CSV_INVALID_HANDLE                                          syscall.Errno = 5989
+	ERROR_CLUSTER_CSV_SUPPORTED_ONLY_ON_COORDINATOR                           syscall.Errno = 5990
+	ERROR_GROUPSET_NOT_AVAILABLE                                              syscall.Errno = 5991
+	ERROR_GROUPSET_NOT_FOUND                                                  syscall.Errno = 5992
+	ERROR_GROUPSET_CANT_PROVIDE                                               syscall.Errno = 5993
+	ERROR_CLUSTER_FAULT_DOMAIN_PARENT_NOT_FOUND                               syscall.Errno = 5994
+	ERROR_CLUSTER_FAULT_DOMAIN_INVALID_HIERARCHY                              syscall.Errno = 5995
+	ERROR_CLUSTER_FAULT_DOMAIN_FAILED_S2D_VALIDATION                          syscall.Errno = 5996
+	ERROR_CLUSTER_FAULT_DOMAIN_S2D_CONNECTIVITY_LOSS                          syscall.Errno = 5997
+	ERROR_CLUSTER_INVALID_INFRASTRUCTURE_FILESERVER_NAME                      syscall.Errno = 5998
+	ERROR_CLUSTERSET_MANAGEMENT_CLUSTER_UNREACHABLE                           syscall.Errno = 5999
+	ERROR_ENCRYPTION_FAILED                                                   syscall.Errno = 6000
+	ERROR_DECRYPTION_FAILED                                                   syscall.Errno = 6001
+	ERROR_FILE_ENCRYPTED                                                      syscall.Errno = 6002
+	ERROR_NO_RECOVERY_POLICY                                                  syscall.Errno = 6003
+	ERROR_NO_EFS                                                              syscall.Errno = 6004
+	ERROR_WRONG_EFS                                                           syscall.Errno = 6005
+	ERROR_NO_USER_KEYS                                                        syscall.Errno = 6006
+	ERROR_FILE_NOT_ENCRYPTED                                                  syscall.Errno = 6007
+	ERROR_NOT_EXPORT_FORMAT                                                   syscall.Errno = 6008
+	ERROR_FILE_READ_ONLY                                                      syscall.Errno = 6009
+	ERROR_DIR_EFS_DISALLOWED                                                  syscall.Errno = 6010
+	ERROR_EFS_SERVER_NOT_TRUSTED                                              syscall.Errno = 6011
+	ERROR_BAD_RECOVERY_POLICY                                                 syscall.Errno = 6012
+	ERROR_EFS_ALG_BLOB_TOO_BIG                                                syscall.Errno = 6013
+	ERROR_VOLUME_NOT_SUPPORT_EFS                                              syscall.Errno = 6014
+	ERROR_EFS_DISABLED                                                        syscall.Errno = 6015
+	ERROR_EFS_VERSION_NOT_SUPPORT                                             syscall.Errno = 6016
+	ERROR_CS_ENCRYPTION_INVALID_SERVER_RESPONSE                               syscall.Errno = 6017
+	ERROR_CS_ENCRYPTION_UNSUPPORTED_SERVER                                    syscall.Errno = 6018
+	ERROR_CS_ENCRYPTION_EXISTING_ENCRYPTED_FILE                               syscall.Errno = 6019
+	ERROR_CS_ENCRYPTION_NEW_ENCRYPTED_FILE                                    syscall.Errno = 6020
+	ERROR_CS_ENCRYPTION_FILE_NOT_CSE                                          syscall.Errno = 6021
+	ERROR_ENCRYPTION_POLICY_DENIES_OPERATION                                  syscall.Errno = 6022
+	ERROR_NO_BROWSER_SERVERS_FOUND                                            syscall.Errno = 6118
+	SCHED_E_SERVICE_NOT_LOCALSYSTEM                                           syscall.Errno = 6200
+	ERROR_LOG_SECTOR_INVALID                                                  syscall.Errno = 6600
+	ERROR_LOG_SECTOR_PARITY_INVALID                                           syscall.Errno = 6601
+	ERROR_LOG_SECTOR_REMAPPED                                                 syscall.Errno = 6602
+	ERROR_LOG_BLOCK_INCOMPLETE                                                syscall.Errno = 6603
+	ERROR_LOG_INVALID_RANGE                                                   syscall.Errno = 6604
+	ERROR_LOG_BLOCKS_EXHAUSTED                                                syscall.Errno = 6605
+	ERROR_LOG_READ_CONTEXT_INVALID                                            syscall.Errno = 6606
+	ERROR_LOG_RESTART_INVALID                                                 syscall.Errno = 6607
+	ERROR_LOG_BLOCK_VERSION                                                   syscall.Errno = 6608
+	ERROR_LOG_BLOCK_INVALID                                                   syscall.Errno = 6609
+	ERROR_LOG_READ_MODE_INVALID                                               syscall.Errno = 6610
+	ERROR_LOG_NO_RESTART                                                      syscall.Errno = 6611
+	ERROR_LOG_METADATA_CORRUPT                                                syscall.Errno = 6612
+	ERROR_LOG_METADATA_INVALID                                                syscall.Errno = 6613
+	ERROR_LOG_METADATA_INCONSISTENT                                           syscall.Errno = 6614
+	ERROR_LOG_RESERVATION_INVALID                                             syscall.Errno = 6615
+	ERROR_LOG_CANT_DELETE                                                     syscall.Errno = 6616
+	ERROR_LOG_CONTAINER_LIMIT_EXCEEDED                                        syscall.Errno = 6617
+	ERROR_LOG_START_OF_LOG                                                    syscall.Errno = 6618
+	ERROR_LOG_POLICY_ALREADY_INSTALLED                                        syscall.Errno = 6619
+	ERROR_LOG_POLICY_NOT_INSTALLED                                            syscall.Errno = 6620
+	ERROR_LOG_POLICY_INVALID                                                  syscall.Errno = 6621
+	ERROR_LOG_POLICY_CONFLICT                                                 syscall.Errno = 6622
+	ERROR_LOG_PINNED_ARCHIVE_TAIL                                             syscall.Errno = 6623
+	ERROR_LOG_RECORD_NONEXISTENT                                              syscall.Errno = 6624
+	ERROR_LOG_RECORDS_RESERVED_INVALID                                        syscall.Errno = 6625
+	ERROR_LOG_SPACE_RESERVED_INVALID                                          syscall.Errno = 6626
+	ERROR_LOG_TAIL_INVALID                                                    syscall.Errno = 6627
+	ERROR_LOG_FULL                                                            syscall.Errno = 6628
+	ERROR_COULD_NOT_RESIZE_LOG                                                syscall.Errno = 6629
+	ERROR_LOG_MULTIPLEXED                                                     syscall.Errno = 6630
+	ERROR_LOG_DEDICATED                                                       syscall.Errno = 6631
+	ERROR_LOG_ARCHIVE_NOT_IN_PROGRESS                                         syscall.Errno = 6632
+	ERROR_LOG_ARCHIVE_IN_PROGRESS                                             syscall.Errno = 6633
+	ERROR_LOG_EPHEMERAL                                                       syscall.Errno = 6634
+	ERROR_LOG_NOT_ENOUGH_CONTAINERS                                           syscall.Errno = 6635
+	ERROR_LOG_CLIENT_ALREADY_REGISTERED                                       syscall.Errno = 6636
+	ERROR_LOG_CLIENT_NOT_REGISTERED                                           syscall.Errno = 6637
+	ERROR_LOG_FULL_HANDLER_IN_PROGRESS                                        syscall.Errno = 6638
+	ERROR_LOG_CONTAINER_READ_FAILED                                           syscall.Errno = 6639
+	ERROR_LOG_CONTAINER_WRITE_FAILED                                          syscall.Errno = 6640
+	ERROR_LOG_CONTAINER_OPEN_FAILED                                           syscall.Errno = 6641
+	ERROR_LOG_CONTAINER_STATE_INVALID                                         syscall.Errno = 6642
+	ERROR_LOG_STATE_INVALID                                                   syscall.Errno = 6643
+	ERROR_LOG_PINNED                                                          syscall.Errno = 6644
+	ERROR_LOG_METADATA_FLUSH_FAILED                                           syscall.Errno = 6645
+	ERROR_LOG_INCONSISTENT_SECURITY                                           syscall.Errno = 6646
+	ERROR_LOG_APPENDED_FLUSH_FAILED                                           syscall.Errno = 6647
+	ERROR_LOG_PINNED_RESERVATION                                              syscall.Errno = 6648
+	ERROR_INVALID_TRANSACTION                                                 syscall.Errno = 6700
+	ERROR_TRANSACTION_NOT_ACTIVE                                              syscall.Errno = 6701
+	ERROR_TRANSACTION_REQUEST_NOT_VALID                                       syscall.Errno = 6702
+	ERROR_TRANSACTION_NOT_REQUESTED                                           syscall.Errno = 6703
+	ERROR_TRANSACTION_ALREADY_ABORTED                                         syscall.Errno = 6704
+	ERROR_TRANSACTION_ALREADY_COMMITTED                                       syscall.Errno = 6705
+	ERROR_TM_INITIALIZATION_FAILED                                            syscall.Errno = 6706
+	ERROR_RESOURCEMANAGER_READ_ONLY                                           syscall.Errno = 6707
+	ERROR_TRANSACTION_NOT_JOINED                                              syscall.Errno = 6708
+	ERROR_TRANSACTION_SUPERIOR_EXISTS                                         syscall.Errno = 6709
+	ERROR_CRM_PROTOCOL_ALREADY_EXISTS                                         syscall.Errno = 6710
+	ERROR_TRANSACTION_PROPAGATION_FAILED                                      syscall.Errno = 6711
+	ERROR_CRM_PROTOCOL_NOT_FOUND                                              syscall.Errno = 6712
+	ERROR_TRANSACTION_INVALID_MARSHALL_BUFFER                                 syscall.Errno = 6713
+	ERROR_CURRENT_TRANSACTION_NOT_VALID                                       syscall.Errno = 6714
+	ERROR_TRANSACTION_NOT_FOUND                                               syscall.Errno = 6715
+	ERROR_RESOURCEMANAGER_NOT_FOUND                                           syscall.Errno = 6716
+	ERROR_ENLISTMENT_NOT_FOUND                                                syscall.Errno = 6717
+	ERROR_TRANSACTIONMANAGER_NOT_FOUND                                        syscall.Errno = 6718
+	ERROR_TRANSACTIONMANAGER_NOT_ONLINE                                       syscall.Errno = 6719
+	ERROR_TRANSACTIONMANAGER_RECOVERY_NAME_COLLISION                          syscall.Errno = 6720
+	ERROR_TRANSACTION_NOT_ROOT                                                syscall.Errno = 6721
+	ERROR_TRANSACTION_OBJECT_EXPIRED                                          syscall.Errno = 6722
+	ERROR_TRANSACTION_RESPONSE_NOT_ENLISTED                                   syscall.Errno = 6723
+	ERROR_TRANSACTION_RECORD_TOO_LONG                                         syscall.Errno = 6724
+	ERROR_IMPLICIT_TRANSACTION_NOT_SUPPORTED                                  syscall.Errno = 6725
+	ERROR_TRANSACTION_INTEGRITY_VIOLATED                                      syscall.Errno = 6726
+	ERROR_TRANSACTIONMANAGER_IDENTITY_MISMATCH                                syscall.Errno = 6727
+	ERROR_RM_CANNOT_BE_FROZEN_FOR_SNAPSHOT                                    syscall.Errno = 6728
+	ERROR_TRANSACTION_MUST_WRITETHROUGH                                       syscall.Errno = 6729
+	ERROR_TRANSACTION_NO_SUPERIOR                                             syscall.Errno = 6730
+	ERROR_HEURISTIC_DAMAGE_POSSIBLE                                           syscall.Errno = 6731
+	ERROR_TRANSACTIONAL_CONFLICT                                              syscall.Errno = 6800
+	ERROR_RM_NOT_ACTIVE                                                       syscall.Errno = 6801
+	ERROR_RM_METADATA_CORRUPT                                                 syscall.Errno = 6802
+	ERROR_DIRECTORY_NOT_RM                                                    syscall.Errno = 6803
+	ERROR_TRANSACTIONS_UNSUPPORTED_REMOTE                                     syscall.Errno = 6805
+	ERROR_LOG_RESIZE_INVALID_SIZE                                             syscall.Errno = 6806
+	ERROR_OBJECT_NO_LONGER_EXISTS                                             syscall.Errno = 6807
+	ERROR_STREAM_MINIVERSION_NOT_FOUND                                        syscall.Errno = 6808
+	ERROR_STREAM_MINIVERSION_NOT_VALID                                        syscall.Errno = 6809
+	ERROR_MINIVERSION_INACCESSIBLE_FROM_SPECIFIED_TRANSACTION                 syscall.Errno = 6810
+	ERROR_CANT_OPEN_MINIVERSION_WITH_MODIFY_INTENT                            syscall.Errno = 6811
+	ERROR_CANT_CREATE_MORE_STREAM_MINIVERSIONS                                syscall.Errno = 6812
+	ERROR_REMOTE_FILE_VERSION_MISMATCH                                        syscall.Errno = 6814
+	ERROR_HANDLE_NO_LONGER_VALID                                              syscall.Errno = 6815
+	ERROR_NO_TXF_METADATA                                                     syscall.Errno = 6816
+	ERROR_LOG_CORRUPTION_DETECTED                                             syscall.Errno = 6817
+	ERROR_CANT_RECOVER_WITH_HANDLE_OPEN                                       syscall.Errno = 6818
+	ERROR_RM_DISCONNECTED                                                     syscall.Errno = 6819
+	ERROR_ENLISTMENT_NOT_SUPERIOR                                             syscall.Errno = 6820
+	ERROR_RECOVERY_NOT_NEEDED                                                 syscall.Errno = 6821
+	ERROR_RM_ALREADY_STARTED                                                  syscall.Errno = 6822
+	ERROR_FILE_IDENTITY_NOT_PERSISTENT                                        syscall.Errno = 6823
+	ERROR_CANT_BREAK_TRANSACTIONAL_DEPENDENCY                                 syscall.Errno = 6824
+	ERROR_CANT_CROSS_RM_BOUNDARY                                              syscall.Errno = 6825
+	ERROR_TXF_DIR_NOT_EMPTY                                                   syscall.Errno = 6826
+	ERROR_INDOUBT_TRANSACTIONS_EXIST                                          syscall.Errno = 6827
+	ERROR_TM_VOLATILE                                                         syscall.Errno = 6828
+	ERROR_ROLLBACK_TIMER_EXPIRED                                              syscall.Errno = 6829
+	ERROR_TXF_ATTRIBUTE_CORRUPT                                               syscall.Errno = 6830
+	ERROR_EFS_NOT_ALLOWED_IN_TRANSACTION                                      syscall.Errno = 6831
+	ERROR_TRANSACTIONAL_OPEN_NOT_ALLOWED                                      syscall.Errno = 6832
+	ERROR_LOG_GROWTH_FAILED                                                   syscall.Errno = 6833
+	ERROR_TRANSACTED_MAPPING_UNSUPPORTED_REMOTE                               syscall.Errno = 6834
+	ERROR_TXF_METADATA_ALREADY_PRESENT                                        syscall.Errno = 6835
+	ERROR_TRANSACTION_SCOPE_CALLBACKS_NOT_SET                                 syscall.Errno = 6836
+	ERROR_TRANSACTION_REQUIRED_PROMOTION                                      syscall.Errno = 6837
+	ERROR_CANNOT_EXECUTE_FILE_IN_TRANSACTION                                  syscall.Errno = 6838
+	ERROR_TRANSACTIONS_NOT_FROZEN                                             syscall.Errno = 6839
+	ERROR_TRANSACTION_FREEZE_IN_PROGRESS                                      syscall.Errno = 6840
+	ERROR_NOT_SNAPSHOT_VOLUME                                                 syscall.Errno = 6841
+	ERROR_NO_SAVEPOINT_WITH_OPEN_FILES                                        syscall.Errno = 6842
+	ERROR_DATA_LOST_REPAIR                                                    syscall.Errno = 6843
+	ERROR_SPARSE_NOT_ALLOWED_IN_TRANSACTION                                   syscall.Errno = 6844
+	ERROR_TM_IDENTITY_MISMATCH                                                syscall.Errno = 6845
+	ERROR_FLOATED_SECTION                                                     syscall.Errno = 6846
+	ERROR_CANNOT_ACCEPT_TRANSACTED_WORK                                       syscall.Errno = 6847
+	ERROR_CANNOT_ABORT_TRANSACTIONS                                           syscall.Errno = 6848
+	ERROR_BAD_CLUSTERS                                                        syscall.Errno = 6849
+	ERROR_COMPRESSION_NOT_ALLOWED_IN_TRANSACTION                              syscall.Errno = 6850
+	ERROR_VOLUME_DIRTY                                                        syscall.Errno = 6851
+	ERROR_NO_LINK_TRACKING_IN_TRANSACTION                                     syscall.Errno = 6852
+	ERROR_OPERATION_NOT_SUPPORTED_IN_TRANSACTION                              syscall.Errno = 6853
+	ERROR_EXPIRED_HANDLE                                                      syscall.Errno = 6854
+	ERROR_TRANSACTION_NOT_ENLISTED                                            syscall.Errno = 6855
+	ERROR_CTX_WINSTATION_NAME_INVALID                                         syscall.Errno = 7001
+	ERROR_CTX_INVALID_PD                                                      syscall.Errno = 7002
+	ERROR_CTX_PD_NOT_FOUND                                                    syscall.Errno = 7003
+	ERROR_CTX_WD_NOT_FOUND                                                    syscall.Errno = 7004
+	ERROR_CTX_CANNOT_MAKE_EVENTLOG_ENTRY                                      syscall.Errno = 7005
+	ERROR_CTX_SERVICE_NAME_COLLISION                                          syscall.Errno = 7006
+	ERROR_CTX_CLOSE_PENDING                                                   syscall.Errno = 7007
+	ERROR_CTX_NO_OUTBUF                                                       syscall.Errno = 7008
+	ERROR_CTX_MODEM_INF_NOT_FOUND                                             syscall.Errno = 7009
+	ERROR_CTX_INVALID_MODEMNAME                                               syscall.Errno = 7010
+	ERROR_CTX_MODEM_RESPONSE_ERROR                                            syscall.Errno = 7011
+	ERROR_CTX_MODEM_RESPONSE_TIMEOUT                                          syscall.Errno = 7012
+	ERROR_CTX_MODEM_RESPONSE_NO_CARRIER                                       syscall.Errno = 7013
+	ERROR_CTX_MODEM_RESPONSE_NO_DIALTONE                                      syscall.Errno = 7014
+	ERROR_CTX_MODEM_RESPONSE_BUSY                                             syscall.Errno = 7015
+	ERROR_CTX_MODEM_RESPONSE_VOICE                                            syscall.Errno = 7016
+	ERROR_CTX_TD_ERROR                                                        syscall.Errno = 7017
+	ERROR_CTX_WINSTATION_NOT_FOUND                                            syscall.Errno = 7022
+	ERROR_CTX_WINSTATION_ALREADY_EXISTS                                       syscall.Errno = 7023
+	ERROR_CTX_WINSTATION_BUSY                                                 syscall.Errno = 7024
+	ERROR_CTX_BAD_VIDEO_MODE                                                  syscall.Errno = 7025
+	ERROR_CTX_GRAPHICS_INVALID                                                syscall.Errno = 7035
+	ERROR_CTX_LOGON_DISABLED                                                  syscall.Errno = 7037
+	ERROR_CTX_NOT_CONSOLE                                                     syscall.Errno = 7038
+	ERROR_CTX_CLIENT_QUERY_TIMEOUT                                            syscall.Errno = 7040
+	ERROR_CTX_CONSOLE_DISCONNECT                                              syscall.Errno = 7041
+	ERROR_CTX_CONSOLE_CONNECT                                                 syscall.Errno = 7042
+	ERROR_CTX_SHADOW_DENIED                                                   syscall.Errno = 7044
+	ERROR_CTX_WINSTATION_ACCESS_DENIED                                        syscall.Errno = 7045
+	ERROR_CTX_INVALID_WD                                                      syscall.Errno = 7049
+	ERROR_CTX_SHADOW_INVALID                                                  syscall.Errno = 7050
+	ERROR_CTX_SHADOW_DISABLED                                                 syscall.Errno = 7051
+	ERROR_CTX_CLIENT_LICENSE_IN_USE                                           syscall.Errno = 7052
+	ERROR_CTX_CLIENT_LICENSE_NOT_SET                                          syscall.Errno = 7053
+	ERROR_CTX_LICENSE_NOT_AVAILABLE                                           syscall.Errno = 7054
+	ERROR_CTX_LICENSE_CLIENT_INVALID                                          syscall.Errno = 7055
+	ERROR_CTX_LICENSE_EXPIRED                                                 syscall.Errno = 7056
+	ERROR_CTX_SHADOW_NOT_RUNNING                                              syscall.Errno = 7057
+	ERROR_CTX_SHADOW_ENDED_BY_MODE_CHANGE                                     syscall.Errno = 7058
+	ERROR_ACTIVATION_COUNT_EXCEEDED                                           syscall.Errno = 7059
+	ERROR_CTX_WINSTATIONS_DISABLED                                            syscall.Errno = 7060
+	ERROR_CTX_ENCRYPTION_LEVEL_REQUIRED                                       syscall.Errno = 7061
+	ERROR_CTX_SESSION_IN_USE                                                  syscall.Errno = 7062
+	ERROR_CTX_NO_FORCE_LOGOFF                                                 syscall.Errno = 7063
+	ERROR_CTX_ACCOUNT_RESTRICTION                                             syscall.Errno = 7064
+	ERROR_RDP_PROTOCOL_ERROR                                                  syscall.Errno = 7065
+	ERROR_CTX_CDM_CONNECT                                                     syscall.Errno = 7066
+	ERROR_CTX_CDM_DISCONNECT                                                  syscall.Errno = 7067
+	ERROR_CTX_SECURITY_LAYER_ERROR                                            syscall.Errno = 7068
+	ERROR_TS_INCOMPATIBLE_SESSIONS                                            syscall.Errno = 7069
+	ERROR_TS_VIDEO_SUBSYSTEM_ERROR                                            syscall.Errno = 7070
+	FRS_ERR_INVALID_API_SEQUENCE                                              syscall.Errno = 8001
+	FRS_ERR_STARTING_SERVICE                                                  syscall.Errno = 8002
+	FRS_ERR_STOPPING_SERVICE                                                  syscall.Errno = 8003
+	FRS_ERR_INTERNAL_API                                                      syscall.Errno = 8004
+	FRS_ERR_INTERNAL                                                          syscall.Errno = 8005
+	FRS_ERR_SERVICE_COMM                                                      syscall.Errno = 8006
+	FRS_ERR_INSUFFICIENT_PRIV                                                 syscall.Errno = 8007
+	FRS_ERR_AUTHENTICATION                                                    syscall.Errno = 8008
+	FRS_ERR_PARENT_INSUFFICIENT_PRIV                                          syscall.Errno = 8009
+	FRS_ERR_PARENT_AUTHENTICATION                                             syscall.Errno = 8010
+	FRS_ERR_CHILD_TO_PARENT_COMM                                              syscall.Errno = 8011
+	FRS_ERR_PARENT_TO_CHILD_COMM                                              syscall.Errno = 8012
+	FRS_ERR_SYSVOL_POPULATE                                                   syscall.Errno = 8013
+	FRS_ERR_SYSVOL_POPULATE_TIMEOUT                                           syscall.Errno = 8014
+	FRS_ERR_SYSVOL_IS_BUSY                                                    syscall.Errno = 8015
+	FRS_ERR_SYSVOL_DEMOTE                                                     syscall.Errno = 8016
+	FRS_ERR_INVALID_SERVICE_PARAMETER                                         syscall.Errno = 8017
+	DS_S_SUCCESS                                                                            = ERROR_SUCCESS
+	ERROR_DS_NOT_INSTALLED                                                    syscall.Errno = 8200
+	ERROR_DS_MEMBERSHIP_EVALUATED_LOCALLY                                     syscall.Errno = 8201
+	ERROR_DS_NO_ATTRIBUTE_OR_VALUE                                            syscall.Errno = 8202
+	ERROR_DS_INVALID_ATTRIBUTE_SYNTAX                                         syscall.Errno = 8203
+	ERROR_DS_ATTRIBUTE_TYPE_UNDEFINED                                         syscall.Errno = 8204
+	ERROR_DS_ATTRIBUTE_OR_VALUE_EXISTS                                        syscall.Errno = 8205
+	ERROR_DS_BUSY                                                             syscall.Errno = 8206
+	ERROR_DS_UNAVAILABLE                                                      syscall.Errno = 8207
+	ERROR_DS_NO_RIDS_ALLOCATED                                                syscall.Errno = 8208
+	ERROR_DS_NO_MORE_RIDS                                                     syscall.Errno = 8209
+	ERROR_DS_INCORRECT_ROLE_OWNER                                             syscall.Errno = 8210
+	ERROR_DS_RIDMGR_INIT_ERROR                                                syscall.Errno = 8211
+	ERROR_DS_OBJ_CLASS_VIOLATION                                              syscall.Errno = 8212
+	ERROR_DS_CANT_ON_NON_LEAF                                                 syscall.Errno = 8213
+	ERROR_DS_CANT_ON_RDN                                                      syscall.Errno = 8214
+	ERROR_DS_CANT_MOD_OBJ_CLASS                                               syscall.Errno = 8215
+	ERROR_DS_CROSS_DOM_MOVE_ERROR                                             syscall.Errno = 8216
+	ERROR_DS_GC_NOT_AVAILABLE                                                 syscall.Errno = 8217
+	ERROR_SHARED_POLICY                                                       syscall.Errno = 8218
+	ERROR_POLICY_OBJECT_NOT_FOUND                                             syscall.Errno = 8219
+	ERROR_POLICY_ONLY_IN_DS                                                   syscall.Errno = 8220
+	ERROR_PROMOTION_ACTIVE                                                    syscall.Errno = 8221
+	ERROR_NO_PROMOTION_ACTIVE                                                 syscall.Errno = 8222
+	ERROR_DS_OPERATIONS_ERROR                                                 syscall.Errno = 8224
+	ERROR_DS_PROTOCOL_ERROR                                                   syscall.Errno = 8225
+	ERROR_DS_TIMELIMIT_EXCEEDED                                               syscall.Errno = 8226
+	ERROR_DS_SIZELIMIT_EXCEEDED                                               syscall.Errno = 8227
+	ERROR_DS_ADMIN_LIMIT_EXCEEDED                                             syscall.Errno = 8228
+	ERROR_DS_COMPARE_FALSE                                                    syscall.Errno = 8229
+	ERROR_DS_COMPARE_TRUE                                                     syscall.Errno = 8230
+	ERROR_DS_AUTH_METHOD_NOT_SUPPORTED                                        syscall.Errno = 8231
+	ERROR_DS_STRONG_AUTH_REQUIRED                                             syscall.Errno = 8232
+	ERROR_DS_INAPPROPRIATE_AUTH                                               syscall.Errno = 8233
+	ERROR_DS_AUTH_UNKNOWN                                                     syscall.Errno = 8234
+	ERROR_DS_REFERRAL                                                         syscall.Errno = 8235
+	ERROR_DS_UNAVAILABLE_CRIT_EXTENSION                                       syscall.Errno = 8236
+	ERROR_DS_CONFIDENTIALITY_REQUIRED                                         syscall.Errno = 8237
+	ERROR_DS_INAPPROPRIATE_MATCHING                                           syscall.Errno = 8238
+	ERROR_DS_CONSTRAINT_VIOLATION                                             syscall.Errno = 8239
+	ERROR_DS_NO_SUCH_OBJECT                                                   syscall.Errno = 8240
+	ERROR_DS_ALIAS_PROBLEM                                                    syscall.Errno = 8241
+	ERROR_DS_INVALID_DN_SYNTAX                                                syscall.Errno = 8242
+	ERROR_DS_IS_LEAF                                                          syscall.Errno = 8243
+	ERROR_DS_ALIAS_DEREF_PROBLEM                                              syscall.Errno = 8244
+	ERROR_DS_UNWILLING_TO_PERFORM                                             syscall.Errno = 8245
+	ERROR_DS_LOOP_DETECT                                                      syscall.Errno = 8246
+	ERROR_DS_NAMING_VIOLATION                                                 syscall.Errno = 8247
+	ERROR_DS_OBJECT_RESULTS_TOO_LARGE                                         syscall.Errno = 8248
+	ERROR_DS_AFFECTS_MULTIPLE_DSAS                                            syscall.Errno = 8249
+	ERROR_DS_SERVER_DOWN                                                      syscall.Errno = 8250
+	ERROR_DS_LOCAL_ERROR                                                      syscall.Errno = 8251
+	ERROR_DS_ENCODING_ERROR                                                   syscall.Errno = 8252
+	ERROR_DS_DECODING_ERROR                                                   syscall.Errno = 8253
+	ERROR_DS_FILTER_UNKNOWN                                                   syscall.Errno = 8254
+	ERROR_DS_PARAM_ERROR                                                      syscall.Errno = 8255
+	ERROR_DS_NOT_SUPPORTED                                                    syscall.Errno = 8256
+	ERROR_DS_NO_RESULTS_RETURNED                                              syscall.Errno = 8257
+	ERROR_DS_CONTROL_NOT_FOUND                                                syscall.Errno = 8258
+	ERROR_DS_CLIENT_LOOP                                                      syscall.Errno = 8259
+	ERROR_DS_REFERRAL_LIMIT_EXCEEDED                                          syscall.Errno = 8260
+	ERROR_DS_SORT_CONTROL_MISSING                                             syscall.Errno = 8261
+	ERROR_DS_OFFSET_RANGE_ERROR                                               syscall.Errno = 8262
+	ERROR_DS_RIDMGR_DISABLED                                                  syscall.Errno = 8263
+	ERROR_DS_ROOT_MUST_BE_NC                                                  syscall.Errno = 8301
+	ERROR_DS_ADD_REPLICA_INHIBITED                                            syscall.Errno = 8302
+	ERROR_DS_ATT_NOT_DEF_IN_SCHEMA                                            syscall.Errno = 8303
+	ERROR_DS_MAX_OBJ_SIZE_EXCEEDED                                            syscall.Errno = 8304
+	ERROR_DS_OBJ_STRING_NAME_EXISTS                                           syscall.Errno = 8305
+	ERROR_DS_NO_RDN_DEFINED_IN_SCHEMA                                         syscall.Errno = 8306
+	ERROR_DS_RDN_DOESNT_MATCH_SCHEMA                                          syscall.Errno = 8307
+	ERROR_DS_NO_REQUESTED_ATTS_FOUND                                          syscall.Errno = 8308
+	ERROR_DS_USER_BUFFER_TO_SMALL                                             syscall.Errno = 8309
+	ERROR_DS_ATT_IS_NOT_ON_OBJ                                                syscall.Errno = 8310
+	ERROR_DS_ILLEGAL_MOD_OPERATION                                            syscall.Errno = 8311
+	ERROR_DS_OBJ_TOO_LARGE                                                    syscall.Errno = 8312
+	ERROR_DS_BAD_INSTANCE_TYPE                                                syscall.Errno = 8313
+	ERROR_DS_MASTERDSA_REQUIRED                                               syscall.Errno = 8314
+	ERROR_DS_OBJECT_CLASS_REQUIRED                                            syscall.Errno = 8315
+	ERROR_DS_MISSING_REQUIRED_ATT                                             syscall.Errno = 8316
+	ERROR_DS_ATT_NOT_DEF_FOR_CLASS                                            syscall.Errno = 8317
+	ERROR_DS_ATT_ALREADY_EXISTS                                               syscall.Errno = 8318
+	ERROR_DS_CANT_ADD_ATT_VALUES                                              syscall.Errno = 8320
+	ERROR_DS_SINGLE_VALUE_CONSTRAINT                                          syscall.Errno = 8321
+	ERROR_DS_RANGE_CONSTRAINT                                                 syscall.Errno = 8322
+	ERROR_DS_ATT_VAL_ALREADY_EXISTS                                           syscall.Errno = 8323
+	ERROR_DS_CANT_REM_MISSING_ATT                                             syscall.Errno = 8324
+	ERROR_DS_CANT_REM_MISSING_ATT_VAL                                         syscall.Errno = 8325
+	ERROR_DS_ROOT_CANT_BE_SUBREF                                              syscall.Errno = 8326
+	ERROR_DS_NO_CHAINING                                                      syscall.Errno = 8327
+	ERROR_DS_NO_CHAINED_EVAL                                                  syscall.Errno = 8328
+	ERROR_DS_NO_PARENT_OBJECT                                                 syscall.Errno = 8329
+	ERROR_DS_PARENT_IS_AN_ALIAS                                               syscall.Errno = 8330
+	ERROR_DS_CANT_MIX_MASTER_AND_REPS                                         syscall.Errno = 8331
+	ERROR_DS_CHILDREN_EXIST                                                   syscall.Errno = 8332
+	ERROR_DS_OBJ_NOT_FOUND                                                    syscall.Errno = 8333
+	ERROR_DS_ALIASED_OBJ_MISSING                                              syscall.Errno = 8334
+	ERROR_DS_BAD_NAME_SYNTAX                                                  syscall.Errno = 8335
+	ERROR_DS_ALIAS_POINTS_TO_ALIAS                                            syscall.Errno = 8336
+	ERROR_DS_CANT_DEREF_ALIAS                                                 syscall.Errno = 8337
+	ERROR_DS_OUT_OF_SCOPE                                                     syscall.Errno = 8338
+	ERROR_DS_OBJECT_BEING_REMOVED                                             syscall.Errno = 8339
+	ERROR_DS_CANT_DELETE_DSA_OBJ                                              syscall.Errno = 8340
+	ERROR_DS_GENERIC_ERROR                                                    syscall.Errno = 8341
+	ERROR_DS_DSA_MUST_BE_INT_MASTER                                           syscall.Errno = 8342
+	ERROR_DS_CLASS_NOT_DSA                                                    syscall.Errno = 8343
+	ERROR_DS_INSUFF_ACCESS_RIGHTS                                             syscall.Errno = 8344
+	ERROR_DS_ILLEGAL_SUPERIOR                                                 syscall.Errno = 8345
+	ERROR_DS_ATTRIBUTE_OWNED_BY_SAM                                           syscall.Errno = 8346
+	ERROR_DS_NAME_TOO_MANY_PARTS                                              syscall.Errno = 8347
+	ERROR_DS_NAME_TOO_LONG                                                    syscall.Errno = 8348
+	ERROR_DS_NAME_VALUE_TOO_LONG                                              syscall.Errno = 8349
+	ERROR_DS_NAME_UNPARSEABLE                                                 syscall.Errno = 8350
+	ERROR_DS_NAME_TYPE_UNKNOWN                                                syscall.Errno = 8351
+	ERROR_DS_NOT_AN_OBJECT                                                    syscall.Errno = 8352
+	ERROR_DS_SEC_DESC_TOO_SHORT                                               syscall.Errno = 8353
+	ERROR_DS_SEC_DESC_INVALID                                                 syscall.Errno = 8354
+	ERROR_DS_NO_DELETED_NAME                                                  syscall.Errno = 8355
+	ERROR_DS_SUBREF_MUST_HAVE_PARENT                                          syscall.Errno = 8356
+	ERROR_DS_NCNAME_MUST_BE_NC                                                syscall.Errno = 8357
+	ERROR_DS_CANT_ADD_SYSTEM_ONLY                                             syscall.Errno = 8358
+	ERROR_DS_CLASS_MUST_BE_CONCRETE                                           syscall.Errno = 8359
+	ERROR_DS_INVALID_DMD                                                      syscall.Errno = 8360
+	ERROR_DS_OBJ_GUID_EXISTS                                                  syscall.Errno = 8361
+	ERROR_DS_NOT_ON_BACKLINK                                                  syscall.Errno = 8362
+	ERROR_DS_NO_CROSSREF_FOR_NC                                               syscall.Errno = 8363
+	ERROR_DS_SHUTTING_DOWN                                                    syscall.Errno = 8364
+	ERROR_DS_UNKNOWN_OPERATION                                                syscall.Errno = 8365
+	ERROR_DS_INVALID_ROLE_OWNER                                               syscall.Errno = 8366
+	ERROR_DS_COULDNT_CONTACT_FSMO                                             syscall.Errno = 8367
+	ERROR_DS_CROSS_NC_DN_RENAME                                               syscall.Errno = 8368
+	ERROR_DS_CANT_MOD_SYSTEM_ONLY                                             syscall.Errno = 8369
+	ERROR_DS_REPLICATOR_ONLY                                                  syscall.Errno = 8370
+	ERROR_DS_OBJ_CLASS_NOT_DEFINED                                            syscall.Errno = 8371
+	ERROR_DS_OBJ_CLASS_NOT_SUBCLASS                                           syscall.Errno = 8372
+	ERROR_DS_NAME_REFERENCE_INVALID                                           syscall.Errno = 8373
+	ERROR_DS_CROSS_REF_EXISTS                                                 syscall.Errno = 8374
+	ERROR_DS_CANT_DEL_MASTER_CROSSREF                                         syscall.Errno = 8375
+	ERROR_DS_SUBTREE_NOTIFY_NOT_NC_HEAD                                       syscall.Errno = 8376
+	ERROR_DS_NOTIFY_FILTER_TOO_COMPLEX                                        syscall.Errno = 8377
+	ERROR_DS_DUP_RDN                                                          syscall.Errno = 8378
+	ERROR_DS_DUP_OID                                                          syscall.Errno = 8379
+	ERROR_DS_DUP_MAPI_ID                                                      syscall.Errno = 8380
+	ERROR_DS_DUP_SCHEMA_ID_GUID                                               syscall.Errno = 8381
+	ERROR_DS_DUP_LDAP_DISPLAY_NAME                                            syscall.Errno = 8382
+	ERROR_DS_SEMANTIC_ATT_TEST                                                syscall.Errno = 8383
+	ERROR_DS_SYNTAX_MISMATCH                                                  syscall.Errno = 8384
+	ERROR_DS_EXISTS_IN_MUST_HAVE                                              syscall.Errno = 8385
+	ERROR_DS_EXISTS_IN_MAY_HAVE                                               syscall.Errno = 8386
+	ERROR_DS_NONEXISTENT_MAY_HAVE                                             syscall.Errno = 8387
+	ERROR_DS_NONEXISTENT_MUST_HAVE                                            syscall.Errno = 8388
+	ERROR_DS_AUX_CLS_TEST_FAIL                                                syscall.Errno = 8389
+	ERROR_DS_NONEXISTENT_POSS_SUP                                             syscall.Errno = 8390
+	ERROR_DS_SUB_CLS_TEST_FAIL                                                syscall.Errno = 8391
+	ERROR_DS_BAD_RDN_ATT_ID_SYNTAX                                            syscall.Errno = 8392
+	ERROR_DS_EXISTS_IN_AUX_CLS                                                syscall.Errno = 8393
+	ERROR_DS_EXISTS_IN_SUB_CLS                                                syscall.Errno = 8394
+	ERROR_DS_EXISTS_IN_POSS_SUP                                               syscall.Errno = 8395
+	ERROR_DS_RECALCSCHEMA_FAILED                                              syscall.Errno = 8396
+	ERROR_DS_TREE_DELETE_NOT_FINISHED                                         syscall.Errno = 8397
+	ERROR_DS_CANT_DELETE                                                      syscall.Errno = 8398
+	ERROR_DS_ATT_SCHEMA_REQ_ID                                                syscall.Errno = 8399
+	ERROR_DS_BAD_ATT_SCHEMA_SYNTAX                                            syscall.Errno = 8400
+	ERROR_DS_CANT_CACHE_ATT                                                   syscall.Errno = 8401
+	ERROR_DS_CANT_CACHE_CLASS                                                 syscall.Errno = 8402
+	ERROR_DS_CANT_REMOVE_ATT_CACHE                                            syscall.Errno = 8403
+	ERROR_DS_CANT_REMOVE_CLASS_CACHE                                          syscall.Errno = 8404
+	ERROR_DS_CANT_RETRIEVE_DN                                                 syscall.Errno = 8405
+	ERROR_DS_MISSING_SUPREF                                                   syscall.Errno = 8406
+	ERROR_DS_CANT_RETRIEVE_INSTANCE                                           syscall.Errno = 8407
+	ERROR_DS_CODE_INCONSISTENCY                                               syscall.Errno = 8408
+	ERROR_DS_DATABASE_ERROR                                                   syscall.Errno = 8409
+	ERROR_DS_GOVERNSID_MISSING                                                syscall.Errno = 8410
+	ERROR_DS_MISSING_EXPECTED_ATT                                             syscall.Errno = 8411
+	ERROR_DS_NCNAME_MISSING_CR_REF                                            syscall.Errno = 8412
+	ERROR_DS_SECURITY_CHECKING_ERROR                                          syscall.Errno = 8413
+	ERROR_DS_SCHEMA_NOT_LOADED                                                syscall.Errno = 8414
+	ERROR_DS_SCHEMA_ALLOC_FAILED                                              syscall.Errno = 8415
+	ERROR_DS_ATT_SCHEMA_REQ_SYNTAX                                            syscall.Errno = 8416
+	ERROR_DS_GCVERIFY_ERROR                                                   syscall.Errno = 8417
+	ERROR_DS_DRA_SCHEMA_MISMATCH                                              syscall.Errno = 8418
+	ERROR_DS_CANT_FIND_DSA_OBJ                                                syscall.Errno = 8419
+	ERROR_DS_CANT_FIND_EXPECTED_NC                                            syscall.Errno = 8420
+	ERROR_DS_CANT_FIND_NC_IN_CACHE                                            syscall.Errno = 8421
+	ERROR_DS_CANT_RETRIEVE_CHILD                                              syscall.Errno = 8422
+	ERROR_DS_SECURITY_ILLEGAL_MODIFY                                          syscall.Errno = 8423
+	ERROR_DS_CANT_REPLACE_HIDDEN_REC                                          syscall.Errno = 8424
+	ERROR_DS_BAD_HIERARCHY_FILE                                               syscall.Errno = 8425
+	ERROR_DS_BUILD_HIERARCHY_TABLE_FAILED                                     syscall.Errno = 8426
+	ERROR_DS_CONFIG_PARAM_MISSING                                             syscall.Errno = 8427
+	ERROR_DS_COUNTING_AB_INDICES_FAILED                                       syscall.Errno = 8428
+	ERROR_DS_HIERARCHY_TABLE_MALLOC_FAILED                                    syscall.Errno = 8429
+	ERROR_DS_INTERNAL_FAILURE                                                 syscall.Errno = 8430
+	ERROR_DS_UNKNOWN_ERROR                                                    syscall.Errno = 8431
+	ERROR_DS_ROOT_REQUIRES_CLASS_TOP                                          syscall.Errno = 8432
+	ERROR_DS_REFUSING_FSMO_ROLES                                              syscall.Errno = 8433
+	ERROR_DS_MISSING_FSMO_SETTINGS                                            syscall.Errno = 8434
+	ERROR_DS_UNABLE_TO_SURRENDER_ROLES                                        syscall.Errno = 8435
+	ERROR_DS_DRA_GENERIC                                                      syscall.Errno = 8436
+	ERROR_DS_DRA_INVALID_PARAMETER                                            syscall.Errno = 8437
+	ERROR_DS_DRA_BUSY                                                         syscall.Errno = 8438
+	ERROR_DS_DRA_BAD_DN                                                       syscall.Errno = 8439
+	ERROR_DS_DRA_BAD_NC                                                       syscall.Errno = 8440
+	ERROR_DS_DRA_DN_EXISTS                                                    syscall.Errno = 8441
+	ERROR_DS_DRA_INTERNAL_ERROR                                               syscall.Errno = 8442
+	ERROR_DS_DRA_INCONSISTENT_DIT                                             syscall.Errno = 8443
+	ERROR_DS_DRA_CONNECTION_FAILED                                            syscall.Errno = 8444
+	ERROR_DS_DRA_BAD_INSTANCE_TYPE                                            syscall.Errno = 8445
+	ERROR_DS_DRA_OUT_OF_MEM                                                   syscall.Errno = 8446
+	ERROR_DS_DRA_MAIL_PROBLEM                                                 syscall.Errno = 8447
+	ERROR_DS_DRA_REF_ALREADY_EXISTS                                           syscall.Errno = 8448
+	ERROR_DS_DRA_REF_NOT_FOUND                                                syscall.Errno = 8449
+	ERROR_DS_DRA_OBJ_IS_REP_SOURCE                                            syscall.Errno = 8450
+	ERROR_DS_DRA_DB_ERROR                                                     syscall.Errno = 8451
+	ERROR_DS_DRA_NO_REPLICA                                                   syscall.Errno = 8452
+	ERROR_DS_DRA_ACCESS_DENIED                                                syscall.Errno = 8453
+	ERROR_DS_DRA_NOT_SUPPORTED                                                syscall.Errno = 8454
+	ERROR_DS_DRA_RPC_CANCELLED                                                syscall.Errno = 8455
+	ERROR_DS_DRA_SOURCE_DISABLED                                              syscall.Errno = 8456
+	ERROR_DS_DRA_SINK_DISABLED                                                syscall.Errno = 8457
+	ERROR_DS_DRA_NAME_COLLISION                                               syscall.Errno = 8458
+	ERROR_DS_DRA_SOURCE_REINSTALLED                                           syscall.Errno = 8459
+	ERROR_DS_DRA_MISSING_PARENT                                               syscall.Errno = 8460
+	ERROR_DS_DRA_PREEMPTED                                                    syscall.Errno = 8461
+	ERROR_DS_DRA_ABANDON_SYNC                                                 syscall.Errno = 8462
+	ERROR_DS_DRA_SHUTDOWN                                                     syscall.Errno = 8463
+	ERROR_DS_DRA_INCOMPATIBLE_PARTIAL_SET                                     syscall.Errno = 8464
+	ERROR_DS_DRA_SOURCE_IS_PARTIAL_REPLICA                                    syscall.Errno = 8465
+	ERROR_DS_DRA_EXTN_CONNECTION_FAILED                                       syscall.Errno = 8466
+	ERROR_DS_INSTALL_SCHEMA_MISMATCH                                          syscall.Errno = 8467
+	ERROR_DS_DUP_LINK_ID                                                      syscall.Errno = 8468
+	ERROR_DS_NAME_ERROR_RESOLVING                                             syscall.Errno = 8469
+	ERROR_DS_NAME_ERROR_NOT_FOUND                                             syscall.Errno = 8470
+	ERROR_DS_NAME_ERROR_NOT_UNIQUE                                            syscall.Errno = 8471
+	ERROR_DS_NAME_ERROR_NO_MAPPING                                            syscall.Errno = 8472
+	ERROR_DS_NAME_ERROR_DOMAIN_ONLY                                           syscall.Errno = 8473
+	ERROR_DS_NAME_ERROR_NO_SYNTACTICAL_MAPPING                                syscall.Errno = 8474
+	ERROR_DS_CONSTRUCTED_ATT_MOD                                              syscall.Errno = 8475
+	ERROR_DS_WRONG_OM_OBJ_CLASS                                               syscall.Errno = 8476
+	ERROR_DS_DRA_REPL_PENDING                                                 syscall.Errno = 8477
+	ERROR_DS_DS_REQUIRED                                                      syscall.Errno = 8478
+	ERROR_DS_INVALID_LDAP_DISPLAY_NAME                                        syscall.Errno = 8479
+	ERROR_DS_NON_BASE_SEARCH                                                  syscall.Errno = 8480
+	ERROR_DS_CANT_RETRIEVE_ATTS                                               syscall.Errno = 8481
+	ERROR_DS_BACKLINK_WITHOUT_LINK                                            syscall.Errno = 8482
+	ERROR_DS_EPOCH_MISMATCH                                                   syscall.Errno = 8483
+	ERROR_DS_SRC_NAME_MISMATCH                                                syscall.Errno = 8484
+	ERROR_DS_SRC_AND_DST_NC_IDENTICAL                                         syscall.Errno = 8485
+	ERROR_DS_DST_NC_MISMATCH                                                  syscall.Errno = 8486
+	ERROR_DS_NOT_AUTHORITIVE_FOR_DST_NC                                       syscall.Errno = 8487
+	ERROR_DS_SRC_GUID_MISMATCH                                                syscall.Errno = 8488
+	ERROR_DS_CANT_MOVE_DELETED_OBJECT                                         syscall.Errno = 8489
+	ERROR_DS_PDC_OPERATION_IN_PROGRESS                                        syscall.Errno = 8490
+	ERROR_DS_CROSS_DOMAIN_CLEANUP_REQD                                        syscall.Errno = 8491
+	ERROR_DS_ILLEGAL_XDOM_MOVE_OPERATION                                      syscall.Errno = 8492
+	ERROR_DS_CANT_WITH_ACCT_GROUP_MEMBERSHPS                                  syscall.Errno = 8493
+	ERROR_DS_NC_MUST_HAVE_NC_PARENT                                           syscall.Errno = 8494
+	ERROR_DS_CR_IMPOSSIBLE_TO_VALIDATE                                        syscall.Errno = 8495
+	ERROR_DS_DST_DOMAIN_NOT_NATIVE                                            syscall.Errno = 8496
+	ERROR_DS_MISSING_INFRASTRUCTURE_CONTAINER                                 syscall.Errno = 8497
+	ERROR_DS_CANT_MOVE_ACCOUNT_GROUP                                          syscall.Errno = 8498
+	ERROR_DS_CANT_MOVE_RESOURCE_GROUP                                         syscall.Errno = 8499
+	ERROR_DS_INVALID_SEARCH_FLAG                                              syscall.Errno = 8500
+	ERROR_DS_NO_TREE_DELETE_ABOVE_NC                                          syscall.Errno = 8501
+	ERROR_DS_COULDNT_LOCK_TREE_FOR_DELETE                                     syscall.Errno = 8502
+	ERROR_DS_COULDNT_IDENTIFY_OBJECTS_FOR_TREE_DELETE                         syscall.Errno = 8503
+	ERROR_DS_SAM_INIT_FAILURE                                                 syscall.Errno = 8504
+	ERROR_DS_SENSITIVE_GROUP_VIOLATION                                        syscall.Errno = 8505
+	ERROR_DS_CANT_MOD_PRIMARYGROUPID                                          syscall.Errno = 8506
+	ERROR_DS_ILLEGAL_BASE_SCHEMA_MOD                                          syscall.Errno = 8507
+	ERROR_DS_NONSAFE_SCHEMA_CHANGE                                            syscall.Errno = 8508
+	ERROR_DS_SCHEMA_UPDATE_DISALLOWED                                         syscall.Errno = 8509
+	ERROR_DS_CANT_CREATE_UNDER_SCHEMA                                         syscall.Errno = 8510
+	ERROR_DS_INSTALL_NO_SRC_SCH_VERSION                                       syscall.Errno = 8511
+	ERROR_DS_INSTALL_NO_SCH_VERSION_IN_INIFILE                                syscall.Errno = 8512
+	ERROR_DS_INVALID_GROUP_TYPE                                               syscall.Errno = 8513
+	ERROR_DS_NO_NEST_GLOBALGROUP_IN_MIXEDDOMAIN                               syscall.Errno = 8514
+	ERROR_DS_NO_NEST_LOCALGROUP_IN_MIXEDDOMAIN                                syscall.Errno = 8515
+	ERROR_DS_GLOBAL_CANT_HAVE_LOCAL_MEMBER                                    syscall.Errno = 8516
+	ERROR_DS_GLOBAL_CANT_HAVE_UNIVERSAL_MEMBER                                syscall.Errno = 8517
+	ERROR_DS_UNIVERSAL_CANT_HAVE_LOCAL_MEMBER                                 syscall.Errno = 8518
+	ERROR_DS_GLOBAL_CANT_HAVE_CROSSDOMAIN_MEMBER                              syscall.Errno = 8519
+	ERROR_DS_LOCAL_CANT_HAVE_CROSSDOMAIN_LOCAL_MEMBER                         syscall.Errno = 8520
+	ERROR_DS_HAVE_PRIMARY_MEMBERS                                             syscall.Errno = 8521
+	ERROR_DS_STRING_SD_CONVERSION_FAILED                                      syscall.Errno = 8522
+	ERROR_DS_NAMING_MASTER_GC                                                 syscall.Errno = 8523
+	ERROR_DS_DNS_LOOKUP_FAILURE                                               syscall.Errno = 8524
+	ERROR_DS_COULDNT_UPDATE_SPNS                                              syscall.Errno = 8525
+	ERROR_DS_CANT_RETRIEVE_SD                                                 syscall.Errno = 8526
+	ERROR_DS_KEY_NOT_UNIQUE                                                   syscall.Errno = 8527
+	ERROR_DS_WRONG_LINKED_ATT_SYNTAX                                          syscall.Errno = 8528
+	ERROR_DS_SAM_NEED_BOOTKEY_PASSWORD                                        syscall.Errno = 8529
+	ERROR_DS_SAM_NEED_BOOTKEY_FLOPPY                                          syscall.Errno = 8530
+	ERROR_DS_CANT_START                                                       syscall.Errno = 8531
+	ERROR_DS_INIT_FAILURE                                                     syscall.Errno = 8532
+	ERROR_DS_NO_PKT_PRIVACY_ON_CONNECTION                                     syscall.Errno = 8533
+	ERROR_DS_SOURCE_DOMAIN_IN_FOREST                                          syscall.Errno = 8534
+	ERROR_DS_DESTINATION_DOMAIN_NOT_IN_FOREST                                 syscall.Errno = 8535
+	ERROR_DS_DESTINATION_AUDITING_NOT_ENABLED                                 syscall.Errno = 8536
+	ERROR_DS_CANT_FIND_DC_FOR_SRC_DOMAIN                                      syscall.Errno = 8537
+	ERROR_DS_SRC_OBJ_NOT_GROUP_OR_USER                                        syscall.Errno = 8538
+	ERROR_DS_SRC_SID_EXISTS_IN_FOREST                                         syscall.Errno = 8539
+	ERROR_DS_SRC_AND_DST_OBJECT_CLASS_MISMATCH                                syscall.Errno = 8540
+	ERROR_SAM_INIT_FAILURE                                                    syscall.Errno = 8541
+	ERROR_DS_DRA_SCHEMA_INFO_SHIP                                             syscall.Errno = 8542
+	ERROR_DS_DRA_SCHEMA_CONFLICT                                              syscall.Errno = 8543
+	ERROR_DS_DRA_EARLIER_SCHEMA_CONFLICT                                      syscall.Errno = 8544
+	ERROR_DS_DRA_OBJ_NC_MISMATCH                                              syscall.Errno = 8545
+	ERROR_DS_NC_STILL_HAS_DSAS                                                syscall.Errno = 8546
+	ERROR_DS_GC_REQUIRED                                                      syscall.Errno = 8547
+	ERROR_DS_LOCAL_MEMBER_OF_LOCAL_ONLY                                       syscall.Errno = 8548
+	ERROR_DS_NO_FPO_IN_UNIVERSAL_GROUPS                                       syscall.Errno = 8549
+	ERROR_DS_CANT_ADD_TO_GC                                                   syscall.Errno = 8550
+	ERROR_DS_NO_CHECKPOINT_WITH_PDC                                           syscall.Errno = 8551
+	ERROR_DS_SOURCE_AUDITING_NOT_ENABLED                                      syscall.Errno = 8552
+	ERROR_DS_CANT_CREATE_IN_NONDOMAIN_NC                                      syscall.Errno = 8553
+	ERROR_DS_INVALID_NAME_FOR_SPN                                             syscall.Errno = 8554
+	ERROR_DS_FILTER_USES_CONTRUCTED_ATTRS                                     syscall.Errno = 8555
+	ERROR_DS_UNICODEPWD_NOT_IN_QUOTES                                         syscall.Errno = 8556
+	ERROR_DS_MACHINE_ACCOUNT_QUOTA_EXCEEDED                                   syscall.Errno = 8557
+	ERROR_DS_MUST_BE_RUN_ON_DST_DC                                            syscall.Errno = 8558
+	ERROR_DS_SRC_DC_MUST_BE_SP4_OR_GREATER                                    syscall.Errno = 8559
+	ERROR_DS_CANT_TREE_DELETE_CRITICAL_OBJ                                    syscall.Errno = 8560
+	ERROR_DS_INIT_FAILURE_CONSOLE                                             syscall.Errno = 8561
+	ERROR_DS_SAM_INIT_FAILURE_CONSOLE                                         syscall.Errno = 8562
+	ERROR_DS_FOREST_VERSION_TOO_HIGH                                          syscall.Errno = 8563
+	ERROR_DS_DOMAIN_VERSION_TOO_HIGH                                          syscall.Errno = 8564
+	ERROR_DS_FOREST_VERSION_TOO_LOW                                           syscall.Errno = 8565
+	ERROR_DS_DOMAIN_VERSION_TOO_LOW                                           syscall.Errno = 8566
+	ERROR_DS_INCOMPATIBLE_VERSION                                             syscall.Errno = 8567
+	ERROR_DS_LOW_DSA_VERSION                                                  syscall.Errno = 8568
+	ERROR_DS_NO_BEHAVIOR_VERSION_IN_MIXEDDOMAIN                               syscall.Errno = 8569
+	ERROR_DS_NOT_SUPPORTED_SORT_ORDER                                         syscall.Errno = 8570
+	ERROR_DS_NAME_NOT_UNIQUE                                                  syscall.Errno = 8571
+	ERROR_DS_MACHINE_ACCOUNT_CREATED_PRENT4                                   syscall.Errno = 8572
+	ERROR_DS_OUT_OF_VERSION_STORE                                             syscall.Errno = 8573
+	ERROR_DS_INCOMPATIBLE_CONTROLS_USED                                       syscall.Errno = 8574
+	ERROR_DS_NO_REF_DOMAIN                                                    syscall.Errno = 8575
+	ERROR_DS_RESERVED_LINK_ID                                                 syscall.Errno = 8576
+	ERROR_DS_LINK_ID_NOT_AVAILABLE                                            syscall.Errno = 8577
+	ERROR_DS_AG_CANT_HAVE_UNIVERSAL_MEMBER                                    syscall.Errno = 8578
+	ERROR_DS_MODIFYDN_DISALLOWED_BY_INSTANCE_TYPE                             syscall.Errno = 8579
+	ERROR_DS_NO_OBJECT_MOVE_IN_SCHEMA_NC                                      syscall.Errno = 8580
+	ERROR_DS_MODIFYDN_DISALLOWED_BY_FLAG                                      syscall.Errno = 8581
+	ERROR_DS_MODIFYDN_WRONG_GRANDPARENT                                       syscall.Errno = 8582
+	ERROR_DS_NAME_ERROR_TRUST_REFERRAL                                        syscall.Errno = 8583
+	ERROR_NOT_SUPPORTED_ON_STANDARD_SERVER                                    syscall.Errno = 8584
+	ERROR_DS_CANT_ACCESS_REMOTE_PART_OF_AD                                    syscall.Errno = 8585
+	ERROR_DS_CR_IMPOSSIBLE_TO_VALIDATE_V2                                     syscall.Errno = 8586
+	ERROR_DS_THREAD_LIMIT_EXCEEDED                                            syscall.Errno = 8587
+	ERROR_DS_NOT_CLOSEST                                                      syscall.Errno = 8588
+	ERROR_DS_CANT_DERIVE_SPN_WITHOUT_SERVER_REF                               syscall.Errno = 8589
+	ERROR_DS_SINGLE_USER_MODE_FAILED                                          syscall.Errno = 8590
+	ERROR_DS_NTDSCRIPT_SYNTAX_ERROR                                           syscall.Errno = 8591
+	ERROR_DS_NTDSCRIPT_PROCESS_ERROR                                          syscall.Errno = 8592
+	ERROR_DS_DIFFERENT_REPL_EPOCHS                                            syscall.Errno = 8593
+	ERROR_DS_DRS_EXTENSIONS_CHANGED                                           syscall.Errno = 8594
+	ERROR_DS_REPLICA_SET_CHANGE_NOT_ALLOWED_ON_DISABLED_CR                    syscall.Errno = 8595
+	ERROR_DS_NO_MSDS_INTID                                                    syscall.Errno = 8596
+	ERROR_DS_DUP_MSDS_INTID                                                   syscall.Errno = 8597
+	ERROR_DS_EXISTS_IN_RDNATTID                                               syscall.Errno = 8598
+	ERROR_DS_AUTHORIZATION_FAILED                                             syscall.Errno = 8599
+	ERROR_DS_INVALID_SCRIPT                                                   syscall.Errno = 8600
+	ERROR_DS_REMOTE_CROSSREF_OP_FAILED                                        syscall.Errno = 8601
+	ERROR_DS_CROSS_REF_BUSY                                                   syscall.Errno = 8602
+	ERROR_DS_CANT_DERIVE_SPN_FOR_DELETED_DOMAIN                               syscall.Errno = 8603
+	ERROR_DS_CANT_DEMOTE_WITH_WRITEABLE_NC                                    syscall.Errno = 8604
+	ERROR_DS_DUPLICATE_ID_FOUND                                               syscall.Errno = 8605
+	ERROR_DS_INSUFFICIENT_ATTR_TO_CREATE_OBJECT                               syscall.Errno = 8606
+	ERROR_DS_GROUP_CONVERSION_ERROR                                           syscall.Errno = 8607
+	ERROR_DS_CANT_MOVE_APP_BASIC_GROUP                                        syscall.Errno = 8608
+	ERROR_DS_CANT_MOVE_APP_QUERY_GROUP                                        syscall.Errno = 8609
+	ERROR_DS_ROLE_NOT_VERIFIED                                                syscall.Errno = 8610
+	ERROR_DS_WKO_CONTAINER_CANNOT_BE_SPECIAL                                  syscall.Errno = 8611
+	ERROR_DS_DOMAIN_RENAME_IN_PROGRESS                                        syscall.Errno = 8612
+	ERROR_DS_EXISTING_AD_CHILD_NC                                             syscall.Errno = 8613
+	ERROR_DS_REPL_LIFETIME_EXCEEDED                                           syscall.Errno = 8614
+	ERROR_DS_DISALLOWED_IN_SYSTEM_CONTAINER                                   syscall.Errno = 8615
+	ERROR_DS_LDAP_SEND_QUEUE_FULL                                             syscall.Errno = 8616
+	ERROR_DS_DRA_OUT_SCHEDULE_WINDOW                                          syscall.Errno = 8617
+	ERROR_DS_POLICY_NOT_KNOWN                                                 syscall.Errno = 8618
+	ERROR_NO_SITE_SETTINGS_OBJECT                                             syscall.Errno = 8619
+	ERROR_NO_SECRETS                                                          syscall.Errno = 8620
+	ERROR_NO_WRITABLE_DC_FOUND                                                syscall.Errno = 8621
+	ERROR_DS_NO_SERVER_OBJECT                                                 syscall.Errno = 8622
+	ERROR_DS_NO_NTDSA_OBJECT                                                  syscall.Errno = 8623
+	ERROR_DS_NON_ASQ_SEARCH                                                   syscall.Errno = 8624
+	ERROR_DS_AUDIT_FAILURE                                                    syscall.Errno = 8625
+	ERROR_DS_INVALID_SEARCH_FLAG_SUBTREE                                      syscall.Errno = 8626
+	ERROR_DS_INVALID_SEARCH_FLAG_TUPLE                                        syscall.Errno = 8627
+	ERROR_DS_HIERARCHY_TABLE_TOO_DEEP                                         syscall.Errno = 8628
+	ERROR_DS_DRA_CORRUPT_UTD_VECTOR                                           syscall.Errno = 8629
+	ERROR_DS_DRA_SECRETS_DENIED                                               syscall.Errno = 8630
+	ERROR_DS_RESERVED_MAPI_ID                                                 syscall.Errno = 8631
+	ERROR_DS_MAPI_ID_NOT_AVAILABLE                                            syscall.Errno = 8632
+	ERROR_DS_DRA_MISSING_KRBTGT_SECRET                                        syscall.Errno = 8633
+	ERROR_DS_DOMAIN_NAME_EXISTS_IN_FOREST                                     syscall.Errno = 8634
+	ERROR_DS_FLAT_NAME_EXISTS_IN_FOREST                                       syscall.Errno = 8635
+	ERROR_INVALID_USER_PRINCIPAL_NAME                                         syscall.Errno = 8636
+	ERROR_DS_OID_MAPPED_GROUP_CANT_HAVE_MEMBERS                               syscall.Errno = 8637
+	ERROR_DS_OID_NOT_FOUND                                                    syscall.Errno = 8638
+	ERROR_DS_DRA_RECYCLED_TARGET                                              syscall.Errno = 8639
+	ERROR_DS_DISALLOWED_NC_REDIRECT                                           syscall.Errno = 8640
+	ERROR_DS_HIGH_ADLDS_FFL                                                   syscall.Errno = 8641
+	ERROR_DS_HIGH_DSA_VERSION                                                 syscall.Errno = 8642
+	ERROR_DS_LOW_ADLDS_FFL                                                    syscall.Errno = 8643
+	ERROR_DOMAIN_SID_SAME_AS_LOCAL_WORKSTATION                                syscall.Errno = 8644
+	ERROR_DS_UNDELETE_SAM_VALIDATION_FAILED                                   syscall.Errno = 8645
+	ERROR_INCORRECT_ACCOUNT_TYPE                                              syscall.Errno = 8646
+	ERROR_DS_SPN_VALUE_NOT_UNIQUE_IN_FOREST                                   syscall.Errno = 8647
+	ERROR_DS_UPN_VALUE_NOT_UNIQUE_IN_FOREST                                   syscall.Errno = 8648
+	ERROR_DS_MISSING_FOREST_TRUST                                             syscall.Errno = 8649
+	ERROR_DS_VALUE_KEY_NOT_UNIQUE                                             syscall.Errno = 8650
+	DNS_ERROR_RESPONSE_CODES_BASE                                             syscall.Errno = 9000
+	DNS_ERROR_RCODE_NO_ERROR                                                                = ERROR_SUCCESS
+	DNS_ERROR_MASK                                                            syscall.Errno = 0x00002328
+	DNS_ERROR_RCODE_FORMAT_ERROR                                              syscall.Errno = 9001
+	DNS_ERROR_RCODE_SERVER_FAILURE                                            syscall.Errno = 9002
+	DNS_ERROR_RCODE_NAME_ERROR                                                syscall.Errno = 9003
+	DNS_ERROR_RCODE_NOT_IMPLEMENTED                                           syscall.Errno = 9004
+	DNS_ERROR_RCODE_REFUSED                                                   syscall.Errno = 9005
+	DNS_ERROR_RCODE_YXDOMAIN                                                  syscall.Errno = 9006
+	DNS_ERROR_RCODE_YXRRSET                                                   syscall.Errno = 9007
+	DNS_ERROR_RCODE_NXRRSET                                                   syscall.Errno = 9008
+	DNS_ERROR_RCODE_NOTAUTH                                                   syscall.Errno = 9009
+	DNS_ERROR_RCODE_NOTZONE                                                   syscall.Errno = 9010
+	DNS_ERROR_RCODE_BADSIG                                                    syscall.Errno = 9016
+	DNS_ERROR_RCODE_BADKEY                                                    syscall.Errno = 9017
+	DNS_ERROR_RCODE_BADTIME                                                   syscall.Errno = 9018
+	DNS_ERROR_RCODE_LAST                                                                    = DNS_ERROR_RCODE_BADTIME
+	DNS_ERROR_DNSSEC_BASE                                                     syscall.Errno = 9100
+	DNS_ERROR_KEYMASTER_REQUIRED                                              syscall.Errno = 9101
+	DNS_ERROR_NOT_ALLOWED_ON_SIGNED_ZONE                                      syscall.Errno = 9102
+	DNS_ERROR_NSEC3_INCOMPATIBLE_WITH_RSA_SHA1                                syscall.Errno = 9103
+	DNS_ERROR_NOT_ENOUGH_SIGNING_KEY_DESCRIPTORS                              syscall.Errno = 9104
+	DNS_ERROR_UNSUPPORTED_ALGORITHM                                           syscall.Errno = 9105
+	DNS_ERROR_INVALID_KEY_SIZE                                                syscall.Errno = 9106
+	DNS_ERROR_SIGNING_KEY_NOT_ACCESSIBLE                                      syscall.Errno = 9107
+	DNS_ERROR_KSP_DOES_NOT_SUPPORT_PROTECTION                                 syscall.Errno = 9108
+	DNS_ERROR_UNEXPECTED_DATA_PROTECTION_ERROR                                syscall.Errno = 9109
+	DNS_ERROR_UNEXPECTED_CNG_ERROR                                            syscall.Errno = 9110
+	DNS_ERROR_UNKNOWN_SIGNING_PARAMETER_VERSION                               syscall.Errno = 9111
+	DNS_ERROR_KSP_NOT_ACCESSIBLE                                              syscall.Errno = 9112
+	DNS_ERROR_TOO_MANY_SKDS                                                   syscall.Errno = 9113
+	DNS_ERROR_INVALID_ROLLOVER_PERIOD                                         syscall.Errno = 9114
+	DNS_ERROR_INVALID_INITIAL_ROLLOVER_OFFSET                                 syscall.Errno = 9115
+	DNS_ERROR_ROLLOVER_IN_PROGRESS                                            syscall.Errno = 9116
+	DNS_ERROR_STANDBY_KEY_NOT_PRESENT                                         syscall.Errno = 9117
+	DNS_ERROR_NOT_ALLOWED_ON_ZSK                                              syscall.Errno = 9118
+	DNS_ERROR_NOT_ALLOWED_ON_ACTIVE_SKD                                       syscall.Errno = 9119
+	DNS_ERROR_ROLLOVER_ALREADY_QUEUED                                         syscall.Errno = 9120
+	DNS_ERROR_NOT_ALLOWED_ON_UNSIGNED_ZONE                                    syscall.Errno = 9121
+	DNS_ERROR_BAD_KEYMASTER                                                   syscall.Errno = 9122
+	DNS_ERROR_INVALID_SIGNATURE_VALIDITY_PERIOD                               syscall.Errno = 9123
+	DNS_ERROR_INVALID_NSEC3_ITERATION_COUNT                                   syscall.Errno = 9124
+	DNS_ERROR_DNSSEC_IS_DISABLED                                              syscall.Errno = 9125
+	DNS_ERROR_INVALID_XML                                                     syscall.Errno = 9126
+	DNS_ERROR_NO_VALID_TRUST_ANCHORS                                          syscall.Errno = 9127
+	DNS_ERROR_ROLLOVER_NOT_POKEABLE                                           syscall.Errno = 9128
+	DNS_ERROR_NSEC3_NAME_COLLISION                                            syscall.Errno = 9129
+	DNS_ERROR_NSEC_INCOMPATIBLE_WITH_NSEC3_RSA_SHA1                           syscall.Errno = 9130
+	DNS_ERROR_PACKET_FMT_BASE                                                 syscall.Errno = 9500
+	DNS_INFO_NO_RECORDS                                                       syscall.Errno = 9501
+	DNS_ERROR_BAD_PACKET                                                      syscall.Errno = 9502
+	DNS_ERROR_NO_PACKET                                                       syscall.Errno = 9503
+	DNS_ERROR_RCODE                                                           syscall.Errno = 9504
+	DNS_ERROR_UNSECURE_PACKET                                                 syscall.Errno = 9505
+	DNS_STATUS_PACKET_UNSECURE                                                              = DNS_ERROR_UNSECURE_PACKET
+	DNS_REQUEST_PENDING                                                       syscall.Errno = 9506
+	DNS_ERROR_NO_MEMORY                                                                     = ERROR_OUTOFMEMORY
+	DNS_ERROR_INVALID_NAME                                                                  = ERROR_INVALID_NAME
+	DNS_ERROR_INVALID_DATA                                                                  = ERROR_INVALID_DATA
+	DNS_ERROR_GENERAL_API_BASE                                                syscall.Errno = 9550
+	DNS_ERROR_INVALID_TYPE                                                    syscall.Errno = 9551
+	DNS_ERROR_INVALID_IP_ADDRESS                                              syscall.Errno = 9552
+	DNS_ERROR_INVALID_PROPERTY                                                syscall.Errno = 9553
+	DNS_ERROR_TRY_AGAIN_LATER                                                 syscall.Errno = 9554
+	DNS_ERROR_NOT_UNIQUE                                                      syscall.Errno = 9555
+	DNS_ERROR_NON_RFC_NAME                                                    syscall.Errno = 9556
+	DNS_STATUS_FQDN                                                           syscall.Errno = 9557
+	DNS_STATUS_DOTTED_NAME                                                    syscall.Errno = 9558
+	DNS_STATUS_SINGLE_PART_NAME                                               syscall.Errno = 9559
+	DNS_ERROR_INVALID_NAME_CHAR                                               syscall.Errno = 9560
+	DNS_ERROR_NUMERIC_NAME                                                    syscall.Errno = 9561
+	DNS_ERROR_NOT_ALLOWED_ON_ROOT_SERVER                                      syscall.Errno = 9562
+	DNS_ERROR_NOT_ALLOWED_UNDER_DELEGATION                                    syscall.Errno = 9563
+	DNS_ERROR_CANNOT_FIND_ROOT_HINTS                                          syscall.Errno = 9564
+	DNS_ERROR_INCONSISTENT_ROOT_HINTS                                         syscall.Errno = 9565
+	DNS_ERROR_DWORD_VALUE_TOO_SMALL                                           syscall.Errno = 9566
+	DNS_ERROR_DWORD_VALUE_TOO_LARGE                                           syscall.Errno = 9567
+	DNS_ERROR_BACKGROUND_LOADING                                              syscall.Errno = 9568
+	DNS_ERROR_NOT_ALLOWED_ON_RODC                                             syscall.Errno = 9569
+	DNS_ERROR_NOT_ALLOWED_UNDER_DNAME                                         syscall.Errno = 9570
+	DNS_ERROR_DELEGATION_REQUIRED                                             syscall.Errno = 9571
+	DNS_ERROR_INVALID_POLICY_TABLE                                            syscall.Errno = 9572
+	DNS_ERROR_ADDRESS_REQUIRED                                                syscall.Errno = 9573
+	DNS_ERROR_ZONE_BASE                                                       syscall.Errno = 9600
+	DNS_ERROR_ZONE_DOES_NOT_EXIST                                             syscall.Errno = 9601
+	DNS_ERROR_NO_ZONE_INFO                                                    syscall.Errno = 9602
+	DNS_ERROR_INVALID_ZONE_OPERATION                                          syscall.Errno = 9603
+	DNS_ERROR_ZONE_CONFIGURATION_ERROR                                        syscall.Errno = 9604
+	DNS_ERROR_ZONE_HAS_NO_SOA_RECORD                                          syscall.Errno = 9605
+	DNS_ERROR_ZONE_HAS_NO_NS_RECORDS                                          syscall.Errno = 9606
+	DNS_ERROR_ZONE_LOCKED                                                     syscall.Errno = 9607
+	DNS_ERROR_ZONE_CREATION_FAILED                                            syscall.Errno = 9608
+	DNS_ERROR_ZONE_ALREADY_EXISTS                                             syscall.Errno = 9609
+	DNS_ERROR_AUTOZONE_ALREADY_EXISTS                                         syscall.Errno = 9610
+	DNS_ERROR_INVALID_ZONE_TYPE                                               syscall.Errno = 9611
+	DNS_ERROR_SECONDARY_REQUIRES_MASTER_IP                                    syscall.Errno = 9612
+	DNS_ERROR_ZONE_NOT_SECONDARY                                              syscall.Errno = 9613
+	DNS_ERROR_NEED_SECONDARY_ADDRESSES                                        syscall.Errno = 9614
+	DNS_ERROR_WINS_INIT_FAILED                                                syscall.Errno = 9615
+	DNS_ERROR_NEED_WINS_SERVERS                                               syscall.Errno = 9616
+	DNS_ERROR_NBSTAT_INIT_FAILED                                              syscall.Errno = 9617
+	DNS_ERROR_SOA_DELETE_INVALID                                              syscall.Errno = 9618
+	DNS_ERROR_FORWARDER_ALREADY_EXISTS                                        syscall.Errno = 9619
+	DNS_ERROR_ZONE_REQUIRES_MASTER_IP                                         syscall.Errno = 9620
+	DNS_ERROR_ZONE_IS_SHUTDOWN                                                syscall.Errno = 9621
+	DNS_ERROR_ZONE_LOCKED_FOR_SIGNING                                         syscall.Errno = 9622
+	DNS_ERROR_DATAFILE_BASE                                                   syscall.Errno = 9650
+	DNS_ERROR_PRIMARY_REQUIRES_DATAFILE                                       syscall.Errno = 9651
+	DNS_ERROR_INVALID_DATAFILE_NAME                                           syscall.Errno = 9652
+	DNS_ERROR_DATAFILE_OPEN_FAILURE                                           syscall.Errno = 9653
+	DNS_ERROR_FILE_WRITEBACK_FAILED                                           syscall.Errno = 9654
+	DNS_ERROR_DATAFILE_PARSING                                                syscall.Errno = 9655
+	DNS_ERROR_DATABASE_BASE                                                   syscall.Errno = 9700
+	DNS_ERROR_RECORD_DOES_NOT_EXIST                                           syscall.Errno = 9701
+	DNS_ERROR_RECORD_FORMAT                                                   syscall.Errno = 9702
+	DNS_ERROR_NODE_CREATION_FAILED                                            syscall.Errno = 9703
+	DNS_ERROR_UNKNOWN_RECORD_TYPE                                             syscall.Errno = 9704
+	DNS_ERROR_RECORD_TIMED_OUT                                                syscall.Errno = 9705
+	DNS_ERROR_NAME_NOT_IN_ZONE                                                syscall.Errno = 9706
+	DNS_ERROR_CNAME_LOOP                                                      syscall.Errno = 9707
+	DNS_ERROR_NODE_IS_CNAME                                                   syscall.Errno = 9708
+	DNS_ERROR_CNAME_COLLISION                                                 syscall.Errno = 9709
+	DNS_ERROR_RECORD_ONLY_AT_ZONE_ROOT                                        syscall.Errno = 9710
+	DNS_ERROR_RECORD_ALREADY_EXISTS                                           syscall.Errno = 9711
+	DNS_ERROR_SECONDARY_DATA                                                  syscall.Errno = 9712
+	DNS_ERROR_NO_CREATE_CACHE_DATA                                            syscall.Errno = 9713
+	DNS_ERROR_NAME_DOES_NOT_EXIST                                             syscall.Errno = 9714
+	DNS_WARNING_PTR_CREATE_FAILED                                             syscall.Errno = 9715
+	DNS_WARNING_DOMAIN_UNDELETED                                              syscall.Errno = 9716
+	DNS_ERROR_DS_UNAVAILABLE                                                  syscall.Errno = 9717
+	DNS_ERROR_DS_ZONE_ALREADY_EXISTS                                          syscall.Errno = 9718
+	DNS_ERROR_NO_BOOTFILE_IF_DS_ZONE                                          syscall.Errno = 9719
+	DNS_ERROR_NODE_IS_DNAME                                                   syscall.Errno = 9720
+	DNS_ERROR_DNAME_COLLISION                                                 syscall.Errno = 9721
+	DNS_ERROR_ALIAS_LOOP                                                      syscall.Errno = 9722
+	DNS_ERROR_OPERATION_BASE                                                  syscall.Errno = 9750
+	DNS_INFO_AXFR_COMPLETE                                                    syscall.Errno = 9751
+	DNS_ERROR_AXFR                                                            syscall.Errno = 9752
+	DNS_INFO_ADDED_LOCAL_WINS                                                 syscall.Errno = 9753
+	DNS_ERROR_SECURE_BASE                                                     syscall.Errno = 9800
+	DNS_STATUS_CONTINUE_NEEDED                                                syscall.Errno = 9801
+	DNS_ERROR_SETUP_BASE                                                      syscall.Errno = 9850
+	DNS_ERROR_NO_TCPIP                                                        syscall.Errno = 9851
+	DNS_ERROR_NO_DNS_SERVERS                                                  syscall.Errno = 9852
+	DNS_ERROR_DP_BASE                                                         syscall.Errno = 9900
+	DNS_ERROR_DP_DOES_NOT_EXIST                                               syscall.Errno = 9901
+	DNS_ERROR_DP_ALREADY_EXISTS                                               syscall.Errno = 9902
+	DNS_ERROR_DP_NOT_ENLISTED                                                 syscall.Errno = 9903
+	DNS_ERROR_DP_ALREADY_ENLISTED                                             syscall.Errno = 9904
+	DNS_ERROR_DP_NOT_AVAILABLE                                                syscall.Errno = 9905
+	DNS_ERROR_DP_FSMO_ERROR                                                   syscall.Errno = 9906
+	DNS_ERROR_RRL_NOT_ENABLED                                                 syscall.Errno = 9911
+	DNS_ERROR_RRL_INVALID_WINDOW_SIZE                                         syscall.Errno = 9912
+	DNS_ERROR_RRL_INVALID_IPV4_PREFIX                                         syscall.Errno = 9913
+	DNS_ERROR_RRL_INVALID_IPV6_PREFIX                                         syscall.Errno = 9914
+	DNS_ERROR_RRL_INVALID_TC_RATE                                             syscall.Errno = 9915
+	DNS_ERROR_RRL_INVALID_LEAK_RATE                                           syscall.Errno = 9916
+	DNS_ERROR_RRL_LEAK_RATE_LESSTHAN_TC_RATE                                  syscall.Errno = 9917
+	DNS_ERROR_VIRTUALIZATION_INSTANCE_ALREADY_EXISTS                          syscall.Errno = 9921
+	DNS_ERROR_VIRTUALIZATION_INSTANCE_DOES_NOT_EXIST                          syscall.Errno = 9922
+	DNS_ERROR_VIRTUALIZATION_TREE_LOCKED                                      syscall.Errno = 9923
+	DNS_ERROR_INVAILD_VIRTUALIZATION_INSTANCE_NAME                            syscall.Errno = 9924
+	DNS_ERROR_DEFAULT_VIRTUALIZATION_INSTANCE                                 syscall.Errno = 9925
+	DNS_ERROR_ZONESCOPE_ALREADY_EXISTS                                        syscall.Errno = 9951
+	DNS_ERROR_ZONESCOPE_DOES_NOT_EXIST                                        syscall.Errno = 9952
+	DNS_ERROR_DEFAULT_ZONESCOPE                                               syscall.Errno = 9953
+	DNS_ERROR_INVALID_ZONESCOPE_NAME                                          syscall.Errno = 9954
+	DNS_ERROR_NOT_ALLOWED_WITH_ZONESCOPES                                     syscall.Errno = 9955
+	DNS_ERROR_LOAD_ZONESCOPE_FAILED                                           syscall.Errno = 9956
+	DNS_ERROR_ZONESCOPE_FILE_WRITEBACK_FAILED                                 syscall.Errno = 9957
+	DNS_ERROR_INVALID_SCOPE_NAME                                              syscall.Errno = 9958
+	DNS_ERROR_SCOPE_DOES_NOT_EXIST                                            syscall.Errno = 9959
+	DNS_ERROR_DEFAULT_SCOPE                                                   syscall.Errno = 9960
+	DNS_ERROR_INVALID_SCOPE_OPERATION                                         syscall.Errno = 9961
+	DNS_ERROR_SCOPE_LOCKED                                                    syscall.Errno = 9962
+	DNS_ERROR_SCOPE_ALREADY_EXISTS                                            syscall.Errno = 9963
+	DNS_ERROR_POLICY_ALREADY_EXISTS                                           syscall.Errno = 9971
+	DNS_ERROR_POLICY_DOES_NOT_EXIST                                           syscall.Errno = 9972
+	DNS_ERROR_POLICY_INVALID_CRITERIA                                         syscall.Errno = 9973
+	DNS_ERROR_POLICY_INVALID_SETTINGS                                         syscall.Errno = 9974
+	DNS_ERROR_CLIENT_SUBNET_IS_ACCESSED                                       syscall.Errno = 9975
+	DNS_ERROR_CLIENT_SUBNET_DOES_NOT_EXIST                                    syscall.Errno = 9976
+	DNS_ERROR_CLIENT_SUBNET_ALREADY_EXISTS                                    syscall.Errno = 9977
+	DNS_ERROR_SUBNET_DOES_NOT_EXIST                                           syscall.Errno = 9978
+	DNS_ERROR_SUBNET_ALREADY_EXISTS                                           syscall.Errno = 9979
+	DNS_ERROR_POLICY_LOCKED                                                   syscall.Errno = 9980
+	DNS_ERROR_POLICY_INVALID_WEIGHT                                           syscall.Errno = 9981
+	DNS_ERROR_POLICY_INVALID_NAME                                             syscall.Errno = 9982
+	DNS_ERROR_POLICY_MISSING_CRITERIA                                         syscall.Errno = 9983
+	DNS_ERROR_INVALID_CLIENT_SUBNET_NAME                                      syscall.Errno = 9984
+	DNS_ERROR_POLICY_PROCESSING_ORDER_INVALID                                 syscall.Errno = 9985
+	DNS_ERROR_POLICY_SCOPE_MISSING                                            syscall.Errno = 9986
+	DNS_ERROR_POLICY_SCOPE_NOT_ALLOWED                                        syscall.Errno = 9987
+	DNS_ERROR_SERVERSCOPE_IS_REFERENCED                                       syscall.Errno = 9988
+	DNS_ERROR_ZONESCOPE_IS_REFERENCED                                         syscall.Errno = 9989
+	DNS_ERROR_POLICY_INVALID_CRITERIA_CLIENT_SUBNET                           syscall.Errno = 9990
+	DNS_ERROR_POLICY_INVALID_CRITERIA_TRANSPORT_PROTOCOL                      syscall.Errno = 9991
+	DNS_ERROR_POLICY_INVALID_CRITERIA_NETWORK_PROTOCOL                        syscall.Errno = 9992
+	DNS_ERROR_POLICY_INVALID_CRITERIA_INTERFACE                               syscall.Errno = 9993
+	DNS_ERROR_POLICY_INVALID_CRITERIA_FQDN                                    syscall.Errno = 9994
+	DNS_ERROR_POLICY_INVALID_CRITERIA_QUERY_TYPE                              syscall.Errno = 9995
+	DNS_ERROR_POLICY_INVALID_CRITERIA_TIME_OF_DAY                             syscall.Errno = 9996
+	WSABASEERR                                                                syscall.Errno = 10000
+	WSAEINTR                                                                  syscall.Errno = 10004
+	WSAEBADF                                                                  syscall.Errno = 10009
+	WSAEACCES                                                                 syscall.Errno = 10013
+	WSAEFAULT                                                                 syscall.Errno = 10014
+	WSAEINVAL                                                                 syscall.Errno = 10022
+	WSAEMFILE                                                                 syscall.Errno = 10024
+	WSAEWOULDBLOCK                                                            syscall.Errno = 10035
+	WSAEINPROGRESS                                                            syscall.Errno = 10036
+	WSAEALREADY                                                               syscall.Errno = 10037
+	WSAENOTSOCK                                                               syscall.Errno = 10038
+	WSAEDESTADDRREQ                                                           syscall.Errno = 10039
+	WSAEMSGSIZE                                                               syscall.Errno = 10040
+	WSAEPROTOTYPE                                                             syscall.Errno = 10041
+	WSAENOPROTOOPT                                                            syscall.Errno = 10042
+	WSAEPROTONOSUPPORT                                                        syscall.Errno = 10043
+	WSAESOCKTNOSUPPORT                                                        syscall.Errno = 10044
+	WSAEOPNOTSUPP                                                             syscall.Errno = 10045
+	WSAEPFNOSUPPORT                                                           syscall.Errno = 10046
+	WSAEAFNOSUPPORT                                                           syscall.Errno = 10047
+	WSAEADDRINUSE                                                             syscall.Errno = 10048
+	WSAEADDRNOTAVAIL                                                          syscall.Errno = 10049
+	WSAENETDOWN                                                               syscall.Errno = 10050
+	WSAENETUNREACH                                                            syscall.Errno = 10051
+	WSAENETRESET                                                              syscall.Errno = 10052
+	WSAECONNABORTED                                                           syscall.Errno = 10053
+	WSAECONNRESET                                                             syscall.Errno = 10054
+	WSAENOBUFS                                                                syscall.Errno = 10055
+	WSAEISCONN                                                                syscall.Errno = 10056
+	WSAENOTCONN                                                               syscall.Errno = 10057
+	WSAESHUTDOWN                                                              syscall.Errno = 10058
+	WSAETOOMANYREFS                                                           syscall.Errno = 10059
+	WSAETIMEDOUT                                                              syscall.Errno = 10060
+	WSAECONNREFUSED                                                           syscall.Errno = 10061
+	WSAELOOP                                                                  syscall.Errno = 10062
+	WSAENAMETOOLONG                                                           syscall.Errno = 10063
+	WSAEHOSTDOWN                                                              syscall.Errno = 10064
+	WSAEHOSTUNREACH                                                           syscall.Errno = 10065
+	WSAENOTEMPTY                                                              syscall.Errno = 10066
+	WSAEPROCLIM                                                               syscall.Errno = 10067
+	WSAEUSERS                                                                 syscall.Errno = 10068
+	WSAEDQUOT                                                                 syscall.Errno = 10069
+	WSAESTALE                                                                 syscall.Errno = 10070
+	WSAEREMOTE                                                                syscall.Errno = 10071
+	WSASYSNOTREADY                                                            syscall.Errno = 10091
+	WSAVERNOTSUPPORTED                                                        syscall.Errno = 10092
+	WSANOTINITIALISED                                                         syscall.Errno = 10093
+	WSAEDISCON                                                                syscall.Errno = 10101
+	WSAENOMORE                                                                syscall.Errno = 10102
+	WSAECANCELLED                                                             syscall.Errno = 10103
+	WSAEINVALIDPROCTABLE                                                      syscall.Errno = 10104
+	WSAEINVALIDPROVIDER                                                       syscall.Errno = 10105
+	WSAEPROVIDERFAILEDINIT                                                    syscall.Errno = 10106
+	WSASYSCALLFAILURE                                                         syscall.Errno = 10107
+	WSASERVICE_NOT_FOUND                                                      syscall.Errno = 10108
+	WSATYPE_NOT_FOUND                                                         syscall.Errno = 10109
+	WSA_E_NO_MORE                                                             syscall.Errno = 10110
+	WSA_E_CANCELLED                                                           syscall.Errno = 10111
+	WSAEREFUSED                                                               syscall.Errno = 10112
+	WSAHOST_NOT_FOUND                                                         syscall.Errno = 11001
+	WSATRY_AGAIN                                                              syscall.Errno = 11002
+	WSANO_RECOVERY                                                            syscall.Errno = 11003
+	WSANO_DATA                                                                syscall.Errno = 11004
+	WSA_QOS_RECEIVERS                                                         syscall.Errno = 11005
+	WSA_QOS_SENDERS                                                           syscall.Errno = 11006
+	WSA_QOS_NO_SENDERS                                                        syscall.Errno = 11007
+	WSA_QOS_NO_RECEIVERS                                                      syscall.Errno = 11008
+	WSA_QOS_REQUEST_CONFIRMED                                                 syscall.Errno = 11009
+	WSA_QOS_ADMISSION_FAILURE                                                 syscall.Errno = 11010
+	WSA_QOS_POLICY_FAILURE                                                    syscall.Errno = 11011
+	WSA_QOS_BAD_STYLE                                                         syscall.Errno = 11012
+	WSA_QOS_BAD_OBJECT                                                        syscall.Errno = 11013
+	WSA_QOS_TRAFFIC_CTRL_ERROR                                                syscall.Errno = 11014
+	WSA_QOS_GENERIC_ERROR                                                     syscall.Errno = 11015
+	WSA_QOS_ESERVICETYPE                                                      syscall.Errno = 11016
+	WSA_QOS_EFLOWSPEC                                                         syscall.Errno = 11017
+	WSA_QOS_EPROVSPECBUF                                                      syscall.Errno = 11018
+	WSA_QOS_EFILTERSTYLE                                                      syscall.Errno = 11019
+	WSA_QOS_EFILTERTYPE                                                       syscall.Errno = 11020
+	WSA_QOS_EFILTERCOUNT                                                      syscall.Errno = 11021
+	WSA_QOS_EOBJLENGTH                                                        syscall.Errno = 11022
+	WSA_QOS_EFLOWCOUNT                                                        syscall.Errno = 11023
+	WSA_QOS_EUNKOWNPSOBJ                                                      syscall.Errno = 11024
+	WSA_QOS_EPOLICYOBJ                                                        syscall.Errno = 11025
+	WSA_QOS_EFLOWDESC                                                         syscall.Errno = 11026
+	WSA_QOS_EPSFLOWSPEC                                                       syscall.Errno = 11027
+	WSA_QOS_EPSFILTERSPEC                                                     syscall.Errno = 11028
+	WSA_QOS_ESDMODEOBJ                                                        syscall.Errno = 11029
+	WSA_QOS_ESHAPERATEOBJ                                                     syscall.Errno = 11030
+	WSA_QOS_RESERVED_PETYPE                                                   syscall.Errno = 11031
+	WSA_SECURE_HOST_NOT_FOUND                                                 syscall.Errno = 11032
+	WSA_IPSEC_NAME_POLICY_ERROR                                               syscall.Errno = 11033
+	ERROR_IPSEC_QM_POLICY_EXISTS                                              syscall.Errno = 13000
+	ERROR_IPSEC_QM_POLICY_NOT_FOUND                                           syscall.Errno = 13001
+	ERROR_IPSEC_QM_POLICY_IN_USE                                              syscall.Errno = 13002
+	ERROR_IPSEC_MM_POLICY_EXISTS                                              syscall.Errno = 13003
+	ERROR_IPSEC_MM_POLICY_NOT_FOUND                                           syscall.Errno = 13004
+	ERROR_IPSEC_MM_POLICY_IN_USE                                              syscall.Errno = 13005
+	ERROR_IPSEC_MM_FILTER_EXISTS                                              syscall.Errno = 13006
+	ERROR_IPSEC_MM_FILTER_NOT_FOUND                                           syscall.Errno = 13007
+	ERROR_IPSEC_TRANSPORT_FILTER_EXISTS                                       syscall.Errno = 13008
+	ERROR_IPSEC_TRANSPORT_FILTER_NOT_FOUND                                    syscall.Errno = 13009
+	ERROR_IPSEC_MM_AUTH_EXISTS                                                syscall.Errno = 13010
+	ERROR_IPSEC_MM_AUTH_NOT_FOUND                                             syscall.Errno = 13011
+	ERROR_IPSEC_MM_AUTH_IN_USE                                                syscall.Errno = 13012
+	ERROR_IPSEC_DEFAULT_MM_POLICY_NOT_FOUND                                   syscall.Errno = 13013
+	ERROR_IPSEC_DEFAULT_MM_AUTH_NOT_FOUND                                     syscall.Errno = 13014
+	ERROR_IPSEC_DEFAULT_QM_POLICY_NOT_FOUND                                   syscall.Errno = 13015
+	ERROR_IPSEC_TUNNEL_FILTER_EXISTS                                          syscall.Errno = 13016
+	ERROR_IPSEC_TUNNEL_FILTER_NOT_FOUND                                       syscall.Errno = 13017
+	ERROR_IPSEC_MM_FILTER_PENDING_DELETION                                    syscall.Errno = 13018
+	ERROR_IPSEC_TRANSPORT_FILTER_PENDING_DELETION                             syscall.Errno = 13019
+	ERROR_IPSEC_TUNNEL_FILTER_PENDING_DELETION                                syscall.Errno = 13020
+	ERROR_IPSEC_MM_POLICY_PENDING_DELETION                                    syscall.Errno = 13021
+	ERROR_IPSEC_MM_AUTH_PENDING_DELETION                                      syscall.Errno = 13022
+	ERROR_IPSEC_QM_POLICY_PENDING_DELETION                                    syscall.Errno = 13023
+	WARNING_IPSEC_MM_POLICY_PRUNED                                            syscall.Errno = 13024
+	WARNING_IPSEC_QM_POLICY_PRUNED                                            syscall.Errno = 13025
+	ERROR_IPSEC_IKE_NEG_STATUS_BEGIN                                          syscall.Errno = 13800
+	ERROR_IPSEC_IKE_AUTH_FAIL                                                 syscall.Errno = 13801
+	ERROR_IPSEC_IKE_ATTRIB_FAIL                                               syscall.Errno = 13802
+	ERROR_IPSEC_IKE_NEGOTIATION_PENDING                                       syscall.Errno = 13803
+	ERROR_IPSEC_IKE_GENERAL_PROCESSING_ERROR                                  syscall.Errno = 13804
+	ERROR_IPSEC_IKE_TIMED_OUT                                                 syscall.Errno = 13805
+	ERROR_IPSEC_IKE_NO_CERT                                                   syscall.Errno = 13806
+	ERROR_IPSEC_IKE_SA_DELETED                                                syscall.Errno = 13807
+	ERROR_IPSEC_IKE_SA_REAPED                                                 syscall.Errno = 13808
+	ERROR_IPSEC_IKE_MM_ACQUIRE_DROP                                           syscall.Errno = 13809
+	ERROR_IPSEC_IKE_QM_ACQUIRE_DROP                                           syscall.Errno = 13810
+	ERROR_IPSEC_IKE_QUEUE_DROP_MM                                             syscall.Errno = 13811
+	ERROR_IPSEC_IKE_QUEUE_DROP_NO_MM                                          syscall.Errno = 13812
+	ERROR_IPSEC_IKE_DROP_NO_RESPONSE                                          syscall.Errno = 13813
+	ERROR_IPSEC_IKE_MM_DELAY_DROP                                             syscall.Errno = 13814
+	ERROR_IPSEC_IKE_QM_DELAY_DROP                                             syscall.Errno = 13815
+	ERROR_IPSEC_IKE_ERROR                                                     syscall.Errno = 13816
+	ERROR_IPSEC_IKE_CRL_FAILED                                                syscall.Errno = 13817
+	ERROR_IPSEC_IKE_INVALID_KEY_USAGE                                         syscall.Errno = 13818
+	ERROR_IPSEC_IKE_INVALID_CERT_TYPE                                         syscall.Errno = 13819
+	ERROR_IPSEC_IKE_NO_PRIVATE_KEY                                            syscall.Errno = 13820
+	ERROR_IPSEC_IKE_SIMULTANEOUS_REKEY                                        syscall.Errno = 13821
+	ERROR_IPSEC_IKE_DH_FAIL                                                   syscall.Errno = 13822
+	ERROR_IPSEC_IKE_CRITICAL_PAYLOAD_NOT_RECOGNIZED                           syscall.Errno = 13823
+	ERROR_IPSEC_IKE_INVALID_HEADER                                            syscall.Errno = 13824
+	ERROR_IPSEC_IKE_NO_POLICY                                                 syscall.Errno = 13825
+	ERROR_IPSEC_IKE_INVALID_SIGNATURE                                         syscall.Errno = 13826
+	ERROR_IPSEC_IKE_KERBEROS_ERROR                                            syscall.Errno = 13827
+	ERROR_IPSEC_IKE_NO_PUBLIC_KEY                                             syscall.Errno = 13828
+	ERROR_IPSEC_IKE_PROCESS_ERR                                               syscall.Errno = 13829
+	ERROR_IPSEC_IKE_PROCESS_ERR_SA                                            syscall.Errno = 13830
+	ERROR_IPSEC_IKE_PROCESS_ERR_PROP                                          syscall.Errno = 13831
+	ERROR_IPSEC_IKE_PROCESS_ERR_TRANS                                         syscall.Errno = 13832
+	ERROR_IPSEC_IKE_PROCESS_ERR_KE                                            syscall.Errno = 13833
+	ERROR_IPSEC_IKE_PROCESS_ERR_ID                                            syscall.Errno = 13834
+	ERROR_IPSEC_IKE_PROCESS_ERR_CERT                                          syscall.Errno = 13835
+	ERROR_IPSEC_IKE_PROCESS_ERR_CERT_REQ                                      syscall.Errno = 13836
+	ERROR_IPSEC_IKE_PROCESS_ERR_HASH                                          syscall.Errno = 13837
+	ERROR_IPSEC_IKE_PROCESS_ERR_SIG                                           syscall.Errno = 13838
+	ERROR_IPSEC_IKE_PROCESS_ERR_NONCE                                         syscall.Errno = 13839
+	ERROR_IPSEC_IKE_PROCESS_ERR_NOTIFY                                        syscall.Errno = 13840
+	ERROR_IPSEC_IKE_PROCESS_ERR_DELETE                                        syscall.Errno = 13841
+	ERROR_IPSEC_IKE_PROCESS_ERR_VENDOR                                        syscall.Errno = 13842
+	ERROR_IPSEC_IKE_INVALID_PAYLOAD                                           syscall.Errno = 13843
+	ERROR_IPSEC_IKE_LOAD_SOFT_SA                                              syscall.Errno = 13844
+	ERROR_IPSEC_IKE_SOFT_SA_TORN_DOWN                                         syscall.Errno = 13845
+	ERROR_IPSEC_IKE_INVALID_COOKIE                                            syscall.Errno = 13846
+	ERROR_IPSEC_IKE_NO_PEER_CERT                                              syscall.Errno = 13847
+	ERROR_IPSEC_IKE_PEER_CRL_FAILED                                           syscall.Errno = 13848
+	ERROR_IPSEC_IKE_POLICY_CHANGE                                             syscall.Errno = 13849
+	ERROR_IPSEC_IKE_NO_MM_POLICY                                              syscall.Errno = 13850
+	ERROR_IPSEC_IKE_NOTCBPRIV                                                 syscall.Errno = 13851
+	ERROR_IPSEC_IKE_SECLOADFAIL                                               syscall.Errno = 13852
+	ERROR_IPSEC_IKE_FAILSSPINIT                                               syscall.Errno = 13853
+	ERROR_IPSEC_IKE_FAILQUERYSSP                                              syscall.Errno = 13854
+	ERROR_IPSEC_IKE_SRVACQFAIL                                                syscall.Errno = 13855
+	ERROR_IPSEC_IKE_SRVQUERYCRED                                              syscall.Errno = 13856
+	ERROR_IPSEC_IKE_GETSPIFAIL                                                syscall.Errno = 13857
+	ERROR_IPSEC_IKE_INVALID_FILTER                                            syscall.Errno = 13858
+	ERROR_IPSEC_IKE_OUT_OF_MEMORY                                             syscall.Errno = 13859
+	ERROR_IPSEC_IKE_ADD_UPDATE_KEY_FAILED                                     syscall.Errno = 13860
+	ERROR_IPSEC_IKE_INVALID_POLICY                                            syscall.Errno = 13861
+	ERROR_IPSEC_IKE_UNKNOWN_DOI                                               syscall.Errno = 13862
+	ERROR_IPSEC_IKE_INVALID_SITUATION                                         syscall.Errno = 13863
+	ERROR_IPSEC_IKE_DH_FAILURE                                                syscall.Errno = 13864
+	ERROR_IPSEC_IKE_INVALID_GROUP                                             syscall.Errno = 13865
+	ERROR_IPSEC_IKE_ENCRYPT                                                   syscall.Errno = 13866
+	ERROR_IPSEC_IKE_DECRYPT                                                   syscall.Errno = 13867
+	ERROR_IPSEC_IKE_POLICY_MATCH                                              syscall.Errno = 13868
+	ERROR_IPSEC_IKE_UNSUPPORTED_ID                                            syscall.Errno = 13869
+	ERROR_IPSEC_IKE_INVALID_HASH                                              syscall.Errno = 13870
+	ERROR_IPSEC_IKE_INVALID_HASH_ALG                                          syscall.Errno = 13871
+	ERROR_IPSEC_IKE_INVALID_HASH_SIZE                                         syscall.Errno = 13872
+	ERROR_IPSEC_IKE_INVALID_ENCRYPT_ALG                                       syscall.Errno = 13873
+	ERROR_IPSEC_IKE_INVALID_AUTH_ALG                                          syscall.Errno = 13874
+	ERROR_IPSEC_IKE_INVALID_SIG                                               syscall.Errno = 13875
+	ERROR_IPSEC_IKE_LOAD_FAILED                                               syscall.Errno = 13876
+	ERROR_IPSEC_IKE_RPC_DELETE                                                syscall.Errno = 13877
+	ERROR_IPSEC_IKE_BENIGN_REINIT                                             syscall.Errno = 13878
+	ERROR_IPSEC_IKE_INVALID_RESPONDER_LIFETIME_NOTIFY                         syscall.Errno = 13879
+	ERROR_IPSEC_IKE_INVALID_MAJOR_VERSION                                     syscall.Errno = 13880
+	ERROR_IPSEC_IKE_INVALID_CERT_KEYLEN                                       syscall.Errno = 13881
+	ERROR_IPSEC_IKE_MM_LIMIT                                                  syscall.Errno = 13882
+	ERROR_IPSEC_IKE_NEGOTIATION_DISABLED                                      syscall.Errno = 13883
+	ERROR_IPSEC_IKE_QM_LIMIT                                                  syscall.Errno = 13884
+	ERROR_IPSEC_IKE_MM_EXPIRED                                                syscall.Errno = 13885
+	ERROR_IPSEC_IKE_PEER_MM_ASSUMED_INVALID                                   syscall.Errno = 13886
+	ERROR_IPSEC_IKE_CERT_CHAIN_POLICY_MISMATCH                                syscall.Errno = 13887
+	ERROR_IPSEC_IKE_UNEXPECTED_MESSAGE_ID                                     syscall.Errno = 13888
+	ERROR_IPSEC_IKE_INVALID_AUTH_PAYLOAD                                      syscall.Errno = 13889
+	ERROR_IPSEC_IKE_DOS_COOKIE_SENT                                           syscall.Errno = 13890
+	ERROR_IPSEC_IKE_SHUTTING_DOWN                                             syscall.Errno = 13891
+	ERROR_IPSEC_IKE_CGA_AUTH_FAILED                                           syscall.Errno = 13892
+	ERROR_IPSEC_IKE_PROCESS_ERR_NATOA                                         syscall.Errno = 13893
+	ERROR_IPSEC_IKE_INVALID_MM_FOR_QM                                         syscall.Errno = 13894
+	ERROR_IPSEC_IKE_QM_EXPIRED                                                syscall.Errno = 13895
+	ERROR_IPSEC_IKE_TOO_MANY_FILTERS                                          syscall.Errno = 13896
+	ERROR_IPSEC_IKE_NEG_STATUS_END                                            syscall.Errno = 13897
+	ERROR_IPSEC_IKE_KILL_DUMMY_NAP_TUNNEL                                     syscall.Errno = 13898
+	ERROR_IPSEC_IKE_INNER_IP_ASSIGNMENT_FAILURE                               syscall.Errno = 13899
+	ERROR_IPSEC_IKE_REQUIRE_CP_PAYLOAD_MISSING                                syscall.Errno = 13900
+	ERROR_IPSEC_KEY_MODULE_IMPERSONATION_NEGOTIATION_PENDING                  syscall.Errno = 13901
+	ERROR_IPSEC_IKE_COEXISTENCE_SUPPRESS                                      syscall.Errno = 13902
+	ERROR_IPSEC_IKE_RATELIMIT_DROP                                            syscall.Errno = 13903
+	ERROR_IPSEC_IKE_PEER_DOESNT_SUPPORT_MOBIKE                                syscall.Errno = 13904
+	ERROR_IPSEC_IKE_AUTHORIZATION_FAILURE                                     syscall.Errno = 13905
+	ERROR_IPSEC_IKE_STRONG_CRED_AUTHORIZATION_FAILURE                         syscall.Errno = 13906
+	ERROR_IPSEC_IKE_AUTHORIZATION_FAILURE_WITH_OPTIONAL_RETRY                 syscall.Errno = 13907
+	ERROR_IPSEC_IKE_STRONG_CRED_AUTHORIZATION_AND_CERTMAP_FAILURE             syscall.Errno = 13908
+	ERROR_IPSEC_IKE_NEG_STATUS_EXTENDED_END                                   syscall.Errno = 13909
+	ERROR_IPSEC_BAD_SPI                                                       syscall.Errno = 13910
+	ERROR_IPSEC_SA_LIFETIME_EXPIRED                                           syscall.Errno = 13911
+	ERROR_IPSEC_WRONG_SA                                                      syscall.Errno = 13912
+	ERROR_IPSEC_REPLAY_CHECK_FAILED                                           syscall.Errno = 13913
+	ERROR_IPSEC_INVALID_PACKET                                                syscall.Errno = 13914
+	ERROR_IPSEC_INTEGRITY_CHECK_FAILED                                        syscall.Errno = 13915
+	ERROR_IPSEC_CLEAR_TEXT_DROP                                               syscall.Errno = 13916
+	ERROR_IPSEC_AUTH_FIREWALL_DROP                                            syscall.Errno = 13917
+	ERROR_IPSEC_THROTTLE_DROP                                                 syscall.Errno = 13918
+	ERROR_IPSEC_DOSP_BLOCK                                                    syscall.Errno = 13925
+	ERROR_IPSEC_DOSP_RECEIVED_MULTICAST                                       syscall.Errno = 13926
+	ERROR_IPSEC_DOSP_INVALID_PACKET                                           syscall.Errno = 13927
+	ERROR_IPSEC_DOSP_STATE_LOOKUP_FAILED                                      syscall.Errno = 13928
+	ERROR_IPSEC_DOSP_MAX_ENTRIES                                              syscall.Errno = 13929
+	ERROR_IPSEC_DOSP_KEYMOD_NOT_ALLOWED                                       syscall.Errno = 13930
+	ERROR_IPSEC_DOSP_NOT_INSTALLED                                            syscall.Errno = 13931
+	ERROR_IPSEC_DOSP_MAX_PER_IP_RATELIMIT_QUEUES                              syscall.Errno = 13932
+	ERROR_SXS_SECTION_NOT_FOUND                                               syscall.Errno = 14000
+	ERROR_SXS_CANT_GEN_ACTCTX                                                 syscall.Errno = 14001
+	ERROR_SXS_INVALID_ACTCTXDATA_FORMAT                                       syscall.Errno = 14002
+	ERROR_SXS_ASSEMBLY_NOT_FOUND                                              syscall.Errno = 14003
+	ERROR_SXS_MANIFEST_FORMAT_ERROR                                           syscall.Errno = 14004
+	ERROR_SXS_MANIFEST_PARSE_ERROR                                            syscall.Errno = 14005
+	ERROR_SXS_ACTIVATION_CONTEXT_DISABLED                                     syscall.Errno = 14006
+	ERROR_SXS_KEY_NOT_FOUND                                                   syscall.Errno = 14007
+	ERROR_SXS_VERSION_CONFLICT                                                syscall.Errno = 14008
+	ERROR_SXS_WRONG_SECTION_TYPE                                              syscall.Errno = 14009
+	ERROR_SXS_THREAD_QUERIES_DISABLED                                         syscall.Errno = 14010
+	ERROR_SXS_PROCESS_DEFAULT_ALREADY_SET                                     syscall.Errno = 14011
+	ERROR_SXS_UNKNOWN_ENCODING_GROUP                                          syscall.Errno = 14012
+	ERROR_SXS_UNKNOWN_ENCODING                                                syscall.Errno = 14013
+	ERROR_SXS_INVALID_XML_NAMESPACE_URI                                       syscall.Errno = 14014
+	ERROR_SXS_ROOT_MANIFEST_DEPENDENCY_NOT_INSTALLED                          syscall.Errno = 14015
+	ERROR_SXS_LEAF_MANIFEST_DEPENDENCY_NOT_INSTALLED                          syscall.Errno = 14016
+	ERROR_SXS_INVALID_ASSEMBLY_IDENTITY_ATTRIBUTE                             syscall.Errno = 14017
+	ERROR_SXS_MANIFEST_MISSING_REQUIRED_DEFAULT_NAMESPACE                     syscall.Errno = 14018
+	ERROR_SXS_MANIFEST_INVALID_REQUIRED_DEFAULT_NAMESPACE                     syscall.Errno = 14019
+	ERROR_SXS_PRIVATE_MANIFEST_CROSS_PATH_WITH_REPARSE_POINT                  syscall.Errno = 14020
+	ERROR_SXS_DUPLICATE_DLL_NAME                                              syscall.Errno = 14021
+	ERROR_SXS_DUPLICATE_WINDOWCLASS_NAME                                      syscall.Errno = 14022
+	ERROR_SXS_DUPLICATE_CLSID                                                 syscall.Errno = 14023
+	ERROR_SXS_DUPLICATE_IID                                                   syscall.Errno = 14024
+	ERROR_SXS_DUPLICATE_TLBID                                                 syscall.Errno = 14025
+	ERROR_SXS_DUPLICATE_PROGID                                                syscall.Errno = 14026
+	ERROR_SXS_DUPLICATE_ASSEMBLY_NAME                                         syscall.Errno = 14027
+	ERROR_SXS_FILE_HASH_MISMATCH                                              syscall.Errno = 14028
+	ERROR_SXS_POLICY_PARSE_ERROR                                              syscall.Errno = 14029
+	ERROR_SXS_XML_E_MISSINGQUOTE                                              syscall.Errno = 14030
+	ERROR_SXS_XML_E_COMMENTSYNTAX                                             syscall.Errno = 14031
+	ERROR_SXS_XML_E_BADSTARTNAMECHAR                                          syscall.Errno = 14032
+	ERROR_SXS_XML_E_BADNAMECHAR                                               syscall.Errno = 14033
+	ERROR_SXS_XML_E_BADCHARINSTRING                                           syscall.Errno = 14034
+	ERROR_SXS_XML_E_XMLDECLSYNTAX                                             syscall.Errno = 14035
+	ERROR_SXS_XML_E_BADCHARDATA                                               syscall.Errno = 14036
+	ERROR_SXS_XML_E_MISSINGWHITESPACE                                         syscall.Errno = 14037
+	ERROR_SXS_XML_E_EXPECTINGTAGEND                                           syscall.Errno = 14038
+	ERROR_SXS_XML_E_MISSINGSEMICOLON                                          syscall.Errno = 14039
+	ERROR_SXS_XML_E_UNBALANCEDPAREN                                           syscall.Errno = 14040
+	ERROR_SXS_XML_E_INTERNALERROR                                             syscall.Errno = 14041
+	ERROR_SXS_XML_E_UNEXPECTED_WHITESPACE                                     syscall.Errno = 14042
+	ERROR_SXS_XML_E_INCOMPLETE_ENCODING                                       syscall.Errno = 14043
+	ERROR_SXS_XML_E_MISSING_PAREN                                             syscall.Errno = 14044
+	ERROR_SXS_XML_E_EXPECTINGCLOSEQUOTE                                       syscall.Errno = 14045
+	ERROR_SXS_XML_E_MULTIPLE_COLONS                                           syscall.Errno = 14046
+	ERROR_SXS_XML_E_INVALID_DECIMAL                                           syscall.Errno = 14047
+	ERROR_SXS_XML_E_INVALID_HEXIDECIMAL                                       syscall.Errno = 14048
+	ERROR_SXS_XML_E_INVALID_UNICODE                                           syscall.Errno = 14049
+	ERROR_SXS_XML_E_WHITESPACEORQUESTIONMARK                                  syscall.Errno = 14050
+	ERROR_SXS_XML_E_UNEXPECTEDENDTAG                                          syscall.Errno = 14051
+	ERROR_SXS_XML_E_UNCLOSEDTAG                                               syscall.Errno = 14052
+	ERROR_SXS_XML_E_DUPLICATEATTRIBUTE                                        syscall.Errno = 14053
+	ERROR_SXS_XML_E_MULTIPLEROOTS                                             syscall.Errno = 14054
+	ERROR_SXS_XML_E_INVALIDATROOTLEVEL                                        syscall.Errno = 14055
+	ERROR_SXS_XML_E_BADXMLDECL                                                syscall.Errno = 14056
+	ERROR_SXS_XML_E_MISSINGROOT                                               syscall.Errno = 14057
+	ERROR_SXS_XML_E_UNEXPECTEDEOF                                             syscall.Errno = 14058
+	ERROR_SXS_XML_E_BADPEREFINSUBSET                                          syscall.Errno = 14059
+	ERROR_SXS_XML_E_UNCLOSEDSTARTTAG                                          syscall.Errno = 14060
+	ERROR_SXS_XML_E_UNCLOSEDENDTAG                                            syscall.Errno = 14061
+	ERROR_SXS_XML_E_UNCLOSEDSTRING                                            syscall.Errno = 14062
+	ERROR_SXS_XML_E_UNCLOSEDCOMMENT                                           syscall.Errno = 14063
+	ERROR_SXS_XML_E_UNCLOSEDDECL                                              syscall.Errno = 14064
+	ERROR_SXS_XML_E_UNCLOSEDCDATA                                             syscall.Errno = 14065
+	ERROR_SXS_XML_E_RESERVEDNAMESPACE                                         syscall.Errno = 14066
+	ERROR_SXS_XML_E_INVALIDENCODING                                           syscall.Errno = 14067
+	ERROR_SXS_XML_E_INVALIDSWITCH                                             syscall.Errno = 14068
+	ERROR_SXS_XML_E_BADXMLCASE                                                syscall.Errno = 14069
+	ERROR_SXS_XML_E_INVALID_STANDALONE                                        syscall.Errno = 14070
+	ERROR_SXS_XML_E_UNEXPECTED_STANDALONE                                     syscall.Errno = 14071
+	ERROR_SXS_XML_E_INVALID_VERSION                                           syscall.Errno = 14072
+	ERROR_SXS_XML_E_MISSINGEQUALS                                             syscall.Errno = 14073
+	ERROR_SXS_PROTECTION_RECOVERY_FAILED                                      syscall.Errno = 14074
+	ERROR_SXS_PROTECTION_PUBLIC_KEY_TOO_SHORT                                 syscall.Errno = 14075
+	ERROR_SXS_PROTECTION_CATALOG_NOT_VALID                                    syscall.Errno = 14076
+	ERROR_SXS_UNTRANSLATABLE_HRESULT                                          syscall.Errno = 14077
+	ERROR_SXS_PROTECTION_CATALOG_FILE_MISSING                                 syscall.Errno = 14078
+	ERROR_SXS_MISSING_ASSEMBLY_IDENTITY_ATTRIBUTE                             syscall.Errno = 14079
+	ERROR_SXS_INVALID_ASSEMBLY_IDENTITY_ATTRIBUTE_NAME                        syscall.Errno = 14080
+	ERROR_SXS_ASSEMBLY_MISSING                                                syscall.Errno = 14081
+	ERROR_SXS_CORRUPT_ACTIVATION_STACK                                        syscall.Errno = 14082
+	ERROR_SXS_CORRUPTION                                                      syscall.Errno = 14083
+	ERROR_SXS_EARLY_DEACTIVATION                                              syscall.Errno = 14084
+	ERROR_SXS_INVALID_DEACTIVATION                                            syscall.Errno = 14085
+	ERROR_SXS_MULTIPLE_DEACTIVATION                                           syscall.Errno = 14086
+	ERROR_SXS_PROCESS_TERMINATION_REQUESTED                                   syscall.Errno = 14087
+	ERROR_SXS_RELEASE_ACTIVATION_CONTEXT                                      syscall.Errno = 14088
+	ERROR_SXS_SYSTEM_DEFAULT_ACTIVATION_CONTEXT_EMPTY                         syscall.Errno = 14089
+	ERROR_SXS_INVALID_IDENTITY_ATTRIBUTE_VALUE                                syscall.Errno = 14090
+	ERROR_SXS_INVALID_IDENTITY_ATTRIBUTE_NAME                                 syscall.Errno = 14091
+	ERROR_SXS_IDENTITY_DUPLICATE_ATTRIBUTE                                    syscall.Errno = 14092
+	ERROR_SXS_IDENTITY_PARSE_ERROR                                            syscall.Errno = 14093
+	ERROR_MALFORMED_SUBSTITUTION_STRING                                       syscall.Errno = 14094
+	ERROR_SXS_INCORRECT_PUBLIC_KEY_TOKEN                                      syscall.Errno = 14095
+	ERROR_UNMAPPED_SUBSTITUTION_STRING                                        syscall.Errno = 14096
+	ERROR_SXS_ASSEMBLY_NOT_LOCKED                                             syscall.Errno = 14097
+	ERROR_SXS_COMPONENT_STORE_CORRUPT                                         syscall.Errno = 14098
+	ERROR_ADVANCED_INSTALLER_FAILED                                           syscall.Errno = 14099
+	ERROR_XML_ENCODING_MISMATCH                                               syscall.Errno = 14100
+	ERROR_SXS_MANIFEST_IDENTITY_SAME_BUT_CONTENTS_DIFFERENT                   syscall.Errno = 14101
+	ERROR_SXS_IDENTITIES_DIFFERENT                                            syscall.Errno = 14102
+	ERROR_SXS_ASSEMBLY_IS_NOT_A_DEPLOYMENT                                    syscall.Errno = 14103
+	ERROR_SXS_FILE_NOT_PART_OF_ASSEMBLY                                       syscall.Errno = 14104
+	ERROR_SXS_MANIFEST_TOO_BIG                                                syscall.Errno = 14105
+	ERROR_SXS_SETTING_NOT_REGISTERED                                          syscall.Errno = 14106
+	ERROR_SXS_TRANSACTION_CLOSURE_INCOMPLETE                                  syscall.Errno = 14107
+	ERROR_SMI_PRIMITIVE_INSTALLER_FAILED                                      syscall.Errno = 14108
+	ERROR_GENERIC_COMMAND_FAILED                                              syscall.Errno = 14109
+	ERROR_SXS_FILE_HASH_MISSING                                               syscall.Errno = 14110
+	ERROR_EVT_INVALID_CHANNEL_PATH                                            syscall.Errno = 15000
+	ERROR_EVT_INVALID_QUERY                                                   syscall.Errno = 15001
+	ERROR_EVT_PUBLISHER_METADATA_NOT_FOUND                                    syscall.Errno = 15002
+	ERROR_EVT_EVENT_TEMPLATE_NOT_FOUND                                        syscall.Errno = 15003
+	ERROR_EVT_INVALID_PUBLISHER_NAME                                          syscall.Errno = 15004
+	ERROR_EVT_INVALID_EVENT_DATA                                              syscall.Errno = 15005
+	ERROR_EVT_CHANNEL_NOT_FOUND                                               syscall.Errno = 15007
+	ERROR_EVT_MALFORMED_XML_TEXT                                              syscall.Errno = 15008
+	ERROR_EVT_SUBSCRIPTION_TO_DIRECT_CHANNEL                                  syscall.Errno = 15009
+	ERROR_EVT_CONFIGURATION_ERROR                                             syscall.Errno = 15010
+	ERROR_EVT_QUERY_RESULT_STALE                                              syscall.Errno = 15011
+	ERROR_EVT_QUERY_RESULT_INVALID_POSITION                                   syscall.Errno = 15012
+	ERROR_EVT_NON_VALIDATING_MSXML                                            syscall.Errno = 15013
+	ERROR_EVT_FILTER_ALREADYSCOPED                                            syscall.Errno = 15014
+	ERROR_EVT_FILTER_NOTELTSET                                                syscall.Errno = 15015
+	ERROR_EVT_FILTER_INVARG                                                   syscall.Errno = 15016
+	ERROR_EVT_FILTER_INVTEST                                                  syscall.Errno = 15017
+	ERROR_EVT_FILTER_INVTYPE                                                  syscall.Errno = 15018
+	ERROR_EVT_FILTER_PARSEERR                                                 syscall.Errno = 15019
+	ERROR_EVT_FILTER_UNSUPPORTEDOP                                            syscall.Errno = 15020
+	ERROR_EVT_FILTER_UNEXPECTEDTOKEN                                          syscall.Errno = 15021
+	ERROR_EVT_INVALID_OPERATION_OVER_ENABLED_DIRECT_CHANNEL                   syscall.Errno = 15022
+	ERROR_EVT_INVALID_CHANNEL_PROPERTY_VALUE                                  syscall.Errno = 15023
+	ERROR_EVT_INVALID_PUBLISHER_PROPERTY_VALUE                                syscall.Errno = 15024
+	ERROR_EVT_CHANNEL_CANNOT_ACTIVATE                                         syscall.Errno = 15025
+	ERROR_EVT_FILTER_TOO_COMPLEX                                              syscall.Errno = 15026
+	ERROR_EVT_MESSAGE_NOT_FOUND                                               syscall.Errno = 15027
+	ERROR_EVT_MESSAGE_ID_NOT_FOUND                                            syscall.Errno = 15028
+	ERROR_EVT_UNRESOLVED_VALUE_INSERT                                         syscall.Errno = 15029
+	ERROR_EVT_UNRESOLVED_PARAMETER_INSERT                                     syscall.Errno = 15030
+	ERROR_EVT_MAX_INSERTS_REACHED                                             syscall.Errno = 15031
+	ERROR_EVT_EVENT_DEFINITION_NOT_FOUND                                      syscall.Errno = 15032
+	ERROR_EVT_MESSAGE_LOCALE_NOT_FOUND                                        syscall.Errno = 15033
+	ERROR_EVT_VERSION_TOO_OLD                                                 syscall.Errno = 15034
+	ERROR_EVT_VERSION_TOO_NEW                                                 syscall.Errno = 15035
+	ERROR_EVT_CANNOT_OPEN_CHANNEL_OF_QUERY                                    syscall.Errno = 15036
+	ERROR_EVT_PUBLISHER_DISABLED                                              syscall.Errno = 15037
+	ERROR_EVT_FILTER_OUT_OF_RANGE                                             syscall.Errno = 15038
+	ERROR_EC_SUBSCRIPTION_CANNOT_ACTIVATE                                     syscall.Errno = 15080
+	ERROR_EC_LOG_DISABLED                                                     syscall.Errno = 15081
+	ERROR_EC_CIRCULAR_FORWARDING                                              syscall.Errno = 15082
+	ERROR_EC_CREDSTORE_FULL                                                   syscall.Errno = 15083
+	ERROR_EC_CRED_NOT_FOUND                                                   syscall.Errno = 15084
+	ERROR_EC_NO_ACTIVE_CHANNEL                                                syscall.Errno = 15085
+	ERROR_MUI_FILE_NOT_FOUND                                                  syscall.Errno = 15100
+	ERROR_MUI_INVALID_FILE                                                    syscall.Errno = 15101
+	ERROR_MUI_INVALID_RC_CONFIG                                               syscall.Errno = 15102
+	ERROR_MUI_INVALID_LOCALE_NAME                                             syscall.Errno = 15103
+	ERROR_MUI_INVALID_ULTIMATEFALLBACK_NAME                                   syscall.Errno = 15104
+	ERROR_MUI_FILE_NOT_LOADED                                                 syscall.Errno = 15105
+	ERROR_RESOURCE_ENUM_USER_STOP                                             syscall.Errno = 15106
+	ERROR_MUI_INTLSETTINGS_UILANG_NOT_INSTALLED                               syscall.Errno = 15107
+	ERROR_MUI_INTLSETTINGS_INVALID_LOCALE_NAME                                syscall.Errno = 15108
+	ERROR_MRM_RUNTIME_NO_DEFAULT_OR_NEUTRAL_RESOURCE                          syscall.Errno = 15110
+	ERROR_MRM_INVALID_PRICONFIG                                               syscall.Errno = 15111
+	ERROR_MRM_INVALID_FILE_TYPE                                               syscall.Errno = 15112
+	ERROR_MRM_UNKNOWN_QUALIFIER                                               syscall.Errno = 15113
+	ERROR_MRM_INVALID_QUALIFIER_VALUE                                         syscall.Errno = 15114
+	ERROR_MRM_NO_CANDIDATE                                                    syscall.Errno = 15115
+	ERROR_MRM_NO_MATCH_OR_DEFAULT_CANDIDATE                                   syscall.Errno = 15116
+	ERROR_MRM_RESOURCE_TYPE_MISMATCH                                          syscall.Errno = 15117
+	ERROR_MRM_DUPLICATE_MAP_NAME                                              syscall.Errno = 15118
+	ERROR_MRM_DUPLICATE_ENTRY                                                 syscall.Errno = 15119
+	ERROR_MRM_INVALID_RESOURCE_IDENTIFIER                                     syscall.Errno = 15120
+	ERROR_MRM_FILEPATH_TOO_LONG                                               syscall.Errno = 15121
+	ERROR_MRM_UNSUPPORTED_DIRECTORY_TYPE                                      syscall.Errno = 15122
+	ERROR_MRM_INVALID_PRI_FILE                                                syscall.Errno = 15126
+	ERROR_MRM_NAMED_RESOURCE_NOT_FOUND                                        syscall.Errno = 15127
+	ERROR_MRM_MAP_NOT_FOUND                                                   syscall.Errno = 15135
+	ERROR_MRM_UNSUPPORTED_PROFILE_TYPE                                        syscall.Errno = 15136
+	ERROR_MRM_INVALID_QUALIFIER_OPERATOR                                      syscall.Errno = 15137
+	ERROR_MRM_INDETERMINATE_QUALIFIER_VALUE                                   syscall.Errno = 15138
+	ERROR_MRM_AUTOMERGE_ENABLED                                               syscall.Errno = 15139
+	ERROR_MRM_TOO_MANY_RESOURCES                                              syscall.Errno = 15140
+	ERROR_MRM_UNSUPPORTED_FILE_TYPE_FOR_MERGE                                 syscall.Errno = 15141
+	ERROR_MRM_UNSUPPORTED_FILE_TYPE_FOR_LOAD_UNLOAD_PRI_FILE                  syscall.Errno = 15142
+	ERROR_MRM_NO_CURRENT_VIEW_ON_THREAD                                       syscall.Errno = 15143
+	ERROR_DIFFERENT_PROFILE_RESOURCE_MANAGER_EXIST                            syscall.Errno = 15144
+	ERROR_OPERATION_NOT_ALLOWED_FROM_SYSTEM_COMPONENT                         syscall.Errno = 15145
+	ERROR_MRM_DIRECT_REF_TO_NON_DEFAULT_RESOURCE                              syscall.Errno = 15146
+	ERROR_MRM_GENERATION_COUNT_MISMATCH                                       syscall.Errno = 15147
+	ERROR_PRI_MERGE_VERSION_MISMATCH                                          syscall.Errno = 15148
+	ERROR_PRI_MERGE_MISSING_SCHEMA                                            syscall.Errno = 15149
+	ERROR_PRI_MERGE_LOAD_FILE_FAILED                                          syscall.Errno = 15150
+	ERROR_PRI_MERGE_ADD_FILE_FAILED                                           syscall.Errno = 15151
+	ERROR_PRI_MERGE_WRITE_FILE_FAILED                                         syscall.Errno = 15152
+	ERROR_PRI_MERGE_MULTIPLE_PACKAGE_FAMILIES_NOT_ALLOWED                     syscall.Errno = 15153
+	ERROR_PRI_MERGE_MULTIPLE_MAIN_PACKAGES_NOT_ALLOWED                        syscall.Errno = 15154
+	ERROR_PRI_MERGE_BUNDLE_PACKAGES_NOT_ALLOWED                               syscall.Errno = 15155
+	ERROR_PRI_MERGE_MAIN_PACKAGE_REQUIRED                                     syscall.Errno = 15156
+	ERROR_PRI_MERGE_RESOURCE_PACKAGE_REQUIRED                                 syscall.Errno = 15157
+	ERROR_PRI_MERGE_INVALID_FILE_NAME                                         syscall.Errno = 15158
+	ERROR_MRM_PACKAGE_NOT_FOUND                                               syscall.Errno = 15159
+	ERROR_MCA_INVALID_CAPABILITIES_STRING                                     syscall.Errno = 15200
+	ERROR_MCA_INVALID_VCP_VERSION                                             syscall.Errno = 15201
+	ERROR_MCA_MONITOR_VIOLATES_MCCS_SPECIFICATION                             syscall.Errno = 15202
+	ERROR_MCA_MCCS_VERSION_MISMATCH                                           syscall.Errno = 15203
+	ERROR_MCA_UNSUPPORTED_MCCS_VERSION                                        syscall.Errno = 15204
+	ERROR_MCA_INTERNAL_ERROR                                                  syscall.Errno = 15205
+	ERROR_MCA_INVALID_TECHNOLOGY_TYPE_RETURNED                                syscall.Errno = 15206
+	ERROR_MCA_UNSUPPORTED_COLOR_TEMPERATURE                                   syscall.Errno = 15207
+	ERROR_AMBIGUOUS_SYSTEM_DEVICE                                             syscall.Errno = 15250
+	ERROR_SYSTEM_DEVICE_NOT_FOUND                                             syscall.Errno = 15299
+	ERROR_HASH_NOT_SUPPORTED                                                  syscall.Errno = 15300
+	ERROR_HASH_NOT_PRESENT                                                    syscall.Errno = 15301
+	ERROR_SECONDARY_IC_PROVIDER_NOT_REGISTERED                                syscall.Errno = 15321
+	ERROR_GPIO_CLIENT_INFORMATION_INVALID                                     syscall.Errno = 15322
+	ERROR_GPIO_VERSION_NOT_SUPPORTED                                          syscall.Errno = 15323
+	ERROR_GPIO_INVALID_REGISTRATION_PACKET                                    syscall.Errno = 15324
+	ERROR_GPIO_OPERATION_DENIED                                               syscall.Errno = 15325
+	ERROR_GPIO_INCOMPATIBLE_CONNECT_MODE                                      syscall.Errno = 15326
+	ERROR_GPIO_INTERRUPT_ALREADY_UNMASKED                                     syscall.Errno = 15327
+	ERROR_CANNOT_SWITCH_RUNLEVEL                                              syscall.Errno = 15400
+	ERROR_INVALID_RUNLEVEL_SETTING                                            syscall.Errno = 15401
+	ERROR_RUNLEVEL_SWITCH_TIMEOUT                                             syscall.Errno = 15402
+	ERROR_RUNLEVEL_SWITCH_AGENT_TIMEOUT                                       syscall.Errno = 15403
+	ERROR_RUNLEVEL_SWITCH_IN_PROGRESS                                         syscall.Errno = 15404
+	ERROR_SERVICES_FAILED_AUTOSTART                                           syscall.Errno = 15405
+	ERROR_COM_TASK_STOP_PENDING                                               syscall.Errno = 15501
+	ERROR_INSTALL_OPEN_PACKAGE_FAILED                                         syscall.Errno = 15600
+	ERROR_INSTALL_PACKAGE_NOT_FOUND                                           syscall.Errno = 15601
+	ERROR_INSTALL_INVALID_PACKAGE                                             syscall.Errno = 15602
+	ERROR_INSTALL_RESOLVE_DEPENDENCY_FAILED                                   syscall.Errno = 15603
+	ERROR_INSTALL_OUT_OF_DISK_SPACE                                           syscall.Errno = 15604
+	ERROR_INSTALL_NETWORK_FAILURE                                             syscall.Errno = 15605
+	ERROR_INSTALL_REGISTRATION_FAILURE                                        syscall.Errno = 15606
+	ERROR_INSTALL_DEREGISTRATION_FAILURE                                      syscall.Errno = 15607
+	ERROR_INSTALL_CANCEL                                                      syscall.Errno = 15608
+	ERROR_INSTALL_FAILED                                                      syscall.Errno = 15609
+	ERROR_REMOVE_FAILED                                                       syscall.Errno = 15610
+	ERROR_PACKAGE_ALREADY_EXISTS                                              syscall.Errno = 15611
+	ERROR_NEEDS_REMEDIATION                                                   syscall.Errno = 15612
+	ERROR_INSTALL_PREREQUISITE_FAILED                                         syscall.Errno = 15613
+	ERROR_PACKAGE_REPOSITORY_CORRUPTED                                        syscall.Errno = 15614
+	ERROR_INSTALL_POLICY_FAILURE                                              syscall.Errno = 15615
+	ERROR_PACKAGE_UPDATING                                                    syscall.Errno = 15616
+	ERROR_DEPLOYMENT_BLOCKED_BY_POLICY                                        syscall.Errno = 15617
+	ERROR_PACKAGES_IN_USE                                                     syscall.Errno = 15618
+	ERROR_RECOVERY_FILE_CORRUPT                                               syscall.Errno = 15619
+	ERROR_INVALID_STAGED_SIGNATURE                                            syscall.Errno = 15620
+	ERROR_DELETING_EXISTING_APPLICATIONDATA_STORE_FAILED                      syscall.Errno = 15621
+	ERROR_INSTALL_PACKAGE_DOWNGRADE                                           syscall.Errno = 15622
+	ERROR_SYSTEM_NEEDS_REMEDIATION                                            syscall.Errno = 15623
+	ERROR_APPX_INTEGRITY_FAILURE_CLR_NGEN                                     syscall.Errno = 15624
+	ERROR_RESILIENCY_FILE_CORRUPT                                             syscall.Errno = 15625
+	ERROR_INSTALL_FIREWALL_SERVICE_NOT_RUNNING                                syscall.Errno = 15626
+	ERROR_PACKAGE_MOVE_FAILED                                                 syscall.Errno = 15627
+	ERROR_INSTALL_VOLUME_NOT_EMPTY                                            syscall.Errno = 15628
+	ERROR_INSTALL_VOLUME_OFFLINE                                              syscall.Errno = 15629
+	ERROR_INSTALL_VOLUME_CORRUPT                                              syscall.Errno = 15630
+	ERROR_NEEDS_REGISTRATION                                                  syscall.Errno = 15631
+	ERROR_INSTALL_WRONG_PROCESSOR_ARCHITECTURE                                syscall.Errno = 15632
+	ERROR_DEV_SIDELOAD_LIMIT_EXCEEDED                                         syscall.Errno = 15633
+	ERROR_INSTALL_OPTIONAL_PACKAGE_REQUIRES_MAIN_PACKAGE                      syscall.Errno = 15634
+	ERROR_PACKAGE_NOT_SUPPORTED_ON_FILESYSTEM                                 syscall.Errno = 15635
+	ERROR_PACKAGE_MOVE_BLOCKED_BY_STREAMING                                   syscall.Errno = 15636
+	ERROR_INSTALL_OPTIONAL_PACKAGE_APPLICATIONID_NOT_UNIQUE                   syscall.Errno = 15637
+	ERROR_PACKAGE_STAGING_ONHOLD                                              syscall.Errno = 15638
+	ERROR_INSTALL_INVALID_RELATED_SET_UPDATE                                  syscall.Errno = 15639
+	ERROR_INSTALL_OPTIONAL_PACKAGE_REQUIRES_MAIN_PACKAGE_FULLTRUST_CAPABILITY syscall.Errno = 15640
+	ERROR_DEPLOYMENT_BLOCKED_BY_USER_LOG_OFF                                  syscall.Errno = 15641
+	ERROR_PROVISION_OPTIONAL_PACKAGE_REQUIRES_MAIN_PACKAGE_PROVISIONED        syscall.Errno = 15642
+	ERROR_PACKAGES_REPUTATION_CHECK_FAILED                                    syscall.Errno = 15643
+	ERROR_PACKAGES_REPUTATION_CHECK_TIMEDOUT                                  syscall.Errno = 15644
+	ERROR_DEPLOYMENT_OPTION_NOT_SUPPORTED                                     syscall.Errno = 15645
+	ERROR_APPINSTALLER_ACTIVATION_BLOCKED                                     syscall.Errno = 15646
+	ERROR_REGISTRATION_FROM_REMOTE_DRIVE_NOT_SUPPORTED                        syscall.Errno = 15647
+	APPMODEL_ERROR_NO_PACKAGE                                                 syscall.Errno = 15700
+	APPMODEL_ERROR_PACKAGE_RUNTIME_CORRUPT                                    syscall.Errno = 15701
+	APPMODEL_ERROR_PACKAGE_IDENTITY_CORRUPT                                   syscall.Errno = 15702
+	APPMODEL_ERROR_NO_APPLICATION                                             syscall.Errno = 15703
+	APPMODEL_ERROR_DYNAMIC_PROPERTY_READ_FAILED                               syscall.Errno = 15704
+	APPMODEL_ERROR_DYNAMIC_PROPERTY_INVALID                                   syscall.Errno = 15705
+	APPMODEL_ERROR_PACKAGE_NOT_AVAILABLE                                      syscall.Errno = 15706
+	ERROR_STATE_LOAD_STORE_FAILED                                             syscall.Errno = 15800
+	ERROR_STATE_GET_VERSION_FAILED                                            syscall.Errno = 15801
+	ERROR_STATE_SET_VERSION_FAILED                                            syscall.Errno = 15802
+	ERROR_STATE_STRUCTURED_RESET_FAILED                                       syscall.Errno = 15803
+	ERROR_STATE_OPEN_CONTAINER_FAILED                                         syscall.Errno = 15804
+	ERROR_STATE_CREATE_CONTAINER_FAILED                                       syscall.Errno = 15805
+	ERROR_STATE_DELETE_CONTAINER_FAILED                                       syscall.Errno = 15806
+	ERROR_STATE_READ_SETTING_FAILED                                           syscall.Errno = 15807
+	ERROR_STATE_WRITE_SETTING_FAILED                                          syscall.Errno = 15808
+	ERROR_STATE_DELETE_SETTING_FAILED                                         syscall.Errno = 15809
+	ERROR_STATE_QUERY_SETTING_FAILED                                          syscall.Errno = 15810
+	ERROR_STATE_READ_COMPOSITE_SETTING_FAILED                                 syscall.Errno = 15811
+	ERROR_STATE_WRITE_COMPOSITE_SETTING_FAILED                                syscall.Errno = 15812
+	ERROR_STATE_ENUMERATE_CONTAINER_FAILED                                    syscall.Errno = 15813
+	ERROR_STATE_ENUMERATE_SETTINGS_FAILED                                     syscall.Errno = 15814
+	ERROR_STATE_COMPOSITE_SETTING_VALUE_SIZE_LIMIT_EXCEEDED                   syscall.Errno = 15815
+	ERROR_STATE_SETTING_VALUE_SIZE_LIMIT_EXCEEDED                             syscall.Errno = 15816
+	ERROR_STATE_SETTING_NAME_SIZE_LIMIT_EXCEEDED                              syscall.Errno = 15817
+	ERROR_STATE_CONTAINER_NAME_SIZE_LIMIT_EXCEEDED                            syscall.Errno = 15818
+	ERROR_API_UNAVAILABLE                                                     syscall.Errno = 15841
+	STORE_ERROR_UNLICENSED                                                    syscall.Errno = 15861
+	STORE_ERROR_UNLICENSED_USER                                               syscall.Errno = 15862
+	STORE_ERROR_PENDING_COM_TRANSACTION                                       syscall.Errno = 15863
+	STORE_ERROR_LICENSE_REVOKED                                               syscall.Errno = 15864
+	SEVERITY_SUCCESS                                                          syscall.Errno = 0
+	SEVERITY_ERROR                                                            syscall.Errno = 1
+	FACILITY_NT_BIT                                                                         = 0x10000000
+	E_NOT_SET                                                                               = ERROR_NOT_FOUND
+	E_NOT_VALID_STATE                                                                       = ERROR_INVALID_STATE
+	E_NOT_SUFFICIENT_BUFFER                                                                 = ERROR_INSUFFICIENT_BUFFER
+	E_TIME_CRITICAL_THREAD                                                                  = ERROR_TIME_CRITICAL_THREAD
+	NOERROR                                                                   syscall.Errno = 0
+	E_UNEXPECTED                                                              Handle        = 0x8000FFFF
+	E_NOTIMPL                                                                 Handle        = 0x80004001
+	E_OUTOFMEMORY                                                             Handle        = 0x8007000E
+	E_INVALIDARG                                                              Handle        = 0x80070057
+	E_NOINTERFACE                                                             Handle        = 0x80004002
+	E_POINTER                                                                 Handle        = 0x80004003
+	E_HANDLE                                                                  Handle        = 0x80070006
+	E_ABORT                                                                   Handle        = 0x80004004
+	E_FAIL                                                                    Handle        = 0x80004005
+	E_ACCESSDENIED                                                            Handle        = 0x80070005
+	E_PENDING                                                                 Handle        = 0x8000000A
+	E_BOUNDS                                                                  Handle        = 0x8000000B
+	E_CHANGED_STATE                                                           Handle        = 0x8000000C
+	E_ILLEGAL_STATE_CHANGE                                                    Handle        = 0x8000000D
+	E_ILLEGAL_METHOD_CALL                                                     Handle        = 0x8000000E
+	RO_E_METADATA_NAME_NOT_FOUND                                              Handle        = 0x8000000F
+	RO_E_METADATA_NAME_IS_NAMESPACE                                           Handle        = 0x80000010
+	RO_E_METADATA_INVALID_TYPE_FORMAT                                         Handle        = 0x80000011
+	RO_E_INVALID_METADATA_FILE                                                Handle        = 0x80000012
+	RO_E_CLOSED                                                               Handle        = 0x80000013
+	RO_E_EXCLUSIVE_WRITE                                                      Handle        = 0x80000014
+	RO_E_CHANGE_NOTIFICATION_IN_PROGRESS                                      Handle        = 0x80000015
+	RO_E_ERROR_STRING_NOT_FOUND                                               Handle        = 0x80000016
+	E_STRING_NOT_NULL_TERMINATED                                              Handle        = 0x80000017
+	E_ILLEGAL_DELEGATE_ASSIGNMENT                                             Handle        = 0x80000018
+	E_ASYNC_OPERATION_NOT_STARTED                                             Handle        = 0x80000019
+	E_APPLICATION_EXITING                                                     Handle        = 0x8000001A
+	E_APPLICATION_VIEW_EXITING                                                Handle        = 0x8000001B
+	RO_E_MUST_BE_AGILE                                                        Handle        = 0x8000001C
+	RO_E_UNSUPPORTED_FROM_MTA                                                 Handle        = 0x8000001D
+	RO_E_COMMITTED                                                            Handle        = 0x8000001E
+	RO_E_BLOCKED_CROSS_ASTA_CALL                                              Handle        = 0x8000001F
+	RO_E_CANNOT_ACTIVATE_FULL_TRUST_SERVER                                    Handle        = 0x80000020
+	RO_E_CANNOT_ACTIVATE_UNIVERSAL_APPLICATION_SERVER                         Handle        = 0x80000021
+	CO_E_INIT_TLS                                                             Handle        = 0x80004006
+	CO_E_INIT_SHARED_ALLOCATOR                                                Handle        = 0x80004007
+	CO_E_INIT_MEMORY_ALLOCATOR                                                Handle        = 0x80004008
+	CO_E_INIT_CLASS_CACHE                                                     Handle        = 0x80004009
+	CO_E_INIT_RPC_CHANNEL                                                     Handle        = 0x8000400A
+	CO_E_INIT_TLS_SET_CHANNEL_CONTROL                                         Handle        = 0x8000400B
+	CO_E_INIT_TLS_CHANNEL_CONTROL                                             Handle        = 0x8000400C
+	CO_E_INIT_UNACCEPTED_USER_ALLOCATOR                                       Handle        = 0x8000400D
+	CO_E_INIT_SCM_MUTEX_EXISTS                                                Handle        = 0x8000400E
+	CO_E_INIT_SCM_FILE_MAPPING_EXISTS                                         Handle        = 0x8000400F
+	CO_E_INIT_SCM_MAP_VIEW_OF_FILE                                            Handle        = 0x80004010
+	CO_E_INIT_SCM_EXEC_FAILURE                                                Handle        = 0x80004011
+	CO_E_INIT_ONLY_SINGLE_THREADED                                            Handle        = 0x80004012
+	CO_E_CANT_REMOTE                                                          Handle        = 0x80004013
+	CO_E_BAD_SERVER_NAME                                                      Handle        = 0x80004014
+	CO_E_WRONG_SERVER_IDENTITY                                                Handle        = 0x80004015
+	CO_E_OLE1DDE_DISABLED                                                     Handle        = 0x80004016
+	CO_E_RUNAS_SYNTAX                                                         Handle        = 0x80004017
+	CO_E_CREATEPROCESS_FAILURE                                                Handle        = 0x80004018
+	CO_E_RUNAS_CREATEPROCESS_FAILURE                                          Handle        = 0x80004019
+	CO_E_RUNAS_LOGON_FAILURE                                                  Handle        = 0x8000401A
+	CO_E_LAUNCH_PERMSSION_DENIED                                              Handle        = 0x8000401B
+	CO_E_START_SERVICE_FAILURE                                                Handle        = 0x8000401C
+	CO_E_REMOTE_COMMUNICATION_FAILURE                                         Handle        = 0x8000401D
+	CO_E_SERVER_START_TIMEOUT                                                 Handle        = 0x8000401E
+	CO_E_CLSREG_INCONSISTENT                                                  Handle        = 0x8000401F
+	CO_E_IIDREG_INCONSISTENT                                                  Handle        = 0x80004020
+	CO_E_NOT_SUPPORTED                                                        Handle        = 0x80004021
+	CO_E_RELOAD_DLL                                                           Handle        = 0x80004022
+	CO_E_MSI_ERROR                                                            Handle        = 0x80004023
+	CO_E_ATTEMPT_TO_CREATE_OUTSIDE_CLIENT_CONTEXT                             Handle        = 0x80004024
+	CO_E_SERVER_PAUSED                                                        Handle        = 0x80004025
+	CO_E_SERVER_NOT_PAUSED                                                    Handle        = 0x80004026
+	CO_E_CLASS_DISABLED                                                       Handle        = 0x80004027
+	CO_E_CLRNOTAVAILABLE                                                      Handle        = 0x80004028
+	CO_E_ASYNC_WORK_REJECTED                                                  Handle        = 0x80004029
+	CO_E_SERVER_INIT_TIMEOUT                                                  Handle        = 0x8000402A
+	CO_E_NO_SECCTX_IN_ACTIVATE                                                Handle        = 0x8000402B
+	CO_E_TRACKER_CONFIG                                                       Handle        = 0x80004030
+	CO_E_THREADPOOL_CONFIG                                                    Handle        = 0x80004031
+	CO_E_SXS_CONFIG                                                           Handle        = 0x80004032
+	CO_E_MALFORMED_SPN                                                        Handle        = 0x80004033
+	CO_E_UNREVOKED_REGISTRATION_ON_APARTMENT_SHUTDOWN                         Handle        = 0x80004034
+	CO_E_PREMATURE_STUB_RUNDOWN                                               Handle        = 0x80004035
+	S_OK                                                                      Handle        = 0
+	S_FALSE                                                                   Handle        = 1
+	OLE_E_FIRST                                                               Handle        = 0x80040000
+	OLE_E_LAST                                                                Handle        = 0x800400FF
+	OLE_S_FIRST                                                               Handle        = 0x00040000
+	OLE_S_LAST                                                                Handle        = 0x000400FF
+	OLE_E_OLEVERB                                                             Handle        = 0x80040000
+	OLE_E_ADVF                                                                Handle        = 0x80040001
+	OLE_E_ENUM_NOMORE                                                         Handle        = 0x80040002
+	OLE_E_ADVISENOTSUPPORTED                                                  Handle        = 0x80040003
+	OLE_E_NOCONNECTION                                                        Handle        = 0x80040004
+	OLE_E_NOTRUNNING                                                          Handle        = 0x80040005
+	OLE_E_NOCACHE                                                             Handle        = 0x80040006
+	OLE_E_BLANK                                                               Handle        = 0x80040007
+	OLE_E_CLASSDIFF                                                           Handle        = 0x80040008
+	OLE_E_CANT_GETMONIKER                                                     Handle        = 0x80040009
+	OLE_E_CANT_BINDTOSOURCE                                                   Handle        = 0x8004000A
+	OLE_E_STATIC                                                              Handle        = 0x8004000B
+	OLE_E_PROMPTSAVECANCELLED                                                 Handle        = 0x8004000C
+	OLE_E_INVALIDRECT                                                         Handle        = 0x8004000D
+	OLE_E_WRONGCOMPOBJ                                                        Handle        = 0x8004000E
+	OLE_E_INVALIDHWND                                                         Handle        = 0x8004000F
+	OLE_E_NOT_INPLACEACTIVE                                                   Handle        = 0x80040010
+	OLE_E_CANTCONVERT                                                         Handle        = 0x80040011
+	OLE_E_NOSTORAGE                                                           Handle        = 0x80040012
+	DV_E_FORMATETC                                                            Handle        = 0x80040064
+	DV_E_DVTARGETDEVICE                                                       Handle        = 0x80040065
+	DV_E_STGMEDIUM                                                            Handle        = 0x80040066
+	DV_E_STATDATA                                                             Handle        = 0x80040067
+	DV_E_LINDEX                                                               Handle        = 0x80040068
+	DV_E_TYMED                                                                Handle        = 0x80040069
+	DV_E_CLIPFORMAT                                                           Handle        = 0x8004006A
+	DV_E_DVASPECT                                                             Handle        = 0x8004006B
+	DV_E_DVTARGETDEVICE_SIZE                                                  Handle        = 0x8004006C
+	DV_E_NOIVIEWOBJECT                                                        Handle        = 0x8004006D
+	DRAGDROP_E_FIRST                                                          syscall.Errno = 0x80040100
+	DRAGDROP_E_LAST                                                           syscall.Errno = 0x8004010F
+	DRAGDROP_S_FIRST                                                          syscall.Errno = 0x00040100
+	DRAGDROP_S_LAST                                                           syscall.Errno = 0x0004010F
+	DRAGDROP_E_NOTREGISTERED                                                  Handle        = 0x80040100
+	DRAGDROP_E_ALREADYREGISTERED                                              Handle        = 0x80040101
+	DRAGDROP_E_INVALIDHWND                                                    Handle        = 0x80040102
+	DRAGDROP_E_CONCURRENT_DRAG_ATTEMPTED                                      Handle        = 0x80040103
+	CLASSFACTORY_E_FIRST                                                      syscall.Errno = 0x80040110
+	CLASSFACTORY_E_LAST                                                       syscall.Errno = 0x8004011F
+	CLASSFACTORY_S_FIRST                                                      syscall.Errno = 0x00040110
+	CLASSFACTORY_S_LAST                                                       syscall.Errno = 0x0004011F
+	CLASS_E_NOAGGREGATION                                                     Handle        = 0x80040110
+	CLASS_E_CLASSNOTAVAILABLE                                                 Handle        = 0x80040111
+	CLASS_E_NOTLICENSED                                                       Handle        = 0x80040112
+	MARSHAL_E_FIRST                                                           syscall.Errno = 0x80040120
+	MARSHAL_E_LAST                                                            syscall.Errno = 0x8004012F
+	MARSHAL_S_FIRST                                                           syscall.Errno = 0x00040120
+	MARSHAL_S_LAST                                                            syscall.Errno = 0x0004012F
+	DATA_E_FIRST                                                              syscall.Errno = 0x80040130
+	DATA_E_LAST                                                               syscall.Errno = 0x8004013F
+	DATA_S_FIRST                                                              syscall.Errno = 0x00040130
+	DATA_S_LAST                                                               syscall.Errno = 0x0004013F
+	VIEW_E_FIRST                                                              syscall.Errno = 0x80040140
+	VIEW_E_LAST                                                               syscall.Errno = 0x8004014F
+	VIEW_S_FIRST                                                              syscall.Errno = 0x00040140
+	VIEW_S_LAST                                                               syscall.Errno = 0x0004014F
+	VIEW_E_DRAW                                                               Handle        = 0x80040140
+	REGDB_E_FIRST                                                             syscall.Errno = 0x80040150
+	REGDB_E_LAST                                                              syscall.Errno = 0x8004015F
+	REGDB_S_FIRST                                                             syscall.Errno = 0x00040150
+	REGDB_S_LAST                                                              syscall.Errno = 0x0004015F
+	REGDB_E_READREGDB                                                         Handle        = 0x80040150
+	REGDB_E_WRITEREGDB                                                        Handle        = 0x80040151
+	REGDB_E_KEYMISSING                                                        Handle        = 0x80040152
+	REGDB_E_INVALIDVALUE                                                      Handle        = 0x80040153
+	REGDB_E_CLASSNOTREG                                                       Handle        = 0x80040154
+	REGDB_E_IIDNOTREG                                                         Handle        = 0x80040155
+	REGDB_E_BADTHREADINGMODEL                                                 Handle        = 0x80040156
+	REGDB_E_PACKAGEPOLICYVIOLATION                                            Handle        = 0x80040157
+	CAT_E_FIRST                                                               syscall.Errno = 0x80040160
+	CAT_E_LAST                                                                syscall.Errno = 0x80040161
+	CAT_E_CATIDNOEXIST                                                        Handle        = 0x80040160
+	CAT_E_NODESCRIPTION                                                       Handle        = 0x80040161
+	CS_E_FIRST                                                                syscall.Errno = 0x80040164
+	CS_E_LAST                                                                 syscall.Errno = 0x8004016F
+	CS_E_PACKAGE_NOTFOUND                                                     Handle        = 0x80040164
+	CS_E_NOT_DELETABLE                                                        Handle        = 0x80040165
+	CS_E_CLASS_NOTFOUND                                                       Handle        = 0x80040166
+	CS_E_INVALID_VERSION                                                      Handle        = 0x80040167
+	CS_E_NO_CLASSSTORE                                                        Handle        = 0x80040168
+	CS_E_OBJECT_NOTFOUND                                                      Handle        = 0x80040169
+	CS_E_OBJECT_ALREADY_EXISTS                                                Handle        = 0x8004016A
+	CS_E_INVALID_PATH                                                         Handle        = 0x8004016B
+	CS_E_NETWORK_ERROR                                                        Handle        = 0x8004016C
+	CS_E_ADMIN_LIMIT_EXCEEDED                                                 Handle        = 0x8004016D
+	CS_E_SCHEMA_MISMATCH                                                      Handle        = 0x8004016E
+	CS_E_INTERNAL_ERROR                                                       Handle        = 0x8004016F
+	CACHE_E_FIRST                                                             syscall.Errno = 0x80040170
+	CACHE_E_LAST                                                              syscall.Errno = 0x8004017F
+	CACHE_S_FIRST                                                             syscall.Errno = 0x00040170
+	CACHE_S_LAST                                                              syscall.Errno = 0x0004017F
+	CACHE_E_NOCACHE_UPDATED                                                   Handle        = 0x80040170
+	OLEOBJ_E_FIRST                                                            syscall.Errno = 0x80040180
+	OLEOBJ_E_LAST                                                             syscall.Errno = 0x8004018F
+	OLEOBJ_S_FIRST                                                            syscall.Errno = 0x00040180
+	OLEOBJ_S_LAST                                                             syscall.Errno = 0x0004018F
+	OLEOBJ_E_NOVERBS                                                          Handle        = 0x80040180
+	OLEOBJ_E_INVALIDVERB                                                      Handle        = 0x80040181
+	CLIENTSITE_E_FIRST                                                        syscall.Errno = 0x80040190
+	CLIENTSITE_E_LAST                                                         syscall.Errno = 0x8004019F
+	CLIENTSITE_S_FIRST                                                        syscall.Errno = 0x00040190
+	CLIENTSITE_S_LAST                                                         syscall.Errno = 0x0004019F
+	INPLACE_E_NOTUNDOABLE                                                     Handle        = 0x800401A0
+	INPLACE_E_NOTOOLSPACE                                                     Handle        = 0x800401A1
+	INPLACE_E_FIRST                                                           syscall.Errno = 0x800401A0
+	INPLACE_E_LAST                                                            syscall.Errno = 0x800401AF
+	INPLACE_S_FIRST                                                           syscall.Errno = 0x000401A0
+	INPLACE_S_LAST                                                            syscall.Errno = 0x000401AF
+	ENUM_E_FIRST                                                              syscall.Errno = 0x800401B0
+	ENUM_E_LAST                                                               syscall.Errno = 0x800401BF
+	ENUM_S_FIRST                                                              syscall.Errno = 0x000401B0
+	ENUM_S_LAST                                                               syscall.Errno = 0x000401BF
+	CONVERT10_E_FIRST                                                         syscall.Errno = 0x800401C0
+	CONVERT10_E_LAST                                                          syscall.Errno = 0x800401CF
+	CONVERT10_S_FIRST                                                         syscall.Errno = 0x000401C0
+	CONVERT10_S_LAST                                                          syscall.Errno = 0x000401CF
+	CONVERT10_E_OLESTREAM_GET                                                 Handle        = 0x800401C0
+	CONVERT10_E_OLESTREAM_PUT                                                 Handle        = 0x800401C1
+	CONVERT10_E_OLESTREAM_FMT                                                 Handle        = 0x800401C2
+	CONVERT10_E_OLESTREAM_BITMAP_TO_DIB                                       Handle        = 0x800401C3
+	CONVERT10_E_STG_FMT                                                       Handle        = 0x800401C4
+	CONVERT10_E_STG_NO_STD_STREAM                                             Handle        = 0x800401C5
+	CONVERT10_E_STG_DIB_TO_BITMAP                                             Handle        = 0x800401C6
+	CLIPBRD_E_FIRST                                                           syscall.Errno = 0x800401D0
+	CLIPBRD_E_LAST                                                            syscall.Errno = 0x800401DF
+	CLIPBRD_S_FIRST                                                           syscall.Errno = 0x000401D0
+	CLIPBRD_S_LAST                                                            syscall.Errno = 0x000401DF
+	CLIPBRD_E_CANT_OPEN                                                       Handle        = 0x800401D0
+	CLIPBRD_E_CANT_EMPTY                                                      Handle        = 0x800401D1
+	CLIPBRD_E_CANT_SET                                                        Handle        = 0x800401D2
+	CLIPBRD_E_BAD_DATA                                                        Handle        = 0x800401D3
+	CLIPBRD_E_CANT_CLOSE                                                      Handle        = 0x800401D4
+	MK_E_FIRST                                                                syscall.Errno = 0x800401E0
+	MK_E_LAST                                                                 syscall.Errno = 0x800401EF
+	MK_S_FIRST                                                                syscall.Errno = 0x000401E0
+	MK_S_LAST                                                                 syscall.Errno = 0x000401EF
+	MK_E_CONNECTMANUALLY                                                      Handle        = 0x800401E0
+	MK_E_EXCEEDEDDEADLINE                                                     Handle        = 0x800401E1
+	MK_E_NEEDGENERIC                                                          Handle        = 0x800401E2
+	MK_E_UNAVAILABLE                                                          Handle        = 0x800401E3
+	MK_E_SYNTAX                                                               Handle        = 0x800401E4
+	MK_E_NOOBJECT                                                             Handle        = 0x800401E5
+	MK_E_INVALIDEXTENSION                                                     Handle        = 0x800401E6
+	MK_E_INTERMEDIATEINTERFACENOTSUPPORTED                                    Handle        = 0x800401E7
+	MK_E_NOTBINDABLE                                                          Handle        = 0x800401E8
+	MK_E_NOTBOUND                                                             Handle        = 0x800401E9
+	MK_E_CANTOPENFILE                                                         Handle        = 0x800401EA
+	MK_E_MUSTBOTHERUSER                                                       Handle        = 0x800401EB
+	MK_E_NOINVERSE                                                            Handle        = 0x800401EC
+	MK_E_NOSTORAGE                                                            Handle        = 0x800401ED
+	MK_E_NOPREFIX                                                             Handle        = 0x800401EE
+	MK_E_ENUMERATION_FAILED                                                   Handle        = 0x800401EF
+	CO_E_FIRST                                                                syscall.Errno = 0x800401F0
+	CO_E_LAST                                                                 syscall.Errno = 0x800401FF
+	CO_S_FIRST                                                                syscall.Errno = 0x000401F0
+	CO_S_LAST                                                                 syscall.Errno = 0x000401FF
+	CO_E_NOTINITIALIZED                                                       Handle        = 0x800401F0
+	CO_E_ALREADYINITIALIZED                                                   Handle        = 0x800401F1
+	CO_E_CANTDETERMINECLASS                                                   Handle        = 0x800401F2
+	CO_E_CLASSSTRING                                                          Handle        = 0x800401F3
+	CO_E_IIDSTRING                                                            Handle        = 0x800401F4
+	CO_E_APPNOTFOUND                                                          Handle        = 0x800401F5
+	CO_E_APPSINGLEUSE                                                         Handle        = 0x800401F6
+	CO_E_ERRORINAPP                                                           Handle        = 0x800401F7
+	CO_E_DLLNOTFOUND                                                          Handle        = 0x800401F8
+	CO_E_ERRORINDLL                                                           Handle        = 0x800401F9
+	CO_E_WRONGOSFORAPP                                                        Handle        = 0x800401FA
+	CO_E_OBJNOTREG                                                            Handle        = 0x800401FB
+	CO_E_OBJISREG                                                             Handle        = 0x800401FC
+	CO_E_OBJNOTCONNECTED                                                      Handle        = 0x800401FD
+	CO_E_APPDIDNTREG                                                          Handle        = 0x800401FE
+	CO_E_RELEASED                                                             Handle        = 0x800401FF
+	EVENT_E_FIRST                                                             syscall.Errno = 0x80040200
+	EVENT_E_LAST                                                              syscall.Errno = 0x8004021F
+	EVENT_S_FIRST                                                             syscall.Errno = 0x00040200
+	EVENT_S_LAST                                                              syscall.Errno = 0x0004021F
+	EVENT_S_SOME_SUBSCRIBERS_FAILED                                           Handle        = 0x00040200
+	EVENT_E_ALL_SUBSCRIBERS_FAILED                                            Handle        = 0x80040201
+	EVENT_S_NOSUBSCRIBERS                                                     Handle        = 0x00040202
+	EVENT_E_QUERYSYNTAX                                                       Handle        = 0x80040203
+	EVENT_E_QUERYFIELD                                                        Handle        = 0x80040204
+	EVENT_E_INTERNALEXCEPTION                                                 Handle        = 0x80040205
+	EVENT_E_INTERNALERROR                                                     Handle        = 0x80040206
+	EVENT_E_INVALID_PER_USER_SID                                              Handle        = 0x80040207
+	EVENT_E_USER_EXCEPTION                                                    Handle        = 0x80040208
+	EVENT_E_TOO_MANY_METHODS                                                  Handle        = 0x80040209
+	EVENT_E_MISSING_EVENTCLASS                                                Handle        = 0x8004020A
+	EVENT_E_NOT_ALL_REMOVED                                                   Handle        = 0x8004020B
+	EVENT_E_COMPLUS_NOT_INSTALLED                                             Handle        = 0x8004020C
+	EVENT_E_CANT_MODIFY_OR_DELETE_UNCONFIGURED_OBJECT                         Handle        = 0x8004020D
+	EVENT_E_CANT_MODIFY_OR_DELETE_CONFIGURED_OBJECT                           Handle        = 0x8004020E
+	EVENT_E_INVALID_EVENT_CLASS_PARTITION                                     Handle        = 0x8004020F
+	EVENT_E_PER_USER_SID_NOT_LOGGED_ON                                        Handle        = 0x80040210
+	TPC_E_INVALID_PROPERTY                                                    Handle        = 0x80040241
+	TPC_E_NO_DEFAULT_TABLET                                                   Handle        = 0x80040212
+	TPC_E_UNKNOWN_PROPERTY                                                    Handle        = 0x8004021B
+	TPC_E_INVALID_INPUT_RECT                                                  Handle        = 0x80040219
+	TPC_E_INVALID_STROKE                                                      Handle        = 0x80040222
+	TPC_E_INITIALIZE_FAIL                                                     Handle        = 0x80040223
+	TPC_E_NOT_RELEVANT                                                        Handle        = 0x80040232
+	TPC_E_INVALID_PACKET_DESCRIPTION                                          Handle        = 0x80040233
+	TPC_E_RECOGNIZER_NOT_REGISTERED                                           Handle        = 0x80040235
+	TPC_E_INVALID_RIGHTS                                                      Handle        = 0x80040236
+	TPC_E_OUT_OF_ORDER_CALL                                                   Handle        = 0x80040237
+	TPC_E_QUEUE_FULL                                                          Handle        = 0x80040238
+	TPC_E_INVALID_CONFIGURATION                                               Handle        = 0x80040239
+	TPC_E_INVALID_DATA_FROM_RECOGNIZER                                        Handle        = 0x8004023A
+	TPC_S_TRUNCATED                                                           Handle        = 0x00040252
+	TPC_S_INTERRUPTED                                                         Handle        = 0x00040253
+	TPC_S_NO_DATA_TO_PROCESS                                                  Handle        = 0x00040254
+	XACT_E_FIRST                                                              syscall.Errno = 0x8004D000
+	XACT_E_LAST                                                               syscall.Errno = 0x8004D02B
+	XACT_S_FIRST                                                              syscall.Errno = 0x0004D000
+	XACT_S_LAST                                                               syscall.Errno = 0x0004D010
+	XACT_E_ALREADYOTHERSINGLEPHASE                                            Handle        = 0x8004D000
+	XACT_E_CANTRETAIN                                                         Handle        = 0x8004D001
+	XACT_E_COMMITFAILED                                                       Handle        = 0x8004D002
+	XACT_E_COMMITPREVENTED                                                    Handle        = 0x8004D003
+	XACT_E_HEURISTICABORT                                                     Handle        = 0x8004D004
+	XACT_E_HEURISTICCOMMIT                                                    Handle        = 0x8004D005
+	XACT_E_HEURISTICDAMAGE                                                    Handle        = 0x8004D006
+	XACT_E_HEURISTICDANGER                                                    Handle        = 0x8004D007
+	XACT_E_ISOLATIONLEVEL                                                     Handle        = 0x8004D008
+	XACT_E_NOASYNC                                                            Handle        = 0x8004D009
+	XACT_E_NOENLIST                                                           Handle        = 0x8004D00A
+	XACT_E_NOISORETAIN                                                        Handle        = 0x8004D00B
+	XACT_E_NORESOURCE                                                         Handle        = 0x8004D00C
+	XACT_E_NOTCURRENT                                                         Handle        = 0x8004D00D
+	XACT_E_NOTRANSACTION                                                      Handle        = 0x8004D00E
+	XACT_E_NOTSUPPORTED                                                       Handle        = 0x8004D00F
+	XACT_E_UNKNOWNRMGRID                                                      Handle        = 0x8004D010
+	XACT_E_WRONGSTATE                                                         Handle        = 0x8004D011
+	XACT_E_WRONGUOW                                                           Handle        = 0x8004D012
+	XACT_E_XTIONEXISTS                                                        Handle        = 0x8004D013
+	XACT_E_NOIMPORTOBJECT                                                     Handle        = 0x8004D014
+	XACT_E_INVALIDCOOKIE                                                      Handle        = 0x8004D015
+	XACT_E_INDOUBT                                                            Handle        = 0x8004D016
+	XACT_E_NOTIMEOUT                                                          Handle        = 0x8004D017
+	XACT_E_ALREADYINPROGRESS                                                  Handle        = 0x8004D018
+	XACT_E_ABORTED                                                            Handle        = 0x8004D019
+	XACT_E_LOGFULL                                                            Handle        = 0x8004D01A
+	XACT_E_TMNOTAVAILABLE                                                     Handle        = 0x8004D01B
+	XACT_E_CONNECTION_DOWN                                                    Handle        = 0x8004D01C
+	XACT_E_CONNECTION_DENIED                                                  Handle        = 0x8004D01D
+	XACT_E_REENLISTTIMEOUT                                                    Handle        = 0x8004D01E
+	XACT_E_TIP_CONNECT_FAILED                                                 Handle        = 0x8004D01F
+	XACT_E_TIP_PROTOCOL_ERROR                                                 Handle        = 0x8004D020
+	XACT_E_TIP_PULL_FAILED                                                    Handle        = 0x8004D021
+	XACT_E_DEST_TMNOTAVAILABLE                                                Handle        = 0x8004D022
+	XACT_E_TIP_DISABLED                                                       Handle        = 0x8004D023
+	XACT_E_NETWORK_TX_DISABLED                                                Handle        = 0x8004D024
+	XACT_E_PARTNER_NETWORK_TX_DISABLED                                        Handle        = 0x8004D025
+	XACT_E_XA_TX_DISABLED                                                     Handle        = 0x8004D026
+	XACT_E_UNABLE_TO_READ_DTC_CONFIG                                          Handle        = 0x8004D027
+	XACT_E_UNABLE_TO_LOAD_DTC_PROXY                                           Handle        = 0x8004D028
+	XACT_E_ABORTING                                                           Handle        = 0x8004D029
+	XACT_E_PUSH_COMM_FAILURE                                                  Handle        = 0x8004D02A
+	XACT_E_PULL_COMM_FAILURE                                                  Handle        = 0x8004D02B
+	XACT_E_LU_TX_DISABLED                                                     Handle        = 0x8004D02C
+	XACT_E_CLERKNOTFOUND                                                      Handle        = 0x8004D080
+	XACT_E_CLERKEXISTS                                                        Handle        = 0x8004D081
+	XACT_E_RECOVERYINPROGRESS                                                 Handle        = 0x8004D082
+	XACT_E_TRANSACTIONCLOSED                                                  Handle        = 0x8004D083
+	XACT_E_INVALIDLSN                                                         Handle        = 0x8004D084
+	XACT_E_REPLAYREQUEST                                                      Handle        = 0x8004D085
+	XACT_S_ASYNC                                                              Handle        = 0x0004D000
+	XACT_S_DEFECT                                                             Handle        = 0x0004D001
+	XACT_S_READONLY                                                           Handle        = 0x0004D002
+	XACT_S_SOMENORETAIN                                                       Handle        = 0x0004D003
+	XACT_S_OKINFORM                                                           Handle        = 0x0004D004
+	XACT_S_MADECHANGESCONTENT                                                 Handle        = 0x0004D005
+	XACT_S_MADECHANGESINFORM                                                  Handle        = 0x0004D006
+	XACT_S_ALLNORETAIN                                                        Handle        = 0x0004D007
+	XACT_S_ABORTING                                                           Handle        = 0x0004D008
+	XACT_S_SINGLEPHASE                                                        Handle        = 0x0004D009
+	XACT_S_LOCALLY_OK                                                         Handle        = 0x0004D00A
+	XACT_S_LASTRESOURCEMANAGER                                                Handle        = 0x0004D010
+	CONTEXT_E_FIRST                                                           syscall.Errno = 0x8004E000
+	CONTEXT_E_LAST                                                            syscall.Errno = 0x8004E02F
+	CONTEXT_S_FIRST                                                           syscall.Errno = 0x0004E000
+	CONTEXT_S_LAST                                                            syscall.Errno = 0x0004E02F
+	CONTEXT_E_ABORTED                                                         Handle        = 0x8004E002
+	CONTEXT_E_ABORTING                                                        Handle        = 0x8004E003
+	CONTEXT_E_NOCONTEXT                                                       Handle        = 0x8004E004
+	CONTEXT_E_WOULD_DEADLOCK                                                  Handle        = 0x8004E005
+	CONTEXT_E_SYNCH_TIMEOUT                                                   Handle        = 0x8004E006
+	CONTEXT_E_OLDREF                                                          Handle        = 0x8004E007
+	CONTEXT_E_ROLENOTFOUND                                                    Handle        = 0x8004E00C
+	CONTEXT_E_TMNOTAVAILABLE                                                  Handle        = 0x8004E00F
+	CO_E_ACTIVATIONFAILED                                                     Handle        = 0x8004E021
+	CO_E_ACTIVATIONFAILED_EVENTLOGGED                                         Handle        = 0x8004E022
+	CO_E_ACTIVATIONFAILED_CATALOGERROR                                        Handle        = 0x8004E023
+	CO_E_ACTIVATIONFAILED_TIMEOUT                                             Handle        = 0x8004E024
+	CO_E_INITIALIZATIONFAILED                                                 Handle        = 0x8004E025
+	CONTEXT_E_NOJIT                                                           Handle        = 0x8004E026
+	CONTEXT_E_NOTRANSACTION                                                   Handle        = 0x8004E027
+	CO_E_THREADINGMODEL_CHANGED                                               Handle        = 0x8004E028
+	CO_E_NOIISINTRINSICS                                                      Handle        = 0x8004E029
+	CO_E_NOCOOKIES                                                            Handle        = 0x8004E02A
+	CO_E_DBERROR                                                              Handle        = 0x8004E02B
+	CO_E_NOTPOOLED                                                            Handle        = 0x8004E02C
+	CO_E_NOTCONSTRUCTED                                                       Handle        = 0x8004E02D
+	CO_E_NOSYNCHRONIZATION                                                    Handle        = 0x8004E02E
+	CO_E_ISOLEVELMISMATCH                                                     Handle        = 0x8004E02F
+	CO_E_CALL_OUT_OF_TX_SCOPE_NOT_ALLOWED                                     Handle        = 0x8004E030
+	CO_E_EXIT_TRANSACTION_SCOPE_NOT_CALLED                                    Handle        = 0x8004E031
+	OLE_S_USEREG                                                              Handle        = 0x00040000
+	OLE_S_STATIC                                                              Handle        = 0x00040001
+	OLE_S_MAC_CLIPFORMAT                                                      Handle        = 0x00040002
+	DRAGDROP_S_DROP                                                           Handle        = 0x00040100
+	DRAGDROP_S_CANCEL                                                         Handle        = 0x00040101
+	DRAGDROP_S_USEDEFAULTCURSORS                                              Handle        = 0x00040102
+	DATA_S_SAMEFORMATETC                                                      Handle        = 0x00040130
+	VIEW_S_ALREADY_FROZEN                                                     Handle        = 0x00040140
+	CACHE_S_FORMATETC_NOTSUPPORTED                                            Handle        = 0x00040170
+	CACHE_S_SAMECACHE                                                         Handle        = 0x00040171
+	CACHE_S_SOMECACHES_NOTUPDATED                                             Handle        = 0x00040172
+	OLEOBJ_S_INVALIDVERB                                                      Handle        = 0x00040180
+	OLEOBJ_S_CANNOT_DOVERB_NOW                                                Handle        = 0x00040181
+	OLEOBJ_S_INVALIDHWND                                                      Handle        = 0x00040182
+	INPLACE_S_TRUNCATED                                                       Handle        = 0x000401A0
+	CONVERT10_S_NO_PRESENTATION                                               Handle        = 0x000401C0
+	MK_S_REDUCED_TO_SELF                                                      Handle        = 0x000401E2
+	MK_S_ME                                                                   Handle        = 0x000401E4
+	MK_S_HIM                                                                  Handle        = 0x000401E5
+	MK_S_US                                                                   Handle        = 0x000401E6
+	MK_S_MONIKERALREADYREGISTERED                                             Handle        = 0x000401E7
+	SCHED_S_TASK_READY                                                        Handle        = 0x00041300
+	SCHED_S_TASK_RUNNING                                                      Handle        = 0x00041301
+	SCHED_S_TASK_DISABLED                                                     Handle        = 0x00041302
+	SCHED_S_TASK_HAS_NOT_RUN                                                  Handle        = 0x00041303
+	SCHED_S_TASK_NO_MORE_RUNS                                                 Handle        = 0x00041304
+	SCHED_S_TASK_NOT_SCHEDULED                                                Handle        = 0x00041305
+	SCHED_S_TASK_TERMINATED                                                   Handle        = 0x00041306
+	SCHED_S_TASK_NO_VALID_TRIGGERS                                            Handle        = 0x00041307
+	SCHED_S_EVENT_TRIGGER                                                     Handle        = 0x00041308
+	SCHED_E_TRIGGER_NOT_FOUND                                                 Handle        = 0x80041309
+	SCHED_E_TASK_NOT_READY                                                    Handle        = 0x8004130A
+	SCHED_E_TASK_NOT_RUNNING                                                  Handle        = 0x8004130B
+	SCHED_E_SERVICE_NOT_INSTALLED                                             Handle        = 0x8004130C
+	SCHED_E_CANNOT_OPEN_TASK                                                  Handle        = 0x8004130D
+	SCHED_E_INVALID_TASK                                                      Handle        = 0x8004130E
+	SCHED_E_ACCOUNT_INFORMATION_NOT_SET                                       Handle        = 0x8004130F
+	SCHED_E_ACCOUNT_NAME_NOT_FOUND                                            Handle        = 0x80041310
+	SCHED_E_ACCOUNT_DBASE_CORRUPT                                             Handle        = 0x80041311
+	SCHED_E_NO_SECURITY_SERVICES                                              Handle        = 0x80041312
+	SCHED_E_UNKNOWN_OBJECT_VERSION                                            Handle        = 0x80041313
+	SCHED_E_UNSUPPORTED_ACCOUNT_OPTION                                        Handle        = 0x80041314
+	SCHED_E_SERVICE_NOT_RUNNING                                               Handle        = 0x80041315
+	SCHED_E_UNEXPECTEDNODE                                                    Handle        = 0x80041316
+	SCHED_E_NAMESPACE                                                         Handle        = 0x80041317
+	SCHED_E_INVALIDVALUE                                                      Handle        = 0x80041318
+	SCHED_E_MISSINGNODE                                                       Handle        = 0x80041319
+	SCHED_E_MALFORMEDXML                                                      Handle        = 0x8004131A
+	SCHED_S_SOME_TRIGGERS_FAILED                                              Handle        = 0x0004131B
+	SCHED_S_BATCH_LOGON_PROBLEM                                               Handle        = 0x0004131C
+	SCHED_E_TOO_MANY_NODES                                                    Handle        = 0x8004131D
+	SCHED_E_PAST_END_BOUNDARY                                                 Handle        = 0x8004131E
+	SCHED_E_ALREADY_RUNNING                                                   Handle        = 0x8004131F
+	SCHED_E_USER_NOT_LOGGED_ON                                                Handle        = 0x80041320
+	SCHED_E_INVALID_TASK_HASH                                                 Handle        = 0x80041321
+	SCHED_E_SERVICE_NOT_AVAILABLE                                             Handle        = 0x80041322
+	SCHED_E_SERVICE_TOO_BUSY                                                  Handle        = 0x80041323
+	SCHED_E_TASK_ATTEMPTED                                                    Handle        = 0x80041324
+	SCHED_S_TASK_QUEUED                                                       Handle        = 0x00041325
+	SCHED_E_TASK_DISABLED                                                     Handle        = 0x80041326
+	SCHED_E_TASK_NOT_V1_COMPAT                                                Handle        = 0x80041327
+	SCHED_E_START_ON_DEMAND                                                   Handle        = 0x80041328
+	SCHED_E_TASK_NOT_UBPM_COMPAT                                              Handle        = 0x80041329
+	SCHED_E_DEPRECATED_FEATURE_USED                                           Handle        = 0x80041330
+	CO_E_CLASS_CREATE_FAILED                                                  Handle        = 0x80080001
+	CO_E_SCM_ERROR                                                            Handle        = 0x80080002
+	CO_E_SCM_RPC_FAILURE                                                      Handle        = 0x80080003
+	CO_E_BAD_PATH                                                             Handle        = 0x80080004
+	CO_E_SERVER_EXEC_FAILURE                                                  Handle        = 0x80080005
+	CO_E_OBJSRV_RPC_FAILURE                                                   Handle        = 0x80080006
+	MK_E_NO_NORMALIZED                                                        Handle        = 0x80080007
+	CO_E_SERVER_STOPPING                                                      Handle        = 0x80080008
+	MEM_E_INVALID_ROOT                                                        Handle        = 0x80080009
+	MEM_E_INVALID_LINK                                                        Handle        = 0x80080010
+	MEM_E_INVALID_SIZE                                                        Handle        = 0x80080011
+	CO_S_NOTALLINTERFACES                                                     Handle        = 0x00080012
+	CO_S_MACHINENAMENOTFOUND                                                  Handle        = 0x00080013
+	CO_E_MISSING_DISPLAYNAME                                                  Handle        = 0x80080015
+	CO_E_RUNAS_VALUE_MUST_BE_AAA                                              Handle        = 0x80080016
+	CO_E_ELEVATION_DISABLED                                                   Handle        = 0x80080017
+	APPX_E_PACKAGING_INTERNAL                                                 Handle        = 0x80080200
+	APPX_E_INTERLEAVING_NOT_ALLOWED                                           Handle        = 0x80080201
+	APPX_E_RELATIONSHIPS_NOT_ALLOWED                                          Handle        = 0x80080202
+	APPX_E_MISSING_REQUIRED_FILE                                              Handle        = 0x80080203
+	APPX_E_INVALID_MANIFEST                                                   Handle        = 0x80080204
+	APPX_E_INVALID_BLOCKMAP                                                   Handle        = 0x80080205
+	APPX_E_CORRUPT_CONTENT                                                    Handle        = 0x80080206
+	APPX_E_BLOCK_HASH_INVALID                                                 Handle        = 0x80080207
+	APPX_E_REQUESTED_RANGE_TOO_LARGE                                          Handle        = 0x80080208
+	APPX_E_INVALID_SIP_CLIENT_DATA                                            Handle        = 0x80080209
+	APPX_E_INVALID_KEY_INFO                                                   Handle        = 0x8008020A
+	APPX_E_INVALID_CONTENTGROUPMAP                                            Handle        = 0x8008020B
+	APPX_E_INVALID_APPINSTALLER                                               Handle        = 0x8008020C
+	APPX_E_DELTA_BASELINE_VERSION_MISMATCH                                    Handle        = 0x8008020D
+	APPX_E_DELTA_PACKAGE_MISSING_FILE                                         Handle        = 0x8008020E
+	APPX_E_INVALID_DELTA_PACKAGE                                              Handle        = 0x8008020F
+	APPX_E_DELTA_APPENDED_PACKAGE_NOT_ALLOWED                                 Handle        = 0x80080210
+	APPX_E_INVALID_PACKAGING_LAYOUT                                           Handle        = 0x80080211
+	APPX_E_INVALID_PACKAGESIGNCONFIG                                          Handle        = 0x80080212
+	APPX_E_RESOURCESPRI_NOT_ALLOWED                                           Handle        = 0x80080213
+	APPX_E_FILE_COMPRESSION_MISMATCH                                          Handle        = 0x80080214
+	APPX_E_INVALID_PAYLOAD_PACKAGE_EXTENSION                                  Handle        = 0x80080215
+	APPX_E_INVALID_ENCRYPTION_EXCLUSION_FILE_LIST                             Handle        = 0x80080216
+	BT_E_SPURIOUS_ACTIVATION                                                  Handle        = 0x80080300
+	DISP_E_UNKNOWNINTERFACE                                                   Handle        = 0x80020001
+	DISP_E_MEMBERNOTFOUND                                                     Handle        = 0x80020003
+	DISP_E_PARAMNOTFOUND                                                      Handle        = 0x80020004
+	DISP_E_TYPEMISMATCH                                                       Handle        = 0x80020005
+	DISP_E_UNKNOWNNAME                                                        Handle        = 0x80020006
+	DISP_E_NONAMEDARGS                                                        Handle        = 0x80020007
+	DISP_E_BADVARTYPE                                                         Handle        = 0x80020008
+	DISP_E_EXCEPTION                                                          Handle        = 0x80020009
+	DISP_E_OVERFLOW                                                           Handle        = 0x8002000A
+	DISP_E_BADINDEX                                                           Handle        = 0x8002000B
+	DISP_E_UNKNOWNLCID                                                        Handle        = 0x8002000C
+	DISP_E_ARRAYISLOCKED                                                      Handle        = 0x8002000D
+	DISP_E_BADPARAMCOUNT                                                      Handle        = 0x8002000E
+	DISP_E_PARAMNOTOPTIONAL                                                   Handle        = 0x8002000F
+	DISP_E_BADCALLEE                                                          Handle        = 0x80020010
+	DISP_E_NOTACOLLECTION                                                     Handle        = 0x80020011
+	DISP_E_DIVBYZERO                                                          Handle        = 0x80020012
+	DISP_E_BUFFERTOOSMALL                                                     Handle        = 0x80020013
+	TYPE_E_BUFFERTOOSMALL                                                     Handle        = 0x80028016
+	TYPE_E_FIELDNOTFOUND                                                      Handle        = 0x80028017
+	TYPE_E_INVDATAREAD                                                        Handle        = 0x80028018
+	TYPE_E_UNSUPFORMAT                                                        Handle        = 0x80028019
+	TYPE_E_REGISTRYACCESS                                                     Handle        = 0x8002801C
+	TYPE_E_LIBNOTREGISTERED                                                   Handle        = 0x8002801D
+	TYPE_E_UNDEFINEDTYPE                                                      Handle        = 0x80028027
+	TYPE_E_QUALIFIEDNAMEDISALLOWED                                            Handle        = 0x80028028
+	TYPE_E_INVALIDSTATE                                                       Handle        = 0x80028029
+	TYPE_E_WRONGTYPEKIND                                                      Handle        = 0x8002802A
+	TYPE_E_ELEMENTNOTFOUND                                                    Handle        = 0x8002802B
+	TYPE_E_AMBIGUOUSNAME                                                      Handle        = 0x8002802C
+	TYPE_E_NAMECONFLICT                                                       Handle        = 0x8002802D
+	TYPE_E_UNKNOWNLCID                                                        Handle        = 0x8002802E
+	TYPE_E_DLLFUNCTIONNOTFOUND                                                Handle        = 0x8002802F
+	TYPE_E_BADMODULEKIND                                                      Handle        = 0x800288BD
+	TYPE_E_SIZETOOBIG                                                         Handle        = 0x800288C5
+	TYPE_E_DUPLICATEID                                                        Handle        = 0x800288C6
+	TYPE_E_INVALIDID                                                          Handle        = 0x800288CF
+	TYPE_E_TYPEMISMATCH                                                       Handle        = 0x80028CA0
+	TYPE_E_OUTOFBOUNDS                                                        Handle        = 0x80028CA1
+	TYPE_E_IOERROR                                                            Handle        = 0x80028CA2
+	TYPE_E_CANTCREATETMPFILE                                                  Handle        = 0x80028CA3
+	TYPE_E_CANTLOADLIBRARY                                                    Handle        = 0x80029C4A
+	TYPE_E_INCONSISTENTPROPFUNCS                                              Handle        = 0x80029C83
+	TYPE_E_CIRCULARTYPE                                                       Handle        = 0x80029C84
+	STG_E_INVALIDFUNCTION                                                     Handle        = 0x80030001
+	STG_E_FILENOTFOUND                                                        Handle        = 0x80030002
+	STG_E_PATHNOTFOUND                                                        Handle        = 0x80030003
+	STG_E_TOOMANYOPENFILES                                                    Handle        = 0x80030004
+	STG_E_ACCESSDENIED                                                        Handle        = 0x80030005
+	STG_E_INVALIDHANDLE                                                       Handle        = 0x80030006
+	STG_E_INSUFFICIENTMEMORY                                                  Handle        = 0x80030008
+	STG_E_INVALIDPOINTER                                                      Handle        = 0x80030009
+	STG_E_NOMOREFILES                                                         Handle        = 0x80030012
+	STG_E_DISKISWRITEPROTECTED                                                Handle        = 0x80030013
+	STG_E_SEEKERROR                                                           Handle        = 0x80030019
+	STG_E_WRITEFAULT                                                          Handle        = 0x8003001D
+	STG_E_READFAULT                                                           Handle        = 0x8003001E
+	STG_E_SHAREVIOLATION                                                      Handle        = 0x80030020
+	STG_E_LOCKVIOLATION                                                       Handle        = 0x80030021
+	STG_E_FILEALREADYEXISTS                                                   Handle        = 0x80030050
+	STG_E_INVALIDPARAMETER                                                    Handle        = 0x80030057
+	STG_E_MEDIUMFULL                                                          Handle        = 0x80030070
+	STG_E_PROPSETMISMATCHED                                                   Handle        = 0x800300F0
+	STG_E_ABNORMALAPIEXIT                                                     Handle        = 0x800300FA
+	STG_E_INVALIDHEADER                                                       Handle        = 0x800300FB
+	STG_E_INVALIDNAME                                                         Handle        = 0x800300FC
+	STG_E_UNKNOWN                                                             Handle        = 0x800300FD
+	STG_E_UNIMPLEMENTEDFUNCTION                                               Handle        = 0x800300FE
+	STG_E_INVALIDFLAG                                                         Handle        = 0x800300FF
+	STG_E_INUSE                                                               Handle        = 0x80030100
+	STG_E_NOTCURRENT                                                          Handle        = 0x80030101
+	STG_E_REVERTED                                                            Handle        = 0x80030102
+	STG_E_CANTSAVE                                                            Handle        = 0x80030103
+	STG_E_OLDFORMAT                                                           Handle        = 0x80030104
+	STG_E_OLDDLL                                                              Handle        = 0x80030105
+	STG_E_SHAREREQUIRED                                                       Handle        = 0x80030106
+	STG_E_NOTFILEBASEDSTORAGE                                                 Handle        = 0x80030107
+	STG_E_EXTANTMARSHALLINGS                                                  Handle        = 0x80030108
+	STG_E_DOCFILECORRUPT                                                      Handle        = 0x80030109
+	STG_E_BADBASEADDRESS                                                      Handle        = 0x80030110
+	STG_E_DOCFILETOOLARGE                                                     Handle        = 0x80030111
+	STG_E_NOTSIMPLEFORMAT                                                     Handle        = 0x80030112
+	STG_E_INCOMPLETE                                                          Handle        = 0x80030201
+	STG_E_TERMINATED                                                          Handle        = 0x80030202
+	STG_S_CONVERTED                                                           Handle        = 0x00030200
+	STG_S_BLOCK                                                               Handle        = 0x00030201
+	STG_S_RETRYNOW                                                            Handle        = 0x00030202
+	STG_S_MONITORING                                                          Handle        = 0x00030203
+	STG_S_MULTIPLEOPENS                                                       Handle        = 0x00030204
+	STG_S_CONSOLIDATIONFAILED                                                 Handle        = 0x00030205
+	STG_S_CANNOTCONSOLIDATE                                                   Handle        = 0x00030206
+	STG_S_POWER_CYCLE_REQUIRED                                                Handle        = 0x00030207
+	STG_E_FIRMWARE_SLOT_INVALID                                               Handle        = 0x80030208
+	STG_E_FIRMWARE_IMAGE_INVALID                                              Handle        = 0x80030209
+	STG_E_DEVICE_UNRESPONSIVE                                                 Handle        = 0x8003020A
+	STG_E_STATUS_COPY_PROTECTION_FAILURE                                      Handle        = 0x80030305
+	STG_E_CSS_AUTHENTICATION_FAILURE                                          Handle        = 0x80030306
+	STG_E_CSS_KEY_NOT_PRESENT                                                 Handle        = 0x80030307
+	STG_E_CSS_KEY_NOT_ESTABLISHED                                             Handle        = 0x80030308
+	STG_E_CSS_SCRAMBLED_SECTOR                                                Handle        = 0x80030309
+	STG_E_CSS_REGION_MISMATCH                                                 Handle        = 0x8003030A
+	STG_E_RESETS_EXHAUSTED                                                    Handle        = 0x8003030B
+	RPC_E_CALL_REJECTED                                                       Handle        = 0x80010001
+	RPC_E_CALL_CANCELED                                                       Handle        = 0x80010002
+	RPC_E_CANTPOST_INSENDCALL                                                 Handle        = 0x80010003
+	RPC_E_CANTCALLOUT_INASYNCCALL                                             Handle        = 0x80010004
+	RPC_E_CANTCALLOUT_INEXTERNALCALL                                          Handle        = 0x80010005
+	RPC_E_CONNECTION_TERMINATED                                               Handle        = 0x80010006
+	RPC_E_SERVER_DIED                                                         Handle        = 0x80010007
+	RPC_E_CLIENT_DIED                                                         Handle        = 0x80010008
+	RPC_E_INVALID_DATAPACKET                                                  Handle        = 0x80010009
+	RPC_E_CANTTRANSMIT_CALL                                                   Handle        = 0x8001000A
+	RPC_E_CLIENT_CANTMARSHAL_DATA                                             Handle        = 0x8001000B
+	RPC_E_CLIENT_CANTUNMARSHAL_DATA                                           Handle        = 0x8001000C
+	RPC_E_SERVER_CANTMARSHAL_DATA                                             Handle        = 0x8001000D
+	RPC_E_SERVER_CANTUNMARSHAL_DATA                                           Handle        = 0x8001000E
+	RPC_E_INVALID_DATA                                                        Handle        = 0x8001000F
+	RPC_E_INVALID_PARAMETER                                                   Handle        = 0x80010010
+	RPC_E_CANTCALLOUT_AGAIN                                                   Handle        = 0x80010011
+	RPC_E_SERVER_DIED_DNE                                                     Handle        = 0x80010012
+	RPC_E_SYS_CALL_FAILED                                                     Handle        = 0x80010100
+	RPC_E_OUT_OF_RESOURCES                                                    Handle        = 0x80010101
+	RPC_E_ATTEMPTED_MULTITHREAD                                               Handle        = 0x80010102
+	RPC_E_NOT_REGISTERED                                                      Handle        = 0x80010103
+	RPC_E_FAULT                                                               Handle        = 0x80010104
+	RPC_E_SERVERFAULT                                                         Handle        = 0x80010105
+	RPC_E_CHANGED_MODE                                                        Handle        = 0x80010106
+	RPC_E_INVALIDMETHOD                                                       Handle        = 0x80010107
+	RPC_E_DISCONNECTED                                                        Handle        = 0x80010108
+	RPC_E_RETRY                                                               Handle        = 0x80010109
+	RPC_E_SERVERCALL_RETRYLATER                                               Handle        = 0x8001010A
+	RPC_E_SERVERCALL_REJECTED                                                 Handle        = 0x8001010B
+	RPC_E_INVALID_CALLDATA                                                    Handle        = 0x8001010C
+	RPC_E_CANTCALLOUT_ININPUTSYNCCALL                                         Handle        = 0x8001010D
+	RPC_E_WRONG_THREAD                                                        Handle        = 0x8001010E
+	RPC_E_THREAD_NOT_INIT                                                     Handle        = 0x8001010F
+	RPC_E_VERSION_MISMATCH                                                    Handle        = 0x80010110
+	RPC_E_INVALID_HEADER                                                      Handle        = 0x80010111
+	RPC_E_INVALID_EXTENSION                                                   Handle        = 0x80010112
+	RPC_E_INVALID_IPID                                                        Handle        = 0x80010113
+	RPC_E_INVALID_OBJECT                                                      Handle        = 0x80010114
+	RPC_S_CALLPENDING                                                         Handle        = 0x80010115
+	RPC_S_WAITONTIMER                                                         Handle        = 0x80010116
+	RPC_E_CALL_COMPLETE                                                       Handle        = 0x80010117
+	RPC_E_UNSECURE_CALL                                                       Handle        = 0x80010118
+	RPC_E_TOO_LATE                                                            Handle        = 0x80010119
+	RPC_E_NO_GOOD_SECURITY_PACKAGES                                           Handle        = 0x8001011A
+	RPC_E_ACCESS_DENIED                                                       Handle        = 0x8001011B
+	RPC_E_REMOTE_DISABLED                                                     Handle        = 0x8001011C
+	RPC_E_INVALID_OBJREF                                                      Handle        = 0x8001011D
+	RPC_E_NO_CONTEXT                                                          Handle        = 0x8001011E
+	RPC_E_TIMEOUT                                                             Handle        = 0x8001011F
+	RPC_E_NO_SYNC                                                             Handle        = 0x80010120
+	RPC_E_FULLSIC_REQUIRED                                                    Handle        = 0x80010121
+	RPC_E_INVALID_STD_NAME                                                    Handle        = 0x80010122
+	CO_E_FAILEDTOIMPERSONATE                                                  Handle        = 0x80010123
+	CO_E_FAILEDTOGETSECCTX                                                    Handle        = 0x80010124
+	CO_E_FAILEDTOOPENTHREADTOKEN                                              Handle        = 0x80010125
+	CO_E_FAILEDTOGETTOKENINFO                                                 Handle        = 0x80010126
+	CO_E_TRUSTEEDOESNTMATCHCLIENT                                             Handle        = 0x80010127
+	CO_E_FAILEDTOQUERYCLIENTBLANKET                                           Handle        = 0x80010128
+	CO_E_FAILEDTOSETDACL                                                      Handle        = 0x80010129
+	CO_E_ACCESSCHECKFAILED                                                    Handle        = 0x8001012A
+	CO_E_NETACCESSAPIFAILED                                                   Handle        = 0x8001012B
+	CO_E_WRONGTRUSTEENAMESYNTAX                                               Handle        = 0x8001012C
+	CO_E_INVALIDSID                                                           Handle        = 0x8001012D
+	CO_E_CONVERSIONFAILED                                                     Handle        = 0x8001012E
+	CO_E_NOMATCHINGSIDFOUND                                                   Handle        = 0x8001012F
+	CO_E_LOOKUPACCSIDFAILED                                                   Handle        = 0x80010130
+	CO_E_NOMATCHINGNAMEFOUND                                                  Handle        = 0x80010131
+	CO_E_LOOKUPACCNAMEFAILED                                                  Handle        = 0x80010132
+	CO_E_SETSERLHNDLFAILED                                                    Handle        = 0x80010133
+	CO_E_FAILEDTOGETWINDIR                                                    Handle        = 0x80010134
+	CO_E_PATHTOOLONG                                                          Handle        = 0x80010135
+	CO_E_FAILEDTOGENUUID                                                      Handle        = 0x80010136
+	CO_E_FAILEDTOCREATEFILE                                                   Handle        = 0x80010137
+	CO_E_FAILEDTOCLOSEHANDLE                                                  Handle        = 0x80010138
+	CO_E_EXCEEDSYSACLLIMIT                                                    Handle        = 0x80010139
+	CO_E_ACESINWRONGORDER                                                     Handle        = 0x8001013A
+	CO_E_INCOMPATIBLESTREAMVERSION                                            Handle        = 0x8001013B
+	CO_E_FAILEDTOOPENPROCESSTOKEN                                             Handle        = 0x8001013C
+	CO_E_DECODEFAILED                                                         Handle        = 0x8001013D
+	CO_E_ACNOTINITIALIZED                                                     Handle        = 0x8001013F
+	CO_E_CANCEL_DISABLED                                                      Handle        = 0x80010140
+	RPC_E_UNEXPECTED                                                          Handle        = 0x8001FFFF
+	ERROR_AUDITING_DISABLED                                                   Handle        = 0xC0090001
+	ERROR_ALL_SIDS_FILTERED                                                   Handle        = 0xC0090002
+	ERROR_BIZRULES_NOT_ENABLED                                                Handle        = 0xC0090003
+	NTE_BAD_UID                                                               Handle        = 0x80090001
+	NTE_BAD_HASH                                                              Handle        = 0x80090002
+	NTE_BAD_KEY                                                               Handle        = 0x80090003
+	NTE_BAD_LEN                                                               Handle        = 0x80090004
+	NTE_BAD_DATA                                                              Handle        = 0x80090005
+	NTE_BAD_SIGNATURE                                                         Handle        = 0x80090006
+	NTE_BAD_VER                                                               Handle        = 0x80090007
+	NTE_BAD_ALGID                                                             Handle        = 0x80090008
+	NTE_BAD_FLAGS                                                             Handle        = 0x80090009
+	NTE_BAD_TYPE                                                              Handle        = 0x8009000A
+	NTE_BAD_KEY_STATE                                                         Handle        = 0x8009000B
+	NTE_BAD_HASH_STATE                                                        Handle        = 0x8009000C
+	NTE_NO_KEY                                                                Handle        = 0x8009000D
+	NTE_NO_MEMORY                                                             Handle        = 0x8009000E
+	NTE_EXISTS                                                                Handle        = 0x8009000F
+	NTE_PERM                                                                  Handle        = 0x80090010
+	NTE_NOT_FOUND                                                             Handle        = 0x80090011
+	NTE_DOUBLE_ENCRYPT                                                        Handle        = 0x80090012
+	NTE_BAD_PROVIDER                                                          Handle        = 0x80090013
+	NTE_BAD_PROV_TYPE                                                         Handle        = 0x80090014
+	NTE_BAD_PUBLIC_KEY                                                        Handle        = 0x80090015
+	NTE_BAD_KEYSET                                                            Handle        = 0x80090016
+	NTE_PROV_TYPE_NOT_DEF                                                     Handle        = 0x80090017
+	NTE_PROV_TYPE_ENTRY_BAD                                                   Handle        = 0x80090018
+	NTE_KEYSET_NOT_DEF                                                        Handle        = 0x80090019
+	NTE_KEYSET_ENTRY_BAD                                                      Handle        = 0x8009001A
+	NTE_PROV_TYPE_NO_MATCH                                                    Handle        = 0x8009001B
+	NTE_SIGNATURE_FILE_BAD                                                    Handle        = 0x8009001C
+	NTE_PROVIDER_DLL_FAIL                                                     Handle        = 0x8009001D
+	NTE_PROV_DLL_NOT_FOUND                                                    Handle        = 0x8009001E
+	NTE_BAD_KEYSET_PARAM                                                      Handle        = 0x8009001F
+	NTE_FAIL                                                                  Handle        = 0x80090020
+	NTE_SYS_ERR                                                               Handle        = 0x80090021
+	NTE_SILENT_CONTEXT                                                        Handle        = 0x80090022
+	NTE_TOKEN_KEYSET_STORAGE_FULL                                             Handle        = 0x80090023
+	NTE_TEMPORARY_PROFILE                                                     Handle        = 0x80090024
+	NTE_FIXEDPARAMETER                                                        Handle        = 0x80090025
+	NTE_INVALID_HANDLE                                                        Handle        = 0x80090026
+	NTE_INVALID_PARAMETER                                                     Handle        = 0x80090027
+	NTE_BUFFER_TOO_SMALL                                                      Handle        = 0x80090028
+	NTE_NOT_SUPPORTED                                                         Handle        = 0x80090029
+	NTE_NO_MORE_ITEMS                                                         Handle        = 0x8009002A
+	NTE_BUFFERS_OVERLAP                                                       Handle        = 0x8009002B
+	NTE_DECRYPTION_FAILURE                                                    Handle        = 0x8009002C
+	NTE_INTERNAL_ERROR                                                        Handle        = 0x8009002D
+	NTE_UI_REQUIRED                                                           Handle        = 0x8009002E
+	NTE_HMAC_NOT_SUPPORTED                                                    Handle        = 0x8009002F
+	NTE_DEVICE_NOT_READY                                                      Handle        = 0x80090030
+	NTE_AUTHENTICATION_IGNORED                                                Handle        = 0x80090031
+	NTE_VALIDATION_FAILED                                                     Handle        = 0x80090032
+	NTE_INCORRECT_PASSWORD                                                    Handle        = 0x80090033
+	NTE_ENCRYPTION_FAILURE                                                    Handle        = 0x80090034
+	NTE_DEVICE_NOT_FOUND                                                      Handle        = 0x80090035
+	NTE_USER_CANCELLED                                                        Handle        = 0x80090036
+	NTE_PASSWORD_CHANGE_REQUIRED                                              Handle        = 0x80090037
+	NTE_NOT_ACTIVE_CONSOLE                                                    Handle        = 0x80090038
+	SEC_E_INSUFFICIENT_MEMORY                                                 Handle        = 0x80090300
+	SEC_E_INVALID_HANDLE                                                      Handle        = 0x80090301
+	SEC_E_UNSUPPORTED_FUNCTION                                                Handle        = 0x80090302
+	SEC_E_TARGET_UNKNOWN                                                      Handle        = 0x80090303
+	SEC_E_INTERNAL_ERROR                                                      Handle        = 0x80090304
+	SEC_E_SECPKG_NOT_FOUND                                                    Handle        = 0x80090305
+	SEC_E_NOT_OWNER                                                           Handle        = 0x80090306
+	SEC_E_CANNOT_INSTALL                                                      Handle        = 0x80090307
+	SEC_E_INVALID_TOKEN                                                       Handle        = 0x80090308
+	SEC_E_CANNOT_PACK                                                         Handle        = 0x80090309
+	SEC_E_QOP_NOT_SUPPORTED                                                   Handle        = 0x8009030A
+	SEC_E_NO_IMPERSONATION                                                    Handle        = 0x8009030B
+	SEC_E_LOGON_DENIED                                                        Handle        = 0x8009030C
+	SEC_E_UNKNOWN_CREDENTIALS                                                 Handle        = 0x8009030D
+	SEC_E_NO_CREDENTIALS                                                      Handle        = 0x8009030E
+	SEC_E_MESSAGE_ALTERED                                                     Handle        = 0x8009030F
+	SEC_E_OUT_OF_SEQUENCE                                                     Handle        = 0x80090310
+	SEC_E_NO_AUTHENTICATING_AUTHORITY                                         Handle        = 0x80090311
+	SEC_I_CONTINUE_NEEDED                                                     Handle        = 0x00090312
+	SEC_I_COMPLETE_NEEDED                                                     Handle        = 0x00090313
+	SEC_I_COMPLETE_AND_CONTINUE                                               Handle        = 0x00090314
+	SEC_I_LOCAL_LOGON                                                         Handle        = 0x00090315
+	SEC_E_BAD_PKGID                                                           Handle        = 0x80090316
+	SEC_E_CONTEXT_EXPIRED                                                     Handle        = 0x80090317
+	SEC_I_CONTEXT_EXPIRED                                                     Handle        = 0x00090317
+	SEC_E_INCOMPLETE_MESSAGE                                                  Handle        = 0x80090318
+	SEC_E_INCOMPLETE_CREDENTIALS                                              Handle        = 0x80090320
+	SEC_E_BUFFER_TOO_SMALL                                                    Handle        = 0x80090321
+	SEC_I_INCOMPLETE_CREDENTIALS                                              Handle        = 0x00090320
+	SEC_I_RENEGOTIATE                                                         Handle        = 0x00090321
+	SEC_E_WRONG_PRINCIPAL                                                     Handle        = 0x80090322
+	SEC_I_NO_LSA_CONTEXT                                                      Handle        = 0x00090323
+	SEC_E_TIME_SKEW                                                           Handle        = 0x80090324
+	SEC_E_UNTRUSTED_ROOT                                                      Handle        = 0x80090325
+	SEC_E_ILLEGAL_MESSAGE                                                     Handle        = 0x80090326
+	SEC_E_CERT_UNKNOWN                                                        Handle        = 0x80090327
+	SEC_E_CERT_EXPIRED                                                        Handle        = 0x80090328
+	SEC_E_ENCRYPT_FAILURE                                                     Handle        = 0x80090329
+	SEC_E_DECRYPT_FAILURE                                                     Handle        = 0x80090330
+	SEC_E_ALGORITHM_MISMATCH                                                  Handle        = 0x80090331
+	SEC_E_SECURITY_QOS_FAILED                                                 Handle        = 0x80090332
+	SEC_E_UNFINISHED_CONTEXT_DELETED                                          Handle        = 0x80090333
+	SEC_E_NO_TGT_REPLY                                                        Handle        = 0x80090334
+	SEC_E_NO_IP_ADDRESSES                                                     Handle        = 0x80090335
+	SEC_E_WRONG_CREDENTIAL_HANDLE                                             Handle        = 0x80090336
+	SEC_E_CRYPTO_SYSTEM_INVALID                                               Handle        = 0x80090337
+	SEC_E_MAX_REFERRALS_EXCEEDED                                              Handle        = 0x80090338
+	SEC_E_MUST_BE_KDC                                                         Handle        = 0x80090339
+	SEC_E_STRONG_CRYPTO_NOT_SUPPORTED                                         Handle        = 0x8009033A
+	SEC_E_TOO_MANY_PRINCIPALS                                                 Handle        = 0x8009033B
+	SEC_E_NO_PA_DATA                                                          Handle        = 0x8009033C
+	SEC_E_PKINIT_NAME_MISMATCH                                                Handle        = 0x8009033D
+	SEC_E_SMARTCARD_LOGON_REQUIRED                                            Handle        = 0x8009033E
+	SEC_E_SHUTDOWN_IN_PROGRESS                                                Handle        = 0x8009033F
+	SEC_E_KDC_INVALID_REQUEST                                                 Handle        = 0x80090340
+	SEC_E_KDC_UNABLE_TO_REFER                                                 Handle        = 0x80090341
+	SEC_E_KDC_UNKNOWN_ETYPE                                                   Handle        = 0x80090342
+	SEC_E_UNSUPPORTED_PREAUTH                                                 Handle        = 0x80090343
+	SEC_E_DELEGATION_REQUIRED                                                 Handle        = 0x80090345
+	SEC_E_BAD_BINDINGS                                                        Handle        = 0x80090346
+	SEC_E_MULTIPLE_ACCOUNTS                                                   Handle        = 0x80090347
+	SEC_E_NO_KERB_KEY                                                         Handle        = 0x80090348
+	SEC_E_CERT_WRONG_USAGE                                                    Handle        = 0x80090349
+	SEC_E_DOWNGRADE_DETECTED                                                  Handle        = 0x80090350
+	SEC_E_SMARTCARD_CERT_REVOKED                                              Handle        = 0x80090351
+	SEC_E_ISSUING_CA_UNTRUSTED                                                Handle        = 0x80090352
+	SEC_E_REVOCATION_OFFLINE_C                                                Handle        = 0x80090353
+	SEC_E_PKINIT_CLIENT_FAILURE                                               Handle        = 0x80090354
+	SEC_E_SMARTCARD_CERT_EXPIRED                                              Handle        = 0x80090355
+	SEC_E_NO_S4U_PROT_SUPPORT                                                 Handle        = 0x80090356
+	SEC_E_CROSSREALM_DELEGATION_FAILURE                                       Handle        = 0x80090357
+	SEC_E_REVOCATION_OFFLINE_KDC                                              Handle        = 0x80090358
+	SEC_E_ISSUING_CA_UNTRUSTED_KDC                                            Handle        = 0x80090359
+	SEC_E_KDC_CERT_EXPIRED                                                    Handle        = 0x8009035A
+	SEC_E_KDC_CERT_REVOKED                                                    Handle        = 0x8009035B
+	SEC_I_SIGNATURE_NEEDED                                                    Handle        = 0x0009035C
+	SEC_E_INVALID_PARAMETER                                                   Handle        = 0x8009035D
+	SEC_E_DELEGATION_POLICY                                                   Handle        = 0x8009035E
+	SEC_E_POLICY_NLTM_ONLY                                                    Handle        = 0x8009035F
+	SEC_I_NO_RENEGOTIATION                                                    Handle        = 0x00090360
+	SEC_E_NO_CONTEXT                                                          Handle        = 0x80090361
+	SEC_E_PKU2U_CERT_FAILURE                                                  Handle        = 0x80090362
+	SEC_E_MUTUAL_AUTH_FAILED                                                  Handle        = 0x80090363
+	SEC_I_MESSAGE_FRAGMENT                                                    Handle        = 0x00090364
+	SEC_E_ONLY_HTTPS_ALLOWED                                                  Handle        = 0x80090365
+	SEC_I_CONTINUE_NEEDED_MESSAGE_OK                                          Handle        = 0x00090366
+	SEC_E_APPLICATION_PROTOCOL_MISMATCH                                       Handle        = 0x80090367
+	SEC_I_ASYNC_CALL_PENDING                                                  Handle        = 0x00090368
+	SEC_E_INVALID_UPN_NAME                                                    Handle        = 0x80090369
+	SEC_E_NO_SPM                                                                            = SEC_E_INTERNAL_ERROR
+	SEC_E_NOT_SUPPORTED                                                                     = SEC_E_UNSUPPORTED_FUNCTION
+	CRYPT_E_MSG_ERROR                                                         Handle        = 0x80091001
+	CRYPT_E_UNKNOWN_ALGO                                                      Handle        = 0x80091002
+	CRYPT_E_OID_FORMAT                                                        Handle        = 0x80091003
+	CRYPT_E_INVALID_MSG_TYPE                                                  Handle        = 0x80091004
+	CRYPT_E_UNEXPECTED_ENCODING                                               Handle        = 0x80091005
+	CRYPT_E_AUTH_ATTR_MISSING                                                 Handle        = 0x80091006
+	CRYPT_E_HASH_VALUE                                                        Handle        = 0x80091007
+	CRYPT_E_INVALID_INDEX                                                     Handle        = 0x80091008
+	CRYPT_E_ALREADY_DECRYPTED                                                 Handle        = 0x80091009
+	CRYPT_E_NOT_DECRYPTED                                                     Handle        = 0x8009100A
+	CRYPT_E_RECIPIENT_NOT_FOUND                                               Handle        = 0x8009100B
+	CRYPT_E_CONTROL_TYPE                                                      Handle        = 0x8009100C
+	CRYPT_E_ISSUER_SERIALNUMBER                                               Handle        = 0x8009100D
+	CRYPT_E_SIGNER_NOT_FOUND                                                  Handle        = 0x8009100E
+	CRYPT_E_ATTRIBUTES_MISSING                                                Handle        = 0x8009100F
+	CRYPT_E_STREAM_MSG_NOT_READY                                              Handle        = 0x80091010
+	CRYPT_E_STREAM_INSUFFICIENT_DATA                                          Handle        = 0x80091011
+	CRYPT_I_NEW_PROTECTION_REQUIRED                                           Handle        = 0x00091012
+	CRYPT_E_BAD_LEN                                                           Handle        = 0x80092001
+	CRYPT_E_BAD_ENCODE                                                        Handle        = 0x80092002
+	CRYPT_E_FILE_ERROR                                                        Handle        = 0x80092003
+	CRYPT_E_NOT_FOUND                                                         Handle        = 0x80092004
+	CRYPT_E_EXISTS                                                            Handle        = 0x80092005
+	CRYPT_E_NO_PROVIDER                                                       Handle        = 0x80092006
+	CRYPT_E_SELF_SIGNED                                                       Handle        = 0x80092007
+	CRYPT_E_DELETED_PREV                                                      Handle        = 0x80092008
+	CRYPT_E_NO_MATCH                                                          Handle        = 0x80092009
+	CRYPT_E_UNEXPECTED_MSG_TYPE                                               Handle        = 0x8009200A
+	CRYPT_E_NO_KEY_PROPERTY                                                   Handle        = 0x8009200B
+	CRYPT_E_NO_DECRYPT_CERT                                                   Handle        = 0x8009200C
+	CRYPT_E_BAD_MSG                                                           Handle        = 0x8009200D
+	CRYPT_E_NO_SIGNER                                                         Handle        = 0x8009200E
+	CRYPT_E_PENDING_CLOSE                                                     Handle        = 0x8009200F
+	CRYPT_E_REVOKED                                                           Handle        = 0x80092010
+	CRYPT_E_NO_REVOCATION_DLL                                                 Handle        = 0x80092011
+	CRYPT_E_NO_REVOCATION_CHECK                                               Handle        = 0x80092012
+	CRYPT_E_REVOCATION_OFFLINE                                                Handle        = 0x80092013
+	CRYPT_E_NOT_IN_REVOCATION_DATABASE                                        Handle        = 0x80092014
+	CRYPT_E_INVALID_NUMERIC_STRING                                            Handle        = 0x80092020
+	CRYPT_E_INVALID_PRINTABLE_STRING                                          Handle        = 0x80092021
+	CRYPT_E_INVALID_IA5_STRING                                                Handle        = 0x80092022
+	CRYPT_E_INVALID_X500_STRING                                               Handle        = 0x80092023
+	CRYPT_E_NOT_CHAR_STRING                                                   Handle        = 0x80092024
+	CRYPT_E_FILERESIZED                                                       Handle        = 0x80092025
+	CRYPT_E_SECURITY_SETTINGS                                                 Handle        = 0x80092026
+	CRYPT_E_NO_VERIFY_USAGE_DLL                                               Handle        = 0x80092027
+	CRYPT_E_NO_VERIFY_USAGE_CHECK                                             Handle        = 0x80092028
+	CRYPT_E_VERIFY_USAGE_OFFLINE                                              Handle        = 0x80092029
+	CRYPT_E_NOT_IN_CTL                                                        Handle        = 0x8009202A
+	CRYPT_E_NO_TRUSTED_SIGNER                                                 Handle        = 0x8009202B
+	CRYPT_E_MISSING_PUBKEY_PARA                                               Handle        = 0x8009202C
+	CRYPT_E_OBJECT_LOCATOR_OBJECT_NOT_FOUND                                   Handle        = 0x8009202D
+	CRYPT_E_OSS_ERROR                                                         Handle        = 0x80093000
+	OSS_MORE_BUF                                                              Handle        = 0x80093001
+	OSS_NEGATIVE_UINTEGER                                                     Handle        = 0x80093002
+	OSS_PDU_RANGE                                                             Handle        = 0x80093003
+	OSS_MORE_INPUT                                                            Handle        = 0x80093004
+	OSS_DATA_ERROR                                                            Handle        = 0x80093005
+	OSS_BAD_ARG                                                               Handle        = 0x80093006
+	OSS_BAD_VERSION                                                           Handle        = 0x80093007
+	OSS_OUT_MEMORY                                                            Handle        = 0x80093008
+	OSS_PDU_MISMATCH                                                          Handle        = 0x80093009
+	OSS_LIMITED                                                               Handle        = 0x8009300A
+	OSS_BAD_PTR                                                               Handle        = 0x8009300B
+	OSS_BAD_TIME                                                              Handle        = 0x8009300C
+	OSS_INDEFINITE_NOT_SUPPORTED                                              Handle        = 0x8009300D
+	OSS_MEM_ERROR                                                             Handle        = 0x8009300E
+	OSS_BAD_TABLE                                                             Handle        = 0x8009300F
+	OSS_TOO_LONG                                                              Handle        = 0x80093010
+	OSS_CONSTRAINT_VIOLATED                                                   Handle        = 0x80093011
+	OSS_FATAL_ERROR                                                           Handle        = 0x80093012
+	OSS_ACCESS_SERIALIZATION_ERROR                                            Handle        = 0x80093013
+	OSS_NULL_TBL                                                              Handle        = 0x80093014
+	OSS_NULL_FCN                                                              Handle        = 0x80093015
+	OSS_BAD_ENCRULES                                                          Handle        = 0x80093016
+	OSS_UNAVAIL_ENCRULES                                                      Handle        = 0x80093017
+	OSS_CANT_OPEN_TRACE_WINDOW                                                Handle        = 0x80093018
+	OSS_UNIMPLEMENTED                                                         Handle        = 0x80093019
+	OSS_OID_DLL_NOT_LINKED                                                    Handle        = 0x8009301A
+	OSS_CANT_OPEN_TRACE_FILE                                                  Handle        = 0x8009301B
+	OSS_TRACE_FILE_ALREADY_OPEN                                               Handle        = 0x8009301C
+	OSS_TABLE_MISMATCH                                                        Handle        = 0x8009301D
+	OSS_TYPE_NOT_SUPPORTED                                                    Handle        = 0x8009301E
+	OSS_REAL_DLL_NOT_LINKED                                                   Handle        = 0x8009301F
+	OSS_REAL_CODE_NOT_LINKED                                                  Handle        = 0x80093020
+	OSS_OUT_OF_RANGE                                                          Handle        = 0x80093021
+	OSS_COPIER_DLL_NOT_LINKED                                                 Handle        = 0x80093022
+	OSS_CONSTRAINT_DLL_NOT_LINKED                                             Handle        = 0x80093023
+	OSS_COMPARATOR_DLL_NOT_LINKED                                             Handle        = 0x80093024
+	OSS_COMPARATOR_CODE_NOT_LINKED                                            Handle        = 0x80093025
+	OSS_MEM_MGR_DLL_NOT_LINKED                                                Handle        = 0x80093026
+	OSS_PDV_DLL_NOT_LINKED                                                    Handle        = 0x80093027
+	OSS_PDV_CODE_NOT_LINKED                                                   Handle        = 0x80093028
+	OSS_API_DLL_NOT_LINKED                                                    Handle        = 0x80093029
+	OSS_BERDER_DLL_NOT_LINKED                                                 Handle        = 0x8009302A
+	OSS_PER_DLL_NOT_LINKED                                                    Handle        = 0x8009302B
+	OSS_OPEN_TYPE_ERROR                                                       Handle        = 0x8009302C
+	OSS_MUTEX_NOT_CREATED                                                     Handle        = 0x8009302D
+	OSS_CANT_CLOSE_TRACE_FILE                                                 Handle        = 0x8009302E
+	CRYPT_E_ASN1_ERROR                                                        Handle        = 0x80093100
+	CRYPT_E_ASN1_INTERNAL                                                     Handle        = 0x80093101
+	CRYPT_E_ASN1_EOD                                                          Handle        = 0x80093102
+	CRYPT_E_ASN1_CORRUPT                                                      Handle        = 0x80093103
+	CRYPT_E_ASN1_LARGE                                                        Handle        = 0x80093104
+	CRYPT_E_ASN1_CONSTRAINT                                                   Handle        = 0x80093105
+	CRYPT_E_ASN1_MEMORY                                                       Handle        = 0x80093106
+	CRYPT_E_ASN1_OVERFLOW                                                     Handle        = 0x80093107
+	CRYPT_E_ASN1_BADPDU                                                       Handle        = 0x80093108
+	CRYPT_E_ASN1_BADARGS                                                      Handle        = 0x80093109
+	CRYPT_E_ASN1_BADREAL                                                      Handle        = 0x8009310A
+	CRYPT_E_ASN1_BADTAG                                                       Handle        = 0x8009310B
+	CRYPT_E_ASN1_CHOICE                                                       Handle        = 0x8009310C
+	CRYPT_E_ASN1_RULE                                                         Handle        = 0x8009310D
+	CRYPT_E_ASN1_UTF8                                                         Handle        = 0x8009310E
+	CRYPT_E_ASN1_PDU_TYPE                                                     Handle        = 0x80093133
+	CRYPT_E_ASN1_NYI                                                          Handle        = 0x80093134
+	CRYPT_E_ASN1_EXTENDED                                                     Handle        = 0x80093201
+	CRYPT_E_ASN1_NOEOD                                                        Handle        = 0x80093202
+	CERTSRV_E_BAD_REQUESTSUBJECT                                              Handle        = 0x80094001
+	CERTSRV_E_NO_REQUEST                                                      Handle        = 0x80094002
+	CERTSRV_E_BAD_REQUESTSTATUS                                               Handle        = 0x80094003
+	CERTSRV_E_PROPERTY_EMPTY                                                  Handle        = 0x80094004
+	CERTSRV_E_INVALID_CA_CERTIFICATE                                          Handle        = 0x80094005
+	CERTSRV_E_SERVER_SUSPENDED                                                Handle        = 0x80094006
+	CERTSRV_E_ENCODING_LENGTH                                                 Handle        = 0x80094007
+	CERTSRV_E_ROLECONFLICT                                                    Handle        = 0x80094008
+	CERTSRV_E_RESTRICTEDOFFICER                                               Handle        = 0x80094009
+	CERTSRV_E_KEY_ARCHIVAL_NOT_CONFIGURED                                     Handle        = 0x8009400A
+	CERTSRV_E_NO_VALID_KRA                                                    Handle        = 0x8009400B
+	CERTSRV_E_BAD_REQUEST_KEY_ARCHIVAL                                        Handle        = 0x8009400C
+	CERTSRV_E_NO_CAADMIN_DEFINED                                              Handle        = 0x8009400D
+	CERTSRV_E_BAD_RENEWAL_CERT_ATTRIBUTE                                      Handle        = 0x8009400E
+	CERTSRV_E_NO_DB_SESSIONS                                                  Handle        = 0x8009400F
+	CERTSRV_E_ALIGNMENT_FAULT                                                 Handle        = 0x80094010
+	CERTSRV_E_ENROLL_DENIED                                                   Handle        = 0x80094011
+	CERTSRV_E_TEMPLATE_DENIED                                                 Handle        = 0x80094012
+	CERTSRV_E_DOWNLEVEL_DC_SSL_OR_UPGRADE                                     Handle        = 0x80094013
+	CERTSRV_E_ADMIN_DENIED_REQUEST                                            Handle        = 0x80094014
+	CERTSRV_E_NO_POLICY_SERVER                                                Handle        = 0x80094015
+	CERTSRV_E_WEAK_SIGNATURE_OR_KEY                                           Handle        = 0x80094016
+	CERTSRV_E_KEY_ATTESTATION_NOT_SUPPORTED                                   Handle        = 0x80094017
+	CERTSRV_E_ENCRYPTION_CERT_REQUIRED                                        Handle        = 0x80094018
+	CERTSRV_E_UNSUPPORTED_CERT_TYPE                                           Handle        = 0x80094800
+	CERTSRV_E_NO_CERT_TYPE                                                    Handle        = 0x80094801
+	CERTSRV_E_TEMPLATE_CONFLICT                                               Handle        = 0x80094802
+	CERTSRV_E_SUBJECT_ALT_NAME_REQUIRED                                       Handle        = 0x80094803
+	CERTSRV_E_ARCHIVED_KEY_REQUIRED                                           Handle        = 0x80094804
+	CERTSRV_E_SMIME_REQUIRED                                                  Handle        = 0x80094805
+	CERTSRV_E_BAD_RENEWAL_SUBJECT                                             Handle        = 0x80094806
+	CERTSRV_E_BAD_TEMPLATE_VERSION                                            Handle        = 0x80094807
+	CERTSRV_E_TEMPLATE_POLICY_REQUIRED                                        Handle        = 0x80094808
+	CERTSRV_E_SIGNATURE_POLICY_REQUIRED                                       Handle        = 0x80094809
+	CERTSRV_E_SIGNATURE_COUNT                                                 Handle        = 0x8009480A
+	CERTSRV_E_SIGNATURE_REJECTED                                              Handle        = 0x8009480B
+	CERTSRV_E_ISSUANCE_POLICY_REQUIRED                                        Handle        = 0x8009480C
+	CERTSRV_E_SUBJECT_UPN_REQUIRED                                            Handle        = 0x8009480D
+	CERTSRV_E_SUBJECT_DIRECTORY_GUID_REQUIRED                                 Handle        = 0x8009480E
+	CERTSRV_E_SUBJECT_DNS_REQUIRED                                            Handle        = 0x8009480F
+	CERTSRV_E_ARCHIVED_KEY_UNEXPECTED                                         Handle        = 0x80094810
+	CERTSRV_E_KEY_LENGTH                                                      Handle        = 0x80094811
+	CERTSRV_E_SUBJECT_EMAIL_REQUIRED                                          Handle        = 0x80094812
+	CERTSRV_E_UNKNOWN_CERT_TYPE                                               Handle        = 0x80094813
+	CERTSRV_E_CERT_TYPE_OVERLAP                                               Handle        = 0x80094814
+	CERTSRV_E_TOO_MANY_SIGNATURES                                             Handle        = 0x80094815
+	CERTSRV_E_RENEWAL_BAD_PUBLIC_KEY                                          Handle        = 0x80094816
+	CERTSRV_E_INVALID_EK                                                      Handle        = 0x80094817
+	CERTSRV_E_INVALID_IDBINDING                                               Handle        = 0x80094818
+	CERTSRV_E_INVALID_ATTESTATION                                             Handle        = 0x80094819
+	CERTSRV_E_KEY_ATTESTATION                                                 Handle        = 0x8009481A
+	CERTSRV_E_CORRUPT_KEY_ATTESTATION                                         Handle        = 0x8009481B
+	CERTSRV_E_EXPIRED_CHALLENGE                                               Handle        = 0x8009481C
+	CERTSRV_E_INVALID_RESPONSE                                                Handle        = 0x8009481D
+	CERTSRV_E_INVALID_REQUESTID                                               Handle        = 0x8009481E
+	CERTSRV_E_REQUEST_PRECERTIFICATE_MISMATCH                                 Handle        = 0x8009481F
+	CERTSRV_E_PENDING_CLIENT_RESPONSE                                         Handle        = 0x80094820
+	XENROLL_E_KEY_NOT_EXPORTABLE                                              Handle        = 0x80095000
+	XENROLL_E_CANNOT_ADD_ROOT_CERT                                            Handle        = 0x80095001
+	XENROLL_E_RESPONSE_KA_HASH_NOT_FOUND                                      Handle        = 0x80095002
+	XENROLL_E_RESPONSE_UNEXPECTED_KA_HASH                                     Handle        = 0x80095003
+	XENROLL_E_RESPONSE_KA_HASH_MISMATCH                                       Handle        = 0x80095004
+	XENROLL_E_KEYSPEC_SMIME_MISMATCH                                          Handle        = 0x80095005
+	TRUST_E_SYSTEM_ERROR                                                      Handle        = 0x80096001
+	TRUST_E_NO_SIGNER_CERT                                                    Handle        = 0x80096002
+	TRUST_E_COUNTER_SIGNER                                                    Handle        = 0x80096003
+	TRUST_E_CERT_SIGNATURE                                                    Handle        = 0x80096004
+	TRUST_E_TIME_STAMP                                                        Handle        = 0x80096005
+	TRUST_E_BAD_DIGEST                                                        Handle        = 0x80096010
+	TRUST_E_MALFORMED_SIGNATURE                                               Handle        = 0x80096011
+	TRUST_E_BASIC_CONSTRAINTS                                                 Handle        = 0x80096019
+	TRUST_E_FINANCIAL_CRITERIA                                                Handle        = 0x8009601E
+	MSSIPOTF_E_OUTOFMEMRANGE                                                  Handle        = 0x80097001
+	MSSIPOTF_E_CANTGETOBJECT                                                  Handle        = 0x80097002
+	MSSIPOTF_E_NOHEADTABLE                                                    Handle        = 0x80097003
+	MSSIPOTF_E_BAD_MAGICNUMBER                                                Handle        = 0x80097004
+	MSSIPOTF_E_BAD_OFFSET_TABLE                                               Handle        = 0x80097005
+	MSSIPOTF_E_TABLE_TAGORDER                                                 Handle        = 0x80097006
+	MSSIPOTF_E_TABLE_LONGWORD                                                 Handle        = 0x80097007
+	MSSIPOTF_E_BAD_FIRST_TABLE_PLACEMENT                                      Handle        = 0x80097008
+	MSSIPOTF_E_TABLES_OVERLAP                                                 Handle        = 0x80097009
+	MSSIPOTF_E_TABLE_PADBYTES                                                 Handle        = 0x8009700A
+	MSSIPOTF_E_FILETOOSMALL                                                   Handle        = 0x8009700B
+	MSSIPOTF_E_TABLE_CHECKSUM                                                 Handle        = 0x8009700C
+	MSSIPOTF_E_FILE_CHECKSUM                                                  Handle        = 0x8009700D
+	MSSIPOTF_E_FAILED_POLICY                                                  Handle        = 0x80097010
+	MSSIPOTF_E_FAILED_HINTS_CHECK                                             Handle        = 0x80097011
+	MSSIPOTF_E_NOT_OPENTYPE                                                   Handle        = 0x80097012
+	MSSIPOTF_E_FILE                                                           Handle        = 0x80097013
+	MSSIPOTF_E_CRYPT                                                          Handle        = 0x80097014
+	MSSIPOTF_E_BADVERSION                                                     Handle        = 0x80097015
+	MSSIPOTF_E_DSIG_STRUCTURE                                                 Handle        = 0x80097016
+	MSSIPOTF_E_PCONST_CHECK                                                   Handle        = 0x80097017
+	MSSIPOTF_E_STRUCTURE                                                      Handle        = 0x80097018
+	ERROR_CRED_REQUIRES_CONFIRMATION                                          Handle        = 0x80097019
+	NTE_OP_OK                                                                 syscall.Errno = 0
+	TRUST_E_PROVIDER_UNKNOWN                                                  Handle        = 0x800B0001
+	TRUST_E_ACTION_UNKNOWN                                                    Handle        = 0x800B0002
+	TRUST_E_SUBJECT_FORM_UNKNOWN                                              Handle        = 0x800B0003
+	TRUST_E_SUBJECT_NOT_TRUSTED                                               Handle        = 0x800B0004
+	DIGSIG_E_ENCODE                                                           Handle        = 0x800B0005
+	DIGSIG_E_DECODE                                                           Handle        = 0x800B0006
+	DIGSIG_E_EXTENSIBILITY                                                    Handle        = 0x800B0007
+	DIGSIG_E_CRYPTO                                                           Handle        = 0x800B0008
+	PERSIST_E_SIZEDEFINITE                                                    Handle        = 0x800B0009
+	PERSIST_E_SIZEINDEFINITE                                                  Handle        = 0x800B000A
+	PERSIST_E_NOTSELFSIZING                                                   Handle        = 0x800B000B
+	TRUST_E_NOSIGNATURE                                                       Handle        = 0x800B0100
+	CERT_E_EXPIRED                                                            Handle        = 0x800B0101
+	CERT_E_VALIDITYPERIODNESTING                                              Handle        = 0x800B0102
+	CERT_E_ROLE                                                               Handle        = 0x800B0103
+	CERT_E_PATHLENCONST                                                       Handle        = 0x800B0104
+	CERT_E_CRITICAL                                                           Handle        = 0x800B0105
+	CERT_E_PURPOSE                                                            Handle        = 0x800B0106
+	CERT_E_ISSUERCHAINING                                                     Handle        = 0x800B0107
+	CERT_E_MALFORMED                                                          Handle        = 0x800B0108
+	CERT_E_UNTRUSTEDROOT                                                      Handle        = 0x800B0109
+	CERT_E_CHAINING                                                           Handle        = 0x800B010A
+	TRUST_E_FAIL                                                              Handle        = 0x800B010B
+	CERT_E_REVOKED                                                            Handle        = 0x800B010C
+	CERT_E_UNTRUSTEDTESTROOT                                                  Handle        = 0x800B010D
+	CERT_E_REVOCATION_FAILURE                                                 Handle        = 0x800B010E
+	CERT_E_CN_NO_MATCH                                                        Handle        = 0x800B010F
+	CERT_E_WRONG_USAGE                                                        Handle        = 0x800B0110
+	TRUST_E_EXPLICIT_DISTRUST                                                 Handle        = 0x800B0111
+	CERT_E_UNTRUSTEDCA                                                        Handle        = 0x800B0112
+	CERT_E_INVALID_POLICY                                                     Handle        = 0x800B0113
+	CERT_E_INVALID_NAME                                                       Handle        = 0x800B0114
+	SPAPI_E_EXPECTED_SECTION_NAME                                             Handle        = 0x800F0000
+	SPAPI_E_BAD_SECTION_NAME_LINE                                             Handle        = 0x800F0001
+	SPAPI_E_SECTION_NAME_TOO_LONG                                             Handle        = 0x800F0002
+	SPAPI_E_GENERAL_SYNTAX                                                    Handle        = 0x800F0003
+	SPAPI_E_WRONG_INF_STYLE                                                   Handle        = 0x800F0100
+	SPAPI_E_SECTION_NOT_FOUND                                                 Handle        = 0x800F0101
+	SPAPI_E_LINE_NOT_FOUND                                                    Handle        = 0x800F0102
+	SPAPI_E_NO_BACKUP                                                         Handle        = 0x800F0103
+	SPAPI_E_NO_ASSOCIATED_CLASS                                               Handle        = 0x800F0200
+	SPAPI_E_CLASS_MISMATCH                                                    Handle        = 0x800F0201
+	SPAPI_E_DUPLICATE_FOUND                                                   Handle        = 0x800F0202
+	SPAPI_E_NO_DRIVER_SELECTED                                                Handle        = 0x800F0203
+	SPAPI_E_KEY_DOES_NOT_EXIST                                                Handle        = 0x800F0204
+	SPAPI_E_INVALID_DEVINST_NAME                                              Handle        = 0x800F0205
+	SPAPI_E_INVALID_CLASS                                                     Handle        = 0x800F0206
+	SPAPI_E_DEVINST_ALREADY_EXISTS                                            Handle        = 0x800F0207
+	SPAPI_E_DEVINFO_NOT_REGISTERED                                            Handle        = 0x800F0208
+	SPAPI_E_INVALID_REG_PROPERTY                                              Handle        = 0x800F0209
+	SPAPI_E_NO_INF                                                            Handle        = 0x800F020A
+	SPAPI_E_NO_SUCH_DEVINST                                                   Handle        = 0x800F020B
+	SPAPI_E_CANT_LOAD_CLASS_ICON                                              Handle        = 0x800F020C
+	SPAPI_E_INVALID_CLASS_INSTALLER                                           Handle        = 0x800F020D
+	SPAPI_E_DI_DO_DEFAULT                                                     Handle        = 0x800F020E
+	SPAPI_E_DI_NOFILECOPY                                                     Handle        = 0x800F020F
+	SPAPI_E_INVALID_HWPROFILE                                                 Handle        = 0x800F0210
+	SPAPI_E_NO_DEVICE_SELECTED                                                Handle        = 0x800F0211
+	SPAPI_E_DEVINFO_LIST_LOCKED                                               Handle        = 0x800F0212
+	SPAPI_E_DEVINFO_DATA_LOCKED                                               Handle        = 0x800F0213
+	SPAPI_E_DI_BAD_PATH                                                       Handle        = 0x800F0214
+	SPAPI_E_NO_CLASSINSTALL_PARAMS                                            Handle        = 0x800F0215
+	SPAPI_E_FILEQUEUE_LOCKED                                                  Handle        = 0x800F0216
+	SPAPI_E_BAD_SERVICE_INSTALLSECT                                           Handle        = 0x800F0217
+	SPAPI_E_NO_CLASS_DRIVER_LIST                                              Handle        = 0x800F0218
+	SPAPI_E_NO_ASSOCIATED_SERVICE                                             Handle        = 0x800F0219
+	SPAPI_E_NO_DEFAULT_DEVICE_INTERFACE                                       Handle        = 0x800F021A
+	SPAPI_E_DEVICE_INTERFACE_ACTIVE                                           Handle        = 0x800F021B
+	SPAPI_E_DEVICE_INTERFACE_REMOVED                                          Handle        = 0x800F021C
+	SPAPI_E_BAD_INTERFACE_INSTALLSECT                                         Handle        = 0x800F021D
+	SPAPI_E_NO_SUCH_INTERFACE_CLASS                                           Handle        = 0x800F021E
+	SPAPI_E_INVALID_REFERENCE_STRING                                          Handle        = 0x800F021F
+	SPAPI_E_INVALID_MACHINENAME                                               Handle        = 0x800F0220
+	SPAPI_E_REMOTE_COMM_FAILURE                                               Handle        = 0x800F0221
+	SPAPI_E_MACHINE_UNAVAILABLE                                               Handle        = 0x800F0222
+	SPAPI_E_NO_CONFIGMGR_SERVICES                                             Handle        = 0x800F0223
+	SPAPI_E_INVALID_PROPPAGE_PROVIDER                                         Handle        = 0x800F0224
+	SPAPI_E_NO_SUCH_DEVICE_INTERFACE                                          Handle        = 0x800F0225
+	SPAPI_E_DI_POSTPROCESSING_REQUIRED                                        Handle        = 0x800F0226
+	SPAPI_E_INVALID_COINSTALLER                                               Handle        = 0x800F0227
+	SPAPI_E_NO_COMPAT_DRIVERS                                                 Handle        = 0x800F0228
+	SPAPI_E_NO_DEVICE_ICON                                                    Handle        = 0x800F0229
+	SPAPI_E_INVALID_INF_LOGCONFIG                                             Handle        = 0x800F022A
+	SPAPI_E_DI_DONT_INSTALL                                                   Handle        = 0x800F022B
+	SPAPI_E_INVALID_FILTER_DRIVER                                             Handle        = 0x800F022C
+	SPAPI_E_NON_WINDOWS_NT_DRIVER                                             Handle        = 0x800F022D
+	SPAPI_E_NON_WINDOWS_DRIVER                                                Handle        = 0x800F022E
+	SPAPI_E_NO_CATALOG_FOR_OEM_INF                                            Handle        = 0x800F022F
+	SPAPI_E_DEVINSTALL_QUEUE_NONNATIVE                                        Handle        = 0x800F0230
+	SPAPI_E_NOT_DISABLEABLE                                                   Handle        = 0x800F0231
+	SPAPI_E_CANT_REMOVE_DEVINST                                               Handle        = 0x800F0232
+	SPAPI_E_INVALID_TARGET                                                    Handle        = 0x800F0233
+	SPAPI_E_DRIVER_NONNATIVE                                                  Handle        = 0x800F0234
+	SPAPI_E_IN_WOW64                                                          Handle        = 0x800F0235
+	SPAPI_E_SET_SYSTEM_RESTORE_POINT                                          Handle        = 0x800F0236
+	SPAPI_E_INCORRECTLY_COPIED_INF                                            Handle        = 0x800F0237
+	SPAPI_E_SCE_DISABLED                                                      Handle        = 0x800F0238
+	SPAPI_E_UNKNOWN_EXCEPTION                                                 Handle        = 0x800F0239
+	SPAPI_E_PNP_REGISTRY_ERROR                                                Handle        = 0x800F023A
+	SPAPI_E_REMOTE_REQUEST_UNSUPPORTED                                        Handle        = 0x800F023B
+	SPAPI_E_NOT_AN_INSTALLED_OEM_INF                                          Handle        = 0x800F023C
+	SPAPI_E_INF_IN_USE_BY_DEVICES                                             Handle        = 0x800F023D
+	SPAPI_E_DI_FUNCTION_OBSOLETE                                              Handle        = 0x800F023E
+	SPAPI_E_NO_AUTHENTICODE_CATALOG                                           Handle        = 0x800F023F
+	SPAPI_E_AUTHENTICODE_DISALLOWED                                           Handle        = 0x800F0240
+	SPAPI_E_AUTHENTICODE_TRUSTED_PUBLISHER                                    Handle        = 0x800F0241
+	SPAPI_E_AUTHENTICODE_TRUST_NOT_ESTABLISHED                                Handle        = 0x800F0242
+	SPAPI_E_AUTHENTICODE_PUBLISHER_NOT_TRUSTED                                Handle        = 0x800F0243
+	SPAPI_E_SIGNATURE_OSATTRIBUTE_MISMATCH                                    Handle        = 0x800F0244
+	SPAPI_E_ONLY_VALIDATE_VIA_AUTHENTICODE                                    Handle        = 0x800F0245
+	SPAPI_E_DEVICE_INSTALLER_NOT_READY                                        Handle        = 0x800F0246
+	SPAPI_E_DRIVER_STORE_ADD_FAILED                                           Handle        = 0x800F0247
+	SPAPI_E_DEVICE_INSTALL_BLOCKED                                            Handle        = 0x800F0248
+	SPAPI_E_DRIVER_INSTALL_BLOCKED                                            Handle        = 0x800F0249
+	SPAPI_E_WRONG_INF_TYPE                                                    Handle        = 0x800F024A
+	SPAPI_E_FILE_HASH_NOT_IN_CATALOG                                          Handle        = 0x800F024B
+	SPAPI_E_DRIVER_STORE_DELETE_FAILED                                        Handle        = 0x800F024C
+	SPAPI_E_UNRECOVERABLE_STACK_OVERFLOW                                      Handle        = 0x800F0300
+	SPAPI_E_ERROR_NOT_INSTALLED                                               Handle        = 0x800F1000
+	SCARD_S_SUCCESS                                                                         = S_OK
+	SCARD_F_INTERNAL_ERROR                                                    Handle        = 0x80100001
+	SCARD_E_CANCELLED                                                         Handle        = 0x80100002
+	SCARD_E_INVALID_HANDLE                                                    Handle        = 0x80100003
+	SCARD_E_INVALID_PARAMETER                                                 Handle        = 0x80100004
+	SCARD_E_INVALID_TARGET                                                    Handle        = 0x80100005
+	SCARD_E_NO_MEMORY                                                         Handle        = 0x80100006
+	SCARD_F_WAITED_TOO_LONG                                                   Handle        = 0x80100007
+	SCARD_E_INSUFFICIENT_BUFFER                                               Handle        = 0x80100008
+	SCARD_E_UNKNOWN_READER                                                    Handle        = 0x80100009
+	SCARD_E_TIMEOUT                                                           Handle        = 0x8010000A
+	SCARD_E_SHARING_VIOLATION                                                 Handle        = 0x8010000B
+	SCARD_E_NO_SMARTCARD                                                      Handle        = 0x8010000C
+	SCARD_E_UNKNOWN_CARD                                                      Handle        = 0x8010000D
+	SCARD_E_CANT_DISPOSE                                                      Handle        = 0x8010000E
+	SCARD_E_PROTO_MISMATCH                                                    Handle        = 0x8010000F
+	SCARD_E_NOT_READY                                                         Handle        = 0x80100010
+	SCARD_E_INVALID_VALUE                                                     Handle        = 0x80100011
+	SCARD_E_SYSTEM_CANCELLED                                                  Handle        = 0x80100012
+	SCARD_F_COMM_ERROR                                                        Handle        = 0x80100013
+	SCARD_F_UNKNOWN_ERROR                                                     Handle        = 0x80100014
+	SCARD_E_INVALID_ATR                                                       Handle        = 0x80100015
+	SCARD_E_NOT_TRANSACTED                                                    Handle        = 0x80100016
+	SCARD_E_READER_UNAVAILABLE                                                Handle        = 0x80100017
+	SCARD_P_SHUTDOWN                                                          Handle        = 0x80100018
+	SCARD_E_PCI_TOO_SMALL                                                     Handle        = 0x80100019
+	SCARD_E_READER_UNSUPPORTED                                                Handle        = 0x8010001A
+	SCARD_E_DUPLICATE_READER                                                  Handle        = 0x8010001B
+	SCARD_E_CARD_UNSUPPORTED                                                  Handle        = 0x8010001C
+	SCARD_E_NO_SERVICE                                                        Handle        = 0x8010001D
+	SCARD_E_SERVICE_STOPPED                                                   Handle        = 0x8010001E
+	SCARD_E_UNEXPECTED                                                        Handle        = 0x8010001F
+	SCARD_E_ICC_INSTALLATION                                                  Handle        = 0x80100020
+	SCARD_E_ICC_CREATEORDER                                                   Handle        = 0x80100021
+	SCARD_E_UNSUPPORTED_FEATURE                                               Handle        = 0x80100022
+	SCARD_E_DIR_NOT_FOUND                                                     Handle        = 0x80100023
+	SCARD_E_FILE_NOT_FOUND                                                    Handle        = 0x80100024
+	SCARD_E_NO_DIR                                                            Handle        = 0x80100025
+	SCARD_E_NO_FILE                                                           Handle        = 0x80100026
+	SCARD_E_NO_ACCESS                                                         Handle        = 0x80100027
+	SCARD_E_WRITE_TOO_MANY                                                    Handle        = 0x80100028
+	SCARD_E_BAD_SEEK                                                          Handle        = 0x80100029
+	SCARD_E_INVALID_CHV                                                       Handle        = 0x8010002A
+	SCARD_E_UNKNOWN_RES_MNG                                                   Handle        = 0x8010002B
+	SCARD_E_NO_SUCH_CERTIFICATE                                               Handle        = 0x8010002C
+	SCARD_E_CERTIFICATE_UNAVAILABLE                                           Handle        = 0x8010002D
+	SCARD_E_NO_READERS_AVAILABLE                                              Handle        = 0x8010002E
+	SCARD_E_COMM_DATA_LOST                                                    Handle        = 0x8010002F
+	SCARD_E_NO_KEY_CONTAINER                                                  Handle        = 0x80100030
+	SCARD_E_SERVER_TOO_BUSY                                                   Handle        = 0x80100031
+	SCARD_E_PIN_CACHE_EXPIRED                                                 Handle        = 0x80100032
+	SCARD_E_NO_PIN_CACHE                                                      Handle        = 0x80100033
+	SCARD_E_READ_ONLY_CARD                                                    Handle        = 0x80100034
+	SCARD_W_UNSUPPORTED_CARD                                                  Handle        = 0x80100065
+	SCARD_W_UNRESPONSIVE_CARD                                                 Handle        = 0x80100066
+	SCARD_W_UNPOWERED_CARD                                                    Handle        = 0x80100067
+	SCARD_W_RESET_CARD                                                        Handle        = 0x80100068
+	SCARD_W_REMOVED_CARD                                                      Handle        = 0x80100069
+	SCARD_W_SECURITY_VIOLATION                                                Handle        = 0x8010006A
+	SCARD_W_WRONG_CHV                                                         Handle        = 0x8010006B
+	SCARD_W_CHV_BLOCKED                                                       Handle        = 0x8010006C
+	SCARD_W_EOF                                                               Handle        = 0x8010006D
+	SCARD_W_CANCELLED_BY_USER                                                 Handle        = 0x8010006E
+	SCARD_W_CARD_NOT_AUTHENTICATED                                            Handle        = 0x8010006F
+	SCARD_W_CACHE_ITEM_NOT_FOUND                                              Handle        = 0x80100070
+	SCARD_W_CACHE_ITEM_STALE                                                  Handle        = 0x80100071
+	SCARD_W_CACHE_ITEM_TOO_BIG                                                Handle        = 0x80100072
+	COMADMIN_E_OBJECTERRORS                                                   Handle        = 0x80110401
+	COMADMIN_E_OBJECTINVALID                                                  Handle        = 0x80110402
+	COMADMIN_E_KEYMISSING                                                     Handle        = 0x80110403
+	COMADMIN_E_ALREADYINSTALLED                                               Handle        = 0x80110404
+	COMADMIN_E_APP_FILE_WRITEFAIL                                             Handle        = 0x80110407
+	COMADMIN_E_APP_FILE_READFAIL                                              Handle        = 0x80110408
+	COMADMIN_E_APP_FILE_VERSION                                               Handle        = 0x80110409
+	COMADMIN_E_BADPATH                                                        Handle        = 0x8011040A
+	COMADMIN_E_APPLICATIONEXISTS                                              Handle        = 0x8011040B
+	COMADMIN_E_ROLEEXISTS                                                     Handle        = 0x8011040C
+	COMADMIN_E_CANTCOPYFILE                                                   Handle        = 0x8011040D
+	COMADMIN_E_NOUSER                                                         Handle        = 0x8011040F
+	COMADMIN_E_INVALIDUSERIDS                                                 Handle        = 0x80110410
+	COMADMIN_E_NOREGISTRYCLSID                                                Handle        = 0x80110411
+	COMADMIN_E_BADREGISTRYPROGID                                              Handle        = 0x80110412
+	COMADMIN_E_AUTHENTICATIONLEVEL                                            Handle        = 0x80110413
+	COMADMIN_E_USERPASSWDNOTVALID                                             Handle        = 0x80110414
+	COMADMIN_E_CLSIDORIIDMISMATCH                                             Handle        = 0x80110418
+	COMADMIN_E_REMOTEINTERFACE                                                Handle        = 0x80110419
+	COMADMIN_E_DLLREGISTERSERVER                                              Handle        = 0x8011041A
+	COMADMIN_E_NOSERVERSHARE                                                  Handle        = 0x8011041B
+	COMADMIN_E_DLLLOADFAILED                                                  Handle        = 0x8011041D
+	COMADMIN_E_BADREGISTRYLIBID                                               Handle        = 0x8011041E
+	COMADMIN_E_APPDIRNOTFOUND                                                 Handle        = 0x8011041F
+	COMADMIN_E_REGISTRARFAILED                                                Handle        = 0x80110423
+	COMADMIN_E_COMPFILE_DOESNOTEXIST                                          Handle        = 0x80110424
+	COMADMIN_E_COMPFILE_LOADDLLFAIL                                           Handle        = 0x80110425
+	COMADMIN_E_COMPFILE_GETCLASSOBJ                                           Handle        = 0x80110426
+	COMADMIN_E_COMPFILE_CLASSNOTAVAIL                                         Handle        = 0x80110427
+	COMADMIN_E_COMPFILE_BADTLB                                                Handle        = 0x80110428
+	COMADMIN_E_COMPFILE_NOTINSTALLABLE                                        Handle        = 0x80110429
+	COMADMIN_E_NOTCHANGEABLE                                                  Handle        = 0x8011042A
+	COMADMIN_E_NOTDELETEABLE                                                  Handle        = 0x8011042B
+	COMADMIN_E_SESSION                                                        Handle        = 0x8011042C
+	COMADMIN_E_COMP_MOVE_LOCKED                                               Handle        = 0x8011042D
+	COMADMIN_E_COMP_MOVE_BAD_DEST                                             Handle        = 0x8011042E
+	COMADMIN_E_REGISTERTLB                                                    Handle        = 0x80110430
+	COMADMIN_E_SYSTEMAPP                                                      Handle        = 0x80110433
+	COMADMIN_E_COMPFILE_NOREGISTRAR                                           Handle        = 0x80110434
+	COMADMIN_E_COREQCOMPINSTALLED                                             Handle        = 0x80110435
+	COMADMIN_E_SERVICENOTINSTALLED                                            Handle        = 0x80110436
+	COMADMIN_E_PROPERTYSAVEFAILED                                             Handle        = 0x80110437
+	COMADMIN_E_OBJECTEXISTS                                                   Handle        = 0x80110438
+	COMADMIN_E_COMPONENTEXISTS                                                Handle        = 0x80110439
+	COMADMIN_E_REGFILE_CORRUPT                                                Handle        = 0x8011043B
+	COMADMIN_E_PROPERTY_OVERFLOW                                              Handle        = 0x8011043C
+	COMADMIN_E_NOTINREGISTRY                                                  Handle        = 0x8011043E
+	COMADMIN_E_OBJECTNOTPOOLABLE                                              Handle        = 0x8011043F
+	COMADMIN_E_APPLID_MATCHES_CLSID                                           Handle        = 0x80110446
+	COMADMIN_E_ROLE_DOES_NOT_EXIST                                            Handle        = 0x80110447
+	COMADMIN_E_START_APP_NEEDS_COMPONENTS                                     Handle        = 0x80110448
+	COMADMIN_E_REQUIRES_DIFFERENT_PLATFORM                                    Handle        = 0x80110449
+	COMADMIN_E_CAN_NOT_EXPORT_APP_PROXY                                       Handle        = 0x8011044A
+	COMADMIN_E_CAN_NOT_START_APP                                              Handle        = 0x8011044B
+	COMADMIN_E_CAN_NOT_EXPORT_SYS_APP                                         Handle        = 0x8011044C
+	COMADMIN_E_CANT_SUBSCRIBE_TO_COMPONENT                                    Handle        = 0x8011044D
+	COMADMIN_E_EVENTCLASS_CANT_BE_SUBSCRIBER                                  Handle        = 0x8011044E
+	COMADMIN_E_LIB_APP_PROXY_INCOMPATIBLE                                     Handle        = 0x8011044F
+	COMADMIN_E_BASE_PARTITION_ONLY                                            Handle        = 0x80110450
+	COMADMIN_E_START_APP_DISABLED                                             Handle        = 0x80110451
+	COMADMIN_E_CAT_DUPLICATE_PARTITION_NAME                                   Handle        = 0x80110457
+	COMADMIN_E_CAT_INVALID_PARTITION_NAME                                     Handle        = 0x80110458
+	COMADMIN_E_CAT_PARTITION_IN_USE                                           Handle        = 0x80110459
+	COMADMIN_E_FILE_PARTITION_DUPLICATE_FILES                                 Handle        = 0x8011045A
+	COMADMIN_E_CAT_IMPORTED_COMPONENTS_NOT_ALLOWED                            Handle        = 0x8011045B
+	COMADMIN_E_AMBIGUOUS_APPLICATION_NAME                                     Handle        = 0x8011045C
+	COMADMIN_E_AMBIGUOUS_PARTITION_NAME                                       Handle        = 0x8011045D
+	COMADMIN_E_REGDB_NOTINITIALIZED                                           Handle        = 0x80110472
+	COMADMIN_E_REGDB_NOTOPEN                                                  Handle        = 0x80110473
+	COMADMIN_E_REGDB_SYSTEMERR                                                Handle        = 0x80110474
+	COMADMIN_E_REGDB_ALREADYRUNNING                                           Handle        = 0x80110475
+	COMADMIN_E_MIG_VERSIONNOTSUPPORTED                                        Handle        = 0x80110480
+	COMADMIN_E_MIG_SCHEMANOTFOUND                                             Handle        = 0x80110481
+	COMADMIN_E_CAT_BITNESSMISMATCH                                            Handle        = 0x80110482
+	COMADMIN_E_CAT_UNACCEPTABLEBITNESS                                        Handle        = 0x80110483
+	COMADMIN_E_CAT_WRONGAPPBITNESS                                            Handle        = 0x80110484
+	COMADMIN_E_CAT_PAUSE_RESUME_NOT_SUPPORTED                                 Handle        = 0x80110485
+	COMADMIN_E_CAT_SERVERFAULT                                                Handle        = 0x80110486
+	COMQC_E_APPLICATION_NOT_QUEUED                                            Handle        = 0x80110600
+	COMQC_E_NO_QUEUEABLE_INTERFACES                                           Handle        = 0x80110601
+	COMQC_E_QUEUING_SERVICE_NOT_AVAILABLE                                     Handle        = 0x80110602
+	COMQC_E_NO_IPERSISTSTREAM                                                 Handle        = 0x80110603
+	COMQC_E_BAD_MESSAGE                                                       Handle        = 0x80110604
+	COMQC_E_UNAUTHENTICATED                                                   Handle        = 0x80110605
+	COMQC_E_UNTRUSTED_ENQUEUER                                                Handle        = 0x80110606
+	MSDTC_E_DUPLICATE_RESOURCE                                                Handle        = 0x80110701
+	COMADMIN_E_OBJECT_PARENT_MISSING                                          Handle        = 0x80110808
+	COMADMIN_E_OBJECT_DOES_NOT_EXIST                                          Handle        = 0x80110809
+	COMADMIN_E_APP_NOT_RUNNING                                                Handle        = 0x8011080A
+	COMADMIN_E_INVALID_PARTITION                                              Handle        = 0x8011080B
+	COMADMIN_E_SVCAPP_NOT_POOLABLE_OR_RECYCLABLE                              Handle        = 0x8011080D
+	COMADMIN_E_USER_IN_SET                                                    Handle        = 0x8011080E
+	COMADMIN_E_CANTRECYCLELIBRARYAPPS                                         Handle        = 0x8011080F
+	COMADMIN_E_CANTRECYCLESERVICEAPPS                                         Handle        = 0x80110811
+	COMADMIN_E_PROCESSALREADYRECYCLED                                         Handle        = 0x80110812
+	COMADMIN_E_PAUSEDPROCESSMAYNOTBERECYCLED                                  Handle        = 0x80110813
+	COMADMIN_E_CANTMAKEINPROCSERVICE                                          Handle        = 0x80110814
+	COMADMIN_E_PROGIDINUSEBYCLSID                                             Handle        = 0x80110815
+	COMADMIN_E_DEFAULT_PARTITION_NOT_IN_SET                                   Handle        = 0x80110816
+	COMADMIN_E_RECYCLEDPROCESSMAYNOTBEPAUSED                                  Handle        = 0x80110817
+	COMADMIN_E_PARTITION_ACCESSDENIED                                         Handle        = 0x80110818
+	COMADMIN_E_PARTITION_MSI_ONLY                                             Handle        = 0x80110819
+	COMADMIN_E_LEGACYCOMPS_NOT_ALLOWED_IN_1_0_FORMAT                          Handle        = 0x8011081A
+	COMADMIN_E_LEGACYCOMPS_NOT_ALLOWED_IN_NONBASE_PARTITIONS                  Handle        = 0x8011081B
+	COMADMIN_E_COMP_MOVE_SOURCE                                               Handle        = 0x8011081C
+	COMADMIN_E_COMP_MOVE_DEST                                                 Handle        = 0x8011081D
+	COMADMIN_E_COMP_MOVE_PRIVATE                                              Handle        = 0x8011081E
+	COMADMIN_E_BASEPARTITION_REQUIRED_IN_SET                                  Handle        = 0x8011081F
+	COMADMIN_E_CANNOT_ALIAS_EVENTCLASS                                        Handle        = 0x80110820
+	COMADMIN_E_PRIVATE_ACCESSDENIED                                           Handle        = 0x80110821
+	COMADMIN_E_SAFERINVALID                                                   Handle        = 0x80110822
+	COMADMIN_E_REGISTRY_ACCESSDENIED                                          Handle        = 0x80110823
+	COMADMIN_E_PARTITIONS_DISABLED                                            Handle        = 0x80110824
+	WER_S_REPORT_DEBUG                                                        Handle        = 0x001B0000
+	WER_S_REPORT_UPLOADED                                                     Handle        = 0x001B0001
+	WER_S_REPORT_QUEUED                                                       Handle        = 0x001B0002
+	WER_S_DISABLED                                                            Handle        = 0x001B0003
+	WER_S_SUSPENDED_UPLOAD                                                    Handle        = 0x001B0004
+	WER_S_DISABLED_QUEUE                                                      Handle        = 0x001B0005
+	WER_S_DISABLED_ARCHIVE                                                    Handle        = 0x001B0006
+	WER_S_REPORT_ASYNC                                                        Handle        = 0x001B0007
+	WER_S_IGNORE_ASSERT_INSTANCE                                              Handle        = 0x001B0008
+	WER_S_IGNORE_ALL_ASSERTS                                                  Handle        = 0x001B0009
+	WER_S_ASSERT_CONTINUE                                                     Handle        = 0x001B000A
+	WER_S_THROTTLED                                                           Handle        = 0x001B000B
+	WER_S_REPORT_UPLOADED_CAB                                                 Handle        = 0x001B000C
+	WER_E_CRASH_FAILURE                                                       Handle        = 0x801B8000
+	WER_E_CANCELED                                                            Handle        = 0x801B8001
+	WER_E_NETWORK_FAILURE                                                     Handle        = 0x801B8002
+	WER_E_NOT_INITIALIZED                                                     Handle        = 0x801B8003
+	WER_E_ALREADY_REPORTING                                                   Handle        = 0x801B8004
+	WER_E_DUMP_THROTTLED                                                      Handle        = 0x801B8005
+	WER_E_INSUFFICIENT_CONSENT                                                Handle        = 0x801B8006
+	WER_E_TOO_HEAVY                                                           Handle        = 0x801B8007
+	ERROR_FLT_IO_COMPLETE                                                     Handle        = 0x001F0001
+	ERROR_FLT_NO_HANDLER_DEFINED                                              Handle        = 0x801F0001
+	ERROR_FLT_CONTEXT_ALREADY_DEFINED                                         Handle        = 0x801F0002
+	ERROR_FLT_INVALID_ASYNCHRONOUS_REQUEST                                    Handle        = 0x801F0003
+	ERROR_FLT_DISALLOW_FAST_IO                                                Handle        = 0x801F0004
+	ERROR_FLT_INVALID_NAME_REQUEST                                            Handle        = 0x801F0005
+	ERROR_FLT_NOT_SAFE_TO_POST_OPERATION                                      Handle        = 0x801F0006
+	ERROR_FLT_NOT_INITIALIZED                                                 Handle        = 0x801F0007
+	ERROR_FLT_FILTER_NOT_READY                                                Handle        = 0x801F0008
+	ERROR_FLT_POST_OPERATION_CLEANUP                                          Handle        = 0x801F0009
+	ERROR_FLT_INTERNAL_ERROR                                                  Handle        = 0x801F000A
+	ERROR_FLT_DELETING_OBJECT                                                 Handle        = 0x801F000B
+	ERROR_FLT_MUST_BE_NONPAGED_POOL                                           Handle        = 0x801F000C
+	ERROR_FLT_DUPLICATE_ENTRY                                                 Handle        = 0x801F000D
+	ERROR_FLT_CBDQ_DISABLED                                                   Handle        = 0x801F000E
+	ERROR_FLT_DO_NOT_ATTACH                                                   Handle        = 0x801F000F
+	ERROR_FLT_DO_NOT_DETACH                                                   Handle        = 0x801F0010
+	ERROR_FLT_INSTANCE_ALTITUDE_COLLISION                                     Handle        = 0x801F0011
+	ERROR_FLT_INSTANCE_NAME_COLLISION                                         Handle        = 0x801F0012
+	ERROR_FLT_FILTER_NOT_FOUND                                                Handle        = 0x801F0013
+	ERROR_FLT_VOLUME_NOT_FOUND                                                Handle        = 0x801F0014
+	ERROR_FLT_INSTANCE_NOT_FOUND                                              Handle        = 0x801F0015
+	ERROR_FLT_CONTEXT_ALLOCATION_NOT_FOUND                                    Handle        = 0x801F0016
+	ERROR_FLT_INVALID_CONTEXT_REGISTRATION                                    Handle        = 0x801F0017
+	ERROR_FLT_NAME_CACHE_MISS                                                 Handle        = 0x801F0018
+	ERROR_FLT_NO_DEVICE_OBJECT                                                Handle        = 0x801F0019
+	ERROR_FLT_VOLUME_ALREADY_MOUNTED                                          Handle        = 0x801F001A
+	ERROR_FLT_ALREADY_ENLISTED                                                Handle        = 0x801F001B
+	ERROR_FLT_CONTEXT_ALREADY_LINKED                                          Handle        = 0x801F001C
+	ERROR_FLT_NO_WAITER_FOR_REPLY                                             Handle        = 0x801F0020
+	ERROR_FLT_REGISTRATION_BUSY                                               Handle        = 0x801F0023
+	ERROR_HUNG_DISPLAY_DRIVER_THREAD                                          Handle        = 0x80260001
+	DWM_E_COMPOSITIONDISABLED                                                 Handle        = 0x80263001
+	DWM_E_REMOTING_NOT_SUPPORTED                                              Handle        = 0x80263002
+	DWM_E_NO_REDIRECTION_SURFACE_AVAILABLE                                    Handle        = 0x80263003
+	DWM_E_NOT_QUEUING_PRESENTS                                                Handle        = 0x80263004
+	DWM_E_ADAPTER_NOT_FOUND                                                   Handle        = 0x80263005
+	DWM_S_GDI_REDIRECTION_SURFACE                                             Handle        = 0x00263005
+	DWM_E_TEXTURE_TOO_LARGE                                                   Handle        = 0x80263007
+	DWM_S_GDI_REDIRECTION_SURFACE_BLT_VIA_GDI                                 Handle        = 0x00263008
+	ERROR_MONITOR_NO_DESCRIPTOR                                               Handle        = 0x00261001
+	ERROR_MONITOR_UNKNOWN_DESCRIPTOR_FORMAT                                   Handle        = 0x00261002
+	ERROR_MONITOR_INVALID_DESCRIPTOR_CHECKSUM                                 Handle        = 0xC0261003
+	ERROR_MONITOR_INVALID_STANDARD_TIMING_BLOCK                               Handle        = 0xC0261004
+	ERROR_MONITOR_WMI_DATABLOCK_REGISTRATION_FAILED                           Handle        = 0xC0261005
+	ERROR_MONITOR_INVALID_SERIAL_NUMBER_MONDSC_BLOCK                          Handle        = 0xC0261006
+	ERROR_MONITOR_INVALID_USER_FRIENDLY_MONDSC_BLOCK                          Handle        = 0xC0261007
+	ERROR_MONITOR_NO_MORE_DESCRIPTOR_DATA                                     Handle        = 0xC0261008
+	ERROR_MONITOR_INVALID_DETAILED_TIMING_BLOCK                               Handle        = 0xC0261009
+	ERROR_MONITOR_INVALID_MANUFACTURE_DATE                                    Handle        = 0xC026100A
+	ERROR_GRAPHICS_NOT_EXCLUSIVE_MODE_OWNER                                   Handle        = 0xC0262000
+	ERROR_GRAPHICS_INSUFFICIENT_DMA_BUFFER                                    Handle        = 0xC0262001
+	ERROR_GRAPHICS_INVALID_DISPLAY_ADAPTER                                    Handle        = 0xC0262002
+	ERROR_GRAPHICS_ADAPTER_WAS_RESET                                          Handle        = 0xC0262003
+	ERROR_GRAPHICS_INVALID_DRIVER_MODEL                                       Handle        = 0xC0262004
+	ERROR_GRAPHICS_PRESENT_MODE_CHANGED                                       Handle        = 0xC0262005
+	ERROR_GRAPHICS_PRESENT_OCCLUDED                                           Handle        = 0xC0262006
+	ERROR_GRAPHICS_PRESENT_DENIED                                             Handle        = 0xC0262007
+	ERROR_GRAPHICS_CANNOTCOLORCONVERT                                         Handle        = 0xC0262008
+	ERROR_GRAPHICS_DRIVER_MISMATCH                                            Handle        = 0xC0262009
+	ERROR_GRAPHICS_PARTIAL_DATA_POPULATED                                     Handle        = 0x4026200A
+	ERROR_GRAPHICS_PRESENT_REDIRECTION_DISABLED                               Handle        = 0xC026200B
+	ERROR_GRAPHICS_PRESENT_UNOCCLUDED                                         Handle        = 0xC026200C
+	ERROR_GRAPHICS_WINDOWDC_NOT_AVAILABLE                                     Handle        = 0xC026200D
+	ERROR_GRAPHICS_WINDOWLESS_PRESENT_DISABLED                                Handle        = 0xC026200E
+	ERROR_GRAPHICS_PRESENT_INVALID_WINDOW                                     Handle        = 0xC026200F
+	ERROR_GRAPHICS_PRESENT_BUFFER_NOT_BOUND                                   Handle        = 0xC0262010
+	ERROR_GRAPHICS_VAIL_STATE_CHANGED                                         Handle        = 0xC0262011
+	ERROR_GRAPHICS_NO_VIDEO_MEMORY                                            Handle        = 0xC0262100
+	ERROR_GRAPHICS_CANT_LOCK_MEMORY                                           Handle        = 0xC0262101
+	ERROR_GRAPHICS_ALLOCATION_BUSY                                            Handle        = 0xC0262102
+	ERROR_GRAPHICS_TOO_MANY_REFERENCES                                        Handle        = 0xC0262103
+	ERROR_GRAPHICS_TRY_AGAIN_LATER                                            Handle        = 0xC0262104
+	ERROR_GRAPHICS_TRY_AGAIN_NOW                                              Handle        = 0xC0262105
+	ERROR_GRAPHICS_ALLOCATION_INVALID                                         Handle        = 0xC0262106
+	ERROR_GRAPHICS_UNSWIZZLING_APERTURE_UNAVAILABLE                           Handle        = 0xC0262107
+	ERROR_GRAPHICS_UNSWIZZLING_APERTURE_UNSUPPORTED                           Handle        = 0xC0262108
+	ERROR_GRAPHICS_CANT_EVICT_PINNED_ALLOCATION                               Handle        = 0xC0262109
+	ERROR_GRAPHICS_INVALID_ALLOCATION_USAGE                                   Handle        = 0xC0262110
+	ERROR_GRAPHICS_CANT_RENDER_LOCKED_ALLOCATION                              Handle        = 0xC0262111
+	ERROR_GRAPHICS_ALLOCATION_CLOSED                                          Handle        = 0xC0262112
+	ERROR_GRAPHICS_INVALID_ALLOCATION_INSTANCE                                Handle        = 0xC0262113
+	ERROR_GRAPHICS_INVALID_ALLOCATION_HANDLE                                  Handle        = 0xC0262114
+	ERROR_GRAPHICS_WRONG_ALLOCATION_DEVICE                                    Handle        = 0xC0262115
+	ERROR_GRAPHICS_ALLOCATION_CONTENT_LOST                                    Handle        = 0xC0262116
+	ERROR_GRAPHICS_GPU_EXCEPTION_ON_DEVICE                                    Handle        = 0xC0262200
+	ERROR_GRAPHICS_SKIP_ALLOCATION_PREPARATION                                Handle        = 0x40262201
+	ERROR_GRAPHICS_INVALID_VIDPN_TOPOLOGY                                     Handle        = 0xC0262300
+	ERROR_GRAPHICS_VIDPN_TOPOLOGY_NOT_SUPPORTED                               Handle        = 0xC0262301
+	ERROR_GRAPHICS_VIDPN_TOPOLOGY_CURRENTLY_NOT_SUPPORTED                     Handle        = 0xC0262302
+	ERROR_GRAPHICS_INVALID_VIDPN                                              Handle        = 0xC0262303
+	ERROR_GRAPHICS_INVALID_VIDEO_PRESENT_SOURCE                               Handle        = 0xC0262304
+	ERROR_GRAPHICS_INVALID_VIDEO_PRESENT_TARGET                               Handle        = 0xC0262305
+	ERROR_GRAPHICS_VIDPN_MODALITY_NOT_SUPPORTED                               Handle        = 0xC0262306
+	ERROR_GRAPHICS_MODE_NOT_PINNED                                            Handle        = 0x00262307
+	ERROR_GRAPHICS_INVALID_VIDPN_SOURCEMODESET                                Handle        = 0xC0262308
+	ERROR_GRAPHICS_INVALID_VIDPN_TARGETMODESET                                Handle        = 0xC0262309
+	ERROR_GRAPHICS_INVALID_FREQUENCY                                          Handle        = 0xC026230A
+	ERROR_GRAPHICS_INVALID_ACTIVE_REGION                                      Handle        = 0xC026230B
+	ERROR_GRAPHICS_INVALID_TOTAL_REGION                                       Handle        = 0xC026230C
+	ERROR_GRAPHICS_INVALID_VIDEO_PRESENT_SOURCE_MODE                          Handle        = 0xC0262310
+	ERROR_GRAPHICS_INVALID_VIDEO_PRESENT_TARGET_MODE                          Handle        = 0xC0262311
+	ERROR_GRAPHICS_PINNED_MODE_MUST_REMAIN_IN_SET                             Handle        = 0xC0262312
+	ERROR_GRAPHICS_PATH_ALREADY_IN_TOPOLOGY                                   Handle        = 0xC0262313
+	ERROR_GRAPHICS_MODE_ALREADY_IN_MODESET                                    Handle        = 0xC0262314
+	ERROR_GRAPHICS_INVALID_VIDEOPRESENTSOURCESET                              Handle        = 0xC0262315
+	ERROR_GRAPHICS_INVALID_VIDEOPRESENTTARGETSET                              Handle        = 0xC0262316
+	ERROR_GRAPHICS_SOURCE_ALREADY_IN_SET                                      Handle        = 0xC0262317
+	ERROR_GRAPHICS_TARGET_ALREADY_IN_SET                                      Handle        = 0xC0262318
+	ERROR_GRAPHICS_INVALID_VIDPN_PRESENT_PATH                                 Handle        = 0xC0262319
+	ERROR_GRAPHICS_NO_RECOMMENDED_VIDPN_TOPOLOGY                              Handle        = 0xC026231A
+	ERROR_GRAPHICS_INVALID_MONITOR_FREQUENCYRANGESET                          Handle        = 0xC026231B
+	ERROR_GRAPHICS_INVALID_MONITOR_FREQUENCYRANGE                             Handle        = 0xC026231C
+	ERROR_GRAPHICS_FREQUENCYRANGE_NOT_IN_SET                                  Handle        = 0xC026231D
+	ERROR_GRAPHICS_NO_PREFERRED_MODE                                          Handle        = 0x0026231E
+	ERROR_GRAPHICS_FREQUENCYRANGE_ALREADY_IN_SET                              Handle        = 0xC026231F
+	ERROR_GRAPHICS_STALE_MODESET                                              Handle        = 0xC0262320
+	ERROR_GRAPHICS_INVALID_MONITOR_SOURCEMODESET                              Handle        = 0xC0262321
+	ERROR_GRAPHICS_INVALID_MONITOR_SOURCE_MODE                                Handle        = 0xC0262322
+	ERROR_GRAPHICS_NO_RECOMMENDED_FUNCTIONAL_VIDPN                            Handle        = 0xC0262323
+	ERROR_GRAPHICS_MODE_ID_MUST_BE_UNIQUE                                     Handle        = 0xC0262324
+	ERROR_GRAPHICS_EMPTY_ADAPTER_MONITOR_MODE_SUPPORT_INTERSECTION            Handle        = 0xC0262325
+	ERROR_GRAPHICS_VIDEO_PRESENT_TARGETS_LESS_THAN_SOURCES                    Handle        = 0xC0262326
+	ERROR_GRAPHICS_PATH_NOT_IN_TOPOLOGY                                       Handle        = 0xC0262327
+	ERROR_GRAPHICS_ADAPTER_MUST_HAVE_AT_LEAST_ONE_SOURCE                      Handle        = 0xC0262328
+	ERROR_GRAPHICS_ADAPTER_MUST_HAVE_AT_LEAST_ONE_TARGET                      Handle        = 0xC0262329
+	ERROR_GRAPHICS_INVALID_MONITORDESCRIPTORSET                               Handle        = 0xC026232A
+	ERROR_GRAPHICS_INVALID_MONITORDESCRIPTOR                                  Handle        = 0xC026232B
+	ERROR_GRAPHICS_MONITORDESCRIPTOR_NOT_IN_SET                               Handle        = 0xC026232C
+	ERROR_GRAPHICS_MONITORDESCRIPTOR_ALREADY_IN_SET                           Handle        = 0xC026232D
+	ERROR_GRAPHICS_MONITORDESCRIPTOR_ID_MUST_BE_UNIQUE                        Handle        = 0xC026232E
+	ERROR_GRAPHICS_INVALID_VIDPN_TARGET_SUBSET_TYPE                           Handle        = 0xC026232F
+	ERROR_GRAPHICS_RESOURCES_NOT_RELATED                                      Handle        = 0xC0262330
+	ERROR_GRAPHICS_SOURCE_ID_MUST_BE_UNIQUE                                   Handle        = 0xC0262331
+	ERROR_GRAPHICS_TARGET_ID_MUST_BE_UNIQUE                                   Handle        = 0xC0262332
+	ERROR_GRAPHICS_NO_AVAILABLE_VIDPN_TARGET                                  Handle        = 0xC0262333
+	ERROR_GRAPHICS_MONITOR_COULD_NOT_BE_ASSOCIATED_WITH_ADAPTER               Handle        = 0xC0262334
+	ERROR_GRAPHICS_NO_VIDPNMGR                                                Handle        = 0xC0262335
+	ERROR_GRAPHICS_NO_ACTIVE_VIDPN                                            Handle        = 0xC0262336
+	ERROR_GRAPHICS_STALE_VIDPN_TOPOLOGY                                       Handle        = 0xC0262337
+	ERROR_GRAPHICS_MONITOR_NOT_CONNECTED                                      Handle        = 0xC0262338
+	ERROR_GRAPHICS_SOURCE_NOT_IN_TOPOLOGY                                     Handle        = 0xC0262339
+	ERROR_GRAPHICS_INVALID_PRIMARYSURFACE_SIZE                                Handle        = 0xC026233A
+	ERROR_GRAPHICS_INVALID_VISIBLEREGION_SIZE                                 Handle        = 0xC026233B
+	ERROR_GRAPHICS_INVALID_STRIDE                                             Handle        = 0xC026233C
+	ERROR_GRAPHICS_INVALID_PIXELFORMAT                                        Handle        = 0xC026233D
+	ERROR_GRAPHICS_INVALID_COLORBASIS                                         Handle        = 0xC026233E
+	ERROR_GRAPHICS_INVALID_PIXELVALUEACCESSMODE                               Handle        = 0xC026233F
+	ERROR_GRAPHICS_TARGET_NOT_IN_TOPOLOGY                                     Handle        = 0xC0262340
+	ERROR_GRAPHICS_NO_DISPLAY_MODE_MANAGEMENT_SUPPORT                         Handle        = 0xC0262341
+	ERROR_GRAPHICS_VIDPN_SOURCE_IN_USE                                        Handle        = 0xC0262342
+	ERROR_GRAPHICS_CANT_ACCESS_ACTIVE_VIDPN                                   Handle        = 0xC0262343
+	ERROR_GRAPHICS_INVALID_PATH_IMPORTANCE_ORDINAL                            Handle        = 0xC0262344
+	ERROR_GRAPHICS_INVALID_PATH_CONTENT_GEOMETRY_TRANSFORMATION               Handle        = 0xC0262345
+	ERROR_GRAPHICS_PATH_CONTENT_GEOMETRY_TRANSFORMATION_NOT_SUPPORTED         Handle        = 0xC0262346
+	ERROR_GRAPHICS_INVALID_GAMMA_RAMP                                         Handle        = 0xC0262347
+	ERROR_GRAPHICS_GAMMA_RAMP_NOT_SUPPORTED                                   Handle        = 0xC0262348
+	ERROR_GRAPHICS_MULTISAMPLING_NOT_SUPPORTED                                Handle        = 0xC0262349
+	ERROR_GRAPHICS_MODE_NOT_IN_MODESET                                        Handle        = 0xC026234A
+	ERROR_GRAPHICS_DATASET_IS_EMPTY                                           Handle        = 0x0026234B
+	ERROR_GRAPHICS_NO_MORE_ELEMENTS_IN_DATASET                                Handle        = 0x0026234C
+	ERROR_GRAPHICS_INVALID_VIDPN_TOPOLOGY_RECOMMENDATION_REASON               Handle        = 0xC026234D
+	ERROR_GRAPHICS_INVALID_PATH_CONTENT_TYPE                                  Handle        = 0xC026234E
+	ERROR_GRAPHICS_INVALID_COPYPROTECTION_TYPE                                Handle        = 0xC026234F
+	ERROR_GRAPHICS_UNASSIGNED_MODESET_ALREADY_EXISTS                          Handle        = 0xC0262350
+	ERROR_GRAPHICS_PATH_CONTENT_GEOMETRY_TRANSFORMATION_NOT_PINNED            Handle        = 0x00262351
+	ERROR_GRAPHICS_INVALID_SCANLINE_ORDERING                                  Handle        = 0xC0262352
+	ERROR_GRAPHICS_TOPOLOGY_CHANGES_NOT_ALLOWED                               Handle        = 0xC0262353
+	ERROR_GRAPHICS_NO_AVAILABLE_IMPORTANCE_ORDINALS                           Handle        = 0xC0262354
+	ERROR_GRAPHICS_INCOMPATIBLE_PRIVATE_FORMAT                                Handle        = 0xC0262355
+	ERROR_GRAPHICS_INVALID_MODE_PRUNING_ALGORITHM                             Handle        = 0xC0262356
+	ERROR_GRAPHICS_INVALID_MONITOR_CAPABILITY_ORIGIN                          Handle        = 0xC0262357
+	ERROR_GRAPHICS_INVALID_MONITOR_FREQUENCYRANGE_CONSTRAINT                  Handle        = 0xC0262358
+	ERROR_GRAPHICS_MAX_NUM_PATHS_REACHED                                      Handle        = 0xC0262359
+	ERROR_GRAPHICS_CANCEL_VIDPN_TOPOLOGY_AUGMENTATION                         Handle        = 0xC026235A
+	ERROR_GRAPHICS_INVALID_CLIENT_TYPE                                        Handle        = 0xC026235B
+	ERROR_GRAPHICS_CLIENTVIDPN_NOT_SET                                        Handle        = 0xC026235C
+	ERROR_GRAPHICS_SPECIFIED_CHILD_ALREADY_CONNECTED                          Handle        = 0xC0262400
+	ERROR_GRAPHICS_CHILD_DESCRIPTOR_NOT_SUPPORTED                             Handle        = 0xC0262401
+	ERROR_GRAPHICS_UNKNOWN_CHILD_STATUS                                       Handle        = 0x4026242F
+	ERROR_GRAPHICS_NOT_A_LINKED_ADAPTER                                       Handle        = 0xC0262430
+	ERROR_GRAPHICS_LEADLINK_NOT_ENUMERATED                                    Handle        = 0xC0262431
+	ERROR_GRAPHICS_CHAINLINKS_NOT_ENUMERATED                                  Handle        = 0xC0262432
+	ERROR_GRAPHICS_ADAPTER_CHAIN_NOT_READY                                    Handle        = 0xC0262433
+	ERROR_GRAPHICS_CHAINLINKS_NOT_STARTED                                     Handle        = 0xC0262434
+	ERROR_GRAPHICS_CHAINLINKS_NOT_POWERED_ON                                  Handle        = 0xC0262435
+	ERROR_GRAPHICS_INCONSISTENT_DEVICE_LINK_STATE                             Handle        = 0xC0262436
+	ERROR_GRAPHICS_LEADLINK_START_DEFERRED                                    Handle        = 0x40262437
+	ERROR_GRAPHICS_NOT_POST_DEVICE_DRIVER                                     Handle        = 0xC0262438
+	ERROR_GRAPHICS_POLLING_TOO_FREQUENTLY                                     Handle        = 0x40262439
+	ERROR_GRAPHICS_START_DEFERRED                                             Handle        = 0x4026243A
+	ERROR_GRAPHICS_ADAPTER_ACCESS_NOT_EXCLUDED                                Handle        = 0xC026243B
+	ERROR_GRAPHICS_DEPENDABLE_CHILD_STATUS                                    Handle        = 0x4026243C
+	ERROR_GRAPHICS_OPM_NOT_SUPPORTED                                          Handle        = 0xC0262500
+	ERROR_GRAPHICS_COPP_NOT_SUPPORTED                                         Handle        = 0xC0262501
+	ERROR_GRAPHICS_UAB_NOT_SUPPORTED                                          Handle        = 0xC0262502
+	ERROR_GRAPHICS_OPM_INVALID_ENCRYPTED_PARAMETERS                           Handle        = 0xC0262503
+	ERROR_GRAPHICS_OPM_NO_VIDEO_OUTPUTS_EXIST                                 Handle        = 0xC0262505
+	ERROR_GRAPHICS_OPM_INTERNAL_ERROR                                         Handle        = 0xC026250B
+	ERROR_GRAPHICS_OPM_INVALID_HANDLE                                         Handle        = 0xC026250C
+	ERROR_GRAPHICS_PVP_INVALID_CERTIFICATE_LENGTH                             Handle        = 0xC026250E
+	ERROR_GRAPHICS_OPM_SPANNING_MODE_ENABLED                                  Handle        = 0xC026250F
+	ERROR_GRAPHICS_OPM_THEATER_MODE_ENABLED                                   Handle        = 0xC0262510
+	ERROR_GRAPHICS_PVP_HFS_FAILED                                             Handle        = 0xC0262511
+	ERROR_GRAPHICS_OPM_INVALID_SRM                                            Handle        = 0xC0262512
+	ERROR_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_HDCP                           Handle        = 0xC0262513
+	ERROR_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_ACP                            Handle        = 0xC0262514
+	ERROR_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_CGMSA                          Handle        = 0xC0262515
+	ERROR_GRAPHICS_OPM_HDCP_SRM_NEVER_SET                                     Handle        = 0xC0262516
+	ERROR_GRAPHICS_OPM_RESOLUTION_TOO_HIGH                                    Handle        = 0xC0262517
+	ERROR_GRAPHICS_OPM_ALL_HDCP_HARDWARE_ALREADY_IN_USE                       Handle        = 0xC0262518
+	ERROR_GRAPHICS_OPM_VIDEO_OUTPUT_NO_LONGER_EXISTS                          Handle        = 0xC026251A
+	ERROR_GRAPHICS_OPM_SESSION_TYPE_CHANGE_IN_PROGRESS                        Handle        = 0xC026251B
+	ERROR_GRAPHICS_OPM_VIDEO_OUTPUT_DOES_NOT_HAVE_COPP_SEMANTICS              Handle        = 0xC026251C
+	ERROR_GRAPHICS_OPM_INVALID_INFORMATION_REQUEST                            Handle        = 0xC026251D
+	ERROR_GRAPHICS_OPM_DRIVER_INTERNAL_ERROR                                  Handle        = 0xC026251E
+	ERROR_GRAPHICS_OPM_VIDEO_OUTPUT_DOES_NOT_HAVE_OPM_SEMANTICS               Handle        = 0xC026251F
+	ERROR_GRAPHICS_OPM_SIGNALING_NOT_SUPPORTED                                Handle        = 0xC0262520
+	ERROR_GRAPHICS_OPM_INVALID_CONFIGURATION_REQUEST                          Handle        = 0xC0262521
+	ERROR_GRAPHICS_I2C_NOT_SUPPORTED                                          Handle        = 0xC0262580
+	ERROR_GRAPHICS_I2C_DEVICE_DOES_NOT_EXIST                                  Handle        = 0xC0262581
+	ERROR_GRAPHICS_I2C_ERROR_TRANSMITTING_DATA                                Handle        = 0xC0262582
+	ERROR_GRAPHICS_I2C_ERROR_RECEIVING_DATA                                   Handle        = 0xC0262583
+	ERROR_GRAPHICS_DDCCI_VCP_NOT_SUPPORTED                                    Handle        = 0xC0262584
+	ERROR_GRAPHICS_DDCCI_INVALID_DATA                                         Handle        = 0xC0262585
+	ERROR_GRAPHICS_DDCCI_MONITOR_RETURNED_INVALID_TIMING_STATUS_BYTE          Handle        = 0xC0262586
+	ERROR_GRAPHICS_MCA_INVALID_CAPABILITIES_STRING                            Handle        = 0xC0262587
+	ERROR_GRAPHICS_MCA_INTERNAL_ERROR                                         Handle        = 0xC0262588
+	ERROR_GRAPHICS_DDCCI_INVALID_MESSAGE_COMMAND                              Handle        = 0xC0262589
+	ERROR_GRAPHICS_DDCCI_INVALID_MESSAGE_LENGTH                               Handle        = 0xC026258A
+	ERROR_GRAPHICS_DDCCI_INVALID_MESSAGE_CHECKSUM                             Handle        = 0xC026258B
+	ERROR_GRAPHICS_INVALID_PHYSICAL_MONITOR_HANDLE                            Handle        = 0xC026258C
+	ERROR_GRAPHICS_MONITOR_NO_LONGER_EXISTS                                   Handle        = 0xC026258D
+	ERROR_GRAPHICS_DDCCI_CURRENT_CURRENT_VALUE_GREATER_THAN_MAXIMUM_VALUE     Handle        = 0xC02625D8
+	ERROR_GRAPHICS_MCA_INVALID_VCP_VERSION                                    Handle        = 0xC02625D9
+	ERROR_GRAPHICS_MCA_MONITOR_VIOLATES_MCCS_SPECIFICATION                    Handle        = 0xC02625DA
+	ERROR_GRAPHICS_MCA_MCCS_VERSION_MISMATCH                                  Handle        = 0xC02625DB
+	ERROR_GRAPHICS_MCA_UNSUPPORTED_MCCS_VERSION                               Handle        = 0xC02625DC
+	ERROR_GRAPHICS_MCA_INVALID_TECHNOLOGY_TYPE_RETURNED                       Handle        = 0xC02625DE
+	ERROR_GRAPHICS_MCA_UNSUPPORTED_COLOR_TEMPERATURE                          Handle        = 0xC02625DF
+	ERROR_GRAPHICS_ONLY_CONSOLE_SESSION_SUPPORTED                             Handle        = 0xC02625E0
+	ERROR_GRAPHICS_NO_DISPLAY_DEVICE_CORRESPONDS_TO_NAME                      Handle        = 0xC02625E1
+	ERROR_GRAPHICS_DISPLAY_DEVICE_NOT_ATTACHED_TO_DESKTOP                     Handle        = 0xC02625E2
+	ERROR_GRAPHICS_MIRRORING_DEVICES_NOT_SUPPORTED                            Handle        = 0xC02625E3
+	ERROR_GRAPHICS_INVALID_POINTER                                            Handle        = 0xC02625E4
+	ERROR_GRAPHICS_NO_MONITORS_CORRESPOND_TO_DISPLAY_DEVICE                   Handle        = 0xC02625E5
+	ERROR_GRAPHICS_PARAMETER_ARRAY_TOO_SMALL                                  Handle        = 0xC02625E6
+	ERROR_GRAPHICS_INTERNAL_ERROR                                             Handle        = 0xC02625E7
+	ERROR_GRAPHICS_SESSION_TYPE_CHANGE_IN_PROGRESS                            Handle        = 0xC02605E8
+	NAP_E_INVALID_PACKET                                                      Handle        = 0x80270001
+	NAP_E_MISSING_SOH                                                         Handle        = 0x80270002
+	NAP_E_CONFLICTING_ID                                                      Handle        = 0x80270003
+	NAP_E_NO_CACHED_SOH                                                       Handle        = 0x80270004
+	NAP_E_STILL_BOUND                                                         Handle        = 0x80270005
+	NAP_E_NOT_REGISTERED                                                      Handle        = 0x80270006
+	NAP_E_NOT_INITIALIZED                                                     Handle        = 0x80270007
+	NAP_E_MISMATCHED_ID                                                       Handle        = 0x80270008
+	NAP_E_NOT_PENDING                                                         Handle        = 0x80270009
+	NAP_E_ID_NOT_FOUND                                                        Handle        = 0x8027000A
+	NAP_E_MAXSIZE_TOO_SMALL                                                   Handle        = 0x8027000B
+	NAP_E_SERVICE_NOT_RUNNING                                                 Handle        = 0x8027000C
+	NAP_S_CERT_ALREADY_PRESENT                                                Handle        = 0x0027000D
+	NAP_E_ENTITY_DISABLED                                                     Handle        = 0x8027000E
+	NAP_E_NETSH_GROUPPOLICY_ERROR                                             Handle        = 0x8027000F
+	NAP_E_TOO_MANY_CALLS                                                      Handle        = 0x80270010
+	NAP_E_SHV_CONFIG_EXISTED                                                  Handle        = 0x80270011
+	NAP_E_SHV_CONFIG_NOT_FOUND                                                Handle        = 0x80270012
+	NAP_E_SHV_TIMEOUT                                                         Handle        = 0x80270013
+	TPM_E_ERROR_MASK                                                          Handle        = 0x80280000
+	TPM_E_AUTHFAIL                                                            Handle        = 0x80280001
+	TPM_E_BADINDEX                                                            Handle        = 0x80280002
+	TPM_E_BAD_PARAMETER                                                       Handle        = 0x80280003
+	TPM_E_AUDITFAILURE                                                        Handle        = 0x80280004
+	TPM_E_CLEAR_DISABLED                                                      Handle        = 0x80280005
+	TPM_E_DEACTIVATED                                                         Handle        = 0x80280006
+	TPM_E_DISABLED                                                            Handle        = 0x80280007
+	TPM_E_DISABLED_CMD                                                        Handle        = 0x80280008
+	TPM_E_FAIL                                                                Handle        = 0x80280009
+	TPM_E_BAD_ORDINAL                                                         Handle        = 0x8028000A
+	TPM_E_INSTALL_DISABLED                                                    Handle        = 0x8028000B
+	TPM_E_INVALID_KEYHANDLE                                                   Handle        = 0x8028000C
+	TPM_E_KEYNOTFOUND                                                         Handle        = 0x8028000D
+	TPM_E_INAPPROPRIATE_ENC                                                   Handle        = 0x8028000E
+	TPM_E_MIGRATEFAIL                                                         Handle        = 0x8028000F
+	TPM_E_INVALID_PCR_INFO                                                    Handle        = 0x80280010
+	TPM_E_NOSPACE                                                             Handle        = 0x80280011
+	TPM_E_NOSRK                                                               Handle        = 0x80280012
+	TPM_E_NOTSEALED_BLOB                                                      Handle        = 0x80280013
+	TPM_E_OWNER_SET                                                           Handle        = 0x80280014
+	TPM_E_RESOURCES                                                           Handle        = 0x80280015
+	TPM_E_SHORTRANDOM                                                         Handle        = 0x80280016
+	TPM_E_SIZE                                                                Handle        = 0x80280017
+	TPM_E_WRONGPCRVAL                                                         Handle        = 0x80280018
+	TPM_E_BAD_PARAM_SIZE                                                      Handle        = 0x80280019
+	TPM_E_SHA_THREAD                                                          Handle        = 0x8028001A
+	TPM_E_SHA_ERROR                                                           Handle        = 0x8028001B
+	TPM_E_FAILEDSELFTEST                                                      Handle        = 0x8028001C
+	TPM_E_AUTH2FAIL                                                           Handle        = 0x8028001D
+	TPM_E_BADTAG                                                              Handle        = 0x8028001E
+	TPM_E_IOERROR                                                             Handle        = 0x8028001F
+	TPM_E_ENCRYPT_ERROR                                                       Handle        = 0x80280020
+	TPM_E_DECRYPT_ERROR                                                       Handle        = 0x80280021
+	TPM_E_INVALID_AUTHHANDLE                                                  Handle        = 0x80280022
+	TPM_E_NO_ENDORSEMENT                                                      Handle        = 0x80280023
+	TPM_E_INVALID_KEYUSAGE                                                    Handle        = 0x80280024
+	TPM_E_WRONG_ENTITYTYPE                                                    Handle        = 0x80280025
+	TPM_E_INVALID_POSTINIT                                                    Handle        = 0x80280026
+	TPM_E_INAPPROPRIATE_SIG                                                   Handle        = 0x80280027
+	TPM_E_BAD_KEY_PROPERTY                                                    Handle        = 0x80280028
+	TPM_E_BAD_MIGRATION                                                       Handle        = 0x80280029
+	TPM_E_BAD_SCHEME                                                          Handle        = 0x8028002A
+	TPM_E_BAD_DATASIZE                                                        Handle        = 0x8028002B
+	TPM_E_BAD_MODE                                                            Handle        = 0x8028002C
+	TPM_E_BAD_PRESENCE                                                        Handle        = 0x8028002D
+	TPM_E_BAD_VERSION                                                         Handle        = 0x8028002E
+	TPM_E_NO_WRAP_TRANSPORT                                                   Handle        = 0x8028002F
+	TPM_E_AUDITFAIL_UNSUCCESSFUL                                              Handle        = 0x80280030
+	TPM_E_AUDITFAIL_SUCCESSFUL                                                Handle        = 0x80280031
+	TPM_E_NOTRESETABLE                                                        Handle        = 0x80280032
+	TPM_E_NOTLOCAL                                                            Handle        = 0x80280033
+	TPM_E_BAD_TYPE                                                            Handle        = 0x80280034
+	TPM_E_INVALID_RESOURCE                                                    Handle        = 0x80280035
+	TPM_E_NOTFIPS                                                             Handle        = 0x80280036
+	TPM_E_INVALID_FAMILY                                                      Handle        = 0x80280037
+	TPM_E_NO_NV_PERMISSION                                                    Handle        = 0x80280038
+	TPM_E_REQUIRES_SIGN                                                       Handle        = 0x80280039
+	TPM_E_KEY_NOTSUPPORTED                                                    Handle        = 0x8028003A
+	TPM_E_AUTH_CONFLICT                                                       Handle        = 0x8028003B
+	TPM_E_AREA_LOCKED                                                         Handle        = 0x8028003C
+	TPM_E_BAD_LOCALITY                                                        Handle        = 0x8028003D
+	TPM_E_READ_ONLY                                                           Handle        = 0x8028003E
+	TPM_E_PER_NOWRITE                                                         Handle        = 0x8028003F
+	TPM_E_FAMILYCOUNT                                                         Handle        = 0x80280040
+	TPM_E_WRITE_LOCKED                                                        Handle        = 0x80280041
+	TPM_E_BAD_ATTRIBUTES                                                      Handle        = 0x80280042
+	TPM_E_INVALID_STRUCTURE                                                   Handle        = 0x80280043
+	TPM_E_KEY_OWNER_CONTROL                                                   Handle        = 0x80280044
+	TPM_E_BAD_COUNTER                                                         Handle        = 0x80280045
+	TPM_E_NOT_FULLWRITE                                                       Handle        = 0x80280046
+	TPM_E_CONTEXT_GAP                                                         Handle        = 0x80280047
+	TPM_E_MAXNVWRITES                                                         Handle        = 0x80280048
+	TPM_E_NOOPERATOR                                                          Handle        = 0x80280049
+	TPM_E_RESOURCEMISSING                                                     Handle        = 0x8028004A
+	TPM_E_DELEGATE_LOCK                                                       Handle        = 0x8028004B
+	TPM_E_DELEGATE_FAMILY                                                     Handle        = 0x8028004C
+	TPM_E_DELEGATE_ADMIN                                                      Handle        = 0x8028004D
+	TPM_E_TRANSPORT_NOTEXCLUSIVE                                              Handle        = 0x8028004E
+	TPM_E_OWNER_CONTROL                                                       Handle        = 0x8028004F
+	TPM_E_DAA_RESOURCES                                                       Handle        = 0x80280050
+	TPM_E_DAA_INPUT_DATA0                                                     Handle        = 0x80280051
+	TPM_E_DAA_INPUT_DATA1                                                     Handle        = 0x80280052
+	TPM_E_DAA_ISSUER_SETTINGS                                                 Handle        = 0x80280053
+	TPM_E_DAA_TPM_SETTINGS                                                    Handle        = 0x80280054
+	TPM_E_DAA_STAGE                                                           Handle        = 0x80280055
+	TPM_E_DAA_ISSUER_VALIDITY                                                 Handle        = 0x80280056
+	TPM_E_DAA_WRONG_W                                                         Handle        = 0x80280057
+	TPM_E_BAD_HANDLE                                                          Handle        = 0x80280058
+	TPM_E_BAD_DELEGATE                                                        Handle        = 0x80280059
+	TPM_E_BADCONTEXT                                                          Handle        = 0x8028005A
+	TPM_E_TOOMANYCONTEXTS                                                     Handle        = 0x8028005B
+	TPM_E_MA_TICKET_SIGNATURE                                                 Handle        = 0x8028005C
+	TPM_E_MA_DESTINATION                                                      Handle        = 0x8028005D
+	TPM_E_MA_SOURCE                                                           Handle        = 0x8028005E
+	TPM_E_MA_AUTHORITY                                                        Handle        = 0x8028005F
+	TPM_E_PERMANENTEK                                                         Handle        = 0x80280061
+	TPM_E_BAD_SIGNATURE                                                       Handle        = 0x80280062
+	TPM_E_NOCONTEXTSPACE                                                      Handle        = 0x80280063
+	TPM_20_E_ASYMMETRIC                                                       Handle        = 0x80280081
+	TPM_20_E_ATTRIBUTES                                                       Handle        = 0x80280082
+	TPM_20_E_HASH                                                             Handle        = 0x80280083
+	TPM_20_E_VALUE                                                            Handle        = 0x80280084
+	TPM_20_E_HIERARCHY                                                        Handle        = 0x80280085
+	TPM_20_E_KEY_SIZE                                                         Handle        = 0x80280087
+	TPM_20_E_MGF                                                              Handle        = 0x80280088
+	TPM_20_E_MODE                                                             Handle        = 0x80280089
+	TPM_20_E_TYPE                                                             Handle        = 0x8028008A
+	TPM_20_E_HANDLE                                                           Handle        = 0x8028008B
+	TPM_20_E_KDF                                                              Handle        = 0x8028008C
+	TPM_20_E_RANGE                                                            Handle        = 0x8028008D
+	TPM_20_E_AUTH_FAIL                                                        Handle        = 0x8028008E
+	TPM_20_E_NONCE                                                            Handle        = 0x8028008F
+	TPM_20_E_PP                                                               Handle        = 0x80280090
+	TPM_20_E_SCHEME                                                           Handle        = 0x80280092
+	TPM_20_E_SIZE                                                             Handle        = 0x80280095
+	TPM_20_E_SYMMETRIC                                                        Handle        = 0x80280096
+	TPM_20_E_TAG                                                              Handle        = 0x80280097
+	TPM_20_E_SELECTOR                                                         Handle        = 0x80280098
+	TPM_20_E_INSUFFICIENT                                                     Handle        = 0x8028009A
+	TPM_20_E_SIGNATURE                                                        Handle        = 0x8028009B
+	TPM_20_E_KEY                                                              Handle        = 0x8028009C
+	TPM_20_E_POLICY_FAIL                                                      Handle        = 0x8028009D
+	TPM_20_E_INTEGRITY                                                        Handle        = 0x8028009F
+	TPM_20_E_TICKET                                                           Handle        = 0x802800A0
+	TPM_20_E_RESERVED_BITS                                                    Handle        = 0x802800A1
+	TPM_20_E_BAD_AUTH                                                         Handle        = 0x802800A2
+	TPM_20_E_EXPIRED                                                          Handle        = 0x802800A3
+	TPM_20_E_POLICY_CC                                                        Handle        = 0x802800A4
+	TPM_20_E_BINDING                                                          Handle        = 0x802800A5
+	TPM_20_E_CURVE                                                            Handle        = 0x802800A6
+	TPM_20_E_ECC_POINT                                                        Handle        = 0x802800A7
+	TPM_20_E_INITIALIZE                                                       Handle        = 0x80280100
+	TPM_20_E_FAILURE                                                          Handle        = 0x80280101
+	TPM_20_E_SEQUENCE                                                         Handle        = 0x80280103
+	TPM_20_E_PRIVATE                                                          Handle        = 0x8028010B
+	TPM_20_E_HMAC                                                             Handle        = 0x80280119
+	TPM_20_E_DISABLED                                                         Handle        = 0x80280120
+	TPM_20_E_EXCLUSIVE                                                        Handle        = 0x80280121
+	TPM_20_E_ECC_CURVE                                                        Handle        = 0x80280123
+	TPM_20_E_AUTH_TYPE                                                        Handle        = 0x80280124
+	TPM_20_E_AUTH_MISSING                                                     Handle        = 0x80280125
+	TPM_20_E_POLICY                                                           Handle        = 0x80280126
+	TPM_20_E_PCR                                                              Handle        = 0x80280127
+	TPM_20_E_PCR_CHANGED                                                      Handle        = 0x80280128
+	TPM_20_E_UPGRADE                                                          Handle        = 0x8028012D
+	TPM_20_E_TOO_MANY_CONTEXTS                                                Handle        = 0x8028012E
+	TPM_20_E_AUTH_UNAVAILABLE                                                 Handle        = 0x8028012F
+	TPM_20_E_REBOOT                                                           Handle        = 0x80280130
+	TPM_20_E_UNBALANCED                                                       Handle        = 0x80280131
+	TPM_20_E_COMMAND_SIZE                                                     Handle        = 0x80280142
+	TPM_20_E_COMMAND_CODE                                                     Handle        = 0x80280143
+	TPM_20_E_AUTHSIZE                                                         Handle        = 0x80280144
+	TPM_20_E_AUTH_CONTEXT                                                     Handle        = 0x80280145
+	TPM_20_E_NV_RANGE                                                         Handle        = 0x80280146
+	TPM_20_E_NV_SIZE                                                          Handle        = 0x80280147
+	TPM_20_E_NV_LOCKED                                                        Handle        = 0x80280148
+	TPM_20_E_NV_AUTHORIZATION                                                 Handle        = 0x80280149
+	TPM_20_E_NV_UNINITIALIZED                                                 Handle        = 0x8028014A
+	TPM_20_E_NV_SPACE                                                         Handle        = 0x8028014B
+	TPM_20_E_NV_DEFINED                                                       Handle        = 0x8028014C
+	TPM_20_E_BAD_CONTEXT                                                      Handle        = 0x80280150
+	TPM_20_E_CPHASH                                                           Handle        = 0x80280151
+	TPM_20_E_PARENT                                                           Handle        = 0x80280152
+	TPM_20_E_NEEDS_TEST                                                       Handle        = 0x80280153
+	TPM_20_E_NO_RESULT                                                        Handle        = 0x80280154
+	TPM_20_E_SENSITIVE                                                        Handle        = 0x80280155
+	TPM_E_COMMAND_BLOCKED                                                     Handle        = 0x80280400
+	TPM_E_INVALID_HANDLE                                                      Handle        = 0x80280401
+	TPM_E_DUPLICATE_VHANDLE                                                   Handle        = 0x80280402
+	TPM_E_EMBEDDED_COMMAND_BLOCKED                                            Handle        = 0x80280403
+	TPM_E_EMBEDDED_COMMAND_UNSUPPORTED                                        Handle        = 0x80280404
+	TPM_E_RETRY                                                               Handle        = 0x80280800
+	TPM_E_NEEDS_SELFTEST                                                      Handle        = 0x80280801
+	TPM_E_DOING_SELFTEST                                                      Handle        = 0x80280802
+	TPM_E_DEFEND_LOCK_RUNNING                                                 Handle        = 0x80280803
+	TPM_20_E_CONTEXT_GAP                                                      Handle        = 0x80280901
+	TPM_20_E_OBJECT_MEMORY                                                    Handle        = 0x80280902
+	TPM_20_E_SESSION_MEMORY                                                   Handle        = 0x80280903
+	TPM_20_E_MEMORY                                                           Handle        = 0x80280904
+	TPM_20_E_SESSION_HANDLES                                                  Handle        = 0x80280905
+	TPM_20_E_OBJECT_HANDLES                                                   Handle        = 0x80280906
+	TPM_20_E_LOCALITY                                                         Handle        = 0x80280907
+	TPM_20_E_YIELDED                                                          Handle        = 0x80280908
+	TPM_20_E_CANCELED                                                         Handle        = 0x80280909
+	TPM_20_E_TESTING                                                          Handle        = 0x8028090A
+	TPM_20_E_NV_RATE                                                          Handle        = 0x80280920
+	TPM_20_E_LOCKOUT                                                          Handle        = 0x80280921
+	TPM_20_E_RETRY                                                            Handle        = 0x80280922
+	TPM_20_E_NV_UNAVAILABLE                                                   Handle        = 0x80280923
+	TBS_E_INTERNAL_ERROR                                                      Handle        = 0x80284001
+	TBS_E_BAD_PARAMETER                                                       Handle        = 0x80284002
+	TBS_E_INVALID_OUTPUT_POINTER                                              Handle        = 0x80284003
+	TBS_E_INVALID_CONTEXT                                                     Handle        = 0x80284004
+	TBS_E_INSUFFICIENT_BUFFER                                                 Handle        = 0x80284005
+	TBS_E_IOERROR                                                             Handle        = 0x80284006
+	TBS_E_INVALID_CONTEXT_PARAM                                               Handle        = 0x80284007
+	TBS_E_SERVICE_NOT_RUNNING                                                 Handle        = 0x80284008
+	TBS_E_TOO_MANY_TBS_CONTEXTS                                               Handle        = 0x80284009
+	TBS_E_TOO_MANY_RESOURCES                                                  Handle        = 0x8028400A
+	TBS_E_SERVICE_START_PENDING                                               Handle        = 0x8028400B
+	TBS_E_PPI_NOT_SUPPORTED                                                   Handle        = 0x8028400C
+	TBS_E_COMMAND_CANCELED                                                    Handle        = 0x8028400D
+	TBS_E_BUFFER_TOO_LARGE                                                    Handle        = 0x8028400E
+	TBS_E_TPM_NOT_FOUND                                                       Handle        = 0x8028400F
+	TBS_E_SERVICE_DISABLED                                                    Handle        = 0x80284010
+	TBS_E_NO_EVENT_LOG                                                        Handle        = 0x80284011
+	TBS_E_ACCESS_DENIED                                                       Handle        = 0x80284012
+	TBS_E_PROVISIONING_NOT_ALLOWED                                            Handle        = 0x80284013
+	TBS_E_PPI_FUNCTION_UNSUPPORTED                                            Handle        = 0x80284014
+	TBS_E_OWNERAUTH_NOT_FOUND                                                 Handle        = 0x80284015
+	TBS_E_PROVISIONING_INCOMPLETE                                             Handle        = 0x80284016
+	TPMAPI_E_INVALID_STATE                                                    Handle        = 0x80290100
+	TPMAPI_E_NOT_ENOUGH_DATA                                                  Handle        = 0x80290101
+	TPMAPI_E_TOO_MUCH_DATA                                                    Handle        = 0x80290102
+	TPMAPI_E_INVALID_OUTPUT_POINTER                                           Handle        = 0x80290103
+	TPMAPI_E_INVALID_PARAMETER                                                Handle        = 0x80290104
+	TPMAPI_E_OUT_OF_MEMORY                                                    Handle        = 0x80290105
+	TPMAPI_E_BUFFER_TOO_SMALL                                                 Handle        = 0x80290106
+	TPMAPI_E_INTERNAL_ERROR                                                   Handle        = 0x80290107
+	TPMAPI_E_ACCESS_DENIED                                                    Handle        = 0x80290108
+	TPMAPI_E_AUTHORIZATION_FAILED                                             Handle        = 0x80290109
+	TPMAPI_E_INVALID_CONTEXT_HANDLE                                           Handle        = 0x8029010A
+	TPMAPI_E_TBS_COMMUNICATION_ERROR                                          Handle        = 0x8029010B
+	TPMAPI_E_TPM_COMMAND_ERROR                                                Handle        = 0x8029010C
+	TPMAPI_E_MESSAGE_TOO_LARGE                                                Handle        = 0x8029010D
+	TPMAPI_E_INVALID_ENCODING                                                 Handle        = 0x8029010E
+	TPMAPI_E_INVALID_KEY_SIZE                                                 Handle        = 0x8029010F
+	TPMAPI_E_ENCRYPTION_FAILED                                                Handle        = 0x80290110
+	TPMAPI_E_INVALID_KEY_PARAMS                                               Handle        = 0x80290111
+	TPMAPI_E_INVALID_MIGRATION_AUTHORIZATION_BLOB                             Handle        = 0x80290112
+	TPMAPI_E_INVALID_PCR_INDEX                                                Handle        = 0x80290113
+	TPMAPI_E_INVALID_DELEGATE_BLOB                                            Handle        = 0x80290114
+	TPMAPI_E_INVALID_CONTEXT_PARAMS                                           Handle        = 0x80290115
+	TPMAPI_E_INVALID_KEY_BLOB                                                 Handle        = 0x80290116
+	TPMAPI_E_INVALID_PCR_DATA                                                 Handle        = 0x80290117
+	TPMAPI_E_INVALID_OWNER_AUTH                                               Handle        = 0x80290118
+	TPMAPI_E_FIPS_RNG_CHECK_FAILED                                            Handle        = 0x80290119
+	TPMAPI_E_EMPTY_TCG_LOG                                                    Handle        = 0x8029011A
+	TPMAPI_E_INVALID_TCG_LOG_ENTRY                                            Handle        = 0x8029011B
+	TPMAPI_E_TCG_SEPARATOR_ABSENT                                             Handle        = 0x8029011C
+	TPMAPI_E_TCG_INVALID_DIGEST_ENTRY                                         Handle        = 0x8029011D
+	TPMAPI_E_POLICY_DENIES_OPERATION                                          Handle        = 0x8029011E
+	TPMAPI_E_NV_BITS_NOT_DEFINED                                              Handle        = 0x8029011F
+	TPMAPI_E_NV_BITS_NOT_READY                                                Handle        = 0x80290120
+	TPMAPI_E_SEALING_KEY_NOT_AVAILABLE                                        Handle        = 0x80290121
+	TPMAPI_E_NO_AUTHORIZATION_CHAIN_FOUND                                     Handle        = 0x80290122
+	TPMAPI_E_SVN_COUNTER_NOT_AVAILABLE                                        Handle        = 0x80290123
+	TPMAPI_E_OWNER_AUTH_NOT_NULL                                              Handle        = 0x80290124
+	TPMAPI_E_ENDORSEMENT_AUTH_NOT_NULL                                        Handle        = 0x80290125
+	TPMAPI_E_AUTHORIZATION_REVOKED                                            Handle        = 0x80290126
+	TPMAPI_E_MALFORMED_AUTHORIZATION_KEY                                      Handle        = 0x80290127
+	TPMAPI_E_AUTHORIZING_KEY_NOT_SUPPORTED                                    Handle        = 0x80290128
+	TPMAPI_E_INVALID_AUTHORIZATION_SIGNATURE                                  Handle        = 0x80290129
+	TPMAPI_E_MALFORMED_AUTHORIZATION_POLICY                                   Handle        = 0x8029012A
+	TPMAPI_E_MALFORMED_AUTHORIZATION_OTHER                                    Handle        = 0x8029012B
+	TPMAPI_E_SEALING_KEY_CHANGED                                              Handle        = 0x8029012C
+	TBSIMP_E_BUFFER_TOO_SMALL                                                 Handle        = 0x80290200
+	TBSIMP_E_CLEANUP_FAILED                                                   Handle        = 0x80290201
+	TBSIMP_E_INVALID_CONTEXT_HANDLE                                           Handle        = 0x80290202
+	TBSIMP_E_INVALID_CONTEXT_PARAM                                            Handle        = 0x80290203
+	TBSIMP_E_TPM_ERROR                                                        Handle        = 0x80290204
+	TBSIMP_E_HASH_BAD_KEY                                                     Handle        = 0x80290205
+	TBSIMP_E_DUPLICATE_VHANDLE                                                Handle        = 0x80290206
+	TBSIMP_E_INVALID_OUTPUT_POINTER                                           Handle        = 0x80290207
+	TBSIMP_E_INVALID_PARAMETER                                                Handle        = 0x80290208
+	TBSIMP_E_RPC_INIT_FAILED                                                  Handle        = 0x80290209
+	TBSIMP_E_SCHEDULER_NOT_RUNNING                                            Handle        = 0x8029020A
+	TBSIMP_E_COMMAND_CANCELED                                                 Handle        = 0x8029020B
+	TBSIMP_E_OUT_OF_MEMORY                                                    Handle        = 0x8029020C
+	TBSIMP_E_LIST_NO_MORE_ITEMS                                               Handle        = 0x8029020D
+	TBSIMP_E_LIST_NOT_FOUND                                                   Handle        = 0x8029020E
+	TBSIMP_E_NOT_ENOUGH_SPACE                                                 Handle        = 0x8029020F
+	TBSIMP_E_NOT_ENOUGH_TPM_CONTEXTS                                          Handle        = 0x80290210
+	TBSIMP_E_COMMAND_FAILED                                                   Handle        = 0x80290211
+	TBSIMP_E_UNKNOWN_ORDINAL                                                  Handle        = 0x80290212
+	TBSIMP_E_RESOURCE_EXPIRED                                                 Handle        = 0x80290213
+	TBSIMP_E_INVALID_RESOURCE                                                 Handle        = 0x80290214
+	TBSIMP_E_NOTHING_TO_UNLOAD                                                Handle        = 0x80290215
+	TBSIMP_E_HASH_TABLE_FULL                                                  Handle        = 0x80290216
+	TBSIMP_E_TOO_MANY_TBS_CONTEXTS                                            Handle        = 0x80290217
+	TBSIMP_E_TOO_MANY_RESOURCES                                               Handle        = 0x80290218
+	TBSIMP_E_PPI_NOT_SUPPORTED                                                Handle        = 0x80290219
+	TBSIMP_E_TPM_INCOMPATIBLE                                                 Handle        = 0x8029021A
+	TBSIMP_E_NO_EVENT_LOG                                                     Handle        = 0x8029021B
+	TPM_E_PPI_ACPI_FAILURE                                                    Handle        = 0x80290300
+	TPM_E_PPI_USER_ABORT                                                      Handle        = 0x80290301
+	TPM_E_PPI_BIOS_FAILURE                                                    Handle        = 0x80290302
+	TPM_E_PPI_NOT_SUPPORTED                                                   Handle        = 0x80290303
+	TPM_E_PPI_BLOCKED_IN_BIOS                                                 Handle        = 0x80290304
+	TPM_E_PCP_ERROR_MASK                                                      Handle        = 0x80290400
+	TPM_E_PCP_DEVICE_NOT_READY                                                Handle        = 0x80290401
+	TPM_E_PCP_INVALID_HANDLE                                                  Handle        = 0x80290402
+	TPM_E_PCP_INVALID_PARAMETER                                               Handle        = 0x80290403
+	TPM_E_PCP_FLAG_NOT_SUPPORTED                                              Handle        = 0x80290404
+	TPM_E_PCP_NOT_SUPPORTED                                                   Handle        = 0x80290405
+	TPM_E_PCP_BUFFER_TOO_SMALL                                                Handle        = 0x80290406
+	TPM_E_PCP_INTERNAL_ERROR                                                  Handle        = 0x80290407
+	TPM_E_PCP_AUTHENTICATION_FAILED                                           Handle        = 0x80290408
+	TPM_E_PCP_AUTHENTICATION_IGNORED                                          Handle        = 0x80290409
+	TPM_E_PCP_POLICY_NOT_FOUND                                                Handle        = 0x8029040A
+	TPM_E_PCP_PROFILE_NOT_FOUND                                               Handle        = 0x8029040B
+	TPM_E_PCP_VALIDATION_FAILED                                               Handle        = 0x8029040C
+	TPM_E_PCP_WRONG_PARENT                                                    Handle        = 0x8029040E
+	TPM_E_KEY_NOT_LOADED                                                      Handle        = 0x8029040F
+	TPM_E_NO_KEY_CERTIFICATION                                                Handle        = 0x80290410
+	TPM_E_KEY_NOT_FINALIZED                                                   Handle        = 0x80290411
+	TPM_E_ATTESTATION_CHALLENGE_NOT_SET                                       Handle        = 0x80290412
+	TPM_E_NOT_PCR_BOUND                                                       Handle        = 0x80290413
+	TPM_E_KEY_ALREADY_FINALIZED                                               Handle        = 0x80290414
+	TPM_E_KEY_USAGE_POLICY_NOT_SUPPORTED                                      Handle        = 0x80290415
+	TPM_E_KEY_USAGE_POLICY_INVALID                                            Handle        = 0x80290416
+	TPM_E_SOFT_KEY_ERROR                                                      Handle        = 0x80290417
+	TPM_E_KEY_NOT_AUTHENTICATED                                               Handle        = 0x80290418
+	TPM_E_PCP_KEY_NOT_AIK                                                     Handle        = 0x80290419
+	TPM_E_KEY_NOT_SIGNING_KEY                                                 Handle        = 0x8029041A
+	TPM_E_LOCKED_OUT                                                          Handle        = 0x8029041B
+	TPM_E_CLAIM_TYPE_NOT_SUPPORTED                                            Handle        = 0x8029041C
+	TPM_E_VERSION_NOT_SUPPORTED                                               Handle        = 0x8029041D
+	TPM_E_BUFFER_LENGTH_MISMATCH                                              Handle        = 0x8029041E
+	TPM_E_PCP_IFX_RSA_KEY_CREATION_BLOCKED                                    Handle        = 0x8029041F
+	TPM_E_PCP_TICKET_MISSING                                                  Handle        = 0x80290420
+	TPM_E_PCP_RAW_POLICY_NOT_SUPPORTED                                        Handle        = 0x80290421
+	TPM_E_PCP_KEY_HANDLE_INVALIDATED                                          Handle        = 0x80290422
+	TPM_E_PCP_UNSUPPORTED_PSS_SALT                                            Handle        = 0x40290423
+	TPM_E_ZERO_EXHAUST_ENABLED                                                Handle        = 0x80290500
+	PLA_E_DCS_NOT_FOUND                                                       Handle        = 0x80300002
+	PLA_E_DCS_IN_USE                                                          Handle        = 0x803000AA
+	PLA_E_TOO_MANY_FOLDERS                                                    Handle        = 0x80300045
+	PLA_E_NO_MIN_DISK                                                         Handle        = 0x80300070
+	PLA_E_DCS_ALREADY_EXISTS                                                  Handle        = 0x803000B7
+	PLA_S_PROPERTY_IGNORED                                                    Handle        = 0x00300100
+	PLA_E_PROPERTY_CONFLICT                                                   Handle        = 0x80300101
+	PLA_E_DCS_SINGLETON_REQUIRED                                              Handle        = 0x80300102
+	PLA_E_CREDENTIALS_REQUIRED                                                Handle        = 0x80300103
+	PLA_E_DCS_NOT_RUNNING                                                     Handle        = 0x80300104
+	PLA_E_CONFLICT_INCL_EXCL_API                                              Handle        = 0x80300105
+	PLA_E_NETWORK_EXE_NOT_VALID                                               Handle        = 0x80300106
+	PLA_E_EXE_ALREADY_CONFIGURED                                              Handle        = 0x80300107
+	PLA_E_EXE_PATH_NOT_VALID                                                  Handle        = 0x80300108
+	PLA_E_DC_ALREADY_EXISTS                                                   Handle        = 0x80300109
+	PLA_E_DCS_START_WAIT_TIMEOUT                                              Handle        = 0x8030010A
+	PLA_E_DC_START_WAIT_TIMEOUT                                               Handle        = 0x8030010B
+	PLA_E_REPORT_WAIT_TIMEOUT                                                 Handle        = 0x8030010C
+	PLA_E_NO_DUPLICATES                                                       Handle        = 0x8030010D
+	PLA_E_EXE_FULL_PATH_REQUIRED                                              Handle        = 0x8030010E
+	PLA_E_INVALID_SESSION_NAME                                                Handle        = 0x8030010F
+	PLA_E_PLA_CHANNEL_NOT_ENABLED                                             Handle        = 0x80300110
+	PLA_E_TASKSCHED_CHANNEL_NOT_ENABLED                                       Handle        = 0x80300111
+	PLA_E_RULES_MANAGER_FAILED                                                Handle        = 0x80300112
+	PLA_E_CABAPI_FAILURE                                                      Handle        = 0x80300113
+	FVE_E_LOCKED_VOLUME                                                       Handle        = 0x80310000
+	FVE_E_NOT_ENCRYPTED                                                       Handle        = 0x80310001
+	FVE_E_NO_TPM_BIOS                                                         Handle        = 0x80310002
+	FVE_E_NO_MBR_METRIC                                                       Handle        = 0x80310003
+	FVE_E_NO_BOOTSECTOR_METRIC                                                Handle        = 0x80310004
+	FVE_E_NO_BOOTMGR_METRIC                                                   Handle        = 0x80310005
+	FVE_E_WRONG_BOOTMGR                                                       Handle        = 0x80310006
+	FVE_E_SECURE_KEY_REQUIRED                                                 Handle        = 0x80310007
+	FVE_E_NOT_ACTIVATED                                                       Handle        = 0x80310008
+	FVE_E_ACTION_NOT_ALLOWED                                                  Handle        = 0x80310009
+	FVE_E_AD_SCHEMA_NOT_INSTALLED                                             Handle        = 0x8031000A
+	FVE_E_AD_INVALID_DATATYPE                                                 Handle        = 0x8031000B
+	FVE_E_AD_INVALID_DATASIZE                                                 Handle        = 0x8031000C
+	FVE_E_AD_NO_VALUES                                                        Handle        = 0x8031000D
+	FVE_E_AD_ATTR_NOT_SET                                                     Handle        = 0x8031000E
+	FVE_E_AD_GUID_NOT_FOUND                                                   Handle        = 0x8031000F
+	FVE_E_BAD_INFORMATION                                                     Handle        = 0x80310010
+	FVE_E_TOO_SMALL                                                           Handle        = 0x80310011
+	FVE_E_SYSTEM_VOLUME                                                       Handle        = 0x80310012
+	FVE_E_FAILED_WRONG_FS                                                     Handle        = 0x80310013
+	FVE_E_BAD_PARTITION_SIZE                                                  Handle        = 0x80310014
+	FVE_E_NOT_SUPPORTED                                                       Handle        = 0x80310015
+	FVE_E_BAD_DATA                                                            Handle        = 0x80310016
+	FVE_E_VOLUME_NOT_BOUND                                                    Handle        = 0x80310017
+	FVE_E_TPM_NOT_OWNED                                                       Handle        = 0x80310018
+	FVE_E_NOT_DATA_VOLUME                                                     Handle        = 0x80310019
+	FVE_E_AD_INSUFFICIENT_BUFFER                                              Handle        = 0x8031001A
+	FVE_E_CONV_READ                                                           Handle        = 0x8031001B
+	FVE_E_CONV_WRITE                                                          Handle        = 0x8031001C
+	FVE_E_KEY_REQUIRED                                                        Handle        = 0x8031001D
+	FVE_E_CLUSTERING_NOT_SUPPORTED                                            Handle        = 0x8031001E
+	FVE_E_VOLUME_BOUND_ALREADY                                                Handle        = 0x8031001F
+	FVE_E_OS_NOT_PROTECTED                                                    Handle        = 0x80310020
+	FVE_E_PROTECTION_DISABLED                                                 Handle        = 0x80310021
+	FVE_E_RECOVERY_KEY_REQUIRED                                               Handle        = 0x80310022
+	FVE_E_FOREIGN_VOLUME                                                      Handle        = 0x80310023
+	FVE_E_OVERLAPPED_UPDATE                                                   Handle        = 0x80310024
+	FVE_E_TPM_SRK_AUTH_NOT_ZERO                                               Handle        = 0x80310025
+	FVE_E_FAILED_SECTOR_SIZE                                                  Handle        = 0x80310026
+	FVE_E_FAILED_AUTHENTICATION                                               Handle        = 0x80310027
+	FVE_E_NOT_OS_VOLUME                                                       Handle        = 0x80310028
+	FVE_E_AUTOUNLOCK_ENABLED                                                  Handle        = 0x80310029
+	FVE_E_WRONG_BOOTSECTOR                                                    Handle        = 0x8031002A
+	FVE_E_WRONG_SYSTEM_FS                                                     Handle        = 0x8031002B
+	FVE_E_POLICY_PASSWORD_REQUIRED                                            Handle        = 0x8031002C
+	FVE_E_CANNOT_SET_FVEK_ENCRYPTED                                           Handle        = 0x8031002D
+	FVE_E_CANNOT_ENCRYPT_NO_KEY                                               Handle        = 0x8031002E
+	FVE_E_BOOTABLE_CDDVD                                                      Handle        = 0x80310030
+	FVE_E_PROTECTOR_EXISTS                                                    Handle        = 0x80310031
+	FVE_E_RELATIVE_PATH                                                       Handle        = 0x80310032
+	FVE_E_PROTECTOR_NOT_FOUND                                                 Handle        = 0x80310033
+	FVE_E_INVALID_KEY_FORMAT                                                  Handle        = 0x80310034
+	FVE_E_INVALID_PASSWORD_FORMAT                                             Handle        = 0x80310035
+	FVE_E_FIPS_RNG_CHECK_FAILED                                               Handle        = 0x80310036
+	FVE_E_FIPS_PREVENTS_RECOVERY_PASSWORD                                     Handle        = 0x80310037
+	FVE_E_FIPS_PREVENTS_EXTERNAL_KEY_EXPORT                                   Handle        = 0x80310038
+	FVE_E_NOT_DECRYPTED                                                       Handle        = 0x80310039
+	FVE_E_INVALID_PROTECTOR_TYPE                                              Handle        = 0x8031003A
+	FVE_E_NO_PROTECTORS_TO_TEST                                               Handle        = 0x8031003B
+	FVE_E_KEYFILE_NOT_FOUND                                                   Handle        = 0x8031003C
+	FVE_E_KEYFILE_INVALID                                                     Handle        = 0x8031003D
+	FVE_E_KEYFILE_NO_VMK                                                      Handle        = 0x8031003E
+	FVE_E_TPM_DISABLED                                                        Handle        = 0x8031003F
+	FVE_E_NOT_ALLOWED_IN_SAFE_MODE                                            Handle        = 0x80310040
+	FVE_E_TPM_INVALID_PCR                                                     Handle        = 0x80310041
+	FVE_E_TPM_NO_VMK                                                          Handle        = 0x80310042
+	FVE_E_PIN_INVALID                                                         Handle        = 0x80310043
+	FVE_E_AUTH_INVALID_APPLICATION                                            Handle        = 0x80310044
+	FVE_E_AUTH_INVALID_CONFIG                                                 Handle        = 0x80310045
+	FVE_E_FIPS_DISABLE_PROTECTION_NOT_ALLOWED                                 Handle        = 0x80310046
+	FVE_E_FS_NOT_EXTENDED                                                     Handle        = 0x80310047
+	FVE_E_FIRMWARE_TYPE_NOT_SUPPORTED                                         Handle        = 0x80310048
+	FVE_E_NO_LICENSE                                                          Handle        = 0x80310049
+	FVE_E_NOT_ON_STACK                                                        Handle        = 0x8031004A
+	FVE_E_FS_MOUNTED                                                          Handle        = 0x8031004B
+	FVE_E_TOKEN_NOT_IMPERSONATED                                              Handle        = 0x8031004C
+	FVE_E_DRY_RUN_FAILED                                                      Handle        = 0x8031004D
+	FVE_E_REBOOT_REQUIRED                                                     Handle        = 0x8031004E
+	FVE_E_DEBUGGER_ENABLED                                                    Handle        = 0x8031004F
+	FVE_E_RAW_ACCESS                                                          Handle        = 0x80310050
+	FVE_E_RAW_BLOCKED                                                         Handle        = 0x80310051
+	FVE_E_BCD_APPLICATIONS_PATH_INCORRECT                                     Handle        = 0x80310052
+	FVE_E_NOT_ALLOWED_IN_VERSION                                              Handle        = 0x80310053
+	FVE_E_NO_AUTOUNLOCK_MASTER_KEY                                            Handle        = 0x80310054
+	FVE_E_MOR_FAILED                                                          Handle        = 0x80310055
+	FVE_E_HIDDEN_VOLUME                                                       Handle        = 0x80310056
+	FVE_E_TRANSIENT_STATE                                                     Handle        = 0x80310057
+	FVE_E_PUBKEY_NOT_ALLOWED                                                  Handle        = 0x80310058
+	FVE_E_VOLUME_HANDLE_OPEN                                                  Handle        = 0x80310059
+	FVE_E_NO_FEATURE_LICENSE                                                  Handle        = 0x8031005A
+	FVE_E_INVALID_STARTUP_OPTIONS                                             Handle        = 0x8031005B
+	FVE_E_POLICY_RECOVERY_PASSWORD_NOT_ALLOWED                                Handle        = 0x8031005C
+	FVE_E_POLICY_RECOVERY_PASSWORD_REQUIRED                                   Handle        = 0x8031005D
+	FVE_E_POLICY_RECOVERY_KEY_NOT_ALLOWED                                     Handle        = 0x8031005E
+	FVE_E_POLICY_RECOVERY_KEY_REQUIRED                                        Handle        = 0x8031005F
+	FVE_E_POLICY_STARTUP_PIN_NOT_ALLOWED                                      Handle        = 0x80310060
+	FVE_E_POLICY_STARTUP_PIN_REQUIRED                                         Handle        = 0x80310061
+	FVE_E_POLICY_STARTUP_KEY_NOT_ALLOWED                                      Handle        = 0x80310062
+	FVE_E_POLICY_STARTUP_KEY_REQUIRED                                         Handle        = 0x80310063
+	FVE_E_POLICY_STARTUP_PIN_KEY_NOT_ALLOWED                                  Handle        = 0x80310064
+	FVE_E_POLICY_STARTUP_PIN_KEY_REQUIRED                                     Handle        = 0x80310065
+	FVE_E_POLICY_STARTUP_TPM_NOT_ALLOWED                                      Handle        = 0x80310066
+	FVE_E_POLICY_STARTUP_TPM_REQUIRED                                         Handle        = 0x80310067
+	FVE_E_POLICY_INVALID_PIN_LENGTH                                           Handle        = 0x80310068
+	FVE_E_KEY_PROTECTOR_NOT_SUPPORTED                                         Handle        = 0x80310069
+	FVE_E_POLICY_PASSPHRASE_NOT_ALLOWED                                       Handle        = 0x8031006A
+	FVE_E_POLICY_PASSPHRASE_REQUIRED                                          Handle        = 0x8031006B
+	FVE_E_FIPS_PREVENTS_PASSPHRASE                                            Handle        = 0x8031006C
+	FVE_E_OS_VOLUME_PASSPHRASE_NOT_ALLOWED                                    Handle        = 0x8031006D
+	FVE_E_INVALID_BITLOCKER_OID                                               Handle        = 0x8031006E
+	FVE_E_VOLUME_TOO_SMALL                                                    Handle        = 0x8031006F
+	FVE_E_DV_NOT_SUPPORTED_ON_FS                                              Handle        = 0x80310070
+	FVE_E_DV_NOT_ALLOWED_BY_GP                                                Handle        = 0x80310071
+	FVE_E_POLICY_USER_CERTIFICATE_NOT_ALLOWED                                 Handle        = 0x80310072
+	FVE_E_POLICY_USER_CERTIFICATE_REQUIRED                                    Handle        = 0x80310073
+	FVE_E_POLICY_USER_CERT_MUST_BE_HW                                         Handle        = 0x80310074
+	FVE_E_POLICY_USER_CONFIGURE_FDV_AUTOUNLOCK_NOT_ALLOWED                    Handle        = 0x80310075
+	FVE_E_POLICY_USER_CONFIGURE_RDV_AUTOUNLOCK_NOT_ALLOWED                    Handle        = 0x80310076
+	FVE_E_POLICY_USER_CONFIGURE_RDV_NOT_ALLOWED                               Handle        = 0x80310077
+	FVE_E_POLICY_USER_ENABLE_RDV_NOT_ALLOWED                                  Handle        = 0x80310078
+	FVE_E_POLICY_USER_DISABLE_RDV_NOT_ALLOWED                                 Handle        = 0x80310079
+	FVE_E_POLICY_INVALID_PASSPHRASE_LENGTH                                    Handle        = 0x80310080
+	FVE_E_POLICY_PASSPHRASE_TOO_SIMPLE                                        Handle        = 0x80310081
+	FVE_E_RECOVERY_PARTITION                                                  Handle        = 0x80310082
+	FVE_E_POLICY_CONFLICT_FDV_RK_OFF_AUK_ON                                   Handle        = 0x80310083
+	FVE_E_POLICY_CONFLICT_RDV_RK_OFF_AUK_ON                                   Handle        = 0x80310084
+	FVE_E_NON_BITLOCKER_OID                                                   Handle        = 0x80310085
+	FVE_E_POLICY_PROHIBITS_SELFSIGNED                                         Handle        = 0x80310086
+	FVE_E_POLICY_CONFLICT_RO_AND_STARTUP_KEY_REQUIRED                         Handle        = 0x80310087
+	FVE_E_CONV_RECOVERY_FAILED                                                Handle        = 0x80310088
+	FVE_E_VIRTUALIZED_SPACE_TOO_BIG                                           Handle        = 0x80310089
+	FVE_E_POLICY_CONFLICT_OSV_RP_OFF_ADB_ON                                   Handle        = 0x80310090
+	FVE_E_POLICY_CONFLICT_FDV_RP_OFF_ADB_ON                                   Handle        = 0x80310091
+	FVE_E_POLICY_CONFLICT_RDV_RP_OFF_ADB_ON                                   Handle        = 0x80310092
+	FVE_E_NON_BITLOCKER_KU                                                    Handle        = 0x80310093
+	FVE_E_PRIVATEKEY_AUTH_FAILED                                              Handle        = 0x80310094
+	FVE_E_REMOVAL_OF_DRA_FAILED                                               Handle        = 0x80310095
+	FVE_E_OPERATION_NOT_SUPPORTED_ON_VISTA_VOLUME                             Handle        = 0x80310096
+	FVE_E_CANT_LOCK_AUTOUNLOCK_ENABLED_VOLUME                                 Handle        = 0x80310097
+	FVE_E_FIPS_HASH_KDF_NOT_ALLOWED                                           Handle        = 0x80310098
+	FVE_E_ENH_PIN_INVALID                                                     Handle        = 0x80310099
+	FVE_E_INVALID_PIN_CHARS                                                   Handle        = 0x8031009A
+	FVE_E_INVALID_DATUM_TYPE                                                  Handle        = 0x8031009B
+	FVE_E_EFI_ONLY                                                            Handle        = 0x8031009C
+	FVE_E_MULTIPLE_NKP_CERTS                                                  Handle        = 0x8031009D
+	FVE_E_REMOVAL_OF_NKP_FAILED                                               Handle        = 0x8031009E
+	FVE_E_INVALID_NKP_CERT                                                    Handle        = 0x8031009F
+	FVE_E_NO_EXISTING_PIN                                                     Handle        = 0x803100A0
+	FVE_E_PROTECTOR_CHANGE_PIN_MISMATCH                                       Handle        = 0x803100A1
+	FVE_E_PIN_PROTECTOR_CHANGE_BY_STD_USER_DISALLOWED                         Handle        = 0x803100A2
+	FVE_E_PROTECTOR_CHANGE_MAX_PIN_CHANGE_ATTEMPTS_REACHED                    Handle        = 0x803100A3
+	FVE_E_POLICY_PASSPHRASE_REQUIRES_ASCII                                    Handle        = 0x803100A4
+	FVE_E_FULL_ENCRYPTION_NOT_ALLOWED_ON_TP_STORAGE                           Handle        = 0x803100A5
+	FVE_E_WIPE_NOT_ALLOWED_ON_TP_STORAGE                                      Handle        = 0x803100A6
+	FVE_E_KEY_LENGTH_NOT_SUPPORTED_BY_EDRIVE                                  Handle        = 0x803100A7
+	FVE_E_NO_EXISTING_PASSPHRASE                                              Handle        = 0x803100A8
+	FVE_E_PROTECTOR_CHANGE_PASSPHRASE_MISMATCH                                Handle        = 0x803100A9
+	FVE_E_PASSPHRASE_TOO_LONG                                                 Handle        = 0x803100AA
+	FVE_E_NO_PASSPHRASE_WITH_TPM                                              Handle        = 0x803100AB
+	FVE_E_NO_TPM_WITH_PASSPHRASE                                              Handle        = 0x803100AC
+	FVE_E_NOT_ALLOWED_ON_CSV_STACK                                            Handle        = 0x803100AD
+	FVE_E_NOT_ALLOWED_ON_CLUSTER                                              Handle        = 0x803100AE
+	FVE_E_EDRIVE_NO_FAILOVER_TO_SW                                            Handle        = 0x803100AF
+	FVE_E_EDRIVE_BAND_IN_USE                                                  Handle        = 0x803100B0
+	FVE_E_EDRIVE_DISALLOWED_BY_GP                                             Handle        = 0x803100B1
+	FVE_E_EDRIVE_INCOMPATIBLE_VOLUME                                          Handle        = 0x803100B2
+	FVE_E_NOT_ALLOWED_TO_UPGRADE_WHILE_CONVERTING                             Handle        = 0x803100B3
+	FVE_E_EDRIVE_DV_NOT_SUPPORTED                                             Handle        = 0x803100B4
+	FVE_E_NO_PREBOOT_KEYBOARD_DETECTED                                        Handle        = 0x803100B5
+	FVE_E_NO_PREBOOT_KEYBOARD_OR_WINRE_DETECTED                               Handle        = 0x803100B6
+	FVE_E_POLICY_REQUIRES_STARTUP_PIN_ON_TOUCH_DEVICE                         Handle        = 0x803100B7
+	FVE_E_POLICY_REQUIRES_RECOVERY_PASSWORD_ON_TOUCH_DEVICE                   Handle        = 0x803100B8
+	FVE_E_WIPE_CANCEL_NOT_APPLICABLE                                          Handle        = 0x803100B9
+	FVE_E_SECUREBOOT_DISABLED                                                 Handle        = 0x803100BA
+	FVE_E_SECUREBOOT_CONFIGURATION_INVALID                                    Handle        = 0x803100BB
+	FVE_E_EDRIVE_DRY_RUN_FAILED                                               Handle        = 0x803100BC
+	FVE_E_SHADOW_COPY_PRESENT                                                 Handle        = 0x803100BD
+	FVE_E_POLICY_INVALID_ENHANCED_BCD_SETTINGS                                Handle        = 0x803100BE
+	FVE_E_EDRIVE_INCOMPATIBLE_FIRMWARE                                        Handle        = 0x803100BF
+	FVE_E_PROTECTOR_CHANGE_MAX_PASSPHRASE_CHANGE_ATTEMPTS_REACHED             Handle        = 0x803100C0
+	FVE_E_PASSPHRASE_PROTECTOR_CHANGE_BY_STD_USER_DISALLOWED                  Handle        = 0x803100C1
+	FVE_E_LIVEID_ACCOUNT_SUSPENDED                                            Handle        = 0x803100C2
+	FVE_E_LIVEID_ACCOUNT_BLOCKED                                              Handle        = 0x803100C3
+	FVE_E_NOT_PROVISIONED_ON_ALL_VOLUMES                                      Handle        = 0x803100C4
+	FVE_E_DE_FIXED_DATA_NOT_SUPPORTED                                         Handle        = 0x803100C5
+	FVE_E_DE_HARDWARE_NOT_COMPLIANT                                           Handle        = 0x803100C6
+	FVE_E_DE_WINRE_NOT_CONFIGURED                                             Handle        = 0x803100C7
+	FVE_E_DE_PROTECTION_SUSPENDED                                             Handle        = 0x803100C8
+	FVE_E_DE_OS_VOLUME_NOT_PROTECTED                                          Handle        = 0x803100C9
+	FVE_E_DE_DEVICE_LOCKEDOUT                                                 Handle        = 0x803100CA
+	FVE_E_DE_PROTECTION_NOT_YET_ENABLED                                       Handle        = 0x803100CB
+	FVE_E_INVALID_PIN_CHARS_DETAILED                                          Handle        = 0x803100CC
+	FVE_E_DEVICE_LOCKOUT_COUNTER_UNAVAILABLE                                  Handle        = 0x803100CD
+	FVE_E_DEVICELOCKOUT_COUNTER_MISMATCH                                      Handle        = 0x803100CE
+	FVE_E_BUFFER_TOO_LARGE                                                    Handle        = 0x803100CF
+	FVE_E_NO_SUCH_CAPABILITY_ON_TARGET                                        Handle        = 0x803100D0
+	FVE_E_DE_PREVENTED_FOR_OS                                                 Handle        = 0x803100D1
+	FVE_E_DE_VOLUME_OPTED_OUT                                                 Handle        = 0x803100D2
+	FVE_E_DE_VOLUME_NOT_SUPPORTED                                             Handle        = 0x803100D3
+	FVE_E_EOW_NOT_SUPPORTED_IN_VERSION                                        Handle        = 0x803100D4
+	FVE_E_ADBACKUP_NOT_ENABLED                                                Handle        = 0x803100D5
+	FVE_E_VOLUME_EXTEND_PREVENTS_EOW_DECRYPT                                  Handle        = 0x803100D6
+	FVE_E_NOT_DE_VOLUME                                                       Handle        = 0x803100D7
+	FVE_E_PROTECTION_CANNOT_BE_DISABLED                                       Handle        = 0x803100D8
+	FVE_E_OSV_KSR_NOT_ALLOWED                                                 Handle        = 0x803100D9
+	FWP_E_CALLOUT_NOT_FOUND                                                   Handle        = 0x80320001
+	FWP_E_CONDITION_NOT_FOUND                                                 Handle        = 0x80320002
+	FWP_E_FILTER_NOT_FOUND                                                    Handle        = 0x80320003
+	FWP_E_LAYER_NOT_FOUND                                                     Handle        = 0x80320004
+	FWP_E_PROVIDER_NOT_FOUND                                                  Handle        = 0x80320005
+	FWP_E_PROVIDER_CONTEXT_NOT_FOUND                                          Handle        = 0x80320006
+	FWP_E_SUBLAYER_NOT_FOUND                                                  Handle        = 0x80320007
+	FWP_E_NOT_FOUND                                                           Handle        = 0x80320008
+	FWP_E_ALREADY_EXISTS                                                      Handle        = 0x80320009
+	FWP_E_IN_USE                                                              Handle        = 0x8032000A
+	FWP_E_DYNAMIC_SESSION_IN_PROGRESS                                         Handle        = 0x8032000B
+	FWP_E_WRONG_SESSION                                                       Handle        = 0x8032000C
+	FWP_E_NO_TXN_IN_PROGRESS                                                  Handle        = 0x8032000D
+	FWP_E_TXN_IN_PROGRESS                                                     Handle        = 0x8032000E
+	FWP_E_TXN_ABORTED                                                         Handle        = 0x8032000F
+	FWP_E_SESSION_ABORTED                                                     Handle        = 0x80320010
+	FWP_E_INCOMPATIBLE_TXN                                                    Handle        = 0x80320011
+	FWP_E_TIMEOUT                                                             Handle        = 0x80320012
+	FWP_E_NET_EVENTS_DISABLED                                                 Handle        = 0x80320013
+	FWP_E_INCOMPATIBLE_LAYER                                                  Handle        = 0x80320014
+	FWP_E_KM_CLIENTS_ONLY                                                     Handle        = 0x80320015
+	FWP_E_LIFETIME_MISMATCH                                                   Handle        = 0x80320016
+	FWP_E_BUILTIN_OBJECT                                                      Handle        = 0x80320017
+	FWP_E_TOO_MANY_CALLOUTS                                                   Handle        = 0x80320018
+	FWP_E_NOTIFICATION_DROPPED                                                Handle        = 0x80320019
+	FWP_E_TRAFFIC_MISMATCH                                                    Handle        = 0x8032001A
+	FWP_E_INCOMPATIBLE_SA_STATE                                               Handle        = 0x8032001B
+	FWP_E_NULL_POINTER                                                        Handle        = 0x8032001C
+	FWP_E_INVALID_ENUMERATOR                                                  Handle        = 0x8032001D
+	FWP_E_INVALID_FLAGS                                                       Handle        = 0x8032001E
+	FWP_E_INVALID_NET_MASK                                                    Handle        = 0x8032001F
+	FWP_E_INVALID_RANGE                                                       Handle        = 0x80320020
+	FWP_E_INVALID_INTERVAL                                                    Handle        = 0x80320021
+	FWP_E_ZERO_LENGTH_ARRAY                                                   Handle        = 0x80320022
+	FWP_E_NULL_DISPLAY_NAME                                                   Handle        = 0x80320023
+	FWP_E_INVALID_ACTION_TYPE                                                 Handle        = 0x80320024
+	FWP_E_INVALID_WEIGHT                                                      Handle        = 0x80320025
+	FWP_E_MATCH_TYPE_MISMATCH                                                 Handle        = 0x80320026
+	FWP_E_TYPE_MISMATCH                                                       Handle        = 0x80320027
+	FWP_E_OUT_OF_BOUNDS                                                       Handle        = 0x80320028
+	FWP_E_RESERVED                                                            Handle        = 0x80320029
+	FWP_E_DUPLICATE_CONDITION                                                 Handle        = 0x8032002A
+	FWP_E_DUPLICATE_KEYMOD                                                    Handle        = 0x8032002B
+	FWP_E_ACTION_INCOMPATIBLE_WITH_LAYER                                      Handle        = 0x8032002C
+	FWP_E_ACTION_INCOMPATIBLE_WITH_SUBLAYER                                   Handle        = 0x8032002D
+	FWP_E_CONTEXT_INCOMPATIBLE_WITH_LAYER                                     Handle        = 0x8032002E
+	FWP_E_CONTEXT_INCOMPATIBLE_WITH_CALLOUT                                   Handle        = 0x8032002F
+	FWP_E_INCOMPATIBLE_AUTH_METHOD                                            Handle        = 0x80320030
+	FWP_E_INCOMPATIBLE_DH_GROUP                                               Handle        = 0x80320031
+	FWP_E_EM_NOT_SUPPORTED                                                    Handle        = 0x80320032
+	FWP_E_NEVER_MATCH                                                         Handle        = 0x80320033
+	FWP_E_PROVIDER_CONTEXT_MISMATCH                                           Handle        = 0x80320034
+	FWP_E_INVALID_PARAMETER                                                   Handle        = 0x80320035
+	FWP_E_TOO_MANY_SUBLAYERS                                                  Handle        = 0x80320036
+	FWP_E_CALLOUT_NOTIFICATION_FAILED                                         Handle        = 0x80320037
+	FWP_E_INVALID_AUTH_TRANSFORM                                              Handle        = 0x80320038
+	FWP_E_INVALID_CIPHER_TRANSFORM                                            Handle        = 0x80320039
+	FWP_E_INCOMPATIBLE_CIPHER_TRANSFORM                                       Handle        = 0x8032003A
+	FWP_E_INVALID_TRANSFORM_COMBINATION                                       Handle        = 0x8032003B
+	FWP_E_DUPLICATE_AUTH_METHOD                                               Handle        = 0x8032003C
+	FWP_E_INVALID_TUNNEL_ENDPOINT                                             Handle        = 0x8032003D
+	FWP_E_L2_DRIVER_NOT_READY                                                 Handle        = 0x8032003E
+	FWP_E_KEY_DICTATOR_ALREADY_REGISTERED                                     Handle        = 0x8032003F
+	FWP_E_KEY_DICTATION_INVALID_KEYING_MATERIAL                               Handle        = 0x80320040
+	FWP_E_CONNECTIONS_DISABLED                                                Handle        = 0x80320041
+	FWP_E_INVALID_DNS_NAME                                                    Handle        = 0x80320042
+	FWP_E_STILL_ON                                                            Handle        = 0x80320043
+	FWP_E_IKEEXT_NOT_RUNNING                                                  Handle        = 0x80320044
+	FWP_E_DROP_NOICMP                                                         Handle        = 0x80320104
+	WS_S_ASYNC                                                                Handle        = 0x003D0000
+	WS_S_END                                                                  Handle        = 0x003D0001
+	WS_E_INVALID_FORMAT                                                       Handle        = 0x803D0000
+	WS_E_OBJECT_FAULTED                                                       Handle        = 0x803D0001
+	WS_E_NUMERIC_OVERFLOW                                                     Handle        = 0x803D0002
+	WS_E_INVALID_OPERATION                                                    Handle        = 0x803D0003
+	WS_E_OPERATION_ABORTED                                                    Handle        = 0x803D0004
+	WS_E_ENDPOINT_ACCESS_DENIED                                               Handle        = 0x803D0005
+	WS_E_OPERATION_TIMED_OUT                                                  Handle        = 0x803D0006
+	WS_E_OPERATION_ABANDONED                                                  Handle        = 0x803D0007
+	WS_E_QUOTA_EXCEEDED                                                       Handle        = 0x803D0008
+	WS_E_NO_TRANSLATION_AVAILABLE                                             Handle        = 0x803D0009
+	WS_E_SECURITY_VERIFICATION_FAILURE                                        Handle        = 0x803D000A
+	WS_E_ADDRESS_IN_USE                                                       Handle        = 0x803D000B
+	WS_E_ADDRESS_NOT_AVAILABLE                                                Handle        = 0x803D000C
+	WS_E_ENDPOINT_NOT_FOUND                                                   Handle        = 0x803D000D
+	WS_E_ENDPOINT_NOT_AVAILABLE                                               Handle        = 0x803D000E
+	WS_E_ENDPOINT_FAILURE                                                     Handle        = 0x803D000F
+	WS_E_ENDPOINT_UNREACHABLE                                                 Handle        = 0x803D0010
+	WS_E_ENDPOINT_ACTION_NOT_SUPPORTED                                        Handle        = 0x803D0011
+	WS_E_ENDPOINT_TOO_BUSY                                                    Handle        = 0x803D0012
+	WS_E_ENDPOINT_FAULT_RECEIVED                                              Handle        = 0x803D0013
+	WS_E_ENDPOINT_DISCONNECTED                                                Handle        = 0x803D0014
+	WS_E_PROXY_FAILURE                                                        Handle        = 0x803D0015
+	WS_E_PROXY_ACCESS_DENIED                                                  Handle        = 0x803D0016
+	WS_E_NOT_SUPPORTED                                                        Handle        = 0x803D0017
+	WS_E_PROXY_REQUIRES_BASIC_AUTH                                            Handle        = 0x803D0018
+	WS_E_PROXY_REQUIRES_DIGEST_AUTH                                           Handle        = 0x803D0019
+	WS_E_PROXY_REQUIRES_NTLM_AUTH                                             Handle        = 0x803D001A
+	WS_E_PROXY_REQUIRES_NEGOTIATE_AUTH                                        Handle        = 0x803D001B
+	WS_E_SERVER_REQUIRES_BASIC_AUTH                                           Handle        = 0x803D001C
+	WS_E_SERVER_REQUIRES_DIGEST_AUTH                                          Handle        = 0x803D001D
+	WS_E_SERVER_REQUIRES_NTLM_AUTH                                            Handle        = 0x803D001E
+	WS_E_SERVER_REQUIRES_NEGOTIATE_AUTH                                       Handle        = 0x803D001F
+	WS_E_INVALID_ENDPOINT_URL                                                 Handle        = 0x803D0020
+	WS_E_OTHER                                                                Handle        = 0x803D0021
+	WS_E_SECURITY_TOKEN_EXPIRED                                               Handle        = 0x803D0022
+	WS_E_SECURITY_SYSTEM_FAILURE                                              Handle        = 0x803D0023
+	ERROR_NDIS_INTERFACE_CLOSING                                              syscall.Errno = 0x80340002
+	ERROR_NDIS_BAD_VERSION                                                    syscall.Errno = 0x80340004
+	ERROR_NDIS_BAD_CHARACTERISTICS                                            syscall.Errno = 0x80340005
+	ERROR_NDIS_ADAPTER_NOT_FOUND                                              syscall.Errno = 0x80340006
+	ERROR_NDIS_OPEN_FAILED                                                    syscall.Errno = 0x80340007
+	ERROR_NDIS_DEVICE_FAILED                                                  syscall.Errno = 0x80340008
+	ERROR_NDIS_MULTICAST_FULL                                                 syscall.Errno = 0x80340009
+	ERROR_NDIS_MULTICAST_EXISTS                                               syscall.Errno = 0x8034000A
+	ERROR_NDIS_MULTICAST_NOT_FOUND                                            syscall.Errno = 0x8034000B
+	ERROR_NDIS_REQUEST_ABORTED                                                syscall.Errno = 0x8034000C
+	ERROR_NDIS_RESET_IN_PROGRESS                                              syscall.Errno = 0x8034000D
+	ERROR_NDIS_NOT_SUPPORTED                                                  syscall.Errno = 0x803400BB
+	ERROR_NDIS_INVALID_PACKET                                                 syscall.Errno = 0x8034000F
+	ERROR_NDIS_ADAPTER_NOT_READY                                              syscall.Errno = 0x80340011
+	ERROR_NDIS_INVALID_LENGTH                                                 syscall.Errno = 0x80340014
+	ERROR_NDIS_INVALID_DATA                                                   syscall.Errno = 0x80340015
+	ERROR_NDIS_BUFFER_TOO_SHORT                                               syscall.Errno = 0x80340016
+	ERROR_NDIS_INVALID_OID                                                    syscall.Errno = 0x80340017
+	ERROR_NDIS_ADAPTER_REMOVED                                                syscall.Errno = 0x80340018
+	ERROR_NDIS_UNSUPPORTED_MEDIA                                              syscall.Errno = 0x80340019
+	ERROR_NDIS_GROUP_ADDRESS_IN_USE                                           syscall.Errno = 0x8034001A
+	ERROR_NDIS_FILE_NOT_FOUND                                                 syscall.Errno = 0x8034001B
+	ERROR_NDIS_ERROR_READING_FILE                                             syscall.Errno = 0x8034001C
+	ERROR_NDIS_ALREADY_MAPPED                                                 syscall.Errno = 0x8034001D
+	ERROR_NDIS_RESOURCE_CONFLICT                                              syscall.Errno = 0x8034001E
+	ERROR_NDIS_MEDIA_DISCONNECTED                                             syscall.Errno = 0x8034001F
+	ERROR_NDIS_INVALID_ADDRESS                                                syscall.Errno = 0x80340022
+	ERROR_NDIS_INVALID_DEVICE_REQUEST                                         syscall.Errno = 0x80340010
+	ERROR_NDIS_PAUSED                                                         syscall.Errno = 0x8034002A
+	ERROR_NDIS_INTERFACE_NOT_FOUND                                            syscall.Errno = 0x8034002B
+	ERROR_NDIS_UNSUPPORTED_REVISION                                           syscall.Errno = 0x8034002C
+	ERROR_NDIS_INVALID_PORT                                                   syscall.Errno = 0x8034002D
+	ERROR_NDIS_INVALID_PORT_STATE                                             syscall.Errno = 0x8034002E
+	ERROR_NDIS_LOW_POWER_STATE                                                syscall.Errno = 0x8034002F
+	ERROR_NDIS_REINIT_REQUIRED                                                syscall.Errno = 0x80340030
+	ERROR_NDIS_NO_QUEUES                                                      syscall.Errno = 0x80340031
+	ERROR_NDIS_DOT11_AUTO_CONFIG_ENABLED                                      syscall.Errno = 0x80342000
+	ERROR_NDIS_DOT11_MEDIA_IN_USE                                             syscall.Errno = 0x80342001
+	ERROR_NDIS_DOT11_POWER_STATE_INVALID                                      syscall.Errno = 0x80342002
+	ERROR_NDIS_PM_WOL_PATTERN_LIST_FULL                                       syscall.Errno = 0x80342003
+	ERROR_NDIS_PM_PROTOCOL_OFFLOAD_LIST_FULL                                  syscall.Errno = 0x80342004
+	ERROR_NDIS_DOT11_AP_CHANNEL_CURRENTLY_NOT_AVAILABLE                       syscall.Errno = 0x80342005
+	ERROR_NDIS_DOT11_AP_BAND_CURRENTLY_NOT_AVAILABLE                          syscall.Errno = 0x80342006
+	ERROR_NDIS_DOT11_AP_CHANNEL_NOT_ALLOWED                                   syscall.Errno = 0x80342007
+	ERROR_NDIS_DOT11_AP_BAND_NOT_ALLOWED                                      syscall.Errno = 0x80342008
+	ERROR_NDIS_INDICATION_REQUIRED                                            syscall.Errno = 0x00340001
+	ERROR_NDIS_OFFLOAD_POLICY                                                 syscall.Errno = 0xC034100F
+	ERROR_NDIS_OFFLOAD_CONNECTION_REJECTED                                    syscall.Errno = 0xC0341012
+	ERROR_NDIS_OFFLOAD_PATH_REJECTED                                          syscall.Errno = 0xC0341013
+	ERROR_HV_INVALID_HYPERCALL_CODE                                           syscall.Errno = 0xC0350002
+	ERROR_HV_INVALID_HYPERCALL_INPUT                                          syscall.Errno = 0xC0350003
+	ERROR_HV_INVALID_ALIGNMENT                                                syscall.Errno = 0xC0350004
+	ERROR_HV_INVALID_PARAMETER                                                syscall.Errno = 0xC0350005
+	ERROR_HV_ACCESS_DENIED                                                    syscall.Errno = 0xC0350006
+	ERROR_HV_INVALID_PARTITION_STATE                                          syscall.Errno = 0xC0350007
+	ERROR_HV_OPERATION_DENIED                                                 syscall.Errno = 0xC0350008
+	ERROR_HV_UNKNOWN_PROPERTY                                                 syscall.Errno = 0xC0350009
+	ERROR_HV_PROPERTY_VALUE_OUT_OF_RANGE                                      syscall.Errno = 0xC035000A
+	ERROR_HV_INSUFFICIENT_MEMORY                                              syscall.Errno = 0xC035000B
+	ERROR_HV_PARTITION_TOO_DEEP                                               syscall.Errno = 0xC035000C
+	ERROR_HV_INVALID_PARTITION_ID                                             syscall.Errno = 0xC035000D
+	ERROR_HV_INVALID_VP_INDEX                                                 syscall.Errno = 0xC035000E
+	ERROR_HV_INVALID_PORT_ID                                                  syscall.Errno = 0xC0350011
+	ERROR_HV_INVALID_CONNECTION_ID                                            syscall.Errno = 0xC0350012
+	ERROR_HV_INSUFFICIENT_BUFFERS                                             syscall.Errno = 0xC0350013
+	ERROR_HV_NOT_ACKNOWLEDGED                                                 syscall.Errno = 0xC0350014
+	ERROR_HV_INVALID_VP_STATE                                                 syscall.Errno = 0xC0350015
+	ERROR_HV_ACKNOWLEDGED                                                     syscall.Errno = 0xC0350016
+	ERROR_HV_INVALID_SAVE_RESTORE_STATE                                       syscall.Errno = 0xC0350017
+	ERROR_HV_INVALID_SYNIC_STATE                                              syscall.Errno = 0xC0350018
+	ERROR_HV_OBJECT_IN_USE                                                    syscall.Errno = 0xC0350019
+	ERROR_HV_INVALID_PROXIMITY_DOMAIN_INFO                                    syscall.Errno = 0xC035001A
+	ERROR_HV_NO_DATA                                                          syscall.Errno = 0xC035001B
+	ERROR_HV_INACTIVE                                                         syscall.Errno = 0xC035001C
+	ERROR_HV_NO_RESOURCES                                                     syscall.Errno = 0xC035001D
+	ERROR_HV_FEATURE_UNAVAILABLE                                              syscall.Errno = 0xC035001E
+	ERROR_HV_INSUFFICIENT_BUFFER                                              syscall.Errno = 0xC0350033
+	ERROR_HV_INSUFFICIENT_DEVICE_DOMAINS                                      syscall.Errno = 0xC0350038
+	ERROR_HV_CPUID_FEATURE_VALIDATION                                         syscall.Errno = 0xC035003C
+	ERROR_HV_CPUID_XSAVE_FEATURE_VALIDATION                                   syscall.Errno = 0xC035003D
+	ERROR_HV_PROCESSOR_STARTUP_TIMEOUT                                        syscall.Errno = 0xC035003E
+	ERROR_HV_SMX_ENABLED                                                      syscall.Errno = 0xC035003F
+	ERROR_HV_INVALID_LP_INDEX                                                 syscall.Errno = 0xC0350041
+	ERROR_HV_INVALID_REGISTER_VALUE                                           syscall.Errno = 0xC0350050
+	ERROR_HV_INVALID_VTL_STATE                                                syscall.Errno = 0xC0350051
+	ERROR_HV_NX_NOT_DETECTED                                                  syscall.Errno = 0xC0350055
+	ERROR_HV_INVALID_DEVICE_ID                                                syscall.Errno = 0xC0350057
+	ERROR_HV_INVALID_DEVICE_STATE                                             syscall.Errno = 0xC0350058
+	ERROR_HV_PENDING_PAGE_REQUESTS                                            syscall.Errno = 0x00350059
+	ERROR_HV_PAGE_REQUEST_INVALID                                             syscall.Errno = 0xC0350060
+	ERROR_HV_INVALID_CPU_GROUP_ID                                             syscall.Errno = 0xC035006F
+	ERROR_HV_INVALID_CPU_GROUP_STATE                                          syscall.Errno = 0xC0350070
+	ERROR_HV_OPERATION_FAILED                                                 syscall.Errno = 0xC0350071
+	ERROR_HV_NOT_ALLOWED_WITH_NESTED_VIRT_ACTIVE                              syscall.Errno = 0xC0350072
+	ERROR_HV_INSUFFICIENT_ROOT_MEMORY                                         syscall.Errno = 0xC0350073
+	ERROR_HV_NOT_PRESENT                                                      syscall.Errno = 0xC0351000
+	ERROR_VID_DUPLICATE_HANDLER                                               syscall.Errno = 0xC0370001
+	ERROR_VID_TOO_MANY_HANDLERS                                               syscall.Errno = 0xC0370002
+	ERROR_VID_QUEUE_FULL                                                      syscall.Errno = 0xC0370003
+	ERROR_VID_HANDLER_NOT_PRESENT                                             syscall.Errno = 0xC0370004
+	ERROR_VID_INVALID_OBJECT_NAME                                             syscall.Errno = 0xC0370005
+	ERROR_VID_PARTITION_NAME_TOO_LONG                                         syscall.Errno = 0xC0370006
+	ERROR_VID_MESSAGE_QUEUE_NAME_TOO_LONG                                     syscall.Errno = 0xC0370007
+	ERROR_VID_PARTITION_ALREADY_EXISTS                                        syscall.Errno = 0xC0370008
+	ERROR_VID_PARTITION_DOES_NOT_EXIST                                        syscall.Errno = 0xC0370009
+	ERROR_VID_PARTITION_NAME_NOT_FOUND                                        syscall.Errno = 0xC037000A
+	ERROR_VID_MESSAGE_QUEUE_ALREADY_EXISTS                                    syscall.Errno = 0xC037000B
+	ERROR_VID_EXCEEDED_MBP_ENTRY_MAP_LIMIT                                    syscall.Errno = 0xC037000C
+	ERROR_VID_MB_STILL_REFERENCED                                             syscall.Errno = 0xC037000D
+	ERROR_VID_CHILD_GPA_PAGE_SET_CORRUPTED                                    syscall.Errno = 0xC037000E
+	ERROR_VID_INVALID_NUMA_SETTINGS                                           syscall.Errno = 0xC037000F
+	ERROR_VID_INVALID_NUMA_NODE_INDEX                                         syscall.Errno = 0xC0370010
+	ERROR_VID_NOTIFICATION_QUEUE_ALREADY_ASSOCIATED                           syscall.Errno = 0xC0370011
+	ERROR_VID_INVALID_MEMORY_BLOCK_HANDLE                                     syscall.Errno = 0xC0370012
+	ERROR_VID_PAGE_RANGE_OVERFLOW                                             syscall.Errno = 0xC0370013
+	ERROR_VID_INVALID_MESSAGE_QUEUE_HANDLE                                    syscall.Errno = 0xC0370014
+	ERROR_VID_INVALID_GPA_RANGE_HANDLE                                        syscall.Errno = 0xC0370015
+	ERROR_VID_NO_MEMORY_BLOCK_NOTIFICATION_QUEUE                              syscall.Errno = 0xC0370016
+	ERROR_VID_MEMORY_BLOCK_LOCK_COUNT_EXCEEDED                                syscall.Errno = 0xC0370017
+	ERROR_VID_INVALID_PPM_HANDLE                                              syscall.Errno = 0xC0370018
+	ERROR_VID_MBPS_ARE_LOCKED                                                 syscall.Errno = 0xC0370019
+	ERROR_VID_MESSAGE_QUEUE_CLOSED                                            syscall.Errno = 0xC037001A
+	ERROR_VID_VIRTUAL_PROCESSOR_LIMIT_EXCEEDED                                syscall.Errno = 0xC037001B
+	ERROR_VID_STOP_PENDING                                                    syscall.Errno = 0xC037001C
+	ERROR_VID_INVALID_PROCESSOR_STATE                                         syscall.Errno = 0xC037001D
+	ERROR_VID_EXCEEDED_KM_CONTEXT_COUNT_LIMIT                                 syscall.Errno = 0xC037001E
+	ERROR_VID_KM_INTERFACE_ALREADY_INITIALIZED                                syscall.Errno = 0xC037001F
+	ERROR_VID_MB_PROPERTY_ALREADY_SET_RESET                                   syscall.Errno = 0xC0370020
+	ERROR_VID_MMIO_RANGE_DESTROYED                                            syscall.Errno = 0xC0370021
+	ERROR_VID_INVALID_CHILD_GPA_PAGE_SET                                      syscall.Errno = 0xC0370022
+	ERROR_VID_RESERVE_PAGE_SET_IS_BEING_USED                                  syscall.Errno = 0xC0370023
+	ERROR_VID_RESERVE_PAGE_SET_TOO_SMALL                                      syscall.Errno = 0xC0370024
+	ERROR_VID_MBP_ALREADY_LOCKED_USING_RESERVED_PAGE                          syscall.Errno = 0xC0370025
+	ERROR_VID_MBP_COUNT_EXCEEDED_LIMIT                                        syscall.Errno = 0xC0370026
+	ERROR_VID_SAVED_STATE_CORRUPT                                             syscall.Errno = 0xC0370027
+	ERROR_VID_SAVED_STATE_UNRECOGNIZED_ITEM                                   syscall.Errno = 0xC0370028
+	ERROR_VID_SAVED_STATE_INCOMPATIBLE                                        syscall.Errno = 0xC0370029
+	ERROR_VID_VTL_ACCESS_DENIED                                               syscall.Errno = 0xC037002A
+	ERROR_VMCOMPUTE_TERMINATED_DURING_START                                   syscall.Errno = 0xC0370100
+	ERROR_VMCOMPUTE_IMAGE_MISMATCH                                            syscall.Errno = 0xC0370101
+	ERROR_VMCOMPUTE_HYPERV_NOT_INSTALLED                                      syscall.Errno = 0xC0370102
+	ERROR_VMCOMPUTE_OPERATION_PENDING                                         syscall.Errno = 0xC0370103
+	ERROR_VMCOMPUTE_TOO_MANY_NOTIFICATIONS                                    syscall.Errno = 0xC0370104
+	ERROR_VMCOMPUTE_INVALID_STATE                                             syscall.Errno = 0xC0370105
+	ERROR_VMCOMPUTE_UNEXPECTED_EXIT                                           syscall.Errno = 0xC0370106
+	ERROR_VMCOMPUTE_TERMINATED                                                syscall.Errno = 0xC0370107
+	ERROR_VMCOMPUTE_CONNECT_FAILED                                            syscall.Errno = 0xC0370108
+	ERROR_VMCOMPUTE_TIMEOUT                                                   syscall.Errno = 0xC0370109
+	ERROR_VMCOMPUTE_CONNECTION_CLOSED                                         syscall.Errno = 0xC037010A
+	ERROR_VMCOMPUTE_UNKNOWN_MESSAGE                                           syscall.Errno = 0xC037010B
+	ERROR_VMCOMPUTE_UNSUPPORTED_PROTOCOL_VERSION                              syscall.Errno = 0xC037010C
+	ERROR_VMCOMPUTE_INVALID_JSON                                              syscall.Errno = 0xC037010D
+	ERROR_VMCOMPUTE_SYSTEM_NOT_FOUND                                          syscall.Errno = 0xC037010E
+	ERROR_VMCOMPUTE_SYSTEM_ALREADY_EXISTS                                     syscall.Errno = 0xC037010F
+	ERROR_VMCOMPUTE_SYSTEM_ALREADY_STOPPED                                    syscall.Errno = 0xC0370110
+	ERROR_VMCOMPUTE_PROTOCOL_ERROR                                            syscall.Errno = 0xC0370111
+	ERROR_VMCOMPUTE_INVALID_LAYER                                             syscall.Errno = 0xC0370112
+	ERROR_VMCOMPUTE_WINDOWS_INSIDER_REQUIRED                                  syscall.Errno = 0xC0370113
+	HCS_E_TERMINATED_DURING_START                                             Handle        = 0x80370100
+	HCS_E_IMAGE_MISMATCH                                                      Handle        = 0x80370101
+	HCS_E_HYPERV_NOT_INSTALLED                                                Handle        = 0x80370102
+	HCS_E_INVALID_STATE                                                       Handle        = 0x80370105
+	HCS_E_UNEXPECTED_EXIT                                                     Handle        = 0x80370106
+	HCS_E_TERMINATED                                                          Handle        = 0x80370107
+	HCS_E_CONNECT_FAILED                                                      Handle        = 0x80370108
+	HCS_E_CONNECTION_TIMEOUT                                                  Handle        = 0x80370109
+	HCS_E_CONNECTION_CLOSED                                                   Handle        = 0x8037010A
+	HCS_E_UNKNOWN_MESSAGE                                                     Handle        = 0x8037010B
+	HCS_E_UNSUPPORTED_PROTOCOL_VERSION                                        Handle        = 0x8037010C
+	HCS_E_INVALID_JSON                                                        Handle        = 0x8037010D
+	HCS_E_SYSTEM_NOT_FOUND                                                    Handle        = 0x8037010E
+	HCS_E_SYSTEM_ALREADY_EXISTS                                               Handle        = 0x8037010F
+	HCS_E_SYSTEM_ALREADY_STOPPED                                              Handle        = 0x80370110
+	HCS_E_PROTOCOL_ERROR                                                      Handle        = 0x80370111
+	HCS_E_INVALID_LAYER                                                       Handle        = 0x80370112
+	HCS_E_WINDOWS_INSIDER_REQUIRED                                            Handle        = 0x80370113
+	HCS_E_SERVICE_NOT_AVAILABLE                                               Handle        = 0x80370114
+	HCS_E_OPERATION_NOT_STARTED                                               Handle        = 0x80370115
+	HCS_E_OPERATION_ALREADY_STARTED                                           Handle        = 0x80370116
+	HCS_E_OPERATION_PENDING                                                   Handle        = 0x80370117
+	HCS_E_OPERATION_TIMEOUT                                                   Handle        = 0x80370118
+	HCS_E_OPERATION_SYSTEM_CALLBACK_ALREADY_SET                               Handle        = 0x80370119
+	HCS_E_OPERATION_RESULT_ALLOCATION_FAILED                                  Handle        = 0x8037011A
+	HCS_E_ACCESS_DENIED                                                       Handle        = 0x8037011B
+	HCS_E_GUEST_CRITICAL_ERROR                                                Handle        = 0x8037011C
+	ERROR_VNET_VIRTUAL_SWITCH_NAME_NOT_FOUND                                  syscall.Errno = 0xC0370200
+	ERROR_VID_REMOTE_NODE_PARENT_GPA_PAGES_USED                               syscall.Errno = 0x80370001
+	WHV_E_UNKNOWN_CAPABILITY                                                  Handle        = 0x80370300
+	WHV_E_INSUFFICIENT_BUFFER                                                 Handle        = 0x80370301
+	WHV_E_UNKNOWN_PROPERTY                                                    Handle        = 0x80370302
+	WHV_E_UNSUPPORTED_HYPERVISOR_CONFIG                                       Handle        = 0x80370303
+	WHV_E_INVALID_PARTITION_CONFIG                                            Handle        = 0x80370304
+	WHV_E_GPA_RANGE_NOT_FOUND                                                 Handle        = 0x80370305
+	WHV_E_VP_ALREADY_EXISTS                                                   Handle        = 0x80370306
+	WHV_E_VP_DOES_NOT_EXIST                                                   Handle        = 0x80370307
+	WHV_E_INVALID_VP_STATE                                                    Handle        = 0x80370308
+	WHV_E_INVALID_VP_REGISTER_NAME                                            Handle        = 0x80370309
+	ERROR_VSMB_SAVED_STATE_FILE_NOT_FOUND                                     syscall.Errno = 0xC0370400
+	ERROR_VSMB_SAVED_STATE_CORRUPT                                            syscall.Errno = 0xC0370401
+	ERROR_VOLMGR_INCOMPLETE_REGENERATION                                      syscall.Errno = 0x80380001
+	ERROR_VOLMGR_INCOMPLETE_DISK_MIGRATION                                    syscall.Errno = 0x80380002
+	ERROR_VOLMGR_DATABASE_FULL                                                syscall.Errno = 0xC0380001
+	ERROR_VOLMGR_DISK_CONFIGURATION_CORRUPTED                                 syscall.Errno = 0xC0380002
+	ERROR_VOLMGR_DISK_CONFIGURATION_NOT_IN_SYNC                               syscall.Errno = 0xC0380003
+	ERROR_VOLMGR_PACK_CONFIG_UPDATE_FAILED                                    syscall.Errno = 0xC0380004
+	ERROR_VOLMGR_DISK_CONTAINS_NON_SIMPLE_VOLUME                              syscall.Errno = 0xC0380005
+	ERROR_VOLMGR_DISK_DUPLICATE                                               syscall.Errno = 0xC0380006
+	ERROR_VOLMGR_DISK_DYNAMIC                                                 syscall.Errno = 0xC0380007
+	ERROR_VOLMGR_DISK_ID_INVALID                                              syscall.Errno = 0xC0380008
+	ERROR_VOLMGR_DISK_INVALID                                                 syscall.Errno = 0xC0380009
+	ERROR_VOLMGR_DISK_LAST_VOTER                                              syscall.Errno = 0xC038000A
+	ERROR_VOLMGR_DISK_LAYOUT_INVALID                                          syscall.Errno = 0xC038000B
+	ERROR_VOLMGR_DISK_LAYOUT_NON_BASIC_BETWEEN_BASIC_PARTITIONS               syscall.Errno = 0xC038000C
+	ERROR_VOLMGR_DISK_LAYOUT_NOT_CYLINDER_ALIGNED                             syscall.Errno = 0xC038000D
+	ERROR_VOLMGR_DISK_LAYOUT_PARTITIONS_TOO_SMALL                             syscall.Errno = 0xC038000E
+	ERROR_VOLMGR_DISK_LAYOUT_PRIMARY_BETWEEN_LOGICAL_PARTITIONS               syscall.Errno = 0xC038000F
+	ERROR_VOLMGR_DISK_LAYOUT_TOO_MANY_PARTITIONS                              syscall.Errno = 0xC0380010
+	ERROR_VOLMGR_DISK_MISSING                                                 syscall.Errno = 0xC0380011
+	ERROR_VOLMGR_DISK_NOT_EMPTY                                               syscall.Errno = 0xC0380012
+	ERROR_VOLMGR_DISK_NOT_ENOUGH_SPACE                                        syscall.Errno = 0xC0380013
+	ERROR_VOLMGR_DISK_REVECTORING_FAILED                                      syscall.Errno = 0xC0380014
+	ERROR_VOLMGR_DISK_SECTOR_SIZE_INVALID                                     syscall.Errno = 0xC0380015
+	ERROR_VOLMGR_DISK_SET_NOT_CONTAINED                                       syscall.Errno = 0xC0380016
+	ERROR_VOLMGR_DISK_USED_BY_MULTIPLE_MEMBERS                                syscall.Errno = 0xC0380017
+	ERROR_VOLMGR_DISK_USED_BY_MULTIPLE_PLEXES                                 syscall.Errno = 0xC0380018
+	ERROR_VOLMGR_DYNAMIC_DISK_NOT_SUPPORTED                                   syscall.Errno = 0xC0380019
+	ERROR_VOLMGR_EXTENT_ALREADY_USED                                          syscall.Errno = 0xC038001A
+	ERROR_VOLMGR_EXTENT_NOT_CONTIGUOUS                                        syscall.Errno = 0xC038001B
+	ERROR_VOLMGR_EXTENT_NOT_IN_PUBLIC_REGION                                  syscall.Errno = 0xC038001C
+	ERROR_VOLMGR_EXTENT_NOT_SECTOR_ALIGNED                                    syscall.Errno = 0xC038001D
+	ERROR_VOLMGR_EXTENT_OVERLAPS_EBR_PARTITION                                syscall.Errno = 0xC038001E
+	ERROR_VOLMGR_EXTENT_VOLUME_LENGTHS_DO_NOT_MATCH                           syscall.Errno = 0xC038001F
+	ERROR_VOLMGR_FAULT_TOLERANT_NOT_SUPPORTED                                 syscall.Errno = 0xC0380020
+	ERROR_VOLMGR_INTERLEAVE_LENGTH_INVALID                                    syscall.Errno = 0xC0380021
+	ERROR_VOLMGR_MAXIMUM_REGISTERED_USERS                                     syscall.Errno = 0xC0380022
+	ERROR_VOLMGR_MEMBER_IN_SYNC                                               syscall.Errno = 0xC0380023
+	ERROR_VOLMGR_MEMBER_INDEX_DUPLICATE                                       syscall.Errno = 0xC0380024
+	ERROR_VOLMGR_MEMBER_INDEX_INVALID                                         syscall.Errno = 0xC0380025
+	ERROR_VOLMGR_MEMBER_MISSING                                               syscall.Errno = 0xC0380026
+	ERROR_VOLMGR_MEMBER_NOT_DETACHED                                          syscall.Errno = 0xC0380027
+	ERROR_VOLMGR_MEMBER_REGENERATING                                          syscall.Errno = 0xC0380028
+	ERROR_VOLMGR_ALL_DISKS_FAILED                                             syscall.Errno = 0xC0380029
+	ERROR_VOLMGR_NO_REGISTERED_USERS                                          syscall.Errno = 0xC038002A
+	ERROR_VOLMGR_NO_SUCH_USER                                                 syscall.Errno = 0xC038002B
+	ERROR_VOLMGR_NOTIFICATION_RESET                                           syscall.Errno = 0xC038002C
+	ERROR_VOLMGR_NUMBER_OF_MEMBERS_INVALID                                    syscall.Errno = 0xC038002D
+	ERROR_VOLMGR_NUMBER_OF_PLEXES_INVALID                                     syscall.Errno = 0xC038002E
+	ERROR_VOLMGR_PACK_DUPLICATE                                               syscall.Errno = 0xC038002F
+	ERROR_VOLMGR_PACK_ID_INVALID                                              syscall.Errno = 0xC0380030
+	ERROR_VOLMGR_PACK_INVALID                                                 syscall.Errno = 0xC0380031
+	ERROR_VOLMGR_PACK_NAME_INVALID                                            syscall.Errno = 0xC0380032
+	ERROR_VOLMGR_PACK_OFFLINE                                                 syscall.Errno = 0xC0380033
+	ERROR_VOLMGR_PACK_HAS_QUORUM                                              syscall.Errno = 0xC0380034
+	ERROR_VOLMGR_PACK_WITHOUT_QUORUM                                          syscall.Errno = 0xC0380035
+	ERROR_VOLMGR_PARTITION_STYLE_INVALID                                      syscall.Errno = 0xC0380036
+	ERROR_VOLMGR_PARTITION_UPDATE_FAILED                                      syscall.Errno = 0xC0380037
+	ERROR_VOLMGR_PLEX_IN_SYNC                                                 syscall.Errno = 0xC0380038
+	ERROR_VOLMGR_PLEX_INDEX_DUPLICATE                                         syscall.Errno = 0xC0380039
+	ERROR_VOLMGR_PLEX_INDEX_INVALID                                           syscall.Errno = 0xC038003A
+	ERROR_VOLMGR_PLEX_LAST_ACTIVE                                             syscall.Errno = 0xC038003B
+	ERROR_VOLMGR_PLEX_MISSING                                                 syscall.Errno = 0xC038003C
+	ERROR_VOLMGR_PLEX_REGENERATING                                            syscall.Errno = 0xC038003D
+	ERROR_VOLMGR_PLEX_TYPE_INVALID                                            syscall.Errno = 0xC038003E
+	ERROR_VOLMGR_PLEX_NOT_RAID5                                               syscall.Errno = 0xC038003F
+	ERROR_VOLMGR_PLEX_NOT_SIMPLE                                              syscall.Errno = 0xC0380040
+	ERROR_VOLMGR_STRUCTURE_SIZE_INVALID                                       syscall.Errno = 0xC0380041
+	ERROR_VOLMGR_TOO_MANY_NOTIFICATION_REQUESTS                               syscall.Errno = 0xC0380042
+	ERROR_VOLMGR_TRANSACTION_IN_PROGRESS                                      syscall.Errno = 0xC0380043
+	ERROR_VOLMGR_UNEXPECTED_DISK_LAYOUT_CHANGE                                syscall.Errno = 0xC0380044
+	ERROR_VOLMGR_VOLUME_CONTAINS_MISSING_DISK                                 syscall.Errno = 0xC0380045
+	ERROR_VOLMGR_VOLUME_ID_INVALID                                            syscall.Errno = 0xC0380046
+	ERROR_VOLMGR_VOLUME_LENGTH_INVALID                                        syscall.Errno = 0xC0380047
+	ERROR_VOLMGR_VOLUME_LENGTH_NOT_SECTOR_SIZE_MULTIPLE                       syscall.Errno = 0xC0380048
+	ERROR_VOLMGR_VOLUME_NOT_MIRRORED                                          syscall.Errno = 0xC0380049
+	ERROR_VOLMGR_VOLUME_NOT_RETAINED                                          syscall.Errno = 0xC038004A
+	ERROR_VOLMGR_VOLUME_OFFLINE                                               syscall.Errno = 0xC038004B
+	ERROR_VOLMGR_VOLUME_RETAINED                                              syscall.Errno = 0xC038004C
+	ERROR_VOLMGR_NUMBER_OF_EXTENTS_INVALID                                    syscall.Errno = 0xC038004D
+	ERROR_VOLMGR_DIFFERENT_SECTOR_SIZE                                        syscall.Errno = 0xC038004E
+	ERROR_VOLMGR_BAD_BOOT_DISK                                                syscall.Errno = 0xC038004F
+	ERROR_VOLMGR_PACK_CONFIG_OFFLINE                                          syscall.Errno = 0xC0380050
+	ERROR_VOLMGR_PACK_CONFIG_ONLINE                                           syscall.Errno = 0xC0380051
+	ERROR_VOLMGR_NOT_PRIMARY_PACK                                             syscall.Errno = 0xC0380052
+	ERROR_VOLMGR_PACK_LOG_UPDATE_FAILED                                       syscall.Errno = 0xC0380053
+	ERROR_VOLMGR_NUMBER_OF_DISKS_IN_PLEX_INVALID                              syscall.Errno = 0xC0380054
+	ERROR_VOLMGR_NUMBER_OF_DISKS_IN_MEMBER_INVALID                            syscall.Errno = 0xC0380055
+	ERROR_VOLMGR_VOLUME_MIRRORED                                              syscall.Errno = 0xC0380056
+	ERROR_VOLMGR_PLEX_NOT_SIMPLE_SPANNED                                      syscall.Errno = 0xC0380057
+	ERROR_VOLMGR_NO_VALID_LOG_COPIES                                          syscall.Errno = 0xC0380058
+	ERROR_VOLMGR_PRIMARY_PACK_PRESENT                                         syscall.Errno = 0xC0380059
+	ERROR_VOLMGR_NUMBER_OF_DISKS_INVALID                                      syscall.Errno = 0xC038005A
+	ERROR_VOLMGR_MIRROR_NOT_SUPPORTED                                         syscall.Errno = 0xC038005B
+	ERROR_VOLMGR_RAID5_NOT_SUPPORTED                                          syscall.Errno = 0xC038005C
+	ERROR_BCD_NOT_ALL_ENTRIES_IMPORTED                                        syscall.Errno = 0x80390001
+	ERROR_BCD_TOO_MANY_ELEMENTS                                               syscall.Errno = 0xC0390002
+	ERROR_BCD_NOT_ALL_ENTRIES_SYNCHRONIZED                                    syscall.Errno = 0x80390003
+	ERROR_VHD_DRIVE_FOOTER_MISSING                                            syscall.Errno = 0xC03A0001
+	ERROR_VHD_DRIVE_FOOTER_CHECKSUM_MISMATCH                                  syscall.Errno = 0xC03A0002
+	ERROR_VHD_DRIVE_FOOTER_CORRUPT                                            syscall.Errno = 0xC03A0003
+	ERROR_VHD_FORMAT_UNKNOWN                                                  syscall.Errno = 0xC03A0004
+	ERROR_VHD_FORMAT_UNSUPPORTED_VERSION                                      syscall.Errno = 0xC03A0005
+	ERROR_VHD_SPARSE_HEADER_CHECKSUM_MISMATCH                                 syscall.Errno = 0xC03A0006
+	ERROR_VHD_SPARSE_HEADER_UNSUPPORTED_VERSION                               syscall.Errno = 0xC03A0007
+	ERROR_VHD_SPARSE_HEADER_CORRUPT                                           syscall.Errno = 0xC03A0008
+	ERROR_VHD_BLOCK_ALLOCATION_FAILURE                                        syscall.Errno = 0xC03A0009
+	ERROR_VHD_BLOCK_ALLOCATION_TABLE_CORRUPT                                  syscall.Errno = 0xC03A000A
+	ERROR_VHD_INVALID_BLOCK_SIZE                                              syscall.Errno = 0xC03A000B
+	ERROR_VHD_BITMAP_MISMATCH                                                 syscall.Errno = 0xC03A000C
+	ERROR_VHD_PARENT_VHD_NOT_FOUND                                            syscall.Errno = 0xC03A000D
+	ERROR_VHD_CHILD_PARENT_ID_MISMATCH                                        syscall.Errno = 0xC03A000E
+	ERROR_VHD_CHILD_PARENT_TIMESTAMP_MISMATCH                                 syscall.Errno = 0xC03A000F
+	ERROR_VHD_METADATA_READ_FAILURE                                           syscall.Errno = 0xC03A0010
+	ERROR_VHD_METADATA_WRITE_FAILURE                                          syscall.Errno = 0xC03A0011
+	ERROR_VHD_INVALID_SIZE                                                    syscall.Errno = 0xC03A0012
+	ERROR_VHD_INVALID_FILE_SIZE                                               syscall.Errno = 0xC03A0013
+	ERROR_VIRTDISK_PROVIDER_NOT_FOUND                                         syscall.Errno = 0xC03A0014
+	ERROR_VIRTDISK_NOT_VIRTUAL_DISK                                           syscall.Errno = 0xC03A0015
+	ERROR_VHD_PARENT_VHD_ACCESS_DENIED                                        syscall.Errno = 0xC03A0016
+	ERROR_VHD_CHILD_PARENT_SIZE_MISMATCH                                      syscall.Errno = 0xC03A0017
+	ERROR_VHD_DIFFERENCING_CHAIN_CYCLE_DETECTED                               syscall.Errno = 0xC03A0018
+	ERROR_VHD_DIFFERENCING_CHAIN_ERROR_IN_PARENT                              syscall.Errno = 0xC03A0019
+	ERROR_VIRTUAL_DISK_LIMITATION                                             syscall.Errno = 0xC03A001A
+	ERROR_VHD_INVALID_TYPE                                                    syscall.Errno = 0xC03A001B
+	ERROR_VHD_INVALID_STATE                                                   syscall.Errno = 0xC03A001C
+	ERROR_VIRTDISK_UNSUPPORTED_DISK_SECTOR_SIZE                               syscall.Errno = 0xC03A001D
+	ERROR_VIRTDISK_DISK_ALREADY_OWNED                                         syscall.Errno = 0xC03A001E
+	ERROR_VIRTDISK_DISK_ONLINE_AND_WRITABLE                                   syscall.Errno = 0xC03A001F
+	ERROR_CTLOG_TRACKING_NOT_INITIALIZED                                      syscall.Errno = 0xC03A0020
+	ERROR_CTLOG_LOGFILE_SIZE_EXCEEDED_MAXSIZE                                 syscall.Errno = 0xC03A0021
+	ERROR_CTLOG_VHD_CHANGED_OFFLINE                                           syscall.Errno = 0xC03A0022
+	ERROR_CTLOG_INVALID_TRACKING_STATE                                        syscall.Errno = 0xC03A0023
+	ERROR_CTLOG_INCONSISTENT_TRACKING_FILE                                    syscall.Errno = 0xC03A0024
+	ERROR_VHD_RESIZE_WOULD_TRUNCATE_DATA                                      syscall.Errno = 0xC03A0025
+	ERROR_VHD_COULD_NOT_COMPUTE_MINIMUM_VIRTUAL_SIZE                          syscall.Errno = 0xC03A0026
+	ERROR_VHD_ALREADY_AT_OR_BELOW_MINIMUM_VIRTUAL_SIZE                        syscall.Errno = 0xC03A0027
+	ERROR_VHD_METADATA_FULL                                                   syscall.Errno = 0xC03A0028
+	ERROR_VHD_INVALID_CHANGE_TRACKING_ID                                      syscall.Errno = 0xC03A0029
+	ERROR_VHD_CHANGE_TRACKING_DISABLED                                        syscall.Errno = 0xC03A002A
+	ERROR_VHD_MISSING_CHANGE_TRACKING_INFORMATION                             syscall.Errno = 0xC03A0030
+	ERROR_QUERY_STORAGE_ERROR                                                 syscall.Errno = 0x803A0001
+	HCN_E_NETWORK_NOT_FOUND                                                   Handle        = 0x803B0001
+	HCN_E_ENDPOINT_NOT_FOUND                                                  Handle        = 0x803B0002
+	HCN_E_LAYER_NOT_FOUND                                                     Handle        = 0x803B0003
+	HCN_E_SWITCH_NOT_FOUND                                                    Handle        = 0x803B0004
+	HCN_E_SUBNET_NOT_FOUND                                                    Handle        = 0x803B0005
+	HCN_E_ADAPTER_NOT_FOUND                                                   Handle        = 0x803B0006
+	HCN_E_PORT_NOT_FOUND                                                      Handle        = 0x803B0007
+	HCN_E_POLICY_NOT_FOUND                                                    Handle        = 0x803B0008
+	HCN_E_VFP_PORTSETTING_NOT_FOUND                                           Handle        = 0x803B0009
+	HCN_E_INVALID_NETWORK                                                     Handle        = 0x803B000A
+	HCN_E_INVALID_NETWORK_TYPE                                                Handle        = 0x803B000B
+	HCN_E_INVALID_ENDPOINT                                                    Handle        = 0x803B000C
+	HCN_E_INVALID_POLICY                                                      Handle        = 0x803B000D
+	HCN_E_INVALID_POLICY_TYPE                                                 Handle        = 0x803B000E
+	HCN_E_INVALID_REMOTE_ENDPOINT_OPERATION                                   Handle        = 0x803B000F
+	HCN_E_NETWORK_ALREADY_EXISTS                                              Handle        = 0x803B0010
+	HCN_E_LAYER_ALREADY_EXISTS                                                Handle        = 0x803B0011
+	HCN_E_POLICY_ALREADY_EXISTS                                               Handle        = 0x803B0012
+	HCN_E_PORT_ALREADY_EXISTS                                                 Handle        = 0x803B0013
+	HCN_E_ENDPOINT_ALREADY_ATTACHED                                           Handle        = 0x803B0014
+	HCN_E_REQUEST_UNSUPPORTED                                                 Handle        = 0x803B0015
+	HCN_E_MAPPING_NOT_SUPPORTED                                               Handle        = 0x803B0016
+	HCN_E_DEGRADED_OPERATION                                                  Handle        = 0x803B0017
+	HCN_E_SHARED_SWITCH_MODIFICATION                                          Handle        = 0x803B0018
+	HCN_E_GUID_CONVERSION_FAILURE                                             Handle        = 0x803B0019
+	HCN_E_REGKEY_FAILURE                                                      Handle        = 0x803B001A
+	HCN_E_INVALID_JSON                                                        Handle        = 0x803B001B
+	HCN_E_INVALID_JSON_REFERENCE                                              Handle        = 0x803B001C
+	HCN_E_ENDPOINT_SHARING_DISABLED                                           Handle        = 0x803B001D
+	HCN_E_INVALID_IP                                                          Handle        = 0x803B001E
+	HCN_E_SWITCH_EXTENSION_NOT_FOUND                                          Handle        = 0x803B001F
+	HCN_E_MANAGER_STOPPED                                                     Handle        = 0x803B0020
+	GCN_E_MODULE_NOT_FOUND                                                    Handle        = 0x803B0021
+	GCN_E_NO_REQUEST_HANDLERS                                                 Handle        = 0x803B0022
+	GCN_E_REQUEST_UNSUPPORTED                                                 Handle        = 0x803B0023
+	GCN_E_RUNTIMEKEYS_FAILED                                                  Handle        = 0x803B0024
+	GCN_E_NETADAPTER_TIMEOUT                                                  Handle        = 0x803B0025
+	GCN_E_NETADAPTER_NOT_FOUND                                                Handle        = 0x803B0026
+	GCN_E_NETCOMPARTMENT_NOT_FOUND                                            Handle        = 0x803B0027
+	GCN_E_NETINTERFACE_NOT_FOUND                                              Handle        = 0x803B0028
+	GCN_E_DEFAULTNAMESPACE_EXISTS                                             Handle        = 0x803B0029
+	SDIAG_E_CANCELLED                                                         syscall.Errno = 0x803C0100
+	SDIAG_E_SCRIPT                                                            syscall.Errno = 0x803C0101
+	SDIAG_E_POWERSHELL                                                        syscall.Errno = 0x803C0102
+	SDIAG_E_MANAGEDHOST                                                       syscall.Errno = 0x803C0103
+	SDIAG_E_NOVERIFIER                                                        syscall.Errno = 0x803C0104
+	SDIAG_S_CANNOTRUN                                                         syscall.Errno = 0x003C0105
+	SDIAG_E_DISABLED                                                          syscall.Errno = 0x803C0106
+	SDIAG_E_TRUST                                                             syscall.Errno = 0x803C0107
+	SDIAG_E_CANNOTRUN                                                         syscall.Errno = 0x803C0108
+	SDIAG_E_VERSION                                                           syscall.Errno = 0x803C0109
+	SDIAG_E_RESOURCE                                                          syscall.Errno = 0x803C010A
+	SDIAG_E_ROOTCAUSE                                                         syscall.Errno = 0x803C010B
+	WPN_E_CHANNEL_CLOSED                                                      Handle        = 0x803E0100
+	WPN_E_CHANNEL_REQUEST_NOT_COMPLETE                                        Handle        = 0x803E0101
+	WPN_E_INVALID_APP                                                         Handle        = 0x803E0102
+	WPN_E_OUTSTANDING_CHANNEL_REQUEST                                         Handle        = 0x803E0103
+	WPN_E_DUPLICATE_CHANNEL                                                   Handle        = 0x803E0104
+	WPN_E_PLATFORM_UNAVAILABLE                                                Handle        = 0x803E0105
+	WPN_E_NOTIFICATION_POSTED                                                 Handle        = 0x803E0106
+	WPN_E_NOTIFICATION_HIDDEN                                                 Handle        = 0x803E0107
+	WPN_E_NOTIFICATION_NOT_POSTED                                             Handle        = 0x803E0108
+	WPN_E_CLOUD_DISABLED                                                      Handle        = 0x803E0109
+	WPN_E_CLOUD_INCAPABLE                                                     Handle        = 0x803E0110
+	WPN_E_CLOUD_AUTH_UNAVAILABLE                                              Handle        = 0x803E011A
+	WPN_E_CLOUD_SERVICE_UNAVAILABLE                                           Handle        = 0x803E011B
+	WPN_E_FAILED_LOCK_SCREEN_UPDATE_INTIALIZATION                             Handle        = 0x803E011C
+	WPN_E_NOTIFICATION_DISABLED                                               Handle        = 0x803E0111
+	WPN_E_NOTIFICATION_INCAPABLE                                              Handle        = 0x803E0112
+	WPN_E_INTERNET_INCAPABLE                                                  Handle        = 0x803E0113
+	WPN_E_NOTIFICATION_TYPE_DISABLED                                          Handle        = 0x803E0114
+	WPN_E_NOTIFICATION_SIZE                                                   Handle        = 0x803E0115
+	WPN_E_TAG_SIZE                                                            Handle        = 0x803E0116
+	WPN_E_ACCESS_DENIED                                                       Handle        = 0x803E0117
+	WPN_E_DUPLICATE_REGISTRATION                                              Handle        = 0x803E0118
+	WPN_E_PUSH_NOTIFICATION_INCAPABLE                                         Handle        = 0x803E0119
+	WPN_E_DEV_ID_SIZE                                                         Handle        = 0x803E0120
+	WPN_E_TAG_ALPHANUMERIC                                                    Handle        = 0x803E012A
+	WPN_E_INVALID_HTTP_STATUS_CODE                                            Handle        = 0x803E012B
+	WPN_E_OUT_OF_SESSION                                                      Handle        = 0x803E0200
+	WPN_E_POWER_SAVE                                                          Handle        = 0x803E0201
+	WPN_E_IMAGE_NOT_FOUND_IN_CACHE                                            Handle        = 0x803E0202
+	WPN_E_ALL_URL_NOT_COMPLETED                                               Handle        = 0x803E0203
+	WPN_E_INVALID_CLOUD_IMAGE                                                 Handle        = 0x803E0204
+	WPN_E_NOTIFICATION_ID_MATCHED                                             Handle        = 0x803E0205
+	WPN_E_CALLBACK_ALREADY_REGISTERED                                         Handle        = 0x803E0206
+	WPN_E_TOAST_NOTIFICATION_DROPPED                                          Handle        = 0x803E0207
+	WPN_E_STORAGE_LOCKED                                                      Handle        = 0x803E0208
+	WPN_E_GROUP_SIZE                                                          Handle        = 0x803E0209
+	WPN_E_GROUP_ALPHANUMERIC                                                  Handle        = 0x803E020A
+	WPN_E_CLOUD_DISABLED_FOR_APP                                              Handle        = 0x803E020B
+	E_MBN_CONTEXT_NOT_ACTIVATED                                               Handle        = 0x80548201
+	E_MBN_BAD_SIM                                                             Handle        = 0x80548202
+	E_MBN_DATA_CLASS_NOT_AVAILABLE                                            Handle        = 0x80548203
+	E_MBN_INVALID_ACCESS_STRING                                               Handle        = 0x80548204
+	E_MBN_MAX_ACTIVATED_CONTEXTS                                              Handle        = 0x80548205
+	E_MBN_PACKET_SVC_DETACHED                                                 Handle        = 0x80548206
+	E_MBN_PROVIDER_NOT_VISIBLE                                                Handle        = 0x80548207
+	E_MBN_RADIO_POWER_OFF                                                     Handle        = 0x80548208
+	E_MBN_SERVICE_NOT_ACTIVATED                                               Handle        = 0x80548209
+	E_MBN_SIM_NOT_INSERTED                                                    Handle        = 0x8054820A
+	E_MBN_VOICE_CALL_IN_PROGRESS                                              Handle        = 0x8054820B
+	E_MBN_INVALID_CACHE                                                       Handle        = 0x8054820C
+	E_MBN_NOT_REGISTERED                                                      Handle        = 0x8054820D
+	E_MBN_PROVIDERS_NOT_FOUND                                                 Handle        = 0x8054820E
+	E_MBN_PIN_NOT_SUPPORTED                                                   Handle        = 0x8054820F
+	E_MBN_PIN_REQUIRED                                                        Handle        = 0x80548210
+	E_MBN_PIN_DISABLED                                                        Handle        = 0x80548211
+	E_MBN_FAILURE                                                             Handle        = 0x80548212
+	E_MBN_INVALID_PROFILE                                                     Handle        = 0x80548218
+	E_MBN_DEFAULT_PROFILE_EXIST                                               Handle        = 0x80548219
+	E_MBN_SMS_ENCODING_NOT_SUPPORTED                                          Handle        = 0x80548220
+	E_MBN_SMS_FILTER_NOT_SUPPORTED                                            Handle        = 0x80548221
+	E_MBN_SMS_INVALID_MEMORY_INDEX                                            Handle        = 0x80548222
+	E_MBN_SMS_LANG_NOT_SUPPORTED                                              Handle        = 0x80548223
+	E_MBN_SMS_MEMORY_FAILURE                                                  Handle        = 0x80548224
+	E_MBN_SMS_NETWORK_TIMEOUT                                                 Handle        = 0x80548225
+	E_MBN_SMS_UNKNOWN_SMSC_ADDRESS                                            Handle        = 0x80548226
+	E_MBN_SMS_FORMAT_NOT_SUPPORTED                                            Handle        = 0x80548227
+	E_MBN_SMS_OPERATION_NOT_ALLOWED                                           Handle        = 0x80548228
+	E_MBN_SMS_MEMORY_FULL                                                     Handle        = 0x80548229
+	PEER_E_IPV6_NOT_INSTALLED                                                 Handle        = 0x80630001
+	PEER_E_NOT_INITIALIZED                                                    Handle        = 0x80630002
+	PEER_E_CANNOT_START_SERVICE                                               Handle        = 0x80630003
+	PEER_E_NOT_LICENSED                                                       Handle        = 0x80630004
+	PEER_E_INVALID_GRAPH                                                      Handle        = 0x80630010
+	PEER_E_DBNAME_CHANGED                                                     Handle        = 0x80630011
+	PEER_E_DUPLICATE_GRAPH                                                    Handle        = 0x80630012
+	PEER_E_GRAPH_NOT_READY                                                    Handle        = 0x80630013
+	PEER_E_GRAPH_SHUTTING_DOWN                                                Handle        = 0x80630014
+	PEER_E_GRAPH_IN_USE                                                       Handle        = 0x80630015
+	PEER_E_INVALID_DATABASE                                                   Handle        = 0x80630016
+	PEER_E_TOO_MANY_ATTRIBUTES                                                Handle        = 0x80630017
+	PEER_E_CONNECTION_NOT_FOUND                                               Handle        = 0x80630103
+	PEER_E_CONNECT_SELF                                                       Handle        = 0x80630106
+	PEER_E_ALREADY_LISTENING                                                  Handle        = 0x80630107
+	PEER_E_NODE_NOT_FOUND                                                     Handle        = 0x80630108
+	PEER_E_CONNECTION_FAILED                                                  Handle        = 0x80630109
+	PEER_E_CONNECTION_NOT_AUTHENTICATED                                       Handle        = 0x8063010A
+	PEER_E_CONNECTION_REFUSED                                                 Handle        = 0x8063010B
+	PEER_E_CLASSIFIER_TOO_LONG                                                Handle        = 0x80630201
+	PEER_E_TOO_MANY_IDENTITIES                                                Handle        = 0x80630202
+	PEER_E_NO_KEY_ACCESS                                                      Handle        = 0x80630203
+	PEER_E_GROUPS_EXIST                                                       Handle        = 0x80630204
+	PEER_E_RECORD_NOT_FOUND                                                   Handle        = 0x80630301
+	PEER_E_DATABASE_ACCESSDENIED                                              Handle        = 0x80630302
+	PEER_E_DBINITIALIZATION_FAILED                                            Handle        = 0x80630303
+	PEER_E_MAX_RECORD_SIZE_EXCEEDED                                           Handle        = 0x80630304
+	PEER_E_DATABASE_ALREADY_PRESENT                                           Handle        = 0x80630305
+	PEER_E_DATABASE_NOT_PRESENT                                               Handle        = 0x80630306
+	PEER_E_IDENTITY_NOT_FOUND                                                 Handle        = 0x80630401
+	PEER_E_EVENT_HANDLE_NOT_FOUND                                             Handle        = 0x80630501
+	PEER_E_INVALID_SEARCH                                                     Handle        = 0x80630601
+	PEER_E_INVALID_ATTRIBUTES                                                 Handle        = 0x80630602
+	PEER_E_INVITATION_NOT_TRUSTED                                             Handle        = 0x80630701
+	PEER_E_CHAIN_TOO_LONG                                                     Handle        = 0x80630703
+	PEER_E_INVALID_TIME_PERIOD                                                Handle        = 0x80630705
+	PEER_E_CIRCULAR_CHAIN_DETECTED                                            Handle        = 0x80630706
+	PEER_E_CERT_STORE_CORRUPTED                                               Handle        = 0x80630801
+	PEER_E_NO_CLOUD                                                           Handle        = 0x80631001
+	PEER_E_CLOUD_NAME_AMBIGUOUS                                               Handle        = 0x80631005
+	PEER_E_INVALID_RECORD                                                     Handle        = 0x80632010
+	PEER_E_NOT_AUTHORIZED                                                     Handle        = 0x80632020
+	PEER_E_PASSWORD_DOES_NOT_MEET_POLICY                                      Handle        = 0x80632021
+	PEER_E_DEFERRED_VALIDATION                                                Handle        = 0x80632030
+	PEER_E_INVALID_GROUP_PROPERTIES                                           Handle        = 0x80632040
+	PEER_E_INVALID_PEER_NAME                                                  Handle        = 0x80632050
+	PEER_E_INVALID_CLASSIFIER                                                 Handle        = 0x80632060
+	PEER_E_INVALID_FRIENDLY_NAME                                              Handle        = 0x80632070
+	PEER_E_INVALID_ROLE_PROPERTY                                              Handle        = 0x80632071
+	PEER_E_INVALID_CLASSIFIER_PROPERTY                                        Handle        = 0x80632072
+	PEER_E_INVALID_RECORD_EXPIRATION                                          Handle        = 0x80632080
+	PEER_E_INVALID_CREDENTIAL_INFO                                            Handle        = 0x80632081
+	PEER_E_INVALID_CREDENTIAL                                                 Handle        = 0x80632082
+	PEER_E_INVALID_RECORD_SIZE                                                Handle        = 0x80632083
+	PEER_E_UNSUPPORTED_VERSION                                                Handle        = 0x80632090
+	PEER_E_GROUP_NOT_READY                                                    Handle        = 0x80632091
+	PEER_E_GROUP_IN_USE                                                       Handle        = 0x80632092
+	PEER_E_INVALID_GROUP                                                      Handle        = 0x80632093
+	PEER_E_NO_MEMBERS_FOUND                                                   Handle        = 0x80632094
+	PEER_E_NO_MEMBER_CONNECTIONS                                              Handle        = 0x80632095
+	PEER_E_UNABLE_TO_LISTEN                                                   Handle        = 0x80632096
+	PEER_E_IDENTITY_DELETED                                                   Handle        = 0x806320A0
+	PEER_E_SERVICE_NOT_AVAILABLE                                              Handle        = 0x806320A1
+	PEER_E_CONTACT_NOT_FOUND                                                  Handle        = 0x80636001
+	PEER_S_GRAPH_DATA_CREATED                                                 Handle        = 0x00630001
+	PEER_S_NO_EVENT_DATA                                                      Handle        = 0x00630002
+	PEER_S_ALREADY_CONNECTED                                                  Handle        = 0x00632000
+	PEER_S_SUBSCRIPTION_EXISTS                                                Handle        = 0x00636000
+	PEER_S_NO_CONNECTIVITY                                                    Handle        = 0x00630005
+	PEER_S_ALREADY_A_MEMBER                                                   Handle        = 0x00630006
+	PEER_E_CANNOT_CONVERT_PEER_NAME                                           Handle        = 0x80634001
+	PEER_E_INVALID_PEER_HOST_NAME                                             Handle        = 0x80634002
+	PEER_E_NO_MORE                                                            Handle        = 0x80634003
+	PEER_E_PNRP_DUPLICATE_PEER_NAME                                           Handle        = 0x80634005
+	PEER_E_INVITE_CANCELLED                                                   Handle        = 0x80637000
+	PEER_E_INVITE_RESPONSE_NOT_AVAILABLE                                      Handle        = 0x80637001
+	PEER_E_NOT_SIGNED_IN                                                      Handle        = 0x80637003
+	PEER_E_PRIVACY_DECLINED                                                   Handle        = 0x80637004
+	PEER_E_TIMEOUT                                                            Handle        = 0x80637005
+	PEER_E_INVALID_ADDRESS                                                    Handle        = 0x80637007
+	PEER_E_FW_EXCEPTION_DISABLED                                              Handle        = 0x80637008
+	PEER_E_FW_BLOCKED_BY_POLICY                                               Handle        = 0x80637009
+	PEER_E_FW_BLOCKED_BY_SHIELDS_UP                                           Handle        = 0x8063700A
+	PEER_E_FW_DECLINED                                                        Handle        = 0x8063700B
+	UI_E_CREATE_FAILED                                                        Handle        = 0x802A0001
+	UI_E_SHUTDOWN_CALLED                                                      Handle        = 0x802A0002
+	UI_E_ILLEGAL_REENTRANCY                                                   Handle        = 0x802A0003
+	UI_E_OBJECT_SEALED                                                        Handle        = 0x802A0004
+	UI_E_VALUE_NOT_SET                                                        Handle        = 0x802A0005
+	UI_E_VALUE_NOT_DETERMINED                                                 Handle        = 0x802A0006
+	UI_E_INVALID_OUTPUT                                                       Handle        = 0x802A0007
+	UI_E_BOOLEAN_EXPECTED                                                     Handle        = 0x802A0008
+	UI_E_DIFFERENT_OWNER                                                      Handle        = 0x802A0009
+	UI_E_AMBIGUOUS_MATCH                                                      Handle        = 0x802A000A
+	UI_E_FP_OVERFLOW                                                          Handle        = 0x802A000B
+	UI_E_WRONG_THREAD                                                         Handle        = 0x802A000C
+	UI_E_STORYBOARD_ACTIVE                                                    Handle        = 0x802A0101
+	UI_E_STORYBOARD_NOT_PLAYING                                               Handle        = 0x802A0102
+	UI_E_START_KEYFRAME_AFTER_END                                             Handle        = 0x802A0103
+	UI_E_END_KEYFRAME_NOT_DETERMINED                                          Handle        = 0x802A0104
+	UI_E_LOOPS_OVERLAP                                                        Handle        = 0x802A0105
+	UI_E_TRANSITION_ALREADY_USED                                              Handle        = 0x802A0106
+	UI_E_TRANSITION_NOT_IN_STORYBOARD                                         Handle        = 0x802A0107
+	UI_E_TRANSITION_ECLIPSED                                                  Handle        = 0x802A0108
+	UI_E_TIME_BEFORE_LAST_UPDATE                                              Handle        = 0x802A0109
+	UI_E_TIMER_CLIENT_ALREADY_CONNECTED                                       Handle        = 0x802A010A
+	UI_E_INVALID_DIMENSION                                                    Handle        = 0x802A010B
+	UI_E_PRIMITIVE_OUT_OF_BOUNDS                                              Handle        = 0x802A010C
+	UI_E_WINDOW_CLOSED                                                        Handle        = 0x802A0201
+	E_BLUETOOTH_ATT_INVALID_HANDLE                                            Handle        = 0x80650001
+	E_BLUETOOTH_ATT_READ_NOT_PERMITTED                                        Handle        = 0x80650002
+	E_BLUETOOTH_ATT_WRITE_NOT_PERMITTED                                       Handle        = 0x80650003
+	E_BLUETOOTH_ATT_INVALID_PDU                                               Handle        = 0x80650004
+	E_BLUETOOTH_ATT_INSUFFICIENT_AUTHENTICATION                               Handle        = 0x80650005
+	E_BLUETOOTH_ATT_REQUEST_NOT_SUPPORTED                                     Handle        = 0x80650006
+	E_BLUETOOTH_ATT_INVALID_OFFSET                                            Handle        = 0x80650007
+	E_BLUETOOTH_ATT_INSUFFICIENT_AUTHORIZATION                                Handle        = 0x80650008
+	E_BLUETOOTH_ATT_PREPARE_QUEUE_FULL                                        Handle        = 0x80650009
+	E_BLUETOOTH_ATT_ATTRIBUTE_NOT_FOUND                                       Handle        = 0x8065000A
+	E_BLUETOOTH_ATT_ATTRIBUTE_NOT_LONG                                        Handle        = 0x8065000B
+	E_BLUETOOTH_ATT_INSUFFICIENT_ENCRYPTION_KEY_SIZE                          Handle        = 0x8065000C
+	E_BLUETOOTH_ATT_INVALID_ATTRIBUTE_VALUE_LENGTH                            Handle        = 0x8065000D
+	E_BLUETOOTH_ATT_UNLIKELY                                                  Handle        = 0x8065000E
+	E_BLUETOOTH_ATT_INSUFFICIENT_ENCRYPTION                                   Handle        = 0x8065000F
+	E_BLUETOOTH_ATT_UNSUPPORTED_GROUP_TYPE                                    Handle        = 0x80650010
+	E_BLUETOOTH_ATT_INSUFFICIENT_RESOURCES                                    Handle        = 0x80650011
+	E_BLUETOOTH_ATT_UNKNOWN_ERROR                                             Handle        = 0x80651000
+	E_AUDIO_ENGINE_NODE_NOT_FOUND                                             Handle        = 0x80660001
+	E_HDAUDIO_EMPTY_CONNECTION_LIST                                           Handle        = 0x80660002
+	E_HDAUDIO_CONNECTION_LIST_NOT_SUPPORTED                                   Handle        = 0x80660003
+	E_HDAUDIO_NO_LOGICAL_DEVICES_CREATED                                      Handle        = 0x80660004
+	E_HDAUDIO_NULL_LINKED_LIST_ENTRY                                          Handle        = 0x80660005
+	STATEREPOSITORY_E_CONCURRENCY_LOCKING_FAILURE                             Handle        = 0x80670001
+	STATEREPOSITORY_E_STATEMENT_INPROGRESS                                    Handle        = 0x80670002
+	STATEREPOSITORY_E_CONFIGURATION_INVALID                                   Handle        = 0x80670003
+	STATEREPOSITORY_E_UNKNOWN_SCHEMA_VERSION                                  Handle        = 0x80670004
+	STATEREPOSITORY_ERROR_DICTIONARY_CORRUPTED                                Handle        = 0x80670005
+	STATEREPOSITORY_E_BLOCKED                                                 Handle        = 0x80670006
+	STATEREPOSITORY_E_BUSY_RETRY                                              Handle        = 0x80670007
+	STATEREPOSITORY_E_BUSY_RECOVERY_RETRY                                     Handle        = 0x80670008
+	STATEREPOSITORY_E_LOCKED_RETRY                                            Handle        = 0x80670009
+	STATEREPOSITORY_E_LOCKED_SHAREDCACHE_RETRY                                Handle        = 0x8067000A
+	STATEREPOSITORY_E_TRANSACTION_REQUIRED                                    Handle        = 0x8067000B
+	STATEREPOSITORY_E_BUSY_TIMEOUT_EXCEEDED                                   Handle        = 0x8067000C
+	STATEREPOSITORY_E_BUSY_RECOVERY_TIMEOUT_EXCEEDED                          Handle        = 0x8067000D
+	STATEREPOSITORY_E_LOCKED_TIMEOUT_EXCEEDED                                 Handle        = 0x8067000E
+	STATEREPOSITORY_E_LOCKED_SHAREDCACHE_TIMEOUT_EXCEEDED                     Handle        = 0x8067000F
+	STATEREPOSITORY_E_SERVICE_STOP_IN_PROGRESS                                Handle        = 0x80670010
+	STATEREPOSTORY_E_NESTED_TRANSACTION_NOT_SUPPORTED                         Handle        = 0x80670011
+	STATEREPOSITORY_ERROR_CACHE_CORRUPTED                                     Handle        = 0x80670012
+	STATEREPOSITORY_TRANSACTION_CALLER_ID_CHANGED                             Handle        = 0x00670013
+	STATEREPOSITORY_TRANSACTION_IN_PROGRESS                                   Handle        = 0x00670014
+	ERROR_SPACES_POOL_WAS_DELETED                                             Handle        = 0x00E70001
+	ERROR_SPACES_FAULT_DOMAIN_TYPE_INVALID                                    Handle        = 0x80E70001
+	ERROR_SPACES_INTERNAL_ERROR                                               Handle        = 0x80E70002
+	ERROR_SPACES_RESILIENCY_TYPE_INVALID                                      Handle        = 0x80E70003
+	ERROR_SPACES_DRIVE_SECTOR_SIZE_INVALID                                    Handle        = 0x80E70004
+	ERROR_SPACES_DRIVE_REDUNDANCY_INVALID                                     Handle        = 0x80E70006
+	ERROR_SPACES_NUMBER_OF_DATA_COPIES_INVALID                                Handle        = 0x80E70007
+	ERROR_SPACES_PARITY_LAYOUT_INVALID                                        Handle        = 0x80E70008
+	ERROR_SPACES_INTERLEAVE_LENGTH_INVALID                                    Handle        = 0x80E70009
+	ERROR_SPACES_NUMBER_OF_COLUMNS_INVALID                                    Handle        = 0x80E7000A
+	ERROR_SPACES_NOT_ENOUGH_DRIVES                                            Handle        = 0x80E7000B
+	ERROR_SPACES_EXTENDED_ERROR                                               Handle        = 0x80E7000C
+	ERROR_SPACES_PROVISIONING_TYPE_INVALID                                    Handle        = 0x80E7000D
+	ERROR_SPACES_ALLOCATION_SIZE_INVALID                                      Handle        = 0x80E7000E
+	ERROR_SPACES_ENCLOSURE_AWARE_INVALID                                      Handle        = 0x80E7000F
+	ERROR_SPACES_WRITE_CACHE_SIZE_INVALID                                     Handle        = 0x80E70010
+	ERROR_SPACES_NUMBER_OF_GROUPS_INVALID                                     Handle        = 0x80E70011
+	ERROR_SPACES_DRIVE_OPERATIONAL_STATE_INVALID                              Handle        = 0x80E70012
+	ERROR_SPACES_ENTRY_INCOMPLETE                                             Handle        = 0x80E70013
+	ERROR_SPACES_ENTRY_INVALID                                                Handle        = 0x80E70014
+	ERROR_VOLSNAP_BOOTFILE_NOT_VALID                                          Handle        = 0x80820001
+	ERROR_VOLSNAP_ACTIVATION_TIMEOUT                                          Handle        = 0x80820002
+	ERROR_TIERING_NOT_SUPPORTED_ON_VOLUME                                     Handle        = 0x80830001
+	ERROR_TIERING_VOLUME_DISMOUNT_IN_PROGRESS                                 Handle        = 0x80830002
+	ERROR_TIERING_STORAGE_TIER_NOT_FOUND                                      Handle        = 0x80830003
+	ERROR_TIERING_INVALID_FILE_ID                                             Handle        = 0x80830004
+	ERROR_TIERING_WRONG_CLUSTER_NODE                                          Handle        = 0x80830005
+	ERROR_TIERING_ALREADY_PROCESSING                                          Handle        = 0x80830006
+	ERROR_TIERING_CANNOT_PIN_OBJECT                                           Handle        = 0x80830007
+	ERROR_TIERING_FILE_IS_NOT_PINNED                                          Handle        = 0x80830008
+	ERROR_NOT_A_TIERED_VOLUME                                                 Handle        = 0x80830009
+	ERROR_ATTRIBUTE_NOT_PRESENT                                               Handle        = 0x8083000A
+	ERROR_SECCORE_INVALID_COMMAND                                             Handle        = 0xC0E80000
+	ERROR_NO_APPLICABLE_APP_LICENSES_FOUND                                    Handle        = 0xC0EA0001
+	ERROR_CLIP_LICENSE_NOT_FOUND                                              Handle        = 0xC0EA0002
+	ERROR_CLIP_DEVICE_LICENSE_MISSING                                         Handle        = 0xC0EA0003
+	ERROR_CLIP_LICENSE_INVALID_SIGNATURE                                      Handle        = 0xC0EA0004
+	ERROR_CLIP_KEYHOLDER_LICENSE_MISSING_OR_INVALID                           Handle        = 0xC0EA0005
+	ERROR_CLIP_LICENSE_EXPIRED                                                Handle        = 0xC0EA0006
+	ERROR_CLIP_LICENSE_SIGNED_BY_UNKNOWN_SOURCE                               Handle        = 0xC0EA0007
+	ERROR_CLIP_LICENSE_NOT_SIGNED                                             Handle        = 0xC0EA0008
+	ERROR_CLIP_LICENSE_HARDWARE_ID_OUT_OF_TOLERANCE                           Handle        = 0xC0EA0009
+	ERROR_CLIP_LICENSE_DEVICE_ID_MISMATCH                                     Handle        = 0xC0EA000A
+	DXGI_STATUS_OCCLUDED                                                      Handle        = 0x087A0001
+	DXGI_STATUS_CLIPPED                                                       Handle        = 0x087A0002
+	DXGI_STATUS_NO_REDIRECTION                                                Handle        = 0x087A0004
+	DXGI_STATUS_NO_DESKTOP_ACCESS                                             Handle        = 0x087A0005
+	DXGI_STATUS_GRAPHICS_VIDPN_SOURCE_IN_USE                                  Handle        = 0x087A0006
+	DXGI_STATUS_MODE_CHANGED                                                  Handle        = 0x087A0007
+	DXGI_STATUS_MODE_CHANGE_IN_PROGRESS                                       Handle        = 0x087A0008
+	DXGI_ERROR_INVALID_CALL                                                   Handle        = 0x887A0001
+	DXGI_ERROR_NOT_FOUND                                                      Handle        = 0x887A0002
+	DXGI_ERROR_MORE_DATA                                                      Handle        = 0x887A0003
+	DXGI_ERROR_UNSUPPORTED                                                    Handle        = 0x887A0004
+	DXGI_ERROR_DEVICE_REMOVED                                                 Handle        = 0x887A0005
+	DXGI_ERROR_DEVICE_HUNG                                                    Handle        = 0x887A0006
+	DXGI_ERROR_DEVICE_RESET                                                   Handle        = 0x887A0007
+	DXGI_ERROR_WAS_STILL_DRAWING                                              Handle        = 0x887A000A
+	DXGI_ERROR_FRAME_STATISTICS_DISJOINT                                      Handle        = 0x887A000B
+	DXGI_ERROR_GRAPHICS_VIDPN_SOURCE_IN_USE                                   Handle        = 0x887A000C
+	DXGI_ERROR_DRIVER_INTERNAL_ERROR                                          Handle        = 0x887A0020
+	DXGI_ERROR_NONEXCLUSIVE                                                   Handle        = 0x887A0021
+	DXGI_ERROR_NOT_CURRENTLY_AVAILABLE                                        Handle        = 0x887A0022
+	DXGI_ERROR_REMOTE_CLIENT_DISCONNECTED                                     Handle        = 0x887A0023
+	DXGI_ERROR_REMOTE_OUTOFMEMORY                                             Handle        = 0x887A0024
+	DXGI_ERROR_ACCESS_LOST                                                    Handle        = 0x887A0026
+	DXGI_ERROR_WAIT_TIMEOUT                                                   Handle        = 0x887A0027
+	DXGI_ERROR_SESSION_DISCONNECTED                                           Handle        = 0x887A0028
+	DXGI_ERROR_RESTRICT_TO_OUTPUT_STALE                                       Handle        = 0x887A0029
+	DXGI_ERROR_CANNOT_PROTECT_CONTENT                                         Handle        = 0x887A002A
+	DXGI_ERROR_ACCESS_DENIED                                                  Handle        = 0x887A002B
+	DXGI_ERROR_NAME_ALREADY_EXISTS                                            Handle        = 0x887A002C
+	DXGI_ERROR_SDK_COMPONENT_MISSING                                          Handle        = 0x887A002D
+	DXGI_ERROR_NOT_CURRENT                                                    Handle        = 0x887A002E
+	DXGI_ERROR_HW_PROTECTION_OUTOFMEMORY                                      Handle        = 0x887A0030
+	DXGI_ERROR_DYNAMIC_CODE_POLICY_VIOLATION                                  Handle        = 0x887A0031
+	DXGI_ERROR_NON_COMPOSITED_UI                                              Handle        = 0x887A0032
+	DXGI_STATUS_UNOCCLUDED                                                    Handle        = 0x087A0009
+	DXGI_STATUS_DDA_WAS_STILL_DRAWING                                         Handle        = 0x087A000A
+	DXGI_ERROR_MODE_CHANGE_IN_PROGRESS                                        Handle        = 0x887A0025
+	DXGI_STATUS_PRESENT_REQUIRED                                              Handle        = 0x087A002F
+	DXGI_ERROR_CACHE_CORRUPT                                                  Handle        = 0x887A0033
+	DXGI_ERROR_CACHE_FULL                                                     Handle        = 0x887A0034
+	DXGI_ERROR_CACHE_HASH_COLLISION                                           Handle        = 0x887A0035
+	DXGI_ERROR_ALREADY_EXISTS                                                 Handle        = 0x887A0036
+	DXGI_DDI_ERR_WASSTILLDRAWING                                              Handle        = 0x887B0001
+	DXGI_DDI_ERR_UNSUPPORTED                                                  Handle        = 0x887B0002
+	DXGI_DDI_ERR_NONEXCLUSIVE                                                 Handle        = 0x887B0003
+	D3D10_ERROR_TOO_MANY_UNIQUE_STATE_OBJECTS                                 Handle        = 0x88790001
+	D3D10_ERROR_FILE_NOT_FOUND                                                Handle        = 0x88790002
+	D3D11_ERROR_TOO_MANY_UNIQUE_STATE_OBJECTS                                 Handle        = 0x887C0001
+	D3D11_ERROR_FILE_NOT_FOUND                                                Handle        = 0x887C0002
+	D3D11_ERROR_TOO_MANY_UNIQUE_VIEW_OBJECTS                                  Handle        = 0x887C0003
+	D3D11_ERROR_DEFERRED_CONTEXT_MAP_WITHOUT_INITIAL_DISCARD                  Handle        = 0x887C0004
+	D3D12_ERROR_ADAPTER_NOT_FOUND                                             Handle        = 0x887E0001
+	D3D12_ERROR_DRIVER_VERSION_MISMATCH                                       Handle        = 0x887E0002
+	D2DERR_WRONG_STATE                                                        Handle        = 0x88990001
+	D2DERR_NOT_INITIALIZED                                                    Handle        = 0x88990002
+	D2DERR_UNSUPPORTED_OPERATION                                              Handle        = 0x88990003
+	D2DERR_SCANNER_FAILED                                                     Handle        = 0x88990004
+	D2DERR_SCREEN_ACCESS_DENIED                                               Handle        = 0x88990005
+	D2DERR_DISPLAY_STATE_INVALID                                              Handle        = 0x88990006
+	D2DERR_ZERO_VECTOR                                                        Handle        = 0x88990007
+	D2DERR_INTERNAL_ERROR                                                     Handle        = 0x88990008
+	D2DERR_DISPLAY_FORMAT_NOT_SUPPORTED                                       Handle        = 0x88990009
+	D2DERR_INVALID_CALL                                                       Handle        = 0x8899000A
+	D2DERR_NO_HARDWARE_DEVICE                                                 Handle        = 0x8899000B
+	D2DERR_RECREATE_TARGET                                                    Handle        = 0x8899000C
+	D2DERR_TOO_MANY_SHADER_ELEMENTS                                           Handle        = 0x8899000D
+	D2DERR_SHADER_COMPILE_FAILED                                              Handle        = 0x8899000E
+	D2DERR_MAX_TEXTURE_SIZE_EXCEEDED                                          Handle        = 0x8899000F
+	D2DERR_UNSUPPORTED_VERSION                                                Handle        = 0x88990010
+	D2DERR_BAD_NUMBER                                                         Handle        = 0x88990011
+	D2DERR_WRONG_FACTORY                                                      Handle        = 0x88990012
+	D2DERR_LAYER_ALREADY_IN_USE                                               Handle        = 0x88990013
+	D2DERR_POP_CALL_DID_NOT_MATCH_PUSH                                        Handle        = 0x88990014
+	D2DERR_WRONG_RESOURCE_DOMAIN                                              Handle        = 0x88990015
+	D2DERR_PUSH_POP_UNBALANCED                                                Handle        = 0x88990016
+	D2DERR_RENDER_TARGET_HAS_LAYER_OR_CLIPRECT                                Handle        = 0x88990017
+	D2DERR_INCOMPATIBLE_BRUSH_TYPES                                           Handle        = 0x88990018
+	D2DERR_WIN32_ERROR                                                        Handle        = 0x88990019
+	D2DERR_TARGET_NOT_GDI_COMPATIBLE                                          Handle        = 0x8899001A
+	D2DERR_TEXT_EFFECT_IS_WRONG_TYPE                                          Handle        = 0x8899001B
+	D2DERR_TEXT_RENDERER_NOT_RELEASED                                         Handle        = 0x8899001C
+	D2DERR_EXCEEDS_MAX_BITMAP_SIZE                                            Handle        = 0x8899001D
+	D2DERR_INVALID_GRAPH_CONFIGURATION                                        Handle        = 0x8899001E
+	D2DERR_INVALID_INTERNAL_GRAPH_CONFIGURATION                               Handle        = 0x8899001F
+	D2DERR_CYCLIC_GRAPH                                                       Handle        = 0x88990020
+	D2DERR_BITMAP_CANNOT_DRAW                                                 Handle        = 0x88990021
+	D2DERR_OUTSTANDING_BITMAP_REFERENCES                                      Handle        = 0x88990022
+	D2DERR_ORIGINAL_TARGET_NOT_BOUND                                          Handle        = 0x88990023
+	D2DERR_INVALID_TARGET                                                     Handle        = 0x88990024
+	D2DERR_BITMAP_BOUND_AS_TARGET                                             Handle        = 0x88990025
+	D2DERR_INSUFFICIENT_DEVICE_CAPABILITIES                                   Handle        = 0x88990026
+	D2DERR_INTERMEDIATE_TOO_LARGE                                             Handle        = 0x88990027
+	D2DERR_EFFECT_IS_NOT_REGISTERED                                           Handle        = 0x88990028
+	D2DERR_INVALID_PROPERTY                                                   Handle        = 0x88990029
+	D2DERR_NO_SUBPROPERTIES                                                   Handle        = 0x8899002A
+	D2DERR_PRINT_JOB_CLOSED                                                   Handle        = 0x8899002B
+	D2DERR_PRINT_FORMAT_NOT_SUPPORTED                                         Handle        = 0x8899002C
+	D2DERR_TOO_MANY_TRANSFORM_INPUTS                                          Handle        = 0x8899002D
+	D2DERR_INVALID_GLYPH_IMAGE                                                Handle        = 0x8899002E
+	DWRITE_E_FILEFORMAT                                                       Handle        = 0x88985000
+	DWRITE_E_UNEXPECTED                                                       Handle        = 0x88985001
+	DWRITE_E_NOFONT                                                           Handle        = 0x88985002
+	DWRITE_E_FILENOTFOUND                                                     Handle        = 0x88985003
+	DWRITE_E_FILEACCESS                                                       Handle        = 0x88985004
+	DWRITE_E_FONTCOLLECTIONOBSOLETE                                           Handle        = 0x88985005
+	DWRITE_E_ALREADYREGISTERED                                                Handle        = 0x88985006
+	DWRITE_E_CACHEFORMAT                                                      Handle        = 0x88985007
+	DWRITE_E_CACHEVERSION                                                     Handle        = 0x88985008
+	DWRITE_E_UNSUPPORTEDOPERATION                                             Handle        = 0x88985009
+	DWRITE_E_TEXTRENDERERINCOMPATIBLE                                         Handle        = 0x8898500A
+	DWRITE_E_FLOWDIRECTIONCONFLICTS                                           Handle        = 0x8898500B
+	DWRITE_E_NOCOLOR                                                          Handle        = 0x8898500C
+	DWRITE_E_REMOTEFONT                                                       Handle        = 0x8898500D
+	DWRITE_E_DOWNLOADCANCELLED                                                Handle        = 0x8898500E
+	DWRITE_E_DOWNLOADFAILED                                                   Handle        = 0x8898500F
+	DWRITE_E_TOOMANYDOWNLOADS                                                 Handle        = 0x88985010
+	WINCODEC_ERR_WRONGSTATE                                                   Handle        = 0x88982F04
+	WINCODEC_ERR_VALUEOUTOFRANGE                                              Handle        = 0x88982F05
+	WINCODEC_ERR_UNKNOWNIMAGEFORMAT                                           Handle        = 0x88982F07
+	WINCODEC_ERR_UNSUPPORTEDVERSION                                           Handle        = 0x88982F0B
+	WINCODEC_ERR_NOTINITIALIZED                                               Handle        = 0x88982F0C
+	WINCODEC_ERR_ALREADYLOCKED                                                Handle        = 0x88982F0D
+	WINCODEC_ERR_PROPERTYNOTFOUND                                             Handle        = 0x88982F40
+	WINCODEC_ERR_PROPERTYNOTSUPPORTED                                         Handle        = 0x88982F41
+	WINCODEC_ERR_PROPERTYSIZE                                                 Handle        = 0x88982F42
+	WINCODEC_ERR_CODECPRESENT                                                 Handle        = 0x88982F43
+	WINCODEC_ERR_CODECNOTHUMBNAIL                                             Handle        = 0x88982F44
+	WINCODEC_ERR_PALETTEUNAVAILABLE                                           Handle        = 0x88982F45
+	WINCODEC_ERR_CODECTOOMANYSCANLINES                                        Handle        = 0x88982F46
+	WINCODEC_ERR_INTERNALERROR                                                Handle        = 0x88982F48
+	WINCODEC_ERR_SOURCERECTDOESNOTMATCHDIMENSIONS                             Handle        = 0x88982F49
+	WINCODEC_ERR_COMPONENTNOTFOUND                                            Handle        = 0x88982F50
+	WINCODEC_ERR_IMAGESIZEOUTOFRANGE                                          Handle        = 0x88982F51
+	WINCODEC_ERR_TOOMUCHMETADATA                                              Handle        = 0x88982F52
+	WINCODEC_ERR_BADIMAGE                                                     Handle        = 0x88982F60
+	WINCODEC_ERR_BADHEADER                                                    Handle        = 0x88982F61
+	WINCODEC_ERR_FRAMEMISSING                                                 Handle        = 0x88982F62
+	WINCODEC_ERR_BADMETADATAHEADER                                            Handle        = 0x88982F63
+	WINCODEC_ERR_BADSTREAMDATA                                                Handle        = 0x88982F70
+	WINCODEC_ERR_STREAMWRITE                                                  Handle        = 0x88982F71
+	WINCODEC_ERR_STREAMREAD                                                   Handle        = 0x88982F72
+	WINCODEC_ERR_STREAMNOTAVAILABLE                                           Handle        = 0x88982F73
+	WINCODEC_ERR_UNSUPPORTEDPIXELFORMAT                                       Handle        = 0x88982F80
+	WINCODEC_ERR_UNSUPPORTEDOPERATION                                         Handle        = 0x88982F81
+	WINCODEC_ERR_INVALIDREGISTRATION                                          Handle        = 0x88982F8A
+	WINCODEC_ERR_COMPONENTINITIALIZEFAILURE                                   Handle        = 0x88982F8B
+	WINCODEC_ERR_INSUFFICIENTBUFFER                                           Handle        = 0x88982F8C
+	WINCODEC_ERR_DUPLICATEMETADATAPRESENT                                     Handle        = 0x88982F8D
+	WINCODEC_ERR_PROPERTYUNEXPECTEDTYPE                                       Handle        = 0x88982F8E
+	WINCODEC_ERR_UNEXPECTEDSIZE                                               Handle        = 0x88982F8F
+	WINCODEC_ERR_INVALIDQUERYREQUEST                                          Handle        = 0x88982F90
+	WINCODEC_ERR_UNEXPECTEDMETADATATYPE                                       Handle        = 0x88982F91
+	WINCODEC_ERR_REQUESTONLYVALIDATMETADATAROOT                               Handle        = 0x88982F92
+	WINCODEC_ERR_INVALIDQUERYCHARACTER                                        Handle        = 0x88982F93
+	WINCODEC_ERR_WIN32ERROR                                                   Handle        = 0x88982F94
+	WINCODEC_ERR_INVALIDPROGRESSIVELEVEL                                      Handle        = 0x88982F95
+	WINCODEC_ERR_INVALIDJPEGSCANINDEX                                         Handle        = 0x88982F96
+	MILERR_OBJECTBUSY                                                         Handle        = 0x88980001
+	MILERR_INSUFFICIENTBUFFER                                                 Handle        = 0x88980002
+	MILERR_WIN32ERROR                                                         Handle        = 0x88980003
+	MILERR_SCANNER_FAILED                                                     Handle        = 0x88980004
+	MILERR_SCREENACCESSDENIED                                                 Handle        = 0x88980005
+	MILERR_DISPLAYSTATEINVALID                                                Handle        = 0x88980006
+	MILERR_NONINVERTIBLEMATRIX                                                Handle        = 0x88980007
+	MILERR_ZEROVECTOR                                                         Handle        = 0x88980008
+	MILERR_TERMINATED                                                         Handle        = 0x88980009
+	MILERR_BADNUMBER                                                          Handle        = 0x8898000A
+	MILERR_INTERNALERROR                                                      Handle        = 0x88980080
+	MILERR_DISPLAYFORMATNOTSUPPORTED                                          Handle        = 0x88980084
+	MILERR_INVALIDCALL                                                        Handle        = 0x88980085
+	MILERR_ALREADYLOCKED                                                      Handle        = 0x88980086
+	MILERR_NOTLOCKED                                                          Handle        = 0x88980087
+	MILERR_DEVICECANNOTRENDERTEXT                                             Handle        = 0x88980088
+	MILERR_GLYPHBITMAPMISSED                                                  Handle        = 0x88980089
+	MILERR_MALFORMEDGLYPHCACHE                                                Handle        = 0x8898008A
+	MILERR_GENERIC_IGNORE                                                     Handle        = 0x8898008B
+	MILERR_MALFORMED_GUIDELINE_DATA                                           Handle        = 0x8898008C
+	MILERR_NO_HARDWARE_DEVICE                                                 Handle        = 0x8898008D
+	MILERR_NEED_RECREATE_AND_PRESENT                                          Handle        = 0x8898008E
+	MILERR_ALREADY_INITIALIZED                                                Handle        = 0x8898008F
+	MILERR_MISMATCHED_SIZE                                                    Handle        = 0x88980090
+	MILERR_NO_REDIRECTION_SURFACE_AVAILABLE                                   Handle        = 0x88980091
+	MILERR_REMOTING_NOT_SUPPORTED                                             Handle        = 0x88980092
+	MILERR_QUEUED_PRESENT_NOT_SUPPORTED                                       Handle        = 0x88980093
+	MILERR_NOT_QUEUING_PRESENTS                                               Handle        = 0x88980094
+	MILERR_NO_REDIRECTION_SURFACE_RETRY_LATER                                 Handle        = 0x88980095
+	MILERR_TOOMANYSHADERELEMNTS                                               Handle        = 0x88980096
+	MILERR_MROW_READLOCK_FAILED                                               Handle        = 0x88980097
+	MILERR_MROW_UPDATE_FAILED                                                 Handle        = 0x88980098
+	MILERR_SHADER_COMPILE_FAILED                                              Handle        = 0x88980099
+	MILERR_MAX_TEXTURE_SIZE_EXCEEDED                                          Handle        = 0x8898009A
+	MILERR_QPC_TIME_WENT_BACKWARD                                             Handle        = 0x8898009B
+	MILERR_DXGI_ENUMERATION_OUT_OF_SYNC                                       Handle        = 0x8898009D
+	MILERR_ADAPTER_NOT_FOUND                                                  Handle        = 0x8898009E
+	MILERR_COLORSPACE_NOT_SUPPORTED                                           Handle        = 0x8898009F
+	MILERR_PREFILTER_NOT_SUPPORTED                                            Handle        = 0x889800A0
+	MILERR_DISPLAYID_ACCESS_DENIED                                            Handle        = 0x889800A1
+	UCEERR_INVALIDPACKETHEADER                                                Handle        = 0x88980400
+	UCEERR_UNKNOWNPACKET                                                      Handle        = 0x88980401
+	UCEERR_ILLEGALPACKET                                                      Handle        = 0x88980402
+	UCEERR_MALFORMEDPACKET                                                    Handle        = 0x88980403
+	UCEERR_ILLEGALHANDLE                                                      Handle        = 0x88980404
+	UCEERR_HANDLELOOKUPFAILED                                                 Handle        = 0x88980405
+	UCEERR_RENDERTHREADFAILURE                                                Handle        = 0x88980406
+	UCEERR_CTXSTACKFRSTTARGETNULL                                             Handle        = 0x88980407
+	UCEERR_CONNECTIONIDLOOKUPFAILED                                           Handle        = 0x88980408
+	UCEERR_BLOCKSFULL                                                         Handle        = 0x88980409
+	UCEERR_MEMORYFAILURE                                                      Handle        = 0x8898040A
+	UCEERR_PACKETRECORDOUTOFRANGE                                             Handle        = 0x8898040B
+	UCEERR_ILLEGALRECORDTYPE                                                  Handle        = 0x8898040C
+	UCEERR_OUTOFHANDLES                                                       Handle        = 0x8898040D
+	UCEERR_UNCHANGABLE_UPDATE_ATTEMPTED                                       Handle        = 0x8898040E
+	UCEERR_NO_MULTIPLE_WORKER_THREADS                                         Handle        = 0x8898040F
+	UCEERR_REMOTINGNOTSUPPORTED                                               Handle        = 0x88980410
+	UCEERR_MISSINGENDCOMMAND                                                  Handle        = 0x88980411
+	UCEERR_MISSINGBEGINCOMMAND                                                Handle        = 0x88980412
+	UCEERR_CHANNELSYNCTIMEDOUT                                                Handle        = 0x88980413
+	UCEERR_CHANNELSYNCABANDONED                                               Handle        = 0x88980414
+	UCEERR_UNSUPPORTEDTRANSPORTVERSION                                        Handle        = 0x88980415
+	UCEERR_TRANSPORTUNAVAILABLE                                               Handle        = 0x88980416
+	UCEERR_FEEDBACK_UNSUPPORTED                                               Handle        = 0x88980417
+	UCEERR_COMMANDTRANSPORTDENIED                                             Handle        = 0x88980418
+	UCEERR_GRAPHICSSTREAMUNAVAILABLE                                          Handle        = 0x88980419
+	UCEERR_GRAPHICSSTREAMALREADYOPEN                                          Handle        = 0x88980420
+	UCEERR_TRANSPORTDISCONNECTED                                              Handle        = 0x88980421
+	UCEERR_TRANSPORTOVERLOADED                                                Handle        = 0x88980422
+	UCEERR_PARTITION_ZOMBIED                                                  Handle        = 0x88980423
+	MILAVERR_NOCLOCK                                                          Handle        = 0x88980500
+	MILAVERR_NOMEDIATYPE                                                      Handle        = 0x88980501
+	MILAVERR_NOVIDEOMIXER                                                     Handle        = 0x88980502
+	MILAVERR_NOVIDEOPRESENTER                                                 Handle        = 0x88980503
+	MILAVERR_NOREADYFRAMES                                                    Handle        = 0x88980504
+	MILAVERR_MODULENOTLOADED                                                  Handle        = 0x88980505
+	MILAVERR_WMPFACTORYNOTREGISTERED                                          Handle        = 0x88980506
+	MILAVERR_INVALIDWMPVERSION                                                Handle        = 0x88980507
+	MILAVERR_INSUFFICIENTVIDEORESOURCES                                       Handle        = 0x88980508
+	MILAVERR_VIDEOACCELERATIONNOTAVAILABLE                                    Handle        = 0x88980509
+	MILAVERR_REQUESTEDTEXTURETOOBIG                                           Handle        = 0x8898050A
+	MILAVERR_SEEKFAILED                                                       Handle        = 0x8898050B
+	MILAVERR_UNEXPECTEDWMPFAILURE                                             Handle        = 0x8898050C
+	MILAVERR_MEDIAPLAYERCLOSED                                                Handle        = 0x8898050D
+	MILAVERR_UNKNOWNHARDWAREERROR                                             Handle        = 0x8898050E
+	MILEFFECTSERR_UNKNOWNPROPERTY                                             Handle        = 0x8898060E
+	MILEFFECTSERR_EFFECTNOTPARTOFGROUP                                        Handle        = 0x8898060F
+	MILEFFECTSERR_NOINPUTSOURCEATTACHED                                       Handle        = 0x88980610
+	MILEFFECTSERR_CONNECTORNOTCONNECTED                                       Handle        = 0x88980611
+	MILEFFECTSERR_CONNECTORNOTASSOCIATEDWITHEFFECT                            Handle        = 0x88980612
+	MILEFFECTSERR_RESERVED                                                    Handle        = 0x88980613
+	MILEFFECTSERR_CYCLEDETECTED                                               Handle        = 0x88980614
+	MILEFFECTSERR_EFFECTINMORETHANONEGRAPH                                    Handle        = 0x88980615
+	MILEFFECTSERR_EFFECTALREADYINAGRAPH                                       Handle        = 0x88980616
+	MILEFFECTSERR_EFFECTHASNOCHILDREN                                         Handle        = 0x88980617
+	MILEFFECTSERR_ALREADYATTACHEDTOLISTENER                                   Handle        = 0x88980618
+	MILEFFECTSERR_NOTAFFINETRANSFORM                                          Handle        = 0x88980619
+	MILEFFECTSERR_EMPTYBOUNDS                                                 Handle        = 0x8898061A
+	MILEFFECTSERR_OUTPUTSIZETOOLARGE                                          Handle        = 0x8898061B
+	DWMERR_STATE_TRANSITION_FAILED                                            Handle        = 0x88980700
+	DWMERR_THEME_FAILED                                                       Handle        = 0x88980701
+	DWMERR_CATASTROPHIC_FAILURE                                               Handle        = 0x88980702
+	DCOMPOSITION_ERROR_WINDOW_ALREADY_COMPOSED                                Handle        = 0x88980800
+	DCOMPOSITION_ERROR_SURFACE_BEING_RENDERED                                 Handle        = 0x88980801
+	DCOMPOSITION_ERROR_SURFACE_NOT_BEING_RENDERED                             Handle        = 0x88980802
+	ONL_E_INVALID_AUTHENTICATION_TARGET                                       Handle        = 0x80860001
+	ONL_E_ACCESS_DENIED_BY_TOU                                                Handle        = 0x80860002
+	ONL_E_INVALID_APPLICATION                                                 Handle        = 0x80860003
+	ONL_E_PASSWORD_UPDATE_REQUIRED                                            Handle        = 0x80860004
+	ONL_E_ACCOUNT_UPDATE_REQUIRED                                             Handle        = 0x80860005
+	ONL_E_FORCESIGNIN                                                         Handle        = 0x80860006
+	ONL_E_ACCOUNT_LOCKED                                                      Handle        = 0x80860007
+	ONL_E_PARENTAL_CONSENT_REQUIRED                                           Handle        = 0x80860008
+	ONL_E_EMAIL_VERIFICATION_REQUIRED                                         Handle        = 0x80860009
+	ONL_E_ACCOUNT_SUSPENDED_COMPROIMISE                                       Handle        = 0x8086000A
+	ONL_E_ACCOUNT_SUSPENDED_ABUSE                                             Handle        = 0x8086000B
+	ONL_E_ACTION_REQUIRED                                                     Handle        = 0x8086000C
+	ONL_CONNECTION_COUNT_LIMIT                                                Handle        = 0x8086000D
+	ONL_E_CONNECTED_ACCOUNT_CAN_NOT_SIGNOUT                                   Handle        = 0x8086000E
+	ONL_E_USER_AUTHENTICATION_REQUIRED                                        Handle        = 0x8086000F
+	ONL_E_REQUEST_THROTTLED                                                   Handle        = 0x80860010
+	FA_E_MAX_PERSISTED_ITEMS_REACHED                                          Handle        = 0x80270220
+	FA_E_HOMEGROUP_NOT_AVAILABLE                                              Handle        = 0x80270222
+	E_MONITOR_RESOLUTION_TOO_LOW                                              Handle        = 0x80270250
+	E_ELEVATED_ACTIVATION_NOT_SUPPORTED                                       Handle        = 0x80270251
+	E_UAC_DISABLED                                                            Handle        = 0x80270252
+	E_FULL_ADMIN_NOT_SUPPORTED                                                Handle        = 0x80270253
+	E_APPLICATION_NOT_REGISTERED                                              Handle        = 0x80270254
+	E_MULTIPLE_EXTENSIONS_FOR_APPLICATION                                     Handle        = 0x80270255
+	E_MULTIPLE_PACKAGES_FOR_FAMILY                                            Handle        = 0x80270256
+	E_APPLICATION_MANAGER_NOT_RUNNING                                         Handle        = 0x80270257
+	S_STORE_LAUNCHED_FOR_REMEDIATION                                          Handle        = 0x00270258
+	S_APPLICATION_ACTIVATION_ERROR_HANDLED_BY_DIALOG                          Handle        = 0x00270259
+	E_APPLICATION_ACTIVATION_TIMED_OUT                                        Handle        = 0x8027025A
+	E_APPLICATION_ACTIVATION_EXEC_FAILURE                                     Handle        = 0x8027025B
+	E_APPLICATION_TEMPORARY_LICENSE_ERROR                                     Handle        = 0x8027025C
+	E_APPLICATION_TRIAL_LICENSE_EXPIRED                                       Handle        = 0x8027025D
+	E_SKYDRIVE_ROOT_TARGET_FILE_SYSTEM_NOT_SUPPORTED                          Handle        = 0x80270260
+	E_SKYDRIVE_ROOT_TARGET_OVERLAP                                            Handle        = 0x80270261
+	E_SKYDRIVE_ROOT_TARGET_CANNOT_INDEX                                       Handle        = 0x80270262
+	E_SKYDRIVE_FILE_NOT_UPLOADED                                              Handle        = 0x80270263
+	E_SKYDRIVE_UPDATE_AVAILABILITY_FAIL                                       Handle        = 0x80270264
+	E_SKYDRIVE_ROOT_TARGET_VOLUME_ROOT_NOT_SUPPORTED                          Handle        = 0x80270265
+	E_SYNCENGINE_FILE_SIZE_OVER_LIMIT                                         Handle        = 0x8802B001
+	E_SYNCENGINE_FILE_SIZE_EXCEEDS_REMAINING_QUOTA                            Handle        = 0x8802B002
+	E_SYNCENGINE_UNSUPPORTED_FILE_NAME                                        Handle        = 0x8802B003
+	E_SYNCENGINE_FOLDER_ITEM_COUNT_LIMIT_EXCEEDED                             Handle        = 0x8802B004
+	E_SYNCENGINE_FILE_SYNC_PARTNER_ERROR                                      Handle        = 0x8802B005
+	E_SYNCENGINE_SYNC_PAUSED_BY_SERVICE                                       Handle        = 0x8802B006
+	E_SYNCENGINE_FILE_IDENTIFIER_UNKNOWN                                      Handle        = 0x8802C002
+	E_SYNCENGINE_SERVICE_AUTHENTICATION_FAILED                                Handle        = 0x8802C003
+	E_SYNCENGINE_UNKNOWN_SERVICE_ERROR                                        Handle        = 0x8802C004
+	E_SYNCENGINE_SERVICE_RETURNED_UNEXPECTED_SIZE                             Handle        = 0x8802C005
+	E_SYNCENGINE_REQUEST_BLOCKED_BY_SERVICE                                   Handle        = 0x8802C006
+	E_SYNCENGINE_REQUEST_BLOCKED_DUE_TO_CLIENT_ERROR                          Handle        = 0x8802C007
+	E_SYNCENGINE_FOLDER_INACCESSIBLE                                          Handle        = 0x8802D001
+	E_SYNCENGINE_UNSUPPORTED_FOLDER_NAME                                      Handle        = 0x8802D002
+	E_SYNCENGINE_UNSUPPORTED_MARKET                                           Handle        = 0x8802D003
+	E_SYNCENGINE_PATH_LENGTH_LIMIT_EXCEEDED                                   Handle        = 0x8802D004
+	E_SYNCENGINE_REMOTE_PATH_LENGTH_LIMIT_EXCEEDED                            Handle        = 0x8802D005
+	E_SYNCENGINE_CLIENT_UPDATE_NEEDED                                         Handle        = 0x8802D006
+	E_SYNCENGINE_PROXY_AUTHENTICATION_REQUIRED                                Handle        = 0x8802D007
+	E_SYNCENGINE_STORAGE_SERVICE_PROVISIONING_FAILED                          Handle        = 0x8802D008
+	E_SYNCENGINE_UNSUPPORTED_REPARSE_POINT                                    Handle        = 0x8802D009
+	E_SYNCENGINE_STORAGE_SERVICE_BLOCKED                                      Handle        = 0x8802D00A
+	E_SYNCENGINE_FOLDER_IN_REDIRECTION                                        Handle        = 0x8802D00B
+	EAS_E_POLICY_NOT_MANAGED_BY_OS                                            Handle        = 0x80550001
+	EAS_E_POLICY_COMPLIANT_WITH_ACTIONS                                       Handle        = 0x80550002
+	EAS_E_REQUESTED_POLICY_NOT_ENFORCEABLE                                    Handle        = 0x80550003
+	EAS_E_CURRENT_USER_HAS_BLANK_PASSWORD                                     Handle        = 0x80550004
+	EAS_E_REQUESTED_POLICY_PASSWORD_EXPIRATION_INCOMPATIBLE                   Handle        = 0x80550005
+	EAS_E_USER_CANNOT_CHANGE_PASSWORD                                         Handle        = 0x80550006
+	EAS_E_ADMINS_HAVE_BLANK_PASSWORD                                          Handle        = 0x80550007
+	EAS_E_ADMINS_CANNOT_CHANGE_PASSWORD                                       Handle        = 0x80550008
+	EAS_E_LOCAL_CONTROLLED_USERS_CANNOT_CHANGE_PASSWORD                       Handle        = 0x80550009
+	EAS_E_PASSWORD_POLICY_NOT_ENFORCEABLE_FOR_CONNECTED_ADMINS                Handle        = 0x8055000A
+	EAS_E_CONNECTED_ADMINS_NEED_TO_CHANGE_PASSWORD                            Handle        = 0x8055000B
+	EAS_E_PASSWORD_POLICY_NOT_ENFORCEABLE_FOR_CURRENT_CONNECTED_USER          Handle        = 0x8055000C
+	EAS_E_CURRENT_CONNECTED_USER_NEED_TO_CHANGE_PASSWORD                      Handle        = 0x8055000D
+	WEB_E_UNSUPPORTED_FORMAT                                                  Handle        = 0x83750001
+	WEB_E_INVALID_XML                                                         Handle        = 0x83750002
+	WEB_E_MISSING_REQUIRED_ELEMENT                                            Handle        = 0x83750003
+	WEB_E_MISSING_REQUIRED_ATTRIBUTE                                          Handle        = 0x83750004
+	WEB_E_UNEXPECTED_CONTENT                                                  Handle        = 0x83750005
+	WEB_E_RESOURCE_TOO_LARGE                                                  Handle        = 0x83750006
+	WEB_E_INVALID_JSON_STRING                                                 Handle        = 0x83750007
+	WEB_E_INVALID_JSON_NUMBER                                                 Handle        = 0x83750008
+	WEB_E_JSON_VALUE_NOT_FOUND                                                Handle        = 0x83750009
+	HTTP_E_STATUS_UNEXPECTED                                                  Handle        = 0x80190001
+	HTTP_E_STATUS_UNEXPECTED_REDIRECTION                                      Handle        = 0x80190003
+	HTTP_E_STATUS_UNEXPECTED_CLIENT_ERROR                                     Handle        = 0x80190004
+	HTTP_E_STATUS_UNEXPECTED_SERVER_ERROR                                     Handle        = 0x80190005
+	HTTP_E_STATUS_AMBIGUOUS                                                   Handle        = 0x8019012C
+	HTTP_E_STATUS_MOVED                                                       Handle        = 0x8019012D
+	HTTP_E_STATUS_REDIRECT                                                    Handle        = 0x8019012E
+	HTTP_E_STATUS_REDIRECT_METHOD                                             Handle        = 0x8019012F
+	HTTP_E_STATUS_NOT_MODIFIED                                                Handle        = 0x80190130
+	HTTP_E_STATUS_USE_PROXY                                                   Handle        = 0x80190131
+	HTTP_E_STATUS_REDIRECT_KEEP_VERB                                          Handle        = 0x80190133
+	HTTP_E_STATUS_BAD_REQUEST                                                 Handle        = 0x80190190
+	HTTP_E_STATUS_DENIED                                                      Handle        = 0x80190191
+	HTTP_E_STATUS_PAYMENT_REQ                                                 Handle        = 0x80190192
+	HTTP_E_STATUS_FORBIDDEN                                                   Handle        = 0x80190193
+	HTTP_E_STATUS_NOT_FOUND                                                   Handle        = 0x80190194
+	HTTP_E_STATUS_BAD_METHOD                                                  Handle        = 0x80190195
+	HTTP_E_STATUS_NONE_ACCEPTABLE                                             Handle        = 0x80190196
+	HTTP_E_STATUS_PROXY_AUTH_REQ                                              Handle        = 0x80190197
+	HTTP_E_STATUS_REQUEST_TIMEOUT                                             Handle        = 0x80190198
+	HTTP_E_STATUS_CONFLICT                                                    Handle        = 0x80190199
+	HTTP_E_STATUS_GONE                                                        Handle        = 0x8019019A
+	HTTP_E_STATUS_LENGTH_REQUIRED                                             Handle        = 0x8019019B
+	HTTP_E_STATUS_PRECOND_FAILED                                              Handle        = 0x8019019C
+	HTTP_E_STATUS_REQUEST_TOO_LARGE                                           Handle        = 0x8019019D
+	HTTP_E_STATUS_URI_TOO_LONG                                                Handle        = 0x8019019E
+	HTTP_E_STATUS_UNSUPPORTED_MEDIA                                           Handle        = 0x8019019F
+	HTTP_E_STATUS_RANGE_NOT_SATISFIABLE                                       Handle        = 0x801901A0
+	HTTP_E_STATUS_EXPECTATION_FAILED                                          Handle        = 0x801901A1
+	HTTP_E_STATUS_SERVER_ERROR                                                Handle        = 0x801901F4
+	HTTP_E_STATUS_NOT_SUPPORTED                                               Handle        = 0x801901F5
+	HTTP_E_STATUS_BAD_GATEWAY                                                 Handle        = 0x801901F6
+	HTTP_E_STATUS_SERVICE_UNAVAIL                                             Handle        = 0x801901F7
+	HTTP_E_STATUS_GATEWAY_TIMEOUT                                             Handle        = 0x801901F8
+	HTTP_E_STATUS_VERSION_NOT_SUP                                             Handle        = 0x801901F9
+	E_INVALID_PROTOCOL_OPERATION                                              Handle        = 0x83760001
+	E_INVALID_PROTOCOL_FORMAT                                                 Handle        = 0x83760002
+	E_PROTOCOL_EXTENSIONS_NOT_SUPPORTED                                       Handle        = 0x83760003
+	E_SUBPROTOCOL_NOT_SUPPORTED                                               Handle        = 0x83760004
+	E_PROTOCOL_VERSION_NOT_SUPPORTED                                          Handle        = 0x83760005
+	INPUT_E_OUT_OF_ORDER                                                      Handle        = 0x80400000
+	INPUT_E_REENTRANCY                                                        Handle        = 0x80400001
+	INPUT_E_MULTIMODAL                                                        Handle        = 0x80400002
+	INPUT_E_PACKET                                                            Handle        = 0x80400003
+	INPUT_E_FRAME                                                             Handle        = 0x80400004
+	INPUT_E_HISTORY                                                           Handle        = 0x80400005
+	INPUT_E_DEVICE_INFO                                                       Handle        = 0x80400006
+	INPUT_E_TRANSFORM                                                         Handle        = 0x80400007
+	INPUT_E_DEVICE_PROPERTY                                                   Handle        = 0x80400008
+	INET_E_INVALID_URL                                                        Handle        = 0x800C0002
+	INET_E_NO_SESSION                                                         Handle        = 0x800C0003
+	INET_E_CANNOT_CONNECT                                                     Handle        = 0x800C0004
+	INET_E_RESOURCE_NOT_FOUND                                                 Handle        = 0x800C0005
+	INET_E_OBJECT_NOT_FOUND                                                   Handle        = 0x800C0006
+	INET_E_DATA_NOT_AVAILABLE                                                 Handle        = 0x800C0007
+	INET_E_DOWNLOAD_FAILURE                                                   Handle        = 0x800C0008
+	INET_E_AUTHENTICATION_REQUIRED                                            Handle        = 0x800C0009
+	INET_E_NO_VALID_MEDIA                                                     Handle        = 0x800C000A
+	INET_E_CONNECTION_TIMEOUT                                                 Handle        = 0x800C000B
+	INET_E_INVALID_REQUEST                                                    Handle        = 0x800C000C
+	INET_E_UNKNOWN_PROTOCOL                                                   Handle        = 0x800C000D
+	INET_E_SECURITY_PROBLEM                                                   Handle        = 0x800C000E
+	INET_E_CANNOT_LOAD_DATA                                                   Handle        = 0x800C000F
+	INET_E_CANNOT_INSTANTIATE_OBJECT                                          Handle        = 0x800C0010
+	INET_E_INVALID_CERTIFICATE                                                Handle        = 0x800C0019
+	INET_E_REDIRECT_FAILED                                                    Handle        = 0x800C0014
+	INET_E_REDIRECT_TO_DIR                                                    Handle        = 0x800C0015
+	ERROR_DBG_CREATE_PROCESS_FAILURE_LOCKDOWN                                 Handle        = 0x80B00001
+	ERROR_DBG_ATTACH_PROCESS_FAILURE_LOCKDOWN                                 Handle        = 0x80B00002
+	ERROR_DBG_CONNECT_SERVER_FAILURE_LOCKDOWN                                 Handle        = 0x80B00003
+	ERROR_DBG_START_SERVER_FAILURE_LOCKDOWN                                   Handle        = 0x80B00004
+	ERROR_IO_PREEMPTED                                                        Handle        = 0x89010001
+	JSCRIPT_E_CANTEXECUTE                                                     Handle        = 0x89020001
+	WEP_E_NOT_PROVISIONED_ON_ALL_VOLUMES                                      Handle        = 0x88010001
+	WEP_E_FIXED_DATA_NOT_SUPPORTED                                            Handle        = 0x88010002
+	WEP_E_HARDWARE_NOT_COMPLIANT                                              Handle        = 0x88010003
+	WEP_E_LOCK_NOT_CONFIGURED                                                 Handle        = 0x88010004
+	WEP_E_PROTECTION_SUSPENDED                                                Handle        = 0x88010005
+	WEP_E_NO_LICENSE                                                          Handle        = 0x88010006
+	WEP_E_OS_NOT_PROTECTED                                                    Handle        = 0x88010007
+	WEP_E_UNEXPECTED_FAIL                                                     Handle        = 0x88010008
+	WEP_E_BUFFER_TOO_LARGE                                                    Handle        = 0x88010009
+	ERROR_SVHDX_ERROR_STORED                                                  Handle        = 0xC05C0000
+	ERROR_SVHDX_ERROR_NOT_AVAILABLE                                           Handle        = 0xC05CFF00
+	ERROR_SVHDX_UNIT_ATTENTION_AVAILABLE                                      Handle        = 0xC05CFF01
+	ERROR_SVHDX_UNIT_ATTENTION_CAPACITY_DATA_CHANGED                          Handle        = 0xC05CFF02
+	ERROR_SVHDX_UNIT_ATTENTION_RESERVATIONS_PREEMPTED                         Handle        = 0xC05CFF03
+	ERROR_SVHDX_UNIT_ATTENTION_RESERVATIONS_RELEASED                          Handle        = 0xC05CFF04
+	ERROR_SVHDX_UNIT_ATTENTION_REGISTRATIONS_PREEMPTED                        Handle        = 0xC05CFF05
+	ERROR_SVHDX_UNIT_ATTENTION_OPERATING_DEFINITION_CHANGED                   Handle        = 0xC05CFF06
+	ERROR_SVHDX_RESERVATION_CONFLICT                                          Handle        = 0xC05CFF07
+	ERROR_SVHDX_WRONG_FILE_TYPE                                               Handle        = 0xC05CFF08
+	ERROR_SVHDX_VERSION_MISMATCH                                              Handle        = 0xC05CFF09
+	ERROR_VHD_SHARED                                                          Handle        = 0xC05CFF0A
+	ERROR_SVHDX_NO_INITIATOR                                                  Handle        = 0xC05CFF0B
+	ERROR_VHDSET_BACKING_STORAGE_NOT_FOUND                                    Handle        = 0xC05CFF0C
+	ERROR_SMB_NO_PREAUTH_INTEGRITY_HASH_OVERLAP                               Handle        = 0xC05D0000
+	ERROR_SMB_BAD_CLUSTER_DIALECT                                             Handle        = 0xC05D0001
+	WININET_E_OUT_OF_HANDLES                                                  Handle        = 0x80072EE1
+	WININET_E_TIMEOUT                                                         Handle        = 0x80072EE2
+	WININET_E_EXTENDED_ERROR                                                  Handle        = 0x80072EE3
+	WININET_E_INTERNAL_ERROR                                                  Handle        = 0x80072EE4
+	WININET_E_INVALID_URL                                                     Handle        = 0x80072EE5
+	WININET_E_UNRECOGNIZED_SCHEME                                             Handle        = 0x80072EE6
+	WININET_E_NAME_NOT_RESOLVED                                               Handle        = 0x80072EE7
+	WININET_E_PROTOCOL_NOT_FOUND                                              Handle        = 0x80072EE8
+	WININET_E_INVALID_OPTION                                                  Handle        = 0x80072EE9
+	WININET_E_BAD_OPTION_LENGTH                                               Handle        = 0x80072EEA
+	WININET_E_OPTION_NOT_SETTABLE                                             Handle        = 0x80072EEB
+	WININET_E_SHUTDOWN                                                        Handle        = 0x80072EEC
+	WININET_E_INCORRECT_USER_NAME                                             Handle        = 0x80072EED
+	WININET_E_INCORRECT_PASSWORD                                              Handle        = 0x80072EEE
+	WININET_E_LOGIN_FAILURE                                                   Handle        = 0x80072EEF
+	WININET_E_INVALID_OPERATION                                               Handle        = 0x80072EF0
+	WININET_E_OPERATION_CANCELLED                                             Handle        = 0x80072EF1
+	WININET_E_INCORRECT_HANDLE_TYPE                                           Handle        = 0x80072EF2
+	WININET_E_INCORRECT_HANDLE_STATE                                          Handle        = 0x80072EF3
+	WININET_E_NOT_PROXY_REQUEST                                               Handle        = 0x80072EF4
+	WININET_E_REGISTRY_VALUE_NOT_FOUND                                        Handle        = 0x80072EF5
+	WININET_E_BAD_REGISTRY_PARAMETER                                          Handle        = 0x80072EF6
+	WININET_E_NO_DIRECT_ACCESS                                                Handle        = 0x80072EF7
+	WININET_E_NO_CONTEXT                                                      Handle        = 0x80072EF8
+	WININET_E_NO_CALLBACK                                                     Handle        = 0x80072EF9
+	WININET_E_REQUEST_PENDING                                                 Handle        = 0x80072EFA
+	WININET_E_INCORRECT_FORMAT                                                Handle        = 0x80072EFB
+	WININET_E_ITEM_NOT_FOUND                                                  Handle        = 0x80072EFC
+	WININET_E_CANNOT_CONNECT                                                  Handle        = 0x80072EFD
+	WININET_E_CONNECTION_ABORTED                                              Handle        = 0x80072EFE
+	WININET_E_CONNECTION_RESET                                                Handle        = 0x80072EFF
+	WININET_E_FORCE_RETRY                                                     Handle        = 0x80072F00
+	WININET_E_INVALID_PROXY_REQUEST                                           Handle        = 0x80072F01
+	WININET_E_NEED_UI                                                         Handle        = 0x80072F02
+	WININET_E_HANDLE_EXISTS                                                   Handle        = 0x80072F04
+	WININET_E_SEC_CERT_DATE_INVALID                                           Handle        = 0x80072F05
+	WININET_E_SEC_CERT_CN_INVALID                                             Handle        = 0x80072F06
+	WININET_E_HTTP_TO_HTTPS_ON_REDIR                                          Handle        = 0x80072F07
+	WININET_E_HTTPS_TO_HTTP_ON_REDIR                                          Handle        = 0x80072F08
+	WININET_E_MIXED_SECURITY                                                  Handle        = 0x80072F09
+	WININET_E_CHG_POST_IS_NON_SECURE                                          Handle        = 0x80072F0A
+	WININET_E_POST_IS_NON_SECURE                                              Handle        = 0x80072F0B
+	WININET_E_CLIENT_AUTH_CERT_NEEDED                                         Handle        = 0x80072F0C
+	WININET_E_INVALID_CA                                                      Handle        = 0x80072F0D
+	WININET_E_CLIENT_AUTH_NOT_SETUP                                           Handle        = 0x80072F0E
+	WININET_E_ASYNC_THREAD_FAILED                                             Handle        = 0x80072F0F
+	WININET_E_REDIRECT_SCHEME_CHANGE                                          Handle        = 0x80072F10
+	WININET_E_DIALOG_PENDING                                                  Handle        = 0x80072F11
+	WININET_E_RETRY_DIALOG                                                    Handle        = 0x80072F12
+	WININET_E_NO_NEW_CONTAINERS                                               Handle        = 0x80072F13
+	WININET_E_HTTPS_HTTP_SUBMIT_REDIR                                         Handle        = 0x80072F14
+	WININET_E_SEC_CERT_ERRORS                                                 Handle        = 0x80072F17
+	WININET_E_SEC_CERT_REV_FAILED                                             Handle        = 0x80072F19
+	WININET_E_HEADER_NOT_FOUND                                                Handle        = 0x80072F76
+	WININET_E_DOWNLEVEL_SERVER                                                Handle        = 0x80072F77
+	WININET_E_INVALID_SERVER_RESPONSE                                         Handle        = 0x80072F78
+	WININET_E_INVALID_HEADER                                                  Handle        = 0x80072F79
+	WININET_E_INVALID_QUERY_REQUEST                                           Handle        = 0x80072F7A
+	WININET_E_HEADER_ALREADY_EXISTS                                           Handle        = 0x80072F7B
+	WININET_E_REDIRECT_FAILED                                                 Handle        = 0x80072F7C
+	WININET_E_SECURITY_CHANNEL_ERROR                                          Handle        = 0x80072F7D
+	WININET_E_UNABLE_TO_CACHE_FILE                                            Handle        = 0x80072F7E
+	WININET_E_TCPIP_NOT_INSTALLED                                             Handle        = 0x80072F7F
+	WININET_E_DISCONNECTED                                                    Handle        = 0x80072F83
+	WININET_E_SERVER_UNREACHABLE                                              Handle        = 0x80072F84
+	WININET_E_PROXY_SERVER_UNREACHABLE                                        Handle        = 0x80072F85
+	WININET_E_BAD_AUTO_PROXY_SCRIPT                                           Handle        = 0x80072F86
+	WININET_E_UNABLE_TO_DOWNLOAD_SCRIPT                                       Handle        = 0x80072F87
+	WININET_E_SEC_INVALID_CERT                                                Handle        = 0x80072F89
+	WININET_E_SEC_CERT_REVOKED                                                Handle        = 0x80072F8A
+	WININET_E_FAILED_DUETOSECURITYCHECK                                       Handle        = 0x80072F8B
+	WININET_E_NOT_INITIALIZED                                                 Handle        = 0x80072F8C
+	WININET_E_LOGIN_FAILURE_DISPLAY_ENTITY_BODY                               Handle        = 0x80072F8E
+	WININET_E_DECODING_FAILED                                                 Handle        = 0x80072F8F
+	WININET_E_NOT_REDIRECTED                                                  Handle        = 0x80072F80
+	WININET_E_COOKIE_NEEDS_CONFIRMATION                                       Handle        = 0x80072F81
+	WININET_E_COOKIE_DECLINED                                                 Handle        = 0x80072F82
+	WININET_E_REDIRECT_NEEDS_CONFIRMATION                                     Handle        = 0x80072F88
+	SQLITE_E_ERROR                                                            Handle        = 0x87AF0001
+	SQLITE_E_INTERNAL                                                         Handle        = 0x87AF0002
+	SQLITE_E_PERM                                                             Handle        = 0x87AF0003
+	SQLITE_E_ABORT                                                            Handle        = 0x87AF0004
+	SQLITE_E_BUSY                                                             Handle        = 0x87AF0005
+	SQLITE_E_LOCKED                                                           Handle        = 0x87AF0006
+	SQLITE_E_NOMEM                                                            Handle        = 0x87AF0007
+	SQLITE_E_READONLY                                                         Handle        = 0x87AF0008
+	SQLITE_E_INTERRUPT                                                        Handle        = 0x87AF0009
+	SQLITE_E_IOERR                                                            Handle        = 0x87AF000A
+	SQLITE_E_CORRUPT                                                          Handle        = 0x87AF000B
+	SQLITE_E_NOTFOUND                                                         Handle        = 0x87AF000C
+	SQLITE_E_FULL                                                             Handle        = 0x87AF000D
+	SQLITE_E_CANTOPEN                                                         Handle        = 0x87AF000E
+	SQLITE_E_PROTOCOL                                                         Handle        = 0x87AF000F
+	SQLITE_E_EMPTY                                                            Handle        = 0x87AF0010
+	SQLITE_E_SCHEMA                                                           Handle        = 0x87AF0011
+	SQLITE_E_TOOBIG                                                           Handle        = 0x87AF0012
+	SQLITE_E_CONSTRAINT                                                       Handle        = 0x87AF0013
+	SQLITE_E_MISMATCH                                                         Handle        = 0x87AF0014
+	SQLITE_E_MISUSE                                                           Handle        = 0x87AF0015
+	SQLITE_E_NOLFS                                                            Handle        = 0x87AF0016
+	SQLITE_E_AUTH                                                             Handle        = 0x87AF0017
+	SQLITE_E_FORMAT                                                           Handle        = 0x87AF0018
+	SQLITE_E_RANGE                                                            Handle        = 0x87AF0019
+	SQLITE_E_NOTADB                                                           Handle        = 0x87AF001A
+	SQLITE_E_NOTICE                                                           Handle        = 0x87AF001B
+	SQLITE_E_WARNING                                                          Handle        = 0x87AF001C
+	SQLITE_E_ROW                                                              Handle        = 0x87AF0064
+	SQLITE_E_DONE                                                             Handle        = 0x87AF0065
+	SQLITE_E_IOERR_READ                                                       Handle        = 0x87AF010A
+	SQLITE_E_IOERR_SHORT_READ                                                 Handle        = 0x87AF020A
+	SQLITE_E_IOERR_WRITE                                                      Handle        = 0x87AF030A
+	SQLITE_E_IOERR_FSYNC                                                      Handle        = 0x87AF040A
+	SQLITE_E_IOERR_DIR_FSYNC                                                  Handle        = 0x87AF050A
+	SQLITE_E_IOERR_TRUNCATE                                                   Handle        = 0x87AF060A
+	SQLITE_E_IOERR_FSTAT                                                      Handle        = 0x87AF070A
+	SQLITE_E_IOERR_UNLOCK                                                     Handle        = 0x87AF080A
+	SQLITE_E_IOERR_RDLOCK                                                     Handle        = 0x87AF090A
+	SQLITE_E_IOERR_DELETE                                                     Handle        = 0x87AF0A0A
+	SQLITE_E_IOERR_BLOCKED                                                    Handle        = 0x87AF0B0A
+	SQLITE_E_IOERR_NOMEM                                                      Handle        = 0x87AF0C0A
+	SQLITE_E_IOERR_ACCESS                                                     Handle        = 0x87AF0D0A
+	SQLITE_E_IOERR_CHECKRESERVEDLOCK                                          Handle        = 0x87AF0E0A
+	SQLITE_E_IOERR_LOCK                                                       Handle        = 0x87AF0F0A
+	SQLITE_E_IOERR_CLOSE                                                      Handle        = 0x87AF100A
+	SQLITE_E_IOERR_DIR_CLOSE                                                  Handle        = 0x87AF110A
+	SQLITE_E_IOERR_SHMOPEN                                                    Handle        = 0x87AF120A
+	SQLITE_E_IOERR_SHMSIZE                                                    Handle        = 0x87AF130A
+	SQLITE_E_IOERR_SHMLOCK                                                    Handle        = 0x87AF140A
+	SQLITE_E_IOERR_SHMMAP                                                     Handle        = 0x87AF150A
+	SQLITE_E_IOERR_SEEK                                                       Handle        = 0x87AF160A
+	SQLITE_E_IOERR_DELETE_NOENT                                               Handle        = 0x87AF170A
+	SQLITE_E_IOERR_MMAP                                                       Handle        = 0x87AF180A
+	SQLITE_E_IOERR_GETTEMPPATH                                                Handle        = 0x87AF190A
+	SQLITE_E_IOERR_CONVPATH                                                   Handle        = 0x87AF1A0A
+	SQLITE_E_IOERR_VNODE                                                      Handle        = 0x87AF1A02
+	SQLITE_E_IOERR_AUTH                                                       Handle        = 0x87AF1A03
+	SQLITE_E_LOCKED_SHAREDCACHE                                               Handle        = 0x87AF0106
+	SQLITE_E_BUSY_RECOVERY                                                    Handle        = 0x87AF0105
+	SQLITE_E_BUSY_SNAPSHOT                                                    Handle        = 0x87AF0205
+	SQLITE_E_CANTOPEN_NOTEMPDIR                                               Handle        = 0x87AF010E
+	SQLITE_E_CANTOPEN_ISDIR                                                   Handle        = 0x87AF020E
+	SQLITE_E_CANTOPEN_FULLPATH                                                Handle        = 0x87AF030E
+	SQLITE_E_CANTOPEN_CONVPATH                                                Handle        = 0x87AF040E
+	SQLITE_E_CORRUPT_VTAB                                                     Handle        = 0x87AF010B
+	SQLITE_E_READONLY_RECOVERY                                                Handle        = 0x87AF0108
+	SQLITE_E_READONLY_CANTLOCK                                                Handle        = 0x87AF0208
+	SQLITE_E_READONLY_ROLLBACK                                                Handle        = 0x87AF0308
+	SQLITE_E_READONLY_DBMOVED                                                 Handle        = 0x87AF0408
+	SQLITE_E_ABORT_ROLLBACK                                                   Handle        = 0x87AF0204
+	SQLITE_E_CONSTRAINT_CHECK                                                 Handle        = 0x87AF0113
+	SQLITE_E_CONSTRAINT_COMMITHOOK                                            Handle        = 0x87AF0213
+	SQLITE_E_CONSTRAINT_FOREIGNKEY                                            Handle        = 0x87AF0313
+	SQLITE_E_CONSTRAINT_FUNCTION                                              Handle        = 0x87AF0413
+	SQLITE_E_CONSTRAINT_NOTNULL                                               Handle        = 0x87AF0513
+	SQLITE_E_CONSTRAINT_PRIMARYKEY                                            Handle        = 0x87AF0613
+	SQLITE_E_CONSTRAINT_TRIGGER                                               Handle        = 0x87AF0713
+	SQLITE_E_CONSTRAINT_UNIQUE                                                Handle        = 0x87AF0813
+	SQLITE_E_CONSTRAINT_VTAB                                                  Handle        = 0x87AF0913
+	SQLITE_E_CONSTRAINT_ROWID                                                 Handle        = 0x87AF0A13
+	SQLITE_E_NOTICE_RECOVER_WAL                                               Handle        = 0x87AF011B
+	SQLITE_E_NOTICE_RECOVER_ROLLBACK                                          Handle        = 0x87AF021B
+	SQLITE_E_WARNING_AUTOINDEX                                                Handle        = 0x87AF011C
+	UTC_E_TOGGLE_TRACE_STARTED                                                Handle        = 0x87C51001
+	UTC_E_ALTERNATIVE_TRACE_CANNOT_PREEMPT                                    Handle        = 0x87C51002
+	UTC_E_AOT_NOT_RUNNING                                                     Handle        = 0x87C51003
+	UTC_E_SCRIPT_TYPE_INVALID                                                 Handle        = 0x87C51004
+	UTC_E_SCENARIODEF_NOT_FOUND                                               Handle        = 0x87C51005
+	UTC_E_TRACEPROFILE_NOT_FOUND                                              Handle        = 0x87C51006
+	UTC_E_FORWARDER_ALREADY_ENABLED                                           Handle        = 0x87C51007
+	UTC_E_FORWARDER_ALREADY_DISABLED                                          Handle        = 0x87C51008
+	UTC_E_EVENTLOG_ENTRY_MALFORMED                                            Handle        = 0x87C51009
+	UTC_E_DIAGRULES_SCHEMAVERSION_MISMATCH                                    Handle        = 0x87C5100A
+	UTC_E_SCRIPT_TERMINATED                                                   Handle        = 0x87C5100B
+	UTC_E_INVALID_CUSTOM_FILTER                                               Handle        = 0x87C5100C
+	UTC_E_TRACE_NOT_RUNNING                                                   Handle        = 0x87C5100D
+	UTC_E_REESCALATED_TOO_QUICKLY                                             Handle        = 0x87C5100E
+	UTC_E_ESCALATION_ALREADY_RUNNING                                          Handle        = 0x87C5100F
+	UTC_E_PERFTRACK_ALREADY_TRACING                                           Handle        = 0x87C51010
+	UTC_E_REACHED_MAX_ESCALATIONS                                             Handle        = 0x87C51011
+	UTC_E_FORWARDER_PRODUCER_MISMATCH                                         Handle        = 0x87C51012
+	UTC_E_INTENTIONAL_SCRIPT_FAILURE                                          Handle        = 0x87C51013
+	UTC_E_SQM_INIT_FAILED                                                     Handle        = 0x87C51014
+	UTC_E_NO_WER_LOGGER_SUPPORTED                                             Handle        = 0x87C51015
+	UTC_E_TRACERS_DONT_EXIST                                                  Handle        = 0x87C51016
+	UTC_E_WINRT_INIT_FAILED                                                   Handle        = 0x87C51017
+	UTC_E_SCENARIODEF_SCHEMAVERSION_MISMATCH                                  Handle        = 0x87C51018
+	UTC_E_INVALID_FILTER                                                      Handle        = 0x87C51019
+	UTC_E_EXE_TERMINATED                                                      Handle        = 0x87C5101A
+	UTC_E_ESCALATION_NOT_AUTHORIZED                                           Handle        = 0x87C5101B
+	UTC_E_SETUP_NOT_AUTHORIZED                                                Handle        = 0x87C5101C
+	UTC_E_CHILD_PROCESS_FAILED                                                Handle        = 0x87C5101D
+	UTC_E_COMMAND_LINE_NOT_AUTHORIZED                                         Handle        = 0x87C5101E
+	UTC_E_CANNOT_LOAD_SCENARIO_EDITOR_XML                                     Handle        = 0x87C5101F
+	UTC_E_ESCALATION_TIMED_OUT                                                Handle        = 0x87C51020
+	UTC_E_SETUP_TIMED_OUT                                                     Handle        = 0x87C51021
+	UTC_E_TRIGGER_MISMATCH                                                    Handle        = 0x87C51022
+	UTC_E_TRIGGER_NOT_FOUND                                                   Handle        = 0x87C51023
+	UTC_E_SIF_NOT_SUPPORTED                                                   Handle        = 0x87C51024
+	UTC_E_DELAY_TERMINATED                                                    Handle        = 0x87C51025
+	UTC_E_DEVICE_TICKET_ERROR                                                 Handle        = 0x87C51026
+	UTC_E_TRACE_BUFFER_LIMIT_EXCEEDED                                         Handle        = 0x87C51027
+	UTC_E_API_RESULT_UNAVAILABLE                                              Handle        = 0x87C51028
+	UTC_E_RPC_TIMEOUT                                                         Handle        = 0x87C51029
+	UTC_E_RPC_WAIT_FAILED                                                     Handle        = 0x87C5102A
+	UTC_E_API_BUSY                                                            Handle        = 0x87C5102B
+	UTC_E_TRACE_MIN_DURATION_REQUIREMENT_NOT_MET                              Handle        = 0x87C5102C
+	UTC_E_EXCLUSIVITY_NOT_AVAILABLE                                           Handle        = 0x87C5102D
+	UTC_E_GETFILE_FILE_PATH_NOT_APPROVED                                      Handle        = 0x87C5102E
+	UTC_E_ESCALATION_DIRECTORY_ALREADY_EXISTS                                 Handle        = 0x87C5102F
+	UTC_E_TIME_TRIGGER_ON_START_INVALID                                       Handle        = 0x87C51030
+	UTC_E_TIME_TRIGGER_ONLY_VALID_ON_SINGLE_TRANSITION                        Handle        = 0x87C51031
+	UTC_E_TIME_TRIGGER_INVALID_TIME_RANGE                                     Handle        = 0x87C51032
+	UTC_E_MULTIPLE_TIME_TRIGGER_ON_SINGLE_STATE                               Handle        = 0x87C51033
+	UTC_E_BINARY_MISSING                                                      Handle        = 0x87C51034
+	UTC_E_NETWORK_CAPTURE_NOT_ALLOWED                                         Handle        = 0x87C51035
+	UTC_E_FAILED_TO_RESOLVE_CONTAINER_ID                                      Handle        = 0x87C51036
+	UTC_E_UNABLE_TO_RESOLVE_SESSION                                           Handle        = 0x87C51037
+	UTC_E_THROTTLED                                                           Handle        = 0x87C51038
+	UTC_E_UNAPPROVED_SCRIPT                                                   Handle        = 0x87C51039
+	UTC_E_SCRIPT_MISSING                                                      Handle        = 0x87C5103A
+	UTC_E_SCENARIO_THROTTLED                                                  Handle        = 0x87C5103B
+	UTC_E_API_NOT_SUPPORTED                                                   Handle        = 0x87C5103C
+	UTC_E_GETFILE_EXTERNAL_PATH_NOT_APPROVED                                  Handle        = 0x87C5103D
+	UTC_E_TRY_GET_SCENARIO_TIMEOUT_EXCEEDED                                   Handle        = 0x87C5103E
+	UTC_E_CERT_REV_FAILED                                                     Handle        = 0x87C5103F
+	UTC_E_FAILED_TO_START_NDISCAP                                             Handle        = 0x87C51040
+	UTC_E_KERNELDUMP_LIMIT_REACHED                                            Handle        = 0x87C51041
+	UTC_E_MISSING_AGGREGATE_EVENT_TAG                                         Handle        = 0x87C51042
+	UTC_E_INVALID_AGGREGATION_STRUCT                                          Handle        = 0x87C51043
+	UTC_E_ACTION_NOT_SUPPORTED_IN_DESTINATION                                 Handle        = 0x87C51044
+	UTC_E_FILTER_MISSING_ATTRIBUTE                                            Handle        = 0x87C51045
+	UTC_E_FILTER_INVALID_TYPE                                                 Handle        = 0x87C51046
+	UTC_E_FILTER_VARIABLE_NOT_FOUND                                           Handle        = 0x87C51047
+	UTC_E_FILTER_FUNCTION_RESTRICTED                                          Handle        = 0x87C51048
+	UTC_E_FILTER_VERSION_MISMATCH                                             Handle        = 0x87C51049
+	UTC_E_FILTER_INVALID_FUNCTION                                             Handle        = 0x87C51050
+	UTC_E_FILTER_INVALID_FUNCTION_PARAMS                                      Handle        = 0x87C51051
+	UTC_E_FILTER_INVALID_COMMAND                                              Handle        = 0x87C51052
+	UTC_E_FILTER_ILLEGAL_EVAL                                                 Handle        = 0x87C51053
+	UTC_E_TTTRACER_RETURNED_ERROR                                             Handle        = 0x87C51054
+	UTC_E_AGENT_DIAGNOSTICS_TOO_LARGE                                         Handle        = 0x87C51055
+	UTC_E_FAILED_TO_RECEIVE_AGENT_DIAGNOSTICS                                 Handle        = 0x87C51056
+	UTC_E_SCENARIO_HAS_NO_ACTIONS                                             Handle        = 0x87C51057
+	UTC_E_TTTRACER_STORAGE_FULL                                               Handle        = 0x87C51058
+	UTC_E_INSUFFICIENT_SPACE_TO_START_TRACE                                   Handle        = 0x87C51059
+	UTC_E_ESCALATION_CANCELLED_AT_SHUTDOWN                                    Handle        = 0x87C5105A
+	UTC_E_GETFILEINFOACTION_FILE_NOT_APPROVED                                 Handle        = 0x87C5105B
+	WINML_ERR_INVALID_DEVICE                                                  Handle        = 0x88900001
+	WINML_ERR_INVALID_BINDING                                                 Handle        = 0x88900002
+	WINML_ERR_VALUE_NOTFOUND                                                  Handle        = 0x88900003
+	WINML_ERR_SIZE_MISMATCH                                                   Handle        = 0x88900004
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/zknownfolderids_windows.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/zknownfolderids_windows.go
new file mode 100644
index 000000000..6048ac679
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/zknownfolderids_windows.go
@@ -0,0 +1,149 @@
+// Code generated by 'mkknownfolderids.bash'; DO NOT EDIT.
+
+package windows
+
+type KNOWNFOLDERID GUID
+
+var (
+	FOLDERID_NetworkFolder          = &KNOWNFOLDERID{0xd20beec4, 0x5ca8, 0x4905, [8]byte{0xae, 0x3b, 0xbf, 0x25, 0x1e, 0xa0, 0x9b, 0x53}}
+	FOLDERID_ComputerFolder         = &KNOWNFOLDERID{0x0ac0837c, 0xbbf8, 0x452a, [8]byte{0x85, 0x0d, 0x79, 0xd0, 0x8e, 0x66, 0x7c, 0xa7}}
+	FOLDERID_InternetFolder         = &KNOWNFOLDERID{0x4d9f7874, 0x4e0c, 0x4904, [8]byte{0x96, 0x7b, 0x40, 0xb0, 0xd2, 0x0c, 0x3e, 0x4b}}
+	FOLDERID_ControlPanelFolder     = &KNOWNFOLDERID{0x82a74aeb, 0xaeb4, 0x465c, [8]byte{0xa0, 0x14, 0xd0, 0x97, 0xee, 0x34, 0x6d, 0x63}}
+	FOLDERID_PrintersFolder         = &KNOWNFOLDERID{0x76fc4e2d, 0xd6ad, 0x4519, [8]byte{0xa6, 0x63, 0x37, 0xbd, 0x56, 0x06, 0x81, 0x85}}
+	FOLDERID_SyncManagerFolder      = &KNOWNFOLDERID{0x43668bf8, 0xc14e, 0x49b2, [8]byte{0x97, 0xc9, 0x74, 0x77, 0x84, 0xd7, 0x84, 0xb7}}
+	FOLDERID_SyncSetupFolder        = &KNOWNFOLDERID{0x0f214138, 0xb1d3, 0x4a90, [8]byte{0xbb, 0xa9, 0x27, 0xcb, 0xc0, 0xc5, 0x38, 0x9a}}
+	FOLDERID_ConflictFolder         = &KNOWNFOLDERID{0x4bfefb45, 0x347d, 0x4006, [8]byte{0xa5, 0xbe, 0xac, 0x0c, 0xb0, 0x56, 0x71, 0x92}}
+	FOLDERID_SyncResultsFolder      = &KNOWNFOLDERID{0x289a9a43, 0xbe44, 0x4057, [8]byte{0xa4, 0x1b, 0x58, 0x7a, 0x76, 0xd7, 0xe7, 0xf9}}
+	FOLDERID_RecycleBinFolder       = &KNOWNFOLDERID{0xb7534046, 0x3ecb, 0x4c18, [8]byte{0xbe, 0x4e, 0x64, 0xcd, 0x4c, 0xb7, 0xd6, 0xac}}
+	FOLDERID_ConnectionsFolder      = &KNOWNFOLDERID{0x6f0cd92b, 0x2e97, 0x45d1, [8]byte{0x88, 0xff, 0xb0, 0xd1, 0x86, 0xb8, 0xde, 0xdd}}
+	FOLDERID_Fonts                  = &KNOWNFOLDERID{0xfd228cb7, 0xae11, 0x4ae3, [8]byte{0x86, 0x4c, 0x16, 0xf3, 0x91, 0x0a, 0xb8, 0xfe}}
+	FOLDERID_Desktop                = &KNOWNFOLDERID{0xb4bfcc3a, 0xdb2c, 0x424c, [8]byte{0xb0, 0x29, 0x7f, 0xe9, 0x9a, 0x87, 0xc6, 0x41}}
+	FOLDERID_Startup                = &KNOWNFOLDERID{0xb97d20bb, 0xf46a, 0x4c97, [8]byte{0xba, 0x10, 0x5e, 0x36, 0x08, 0x43, 0x08, 0x54}}
+	FOLDERID_Programs               = &KNOWNFOLDERID{0xa77f5d77, 0x2e2b, 0x44c3, [8]byte{0xa6, 0xa2, 0xab, 0xa6, 0x01, 0x05, 0x4a, 0x51}}
+	FOLDERID_StartMenu              = &KNOWNFOLDERID{0x625b53c3, 0xab48, 0x4ec1, [8]byte{0xba, 0x1f, 0xa1, 0xef, 0x41, 0x46, 0xfc, 0x19}}
+	FOLDERID_Recent                 = &KNOWNFOLDERID{0xae50c081, 0xebd2, 0x438a, [8]byte{0x86, 0x55, 0x8a, 0x09, 0x2e, 0x34, 0x98, 0x7a}}
+	FOLDERID_SendTo                 = &KNOWNFOLDERID{0x8983036c, 0x27c0, 0x404b, [8]byte{0x8f, 0x08, 0x10, 0x2d, 0x10, 0xdc, 0xfd, 0x74}}
+	FOLDERID_Documents              = &KNOWNFOLDERID{0xfdd39ad0, 0x238f, 0x46af, [8]byte{0xad, 0xb4, 0x6c, 0x85, 0x48, 0x03, 0x69, 0xc7}}
+	FOLDERID_Favorites              = &KNOWNFOLDERID{0x1777f761, 0x68ad, 0x4d8a, [8]byte{0x87, 0xbd, 0x30, 0xb7, 0x59, 0xfa, 0x33, 0xdd}}
+	FOLDERID_NetHood                = &KNOWNFOLDERID{0xc5abbf53, 0xe17f, 0x4121, [8]byte{0x89, 0x00, 0x86, 0x62, 0x6f, 0xc2, 0xc9, 0x73}}
+	FOLDERID_PrintHood              = &KNOWNFOLDERID{0x9274bd8d, 0xcfd1, 0x41c3, [8]byte{0xb3, 0x5e, 0xb1, 0x3f, 0x55, 0xa7, 0x58, 0xf4}}
+	FOLDERID_Templates              = &KNOWNFOLDERID{0xa63293e8, 0x664e, 0x48db, [8]byte{0xa0, 0x79, 0xdf, 0x75, 0x9e, 0x05, 0x09, 0xf7}}
+	FOLDERID_CommonStartup          = &KNOWNFOLDERID{0x82a5ea35, 0xd9cd, 0x47c5, [8]byte{0x96, 0x29, 0xe1, 0x5d, 0x2f, 0x71, 0x4e, 0x6e}}
+	FOLDERID_CommonPrograms         = &KNOWNFOLDERID{0x0139d44e, 0x6afe, 0x49f2, [8]byte{0x86, 0x90, 0x3d, 0xaf, 0xca, 0xe6, 0xff, 0xb8}}
+	FOLDERID_CommonStartMenu        = &KNOWNFOLDERID{0xa4115719, 0xd62e, 0x491d, [8]byte{0xaa, 0x7c, 0xe7, 0x4b, 0x8b, 0xe3, 0xb0, 0x67}}
+	FOLDERID_PublicDesktop          = &KNOWNFOLDERID{0xc4aa340d, 0xf20f, 0x4863, [8]byte{0xaf, 0xef, 0xf8, 0x7e, 0xf2, 0xe6, 0xba, 0x25}}
+	FOLDERID_ProgramData            = &KNOWNFOLDERID{0x62ab5d82, 0xfdc1, 0x4dc3, [8]byte{0xa9, 0xdd, 0x07, 0x0d, 0x1d, 0x49, 0x5d, 0x97}}
+	FOLDERID_CommonTemplates        = &KNOWNFOLDERID{0xb94237e7, 0x57ac, 0x4347, [8]byte{0x91, 0x51, 0xb0, 0x8c, 0x6c, 0x32, 0xd1, 0xf7}}
+	FOLDERID_PublicDocuments        = &KNOWNFOLDERID{0xed4824af, 0xdce4, 0x45a8, [8]byte{0x81, 0xe2, 0xfc, 0x79, 0x65, 0x08, 0x36, 0x34}}
+	FOLDERID_RoamingAppData         = &KNOWNFOLDERID{0x3eb685db, 0x65f9, 0x4cf6, [8]byte{0xa0, 0x3a, 0xe3, 0xef, 0x65, 0x72, 0x9f, 0x3d}}
+	FOLDERID_LocalAppData           = &KNOWNFOLDERID{0xf1b32785, 0x6fba, 0x4fcf, [8]byte{0x9d, 0x55, 0x7b, 0x8e, 0x7f, 0x15, 0x70, 0x91}}
+	FOLDERID_LocalAppDataLow        = &KNOWNFOLDERID{0xa520a1a4, 0x1780, 0x4ff6, [8]byte{0xbd, 0x18, 0x16, 0x73, 0x43, 0xc5, 0xaf, 0x16}}
+	FOLDERID_InternetCache          = &KNOWNFOLDERID{0x352481e8, 0x33be, 0x4251, [8]byte{0xba, 0x85, 0x60, 0x07, 0xca, 0xed, 0xcf, 0x9d}}
+	FOLDERID_Cookies                = &KNOWNFOLDERID{0x2b0f765d, 0xc0e9, 0x4171, [8]byte{0x90, 0x8e, 0x08, 0xa6, 0x11, 0xb8, 0x4f, 0xf6}}
+	FOLDERID_History                = &KNOWNFOLDERID{0xd9dc8a3b, 0xb784, 0x432e, [8]byte{0xa7, 0x81, 0x5a, 0x11, 0x30, 0xa7, 0x59, 0x63}}
+	FOLDERID_System                 = &KNOWNFOLDERID{0x1ac14e77, 0x02e7, 0x4e5d, [8]byte{0xb7, 0x44, 0x2e, 0xb1, 0xae, 0x51, 0x98, 0xb7}}
+	FOLDERID_SystemX86              = &KNOWNFOLDERID{0xd65231b0, 0xb2f1, 0x4857, [8]byte{0xa4, 0xce, 0xa8, 0xe7, 0xc6, 0xea, 0x7d, 0x27}}
+	FOLDERID_Windows                = &KNOWNFOLDERID{0xf38bf404, 0x1d43, 0x42f2, [8]byte{0x93, 0x05, 0x67, 0xde, 0x0b, 0x28, 0xfc, 0x23}}
+	FOLDERID_Profile                = &KNOWNFOLDERID{0x5e6c858f, 0x0e22, 0x4760, [8]byte{0x9a, 0xfe, 0xea, 0x33, 0x17, 0xb6, 0x71, 0x73}}
+	FOLDERID_Pictures               = &KNOWNFOLDERID{0x33e28130, 0x4e1e, 0x4676, [8]byte{0x83, 0x5a, 0x98, 0x39, 0x5c, 0x3b, 0xc3, 0xbb}}
+	FOLDERID_ProgramFilesX86        = &KNOWNFOLDERID{0x7c5a40ef, 0xa0fb, 0x4bfc, [8]byte{0x87, 0x4a, 0xc0, 0xf2, 0xe0, 0xb9, 0xfa, 0x8e}}
+	FOLDERID_ProgramFilesCommonX86  = &KNOWNFOLDERID{0xde974d24, 0xd9c6, 0x4d3e, [8]byte{0xbf, 0x91, 0xf4, 0x45, 0x51, 0x20, 0xb9, 0x17}}
+	FOLDERID_ProgramFilesX64        = &KNOWNFOLDERID{0x6d809377, 0x6af0, 0x444b, [8]byte{0x89, 0x57, 0xa3, 0x77, 0x3f, 0x02, 0x20, 0x0e}}
+	FOLDERID_ProgramFilesCommonX64  = &KNOWNFOLDERID{0x6365d5a7, 0x0f0d, 0x45e5, [8]byte{0x87, 0xf6, 0x0d, 0xa5, 0x6b, 0x6a, 0x4f, 0x7d}}
+	FOLDERID_ProgramFiles           = &KNOWNFOLDERID{0x905e63b6, 0xc1bf, 0x494e, [8]byte{0xb2, 0x9c, 0x65, 0xb7, 0x32, 0xd3, 0xd2, 0x1a}}
+	FOLDERID_ProgramFilesCommon     = &KNOWNFOLDERID{0xf7f1ed05, 0x9f6d, 0x47a2, [8]byte{0xaa, 0xae, 0x29, 0xd3, 0x17, 0xc6, 0xf0, 0x66}}
+	FOLDERID_UserProgramFiles       = &KNOWNFOLDERID{0x5cd7aee2, 0x2219, 0x4a67, [8]byte{0xb8, 0x5d, 0x6c, 0x9c, 0xe1, 0x56, 0x60, 0xcb}}
+	FOLDERID_UserProgramFilesCommon = &KNOWNFOLDERID{0xbcbd3057, 0xca5c, 0x4622, [8]byte{0xb4, 0x2d, 0xbc, 0x56, 0xdb, 0x0a, 0xe5, 0x16}}
+	FOLDERID_AdminTools             = &KNOWNFOLDERID{0x724ef170, 0xa42d, 0x4fef, [8]byte{0x9f, 0x26, 0xb6, 0x0e, 0x84, 0x6f, 0xba, 0x4f}}
+	FOLDERID_CommonAdminTools       = &KNOWNFOLDERID{0xd0384e7d, 0xbac3, 0x4797, [8]byte{0x8f, 0x14, 0xcb, 0xa2, 0x29, 0xb3, 0x92, 0xb5}}
+	FOLDERID_Music                  = &KNOWNFOLDERID{0x4bd8d571, 0x6d19, 0x48d3, [8]byte{0xbe, 0x97, 0x42, 0x22, 0x20, 0x08, 0x0e, 0x43}}
+	FOLDERID_Videos                 = &KNOWNFOLDERID{0x18989b1d, 0x99b5, 0x455b, [8]byte{0x84, 0x1c, 0xab, 0x7c, 0x74, 0xe4, 0xdd, 0xfc}}
+	FOLDERID_Ringtones              = &KNOWNFOLDERID{0xc870044b, 0xf49e, 0x4126, [8]byte{0xa9, 0xc3, 0xb5, 0x2a, 0x1f, 0xf4, 0x11, 0xe8}}
+	FOLDERID_PublicPictures         = &KNOWNFOLDERID{0xb6ebfb86, 0x6907, 0x413c, [8]byte{0x9a, 0xf7, 0x4f, 0xc2, 0xab, 0xf0, 0x7c, 0xc5}}
+	FOLDERID_PublicMusic            = &KNOWNFOLDERID{0x3214fab5, 0x9757, 0x4298, [8]byte{0xbb, 0x61, 0x92, 0xa9, 0xde, 0xaa, 0x44, 0xff}}
+	FOLDERID_PublicVideos           = &KNOWNFOLDERID{0x2400183a, 0x6185, 0x49fb, [8]byte{0xa2, 0xd8, 0x4a, 0x39, 0x2a, 0x60, 0x2b, 0xa3}}
+	FOLDERID_PublicRingtones        = &KNOWNFOLDERID{0xe555ab60, 0x153b, 0x4d17, [8]byte{0x9f, 0x04, 0xa5, 0xfe, 0x99, 0xfc, 0x15, 0xec}}
+	FOLDERID_ResourceDir            = &KNOWNFOLDERID{0x8ad10c31, 0x2adb, 0x4296, [8]byte{0xa8, 0xf7, 0xe4, 0x70, 0x12, 0x32, 0xc9, 0x72}}
+	FOLDERID_LocalizedResourcesDir  = &KNOWNFOLDERID{0x2a00375e, 0x224c, 0x49de, [8]byte{0xb8, 0xd1, 0x44, 0x0d, 0xf7, 0xef, 0x3d, 0xdc}}
+	FOLDERID_CommonOEMLinks         = &KNOWNFOLDERID{0xc1bae2d0, 0x10df, 0x4334, [8]byte{0xbe, 0xdd, 0x7a, 0xa2, 0x0b, 0x22, 0x7a, 0x9d}}
+	FOLDERID_CDBurning              = &KNOWNFOLDERID{0x9e52ab10, 0xf80d, 0x49df, [8]byte{0xac, 0xb8, 0x43, 0x30, 0xf5, 0x68, 0x78, 0x55}}
+	FOLDERID_UserProfiles           = &KNOWNFOLDERID{0x0762d272, 0xc50a, 0x4bb0, [8]byte{0xa3, 0x82, 0x69, 0x7d, 0xcd, 0x72, 0x9b, 0x80}}
+	FOLDERID_Playlists              = &KNOWNFOLDERID{0xde92c1c7, 0x837f, 0x4f69, [8]byte{0xa3, 0xbb, 0x86, 0xe6, 0x31, 0x20, 0x4a, 0x23}}
+	FOLDERID_SamplePlaylists        = &KNOWNFOLDERID{0x15ca69b3, 0x30ee, 0x49c1, [8]byte{0xac, 0xe1, 0x6b, 0x5e, 0xc3, 0x72, 0xaf, 0xb5}}
+	FOLDERID_SampleMusic            = &KNOWNFOLDERID{0xb250c668, 0xf57d, 0x4ee1, [8]byte{0xa6, 0x3c, 0x29, 0x0e, 0xe7, 0xd1, 0xaa, 0x1f}}
+	FOLDERID_SamplePictures         = &KNOWNFOLDERID{0xc4900540, 0x2379, 0x4c75, [8]byte{0x84, 0x4b, 0x64, 0xe6, 0xfa, 0xf8, 0x71, 0x6b}}
+	FOLDERID_SampleVideos           = &KNOWNFOLDERID{0x859ead94, 0x2e85, 0x48ad, [8]byte{0xa7, 0x1a, 0x09, 0x69, 0xcb, 0x56, 0xa6, 0xcd}}
+	FOLDERID_PhotoAlbums            = &KNOWNFOLDERID{0x69d2cf90, 0xfc33, 0x4fb7, [8]byte{0x9a, 0x0c, 0xeb, 0xb0, 0xf0, 0xfc, 0xb4, 0x3c}}
+	FOLDERID_Public                 = &KNOWNFOLDERID{0xdfdf76a2, 0xc82a, 0x4d63, [8]byte{0x90, 0x6a, 0x56, 0x44, 0xac, 0x45, 0x73, 0x85}}
+	FOLDERID_ChangeRemovePrograms   = &KNOWNFOLDERID{0xdf7266ac, 0x9274, 0x4867, [8]byte{0x8d, 0x55, 0x3b, 0xd6, 0x61, 0xde, 0x87, 0x2d}}
+	FOLDERID_AppUpdates             = &KNOWNFOLDERID{0xa305ce99, 0xf527, 0x492b, [8]byte{0x8b, 0x1a, 0x7e, 0x76, 0xfa, 0x98, 0xd6, 0xe4}}
+	FOLDERID_AddNewPrograms         = &KNOWNFOLDERID{0xde61d971, 0x5ebc, 0x4f02, [8]byte{0xa3, 0xa9, 0x6c, 0x82, 0x89, 0x5e, 0x5c, 0x04}}
+	FOLDERID_Downloads              = &KNOWNFOLDERID{0x374de290, 0x123f, 0x4565, [8]byte{0x91, 0x64, 0x39, 0xc4, 0x92, 0x5e, 0x46, 0x7b}}
+	FOLDERID_PublicDownloads        = &KNOWNFOLDERID{0x3d644c9b, 0x1fb8, 0x4f30, [8]byte{0x9b, 0x45, 0xf6, 0x70, 0x23, 0x5f, 0x79, 0xc0}}
+	FOLDERID_SavedSearches          = &KNOWNFOLDERID{0x7d1d3a04, 0xdebb, 0x4115, [8]byte{0x95, 0xcf, 0x2f, 0x29, 0xda, 0x29, 0x20, 0xda}}
+	FOLDERID_QuickLaunch            = &KNOWNFOLDERID{0x52a4f021, 0x7b75, 0x48a9, [8]byte{0x9f, 0x6b, 0x4b, 0x87, 0xa2, 0x10, 0xbc, 0x8f}}
+	FOLDERID_Contacts               = &KNOWNFOLDERID{0x56784854, 0xc6cb, 0x462b, [8]byte{0x81, 0x69, 0x88, 0xe3, 0x50, 0xac, 0xb8, 0x82}}
+	FOLDERID_SidebarParts           = &KNOWNFOLDERID{0xa75d362e, 0x50fc, 0x4fb7, [8]byte{0xac, 0x2c, 0xa8, 0xbe, 0xaa, 0x31, 0x44, 0x93}}
+	FOLDERID_SidebarDefaultParts    = &KNOWNFOLDERID{0x7b396e54, 0x9ec5, 0x4300, [8]byte{0xbe, 0x0a, 0x24, 0x82, 0xeb, 0xae, 0x1a, 0x26}}
+	FOLDERID_PublicGameTasks        = &KNOWNFOLDERID{0xdebf2536, 0xe1a8, 0x4c59, [8]byte{0xb6, 0xa2, 0x41, 0x45, 0x86, 0x47, 0x6a, 0xea}}
+	FOLDERID_GameTasks              = &KNOWNFOLDERID{0x054fae61, 0x4dd8, 0x4787, [8]byte{0x80, 0xb6, 0x09, 0x02, 0x20, 0xc4, 0xb7, 0x00}}
+	FOLDERID_SavedGames             = &KNOWNFOLDERID{0x4c5c32ff, 0xbb9d, 0x43b0, [8]byte{0xb5, 0xb4, 0x2d, 0x72, 0xe5, 0x4e, 0xaa, 0xa4}}
+	FOLDERID_Games                  = &KNOWNFOLDERID{0xcac52c1a, 0xb53d, 0x4edc, [8]byte{0x92, 0xd7, 0x6b, 0x2e, 0x8a, 0xc1, 0x94, 0x34}}
+	FOLDERID_SEARCH_MAPI            = &KNOWNFOLDERID{0x98ec0e18, 0x2098, 0x4d44, [8]byte{0x86, 0x44, 0x66, 0x97, 0x93, 0x15, 0xa2, 0x81}}
+	FOLDERID_SEARCH_CSC             = &KNOWNFOLDERID{0xee32e446, 0x31ca, 0x4aba, [8]byte{0x81, 0x4f, 0xa5, 0xeb, 0xd2, 0xfd, 0x6d, 0x5e}}
+	FOLDERID_Links                  = &KNOWNFOLDERID{0xbfb9d5e0, 0xc6a9, 0x404c, [8]byte{0xb2, 0xb2, 0xae, 0x6d, 0xb6, 0xaf, 0x49, 0x68}}
+	FOLDERID_UsersFiles             = &KNOWNFOLDERID{0xf3ce0f7c, 0x4901, 0x4acc, [8]byte{0x86, 0x48, 0xd5, 0xd4, 0x4b, 0x04, 0xef, 0x8f}}
+	FOLDERID_UsersLibraries         = &KNOWNFOLDERID{0xa302545d, 0xdeff, 0x464b, [8]byte{0xab, 0xe8, 0x61, 0xc8, 0x64, 0x8d, 0x93, 0x9b}}
+	FOLDERID_SearchHome             = &KNOWNFOLDERID{0x190337d1, 0xb8ca, 0x4121, [8]byte{0xa6, 0x39, 0x6d, 0x47, 0x2d, 0x16, 0x97, 0x2a}}
+	FOLDERID_OriginalImages         = &KNOWNFOLDERID{0x2c36c0aa, 0x5812, 0x4b87, [8]byte{0xbf, 0xd0, 0x4c, 0xd0, 0xdf, 0xb1, 0x9b, 0x39}}
+	FOLDERID_DocumentsLibrary       = &KNOWNFOLDERID{0x7b0db17d, 0x9cd2, 0x4a93, [8]byte{0x97, 0x33, 0x46, 0xcc, 0x89, 0x02, 0x2e, 0x7c}}
+	FOLDERID_MusicLibrary           = &KNOWNFOLDERID{0x2112ab0a, 0xc86a, 0x4ffe, [8]byte{0xa3, 0x68, 0x0d, 0xe9, 0x6e, 0x47, 0x01, 0x2e}}
+	FOLDERID_PicturesLibrary        = &KNOWNFOLDERID{0xa990ae9f, 0xa03b, 0x4e80, [8]byte{0x94, 0xbc, 0x99, 0x12, 0xd7, 0x50, 0x41, 0x04}}
+	FOLDERID_VideosLibrary          = &KNOWNFOLDERID{0x491e922f, 0x5643, 0x4af4, [8]byte{0xa7, 0xeb, 0x4e, 0x7a, 0x13, 0x8d, 0x81, 0x74}}
+	FOLDERID_RecordedTVLibrary      = &KNOWNFOLDERID{0x1a6fdba2, 0xf42d, 0x4358, [8]byte{0xa7, 0x98, 0xb7, 0x4d, 0x74, 0x59, 0x26, 0xc5}}
+	FOLDERID_HomeGroup              = &KNOWNFOLDERID{0x52528a6b, 0xb9e3, 0x4add, [8]byte{0xb6, 0x0d, 0x58, 0x8c, 0x2d, 0xba, 0x84, 0x2d}}
+	FOLDERID_HomeGroupCurrentUser   = &KNOWNFOLDERID{0x9b74b6a3, 0x0dfd, 0x4f11, [8]byte{0x9e, 0x78, 0x5f, 0x78, 0x00, 0xf2, 0xe7, 0x72}}
+	FOLDERID_DeviceMetadataStore    = &KNOWNFOLDERID{0x5ce4a5e9, 0xe4eb, 0x479d, [8]byte{0xb8, 0x9f, 0x13, 0x0c, 0x02, 0x88, 0x61, 0x55}}
+	FOLDERID_Libraries              = &KNOWNFOLDERID{0x1b3ea5dc, 0xb587, 0x4786, [8]byte{0xb4, 0xef, 0xbd, 0x1d, 0xc3, 0x32, 0xae, 0xae}}
+	FOLDERID_PublicLibraries        = &KNOWNFOLDERID{0x48daf80b, 0xe6cf, 0x4f4e, [8]byte{0xb8, 0x00, 0x0e, 0x69, 0xd8, 0x4e, 0xe3, 0x84}}
+	FOLDERID_UserPinned             = &KNOWNFOLDERID{0x9e3995ab, 0x1f9c, 0x4f13, [8]byte{0xb8, 0x27, 0x48, 0xb2, 0x4b, 0x6c, 0x71, 0x74}}
+	FOLDERID_ImplicitAppShortcuts   = &KNOWNFOLDERID{0xbcb5256f, 0x79f6, 0x4cee, [8]byte{0xb7, 0x25, 0xdc, 0x34, 0xe4, 0x02, 0xfd, 0x46}}
+	FOLDERID_AccountPictures        = &KNOWNFOLDERID{0x008ca0b1, 0x55b4, 0x4c56, [8]byte{0xb8, 0xa8, 0x4d, 0xe4, 0xb2, 0x99, 0xd3, 0xbe}}
+	FOLDERID_PublicUserTiles        = &KNOWNFOLDERID{0x0482af6c, 0x08f1, 0x4c34, [8]byte{0x8c, 0x90, 0xe1, 0x7e, 0xc9, 0x8b, 0x1e, 0x17}}
+	FOLDERID_AppsFolder             = &KNOWNFOLDERID{0x1e87508d, 0x89c2, 0x42f0, [8]byte{0x8a, 0x7e, 0x64, 0x5a, 0x0f, 0x50, 0xca, 0x58}}
+	FOLDERID_StartMenuAllPrograms   = &KNOWNFOLDERID{0xf26305ef, 0x6948, 0x40b9, [8]byte{0xb2, 0x55, 0x81, 0x45, 0x3d, 0x09, 0xc7, 0x85}}
+	FOLDERID_CommonStartMenuPlaces  = &KNOWNFOLDERID{0xa440879f, 0x87a0, 0x4f7d, [8]byte{0xb7, 0x00, 0x02, 0x07, 0xb9, 0x66, 0x19, 0x4a}}
+	FOLDERID_ApplicationShortcuts   = &KNOWNFOLDERID{0xa3918781, 0xe5f2, 0x4890, [8]byte{0xb3, 0xd9, 0xa7, 0xe5, 0x43, 0x32, 0x32, 0x8c}}
+	FOLDERID_RoamingTiles           = &KNOWNFOLDERID{0x00bcfc5a, 0xed94, 0x4e48, [8]byte{0x96, 0xa1, 0x3f, 0x62, 0x17, 0xf2, 0x19, 0x90}}
+	FOLDERID_RoamedTileImages       = &KNOWNFOLDERID{0xaaa8d5a5, 0xf1d6, 0x4259, [8]byte{0xba, 0xa8, 0x78, 0xe7, 0xef, 0x60, 0x83, 0x5e}}
+	FOLDERID_Screenshots            = &KNOWNFOLDERID{0xb7bede81, 0xdf94, 0x4682, [8]byte{0xa7, 0xd8, 0x57, 0xa5, 0x26, 0x20, 0xb8, 0x6f}}
+	FOLDERID_CameraRoll             = &KNOWNFOLDERID{0xab5fb87b, 0x7ce2, 0x4f83, [8]byte{0x91, 0x5d, 0x55, 0x08, 0x46, 0xc9, 0x53, 0x7b}}
+	FOLDERID_SkyDrive               = &KNOWNFOLDERID{0xa52bba46, 0xe9e1, 0x435f, [8]byte{0xb3, 0xd9, 0x28, 0xda, 0xa6, 0x48, 0xc0, 0xf6}}
+	FOLDERID_OneDrive               = &KNOWNFOLDERID{0xa52bba46, 0xe9e1, 0x435f, [8]byte{0xb3, 0xd9, 0x28, 0xda, 0xa6, 0x48, 0xc0, 0xf6}}
+	FOLDERID_SkyDriveDocuments      = &KNOWNFOLDERID{0x24d89e24, 0x2f19, 0x4534, [8]byte{0x9d, 0xde, 0x6a, 0x66, 0x71, 0xfb, 0xb8, 0xfe}}
+	FOLDERID_SkyDrivePictures       = &KNOWNFOLDERID{0x339719b5, 0x8c47, 0x4894, [8]byte{0x94, 0xc2, 0xd8, 0xf7, 0x7a, 0xdd, 0x44, 0xa6}}
+	FOLDERID_SkyDriveMusic          = &KNOWNFOLDERID{0xc3f2459e, 0x80d6, 0x45dc, [8]byte{0xbf, 0xef, 0x1f, 0x76, 0x9f, 0x2b, 0xe7, 0x30}}
+	FOLDERID_SkyDriveCameraRoll     = &KNOWNFOLDERID{0x767e6811, 0x49cb, 0x4273, [8]byte{0x87, 0xc2, 0x20, 0xf3, 0x55, 0xe1, 0x08, 0x5b}}
+	FOLDERID_SearchHistory          = &KNOWNFOLDERID{0x0d4c3db6, 0x03a3, 0x462f, [8]byte{0xa0, 0xe6, 0x08, 0x92, 0x4c, 0x41, 0xb5, 0xd4}}
+	FOLDERID_SearchTemplates        = &KNOWNFOLDERID{0x7e636bfe, 0xdfa9, 0x4d5e, [8]byte{0xb4, 0x56, 0xd7, 0xb3, 0x98, 0x51, 0xd8, 0xa9}}
+	FOLDERID_CameraRollLibrary      = &KNOWNFOLDERID{0x2b20df75, 0x1eda, 0x4039, [8]byte{0x80, 0x97, 0x38, 0x79, 0x82, 0x27, 0xd5, 0xb7}}
+	FOLDERID_SavedPictures          = &KNOWNFOLDERID{0x3b193882, 0xd3ad, 0x4eab, [8]byte{0x96, 0x5a, 0x69, 0x82, 0x9d, 0x1f, 0xb5, 0x9f}}
+	FOLDERID_SavedPicturesLibrary   = &KNOWNFOLDERID{0xe25b5812, 0xbe88, 0x4bd9, [8]byte{0x94, 0xb0, 0x29, 0x23, 0x34, 0x77, 0xb6, 0xc3}}
+	FOLDERID_RetailDemo             = &KNOWNFOLDERID{0x12d4c69e, 0x24ad, 0x4923, [8]byte{0xbe, 0x19, 0x31, 0x32, 0x1c, 0x43, 0xa7, 0x67}}
+	FOLDERID_Device                 = &KNOWNFOLDERID{0x1c2ac1dc, 0x4358, 0x4b6c, [8]byte{0x97, 0x33, 0xaf, 0x21, 0x15, 0x65, 0x76, 0xf0}}
+	FOLDERID_DevelopmentFiles       = &KNOWNFOLDERID{0xdbe8e08e, 0x3053, 0x4bbc, [8]byte{0xb1, 0x83, 0x2a, 0x7b, 0x2b, 0x19, 0x1e, 0x59}}
+	FOLDERID_Objects3D              = &KNOWNFOLDERID{0x31c0dd25, 0x9439, 0x4f12, [8]byte{0xbf, 0x41, 0x7f, 0xf4, 0xed, 0xa3, 0x87, 0x22}}
+	FOLDERID_AppCaptures            = &KNOWNFOLDERID{0xedc0fe71, 0x98d8, 0x4f4a, [8]byte{0xb9, 0x20, 0xc8, 0xdc, 0x13, 0x3c, 0xb1, 0x65}}
+	FOLDERID_LocalDocuments         = &KNOWNFOLDERID{0xf42ee2d3, 0x909f, 0x4907, [8]byte{0x88, 0x71, 0x4c, 0x22, 0xfc, 0x0b, 0xf7, 0x56}}
+	FOLDERID_LocalPictures          = &KNOWNFOLDERID{0x0ddd015d, 0xb06c, 0x45d5, [8]byte{0x8c, 0x4c, 0xf5, 0x97, 0x13, 0x85, 0x46, 0x39}}
+	FOLDERID_LocalVideos            = &KNOWNFOLDERID{0x35286a68, 0x3c57, 0x41a1, [8]byte{0xbb, 0xb1, 0x0e, 0xae, 0x73, 0xd7, 0x6c, 0x95}}
+	FOLDERID_LocalMusic             = &KNOWNFOLDERID{0xa0c69a99, 0x21c8, 0x4671, [8]byte{0x87, 0x03, 0x79, 0x34, 0x16, 0x2f, 0xcf, 0x1d}}
+	FOLDERID_LocalDownloads         = &KNOWNFOLDERID{0x7d83ee9b, 0x2244, 0x4e70, [8]byte{0xb1, 0xf5, 0x53, 0x93, 0x04, 0x2a, 0xf1, 0xe4}}
+	FOLDERID_RecordedCalls          = &KNOWNFOLDERID{0x2f8b40c2, 0x83ed, 0x48ee, [8]byte{0xb3, 0x83, 0xa1, 0xf1, 0x57, 0xec, 0x6f, 0x9a}}
+	FOLDERID_AllAppMods             = &KNOWNFOLDERID{0x7ad67899, 0x66af, 0x43ba, [8]byte{0x91, 0x56, 0x6a, 0xad, 0x42, 0xe6, 0xc5, 0x96}}
+	FOLDERID_CurrentAppMods         = &KNOWNFOLDERID{0x3db40b20, 0x2a30, 0x4dbe, [8]byte{0x91, 0x7e, 0x77, 0x1d, 0xd2, 0x1d, 0xd0, 0x99}}
+	FOLDERID_AppDataDesktop         = &KNOWNFOLDERID{0xb2c5e279, 0x7add, 0x439f, [8]byte{0xb2, 0x8c, 0xc4, 0x1f, 0xe1, 0xbb, 0xf6, 0x72}}
+	FOLDERID_AppDataDocuments       = &KNOWNFOLDERID{0x7be16610, 0x1f7f, 0x44ac, [8]byte{0xbf, 0xf0, 0x83, 0xe1, 0x5f, 0x2f, 0xfc, 0xa1}}
+	FOLDERID_AppDataFavorites       = &KNOWNFOLDERID{0x7cfbefbc, 0xde1f, 0x45aa, [8]byte{0xb8, 0x43, 0xa5, 0x42, 0xac, 0x53, 0x6c, 0xc9}}
+	FOLDERID_AppDataProgramData     = &KNOWNFOLDERID{0x559d40a3, 0xa036, 0x40fa, [8]byte{0xaf, 0x61, 0x84, 0xcb, 0x43, 0x0a, 0x4d, 0x34}}
+)
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/zsyscall_windows.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/zsyscall_windows.go
new file mode 100644
index 000000000..347f13dbf
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/sys/windows/zsyscall_windows.go
@@ -0,0 +1,4083 @@
+// Code generated by 'go generate'; DO NOT EDIT.
+
+package windows
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+var _ unsafe.Pointer
+
+// Do the interface allocations only once for common
+// Errno values.
+const (
+	errnoERROR_IO_PENDING = 997
+)
+
+var (
+	errERROR_IO_PENDING error = syscall.Errno(errnoERROR_IO_PENDING)
+)
+
+// errnoErr returns common boxed Errno values, to prevent
+// allocations at runtime.
+func errnoErr(e syscall.Errno) error {
+	switch e {
+	case 0:
+		return nil
+	case errnoERROR_IO_PENDING:
+		return errERROR_IO_PENDING
+	}
+	// TODO: add more here, after collecting data on the common
+	// error values see on Windows. (perhaps when running
+	// all.bat?)
+	return e
+}
+
+var (
+	modadvapi32 = NewLazySystemDLL("advapi32.dll")
+	modkernel32 = NewLazySystemDLL("kernel32.dll")
+	modshell32  = NewLazySystemDLL("shell32.dll")
+	moduserenv  = NewLazySystemDLL("userenv.dll")
+	modmswsock  = NewLazySystemDLL("mswsock.dll")
+	modcrypt32  = NewLazySystemDLL("crypt32.dll")
+	moduser32   = NewLazySystemDLL("user32.dll")
+	modole32    = NewLazySystemDLL("ole32.dll")
+	modntdll    = NewLazySystemDLL("ntdll.dll")
+	modpsapi    = NewLazySystemDLL("psapi.dll")
+	modws2_32   = NewLazySystemDLL("ws2_32.dll")
+	moddnsapi   = NewLazySystemDLL("dnsapi.dll")
+	modiphlpapi = NewLazySystemDLL("iphlpapi.dll")
+	modsecur32  = NewLazySystemDLL("secur32.dll")
+	modnetapi32 = NewLazySystemDLL("netapi32.dll")
+	modwtsapi32 = NewLazySystemDLL("wtsapi32.dll")
+
+	procRegisterEventSourceW                                 = modadvapi32.NewProc("RegisterEventSourceW")
+	procDeregisterEventSource                                = modadvapi32.NewProc("DeregisterEventSource")
+	procReportEventW                                         = modadvapi32.NewProc("ReportEventW")
+	procOpenSCManagerW                                       = modadvapi32.NewProc("OpenSCManagerW")
+	procCloseServiceHandle                                   = modadvapi32.NewProc("CloseServiceHandle")
+	procCreateServiceW                                       = modadvapi32.NewProc("CreateServiceW")
+	procOpenServiceW                                         = modadvapi32.NewProc("OpenServiceW")
+	procDeleteService                                        = modadvapi32.NewProc("DeleteService")
+	procStartServiceW                                        = modadvapi32.NewProc("StartServiceW")
+	procQueryServiceStatus                                   = modadvapi32.NewProc("QueryServiceStatus")
+	procQueryServiceLockStatusW                              = modadvapi32.NewProc("QueryServiceLockStatusW")
+	procControlService                                       = modadvapi32.NewProc("ControlService")
+	procStartServiceCtrlDispatcherW                          = modadvapi32.NewProc("StartServiceCtrlDispatcherW")
+	procSetServiceStatus                                     = modadvapi32.NewProc("SetServiceStatus")
+	procChangeServiceConfigW                                 = modadvapi32.NewProc("ChangeServiceConfigW")
+	procQueryServiceConfigW                                  = modadvapi32.NewProc("QueryServiceConfigW")
+	procChangeServiceConfig2W                                = modadvapi32.NewProc("ChangeServiceConfig2W")
+	procQueryServiceConfig2W                                 = modadvapi32.NewProc("QueryServiceConfig2W")
+	procEnumServicesStatusExW                                = modadvapi32.NewProc("EnumServicesStatusExW")
+	procQueryServiceStatusEx                                 = modadvapi32.NewProc("QueryServiceStatusEx")
+	procNotifyServiceStatusChangeW                           = modadvapi32.NewProc("NotifyServiceStatusChangeW")
+	procGetLastError                                         = modkernel32.NewProc("GetLastError")
+	procLoadLibraryW                                         = modkernel32.NewProc("LoadLibraryW")
+	procLoadLibraryExW                                       = modkernel32.NewProc("LoadLibraryExW")
+	procFreeLibrary                                          = modkernel32.NewProc("FreeLibrary")
+	procGetProcAddress                                       = modkernel32.NewProc("GetProcAddress")
+	procGetModuleFileNameW                                   = modkernel32.NewProc("GetModuleFileNameW")
+	procGetModuleHandleExW                                   = modkernel32.NewProc("GetModuleHandleExW")
+	procGetVersion                                           = modkernel32.NewProc("GetVersion")
+	procFormatMessageW                                       = modkernel32.NewProc("FormatMessageW")
+	procExitProcess                                          = modkernel32.NewProc("ExitProcess")
+	procIsWow64Process                                       = modkernel32.NewProc("IsWow64Process")
+	procCreateFileW                                          = modkernel32.NewProc("CreateFileW")
+	procReadFile                                             = modkernel32.NewProc("ReadFile")
+	procWriteFile                                            = modkernel32.NewProc("WriteFile")
+	procGetOverlappedResult                                  = modkernel32.NewProc("GetOverlappedResult")
+	procSetFilePointer                                       = modkernel32.NewProc("SetFilePointer")
+	procCloseHandle                                          = modkernel32.NewProc("CloseHandle")
+	procGetStdHandle                                         = modkernel32.NewProc("GetStdHandle")
+	procSetStdHandle                                         = modkernel32.NewProc("SetStdHandle")
+	procFindFirstFileW                                       = modkernel32.NewProc("FindFirstFileW")
+	procFindNextFileW                                        = modkernel32.NewProc("FindNextFileW")
+	procFindClose                                            = modkernel32.NewProc("FindClose")
+	procGetFileInformationByHandle                           = modkernel32.NewProc("GetFileInformationByHandle")
+	procGetFileInformationByHandleEx                         = modkernel32.NewProc("GetFileInformationByHandleEx")
+	procGetCurrentDirectoryW                                 = modkernel32.NewProc("GetCurrentDirectoryW")
+	procSetCurrentDirectoryW                                 = modkernel32.NewProc("SetCurrentDirectoryW")
+	procCreateDirectoryW                                     = modkernel32.NewProc("CreateDirectoryW")
+	procRemoveDirectoryW                                     = modkernel32.NewProc("RemoveDirectoryW")
+	procDeleteFileW                                          = modkernel32.NewProc("DeleteFileW")
+	procMoveFileW                                            = modkernel32.NewProc("MoveFileW")
+	procMoveFileExW                                          = modkernel32.NewProc("MoveFileExW")
+	procLockFileEx                                           = modkernel32.NewProc("LockFileEx")
+	procUnlockFileEx                                         = modkernel32.NewProc("UnlockFileEx")
+	procGetComputerNameW                                     = modkernel32.NewProc("GetComputerNameW")
+	procGetComputerNameExW                                   = modkernel32.NewProc("GetComputerNameExW")
+	procSetEndOfFile                                         = modkernel32.NewProc("SetEndOfFile")
+	procGetSystemTimeAsFileTime                              = modkernel32.NewProc("GetSystemTimeAsFileTime")
+	procGetSystemTimePreciseAsFileTime                       = modkernel32.NewProc("GetSystemTimePreciseAsFileTime")
+	procGetTimeZoneInformation                               = modkernel32.NewProc("GetTimeZoneInformation")
+	procCreateIoCompletionPort                               = modkernel32.NewProc("CreateIoCompletionPort")
+	procGetQueuedCompletionStatus                            = modkernel32.NewProc("GetQueuedCompletionStatus")
+	procPostQueuedCompletionStatus                           = modkernel32.NewProc("PostQueuedCompletionStatus")
+	procCancelIo                                             = modkernel32.NewProc("CancelIo")
+	procCancelIoEx                                           = modkernel32.NewProc("CancelIoEx")
+	procCreateProcessW                                       = modkernel32.NewProc("CreateProcessW")
+	procOpenProcess                                          = modkernel32.NewProc("OpenProcess")
+	procShellExecuteW                                        = modshell32.NewProc("ShellExecuteW")
+	procSHGetKnownFolderPath                                 = modshell32.NewProc("SHGetKnownFolderPath")
+	procTerminateProcess                                     = modkernel32.NewProc("TerminateProcess")
+	procGetExitCodeProcess                                   = modkernel32.NewProc("GetExitCodeProcess")
+	procGetStartupInfoW                                      = modkernel32.NewProc("GetStartupInfoW")
+	procGetProcessTimes                                      = modkernel32.NewProc("GetProcessTimes")
+	procDuplicateHandle                                      = modkernel32.NewProc("DuplicateHandle")
+	procWaitForSingleObject                                  = modkernel32.NewProc("WaitForSingleObject")
+	procWaitForMultipleObjects                               = modkernel32.NewProc("WaitForMultipleObjects")
+	procGetTempPathW                                         = modkernel32.NewProc("GetTempPathW")
+	procCreatePipe                                           = modkernel32.NewProc("CreatePipe")
+	procGetFileType                                          = modkernel32.NewProc("GetFileType")
+	procCryptAcquireContextW                                 = modadvapi32.NewProc("CryptAcquireContextW")
+	procCryptReleaseContext                                  = modadvapi32.NewProc("CryptReleaseContext")
+	procCryptGenRandom                                       = modadvapi32.NewProc("CryptGenRandom")
+	procGetEnvironmentStringsW                               = modkernel32.NewProc("GetEnvironmentStringsW")
+	procFreeEnvironmentStringsW                              = modkernel32.NewProc("FreeEnvironmentStringsW")
+	procGetEnvironmentVariableW                              = modkernel32.NewProc("GetEnvironmentVariableW")
+	procSetEnvironmentVariableW                              = modkernel32.NewProc("SetEnvironmentVariableW")
+	procCreateEnvironmentBlock                               = moduserenv.NewProc("CreateEnvironmentBlock")
+	procDestroyEnvironmentBlock                              = moduserenv.NewProc("DestroyEnvironmentBlock")
+	procGetTickCount64                                       = modkernel32.NewProc("GetTickCount64")
+	procSetFileTime                                          = modkernel32.NewProc("SetFileTime")
+	procGetFileAttributesW                                   = modkernel32.NewProc("GetFileAttributesW")
+	procSetFileAttributesW                                   = modkernel32.NewProc("SetFileAttributesW")
+	procGetFileAttributesExW                                 = modkernel32.NewProc("GetFileAttributesExW")
+	procGetCommandLineW                                      = modkernel32.NewProc("GetCommandLineW")
+	procCommandLineToArgvW                                   = modshell32.NewProc("CommandLineToArgvW")
+	procLocalFree                                            = modkernel32.NewProc("LocalFree")
+	procSetHandleInformation                                 = modkernel32.NewProc("SetHandleInformation")
+	procFlushFileBuffers                                     = modkernel32.NewProc("FlushFileBuffers")
+	procGetFullPathNameW                                     = modkernel32.NewProc("GetFullPathNameW")
+	procGetLongPathNameW                                     = modkernel32.NewProc("GetLongPathNameW")
+	procGetShortPathNameW                                    = modkernel32.NewProc("GetShortPathNameW")
+	procCreateFileMappingW                                   = modkernel32.NewProc("CreateFileMappingW")
+	procMapViewOfFile                                        = modkernel32.NewProc("MapViewOfFile")
+	procUnmapViewOfFile                                      = modkernel32.NewProc("UnmapViewOfFile")
+	procFlushViewOfFile                                      = modkernel32.NewProc("FlushViewOfFile")
+	procVirtualLock                                          = modkernel32.NewProc("VirtualLock")
+	procVirtualUnlock                                        = modkernel32.NewProc("VirtualUnlock")
+	procVirtualAlloc                                         = modkernel32.NewProc("VirtualAlloc")
+	procVirtualFree                                          = modkernel32.NewProc("VirtualFree")
+	procVirtualProtect                                       = modkernel32.NewProc("VirtualProtect")
+	procTransmitFile                                         = modmswsock.NewProc("TransmitFile")
+	procReadDirectoryChangesW                                = modkernel32.NewProc("ReadDirectoryChangesW")
+	procCertOpenSystemStoreW                                 = modcrypt32.NewProc("CertOpenSystemStoreW")
+	procCertOpenStore                                        = modcrypt32.NewProc("CertOpenStore")
+	procCertEnumCertificatesInStore                          = modcrypt32.NewProc("CertEnumCertificatesInStore")
+	procCertAddCertificateContextToStore                     = modcrypt32.NewProc("CertAddCertificateContextToStore")
+	procCertCloseStore                                       = modcrypt32.NewProc("CertCloseStore")
+	procCertGetCertificateChain                              = modcrypt32.NewProc("CertGetCertificateChain")
+	procCertFreeCertificateChain                             = modcrypt32.NewProc("CertFreeCertificateChain")
+	procCertCreateCertificateContext                         = modcrypt32.NewProc("CertCreateCertificateContext")
+	procCertFreeCertificateContext                           = modcrypt32.NewProc("CertFreeCertificateContext")
+	procCertVerifyCertificateChainPolicy                     = modcrypt32.NewProc("CertVerifyCertificateChainPolicy")
+	procRegOpenKeyExW                                        = modadvapi32.NewProc("RegOpenKeyExW")
+	procRegCloseKey                                          = modadvapi32.NewProc("RegCloseKey")
+	procRegQueryInfoKeyW                                     = modadvapi32.NewProc("RegQueryInfoKeyW")
+	procRegEnumKeyExW                                        = modadvapi32.NewProc("RegEnumKeyExW")
+	procRegQueryValueExW                                     = modadvapi32.NewProc("RegQueryValueExW")
+	procGetCurrentProcessId                                  = modkernel32.NewProc("GetCurrentProcessId")
+	procGetConsoleMode                                       = modkernel32.NewProc("GetConsoleMode")
+	procSetConsoleMode                                       = modkernel32.NewProc("SetConsoleMode")
+	procGetConsoleScreenBufferInfo                           = modkernel32.NewProc("GetConsoleScreenBufferInfo")
+	procWriteConsoleW                                        = modkernel32.NewProc("WriteConsoleW")
+	procReadConsoleW                                         = modkernel32.NewProc("ReadConsoleW")
+	procCreateToolhelp32Snapshot                             = modkernel32.NewProc("CreateToolhelp32Snapshot")
+	procProcess32FirstW                                      = modkernel32.NewProc("Process32FirstW")
+	procProcess32NextW                                       = modkernel32.NewProc("Process32NextW")
+	procThread32First                                        = modkernel32.NewProc("Thread32First")
+	procThread32Next                                         = modkernel32.NewProc("Thread32Next")
+	procDeviceIoControl                                      = modkernel32.NewProc("DeviceIoControl")
+	procCreateSymbolicLinkW                                  = modkernel32.NewProc("CreateSymbolicLinkW")
+	procCreateHardLinkW                                      = modkernel32.NewProc("CreateHardLinkW")
+	procGetCurrentThreadId                                   = modkernel32.NewProc("GetCurrentThreadId")
+	procCreateEventW                                         = modkernel32.NewProc("CreateEventW")
+	procCreateEventExW                                       = modkernel32.NewProc("CreateEventExW")
+	procOpenEventW                                           = modkernel32.NewProc("OpenEventW")
+	procSetEvent                                             = modkernel32.NewProc("SetEvent")
+	procResetEvent                                           = modkernel32.NewProc("ResetEvent")
+	procPulseEvent                                           = modkernel32.NewProc("PulseEvent")
+	procCreateMutexW                                         = modkernel32.NewProc("CreateMutexW")
+	procCreateMutexExW                                       = modkernel32.NewProc("CreateMutexExW")
+	procOpenMutexW                                           = modkernel32.NewProc("OpenMutexW")
+	procReleaseMutex                                         = modkernel32.NewProc("ReleaseMutex")
+	procSleepEx                                              = modkernel32.NewProc("SleepEx")
+	procCreateJobObjectW                                     = modkernel32.NewProc("CreateJobObjectW")
+	procAssignProcessToJobObject                             = modkernel32.NewProc("AssignProcessToJobObject")
+	procTerminateJobObject                                   = modkernel32.NewProc("TerminateJobObject")
+	procSetErrorMode                                         = modkernel32.NewProc("SetErrorMode")
+	procResumeThread                                         = modkernel32.NewProc("ResumeThread")
+	procSetPriorityClass                                     = modkernel32.NewProc("SetPriorityClass")
+	procGetPriorityClass                                     = modkernel32.NewProc("GetPriorityClass")
+	procQueryInformationJobObject                            = modkernel32.NewProc("QueryInformationJobObject")
+	procSetInformationJobObject                              = modkernel32.NewProc("SetInformationJobObject")
+	procGenerateConsoleCtrlEvent                             = modkernel32.NewProc("GenerateConsoleCtrlEvent")
+	procGetProcessId                                         = modkernel32.NewProc("GetProcessId")
+	procOpenThread                                           = modkernel32.NewProc("OpenThread")
+	procSetProcessPriorityBoost                              = modkernel32.NewProc("SetProcessPriorityBoost")
+	procGetProcessWorkingSetSizeEx                           = modkernel32.NewProc("GetProcessWorkingSetSizeEx")
+	procSetProcessWorkingSetSizeEx                           = modkernel32.NewProc("SetProcessWorkingSetSizeEx")
+	procDefineDosDeviceW                                     = modkernel32.NewProc("DefineDosDeviceW")
+	procDeleteVolumeMountPointW                              = modkernel32.NewProc("DeleteVolumeMountPointW")
+	procFindFirstVolumeW                                     = modkernel32.NewProc("FindFirstVolumeW")
+	procFindFirstVolumeMountPointW                           = modkernel32.NewProc("FindFirstVolumeMountPointW")
+	procFindNextVolumeW                                      = modkernel32.NewProc("FindNextVolumeW")
+	procFindNextVolumeMountPointW                            = modkernel32.NewProc("FindNextVolumeMountPointW")
+	procFindVolumeClose                                      = modkernel32.NewProc("FindVolumeClose")
+	procFindVolumeMountPointClose                            = modkernel32.NewProc("FindVolumeMountPointClose")
+	procGetDiskFreeSpaceExW                                  = modkernel32.NewProc("GetDiskFreeSpaceExW")
+	procGetDriveTypeW                                        = modkernel32.NewProc("GetDriveTypeW")
+	procGetLogicalDrives                                     = modkernel32.NewProc("GetLogicalDrives")
+	procGetLogicalDriveStringsW                              = modkernel32.NewProc("GetLogicalDriveStringsW")
+	procGetVolumeInformationW                                = modkernel32.NewProc("GetVolumeInformationW")
+	procGetVolumeInformationByHandleW                        = modkernel32.NewProc("GetVolumeInformationByHandleW")
+	procGetVolumeNameForVolumeMountPointW                    = modkernel32.NewProc("GetVolumeNameForVolumeMountPointW")
+	procGetVolumePathNameW                                   = modkernel32.NewProc("GetVolumePathNameW")
+	procGetVolumePathNamesForVolumeNameW                     = modkernel32.NewProc("GetVolumePathNamesForVolumeNameW")
+	procQueryDosDeviceW                                      = modkernel32.NewProc("QueryDosDeviceW")
+	procSetVolumeLabelW                                      = modkernel32.NewProc("SetVolumeLabelW")
+	procSetVolumeMountPointW                                 = modkernel32.NewProc("SetVolumeMountPointW")
+	procMessageBoxW                                          = moduser32.NewProc("MessageBoxW")
+	procExitWindowsEx                                        = moduser32.NewProc("ExitWindowsEx")
+	procInitiateSystemShutdownExW                            = modadvapi32.NewProc("InitiateSystemShutdownExW")
+	procSetProcessShutdownParameters                         = modkernel32.NewProc("SetProcessShutdownParameters")
+	procGetProcessShutdownParameters                         = modkernel32.NewProc("GetProcessShutdownParameters")
+	procCLSIDFromString                                      = modole32.NewProc("CLSIDFromString")
+	procStringFromGUID2                                      = modole32.NewProc("StringFromGUID2")
+	procCoCreateGuid                                         = modole32.NewProc("CoCreateGuid")
+	procCoTaskMemFree                                        = modole32.NewProc("CoTaskMemFree")
+	procRtlGetVersion                                        = modntdll.NewProc("RtlGetVersion")
+	procRtlGetNtVersionNumbers                               = modntdll.NewProc("RtlGetNtVersionNumbers")
+	procGetProcessPreferredUILanguages                       = modkernel32.NewProc("GetProcessPreferredUILanguages")
+	procGetThreadPreferredUILanguages                        = modkernel32.NewProc("GetThreadPreferredUILanguages")
+	procGetUserPreferredUILanguages                          = modkernel32.NewProc("GetUserPreferredUILanguages")
+	procGetSystemPreferredUILanguages                        = modkernel32.NewProc("GetSystemPreferredUILanguages")
+	procEnumProcesses                                        = modpsapi.NewProc("EnumProcesses")
+	procWSAStartup                                           = modws2_32.NewProc("WSAStartup")
+	procWSACleanup                                           = modws2_32.NewProc("WSACleanup")
+	procWSAIoctl                                             = modws2_32.NewProc("WSAIoctl")
+	procsocket                                               = modws2_32.NewProc("socket")
+	procsendto                                               = modws2_32.NewProc("sendto")
+	procrecvfrom                                             = modws2_32.NewProc("recvfrom")
+	procsetsockopt                                           = modws2_32.NewProc("setsockopt")
+	procgetsockopt                                           = modws2_32.NewProc("getsockopt")
+	procbind                                                 = modws2_32.NewProc("bind")
+	procconnect                                              = modws2_32.NewProc("connect")
+	procgetsockname                                          = modws2_32.NewProc("getsockname")
+	procgetpeername                                          = modws2_32.NewProc("getpeername")
+	proclisten                                               = modws2_32.NewProc("listen")
+	procshutdown                                             = modws2_32.NewProc("shutdown")
+	procclosesocket                                          = modws2_32.NewProc("closesocket")
+	procAcceptEx                                             = modmswsock.NewProc("AcceptEx")
+	procGetAcceptExSockaddrs                                 = modmswsock.NewProc("GetAcceptExSockaddrs")
+	procWSARecv                                              = modws2_32.NewProc("WSARecv")
+	procWSASend                                              = modws2_32.NewProc("WSASend")
+	procWSARecvFrom                                          = modws2_32.NewProc("WSARecvFrom")
+	procWSASendTo                                            = modws2_32.NewProc("WSASendTo")
+	procgethostbyname                                        = modws2_32.NewProc("gethostbyname")
+	procgetservbyname                                        = modws2_32.NewProc("getservbyname")
+	procntohs                                                = modws2_32.NewProc("ntohs")
+	procgetprotobyname                                       = modws2_32.NewProc("getprotobyname")
+	procDnsQuery_W                                           = moddnsapi.NewProc("DnsQuery_W")
+	procDnsRecordListFree                                    = moddnsapi.NewProc("DnsRecordListFree")
+	procDnsNameCompare_W                                     = moddnsapi.NewProc("DnsNameCompare_W")
+	procGetAddrInfoW                                         = modws2_32.NewProc("GetAddrInfoW")
+	procFreeAddrInfoW                                        = modws2_32.NewProc("FreeAddrInfoW")
+	procGetIfEntry                                           = modiphlpapi.NewProc("GetIfEntry")
+	procGetAdaptersInfo                                      = modiphlpapi.NewProc("GetAdaptersInfo")
+	procSetFileCompletionNotificationModes                   = modkernel32.NewProc("SetFileCompletionNotificationModes")
+	procWSAEnumProtocolsW                                    = modws2_32.NewProc("WSAEnumProtocolsW")
+	procGetAdaptersAddresses                                 = modiphlpapi.NewProc("GetAdaptersAddresses")
+	procGetACP                                               = modkernel32.NewProc("GetACP")
+	procMultiByteToWideChar                                  = modkernel32.NewProc("MultiByteToWideChar")
+	procTranslateNameW                                       = modsecur32.NewProc("TranslateNameW")
+	procGetUserNameExW                                       = modsecur32.NewProc("GetUserNameExW")
+	procNetUserGetInfo                                       = modnetapi32.NewProc("NetUserGetInfo")
+	procNetGetJoinInformation                                = modnetapi32.NewProc("NetGetJoinInformation")
+	procNetApiBufferFree                                     = modnetapi32.NewProc("NetApiBufferFree")
+	procLookupAccountSidW                                    = modadvapi32.NewProc("LookupAccountSidW")
+	procLookupAccountNameW                                   = modadvapi32.NewProc("LookupAccountNameW")
+	procConvertSidToStringSidW                               = modadvapi32.NewProc("ConvertSidToStringSidW")
+	procConvertStringSidToSidW                               = modadvapi32.NewProc("ConvertStringSidToSidW")
+	procGetLengthSid                                         = modadvapi32.NewProc("GetLengthSid")
+	procCopySid                                              = modadvapi32.NewProc("CopySid")
+	procAllocateAndInitializeSid                             = modadvapi32.NewProc("AllocateAndInitializeSid")
+	procCreateWellKnownSid                                   = modadvapi32.NewProc("CreateWellKnownSid")
+	procIsWellKnownSid                                       = modadvapi32.NewProc("IsWellKnownSid")
+	procFreeSid                                              = modadvapi32.NewProc("FreeSid")
+	procEqualSid                                             = modadvapi32.NewProc("EqualSid")
+	procGetSidIdentifierAuthority                            = modadvapi32.NewProc("GetSidIdentifierAuthority")
+	procGetSidSubAuthorityCount                              = modadvapi32.NewProc("GetSidSubAuthorityCount")
+	procGetSidSubAuthority                                   = modadvapi32.NewProc("GetSidSubAuthority")
+	procIsValidSid                                           = modadvapi32.NewProc("IsValidSid")
+	procCheckTokenMembership                                 = modadvapi32.NewProc("CheckTokenMembership")
+	procOpenProcessToken                                     = modadvapi32.NewProc("OpenProcessToken")
+	procOpenThreadToken                                      = modadvapi32.NewProc("OpenThreadToken")
+	procImpersonateSelf                                      = modadvapi32.NewProc("ImpersonateSelf")
+	procRevertToSelf                                         = modadvapi32.NewProc("RevertToSelf")
+	procSetThreadToken                                       = modadvapi32.NewProc("SetThreadToken")
+	procLookupPrivilegeValueW                                = modadvapi32.NewProc("LookupPrivilegeValueW")
+	procAdjustTokenPrivileges                                = modadvapi32.NewProc("AdjustTokenPrivileges")
+	procAdjustTokenGroups                                    = modadvapi32.NewProc("AdjustTokenGroups")
+	procGetTokenInformation                                  = modadvapi32.NewProc("GetTokenInformation")
+	procSetTokenInformation                                  = modadvapi32.NewProc("SetTokenInformation")
+	procDuplicateTokenEx                                     = modadvapi32.NewProc("DuplicateTokenEx")
+	procGetUserProfileDirectoryW                             = moduserenv.NewProc("GetUserProfileDirectoryW")
+	procGetSystemDirectoryW                                  = modkernel32.NewProc("GetSystemDirectoryW")
+	procGetWindowsDirectoryW                                 = modkernel32.NewProc("GetWindowsDirectoryW")
+	procGetSystemWindowsDirectoryW                           = modkernel32.NewProc("GetSystemWindowsDirectoryW")
+	procWTSQueryUserToken                                    = modwtsapi32.NewProc("WTSQueryUserToken")
+	procWTSEnumerateSessionsW                                = modwtsapi32.NewProc("WTSEnumerateSessionsW")
+	procWTSFreeMemory                                        = modwtsapi32.NewProc("WTSFreeMemory")
+	procGetSecurityInfo                                      = modadvapi32.NewProc("GetSecurityInfo")
+	procSetSecurityInfo                                      = modadvapi32.NewProc("SetSecurityInfo")
+	procGetNamedSecurityInfoW                                = modadvapi32.NewProc("GetNamedSecurityInfoW")
+	procSetNamedSecurityInfoW                                = modadvapi32.NewProc("SetNamedSecurityInfoW")
+	procBuildSecurityDescriptorW                             = modadvapi32.NewProc("BuildSecurityDescriptorW")
+	procInitializeSecurityDescriptor                         = modadvapi32.NewProc("InitializeSecurityDescriptor")
+	procGetSecurityDescriptorControl                         = modadvapi32.NewProc("GetSecurityDescriptorControl")
+	procGetSecurityDescriptorDacl                            = modadvapi32.NewProc("GetSecurityDescriptorDacl")
+	procGetSecurityDescriptorSacl                            = modadvapi32.NewProc("GetSecurityDescriptorSacl")
+	procGetSecurityDescriptorOwner                           = modadvapi32.NewProc("GetSecurityDescriptorOwner")
+	procGetSecurityDescriptorGroup                           = modadvapi32.NewProc("GetSecurityDescriptorGroup")
+	procGetSecurityDescriptorLength                          = modadvapi32.NewProc("GetSecurityDescriptorLength")
+	procGetSecurityDescriptorRMControl                       = modadvapi32.NewProc("GetSecurityDescriptorRMControl")
+	procIsValidSecurityDescriptor                            = modadvapi32.NewProc("IsValidSecurityDescriptor")
+	procSetSecurityDescriptorControl                         = modadvapi32.NewProc("SetSecurityDescriptorControl")
+	procSetSecurityDescriptorDacl                            = modadvapi32.NewProc("SetSecurityDescriptorDacl")
+	procSetSecurityDescriptorSacl                            = modadvapi32.NewProc("SetSecurityDescriptorSacl")
+	procSetSecurityDescriptorOwner                           = modadvapi32.NewProc("SetSecurityDescriptorOwner")
+	procSetSecurityDescriptorGroup                           = modadvapi32.NewProc("SetSecurityDescriptorGroup")
+	procSetSecurityDescriptorRMControl                       = modadvapi32.NewProc("SetSecurityDescriptorRMControl")
+	procConvertStringSecurityDescriptorToSecurityDescriptorW = modadvapi32.NewProc("ConvertStringSecurityDescriptorToSecurityDescriptorW")
+	procConvertSecurityDescriptorToStringSecurityDescriptorW = modadvapi32.NewProc("ConvertSecurityDescriptorToStringSecurityDescriptorW")
+	procMakeAbsoluteSD                                       = modadvapi32.NewProc("MakeAbsoluteSD")
+	procMakeSelfRelativeSD                                   = modadvapi32.NewProc("MakeSelfRelativeSD")
+	procSetEntriesInAclW                                     = modadvapi32.NewProc("SetEntriesInAclW")
+)
+
+func RegisterEventSource(uncServerName *uint16, sourceName *uint16) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall(procRegisterEventSourceW.Addr(), 2, uintptr(unsafe.Pointer(uncServerName)), uintptr(unsafe.Pointer(sourceName)), 0)
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func DeregisterEventSource(handle Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procDeregisterEventSource.Addr(), 1, uintptr(handle), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func ReportEvent(log Handle, etype uint16, category uint16, eventId uint32, usrSId uintptr, numStrings uint16, dataSize uint32, strings **uint16, rawData *byte) (err error) {
+	r1, _, e1 := syscall.Syscall9(procReportEventW.Addr(), 9, uintptr(log), uintptr(etype), uintptr(category), uintptr(eventId), uintptr(usrSId), uintptr(numStrings), uintptr(dataSize), uintptr(unsafe.Pointer(strings)), uintptr(unsafe.Pointer(rawData)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func OpenSCManager(machineName *uint16, databaseName *uint16, access uint32) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall(procOpenSCManagerW.Addr(), 3, uintptr(unsafe.Pointer(machineName)), uintptr(unsafe.Pointer(databaseName)), uintptr(access))
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CloseServiceHandle(handle Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procCloseServiceHandle.Addr(), 1, uintptr(handle), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CreateService(mgr Handle, serviceName *uint16, displayName *uint16, access uint32, srvType uint32, startType uint32, errCtl uint32, pathName *uint16, loadOrderGroup *uint16, tagId *uint32, dependencies *uint16, serviceStartName *uint16, password *uint16) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall15(procCreateServiceW.Addr(), 13, uintptr(mgr), uintptr(unsafe.Pointer(serviceName)), uintptr(unsafe.Pointer(displayName)), uintptr(access), uintptr(srvType), uintptr(startType), uintptr(errCtl), uintptr(unsafe.Pointer(pathName)), uintptr(unsafe.Pointer(loadOrderGroup)), uintptr(unsafe.Pointer(tagId)), uintptr(unsafe.Pointer(dependencies)), uintptr(unsafe.Pointer(serviceStartName)), uintptr(unsafe.Pointer(password)), 0, 0)
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func OpenService(mgr Handle, serviceName *uint16, access uint32) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall(procOpenServiceW.Addr(), 3, uintptr(mgr), uintptr(unsafe.Pointer(serviceName)), uintptr(access))
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func DeleteService(service Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procDeleteService.Addr(), 1, uintptr(service), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func StartService(service Handle, numArgs uint32, argVectors **uint16) (err error) {
+	r1, _, e1 := syscall.Syscall(procStartServiceW.Addr(), 3, uintptr(service), uintptr(numArgs), uintptr(unsafe.Pointer(argVectors)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func QueryServiceStatus(service Handle, status *SERVICE_STATUS) (err error) {
+	r1, _, e1 := syscall.Syscall(procQueryServiceStatus.Addr(), 2, uintptr(service), uintptr(unsafe.Pointer(status)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func QueryServiceLockStatus(mgr Handle, lockStatus *QUERY_SERVICE_LOCK_STATUS, bufSize uint32, bytesNeeded *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procQueryServiceLockStatusW.Addr(), 4, uintptr(mgr), uintptr(unsafe.Pointer(lockStatus)), uintptr(bufSize), uintptr(unsafe.Pointer(bytesNeeded)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func ControlService(service Handle, control uint32, status *SERVICE_STATUS) (err error) {
+	r1, _, e1 := syscall.Syscall(procControlService.Addr(), 3, uintptr(service), uintptr(control), uintptr(unsafe.Pointer(status)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func StartServiceCtrlDispatcher(serviceTable *SERVICE_TABLE_ENTRY) (err error) {
+	r1, _, e1 := syscall.Syscall(procStartServiceCtrlDispatcherW.Addr(), 1, uintptr(unsafe.Pointer(serviceTable)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetServiceStatus(service Handle, serviceStatus *SERVICE_STATUS) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetServiceStatus.Addr(), 2, uintptr(service), uintptr(unsafe.Pointer(serviceStatus)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func ChangeServiceConfig(service Handle, serviceType uint32, startType uint32, errorControl uint32, binaryPathName *uint16, loadOrderGroup *uint16, tagId *uint32, dependencies *uint16, serviceStartName *uint16, password *uint16, displayName *uint16) (err error) {
+	r1, _, e1 := syscall.Syscall12(procChangeServiceConfigW.Addr(), 11, uintptr(service), uintptr(serviceType), uintptr(startType), uintptr(errorControl), uintptr(unsafe.Pointer(binaryPathName)), uintptr(unsafe.Pointer(loadOrderGroup)), uintptr(unsafe.Pointer(tagId)), uintptr(unsafe.Pointer(dependencies)), uintptr(unsafe.Pointer(serviceStartName)), uintptr(unsafe.Pointer(password)), uintptr(unsafe.Pointer(displayName)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func QueryServiceConfig(service Handle, serviceConfig *QUERY_SERVICE_CONFIG, bufSize uint32, bytesNeeded *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procQueryServiceConfigW.Addr(), 4, uintptr(service), uintptr(unsafe.Pointer(serviceConfig)), uintptr(bufSize), uintptr(unsafe.Pointer(bytesNeeded)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func ChangeServiceConfig2(service Handle, infoLevel uint32, info *byte) (err error) {
+	r1, _, e1 := syscall.Syscall(procChangeServiceConfig2W.Addr(), 3, uintptr(service), uintptr(infoLevel), uintptr(unsafe.Pointer(info)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func QueryServiceConfig2(service Handle, infoLevel uint32, buff *byte, buffSize uint32, bytesNeeded *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procQueryServiceConfig2W.Addr(), 5, uintptr(service), uintptr(infoLevel), uintptr(unsafe.Pointer(buff)), uintptr(buffSize), uintptr(unsafe.Pointer(bytesNeeded)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func EnumServicesStatusEx(mgr Handle, infoLevel uint32, serviceType uint32, serviceState uint32, services *byte, bufSize uint32, bytesNeeded *uint32, servicesReturned *uint32, resumeHandle *uint32, groupName *uint16) (err error) {
+	r1, _, e1 := syscall.Syscall12(procEnumServicesStatusExW.Addr(), 10, uintptr(mgr), uintptr(infoLevel), uintptr(serviceType), uintptr(serviceState), uintptr(unsafe.Pointer(services)), uintptr(bufSize), uintptr(unsafe.Pointer(bytesNeeded)), uintptr(unsafe.Pointer(servicesReturned)), uintptr(unsafe.Pointer(resumeHandle)), uintptr(unsafe.Pointer(groupName)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func QueryServiceStatusEx(service Handle, infoLevel uint32, buff *byte, buffSize uint32, bytesNeeded *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procQueryServiceStatusEx.Addr(), 5, uintptr(service), uintptr(infoLevel), uintptr(unsafe.Pointer(buff)), uintptr(buffSize), uintptr(unsafe.Pointer(bytesNeeded)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func NotifyServiceStatusChange(service Handle, notifyMask uint32, notifier *SERVICE_NOTIFY) (ret error) {
+	r0, _, _ := syscall.Syscall(procNotifyServiceStatusChangeW.Addr(), 3, uintptr(service), uintptr(notifyMask), uintptr(unsafe.Pointer(notifier)))
+	if r0 != 0 {
+		ret = syscall.Errno(r0)
+	}
+	return
+}
+
+func GetLastError() (lasterr error) {
+	r0, _, _ := syscall.Syscall(procGetLastError.Addr(), 0, 0, 0, 0)
+	if r0 != 0 {
+		lasterr = syscall.Errno(r0)
+	}
+	return
+}
+
+func LoadLibrary(libname string) (handle Handle, err error) {
+	var _p0 *uint16
+	_p0, err = syscall.UTF16PtrFromString(libname)
+	if err != nil {
+		return
+	}
+	return _LoadLibrary(_p0)
+}
+
+func _LoadLibrary(libname *uint16) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall(procLoadLibraryW.Addr(), 1, uintptr(unsafe.Pointer(libname)), 0, 0)
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func LoadLibraryEx(libname string, zero Handle, flags uintptr) (handle Handle, err error) {
+	var _p0 *uint16
+	_p0, err = syscall.UTF16PtrFromString(libname)
+	if err != nil {
+		return
+	}
+	return _LoadLibraryEx(_p0, zero, flags)
+}
+
+func _LoadLibraryEx(libname *uint16, zero Handle, flags uintptr) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall(procLoadLibraryExW.Addr(), 3, uintptr(unsafe.Pointer(libname)), uintptr(zero), uintptr(flags))
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func FreeLibrary(handle Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procFreeLibrary.Addr(), 1, uintptr(handle), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetProcAddress(module Handle, procname string) (proc uintptr, err error) {
+	var _p0 *byte
+	_p0, err = syscall.BytePtrFromString(procname)
+	if err != nil {
+		return
+	}
+	return _GetProcAddress(module, _p0)
+}
+
+func _GetProcAddress(module Handle, procname *byte) (proc uintptr, err error) {
+	r0, _, e1 := syscall.Syscall(procGetProcAddress.Addr(), 2, uintptr(module), uintptr(unsafe.Pointer(procname)), 0)
+	proc = uintptr(r0)
+	if proc == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetModuleFileName(module Handle, filename *uint16, size uint32) (n uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetModuleFileNameW.Addr(), 3, uintptr(module), uintptr(unsafe.Pointer(filename)), uintptr(size))
+	n = uint32(r0)
+	if n == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetModuleHandleEx(flags uint32, moduleName *uint16, module *Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procGetModuleHandleExW.Addr(), 3, uintptr(flags), uintptr(unsafe.Pointer(moduleName)), uintptr(unsafe.Pointer(module)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetVersion() (ver uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetVersion.Addr(), 0, 0, 0, 0)
+	ver = uint32(r0)
+	if ver == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func FormatMessage(flags uint32, msgsrc uintptr, msgid uint32, langid uint32, buf []uint16, args *byte) (n uint32, err error) {
+	var _p0 *uint16
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	r0, _, e1 := syscall.Syscall9(procFormatMessageW.Addr(), 7, uintptr(flags), uintptr(msgsrc), uintptr(msgid), uintptr(langid), uintptr(unsafe.Pointer(_p0)), uintptr(len(buf)), uintptr(unsafe.Pointer(args)), 0, 0)
+	n = uint32(r0)
+	if n == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func ExitProcess(exitcode uint32) {
+	syscall.Syscall(procExitProcess.Addr(), 1, uintptr(exitcode), 0, 0)
+	return
+}
+
+func IsWow64Process(handle Handle, isWow64 *bool) (err error) {
+	var _p0 uint32
+	if *isWow64 {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r1, _, e1 := syscall.Syscall(procIsWow64Process.Addr(), 2, uintptr(handle), uintptr(unsafe.Pointer(&_p0)), 0)
+	*isWow64 = _p0 != 0
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CreateFile(name *uint16, access uint32, mode uint32, sa *SecurityAttributes, createmode uint32, attrs uint32, templatefile Handle) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall9(procCreateFileW.Addr(), 7, uintptr(unsafe.Pointer(name)), uintptr(access), uintptr(mode), uintptr(unsafe.Pointer(sa)), uintptr(createmode), uintptr(attrs), uintptr(templatefile), 0, 0)
+	handle = Handle(r0)
+	if handle == InvalidHandle {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func ReadFile(handle Handle, buf []byte, done *uint32, overlapped *Overlapped) (err error) {
+	var _p0 *byte
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	r1, _, e1 := syscall.Syscall6(procReadFile.Addr(), 5, uintptr(handle), uintptr(unsafe.Pointer(_p0)), uintptr(len(buf)), uintptr(unsafe.Pointer(done)), uintptr(unsafe.Pointer(overlapped)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func WriteFile(handle Handle, buf []byte, done *uint32, overlapped *Overlapped) (err error) {
+	var _p0 *byte
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	r1, _, e1 := syscall.Syscall6(procWriteFile.Addr(), 5, uintptr(handle), uintptr(unsafe.Pointer(_p0)), uintptr(len(buf)), uintptr(unsafe.Pointer(done)), uintptr(unsafe.Pointer(overlapped)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetOverlappedResult(handle Handle, overlapped *Overlapped, done *uint32, wait bool) (err error) {
+	var _p0 uint32
+	if wait {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r1, _, e1 := syscall.Syscall6(procGetOverlappedResult.Addr(), 4, uintptr(handle), uintptr(unsafe.Pointer(overlapped)), uintptr(unsafe.Pointer(done)), uintptr(_p0), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetFilePointer(handle Handle, lowoffset int32, highoffsetptr *int32, whence uint32) (newlowoffset uint32, err error) {
+	r0, _, e1 := syscall.Syscall6(procSetFilePointer.Addr(), 4, uintptr(handle), uintptr(lowoffset), uintptr(unsafe.Pointer(highoffsetptr)), uintptr(whence), 0, 0)
+	newlowoffset = uint32(r0)
+	if newlowoffset == 0xffffffff {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CloseHandle(handle Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procCloseHandle.Addr(), 1, uintptr(handle), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetStdHandle(stdhandle uint32) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall(procGetStdHandle.Addr(), 1, uintptr(stdhandle), 0, 0)
+	handle = Handle(r0)
+	if handle == InvalidHandle {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetStdHandle(stdhandle uint32, handle Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetStdHandle.Addr(), 2, uintptr(stdhandle), uintptr(handle), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func findFirstFile1(name *uint16, data *win32finddata1) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall(procFindFirstFileW.Addr(), 2, uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(data)), 0)
+	handle = Handle(r0)
+	if handle == InvalidHandle {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func findNextFile1(handle Handle, data *win32finddata1) (err error) {
+	r1, _, e1 := syscall.Syscall(procFindNextFileW.Addr(), 2, uintptr(handle), uintptr(unsafe.Pointer(data)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func FindClose(handle Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procFindClose.Addr(), 1, uintptr(handle), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetFileInformationByHandle(handle Handle, data *ByHandleFileInformation) (err error) {
+	r1, _, e1 := syscall.Syscall(procGetFileInformationByHandle.Addr(), 2, uintptr(handle), uintptr(unsafe.Pointer(data)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetFileInformationByHandleEx(handle Handle, class uint32, outBuffer *byte, outBufferLen uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procGetFileInformationByHandleEx.Addr(), 4, uintptr(handle), uintptr(class), uintptr(unsafe.Pointer(outBuffer)), uintptr(outBufferLen), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetCurrentDirectory(buflen uint32, buf *uint16) (n uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetCurrentDirectoryW.Addr(), 2, uintptr(buflen), uintptr(unsafe.Pointer(buf)), 0)
+	n = uint32(r0)
+	if n == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetCurrentDirectory(path *uint16) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetCurrentDirectoryW.Addr(), 1, uintptr(unsafe.Pointer(path)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CreateDirectory(path *uint16, sa *SecurityAttributes) (err error) {
+	r1, _, e1 := syscall.Syscall(procCreateDirectoryW.Addr(), 2, uintptr(unsafe.Pointer(path)), uintptr(unsafe.Pointer(sa)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func RemoveDirectory(path *uint16) (err error) {
+	r1, _, e1 := syscall.Syscall(procRemoveDirectoryW.Addr(), 1, uintptr(unsafe.Pointer(path)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func DeleteFile(path *uint16) (err error) {
+	r1, _, e1 := syscall.Syscall(procDeleteFileW.Addr(), 1, uintptr(unsafe.Pointer(path)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func MoveFile(from *uint16, to *uint16) (err error) {
+	r1, _, e1 := syscall.Syscall(procMoveFileW.Addr(), 2, uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(to)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func MoveFileEx(from *uint16, to *uint16, flags uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procMoveFileExW.Addr(), 3, uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(to)), uintptr(flags))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func LockFileEx(file Handle, flags uint32, reserved uint32, bytesLow uint32, bytesHigh uint32, overlapped *Overlapped) (err error) {
+	r1, _, e1 := syscall.Syscall6(procLockFileEx.Addr(), 6, uintptr(file), uintptr(flags), uintptr(reserved), uintptr(bytesLow), uintptr(bytesHigh), uintptr(unsafe.Pointer(overlapped)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func UnlockFileEx(file Handle, reserved uint32, bytesLow uint32, bytesHigh uint32, overlapped *Overlapped) (err error) {
+	r1, _, e1 := syscall.Syscall6(procUnlockFileEx.Addr(), 5, uintptr(file), uintptr(reserved), uintptr(bytesLow), uintptr(bytesHigh), uintptr(unsafe.Pointer(overlapped)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetComputerName(buf *uint16, n *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procGetComputerNameW.Addr(), 2, uintptr(unsafe.Pointer(buf)), uintptr(unsafe.Pointer(n)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetComputerNameEx(nametype uint32, buf *uint16, n *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procGetComputerNameExW.Addr(), 3, uintptr(nametype), uintptr(unsafe.Pointer(buf)), uintptr(unsafe.Pointer(n)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetEndOfFile(handle Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetEndOfFile.Addr(), 1, uintptr(handle), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetSystemTimeAsFileTime(time *Filetime) {
+	syscall.Syscall(procGetSystemTimeAsFileTime.Addr(), 1, uintptr(unsafe.Pointer(time)), 0, 0)
+	return
+}
+
+func GetSystemTimePreciseAsFileTime(time *Filetime) {
+	syscall.Syscall(procGetSystemTimePreciseAsFileTime.Addr(), 1, uintptr(unsafe.Pointer(time)), 0, 0)
+	return
+}
+
+func GetTimeZoneInformation(tzi *Timezoneinformation) (rc uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetTimeZoneInformation.Addr(), 1, uintptr(unsafe.Pointer(tzi)), 0, 0)
+	rc = uint32(r0)
+	if rc == 0xffffffff {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CreateIoCompletionPort(filehandle Handle, cphandle Handle, key uint32, threadcnt uint32) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall6(procCreateIoCompletionPort.Addr(), 4, uintptr(filehandle), uintptr(cphandle), uintptr(key), uintptr(threadcnt), 0, 0)
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetQueuedCompletionStatus(cphandle Handle, qty *uint32, key *uint32, overlapped **Overlapped, timeout uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procGetQueuedCompletionStatus.Addr(), 5, uintptr(cphandle), uintptr(unsafe.Pointer(qty)), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(overlapped)), uintptr(timeout), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func PostQueuedCompletionStatus(cphandle Handle, qty uint32, key uint32, overlapped *Overlapped) (err error) {
+	r1, _, e1 := syscall.Syscall6(procPostQueuedCompletionStatus.Addr(), 4, uintptr(cphandle), uintptr(qty), uintptr(key), uintptr(unsafe.Pointer(overlapped)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CancelIo(s Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procCancelIo.Addr(), 1, uintptr(s), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CancelIoEx(s Handle, o *Overlapped) (err error) {
+	r1, _, e1 := syscall.Syscall(procCancelIoEx.Addr(), 2, uintptr(s), uintptr(unsafe.Pointer(o)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CreateProcess(appName *uint16, commandLine *uint16, procSecurity *SecurityAttributes, threadSecurity *SecurityAttributes, inheritHandles bool, creationFlags uint32, env *uint16, currentDir *uint16, startupInfo *StartupInfo, outProcInfo *ProcessInformation) (err error) {
+	var _p0 uint32
+	if inheritHandles {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r1, _, e1 := syscall.Syscall12(procCreateProcessW.Addr(), 10, uintptr(unsafe.Pointer(appName)), uintptr(unsafe.Pointer(commandLine)), uintptr(unsafe.Pointer(procSecurity)), uintptr(unsafe.Pointer(threadSecurity)), uintptr(_p0), uintptr(creationFlags), uintptr(unsafe.Pointer(env)), uintptr(unsafe.Pointer(currentDir)), uintptr(unsafe.Pointer(startupInfo)), uintptr(unsafe.Pointer(outProcInfo)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func OpenProcess(desiredAccess uint32, inheritHandle bool, processId uint32) (handle Handle, err error) {
+	var _p0 uint32
+	if inheritHandle {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r0, _, e1 := syscall.Syscall(procOpenProcess.Addr(), 3, uintptr(desiredAccess), uintptr(_p0), uintptr(processId))
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func ShellExecute(hwnd Handle, verb *uint16, file *uint16, args *uint16, cwd *uint16, showCmd int32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procShellExecuteW.Addr(), 6, uintptr(hwnd), uintptr(unsafe.Pointer(verb)), uintptr(unsafe.Pointer(file)), uintptr(unsafe.Pointer(args)), uintptr(unsafe.Pointer(cwd)), uintptr(showCmd))
+	if r1 <= 32 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func shGetKnownFolderPath(id *KNOWNFOLDERID, flags uint32, token Token, path **uint16) (ret error) {
+	r0, _, _ := syscall.Syscall6(procSHGetKnownFolderPath.Addr(), 4, uintptr(unsafe.Pointer(id)), uintptr(flags), uintptr(token), uintptr(unsafe.Pointer(path)), 0, 0)
+	if r0 != 0 {
+		ret = syscall.Errno(r0)
+	}
+	return
+}
+
+func TerminateProcess(handle Handle, exitcode uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procTerminateProcess.Addr(), 2, uintptr(handle), uintptr(exitcode), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetExitCodeProcess(handle Handle, exitcode *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procGetExitCodeProcess.Addr(), 2, uintptr(handle), uintptr(unsafe.Pointer(exitcode)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetStartupInfo(startupInfo *StartupInfo) (err error) {
+	r1, _, e1 := syscall.Syscall(procGetStartupInfoW.Addr(), 1, uintptr(unsafe.Pointer(startupInfo)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetProcessTimes(handle Handle, creationTime *Filetime, exitTime *Filetime, kernelTime *Filetime, userTime *Filetime) (err error) {
+	r1, _, e1 := syscall.Syscall6(procGetProcessTimes.Addr(), 5, uintptr(handle), uintptr(unsafe.Pointer(creationTime)), uintptr(unsafe.Pointer(exitTime)), uintptr(unsafe.Pointer(kernelTime)), uintptr(unsafe.Pointer(userTime)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func DuplicateHandle(hSourceProcessHandle Handle, hSourceHandle Handle, hTargetProcessHandle Handle, lpTargetHandle *Handle, dwDesiredAccess uint32, bInheritHandle bool, dwOptions uint32) (err error) {
+	var _p0 uint32
+	if bInheritHandle {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r1, _, e1 := syscall.Syscall9(procDuplicateHandle.Addr(), 7, uintptr(hSourceProcessHandle), uintptr(hSourceHandle), uintptr(hTargetProcessHandle), uintptr(unsafe.Pointer(lpTargetHandle)), uintptr(dwDesiredAccess), uintptr(_p0), uintptr(dwOptions), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func WaitForSingleObject(handle Handle, waitMilliseconds uint32) (event uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procWaitForSingleObject.Addr(), 2, uintptr(handle), uintptr(waitMilliseconds), 0)
+	event = uint32(r0)
+	if event == 0xffffffff {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func waitForMultipleObjects(count uint32, handles uintptr, waitAll bool, waitMilliseconds uint32) (event uint32, err error) {
+	var _p0 uint32
+	if waitAll {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r0, _, e1 := syscall.Syscall6(procWaitForMultipleObjects.Addr(), 4, uintptr(count), uintptr(handles), uintptr(_p0), uintptr(waitMilliseconds), 0, 0)
+	event = uint32(r0)
+	if event == 0xffffffff {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetTempPath(buflen uint32, buf *uint16) (n uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetTempPathW.Addr(), 2, uintptr(buflen), uintptr(unsafe.Pointer(buf)), 0)
+	n = uint32(r0)
+	if n == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CreatePipe(readhandle *Handle, writehandle *Handle, sa *SecurityAttributes, size uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procCreatePipe.Addr(), 4, uintptr(unsafe.Pointer(readhandle)), uintptr(unsafe.Pointer(writehandle)), uintptr(unsafe.Pointer(sa)), uintptr(size), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetFileType(filehandle Handle) (n uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetFileType.Addr(), 1, uintptr(filehandle), 0, 0)
+	n = uint32(r0)
+	if n == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CryptAcquireContext(provhandle *Handle, container *uint16, provider *uint16, provtype uint32, flags uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procCryptAcquireContextW.Addr(), 5, uintptr(unsafe.Pointer(provhandle)), uintptr(unsafe.Pointer(container)), uintptr(unsafe.Pointer(provider)), uintptr(provtype), uintptr(flags), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CryptReleaseContext(provhandle Handle, flags uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procCryptReleaseContext.Addr(), 2, uintptr(provhandle), uintptr(flags), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CryptGenRandom(provhandle Handle, buflen uint32, buf *byte) (err error) {
+	r1, _, e1 := syscall.Syscall(procCryptGenRandom.Addr(), 3, uintptr(provhandle), uintptr(buflen), uintptr(unsafe.Pointer(buf)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetEnvironmentStrings() (envs *uint16, err error) {
+	r0, _, e1 := syscall.Syscall(procGetEnvironmentStringsW.Addr(), 0, 0, 0, 0)
+	envs = (*uint16)(unsafe.Pointer(r0))
+	if envs == nil {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func FreeEnvironmentStrings(envs *uint16) (err error) {
+	r1, _, e1 := syscall.Syscall(procFreeEnvironmentStringsW.Addr(), 1, uintptr(unsafe.Pointer(envs)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetEnvironmentVariable(name *uint16, buffer *uint16, size uint32) (n uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetEnvironmentVariableW.Addr(), 3, uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(buffer)), uintptr(size))
+	n = uint32(r0)
+	if n == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetEnvironmentVariable(name *uint16, value *uint16) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetEnvironmentVariableW.Addr(), 2, uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(value)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CreateEnvironmentBlock(block **uint16, token Token, inheritExisting bool) (err error) {
+	var _p0 uint32
+	if inheritExisting {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r1, _, e1 := syscall.Syscall(procCreateEnvironmentBlock.Addr(), 3, uintptr(unsafe.Pointer(block)), uintptr(token), uintptr(_p0))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func DestroyEnvironmentBlock(block *uint16) (err error) {
+	r1, _, e1 := syscall.Syscall(procDestroyEnvironmentBlock.Addr(), 1, uintptr(unsafe.Pointer(block)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func getTickCount64() (ms uint64) {
+	r0, _, _ := syscall.Syscall(procGetTickCount64.Addr(), 0, 0, 0, 0)
+	ms = uint64(r0)
+	return
+}
+
+func SetFileTime(handle Handle, ctime *Filetime, atime *Filetime, wtime *Filetime) (err error) {
+	r1, _, e1 := syscall.Syscall6(procSetFileTime.Addr(), 4, uintptr(handle), uintptr(unsafe.Pointer(ctime)), uintptr(unsafe.Pointer(atime)), uintptr(unsafe.Pointer(wtime)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetFileAttributes(name *uint16) (attrs uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetFileAttributesW.Addr(), 1, uintptr(unsafe.Pointer(name)), 0, 0)
+	attrs = uint32(r0)
+	if attrs == INVALID_FILE_ATTRIBUTES {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetFileAttributes(name *uint16, attrs uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetFileAttributesW.Addr(), 2, uintptr(unsafe.Pointer(name)), uintptr(attrs), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetFileAttributesEx(name *uint16, level uint32, info *byte) (err error) {
+	r1, _, e1 := syscall.Syscall(procGetFileAttributesExW.Addr(), 3, uintptr(unsafe.Pointer(name)), uintptr(level), uintptr(unsafe.Pointer(info)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetCommandLine() (cmd *uint16) {
+	r0, _, _ := syscall.Syscall(procGetCommandLineW.Addr(), 0, 0, 0, 0)
+	cmd = (*uint16)(unsafe.Pointer(r0))
+	return
+}
+
+func CommandLineToArgv(cmd *uint16, argc *int32) (argv *[8192]*[8192]uint16, err error) {
+	r0, _, e1 := syscall.Syscall(procCommandLineToArgvW.Addr(), 2, uintptr(unsafe.Pointer(cmd)), uintptr(unsafe.Pointer(argc)), 0)
+	argv = (*[8192]*[8192]uint16)(unsafe.Pointer(r0))
+	if argv == nil {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func LocalFree(hmem Handle) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall(procLocalFree.Addr(), 1, uintptr(hmem), 0, 0)
+	handle = Handle(r0)
+	if handle != 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetHandleInformation(handle Handle, mask uint32, flags uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetHandleInformation.Addr(), 3, uintptr(handle), uintptr(mask), uintptr(flags))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func FlushFileBuffers(handle Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procFlushFileBuffers.Addr(), 1, uintptr(handle), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetFullPathName(path *uint16, buflen uint32, buf *uint16, fname **uint16) (n uint32, err error) {
+	r0, _, e1 := syscall.Syscall6(procGetFullPathNameW.Addr(), 4, uintptr(unsafe.Pointer(path)), uintptr(buflen), uintptr(unsafe.Pointer(buf)), uintptr(unsafe.Pointer(fname)), 0, 0)
+	n = uint32(r0)
+	if n == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetLongPathName(path *uint16, buf *uint16, buflen uint32) (n uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetLongPathNameW.Addr(), 3, uintptr(unsafe.Pointer(path)), uintptr(unsafe.Pointer(buf)), uintptr(buflen))
+	n = uint32(r0)
+	if n == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetShortPathName(longpath *uint16, shortpath *uint16, buflen uint32) (n uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetShortPathNameW.Addr(), 3, uintptr(unsafe.Pointer(longpath)), uintptr(unsafe.Pointer(shortpath)), uintptr(buflen))
+	n = uint32(r0)
+	if n == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CreateFileMapping(fhandle Handle, sa *SecurityAttributes, prot uint32, maxSizeHigh uint32, maxSizeLow uint32, name *uint16) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall6(procCreateFileMappingW.Addr(), 6, uintptr(fhandle), uintptr(unsafe.Pointer(sa)), uintptr(prot), uintptr(maxSizeHigh), uintptr(maxSizeLow), uintptr(unsafe.Pointer(name)))
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func MapViewOfFile(handle Handle, access uint32, offsetHigh uint32, offsetLow uint32, length uintptr) (addr uintptr, err error) {
+	r0, _, e1 := syscall.Syscall6(procMapViewOfFile.Addr(), 5, uintptr(handle), uintptr(access), uintptr(offsetHigh), uintptr(offsetLow), uintptr(length), 0)
+	addr = uintptr(r0)
+	if addr == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func UnmapViewOfFile(addr uintptr) (err error) {
+	r1, _, e1 := syscall.Syscall(procUnmapViewOfFile.Addr(), 1, uintptr(addr), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func FlushViewOfFile(addr uintptr, length uintptr) (err error) {
+	r1, _, e1 := syscall.Syscall(procFlushViewOfFile.Addr(), 2, uintptr(addr), uintptr(length), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func VirtualLock(addr uintptr, length uintptr) (err error) {
+	r1, _, e1 := syscall.Syscall(procVirtualLock.Addr(), 2, uintptr(addr), uintptr(length), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func VirtualUnlock(addr uintptr, length uintptr) (err error) {
+	r1, _, e1 := syscall.Syscall(procVirtualUnlock.Addr(), 2, uintptr(addr), uintptr(length), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func VirtualAlloc(address uintptr, size uintptr, alloctype uint32, protect uint32) (value uintptr, err error) {
+	r0, _, e1 := syscall.Syscall6(procVirtualAlloc.Addr(), 4, uintptr(address), uintptr(size), uintptr(alloctype), uintptr(protect), 0, 0)
+	value = uintptr(r0)
+	if value == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func VirtualFree(address uintptr, size uintptr, freetype uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procVirtualFree.Addr(), 3, uintptr(address), uintptr(size), uintptr(freetype))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func VirtualProtect(address uintptr, size uintptr, newprotect uint32, oldprotect *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procVirtualProtect.Addr(), 4, uintptr(address), uintptr(size), uintptr(newprotect), uintptr(unsafe.Pointer(oldprotect)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func TransmitFile(s Handle, handle Handle, bytesToWrite uint32, bytsPerSend uint32, overlapped *Overlapped, transmitFileBuf *TransmitFileBuffers, flags uint32) (err error) {
+	r1, _, e1 := syscall.Syscall9(procTransmitFile.Addr(), 7, uintptr(s), uintptr(handle), uintptr(bytesToWrite), uintptr(bytsPerSend), uintptr(unsafe.Pointer(overlapped)), uintptr(unsafe.Pointer(transmitFileBuf)), uintptr(flags), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func ReadDirectoryChanges(handle Handle, buf *byte, buflen uint32, watchSubTree bool, mask uint32, retlen *uint32, overlapped *Overlapped, completionRoutine uintptr) (err error) {
+	var _p0 uint32
+	if watchSubTree {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r1, _, e1 := syscall.Syscall9(procReadDirectoryChangesW.Addr(), 8, uintptr(handle), uintptr(unsafe.Pointer(buf)), uintptr(buflen), uintptr(_p0), uintptr(mask), uintptr(unsafe.Pointer(retlen)), uintptr(unsafe.Pointer(overlapped)), uintptr(completionRoutine), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CertOpenSystemStore(hprov Handle, name *uint16) (store Handle, err error) {
+	r0, _, e1 := syscall.Syscall(procCertOpenSystemStoreW.Addr(), 2, uintptr(hprov), uintptr(unsafe.Pointer(name)), 0)
+	store = Handle(r0)
+	if store == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CertOpenStore(storeProvider uintptr, msgAndCertEncodingType uint32, cryptProv uintptr, flags uint32, para uintptr) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall6(procCertOpenStore.Addr(), 5, uintptr(storeProvider), uintptr(msgAndCertEncodingType), uintptr(cryptProv), uintptr(flags), uintptr(para), 0)
+	handle = Handle(r0)
+	if handle == InvalidHandle {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CertEnumCertificatesInStore(store Handle, prevContext *CertContext) (context *CertContext, err error) {
+	r0, _, e1 := syscall.Syscall(procCertEnumCertificatesInStore.Addr(), 2, uintptr(store), uintptr(unsafe.Pointer(prevContext)), 0)
+	context = (*CertContext)(unsafe.Pointer(r0))
+	if context == nil {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CertAddCertificateContextToStore(store Handle, certContext *CertContext, addDisposition uint32, storeContext **CertContext) (err error) {
+	r1, _, e1 := syscall.Syscall6(procCertAddCertificateContextToStore.Addr(), 4, uintptr(store), uintptr(unsafe.Pointer(certContext)), uintptr(addDisposition), uintptr(unsafe.Pointer(storeContext)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CertCloseStore(store Handle, flags uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procCertCloseStore.Addr(), 2, uintptr(store), uintptr(flags), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CertGetCertificateChain(engine Handle, leaf *CertContext, time *Filetime, additionalStore Handle, para *CertChainPara, flags uint32, reserved uintptr, chainCtx **CertChainContext) (err error) {
+	r1, _, e1 := syscall.Syscall9(procCertGetCertificateChain.Addr(), 8, uintptr(engine), uintptr(unsafe.Pointer(leaf)), uintptr(unsafe.Pointer(time)), uintptr(additionalStore), uintptr(unsafe.Pointer(para)), uintptr(flags), uintptr(reserved), uintptr(unsafe.Pointer(chainCtx)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CertFreeCertificateChain(ctx *CertChainContext) {
+	syscall.Syscall(procCertFreeCertificateChain.Addr(), 1, uintptr(unsafe.Pointer(ctx)), 0, 0)
+	return
+}
+
+func CertCreateCertificateContext(certEncodingType uint32, certEncoded *byte, encodedLen uint32) (context *CertContext, err error) {
+	r0, _, e1 := syscall.Syscall(procCertCreateCertificateContext.Addr(), 3, uintptr(certEncodingType), uintptr(unsafe.Pointer(certEncoded)), uintptr(encodedLen))
+	context = (*CertContext)(unsafe.Pointer(r0))
+	if context == nil {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CertFreeCertificateContext(ctx *CertContext) (err error) {
+	r1, _, e1 := syscall.Syscall(procCertFreeCertificateContext.Addr(), 1, uintptr(unsafe.Pointer(ctx)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CertVerifyCertificateChainPolicy(policyOID uintptr, chain *CertChainContext, para *CertChainPolicyPara, status *CertChainPolicyStatus) (err error) {
+	r1, _, e1 := syscall.Syscall6(procCertVerifyCertificateChainPolicy.Addr(), 4, uintptr(policyOID), uintptr(unsafe.Pointer(chain)), uintptr(unsafe.Pointer(para)), uintptr(unsafe.Pointer(status)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func RegOpenKeyEx(key Handle, subkey *uint16, options uint32, desiredAccess uint32, result *Handle) (regerrno error) {
+	r0, _, _ := syscall.Syscall6(procRegOpenKeyExW.Addr(), 5, uintptr(key), uintptr(unsafe.Pointer(subkey)), uintptr(options), uintptr(desiredAccess), uintptr(unsafe.Pointer(result)), 0)
+	if r0 != 0 {
+		regerrno = syscall.Errno(r0)
+	}
+	return
+}
+
+func RegCloseKey(key Handle) (regerrno error) {
+	r0, _, _ := syscall.Syscall(procRegCloseKey.Addr(), 1, uintptr(key), 0, 0)
+	if r0 != 0 {
+		regerrno = syscall.Errno(r0)
+	}
+	return
+}
+
+func RegQueryInfoKey(key Handle, class *uint16, classLen *uint32, reserved *uint32, subkeysLen *uint32, maxSubkeyLen *uint32, maxClassLen *uint32, valuesLen *uint32, maxValueNameLen *uint32, maxValueLen *uint32, saLen *uint32, lastWriteTime *Filetime) (regerrno error) {
+	r0, _, _ := syscall.Syscall12(procRegQueryInfoKeyW.Addr(), 12, uintptr(key), uintptr(unsafe.Pointer(class)), uintptr(unsafe.Pointer(classLen)), uintptr(unsafe.Pointer(reserved)), uintptr(unsafe.Pointer(subkeysLen)), uintptr(unsafe.Pointer(maxSubkeyLen)), uintptr(unsafe.Pointer(maxClassLen)), uintptr(unsafe.Pointer(valuesLen)), uintptr(unsafe.Pointer(maxValueNameLen)), uintptr(unsafe.Pointer(maxValueLen)), uintptr(unsafe.Pointer(saLen)), uintptr(unsafe.Pointer(lastWriteTime)))
+	if r0 != 0 {
+		regerrno = syscall.Errno(r0)
+	}
+	return
+}
+
+func RegEnumKeyEx(key Handle, index uint32, name *uint16, nameLen *uint32, reserved *uint32, class *uint16, classLen *uint32, lastWriteTime *Filetime) (regerrno error) {
+	r0, _, _ := syscall.Syscall9(procRegEnumKeyExW.Addr(), 8, uintptr(key), uintptr(index), uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(nameLen)), uintptr(unsafe.Pointer(reserved)), uintptr(unsafe.Pointer(class)), uintptr(unsafe.Pointer(classLen)), uintptr(unsafe.Pointer(lastWriteTime)), 0)
+	if r0 != 0 {
+		regerrno = syscall.Errno(r0)
+	}
+	return
+}
+
+func RegQueryValueEx(key Handle, name *uint16, reserved *uint32, valtype *uint32, buf *byte, buflen *uint32) (regerrno error) {
+	r0, _, _ := syscall.Syscall6(procRegQueryValueExW.Addr(), 6, uintptr(key), uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(reserved)), uintptr(unsafe.Pointer(valtype)), uintptr(unsafe.Pointer(buf)), uintptr(unsafe.Pointer(buflen)))
+	if r0 != 0 {
+		regerrno = syscall.Errno(r0)
+	}
+	return
+}
+
+func GetCurrentProcessId() (pid uint32) {
+	r0, _, _ := syscall.Syscall(procGetCurrentProcessId.Addr(), 0, 0, 0, 0)
+	pid = uint32(r0)
+	return
+}
+
+func GetConsoleMode(console Handle, mode *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procGetConsoleMode.Addr(), 2, uintptr(console), uintptr(unsafe.Pointer(mode)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetConsoleMode(console Handle, mode uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetConsoleMode.Addr(), 2, uintptr(console), uintptr(mode), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetConsoleScreenBufferInfo(console Handle, info *ConsoleScreenBufferInfo) (err error) {
+	r1, _, e1 := syscall.Syscall(procGetConsoleScreenBufferInfo.Addr(), 2, uintptr(console), uintptr(unsafe.Pointer(info)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func WriteConsole(console Handle, buf *uint16, towrite uint32, written *uint32, reserved *byte) (err error) {
+	r1, _, e1 := syscall.Syscall6(procWriteConsoleW.Addr(), 5, uintptr(console), uintptr(unsafe.Pointer(buf)), uintptr(towrite), uintptr(unsafe.Pointer(written)), uintptr(unsafe.Pointer(reserved)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func ReadConsole(console Handle, buf *uint16, toread uint32, read *uint32, inputControl *byte) (err error) {
+	r1, _, e1 := syscall.Syscall6(procReadConsoleW.Addr(), 5, uintptr(console), uintptr(unsafe.Pointer(buf)), uintptr(toread), uintptr(unsafe.Pointer(read)), uintptr(unsafe.Pointer(inputControl)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CreateToolhelp32Snapshot(flags uint32, processId uint32) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall(procCreateToolhelp32Snapshot.Addr(), 2, uintptr(flags), uintptr(processId), 0)
+	handle = Handle(r0)
+	if handle == InvalidHandle {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func Process32First(snapshot Handle, procEntry *ProcessEntry32) (err error) {
+	r1, _, e1 := syscall.Syscall(procProcess32FirstW.Addr(), 2, uintptr(snapshot), uintptr(unsafe.Pointer(procEntry)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func Process32Next(snapshot Handle, procEntry *ProcessEntry32) (err error) {
+	r1, _, e1 := syscall.Syscall(procProcess32NextW.Addr(), 2, uintptr(snapshot), uintptr(unsafe.Pointer(procEntry)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func Thread32First(snapshot Handle, threadEntry *ThreadEntry32) (err error) {
+	r1, _, e1 := syscall.Syscall(procThread32First.Addr(), 2, uintptr(snapshot), uintptr(unsafe.Pointer(threadEntry)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func Thread32Next(snapshot Handle, threadEntry *ThreadEntry32) (err error) {
+	r1, _, e1 := syscall.Syscall(procThread32Next.Addr(), 2, uintptr(snapshot), uintptr(unsafe.Pointer(threadEntry)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func DeviceIoControl(handle Handle, ioControlCode uint32, inBuffer *byte, inBufferSize uint32, outBuffer *byte, outBufferSize uint32, bytesReturned *uint32, overlapped *Overlapped) (err error) {
+	r1, _, e1 := syscall.Syscall9(procDeviceIoControl.Addr(), 8, uintptr(handle), uintptr(ioControlCode), uintptr(unsafe.Pointer(inBuffer)), uintptr(inBufferSize), uintptr(unsafe.Pointer(outBuffer)), uintptr(outBufferSize), uintptr(unsafe.Pointer(bytesReturned)), uintptr(unsafe.Pointer(overlapped)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CreateSymbolicLink(symlinkfilename *uint16, targetfilename *uint16, flags uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procCreateSymbolicLinkW.Addr(), 3, uintptr(unsafe.Pointer(symlinkfilename)), uintptr(unsafe.Pointer(targetfilename)), uintptr(flags))
+	if r1&0xff == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CreateHardLink(filename *uint16, existingfilename *uint16, reserved uintptr) (err error) {
+	r1, _, e1 := syscall.Syscall(procCreateHardLinkW.Addr(), 3, uintptr(unsafe.Pointer(filename)), uintptr(unsafe.Pointer(existingfilename)), uintptr(reserved))
+	if r1&0xff == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetCurrentThreadId() (id uint32) {
+	r0, _, _ := syscall.Syscall(procGetCurrentThreadId.Addr(), 0, 0, 0, 0)
+	id = uint32(r0)
+	return
+}
+
+func CreateEvent(eventAttrs *SecurityAttributes, manualReset uint32, initialState uint32, name *uint16) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall6(procCreateEventW.Addr(), 4, uintptr(unsafe.Pointer(eventAttrs)), uintptr(manualReset), uintptr(initialState), uintptr(unsafe.Pointer(name)), 0, 0)
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CreateEventEx(eventAttrs *SecurityAttributes, name *uint16, flags uint32, desiredAccess uint32) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall6(procCreateEventExW.Addr(), 4, uintptr(unsafe.Pointer(eventAttrs)), uintptr(unsafe.Pointer(name)), uintptr(flags), uintptr(desiredAccess), 0, 0)
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func OpenEvent(desiredAccess uint32, inheritHandle bool, name *uint16) (handle Handle, err error) {
+	var _p0 uint32
+	if inheritHandle {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r0, _, e1 := syscall.Syscall(procOpenEventW.Addr(), 3, uintptr(desiredAccess), uintptr(_p0), uintptr(unsafe.Pointer(name)))
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetEvent(event Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetEvent.Addr(), 1, uintptr(event), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func ResetEvent(event Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procResetEvent.Addr(), 1, uintptr(event), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func PulseEvent(event Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procPulseEvent.Addr(), 1, uintptr(event), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CreateMutex(mutexAttrs *SecurityAttributes, initialOwner bool, name *uint16) (handle Handle, err error) {
+	var _p0 uint32
+	if initialOwner {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r0, _, e1 := syscall.Syscall(procCreateMutexW.Addr(), 3, uintptr(unsafe.Pointer(mutexAttrs)), uintptr(_p0), uintptr(unsafe.Pointer(name)))
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func CreateMutexEx(mutexAttrs *SecurityAttributes, name *uint16, flags uint32, desiredAccess uint32) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall6(procCreateMutexExW.Addr(), 4, uintptr(unsafe.Pointer(mutexAttrs)), uintptr(unsafe.Pointer(name)), uintptr(flags), uintptr(desiredAccess), 0, 0)
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func OpenMutex(desiredAccess uint32, inheritHandle bool, name *uint16) (handle Handle, err error) {
+	var _p0 uint32
+	if inheritHandle {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r0, _, e1 := syscall.Syscall(procOpenMutexW.Addr(), 3, uintptr(desiredAccess), uintptr(_p0), uintptr(unsafe.Pointer(name)))
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func ReleaseMutex(mutex Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procReleaseMutex.Addr(), 1, uintptr(mutex), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SleepEx(milliseconds uint32, alertable bool) (ret uint32) {
+	var _p0 uint32
+	if alertable {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r0, _, _ := syscall.Syscall(procSleepEx.Addr(), 2, uintptr(milliseconds), uintptr(_p0), 0)
+	ret = uint32(r0)
+	return
+}
+
+func CreateJobObject(jobAttr *SecurityAttributes, name *uint16) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall(procCreateJobObjectW.Addr(), 2, uintptr(unsafe.Pointer(jobAttr)), uintptr(unsafe.Pointer(name)), 0)
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func AssignProcessToJobObject(job Handle, process Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procAssignProcessToJobObject.Addr(), 2, uintptr(job), uintptr(process), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func TerminateJobObject(job Handle, exitCode uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procTerminateJobObject.Addr(), 2, uintptr(job), uintptr(exitCode), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetErrorMode(mode uint32) (ret uint32) {
+	r0, _, _ := syscall.Syscall(procSetErrorMode.Addr(), 1, uintptr(mode), 0, 0)
+	ret = uint32(r0)
+	return
+}
+
+func ResumeThread(thread Handle) (ret uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procResumeThread.Addr(), 1, uintptr(thread), 0, 0)
+	ret = uint32(r0)
+	if ret == 0xffffffff {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetPriorityClass(process Handle, priorityClass uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetPriorityClass.Addr(), 2, uintptr(process), uintptr(priorityClass), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetPriorityClass(process Handle) (ret uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetPriorityClass.Addr(), 1, uintptr(process), 0, 0)
+	ret = uint32(r0)
+	if ret == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func QueryInformationJobObject(job Handle, JobObjectInformationClass int32, JobObjectInformation uintptr, JobObjectInformationLength uint32, retlen *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procQueryInformationJobObject.Addr(), 5, uintptr(job), uintptr(JobObjectInformationClass), uintptr(JobObjectInformation), uintptr(JobObjectInformationLength), uintptr(unsafe.Pointer(retlen)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetInformationJobObject(job Handle, JobObjectInformationClass uint32, JobObjectInformation uintptr, JobObjectInformationLength uint32) (ret int, err error) {
+	r0, _, e1 := syscall.Syscall6(procSetInformationJobObject.Addr(), 4, uintptr(job), uintptr(JobObjectInformationClass), uintptr(JobObjectInformation), uintptr(JobObjectInformationLength), 0, 0)
+	ret = int(r0)
+	if ret == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GenerateConsoleCtrlEvent(ctrlEvent uint32, processGroupID uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procGenerateConsoleCtrlEvent.Addr(), 2, uintptr(ctrlEvent), uintptr(processGroupID), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetProcessId(process Handle) (id uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetProcessId.Addr(), 1, uintptr(process), 0, 0)
+	id = uint32(r0)
+	if id == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func OpenThread(desiredAccess uint32, inheritHandle bool, threadId uint32) (handle Handle, err error) {
+	var _p0 uint32
+	if inheritHandle {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r0, _, e1 := syscall.Syscall(procOpenThread.Addr(), 3, uintptr(desiredAccess), uintptr(_p0), uintptr(threadId))
+	handle = Handle(r0)
+	if handle == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetProcessPriorityBoost(process Handle, disable bool) (err error) {
+	var _p0 uint32
+	if disable {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r1, _, e1 := syscall.Syscall(procSetProcessPriorityBoost.Addr(), 2, uintptr(process), uintptr(_p0), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetProcessWorkingSetSizeEx(hProcess Handle, lpMinimumWorkingSetSize *uintptr, lpMaximumWorkingSetSize *uintptr, flags *uint32) {
+	syscall.Syscall6(procGetProcessWorkingSetSizeEx.Addr(), 4, uintptr(hProcess), uintptr(unsafe.Pointer(lpMinimumWorkingSetSize)), uintptr(unsafe.Pointer(lpMaximumWorkingSetSize)), uintptr(unsafe.Pointer(flags)), 0, 0)
+	return
+}
+
+func SetProcessWorkingSetSizeEx(hProcess Handle, dwMinimumWorkingSetSize uintptr, dwMaximumWorkingSetSize uintptr, flags uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procSetProcessWorkingSetSizeEx.Addr(), 4, uintptr(hProcess), uintptr(dwMinimumWorkingSetSize), uintptr(dwMaximumWorkingSetSize), uintptr(flags), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func DefineDosDevice(flags uint32, deviceName *uint16, targetPath *uint16) (err error) {
+	r1, _, e1 := syscall.Syscall(procDefineDosDeviceW.Addr(), 3, uintptr(flags), uintptr(unsafe.Pointer(deviceName)), uintptr(unsafe.Pointer(targetPath)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func DeleteVolumeMountPoint(volumeMountPoint *uint16) (err error) {
+	r1, _, e1 := syscall.Syscall(procDeleteVolumeMountPointW.Addr(), 1, uintptr(unsafe.Pointer(volumeMountPoint)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func FindFirstVolume(volumeName *uint16, bufferLength uint32) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall(procFindFirstVolumeW.Addr(), 2, uintptr(unsafe.Pointer(volumeName)), uintptr(bufferLength), 0)
+	handle = Handle(r0)
+	if handle == InvalidHandle {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func FindFirstVolumeMountPoint(rootPathName *uint16, volumeMountPoint *uint16, bufferLength uint32) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall(procFindFirstVolumeMountPointW.Addr(), 3, uintptr(unsafe.Pointer(rootPathName)), uintptr(unsafe.Pointer(volumeMountPoint)), uintptr(bufferLength))
+	handle = Handle(r0)
+	if handle == InvalidHandle {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func FindNextVolume(findVolume Handle, volumeName *uint16, bufferLength uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procFindNextVolumeW.Addr(), 3, uintptr(findVolume), uintptr(unsafe.Pointer(volumeName)), uintptr(bufferLength))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func FindNextVolumeMountPoint(findVolumeMountPoint Handle, volumeMountPoint *uint16, bufferLength uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procFindNextVolumeMountPointW.Addr(), 3, uintptr(findVolumeMountPoint), uintptr(unsafe.Pointer(volumeMountPoint)), uintptr(bufferLength))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func FindVolumeClose(findVolume Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procFindVolumeClose.Addr(), 1, uintptr(findVolume), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func FindVolumeMountPointClose(findVolumeMountPoint Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procFindVolumeMountPointClose.Addr(), 1, uintptr(findVolumeMountPoint), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetDiskFreeSpaceEx(directoryName *uint16, freeBytesAvailableToCaller *uint64, totalNumberOfBytes *uint64, totalNumberOfFreeBytes *uint64) (err error) {
+	r1, _, e1 := syscall.Syscall6(procGetDiskFreeSpaceExW.Addr(), 4, uintptr(unsafe.Pointer(directoryName)), uintptr(unsafe.Pointer(freeBytesAvailableToCaller)), uintptr(unsafe.Pointer(totalNumberOfBytes)), uintptr(unsafe.Pointer(totalNumberOfFreeBytes)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetDriveType(rootPathName *uint16) (driveType uint32) {
+	r0, _, _ := syscall.Syscall(procGetDriveTypeW.Addr(), 1, uintptr(unsafe.Pointer(rootPathName)), 0, 0)
+	driveType = uint32(r0)
+	return
+}
+
+func GetLogicalDrives() (drivesBitMask uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetLogicalDrives.Addr(), 0, 0, 0, 0)
+	drivesBitMask = uint32(r0)
+	if drivesBitMask == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetLogicalDriveStrings(bufferLength uint32, buffer *uint16) (n uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetLogicalDriveStringsW.Addr(), 2, uintptr(bufferLength), uintptr(unsafe.Pointer(buffer)), 0)
+	n = uint32(r0)
+	if n == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetVolumeInformation(rootPathName *uint16, volumeNameBuffer *uint16, volumeNameSize uint32, volumeNameSerialNumber *uint32, maximumComponentLength *uint32, fileSystemFlags *uint32, fileSystemNameBuffer *uint16, fileSystemNameSize uint32) (err error) {
+	r1, _, e1 := syscall.Syscall9(procGetVolumeInformationW.Addr(), 8, uintptr(unsafe.Pointer(rootPathName)), uintptr(unsafe.Pointer(volumeNameBuffer)), uintptr(volumeNameSize), uintptr(unsafe.Pointer(volumeNameSerialNumber)), uintptr(unsafe.Pointer(maximumComponentLength)), uintptr(unsafe.Pointer(fileSystemFlags)), uintptr(unsafe.Pointer(fileSystemNameBuffer)), uintptr(fileSystemNameSize), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetVolumeInformationByHandle(file Handle, volumeNameBuffer *uint16, volumeNameSize uint32, volumeNameSerialNumber *uint32, maximumComponentLength *uint32, fileSystemFlags *uint32, fileSystemNameBuffer *uint16, fileSystemNameSize uint32) (err error) {
+	r1, _, e1 := syscall.Syscall9(procGetVolumeInformationByHandleW.Addr(), 8, uintptr(file), uintptr(unsafe.Pointer(volumeNameBuffer)), uintptr(volumeNameSize), uintptr(unsafe.Pointer(volumeNameSerialNumber)), uintptr(unsafe.Pointer(maximumComponentLength)), uintptr(unsafe.Pointer(fileSystemFlags)), uintptr(unsafe.Pointer(fileSystemNameBuffer)), uintptr(fileSystemNameSize), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetVolumeNameForVolumeMountPoint(volumeMountPoint *uint16, volumeName *uint16, bufferlength uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procGetVolumeNameForVolumeMountPointW.Addr(), 3, uintptr(unsafe.Pointer(volumeMountPoint)), uintptr(unsafe.Pointer(volumeName)), uintptr(bufferlength))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetVolumePathName(fileName *uint16, volumePathName *uint16, bufferLength uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procGetVolumePathNameW.Addr(), 3, uintptr(unsafe.Pointer(fileName)), uintptr(unsafe.Pointer(volumePathName)), uintptr(bufferLength))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetVolumePathNamesForVolumeName(volumeName *uint16, volumePathNames *uint16, bufferLength uint32, returnLength *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procGetVolumePathNamesForVolumeNameW.Addr(), 4, uintptr(unsafe.Pointer(volumeName)), uintptr(unsafe.Pointer(volumePathNames)), uintptr(bufferLength), uintptr(unsafe.Pointer(returnLength)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func QueryDosDevice(deviceName *uint16, targetPath *uint16, max uint32) (n uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procQueryDosDeviceW.Addr(), 3, uintptr(unsafe.Pointer(deviceName)), uintptr(unsafe.Pointer(targetPath)), uintptr(max))
+	n = uint32(r0)
+	if n == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetVolumeLabel(rootPathName *uint16, volumeName *uint16) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetVolumeLabelW.Addr(), 2, uintptr(unsafe.Pointer(rootPathName)), uintptr(unsafe.Pointer(volumeName)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetVolumeMountPoint(volumeMountPoint *uint16, volumeName *uint16) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetVolumeMountPointW.Addr(), 2, uintptr(unsafe.Pointer(volumeMountPoint)), uintptr(unsafe.Pointer(volumeName)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func MessageBox(hwnd Handle, text *uint16, caption *uint16, boxtype uint32) (ret int32, err error) {
+	r0, _, e1 := syscall.Syscall6(procMessageBoxW.Addr(), 4, uintptr(hwnd), uintptr(unsafe.Pointer(text)), uintptr(unsafe.Pointer(caption)), uintptr(boxtype), 0, 0)
+	ret = int32(r0)
+	if ret == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func ExitWindowsEx(flags uint32, reason uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procExitWindowsEx.Addr(), 2, uintptr(flags), uintptr(reason), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func InitiateSystemShutdownEx(machineName *uint16, message *uint16, timeout uint32, forceAppsClosed bool, rebootAfterShutdown bool, reason uint32) (err error) {
+	var _p0 uint32
+	if forceAppsClosed {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	var _p1 uint32
+	if rebootAfterShutdown {
+		_p1 = 1
+	} else {
+		_p1 = 0
+	}
+	r1, _, e1 := syscall.Syscall6(procInitiateSystemShutdownExW.Addr(), 6, uintptr(unsafe.Pointer(machineName)), uintptr(unsafe.Pointer(message)), uintptr(timeout), uintptr(_p0), uintptr(_p1), uintptr(reason))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetProcessShutdownParameters(level uint32, flags uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetProcessShutdownParameters.Addr(), 2, uintptr(level), uintptr(flags), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetProcessShutdownParameters(level *uint32, flags *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procGetProcessShutdownParameters.Addr(), 2, uintptr(unsafe.Pointer(level)), uintptr(unsafe.Pointer(flags)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func clsidFromString(lpsz *uint16, pclsid *GUID) (ret error) {
+	r0, _, _ := syscall.Syscall(procCLSIDFromString.Addr(), 2, uintptr(unsafe.Pointer(lpsz)), uintptr(unsafe.Pointer(pclsid)), 0)
+	if r0 != 0 {
+		ret = syscall.Errno(r0)
+	}
+	return
+}
+
+func stringFromGUID2(rguid *GUID, lpsz *uint16, cchMax int32) (chars int32) {
+	r0, _, _ := syscall.Syscall(procStringFromGUID2.Addr(), 3, uintptr(unsafe.Pointer(rguid)), uintptr(unsafe.Pointer(lpsz)), uintptr(cchMax))
+	chars = int32(r0)
+	return
+}
+
+func coCreateGuid(pguid *GUID) (ret error) {
+	r0, _, _ := syscall.Syscall(procCoCreateGuid.Addr(), 1, uintptr(unsafe.Pointer(pguid)), 0, 0)
+	if r0 != 0 {
+		ret = syscall.Errno(r0)
+	}
+	return
+}
+
+func CoTaskMemFree(address unsafe.Pointer) {
+	syscall.Syscall(procCoTaskMemFree.Addr(), 1, uintptr(address), 0, 0)
+	return
+}
+
+func rtlGetVersion(info *OsVersionInfoEx) (ret error) {
+	r0, _, _ := syscall.Syscall(procRtlGetVersion.Addr(), 1, uintptr(unsafe.Pointer(info)), 0, 0)
+	if r0 != 0 {
+		ret = syscall.Errno(r0)
+	}
+	return
+}
+
+func rtlGetNtVersionNumbers(majorVersion *uint32, minorVersion *uint32, buildNumber *uint32) {
+	syscall.Syscall(procRtlGetNtVersionNumbers.Addr(), 3, uintptr(unsafe.Pointer(majorVersion)), uintptr(unsafe.Pointer(minorVersion)), uintptr(unsafe.Pointer(buildNumber)))
+	return
+}
+
+func getProcessPreferredUILanguages(flags uint32, numLanguages *uint32, buf *uint16, bufSize *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procGetProcessPreferredUILanguages.Addr(), 4, uintptr(flags), uintptr(unsafe.Pointer(numLanguages)), uintptr(unsafe.Pointer(buf)), uintptr(unsafe.Pointer(bufSize)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func getThreadPreferredUILanguages(flags uint32, numLanguages *uint32, buf *uint16, bufSize *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procGetThreadPreferredUILanguages.Addr(), 4, uintptr(flags), uintptr(unsafe.Pointer(numLanguages)), uintptr(unsafe.Pointer(buf)), uintptr(unsafe.Pointer(bufSize)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func getUserPreferredUILanguages(flags uint32, numLanguages *uint32, buf *uint16, bufSize *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procGetUserPreferredUILanguages.Addr(), 4, uintptr(flags), uintptr(unsafe.Pointer(numLanguages)), uintptr(unsafe.Pointer(buf)), uintptr(unsafe.Pointer(bufSize)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func getSystemPreferredUILanguages(flags uint32, numLanguages *uint32, buf *uint16, bufSize *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procGetSystemPreferredUILanguages.Addr(), 4, uintptr(flags), uintptr(unsafe.Pointer(numLanguages)), uintptr(unsafe.Pointer(buf)), uintptr(unsafe.Pointer(bufSize)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func EnumProcesses(processIds []uint32, bytesReturned *uint32) (err error) {
+	var _p0 *uint32
+	if len(processIds) > 0 {
+		_p0 = &processIds[0]
+	}
+	r1, _, e1 := syscall.Syscall(procEnumProcesses.Addr(), 3, uintptr(unsafe.Pointer(_p0)), uintptr(len(processIds)), uintptr(unsafe.Pointer(bytesReturned)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func WSAStartup(verreq uint32, data *WSAData) (sockerr error) {
+	r0, _, _ := syscall.Syscall(procWSAStartup.Addr(), 2, uintptr(verreq), uintptr(unsafe.Pointer(data)), 0)
+	if r0 != 0 {
+		sockerr = syscall.Errno(r0)
+	}
+	return
+}
+
+func WSACleanup() (err error) {
+	r1, _, e1 := syscall.Syscall(procWSACleanup.Addr(), 0, 0, 0, 0)
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func WSAIoctl(s Handle, iocc uint32, inbuf *byte, cbif uint32, outbuf *byte, cbob uint32, cbbr *uint32, overlapped *Overlapped, completionRoutine uintptr) (err error) {
+	r1, _, e1 := syscall.Syscall9(procWSAIoctl.Addr(), 9, uintptr(s), uintptr(iocc), uintptr(unsafe.Pointer(inbuf)), uintptr(cbif), uintptr(unsafe.Pointer(outbuf)), uintptr(cbob), uintptr(unsafe.Pointer(cbbr)), uintptr(unsafe.Pointer(overlapped)), uintptr(completionRoutine))
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func socket(af int32, typ int32, protocol int32) (handle Handle, err error) {
+	r0, _, e1 := syscall.Syscall(procsocket.Addr(), 3, uintptr(af), uintptr(typ), uintptr(protocol))
+	handle = Handle(r0)
+	if handle == InvalidHandle {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func sendto(s Handle, buf []byte, flags int32, to unsafe.Pointer, tolen int32) (err error) {
+	var _p0 *byte
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	r1, _, e1 := syscall.Syscall6(procsendto.Addr(), 6, uintptr(s), uintptr(unsafe.Pointer(_p0)), uintptr(len(buf)), uintptr(flags), uintptr(to), uintptr(tolen))
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func recvfrom(s Handle, buf []byte, flags int32, from *RawSockaddrAny, fromlen *int32) (n int32, err error) {
+	var _p0 *byte
+	if len(buf) > 0 {
+		_p0 = &buf[0]
+	}
+	r0, _, e1 := syscall.Syscall6(procrecvfrom.Addr(), 6, uintptr(s), uintptr(unsafe.Pointer(_p0)), uintptr(len(buf)), uintptr(flags), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)))
+	n = int32(r0)
+	if n == -1 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func Setsockopt(s Handle, level int32, optname int32, optval *byte, optlen int32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procsetsockopt.Addr(), 5, uintptr(s), uintptr(level), uintptr(optname), uintptr(unsafe.Pointer(optval)), uintptr(optlen), 0)
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func Getsockopt(s Handle, level int32, optname int32, optval *byte, optlen *int32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procgetsockopt.Addr(), 5, uintptr(s), uintptr(level), uintptr(optname), uintptr(unsafe.Pointer(optval)), uintptr(unsafe.Pointer(optlen)), 0)
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func bind(s Handle, name unsafe.Pointer, namelen int32) (err error) {
+	r1, _, e1 := syscall.Syscall(procbind.Addr(), 3, uintptr(s), uintptr(name), uintptr(namelen))
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func connect(s Handle, name unsafe.Pointer, namelen int32) (err error) {
+	r1, _, e1 := syscall.Syscall(procconnect.Addr(), 3, uintptr(s), uintptr(name), uintptr(namelen))
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func getsockname(s Handle, rsa *RawSockaddrAny, addrlen *int32) (err error) {
+	r1, _, e1 := syscall.Syscall(procgetsockname.Addr(), 3, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func getpeername(s Handle, rsa *RawSockaddrAny, addrlen *int32) (err error) {
+	r1, _, e1 := syscall.Syscall(procgetpeername.Addr(), 3, uintptr(s), uintptr(unsafe.Pointer(rsa)), uintptr(unsafe.Pointer(addrlen)))
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func listen(s Handle, backlog int32) (err error) {
+	r1, _, e1 := syscall.Syscall(proclisten.Addr(), 2, uintptr(s), uintptr(backlog), 0)
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func shutdown(s Handle, how int32) (err error) {
+	r1, _, e1 := syscall.Syscall(procshutdown.Addr(), 2, uintptr(s), uintptr(how), 0)
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func Closesocket(s Handle) (err error) {
+	r1, _, e1 := syscall.Syscall(procclosesocket.Addr(), 1, uintptr(s), 0, 0)
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func AcceptEx(ls Handle, as Handle, buf *byte, rxdatalen uint32, laddrlen uint32, raddrlen uint32, recvd *uint32, overlapped *Overlapped) (err error) {
+	r1, _, e1 := syscall.Syscall9(procAcceptEx.Addr(), 8, uintptr(ls), uintptr(as), uintptr(unsafe.Pointer(buf)), uintptr(rxdatalen), uintptr(laddrlen), uintptr(raddrlen), uintptr(unsafe.Pointer(recvd)), uintptr(unsafe.Pointer(overlapped)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetAcceptExSockaddrs(buf *byte, rxdatalen uint32, laddrlen uint32, raddrlen uint32, lrsa **RawSockaddrAny, lrsalen *int32, rrsa **RawSockaddrAny, rrsalen *int32) {
+	syscall.Syscall9(procGetAcceptExSockaddrs.Addr(), 8, uintptr(unsafe.Pointer(buf)), uintptr(rxdatalen), uintptr(laddrlen), uintptr(raddrlen), uintptr(unsafe.Pointer(lrsa)), uintptr(unsafe.Pointer(lrsalen)), uintptr(unsafe.Pointer(rrsa)), uintptr(unsafe.Pointer(rrsalen)), 0)
+	return
+}
+
+func WSARecv(s Handle, bufs *WSABuf, bufcnt uint32, recvd *uint32, flags *uint32, overlapped *Overlapped, croutine *byte) (err error) {
+	r1, _, e1 := syscall.Syscall9(procWSARecv.Addr(), 7, uintptr(s), uintptr(unsafe.Pointer(bufs)), uintptr(bufcnt), uintptr(unsafe.Pointer(recvd)), uintptr(unsafe.Pointer(flags)), uintptr(unsafe.Pointer(overlapped)), uintptr(unsafe.Pointer(croutine)), 0, 0)
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func WSASend(s Handle, bufs *WSABuf, bufcnt uint32, sent *uint32, flags uint32, overlapped *Overlapped, croutine *byte) (err error) {
+	r1, _, e1 := syscall.Syscall9(procWSASend.Addr(), 7, uintptr(s), uintptr(unsafe.Pointer(bufs)), uintptr(bufcnt), uintptr(unsafe.Pointer(sent)), uintptr(flags), uintptr(unsafe.Pointer(overlapped)), uintptr(unsafe.Pointer(croutine)), 0, 0)
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func WSARecvFrom(s Handle, bufs *WSABuf, bufcnt uint32, recvd *uint32, flags *uint32, from *RawSockaddrAny, fromlen *int32, overlapped *Overlapped, croutine *byte) (err error) {
+	r1, _, e1 := syscall.Syscall9(procWSARecvFrom.Addr(), 9, uintptr(s), uintptr(unsafe.Pointer(bufs)), uintptr(bufcnt), uintptr(unsafe.Pointer(recvd)), uintptr(unsafe.Pointer(flags)), uintptr(unsafe.Pointer(from)), uintptr(unsafe.Pointer(fromlen)), uintptr(unsafe.Pointer(overlapped)), uintptr(unsafe.Pointer(croutine)))
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func WSASendTo(s Handle, bufs *WSABuf, bufcnt uint32, sent *uint32, flags uint32, to *RawSockaddrAny, tolen int32, overlapped *Overlapped, croutine *byte) (err error) {
+	r1, _, e1 := syscall.Syscall9(procWSASendTo.Addr(), 9, uintptr(s), uintptr(unsafe.Pointer(bufs)), uintptr(bufcnt), uintptr(unsafe.Pointer(sent)), uintptr(flags), uintptr(unsafe.Pointer(to)), uintptr(tolen), uintptr(unsafe.Pointer(overlapped)), uintptr(unsafe.Pointer(croutine)))
+	if r1 == socket_error {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetHostByName(name string) (h *Hostent, err error) {
+	var _p0 *byte
+	_p0, err = syscall.BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	return _GetHostByName(_p0)
+}
+
+func _GetHostByName(name *byte) (h *Hostent, err error) {
+	r0, _, e1 := syscall.Syscall(procgethostbyname.Addr(), 1, uintptr(unsafe.Pointer(name)), 0, 0)
+	h = (*Hostent)(unsafe.Pointer(r0))
+	if h == nil {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetServByName(name string, proto string) (s *Servent, err error) {
+	var _p0 *byte
+	_p0, err = syscall.BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	var _p1 *byte
+	_p1, err = syscall.BytePtrFromString(proto)
+	if err != nil {
+		return
+	}
+	return _GetServByName(_p0, _p1)
+}
+
+func _GetServByName(name *byte, proto *byte) (s *Servent, err error) {
+	r0, _, e1 := syscall.Syscall(procgetservbyname.Addr(), 2, uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(proto)), 0)
+	s = (*Servent)(unsafe.Pointer(r0))
+	if s == nil {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func Ntohs(netshort uint16) (u uint16) {
+	r0, _, _ := syscall.Syscall(procntohs.Addr(), 1, uintptr(netshort), 0, 0)
+	u = uint16(r0)
+	return
+}
+
+func GetProtoByName(name string) (p *Protoent, err error) {
+	var _p0 *byte
+	_p0, err = syscall.BytePtrFromString(name)
+	if err != nil {
+		return
+	}
+	return _GetProtoByName(_p0)
+}
+
+func _GetProtoByName(name *byte) (p *Protoent, err error) {
+	r0, _, e1 := syscall.Syscall(procgetprotobyname.Addr(), 1, uintptr(unsafe.Pointer(name)), 0, 0)
+	p = (*Protoent)(unsafe.Pointer(r0))
+	if p == nil {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func DnsQuery(name string, qtype uint16, options uint32, extra *byte, qrs **DNSRecord, pr *byte) (status error) {
+	var _p0 *uint16
+	_p0, status = syscall.UTF16PtrFromString(name)
+	if status != nil {
+		return
+	}
+	return _DnsQuery(_p0, qtype, options, extra, qrs, pr)
+}
+
+func _DnsQuery(name *uint16, qtype uint16, options uint32, extra *byte, qrs **DNSRecord, pr *byte) (status error) {
+	r0, _, _ := syscall.Syscall6(procDnsQuery_W.Addr(), 6, uintptr(unsafe.Pointer(name)), uintptr(qtype), uintptr(options), uintptr(unsafe.Pointer(extra)), uintptr(unsafe.Pointer(qrs)), uintptr(unsafe.Pointer(pr)))
+	if r0 != 0 {
+		status = syscall.Errno(r0)
+	}
+	return
+}
+
+func DnsRecordListFree(rl *DNSRecord, freetype uint32) {
+	syscall.Syscall(procDnsRecordListFree.Addr(), 2, uintptr(unsafe.Pointer(rl)), uintptr(freetype), 0)
+	return
+}
+
+func DnsNameCompare(name1 *uint16, name2 *uint16) (same bool) {
+	r0, _, _ := syscall.Syscall(procDnsNameCompare_W.Addr(), 2, uintptr(unsafe.Pointer(name1)), uintptr(unsafe.Pointer(name2)), 0)
+	same = r0 != 0
+	return
+}
+
+func GetAddrInfoW(nodename *uint16, servicename *uint16, hints *AddrinfoW, result **AddrinfoW) (sockerr error) {
+	r0, _, _ := syscall.Syscall6(procGetAddrInfoW.Addr(), 4, uintptr(unsafe.Pointer(nodename)), uintptr(unsafe.Pointer(servicename)), uintptr(unsafe.Pointer(hints)), uintptr(unsafe.Pointer(result)), 0, 0)
+	if r0 != 0 {
+		sockerr = syscall.Errno(r0)
+	}
+	return
+}
+
+func FreeAddrInfoW(addrinfo *AddrinfoW) {
+	syscall.Syscall(procFreeAddrInfoW.Addr(), 1, uintptr(unsafe.Pointer(addrinfo)), 0, 0)
+	return
+}
+
+func GetIfEntry(pIfRow *MibIfRow) (errcode error) {
+	r0, _, _ := syscall.Syscall(procGetIfEntry.Addr(), 1, uintptr(unsafe.Pointer(pIfRow)), 0, 0)
+	if r0 != 0 {
+		errcode = syscall.Errno(r0)
+	}
+	return
+}
+
+func GetAdaptersInfo(ai *IpAdapterInfo, ol *uint32) (errcode error) {
+	r0, _, _ := syscall.Syscall(procGetAdaptersInfo.Addr(), 2, uintptr(unsafe.Pointer(ai)), uintptr(unsafe.Pointer(ol)), 0)
+	if r0 != 0 {
+		errcode = syscall.Errno(r0)
+	}
+	return
+}
+
+func SetFileCompletionNotificationModes(handle Handle, flags uint8) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetFileCompletionNotificationModes.Addr(), 2, uintptr(handle), uintptr(flags), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func WSAEnumProtocols(protocols *int32, protocolBuffer *WSAProtocolInfo, bufferLength *uint32) (n int32, err error) {
+	r0, _, e1 := syscall.Syscall(procWSAEnumProtocolsW.Addr(), 3, uintptr(unsafe.Pointer(protocols)), uintptr(unsafe.Pointer(protocolBuffer)), uintptr(unsafe.Pointer(bufferLength)))
+	n = int32(r0)
+	if n == -1 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetAdaptersAddresses(family uint32, flags uint32, reserved uintptr, adapterAddresses *IpAdapterAddresses, sizePointer *uint32) (errcode error) {
+	r0, _, _ := syscall.Syscall6(procGetAdaptersAddresses.Addr(), 5, uintptr(family), uintptr(flags), uintptr(reserved), uintptr(unsafe.Pointer(adapterAddresses)), uintptr(unsafe.Pointer(sizePointer)), 0)
+	if r0 != 0 {
+		errcode = syscall.Errno(r0)
+	}
+	return
+}
+
+func GetACP() (acp uint32) {
+	r0, _, _ := syscall.Syscall(procGetACP.Addr(), 0, 0, 0, 0)
+	acp = uint32(r0)
+	return
+}
+
+func MultiByteToWideChar(codePage uint32, dwFlags uint32, str *byte, nstr int32, wchar *uint16, nwchar int32) (nwrite int32, err error) {
+	r0, _, e1 := syscall.Syscall6(procMultiByteToWideChar.Addr(), 6, uintptr(codePage), uintptr(dwFlags), uintptr(unsafe.Pointer(str)), uintptr(nstr), uintptr(unsafe.Pointer(wchar)), uintptr(nwchar))
+	nwrite = int32(r0)
+	if nwrite == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func TranslateName(accName *uint16, accNameFormat uint32, desiredNameFormat uint32, translatedName *uint16, nSize *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procTranslateNameW.Addr(), 5, uintptr(unsafe.Pointer(accName)), uintptr(accNameFormat), uintptr(desiredNameFormat), uintptr(unsafe.Pointer(translatedName)), uintptr(unsafe.Pointer(nSize)), 0)
+	if r1&0xff == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetUserNameEx(nameFormat uint32, nameBuffre *uint16, nSize *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procGetUserNameExW.Addr(), 3, uintptr(nameFormat), uintptr(unsafe.Pointer(nameBuffre)), uintptr(unsafe.Pointer(nSize)))
+	if r1&0xff == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func NetUserGetInfo(serverName *uint16, userName *uint16, level uint32, buf **byte) (neterr error) {
+	r0, _, _ := syscall.Syscall6(procNetUserGetInfo.Addr(), 4, uintptr(unsafe.Pointer(serverName)), uintptr(unsafe.Pointer(userName)), uintptr(level), uintptr(unsafe.Pointer(buf)), 0, 0)
+	if r0 != 0 {
+		neterr = syscall.Errno(r0)
+	}
+	return
+}
+
+func NetGetJoinInformation(server *uint16, name **uint16, bufType *uint32) (neterr error) {
+	r0, _, _ := syscall.Syscall(procNetGetJoinInformation.Addr(), 3, uintptr(unsafe.Pointer(server)), uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(bufType)))
+	if r0 != 0 {
+		neterr = syscall.Errno(r0)
+	}
+	return
+}
+
+func NetApiBufferFree(buf *byte) (neterr error) {
+	r0, _, _ := syscall.Syscall(procNetApiBufferFree.Addr(), 1, uintptr(unsafe.Pointer(buf)), 0, 0)
+	if r0 != 0 {
+		neterr = syscall.Errno(r0)
+	}
+	return
+}
+
+func LookupAccountSid(systemName *uint16, sid *SID, name *uint16, nameLen *uint32, refdDomainName *uint16, refdDomainNameLen *uint32, use *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall9(procLookupAccountSidW.Addr(), 7, uintptr(unsafe.Pointer(systemName)), uintptr(unsafe.Pointer(sid)), uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(nameLen)), uintptr(unsafe.Pointer(refdDomainName)), uintptr(unsafe.Pointer(refdDomainNameLen)), uintptr(unsafe.Pointer(use)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func LookupAccountName(systemName *uint16, accountName *uint16, sid *SID, sidLen *uint32, refdDomainName *uint16, refdDomainNameLen *uint32, use *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall9(procLookupAccountNameW.Addr(), 7, uintptr(unsafe.Pointer(systemName)), uintptr(unsafe.Pointer(accountName)), uintptr(unsafe.Pointer(sid)), uintptr(unsafe.Pointer(sidLen)), uintptr(unsafe.Pointer(refdDomainName)), uintptr(unsafe.Pointer(refdDomainNameLen)), uintptr(unsafe.Pointer(use)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func ConvertSidToStringSid(sid *SID, stringSid **uint16) (err error) {
+	r1, _, e1 := syscall.Syscall(procConvertSidToStringSidW.Addr(), 2, uintptr(unsafe.Pointer(sid)), uintptr(unsafe.Pointer(stringSid)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func ConvertStringSidToSid(stringSid *uint16, sid **SID) (err error) {
+	r1, _, e1 := syscall.Syscall(procConvertStringSidToSidW.Addr(), 2, uintptr(unsafe.Pointer(stringSid)), uintptr(unsafe.Pointer(sid)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetLengthSid(sid *SID) (len uint32) {
+	r0, _, _ := syscall.Syscall(procGetLengthSid.Addr(), 1, uintptr(unsafe.Pointer(sid)), 0, 0)
+	len = uint32(r0)
+	return
+}
+
+func CopySid(destSidLen uint32, destSid *SID, srcSid *SID) (err error) {
+	r1, _, e1 := syscall.Syscall(procCopySid.Addr(), 3, uintptr(destSidLen), uintptr(unsafe.Pointer(destSid)), uintptr(unsafe.Pointer(srcSid)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func AllocateAndInitializeSid(identAuth *SidIdentifierAuthority, subAuth byte, subAuth0 uint32, subAuth1 uint32, subAuth2 uint32, subAuth3 uint32, subAuth4 uint32, subAuth5 uint32, subAuth6 uint32, subAuth7 uint32, sid **SID) (err error) {
+	r1, _, e1 := syscall.Syscall12(procAllocateAndInitializeSid.Addr(), 11, uintptr(unsafe.Pointer(identAuth)), uintptr(subAuth), uintptr(subAuth0), uintptr(subAuth1), uintptr(subAuth2), uintptr(subAuth3), uintptr(subAuth4), uintptr(subAuth5), uintptr(subAuth6), uintptr(subAuth7), uintptr(unsafe.Pointer(sid)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func createWellKnownSid(sidType WELL_KNOWN_SID_TYPE, domainSid *SID, sid *SID, sizeSid *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procCreateWellKnownSid.Addr(), 4, uintptr(sidType), uintptr(unsafe.Pointer(domainSid)), uintptr(unsafe.Pointer(sid)), uintptr(unsafe.Pointer(sizeSid)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func isWellKnownSid(sid *SID, sidType WELL_KNOWN_SID_TYPE) (isWellKnown bool) {
+	r0, _, _ := syscall.Syscall(procIsWellKnownSid.Addr(), 2, uintptr(unsafe.Pointer(sid)), uintptr(sidType), 0)
+	isWellKnown = r0 != 0
+	return
+}
+
+func FreeSid(sid *SID) (err error) {
+	r1, _, e1 := syscall.Syscall(procFreeSid.Addr(), 1, uintptr(unsafe.Pointer(sid)), 0, 0)
+	if r1 != 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func EqualSid(sid1 *SID, sid2 *SID) (isEqual bool) {
+	r0, _, _ := syscall.Syscall(procEqualSid.Addr(), 2, uintptr(unsafe.Pointer(sid1)), uintptr(unsafe.Pointer(sid2)), 0)
+	isEqual = r0 != 0
+	return
+}
+
+func getSidIdentifierAuthority(sid *SID) (authority *SidIdentifierAuthority) {
+	r0, _, _ := syscall.Syscall(procGetSidIdentifierAuthority.Addr(), 1, uintptr(unsafe.Pointer(sid)), 0, 0)
+	authority = (*SidIdentifierAuthority)(unsafe.Pointer(r0))
+	return
+}
+
+func getSidSubAuthorityCount(sid *SID) (count *uint8) {
+	r0, _, _ := syscall.Syscall(procGetSidSubAuthorityCount.Addr(), 1, uintptr(unsafe.Pointer(sid)), 0, 0)
+	count = (*uint8)(unsafe.Pointer(r0))
+	return
+}
+
+func getSidSubAuthority(sid *SID, index uint32) (subAuthority *uint32) {
+	r0, _, _ := syscall.Syscall(procGetSidSubAuthority.Addr(), 2, uintptr(unsafe.Pointer(sid)), uintptr(index), 0)
+	subAuthority = (*uint32)(unsafe.Pointer(r0))
+	return
+}
+
+func isValidSid(sid *SID) (isValid bool) {
+	r0, _, _ := syscall.Syscall(procIsValidSid.Addr(), 1, uintptr(unsafe.Pointer(sid)), 0, 0)
+	isValid = r0 != 0
+	return
+}
+
+func checkTokenMembership(tokenHandle Token, sidToCheck *SID, isMember *int32) (err error) {
+	r1, _, e1 := syscall.Syscall(procCheckTokenMembership.Addr(), 3, uintptr(tokenHandle), uintptr(unsafe.Pointer(sidToCheck)), uintptr(unsafe.Pointer(isMember)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func OpenProcessToken(process Handle, access uint32, token *Token) (err error) {
+	r1, _, e1 := syscall.Syscall(procOpenProcessToken.Addr(), 3, uintptr(process), uintptr(access), uintptr(unsafe.Pointer(token)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func OpenThreadToken(thread Handle, access uint32, openAsSelf bool, token *Token) (err error) {
+	var _p0 uint32
+	if openAsSelf {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r1, _, e1 := syscall.Syscall6(procOpenThreadToken.Addr(), 4, uintptr(thread), uintptr(access), uintptr(_p0), uintptr(unsafe.Pointer(token)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func ImpersonateSelf(impersonationlevel uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procImpersonateSelf.Addr(), 1, uintptr(impersonationlevel), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func RevertToSelf() (err error) {
+	r1, _, e1 := syscall.Syscall(procRevertToSelf.Addr(), 0, 0, 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetThreadToken(thread *Handle, token Token) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetThreadToken.Addr(), 2, uintptr(unsafe.Pointer(thread)), uintptr(token), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func LookupPrivilegeValue(systemname *uint16, name *uint16, luid *LUID) (err error) {
+	r1, _, e1 := syscall.Syscall(procLookupPrivilegeValueW.Addr(), 3, uintptr(unsafe.Pointer(systemname)), uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(luid)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func AdjustTokenPrivileges(token Token, disableAllPrivileges bool, newstate *Tokenprivileges, buflen uint32, prevstate *Tokenprivileges, returnlen *uint32) (err error) {
+	var _p0 uint32
+	if disableAllPrivileges {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r1, _, e1 := syscall.Syscall6(procAdjustTokenPrivileges.Addr(), 6, uintptr(token), uintptr(_p0), uintptr(unsafe.Pointer(newstate)), uintptr(buflen), uintptr(unsafe.Pointer(prevstate)), uintptr(unsafe.Pointer(returnlen)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func AdjustTokenGroups(token Token, resetToDefault bool, newstate *Tokengroups, buflen uint32, prevstate *Tokengroups, returnlen *uint32) (err error) {
+	var _p0 uint32
+	if resetToDefault {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r1, _, e1 := syscall.Syscall6(procAdjustTokenGroups.Addr(), 6, uintptr(token), uintptr(_p0), uintptr(unsafe.Pointer(newstate)), uintptr(buflen), uintptr(unsafe.Pointer(prevstate)), uintptr(unsafe.Pointer(returnlen)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetTokenInformation(token Token, infoClass uint32, info *byte, infoLen uint32, returnedLen *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procGetTokenInformation.Addr(), 5, uintptr(token), uintptr(infoClass), uintptr(unsafe.Pointer(info)), uintptr(infoLen), uintptr(unsafe.Pointer(returnedLen)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func SetTokenInformation(token Token, infoClass uint32, info *byte, infoLen uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procSetTokenInformation.Addr(), 4, uintptr(token), uintptr(infoClass), uintptr(unsafe.Pointer(info)), uintptr(infoLen), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func DuplicateTokenEx(existingToken Token, desiredAccess uint32, tokenAttributes *SecurityAttributes, impersonationLevel uint32, tokenType uint32, newToken *Token) (err error) {
+	r1, _, e1 := syscall.Syscall6(procDuplicateTokenEx.Addr(), 6, uintptr(existingToken), uintptr(desiredAccess), uintptr(unsafe.Pointer(tokenAttributes)), uintptr(impersonationLevel), uintptr(tokenType), uintptr(unsafe.Pointer(newToken)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func GetUserProfileDirectory(t Token, dir *uint16, dirLen *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procGetUserProfileDirectoryW.Addr(), 3, uintptr(t), uintptr(unsafe.Pointer(dir)), uintptr(unsafe.Pointer(dirLen)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func getSystemDirectory(dir *uint16, dirLen uint32) (len uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetSystemDirectoryW.Addr(), 2, uintptr(unsafe.Pointer(dir)), uintptr(dirLen), 0)
+	len = uint32(r0)
+	if len == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func getWindowsDirectory(dir *uint16, dirLen uint32) (len uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetWindowsDirectoryW.Addr(), 2, uintptr(unsafe.Pointer(dir)), uintptr(dirLen), 0)
+	len = uint32(r0)
+	if len == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func getSystemWindowsDirectory(dir *uint16, dirLen uint32) (len uint32, err error) {
+	r0, _, e1 := syscall.Syscall(procGetSystemWindowsDirectoryW.Addr(), 2, uintptr(unsafe.Pointer(dir)), uintptr(dirLen), 0)
+	len = uint32(r0)
+	if len == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func WTSQueryUserToken(session uint32, token *Token) (err error) {
+	r1, _, e1 := syscall.Syscall(procWTSQueryUserToken.Addr(), 2, uintptr(session), uintptr(unsafe.Pointer(token)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func WTSEnumerateSessions(handle Handle, reserved uint32, version uint32, sessions **WTS_SESSION_INFO, count *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procWTSEnumerateSessionsW.Addr(), 5, uintptr(handle), uintptr(reserved), uintptr(version), uintptr(unsafe.Pointer(sessions)), uintptr(unsafe.Pointer(count)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func WTSFreeMemory(ptr uintptr) {
+	syscall.Syscall(procWTSFreeMemory.Addr(), 1, uintptr(ptr), 0, 0)
+	return
+}
+
+func getSecurityInfo(handle Handle, objectType SE_OBJECT_TYPE, securityInformation SECURITY_INFORMATION, owner **SID, group **SID, dacl **ACL, sacl **ACL, sd **SECURITY_DESCRIPTOR) (ret error) {
+	r0, _, _ := syscall.Syscall9(procGetSecurityInfo.Addr(), 8, uintptr(handle), uintptr(objectType), uintptr(securityInformation), uintptr(unsafe.Pointer(owner)), uintptr(unsafe.Pointer(group)), uintptr(unsafe.Pointer(dacl)), uintptr(unsafe.Pointer(sacl)), uintptr(unsafe.Pointer(sd)), 0)
+	if r0 != 0 {
+		ret = syscall.Errno(r0)
+	}
+	return
+}
+
+func SetSecurityInfo(handle Handle, objectType SE_OBJECT_TYPE, securityInformation SECURITY_INFORMATION, owner *SID, group *SID, dacl *ACL, sacl *ACL) {
+	syscall.Syscall9(procSetSecurityInfo.Addr(), 7, uintptr(handle), uintptr(objectType), uintptr(securityInformation), uintptr(unsafe.Pointer(owner)), uintptr(unsafe.Pointer(group)), uintptr(unsafe.Pointer(dacl)), uintptr(unsafe.Pointer(sacl)), 0, 0)
+	return
+}
+
+func getNamedSecurityInfo(objectName string, objectType SE_OBJECT_TYPE, securityInformation SECURITY_INFORMATION, owner **SID, group **SID, dacl **ACL, sacl **ACL, sd **SECURITY_DESCRIPTOR) (ret error) {
+	var _p0 *uint16
+	_p0, ret = syscall.UTF16PtrFromString(objectName)
+	if ret != nil {
+		return
+	}
+	return _getNamedSecurityInfo(_p0, objectType, securityInformation, owner, group, dacl, sacl, sd)
+}
+
+func _getNamedSecurityInfo(objectName *uint16, objectType SE_OBJECT_TYPE, securityInformation SECURITY_INFORMATION, owner **SID, group **SID, dacl **ACL, sacl **ACL, sd **SECURITY_DESCRIPTOR) (ret error) {
+	r0, _, _ := syscall.Syscall9(procGetNamedSecurityInfoW.Addr(), 8, uintptr(unsafe.Pointer(objectName)), uintptr(objectType), uintptr(securityInformation), uintptr(unsafe.Pointer(owner)), uintptr(unsafe.Pointer(group)), uintptr(unsafe.Pointer(dacl)), uintptr(unsafe.Pointer(sacl)), uintptr(unsafe.Pointer(sd)), 0)
+	if r0 != 0 {
+		ret = syscall.Errno(r0)
+	}
+	return
+}
+
+func SetNamedSecurityInfo(objectName string, objectType SE_OBJECT_TYPE, securityInformation SECURITY_INFORMATION, owner *SID, group *SID, dacl *ACL, sacl *ACL) (ret error) {
+	var _p0 *uint16
+	_p0, ret = syscall.UTF16PtrFromString(objectName)
+	if ret != nil {
+		return
+	}
+	return _SetNamedSecurityInfo(_p0, objectType, securityInformation, owner, group, dacl, sacl)
+}
+
+func _SetNamedSecurityInfo(objectName *uint16, objectType SE_OBJECT_TYPE, securityInformation SECURITY_INFORMATION, owner *SID, group *SID, dacl *ACL, sacl *ACL) (ret error) {
+	r0, _, _ := syscall.Syscall9(procSetNamedSecurityInfoW.Addr(), 7, uintptr(unsafe.Pointer(objectName)), uintptr(objectType), uintptr(securityInformation), uintptr(unsafe.Pointer(owner)), uintptr(unsafe.Pointer(group)), uintptr(unsafe.Pointer(dacl)), uintptr(unsafe.Pointer(sacl)), 0, 0)
+	if r0 != 0 {
+		ret = syscall.Errno(r0)
+	}
+	return
+}
+
+func buildSecurityDescriptor(owner *TRUSTEE, group *TRUSTEE, countAccessEntries uint32, accessEntries *EXPLICIT_ACCESS, countAuditEntries uint32, auditEntries *EXPLICIT_ACCESS, oldSecurityDescriptor *SECURITY_DESCRIPTOR, sizeNewSecurityDescriptor *uint32, newSecurityDescriptor **SECURITY_DESCRIPTOR) (ret error) {
+	r0, _, _ := syscall.Syscall9(procBuildSecurityDescriptorW.Addr(), 9, uintptr(unsafe.Pointer(owner)), uintptr(unsafe.Pointer(group)), uintptr(countAccessEntries), uintptr(unsafe.Pointer(accessEntries)), uintptr(countAuditEntries), uintptr(unsafe.Pointer(auditEntries)), uintptr(unsafe.Pointer(oldSecurityDescriptor)), uintptr(unsafe.Pointer(sizeNewSecurityDescriptor)), uintptr(unsafe.Pointer(newSecurityDescriptor)))
+	if r0 != 0 {
+		ret = syscall.Errno(r0)
+	}
+	return
+}
+
+func initializeSecurityDescriptor(absoluteSD *SECURITY_DESCRIPTOR, revision uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procInitializeSecurityDescriptor.Addr(), 2, uintptr(unsafe.Pointer(absoluteSD)), uintptr(revision), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func getSecurityDescriptorControl(sd *SECURITY_DESCRIPTOR, control *SECURITY_DESCRIPTOR_CONTROL, revision *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procGetSecurityDescriptorControl.Addr(), 3, uintptr(unsafe.Pointer(sd)), uintptr(unsafe.Pointer(control)), uintptr(unsafe.Pointer(revision)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func getSecurityDescriptorDacl(sd *SECURITY_DESCRIPTOR, daclPresent *bool, dacl **ACL, daclDefaulted *bool) (err error) {
+	var _p0 uint32
+	if *daclPresent {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	var _p1 uint32
+	if *daclDefaulted {
+		_p1 = 1
+	} else {
+		_p1 = 0
+	}
+	r1, _, e1 := syscall.Syscall6(procGetSecurityDescriptorDacl.Addr(), 4, uintptr(unsafe.Pointer(sd)), uintptr(unsafe.Pointer(&_p0)), uintptr(unsafe.Pointer(dacl)), uintptr(unsafe.Pointer(&_p1)), 0, 0)
+	*daclPresent = _p0 != 0
+	*daclDefaulted = _p1 != 0
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func getSecurityDescriptorSacl(sd *SECURITY_DESCRIPTOR, saclPresent *bool, sacl **ACL, saclDefaulted *bool) (err error) {
+	var _p0 uint32
+	if *saclPresent {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	var _p1 uint32
+	if *saclDefaulted {
+		_p1 = 1
+	} else {
+		_p1 = 0
+	}
+	r1, _, e1 := syscall.Syscall6(procGetSecurityDescriptorSacl.Addr(), 4, uintptr(unsafe.Pointer(sd)), uintptr(unsafe.Pointer(&_p0)), uintptr(unsafe.Pointer(sacl)), uintptr(unsafe.Pointer(&_p1)), 0, 0)
+	*saclPresent = _p0 != 0
+	*saclDefaulted = _p1 != 0
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func getSecurityDescriptorOwner(sd *SECURITY_DESCRIPTOR, owner **SID, ownerDefaulted *bool) (err error) {
+	var _p0 uint32
+	if *ownerDefaulted {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r1, _, e1 := syscall.Syscall(procGetSecurityDescriptorOwner.Addr(), 3, uintptr(unsafe.Pointer(sd)), uintptr(unsafe.Pointer(owner)), uintptr(unsafe.Pointer(&_p0)))
+	*ownerDefaulted = _p0 != 0
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func getSecurityDescriptorGroup(sd *SECURITY_DESCRIPTOR, group **SID, groupDefaulted *bool) (err error) {
+	var _p0 uint32
+	if *groupDefaulted {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r1, _, e1 := syscall.Syscall(procGetSecurityDescriptorGroup.Addr(), 3, uintptr(unsafe.Pointer(sd)), uintptr(unsafe.Pointer(group)), uintptr(unsafe.Pointer(&_p0)))
+	*groupDefaulted = _p0 != 0
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func getSecurityDescriptorLength(sd *SECURITY_DESCRIPTOR) (len uint32) {
+	r0, _, _ := syscall.Syscall(procGetSecurityDescriptorLength.Addr(), 1, uintptr(unsafe.Pointer(sd)), 0, 0)
+	len = uint32(r0)
+	return
+}
+
+func getSecurityDescriptorRMControl(sd *SECURITY_DESCRIPTOR, rmControl *uint8) (ret error) {
+	r0, _, _ := syscall.Syscall(procGetSecurityDescriptorRMControl.Addr(), 2, uintptr(unsafe.Pointer(sd)), uintptr(unsafe.Pointer(rmControl)), 0)
+	if r0 != 0 {
+		ret = syscall.Errno(r0)
+	}
+	return
+}
+
+func isValidSecurityDescriptor(sd *SECURITY_DESCRIPTOR) (isValid bool) {
+	r0, _, _ := syscall.Syscall(procIsValidSecurityDescriptor.Addr(), 1, uintptr(unsafe.Pointer(sd)), 0, 0)
+	isValid = r0 != 0
+	return
+}
+
+func setSecurityDescriptorControl(sd *SECURITY_DESCRIPTOR, controlBitsOfInterest SECURITY_DESCRIPTOR_CONTROL, controlBitsToSet SECURITY_DESCRIPTOR_CONTROL) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetSecurityDescriptorControl.Addr(), 3, uintptr(unsafe.Pointer(sd)), uintptr(controlBitsOfInterest), uintptr(controlBitsToSet))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func setSecurityDescriptorDacl(sd *SECURITY_DESCRIPTOR, daclPresent bool, dacl *ACL, daclDefaulted bool) (err error) {
+	var _p0 uint32
+	if daclPresent {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	var _p1 uint32
+	if daclDefaulted {
+		_p1 = 1
+	} else {
+		_p1 = 0
+	}
+	r1, _, e1 := syscall.Syscall6(procSetSecurityDescriptorDacl.Addr(), 4, uintptr(unsafe.Pointer(sd)), uintptr(_p0), uintptr(unsafe.Pointer(dacl)), uintptr(_p1), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func setSecurityDescriptorSacl(sd *SECURITY_DESCRIPTOR, saclPresent bool, sacl *ACL, saclDefaulted bool) (err error) {
+	var _p0 uint32
+	if saclPresent {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	var _p1 uint32
+	if saclDefaulted {
+		_p1 = 1
+	} else {
+		_p1 = 0
+	}
+	r1, _, e1 := syscall.Syscall6(procSetSecurityDescriptorSacl.Addr(), 4, uintptr(unsafe.Pointer(sd)), uintptr(_p0), uintptr(unsafe.Pointer(sacl)), uintptr(_p1), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func setSecurityDescriptorOwner(sd *SECURITY_DESCRIPTOR, owner *SID, ownerDefaulted bool) (err error) {
+	var _p0 uint32
+	if ownerDefaulted {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r1, _, e1 := syscall.Syscall(procSetSecurityDescriptorOwner.Addr(), 3, uintptr(unsafe.Pointer(sd)), uintptr(unsafe.Pointer(owner)), uintptr(_p0))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func setSecurityDescriptorGroup(sd *SECURITY_DESCRIPTOR, group *SID, groupDefaulted bool) (err error) {
+	var _p0 uint32
+	if groupDefaulted {
+		_p0 = 1
+	} else {
+		_p0 = 0
+	}
+	r1, _, e1 := syscall.Syscall(procSetSecurityDescriptorGroup.Addr(), 3, uintptr(unsafe.Pointer(sd)), uintptr(unsafe.Pointer(group)), uintptr(_p0))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func setSecurityDescriptorRMControl(sd *SECURITY_DESCRIPTOR, rmControl *uint8) {
+	syscall.Syscall(procSetSecurityDescriptorRMControl.Addr(), 2, uintptr(unsafe.Pointer(sd)), uintptr(unsafe.Pointer(rmControl)), 0)
+	return
+}
+
+func convertStringSecurityDescriptorToSecurityDescriptor(str string, revision uint32, sd **SECURITY_DESCRIPTOR, size *uint32) (err error) {
+	var _p0 *uint16
+	_p0, err = syscall.UTF16PtrFromString(str)
+	if err != nil {
+		return
+	}
+	return _convertStringSecurityDescriptorToSecurityDescriptor(_p0, revision, sd, size)
+}
+
+func _convertStringSecurityDescriptorToSecurityDescriptor(str *uint16, revision uint32, sd **SECURITY_DESCRIPTOR, size *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procConvertStringSecurityDescriptorToSecurityDescriptorW.Addr(), 4, uintptr(unsafe.Pointer(str)), uintptr(revision), uintptr(unsafe.Pointer(sd)), uintptr(unsafe.Pointer(size)), 0, 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func convertSecurityDescriptorToStringSecurityDescriptor(sd *SECURITY_DESCRIPTOR, revision uint32, securityInformation SECURITY_INFORMATION, str **uint16, strLen *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall6(procConvertSecurityDescriptorToStringSecurityDescriptorW.Addr(), 5, uintptr(unsafe.Pointer(sd)), uintptr(revision), uintptr(securityInformation), uintptr(unsafe.Pointer(str)), uintptr(unsafe.Pointer(strLen)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func makeAbsoluteSD(selfRelativeSD *SECURITY_DESCRIPTOR, absoluteSD *SECURITY_DESCRIPTOR, absoluteSDSize *uint32, dacl *ACL, daclSize *uint32, sacl *ACL, saclSize *uint32, owner *SID, ownerSize *uint32, group *SID, groupSize *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall12(procMakeAbsoluteSD.Addr(), 11, uintptr(unsafe.Pointer(selfRelativeSD)), uintptr(unsafe.Pointer(absoluteSD)), uintptr(unsafe.Pointer(absoluteSDSize)), uintptr(unsafe.Pointer(dacl)), uintptr(unsafe.Pointer(daclSize)), uintptr(unsafe.Pointer(sacl)), uintptr(unsafe.Pointer(saclSize)), uintptr(unsafe.Pointer(owner)), uintptr(unsafe.Pointer(ownerSize)), uintptr(unsafe.Pointer(group)), uintptr(unsafe.Pointer(groupSize)), 0)
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func makeSelfRelativeSD(absoluteSD *SECURITY_DESCRIPTOR, selfRelativeSD *SECURITY_DESCRIPTOR, selfRelativeSDSize *uint32) (err error) {
+	r1, _, e1 := syscall.Syscall(procMakeSelfRelativeSD.Addr(), 3, uintptr(unsafe.Pointer(absoluteSD)), uintptr(unsafe.Pointer(selfRelativeSD)), uintptr(unsafe.Pointer(selfRelativeSDSize)))
+	if r1 == 0 {
+		if e1 != 0 {
+			err = errnoErr(e1)
+		} else {
+			err = syscall.EINVAL
+		}
+	}
+	return
+}
+
+func setEntriesInAcl(countExplicitEntries uint32, explicitEntries *EXPLICIT_ACCESS, oldACL *ACL, newACL **ACL) (ret error) {
+	r0, _, _ := syscall.Syscall6(procSetEntriesInAclW.Addr(), 4, uintptr(countExplicitEntries), uintptr(unsafe.Pointer(explicitEntries)), uintptr(unsafe.Pointer(oldACL)), uintptr(unsafe.Pointer(newACL)), 0, 0)
+	if r0 != 0 {
+		ret = syscall.Errno(r0)
+	}
+	return
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/LICENSE b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/LICENSE
new file mode 100644
index 000000000..e4a47e17f
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/LICENSE
@@ -0,0 +1,27 @@
+Copyright (c) 2019 The Go Authors. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/PATENTS b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/PATENTS
new file mode 100644
index 000000000..733099041
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/PATENTS
@@ -0,0 +1,22 @@
+Additional IP Rights Grant (Patents)
+
+"This implementation" means the copyrightable works distributed by
+Google as part of the Go project.
+
+Google hereby grants to You a perpetual, worldwide, non-exclusive,
+no-charge, royalty-free, irrevocable (except as stated in this section)
+patent license to make, have made, use, offer to sell, sell, import,
+transfer and otherwise run, modify and propagate the contents of this
+implementation of Go, where such license applies only to those patent
+claims, both currently owned or controlled by Google and acquired in
+the future, licensable by Google that are necessarily infringed by this
+implementation of Go.  This grant does not include claims that would be
+infringed only as a consequence of further modification of this
+implementation.  If you or your agent or exclusive licensee institute or
+order or agree to the institution of patent litigation against any
+entity (including a cross-claim or counterclaim in a lawsuit) alleging
+that this implementation of Go or any code incorporated within this
+implementation of Go constitutes direct or contributory patent
+infringement, or inducement of patent infringement, then any patent
+rights granted to you under this License for this implementation of Go
+shall terminate as of the date such litigation is filed.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/README b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/README
new file mode 100644
index 000000000..aac7867a5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/README
@@ -0,0 +1,2 @@
+This repository holds the transition packages for the new Go 1.13 error values.
+See golang.org/design/29934-error-values.
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/adaptor.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/adaptor.go
new file mode 100644
index 000000000..4317f2483
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/adaptor.go
@@ -0,0 +1,193 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package xerrors
+
+import (
+	"bytes"
+	"fmt"
+	"io"
+	"reflect"
+	"strconv"
+)
+
+// FormatError calls the FormatError method of f with an errors.Printer
+// configured according to s and verb, and writes the result to s.
+func FormatError(f Formatter, s fmt.State, verb rune) {
+	// Assuming this function is only called from the Format method, and given
+	// that FormatError takes precedence over Format, it cannot be called from
+	// any package that supports errors.Formatter. It is therefore safe to
+	// disregard that State may be a specific printer implementation and use one
+	// of our choice instead.
+
+	// limitations: does not support printing error as Go struct.
+
+	var (
+		sep    = " " // separator before next error
+		p      = &state{State: s}
+		direct = true
+	)
+
+	var err error = f
+
+	switch verb {
+	// Note that this switch must match the preference order
+	// for ordinary string printing (%#v before %+v, and so on).
+
+	case 'v':
+		if s.Flag('#') {
+			if stringer, ok := err.(fmt.GoStringer); ok {
+				io.WriteString(&p.buf, stringer.GoString())
+				goto exit
+			}
+			// proceed as if it were %v
+		} else if s.Flag('+') {
+			p.printDetail = true
+			sep = "\n  - "
+		}
+	case 's':
+	case 'q', 'x', 'X':
+		// Use an intermediate buffer in the rare cases that precision,
+		// truncation, or one of the alternative verbs (q, x, and X) are
+		// specified.
+		direct = false
+
+	default:
+		p.buf.WriteString("%!")
+		p.buf.WriteRune(verb)
+		p.buf.WriteByte('(')
+		switch {
+		case err != nil:
+			p.buf.WriteString(reflect.TypeOf(f).String())
+		default:
+			p.buf.WriteString("<nil>")
+		}
+		p.buf.WriteByte(')')
+		io.Copy(s, &p.buf)
+		return
+	}
+
+loop:
+	for {
+		switch v := err.(type) {
+		case Formatter:
+			err = v.FormatError((*printer)(p))
+		case fmt.Formatter:
+			v.Format(p, 'v')
+			break loop
+		default:
+			io.WriteString(&p.buf, v.Error())
+			break loop
+		}
+		if err == nil {
+			break
+		}
+		if p.needColon || !p.printDetail {
+			p.buf.WriteByte(':')
+			p.needColon = false
+		}
+		p.buf.WriteString(sep)
+		p.inDetail = false
+		p.needNewline = false
+	}
+
+exit:
+	width, okW := s.Width()
+	prec, okP := s.Precision()
+
+	if !direct || (okW && width > 0) || okP {
+		// Construct format string from State s.
+		format := []byte{'%'}
+		if s.Flag('-') {
+			format = append(format, '-')
+		}
+		if s.Flag('+') {
+			format = append(format, '+')
+		}
+		if s.Flag(' ') {
+			format = append(format, ' ')
+		}
+		if okW {
+			format = strconv.AppendInt(format, int64(width), 10)
+		}
+		if okP {
+			format = append(format, '.')
+			format = strconv.AppendInt(format, int64(prec), 10)
+		}
+		format = append(format, string(verb)...)
+		fmt.Fprintf(s, string(format), p.buf.String())
+	} else {
+		io.Copy(s, &p.buf)
+	}
+}
+
+var detailSep = []byte("\n    ")
+
+// state tracks error printing state. It implements fmt.State.
+type state struct {
+	fmt.State
+	buf bytes.Buffer
+
+	printDetail bool
+	inDetail    bool
+	needColon   bool
+	needNewline bool
+}
+
+func (s *state) Write(b []byte) (n int, err error) {
+	if s.printDetail {
+		if len(b) == 0 {
+			return 0, nil
+		}
+		if s.inDetail && s.needColon {
+			s.needNewline = true
+			if b[0] == '\n' {
+				b = b[1:]
+			}
+		}
+		k := 0
+		for i, c := range b {
+			if s.needNewline {
+				if s.inDetail && s.needColon {
+					s.buf.WriteByte(':')
+					s.needColon = false
+				}
+				s.buf.Write(detailSep)
+				s.needNewline = false
+			}
+			if c == '\n' {
+				s.buf.Write(b[k:i])
+				k = i + 1
+				s.needNewline = true
+			}
+		}
+		s.buf.Write(b[k:])
+		if !s.inDetail {
+			s.needColon = true
+		}
+	} else if !s.inDetail {
+		s.buf.Write(b)
+	}
+	return len(b), nil
+}
+
+// printer wraps a state to implement an xerrors.Printer.
+type printer state
+
+func (s *printer) Print(args ...interface{}) {
+	if !s.inDetail || s.printDetail {
+		fmt.Fprint((*state)(s), args...)
+	}
+}
+
+func (s *printer) Printf(format string, args ...interface{}) {
+	if !s.inDetail || s.printDetail {
+		fmt.Fprintf((*state)(s), format, args...)
+	}
+}
+
+func (s *printer) Detail() bool {
+	s.inDetail = true
+	return s.printDetail
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/codereview.cfg b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/codereview.cfg
new file mode 100644
index 000000000..3f8b14b64
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/codereview.cfg
@@ -0,0 +1 @@
+issuerepo: golang/go
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/doc.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/doc.go
new file mode 100644
index 000000000..eef99d9d5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/doc.go
@@ -0,0 +1,22 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Package xerrors implements functions to manipulate errors.
+//
+// This package is based on the Go 2 proposal for error values:
+//   https://golang.org/design/29934-error-values
+//
+// These functions were incorporated into the standard library's errors package
+// in Go 1.13:
+// - Is
+// - As
+// - Unwrap
+//
+// Also, Errorf's %w verb was incorporated into fmt.Errorf.
+//
+// Use this package to get equivalent behavior in all supported Go versions.
+//
+// No other features of this package were included in Go 1.13, and at present
+// there are no plans to include any of them.
+package xerrors // import "golang.org/x/xerrors"
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/errors.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/errors.go
new file mode 100644
index 000000000..e88d3772d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/errors.go
@@ -0,0 +1,33 @@
+// Copyright 2011 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package xerrors
+
+import "fmt"
+
+// errorString is a trivial implementation of error.
+type errorString struct {
+	s     string
+	frame Frame
+}
+
+// New returns an error that formats as the given text.
+//
+// The returned error contains a Frame set to the caller's location and
+// implements Formatter to show this information when printed with details.
+func New(text string) error {
+	return &errorString{text, Caller(1)}
+}
+
+func (e *errorString) Error() string {
+	return e.s
+}
+
+func (e *errorString) Format(s fmt.State, v rune) { FormatError(e, s, v) }
+
+func (e *errorString) FormatError(p Printer) (next error) {
+	p.Print(e.s)
+	e.frame.Format(p)
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/fmt.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/fmt.go
new file mode 100644
index 000000000..829862ddf
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/fmt.go
@@ -0,0 +1,187 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package xerrors
+
+import (
+	"fmt"
+	"strings"
+	"unicode"
+	"unicode/utf8"
+
+	"golang.org/x/xerrors/internal"
+)
+
+const percentBangString = "%!"
+
+// Errorf formats according to a format specifier and returns the string as a
+// value that satisfies error.
+//
+// The returned error includes the file and line number of the caller when
+// formatted with additional detail enabled. If the last argument is an error
+// the returned error's Format method will return it if the format string ends
+// with ": %s", ": %v", or ": %w". If the last argument is an error and the
+// format string ends with ": %w", the returned error implements an Unwrap
+// method returning it.
+//
+// If the format specifier includes a %w verb with an error operand in a
+// position other than at the end, the returned error will still implement an
+// Unwrap method returning the operand, but the error's Format method will not
+// return the wrapped error.
+//
+// It is invalid to include more than one %w verb or to supply it with an
+// operand that does not implement the error interface. The %w verb is otherwise
+// a synonym for %v.
+func Errorf(format string, a ...interface{}) error {
+	format = formatPlusW(format)
+	// Support a ": %[wsv]" suffix, which works well with xerrors.Formatter.
+	wrap := strings.HasSuffix(format, ": %w")
+	idx, format2, ok := parsePercentW(format)
+	percentWElsewhere := !wrap && idx >= 0
+	if !percentWElsewhere && (wrap || strings.HasSuffix(format, ": %s") || strings.HasSuffix(format, ": %v")) {
+		err := errorAt(a, len(a)-1)
+		if err == nil {
+			return &noWrapError{fmt.Sprintf(format, a...), nil, Caller(1)}
+		}
+		// TODO: this is not entirely correct. The error value could be
+		// printed elsewhere in format if it mixes numbered with unnumbered
+		// substitutions. With relatively small changes to doPrintf we can
+		// have it optionally ignore extra arguments and pass the argument
+		// list in its entirety.
+		msg := fmt.Sprintf(format[:len(format)-len(": %s")], a[:len(a)-1]...)
+		frame := Frame{}
+		if internal.EnableTrace {
+			frame = Caller(1)
+		}
+		if wrap {
+			return &wrapError{msg, err, frame}
+		}
+		return &noWrapError{msg, err, frame}
+	}
+	// Support %w anywhere.
+	// TODO: don't repeat the wrapped error's message when %w occurs in the middle.
+	msg := fmt.Sprintf(format2, a...)
+	if idx < 0 {
+		return &noWrapError{msg, nil, Caller(1)}
+	}
+	err := errorAt(a, idx)
+	if !ok || err == nil {
+		// Too many %ws or argument of %w is not an error. Approximate the Go
+		// 1.13 fmt.Errorf message.
+		return &noWrapError{fmt.Sprintf("%sw(%s)", percentBangString, msg), nil, Caller(1)}
+	}
+	frame := Frame{}
+	if internal.EnableTrace {
+		frame = Caller(1)
+	}
+	return &wrapError{msg, err, frame}
+}
+
+func errorAt(args []interface{}, i int) error {
+	if i < 0 || i >= len(args) {
+		return nil
+	}
+	err, ok := args[i].(error)
+	if !ok {
+		return nil
+	}
+	return err
+}
+
+// formatPlusW is used to avoid the vet check that will barf at %w.
+func formatPlusW(s string) string {
+	return s
+}
+
+// Return the index of the only %w in format, or -1 if none.
+// Also return a rewritten format string with %w replaced by %v, and
+// false if there is more than one %w.
+// TODO: handle "%[N]w".
+func parsePercentW(format string) (idx int, newFormat string, ok bool) {
+	// Loosely copied from golang.org/x/tools/go/analysis/passes/printf/printf.go.
+	idx = -1
+	ok = true
+	n := 0
+	sz := 0
+	var isW bool
+	for i := 0; i < len(format); i += sz {
+		if format[i] != '%' {
+			sz = 1
+			continue
+		}
+		// "%%" is not a format directive.
+		if i+1 < len(format) && format[i+1] == '%' {
+			sz = 2
+			continue
+		}
+		sz, isW = parsePrintfVerb(format[i:])
+		if isW {
+			if idx >= 0 {
+				ok = false
+			} else {
+				idx = n
+			}
+			// "Replace" the last character, the 'w', with a 'v'.
+			p := i + sz - 1
+			format = format[:p] + "v" + format[p+1:]
+		}
+		n++
+	}
+	return idx, format, ok
+}
+
+// Parse the printf verb starting with a % at s[0].
+// Return how many bytes it occupies and whether the verb is 'w'.
+func parsePrintfVerb(s string) (int, bool) {
+	// Assume only that the directive is a sequence of non-letters followed by a single letter.
+	sz := 0
+	var r rune
+	for i := 1; i < len(s); i += sz {
+		r, sz = utf8.DecodeRuneInString(s[i:])
+		if unicode.IsLetter(r) {
+			return i + sz, r == 'w'
+		}
+	}
+	return len(s), false
+}
+
+type noWrapError struct {
+	msg   string
+	err   error
+	frame Frame
+}
+
+func (e *noWrapError) Error() string {
+	return fmt.Sprint(e)
+}
+
+func (e *noWrapError) Format(s fmt.State, v rune) { FormatError(e, s, v) }
+
+func (e *noWrapError) FormatError(p Printer) (next error) {
+	p.Print(e.msg)
+	e.frame.Format(p)
+	return e.err
+}
+
+type wrapError struct {
+	msg   string
+	err   error
+	frame Frame
+}
+
+func (e *wrapError) Error() string {
+	return fmt.Sprint(e)
+}
+
+func (e *wrapError) Format(s fmt.State, v rune) { FormatError(e, s, v) }
+
+func (e *wrapError) FormatError(p Printer) (next error) {
+	p.Print(e.msg)
+	e.frame.Format(p)
+	return e.err
+}
+
+func (e *wrapError) Unwrap() error {
+	return e.err
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/format.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/format.go
new file mode 100644
index 000000000..1bc9c26b9
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/format.go
@@ -0,0 +1,34 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package xerrors
+
+// A Formatter formats error messages.
+type Formatter interface {
+	error
+
+	// FormatError prints the receiver's first error and returns the next error in
+	// the error chain, if any.
+	FormatError(p Printer) (next error)
+}
+
+// A Printer formats error messages.
+//
+// The most common implementation of Printer is the one provided by package fmt
+// during Printf (as of Go 1.13). Localization packages such as golang.org/x/text/message
+// typically provide their own implementations.
+type Printer interface {
+	// Print appends args to the message output.
+	Print(args ...interface{})
+
+	// Printf writes a formatted string.
+	Printf(format string, args ...interface{})
+
+	// Detail reports whether error detail is requested.
+	// After the first call to Detail, all text written to the Printer
+	// is formatted as additional detail, or ignored when
+	// detail has not been requested.
+	// If Detail returns false, the caller can avoid printing the detail at all.
+	Detail() bool
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/frame.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/frame.go
new file mode 100644
index 000000000..0de628ec5
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/frame.go
@@ -0,0 +1,56 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package xerrors
+
+import (
+	"runtime"
+)
+
+// A Frame contains part of a call stack.
+type Frame struct {
+	// Make room for three PCs: the one we were asked for, what it called,
+	// and possibly a PC for skipPleaseUseCallersFrames. See:
+	// https://go.googlesource.com/go/+/032678e0fb/src/runtime/extern.go#169
+	frames [3]uintptr
+}
+
+// Caller returns a Frame that describes a frame on the caller's stack.
+// The argument skip is the number of frames to skip over.
+// Caller(0) returns the frame for the caller of Caller.
+func Caller(skip int) Frame {
+	var s Frame
+	runtime.Callers(skip+1, s.frames[:])
+	return s
+}
+
+// location reports the file, line, and function of a frame.
+//
+// The returned function may be "" even if file and line are not.
+func (f Frame) location() (function, file string, line int) {
+	frames := runtime.CallersFrames(f.frames[:])
+	if _, ok := frames.Next(); !ok {
+		return "", "", 0
+	}
+	fr, ok := frames.Next()
+	if !ok {
+		return "", "", 0
+	}
+	return fr.Function, fr.File, fr.Line
+}
+
+// Format prints the stack as error detail.
+// It should be called from an error's Format implementation
+// after printing any other error detail.
+func (f Frame) Format(p Printer) {
+	if p.Detail() {
+		function, file, line := f.location()
+		if function != "" {
+			p.Printf("%s\n    ", function)
+		}
+		if file != "" {
+			p.Printf("%s:%d\n", file, line)
+		}
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/go.mod b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/go.mod
new file mode 100644
index 000000000..870d4f612
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/go.mod
@@ -0,0 +1,3 @@
+module golang.org/x/xerrors
+
+go 1.11
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/internal/internal.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/internal/internal.go
new file mode 100644
index 000000000..89f4eca5d
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/internal/internal.go
@@ -0,0 +1,8 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package internal
+
+// EnableTrace indicates whether stack information should be recorded in errors.
+var EnableTrace = true
diff --git a/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/wrap.go b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/wrap.go
new file mode 100644
index 000000000..9a3b51037
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/golang.org/x/xerrors/wrap.go
@@ -0,0 +1,106 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package xerrors
+
+import (
+	"reflect"
+)
+
+// A Wrapper provides context around another error.
+type Wrapper interface {
+	// Unwrap returns the next error in the error chain.
+	// If there is no next error, Unwrap returns nil.
+	Unwrap() error
+}
+
+// Opaque returns an error with the same error formatting as err
+// but that does not match err and cannot be unwrapped.
+func Opaque(err error) error {
+	return noWrapper{err}
+}
+
+type noWrapper struct {
+	error
+}
+
+func (e noWrapper) FormatError(p Printer) (next error) {
+	if f, ok := e.error.(Formatter); ok {
+		return f.FormatError(p)
+	}
+	p.Print(e.error)
+	return nil
+}
+
+// Unwrap returns the result of calling the Unwrap method on err, if err implements
+// Unwrap. Otherwise, Unwrap returns nil.
+func Unwrap(err error) error {
+	u, ok := err.(Wrapper)
+	if !ok {
+		return nil
+	}
+	return u.Unwrap()
+}
+
+// Is reports whether any error in err's chain matches target.
+//
+// An error is considered to match a target if it is equal to that target or if
+// it implements a method Is(error) bool such that Is(target) returns true.
+func Is(err, target error) bool {
+	if target == nil {
+		return err == target
+	}
+
+	isComparable := reflect.TypeOf(target).Comparable()
+	for {
+		if isComparable && err == target {
+			return true
+		}
+		if x, ok := err.(interface{ Is(error) bool }); ok && x.Is(target) {
+			return true
+		}
+		// TODO: consider supporing target.Is(err). This would allow
+		// user-definable predicates, but also may allow for coping with sloppy
+		// APIs, thereby making it easier to get away with them.
+		if err = Unwrap(err); err == nil {
+			return false
+		}
+	}
+}
+
+// As finds the first error in err's chain that matches the type to which target
+// points, and if so, sets the target to its value and returns true. An error
+// matches a type if it is assignable to the target type, or if it has a method
+// As(interface{}) bool such that As(target) returns true. As will panic if target
+// is not a non-nil pointer to a type which implements error or is of interface type.
+//
+// The As method should set the target to its value and return true if err
+// matches the type to which target points.
+func As(err error, target interface{}) bool {
+	if target == nil {
+		panic("errors: target cannot be nil")
+	}
+	val := reflect.ValueOf(target)
+	typ := val.Type()
+	if typ.Kind() != reflect.Ptr || val.IsNil() {
+		panic("errors: target must be a non-nil pointer")
+	}
+	if e := typ.Elem(); e.Kind() != reflect.Interface && !e.Implements(errorType) {
+		panic("errors: *target must be interface or implement error")
+	}
+	targetType := typ.Elem()
+	for err != nil {
+		if reflect.TypeOf(err).AssignableTo(targetType) {
+			val.Elem().Set(reflect.ValueOf(err))
+			return true
+		}
+		if x, ok := err.(interface{ As(interface{}) bool }); ok && x.As(target) {
+			return true
+		}
+		err = Unwrap(err)
+	}
+	return false
+}
+
+var errorType = reflect.TypeOf((*error)(nil)).Elem()
diff --git a/trunk/3rdparty/srs-bench/vendor/modules.txt b/trunk/3rdparty/srs-bench/vendor/modules.txt
new file mode 100644
index 000000000..cfc1e4b26
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/vendor/modules.txt
@@ -0,0 +1,90 @@
+# github.com/google/uuid v1.1.2
+github.com/google/uuid
+# github.com/ossrs/go-oryx-lib v0.0.8
+## explicit
+github.com/ossrs/go-oryx-lib/errors
+github.com/ossrs/go-oryx-lib/logger
+# github.com/pion/datachannel v1.4.21
+github.com/pion/datachannel
+# github.com/pion/dtls/v2 v2.0.4
+github.com/pion/dtls/v2
+github.com/pion/dtls/v2/internal/closer
+github.com/pion/dtls/v2/internal/net/connctx
+github.com/pion/dtls/v2/pkg/crypto/ccm
+github.com/pion/dtls/v2/pkg/crypto/fingerprint
+# github.com/pion/ice/v2 v2.0.14
+github.com/pion/ice/v2
+# github.com/pion/interceptor v0.0.9
+## explicit
+github.com/pion/interceptor
+github.com/pion/interceptor/pkg/nack
+# github.com/pion/logging v0.2.2
+github.com/pion/logging
+# github.com/pion/mdns v0.0.4
+github.com/pion/mdns
+# github.com/pion/randutil v0.1.0
+github.com/pion/randutil
+# github.com/pion/rtcp v1.2.6
+## explicit
+github.com/pion/rtcp
+# github.com/pion/rtp v1.6.2
+## explicit
+github.com/pion/rtp
+github.com/pion/rtp/codecs
+# github.com/pion/sctp v1.7.11
+github.com/pion/sctp
+# github.com/pion/sdp/v3 v3.0.4
+## explicit
+github.com/pion/sdp/v3
+# github.com/pion/srtp/v2 v2.0.1
+github.com/pion/srtp/v2
+# github.com/pion/stun v0.3.5
+github.com/pion/stun
+github.com/pion/stun/internal/hmac
+# github.com/pion/transport v0.12.2
+github.com/pion/transport/deadline
+github.com/pion/transport/packetio
+github.com/pion/transport/replaydetector
+github.com/pion/transport/vnet
+# github.com/pion/turn/v2 v2.0.5
+github.com/pion/turn/v2
+github.com/pion/turn/v2/internal/allocation
+github.com/pion/turn/v2/internal/client
+github.com/pion/turn/v2/internal/ipnet
+github.com/pion/turn/v2/internal/proto
+github.com/pion/turn/v2/internal/server
+# github.com/pion/udp v0.1.0
+github.com/pion/udp
+# github.com/pion/webrtc/v3 v3.0.4
+## explicit
+github.com/pion/webrtc/v3
+github.com/pion/webrtc/v3/internal/mux
+github.com/pion/webrtc/v3/internal/util
+github.com/pion/webrtc/v3/pkg/media
+github.com/pion/webrtc/v3/pkg/media/h264reader
+github.com/pion/webrtc/v3/pkg/media/h264writer
+github.com/pion/webrtc/v3/pkg/media/ivfwriter
+github.com/pion/webrtc/v3/pkg/media/oggreader
+github.com/pion/webrtc/v3/pkg/media/oggwriter
+github.com/pion/webrtc/v3/pkg/rtcerr
+# github.com/pkg/errors v0.9.1
+github.com/pkg/errors
+# golang.org/x/crypto v0.0.0-20201016220609-9e8e0b390897
+golang.org/x/crypto/cryptobyte
+golang.org/x/crypto/cryptobyte/asn1
+golang.org/x/crypto/curve25519
+# golang.org/x/net v0.0.0-20201201195509-5d6afe98e0b7
+golang.org/x/net/bpf
+golang.org/x/net/dns/dnsmessage
+golang.org/x/net/internal/iana
+golang.org/x/net/internal/socket
+golang.org/x/net/internal/socks
+golang.org/x/net/ipv4
+golang.org/x/net/proxy
+# golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f
+golang.org/x/sys/internal/unsafeheader
+golang.org/x/sys/unix
+golang.org/x/sys/windows
+# golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1
+golang.org/x/xerrors
+golang.org/x/xerrors/internal

From a29d0a6a24b1c202f46fde0742e377471271cf15 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Thu, 4 Mar 2021 13:29:32 +0800
Subject: [PATCH 101/102] Add CI for CentOS7, C++98(ANSI) and no FFmpeg-fit

---
 .circleci/config.yml | 29 +++++++++++++++++++----------
 1 file changed, 19 insertions(+), 10 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 97faf3127..9e8de80ba 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -1,6 +1,6 @@
 version: 2
 jobs:
-  build-centos7-baseline:
+  build-c7-baseline:
     docker:
       - image: ossrs/srs:dev
     steps:
@@ -8,7 +8,7 @@ jobs:
       - run: |
           echo "Build and run SRS baseline" &&
           cd trunk && ./configure && make
-  build-centos7-noasm:
+  build-c7-noasm:
     docker:
       - image: ossrs/srs:dev
     steps:
@@ -16,7 +16,7 @@ jobs:
       - run: |
           echo "Build and run SRS without NASM or SRTP-NASM" &&
           cd trunk && ./configure --nasm=off --srtp-nasm=off && make
-  build-centos7-gb28181:
+  build-c7-gb28181:
     docker:
       - image: ossrs/srs:dev
     steps:
@@ -24,7 +24,7 @@ jobs:
       - run: |
           echo "Build and run SRS with GB28181" &&
           cd trunk && ./configure --gb28181=on && make
-  build-centos8-baseline:
+  build-c8-baseline:
     docker:
       - image: ossrs/srs:dev8
     steps:
@@ -32,7 +32,7 @@ jobs:
       - run: |
           echo "Build and run SRS for CentOS8" &&
           cd trunk && ./configure && make
-  build-ubuntu20-baseline:
+  build-u20-baseline:
     docker:
       - image: ossrs/srs:dev8
     steps:
@@ -59,14 +59,23 @@ jobs:
           cd trunk && ./configure && make && ./objs/srs -c conf/regression-test.conf &&
           echo "Run srs-bench regression test" &&
           cd 3rdparty/srs-bench && make && ./objs/srs_test -test.v
+  build-c7-ansi-noff:
+    docker:
+      - image: ossrs/srs:dev
+    steps:
+      - checkout
+      - run: |
+          echo "Build and run SRS C++98(ANSI), no FFmpeg-fit" &&
+          cd trunk && ./configure --cxx11=off --cxx14=off --ffmpeg-fit=off && make
 workflows:
   version: 2
   build_and_test:
     jobs:
-      - build-centos7-baseline
+      - build-c7-baseline
       - run-utest
       - run-regression-test
-      - build-centos7-noasm
-      - build-centos7-gb28181
-      - build-centos8-baseline
-      - build-ubuntu20-baseline
+      - build-c7-noasm
+      - build-c7-gb28181
+      - build-c8-baseline
+      - build-u20-baseline
+      - build-c7-ansi-noff

From bb3bd1705edef58682de0c9774dab6b5c7f76a76 Mon Sep 17 00:00:00 2001
From: winlin <winlin@vip.126.com>
Date: Thu, 4 Mar 2021 14:03:01 +0800
Subject: [PATCH 102/102] Refine the regression test tool, add missing files

---
 trunk/3rdparty/srs-bench/Makefile         |   2 +-
 trunk/3rdparty/srs-bench/README.md        |   4 +-
 trunk/3rdparty/srs-bench/srs/player.go    | 262 +++++++++++++
 trunk/3rdparty/srs-bench/srs/publisher.go | 429 +++++++++++++++++++++
 trunk/3rdparty/srs-bench/srs/rtc_test.go  | 449 ++++++++++++++++++++++
 trunk/3rdparty/srs-bench/srs/stat.go      |  47 +++
 trunk/3rdparty/srs-bench/srs/util.go      | 142 +++++++
 trunk/conf/regression-test.conf           |   1 +
 8 files changed, 1333 insertions(+), 3 deletions(-)
 create mode 100644 trunk/3rdparty/srs-bench/srs/player.go
 create mode 100644 trunk/3rdparty/srs-bench/srs/publisher.go
 create mode 100644 trunk/3rdparty/srs-bench/srs/rtc_test.go
 create mode 100644 trunk/3rdparty/srs-bench/srs/stat.go
 create mode 100644 trunk/3rdparty/srs-bench/srs/util.go

diff --git a/trunk/3rdparty/srs-bench/Makefile b/trunk/3rdparty/srs-bench/Makefile
index ea7341c84..f4ee3f9d0 100644
--- a/trunk/3rdparty/srs-bench/Makefile
+++ b/trunk/3rdparty/srs-bench/Makefile
@@ -17,7 +17,7 @@ bench: ./objs/srs_bench
 test: ./objs/srs_test
 
 ./objs/srs_test: .format.txt *.go rtc/*.go srs/*.go Makefile
-	go test ./srs -c -o ./objs/srs_test
+	go test ./srs -mod=vendor -c -o ./objs/srs_test
 
 help:
 	@echo "Usage: make [bench|test]"
diff --git a/trunk/3rdparty/srs-bench/README.md b/trunk/3rdparty/srs-bench/README.md
index c8ccb3cb1..061976383 100644
--- a/trunk/3rdparty/srs-bench/README.md
+++ b/trunk/3rdparty/srs-bench/README.md
@@ -113,7 +113,7 @@ fi
 然后运行回归测试用例，如果只跑一次，可以直接运行：
 
 ```bash
-go test ./srs -v
+go test ./srs -mod=vendor -v
 ```
 
 也可以用make编译出重复使用的二进制：
@@ -125,7 +125,7 @@ make test && ./objs/srs_test -test.v
 可以给回归测试传参数，这样可以测试不同的序列，比如：
 
 ```bash
-go test ./srs -v -srs-server=127.0.0.1
+go test ./srs -mod=vendor -v -srs-server=127.0.0.1
 # Or
 make test && ./objs/srs_test -test.v -srs-server=127.0.0.1
 ```
diff --git a/trunk/3rdparty/srs-bench/srs/player.go b/trunk/3rdparty/srs-bench/srs/player.go
new file mode 100644
index 000000000..8977248e6
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/srs/player.go
@@ -0,0 +1,262 @@
+package srs
+
+import (
+	"context"
+	"fmt"
+	"github.com/ossrs/go-oryx-lib/errors"
+	"github.com/ossrs/go-oryx-lib/logger"
+	"github.com/pion/interceptor"
+	"github.com/pion/rtcp"
+	"github.com/pion/sdp/v3"
+	"github.com/pion/webrtc/v3"
+	"github.com/pion/webrtc/v3/pkg/media"
+	"github.com/pion/webrtc/v3/pkg/media/h264writer"
+	"github.com/pion/webrtc/v3/pkg/media/ivfwriter"
+	"github.com/pion/webrtc/v3/pkg/media/oggwriter"
+	"strings"
+	"sync"
+	"time"
+)
+
+// @see https://github.com/pion/webrtc/blob/master/examples/save-to-disk/main.go
+func StartPlay(ctx context.Context, r, dumpAudio, dumpVideo string, enableAudioLevel, enableTWCC bool, pli int) error {
+	ctx = logger.WithContext(ctx)
+
+	logger.Tf(ctx, "Start play url=%v, audio=%v, video=%v, audio-level=%v, twcc=%v",
+		r, dumpAudio, dumpVideo, enableAudioLevel, enableTWCC)
+
+	// For audio-level.
+	webrtcNewPeerConnection := func(configuration webrtc.Configuration) (*webrtc.PeerConnection, error) {
+		m := &webrtc.MediaEngine{}
+		if err := m.RegisterDefaultCodecs(); err != nil {
+			return nil, err
+		}
+
+		for _, extension := range []string{sdp.SDESMidURI, sdp.SDESRTPStreamIDURI, sdp.TransportCCURI} {
+			if extension == sdp.TransportCCURI && !enableTWCC {
+				continue
+			}
+			if err := m.RegisterHeaderExtension(webrtc.RTPHeaderExtensionCapability{URI: extension}, webrtc.RTPCodecTypeVideo); err != nil {
+				return nil, err
+			}
+		}
+
+		// https://github.com/pion/ion/issues/130
+		// https://github.com/pion/ion-sfu/pull/373/files#diff-6f42c5ac6f8192dd03e5a17e9d109e90cb76b1a4a7973be6ce44a89ffd1b5d18R73
+		for _, extension := range []string{sdp.SDESMidURI, sdp.SDESRTPStreamIDURI, sdp.AudioLevelURI} {
+			if extension == sdp.AudioLevelURI && !enableAudioLevel {
+				continue
+			}
+			if err := m.RegisterHeaderExtension(webrtc.RTPHeaderExtensionCapability{URI: extension}, webrtc.RTPCodecTypeAudio); err != nil {
+				return nil, err
+			}
+		}
+
+		i := &interceptor.Registry{}
+		if err := webrtc.RegisterDefaultInterceptors(m, i); err != nil {
+			return nil, err
+		}
+
+		api := webrtc.NewAPI(webrtc.WithMediaEngine(m), webrtc.WithInterceptorRegistry(i))
+		return api.NewPeerConnection(configuration)
+	}
+
+	pc, err := webrtcNewPeerConnection(webrtc.Configuration{})
+	if err != nil {
+		return errors.Wrapf(err, "Create PC")
+	}
+	defer pc.Close()
+
+	pc.AddTransceiverFromKind(webrtc.RTPCodecTypeAudio, webrtc.RTPTransceiverInit{
+		Direction: webrtc.RTPTransceiverDirectionRecvonly,
+	})
+	pc.AddTransceiverFromKind(webrtc.RTPCodecTypeVideo, webrtc.RTPTransceiverInit{
+		Direction: webrtc.RTPTransceiverDirectionRecvonly,
+	})
+
+	offer, err := pc.CreateOffer(nil)
+	if err != nil {
+		return errors.Wrapf(err, "Create Offer")
+	}
+
+	if err := pc.SetLocalDescription(offer); err != nil {
+		return errors.Wrapf(err, "Set offer %v", offer)
+	}
+
+	answer, err := apiRtcRequest(ctx, "/rtc/v1/play", r, offer.SDP)
+	if err != nil {
+		return errors.Wrapf(err, "Api request offer=%v", offer.SDP)
+	}
+
+	if err := pc.SetRemoteDescription(webrtc.SessionDescription{
+		Type: webrtc.SDPTypeAnswer, SDP: answer,
+	}); err != nil {
+		return errors.Wrapf(err, "Set answer %v", answer)
+	}
+
+	var da media.Writer
+	var dv_vp8 media.Writer
+	var dv_h264 media.Writer
+	defer func() {
+		if da != nil {
+			da.Close()
+		}
+		if dv_vp8 != nil {
+			dv_vp8.Close()
+		}
+		if dv_h264 != nil {
+			dv_h264.Close()
+		}
+	}()
+
+	handleTrack := func(ctx context.Context, track *webrtc.TrackRemote, receiver *webrtc.RTPReceiver) error {
+		// Send a PLI on an interval so that the publisher is pushing a keyframe
+		go func() {
+			if track.Kind() == webrtc.RTPCodecTypeAudio {
+				return
+			}
+
+			if pli <= 0 {
+				return
+			}
+
+			for {
+				select {
+				case <-ctx.Done():
+					return
+				case <-time.After(time.Duration(pli) * time.Second):
+					_ = pc.WriteRTCP([]rtcp.Packet{&rtcp.PictureLossIndication{
+						MediaSSRC: uint32(track.SSRC()),
+					}})
+				}
+			}
+		}()
+
+		codec := track.Codec()
+
+		trackDesc := fmt.Sprintf("channels=%v", codec.Channels)
+		if track.Kind() == webrtc.RTPCodecTypeVideo {
+			trackDesc = fmt.Sprintf("fmtp=%v", codec.SDPFmtpLine)
+		}
+		if headers := receiver.GetParameters().HeaderExtensions; len(headers) > 0 {
+			trackDesc = fmt.Sprintf("%v, header=%v", trackDesc, headers)
+		}
+		logger.Tf(ctx, "Got track %v, pt=%v, tbn=%v, %v",
+			codec.MimeType, codec.PayloadType, codec.ClockRate, trackDesc)
+
+		if codec.MimeType == "audio/opus" {
+			if da == nil && dumpAudio != "" {
+				if da, err = oggwriter.New(dumpAudio, codec.ClockRate, codec.Channels); err != nil {
+					return errors.Wrapf(err, "New audio dumper")
+				}
+				logger.Tf(ctx, "Open ogg writer file=%v, tbn=%v, channels=%v",
+					dumpAudio, codec.ClockRate, codec.Channels)
+			}
+
+			if err = writeTrackToDisk(ctx, da, track); err != nil {
+				return errors.Wrapf(err, "Write audio disk")
+			}
+		} else if codec.MimeType == "video/VP8" {
+			if dumpVideo != "" && !strings.HasSuffix(dumpVideo, ".ivf") {
+				return errors.Errorf("%v should be .ivf for VP8", dumpVideo)
+			}
+
+			if dv_vp8 == nil && dumpVideo != "" {
+				if dv_vp8, err = ivfwriter.New(dumpVideo); err != nil {
+					return errors.Wrapf(err, "New video dumper")
+				}
+				logger.Tf(ctx, "Open ivf writer file=%v", dumpVideo)
+			}
+
+			if err = writeTrackToDisk(ctx, dv_vp8, track); err != nil {
+				return errors.Wrapf(err, "Write video disk")
+			}
+		} else if codec.MimeType == "video/H264" {
+			if dumpVideo != "" && !strings.HasSuffix(dumpVideo, ".h264") {
+				return errors.Errorf("%v should be .h264 for H264", dumpVideo)
+			}
+
+			if dv_h264 == nil && dumpVideo != "" {
+				if dv_h264, err = h264writer.New(dumpVideo); err != nil {
+					return errors.Wrapf(err, "New video dumper")
+				}
+				logger.Tf(ctx, "Open h264 writer file=%v", dumpVideo)
+			}
+
+			if err = writeTrackToDisk(ctx, dv_h264, track); err != nil {
+				return errors.Wrapf(err, "Write video disk")
+			}
+		} else {
+			logger.Wf(ctx, "Ignore track %v pt=%v", codec.MimeType, codec.PayloadType)
+		}
+		return nil
+	}
+
+	ctx, cancel := context.WithCancel(ctx)
+	pc.OnTrack(func(track *webrtc.TrackRemote, receiver *webrtc.RTPReceiver) {
+		err = handleTrack(ctx, track, receiver)
+		if err != nil {
+			codec := track.Codec()
+			err = errors.Wrapf(err, "Handle  track %v, pt=%v", codec.MimeType, codec.PayloadType)
+			cancel()
+		}
+	})
+
+	pc.OnICEConnectionStateChange(func(state webrtc.ICEConnectionState) {
+		logger.If(ctx, "ICE state %v", state)
+
+		if state == webrtc.ICEConnectionStateFailed || state == webrtc.ICEConnectionStateClosed {
+			if ctx.Err() != nil {
+				return
+			}
+
+			logger.Wf(ctx, "Close for ICE state %v", state)
+			cancel()
+		}
+	})
+
+	// Wait for event from context or tracks.
+	var wg sync.WaitGroup
+
+	wg.Add(1)
+	go func() {
+		defer wg.Done()
+
+		for {
+			select {
+			case <-ctx.Done():
+				return
+			case <-time.After(5 * time.Second):
+				StatRTC.PeerConnection = pc.GetStats()
+			}
+		}
+	}()
+
+	wg.Wait()
+	return err
+}
+
+func writeTrackToDisk(ctx context.Context, w media.Writer, track *webrtc.TrackRemote) error {
+	for ctx.Err() == nil {
+		pkt, _, err := track.ReadRTP()
+		if err != nil {
+			if ctx.Err() != nil {
+				return nil
+			}
+			return errors.Wrapf(err, "Read RTP")
+		}
+
+		if w == nil {
+			continue
+		}
+
+		if err := w.WriteRTP(pkt); err != nil {
+			if len(pkt.Payload) <= 2 {
+				continue
+			}
+			logger.Wf(ctx, "Ignore write RTP %vB err %+v", len(pkt.Payload), err)
+		}
+	}
+
+	return ctx.Err()
+}
diff --git a/trunk/3rdparty/srs-bench/srs/publisher.go b/trunk/3rdparty/srs-bench/srs/publisher.go
new file mode 100644
index 000000000..172ff9e21
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/srs/publisher.go
@@ -0,0 +1,429 @@
+package srs
+
+import (
+	"context"
+	"github.com/ossrs/go-oryx-lib/errors"
+	"github.com/ossrs/go-oryx-lib/logger"
+	"github.com/ossrs/srs-bench/rtc"
+	"github.com/pion/interceptor"
+	"github.com/pion/rtp"
+	"github.com/pion/sdp/v3"
+	"github.com/pion/webrtc/v3"
+	"github.com/pion/webrtc/v3/pkg/media"
+	"github.com/pion/webrtc/v3/pkg/media/h264reader"
+	"github.com/pion/webrtc/v3/pkg/media/oggreader"
+	"io"
+	"os"
+	"strings"
+	"sync"
+	"time"
+)
+
+// @see https://github.com/pion/webrtc/blob/master/examples/play-from-disk/main.go
+func StartPublish(ctx context.Context, r, sourceAudio, sourceVideo string, fps int, enableAudioLevel, enableTWCC bool) error {
+	ctx = logger.WithContext(ctx)
+
+	logger.Tf(ctx, "Start publish url=%v, audio=%v, video=%v, fps=%v, audio-level=%v, twcc=%v",
+		r, sourceAudio, sourceVideo, fps, enableAudioLevel, enableTWCC)
+
+	// For audio-level.
+	webrtcNewPeerConnection := func(configuration webrtc.Configuration) (*webrtc.PeerConnection, error) {
+		m := &webrtc.MediaEngine{}
+		if err := m.RegisterDefaultCodecs(); err != nil {
+			return nil, err
+		}
+
+		for _, extension := range []string{sdp.SDESMidURI, sdp.SDESRTPStreamIDURI, sdp.TransportCCURI} {
+			if extension == sdp.TransportCCURI && !enableTWCC {
+				continue
+			}
+			if err := m.RegisterHeaderExtension(webrtc.RTPHeaderExtensionCapability{URI: extension}, webrtc.RTPCodecTypeVideo); err != nil {
+				return nil, err
+			}
+		}
+
+		// https://github.com/pion/ion/issues/130
+		// https://github.com/pion/ion-sfu/pull/373/files#diff-6f42c5ac6f8192dd03e5a17e9d109e90cb76b1a4a7973be6ce44a89ffd1b5d18R73
+		for _, extension := range []string{sdp.SDESMidURI, sdp.SDESRTPStreamIDURI, sdp.AudioLevelURI} {
+			if extension == sdp.AudioLevelURI && !enableAudioLevel {
+				continue
+			}
+			if err := m.RegisterHeaderExtension(webrtc.RTPHeaderExtensionCapability{URI: extension}, webrtc.RTPCodecTypeAudio); err != nil {
+				return nil, err
+			}
+		}
+
+		i := &interceptor.Registry{}
+		if err := webrtc.RegisterDefaultInterceptors(m, i); err != nil {
+			return nil, err
+		}
+
+		api := webrtc.NewAPI(webrtc.WithMediaEngine(m), webrtc.WithInterceptorRegistry(i))
+		return api.NewPeerConnection(configuration)
+	}
+
+	pc, err := webrtcNewPeerConnection(webrtc.Configuration{})
+	if err != nil {
+		return errors.Wrapf(err, "Create PC")
+	}
+	defer pc.Close()
+
+	var sVideoTrack *rtc.TrackLocalStaticSample
+	var sVideoSender *webrtc.RTPSender
+	if sourceVideo != "" {
+		mimeType, trackID := "video/H264", "video"
+		if strings.HasSuffix(sourceVideo, ".ivf") {
+			mimeType = "video/VP8"
+		}
+
+		sVideoTrack, err = rtc.NewTrackLocalStaticSample(
+			webrtc.RTPCodecCapability{MimeType: mimeType, ClockRate: 90000}, trackID, "pion",
+		)
+		if err != nil {
+			return errors.Wrapf(err, "Create video track")
+		}
+
+		sVideoSender, err = pc.AddTrack(sVideoTrack)
+		if err != nil {
+			return errors.Wrapf(err, "Add video track")
+		}
+		sVideoSender.Stop()
+	}
+
+	var sAudioTrack *rtc.TrackLocalStaticSample
+	var sAudioSender *webrtc.RTPSender
+	if sourceAudio != "" {
+		mimeType, trackID := "audio/opus", "audio"
+		sAudioTrack, err = rtc.NewTrackLocalStaticSample(
+			webrtc.RTPCodecCapability{MimeType: mimeType, ClockRate: 48000, Channels: 2}, trackID, "pion",
+		)
+		if err != nil {
+			return errors.Wrapf(err, "Create audio track")
+		}
+
+		sAudioSender, err = pc.AddTrack(sAudioTrack)
+		if err != nil {
+			return errors.Wrapf(err, "Add audio track")
+		}
+		defer sAudioSender.Stop()
+	}
+
+	offer, err := pc.CreateOffer(nil)
+	if err != nil {
+		return errors.Wrapf(err, "Create Offer")
+	}
+
+	if err := pc.SetLocalDescription(offer); err != nil {
+		return errors.Wrapf(err, "Set offer %v", offer)
+	}
+
+	answer, err := apiRtcRequest(ctx, "/rtc/v1/publish", r, offer.SDP)
+	if err != nil {
+		return errors.Wrapf(err, "Api request offer=%v", offer.SDP)
+	}
+
+	if err := pc.SetRemoteDescription(webrtc.SessionDescription{
+		Type: webrtc.SDPTypeAnswer, SDP: answer,
+	}); err != nil {
+		return errors.Wrapf(err, "Set answer %v", answer)
+	}
+
+	logger.Tf(ctx, "State signaling=%v, ice=%v, conn=%v", pc.SignalingState(), pc.ICEConnectionState(), pc.ConnectionState())
+
+	// ICE state management.
+	pc.OnICEConnectionStateChange(func(state webrtc.ICEConnectionState) {
+		logger.Tf(ctx, "ICE state %v", state)
+	})
+
+	pc.OnSignalingStateChange(func(state webrtc.SignalingState) {
+		logger.Tf(ctx, "Signaling state %v", state)
+	})
+
+	sAudioSender.Transport().OnStateChange(func(state webrtc.DTLSTransportState) {
+		logger.Tf(ctx, "DTLS state %v", state)
+	})
+
+	ctx, cancel := context.WithCancel(ctx)
+	pcDone, pcDoneCancel := context.WithCancel(context.Background())
+	pc.OnConnectionStateChange(func(state webrtc.PeerConnectionState) {
+		logger.Tf(ctx, "PC state %v", state)
+
+		if state == webrtc.PeerConnectionStateConnected {
+			pcDoneCancel()
+		}
+
+		if state == webrtc.PeerConnectionStateFailed || state == webrtc.PeerConnectionStateClosed {
+			if ctx.Err() != nil {
+				return
+			}
+
+			logger.Wf(ctx, "Close for PC state %v", state)
+			cancel()
+		}
+	})
+
+	// Wait for event from context or tracks.
+	var wg sync.WaitGroup
+
+	wg.Add(1)
+	go func() {
+		defer wg.Done()
+
+		if sAudioSender == nil {
+			return
+		}
+
+		select {
+		case <-ctx.Done():
+		case <-pcDone.Done():
+			logger.Tf(ctx, "PC(ICE+DTLS+SRTP) done, start read audio packets")
+		}
+
+		buf := make([]byte, 1500)
+		for ctx.Err() == nil {
+			if _, _, err := sAudioSender.Read(buf); err != nil {
+				return
+			}
+		}
+	}()
+
+	wg.Add(1)
+	go func() {
+		defer wg.Done()
+
+		if sAudioTrack == nil {
+			return
+		}
+
+		select {
+		case <-ctx.Done():
+		case <-pcDone.Done():
+			logger.Tf(ctx, "PC(ICE+DTLS+SRTP) done, start ingest audio %v", sourceAudio)
+		}
+
+		for ctx.Err() == nil {
+			if err := readAudioTrackFromDisk(ctx, sourceAudio, sAudioSender, sAudioTrack); err != nil {
+				if errors.Cause(err) == io.EOF {
+					logger.Tf(ctx, "EOF, restart ingest audio %v", sourceAudio)
+					continue
+				}
+				logger.Wf(ctx, "Ignore audio err %+v", err)
+			}
+		}
+	}()
+
+	wg.Add(1)
+	go func() {
+		defer wg.Done()
+
+		if sVideoSender == nil {
+			return
+		}
+
+		select {
+		case <-ctx.Done():
+		case <-pcDone.Done():
+			logger.Tf(ctx, "PC(ICE+DTLS+SRTP) done, start read video packets")
+		}
+
+		buf := make([]byte, 1500)
+		for ctx.Err() == nil {
+			if _, _, err := sVideoSender.Read(buf); err != nil {
+				return
+			}
+		}
+	}()
+
+	wg.Add(1)
+	go func() {
+		defer wg.Done()
+
+		if sVideoTrack == nil {
+			return
+		}
+
+		select {
+		case <-ctx.Done():
+		case <-pcDone.Done():
+			logger.Tf(ctx, "PC(ICE+DTLS+SRTP) done, start ingest video %v", sourceVideo)
+		}
+
+		for ctx.Err() == nil {
+			if err := readVideoTrackFromDisk(ctx, sourceVideo, sVideoSender, fps, sVideoTrack); err != nil {
+				if errors.Cause(err) == io.EOF {
+					logger.Tf(ctx, "EOF, restart ingest video %v", sourceVideo)
+					continue
+				}
+				logger.Wf(ctx, "Ignore video err %+v", err)
+			}
+		}
+	}()
+
+	wg.Add(1)
+	go func() {
+		defer wg.Done()
+
+		for {
+			select {
+			case <-ctx.Done():
+				return
+			case <-time.After(5 * time.Second):
+				StatRTC.PeerConnection = pc.GetStats()
+			}
+		}
+	}()
+
+	wg.Wait()
+	return nil
+}
+
+func readAudioTrackFromDisk(ctx context.Context, source string, sender *webrtc.RTPSender, track *rtc.TrackLocalStaticSample) error {
+	f, err := os.Open(source)
+	if err != nil {
+		return errors.Wrapf(err, "Open file %v", source)
+	}
+	defer f.Close()
+
+	ogg, _, err := oggreader.NewWith(f)
+	if err != nil {
+		return errors.Wrapf(err, "Open ogg %v", source)
+	}
+
+	enc := sender.GetParameters().Encodings[0]
+	codec := sender.GetParameters().Codecs[0]
+	headers := sender.GetParameters().HeaderExtensions
+	logger.Tf(ctx, "Audio %v, tbn=%v, channels=%v, ssrc=%v, pt=%v, header=%v",
+		codec.MimeType, codec.ClockRate, codec.Channels, enc.SSRC, codec.PayloadType, headers)
+
+	// Whether should encode the audio-level in RTP header.
+	var audioLevel *webrtc.RTPHeaderExtensionParameter
+	for _, h := range headers {
+		if h.URI == sdp.AudioLevelURI {
+			audioLevel = &h
+		}
+	}
+
+	clock := newWallClock()
+	var lastGranule uint64
+
+	for ctx.Err() == nil {
+		pageData, pageHeader, err := ogg.ParseNextPage()
+		if err == io.EOF {
+			return nil
+		}
+		if err != nil {
+			return errors.Wrapf(err, "Read ogg")
+		}
+
+		// The amount of samples is the difference between the last and current timestamp
+		sampleCount := uint64(pageHeader.GranulePosition - lastGranule)
+		lastGranule = pageHeader.GranulePosition
+		sampleDuration := time.Duration(uint64(time.Millisecond) * 1000 * sampleCount / uint64(codec.ClockRate))
+
+		// For audio-level, set the extensions if negotiated.
+		track.OnBeforeWritePacket = func(p *rtp.Packet) {
+			if audioLevel != nil {
+				if b, err := new(rtp.AudioLevelExtension).Marshal(); err == nil {
+					p.SetExtension(uint8(audioLevel.ID), b)
+				}
+			}
+		}
+
+		if err = track.WriteSample(media.Sample{Data: pageData, Duration: sampleDuration}); err != nil {
+			return errors.Wrapf(err, "Write sample")
+		}
+
+		if d := clock.Tick(sampleDuration); d > 0 {
+			time.Sleep(d)
+		}
+	}
+
+	return nil
+}
+
+func readVideoTrackFromDisk(ctx context.Context, source string, sender *webrtc.RTPSender, fps int, track *rtc.TrackLocalStaticSample) error {
+	f, err := os.Open(source)
+	if err != nil {
+		return errors.Wrapf(err, "Open file %v", source)
+	}
+	defer f.Close()
+
+	// TODO: FIXME: Support ivf for vp8.
+	h264, err := h264reader.NewReader(f)
+	if err != nil {
+		return errors.Wrapf(err, "Open h264 %v", source)
+	}
+
+	enc := sender.GetParameters().Encodings[0]
+	codec := sender.GetParameters().Codecs[0]
+	headers := sender.GetParameters().HeaderExtensions
+	logger.Tf(ctx, "Video %v, tbn=%v, fps=%v, ssrc=%v, pt=%v, header=%v",
+		codec.MimeType, codec.ClockRate, fps, enc.SSRC, codec.PayloadType, headers)
+
+	clock := newWallClock()
+	sampleDuration := time.Duration(uint64(time.Millisecond) * 1000 / uint64(fps))
+	for ctx.Err() == nil {
+		var sps, pps *h264reader.NAL
+		var oFrames []*h264reader.NAL
+		for ctx.Err() == nil {
+			frame, err := h264.NextNAL()
+			if err == io.EOF {
+				return nil
+			}
+			if err != nil {
+				return errors.Wrapf(err, "Read h264")
+			}
+
+			oFrames = append(oFrames, frame)
+			logger.If(ctx, "NALU %v PictureOrderCount=%v, ForbiddenZeroBit=%v, RefIdc=%v, %v bytes",
+				frame.UnitType.String(), frame.PictureOrderCount, frame.ForbiddenZeroBit, frame.RefIdc, len(frame.Data))
+
+			if frame.UnitType == h264reader.NalUnitTypeSPS {
+				sps = frame
+			} else if frame.UnitType == h264reader.NalUnitTypePPS {
+				pps = frame
+			} else {
+				break
+			}
+		}
+
+		var frames []*h264reader.NAL
+		// Package SPS/PPS to STAP-A
+		if sps != nil && pps != nil {
+			stapA := packageAsSTAPA(sps, pps)
+			frames = append(frames, stapA)
+		}
+		// Append other original frames.
+		for _, frame := range oFrames {
+			if frame.UnitType != h264reader.NalUnitTypeSPS && frame.UnitType != h264reader.NalUnitTypePPS {
+				frames = append(frames, frame)
+			}
+		}
+
+		// Covert frames to sample(buffers).
+		for i, frame := range frames {
+			sample := media.Sample{Data: frame.Data, Duration: sampleDuration}
+			// Use the sample timestamp for frames.
+			if i != len(frames)-1 {
+				sample.Duration = 0
+			}
+
+			// For STAP-A, set marker to false, to make Chrome happy.
+			track.OnBeforeWritePacket = func(p *rtp.Packet) {
+				if i < len(frames)-1 {
+					p.Header.Marker = false
+				}
+			}
+
+			if err = track.WriteSample(sample); err != nil {
+				return errors.Wrapf(err, "Write sample")
+			}
+		}
+
+		if d := clock.Tick(sampleDuration); d > 0 {
+			time.Sleep(d)
+		}
+	}
+
+	return nil
+}
diff --git a/trunk/3rdparty/srs-bench/srs/rtc_test.go b/trunk/3rdparty/srs-bench/srs/rtc_test.go
new file mode 100644
index 000000000..da7d89949
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/srs/rtc_test.go
@@ -0,0 +1,449 @@
+package srs
+
+import (
+	"context"
+	"encoding/json"
+	"flag"
+	"fmt"
+	"github.com/ossrs/go-oryx-lib/errors"
+	"github.com/ossrs/go-oryx-lib/logger"
+	"github.com/ossrs/srs-bench/rtc"
+	"github.com/pion/rtcp"
+	"github.com/pion/webrtc/v3"
+	"io"
+	"io/ioutil"
+	"net/http"
+	"os"
+	"strings"
+	"sync"
+	"testing"
+	"time"
+)
+
+var srsSchema = "http"
+var srsHttps = flag.Bool("srs-https", false, "Whther connect to HTTPS-API")
+var srsServer = flag.String("srs-server", "127.0.0.1", "The RTC server to connect to")
+var srsStream = flag.String("srs-stream", "/rtc/regression", "The RTC stream to play")
+var srsLog = flag.Bool("srs-log", false, "Whether enable the detail log")
+var srsTimeout = flag.Int("srs-timeout", 3000, "For each case, the timeout in ms")
+var srsPlayPLI = flag.Int("srs-play-pli", 5000, "The PLI interval in seconds for player.")
+var srsPlayOKPackets = flag.Int("srs-play-ok-packets", 10, "If got N packets, it's ok, or fail")
+var srsPublishAudio = flag.String("srs-publish-audio", "avatar.ogg", "The audio file for publisher.")
+var srsPublishVideo = flag.String("srs-publish-video", "avatar.h264", "The video file for publisher.")
+var srsPublishVideoFps = flag.Int("srs-publish-video-fps", 25, "The video fps for publisher.")
+
+func TestMain(m *testing.M) {
+	// Should parse it first.
+	flag.Parse()
+
+	// The stream should starts with /, for example, /rtc/regression
+	if strings.HasPrefix(*srsStream, "/") {
+		*srsStream = "/" + *srsStream
+	}
+
+	// Generate srs protocol from whether use HTTPS.
+	if *srsHttps {
+		srsSchema = "https"
+	}
+
+	// Disable the logger during all tests.
+	logger.Tf(nil, "sys log %v", *srsLog)
+
+	if *srsLog == false {
+		olw := logger.Switch(ioutil.Discard)
+		defer func() {
+			logger.Switch(olw)
+		}()
+	}
+
+	// Run tests.
+	os.Exit(m.Run())
+}
+
+func TestRTCServerVersion(t *testing.T) {
+	api := fmt.Sprintf("http://%v:1985/api/v1/versions", *srsServer)
+	req, err := http.NewRequest("POST", api, nil)
+	if err != nil {
+		t.Errorf("Request %v", api)
+		return
+	}
+
+	res, err := http.DefaultClient.Do(req)
+	if err != nil {
+		t.Errorf("Do request %v", api)
+		return
+	}
+
+	b, err := ioutil.ReadAll(res.Body)
+	if err != nil {
+		t.Errorf("Read body of %v", api)
+		return
+	}
+
+	obj := struct {
+		Code   int    `json:"code"`
+		Server string `json:"server"`
+		Data   struct {
+			Major    int    `json:"major"`
+			Minor    int    `json:"minor"`
+			Revision int    `json:"revision"`
+			Version  string `json:"version"`
+		} `json:"data"`
+	}{}
+	if err := json.Unmarshal(b, &obj); err != nil {
+		t.Errorf("Parse %v", string(b))
+		return
+	}
+	if obj.Code != 0 {
+		t.Errorf("Server err code=%v, server=%v", obj.Code, obj.Server)
+		return
+	}
+	if obj.Data.Major == 0 && obj.Data.Minor == 0 {
+		t.Errorf("Invalid version %v", obj.Data)
+		return
+	}
+}
+
+func TestRTCServerPublishPlay(t *testing.T) {
+	ctx := logger.WithContext(context.Background())
+	ctx, cancel := context.WithCancel(ctx)
+
+	r := fmt.Sprintf("%v://%v%v", srsSchema, *srsServer, *srsStream)
+	publishReady, publishReadyCancel := context.WithCancel(context.Background())
+
+	startPlay := func(ctx context.Context) error {
+		logger.Tf(ctx, "Start play url=%v", r)
+
+		pc, err := webrtc.NewPeerConnection(webrtc.Configuration{})
+		if err != nil {
+			return errors.Wrapf(err, "Create PC")
+		}
+		defer pc.Close()
+
+		pc.AddTransceiverFromKind(webrtc.RTPCodecTypeAudio, webrtc.RTPTransceiverInit{
+			Direction: webrtc.RTPTransceiverDirectionRecvonly,
+		})
+		pc.AddTransceiverFromKind(webrtc.RTPCodecTypeVideo, webrtc.RTPTransceiverInit{
+			Direction: webrtc.RTPTransceiverDirectionRecvonly,
+		})
+
+		offer, err := pc.CreateOffer(nil)
+		if err != nil {
+			return errors.Wrapf(err, "Create Offer")
+		}
+
+		if err := pc.SetLocalDescription(offer); err != nil {
+			return errors.Wrapf(err, "Set offer %v", offer)
+		}
+
+		answer, err := apiRtcRequest(ctx, "/rtc/v1/play", r, offer.SDP)
+		if err != nil {
+			return errors.Wrapf(err, "Api request offer=%v", offer.SDP)
+		}
+
+		if err := pc.SetRemoteDescription(webrtc.SessionDescription{
+			Type: webrtc.SDPTypeAnswer, SDP: answer,
+		}); err != nil {
+			return errors.Wrapf(err, "Set answer %v", answer)
+		}
+
+		handleTrack := func(ctx context.Context, track *webrtc.TrackRemote, receiver *webrtc.RTPReceiver) error {
+			// Send a PLI on an interval so that the publisher is pushing a keyframe
+			go func() {
+				if track.Kind() == webrtc.RTPCodecTypeAudio {
+					return
+				}
+
+				for {
+					select {
+					case <-ctx.Done():
+						return
+					case <-time.After(time.Duration(*srsPlayPLI) * time.Millisecond):
+						_ = pc.WriteRTCP([]rtcp.Packet{&rtcp.PictureLossIndication{
+							MediaSSRC: uint32(track.SSRC()),
+						}})
+					}
+				}
+			}()
+
+			// Try to read packets of track.
+			for i := 0; i < *srsPlayOKPackets && ctx.Err() == nil; i++ {
+				_, _, err := track.ReadRTP()
+				if err != nil {
+					return errors.Wrapf(err, "Read RTP")
+				}
+			}
+
+			// Completed.
+			cancel()
+
+			return nil
+		}
+
+		pc.OnTrack(func(track *webrtc.TrackRemote, receiver *webrtc.RTPReceiver) {
+			err = handleTrack(ctx, track, receiver)
+			if err != nil {
+				codec := track.Codec()
+				err = errors.Wrapf(err, "Handle  track %v, pt=%v", codec.MimeType, codec.PayloadType)
+				cancel()
+			}
+		})
+
+		pc.OnICEConnectionStateChange(func(state webrtc.ICEConnectionState) {
+			if state == webrtc.ICEConnectionStateFailed || state == webrtc.ICEConnectionStateClosed {
+				err = errors.Errorf("Close for ICE state %v", state)
+				cancel()
+			}
+		})
+
+		<-ctx.Done()
+		return err
+	}
+
+	startPublish := func(ctx context.Context) error {
+		sourceVideo := *srsPublishVideo
+		sourceAudio := *srsPublishAudio
+		fps := *srsPublishVideoFps
+
+		logger.Tf(ctx, "Start publish url=%v, audio=%v, video=%v, fps=%v",
+			r, sourceAudio, sourceVideo, fps)
+
+		pc, err := webrtc.NewPeerConnection(webrtc.Configuration{})
+		if err != nil {
+			return errors.Wrapf(err, "Create PC")
+		}
+		defer pc.Close()
+
+		var sVideoTrack *rtc.TrackLocalStaticSample
+		var sVideoSender *webrtc.RTPSender
+		if sourceVideo != "" {
+			mimeType, trackID := "video/H264", "video"
+			if strings.HasSuffix(sourceVideo, ".ivf") {
+				mimeType = "video/VP8"
+			}
+
+			sVideoTrack, err = rtc.NewTrackLocalStaticSample(
+				webrtc.RTPCodecCapability{MimeType: mimeType, ClockRate: 90000}, trackID, "pion",
+			)
+			if err != nil {
+				return errors.Wrapf(err, "Create video track")
+			}
+
+			sVideoSender, err = pc.AddTrack(sVideoTrack)
+			if err != nil {
+				return errors.Wrapf(err, "Add video track")
+			}
+			sVideoSender.Stop()
+		}
+
+		var sAudioTrack *rtc.TrackLocalStaticSample
+		var sAudioSender *webrtc.RTPSender
+		if sourceAudio != "" {
+			mimeType, trackID := "audio/opus", "audio"
+			sAudioTrack, err = rtc.NewTrackLocalStaticSample(
+				webrtc.RTPCodecCapability{MimeType: mimeType, ClockRate: 48000, Channels: 2}, trackID, "pion",
+			)
+			if err != nil {
+				return errors.Wrapf(err, "Create audio track")
+			}
+
+			sAudioSender, err = pc.AddTrack(sAudioTrack)
+			if err != nil {
+				return errors.Wrapf(err, "Add audio track")
+			}
+			defer sAudioSender.Stop()
+		}
+
+		offer, err := pc.CreateOffer(nil)
+		if err != nil {
+			return errors.Wrapf(err, "Create Offer")
+		}
+
+		if err := pc.SetLocalDescription(offer); err != nil {
+			return errors.Wrapf(err, "Set offer %v", offer)
+		}
+
+		answer, err := apiRtcRequest(ctx, "/rtc/v1/publish", r, offer.SDP)
+		if err != nil {
+			return errors.Wrapf(err, "Api request offer=%v", offer.SDP)
+		}
+
+		if err := pc.SetRemoteDescription(webrtc.SessionDescription{
+			Type: webrtc.SDPTypeAnswer, SDP: answer,
+		}); err != nil {
+			return errors.Wrapf(err, "Set answer %v", answer)
+		}
+
+		logger.Tf(ctx, "State signaling=%v, ice=%v, conn=%v", pc.SignalingState(), pc.ICEConnectionState(), pc.ConnectionState())
+
+		ctx, cancel := context.WithCancel(ctx)
+		pcDone, pcDoneCancel := context.WithCancel(context.Background())
+		pc.OnConnectionStateChange(func(state webrtc.PeerConnectionState) {
+			logger.Tf(ctx, "PC state %v", state)
+
+			if state == webrtc.PeerConnectionStateConnected {
+				pcDoneCancel()
+				publishReadyCancel()
+			}
+
+			if state == webrtc.PeerConnectionStateFailed || state == webrtc.PeerConnectionStateClosed {
+				err = errors.Errorf("Close for PC state %v", state)
+				cancel()
+			}
+		})
+
+		// Wait for event from context or tracks.
+		var wg sync.WaitGroup
+
+		wg.Add(1)
+		go func() {
+			defer wg.Done()
+
+			if sAudioSender == nil {
+				return
+			}
+
+			select {
+			case <-ctx.Done():
+			case <-pcDone.Done():
+			}
+
+			buf := make([]byte, 1500)
+			for ctx.Err() == nil {
+				if _, _, err := sAudioSender.Read(buf); err != nil {
+					return
+				}
+			}
+		}()
+
+		wg.Add(1)
+		go func() {
+			defer wg.Done()
+
+			if sAudioTrack == nil {
+				return
+			}
+
+			select {
+			case <-ctx.Done():
+			case <-pcDone.Done():
+			}
+
+			for ctx.Err() == nil {
+				if err := readAudioTrackFromDisk(ctx, sourceAudio, sAudioSender, sAudioTrack); err != nil {
+					if errors.Cause(err) == io.EOF {
+						logger.Tf(ctx, "EOF, restart ingest audio %v", sourceAudio)
+						continue
+					}
+					logger.Wf(ctx, "Ignore audio err %+v", err)
+				}
+			}
+		}()
+
+		wg.Add(1)
+		go func() {
+			defer wg.Done()
+
+			if sVideoSender == nil {
+				return
+			}
+
+			select {
+			case <-ctx.Done():
+			case <-pcDone.Done():
+				logger.Tf(ctx, "PC(ICE+DTLS+SRTP) done, start read video packets")
+			}
+
+			buf := make([]byte, 1500)
+			for ctx.Err() == nil {
+				if _, _, err := sVideoSender.Read(buf); err != nil {
+					return
+				}
+			}
+		}()
+
+		wg.Add(1)
+		go func() {
+			defer wg.Done()
+
+			if sVideoTrack == nil {
+				return
+			}
+
+			select {
+			case <-ctx.Done():
+			case <-pcDone.Done():
+				logger.Tf(ctx, "PC(ICE+DTLS+SRTP) done, start ingest video %v", sourceVideo)
+			}
+
+			for ctx.Err() == nil {
+				if err := readVideoTrackFromDisk(ctx, sourceVideo, sVideoSender, fps, sVideoTrack); err != nil {
+					if errors.Cause(err) == io.EOF {
+						logger.Tf(ctx, "EOF, restart ingest video %v", sourceVideo)
+						continue
+					}
+					logger.Wf(ctx, "Ignore video err %+v", err)
+				}
+			}
+		}()
+
+		wg.Wait()
+		return err
+	}
+
+	var wg sync.WaitGroup
+	errs := make(chan error, 0)
+
+	wg.Add(1)
+	go func() {
+		defer wg.Done()
+
+		// Wait for publisher to start first.
+		select {
+		case <-ctx.Done():
+			return
+		case <-publishReady.Done():
+		}
+
+		errs <- startPlay(logger.WithContext(ctx))
+		cancel()
+	}()
+
+	wg.Add(1)
+	go func() {
+		defer wg.Done()
+
+		errs <- startPublish(logger.WithContext(ctx))
+		cancel()
+	}()
+
+	wg.Add(1)
+	go func() {
+		defer wg.Done()
+
+		select {
+		case <-ctx.Done():
+		case <-time.After(time.Duration(*srsTimeout) * time.Millisecond):
+			errs <- errors.Errorf("timeout for %vms", *srsTimeout)
+			cancel()
+		}
+	}()
+
+	testDone, testDoneCancel := context.WithCancel(context.Background())
+	go func() {
+		wg.Wait()
+		testDoneCancel()
+	}()
+
+	// Handle errs, the test result.
+	for {
+		select {
+		case <-testDone.Done():
+			return
+		case err := <-errs:
+			if err != nil && err != context.Canceled && !t.Failed() {
+				t.Errorf("err %+v", err)
+			}
+		}
+	}
+}
diff --git a/trunk/3rdparty/srs-bench/srs/stat.go b/trunk/3rdparty/srs-bench/srs/stat.go
new file mode 100644
index 000000000..35cbe3737
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/srs/stat.go
@@ -0,0 +1,47 @@
+package srs
+
+import (
+	"context"
+	"encoding/json"
+	"github.com/ossrs/go-oryx-lib/logger"
+	"net/http"
+	"strings"
+)
+
+type statRTC struct {
+	Publishers struct {
+		Expect int `json:"expect"`
+		Alive  int `json:"alive"`
+	} `json:"publishers"`
+	Subscribers struct {
+		Expect int `json:"expect"`
+		Alive  int `json:"alive"`
+	} `json:"subscribers"`
+	PeerConnection interface{} `json:"random-pc"`
+}
+
+var StatRTC statRTC
+
+func HandleStat(ctx context.Context, mux *http.ServeMux, l string) {
+	if strings.HasPrefix(l, ":") {
+		l = "127.0.0.1" + l
+	}
+
+	logger.Tf(ctx, "Handle http://%v/api/v1/sb/rtc", l)
+	mux.HandleFunc("/api/v1/sb/rtc", func(w http.ResponseWriter, r *http.Request) {
+		res := &struct {
+			Code int         `json:"code"`
+			Data interface{} `json:"data"`
+		}{
+			0, &StatRTC,
+		}
+
+		b, err := json.Marshal(res)
+		if err != nil {
+			logger.Wf(ctx, "marshal %v err %+v", res, err)
+			return
+		}
+
+		w.Write(b)
+	})
+}
diff --git a/trunk/3rdparty/srs-bench/srs/util.go b/trunk/3rdparty/srs-bench/srs/util.go
new file mode 100644
index 000000000..4e6b2f783
--- /dev/null
+++ b/trunk/3rdparty/srs-bench/srs/util.go
@@ -0,0 +1,142 @@
+package srs
+
+import (
+	"bytes"
+	"context"
+	"encoding/json"
+	"fmt"
+	"github.com/ossrs/go-oryx-lib/errors"
+	"github.com/ossrs/go-oryx-lib/logger"
+	"github.com/pion/webrtc/v3/pkg/media/h264reader"
+	"io/ioutil"
+	"net/http"
+	"net/url"
+	"strings"
+	"time"
+)
+
+func apiRtcRequest(ctx context.Context, apiPath, r, offer string) (string, error) {
+	u, err := url.Parse(r)
+	if err != nil {
+		return "", errors.Wrapf(err, "Parse url %v", r)
+	}
+
+	// Build api url.
+	host := u.Host
+	if !strings.Contains(host, ":") {
+		host += ":1985"
+	}
+
+	api := fmt.Sprintf("http://%v", host)
+	if !strings.HasPrefix(apiPath, "/") {
+		api += "/"
+	}
+	api += apiPath
+
+	if !strings.HasSuffix(apiPath, "/") {
+		api += "/"
+	}
+	if u.RawQuery != "" {
+		api += "?" + u.RawQuery
+	}
+
+	// Build JSON body.
+	reqBody := struct {
+		Api       string `json:"api"`
+		ClientIP  string `json:"clientip"`
+		SDP       string `json:"sdp"`
+		StreamURL string `json:"streamurl"`
+	}{
+		api, "", offer, r,
+	}
+
+	b, err := json.Marshal(reqBody)
+	if err != nil {
+		return "", errors.Wrapf(err, "Marshal body %v", reqBody)
+	}
+	logger.If(ctx, "Request url api=%v with %v", api, string(b))
+	logger.Tf(ctx, "Request url api=%v with %v bytes", api, len(b))
+
+	req, err := http.NewRequest("POST", api, strings.NewReader(string(b)))
+	if err != nil {
+		return "", errors.Wrapf(err, "HTTP request %v", string(b))
+	}
+
+	res, err := http.DefaultClient.Do(req.WithContext(ctx))
+	if err != nil {
+		return "", errors.Wrapf(err, "Do HTTP request %v", string(b))
+	}
+
+	b2, err := ioutil.ReadAll(res.Body)
+	if err != nil {
+		return "", errors.Wrapf(err, "Read response for %v", string(b))
+	}
+	logger.If(ctx, "Response from %v is %v", api, string(b2))
+	logger.Tf(ctx, "Response from %v is %v bytes", api, len(b2))
+
+	resBody := struct {
+		Code    int    `json:"code"`
+		Session string `json:"sessionid"`
+		SDP     string `json:"sdp"`
+	}{}
+	if err := json.Unmarshal(b2, &resBody); err != nil {
+		return "", errors.Wrapf(err, "Marshal %v", string(b2))
+	}
+
+	if resBody.Code != 0 {
+		return "", errors.Errorf("Server fail code=%v %v", resBody.Code, string(b2))
+	}
+	logger.If(ctx, "Parse response to code=%v, session=%v, sdp=%v",
+		resBody.Code, resBody.Session, escapeSDP(resBody.SDP))
+	logger.Tf(ctx, "Parse response to code=%v, session=%v, sdp=%v bytes",
+		resBody.Code, resBody.Session, len(resBody.SDP))
+
+	return string(resBody.SDP), nil
+}
+
+func escapeSDP(sdp string) string {
+	return strings.ReplaceAll(strings.ReplaceAll(sdp, "\r", "\\r"), "\n", "\\n")
+}
+
+func packageAsSTAPA(frames ...*h264reader.NAL) *h264reader.NAL {
+	first := frames[0]
+
+	buf := bytes.Buffer{}
+	buf.WriteByte(
+		byte(first.RefIdc<<5)&0x60 | byte(24), // STAP-A
+	)
+
+	for _, frame := range frames {
+		buf.WriteByte(byte(len(frame.Data) >> 8))
+		buf.WriteByte(byte(len(frame.Data)))
+		buf.Write(frame.Data)
+	}
+
+	return &h264reader.NAL{
+		PictureOrderCount: first.PictureOrderCount,
+		ForbiddenZeroBit:  false,
+		RefIdc:            first.RefIdc,
+		UnitType:          h264reader.NalUnitType(24), // STAP-A
+		Data:              buf.Bytes(),
+	}
+}
+
+type wallClock struct {
+	start    time.Time
+	duration time.Duration
+}
+
+func newWallClock() *wallClock {
+	return &wallClock{start: time.Now()}
+}
+
+func (v *wallClock) Tick(d time.Duration) time.Duration {
+	v.duration += d
+
+	wc := time.Now().Sub(v.start)
+	re := v.duration - wc
+	if re > 30*time.Millisecond {
+		return re
+	}
+	return 0
+}
diff --git a/trunk/conf/regression-test.conf b/trunk/conf/regression-test.conf
index fcb348f12..bd732952e 100644
--- a/trunk/conf/regression-test.conf
+++ b/trunk/conf/regression-test.conf
@@ -2,6 +2,7 @@
 listen              1935;
 max_connections     1000;
 daemon              on;
+disable_daemon_for_docker off;
 srs_log_tank        file;
 
 http_server {